# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 03.10.2020 16:53:21.263 Process: id = "1" image_name = "powershell.exe" filename = "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x7f134c20" os_pid = "0xeb4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x5bc" cmd_line = "\"C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\" -File \"C:\\Users\\EEBsYm5\\Desktop\\pay.ps1\" " cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xeb8 [0065.719] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0065.979] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0065.979] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0065.979] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0065.979] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0066.750] GetVersionExW (in: lpVersionInformation=0x390398*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x390398*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0066.750] GetLastError () returned 0x2 [0066.752] GetVersionExW (in: lpVersionInformation=0x390398*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x390398*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0066.752] GetLastError () returned 0x2 [0066.761] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e49c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0066.761] GetLastError () returned 0x2 [0066.770] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0066.770] GetLastError () returned 0x2 [0066.770] GetVersionExW (in: lpVersionInformation=0x390398*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x390398*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0066.770] GetLastError () returned 0x2 [0066.772] SetErrorMode (uMode=0x1) returned 0x1 [0066.774] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x10e938 | out: lpFileInformation=0x10e938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380b82d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x380b82d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x331cb500, ftLastWriteTime.dwHighDateTime=0x1cb887d, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0066.774] GetLastError () returned 0x2 [0066.774] SetErrorMode (uMode=0x1) returned 0x1 [0066.778] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x10e9bc | out: lpdwHandle=0x10e9bc) returned 0x94c [0066.779] GetLastError () returned 0x0 [0066.782] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x1d94d60 | out: lpData=0x1d94d60) returned 1 [0066.786] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x10e988, puLen=0x10e984 | out: lplpBuffer=0x10e988*=0x1d94dfc, puLen=0x10e984) returned 1 [0066.789] lstrlenW (lpString="䅁") returned 1 [0066.802] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x1d94ed8, puLen=0x10e900) returned 1 [0066.802] lstrlenW (lpString="Microsoft Corporation") returned 21 [0066.805] lstrcpyW (in: lpString1=0x390380, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0066.805] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x1d94f2c, puLen=0x10e900) returned 1 [0066.805] lstrlenW (lpString="System.Management.Automation") returned 28 [0066.805] lstrcpyW (in: lpString1=0x390380, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0066.805] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x1d94f88, puLen=0x10e900) returned 1 [0066.805] lstrlenW (lpString="6.1.7601.17514") returned 14 [0066.805] lstrcpyW (in: lpString1=0x390380, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0066.806] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x1d94fc8, puLen=0x10e900) returned 1 [0066.806] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0066.806] lstrcpyW (in: lpString1=0x390380, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0066.806] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x1d95030, puLen=0x10e900) returned 1 [0066.806] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0066.806] lstrcpyW (in: lpString1=0x390380, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0066.806] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x1d950cc, puLen=0x10e900) returned 1 [0066.806] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0066.806] lstrcpyW (in: lpString1=0x390380, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0066.806] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x1d95130, puLen=0x10e900) returned 1 [0066.806] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0066.806] lstrcpyW (in: lpString1=0x390380, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0066.806] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x1d951ac, puLen=0x10e900) returned 1 [0066.807] lstrlenW (lpString="6.1.7601.17514") returned 14 [0066.807] lstrcpyW (in: lpString1=0x390380, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0066.807] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x1d94e54, puLen=0x10e900) returned 1 [0066.807] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0066.807] lstrcpyW (in: lpString1=0x390380, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0066.807] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x0, puLen=0x10e900) returned 0 [0066.807] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x0, puLen=0x10e900) returned 0 [0066.807] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x10e904, puLen=0x10e900 | out: lplpBuffer=0x10e904*=0x0, puLen=0x10e900) returned 0 [0066.807] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x10e8f8, puLen=0x10e8f4 | out: lplpBuffer=0x10e8f8*=0x1d94dfc, puLen=0x10e8f4) returned 1 [0066.810] VerLanguageNameW (in: wLang=0x0, szLang=0x390380, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0066.811] VerQueryValueW (in: pBlock=0x1d94d60, lpSubBlock="\\", lplpBuffer=0x10e90c, puLen=0x10e908 | out: lplpBuffer=0x10e90c*=0x1d94d88, puLen=0x10e908) returned 1 [0066.820] GetCurrentProcessId () returned 0xeb4 [0066.833] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x10e144 | out: lpLuid=0x10e144*(LowPart=0x14, HighPart=0)) returned 1 [0066.835] GetLastError () returned 0x0 [0066.838] GetCurrentProcess () returned 0xffffffff [0066.838] GetLastError () returned 0x0 [0066.841] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x10e140 | out: TokenHandle=0x10e140*=0x2ec) returned 1 [0066.841] GetLastError () returned 0x0 [0066.844] AdjustTokenPrivileges (in: TokenHandle=0x2ec, DisableAllPrivileges=0, NewState=0x1d978a0*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0066.844] GetLastError () returned 0x0 [0066.847] CloseHandle (hObject=0x2ec) returned 1 [0066.847] GetLastError () returned 0x0 [0066.854] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeb4) returned 0x2ec [0066.854] GetLastError () returned 0x0 [0066.871] EnumProcessModules (in: hProcess=0x2ec, lphModule=0x1d978e4, cb=0x100, lpcbNeeded=0x10e934 | out: lphModule=0x1d978e4, lpcbNeeded=0x10e934) returned 1 [0066.873] GetLastError () returned 0x0 [0066.876] GetModuleInformation (in: hProcess=0x2ec, hModule=0x22200000, lpmodinfo=0x1d97a24, cb=0xc | out: lpmodinfo=0x1d97a24*(lpBaseOfDll=0x22200000, SizeOfImage=0x72000, EntryPoint=0x22207363)) returned 1 [0066.876] GetLastError () returned 0x0 [0066.880] GetModuleBaseNameW (in: hProcess=0x2ec, hModule=0x22200000, lpBaseName=0x360ab0, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0066.880] GetLastError () returned 0x0 [0066.882] GetModuleFileNameExW (in: hProcess=0x2ec, hModule=0x22200000, lpFilename=0x360ab0, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0066.882] GetLastError () returned 0x0 [0066.883] CloseHandle (hObject=0x2ec) returned 1 [0066.883] GetLastError () returned 0x0 [0066.884] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xeb4) returned 0x2ec [0066.884] GetLastError () returned 0x0 [0066.888] GetExitCodeProcess (in: hProcess=0x2ec, lpExitCode=0x1d96ed4 | out: lpExitCode=0x1d96ed4*=0x103) returned 1 [0066.888] GetLastError () returned 0x0 [0066.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d95278, Length=0x20000, ResultLength=0x10e97c | out: SystemInformation=0x2d95278, ResultLength=0x10e97c*=0xe168) returned 0x0 [0066.928] EnumWindows (lpEnumFunc=0x1d53612, lParam=0x0) returned 0 [0066.931] GetWindowThreadProcessId (in: hWnd=0x30120, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x270 [0066.931] GetLastError () returned 0x0 [0066.931] GetWindowThreadProcessId (in: hWnd=0x30092, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.931] GetLastError () returned 0x0 [0066.932] GetWindowThreadProcessId (in: hWnd=0x300ce, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.932] GetLastError () returned 0x0 [0066.932] GetWindowThreadProcessId (in: hWnd=0x400a0, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.932] GetLastError () returned 0x0 [0066.945] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x724 [0066.945] GetLastError () returned 0x0 [0066.945] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.945] GetLastError () returned 0x0 [0066.945] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x3fc [0066.945] GetLastError () returned 0x0 [0066.945] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x3fc [0066.945] GetLastError () returned 0x0 [0066.946] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.946] GetLastError () returned 0x0 [0066.946] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.946] GetLastError () returned 0x0 [0066.947] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.947] GetLastError () returned 0x0 [0066.947] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.947] GetLastError () returned 0x0 [0066.947] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.947] GetLastError () returned 0x0 [0066.947] GetWindowThreadProcessId (in: hWnd=0x1006c, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.947] GetLastError () returned 0x0 [0066.947] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.948] GetLastError () returned 0x0 [0066.948] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.948] GetLastError () returned 0x0 [0066.948] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.948] GetLastError () returned 0x0 [0066.948] GetWindowThreadProcessId (in: hWnd=0x100da, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x5c0 [0066.948] GetLastError () returned 0x0 [0066.948] GetWindowThreadProcessId (in: hWnd=0x50084, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.948] GetLastError () returned 0x0 [0066.948] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0x60c [0066.948] GetLastError () returned 0x0 [0066.949] GetWindowThreadProcessId (in: hWnd=0x50100, lpdwProcessId=0x10e5d0 | out: lpdwProcessId=0x10e5d0) returned 0xeb8 [0066.949] GetLastError () returned 0x0 [0066.951] GetWindow (hWnd=0x50100, uCmd=0x4) returned 0x0 [0066.954] IsWindowVisible (hWnd=0x50100) returned 1 [0066.954] GetLastError () returned 0x0 [0066.956] WerSetFlags () returned 0x0 [0066.966] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0066.970] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x10e9ac, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x10e9a8 | out: pulNumLanguages=0x10e9ac, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x10e9a8) returned 1 [0066.970] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x10e9ac, pwszLanguagesBuffer=0x1db4624, pcchLanguagesBuffer=0x10e9a8 | out: pulNumLanguages=0x10e9ac, pwszLanguagesBuffer=0x1db4624, pcchLanguagesBuffer=0x10e9a8) returned 1 [0066.976] GetUserDefaultLocaleName (in: lpLocaleName=0x390380, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0067.007] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.007] GetLastError () returned 0xcb [0067.011] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.011] GetLastError () returned 0xcb [0067.014] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.014] GetLastError () returned 0xcb [0067.029] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.029] GetLastError () returned 0xcb [0067.029] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e438, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.029] GetLastError () returned 0xcb [0067.029] SetErrorMode (uMode=0x1) returned 0x1 [0067.029] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x10e8b8 | out: lpFileInformation=0x10e8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380b82d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x380b82d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x331cb500, ftLastWriteTime.dwHighDateTime=0x1cb887d, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0067.029] GetLastError () returned 0xcb [0067.029] SetErrorMode (uMode=0x1) returned 0x1 [0067.030] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x10e93c | out: lpdwHandle=0x10e93c) returned 0x94c [0067.031] GetLastError () returned 0x0 [0067.031] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x1db6b54 | out: lpData=0x1db6b54) returned 1 [0067.032] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x10e908, puLen=0x10e904 | out: lplpBuffer=0x10e908*=0x1db6bf0, puLen=0x10e904) returned 1 [0067.032] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x1db6ccc, puLen=0x10e880) returned 1 [0067.032] lstrlenW (lpString="Microsoft Corporation") returned 21 [0067.032] lstrcpyW (in: lpString1=0x390380, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0067.032] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x1db6d20, puLen=0x10e880) returned 1 [0067.032] lstrlenW (lpString="System.Management.Automation") returned 28 [0067.033] lstrcpyW (in: lpString1=0x390380, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0067.033] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x1db6d7c, puLen=0x10e880) returned 1 [0067.033] lstrlenW (lpString="6.1.7601.17514") returned 14 [0067.033] lstrcpyW (in: lpString1=0x390380, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0067.033] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x1db6dbc, puLen=0x10e880) returned 1 [0067.033] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0067.033] lstrcpyW (in: lpString1=0x390380, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0067.033] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x1db6e24, puLen=0x10e880) returned 1 [0067.033] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0067.033] lstrcpyW (in: lpString1=0x390380, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0067.033] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x1db6ec0, puLen=0x10e880) returned 1 [0067.033] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0067.033] lstrcpyW (in: lpString1=0x390380, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0067.033] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x1db6f24, puLen=0x10e880) returned 1 [0067.034] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0067.034] lstrcpyW (in: lpString1=0x390380, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0067.034] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x1db6fa0, puLen=0x10e880) returned 1 [0067.034] lstrlenW (lpString="6.1.7601.17514") returned 14 [0067.034] lstrcpyW (in: lpString1=0x390380, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0067.034] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x1db6c48, puLen=0x10e880) returned 1 [0067.034] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0067.034] lstrcpyW (in: lpString1=0x390380, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0067.034] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x0, puLen=0x10e880) returned 0 [0067.034] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x0, puLen=0x10e880) returned 0 [0067.034] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x10e884, puLen=0x10e880 | out: lplpBuffer=0x10e884*=0x0, puLen=0x10e880) returned 0 [0067.034] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x10e878, puLen=0x10e874 | out: lplpBuffer=0x10e878*=0x1db6bf0, puLen=0x10e874) returned 1 [0067.034] VerLanguageNameW (in: wLang=0x0, szLang=0x390380, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0067.035] VerQueryValueW (in: pBlock=0x1db6b54, lpSubBlock="\\", lplpBuffer=0x10e88c, puLen=0x10e888 | out: lplpBuffer=0x10e88c*=0x1db6b7c, puLen=0x10e888) returned 1 [0067.047] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.047] GetLastError () returned 0xcb [0067.052] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.052] GetLastError () returned 0xcb [0067.059] lstrlenW (lpString="䅁") returned 1 [0067.064] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e850 | out: phkResult=0x10e850*=0x304) returned 0x0 [0067.064] RegOpenKeyExW (in: hKey=0x304, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e854 | out: phkResult=0x10e854*=0x308) returned 0x0 [0067.064] RegOpenKeyExW (in: hKey=0x308, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e888 | out: phkResult=0x10e888*=0x30c) returned 0x0 [0067.067] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e8c8, lpData=0x0, lpcbData=0x10e8c4*=0x0 | out: lpType=0x10e8c8*=0x1, lpData=0x0, lpcbData=0x10e8c4*=0x56) returned 0x0 [0067.070] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e8c8, lpData=0x390380, lpcbData=0x10e8c4*=0x56 | out: lpType=0x10e8c8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e8c4*=0x56) returned 0x0 [0067.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.075] GetLastError () returned 0x0 [0067.079] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.079] GetLastError () returned 0x0 [0067.088] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.088] GetLastError () returned 0x0 [0067.108] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.108] GetLastError () returned 0xcb [0067.475] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0067.475] GetLastError () returned 0x2 [0067.475] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0067.475] GetLastError () returned 0x2 [0067.592] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.592] GetLastError () returned 0xcb [0067.593] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.593] GetLastError () returned 0xcb [0067.630] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.630] GetLastError () returned 0xcb [0067.631] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.631] GetLastError () returned 0xcb [0067.631] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.631] GetLastError () returned 0xcb [0067.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0067.864] GetLastError () returned 0x0 [0067.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0067.864] GetLastError () returned 0x0 [0067.892] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.892] GetLastError () returned 0xcb [0067.894] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.894] GetLastError () returned 0xcb [0067.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.980] GetLastError () returned 0x7e [0067.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.980] GetLastError () returned 0x7e [0068.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0068.694] GetLastError () returned 0x2 [0068.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0068.694] GetLastError () returned 0x2 [0068.992] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0068.992] GetLastError () returned 0x57 [0068.992] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0068.992] GetLastError () returned 0x57 [0069.235] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0069.235] GetLastError () returned 0x2 [0069.236] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0069.236] GetLastError () returned 0x2 [0069.594] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0069.594] GetLastError () returned 0x2 [0069.594] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x10e390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0069.594] GetLastError () returned 0x2 [0069.669] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0069.669] GetLastError () returned 0xcb [0069.671] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e458, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.671] GetLastError () returned 0xcb [0069.671] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e408, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.671] GetLastError () returned 0xcb [0069.672] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e408, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.672] GetLastError () returned 0xcb [0069.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e408, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0069.685] GetLastError () returned 0xcb [0069.783] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x10e39c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0069.783] GetLastError () returned 0x2 [0069.783] SetErrorMode (uMode=0x1) returned 0x1 [0069.783] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x10e844 | out: lpFileInformation=0x10e844*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0069.783] GetLastError () returned 0x2 [0069.783] SetErrorMode (uMode=0x1) returned 0x1 [0070.100] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e458, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.100] GetLastError () returned 0x0 [0070.100] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e408, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.100] GetLastError () returned 0x0 [0070.101] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e408, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.101] GetLastError () returned 0x0 [0070.106] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.106] GetLastError () returned 0xcb [0070.111] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.111] GetLastError () returned 0xcb [0070.111] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.111] GetLastError () returned 0xcb [0070.114] CoCreateGuid (in: pguid=0x10e924 | out: pguid=0x10e924*(Data1=0xb8d83fbf, Data2=0xf881, Data3=0x4fc9, Data4=([0]=0x94, [1]=0x3c, [2]=0x68, [3]=0x60, [4]=0xea, [5]=0x99, [6]=0x3e, [7]=0x49))) returned 0x0 [0070.120] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.120] GetLastError () returned 0xcb [0070.124] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.124] GetLastError () returned 0xcb [0070.127] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.127] GetLastError () returned 0xcb [0070.137] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0070.138] GetLastError () returned 0x0 [0070.141] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x10e804 | out: lpConsoleScreenBufferInfo=0x10e804) returned 1 [0070.142] GetLastError () returned 0x0 [0070.147] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0070.148] GetLastError () returned 0x0 [0070.148] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0x10e804 | out: lpConsoleScreenBufferInfo=0x10e804) returned 1 [0070.148] GetLastError () returned 0x0 [0070.149] GetVersionExW (in: lpVersionInformation=0x390398*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x390398*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0070.149] GetLastError () returned 0x0 [0070.152] GetCurrentProcess () returned 0xffffffff [0070.152] GetLastError () returned 0x3f0 [0070.154] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x10e814 | out: TokenHandle=0x10e814*=0x328) returned 1 [0070.154] GetLastError () returned 0x3f0 [0070.159] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x10e86c | out: TokenInformation=0x0, ReturnLength=0x10e86c) returned 0 [0070.159] GetLastError () returned 0x7a [0070.160] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x37c420 [0070.161] GetLastError () returned 0x7a [0070.161] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x37c420, TokenInformationLength=0x4, ReturnLength=0x10e86c | out: TokenInformation=0x37c420, ReturnLength=0x10e86c) returned 1 [0070.161] GetLastError () returned 0x7a [0070.166] DuplicateTokenEx (in: hExistingToken=0x328, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x10e824 | out: phNewToken=0x10e824*=0x320) returned 1 [0070.166] GetLastError () returned 0x7f [0070.166] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x10e86c | out: TokenInformation=0x0, ReturnLength=0x10e86c) returned 0 [0070.166] GetLastError () returned 0x7a [0070.166] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x37c400 [0070.166] GetLastError () returned 0x7a [0070.167] GetTokenInformation (in: TokenHandle=0x328, TokenInformationClass=0x8, TokenInformation=0x37c400, TokenInformationLength=0x4, ReturnLength=0x10e86c | out: TokenInformation=0x37c400, ReturnLength=0x10e86c) returned 1 [0070.167] GetLastError () returned 0x7a [0070.168] CheckTokenMembership (in: TokenHandle=0x320, SidToCheck=0x1e399c0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x10e800 | out: IsMember=0x10e800) returned 1 [0070.168] GetLastError () returned 0x7a [0070.168] CloseHandle (hObject=0x320) returned 1 [0070.168] GetLastError () returned 0x7a [0070.168] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e314, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.168] GetLastError () returned 0x7a [0070.168] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.169] GetLastError () returned 0x7a [0070.169] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.169] GetLastError () returned 0x7a [0070.169] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.169] GetLastError () returned 0x7a [0070.237] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e314, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.237] GetLastError () returned 0x7a [0070.237] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.237] GetLastError () returned 0x7a [0070.238] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.238] GetLastError () returned 0x7a [0070.244] GetConsoleTitleW (in: lpConsoleTitle=0x360ab0, nSize=0x400 | out: lpConsoleTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 0x39 [0070.245] GetLastError () returned 0x7a [0070.276] GetConsoleTitleW (in: lpConsoleTitle=0x360ab0, nSize=0x400 | out: lpConsoleTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 0x39 [0070.276] GetLastError () returned 0x7a [0070.276] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e30c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.276] GetLastError () returned 0x7a [0070.276] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.277] GetLastError () returned 0x7a [0070.277] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.277] GetLastError () returned 0x7a [0070.282] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 1 [0070.285] GetLastError () returned 0x7a [0070.286] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.286] GetLastError () returned 0x7a [0070.286] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.287] GetLastError () returned 0x7a [0070.287] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.287] GetLastError () returned 0x7a [0070.287] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.287] GetLastError () returned 0x7a [0070.361] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.361] GetLastError () returned 0x7a [0070.361] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.362] GetLastError () returned 0x7a [0070.362] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.362] GetLastError () returned 0x7a [0070.362] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.362] GetLastError () returned 0x7a [0070.362] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.362] GetLastError () returned 0x7a [0070.362] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.362] GetLastError () returned 0x7a [0070.363] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e358, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.363] GetLastError () returned 0x7a [0070.363] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e308, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.363] GetLastError () returned 0x7a [0070.363] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e308, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.363] GetLastError () returned 0x7a [0070.363] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e308, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0070.363] GetLastError () returned 0x7a [0070.487] SetConsoleCtrlHandler (HandlerRoutine=0x1d5384a, Add=1) returned 1 [0070.487] GetLastError () returned 0x7a [0070.498] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", nBufferLength=0x105, lpBuffer=0x10e278, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", lpFilePart=0x0) returned 0x20 [0070.498] GetLastError () returned 0x7a [0070.498] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", nBufferLength=0x105, lpBuffer=0x10e264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", lpFilePart=0x0) returned 0x20 [0070.498] GetLastError () returned 0x7a [0070.499] SetErrorMode (uMode=0x1) returned 0x1 [0070.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\pay.ps1"), fInfoLevelId=0x0, lpFileInformation=0x10e6e4 | out: lpFileInformation=0x10e6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0456600, ftCreationTime.dwHighDateTime=0x1d699a5, ftLastAccessTime.dwLowDateTime=0xb0456600, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xb4708400, ftLastWriteTime.dwHighDateTime=0x1d699a3, nFileSizeHigh=0x0, nFileSizeLow=0xe1941)) returned 1 [0070.499] GetLastError () returned 0x7a [0070.499] SetErrorMode (uMode=0x1) returned 0x1 [0070.517] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x320 [0070.517] GetLastError () returned 0x0 [0070.518] CoCreateGuid (in: pguid=0x10e838 | out: pguid=0x10e838*(Data1=0x171c0487, Data2=0xdfcc, Data3=0x49e0, Data4=([0]=0xbc, [1]=0x74, [2]=0x88, [3]=0x68, [4]=0x18, [5]=0x7f, [6]=0x31, [7]=0xde))) returned 0x0 [0070.547] WinSqmIsOptedIn () returned 0x0 [0070.549] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.549] GetLastError () returned 0xcb [0070.558] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.558] GetLastError () returned 0xcb [0070.559] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.559] GetLastError () returned 0xcb [0070.563] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.563] GetLastError () returned 0xcb [0070.565] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.565] GetLastError () returned 0xcb [0070.579] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.579] GetLastError () returned 0xcb [0070.580] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.580] GetLastError () returned 0xcb [0070.581] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.581] GetLastError () returned 0xcb [0070.585] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.585] GetLastError () returned 0xcb [0070.608] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.608] GetLastError () returned 0xcb [0070.613] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.613] GetLastError () returned 0xcb [0070.614] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0070.614] GetLastError () returned 0xcb [0070.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.983] GetLastError () returned 0xcb [0070.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.983] GetLastError () returned 0xcb [0070.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.983] GetLastError () returned 0xcb [0070.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0070.983] GetLastError () returned 0xcb [0071.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.114] GetLastError () returned 0x3 [0071.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.114] GetLastError () returned 0x3 [0071.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.114] GetLastError () returned 0x3 [0071.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.115] GetLastError () returned 0x3 [0071.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.115] GetLastError () returned 0x3 [0071.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.115] GetLastError () returned 0x3 [0071.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.115] GetLastError () returned 0x3 [0071.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.115] GetLastError () returned 0x3 [0071.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.115] GetLastError () returned 0x3 [0071.116] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.116] GetLastError () returned 0x3 [0071.116] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.116] GetLastError () returned 0x3 [0071.116] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0071.116] GetLastError () returned 0x3 [0071.120] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33 [0071.120] GetLastError () returned 0x3 [0071.122] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x390380, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0071.122] GetLastError () returned 0x3 [0071.122] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e650 | out: phkResult=0x10e650*=0x32c) returned 0x0 [0071.122] RegQueryValueExW (in: hKey=0x32c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x10e694, lpData=0x0, lpcbData=0x10e690*=0x0 | out: lpType=0x10e694*=0x2, lpData=0x0, lpcbData=0x10e690*=0x6c) returned 0x0 [0071.122] RegQueryValueExW (in: hKey=0x32c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x10e694, lpData=0x390380, lpcbData=0x10e690*=0x6c | out: lpType=0x10e694*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0x10e690*=0x6c) returned 0x0 [0071.123] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x390380, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb [0071.123] GetLastError () returned 0x3 [0071.123] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x390380, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0071.123] GetLastError () returned 0x3 [0071.124] RegCloseKey (hKey=0x32c) returned 0x0 [0071.124] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x390380, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0071.124] GetLastError () returned 0x3 [0071.124] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e650 | out: phkResult=0x10e650*=0x32c) returned 0x0 [0071.124] RegQueryValueExW (in: hKey=0x32c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x10e694, lpData=0x0, lpcbData=0x10e690*=0x0 | out: lpType=0x10e694*=0x0, lpData=0x0, lpcbData=0x10e690*=0x0) returned 0x2 [0071.125] RegCloseKey (hKey=0x32c) returned 0x0 [0071.151] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x390380 | out: pszPath="C:\\Users\\EEBsYm5\\Documents") returned 0x0 [0071.153] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents", nBufferLength=0x105, lpBuffer=0x10e1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents", lpFilePart=0x0) returned 0x1a [0071.153] GetLastError () returned 0x3f0 [0071.156] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 1 [0071.156] GetLastError () returned 0x3f0 [0071.171] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.171] GetLastError () returned 0xcb [0071.172] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.172] GetLastError () returned 0xcb [0071.179] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.179] GetLastError () returned 0xcb [0071.179] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.179] GetLastError () returned 0xcb [0071.189] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e5d0 | out: phkResult=0x10e5d0*=0x334) returned 0x0 [0071.189] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x10e638, lpData=0x0, lpcbData=0x10e634*=0x0 | out: lpType=0x10e638*=0x1, lpData=0x0, lpcbData=0x10e634*=0x74) returned 0x0 [0071.191] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x10e618, lpData=0x0, lpcbData=0x10e614*=0x0 | out: lpType=0x10e618*=0x1, lpData=0x0, lpcbData=0x10e614*=0x74) returned 0x0 [0071.191] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x10e618, lpData=0x390380, lpcbData=0x10e614*=0x74 | out: lpType=0x10e618*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x10e614*=0x74) returned 0x0 [0071.192] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x10e198, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0071.192] GetLastError () returned 0xcb [0071.192] SetErrorMode (uMode=0x1) returned 0x1 [0071.192] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x10e618 | out: lpFileInformation=0x10e618*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f50ebe, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11e5af50, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x11e5af50, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0071.192] GetLastError () returned 0xcb [0071.192] SetErrorMode (uMode=0x1) returned 0x1 [0071.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e18c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0071.199] GetLastError () returned 0xcb [0071.199] SetErrorMode (uMode=0x1) returned 0x1 [0071.200] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e60c | out: lpFileInformation=0x10e60c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0058e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0058e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd7bbaefc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0071.200] GetLastError () returned 0xcb [0071.200] SetErrorMode (uMode=0x1) returned 0x1 [0071.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e18c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.206] GetLastError () returned 0xcb [0071.206] SetErrorMode (uMode=0x1) returned 0x1 [0071.206] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e60c | out: lpFileInformation=0x10e60c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c2d31c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0xd7c2d31c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0xd7c5347c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0071.206] GetLastError () returned 0xcb [0071.206] SetErrorMode (uMode=0x1) returned 0x1 [0071.221] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.221] GetLastError () returned 0xcb [0071.224] GetACP () returned 0x4e4 [0071.238] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e01c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0071.238] GetLastError () returned 0x0 [0071.238] SetErrorMode (uMode=0x1) returned 0x1 [0071.241] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x338 [0071.242] GetLastError () returned 0x0 [0071.243] GetFileType (hFile=0x338) returned 0x1 [0071.244] SetErrorMode (uMode=0x1) returned 0x1 [0071.244] GetFileType (hFile=0x338) returned 0x1 [0071.248] ReadFile (in: hFile=0x338, lpBuffer=0x1e99d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1e99d28*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.250] GetLastError () returned 0x0 [0071.251] ReadFile (in: hFile=0x338, lpBuffer=0x1e99d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1e99d28*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.251] GetLastError () returned 0x0 [0071.252] ReadFile (in: hFile=0x338, lpBuffer=0x1e99d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1e99d28*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.252] GetLastError () returned 0x0 [0071.253] ReadFile (in: hFile=0x338, lpBuffer=0x1e99d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1e99d28*, lpNumberOfBytesRead=0x10e584*=0xcf3, lpOverlapped=0x0) returned 1 [0071.253] GetLastError () returned 0x0 [0071.253] ReadFile (in: hFile=0x338, lpBuffer=0x1e991bb, nNumberOfBytesToRead=0x30d, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1e991bb*, lpNumberOfBytesRead=0x10e584*=0x0, lpOverlapped=0x0) returned 1 [0071.253] GetLastError () returned 0x0 [0071.253] ReadFile (in: hFile=0x338, lpBuffer=0x1e99d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1e99d28*, lpNumberOfBytesRead=0x10e584*=0x0, lpOverlapped=0x0) returned 1 [0071.253] GetLastError () returned 0x0 [0071.256] CloseHandle (hObject=0x338) returned 1 [0071.256] GetLastError () returned 0x0 [0071.258] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0071.258] GetLastError () returned 0x0 [0071.258] SetErrorMode (uMode=0x1) returned 0x1 [0071.258] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1eab09c | out: lpFileInformation=0x1eab09c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0058e2, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0058e2, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd7bbaefc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0071.258] GetLastError () returned 0x0 [0071.258] SetErrorMode (uMode=0x1) returned 0x1 [0071.259] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0071.259] GetLastError () returned 0x0 [0071.259] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e508 | out: phkResult=0x10e508*=0x338) returned 0x0 [0071.259] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e550, lpData=0x0, lpcbData=0x10e54c*=0x0 | out: lpType=0x10e550*=0x1, lpData=0x0, lpcbData=0x10e54c*=0x56) returned 0x0 [0071.260] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e550, lpData=0x390380, lpcbData=0x10e54c*=0x56 | out: lpType=0x10e550*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e54c*=0x56) returned 0x0 [0071.260] RegCloseKey (hKey=0x338) returned 0x0 [0071.260] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0071.261] GetLastError () returned 0x0 [0071.261] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e044, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0071.261] GetLastError () returned 0x0 [0071.345] GetSystemInfo (in: lpSystemInfo=0x10dc88 | out: lpSystemInfo=0x10dc88*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0071.347] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.388] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e01c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.388] GetLastError () returned 0x0 [0071.388] SetErrorMode (uMode=0x1) returned 0x1 [0071.388] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x338 [0071.389] GetLastError () returned 0x0 [0071.389] GetFileType (hFile=0x338) returned 0x1 [0071.389] SetErrorMode (uMode=0x1) returned 0x1 [0071.389] GetFileType (hFile=0x338) returned 0x1 [0071.389] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.391] GetLastError () returned 0x0 [0071.392] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.392] GetLastError () returned 0x0 [0071.392] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.392] GetLastError () returned 0x0 [0071.393] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.393] GetLastError () returned 0x0 [0071.393] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.394] GetLastError () returned 0x0 [0071.396] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.396] GetLastError () returned 0x0 [0071.396] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.396] GetLastError () returned 0x0 [0071.396] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.396] GetLastError () returned 0x0 [0071.396] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.396] GetLastError () returned 0x0 [0071.399] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.399] GetLastError () returned 0x0 [0071.399] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.400] GetLastError () returned 0x0 [0071.400] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.400] GetLastError () returned 0x0 [0071.400] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.401] GetLastError () returned 0x0 [0071.401] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.401] GetLastError () returned 0x0 [0071.401] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.402] GetLastError () returned 0x0 [0071.402] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.402] GetLastError () returned 0x0 [0071.402] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.402] GetLastError () returned 0x0 [0071.407] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.407] GetLastError () returned 0x0 [0071.408] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.408] GetLastError () returned 0x0 [0071.408] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.408] GetLastError () returned 0x0 [0071.408] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.409] GetLastError () returned 0x0 [0071.409] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.409] GetLastError () returned 0x0 [0071.421] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.421] GetLastError () returned 0x0 [0071.421] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.421] GetLastError () returned 0x0 [0071.421] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.422] GetLastError () returned 0x0 [0071.422] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.422] GetLastError () returned 0x0 [0071.422] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.422] GetLastError () returned 0x0 [0071.423] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.423] GetLastError () returned 0x0 [0071.423] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.423] GetLastError () returned 0x0 [0071.423] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.423] GetLastError () returned 0x0 [0071.424] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.424] GetLastError () returned 0x0 [0071.424] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.424] GetLastError () returned 0x0 [0071.424] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.424] GetLastError () returned 0x0 [0071.433] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.433] GetLastError () returned 0x0 [0071.433] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.433] GetLastError () returned 0x0 [0071.434] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.434] GetLastError () returned 0x0 [0071.434] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.434] GetLastError () returned 0x0 [0071.434] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.434] GetLastError () returned 0x0 [0071.435] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.435] GetLastError () returned 0x0 [0071.435] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.435] GetLastError () returned 0x0 [0071.436] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1000, lpOverlapped=0x0) returned 1 [0071.436] GetLastError () returned 0x0 [0071.436] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x1b4, lpOverlapped=0x0) returned 1 [0071.436] GetLastError () returned 0x0 [0071.436] ReadFile (in: hFile=0x338, lpBuffer=0x1edf4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e584, lpOverlapped=0x0 | out: lpBuffer=0x1edf4ac*, lpNumberOfBytesRead=0x10e584*=0x0, lpOverlapped=0x0) returned 1 [0071.436] GetLastError () returned 0x0 [0071.436] CloseHandle (hObject=0x338) returned 1 [0071.436] GetLastError () returned 0x0 [0071.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.437] GetLastError () returned 0x0 [0071.437] SetErrorMode (uMode=0x1) returned 0x1 [0071.437] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x1effd3c | out: lpFileInformation=0x1effd3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c2d31c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0xd7c2d31c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0xd7c5347c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0071.437] GetLastError () returned 0x0 [0071.437] SetErrorMode (uMode=0x1) returned 0x1 [0071.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.437] GetLastError () returned 0x0 [0071.437] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e508 | out: phkResult=0x10e508*=0x338) returned 0x0 [0071.437] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e550, lpData=0x0, lpcbData=0x10e54c*=0x0 | out: lpType=0x10e550*=0x1, lpData=0x0, lpcbData=0x10e54c*=0x56) returned 0x0 [0071.438] RegQueryValueExW (in: hKey=0x338, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e550, lpData=0x390380, lpcbData=0x10e54c*=0x56 | out: lpType=0x10e550*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e54c*=0x56) returned 0x0 [0071.438] RegCloseKey (hKey=0x338) returned 0x0 [0071.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.438] GetLastError () returned 0x0 [0071.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x10e044, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0071.438] GetLastError () returned 0x0 [0071.698] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.719] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.723] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.723] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.723] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.724] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.726] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.733] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.762] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.762] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.762] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.763] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.764] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.764] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.765] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.765] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.776] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.789] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.790] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.792] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.793] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.795] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.797] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.797] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.798] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.800] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.800] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.801] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.801] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.802] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.806] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.812] VirtualQuery (in: lpAddress=0x10d448, lpBuffer=0x10e448, dwLength=0x1c | out: lpBuffer=0x10e448*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.812] VirtualQuery (in: lpAddress=0x10d448, lpBuffer=0x10e448, dwLength=0x1c | out: lpBuffer=0x10e448*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.813] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.816] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.872] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.873] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.874] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.900] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.900] GetLastError () returned 0xcb [0071.907] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.925] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.925] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.926] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.926] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.929] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.929] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.934] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.938] VirtualQuery (in: lpAddress=0x10d444, lpBuffer=0x10e444, dwLength=0x1c | out: lpBuffer=0x10e444*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0071.956] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e5cc | out: phkResult=0x10e5cc*=0x334) returned 0x0 [0071.957] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x10e634, lpData=0x0, lpcbData=0x10e630*=0x0 | out: lpType=0x10e634*=0x1, lpData=0x0, lpcbData=0x10e630*=0x74) returned 0x0 [0071.957] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x10e614, lpData=0x0, lpcbData=0x10e610*=0x0 | out: lpType=0x10e614*=0x1, lpData=0x0, lpcbData=0x10e610*=0x74) returned 0x0 [0071.957] RegQueryValueExW (in: hKey=0x334, lpValueName="path", lpReserved=0x0, lpType=0x10e614, lpData=0x390380, lpcbData=0x10e610*=0x74 | out: lpType=0x10e614*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x10e610*=0x74) returned 0x0 [0071.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x10e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0071.957] GetLastError () returned 0xcb [0071.957] SetErrorMode (uMode=0x1) returned 0x1 [0071.958] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x10e614 | out: lpFileInformation=0x10e614*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f50ebe, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11e5af50, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x11e5af50, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0071.958] GetLastError () returned 0xcb [0071.958] SetErrorMode (uMode=0x1) returned 0x1 [0071.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.965] GetLastError () returned 0xcb [0071.965] SetErrorMode (uMode=0x1) returned 0x1 [0071.965] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e608 | out: lpFileInformation=0x10e608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0071.965] GetLastError () returned 0xcb [0071.965] SetErrorMode (uMode=0x1) returned 0x1 [0071.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0071.965] GetLastError () returned 0xcb [0071.965] SetErrorMode (uMode=0x1) returned 0x1 [0071.965] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e608 | out: lpFileInformation=0x10e608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0071.966] GetLastError () returned 0xcb [0071.966] SetErrorMode (uMode=0x1) returned 0x1 [0071.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.966] GetLastError () returned 0xcb [0071.966] SetErrorMode (uMode=0x1) returned 0x1 [0071.966] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e608 | out: lpFileInformation=0x10e608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0071.966] GetLastError () returned 0xcb [0071.966] SetErrorMode (uMode=0x1) returned 0x1 [0071.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.966] GetLastError () returned 0xcb [0071.966] SetErrorMode (uMode=0x1) returned 0x1 [0071.966] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e608 | out: lpFileInformation=0x10e608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0071.966] GetLastError () returned 0xcb [0071.966] SetErrorMode (uMode=0x1) returned 0x1 [0071.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0071.967] GetLastError () returned 0xcb [0071.967] SetErrorMode (uMode=0x1) returned 0x1 [0071.967] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e608 | out: lpFileInformation=0x10e608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0071.967] GetLastError () returned 0xcb [0071.967] SetErrorMode (uMode=0x1) returned 0x1 [0071.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0071.967] GetLastError () returned 0xcb [0071.967] SetErrorMode (uMode=0x1) returned 0x1 [0071.967] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e608 | out: lpFileInformation=0x10e608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0071.967] GetLastError () returned 0xcb [0071.967] SetErrorMode (uMode=0x1) returned 0x1 [0071.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0071.967] GetLastError () returned 0xcb [0071.967] SetErrorMode (uMode=0x1) returned 0x1 [0071.968] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e608 | out: lpFileInformation=0x10e608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a182698, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a182698, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd368cf9c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0071.968] GetLastError () returned 0xcb [0071.968] SetErrorMode (uMode=0x1) returned 0x1 [0071.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0071.968] GetLastError () returned 0xcb [0071.968] SetErrorMode (uMode=0x1) returned 0x1 [0071.968] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e608 | out: lpFileInformation=0x10e608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1a87f7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1a87f7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd36b30fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0071.968] GetLastError () returned 0xcb [0071.968] SetErrorMode (uMode=0x1) returned 0x1 [0071.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0071.968] GetLastError () returned 0xcb [0071.968] SetErrorMode (uMode=0x1) returned 0x1 [0071.968] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x10e608 | out: lpFileInformation=0x10e608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ce956, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1ce956, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd372551c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0071.969] GetLastError () returned 0xcb [0071.969] SetErrorMode (uMode=0x1) returned 0x1 [0071.972] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.972] GetLastError () returned 0xcb [0071.990] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.990] GetLastError () returned 0xcb [0071.991] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.991] GetLastError () returned 0xcb [0071.993] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0071.993] GetLastError () returned 0xcb [0071.994] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df1c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0071.994] GetLastError () returned 0xcb [0071.994] SetErrorMode (uMode=0x1) returned 0x1 [0071.994] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0071.994] GetLastError () returned 0x0 [0071.994] GetFileType (hFile=0x304) returned 0x1 [0071.994] SetErrorMode (uMode=0x1) returned 0x1 [0071.995] GetFileType (hFile=0x304) returned 0x1 [0071.995] ReadFile (in: hFile=0x304, lpBuffer=0x219e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x219e548*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0071.997] GetLastError () returned 0x0 [0071.998] ReadFile (in: hFile=0x304, lpBuffer=0x219e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x219e548*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0071.998] GetLastError () returned 0x0 [0071.999] ReadFile (in: hFile=0x304, lpBuffer=0x219e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x219e548*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0071.999] GetLastError () returned 0x0 [0071.999] ReadFile (in: hFile=0x304, lpBuffer=0x219e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x219e548*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0071.999] GetLastError () returned 0x0 [0072.000] ReadFile (in: hFile=0x304, lpBuffer=0x219e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x219e548*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.000] GetLastError () returned 0x0 [0072.000] ReadFile (in: hFile=0x304, lpBuffer=0x219e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x219e548*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.000] GetLastError () returned 0x0 [0072.000] ReadFile (in: hFile=0x304, lpBuffer=0x219e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x219e548*, lpNumberOfBytesRead=0x10e484*=0x9e2, lpOverlapped=0x0) returned 1 [0072.000] GetLastError () returned 0x0 [0072.000] ReadFile (in: hFile=0x304, lpBuffer=0x219daca, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x219daca*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.000] GetLastError () returned 0x0 [0072.001] ReadFile (in: hFile=0x304, lpBuffer=0x219e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x219e548*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.001] GetLastError () returned 0x0 [0072.001] CloseHandle (hObject=0x304) returned 1 [0072.001] GetLastError () returned 0x0 [0072.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.001] GetLastError () returned 0x0 [0072.001] SetErrorMode (uMode=0x1) returned 0x1 [0072.001] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x21af604 | out: lpFileInformation=0x21af604*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0072.001] GetLastError () returned 0x0 [0072.001] SetErrorMode (uMode=0x1) returned 0x1 [0072.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.001] GetLastError () returned 0x0 [0072.002] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e408 | out: phkResult=0x10e408*=0x304) returned 0x0 [0072.003] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x0, lpcbData=0x10e44c*=0x0 | out: lpType=0x10e450*=0x1, lpData=0x0, lpcbData=0x10e44c*=0x56) returned 0x0 [0072.003] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x390380, lpcbData=0x10e44c*=0x56 | out: lpType=0x10e450*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e44c*=0x56) returned 0x0 [0072.003] RegCloseKey (hKey=0x304) returned 0x0 [0072.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.003] GetLastError () returned 0x0 [0072.003] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.003] GetLastError () returned 0x0 [0072.024] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xb8c675ea, Data2=0x2ec4, Data3=0x4aa5, Data4=([0]=0xbb, [1]=0x78, [2]=0x8d, [3]=0x47, [4]=0xb0, [5]=0xeb, [6]=0xd5, [7]=0x6c))) returned 0x0 [0072.048] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x192adef1, Data2=0xaced, Data3=0x4b04, Data4=([0]=0xa1, [1]=0x12, [2]=0x86, [3]=0xe9, [4]=0xf2, [5]=0x86, [6]=0x5, [7]=0x8e))) returned 0x0 [0072.051] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df1c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0072.051] GetLastError () returned 0x0 [0072.051] SetErrorMode (uMode=0x1) returned 0x1 [0072.051] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.051] GetLastError () returned 0x0 [0072.051] GetFileType (hFile=0x304) returned 0x1 [0072.052] SetErrorMode (uMode=0x1) returned 0x1 [0072.052] GetFileType (hFile=0x304) returned 0x1 [0072.052] ReadFile (in: hFile=0x304, lpBuffer=0x21c28ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21c28ec*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.054] GetLastError () returned 0x0 [0072.055] ReadFile (in: hFile=0x304, lpBuffer=0x21c28ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21c28ec*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.055] GetLastError () returned 0x0 [0072.055] ReadFile (in: hFile=0x304, lpBuffer=0x21c28ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21c28ec*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.056] GetLastError () returned 0x0 [0072.057] ReadFile (in: hFile=0x304, lpBuffer=0x21c28ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21c28ec*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.057] GetLastError () returned 0x0 [0072.057] ReadFile (in: hFile=0x304, lpBuffer=0x21c28ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21c28ec*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.057] GetLastError () returned 0x0 [0072.059] ReadFile (in: hFile=0x304, lpBuffer=0x21c28ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21c28ec*, lpNumberOfBytesRead=0x10e484*=0xfb2, lpOverlapped=0x0) returned 1 [0072.059] GetLastError () returned 0x0 [0072.059] ReadFile (in: hFile=0x304, lpBuffer=0x21c203e, nNumberOfBytesToRead=0x4e, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21c203e*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.059] GetLastError () returned 0x0 [0072.059] ReadFile (in: hFile=0x304, lpBuffer=0x21c28ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21c28ec*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.059] GetLastError () returned 0x0 [0072.059] CloseHandle (hObject=0x304) returned 1 [0072.060] GetLastError () returned 0x0 [0072.060] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0072.060] GetLastError () returned 0x0 [0072.060] SetErrorMode (uMode=0x1) returned 0x1 [0072.060] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x21e317c | out: lpFileInformation=0x21e317c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0072.060] GetLastError () returned 0x0 [0072.060] SetErrorMode (uMode=0x1) returned 0x1 [0072.060] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0072.060] GetLastError () returned 0x0 [0072.060] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e408 | out: phkResult=0x10e408*=0x304) returned 0x0 [0072.060] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x0, lpcbData=0x10e44c*=0x0 | out: lpType=0x10e450*=0x1, lpData=0x0, lpcbData=0x10e44c*=0x56) returned 0x0 [0072.060] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x390380, lpcbData=0x10e44c*=0x56 | out: lpType=0x10e450*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e44c*=0x56) returned 0x0 [0072.061] RegCloseKey (hKey=0x304) returned 0x0 [0072.061] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0072.061] GetLastError () returned 0x0 [0072.061] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0072.061] GetLastError () returned 0x0 [0072.064] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x9ded117a, Data2=0xcd02, Data3=0x461c, Data4=([0]=0x93, [1]=0x27, [2]=0x55, [3]=0xcb, [4]=0xed, [5]=0xe1, [6]=0x37, [7]=0xf))) returned 0x0 [0072.083] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x311c919, Data2=0x59a9, Data3=0x4c4d, Data4=([0]=0xa1, [1]=0xaf, [2]=0xc9, [3]=0x20, [4]=0xdf, [5]=0xb1, [6]=0xfe, [7]=0xee))) returned 0x0 [0072.087] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xeadc25cb, Data2=0xdfeb, Data3=0x4a95, Data4=([0]=0x97, [1]=0x5a, [2]=0x2, [3]=0x5a, [4]=0xa9, [5]=0xab, [6]=0xae, [7]=0x54))) returned 0x0 [0072.087] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x839f3641, Data2=0x3d1e, Data3=0x46d6, Data4=([0]=0xa9, [1]=0xd9, [2]=0xb7, [3]=0xa7, [4]=0xbb, [5]=0xdd, [6]=0x9a, [7]=0xb6))) returned 0x0 [0072.087] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xf543934f, Data2=0x87c3, Data3=0x4ebe, Data4=([0]=0x88, [1]=0x4d, [2]=0x5f, [3]=0x0, [4]=0x63, [5]=0x67, [6]=0x28, [7]=0x8b))) returned 0x0 [0072.088] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x8ba5f9c3, Data2=0x27ad, Data3=0x4ee3, Data4=([0]=0xb1, [1]=0xa9, [2]=0x37, [3]=0x4b, [4]=0x98, [5]=0x6a, [6]=0x57, [7]=0x27))) returned 0x0 [0072.088] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df1c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.088] GetLastError () returned 0x0 [0072.088] SetErrorMode (uMode=0x1) returned 0x1 [0072.088] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.088] GetLastError () returned 0x0 [0072.089] GetFileType (hFile=0x304) returned 0x1 [0072.089] SetErrorMode (uMode=0x1) returned 0x1 [0072.089] GetFileType (hFile=0x304) returned 0x1 [0072.090] ReadFile (in: hFile=0x304, lpBuffer=0x2202b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2202b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.092] GetLastError () returned 0x0 [0072.092] ReadFile (in: hFile=0x304, lpBuffer=0x2202b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2202b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.093] GetLastError () returned 0x0 [0072.094] ReadFile (in: hFile=0x304, lpBuffer=0x2202b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2202b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.094] GetLastError () returned 0x0 [0072.094] ReadFile (in: hFile=0x304, lpBuffer=0x2202b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2202b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.094] GetLastError () returned 0x0 [0072.095] ReadFile (in: hFile=0x304, lpBuffer=0x2202b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2202b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.096] GetLastError () returned 0x0 [0072.096] ReadFile (in: hFile=0x304, lpBuffer=0x2202b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2202b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.096] GetLastError () returned 0x0 [0072.096] ReadFile (in: hFile=0x304, lpBuffer=0x2202b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2202b24*, lpNumberOfBytesRead=0x10e484*=0xaca, lpOverlapped=0x0) returned 1 [0072.096] GetLastError () returned 0x0 [0072.096] ReadFile (in: hFile=0x304, lpBuffer=0x220218e, nNumberOfBytesToRead=0x136, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x220218e*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.096] GetLastError () returned 0x0 [0072.096] ReadFile (in: hFile=0x304, lpBuffer=0x2202b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2202b24*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.096] GetLastError () returned 0x0 [0072.097] CloseHandle (hObject=0x304) returned 1 [0072.097] GetLastError () returned 0x0 [0072.097] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.097] GetLastError () returned 0x0 [0072.097] SetErrorMode (uMode=0x1) returned 0x1 [0072.097] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2223b20 | out: lpFileInformation=0x2223b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0072.097] GetLastError () returned 0x0 [0072.097] SetErrorMode (uMode=0x1) returned 0x1 [0072.097] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.097] GetLastError () returned 0x0 [0072.098] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e408 | out: phkResult=0x10e408*=0x304) returned 0x0 [0072.098] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x0, lpcbData=0x10e44c*=0x0 | out: lpType=0x10e450*=0x1, lpData=0x0, lpcbData=0x10e44c*=0x56) returned 0x0 [0072.098] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x390380, lpcbData=0x10e44c*=0x56 | out: lpType=0x10e450*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e44c*=0x56) returned 0x0 [0072.098] RegCloseKey (hKey=0x304) returned 0x0 [0072.098] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.098] GetLastError () returned 0x0 [0072.098] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.098] GetLastError () returned 0x0 [0072.120] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3a [0072.120] GetLastError () returned 0x0 [0072.123] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0072.123] GetLastError () returned 0x57 [0072.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0072.135] GetLastError () returned 0x57 [0072.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.144] GetLastError () returned 0x57 [0072.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0072.157] GetLastError () returned 0x57 [0072.170] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", lpFilePart=0x0) returned 0x52 [0072.170] GetLastError () returned 0x57 [0072.182] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", lpFilePart=0x0) returned 0x74 [0072.182] GetLastError () returned 0x57 [0072.194] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0072.194] GetLastError () returned 0x57 [0072.206] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x0) returned 0x60 [0072.206] GetLastError () returned 0x57 [0072.218] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0072.218] GetLastError () returned 0x57 [0072.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0072.229] GetLastError () returned 0x57 [0072.241] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0072.241] GetLastError () returned 0x57 [0072.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", lpFilePart=0x0) returned 0x50 [0072.255] GetLastError () returned 0x57 [0072.269] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", lpFilePart=0x0) returned 0x5e [0072.269] GetLastError () returned 0x57 [0072.282] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", lpFilePart=0x0) returned 0x6c [0072.282] GetLastError () returned 0x57 [0072.294] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3a [0072.294] GetLastError () returned 0x57 [0072.294] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0072.294] GetLastError () returned 0x57 [0072.295] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0072.295] GetLastError () returned 0x57 [0072.295] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.295] GetLastError () returned 0x57 [0072.296] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.296] GetLastError () returned 0x57 [0072.296] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.296] GetLastError () returned 0x57 [0072.296] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.296] GetLastError () returned 0x57 [0072.296] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.296] GetLastError () returned 0x57 [0072.367] VirtualQuery (in: lpAddress=0x10d160, lpBuffer=0x10e160, dwLength=0x1c | out: lpBuffer=0x10e160*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.372] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xb445699a, Data2=0x632c, Data3=0x49b7, Data4=([0]=0x89, [1]=0x75, [2]=0xda, [3]=0xca, [4]=0x5, [5]=0xa3, [6]=0xbd, [7]=0xa5))) returned 0x0 [0072.376] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x3d1447e6, Data2=0x603f, Data3=0x4466, Data4=([0]=0xa2, [1]=0x26, [2]=0xbf, [3]=0x36, [4]=0x3a, [5]=0x97, [6]=0xb8, [7]=0xd))) returned 0x0 [0072.376] VirtualQuery (in: lpAddress=0x10d1d8, lpBuffer=0x10e1d8, dwLength=0x1c | out: lpBuffer=0x10e1d8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.377] VirtualQuery (in: lpAddress=0x10d1d8, lpBuffer=0x10e1d8, dwLength=0x1c | out: lpBuffer=0x10e1d8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.378] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x8105e93b, Data2=0xc058, Data3=0x4f49, Data4=([0]=0xa0, [1]=0x61, [2]=0xe0, [3]=0x41, [4]=0x12, [5]=0xa1, [6]=0x96, [7]=0xf4))) returned 0x0 [0072.386] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x91393bb4, Data2=0x63d7, Data3=0x4082, Data4=([0]=0xbf, [1]=0xf9, [2]=0x2e, [3]=0xf1, [4]=0xbc, [5]=0x7d, [6]=0x62, [7]=0x7d))) returned 0x0 [0072.386] VirtualQuery (in: lpAddress=0x10d304, lpBuffer=0x10e304, dwLength=0x1c | out: lpBuffer=0x10e304*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.387] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.387] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.387] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xfff067aa, Data2=0xd1d8, Data3=0x46bd, Data4=([0]=0xb8, [1]=0xa, [2]=0x78, [3]=0xf4, [4]=0x69, [5]=0x1c, [6]=0xbf, [7]=0x15))) returned 0x0 [0072.387] VirtualQuery (in: lpAddress=0x10d304, lpBuffer=0x10e304, dwLength=0x1c | out: lpBuffer=0x10e304*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.388] VirtualQuery (in: lpAddress=0x10d21c, lpBuffer=0x10e21c, dwLength=0x1c | out: lpBuffer=0x10e21c*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.389] VirtualQuery (in: lpAddress=0x10ced0, lpBuffer=0x10ded0, dwLength=0x1c | out: lpBuffer=0x10ded0*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.390] VirtualQuery (in: lpAddress=0x10ced0, lpBuffer=0x10ded0, dwLength=0x1c | out: lpBuffer=0x10ded0*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.390] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x8c392751, Data2=0xf027, Data3=0x44d6, Data4=([0]=0xa3, [1]=0xd, [2]=0xd1, [3]=0x85, [4]=0x6, [5]=0x5e, [6]=0x9e, [7]=0xd3))) returned 0x0 [0072.390] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x4a35ace9, Data2=0x949, Data3=0x4058, Data4=([0]=0xb3, [1]=0x42, [2]=0x73, [3]=0xcc, [4]=0xc8, [5]=0xc4, [6]=0x9d, [7]=0xdb))) returned 0x0 [0072.390] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df1c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.391] GetLastError () returned 0x57 [0072.391] SetErrorMode (uMode=0x1) returned 0x1 [0072.391] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.391] GetLastError () returned 0x0 [0072.391] GetFileType (hFile=0x304) returned 0x1 [0072.391] SetErrorMode (uMode=0x1) returned 0x1 [0072.391] GetFileType (hFile=0x304) returned 0x1 [0072.392] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.394] GetLastError () returned 0x0 [0072.394] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.394] GetLastError () returned 0x0 [0072.396] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.396] GetLastError () returned 0x0 [0072.396] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.396] GetLastError () returned 0x0 [0072.398] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.398] GetLastError () returned 0x0 [0072.398] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.398] GetLastError () returned 0x0 [0072.398] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.398] GetLastError () returned 0x0 [0072.398] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.399] GetLastError () returned 0x0 [0072.401] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.401] GetLastError () returned 0x0 [0072.401] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.401] GetLastError () returned 0x0 [0072.402] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.402] GetLastError () returned 0x0 [0072.402] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.402] GetLastError () returned 0x0 [0072.402] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.402] GetLastError () returned 0x0 [0072.403] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.403] GetLastError () returned 0x0 [0072.403] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.403] GetLastError () returned 0x0 [0072.403] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.403] GetLastError () returned 0x0 [0072.407] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.407] GetLastError () returned 0x0 [0072.421] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0xbce, lpOverlapped=0x0) returned 1 [0072.421] GetLastError () returned 0x0 [0072.421] ReadFile (in: hFile=0x304, lpBuffer=0x2288386, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288386*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.421] GetLastError () returned 0x0 [0072.421] ReadFile (in: hFile=0x304, lpBuffer=0x2288c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2288c18*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.421] GetLastError () returned 0x0 [0072.422] CloseHandle (hObject=0x304) returned 1 [0072.422] GetLastError () returned 0x0 [0072.422] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.422] GetLastError () returned 0x0 [0072.422] SetErrorMode (uMode=0x1) returned 0x1 [0072.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x22a9c14 | out: lpFileInformation=0x22a9c14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0072.422] GetLastError () returned 0x0 [0072.422] SetErrorMode (uMode=0x1) returned 0x1 [0072.422] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.422] GetLastError () returned 0x0 [0072.422] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e408 | out: phkResult=0x10e408*=0x304) returned 0x0 [0072.423] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x0, lpcbData=0x10e44c*=0x0 | out: lpType=0x10e450*=0x1, lpData=0x0, lpcbData=0x10e44c*=0x56) returned 0x0 [0072.423] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x390380, lpcbData=0x10e44c*=0x56 | out: lpType=0x10e450*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e44c*=0x56) returned 0x0 [0072.423] RegCloseKey (hKey=0x304) returned 0x0 [0072.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.423] GetLastError () returned 0x0 [0072.423] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0072.423] GetLastError () returned 0x0 [0072.429] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x5a8676b4, Data2=0xff26, Data3=0x4d4d, Data4=([0]=0xa3, [1]=0x93, [2]=0xa2, [3]=0x20, [4]=0xf, [5]=0x59, [6]=0x64, [7]=0x2a))) returned 0x0 [0072.429] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x1d10fbed, Data2=0x6a10, Data3=0x40b7, Data4=([0]=0xb4, [1]=0x5f, [2]=0xbd, [3]=0x3, [4]=0x9b, [5]=0xb6, [6]=0x26, [7]=0x99))) returned 0x0 [0072.430] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xcb936c3a, Data2=0xf394, Data3=0x488c, Data4=([0]=0xbb, [1]=0x8b, [2]=0xf5, [3]=0x24, [4]=0x46, [5]=0xa, [6]=0x2b, [7]=0x14))) returned 0x0 [0072.430] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xd821d0f4, Data2=0x5ed, Data3=0x470e, Data4=([0]=0x92, [1]=0x99, [2]=0xe0, [3]=0x99, [4]=0x42, [5]=0x21, [6]=0x7b, [7]=0xf4))) returned 0x0 [0072.430] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x751be1d1, Data2=0xc0e6, Data3=0x4f37, Data4=([0]=0x8c, [1]=0x2a, [2]=0x32, [3]=0xda, [4]=0xb2, [5]=0x4f, [6]=0xc, [7]=0x49))) returned 0x0 [0072.430] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x3372b710, Data2=0x2834, Data3=0x48e3, Data4=([0]=0x95, [1]=0x32, [2]=0x9a, [3]=0x15, [4]=0x75, [5]=0xf3, [6]=0x2c, [7]=0xf5))) returned 0x0 [0072.430] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.431] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xa7af0401, Data2=0x7da2, Data3=0x4c84, Data4=([0]=0x8d, [1]=0x13, [2]=0x82, [3]=0x62, [4]=0x2e, [5]=0x26, [6]=0x71, [7]=0xde))) returned 0x0 [0072.431] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.431] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.432] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x43424cad, Data2=0xad88, Data3=0x48dc, Data4=([0]=0xa6, [1]=0xdc, [2]=0x5d, [3]=0xb8, [4]=0x6b, [5]=0xb3, [6]=0x96, [7]=0x3))) returned 0x0 [0072.432] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x3a8a08aa, Data2=0x75b1, Data3=0x4615, Data4=([0]=0xa6, [1]=0x33, [2]=0xfc, [3]=0xa5, [4]=0xc1, [5]=0x62, [6]=0x33, [7]=0xba))) returned 0x0 [0072.432] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x290b4aec, Data2=0xc63d, Data3=0x4440, Data4=([0]=0x8d, [1]=0x12, [2]=0x90, [3]=0x5e, [4]=0x15, [5]=0x1c, [6]=0xad, [7]=0x78))) returned 0x0 [0072.433] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xe6f85edb, Data2=0x2376, Data3=0x4c97, Data4=([0]=0xa8, [1]=0x1b, [2]=0x78, [3]=0x97, [4]=0xc7, [5]=0x6c, [6]=0xb5, [7]=0xd0))) returned 0x0 [0072.433] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.433] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x354c1b87, Data2=0xb5f3, Data3=0x45a3, Data4=([0]=0xae, [1]=0x40, [2]=0x67, [3]=0x62, [4]=0x9b, [5]=0xe, [6]=0xe8, [7]=0xc3))) returned 0x0 [0072.433] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.434] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.435] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.435] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.436] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.437] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x634d7181, Data2=0x48e8, Data3=0x436e, Data4=([0]=0x8a, [1]=0xae, [2]=0x18, [3]=0x45, [4]=0x7e, [5]=0xee, [6]=0x83, [7]=0xc2))) returned 0x0 [0072.437] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x23ceaa35, Data2=0x5e58, Data3=0x4603, Data4=([0]=0x85, [1]=0x4e, [2]=0xfb, [3]=0xcd, [4]=0x23, [5]=0xe4, [6]=0xf, [7]=0x9b))) returned 0x0 [0072.437] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x2dbbd13, Data2=0x8f04, Data3=0x48f2, Data4=([0]=0x9e, [1]=0x4c, [2]=0xd9, [3]=0xc5, [4]=0xd, [5]=0xaa, [6]=0xb, [7]=0xb2))) returned 0x0 [0072.437] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xf92256d9, Data2=0xf202, Data3=0x4d68, Data4=([0]=0xbd, [1]=0x2d, [2]=0x22, [3]=0x13, [4]=0x12, [5]=0x52, [6]=0xb4, [7]=0xea))) returned 0x0 [0072.437] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x4facf4e2, Data2=0x3d01, Data3=0x483c, Data4=([0]=0xb8, [1]=0x3a, [2]=0x4a, [3]=0x16, [4]=0x93, [5]=0xaf, [6]=0x23, [7]=0x91))) returned 0x0 [0072.438] VirtualQuery (in: lpAddress=0x10d304, lpBuffer=0x10e304, dwLength=0x1c | out: lpBuffer=0x10e304*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.438] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x90f71b8f, Data2=0x30d9, Data3=0x49f3, Data4=([0]=0xbc, [1]=0x98, [2]=0x41, [3]=0x18, [4]=0xe4, [5]=0x24, [6]=0xec, [7]=0xf8))) returned 0x0 [0072.438] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xf7cced0a, Data2=0xe7f1, Data3=0x456a, Data4=([0]=0x86, [1]=0xae, [2]=0xa2, [3]=0x75, [4]=0xef, [5]=0x34, [6]=0x18, [7]=0xe6))) returned 0x0 [0072.439] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xfa654efa, Data2=0x90d2, Data3=0x49f0, Data4=([0]=0xac, [1]=0xa3, [2]=0xe6, [3]=0x8b, [4]=0x8, [5]=0xdc, [6]=0xf9, [7]=0xa0))) returned 0x0 [0072.439] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x6a6fb6bc, Data2=0x7c41, Data3=0x4508, Data4=([0]=0x9a, [1]=0xa6, [2]=0x43, [3]=0xc2, [4]=0xf1, [5]=0xd1, [6]=0x53, [7]=0x7b))) returned 0x0 [0072.439] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x6a65f3d, Data2=0x5323, Data3=0x4ab2, Data4=([0]=0xbb, [1]=0xbe, [2]=0xb5, [3]=0x79, [4]=0x17, [5]=0xbb, [6]=0x6d, [7]=0x22))) returned 0x0 [0072.439] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x36de9ad2, Data2=0xc78a, Data3=0x4ff0, Data4=([0]=0xa2, [1]=0x25, [2]=0xa8, [3]=0x7, [4]=0x90, [5]=0xe0, [6]=0xaa, [7]=0x5d))) returned 0x0 [0072.439] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xbf958831, Data2=0x36d6, Data3=0x4df6, Data4=([0]=0x93, [1]=0x59, [2]=0x6, [3]=0x4f, [4]=0x60, [5]=0xc2, [6]=0xc3, [7]=0x6b))) returned 0x0 [0072.440] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xbdec9093, Data2=0x5ed5, Data3=0x4a6b, Data4=([0]=0x81, [1]=0xea, [2]=0x93, [3]=0xc3, [4]=0x17, [5]=0xb6, [6]=0x91, [7]=0x15))) returned 0x0 [0072.440] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x6c334a70, Data2=0xecaa, Data3=0x442d, Data4=([0]=0xb9, [1]=0xca, [2]=0xb0, [3]=0x25, [4]=0x3f, [5]=0x6d, [6]=0xd5, [7]=0x8d))) returned 0x0 [0072.440] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xfd2976a3, Data2=0x3383, Data3=0x4187, Data4=([0]=0x93, [1]=0xc4, [2]=0x2c, [3]=0x9a, [4]=0x45, [5]=0x56, [6]=0x7, [7]=0xbb))) returned 0x0 [0072.440] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xd65385f1, Data2=0x7d4, Data3=0x4610, Data4=([0]=0x9f, [1]=0x41, [2]=0xdc, [3]=0x96, [4]=0xef, [5]=0x8c, [6]=0x4c, [7]=0xd0))) returned 0x0 [0072.440] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x55593d5c, Data2=0x2d3f, Data3=0x4740, Data4=([0]=0xa4, [1]=0x76, [2]=0xfa, [3]=0xd8, [4]=0x3d, [5]=0xc2, [6]=0x64, [7]=0x9e))) returned 0x0 [0072.441] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xca215a3b, Data2=0x29f3, Data3=0x4820, Data4=([0]=0x93, [1]=0x35, [2]=0xaa, [3]=0xc1, [4]=0x28, [5]=0x4a, [6]=0x34, [7]=0xfa))) returned 0x0 [0072.441] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x35e90bf8, Data2=0xb0c0, Data3=0x48e4, Data4=([0]=0xac, [1]=0x55, [2]=0x79, [3]=0x59, [4]=0xad, [5]=0x53, [6]=0x0, [7]=0x7b))) returned 0x0 [0072.442] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x6fc53259, Data2=0x8a8f, Data3=0x467f, Data4=([0]=0xad, [1]=0x3f, [2]=0x47, [3]=0xe2, [4]=0x70, [5]=0x91, [6]=0xf3, [7]=0xa))) returned 0x0 [0072.442] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x4e336d67, Data2=0xb2e8, Data3=0x4c8e, Data4=([0]=0xbf, [1]=0x49, [2]=0xe3, [3]=0xfe, [4]=0xea, [5]=0xfb, [6]=0x93, [7]=0x9e))) returned 0x0 [0072.442] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xe04c340c, Data2=0x2e9a, Data3=0x4953, Data4=([0]=0xb3, [1]=0xad, [2]=0xbc, [3]=0xad, [4]=0x90, [5]=0x96, [6]=0xf, [7]=0x5c))) returned 0x0 [0072.442] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x3a4f92d8, Data2=0x2c90, Data3=0x462f, Data4=([0]=0xa4, [1]=0xe6, [2]=0x7b, [3]=0xe3, [4]=0x2f, [5]=0x75, [6]=0x6f, [7]=0x7e))) returned 0x0 [0072.442] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x34807c05, Data2=0x3bf1, Data3=0x4155, Data4=([0]=0x9c, [1]=0x60, [2]=0xf4, [3]=0x24, [4]=0xb6, [5]=0xb, [6]=0x3a, [7]=0x3d))) returned 0x0 [0072.443] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.443] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.446] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.448] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x6516667b, Data2=0x5400, Data3=0x4f0f, Data4=([0]=0xa4, [1]=0x90, [2]=0x66, [3]=0x9a, [4]=0xc9, [5]=0x2b, [6]=0xcd, [7]=0x9d))) returned 0x0 [0072.449] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df1c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0072.449] GetLastError () returned 0x0 [0072.449] SetErrorMode (uMode=0x1) returned 0x1 [0072.449] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.449] GetLastError () returned 0x0 [0072.449] GetFileType (hFile=0x304) returned 0x1 [0072.449] SetErrorMode (uMode=0x1) returned 0x1 [0072.449] GetFileType (hFile=0x304) returned 0x1 [0072.449] ReadFile (in: hFile=0x304, lpBuffer=0x2346b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2346b00*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.451] GetLastError () returned 0x0 [0072.452] ReadFile (in: hFile=0x304, lpBuffer=0x2346b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2346b00*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.452] GetLastError () returned 0x0 [0072.453] ReadFile (in: hFile=0x304, lpBuffer=0x2346b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2346b00*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.453] GetLastError () returned 0x0 [0072.453] ReadFile (in: hFile=0x304, lpBuffer=0x2346b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2346b00*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.453] GetLastError () returned 0x0 [0072.455] ReadFile (in: hFile=0x304, lpBuffer=0x2346b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2346b00*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.455] GetLastError () returned 0x0 [0072.455] ReadFile (in: hFile=0x304, lpBuffer=0x2346b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2346b00*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.455] GetLastError () returned 0x0 [0072.455] ReadFile (in: hFile=0x304, lpBuffer=0x2346b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2346b00*, lpNumberOfBytesRead=0x10e484*=0x119, lpOverlapped=0x0) returned 1 [0072.455] GetLastError () returned 0x0 [0072.455] ReadFile (in: hFile=0x304, lpBuffer=0x2346b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2346b00*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.455] GetLastError () returned 0x0 [0072.455] CloseHandle (hObject=0x304) returned 1 [0072.456] GetLastError () returned 0x0 [0072.456] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0072.456] GetLastError () returned 0x0 [0072.456] SetErrorMode (uMode=0x1) returned 0x1 [0072.456] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2367afc | out: lpFileInformation=0x2367afc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0072.456] GetLastError () returned 0x0 [0072.456] SetErrorMode (uMode=0x1) returned 0x1 [0072.456] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0072.456] GetLastError () returned 0x0 [0072.456] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e408 | out: phkResult=0x10e408*=0x304) returned 0x0 [0072.456] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x0, lpcbData=0x10e44c*=0x0 | out: lpType=0x10e450*=0x1, lpData=0x0, lpcbData=0x10e44c*=0x56) returned 0x0 [0072.457] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x390380, lpcbData=0x10e44c*=0x56 | out: lpType=0x10e450*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e44c*=0x56) returned 0x0 [0072.457] RegCloseKey (hKey=0x304) returned 0x0 [0072.457] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0072.457] GetLastError () returned 0x0 [0072.457] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0072.457] GetLastError () returned 0x0 [0072.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.459] GetLastError () returned 0x0 [0072.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.459] GetLastError () returned 0x0 [0072.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.459] GetLastError () returned 0x0 [0072.459] VirtualQuery (in: lpAddress=0x10d160, lpBuffer=0x10e160, dwLength=0x1c | out: lpBuffer=0x10e160*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.459] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x6ceda618, Data2=0xa35d, Data3=0x4e53, Data4=([0]=0xa4, [1]=0xeb, [2]=0x56, [3]=0xb4, [4]=0x96, [5]=0x3, [6]=0x1b, [7]=0xf5))) returned 0x0 [0072.460] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.460] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x8d9711a6, Data2=0x4f4b, Data3=0x46ca, Data4=([0]=0x82, [1]=0x3b, [2]=0x5a, [3]=0xde, [4]=0x1b, [5]=0x2b, [6]=0xcc, [7]=0xd7))) returned 0x0 [0072.461] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x62178d45, Data2=0xf029, Data3=0x421b, Data4=([0]=0x8c, [1]=0x4a, [2]=0xbe, [3]=0xc4, [4]=0x57, [5]=0x7f, [6]=0x87, [7]=0xac))) returned 0x0 [0072.461] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xcdfb4e00, Data2=0x7cab, Data3=0x4019, Data4=([0]=0xb3, [1]=0xf9, [2]=0x4c, [3]=0x9a, [4]=0x7a, [5]=0xa, [6]=0x44, [7]=0x7f))) returned 0x0 [0072.461] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.461] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.461] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df1c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0072.461] GetLastError () returned 0x0 [0072.461] SetErrorMode (uMode=0x1) returned 0x1 [0072.461] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.462] GetLastError () returned 0x0 [0072.462] GetFileType (hFile=0x304) returned 0x1 [0072.462] SetErrorMode (uMode=0x1) returned 0x1 [0072.462] GetFileType (hFile=0x304) returned 0x1 [0072.462] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.464] GetLastError () returned 0x0 [0072.464] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.464] GetLastError () returned 0x0 [0072.465] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.465] GetLastError () returned 0x0 [0072.465] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.465] GetLastError () returned 0x0 [0072.466] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.466] GetLastError () returned 0x0 [0072.466] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.467] GetLastError () returned 0x0 [0072.467] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.467] GetLastError () returned 0x0 [0072.467] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.467] GetLastError () returned 0x0 [0072.469] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.469] GetLastError () returned 0x0 [0072.469] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.469] GetLastError () returned 0x0 [0072.469] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.469] GetLastError () returned 0x0 [0072.470] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.470] GetLastError () returned 0x0 [0072.470] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.470] GetLastError () returned 0x0 [0072.470] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.470] GetLastError () returned 0x0 [0072.471] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.471] GetLastError () returned 0x0 [0072.471] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.471] GetLastError () returned 0x0 [0072.475] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.475] GetLastError () returned 0x0 [0072.475] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.475] GetLastError () returned 0x0 [0072.475] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.475] GetLastError () returned 0x0 [0072.475] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.476] GetLastError () returned 0x0 [0072.476] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.476] GetLastError () returned 0x0 [0072.476] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.476] GetLastError () returned 0x0 [0072.476] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.476] GetLastError () returned 0x0 [0072.477] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.477] GetLastError () returned 0x0 [0072.477] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.477] GetLastError () returned 0x0 [0072.477] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.477] GetLastError () returned 0x0 [0072.478] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.478] GetLastError () returned 0x0 [0072.478] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.478] GetLastError () returned 0x0 [0072.478] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.478] GetLastError () returned 0x0 [0072.479] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.479] GetLastError () returned 0x0 [0072.479] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.479] GetLastError () returned 0x0 [0072.479] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.479] GetLastError () returned 0x0 [0072.486] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.486] GetLastError () returned 0x0 [0072.486] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.486] GetLastError () returned 0x0 [0072.487] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.487] GetLastError () returned 0x0 [0072.487] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.487] GetLastError () returned 0x0 [0072.487] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.487] GetLastError () returned 0x0 [0072.487] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.487] GetLastError () returned 0x0 [0072.488] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.488] GetLastError () returned 0x0 [0072.488] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.488] GetLastError () returned 0x0 [0072.488] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.488] GetLastError () returned 0x0 [0072.489] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.489] GetLastError () returned 0x0 [0072.489] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.489] GetLastError () returned 0x0 [0072.489] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.489] GetLastError () returned 0x0 [0072.489] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.489] GetLastError () returned 0x0 [0072.490] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.490] GetLastError () returned 0x0 [0072.490] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.490] GetLastError () returned 0x0 [0072.490] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.490] GetLastError () returned 0x0 [0072.491] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.491] GetLastError () returned 0x0 [0072.491] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.491] GetLastError () returned 0x0 [0072.491] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.491] GetLastError () returned 0x0 [0072.491] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.491] GetLastError () returned 0x0 [0072.492] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.492] GetLastError () returned 0x0 [0072.492] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.492] GetLastError () returned 0x0 [0072.492] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.493] GetLastError () returned 0x0 [0072.493] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.493] GetLastError () returned 0x0 [0072.493] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.493] GetLastError () returned 0x0 [0072.493] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.494] GetLastError () returned 0x0 [0072.494] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.494] GetLastError () returned 0x0 [0072.494] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.494] GetLastError () returned 0x0 [0072.494] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.495] GetLastError () returned 0x0 [0072.495] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.495] GetLastError () returned 0x0 [0072.495] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0xf37, lpOverlapped=0x0) returned 1 [0072.495] GetLastError () returned 0x0 [0072.495] ReadFile (in: hFile=0x304, lpBuffer=0x23901fb, nNumberOfBytesToRead=0xc9, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x23901fb*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.495] GetLastError () returned 0x0 [0072.495] ReadFile (in: hFile=0x304, lpBuffer=0x2390b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2390b24*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.496] GetLastError () returned 0x0 [0072.496] CloseHandle (hObject=0x304) returned 1 [0072.496] GetLastError () returned 0x0 [0072.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0072.496] GetLastError () returned 0x0 [0072.496] SetErrorMode (uMode=0x1) returned 0x1 [0072.496] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x23b1b20 | out: lpFileInformation=0x23b1b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0072.496] GetLastError () returned 0x0 [0072.496] SetErrorMode (uMode=0x1) returned 0x1 [0072.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0072.496] GetLastError () returned 0x0 [0072.497] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e408 | out: phkResult=0x10e408*=0x304) returned 0x0 [0072.497] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x0, lpcbData=0x10e44c*=0x0 | out: lpType=0x10e450*=0x1, lpData=0x0, lpcbData=0x10e44c*=0x56) returned 0x0 [0072.497] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x390380, lpcbData=0x10e44c*=0x56 | out: lpType=0x10e450*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e44c*=0x56) returned 0x0 [0072.497] RegCloseKey (hKey=0x304) returned 0x0 [0072.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0072.497] GetLastError () returned 0x0 [0072.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0072.498] GetLastError () returned 0x0 [0072.515] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x5b8a784f, Data2=0x6500, Data3=0x43f1, Data4=([0]=0xbb, [1]=0xa9, [2]=0x82, [3]=0x56, [4]=0xdf, [5]=0xd7, [6]=0xf9, [7]=0xeb))) returned 0x0 [0072.515] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xce77c1fe, Data2=0x24c0, Data3=0x4467, Data4=([0]=0x8c, [1]=0xe1, [2]=0xb4, [3]=0x3c, [4]=0x67, [5]=0x71, [6]=0x8, [7]=0x35))) returned 0x0 [0072.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.515] GetLastError () returned 0x0 [0072.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.515] GetLastError () returned 0x0 [0072.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.515] GetLastError () returned 0x0 [0072.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.515] GetLastError () returned 0x0 [0072.569] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.569] GetLastError () returned 0x0 [0072.569] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.569] GetLastError () returned 0x0 [0072.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.570] GetLastError () returned 0x0 [0072.570] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x3a0b79f8, Data2=0x3c17, Data3=0x4e77, Data4=([0]=0xac, [1]=0x5e, [2]=0x5f, [3]=0x2e, [4]=0x97, [5]=0x6d, [6]=0x6c, [7]=0x13))) returned 0x0 [0072.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.570] GetLastError () returned 0x0 [0072.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.570] GetLastError () returned 0x0 [0072.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.570] GetLastError () returned 0x0 [0072.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.570] GetLastError () returned 0x0 [0072.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.570] GetLastError () returned 0x0 [0072.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.570] GetLastError () returned 0x0 [0072.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.571] GetLastError () returned 0x0 [0072.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.571] GetLastError () returned 0x0 [0072.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.571] GetLastError () returned 0x0 [0072.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.571] GetLastError () returned 0x0 [0072.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.571] GetLastError () returned 0x0 [0072.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.571] GetLastError () returned 0x0 [0072.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.571] GetLastError () returned 0x0 [0072.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.571] GetLastError () returned 0x0 [0072.571] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.571] GetLastError () returned 0x0 [0072.572] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.572] GetLastError () returned 0x0 [0072.572] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.572] GetLastError () returned 0x0 [0072.572] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.572] GetLastError () returned 0x0 [0072.574] VirtualQuery (in: lpAddress=0x10cdc4, lpBuffer=0x10ddc4, dwLength=0x1c | out: lpBuffer=0x10ddc4*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.575] VirtualQuery (in: lpAddress=0x10ce00, lpBuffer=0x10de00, dwLength=0x1c | out: lpBuffer=0x10de00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.575] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.575] GetLastError () returned 0x0 [0072.575] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.575] GetLastError () returned 0x0 [0072.575] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.575] GetLastError () returned 0x0 [0072.575] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.575] GetLastError () returned 0x0 [0072.575] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.575] GetLastError () returned 0x0 [0072.575] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.575] GetLastError () returned 0x0 [0072.576] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.576] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.576] GetLastError () returned 0x0 [0072.576] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.576] GetLastError () returned 0x0 [0072.576] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.576] GetLastError () returned 0x0 [0072.577] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.577] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.577] GetLastError () returned 0x0 [0072.577] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.577] GetLastError () returned 0x0 [0072.577] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.577] GetLastError () returned 0x0 [0072.577] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.578] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.578] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.580] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.580] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.580] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.581] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.581] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.581] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.582] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.582] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.584] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.584] VirtualQuery (in: lpAddress=0x10cf6c, lpBuffer=0x10df6c, dwLength=0x1c | out: lpBuffer=0x10df6c*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.584] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.585] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.586] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.586] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.586] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x4567a4bf, Data2=0x35e, Data3=0x4e21, Data4=([0]=0x8b, [1]=0x72, [2]=0x96, [3]=0x13, [4]=0xd5, [5]=0xfa, [6]=0xae, [7]=0x38))) returned 0x0 [0072.586] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.586] GetLastError () returned 0x0 [0072.586] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.586] GetLastError () returned 0x0 [0072.586] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.586] GetLastError () returned 0x0 [0072.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.587] GetLastError () returned 0x0 [0072.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.587] GetLastError () returned 0x0 [0072.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.587] GetLastError () returned 0x0 [0072.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.587] GetLastError () returned 0x0 [0072.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.587] GetLastError () returned 0x0 [0072.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.587] GetLastError () returned 0x0 [0072.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.587] GetLastError () returned 0x0 [0072.587] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.587] GetLastError () returned 0x0 [0072.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.588] GetLastError () returned 0x0 [0072.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.588] GetLastError () returned 0x0 [0072.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.588] GetLastError () returned 0x0 [0072.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.588] GetLastError () returned 0x0 [0072.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.588] GetLastError () returned 0x0 [0072.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.588] GetLastError () returned 0x0 [0072.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.588] GetLastError () returned 0x0 [0072.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.588] GetLastError () returned 0x0 [0072.589] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.589] GetLastError () returned 0x0 [0072.589] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.589] GetLastError () returned 0x0 [0072.589] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.589] GetLastError () returned 0x0 [0072.589] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.589] GetLastError () returned 0x0 [0072.589] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.589] GetLastError () returned 0x0 [0072.589] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.589] GetLastError () returned 0x0 [0072.589] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.589] GetLastError () returned 0x0 [0072.589] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.589] GetLastError () returned 0x0 [0072.590] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.590] GetLastError () returned 0x0 [0072.590] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.590] GetLastError () returned 0x0 [0072.590] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.590] GetLastError () returned 0x0 [0072.590] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.591] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.591] GetLastError () returned 0x0 [0072.591] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.591] GetLastError () returned 0x0 [0072.591] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.591] GetLastError () returned 0x0 [0072.591] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.591] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.592] GetLastError () returned 0x0 [0072.592] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.592] GetLastError () returned 0x0 [0072.592] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.592] GetLastError () returned 0x0 [0072.592] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.592] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.593] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.594] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.595] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.595] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.595] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.596] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.596] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.596] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.597] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.598] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.598] VirtualQuery (in: lpAddress=0x10cf6c, lpBuffer=0x10df6c, dwLength=0x1c | out: lpBuffer=0x10df6c*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.598] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.599] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.600] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.600] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.600] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xeca3ac35, Data2=0xbeac, Data3=0x4100, Data4=([0]=0x96, [1]=0xac, [2]=0x21, [3]=0x3a, [4]=0xd2, [5]=0x1b, [6]=0x66, [7]=0x33))) returned 0x0 [0072.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.601] GetLastError () returned 0x0 [0072.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.601] GetLastError () returned 0x0 [0072.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.601] GetLastError () returned 0x0 [0072.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.601] GetLastError () returned 0x0 [0072.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.601] GetLastError () returned 0x0 [0072.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.601] GetLastError () returned 0x0 [0072.602] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xf9c4891f, Data2=0x7564, Data3=0x416e, Data4=([0]=0x80, [1]=0x9c, [2]=0x2d, [3]=0x95, [4]=0x37, [5]=0x37, [6]=0xff, [7]=0xc4))) returned 0x0 [0072.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.602] GetLastError () returned 0x0 [0072.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.602] GetLastError () returned 0x0 [0072.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.602] GetLastError () returned 0x0 [0072.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.603] GetLastError () returned 0x0 [0072.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.603] GetLastError () returned 0x0 [0072.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.603] GetLastError () returned 0x0 [0072.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.603] GetLastError () returned 0x0 [0072.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.603] GetLastError () returned 0x0 [0072.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.603] GetLastError () returned 0x0 [0072.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.604] GetLastError () returned 0x0 [0072.604] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.604] GetLastError () returned 0x0 [0072.604] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.604] GetLastError () returned 0x0 [0072.604] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.604] GetLastError () returned 0x0 [0072.604] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.604] GetLastError () returned 0x0 [0072.604] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.604] GetLastError () returned 0x0 [0072.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.605] GetLastError () returned 0x0 [0072.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.605] GetLastError () returned 0x0 [0072.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.605] GetLastError () returned 0x0 [0072.605] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.606] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.606] GetLastError () returned 0x0 [0072.606] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.606] GetLastError () returned 0x0 [0072.606] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.606] GetLastError () returned 0x0 [0072.606] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.607] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.607] GetLastError () returned 0x0 [0072.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.607] GetLastError () returned 0x0 [0072.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.607] GetLastError () returned 0x0 [0072.607] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.608] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.608] GetLastError () returned 0x0 [0072.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.608] GetLastError () returned 0x0 [0072.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.608] GetLastError () returned 0x0 [0072.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.608] GetLastError () returned 0x0 [0072.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.608] GetLastError () returned 0x0 [0072.609] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.609] GetLastError () returned 0x0 [0072.609] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.609] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.610] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.610] GetLastError () returned 0x0 [0072.610] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.610] GetLastError () returned 0x0 [0072.610] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.610] GetLastError () returned 0x0 [0072.610] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.611] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.611] GetLastError () returned 0x0 [0072.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.611] GetLastError () returned 0x0 [0072.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.611] GetLastError () returned 0x0 [0072.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.611] GetLastError () returned 0x0 [0072.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.611] GetLastError () returned 0x0 [0072.612] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.612] GetLastError () returned 0x0 [0072.612] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.612] GetLastError () returned 0x0 [0072.612] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.612] GetLastError () returned 0x0 [0072.612] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.612] GetLastError () returned 0x0 [0072.612] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.612] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.613] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.613] GetLastError () returned 0x0 [0072.613] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.613] GetLastError () returned 0x0 [0072.613] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.613] GetLastError () returned 0x0 [0072.613] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.614] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.614] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.614] GetLastError () returned 0x0 [0072.614] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.614] GetLastError () returned 0x0 [0072.614] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.614] GetLastError () returned 0x0 [0072.614] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.614] GetLastError () returned 0x0 [0072.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.615] GetLastError () returned 0x0 [0072.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.615] GetLastError () returned 0x0 [0072.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.615] GetLastError () returned 0x0 [0072.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.615] GetLastError () returned 0x0 [0072.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.615] GetLastError () returned 0x0 [0072.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.615] GetLastError () returned 0x0 [0072.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.615] GetLastError () returned 0x0 [0072.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.616] GetLastError () returned 0x0 [0072.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.616] GetLastError () returned 0x0 [0072.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.616] GetLastError () returned 0x0 [0072.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.616] GetLastError () returned 0x0 [0072.616] VirtualQuery (in: lpAddress=0x10d194, lpBuffer=0x10e194, dwLength=0x1c | out: lpBuffer=0x10e194*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.617] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.617] GetLastError () returned 0x0 [0072.617] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.617] GetLastError () returned 0x0 [0072.617] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.617] GetLastError () returned 0x0 [0072.617] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.617] GetLastError () returned 0x0 [0072.617] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.617] GetLastError () returned 0x0 [0072.617] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.617] GetLastError () returned 0x0 [0072.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.618] GetLastError () returned 0x0 [0072.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.618] GetLastError () returned 0x0 [0072.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.618] GetLastError () returned 0x0 [0072.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.618] GetLastError () returned 0x0 [0072.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.618] GetLastError () returned 0x0 [0072.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.618] GetLastError () returned 0x0 [0072.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.618] GetLastError () returned 0x0 [0072.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.619] GetLastError () returned 0x0 [0072.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.619] GetLastError () returned 0x0 [0072.619] VirtualQuery (in: lpAddress=0x10d194, lpBuffer=0x10e194, dwLength=0x1c | out: lpBuffer=0x10e194*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.620] GetLastError () returned 0x0 [0072.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.620] GetLastError () returned 0x0 [0072.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.620] GetLastError () returned 0x0 [0072.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.620] GetLastError () returned 0x0 [0072.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.620] GetLastError () returned 0x0 [0072.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.621] GetLastError () returned 0x0 [0072.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.621] GetLastError () returned 0x0 [0072.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.621] GetLastError () returned 0x0 [0072.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.621] GetLastError () returned 0x0 [0072.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.621] GetLastError () returned 0x0 [0072.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.621] GetLastError () returned 0x0 [0072.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.621] GetLastError () returned 0x0 [0072.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.622] GetLastError () returned 0x0 [0072.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.622] GetLastError () returned 0x0 [0072.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.622] GetLastError () returned 0x0 [0072.622] VirtualQuery (in: lpAddress=0x10d194, lpBuffer=0x10e194, dwLength=0x1c | out: lpBuffer=0x10e194*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.622] GetLastError () returned 0x0 [0072.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.623] GetLastError () returned 0x0 [0072.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.623] GetLastError () returned 0x0 [0072.623] VirtualQuery (in: lpAddress=0x10d194, lpBuffer=0x10e194, dwLength=0x1c | out: lpBuffer=0x10e194*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.623] GetLastError () returned 0x0 [0072.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.623] GetLastError () returned 0x0 [0072.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.624] GetLastError () returned 0x0 [0072.624] VirtualQuery (in: lpAddress=0x10cdc4, lpBuffer=0x10ddc4, dwLength=0x1c | out: lpBuffer=0x10ddc4*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.625] VirtualQuery (in: lpAddress=0x10ce00, lpBuffer=0x10de00, dwLength=0x1c | out: lpBuffer=0x10de00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.625] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.625] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.627] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.627] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.627] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.628] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.628] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.628] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.628] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.629] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.630] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.630] VirtualQuery (in: lpAddress=0x10cf6c, lpBuffer=0x10df6c, dwLength=0x1c | out: lpBuffer=0x10df6c*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.630] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.630] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.631] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.631] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.632] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x2a907fcf, Data2=0x2262, Data3=0x41c6, Data4=([0]=0x9c, [1]=0x49, [2]=0x96, [3]=0x27, [4]=0xd, [5]=0x91, [6]=0xbc, [7]=0xe4))) returned 0x0 [0072.632] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.632] GetLastError () returned 0x0 [0072.632] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.632] GetLastError () returned 0x0 [0072.632] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.632] GetLastError () returned 0x0 [0072.632] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.632] GetLastError () returned 0x0 [0072.632] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.632] GetLastError () returned 0x0 [0072.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.633] GetLastError () returned 0x0 [0072.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.633] GetLastError () returned 0x0 [0072.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.633] GetLastError () returned 0x0 [0072.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.633] GetLastError () returned 0x0 [0072.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.633] GetLastError () returned 0x0 [0072.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.633] GetLastError () returned 0x0 [0072.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.633] GetLastError () returned 0x0 [0072.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.634] GetLastError () returned 0x0 [0072.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.634] GetLastError () returned 0x0 [0072.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.634] GetLastError () returned 0x0 [0072.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.634] GetLastError () returned 0x0 [0072.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.634] GetLastError () returned 0x0 [0072.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.634] GetLastError () returned 0x0 [0072.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.634] GetLastError () returned 0x0 [0072.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.634] GetLastError () returned 0x0 [0072.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.635] GetLastError () returned 0x0 [0072.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.635] GetLastError () returned 0x0 [0072.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.635] GetLastError () returned 0x0 [0072.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.635] GetLastError () returned 0x0 [0072.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.635] GetLastError () returned 0x0 [0072.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.635] GetLastError () returned 0x0 [0072.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.635] GetLastError () returned 0x0 [0072.635] VirtualQuery (in: lpAddress=0x10cdc4, lpBuffer=0x10ddc4, dwLength=0x1c | out: lpBuffer=0x10ddc4*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.636] VirtualQuery (in: lpAddress=0x10ce00, lpBuffer=0x10de00, dwLength=0x1c | out: lpBuffer=0x10de00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.636] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dbb4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.636] GetLastError () returned 0x0 [0072.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.637] GetLastError () returned 0x0 [0072.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.637] GetLastError () returned 0x0 [0072.637] VirtualQuery (in: lpAddress=0x10cecc, lpBuffer=0x10decc, dwLength=0x1c | out: lpBuffer=0x10decc*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dbb4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.637] GetLastError () returned 0x0 [0072.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.637] GetLastError () returned 0x0 [0072.637] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10db64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.637] GetLastError () returned 0x0 [0072.637] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x39905424, Data2=0xad1a, Data3=0x4698, Data4=([0]=0x80, [1]=0xd2, [2]=0x84, [3]=0x3c, [4]=0x87, [5]=0xc9, [6]=0x23, [7]=0x43))) returned 0x0 [0072.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.638] GetLastError () returned 0x0 [0072.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.638] GetLastError () returned 0x0 [0072.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.638] GetLastError () returned 0x0 [0072.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.638] GetLastError () returned 0x0 [0072.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.638] GetLastError () returned 0x0 [0072.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.638] GetLastError () returned 0x0 [0072.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.638] GetLastError () returned 0x0 [0072.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.638] GetLastError () returned 0x0 [0072.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.638] GetLastError () returned 0x0 [0072.639] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x22cfe857, Data2=0xfd58, Data3=0x4159, Data4=([0]=0xb6, [1]=0xa5, [2]=0x72, [3]=0x48, [4]=0xf5, [5]=0x9e, [6]=0x14, [7]=0x18))) returned 0x0 [0072.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.639] GetLastError () returned 0x0 [0072.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.639] GetLastError () returned 0x0 [0072.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.639] GetLastError () returned 0x0 [0072.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.639] GetLastError () returned 0x0 [0072.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.639] GetLastError () returned 0x0 [0072.639] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.639] GetLastError () returned 0x0 [0072.640] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x3d6d4827, Data2=0x253b, Data3=0x4ea9, Data4=([0]=0xa1, [1]=0xce, [2]=0xa7, [3]=0xcc, [4]=0xc5, [5]=0x75, [6]=0xa4, [7]=0xe9))) returned 0x0 [0072.640] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.640] GetLastError () returned 0x0 [0072.640] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.640] GetLastError () returned 0x0 [0072.640] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.640] GetLastError () returned 0x0 [0072.640] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.640] GetLastError () returned 0x0 [0072.640] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.640] GetLastError () returned 0x0 [0072.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.641] GetLastError () returned 0x0 [0072.641] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xa86129d0, Data2=0x5ee9, Data3=0x4b73, Data4=([0]=0x8e, [1]=0x64, [2]=0x6f, [3]=0x94, [4]=0x2f, [5]=0x5b, [6]=0x7f, [7]=0x33))) returned 0x0 [0072.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.641] GetLastError () returned 0x0 [0072.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.641] GetLastError () returned 0x0 [0072.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.641] GetLastError () returned 0x0 [0072.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.641] GetLastError () returned 0x0 [0072.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.641] GetLastError () returned 0x0 [0072.641] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.641] GetLastError () returned 0x0 [0072.642] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xf1e539b6, Data2=0x7463, Data3=0x4c1e, Data4=([0]=0xaf, [1]=0x5, [2]=0xfd, [3]=0x19, [4]=0x89, [5]=0xa, [6]=0x39, [7]=0x12))) returned 0x0 [0072.642] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x18172ae6, Data2=0x5db8, Data3=0x4980, Data4=([0]=0xb0, [1]=0xbd, [2]=0xac, [3]=0xf2, [4]=0x9c, [5]=0xb8, [6]=0xc7, [7]=0x9d))) returned 0x0 [0072.643] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xe271b1, Data2=0x41dc, Data3=0x4f61, Data4=([0]=0xa1, [1]=0x6c, [2]=0x1e, [3]=0x2d, [4]=0xad, [5]=0xdb, [6]=0x67, [7]=0x1))) returned 0x0 [0072.643] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.643] GetLastError () returned 0x0 [0072.643] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.643] GetLastError () returned 0x0 [0072.643] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.643] GetLastError () returned 0x0 [0072.643] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.643] GetLastError () returned 0x0 [0072.643] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.643] GetLastError () returned 0x0 [0072.643] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.643] GetLastError () returned 0x0 [0072.643] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x2fe5d194, Data2=0x1690, Data3=0x441d, Data4=([0]=0xb0, [1]=0xfc, [2]=0x59, [3]=0x62, [4]=0x65, [5]=0xf4, [6]=0x99, [7]=0x76))) returned 0x0 [0072.644] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.644] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.644] GetLastError () returned 0x0 [0072.644] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.644] GetLastError () returned 0x0 [0072.644] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.644] GetLastError () returned 0x0 [0072.645] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.645] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.645] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.645] GetLastError () returned 0x0 [0072.645] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.645] GetLastError () returned 0x0 [0072.645] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.645] GetLastError () returned 0x0 [0072.645] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.646] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d718, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.646] GetLastError () returned 0x0 [0072.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.646] GetLastError () returned 0x0 [0072.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.646] GetLastError () returned 0x0 [0072.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.646] GetLastError () returned 0x0 [0072.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.646] GetLastError () returned 0x0 [0072.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d860, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.646] GetLastError () returned 0x0 [0072.646] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.647] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.647] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.648] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.648] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.648] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.648] VirtualQuery (in: lpAddress=0x10cd24, lpBuffer=0x10dd24, dwLength=0x1c | out: lpBuffer=0x10dd24*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.649] VirtualQuery (in: lpAddress=0x10cd60, lpBuffer=0x10dd60, dwLength=0x1c | out: lpBuffer=0x10dd60*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.649] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.650] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.650] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.651] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.651] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.651] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.651] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.651] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xf4ece6aa, Data2=0x82dc, Data3=0x47ca, Data4=([0]=0x8e, [1]=0x67, [2]=0xbc, [3]=0x9, [4]=0x66, [5]=0x7e, [6]=0xc8, [7]=0xc7))) returned 0x0 [0072.652] VirtualQuery (in: lpAddress=0x10d0f4, lpBuffer=0x10e0f4, dwLength=0x1c | out: lpBuffer=0x10e0f4*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.652] VirtualQuery (in: lpAddress=0x10d0f4, lpBuffer=0x10e0f4, dwLength=0x1c | out: lpBuffer=0x10e0f4*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.652] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.653] VirtualQuery (in: lpAddress=0x10d0f4, lpBuffer=0x10e0f4, dwLength=0x1c | out: lpBuffer=0x10e0f4*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.653] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.653] VirtualQuery (in: lpAddress=0x10d0f4, lpBuffer=0x10e0f4, dwLength=0x1c | out: lpBuffer=0x10e0f4*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.653] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.654] VirtualQuery (in: lpAddress=0x10d0f4, lpBuffer=0x10e0f4, dwLength=0x1c | out: lpBuffer=0x10e0f4*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.654] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.655] VirtualQuery (in: lpAddress=0x10d0f4, lpBuffer=0x10e0f4, dwLength=0x1c | out: lpBuffer=0x10e0f4*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.655] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.655] VirtualQuery (in: lpAddress=0x10d0f4, lpBuffer=0x10e0f4, dwLength=0x1c | out: lpBuffer=0x10e0f4*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.655] VirtualQuery (in: lpAddress=0x10d130, lpBuffer=0x10e130, dwLength=0x1c | out: lpBuffer=0x10e130*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.655] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.656] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.656] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.657] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.657] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.657] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.657] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.658] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xb3bcd18f, Data2=0x646a, Data3=0x4916, Data4=([0]=0xab, [1]=0xea, [2]=0xce, [3]=0x53, [4]=0x38, [5]=0x9b, [6]=0x68, [7]=0x55))) returned 0x0 [0072.658] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.658] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.659] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.659] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.659] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.659] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.660] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.660] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.660] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.660] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.661] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.661] VirtualQuery (in: lpAddress=0x10cf6c, lpBuffer=0x10df6c, dwLength=0x1c | out: lpBuffer=0x10df6c*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.661] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.661] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.662] VirtualQuery (in: lpAddress=0x10d0c8, lpBuffer=0x10e0c8, dwLength=0x1c | out: lpBuffer=0x10e0c8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.662] VirtualQuery (in: lpAddress=0x10d104, lpBuffer=0x10e104, dwLength=0x1c | out: lpBuffer=0x10e104*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.662] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xc9fb1153, Data2=0x9dab, Data3=0x4806, Data4=([0]=0xa5, [1]=0x4, [2]=0xc, [3]=0xf0, [4]=0x19, [5]=0xe6, [6]=0xbe, [7]=0xb))) returned 0x0 [0072.662] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x58780e0d, Data2=0xf834, Data3=0x4217, Data4=([0]=0x9c, [1]=0xd3, [2]=0xdb, [3]=0x60, [4]=0x3f, [5]=0x80, [6]=0x54, [7]=0xf2))) returned 0x0 [0072.663] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x6679b799, Data2=0x1242, Data3=0x411e, Data4=([0]=0xb7, [1]=0xdb, [2]=0x6f, [3]=0x9c, [4]=0x6b, [5]=0x66, [6]=0x88, [7]=0xcf))) returned 0x0 [0072.663] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x83634260, Data2=0x7dd4, Data3=0x428d, Data4=([0]=0xa7, [1]=0x97, [2]=0xaf, [3]=0x23, [4]=0x88, [5]=0x74, [6]=0xee, [7]=0x48))) returned 0x0 [0072.664] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xb62e33f8, Data2=0x4be, Data3=0x4c7f, Data4=([0]=0x90, [1]=0xb2, [2]=0xf7, [3]=0x1a, [4]=0x13, [5]=0xb2, [6]=0xac, [7]=0x7a))) returned 0x0 [0072.665] VirtualQuery (in: lpAddress=0x10cffc, lpBuffer=0x10dffc, dwLength=0x1c | out: lpBuffer=0x10dffc*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.665] VirtualQuery (in: lpAddress=0x10d038, lpBuffer=0x10e038, dwLength=0x1c | out: lpBuffer=0x10e038*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.665] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x441167ab, Data2=0xb6bc, Data3=0x44aa, Data4=([0]=0x95, [1]=0x55, [2]=0x22, [3]=0xaf, [4]=0xc2, [5]=0xba, [6]=0x4f, [7]=0x23))) returned 0x0 [0072.665] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xa6e7841d, Data2=0x277e, Data3=0x4c15, Data4=([0]=0xa6, [1]=0x97, [2]=0x46, [3]=0xf4, [4]=0xc, [5]=0x59, [6]=0x9c, [7]=0x82))) returned 0x0 [0072.665] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xaa3b22c4, Data2=0x36d6, Data3=0x4d08, Data4=([0]=0xae, [1]=0x96, [2]=0x42, [3]=0xd1, [4]=0xbf, [5]=0x16, [6]=0xb8, [7]=0xe3))) returned 0x0 [0072.666] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.666] GetLastError () returned 0x0 [0072.666] GetFileType (hFile=0x304) returned 0x1 [0072.666] SetErrorMode (uMode=0x1) returned 0x1 [0072.667] GetFileType (hFile=0x304) returned 0x1 [0072.667] ReadFile (in: hFile=0x304, lpBuffer=0x265d694, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x265d694*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.669] GetLastError () returned 0x0 [0072.669] ReadFile (in: hFile=0x304, lpBuffer=0x265d694, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x265d694*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.669] GetLastError () returned 0x0 [0072.681] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.681] GetLastError () returned 0x0 [0072.681] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.681] GetLastError () returned 0x0 [0072.682] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.682] GetLastError () returned 0x0 [0072.682] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.682] GetLastError () returned 0x0 [0072.682] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.682] GetLastError () returned 0x0 [0072.682] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.682] GetLastError () returned 0x0 [0072.682] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.682] GetLastError () returned 0x0 [0072.685] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.685] GetLastError () returned 0x0 [0072.685] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.685] GetLastError () returned 0x0 [0072.685] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.686] GetLastError () returned 0x0 [0072.686] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.686] GetLastError () returned 0x0 [0072.686] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.686] GetLastError () returned 0x0 [0072.686] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.686] GetLastError () returned 0x0 [0072.687] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.687] GetLastError () returned 0x0 [0072.687] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.687] GetLastError () returned 0x0 [0072.691] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.691] GetLastError () returned 0x0 [0072.691] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.691] GetLastError () returned 0x0 [0072.691] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.692] GetLastError () returned 0x0 [0072.692] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.692] GetLastError () returned 0x0 [0072.692] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0xe67, lpOverlapped=0x0) returned 1 [0072.692] GetLastError () returned 0x0 [0072.692] ReadFile (in: hFile=0x304, lpBuffer=0x210a837, nNumberOfBytesToRead=0x199, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210a837*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.692] GetLastError () returned 0x0 [0072.692] ReadFile (in: hFile=0x304, lpBuffer=0x210b1fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x210b1fc*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.692] GetLastError () returned 0x0 [0072.693] CloseHandle (hObject=0x304) returned 1 [0072.693] GetLastError () returned 0x0 [0072.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0072.693] GetLastError () returned 0x0 [0072.693] SetErrorMode (uMode=0x1) returned 0x1 [0072.693] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x212a270 | out: lpFileInformation=0x212a270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a182698, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a182698, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd368cf9c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0072.693] GetLastError () returned 0x0 [0072.693] SetErrorMode (uMode=0x1) returned 0x1 [0072.693] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0072.693] GetLastError () returned 0x0 [0072.693] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e408 | out: phkResult=0x10e408*=0x304) returned 0x0 [0072.693] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x0, lpcbData=0x10e44c*=0x0 | out: lpType=0x10e450*=0x1, lpData=0x0, lpcbData=0x10e44c*=0x56) returned 0x0 [0072.693] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x390380, lpcbData=0x10e44c*=0x56 | out: lpType=0x10e450*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e44c*=0x56) returned 0x0 [0072.694] RegCloseKey (hKey=0x304) returned 0x0 [0072.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0072.694] GetLastError () returned 0x0 [0072.694] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0072.694] GetLastError () returned 0x0 [0072.695] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x5accabe4, Data2=0xfcd2, Data3=0x4dde, Data4=([0]=0x9f, [1]=0xdd, [2]=0xd0, [3]=0xf9, [4]=0xf4, [5]=0xeb, [6]=0xc3, [7]=0x64))) returned 0x0 [0072.695] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x50944789, Data2=0xc818, Data3=0x42f4, Data4=([0]=0x9c, [1]=0x25, [2]=0x8c, [3]=0xef, [4]=0x2d, [5]=0x2e, [6]=0x64, [7]=0xc))) returned 0x0 [0072.695] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x21630d72, Data2=0x129c, Data3=0x4bd7, Data4=([0]=0x85, [1]=0x6b, [2]=0x17, [3]=0x48, [4]=0x46, [5]=0x7b, [6]=0xe0, [7]=0x9a))) returned 0x0 [0072.695] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x36295667, Data2=0x6fe7, Data3=0x4c81, Data4=([0]=0x93, [1]=0x24, [2]=0x34, [3]=0xcf, [4]=0xf9, [5]=0xf5, [6]=0x41, [7]=0x3d))) returned 0x0 [0072.695] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x82df65ad, Data2=0x2ecc, Data3=0x44f3, Data4=([0]=0xb0, [1]=0x84, [2]=0x86, [3]=0x6e, [4]=0xd1, [5]=0x6b, [6]=0x53, [7]=0xe6))) returned 0x0 [0072.695] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xe04b1edd, Data2=0x6a62, Data3=0x4ecd, Data4=([0]=0xbd, [1]=0x4b, [2]=0x9b, [3]=0x70, [4]=0x79, [5]=0x2f, [6]=0xb3, [7]=0x1e))) returned 0x0 [0072.695] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x840c54be, Data2=0xb385, Data3=0x4081, Data4=([0]=0x91, [1]=0xb7, [2]=0x42, [3]=0xa9, [4]=0x2, [5]=0xd6, [6]=0x95, [7]=0x8))) returned 0x0 [0072.696] VirtualQuery (in: lpAddress=0x10d1d0, lpBuffer=0x10e1d0, dwLength=0x1c | out: lpBuffer=0x10e1d0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.696] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xafd0adf4, Data2=0x5164, Data3=0x4c57, Data4=([0]=0x83, [1]=0x5, [2]=0x50, [3]=0xd6, [4]=0xc0, [5]=0xe5, [6]=0x6a, [7]=0x84))) returned 0x0 [0072.696] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x4cb63b4d, Data2=0xa0f8, Data3=0x4537, Data4=([0]=0x93, [1]=0x98, [2]=0x3f, [3]=0xd6, [4]=0xfb, [5]=0x22, [6]=0x66, [7]=0xf2))) returned 0x0 [0072.696] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xe301378e, Data2=0x8247, Data3=0x4442, Data4=([0]=0xbf, [1]=0x40, [2]=0xf2, [3]=0x69, [4]=0xd3, [5]=0xd6, [6]=0xa5, [7]=0x4f))) returned 0x0 [0072.696] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x8fe72e3d, Data2=0x72a, Data3=0x4514, Data4=([0]=0x81, [1]=0xc0, [2]=0x46, [3]=0xdb, [4]=0x1, [5]=0x93, [6]=0x7a, [7]=0xf0))) returned 0x0 [0072.697] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x8c8a913b, Data2=0x834e, Data3=0x4c14, Data4=([0]=0x8b, [1]=0x35, [2]=0xf0, [3]=0xdb, [4]=0x2e, [5]=0x20, [6]=0xc2, [7]=0xcc))) returned 0x0 [0072.697] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xcec15631, Data2=0x669b, Data3=0x45ca, Data4=([0]=0xb9, [1]=0x8d, [2]=0x37, [3]=0xe, [4]=0xc9, [5]=0x9f, [6]=0xb3, [7]=0xf6))) returned 0x0 [0072.697] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x3c92e8f0, Data2=0x3607, Data3=0x464a, Data4=([0]=0x92, [1]=0x26, [2]=0xe7, [3]=0x96, [4]=0xd2, [5]=0x26, [6]=0x3e, [7]=0x8a))) returned 0x0 [0072.697] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x5f4992e3, Data2=0xcbbc, Data3=0x44ff, Data4=([0]=0xa4, [1]=0xce, [2]=0x60, [3]=0x42, [4]=0xd, [5]=0x72, [6]=0xe9, [7]=0x33))) returned 0x0 [0072.697] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x8569a89c, Data2=0x8d27, Data3=0x4005, Data4=([0]=0xbd, [1]=0xd5, [2]=0xa5, [3]=0xc4, [4]=0xd1, [5]=0x5c, [6]=0x4f, [7]=0x64))) returned 0x0 [0072.697] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x400cbca3, Data2=0xd8d5, Data3=0x4781, Data4=([0]=0x89, [1]=0x80, [2]=0xdd, [3]=0x6b, [4]=0xad, [5]=0xd9, [6]=0xd6, [7]=0x15))) returned 0x0 [0072.697] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x48690d17, Data2=0x8be2, Data3=0x40ff, Data4=([0]=0x8f, [1]=0x5, [2]=0x14, [3]=0x61, [4]=0x54, [5]=0x6f, [6]=0x61, [7]=0x3b))) returned 0x0 [0072.697] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x52b3ecc1, Data2=0x6145, Data3=0x4172, Data4=([0]=0x9d, [1]=0x7e, [2]=0xbe, [3]=0x4a, [4]=0x64, [5]=0x7b, [6]=0x6b, [7]=0x35))) returned 0x0 [0072.698] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.698] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.698] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.698] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x1e14769, Data2=0x368d, Data3=0x4555, Data4=([0]=0xba, [1]=0xac, [2]=0x59, [3]=0xee, [4]=0xc6, [5]=0x70, [6]=0xcb, [7]=0xeb))) returned 0x0 [0072.698] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x2c76ecc7, Data2=0x84d4, Data3=0x45a0, Data4=([0]=0xb4, [1]=0xf3, [2]=0xcb, [3]=0xc4, [4]=0x98, [5]=0x79, [6]=0x11, [7]=0x5b))) returned 0x0 [0072.699] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xa1ad93d7, Data2=0x59de, Data3=0x4d12, Data4=([0]=0x9c, [1]=0x56, [2]=0x16, [3]=0xd4, [4]=0xd4, [5]=0x5c, [6]=0x56, [7]=0x7f))) returned 0x0 [0072.699] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x8bd629a5, Data2=0xd06f, Data3=0x47e6, Data4=([0]=0x81, [1]=0x62, [2]=0xfc, [3]=0x2f, [4]=0xe6, [5]=0x18, [6]=0xf5, [7]=0x91))) returned 0x0 [0072.699] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x297bd709, Data2=0xd3cf, Data3=0x4003, Data4=([0]=0xa2, [1]=0xab, [2]=0x24, [3]=0x9f, [4]=0xca, [5]=0xb0, [6]=0x4e, [7]=0x1b))) returned 0x0 [0072.699] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xcb431881, Data2=0x789, Data3=0x4a8c, Data4=([0]=0x83, [1]=0xda, [2]=0x43, [3]=0x8a, [4]=0x64, [5]=0x87, [6]=0xaf, [7]=0x7a))) returned 0x0 [0072.699] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x4c4aa826, Data2=0x6bf3, Data3=0x4b11, Data4=([0]=0x8a, [1]=0x78, [2]=0x14, [3]=0x14, [4]=0x7e, [5]=0x87, [6]=0xf3, [7]=0xc0))) returned 0x0 [0072.699] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x4602f73b, Data2=0x1b51, Data3=0x46d0, Data4=([0]=0xb6, [1]=0x43, [2]=0x39, [3]=0x55, [4]=0x43, [5]=0xd1, [6]=0xee, [7]=0x4f))) returned 0x0 [0072.699] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x3d66af9, Data2=0x7c20, Data3=0x4da9, Data4=([0]=0x9f, [1]=0xca, [2]=0xec, [3]=0x0, [4]=0xf3, [5]=0xeb, [6]=0xd6, [7]=0x43))) returned 0x0 [0072.700] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x3a724033, Data2=0xef84, Data3=0x4ebd, Data4=([0]=0x8b, [1]=0x1c, [2]=0x17, [3]=0xcd, [4]=0x83, [5]=0xd9, [6]=0xf3, [7]=0xd2))) returned 0x0 [0072.700] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x98c61ffc, Data2=0x8962, Data3=0x4bff, Data4=([0]=0xad, [1]=0xbb, [2]=0xe9, [3]=0x95, [4]=0xfb, [5]=0x1, [6]=0x1a, [7]=0x91))) returned 0x0 [0072.700] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x8e2ffa50, Data2=0x34da, Data3=0x4719, Data4=([0]=0x88, [1]=0xd2, [2]=0x97, [3]=0xf1, [4]=0xde, [5]=0xa6, [6]=0x88, [7]=0xa6))) returned 0x0 [0072.700] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x55581140, Data2=0x5ecc, Data3=0x4c63, Data4=([0]=0x89, [1]=0xa8, [2]=0xdb, [3]=0x99, [4]=0x61, [5]=0xd1, [6]=0xb8, [7]=0x16))) returned 0x0 [0072.700] VirtualQuery (in: lpAddress=0x10d1d0, lpBuffer=0x10e1d0, dwLength=0x1c | out: lpBuffer=0x10e1d0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.700] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x7286982e, Data2=0x8373, Data3=0x4d75, Data4=([0]=0x85, [1]=0xae, [2]=0x3b, [3]=0xbb, [4]=0xc7, [5]=0x1c, [6]=0xfd, [7]=0x25))) returned 0x0 [0072.700] VirtualQuery (in: lpAddress=0x10d1d0, lpBuffer=0x10e1d0, dwLength=0x1c | out: lpBuffer=0x10e1d0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.703] VirtualQuery (in: lpAddress=0x10d1d0, lpBuffer=0x10e1d0, dwLength=0x1c | out: lpBuffer=0x10e1d0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.706] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xd93bc593, Data2=0x5837, Data3=0x4626, Data4=([0]=0x9b, [1]=0xfe, [2]=0x76, [3]=0xac, [4]=0xc0, [5]=0xb6, [6]=0x78, [7]=0x47))) returned 0x0 [0072.706] VirtualQuery (in: lpAddress=0x10d1d0, lpBuffer=0x10e1d0, dwLength=0x1c | out: lpBuffer=0x10e1d0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.706] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x273cce7d, Data2=0xc773, Data3=0x4481, Data4=([0]=0xa3, [1]=0x9f, [2]=0x86, [3]=0x64, [4]=0x7, [5]=0x4f, [6]=0xa7, [7]=0xbc))) returned 0x0 [0072.707] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xae35254f, Data2=0xeee9, Data3=0x4722, Data4=([0]=0xb2, [1]=0xdb, [2]=0x32, [3]=0x3b, [4]=0xa8, [5]=0x7d, [6]=0x36, [7]=0xf2))) returned 0x0 [0072.707] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xa691d4b1, Data2=0x28aa, Data3=0x42a1, Data4=([0]=0x98, [1]=0x9, [2]=0x51, [3]=0x12, [4]=0x8f, [5]=0x69, [6]=0x79, [7]=0x91))) returned 0x0 [0072.707] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x7e287046, Data2=0x19ea, Data3=0x4b79, Data4=([0]=0xb0, [1]=0xdf, [2]=0x9e, [3]=0x50, [4]=0x12, [5]=0xd1, [6]=0x53, [7]=0xad))) returned 0x0 [0072.707] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x98d9ff26, Data2=0xa046, Data3=0x4f0e, Data4=([0]=0x95, [1]=0xb0, [2]=0xf5, [3]=0xe5, [4]=0xa0, [5]=0x14, [6]=0x4c, [7]=0x83))) returned 0x0 [0072.707] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xa13a1180, Data2=0xfff, Data3=0x4e05, Data4=([0]=0xbc, [1]=0xa4, [2]=0x8a, [3]=0x34, [4]=0xc6, [5]=0xb2, [6]=0x95, [7]=0x8e))) returned 0x0 [0072.707] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xf3c9ffa, Data2=0x9d6c, Data3=0x4283, Data4=([0]=0xae, [1]=0x87, [2]=0x2b, [3]=0x53, [4]=0x7d, [5]=0xee, [6]=0xf5, [7]=0xd7))) returned 0x0 [0072.707] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.708] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xe721baf3, Data2=0x6a2d, Data3=0x4120, Data4=([0]=0x8c, [1]=0x8e, [2]=0x9e, [3]=0x4d, [4]=0x5c, [5]=0xb6, [6]=0xdf, [7]=0x86))) returned 0x0 [0072.708] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x50f0dced, Data2=0xc100, Data3=0x48dc, Data4=([0]=0xae, [1]=0xad, [2]=0xfd, [3]=0xdd, [4]=0x94, [5]=0xde, [6]=0x58, [7]=0x62))) returned 0x0 [0072.708] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xbf85d8d7, Data2=0x8e9a, Data3=0x43de, Data4=([0]=0x91, [1]=0x9d, [2]=0x8c, [3]=0x82, [4]=0xca, [5]=0xd5, [6]=0x1d, [7]=0xf))) returned 0x0 [0072.708] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0xbaa519cc, Data2=0x921a, Data3=0x4b97, Data4=([0]=0x87, [1]=0xe2, [2]=0x10, [3]=0x28, [4]=0x54, [5]=0xf2, [6]=0xdb, [7]=0x45))) returned 0x0 [0072.708] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x79b6b2a0, Data2=0x30ca, Data3=0x41dd, Data4=([0]=0x86, [1]=0xf5, [2]=0xcd, [3]=0x18, [4]=0xa3, [5]=0xda, [6]=0x39, [7]=0x44))) returned 0x0 [0072.708] VirtualQuery (in: lpAddress=0x10d1b0, lpBuffer=0x10e1b0, dwLength=0x1c | out: lpBuffer=0x10e1b0*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.708] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x433740d, Data2=0xeabc, Data3=0x47aa, Data4=([0]=0xbb, [1]=0x5e, [2]=0xb3, [3]=0xfb, [4]=0x37, [5]=0x1a, [6]=0xf3, [7]=0x46))) returned 0x0 [0072.708] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x5278d721, Data2=0xeb3d, Data3=0x47fa, Data4=([0]=0x97, [1]=0xc3, [2]=0x87, [3]=0x7e, [4]=0x8b, [5]=0x99, [6]=0x8d, [7]=0xe7))) returned 0x0 [0072.709] VirtualQuery (in: lpAddress=0x10d1d8, lpBuffer=0x10e1d8, dwLength=0x1c | out: lpBuffer=0x10e1d8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.709] VirtualQuery (in: lpAddress=0x10d1d8, lpBuffer=0x10e1d8, dwLength=0x1c | out: lpBuffer=0x10e1d8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.709] VirtualQuery (in: lpAddress=0x10d1d8, lpBuffer=0x10e1d8, dwLength=0x1c | out: lpBuffer=0x10e1d8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.709] VirtualQuery (in: lpAddress=0x10d1d8, lpBuffer=0x10e1d8, dwLength=0x1c | out: lpBuffer=0x10e1d8*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df1c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0072.709] GetLastError () returned 0x0 [0072.709] SetErrorMode (uMode=0x1) returned 0x1 [0072.709] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.709] GetLastError () returned 0x0 [0072.709] GetFileType (hFile=0x304) returned 0x1 [0072.710] SetErrorMode (uMode=0x1) returned 0x1 [0072.710] GetFileType (hFile=0x304) returned 0x1 [0072.710] ReadFile (in: hFile=0x304, lpBuffer=0x21fa634, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21fa634*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.711] GetLastError () returned 0x0 [0072.711] ReadFile (in: hFile=0x304, lpBuffer=0x21fa634, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21fa634*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.711] GetLastError () returned 0x0 [0072.711] ReadFile (in: hFile=0x304, lpBuffer=0x21fa634, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21fa634*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.711] GetLastError () returned 0x0 [0072.712] ReadFile (in: hFile=0x304, lpBuffer=0x21fa634, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21fa634*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.712] GetLastError () returned 0x0 [0072.712] ReadFile (in: hFile=0x304, lpBuffer=0x21fa634, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21fa634*, lpNumberOfBytesRead=0x10e484*=0x8b4, lpOverlapped=0x0) returned 1 [0072.712] GetLastError () returned 0x0 [0072.712] ReadFile (in: hFile=0x304, lpBuffer=0x21f9a88, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21f9a88*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.712] GetLastError () returned 0x0 [0072.712] ReadFile (in: hFile=0x304, lpBuffer=0x21fa634, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x21fa634*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.712] GetLastError () returned 0x0 [0072.712] CloseHandle (hObject=0x304) returned 1 [0072.712] GetLastError () returned 0x0 [0072.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0072.712] GetLastError () returned 0x0 [0072.712] SetErrorMode (uMode=0x1) returned 0x1 [0072.712] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x221b630 | out: lpFileInformation=0x221b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1a87f7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1a87f7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd36b30fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0072.713] GetLastError () returned 0x0 [0072.713] SetErrorMode (uMode=0x1) returned 0x1 [0072.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0072.713] GetLastError () returned 0x0 [0072.713] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e408 | out: phkResult=0x10e408*=0x304) returned 0x0 [0072.713] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x0, lpcbData=0x10e44c*=0x0 | out: lpType=0x10e450*=0x1, lpData=0x0, lpcbData=0x10e44c*=0x56) returned 0x0 [0072.713] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x390380, lpcbData=0x10e44c*=0x56 | out: lpType=0x10e450*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e44c*=0x56) returned 0x0 [0072.713] RegCloseKey (hKey=0x304) returned 0x0 [0072.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0072.713] GetLastError () returned 0x0 [0072.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0072.713] GetLastError () returned 0x0 [0072.714] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x5b4c9abf, Data2=0x516, Data3=0x446d, Data4=([0]=0xbb, [1]=0x42, [2]=0x5f, [3]=0x88, [4]=0x39, [5]=0xc8, [6]=0x8f, [7]=0xd9))) returned 0x0 [0072.714] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x4472b8f6, Data2=0xab3b, Data3=0x4abf, Data4=([0]=0xb0, [1]=0x60, [2]=0x7c, [3]=0x14, [4]=0xd3, [5]=0xd6, [6]=0xcf, [7]=0xb5))) returned 0x0 [0072.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df1c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0072.714] GetLastError () returned 0x0 [0072.714] SetErrorMode (uMode=0x1) returned 0x1 [0072.714] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0072.714] GetLastError () returned 0x0 [0072.714] GetFileType (hFile=0x304) returned 0x1 [0072.714] SetErrorMode (uMode=0x1) returned 0x1 [0072.714] GetFileType (hFile=0x304) returned 0x1 [0072.714] ReadFile (in: hFile=0x304, lpBuffer=0x2231540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2231540*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.716] GetLastError () returned 0x0 [0072.716] ReadFile (in: hFile=0x304, lpBuffer=0x2231540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2231540*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.716] GetLastError () returned 0x0 [0072.716] ReadFile (in: hFile=0x304, lpBuffer=0x2231540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2231540*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.716] GetLastError () returned 0x0 [0072.716] ReadFile (in: hFile=0x304, lpBuffer=0x2231540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2231540*, lpNumberOfBytesRead=0x10e484*=0x1000, lpOverlapped=0x0) returned 1 [0072.717] GetLastError () returned 0x0 [0072.717] ReadFile (in: hFile=0x304, lpBuffer=0x2231540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2231540*, lpNumberOfBytesRead=0x10e484*=0xe98, lpOverlapped=0x0) returned 1 [0072.717] GetLastError () returned 0x0 [0072.717] ReadFile (in: hFile=0x304, lpBuffer=0x2230b78, nNumberOfBytesToRead=0x168, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2230b78*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.717] GetLastError () returned 0x0 [0072.717] ReadFile (in: hFile=0x304, lpBuffer=0x2231540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10e484, lpOverlapped=0x0 | out: lpBuffer=0x2231540*, lpNumberOfBytesRead=0x10e484*=0x0, lpOverlapped=0x0) returned 1 [0072.717] GetLastError () returned 0x0 [0072.717] CloseHandle (hObject=0x304) returned 1 [0072.717] GetLastError () returned 0x0 [0072.717] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0072.717] GetLastError () returned 0x0 [0072.717] SetErrorMode (uMode=0x1) returned 0x1 [0072.717] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x225253c | out: lpFileInformation=0x225253c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ce956, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1ce956, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd372551c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0072.718] GetLastError () returned 0x0 [0072.718] SetErrorMode (uMode=0x1) returned 0x1 [0072.718] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0072.718] GetLastError () returned 0x0 [0072.718] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e408 | out: phkResult=0x10e408*=0x304) returned 0x0 [0072.718] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x0, lpcbData=0x10e44c*=0x0 | out: lpType=0x10e450*=0x1, lpData=0x0, lpcbData=0x10e44c*=0x56) returned 0x0 [0072.718] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e450, lpData=0x390380, lpcbData=0x10e44c*=0x56 | out: lpType=0x10e450*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e44c*=0x56) returned 0x0 [0072.718] RegCloseKey (hKey=0x304) returned 0x0 [0072.718] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10dfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0072.718] GetLastError () returned 0x0 [0072.718] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x10df44, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0072.718] GetLastError () returned 0x0 [0072.719] VirtualQuery (in: lpAddress=0x10d160, lpBuffer=0x10e160, dwLength=0x1c | out: lpBuffer=0x10e160*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0072.719] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x36817b8, Data2=0x1e50, Data3=0x4b59, Data4=([0]=0xbb, [1]=0x8c, [2]=0x67, [3]=0x67, [4]=0x3a, [5]=0x77, [6]=0x5, [7]=0xe2))) returned 0x0 [0072.719] CoCreateGuid (in: pguid=0x10e478 | out: pguid=0x10e478*(Data1=0x9d92fe01, Data2=0xe26f, Data3=0x48d1, Data4=([0]=0x8a, [1]=0x19, [2]=0x2, [3]=0xac, [4]=0xb6, [5]=0x31, [6]=0x73, [7]=0xfe))) returned 0x0 [0072.754] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0072.754] GetLastError () returned 0x57 [0072.754] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0072.754] GetLastError () returned 0x57 [0072.772] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0072.772] GetLastError () returned 0x57 [0072.772] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0072.772] GetLastError () returned 0x57 [0072.790] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.791] GetLastError () returned 0x57 [0072.791] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0072.791] GetLastError () returned 0x57 [0072.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0072.810] GetLastError () returned 0x57 [0072.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0072.811] GetLastError () returned 0x57 [0072.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0072.827] GetLastError () returned 0x57 [0072.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0072.827] GetLastError () returned 0x57 [0072.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0072.845] GetLastError () returned 0x57 [0072.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0072.845] GetLastError () returned 0x57 [0072.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0072.865] GetLastError () returned 0x57 [0072.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x10e150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0072.865] GetLastError () returned 0x57 [0072.877] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.877] GetLastError () returned 0xcb [0072.878] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.878] GetLastError () returned 0xcb [0072.879] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.879] GetLastError () returned 0xcb [0072.881] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.881] GetLastError () returned 0xcb [0072.890] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.890] GetLastError () returned 0xcb [0072.890] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.890] GetLastError () returned 0xcb [0072.891] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.891] GetLastError () returned 0xcb [0072.893] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4fc | out: phkResult=0x10e4fc*=0x304) returned 0x0 [0072.895] RegQueryInfoKeyW (in: hKey=0x304, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x10e54c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e550, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x10e54c*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e550*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.897] RegEnumValueW (in: hKey=0x304, dwIndex=0x0, lpValueName=0x390380, lpcchValueName=0x10e574, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x10e574, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.897] RegEnumValueW (in: hKey=0x304, dwIndex=0x1, lpValueName=0x390380, lpcchValueName=0x10e574, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x10e574, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.897] RegEnumValueW (in: hKey=0x304, dwIndex=0x2, lpValueName=0x390380, lpcchValueName=0x10e574, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x10e574, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.897] RegQueryValueExW (in: hKey=0x304, lpValueName="StackVersion", lpReserved=0x0, lpType=0x10e554, lpData=0x0, lpcbData=0x10e550*=0x0 | out: lpType=0x10e554*=0x1, lpData=0x0, lpcbData=0x10e550*=0x8) returned 0x0 [0072.897] RegQueryValueExW (in: hKey=0x304, lpValueName="StackVersion", lpReserved=0x0, lpType=0x10e554, lpData=0x390380, lpcbData=0x10e550*=0x8 | out: lpType=0x10e554*=0x1, lpData="2.0", lpcbData=0x10e550*=0x8) returned 0x0 [0072.989] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4b8 | out: phkResult=0x10e4b8*=0x334) returned 0x0 [0072.989] RegQueryInfoKeyW (in: hKey=0x334, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x10e508, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e50c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x10e508*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e50c*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0072.989] RegEnumValueW (in: hKey=0x334, dwIndex=0x0, lpValueName=0x390380, lpcchValueName=0x10e530, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x10e530, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.989] RegEnumValueW (in: hKey=0x334, dwIndex=0x1, lpValueName=0x390380, lpcchValueName=0x10e530, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x10e530, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.989] RegEnumValueW (in: hKey=0x334, dwIndex=0x2, lpValueName=0x390380, lpcchValueName=0x10e530, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x10e530, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0072.990] RegQueryValueExW (in: hKey=0x334, lpValueName="StackVersion", lpReserved=0x0, lpType=0x10e510, lpData=0x0, lpcbData=0x10e50c*=0x0 | out: lpType=0x10e510*=0x1, lpData=0x0, lpcbData=0x10e50c*=0x8) returned 0x0 [0072.990] RegQueryValueExW (in: hKey=0x334, lpValueName="StackVersion", lpReserved=0x0, lpType=0x10e510, lpData=0x390380, lpcbData=0x10e50c*=0x8 | out: lpType=0x10e510*=0x1, lpData="2.0", lpcbData=0x10e50c*=0x8) returned 0x0 [0072.994] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.994] GetLastError () returned 0xcb [0072.999] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0072.999] GetLastError () returned 0xcb [0073.030] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e478 | out: phkResult=0x10e478*=0x308) returned 0x0 [0073.031] RegQueryInfoKeyW (in: hKey=0x308, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x10e4e0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e4dc, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x10e4e0*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e4dc*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.032] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x0, lpName=0x390380, lpcchName=0x10e4fc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x10e4fc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.032] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x1, lpName=0x390380, lpcchName=0x10e4fc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x10e4fc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.032] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x2, lpName=0x390380, lpcchName=0x10e4fc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x10e4fc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.033] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x3, lpName=0x390380, lpcchName=0x10e4fc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x10e4fc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.033] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x4, lpName=0x390380, lpcchName=0x10e4fc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x10e4fc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.033] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x5, lpName=0x390380, lpcchName=0x10e4fc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x10e4fc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.033] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x6, lpName=0x390380, lpcchName=0x10e4fc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x10e4fc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.033] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x7, lpName=0x390380, lpcchName=0x10e4fc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x10e4fc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.034] RegEnumKeyExW (in: hKey=0x308, dwIndex=0x8, lpName=0x390380, lpcchName=0x10e4fc, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x10e4fc, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.034] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x30c) returned 0x0 [0073.034] RegOpenKeyExW (in: hKey=0x30c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x0) returned 0x2 [0073.034] RegOpenKeyExW (in: hKey=0x308, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x328) returned 0x0 [0073.034] RegOpenKeyExW (in: hKey=0x328, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x0) returned 0x2 [0073.034] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x338) returned 0x0 [0073.035] RegOpenKeyExW (in: hKey=0x338, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x0) returned 0x2 [0073.035] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x33c) returned 0x0 [0073.035] RegOpenKeyExW (in: hKey=0x33c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x0) returned 0x2 [0073.035] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x340) returned 0x0 [0073.035] RegOpenKeyExW (in: hKey=0x340, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x0) returned 0x2 [0073.036] RegOpenKeyExW (in: hKey=0x308, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x344) returned 0x0 [0073.036] RegOpenKeyExW (in: hKey=0x344, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x0) returned 0x2 [0073.036] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x348) returned 0x0 [0073.036] RegOpenKeyExW (in: hKey=0x348, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x0) returned 0x2 [0073.036] RegOpenKeyExW (in: hKey=0x308, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x34c) returned 0x0 [0073.036] RegOpenKeyExW (in: hKey=0x34c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x0) returned 0x2 [0073.036] RegOpenKeyExW (in: hKey=0x308, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x350) returned 0x0 [0073.037] RegOpenKeyExW (in: hKey=0x350, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e4a8 | out: phkResult=0x10e4a8*=0x354) returned 0x0 [0073.037] RegCloseKey (hKey=0x354) returned 0x0 [0073.037] RegCloseKey (hKey=0x308) returned 0x0 [0073.038] RegCloseKey (hKey=0x350) returned 0x0 [0073.105] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x360ab0, nSize=0x10e5f4 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x10e5f4) returned 0x1 [0073.106] GetLastError () returned 0x3 [0073.107] GetUserNameW (in: lpBuffer=0x390380, pcbBuffer=0x10e5fc | out: lpBuffer="EEBsYm5", pcbBuffer=0x10e5fc) returned 1 [0073.174] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e45c | out: phkResult=0x10e45c*=0x358) returned 0x0 [0073.175] RegQueryInfoKeyW (in: hKey=0x358, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x10e4c4, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e4c0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x10e4c4*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e4c0*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.175] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x0, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.175] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x1, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.175] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x2, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.175] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x3, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.176] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x4, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.176] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x5, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.176] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x6, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.176] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x7, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.176] RegEnumKeyExW (in: hKey=0x358, dwIndex=0x8, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.177] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x35c) returned 0x0 [0073.177] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.177] RegOpenKeyExW (in: hKey=0x358, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x360) returned 0x0 [0073.177] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.178] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x364) returned 0x0 [0073.178] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.178] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x368) returned 0x0 [0073.178] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.178] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x36c) returned 0x0 [0073.179] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.179] RegOpenKeyExW (in: hKey=0x358, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x370) returned 0x0 [0073.179] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.179] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x374) returned 0x0 [0073.179] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.179] RegOpenKeyExW (in: hKey=0x358, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x378) returned 0x0 [0073.180] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.180] RegOpenKeyExW (in: hKey=0x358, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x37c) returned 0x0 [0073.180] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x380) returned 0x0 [0073.180] RegCloseKey (hKey=0x380) returned 0x0 [0073.180] RegCloseKey (hKey=0x358) returned 0x0 [0073.181] RegCloseKey (hKey=0x37c) returned 0x0 [0073.181] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e45c | out: phkResult=0x10e45c*=0x37c) returned 0x0 [0073.181] RegQueryInfoKeyW (in: hKey=0x37c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x10e4c4, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e4c0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x10e4c4*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e4c0*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.181] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x0, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.181] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x1, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.182] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x2, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.182] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x3, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.182] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x4, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.182] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x5, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.182] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x6, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.183] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x7, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.183] RegEnumKeyExW (in: hKey=0x37c, dwIndex=0x8, lpName=0x390380, lpcchName=0x10e4e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x10e4e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.183] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x358) returned 0x0 [0073.183] RegOpenKeyExW (in: hKey=0x358, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.184] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x380) returned 0x0 [0073.184] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.184] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x384) returned 0x0 [0073.184] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.184] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x388) returned 0x0 [0073.185] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.185] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x38c) returned 0x0 [0073.185] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.185] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x390) returned 0x0 [0073.185] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.185] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x394) returned 0x0 [0073.186] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.186] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x398) returned 0x0 [0073.186] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x0) returned 0x2 [0073.186] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x39c) returned 0x0 [0073.186] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e48c | out: phkResult=0x10e48c*=0x3a0) returned 0x0 [0073.186] RegCloseKey (hKey=0x3a0) returned 0x0 [0073.187] RegCloseKey (hKey=0x37c) returned 0x0 [0073.187] RegCloseKey (hKey=0x39c) returned 0x0 [0073.189] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e450 | out: phkResult=0x10e450*=0x39c) returned 0x0 [0073.189] RegQueryInfoKeyW (in: hKey=0x39c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x10e4b8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e4b4, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x10e4b8*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x10e4b4*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.189] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x0, lpName=0x390380, lpcchName=0x10e4d4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x10e4d4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.190] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x1, lpName=0x390380, lpcchName=0x10e4d4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x10e4d4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.190] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x2, lpName=0x390380, lpcchName=0x10e4d4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x10e4d4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.190] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x3, lpName=0x390380, lpcchName=0x10e4d4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x10e4d4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.190] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x4, lpName=0x390380, lpcchName=0x10e4d4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x10e4d4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.191] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x5, lpName=0x390380, lpcchName=0x10e4d4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x10e4d4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.191] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x6, lpName=0x390380, lpcchName=0x10e4d4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x10e4d4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.191] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x7, lpName=0x390380, lpcchName=0x10e4d4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x10e4d4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.191] RegEnumKeyExW (in: hKey=0x39c, dwIndex=0x8, lpName=0x390380, lpcchName=0x10e4d4, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x10e4d4, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0073.191] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x37c) returned 0x0 [0073.191] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x0) returned 0x2 [0073.192] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x3a0) returned 0x0 [0073.192] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x0) returned 0x2 [0073.192] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x3a4) returned 0x0 [0073.192] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x0) returned 0x2 [0073.192] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x3a8) returned 0x0 [0073.192] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x0) returned 0x2 [0073.193] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x3ac) returned 0x0 [0073.193] RegOpenKeyExW (in: hKey=0x3ac, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x0) returned 0x2 [0073.193] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x3b0) returned 0x0 [0073.193] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x0) returned 0x2 [0073.193] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x3b4) returned 0x0 [0073.193] RegOpenKeyExW (in: hKey=0x3b4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x0) returned 0x2 [0073.193] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x3b8) returned 0x0 [0073.193] RegOpenKeyExW (in: hKey=0x3b8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x0) returned 0x2 [0073.194] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x3bc) returned 0x0 [0073.194] RegOpenKeyExW (in: hKey=0x3bc, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e480 | out: phkResult=0x10e480*=0x3c0) returned 0x0 [0073.194] RegCloseKey (hKey=0x3c0) returned 0x0 [0073.194] RegCloseKey (hKey=0x39c) returned 0x0 [0073.194] RegCloseKey (hKey=0x3bc) returned 0x0 [0073.198] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x4340004 [0073.201] GetLastError () returned 0x0 [0073.204] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x22d2c48*="WSMan", lpRawData=0x22d2af0) returned 1 [0073.205] GetLastError () returned 0x0 [0073.206] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.206] GetLastError () returned 0xcb [0073.206] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.207] GetLastError () returned 0xcb [0073.207] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.207] GetLastError () returned 0xcb [0073.207] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.207] GetLastError () returned 0xcb [0073.207] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x360ab0, nSize=0x10e5f4 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x10e5f4) returned 0x1 [0073.208] GetLastError () returned 0xcb [0073.208] GetUserNameW (in: lpBuffer=0x390380, pcbBuffer=0x10e5fc | out: lpBuffer="EEBsYm5", pcbBuffer=0x10e5fc) returned 1 [0073.208] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x22d6ad0*="Alias", lpRawData=0x22d698c) returned 1 [0073.209] GetLastError () returned 0x0 [0073.210] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.210] GetLastError () returned 0xcb [0073.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.211] GetLastError () returned 0xcb [0073.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.211] GetLastError () returned 0xcb [0073.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.211] GetLastError () returned 0xcb [0073.212] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x360ab0, nSize=0x10e5f4 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x10e5f4) returned 0x1 [0073.212] GetLastError () returned 0xcb [0073.212] GetUserNameW (in: lpBuffer=0x390380, pcbBuffer=0x10e5fc | out: lpBuffer="EEBsYm5", pcbBuffer=0x10e5fc) returned 1 [0073.212] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x22daa10*="Environment", lpRawData=0x22da8cc) returned 1 [0073.213] GetLastError () returned 0x0 [0073.214] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.214] GetLastError () returned 0xcb [0073.215] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0073.215] GetLastError () returned 0xcb [0073.215] GetEnvironmentVariableW (in: lpName="HOMEPATH", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="\\Users\\EEBsYm5") returned 0xe [0073.215] GetLastError () returned 0xcb [0073.215] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5", nBufferLength=0x105, lpBuffer=0x10e124, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5", lpFilePart=0x0) returned 0x10 [0073.215] GetLastError () returned 0xcb [0073.216] SetErrorMode (uMode=0x1) returned 0x1 [0073.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5" (normalized: "c:\\users\\eebsym5"), fInfoLevelId=0x0, lpFileInformation=0x10e5a4 | out: lpFileInformation=0x10e5a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0073.216] GetLastError () returned 0xcb [0073.216] SetErrorMode (uMode=0x1) returned 0x1 [0073.216] GetLogicalDrives () returned 0x4 [0073.216] GetLastError () returned 0xcb [0073.217] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x10e048, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.217] GetLastError () returned 0xcb [0073.220] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0073.220] GetLastError () returned 0xcb [0073.220] SetErrorMode (uMode=0x1) returned 0x1 [0073.223] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x390480, nVolumeNameSize=0x32, lpVolumeSerialNumber=0x10e570, lpMaximumComponentLength=0x10e56c, lpFileSystemFlags=0x10e568, lpFileSystemNameBuffer=0x390380, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x10e570*=0x90c08a66, lpMaximumComponentLength=0x10e56c*=0xff, lpFileSystemFlags=0x10e568*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0073.223] GetLastError () returned 0xcb [0073.223] SetErrorMode (uMode=0x1) returned 0x1 [0073.223] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0073.223] GetLastError () returned 0xcb [0073.223] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x10e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.223] GetLastError () returned 0xcb [0073.223] SetErrorMode (uMode=0x1) returned 0x1 [0073.223] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x22dbbac | out: lpFileInformation=0x22dbbac*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0073.224] GetLastError () returned 0xcb [0073.224] SetErrorMode (uMode=0x1) returned 0x1 [0073.224] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x10e0d0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.224] GetLastError () returned 0xcb [0073.224] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x10e05c, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.224] GetLastError () returned 0xcb [0073.224] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0073.224] GetLastError () returned 0xcb [0073.225] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x10e018, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.225] GetLastError () returned 0xcb [0073.225] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0073.225] GetLastError () returned 0xcb [0073.226] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x10e020, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.226] GetLastError () returned 0xcb [0073.226] SetErrorMode (uMode=0x1) returned 0x1 [0073.227] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x22dc804 | out: lpFileInformation=0x22dc804*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0073.227] GetLastError () returned 0xcb [0073.227] SetErrorMode (uMode=0x1) returned 0x1 [0073.227] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x10e028, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.227] GetLastError () returned 0xcb [0073.227] SetErrorMode (uMode=0x1) returned 0x1 [0073.227] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x22dc954 | out: lpFileInformation=0x22dc954*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0073.227] GetLastError () returned 0xcb [0073.227] SetErrorMode (uMode=0x1) returned 0x1 [0073.227] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x10e06c, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.227] GetLastError () returned 0xcb [0073.227] SetErrorMode (uMode=0x1) returned 0x1 [0073.227] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x22dcaf4 | out: lpFileInformation=0x22dcaf4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0073.227] GetLastError () returned 0xcb [0073.228] SetErrorMode (uMode=0x1) returned 0x1 [0073.228] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x360ab0, nSize=0x10e5f4 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x10e5f4) returned 0x1 [0073.228] GetLastError () returned 0xcb [0073.228] GetUserNameW (in: lpBuffer=0x390380, pcbBuffer=0x10e5fc | out: lpBuffer="EEBsYm5", pcbBuffer=0x10e5fc) returned 1 [0073.229] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x22df828*="FileSystem", lpRawData=0x22df6e4) returned 1 [0073.229] GetLastError () returned 0x0 [0073.231] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.231] GetLastError () returned 0xcb [0073.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e010, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.232] GetLastError () returned 0xcb [0073.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.232] GetLastError () returned 0xcb [0073.232] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.232] GetLastError () returned 0xcb [0073.232] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x360ab0, nSize=0x10e5f4 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x10e5f4) returned 0x1 [0073.233] GetLastError () returned 0xcb [0073.233] GetUserNameW (in: lpBuffer=0x390380, pcbBuffer=0x10e5fc | out: lpBuffer="EEBsYm5", pcbBuffer=0x10e5fc) returned 1 [0073.233] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x22e38c4*="Function", lpRawData=0x22e3780) returned 1 [0073.234] GetLastError () returned 0x0 [0073.239] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.239] GetLastError () returned 0xcb [0073.245] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e008, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.245] GetLastError () returned 0xcb [0073.245] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfb8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.246] GetLastError () returned 0xcb [0073.246] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfb8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.246] GetLastError () returned 0xcb [0073.246] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfb8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.246] GetLastError () returned 0xcb [0073.307] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e008, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.307] GetLastError () returned 0xcb [0073.307] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfb8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.308] GetLastError () returned 0xcb [0073.308] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfb8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.308] GetLastError () returned 0xcb [0073.313] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x360ab0, nSize=0x10e5f4 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x10e5f4) returned 0x1 [0073.314] GetLastError () returned 0xcb [0073.314] GetUserNameW (in: lpBuffer=0x390380, pcbBuffer=0x10e5fc | out: lpBuffer="EEBsYm5", pcbBuffer=0x10e5fc) returned 1 [0073.315] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x22fc924*="Registry", lpRawData=0x22fc7e0) returned 1 [0073.317] GetLastError () returned 0x0 [0073.318] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.318] GetLastError () returned 0x0 [0073.318] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.318] GetLastError () returned 0x0 [0073.318] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dfa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.319] GetLastError () returned 0x0 [0073.319] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x360ab0, nSize=0x10e5f4 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x10e5f4) returned 0x1 [0073.319] GetLastError () returned 0x0 [0073.319] GetUserNameW (in: lpBuffer=0x390380, pcbBuffer=0x10e5fc | out: lpBuffer="EEBsYm5", pcbBuffer=0x10e5fc) returned 1 [0073.320] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x23006b8*="Variable", lpRawData=0x2300574) returned 1 [0073.320] GetLastError () returned 0x0 [0073.322] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.322] GetLastError () returned 0xcb [0073.325] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.325] GetLastError () returned 0xcb [0073.327] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x10dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0073.327] GetLastError () returned 0xcb [0073.327] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x10dfa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0073.327] GetLastError () returned 0xcb [0073.327] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x10dfa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0073.328] GetLastError () returned 0xcb [0073.328] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x10dfa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0073.328] GetLastError () returned 0xcb [0073.433] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x360ab0, nSize=0x10e5f4 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x10e5f4) returned 0x1 [0073.433] GetLastError () returned 0x3 [0073.434] GetUserNameW (in: lpBuffer=0x390380, pcbBuffer=0x10e5fc | out: lpBuffer="EEBsYm5", pcbBuffer=0x10e5fc) returned 1 [0073.434] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x230e428*="Certificate", lpRawData=0x230e2e4) returned 1 [0073.435] GetLastError () returned 0x0 [0073.450] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.450] GetLastError () returned 0xcb [0073.457] GetLogicalDrives () returned 0x4 [0073.457] GetLastError () returned 0xcb [0073.457] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x10e16c, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.458] GetLastError () returned 0xcb [0073.458] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0073.458] GetLastError () returned 0xcb [0073.459] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x390380 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0073.459] GetLastError () returned 0xcb [0073.460] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.460] GetLastError () returned 0xcb [0073.460] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.460] GetLastError () returned 0xcb [0073.477] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.477] GetLastError () returned 0xcb [0073.481] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.481] GetLastError () returned 0xcb [0073.482] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x10dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.482] GetLastError () returned 0xcb [0073.482] SetErrorMode (uMode=0x1) returned 0x1 [0073.483] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x2315348 | out: lpFileInformation=0x2315348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0073.483] GetLastError () returned 0xcb [0073.483] SetErrorMode (uMode=0x1) returned 0x1 [0073.483] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x10dfbc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.483] GetLastError () returned 0xcb [0073.483] SetErrorMode (uMode=0x1) returned 0x1 [0073.483] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x23154dc | out: lpFileInformation=0x23154dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0073.483] GetLastError () returned 0xcb [0073.483] SetErrorMode (uMode=0x1) returned 0x1 [0073.491] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.491] GetLastError () returned 0xcb [0073.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x10e104, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.510] GetLastError () returned 0xcb [0073.511] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x10e080, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.511] GetLastError () returned 0xcb [0073.511] SetErrorMode (uMode=0x1) returned 0x1 [0073.511] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x10e500 | out: lpFileInformation=0x10e500*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0073.511] GetLastError () returned 0xcb [0073.511] SetErrorMode (uMode=0x1) returned 0x1 [0073.511] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x10e080, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.511] GetLastError () returned 0xcb [0073.511] SetErrorMode (uMode=0x1) returned 0x1 [0073.511] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x10e500 | out: lpFileInformation=0x10e500*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe662e5bd, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xf24c7e90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf24c7e90, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0073.511] GetLastError () returned 0xcb [0073.511] SetErrorMode (uMode=0x1) returned 0x1 [0073.511] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x10e094, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.512] GetLastError () returned 0xcb [0073.512] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x10e030, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0073.512] GetLastError () returned 0xcb [0073.512] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x10e080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0073.512] GetLastError () returned 0xcb [0073.512] SetErrorMode (uMode=0x1) returned 0x1 [0073.512] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x10e500 | out: lpFileInformation=0x10e500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0073.512] GetLastError () returned 0xcb [0073.512] SetErrorMode (uMode=0x1) returned 0x1 [0073.512] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x10e080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0073.512] GetLastError () returned 0xcb [0073.512] SetErrorMode (uMode=0x1) returned 0x1 [0073.512] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x10e500 | out: lpFileInformation=0x10e500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0073.512] GetLastError () returned 0xcb [0073.512] SetErrorMode (uMode=0x1) returned 0x1 [0073.512] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x10e094, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0073.512] GetLastError () returned 0xcb [0073.512] GetFullPathNameW (in: lpFileName="C:\\Windows\\.", nBufferLength=0x105, lpBuffer=0x10e030, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0073.513] GetLastError () returned 0xcb [0073.513] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x10e080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.513] GetLastError () returned 0xcb [0073.513] SetErrorMode (uMode=0x1) returned 0x1 [0073.513] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x10e500 | out: lpFileInformation=0x10e500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0073.513] GetLastError () returned 0xcb [0073.513] SetErrorMode (uMode=0x1) returned 0x1 [0073.513] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x10e080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.513] GetLastError () returned 0xcb [0073.513] SetErrorMode (uMode=0x1) returned 0x1 [0073.513] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x10e500 | out: lpFileInformation=0x10e500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0073.513] GetLastError () returned 0xcb [0073.513] SetErrorMode (uMode=0x1) returned 0x1 [0073.513] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x10e094, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.513] GetLastError () returned 0xcb [0073.513] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\.", nBufferLength=0x105, lpBuffer=0x10e030, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.513] GetLastError () returned 0xcb [0073.514] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x10e08c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0073.514] GetLastError () returned 0xcb [0073.514] SetErrorMode (uMode=0x1) returned 0x1 [0073.514] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x10e50c | out: lpFileInformation=0x10e50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0073.514] GetLastError () returned 0xcb [0073.514] SetErrorMode (uMode=0x1) returned 0x1 [0073.514] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x10e08c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0073.514] GetLastError () returned 0xcb [0073.514] SetErrorMode (uMode=0x1) returned 0x1 [0073.514] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x10e50c | out: lpFileInformation=0x10e50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0073.514] GetLastError () returned 0xcb [0073.514] SetErrorMode (uMode=0x1) returned 0x1 [0073.514] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x10e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0073.514] GetLastError () returned 0xcb [0073.514] GetFullPathNameW (in: lpFileName="C:\\Windows\\.", nBufferLength=0x105, lpBuffer=0x10e03c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0073.514] GetLastError () returned 0xcb [0073.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x10e08c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.515] GetLastError () returned 0xcb [0073.515] SetErrorMode (uMode=0x1) returned 0x1 [0073.515] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x10e50c | out: lpFileInformation=0x10e50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0073.515] GetLastError () returned 0xcb [0073.515] SetErrorMode (uMode=0x1) returned 0x1 [0073.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x10e08c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.515] GetLastError () returned 0xcb [0073.515] SetErrorMode (uMode=0x1) returned 0x1 [0073.515] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x10e50c | out: lpFileInformation=0x10e50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0073.515] GetLastError () returned 0xcb [0073.515] SetErrorMode (uMode=0x1) returned 0x1 [0073.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x10e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.515] GetLastError () returned 0xcb [0073.515] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\.", nBufferLength=0x105, lpBuffer=0x10e03c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.516] GetLastError () returned 0xcb [0073.519] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x10e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0073.519] GetLastError () returned 0xcb [0073.519] SetErrorMode (uMode=0x1) returned 0x1 [0073.519] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x231d284 | out: lpFileInformation=0x231d284*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb15659b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe68918c0, ftLastAccessTime.dwHighDateTime=0x1d4d605, ftLastWriteTime.dwLowDateTime=0xe68918c0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0073.519] GetLastError () returned 0xcb [0073.519] SetErrorMode (uMode=0x1) returned 0x1 [0073.520] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e1a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.520] GetLastError () returned 0xcb [0073.520] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e154, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.520] GetLastError () returned 0xcb [0073.520] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e154, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.520] GetLastError () returned 0xcb [0073.520] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e154, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.520] GetLastError () returned 0xcb [0073.573] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x360ab0, nSize=0x10e6f8 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x10e6f8) returned 0x1 [0073.573] GetLastError () returned 0xcb [0073.573] GetUserNameW (in: lpBuffer=0x390380, pcbBuffer=0x10e700 | out: lpBuffer="EEBsYm5", pcbBuffer=0x10e700) returned 1 [0073.575] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2335290*="Available", lpRawData=0x233514c) returned 1 [0073.576] GetLastError () returned 0x0 [0073.577] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.577] GetLastError () returned 0xcb [0073.579] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.579] GetLastError () returned 0xcb [0073.595] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e1d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.595] GetLastError () returned 0xcb [0073.595] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.595] GetLastError () returned 0xcb [0073.595] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e188, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.595] GetLastError () returned 0xcb [0073.599] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e17c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.599] GetLastError () returned 0xcb [0073.599] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.599] GetLastError () returned 0xcb [0073.599] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.599] GetLastError () returned 0xcb [0073.599] GetEnvironmentVariableW (in: lpName="HomeDrive", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0073.599] GetLastError () returned 0xcb [0073.599] GetEnvironmentVariableW (in: lpName="HomePath", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="\\Users\\EEBsYm5") returned 0xe [0073.599] GetLastError () returned 0xcb [0073.599] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e17c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.600] GetLastError () returned 0xcb [0073.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.600] GetLastError () returned 0xcb [0073.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.600] GetLastError () returned 0xcb [0073.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e17c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.600] GetLastError () returned 0xcb [0073.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.600] GetLastError () returned 0xcb [0073.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.600] GetLastError () returned 0xcb [0073.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e17c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.600] GetLastError () returned 0xcb [0073.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.600] GetLastError () returned 0xcb [0073.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.601] GetLastError () returned 0xcb [0073.601] GetCurrentProcessId () returned 0xeb4 [0073.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e17c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.601] GetLastError () returned 0xcb [0073.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.601] GetLastError () returned 0xcb [0073.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.601] GetLastError () returned 0xcb [0073.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e168, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.602] GetLastError () returned 0xcb [0073.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e118, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.602] GetLastError () returned 0xcb [0073.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e118, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.602] GetLastError () returned 0xcb [0073.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e168, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.602] GetLastError () returned 0xcb [0073.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e118, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.602] GetLastError () returned 0xcb [0073.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e118, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.603] GetLastError () returned 0xcb [0073.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e17c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.603] GetLastError () returned 0xcb [0073.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.603] GetLastError () returned 0xcb [0073.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.603] GetLastError () returned 0xcb [0073.603] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e68c | out: phkResult=0x10e68c*=0x39c) returned 0x0 [0073.603] RegQueryValueExW (in: hKey=0x39c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e6d4, lpData=0x0, lpcbData=0x10e6d0*=0x0 | out: lpType=0x10e6d4*=0x1, lpData=0x0, lpcbData=0x10e6d0*=0x56) returned 0x0 [0073.604] RegQueryValueExW (in: hKey=0x39c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e6d4, lpData=0x390380, lpcbData=0x10e6d0*=0x56 | out: lpType=0x10e6d4*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e6d0*=0x56) returned 0x0 [0073.604] RegCloseKey (hKey=0x39c) returned 0x0 [0073.604] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e17c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.605] GetLastError () returned 0xcb [0073.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.605] GetLastError () returned 0xcb [0073.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e12c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.605] GetLastError () returned 0xcb [0073.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e164, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.605] GetLastError () returned 0xcb [0073.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e114, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.605] GetLastError () returned 0xcb [0073.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10e114, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.606] GetLastError () returned 0xcb [0073.618] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.618] GetLastError () returned 0xcb [0073.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.618] GetLastError () returned 0xcb [0073.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.618] GetLastError () returned 0xcb [0073.618] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.618] GetLastError () returned 0xcb [0073.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.619] GetLastError () returned 0xcb [0073.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.619] GetLastError () returned 0xcb [0073.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.619] GetLastError () returned 0xcb [0073.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.619] GetLastError () returned 0xcb [0073.619] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.619] GetLastError () returned 0xcb [0073.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.620] GetLastError () returned 0xcb [0073.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.620] GetLastError () returned 0xcb [0073.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.620] GetLastError () returned 0xcb [0073.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.620] GetLastError () returned 0xcb [0073.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.620] GetLastError () returned 0xcb [0073.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.620] GetLastError () returned 0xcb [0073.620] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.620] GetLastError () returned 0xcb [0073.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.621] GetLastError () returned 0xcb [0073.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.621] GetLastError () returned 0xcb [0073.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.621] GetLastError () returned 0xcb [0073.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.621] GetLastError () returned 0xcb [0073.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.621] GetLastError () returned 0xcb [0073.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.621] GetLastError () returned 0xcb [0073.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.621] GetLastError () returned 0xcb [0073.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.622] GetLastError () returned 0xcb [0073.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.622] GetLastError () returned 0xcb [0073.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.622] GetLastError () returned 0xcb [0073.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.622] GetLastError () returned 0xcb [0073.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.622] GetLastError () returned 0xcb [0073.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.622] GetLastError () returned 0xcb [0073.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.622] GetLastError () returned 0xcb [0073.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.622] GetLastError () returned 0xcb [0073.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.622] GetLastError () returned 0xcb [0073.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.623] GetLastError () returned 0xcb [0073.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.623] GetLastError () returned 0xcb [0073.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.623] GetLastError () returned 0xcb [0073.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.623] GetLastError () returned 0xcb [0073.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.623] GetLastError () returned 0xcb [0073.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.623] GetLastError () returned 0xcb [0073.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.623] GetLastError () returned 0xcb [0073.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.623] GetLastError () returned 0xcb [0073.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.623] GetLastError () returned 0xcb [0073.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.624] GetLastError () returned 0xcb [0073.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.624] GetLastError () returned 0xcb [0073.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.624] GetLastError () returned 0xcb [0073.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.624] GetLastError () returned 0xcb [0073.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.624] GetLastError () returned 0xcb [0073.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.624] GetLastError () returned 0xcb [0073.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.624] GetLastError () returned 0xcb [0073.625] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.625] GetLastError () returned 0xcb [0073.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.634] GetLastError () returned 0xcb [0073.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d784, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.634] GetLastError () returned 0xcb [0073.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d784, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.635] GetLastError () returned 0xcb [0073.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d784, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.635] GetLastError () returned 0xcb [0073.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.696] GetLastError () returned 0xcb [0073.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d784, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.696] GetLastError () returned 0xcb [0073.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d784, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.696] GetLastError () returned 0xcb [0073.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d7d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.696] GetLastError () returned 0xcb [0073.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d784, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.696] GetLastError () returned 0xcb [0073.696] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10d784, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0073.696] GetLastError () returned 0xcb [0073.696] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.699] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.699] GetLastError () returned 0xcb [0073.710] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.739] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.739] GetLastError () returned 0xcb [0073.742] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.742] GetLastError () returned 0xcb [0073.748] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.748] GetLastError () returned 0xcb [0073.760] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.760] GetLastError () returned 0xcb [0073.774] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.774] GetLastError () returned 0xcb [0073.782] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.785] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.832] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.832] GetLastError () returned 0xcb [0073.886] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0073.895] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0073.895] GetLastError () returned 0xcb [0074.625] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x366810 [0074.625] GetLastError () returned 0x0 [0074.627] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x366898 [0074.627] GetLastError () returned 0x0 [0074.747] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.787] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.793] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.793] VirtualQuery (in: lpAddress=0x10c3b4, lpBuffer=0x10d3b4, dwLength=0x1c | out: lpBuffer=0x10d3b4*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.837] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.837] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.837] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.837] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.838] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.838] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.838] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.838] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.838] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.838] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.838] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.838] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.838] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.838] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.839] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.839] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.839] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.839] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.839] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.839] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.839] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.839] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.839] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.840] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.840] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.840] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.840] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.840] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.840] VirtualQuery (in: lpAddress=0x10cd00, lpBuffer=0x10dd00, dwLength=0x1c | out: lpBuffer=0x10dd00*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.842] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.842] GetLastError () returned 0xcb [0074.844] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.844] GetLastError () returned 0xcb [0074.844] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dafc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.845] GetLastError () returned 0xcb [0074.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10daac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.845] GetLastError () returned 0xcb [0074.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10daac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.845] GetLastError () returned 0xcb [0074.845] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10daac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.845] GetLastError () returned 0xcb [0074.890] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dafc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.890] GetLastError () returned 0xcb [0074.890] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10daac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.890] GetLastError () returned 0xcb [0074.890] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10daac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.890] GetLastError () returned 0xcb [0074.890] VirtualQuery (in: lpAddress=0x10d028, lpBuffer=0x10e028, dwLength=0x1c | out: lpBuffer=0x10e028*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.892] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10dafc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.892] GetLastError () returned 0xcb [0074.892] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10daac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.892] GetLastError () returned 0xcb [0074.892] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x10daac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0074.892] GetLastError () returned 0xcb [0074.892] VirtualQuery (in: lpAddress=0x10d020, lpBuffer=0x10e020, dwLength=0x1c | out: lpBuffer=0x10e020*(BaseAddress=0x10d000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.892] VirtualQuery (in: lpAddress=0x10ccd4, lpBuffer=0x10dcd4, dwLength=0x1c | out: lpBuffer=0x10dcd4*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.893] VirtualQuery (in: lpAddress=0x10ccd4, lpBuffer=0x10dcd4, dwLength=0x1c | out: lpBuffer=0x10dcd4*(BaseAddress=0x10c000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.896] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e75c | out: phkResult=0x10e75c*=0x3cc) returned 0x0 [0074.896] RegQueryValueExW (in: hKey=0x3cc, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e7a4, lpData=0x0, lpcbData=0x10e7a0*=0x0 | out: lpType=0x10e7a4*=0x1, lpData=0x0, lpcbData=0x10e7a0*=0x56) returned 0x0 [0074.896] RegQueryValueExW (in: hKey=0x3cc, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e7a4, lpData=0x390380, lpcbData=0x10e7a0*=0x56 | out: lpType=0x10e7a4*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e7a0*=0x56) returned 0x0 [0074.897] RegCloseKey (hKey=0x3cc) returned 0x0 [0074.897] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e75c | out: phkResult=0x10e75c*=0x3cc) returned 0x0 [0074.897] RegQueryValueExW (in: hKey=0x3cc, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e7a4, lpData=0x0, lpcbData=0x10e7a0*=0x0 | out: lpType=0x10e7a4*=0x1, lpData=0x0, lpcbData=0x10e7a0*=0x56) returned 0x0 [0074.897] RegQueryValueExW (in: hKey=0x3cc, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x10e7a4, lpData=0x390380, lpcbData=0x10e7a0*=0x56 | out: lpType=0x10e7a4*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x10e7a0*=0x56) returned 0x0 [0074.897] RegCloseKey (hKey=0x3cc) returned 0x0 [0074.899] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x390380 | out: pszPath="C:\\Users\\EEBsYm5\\Documents") returned 0x0 [0074.899] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents", nBufferLength=0x105, lpBuffer=0x10e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents", lpFilePart=0x0) returned 0x1a [0074.899] GetLastError () returned 0x3f0 [0074.899] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x390380 | out: pszPath="C:\\Users\\EEBsYm5\\Documents") returned 0x0 [0074.900] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents", nBufferLength=0x105, lpBuffer=0x10e2f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents", lpFilePart=0x0) returned 0x1a [0074.900] GetLastError () returned 0x3f0 [0074.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", nBufferLength=0x105, lpBuffer=0x10e38c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", lpFilePart=0x0) returned 0x36 [0074.902] GetLastError () returned 0x3f0 [0074.902] SetErrorMode (uMode=0x1) returned 0x1 [0074.902] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x10e80c | out: lpFileInformation=0x10e80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0074.902] GetLastError () returned 0x2 [0074.902] SetErrorMode (uMode=0x1) returned 0x1 [0074.902] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0x10e38c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4b [0074.903] GetLastError () returned 0x2 [0074.903] SetErrorMode (uMode=0x1) returned 0x1 [0074.903] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x10e80c | out: lpFileInformation=0x10e80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0074.903] GetLastError () returned 0x2 [0074.903] SetErrorMode (uMode=0x1) returned 0x1 [0074.903] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\profile.ps1", nBufferLength=0x105, lpBuffer=0x10e38c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\profile.ps1", lpFilePart=0x0) returned 0x38 [0074.903] GetLastError () returned 0x2 [0074.903] SetErrorMode (uMode=0x1) returned 0x1 [0074.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\profile.ps1" (normalized: "c:\\users\\eebsym5\\documents\\windowspowershell\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x10e80c | out: lpFileInformation=0x10e80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0074.903] GetLastError () returned 0x3 [0074.903] SetErrorMode (uMode=0x1) returned 0x1 [0074.903] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0x10e38c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4d [0074.903] GetLastError () returned 0x3 [0074.903] SetErrorMode (uMode=0x1) returned 0x1 [0074.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\users\\eebsym5\\documents\\windowspowershell\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x10e80c | out: lpFileInformation=0x10e80c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0074.904] GetLastError () returned 0x3 [0074.904] SetErrorMode (uMode=0x1) returned 0x1 [0074.906] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.906] GetLastError () returned 0xcb [0074.917] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.917] GetLastError () returned 0xcb [0074.922] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.922] GetLastError () returned 0xcb [0074.924] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.924] GetLastError () returned 0xcb [0074.925] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.925] GetLastError () returned 0xcb [0074.926] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3cc [0074.926] GetLastError () returned 0x0 [0074.926] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3d0 [0074.926] GetLastError () returned 0x0 [0074.926] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3d4 [0074.926] GetLastError () returned 0x0 [0074.926] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3d8 [0074.926] GetLastError () returned 0x0 [0074.926] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3dc [0074.926] GetLastError () returned 0x0 [0074.927] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3e0 [0074.927] GetLastError () returned 0x0 [0074.927] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3e4 [0074.927] GetLastError () returned 0x0 [0074.927] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3e8 [0074.927] GetLastError () returned 0x0 [0074.927] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3ec [0074.927] GetLastError () returned 0x0 [0074.927] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3f0 [0074.927] GetLastError () returned 0x0 [0074.927] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3f4 [0074.927] GetLastError () returned 0x0 [0074.928] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3f8 [0074.928] GetLastError () returned 0x0 [0074.930] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.930] GetLastError () returned 0xcb [0074.932] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.932] GetLastError () returned 0xcb [0074.950] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0074.950] GetLastError () returned 0xcb [0074.951] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x10e84c | out: lpMode=0x10e84c) returned 1 [0074.952] GetLastError () returned 0xcb [0074.953] SetEvent (hEvent=0x3d8) returned 1 [0074.953] GetLastError () returned 0xcb [0074.953] SetEvent (hEvent=0x3cc) returned 1 [0074.953] GetLastError () returned 0xcb [0074.953] SetEvent (hEvent=0x3d0) returned 1 [0074.953] GetLastError () returned 0xcb [0074.953] SetEvent (hEvent=0x3d4) returned 1 [0074.953] GetLastError () returned 0xcb [0074.953] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3fc [0074.953] GetLastError () returned 0x0 [0074.954] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0074.954] GetLastError () returned 0xcb [0074.954] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e6b0 | out: phkResult=0x10e6b0*=0x400) returned 0x0 [0074.954] RegQueryValueExW (in: hKey=0x400, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x10e6f8, lpData=0x0, lpcbData=0x10e6f4*=0x0 | out: lpType=0x10e6f8*=0x0, lpData=0x0, lpcbData=0x10e6f4*=0x0) returned 0x2 [0245.104] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x304 [0245.104] GetLastError () returned 0x0 [0245.104] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x418 [0245.105] GetLastError () returned 0x0 [0245.105] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x334 [0245.105] GetLastError () returned 0x0 [0245.105] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x374 [0245.105] GetLastError () returned 0x0 [0245.105] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x490 [0245.105] GetLastError () returned 0x0 [0245.105] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x488 [0245.105] GetLastError () returned 0x0 [0245.105] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x48c [0245.105] GetLastError () returned 0x0 [0245.105] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3ac [0245.105] GetLastError () returned 0x0 [0245.105] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x468 [0245.105] GetLastError () returned 0x0 [0245.105] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x478 [0245.105] GetLastError () returned 0x0 [0245.105] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x340 [0245.106] GetLastError () returned 0x0 [0245.106] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x344 [0245.106] GetLastError () returned 0x0 [0245.106] SetEvent (hEvent=0x374) returned 1 [0245.106] GetLastError () returned 0x0 [0245.106] SetEvent (hEvent=0x304) returned 1 [0245.106] GetLastError () returned 0x0 [0245.106] SetEvent (hEvent=0x418) returned 1 [0245.106] GetLastError () returned 0x0 [0245.106] SetEvent (hEvent=0x334) returned 1 [0245.106] GetLastError () returned 0x0 [0245.106] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x380 [0245.106] GetLastError () returned 0x0 [0245.106] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x10e6e4 | out: phkResult=0x10e6e4*=0x49c) returned 0x0 [0245.107] RegQueryValueExW (in: hKey=0x49c, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x10e72c, lpData=0x0, lpcbData=0x10e728*=0x0 | out: lpType=0x10e72c*=0x0, lpData=0x0, lpcbData=0x10e728*=0x0) returned 0x2 [0245.388] SetEvent (hEvent=0x490) returned 1 [0245.388] GetLastError () returned 0x0 [0245.388] SetEvent (hEvent=0x488) returned 1 [0245.388] GetLastError () returned 0x0 [0245.389] SetEvent (hEvent=0x48c) returned 1 [0245.389] GetLastError () returned 0x0 [0245.409] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x390380, nSize=0x80 | out: lpBuffer="") returned 0x0 [0245.409] GetLastError () returned 0xcb [0245.421] SetEvent (hEvent=0x320) returned 1 [0245.421] GetLastError () returned 0xcb [0245.422] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x360ab0, nSize=0x10e7c0 | out: lpNameBuffer="CRH2YWU7\\EEBsYm5", nSize=0x10e7c0) returned 0x1 [0245.423] GetLastError () returned 0xcb [0245.423] GetUserNameW (in: lpBuffer=0x390380, pcbBuffer=0x10e7c8 | out: lpBuffer="EEBsYm5", pcbBuffer=0x10e7c8) returned 1 [0245.424] ReportEventW (hEventLog=0x4340004, wType=0x4, wCategory=0x4, dwEventID=0x193, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x6414c6c*="Stopped", lpRawData=0x6414b28) returned 1 [0245.484] GetLastError () returned 0x0 [0245.486] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=0) returned 1 [0245.486] GetLastError () returned 0x0 [0245.489] CoGetContextToken (in: pToken=0x10f4f0 | out: pToken=0x10f4f0) returned 0x0 [0245.489] IUnknown:QueryInterface (in: This=0x305778, riid=0x6caa3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x10f524 | out: ppvObject=0x10f524*=0x305784) returned 0x0 [0245.489] IComThreadingInfo:GetCurrentThreadType (in: This=0x305784, pThreadType=0x10f594 | out: pThreadType=0x10f594*=0) returned 0x0 [0245.489] IUnknown:Release (This=0x305784) returned 0x1 [0245.492] CoGetContextToken (in: pToken=0x10f2c8 | out: pToken=0x10f2c8) returned 0x0 [0245.492] IUnknown:QueryInterface (in: This=0x305778, riid=0x6caa3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x10f2fc | out: ppvObject=0x10f2fc*=0x305784) returned 0x0 [0245.492] IComThreadingInfo:GetCurrentThreadType (in: This=0x305784, pThreadType=0x10f330 | out: pThreadType=0x10f330*=0) returned 0x0 [0245.492] IUnknown:Release (This=0x305784) returned 0x1 [0245.497] CoGetContextToken (in: pToken=0x10f2c8 | out: pToken=0x10f2c8) returned 0x0 [0245.497] IUnknown:QueryInterface (in: This=0x305778, riid=0x6caa3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x10f2fc | out: ppvObject=0x10f2fc*=0x305784) returned 0x0 [0245.497] IComThreadingInfo:GetCurrentThreadType (in: This=0x305784, pThreadType=0x10f330 | out: pThreadType=0x10f330*=0) returned 0x0 [0245.497] IUnknown:Release (This=0x305784) returned 0x1 [0245.518] CoGetContextToken (in: pToken=0x10f2c8 | out: pToken=0x10f2c8) returned 0x0 [0245.518] IUnknown:QueryInterface (in: This=0x305778, riid=0x6caa3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x10f2fc | out: ppvObject=0x10f2fc*=0x305784) returned 0x0 [0245.518] IComThreadingInfo:GetCurrentThreadType (in: This=0x305784, pThreadType=0x10f330 | out: pThreadType=0x10f330*=0) returned 0x0 [0245.518] IUnknown:Release (This=0x305784) returned 0x1 [0245.623] CoGetContextToken (in: pToken=0x10f2a8 | out: pToken=0x10f2a8) returned 0x0 [0245.623] IUnknown:QueryInterface (in: This=0x305778, riid=0x6caa3ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x10f2dc | out: ppvObject=0x10f2dc*=0x305784) returned 0x0 [0245.623] IComThreadingInfo:GetCurrentThreadType (in: This=0x305784, pThreadType=0x10f310 | out: pThreadType=0x10f310*=0) returned 0x0 [0245.623] IUnknown:Release (This=0x305784) returned 0x1 [0245.630] CoUninitialize () Thread: id = 2 os_tid = 0xed0 Thread: id = 3 os_tid = 0xed4 Thread: id = 4 os_tid = 0xedc Thread: id = 5 os_tid = 0xee0 Thread: id = 6 os_tid = 0xee4 [0065.719] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0071.630] LocalFree (hMem=0x37c400) returned 0x0 [0071.630] GetLastError () returned 0x0 [0071.630] CloseHandle (hObject=0x328) returned 1 [0071.630] GetLastError () returned 0x0 [0071.630] CloseHandle (hObject=0x13) returned 1 [0071.631] GetLastError () returned 0x0 [0071.631] CloseHandle (hObject=0xf) returned 1 [0071.631] GetLastError () returned 0x0 [0071.631] RegCloseKey (hKey=0x30c) returned 0x0 [0071.632] RegCloseKey (hKey=0x308) returned 0x0 [0071.632] RegCloseKey (hKey=0x304) returned 0x0 [0071.632] LocalFree (hMem=0x37c420) returned 0x0 [0071.632] GetLastError () returned 0x0 [0071.632] RegCloseKey (hKey=0x334) returned 0x0 [0072.681] RegCloseKey (hKey=0x334) returned 0x0 [0075.088] RegCloseKey (hKey=0x3a0) returned 0x0 [0075.089] RegCloseKey (hKey=0x37c) returned 0x0 [0075.089] RegCloseKey (hKey=0x400) returned 0x0 [0075.089] RegCloseKey (hKey=0x398) returned 0x0 [0075.089] RegCloseKey (hKey=0x394) returned 0x0 [0075.090] RegCloseKey (hKey=0x390) returned 0x0 [0075.090] RegCloseKey (hKey=0x38c) returned 0x0 [0075.090] RegCloseKey (hKey=0x388) returned 0x0 [0075.090] RegCloseKey (hKey=0x384) returned 0x0 [0075.091] RegCloseKey (hKey=0x380) returned 0x0 [0075.091] RegCloseKey (hKey=0x358) returned 0x0 [0075.091] RegCloseKey (hKey=0x3b8) returned 0x0 [0075.091] RegCloseKey (hKey=0x378) returned 0x0 [0075.092] RegCloseKey (hKey=0x374) returned 0x0 [0075.092] RegCloseKey (hKey=0x370) returned 0x0 [0075.092] RegCloseKey (hKey=0x36c) returned 0x0 [0075.092] RegCloseKey (hKey=0x368) returned 0x0 [0075.093] RegCloseKey (hKey=0x364) returned 0x0 [0075.093] RegCloseKey (hKey=0x360) returned 0x0 [0075.093] RegCloseKey (hKey=0x35c) returned 0x0 [0075.093] RegCloseKey (hKey=0x3b4) returned 0x0 [0075.094] RegCloseKey (hKey=0x34c) returned 0x0 [0075.094] RegCloseKey (hKey=0x348) returned 0x0 [0075.094] RegCloseKey (hKey=0x344) returned 0x0 [0075.094] RegCloseKey (hKey=0x340) returned 0x0 [0075.095] RegCloseKey (hKey=0x33c) returned 0x0 [0075.095] RegCloseKey (hKey=0x338) returned 0x0 [0075.095] RegCloseKey (hKey=0x328) returned 0x0 [0075.095] RegCloseKey (hKey=0x30c) returned 0x0 [0075.095] RegCloseKey (hKey=0x3b0) returned 0x0 [0075.096] RegCloseKey (hKey=0x334) returned 0x0 [0075.096] RegCloseKey (hKey=0x304) returned 0x0 [0075.096] RegCloseKey (hKey=0x3ac) returned 0x0 [0075.096] RegCloseKey (hKey=0x3a8) returned 0x0 [0075.096] RegCloseKey (hKey=0x3a4) returned 0x0 [0084.342] CloseHandle (hObject=0x418) returned 1 [0084.342] GetLastError () returned 0x0 [0084.342] CloseHandle (hObject=0x304) returned 1 [0084.343] GetLastError () returned 0x0 [0084.343] CloseHandle (hObject=0x3a8) returned 1 [0084.343] GetLastError () returned 0x0 [0100.832] CoGetContextToken (in: pToken=0x3ecf798 | out: pToken=0x3ecf798) returned 0x0 [0100.832] CoGetContextToken (in: pToken=0x3ecf728 | out: pToken=0x3ecf728) returned 0x0 [0100.832] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x0 [0100.832] CoGetContextToken (in: pToken=0x3ecf728 | out: pToken=0x3ecf728) returned 0x0 [0100.833] IUnknown:Release (This=0x765dcd8) returned 0x1 [0100.833] CoGetContextToken (in: pToken=0x3ecf6f4 | out: pToken=0x3ecf6f4) returned 0x0 [0100.833] WbemLocator:IUnknown:Release (This=0x60ce66c) returned 0x1 [0100.833] IUnknown:Release (This=0x765cbcc) returned 0x0 [0100.850] IUnknown:Release (This=0x765dcd8) returned 0x0 [0105.739] CloseHandle (hObject=0x458) returned 1 [0105.739] GetLastError () returned 0x0 [0105.740] CloseHandle (hObject=0x358) returned 1 [0105.740] GetLastError () returned 0x0 [0105.741] CloseHandle (hObject=0x38c) returned 1 [0105.741] GetLastError () returned 0x0 [0111.722] CoGetContextToken (in: pToken=0x3ecf798 | out: pToken=0x3ecf798) returned 0x0 [0111.722] CoGetContextToken (in: pToken=0x3ecf728 | out: pToken=0x3ecf728) returned 0x0 [0111.722] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0111.722] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x0 [0111.722] CoGetContextToken (in: pToken=0x3ecf728 | out: pToken=0x3ecf728) returned 0x0 [0111.723] WbemLocator:IUnknown:Release (This=0x60d0274) returned 0x1 [0111.723] WbemLocator:IUnknown:Release (This=0x765cb2c) returned 0x0 [0111.739] CoGetContextToken (in: pToken=0x3ecf728 | out: pToken=0x3ecf728) returned 0x0 [0111.739] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x1 [0111.739] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x0 [0245.495] GetLastError () returned 0x0 [0245.495] GetLastError () returned 0x0 [0245.495] LocalFree (hMem=0x366898) returned 0x0 [0245.495] GetLastError () returned 0x0 [0245.496] GetLastError () returned 0x0 [0245.496] GetLastError () returned 0x0 [0245.496] LocalFree (hMem=0x366810) returned 0x0 [0245.496] GetLastError () returned 0x0 [0245.504] IUnknown:Release (This=0x766b010) returned 0x1 [0245.504] IUnknown:Release (This=0x766a690) returned 0x1 [0245.505] IUnknown:Release (This=0x7669d00) returned 0x1 [0245.505] IUnknown:Release (This=0x7669770) returned 0x1 [0245.506] IUnknown:Release (This=0x76691e0) returned 0x1 [0245.506] IUnknown:Release (This=0x7668c50) returned 0x1 [0245.507] IUnknown:Release (This=0x76686c0) returned 0x1 [0245.507] IUnknown:Release (This=0x7668130) returned 0x1 [0245.508] IUnknown:Release (This=0x7666ba0) returned 0x1 [0245.508] IUnknown:Release (This=0x76665a0) returned 0x1 [0245.518] DeregisterEventSource (hEventLog=0x4340004) returned 1 [0245.519] GetLastError () returned 0x0 [0245.524] IUnknown:Release (This=0x76663a8) returned 0x0 [0245.524] IUnknown:Release (This=0x7666028) returned 0x0 [0245.525] IUnknown:Release (This=0x76600c0) returned 0x0 [0245.525] IUnknown:Release (This=0x7660070) returned 0x0 [0245.526] IUnknown:Release (This=0x7665c18) returned 0x0 [0245.526] IUnknown:Release (This=0x7665898) returned 0x0 [0245.527] IUnknown:Release (This=0x7660020) returned 0x0 [0245.527] IUnknown:Release (This=0x765ffd0) returned 0x0 [0245.528] IUnknown:Release (This=0x7665488) returned 0x0 [0245.528] IUnknown:Release (This=0x7665108) returned 0x0 [0245.529] IUnknown:Release (This=0x7664e78) returned 0x0 [0245.529] IUnknown:Release (This=0x7664c80) returned 0x0 [0245.530] IUnknown:Release (This=0x7664900) returned 0x0 [0245.530] IUnknown:Release (This=0x7664690) returned 0x0 [0245.531] IUnknown:Release (This=0x765f008) returned 0x0 [0245.531] IUnknown:Release (This=0x7664098) returned 0x0 [0245.532] IUnknown:Release (This=0x7663ba8) returned 0x0 [0245.532] IUnknown:Release (This=0x7663720) returned 0x0 [0245.532] IUnknown:Release (This=0x76633a0) returned 0x0 [0245.533] IUnknown:Release (This=0x7662f90) returned 0x0 [0245.533] IUnknown:Release (This=0x765ee10) returned 0x0 [0245.534] IUnknown:Release (This=0x765e720) returned 0x0 [0245.534] IUnknown:Release (This=0x765cae8) returned 0x1 [0245.535] CoGetContextToken (in: pToken=0x3ecf6fc | out: pToken=0x3ecf6fc) returned 0x0 [0245.535] WbemLocator:IUnknown:Release (This=0x3e9b14) returned 0x1 [0245.535] IUnknown:Release (This=0x765dc9c) returned 0x0 [0245.582] CloseHandle (hObject=0x3e8) returned 1 [0245.582] GetLastError () returned 0x0 [0245.583] CloseHandle (hObject=0x3e4) returned 1 [0245.583] GetLastError () returned 0x0 [0245.583] CloseHandle (hObject=0x3e0) returned 1 [0245.583] GetLastError () returned 0x0 [0245.583] CloseHandle (hObject=0x3dc) returned 1 [0245.583] GetLastError () returned 0x0 [0245.583] CloseHandle (hObject=0x3d8) returned 1 [0245.584] GetLastError () returned 0x0 [0245.584] CloseHandle (hObject=0x3d4) returned 1 [0245.584] GetLastError () returned 0x0 [0245.584] CloseHandle (hObject=0x3d0) returned 1 [0245.584] GetLastError () returned 0x0 [0245.584] CloseHandle (hObject=0x3cc) returned 1 [0245.584] GetLastError () returned 0x0 [0245.585] CloseHandle (hObject=0x3fc) returned 1 [0245.585] GetLastError () returned 0x0 [0245.585] CloseHandle (hObject=0xf) returned 1 [0245.588] GetLastError () returned 0x0 [0245.588] CloseHandle (hObject=0x3ac) returned 1 [0245.588] GetLastError () returned 0x0 [0245.588] CloseHandle (hObject=0x48c) returned 1 [0245.588] GetLastError () returned 0x0 [0245.589] CloseHandle (hObject=0x488) returned 1 [0245.589] GetLastError () returned 0x0 [0245.589] CloseHandle (hObject=0x490) returned 1 [0245.589] GetLastError () returned 0x0 [0245.589] CloseHandle (hObject=0x374) returned 1 [0245.589] GetLastError () returned 0x0 [0245.589] CloseHandle (hObject=0x334) returned 1 [0245.589] GetLastError () returned 0x0 [0245.590] CloseHandle (hObject=0x3a8) returned 1 [0245.590] GetLastError () returned 0x0 [0245.590] CloseHandle (hObject=0x418) returned 1 [0245.590] GetLastError () returned 0x0 [0245.591] CloseHandle (hObject=0x304) returned 1 [0245.591] GetLastError () returned 0x0 [0245.591] RegCloseKey (hKey=0x49c) returned 0x0 [0245.591] CloseHandle (hObject=0x380) returned 1 [0245.591] GetLastError () returned 0x0 [0245.592] CloseHandle (hObject=0x344) returned 1 [0245.592] GetLastError () returned 0x0 [0245.592] CloseHandle (hObject=0x340) returned 1 [0245.592] GetLastError () returned 0x0 [0245.592] CloseHandle (hObject=0x478) returned 1 [0245.592] GetLastError () returned 0x0 [0245.592] CloseHandle (hObject=0x468) returned 1 [0245.592] GetLastError () returned 0x0 [0245.593] CloseHandle (hObject=0x3f8) returned 1 [0245.593] GetLastError () returned 0x0 [0245.594] UnmapViewOfFile (lpBaseAddress=0x1ca0000) returned 1 [0245.595] CloseHandle (hObject=0x330) returned 1 [0245.595] GetLastError () returned 0x0 [0245.595] RegCloseKey (hKey=0x80000004) returned 0x0 [0245.595] CloseHandle (hObject=0x3f4) returned 1 [0245.595] GetLastError () returned 0x0 [0245.596] CloseHandle (hObject=0x2ec) returned 1 [0245.596] GetLastError () returned 0x0 [0245.596] CloseHandle (hObject=0x3f0) returned 1 [0245.596] GetLastError () returned 0x0 [0245.596] CloseHandle (hObject=0x320) returned 1 [0245.596] GetLastError () returned 0x0 [0245.597] CloseHandle (hObject=0x3ec) returned 1 [0245.597] GetLastError () returned 0x0 [0245.607] CoGetContextToken (in: pToken=0x3ecf8c8 | out: pToken=0x3ecf8c8) returned 0x0 [0245.608] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.608] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x1 [0245.608] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x0 [0245.608] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.608] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x0 [0245.608] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.608] IUnknown:Release (This=0x765cae8) returned 0x0 [0245.609] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.609] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x1 [0245.609] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x0 [0245.609] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.609] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x1 [0245.609] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x0 [0245.610] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.610] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x1 [0245.610] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x0 [0245.610] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.610] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x1 [0245.610] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x0 [0245.610] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.610] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x1 [0245.610] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x0 [0245.611] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.611] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x1 [0245.611] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x0 [0245.611] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.611] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x1 [0245.611] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x0 [0245.612] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.612] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x1 [0245.612] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x0 [0245.612] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.612] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x1 [0245.612] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x0 [0245.612] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.612] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x1 [0245.613] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x0 [0245.613] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.613] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x1 [0245.613] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x0 [0245.613] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.613] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x1 [0245.613] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x0 [0245.614] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.614] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x1 [0245.614] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x0 [0245.614] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.614] IUnknown:Release (This=0x76665a0) returned 0x0 [0245.615] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.615] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x1 [0245.615] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x0 [0245.615] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.615] IUnknown:Release (This=0x7666ba0) returned 0x0 [0245.615] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.615] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x1 [0245.615] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x0 [0245.616] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.616] IUnknown:Release (This=0x7668130) returned 0x0 [0245.616] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.616] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x1 [0245.616] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x0 [0245.616] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.617] IUnknown:Release (This=0x76686c0) returned 0x0 [0245.617] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.617] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x1 [0245.617] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x0 [0245.617] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.617] IUnknown:Release (This=0x7668c50) returned 0x0 [0245.618] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.618] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x1 [0245.618] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x0 [0245.618] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.618] IUnknown:Release (This=0x76691e0) returned 0x0 [0245.619] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.619] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x1 [0245.619] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x0 [0245.619] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.619] IUnknown:Release (This=0x7669770) returned 0x0 [0245.619] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.619] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x1 [0245.620] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x0 [0245.620] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.620] IUnknown:Release (This=0x7669d00) returned 0x0 [0245.620] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.620] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x1 [0245.620] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x0 [0245.621] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.621] IUnknown:Release (This=0x766a690) returned 0x0 [0245.621] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.621] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x1 [0245.621] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x0 [0245.621] CoGetContextToken (in: pToken=0x3ecf858 | out: pToken=0x3ecf858) returned 0x0 [0245.621] IUnknown:Release (This=0x766b010) returned 0x0 [0245.624] CoGetContextToken (in: pToken=0x3ece1ec | out: pToken=0x3ece1ec) returned 0x0 [0245.624] CoGetContextToken (in: pToken=0x3ece17c | out: pToken=0x3ece17c) returned 0x0 [0245.624] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x1 [0245.624] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x0 [0245.625] CoGetContextToken (in: pToken=0x3ece17c | out: pToken=0x3ece17c) returned 0x0 [0245.625] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0245.625] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x0 [0245.626] CoGetContextToken (in: pToken=0x3ece17c | out: pToken=0x3ece17c) returned 0x0 [0245.626] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x1 [0245.626] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x0 [0245.626] CoGetContextToken (in: pToken=0x3ece17c | out: pToken=0x3ece17c) returned 0x0 [0245.626] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x1 [0245.627] IUnknown:Release (This=0x305778) returned 0x0 [0245.627] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x0 Thread: id = 7 os_tid = 0xef0 [0074.961] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0075.028] SetThreadUILanguage (LangId=0x0) returned 0x409 [0075.040] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0075.040] GetLastError () returned 0xcb [0075.049] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", nBufferLength=0x105, lpBuffer=0x50bedc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", lpFilePart=0x0) returned 0x20 [0075.050] GetLastError () returned 0x0 [0075.050] SetErrorMode (uMode=0x1) returned 0x1 [0075.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\pay.ps1"), fInfoLevelId=0x0, lpFileInformation=0x250230c | out: lpFileInformation=0x250230c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0456600, ftCreationTime.dwHighDateTime=0x1d699a5, ftLastAccessTime.dwLowDateTime=0xb0456600, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xb4708400, ftLastWriteTime.dwHighDateTime=0x1d699a3, nFileSizeHigh=0x0, nFileSizeLow=0xe1941)) returned 1 [0075.050] GetLastError () returned 0x0 [0075.050] SetErrorMode (uMode=0x1) returned 0x1 [0075.051] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", nBufferLength=0x105, lpBuffer=0x50bf0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", lpFilePart=0x0) returned 0x20 [0075.051] GetLastError () returned 0x0 [0075.051] SetErrorMode (uMode=0x1) returned 0x1 [0075.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\pay.ps1"), fInfoLevelId=0x0, lpFileInformation=0x50bf530 | out: lpFileInformation=0x50bf530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0456600, ftCreationTime.dwHighDateTime=0x1d699a5, ftLastAccessTime.dwLowDateTime=0xb0456600, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xb4708400, ftLastWriteTime.dwHighDateTime=0x1d699a3, nFileSizeHigh=0x0, nFileSizeLow=0xe1941)) returned 1 [0075.052] GetLastError () returned 0x0 [0075.052] SetErrorMode (uMode=0x1) returned 0x1 [0075.052] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", nBufferLength=0x105, lpBuffer=0x50bf078, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", lpFilePart=0x0) returned 0x20 [0075.052] GetLastError () returned 0x0 [0075.053] SetErrorMode (uMode=0x1) returned 0x1 [0075.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\pay.ps1"), fInfoLevelId=0x0, lpFileInformation=0x50bf4f8 | out: lpFileInformation=0x50bf4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0456600, ftCreationTime.dwHighDateTime=0x1d699a5, ftLastAccessTime.dwLowDateTime=0xb0456600, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xb4708400, ftLastWriteTime.dwHighDateTime=0x1d699a3, nFileSizeHigh=0x0, nFileSizeLow=0xe1941)) returned 1 [0075.053] GetLastError () returned 0x0 [0075.053] SetErrorMode (uMode=0x1) returned 0x1 [0075.054] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", nBufferLength=0x105, lpBuffer=0x50bf0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", lpFilePart=0x0) returned 0x20 [0075.054] GetLastError () returned 0x0 [0075.054] SetErrorMode (uMode=0x1) returned 0x1 [0075.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\pay.ps1"), fInfoLevelId=0x0, lpFileInformation=0x2503c28 | out: lpFileInformation=0x2503c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0456600, ftCreationTime.dwHighDateTime=0x1d699a5, ftLastAccessTime.dwLowDateTime=0xb0456600, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xb4708400, ftLastWriteTime.dwHighDateTime=0x1d699a3, nFileSizeHigh=0x0, nFileSizeLow=0xe1941)) returned 1 [0075.054] GetLastError () returned 0x0 [0075.054] SetErrorMode (uMode=0x1) returned 0x1 [0075.054] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", nBufferLength=0x105, lpBuffer=0x50bf070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", lpFilePart=0x0) returned 0x20 [0075.054] GetLastError () returned 0x0 [0075.055] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0075.055] GetLastError () returned 0xcb [0075.056] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x50bf47c | out: phkResult=0x50bf47c*=0x0) returned 0x2 [0075.056] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x50bf47c | out: phkResult=0x50bf47c*=0x0) returned 0x2 [0075.057] GetEnvironmentVariableW (in: lpName="PSExecutionPolicyPreference", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0075.057] GetLastError () returned 0xcb [0075.057] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x50bf47c | out: phkResult=0x50bf47c*=0x0) returned 0x2 [0075.057] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x50bf47c | out: phkResult=0x50bf47c*=0x418) returned 0x0 [0075.057] RegQueryValueExW (in: hKey=0x418, lpValueName="ExecutionPolicy", lpReserved=0x0, lpType=0x50bf4c4, lpData=0x0, lpcbData=0x50bf4c0*=0x0 | out: lpType=0x50bf4c4*=0x1, lpData=0x0, lpcbData=0x50bf4c0*=0xe) returned 0x0 [0075.057] RegQueryValueExW (in: hKey=0x418, lpValueName="ExecutionPolicy", lpReserved=0x0, lpType=0x50bf4c4, lpData=0x369120, lpcbData=0x50bf4c0*=0xe | out: lpType=0x50bf4c4*=0x1, lpData="Bypass", lpcbData=0x50bf4c0*=0xe) returned 0x0 [0075.058] RegCloseKey (hKey=0x418) returned 0x0 [0075.060] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", nBufferLength=0x105, lpBuffer=0x50bef9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1", lpFilePart=0x0) returned 0x20 [0075.060] GetLastError () returned 0xcb [0075.060] SetErrorMode (uMode=0x1) returned 0x1 [0075.060] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\pay.ps1" (normalized: "c:\\users\\eebsym5\\desktop\\pay.ps1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x418 [0075.060] GetLastError () returned 0x0 [0075.060] GetFileType (hFile=0x418) returned 0x1 [0075.060] SetErrorMode (uMode=0x1) returned 0x1 [0075.060] GetFileType (hFile=0x418) returned 0x1 [0075.061] ReadFile (in: hFile=0x418, lpBuffer=0x25066f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x25066f0*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.062] GetLastError () returned 0x0 [0075.062] ReadFile (in: hFile=0x418, lpBuffer=0x25066f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x25066f0*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.062] GetLastError () returned 0x0 [0075.062] ReadFile (in: hFile=0x418, lpBuffer=0x25066f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x25066f0*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.062] GetLastError () returned 0x0 [0075.097] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.097] GetLastError () returned 0x0 [0075.097] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.097] GetLastError () returned 0x0 [0075.097] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.097] GetLastError () returned 0x0 [0075.097] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.097] GetLastError () returned 0x0 [0075.098] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.098] GetLastError () returned 0x0 [0075.098] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.098] GetLastError () returned 0x0 [0075.099] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.099] GetLastError () returned 0x0 [0075.100] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.100] GetLastError () returned 0x0 [0075.100] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.100] GetLastError () returned 0x0 [0075.100] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.100] GetLastError () returned 0x0 [0075.100] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.100] GetLastError () returned 0x0 [0075.100] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.100] GetLastError () returned 0x0 [0075.100] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.100] GetLastError () returned 0x0 [0075.101] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.101] GetLastError () returned 0x0 [0075.104] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.104] GetLastError () returned 0x0 [0075.104] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.104] GetLastError () returned 0x0 [0075.104] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.104] GetLastError () returned 0x0 [0075.104] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.105] GetLastError () returned 0x0 [0075.105] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.105] GetLastError () returned 0x0 [0075.105] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.105] GetLastError () returned 0x0 [0075.105] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.105] GetLastError () returned 0x0 [0075.105] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.105] GetLastError () returned 0x0 [0075.105] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.105] GetLastError () returned 0x0 [0075.105] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.106] GetLastError () returned 0x0 [0075.106] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.106] GetLastError () returned 0x0 [0075.106] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.106] GetLastError () returned 0x0 [0075.106] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.106] GetLastError () returned 0x0 [0075.106] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.106] GetLastError () returned 0x0 [0075.106] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.107] GetLastError () returned 0x0 [0075.107] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.107] GetLastError () returned 0x0 [0075.113] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.114] GetLastError () returned 0x0 [0075.114] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.114] GetLastError () returned 0x0 [0075.114] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.114] GetLastError () returned 0x0 [0075.114] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.114] GetLastError () returned 0x0 [0075.114] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.115] GetLastError () returned 0x0 [0075.115] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.115] GetLastError () returned 0x0 [0075.115] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.115] GetLastError () returned 0x0 [0075.115] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.115] GetLastError () returned 0x0 [0075.115] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.115] GetLastError () returned 0x0 [0075.115] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.115] GetLastError () returned 0x0 [0075.115] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.116] GetLastError () returned 0x0 [0075.116] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.116] GetLastError () returned 0x0 [0075.116] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.116] GetLastError () returned 0x0 [0075.116] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.116] GetLastError () returned 0x0 [0075.116] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.116] GetLastError () returned 0x0 [0075.116] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.116] GetLastError () returned 0x0 [0075.116] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.117] GetLastError () returned 0x0 [0075.117] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.117] GetLastError () returned 0x0 [0075.117] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.117] GetLastError () returned 0x0 [0075.117] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.117] GetLastError () returned 0x0 [0075.117] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.117] GetLastError () returned 0x0 [0075.117] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.117] GetLastError () returned 0x0 [0075.117] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.118] GetLastError () returned 0x0 [0075.118] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.118] GetLastError () returned 0x0 [0075.118] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.118] GetLastError () returned 0x0 [0075.118] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.118] GetLastError () returned 0x0 [0075.118] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.118] GetLastError () returned 0x0 [0075.118] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.118] GetLastError () returned 0x0 [0075.118] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.119] GetLastError () returned 0x0 [0075.119] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.119] GetLastError () returned 0x0 [0075.119] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.119] GetLastError () returned 0x0 [0075.119] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.120] GetLastError () returned 0x0 [0075.129] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.129] GetLastError () returned 0x0 [0075.129] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.130] GetLastError () returned 0x0 [0075.130] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.130] GetLastError () returned 0x0 [0075.130] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.130] GetLastError () returned 0x0 [0075.130] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.130] GetLastError () returned 0x0 [0075.130] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.130] GetLastError () returned 0x0 [0075.130] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.130] GetLastError () returned 0x0 [0075.130] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.130] GetLastError () returned 0x0 [0075.131] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.131] GetLastError () returned 0x0 [0075.131] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.131] GetLastError () returned 0x0 [0075.131] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.131] GetLastError () returned 0x0 [0075.131] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.131] GetLastError () returned 0x0 [0075.131] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.131] GetLastError () returned 0x0 [0075.131] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.132] GetLastError () returned 0x0 [0075.132] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.132] GetLastError () returned 0x0 [0075.132] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.132] GetLastError () returned 0x0 [0075.132] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.132] GetLastError () returned 0x0 [0075.132] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.132] GetLastError () returned 0x0 [0075.132] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.132] GetLastError () returned 0x0 [0075.132] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.133] GetLastError () returned 0x0 [0075.133] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.133] GetLastError () returned 0x0 [0075.133] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.133] GetLastError () returned 0x0 [0075.133] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.133] GetLastError () returned 0x0 [0075.133] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.133] GetLastError () returned 0x0 [0075.133] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.133] GetLastError () returned 0x0 [0075.134] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.134] GetLastError () returned 0x0 [0075.134] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.134] GetLastError () returned 0x0 [0075.134] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.134] GetLastError () returned 0x0 [0075.134] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.134] GetLastError () returned 0x0 [0075.134] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.134] GetLastError () returned 0x0 [0075.134] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.135] GetLastError () returned 0x0 [0075.135] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.135] GetLastError () returned 0x0 [0075.135] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.135] GetLastError () returned 0x0 [0075.135] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.135] GetLastError () returned 0x0 [0075.135] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.135] GetLastError () returned 0x0 [0075.135] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.135] GetLastError () returned 0x0 [0075.135] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.136] GetLastError () returned 0x0 [0075.136] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.136] GetLastError () returned 0x0 [0075.136] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.136] GetLastError () returned 0x0 [0075.136] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.136] GetLastError () returned 0x0 [0075.136] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.136] GetLastError () returned 0x0 [0075.136] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.136] GetLastError () returned 0x0 [0075.136] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.137] GetLastError () returned 0x0 [0075.137] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.137] GetLastError () returned 0x0 [0075.137] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.137] GetLastError () returned 0x0 [0075.137] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.137] GetLastError () returned 0x0 [0075.137] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.137] GetLastError () returned 0x0 [0075.137] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.137] GetLastError () returned 0x0 [0075.137] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.138] GetLastError () returned 0x0 [0075.138] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.138] GetLastError () returned 0x0 [0075.138] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.138] GetLastError () returned 0x0 [0075.138] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.139] GetLastError () returned 0x0 [0075.139] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.139] GetLastError () returned 0x0 [0075.139] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.139] GetLastError () returned 0x0 [0075.139] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.139] GetLastError () returned 0x0 [0075.139] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.139] GetLastError () returned 0x0 [0075.139] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.139] GetLastError () returned 0x0 [0075.139] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.139] GetLastError () returned 0x0 [0075.140] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.140] GetLastError () returned 0x0 [0075.140] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.140] GetLastError () returned 0x0 [0075.140] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.140] GetLastError () returned 0x0 [0075.140] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.140] GetLastError () returned 0x0 [0075.140] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.140] GetLastError () returned 0x0 [0075.140] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.142] GetLastError () returned 0x0 [0075.167] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.167] GetLastError () returned 0x0 [0075.167] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.167] GetLastError () returned 0x0 [0075.167] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.167] GetLastError () returned 0x0 [0075.168] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.168] GetLastError () returned 0x0 [0075.168] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.168] GetLastError () returned 0x0 [0075.168] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.168] GetLastError () returned 0x0 [0075.168] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.169] GetLastError () returned 0x0 [0075.169] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.169] GetLastError () returned 0x0 [0075.169] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.169] GetLastError () returned 0x0 [0075.169] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.169] GetLastError () returned 0x0 [0075.170] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.170] GetLastError () returned 0x0 [0075.170] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.170] GetLastError () returned 0x0 [0075.170] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.170] GetLastError () returned 0x0 [0075.170] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.170] GetLastError () returned 0x0 [0075.171] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.171] GetLastError () returned 0x0 [0075.171] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.171] GetLastError () returned 0x0 [0075.171] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.171] GetLastError () returned 0x0 [0075.171] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.171] GetLastError () returned 0x0 [0075.172] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.172] GetLastError () returned 0x0 [0075.172] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.172] GetLastError () returned 0x0 [0075.172] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.172] GetLastError () returned 0x0 [0075.172] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.172] GetLastError () returned 0x0 [0075.173] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.173] GetLastError () returned 0x0 [0075.173] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.173] GetLastError () returned 0x0 [0075.173] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.173] GetLastError () returned 0x0 [0075.173] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.173] GetLastError () returned 0x0 [0075.174] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.174] GetLastError () returned 0x0 [0075.174] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.174] GetLastError () returned 0x0 [0075.174] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.174] GetLastError () returned 0x0 [0075.174] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.175] GetLastError () returned 0x0 [0075.175] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.175] GetLastError () returned 0x0 [0075.175] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.175] GetLastError () returned 0x0 [0075.175] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.176] GetLastError () returned 0x0 [0075.176] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.176] GetLastError () returned 0x0 [0075.176] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.176] GetLastError () returned 0x0 [0075.177] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.177] GetLastError () returned 0x0 [0075.177] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.177] GetLastError () returned 0x0 [0075.177] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.177] GetLastError () returned 0x0 [0075.178] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.178] GetLastError () returned 0x0 [0075.178] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.178] GetLastError () returned 0x0 [0075.178] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.178] GetLastError () returned 0x0 [0075.179] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.179] GetLastError () returned 0x0 [0075.179] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.179] GetLastError () returned 0x0 [0075.179] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.179] GetLastError () returned 0x0 [0075.179] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.180] GetLastError () returned 0x0 [0075.180] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.180] GetLastError () returned 0x0 [0075.180] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.180] GetLastError () returned 0x0 [0075.180] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.180] GetLastError () returned 0x0 [0075.181] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.181] GetLastError () returned 0x0 [0075.181] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.200] GetLastError () returned 0x0 [0075.201] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.201] GetLastError () returned 0x0 [0075.201] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.201] GetLastError () returned 0x0 [0075.201] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.201] GetLastError () returned 0x0 [0075.201] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.202] GetLastError () returned 0x0 [0075.202] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.202] GetLastError () returned 0x0 [0075.202] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.202] GetLastError () returned 0x0 [0075.202] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.202] GetLastError () returned 0x0 [0075.203] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.203] GetLastError () returned 0x0 [0075.203] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.203] GetLastError () returned 0x0 [0075.203] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.203] GetLastError () returned 0x0 [0075.203] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.203] GetLastError () returned 0x0 [0075.204] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.204] GetLastError () returned 0x0 [0075.204] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.204] GetLastError () returned 0x0 [0075.204] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.205] GetLastError () returned 0x0 [0075.206] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.206] GetLastError () returned 0x0 [0075.206] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.206] GetLastError () returned 0x0 [0075.206] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.206] GetLastError () returned 0x0 [0075.206] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.206] GetLastError () returned 0x0 [0075.207] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.207] GetLastError () returned 0x0 [0075.207] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.207] GetLastError () returned 0x0 [0075.207] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.207] GetLastError () returned 0x0 [0075.207] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.207] GetLastError () returned 0x0 [0075.208] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.208] GetLastError () returned 0x0 [0075.208] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.208] GetLastError () returned 0x0 [0075.208] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.208] GetLastError () returned 0x0 [0075.208] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.208] GetLastError () returned 0x0 [0075.209] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.209] GetLastError () returned 0x0 [0075.209] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.209] GetLastError () returned 0x0 [0075.209] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.209] GetLastError () returned 0x0 [0075.209] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.209] GetLastError () returned 0x0 [0075.210] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.210] GetLastError () returned 0x0 [0075.210] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.210] GetLastError () returned 0x0 [0075.210] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.210] GetLastError () returned 0x0 [0075.210] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.210] GetLastError () returned 0x0 [0075.211] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.211] GetLastError () returned 0x0 [0075.211] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.211] GetLastError () returned 0x0 [0075.211] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.211] GetLastError () returned 0x0 [0075.211] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.211] GetLastError () returned 0x0 [0075.212] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.212] GetLastError () returned 0x0 [0075.212] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.212] GetLastError () returned 0x0 [0075.212] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.212] GetLastError () returned 0x0 [0075.212] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.213] GetLastError () returned 0x0 [0075.213] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.213] GetLastError () returned 0x0 [0075.213] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.213] GetLastError () returned 0x0 [0075.213] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.213] GetLastError () returned 0x0 [0075.213] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x1000, lpOverlapped=0x0) returned 1 [0075.214] GetLastError () returned 0x0 [0075.214] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x941, lpOverlapped=0x0) returned 1 [0075.214] GetLastError () returned 0x0 [0075.214] ReadFile (in: hFile=0x418, lpBuffer=0x1f0fe4d, nNumberOfBytesToRead=0x2bf, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f0fe4d*, lpNumberOfBytesRead=0x50bf504*=0x0, lpOverlapped=0x0) returned 1 [0075.214] GetLastError () returned 0x0 [0075.214] ReadFile (in: hFile=0x418, lpBuffer=0x1f10938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x50bf504, lpOverlapped=0x0 | out: lpBuffer=0x1f10938*, lpNumberOfBytesRead=0x50bf504*=0x0, lpOverlapped=0x0) returned 1 [0075.214] GetLastError () returned 0x0 [0075.214] CloseHandle (hObject=0x418) returned 1 [0075.214] GetLastError () returned 0x0 [0075.220] VirtualQuery (in: lpAddress=0x50be50c, lpBuffer=0x50bf50c, dwLength=0x1c | out: lpBuffer=0x50bf50c*(BaseAddress=0x50be000, AllocationBase=0x4730000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0077.766] VirtualQuery (in: lpAddress=0x50bdf54, lpBuffer=0x50bef54, dwLength=0x1c | out: lpBuffer=0x50bef54*(BaseAddress=0x50bd000, AllocationBase=0x4730000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0077.805] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.805] GetLastError () returned 0xcb [0077.815] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.815] GetLastError () returned 0xcb [0077.843] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.843] GetLastError () returned 0xcb [0077.847] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.847] GetLastError () returned 0xcb [0077.849] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.849] GetLastError () returned 0xcb [0077.853] VirtualQuery (in: lpAddress=0x50be71c, lpBuffer=0x50bf71c, dwLength=0x1c | out: lpBuffer=0x50bf71c*(BaseAddress=0x50be000, AllocationBase=0x4730000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0077.854] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.854] GetLastError () returned 0xcb [0077.857] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.857] GetLastError () returned 0xcb [0077.857] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.857] GetLastError () returned 0xcb [0077.864] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.864] GetLastError () returned 0xcb [0077.914] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.914] GetLastError () returned 0xcb [0077.977] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.977] GetLastError () returned 0xcb [0077.979] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.979] GetLastError () returned 0xcb [0077.981] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.981] GetLastError () returned 0xcb [0077.983] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.983] GetLastError () returned 0xcb [0077.984] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.984] GetLastError () returned 0xcb [0077.985] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.985] GetLastError () returned 0xcb [0077.987] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0077.987] GetLastError () returned 0xcb [0078.021] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369120, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.021] GetLastError () returned 0xcb [0078.120] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.120] GetLastError () returned 0xcb [0078.400] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0078.400] GetLastError () returned 0xcb [0079.350] GetStringTypeExW (in: Locale=0x400, dwInfoType=0x1, lpSrcStr="*", cchSrc=1, lpCharType=0x50bd680 | out: lpCharType=0x50bd680) returned 1 [0079.540] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x50be968, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0079.540] GetLastError () returned 0xcb [0079.946] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0079.946] GetLastError () returned 0xcb [0079.950] GetCurrentProcess () returned 0xffffffff [0079.950] GetLastError () returned 0x3f0 [0079.950] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x50bf1a0 | out: TokenHandle=0x50bf1a0*=0x418) returned 1 [0079.950] GetLastError () returned 0x3f0 [0079.955] GetVersionExW (in: lpVersionInformation=0x369190*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x369190*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0079.955] GetLastError () returned 0x3f0 [0079.990] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x3d3340 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\") returned 0x24 [0079.991] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x50bed54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x24 [0079.991] GetLastError () returned 0x0 [0079.992] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0", nBufferLength=0x105, lpBuffer=0x50bed60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0", lpFilePart=0x0) returned 0x2c [0079.993] GetLastError () returned 0x0 [0079.993] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0", nBufferLength=0x105, lpBuffer=0x50bed04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0", lpFilePart=0x0) returned 0x2c [0079.993] GetLastError () returned 0x0 [0079.993] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.tmp", nBufferLength=0x105, lpBuffer=0x50bec64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.tmp", lpFilePart=0x0) returned 0x30 [0079.993] GetLastError () returned 0x0 [0079.993] SetErrorMode (uMode=0x1) returned 0x1 [0079.993] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0079.995] GetLastError () returned 0x0 [0079.995] GetFileType (hFile=0x3a4) returned 0x1 [0079.995] SetErrorMode (uMode=0x1) returned 0x1 [0079.995] GetFileType (hFile=0x3a4) returned 0x1 [0079.997] CloseHandle (hObject=0x3a4) returned 1 [0079.998] GetLastError () returned 0x0 [0079.998] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.0.cs", nBufferLength=0x105, lpBuffer=0x50becc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.0.cs", lpFilePart=0x0) returned 0x31 [0079.998] GetLastError () returned 0x0 [0079.998] SetErrorMode (uMode=0x1) returned 0x1 [0079.998] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.0.cs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0079.999] GetLastError () returned 0x0 [0079.999] GetFileType (hFile=0x3a4) returned 0x1 [0079.999] SetErrorMode (uMode=0x1) returned 0x1 [0079.999] GetFileType (hFile=0x3a4) returned 0x1 [0080.002] WriteFile (in: hFile=0x3a4, lpBuffer=0x65a47e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x50bf1ec, lpOverlapped=0x0 | out: lpBuffer=0x65a47e4*, lpNumberOfBytesWritten=0x50bf1ec*=0x1000, lpOverlapped=0x0) returned 1 [0080.004] GetLastError () returned 0x0 [0080.004] WriteFile (in: hFile=0x3a4, lpBuffer=0x65a47e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x50bf1ec, lpOverlapped=0x0 | out: lpBuffer=0x65a47e4*, lpNumberOfBytesWritten=0x50bf1ec*=0x1000, lpOverlapped=0x0) returned 1 [0080.004] GetLastError () returned 0x0 [0080.005] WriteFile (in: hFile=0x3a4, lpBuffer=0x65a47e4*, nNumberOfBytesToWrite=0x31e, lpNumberOfBytesWritten=0x50bf208, lpOverlapped=0x0 | out: lpBuffer=0x65a47e4*, lpNumberOfBytesWritten=0x50bf208*=0x31e, lpOverlapped=0x0) returned 1 [0080.005] GetLastError () returned 0x0 [0080.013] CloseHandle (hObject=0x3a4) returned 1 [0080.015] GetLastError () returned 0x0 [0080.021] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll", nBufferLength=0x105, lpBuffer=0x50bec74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll", lpFilePart=0x0) returned 0x30 [0080.021] GetLastError () returned 0x0 [0080.022] SetErrorMode (uMode=0x1) returned 0x1 [0080.022] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0080.023] GetLastError () returned 0x0 [0080.023] GetFileType (hFile=0x3a4) returned 0x1 [0080.023] SetErrorMode (uMode=0x1) returned 0x1 [0080.023] GetFileType (hFile=0x3a4) returned 0x1 [0080.023] CloseHandle (hObject=0x3a4) returned 1 [0080.023] GetLastError () returned 0x0 [0080.031] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.cmdline", nBufferLength=0x105, lpBuffer=0x50bec38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.cmdline", lpFilePart=0x0) returned 0x34 [0080.031] GetLastError () returned 0x0 [0080.031] SetErrorMode (uMode=0x1) returned 0x1 [0080.031] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.cmdline"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0080.032] GetLastError () returned 0x0 [0080.032] GetFileType (hFile=0x3a4) returned 0x1 [0080.032] SetErrorMode (uMode=0x1) returned 0x1 [0080.032] GetFileType (hFile=0x3a4) returned 0x1 [0080.032] WriteFile (in: hFile=0x3a4, lpBuffer=0x65a81c0*, nNumberOfBytesToWrite=0x139, lpNumberOfBytesWritten=0x50bf180, lpOverlapped=0x0 | out: lpBuffer=0x65a81c0*, lpNumberOfBytesWritten=0x50bf180*=0x139, lpOverlapped=0x0) returned 1 [0080.034] GetLastError () returned 0x0 [0080.035] CloseHandle (hObject=0x3a4) returned 1 [0080.036] GetLastError () returned 0x0 [0080.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x50bece8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0080.038] GetLastError () returned 0x0 [0080.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", nBufferLength=0x105, lpBuffer=0x50bed28, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", lpFilePart=0x0) returned 0x35 [0080.038] GetLastError () returned 0x0 [0080.038] SetErrorMode (uMode=0x1) returned 0x1 [0080.038] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe"), fInfoLevelId=0x0, lpFileInformation=0x50bf1a8 | out: lpFileInformation=0x50bf1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b437aa, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0xf8b437aa, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9b67d5fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x12d38)) returned 1 [0080.040] GetLastError () returned 0x0 [0080.040] SetErrorMode (uMode=0x1) returned 0x1 [0080.040] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x3d3340 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0080.041] GetLastError () returned 0x0 [0080.041] GetCurrentProcess () returned 0xffffffff [0080.041] GetLastError () returned 0x3f0 [0080.041] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x50bf0d8 | out: TokenHandle=0x50bf0d8*=0x3a8) returned 1 [0080.041] GetLastError () returned 0x3f0 [0080.043] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.out", nBufferLength=0x105, lpBuffer=0x50beb24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.out", lpFilePart=0x0) returned 0x30 [0080.043] GetLastError () returned 0x3f0 [0080.043] SetErrorMode (uMode=0x1) returned 0x1 [0080.044] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.out"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x65aa198, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3a4 [0080.044] GetLastError () returned 0x0 [0080.044] GetFileType (hFile=0x3a4) returned 0x1 [0080.044] SetErrorMode (uMode=0x1) returned 0x1 [0080.045] GetFileType (hFile=0x3a4) returned 0x1 [0080.045] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.err", nBufferLength=0x105, lpBuffer=0x50beb24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.err", lpFilePart=0x0) returned 0x30 [0080.045] GetLastError () returned 0x0 [0080.045] SetErrorMode (uMode=0x1) returned 0x1 [0080.045] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.err"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x65aa3a8, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ac [0080.046] GetLastError () returned 0x0 [0080.046] GetFileType (hFile=0x3ac) returned 0x1 [0080.046] SetErrorMode (uMode=0x1) returned 0x1 [0080.046] GetFileType (hFile=0x3ac) returned 0x1 [0080.047] WriteFile (in: hFile=0x3a4, lpBuffer=0x65abd00*, nNumberOfBytesToWrite=0x18c, lpNumberOfBytesWritten=0x50bf078, lpOverlapped=0x0 | out: lpBuffer=0x65abd00*, lpNumberOfBytesWritten=0x50bf078*=0x18c, lpOverlapped=0x0) returned 1 [0080.049] GetLastError () returned 0x0 [0080.049] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0080.063] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.cmdline\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x65b7d0c, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x369190*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3, hStdOutput=0x3a4, hStdError=0x3ac), lpProcessInformation=0x65aa53c | out: lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.cmdline\"", lpProcessInformation=0x65aa53c*(hProcess=0x334, hThread=0x304, dwProcessId=0xefc, dwThreadId=0xf00)) returned 1 [0080.080] GetLastError () returned 0x7f [0080.080] CloseHandle (hObject=0x3a4) returned 1 [0080.081] GetLastError () returned 0x7f [0080.081] CloseHandle (hObject=0x3ac) returned 1 [0080.081] GetLastError () returned 0x7f [0080.084] WaitForSingleObject (hHandle=0x334, dwMilliseconds=0x927c0) returned 0x0 [0084.054] GetLastError () returned 0x7f [0084.055] GetExitCodeProcess (in: hProcess=0x334, lpExitCode=0x50bf164 | out: lpExitCode=0x50bf164*=0x0) returned 1 [0084.055] GetLastError () returned 0x7f [0084.055] CloseHandle (hObject=0x334) returned 1 [0084.055] GetLastError () returned 0x7f [0084.055] CloseHandle (hObject=0x304) returned 1 [0084.055] GetLastError () returned 0x7f [0084.055] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll", nBufferLength=0x105, lpBuffer=0x50bec70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll", lpFilePart=0x0) returned 0x30 [0084.055] GetLastError () returned 0x7f [0084.056] SetErrorMode (uMode=0x1) returned 0x1 [0084.056] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0084.056] GetLastError () returned 0x0 [0084.056] GetFileType (hFile=0x304) returned 0x1 [0084.056] SetErrorMode (uMode=0x1) returned 0x1 [0084.056] GetFileType (hFile=0x304) returned 0x1 [0084.058] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x50bf224 | out: lpFileSizeHigh=0x50bf224*=0x0) returned 0x1800 [0084.058] GetLastError () returned 0x0 [0084.058] ReadFile (in: hFile=0x304, lpBuffer=0x65b859c, nNumberOfBytesToRead=0x1800, lpNumberOfBytesRead=0x50bf1cc, lpOverlapped=0x0 | out: lpBuffer=0x65b859c*, lpNumberOfBytesRead=0x50bf1cc*=0x1800, lpOverlapped=0x0) returned 1 [0084.058] GetLastError () returned 0x0 [0084.075] CloseHandle (hObject=0x304) returned 1 [0084.076] GetLastError () returned 0x0 [0084.076] GetCurrentProcess () returned 0xffffffff [0084.076] GetLastError () returned 0x3f0 [0084.076] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x50bf1c4 | out: TokenHandle=0x50bf1c4*=0x304) returned 1 [0084.077] GetLastError () returned 0x3f0 [0084.078] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.pdb", nBufferLength=0x105, lpBuffer=0x50bed9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.pdb", lpFilePart=0x0) returned 0x30 [0084.078] GetLastError () returned 0x3f0 [0084.079] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.pdb" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.pdb")) returned 1 [0084.081] GetLastError () returned 0x3f0 [0084.081] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.out", nBufferLength=0x105, lpBuffer=0x50bed9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.out", lpFilePart=0x0) returned 0x30 [0084.081] GetLastError () returned 0x3f0 [0084.081] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.out")) returned 1 [0084.088] GetLastError () returned 0x3f0 [0084.088] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.cmdline", nBufferLength=0x105, lpBuffer=0x50bed9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.cmdline", lpFilePart=0x0) returned 0x34 [0084.088] GetLastError () returned 0x3f0 [0084.088] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.cmdline")) returned 1 [0084.088] GetLastError () returned 0x3f0 [0084.088] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.tmp", nBufferLength=0x105, lpBuffer=0x50bed9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.tmp", lpFilePart=0x0) returned 0x30 [0084.088] GetLastError () returned 0x3f0 [0084.088] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.tmp")) returned 1 [0084.089] GetLastError () returned 0x3f0 [0084.089] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll", nBufferLength=0x105, lpBuffer=0x50bed9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll", lpFilePart=0x0) returned 0x30 [0084.089] GetLastError () returned 0x3f0 [0084.089] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.dll")) returned 1 [0084.091] GetLastError () returned 0x3f0 [0084.091] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.0.cs", nBufferLength=0x105, lpBuffer=0x50bed9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.0.cs", lpFilePart=0x0) returned 0x31 [0084.091] GetLastError () returned 0x3f0 [0084.091] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.0.cs")) returned 1 [0084.091] GetLastError () returned 0x3f0 [0084.091] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.err", nBufferLength=0x105, lpBuffer=0x50bed9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.err", lpFilePart=0x0) returned 0x30 [0084.091] GetLastError () returned 0x3f0 [0084.092] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\5yhng4j0.err")) returned 1 [0084.092] GetLastError () returned 0x3f0 [0084.515] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.515] GetLastError () returned 0xcb [0084.601] VirtualQuery (in: lpAddress=0x50be308, lpBuffer=0x50bf308, dwLength=0x1c | out: lpBuffer=0x50bf308*(BaseAddress=0x50be000, AllocationBase=0x4730000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0084.621] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.621] GetLastError () returned 0xcb [0084.630] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.630] GetLastError () returned 0xcb [0084.651] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.651] GetLastError () returned 0xcb [0084.707] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0084.707] GetLastError () returned 0xcb [0085.295] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3a8 [0085.296] GetLastError () returned 0x0 [0085.298] CoGetObjectContext (in: riid=0x6bfeb2c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bef1c | out: ppv=0x50bef1c*=0x305784) returned 0x0 [0086.083] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x50be0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0086.083] GetLastError () returned 0x0 [0086.087] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\\\wminet_utils.dll") returned 0x3e00000 [0086.289] GetProcAddress (hModule=0x3e00000, lpProcName="ResetSecurity") returned 0x3e01944 [0086.295] GetProcAddress (hModule=0x3e00000, lpProcName="SetSecurity") returned 0x3e01986 [0086.300] GetProcAddress (hModule=0x3e00000, lpProcName="BlessIWbemServices") returned 0x3e019cc [0086.305] GetProcAddress (hModule=0x3e00000, lpProcName="BlessIWbemServicesObject") returned 0x3e01a1e [0086.324] GetProcAddress (hModule=0x3e00000, lpProcName="GetPropertyHandle") returned 0x3e01a70 [0086.327] GetProcAddress (hModule=0x3e00000, lpProcName="WritePropertyValue") returned 0x3e01a89 [0086.329] GetProcAddress (hModule=0x3e00000, lpProcName="Clone") returned 0x3e01aa2 [0086.332] GetProcAddress (hModule=0x3e00000, lpProcName="VerifyClientKey") returned 0x3e02270 [0086.335] GetProcAddress (hModule=0x3e00000, lpProcName="GetQualifierSet") returned 0x3e01d73 [0086.337] GetProcAddress (hModule=0x3e00000, lpProcName="Get") returned 0x3e01b96 [0086.340] GetProcAddress (hModule=0x3e00000, lpProcName="Put") returned 0x3e01b7a [0086.343] GetProcAddress (hModule=0x3e00000, lpProcName="Delete") returned 0x3e01bb5 [0086.345] GetProcAddress (hModule=0x3e00000, lpProcName="GetNames") returned 0x3e01bc8 [0086.347] GetProcAddress (hModule=0x3e00000, lpProcName="BeginEnumeration") returned 0x3e01be4 [0086.348] GetProcAddress (hModule=0x3e00000, lpProcName="Next") returned 0x3e01bf7 [0086.349] GetProcAddress (hModule=0x3e00000, lpProcName="EndEnumeration") returned 0x3e01c16 [0086.350] GetProcAddress (hModule=0x3e00000, lpProcName="GetPropertyQualifierSet") returned 0x3e01c26 [0086.350] GetProcAddress (hModule=0x3e00000, lpProcName="Clone") returned 0x3e01aa2 [0086.351] GetProcAddress (hModule=0x3e00000, lpProcName="GetObjectText") returned 0x3e01c3c [0086.351] GetProcAddress (hModule=0x3e00000, lpProcName="SpawnDerivedClass") returned 0x3e01c52 [0086.352] GetProcAddress (hModule=0x3e00000, lpProcName="SpawnInstance") returned 0x3e01c68 [0086.353] GetProcAddress (hModule=0x3e00000, lpProcName="CompareTo") returned 0x3e01c7e [0086.354] GetProcAddress (hModule=0x3e00000, lpProcName="GetPropertyOrigin") returned 0x3e01c94 [0086.354] GetProcAddress (hModule=0x3e00000, lpProcName="InheritsFrom") returned 0x3e01caa [0086.355] GetProcAddress (hModule=0x3e00000, lpProcName="GetMethod") returned 0x3e01cbd [0086.356] GetProcAddress (hModule=0x3e00000, lpProcName="PutMethod") returned 0x3e01cd9 [0086.356] GetProcAddress (hModule=0x3e00000, lpProcName="DeleteMethod") returned 0x3e01cf5 [0086.357] GetProcAddress (hModule=0x3e00000, lpProcName="BeginMethodEnumeration") returned 0x3e01d08 [0086.358] GetProcAddress (hModule=0x3e00000, lpProcName="NextMethod") returned 0x3e01d1b [0086.358] GetProcAddress (hModule=0x3e00000, lpProcName="EndMethodEnumeration") returned 0x3e01d37 [0086.359] GetProcAddress (hModule=0x3e00000, lpProcName="GetMethodQualifierSet") returned 0x3e01d47 [0086.360] GetProcAddress (hModule=0x3e00000, lpProcName="GetMethodOrigin") returned 0x3e01d5d [0086.360] GetProcAddress (hModule=0x3e00000, lpProcName="QualifierSet_Get") returned 0x3e01d86 [0086.361] GetProcAddress (hModule=0x3e00000, lpProcName="QualifierSet_Put") returned 0x3e01da2 [0086.361] GetProcAddress (hModule=0x3e00000, lpProcName="QualifierSet_Delete") returned 0x3e01dbb [0086.362] GetProcAddress (hModule=0x3e00000, lpProcName="QualifierSet_GetNames") returned 0x3e01dce [0086.363] GetProcAddress (hModule=0x3e00000, lpProcName="QualifierSet_BeginEnumeration") returned 0x3e01de4 [0086.363] GetProcAddress (hModule=0x3e00000, lpProcName="QualifierSet_Next") returned 0x3e01df7 [0086.364] GetProcAddress (hModule=0x3e00000, lpProcName="QualifierSet_EndEnumeration") returned 0x3e01e13 [0086.364] GetProcAddress (hModule=0x3e00000, lpProcName="GetCurrentApartmentType") returned 0x3e01d73 [0086.366] GetProcAddress (hModule=0x3e00000, lpProcName="GetDemultiplexedStub") returned 0x3e018fd [0086.367] GetProcAddress (hModule=0x3e00000, lpProcName="CreateInstanceEnumWmi") returned 0x3e01580 [0086.367] GetProcAddress (hModule=0x3e00000, lpProcName="CreateClassEnumWmi") returned 0x3e015f6 [0086.368] GetProcAddress (hModule=0x3e00000, lpProcName="ExecQueryWmi") returned 0x3e0169e [0086.369] GetProcAddress (hModule=0x3e00000, lpProcName="ExecNotificationQueryWmi") returned 0x3e01717 [0086.369] GetProcAddress (hModule=0x3e00000, lpProcName="PutInstanceWmi") returned 0x3e01790 [0086.371] GetProcAddress (hModule=0x3e00000, lpProcName="PutClassWmi") returned 0x3e01810 [0086.371] GetProcAddress (hModule=0x3e00000, lpProcName="CloneEnumWbemClassObject") returned 0x3e01890 [0086.372] GetProcAddress (hModule=0x3e00000, lpProcName="ConnectServerWmi") returned 0x3e024b7 [0086.373] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bef14 | out: pAptType=0x50bef14*=1) returned 0x0 [0086.379] IUnknown:QueryInterface (in: This=0x305784, riid=0x6bfeb14*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bef18 | out: ppvObject=0x50bef18*=0x0) returned 0x80004002 [0086.379] IUnknown:Release (This=0x305784) returned 0x0 [0086.425] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x50beacc | out: lpiid=0x50beacc) returned 0x0 [0086.425] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bea34 | out: ppv=0x50bea34*=0x7650810) returned 0x0 [0086.982] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650810, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be864 | out: ppvObject=0x50be864*=0x0) returned 0x80004002 [0086.982] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650810, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be89c | out: ppvObject=0x50be89c*=0x7650820) returned 0x0 [0086.982] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be640 | out: ppvObject=0x50be640*=0x7650820) returned 0x0 [0086.983] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be5fc | out: ppvObject=0x50be5fc*=0x0) returned 0x80004002 [0086.983] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x3 [0086.983] CoGetContextToken (in: pToken=0x50be488 | out: pToken=0x50be488) returned 0x0 [0086.984] CoGetObjectContext (in: riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3cc9fc | out: ppv=0x3cc9fc*=0x305778) returned 0x0 [0086.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be470 | out: ppvObject=0x50be470*=0x3dc340) returned 0x0 [0086.984] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x3dc340, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be478 | out: pCid=0x50be478*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0086.984] WbemDefPath:IUnknown:Release (This=0x3dc340) returned 0x3 [0086.984] CoGetContextToken (in: pToken=0x50be480 | out: pToken=0x50be480) returned 0x0 [0086.984] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x4 [0086.985] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be4f4 | out: ppvObject=0x50be4f4*=0x0) returned 0x80004002 [0086.985] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x3 [0086.985] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0086.985] WbemDefPath:IUnknown:Release (This=0x7650810) returned 0x0 [0086.985] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0086.986] CoGetContextToken (in: pToken=0x50bed30 | out: pToken=0x50bed30) returned 0x0 [0086.986] CoGetContextToken (in: pToken=0x50becf0 | out: pToken=0x50becf0) returned 0x0 [0086.986] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x2 [0086.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x50bed6c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bed68 | out: ppvObject=0x50bed68*=0x7650820) returned 0x0 [0086.986] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0086.986] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0086.987] CoGetObjectContext (in: riid=0x6bfeb2c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be740 | out: ppv=0x50be740*=0x305784) returned 0x0 [0086.987] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50be738 | out: pAptType=0x50be738*=1) returned 0x0 [0086.987] IUnknown:QueryInterface (in: This=0x305784, riid=0x6bfeb14*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50be73c | out: ppvObject=0x50be73c*=0x0) returned 0x80004002 [0086.987] IUnknown:Release (This=0x305784) returned 0x1 [0086.989] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be258 | out: ppv=0x50be258*=0x7650810) returned 0x0 [0086.989] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650810, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be088 | out: ppvObject=0x50be088*=0x0) returned 0x80004002 [0086.990] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650810, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0c0 | out: ppvObject=0x50be0c0*=0x76508b8) returned 0x0 [0086.990] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bde64 | out: ppvObject=0x50bde64*=0x76508b8) returned 0x0 [0086.990] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50bde20 | out: ppvObject=0x50bde20*=0x0) returned 0x80004002 [0086.990] WbemDefPath:IUnknown:AddRef (This=0x76508b8) returned 0x3 [0086.990] CoGetContextToken (in: pToken=0x50bdcac | out: pToken=0x50bdcac) returned 0x0 [0086.990] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bdc94 | out: ppvObject=0x50bdc94*=0x3dc350) returned 0x0 [0086.991] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x3dc350, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50bdc9c | out: pCid=0x50bdc9c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0086.991] WbemDefPath:IUnknown:Release (This=0x3dc350) returned 0x3 [0086.991] CoGetContextToken (in: pToken=0x50bdca4 | out: pToken=0x50bdca4) returned 0x0 [0086.991] WbemDefPath:IUnknown:AddRef (This=0x76508b8) returned 0x4 [0086.991] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bdd18 | out: ppvObject=0x50bdd18*=0x0) returned 0x80004002 [0086.991] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x3 [0086.991] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x2 [0086.991] WbemDefPath:IUnknown:Release (This=0x7650810) returned 0x0 [0086.992] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x1 [0086.992] CoGetContextToken (in: pToken=0x50be554 | out: pToken=0x50be554) returned 0x0 [0086.992] CoGetContextToken (in: pToken=0x50be514 | out: pToken=0x50be514) returned 0x0 [0086.992] WbemDefPath:IUnknown:AddRef (This=0x76508b8) returned 0x2 [0086.992] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x50be590*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be58c | out: ppvObject=0x50be58c*=0x76508b8) returned 0x0 [0086.992] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x2 [0086.992] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x1 [0087.003] CoGetContextToken (in: pToken=0x50be5d4 | out: pToken=0x50be5d4) returned 0x0 [0087.003] CoGetContextToken (in: pToken=0x50be594 | out: pToken=0x50be594) returned 0x0 [0087.003] WbemDefPath:IUnknown:AddRef (This=0x76508b8) returned 0x2 [0087.003] WbemDefPath:IUnknown:QueryInterface (in: This=0x76508b8, riid=0x50be610*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be60c | out: ppvObject=0x50be60c*=0x76508b8) returned 0x0 [0087.004] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x2 [0087.004] WbemDefPath:IUnknown:AddRef (This=0x76508b8) returned 0x3 [0087.004] WbemDefPath:IWbemPath:SetText (This=0x76508b8, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0087.004] WbemDefPath:IUnknown:Release (This=0x76508b8) returned 0x2 [0087.005] CoGetContextToken (in: pToken=0x50bedb0 | out: pToken=0x50bedb0) returned 0x0 [0087.005] CoGetContextToken (in: pToken=0x50bed70 | out: pToken=0x50bed70) returned 0x0 [0087.005] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x2 [0087.005] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x50bedec*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bede8 | out: ppvObject=0x50bede8*=0x7650820) returned 0x0 [0087.005] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0087.005] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x3 [0087.005] WbemDefPath:IWbemPath:SetText (This=0x7650820, uMode=0x4, pszPath="\\\\localhost\\root\\cimv2") returned 0x0 [0087.005] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0087.011] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bef54 | out: puCount=0x50bef54*=0x2) returned 0x0 [0087.015] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bef50*=0x0, pszText=0x0 | out: puBuffLength=0x50bef50*=0x17, pszText=0x0) returned 0x0 [0087.016] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bef50*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bef50*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0087.021] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bef50 | out: puCount=0x50bef50*=0x2) returned 0x0 [0087.021] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bef4c*=0x0, pszText=0x0 | out: puBuffLength=0x50bef4c*=0x17, pszText=0x0) returned 0x0 [0087.021] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bef4c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bef4c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0087.022] CoGetObjectContext (in: riid=0x6bfeb2c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beecc | out: ppv=0x50beecc*=0x305784) returned 0x0 [0087.022] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beec4 | out: pAptType=0x50beec4*=1) returned 0x0 [0087.022] IUnknown:QueryInterface (in: This=0x305784, riid=0x6bfeb14*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beec8 | out: ppvObject=0x50beec8*=0x0) returned 0x80004002 [0087.022] IUnknown:Release (This=0x305784) returned 0x1 [0087.022] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x50bedb4 | out: lpiid=0x50bedb4) returned 0x0 [0087.022] CoGetClassObject (in: rclsid=0x3cba14*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bed1c | out: ppv=0x50bed1c*=0x7650ad0) returned 0x0 [0087.183] WbemLocator:IUnknown:QueryInterface (in: This=0x7650ad0, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50beb4c | out: ppvObject=0x50beb4c*=0x0) returned 0x80004002 [0087.183] WbemLocator:IClassFactory:CreateInstance (in: This=0x7650ad0, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50beb84 | out: ppvObject=0x50beb84*=0x7650bf0) returned 0x0 [0087.183] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be928 | out: ppvObject=0x50be928*=0x7650bf0) returned 0x0 [0087.183] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be8e4 | out: ppvObject=0x50be8e4*=0x0) returned 0x80004002 [0087.183] WbemLocator:IUnknown:AddRef (This=0x7650bf0) returned 0x3 [0087.183] CoGetContextToken (in: pToken=0x50be770 | out: pToken=0x50be770) returned 0x0 [0087.184] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be758 | out: ppvObject=0x50be758*=0x0) returned 0x80004002 [0087.184] CoGetContextToken (in: pToken=0x50be768 | out: pToken=0x50be768) returned 0x0 [0087.184] WbemLocator:IUnknown:AddRef (This=0x7650bf0) returned 0x4 [0087.184] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7dc | out: ppvObject=0x50be7dc*=0x0) returned 0x80004002 [0087.184] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x3 [0087.184] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x2 [0087.184] WbemLocator:IUnknown:Release (This=0x7650ad0) returned 0x0 [0087.185] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x1 [0087.185] CoGetContextToken (in: pToken=0x50bec74 | out: pToken=0x50bec74) returned 0x0 [0087.185] CoGetContextToken (in: pToken=0x50bec34 | out: pToken=0x50bec34) returned 0x0 [0087.185] WbemLocator:IUnknown:AddRef (This=0x7650bf0) returned 0x2 [0087.185] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x50becb0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50becac | out: ppvObject=0x50becac*=0x7650bf0) returned 0x0 [0087.185] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x2 [0087.185] WbemLocator:IUnknown:Release (This=0x7650bf0) returned 0x1 [0087.186] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50beea4 | out: puCount=0x50beea4*=0x2) returned 0x0 [0087.186] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=8, puBuffLength=0x50beea0*=0x0, pszText=0x0 | out: puBuffLength=0x50beea0*=0x17, pszText=0x0) returned 0x0 [0087.187] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=8, puBuffLength=0x50beea0*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beea0*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0087.187] CoCreateInstance (in: rclsid=0x3e013a0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x3e012d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x50be97c | out: ppv=0x50be97c*=0x7650c00) returned 0x0 [0087.187] WbemLocator:IWbemLocator:ConnectServer (in: This=0x7650c00, strNetworkResource="\\\\localhost\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x50be9c8 | out: ppNamespace=0x50be9c8*=0x765cb2c) returned 0x0 [0100.184] WbemLocator:IUnknown:QueryInterface (in: This=0x765cb2c, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be898 | out: ppvObject=0x50be898*=0x60d0254) returned 0x0 [0100.185] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x60d0254, pProxy=0x765cb2c, pAuthnSvc=0x50be8e0, pAuthzSvc=0x50be8dc, pServerPrincName=0x50be8ec, pAuthnLevel=0x50be8e4, pImpLevel=0x50be8d0, pAuthInfo=0x50be8d4, pCapabilites=0x50be8d8 | out: pAuthnSvc=0x50be8e0*=0xa, pAuthzSvc=0x50be8dc*=0x0, pServerPrincName=0x50be8ec, pAuthnLevel=0x50be8e4*=0x6, pImpLevel=0x50be8d0*=0x2, pAuthInfo=0x50be8d4, pCapabilites=0x50be8d8*=0x1) returned 0x0 [0100.185] WbemLocator:IUnknown:Release (This=0x60d0254) returned 0x1 [0100.185] WbemLocator:IUnknown:QueryInterface (in: This=0x765cb2c, riid=0x3e01250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be88c | out: ppvObject=0x50be88c*=0x60d0274) returned 0x0 [0100.185] WbemLocator:IUnknown:QueryInterface (in: This=0x765cb2c, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be888 | out: ppvObject=0x50be888*=0x60d0254) returned 0x0 [0100.185] WbemLocator:IClientSecurity:SetBlanket (This=0x60d0254, pProxy=0x765cb2c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0100.186] WbemLocator:IUnknown:Release (This=0x60d0254) returned 0x2 [0100.186] WbemLocator:IUnknown:Release (This=0x60d0274) returned 0x1 [0100.186] CoTaskMemFree (pv=0x3e4750) [0100.186] WbemLocator:IUnknown:Release (This=0x7650c00) returned 0x0 [0100.186] WbemLocator:IUnknown:QueryInterface (in: This=0x765cb2c, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be248 | out: ppvObject=0x50be248*=0x60d0274) returned 0x0 [0100.187] WbemLocator:IUnknown:QueryInterface (in: This=0x60d0274, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be204 | out: ppvObject=0x50be204*=0x0) returned 0x80004002 [0100.187] WbemLocator:IUnknown:QueryInterface (in: This=0x60d0274, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be0f8 | out: ppvObject=0x50be0f8*=0x0) returned 0x80004002 [0100.188] WbemLocator:IUnknown:AddRef (This=0x60d0274) returned 0x3 [0100.188] CoGetContextToken (in: pToken=0x50be090 | out: pToken=0x50be090) returned 0x0 [0100.189] WbemLocator:IUnknown:QueryInterface (in: This=0x60d0274, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be078 | out: ppvObject=0x50be078*=0x60d01d4) returned 0x0 [0100.189] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x60d01d4, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be080 | out: pCid=0x50be080*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0100.189] WbemLocator:IUnknown:Release (This=0x60d01d4) returned 0x3 [0100.189] CoGetContextToken (in: pToken=0x50be088 | out: pToken=0x50be088) returned 0x0 [0100.189] WbemLocator:IUnknown:AddRef (This=0x60d0274) returned 0x4 [0100.189] WbemLocator:IUnknown:QueryInterface (in: This=0x60d0274, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0fc | out: ppvObject=0x50be0fc*=0x60d025c) returned 0x0 [0100.190] WbemLocator:IUnknown:Release (This=0x60d0274) returned 0x4 [0100.190] WbemLocator:IRpcOptions:Query (in: This=0x60d025c, pPrx=0x60d0274, dwProperty=2, pdwValue=0x50be120 | out: pdwValue=0x50be120) returned 0x80004002 [0100.190] WbemLocator:IUnknown:Release (This=0x60d025c) returned 0x3 [0100.190] WbemLocator:IUnknown:Release (This=0x60d0274) returned 0x2 [0100.191] CoGetContextToken (in: pToken=0x50be4fc | out: pToken=0x50be4fc) returned 0x0 [0100.191] CoGetContextToken (in: pToken=0x50be4bc | out: pToken=0x50be4bc) returned 0x0 [0100.191] WbemLocator:IUnknown:AddRef (This=0x60d0274) returned 0x3 [0100.191] WbemLocator:IUnknown:QueryInterface (in: This=0x60d0274, riid=0x50be538*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x50be534 | out: ppvObject=0x50be534*=0x765cb2c) returned 0x0 [0100.191] WbemLocator:IUnknown:Release (This=0x60d0274) returned 0x3 [0100.191] WbemLocator:IUnknown:Release (This=0x765cb2c) returned 0x2 [0100.191] WbemLocator:IUnknown:Release (This=0x765cb2c) returned 0x1 [0100.192] CoGetContextToken (in: pToken=0x50bee18 | out: pToken=0x50bee18) returned 0x0 [0100.192] WbemLocator:IUnknown:AddRef (This=0x60d0274) returned 0x2 [0100.193] WbemLocator:IUnknown:QueryInterface (in: This=0x60d0274, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bea3c | out: ppvObject=0x50bea3c*=0x60d0274) returned 0x0 [0100.193] WbemLocator:IUnknown:Release (This=0x60d0274) returned 0x2 [0100.193] WbemLocator:IUnknown:Release (This=0x60d0274) returned 0x1 [0100.194] CoGetContextToken (in: pToken=0x50be61c | out: pToken=0x50be61c) returned 0x0 [0100.194] CoGetContextToken (in: pToken=0x50be5dc | out: pToken=0x50be5dc) returned 0x0 [0100.194] WbemLocator:IUnknown:AddRef (This=0x60d0274) returned 0x2 [0100.194] WbemLocator:IUnknown:QueryInterface (in: This=0x60d0274, riid=0x50be658*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x50be654 | out: ppvObject=0x50be654*=0x765cb2c) returned 0x0 [0100.194] WbemLocator:IUnknown:Release (This=0x60d0274) returned 0x2 [0100.194] WbemLocator:IUnknown:AddRef (This=0x765cb2c) returned 0x3 [0100.194] IWbemServices:ExecQuery (in: This=0x765cb2c, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x50bec60 | out: ppEnum=0x50bec60*=0x765cbcc) returned 0x0 [0100.208] IUnknown:QueryInterface (in: This=0x765cbcc, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be90c | out: ppvObject=0x50be90c*=0x765cbd0) returned 0x0 [0100.208] IClientSecurity:QueryBlanket (in: This=0x765cbd0, pProxy=0x765cbcc, pAuthnSvc=0x50be954, pAuthzSvc=0x50be950, pServerPrincName=0x50be960, pAuthnLevel=0x50be958, pImpLevel=0x50be944, pAuthInfo=0x50be948, pCapabilites=0x50be94c | out: pAuthnSvc=0x50be954*=0xa, pAuthzSvc=0x50be950*=0x0, pServerPrincName=0x50be960, pAuthnLevel=0x50be958*=0x6, pImpLevel=0x50be944*=0x2, pAuthInfo=0x50be948, pCapabilites=0x50be94c*=0x1) returned 0x0 [0100.208] IUnknown:Release (This=0x765cbd0) returned 0x1 [0100.208] IUnknown:QueryInterface (in: This=0x765cbcc, riid=0x3e01250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be900 | out: ppvObject=0x50be900*=0x60ce66c) returned 0x0 [0100.208] IUnknown:QueryInterface (in: This=0x765cbcc, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be8fc | out: ppvObject=0x50be8fc*=0x765cbd0) returned 0x0 [0100.208] IClientSecurity:SetBlanket (This=0x765cbd0, pProxy=0x765cbcc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0100.212] IUnknown:Release (This=0x765cbd0) returned 0x2 [0100.212] WbemLocator:IUnknown:Release (This=0x60ce66c) returned 0x1 [0100.212] CoTaskMemFree (pv=0x3e4780) [0100.212] WbemLocator:IUnknown:Release (This=0x765cb2c) returned 0x2 [0100.212] IUnknown:QueryInterface (in: This=0x765cbcc, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be2b8 | out: ppvObject=0x50be2b8*=0x60ce66c) returned 0x0 [0100.213] WbemLocator:IUnknown:QueryInterface (in: This=0x60ce66c, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be274 | out: ppvObject=0x50be274*=0x0) returned 0x80004002 [0100.213] WbemLocator:IUnknown:QueryInterface (in: This=0x60ce66c, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be168 | out: ppvObject=0x50be168*=0x0) returned 0x80004002 [0100.214] WbemLocator:IUnknown:AddRef (This=0x60ce66c) returned 0x3 [0100.214] CoGetContextToken (in: pToken=0x50be100 | out: pToken=0x50be100) returned 0x0 [0100.214] WbemLocator:IUnknown:QueryInterface (in: This=0x60ce66c, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0e8 | out: ppvObject=0x50be0e8*=0x60ce5cc) returned 0x0 [0100.214] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x60ce5cc, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be0f0 | out: pCid=0x50be0f0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0100.214] WbemLocator:IUnknown:Release (This=0x60ce5cc) returned 0x3 [0100.215] CoGetContextToken (in: pToken=0x50be0f8 | out: pToken=0x50be0f8) returned 0x0 [0100.215] WbemLocator:IUnknown:AddRef (This=0x60ce66c) returned 0x4 [0100.215] WbemLocator:IUnknown:QueryInterface (in: This=0x60ce66c, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be16c | out: ppvObject=0x50be16c*=0x60ce654) returned 0x0 [0100.215] WbemLocator:IUnknown:Release (This=0x60ce66c) returned 0x4 [0100.215] WbemLocator:IRpcOptions:Query (in: This=0x60ce654, pPrx=0x60ce66c, dwProperty=2, pdwValue=0x50be190 | out: pdwValue=0x50be190) returned 0x80004002 [0100.215] WbemLocator:IUnknown:Release (This=0x60ce654) returned 0x3 [0100.216] WbemLocator:IUnknown:Release (This=0x60ce66c) returned 0x2 [0100.216] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0100.216] CoGetContextToken (in: pToken=0x50be52c | out: pToken=0x50be52c) returned 0x0 [0100.216] WbemLocator:IUnknown:AddRef (This=0x60ce66c) returned 0x3 [0100.216] WbemLocator:IUnknown:QueryInterface (in: This=0x60ce66c, riid=0x50be5a8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x50be5a4 | out: ppvObject=0x50be5a4*=0x765cbcc) returned 0x0 [0100.216] WbemLocator:IUnknown:Release (This=0x60ce66c) returned 0x3 [0100.217] IUnknown:Release (This=0x765cbcc) returned 0x2 [0100.217] IUnknown:Release (This=0x765cbcc) returned 0x1 [0100.217] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50beef8 | out: puCount=0x50beef8*=0x2) returned 0x0 [0100.217] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beef4*=0x0, pszText=0x0 | out: puBuffLength=0x50beef4*=0x17, pszText=0x0) returned 0x0 [0100.218] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beef4*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beef4*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0100.218] CoGetContextToken (in: pToken=0x50be894 | out: pToken=0x50be894) returned 0x0 [0100.218] CoGetContextToken (in: pToken=0x50be854 | out: pToken=0x50be854) returned 0x0 [0100.218] WbemLocator:IUnknown:AddRef (This=0x60ce66c) returned 0x2 [0100.218] WbemLocator:IUnknown:QueryInterface (in: This=0x60ce66c, riid=0x50be8d0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x50be8cc | out: ppvObject=0x50be8cc*=0x765cbcc) returned 0x0 [0100.218] WbemLocator:IUnknown:Release (This=0x60ce66c) returned 0x2 [0100.219] IUnknown:AddRef (This=0x765cbcc) returned 0x3 [0100.219] IEnumWbemClassObject:Clone (in: This=0x765cbcc, ppEnum=0x50beec8 | out: ppEnum=0x50beec8*=0x765dc9c) returned 0x0 [0100.220] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50beb84 | out: ppvObject=0x50beb84*=0x765dca0) returned 0x0 [0100.220] IClientSecurity:QueryBlanket (in: This=0x765dca0, pProxy=0x765dc9c, pAuthnSvc=0x50bebcc, pAuthzSvc=0x50bebc8, pServerPrincName=0x50bebd8, pAuthnLevel=0x50bebd0, pImpLevel=0x50bebbc, pAuthInfo=0x50bebc0, pCapabilites=0x50bebc4 | out: pAuthnSvc=0x50bebcc*=0xa, pAuthzSvc=0x50bebc8*=0x0, pServerPrincName=0x50bebd8, pAuthnLevel=0x50bebd0*=0x6, pImpLevel=0x50bebbc*=0x2, pAuthInfo=0x50bebc0, pCapabilites=0x50bebc4*=0x1) returned 0x0 [0100.220] IUnknown:Release (This=0x765dca0) returned 0x1 [0100.220] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x3e01250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50beb78 | out: ppvObject=0x50beb78*=0x60ca71c) returned 0x0 [0100.221] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50beb74 | out: ppvObject=0x50beb74*=0x765dca0) returned 0x0 [0100.221] IClientSecurity:SetBlanket (This=0x765dca0, pProxy=0x765dc9c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0100.223] IUnknown:Release (This=0x765dca0) returned 0x2 [0100.223] WbemLocator:IUnknown:Release (This=0x60ca71c) returned 0x1 [0100.223] CoTaskMemFree (pv=0x3e4720) [0100.223] IUnknown:Release (This=0x765cbcc) returned 0x2 [0100.223] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be520 | out: ppvObject=0x50be520*=0x60ca71c) returned 0x0 [0100.223] WbemLocator:IUnknown:QueryInterface (in: This=0x60ca71c, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be4dc | out: ppvObject=0x50be4dc*=0x0) returned 0x80004002 [0100.224] WbemLocator:IUnknown:QueryInterface (in: This=0x60ca71c, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be3d0 | out: ppvObject=0x50be3d0*=0x0) returned 0x80004002 [0100.225] WbemLocator:IUnknown:AddRef (This=0x60ca71c) returned 0x3 [0100.225] CoGetContextToken (in: pToken=0x50be368 | out: pToken=0x50be368) returned 0x0 [0100.225] WbemLocator:IUnknown:QueryInterface (in: This=0x60ca71c, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be350 | out: ppvObject=0x50be350*=0x60ca67c) returned 0x0 [0100.225] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x60ca67c, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be358 | out: pCid=0x50be358*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0100.225] WbemLocator:IUnknown:Release (This=0x60ca67c) returned 0x3 [0100.225] CoGetContextToken (in: pToken=0x50be360 | out: pToken=0x50be360) returned 0x0 [0100.226] WbemLocator:IUnknown:AddRef (This=0x60ca71c) returned 0x4 [0100.226] WbemLocator:IUnknown:QueryInterface (in: This=0x60ca71c, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3d4 | out: ppvObject=0x50be3d4*=0x60ca704) returned 0x0 [0100.226] WbemLocator:IUnknown:Release (This=0x60ca71c) returned 0x4 [0100.226] WbemLocator:IRpcOptions:Query (in: This=0x60ca704, pPrx=0x60ca71c, dwProperty=2, pdwValue=0x50be3f8 | out: pdwValue=0x50be3f8) returned 0x80004002 [0100.226] WbemLocator:IUnknown:Release (This=0x60ca704) returned 0x3 [0100.226] WbemLocator:IUnknown:Release (This=0x60ca71c) returned 0x2 [0100.227] CoGetContextToken (in: pToken=0x50be7d4 | out: pToken=0x50be7d4) returned 0x0 [0100.227] CoGetContextToken (in: pToken=0x50be794 | out: pToken=0x50be794) returned 0x0 [0100.227] WbemLocator:IUnknown:AddRef (This=0x60ca71c) returned 0x3 [0100.227] WbemLocator:IUnknown:QueryInterface (in: This=0x60ca71c, riid=0x50be810*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x50be80c | out: ppvObject=0x50be80c*=0x765dc9c) returned 0x0 [0100.227] WbemLocator:IUnknown:Release (This=0x60ca71c) returned 0x3 [0100.227] IUnknown:Release (This=0x765dc9c) returned 0x2 [0100.227] IUnknown:Release (This=0x765dc9c) returned 0x1 [0100.237] CoGetContextToken (in: pToken=0x50bedc8 | out: pToken=0x50bedc8) returned 0x0 [0100.238] CoGetContextToken (in: pToken=0x50bed88 | out: pToken=0x50bed88) returned 0x0 [0100.238] WbemLocator:IUnknown:AddRef (This=0x60ca71c) returned 0x2 [0100.238] WbemLocator:IUnknown:QueryInterface (in: This=0x60ca71c, riid=0x50bee04*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x50bee00 | out: ppvObject=0x50bee00*=0x765dc9c) returned 0x0 [0100.238] WbemLocator:IUnknown:Release (This=0x60ca71c) returned 0x2 [0100.238] IUnknown:AddRef (This=0x765dc9c) returned 0x3 [0100.238] IEnumWbemClassObject:Reset (This=0x765dc9c) returned 0x0 [0100.240] IUnknown:Release (This=0x765dc9c) returned 0x2 [0100.254] CoGetContextToken (in: pToken=0x50becbc | out: pToken=0x50becbc) returned 0x0 [0100.254] IUnknown:AddRef (This=0x765dc9c) returned 0x3 [0100.254] IEnumWbemClassObject:Next (in: This=0x765dc9c, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x6c038f4 | out: apObjects=0x369190*=0x765dcd8, puReturned=0x6c038f4*=0x1) returned 0x0 [0100.259] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be2c8 | out: ppvObject=0x50be2c8*=0x765dcd8) returned 0x0 [0100.260] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be284 | out: ppvObject=0x50be284*=0x0) returned 0x80004002 [0100.260] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be178 | out: ppvObject=0x50be178*=0x0) returned 0x80004002 [0100.260] IUnknown:AddRef (This=0x765dcd8) returned 0x3 [0100.261] CoGetContextToken (in: pToken=0x50be110 | out: pToken=0x50be110) returned 0x0 [0100.261] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0f8 | out: ppvObject=0x50be0f8*=0x765dcdc) returned 0x0 [0100.261] IMarshal:GetUnmarshalClass (in: This=0x765dcdc, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be100 | out: pCid=0x50be100*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0100.261] IUnknown:Release (This=0x765dcdc) returned 0x3 [0100.262] CoGetContextToken (in: pToken=0x50be108 | out: pToken=0x50be108) returned 0x0 [0100.262] IUnknown:AddRef (This=0x765dcd8) returned 0x4 [0100.262] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be17c | out: ppvObject=0x50be17c*=0x0) returned 0x80004002 [0100.262] IUnknown:Release (This=0x765dcd8) returned 0x3 [0100.262] IUnknown:Release (This=0x765dcd8) returned 0x2 [0100.262] CoGetContextToken (in: pToken=0x50be568 | out: pToken=0x50be568) returned 0x0 [0100.262] CoGetContextToken (in: pToken=0x50be528 | out: pToken=0x50be528) returned 0x0 [0100.263] IUnknown:AddRef (This=0x765dcd8) returned 0x3 [0100.263] IUnknown:QueryInterface (in: This=0x765dcd8, riid=0x50be5a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be5a0 | out: ppvObject=0x50be5a0*=0x765dcd8) returned 0x0 [0100.263] IUnknown:Release (This=0x765dcd8) returned 0x3 [0100.263] IUnknown:Release (This=0x765dcd8) returned 0x2 [0100.263] IUnknown:Release (This=0x765dcd8) returned 0x1 [0100.264] IUnknown:Release (This=0x765dc9c) returned 0x2 [0100.264] CoGetContextToken (in: pToken=0x50bee4c | out: pToken=0x50bee4c) returned 0x0 [0100.264] IUnknown:AddRef (This=0x765dcd8) returned 0x2 [0100.274] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__GENUS", lFlags=0, pVal=0x50beec8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bef7c*=0, plFlavor=0x50bef78*=0 | out: pVal=0x50beec8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bef7c*=3, plFlavor=0x50bef78*=64) returned 0x0 [0100.275] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__PATH", lFlags=0, pVal=0x50beea8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bef60*=0, plFlavor=0x50bef5c*=0 | out: pVal=0x50beea8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x50bef60*=8, plFlavor=0x50bef5c*=64) returned 0x0 [0100.275] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x3d [0100.275] CoGetObjectContext (in: riid=0x6bfeb2c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bef00 | out: ppv=0x50bef00*=0x305784) returned 0x0 [0100.275] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beef8 | out: pAptType=0x50beef8*=1) returned 0x0 [0100.276] IUnknown:QueryInterface (in: This=0x305784, riid=0x6bfeb14*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beefc | out: ppvObject=0x50beefc*=0x0) returned 0x80004002 [0100.276] IUnknown:Release (This=0x305784) returned 0x1 [0100.277] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bea18 | out: ppv=0x50bea18*=0x7650ad0) returned 0x0 [0100.277] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650ad0, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be848 | out: ppvObject=0x50be848*=0x0) returned 0x80004002 [0100.277] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650ad0, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be880 | out: ppvObject=0x50be880*=0x7650c00) returned 0x0 [0100.278] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be624 | out: ppvObject=0x50be624*=0x7650c00) returned 0x0 [0100.278] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0100.278] WbemDefPath:IUnknown:AddRef (This=0x7650c00) returned 0x3 [0100.279] CoGetContextToken (in: pToken=0x50be46c | out: pToken=0x50be46c) returned 0x0 [0100.279] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be454 | out: ppvObject=0x50be454*=0x3dc450) returned 0x0 [0100.279] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x3dc450, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be45c | out: pCid=0x50be45c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0100.279] WbemDefPath:IUnknown:Release (This=0x3dc450) returned 0x3 [0100.279] CoGetContextToken (in: pToken=0x50be464 | out: pToken=0x50be464) returned 0x0 [0100.279] WbemDefPath:IUnknown:AddRef (This=0x7650c00) returned 0x4 [0100.279] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be4d8 | out: ppvObject=0x50be4d8*=0x0) returned 0x80004002 [0100.279] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x3 [0100.280] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x2 [0100.280] WbemDefPath:IUnknown:Release (This=0x7650ad0) returned 0x0 [0100.280] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x1 [0100.280] CoGetContextToken (in: pToken=0x50bed14 | out: pToken=0x50bed14) returned 0x0 [0100.281] CoGetContextToken (in: pToken=0x50becd4 | out: pToken=0x50becd4) returned 0x0 [0100.281] WbemDefPath:IUnknown:AddRef (This=0x7650c00) returned 0x2 [0100.281] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x50bed50*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bed4c | out: ppvObject=0x50bed4c*=0x7650c00) returned 0x0 [0100.281] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x2 [0100.281] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x1 [0100.281] CoGetContextToken (in: pToken=0x50bed94 | out: pToken=0x50bed94) returned 0x0 [0100.281] CoGetContextToken (in: pToken=0x50bed54 | out: pToken=0x50bed54) returned 0x0 [0100.281] WbemDefPath:IUnknown:AddRef (This=0x7650c00) returned 0x2 [0100.281] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c00, riid=0x50bedd0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bedcc | out: ppvObject=0x50bedcc*=0x7650c00) returned 0x0 [0100.282] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x2 [0100.282] WbemDefPath:IUnknown:AddRef (This=0x7650c00) returned 0x3 [0100.282] WbemDefPath:IWbemPath:SetText (This=0x7650c00, uMode=0x4, pszPath="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x0 [0100.282] WbemDefPath:IUnknown:Release (This=0x7650c00) returned 0x2 [0100.282] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bef34 | out: puCount=0x50bef34*=0x2) returned 0x0 [0100.282] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bef30*=0x0, pszText=0x0 | out: puBuffLength=0x50bef30*=0x17, pszText=0x0) returned 0x0 [0100.282] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bef30*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bef30*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0100.302] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0100.302] GetLastError () returned 0xcb [0100.329] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec94 | out: puCount=0x50bec94*=0x2) returned 0x0 [0100.329] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec90*=0x0, pszText=0x0 | out: puBuffLength=0x50bec90*=0x17, pszText=0x0) returned 0x0 [0100.329] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec90*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec90*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0100.330] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x50bec50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c0507c*=0, plFlavor=0x6c05080*=0 | out: pVal=0x50bec50*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x6c0507c*=8, plFlavor=0x6c05080*=64) returned 0x0 [0100.330] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0100.330] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x50bec54*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c0507c*=8, plFlavor=0x6c05080*=64 | out: pVal=0x50bec54*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x6c0507c*=8, plFlavor=0x6c05080*=64) returned 0x0 [0100.330] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0100.331] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec94 | out: puCount=0x50bec94*=0x2) returned 0x0 [0100.331] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec90*=0x0, pszText=0x0 | out: puBuffLength=0x50bec90*=0x17, pszText=0x0) returned 0x0 [0100.331] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec90*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec90*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0100.331] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__CLASS", lFlags=0, pVal=0x50bec50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c05134*=0, plFlavor=0x6c05138*=0 | out: pVal=0x50bec50*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6c05134*=8, plFlavor=0x6c05138*=64) returned 0x0 [0100.331] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0100.331] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__CLASS", lFlags=0, pVal=0x50bec54*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c05134*=8, plFlavor=0x6c05138*=64 | out: pVal=0x50bec54*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6c05134*=8, plFlavor=0x6c05138*=64) returned 0x0 [0100.331] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0100.386] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50beb10 | out: puCount=0x50beb10*=0x2) returned 0x0 [0100.386] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb0c*=0x0, pszText=0x0 | out: puBuffLength=0x50beb0c*=0x17, pszText=0x0) returned 0x0 [0100.386] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb0c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beb0c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0100.386] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50beb10 | out: puCount=0x50beb10*=0x2) returned 0x0 [0100.386] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb0c*=0x0, pszText=0x0 | out: puBuffLength=0x50beb0c*=0x17, pszText=0x0) returned 0x0 [0100.386] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb0c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beb0c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0100.387] IWbemClassObject:GetNames (in: This=0x765dcd8, wszQualifierName=0x0, lFlags=48, pQualifierVal=0x50bead4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x50beaa0 | out: pNames=0x50beaa0*="\x01ƀ\x04") returned 0x0 [0100.387] SafeArrayGetDim (psa=0x3e47c0) returned 0x1 [0100.387] SafeArrayGetDim (psa=0x3e47c0) returned 0x1 [0100.387] SafeArrayGetLBound (in: psa=0x3e47c0, nDim=0x1, plLbound=0x50be69c | out: plLbound=0x50be69c) returned 0x0 [0100.388] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__GENUS", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08c34*=0, plFlavor=0x6c08c38*=0 | out: pVal=0x50beacc*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x6c08c34*=3, plFlavor=0x6c08c38*=64) returned 0x0 [0100.388] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__CLASS", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08c68*=0, plFlavor=0x6c08c6c*=0 | out: pVal=0x50beacc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6c08c68*=8, plFlavor=0x6c08c6c*=64) returned 0x0 [0100.389] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0100.389] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__SUPERCLASS", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08ccc*=0, plFlavor=0x6c08cd0*=0 | out: pVal=0x50beacc*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08ccc*=8, plFlavor=0x6c08cd0*=64) returned 0x0 [0100.390] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__DYNASTY", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08cf4*=0, plFlavor=0x6c08cf8*=0 | out: pVal=0x50beacc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6c08cf4*=8, plFlavor=0x6c08cf8*=64) returned 0x0 [0100.390] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0100.390] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__RELPATH", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08d58*=0, plFlavor=0x6c08d5c*=0 | out: pVal=0x50beacc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x6c08d58*=8, plFlavor=0x6c08d5c*=64) returned 0x0 [0100.390] SysStringLen (param_1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x27 [0100.390] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__PROPERTY_COUNT", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08de0*=0, plFlavor=0x6c08de4*=0 | out: pVal=0x50beacc*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3f, varVal2=0x0), pType=0x6c08de0*=3, plFlavor=0x6c08de4*=64) returned 0x0 [0100.391] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__DERIVATION", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08e14*=0, plFlavor=0x6c08e18*=0 | out: pVal=0x50beacc*(varType=0x2008, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3e47c0*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x3dc4e0, rgsabound=((cElements=0x0, lLbound=0))), varVal2=0x0), pType=0x6c08e14*=8200, plFlavor=0x6c08e18*=64) returned 0x0 [0100.391] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__SERVER", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08e4c*=0, plFlavor=0x6c08e50*=0 | out: pVal=0x50beacc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x6c08e4c*=8, plFlavor=0x6c08e50*=64) returned 0x0 [0100.391] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0100.392] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08e98*=0, plFlavor=0x6c08e9c*=0 | out: pVal=0x50beacc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x6c08e98*=8, plFlavor=0x6c08e9c*=64) returned 0x0 [0100.392] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0100.392] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__PATH", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08ee8*=0, plFlavor=0x6c08eec*=0 | out: pVal=0x50beacc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x6c08ee8*=8, plFlavor=0x6c08eec*=64) returned 0x0 [0100.392] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x3d [0100.392] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50beb4c | out: puCount=0x50beb4c*=0x2) returned 0x0 [0100.392] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb48*=0x0, pszText=0x0 | out: puBuffLength=0x50beb48*=0x17, pszText=0x0) returned 0x0 [0100.393] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb48*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beb48*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0100.393] IWbemClassObject:Get (in: This=0x765dcd8, wszName="OSArchitecture", lFlags=0, pVal=0x50beb08*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c08fec*=0, plFlavor=0x6c08ff0*=0 | out: pVal=0x50beb08*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="32-bit", varVal2=0x0), pType=0x6c08fec*=8, plFlavor=0x6c08ff0*=32) returned 0x0 [0100.393] SysStringLen (param_1="32-bit") returned 0x6 [0100.397] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50beaf8 | out: puCount=0x50beaf8*=0x2) returned 0x0 [0100.397] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beaf4*=0x0, pszText=0x0 | out: puBuffLength=0x50beaf4*=0x17, pszText=0x0) returned 0x0 [0100.397] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beaf4*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beaf4*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0100.397] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50beaf8 | out: puCount=0x50beaf8*=0x2) returned 0x0 [0100.397] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beaf4*=0x0, pszText=0x0 | out: puBuffLength=0x50beaf4*=0x17, pszText=0x0) returned 0x0 [0100.397] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beaf4*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beaf4*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0100.397] IWbemClassObject:GetNames (in: This=0x765dcd8, wszQualifierName=0x0, lFlags=48, pQualifierVal=0x50beabc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x50bea88 | out: pNames=0x50bea88*="\x01ƀ\x04") returned 0x0 [0100.397] SafeArrayGetDim (psa=0x3e4730) returned 0x1 [0100.397] SafeArrayGetDim (psa=0x3e4730) returned 0x1 [0100.397] SafeArrayGetLBound (in: psa=0x3e4730, nDim=0x1, plLbound=0x50be684 | out: plLbound=0x50be684) returned 0x0 [0100.398] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__GENUS", lFlags=0, pVal=0x50beab4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c0960c*=0, plFlavor=0x6c09610*=0 | out: pVal=0x50beab4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x6c0960c*=3, plFlavor=0x6c09610*=64) returned 0x0 [0100.398] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__CLASS", lFlags=0, pVal=0x50beab4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c09640*=0, plFlavor=0x6c09644*=0 | out: pVal=0x50beab4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6c09640*=8, plFlavor=0x6c09644*=64) returned 0x0 [0100.399] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0100.399] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__SUPERCLASS", lFlags=0, pVal=0x50beab4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c096a4*=0, plFlavor=0x6c096a8*=0 | out: pVal=0x50beab4*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c096a4*=8, plFlavor=0x6c096a8*=64) returned 0x0 [0100.399] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__DYNASTY", lFlags=0, pVal=0x50beab4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c096cc*=0, plFlavor=0x6c096d0*=0 | out: pVal=0x50beab4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x6c096cc*=8, plFlavor=0x6c096d0*=64) returned 0x0 [0100.399] SysStringLen (param_1="Win32_OperatingSystem") returned 0x15 [0100.399] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__RELPATH", lFlags=0, pVal=0x50beab4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c09730*=0, plFlavor=0x6c09734*=0 | out: pVal=0x50beab4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x6c09730*=8, plFlavor=0x6c09734*=64) returned 0x0 [0100.400] SysStringLen (param_1="Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x27 [0100.400] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__PROPERTY_COUNT", lFlags=0, pVal=0x50beab4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c097b8*=0, plFlavor=0x6c097bc*=0 | out: pVal=0x50beab4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3f, varVal2=0x0), pType=0x6c097b8*=3, plFlavor=0x6c097bc*=64) returned 0x0 [0100.401] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__DERIVATION", lFlags=0, pVal=0x50beab4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c097ec*=0, plFlavor=0x6c097f0*=0 | out: pVal=0x50beab4*(varType=0x2008, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3e4730*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x3dc4e0, rgsabound=((cElements=0x0, lLbound=0))), varVal2=0x0), pType=0x6c097ec*=8200, plFlavor=0x6c097f0*=64) returned 0x0 [0100.401] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__SERVER", lFlags=0, pVal=0x50beab4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c09824*=0, plFlavor=0x6c09828*=0 | out: pVal=0x50beab4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x6c09824*=8, plFlavor=0x6c09828*=64) returned 0x0 [0100.401] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0100.401] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__NAMESPACE", lFlags=0, pVal=0x50beab4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c09870*=0, plFlavor=0x6c09874*=0 | out: pVal=0x50beab4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x6c09870*=8, plFlavor=0x6c09874*=64) returned 0x0 [0100.402] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0100.402] IWbemClassObject:Get (in: This=0x765dcd8, wszName="__PATH", lFlags=0, pVal=0x50beab4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c098c0*=0, plFlavor=0x6c098c4*=0 | out: pVal=0x50beab4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"", varVal2=0x0), pType=0x6c098c0*=8, plFlavor=0x6c098c4*=64) returned 0x0 [0100.402] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"CRH2YWU7\"") returned 0x3d [0100.402] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50beb34 | out: puCount=0x50beb34*=0x2) returned 0x0 [0100.402] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb30*=0x0, pszText=0x0 | out: puBuffLength=0x50beb30*=0x17, pszText=0x0) returned 0x0 [0100.402] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb30*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beb30*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0100.402] IWbemClassObject:Get (in: This=0x765dcd8, wszName="OSArchitecture", lFlags=0, pVal=0x50beaf0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c099b4*=0, plFlavor=0x6c099b8*=0 | out: pVal=0x50beaf0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="32-bit", varVal2=0x0), pType=0x6c099b4*=8, plFlavor=0x6c099b8*=32) returned 0x0 [0100.402] SysStringLen (param_1="32-bit") returned 0x6 [0100.403] IWbemClassObject:Get (in: This=0x765dcd8, wszName="OSArchitecture", lFlags=0, pVal=0x50beb8c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6c099b4*=8, plFlavor=0x6c099b8*=32 | out: pVal=0x50beb8c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="32-bit", varVal2=0x0), pType=0x6c099b4*=8, plFlavor=0x6c099b8*=32) returned 0x0 [0100.403] SysStringLen (param_1="32-bit") returned 0x6 [0100.413] CoGetContextToken (in: pToken=0x50becbc | out: pToken=0x50becbc) returned 0x0 [0100.413] IUnknown:AddRef (This=0x765dc9c) returned 0x3 [0100.413] IEnumWbemClassObject:Next (in: This=0x765dc9c, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x6c038f4 | out: apObjects=0x369190*=0x0, puReturned=0x6c038f4*=0x0) returned 0x1 [0100.415] IUnknown:Release (This=0x765dc9c) returned 0x2 [0100.425] CoGetContextToken (in: pToken=0x50bee04 | out: pToken=0x50bee04) returned 0x0 [0100.425] WbemLocator:IUnknown:Release (This=0x60ca71c) returned 0x1 [0100.425] IUnknown:Release (This=0x765dc9c) returned 0x0 [0101.458] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x50bedc4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0101.458] GetLastError () returned 0x0 [0101.480] GetCurrentProcess () returned 0xffffffff [0101.480] GetLastError () returned 0x3f0 [0101.480] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x50bf144 | out: TokenHandle=0x50bf144*=0x358) returned 1 [0101.480] GetLastError () returned 0x3f0 [0101.481] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x3d4988 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\") returned 0x24 [0101.481] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x50becf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x24 [0101.481] GetLastError () returned 0x3f0 [0101.481] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f", nBufferLength=0x105, lpBuffer=0x50bed04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f", lpFilePart=0x0) returned 0x2c [0101.481] GetLastError () returned 0x0 [0101.481] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f", nBufferLength=0x105, lpBuffer=0x50beca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f", lpFilePart=0x0) returned 0x2c [0101.482] GetLastError () returned 0x0 [0101.482] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.tmp", nBufferLength=0x105, lpBuffer=0x50bec08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.tmp", lpFilePart=0x0) returned 0x30 [0101.482] GetLastError () returned 0x0 [0101.482] SetErrorMode (uMode=0x1) returned 0x1 [0101.482] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0101.483] GetLastError () returned 0x0 [0101.483] GetFileType (hFile=0x380) returned 0x1 [0101.483] SetErrorMode (uMode=0x1) returned 0x1 [0101.483] GetFileType (hFile=0x380) returned 0x1 [0101.483] CloseHandle (hObject=0x380) returned 1 [0101.483] GetLastError () returned 0x0 [0101.483] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.0.cs", nBufferLength=0x105, lpBuffer=0x50bec64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.0.cs", lpFilePart=0x0) returned 0x31 [0101.483] GetLastError () returned 0x0 [0101.483] SetErrorMode (uMode=0x1) returned 0x1 [0101.484] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.0.cs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0101.484] GetLastError () returned 0x0 [0101.484] GetFileType (hFile=0x380) returned 0x1 [0101.484] SetErrorMode (uMode=0x1) returned 0x1 [0101.484] GetFileType (hFile=0x380) returned 0x1 [0101.485] WriteFile (in: hFile=0x380, lpBuffer=0x6267c38*, nNumberOfBytesToWrite=0x8a4, lpNumberOfBytesWritten=0x50bf1ac, lpOverlapped=0x0 | out: lpBuffer=0x6267c38*, lpNumberOfBytesWritten=0x50bf1ac*=0x8a4, lpOverlapped=0x0) returned 1 [0101.486] GetLastError () returned 0x0 [0101.486] CloseHandle (hObject=0x380) returned 1 [0101.487] GetLastError () returned 0x0 [0101.488] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll", nBufferLength=0x105, lpBuffer=0x50bec18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll", lpFilePart=0x0) returned 0x30 [0101.488] GetLastError () returned 0x0 [0101.488] SetErrorMode (uMode=0x1) returned 0x1 [0101.488] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0101.488] GetLastError () returned 0x0 [0101.489] GetFileType (hFile=0x380) returned 0x1 [0101.489] SetErrorMode (uMode=0x1) returned 0x1 [0101.489] GetFileType (hFile=0x380) returned 0x1 [0101.489] CloseHandle (hObject=0x380) returned 1 [0101.489] GetLastError () returned 0x0 [0101.489] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.cmdline", nBufferLength=0x105, lpBuffer=0x50bebdc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.cmdline", lpFilePart=0x0) returned 0x34 [0101.489] GetLastError () returned 0x0 [0101.489] SetErrorMode (uMode=0x1) returned 0x1 [0101.489] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.cmdline"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0101.490] GetLastError () returned 0x0 [0101.490] GetFileType (hFile=0x380) returned 0x1 [0101.490] SetErrorMode (uMode=0x1) returned 0x1 [0101.490] GetFileType (hFile=0x380) returned 0x1 [0101.490] WriteFile (in: hFile=0x380, lpBuffer=0x626b2a0*, nNumberOfBytesToWrite=0x139, lpNumberOfBytesWritten=0x50bf124, lpOverlapped=0x0 | out: lpBuffer=0x626b2a0*, lpNumberOfBytesWritten=0x50bf124*=0x139, lpOverlapped=0x0) returned 1 [0101.492] GetLastError () returned 0x0 [0101.492] CloseHandle (hObject=0x380) returned 1 [0101.493] GetLastError () returned 0x0 [0101.494] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x50bec8c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0101.494] GetLastError () returned 0x0 [0101.494] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", nBufferLength=0x105, lpBuffer=0x50beccc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe", lpFilePart=0x0) returned 0x35 [0101.494] GetLastError () returned 0x0 [0101.494] SetErrorMode (uMode=0x1) returned 0x1 [0101.494] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe"), fInfoLevelId=0x0, lpFileInformation=0x50bf14c | out: lpFileInformation=0x50bf14c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b437aa, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0xf8b437aa, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9b67d5fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x12d38)) returned 1 [0101.494] GetLastError () returned 0x0 [0101.494] SetErrorMode (uMode=0x1) returned 0x1 [0101.494] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x3d4988 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0101.494] GetLastError () returned 0x0 [0101.495] GetCurrentProcess () returned 0xffffffff [0101.495] GetLastError () returned 0x3f0 [0101.495] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x50bf07c | out: TokenHandle=0x50bf07c*=0x458) returned 1 [0101.495] GetLastError () returned 0x3f0 [0101.495] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.out", nBufferLength=0x105, lpBuffer=0x50beac8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.out", lpFilePart=0x0) returned 0x30 [0101.495] GetLastError () returned 0x3f0 [0101.495] SetErrorMode (uMode=0x1) returned 0x1 [0101.495] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.out"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x626d150, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0101.496] GetLastError () returned 0x0 [0101.496] GetFileType (hFile=0x380) returned 0x1 [0101.496] SetErrorMode (uMode=0x1) returned 0x1 [0101.496] GetFileType (hFile=0x380) returned 0x1 [0101.496] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.err", nBufferLength=0x105, lpBuffer=0x50beac8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.err", lpFilePart=0x0) returned 0x30 [0101.496] GetLastError () returned 0x0 [0101.496] SetErrorMode (uMode=0x1) returned 0x1 [0101.496] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.err"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x626d360, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x390 [0101.497] GetLastError () returned 0x0 [0101.497] GetFileType (hFile=0x390) returned 0x1 [0101.497] SetErrorMode (uMode=0x1) returned 0x1 [0101.497] GetFileType (hFile=0x390) returned 0x1 [0101.497] WriteFile (in: hFile=0x380, lpBuffer=0x626ecb8*, nNumberOfBytesToWrite=0x18c, lpNumberOfBytesWritten=0x50bf01c, lpOverlapped=0x0 | out: lpBuffer=0x626ecb8*, lpNumberOfBytesWritten=0x50bf01c*=0x18c, lpOverlapped=0x0) returned 1 [0101.498] GetLastError () returned 0x0 [0101.499] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0101.500] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.cmdline\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x627acb8, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x369190*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3, hStdOutput=0x380, hStdError=0x390), lpProcessInformation=0x626d4f4 | out: lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.cmdline\"", lpProcessInformation=0x626d4f4*(hProcess=0x388, hThread=0x38c, dwProcessId=0xfc0, dwThreadId=0xfc4)) returned 1 [0101.503] GetLastError () returned 0x0 [0101.503] CloseHandle (hObject=0x380) returned 1 [0101.504] GetLastError () returned 0x0 [0101.504] CloseHandle (hObject=0x390) returned 1 [0101.504] GetLastError () returned 0x0 [0101.504] WaitForSingleObject (hHandle=0x388, dwMilliseconds=0x927c0) returned 0x0 [0104.288] GetLastError () returned 0x0 [0104.288] GetExitCodeProcess (in: hProcess=0x388, lpExitCode=0x50bf108 | out: lpExitCode=0x50bf108*=0x0) returned 1 [0104.288] GetLastError () returned 0x0 [0104.289] CloseHandle (hObject=0x388) returned 1 [0104.289] GetLastError () returned 0x0 [0104.289] CloseHandle (hObject=0x38c) returned 1 [0104.289] GetLastError () returned 0x0 [0104.289] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll", nBufferLength=0x105, lpBuffer=0x50bec14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll", lpFilePart=0x0) returned 0x30 [0104.289] GetLastError () returned 0x0 [0104.289] SetErrorMode (uMode=0x1) returned 0x1 [0104.289] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x38c [0104.289] GetLastError () returned 0x0 [0104.289] GetFileType (hFile=0x38c) returned 0x1 [0104.290] SetErrorMode (uMode=0x1) returned 0x1 [0104.290] GetFileType (hFile=0x38c) returned 0x1 [0104.290] GetFileSize (in: hFile=0x38c, lpFileSizeHigh=0x50bf1c8 | out: lpFileSizeHigh=0x50bf1c8*=0x0) returned 0x1200 [0104.290] GetLastError () returned 0x0 [0104.290] ReadFile (in: hFile=0x38c, lpBuffer=0x627b548, nNumberOfBytesToRead=0x1200, lpNumberOfBytesRead=0x50bf170, lpOverlapped=0x0 | out: lpBuffer=0x627b548*, lpNumberOfBytesRead=0x50bf170*=0x1200, lpOverlapped=0x0) returned 1 [0104.290] GetLastError () returned 0x0 [0104.305] CloseHandle (hObject=0x38c) returned 1 [0104.305] GetLastError () returned 0x0 [0104.306] GetCurrentProcess () returned 0xffffffff [0104.306] GetLastError () returned 0x3f0 [0104.306] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x50bf168 | out: TokenHandle=0x50bf168*=0x38c) returned 1 [0104.306] GetLastError () returned 0x3f0 [0104.306] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.pdb", nBufferLength=0x105, lpBuffer=0x50bed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.pdb", lpFilePart=0x0) returned 0x30 [0104.306] GetLastError () returned 0x3f0 [0104.306] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.pdb" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.pdb")) returned 1 [0104.308] GetLastError () returned 0x3f0 [0104.308] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.err", nBufferLength=0x105, lpBuffer=0x50bed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.err", lpFilePart=0x0) returned 0x30 [0104.308] GetLastError () returned 0x3f0 [0104.308] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.err" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.err")) returned 1 [0104.308] GetLastError () returned 0x3f0 [0104.308] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.tmp", nBufferLength=0x105, lpBuffer=0x50bed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.tmp", lpFilePart=0x0) returned 0x30 [0104.308] GetLastError () returned 0x3f0 [0104.308] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.tmp")) returned 1 [0104.309] GetLastError () returned 0x3f0 [0104.309] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.cmdline", nBufferLength=0x105, lpBuffer=0x50bed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.cmdline", lpFilePart=0x0) returned 0x34 [0104.309] GetLastError () returned 0x3f0 [0104.309] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.cmdline" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.cmdline")) returned 1 [0104.309] GetLastError () returned 0x3f0 [0104.309] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll", nBufferLength=0x105, lpBuffer=0x50bed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll", lpFilePart=0x0) returned 0x30 [0104.309] GetLastError () returned 0x3f0 [0104.309] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.dll")) returned 1 [0104.311] GetLastError () returned 0x3f0 [0104.311] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.0.cs", nBufferLength=0x105, lpBuffer=0x50bed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.0.cs", lpFilePart=0x0) returned 0x31 [0104.311] GetLastError () returned 0x3f0 [0104.311] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.0.cs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.0.cs")) returned 1 [0104.312] GetLastError () returned 0x3f0 [0104.312] GetFullPathNameW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.out", nBufferLength=0x105, lpBuffer=0x50bed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.out", lpFilePart=0x0) returned 0x30 [0104.312] GetLastError () returned 0x3f0 [0104.312] DeleteFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.out" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\7rzn_h_f.out")) returned 1 [0104.313] GetLastError () returned 0x3f0 [0104.418] GetCurrentProcess () returned 0xffffffff [0104.418] GetLastError () returned 0x3f0 [0104.547] LocalAlloc (uFlags=0x0, uBytes=0xea00) returned 0x60d3ec8 [0105.279] VirtualAlloc (lpAddress=0x0, dwSize=0x12000, flAllocationType=0x3000, flProtect=0x4) returned 0x61c0000 [0105.279] GetLastError () returned 0x3f0 [0105.395] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x61c0000, lpBuffer=0x60d3ec8*, nSize=0x400, lpNumberOfBytesWritten=0x50bf338 | out: lpBuffer=0x60d3ec8*, lpNumberOfBytesWritten=0x50bf338*=0x400) returned 1 [0105.396] GetLastError () returned 0x3f0 [0105.468] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x61c1000, lpBuffer=0x60d42c8*, nSize=0xc000, lpNumberOfBytesWritten=0x50bf264 | out: lpBuffer=0x60d42c8*, lpNumberOfBytesWritten=0x50bf264*=0xc000) returned 1 [0105.471] GetLastError () returned 0x3f0 [0105.490] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x61cd000, lpBuffer=0x60e02c8*, nSize=0x600, lpNumberOfBytesWritten=0x50bf310 | out: lpBuffer=0x60e02c8*, lpNumberOfBytesWritten=0x50bf310*=0x600) returned 1 [0105.491] GetLastError () returned 0x3f0 [0105.502] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x61ce000, lpBuffer=0x60e08c8*, nSize=0x200, lpNumberOfBytesWritten=0x50bf310 | out: lpBuffer=0x60e08c8*, lpNumberOfBytesWritten=0x50bf310*=0x200) returned 1 [0105.503] GetLastError () returned 0x3f0 [0105.514] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x61cf000, lpBuffer=0x60e0ac8*, nSize=0x1800, lpNumberOfBytesWritten=0x50bf310 | out: lpBuffer=0x60e0ac8*, lpNumberOfBytesWritten=0x50bf310*=0x1800) returned 1 [0105.515] GetLastError () returned 0x3f0 [0105.530] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x61d1000, lpBuffer=0x60e22c8*, nSize=0x600, lpNumberOfBytesWritten=0x50bf310 | out: lpBuffer=0x60e22c8*, lpNumberOfBytesWritten=0x50bf310*=0x600) returned 1 [0105.531] GetLastError () returned 0x3f0 [0105.594] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0105.594] GetLastError () returned 0xcb [0105.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d95268, Length=0x20000, ResultLength=0x50bf04c | out: SystemInformation=0x2d95268, ResultLength=0x50bf04c*=0xdb28) returned 0x0 [0105.860] EnumWindows (lpEnumFunc=0x1d5f68a, lParam=0x0) returned 0 [0105.860] GetWindowThreadProcessId (in: hWnd=0x30120, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x270 [0105.860] GetLastError () returned 0x3f0 [0105.861] GetWindow (hWnd=0x30120, uCmd=0x4) returned 0x3011e [0105.861] GetWindowThreadProcessId (in: hWnd=0x30092, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.861] GetLastError () returned 0x3f0 [0105.861] GetWindow (hWnd=0x30092, uCmd=0x4) returned 0x0 [0105.861] IsWindowVisible (hWnd=0x30092) returned 0 [0105.861] GetWindowThreadProcessId (in: hWnd=0x300ce, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.861] GetLastError () returned 0x3f0 [0105.861] GetWindow (hWnd=0x300ce, uCmd=0x4) returned 0x0 [0105.861] IsWindowVisible (hWnd=0x300ce) returned 0 [0105.862] GetWindowThreadProcessId (in: hWnd=0x400a0, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.862] GetLastError () returned 0x3f0 [0105.862] GetWindow (hWnd=0x400a0, uCmd=0x4) returned 0x0 [0105.862] IsWindowVisible (hWnd=0x400a0) returned 0 [0105.862] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x724 [0105.862] GetLastError () returned 0x3f0 [0105.862] GetWindow (hWnd=0x10128, uCmd=0x4) returned 0x20126 [0105.863] GetWindowThreadProcessId (in: hWnd=0x10106, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.863] GetLastError () returned 0x3f0 [0105.863] GetWindow (hWnd=0x10106, uCmd=0x4) returned 0x10044 [0105.863] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x3fc [0105.863] GetLastError () returned 0x3f0 [0105.863] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x3fc [0105.863] GetLastError () returned 0x3f0 [0105.863] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.863] GetLastError () returned 0x3f0 [0105.863] GetWindow (hWnd=0x10066, uCmd=0x4) returned 0x10044 [0105.864] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.864] GetLastError () returned 0x3f0 [0105.864] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x10044 [0105.864] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.864] GetLastError () returned 0x3f0 [0105.864] GetWindow (hWnd=0x10050, uCmd=0x4) returned 0x10044 [0105.864] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.864] GetLastError () returned 0x3f0 [0105.864] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10044 [0105.864] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.865] GetLastError () returned 0x3f0 [0105.865] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x10044 [0105.865] GetWindowThreadProcessId (in: hWnd=0x1006c, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.865] GetLastError () returned 0x3f0 [0105.865] GetWindow (hWnd=0x1006c, uCmd=0x4) returned 0x10044 [0105.865] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.865] GetLastError () returned 0x3f0 [0105.865] GetWindow (hWnd=0x10068, uCmd=0x4) returned 0x10044 [0105.865] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.865] GetLastError () returned 0x3f0 [0105.865] GetWindow (hWnd=0x10048, uCmd=0x4) returned 0x10044 [0105.866] GetWindowThreadProcessId (in: hWnd=0x10044, lpdwProcessId=0x50bebe0 | out: lpdwProcessId=0x50bebe0) returned 0x60c [0105.866] GetLastError () returned 0x3f0 [0105.866] GetWindow (hWnd=0x10044, uCmd=0x4) returned 0x0 [0105.866] IsWindowVisible (hWnd=0x10044) returned 1 [0105.866] GetLastError () returned 0x3f0 [0105.922] OpenProcess (dwDesiredAccess=0x43a, bInheritHandle=0, dwProcessId=0x5bc) returned 0x38c [0105.922] GetLastError () returned 0x3f0 [0105.923] VirtualAlloc (lpAddress=0x0, dwSize=0x12000, flAllocationType=0x3000, flProtect=0x4) returned 0x7450000 [0105.924] GetLastError () returned 0x3f0 [0105.924] GetCurrentProcess () returned 0xffffffff [0105.924] GetLastError () returned 0x3f0 [0105.925] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x7450000, lpBuffer=0x61c0000*, nSize=0x12000, lpNumberOfBytesWritten=0x50beb2c | out: lpBuffer=0x61c0000*, lpNumberOfBytesWritten=0x50beb2c*=0x12000) returned 1 [0105.929] GetLastError () returned 0x3f0 [0105.942] VirtualAllocEx (hProcess=0x38c, lpAddress=0x0, dwSize=0x12000, flAllocationType=0x3000, flProtect=0x40) returned 0x21c0000 [0110.859] GetLastError () returned 0x3f0 [0117.059] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0117.059] GetLastError () returned 0xcb [0117.065] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0117.065] GetLastError () returned 0xcb [0117.124] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0117.124] GetLastError () returned 0xcb [0117.129] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0117.129] GetLastError () returned 0xcb [0117.131] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0117.131] GetLastError () returned 0xcb [0117.140] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0117.141] GetLastError () returned 0xcb [0117.210] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x369178, nSize=0x80 | out: lpBuffer="") returned 0x0 [0117.210] GetLastError () returned 0xcb [0117.252] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0117.252] GetLastError () returned 0xcb [0117.253] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x50be508 | out: lpConsoleScreenBufferInfo=0x50be508) returned 1 [0117.253] GetLastError () returned 0xcb [0117.257] GetConsoleOutputCP () returned 0x1b5 [0117.260] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x50be510, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x50be510) returned 0 [0117.261] GetLastError () returned 0xcb [0117.262] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0117.262] GetLastError () returned 0xcb [0117.262] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x50be558 | out: lpMode=0x50be558) returned 1 [0117.262] GetLastError () returned 0xcb [0117.266] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0117.267] GetLastError () returned 0xcb [0117.267] GetConsoleMode (in: hConsoleHandle=0x13, lpMode=0x50be53c | out: lpMode=0x50be53c) returned 1 [0117.267] GetLastError () returned 0xcb [0117.268] WriteConsoleW (in: hConsoleOutput=0x13, lpBuffer=0x63630b8*, nNumberOfCharsToWrite=0x4, lpNumberOfCharsWritten=0x50be53c, lpReserved=0x0 | out: lpBuffer=0x63630b8*, lpNumberOfCharsWritten=0x50be53c*=0x4) returned 1 [0117.269] GetLastError () returned 0xcb [0117.270] CloseHandle (hObject=0x13) returned 1 [0117.270] GetLastError () returned 0xcb [0117.273] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0117.274] GetLastError () returned 0xcb [0117.274] GetConsoleMode (in: hConsoleHandle=0x13, lpMode=0x50be53c | out: lpMode=0x50be53c) returned 1 [0117.274] GetLastError () returned 0xcb [0117.274] WriteConsoleW (in: hConsoleOutput=0x13, lpBuffer=0x636321c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x50be53c, lpReserved=0x0 | out: lpBuffer=0x636321c*, lpNumberOfCharsWritten=0x50be53c*=0x2) returned 1 [0117.274] GetLastError () returned 0xcb [0117.274] CloseHandle (hObject=0x13) returned 1 [0117.275] GetLastError () returned 0xcb [0117.275] WriteProcessMemory (in: hProcess=0x38c, lpBaseAddress=0x21c0000, lpBuffer=0x7450000*, nSize=0x12000, lpNumberOfBytesWritten=0x50be984 | out: lpBuffer=0x7450000*, lpNumberOfBytesWritten=0x50be984*=0x12000) returned 1 [0117.294] GetLastError () returned 0xcb [0119.699] CreateRemoteThread (in: hProcess=0x38c, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21ca710, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x358 [0119.714] VirtualFree (lpAddress=0x7450000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.716] GetLastError () returned 0xcb [0119.757] CloseHandle (hObject=0x38c) returned 1 [0119.757] GetLastError () returned 0xcb [0119.884] VirtualQuery (in: lpAddress=0x50be364, lpBuffer=0x50bf364, dwLength=0x1c | out: lpBuffer=0x50bf364*(BaseAddress=0x50be000, AllocationBase=0x4730000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0119.956] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf024 | out: ppv=0x50bf024*=0x305784) returned 0x0 [0119.990] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf01c | out: pAptType=0x50bf01c*=1) returned 0x0 [0119.991] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf020 | out: ppvObject=0x50bf020*=0x0) returned 0x80004002 [0119.991] IUnknown:Release (This=0x305784) returned 0x1 [0120.013] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb3c | out: ppv=0x50beb3c*=0x7650978) returned 0x0 [0120.014] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650978, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be96c | out: ppvObject=0x50be96c*=0x0) returned 0x80004002 [0120.014] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650978, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be9a4 | out: ppvObject=0x50be9a4*=0x7650820) returned 0x0 [0120.014] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be748 | out: ppvObject=0x50be748*=0x7650820) returned 0x0 [0120.015] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be704 | out: ppvObject=0x50be704*=0x0) returned 0x80004002 [0120.015] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x3 [0120.015] CoGetContextToken (in: pToken=0x50be590 | out: pToken=0x50be590) returned 0x0 [0120.015] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be578 | out: ppvObject=0x50be578*=0x60e4b48) returned 0x0 [0120.015] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e4b48, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be580 | out: pCid=0x50be580*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0120.016] WbemDefPath:IUnknown:Release (This=0x60e4b48) returned 0x3 [0120.016] CoGetContextToken (in: pToken=0x50be588 | out: pToken=0x50be588) returned 0x0 [0120.016] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x4 [0120.016] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5fc | out: ppvObject=0x50be5fc*=0x0) returned 0x80004002 [0120.016] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x3 [0120.016] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0120.017] WbemDefPath:IUnknown:Release (This=0x7650978) returned 0x0 [0120.017] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0120.017] CoGetContextToken (in: pToken=0x50bee38 | out: pToken=0x50bee38) returned 0x0 [0120.017] CoGetContextToken (in: pToken=0x50bedf8 | out: pToken=0x50bedf8) returned 0x0 [0120.017] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x2 [0120.017] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x50bee74*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee70 | out: ppvObject=0x50bee70*=0x7650820) returned 0x0 [0120.017] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0120.018] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x1 [0120.018] CoGetContextToken (in: pToken=0x50beeb8 | out: pToken=0x50beeb8) returned 0x0 [0120.018] CoGetContextToken (in: pToken=0x50bee78 | out: pToken=0x50bee78) returned 0x0 [0120.018] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x2 [0120.018] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650820, riid=0x50beef4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beef0 | out: ppvObject=0x50beef0*=0x7650820) returned 0x0 [0120.018] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0120.018] WbemDefPath:IUnknown:AddRef (This=0x7650820) returned 0x3 [0120.018] WbemDefPath:IWbemPath:SetText (This=0x7650820, uMode=0x4, pszPath="\\\\localhost\\root\\cimv2") returned 0x0 [0120.019] WbemDefPath:IUnknown:Release (This=0x7650820) returned 0x2 [0120.019] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf05c | out: puCount=0x50bf05c*=0x2) returned 0x0 [0120.019] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf058*=0x0, pszText=0x0 | out: puBuffLength=0x50bf058*=0x17, pszText=0x0) returned 0x0 [0120.019] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf058*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf058*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0120.019] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf058 | out: puCount=0x50bf058*=0x2) returned 0x0 [0120.019] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf054*=0x0, pszText=0x0 | out: puBuffLength=0x50bf054*=0x17, pszText=0x0) returned 0x0 [0120.019] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf054*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf054*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0120.019] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50befd4 | out: ppv=0x50befd4*=0x305784) returned 0x0 [0120.020] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50befcc | out: pAptType=0x50befcc*=1) returned 0x0 [0120.020] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50befd0 | out: ppvObject=0x50befd0*=0x0) returned 0x80004002 [0120.020] IUnknown:Release (This=0x305784) returned 0x1 [0120.020] CoGetClassObject (in: rclsid=0x3cba14*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bee24 | out: ppv=0x50bee24*=0x765dee8) returned 0x0 [0120.020] WbemLocator:IUnknown:QueryInterface (in: This=0x765dee8, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50bec54 | out: ppvObject=0x50bec54*=0x0) returned 0x80004002 [0120.020] WbemLocator:IClassFactory:CreateInstance (in: This=0x765dee8, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bec8c | out: ppvObject=0x50bec8c*=0x7650978) returned 0x0 [0120.021] WbemLocator:IUnknown:QueryInterface (in: This=0x7650978, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bea30 | out: ppvObject=0x50bea30*=0x7650978) returned 0x0 [0120.021] WbemLocator:IUnknown:QueryInterface (in: This=0x7650978, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be9ec | out: ppvObject=0x50be9ec*=0x0) returned 0x80004002 [0120.021] WbemLocator:IUnknown:AddRef (This=0x7650978) returned 0x3 [0120.021] CoGetContextToken (in: pToken=0x50be878 | out: pToken=0x50be878) returned 0x0 [0120.021] WbemLocator:IUnknown:QueryInterface (in: This=0x7650978, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be860 | out: ppvObject=0x50be860*=0x0) returned 0x80004002 [0120.022] CoGetContextToken (in: pToken=0x50be870 | out: pToken=0x50be870) returned 0x0 [0120.022] WbemLocator:IUnknown:AddRef (This=0x7650978) returned 0x4 [0120.022] WbemLocator:IUnknown:QueryInterface (in: This=0x7650978, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be8e4 | out: ppvObject=0x50be8e4*=0x0) returned 0x80004002 [0120.023] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x3 [0120.023] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x2 [0120.023] WbemLocator:IUnknown:Release (This=0x765dee8) returned 0x0 [0120.023] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x1 [0120.023] CoGetContextToken (in: pToken=0x50bed7c | out: pToken=0x50bed7c) returned 0x0 [0120.023] CoGetContextToken (in: pToken=0x50bed3c | out: pToken=0x50bed3c) returned 0x0 [0120.023] WbemLocator:IUnknown:AddRef (This=0x7650978) returned 0x2 [0120.024] WbemLocator:IUnknown:QueryInterface (in: This=0x7650978, riid=0x50bedb8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50bedb4 | out: ppvObject=0x50bedb4*=0x7650978) returned 0x0 [0120.024] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x2 [0120.024] WbemLocator:IUnknown:Release (This=0x7650978) returned 0x1 [0120.024] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50befac | out: puCount=0x50befac*=0x2) returned 0x0 [0120.024] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=8, puBuffLength=0x50befa8*=0x0, pszText=0x0 | out: puBuffLength=0x50befa8*=0x17, pszText=0x0) returned 0x0 [0120.025] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=8, puBuffLength=0x50befa8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50befa8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0120.025] CoCreateInstance (in: rclsid=0x3e013a0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x3e012d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x50bea84 | out: ppv=0x50bea84*=0x7650988) returned 0x0 [0120.025] WbemLocator:IWbemLocator:ConnectServer (in: This=0x7650988, strNetworkResource="\\\\localhost\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x50bead0 | out: ppNamespace=0x50bead0*=0x7650bdc) returned 0x0 [0120.579] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bdc, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be9a0 | out: ppvObject=0x50be9a0*=0x3e9be4) returned 0x0 [0120.581] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x3e9be4, pProxy=0x7650bdc, pAuthnSvc=0x50be9e8, pAuthzSvc=0x50be9e4, pServerPrincName=0x50be9f4, pAuthnLevel=0x50be9ec, pImpLevel=0x50be9d8, pAuthInfo=0x50be9dc, pCapabilites=0x50be9e0 | out: pAuthnSvc=0x50be9e8*=0xa, pAuthzSvc=0x50be9e4*=0x0, pServerPrincName=0x50be9f4, pAuthnLevel=0x50be9ec*=0x6, pImpLevel=0x50be9d8*=0x2, pAuthInfo=0x50be9dc, pCapabilites=0x50be9e0*=0x1) returned 0x0 [0120.581] WbemLocator:IUnknown:Release (This=0x3e9be4) returned 0x1 [0120.581] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bdc, riid=0x3e01250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be994 | out: ppvObject=0x50be994*=0x3e9c04) returned 0x0 [0120.581] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bdc, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be990 | out: ppvObject=0x50be990*=0x3e9be4) returned 0x0 [0120.581] WbemLocator:IClientSecurity:SetBlanket (This=0x3e9be4, pProxy=0x7650bdc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0120.582] WbemLocator:IUnknown:Release (This=0x3e9be4) returned 0x2 [0120.582] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x1 [0120.582] CoTaskMemFree (pv=0x3e4870) [0120.582] WbemLocator:IUnknown:Release (This=0x7650988) returned 0x0 [0120.582] WbemLocator:IUnknown:QueryInterface (in: This=0x7650bdc, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be350 | out: ppvObject=0x50be350*=0x3e9c04) returned 0x0 [0120.583] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be30c | out: ppvObject=0x50be30c*=0x0) returned 0x80004002 [0120.584] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be200 | out: ppvObject=0x50be200*=0x0) returned 0x80004002 [0120.585] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0120.585] CoGetContextToken (in: pToken=0x50be198 | out: pToken=0x50be198) returned 0x0 [0120.585] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be180 | out: ppvObject=0x50be180*=0x3e9b64) returned 0x0 [0120.586] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x3e9b64, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be188 | out: pCid=0x50be188*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0120.586] WbemLocator:IUnknown:Release (This=0x3e9b64) returned 0x3 [0120.586] CoGetContextToken (in: pToken=0x50be190 | out: pToken=0x50be190) returned 0x0 [0120.587] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x4 [0120.587] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be204 | out: ppvObject=0x50be204*=0x3e9bec) returned 0x0 [0120.587] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x4 [0120.587] WbemLocator:IRpcOptions:Query (in: This=0x3e9bec, pPrx=0x3e9c04, dwProperty=2, pdwValue=0x50be228 | out: pdwValue=0x50be228) returned 0x80004002 [0120.588] WbemLocator:IUnknown:Release (This=0x3e9bec) returned 0x3 [0120.589] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0120.589] CoGetContextToken (in: pToken=0x50be604 | out: pToken=0x50be604) returned 0x0 [0120.589] CoGetContextToken (in: pToken=0x50be5c4 | out: pToken=0x50be5c4) returned 0x0 [0120.589] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0120.589] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x50be640*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x50be63c | out: ppvObject=0x50be63c*=0x7650bdc) returned 0x0 [0120.590] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0120.590] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0120.590] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x1 [0120.590] CoGetContextToken (in: pToken=0x50bef20 | out: pToken=0x50bef20) returned 0x0 [0120.591] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x2 [0120.591] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50beb44 | out: ppvObject=0x50beb44*=0x3e9c04) returned 0x0 [0120.591] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0120.591] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x1 [0120.592] CoGetContextToken (in: pToken=0x50be724 | out: pToken=0x50be724) returned 0x0 [0120.592] CoGetContextToken (in: pToken=0x50be6e4 | out: pToken=0x50be6e4) returned 0x0 [0120.592] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x2 [0120.592] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x50be760*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x50be75c | out: ppvObject=0x50be75c*=0x7650bdc) returned 0x0 [0120.592] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0120.592] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0120.593] IWbemServices:ExecQuery (in: This=0x7650bdc, strQueryLanguage="WQL", strQuery="select * from Win32_Shadowcopy", lFlags=16, pCtx=0x0, ppEnum=0x50bed68 | out: ppEnum=0x50bed68*=0x765dc9c) returned 0x0 [0120.597] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bea14 | out: ppvObject=0x50bea14*=0x765dca0) returned 0x0 [0120.597] IClientSecurity:QueryBlanket (in: This=0x765dca0, pProxy=0x765dc9c, pAuthnSvc=0x50bea5c, pAuthzSvc=0x50bea58, pServerPrincName=0x50bea68, pAuthnLevel=0x50bea60, pImpLevel=0x50bea4c, pAuthInfo=0x50bea50, pCapabilites=0x50bea54 | out: pAuthnSvc=0x50bea5c*=0xa, pAuthzSvc=0x50bea58*=0x0, pServerPrincName=0x50bea68, pAuthnLevel=0x50bea60*=0x6, pImpLevel=0x50bea4c*=0x2, pAuthInfo=0x50bea50, pCapabilites=0x50bea54*=0x1) returned 0x0 [0120.597] IUnknown:Release (This=0x765dca0) returned 0x1 [0120.597] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x3e01250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bea08 | out: ppvObject=0x50bea08*=0x3e9b14) returned 0x0 [0120.597] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bea04 | out: ppvObject=0x50bea04*=0x765dca0) returned 0x0 [0120.597] IClientSecurity:SetBlanket (This=0x765dca0, pProxy=0x765dc9c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0120.600] IUnknown:Release (This=0x765dca0) returned 0x2 [0120.600] WbemLocator:IUnknown:Release (This=0x3e9b14) returned 0x1 [0120.600] CoTaskMemFree (pv=0x3e4720) [0120.600] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0120.600] IUnknown:QueryInterface (in: This=0x765dc9c, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c0 | out: ppvObject=0x50be3c0*=0x3e9b14) returned 0x0 [0120.601] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9b14, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be37c | out: ppvObject=0x50be37c*=0x0) returned 0x80004002 [0120.601] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9b14, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be270 | out: ppvObject=0x50be270*=0x0) returned 0x80004002 [0120.602] WbemLocator:IUnknown:AddRef (This=0x3e9b14) returned 0x3 [0120.602] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0120.602] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9b14, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f0 | out: ppvObject=0x50be1f0*=0x3e9a74) returned 0x0 [0120.603] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x3e9a74, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be1f8 | out: pCid=0x50be1f8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0120.603] WbemLocator:IUnknown:Release (This=0x3e9a74) returned 0x3 [0120.603] CoGetContextToken (in: pToken=0x50be200 | out: pToken=0x50be200) returned 0x0 [0120.603] WbemLocator:IUnknown:AddRef (This=0x3e9b14) returned 0x4 [0120.604] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9b14, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be274 | out: ppvObject=0x50be274*=0x3e9afc) returned 0x0 [0120.604] WbemLocator:IUnknown:Release (This=0x3e9b14) returned 0x4 [0120.604] WbemLocator:IRpcOptions:Query (in: This=0x3e9afc, pPrx=0x3e9b14, dwProperty=2, pdwValue=0x50be298 | out: pdwValue=0x50be298) returned 0x80004002 [0120.604] WbemLocator:IUnknown:Release (This=0x3e9afc) returned 0x3 [0120.605] WbemLocator:IUnknown:Release (This=0x3e9b14) returned 0x2 [0120.605] CoGetContextToken (in: pToken=0x50be674 | out: pToken=0x50be674) returned 0x0 [0120.605] CoGetContextToken (in: pToken=0x50be634 | out: pToken=0x50be634) returned 0x0 [0120.605] WbemLocator:IUnknown:AddRef (This=0x3e9b14) returned 0x3 [0120.605] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9b14, riid=0x50be6b0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x50be6ac | out: ppvObject=0x50be6ac*=0x765dc9c) returned 0x0 [0120.606] WbemLocator:IUnknown:Release (This=0x3e9b14) returned 0x3 [0120.606] IUnknown:Release (This=0x765dc9c) returned 0x2 [0120.606] IUnknown:Release (This=0x765dc9c) returned 0x1 [0120.607] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf000 | out: puCount=0x50bf000*=0x2) returned 0x0 [0120.607] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beffc*=0x0, pszText=0x0 | out: puBuffLength=0x50beffc*=0x17, pszText=0x0) returned 0x0 [0120.607] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beffc*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beffc*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0120.607] CoGetContextToken (in: pToken=0x50be99c | out: pToken=0x50be99c) returned 0x0 [0120.607] CoGetContextToken (in: pToken=0x50be95c | out: pToken=0x50be95c) returned 0x0 [0120.607] WbemLocator:IUnknown:AddRef (This=0x3e9b14) returned 0x2 [0120.607] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9b14, riid=0x50be9d8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x50be9d4 | out: ppvObject=0x50be9d4*=0x765dc9c) returned 0x0 [0120.607] WbemLocator:IUnknown:Release (This=0x3e9b14) returned 0x2 [0120.608] IUnknown:AddRef (This=0x765dc9c) returned 0x3 [0120.608] IEnumWbemClassObject:Clone (in: This=0x765dc9c, ppEnum=0x50befd0 | out: ppEnum=0x50befd0*=0x765dd64) returned 0x0 [0120.609] IUnknown:QueryInterface (in: This=0x765dd64, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bec8c | out: ppvObject=0x50bec8c*=0x765dd68) returned 0x0 [0120.610] IClientSecurity:QueryBlanket (in: This=0x765dd68, pProxy=0x765dd64, pAuthnSvc=0x50becd4, pAuthzSvc=0x50becd0, pServerPrincName=0x50bece0, pAuthnLevel=0x50becd8, pImpLevel=0x50becc4, pAuthInfo=0x50becc8, pCapabilites=0x50beccc | out: pAuthnSvc=0x50becd4*=0xa, pAuthzSvc=0x50becd0*=0x0, pServerPrincName=0x50bece0, pAuthnLevel=0x50becd8*=0x6, pImpLevel=0x50becc4*=0x2, pAuthInfo=0x50becc8, pCapabilites=0x50beccc*=0x1) returned 0x0 [0120.610] IUnknown:Release (This=0x765dd68) returned 0x1 [0120.610] IUnknown:QueryInterface (in: This=0x765dd64, riid=0x3e01250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bec80 | out: ppvObject=0x50bec80*=0x3e9de4) returned 0x0 [0120.610] IUnknown:QueryInterface (in: This=0x765dd64, riid=0x3e01260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50bec7c | out: ppvObject=0x50bec7c*=0x765dd68) returned 0x0 [0120.610] IClientSecurity:SetBlanket (This=0x765dd68, pProxy=0x765dd64, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x4, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0120.612] IUnknown:Release (This=0x765dd68) returned 0x2 [0120.612] WbemLocator:IUnknown:Release (This=0x3e9de4) returned 0x1 [0120.612] CoTaskMemFree (pv=0x3e4870) [0120.612] IUnknown:Release (This=0x765dc9c) returned 0x2 [0120.613] IUnknown:QueryInterface (in: This=0x765dd64, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be628 | out: ppvObject=0x50be628*=0x3e9de4) returned 0x0 [0120.613] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9de4, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be5e4 | out: ppvObject=0x50be5e4*=0x0) returned 0x80004002 [0120.613] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9de4, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be4d8 | out: ppvObject=0x50be4d8*=0x0) returned 0x80004002 [0120.614] WbemLocator:IUnknown:AddRef (This=0x3e9de4) returned 0x3 [0120.614] CoGetContextToken (in: pToken=0x50be470 | out: pToken=0x50be470) returned 0x0 [0120.614] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9de4, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be458 | out: ppvObject=0x50be458*=0x3e9d44) returned 0x0 [0120.615] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x3e9d44, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be460 | out: pCid=0x50be460*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0120.615] WbemLocator:IUnknown:Release (This=0x3e9d44) returned 0x3 [0120.615] CoGetContextToken (in: pToken=0x50be468 | out: pToken=0x50be468) returned 0x0 [0120.615] WbemLocator:IUnknown:AddRef (This=0x3e9de4) returned 0x4 [0120.615] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9de4, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be4dc | out: ppvObject=0x50be4dc*=0x3e9dcc) returned 0x0 [0120.615] WbemLocator:IUnknown:Release (This=0x3e9de4) returned 0x4 [0120.615] WbemLocator:IRpcOptions:Query (in: This=0x3e9dcc, pPrx=0x3e9de4, dwProperty=2, pdwValue=0x50be500 | out: pdwValue=0x50be500) returned 0x80004002 [0120.616] WbemLocator:IUnknown:Release (This=0x3e9dcc) returned 0x3 [0120.616] WbemLocator:IUnknown:Release (This=0x3e9de4) returned 0x2 [0120.616] CoGetContextToken (in: pToken=0x50be8dc | out: pToken=0x50be8dc) returned 0x0 [0120.616] CoGetContextToken (in: pToken=0x50be89c | out: pToken=0x50be89c) returned 0x0 [0120.616] WbemLocator:IUnknown:AddRef (This=0x3e9de4) returned 0x3 [0120.616] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9de4, riid=0x50be918*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x50be914 | out: ppvObject=0x50be914*=0x765dd64) returned 0x0 [0120.616] WbemLocator:IUnknown:Release (This=0x3e9de4) returned 0x3 [0120.616] IUnknown:Release (This=0x765dd64) returned 0x2 [0120.617] IUnknown:Release (This=0x765dd64) returned 0x1 [0120.617] CoGetContextToken (in: pToken=0x50beed0 | out: pToken=0x50beed0) returned 0x0 [0120.617] CoGetContextToken (in: pToken=0x50bee90 | out: pToken=0x50bee90) returned 0x0 [0120.617] WbemLocator:IUnknown:AddRef (This=0x3e9de4) returned 0x2 [0120.617] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9de4, riid=0x50bef0c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x50bef08 | out: ppvObject=0x50bef08*=0x765dd64) returned 0x0 [0120.617] WbemLocator:IUnknown:Release (This=0x3e9de4) returned 0x2 [0120.617] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0120.617] IEnumWbemClassObject:Reset (This=0x765dd64) returned 0x0 [0120.619] IUnknown:Release (This=0x765dd64) returned 0x2 [0120.619] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0120.619] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0120.619] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x765cae8, puReturned=0x63c1a70*=0x1) returned 0x0 [0154.372] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x765cae8) returned 0x0 [0154.372] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0154.373] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0154.374] IUnknown:AddRef (This=0x765cae8) returned 0x3 [0154.374] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0154.374] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x765caec) returned 0x0 [0154.375] IMarshal:GetUnmarshalClass (in: This=0x765caec, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0154.375] IUnknown:Release (This=0x765caec) returned 0x3 [0154.375] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0154.375] IUnknown:AddRef (This=0x765cae8) returned 0x4 [0154.375] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0154.375] IUnknown:Release (This=0x765cae8) returned 0x3 [0154.376] IUnknown:Release (This=0x765cae8) returned 0x2 [0154.376] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0154.376] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0154.376] IUnknown:AddRef (This=0x765cae8) returned 0x3 [0154.376] IUnknown:QueryInterface (in: This=0x765cae8, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x765cae8) returned 0x0 [0154.377] IUnknown:Release (This=0x765cae8) returned 0x3 [0154.377] IUnknown:Release (This=0x765cae8) returned 0x2 [0154.377] IUnknown:Release (This=0x765cae8) returned 0x1 [0154.377] IUnknown:Release (This=0x765dd64) returned 0x2 [0154.378] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0154.378] IUnknown:AddRef (This=0x765cae8) returned 0x2 [0154.378] IWbemClassObject:Get (in: This=0x765cae8, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0154.379] IWbemClassObject:Get (in: This=0x765cae8, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0154.379] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x52 [0154.380] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0154.380] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0154.380] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0154.380] IUnknown:Release (This=0x305784) returned 0x1 [0154.383] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x7650988) returned 0x0 [0154.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650988, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0154.383] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650988, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x7650bf0) returned 0x0 [0154.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x7650bf0) returned 0x0 [0154.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0154.384] WbemDefPath:IUnknown:AddRef (This=0x7650bf0) returned 0x3 [0154.385] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0154.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e4bd8) returned 0x0 [0154.385] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e4bd8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0154.385] WbemDefPath:IUnknown:Release (This=0x60e4bd8) returned 0x3 [0154.385] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0154.385] WbemDefPath:IUnknown:AddRef (This=0x7650bf0) returned 0x4 [0154.385] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0154.386] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x3 [0154.386] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x2 [0154.386] WbemDefPath:IUnknown:Release (This=0x7650988) returned 0x0 [0154.386] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x1 [0154.387] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0154.387] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0154.387] WbemDefPath:IUnknown:AddRef (This=0x7650bf0) returned 0x2 [0154.387] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x7650bf0) returned 0x0 [0154.387] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x2 [0154.387] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x1 [0154.387] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0154.388] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0154.388] WbemDefPath:IUnknown:AddRef (This=0x7650bf0) returned 0x2 [0154.388] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650bf0, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x7650bf0) returned 0x0 [0154.388] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x2 [0154.388] WbemDefPath:IUnknown:AddRef (This=0x7650bf0) returned 0x3 [0154.388] WbemDefPath:IWbemPath:SetText (This=0x7650bf0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x0 [0154.388] WbemDefPath:IUnknown:Release (This=0x7650bf0) returned 0x2 [0154.389] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0154.389] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0154.389] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0154.400] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0154.401] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0154.401] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0154.401] IWbemClassObject:Get (in: This=0x765cae8, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c28b0*=0, plFlavor=0x63c28b4*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63c28b0*=8, plFlavor=0x63c28b4*=64) returned 0x0 [0154.401] SysStringLen (param_1="root\\cimv2") returned 0xa [0154.401] IWbemClassObject:Get (in: This=0x765cae8, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c28b0*=8, plFlavor=0x63c28b4*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63c28b0*=8, plFlavor=0x63c28b4*=64) returned 0x0 [0154.402] SysStringLen (param_1="root\\cimv2") returned 0xa [0154.402] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0154.402] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0154.402] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0154.402] IWbemClassObject:Get (in: This=0x765cae8, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c2968*=0, plFlavor=0x63c296c*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63c2968*=8, plFlavor=0x63c296c*=64) returned 0x0 [0154.402] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0154.402] IWbemClassObject:Get (in: This=0x765cae8, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c2968*=8, plFlavor=0x63c296c*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63c2968*=8, plFlavor=0x63c296c*=64) returned 0x0 [0154.402] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0154.417] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bebb0 | out: puCount=0x50bebb0*=0x2) returned 0x0 [0154.417] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bebac*=0x0, pszText=0x0 | out: puBuffLength=0x50bebac*=0x17, pszText=0x0) returned 0x0 [0154.417] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bebac*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bebac*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0154.417] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bebb0 | out: puCount=0x50bebb0*=0x2) returned 0x0 [0154.417] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bebac*=0x0, pszText=0x0 | out: puBuffLength=0x50bebac*=0x17, pszText=0x0) returned 0x0 [0154.417] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bebac*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bebac*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0154.417] IWbemClassObject:GetNames (in: This=0x765cae8, wszQualifierName=0x0, lFlags=48, pQualifierVal=0x50beb74*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x50beb40 | out: pNames=0x50beb40*="\x01ƀ\x04") returned 0x0 [0154.418] SafeArrayGetDim (psa=0x3e47c0) returned 0x1 [0154.418] SafeArrayGetDim (psa=0x3e47c0) returned 0x1 [0154.418] SafeArrayGetLBound (in: psa=0x3e47c0, nDim=0x1, plLbound=0x50be73c | out: plLbound=0x50be73c) returned 0x0 [0154.419] IWbemClassObject:Get (in: This=0x765cae8, wszName="__GENUS", lFlags=0, pVal=0x50beb6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c558c*=0, plFlavor=0x63c5590*=0 | out: pVal=0x50beb6c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x63c558c*=3, plFlavor=0x63c5590*=64) returned 0x0 [0154.419] IWbemClassObject:Get (in: This=0x765cae8, wszName="__CLASS", lFlags=0, pVal=0x50beb6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c55c0*=0, plFlavor=0x63c55c4*=0 | out: pVal=0x50beb6c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63c55c0*=8, plFlavor=0x63c55c4*=64) returned 0x0 [0154.419] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0154.419] IWbemClassObject:Get (in: This=0x765cae8, wszName="__SUPERCLASS", lFlags=0, pVal=0x50beb6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c561c*=0, plFlavor=0x63c5620*=0 | out: pVal=0x50beb6c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CIM_LogicalElement", varVal2=0x0), pType=0x63c561c*=8, plFlavor=0x63c5620*=64) returned 0x0 [0154.419] SysStringLen (param_1="CIM_LogicalElement") returned 0x12 [0154.420] IWbemClassObject:Get (in: This=0x765cae8, wszName="__DYNASTY", lFlags=0, pVal=0x50beb6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c567c*=0, plFlavor=0x63c5680*=0 | out: pVal=0x50beb6c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CIM_ManagedSystemElement", varVal2=0x0), pType=0x63c567c*=8, plFlavor=0x63c5680*=64) returned 0x0 [0154.420] SysStringLen (param_1="CIM_ManagedSystemElement") returned 0x18 [0154.420] IWbemClassObject:Get (in: This=0x765cae8, wszName="__RELPATH", lFlags=0, pVal=0x50beb6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c56e8*=0, plFlavor=0x63c56ec*=0 | out: pVal=0x50beb6c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", varVal2=0x0), pType=0x63c56e8*=8, plFlavor=0x63c56ec*=64) returned 0x0 [0154.420] SysStringLen (param_1="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x3c [0154.421] IWbemClassObject:Get (in: This=0x765cae8, wszName="__PROPERTY_COUNT", lFlags=0, pVal=0x50beb6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c579c*=0, plFlavor=0x63c57a0*=0 | out: pVal=0x50beb6c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1c, varVal2=0x0), pType=0x63c579c*=3, plFlavor=0x63c57a0*=64) returned 0x0 [0154.421] IWbemClassObject:Get (in: This=0x765cae8, wszName="__DERIVATION", lFlags=0, pVal=0x50beb6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c57d0*=0, plFlavor=0x63c57d4*=0 | out: pVal=0x50beb6c*(varType=0x2008, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3e47c0*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x60e4c68, rgsabound=((cElements=0x2, lLbound=0))), varVal2=0x0), pType=0x63c57d0*=8200, plFlavor=0x63c57d4*=64) returned 0x0 [0154.422] IWbemClassObject:Get (in: This=0x765cae8, wszName="__SERVER", lFlags=0, pVal=0x50beb6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c588c*=0, plFlavor=0x63c5890*=0 | out: pVal=0x50beb6c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x63c588c*=8, plFlavor=0x63c5890*=64) returned 0x0 [0154.422] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0154.422] IWbemClassObject:Get (in: This=0x765cae8, wszName="__NAMESPACE", lFlags=0, pVal=0x50beb6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c58d8*=0, plFlavor=0x63c58dc*=0 | out: pVal=0x50beb6c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63c58d8*=8, plFlavor=0x63c58dc*=64) returned 0x0 [0154.422] SysStringLen (param_1="root\\cimv2") returned 0xa [0154.423] IWbemClassObject:Get (in: This=0x765cae8, wszName="__PATH", lFlags=0, pVal=0x50beb6c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c5928*=0, plFlavor=0x63c592c*=0 | out: pVal=0x50beb6c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", varVal2=0x0), pType=0x63c5928*=8, plFlavor=0x63c592c*=64) returned 0x0 [0154.423] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x52 [0154.423] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bebec | out: puCount=0x50bebec*=0x2) returned 0x0 [0154.423] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bebe8*=0x0, pszText=0x0 | out: puBuffLength=0x50bebe8*=0x17, pszText=0x0) returned 0x0 [0154.423] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bebe8*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bebe8*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0154.423] IWbemClassObject:Get (in: This=0x765cae8, wszName="Delete", lFlags=0, pVal=0x50beba8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c5a58*=0, plFlavor=0x63c5a5c*=0 | out: pVal=0x50beba8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c5a58*=0, plFlavor=0x63c5a5c*=0) returned 0x80041002 [0155.003] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x50beb8c | out: pperrinfo=0x50beb8c*=0x0) returned 0x1 [0155.004] IIDFromString (in: lpsz="{EB87E1BD-3233-11D2-AEC9-00C04FB68820}", lpiid=0x50beae4 | out: lpiid=0x50beae4) returned 0x0 [0155.004] CoGetClassObject (in: rclsid=0x3b9054*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bea4c | out: ppv=0x50bea4c*=0x765de50) returned 0x0 [0155.007] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de50, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be87c | out: ppvObject=0x50be87c*=0x0) returned 0x80004002 [0155.007] WbemStatusCodeText:IClassFactory:CreateInstance (in: This=0x765de50, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be8b4 | out: ppvObject=0x50be8b4*=0x765de60) returned 0x0 [0155.007] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be658 | out: ppvObject=0x50be658*=0x765de60) returned 0x0 [0155.007] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be614 | out: ppvObject=0x50be614*=0x0) returned 0x80004002 [0155.008] WbemStatusCodeText:IUnknown:AddRef (This=0x765de60) returned 0x3 [0155.008] CoGetContextToken (in: pToken=0x50be4a0 | out: pToken=0x50be4a0) returned 0x0 [0155.008] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be488 | out: ppvObject=0x50be488*=0x0) returned 0x80004002 [0155.009] CoGetContextToken (in: pToken=0x50be498 | out: pToken=0x50be498) returned 0x0 [0155.009] WbemStatusCodeText:IUnknown:AddRef (This=0x765de60) returned 0x4 [0155.009] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be50c | out: ppvObject=0x50be50c*=0x0) returned 0x80004002 [0155.009] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x3 [0155.009] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x2 [0155.031] WbemStatusCodeText:IUnknown:Release (This=0x765de50) returned 0x0 [0155.031] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x1 [0155.032] CoGetContextToken (in: pToken=0x50be9a4 | out: pToken=0x50be9a4) returned 0x0 [0155.032] CoGetContextToken (in: pToken=0x50be964 | out: pToken=0x50be964) returned 0x0 [0155.032] WbemStatusCodeText:IUnknown:AddRef (This=0x765de60) returned 0x2 [0155.032] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x50be9e0*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x50be9dc | out: ppvObject=0x50be9dc*=0x765de60) returned 0x0 [0155.032] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x2 [0155.032] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x1 [0155.038] CoGetContextToken (in: pToken=0x50be96c | out: pToken=0x50be96c) returned 0x0 [0155.038] CoGetContextToken (in: pToken=0x50be92c | out: pToken=0x50be92c) returned 0x0 [0155.038] WbemStatusCodeText:IUnknown:AddRef (This=0x765de60) returned 0x2 [0155.039] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x765de60, riid=0x50be9a8*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x50be9a4 | out: ppvObject=0x50be9a4*=0x765de60) returned 0x0 [0155.039] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x2 [0155.039] WbemStatusCodeText:IUnknown:AddRef (This=0x765de60) returned 0x3 [0155.039] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x765de60, hRes=0x80041002, LocaleId=0x0, lFlags=1, MessageText=0x50beadc | out: MessageText=0x50beadc*="Not found ") returned 0x0 [0155.043] SysStringByteLen (bstr="Not found ") returned 0x14 [0155.044] SysStringByteLen (bstr="Not found ") returned 0x14 [0155.044] WbemStatusCodeText:IUnknown:Release (This=0x765de60) returned 0x2 [0155.056] IWbemClassObject:Get (in: This=0x765cae8, wszName="__SERVER", lFlags=0, pVal=0x50beb58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bec10*=0, plFlavor=0x50bec0c*=0 | out: pVal=0x50beb58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x50bec10*=8, plFlavor=0x50bec0c*=64) returned 0x0 [0155.056] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0155.056] IWbemClassObject:Get (in: This=0x765cae8, wszName="__NAMESPACE", lFlags=0, pVal=0x50beb58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bec10*=8, plFlavor=0x50bec0c*=64 | out: pVal=0x50beb58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x50bec10*=8, plFlavor=0x50bec0c*=64) returned 0x0 [0155.056] SysStringLen (param_1="root\\cimv2") returned 0xa [0155.056] IWbemClassObject:Get (in: This=0x765cae8, wszName="__CLASS", lFlags=0, pVal=0x50beb58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bec10*=8, plFlavor=0x50bec0c*=64 | out: pVal=0x50beb58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x50bec10*=8, plFlavor=0x50bec0c*=64) returned 0x0 [0155.057] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0155.057] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb38 | out: ppv=0x50beb38*=0x305784) returned 0x0 [0155.057] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beb30 | out: pAptType=0x50beb30*=1) returned 0x0 [0155.057] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beb34 | out: ppvObject=0x50beb34*=0x0) returned 0x80004002 [0155.057] IUnknown:Release (This=0x305784) returned 0x1 [0155.058] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be650 | out: ppv=0x50be650*=0x765de50) returned 0x0 [0155.058] WbemDefPath:IUnknown:QueryInterface (in: This=0x765de50, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be480 | out: ppvObject=0x50be480*=0x0) returned 0x80004002 [0155.058] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765de50, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be4b8 | out: ppvObject=0x50be4b8*=0x765d248) returned 0x0 [0155.058] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be25c | out: ppvObject=0x50be25c*=0x765d248) returned 0x0 [0155.059] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be218 | out: ppvObject=0x50be218*=0x0) returned 0x80004002 [0155.059] WbemDefPath:IUnknown:AddRef (This=0x765d248) returned 0x3 [0155.059] CoGetContextToken (in: pToken=0x50be0a4 | out: pToken=0x50be0a4) returned 0x0 [0155.059] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be08c | out: ppvObject=0x50be08c*=0x60e4c78) returned 0x0 [0155.060] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e4c78, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be094 | out: pCid=0x50be094*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0155.060] WbemDefPath:IUnknown:Release (This=0x60e4c78) returned 0x3 [0155.060] CoGetContextToken (in: pToken=0x50be09c | out: pToken=0x50be09c) returned 0x0 [0155.060] WbemDefPath:IUnknown:AddRef (This=0x765d248) returned 0x4 [0155.060] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be110 | out: ppvObject=0x50be110*=0x0) returned 0x80004002 [0155.060] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x3 [0155.060] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x2 [0155.060] WbemDefPath:IUnknown:Release (This=0x765de50) returned 0x0 [0155.061] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x1 [0155.061] CoGetContextToken (in: pToken=0x50be94c | out: pToken=0x50be94c) returned 0x0 [0155.061] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0155.061] WbemDefPath:IUnknown:AddRef (This=0x765d248) returned 0x2 [0155.061] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x50be988*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be984 | out: ppvObject=0x50be984*=0x765d248) returned 0x0 [0155.061] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x2 [0155.061] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x1 [0155.061] CoGetContextToken (in: pToken=0x50be9cc | out: pToken=0x50be9cc) returned 0x0 [0155.061] CoGetContextToken (in: pToken=0x50be98c | out: pToken=0x50be98c) returned 0x0 [0155.061] WbemDefPath:IUnknown:AddRef (This=0x765d248) returned 0x2 [0155.062] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d248, riid=0x50bea08*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bea04 | out: ppvObject=0x50bea04*=0x765d248) returned 0x0 [0155.062] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x2 [0155.062] WbemDefPath:IUnknown:AddRef (This=0x765d248) returned 0x3 [0155.062] WbemDefPath:IWbemPath:SetText (This=0x765d248, uMode=0x4, pszPath="") returned 0x0 [0155.062] WbemDefPath:IUnknown:Release (This=0x765d248) returned 0x2 [0155.062] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb38 | out: ppv=0x50beb38*=0x305784) returned 0x0 [0155.062] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beb30 | out: pAptType=0x50beb30*=1) returned 0x0 [0155.062] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beb34 | out: ppvObject=0x50beb34*=0x0) returned 0x80004002 [0155.063] IUnknown:Release (This=0x305784) returned 0x1 [0155.063] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be650 | out: ppv=0x50be650*=0x765de50) returned 0x0 [0155.063] WbemDefPath:IUnknown:QueryInterface (in: This=0x765de50, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be480 | out: ppvObject=0x50be480*=0x0) returned 0x80004002 [0155.063] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765de50, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be4b8 | out: ppvObject=0x50be4b8*=0x765d2b8) returned 0x0 [0155.063] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be25c | out: ppvObject=0x50be25c*=0x765d2b8) returned 0x0 [0155.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be218 | out: ppvObject=0x50be218*=0x0) returned 0x80004002 [0155.065] WbemDefPath:IUnknown:AddRef (This=0x765d2b8) returned 0x3 [0155.065] CoGetContextToken (in: pToken=0x50be0a4 | out: pToken=0x50be0a4) returned 0x0 [0155.065] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be08c | out: ppvObject=0x50be08c*=0x60e4c68) returned 0x0 [0155.065] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e4c68, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be094 | out: pCid=0x50be094*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0155.065] WbemDefPath:IUnknown:Release (This=0x60e4c68) returned 0x3 [0155.066] CoGetContextToken (in: pToken=0x50be09c | out: pToken=0x50be09c) returned 0x0 [0155.066] WbemDefPath:IUnknown:AddRef (This=0x765d2b8) returned 0x4 [0155.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be110 | out: ppvObject=0x50be110*=0x0) returned 0x80004002 [0155.066] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x3 [0155.067] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x2 [0155.067] WbemDefPath:IUnknown:Release (This=0x765de50) returned 0x0 [0155.067] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x1 [0155.067] CoGetContextToken (in: pToken=0x50be94c | out: pToken=0x50be94c) returned 0x0 [0155.067] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0155.068] WbemDefPath:IUnknown:AddRef (This=0x765d2b8) returned 0x2 [0155.068] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x50be988*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be984 | out: ppvObject=0x50be984*=0x765d2b8) returned 0x0 [0155.068] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x2 [0155.068] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x1 [0155.069] CoGetContextToken (in: pToken=0x50be9cc | out: pToken=0x50be9cc) returned 0x0 [0155.069] CoGetContextToken (in: pToken=0x50be98c | out: pToken=0x50be98c) returned 0x0 [0155.069] WbemDefPath:IUnknown:AddRef (This=0x765d2b8) returned 0x2 [0155.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d2b8, riid=0x50bea08*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bea04 | out: ppvObject=0x50bea04*=0x765d2b8) returned 0x0 [0155.069] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x2 [0155.069] WbemDefPath:IUnknown:AddRef (This=0x765d2b8) returned 0x3 [0155.070] WbemDefPath:IWbemPath:SetText (This=0x765d2b8, uMode=0x4, pszPath="") returned 0x0 [0155.070] WbemDefPath:IUnknown:Release (This=0x765d2b8) returned 0x2 [0155.070] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d2b8, puCount=0x50beb8c | out: puCount=0x50beb8c*=0x0) returned 0x0 [0155.070] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d248, puCount=0x50beb8c | out: puCount=0x50beb8c*=0x0) returned 0x0 [0155.100] WbemDefPath:IWbemPath:GetClassName (in: This=0x765d2b8, puBuffLength=0x50bebe0*=0x0, pszName=0x0 | out: puBuffLength=0x50bebe0*=0x0, pszName=0x0) returned 0x8004103a [0155.111] WbemDefPath:IWbemPath:GetServer (in: This=0x765d2b8, puNameBufLength=0x50bebe4*=0x0, pName=0x0 | out: puNameBufLength=0x50bebe4*=0x0, pName=0x0) returned 0x80041009 [0155.747] WbemDefPath:IWbemPath:SetServer (This=0x765d2b8, Name="CRH2YWU7") returned 0x0 [0155.747] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb38 | out: ppv=0x50beb38*=0x305784) returned 0x0 [0155.748] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beb30 | out: pAptType=0x50beb30*=1) returned 0x0 [0155.748] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beb34 | out: ppvObject=0x50beb34*=0x0) returned 0x80004002 [0155.748] IUnknown:Release (This=0x305784) returned 0x1 [0155.748] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be650 | out: ppv=0x50be650*=0x765de50) returned 0x0 [0155.749] WbemDefPath:IUnknown:QueryInterface (in: This=0x765de50, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be480 | out: ppvObject=0x50be480*=0x0) returned 0x80004002 [0155.749] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765de50, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be4b8 | out: ppvObject=0x50be4b8*=0x765d350) returned 0x0 [0155.749] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be25c | out: ppvObject=0x50be25c*=0x765d350) returned 0x0 [0155.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be218 | out: ppvObject=0x50be218*=0x0) returned 0x80004002 [0155.750] WbemDefPath:IUnknown:AddRef (This=0x765d350) returned 0x3 [0155.750] CoGetContextToken (in: pToken=0x50be0a4 | out: pToken=0x50be0a4) returned 0x0 [0155.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be08c | out: ppvObject=0x50be08c*=0x60e4c88) returned 0x0 [0155.751] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e4c88, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be094 | out: pCid=0x50be094*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0155.751] WbemDefPath:IUnknown:Release (This=0x60e4c88) returned 0x3 [0155.751] CoGetContextToken (in: pToken=0x50be09c | out: pToken=0x50be09c) returned 0x0 [0155.752] WbemDefPath:IUnknown:AddRef (This=0x765d350) returned 0x4 [0155.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be110 | out: ppvObject=0x50be110*=0x0) returned 0x80004002 [0155.752] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x3 [0155.752] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x2 [0155.752] WbemDefPath:IUnknown:Release (This=0x765de50) returned 0x0 [0155.753] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x1 [0155.753] CoGetContextToken (in: pToken=0x50be94c | out: pToken=0x50be94c) returned 0x0 [0155.753] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0155.753] WbemDefPath:IUnknown:AddRef (This=0x765d350) returned 0x2 [0155.753] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x50be988*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be984 | out: ppvObject=0x50be984*=0x765d350) returned 0x0 [0155.754] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x2 [0155.754] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x1 [0155.754] CoGetContextToken (in: pToken=0x50be9cc | out: pToken=0x50be9cc) returned 0x0 [0155.754] CoGetContextToken (in: pToken=0x50be98c | out: pToken=0x50be98c) returned 0x0 [0155.754] WbemDefPath:IUnknown:AddRef (This=0x765d350) returned 0x2 [0155.755] WbemDefPath:IUnknown:QueryInterface (in: This=0x765d350, riid=0x50bea08*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bea04 | out: ppvObject=0x50bea04*=0x765d350) returned 0x0 [0155.755] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x2 [0155.755] WbemDefPath:IUnknown:AddRef (This=0x765d350) returned 0x3 [0155.755] WbemDefPath:IWbemPath:SetText (This=0x765d350, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0155.755] WbemDefPath:IUnknown:Release (This=0x765d350) returned 0x2 [0155.756] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d2b8, puCount=0x50beb8c | out: puCount=0x50beb8c*=0x0) returned 0x0 [0155.756] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d350, puCount=0x50beb8c | out: puCount=0x50beb8c*=0x2) returned 0x0 [0155.756] WbemDefPath:IWbemPath:GetText (in: This=0x765d350, lFlags=16, puBuffLength=0x50beb88*=0x0, pszText=0x0 | out: puBuffLength=0x50beb88*=0xb, pszText=0x0) returned 0x0 [0155.756] WbemDefPath:IWbemPath:GetText (in: This=0x765d350, lFlags=16, puBuffLength=0x50beb88*=0xb, pszText="0000000000" | out: puBuffLength=0x50beb88*=0xb, pszText="root\\cimv2") returned 0x0 [0155.762] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x765d2b8) returned 0x0 [0155.762] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d350, puCount=0x50bebc0 | out: puCount=0x50bebc0*=0x2) returned 0x0 [0155.770] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765d350, uIndex=0x0, puNameBufLength=0x50bebbc*=0x0, pName=0x0 | out: puNameBufLength=0x50bebbc*=0x5, pName=0x0) returned 0x0 [0155.772] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765d350, uIndex=0x0, puNameBufLength=0x50bebbc*=0x5, pName="0000" | out: puNameBufLength=0x50bebbc*=0x5, pName="root") returned 0x0 [0155.778] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765d2b8, uIndex=0x0, pszName="root") returned 0x0 [0155.778] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765d350, uIndex=0x1, puNameBufLength=0x50bebbc*=0x0, pName=0x0 | out: puNameBufLength=0x50bebbc*=0x6, pName=0x0) returned 0x0 [0155.778] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765d350, uIndex=0x1, puNameBufLength=0x50bebbc*=0x6, pName="00000" | out: puNameBufLength=0x50bebbc*=0x6, pName="cimv2") returned 0x0 [0155.778] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765d2b8, uIndex=0x1, pszName="cimv2") returned 0x0 [0155.778] WbemDefPath:IWbemPath:GetClassName (in: This=0x765d2b8, puBuffLength=0x50bebe0*=0x0, pszName=0x0 | out: puBuffLength=0x50bebe0*=0x0, pszName=0x0) returned 0x8004103a [0155.782] WbemDefPath:IWbemPath:SetClassName (This=0x765d2b8, Name="Win32_ShadowCopy") returned 0x0 [0155.783] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765d2b8, puCount=0x50bec2c | out: puCount=0x50bec2c*=0x2) returned 0x0 [0155.783] WbemDefPath:IWbemPath:GetText (in: This=0x765d2b8, lFlags=4, puBuffLength=0x50bec28*=0x0, pszText=0x0 | out: puBuffLength=0x50bec28*=0x27, pszText=0x0) returned 0x0 [0155.783] WbemDefPath:IWbemPath:GetText (in: This=0x765d2b8, lFlags=4, puBuffLength=0x50bec28*=0x27, pszText="00000000000000000000000000000000000000" | out: puBuffLength=0x50bec28*=0x27, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy") returned 0x0 [0155.783] IWbemClassObject:Get (in: This=0x765cae8, wszName="__SERVER", lFlags=0, pVal=0x50beb44*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bebfc*=0, plFlavor=0x50bebf8*=0 | out: pVal=0x50beb44*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x50bebfc*=8, plFlavor=0x50bebf8*=64) returned 0x0 [0155.783] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0155.783] IWbemClassObject:Get (in: This=0x765cae8, wszName="__NAMESPACE", lFlags=0, pVal=0x50beb44*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bebfc*=8, plFlavor=0x50bebf8*=64 | out: pVal=0x50beb44*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x50bebfc*=8, plFlavor=0x50bebf8*=64) returned 0x0 [0155.784] SysStringLen (param_1="root\\cimv2") returned 0xa [0155.784] IWbemClassObject:Get (in: This=0x765cae8, wszName="__CLASS", lFlags=0, pVal=0x50beb44*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bebfc*=8, plFlavor=0x50bebf8*=64 | out: pVal=0x50beb44*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x50bebfc*=8, plFlavor=0x50bebf8*=64) returned 0x0 [0155.784] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0155.784] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb24 | out: ppv=0x50beb24*=0x305784) returned 0x0 [0155.784] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beb1c | out: pAptType=0x50beb1c*=1) returned 0x0 [0155.784] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beb20 | out: ppvObject=0x50beb20*=0x0) returned 0x80004002 [0155.785] IUnknown:Release (This=0x305784) returned 0x1 [0155.785] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be63c | out: ppv=0x50be63c*=0x7650c88) returned 0x0 [0155.785] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c88, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be46c | out: ppvObject=0x50be46c*=0x0) returned 0x80004002 [0155.786] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650c88, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be4a4 | out: ppvObject=0x50be4a4*=0x765e400) returned 0x0 [0155.786] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be248 | out: ppvObject=0x50be248*=0x765e400) returned 0x0 [0155.786] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be204 | out: ppvObject=0x50be204*=0x0) returned 0x80004002 [0155.787] WbemDefPath:IUnknown:AddRef (This=0x765e400) returned 0x3 [0155.787] CoGetContextToken (in: pToken=0x50be090 | out: pToken=0x50be090) returned 0x0 [0155.787] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be078 | out: ppvObject=0x50be078*=0x60e9738) returned 0x0 [0155.787] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e9738, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be080 | out: pCid=0x50be080*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0155.787] WbemDefPath:IUnknown:Release (This=0x60e9738) returned 0x3 [0155.788] CoGetContextToken (in: pToken=0x50be088 | out: pToken=0x50be088) returned 0x0 [0155.788] WbemDefPath:IUnknown:AddRef (This=0x765e400) returned 0x4 [0155.788] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0fc | out: ppvObject=0x50be0fc*=0x0) returned 0x80004002 [0155.788] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x3 [0155.788] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x2 [0155.789] WbemDefPath:IUnknown:Release (This=0x7650c88) returned 0x0 [0155.789] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x1 [0155.789] CoGetContextToken (in: pToken=0x50be938 | out: pToken=0x50be938) returned 0x0 [0155.789] CoGetContextToken (in: pToken=0x50be8f8 | out: pToken=0x50be8f8) returned 0x0 [0155.789] WbemDefPath:IUnknown:AddRef (This=0x765e400) returned 0x2 [0155.789] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x50be974*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be970 | out: ppvObject=0x50be970*=0x765e400) returned 0x0 [0155.883] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x2 [0155.884] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x1 [0155.884] CoGetContextToken (in: pToken=0x50be9b8 | out: pToken=0x50be9b8) returned 0x0 [0155.884] CoGetContextToken (in: pToken=0x50be978 | out: pToken=0x50be978) returned 0x0 [0155.884] WbemDefPath:IUnknown:AddRef (This=0x765e400) returned 0x2 [0155.884] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e400, riid=0x50be9f4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be9f0 | out: ppvObject=0x50be9f0*=0x765e400) returned 0x0 [0155.884] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x2 [0155.885] WbemDefPath:IUnknown:AddRef (This=0x765e400) returned 0x3 [0155.885] WbemDefPath:IWbemPath:SetText (This=0x765e400, uMode=0x4, pszPath="") returned 0x0 [0155.885] WbemDefPath:IUnknown:Release (This=0x765e400) returned 0x2 [0155.885] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb24 | out: ppv=0x50beb24*=0x305784) returned 0x0 [0155.885] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beb1c | out: pAptType=0x50beb1c*=1) returned 0x0 [0155.885] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beb20 | out: ppvObject=0x50beb20*=0x0) returned 0x80004002 [0155.885] IUnknown:Release (This=0x305784) returned 0x1 [0155.886] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be63c | out: ppv=0x50be63c*=0x7650c88) returned 0x0 [0155.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c88, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be46c | out: ppvObject=0x50be46c*=0x0) returned 0x80004002 [0155.886] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650c88, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be4a4 | out: ppvObject=0x50be4a4*=0x765e470) returned 0x0 [0155.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be248 | out: ppvObject=0x50be248*=0x765e470) returned 0x0 [0155.887] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be204 | out: ppvObject=0x50be204*=0x0) returned 0x80004002 [0155.887] WbemDefPath:IUnknown:AddRef (This=0x765e470) returned 0x3 [0155.887] CoGetContextToken (in: pToken=0x50be090 | out: pToken=0x50be090) returned 0x0 [0155.887] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be078 | out: ppvObject=0x50be078*=0x60e9748) returned 0x0 [0155.887] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e9748, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be080 | out: pCid=0x50be080*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0155.887] WbemDefPath:IUnknown:Release (This=0x60e9748) returned 0x3 [0155.888] CoGetContextToken (in: pToken=0x50be088 | out: pToken=0x50be088) returned 0x0 [0155.888] WbemDefPath:IUnknown:AddRef (This=0x765e470) returned 0x4 [0155.888] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0fc | out: ppvObject=0x50be0fc*=0x0) returned 0x80004002 [0155.888] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x3 [0155.888] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x2 [0155.889] WbemDefPath:IUnknown:Release (This=0x7650c88) returned 0x0 [0155.889] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x1 [0155.889] CoGetContextToken (in: pToken=0x50be938 | out: pToken=0x50be938) returned 0x0 [0155.889] CoGetContextToken (in: pToken=0x50be8f8 | out: pToken=0x50be8f8) returned 0x0 [0155.889] WbemDefPath:IUnknown:AddRef (This=0x765e470) returned 0x2 [0155.889] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x50be974*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be970 | out: ppvObject=0x50be970*=0x765e470) returned 0x0 [0155.889] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x2 [0155.889] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x1 [0155.890] CoGetContextToken (in: pToken=0x50be9b8 | out: pToken=0x50be9b8) returned 0x0 [0155.890] CoGetContextToken (in: pToken=0x50be978 | out: pToken=0x50be978) returned 0x0 [0155.890] WbemDefPath:IUnknown:AddRef (This=0x765e470) returned 0x2 [0155.890] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e470, riid=0x50be9f4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be9f0 | out: ppvObject=0x50be9f0*=0x765e470) returned 0x0 [0155.890] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x2 [0155.890] WbemDefPath:IUnknown:AddRef (This=0x765e470) returned 0x3 [0155.890] WbemDefPath:IWbemPath:SetText (This=0x765e470, uMode=0x4, pszPath="") returned 0x0 [0155.890] WbemDefPath:IUnknown:Release (This=0x765e470) returned 0x2 [0155.890] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e470, puCount=0x50beb78 | out: puCount=0x50beb78*=0x0) returned 0x0 [0155.890] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e400, puCount=0x50beb78 | out: puCount=0x50beb78*=0x0) returned 0x0 [0155.890] WbemDefPath:IWbemPath:GetClassName (in: This=0x765e470, puBuffLength=0x50bebcc*=0x0, pszName=0x0 | out: puBuffLength=0x50bebcc*=0x0, pszName=0x0) returned 0x8004103a [0155.890] WbemDefPath:IWbemPath:GetServer (in: This=0x765e470, puNameBufLength=0x50bebd0*=0x0, pName=0x0 | out: puNameBufLength=0x50bebd0*=0x0, pName=0x0) returned 0x80041009 [0155.890] WbemDefPath:IWbemPath:SetServer (This=0x765e470, Name="CRH2YWU7") returned 0x0 [0155.890] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb24 | out: ppv=0x50beb24*=0x305784) returned 0x0 [0155.891] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beb1c | out: pAptType=0x50beb1c*=1) returned 0x0 [0155.891] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beb20 | out: ppvObject=0x50beb20*=0x0) returned 0x80004002 [0155.891] IUnknown:Release (This=0x305784) returned 0x1 [0155.891] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be63c | out: ppv=0x50be63c*=0x7650c88) returned 0x0 [0155.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x7650c88, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be46c | out: ppvObject=0x50be46c*=0x0) returned 0x80004002 [0155.891] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7650c88, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be4a4 | out: ppvObject=0x50be4a4*=0x765e508) returned 0x0 [0155.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be248 | out: ppvObject=0x50be248*=0x765e508) returned 0x0 [0155.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be204 | out: ppvObject=0x50be204*=0x0) returned 0x80004002 [0155.892] WbemDefPath:IUnknown:AddRef (This=0x765e508) returned 0x3 [0155.893] CoGetContextToken (in: pToken=0x50be090 | out: pToken=0x50be090) returned 0x0 [0155.893] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be078 | out: ppvObject=0x50be078*=0x60e9758) returned 0x0 [0155.893] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e9758, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be080 | out: pCid=0x50be080*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0155.893] WbemDefPath:IUnknown:Release (This=0x60e9758) returned 0x3 [0155.893] CoGetContextToken (in: pToken=0x50be088 | out: pToken=0x50be088) returned 0x0 [0155.893] WbemDefPath:IUnknown:AddRef (This=0x765e508) returned 0x4 [0155.893] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0fc | out: ppvObject=0x50be0fc*=0x0) returned 0x80004002 [0155.894] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x3 [0155.894] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x2 [0155.894] WbemDefPath:IUnknown:Release (This=0x7650c88) returned 0x0 [0155.894] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x1 [0155.894] CoGetContextToken (in: pToken=0x50be938 | out: pToken=0x50be938) returned 0x0 [0155.895] CoGetContextToken (in: pToken=0x50be8f8 | out: pToken=0x50be8f8) returned 0x0 [0155.895] WbemDefPath:IUnknown:AddRef (This=0x765e508) returned 0x2 [0155.895] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x50be974*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be970 | out: ppvObject=0x50be970*=0x765e508) returned 0x0 [0155.895] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x2 [0155.895] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x1 [0155.895] CoGetContextToken (in: pToken=0x50be9b8 | out: pToken=0x50be9b8) returned 0x0 [0155.895] CoGetContextToken (in: pToken=0x50be978 | out: pToken=0x50be978) returned 0x0 [0155.895] WbemDefPath:IUnknown:AddRef (This=0x765e508) returned 0x2 [0155.895] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e508, riid=0x50be9f4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be9f0 | out: ppvObject=0x50be9f0*=0x765e508) returned 0x0 [0155.896] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x2 [0155.896] WbemDefPath:IUnknown:AddRef (This=0x765e508) returned 0x3 [0155.896] WbemDefPath:IWbemPath:SetText (This=0x765e508, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0155.896] WbemDefPath:IUnknown:Release (This=0x765e508) returned 0x2 [0155.896] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e470, puCount=0x50beb78 | out: puCount=0x50beb78*=0x0) returned 0x0 [0155.896] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e508, puCount=0x50beb78 | out: puCount=0x50beb78*=0x2) returned 0x0 [0155.896] WbemDefPath:IWbemPath:GetText (in: This=0x765e508, lFlags=16, puBuffLength=0x50beb74*=0x0, pszText=0x0 | out: puBuffLength=0x50beb74*=0xb, pszText=0x0) returned 0x0 [0155.896] WbemDefPath:IWbemPath:GetText (in: This=0x765e508, lFlags=16, puBuffLength=0x50beb74*=0xb, pszText="0000000000" | out: puBuffLength=0x50beb74*=0xb, pszText="root\\cimv2") returned 0x0 [0155.896] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x765e470) returned 0x0 [0155.896] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e508, puCount=0x50bebac | out: puCount=0x50bebac*=0x2) returned 0x0 [0155.896] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765e508, uIndex=0x0, puNameBufLength=0x50beba8*=0x0, pName=0x0 | out: puNameBufLength=0x50beba8*=0x5, pName=0x0) returned 0x0 [0155.896] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765e508, uIndex=0x0, puNameBufLength=0x50beba8*=0x5, pName="0000" | out: puNameBufLength=0x50beba8*=0x5, pName="root") returned 0x0 [0155.896] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765e470, uIndex=0x0, pszName="root") returned 0x0 [0155.896] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765e508, uIndex=0x1, puNameBufLength=0x50beba8*=0x0, pName=0x0 | out: puNameBufLength=0x50beba8*=0x6, pName=0x0) returned 0x0 [0155.896] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765e508, uIndex=0x1, puNameBufLength=0x50beba8*=0x6, pName="00000" | out: puNameBufLength=0x50beba8*=0x6, pName="cimv2") returned 0x0 [0155.896] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765e470, uIndex=0x1, pszName="cimv2") returned 0x0 [0155.897] WbemDefPath:IWbemPath:GetClassName (in: This=0x765e470, puBuffLength=0x50bebcc*=0x0, pszName=0x0 | out: puBuffLength=0x50bebcc*=0x0, pszName=0x0) returned 0x8004103a [0155.897] WbemDefPath:IWbemPath:SetClassName (This=0x765e470, Name="Win32_ShadowCopy") returned 0x0 [0155.897] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e470, puCount=0x50bebe0 | out: puCount=0x50bebe0*=0x2) returned 0x0 [0155.897] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=4, puBuffLength=0x50bebdc*=0x0, pszText=0x0 | out: puBuffLength=0x50bebdc*=0x27, pszText=0x0) returned 0x0 [0155.897] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=4, puBuffLength=0x50bebdc*=0x27, pszText="00000000000000000000000000000000000000" | out: puBuffLength=0x50bebdc*=0x27, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy") returned 0x0 [0155.906] WbemDefPath:IWbemPath:GetInfo (in: This=0x765e470, uRequestedInfo=0x0, puResponse=0x50bebe4 | out: puResponse=0x50bebe4*=0x20c16) returned 0x0 [0155.906] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e470, puCount=0x50bebe0 | out: puCount=0x50bebe0*=0x2) returned 0x0 [0155.906] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=8, puBuffLength=0x50bebdc*=0x0, pszText=0x0 | out: puBuffLength=0x50bebdc*=0x16, pszText=0x0) returned 0x0 [0155.906] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=8, puBuffLength=0x50bebdc*=0x16, pszText="000000000000000000000" | out: puBuffLength=0x50bebdc*=0x16, pszText="\\\\CRH2YWU7\\root\\cimv2") returned 0x0 [0155.908] WbemDefPath:IWbemPath:GetInfo (in: This=0x765e470, uRequestedInfo=0x0, puResponse=0x50bebe4 | out: puResponse=0x50bebe4*=0x20c16) returned 0x0 [0155.908] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb80 | out: ppv=0x50beb80*=0x305784) returned 0x0 [0155.909] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beb78 | out: pAptType=0x50beb78*=1) returned 0x0 [0155.909] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beb7c | out: ppvObject=0x50beb7c*=0x0) returned 0x80004002 [0155.909] IUnknown:Release (This=0x305784) returned 0x1 [0155.909] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be698 | out: ppv=0x50be698*=0x765e640) returned 0x0 [0155.909] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e640, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be4c8 | out: ppvObject=0x50be4c8*=0x0) returned 0x80004002 [0155.910] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765e640, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be500 | out: ppvObject=0x50be500*=0x765e650) returned 0x0 [0155.910] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be2a4 | out: ppvObject=0x50be2a4*=0x765e650) returned 0x0 [0155.910] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be260 | out: ppvObject=0x50be260*=0x0) returned 0x80004002 [0155.911] WbemDefPath:IUnknown:AddRef (This=0x765e650) returned 0x3 [0155.911] CoGetContextToken (in: pToken=0x50be0ec | out: pToken=0x50be0ec) returned 0x0 [0155.911] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0d4 | out: ppvObject=0x50be0d4*=0x60e97b8) returned 0x0 [0155.911] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e97b8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be0dc | out: pCid=0x50be0dc*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0155.911] WbemDefPath:IUnknown:Release (This=0x60e97b8) returned 0x3 [0155.912] CoGetContextToken (in: pToken=0x50be0e4 | out: pToken=0x50be0e4) returned 0x0 [0155.912] WbemDefPath:IUnknown:AddRef (This=0x765e650) returned 0x4 [0155.912] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be158 | out: ppvObject=0x50be158*=0x0) returned 0x80004002 [0155.912] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x3 [0155.912] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x2 [0155.912] WbemDefPath:IUnknown:Release (This=0x765e640) returned 0x0 [0155.913] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x1 [0155.913] CoGetContextToken (in: pToken=0x50be994 | out: pToken=0x50be994) returned 0x0 [0155.913] CoGetContextToken (in: pToken=0x50be954 | out: pToken=0x50be954) returned 0x0 [0155.913] WbemDefPath:IUnknown:AddRef (This=0x765e650) returned 0x2 [0155.913] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x50be9d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be9cc | out: ppvObject=0x50be9cc*=0x765e650) returned 0x0 [0155.913] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x2 [0155.913] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x1 [0155.913] CoGetContextToken (in: pToken=0x50bea14 | out: pToken=0x50bea14) returned 0x0 [0155.914] CoGetContextToken (in: pToken=0x50be9d4 | out: pToken=0x50be9d4) returned 0x0 [0155.914] WbemDefPath:IUnknown:AddRef (This=0x765e650) returned 0x2 [0155.914] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e650, riid=0x50bea50*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bea4c | out: ppvObject=0x50bea4c*=0x765e650) returned 0x0 [0155.914] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x2 [0155.914] WbemDefPath:IUnknown:AddRef (This=0x765e650) returned 0x3 [0155.914] WbemDefPath:IWbemPath:SetText (This=0x765e650, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2") returned 0x0 [0155.914] WbemDefPath:IUnknown:Release (This=0x765e650) returned 0x2 [0155.915] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765e650, puCount=0x50bebb8 | out: puCount=0x50bebb8*=0x2) returned 0x0 [0155.915] WbemDefPath:IWbemPath:GetText (in: This=0x765e650, lFlags=4, puBuffLength=0x50bebb4*=0x0, pszText=0x0 | out: puBuffLength=0x50bebb4*=0x16, pszText=0x0) returned 0x0 [0155.915] WbemDefPath:IWbemPath:GetText (in: This=0x765e650, lFlags=4, puBuffLength=0x50bebb4*=0x16, pszText="000000000000000000000" | out: puBuffLength=0x50bebb4*=0x16, pszText="\\\\CRH2YWU7\\root\\cimv2") returned 0x0 [0155.915] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bebd8 | out: puCount=0x50bebd8*=0x2) returned 0x0 [0155.915] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bebd4*=0x0, pszText=0x0 | out: puBuffLength=0x50bebd4*=0x17, pszText=0x0) returned 0x0 [0155.915] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bebd4*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bebd4*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0155.916] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50beb80 | out: puCount=0x50beb80*=0x2) returned 0x0 [0155.916] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb7c*=0x0, pszText=0x0 | out: puBuffLength=0x50beb7c*=0x17, pszText=0x0) returned 0x0 [0155.916] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb7c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beb7c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0155.916] CoGetContextToken (in: pToken=0x50bea58 | out: pToken=0x50bea58) returned 0x0 [0155.916] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0155.916] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be67c | out: ppvObject=0x50be67c*=0x3e9c04) returned 0x0 [0155.916] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0155.916] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0155.917] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=2, puBuffLength=0x50beb84*=0x0, pszText=0x0 | out: puBuffLength=0x50beb84*=0x11, pszText=0x0) returned 0x0 [0155.918] WbemDefPath:IWbemPath:GetText (in: This=0x765e470, lFlags=2, puBuffLength=0x50beb84*=0x11, pszText="0000000000000000" | out: puBuffLength=0x50beb84*=0x11, pszText="Win32_ShadowCopy") returned 0x0 [0155.935] CoGetContextToken (in: pToken=0x50be7bc | out: pToken=0x50be7bc) returned 0x0 [0155.935] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0155.935] IWbemServices:GetObject (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy", lFlags=0, pCtx=0x0, ppObject=0x50be930*=0x0, ppCallResult=0x0 | out: ppObject=0x50be930*=0x765e720, ppCallResult=0x0) returned 0x0 [0156.345] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0156.345] IWbemClassObject:Get (in: This=0x765e720, wszName="__PATH", lFlags=0, pVal=0x50beae8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bebcc*=0, plFlavor=0x50bebc8*=0 | out: pVal=0x50beae8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy", varVal2=0x0), pType=0x50bebcc*=8, plFlavor=0x50bebc8*=64) returned 0x0 [0156.345] SysStringLen (param_1="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy") returned 0x26 [0156.346] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x305784) returned 0x0 [0156.346] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beb18 | out: pAptType=0x50beb18*=1) returned 0x0 [0156.346] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beb1c | out: ppvObject=0x50beb1c*=0x0) returned 0x80004002 [0156.346] IUnknown:Release (This=0x305784) returned 0x1 [0156.347] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be638 | out: ppv=0x50be638*=0x765e640) returned 0x0 [0156.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e640, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be468 | out: ppvObject=0x50be468*=0x0) returned 0x80004002 [0156.347] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765e640, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be4a0 | out: ppvObject=0x50be4a0*=0x765e918) returned 0x0 [0156.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be244 | out: ppvObject=0x50be244*=0x765e918) returned 0x0 [0156.347] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be200 | out: ppvObject=0x50be200*=0x0) returned 0x80004002 [0156.348] WbemDefPath:IUnknown:AddRef (This=0x765e918) returned 0x3 [0156.348] CoGetContextToken (in: pToken=0x50be08c | out: pToken=0x50be08c) returned 0x0 [0156.348] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be074 | out: ppvObject=0x50be074*=0x60e97e8) returned 0x0 [0156.348] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e97e8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be07c | out: pCid=0x50be07c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0156.348] WbemDefPath:IUnknown:Release (This=0x60e97e8) returned 0x3 [0156.348] CoGetContextToken (in: pToken=0x50be084 | out: pToken=0x50be084) returned 0x0 [0156.349] WbemDefPath:IUnknown:AddRef (This=0x765e918) returned 0x4 [0156.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0f8 | out: ppvObject=0x50be0f8*=0x0) returned 0x80004002 [0156.349] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x3 [0156.349] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x2 [0156.349] WbemDefPath:IUnknown:Release (This=0x765e640) returned 0x0 [0156.349] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x1 [0156.349] CoGetContextToken (in: pToken=0x50be934 | out: pToken=0x50be934) returned 0x0 [0156.349] CoGetContextToken (in: pToken=0x50be8f4 | out: pToken=0x50be8f4) returned 0x0 [0156.349] WbemDefPath:IUnknown:AddRef (This=0x765e918) returned 0x2 [0156.349] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x50be970*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be96c | out: ppvObject=0x50be96c*=0x765e918) returned 0x0 [0156.350] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x2 [0156.350] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x1 [0156.350] CoGetContextToken (in: pToken=0x50be9b4 | out: pToken=0x50be9b4) returned 0x0 [0156.350] CoGetContextToken (in: pToken=0x50be974 | out: pToken=0x50be974) returned 0x0 [0156.350] WbemDefPath:IUnknown:AddRef (This=0x765e918) returned 0x2 [0156.350] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e918, riid=0x50be9f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be9ec | out: ppvObject=0x50be9ec*=0x765e918) returned 0x0 [0156.350] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x2 [0156.350] WbemDefPath:IUnknown:AddRef (This=0x765e918) returned 0x3 [0156.350] WbemDefPath:IWbemPath:SetText (This=0x765e918, uMode=0x4, pszPath="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy") returned 0x0 [0156.350] WbemDefPath:IUnknown:Release (This=0x765e918) returned 0x2 [0156.351] IWbemClassObject:Get (in: This=0x765e720, wszName="__SERVER", lFlags=0, pVal=0x50beb20*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bebd8*=0, plFlavor=0x50bebd4*=0 | out: pVal=0x50beb20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CRH2YWU7", varVal2=0x0), pType=0x50bebd8*=8, plFlavor=0x50bebd4*=64) returned 0x0 [0156.351] SysStringLen (param_1="CRH2YWU7") returned 0x8 [0156.351] IWbemClassObject:Get (in: This=0x765e720, wszName="__NAMESPACE", lFlags=0, pVal=0x50beb20*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bebd8*=8, plFlavor=0x50bebd4*=64 | out: pVal=0x50beb20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\cimv2", varVal2=0x0), pType=0x50bebd8*=8, plFlavor=0x50bebd4*=64) returned 0x0 [0156.351] SysStringLen (param_1="ROOT\\cimv2") returned 0xa [0156.351] IWbemClassObject:Get (in: This=0x765e720, wszName="__CLASS", lFlags=0, pVal=0x50beb20*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bebd8*=8, plFlavor=0x50bebd4*=64 | out: pVal=0x50beb20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x50bebd8*=8, plFlavor=0x50bebd4*=64) returned 0x0 [0156.351] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0156.351] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb00 | out: ppv=0x50beb00*=0x305784) returned 0x0 [0156.351] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beaf8 | out: pAptType=0x50beaf8*=1) returned 0x0 [0156.351] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beafc | out: ppvObject=0x50beafc*=0x0) returned 0x80004002 [0156.352] IUnknown:Release (This=0x305784) returned 0x1 [0156.352] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be618 | out: ppv=0x50be618*=0x765e640) returned 0x0 [0156.352] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e640, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be448 | out: ppvObject=0x50be448*=0x0) returned 0x80004002 [0156.352] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765e640, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be480 | out: ppvObject=0x50be480*=0x765ea08) returned 0x0 [0156.352] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be224 | out: ppvObject=0x50be224*=0x765ea08) returned 0x0 [0156.353] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be1e0 | out: ppvObject=0x50be1e0*=0x0) returned 0x80004002 [0156.353] WbemDefPath:IUnknown:AddRef (This=0x765ea08) returned 0x3 [0156.353] CoGetContextToken (in: pToken=0x50be06c | out: pToken=0x50be06c) returned 0x0 [0156.353] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be054 | out: ppvObject=0x50be054*=0x60e9828) returned 0x0 [0156.353] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e9828, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be05c | out: pCid=0x50be05c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0156.353] WbemDefPath:IUnknown:Release (This=0x60e9828) returned 0x3 [0156.354] CoGetContextToken (in: pToken=0x50be064 | out: pToken=0x50be064) returned 0x0 [0156.354] WbemDefPath:IUnknown:AddRef (This=0x765ea08) returned 0x4 [0156.354] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0d8 | out: ppvObject=0x50be0d8*=0x0) returned 0x80004002 [0156.354] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x3 [0156.354] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x2 [0156.354] WbemDefPath:IUnknown:Release (This=0x765e640) returned 0x0 [0156.354] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x1 [0156.354] CoGetContextToken (in: pToken=0x50be914 | out: pToken=0x50be914) returned 0x0 [0156.354] CoGetContextToken (in: pToken=0x50be8d4 | out: pToken=0x50be8d4) returned 0x0 [0156.354] WbemDefPath:IUnknown:AddRef (This=0x765ea08) returned 0x2 [0156.355] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x50be950*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be94c | out: ppvObject=0x50be94c*=0x765ea08) returned 0x0 [0156.355] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x2 [0156.355] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x1 [0156.355] CoGetContextToken (in: pToken=0x50be994 | out: pToken=0x50be994) returned 0x0 [0156.355] CoGetContextToken (in: pToken=0x50be954 | out: pToken=0x50be954) returned 0x0 [0156.355] WbemDefPath:IUnknown:AddRef (This=0x765ea08) returned 0x2 [0156.355] WbemDefPath:IUnknown:QueryInterface (in: This=0x765ea08, riid=0x50be9d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be9cc | out: ppvObject=0x50be9cc*=0x765ea08) returned 0x0 [0156.355] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x2 [0156.355] WbemDefPath:IUnknown:AddRef (This=0x765ea08) returned 0x3 [0156.355] WbemDefPath:IWbemPath:SetText (This=0x765ea08, uMode=0x4, pszPath="") returned 0x0 [0156.355] WbemDefPath:IUnknown:Release (This=0x765ea08) returned 0x2 [0156.355] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb00 | out: ppv=0x50beb00*=0x305784) returned 0x0 [0156.356] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beaf8 | out: pAptType=0x50beaf8*=1) returned 0x0 [0156.356] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beafc | out: ppvObject=0x50beafc*=0x0) returned 0x80004002 [0156.356] IUnknown:Release (This=0x305784) returned 0x1 [0156.356] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be618 | out: ppv=0x50be618*=0x765e640) returned 0x0 [0156.356] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e640, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be448 | out: ppvObject=0x50be448*=0x0) returned 0x80004002 [0156.356] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765e640, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be480 | out: ppvObject=0x50be480*=0x765eaa0) returned 0x0 [0156.356] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be224 | out: ppvObject=0x50be224*=0x765eaa0) returned 0x0 [0156.357] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be1e0 | out: ppvObject=0x50be1e0*=0x0) returned 0x80004002 [0156.357] WbemDefPath:IUnknown:AddRef (This=0x765eaa0) returned 0x3 [0156.357] CoGetContextToken (in: pToken=0x50be06c | out: pToken=0x50be06c) returned 0x0 [0156.357] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be054 | out: ppvObject=0x50be054*=0x60e9838) returned 0x0 [0156.357] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e9838, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be05c | out: pCid=0x50be05c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0156.357] WbemDefPath:IUnknown:Release (This=0x60e9838) returned 0x3 [0156.357] CoGetContextToken (in: pToken=0x50be064 | out: pToken=0x50be064) returned 0x0 [0156.357] WbemDefPath:IUnknown:AddRef (This=0x765eaa0) returned 0x4 [0156.357] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0d8 | out: ppvObject=0x50be0d8*=0x0) returned 0x80004002 [0156.358] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x3 [0156.358] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x2 [0156.358] WbemDefPath:IUnknown:Release (This=0x765e640) returned 0x0 [0156.358] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x1 [0156.358] CoGetContextToken (in: pToken=0x50be914 | out: pToken=0x50be914) returned 0x0 [0156.358] CoGetContextToken (in: pToken=0x50be8d4 | out: pToken=0x50be8d4) returned 0x0 [0156.358] WbemDefPath:IUnknown:AddRef (This=0x765eaa0) returned 0x2 [0156.358] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x50be950*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be94c | out: ppvObject=0x50be94c*=0x765eaa0) returned 0x0 [0156.358] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x2 [0156.359] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x1 [0156.359] CoGetContextToken (in: pToken=0x50be994 | out: pToken=0x50be994) returned 0x0 [0156.359] CoGetContextToken (in: pToken=0x50be954 | out: pToken=0x50be954) returned 0x0 [0156.359] WbemDefPath:IUnknown:AddRef (This=0x765eaa0) returned 0x2 [0156.359] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eaa0, riid=0x50be9d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be9cc | out: ppvObject=0x50be9cc*=0x765eaa0) returned 0x0 [0156.359] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x2 [0156.359] WbemDefPath:IUnknown:AddRef (This=0x765eaa0) returned 0x3 [0156.359] WbemDefPath:IWbemPath:SetText (This=0x765eaa0, uMode=0x4, pszPath="") returned 0x0 [0156.359] WbemDefPath:IUnknown:Release (This=0x765eaa0) returned 0x2 [0156.359] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765eaa0, puCount=0x50beb54 | out: puCount=0x50beb54*=0x0) returned 0x0 [0156.359] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765ea08, puCount=0x50beb54 | out: puCount=0x50beb54*=0x0) returned 0x0 [0156.359] WbemDefPath:IWbemPath:GetClassName (in: This=0x765eaa0, puBuffLength=0x50beba8*=0x0, pszName=0x0 | out: puBuffLength=0x50beba8*=0x0, pszName=0x0) returned 0x8004103a [0156.359] WbemDefPath:IWbemPath:GetServer (in: This=0x765eaa0, puNameBufLength=0x50bebac*=0x0, pName=0x0 | out: puNameBufLength=0x50bebac*=0x0, pName=0x0) returned 0x80041009 [0156.359] WbemDefPath:IWbemPath:SetServer (This=0x765eaa0, Name="CRH2YWU7") returned 0x0 [0156.360] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb00 | out: ppv=0x50beb00*=0x305784) returned 0x0 [0156.360] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50beaf8 | out: pAptType=0x50beaf8*=1) returned 0x0 [0156.360] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50beafc | out: ppvObject=0x50beafc*=0x0) returned 0x80004002 [0156.360] IUnknown:Release (This=0x305784) returned 0x1 [0156.360] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be618 | out: ppv=0x50be618*=0x765e640) returned 0x0 [0156.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x765e640, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be448 | out: ppvObject=0x50be448*=0x0) returned 0x80004002 [0156.360] WbemDefPath:IClassFactory:CreateInstance (in: This=0x765e640, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be480 | out: ppvObject=0x50be480*=0x765eb10) returned 0x0 [0156.360] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be224 | out: ppvObject=0x50be224*=0x765eb10) returned 0x0 [0156.361] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be1e0 | out: ppvObject=0x50be1e0*=0x0) returned 0x80004002 [0156.361] WbemDefPath:IUnknown:AddRef (This=0x765eb10) returned 0x3 [0156.361] CoGetContextToken (in: pToken=0x50be06c | out: pToken=0x50be06c) returned 0x0 [0156.361] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be054 | out: ppvObject=0x50be054*=0x60e9848) returned 0x0 [0156.361] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e9848, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be05c | out: pCid=0x50be05c*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0156.361] WbemDefPath:IUnknown:Release (This=0x60e9848) returned 0x3 [0156.362] CoGetContextToken (in: pToken=0x50be064 | out: pToken=0x50be064) returned 0x0 [0156.362] WbemDefPath:IUnknown:AddRef (This=0x765eb10) returned 0x4 [0156.362] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be0d8 | out: ppvObject=0x50be0d8*=0x0) returned 0x80004002 [0156.362] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x3 [0156.362] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x2 [0156.362] WbemDefPath:IUnknown:Release (This=0x765e640) returned 0x0 [0156.362] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x1 [0156.362] CoGetContextToken (in: pToken=0x50be914 | out: pToken=0x50be914) returned 0x0 [0156.362] CoGetContextToken (in: pToken=0x50be8d4 | out: pToken=0x50be8d4) returned 0x0 [0156.362] WbemDefPath:IUnknown:AddRef (This=0x765eb10) returned 0x2 [0156.362] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x50be950*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be94c | out: ppvObject=0x50be94c*=0x765eb10) returned 0x0 [0156.363] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x2 [0156.363] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x1 [0156.363] CoGetContextToken (in: pToken=0x50be994 | out: pToken=0x50be994) returned 0x0 [0156.363] CoGetContextToken (in: pToken=0x50be954 | out: pToken=0x50be954) returned 0x0 [0156.363] WbemDefPath:IUnknown:AddRef (This=0x765eb10) returned 0x2 [0156.363] WbemDefPath:IUnknown:QueryInterface (in: This=0x765eb10, riid=0x50be9d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50be9cc | out: ppvObject=0x50be9cc*=0x765eb10) returned 0x0 [0156.363] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x2 [0156.363] WbemDefPath:IUnknown:AddRef (This=0x765eb10) returned 0x3 [0156.363] WbemDefPath:IWbemPath:SetText (This=0x765eb10, uMode=0x4, pszPath="ROOT\\cimv2") returned 0x0 [0156.363] WbemDefPath:IUnknown:Release (This=0x765eb10) returned 0x2 [0156.363] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765eaa0, puCount=0x50beb54 | out: puCount=0x50beb54*=0x0) returned 0x0 [0156.363] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765eb10, puCount=0x50beb54 | out: puCount=0x50beb54*=0x2) returned 0x0 [0156.364] WbemDefPath:IWbemPath:GetText (in: This=0x765eb10, lFlags=16, puBuffLength=0x50beb50*=0x0, pszText=0x0 | out: puBuffLength=0x50beb50*=0xb, pszText=0x0) returned 0x0 [0156.364] WbemDefPath:IWbemPath:GetText (in: This=0x765eb10, lFlags=16, puBuffLength=0x50beb50*=0xb, pszText="0000000000" | out: puBuffLength=0x50beb50*=0xb, pszText="ROOT\\cimv2") returned 0x0 [0156.364] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x765eaa0) returned 0x0 [0156.364] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765eb10, puCount=0x50beb88 | out: puCount=0x50beb88*=0x2) returned 0x0 [0156.364] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765eb10, uIndex=0x0, puNameBufLength=0x50beb84*=0x0, pName=0x0 | out: puNameBufLength=0x50beb84*=0x5, pName=0x0) returned 0x0 [0156.364] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765eb10, uIndex=0x0, puNameBufLength=0x50beb84*=0x5, pName="0000" | out: puNameBufLength=0x50beb84*=0x5, pName="ROOT") returned 0x0 [0156.364] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765eaa0, uIndex=0x0, pszName="ROOT") returned 0x0 [0156.364] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765eb10, uIndex=0x1, puNameBufLength=0x50beb84*=0x0, pName=0x0 | out: puNameBufLength=0x50beb84*=0x6, pName=0x0) returned 0x0 [0156.364] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x765eb10, uIndex=0x1, puNameBufLength=0x50beb84*=0x6, pName="00000" | out: puNameBufLength=0x50beb84*=0x6, pName="cimv2") returned 0x0 [0156.364] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x765eaa0, uIndex=0x1, pszName="cimv2") returned 0x0 [0156.364] WbemDefPath:IWbemPath:GetClassName (in: This=0x765eaa0, puBuffLength=0x50beba8*=0x0, pszName=0x0 | out: puBuffLength=0x50beba8*=0x0, pszName=0x0) returned 0x8004103a [0156.364] WbemDefPath:IWbemPath:SetClassName (This=0x765eaa0, Name="Win32_ShadowCopy") returned 0x0 [0156.364] IWbemClassObject:BeginMethodEnumeration (This=0x765e720, lEnumFlags=0) returned 0x0 [0156.364] IWbemClassObject:NextMethod (in: This=0x765e720, lFlags=0, pstrName=0x50beb18*=0x0, ppInSignature=0x50beba0*=0x0, ppOutSignature=0x50beb9c*=0x0 | out: pstrName=0x50beb18*="Create", ppInSignature=0x50beba0*=0x765ee10, ppOutSignature=0x50beb9c*=0x7662f90) returned 0x0 [0156.365] SysStringByteLen (bstr="Create") returned 0xc [0156.365] SysStringByteLen (bstr="Create") returned 0xc [0156.365] IWbemClassObject:NextMethod (in: This=0x765e720, lFlags=0, pstrName=0x50beb18*=0x0, ppInSignature=0x50beba0*=0x0, ppOutSignature=0x50beb9c*=0x0 | out: pstrName=0x50beb18*="Revert", ppInSignature=0x50beba0*=0x76633a0, ppOutSignature=0x50beb9c*=0x7663720) returned 0x0 [0156.365] SysStringByteLen (bstr="Revert") returned 0xc [0156.365] SysStringByteLen (bstr="Revert") returned 0xc [0156.365] IWbemClassObject:NextMethod (in: This=0x765e720, lFlags=0, pstrName=0x50beb18*=0x0, ppInSignature=0x50beba0*=0x0, ppOutSignature=0x50beb9c*=0x0 | out: pstrName=0x50beb18*=0x0, ppInSignature=0x50beba0*=0x0, ppOutSignature=0x50beb9c*=0x0) returned 0x40005 [0156.365] IWbemClassObject:EndMethodEnumeration (This=0x765e720) returned 0x0 [0156.367] IWbemClassObject:GetMethod (in: This=0x765e720, wszName="Create", lFlags=0, ppInSignature=0x50bebac, ppOutSignature=0x50beba8 | out: ppInSignature=0x50bebac*=0x7663ba8, ppOutSignature=0x50beba8*=0x7664098) returned 0x0 [0156.368] IWbemClassObject:GetMethodQualifierSet (in: This=0x765e720, wszMethod="Create", ppQualSet=0x50beba0 | out: ppQualSet=0x50beba0*=0x765f008) returned 0x0 [0156.369] IWbemQualifierSet:Get (in: This=0x765f008, wszName="static", lFlags=0, pVal=0x50beb14*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63c9b8c*=0 | out: pVal=0x50beb14*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), plFlavor=0x63c9b8c*=0) returned 0x0 [0156.369] IWbemClassObject:GetMethodQualifierSet (in: This=0x765e720, wszMethod="Create", ppQualSet=0x50bebac | out: ppQualSet=0x50bebac*=0x7664690) returned 0x0 [0156.369] IWbemQualifierSet:Get (in: This=0x7664690, wszName="static", lFlags=0, pVal=0x50beb20*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63c9b8c*=0 | out: pVal=0x50beb20*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), plFlavor=0x63c9b8c*=0) returned 0x0 [0156.371] IWbemClassObject:GetMethod (in: This=0x765e720, wszName="Revert", lFlags=0, ppInSignature=0x50bebac, ppOutSignature=0x50beba8 | out: ppInSignature=0x50bebac*=0x7664900, ppOutSignature=0x50beba8*=0x7664c80) returned 0x0 [0156.371] IWbemClassObject:GetMethodQualifierSet (in: This=0x765e720, wszMethod="Revert", ppQualSet=0x50beba0 | out: ppQualSet=0x50beba0*=0x7664e78) returned 0x0 [0156.371] IWbemQualifierSet:Get (in: This=0x7664e78, wszName="static", lFlags=0, pVal=0x50beb14*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63c9c6c*=0 | out: pVal=0x50beb14*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63c9c6c*=0) returned 0x80041002 [0156.372] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x50beaf0 | out: pperrinfo=0x50beaf0*=0x0) returned 0x1 [0156.372] CoGetClassObject (in: rclsid=0x3b9054*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50be9b0 | out: ppv=0x50be9b0*=0x7664ed0) returned 0x0 [0156.372] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ed0, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be7e0 | out: ppvObject=0x50be7e0*=0x0) returned 0x80004002 [0156.372] WbemStatusCodeText:IClassFactory:CreateInstance (in: This=0x7664ed0, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be818 | out: ppvObject=0x50be818*=0x7664ee0) returned 0x0 [0156.372] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5bc | out: ppvObject=0x50be5bc*=0x7664ee0) returned 0x0 [0156.373] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be578 | out: ppvObject=0x50be578*=0x0) returned 0x80004002 [0156.373] WbemStatusCodeText:IUnknown:AddRef (This=0x7664ee0) returned 0x3 [0156.373] CoGetContextToken (in: pToken=0x50be404 | out: pToken=0x50be404) returned 0x0 [0156.373] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3ec | out: ppvObject=0x50be3ec*=0x0) returned 0x80004002 [0156.374] CoGetContextToken (in: pToken=0x50be3fc | out: pToken=0x50be3fc) returned 0x0 [0156.374] WbemStatusCodeText:IUnknown:AddRef (This=0x7664ee0) returned 0x4 [0156.374] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be470 | out: ppvObject=0x50be470*=0x0) returned 0x80004002 [0156.374] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x3 [0156.375] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x2 [0156.375] WbemStatusCodeText:IUnknown:Release (This=0x7664ed0) returned 0x0 [0156.375] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x1 [0156.375] CoGetContextToken (in: pToken=0x50be908 | out: pToken=0x50be908) returned 0x0 [0156.375] CoGetContextToken (in: pToken=0x50be8c8 | out: pToken=0x50be8c8) returned 0x0 [0156.375] WbemStatusCodeText:IUnknown:AddRef (This=0x7664ee0) returned 0x2 [0156.375] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x50be944*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x50be940 | out: ppvObject=0x50be940*=0x7664ee0) returned 0x0 [0156.375] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x2 [0156.375] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x1 [0156.376] CoGetContextToken (in: pToken=0x50be8dc | out: pToken=0x50be8dc) returned 0x0 [0156.376] CoGetContextToken (in: pToken=0x50be89c | out: pToken=0x50be89c) returned 0x0 [0156.376] WbemStatusCodeText:IUnknown:AddRef (This=0x7664ee0) returned 0x2 [0156.376] WbemStatusCodeText:IUnknown:QueryInterface (in: This=0x7664ee0, riid=0x50be918*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppvObject=0x50be914 | out: ppvObject=0x50be914*=0x7664ee0) returned 0x0 [0156.376] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x2 [0156.376] WbemStatusCodeText:IUnknown:AddRef (This=0x7664ee0) returned 0x3 [0156.376] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x7664ee0, hRes=0x80041002, LocaleId=0x0, lFlags=1, MessageText=0x50bea4c | out: MessageText=0x50bea4c*="Not found ") returned 0x0 [0156.377] SysStringByteLen (bstr="Not found ") returned 0x14 [0156.377] SysStringByteLen (bstr="Not found ") returned 0x14 [0156.377] WbemStatusCodeText:IUnknown:Release (This=0x7664ee0) returned 0x2 [0156.379] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x765eaa0, puCount=0x50bebf4 | out: puCount=0x50bebf4*=0x2) returned 0x0 [0156.379] WbemDefPath:IWbemPath:GetText (in: This=0x765eaa0, lFlags=4, puBuffLength=0x50bebf0*=0x0, pszText=0x0 | out: puBuffLength=0x50bebf0*=0x27, pszText=0x0) returned 0x0 [0156.379] WbemDefPath:IWbemPath:GetText (in: This=0x765eaa0, lFlags=4, puBuffLength=0x50bebf0*=0x27, pszText="00000000000000000000000000000000000000" | out: puBuffLength=0x50bebf0*=0x27, pszText="\\\\CRH2YWU7\\ROOT\\cimv2:Win32_ShadowCopy") returned 0x0 [0156.380] IWbemClassObject:GetMethod (in: This=0x765e720, wszName="Revert", lFlags=0, ppInSignature=0x50beba0, ppOutSignature=0x50beb9c | out: ppInSignature=0x50beba0*=0x7665108, ppOutSignature=0x50beb9c*=0x7665488) returned 0x0 [0156.381] IWbemClassObject:GetNames (in: This=0x7665108, wszQualifierName=0x0, lFlags=64, pQualifierVal=0x50beaf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x50beac4 | out: pNames=0x50beac4*="\x01ƀ\x04") returned 0x0 [0156.381] SafeArrayGetDim (psa=0x3e49d0) returned 0x1 [0156.381] SafeArrayGetDim (psa=0x3e49d0) returned 0x1 [0156.381] SafeArrayGetLBound (in: psa=0x3e49d0, nDim=0x1, plLbound=0x50be6c0 | out: plLbound=0x50be6c0) returned 0x0 [0156.381] IWbemClassObject:Get (in: This=0x7665108, wszName="ForceDismount", lFlags=0, pVal=0x50beaf0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c9f64*=0, plFlavor=0x63c9f68*=0 | out: pVal=0x50beaf0*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x63c9f64*=11, plFlavor=0x63c9f68*=0) returned 0x0 [0156.382] IWbemClassObject:Get (in: This=0x7665108, wszName="ForceDismount", lFlags=0, pVal=0x50beae4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c9f64*=11, plFlavor=0x63c9f68*=0 | out: pVal=0x50beae4*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x63c9f64*=11, plFlavor=0x63c9f68*=0) returned 0x0 [0156.382] IWbemClassObject:Get (in: This=0x7665108, wszName="ForceDismount", lFlags=0, pVal=0x50beae4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c9f64*=11, plFlavor=0x63c9f68*=0 | out: pVal=0x50beae4*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x63c9f64*=11, plFlavor=0x63c9f68*=0) returned 0x0 [0156.382] IWbemClassObject:Get (in: This=0x7665108, wszName="ForceDismount", lFlags=0, pVal=0x50beae4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63c9f64*=11, plFlavor=0x63c9f68*=0 | out: pVal=0x50beae4*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x63c9f64*=11, plFlavor=0x63c9f68*=0) returned 0x0 [0156.384] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7665108, wszProperty="ForceDismount", ppQualSet=0x50beb80 | out: ppQualSet=0x50beb80*=0x765ffd0) returned 0x0 [0156.385] IWbemQualifierSet:Get (in: This=0x765ffd0, wszName="ID", lFlags=0, pVal=0x50beaf4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63ca07c*=0 | out: pVal=0x50beaf4*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63ca07c*=17) returned 0x0 [0156.385] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7665108, wszProperty="ForceDismount", ppQualSet=0x50beb8c | out: ppQualSet=0x50beb8c*=0x7660020) returned 0x0 [0156.385] IWbemQualifierSet:Get (in: This=0x7660020, wszName="ID", lFlags=0, pVal=0x50beb00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63ca07c*=17 | out: pVal=0x50beb00*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63ca07c*=17) returned 0x0 [0156.388] IWbemClassObject:GetMethod (in: This=0x765e720, wszName="Revert", lFlags=0, ppInSignature=0x50beb78, ppOutSignature=0x50beb74 | out: ppInSignature=0x50beb78*=0x7665898, ppOutSignature=0x50beb74*=0x7665c18) returned 0x0 [0156.388] IWbemClassObject:GetNames (in: This=0x7665898, wszQualifierName=0x0, lFlags=64, pQualifierVal=0x50bead0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pNames=0x50bea9c | out: pNames=0x50bea9c*="\x01ƀ\x04") returned 0x0 [0156.388] SafeArrayGetDim (psa=0x3e4730) returned 0x1 [0156.388] SafeArrayGetDim (psa=0x3e4730) returned 0x1 [0156.388] SafeArrayGetLBound (in: psa=0x3e4730, nDim=0x1, plLbound=0x50be698 | out: plLbound=0x50be698) returned 0x0 [0156.389] IWbemClassObject:Get (in: This=0x7665898, wszName="ForceDismount", lFlags=0, pVal=0x50beac8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63ca3ac*=0, plFlavor=0x63ca3b0*=0 | out: pVal=0x50beac8*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x63ca3ac*=11, plFlavor=0x63ca3b0*=0) returned 0x0 [0156.389] IWbemClassObject:Get (in: This=0x7665898, wszName="ForceDismount", lFlags=0, pVal=0x50beabc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63ca3ac*=11, plFlavor=0x63ca3b0*=0 | out: pVal=0x50beabc*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x63ca3ac*=11, plFlavor=0x63ca3b0*=0) returned 0x0 [0156.389] IWbemClassObject:Get (in: This=0x7665898, wszName="ForceDismount", lFlags=0, pVal=0x50beabc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63ca3ac*=11, plFlavor=0x63ca3b0*=0 | out: pVal=0x50beabc*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x63ca3ac*=11, plFlavor=0x63ca3b0*=0) returned 0x0 [0156.389] IWbemClassObject:Get (in: This=0x7665898, wszName="ForceDismount", lFlags=0, pVal=0x50beabc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63ca3ac*=11, plFlavor=0x63ca3b0*=0 | out: pVal=0x50beabc*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x63ca3ac*=11, plFlavor=0x63ca3b0*=0) returned 0x0 [0156.390] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7665898, wszProperty="ForceDismount", ppQualSet=0x50beb58 | out: ppQualSet=0x50beb58*=0x7660070) returned 0x0 [0156.390] IWbemQualifierSet:Get (in: This=0x7660070, wszName="ID", lFlags=0, pVal=0x50beacc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63ca450*=0 | out: pVal=0x50beacc*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63ca450*=17) returned 0x0 [0156.390] IWbemClassObject:GetPropertyQualifierSet (in: This=0x7665898, wszProperty="ForceDismount", ppQualSet=0x50beb64 | out: ppQualSet=0x50beb64*=0x76600c0) returned 0x0 [0156.391] IWbemQualifierSet:Get (in: This=0x76600c0, wszName="ID", lFlags=0, pVal=0x50bead8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63ca450*=17 | out: pVal=0x50bead8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), plFlavor=0x63ca450*=17) returned 0x0 [0156.395] IWbemClassObject:GetMethod (in: This=0x765e720, wszName="Revert", lFlags=0, ppInSignature=0x50beb78, ppOutSignature=0x50beb74 | out: ppInSignature=0x50beb78*=0x7666028, ppOutSignature=0x50beb74*=0x76663a8) returned 0x0 [0156.396] IWbemClassObject:Get (in: This=0x7666028, wszName="ForceDismount", lFlags=0, pVal=0x50beb04*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63ca658*=0, plFlavor=0x63ca65c*=0 | out: pVal=0x50beb04*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x63ca658*=11, plFlavor=0x63ca65c*=0) returned 0x0 [0156.396] IWbemClassObject:Get (in: This=0x7666028, wszName="ForceDismount", lFlags=0, pVal=0x50beb10*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63ca658*=11, plFlavor=0x63ca65c*=0 | out: pVal=0x50beb10*(varType=0xb, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xffff, varVal2=0x0), pType=0x63ca658*=11, plFlavor=0x63ca65c*=0) returned 0x0 [0157.163] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650bf0, puCount=0x50bebfc | out: puCount=0x50bebfc*=0x2) returned 0x0 [0157.164] WbemDefPath:IWbemPath:GetText (in: This=0x7650bf0, lFlags=4, puBuffLength=0x50bebf8*=0x0, pszText=0x0 | out: puBuffLength=0x50bebf8*=0x53, pszText=0x0) returned 0x0 [0157.164] WbemDefPath:IWbemPath:GetText (in: This=0x7650bf0, lFlags=4, puBuffLength=0x50bebf8*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50bebf8*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x0 [0157.164] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50beb90 | out: puCount=0x50beb90*=0x2) returned 0x0 [0157.164] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb8c*=0x0, pszText=0x0 | out: puBuffLength=0x50beb8c*=0x17, pszText=0x0) returned 0x0 [0157.164] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50beb8c*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50beb8c*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0157.164] CoGetContextToken (in: pToken=0x50bead4 | out: pToken=0x50bead4) returned 0x0 [0157.164] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0157.164] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be6f8 | out: ppvObject=0x50be6f8*=0x3e9c04) returned 0x0 [0157.165] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0157.165] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0157.165] IWbemClassObject:Get (in: This=0x765cae8, wszName="__GENUS", lFlags=0, pVal=0x50beb4c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bec00*=0, plFlavor=0x50bebfc*=0 | out: pVal=0x50beb4c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bec00*=3, plFlavor=0x50bebfc*=64) returned 0x0 [0157.166] WbemDefPath:IWbemPath:GetText (in: This=0x7650bf0, lFlags=2, puBuffLength=0x50bec00*=0x0, pszText=0x0 | out: puBuffLength=0x50bec00*=0x3d, pszText=0x0) returned 0x0 [0157.166] WbemDefPath:IWbemPath:GetText (in: This=0x7650bf0, lFlags=2, puBuffLength=0x50bec00*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50bec00*=0x3d, pszText="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"") returned 0x0 [0157.170] CoGetContextToken (in: pToken=0x50be86c | out: pToken=0x50be86c) returned 0x0 [0157.171] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0157.171] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{89BF4D4E-802D-42A5-AECF-A75B1957CA7D}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0169.458] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0169.460] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0169.460] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0169.460] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x76665a0, puReturned=0x63c1a70*=0x1) returned 0x0 [0169.465] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x76665a0) returned 0x0 [0169.465] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0169.465] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0169.466] IUnknown:AddRef (This=0x76665a0) returned 0x3 [0169.466] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0169.466] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x76665a4) returned 0x0 [0169.466] IMarshal:GetUnmarshalClass (in: This=0x76665a4, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0169.466] IUnknown:Release (This=0x76665a4) returned 0x3 [0169.467] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0169.467] IUnknown:AddRef (This=0x76665a0) returned 0x4 [0169.467] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0169.467] IUnknown:Release (This=0x76665a0) returned 0x3 [0169.467] IUnknown:Release (This=0x76665a0) returned 0x2 [0169.467] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0169.468] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0169.468] IUnknown:AddRef (This=0x76665a0) returned 0x3 [0169.468] IUnknown:QueryInterface (in: This=0x76665a0, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x76665a0) returned 0x0 [0169.468] IUnknown:Release (This=0x76665a0) returned 0x3 [0169.468] IUnknown:Release (This=0x76665a0) returned 0x2 [0169.468] IUnknown:Release (This=0x76665a0) returned 0x1 [0169.468] IUnknown:Release (This=0x765dd64) returned 0x2 [0169.469] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0169.469] IUnknown:AddRef (This=0x76665a0) returned 0x2 [0169.469] IWbemClassObject:Get (in: This=0x76665a0, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0169.469] IWbemClassObject:Get (in: This=0x76665a0, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0169.470] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x52 [0169.470] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0169.470] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0169.470] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0169.470] IUnknown:Release (This=0x305784) returned 0x1 [0170.226] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x7664ed0) returned 0x0 [0170.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x7664ed0, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0170.227] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7664ed0, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x7666a18) returned 0x0 [0170.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x7666a18) returned 0x0 [0170.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0170.228] WbemDefPath:IUnknown:AddRef (This=0x7666a18) returned 0x3 [0170.228] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0170.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e99a8) returned 0x0 [0170.228] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e99a8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0170.229] WbemDefPath:IUnknown:Release (This=0x60e99a8) returned 0x3 [0170.229] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0170.229] WbemDefPath:IUnknown:AddRef (This=0x7666a18) returned 0x4 [0170.229] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0170.229] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x3 [0170.229] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x2 [0170.230] WbemDefPath:IUnknown:Release (This=0x7664ed0) returned 0x0 [0170.230] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x1 [0170.230] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0170.230] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0170.230] WbemDefPath:IUnknown:AddRef (This=0x7666a18) returned 0x2 [0170.230] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x7666a18) returned 0x0 [0170.230] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x2 [0170.230] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x1 [0170.231] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0170.231] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0170.231] WbemDefPath:IUnknown:AddRef (This=0x7666a18) returned 0x2 [0170.231] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666a18, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x7666a18) returned 0x0 [0170.231] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x2 [0170.231] WbemDefPath:IUnknown:AddRef (This=0x7666a18) returned 0x3 [0170.231] WbemDefPath:IWbemPath:SetText (This=0x7666a18, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x0 [0170.231] WbemDefPath:IUnknown:Release (This=0x7666a18) returned 0x2 [0170.232] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0170.232] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0170.232] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0170.233] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0170.233] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0170.233] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0170.233] IWbemClassObject:Get (in: This=0x76665a0, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63ed1cc*=0, plFlavor=0x63ed1d0*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63ed1cc*=8, plFlavor=0x63ed1d0*=64) returned 0x0 [0170.233] SysStringLen (param_1="root\\cimv2") returned 0xa [0170.234] IWbemClassObject:Get (in: This=0x76665a0, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63ed1cc*=8, plFlavor=0x63ed1d0*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63ed1cc*=8, plFlavor=0x63ed1d0*=64) returned 0x0 [0170.234] SysStringLen (param_1="root\\cimv2") returned 0xa [0170.234] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0170.234] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0170.234] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0170.234] IWbemClassObject:Get (in: This=0x76665a0, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63ed284*=0, plFlavor=0x63ed288*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63ed284*=8, plFlavor=0x63ed288*=64) returned 0x0 [0170.234] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0170.234] IWbemClassObject:Get (in: This=0x76665a0, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63ed284*=8, plFlavor=0x63ed288*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63ed284*=8, plFlavor=0x63ed288*=64) returned 0x0 [0170.234] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0170.241] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7666a18, puCount=0x50beca8 | out: puCount=0x50beca8*=0x2) returned 0x0 [0170.241] WbemDefPath:IWbemPath:GetText (in: This=0x7666a18, lFlags=4, puBuffLength=0x50beca4*=0x0, pszText=0x0 | out: puBuffLength=0x50beca4*=0x53, pszText=0x0) returned 0x0 [0170.241] WbemDefPath:IWbemPath:GetText (in: This=0x7666a18, lFlags=4, puBuffLength=0x50beca4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50beca4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x0 [0170.241] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec3c | out: puCount=0x50bec3c*=0x2) returned 0x0 [0170.241] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x0, pszText=0x0 | out: puBuffLength=0x50bec38*=0x17, pszText=0x0) returned 0x0 [0170.241] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0170.241] CoGetContextToken (in: pToken=0x50beb80 | out: pToken=0x50beb80) returned 0x0 [0170.241] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0170.241] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7a4 | out: ppvObject=0x50be7a4*=0x3e9c04) returned 0x0 [0170.242] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0170.242] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0170.242] IWbemClassObject:Get (in: This=0x76665a0, wszName="__GENUS", lFlags=0, pVal=0x50bebf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50becac*=0, plFlavor=0x50beca8*=0 | out: pVal=0x50bebf8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50becac*=3, plFlavor=0x50beca8*=64) returned 0x0 [0170.242] WbemDefPath:IWbemPath:GetText (in: This=0x7666a18, lFlags=2, puBuffLength=0x50becac*=0x0, pszText=0x0 | out: puBuffLength=0x50becac*=0x3d, pszText=0x0) returned 0x0 [0170.242] WbemDefPath:IWbemPath:GetText (in: This=0x7666a18, lFlags=2, puBuffLength=0x50becac*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50becac*=0x3d, pszText="Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"") returned 0x0 [0170.242] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0170.242] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0170.243] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{A7E1759C-CF16-40BF-8C23-4C3B6FBC80D3}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0189.057] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0189.060] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0189.060] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0189.060] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x7666ba0, puReturned=0x63c1a70*=0x1) returned 0x0 [0189.062] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x7666ba0) returned 0x0 [0189.063] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0189.063] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0189.064] IUnknown:AddRef (This=0x7666ba0) returned 0x3 [0189.064] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0189.064] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x7666ba4) returned 0x0 [0189.065] IMarshal:GetUnmarshalClass (in: This=0x7666ba4, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0189.065] IUnknown:Release (This=0x7666ba4) returned 0x3 [0189.083] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0189.083] IUnknown:AddRef (This=0x7666ba0) returned 0x4 [0189.083] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0189.084] IUnknown:Release (This=0x7666ba0) returned 0x3 [0189.084] IUnknown:Release (This=0x7666ba0) returned 0x2 [0189.084] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0189.084] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0189.084] IUnknown:AddRef (This=0x7666ba0) returned 0x3 [0189.084] IUnknown:QueryInterface (in: This=0x7666ba0, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x7666ba0) returned 0x0 [0189.085] IUnknown:Release (This=0x7666ba0) returned 0x3 [0189.085] IUnknown:Release (This=0x7666ba0) returned 0x2 [0189.085] IUnknown:Release (This=0x7666ba0) returned 0x1 [0189.085] IUnknown:Release (This=0x765dd64) returned 0x2 [0189.086] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0189.086] IUnknown:AddRef (This=0x7666ba0) returned 0x2 [0189.086] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0189.086] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0189.087] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x52 [0189.087] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0189.087] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0189.087] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0189.088] IUnknown:Release (This=0x305784) returned 0x1 [0189.089] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x7666b90) returned 0x0 [0189.090] WbemDefPath:IUnknown:QueryInterface (in: This=0x7666b90, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0189.090] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7666b90, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x7667030) returned 0x0 [0189.091] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x7667030) returned 0x0 [0189.091] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0189.092] WbemDefPath:IUnknown:AddRef (This=0x7667030) returned 0x3 [0189.092] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0189.092] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e99e8) returned 0x0 [0189.092] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e99e8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0189.092] WbemDefPath:IUnknown:Release (This=0x60e99e8) returned 0x3 [0189.093] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0189.093] WbemDefPath:IUnknown:AddRef (This=0x7667030) returned 0x4 [0189.093] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0189.093] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x3 [0189.093] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x2 [0189.094] WbemDefPath:IUnknown:Release (This=0x7666b90) returned 0x0 [0189.094] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x1 [0189.094] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0189.094] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0189.094] WbemDefPath:IUnknown:AddRef (This=0x7667030) returned 0x2 [0189.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x7667030) returned 0x0 [0189.095] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x2 [0189.095] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x1 [0189.095] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0189.095] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0189.095] WbemDefPath:IUnknown:AddRef (This=0x7667030) returned 0x2 [0189.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667030, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x7667030) returned 0x0 [0189.096] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x2 [0189.096] WbemDefPath:IUnknown:AddRef (This=0x7667030) returned 0x3 [0189.096] WbemDefPath:IWbemPath:SetText (This=0x7667030, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x0 [0189.096] WbemDefPath:IUnknown:Release (This=0x7667030) returned 0x2 [0189.097] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0189.097] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0189.097] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0189.098] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0189.098] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0189.098] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0189.098] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f0684*=0, plFlavor=0x63f0688*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63f0684*=8, plFlavor=0x63f0688*=64) returned 0x0 [0189.098] SysStringLen (param_1="root\\cimv2") returned 0xa [0189.099] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f0684*=8, plFlavor=0x63f0688*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63f0684*=8, plFlavor=0x63f0688*=64) returned 0x0 [0189.099] SysStringLen (param_1="root\\cimv2") returned 0xa [0189.099] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0189.099] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0189.099] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0189.099] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f073c*=0, plFlavor=0x63f0740*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63f073c*=8, plFlavor=0x63f0740*=64) returned 0x0 [0189.099] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0189.100] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f073c*=8, plFlavor=0x63f0740*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63f073c*=8, plFlavor=0x63f0740*=64) returned 0x0 [0189.100] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0189.102] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7667030, puCount=0x50beca8 | out: puCount=0x50beca8*=0x2) returned 0x0 [0189.102] WbemDefPath:IWbemPath:GetText (in: This=0x7667030, lFlags=4, puBuffLength=0x50beca4*=0x0, pszText=0x0 | out: puBuffLength=0x50beca4*=0x53, pszText=0x0) returned 0x0 [0189.102] WbemDefPath:IWbemPath:GetText (in: This=0x7667030, lFlags=4, puBuffLength=0x50beca4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50beca4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x0 [0189.102] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec3c | out: puCount=0x50bec3c*=0x2) returned 0x0 [0189.102] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x0, pszText=0x0 | out: puBuffLength=0x50bec38*=0x17, pszText=0x0) returned 0x0 [0189.102] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0189.102] CoGetContextToken (in: pToken=0x50beb80 | out: pToken=0x50beb80) returned 0x0 [0189.102] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0189.102] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7a4 | out: ppvObject=0x50be7a4*=0x3e9c04) returned 0x0 [0189.103] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0189.103] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0189.103] IWbemClassObject:Get (in: This=0x7666ba0, wszName="__GENUS", lFlags=0, pVal=0x50bebf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50becac*=0, plFlavor=0x50beca8*=0 | out: pVal=0x50bebf8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50becac*=3, plFlavor=0x50beca8*=64) returned 0x0 [0189.104] WbemDefPath:IWbemPath:GetText (in: This=0x7667030, lFlags=2, puBuffLength=0x50becac*=0x0, pszText=0x0 | out: puBuffLength=0x50becac*=0x3d, pszText=0x0) returned 0x0 [0189.104] WbemDefPath:IWbemPath:GetText (in: This=0x7667030, lFlags=2, puBuffLength=0x50becac*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50becac*=0x3d, pszText="Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"") returned 0x0 [0189.104] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0189.104] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0189.104] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{1B00B306-69E5-4B94-90B5-472ED49789B5}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0211.361] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0211.364] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0211.364] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0211.364] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x7668130, puReturned=0x63c1a70*=0x1) returned 0x0 [0211.576] IUnknown:QueryInterface (in: This=0x7668130, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x7668130) returned 0x0 [0211.577] IUnknown:QueryInterface (in: This=0x7668130, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0211.577] IUnknown:QueryInterface (in: This=0x7668130, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0211.578] IUnknown:AddRef (This=0x7668130) returned 0x3 [0211.578] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0211.578] IUnknown:QueryInterface (in: This=0x7668130, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x7668134) returned 0x0 [0211.579] IMarshal:GetUnmarshalClass (in: This=0x7668134, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0211.579] IUnknown:Release (This=0x7668134) returned 0x3 [0211.579] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0211.580] IUnknown:AddRef (This=0x7668130) returned 0x4 [0211.580] IUnknown:QueryInterface (in: This=0x7668130, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0211.580] IUnknown:Release (This=0x7668130) returned 0x3 [0211.580] IUnknown:Release (This=0x7668130) returned 0x2 [0211.581] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0211.581] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0211.581] IUnknown:AddRef (This=0x7668130) returned 0x3 [0211.581] IUnknown:QueryInterface (in: This=0x7668130, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x7668130) returned 0x0 [0211.581] IUnknown:Release (This=0x7668130) returned 0x3 [0211.581] IUnknown:Release (This=0x7668130) returned 0x2 [0211.582] IUnknown:Release (This=0x7668130) returned 0x1 [0211.582] IUnknown:Release (This=0x765dd64) returned 0x2 [0211.582] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0211.582] IUnknown:AddRef (This=0x7668130) returned 0x2 [0211.582] IWbemClassObject:Get (in: This=0x7668130, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0211.583] IWbemClassObject:Get (in: This=0x7668130, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0211.583] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x52 [0211.584] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0211.584] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0211.584] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0211.584] IUnknown:Release (This=0x305784) returned 0x1 [0211.586] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x7668120) returned 0x0 [0211.586] WbemDefPath:IUnknown:QueryInterface (in: This=0x7668120, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0211.587] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7668120, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x76670a0) returned 0x0 [0211.587] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x76670a0) returned 0x0 [0211.587] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0211.588] WbemDefPath:IUnknown:AddRef (This=0x76670a0) returned 0x3 [0211.588] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0211.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e9a28) returned 0x0 [0211.588] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e9a28, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0211.588] WbemDefPath:IUnknown:Release (This=0x60e9a28) returned 0x3 [0211.589] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0211.589] WbemDefPath:IUnknown:AddRef (This=0x76670a0) returned 0x4 [0211.589] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0211.589] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x3 [0211.589] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x2 [0211.589] WbemDefPath:IUnknown:Release (This=0x7668120) returned 0x0 [0211.590] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x1 [0211.590] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0211.590] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0211.590] WbemDefPath:IUnknown:AddRef (This=0x76670a0) returned 0x2 [0211.590] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x76670a0) returned 0x0 [0211.590] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x2 [0211.590] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x1 [0211.591] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0211.591] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0211.591] WbemDefPath:IUnknown:AddRef (This=0x76670a0) returned 0x2 [0211.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x76670a0, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x76670a0) returned 0x0 [0211.591] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x2 [0211.591] WbemDefPath:IUnknown:AddRef (This=0x76670a0) returned 0x3 [0211.591] WbemDefPath:IWbemPath:SetText (This=0x76670a0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x0 [0211.592] WbemDefPath:IUnknown:Release (This=0x76670a0) returned 0x2 [0211.592] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0211.592] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0211.592] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0211.593] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0211.593] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0211.594] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0211.594] IWbemClassObject:Get (in: This=0x7668130, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f3b30*=0, plFlavor=0x63f3b34*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63f3b30*=8, plFlavor=0x63f3b34*=64) returned 0x0 [0211.594] SysStringLen (param_1="root\\cimv2") returned 0xa [0211.594] IWbemClassObject:Get (in: This=0x7668130, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f3b30*=8, plFlavor=0x63f3b34*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63f3b30*=8, plFlavor=0x63f3b34*=64) returned 0x0 [0211.594] SysStringLen (param_1="root\\cimv2") returned 0xa [0211.594] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0211.594] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0211.594] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0211.595] IWbemClassObject:Get (in: This=0x7668130, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f3be8*=0, plFlavor=0x63f3bec*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63f3be8*=8, plFlavor=0x63f3bec*=64) returned 0x0 [0211.595] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0211.595] IWbemClassObject:Get (in: This=0x7668130, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f3be8*=8, plFlavor=0x63f3bec*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63f3be8*=8, plFlavor=0x63f3bec*=64) returned 0x0 [0211.595] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0211.598] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76670a0, puCount=0x50beca8 | out: puCount=0x50beca8*=0x2) returned 0x0 [0211.598] WbemDefPath:IWbemPath:GetText (in: This=0x76670a0, lFlags=4, puBuffLength=0x50beca4*=0x0, pszText=0x0 | out: puBuffLength=0x50beca4*=0x53, pszText=0x0) returned 0x0 [0211.599] WbemDefPath:IWbemPath:GetText (in: This=0x76670a0, lFlags=4, puBuffLength=0x50beca4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50beca4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x0 [0211.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec3c | out: puCount=0x50bec3c*=0x2) returned 0x0 [0211.599] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x0, pszText=0x0 | out: puBuffLength=0x50bec38*=0x17, pszText=0x0) returned 0x0 [0211.599] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0211.599] CoGetContextToken (in: pToken=0x50beb80 | out: pToken=0x50beb80) returned 0x0 [0211.599] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0211.599] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7a4 | out: ppvObject=0x50be7a4*=0x3e9c04) returned 0x0 [0211.600] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0211.600] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0211.600] IWbemClassObject:Get (in: This=0x7668130, wszName="__GENUS", lFlags=0, pVal=0x50bebf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50becac*=0, plFlavor=0x50beca8*=0 | out: pVal=0x50bebf8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50becac*=3, plFlavor=0x50beca8*=64) returned 0x0 [0211.600] WbemDefPath:IWbemPath:GetText (in: This=0x76670a0, lFlags=2, puBuffLength=0x50becac*=0x0, pszText=0x0 | out: puBuffLength=0x50becac*=0x3d, pszText=0x0) returned 0x0 [0211.600] WbemDefPath:IWbemPath:GetText (in: This=0x76670a0, lFlags=2, puBuffLength=0x50becac*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50becac*=0x3d, pszText="Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"") returned 0x0 [0211.600] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0211.600] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0211.601] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{9EB1FE81-FEBC-4AFA-A941-8CBA7ABCCB88}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0225.586] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0225.587] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0225.587] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0225.587] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x76686c0, puReturned=0x63c1a70*=0x1) returned 0x0 [0225.590] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x76686c0) returned 0x0 [0225.590] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0225.591] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0225.591] IUnknown:AddRef (This=0x76686c0) returned 0x3 [0225.591] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0225.591] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x76686c4) returned 0x0 [0225.591] IMarshal:GetUnmarshalClass (in: This=0x76686c4, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0225.591] IUnknown:Release (This=0x76686c4) returned 0x3 [0225.592] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0225.592] IUnknown:AddRef (This=0x76686c0) returned 0x4 [0225.592] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0225.592] IUnknown:Release (This=0x76686c0) returned 0x3 [0225.592] IUnknown:Release (This=0x76686c0) returned 0x2 [0225.592] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0225.592] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0225.592] IUnknown:AddRef (This=0x76686c0) returned 0x3 [0225.592] IUnknown:QueryInterface (in: This=0x76686c0, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x76686c0) returned 0x0 [0225.592] IUnknown:Release (This=0x76686c0) returned 0x3 [0225.593] IUnknown:Release (This=0x76686c0) returned 0x2 [0225.593] IUnknown:Release (This=0x76686c0) returned 0x1 [0225.593] IUnknown:Release (This=0x765dd64) returned 0x2 [0225.593] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0225.593] IUnknown:AddRef (This=0x76686c0) returned 0x2 [0225.593] IWbemClassObject:Get (in: This=0x76686c0, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0225.593] IWbemClassObject:Get (in: This=0x76686c0, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0225.594] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x52 [0225.594] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0225.594] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0225.594] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0225.594] IUnknown:Release (This=0x305784) returned 0x1 [0225.595] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x76686b0) returned 0x0 [0225.595] WbemDefPath:IUnknown:QueryInterface (in: This=0x76686b0, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0225.595] WbemDefPath:IClassFactory:CreateInstance (in: This=0x76686b0, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x7667110) returned 0x0 [0225.595] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x7667110) returned 0x0 [0225.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0225.596] WbemDefPath:IUnknown:AddRef (This=0x7667110) returned 0x3 [0225.596] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0225.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e9a68) returned 0x0 [0225.597] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e9a68, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0225.597] WbemDefPath:IUnknown:Release (This=0x60e9a68) returned 0x3 [0225.597] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0225.597] WbemDefPath:IUnknown:AddRef (This=0x7667110) returned 0x4 [0225.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0225.597] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x3 [0225.598] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x2 [0225.598] WbemDefPath:IUnknown:Release (This=0x76686b0) returned 0x0 [0225.598] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x1 [0225.598] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0225.598] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0225.598] WbemDefPath:IUnknown:AddRef (This=0x7667110) returned 0x2 [0225.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x7667110) returned 0x0 [0225.599] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x2 [0225.599] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x1 [0225.599] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0225.599] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0225.599] WbemDefPath:IUnknown:AddRef (This=0x7667110) returned 0x2 [0225.599] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667110, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x7667110) returned 0x0 [0225.600] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x2 [0225.600] WbemDefPath:IUnknown:AddRef (This=0x7667110) returned 0x3 [0225.600] WbemDefPath:IWbemPath:SetText (This=0x7667110, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x0 [0225.600] WbemDefPath:IUnknown:Release (This=0x7667110) returned 0x2 [0225.600] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0225.600] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0225.600] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0225.601] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0225.601] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0225.601] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0225.601] IWbemClassObject:Get (in: This=0x76686c0, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f6fdc*=0, plFlavor=0x63f6fe0*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63f6fdc*=8, plFlavor=0x63f6fe0*=64) returned 0x0 [0225.601] SysStringLen (param_1="root\\cimv2") returned 0xa [0225.601] IWbemClassObject:Get (in: This=0x76686c0, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f6fdc*=8, plFlavor=0x63f6fe0*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63f6fdc*=8, plFlavor=0x63f6fe0*=64) returned 0x0 [0225.601] SysStringLen (param_1="root\\cimv2") returned 0xa [0225.601] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0225.601] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0225.601] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0225.601] IWbemClassObject:Get (in: This=0x76686c0, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f7094*=0, plFlavor=0x63f7098*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63f7094*=8, plFlavor=0x63f7098*=64) returned 0x0 [0225.601] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0225.602] IWbemClassObject:Get (in: This=0x76686c0, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63f7094*=8, plFlavor=0x63f7098*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63f7094*=8, plFlavor=0x63f7098*=64) returned 0x0 [0225.602] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0225.602] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7667110, puCount=0x50beca8 | out: puCount=0x50beca8*=0x2) returned 0x0 [0225.602] WbemDefPath:IWbemPath:GetText (in: This=0x7667110, lFlags=4, puBuffLength=0x50beca4*=0x0, pszText=0x0 | out: puBuffLength=0x50beca4*=0x53, pszText=0x0) returned 0x0 [0225.602] WbemDefPath:IWbemPath:GetText (in: This=0x7667110, lFlags=4, puBuffLength=0x50beca4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50beca4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x0 [0225.602] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec3c | out: puCount=0x50bec3c*=0x2) returned 0x0 [0225.602] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x0, pszText=0x0 | out: puBuffLength=0x50bec38*=0x17, pszText=0x0) returned 0x0 [0225.602] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0225.602] CoGetContextToken (in: pToken=0x50beb80 | out: pToken=0x50beb80) returned 0x0 [0225.602] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0225.602] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7a4 | out: ppvObject=0x50be7a4*=0x3e9c04) returned 0x0 [0225.603] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0225.603] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0225.603] IWbemClassObject:Get (in: This=0x76686c0, wszName="__GENUS", lFlags=0, pVal=0x50bebf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50becac*=0, plFlavor=0x50beca8*=0 | out: pVal=0x50bebf8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50becac*=3, plFlavor=0x50beca8*=64) returned 0x0 [0225.603] WbemDefPath:IWbemPath:GetText (in: This=0x7667110, lFlags=2, puBuffLength=0x50becac*=0x0, pszText=0x0 | out: puBuffLength=0x50becac*=0x3d, pszText=0x0) returned 0x0 [0225.603] WbemDefPath:IWbemPath:GetText (in: This=0x7667110, lFlags=2, puBuffLength=0x50becac*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50becac*=0x3d, pszText="Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"") returned 0x0 [0225.603] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0225.603] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0225.603] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{4EF4316B-FF18-4BCE-9CBA-59493F74BB74}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0231.651] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0231.654] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0231.654] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0231.654] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x7668c50, puReturned=0x63c1a70*=0x1) returned 0x0 [0231.656] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x7668c50) returned 0x0 [0231.656] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0231.657] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0231.657] IUnknown:AddRef (This=0x7668c50) returned 0x3 [0231.657] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0231.657] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x7668c54) returned 0x0 [0231.658] IMarshal:GetUnmarshalClass (in: This=0x7668c54, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0231.658] IUnknown:Release (This=0x7668c54) returned 0x3 [0231.658] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0231.658] IUnknown:AddRef (This=0x7668c50) returned 0x4 [0231.658] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0231.658] IUnknown:Release (This=0x7668c50) returned 0x3 [0231.659] IUnknown:Release (This=0x7668c50) returned 0x2 [0231.659] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0231.659] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0231.659] IUnknown:AddRef (This=0x7668c50) returned 0x3 [0231.659] IUnknown:QueryInterface (in: This=0x7668c50, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x7668c50) returned 0x0 [0231.659] IUnknown:Release (This=0x7668c50) returned 0x3 [0231.659] IUnknown:Release (This=0x7668c50) returned 0x2 [0231.659] IUnknown:Release (This=0x7668c50) returned 0x1 [0231.659] IUnknown:Release (This=0x765dd64) returned 0x2 [0231.660] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0231.660] IUnknown:AddRef (This=0x7668c50) returned 0x2 [0231.660] IWbemClassObject:Get (in: This=0x7668c50, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0231.660] IWbemClassObject:Get (in: This=0x7668c50, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0231.660] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x52 [0231.660] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0231.660] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0231.661] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0231.661] IUnknown:Release (This=0x305784) returned 0x1 [0231.662] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x7668c40) returned 0x0 [0231.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x7668c40, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0231.662] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7668c40, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x7667180) returned 0x0 [0231.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x7667180) returned 0x0 [0231.663] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0231.663] WbemDefPath:IUnknown:AddRef (This=0x7667180) returned 0x3 [0231.663] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0231.663] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e9aa8) returned 0x0 [0231.663] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e9aa8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0231.663] WbemDefPath:IUnknown:Release (This=0x60e9aa8) returned 0x3 [0231.663] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0231.664] WbemDefPath:IUnknown:AddRef (This=0x7667180) returned 0x4 [0231.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0231.664] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x3 [0231.664] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x2 [0231.664] WbemDefPath:IUnknown:Release (This=0x7668c40) returned 0x0 [0231.664] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x1 [0231.665] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0231.665] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0231.665] WbemDefPath:IUnknown:AddRef (This=0x7667180) returned 0x2 [0231.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x7667180) returned 0x0 [0231.665] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x2 [0231.665] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x1 [0231.665] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0231.665] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0231.665] WbemDefPath:IUnknown:AddRef (This=0x7667180) returned 0x2 [0231.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667180, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x7667180) returned 0x0 [0231.666] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x2 [0231.666] WbemDefPath:IUnknown:AddRef (This=0x7667180) returned 0x3 [0231.666] WbemDefPath:IWbemPath:SetText (This=0x7667180, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x0 [0231.666] WbemDefPath:IUnknown:Release (This=0x7667180) returned 0x2 [0231.666] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0231.666] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0231.666] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0231.667] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0231.667] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0231.667] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0231.667] IWbemClassObject:Get (in: This=0x7668c50, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63fa488*=0, plFlavor=0x63fa48c*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63fa488*=8, plFlavor=0x63fa48c*=64) returned 0x0 [0231.667] SysStringLen (param_1="root\\cimv2") returned 0xa [0231.668] IWbemClassObject:Get (in: This=0x7668c50, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63fa488*=8, plFlavor=0x63fa48c*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63fa488*=8, plFlavor=0x63fa48c*=64) returned 0x0 [0231.668] SysStringLen (param_1="root\\cimv2") returned 0xa [0231.668] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0231.668] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0231.668] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0231.668] IWbemClassObject:Get (in: This=0x7668c50, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63fa540*=0, plFlavor=0x63fa544*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63fa540*=8, plFlavor=0x63fa544*=64) returned 0x0 [0231.668] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0231.669] IWbemClassObject:Get (in: This=0x7668c50, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63fa540*=8, plFlavor=0x63fa544*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63fa540*=8, plFlavor=0x63fa544*=64) returned 0x0 [0231.669] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0231.670] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7667180, puCount=0x50beca8 | out: puCount=0x50beca8*=0x2) returned 0x0 [0231.670] WbemDefPath:IWbemPath:GetText (in: This=0x7667180, lFlags=4, puBuffLength=0x50beca4*=0x0, pszText=0x0 | out: puBuffLength=0x50beca4*=0x53, pszText=0x0) returned 0x0 [0231.670] WbemDefPath:IWbemPath:GetText (in: This=0x7667180, lFlags=4, puBuffLength=0x50beca4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50beca4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x0 [0231.670] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec3c | out: puCount=0x50bec3c*=0x2) returned 0x0 [0231.670] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x0, pszText=0x0 | out: puBuffLength=0x50bec38*=0x17, pszText=0x0) returned 0x0 [0231.670] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0231.670] CoGetContextToken (in: pToken=0x50beb80 | out: pToken=0x50beb80) returned 0x0 [0231.670] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0231.670] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7a4 | out: ppvObject=0x50be7a4*=0x3e9c04) returned 0x0 [0231.671] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0231.671] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0231.671] IWbemClassObject:Get (in: This=0x7668c50, wszName="__GENUS", lFlags=0, pVal=0x50bebf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50becac*=0, plFlavor=0x50beca8*=0 | out: pVal=0x50bebf8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50becac*=3, plFlavor=0x50beca8*=64) returned 0x0 [0231.671] WbemDefPath:IWbemPath:GetText (in: This=0x7667180, lFlags=2, puBuffLength=0x50becac*=0x0, pszText=0x0 | out: puBuffLength=0x50becac*=0x3d, pszText=0x0) returned 0x0 [0231.671] WbemDefPath:IWbemPath:GetText (in: This=0x7667180, lFlags=2, puBuffLength=0x50becac*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50becac*=0x3d, pszText="Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"") returned 0x0 [0231.671] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0231.671] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0231.672] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{D6B8C539-C683-4F58-BEF3-C15A1D2C1B5F}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0234.038] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0234.038] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0234.039] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0234.039] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x76691e0, puReturned=0x63c1a70*=0x1) returned 0x0 [0234.041] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x76691e0) returned 0x0 [0234.041] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0234.041] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0234.042] IUnknown:AddRef (This=0x76691e0) returned 0x3 [0234.042] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0234.042] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x76691e4) returned 0x0 [0234.042] IMarshal:GetUnmarshalClass (in: This=0x76691e4, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0234.042] IUnknown:Release (This=0x76691e4) returned 0x3 [0234.043] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0234.043] IUnknown:AddRef (This=0x76691e0) returned 0x4 [0234.043] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0234.043] IUnknown:Release (This=0x76691e0) returned 0x3 [0234.043] IUnknown:Release (This=0x76691e0) returned 0x2 [0234.043] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0234.043] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0234.043] IUnknown:AddRef (This=0x76691e0) returned 0x3 [0234.043] IUnknown:QueryInterface (in: This=0x76691e0, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x76691e0) returned 0x0 [0234.044] IUnknown:Release (This=0x76691e0) returned 0x3 [0234.044] IUnknown:Release (This=0x76691e0) returned 0x2 [0234.044] IUnknown:Release (This=0x76691e0) returned 0x1 [0234.044] IUnknown:Release (This=0x765dd64) returned 0x2 [0234.044] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0234.044] IUnknown:AddRef (This=0x76691e0) returned 0x2 [0234.044] IWbemClassObject:Get (in: This=0x76691e0, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0234.045] IWbemClassObject:Get (in: This=0x76691e0, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0234.045] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x52 [0234.045] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0234.045] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0234.045] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0234.045] IUnknown:Release (This=0x305784) returned 0x1 [0234.046] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x76691d0) returned 0x0 [0234.046] WbemDefPath:IUnknown:QueryInterface (in: This=0x76691d0, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0234.046] WbemDefPath:IClassFactory:CreateInstance (in: This=0x76691d0, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x76671f0) returned 0x0 [0234.047] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x76671f0) returned 0x0 [0234.047] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0234.047] WbemDefPath:IUnknown:AddRef (This=0x76671f0) returned 0x3 [0234.048] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0234.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e9ae8) returned 0x0 [0234.048] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e9ae8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0234.048] WbemDefPath:IUnknown:Release (This=0x60e9ae8) returned 0x3 [0234.048] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0234.048] WbemDefPath:IUnknown:AddRef (This=0x76671f0) returned 0x4 [0234.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0234.049] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x3 [0234.049] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x2 [0234.049] WbemDefPath:IUnknown:Release (This=0x76691d0) returned 0x0 [0234.049] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x1 [0234.049] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0234.049] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0234.049] WbemDefPath:IUnknown:AddRef (This=0x76671f0) returned 0x2 [0234.050] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x76671f0) returned 0x0 [0234.050] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x2 [0234.050] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x1 [0234.050] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0234.050] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0234.050] WbemDefPath:IUnknown:AddRef (This=0x76671f0) returned 0x2 [0234.050] WbemDefPath:IUnknown:QueryInterface (in: This=0x76671f0, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x76671f0) returned 0x0 [0234.050] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x2 [0234.051] WbemDefPath:IUnknown:AddRef (This=0x76671f0) returned 0x3 [0234.051] WbemDefPath:IWbemPath:SetText (This=0x76671f0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x0 [0234.051] WbemDefPath:IUnknown:Release (This=0x76671f0) returned 0x2 [0234.051] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0234.051] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0234.051] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0234.051] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0234.052] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0234.052] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0234.052] IWbemClassObject:Get (in: This=0x76691e0, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63fd934*=0, plFlavor=0x63fd938*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63fd934*=8, plFlavor=0x63fd938*=64) returned 0x0 [0234.052] SysStringLen (param_1="root\\cimv2") returned 0xa [0234.052] IWbemClassObject:Get (in: This=0x76691e0, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63fd934*=8, plFlavor=0x63fd938*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x63fd934*=8, plFlavor=0x63fd938*=64) returned 0x0 [0234.052] SysStringLen (param_1="root\\cimv2") returned 0xa [0234.052] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0234.052] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0234.052] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0234.052] IWbemClassObject:Get (in: This=0x76691e0, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63fd9ec*=0, plFlavor=0x63fd9f0*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63fd9ec*=8, plFlavor=0x63fd9f0*=64) returned 0x0 [0234.053] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0234.053] IWbemClassObject:Get (in: This=0x76691e0, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x63fd9ec*=8, plFlavor=0x63fd9f0*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x63fd9ec*=8, plFlavor=0x63fd9f0*=64) returned 0x0 [0234.053] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0234.054] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76671f0, puCount=0x50beca8 | out: puCount=0x50beca8*=0x2) returned 0x0 [0234.054] WbemDefPath:IWbemPath:GetText (in: This=0x76671f0, lFlags=4, puBuffLength=0x50beca4*=0x0, pszText=0x0 | out: puBuffLength=0x50beca4*=0x53, pszText=0x0) returned 0x0 [0234.055] WbemDefPath:IWbemPath:GetText (in: This=0x76671f0, lFlags=4, puBuffLength=0x50beca4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50beca4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x0 [0234.055] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec3c | out: puCount=0x50bec3c*=0x2) returned 0x0 [0234.055] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x0, pszText=0x0 | out: puBuffLength=0x50bec38*=0x17, pszText=0x0) returned 0x0 [0234.055] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0234.055] CoGetContextToken (in: pToken=0x50beb80 | out: pToken=0x50beb80) returned 0x0 [0234.055] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0234.055] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7a4 | out: ppvObject=0x50be7a4*=0x3e9c04) returned 0x0 [0234.056] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0234.056] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0234.056] IWbemClassObject:Get (in: This=0x76691e0, wszName="__GENUS", lFlags=0, pVal=0x50bebf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50becac*=0, plFlavor=0x50beca8*=0 | out: pVal=0x50bebf8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50becac*=3, plFlavor=0x50beca8*=64) returned 0x0 [0234.056] WbemDefPath:IWbemPath:GetText (in: This=0x76671f0, lFlags=2, puBuffLength=0x50becac*=0x0, pszText=0x0 | out: puBuffLength=0x50becac*=0x3d, pszText=0x0) returned 0x0 [0234.056] WbemDefPath:IWbemPath:GetText (in: This=0x76671f0, lFlags=2, puBuffLength=0x50becac*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50becac*=0x3d, pszText="Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"") returned 0x0 [0234.056] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0234.056] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0234.056] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{CACD5F8F-C09F-491A-921A-F94BA13CA342}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0240.660] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0240.662] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0240.662] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0240.662] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x7669770, puReturned=0x63c1a70*=0x1) returned 0x0 [0240.665] IUnknown:QueryInterface (in: This=0x7669770, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x7669770) returned 0x0 [0240.666] IUnknown:QueryInterface (in: This=0x7669770, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0240.666] IUnknown:QueryInterface (in: This=0x7669770, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0240.667] IUnknown:AddRef (This=0x7669770) returned 0x3 [0240.667] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0240.667] IUnknown:QueryInterface (in: This=0x7669770, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x7669774) returned 0x0 [0240.667] IMarshal:GetUnmarshalClass (in: This=0x7669774, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0240.667] IUnknown:Release (This=0x7669774) returned 0x3 [0240.668] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0240.668] IUnknown:AddRef (This=0x7669770) returned 0x4 [0240.668] IUnknown:QueryInterface (in: This=0x7669770, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0240.668] IUnknown:Release (This=0x7669770) returned 0x3 [0240.668] IUnknown:Release (This=0x7669770) returned 0x2 [0240.668] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0240.668] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0240.668] IUnknown:AddRef (This=0x7669770) returned 0x3 [0240.669] IUnknown:QueryInterface (in: This=0x7669770, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x7669770) returned 0x0 [0240.669] IUnknown:Release (This=0x7669770) returned 0x3 [0240.669] IUnknown:Release (This=0x7669770) returned 0x2 [0240.669] IUnknown:Release (This=0x7669770) returned 0x1 [0240.669] IUnknown:Release (This=0x765dd64) returned 0x2 [0240.670] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0240.670] IUnknown:AddRef (This=0x7669770) returned 0x2 [0240.670] IWbemClassObject:Get (in: This=0x7669770, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0240.670] IWbemClassObject:Get (in: This=0x7669770, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0240.670] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x52 [0240.670] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0240.671] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0240.671] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0240.671] IUnknown:Release (This=0x305784) returned 0x1 [0240.672] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x7669760) returned 0x0 [0240.672] WbemDefPath:IUnknown:QueryInterface (in: This=0x7669760, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0240.673] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7669760, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x7667260) returned 0x0 [0240.673] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x7667260) returned 0x0 [0240.673] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0240.673] WbemDefPath:IUnknown:AddRef (This=0x7667260) returned 0x3 [0240.673] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0240.673] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e6558) returned 0x0 [0240.674] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e6558, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0240.674] WbemDefPath:IUnknown:Release (This=0x60e6558) returned 0x3 [0240.674] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0240.674] WbemDefPath:IUnknown:AddRef (This=0x7667260) returned 0x4 [0240.674] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0240.674] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x3 [0240.674] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x2 [0240.675] WbemDefPath:IUnknown:Release (This=0x7669760) returned 0x0 [0240.675] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x1 [0240.675] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0240.675] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0240.675] WbemDefPath:IUnknown:AddRef (This=0x7667260) returned 0x2 [0240.675] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x7667260) returned 0x0 [0240.675] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x2 [0240.675] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x1 [0240.676] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0240.676] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0240.676] WbemDefPath:IUnknown:AddRef (This=0x7667260) returned 0x2 [0240.676] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667260, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x7667260) returned 0x0 [0240.676] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x2 [0240.676] WbemDefPath:IUnknown:AddRef (This=0x7667260) returned 0x3 [0240.676] WbemDefPath:IWbemPath:SetText (This=0x7667260, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x0 [0240.676] WbemDefPath:IUnknown:Release (This=0x7667260) returned 0x2 [0240.676] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0240.676] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0240.677] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0240.677] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0240.677] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0240.677] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0240.677] IWbemClassObject:Get (in: This=0x7669770, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6400de0*=0, plFlavor=0x6400de4*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6400de0*=8, plFlavor=0x6400de4*=64) returned 0x0 [0240.677] SysStringLen (param_1="root\\cimv2") returned 0xa [0240.677] IWbemClassObject:Get (in: This=0x7669770, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6400de0*=8, plFlavor=0x6400de4*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6400de0*=8, plFlavor=0x6400de4*=64) returned 0x0 [0240.677] SysStringLen (param_1="root\\cimv2") returned 0xa [0240.678] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0240.678] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0240.678] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0240.678] IWbemClassObject:Get (in: This=0x7669770, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6400e98*=0, plFlavor=0x6400e9c*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6400e98*=8, plFlavor=0x6400e9c*=64) returned 0x0 [0240.678] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0240.678] IWbemClassObject:Get (in: This=0x7669770, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6400e98*=8, plFlavor=0x6400e9c*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6400e98*=8, plFlavor=0x6400e9c*=64) returned 0x0 [0240.678] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0240.679] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7667260, puCount=0x50beca8 | out: puCount=0x50beca8*=0x2) returned 0x0 [0240.679] WbemDefPath:IWbemPath:GetText (in: This=0x7667260, lFlags=4, puBuffLength=0x50beca4*=0x0, pszText=0x0 | out: puBuffLength=0x50beca4*=0x53, pszText=0x0) returned 0x0 [0240.679] WbemDefPath:IWbemPath:GetText (in: This=0x7667260, lFlags=4, puBuffLength=0x50beca4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50beca4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x0 [0240.679] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec3c | out: puCount=0x50bec3c*=0x2) returned 0x0 [0240.679] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x0, pszText=0x0 | out: puBuffLength=0x50bec38*=0x17, pszText=0x0) returned 0x0 [0240.679] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0240.679] CoGetContextToken (in: pToken=0x50beb80 | out: pToken=0x50beb80) returned 0x0 [0240.679] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0240.679] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7a4 | out: ppvObject=0x50be7a4*=0x3e9c04) returned 0x0 [0240.679] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0240.680] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0240.680] IWbemClassObject:Get (in: This=0x7669770, wszName="__GENUS", lFlags=0, pVal=0x50bebf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50becac*=0, plFlavor=0x50beca8*=0 | out: pVal=0x50bebf8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50becac*=3, plFlavor=0x50beca8*=64) returned 0x0 [0240.680] WbemDefPath:IWbemPath:GetText (in: This=0x7667260, lFlags=2, puBuffLength=0x50becac*=0x0, pszText=0x0 | out: puBuffLength=0x50becac*=0x3d, pszText=0x0) returned 0x0 [0240.680] WbemDefPath:IWbemPath:GetText (in: This=0x7667260, lFlags=2, puBuffLength=0x50becac*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50becac*=0x3d, pszText="Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"") returned 0x0 [0240.680] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0240.680] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0240.680] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{75969668-99CB-45AE-BBDF-D3001679A3F1}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0242.216] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0242.216] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0242.216] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0242.216] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x7669d00, puReturned=0x63c1a70*=0x1) returned 0x0 [0242.218] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x7669d00) returned 0x0 [0242.219] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0242.219] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0242.219] IUnknown:AddRef (This=0x7669d00) returned 0x3 [0242.219] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0242.219] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x7669d04) returned 0x0 [0242.219] IMarshal:GetUnmarshalClass (in: This=0x7669d04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0242.220] IUnknown:Release (This=0x7669d04) returned 0x3 [0242.220] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0242.220] IUnknown:AddRef (This=0x7669d00) returned 0x4 [0242.220] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0242.220] IUnknown:Release (This=0x7669d00) returned 0x3 [0242.220] IUnknown:Release (This=0x7669d00) returned 0x2 [0242.220] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0242.221] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0242.221] IUnknown:AddRef (This=0x7669d00) returned 0x3 [0242.221] IUnknown:QueryInterface (in: This=0x7669d00, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x7669d00) returned 0x0 [0242.221] IUnknown:Release (This=0x7669d00) returned 0x3 [0242.221] IUnknown:Release (This=0x7669d00) returned 0x2 [0242.221] IUnknown:Release (This=0x7669d00) returned 0x1 [0242.221] IUnknown:Release (This=0x765dd64) returned 0x2 [0242.222] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0242.222] IUnknown:AddRef (This=0x7669d00) returned 0x2 [0242.222] IWbemClassObject:Get (in: This=0x7669d00, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0242.222] IWbemClassObject:Get (in: This=0x7669d00, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0242.222] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x52 [0242.222] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0242.222] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0242.222] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0242.222] IUnknown:Release (This=0x305784) returned 0x1 [0242.223] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x7669cf0) returned 0x0 [0242.223] WbemDefPath:IUnknown:QueryInterface (in: This=0x7669cf0, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0242.223] WbemDefPath:IClassFactory:CreateInstance (in: This=0x7669cf0, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x76672d0) returned 0x0 [0242.223] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x76672d0) returned 0x0 [0242.224] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0242.224] WbemDefPath:IUnknown:AddRef (This=0x76672d0) returned 0x3 [0242.224] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0242.224] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e6598) returned 0x0 [0242.224] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e6598, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0242.224] WbemDefPath:IUnknown:Release (This=0x60e6598) returned 0x3 [0242.224] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0242.224] WbemDefPath:IUnknown:AddRef (This=0x76672d0) returned 0x4 [0242.224] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0242.225] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x3 [0242.225] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x2 [0242.225] WbemDefPath:IUnknown:Release (This=0x7669cf0) returned 0x0 [0242.225] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x1 [0242.225] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0242.225] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0242.225] WbemDefPath:IUnknown:AddRef (This=0x76672d0) returned 0x2 [0242.225] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x76672d0) returned 0x0 [0242.226] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x2 [0242.226] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x1 [0242.226] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0242.226] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0242.226] WbemDefPath:IUnknown:AddRef (This=0x76672d0) returned 0x2 [0242.226] WbemDefPath:IUnknown:QueryInterface (in: This=0x76672d0, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x76672d0) returned 0x0 [0242.226] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x2 [0242.226] WbemDefPath:IUnknown:AddRef (This=0x76672d0) returned 0x3 [0242.226] WbemDefPath:IWbemPath:SetText (This=0x76672d0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x0 [0242.226] WbemDefPath:IUnknown:Release (This=0x76672d0) returned 0x2 [0242.226] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0242.227] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0242.227] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0242.227] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0242.227] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0242.227] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0242.227] IWbemClassObject:Get (in: This=0x7669d00, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x640428c*=0, plFlavor=0x6404290*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x640428c*=8, plFlavor=0x6404290*=64) returned 0x0 [0242.227] SysStringLen (param_1="root\\cimv2") returned 0xa [0242.227] IWbemClassObject:Get (in: This=0x7669d00, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x640428c*=8, plFlavor=0x6404290*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x640428c*=8, plFlavor=0x6404290*=64) returned 0x0 [0242.227] SysStringLen (param_1="root\\cimv2") returned 0xa [0242.227] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0242.227] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0242.227] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0242.227] IWbemClassObject:Get (in: This=0x7669d00, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6404344*=0, plFlavor=0x6404348*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6404344*=8, plFlavor=0x6404348*=64) returned 0x0 [0242.227] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0242.228] IWbemClassObject:Get (in: This=0x7669d00, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6404344*=8, plFlavor=0x6404348*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x6404344*=8, plFlavor=0x6404348*=64) returned 0x0 [0242.228] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0242.228] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76672d0, puCount=0x50beca8 | out: puCount=0x50beca8*=0x2) returned 0x0 [0242.228] WbemDefPath:IWbemPath:GetText (in: This=0x76672d0, lFlags=4, puBuffLength=0x50beca4*=0x0, pszText=0x0 | out: puBuffLength=0x50beca4*=0x53, pszText=0x0) returned 0x0 [0242.229] WbemDefPath:IWbemPath:GetText (in: This=0x76672d0, lFlags=4, puBuffLength=0x50beca4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50beca4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x0 [0242.229] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec3c | out: puCount=0x50bec3c*=0x2) returned 0x0 [0242.229] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x0, pszText=0x0 | out: puBuffLength=0x50bec38*=0x17, pszText=0x0) returned 0x0 [0242.229] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0242.229] CoGetContextToken (in: pToken=0x50beb80 | out: pToken=0x50beb80) returned 0x0 [0242.229] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0242.229] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7a4 | out: ppvObject=0x50be7a4*=0x3e9c04) returned 0x0 [0242.229] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0242.229] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0242.230] IWbemClassObject:Get (in: This=0x7669d00, wszName="__GENUS", lFlags=0, pVal=0x50bebf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50becac*=0, plFlavor=0x50beca8*=0 | out: pVal=0x50bebf8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50becac*=3, plFlavor=0x50beca8*=64) returned 0x0 [0242.230] WbemDefPath:IWbemPath:GetText (in: This=0x76672d0, lFlags=2, puBuffLength=0x50becac*=0x0, pszText=0x0 | out: puBuffLength=0x50becac*=0x3d, pszText=0x0) returned 0x0 [0242.230] WbemDefPath:IWbemPath:GetText (in: This=0x76672d0, lFlags=2, puBuffLength=0x50becac*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50becac*=0x3d, pszText="Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"") returned 0x0 [0242.230] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0242.230] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0242.230] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{1DF6C13F-3F94-45FF-933A-87F8CBA74C78}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0243.451] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0243.451] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0243.451] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0243.451] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x766a690, puReturned=0x63c1a70*=0x1) returned 0x0 [0243.453] IUnknown:QueryInterface (in: This=0x766a690, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x766a690) returned 0x0 [0243.453] IUnknown:QueryInterface (in: This=0x766a690, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0243.453] IUnknown:QueryInterface (in: This=0x766a690, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0243.454] IUnknown:AddRef (This=0x766a690) returned 0x3 [0243.454] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0243.454] IUnknown:QueryInterface (in: This=0x766a690, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x766a694) returned 0x0 [0243.454] IMarshal:GetUnmarshalClass (in: This=0x766a694, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0243.454] IUnknown:Release (This=0x766a694) returned 0x3 [0243.455] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0243.455] IUnknown:AddRef (This=0x766a690) returned 0x4 [0243.455] IUnknown:QueryInterface (in: This=0x766a690, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0243.455] IUnknown:Release (This=0x766a690) returned 0x3 [0243.455] IUnknown:Release (This=0x766a690) returned 0x2 [0243.455] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0243.455] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0243.455] IUnknown:AddRef (This=0x766a690) returned 0x3 [0243.456] IUnknown:QueryInterface (in: This=0x766a690, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x766a690) returned 0x0 [0243.456] IUnknown:Release (This=0x766a690) returned 0x3 [0243.456] IUnknown:Release (This=0x766a690) returned 0x2 [0243.456] IUnknown:Release (This=0x766a690) returned 0x1 [0243.456] IUnknown:Release (This=0x765dd64) returned 0x2 [0243.456] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0243.456] IUnknown:AddRef (This=0x766a690) returned 0x2 [0243.457] IWbemClassObject:Get (in: This=0x766a690, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0243.457] IWbemClassObject:Get (in: This=0x766a690, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0243.457] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x52 [0243.457] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0243.457] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0243.457] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0243.457] IUnknown:Release (This=0x305784) returned 0x1 [0243.458] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x766ab20) returned 0x0 [0243.458] WbemDefPath:IUnknown:QueryInterface (in: This=0x766ab20, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0243.458] WbemDefPath:IClassFactory:CreateInstance (in: This=0x766ab20, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x7667340) returned 0x0 [0243.458] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x7667340) returned 0x0 [0243.458] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0243.459] WbemDefPath:IUnknown:AddRef (This=0x7667340) returned 0x3 [0243.459] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0243.459] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e65d8) returned 0x0 [0243.459] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e65d8, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0243.459] WbemDefPath:IUnknown:Release (This=0x60e65d8) returned 0x3 [0243.460] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0243.460] WbemDefPath:IUnknown:AddRef (This=0x7667340) returned 0x4 [0243.460] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0243.460] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x3 [0243.460] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x2 [0243.460] WbemDefPath:IUnknown:Release (This=0x766ab20) returned 0x0 [0243.460] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x1 [0243.461] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0243.461] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0243.461] WbemDefPath:IUnknown:AddRef (This=0x7667340) returned 0x2 [0243.461] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x7667340) returned 0x0 [0243.461] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x2 [0243.461] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x1 [0243.461] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0243.461] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0243.461] WbemDefPath:IUnknown:AddRef (This=0x7667340) returned 0x2 [0243.462] WbemDefPath:IUnknown:QueryInterface (in: This=0x7667340, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x7667340) returned 0x0 [0243.462] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x2 [0243.462] WbemDefPath:IUnknown:AddRef (This=0x7667340) returned 0x3 [0243.462] WbemDefPath:IWbemPath:SetText (This=0x7667340, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x0 [0243.462] WbemDefPath:IUnknown:Release (This=0x7667340) returned 0x2 [0243.462] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0243.462] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0243.462] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0243.463] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0243.463] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0243.463] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0243.463] IWbemClassObject:Get (in: This=0x766a690, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6407738*=0, plFlavor=0x640773c*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6407738*=8, plFlavor=0x640773c*=64) returned 0x0 [0243.463] SysStringLen (param_1="root\\cimv2") returned 0xa [0243.463] IWbemClassObject:Get (in: This=0x766a690, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6407738*=8, plFlavor=0x640773c*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x6407738*=8, plFlavor=0x640773c*=64) returned 0x0 [0243.463] SysStringLen (param_1="root\\cimv2") returned 0xa [0243.463] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0243.463] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0243.463] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0243.464] IWbemClassObject:Get (in: This=0x766a690, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64077f0*=0, plFlavor=0x64077f4*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64077f0*=8, plFlavor=0x64077f4*=64) returned 0x0 [0243.464] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0243.464] IWbemClassObject:Get (in: This=0x766a690, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x64077f0*=8, plFlavor=0x64077f4*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x64077f0*=8, plFlavor=0x64077f4*=64) returned 0x0 [0243.464] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0243.464] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7667340, puCount=0x50beca8 | out: puCount=0x50beca8*=0x2) returned 0x0 [0243.464] WbemDefPath:IWbemPath:GetText (in: This=0x7667340, lFlags=4, puBuffLength=0x50beca4*=0x0, pszText=0x0 | out: puBuffLength=0x50beca4*=0x53, pszText=0x0) returned 0x0 [0243.464] WbemDefPath:IWbemPath:GetText (in: This=0x7667340, lFlags=4, puBuffLength=0x50beca4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50beca4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x0 [0243.464] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec3c | out: puCount=0x50bec3c*=0x2) returned 0x0 [0243.464] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x0, pszText=0x0 | out: puBuffLength=0x50bec38*=0x17, pszText=0x0) returned 0x0 [0243.464] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0243.464] CoGetContextToken (in: pToken=0x50beb80 | out: pToken=0x50beb80) returned 0x0 [0243.465] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0243.465] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7a4 | out: ppvObject=0x50be7a4*=0x3e9c04) returned 0x0 [0243.465] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0243.465] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0243.465] IWbemClassObject:Get (in: This=0x766a690, wszName="__GENUS", lFlags=0, pVal=0x50bebf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50becac*=0, plFlavor=0x50beca8*=0 | out: pVal=0x50bebf8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50becac*=3, plFlavor=0x50beca8*=64) returned 0x0 [0243.465] WbemDefPath:IWbemPath:GetText (in: This=0x7667340, lFlags=2, puBuffLength=0x50becac*=0x0, pszText=0x0 | out: puBuffLength=0x50becac*=0x3d, pszText=0x0) returned 0x0 [0243.465] WbemDefPath:IWbemPath:GetText (in: This=0x7667340, lFlags=2, puBuffLength=0x50becac*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50becac*=0x3d, pszText="Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"") returned 0x0 [0243.465] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0243.465] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0243.466] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{6B7771DF-A33B-46A9-8D9B-0D19627DBD40}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0244.936] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0244.936] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0244.936] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0244.937] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x766b010, puReturned=0x63c1a70*=0x1) returned 0x0 [0244.938] IUnknown:QueryInterface (in: This=0x766b010, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be3c8 | out: ppvObject=0x50be3c8*=0x766b010) returned 0x0 [0244.938] IUnknown:QueryInterface (in: This=0x766b010, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be384 | out: ppvObject=0x50be384*=0x0) returned 0x80004002 [0244.939] IUnknown:QueryInterface (in: This=0x766b010, riid=0x6c9d0b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be278 | out: ppvObject=0x50be278*=0x0) returned 0x80004002 [0244.939] IUnknown:AddRef (This=0x766b010) returned 0x3 [0244.939] CoGetContextToken (in: pToken=0x50be210 | out: pToken=0x50be210) returned 0x0 [0244.939] IUnknown:QueryInterface (in: This=0x766b010, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be1f8 | out: ppvObject=0x50be1f8*=0x766b014) returned 0x0 [0244.940] IMarshal:GetUnmarshalClass (in: This=0x766b014, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be200 | out: pCid=0x50be200*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0244.940] IUnknown:Release (This=0x766b014) returned 0x3 [0244.940] CoGetContextToken (in: pToken=0x50be208 | out: pToken=0x50be208) returned 0x0 [0244.940] IUnknown:AddRef (This=0x766b010) returned 0x4 [0244.940] IUnknown:QueryInterface (in: This=0x766b010, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be27c | out: ppvObject=0x50be27c*=0x0) returned 0x80004002 [0244.940] IUnknown:Release (This=0x766b010) returned 0x3 [0244.940] IUnknown:Release (This=0x766b010) returned 0x2 [0244.941] CoGetContextToken (in: pToken=0x50be668 | out: pToken=0x50be668) returned 0x0 [0244.941] CoGetContextToken (in: pToken=0x50be628 | out: pToken=0x50be628) returned 0x0 [0244.941] IUnknown:AddRef (This=0x766b010) returned 0x3 [0244.941] IUnknown:QueryInterface (in: This=0x766b010, riid=0x50be6a4*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x50be6a0 | out: ppvObject=0x50be6a0*=0x766b010) returned 0x0 [0244.941] IUnknown:Release (This=0x766b010) returned 0x3 [0244.941] IUnknown:Release (This=0x766b010) returned 0x2 [0244.941] IUnknown:Release (This=0x766b010) returned 0x1 [0244.942] IUnknown:Release (This=0x765dd64) returned 0x2 [0244.942] CoGetContextToken (in: pToken=0x50bef54 | out: pToken=0x50bef54) returned 0x0 [0244.942] IUnknown:AddRef (This=0x766b010) returned 0x2 [0244.942] IWbemClassObject:Get (in: This=0x766b010, wszName="__GENUS", lFlags=0, pVal=0x50befd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf084*=0, plFlavor=0x50bf080*=0 | out: pVal=0x50befd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50bf084*=3, plFlavor=0x50bf080*=64) returned 0x0 [0244.942] IWbemClassObject:Get (in: This=0x766b010, wszName="__PATH", lFlags=0, pVal=0x50befb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50bf068*=0, plFlavor=0x50bf064*=0 | out: pVal=0x50befb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"", varVal2=0x0), pType=0x50bf068*=8, plFlavor=0x50bf064*=64) returned 0x0 [0244.942] SysStringLen (param_1="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x52 [0244.942] CoGetObjectContext (in: riid=0x56f8dac*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50bf008 | out: ppv=0x50bf008*=0x305784) returned 0x0 [0244.943] IComThreadingInfo:GetCurrentApartmentType (in: This=0x305784, pAptType=0x50bf000 | out: pAptType=0x50bf000*=1) returned 0x0 [0244.943] IUnknown:QueryInterface (in: This=0x305784, riid=0x56f8d94*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x50bf004 | out: ppvObject=0x50bf004*=0x0) returned 0x80004002 [0244.943] IUnknown:Release (This=0x305784) returned 0x1 [0244.943] CoGetClassObject (in: rclsid=0x3cb80c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6ca0a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x50beb20 | out: ppv=0x50beb20*=0x766ab30) returned 0x0 [0244.943] WbemDefPath:IUnknown:QueryInterface (in: This=0x766ab30, riid=0x6caf7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x50be950 | out: ppvObject=0x50be950*=0x0) returned 0x80004002 [0244.943] WbemDefPath:IClassFactory:CreateInstance (in: This=0x766ab30, pUnkOuter=0x0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be988 | out: ppvObject=0x50be988*=0x76673b0) returned 0x0 [0244.943] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be72c | out: ppvObject=0x50be72c*=0x76673b0) returned 0x0 [0244.944] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x6caa4204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x50be6e8 | out: ppvObject=0x50be6e8*=0x0) returned 0x80004002 [0244.944] WbemDefPath:IUnknown:AddRef (This=0x76673b0) returned 0x3 [0244.944] CoGetContextToken (in: pToken=0x50be574 | out: pToken=0x50be574) returned 0x0 [0244.944] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x6c9823cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be55c | out: ppvObject=0x50be55c*=0x60e6618) returned 0x0 [0244.944] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x60e6618, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x50be564 | out: pCid=0x50be564*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0244.944] WbemDefPath:IUnknown:Release (This=0x60e6618) returned 0x3 [0244.945] CoGetContextToken (in: pToken=0x50be56c | out: pToken=0x50be56c) returned 0x0 [0244.945] WbemDefPath:IUnknown:AddRef (This=0x76673b0) returned 0x4 [0244.945] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x6c9d767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be5e0 | out: ppvObject=0x50be5e0*=0x0) returned 0x80004002 [0244.945] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x3 [0244.945] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x2 [0244.945] WbemDefPath:IUnknown:Release (This=0x766ab30) returned 0x0 [0244.945] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x1 [0244.946] CoGetContextToken (in: pToken=0x50bee1c | out: pToken=0x50bee1c) returned 0x0 [0244.946] CoGetContextToken (in: pToken=0x50beddc | out: pToken=0x50beddc) returned 0x0 [0244.946] WbemDefPath:IUnknown:AddRef (This=0x76673b0) returned 0x2 [0244.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x50bee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50bee54 | out: ppvObject=0x50bee54*=0x76673b0) returned 0x0 [0244.946] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x2 [0244.946] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x1 [0244.946] CoGetContextToken (in: pToken=0x50bee9c | out: pToken=0x50bee9c) returned 0x0 [0244.946] CoGetContextToken (in: pToken=0x50bee5c | out: pToken=0x50bee5c) returned 0x0 [0244.946] WbemDefPath:IUnknown:AddRef (This=0x76673b0) returned 0x2 [0244.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x76673b0, riid=0x50beed8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x50beed4 | out: ppvObject=0x50beed4*=0x76673b0) returned 0x0 [0244.946] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x2 [0244.946] WbemDefPath:IUnknown:AddRef (This=0x76673b0) returned 0x3 [0244.947] WbemDefPath:IWbemPath:SetText (This=0x76673b0, uMode=0x4, pszPath="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x0 [0244.947] WbemDefPath:IUnknown:Release (This=0x76673b0) returned 0x2 [0244.947] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bf03c | out: puCount=0x50bf03c*=0x2) returned 0x0 [0244.947] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x0, pszText=0x0 | out: puBuffLength=0x50bf038*=0x17, pszText=0x0) returned 0x0 [0244.947] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bf038*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bf038*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0244.947] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0244.947] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0244.947] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0244.947] IWbemClassObject:Get (in: This=0x766b010, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x640abe4*=0, plFlavor=0x640abe8*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x640abe4*=8, plFlavor=0x640abe8*=64) returned 0x0 [0244.947] SysStringLen (param_1="root\\cimv2") returned 0xa [0244.947] IWbemClassObject:Get (in: This=0x766b010, wszName="__NAMESPACE", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x640abe4*=8, plFlavor=0x640abe8*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="root\\cimv2", varVal2=0x0), pType=0x640abe4*=8, plFlavor=0x640abe8*=64) returned 0x0 [0244.947] SysStringLen (param_1="root\\cimv2") returned 0xa [0244.948] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bed9c | out: puCount=0x50bed9c*=0x2) returned 0x0 [0244.948] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x0, pszText=0x0 | out: puBuffLength=0x50bed98*=0x17, pszText=0x0) returned 0x0 [0244.948] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bed98*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bed98*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0244.948] IWbemClassObject:Get (in: This=0x766b010, wszName="__CLASS", lFlags=0, pVal=0x50bed58*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x640ac9c*=0, plFlavor=0x640aca0*=0 | out: pVal=0x50bed58*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x640ac9c*=8, plFlavor=0x640aca0*=64) returned 0x0 [0244.948] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0244.948] IWbemClassObject:Get (in: This=0x766b010, wszName="__CLASS", lFlags=0, pVal=0x50bed5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x640ac9c*=8, plFlavor=0x640aca0*=64 | out: pVal=0x50bed5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_ShadowCopy", varVal2=0x0), pType=0x640ac9c*=8, plFlavor=0x640aca0*=64) returned 0x0 [0244.948] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0244.948] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x76673b0, puCount=0x50beca8 | out: puCount=0x50beca8*=0x2) returned 0x0 [0244.948] WbemDefPath:IWbemPath:GetText (in: This=0x76673b0, lFlags=4, puBuffLength=0x50beca4*=0x0, pszText=0x0 | out: puBuffLength=0x50beca4*=0x53, pszText=0x0) returned 0x0 [0244.948] WbemDefPath:IWbemPath:GetText (in: This=0x76673b0, lFlags=4, puBuffLength=0x50beca4*=0x53, pszText="0000000000000000000000000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50beca4*=0x53, pszText="\\\\CRH2YWU7\\root\\cimv2:Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x0 [0244.948] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7650820, puCount=0x50bec3c | out: puCount=0x50bec3c*=0x2) returned 0x0 [0244.948] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x0, pszText=0x0 | out: puBuffLength=0x50bec38*=0x17, pszText=0x0) returned 0x0 [0244.949] WbemDefPath:IWbemPath:GetText (in: This=0x7650820, lFlags=4, puBuffLength=0x50bec38*=0x17, pszText="0000000000000000000000" | out: puBuffLength=0x50bec38*=0x17, pszText="\\\\localhost\\root\\cimv2") returned 0x0 [0244.949] CoGetContextToken (in: pToken=0x50beb80 | out: pToken=0x50beb80) returned 0x0 [0244.949] WbemLocator:IUnknown:AddRef (This=0x3e9c04) returned 0x3 [0244.949] WbemLocator:IUnknown:QueryInterface (in: This=0x3e9c04, riid=0x6ca87714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x50be7a4 | out: ppvObject=0x50be7a4*=0x3e9c04) returned 0x0 [0244.949] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x3 [0244.949] WbemLocator:IUnknown:Release (This=0x3e9c04) returned 0x2 [0244.949] IWbemClassObject:Get (in: This=0x766b010, wszName="__GENUS", lFlags=0, pVal=0x50bebf8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x50becac*=0, plFlavor=0x50beca8*=0 | out: pVal=0x50bebf8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x50becac*=3, plFlavor=0x50beca8*=64) returned 0x0 [0244.949] WbemDefPath:IWbemPath:GetText (in: This=0x76673b0, lFlags=2, puBuffLength=0x50becac*=0x0, pszText=0x0 | out: puBuffLength=0x50becac*=0x3d, pszText=0x0) returned 0x0 [0244.950] WbemDefPath:IWbemPath:GetText (in: This=0x76673b0, lFlags=2, puBuffLength=0x50becac*=0x3d, pszText="000000000000000000000000000000000000000000000000000000000000" | out: puBuffLength=0x50becac*=0x3d, pszText="Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"") returned 0x0 [0244.950] CoGetContextToken (in: pToken=0x50be90c | out: pToken=0x50be90c) returned 0x0 [0244.950] WbemLocator:IUnknown:AddRef (This=0x7650bdc) returned 0x3 [0244.950] IWbemServices:DeleteInstance (in: This=0x7650bdc, strObjectPath="Win32_ShadowCopy.ID=\"{AD10B195-7DC9-48C0-B5FC-A273EEEA4304}\"", lFlags=0, pCtx=0x0, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0 [0245.072] WbemLocator:IUnknown:Release (This=0x7650bdc) returned 0x2 [0245.072] CoGetContextToken (in: pToken=0x50bedbc | out: pToken=0x50bedbc) returned 0x0 [0245.072] IUnknown:AddRef (This=0x765dd64) returned 0x3 [0245.072] IEnumWbemClassObject:Next (in: This=0x765dd64, lTimeout=-1, uCount=0x1, apObjects=0x369190, puReturned=0x63c1a70 | out: apObjects=0x369190*=0x0, puReturned=0x63c1a70*=0x0) returned 0x1 [0245.074] IUnknown:Release (This=0x765dd64) returned 0x2 [0245.074] CoGetContextToken (in: pToken=0x50bef0c | out: pToken=0x50bef0c) returned 0x0 [0245.074] WbemLocator:IUnknown:Release (This=0x3e9de4) returned 0x1 [0245.074] IUnknown:Release (This=0x765dd64) returned 0x0 [0245.082] SetEvent (hEvent=0x3e8) returned 1 [0245.082] GetLastError () returned 0x0 [0245.083] SetEvent (hEvent=0x3dc) returned 1 [0245.083] GetLastError () returned 0x0 [0245.083] SetEvent (hEvent=0x3e0) returned 1 [0245.083] GetLastError () returned 0x0 [0245.083] SetEvent (hEvent=0x3e4) returned 1 [0245.083] GetLastError () returned 0x0 [0245.083] SetEvent (hEvent=0x3f8) returned 1 [0245.083] GetLastError () returned 0x0 [0245.083] SetEvent (hEvent=0x3ec) returned 1 [0245.083] GetLastError () returned 0x0 [0245.083] SetEvent (hEvent=0x3f0) returned 1 [0245.083] GetLastError () returned 0x0 [0245.083] SetEvent (hEvent=0x3f4) returned 1 [0245.083] GetLastError () returned 0x0 [0245.083] SetEvent (hEvent=0x3fc) returned 1 [0245.083] GetLastError () returned 0x0 [0245.084] CoUninitialize () Thread: id = 10 os_tid = 0xf0c Thread: id = 11 os_tid = 0xf10 Thread: id = 12 os_tid = 0xfb8 Thread: id = 115 os_tid = 0xfdc Thread: id = 9510 os_tid = 0x1730 [0245.156] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0245.202] SetThreadUILanguage (LangId=0x0) returned 0x409 [0245.359] VirtualQuery (in: lpAddress=0x83de2e0, lpBuffer=0x83df2e0, dwLength=0x1c | out: lpBuffer=0x83df2e0*(BaseAddress=0x83de000, AllocationBase=0x7a50000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0245.360] VirtualQuery (in: lpAddress=0x83de3fc, lpBuffer=0x83df3fc, dwLength=0x1c | out: lpBuffer=0x83df3fc*(BaseAddress=0x83de000, AllocationBase=0x7a50000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0245.386] SetEvent (hEvent=0x490) returned 1 [0245.386] GetLastError () returned 0x0 [0245.386] SetEvent (hEvent=0x488) returned 1 [0245.386] GetLastError () returned 0x0 [0245.386] SetEvent (hEvent=0x3ac) returned 1 [0245.386] GetLastError () returned 0x0 [0245.386] SetEvent (hEvent=0x490) returned 1 [0245.386] GetLastError () returned 0x0 [0245.386] SetEvent (hEvent=0x488) returned 1 [0245.387] GetLastError () returned 0x0 [0245.387] SetEvent (hEvent=0x344) returned 1 [0245.387] GetLastError () returned 0x0 [0245.387] SetEvent (hEvent=0x468) returned 1 [0245.387] GetLastError () returned 0x0 [0245.387] SetEvent (hEvent=0x478) returned 1 [0245.387] GetLastError () returned 0x0 [0245.387] SetEvent (hEvent=0x340) returned 1 [0245.387] GetLastError () returned 0x0 [0245.387] SetEvent (hEvent=0x380) returned 1 [0245.408] GetLastError () returned 0x0 [0245.425] CoUninitialize () Process: id = "2" image_name = "csc.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe" page_root = "0x7f134c40" os_pid = "0xefc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xeb4" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.cmdline\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 8 os_tid = 0xf00 [0080.825] SysStringByteLen (bstr="4") returned 0x2 [0080.828] SysStringByteLen (bstr="ꇠ\x18c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll") returned 0x136 [0080.828] SysStringByteLen (bstr="ꇠ\x18c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\5yhng4j0.dll") returned 0x136 [0080.830] SysStringByteLen (bstr="DEBUG") returned 0xa [0080.830] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0080.830] SysStringLen (param_1=0x0) returned 0x0 [0080.830] SysStringLen (param_1=0x0) returned 0x0 [0080.831] SysStringByteLen (bstr="DEBUG") returned 0xa [0080.831] SysStringLen (param_1=0x0) returned 0x0 [0080.831] SysStringByteLen (bstr="DEBUG") returned 0xa [0080.831] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0080.831] SysStringByteLen (bstr="4") returned 0x2 [0080.831] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0080.834] SysStringByteLen (bstr="DEBUG") returned 0xa [0080.834] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0080.834] SysStringByteLen (bstr="4") returned 0x2 [0080.834] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0080.881] CoCreateInstance (in: rclsid=0x5a143ad0*(Data1=0xe5cb7a31, Data2=0x7512, Data3=0x11d2, Data4=([0]=0x89, [1]=0xce, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0x92, [6]=0xe5, [7]=0xd8)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x5a143ae0*(Data1=0x31bcfce2, Data2=0xdafb, Data3=0x11d2, Data4=([0]=0x9f, [1]=0x81, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x79, [6]=0xa0, [7]=0xa3)), ppv=0x12fe5c | out: ppv=0x12fe5c*=0x187af8) returned 0x0 [0080.891] SysStringLen (param_1=0x0) returned 0x0 [0080.891] SysStringLen (param_1="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0x7f [0080.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.928] SysStringByteLen (bstr="DEBUG") returned 0xa [0080.928] SysStringByteLen (bstr="DEBUG") returned 0xa [0080.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0080.991] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.029] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.159] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.160] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.161] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.163] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.164] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.165] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.166] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.167] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.168] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.169] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.170] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.171] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.172] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.173] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.251] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.252] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.253] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.254] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.255] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.256] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.257] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.258] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.262] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.263] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.264] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.265] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.265] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.265] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.265] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.266] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.266] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.266] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.266] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.267] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.267] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.267] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.268] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.268] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.268] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.269] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.269] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.269] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.269] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.269] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.269] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.270] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.271] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.294] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.295] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.385] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.386] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.798] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.799] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.800] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.809] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0081.982] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.259] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.288] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.289] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.382] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.552] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.552] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.556] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.561] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.561] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.561] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.561] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.562] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.562] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.562] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.562] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.562] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.563] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.563] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.564] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.565] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.565] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.565] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.566] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.566] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.566] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.566] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.569] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.570] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.571] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.572] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.573] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.574] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.575] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.604] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.604] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.604] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.608] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.608] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.608] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.608] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.609] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.609] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.610] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.610] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.610] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.640] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.640] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.640] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.641] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.642] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.642] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.642] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.642] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.643] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.645] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.645] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.645] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.645] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.646] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.646] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.646] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.646] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.648] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.649] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.650] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.650] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.650] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.650] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.651] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.651] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.651] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.651] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.651] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.652] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.652] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.652] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.654] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.654] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.654] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.657] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.658] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.658] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.659] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.659] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.659] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.659] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.660] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.660] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.660] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.664] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.664] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.664] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.667] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.667] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.667] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.667] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.667] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.669] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.669] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.669] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.669] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.681] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.681] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.681] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.702] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.724] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.725] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.776] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.777] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.778] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.779] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.780] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.781] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.782] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.783] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.787] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.789] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.790] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.791] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.792] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.793] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.794] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.795] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.797] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.802] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.803] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.804] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.805] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.806] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.810] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.815] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.816] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.817] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.819] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.820] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.821] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.823] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.824] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.825] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.826] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.827] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.828] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.830] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.904] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.906] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.907] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.908] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.909] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.910] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.911] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.912] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.913] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.914] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.915] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.916] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.917] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.918] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.919] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.920] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.921] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.949] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.952] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.953] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0082.995] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.002] CoCreateGuid (in: pguid=0x12e63c | out: pguid=0x12e63c*(Data1=0xb09ad398, Data2=0xa2fb, Data3=0x4519, Data4=([0]=0x94, [1]=0x50, [2]=0xe8, [3]=0x77, [4]=0xe0, [5]=0xbe, [6]=0xee, [7]=0x39))) returned 0x0 [0083.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.054] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.058] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.059] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.060] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.061] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.062] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.276] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.313] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.314] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.327] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.328] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.329] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.330] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.331] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.332] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.333] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.334] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.443] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.443] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.468] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.469] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.470] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.508] SysStringLen (param_1=0x0) returned 0x0 [0083.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.509] GetTempFileNameW (in: lpPathName="c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\", lpPrefixString="CSC", uUnique=0x0, lpTempFileName=0x12eb40 | out: lpTempFileName="c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\CSC2116.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\temp\\csc2116.tmp")) returned 0x2116 [0083.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.515] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x12e55c | out: ppstm=0x12e55c*=0x19ca78) returned 0x0 [0083.525] IUnknown:AddRef (This=0x19ca78) returned 0x2 [0083.525] IStream:RemoteSeek (in: This=0x19ca78, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0083.528] ISequentialStream:RemoteWrite (in: This=0x19ca78, pv=0x20f160*=0x42, cb=0xe24, pcbWritten=0x12e410 | out: pcbWritten=0x12e410*=0xe24) returned 0x0 [0083.529] IUnknown:Release (This=0x19ca78) returned 0x1 [0083.529] IStream:Stat (in: This=0x19ca78, pstatstg=0x12e578, grfStatFlag=0x1 | out: pstatstg=0x12e578) returned 0x0 [0083.530] IStream:RemoteSeek (in: This=0x19ca78, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0083.530] ISequentialStream:RemoteRead (in: This=0x19ca78, pv=0x213fa0, cb=0xe25, pcbRead=0x12e554 | out: pv=0x213fa0*=0x42, pcbRead=0x12e554*=0xe24) returned 0x0 [0083.530] IUnknown:Release (This=0x19ca78) returned 0x0 [0083.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0083.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 Process: id = "3" image_name = "cvtres.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe" page_root = "0x7f1343e0" os_pid = "0xf04" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xefc" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 \"/OUT:C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\RES2137.tmp\" \"c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\CSC2116.tmp\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9 os_tid = 0xf08 Process: id = "4" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f1341a0" os_pid = "0x334" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ad2e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 13 os_tid = 0xf94 Thread: id = 14 os_tid = 0xf90 Thread: id = 15 os_tid = 0xf88 Thread: id = 16 os_tid = 0xf84 Thread: id = 17 os_tid = 0xf80 Thread: id = 18 os_tid = 0xf7c Thread: id = 19 os_tid = 0xf78 Thread: id = 20 os_tid = 0xf74 Thread: id = 21 os_tid = 0xf70 Thread: id = 22 os_tid = 0xf6c Thread: id = 23 os_tid = 0xe6c Thread: id = 24 os_tid = 0xe68 Thread: id = 25 os_tid = 0xe5c Thread: id = 26 os_tid = 0xe58 Thread: id = 27 os_tid = 0x61c Thread: id = 28 os_tid = 0x548 Thread: id = 29 os_tid = 0x49c Thread: id = 30 os_tid = 0x33c Thread: id = 31 os_tid = 0x330 Thread: id = 32 os_tid = 0x2ac Thread: id = 33 os_tid = 0x764 Thread: id = 34 os_tid = 0x758 Thread: id = 35 os_tid = 0x74c Thread: id = 36 os_tid = 0x744 Thread: id = 37 os_tid = 0x738 Thread: id = 38 os_tid = 0x734 Thread: id = 39 os_tid = 0x71c Thread: id = 40 os_tid = 0x694 Thread: id = 41 os_tid = 0x518 Thread: id = 42 os_tid = 0x4f8 Thread: id = 43 os_tid = 0x4f0 Thread: id = 44 os_tid = 0x4dc Thread: id = 45 os_tid = 0x4b4 Thread: id = 46 os_tid = 0x4b0 Thread: id = 47 os_tid = 0x4a0 Thread: id = 48 os_tid = 0x494 Thread: id = 49 os_tid = 0x478 Thread: id = 50 os_tid = 0x3cc Thread: id = 51 os_tid = 0x3c8 Thread: id = 52 os_tid = 0x3c0 Thread: id = 53 os_tid = 0x3b4 Thread: id = 54 os_tid = 0x364 Thread: id = 55 os_tid = 0x354 Thread: id = 56 os_tid = 0x350 Thread: id = 57 os_tid = 0x34c Thread: id = 58 os_tid = 0x340 Thread: id = 59 os_tid = 0x338 Thread: id = 121 os_tid = 0xff8 Thread: id = 123 os_tid = 0x64 Thread: id = 124 os_tid = 0x80c Thread: id = 1198 os_tid = 0x1a4c Thread: id = 2913 os_tid = 0x18a4 Thread: id = 3232 os_tid = 0x1a2c Thread: id = 4097 os_tid = 0x10cc Thread: id = 6116 os_tid = 0x158c Thread: id = 8235 os_tid = 0x1ca8 Thread: id = 8236 os_tid = 0x1de0 Thread: id = 9504 os_tid = 0x121c Thread: id = 9547 os_tid = 0x1c20 Thread: id = 9548 os_tid = 0x1dc8 Thread: id = 9549 os_tid = 0x1c28 Thread: id = 9550 os_tid = 0x1c38 Thread: id = 9551 os_tid = 0x1814 Thread: id = 9552 os_tid = 0x248c Thread: id = 9562 os_tid = 0x2658 Process: id = "5" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x7f134420" os_pid = "0xae0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00041949" [0xc000000f] Thread: id = 60 os_tid = 0xe60 Thread: id = 61 os_tid = 0xb10 Thread: id = 62 os_tid = 0xb00 Thread: id = 63 os_tid = 0xafc Thread: id = 64 os_tid = 0xaf8 Thread: id = 65 os_tid = 0xaf4 Thread: id = 66 os_tid = 0xaf0 Thread: id = 67 os_tid = 0xae8 Thread: id = 68 os_tid = 0xae4 Thread: id = 214 os_tid = 0xbe8 Thread: id = 942 os_tid = 0x16a0 Thread: id = 8761 os_tid = 0x21b4 Thread: id = 8793 os_tid = 0x1e80 Thread: id = 9556 os_tid = 0x1130 Process: id = "6" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x7f134b80" os_pid = "0xaa0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e990" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ad2e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 69 os_tid = 0xe64 Thread: id = 70 os_tid = 0xac0 Thread: id = 71 os_tid = 0xabc Thread: id = 72 os_tid = 0xab8 Thread: id = 73 os_tid = 0xab4 Thread: id = 74 os_tid = 0xab0 Thread: id = 75 os_tid = 0xaa8 Thread: id = 76 os_tid = 0xaa4 Thread: id = 976 os_tid = 0x1728 Thread: id = 8373 os_tid = 0x1ebc Thread: id = 8374 os_tid = 0x1ec0 Thread: id = 9555 os_tid = 0x1014 Process: id = "7" image_name = "csc.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe" page_root = "0x7f134400" os_pid = "0xfc0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xeb4" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe\" /noconfig /fullpaths @\"C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.cmdline\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 77 os_tid = 0xfc4 [0101.813] SysStringByteLen (bstr="4") returned 0x2 [0101.816] SysStringByteLen (bstr="ꇠ)c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll") returned 0x136 [0101.816] SysStringByteLen (bstr="ꇠ)c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\7rzn_h_f.dll") returned 0x136 [0101.818] SysStringByteLen (bstr="DEBUG") returned 0xa [0101.819] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0101.819] SysStringLen (param_1=0x0) returned 0x0 [0101.819] SysStringLen (param_1=0x0) returned 0x0 [0101.819] SysStringByteLen (bstr="DEBUG") returned 0xa [0101.820] SysStringLen (param_1=0x0) returned 0x0 [0101.820] SysStringByteLen (bstr="DEBUG") returned 0xa [0101.820] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0101.820] SysStringByteLen (bstr="4") returned 0x2 [0101.820] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0101.825] SysStringByteLen (bstr="DEBUG") returned 0xa [0101.825] SysStringByteLen (bstr="āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā") returned 0x136 [0101.825] SysStringByteLen (bstr="4") returned 0x2 [0101.825] SysStringByteLen (bstr="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0xfe [0101.867] CoCreateInstance (in: rclsid=0x5a143ad0*(Data1=0xe5cb7a31, Data2=0x7512, Data3=0x11d2, Data4=([0]=0x89, [1]=0xce, [2]=0x0, [3]=0x80, [4]=0xc7, [5]=0x92, [6]=0xe5, [7]=0xd8)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x5a143ae0*(Data1=0x31bcfce2, Data2=0xdafb, Data3=0x11d2, Data4=([0]=0x9f, [1]=0x81, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x79, [6]=0xa0, [7]=0xa3)), ppv=0x12fe5c | out: ppv=0x12fe5c*=0x297af8) returned 0x0 [0101.875] SysStringLen (param_1=0x0) returned 0x0 [0101.875] SysStringLen (param_1="System.dll|C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll") returned 0x7f [0101.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0101.924] SysStringByteLen (bstr="DEBUG") returned 0xa [0101.924] SysStringByteLen (bstr="DEBUG") returned 0xa [0101.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0101.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0101.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0101.959] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0101.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0101.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.002] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.030] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.051] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.053] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.055] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.056] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.057] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.070] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.071] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.072] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.073] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.074] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.075] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.076] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.077] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.080] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.081] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.082] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.083] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.084] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.085] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.086] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.087] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.088] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.089] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.090] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.091] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.092] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.093] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.094] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.095] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.096] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.097] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.098] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.099] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.100] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.101] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.102] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.105] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.106] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.107] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.108] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.109] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.110] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.111] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.112] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.113] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.114] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.115] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.118] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.119] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.120] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.121] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.122] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.123] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.124] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.125] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.126] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.127] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.128] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.129] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.130] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.131] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.132] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.133] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.134] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.136] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.137] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.138] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.139] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.140] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.141] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.142] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.143] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.144] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.145] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.146] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.147] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.148] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.151] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.152] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.153] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.154] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.155] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.156] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.157] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.158] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.177] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.178] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.179] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.180] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.181] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.182] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.183] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.184] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.185] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.186] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.187] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.188] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.190] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.191] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.192] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.193] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.194] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.195] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.196] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.197] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.198] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.199] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.200] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.201] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.204] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.205] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.206] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.207] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.208] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.209] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.210] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.211] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.212] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.213] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.214] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.215] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.216] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.219] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.220] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.221] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.222] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.223] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.224] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.225] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.226] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.227] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.228] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.229] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.230] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.231] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.232] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.233] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.234] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.235] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.236] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.237] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.238] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.239] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.240] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.243] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.244] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.245] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.246] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.247] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.248] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.249] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.250] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.260] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.261] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.286] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.287] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.300] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.374] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.421] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.566] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.567] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.568] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.646] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.647] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.660] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.784] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.785] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.786] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.822] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.905] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.923] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0102.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.004] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.034] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.035] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.036] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.048] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.078] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.079] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.103] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.104] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.116] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.149] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.150] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.175] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.176] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.189] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.241] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.242] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.268] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.268] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.269] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.283] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.315] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.316] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.317] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.318] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.319] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.320] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.321] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.322] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.323] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.324] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.325] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.326] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.335] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.336] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.337] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.338] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.339] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.340] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.341] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.342] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.343] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.344] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.345] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.346] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.347] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.348] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.349] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.350] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.351] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.352] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.353] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.354] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.355] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.357] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.358] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.359] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.360] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.361] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.362] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.363] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.364] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.365] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.366] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.367] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.368] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.369] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.370] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.392] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.393] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.394] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.395] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.396] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.397] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.398] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.399] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.400] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.401] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.402] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.403] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.404] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.405] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.406] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.407] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.408] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.409] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.410] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.411] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.412] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.414] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.415] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.416] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.417] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.418] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.419] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.420] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.422] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.423] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.424] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.425] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.426] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.427] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.428] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.429] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.430] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.431] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.432] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.433] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.434] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.435] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.436] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.437] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.438] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.439] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.440] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.441] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.442] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.443] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.443] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.444] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.445] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.446] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.447] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.448] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.449] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.450] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.451] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.452] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.453] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.454] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.455] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.456] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.457] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.458] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.459] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.460] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.461] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.462] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.463] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.464] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.465] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.466] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.467] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.471] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.472] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.473] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.474] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.475] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.476] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.477] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.478] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.479] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.480] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.481] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.482] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.484] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.485] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.486] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.487] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.488] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.489] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.490] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.491] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.492] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.493] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.494] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.495] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.496] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.497] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.498] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.499] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.500] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.501] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.502] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.503] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.504] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.505] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.506] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.507] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.508] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.509] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.510] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.511] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.512] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.513] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.514] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.515] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.516] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.517] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.518] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.519] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.520] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.521] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.522] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.523] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.524] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.525] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.526] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.526] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.526] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.527] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.528] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.529] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.530] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.531] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.532] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.533] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.534] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.535] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.536] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.537] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.538] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.539] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.540] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.541] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.542] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.543] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.544] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.545] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.546] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.547] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.548] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.549] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.550] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.551] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.552] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.552] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.553] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.554] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.555] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.556] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.556] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.556] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.557] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.558] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.559] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.560] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.561] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.576] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.577] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.578] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.579] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.580] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.581] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.582] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.583] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.584] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.585] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.586] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.587] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.588] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.589] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.590] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.591] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.592] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.593] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.594] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.595] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.596] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.597] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.598] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.599] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.599] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.599] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.599] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.599] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.600] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.601] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.602] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.602] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.602] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.602] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.603] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.603] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.603] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.604] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.604] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.604] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.604] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.605] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.606] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.607] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.612] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.613] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.614] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.615] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.616] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.617] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.618] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.619] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.620] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.621] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.622] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.623] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.624] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.625] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.626] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.627] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.628] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.629] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.630] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.631] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.632] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.633] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.634] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.635] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.636] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.637] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.638] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.639] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.644] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.652] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.652] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.652] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.653] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.654] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.654] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.654] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.655] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.656] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.659] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.659] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.659] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.660] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.660] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.660] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.661] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.662] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.663] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.664] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.664] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.664] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.665] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.666] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.667] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.667] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.667] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.667] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.667] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.668] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.669] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.669] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.669] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.670] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.671] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.672] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.673] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.674] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.675] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.676] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.677] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.678] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.679] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.680] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.681] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.681] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.681] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.682] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.683] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.684] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.685] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.686] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.687] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.688] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.689] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.690] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.691] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.692] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.693] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.694] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.695] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.696] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.697] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.698] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.699] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.700] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.701] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.703] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.704] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.705] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.706] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.707] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.708] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.709] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.710] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.711] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.712] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.713] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.714] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.715] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.716] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.717] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.718] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.719] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.720] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.721] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.722] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.723] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.726] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.727] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.728] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.729] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.730] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.731] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.732] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.733] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.734] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.735] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.736] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.737] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.738] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.739] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.740] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.741] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.742] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.743] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.744] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.745] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.746] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.747] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.748] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.749] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.750] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.751] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.752] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.753] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.754] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.755] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.756] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.757] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.758] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.759] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.760] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.761] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.762] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.763] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.764] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.765] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.766] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.767] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.768] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.769] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.770] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.771] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.772] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.773] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.774] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.775] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.788] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.794] CoCreateGuid (in: pguid=0x12e63c | out: pguid=0x12e63c*(Data1=0x4290fa50, Data2=0x319b, Data3=0x45d8, Data4=([0]=0x8d, [1]=0xc4, [2]=0xf3, [3]=0xda, [4]=0xcd, [5]=0x76, [6]=0xc7, [7]=0x5a))) returned 0x0 [0103.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.796] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.829] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.831] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.832] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.833] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.834] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.835] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.836] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.837] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.838] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.839] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.842] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.843] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.845] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.848] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.849] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.850] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.851] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.854] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.855] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.856] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.857] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.858] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.859] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.860] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.861] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.862] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.863] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.864] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.865] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.866] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.867] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.868] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.869] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.870] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.871] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.873] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.875] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.876] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.877] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.880] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.881] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.882] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.883] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.884] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.885] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.886] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.887] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.888] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.889] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.890] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.891] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.892] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.893] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.894] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.895] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.896] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.897] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.898] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.899] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.900] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.902] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.903] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.922] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.924] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.925] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.926] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.927] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.928] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.929] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.930] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.931] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.932] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.933] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.934] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.935] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.936] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.937] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.938] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.939] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.940] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.941] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.942] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.943] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.944] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.945] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.946] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.947] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.948] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.950] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.951] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.954] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.955] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.956] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.957] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.958] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.960] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.961] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.962] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.963] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.964] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.965] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.966] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.969] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.970] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.971] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.972] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.973] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.974] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.975] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.976] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.977] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.978] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.979] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.980] SysStringLen (param_1=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.981] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.988] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x12e55c | out: ppstm=0x12e55c*=0x2aca18) returned 0x0 [0103.991] IUnknown:AddRef (This=0x2aca18) returned 0x2 [0103.992] IStream:RemoteSeek (in: This=0x2aca18, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0103.995] ISequentialStream:RemoteWrite (in: This=0x2aca18, pv=0x32d520*=0x42, cb=0x80c, pcbWritten=0x12e410 | out: pcbWritten=0x12e410*=0x80c) returned 0x0 [0103.995] IUnknown:Release (This=0x2aca18) returned 0x1 [0103.996] IStream:Stat (in: This=0x2aca18, pstatstg=0x12e578, grfStatFlag=0x1 | out: pstatstg=0x12e578) returned 0x0 [0103.996] IStream:RemoteSeek (in: This=0x2aca18, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0103.996] ISequentialStream:RemoteRead (in: This=0x2aca18, pv=0x31b3e8, cb=0x80d, pcbRead=0x12e554 | out: pv=0x31b3e8*=0x42, pcbRead=0x12e554*=0x80c) returned 0x0 [0103.996] IUnknown:Release (This=0x2aca18) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0103.996] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.003] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0104.117] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 Process: id = "8" image_name = "cvtres.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe" page_root = "0x7f1342c0" os_pid = "0xfcc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xfc0" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 \"/OUT:C:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\RES5F5F.tmp\" \"c:\\Users\\EEBsYm5\\AppData\\Local\\Temp\\CSC5F3E.tmp\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 78 os_tid = 0xfd0 Process: id = "9" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x7f134320" os_pid = "0x5bc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "1" os_parent_pid = "0xffffffffffffffff" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 79 os_tid = 0xc64 Thread: id = 80 os_tid = 0xbc4 Thread: id = 81 os_tid = 0xba0 Thread: id = 82 os_tid = 0xb80 Thread: id = 83 os_tid = 0xc0 Thread: id = 84 os_tid = 0x418 Thread: id = 85 os_tid = 0x468 Thread: id = 86 os_tid = 0x470 Thread: id = 87 os_tid = 0x270 Thread: id = 88 os_tid = 0x724 Thread: id = 89 os_tid = 0x700 Thread: id = 90 os_tid = 0x6ec Thread: id = 91 os_tid = 0x708 Thread: id = 92 os_tid = 0x28c Thread: id = 93 os_tid = 0x124 Thread: id = 94 os_tid = 0x7ac Thread: id = 95 os_tid = 0x79c Thread: id = 96 os_tid = 0x7a8 Thread: id = 97 os_tid = 0x718 Thread: id = 98 os_tid = 0x6e0 Thread: id = 99 os_tid = 0x6dc Thread: id = 100 os_tid = 0x6d8 Thread: id = 101 os_tid = 0x6d4 Thread: id = 102 os_tid = 0x6d0 Thread: id = 103 os_tid = 0x6bc Thread: id = 104 os_tid = 0x6b4 Thread: id = 105 os_tid = 0x6ac Thread: id = 106 os_tid = 0x67c Thread: id = 107 os_tid = 0x610 Thread: id = 108 os_tid = 0x60c Thread: id = 109 os_tid = 0x600 Thread: id = 110 os_tid = 0x5fc Thread: id = 111 os_tid = 0x5f0 Thread: id = 112 os_tid = 0x5cc Thread: id = 113 os_tid = 0x5c0 Thread: id = 114 os_tid = 0xfd8 [0119.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x284) returned 0x2fc2ae0 [0119.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x2ffddc0 [0119.823] RtlInitAnsiString (in: DestinationString=0x223fb1c, SourceString="NTDLL" | out: DestinationString="NTDLL") [0119.823] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb14, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0 [0119.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3096db0 [0119.824] RtlFreeAnsiString (AnsiString="N") [0119.826] RtlInitUnicodeString (in: DestinationString=0x223fb2c, SourceString="NTDLL" | out: DestinationString="NTDLL") [0119.826] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x223fb38 | out: BaseAddress=0x223fb38*=0x77100000) returned 0x0 [0119.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096db0) returned 1 [0119.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffddc0) returned 1 [0119.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x2ffddc0 [0119.828] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="NTDLL" | out: DestinationString="NTDLL") [0119.828] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0 [0119.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3096e40 [0119.828] RtlFreeAnsiString (AnsiString="N") [0119.828] RtlInitUnicodeString (in: DestinationString=0x223fb24, SourceString="NTDLL" | out: DestinationString="NTDLL") [0119.828] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x223fb30 | out: BaseAddress=0x223fb30*=0x77100000) returned 0x0 [0119.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096e40) returned 1 [0119.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffddc0) returned 1 [0119.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x2ffddc0 [0119.829] RtlInitAnsiString (in: DestinationString=0x223fb0c, SourceString="NTDLL" | out: DestinationString="NTDLL") [0119.829] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb04, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0 [0119.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3096db0 [0119.829] RtlFreeAnsiString (AnsiString="N") [0119.829] RtlInitUnicodeString (in: DestinationString=0x223fb1c, SourceString="NTDLL" | out: DestinationString="NTDLL") [0119.829] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x223fb28 | out: BaseAddress=0x223fb28*=0x77100000) returned 0x0 [0119.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096db0) returned 1 [0119.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffddc0) returned 1 [0119.836] RtlInitUnicodeString (in: DestinationString=0x223fb78, SourceString="netapi32.dll" | out: DestinationString="netapi32.dll") [0119.836] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="netapi32.dll", BaseAddress=0x223fb74 | out: BaseAddress=0x223fb74*=0x73570000) returned 0x0 [0119.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7) returned 0x2ffddc0 [0119.961] RtlInitAnsiString (in: DestinationString=0x223fb1c, SourceString="SRVCLI" | out: DestinationString="SRVCLI") [0119.961] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb14, SourceString="SRVCLI", AllocateDestinationString=1 | out: DestinationString="SRVCLI") returned 0x0 [0119.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3096de0 [0119.961] RtlFreeAnsiString (AnsiString="S") [0119.961] RtlInitUnicodeString (in: DestinationString=0x223fb2c, SourceString="SRVCLI" | out: DestinationString="SRVCLI") [0119.961] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="SRVCLI", BaseAddress=0x223fb38 | out: BaseAddress=0x223fb38*=0x750f0000) returned 0x0 [0119.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096de0) returned 1 [0119.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffddc0) returned 1 [0119.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9) returned 0x3096de0 [0119.962] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="NETUTILS" | out: DestinationString="NETUTILS") [0119.962] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="NETUTILS", AllocateDestinationString=1 | out: DestinationString="NETUTILS") returned 0x0 [0119.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e08920 [0119.962] RtlFreeAnsiString (AnsiString="N") [0119.962] RtlInitUnicodeString (in: DestinationString=0x223fb24, SourceString="NETUTILS" | out: DestinationString="NETUTILS") [0119.962] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NETUTILS", BaseAddress=0x223fb30 | out: BaseAddress=0x223fb30*=0x73560000) returned 0x0 [0119.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08920) returned 1 [0119.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096de0) returned 1 [0119.969] FindResourceA (hModule=0x21c0000, lpName=0x7a69, lpType=0x539) returned 0x21cf048 [0119.969] LoadResource (hModule=0x21c0000, hResInfo=0x21cf048) returned 0x21cf058 [0119.969] LockResource (hResData=0x21cf058) returned 0x21cf058 [0119.969] SizeofResource (hModule=0x21c0000, hResInfo=0x21cf048) returned 0x17a4 [0119.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x17a4) returned 0x3e773d8 [0119.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7) returned 0x2ffddc0 [0119.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f94d8 [0119.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2fa978 [0119.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fa978) returned 1 [0119.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f94d8) returned 1 [0119.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08920 [0119.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffdef0 [0119.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e088e0 [0119.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffde40 [0119.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08820 [0119.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffde40, Size=0x8) returned 0x2ffdec0 [0119.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08980 [0119.970] strtol (in: _Str="0,\"spsz\":15360,\"thr\":1500,\"idsz\":6,\"encname\":true,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":[\"jpg\",\"jpeg\",\"png\",\"bmp\",\"doc\",\"docx\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}r", _EndPtr=0x223fb18, _Radix=0 | out: _EndPtr=0x223fb18*=",\"spsz\":15360,\"thr\":1500,\"idsz\":6,\"encname\":true,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":[\"jpg\",\"jpeg\",\"png\",\"bmp\",\"doc\",\"docx\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}r") returned 0 [0119.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdec0, Size=0xc) returned 0x3096d50 [0119.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e09620 [0119.970] strtol (in: _Str="15360,\"thr\":1500,\"idsz\":6,\"encname\":true,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":[\"jpg\",\"jpeg\",\"png\",\"bmp\",\"doc\",\"docx\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}r", _EndPtr=0x223fb18, _Radix=0 | out: _EndPtr=0x223fb18*=",\"thr\":1500,\"idsz\":6,\"encname\":true,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":[\"jpg\",\"jpeg\",\"png\",\"bmp\",\"doc\",\"docx\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}r") returned 15360 [0119.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3096d50, Size=0x10) returned 0x2fda050 [0119.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e09240 [0119.971] strtol (in: _Str="1500,\"idsz\":6,\"encname\":true,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":[\"jpg\",\"jpeg\",\"png\",\"bmp\",\"doc\",\"docx\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}r", _EndPtr=0x223fb18, _Radix=0 | out: _EndPtr=0x223fb18*=",\"idsz\":6,\"encname\":true,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":[\"jpg\",\"jpeg\",\"png\",\"bmp\",\"doc\",\"docx\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}r") returned 1500 [0119.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fda050, Size=0x14) returned 0x3e09260 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e09700 [0119.971] strtol (in: _Str="6,\"encname\":true,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":[\"jpg\",\"jpeg\",\"png\",\"bmp\",\"doc\",\"docx\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}r", _EndPtr=0x223fb18, _Radix=0 | out: _EndPtr=0x223fb18*=",\"encname\":true,\"onion1\":\"pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\",\"onion2\":\"rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\",\"lfile\":\"{id}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQpJZiBmb3Igc29tZSByZWFzb24geW91IHJlYWQgdGhpcyB0ZXh0IGJlZm9yZSB0aGUgZW5jcnlwdGlvbiBlbmRlZCwNCnRoaXMgY2FuIGJlIHVuZGVyc3Rvb2QgYnkgdGhlIGZhY3QgdGhhdCB0aGUgY29tcHV0ZXIgc2xvd3MgZG93biwNCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQuDQpSZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeS4NCg0KLS0NCk91ciAgZW5jcnlwdGlvbiBhbGdvcml0aG1zIGFyZSB2ZXJ5IHN0cm9uZyBhbmQgeW91ciBmaWxlcyBhcmUgdmVyeSB3ZWxsIHByb3RlY3RlZCwNCnRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KDQpEbyBub3QgdHJ5IHRvIHJlY292ZXIgeW91ciBmaWxlcyB3aXRob3V0IGEgZGVjcnlwdGVyIHByb2dyYW0sIHlvdSBtYXkgZGFtYWdlIHRoZW0gYW5kIHRoZW4gdGhleSB3aWxsIGJlIGltcG9zc2libGUgdG8gcmVjb3Zlci4NCg0KRm9yIHVzIHRoaXMgaXMganVzdCBidXNpbmVzcyBhbmQgdG8gcHJvdmUgdG8geW91IG91ciBzZXJpb3VzbmVzcywgd2Ugd2lsbCBkZWNyeXB0IHlvdSBvbmUgZmlsZSBmb3IgZnJlZS4NCkp1c3Qgb3BlbiBvdXIgd2Vic2l0ZSwgdXBsb2FkIHRoZSBlbmNyeXB0ZWQgZmlsZSBhbmQgZ2V0IHRoZSBkZWNyeXB0ZWQgZmlsZSBmb3IgZnJlZS4NCg0KQWRkaXRpb25hbGx5LCB5b3UgbXVzdCBrbm93IHRoYXQgeW91ciBzZW5zaXRpdmUgZGF0YSBoYXMgYmVlbiBzdG9sZW4gYnkgb3VyIGFuYWx5c3QgZXhwZXJ0cyBhbmQgaWYgeW91IGNob29zZSB0byBubyBjb29wZXJhdGUgd2l0aCB1cywgeW91IGFyZSBleHBvc2luZyB5b3Vyc2VsZg0KdG8gaHVnZSBwZW5hbHRpZXMgd2l0aCBsYXdzdWl0cyBhbmQgZ292ZXJubWVudCBpZiB3ZSBib3RoIGRvbid0IGZpbmQgYW4gYWdyZWVtZW50LiBXZSBoYXZlIHNlZW4gaXQgYmVmb3JlOyBjYXNlcyB3aXRoIG11bHRpIG1pbGxpb24gY29zdHMgaW4gZmluZXMgYW5kIGxhd3N1aXRzLA0Kbm90IHRvIG1lbnRpb24gdGhlIGNvbXBhbnkgcmVwdXRhdGlvbiBhbmQgbG9zaW5nIGNsaWVudHMgdHJ1c3QgYW5kIHRoZSBtZWRpYXMgY2FsbGluZyBub24tc3RvcCBmb3IgYW5zd2Vycy4gQ29tZSBjaGF0IHdpdGggdXMgYW5kIHlvdSBjb3VsZCBiZSBzdXJwcmlzZWQgb24gaG93DQpmYXN0IHdlIGJvdGggY2FuIGZpbmQgYW4gYWdyZWVtZW50IHdpdGhvdXQgZ2V0dGluZyB0aGlzIGluY2lkZW50IHB1YmxpYy4NCg0KLS0NCg0KU3RlcHMgdG8gZ2V0IGFjY2VzcyBvbiBvdXIgd2Vic2l0ZToNCg0KMS5Eb3dubG9hZCBhbmQgaW5zdGFsbCB0b3ItYnJvd3NlcjogaHR0cHM6Ly90b3Jwcm9qZWN0Lm9yZy8NCg0KMi5PcGVuIG91ciB3ZWJzaXRlOiB7b25pb24xfQ0KSWYgdGhlIHdlYnNpdGUgaXMgbm90IGF2YWlsYWJsZSwgb3BlbiBhbm90aGVyIG9uZToge29uaW9uMn0NCg0KMy5QdXQgeW91ciBwZXJzb25hbCBjb2RlIGluIHRoZSBpbnB1dCBmb3JtOg0KDQp7Y29kZX0=\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",\"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",\"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",\"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\",\"*appdata*microsoft\",\"*appdata*packages\",\"*microsoft\\\\provisioning\",\"*dvd maker\",\"*Internet Explorer\",\"*Mozilla\",\"*Mozilla*\",\"*Old Firefox data\",\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\"*\\\\program file*\\\\windowspowershell\",\"*\\\\program file*\\\\cuass*\",\"*\\\\program file*\\\\microsoft games\",\"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\",\"*media player\",\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\"*\\\\Program File*\\\\Cisco\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\",\"usrclass.dat*\",\"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\",\"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"],\"extfree\":[\"jpg\",\"jpeg\",\"png\",\"bmp\",\"doc\",\"docx\"]},\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc*\"],\"svcwait\":0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}r") returned 6 [0119.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e09260, Size=0x18) returned 0x3e09180 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e09260 [0119.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e09180, Size=0x1c) returned 0x3dc9d60 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e09180 [0119.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc9d60, Size=0x20) returned 0x3dca5a8 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e095e0 [0119.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dca5a8, Size=0x24) returned 0x3db32a0 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08bc0 [0119.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db32a0, Size=0x28) returned 0x3db3cf0 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e089a0 [0119.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3cf0, Size=0x2c) returned 0x3e15fd8 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08b20 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffdec0 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08b40 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffde40 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08f80 [0119.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffde40, Size=0x8) returned 0x2ffdf00 [0119.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08ba0 [0119.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0xc) returned 0x2fda050 [0119.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08f20 [0119.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fda050, Size=0x10) returned 0x2fd9fa8 [0119.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08ee0 [0119.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9fa8, Size=0x14) returned 0x30b55f8 [0119.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5ad8 [0119.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30b55f8, Size=0x18) returned 0x30b5818 [0119.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b55f8 [0119.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30b5818, Size=0x1c) returned 0x3dca5a8 [0119.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5818 [0119.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dca5a8, Size=0x20) returned 0x3dc9d60 [0119.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b56f8 [0119.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc9d60, Size=0x24) returned 0x3db3cf0 [0119.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b57f8 [0119.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3cf0, Size=0x28) returned 0x3db32a0 [0119.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5558 [0119.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db32a0, Size=0x2c) returned 0x3e16358 [0119.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b56b8 [0119.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e16358, Size=0x30) returned 0x3e15f68 [0119.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b58b8 [0119.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15f68, Size=0x34) returned 0x3dcf210 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5938 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf210, Size=0x38) returned 0x3dd0090 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b55b8 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd0090, Size=0x3c) returned 0x3dd4590 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5a38 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd4590, Size=0x40) returned 0x3dd38e8 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5638 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd38e8, Size=0x44) returned 0x3de6928 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5a98 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6928, Size=0x48) returned 0x3de68d8 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b59f8 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de68d8, Size=0x4c) returned 0x3dba2c8 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5a18 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dba2c8, Size=0x50) returned 0x3db9f00 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b59d8 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db9f00, Size=0x54) returned 0x2fe1328 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5998 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1328, Size=0x58) returned 0x2fe1ce8 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5978 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1ce8, Size=0x5c) returned 0x3edf408 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b58d8 [0119.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3edf408, Size=0x60) returned 0x3edf5a8 [0119.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5b18 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3edf5a8, Size=0x64) returned 0x3e69ad8 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5598 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69ad8, Size=0x68) returned 0x3e69b48 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b54b8 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69b48, Size=0x6c) returned 0x3e3b9f0 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5618 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e3b9f0, Size=0x70) returned 0x3e3bae0 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5358 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e3bae0, Size=0x74) returned 0x3da4af0 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5498 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da4af0, Size=0x78) returned 0x3da5f70 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b55d8 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da5f70, Size=0x7c) returned 0x3e1ced8 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b58f8 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1ced8, Size=0x80) returned 0x3e1cd40 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5458 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1cd40, Size=0x84) returned 0x3df2d08 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5958 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df2d08, Size=0x88) returned 0x3df1cb8 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b59b8 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df1cb8, Size=0x8c) returned 0x32cf48 [0119.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5838 [0119.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32cf48, Size=0x90) returned 0x32d370 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5a78 [0119.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32d370, Size=0x94) returned 0x3df59a0 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5ab8 [0119.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df59a0, Size=0x98) returned 0x3df54a0 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5a58 [0119.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df54a0, Size=0x9c) returned 0x30533d8 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b54d8 [0119.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30533d8, Size=0xa0) returned 0x30537c8 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5758 [0119.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdec0, Size=0x8) returned 0x2ffdf00 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x30b5478 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffdec0 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53c38 [0119.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdec0, Size=0x8) returned 0x2ffde40 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53598 [0119.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffde40, Size=0xc) returned 0x2fd9fa8 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53db8 [0119.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9fa8, Size=0x10) returned 0x2fda050 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53e98 [0119.975] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fda050, Size=0x14) returned 0x3d54198 [0119.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54298 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d54198, Size=0x18) returned 0x3d54438 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54198 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d54438, Size=0x1c) returned 0x3dc9d60 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54438 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc9d60, Size=0x20) returned 0x3dca5a8 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53758 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dca5a8, Size=0x24) returned 0x3db32a0 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53798 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db32a0, Size=0x28) returned 0x3db3cf0 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53b38 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3cf0, Size=0x2c) returned 0x3e15f68 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53b18 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15f68, Size=0x30) returned 0x3e16358 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53b58 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e16358, Size=0x34) returned 0x3dd0090 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53618 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd0090, Size=0x38) returned 0x3dcf210 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54118 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf210, Size=0x3c) returned 0x3dd38e8 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53e18 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd38e8, Size=0x40) returned 0x3dd4590 [0119.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d542b8 [0119.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0xc) returned 0x2fda050 [0119.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53c78 [0119.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffdf00 [0119.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53578 [0119.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0x8) returned 0x2ffde40 [0119.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d541b8 [0119.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffde40, Size=0xc) returned 0x2fd9fa8 [0119.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d535b8 [0119.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9fa8, Size=0x10) returned 0x2fd9eb8 [0119.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53c98 [0119.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9eb8, Size=0x14) returned 0x3d54458 [0119.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d542f8 [0119.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d54458, Size=0x18) returned 0x3d537d8 [0119.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54458 [0119.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d537d8, Size=0x1c) returned 0x3dca5a8 [0119.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d537d8 [0119.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dca5a8, Size=0x20) returned 0x3dc9d60 [0119.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54158 [0119.978] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc9d60, Size=0x24) returned 0x3db3cf0 [0119.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d542d8 [0119.978] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3cf0, Size=0x28) returned 0x3db32a0 [0119.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53e58 [0119.978] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db32a0, Size=0x2c) returned 0x3e16358 [0119.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54378 [0119.978] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e16358, Size=0x30) returned 0x3e15f68 [0119.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53e78 [0119.978] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15f68, Size=0x34) returned 0x3dcf210 [0119.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54078 [0119.978] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf210, Size=0x38) returned 0x3dd0090 [0119.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54218 [0119.978] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd0090, Size=0x3c) returned 0x3dd38e8 [0119.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53b98 [0119.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd38e8, Size=0x40) returned 0x3dd4500 [0119.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53bb8 [0119.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd4500, Size=0x44) returned 0x3de68d8 [0119.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54278 [0119.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de68d8, Size=0x48) returned 0x3de6928 [0119.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d536d8 [0119.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6928, Size=0x4c) returned 0x3db9f00 [0119.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53d58 [0119.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db9f00, Size=0x50) returned 0x3dba2c8 [0119.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d53778 [0119.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dba2c8, Size=0x54) returned 0x2fe1ce8 [0119.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54038 [0119.980] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1ce8, Size=0x58) returned 0x2fe1328 [0119.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d54238 [0119.980] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1328, Size=0x5c) returned 0x3edf5a8 [0119.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e5fb18 [0119.980] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3edf5a8, Size=0x60) returned 0x3edf408 [0119.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e5fa98 [0119.980] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3edf408, Size=0x64) returned 0x3e69b48 [0119.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e5fab8 [0119.980] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69b48, Size=0x68) returned 0x3e69ad8 [0119.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e5fdd8 [0119.980] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69ad8, Size=0x6c) returned 0x3e3bae0 [0119.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e5fcb8 [0119.980] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e3bae0, Size=0x70) returned 0x3e3b9f0 [0119.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e5fd78 [0119.981] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e3b9f0, Size=0x74) returned 0x3da5f70 [0119.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e5fd38 [0119.981] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da5f70, Size=0x78) returned 0x3da4af0 [0119.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e60318 [0119.981] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da4af0, Size=0x7c) returned 0x3e1cd40 [0119.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e60918 [0119.981] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1cd40, Size=0x80) returned 0x3e1ced8 [0119.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e60858 [0119.981] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1ced8, Size=0x84) returned 0x3df1cb8 [0119.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e60758 [0119.981] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df1cb8, Size=0x88) returned 0x3df2d08 [0119.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e608f8 [0119.981] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df2d08, Size=0x8c) returned 0x32d370 [0119.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e5fcd8 [0119.981] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32d370, Size=0x90) returned 0x32cf48 [0119.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e60198 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32cf48, Size=0x94) returned 0x3df54a0 [0119.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e602f8 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df54a0, Size=0x98) returned 0x3df59a0 [0119.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8668 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df59a0, Size=0x9c) returned 0x30533d8 [0119.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8b08 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30533d8, Size=0xa0) returned 0x3053db0 [0119.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8c08 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053db0, Size=0xa4) returned 0x35b878 [0119.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd85c8 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35b878, Size=0xa8) returned 0x35aa08 [0119.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8aa8 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35aa08, Size=0xac) returned 0x2ff6968 [0119.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8a08 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff6968, Size=0xb0) returned 0x2ff62f0 [0119.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8ac8 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff62f0, Size=0xb4) returned 0x3e65c58 [0119.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8968 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e65c58, Size=0xb8) returned 0x3e65ad8 [0119.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd89a8 [0119.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e65ad8, Size=0xbc) returned 0x3e39310 [0119.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8628 [0119.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e39310, Size=0xc0) returned 0x3e39630 [0119.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8a68 [0119.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e39630, Size=0xc4) returned 0x3036ca0 [0119.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd89c8 [0119.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3036ca0, Size=0xc8) returned 0x3036d70 [0119.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8648 [0119.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3036d70, Size=0xcc) returned 0x3012bb0 [0119.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2fd8a88 [0119.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3012bb0, Size=0xd0) returned 0x3012a00 [0119.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d501e0 [0119.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fda050, Size=0x10) returned 0x2fd9eb8 [0119.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50280 [0119.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffde40 [0119.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50260 [0119.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffde40, Size=0x8) returned 0x2ffdf00 [0119.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50360 [0119.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0xc) returned 0x2fda050 [0119.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50340 [0119.984] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fda050, Size=0x10) returned 0x2fd9fa8 [0119.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50320 [0119.984] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9fa8, Size=0x14) returned 0x3d502a0 [0119.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50240 [0119.984] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d502a0, Size=0x18) returned 0x3d50380 [0119.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d502a0 [0119.984] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15fd8, Size=0x30) returned 0x3e15f68 [0119.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50200 [0119.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffdf00 [0119.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d500a0 [0119.984] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0x8) returned 0x2ffde40 [0119.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3d50400 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffdf00 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306ab40 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0x8) returned 0x2ffdec0 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306b600 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdec0, Size=0xc) returned 0x2fd9fa8 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306b5e0 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9fa8, Size=0x10) returned 0x2fda050 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306b5c0 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fda050, Size=0x14) returned 0x306b5a0 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306b580 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x306b5a0, Size=0x18) returned 0x306b560 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306b5a0 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x306b560, Size=0x1c) returned 0x3dc9d60 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306b560 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc9d60, Size=0x20) returned 0x3dca5a8 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3069e10 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dca5a8, Size=0x24) returned 0x3db32a0 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3069f70 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db32a0, Size=0x28) returned 0x3db3cf0 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306a170 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3cf0, Size=0x2c) returned 0x3e15fd8 [0119.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306a130 [0119.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15fd8, Size=0x30) returned 0x3e16358 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306a0d0 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e16358, Size=0x34) returned 0x3dd0090 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3069f10 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd0090, Size=0x38) returned 0x3dcf210 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb560 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf210, Size=0x3c) returned 0x3dd4500 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb940 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd4500, Size=0x40) returned 0x3dd38e8 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb740 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd38e8, Size=0x44) returned 0x3de6928 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb8a0 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6928, Size=0x48) returned 0x3de68d8 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x2eb6a0 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de68d8, Size=0x4c) returned 0x3dba2c8 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3dbab88 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dba2c8, Size=0x50) returned 0x3db9f00 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3dbac68 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db9f00, Size=0x54) returned 0x2fe1328 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3dbac28 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1328, Size=0x58) returned 0x2fe1ce8 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x311ca0 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1ce8, Size=0x5c) returned 0x3edf408 [0119.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3121e0 [0119.986] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3edf408, Size=0x60) returned 0x3edf5a8 [0119.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x370b90 [0119.987] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3edf5a8, Size=0x64) returned 0x3e69ad8 [0119.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x301be28 [0119.987] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69ad8, Size=0x68) returned 0x3e69b48 [0119.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x328608 [0119.987] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69b48, Size=0x6c) returned 0x3e3b9f0 [0119.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed198 [0119.987] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e3b9f0, Size=0x70) returned 0x3e3bae0 [0119.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed1b8 [0119.987] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e3bae0, Size=0x74) returned 0x3da4af0 [0119.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed1d8 [0119.987] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da4af0, Size=0x78) returned 0x3da5f70 [0119.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed1f8 [0119.987] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da5f70, Size=0x7c) returned 0x3e1ced8 [0119.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed218 [0119.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1ced8, Size=0x80) returned 0x3e1cd40 [0119.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed238 [0119.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1cd40, Size=0x84) returned 0x3df2d08 [0119.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed258 [0119.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df2d08, Size=0x88) returned 0x3df1cb8 [0119.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed278 [0119.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df1cb8, Size=0x8c) returned 0x32cf48 [0119.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed298 [0119.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32cf48, Size=0x90) returned 0x32d370 [0119.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed2b8 [0119.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32d370, Size=0x94) returned 0x3df59a0 [0119.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed2d8 [0119.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df59a0, Size=0x98) returned 0x3df54a0 [0119.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed2f8 [0119.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df54a0, Size=0x9c) returned 0x3053db0 [0119.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed318 [0119.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053db0, Size=0xa0) returned 0x30533d8 [0119.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed338 [0119.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30533d8, Size=0xa4) returned 0x35aa08 [0119.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed358 [0119.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35aa08, Size=0xa8) returned 0x35b878 [0119.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed378 [0119.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35b878, Size=0xac) returned 0x2ff62f0 [0119.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed398 [0119.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff62f0, Size=0xb0) returned 0x2ff6968 [0119.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed3b8 [0119.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff6968, Size=0xb4) returned 0x3e65ad8 [0119.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed3d8 [0119.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e65ad8, Size=0xb8) returned 0x3e65c58 [0119.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed3f8 [0119.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e65c58, Size=0xbc) returned 0x3e39630 [0119.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed418 [0119.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e39630, Size=0xc0) returned 0x3e39310 [0119.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed438 [0120.053] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e39310, Size=0xc4) returned 0x3036d70 [0120.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed458 [0120.053] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3036d70, Size=0xc8) returned 0x3036ca0 [0120.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed478 [0120.053] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3036ca0, Size=0xcc) returned 0x3012bb0 [0120.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed498 [0120.053] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3012bb0, Size=0xd0) returned 0x3011d58 [0120.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed4b8 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3011d58, Size=0xd4) returned 0x2c8aa8 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed4d8 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c8aa8, Size=0xd8) returned 0x2c8648 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed4f8 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c8648, Size=0xdc) returned 0x3dc4190 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed518 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc4190, Size=0xe0) returned 0x3dc40a8 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed538 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc40a8, Size=0xe4) returned 0x3ddf4c8 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed558 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ddf4c8, Size=0xe8) returned 0x3dded48 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed578 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dded48, Size=0xec) returned 0x327410 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed598 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x327410, Size=0xf0) returned 0x3277f0 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed5b8 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3277f0, Size=0xf4) returned 0x3de78b8 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed5d8 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de78b8, Size=0xf8) returned 0x3de76b8 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed5f8 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de76b8, Size=0xfc) returned 0x2f94d8 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed618 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2f94d8, Size=0x100) returned 0x2fa978 [0120.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed638 [0120.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fa978, Size=0x104) returned 0x3deb9f0 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed658 [0120.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3deb9f0, Size=0x108) returned 0x3debe50 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed678 [0120.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffde40, Size=0xc) returned 0x2fda050 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed698 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffde40 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed6b8 [0120.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffde40, Size=0x8) returned 0x2ffdec0 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed6d8 [0120.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdec0, Size=0xc) returned 0x2fd9fa8 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed6f8 [0120.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9fa8, Size=0x10) returned 0x2fd9f78 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed718 [0120.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9f78, Size=0x14) returned 0x3eed738 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed758 [0120.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eed738, Size=0x18) returned 0x3eed778 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed738 [0120.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eed778, Size=0x1c) returned 0x3dca5a8 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed778 [0120.055] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dca5a8, Size=0x20) returned 0x3dc9d60 [0120.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed798 [0120.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dc9d60, Size=0x24) returned 0x3db3cf0 [0120.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed7b8 [0120.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db3cf0, Size=0x28) returned 0x3db32a0 [0120.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed7d8 [0120.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db32a0, Size=0x2c) returned 0x3e16358 [0120.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed7f8 [0120.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e16358, Size=0x30) returned 0x3e15fd8 [0120.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed818 [0120.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15fd8, Size=0x34) returned 0x3dcf210 [0120.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed838 [0120.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcf210, Size=0x38) returned 0x3dd0090 [0120.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed858 [0120.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd0090, Size=0x3c) returned 0x3dd38e8 [0120.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed878 [0120.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd38e8, Size=0x40) returned 0x3dd4500 [0120.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed898 [0120.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd4500, Size=0x44) returned 0x3de68d8 [0120.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed8b8 [0120.056] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de68d8, Size=0x48) returned 0x3de6928 [0120.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed8d8 [0120.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3de6928, Size=0x4c) returned 0x3db9f00 [0120.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed8f8 [0120.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3db9f00, Size=0x50) returned 0x3dba2c8 [0120.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed918 [0120.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dba2c8, Size=0x54) returned 0x2fe1ce8 [0120.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed938 [0120.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1ce8, Size=0x58) returned 0x2fe1328 [0120.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed958 [0120.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe1328, Size=0x5c) returned 0x3edf5a8 [0120.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed978 [0120.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3edf5a8, Size=0x60) returned 0x3edf408 [0120.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed998 [0120.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3edf408, Size=0x64) returned 0x3e69b48 [0120.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed9b8 [0120.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69b48, Size=0x68) returned 0x3e69ad8 [0120.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed9d8 [0120.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e69ad8, Size=0x6c) returned 0x3e3bae0 [0120.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eed9f8 [0120.057] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e3bae0, Size=0x70) returned 0x3e3b9f0 [0120.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eeda18 [0120.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e3b9f0, Size=0x74) returned 0x3da5f70 [0120.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eeda38 [0120.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da5f70, Size=0x78) returned 0x3da4af0 [0120.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eeda58 [0120.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3da4af0, Size=0x7c) returned 0x3e1cd40 [0120.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eeda78 [0120.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1cd40, Size=0x80) returned 0x3e1ced8 [0120.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eeda98 [0120.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1ced8, Size=0x84) returned 0x3df1cb8 [0120.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedab8 [0120.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df1cb8, Size=0x88) returned 0x3df2d08 [0120.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedad8 [0120.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df2d08, Size=0x8c) returned 0x32d370 [0120.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedaf8 [0120.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32d370, Size=0x90) returned 0x32cf48 [0120.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedb18 [0120.058] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fda050, Size=0x10) returned 0x2fd9f78 [0120.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedb38 [0120.059] strtol (in: _Str="0,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}r", _EndPtr=0x223fafc, _Radix=0 | out: _EndPtr=0x223fafc*=",\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]},\"net\":{\"use\":true,\"ignore\":{\"use\":true,\"disk\":true,\"share\":[\"ipc$\",\"admin$\"]}},\"unlocker\":{\"use\":true,\"ignore\":{\"use\":true,\"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\",\"*\\\\Program File*\\\\Fortinet\",\"*\\\\Program File*\\\\Cisco\"],\"prc\":[\"psexec.exe\",\"system\",\"forti*.exe\",\"fmon.exe\",\"fcaptmon.exe\",\"FCHelper64.exe\"]}}}r") returned 0 [0120.059] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9f78, Size=0x14) returned 0x3eedb58 [0120.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedb78 [0120.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffdec0 [0120.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedb98 [0120.059] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdec0, Size=0x8) returned 0x2ffde40 [0120.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedbb8 [0120.059] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffde40, Size=0xc) returned 0x2fd9f78 [0120.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedbd8 [0120.059] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9f78, Size=0x10) returned 0x2fda050 [0120.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedbf8 [0120.059] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fda050, Size=0x14) returned 0x3eedc18 [0120.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedc38 [0120.059] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e15f68, Size=0x34) returned 0x3dd0090 [0120.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedc58 [0120.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffde40 [0120.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedc78 [0120.059] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffde40, Size=0x8) returned 0x2ffdec0 [0120.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffde40 [0120.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffde40, Size=0x8) returned 0x2ffdf00 [0120.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0xc) returned 0x2fda050 [0120.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0x8) returned 0x2ffde40 [0120.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd0090, Size=0x38) returned 0x3dcf210 [0120.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffdf00 [0120.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0x8) returned 0x2ffdf40 [0120.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x2ffdf00 [0120.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0x8) returned 0x2ffdf20 [0120.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf00, Size=0x8) returned 0x2ffdee0 [0120.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdee0, Size=0xc) returned 0x2fd9f78 [0120.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9f78, Size=0x10) returned 0x2fd9fa8 [0120.061] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9fa8, Size=0x14) returned 0x3eede78 [0120.061] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf20, Size=0xc) returned 0x2fd9fa8 [0120.061] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdf20, Size=0x8) returned 0x2ffdee0 [0120.061] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ffdee0, Size=0xc) returned 0x2fd9f78 [0120.061] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fd9f78, Size=0x10) returned 0x2fda0b0 [0120.061] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fda0b0, Size=0x14) returned 0x3eedf58 [0120.065] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x3db32a0, Length=0x20) returned 0x340ccddd [0120.066] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ntuser.dat*" | out: DestinationString="ntuser.dat*") [0120.066] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ntuser.dat*", AllocateDestinationString=1 | out: DestinationString="ntuser.dat*") returned 0x0 [0120.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eedfb8 [0120.066] RtlFreeAnsiString (AnsiString="n") [0120.066] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="iconcache.db" | out: DestinationString="iconcache.db") [0120.066] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="iconcache.db", AllocateDestinationString=1 | out: DestinationString="iconcache.db") returned 0x0 [0120.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca5a8 [0120.066] RtlFreeAnsiString (AnsiString="i") [0120.066] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="gdipfont*.dat" | out: DestinationString="gdipfont*.dat") [0120.067] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="gdipfont*.dat", AllocateDestinationString=1 | out: DestinationString="gdipfont*.dat") returned 0x0 [0120.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9dd8 [0120.067] RtlFreeAnsiString (AnsiString="g") [0120.067] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ntuser.ini" | out: DestinationString="ntuser.ini") [0120.067] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ntuser.ini", AllocateDestinationString=1 | out: DestinationString="ntuser.ini") returned 0x0 [0120.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eedfd8 [0120.067] RtlFreeAnsiString (AnsiString="n") [0120.067] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="usrclass.dat" | out: DestinationString="usrclass.dat") [0120.067] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="usrclass.dat", AllocateDestinationString=1 | out: DestinationString="usrclass.dat") returned 0x0 [0120.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca288 [0120.067] RtlFreeAnsiString (AnsiString="u") [0120.067] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="usrclass.dat*" | out: DestinationString="usrclass.dat*") [0120.067] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="usrclass.dat*", AllocateDestinationString=1 | out: DestinationString="usrclass.dat*") returned 0x0 [0120.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dca2d8 [0120.067] RtlFreeAnsiString (AnsiString="u") [0120.067] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="boot.ini" | out: DestinationString="boot.ini") [0120.067] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="boot.ini", AllocateDestinationString=1 | out: DestinationString="boot.ini") returned 0x0 [0120.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eedff8 [0120.068] RtlFreeAnsiString (AnsiString="b") [0120.068] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="bootmgr" | out: DestinationString="bootmgr") [0120.068] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="bootmgr", AllocateDestinationString=1 | out: DestinationString="bootmgr") returned 0x0 [0120.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x2fd9f78 [0120.068] RtlFreeAnsiString (AnsiString="b") [0120.068] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="bootnxt" | out: DestinationString="bootnxt") [0120.068] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="bootnxt", AllocateDestinationString=1 | out: DestinationString="bootnxt") returned 0x0 [0120.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x2fda008 [0120.068] RtlFreeAnsiString (AnsiString="b") [0120.068] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="desktop.ini" | out: DestinationString="desktop.ini") [0120.068] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="desktop.ini", AllocateDestinationString=1 | out: DestinationString="desktop.ini") returned 0x0 [0120.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eee018 [0120.068] RtlFreeAnsiString (AnsiString="d") [0120.068] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ntuser.dat" | out: DestinationString="ntuser.dat") [0120.068] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ntuser.dat", AllocateDestinationString=1 | out: DestinationString="ntuser.dat") returned 0x0 [0120.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eee038 [0120.068] RtlFreeAnsiString (AnsiString="n") [0120.068] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="autorun.inf" | out: DestinationString="autorun.inf") [0120.069] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="autorun.inf", AllocateDestinationString=1 | out: DestinationString="autorun.inf") returned 0x0 [0120.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eee058 [0120.069] RtlFreeAnsiString (AnsiString="a") [0120.069] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ntldr" | out: DestinationString="ntldr") [0120.069] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ntldr", AllocateDestinationString=1 | out: DestinationString="ntldr") returned 0x0 [0120.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x2fd9d68 [0120.069] RtlFreeAnsiString (AnsiString="n") [0120.069] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="thumbs.db" | out: DestinationString="thumbs.db") [0120.069] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="thumbs.db", AllocateDestinationString=1 | out: DestinationString="thumbs.db") returned 0x0 [0120.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eee078 [0120.069] RtlFreeAnsiString (AnsiString="t") [0120.069] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="bootsect.bak" | out: DestinationString="bootsect.bak") [0120.069] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="bootsect.bak", AllocateDestinationString=1 | out: DestinationString="bootsect.bak") returned 0x0 [0120.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ec8 [0120.069] RtlFreeAnsiString (AnsiString="b") [0120.069] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="bootfont.bin" | out: DestinationString="bootfont.bin") [0120.069] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="bootfont.bin", AllocateDestinationString=1 | out: DestinationString="bootfont.bin") returned 0x0 [0120.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9e50 [0120.070] RtlFreeAnsiString (AnsiString="b") [0120.070] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*system volume information" | out: DestinationString="*system volume information") [0120.070] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*system volume information", AllocateDestinationString=1 | out: DestinationString="*system volume information") returned 0x0 [0120.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcffd0 [0120.070] RtlFreeAnsiString (AnsiString="*") [0120.070] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*windows.old" | out: DestinationString="*windows.old") [0120.070] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*windows.old", AllocateDestinationString=1 | out: DestinationString="*windows.old") returned 0x0 [0120.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca1c0 [0120.070] RtlFreeAnsiString (AnsiString="*") [0120.070] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*:\\users\\*\\*temp" | out: DestinationString="*:\\users\\*\\*temp") [0120.070] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*:\\users\\*\\*temp", AllocateDestinationString=1 | out: DestinationString="*:\\users\\*\\*temp") returned 0x0 [0120.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3840 [0120.070] RtlFreeAnsiString (AnsiString="*") [0120.070] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*msocache" | out: DestinationString="*msocache") [0120.070] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*msocache", AllocateDestinationString=1 | out: DestinationString="*msocache") returned 0x0 [0120.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eee098 [0120.071] RtlFreeAnsiString (AnsiString="*") [0120.071] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*:\\winnt" | out: DestinationString="*:\\winnt") [0120.071] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*:\\winnt", AllocateDestinationString=1 | out: DestinationString="*:\\winnt") returned 0x0 [0120.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eee0b8 [0120.071] RtlFreeAnsiString (AnsiString="*") [0120.071] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*$windows.~ws" | out: DestinationString="*$windows.~ws") [0120.071] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*$windows.~ws", AllocateDestinationString=1 | out: DestinationString="*$windows.~ws") returned 0x0 [0120.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dca558 [0120.071] RtlFreeAnsiString (AnsiString="*") [0120.071] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*perflogs" | out: DestinationString="*perflogs") [0120.071] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*perflogs", AllocateDestinationString=1 | out: DestinationString="*perflogs") returned 0x0 [0120.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eee0d8 [0120.071] RtlFreeAnsiString (AnsiString="*") [0120.071] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*boot" | out: DestinationString="*boot") [0120.071] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*boot", AllocateDestinationString=1 | out: DestinationString="*boot") returned 0x0 [0120.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x2fd9d80 [0120.072] RtlFreeAnsiString (AnsiString="*") [0120.072] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*:\\windows" | out: DestinationString="*:\\windows") [0120.072] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*:\\windows", AllocateDestinationString=1 | out: DestinationString="*:\\windows") returned 0x0 [0120.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eee0f8 [0120.072] RtlFreeAnsiString (AnsiString="*") [0120.072] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*:\\program file*\\vmware" | out: DestinationString="*:\\program file*\\vmware") [0120.072] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*:\\program file*\\vmware", AllocateDestinationString=1 | out: DestinationString="*:\\program file*\\vmware") returned 0x0 [0120.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e15fd8 [0120.072] RtlFreeAnsiString (AnsiString="*") [0120.072] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="\\\\*\\users\\*\\*temp" | out: DestinationString="\\\\*\\users\\*\\*temp") [0120.072] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="\\\\*\\users\\*\\*temp", AllocateDestinationString=1 | out: DestinationString="\\\\*\\users\\*\\*temp") returned 0x0 [0120.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3d80 [0120.072] RtlFreeAnsiString (AnsiString="\\") [0120.072] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="\\\\*\\winnt" | out: DestinationString="\\\\*\\winnt") [0120.073] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="\\\\*\\winnt", AllocateDestinationString=1 | out: DestinationString="\\\\*\\winnt") returned 0x0 [0120.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eee118 [0120.073] RtlFreeAnsiString (AnsiString="\\") [0120.073] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="\\\\*\\windows" | out: DestinationString="\\\\*\\windows") [0120.073] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="\\\\*\\windows", AllocateDestinationString=1 | out: DestinationString="\\\\*\\windows") returned 0x0 [0120.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eee138 [0120.073] RtlFreeAnsiString (AnsiString="\\") [0120.073] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\vmware" | out: DestinationString="*\\program file*\\vmware") [0120.073] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\vmware", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\vmware") returned 0x0 [0120.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e16358 [0120.073] RtlFreeAnsiString (AnsiString="*") [0120.073] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*appdata*microsoft" | out: DestinationString="*appdata*microsoft") [0120.073] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*appdata*microsoft", AllocateDestinationString=1 | out: DestinationString="*appdata*microsoft") returned 0x0 [0120.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db4020 [0120.073] RtlFreeAnsiString (AnsiString="*") [0120.074] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*appdata*packages" | out: DestinationString="*appdata*packages") [0120.074] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*appdata*packages", AllocateDestinationString=1 | out: DestinationString="*appdata*packages") returned 0x0 [0120.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3b10 [0120.074] RtlFreeAnsiString (AnsiString="*") [0120.074] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*microsoft\\provisioning" | out: DestinationString="*microsoft\\provisioning") [0120.074] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*microsoft\\provisioning", AllocateDestinationString=1 | out: DestinationString="*microsoft\\provisioning") returned 0x0 [0120.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e16208 [0120.074] RtlFreeAnsiString (AnsiString="*") [0120.074] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*dvd maker" | out: DestinationString="*dvd maker") [0120.074] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*dvd maker", AllocateDestinationString=1 | out: DestinationString="*dvd maker") returned 0x0 [0120.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eee158 [0120.074] RtlFreeAnsiString (AnsiString="*") [0120.074] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*Internet Explorer" | out: DestinationString="*Internet Explorer") [0120.074] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*Internet Explorer", AllocateDestinationString=1 | out: DestinationString="*Internet Explorer") returned 0x0 [0120.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3bd0 [0120.075] RtlFreeAnsiString (AnsiString="*") [0120.075] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*Mozilla" | out: DestinationString="*Mozilla") [0120.075] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*Mozilla", AllocateDestinationString=1 | out: DestinationString="*Mozilla") returned 0x0 [0120.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7698 [0120.075] RtlFreeAnsiString (AnsiString="*") [0120.075] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*Mozilla*" | out: DestinationString="*Mozilla*") [0120.075] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*Mozilla*", AllocateDestinationString=1 | out: DestinationString="*Mozilla*") returned 0x0 [0120.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb76b8 [0120.075] RtlFreeAnsiString (AnsiString="*") [0120.075] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*Old Firefox data" | out: DestinationString="*Old Firefox data") [0120.075] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*Old Firefox data", AllocateDestinationString=1 | out: DestinationString="*Old Firefox data") returned 0x0 [0120.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3b70 [0120.075] RtlFreeAnsiString (AnsiString="*") [0120.076] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\windows media*" | out: DestinationString="*\\program file*\\windows media*") [0120.076] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\windows media*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows media*") returned 0x0 [0120.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3dd4548 [0120.076] RtlFreeAnsiString (AnsiString="*") [0120.076] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\windows portable*" | out: DestinationString="*\\program file*\\windows portable*") [0120.076] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\windows portable*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows portable*") returned 0x0 [0120.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de68d8 [0120.076] RtlFreeAnsiString (AnsiString="*") [0120.076] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*windows defender" | out: DestinationString="*windows defender") [0120.076] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*windows defender", AllocateDestinationString=1 | out: DestinationString="*windows defender") returned 0x0 [0120.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3510 [0120.076] RtlFreeAnsiString (AnsiString="*") [0120.076] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\windows nt" | out: DestinationString="*\\program file*\\windows nt") [0120.076] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\windows nt", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows nt") returned 0x0 [0120.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf6d0 [0120.077] RtlFreeAnsiString (AnsiString="*") [0120.077] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\windows photo*" | out: DestinationString="*\\program file*\\windows photo*") [0120.077] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\windows photo*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows photo*") returned 0x0 [0120.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3dd4350 [0120.077] RtlFreeAnsiString (AnsiString="*") [0120.077] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\windows side*" | out: DestinationString="*\\program file*\\windows side*") [0120.077] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\windows side*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows side*") returned 0x0 [0120.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e49848 [0120.077] RtlFreeAnsiString (AnsiString="*") [0120.077] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\windowspowershell" | out: DestinationString="*\\program file*\\windowspowershell") [0120.077] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\windowspowershell", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windowspowershell") returned 0x0 [0120.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de5cf8 [0120.077] RtlFreeAnsiString (AnsiString="*") [0120.077] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\cuass*" | out: DestinationString="*\\program file*\\cuass*") [0120.077] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\cuass*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\cuass*") returned 0x0 [0120.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e161d0 [0120.078] RtlFreeAnsiString (AnsiString="*") [0120.078] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\microsoft games" | out: DestinationString="*\\program file*\\microsoft games") [0120.078] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\microsoft games", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\microsoft games") returned 0x0 [0120.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49458 [0120.078] RtlFreeAnsiString (AnsiString="*") [0120.078] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\common files\\system" | out: DestinationString="*\\program file*\\common files\\system") [0120.078] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\common files\\system", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\system") returned 0x0 [0120.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6338 [0120.078] RtlFreeAnsiString (AnsiString="*") [0120.078] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\common files\\*shared" | out: DestinationString="*\\program file*\\common files\\*shared") [0120.078] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\common files\\*shared", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\*shared") returned 0x0 [0120.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3db9f00 [0120.078] RtlFreeAnsiString (AnsiString="*") [0120.078] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\program file*\\common files\\reference ass*" | out: DestinationString="*\\program file*\\common files\\reference ass*") [0120.079] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\program file*\\common files\\reference ass*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\reference ass*") returned 0x0 [0120.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1ce8 [0120.079] RtlFreeAnsiString (AnsiString="*") [0120.079] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\windows\\cache*" | out: DestinationString="*\\windows\\cache*") [0120.079] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\windows\\cache*", AllocateDestinationString=1 | out: DestinationString="*\\windows\\cache*") returned 0x0 [0120.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3a80 [0120.079] RtlFreeAnsiString (AnsiString="*") [0120.079] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*temporary internet*" | out: DestinationString="*temporary internet*") [0120.079] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*temporary internet*", AllocateDestinationString=1 | out: DestinationString="*temporary internet*") returned 0x0 [0120.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e16198 [0120.079] RtlFreeAnsiString (AnsiString="*") [0120.079] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*media player" | out: DestinationString="*media player") [0120.079] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*media player", AllocateDestinationString=1 | out: DestinationString="*media player") returned 0x0 [0120.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc8000 [0120.079] RtlFreeAnsiString (AnsiString="*") [0120.079] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*:\\users\\*\\appdata\\*\\microsoft" | out: DestinationString="*:\\users\\*\\appdata\\*\\microsoft") [0120.079] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*:\\users\\*\\appdata\\*\\microsoft", AllocateDestinationString=1 | out: DestinationString="*:\\users\\*\\appdata\\*\\microsoft") returned 0x0 [0120.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e49608 [0120.080] RtlFreeAnsiString (AnsiString="*") [0120.080] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="\\\\*\\users\\*\\appdata\\*\\microsoft" | out: DestinationString="\\\\*\\users\\*\\appdata\\*\\microsoft") [0120.080] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="\\\\*\\users\\*\\appdata\\*\\microsoft", AllocateDestinationString=1 | out: DestinationString="\\\\*\\users\\*\\appdata\\*\\microsoft") returned 0x0 [0120.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48e28 [0120.080] RtlFreeAnsiString (AnsiString="\\") [0120.080] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\Program File*\\Cisco" | out: DestinationString="*\\Program File*\\Cisco") [0120.080] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\Program File*\\Cisco", AllocateDestinationString=1 | out: DestinationString="*\\Program File*\\Cisco") returned 0x0 [0120.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e15ec0 [0120.080] RtlFreeAnsiString (AnsiString="*") [0120.080] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="msp" | out: DestinationString="msp") [0120.080] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="msp", AllocateDestinationString=1 | out: DestinationString="msp") returned 0x0 [0120.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x2ffdee0 [0120.081] RtlFreeAnsiString (AnsiString="m") [0120.081] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="exe" | out: DestinationString="exe") [0120.081] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="exe", AllocateDestinationString=1 | out: DestinationString="exe") returned 0x0 [0120.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x2ffdf20 [0120.081] RtlFreeAnsiString (AnsiString="e") [0120.081] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="sys" | out: DestinationString="sys") [0120.081] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="sys", AllocateDestinationString=1 | out: DestinationString="sys") returned 0x0 [0120.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x2ffdf00 [0120.081] RtlFreeAnsiString (AnsiString="s") [0120.081] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="msc" | out: DestinationString="msc") [0120.081] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="msc", AllocateDestinationString=1 | out: DestinationString="msc") returned 0x0 [0120.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52328 [0120.082] RtlFreeAnsiString (AnsiString="m") [0120.082] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="mod" | out: DestinationString="mod") [0120.082] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="mod", AllocateDestinationString=1 | out: DestinationString="mod") returned 0x0 [0120.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52338 [0120.082] RtlFreeAnsiString (AnsiString="m") [0120.082] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="clb" | out: DestinationString="clb") [0120.082] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="clb", AllocateDestinationString=1 | out: DestinationString="clb") returned 0x0 [0120.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52318 [0120.082] RtlFreeAnsiString (AnsiString="c") [0120.082] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="mui" | out: DestinationString="mui") [0120.082] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="mui", AllocateDestinationString=1 | out: DestinationString="mui") returned 0x0 [0120.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52308 [0120.082] RtlFreeAnsiString (AnsiString="m") [0120.082] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="regtrans-ms" | out: DestinationString="regtrans-ms") [0120.082] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="regtrans-ms", AllocateDestinationString=1 | out: DestinationString="regtrans-ms") returned 0x0 [0120.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb76d8 [0120.082] RtlFreeAnsiString (AnsiString="r") [0120.082] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="theme" | out: DestinationString="theme") [0120.082] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="theme", AllocateDestinationString=1 | out: DestinationString="theme") returned 0x0 [0120.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x2fda0e0 [0120.083] RtlFreeAnsiString (AnsiString="t") [0120.083] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="hta" | out: DestinationString="hta") [0120.083] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="hta", AllocateDestinationString=1 | out: DestinationString="hta") returned 0x0 [0120.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d522f8 [0120.083] RtlFreeAnsiString (AnsiString="h") [0120.083] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="shs" | out: DestinationString="shs") [0120.083] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="shs", AllocateDestinationString=1 | out: DestinationString="shs") returned 0x0 [0120.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d522e8 [0120.083] RtlFreeAnsiString (AnsiString="s") [0120.083] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="nomedia" | out: DestinationString="nomedia") [0120.083] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="nomedia", AllocateDestinationString=1 | out: DestinationString="nomedia") returned 0x0 [0120.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x2fd9fd8 [0120.083] RtlFreeAnsiString (AnsiString="n") [0120.083] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="diagpkg" | out: DestinationString="diagpkg") [0120.083] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="diagpkg", AllocateDestinationString=1 | out: DestinationString="diagpkg") returned 0x0 [0120.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x2fda0f8 [0120.084] RtlFreeAnsiString (AnsiString="d") [0120.084] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="cab" | out: DestinationString="cab") [0120.084] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="cab", AllocateDestinationString=1 | out: DestinationString="cab") returned 0x0 [0120.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d522d8 [0120.084] RtlFreeAnsiString (AnsiString="c") [0120.084] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ics" | out: DestinationString="ics") [0120.084] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ics", AllocateDestinationString=1 | out: DestinationString="ics") returned 0x0 [0120.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d522c8 [0120.084] RtlFreeAnsiString (AnsiString="i") [0120.084] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="msstyles" | out: DestinationString="msstyles") [0120.084] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="msstyles", AllocateDestinationString=1 | out: DestinationString="msstyles") returned 0x0 [0120.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb76f8 [0120.084] RtlFreeAnsiString (AnsiString="m") [0120.084] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="cur" | out: DestinationString="cur") [0120.084] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="cur", AllocateDestinationString=1 | out: DestinationString="cur") returned 0x0 [0120.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d522b8 [0120.084] RtlFreeAnsiString (AnsiString="c") [0120.084] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="drv" | out: DestinationString="drv") [0120.085] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="drv", AllocateDestinationString=1 | out: DestinationString="drv") returned 0x0 [0120.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d522a8 [0120.085] RtlFreeAnsiString (AnsiString="d") [0120.085] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="icns" | out: DestinationString="icns") [0120.085] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="icns", AllocateDestinationString=1 | out: DestinationString="icns") returned 0x0 [0120.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x2fd9d98 [0120.085] RtlFreeAnsiString (AnsiString="i") [0120.085] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="diagcfg" | out: DestinationString="diagcfg") [0120.085] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="diagcfg", AllocateDestinationString=1 | out: DestinationString="diagcfg") returned 0x0 [0120.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x2fd9fc0 [0120.085] RtlFreeAnsiString (AnsiString="d") [0120.085] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="dll" | out: DestinationString="dll") [0120.085] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="dll", AllocateDestinationString=1 | out: DestinationString="dll") returned 0x0 [0120.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52298 [0120.085] RtlFreeAnsiString (AnsiString="d") [0120.085] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ocx" | out: DestinationString="ocx") [0120.085] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ocx", AllocateDestinationString=1 | out: DestinationString="ocx") returned 0x0 [0120.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52288 [0120.085] RtlFreeAnsiString (AnsiString="o") [0120.086] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="lnk" | out: DestinationString="lnk") [0120.086] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="lnk", AllocateDestinationString=1 | out: DestinationString="lnk") returned 0x0 [0120.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52278 [0120.086] RtlFreeAnsiString (AnsiString="l") [0120.086] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ico" | out: DestinationString="ico") [0120.086] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ico", AllocateDestinationString=1 | out: DestinationString="ico") returned 0x0 [0120.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52268 [0120.086] RtlFreeAnsiString (AnsiString="i") [0120.086] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="idx" | out: DestinationString="idx") [0120.086] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="idx", AllocateDestinationString=1 | out: DestinationString="idx") returned 0x0 [0120.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52258 [0120.086] RtlFreeAnsiString (AnsiString="i") [0120.086] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ps1" | out: DestinationString="ps1") [0120.086] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ps1", AllocateDestinationString=1 | out: DestinationString="ps1") returned 0x0 [0120.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52248 [0120.086] RtlFreeAnsiString (AnsiString="p") [0120.086] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="mpa" | out: DestinationString="mpa") [0120.086] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="mpa", AllocateDestinationString=1 | out: DestinationString="mpa") returned 0x0 [0120.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52238 [0120.086] RtlFreeAnsiString (AnsiString="m") [0120.086] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="cpl" | out: DestinationString="cpl") [0120.087] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="cpl", AllocateDestinationString=1 | out: DestinationString="cpl") returned 0x0 [0120.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52228 [0120.087] RtlFreeAnsiString (AnsiString="c") [0120.087] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="icl" | out: DestinationString="icl") [0120.087] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="icl", AllocateDestinationString=1 | out: DestinationString="icl") returned 0x0 [0120.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52218 [0120.087] RtlFreeAnsiString (AnsiString="i") [0120.087] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="msu" | out: DestinationString="msu") [0120.087] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="msu", AllocateDestinationString=1 | out: DestinationString="msu") returned 0x0 [0120.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52208 [0120.087] RtlFreeAnsiString (AnsiString="m") [0120.087] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="msi" | out: DestinationString="msi") [0120.087] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="msi", AllocateDestinationString=1 | out: DestinationString="msi") returned 0x0 [0120.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d521f8 [0120.087] RtlFreeAnsiString (AnsiString="m") [0120.087] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="nls" | out: DestinationString="nls") [0120.087] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="nls", AllocateDestinationString=1 | out: DestinationString="nls") returned 0x0 [0120.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d521e8 [0120.088] RtlFreeAnsiString (AnsiString="n") [0120.088] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="scr" | out: DestinationString="scr") [0120.088] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="scr", AllocateDestinationString=1 | out: DestinationString="scr") returned 0x0 [0120.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d520d8 [0120.088] RtlFreeAnsiString (AnsiString="s") [0120.088] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="adv" | out: DestinationString="adv") [0120.088] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="adv", AllocateDestinationString=1 | out: DestinationString="adv") returned 0x0 [0120.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52348 [0120.088] RtlFreeAnsiString (AnsiString="a") [0120.088] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="386" | out: DestinationString="386") [0120.088] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="386", AllocateDestinationString=1 | out: DestinationString="386") returned 0x0 [0120.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52358 [0120.088] RtlFreeAnsiString (AnsiString="3") [0120.089] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="com" | out: DestinationString="com") [0120.089] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="com", AllocateDestinationString=1 | out: DestinationString="com") returned 0x0 [0120.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52368 [0120.089] RtlFreeAnsiString (AnsiString="c") [0120.089] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="hlp" | out: DestinationString="hlp") [0120.089] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="hlp", AllocateDestinationString=1 | out: DestinationString="hlp") returned 0x0 [0120.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52378 [0120.089] RtlFreeAnsiString (AnsiString="h") [0120.089] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="rom" | out: DestinationString="rom") [0120.089] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="rom", AllocateDestinationString=1 | out: DestinationString="rom") returned 0x0 [0120.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52388 [0120.090] RtlFreeAnsiString (AnsiString="r") [0120.090] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="lock" | out: DestinationString="lock") [0120.090] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="lock", AllocateDestinationString=1 | out: DestinationString="lock") returned 0x0 [0120.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x2fda038 [0120.090] RtlFreeAnsiString (AnsiString="l") [0120.090] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="386" | out: DestinationString="386") [0120.090] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="386", AllocateDestinationString=1 | out: DestinationString="386") returned 0x0 [0120.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d52398 [0120.091] RtlFreeAnsiString (AnsiString="3") [0120.091] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="wpx" | out: DestinationString="wpx") [0120.091] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="wpx", AllocateDestinationString=1 | out: DestinationString="wpx") returned 0x0 [0120.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d523a8 [0120.091] RtlFreeAnsiString (AnsiString="w") [0120.091] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ani" | out: DestinationString="ani") [0120.091] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ani", AllocateDestinationString=1 | out: DestinationString="ani") returned 0x0 [0120.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3d523b8 [0120.091] RtlFreeAnsiString (AnsiString="a") [0120.092] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="prf" | out: DestinationString="prf") [0120.092] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="prf", AllocateDestinationString=1 | out: DestinationString="prf") returned 0x0 [0120.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304abd0 [0120.092] RtlFreeAnsiString (AnsiString="p") [0120.092] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="rtp" | out: DestinationString="rtp") [0120.092] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="rtp", AllocateDestinationString=1 | out: DestinationString="rtp") returned 0x0 [0120.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304aae0 [0120.092] RtlFreeAnsiString (AnsiString="r") [0120.092] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ldf" | out: DestinationString="ldf") [0120.092] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ldf", AllocateDestinationString=1 | out: DestinationString="ldf") returned 0x0 [0120.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304ab30 [0120.093] RtlFreeAnsiString (AnsiString="l") [0120.093] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="key" | out: DestinationString="key") [0120.093] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="key", AllocateDestinationString=1 | out: DestinationString="key") returned 0x0 [0120.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304abc0 [0120.093] RtlFreeAnsiString (AnsiString="k") [0120.093] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="diagcab" | out: DestinationString="diagcab") [0120.093] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="diagcab", AllocateDestinationString=1 | out: DestinationString="diagcab") returned 0x0 [0120.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x2fda2c0 [0120.093] RtlFreeAnsiString (AnsiString="d") [0120.093] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="cmd" | out: DestinationString="cmd") [0120.093] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="cmd", AllocateDestinationString=1 | out: DestinationString="cmd") returned 0x0 [0120.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304ab80 [0120.093] RtlFreeAnsiString (AnsiString="c") [0120.093] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="spl" | out: DestinationString="spl") [0120.093] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="spl", AllocateDestinationString=1 | out: DestinationString="spl") returned 0x0 [0120.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304ac40 [0120.094] RtlFreeAnsiString (AnsiString="s") [0120.094] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="deskthemepack" | out: DestinationString="deskthemepack") [0120.094] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="deskthemepack", AllocateDestinationString=1 | out: DestinationString="deskthemepack") returned 0x0 [0120.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9f68 [0120.094] RtlFreeAnsiString (AnsiString="d") [0120.094] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="bat" | out: DestinationString="bat") [0120.094] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="bat", AllocateDestinationString=1 | out: DestinationString="bat") returned 0x0 [0120.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304ac60 [0120.094] RtlFreeAnsiString (AnsiString="b") [0120.094] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="themepack" | out: DestinationString="themepack") [0120.094] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="themepack", AllocateDestinationString=1 | out: DestinationString="themepack") returned 0x0 [0120.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7718 [0120.094] RtlFreeAnsiString (AnsiString="t") [0120.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e08920 [0120.095] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="jpg" | out: DestinationString="jpg") [0120.095] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="jpg", AllocateDestinationString=1 | out: DestinationString="jpg") returned 0x0 [0120.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304ab50 [0120.095] RtlFreeAnsiString (AnsiString="j") [0120.095] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="jpeg" | out: DestinationString="jpeg") [0120.095] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="jpeg", AllocateDestinationString=1 | out: DestinationString="jpeg") returned 0x0 [0120.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x2fd9db0 [0120.095] RtlFreeAnsiString (AnsiString="j") [0120.095] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="png" | out: DestinationString="png") [0120.095] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="png", AllocateDestinationString=1 | out: DestinationString="png") returned 0x0 [0120.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304abe0 [0120.095] RtlFreeAnsiString (AnsiString="p") [0120.095] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="bmp" | out: DestinationString="bmp") [0120.095] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="bmp", AllocateDestinationString=1 | out: DestinationString="bmp") returned 0x0 [0120.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304aa30 [0120.095] RtlFreeAnsiString (AnsiString="b") [0120.096] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="doc" | out: DestinationString="doc") [0120.096] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="doc", AllocateDestinationString=1 | out: DestinationString="doc") returned 0x0 [0120.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304aac0 [0120.096] RtlFreeAnsiString (AnsiString="d") [0120.096] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="docx" | out: DestinationString="docx") [0120.096] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="docx", AllocateDestinationString=1 | out: DestinationString="docx") returned 0x0 [0120.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x2fda0c8 [0120.096] RtlFreeAnsiString (AnsiString="d") [0120.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3deb9f0 [0120.104] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="nslsvice.exe" | out: DestinationString="nslsvice.exe") [0120.104] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="nslsvice.exe", AllocateDestinationString=1 | out: DestinationString="nslsvice.exe") returned 0x0 [0120.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca1e8 [0120.104] RtlFreeAnsiString (AnsiString="n") [0120.104] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="pg*" | out: DestinationString="pg*") [0120.104] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="pg*", AllocateDestinationString=1 | out: DestinationString="pg*") returned 0x0 [0120.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304aa60 [0120.105] RtlFreeAnsiString (AnsiString="p") [0120.105] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="nservice.exe" | out: DestinationString="nservice.exe") [0120.105] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="nservice.exe", AllocateDestinationString=1 | out: DestinationString="nservice.exe") returned 0x0 [0120.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ba8 [0120.105] RtlFreeAnsiString (AnsiString="n") [0120.105] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="cbvscserv*" | out: DestinationString="cbvscserv*") [0120.105] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="cbvscserv*", AllocateDestinationString=1 | out: DestinationString="cbvscserv*") returned 0x0 [0120.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7758 [0120.105] RtlFreeAnsiString (AnsiString="c") [0120.105] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ntrtscan.exe" | out: DestinationString="ntrtscan.exe") [0120.105] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ntrtscan.exe", AllocateDestinationString=1 | out: DestinationString="ntrtscan.exe") returned 0x0 [0120.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9fb8 [0120.105] RtlFreeAnsiString (AnsiString="n") [0120.105] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="cbservi*" | out: DestinationString="cbservi*") [0120.106] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="cbservi*", AllocateDestinationString=1 | out: DestinationString="cbservi*") returned 0x0 [0120.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7778 [0120.106] RtlFreeAnsiString (AnsiString="c") [0120.106] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="hMailServer*" | out: DestinationString="hMailServer*") [0120.106] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="hMailServer*", AllocateDestinationString=1 | out: DestinationString="hMailServer*") returned 0x0 [0120.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca580 [0120.106] RtlFreeAnsiString (AnsiString="h") [0120.106] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="IBM*" | out: DestinationString="IBM*") [0120.106] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="IBM*", AllocateDestinationString=1 | out: DestinationString="IBM*") returned 0x0 [0120.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x2fda4a0 [0120.106] RtlFreeAnsiString (AnsiString="I") [0120.106] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="bes10*" | out: DestinationString="bes10*") [0120.106] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="bes10*", AllocateDestinationString=1 | out: DestinationString="bes10*") returned 0x0 [0120.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db40d8 [0120.106] RtlFreeAnsiString (AnsiString="b") [0120.107] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="black*" | out: DestinationString="black*") [0120.107] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="black*", AllocateDestinationString=1 | out: DestinationString="black*") returned 0x0 [0120.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4120 [0120.107] RtlFreeAnsiString (AnsiString="b") [0120.107] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="apach*" | out: DestinationString="apach*") [0120.107] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="apach*", AllocateDestinationString=1 | out: DestinationString="apach*") returned 0x0 [0120.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4378 [0120.107] RtlFreeAnsiString (AnsiString="a") [0120.107] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="bd2*" | out: DestinationString="bd2*") [0120.107] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="bd2*", AllocateDestinationString=1 | out: DestinationString="bd2*") returned 0x0 [0120.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3db45b8 [0120.107] RtlFreeAnsiString (AnsiString="b") [0120.107] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="db*" | out: DestinationString="db*") [0120.107] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="db*", AllocateDestinationString=1 | out: DestinationString="db*") returned 0x0 [0120.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304aa70 [0120.108] RtlFreeAnsiString (AnsiString="d") [0120.108] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ba*" | out: DestinationString="ba*") [0120.108] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ba*", AllocateDestinationString=1 | out: DestinationString="ba*") returned 0x0 [0120.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304aaf0 [0120.108] RtlFreeAnsiString (AnsiString="b") [0120.108] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="be*" | out: DestinationString="be*") [0120.108] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="be*", AllocateDestinationString=1 | out: DestinationString="be*") returned 0x0 [0120.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304ab10 [0120.108] RtlFreeAnsiString (AnsiString="b") [0120.108] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="QB*" | out: DestinationString="QB*") [0120.108] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="QB*", AllocateDestinationString=1 | out: DestinationString="QB*") returned 0x0 [0120.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304aab0 [0120.109] RtlFreeAnsiString (AnsiString="Q") [0120.109] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="oracle*" | out: DestinationString="oracle*") [0120.109] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="oracle*", AllocateDestinationString=1 | out: DestinationString="oracle*") returned 0x0 [0120.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3db4618 [0120.109] RtlFreeAnsiString (AnsiString="o") [0120.109] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="wbengine*" | out: DestinationString="wbengine*") [0120.109] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="wbengine*", AllocateDestinationString=1 | out: DestinationString="wbengine*") returned 0x0 [0120.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7798 [0120.109] RtlFreeAnsiString (AnsiString="w") [0120.109] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="vee*" | out: DestinationString="vee*") [0120.109] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="vee*", AllocateDestinationString=1 | out: DestinationString="vee*") returned 0x0 [0120.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3db4588 [0120.109] RtlFreeAnsiString (AnsiString="v") [0120.109] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="postg*" | out: DestinationString="postg*") [0120.109] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="postg*", AllocateDestinationString=1 | out: DestinationString="postg*") returned 0x0 [0120.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4348 [0120.110] RtlFreeAnsiString (AnsiString="p") [0120.110] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="sage*" | out: DestinationString="sage*") [0120.110] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="sage*", AllocateDestinationString=1 | out: DestinationString="sage*") returned 0x0 [0120.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3db4420 [0120.110] RtlFreeAnsiString (AnsiString="s") [0120.110] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="sap*" | out: DestinationString="sap*") [0120.110] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="sap*", AllocateDestinationString=1 | out: DestinationString="sap*") returned 0x0 [0120.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3db4cf0 [0120.110] RtlFreeAnsiString (AnsiString="s") [0120.110] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="b1*" | out: DestinationString="b1*") [0120.110] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="b1*", AllocateDestinationString=1 | out: DestinationString="b1*") returned 0x0 [0120.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x304ac80 [0120.110] RtlFreeAnsiString (AnsiString="b") [0120.110] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="fdlaunch*" | out: DestinationString="fdlaunch*") [0120.111] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="fdlaunch*", AllocateDestinationString=1 | out: DestinationString="fdlaunch*") returned 0x0 [0120.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb77b8 [0120.111] RtlFreeAnsiString (AnsiString="f") [0120.111] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="msmdsrv*" | out: DestinationString="msmdsrv*") [0120.111] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="msmdsrv*", AllocateDestinationString=1 | out: DestinationString="msmdsrv*") returned 0x0 [0120.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb77d8 [0120.111] RtlFreeAnsiString (AnsiString="m") [0120.111] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="report*" | out: DestinationString="report*") [0120.111] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="report*", AllocateDestinationString=1 | out: DestinationString="report*") returned 0x0 [0120.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3db4e70 [0120.111] RtlFreeAnsiString (AnsiString="r") [0120.111] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="msdtssr*" | out: DestinationString="msdtssr*") [0120.111] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="msdtssr*", AllocateDestinationString=1 | out: DestinationString="msdtssr*") returned 0x0 [0120.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb77f8 [0120.112] RtlFreeAnsiString (AnsiString="m") [0120.112] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="coldfus*" | out: DestinationString="coldfus*") [0120.112] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="coldfus*", AllocateDestinationString=1 | out: DestinationString="coldfus*") returned 0x0 [0120.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7818 [0120.112] RtlFreeAnsiString (AnsiString="c") [0120.112] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="cfdot*" | out: DestinationString="cfdot*") [0120.112] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="cfdot*", AllocateDestinationString=1 | out: DestinationString="cfdot*") returned 0x0 [0120.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4288 [0120.112] RtlFreeAnsiString (AnsiString="c") [0120.112] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="swag*" | out: DestinationString="swag*") [0120.113] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="swag*", AllocateDestinationString=1 | out: DestinationString="swag*") returned 0x0 [0120.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3db41f8 [0120.113] RtlFreeAnsiString (AnsiString="s") [0120.113] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="swstrtr*" | out: DestinationString="swstrtr*") [0120.113] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="swstrtr*", AllocateDestinationString=1 | out: DestinationString="swstrtr*") returned 0x0 [0120.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7838 [0120.113] RtlFreeAnsiString (AnsiString="s") [0120.113] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="jetty.exe" | out: DestinationString="jetty.exe") [0120.113] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="jetty.exe", AllocateDestinationString=1 | out: DestinationString="jetty.exe") returned 0x0 [0120.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7858 [0120.113] RtlFreeAnsiString (AnsiString="j") [0120.113] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="wrsa.exe" | out: DestinationString="wrsa.exe") [0120.114] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="wrsa.exe", AllocateDestinationString=1 | out: DestinationString="wrsa.exe") returned 0x0 [0120.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7878 [0120.114] RtlFreeAnsiString (AnsiString="w") [0120.114] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="team*" | out: DestinationString="team*") [0120.114] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="team*", AllocateDestinationString=1 | out: DestinationString="team*") returned 0x0 [0120.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3db4240 [0120.114] RtlFreeAnsiString (AnsiString="t") [0120.114] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="agent*" | out: DestinationString="agent*") [0120.114] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="agent*", AllocateDestinationString=1 | out: DestinationString="agent*") returned 0x0 [0120.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4840 [0120.115] RtlFreeAnsiString (AnsiString="a") [0120.115] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="store.exe" | out: DestinationString="store.exe") [0120.115] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="store.exe", AllocateDestinationString=1 | out: DestinationString="store.exe") returned 0x0 [0120.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7898 [0120.115] RtlFreeAnsiString (AnsiString="s") [0120.115] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="sql*" | out: DestinationString="sql*") [0120.115] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="sql*", AllocateDestinationString=1 | out: DestinationString="sql*") returned 0x0 [0120.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3db4738 [0120.115] RtlFreeAnsiString (AnsiString="s") [0120.115] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="sqbcoreservice.exe" | out: DestinationString="sqbcoreservice.exe") [0120.115] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="sqbcoreservice.exe", AllocateDestinationString=1 | out: DestinationString="sqbcoreservice.exe") returned 0x0 [0120.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db39f0 [0120.116] RtlFreeAnsiString (AnsiString="s") [0120.116] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="thunderbird.exe" | out: DestinationString="thunderbird.exe") [0120.116] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="thunderbird.exe", AllocateDestinationString=1 | out: DestinationString="thunderbird.exe") returned 0x0 [0120.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c98 [0120.116] RtlFreeAnsiString (AnsiString="t") [0120.116] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ocssd.exe" | out: DestinationString="ocssd.exe") [0120.116] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ocssd.exe", AllocateDestinationString=1 | out: DestinationString="ocssd.exe") returned 0x0 [0120.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb78b8 [0120.116] RtlFreeAnsiString (AnsiString="o") [0120.117] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="encsvc.exe" | out: DestinationString="encsvc.exe") [0120.117] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="encsvc.exe", AllocateDestinationString=1 | out: DestinationString="encsvc.exe") returned 0x0 [0120.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb78d8 [0120.117] RtlFreeAnsiString (AnsiString="e") [0120.117] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="excel.exe" | out: DestinationString="excel.exe") [0120.117] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="excel.exe", AllocateDestinationString=1 | out: DestinationString="excel.exe") returned 0x0 [0120.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb78f8 [0120.117] RtlFreeAnsiString (AnsiString="e") [0120.117] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="synctime.exe" | out: DestinationString="synctime.exe") [0120.117] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="synctime.exe", AllocateDestinationString=1 | out: DestinationString="synctime.exe") returned 0x0 [0120.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca350 [0120.118] RtlFreeAnsiString (AnsiString="s") [0120.118] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="mspub.exe" | out: DestinationString="mspub.exe") [0120.118] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="mspub.exe", AllocateDestinationString=1 | out: DestinationString="mspub.exe") returned 0x0 [0120.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7918 [0120.118] RtlFreeAnsiString (AnsiString="m") [0120.118] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ocautoupds.exe" | out: DestinationString="ocautoupds.exe") [0120.118] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ocautoupds.exe", AllocateDestinationString=1 | out: DestinationString="ocautoupds.exe") returned 0x0 [0120.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dca300 [0120.118] RtlFreeAnsiString (AnsiString="o") [0120.118] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="thebat.exe" | out: DestinationString="thebat.exe") [0120.118] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="thebat.exe", AllocateDestinationString=1 | out: DestinationString="thebat.exe") returned 0x0 [0120.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7938 [0120.119] RtlFreeAnsiString (AnsiString="t") [0120.119] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="dbeng50.exe" | out: DestinationString="dbeng50.exe") [0120.119] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="dbeng50.exe", AllocateDestinationString=1 | out: DestinationString="dbeng50.exe") returned 0x0 [0120.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7958 [0120.119] RtlFreeAnsiString (AnsiString="d") [0120.119] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*sql*" | out: DestinationString="*sql*") [0120.119] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*sql*", AllocateDestinationString=1 | out: DestinationString="*sql*") returned 0x0 [0120.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3db41b0 [0120.119] RtlFreeAnsiString (AnsiString="*") [0120.119] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="mydesktopservice.exe" | out: DestinationString="mydesktopservice.exe") [0120.120] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="mydesktopservice.exe", AllocateDestinationString=1 | out: DestinationString="mydesktopservice.exe") returned 0x0 [0120.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e16128 [0120.120] RtlFreeAnsiString (AnsiString="m") [0120.120] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="onenote.exe" | out: DestinationString="onenote.exe") [0120.120] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="onenote.exe", AllocateDestinationString=1 | out: DestinationString="onenote.exe") returned 0x0 [0120.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7978 [0120.120] RtlFreeAnsiString (AnsiString="o") [0120.120] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="outlook.exe" | out: DestinationString="outlook.exe") [0120.120] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="outlook.exe", AllocateDestinationString=1 | out: DestinationString="outlook.exe") returned 0x0 [0120.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7998 [0120.121] RtlFreeAnsiString (AnsiString="o") [0120.121] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="powerpnt.exe" | out: DestinationString="powerpnt.exe") [0120.121] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="powerpnt.exe", AllocateDestinationString=1 | out: DestinationString="powerpnt.exe") returned 0x0 [0120.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca3c8 [0120.121] RtlFreeAnsiString (AnsiString="p") [0120.121] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="msaccess.exe" | out: DestinationString="msaccess.exe") [0120.121] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="msaccess.exe", AllocateDestinationString=1 | out: DestinationString="msaccess.exe") returned 0x0 [0120.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9748 [0120.121] RtlFreeAnsiString (AnsiString="m") [0120.121] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="tbirdconfig.exe" | out: DestinationString="tbirdconfig.exe") [0120.121] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="tbirdconfig.exe", AllocateDestinationString=1 | out: DestinationString="tbirdconfig.exe") returned 0x0 [0120.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6ed0 [0120.122] RtlFreeAnsiString (AnsiString="t") [0120.122] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="wordpad.exe" | out: DestinationString="wordpad.exe") [0120.122] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="wordpad.exe", AllocateDestinationString=1 | out: DestinationString="wordpad.exe") returned 0x0 [0120.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb79b8 [0120.122] RtlFreeAnsiString (AnsiString="w") [0120.122] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ocomm.exe" | out: DestinationString="ocomm.exe") [0120.122] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ocomm.exe", AllocateDestinationString=1 | out: DestinationString="ocomm.exe") returned 0x0 [0120.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb79d8 [0120.122] RtlFreeAnsiString (AnsiString="o") [0120.123] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="dbsnmp.exe" | out: DestinationString="dbsnmp.exe") [0120.123] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="dbsnmp.exe", AllocateDestinationString=1 | out: DestinationString="dbsnmp.exe") returned 0x0 [0120.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb79f8 [0120.123] RtlFreeAnsiString (AnsiString="d") [0120.123] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="thebat64.exe" | out: DestinationString="thebat64.exe") [0120.123] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="thebat64.exe", AllocateDestinationString=1 | out: DestinationString="thebat64.exe") returned 0x0 [0120.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca170 [0120.123] RtlFreeAnsiString (AnsiString="t") [0120.123] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="winword.exe" | out: DestinationString="winword.exe") [0120.123] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="winword.exe", AllocateDestinationString=1 | out: DestinationString="winword.exe") returned 0x0 [0120.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7a18 [0120.124] RtlFreeAnsiString (AnsiString="w") [0120.124] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="oracle.exe" | out: DestinationString="oracle.exe") [0120.124] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="oracle.exe", AllocateDestinationString=1 | out: DestinationString="oracle.exe") returned 0x0 [0120.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7a38 [0120.124] RtlFreeAnsiString (AnsiString="o") [0120.124] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="xfssvccon.exe" | out: DestinationString="xfssvccon.exe") [0120.124] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="xfssvccon.exe", AllocateDestinationString=1 | out: DestinationString="xfssvccon.exe") returned 0x0 [0120.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dca238 [0120.124] RtlFreeAnsiString (AnsiString="x") [0120.124] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="firefoxconfig.exe" | out: DestinationString="firefoxconfig.exe") [0120.124] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="firefoxconfig.exe", AllocateDestinationString=1 | out: DestinationString="firefoxconfig.exe") returned 0x0 [0120.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3990 [0120.125] RtlFreeAnsiString (AnsiString="f") [0120.125] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="visio.exe" | out: DestinationString="visio.exe") [0120.125] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="visio.exe", AllocateDestinationString=1 | out: DestinationString="visio.exe") returned 0x0 [0120.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7a58 [0120.125] RtlFreeAnsiString (AnsiString="v") [0120.125] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="mydesktopqos.exe" | out: DestinationString="mydesktopqos.exe") [0120.125] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="mydesktopqos.exe", AllocateDestinationString=1 | out: DestinationString="mydesktopqos.exe") returned 0x0 [0120.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3960 [0120.125] RtlFreeAnsiString (AnsiString="m") [0120.125] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="infopath.exe" | out: DestinationString="infopath.exe") [0120.126] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="infopath.exe", AllocateDestinationString=1 | out: DestinationString="infopath.exe") returned 0x0 [0120.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca328 [0120.126] RtlFreeAnsiString (AnsiString="i") [0120.126] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="agntsvc.exe" | out: DestinationString="agntsvc.exe") [0120.126] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="agntsvc.exe", AllocateDestinationString=1 | out: DestinationString="agntsvc.exe") returned 0x0 [0120.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7a78 [0120.126] RtlFreeAnsiString (AnsiString="a") [0120.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d370 [0120.126] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="Lotus*" | out: DestinationString="Lotus*") [0120.126] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="Lotus*", AllocateDestinationString=1 | out: DestinationString="Lotus*") returned 0x0 [0120.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db44f8 [0120.127] RtlFreeAnsiString (AnsiString="L") [0120.127] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="veeam*" | out: DestinationString="veeam*") [0120.127] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="veeam*", AllocateDestinationString=1 | out: DestinationString="veeam*") returned 0x0 [0120.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4360 [0120.127] RtlFreeAnsiString (AnsiString="v") [0120.127] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="cbvscserv*" | out: DestinationString="cbvscserv*") [0120.127] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="cbvscserv*", AllocateDestinationString=1 | out: DestinationString="cbvscserv*") returned 0x0 [0120.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7a98 [0120.127] RtlFreeAnsiString (AnsiString="c") [0120.128] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="hMailServer" | out: DestinationString="hMailServer") [0120.128] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="hMailServer", AllocateDestinationString=1 | out: DestinationString="hMailServer") returned 0x0 [0120.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7ab8 [0120.128] RtlFreeAnsiString (AnsiString="h") [0120.128] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="backup*" | out: DestinationString="backup*") [0120.128] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="backup*", AllocateDestinationString=1 | out: DestinationString="backup*") returned 0x0 [0120.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3db4270 [0120.128] RtlFreeAnsiString (AnsiString="b") [0120.128] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*backup*" | out: DestinationString="*backup*") [0120.128] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*backup*", AllocateDestinationString=1 | out: DestinationString="*backup*") returned 0x0 [0120.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7ad8 [0120.128] RtlFreeAnsiString (AnsiString="*") [0120.128] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="apach*" | out: DestinationString="apach*") [0120.128] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="apach*", AllocateDestinationString=1 | out: DestinationString="apach*") returned 0x0 [0120.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4150 [0120.129] RtlFreeAnsiString (AnsiString="a") [0120.129] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="firebird*" | out: DestinationString="firebird*") [0120.129] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="firebird*", AllocateDestinationString=1 | out: DestinationString="firebird*") returned 0x0 [0120.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7af8 [0120.129] RtlFreeAnsiString (AnsiString="f") [0120.129] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ibmiasrw" | out: DestinationString="ibmiasrw") [0120.129] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ibmiasrw", AllocateDestinationString=1 | out: DestinationString="ibmiasrw") returned 0x0 [0120.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7b18 [0120.129] RtlFreeAnsiString (AnsiString="i") [0120.129] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="IBM Domino*" | out: DestinationString="IBM Domino*") [0120.129] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="IBM Domino*", AllocateDestinationString=1 | out: DestinationString="IBM Domino*") returned 0x0 [0120.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7b38 [0120.129] RtlFreeAnsiString (AnsiString="I") [0120.129] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="Simply Accounting Database Connection Manager" | out: DestinationString="Simply Accounting Database Connection Manager") [0120.129] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="Simply Accounting Database Connection Manager", AllocateDestinationString=1 | out: DestinationString="Simply Accounting Database Connection Manager") returned 0x0 [0120.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf5a8 [0120.129] RtlFreeAnsiString (AnsiString="S") [0120.129] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="IASJet" | out: DestinationString="IASJet") [0120.130] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="IASJet", AllocateDestinationString=1 | out: DestinationString="IASJet") returned 0x0 [0120.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4198 [0120.130] RtlFreeAnsiString (AnsiString="I") [0120.130] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="QB*" | out: DestinationString="QB*") [0120.130] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="QB*", AllocateDestinationString=1 | out: DestinationString="QB*") returned 0x0 [0120.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x309fd78 [0120.130] RtlFreeAnsiString (AnsiString="Q") [0120.130] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*sql*" | out: DestinationString="*sql*") [0120.130] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*sql*", AllocateDestinationString=1 | out: DestinationString="*sql*") returned 0x0 [0120.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3db49c0 [0120.130] RtlFreeAnsiString (AnsiString="*") [0120.130] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="sql*" | out: DestinationString="sql*") [0120.130] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="sql*", AllocateDestinationString=1 | out: DestinationString="sql*") returned 0x0 [0120.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3db4858 [0120.130] RtlFreeAnsiString (AnsiString="s") [0120.130] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="QuickBooksDB*" | out: DestinationString="QuickBooksDB*") [0120.130] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="QuickBooksDB*", AllocateDestinationString=1 | out: DestinationString="QuickBooksDB*") returned 0x0 [0120.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dca210 [0120.131] RtlFreeAnsiString (AnsiString="Q") [0120.131] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="IISADMIN" | out: DestinationString="IISADMIN") [0120.131] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="IISADMIN", AllocateDestinationString=1 | out: DestinationString="IISADMIN") returned 0x0 [0120.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7b58 [0120.131] RtlFreeAnsiString (AnsiString="I") [0120.131] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="omsad" | out: DestinationString="omsad") [0120.131] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="omsad", AllocateDestinationString=1 | out: DestinationString="omsad") returned 0x0 [0120.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3db4828 [0120.131] RtlFreeAnsiString (AnsiString="o") [0120.131] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="dc*32" | out: DestinationString="dc*32") [0120.131] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="dc*32", AllocateDestinationString=1 | out: DestinationString="dc*32") returned 0x0 [0120.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3db4f18 [0120.132] RtlFreeAnsiString (AnsiString="d") [0120.132] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="server Administrator" | out: DestinationString="server Administrator") [0120.132] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="server Administrator", AllocateDestinationString=1 | out: DestinationString="server Administrator") returned 0x0 [0120.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e160f0 [0120.132] RtlFreeAnsiString (AnsiString="s") [0120.132] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="wbengine" | out: DestinationString="wbengine") [0120.132] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="wbengine", AllocateDestinationString=1 | out: DestinationString="wbengine") returned 0x0 [0120.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7b78 [0120.132] RtlFreeAnsiString (AnsiString="w") [0120.132] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="mr2kserv" | out: DestinationString="mr2kserv") [0120.132] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="mr2kserv", AllocateDestinationString=1 | out: DestinationString="mr2kserv") returned 0x0 [0120.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7b98 [0120.133] RtlFreeAnsiString (AnsiString="m") [0120.133] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="MSExchange*" | out: DestinationString="MSExchange*") [0120.133] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="MSExchange*", AllocateDestinationString=1 | out: DestinationString="MSExchange*") returned 0x0 [0120.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7bb8 [0120.133] RtlFreeAnsiString (AnsiString="M") [0120.133] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ShadowProtectSvc" | out: DestinationString="ShadowProtectSvc") [0120.133] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ShadowProtectSvc", AllocateDestinationString=1 | out: DestinationString="ShadowProtectSvc") returned 0x0 [0120.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3f00 [0120.133] RtlFreeAnsiString (AnsiString="S") [0120.133] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="SP*4" | out: DestinationString="SP*4") [0120.133] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="SP*4", AllocateDestinationString=1 | out: DestinationString="SP*4") returned 0x0 [0120.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3db4ea0 [0120.133] RtlFreeAnsiString (AnsiString="S") [0120.134] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="teamviewer" | out: DestinationString="teamviewer") [0120.134] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="teamviewer", AllocateDestinationString=1 | out: DestinationString="teamviewer") returned 0x0 [0120.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7bd8 [0120.134] RtlFreeAnsiString (AnsiString="t") [0120.134] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="MMS" | out: DestinationString="MMS") [0120.134] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="MMS", AllocateDestinationString=1 | out: DestinationString="MMS") returned 0x0 [0120.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x309fec8 [0120.134] RtlFreeAnsiString (AnsiString="M") [0120.134] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="AcronisAgent" | out: DestinationString="AcronisAgent") [0120.134] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="AcronisAgent", AllocateDestinationString=1 | out: DestinationString="AcronisAgent") returned 0x0 [0120.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcacd8 [0120.134] RtlFreeAnsiString (AnsiString="A") [0120.134] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ARSM" | out: DestinationString="ARSM") [0120.134] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ARSM", AllocateDestinationString=1 | out: DestinationString="ARSM") returned 0x0 [0120.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3db4ca8 [0120.135] RtlFreeAnsiString (AnsiString="A") [0120.135] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="AcrSch2Svc" | out: DestinationString="AcrSch2Svc") [0120.135] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="AcrSch2Svc", AllocateDestinationString=1 | out: DestinationString="AcrSch2Svc") returned 0x0 [0120.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7bf8 [0120.135] RtlFreeAnsiString (AnsiString="A") [0120.135] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="vsnapvss" | out: DestinationString="vsnapvss") [0120.135] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="vsnapvss", AllocateDestinationString=1 | out: DestinationString="vsnapvss") returned 0x0 [0120.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7c18 [0120.135] RtlFreeAnsiString (AnsiString="v") [0120.135] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="SPXService" | out: DestinationString="SPXService") [0120.135] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="SPXService", AllocateDestinationString=1 | out: DestinationString="SPXService") returned 0x0 [0120.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7c38 [0120.136] RtlFreeAnsiString (AnsiString="S") [0120.136] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="StorageCraft ImageManager" | out: DestinationString="StorageCraft ImageManager") [0120.136] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="StorageCraft ImageManager", AllocateDestinationString=1 | out: DestinationString="StorageCraft ImageManager") returned 0x0 [0120.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfd90 [0120.136] RtlFreeAnsiString (AnsiString="S") [0120.136] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="wrsvc" | out: DestinationString="wrsvc") [0120.136] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="wrsvc", AllocateDestinationString=1 | out: DestinationString="wrsvc") returned 0x0 [0120.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3db4d68 [0120.136] RtlFreeAnsiString (AnsiString="w") [0120.136] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="stc_endpt_svc" | out: DestinationString="stc_endpt_svc") [0120.136] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="stc_endpt_svc", AllocateDestinationString=1 | out: DestinationString="stc_endpt_svc") returned 0x0 [0120.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dcacb0 [0120.136] RtlFreeAnsiString (AnsiString="s") [0120.136] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="acrsch2svc*" | out: DestinationString="acrsch2svc*") [0120.136] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="acrsch2svc*", AllocateDestinationString=1 | out: DestinationString="acrsch2svc*") returned 0x0 [0120.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7c58 [0120.137] RtlFreeAnsiString (AnsiString="a") [0120.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7738 [0120.137] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="reboot" | out: DestinationString="reboot") [0120.137] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="reboot", AllocateDestinationString=1 | out: DestinationString="reboot") returned 0x0 [0120.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db40f0 [0120.137] RtlFreeAnsiString (AnsiString="r") [0120.137] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="restart" | out: DestinationString="restart") [0120.137] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="restart", AllocateDestinationString=1 | out: DestinationString="restart") returned 0x0 [0120.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3db4fc0 [0120.137] RtlFreeAnsiString (AnsiString="r") [0120.138] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="shutdown" | out: DestinationString="shutdown") [0120.138] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="shutdown", AllocateDestinationString=1 | out: DestinationString="shutdown") returned 0x0 [0120.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7c98 [0120.138] RtlFreeAnsiString (AnsiString="s") [0120.138] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="logoff" | out: DestinationString="logoff") [0120.138] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="logoff", AllocateDestinationString=1 | out: DestinationString="logoff") returned 0x0 [0120.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4f90 [0120.138] RtlFreeAnsiString (AnsiString="l") [0120.138] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="back" | out: DestinationString="back") [0120.138] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="back", AllocateDestinationString=1 | out: DestinationString="back") returned 0x0 [0120.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3db4780 [0120.138] RtlFreeAnsiString (AnsiString="b") [0120.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x2ffdef0 [0120.140] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="ipc$" | out: DestinationString="ipc$") [0120.140] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="ipc$", AllocateDestinationString=1 | out: DestinationString="ipc$") returned 0x0 [0120.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3db4df8 [0120.140] RtlFreeAnsiString (AnsiString="i") [0120.140] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="admin$" | out: DestinationString="admin$") [0120.140] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="admin$", AllocateDestinationString=1 | out: DestinationString="admin$") returned 0x0 [0120.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4c90 [0120.140] RtlFreeAnsiString (AnsiString="a") [0120.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7c78 [0120.141] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="psexec.exe" | out: DestinationString="psexec.exe") [0120.141] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="psexec.exe", AllocateDestinationString=1 | out: DestinationString="psexec.exe") returned 0x0 [0120.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7cd8 [0120.141] RtlFreeAnsiString (AnsiString="p") [0120.141] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="system" | out: DestinationString="system") [0120.141] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="system", AllocateDestinationString=1 | out: DestinationString="system") returned 0x0 [0120.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3db4f30 [0120.141] RtlFreeAnsiString (AnsiString="s") [0120.141] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="forti*.exe" | out: DestinationString="forti*.exe") [0120.141] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="forti*.exe", AllocateDestinationString=1 | out: DestinationString="forti*.exe") returned 0x0 [0120.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7cf8 [0120.142] RtlFreeAnsiString (AnsiString="f") [0120.142] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="fmon.exe" | out: DestinationString="fmon.exe") [0120.142] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="fmon.exe", AllocateDestinationString=1 | out: DestinationString="fmon.exe") returned 0x0 [0120.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7d18 [0120.142] RtlFreeAnsiString (AnsiString="f") [0120.142] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="fcaptmon.exe" | out: DestinationString="fcaptmon.exe") [0120.142] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="fcaptmon.exe", AllocateDestinationString=1 | out: DestinationString="fcaptmon.exe") returned 0x0 [0120.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcac88 [0120.142] RtlFreeAnsiString (AnsiString="f") [0120.142] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="FCHelper64.exe" | out: DestinationString="FCHelper64.exe") [0120.142] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="FCHelper64.exe", AllocateDestinationString=1 | out: DestinationString="FCHelper64.exe") returned 0x0 [0120.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dcac60 [0120.142] RtlFreeAnsiString (AnsiString="F") [0120.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7cb8 [0120.142] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*:\\windows*" | out: DestinationString="*:\\windows*") [0120.142] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*:\\windows*", AllocateDestinationString=1 | out: DestinationString="*:\\windows*") returned 0x0 [0120.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7d58 [0120.143] RtlFreeAnsiString (AnsiString="*") [0120.143] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*:\\winnt*" | out: DestinationString="*:\\winnt*") [0120.143] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*:\\winnt*", AllocateDestinationString=1 | out: DestinationString="*:\\winnt*") returned 0x0 [0120.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7d78 [0120.143] RtlFreeAnsiString (AnsiString="*") [0120.143] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*:\\program file*\\vmwar*" | out: DestinationString="*:\\program file*\\vmwar*") [0120.143] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*:\\program file*\\vmwar*", AllocateDestinationString=1 | out: DestinationString="*:\\program file*\\vmwar*") returned 0x0 [0120.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e16080 [0120.143] RtlFreeAnsiString (AnsiString="*") [0120.143] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\Program File*\\Fortinet" | out: DestinationString="*\\Program File*\\Fortinet") [0120.143] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\Program File*\\Fortinet", AllocateDestinationString=1 | out: DestinationString="*\\Program File*\\Fortinet") returned 0x0 [0120.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfd10 [0120.143] RtlFreeAnsiString (AnsiString="*") [0120.143] RtlInitAnsiString (in: DestinationString=0x223fb14, SourceString="*\\Program File*\\Cisco" | out: DestinationString="*\\Program File*\\Cisco") [0120.147] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fb0c, SourceString="*\\Program File*\\Cisco", AllocateDestinationString=1 | out: DestinationString="*\\Program File*\\Cisco") returned 0x0 [0120.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e16160 [0120.148] RtlFreeAnsiString (AnsiString="*") [0120.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffddc0) returned 1 [0120.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf408 [0120.148] GetCurrentProcessId () returned 0x5bc [0120.148] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x3edf410 | out: Wow64Process=0x3edf410) returned 1 [0120.148] RtlGetVersion (in: lpVersionInformation=0x223fa74 | out: lpVersionInformation=0x223fa74*(dwOSVersionInfoSize=0x0, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0120.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0120.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac38 [0120.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcac10 [0120.157] NtQuerySystemTime (in: CurrentTime=0x223fa14 | out: CurrentTime=0x223fa14*=132462176995884000) returned 0x0 [0120.157] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x5fc06575 [0120.157] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x4be20a5a [0120.157] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x7a8fd2d1 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x5dbf7dd [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x7350dd8a [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x26a1ab39 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x4a83d83a [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x1dbb2641 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x96a6f32 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x34c45478 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x53c6f72b [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0xe1b7d91 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x4eee5e79 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x1e89fafc [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x7f7a1640 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x1cdb8b06 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x5857e43d [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x4c61a591 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x21225b87 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x649cb881 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x48a1f5bc [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x1ac12a09 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x1a5853f6 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x3dd7a995 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x5857e43d [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x16d6fee2 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x26f062a2 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x67e69e13 [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x6bb8b68d [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x363c5d0b [0120.158] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x2b4a19b8 [0120.159] RtlRandomEx (in: Seed=0x223f9f8 | out: Seed=0x223f9f8) returned 0x55d8e102 [0120.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0120.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0120.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0120.208] NtQuerySystemTime (in: CurrentTime=0x223f9b8 | out: CurrentTime=0x223f9b8*=132462176996352000) returned 0x0 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x5a4c5a07 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x506a5ec3 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x1113a91f [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x42bacba5 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x1ca27b2a [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x654c752f [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0xa151ea4 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x609fc267 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x4319105a [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x55f59abc [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x7350dd8a [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x1cdb8b06 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x4cb27caa [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x267ccb5d [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x363c5d0b [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x28f85599 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x68d74f2d [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x64e213dc [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x57912e10 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x4c61a591 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x55d8e102 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x7b397763 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x1b733bc5 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x61d7e51a [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x1cb5b23e [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x4c5d4576 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x579aaaf7 [0120.208] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x468e8292 [0120.209] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x483cd966 [0120.209] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x4fa6a95d [0120.209] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x53294244 [0120.209] RtlRandomEx (in: Seed=0x223f9b0 | out: Seed=0x223f9b0) returned 0x36ca40d9 [0120.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0120.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b9f0 [0120.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0120.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b9f0) returned 1 [0120.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0120.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0120.210] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x3dcac38, Length=0x20) returned 0x68814ff5 [0120.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd38e8 [0120.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b9f0 [0120.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0120.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0120.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0120.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b9f0) returned 1 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd38e8) returned 1 [0120.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3b9f0 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcac10) returned 1 [0120.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb) returned 0x2fda0b0 [0120.211] sprintf (in: _Dest=0x2fda0b0, _Format="%0.8x" | out: _Dest="68814ff5") returned 8 [0120.212] RtlInitAnsiString (in: DestinationString=0x223fa14, SourceString="68814ff5" | out: DestinationString="68814ff5") [0120.212] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fa0c, SourceString="68814ff5", AllocateDestinationString=1 | out: DestinationString="68814ff5") returned 0x0 [0120.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7d98 [0120.212] RtlFreeAnsiString (AnsiString="6") [0120.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3db40a8 [0120.212] wcscat (in: _Dest=0x3db40a8, _Source="68814f" | out: _Dest=".68814f") returned=".68814f" [0120.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7) returned 0x2ffddc0 [0120.212] strstr (_Str="{id}-Readme.txt", _SubStr="{id}") returned="{id}-Readme.txt" [0120.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7d38 [0120.212] strstr (_Str="68814F-Readme.txt", _SubStr="{id}") returned 0x0 [0120.212] RtlInitAnsiString (in: DestinationString=0x223fa18, SourceString="68814F-Readme.txt" | out: DestinationString="68814F-Readme.txt") [0120.212] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fa10, SourceString="68814F-Readme.txt", AllocateDestinationString=1 | out: DestinationString="68814F-Readme.txt") returned 0x0 [0120.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3ff0 [0120.212] RtlFreeAnsiString (AnsiString="6") [0120.212] strstr (_Str="{id}-Readme.txt", _SubStr="{id}") returned="{id}-Readme.txt" [0120.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd) returned 0x3e57558 [0120.212] strstr (_Str="*-Readme.txt", _SubStr="{id}") returned 0x0 [0120.212] RtlInitAnsiString (in: DestinationString=0x223fa18, SourceString="*-Readme.txt" | out: DestinationString="*-Readme.txt") [0120.212] RtlAnsiStringToUnicodeString (in: DestinationString=0x223fa10, SourceString="*-Readme.txt", AllocateDestinationString=1 | out: DestinationString="*-Readme.txt") returned 0x0 [0120.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcac10 [0120.213] RtlFreeAnsiString (AnsiString="*") [0120.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d408 [0120.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0120.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab48 [0120.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0120.213] NtQuerySystemTime (in: CurrentTime=0x223f9a4 | out: CurrentTime=0x223f9a4*=132462176996352000) returned 0x0 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x71d94936 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x22bdc4ac [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x675b60e7 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x260bee15 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x4ad7dac5 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x55c70f80 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x1640fcb [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x4b39b334 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x67b95424 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x6db81aaa [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x70d80bcc [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x61268cc7 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x57ca4796 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x66f6e37d [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x7eb87e69 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x3cb9cdd6 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x7fe0150e [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x4db9687 [0120.213] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x1640fcb [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x124a18d4 [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x4950734e [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x3930e60d [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x1ce20f63 [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x161e985d [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x5077ef34 [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x61e32d00 [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x271956f0 [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x2f806d02 [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x1c9e4bf6 [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x31b35471 [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x1e06d5b6 [0120.214] RtlRandomEx (in: Seed=0x223f99c | out: Seed=0x223f99c) returned 0x49d1f36d [0120.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0120.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0120.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0120.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0120.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0120.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3dd38e8 [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0120.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x89) returned 0x32d538 [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0120.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0120.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0120.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd38e8) returned 1 [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd9) returned 0x3dc40a8 [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x125) returned 0x3dd8f28 [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x135) returned 0x3d56498 [0120.216] strstr (_Str="{code_id:\r\nb64}", _SubStr="id") returned="id:\r\nb64}" [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7db8 [0120.216] strstr (_Str="{code_68814f:\r\nb64}", _SubStr="id") returned 0x0 [0120.216] strstr (_Str="{code_68814f:\r\nb64}", _SubStr="b64") returned="b64}" [0120.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13f) returned 0x3d565e0 [0120.216] strstr (_Str="{code_68814f:\r\nzlmGwW8e71E68oKnchqli8LgHiROOvydYqEwqexmVpvfkRQGg6\r\n/KkCxuvcLP30g61u2iBrCXhw5ABuL5iQEhMZ7DRkqHcdxm3c0M\r\nNPVPgWibuOGEGbNh9uqgdh+gHXnMstHgHk6z0JgNwboF0sL3Ns\r\nHXjSq/R6a9G4TpJd15wlMY+UWKXj5K33cI256PiJP0LrN2mZVQ\r\ny7+khqJ1lUhQolvD37S64XT6C/DS60EYzZKEHfBIi388xRo5kl\r\nHMr1JqSdaKtmUXpVilPSUupcCLVlMbUW5KUaVTrA==}", _SubStr="b64") returned 0x0 [0120.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7db8) returned 1 [0120.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 [0120.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8f28) returned 1 [0120.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc40a8) returned 1 [0120.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 [0120.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 [0120.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab48) returned 1 [0120.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0120.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 [0120.217] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .{id}\r\n\r\n--\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down,\r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised.\r\nRebooting/shutdown will cause you to lose files without the possibility of recovery.\r\n\r\n--\r\nOur encryption algorithms are very strong and your files are very well protected,\r\nthe only way to get your files back is to cooperate with us and get the decrypter program.\r\n\r\nDo not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.\r\n\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you one file for free.\r\nJust open our website, upload the encrypted file and get the decrypted file for free.\r\n\r\nAdditionally, you must know that your sensitive data has been stolen by our analyst experts and if you choose to no cooperate with us, you are exposing yourself\r\nto huge penalties with lawsuits and government if we both don't find an agreement. We have seen it before; cases with multi million costs in fines and lawsuits,\r\nnot to mention the company reputation and losing clients trust and the medias calling non-stop for answers. Come chat with us and you could be surprised on how\r\nfast we both can find an agreement without getting this incident public.\r\n\r\n--\r\n\r\nSteps to get access on our website:\r\n\r\n1.Download and install tor-browser: https://torproject.org/\r\n\r\n2.Open our website: {onion1}\r\nIf the website is not available, open another one: {onion2}\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code}", _SubStr="{id}") returned="{id}\r\n\r\n--\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down,\r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised.\r\nRebooting/shutdown will cause you to lose files without the possibility of recovery.\r\n\r\n--\r\nOur encryption algorithms are very strong and your files are very well protected,\r\nthe only way to get your files back is to cooperate with us and get the decrypter program.\r\n\r\nDo not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.\r\n\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you one file for free.\r\nJust open our website, upload the encrypted file and get the decrypted file for free.\r\n\r\nAdditionally, you must know that your sensitive data has been stolen by our analyst experts and if you choose to no cooperate with us, you are exposing yourself\r\nto huge penalties with lawsuits and government if we both don't find an agreement. We have seen it before; cases with multi million costs in fines and lawsuits,\r\nnot to mention the company reputation and losing clients trust and the medias calling non-stop for answers. Come chat with us and you could be surprised on how\r\nfast we both can find an agreement without getting this incident public.\r\n\r\n--\r\n\r\nSteps to get access on our website:\r\n\r\n1.Download and install tor-browser: https://torproject.org/\r\n\r\n2.Open our website: {onion1}\r\nIf the website is not available, open another one: {onion2}\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code}" [0120.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x716) returned 0x30ba000 [0120.217] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .68814f\r\n\r\n--\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down,\r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised.\r\nRebooting/shutdown will cause you to lose files without the possibility of recovery.\r\n\r\n--\r\nOur encryption algorithms are very strong and your files are very well protected,\r\nthe only way to get your files back is to cooperate with us and get the decrypter program.\r\n\r\nDo not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.\r\n\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you one file for free.\r\nJust open our website, upload the encrypted file and get the decrypted file for free.\r\n\r\nAdditionally, you must know that your sensitive data has been stolen by our analyst experts and if you choose to no cooperate with us, you are exposing yourself\r\nto huge penalties with lawsuits and government if we both don't find an agreement. We have seen it before; cases with multi million costs in fines and lawsuits,\r\nnot to mention the company reputation and losing clients trust and the medias calling non-stop for answers. Come chat with us and you could be surprised on how\r\nfast we both can find an agreement without getting this incident public.\r\n\r\n--\r\n\r\nSteps to get access on our website:\r\n\r\n1.Download and install tor-browser: https://torproject.org/\r\n\r\n2.Open our website: {onion1}\r\nIf the website is not available, open another one: {onion2}\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code}", _SubStr="{id}") returned 0x0 [0120.217] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .68814f\r\n\r\n--\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down,\r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised.\r\nRebooting/shutdown will cause you to lose files without the possibility of recovery.\r\n\r\n--\r\nOur encryption algorithms are very strong and your files are very well protected,\r\nthe only way to get your files back is to cooperate with us and get the decrypter program.\r\n\r\nDo not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.\r\n\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you one file for free.\r\nJust open our website, upload the encrypted file and get the decrypted file for free.\r\n\r\nAdditionally, you must know that your sensitive data has been stolen by our analyst experts and if you choose to no cooperate with us, you are exposing yourself\r\nto huge penalties with lawsuits and government if we both don't find an agreement. We have seen it before; cases with multi million costs in fines and lawsuits,\r\nnot to mention the company reputation and losing clients trust and the medias calling non-stop for answers. Come chat with us and you could be surprised on how\r\nfast we both can find an agreement without getting this incident public.\r\n\r\n--\r\n\r\nSteps to get access on our website:\r\n\r\n1.Download and install tor-browser: https://torproject.org/\r\n\r\n2.Open our website: {onion1}\r\nIf the website is not available, open another one: {onion2}\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code}", _SubStr="{onion1}") returned="{onion1}\r\nIf the website is not available, open another one: {onion2}\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code}" [0120.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74c) returned 0x30b5b40 [0120.217] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .68814f\r\n\r\n--\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down,\r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised.\r\nRebooting/shutdown will cause you to lose files without the possibility of recovery.\r\n\r\n--\r\nOur encryption algorithms are very strong and your files are very well protected,\r\nthe only way to get your files back is to cooperate with us and get the decrypter program.\r\n\r\nDo not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.\r\n\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you one file for free.\r\nJust open our website, upload the encrypted file and get the decrypted file for free.\r\n\r\nAdditionally, you must know that your sensitive data has been stolen by our analyst experts and if you choose to no cooperate with us, you are exposing yourself\r\nto huge penalties with lawsuits and government if we both don't find an agreement. We have seen it before; cases with multi million costs in fines and lawsuits,\r\nnot to mention the company reputation and losing clients trust and the medias calling non-stop for answers. Come chat with us and you could be surprised on how\r\nfast we both can find an agreement without getting this incident public.\r\n\r\n--\r\n\r\nSteps to get access on our website:\r\n\r\n1.Download and install tor-browser: https://torproject.org/\r\n\r\n2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\r\nIf the website is not available, open another one: {onion2}\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code}", _SubStr="{onion1}") returned 0x0 [0120.217] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .68814f\r\n\r\n--\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down,\r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised.\r\nRebooting/shutdown will cause you to lose files without the possibility of recovery.\r\n\r\n--\r\nOur encryption algorithms are very strong and your files are very well protected,\r\nthe only way to get your files back is to cooperate with us and get the decrypter program.\r\n\r\nDo not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.\r\n\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you one file for free.\r\nJust open our website, upload the encrypted file and get the decrypted file for free.\r\n\r\nAdditionally, you must know that your sensitive data has been stolen by our analyst experts and if you choose to no cooperate with us, you are exposing yourself\r\nto huge penalties with lawsuits and government if we both don't find an agreement. We have seen it before; cases with multi million costs in fines and lawsuits,\r\nnot to mention the company reputation and losing clients trust and the medias calling non-stop for answers. Come chat with us and you could be surprised on how\r\nfast we both can find an agreement without getting this incident public.\r\n\r\n--\r\n\r\nSteps to get access on our website:\r\n\r\n1.Download and install tor-browser: https://torproject.org/\r\n\r\n2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\r\nIf the website is not available, open another one: {onion2}\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code}", _SubStr="{onion2}") returned="{onion2}\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code}" [0120.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x782) returned 0x30b6538 [0120.218] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .68814f\r\n\r\n--\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down,\r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised.\r\nRebooting/shutdown will cause you to lose files without the possibility of recovery.\r\n\r\n--\r\nOur encryption algorithms are very strong and your files are very well protected,\r\nthe only way to get your files back is to cooperate with us and get the decrypter program.\r\n\r\nDo not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.\r\n\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you one file for free.\r\nJust open our website, upload the encrypted file and get the decrypted file for free.\r\n\r\nAdditionally, you must know that your sensitive data has been stolen by our analyst experts and if you choose to no cooperate with us, you are exposing yourself\r\nto huge penalties with lawsuits and government if we both don't find an agreement. We have seen it before; cases with multi million costs in fines and lawsuits,\r\nnot to mention the company reputation and losing clients trust and the medias calling non-stop for answers. Come chat with us and you could be surprised on how\r\nfast we both can find an agreement without getting this incident public.\r\n\r\n--\r\n\r\nSteps to get access on our website:\r\n\r\n1.Download and install tor-browser: https://torproject.org/\r\n\r\n2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\r\nIf the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code}", _SubStr="{onion2}") returned 0x0 [0120.218] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .68814f\r\n\r\n--\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down,\r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised.\r\nRebooting/shutdown will cause you to lose files without the possibility of recovery.\r\n\r\n--\r\nOur encryption algorithms are very strong and your files are very well protected,\r\nthe only way to get your files back is to cooperate with us and get the decrypter program.\r\n\r\nDo not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.\r\n\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you one file for free.\r\nJust open our website, upload the encrypted file and get the decrypted file for free.\r\n\r\nAdditionally, you must know that your sensitive data has been stolen by our analyst experts and if you choose to no cooperate with us, you are exposing yourself\r\nto huge penalties with lawsuits and government if we both don't find an agreement. We have seen it before; cases with multi million costs in fines and lawsuits,\r\nnot to mention the company reputation and losing clients trust and the medias calling non-stop for answers. Come chat with us and you could be surprised on how\r\nfast we both can find an agreement without getting this incident public.\r\n\r\n--\r\n\r\nSteps to get access on our website:\r\n\r\n1.Download and install tor-browser: https://torproject.org/\r\n\r\n2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\r\nIf the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code}", _SubStr="{code}") returned="{code}" [0120.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8ba) returned 0x7a22710 [0120.218] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .68814f\r\n\r\n--\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down,\r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised.\r\nRebooting/shutdown will cause you to lose files without the possibility of recovery.\r\n\r\n--\r\nOur encryption algorithms are very strong and your files are very well protected,\r\nthe only way to get your files back is to cooperate with us and get the decrypter program.\r\n\r\nDo not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.\r\n\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you one file for free.\r\nJust open our website, upload the encrypted file and get the decrypted file for free.\r\n\r\nAdditionally, you must know that your sensitive data has been stolen by our analyst experts and if you choose to no cooperate with us, you are exposing yourself\r\nto huge penalties with lawsuits and government if we both don't find an agreement. We have seen it before; cases with multi million costs in fines and lawsuits,\r\nnot to mention the company reputation and losing clients trust and the medias calling non-stop for answers. Come chat with us and you could be surprised on how\r\nfast we both can find an agreement without getting this incident public.\r\n\r\n--\r\n\r\nSteps to get access on our website:\r\n\r\n1.Download and install tor-browser: https://torproject.org/\r\n\r\n2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion\r\nIf the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion\r\n\r\n3.Put your personal code in the input form:\r\n\r\n{code_68814f:\r\nzlmGwW8e71E68oKnchqli8LgHiROOvydYqEwqexmVpvfkRQGg6\r\n/KkCxuvcLP30g61u2iBrCXhw5ABuL5iQEhMZ7DRkqHcdxm3c0M\r\nNPVPgWibuOGEGbNh9uqgdh+gHXnMstHgHk6z0JgNwboF0sL3Ns\r\nHXjSq/R6a9G4TpJd15wlMY+UWKXj5K33cI256PiJP0LrN2mZVQ\r\ny7+khqJ1lUhQolvD37S64XT6C/DS60EYzZKEHfBIi388xRo5kl\r\nHMr1JqSdaKtmUXpVilPSUupcCLVlMbUW5KUaVTrA==}", _SubStr="{code}") returned 0x0 [0120.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b6538) returned 1 [0120.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b5b40) returned 1 [0120.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30ba000) returned 1 [0120.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d565e0) returned 1 [0120.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57558) returned 1 [0120.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7d38) returned 1 [0120.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffddc0) returned 1 [0120.218] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x223fb04 | out: lpLuid=0x223fb04*(LowPart=0x14, HighPart=0)) returned 1 [0120.249] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x223fb74 | out: TokenHandle=0x223fb74*=0x8c0) returned 0x0 [0120.249] AdjustTokenPrivileges (in: TokenHandle=0x8c0, DisableAllPrivileges=0, NewState=0x223fb0c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0120.249] GetLastError () returned 0x514 [0120.249] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x223fafc | out: lpLuid=0x223fafc*(LowPart=0x1d, HighPart=0)) returned 1 [0120.250] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x223fb6c | out: TokenHandle=0x223fb6c*=0xbcc) returned 0x0 [0120.250] AdjustTokenPrivileges (in: TokenHandle=0xbcc, DisableAllPrivileges=0, NewState=0x223fb04*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0120.250] GetLastError () returned 0x514 [0120.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c40a0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0 [0120.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c3e10, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x684 [0120.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c3ef0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934 [0120.253] Sleep (dwMilliseconds=0x0) [0120.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3ea4d50 [0120.326] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3ea4d50, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3ea4d50, ResultLength=0x0) returned 0xc0000004 [0120.328] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ea4d50, Size=0x2048) returned 0x3f13b90 [0120.328] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.330] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x306c) returned 0x3f13b90 [0120.330] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.331] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x4090) returned 0x3f13b90 [0120.331] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.333] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x50b4) returned 0x3f13b90 [0120.333] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.334] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x60d8) returned 0x3f13b90 [0120.334] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.336] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x70fc) returned 0x3f13b90 [0120.336] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.337] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x8120) returned 0x3f13b90 [0120.338] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.339] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x9144) returned 0x3f13b90 [0120.339] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.340] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xa168) returned 0x3f13b90 [0120.341] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.342] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xb18c) returned 0x3f13b90 [0120.342] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.344] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xc1b0) returned 0x3f13b90 [0120.344] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.346] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xd1d4) returned 0x3f13b90 [0120.346] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.348] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xe1f8) returned 0x3f13b90 [0120.348] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.350] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xf21c) returned 0x3f13b90 [0120.350] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.352] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x10240) returned 0x3f13b90 [0120.352] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.354] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x11264) returned 0x3f13b90 [0120.354] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.356] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x12288) returned 0x3f13b90 [0120.356] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.358] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x132ac) returned 0x3f13b90 [0120.358] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.361] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x142d0) returned 0x3f13b90 [0120.361] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.440] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x152f4) returned 0x3f13b90 [0120.441] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.443] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x16318) returned 0x3f13b90 [0120.444] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x1733c) returned 0x3f13b90 [0120.447] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x18360) returned 0x3f13b90 [0120.450] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x19384) returned 0x3f13b90 [0120.452] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.455] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x1a3a8) returned 0x3f13b90 [0120.455] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x1b3cc) returned 0x3f13b90 [0120.458] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x1c3f0) returned 0x3f13b90 [0120.461] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x1d414) returned 0x3f13b90 [0120.464] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.469] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x1e438) returned 0x3f13b90 [0120.469] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x1f45c) returned 0x3f13b90 [0120.503] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.507] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x20480) returned 0x3f13b90 [0120.507] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.511] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x214a4) returned 0x3f13b90 [0120.511] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.514] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x224c8) returned 0x3f13b90 [0120.514] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.518] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x234ec) returned 0x3f13b90 [0120.518] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.522] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x24510) returned 0x3f13b90 [0120.522] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.526] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x25534) returned 0x3f13b90 [0120.526] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.529] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x26558) returned 0x3f13b90 [0120.529] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x3f13b90, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0x0 [0120.533] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.533] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.533] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.533] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.533] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.533] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.533] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.546] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.546] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.546] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.546] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.546] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.546] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.546] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.546] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.547] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.548] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.549] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.550] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.551] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.552] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.553] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.554] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.555] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.556] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.557] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.558] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.559] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.560] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.561] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.562] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.563] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.564] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.565] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.565] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.565] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.565] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.565] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.565] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.565] NtOpenProcess (in: ProcessHandle=0x223fb58, DesiredAccess=0x440, ObjectAttributes=0x223fb3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb34*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x223fb58*=0x0) returned 0xc0000022 [0120.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x210) returned 0x3d9ebd8 [0120.573] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x21e0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x3d9ebd8, Length=0x210, ResultLength=0x223fb48 | out: VirtualMemoryInformation=0x3d9ebd8*(SectionFileName.Length=0x82, SectionFileName.MaximumLength=0x84, SectionFileName.Buffer="\\Device\\HarddiskVolume1\\Windows\\System32\\en-US\\KernelBase.dll.mui"), ResultLength=0x223fb48) returned 0x0 [0120.573] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0120.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e57528 [0120.573] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3e57528 | out: lpBuffer="C:\\") returned 0x4 [0120.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x309fd68 [0120.574] wcscpy (in: _Dest=0x309fd68, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3d9e560 [0120.574] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x3d9e560, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0120.574] wcscat (in: _Dest=0x3d9e560, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0120.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf2d0 [0120.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9e560) returned 1 [0120.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309fd68) returned 1 [0120.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57528) returned 1 [0120.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9ebd8) returned 1 [0120.574] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x21e0000) returned 0x0 [0120.574] NtClose (Handle=0x10d4) returned 0x0 [0120.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf2d0) returned 1 [0120.575] NtClose (Handle=0x554) returned 0x0 [0120.575] NtClose (Handle=0xf8c) returned 0x0 [0120.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13b90) returned 1 [0120.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1770) returned 0x3ea4d50 [0120.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57528 [0120.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cc400, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c [0120.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cc4b0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x554 [0120.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0120.624] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0120.624] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a22fd8 [0120.624] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.624] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x306c) returned 0x7a22fd8 [0120.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.625] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x4090) returned 0x7a22fd8 [0120.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.625] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x50b4) returned 0x7a22fd8 [0120.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.625] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x60d8) returned 0x7a22fd8 [0120.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x70fc) returned 0x7a22fd8 [0120.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x8120) returned 0x7a22fd8 [0120.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x9144) returned 0x7a22fd8 [0120.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xa168) returned 0x7a22fd8 [0120.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xb18c) returned 0x7a22fd8 [0120.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xc1b0) returned 0x7a22fd8 [0120.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xd1d4) returned 0x7a22fd8 [0120.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xe1f8) returned 0x7a22fd8 [0120.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0x0 [0120.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22fd8) returned 1 [0120.634] NtOpenProcess (in: ProcessHandle=0x223fb24, DesiredAccess=0x400, ObjectAttributes=0x223fb38*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223fb30*(UniqueProcess=0x1ac, UniqueThread=0x0) | out: ProcessHandle=0x223fb24*=0x0) returned 0xc0000022 [0120.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2fa978 [0120.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0120.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0120.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a22fd8 [0120.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x306c) returned 0x7a22fd8 [0120.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x4090) returned 0x7a22fd8 [0120.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x50b4) returned 0x7a22fd8 [0120.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x60d8) returned 0x7a22fd8 [0120.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x70fc) returned 0x7a22fd8 [0120.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x8120) returned 0x7a22fd8 [0120.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x9144) returned 0x7a22fd8 [0120.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xa168) returned 0x7a22fd8 [0120.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xb18c) returned 0x7a22fd8 [0120.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xc1b0) returned 0x7a22fd8 [0120.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xd1d4) returned 0x7a22fd8 [0120.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xe1f8) returned 0x7a22fd8 [0120.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0x0 [0120.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22fd8) returned 1 [0120.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fa978) returned 1 [0120.638] SetErrorMode (uMode=0x8003) returned 0x1 [0120.638] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0120.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e57828 [0120.638] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3e57828 | out: lpBuffer="C:\\") returned 0x4 [0120.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x309fd68 [0120.638] wcscpy (in: _Dest=0x309fd68, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.638] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0120.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x309fd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4 [0120.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57828) returned 1 [0120.640] Sleep (dwMilliseconds=0x3e8) [0122.666] Sleep (dwMilliseconds=0x3e8) [0133.104] Sleep (dwMilliseconds=0x3e8) [0142.404] Sleep (dwMilliseconds=0x3e8) [0151.449] Sleep (dwMilliseconds=0x3e8) [0158.660] Sleep (dwMilliseconds=0x3e8) [0167.795] Sleep (dwMilliseconds=0x3e8) [0170.856] Sleep (dwMilliseconds=0x3e8) [0172.297] Sleep (dwMilliseconds=0x3e8) [0175.823] Sleep (dwMilliseconds=0x3e8) [0176.867] Sleep (dwMilliseconds=0x3e8) [0178.728] Sleep (dwMilliseconds=0x3e8) [0181.555] Sleep (dwMilliseconds=0x3e8) [0184.414] Sleep (dwMilliseconds=0x3e8) [0185.656] Sleep (dwMilliseconds=0x3e8) [0188.284] Sleep (dwMilliseconds=0x3e8) [0199.637] Sleep (dwMilliseconds=0x3e8) [0201.916] Sleep (dwMilliseconds=0x3e8) [0203.302] Sleep (dwMilliseconds=0x3e8) [0205.193] Sleep (dwMilliseconds=0x3e8) [0210.638] Sleep (dwMilliseconds=0x3e8) [0211.707] Sleep (dwMilliseconds=0x3e8) [0216.061] Sleep (dwMilliseconds=0x3e8) [0218.888] Sleep (dwMilliseconds=0x3e8) [0219.958] Sleep (dwMilliseconds=0x3e8) [0221.002] Sleep (dwMilliseconds=0x3e8) [0222.046] Sleep (dwMilliseconds=0x3e8) [0225.107] Sleep (dwMilliseconds=0x3e8) [0226.818] Sleep (dwMilliseconds=0x3e8) [0227.831] Sleep (dwMilliseconds=0x3e8) [0229.468] Sleep (dwMilliseconds=0x3e8) [0230.479] Sleep (dwMilliseconds=0x3e8) [0231.735] Sleep (dwMilliseconds=0x3e8) [0232.988] Sleep (dwMilliseconds=0x3e8) [0234.066] Sleep (dwMilliseconds=0x3e8) [0235.297] Sleep (dwMilliseconds=0x3e8) [0236.420] Sleep (dwMilliseconds=0x3e8) [0237.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0237.443] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0237.444] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7c38360 [0237.445] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7c38360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7c38360, ResultLength=0x0) returned 0xc0000004 [0237.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38360, Size=0x306c) returned 0x7b3a320 [0237.446] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b3a320, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b3a320, ResultLength=0x0) returned 0xc0000004 [0237.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a320, Size=0x4090) returned 0x7b32308 [0237.447] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.448] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0237.448] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0237.449] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.450] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0237.450] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x7cc0008 [0237.451] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7cc0008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7cc0008, ResultLength=0x0) returned 0xc0000004 [0237.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc0008, Size=0x9144) returned 0x7cc0008 [0237.452] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7cc0008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7cc0008, ResultLength=0x0) returned 0xc0000004 [0237.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc0008, Size=0xa168) returned 0x3eca800 [0237.453] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.454] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0237.454] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.456] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0237.456] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.457] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0237.457] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0237.459] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xf21c) returned 0x3eca800 [0237.460] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3eca800, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x10240) returned 0x3eca800 [0237.461] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3eca800, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x11264) returned 0x7c78348 [0237.463] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0237.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x3e8ed50 [0237.465] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3e8ed50, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x3e8ed50, ResultLength=0x0) returned 0xc0000004 [0237.466] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e8ed50, Size=0x132ac) returned 0x3e8ed50 [0237.466] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x3e8ed50, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x3e8ed50, ResultLength=0x0) returned 0xc0000004 [0237.468] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e8ed50, Size=0x142d0) returned 0x7ad9cb0 [0237.468] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x152f4) returned 0x7ad9cb0 [0237.470] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.472] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x16318) returned 0x7ad9cb0 [0237.472] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x1733c) returned 0x7ad9cb0 [0237.474] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.476] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x18360) returned 0x7ad9cb0 [0237.476] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.478] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x19384) returned 0x7ad9cb0 [0237.478] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x1a3a8) returned 0x7ad9cb0 [0237.480] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.482] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x1b3cc) returned 0x7ad9cb0 [0237.482] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.484] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x1c3f0) returned 0x7ad9cb0 [0237.484] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.486] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x1d414) returned 0x7ad9cb0 [0237.486] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.489] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x1e438) returned 0x7ad9cb0 [0237.489] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x1f45c) returned 0x7ad9cb0 [0237.492] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.494] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x20480) returned 0x7ad9cb0 [0237.494] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7ad9cb0, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0237.496] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x214a4) returned 0x7de0388 [0237.500] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7de0388, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x7de0388, ResultLength=0x0) returned 0xc0000004 [0237.502] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7de0388, Size=0x224c8) returned 0x7b88308 [0237.505] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.508] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x234ec) returned 0x7b88308 [0237.508] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.510] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x24510) returned 0x7b88308 [0237.510] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.513] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x25534) returned 0x7b88308 [0237.513] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.516] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x26558) returned 0x7b88308 [0237.516] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.519] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x2757c) returned 0x7b88308 [0237.519] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x2757c, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.521] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x285a0) returned 0x7b88308 [0237.521] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x285a0, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.524] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x295c4) returned 0x7b88308 [0237.524] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x295c4, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.527] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x2a5e8) returned 0x7b88308 [0237.527] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x2a5e8, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.530] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x2b60c) returned 0x7b88308 [0237.530] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x2b60c, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.533] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x2c630) returned 0x7b88308 [0237.533] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x2c630, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x2d654) returned 0x7b88308 [0237.538] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x2d654, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x2e678) returned 0x7b88308 [0237.541] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x2e678, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x2f69c) returned 0x7b88308 [0237.545] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x2f69c, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.548] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x306c0) returned 0x7b88308 [0237.548] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x306c0, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x316e4) returned 0x7b88308 [0237.551] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x316e4, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x32708) returned 0x7b88308 [0237.555] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x32708, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.558] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x3372c) returned 0x7b88308 [0237.558] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x3372c, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x34750) returned 0x7b88308 [0237.561] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x34750, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.565] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x35774) returned 0x7b88308 [0237.565] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x35774, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x36798) returned 0x7b88308 [0237.569] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x36798, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.577] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x377bc) returned 0x7b88308 [0237.577] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x377bc, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.581] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x387e0) returned 0x7b88308 [0237.581] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x387e0, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.585] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x39804) returned 0x7b88308 [0237.585] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x39804, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.588] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x3a828) returned 0x7b88308 [0237.589] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x3a828, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.592] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x3b84c) returned 0x7b88308 [0237.592] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x3b84c, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.597] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x3c870) returned 0x7b88308 [0237.597] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x3c870, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.601] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x3d894) returned 0x7b88308 [0237.601] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x3d894, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.605] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x3e8b8) returned 0x7b88308 [0237.605] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x3e8b8, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.609] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x3f8dc) returned 0x7b88308 [0237.609] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7b88308, Length=0x3f8dc, ResultLength=0x0 | out: SystemInformation=0x7b88308, ResultLength=0x0) returned 0xc0000004 [0237.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88308, Size=0x40900) returned 0x7d10388 [0237.616] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7d10388, Length=0x40900, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0237.621] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x41924) returned 0x7d90008 [0237.625] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7d90008, Length=0x41924, ResultLength=0x0 | out: SystemInformation=0x7d90008, ResultLength=0x0) returned 0xc0000004 [0237.630] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d90008, Size=0x42948) returned 0x7d90008 [0237.630] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7d90008, Length=0x42948, ResultLength=0x0 | out: SystemInformation=0x7d90008, ResultLength=0x0) returned 0xc0000004 [0237.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d90008, Size=0x4396c) returned 0x7d90008 [0237.635] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7d90008, Length=0x4396c, ResultLength=0x0 | out: SystemInformation=0x7d90008, ResultLength=0x0) returned 0xc0000004 [0237.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d90008, Size=0x44990) returned 0x7d90008 [0237.640] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7d90008, Length=0x44990, ResultLength=0x0 | out: SystemInformation=0x7d90008, ResultLength=0x0) returned 0xc0000004 [0237.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d90008, Size=0x459b4) returned 0x7d90008 [0237.645] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7d90008, Length=0x459b4, ResultLength=0x0 | out: SystemInformation=0x7d90008, ResultLength=0x0) returned 0xc0000004 [0237.649] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d90008, Size=0x469d8) returned 0x7d90008 [0237.649] NtQuerySystemInformation (in: SystemInformationClass=0x40, SystemInformation=0x7d90008, Length=0x469d8, ResultLength=0x0 | out: SystemInformation=0x7d90008, ResultLength=0x0) returned 0x0 [0237.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0237.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0237.654] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7c38360 [0237.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7c38360, ResultLength=0x0) returned 0xc0000004 [0237.654] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38360, Size=0x306c) returned 0x7b3a320 [0237.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a320, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b3a320, ResultLength=0x0) returned 0xc0000004 [0237.654] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a320, Size=0x4090) returned 0x7b32308 [0237.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.654] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0237.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.655] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0237.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.655] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0237.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.655] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x7cc0008 [0237.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc0008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7cc0008, ResultLength=0x0) returned 0xc0000004 [0237.655] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc0008, Size=0x9144) returned 0x7cc0008 [0237.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc0008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7cc0008, ResultLength=0x0) returned 0xc0000004 [0237.655] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc0008, Size=0xa168) returned 0x3eca800 [0237.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.656] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0237.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.656] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0237.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.656] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0237.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.656] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0237.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0x0 [0237.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43800 [0237.891] QueryFullProcessImageNameW (in: hProcess=0x1f88, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Windows\\System32\\taskhost.exe", lpdwSize=0x223fb18) returned 1 [0237.892] NtClose (Handle=0x1f88) returned 0x0 [0237.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.892] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fd68, Size=0x8) returned 0x309fef8 [0237.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0237.892] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0237.892] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7c38360 [0237.892] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7c38360, ResultLength=0x0) returned 0xc0000004 [0237.893] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38360, Size=0x306c) returned 0x7b3a320 [0237.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a320, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b3a320, ResultLength=0x0) returned 0xc0000004 [0237.893] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a320, Size=0x4090) returned 0x7b32308 [0237.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.893] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0237.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.893] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0237.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.893] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0237.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x7cc0008 [0237.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc0008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7cc0008, ResultLength=0x0) returned 0xc0000004 [0237.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc0008, Size=0x9144) returned 0x7cc0008 [0237.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc0008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7cc0008, ResultLength=0x0) returned 0xc0000004 [0237.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc0008, Size=0xa168) returned 0x3eca800 [0237.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0237.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0237.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0237.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0237.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0x0 [0237.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2f610 [0237.898] QueryFullProcessImageNameW (in: hProcess=0x1f88, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Windows\\System32\\dwm.exe", lpdwSize=0x223fb18) returned 1 [0237.899] NtClose (Handle=0x1f88) returned 0x0 [0237.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43800) returned 1 [0237.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309fef8, Size=0xc) returned 0x3e43800 [0237.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0237.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0237.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7c38360 [0237.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7c38360, ResultLength=0x0) returned 0xc0000004 [0237.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38360, Size=0x306c) returned 0x7b3a320 [0237.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a320, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b3a320, ResultLength=0x0) returned 0xc0000004 [0237.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a320, Size=0x4090) returned 0x7b32308 [0237.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0237.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0237.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0237.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0237.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x7cc0008 [0237.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc0008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7cc0008, ResultLength=0x0) returned 0xc0000004 [0237.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc0008, Size=0x9144) returned 0x7cc0008 [0237.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc0008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7cc0008, ResultLength=0x0) returned 0xc0000004 [0237.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc0008, Size=0xa168) returned 0x3eca800 [0237.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0237.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0237.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0237.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0237.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0237.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0x0 [0237.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2f610 [0237.916] QueryFullProcessImageNameW (in: hProcess=0x1f88, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Mail\\michelorganisationselse.exe", lpdwSize=0x223fb18) returned 1 [0237.916] NtClose (Handle=0x1f88) returned 0x0 [0237.916] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x704, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1f88) returned 0x0 [0237.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e43a10 [0237.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfad0) returned 1 [0237.916] NtDuplicateObject (in: SourceProcessHandle=0x1f88, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1948) returned 0x0 [0237.918] QueryFullProcessImageNameW (in: hProcess=0x1948, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft.NET\\laptop-distributed-pasta.exe", lpdwSize=0x223fb18) returned 1 [0237.918] NtClose (Handle=0x1948) returned 0x0 [0237.918] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x23c, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1948) returned 0x0 [0237.918] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e43a10, Size=0x18) returned 0x7a2f610 [0237.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56330) returned 1 [0237.918] NtDuplicateObject (in: SourceProcessHandle=0x1948, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x484) returned 0x0 [0237.919] QueryFullProcessImageNameW (in: hProcess=0x484, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Adobe\\gear_panel.exe", lpdwSize=0x223fb18) returned 1 [0237.920] NtClose (Handle=0x484) returned 0x0 [0237.920] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x7dc, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x484) returned 0x0 [0237.920] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a2f610, Size=0x24) returned 0x7a38010 [0237.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.920] NtDuplicateObject (in: SourceProcessHandle=0x484, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xfdc) returned 0x0 [0237.921] QueryFullProcessImageNameW (in: hProcess=0xfdc, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Portable Devices\\liz-limits.exe", lpdwSize=0x223fb18) returned 1 [0237.921] NtClose (Handle=0xfdc) returned 0x0 [0237.921] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x7a8, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xfdc) returned 0x0 [0237.921] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a38010, Size=0x30) returned 0x3e79368 [0237.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.921] NtDuplicateObject (in: SourceProcessHandle=0xfdc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1d7c) returned 0x0 [0237.922] QueryFullProcessImageNameW (in: hProcess=0x1d7c, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Mozilla Maintenance Service\\coins dir.exe", lpdwSize=0x223fb18) returned 1 [0237.923] NtClose (Handle=0x1d7c) returned 0x0 [0237.923] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x218, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1d7c) returned 0x0 [0237.923] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e79368, Size=0x3c) returned 0x3e56330 [0237.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.923] NtDuplicateObject (in: SourceProcessHandle=0x1d7c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x23b4) returned 0x0 [0237.924] QueryFullProcessImageNameW (in: hProcess=0x23b4, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Defender\\combination-holly.exe", lpdwSize=0x223fb18) returned 1 [0237.924] NtClose (Handle=0x23b4) returned 0x0 [0237.924] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x578, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x23b4) returned 0x0 [0237.924] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e56330, Size=0x48) returned 0x3e84718 [0237.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0237.925] NtDuplicateObject (in: SourceProcessHandle=0x23b4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x13f8) returned 0x0 [0237.926] QueryFullProcessImageNameW (in: hProcess=0x13f8, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Mozilla Firefox\\prototype-racks.exe", lpdwSize=0x223fb18) returned 1 [0237.926] NtClose (Handle=0x13f8) returned 0x0 [0237.926] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x788, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x13f8) returned 0x0 [0237.926] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e84718, Size=0x54) returned 0x2fe4988 [0237.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0237.926] NtDuplicateObject (in: SourceProcessHandle=0x13f8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1db8) returned 0x0 [0237.927] QueryFullProcessImageNameW (in: hProcess=0x1db8, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Uninstall Information\\glow.exe", lpdwSize=0x223fb18) returned 1 [0237.927] NtClose (Handle=0x1db8) returned 0x0 [0237.928] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x7f4, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1db8) returned 0x0 [0237.928] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fe4988, Size=0x60) returned 0x3e1da90 [0237.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.928] NtDuplicateObject (in: SourceProcessHandle=0x1db8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1ff0) returned 0x0 [0237.929] QueryFullProcessImageNameW (in: hProcess=0x1ff0, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft Sync Framework\\wma prime accommodate.exe", lpdwSize=0x223fb18) returned 1 [0237.929] NtClose (Handle=0x1ff0) returned 0x0 [0237.929] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x750, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1ff0) returned 0x0 [0237.929] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1da90, Size=0x6c) returned 0x3015508 [0237.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfad0) returned 1 [0237.929] NtDuplicateObject (in: SourceProcessHandle=0x1ff0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xba8) returned 0x0 [0237.930] QueryFullProcessImageNameW (in: hProcess=0xba8, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Mail\\container.exe", lpdwSize=0x223fb18) returned 1 [0237.931] NtClose (Handle=0xba8) returned 0x0 [0237.931] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x43c, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xba8) returned 0x0 [0237.931] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3015508, Size=0x78) returned 0x3e1a318 [0237.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.931] NtDuplicateObject (in: SourceProcessHandle=0xba8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x2158) returned 0x0 [0237.932] QueryFullProcessImageNameW (in: hProcess=0x2158, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Media Player\\valuation bibliography.exe", lpdwSize=0x223fb18) returned 1 [0237.932] NtClose (Handle=0x2158) returned 0x0 [0237.932] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x7d0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x2158) returned 0x0 [0237.932] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e1a318, Size=0x84) returned 0x3df13b8 [0237.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfad0) returned 1 [0237.932] NtDuplicateObject (in: SourceProcessHandle=0x2158, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1d88) returned 0x0 [0237.933] QueryFullProcessImageNameW (in: hProcess=0x1d88, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Reference Assemblies\\phone_abortion_verbal.exe", lpdwSize=0x223fb18) returned 1 [0237.934] NtClose (Handle=0x1d88) returned 0x0 [0237.934] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x75c, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1d88) returned 0x0 [0237.934] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df13b8, Size=0x90) returned 0x32c9f0 [0237.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfad0) returned 1 [0237.934] NtDuplicateObject (in: SourceProcessHandle=0x1d88, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x2438) returned 0x0 [0237.935] QueryFullProcessImageNameW (in: hProcess=0x2438, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Reference Assemblies\\harder runs disclosure.exe", lpdwSize=0x223fb18) returned 1 [0237.935] NtClose (Handle=0x2438) returned 0x0 [0237.935] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x358, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x2438) returned 0x0 [0237.935] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x32c9f0, Size=0x9c) returned 0x3053720 [0237.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfad0) returned 1 [0237.935] NtDuplicateObject (in: SourceProcessHandle=0x2438, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x578) returned 0x0 [0237.937] QueryFullProcessImageNameW (in: hProcess=0x578, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\lamb-posted.exe", lpdwSize=0x223fb18) returned 1 [0237.937] NtClose (Handle=0x578) returned 0x0 [0237.937] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x158, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x578) returned 0x0 [0237.937] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3053720, Size=0xa8) returned 0x35aed8 [0237.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.937] NtDuplicateObject (in: SourceProcessHandle=0x578, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xd80) returned 0x0 [0237.938] QueryFullProcessImageNameW (in: hProcess=0xd80, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft Sync Framework\\delayed orientation.exe", lpdwSize=0x223fb18) returned 1 [0237.938] NtClose (Handle=0xd80) returned 0x0 [0237.938] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x6bc, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xd80) returned 0x0 [0237.938] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x35aed8, Size=0xb4) returned 0x332268 [0237.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0237.939] NtDuplicateObject (in: SourceProcessHandle=0xd80, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x19d8) returned 0x0 [0237.947] QueryFullProcessImageNameW (in: hProcess=0x19d8, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Sidebar\\dentists_provincial_coating.exe", lpdwSize=0x223fb18) returned 1 [0237.947] NtClose (Handle=0x19d8) returned 0x0 [0237.947] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x214, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x19d8) returned 0x0 [0237.947] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x332268, Size=0xc0) returned 0x3e39630 [0237.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56330) returned 1 [0237.948] NtDuplicateObject (in: SourceProcessHandle=0x19d8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1628) returned 0x0 [0237.949] QueryFullProcessImageNameW (in: hProcess=0x1628, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\elegant.exe", lpdwSize=0x223fb18) returned 1 [0237.949] NtClose (Handle=0x1628) returned 0x0 [0237.949] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x41c, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1628) returned 0x0 [0237.949] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e39630, Size=0xcc) returned 0x3011fe0 [0237.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.949] NtDuplicateObject (in: SourceProcessHandle=0x1628, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1d50) returned 0x0 [0237.950] QueryFullProcessImageNameW (in: hProcess=0x1d50, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft Sync Framework\\reviewer.exe", lpdwSize=0x223fb18) returned 1 [0237.951] NtClose (Handle=0x1d50) returned 0x0 [0237.951] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x598, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1d50) returned 0x0 [0237.951] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3011fe0, Size=0xd8) returned 0x2c8c68 [0237.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.951] NtDuplicateObject (in: SourceProcessHandle=0x1d50, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x3b0) returned 0x0 [0237.952] QueryFullProcessImageNameW (in: hProcess=0x3b0, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft Office\\functions_masturbating.exe", lpdwSize=0x223fb18) returned 1 [0237.952] NtClose (Handle=0x3b0) returned 0x0 [0237.952] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x6a0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x3b0) returned 0x0 [0237.952] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c8c68, Size=0xe4) returned 0x3ddf4c8 [0237.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfad0) returned 1 [0237.952] NtDuplicateObject (in: SourceProcessHandle=0x3b0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1788) returned 0x0 [0237.953] QueryFullProcessImageNameW (in: hProcess=0x1788, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Mozilla Maintenance Service\\3dftp.exe", lpdwSize=0x223fb18) returned 1 [0237.954] NtClose (Handle=0x1788) returned 0x0 [0237.954] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x588, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1788) returned 0x0 [0237.954] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ddf4c8, Size=0xf0) returned 0x3dadd20 [0237.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.954] NtDuplicateObject (in: SourceProcessHandle=0x1788, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xad0) returned 0x0 [0237.955] QueryFullProcessImageNameW (in: hProcess=0xad0, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Reference Assemblies\\absolutetelnet.exe", lpdwSize=0x223fb18) returned 1 [0237.955] NtClose (Handle=0xad0) returned 0x0 [0237.955] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x614, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xad0) returned 0x0 [0237.955] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dadd20, Size=0xfc) returned 0x2fb0b0 [0237.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0237.956] NtDuplicateObject (in: SourceProcessHandle=0xad0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1258) returned 0x0 [0237.957] QueryFullProcessImageNameW (in: hProcess=0x1258, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Mozilla Maintenance Service\\alftp.exe", lpdwSize=0x223fb18) returned 1 [0237.957] NtClose (Handle=0x1258) returned 0x0 [0237.957] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x6c8, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1258) returned 0x0 [0237.957] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fb0b0, Size=0x108) returned 0x3deca58 [0237.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.957] NtDuplicateObject (in: SourceProcessHandle=0x1258, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1a60) returned 0x0 [0237.958] QueryFullProcessImageNameW (in: hProcess=0x1a60, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Google\\bitkinex.exe", lpdwSize=0x223fb18) returned 1 [0237.958] NtClose (Handle=0x1a60) returned 0x0 [0237.958] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x7b8, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1a60) returned 0x0 [0237.958] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3deca58, Size=0x114) returned 0x3d55968 [0237.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.959] NtDuplicateObject (in: SourceProcessHandle=0x1a60, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1960) returned 0x0 [0237.960] QueryFullProcessImageNameW (in: hProcess=0x1960, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft.NET\\coreftp.exe", lpdwSize=0x223fb18) returned 1 [0237.960] NtClose (Handle=0x1960) returned 0x0 [0237.960] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x7f0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1960) returned 0x0 [0237.960] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d55968, Size=0x120) returned 0x3d55a90 [0237.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.960] NtDuplicateObject (in: SourceProcessHandle=0x1960, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xf64) returned 0x0 [0237.961] QueryFullProcessImageNameW (in: hProcess=0xf64, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft Synchronization Services\\far.exe", lpdwSize=0x223fb18) returned 1 [0237.961] NtClose (Handle=0xf64) returned 0x0 [0237.961] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x810, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xf64) returned 0x0 [0237.962] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d55a90, Size=0x12c) returned 0x3dd76c8 [0237.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43a10) returned 1 [0237.962] NtDuplicateObject (in: SourceProcessHandle=0xf64, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xb9c) returned 0x0 [0237.963] QueryFullProcessImageNameW (in: hProcess=0xb9c, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\filezilla.exe", lpdwSize=0x223fb18) returned 1 [0237.963] NtClose (Handle=0xb9c) returned 0x0 [0237.963] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x820, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xb9c) returned 0x0 [0237.963] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dd76c8, Size=0x138) returned 0x7dd91b8 [0237.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.963] NtDuplicateObject (in: SourceProcessHandle=0xb9c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x5b0) returned 0x0 [0237.964] QueryFullProcessImageNameW (in: hProcess=0x5b0, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Internet Explorer\\flashfxp.exe", lpdwSize=0x223fb18) returned 1 [0237.965] NtClose (Handle=0x5b0) returned 0x0 [0237.965] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x830, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x5b0) returned 0x0 [0237.965] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7dd91b8, Size=0x144) returned 0x3e0c040 [0237.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.966] NtDuplicateObject (in: SourceProcessHandle=0x5b0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1760) returned 0x0 [0237.967] QueryFullProcessImageNameW (in: hProcess=0x1760, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft Office\\fling.exe", lpdwSize=0x223fb18) returned 1 [0237.967] NtClose (Handle=0x1760) returned 0x0 [0237.967] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x840, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1760) returned 0x0 [0237.967] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0c040, Size=0x150) returned 0x3e0b830 [0237.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.967] NtDuplicateObject (in: SourceProcessHandle=0x1760, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1730) returned 0x0 [0237.968] QueryFullProcessImageNameW (in: hProcess=0x1730, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Google\\foxmailincmail.exe", lpdwSize=0x223fb18) returned 1 [0237.969] NtClose (Handle=0x1730) returned 0x0 [0237.969] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x850, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1730) returned 0x0 [0237.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e0b830, Size=0x15c) returned 0x3dcd2f8 [0237.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0237.969] NtDuplicateObject (in: SourceProcessHandle=0x1730, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xc50) returned 0x0 [0237.970] QueryFullProcessImageNameW (in: hProcess=0xc50, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Adobe\\gmailnotifierpro.exe", lpdwSize=0x223fb18) returned 1 [0237.970] NtClose (Handle=0xc50) returned 0x0 [0237.970] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x860, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xc50) returned 0x0 [0237.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dcd2f8, Size=0x168) returned 0x2fee950 [0237.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0237.971] NtDuplicateObject (in: SourceProcessHandle=0xc50, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x2164) returned 0x0 [0237.972] QueryFullProcessImageNameW (in: hProcess=0x2164, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Journal\\icq.exe", lpdwSize=0x223fb18) returned 1 [0237.972] NtClose (Handle=0x2164) returned 0x0 [0237.972] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x870, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x2164) returned 0x0 [0237.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fee950, Size=0x174) returned 0x3d5ef50 [0237.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43a10) returned 1 [0237.973] NtDuplicateObject (in: SourceProcessHandle=0x2164, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1fd0) returned 0x0 [0237.974] QueryFullProcessImageNameW (in: hProcess=0x1fd0, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Defender\\leechftp.exe", lpdwSize=0x223fb18) returned 1 [0237.974] NtClose (Handle=0x1fd0) returned 0x0 [0237.974] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x880, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1fd0) returned 0x0 [0237.974] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d5ef50, Size=0x180) returned 0x3d5edc8 [0237.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.974] NtDuplicateObject (in: SourceProcessHandle=0x1fd0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xcf8) returned 0x0 [0237.975] QueryFullProcessImageNameW (in: hProcess=0xcf8, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\DVD Maker\\ncftp.exe", lpdwSize=0x223fb18) returned 1 [0237.976] NtClose (Handle=0xcf8) returned 0x0 [0237.976] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x890, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xcf8) returned 0x0 [0237.976] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d5edc8, Size=0x18c) returned 0x3074d00 [0237.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.976] NtDuplicateObject (in: SourceProcessHandle=0xcf8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x191c) returned 0x0 [0237.977] QueryFullProcessImageNameW (in: hProcess=0x191c, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\DVD Maker\\notepad.exe", lpdwSize=0x223fb18) returned 1 [0237.977] NtClose (Handle=0x191c) returned 0x0 [0237.977] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x8a0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x191c) returned 0x0 [0237.977] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3074d00, Size=0x198) returned 0x3df7e40 [0237.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.977] NtDuplicateObject (in: SourceProcessHandle=0x191c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1c64) returned 0x0 [0237.978] QueryFullProcessImageNameW (in: hProcess=0x1c64, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Mozilla Maintenance Service\\operamail.exe", lpdwSize=0x223fb18) returned 1 [0237.979] NtClose (Handle=0x1c64) returned 0x0 [0237.979] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x8b0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1c64) returned 0x0 [0237.979] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3df7e40, Size=0x1a4) returned 0x3e755a8 [0237.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.979] NtDuplicateObject (in: SourceProcessHandle=0x1c64, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1204) returned 0x0 [0237.980] QueryFullProcessImageNameW (in: hProcess=0x1204, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Defender\\pidgin.exe", lpdwSize=0x223fb18) returned 1 [0237.980] NtClose (Handle=0x1204) returned 0x0 [0237.980] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x8d0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1204) returned 0x0 [0237.980] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e755a8, Size=0x1b0) returned 0x3e76520 [0237.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.980] NtDuplicateObject (in: SourceProcessHandle=0x1204, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xed8) returned 0x0 [0237.982] QueryFullProcessImageNameW (in: hProcess=0xed8, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Portable Devices\\scriptftp.exe", lpdwSize=0x223fb18) returned 1 [0237.982] NtClose (Handle=0xed8) returned 0x0 [0237.982] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x8e0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xed8) returned 0x0 [0237.982] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e76520, Size=0x1bc) returned 0x3decbb8 [0237.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.982] NtDuplicateObject (in: SourceProcessHandle=0xed8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1c4c) returned 0x0 [0237.983] QueryFullProcessImageNameW (in: hProcess=0x1c4c, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft.NET\\skype.exe", lpdwSize=0x223fb18) returned 1 [0237.983] NtClose (Handle=0x1c4c) returned 0x0 [0237.983] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x8f0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1c4c) returned 0x0 [0237.983] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3decbb8, Size=0x1c8) returned 0x300c470 [0237.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.984] NtDuplicateObject (in: SourceProcessHandle=0x1c4c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x12c4) returned 0x0 [0237.985] QueryFullProcessImageNameW (in: hProcess=0x12c4, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Sidebar\\smartftp.exe", lpdwSize=0x223fb18) returned 1 [0237.985] NtClose (Handle=0x12c4) returned 0x0 [0237.985] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x900, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x12c4) returned 0x0 [0237.985] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x300c470, Size=0x1d4) returned 0x30af718 [0237.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.985] NtDuplicateObject (in: SourceProcessHandle=0x12c4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1dd8) returned 0x0 [0237.987] QueryFullProcessImageNameW (in: hProcess=0x1dd8, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Journal\\totalcmd.exe", lpdwSize=0x223fb18) returned 1 [0237.988] NtClose (Handle=0x1dd8) returned 0x0 [0237.988] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x920, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1dd8) returned 0x0 [0237.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30af718, Size=0x1e0) returned 0x3dccf88 [0237.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.988] NtDuplicateObject (in: SourceProcessHandle=0x1dd8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xec4) returned 0x0 [0237.989] QueryFullProcessImageNameW (in: hProcess=0xec4, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows NT\\trillian.exe", lpdwSize=0x223fb18) returned 1 [0237.989] NtClose (Handle=0xec4) returned 0x0 [0237.989] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x930, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xec4) returned 0x0 [0237.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3dccf88, Size=0x1ec) returned 0x2b4288 [0237.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.989] NtDuplicateObject (in: SourceProcessHandle=0xec4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x20e8) returned 0x0 [0237.990] QueryFullProcessImageNameW (in: hProcess=0x20e8, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Common Files\\webdrive.exe", lpdwSize=0x223fb18) returned 1 [0237.991] NtClose (Handle=0x20e8) returned 0x0 [0237.991] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x940, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x20e8) returned 0x0 [0237.991] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2b4288, Size=0x1f8) returned 0x2b4288 [0237.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.991] NtDuplicateObject (in: SourceProcessHandle=0x20e8, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x23cc) returned 0x0 [0237.992] QueryFullProcessImageNameW (in: hProcess=0x23cc, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\DVD Maker\\whatsapp.exe", lpdwSize=0x223fb18) returned 1 [0237.992] NtClose (Handle=0x23cc) returned 0x0 [0237.992] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x950, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x23cc) returned 0x0 [0237.992] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2b4288, Size=0x204) returned 0x2c0c08 [0237.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0237.993] NtDuplicateObject (in: SourceProcessHandle=0x23cc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1574) returned 0x0 [0237.994] QueryFullProcessImageNameW (in: hProcess=0x1574, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft.NET\\winscp.exe", lpdwSize=0x223fb18) returned 1 [0237.994] NtClose (Handle=0x1574) returned 0x0 [0237.994] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x960, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1574) returned 0x0 [0237.994] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2c0c08, Size=0x210) returned 0x7a4de60 [0237.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0237.994] NtDuplicateObject (in: SourceProcessHandle=0x1574, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x2144) returned 0x0 [0237.996] QueryFullProcessImageNameW (in: hProcess=0x2144, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Defender\\yahoomessenger.exe", lpdwSize=0x223fb18) returned 1 [0237.996] NtClose (Handle=0x2144) returned 0x0 [0237.996] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x970, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x2144) returned 0x0 [0237.996] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a4de60, Size=0x21c) returned 0x2ff0508 [0237.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0237.997] NtDuplicateObject (in: SourceProcessHandle=0x2144, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1488) returned 0x0 [0237.998] QueryFullProcessImageNameW (in: hProcess=0x1488, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Internet Explorer\\active-charge.exe", lpdwSize=0x223fb18) returned 1 [0237.998] NtClose (Handle=0x1488) returned 0x0 [0237.998] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x980, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1488) returned 0x0 [0237.998] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2ff0508, Size=0x228) returned 0x2fc9a0 [0237.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0237.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0237.998] NtDuplicateObject (in: SourceProcessHandle=0x1488, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1d00) returned 0x0 [0237.999] QueryFullProcessImageNameW (in: hProcess=0x1d00, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\accupos.exe", lpdwSize=0x223fb18) returned 1 [0238.000] NtClose (Handle=0x1d00) returned 0x0 [0238.000] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x990, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1d00) returned 0x0 [0238.000] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fc9a0, Size=0x234) returned 0x2fc9a0 [0238.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0238.000] NtDuplicateObject (in: SourceProcessHandle=0x1d00, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1c50) returned 0x0 [0238.001] QueryFullProcessImageNameW (in: hProcess=0x1c50, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Internet Explorer\\afr38.exe", lpdwSize=0x223fb18) returned 1 [0238.001] NtClose (Handle=0x1c50) returned 0x0 [0238.001] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x9a0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1c50) returned 0x0 [0238.001] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fc9a0, Size=0x240) returned 0x2fc9a0 [0238.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0238.002] NtDuplicateObject (in: SourceProcessHandle=0x1c50, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1450) returned 0x0 [0238.003] QueryFullProcessImageNameW (in: hProcess=0x1450, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Defender\\aldelo.exe", lpdwSize=0x223fb18) returned 1 [0238.003] NtClose (Handle=0x1450) returned 0x0 [0238.003] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x9b0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1450) returned 0x0 [0238.003] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fc9a0, Size=0x24c) returned 0x2fc9a0 [0238.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0238.003] NtDuplicateObject (in: SourceProcessHandle=0x1450, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x208c) returned 0x0 [0238.004] QueryFullProcessImageNameW (in: hProcess=0x208c, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\MSBuild\\ccv_server.exe", lpdwSize=0x223fb18) returned 1 [0238.005] NtClose (Handle=0x208c) returned 0x0 [0238.005] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x9c0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x208c) returned 0x0 [0238.005] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2fc9a0, Size=0x258) returned 0x3eb0980 [0238.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb918) returned 1 [0238.005] NtDuplicateObject (in: SourceProcessHandle=0x208c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xce4) returned 0x0 [0238.006] QueryFullProcessImageNameW (in: hProcess=0xce4, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\MSBuild\\centralcreditcard.exe", lpdwSize=0x223fb18) returned 1 [0238.006] NtClose (Handle=0xce4) returned 0x0 [0238.006] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x9d0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xce4) returned 0x0 [0238.006] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eb0980, Size=0x264) returned 0x3eb0980 [0238.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0238.007] NtDuplicateObject (in: SourceProcessHandle=0xce4, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1410) returned 0x0 [0238.008] QueryFullProcessImageNameW (in: hProcess=0x1410, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Journal\\creditservice.exe", lpdwSize=0x223fb18) returned 1 [0238.008] NtClose (Handle=0x1410) returned 0x0 [0238.008] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x9e0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1410) returned 0x0 [0238.008] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eb0980, Size=0x270) returned 0x36dc68 [0238.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0238.008] NtDuplicateObject (in: SourceProcessHandle=0x1410, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1174) returned 0x0 [0238.009] QueryFullProcessImageNameW (in: hProcess=0x1174, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\edcsvr.exe", lpdwSize=0x223fb18) returned 1 [0238.010] NtClose (Handle=0x1174) returned 0x0 [0238.010] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0x9f0, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1174) returned 0x0 [0238.010] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x36dc68, Size=0x27c) returned 0x34c530 [0238.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0238.010] NtDuplicateObject (in: SourceProcessHandle=0x1174, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1708) returned 0x0 [0238.011] QueryFullProcessImageNameW (in: hProcess=0x1708, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft Sync Framework\\fpos.exe", lpdwSize=0x223fb18) returned 1 [0238.011] NtClose (Handle=0x1708) returned 0x0 [0238.011] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0xa00, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1708) returned 0x0 [0238.011] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x34c530, Size=0x288) returned 0x3e56f48 [0238.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0238.011] NtDuplicateObject (in: SourceProcessHandle=0x1708, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x11cc) returned 0x0 [0238.013] QueryFullProcessImageNameW (in: hProcess=0x11cc, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\isspos.exe", lpdwSize=0x223fb18) returned 1 [0238.013] NtClose (Handle=0x11cc) returned 0x0 [0238.013] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0xa10, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x11cc) returned 0x0 [0238.013] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e56f48, Size=0x294) returned 0x378430 [0238.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0238.013] NtDuplicateObject (in: SourceProcessHandle=0x11cc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x10cc) returned 0x0 [0238.014] QueryFullProcessImageNameW (in: hProcess=0x10cc, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Media Player\\mxslipstream.exe", lpdwSize=0x223fb18) returned 1 [0238.014] NtClose (Handle=0x10cc) returned 0x0 [0238.014] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0xa20, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x10cc) returned 0x0 [0238.014] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x378430, Size=0x2a0) returned 0x378430 [0238.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0238.014] NtDuplicateObject (in: SourceProcessHandle=0x10cc, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xe54) returned 0x0 [0238.016] QueryFullProcessImageNameW (in: hProcess=0xe54, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft Office\\omnipos.exe", lpdwSize=0x223fb18) returned 1 [0238.016] NtClose (Handle=0xe54) returned 0x0 [0238.016] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0xa30, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xe54) returned 0x0 [0238.016] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x378430, Size=0x2ac) returned 0x30661b0 [0238.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0238.016] NtDuplicateObject (in: SourceProcessHandle=0xe54, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x14c0) returned 0x0 [0238.017] QueryFullProcessImageNameW (in: hProcess=0x14c0, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Microsoft.NET\\spcwin.exe", lpdwSize=0x223fb18) returned 1 [0238.017] NtClose (Handle=0x14c0) returned 0x0 [0238.017] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0xa40, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x14c0) returned 0x0 [0238.017] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30661b0, Size=0x2b8) returned 0x30b1a88 [0238.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0238.018] NtDuplicateObject (in: SourceProcessHandle=0x14c0, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0xf9c) returned 0x0 [0238.019] QueryFullProcessImageNameW (in: hProcess=0xf9c, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Journal\\spgagentservice.exe", lpdwSize=0x223fb18) returned 1 [0238.019] NtClose (Handle=0xf9c) returned 0x0 [0238.019] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0xa50, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0xf9c) returned 0x0 [0238.019] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x30b1a88, Size=0x2c4) returned 0x3e163f0 [0238.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0238.019] NtDuplicateObject (in: SourceProcessHandle=0xf9c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1284) returned 0x0 [0238.020] QueryFullProcessImageNameW (in: hProcess=0x1284, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Windows Photo Viewer\\utg2.exe", lpdwSize=0x223fb18) returned 1 [0238.020] NtClose (Handle=0x1284) returned 0x0 [0238.021] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0xa60, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1284) returned 0x0 [0238.021] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e163f0, Size=0x2d0) returned 0x2d6f08 [0238.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2f610) returned 1 [0238.021] NtDuplicateObject (in: SourceProcessHandle=0x1284, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x1d68) returned 0x0 [0238.022] QueryFullProcessImageNameW (in: hProcess=0x1d68, dwFlags=0x0, lpExeName=0x3d9faf0, lpdwSize=0x223fb18 | out: lpExeName="C:\\Program Files\\Internet Explorer\\daughterinitiallatitude.exe", lpdwSize=0x223fb18) returned 1 [0238.022] NtClose (Handle=0x1d68) returned 0x0 [0238.022] NtOpenProcess (in: ProcessHandle=0x223fb14, DesiredAccess=0x441, ObjectAttributes=0x223faf8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x223faf0*(UniqueProcess=0xa70, UniqueThread=0x0) | out: ProcessHandle=0x223fb14*=0x1d68) returned 0x0 [0238.022] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x2d6f08, Size=0x2dc) returned 0x3d4fbe0 [0238.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d9faf0) returned 1 [0238.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfad0) returned 1 [0238.022] NtDuplicateObject (in: SourceProcessHandle=0x1d68, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x223fb48, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x223fb48*=0x11d0) returned 0x0 [0238.023] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0238.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e43a10 [0238.023] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3e43a10 | out: lpBuffer="C:\\") returned 0x4 [0238.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x309fef8 [0238.023] wcscpy (in: _Dest=0x309fef8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0238.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3da0a08 [0238.023] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x3da0a08, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19 [0238.023] wcscat (in: _Dest=0x3da0a08, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\" [0238.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84718 [0238.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee10e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0238.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0238.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0238.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0238.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b98) returned 1 [0238.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43800) returned 1 [0238.110] Sleep (dwMilliseconds=0x3e8) [0239.110] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x0, nSize=0x223fb74 | out: lpBuffer=0x0, nSize=0x223fb74) returned 0 [0239.110] GetLastError () returned 0xea [0239.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e603d8 [0239.110] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x3e603d8, nSize=0x223fb74 | out: lpBuffer="CRH2YWU7", nSize=0x223fb74) returned 1 [0239.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e60938 [0239.110] wcscpy (in: _Dest=0x3e60938, _Source="\\\\" | out: _Dest="\\\\") returned="\\\\" [0239.110] wcscat (in: _Dest=0x3e60938, _Source="CRH2YWU7" | out: _Dest="\\\\CRH2YWU7") returned="\\\\CRH2YWU7" [0239.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4) returned 0x3de24f0 [0239.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e607b8 [0239.110] wcscpy (in: _Dest=0x3e607b8, _Source="\\\\CRH2YWU7" | out: _Dest="\\\\CRH2YWU7") returned="\\\\CRH2YWU7" [0239.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e60938) returned 1 [0239.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e603d8) returned 1 [0239.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cb700, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c [0239.111] Sleep (dwMilliseconds=0x3e8) [0240.619] Sleep (dwMilliseconds=0x3e8) [0241.716] Sleep (dwMilliseconds=0x3e8) [0243.004] Sleep (dwMilliseconds=0x3e8) [0244.303] Sleep (dwMilliseconds=0x3e8) [0245.358] Sleep (dwMilliseconds=0x3e8) [0246.364] Sleep (dwMilliseconds=0x3e8) [0247.378] Sleep (dwMilliseconds=0x3e8) [0248.391] Sleep (dwMilliseconds=0x3e8) [0249.405] Sleep (dwMilliseconds=0x3e8) [0250.420] Sleep (dwMilliseconds=0x3e8) [0251.472] Sleep (dwMilliseconds=0x3e8) [0252.479] Sleep (dwMilliseconds=0x3e8) [0253.541] Sleep (dwMilliseconds=0x3e8) [0254.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3744e0 [0254.601] SHGetFolderPathW (in: hwnd=0x0, csidl=16, hToken=0x0, dwFlags=0x0, pszPath=0x3744e0 | out: pszPath="C:\\Users\\EEBsYm5\\Desktop") returned 0x0 [0254.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6248 [0254.601] wcscpy (in: _Dest=0x2fe6248, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0254.601] wcscat (in: _Dest=0x2fe6248, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0254.601] wcscat (in: _Dest=0x2fe6248, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0254.601] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x107c [0254.602] WriteFile (in: hFile=0x107c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x223fad8, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x223fad8*=0x8b9, lpOverlapped=0x0) returned 1 [0254.604] CloseHandle (hObject=0x107c) returned 1 [0254.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20a) returned 0x3726b0 [0254.605] GetSystemDirectoryW (in: lpBuffer=0x3726b0, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0254.605] wcscat (in: _Dest=0x3726b0, _Source="\\notepad.exe" | out: _Dest="C:\\Windows\\system32\\notepad.exe") returned="C:\\Windows\\system32\\notepad.exe" [0254.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e7a6e8 [0254.605] wcscpy (in: _Dest=0x3e7a6e8, _Source="C:\\Windows\\system32\\notepad.exe" | out: _Dest="C:\\Windows\\system32\\notepad.exe") returned="C:\\Windows\\system32\\notepad.exe" [0254.605] wcscat (in: _Dest=0x3e7a6e8, _Source=" " | out: _Dest="C:\\Windows\\system32\\notepad.exe ") returned="C:\\Windows\\system32\\notepad.exe " [0254.605] wcscat (in: _Dest=0x3e7a6e8, _Source="\"" | out: _Dest="C:\\Windows\\system32\\notepad.exe \"") returned="C:\\Windows\\system32\\notepad.exe \"" [0254.605] wcscat (in: _Dest=0x3e7a6e8, _Source="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" | out: _Dest="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0254.606] wcscat (in: _Dest=0x3e7a6e8, _Source="\"" | out: _Dest="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt\"") returned="C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt\"" [0254.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7a6e8) returned 1 [0254.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3726b0) returned 1 [0254.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6248) returned 1 [0254.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3744e0) returned 1 [0254.702] ImpersonateLoggedOnUser (hToken=0x0) returned 0 [0254.703] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5 [0254.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e58140 [0254.703] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x3e58140 | out: lpBuffer="C:\\") returned 0x4 [0254.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0254.703] wcscpy (in: _Dest=0x3e79368, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0254.703] wcscat (in: _Dest=0x3e79368, _Source="68814F-Readme.txt" | out: _Dest="C:\\68814F-Readme.txt") returned="C:\\68814F-Readme.txt" [0254.703] CreateFileW (lpFileName="C:\\68814F-Readme.txt" (normalized: "c:\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0254.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58140) returned 1 Thread: id = 116 os_tid = 0xfe0 [0120.265] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0120.265] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0120.266] CoUninitialize () [0120.266] Sleep (dwMilliseconds=0xea60) [0131.437] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0131.437] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0131.439] CoUninitialize () [0131.439] Sleep (dwMilliseconds=0xea60) [0142.853] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0142.853] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0142.854] CoUninitialize () [0142.854] Sleep (dwMilliseconds=0xea60) [0153.464] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0153.464] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0153.464] CoUninitialize () [0153.464] Sleep (dwMilliseconds=0xea60) [0163.794] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0163.794] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0163.795] CoUninitialize () [0163.795] Sleep (dwMilliseconds=0xea60) [0174.265] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0174.265] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0174.266] CoUninitialize () [0174.266] Sleep (dwMilliseconds=0xea60) [0184.960] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0184.960] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0184.960] CoUninitialize () [0184.960] Sleep (dwMilliseconds=0xea60) [0195.246] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0195.246] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0195.247] CoUninitialize () [0195.247] Sleep (dwMilliseconds=0xea60) [0205.355] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0205.356] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0205.356] CoUninitialize () [0205.356] Sleep (dwMilliseconds=0xea60) [0215.916] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0215.916] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0215.917] CoUninitialize () [0215.917] Sleep (dwMilliseconds=0xea60) [0226.836] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0226.836] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0226.837] CoUninitialize () [0226.837] Sleep (dwMilliseconds=0xea60) [0236.853] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0236.853] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0236.854] CoUninitialize () [0236.854] Sleep (dwMilliseconds=0xea60) [0247.253] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0247.253] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0247.254] CoUninitialize () [0247.254] Sleep (dwMilliseconds=0xea60) [0257.985] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0257.986] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0257.986] CoUninitialize () [0257.986] Sleep (dwMilliseconds=0xea60) [0268.205] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0268.205] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0268.206] CoUninitialize () [0268.206] Sleep (dwMilliseconds=0xea60) Thread: id = 117 os_tid = 0xfe4 [0120.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3ea4d50 [0120.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3ea4d50, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3ea4d50, ResultLength=0x0) returned 0xc0000004 [0120.289] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ea4d50, Size=0x2048) returned 0x3f13b90 [0120.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.289] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x306c) returned 0x3f13b90 [0120.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.290] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x4090) returned 0x3f13b90 [0120.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.290] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x50b4) returned 0x3f13b90 [0120.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.290] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x60d8) returned 0x3f13b90 [0120.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.291] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x70fc) returned 0x3f13b90 [0120.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.291] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x8120) returned 0x3f13b90 [0120.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.291] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x9144) returned 0x3f13b90 [0120.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.291] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xa168) returned 0x3f13b90 [0120.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.292] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xb18c) returned 0x3f13b90 [0120.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.292] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xc1b0) returned 0x3f13b90 [0120.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.292] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xd1d4) returned 0x3f13b90 [0120.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0120.293] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xe1f8) returned 0x3f13b90 [0120.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0x0 [0120.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2ffddc0 [0120.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ffddc0) returned 1 [0120.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e57558 [0120.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57558) returned 1 [0120.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7df8 [0120.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7df8 [0120.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7df8 [0120.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7df8 [0120.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57558 [0120.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57558) returned 1 [0120.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57558 [0120.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57558) returned 1 [0120.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dd0090 [0120.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e48d98 [0120.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48d98) returned 1 [0120.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0120.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0120.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e15f68 [0120.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 [0120.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3cf0 [0120.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7df8 [0120.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0090 [0120.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0090 [0120.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0120.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e15f68 [0120.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 [0120.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48d98 [0120.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48d98) returned 1 [0120.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7df8 [0120.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0120.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7df8 [0120.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7df8 [0120.299] NtOpenProcess (in: ProcessHandle=0x472fdd4, DesiredAccess=0x1, ObjectAttributes=0x472fdb8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x472fdb0*(UniqueProcess=0x67c, UniqueThread=0x0) | out: ProcessHandle=0x472fdd4*=0xb3c) returned 0x0 [0120.299] NtTerminateProcess (ProcessHandle=0xb3c, ExitStatus=0x0) returned 0x0 [0120.308] NtClose (Handle=0xb3c) returned 0x0 [0120.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57528 [0120.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57528) returned 1 [0120.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7df8 [0120.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0120.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e160b8 [0120.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e160b8) returned 1 [0120.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57528 [0120.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57528) returned 1 [0120.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7df8 [0120.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.310] NtOpenProcess (in: ProcessHandle=0x472fdd4, DesiredAccess=0x1, ObjectAttributes=0x472fdb8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x472fdb0*(UniqueProcess=0x8c0, UniqueThread=0x0) | out: ProcessHandle=0x472fdd4*=0xb3c) returned 0x0 [0120.310] NtTerminateProcess (ProcessHandle=0xb3c, ExitStatus=0x0) returned 0x0 [0120.311] NtClose (Handle=0xb3c) returned 0x0 [0120.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7df8 [0120.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7df8 [0120.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0120.311] NtOpenProcess (in: ProcessHandle=0x472fdd4, DesiredAccess=0x1, ObjectAttributes=0x472fdb8*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x472fdb0*(UniqueProcess=0x910, UniqueThread=0x0) | out: ProcessHandle=0x472fdd4*=0xb3c) returned 0x0 [0120.312] NtTerminateProcess (ProcessHandle=0xb3c, ExitStatus=0x0) returned 0x0 [0120.312] NtClose (Handle=0xb3c) returned 0x0 [0120.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7df8 [0120.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0120.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3cf0 [0120.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7df8 [0120.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7df8 [0120.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0120.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e160b8 [0120.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e160b8) returned 1 [0120.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3cf0 [0120.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7df8 [0120.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7df8 [0120.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7df8 [0120.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3cf0 [0120.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7df8 [0120.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3cf0 [0120.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7df8 [0120.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dd0090 [0120.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0120.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7df8 [0120.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7df8 [0120.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7df8) returned 1 [0120.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f13b90) returned 1 [0120.317] Sleep (dwMilliseconds=0x64) [0120.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3ea4d50 [0120.479] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3ea4d50, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3ea4d50, ResultLength=0x0) returned 0xc0000004 [0120.479] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3ea4d50, Size=0x2048) returned 0x3f31fd0 [0120.479] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.479] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0x306c) returned 0x3f31fd0 [0120.479] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0x4090) returned 0x3f31fd0 [0120.480] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0x50b4) returned 0x3f31fd0 [0120.480] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.480] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0x60d8) returned 0x3f31fd0 [0120.481] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.481] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0x70fc) returned 0x3f31fd0 [0120.481] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.481] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0x8120) returned 0x3f31fd0 [0120.481] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.481] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0x9144) returned 0x3f31fd0 [0120.481] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.482] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0xa168) returned 0x3f31fd0 [0120.482] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.482] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0xb18c) returned 0x3f31fd0 [0120.482] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.483] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0xc1b0) returned 0x3f31fd0 [0120.483] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.483] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0xd1d4) returned 0x3f31fd0 [0120.483] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f31fd0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f31fd0, ResultLength=0x0) returned 0xc0000004 [0120.483] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f31fd0, Size=0xe1f8) returned 0x7a22fd8 [0120.486] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0x0 [0120.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0120.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309fd68) returned 1 [0120.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e57528 [0120.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57528) returned 1 [0120.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7dd8 [0120.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7dd8 [0120.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7dd8 [0120.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7dd8 [0120.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57528 [0120.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57528) returned 1 [0120.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57528 [0120.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57528) returned 1 [0120.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dd0090 [0120.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e48d98 [0120.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48d98) returned 1 [0120.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0120.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0120.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e15f68 [0120.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 [0120.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3cf0 [0120.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7dd8 [0120.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0090 [0120.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0090 [0120.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0120.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e15f68 [0120.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 [0120.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48d98 [0120.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48d98) returned 1 [0120.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7dd8 [0120.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0120.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7dd8 [0120.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57528 [0120.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57528) returned 1 [0120.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7dd8 [0120.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0120.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e15f68 [0120.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 [0120.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57528 [0120.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57528) returned 1 [0120.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7dd8 [0120.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7dd8 [0120.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7dd8 [0120.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7dd8 [0120.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0120.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3cf0 [0120.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7dd8 [0120.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7dd8 [0120.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0120.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e15f68 [0120.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 [0120.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3cf0 [0120.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7dd8 [0120.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7dd8 [0120.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7dd8 [0120.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3cf0 [0120.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7dd8 [0120.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3cf0 [0120.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7dd8 [0120.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dd0090 [0120.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0120.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7dd8 [0120.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7dd8 [0120.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7dd8) returned 1 [0120.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22fd8) returned 1 [0120.502] Sleep (dwMilliseconds=0x64) [0120.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0120.648] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0120.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a22fd8 [0120.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x306c) returned 0x7a22fd8 [0120.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x4090) returned 0x7a22fd8 [0120.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x50b4) returned 0x7a22fd8 [0120.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x60d8) returned 0x7a22fd8 [0120.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x70fc) returned 0x7a22fd8 [0120.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x8120) returned 0x7a22fd8 [0120.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x9144) returned 0x7a22fd8 [0120.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.661] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xa168) returned 0x7a22fd8 [0120.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.661] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xb18c) returned 0x7a22fd8 [0120.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.661] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xc1b0) returned 0x7a22fd8 [0120.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.661] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xd1d4) returned 0x7a22fd8 [0120.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.662] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xe1f8) returned 0x7a22fd8 [0120.662] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0x0 [0120.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309ff58 [0120.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309ff58) returned 1 [0120.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e57828 [0120.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57828) returned 1 [0120.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7e38 [0120.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7e38 [0120.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7e38 [0120.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7e38 [0120.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57828 [0120.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57828) returned 1 [0120.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57828 [0120.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57828) returned 1 [0120.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dd0090 [0120.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e48c78 [0120.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48c78) returned 1 [0120.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0120.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0120.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e15f68 [0120.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 [0120.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3cf0 [0120.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7e38 [0120.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0090 [0120.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0090 [0120.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0120.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e15f68 [0120.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 [0120.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48c78 [0120.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48c78) returned 1 [0120.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7e38 [0120.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0120.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7e38 [0120.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57828 [0120.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57828) returned 1 [0120.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7e38 [0120.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0120.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e15f68 [0120.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 [0120.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57828 [0120.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57828) returned 1 [0120.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7e38 [0120.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e38) returned 1 [0120.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7e38 [0120.672] Sleep (dwMilliseconds=0x64) [0120.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0120.950] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0120.950] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a22fd8 [0120.951] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.951] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x306c) returned 0x7a22fd8 [0120.951] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.951] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x4090) returned 0x7a22fd8 [0120.951] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.951] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x50b4) returned 0x7a22fd8 [0120.951] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.952] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x60d8) returned 0x7a22fd8 [0120.952] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.952] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x70fc) returned 0x7a22fd8 [0120.952] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.952] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x8120) returned 0x7a22fd8 [0120.952] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.952] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0x9144) returned 0x7a22fd8 [0120.952] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.953] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xa168) returned 0x7a22fd8 [0120.953] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.953] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xb18c) returned 0x7a22fd8 [0120.953] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.953] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xc1b0) returned 0x7a22fd8 [0120.953] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.953] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xd1d4) returned 0x7a22fd8 [0120.953] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0xc0000004 [0120.954] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a22fd8, Size=0xe1f8) returned 0x7a22fd8 [0120.954] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a22fd8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a22fd8, ResultLength=0x0) returned 0x0 [0120.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0120.954] Sleep (dwMilliseconds=0x64) [0121.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0121.396] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0121.397] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a29008 [0121.398] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a29008, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a29008, ResultLength=0x0) returned 0xc0000004 [0121.398] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a29008, Size=0x306c) returned 0x3f13b90 [0121.398] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.398] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x4090) returned 0x3f13b90 [0121.398] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.398] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x50b4) returned 0x3f13b90 [0121.398] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x60d8) returned 0x3f13b90 [0121.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x70fc) returned 0x3f13b90 [0121.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x8120) returned 0x3f13b90 [0121.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.399] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0x9144) returned 0x3f13b90 [0121.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.400] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xa168) returned 0x3f13b90 [0121.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.400] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xb18c) returned 0x3f13b90 [0121.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.400] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xc1b0) returned 0x3f13b90 [0121.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.401] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xd1d4) returned 0x3f13b90 [0121.401] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.401] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xe1f8) returned 0x3f13b90 [0121.401] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0xc0000004 [0121.401] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f13b90, Size=0xf21c) returned 0x3f13b90 [0121.401] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f13b90, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3f13b90, ResultLength=0x0) returned 0x0 [0121.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0121.402] Sleep (dwMilliseconds=0x64) [0121.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0121.665] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0121.665] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a28000 [0121.665] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a28000, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a28000, ResultLength=0x0) returned 0xc0000004 [0121.666] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a28000, Size=0x306c) returned 0x7a28000 [0121.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a28000, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a28000, ResultLength=0x0) returned 0xc0000004 [0121.666] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a28000, Size=0x4090) returned 0x3f33b90 [0121.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0121.666] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x50b4) returned 0x3f33b90 [0121.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0121.666] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x60d8) returned 0x3f33b90 [0121.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0121.667] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x70fc) returned 0x3f33b90 [0121.667] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0121.667] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x8120) returned 0x3f33b90 [0121.667] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0121.667] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x9144) returned 0x3f33b90 [0121.667] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0121.667] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xa168) returned 0x3f33b90 [0121.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0121.668] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xb18c) returned 0x3f33b90 [0121.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0121.668] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xc1b0) returned 0x3f33b90 [0121.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0121.668] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xd1d4) returned 0x7a30038 [0121.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a30038, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a30038, ResultLength=0x0) returned 0xc0000004 [0121.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a30038, Size=0xe1f8) returned 0x7a30038 [0121.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a30038, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a30038, ResultLength=0x0) returned 0xc0000004 [0121.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a30038, Size=0xf21c) returned 0x7a30038 [0121.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a30038, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7a30038, ResultLength=0x0) returned 0x0 [0121.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0121.678] Sleep (dwMilliseconds=0x64) [0122.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0122.034] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0122.035] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a28000 [0122.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a28000, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a28000, ResultLength=0x0) returned 0xc0000004 [0122.035] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a28000, Size=0x306c) returned 0x7a28000 [0122.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a28000, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a28000, ResultLength=0x0) returned 0xc0000004 [0122.035] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a28000, Size=0x4090) returned 0x3f33b90 [0122.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0122.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x50b4) returned 0x3f33b90 [0122.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0122.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x60d8) returned 0x3f33b90 [0122.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0122.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x70fc) returned 0x3f33b90 [0122.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0122.037] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x8120) returned 0x3f33b90 [0122.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0122.037] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x9144) returned 0x3f33b90 [0122.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0122.037] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xa168) returned 0x3f33b90 [0122.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0122.038] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xb18c) returned 0x3f33b90 [0122.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0122.038] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xc1b0) returned 0x3f33b90 [0122.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0122.038] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xd1d4) returned 0x7a30038 [0122.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a30038, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a30038, ResultLength=0x0) returned 0xc0000004 [0122.039] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a30038, Size=0xe1f8) returned 0x7a30038 [0122.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a30038, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a30038, ResultLength=0x0) returned 0xc0000004 [0122.039] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a30038, Size=0xf21c) returned 0x7a30038 [0122.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a30038, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7a30038, ResultLength=0x0) returned 0xc0000004 [0122.039] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a30038, Size=0x10240) returned 0x7a3f260 [0122.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a3f260, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7a3f260, ResultLength=0x0) returned 0x0 [0122.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0122.045] Sleep (dwMilliseconds=0x64) [0122.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0122.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0122.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a5a078 [0122.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5a078, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a5a078, ResultLength=0x0) returned 0xc0000004 [0122.538] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5a078, Size=0x306c) returned 0x7a5c0c8 [0122.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5c0c8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a5c0c8, ResultLength=0x0) returned 0xc0000004 [0122.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5c0c8, Size=0x4090) returned 0x7a5c0c8 [0122.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5c0c8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a5c0c8, ResultLength=0x0) returned 0xc0000004 [0122.542] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5c0c8, Size=0x50b4) returned 0x7a60160 [0122.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60160, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a60160, ResultLength=0x0) returned 0xc0000004 [0122.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60160, Size=0x60d8) returned 0x7a60160 [0122.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60160, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a60160, ResultLength=0x0) returned 0xc0000004 [0122.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60160, Size=0x70fc) returned 0x7a66240 [0122.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a66240, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a66240, ResultLength=0x0) returned 0xc0000004 [0122.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a66240, Size=0x8120) returned 0x7a66240 [0122.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a66240, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a66240, ResultLength=0x0) returned 0xc0000004 [0122.547] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a66240, Size=0x9144) returned 0x7a5a078 [0122.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5a078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5a078, ResultLength=0x0) returned 0xc0000004 [0122.547] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5a078, Size=0xa168) returned 0x7a5a078 [0122.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5a078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5a078, ResultLength=0x0) returned 0xc0000004 [0122.547] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5a078, Size=0xb18c) returned 0x7a5a078 [0122.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5a078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5a078, ResultLength=0x0) returned 0xc0000004 [0122.548] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5a078, Size=0xc1b0) returned 0x7a5a078 [0122.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5a078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5a078, ResultLength=0x0) returned 0xc0000004 [0122.548] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5a078, Size=0xd1d4) returned 0x7a5a078 [0122.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5a078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5a078, ResultLength=0x0) returned 0xc0000004 [0122.548] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5a078, Size=0xe1f8) returned 0x7a5a078 [0122.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5a078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5a078, ResultLength=0x0) returned 0xc0000004 [0122.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5a078, Size=0xf21c) returned 0x7a5a078 [0122.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5a078, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7a5a078, ResultLength=0x0) returned 0xc0000004 [0122.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5a078, Size=0x10240) returned 0x7a5a078 [0122.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5a078, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7a5a078, ResultLength=0x0) returned 0x0 [0122.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0122.550] Sleep (dwMilliseconds=0x64) [0123.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0123.387] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0123.389] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x3f33ba0 [0123.389] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33ba0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x3f33ba0, ResultLength=0x0) returned 0xc0000004 [0123.389] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33ba0, Size=0x306c) returned 0x3f33ba0 [0123.389] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33ba0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x3f33ba0, ResultLength=0x0) returned 0xc0000004 [0123.389] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33ba0, Size=0x4090) returned 0x7a3f058 [0123.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a3f058, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a3f058, ResultLength=0x0) returned 0xc0000004 [0123.390] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a3f058, Size=0x50b4) returned 0x7a3f058 [0123.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a3f058, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a3f058, ResultLength=0x0) returned 0xc0000004 [0123.390] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a3f058, Size=0x60d8) returned 0x7a3f058 [0123.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a3f058, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a3f058, ResultLength=0x0) returned 0xc0000004 [0123.391] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a3f058, Size=0x70fc) returned 0x7a3f058 [0123.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a3f058, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a3f058, ResultLength=0x0) returned 0xc0000004 [0123.391] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a3f058, Size=0x8120) returned 0x7a6d098 [0123.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a6d098, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a6d098, ResultLength=0x0) returned 0xc0000004 [0123.401] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a6d098, Size=0x9144) returned 0x7a6d098 [0123.401] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a6d098, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a6d098, ResultLength=0x0) returned 0xc0000004 [0123.401] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a6d098, Size=0xa168) returned 0x7a6d098 [0123.401] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a6d098, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a6d098, ResultLength=0x0) returned 0xc0000004 [0123.402] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a6d098, Size=0xb18c) returned 0x7a77208 [0123.406] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a77208, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a77208, ResultLength=0x0) returned 0xc0000004 [0123.406] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a77208, Size=0xc1b0) returned 0x7a77208 [0123.406] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a77208, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a77208, ResultLength=0x0) returned 0xc0000004 [0123.406] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a77208, Size=0xd1d4) returned 0x7a833c0 [0123.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a833c0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a833c0, ResultLength=0x0) returned 0xc0000004 [0123.410] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a833c0, Size=0xe1f8) returned 0x7a833c0 [0123.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a833c0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a833c0, ResultLength=0x0) returned 0xc0000004 [0123.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a833c0, Size=0xf21c) returned 0x7a6d098 [0123.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a6d098, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7a6d098, ResultLength=0x0) returned 0xc0000004 [0123.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a6d098, Size=0x10240) returned 0x7a6d098 [0123.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a6d098, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7a6d098, ResultLength=0x0) returned 0xc0000004 [0123.411] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a6d098, Size=0x11264) returned 0x7a6d098 [0123.411] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a6d098, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7a6d098, ResultLength=0x0) returned 0xc0000004 [0123.412] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a6d098, Size=0x12288) returned 0x7a6d098 [0123.412] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a6d098, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7a6d098, ResultLength=0x0) returned 0x0 [0123.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3d521d8 [0123.413] Sleep (dwMilliseconds=0x64) [0123.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0123.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0123.987] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a750b0 [0123.993] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a750b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a750b0, ResultLength=0x0) returned 0xc0000004 [0123.994] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a750b0, Size=0x306c) returned 0x7a43058 [0123.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a43058, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a43058, ResultLength=0x0) returned 0xc0000004 [0123.994] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a43058, Size=0x4090) returned 0x7a30038 [0123.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a30038, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a30038, ResultLength=0x0) returned 0xc0000004 [0123.994] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a30038, Size=0x50b4) returned 0x7a30038 [0123.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a30038, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a30038, ResultLength=0x0) returned 0xc0000004 [0123.994] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a30038, Size=0x60d8) returned 0x7a30038 [0123.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a30038, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a30038, ResultLength=0x0) returned 0xc0000004 [0123.995] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a30038, Size=0x70fc) returned 0x7a30038 [0123.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a30038, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a30038, ResultLength=0x0) returned 0xc0000004 [0123.995] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a30038, Size=0x8120) returned 0x3f33b90 [0123.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0123.995] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0x9144) returned 0x3f33b90 [0123.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0123.996] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xa168) returned 0x3f33b90 [0123.996] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0123.996] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xb18c) returned 0x3f33b90 [0123.996] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3f33b90, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3f33b90, ResultLength=0x0) returned 0xc0000004 [0123.996] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3f33b90, Size=0xc1b0) returned 0x7ab5098 [0123.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab5098, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ab5098, ResultLength=0x0) returned 0xc0000004 [0123.997] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab5098, Size=0xd1d4) returned 0x7ab5098 [0123.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab5098, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ab5098, ResultLength=0x0) returned 0xc0000004 [0123.997] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab5098, Size=0xe1f8) returned 0x7ab5098 [0123.998] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab5098, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ab5098, ResultLength=0x0) returned 0xc0000004 [0123.998] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab5098, Size=0xf21c) returned 0x7ab5098 [0123.998] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab5098, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ab5098, ResultLength=0x0) returned 0xc0000004 [0123.998] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab5098, Size=0x10240) returned 0x7ab5098 [0123.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab5098, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7ab5098, ResultLength=0x0) returned 0xc0000004 [0123.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab5098, Size=0x11264) returned 0x7ab5098 [0123.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab5098, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7ab5098, ResultLength=0x0) returned 0xc0000004 [0123.999] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab5098, Size=0x12288) returned 0x7ab5098 [0123.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab5098, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ab5098, ResultLength=0x0) returned 0x0 [0124.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3de2570 [0124.000] Sleep (dwMilliseconds=0x64) [0124.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0124.598] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0124.598] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a750b0 [0124.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a750b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a750b0, ResultLength=0x0) returned 0xc0000004 [0124.599] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a750b0, Size=0x306c) returned 0x7a45058 [0124.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0124.599] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x4090) returned 0x7a45058 [0124.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0124.599] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x50b4) returned 0x7a45058 [0124.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0124.600] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x60d8) returned 0x7a5e078 [0124.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0124.600] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0x70fc) returned 0x7a5e078 [0124.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0124.601] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0x8120) returned 0x7a5e078 [0124.601] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0124.601] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0x9144) returned 0x7a5e078 [0124.601] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0124.601] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0124.601] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0124.602] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0124.602] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0124.602] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0124.602] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0124.602] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0124.603] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0124.603] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0124.603] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0124.603] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7afa308 [0124.605] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7afa308, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7afa308, ResultLength=0x0) returned 0xc0000004 [0124.605] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7afa308, Size=0x10240) returned 0x7afa308 [0124.605] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7afa308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7afa308, ResultLength=0x0) returned 0xc0000004 [0124.606] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7afa308, Size=0x11264) returned 0x7afa308 [0124.606] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7afa308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7afa308, ResultLength=0x0) returned 0xc0000004 [0124.606] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7afa308, Size=0x12288) returned 0x7afa308 [0124.606] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7afa308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7afa308, ResultLength=0x0) returned 0x0 [0124.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x36b370 [0124.607] Sleep (dwMilliseconds=0x64) [0125.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0125.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0125.074] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a750b0 [0125.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a750b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a750b0, ResultLength=0x0) returned 0xc0000004 [0125.075] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a750b0, Size=0x306c) returned 0x7a45058 [0125.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0125.075] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x4090) returned 0x7a45058 [0125.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0125.075] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x50b4) returned 0x7a45058 [0125.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0125.076] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x60d8) returned 0x7a374b8 [0125.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0125.076] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x70fc) returned 0x7a374b8 [0125.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0125.076] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x8120) returned 0x7a5e078 [0125.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.077] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0x9144) returned 0x7a5e078 [0125.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.077] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0125.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.078] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0125.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.078] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0125.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.078] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0125.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.079] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0125.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.079] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7afa308 [0125.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7afa308, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7afa308, ResultLength=0x0) returned 0xc0000004 [0125.079] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7afa308, Size=0x10240) returned 0x7afa308 [0125.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7afa308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7afa308, ResultLength=0x0) returned 0xc0000004 [0125.080] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7afa308, Size=0x11264) returned 0x7afa308 [0125.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7afa308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7afa308, ResultLength=0x0) returned 0xc0000004 [0125.080] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7afa308, Size=0x12288) returned 0x7afa308 [0125.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7afa308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7afa308, ResultLength=0x0) returned 0x0 [0125.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x36b2d0 [0125.081] Sleep (dwMilliseconds=0x64) [0125.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0125.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0125.626] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a750b0 [0125.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a750b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a750b0, ResultLength=0x0) returned 0xc0000004 [0125.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a750b0, Size=0x306c) returned 0x7a374b8 [0125.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0125.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x4090) returned 0x7a374b8 [0125.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0125.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x50b4) returned 0x7a374b8 [0125.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0125.627] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x60d8) returned 0x7a374b8 [0125.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0125.628] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x70fc) returned 0x7a374b8 [0125.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0125.628] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x8120) returned 0x7a45058 [0125.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0125.629] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7a5e078 [0125.629] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.629] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0125.629] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.629] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0125.629] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.630] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0125.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.630] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0125.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.630] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0125.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0125.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7b1a308 [0125.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b1a308, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7b1a308, ResultLength=0x0) returned 0xc0000004 [0125.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b1a308, Size=0x10240) returned 0x7b1a308 [0125.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b1a308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7b1a308, ResultLength=0x0) returned 0xc0000004 [0125.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b1a308, Size=0x11264) returned 0x7b1a308 [0125.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b1a308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7b1a308, ResultLength=0x0) returned 0xc0000004 [0125.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b1a308, Size=0x12288) returned 0x7b1a308 [0125.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b1a308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7b1a308, ResultLength=0x0) returned 0x0 [0125.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x36b2c0 [0125.634] Sleep (dwMilliseconds=0x64) [0126.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0126.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0126.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a750b0 [0126.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a750b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a750b0, ResultLength=0x0) returned 0xc0000004 [0126.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a750b0, Size=0x306c) returned 0x7a374b8 [0126.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0126.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x4090) returned 0x7a374b8 [0126.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0126.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x50b4) returned 0x7a374b8 [0126.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0126.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x60d8) returned 0x7a374b8 [0126.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0126.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x70fc) returned 0x7a374b8 [0126.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0126.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x8120) returned 0x7a45058 [0126.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0126.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7b2a308 [0126.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0126.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0xa168) returned 0x7a5e078 [0126.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0126.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0126.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0126.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0126.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0126.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0126.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0126.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0126.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0126.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7b2a308 [0126.121] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0126.121] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x10240) returned 0x7b2a308 [0126.121] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0126.122] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x11264) returned 0x7b2a308 [0126.122] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0126.122] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x12288) returned 0x7b2a308 [0126.122] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0126.123] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x132ac) returned 0x7b2a308 [0126.123] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0x0 [0126.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309ffa8 [0126.124] Sleep (dwMilliseconds=0x64) [0128.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0128.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0128.903] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7a750b0 [0128.903] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a750b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7a750b0, ResultLength=0x0) returned 0xc0000004 [0128.904] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a750b0, Size=0x306c) returned 0x7cd8348 [0128.904] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cd8348, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7cd8348, ResultLength=0x0) returned 0xc0000004 [0128.904] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cd8348, Size=0x4090) returned 0x7cdb3c0 [0128.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cdb3c0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7cdb3c0, ResultLength=0x0) returned 0xc0000004 [0128.907] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cdb3c0, Size=0x50b4) returned 0x7cdb3c0 [0128.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cdb3c0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7cdb3c0, ResultLength=0x0) returned 0xc0000004 [0128.907] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cdb3c0, Size=0x60d8) returned 0x7ce0480 [0128.910] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0480, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0480, ResultLength=0x0) returned 0xc0000004 [0128.910] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0480, Size=0x70fc) returned 0x7ce0480 [0128.910] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0480, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0480, ResultLength=0x0) returned 0xc0000004 [0128.910] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0480, Size=0x8120) returned 0x7cd8348 [0128.910] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cd8348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7cd8348, ResultLength=0x0) returned 0xc0000004 [0128.910] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cd8348, Size=0x9144) returned 0x7cd8348 [0128.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cd8348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7cd8348, ResultLength=0x0) returned 0xc0000004 [0128.911] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cd8348, Size=0xa168) returned 0x7cd8348 [0128.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cd8348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7cd8348, ResultLength=0x0) returned 0xc0000004 [0128.911] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cd8348, Size=0xb18c) returned 0x7cd8348 [0128.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cd8348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7cd8348, ResultLength=0x0) returned 0xc0000004 [0128.912] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cd8348, Size=0xc1b0) returned 0x7cd8348 [0128.912] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cd8348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7cd8348, ResultLength=0x0) returned 0xc0000004 [0128.912] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cd8348, Size=0xd1d4) returned 0x7cd8348 [0128.912] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cd8348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7cd8348, ResultLength=0x0) returned 0xc0000004 [0128.913] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cd8348, Size=0xe1f8) returned 0x7cd8348 [0128.913] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cd8348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7cd8348, ResultLength=0x0) returned 0xc0000004 [0128.913] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cd8348, Size=0xf21c) returned 0x7cd8348 [0128.913] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cd8348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7cd8348, ResultLength=0x0) returned 0xc0000004 [0128.913] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cd8348, Size=0x10240) returned 0x7ce7570 [0128.917] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce7570, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7ce7570, ResultLength=0x0) returned 0xc0000004 [0128.918] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce7570, Size=0x11264) returned 0x7ce7570 [0128.918] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce7570, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7ce7570, ResultLength=0x0) returned 0xc0000004 [0128.918] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce7570, Size=0x12288) returned 0x7cf87e0 [0128.921] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cf87e0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7cf87e0, ResultLength=0x0) returned 0x0 [0128.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6500 [0128.922] Sleep (dwMilliseconds=0x64) [0129.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0129.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0129.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0129.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0129.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7ce4130 [0129.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0x4090) returned 0x7ce4130 [0129.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0x50b4) returned 0x7ce4130 [0129.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0x60d8) returned 0x7ce4130 [0129.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0x70fc) returned 0x7ce4130 [0129.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0x8120) returned 0x7ce4130 [0129.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0x9144) returned 0x7ce4130 [0129.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0xa168) returned 0x7ce4130 [0129.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0xb18c) returned 0x7ce4130 [0129.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0xc1b0) returned 0x7ce4130 [0129.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0xd1d4) returned 0x7ce4130 [0129.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0xe1f8) returned 0x7ce4130 [0129.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0xf21c) returned 0x7ce4130 [0129.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.637] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0x10240) returned 0x7ce4130 [0129.637] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0x11264) returned 0x7ce4130 [0129.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0x12288) returned 0x7ce4130 [0129.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0xc0000004 [0129.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce4130, Size=0x132ac) returned 0x7ce4130 [0129.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce4130, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ce4130, ResultLength=0x0) returned 0x0 [0129.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309ff28 [0129.639] Sleep (dwMilliseconds=0x64) [0131.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0131.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0131.227] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0131.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0131.227] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7b88360 [0131.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0131.228] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a374b8 [0131.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0131.229] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x50b4) returned 0x7a374b8 [0131.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0131.230] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x60d8) returned 0x7a374b8 [0131.230] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0131.230] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x70fc) returned 0x7a374b8 [0131.230] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0131.230] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x8120) returned 0x7a45058 [0131.231] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0131.231] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7a5e078 [0131.232] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0131.232] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0131.232] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0131.233] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0131.233] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0131.233] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0131.233] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0131.234] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0131.234] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0131.234] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0131.234] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0131.235] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7b2a308 [0131.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0131.235] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x10240) returned 0x7b2a308 [0131.236] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0131.236] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x11264) returned 0x7b2a308 [0131.236] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0131.236] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x12288) returned 0x7b2a308 [0131.237] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0x0 [0131.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309ff58 [0131.238] Sleep (dwMilliseconds=0x64) [0132.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0132.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0132.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0132.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0132.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7b88360 [0132.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0132.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a374b8 [0132.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0132.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x50b4) returned 0x7a374b8 [0132.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0132.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x60d8) returned 0x7a374b8 [0132.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0132.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x70fc) returned 0x7a374b8 [0132.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0132.049] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x8120) returned 0x7a45058 [0132.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0132.049] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7b3a348 [0132.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7b3a348, ResultLength=0x0) returned 0xc0000004 [0132.050] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a348, Size=0xa168) returned 0x7b3a348 [0132.050] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7b3a348, ResultLength=0x0) returned 0xc0000004 [0132.050] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a348, Size=0xb18c) returned 0x7b3a348 [0132.050] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7b3a348, ResultLength=0x0) returned 0xc0000004 [0132.051] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a348, Size=0xc1b0) returned 0x7b3a348 [0132.051] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7b3a348, ResultLength=0x0) returned 0xc0000004 [0132.051] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a348, Size=0xd1d4) returned 0x7b3a348 [0132.051] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7b3a348, ResultLength=0x0) returned 0xc0000004 [0132.051] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a348, Size=0xe1f8) returned 0x7a5e078 [0132.052] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0132.052] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7cf0388 [0132.052] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cf0388, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7cf0388, ResultLength=0x0) returned 0xc0000004 [0132.053] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cf0388, Size=0x10240) returned 0x7cf0388 [0132.053] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cf0388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7cf0388, ResultLength=0x0) returned 0xc0000004 [0132.053] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cf0388, Size=0x11264) returned 0x7cf0388 [0132.053] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cf0388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7cf0388, ResultLength=0x0) returned 0xc0000004 [0132.054] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cf0388, Size=0x12288) returned 0x7cf0388 [0132.054] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cf0388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7cf0388, ResultLength=0x0) returned 0x0 [0132.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6510 [0132.055] Sleep (dwMilliseconds=0x64) [0132.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0132.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0132.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0132.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0132.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7b88360 [0132.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0132.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a374b8 [0132.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0132.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x50b4) returned 0x7a374b8 [0132.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0132.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x60d8) returned 0x7a374b8 [0132.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0132.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x70fc) returned 0x7a374b8 [0132.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0132.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x8120) returned 0x7a45058 [0132.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0132.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7b3a348 [0132.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7b3a348, ResultLength=0x0) returned 0xc0000004 [0132.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a348, Size=0xa168) returned 0x7b3a348 [0132.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7b3a348, ResultLength=0x0) returned 0xc0000004 [0132.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a348, Size=0xb18c) returned 0x7b3a348 [0132.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7b3a348, ResultLength=0x0) returned 0xc0000004 [0132.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a348, Size=0xc1b0) returned 0x7b3a348 [0132.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7b3a348, ResultLength=0x0) returned 0xc0000004 [0132.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a348, Size=0xd1d4) returned 0x7b3a348 [0132.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7b3a348, ResultLength=0x0) returned 0xc0000004 [0132.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a348, Size=0xe1f8) returned 0x7a5e078 [0132.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0132.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7cf0388 [0132.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cf0388, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7cf0388, ResultLength=0x0) returned 0xc0000004 [0132.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cf0388, Size=0x10240) returned 0x7cf0388 [0132.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cf0388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7cf0388, ResultLength=0x0) returned 0xc0000004 [0132.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cf0388, Size=0x11264) returned 0x7cf0388 [0132.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cf0388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7cf0388, ResultLength=0x0) returned 0xc0000004 [0132.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cf0388, Size=0x12288) returned 0x7cf0388 [0132.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cf0388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7cf0388, ResultLength=0x0) returned 0x0 [0132.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6510 [0132.556] Sleep (dwMilliseconds=0x64) [0133.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0133.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0133.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0133.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0133.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7b88360 [0133.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0133.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a39e00 [0133.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a39e00, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a39e00, ResultLength=0x0) returned 0xc0000004 [0133.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a39e00, Size=0x50b4) returned 0x7a39e00 [0133.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a39e00, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a39e00, ResultLength=0x0) returned 0xc0000004 [0133.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a39e00, Size=0x60d8) returned 0x7a45058 [0133.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0133.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x70fc) returned 0x7a45058 [0133.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0133.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x8120) returned 0x7a45058 [0133.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0133.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7a5e078 [0133.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0133.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0133.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0133.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0133.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0133.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0133.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0133.635] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0133.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0133.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0133.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0133.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7ce0348 [0133.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0133.636] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0133.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0133.638] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0133.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0133.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0133.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0133.639] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0133.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0133.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309ff58 [0133.640] Sleep (dwMilliseconds=0x64) [0134.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0134.642] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0134.643] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0134.643] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0134.643] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7b88360 [0134.643] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0134.643] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a374b8 [0134.643] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0134.643] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x50b4) returned 0x7a374b8 [0134.644] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0134.644] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x60d8) returned 0x7a374b8 [0134.644] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0134.644] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x70fc) returned 0x7a374b8 [0134.644] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a374b8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a374b8, ResultLength=0x0) returned 0xc0000004 [0134.644] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a374b8, Size=0x8120) returned 0x7a45058 [0134.644] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0134.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7a5e078 [0134.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0134.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0134.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0134.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0134.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0134.645] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0134.645] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0134.646] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0134.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0134.646] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0134.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0134.646] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7ce0348 [0134.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0134.647] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0134.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0134.647] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0134.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0134.647] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0134.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0134.648] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0134.648] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0134.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309ff58 [0134.648] Sleep (dwMilliseconds=0x64) [0135.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0135.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0135.100] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0135.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0135.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7b88360 [0135.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0135.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a394b8 [0135.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a394b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a394b8, ResultLength=0x0) returned 0xc0000004 [0135.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a394b8, Size=0x50b4) returned 0x7a394b8 [0135.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a394b8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a394b8, ResultLength=0x0) returned 0xc0000004 [0135.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a394b8, Size=0x60d8) returned 0x7a45058 [0135.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0135.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x70fc) returned 0x7a45058 [0135.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0135.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x8120) returned 0x7a45058 [0135.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0135.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7a5e078 [0135.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0135.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0135.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0135.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0135.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0135.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0135.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0135.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0135.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0135.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0135.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0135.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7ce0348 [0135.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0135.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0135.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0135.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0135.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0135.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0135.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0135.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0135.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0135.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0135.108] Sleep (dwMilliseconds=0x64) [0136.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0136.096] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0136.099] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0136.099] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0136.100] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7b88360 [0136.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0136.100] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a394b8 [0136.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a394b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a394b8, ResultLength=0x0) returned 0xc0000004 [0136.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a394b8, Size=0x50b4) returned 0x7a394b8 [0136.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a394b8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a394b8, ResultLength=0x0) returned 0xc0000004 [0136.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a394b8, Size=0x60d8) returned 0x7a45058 [0136.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0136.101] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x70fc) returned 0x7a45058 [0136.101] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0136.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x8120) returned 0x7a45058 [0136.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0136.102] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7a5e078 [0136.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0136.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0136.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0136.103] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0136.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0136.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0136.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0136.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0136.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0136.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0136.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0136.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7ce0348 [0136.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0136.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0136.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0136.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0136.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0136.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0136.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0136.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309ff58 [0136.108] Sleep (dwMilliseconds=0x64) [0137.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0137.103] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0137.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0137.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0137.104] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7b88360 [0137.104] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0137.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a3a4b8 [0137.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a3a4b8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a3a4b8, ResultLength=0x0) returned 0xc0000004 [0137.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a3a4b8, Size=0x50b4) returned 0x7a45058 [0137.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0137.105] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x60d8) returned 0x7a45058 [0137.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0137.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x70fc) returned 0x7a45058 [0137.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0137.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x8120) returned 0x7a45058 [0137.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0137.106] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7a5e078 [0137.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0137.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0137.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0137.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0137.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0137.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0137.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0137.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0137.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0137.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0137.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0137.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7ce0348 [0137.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0137.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0137.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0137.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0137.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0137.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0137.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0137.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0137.111] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0137.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea65d0 [0137.111] Sleep (dwMilliseconds=0x64) [0139.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0139.022] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0139.023] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0139.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0139.023] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7b88360 [0139.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0139.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a45058 [0139.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0139.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x50b4) returned 0x7a45058 [0139.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0139.025] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x60d8) returned 0x7a45058 [0139.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0139.025] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x70fc) returned 0x7a45058 [0139.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0139.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x8120) returned 0x7a45058 [0139.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0139.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7a5e078 [0139.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0139.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0139.027] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0139.027] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0139.027] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0139.027] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0139.027] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0139.028] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0139.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0139.028] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0139.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0139.029] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7ce0348 [0139.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0139.029] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0139.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0139.029] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0139.030] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0139.030] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0139.030] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0139.030] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0139.030] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0139.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6730 [0139.031] Sleep (dwMilliseconds=0x64) [0140.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0140.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0140.107] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7ab50b0 [0140.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0140.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x306c) returned 0x7b88360 [0140.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0140.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a45058 [0140.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0140.108] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x50b4) returned 0x7a45058 [0140.108] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0140.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x60d8) returned 0x7a45058 [0140.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0140.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x70fc) returned 0x7a45058 [0140.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0140.109] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x8120) returned 0x7a45058 [0140.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a45058, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a45058, ResultLength=0x0) returned 0xc0000004 [0140.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a45058, Size=0x9144) returned 0x7a5e078 [0140.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0140.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xa168) returned 0x7a5e078 [0140.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0140.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xb18c) returned 0x7a5e078 [0140.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0140.110] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xc1b0) returned 0x7a5e078 [0140.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0140.111] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xd1d4) returned 0x7a5e078 [0140.111] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0140.111] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xe1f8) returned 0x7a5e078 [0140.111] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a5e078, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7a5e078, ResultLength=0x0) returned 0xc0000004 [0140.111] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a5e078, Size=0xf21c) returned 0x7ce0348 [0140.111] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0140.112] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0140.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0140.112] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0140.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0140.112] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0140.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0140.113] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0140.113] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0140.113] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x142d0) returned 0x7d10388 [0140.113] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0140.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6570 [0140.114] Sleep (dwMilliseconds=0x64) [0141.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0141.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0141.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0141.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0141.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7b88360 [0141.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b88360, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b88360, ResultLength=0x0) returned 0xc0000004 [0141.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b88360, Size=0x4090) returned 0x7a60078 [0141.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60078, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a60078, ResultLength=0x0) returned 0xc0000004 [0141.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60078, Size=0x50b4) returned 0x7a60078 [0141.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60078, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7a60078, ResultLength=0x0) returned 0xc0000004 [0141.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60078, Size=0x60d8) returned 0x7a60078 [0141.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60078, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7a60078, ResultLength=0x0) returned 0xc0000004 [0141.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60078, Size=0x70fc) returned 0x7a60078 [0141.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60078, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7a60078, ResultLength=0x0) returned 0xc0000004 [0141.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60078, Size=0x8120) returned 0x7a60078 [0141.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60078, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7a60078, ResultLength=0x0) returned 0xc0000004 [0141.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60078, Size=0x9144) returned 0x7a60078 [0141.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60078, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7a60078, ResultLength=0x0) returned 0xc0000004 [0141.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60078, Size=0xa168) returned 0x7a60078 [0141.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60078, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7a60078, ResultLength=0x0) returned 0xc0000004 [0141.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60078, Size=0xb18c) returned 0x7a60078 [0141.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60078, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7a60078, ResultLength=0x0) returned 0xc0000004 [0141.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60078, Size=0xc1b0) returned 0x7a60078 [0141.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a60078, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7a60078, ResultLength=0x0) returned 0xc0000004 [0141.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a60078, Size=0xd1d4) returned 0x7ce0348 [0141.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0141.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0141.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0141.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0141.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0141.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0141.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0141.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0141.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0141.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0141.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0141.832] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0141.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0141.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea65e0 [0144.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0144.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0144.540] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0144.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0144.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0144.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0144.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7a68078 [0144.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a68078, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a68078, ResultLength=0x0) returned 0xc0000004 [0144.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a68078, Size=0x50b4) returned 0x7ce0348 [0144.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.542] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0144.542] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.542] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0144.542] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.542] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0144.542] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.543] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0144.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.543] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0144.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.543] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0144.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.543] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0144.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0144.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0144.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0144.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0144.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0144.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0144.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0144.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0144.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0144.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0144.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0144.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0144.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x142d0) returned 0x7d10388 [0144.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0144.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea65f0 [0144.547] Sleep (dwMilliseconds=0x64) [0145.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0145.691] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0145.693] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0145.693] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0145.694] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0145.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0145.694] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7a68078 [0145.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a68078, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a68078, ResultLength=0x0) returned 0xc0000004 [0145.694] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a68078, Size=0x50b4) returned 0x7ce0348 [0145.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.695] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0145.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.695] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0145.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.695] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0145.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.696] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0145.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.696] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0145.701] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.702] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0145.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.702] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0145.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.703] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0145.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.703] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0145.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.704] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0145.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0145.704] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0145.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0145.705] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0145.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0145.705] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0145.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0145.706] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0145.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0145.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea65f0 [0145.706] Sleep (dwMilliseconds=0x64) [0146.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0146.318] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0146.319] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0146.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0146.320] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0146.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0146.320] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7a68078 [0146.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a68078, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a68078, ResultLength=0x0) returned 0xc0000004 [0146.320] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a68078, Size=0x50b4) returned 0x7ce0348 [0146.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0146.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0146.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.321] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0146.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0146.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0146.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.322] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0146.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0146.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0146.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.323] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0146.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.324] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0146.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0146.324] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0146.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0146.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0146.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0146.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0146.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0146.325] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0146.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0146.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6740 [0146.326] Sleep (dwMilliseconds=0x64) [0147.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0147.271] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0147.271] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0147.272] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0147.272] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0147.272] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0147.272] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7a68078 [0147.273] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a68078, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7a68078, ResultLength=0x0) returned 0xc0000004 [0147.273] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a68078, Size=0x50b4) returned 0x7ce5538 [0147.273] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.273] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0x60d8) returned 0x7ce5538 [0147.273] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.273] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0x70fc) returned 0x7ce5538 [0147.273] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0x8120) returned 0x7ce5538 [0147.274] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0x9144) returned 0x7ce5538 [0147.274] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0xa168) returned 0x7ce5538 [0147.274] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.274] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0xb18c) returned 0x7d10388 [0147.275] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0xc1b0) returned 0x7d10388 [0147.275] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0xd1d4) returned 0x7d10388 [0147.275] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.275] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0xe1f8) returned 0x7d10388 [0147.276] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0xf21c) returned 0x7d10388 [0147.276] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x10240) returned 0x7d10388 [0147.276] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.276] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0147.276] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.277] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0147.277] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.277] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0147.277] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0147.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6710 [0147.988] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0147.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0147.989] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0147.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0147.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce5538 [0147.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.990] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0x50b4) returned 0x7ce5538 [0147.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.991] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0x60d8) returned 0x7ce5538 [0147.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.991] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0x70fc) returned 0x7ce5538 [0147.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.991] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0x8120) returned 0x7ce5538 [0147.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.992] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0x9144) returned 0x7ce5538 [0147.992] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.992] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0xa168) returned 0x7ce5538 [0147.992] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce5538, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce5538, ResultLength=0x0) returned 0xc0000004 [0147.992] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce5538, Size=0xb18c) returned 0x7d10388 [0147.992] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.993] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0xc1b0) returned 0x7d10388 [0147.993] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.993] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0xd1d4) returned 0x7d10388 [0147.993] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.994] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0xe1f8) returned 0x7d10388 [0147.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.994] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0xf21c) returned 0x7d10388 [0147.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.994] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x10240) returned 0x7d10388 [0147.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.995] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0147.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.995] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0147.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0147.995] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0147.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0147.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea66d0 [0147.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea66d0) returned 1 [0147.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x7ad9538 [0147.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9538) returned 1 [0147.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb8518 [0147.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8518 [0147.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8518 [0147.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0147.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0147.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0147.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0147.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8518 [0147.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9538 [0147.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9538) returned 1 [0147.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0147.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0147.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0147.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0147.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9538 [0148.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9538) returned 1 [0148.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0148.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e740f0 [0148.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e740f0) returned 1 [0148.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30bde18 [0148.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0148.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e540e8 [0148.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e540e8 [0148.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e540e8 [0148.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e796e8 [0148.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e796e8) returned 1 [0148.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86848 [0148.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0148.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb8518 [0148.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e740f0 [0148.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e740f0) returned 1 [0148.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e540e8 [0148.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e740f0 [0148.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e740f0) returned 1 [0148.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e740f0 [0148.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e740f0) returned 1 [0148.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e740f0 [0148.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e740f0) returned 1 [0148.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0148.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e796e8 [0148.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e796e8) returned 1 [0148.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde18 [0148.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0148.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0148.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e740f0 [0148.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e740f0) returned 1 [0148.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8518 [0148.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86848 [0148.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0148.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8518 [0148.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0148.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9538 [0148.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9538) returned 1 [0148.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e540e8 [0148.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8518 [0148.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86848 [0148.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0148.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e796e8 [0148.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e796e8) returned 1 [0148.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9538 [0148.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9538) returned 1 [0148.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8518 [0148.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0148.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e540e8 [0148.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8518 [0148.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e540e8 [0148.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8518 [0148.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8518 [0148.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86848 [0148.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0148.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86848 [0148.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0148.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0148.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8518 [0148.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8518 [0148.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e540e8 [0148.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e796e8 [0148.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e796e8) returned 1 [0148.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86848 [0148.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0148.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8518 [0148.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb8518 [0148.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8518 [0148.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86848 [0148.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0148.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0148.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8518 [0148.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86848 [0148.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0148.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb8518 [0148.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e740f0 [0148.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e740f0) returned 1 [0148.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e540e8 [0148.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0148.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8518 [0148.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0148.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8518 [0148.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0148.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8518 [0148.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8518) returned 1 [0148.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0148.012] Sleep (dwMilliseconds=0x64) [0148.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0148.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0148.559] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0148.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0148.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0148.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0148.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0148.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0148.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.560] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0148.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0148.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0148.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0148.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.561] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0148.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0148.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0148.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0148.562] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.562] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0148.563] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.563] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0148.563] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0148.563] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0148.563] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0148.563] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0148.563] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0148.564] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0148.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0148.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea66d0 [0148.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea66d0) returned 1 [0148.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x7ad9538 [0148.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9538) returned 1 [0148.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81fa0 [0148.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81fa0 [0148.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81fa0 [0148.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81fa0 [0148.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9538 [0148.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9538) returned 1 [0148.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9538 [0148.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9538) returned 1 [0148.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcfa50 [0148.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa50) returned 1 [0148.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e49a88 [0148.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0148.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e540e8 [0148.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e540e8 [0148.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e540e8 [0148.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e796e8 [0148.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e796e8) returned 1 [0148.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0148.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0148.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81fa0 [0148.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfa50 [0148.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa50) returned 1 [0148.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e540e8 [0148.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfa50 [0148.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa50) returned 1 [0148.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfa50 [0148.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa50) returned 1 [0148.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfa50 [0148.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa50) returned 1 [0148.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0148.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e796e8 [0148.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e796e8) returned 1 [0148.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49a88 [0148.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0148.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfa50 [0148.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa50) returned 1 [0148.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81fa0 [0148.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0148.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0148.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81fa0 [0148.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9538 [0148.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9538) returned 1 [0148.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e540e8 [0148.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81fa0 [0148.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0148.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0148.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e796e8 [0148.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e796e8) returned 1 [0148.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9538 [0148.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9538) returned 1 [0148.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81fa0 [0148.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e540e8 [0148.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81fa0 [0148.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e540e8 [0148.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81fa0 [0148.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81fa0 [0148.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0148.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0148.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0148.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0148.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81fa0 [0148.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81fa0 [0148.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e540e8 [0148.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e796e8 [0148.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e796e8) returned 1 [0148.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0148.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0148.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81fa0 [0148.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81fa0 [0148.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81fa0 [0148.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86878 [0148.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0148.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81fa0 [0148.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81fa0 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcfa50 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa50) returned 1 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e540e8 [0148.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e540e8 [0148.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81fa0 [0148.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81fa0 [0148.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81fa0 [0148.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81fa0) returned 1 [0148.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0148.579] Sleep (dwMilliseconds=0x64) [0149.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0149.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0149.250] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0149.250] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0149.250] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0149.250] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0149.250] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0149.250] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.250] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0149.251] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.251] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0149.251] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.251] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0149.251] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.251] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0149.251] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.252] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0149.252] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.252] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0149.252] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.252] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0149.252] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.252] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0149.253] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.253] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0149.253] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.253] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0149.253] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.253] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0149.253] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0149.254] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0149.254] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0149.254] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0149.254] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0149.254] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0149.254] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0149.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6610 [0149.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6610) returned 1 [0149.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x7ad93e8 [0149.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0149.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb8198 [0149.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8198 [0149.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8198 [0149.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8198 [0149.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0149.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0149.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0149.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0149.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d8c0 [0149.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d8c0) returned 1 [0149.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e85398 [0149.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0149.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec45f0 [0149.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec45f0 [0149.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec45f0 [0149.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78f78 [0149.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 [0149.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0149.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb8198 [0149.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d8c0 [0149.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d8c0) returned 1 [0149.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec45f0 [0149.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d8c0 [0149.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d8c0) returned 1 [0149.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d8c0 [0149.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d8c0) returned 1 [0149.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d8c0 [0149.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d8c0) returned 1 [0149.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0149.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78f78 [0149.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 [0149.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85398 [0149.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0149.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d8c0 [0149.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d8c0) returned 1 [0149.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8198 [0149.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0149.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8198 [0149.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0149.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0149.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec45f0 [0149.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8198 [0149.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0149.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e78f78 [0149.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 [0149.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0149.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0149.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8198 [0149.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec45f0 [0149.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8198 [0149.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec45f0 [0149.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8198 [0149.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8198 [0149.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0149.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0149.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8198 [0149.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8198 [0149.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec45f0 [0149.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78f78 [0149.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 [0149.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0149.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8198 [0149.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb8198 [0149.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8198 [0149.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86878 [0149.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8198 [0149.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0149.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb8198 [0149.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d8c0 [0149.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d8c0) returned 1 [0149.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec45f0 [0149.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec45f0 [0149.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8198 [0149.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb8198 [0149.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8198 [0149.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8198) returned 1 [0149.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0149.269] Sleep (dwMilliseconds=0x64) [0150.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0150.203] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0150.203] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0150.203] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0150.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0150.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0150.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0150.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0150.205] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0150.205] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0150.205] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0150.206] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0150.206] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0150.206] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0150.207] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0150.207] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0150.208] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0150.208] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0150.208] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0150.209] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0150.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0150.209] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0150.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0150.212] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0150.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6610 [0150.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6610) returned 1 [0150.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x7ad93e8 [0150.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0150.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81640 [0150.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81640 [0150.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81640 [0150.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81640 [0150.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0150.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0150.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0150.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0150.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf8d0 [0150.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf8d0) returned 1 [0150.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a24620 [0150.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24620) returned 1 [0150.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dca940 [0150.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dca940 [0150.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dca940 [0150.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0150.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0150.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0150.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0150.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81640 [0150.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcf8d0 [0150.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf8d0) returned 1 [0150.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dca940 [0150.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf8d0 [0150.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf8d0) returned 1 [0150.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcf8d0 [0150.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf8d0) returned 1 [0150.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf8d0 [0150.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf8d0) returned 1 [0150.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0150.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79368 [0150.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0150.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24620 [0150.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24620) returned 1 [0150.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf8d0 [0150.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf8d0) returned 1 [0150.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81640 [0150.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0150.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0150.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81640 [0150.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0150.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0150.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dca940 [0150.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81640 [0150.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0150.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0150.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79368 [0150.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0150.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0150.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0150.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81640 [0150.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dca940 [0150.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81640 [0150.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dca940 [0150.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81640 [0150.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81640 [0150.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0150.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0150.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0150.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0150.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81640 [0150.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81640 [0150.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dca940 [0150.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0150.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0150.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0150.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0150.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81640 [0150.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81640 [0150.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81640 [0150.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86878 [0150.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0150.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81640 [0150.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0150.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0150.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81640 [0150.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf8d0 [0150.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf8d0) returned 1 [0150.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca940 [0150.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dca940 [0150.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81640 [0150.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81640 [0150.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81640 [0150.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81640) returned 1 [0150.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0150.232] Sleep (dwMilliseconds=0x64) [0150.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0150.873] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0150.873] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0150.873] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0150.873] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0150.873] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0150.874] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0150.874] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.874] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0150.874] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.874] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0150.874] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.874] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0150.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.875] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0150.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.875] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0150.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.875] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0150.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0150.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0150.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0150.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0150.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0150.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0150.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0150.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0150.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0150.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0150.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0150.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0150.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0150.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0150.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6610 [0150.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6610) returned 1 [0150.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x7ad93e8 [0150.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0150.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81a00 [0150.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81a00 [0150.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81a00 [0150.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81a00 [0150.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0150.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0150.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0150.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0150.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d140 [0150.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d140) returned 1 [0150.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a23ff0 [0150.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0150.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec64e0 [0150.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec64e0 [0150.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec64e0 [0150.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0150.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0150.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86848 [0150.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0150.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81a00 [0150.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d140 [0150.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d140) returned 1 [0150.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec64e0 [0150.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d140 [0150.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d140) returned 1 [0150.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d140 [0150.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d140) returned 1 [0150.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d140 [0150.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d140) returned 1 [0150.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0150.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79368 [0150.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0150.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a23ff0 [0150.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0150.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d140 [0150.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d140) returned 1 [0150.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81a00 [0150.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86848 [0150.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0150.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81a00 [0150.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0150.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0150.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec64e0 [0150.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81a00 [0150.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86848 [0150.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0150.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79368 [0150.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0150.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0150.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0150.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81a00 [0150.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec64e0 [0150.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81a00 [0150.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec64e0 [0150.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81a00 [0150.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81a00 [0150.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86848 [0150.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0150.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86848 [0150.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0150.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81a00 [0150.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81a00 [0150.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec64e0 [0150.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0150.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0150.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86848 [0150.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0150.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81a00 [0150.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81a00 [0150.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81a00 [0150.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86848 [0150.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0150.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81a00 [0150.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86848 [0150.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0150.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81a00 [0150.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d140 [0150.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d140) returned 1 [0150.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0150.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec64e0 [0150.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81a00 [0150.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81a00 [0150.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81a00 [0150.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81a00) returned 1 [0150.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0150.917] Sleep (dwMilliseconds=0x64) [0151.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0151.361] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0151.362] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0151.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0151.362] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0151.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0151.363] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0151.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.363] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0151.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.363] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0151.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.364] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0151.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.364] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0151.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.364] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0151.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.365] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0151.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.365] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0151.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.365] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0151.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.366] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0151.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.366] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0151.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.367] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0151.367] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0151.367] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0151.367] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0151.367] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0151.367] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0151.368] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0151.368] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0151.368] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0151.368] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0151.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6540 [0151.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6540) returned 1 [0151.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x7ad93e8 [0151.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0151.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2ff90 [0151.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2ff90 [0151.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2ff90 [0151.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2ff90 [0151.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0151.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0151.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0151.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0151.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d580 [0151.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d580) returned 1 [0151.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e85500 [0151.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0151.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec3678 [0151.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec3678 [0151.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3678 [0151.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e798a8 [0151.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0151.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86848 [0151.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0151.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2ff90 [0151.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d580 [0151.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d580) returned 1 [0151.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3678 [0151.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d580 [0151.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d580) returned 1 [0151.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d580 [0151.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d580) returned 1 [0151.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d580 [0151.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d580) returned 1 [0151.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0151.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e798a8 [0151.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0151.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0151.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0151.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d580 [0151.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d580) returned 1 [0151.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2ff90 [0151.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86848 [0151.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0151.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2ff90 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0151.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3678 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2ff90 [0151.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86848 [0151.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0151.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e798a8 [0151.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0151.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0151.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0151.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2ff90 [0151.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3678 [0151.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2ff90 [0151.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3678 [0151.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2ff90 [0151.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2ff90 [0151.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86848 [0151.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86848 [0151.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2ff90 [0151.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2ff90 [0151.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec3678 [0151.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e798a8 [0151.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0151.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86848 [0151.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0151.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2ff90 [0151.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2ff90 [0151.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2ff90 [0151.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86848 [0151.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0151.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2ff90 [0151.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86848 [0151.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2ff90 [0151.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d580 [0151.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d580) returned 1 [0151.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0151.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec3678 [0151.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2ff90 [0151.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2ff90 [0151.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2ff90 [0151.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ff90) returned 1 [0151.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0151.386] Sleep (dwMilliseconds=0x64) [0152.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0152.735] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0152.736] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0152.736] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0152.736] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0152.736] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0152.736] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0152.736] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.736] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0152.737] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.737] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0152.737] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.737] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0152.737] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.737] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0152.737] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.737] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0152.738] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.738] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0152.738] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.738] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0152.738] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.738] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0152.738] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.738] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0152.739] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.739] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0152.739] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.739] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0152.739] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0152.739] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0152.739] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0152.740] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0152.740] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0152.740] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0152.740] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0152.740] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0152.740] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0152.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd98 [0152.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309fd98) returned 1 [0152.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x30b4cf0 [0152.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0152.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e368 [0152.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e368 [0152.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e368 [0152.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e368 [0152.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0152.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0152.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0152.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0152.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d240 [0152.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d240) returned 1 [0152.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a24548 [0152.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24548) returned 1 [0152.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53350 [0152.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53350 [0152.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53350 [0152.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78fb0 [0152.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0152.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c38 [0152.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0152.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e368 [0152.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d240 [0152.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d240) returned 1 [0152.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53350 [0152.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d240 [0152.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d240) returned 1 [0152.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d240 [0152.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d240) returned 1 [0152.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d240 [0152.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d240) returned 1 [0152.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0152.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78fb0 [0152.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0152.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24548 [0152.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24548) returned 1 [0152.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d240 [0152.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d240) returned 1 [0152.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e368 [0152.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c38 [0152.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0152.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e368 [0152.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0152.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0152.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53350 [0152.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e368 [0152.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c38 [0152.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0152.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e78fb0 [0152.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0152.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0152.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0152.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e368 [0152.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53350 [0152.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e368 [0152.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53350 [0152.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e368 [0152.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e368 [0152.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c38 [0152.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0152.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86c38 [0152.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0152.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e368 [0152.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e368 [0152.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53350 [0152.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78fb0 [0152.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0152.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86c38 [0152.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0152.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e368 [0152.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e368 [0152.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e368 [0152.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86c38 [0152.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0152.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e368 [0152.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c38 [0152.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0152.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e368 [0152.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d240 [0152.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d240) returned 1 [0152.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0152.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53350 [0152.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0152.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e368 [0152.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e368 [0152.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e368 [0152.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e368) returned 1 [0152.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0152.755] Sleep (dwMilliseconds=0x64) [0153.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0153.171] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0153.172] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0153.172] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0153.172] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0153.172] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0153.173] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0153.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.173] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0153.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.173] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0153.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.174] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0153.174] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.174] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0153.174] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0153.175] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0153.175] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0153.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.176] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0153.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.176] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0153.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.177] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0153.177] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.177] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0153.177] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.178] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0153.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0153.178] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0153.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0153.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0153.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0153.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0153.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0153.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd98 [0153.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309fd98) returned 1 [0153.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x30b4cf0 [0153.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0153.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e80fe0 [0153.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80fe0 [0153.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80fe0 [0153.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80fe0 [0153.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0153.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0153.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0153.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0153.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf710 [0153.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf710) returned 1 [0153.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07f50 [0153.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f50) returned 1 [0153.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec4910 [0153.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec4910 [0153.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec4910 [0153.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0153.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0153.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c38 [0153.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0153.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e80fe0 [0153.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcf710 [0153.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf710) returned 1 [0153.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec4910 [0153.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf710 [0153.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf710) returned 1 [0153.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcf710 [0153.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf710) returned 1 [0153.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf710 [0153.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf710) returned 1 [0153.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0153.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79368 [0153.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0153.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07f50 [0153.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f50) returned 1 [0153.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf710 [0153.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf710) returned 1 [0153.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80fe0 [0153.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c38 [0153.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0153.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80fe0 [0153.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0153.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0153.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec4910 [0153.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80fe0 [0153.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c38 [0153.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0153.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79368 [0153.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0153.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0153.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0153.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80fe0 [0153.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec4910 [0153.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80fe0 [0153.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec4910 [0153.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80fe0 [0153.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80fe0 [0153.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c38 [0153.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0153.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86c38 [0153.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0153.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80fe0 [0153.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80fe0 [0153.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec4910 [0153.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0153.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0153.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86c38 [0153.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0153.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80fe0 [0153.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e80fe0 [0153.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80fe0 [0153.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86c38 [0153.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0153.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80fe0 [0153.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c38 [0153.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0153.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e80fe0 [0153.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf710 [0153.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf710) returned 1 [0153.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4910 [0153.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec4910 [0153.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80fe0 [0153.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80fe0 [0153.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80fe0 [0153.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80fe0) returned 1 [0153.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0153.204] Sleep (dwMilliseconds=0x64) [0153.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0153.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0153.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0153.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0153.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0153.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0153.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0153.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0153.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0153.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0153.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0153.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0153.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0153.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0153.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0153.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0153.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0153.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0153.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0153.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0153.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0153.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0153.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0153.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0153.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0153.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0153.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30a0008 [0153.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30a0008) returned 1 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43878 [0153.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43878) returned 1 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81d80 [0153.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81d80 [0153.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81d80 [0153.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81d80 [0153.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43878 [0153.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43878) returned 1 [0153.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43878 [0153.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43878) returned 1 [0153.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad78b0 [0153.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad78b0) returned 1 [0153.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30b3b30 [0153.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3b30) returned 1 [0153.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5bf78 [0153.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5bf78 [0153.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5bf78 [0153.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e798a8 [0153.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0153.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0153.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0153.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81d80 [0153.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7ad78b0 [0153.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad78b0) returned 1 [0153.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5bf78 [0153.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad78b0 [0153.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad78b0) returned 1 [0153.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7ad78b0 [0153.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad78b0) returned 1 [0153.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad78b0 [0153.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad78b0) returned 1 [0153.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0153.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e798a8 [0153.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0153.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3b30 [0153.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3b30) returned 1 [0153.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad78b0 [0153.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad78b0) returned 1 [0153.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81d80 [0153.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0153.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0153.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81d80 [0153.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43878 [0153.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43878) returned 1 [0153.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5bf78 [0153.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81d80 [0153.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0153.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0153.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e798a8 [0153.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0153.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43878 [0153.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43878) returned 1 [0153.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81d80 [0153.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5bf78 [0153.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81d80 [0153.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5bf78 [0153.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81d80 [0153.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81d80 [0153.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0153.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0153.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a375c0 [0153.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0153.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81d80 [0153.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81d80 [0153.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5bf78 [0153.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e798a8 [0153.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0153.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a375c0 [0153.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0153.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81d80 [0153.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81d80 [0153.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81d80 [0153.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a375c0 [0153.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0153.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81d80 [0153.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0153.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0153.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81d80 [0153.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad78b0 [0153.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad78b0) returned 1 [0153.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bf78 [0153.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5bf78 [0153.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0153.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81d80 [0153.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81d80 [0153.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81d80 [0153.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81d80) returned 1 [0153.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0153.846] Sleep (dwMilliseconds=0x64) [0154.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0154.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0154.629] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0154.629] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0154.629] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0154.629] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0154.629] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0154.629] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.630] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0154.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.630] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0154.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.630] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0154.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.630] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0154.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0154.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0154.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0154.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.631] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0154.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0154.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0154.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.632] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0154.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0154.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0154.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0154.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0154.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0154.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0154.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0154.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0154.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0154.634] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x142d0) returned 0x7d10388 [0154.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0154.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x30a0008 [0154.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30a0008) returned 1 [0154.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43878 [0154.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43878) returned 1 [0154.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e6a8 [0154.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e6a8 [0154.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e6a8 [0154.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e6a8 [0154.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43878 [0154.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43878) returned 1 [0154.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43878 [0154.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43878) returned 1 [0154.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d080 [0154.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d080) returned 1 [0154.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e85b78 [0154.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b78) returned 1 [0154.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9ef0 [0154.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9ef0 [0154.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9ef0 [0154.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3dac3b0 [0154.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0154.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0154.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e6a8 [0154.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d080 [0154.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d080) returned 1 [0154.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9ef0 [0154.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d080 [0154.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d080) returned 1 [0154.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d080 [0154.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d080) returned 1 [0154.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d080 [0154.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d080) returned 1 [0154.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0154.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3dac3b0 [0154.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0154.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85b78 [0154.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b78) returned 1 [0154.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d080 [0154.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d080) returned 1 [0154.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e6a8 [0154.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0154.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e6a8 [0154.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43878 [0154.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43878) returned 1 [0154.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9ef0 [0154.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e6a8 [0154.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0154.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac3b0 [0154.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0154.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43878 [0154.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43878) returned 1 [0154.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e6a8 [0154.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9ef0 [0154.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e6a8 [0154.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9ef0 [0154.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e6a8 [0154.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e6a8 [0154.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86878 [0154.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0154.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e6a8 [0154.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e6a8 [0154.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9ef0 [0154.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3dac3b0 [0154.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0154.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0154.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e6a8 [0154.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e6a8 [0154.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e6a8 [0154.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86878 [0154.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e6a8 [0154.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0154.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e6a8 [0154.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d080 [0154.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d080) returned 1 [0154.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ef0 [0154.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9ef0 [0154.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e6a8 [0154.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e6a8 [0154.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e6a8 [0154.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e6a8) returned 1 [0154.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0154.648] Sleep (dwMilliseconds=0x64) [0155.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0155.360] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0155.361] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0155.361] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0155.361] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0155.361] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0155.362] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0155.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.362] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0155.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.362] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0155.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.363] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0155.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.363] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0155.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.364] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0155.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.364] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0155.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.364] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0155.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.365] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0155.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.365] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0155.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.365] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0155.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.366] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0155.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0155.366] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0155.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0155.367] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0155.367] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0155.367] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0155.367] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0155.367] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0155.368] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0155.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0155.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309fd58) returned 1 [0155.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x30b4cf0 [0155.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0155.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e818e0 [0155.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e818e0 [0155.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e818e0 [0155.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e818e0 [0155.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0155.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0155.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0155.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0155.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d9c0 [0155.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d9c0) returned 1 [0155.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e08388 [0155.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08388) returned 1 [0155.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53df0 [0155.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53df0 [0155.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53df0 [0155.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79720 [0155.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0155.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86998 [0155.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86998) returned 1 [0155.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e818e0 [0155.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d9c0 [0155.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d9c0) returned 1 [0155.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53df0 [0155.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d9c0 [0155.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d9c0) returned 1 [0155.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d9c0 [0155.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d9c0) returned 1 [0155.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d9c0 [0155.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d9c0) returned 1 [0155.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0155.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79720 [0155.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0155.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08388 [0155.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08388) returned 1 [0155.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d9c0 [0155.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d9c0) returned 1 [0155.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e818e0 [0155.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86998 [0155.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86998) returned 1 [0155.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e818e0 [0155.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0155.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0155.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53df0 [0155.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e818e0 [0155.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86998 [0155.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86998) returned 1 [0155.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79720 [0155.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0155.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0155.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4cf0) returned 1 [0155.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e818e0 [0155.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53df0 [0155.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e818e0 [0155.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53df0 [0155.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e818e0 [0155.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e818e0 [0155.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86998 [0155.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86998) returned 1 [0155.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86998 [0155.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86998) returned 1 [0155.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e818e0 [0155.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e818e0 [0155.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53df0 [0155.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79720 [0155.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0155.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86998 [0155.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86998) returned 1 [0155.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e818e0 [0155.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e818e0 [0155.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e818e0 [0155.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86998 [0155.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86998) returned 1 [0155.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e818e0 [0155.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86998 [0155.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86998) returned 1 [0155.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e818e0 [0155.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d9c0 [0155.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d9c0) returned 1 [0155.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0155.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53df0 [0155.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0155.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e818e0 [0155.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e818e0 [0155.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e818e0 [0155.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e818e0) returned 1 [0155.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0155.385] Sleep (dwMilliseconds=0x64) [0156.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0156.262] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0156.263] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0156.263] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0156.263] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0156.263] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0156.263] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0156.264] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.264] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0156.264] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.264] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0156.264] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.264] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0156.264] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.265] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0156.265] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.265] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0156.265] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.265] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0156.265] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0156.266] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0156.266] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.266] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0156.266] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0156.267] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0156.267] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0156.267] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0156.268] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0156.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0156.268] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0156.268] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0156.268] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0156.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0156.269] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0156.269] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x142d0) returned 0x7d10388 [0156.269] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0156.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0156.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309fd58) returned 1 [0156.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43ad0 [0156.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0156.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e80f80 [0156.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80f80 [0156.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80f80 [0156.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80f80 [0156.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0156.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0156.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0156.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0156.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad79b0 [0156.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad79b0) returned 1 [0156.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a245d8 [0156.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a245d8) returned 1 [0156.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec34e8 [0156.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec34e8 [0156.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec34e8 [0156.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3dac3b0 [0156.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0156.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c38 [0156.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0156.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e80f80 [0156.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7ad79b0 [0156.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad79b0) returned 1 [0156.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec34e8 [0156.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad79b0 [0156.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad79b0) returned 1 [0156.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7ad79b0 [0156.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad79b0) returned 1 [0156.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad79b0 [0156.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad79b0) returned 1 [0156.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0156.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3dac3b0 [0156.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0156.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a245d8 [0156.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a245d8) returned 1 [0156.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad79b0 [0156.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad79b0) returned 1 [0156.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80f80 [0156.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c38 [0156.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0156.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80f80 [0156.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0156.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0156.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec34e8 [0156.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80f80 [0156.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c38 [0156.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0156.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac3b0 [0156.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0156.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0156.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0156.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80f80 [0156.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec34e8 [0156.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80f80 [0156.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec34e8 [0156.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80f80 [0156.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80f80 [0156.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c38 [0156.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0156.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86c38 [0156.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0156.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80f80 [0156.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80f80 [0156.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec34e8 [0156.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3dac3b0 [0156.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0156.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86c38 [0156.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0156.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80f80 [0156.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e80f80 [0156.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80f80 [0156.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86c38 [0156.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0156.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80f80 [0156.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c38 [0156.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0156.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e80f80 [0156.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad79b0 [0156.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad79b0) returned 1 [0156.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0156.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec34e8 [0156.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e80f80 [0156.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80f80 [0156.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80f80 [0156.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e80f80) returned 1 [0156.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0156.286] Sleep (dwMilliseconds=0x64) [0157.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0157.022] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0157.023] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0157.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0157.023] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0157.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0157.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0157.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0157.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.024] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0157.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.025] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0157.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.025] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0157.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.025] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0157.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0157.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0157.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.026] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0157.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.027] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0157.027] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.027] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0157.027] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.028] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0157.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.028] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0157.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0157.028] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0157.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0157.029] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0157.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0157.029] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0157.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0157.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0157.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309fd58) returned 1 [0157.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3dda7a0 [0157.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dda7a0) returned 1 [0157.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81ec0 [0157.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81ec0 [0157.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81ec0 [0157.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81ec0 [0157.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3dda7a0 [0157.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dda7a0) returned 1 [0157.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3dda7a0 [0157.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dda7a0) returned 1 [0157.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d280 [0157.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d280) returned 1 [0157.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30be208 [0157.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be208) returned 1 [0157.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec5ef0 [0157.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec5ef0 [0157.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec5ef0 [0157.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3dac618 [0157.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac618) returned 1 [0157.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0157.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0157.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81ec0 [0157.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d280 [0157.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d280) returned 1 [0157.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec5ef0 [0157.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d280 [0157.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d280) returned 1 [0157.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d280 [0157.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d280) returned 1 [0157.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d280 [0157.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d280) returned 1 [0157.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0157.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3dac618 [0157.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac618) returned 1 [0157.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be208 [0157.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be208) returned 1 [0157.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d280 [0157.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d280) returned 1 [0157.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81ec0 [0157.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0157.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0157.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81ec0 [0157.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3dda7a0 [0157.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dda7a0) returned 1 [0157.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec5ef0 [0157.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81ec0 [0157.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0157.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0157.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac618 [0157.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac618) returned 1 [0157.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3dda7a0 [0157.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dda7a0) returned 1 [0157.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81ec0 [0157.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec5ef0 [0157.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81ec0 [0157.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec5ef0 [0157.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81ec0 [0157.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81ec0 [0157.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0157.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0157.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a375c0 [0157.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0157.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81ec0 [0157.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81ec0 [0157.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec5ef0 [0157.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3dac618 [0157.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac618) returned 1 [0157.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a375c0 [0157.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0157.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81ec0 [0157.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81ec0 [0157.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81ec0 [0157.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a375c0 [0157.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0157.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81ec0 [0157.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0157.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0157.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81ec0 [0157.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d280 [0157.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d280) returned 1 [0157.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0157.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec5ef0 [0157.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81ec0 [0157.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81ec0 [0157.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81ec0 [0157.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81ec0) returned 1 [0157.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d10388) returned 1 [0157.070] Sleep (dwMilliseconds=0x64) [0157.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0157.457] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0157.457] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0157.457] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0157.457] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0157.457] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0157.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0157.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0157.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0157.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.458] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0157.458] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0157.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0157.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0157.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.459] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0157.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0157.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0157.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.460] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0157.460] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0157.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0157.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0157.461] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0157.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0157.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0157.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0157.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0157.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0157.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309ff68 [0157.862] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0157.862] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0157.862] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0157.862] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0157.862] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0157.862] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.863] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0157.863] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.863] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0157.863] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.863] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0157.863] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.864] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0157.864] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.864] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0157.864] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.864] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0157.864] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.864] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0157.865] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.865] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0157.865] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.865] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0157.865] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.865] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0157.865] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.866] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0157.866] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0157.866] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7d10388 [0157.866] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0157.866] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x11264) returned 0x7d10388 [0157.866] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0157.867] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x12288) returned 0x7d10388 [0157.867] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0xc0000004 [0157.867] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d10388, Size=0x132ac) returned 0x7d10388 [0157.867] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d10388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7d10388, ResultLength=0x0) returned 0x0 [0157.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309ff68 [0158.201] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0158.201] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0158.202] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0158.202] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0158.202] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0158.202] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.203] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0158.203] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.203] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0158.203] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0158.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0158.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.204] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0158.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0158.205] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.205] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0158.205] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0158.206] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.206] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0158.206] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0158.207] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.207] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0158.207] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.208] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7b2a308 [0158.208] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0158.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x11264) returned 0x7b2a308 [0158.209] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0158.209] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x12288) returned 0x7b2a308 [0158.209] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0158.210] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x132ac) returned 0x7b2a308 [0158.210] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0x0 [0158.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0158.424] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0158.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0158.424] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0158.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0158.424] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0158.425] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.425] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0158.425] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.425] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0158.425] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.425] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0158.425] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.425] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0158.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.426] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0158.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.426] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0158.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.427] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0158.427] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.427] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0158.427] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.427] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0158.427] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.428] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0158.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.428] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0158.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.428] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7b2a308 [0158.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0158.429] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x11264) returned 0x7b2a308 [0158.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0158.429] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x12288) returned 0x7b2a308 [0158.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0158.429] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x132ac) returned 0x7b2a308 [0158.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0x0 [0158.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0158.906] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0158.906] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0158.906] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0158.906] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0158.906] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0158.906] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.907] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0158.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.907] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0158.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.907] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0158.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.907] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0158.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.908] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0158.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.908] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0158.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.908] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0158.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.909] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0158.909] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.909] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0158.909] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.909] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0158.909] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.909] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0158.910] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0158.910] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7b2a308 [0158.910] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0158.910] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x11264) returned 0x7b2a308 [0158.910] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0158.911] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x12288) returned 0x7b2a308 [0158.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0158.911] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x132ac) returned 0x7b2a308 [0158.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0x0 [0158.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0159.235] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0159.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0159.235] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0159.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0159.235] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0159.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.235] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0159.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.236] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0159.236] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.236] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0159.236] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.236] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0159.236] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.237] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0159.237] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.237] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0159.237] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.237] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0159.237] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.237] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0159.237] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.238] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0159.238] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.238] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0159.238] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.238] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0159.238] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0159.239] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7b2a308 [0159.239] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0159.239] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x11264) returned 0x7b2a308 [0159.239] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0159.239] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x12288) returned 0x7b2a308 [0159.239] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0159.240] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x132ac) returned 0x7b2a308 [0159.240] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0159.240] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x142d0) returned 0x7b2a308 [0159.240] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0x0 [0159.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0160.173] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0160.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0160.174] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0160.174] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0160.174] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0160.174] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.174] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0160.174] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0160.175] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0160.175] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.175] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0160.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.176] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0160.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.176] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0160.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.177] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0160.177] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.177] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0160.177] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.177] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0160.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.178] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0160.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.178] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0160.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0160.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7b2a308 [0160.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0160.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x11264) returned 0x7b2a308 [0160.179] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0160.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x12288) returned 0x7b2a308 [0160.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0160.180] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x132ac) returned 0x7b2a308 [0160.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0x0 [0160.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0161.540] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0161.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0161.540] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0161.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0161.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0161.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0161.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.541] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0161.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.542] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0161.542] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.542] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0161.542] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.542] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0161.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.543] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0161.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.543] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0161.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0161.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0161.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.544] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0161.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0161.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.545] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7b2a308 [0161.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0161.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x11264) returned 0x7b2a308 [0161.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0161.546] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x12288) returned 0x7b2a308 [0161.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0161.547] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x132ac) returned 0x7b2a308 [0161.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0x0 [0161.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0161.967] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0161.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0161.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0161.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0161.968] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7ce0348 [0161.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x50b4) returned 0x7ce0348 [0161.969] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x60d8) returned 0x7ce0348 [0161.969] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x70fc) returned 0x7ce0348 [0161.969] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.969] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x8120) returned 0x7ce0348 [0161.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x9144) returned 0x7ce0348 [0161.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xa168) returned 0x7ce0348 [0161.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.970] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xb18c) returned 0x7ce0348 [0161.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xc1b0) returned 0x7ce0348 [0161.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xd1d4) returned 0x7ce0348 [0161.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.971] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xe1f8) returned 0x7ce0348 [0161.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0xf21c) returned 0x7ce0348 [0161.972] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ce0348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7ce0348, ResultLength=0x0) returned 0xc0000004 [0161.972] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ce0348, Size=0x10240) returned 0x7b2a308 [0161.972] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0161.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x11264) returned 0x7b2a308 [0161.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0xc0000004 [0161.973] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b2a308, Size=0x12288) returned 0x7b2a308 [0161.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b2a308, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7b2a308, ResultLength=0x0) returned 0x0 [0161.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd58 [0170.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0170.501] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0170.502] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0170.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0170.502] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0170.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0170.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7b3a308 [0170.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0170.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x50b4) returned 0x7b3a308 [0170.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0170.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x60d8) returned 0x7b3a308 [0170.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0170.503] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x70fc) returned 0x7b3a308 [0170.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0170.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x8120) returned 0x7b3a308 [0170.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0170.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x9144) returned 0x7b3a308 [0170.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0170.504] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xa168) returned 0x7b3a308 [0170.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0170.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xb18c) returned 0x7b3a308 [0170.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0170.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xc1b0) returned 0x7b3a308 [0170.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0170.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xd1d4) returned 0x7b3a308 [0170.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0170.505] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xe1f8) returned 0x7c38348 [0170.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0170.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0xf21c) returned 0x7c38348 [0170.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0170.506] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x10240) returned 0x7c38348 [0170.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0170.507] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x11264) returned 0x7c38348 [0170.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0170.507] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x12288) returned 0x7c38348 [0170.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0x0 [0170.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6540 [0170.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6540) returned 1 [0170.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e438f0 [0170.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0170.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e8e8 [0170.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e8e8 [0170.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e8e8 [0170.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e8e8 [0170.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e438f0 [0170.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0170.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e438f0 [0170.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0170.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d440 [0170.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d440) returned 1 [0170.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a259c8 [0170.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a259c8) returned 1 [0170.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53e18 [0170.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53e18 [0170.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53e18 [0170.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78fb0 [0170.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0170.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0170.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0170.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e8e8 [0170.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d440 [0170.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d440) returned 1 [0170.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53e18 [0170.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d440 [0170.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d440) returned 1 [0170.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d440 [0170.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d440) returned 1 [0170.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d440 [0170.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d440) returned 1 [0170.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0170.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78fb0 [0170.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0170.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a259c8 [0170.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a259c8) returned 1 [0170.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d440 [0170.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d440) returned 1 [0170.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e8e8 [0170.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a374d0 [0170.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0170.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e8e8 [0170.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e438f0 [0170.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0170.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53e18 [0170.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e8e8 [0170.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a374d0 [0170.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0170.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e78fb0 [0170.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0170.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e438f0 [0170.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0170.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e8e8 [0170.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53e18 [0170.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e8e8 [0170.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e53e18 [0170.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e8e8 [0170.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e8e8 [0170.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a374d0 [0170.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0170.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a374d0 [0170.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0170.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e8e8 [0170.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e8e8 [0170.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53e18 [0170.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78fb0 [0170.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0170.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a374d0 [0170.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0170.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e8e8 [0170.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e8e8 [0170.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e8e8 [0170.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a374d0 [0170.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0170.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e8e8 [0170.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0170.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0170.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a2e8e8 [0170.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d440 [0170.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d440) returned 1 [0170.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0170.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53e18 [0170.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e8e8 [0170.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e8e8 [0170.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e8e8 [0170.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2e8e8) returned 1 [0170.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c38348) returned 1 [0170.525] Sleep (dwMilliseconds=0x64) [0171.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0171.243] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0171.243] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0171.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0171.244] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0171.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0171.244] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7b3a308 [0171.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.244] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x50b4) returned 0x7b3a308 [0171.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x60d8) returned 0x7b3a308 [0171.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x70fc) returned 0x7b3a308 [0171.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x8120) returned 0x7b3a308 [0171.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.245] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x9144) returned 0x7b3a308 [0171.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xa168) returned 0x7b3a308 [0171.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xb18c) returned 0x7b3a308 [0171.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.246] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xc1b0) returned 0x7b3a308 [0171.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xd1d4) returned 0x7b3a308 [0171.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.247] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xe1f8) returned 0x7c38348 [0171.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0171.248] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0xf21c) returned 0x7c38348 [0171.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0171.248] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x10240) returned 0x7c38348 [0171.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0171.248] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x11264) returned 0x7c38348 [0171.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0171.249] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x12288) returned 0x7c38348 [0171.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0x0 [0171.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6540 [0171.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6540) returned 1 [0171.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e438f0 [0171.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0171.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e822e0 [0171.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e822e0 [0171.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e822e0 [0171.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e822e0 [0171.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e438f0 [0171.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0171.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e438f0 [0171.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0171.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e73d30 [0171.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e48ba0 [0171.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48ba0) returned 1 [0171.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5afb0 [0171.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5afb0 [0171.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5afb0 [0171.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78fb0 [0171.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0171.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0171.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0171.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e822e0 [0171.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e73d30 [0171.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5afb0 [0171.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73d30 [0171.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e73d30 [0171.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73d30 [0171.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0171.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78fb0 [0171.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0171.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48ba0 [0171.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48ba0) returned 1 [0171.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73d30 [0171.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e822e0 [0171.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0171.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0171.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e822e0 [0171.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e438f0 [0171.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0171.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5afb0 [0171.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e822e0 [0171.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0171.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0171.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e78fb0 [0171.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0171.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e438f0 [0171.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0171.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e822e0 [0171.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5afb0 [0171.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e822e0 [0171.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5afb0 [0171.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e822e0 [0171.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e822e0 [0171.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0171.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0171.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a375c0 [0171.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0171.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e822e0 [0171.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e822e0 [0171.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5afb0 [0171.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78fb0 [0171.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0171.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a375c0 [0171.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0171.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e822e0 [0171.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e822e0 [0171.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e822e0 [0171.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a375c0 [0171.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0171.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e822e0 [0171.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0171.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0171.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e822e0 [0171.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e73d30 [0171.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5afb0 [0171.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5afb0 [0171.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e822e0 [0171.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e822e0 [0171.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e822e0 [0171.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e822e0) returned 1 [0171.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c38348) returned 1 [0171.266] Sleep (dwMilliseconds=0x64) [0171.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0171.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0171.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0171.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0171.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0171.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0171.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7b3a308 [0171.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.610] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x50b4) returned 0x7b3a308 [0171.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x60d8) returned 0x7b3a308 [0171.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x70fc) returned 0x7b3a308 [0171.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x8120) returned 0x7b3a308 [0171.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.611] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x9144) returned 0x7b3a308 [0171.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.612] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xa168) returned 0x7b3a308 [0171.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.612] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xb18c) returned 0x7b3a308 [0171.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.612] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xc1b0) returned 0x7b3a308 [0171.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xd1d4) returned 0x7b3a308 [0171.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0171.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xe1f8) returned 0x7c38348 [0171.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0171.613] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0xf21c) returned 0x7c38348 [0171.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0171.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x10240) returned 0x7c38348 [0171.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0171.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x11264) returned 0x7c38348 [0171.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0171.614] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x12288) returned 0x7c38348 [0171.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0x0 [0171.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6550 [0171.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6550) returned 1 [0171.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43ad0 [0171.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0171.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a34b10 [0171.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a34b10 [0171.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a34b10 [0171.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b4b0 [0171.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0171.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b4b0 [0171.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0171.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a34b10 [0171.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0171.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0171.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b4b0 [0171.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0171.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0171.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0171.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b4b0 [0171.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0171.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e73d30 [0171.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3d41338 [0171.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41338) returned 1 [0171.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5b820 [0171.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5b820 [0171.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b820 [0171.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e798a8 [0171.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0171.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0171.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0171.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a34b10 [0171.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e73d30 [0171.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b820 [0171.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73d30 [0171.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e73d30 [0171.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73d30 [0171.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0171.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e798a8 [0171.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41338 [0171.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41338) returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73d30 [0171.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a34b10 [0171.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37500 [0171.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a34b10 [0171.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0171.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0171.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b820 [0171.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a34b10 [0171.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37500 [0171.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0171.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e798a8 [0171.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0171.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0171.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0171.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a34b10 [0171.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b820 [0171.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a34b10 [0171.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b820 [0171.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a34b10 [0171.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a34b10 [0171.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37500 [0171.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0171.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37500 [0171.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0171.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a34b10 [0171.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a34b10 [0171.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5b820 [0171.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e798a8 [0171.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0171.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37500 [0171.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0171.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a34b10 [0171.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a34b10 [0171.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a34b10 [0171.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37500 [0171.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0171.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a34b10 [0171.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0171.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0171.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a34b10 [0171.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e73d30 [0171.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 [0171.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0171.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5b820 [0171.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a34b10 [0171.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a34b10 [0171.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a34b10 [0171.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a34b10) returned 1 [0171.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c38348) returned 1 [0171.631] Sleep (dwMilliseconds=0x64) [0172.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0172.030] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0172.030] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0172.030] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0172.031] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0172.031] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0172.031] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7b3a308 [0172.031] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.031] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x50b4) returned 0x7b3a308 [0172.031] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.032] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x60d8) returned 0x7b3a308 [0172.032] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.032] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x70fc) returned 0x7b3a308 [0172.032] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.032] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x8120) returned 0x7b3a308 [0172.032] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.033] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x9144) returned 0x7b3a308 [0172.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.033] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xa168) returned 0x7b3a308 [0172.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.033] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xb18c) returned 0x7b3a308 [0172.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.034] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xc1b0) returned 0x7b3a308 [0172.034] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.034] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xd1d4) returned 0x7b3a308 [0172.034] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.035] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xe1f8) returned 0x7c38348 [0172.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0172.035] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0xf21c) returned 0x7c38348 [0172.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0172.035] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x10240) returned 0x7c38348 [0172.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0172.036] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x11264) returned 0x7c38348 [0172.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0x0 [0172.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6550 [0172.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6550) returned 1 [0172.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43ad0 [0172.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0172.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81020 [0172.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81020 [0172.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81020 [0172.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81020 [0172.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0172.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0172.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0172.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0172.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e73eb0 [0172.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73eb0) returned 1 [0172.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3d41380 [0172.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41380) returned 1 [0172.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5b618 [0172.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5b618 [0172.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b618 [0172.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79100 [0172.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79100) returned 1 [0172.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0172.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0172.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81020 [0172.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e73eb0 [0172.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73eb0) returned 1 [0172.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b618 [0172.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73eb0 [0172.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73eb0) returned 1 [0172.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3e73eb0 [0172.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73eb0) returned 1 [0172.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73eb0 [0172.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73eb0) returned 1 [0172.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0172.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79100 [0172.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79100) returned 1 [0172.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41380 [0172.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41380) returned 1 [0172.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73eb0 [0172.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73eb0) returned 1 [0172.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81020 [0172.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37500 [0172.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0172.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81020 [0172.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0172.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0172.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b618 [0172.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81020 [0172.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37500 [0172.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0172.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79100 [0172.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79100) returned 1 [0172.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43ad0 [0172.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e43ad0) returned 1 [0172.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81020 [0172.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b618 [0172.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81020 [0172.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b618 [0172.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81020 [0172.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81020 [0172.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37500 [0172.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0172.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37500 [0172.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0172.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81020 [0172.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81020 [0172.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5b618 [0172.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79100 [0172.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79100) returned 1 [0172.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37500 [0172.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0172.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81020 [0172.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81020 [0172.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81020 [0172.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37500 [0172.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0172.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81020 [0172.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0172.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0172.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81020 [0172.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e73eb0 [0172.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73eb0) returned 1 [0172.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b618 [0172.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5b618 [0172.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0172.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81020 [0172.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81020 [0172.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81020 [0172.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81020) returned 1 [0172.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c38348) returned 1 [0172.054] Sleep (dwMilliseconds=0x64) [0172.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0172.355] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0172.356] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0172.356] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0172.356] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0172.356] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0172.356] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7b3a308 [0172.356] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.357] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x50b4) returned 0x7b3a308 [0172.357] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.357] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x60d8) returned 0x7b3a308 [0172.357] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.357] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x70fc) returned 0x7b3a308 [0172.357] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.358] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x8120) returned 0x7b3a308 [0172.358] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.358] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x9144) returned 0x7b3a308 [0172.358] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.358] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xa168) returned 0x7b3a308 [0172.358] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.359] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xb18c) returned 0x7b3a308 [0172.359] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.359] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xc1b0) returned 0x7b3a308 [0172.359] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.359] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xd1d4) returned 0x7b3a308 [0172.359] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0172.360] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xe1f8) returned 0x7c38348 [0172.360] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0172.360] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0xf21c) returned 0x7c38348 [0172.360] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0172.360] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x10240) returned 0x7c38348 [0172.360] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0172.361] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x11264) returned 0x7c38348 [0172.361] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0172.361] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x12288) returned 0x7c38348 [0172.361] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0x0 [0172.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6540 [0172.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6540) returned 1 [0172.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x7ad9280 [0172.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9280) returned 1 [0172.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e812e0 [0172.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e812e0 [0172.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e812e0 [0172.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0172.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0172.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e812e0 [0172.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9280 [0172.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9280) returned 1 [0172.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0172.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9280 [0172.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9280) returned 1 [0172.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0172.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2dc00 [0172.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2dc00) returned 1 [0172.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e56408 [0172.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56408) returned 1 [0172.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0172.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dc9d60 [0172.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0172.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79100 [0172.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79100) returned 1 [0172.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0172.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0172.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e812e0 [0172.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2dc00 [0172.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2dc00) returned 1 [0172.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0172.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2dc00 [0172.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2dc00) returned 1 [0172.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2dc00 [0172.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2dc00) returned 1 [0172.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2dc00 [0172.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2dc00) returned 1 [0172.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0172.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79100 [0172.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79100) returned 1 [0172.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56408 [0172.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56408) returned 1 [0172.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0172.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2dc00 [0172.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2dc00) returned 1 [0172.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e812e0 [0172.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0172.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0172.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e812e0 [0172.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0172.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e812e0 [0172.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9280 [0172.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad9280) returned 1 [0172.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0172.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0172.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e812e0 [0172.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e812e0) returned 1 [0172.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0172.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0172.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79100 [0172.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79100) returned 1 [0172.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9280 [0173.156] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0173.156] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0173.157] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0173.157] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0173.157] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7b3a308 [0173.157] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0173.157] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x50b4) returned 0x7b3a308 [0173.157] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0173.158] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x60d8) returned 0x7b3a308 [0173.158] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0173.158] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x70fc) returned 0x7b3a308 [0173.158] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0173.158] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x8120) returned 0x7b3a308 [0173.158] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0173.159] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x9144) returned 0x7b3a308 [0173.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0173.159] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xa168) returned 0x7b3a308 [0173.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0173.159] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xb18c) returned 0x7b3a308 [0173.160] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0173.160] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xc1b0) returned 0x7b3a308 [0173.160] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0173.160] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xd1d4) returned 0x7b3a308 [0173.160] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0173.160] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xe1f8) returned 0x7c38348 [0173.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0173.161] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0xf21c) returned 0x7c38348 [0173.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0173.161] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x10240) returned 0x7c38348 [0173.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0173.161] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x11264) returned 0x7c38348 [0173.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0173.162] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x12288) returned 0x7c38348 [0173.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0173.162] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x132ac) returned 0x7c38348 [0173.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0173.162] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x142d0) returned 0x7c38348 [0173.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0173.163] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x152f4) returned 0x7c38348 [0173.163] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0x0 [0173.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6550 [0174.059] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7b48360 [0174.059] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b48360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7b48360, ResultLength=0x0) returned 0xc0000004 [0174.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b48360, Size=0x306c) returned 0x7ab50b0 [0174.060] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ab50b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7ab50b0, ResultLength=0x0) returned 0xc0000004 [0174.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ab50b0, Size=0x4090) returned 0x7b3a308 [0174.060] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0174.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x50b4) returned 0x7b3a308 [0174.060] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0174.060] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x60d8) returned 0x7b3a308 [0174.061] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0174.061] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x70fc) returned 0x7b3a308 [0174.061] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0174.061] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x8120) returned 0x7b3a308 [0174.061] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0174.061] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0x9144) returned 0x7b3a308 [0174.061] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0174.062] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xa168) returned 0x7b3a308 [0174.062] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0174.062] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xb18c) returned 0x7b3a308 [0174.062] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0174.062] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xc1b0) returned 0x7b3a308 [0174.062] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0174.062] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xd1d4) returned 0x7b3a308 [0174.062] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a308, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7b3a308, ResultLength=0x0) returned 0xc0000004 [0174.063] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a308, Size=0xe1f8) returned 0x7c38348 [0174.063] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0174.063] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0xf21c) returned 0x7c38348 [0174.063] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0174.063] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x10240) returned 0x7c38348 [0174.063] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0174.064] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x11264) returned 0x7c38348 [0174.064] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0174.064] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x12288) returned 0x7c38348 [0174.064] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0174.065] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x132ac) returned 0x7c38348 [0174.065] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0174.065] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x142d0) returned 0x7c38348 [0174.065] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0xc0000004 [0174.065] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38348, Size=0x152f4) returned 0x7c38348 [0174.065] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38348, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x7c38348, ResultLength=0x0) returned 0x0 [0174.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x3ea6550 [0194.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0194.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0194.492] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7d103a0 [0194.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d103a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7d103a0, ResultLength=0x0) returned 0xc0000004 [0194.493] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d103a0, Size=0x306c) returned 0x7a750b0 [0194.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a750b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a750b0, ResultLength=0x0) returned 0xc0000004 [0194.493] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a750b0, Size=0x4090) returned 0x7cc2008 [0194.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.494] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x50b4) returned 0x7cc2008 [0194.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.494] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x60d8) returned 0x7cc2008 [0194.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.495] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x70fc) returned 0x7cc2008 [0194.495] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.495] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x8120) returned 0x7cc2008 [0194.495] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.496] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x9144) returned 0x7cc2008 [0194.496] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.496] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xa168) returned 0x7cc2008 [0194.496] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.496] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xb18c) returned 0x7cc2008 [0194.497] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.497] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xc1b0) returned 0x7cc2008 [0194.497] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.497] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xd1d4) returned 0x7cc2008 [0194.498] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.498] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xe1f8) returned 0x7cc2008 [0194.498] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.498] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xf21c) returned 0x7cc2008 [0194.499] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.499] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x10240) returned 0x7cc2008 [0194.499] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.499] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x11264) returned 0x7cc2008 [0194.500] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.500] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x12288) returned 0x7cc2008 [0194.500] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.500] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x132ac) returned 0x7cc2008 [0194.501] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.501] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x142d0) returned 0x7cc2008 [0194.501] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.501] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x152f4) returned 0x7cc2008 [0194.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0194.502] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x16318) returned 0x7cc2008 [0194.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0x0 [0194.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2f2b98 [0194.503] Sleep (dwMilliseconds=0x64) [0195.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0195.220] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0195.220] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7d103a0 [0195.220] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d103a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7d103a0, ResultLength=0x0) returned 0xc0000004 [0195.221] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d103a0, Size=0x306c) returned 0x7a750b0 [0195.221] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a750b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a750b0, ResultLength=0x0) returned 0xc0000004 [0195.221] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a750b0, Size=0x4090) returned 0x7cc2008 [0195.221] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.221] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x50b4) returned 0x7cc2008 [0195.221] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.222] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x60d8) returned 0x7cc2008 [0195.222] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.222] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x70fc) returned 0x7cc2008 [0195.222] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.222] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x8120) returned 0x7cc2008 [0195.222] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.223] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x9144) returned 0x7cc2008 [0195.223] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.223] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xa168) returned 0x7cc2008 [0195.223] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.224] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xb18c) returned 0x7cc2008 [0195.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.224] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xc1b0) returned 0x7cc2008 [0195.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.224] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xd1d4) returned 0x7cc2008 [0195.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.225] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xe1f8) returned 0x7cc2008 [0195.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.225] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xf21c) returned 0x7cc2008 [0195.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.225] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x10240) returned 0x7cc2008 [0195.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.226] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x11264) returned 0x7cc2008 [0195.226] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.226] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x12288) returned 0x7cc2008 [0195.226] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.227] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x132ac) returned 0x7cc2008 [0195.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.227] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x142d0) returned 0x7cc2008 [0195.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.227] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x152f4) returned 0x7cc2008 [0195.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.228] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x16318) returned 0x7cc2008 [0195.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0x0 [0195.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2f2b98 [0195.228] Sleep (dwMilliseconds=0x64) [0195.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0195.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0195.595] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7d103a0 [0195.595] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d103a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7d103a0, ResultLength=0x0) returned 0xc0000004 [0195.595] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d103a0, Size=0x306c) returned 0x7a750b0 [0195.595] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a750b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a750b0, ResultLength=0x0) returned 0xc0000004 [0195.595] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a750b0, Size=0x4090) returned 0x7cc2008 [0195.596] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.596] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x50b4) returned 0x7cc2008 [0195.596] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.596] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x60d8) returned 0x7cc2008 [0195.596] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.596] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x70fc) returned 0x7cc2008 [0195.597] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.597] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x8120) returned 0x7cc2008 [0195.597] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.597] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x9144) returned 0x7cc2008 [0195.597] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.598] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xa168) returned 0x7cc2008 [0195.598] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.598] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xb18c) returned 0x7cc2008 [0195.598] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.598] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xc1b0) returned 0x7cc2008 [0195.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.599] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xd1d4) returned 0x7cc2008 [0195.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.599] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xe1f8) returned 0x7cc2008 [0195.599] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.600] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xf21c) returned 0x7cc2008 [0195.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.600] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x10240) returned 0x7cc2008 [0195.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.601] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x11264) returned 0x7cc2008 [0195.601] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.601] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x12288) returned 0x7cc2008 [0195.601] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.602] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x132ac) returned 0x7cc2008 [0195.602] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.602] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x142d0) returned 0x7cc2008 [0195.602] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.602] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x152f4) returned 0x7cc2008 [0195.603] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0195.603] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x16318) returned 0x7cc2008 [0195.603] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0x0 [0195.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2f2b98 [0195.604] Sleep (dwMilliseconds=0x64) [0197.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0197.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0197.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7d103a0 [0197.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7d103a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7d103a0, ResultLength=0x0) returned 0xc0000004 [0197.824] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7d103a0, Size=0x306c) returned 0x7a750b0 [0197.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7a750b0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7a750b0, ResultLength=0x0) returned 0xc0000004 [0197.824] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a750b0, Size=0x4090) returned 0x7cc2008 [0197.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x50b4) returned 0x7cc2008 [0197.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.825] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x60d8) returned 0x7cc2008 [0197.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x70fc) returned 0x7cc2008 [0197.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x8120) returned 0x7cc2008 [0197.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x9144) returned 0x7cc2008 [0197.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xa168) returned 0x7cc2008 [0197.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xb18c) returned 0x7cc2008 [0197.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xc1b0) returned 0x7cc2008 [0197.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xd1d4) returned 0x7cc2008 [0197.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xe1f8) returned 0x7cc2008 [0197.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0xf21c) returned 0x7cc2008 [0197.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x10240) returned 0x7cc2008 [0197.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x11264) returned 0x7cc2008 [0197.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x12288) returned 0x7cc2008 [0197.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x132ac) returned 0x7cc2008 [0197.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.831] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x142d0) returned 0x7cc2008 [0197.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.832] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x152f4) returned 0x7cc2008 [0197.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0xc0000004 [0197.832] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cc2008, Size=0x16318) returned 0x7cc2008 [0197.833] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cc2008, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x7cc2008, ResultLength=0x0) returned 0x0 [0197.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2f2b98 [0197.834] Sleep (dwMilliseconds=0x64) [0199.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0199.166] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0199.170] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f50060 [0199.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0199.179] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x306c) returned 0x10f90060 [0199.185] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0199.186] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x4090) returned 0x7cca008 [0199.186] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.186] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0x50b4) returned 0x7cca008 [0199.186] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.186] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0x60d8) returned 0x7cca008 [0199.187] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.187] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0x70fc) returned 0x7cca008 [0199.187] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.187] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0x8120) returned 0x7cca008 [0199.187] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.188] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0x9144) returned 0x7cca008 [0199.188] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.188] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0xa168) returned 0x7cca008 [0199.188] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.189] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0xb18c) returned 0x7cca008 [0199.189] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.189] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0xc1b0) returned 0x7cca008 [0199.189] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.190] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0xd1d4) returned 0x7cca008 [0199.190] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.190] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0xe1f8) returned 0x7cca008 [0199.190] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7cca008, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7cca008, ResultLength=0x0) returned 0xc0000004 [0199.190] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7cca008, Size=0xf21c) returned 0x7dd0388 [0199.191] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7dd0388, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7dd0388, ResultLength=0x0) returned 0xc0000004 [0199.192] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7dd0388, Size=0x10240) returned 0x7dd0388 [0199.192] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7dd0388, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7dd0388, ResultLength=0x0) returned 0xc0000004 [0199.192] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7dd0388, Size=0x11264) returned 0x7dd0388 [0199.193] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7dd0388, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7dd0388, ResultLength=0x0) returned 0xc0000004 [0199.193] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7dd0388, Size=0x12288) returned 0x7dd0388 [0199.193] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7dd0388, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7dd0388, ResultLength=0x0) returned 0xc0000004 [0199.194] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7dd0388, Size=0x132ac) returned 0x7dd0388 [0199.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7dd0388, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7dd0388, ResultLength=0x0) returned 0xc0000004 [0199.194] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7dd0388, Size=0x142d0) returned 0x7dd0388 [0199.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7dd0388, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7dd0388, ResultLength=0x0) returned 0xc0000004 [0199.195] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7dd0388, Size=0x152f4) returned 0x7dd0388 [0199.195] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7dd0388, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x7dd0388, ResultLength=0x0) returned 0xc0000004 [0199.195] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7dd0388, Size=0x16318) returned 0x7dd0388 [0199.195] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7dd0388, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x7dd0388, ResultLength=0x0) returned 0x0 [0199.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x2f2b98 [0226.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0226.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3d7ef68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x3d7ef68, ResultLength=0x0) returned 0xc0000004 [0226.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0226.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0226.822] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0226.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0226.823] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0226.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0226.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0226.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.826] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0226.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0226.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0226.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.827] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0226.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0226.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0226.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.828] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0226.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0226.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0226.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.829] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0226.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0226.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0226.830] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0226.834] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0226.834] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0226.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0226.835] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x142d0) returned 0x7ad9cb0 [0226.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0226.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0227.159] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0227.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0227.159] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0227.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0227.159] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0227.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.160] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0227.160] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.160] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0227.160] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.160] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0227.160] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.161] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0227.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.161] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0227.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.161] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0227.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.161] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0227.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.162] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0227.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.162] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0227.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.162] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0227.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.162] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0227.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.163] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0227.163] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.163] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0227.163] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.163] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0227.163] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0227.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0227.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0227.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0227.462] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0227.462] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0227.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0227.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0227.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.463] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0227.463] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0227.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0227.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.464] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0227.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0227.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0227.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.465] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0227.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.466] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0227.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.466] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0227.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0227.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0227.467] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.467] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0227.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.468] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0227.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0227.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0227.566] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0227.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0227.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0227.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0227.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0227.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0227.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.567] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0227.567] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0227.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0227.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0227.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.568] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0227.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0227.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0227.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0227.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.569] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0227.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0227.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0227.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.570] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0227.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0227.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0227.571] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0227.571] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0227.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0227.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0227.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0227.676] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0227.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0227.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0227.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0227.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0227.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0227.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.677] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0227.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0227.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0227.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0227.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.678] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0227.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0227.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0227.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.679] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0227.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0227.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0227.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0227.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0227.680] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0227.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0227.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0227.786] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0227.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0227.786] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0227.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0227.786] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0227.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.787] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0227.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.787] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0227.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.787] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0227.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.787] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0227.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.788] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0227.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.788] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0227.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.788] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0227.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.789] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0227.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.789] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0227.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.789] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0227.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.789] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0227.790] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.790] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0227.790] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.790] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0227.790] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.790] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0227.790] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0227.791] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0227.791] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0227.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0227.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0227.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0227.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0227.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0227.894] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0227.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0227.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0227.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0227.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0227.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0227.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0227.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0227.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0227.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0227.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0227.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0227.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.897] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0227.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0227.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0227.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0227.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0227.898] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0227.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0227.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0228.003] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0228.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0228.004] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0228.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0228.004] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0228.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.005] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0228.005] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.005] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0228.005] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.005] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0228.005] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.006] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0228.006] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.006] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0228.006] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.006] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0228.006] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.007] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0228.007] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.007] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0228.007] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.007] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0228.007] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.008] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0228.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.008] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0228.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.008] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0228.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.009] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0228.009] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.009] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0228.009] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0228.010] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0228.010] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0228.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0228.113] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0228.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0228.114] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0228.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0228.114] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0228.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.114] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0228.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0228.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0228.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0228.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.115] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0228.116] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.116] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0228.116] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.116] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0228.116] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.116] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0228.116] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.117] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0228.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.117] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0228.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.117] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0228.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.118] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0228.118] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.118] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0228.118] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.119] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0228.119] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0228.119] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0228.119] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0228.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0228.221] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0228.222] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0228.222] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0228.222] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0228.222] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0228.223] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.223] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0228.223] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.223] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0228.223] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.223] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0228.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.224] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0228.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.224] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0228.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.225] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0228.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.225] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0228.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.225] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0228.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.226] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0228.226] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.226] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0228.226] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.226] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0228.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.227] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0228.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.227] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0228.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.228] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0228.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0228.228] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0228.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0228.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0228.331] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0228.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0228.331] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0228.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0228.332] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0228.332] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.332] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0228.332] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.332] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0228.332] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.332] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0228.332] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.333] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0228.333] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.333] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0228.333] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.333] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0228.333] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.333] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0228.334] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.334] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0228.334] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.334] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0228.334] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.334] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0228.334] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.335] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0228.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.335] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0228.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.335] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0228.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.335] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0228.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0228.336] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0228.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0228.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0228.446] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0228.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0228.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0228.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0228.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0228.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0228.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0228.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.447] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0228.448] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.448] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0228.448] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.448] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0228.448] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.448] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0228.448] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0228.449] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0228.449] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0228.449] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.449] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0228.449] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.450] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0228.450] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.450] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0228.450] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.450] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0228.450] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.450] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0228.451] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0228.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0228.451] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0228.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0228.549] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0228.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0228.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0228.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0228.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0228.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.550] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0228.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0228.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0228.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.551] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0228.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0228.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0228.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0228.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.552] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0228.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0228.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0228.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.553] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0228.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0228.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0228.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.554] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0228.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0228.555] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0228.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0228.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0228.658] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0228.658] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0228.658] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0228.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0228.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0228.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0228.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0228.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.659] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0228.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0228.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0228.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0228.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.660] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0228.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.661] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0228.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.661] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0228.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.661] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0228.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.662] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0228.662] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.662] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0228.662] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.662] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0228.662] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.662] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0228.663] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0228.663] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0228.663] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0228.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0228.813] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0228.813] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0228.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0228.814] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0228.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7c78348 [0228.814] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.814] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x50b4) returned 0x7c78348 [0228.815] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x60d8) returned 0x7c78348 [0228.815] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x70fc) returned 0x7c78348 [0228.815] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.815] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x8120) returned 0x7c78348 [0228.815] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.816] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x9144) returned 0x7c78348 [0228.816] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.816] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xa168) returned 0x7c78348 [0228.816] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.816] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xb18c) returned 0x7c78348 [0228.816] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.817] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xc1b0) returned 0x7c78348 [0228.817] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.817] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xd1d4) returned 0x7c78348 [0228.817] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.817] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xe1f8) returned 0x7c78348 [0228.817] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0xf21c) returned 0x7c78348 [0228.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x10240) returned 0x7c78348 [0228.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.818] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x11264) returned 0x7c78348 [0228.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0228.819] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x7ad9cb0 [0228.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0xc0000004 [0228.819] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7ad9cb0, Size=0x132ac) returned 0x7ad9cb0 [0228.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7ad9cb0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x7ad9cb0, ResultLength=0x0) returned 0x0 [0228.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0229.469] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0229.469] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0229.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0229.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0229.470] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7b32308 [0229.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0229.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0229.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0229.471] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0229.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0229.472] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0229.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0229.472] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x3eca800 [0229.472] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x9144) returned 0x3eca800 [0229.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xa168) returned 0x3eca800 [0229.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0229.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.473] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0229.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0229.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0229.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.474] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xf21c) returned 0x3eca800 [0229.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0x0 [0229.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0229.887] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0229.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0229.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0229.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0229.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7b32308 [0229.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0229.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0229.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0229.888] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0229.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0229.889] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0229.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0229.889] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x3eca800 [0229.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.889] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x9144) returned 0x3eca800 [0229.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.889] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xa168) returned 0x3eca800 [0229.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.890] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0229.890] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.890] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0229.890] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.890] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0229.891] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.891] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0229.891] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0229.891] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xf21c) returned 0x3eca800 [0229.891] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0x0 [0229.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0230.294] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0230.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0230.294] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0230.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0230.295] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7b32308 [0230.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.295] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0230.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.295] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0230.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.296] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0230.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.296] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x3eca800 [0230.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.296] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x9144) returned 0x3eca800 [0230.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.297] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xa168) returned 0x3eca800 [0230.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.297] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0230.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.297] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0230.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.297] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0230.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.298] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0230.298] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.298] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xf21c) returned 0x3eca800 [0230.298] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0x0 [0230.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0230.435] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0230.435] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0230.435] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0230.435] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0230.451] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7b32308 [0230.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0230.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0230.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0230.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.452] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x3eca800 [0230.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x9144) returned 0x3eca800 [0230.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xa168) returned 0x3eca800 [0230.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0230.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.453] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0230.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.454] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0230.454] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.454] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0230.454] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.454] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xf21c) returned 0x3eca800 [0230.454] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.454] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x10240) returned 0x3eca800 [0230.454] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0x0 [0230.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0230.597] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x10f90060 [0230.598] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f90060, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x10f90060, ResultLength=0x0) returned 0xc0000004 [0230.598] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f90060, Size=0x306c) returned 0x10f50060 [0230.598] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x10f50060, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x10f50060, ResultLength=0x0) returned 0xc0000004 [0230.598] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x10f50060, Size=0x4090) returned 0x7b32308 [0230.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0230.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0230.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0230.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.633] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x3eca800 [0230.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.705] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x9144) returned 0x3eca800 [0230.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.706] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xa168) returned 0x3eca800 [0230.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.707] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0230.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.707] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0230.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.707] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0230.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.707] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0230.708] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.708] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xf21c) returned 0x3eca800 [0230.708] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.708] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x10240) returned 0x3eca800 [0230.708] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.708] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x11264) returned 0x7c78348 [0230.710] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0x0 [0230.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0230.895] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7c38360 [0230.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7c38360, ResultLength=0x0) returned 0xc0000004 [0230.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38360, Size=0x306c) returned 0x7b3a320 [0230.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a320, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b3a320, ResultLength=0x0) returned 0xc0000004 [0230.896] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a320, Size=0x4090) returned 0x7b32308 [0230.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.899] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0230.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0230.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0230.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0230.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x3eca800 [0230.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.900] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x9144) returned 0x3eca800 [0230.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xa168) returned 0x3eca800 [0230.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0230.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0230.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.901] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0230.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.902] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0230.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.902] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xf21c) returned 0x3eca800 [0230.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.902] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x10240) returned 0x3eca800 [0230.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0230.902] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x11264) returned 0x7c78348 [0230.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0x0 [0230.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 [0231.044] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3d7ef68, Size=0x2048) returned 0x7c38360 [0231.044] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c38360, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x7c38360, ResultLength=0x0) returned 0xc0000004 [0231.045] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c38360, Size=0x306c) returned 0x7b3a320 [0231.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b3a320, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x7b3a320, ResultLength=0x0) returned 0xc0000004 [0231.045] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b3a320, Size=0x4090) returned 0x7b32308 [0231.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0231.045] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x50b4) returned 0x7b32308 [0231.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0231.045] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x60d8) returned 0x7b32308 [0231.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0231.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x70fc) returned 0x7b32308 [0231.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7b32308, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x7b32308, ResultLength=0x0) returned 0xc0000004 [0231.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7b32308, Size=0x8120) returned 0x3eca800 [0231.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0231.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x9144) returned 0x3eca800 [0231.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0231.046] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xa168) returned 0x3eca800 [0231.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0231.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xb18c) returned 0x3eca800 [0231.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0231.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xc1b0) returned 0x3eca800 [0231.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0231.047] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xd1d4) returned 0x3eca800 [0231.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0231.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xe1f8) returned 0x3eca800 [0231.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0231.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0xf21c) returned 0x3eca800 [0231.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0231.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x10240) returned 0x3eca800 [0231.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3eca800, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x3eca800, ResultLength=0x0) returned 0xc0000004 [0231.048] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3eca800, Size=0x11264) returned 0x7c78348 [0231.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x7c78348, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x7c78348, ResultLength=0x0) returned 0xc0000004 [0231.049] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7c78348, Size=0x12288) returned 0x3e8ed50 [0231.056] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3e8ed50, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x3e8ed50, ResultLength=0x0) returned 0x0 [0231.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2) returned 0x309fd68 Thread: id = 118 os_tid = 0xfe8 Thread: id = 119 os_tid = 0xff0 [0120.623] Sleep (dwMilliseconds=0x1) [0120.682] WaitForSingleObject (hHandle=0x10d4, dwMilliseconds=0x0) returned 0x102 [0120.682] Sleep (dwMilliseconds=0x1) [0120.737] WaitForSingleObject (hHandle=0x10d4, dwMilliseconds=0x0) returned 0x0 [0120.737] CloseHandle (hObject=0x10d4) returned 1 [0120.737] WaitForSingleObject (hHandle=0x750, dwMilliseconds=0x0) returned 0x0 [0120.737] CloseHandle (hObject=0x750) returned 1 [0120.737] WaitForSingleObject (hHandle=0x10c0, dwMilliseconds=0x0) returned 0x0 [0120.737] CloseHandle (hObject=0x10c0) returned 1 [0120.737] WaitForSingleObject (hHandle=0x3cc, dwMilliseconds=0x0) returned 0x102 [0120.737] WaitForSingleObject (hHandle=0x10c4, dwMilliseconds=0x0) returned 0x102 [0120.737] WaitForSingleObject (hHandle=0x10a4, dwMilliseconds=0x0) returned 0x102 [0120.737] WaitForSingleObject (hHandle=0x10cc, dwMilliseconds=0x0) returned 0x102 [0120.737] WaitForSingleObject (hHandle=0xb84, dwMilliseconds=0x0) returned 0x102 [0120.737] Sleep (dwMilliseconds=0x1) [0120.883] WaitForSingleObject (hHandle=0x750, dwMilliseconds=0x0) returned 0x0 [0120.884] CloseHandle (hObject=0x750) returned 1 [0120.884] WaitForSingleObject (hHandle=0x10d4, dwMilliseconds=0x0) returned 0x0 [0120.884] CloseHandle (hObject=0x10d4) returned 1 [0120.884] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0x0) returned 0x0 [0120.884] CloseHandle (hObject=0x3ec) returned 1 [0120.884] WaitForSingleObject (hHandle=0x3cc, dwMilliseconds=0x0) returned 0x0 [0120.884] CloseHandle (hObject=0x3cc) returned 1 [0120.884] WaitForSingleObject (hHandle=0x10c4, dwMilliseconds=0x0) returned 0x0 [0120.884] CloseHandle (hObject=0x10c4) returned 1 [0120.885] WaitForSingleObject (hHandle=0x10a4, dwMilliseconds=0x0) returned 0x102 [0120.885] WaitForSingleObject (hHandle=0x10cc, dwMilliseconds=0x0) returned 0x0 [0120.885] CloseHandle (hObject=0x10cc) returned 1 [0120.885] WaitForSingleObject (hHandle=0xb84, dwMilliseconds=0x0) returned 0x0 [0120.885] CloseHandle (hObject=0xb84) returned 1 [0120.885] WaitForSingleObject (hHandle=0x76c, dwMilliseconds=0x0) returned 0x0 [0120.885] CloseHandle (hObject=0x76c) returned 1 [0120.885] WaitForSingleObject (hHandle=0x10f8, dwMilliseconds=0x0) returned 0x0 [0120.885] CloseHandle (hObject=0x10f8) returned 1 [0120.885] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0x0) returned 0x0 [0120.885] CloseHandle (hObject=0xb7c) returned 1 [0120.886] WaitForSingleObject (hHandle=0x10b4, dwMilliseconds=0x0) returned 0x0 [0120.886] CloseHandle (hObject=0x10b4) returned 1 [0120.886] WaitForSingleObject (hHandle=0x10e8, dwMilliseconds=0x0) returned 0x102 [0120.886] WaitForSingleObject (hHandle=0xb74, dwMilliseconds=0x0) returned 0x102 [0120.886] WaitForSingleObject (hHandle=0x10a8, dwMilliseconds=0x0) returned 0x102 [0120.886] WaitForSingleObject (hHandle=0x10d8, dwMilliseconds=0x0) returned 0x102 [0120.886] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0x0) returned 0x102 [0120.886] WaitForSingleObject (hHandle=0x10c8, dwMilliseconds=0x0) returned 0x102 [0120.886] WaitForSingleObject (hHandle=0x10dc, dwMilliseconds=0x0) returned 0x102 [0120.886] WaitForSingleObject (hHandle=0xb50, dwMilliseconds=0x0) returned 0x102 [0120.886] WaitForSingleObject (hHandle=0x10bc, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0x10f4, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0x10e0, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0x10e4, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0xb10, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0xb0c, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0xadc, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0xb34, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0xb08, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0xb04, dwMilliseconds=0x0) returned 0x102 [0120.887] WaitForSingleObject (hHandle=0xacc, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0xb24, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0xb00, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0xac4, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0xb1c, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0xaf4, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0x270, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0xb14, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0xae8, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0xafc, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0x484, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0x0) returned 0x102 [0120.888] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0x0) returned 0x102 [0120.889] WaitForSingleObject (hHandle=0xb30, dwMilliseconds=0x0) returned 0x102 [0120.889] WaitForSingleObject (hHandle=0xb88, dwMilliseconds=0x0) returned 0x102 [0120.889] WaitForSingleObject (hHandle=0xb5c, dwMilliseconds=0x0) returned 0x102 [0120.889] WaitForSingleObject (hHandle=0xb28, dwMilliseconds=0x0) returned 0x102 [0120.889] WaitForSingleObject (hHandle=0xb80, dwMilliseconds=0x0) returned 0x102 [0120.889] WaitForSingleObject (hHandle=0xb58, dwMilliseconds=0x0) returned 0x102 [0120.889] WaitForSingleObject (hHandle=0xb20, dwMilliseconds=0x0) returned 0x102 [0120.889] WaitForSingleObject (hHandle=0xb78, dwMilliseconds=0x0) returned 0x102 [0120.889] WaitForSingleObject (hHandle=0xb54, dwMilliseconds=0x0) returned 0x102 [0120.889] WaitForSingleObject (hHandle=0xb18, dwMilliseconds=0x0) returned 0x102 [0120.889] Sleep (dwMilliseconds=0x1) [0121.271] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0x0) returned 0x102 [0121.271] WaitForSingleObject (hHandle=0x10f8, dwMilliseconds=0x0) returned 0x102 [0121.271] WaitForSingleObject (hHandle=0x76c, dwMilliseconds=0x0) returned 0x102 [0121.271] WaitForSingleObject (hHandle=0xb84, dwMilliseconds=0x0) returned 0x102 [0121.271] WaitForSingleObject (hHandle=0x10cc, dwMilliseconds=0x0) returned 0x102 [0121.271] WaitForSingleObject (hHandle=0x10a4, dwMilliseconds=0x0) returned 0x0 [0121.271] CloseHandle (hObject=0x10a4) returned 1 [0121.272] WaitForSingleObject (hHandle=0x10c4, dwMilliseconds=0x0) returned 0x102 [0121.272] WaitForSingleObject (hHandle=0x3cc, dwMilliseconds=0x0) returned 0x0 [0121.272] CloseHandle (hObject=0x3cc) returned 1 [0121.272] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0x0) returned 0x102 [0121.272] WaitForSingleObject (hHandle=0x10d4, dwMilliseconds=0x0) returned 0x102 [0121.272] WaitForSingleObject (hHandle=0x750, dwMilliseconds=0x0) returned 0x0 [0121.272] CloseHandle (hObject=0x750) returned 1 [0121.272] WaitForSingleObject (hHandle=0x10c0, dwMilliseconds=0x0) returned 0x102 [0121.272] WaitForSingleObject (hHandle=0x10e8, dwMilliseconds=0x0) returned 0x0 [0121.272] CloseHandle (hObject=0x10e8) returned 1 [0121.272] WaitForSingleObject (hHandle=0xb74, dwMilliseconds=0x0) returned 0x0 [0121.272] CloseHandle (hObject=0xb74) returned 1 [0121.273] WaitForSingleObject (hHandle=0x10a8, dwMilliseconds=0x0) returned 0x0 [0121.273] CloseHandle (hObject=0x10a8) returned 1 [0121.273] WaitForSingleObject (hHandle=0x10d8, dwMilliseconds=0x0) returned 0x0 [0121.273] CloseHandle (hObject=0x10d8) returned 1 [0121.273] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0x0) returned 0x0 [0121.273] CloseHandle (hObject=0xb6c) returned 1 [0121.273] WaitForSingleObject (hHandle=0x10c8, dwMilliseconds=0x0) returned 0x0 [0121.273] CloseHandle (hObject=0x10c8) returned 1 [0121.273] WaitForSingleObject (hHandle=0x10dc, dwMilliseconds=0x0) returned 0x0 [0121.273] CloseHandle (hObject=0x10dc) returned 1 [0121.273] WaitForSingleObject (hHandle=0xb50, dwMilliseconds=0x0) returned 0x0 [0121.273] CloseHandle (hObject=0xb50) returned 1 [0121.273] WaitForSingleObject (hHandle=0x10bc, dwMilliseconds=0x0) returned 0x0 [0121.274] CloseHandle (hObject=0x10bc) returned 1 [0121.274] WaitForSingleObject (hHandle=0x10f4, dwMilliseconds=0x0) returned 0x102 [0121.274] WaitForSingleObject (hHandle=0x10e0, dwMilliseconds=0x0) returned 0x0 [0121.274] CloseHandle (hObject=0x10e0) returned 1 [0121.274] WaitForSingleObject (hHandle=0x10e4, dwMilliseconds=0x0) returned 0x0 [0121.274] CloseHandle (hObject=0x10e4) returned 1 [0121.274] WaitForSingleObject (hHandle=0xb10, dwMilliseconds=0x0) returned 0x0 [0121.274] CloseHandle (hObject=0xb10) returned 1 [0121.274] WaitForSingleObject (hHandle=0xb0c, dwMilliseconds=0x0) returned 0x0 [0121.274] CloseHandle (hObject=0xb0c) returned 1 [0121.274] WaitForSingleObject (hHandle=0xadc, dwMilliseconds=0x0) returned 0x102 [0121.274] WaitForSingleObject (hHandle=0xb34, dwMilliseconds=0x0) returned 0x102 [0121.274] WaitForSingleObject (hHandle=0xb08, dwMilliseconds=0x0) returned 0x102 [0121.274] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0x0) returned 0x0 [0121.275] CloseHandle (hObject=0xad4) returned 1 [0121.275] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0x0) returned 0x102 [0121.275] WaitForSingleObject (hHandle=0xb04, dwMilliseconds=0x0) returned 0x102 [0121.275] WaitForSingleObject (hHandle=0xacc, dwMilliseconds=0x0) returned 0x102 [0121.275] WaitForSingleObject (hHandle=0xb24, dwMilliseconds=0x0) returned 0x102 [0121.275] WaitForSingleObject (hHandle=0xb00, dwMilliseconds=0x0) returned 0x102 [0121.275] WaitForSingleObject (hHandle=0xac4, dwMilliseconds=0x0) returned 0x0 [0121.275] CloseHandle (hObject=0xac4) returned 1 [0121.275] WaitForSingleObject (hHandle=0xb1c, dwMilliseconds=0x0) returned 0x102 [0121.275] WaitForSingleObject (hHandle=0xaf4, dwMilliseconds=0x0) returned 0x0 [0121.275] CloseHandle (hObject=0xaf4) returned 1 [0121.275] WaitForSingleObject (hHandle=0x270, dwMilliseconds=0x0) returned 0x102 [0121.275] WaitForSingleObject (hHandle=0xb14, dwMilliseconds=0x0) returned 0x102 [0121.275] WaitForSingleObject (hHandle=0xae8, dwMilliseconds=0x0) returned 0x102 [0121.275] WaitForSingleObject (hHandle=0xafc, dwMilliseconds=0x0) returned 0x102 [0121.276] WaitForSingleObject (hHandle=0x484, dwMilliseconds=0x0) returned 0x102 [0121.276] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0x0) returned 0x102 [0121.276] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0x0) returned 0x0 [0121.276] CloseHandle (hObject=0xb60) returned 1 [0121.276] WaitForSingleObject (hHandle=0xb30, dwMilliseconds=0x0) returned 0x0 [0121.276] CloseHandle (hObject=0xb30) returned 1 [0121.276] WaitForSingleObject (hHandle=0xb88, dwMilliseconds=0x0) returned 0x0 [0121.276] CloseHandle (hObject=0xb88) returned 1 [0121.276] WaitForSingleObject (hHandle=0xb5c, dwMilliseconds=0x0) returned 0x0 [0121.276] CloseHandle (hObject=0xb5c) returned 1 [0121.276] WaitForSingleObject (hHandle=0xb28, dwMilliseconds=0x0) returned 0x102 [0121.276] WaitForSingleObject (hHandle=0xb80, dwMilliseconds=0x0) returned 0x102 [0121.276] WaitForSingleObject (hHandle=0xb58, dwMilliseconds=0x0) returned 0x102 [0121.276] WaitForSingleObject (hHandle=0xb20, dwMilliseconds=0x0) returned 0x102 [0121.276] WaitForSingleObject (hHandle=0xb78, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0xb54, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0xb18, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0xb70, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0xb4c, dwMilliseconds=0x0) returned 0x0 [0121.277] CloseHandle (hObject=0xb4c) returned 1 [0121.277] WaitForSingleObject (hHandle=0x644, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0xb68, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0x64c, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0xaf0, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0xb48, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0xabc, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0xab8, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0xae0, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0x84c, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0x674, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0xad8, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0x744, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0x66c, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0x74c, dwMilliseconds=0x0) returned 0x0 [0121.278] CloseHandle (hObject=0x74c) returned 1 [0121.278] WaitForSingleObject (hHandle=0x664, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0xac8, dwMilliseconds=0x0) returned 0x0 [0121.278] CloseHandle (hObject=0xac8) returned 1 [0121.278] WaitForSingleObject (hHandle=0x748, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0x55c, dwMilliseconds=0x0) returned 0x102 [0121.278] WaitForSingleObject (hHandle=0x560, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x1314, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x1318, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x130c, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x1300, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x12f0, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x12e8, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x12fc, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x12d0, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x12f4, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x12f8, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x56c, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x670, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x12ec, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x12c4, dwMilliseconds=0x0) returned 0x102 [0121.279] WaitForSingleObject (hHandle=0x12e4, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x584, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12e0, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12dc, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12a0, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12d4, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12d8, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12cc, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12c8, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12c0, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12b8, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12bc, dwMilliseconds=0x0) returned 0x102 [0121.280] WaitForSingleObject (hHandle=0x12b0, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x564, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x5ac, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x12b4, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x1298, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x12ac, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x1294, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x12a4, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x12a8, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x129c, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x1280, dwMilliseconds=0x0) returned 0x102 [0121.281] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0x0) returned 0x102 [0121.281] Sleep (dwMilliseconds=0x1) [0141.036] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0x0) returned 0x0 [0141.036] CloseHandle (hObject=0xb7c) returned 1 [0141.036] WaitForSingleObject (hHandle=0x10f8, dwMilliseconds=0x0) returned 0x0 [0141.036] CloseHandle (hObject=0x10f8) returned 1 [0141.036] WaitForSingleObject (hHandle=0x76c, dwMilliseconds=0x0) returned 0x0 [0141.037] CloseHandle (hObject=0x76c) returned 1 [0141.037] WaitForSingleObject (hHandle=0xb84, dwMilliseconds=0x0) returned 0x0 [0141.037] CloseHandle (hObject=0xb84) returned 1 [0141.037] WaitForSingleObject (hHandle=0x10cc, dwMilliseconds=0x0) returned 0x0 [0141.037] CloseHandle (hObject=0x10cc) returned 1 [0141.037] WaitForSingleObject (hHandle=0xac8, dwMilliseconds=0x0) returned 0x0 [0141.037] CloseHandle (hObject=0xac8) returned 1 [0141.037] WaitForSingleObject (hHandle=0x10c4, dwMilliseconds=0x0) returned 0x0 [0141.037] CloseHandle (hObject=0x10c4) returned 1 [0141.037] WaitForSingleObject (hHandle=0x74c, dwMilliseconds=0x0) returned 0x0 [0141.037] CloseHandle (hObject=0x74c) returned 1 [0141.037] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0x0) returned 0x0 [0141.037] CloseHandle (hObject=0x3ec) returned 1 [0141.037] WaitForSingleObject (hHandle=0x10d4, dwMilliseconds=0x0) returned 0x0 [0141.037] CloseHandle (hObject=0x10d4) returned 1 [0141.037] WaitForSingleObject (hHandle=0x570, dwMilliseconds=0x0) returned 0x0 [0141.037] CloseHandle (hObject=0x570) returned 1 [0141.037] WaitForSingleObject (hHandle=0x10c0, dwMilliseconds=0x0) returned 0x0 [0141.037] CloseHandle (hObject=0x10c0) returned 1 [0141.038] WaitForSingleObject (hHandle=0x588, dwMilliseconds=0x0) returned 0x0 [0141.038] CloseHandle (hObject=0x588) returned 1 [0141.038] WaitForSingleObject (hHandle=0xb4c, dwMilliseconds=0x0) returned 0x0 [0141.038] CloseHandle (hObject=0xb4c) returned 1 [0141.038] WaitForSingleObject (hHandle=0xb5c, dwMilliseconds=0x0) returned 0x0 [0141.038] CloseHandle (hObject=0xb5c) returned 1 [0141.038] WaitForSingleObject (hHandle=0xb88, dwMilliseconds=0x0) returned 0x0 [0141.038] CloseHandle (hObject=0xb88) returned 1 [0141.038] WaitForSingleObject (hHandle=0xb30, dwMilliseconds=0x0) returned 0x0 [0141.038] CloseHandle (hObject=0xb30) returned 1 [0141.038] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0x0) returned 0x0 [0141.038] CloseHandle (hObject=0xb60) returned 1 [0141.038] WaitForSingleObject (hHandle=0xaf4, dwMilliseconds=0x0) returned 0x0 [0141.038] CloseHandle (hObject=0xaf4) returned 1 [0141.038] WaitForSingleObject (hHandle=0xac4, dwMilliseconds=0x0) returned 0x0 [0141.038] CloseHandle (hObject=0xac4) returned 1 [0141.038] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0x0) returned 0x0 [0141.038] CloseHandle (hObject=0xad4) returned 1 [0141.038] WaitForSingleObject (hHandle=0x10f4, dwMilliseconds=0x0) returned 0x0 [0141.039] CloseHandle (hObject=0x10f4) returned 1 [0141.039] WaitForSingleObject (hHandle=0xb0c, dwMilliseconds=0x0) returned 0x0 [0141.039] CloseHandle (hObject=0xb0c) returned 1 [0141.039] WaitForSingleObject (hHandle=0xb10, dwMilliseconds=0x0) returned 0x0 [0141.039] CloseHandle (hObject=0xb10) returned 1 [0141.039] WaitForSingleObject (hHandle=0x10e4, dwMilliseconds=0x0) returned 0x0 [0141.039] CloseHandle (hObject=0x10e4) returned 1 [0141.039] WaitForSingleObject (hHandle=0x10e0, dwMilliseconds=0x0) returned 0x0 [0141.039] CloseHandle (hObject=0x10e0) returned 1 [0141.039] WaitForSingleObject (hHandle=0xadc, dwMilliseconds=0x0) returned 0x0 [0141.039] CloseHandle (hObject=0xadc) returned 1 [0141.039] WaitForSingleObject (hHandle=0xb34, dwMilliseconds=0x0) returned 0x0 [0141.039] CloseHandle (hObject=0xb34) returned 1 [0141.039] WaitForSingleObject (hHandle=0xb08, dwMilliseconds=0x0) returned 0x0 [0141.039] CloseHandle (hObject=0xb08) returned 1 [0141.039] WaitForSingleObject (hHandle=0x10bc, dwMilliseconds=0x0) returned 0x0 [0141.039] CloseHandle (hObject=0x10bc) returned 1 [0141.039] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0x0) returned 0x0 [0141.039] CloseHandle (hObject=0xb2c) returned 1 [0141.040] WaitForSingleObject (hHandle=0xb04, dwMilliseconds=0x0) returned 0x0 [0141.040] CloseHandle (hObject=0xb04) returned 1 [0141.040] WaitForSingleObject (hHandle=0xacc, dwMilliseconds=0x0) returned 0x0 [0141.040] CloseHandle (hObject=0xacc) returned 1 [0141.040] WaitForSingleObject (hHandle=0xb24, dwMilliseconds=0x0) returned 0x0 [0141.040] CloseHandle (hObject=0xb24) returned 1 [0141.040] WaitForSingleObject (hHandle=0xb00, dwMilliseconds=0x0) returned 0x0 [0141.040] CloseHandle (hObject=0xb00) returned 1 [0141.040] WaitForSingleObject (hHandle=0xb50, dwMilliseconds=0x0) returned 0x0 [0141.040] CloseHandle (hObject=0xb50) returned 1 [0141.040] WaitForSingleObject (hHandle=0xb1c, dwMilliseconds=0x0) returned 0x0 [0141.040] CloseHandle (hObject=0xb1c) returned 1 [0141.040] WaitForSingleObject (hHandle=0x10dc, dwMilliseconds=0x0) returned 0x0 [0141.040] CloseHandle (hObject=0x10dc) returned 1 [0141.040] WaitForSingleObject (hHandle=0x270, dwMilliseconds=0x0) returned 0x0 [0141.040] CloseHandle (hObject=0x270) returned 1 [0141.040] WaitForSingleObject (hHandle=0xb14, dwMilliseconds=0x0) returned 0x0 [0141.040] CloseHandle (hObject=0xb14) returned 1 [0141.041] WaitForSingleObject (hHandle=0xae8, dwMilliseconds=0x0) returned 0x0 [0141.041] CloseHandle (hObject=0xae8) returned 1 [0141.041] WaitForSingleObject (hHandle=0xafc, dwMilliseconds=0x0) returned 0x0 [0141.041] CloseHandle (hObject=0xafc) returned 1 [0141.041] WaitForSingleObject (hHandle=0x484, dwMilliseconds=0x0) returned 0x0 [0141.041] CloseHandle (hObject=0x484) returned 1 [0141.041] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0x0) returned 0x0 [0141.041] CloseHandle (hObject=0xb64) returned 1 [0141.041] WaitForSingleObject (hHandle=0x10c8, dwMilliseconds=0x0) returned 0x0 [0141.041] CloseHandle (hObject=0x10c8) returned 1 [0141.041] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0x0) returned 0x0 [0141.041] CloseHandle (hObject=0xb6c) returned 1 [0141.041] WaitForSingleObject (hHandle=0x1254, dwMilliseconds=0x0) returned 0x0 [0141.041] CloseHandle (hObject=0x1254) returned 1 [0141.041] WaitForSingleObject (hHandle=0x125c, dwMilliseconds=0x0) returned 0x0 [0141.041] CloseHandle (hObject=0x125c) returned 1 [0141.041] WaitForSingleObject (hHandle=0xb28, dwMilliseconds=0x0) returned 0x0 [0141.042] CloseHandle (hObject=0xb28) returned 1 [0141.042] WaitForSingleObject (hHandle=0xb80, dwMilliseconds=0x0) returned 0x0 [0141.042] CloseHandle (hObject=0xb80) returned 1 [0141.042] WaitForSingleObject (hHandle=0xb58, dwMilliseconds=0x0) returned 0x0 [0141.042] CloseHandle (hObject=0xb58) returned 1 [0141.042] WaitForSingleObject (hHandle=0xb20, dwMilliseconds=0x0) returned 0x102 [0141.042] WaitForSingleObject (hHandle=0xb78, dwMilliseconds=0x0) returned 0x0 [0141.042] CloseHandle (hObject=0xb78) returned 1 [0141.042] WaitForSingleObject (hHandle=0xb54, dwMilliseconds=0x0) returned 0x0 [0141.042] CloseHandle (hObject=0xb54) returned 1 [0141.042] WaitForSingleObject (hHandle=0xb18, dwMilliseconds=0x0) returned 0x0 [0141.042] CloseHandle (hObject=0xb18) returned 1 [0141.042] WaitForSingleObject (hHandle=0xb70, dwMilliseconds=0x0) returned 0x0 [0141.042] CloseHandle (hObject=0xb70) returned 1 [0141.042] WaitForSingleObject (hHandle=0x1240, dwMilliseconds=0x0) returned 0x0 [0141.042] CloseHandle (hObject=0x1240) returned 1 [0141.043] WaitForSingleObject (hHandle=0x644, dwMilliseconds=0x0) returned 0x0 [0141.043] CloseHandle (hObject=0x644) returned 1 [0141.043] WaitForSingleObject (hHandle=0xb68, dwMilliseconds=0x0) returned 0x0 [0141.043] CloseHandle (hObject=0xb68) returned 1 [0141.043] WaitForSingleObject (hHandle=0x64c, dwMilliseconds=0x0) returned 0x0 [0141.043] CloseHandle (hObject=0x64c) returned 1 [0141.043] WaitForSingleObject (hHandle=0xaf0, dwMilliseconds=0x0) returned 0x0 [0141.043] CloseHandle (hObject=0xaf0) returned 1 [0141.043] WaitForSingleObject (hHandle=0xb48, dwMilliseconds=0x0) returned 0x0 [0141.043] CloseHandle (hObject=0xb48) returned 1 [0141.043] WaitForSingleObject (hHandle=0xabc, dwMilliseconds=0x0) returned 0x0 [0141.043] CloseHandle (hObject=0xabc) returned 1 [0141.043] WaitForSingleObject (hHandle=0xab8, dwMilliseconds=0x0) returned 0x0 [0141.043] CloseHandle (hObject=0xab8) returned 1 [0141.043] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0x0) returned 0x0 [0141.043] CloseHandle (hObject=0x67c) returned 1 [0141.043] WaitForSingleObject (hHandle=0xae0, dwMilliseconds=0x0) returned 0x0 [0141.043] CloseHandle (hObject=0xae0) returned 1 [0141.044] WaitForSingleObject (hHandle=0x84c, dwMilliseconds=0x0) returned 0x0 [0141.044] CloseHandle (hObject=0x84c) returned 1 [0141.044] WaitForSingleObject (hHandle=0x674, dwMilliseconds=0x0) returned 0x0 [0141.044] CloseHandle (hObject=0x674) returned 1 [0141.044] WaitForSingleObject (hHandle=0xad8, dwMilliseconds=0x0) returned 0x102 [0141.044] WaitForSingleObject (hHandle=0x744, dwMilliseconds=0x0) returned 0x0 [0141.044] CloseHandle (hObject=0x744) returned 1 [0141.044] WaitForSingleObject (hHandle=0x66c, dwMilliseconds=0x0) returned 0x0 [0141.044] CloseHandle (hObject=0x66c) returned 1 [0141.044] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0x0) returned 0x0 [0141.044] CloseHandle (hObject=0xad0) returned 1 [0141.044] WaitForSingleObject (hHandle=0x578, dwMilliseconds=0x0) returned 0x0 [0141.044] CloseHandle (hObject=0x578) returned 1 [0141.044] WaitForSingleObject (hHandle=0x664, dwMilliseconds=0x0) returned 0x0 [0141.044] CloseHandle (hObject=0x664) returned 1 [0141.044] WaitForSingleObject (hHandle=0x1258, dwMilliseconds=0x0) returned 0x0 [0141.044] CloseHandle (hObject=0x1258) returned 1 [0141.044] WaitForSingleObject (hHandle=0x748, dwMilliseconds=0x0) returned 0x0 [0141.044] CloseHandle (hObject=0x748) returned 1 [0141.045] WaitForSingleObject (hHandle=0x55c, dwMilliseconds=0x0) returned 0x0 [0141.045] CloseHandle (hObject=0x55c) returned 1 [0141.045] WaitForSingleObject (hHandle=0x560, dwMilliseconds=0x0) returned 0x0 [0141.045] CloseHandle (hObject=0x560) returned 1 [0141.045] WaitForSingleObject (hHandle=0x1314, dwMilliseconds=0x0) returned 0x0 [0141.045] CloseHandle (hObject=0x1314) returned 1 [0141.045] WaitForSingleObject (hHandle=0x1318, dwMilliseconds=0x0) returned 0x0 [0141.045] CloseHandle (hObject=0x1318) returned 1 [0141.045] WaitForSingleObject (hHandle=0x130c, dwMilliseconds=0x0) returned 0x0 [0141.045] CloseHandle (hObject=0x130c) returned 1 [0141.045] WaitForSingleObject (hHandle=0x1300, dwMilliseconds=0x0) returned 0x0 [0141.045] CloseHandle (hObject=0x1300) returned 1 [0141.045] WaitForSingleObject (hHandle=0x12f0, dwMilliseconds=0x0) returned 0x0 [0141.045] CloseHandle (hObject=0x12f0) returned 1 [0141.046] WaitForSingleObject (hHandle=0x12e8, dwMilliseconds=0x0) returned 0x0 [0141.046] CloseHandle (hObject=0x12e8) returned 1 [0141.046] WaitForSingleObject (hHandle=0x12fc, dwMilliseconds=0x0) returned 0x0 [0141.046] CloseHandle (hObject=0x12fc) returned 1 [0141.046] WaitForSingleObject (hHandle=0x12d0, dwMilliseconds=0x0) returned 0x0 [0141.046] CloseHandle (hObject=0x12d0) returned 1 [0141.046] WaitForSingleObject (hHandle=0x12f4, dwMilliseconds=0x0) returned 0x0 [0141.046] CloseHandle (hObject=0x12f4) returned 1 [0141.046] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0x0) returned 0x0 [0141.046] CloseHandle (hObject=0x618) returned 1 [0141.046] WaitForSingleObject (hHandle=0x12f8, dwMilliseconds=0x0) returned 0x0 [0141.046] CloseHandle (hObject=0x12f8) returned 1 [0141.046] WaitForSingleObject (hHandle=0x56c, dwMilliseconds=0x0) returned 0x0 [0141.046] CloseHandle (hObject=0x56c) returned 1 [0141.046] WaitForSingleObject (hHandle=0x670, dwMilliseconds=0x0) returned 0x0 [0141.046] CloseHandle (hObject=0x670) returned 1 [0141.047] WaitForSingleObject (hHandle=0x12ec, dwMilliseconds=0x0) returned 0x0 [0141.047] CloseHandle (hObject=0x12ec) returned 1 [0141.047] WaitForSingleObject (hHandle=0x12c4, dwMilliseconds=0x0) returned 0x0 [0141.047] CloseHandle (hObject=0x12c4) returned 1 [0141.047] WaitForSingleObject (hHandle=0x12e4, dwMilliseconds=0x0) returned 0x0 [0141.047] CloseHandle (hObject=0x12e4) returned 1 [0141.047] WaitForSingleObject (hHandle=0x584, dwMilliseconds=0x0) returned 0x0 [0141.047] CloseHandle (hObject=0x584) returned 1 [0141.047] WaitForSingleObject (hHandle=0x12e0, dwMilliseconds=0x0) returned 0x0 [0141.047] CloseHandle (hObject=0x12e0) returned 1 [0141.047] WaitForSingleObject (hHandle=0x12dc, dwMilliseconds=0x0) returned 0x0 [0141.047] CloseHandle (hObject=0x12dc) returned 1 [0141.047] WaitForSingleObject (hHandle=0x12a0, dwMilliseconds=0x0) returned 0x0 [0141.047] CloseHandle (hObject=0x12a0) returned 1 [0141.047] WaitForSingleObject (hHandle=0x12d4, dwMilliseconds=0x0) returned 0x0 [0141.047] CloseHandle (hObject=0x12d4) returned 1 [0141.047] WaitForSingleObject (hHandle=0x12d8, dwMilliseconds=0x0) returned 0x0 [0141.047] CloseHandle (hObject=0x12d8) returned 1 [0141.048] WaitForSingleObject (hHandle=0x12cc, dwMilliseconds=0x0) returned 0x0 [0141.048] CloseHandle (hObject=0x12cc) returned 1 [0141.048] WaitForSingleObject (hHandle=0x12c8, dwMilliseconds=0x0) returned 0x0 [0141.048] CloseHandle (hObject=0x12c8) returned 1 [0141.048] WaitForSingleObject (hHandle=0x12c0, dwMilliseconds=0x0) returned 0x0 [0141.048] CloseHandle (hObject=0x12c0) returned 1 [0141.048] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x0 [0141.048] CloseHandle (hObject=0x3a8) returned 1 [0141.048] WaitForSingleObject (hHandle=0x12b8, dwMilliseconds=0x0) returned 0x0 [0141.049] CloseHandle (hObject=0x12b8) returned 1 [0141.049] WaitForSingleObject (hHandle=0x12bc, dwMilliseconds=0x0) returned 0x0 [0141.049] CloseHandle (hObject=0x12bc) returned 1 [0141.049] WaitForSingleObject (hHandle=0x12b0, dwMilliseconds=0x0) returned 0x0 [0141.049] CloseHandle (hObject=0x12b0) returned 1 [0141.049] WaitForSingleObject (hHandle=0x564, dwMilliseconds=0x0) returned 0x0 [0141.049] CloseHandle (hObject=0x564) returned 1 [0141.049] WaitForSingleObject (hHandle=0x5ac, dwMilliseconds=0x0) returned 0x0 [0141.049] CloseHandle (hObject=0x5ac) returned 1 [0141.049] WaitForSingleObject (hHandle=0x12b4, dwMilliseconds=0x0) returned 0x0 [0141.049] CloseHandle (hObject=0x12b4) returned 1 [0141.049] WaitForSingleObject (hHandle=0x1298, dwMilliseconds=0x0) returned 0x0 [0141.049] CloseHandle (hObject=0x1298) returned 1 [0141.050] WaitForSingleObject (hHandle=0x12ac, dwMilliseconds=0x0) returned 0x0 [0141.050] CloseHandle (hObject=0x12ac) returned 1 [0141.050] WaitForSingleObject (hHandle=0x1294, dwMilliseconds=0x0) returned 0x0 [0141.050] CloseHandle (hObject=0x1294) returned 1 [0141.050] WaitForSingleObject (hHandle=0x12a4, dwMilliseconds=0x0) returned 0x0 [0141.050] CloseHandle (hObject=0x12a4) returned 1 [0141.050] WaitForSingleObject (hHandle=0x12a8, dwMilliseconds=0x0) returned 0x0 [0141.050] CloseHandle (hObject=0x12a8) returned 1 [0141.050] WaitForSingleObject (hHandle=0x129c, dwMilliseconds=0x0) returned 0x0 [0141.050] CloseHandle (hObject=0x129c) returned 1 [0141.050] WaitForSingleObject (hHandle=0x1280, dwMilliseconds=0x0) returned 0x0 [0141.050] CloseHandle (hObject=0x1280) returned 1 [0141.050] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0x0) returned 0x0 [0141.050] CloseHandle (hObject=0x5b0) returned 1 [0141.050] WaitForSingleObject (hHandle=0x1250, dwMilliseconds=0x0) returned 0x0 [0141.050] CloseHandle (hObject=0x1250) returned 1 [0141.050] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0x0) returned 0x0 [0141.050] CloseHandle (hObject=0x124c) returned 1 [0141.051] WaitForSingleObject (hHandle=0x1224, dwMilliseconds=0x0) returned 0x0 [0141.051] CloseHandle (hObject=0x1224) returned 1 [0141.051] WaitForSingleObject (hHandle=0x1244, dwMilliseconds=0x0) returned 0x0 [0141.051] CloseHandle (hObject=0x1244) returned 1 [0141.051] WaitForSingleObject (hHandle=0x11f8, dwMilliseconds=0x0) returned 0x0 [0141.051] CloseHandle (hObject=0x11f8) returned 1 [0141.051] WaitForSingleObject (hHandle=0x123c, dwMilliseconds=0x0) returned 0x0 [0141.051] CloseHandle (hObject=0x123c) returned 1 [0141.051] WaitForSingleObject (hHandle=0x1234, dwMilliseconds=0x0) returned 0x0 [0141.051] CloseHandle (hObject=0x1234) returned 1 [0141.051] WaitForSingleObject (hHandle=0x1238, dwMilliseconds=0x0) returned 0x0 [0141.051] CloseHandle (hObject=0x1238) returned 1 [0141.051] WaitForSingleObject (hHandle=0x1218, dwMilliseconds=0x0) returned 0x0 [0141.051] CloseHandle (hObject=0x1218) returned 1 [0141.052] WaitForSingleObject (hHandle=0x122c, dwMilliseconds=0x0) returned 0x0 [0141.052] CloseHandle (hObject=0x122c) returned 1 [0141.052] WaitForSingleObject (hHandle=0x1230, dwMilliseconds=0x0) returned 0x0 [0141.052] CloseHandle (hObject=0x1230) returned 1 [0141.052] WaitForSingleObject (hHandle=0x1228, dwMilliseconds=0x0) returned 0x0 [0141.052] CloseHandle (hObject=0x1228) returned 1 [0141.052] WaitForSingleObject (hHandle=0x1220, dwMilliseconds=0x0) returned 0x0 [0141.052] CloseHandle (hObject=0x1220) returned 1 [0141.052] WaitForSingleObject (hHandle=0x121c, dwMilliseconds=0x0) returned 0x0 [0141.052] CloseHandle (hObject=0x121c) returned 1 [0141.052] WaitForSingleObject (hHandle=0x1200, dwMilliseconds=0x0) returned 0x0 [0141.052] CloseHandle (hObject=0x1200) returned 1 [0141.052] WaitForSingleObject (hHandle=0x1214, dwMilliseconds=0x0) returned 0x0 [0141.052] CloseHandle (hObject=0x1214) returned 1 [0141.052] WaitForSingleObject (hHandle=0x1210, dwMilliseconds=0x0) returned 0x0 [0141.052] CloseHandle (hObject=0x1210) returned 1 [0141.053] WaitForSingleObject (hHandle=0x120c, dwMilliseconds=0x0) returned 0x0 [0141.053] CloseHandle (hObject=0x120c) returned 1 [0141.053] WaitForSingleObject (hHandle=0x11ec, dwMilliseconds=0x0) returned 0x0 [0141.053] CloseHandle (hObject=0x11ec) returned 1 [0141.053] WaitForSingleObject (hHandle=0x11d4, dwMilliseconds=0x0) returned 0x102 [0141.053] WaitForSingleObject (hHandle=0x1268, dwMilliseconds=0x0) returned 0x0 [0141.053] CloseHandle (hObject=0x1268) returned 1 [0141.053] WaitForSingleObject (hHandle=0x11b4, dwMilliseconds=0x0) returned 0x0 [0141.053] CloseHandle (hObject=0x11b4) returned 1 [0141.053] WaitForSingleObject (hHandle=0x1274, dwMilliseconds=0x0) returned 0x0 [0141.053] CloseHandle (hObject=0x1274) returned 1 [0141.053] WaitForSingleObject (hHandle=0x126c, dwMilliseconds=0x0) returned 0x0 [0141.053] CloseHandle (hObject=0x126c) returned 1 [0141.053] WaitForSingleObject (hHandle=0x10a0, dwMilliseconds=0x0) returned 0x0 [0141.053] CloseHandle (hObject=0x10a0) returned 1 [0141.053] WaitForSingleObject (hHandle=0x11bc, dwMilliseconds=0x0) returned 0x0 [0141.054] CloseHandle (hObject=0x11bc) returned 1 [0141.054] WaitForSingleObject (hHandle=0x1248, dwMilliseconds=0x0) returned 0x0 [0141.054] CloseHandle (hObject=0x1248) returned 1 [0141.054] WaitForSingleObject (hHandle=0x11d0, dwMilliseconds=0x0) returned 0x0 [0141.054] CloseHandle (hObject=0x11d0) returned 1 [0141.054] WaitForSingleObject (hHandle=0x11cc, dwMilliseconds=0x0) returned 0x0 [0141.054] CloseHandle (hObject=0x11cc) returned 1 [0141.054] WaitForSingleObject (hHandle=0x11c4, dwMilliseconds=0x0) returned 0x0 [0141.054] CloseHandle (hObject=0x11c4) returned 1 [0141.054] WaitForSingleObject (hHandle=0x11c8, dwMilliseconds=0x0) returned 0x102 [0141.054] WaitForSingleObject (hHandle=0x11c0, dwMilliseconds=0x0) returned 0x0 [0141.054] CloseHandle (hObject=0x11c0) returned 1 [0141.054] WaitForSingleObject (hHandle=0x10a8, dwMilliseconds=0x0) returned 0x0 [0141.054] CloseHandle (hObject=0x10a8) returned 1 [0141.054] WaitForSingleObject (hHandle=0xb74, dwMilliseconds=0x0) returned 0x0 [0141.054] CloseHandle (hObject=0xb74) returned 1 [0141.054] WaitForSingleObject (hHandle=0x11a4, dwMilliseconds=0x0) returned 0x0 [0141.054] CloseHandle (hObject=0x11a4) returned 1 [0141.055] WaitForSingleObject (hHandle=0x11b8, dwMilliseconds=0x0) returned 0x0 [0141.055] CloseHandle (hObject=0x11b8) returned 1 [0141.055] WaitForSingleObject (hHandle=0x1124, dwMilliseconds=0x0) returned 0x0 [0141.055] CloseHandle (hObject=0x1124) returned 1 [0141.055] WaitForSingleObject (hHandle=0x11ac, dwMilliseconds=0x0) returned 0x0 [0141.055] CloseHandle (hObject=0x11ac) returned 1 [0141.055] WaitForSingleObject (hHandle=0x1130, dwMilliseconds=0x0) returned 0x0 [0141.055] CloseHandle (hObject=0x1130) returned 1 [0141.055] WaitForSingleObject (hHandle=0x11b0, dwMilliseconds=0x0) returned 0x0 [0141.055] CloseHandle (hObject=0x11b0) returned 1 [0141.055] WaitForSingleObject (hHandle=0x11a0, dwMilliseconds=0x0) returned 0x0 [0141.055] CloseHandle (hObject=0x11a0) returned 1 [0141.056] WaitForSingleObject (hHandle=0x1198, dwMilliseconds=0x0) returned 0x0 [0141.056] CloseHandle (hObject=0x1198) returned 1 [0141.056] WaitForSingleObject (hHandle=0x11a8, dwMilliseconds=0x0) returned 0x0 [0141.056] CloseHandle (hObject=0x11a8) returned 1 [0141.056] WaitForSingleObject (hHandle=0x1144, dwMilliseconds=0x0) returned 0x0 [0141.056] CloseHandle (hObject=0x1144) returned 1 [0141.056] WaitForSingleObject (hHandle=0x580, dwMilliseconds=0x0) returned 0x0 [0141.056] CloseHandle (hObject=0x580) returned 1 [0141.056] WaitForSingleObject (hHandle=0x119c, dwMilliseconds=0x0) returned 0x0 [0141.057] CloseHandle (hObject=0x119c) returned 1 [0141.057] WaitForSingleObject (hHandle=0x112c, dwMilliseconds=0x0) returned 0x0 [0141.057] CloseHandle (hObject=0x112c) returned 1 [0141.057] WaitForSingleObject (hHandle=0x1284, dwMilliseconds=0x0) returned 0x102 [0141.057] WaitForSingleObject (hHandle=0x1184, dwMilliseconds=0x0) returned 0x0 [0141.057] CloseHandle (hObject=0x1184) returned 1 [0141.057] WaitForSingleObject (hHandle=0x10f0, dwMilliseconds=0x0) returned 0x0 [0141.057] CloseHandle (hObject=0x10f0) returned 1 [0141.057] WaitForSingleObject (hHandle=0x1194, dwMilliseconds=0x0) returned 0x0 [0141.057] CloseHandle (hObject=0x1194) returned 1 [0141.058] WaitForSingleObject (hHandle=0x11e8, dwMilliseconds=0x0) returned 0x0 [0141.058] CloseHandle (hObject=0x11e8) returned 1 [0141.058] WaitForSingleObject (hHandle=0x1188, dwMilliseconds=0x0) returned 0x0 [0141.058] CloseHandle (hObject=0x1188) returned 1 [0141.058] WaitForSingleObject (hHandle=0x118c, dwMilliseconds=0x0) returned 0x0 [0141.058] CloseHandle (hObject=0x118c) returned 1 [0141.058] WaitForSingleObject (hHandle=0x1190, dwMilliseconds=0x0) returned 0x0 [0141.058] CloseHandle (hObject=0x1190) returned 1 [0141.058] WaitForSingleObject (hHandle=0x1264, dwMilliseconds=0x0) returned 0x0 [0141.058] CloseHandle (hObject=0x1264) returned 1 [0141.058] WaitForSingleObject (hHandle=0x1178, dwMilliseconds=0x0) returned 0x0 [0141.058] CloseHandle (hObject=0x1178) returned 1 [0141.059] WaitForSingleObject (hHandle=0x1180, dwMilliseconds=0x0) returned 0x0 [0141.059] CloseHandle (hObject=0x1180) returned 1 [0141.059] WaitForSingleObject (hHandle=0x117c, dwMilliseconds=0x0) returned 0x0 [0141.059] CloseHandle (hObject=0x117c) returned 1 [0141.059] WaitForSingleObject (hHandle=0x1168, dwMilliseconds=0x0) returned 0x0 [0141.059] CloseHandle (hObject=0x1168) returned 1 [0141.059] WaitForSingleObject (hHandle=0x1174, dwMilliseconds=0x0) returned 0x0 [0141.059] CloseHandle (hObject=0x1174) returned 1 [0141.059] WaitForSingleObject (hHandle=0x1158, dwMilliseconds=0x0) returned 0x0 [0141.059] CloseHandle (hObject=0x1158) returned 1 [0141.059] WaitForSingleObject (hHandle=0x116c, dwMilliseconds=0x0) returned 0x0 [0141.059] CloseHandle (hObject=0x116c) returned 1 [0141.059] WaitForSingleObject (hHandle=0x1170, dwMilliseconds=0x0) returned 0x0 [0141.060] CloseHandle (hObject=0x1170) returned 1 [0141.060] WaitForSingleObject (hHandle=0x1164, dwMilliseconds=0x0) returned 0x0 [0141.060] CloseHandle (hObject=0x1164) returned 1 [0141.060] WaitForSingleObject (hHandle=0x1148, dwMilliseconds=0x0) returned 0x0 [0141.060] CloseHandle (hObject=0x1148) returned 1 [0141.060] WaitForSingleObject (hHandle=0x115c, dwMilliseconds=0x0) returned 0x0 [0141.060] CloseHandle (hObject=0x115c) returned 1 [0141.060] WaitForSingleObject (hHandle=0x1160, dwMilliseconds=0x0) returned 0x0 [0141.060] CloseHandle (hObject=0x1160) returned 1 [0141.060] WaitForSingleObject (hHandle=0x1154, dwMilliseconds=0x0) returned 0x0 [0141.060] CloseHandle (hObject=0x1154) returned 1 [0141.060] WaitForSingleObject (hHandle=0x1120, dwMilliseconds=0x0) returned 0x0 [0141.060] CloseHandle (hObject=0x1120) returned 1 [0141.060] WaitForSingleObject (hHandle=0x1150, dwMilliseconds=0x0) returned 0x0 [0141.061] CloseHandle (hObject=0x1150) returned 1 [0141.061] WaitForSingleObject (hHandle=0x114c, dwMilliseconds=0x0) returned 0x0 [0141.061] CloseHandle (hObject=0x114c) returned 1 [0141.061] WaitForSingleObject (hHandle=0x11fc, dwMilliseconds=0x0) returned 0x0 [0141.061] CloseHandle (hObject=0x11fc) returned 1 [0141.061] WaitForSingleObject (hHandle=0x1134, dwMilliseconds=0x0) returned 0x0 [0141.061] CloseHandle (hObject=0x1134) returned 1 [0141.061] WaitForSingleObject (hHandle=0x113c, dwMilliseconds=0x0) returned 0x0 [0141.061] CloseHandle (hObject=0x113c) returned 1 [0141.061] WaitForSingleObject (hHandle=0x3cc, dwMilliseconds=0x0) returned 0x0 [0141.061] CloseHandle (hObject=0x3cc) returned 1 [0141.062] WaitForSingleObject (hHandle=0x127c, dwMilliseconds=0x0) returned 0x0 [0141.062] CloseHandle (hObject=0x127c) returned 1 [0141.062] WaitForSingleObject (hHandle=0x1290, dwMilliseconds=0x0) returned 0x0 [0141.062] CloseHandle (hObject=0x1290) returned 1 [0141.062] WaitForSingleObject (hHandle=0x128c, dwMilliseconds=0x0) returned 0x0 [0141.062] CloseHandle (hObject=0x128c) returned 1 [0141.062] WaitForSingleObject (hHandle=0x1278, dwMilliseconds=0x0) returned 0x0 [0141.062] CloseHandle (hObject=0x1278) returned 1 [0141.062] WaitForSingleObject (hHandle=0x1140, dwMilliseconds=0x0) returned 0x0 [0141.062] CloseHandle (hObject=0x1140) returned 1 [0141.062] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0x0) returned 0x0 [0141.062] CloseHandle (hObject=0x3e8) returned 1 [0141.062] WaitForSingleObject (hHandle=0x1138, dwMilliseconds=0x0) returned 0x0 [0141.062] CloseHandle (hObject=0x1138) returned 1 [0141.062] WaitForSingleObject (hHandle=0x3ac, dwMilliseconds=0x0) returned 0x0 [0141.062] CloseHandle (hObject=0x3ac) returned 1 [0141.062] WaitForSingleObject (hHandle=0x1128, dwMilliseconds=0x0) returned 0x0 [0141.063] CloseHandle (hObject=0x1128) returned 1 [0141.063] WaitForSingleObject (hHandle=0x10ec, dwMilliseconds=0x0) returned 0x0 [0141.063] CloseHandle (hObject=0x10ec) returned 1 [0141.063] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x0 [0141.063] CloseHandle (hObject=0x11f0) returned 1 [0141.063] WaitForSingleObject (hHandle=0x1118, dwMilliseconds=0x0) returned 0x0 [0141.063] CloseHandle (hObject=0x1118) returned 1 [0141.063] WaitForSingleObject (hHandle=0x1104, dwMilliseconds=0x0) returned 0x0 [0141.063] CloseHandle (hObject=0x1104) returned 1 [0141.063] WaitForSingleObject (hHandle=0x1100, dwMilliseconds=0x0) returned 0x102 [0141.063] WaitForSingleObject (hHandle=0x11dc, dwMilliseconds=0x0) returned 0x0 [0141.063] CloseHandle (hObject=0x11dc) returned 1 [0141.064] WaitForSingleObject (hHandle=0x1084, dwMilliseconds=0x0) returned 0x0 [0141.064] CloseHandle (hObject=0x1084) returned 1 [0141.064] WaitForSingleObject (hHandle=0xfd8, dwMilliseconds=0x0) returned 0x0 [0141.064] CloseHandle (hObject=0xfd8) returned 1 [0141.064] WaitForSingleObject (hHandle=0x1260, dwMilliseconds=0x0) returned 0x0 [0141.064] CloseHandle (hObject=0x1260) returned 1 [0141.064] WaitForSingleObject (hHandle=0x1114, dwMilliseconds=0x0) returned 0x0 [0141.064] CloseHandle (hObject=0x1114) returned 1 [0141.064] WaitForSingleObject (hHandle=0x109c, dwMilliseconds=0x0) returned 0x0 [0141.064] CloseHandle (hObject=0x109c) returned 1 [0141.064] WaitForSingleObject (hHandle=0x1068, dwMilliseconds=0x0) returned 0x0 [0141.064] CloseHandle (hObject=0x1068) returned 1 [0141.064] WaitForSingleObject (hHandle=0x1060, dwMilliseconds=0x0) returned 0x0 [0141.064] CloseHandle (hObject=0x1060) returned 1 [0141.064] WaitForSingleObject (hHandle=0x108c, dwMilliseconds=0x0) returned 0x0 [0141.064] CloseHandle (hObject=0x108c) returned 1 [0141.064] WaitForSingleObject (hHandle=0x110c, dwMilliseconds=0x0) returned 0x0 [0141.064] CloseHandle (hObject=0x110c) returned 1 [0141.064] WaitForSingleObject (hHandle=0x1074, dwMilliseconds=0x0) returned 0x0 [0141.065] CloseHandle (hObject=0x1074) returned 1 [0141.065] WaitForSingleObject (hHandle=0xb8c, dwMilliseconds=0x0) returned 0x0 [0141.065] CloseHandle (hObject=0xb8c) returned 1 [0141.065] WaitForSingleObject (hHandle=0x1080, dwMilliseconds=0x0) returned 0x0 [0141.065] CloseHandle (hObject=0x1080) returned 1 [0141.065] WaitForSingleObject (hHandle=0x106c, dwMilliseconds=0x0) returned 0x0 [0141.065] CloseHandle (hObject=0x106c) returned 1 [0141.065] WaitForSingleObject (hHandle=0x1054, dwMilliseconds=0x0) returned 0x0 [0141.065] CloseHandle (hObject=0x1054) returned 1 [0141.065] WaitForSingleObject (hHandle=0x1064, dwMilliseconds=0x0) returned 0x0 [0141.065] CloseHandle (hObject=0x1064) returned 1 [0141.065] WaitForSingleObject (hHandle=0xf88, dwMilliseconds=0x0) returned 0x0 [0141.065] CloseHandle (hObject=0xf88) returned 1 [0141.065] WaitForSingleObject (hHandle=0x5cc, dwMilliseconds=0x0) returned 0x0 [0141.065] CloseHandle (hObject=0x5cc) returned 1 [0141.065] WaitForSingleObject (hHandle=0xb40, dwMilliseconds=0x0) returned 0x0 [0141.065] CloseHandle (hObject=0xb40) returned 1 [0141.065] WaitForSingleObject (hHandle=0xaec, dwMilliseconds=0x0) returned 0x0 [0141.065] CloseHandle (hObject=0xaec) returned 1 [0141.066] WaitForSingleObject (hHandle=0x104c, dwMilliseconds=0x0) returned 0x0 [0141.066] CloseHandle (hObject=0x104c) returned 1 [0141.066] WaitForSingleObject (hHandle=0xd68, dwMilliseconds=0x0) returned 0x0 [0141.066] CloseHandle (hObject=0xd68) returned 1 [0141.066] WaitForSingleObject (hHandle=0x8a4, dwMilliseconds=0x0) returned 0x0 [0141.066] CloseHandle (hObject=0x8a4) returned 1 [0141.066] WaitForSingleObject (hHandle=0xfa8, dwMilliseconds=0x0) returned 0x102 [0141.066] WaitForSingleObject (hHandle=0xfac, dwMilliseconds=0x0) returned 0x0 [0141.066] CloseHandle (hObject=0xfac) returned 1 [0141.066] WaitForSingleObject (hHandle=0xfcc, dwMilliseconds=0x0) returned 0x0 [0141.066] CloseHandle (hObject=0xfcc) returned 1 [0141.066] WaitForSingleObject (hHandle=0xfc8, dwMilliseconds=0x0) returned 0x0 [0141.066] CloseHandle (hObject=0xfc8) returned 1 [0141.066] WaitForSingleObject (hHandle=0xfb4, dwMilliseconds=0x0) returned 0x0 [0141.066] CloseHandle (hObject=0xfb4) returned 1 [0141.066] WaitForSingleObject (hHandle=0x58c, dwMilliseconds=0x0) returned 0x0 [0141.066] CloseHandle (hObject=0x58c) returned 1 [0141.067] WaitForSingleObject (hHandle=0xfbc, dwMilliseconds=0x0) returned 0x0 [0141.067] CloseHandle (hObject=0xfbc) returned 1 [0141.067] WaitForSingleObject (hHandle=0xfc0, dwMilliseconds=0x0) returned 0x0 [0141.067] CloseHandle (hObject=0xfc0) returned 1 [0141.067] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0x0) returned 0x0 [0141.067] CloseHandle (hObject=0xfb0) returned 1 [0141.067] WaitForSingleObject (hHandle=0xf7c, dwMilliseconds=0x0) returned 0x0 [0141.067] CloseHandle (hObject=0xf7c) returned 1 [0141.067] WaitForSingleObject (hHandle=0xfa0, dwMilliseconds=0x0) returned 0x0 [0141.067] CloseHandle (hObject=0xfa0) returned 1 [0141.067] WaitForSingleObject (hHandle=0xf9c, dwMilliseconds=0x0) returned 0x0 [0141.067] CloseHandle (hObject=0xf9c) returned 1 [0141.067] WaitForSingleObject (hHandle=0xf38, dwMilliseconds=0x0) returned 0x0 [0141.067] CloseHandle (hObject=0xf38) returned 1 [0141.067] WaitForSingleObject (hHandle=0xf90, dwMilliseconds=0x0) returned 0x0 [0141.067] CloseHandle (hObject=0xf90) returned 1 [0141.067] WaitForSingleObject (hHandle=0xf98, dwMilliseconds=0x0) returned 0x102 [0141.067] WaitForSingleObject (hHandle=0x940, dwMilliseconds=0x0) returned 0x102 [0141.068] WaitForSingleObject (hHandle=0xf84, dwMilliseconds=0x0) returned 0x0 [0141.068] CloseHandle (hObject=0xf84) returned 1 [0141.068] WaitForSingleObject (hHandle=0xea4, dwMilliseconds=0x0) returned 0x0 [0141.068] CloseHandle (hObject=0xea4) returned 1 [0141.068] CloseHandle (hObject=0xf5c) returned 1 [0141.068] CloseHandle (hObject=0x594) returned 1 [0141.068] CloseHandle (hObject=0x3b0) returned 1 [0141.068] CloseHandle (hObject=0xf3c) returned 1 [0141.068] CloseHandle (hObject=0xf54) returned 1 [0141.068] CloseHandle (hObject=0xf58) returned 1 [0141.069] CloseHandle (hObject=0x1050) returned 1 [0141.069] CloseHandle (hObject=0x1288) returned 1 [0141.069] CloseHandle (hObject=0x1038) returned 1 Thread: id = 120 os_tid = 0xff4 [0120.682] Sleep (dwMilliseconds=0x1) [0120.736] Sleep (dwMilliseconds=0x1) [0120.820] Sleep (dwMilliseconds=0x1) [0121.048] Sleep (dwMilliseconds=0x1) [0121.402] Sleep (dwMilliseconds=0x1) [0121.656] Sleep (dwMilliseconds=0x1) [0121.975] Sleep (dwMilliseconds=0x1) [0122.501] Sleep (dwMilliseconds=0x1) [0123.105] Sleep (dwMilliseconds=0x1) [0123.951] Sleep (dwMilliseconds=0x1) [0124.496] Sleep (dwMilliseconds=0x1) [0124.955] Sleep (dwMilliseconds=0x1) [0125.417] Sleep (dwMilliseconds=0x1) [0125.809] Sleep (dwMilliseconds=0x1) [0126.370] Sleep (dwMilliseconds=0x1) [0128.941] Sleep (dwMilliseconds=0x1) [0129.630] Sleep (dwMilliseconds=0x1) [0131.191] Sleep (dwMilliseconds=0x1) [0131.997] Sleep (dwMilliseconds=0x1) [0132.474] Sleep (dwMilliseconds=0x1) [0133.298] Sleep (dwMilliseconds=0x1) [0134.641] Sleep (dwMilliseconds=0x1) [0135.092] Sleep (dwMilliseconds=0x1) [0136.047] Sleep (dwMilliseconds=0x1) [0136.858] Sleep (dwMilliseconds=0x1) [0138.818] Sleep (dwMilliseconds=0x1) [0139.970] Sleep (dwMilliseconds=0x1) [0141.224] Sleep (dwMilliseconds=0x1) [0142.563] Sleep (dwMilliseconds=0x1) [0144.392] Sleep (dwMilliseconds=0x1) [0145.399] Sleep (dwMilliseconds=0x1) [0146.216] Sleep (dwMilliseconds=0x1) [0147.034] Sleep (dwMilliseconds=0x1) [0147.845] Sleep (dwMilliseconds=0x1) [0148.510] Sleep (dwMilliseconds=0x1) [0149.024] Sleep (dwMilliseconds=0x1) [0150.103] Sleep (dwMilliseconds=0x1) [0150.781] Sleep (dwMilliseconds=0x1) [0151.245] Sleep (dwMilliseconds=0x1) [0151.625] Sleep (dwMilliseconds=0x1) [0153.006] Sleep (dwMilliseconds=0x1) [0153.463] Sleep (dwMilliseconds=0x1) [0153.995] Sleep (dwMilliseconds=0x1) [0154.781] Sleep (dwMilliseconds=0x1) [0155.462] Sleep (dwMilliseconds=0x1) [0156.261] Sleep (dwMilliseconds=0x1) [0156.949] Sleep (dwMilliseconds=0x1) [0157.409] Sleep (dwMilliseconds=0x1) [0157.690] Sleep (dwMilliseconds=0x1) [0158.077] Sleep (dwMilliseconds=0x1) [0158.299] Sleep (dwMilliseconds=0x1) [0158.423] Sleep (dwMilliseconds=0x1) [0158.904] Sleep (dwMilliseconds=0x1) [0159.218] Sleep (dwMilliseconds=0x1) [0159.745] Sleep (dwMilliseconds=0x1) [0161.487] Sleep (dwMilliseconds=0x1) [0161.718] Sleep (dwMilliseconds=0x1) [0162.141] Sleep (dwMilliseconds=0x1) [0162.471] Sleep (dwMilliseconds=0x1) [0162.829] Sleep (dwMilliseconds=0x1) [0163.263] Sleep (dwMilliseconds=0x1) [0163.626] Sleep (dwMilliseconds=0x1) [0163.830] Sleep (dwMilliseconds=0x1) [0165.051] Sleep (dwMilliseconds=0x1) [0165.673] Sleep (dwMilliseconds=0x1) [0166.098] Sleep (dwMilliseconds=0x1) [0166.403] Sleep (dwMilliseconds=0x1) [0166.782] Sleep (dwMilliseconds=0x1) [0167.282] Sleep (dwMilliseconds=0x1) [0167.475] Sleep (dwMilliseconds=0x1) [0168.002] Sleep (dwMilliseconds=0x1) [0169.119] Sleep (dwMilliseconds=0x1) [0169.503] Sleep (dwMilliseconds=0x1) [0170.245] Sleep (dwMilliseconds=0x1) [0170.674] Sleep (dwMilliseconds=0x1) [0171.290] Sleep (dwMilliseconds=0x1) [0171.594] Sleep (dwMilliseconds=0x1) [0171.983] Sleep (dwMilliseconds=0x1) [0172.204] Sleep (dwMilliseconds=0x1) [0172.442] Sleep (dwMilliseconds=0x1) [0173.145] Sleep (dwMilliseconds=0x1) [0174.041] Sleep (dwMilliseconds=0x1) [0174.631] Sleep (dwMilliseconds=0x1) [0175.417] Sleep (dwMilliseconds=0x1) [0175.618] Sleep (dwMilliseconds=0x1) [0175.775] Sleep (dwMilliseconds=0x1) [0175.924] Sleep (dwMilliseconds=0x1) [0176.039] Sleep (dwMilliseconds=0x1) [0176.275] Sleep (dwMilliseconds=0x1) [0176.494] Sleep (dwMilliseconds=0x1) [0176.549] Sleep (dwMilliseconds=0x1) [0176.587] Sleep (dwMilliseconds=0x1) [0176.637] Sleep (dwMilliseconds=0x1) [0176.680] Sleep (dwMilliseconds=0x1) [0176.726] Sleep (dwMilliseconds=0x1) [0176.782] Sleep (dwMilliseconds=0x1) [0176.820] Sleep (dwMilliseconds=0x1) [0176.867] Sleep (dwMilliseconds=0x1) [0176.917] Sleep (dwMilliseconds=0x1) [0176.979] Sleep (dwMilliseconds=0x1) [0177.025] Sleep (dwMilliseconds=0x1) [0177.334] Sleep (dwMilliseconds=0x1) [0177.835] Sleep (dwMilliseconds=0x1) [0177.944] Sleep (dwMilliseconds=0x1) [0178.036] Sleep (dwMilliseconds=0x1) [0178.184] Sleep (dwMilliseconds=0x1) [0178.364] Sleep (dwMilliseconds=0x1) [0178.592] Sleep (dwMilliseconds=0x1) [0178.730] Sleep (dwMilliseconds=0x1) [0178.756] Sleep (dwMilliseconds=0x1) [0178.813] Sleep (dwMilliseconds=0x1) [0178.928] Sleep (dwMilliseconds=0x1) [0178.951] Sleep (dwMilliseconds=0x1) [0178.962] Sleep (dwMilliseconds=0x1) [0178.974] Sleep (dwMilliseconds=0x1) [0178.989] Sleep (dwMilliseconds=0x1) [0179.004] Sleep (dwMilliseconds=0x1) [0179.018] Sleep (dwMilliseconds=0x1) [0179.037] Sleep (dwMilliseconds=0x1) [0179.050] Sleep (dwMilliseconds=0x1) [0179.098] Sleep (dwMilliseconds=0x1) [0179.123] Sleep (dwMilliseconds=0x1) [0179.128] Sleep (dwMilliseconds=0x1) [0179.146] Sleep (dwMilliseconds=0x1) [0179.161] Sleep (dwMilliseconds=0x1) [0179.916] Sleep (dwMilliseconds=0x1) [0180.622] Sleep (dwMilliseconds=0x1) [0180.854] Sleep (dwMilliseconds=0x1) [0181.275] Sleep (dwMilliseconds=0x1) [0181.753] Sleep (dwMilliseconds=0x1) [0182.403] Sleep (dwMilliseconds=0x1) [0183.071] Sleep (dwMilliseconds=0x1) [0183.518] Sleep (dwMilliseconds=0x1) [0183.739] Sleep (dwMilliseconds=0x1) [0183.958] Sleep (dwMilliseconds=0x1) [0184.126] Sleep (dwMilliseconds=0x1) [0184.860] Sleep (dwMilliseconds=0x1) [0185.103] Sleep (dwMilliseconds=0x1) [0185.390] Sleep (dwMilliseconds=0x1) [0185.527] Sleep (dwMilliseconds=0x1) [0185.832] Sleep (dwMilliseconds=0x1) [0186.349] Sleep (dwMilliseconds=0x1) [0186.739] Sleep (dwMilliseconds=0x1) [0187.055] Sleep (dwMilliseconds=0x1) [0187.449] Sleep (dwMilliseconds=0x1) [0187.641] Sleep (dwMilliseconds=0x1) [0189.111] Sleep (dwMilliseconds=0x1) [0189.692] Sleep (dwMilliseconds=0x1) [0190.513] Sleep (dwMilliseconds=0x1) [0190.973] Sleep (dwMilliseconds=0x1) [0191.599] Sleep (dwMilliseconds=0x1) [0191.765] Sleep (dwMilliseconds=0x1) [0192.345] Sleep (dwMilliseconds=0x1) [0194.481] Sleep (dwMilliseconds=0x1) [0195.216] Sleep (dwMilliseconds=0x1) [0195.421] Sleep (dwMilliseconds=0x1) [0195.863] Sleep (dwMilliseconds=0x1) [0197.994] Sleep (dwMilliseconds=0x1) [0199.301] Sleep (dwMilliseconds=0x1) [0199.494] Sleep (dwMilliseconds=0x1) [0200.343] Sleep (dwMilliseconds=0x1) [0201.902] Sleep (dwMilliseconds=0x1) [0203.025] Sleep (dwMilliseconds=0x1) [0203.253] Sleep (dwMilliseconds=0x1) [0203.452] Sleep (dwMilliseconds=0x1) [0203.824] Sleep (dwMilliseconds=0x1) [0203.901] Sleep (dwMilliseconds=0x1) [0203.960] Sleep (dwMilliseconds=0x1) [0203.975] Sleep (dwMilliseconds=0x1) [0203.978] Sleep (dwMilliseconds=0x1) [0203.996] Sleep (dwMilliseconds=0x1) [0204.010] Sleep (dwMilliseconds=0x1) [0204.025] Sleep (dwMilliseconds=0x1) [0204.041] Sleep (dwMilliseconds=0x1) [0204.057] Sleep (dwMilliseconds=0x1) [0204.116] Sleep (dwMilliseconds=0x1) [0204.119] Sleep (dwMilliseconds=0x1) [0204.135] Sleep (dwMilliseconds=0x1) [0204.151] Sleep (dwMilliseconds=0x1) [0204.166] Sleep (dwMilliseconds=0x1) [0204.182] Sleep (dwMilliseconds=0x1) [0204.408] Sleep (dwMilliseconds=0x1) [0205.043] Sleep (dwMilliseconds=0x1) [0205.231] Sleep (dwMilliseconds=0x1) [0205.307] Sleep (dwMilliseconds=0x1) [0205.374] Sleep (dwMilliseconds=0x1) [0205.416] Sleep (dwMilliseconds=0x1) [0205.703] Sleep (dwMilliseconds=0x1) [0206.790] Sleep (dwMilliseconds=0x1) [0207.673] Sleep (dwMilliseconds=0x1) [0207.994] Sleep (dwMilliseconds=0x1) [0210.687] Sleep (dwMilliseconds=0x1) [0211.367] Sleep (dwMilliseconds=0x1) [0211.607] Sleep (dwMilliseconds=0x1) [0211.693] Sleep (dwMilliseconds=0x1) [0211.714] Sleep (dwMilliseconds=0x1) [0211.721] Sleep (dwMilliseconds=0x1) [0211.732] Sleep (dwMilliseconds=0x1) [0211.761] Sleep (dwMilliseconds=0x1) [0211.770] Sleep (dwMilliseconds=0x1) [0211.780] Sleep (dwMilliseconds=0x1) [0211.794] Sleep (dwMilliseconds=0x1) [0211.813] Sleep (dwMilliseconds=0x1) [0211.825] Sleep (dwMilliseconds=0x1) [0211.857] Sleep (dwMilliseconds=0x1) [0211.877] Sleep (dwMilliseconds=0x1) [0211.888] Sleep (dwMilliseconds=0x1) [0211.904] Sleep (dwMilliseconds=0x1) [0211.919] Sleep (dwMilliseconds=0x1) [0211.935] Sleep (dwMilliseconds=0x1) [0211.950] Sleep (dwMilliseconds=0x1) [0211.966] Sleep (dwMilliseconds=0x1) [0211.984] Sleep (dwMilliseconds=0x1) [0211.997] Sleep (dwMilliseconds=0x1) [0212.012] Sleep (dwMilliseconds=0x1) [0212.028] Sleep (dwMilliseconds=0x1) [0212.044] Sleep (dwMilliseconds=0x1) [0212.060] Sleep (dwMilliseconds=0x1) [0212.113] Sleep (dwMilliseconds=0x1) [0212.122] Sleep (dwMilliseconds=0x1) [0212.138] Sleep (dwMilliseconds=0x1) [0212.155] Sleep (dwMilliseconds=0x1) [0212.169] Sleep (dwMilliseconds=0x1) [0212.186] Sleep (dwMilliseconds=0x1) [0212.203] Sleep (dwMilliseconds=0x1) [0212.216] Sleep (dwMilliseconds=0x1) [0212.235] Sleep (dwMilliseconds=0x1) [0212.247] Sleep (dwMilliseconds=0x1) [0212.262] Sleep (dwMilliseconds=0x1) [0212.279] Sleep (dwMilliseconds=0x1) [0212.293] Sleep (dwMilliseconds=0x1) [0212.309] Sleep (dwMilliseconds=0x1) [0212.327] Sleep (dwMilliseconds=0x1) [0212.340] Sleep (dwMilliseconds=0x1) [0212.356] Sleep (dwMilliseconds=0x1) [0212.371] Sleep (dwMilliseconds=0x1) [0212.395] Sleep (dwMilliseconds=0x1) [0212.402] Sleep (dwMilliseconds=0x1) [0212.419] Sleep (dwMilliseconds=0x1) [0212.437] Sleep (dwMilliseconds=0x1) [0212.449] Sleep (dwMilliseconds=0x1) [0212.468] Sleep (dwMilliseconds=0x1) [0212.480] Sleep (dwMilliseconds=0x1) [0212.496] Sleep (dwMilliseconds=0x1) [0212.512] Sleep (dwMilliseconds=0x1) [0212.528] Sleep (dwMilliseconds=0x1) [0212.545] Sleep (dwMilliseconds=0x1) [0212.559] Sleep (dwMilliseconds=0x1) [0212.574] Sleep (dwMilliseconds=0x1) [0212.592] Sleep (dwMilliseconds=0x1) [0212.606] Sleep (dwMilliseconds=0x1) [0212.622] Sleep (dwMilliseconds=0x1) [0212.637] Sleep (dwMilliseconds=0x1) [0212.658] Sleep (dwMilliseconds=0x1) [0212.668] Sleep (dwMilliseconds=0x1) [0212.828] Sleep (dwMilliseconds=0x1) [0212.966] Sleep (dwMilliseconds=0x1) [0215.654] Sleep (dwMilliseconds=0x1) [0215.974] Sleep (dwMilliseconds=0x1) [0216.183] Sleep (dwMilliseconds=0x1) [0216.363] Sleep (dwMilliseconds=0x1) [0217.177] Sleep (dwMilliseconds=0x1) [0217.937] Sleep (dwMilliseconds=0x1) [0218.476] Sleep (dwMilliseconds=0x1) [0218.839] Sleep (dwMilliseconds=0x1) [0218.976] Sleep (dwMilliseconds=0x1) [0219.101] Sleep (dwMilliseconds=0x1) [0219.217] Sleep (dwMilliseconds=0x1) [0219.347] Sleep (dwMilliseconds=0x1) [0219.470] Sleep (dwMilliseconds=0x1) [0219.651] Sleep (dwMilliseconds=0x1) [0219.746] Sleep (dwMilliseconds=0x1) [0219.833] Sleep (dwMilliseconds=0x1) [0219.957] Sleep (dwMilliseconds=0x1) [0220.077] Sleep (dwMilliseconds=0x1) [0220.181] Sleep (dwMilliseconds=0x1) [0220.530] Sleep (dwMilliseconds=0x1) [0220.618] Sleep (dwMilliseconds=0x1) [0220.717] Sleep (dwMilliseconds=0x1) [0220.838] Sleep (dwMilliseconds=0x1) [0220.977] Sleep (dwMilliseconds=0x1) [0221.005] Sleep (dwMilliseconds=0x1) [0221.031] Sleep (dwMilliseconds=0x1) [0221.125] Sleep (dwMilliseconds=0x1) [0221.191] Sleep (dwMilliseconds=0x1) [0221.272] Sleep (dwMilliseconds=0x1) [0221.314] Sleep (dwMilliseconds=0x1) [0221.369] Sleep (dwMilliseconds=0x1) [0221.435] Sleep (dwMilliseconds=0x1) [0221.575] Sleep (dwMilliseconds=0x1) [0221.642] Sleep (dwMilliseconds=0x1) [0221.688] Sleep (dwMilliseconds=0x1) [0221.744] Sleep (dwMilliseconds=0x1) [0221.802] Sleep (dwMilliseconds=0x1) [0221.860] Sleep (dwMilliseconds=0x1) [0221.880] Sleep (dwMilliseconds=0x1) [0221.926] Sleep (dwMilliseconds=0x1) [0222.025] Sleep (dwMilliseconds=0x1) [0222.046] Sleep (dwMilliseconds=0x1) [0222.065] Sleep (dwMilliseconds=0x1) [0222.103] Sleep (dwMilliseconds=0x1) [0222.159] Sleep (dwMilliseconds=0x1) [0222.785] Sleep (dwMilliseconds=0x1) [0222.859] Sleep (dwMilliseconds=0x1) [0222.888] Sleep (dwMilliseconds=0x1) [0225.006] Sleep (dwMilliseconds=0x1) [0225.632] Sleep (dwMilliseconds=0x1) [0226.086] Sleep (dwMilliseconds=0x1) [0226.817] Sleep (dwMilliseconds=0x1) [0227.112] Sleep (dwMilliseconds=0x1) [0227.222] Sleep (dwMilliseconds=0x1) [0227.339] Sleep (dwMilliseconds=0x1) [0227.489] Sleep (dwMilliseconds=0x1) [0227.508] Sleep (dwMilliseconds=0x1) [0227.519] Sleep (dwMilliseconds=0x1) [0227.535] Sleep (dwMilliseconds=0x1) [0227.551] Sleep (dwMilliseconds=0x1) [0227.572] Sleep (dwMilliseconds=0x1) [0227.581] Sleep (dwMilliseconds=0x1) [0227.597] Sleep (dwMilliseconds=0x1) [0227.613] Sleep (dwMilliseconds=0x1) [0227.629] Sleep (dwMilliseconds=0x1) [0227.644] Sleep (dwMilliseconds=0x1) [0227.660] Sleep (dwMilliseconds=0x1) [0227.681] Sleep (dwMilliseconds=0x1) [0227.691] Sleep (dwMilliseconds=0x1) [0227.706] Sleep (dwMilliseconds=0x1) [0227.724] Sleep (dwMilliseconds=0x1) [0227.738] Sleep (dwMilliseconds=0x1) [0227.754] Sleep (dwMilliseconds=0x1) [0227.769] Sleep (dwMilliseconds=0x1) [0227.791] Sleep (dwMilliseconds=0x1) [0227.799] Sleep (dwMilliseconds=0x1) [0227.815] Sleep (dwMilliseconds=0x1) [0227.831] Sleep (dwMilliseconds=0x1) [0227.846] Sleep (dwMilliseconds=0x1) [0227.862] Sleep (dwMilliseconds=0x1) [0227.878] Sleep (dwMilliseconds=0x1) [0227.899] Sleep (dwMilliseconds=0x1) [0227.909] Sleep (dwMilliseconds=0x1) [0227.924] Sleep (dwMilliseconds=0x1) [0227.940] Sleep (dwMilliseconds=0x1) [0227.956] Sleep (dwMilliseconds=0x1) [0227.971] Sleep (dwMilliseconds=0x1) [0227.987] Sleep (dwMilliseconds=0x1) [0228.011] Sleep (dwMilliseconds=0x1) [0228.018] Sleep (dwMilliseconds=0x1) [0228.048] Sleep (dwMilliseconds=0x1) [0228.049] Sleep (dwMilliseconds=0x1) [0228.065] Sleep (dwMilliseconds=0x1) [0228.080] Sleep (dwMilliseconds=0x1) [0228.097] Sleep (dwMilliseconds=0x1) [0228.120] Sleep (dwMilliseconds=0x1) [0228.127] Sleep (dwMilliseconds=0x1) [0228.143] Sleep (dwMilliseconds=0x1) [0228.158] Sleep (dwMilliseconds=0x1) [0228.174] Sleep (dwMilliseconds=0x1) [0228.190] Sleep (dwMilliseconds=0x1) [0228.206] Sleep (dwMilliseconds=0x1) [0228.229] Sleep (dwMilliseconds=0x1) [0228.237] Sleep (dwMilliseconds=0x1) [0228.252] Sleep (dwMilliseconds=0x1) [0228.268] Sleep (dwMilliseconds=0x1) [0228.283] Sleep (dwMilliseconds=0x1) [0228.299] Sleep (dwMilliseconds=0x1) [0228.315] Sleep (dwMilliseconds=0x1) [0228.337] Sleep (dwMilliseconds=0x1) [0228.345] Sleep (dwMilliseconds=0x1) [0228.361] Sleep (dwMilliseconds=0x1) [0228.377] Sleep (dwMilliseconds=0x1) [0228.392] Sleep (dwMilliseconds=0x1) [0228.408] Sleep (dwMilliseconds=0x1) [0228.445] Sleep (dwMilliseconds=0x1) [0228.455] Sleep (dwMilliseconds=0x1) [0228.470] Sleep (dwMilliseconds=0x1) [0228.486] Sleep (dwMilliseconds=0x1) [0228.503] Sleep (dwMilliseconds=0x1) [0228.517] Sleep (dwMilliseconds=0x1) [0228.533] Sleep (dwMilliseconds=0x1) [0228.556] Sleep (dwMilliseconds=0x1) [0228.564] Sleep (dwMilliseconds=0x1) [0228.580] Sleep (dwMilliseconds=0x1) [0228.595] Sleep (dwMilliseconds=0x1) [0228.611] Sleep (dwMilliseconds=0x1) [0228.626] Sleep (dwMilliseconds=0x1) [0228.643] Sleep (dwMilliseconds=0x1) [0228.664] Sleep (dwMilliseconds=0x1) [0228.680] Sleep (dwMilliseconds=0x1) [0228.689] Sleep (dwMilliseconds=0x1) [0228.705] Sleep (dwMilliseconds=0x1) [0228.720] Sleep (dwMilliseconds=0x1) [0228.809] Sleep (dwMilliseconds=0x1) [0229.467] Sleep (dwMilliseconds=0x1) [0229.884] Sleep (dwMilliseconds=0x1) [0230.286] Sleep (dwMilliseconds=0x1) [0230.346] Sleep (dwMilliseconds=0x1) [0230.402] Sleep (dwMilliseconds=0x1) [0230.455] Sleep (dwMilliseconds=0x1) [0230.479] Sleep (dwMilliseconds=0x1) [0230.519] Sleep (dwMilliseconds=0x1) [0230.543] Sleep (dwMilliseconds=0x1) [0230.577] Sleep (dwMilliseconds=0x1) [0230.686] Sleep (dwMilliseconds=0x1) [0230.771] Sleep (dwMilliseconds=0x1) [0230.844] Sleep (dwMilliseconds=0x1) [0230.907] Sleep (dwMilliseconds=0x1) [0230.942] Sleep (dwMilliseconds=0x1) [0230.986] Sleep (dwMilliseconds=0x1) [0231.057] Sleep (dwMilliseconds=0x1) [0231.632] Sleep (dwMilliseconds=0x1) [0231.738] Sleep (dwMilliseconds=0x1) [0231.813] Sleep (dwMilliseconds=0x1) [0231.870] Sleep (dwMilliseconds=0x1) [0231.899] Sleep (dwMilliseconds=0x1) [0231.978] Sleep (dwMilliseconds=0x1) [0232.107] Sleep (dwMilliseconds=0x1) [0232.128] Sleep (dwMilliseconds=0x1) [0232.138] Sleep (dwMilliseconds=0x1) [0232.171] Sleep (dwMilliseconds=0x1) [0232.889] Sleep (dwMilliseconds=0x1) [0233.011] Sleep (dwMilliseconds=0x1) [0233.116] Sleep (dwMilliseconds=0x1) [0233.156] Sleep (dwMilliseconds=0x1) [0233.237] Sleep (dwMilliseconds=0x1) [0233.294] Sleep (dwMilliseconds=0x1) [0233.390] Sleep (dwMilliseconds=0x1) [0233.463] Sleep (dwMilliseconds=0x1) [0233.521] Sleep (dwMilliseconds=0x1) [0233.958] Sleep (dwMilliseconds=0x1) [0234.060] Sleep (dwMilliseconds=0x1) [0234.155] Sleep (dwMilliseconds=0x1) [0235.240] Sleep (dwMilliseconds=0x1) [0235.328] Sleep (dwMilliseconds=0x1) [0235.414] Sleep (dwMilliseconds=0x1) [0235.484] Sleep (dwMilliseconds=0x1) [0235.512] Sleep (dwMilliseconds=0x1) [0235.561] Sleep (dwMilliseconds=0x1) [0235.577] Sleep (dwMilliseconds=0x1) [0235.587] Sleep (dwMilliseconds=0x1) [0235.600] Sleep (dwMilliseconds=0x1) [0235.619] Sleep (dwMilliseconds=0x1) [0235.631] Sleep (dwMilliseconds=0x1) [0235.647] Sleep (dwMilliseconds=0x1) [0235.662] Sleep (dwMilliseconds=0x1) [0235.678] Sleep (dwMilliseconds=0x1) [0235.695] Sleep (dwMilliseconds=0x1) [0235.709] Sleep (dwMilliseconds=0x1) [0235.725] Sleep (dwMilliseconds=0x1) [0235.741] Sleep (dwMilliseconds=0x1) [0235.756] Sleep (dwMilliseconds=0x1) [0235.772] Sleep (dwMilliseconds=0x1) [0235.788] Sleep (dwMilliseconds=0x1) [0235.805] Sleep (dwMilliseconds=0x1) [0235.818] Sleep (dwMilliseconds=0x1) [0235.834] Sleep (dwMilliseconds=0x1) [0235.849] Sleep (dwMilliseconds=0x1) [0235.868] Sleep (dwMilliseconds=0x1) [0235.880] Sleep (dwMilliseconds=0x1) [0235.901] Sleep (dwMilliseconds=0x1) [0235.918] Sleep (dwMilliseconds=0x1) [0235.927] Sleep (dwMilliseconds=0x1) [0235.943] Sleep (dwMilliseconds=0x1) [0235.958] Sleep (dwMilliseconds=0x1) [0235.979] Sleep (dwMilliseconds=0x1) [0235.990] Sleep (dwMilliseconds=0x1) [0236.006] Sleep (dwMilliseconds=0x1) [0236.022] Sleep (dwMilliseconds=0x1) [0236.043] Sleep (dwMilliseconds=0x1) [0236.052] Sleep (dwMilliseconds=0x1) [0236.069] Sleep (dwMilliseconds=0x1) [0236.084] Sleep (dwMilliseconds=0x1) [0236.099] Sleep (dwMilliseconds=0x1) [0236.114] Sleep (dwMilliseconds=0x1) [0236.131] Sleep (dwMilliseconds=0x1) [0236.146] Sleep (dwMilliseconds=0x1) [0236.168] Sleep (dwMilliseconds=0x1) [0236.177] Sleep (dwMilliseconds=0x1) [0236.192] Sleep (dwMilliseconds=0x1) [0236.219] Sleep (dwMilliseconds=0x1) [0236.223] Sleep (dwMilliseconds=0x1) [0236.242] Sleep (dwMilliseconds=0x1) [0236.255] Sleep (dwMilliseconds=0x1) [0236.420] Sleep (dwMilliseconds=0x1) [0236.443] Sleep (dwMilliseconds=0x1) [0236.458] Sleep (dwMilliseconds=0x1) [0236.473] Sleep (dwMilliseconds=0x1) [0236.489] Sleep (dwMilliseconds=0x1) [0236.504] Sleep (dwMilliseconds=0x1) [0236.521] Sleep (dwMilliseconds=0x1) [0236.536] Sleep (dwMilliseconds=0x1) [0236.551] Sleep (dwMilliseconds=0x1) [0236.584] Sleep (dwMilliseconds=0x1) [0236.598] Sleep (dwMilliseconds=0x1) [0236.614] Sleep (dwMilliseconds=0x1) [0236.631] Sleep (dwMilliseconds=0x1) [0236.645] Sleep (dwMilliseconds=0x1) [0236.660] Sleep (dwMilliseconds=0x1) [0236.677] Sleep (dwMilliseconds=0x1) [0236.692] Sleep (dwMilliseconds=0x1) [0236.707] Sleep (dwMilliseconds=0x1) [0236.723] Sleep (dwMilliseconds=0x1) [0236.740] Sleep (dwMilliseconds=0x1) [0236.754] Sleep (dwMilliseconds=0x1) [0236.770] Sleep (dwMilliseconds=0x1) [0236.786] Sleep (dwMilliseconds=0x1) [0236.801] Sleep (dwMilliseconds=0x1) [0236.817] Sleep (dwMilliseconds=0x1) [0236.832] Sleep (dwMilliseconds=0x1) [0236.853] Sleep (dwMilliseconds=0x1) [0236.863] Sleep (dwMilliseconds=0x1) [0236.879] Sleep (dwMilliseconds=0x1) [0236.895] Sleep (dwMilliseconds=0x1) [0236.910] Sleep (dwMilliseconds=0x1) [0236.925] Sleep (dwMilliseconds=0x1) [0236.941] Sleep (dwMilliseconds=0x1) [0236.958] Sleep (dwMilliseconds=0x1) [0236.972] Sleep (dwMilliseconds=0x1) [0236.988] Sleep (dwMilliseconds=0x1) [0237.004] Sleep (dwMilliseconds=0x1) [0237.019] Sleep (dwMilliseconds=0x1) [0237.035] Sleep (dwMilliseconds=0x1) [0237.050] Sleep (dwMilliseconds=0x1) [0237.067] Sleep (dwMilliseconds=0x1) [0237.082] Sleep (dwMilliseconds=0x1) [0237.097] Sleep (dwMilliseconds=0x1) [0237.113] Sleep (dwMilliseconds=0x1) [0237.128] Sleep (dwMilliseconds=0x1) [0237.144] Sleep (dwMilliseconds=0x1) [0237.160] Sleep (dwMilliseconds=0x1) [0237.187] Sleep (dwMilliseconds=0x1) [0237.191] Sleep (dwMilliseconds=0x1) [0237.206] Sleep (dwMilliseconds=0x1) [0237.222] Sleep (dwMilliseconds=0x1) [0237.237] Sleep (dwMilliseconds=0x1) [0237.253] Sleep (dwMilliseconds=0x1) [0237.273] Sleep (dwMilliseconds=0x1) [0237.286] Sleep (dwMilliseconds=0x1) [0237.300] Sleep (dwMilliseconds=0x1) [0237.316] Sleep (dwMilliseconds=0x1) [0237.332] Sleep (dwMilliseconds=0x1) [0237.347] Sleep (dwMilliseconds=0x1) [0237.362] Sleep (dwMilliseconds=0x1) [0237.378] Sleep (dwMilliseconds=0x1) [0237.395] Sleep (dwMilliseconds=0x1) [0237.412] Sleep (dwMilliseconds=0x1) [0237.487] Sleep (dwMilliseconds=0x1) [0237.536] Sleep (dwMilliseconds=0x1) [0237.581] Sleep (dwMilliseconds=0x1) [0237.627] Sleep (dwMilliseconds=0x1) [0237.675] Sleep (dwMilliseconds=0x1) [0237.721] Sleep (dwMilliseconds=0x1) [0237.768] Sleep (dwMilliseconds=0x1) [0237.816] Sleep (dwMilliseconds=0x1) [0237.862] Sleep (dwMilliseconds=0x1) [0237.895] Sleep (dwMilliseconds=0x1) [0237.945] Sleep (dwMilliseconds=0x1) [0237.987] Sleep (dwMilliseconds=0x1) [0238.033] Sleep (dwMilliseconds=0x1) [0238.081] Sleep (dwMilliseconds=0x1) [0238.111] Sleep (dwMilliseconds=0x1) [0238.118] Sleep (dwMilliseconds=0x1) [0238.127] Sleep (dwMilliseconds=0x1) [0238.142] Sleep (dwMilliseconds=0x1) [0238.158] Sleep (dwMilliseconds=0x1) [0238.174] Sleep (dwMilliseconds=0x1) [0238.192] Sleep (dwMilliseconds=0x1) [0238.211] Sleep (dwMilliseconds=0x1) [0238.220] Sleep (dwMilliseconds=0x1) [0238.530] Sleep (dwMilliseconds=0x1) [0238.533] Sleep (dwMilliseconds=0x1) [0238.548] Sleep (dwMilliseconds=0x1) [0238.564] Sleep (dwMilliseconds=0x1) [0238.579] Sleep (dwMilliseconds=0x1) [0238.595] Sleep (dwMilliseconds=0x1) [0238.611] Sleep (dwMilliseconds=0x1) [0238.626] Sleep (dwMilliseconds=0x1) [0238.643] Sleep (dwMilliseconds=0x1) [0238.658] Sleep (dwMilliseconds=0x1) [0238.673] Sleep (dwMilliseconds=0x1) [0238.688] Sleep (dwMilliseconds=0x1) [0238.704] Sleep (dwMilliseconds=0x1) [0238.720] Sleep (dwMilliseconds=0x1) [0238.738] Sleep (dwMilliseconds=0x1) [0238.753] Sleep (dwMilliseconds=0x1) [0238.766] Sleep (dwMilliseconds=0x1) [0238.782] Sleep (dwMilliseconds=0x1) [0238.799] Sleep (dwMilliseconds=0x1) [0238.817] Sleep (dwMilliseconds=0x1) [0238.839] Sleep (dwMilliseconds=0x1) [0238.854] Sleep (dwMilliseconds=0x1) [0238.865] Sleep (dwMilliseconds=0x1) [0238.876] Sleep (dwMilliseconds=0x1) [0238.891] Sleep (dwMilliseconds=0x1) [0238.909] Sleep (dwMilliseconds=0x1) [0238.922] Sleep (dwMilliseconds=0x1) [0238.938] Sleep (dwMilliseconds=0x1) [0238.953] Sleep (dwMilliseconds=0x1) [0238.971] Sleep (dwMilliseconds=0x1) [0238.985] Sleep (dwMilliseconds=0x1) [0239.000] Sleep (dwMilliseconds=0x1) [0239.016] Sleep (dwMilliseconds=0x1) [0239.034] Sleep (dwMilliseconds=0x1) [0239.047] Sleep (dwMilliseconds=0x1) [0239.063] Sleep (dwMilliseconds=0x1) [0239.082] Sleep (dwMilliseconds=0x1) [0239.094] Sleep (dwMilliseconds=0x1) [0239.111] Sleep (dwMilliseconds=0x1) [0239.138] Sleep (dwMilliseconds=0x1) [0239.141] Sleep (dwMilliseconds=0x1) [0239.156] Sleep (dwMilliseconds=0x1) [0239.172] Sleep (dwMilliseconds=0x1) [0239.189] Sleep (dwMilliseconds=0x1) [0239.203] Sleep (dwMilliseconds=0x1) [0239.219] Sleep (dwMilliseconds=0x1) [0239.234] Sleep (dwMilliseconds=0x1) [0239.250] Sleep (dwMilliseconds=0x1) [0239.269] Sleep (dwMilliseconds=0x1) [0239.281] Sleep (dwMilliseconds=0x1) [0239.298] Sleep (dwMilliseconds=0x1) [0239.312] Sleep (dwMilliseconds=0x1) [0239.656] Sleep (dwMilliseconds=0x1) [0239.680] Sleep (dwMilliseconds=0x1) [0239.767] Sleep (dwMilliseconds=0x1) [0239.786] Sleep (dwMilliseconds=0x1) [0239.960] Sleep (dwMilliseconds=0x1) [0239.967] Sleep (dwMilliseconds=0x1) [0239.986] Sleep (dwMilliseconds=0x1) [0240.025] Sleep (dwMilliseconds=0x1) [0240.031] Sleep (dwMilliseconds=0x1) [0240.170] Sleep (dwMilliseconds=0x1) [0240.439] Sleep (dwMilliseconds=0x1) [0240.617] Sleep (dwMilliseconds=0x1) [0240.656] Sleep (dwMilliseconds=0x1) [0240.688] Sleep (dwMilliseconds=0x1) [0240.761] Sleep (dwMilliseconds=0x1) [0240.780] Sleep (dwMilliseconds=0x1) [0240.813] Sleep (dwMilliseconds=0x1) [0240.847] Sleep (dwMilliseconds=0x1) [0240.887] Sleep (dwMilliseconds=0x1) [0240.890] Sleep (dwMilliseconds=0x1) [0240.912] Sleep (dwMilliseconds=0x1) [0240.919] Sleep (dwMilliseconds=0x1) [0241.595] Sleep (dwMilliseconds=0x1) [0241.641] Sleep (dwMilliseconds=0x1) [0241.655] Sleep (dwMilliseconds=0x1) [0241.716] Sleep (dwMilliseconds=0x1) [0242.038] Sleep (dwMilliseconds=0x1) [0242.188] Sleep (dwMilliseconds=0x1) [0242.215] Sleep (dwMilliseconds=0x1) [0242.237] Sleep (dwMilliseconds=0x1) [0242.282] Sleep (dwMilliseconds=0x1) [0242.991] Sleep (dwMilliseconds=0x1) [0243.005] Sleep (dwMilliseconds=0x1) [0243.017] Sleep (dwMilliseconds=0x1) [0243.028] Sleep (dwMilliseconds=0x1) [0243.069] Sleep (dwMilliseconds=0x1) [0243.075] Sleep (dwMilliseconds=0x1) [0243.325] Sleep (dwMilliseconds=0x1) [0243.423] Sleep (dwMilliseconds=0x1) [0243.450] Sleep (dwMilliseconds=0x1) [0243.472] Sleep (dwMilliseconds=0x1) [0243.486] Sleep (dwMilliseconds=0x1) [0243.496] Sleep (dwMilliseconds=0x1) [0244.261] Sleep (dwMilliseconds=0x1) [0244.303] Sleep (dwMilliseconds=0x1) [0244.307] Sleep (dwMilliseconds=0x1) [0244.352] Sleep (dwMilliseconds=0x1) [0244.627] Sleep (dwMilliseconds=0x1) [0244.637] Sleep (dwMilliseconds=0x1) [0244.648] Sleep (dwMilliseconds=0x1) [0244.664] Sleep (dwMilliseconds=0x1) [0244.679] Sleep (dwMilliseconds=0x1) [0244.694] Sleep (dwMilliseconds=0x1) [0244.710] Sleep (dwMilliseconds=0x1) [0244.727] Sleep (dwMilliseconds=0x1) [0244.741] Sleep (dwMilliseconds=0x1) [0244.757] Sleep (dwMilliseconds=0x1) [0244.772] Sleep (dwMilliseconds=0x1) [0244.788] Sleep (dwMilliseconds=0x1) [0244.805] Sleep (dwMilliseconds=0x1) [0244.835] Sleep (dwMilliseconds=0x1) [0244.850] Sleep (dwMilliseconds=0x1) [0244.866] Sleep (dwMilliseconds=0x1) [0244.881] Sleep (dwMilliseconds=0x1) [0244.898] Sleep (dwMilliseconds=0x1) [0244.913] Sleep (dwMilliseconds=0x1) [0244.928] Sleep (dwMilliseconds=0x1) [0244.956] Sleep (dwMilliseconds=0x1) [0244.961] Sleep (dwMilliseconds=0x1) [0244.975] Sleep (dwMilliseconds=0x1) [0244.991] Sleep (dwMilliseconds=0x1) [0245.036] Sleep (dwMilliseconds=0x1) [0245.037] Sleep (dwMilliseconds=0x1) [0245.068] Sleep (dwMilliseconds=0x1) [0245.110] Sleep (dwMilliseconds=0x1) [0245.153] Sleep (dwMilliseconds=0x1) [0245.259] Sleep (dwMilliseconds=0x1) [0245.358] Sleep (dwMilliseconds=0x1) [0245.482] Sleep (dwMilliseconds=0x1) [0245.538] Sleep (dwMilliseconds=0x1) [0245.853] Sleep (dwMilliseconds=0x1) [0245.901] Sleep (dwMilliseconds=0x1) [0245.914] Sleep (dwMilliseconds=0x1) [0245.928] Sleep (dwMilliseconds=0x1) [0245.943] Sleep (dwMilliseconds=0x1) [0245.960] Sleep (dwMilliseconds=0x1) [0245.975] Sleep (dwMilliseconds=0x1) [0245.990] Sleep (dwMilliseconds=0x1) [0246.009] Sleep (dwMilliseconds=0x1) [0246.021] Sleep (dwMilliseconds=0x1) [0246.037] Sleep (dwMilliseconds=0x1) [0246.053] Sleep (dwMilliseconds=0x1) [0246.070] Sleep (dwMilliseconds=0x1) [0246.084] Sleep (dwMilliseconds=0x1) [0246.100] Sleep (dwMilliseconds=0x1) [0246.115] Sleep (dwMilliseconds=0x1) [0246.131] Sleep (dwMilliseconds=0x1) [0246.147] Sleep (dwMilliseconds=0x1) [0246.162] Sleep (dwMilliseconds=0x1) [0246.178] Sleep (dwMilliseconds=0x1) [0246.193] Sleep (dwMilliseconds=0x1) [0246.209] Sleep (dwMilliseconds=0x1) [0246.224] Sleep (dwMilliseconds=0x1) [0246.240] Sleep (dwMilliseconds=0x1) [0246.255] Sleep (dwMilliseconds=0x1) [0246.271] Sleep (dwMilliseconds=0x1) [0246.288] Sleep (dwMilliseconds=0x1) [0246.303] Sleep (dwMilliseconds=0x1) [0246.320] Sleep (dwMilliseconds=0x1) [0246.332] Sleep (dwMilliseconds=0x1) [0246.348] Sleep (dwMilliseconds=0x1) [0246.364] Sleep (dwMilliseconds=0x1) [0246.379] Sleep (dwMilliseconds=0x1) [0246.396] Sleep (dwMilliseconds=0x1) [0246.416] Sleep (dwMilliseconds=0x1) [0246.426] Sleep (dwMilliseconds=0x1) [0246.442] Sleep (dwMilliseconds=0x1) [0246.457] Sleep (dwMilliseconds=0x1) [0246.473] Sleep (dwMilliseconds=0x1) [0246.489] Sleep (dwMilliseconds=0x1) [0246.505] Sleep (dwMilliseconds=0x1) [0246.520] Sleep (dwMilliseconds=0x1) [0246.535] Sleep (dwMilliseconds=0x1) [0246.551] Sleep (dwMilliseconds=0x1) [0246.566] Sleep (dwMilliseconds=0x1) [0246.582] Sleep (dwMilliseconds=0x1) [0246.598] Sleep (dwMilliseconds=0x1) [0246.614] Sleep (dwMilliseconds=0x1) [0246.629] Sleep (dwMilliseconds=0x1) [0246.645] Sleep (dwMilliseconds=0x1) [0246.660] Sleep (dwMilliseconds=0x1) [0246.675] Sleep (dwMilliseconds=0x1) [0246.691] Sleep (dwMilliseconds=0x1) [0246.707] Sleep (dwMilliseconds=0x1) [0246.723] Sleep (dwMilliseconds=0x1) [0246.738] Sleep (dwMilliseconds=0x1) [0246.753] Sleep (dwMilliseconds=0x1) [0246.769] Sleep (dwMilliseconds=0x1) [0246.785] Sleep (dwMilliseconds=0x1) [0246.800] Sleep (dwMilliseconds=0x1) [0246.831] Sleep (dwMilliseconds=0x1) [0246.832] Sleep (dwMilliseconds=0x1) [0246.849] Sleep (dwMilliseconds=0x1) [0246.863] Sleep (dwMilliseconds=0x1) [0246.910] Sleep (dwMilliseconds=0x1) [0246.957] Sleep (dwMilliseconds=0x1) [0246.972] Sleep (dwMilliseconds=0x1) [0246.992] Sleep (dwMilliseconds=0x1) [0247.003] Sleep (dwMilliseconds=0x1) [0247.019] Sleep (dwMilliseconds=0x1) [0247.035] Sleep (dwMilliseconds=0x1) [0247.051] Sleep (dwMilliseconds=0x1) [0247.067] Sleep (dwMilliseconds=0x1) [0247.112] Sleep (dwMilliseconds=0x1) [0247.154] Sleep (dwMilliseconds=0x1) [0247.159] Sleep (dwMilliseconds=0x1) [0247.176] Sleep (dwMilliseconds=0x1) [0247.190] Sleep (dwMilliseconds=0x1) [0247.206] Sleep (dwMilliseconds=0x1) [0247.222] Sleep (dwMilliseconds=0x1) [0247.237] Sleep (dwMilliseconds=0x1) [0247.253] Sleep (dwMilliseconds=0x1) [0247.272] Sleep (dwMilliseconds=0x1) [0247.285] Sleep (dwMilliseconds=0x1) [0247.300] Sleep (dwMilliseconds=0x1) [0247.315] Sleep (dwMilliseconds=0x1) [0247.331] Sleep (dwMilliseconds=0x1) [0247.347] Sleep (dwMilliseconds=0x1) [0247.362] Sleep (dwMilliseconds=0x1) [0247.378] Sleep (dwMilliseconds=0x1) [0247.395] Sleep (dwMilliseconds=0x1) [0247.409] Sleep (dwMilliseconds=0x1) [0247.436] Sleep (dwMilliseconds=0x1) [0247.468] Sleep (dwMilliseconds=0x1) [0247.471] Sleep (dwMilliseconds=0x1) [0247.487] Sleep (dwMilliseconds=0x1) [0247.503] Sleep (dwMilliseconds=0x1) [0247.518] Sleep (dwMilliseconds=0x1) [0247.534] Sleep (dwMilliseconds=0x1) [0247.549] Sleep (dwMilliseconds=0x1) [0247.565] Sleep (dwMilliseconds=0x1) [0247.580] Sleep (dwMilliseconds=0x1) [0247.596] Sleep (dwMilliseconds=0x1) [0247.612] Sleep (dwMilliseconds=0x1) [0247.627] Sleep (dwMilliseconds=0x1) [0247.643] Sleep (dwMilliseconds=0x1) [0247.658] Sleep (dwMilliseconds=0x1) [0247.674] Sleep (dwMilliseconds=0x1) [0247.689] Sleep (dwMilliseconds=0x1) [0247.705] Sleep (dwMilliseconds=0x1) [0247.722] Sleep (dwMilliseconds=0x1) [0247.736] Sleep (dwMilliseconds=0x1) [0247.752] Sleep (dwMilliseconds=0x1) [0247.767] Sleep (dwMilliseconds=0x1) [0247.783] Sleep (dwMilliseconds=0x1) [0247.799] Sleep (dwMilliseconds=0x1) [0247.831] Sleep (dwMilliseconds=0x1) [0247.845] Sleep (dwMilliseconds=0x1) [0247.861] Sleep (dwMilliseconds=0x1) [0247.877] Sleep (dwMilliseconds=0x1) [0247.893] Sleep (dwMilliseconds=0x1) [0247.909] Sleep (dwMilliseconds=0x1) [0247.923] Sleep (dwMilliseconds=0x1) [0247.940] Sleep (dwMilliseconds=0x1) [0247.955] Sleep (dwMilliseconds=0x1) [0247.971] Sleep (dwMilliseconds=0x1) [0247.986] Sleep (dwMilliseconds=0x1) [0248.002] Sleep (dwMilliseconds=0x1) [0248.017] Sleep (dwMilliseconds=0x1) [0248.033] Sleep (dwMilliseconds=0x1) [0248.049] Sleep (dwMilliseconds=0x1) [0248.064] Sleep (dwMilliseconds=0x1) [0248.079] Sleep (dwMilliseconds=0x1) [0248.095] Sleep (dwMilliseconds=0x1) [0248.111] Sleep (dwMilliseconds=0x1) [0248.126] Sleep (dwMilliseconds=0x1) [0248.142] Sleep (dwMilliseconds=0x1) [0248.158] Sleep (dwMilliseconds=0x1) [0248.173] Sleep (dwMilliseconds=0x1) [0248.188] Sleep (dwMilliseconds=0x1) [0248.204] Sleep (dwMilliseconds=0x1) [0248.220] Sleep (dwMilliseconds=0x1) [0248.235] Sleep (dwMilliseconds=0x1) [0248.251] Sleep (dwMilliseconds=0x1) [0248.268] Sleep (dwMilliseconds=0x1) [0248.282] Sleep (dwMilliseconds=0x1) [0248.298] Sleep (dwMilliseconds=0x1) [0248.313] Sleep (dwMilliseconds=0x1) [0248.329] Sleep (dwMilliseconds=0x1) [0248.345] Sleep (dwMilliseconds=0x1) [0248.360] Sleep (dwMilliseconds=0x1) [0248.377] Sleep (dwMilliseconds=0x1) [0248.391] Sleep (dwMilliseconds=0x1) [0248.407] Sleep (dwMilliseconds=0x1) [0248.435] Sleep (dwMilliseconds=0x1) [0248.438] Sleep (dwMilliseconds=0x1) [0248.454] Sleep (dwMilliseconds=0x1) [0248.469] Sleep (dwMilliseconds=0x1) [0248.486] Sleep (dwMilliseconds=0x1) [0248.501] Sleep (dwMilliseconds=0x1) [0248.516] Sleep (dwMilliseconds=0x1) [0248.532] Sleep (dwMilliseconds=0x1) [0248.548] Sleep (dwMilliseconds=0x1) [0248.563] Sleep (dwMilliseconds=0x1) [0248.579] Sleep (dwMilliseconds=0x1) [0248.595] Sleep (dwMilliseconds=0x1) [0248.610] Sleep (dwMilliseconds=0x1) [0248.625] Sleep (dwMilliseconds=0x1) [0248.641] Sleep (dwMilliseconds=0x1) [0248.657] Sleep (dwMilliseconds=0x1) [0248.672] Sleep (dwMilliseconds=0x1) [0248.688] Sleep (dwMilliseconds=0x1) [0248.704] Sleep (dwMilliseconds=0x1) [0248.719] Sleep (dwMilliseconds=0x1) [0248.735] Sleep (dwMilliseconds=0x1) [0248.750] Sleep (dwMilliseconds=0x1) [0248.766] Sleep (dwMilliseconds=0x1) [0248.781] Sleep (dwMilliseconds=0x1) [0248.797] Sleep (dwMilliseconds=0x1) [0248.827] Sleep (dwMilliseconds=0x1) [0248.828] Sleep (dwMilliseconds=0x1) [0248.847] Sleep (dwMilliseconds=0x1) [0248.859] Sleep (dwMilliseconds=0x1) [0248.875] Sleep (dwMilliseconds=0x1) [0248.890] Sleep (dwMilliseconds=0x1) [0248.907] Sleep (dwMilliseconds=0x1) [0248.923] Sleep (dwMilliseconds=0x1) [0248.937] Sleep (dwMilliseconds=0x1) [0248.953] Sleep (dwMilliseconds=0x1) [0248.969] Sleep (dwMilliseconds=0x1) [0248.984] Sleep (dwMilliseconds=0x1) [0249.000] Sleep (dwMilliseconds=0x1) [0249.015] Sleep (dwMilliseconds=0x1) [0249.032] Sleep (dwMilliseconds=0x1) [0249.047] Sleep (dwMilliseconds=0x1) [0249.062] Sleep (dwMilliseconds=0x1) [0249.078] Sleep (dwMilliseconds=0x1) [0249.094] Sleep (dwMilliseconds=0x1) [0249.109] Sleep (dwMilliseconds=0x1) [0249.125] Sleep (dwMilliseconds=0x1) [0249.143] Sleep (dwMilliseconds=0x1) [0249.156] Sleep (dwMilliseconds=0x1) [0249.171] Sleep (dwMilliseconds=0x1) [0249.187] Sleep (dwMilliseconds=0x1) [0249.204] Sleep (dwMilliseconds=0x1) [0249.218] Sleep (dwMilliseconds=0x1) [0249.234] Sleep (dwMilliseconds=0x1) [0249.250] Sleep (dwMilliseconds=0x1) [0249.267] Sleep (dwMilliseconds=0x1) [0249.281] Sleep (dwMilliseconds=0x1) [0249.296] Sleep (dwMilliseconds=0x1) [0249.312] Sleep (dwMilliseconds=0x1) [0249.327] Sleep (dwMilliseconds=0x1) [0249.343] Sleep (dwMilliseconds=0x1) [0249.360] Sleep (dwMilliseconds=0x1) [0249.374] Sleep (dwMilliseconds=0x1) [0249.390] Sleep (dwMilliseconds=0x1) [0249.406] Sleep (dwMilliseconds=0x1) [0249.422] Sleep (dwMilliseconds=0x1) [0249.436] Sleep (dwMilliseconds=0x1) [0249.452] Sleep (dwMilliseconds=0x1) [0249.469] Sleep (dwMilliseconds=0x1) [0249.483] Sleep (dwMilliseconds=0x1) [0249.499] Sleep (dwMilliseconds=0x1) [0249.514] Sleep (dwMilliseconds=0x1) [0249.531] Sleep (dwMilliseconds=0x1) [0249.546] Sleep (dwMilliseconds=0x1) [0249.561] Sleep (dwMilliseconds=0x1) [0249.579] Sleep (dwMilliseconds=0x1) [0249.593] Sleep (dwMilliseconds=0x1) [0249.608] Sleep (dwMilliseconds=0x1) [0249.624] Sleep (dwMilliseconds=0x1) [0249.640] Sleep (dwMilliseconds=0x1) [0249.657] Sleep (dwMilliseconds=0x1) [0249.671] Sleep (dwMilliseconds=0x1) [0249.687] Sleep (dwMilliseconds=0x1) [0249.702] Sleep (dwMilliseconds=0x1) [0249.717] Sleep (dwMilliseconds=0x1) [0249.733] Sleep (dwMilliseconds=0x1) [0249.749] Sleep (dwMilliseconds=0x1) [0249.764] Sleep (dwMilliseconds=0x1) [0249.780] Sleep (dwMilliseconds=0x1) [0249.799] Sleep (dwMilliseconds=0x1) [0249.811] Sleep (dwMilliseconds=0x1) [0249.838] Sleep (dwMilliseconds=0x1) [0249.842] Sleep (dwMilliseconds=0x1) [0249.858] Sleep (dwMilliseconds=0x1) [0249.874] Sleep (dwMilliseconds=0x1) [0249.889] Sleep (dwMilliseconds=0x1) [0249.906] Sleep (dwMilliseconds=0x1) [0249.921] Sleep (dwMilliseconds=0x1) [0249.936] Sleep (dwMilliseconds=0x1) [0249.951] Sleep (dwMilliseconds=0x1) [0249.967] Sleep (dwMilliseconds=0x1) [0249.983] Sleep (dwMilliseconds=0x1) [0250.000] Sleep (dwMilliseconds=0x1) [0250.015] Sleep (dwMilliseconds=0x1) [0250.030] Sleep (dwMilliseconds=0x1) [0250.047] Sleep (dwMilliseconds=0x1) [0250.061] Sleep (dwMilliseconds=0x1) [0250.076] Sleep (dwMilliseconds=0x1) [0250.092] Sleep (dwMilliseconds=0x1) [0250.108] Sleep (dwMilliseconds=0x1) [0250.124] Sleep (dwMilliseconds=0x1) [0250.139] Sleep (dwMilliseconds=0x1) [0250.154] Sleep (dwMilliseconds=0x1) [0250.170] Sleep (dwMilliseconds=0x1) [0250.186] Sleep (dwMilliseconds=0x1) [0250.201] Sleep (dwMilliseconds=0x1) [0250.217] Sleep (dwMilliseconds=0x1) [0250.233] Sleep (dwMilliseconds=0x1) [0250.248] Sleep (dwMilliseconds=0x1) [0250.264] Sleep (dwMilliseconds=0x1) [0250.279] Sleep (dwMilliseconds=0x1) [0250.295] Sleep (dwMilliseconds=0x1) [0250.310] Sleep (dwMilliseconds=0x1) [0250.326] Sleep (dwMilliseconds=0x1) [0250.345] Sleep (dwMilliseconds=0x1) [0250.357] Sleep (dwMilliseconds=0x1) [0250.373] Sleep (dwMilliseconds=0x1) [0250.388] Sleep (dwMilliseconds=0x1) [0250.404] Sleep (dwMilliseconds=0x1) [0250.420] Sleep (dwMilliseconds=0x1) [0250.453] Sleep (dwMilliseconds=0x1) [0250.468] Sleep (dwMilliseconds=0x1) [0250.482] Sleep (dwMilliseconds=0x1) [0250.499] Sleep (dwMilliseconds=0x1) [0250.514] Sleep (dwMilliseconds=0x1) [0250.529] Sleep (dwMilliseconds=0x1) [0250.545] Sleep (dwMilliseconds=0x1) [0250.561] Sleep (dwMilliseconds=0x1) [0250.578] Sleep (dwMilliseconds=0x1) [0250.608] Sleep (dwMilliseconds=0x1) [0250.623] Sleep (dwMilliseconds=0x1) [0250.638] Sleep (dwMilliseconds=0x1) [0250.654] Sleep (dwMilliseconds=0x1) [0250.670] Sleep (dwMilliseconds=0x1) [0250.685] Sleep (dwMilliseconds=0x1) [0250.700] Sleep (dwMilliseconds=0x1) [0250.720] Sleep (dwMilliseconds=0x1) [0250.733] Sleep (dwMilliseconds=0x1) [0250.748] Sleep (dwMilliseconds=0x1) [0250.763] Sleep (dwMilliseconds=0x1) [0250.780] Sleep (dwMilliseconds=0x1) [0250.796] Sleep (dwMilliseconds=0x1) [0250.820] Sleep (dwMilliseconds=0x1) [0250.842] Sleep (dwMilliseconds=0x1) [0250.857] Sleep (dwMilliseconds=0x1) [0250.888] Sleep (dwMilliseconds=0x1) [0250.935] Sleep (dwMilliseconds=0x1) [0250.981] Sleep (dwMilliseconds=0x1) [0250.998] Sleep (dwMilliseconds=0x1) [0251.029] Sleep (dwMilliseconds=0x1) [0251.047] Sleep (dwMilliseconds=0x1) [0251.067] Sleep (dwMilliseconds=0x1) [0251.075] Sleep (dwMilliseconds=0x1) [0251.094] Sleep (dwMilliseconds=0x1) [0251.138] Sleep (dwMilliseconds=0x1) [0251.153] Sleep (dwMilliseconds=0x1) [0251.171] Sleep (dwMilliseconds=0x1) [0251.187] Sleep (dwMilliseconds=0x1) [0251.204] Sleep (dwMilliseconds=0x1) [0251.245] Sleep (dwMilliseconds=0x1) [0251.257] Sleep (dwMilliseconds=0x1) [0251.267] Sleep (dwMilliseconds=0x1) [0251.290] Sleep (dwMilliseconds=0x1) [0251.305] Sleep (dwMilliseconds=0x1) [0251.310] Sleep (dwMilliseconds=0x1) [0251.332] Sleep (dwMilliseconds=0x1) [0251.343] Sleep (dwMilliseconds=0x1) [0251.388] Sleep (dwMilliseconds=0x1) [0251.404] Sleep (dwMilliseconds=0x1) [0251.433] Sleep (dwMilliseconds=0x1) [0251.484] Sleep (dwMilliseconds=0x1) [0251.497] Sleep (dwMilliseconds=0x1) [0251.512] Sleep (dwMilliseconds=0x1) [0251.527] Sleep (dwMilliseconds=0x1) [0251.544] Sleep (dwMilliseconds=0x1) [0251.590] Sleep (dwMilliseconds=0x1) [0251.617] Sleep (dwMilliseconds=0x1) [0251.621] Sleep (dwMilliseconds=0x1) [0251.636] Sleep (dwMilliseconds=0x1) [0251.683] Sleep (dwMilliseconds=0x1) [0251.702] Sleep (dwMilliseconds=0x1) [0251.732] Sleep (dwMilliseconds=0x1) [0251.757] Sleep (dwMilliseconds=0x1) [0251.761] Sleep (dwMilliseconds=0x1) [0251.777] Sleep (dwMilliseconds=0x1) [0251.841] Sleep (dwMilliseconds=0x1) [0251.887] Sleep (dwMilliseconds=0x1) [0251.907] Sleep (dwMilliseconds=0x1) [0251.933] Sleep (dwMilliseconds=0x1) [0251.980] Sleep (dwMilliseconds=0x1) [0252.031] Sleep (dwMilliseconds=0x1) [0252.052] Sleep (dwMilliseconds=0x1) [0252.057] Sleep (dwMilliseconds=0x1) [0252.073] Sleep (dwMilliseconds=0x1) [0252.089] Sleep (dwMilliseconds=0x1) [0252.105] Sleep (dwMilliseconds=0x1) [0252.120] Sleep (dwMilliseconds=0x1) [0252.140] Sleep (dwMilliseconds=0x1) [0252.152] Sleep (dwMilliseconds=0x1) [0252.167] Sleep (dwMilliseconds=0x1) [0252.182] Sleep (dwMilliseconds=0x1) [0252.198] Sleep (dwMilliseconds=0x1) [0252.214] Sleep (dwMilliseconds=0x1) [0252.234] Sleep (dwMilliseconds=0x1) [0252.246] Sleep (dwMilliseconds=0x1) [0252.291] Sleep (dwMilliseconds=0x1) [0252.338] Sleep (dwMilliseconds=0x1) [0252.386] Sleep (dwMilliseconds=0x1) [0252.432] Sleep (dwMilliseconds=0x1) [0252.479] Sleep (dwMilliseconds=0x1) [0252.542] Sleep (dwMilliseconds=0x1) [0252.588] Sleep (dwMilliseconds=0x1) [0252.635] Sleep (dwMilliseconds=0x1) [0252.684] Sleep (dwMilliseconds=0x1) [0252.728] Sleep (dwMilliseconds=0x1) [0252.776] Sleep (dwMilliseconds=0x1) [0252.817] Sleep (dwMilliseconds=0x1) [0252.839] Sleep (dwMilliseconds=0x1) [0252.885] Sleep (dwMilliseconds=0x1) [0252.931] Sleep (dwMilliseconds=0x1) [0252.978] Sleep (dwMilliseconds=0x1) [0253.025] Sleep (dwMilliseconds=0x1) [0253.075] Sleep (dwMilliseconds=0x1) [0253.118] Sleep (dwMilliseconds=0x1) [0253.165] Sleep (dwMilliseconds=0x1) [0253.213] Sleep (dwMilliseconds=0x1) [0253.259] Sleep (dwMilliseconds=0x1) [0253.305] Sleep (dwMilliseconds=0x1) [0253.353] Sleep (dwMilliseconds=0x1) [0253.399] Sleep (dwMilliseconds=0x1) [0253.446] Sleep (dwMilliseconds=0x1) [0253.541] Sleep (dwMilliseconds=0x1) [0253.602] Sleep (dwMilliseconds=0x1) [0253.651] Sleep (dwMilliseconds=0x1) [0253.690] Sleep (dwMilliseconds=0x1) [0253.727] Sleep (dwMilliseconds=0x1) [0253.760] Sleep (dwMilliseconds=0x1) [0253.788] Sleep (dwMilliseconds=0x1) [0253.789] Sleep (dwMilliseconds=0x1) [0253.805] Sleep (dwMilliseconds=0x1) [0253.867] Sleep (dwMilliseconds=0x1) [0253.914] Sleep (dwMilliseconds=0x1) [0253.961] Sleep (dwMilliseconds=0x1) [0254.009] Sleep (dwMilliseconds=0x1) [0254.054] Sleep (dwMilliseconds=0x1) [0254.101] Sleep (dwMilliseconds=0x1) [0254.151] Sleep (dwMilliseconds=0x1) [0254.195] Sleep (dwMilliseconds=0x1) [0254.242] Sleep (dwMilliseconds=0x1) [0254.289] Sleep (dwMilliseconds=0x1) [0254.334] Sleep (dwMilliseconds=0x1) [0254.367] Sleep (dwMilliseconds=0x1) [0254.413] Sleep (dwMilliseconds=0x1) [0254.436] Sleep (dwMilliseconds=0x1) [0254.460] Sleep (dwMilliseconds=0x1) [0254.507] Sleep (dwMilliseconds=0x1) [0254.541] Sleep (dwMilliseconds=0x1) [0254.606] Sleep (dwMilliseconds=0x1) [0254.648] Sleep (dwMilliseconds=0x1) [0254.685] Sleep (dwMilliseconds=0x1) [0254.707] Sleep (dwMilliseconds=0x1) [0255.141] Sleep (dwMilliseconds=0x1) [0255.178] Sleep (dwMilliseconds=0x1) [0255.457] Sleep (dwMilliseconds=0x1) [0255.471] Sleep (dwMilliseconds=0x1) [0255.552] Sleep (dwMilliseconds=0x1) [0255.661] Sleep (dwMilliseconds=0x1) [0255.708] Sleep (dwMilliseconds=0x1) [0255.756] Sleep (dwMilliseconds=0x1) [0255.865] Sleep (dwMilliseconds=0x1) [0255.943] Sleep (dwMilliseconds=0x1) [0256.011] Sleep (dwMilliseconds=0x1) [0256.051] Sleep (dwMilliseconds=0x1) [0256.105] Sleep (dwMilliseconds=0x1) [0256.209] Sleep (dwMilliseconds=0x1) [0256.242] Sleep (dwMilliseconds=0x1) [0256.254] Sleep (dwMilliseconds=0x1) [0256.270] Sleep (dwMilliseconds=0x1) [0256.320] Sleep (dwMilliseconds=0x1) [0256.355] Sleep (dwMilliseconds=0x1) [0256.413] Sleep (dwMilliseconds=0x1) [0256.467] Sleep (dwMilliseconds=0x1) [0256.520] Sleep (dwMilliseconds=0x1) [0256.567] Sleep (dwMilliseconds=0x1) [0256.585] Sleep (dwMilliseconds=0x1) [0256.620] Sleep (dwMilliseconds=0x1) [0256.631] Sleep (dwMilliseconds=0x1) [0256.644] Sleep (dwMilliseconds=0x1) [0256.660] Sleep (dwMilliseconds=0x1) [0256.675] Sleep (dwMilliseconds=0x1) [0256.694] Sleep (dwMilliseconds=0x1) [0256.706] Sleep (dwMilliseconds=0x1) [0256.722] Sleep (dwMilliseconds=0x1) [0256.738] Sleep (dwMilliseconds=0x1) [0256.753] Sleep (dwMilliseconds=0x1) [0256.800] Sleep (dwMilliseconds=0x1) [0256.847] Sleep (dwMilliseconds=0x1) [0256.894] Sleep (dwMilliseconds=0x1) [0256.942] Sleep (dwMilliseconds=0x1) [0256.975] Sleep (dwMilliseconds=0x1) [0256.987] Sleep (dwMilliseconds=0x1) [0257.003] Sleep (dwMilliseconds=0x1) [0257.019] Sleep (dwMilliseconds=0x1) [0257.034] Sleep (dwMilliseconds=0x1) [0257.052] Sleep (dwMilliseconds=0x1) [0257.065] Sleep (dwMilliseconds=0x1) [0257.084] Sleep (dwMilliseconds=0x1) [0257.104] Sleep (dwMilliseconds=0x1) [0257.112] Sleep (dwMilliseconds=0x1) [0257.128] Sleep (dwMilliseconds=0x1) [0257.143] Sleep (dwMilliseconds=0x1) [0257.161] Sleep (dwMilliseconds=0x1) [0257.174] Sleep (dwMilliseconds=0x1) [0257.190] Sleep (dwMilliseconds=0x1) [0257.206] Sleep (dwMilliseconds=0x1) [0257.221] Sleep (dwMilliseconds=0x1) [0257.237] Sleep (dwMilliseconds=0x1) [0257.252] Sleep (dwMilliseconds=0x1) [0257.270] Sleep (dwMilliseconds=0x1) [0257.286] Sleep (dwMilliseconds=0x1) [0257.299] Sleep (dwMilliseconds=0x1) [0257.315] Sleep (dwMilliseconds=0x1) [0257.330] Sleep (dwMilliseconds=0x1) [0257.347] Sleep (dwMilliseconds=0x1) [0257.362] Sleep (dwMilliseconds=0x1) [0257.378] Sleep (dwMilliseconds=0x1) [0257.393] Sleep (dwMilliseconds=0x1) [0257.409] Sleep (dwMilliseconds=0x1) [0257.424] Sleep (dwMilliseconds=0x1) [0257.439] Sleep (dwMilliseconds=0x1) [0257.455] Sleep (dwMilliseconds=0x1) [0257.471] Sleep (dwMilliseconds=0x1) [0257.488] Sleep (dwMilliseconds=0x1) [0257.519] Sleep (dwMilliseconds=0x1) [0257.533] Sleep (dwMilliseconds=0x1) [0257.549] Sleep (dwMilliseconds=0x1) [0257.564] Sleep (dwMilliseconds=0x1) [0257.580] Sleep (dwMilliseconds=0x1) [0257.597] Sleep (dwMilliseconds=0x1) [0257.611] Sleep (dwMilliseconds=0x1) [0257.627] Sleep (dwMilliseconds=0x1) [0257.642] Sleep (dwMilliseconds=0x1) [0257.658] Sleep (dwMilliseconds=0x1) [0257.674] Sleep (dwMilliseconds=0x1) [0257.698] Sleep (dwMilliseconds=0x1) [0257.707] Sleep (dwMilliseconds=0x1) [0257.723] Sleep (dwMilliseconds=0x1) [0257.771] Sleep (dwMilliseconds=0x1) [0257.790] Sleep (dwMilliseconds=0x1) [0257.815] Sleep (dwMilliseconds=0x1) [0257.892] Sleep (dwMilliseconds=0x1) [0257.939] Sleep (dwMilliseconds=0x1) [0257.985] Sleep (dwMilliseconds=0x1) [0258.033] Sleep (dwMilliseconds=0x1) [0258.081] Sleep (dwMilliseconds=0x1) [0258.126] Sleep (dwMilliseconds=0x1) [0258.251] Sleep (dwMilliseconds=0x1) [0258.298] Sleep (dwMilliseconds=0x1) [0258.344] Sleep (dwMilliseconds=0x1) [0258.393] Sleep (dwMilliseconds=0x1) [0258.438] Sleep (dwMilliseconds=0x1) [0258.478] Sleep (dwMilliseconds=0x1) [0258.539] Sleep (dwMilliseconds=0x1) [0258.553] Sleep (dwMilliseconds=0x1) [0258.563] Sleep (dwMilliseconds=0x1) [0258.578] Sleep (dwMilliseconds=0x1) [0258.594] Sleep (dwMilliseconds=0x1) [0258.622] Sleep (dwMilliseconds=0x1) [0258.625] Sleep (dwMilliseconds=0x1) [0258.642] Sleep (dwMilliseconds=0x1) [0258.656] Sleep (dwMilliseconds=0x1) [0258.672] Sleep (dwMilliseconds=0x1) [0258.687] Sleep (dwMilliseconds=0x1) [0258.703] Sleep (dwMilliseconds=0x1) [0258.719] Sleep (dwMilliseconds=0x1) [0258.735] Sleep (dwMilliseconds=0x1) [0258.751] Sleep (dwMilliseconds=0x1) [0258.765] Sleep (dwMilliseconds=0x1) [0258.781] Sleep (dwMilliseconds=0x1) [0258.797] Sleep (dwMilliseconds=0x1) [0258.812] Sleep (dwMilliseconds=0x1) [0258.828] Sleep (dwMilliseconds=0x1) [0258.844] Sleep (dwMilliseconds=0x1) [0258.861] Sleep (dwMilliseconds=0x1) [0258.875] Sleep (dwMilliseconds=0x1) [0258.890] Sleep (dwMilliseconds=0x1) [0258.906] Sleep (dwMilliseconds=0x1) [0258.922] Sleep (dwMilliseconds=0x1) [0258.937] Sleep (dwMilliseconds=0x1) [0258.953] Sleep (dwMilliseconds=0x1) [0258.969] Sleep (dwMilliseconds=0x1) [0258.984] Sleep (dwMilliseconds=0x1) [0258.999] Sleep (dwMilliseconds=0x1) [0259.015] Sleep (dwMilliseconds=0x1) [0259.031] Sleep (dwMilliseconds=0x1) [0259.046] Sleep (dwMilliseconds=0x1) [0259.062] Sleep (dwMilliseconds=0x1) [0259.079] Sleep (dwMilliseconds=0x1) [0259.094] Sleep (dwMilliseconds=0x1) [0259.110] Sleep (dwMilliseconds=0x1) [0259.124] Sleep (dwMilliseconds=0x1) [0259.140] Sleep (dwMilliseconds=0x1) [0259.155] Sleep (dwMilliseconds=0x1) [0259.171] Sleep (dwMilliseconds=0x1) [0259.188] Sleep (dwMilliseconds=0x1) [0259.202] Sleep (dwMilliseconds=0x1) [0259.218] Sleep (dwMilliseconds=0x1) [0259.233] Sleep (dwMilliseconds=0x1) [0259.249] Sleep (dwMilliseconds=0x1) [0259.265] Sleep (dwMilliseconds=0x1) [0259.281] Sleep (dwMilliseconds=0x1) [0259.297] Sleep (dwMilliseconds=0x1) [0259.312] Sleep (dwMilliseconds=0x1) [0259.327] Sleep (dwMilliseconds=0x1) [0259.344] Sleep (dwMilliseconds=0x1) [0259.358] Sleep (dwMilliseconds=0x1) [0259.374] Sleep (dwMilliseconds=0x1) [0259.390] Sleep (dwMilliseconds=0x1) [0259.406] Sleep (dwMilliseconds=0x1) [0259.421] Sleep (dwMilliseconds=0x1) [0259.436] Sleep (dwMilliseconds=0x1) [0259.452] Sleep (dwMilliseconds=0x1) [0259.467] Sleep (dwMilliseconds=0x1) [0259.483] Sleep (dwMilliseconds=0x1) [0259.499] Sleep (dwMilliseconds=0x1) [0259.541] Sleep (dwMilliseconds=0x1) [0259.546] Sleep (dwMilliseconds=0x1) [0259.561] Sleep (dwMilliseconds=0x1) [0259.577] Sleep (dwMilliseconds=0x1) [0259.592] Sleep (dwMilliseconds=0x1) [0259.608] Sleep (dwMilliseconds=0x1) [0259.627] Sleep (dwMilliseconds=0x1) [0259.641] Sleep (dwMilliseconds=0x1) [0259.655] Sleep (dwMilliseconds=0x1) [0259.670] Sleep (dwMilliseconds=0x1) [0259.686] Sleep (dwMilliseconds=0x1) [0259.702] Sleep (dwMilliseconds=0x1) [0259.718] Sleep (dwMilliseconds=0x1) [0259.735] Sleep (dwMilliseconds=0x1) [0259.750] Sleep (dwMilliseconds=0x1) [0259.764] Sleep (dwMilliseconds=0x1) [0259.779] Sleep (dwMilliseconds=0x1) [0259.795] Sleep (dwMilliseconds=0x1) [0259.811] Sleep (dwMilliseconds=0x1) [0259.827] Sleep (dwMilliseconds=0x1) [0259.842] Sleep (dwMilliseconds=0x1) [0259.859] Sleep (dwMilliseconds=0x1) [0259.873] Sleep (dwMilliseconds=0x1) [0259.889] Sleep (dwMilliseconds=0x1) [0259.904] Sleep (dwMilliseconds=0x1) [0259.920] Sleep (dwMilliseconds=0x1) [0259.936] Sleep (dwMilliseconds=0x1) [0259.951] Sleep (dwMilliseconds=0x1) [0259.968] Sleep (dwMilliseconds=0x1) [0259.982] Sleep (dwMilliseconds=0x1) [0259.998] Sleep (dwMilliseconds=0x1) [0260.013] Sleep (dwMilliseconds=0x1) [0260.029] Sleep (dwMilliseconds=0x1) [0260.045] Sleep (dwMilliseconds=0x1) [0260.063] Sleep (dwMilliseconds=0x1) [0260.077] Sleep (dwMilliseconds=0x1) [0260.092] Sleep (dwMilliseconds=0x1) [0260.107] Sleep (dwMilliseconds=0x1) [0260.123] Sleep (dwMilliseconds=0x1) [0260.138] Sleep (dwMilliseconds=0x1) [0260.154] Sleep (dwMilliseconds=0x1) [0260.169] Sleep (dwMilliseconds=0x1) [0260.186] Sleep (dwMilliseconds=0x1) [0260.201] Sleep (dwMilliseconds=0x1) [0260.216] Sleep (dwMilliseconds=0x1) [0260.232] Sleep (dwMilliseconds=0x1) [0260.247] Sleep (dwMilliseconds=0x1) [0260.263] Sleep (dwMilliseconds=0x1) [0260.291] Sleep (dwMilliseconds=0x1) [0260.296] Sleep (dwMilliseconds=0x1) [0260.321] Sleep (dwMilliseconds=0x1) [0260.325] Sleep (dwMilliseconds=0x1) [0260.341] Sleep (dwMilliseconds=0x1) [0260.357] Sleep (dwMilliseconds=0x1) [0260.373] Sleep (dwMilliseconds=0x1) [0260.388] Sleep (dwMilliseconds=0x1) [0260.405] Sleep (dwMilliseconds=0x1) [0260.419] Sleep (dwMilliseconds=0x1) [0260.435] Sleep (dwMilliseconds=0x1) [0260.453] Sleep (dwMilliseconds=0x1) [0260.466] Sleep (dwMilliseconds=0x1) [0260.482] Sleep (dwMilliseconds=0x1) [0260.497] Sleep (dwMilliseconds=0x1) [0260.529] Sleep (dwMilliseconds=0x1) [0260.544] Sleep (dwMilliseconds=0x1) [0260.559] Sleep (dwMilliseconds=0x1) [0260.575] Sleep (dwMilliseconds=0x1) [0260.591] Sleep (dwMilliseconds=0x1) [0260.606] Sleep (dwMilliseconds=0x1) [0260.635] Sleep (dwMilliseconds=0x1) [0260.639] Sleep (dwMilliseconds=0x1) [0260.653] Sleep (dwMilliseconds=0x1) [0260.669] Sleep (dwMilliseconds=0x1) [0260.684] Sleep (dwMilliseconds=0x1) [0260.700] Sleep (dwMilliseconds=0x1) [0260.716] Sleep (dwMilliseconds=0x1) [0260.731] Sleep (dwMilliseconds=0x1) [0260.748] Sleep (dwMilliseconds=0x1) [0260.762] Sleep (dwMilliseconds=0x1) [0260.779] Sleep (dwMilliseconds=0x1) [0260.794] Sleep (dwMilliseconds=0x1) [0260.809] Sleep (dwMilliseconds=0x1) [0260.825] Sleep (dwMilliseconds=0x1) [0260.840] Sleep (dwMilliseconds=0x1) [0260.857] Sleep (dwMilliseconds=0x1) [0260.871] Sleep (dwMilliseconds=0x1) [0260.887] Sleep (dwMilliseconds=0x1) [0260.903] Sleep (dwMilliseconds=0x1) [0260.919] Sleep (dwMilliseconds=0x1) [0260.934] Sleep (dwMilliseconds=0x1) [0260.950] Sleep (dwMilliseconds=0x1) [0260.966] Sleep (dwMilliseconds=0x1) [0260.981] Sleep (dwMilliseconds=0x1) [0260.996] Sleep (dwMilliseconds=0x1) [0261.012] Sleep (dwMilliseconds=0x1) [0261.028] Sleep (dwMilliseconds=0x1) [0261.043] Sleep (dwMilliseconds=0x1) [0261.059] Sleep (dwMilliseconds=0x1) [0261.075] Sleep (dwMilliseconds=0x1) [0261.090] Sleep (dwMilliseconds=0x1) [0261.106] Sleep (dwMilliseconds=0x1) [0261.121] Sleep (dwMilliseconds=0x1) [0261.137] Sleep (dwMilliseconds=0x1) [0261.152] Sleep (dwMilliseconds=0x1) [0261.170] Sleep (dwMilliseconds=0x1) [0261.185] Sleep (dwMilliseconds=0x1) [0261.199] Sleep (dwMilliseconds=0x1) [0261.215] Sleep (dwMilliseconds=0x1) [0261.230] Sleep (dwMilliseconds=0x1) [0261.246] Sleep (dwMilliseconds=0x1) [0261.261] Sleep (dwMilliseconds=0x1) [0261.277] Sleep (dwMilliseconds=0x1) [0261.294] Sleep (dwMilliseconds=0x1) [0261.308] Sleep (dwMilliseconds=0x1) [0261.324] Sleep (dwMilliseconds=0x1) [0261.340] Sleep (dwMilliseconds=0x1) [0261.355] Sleep (dwMilliseconds=0x1) [0261.371] Sleep (dwMilliseconds=0x1) [0261.386] Sleep (dwMilliseconds=0x1) [0261.404] Sleep (dwMilliseconds=0x1) [0261.417] Sleep (dwMilliseconds=0x1) [0261.433] Sleep (dwMilliseconds=0x1) [0261.449] Sleep (dwMilliseconds=0x1) [0261.465] Sleep (dwMilliseconds=0x1) [0261.480] Sleep (dwMilliseconds=0x1) [0261.496] Sleep (dwMilliseconds=0x1) [0261.527] Sleep (dwMilliseconds=0x1) [0261.542] Sleep (dwMilliseconds=0x1) [0261.561] Sleep (dwMilliseconds=0x1) [0261.574] Sleep (dwMilliseconds=0x1) [0261.589] Sleep (dwMilliseconds=0x1) [0261.605] Sleep (dwMilliseconds=0x1) [0261.620] Sleep (dwMilliseconds=0x1) [0261.650] Sleep (dwMilliseconds=0x1) [0261.653] Sleep (dwMilliseconds=0x1) [0261.667] Sleep (dwMilliseconds=0x1) [0261.683] Sleep (dwMilliseconds=0x1) [0261.698] Sleep (dwMilliseconds=0x1) [0261.714] Sleep (dwMilliseconds=0x1) [0261.729] Sleep (dwMilliseconds=0x1) [0261.746] Sleep (dwMilliseconds=0x1) [0261.761] Sleep (dwMilliseconds=0x1) [0261.776] Sleep (dwMilliseconds=0x1) [0261.792] Sleep (dwMilliseconds=0x1) [0261.807] Sleep (dwMilliseconds=0x1) [0261.823] Sleep (dwMilliseconds=0x1) [0261.839] Sleep (dwMilliseconds=0x1) [0261.856] Sleep (dwMilliseconds=0x1) [0261.870] Sleep (dwMilliseconds=0x1) [0261.886] Sleep (dwMilliseconds=0x1) [0261.902] Sleep (dwMilliseconds=0x1) [0261.917] Sleep (dwMilliseconds=0x1) [0261.932] Sleep (dwMilliseconds=0x1) [0261.948] Sleep (dwMilliseconds=0x1) [0261.965] Sleep (dwMilliseconds=0x1) [0261.979] Sleep (dwMilliseconds=0x1) [0261.995] Sleep (dwMilliseconds=0x1) [0262.011] Sleep (dwMilliseconds=0x1) [0262.026] Sleep (dwMilliseconds=0x1) [0262.041] Sleep (dwMilliseconds=0x1) [0262.057] Sleep (dwMilliseconds=0x1) [0262.074] Sleep (dwMilliseconds=0x1) [0262.088] Sleep (dwMilliseconds=0x1) [0262.104] Sleep (dwMilliseconds=0x1) [0262.120] Sleep (dwMilliseconds=0x1) [0262.135] Sleep (dwMilliseconds=0x1) [0262.151] Sleep (dwMilliseconds=0x1) [0262.166] Sleep (dwMilliseconds=0x1) [0262.183] Sleep (dwMilliseconds=0x1) [0262.198] Sleep (dwMilliseconds=0x1) [0262.213] Sleep (dwMilliseconds=0x1) [0262.229] Sleep (dwMilliseconds=0x1) [0262.244] Sleep (dwMilliseconds=0x1) [0262.260] Sleep (dwMilliseconds=0x1) [0262.277] Sleep (dwMilliseconds=0x1) [0262.293] Sleep (dwMilliseconds=0x1) [0262.307] Sleep (dwMilliseconds=0x1) [0262.322] Sleep (dwMilliseconds=0x1) [0262.338] Sleep (dwMilliseconds=0x1) [0262.353] Sleep (dwMilliseconds=0x1) [0262.369] Sleep (dwMilliseconds=0x1) [0262.385] Sleep (dwMilliseconds=0x1) [0262.402] Sleep (dwMilliseconds=0x1) [0262.416] Sleep (dwMilliseconds=0x1) [0262.431] Sleep (dwMilliseconds=0x1) [0262.448] Sleep (dwMilliseconds=0x1) [0262.463] Sleep (dwMilliseconds=0x1) [0262.478] Sleep (dwMilliseconds=0x1) [0262.494] Sleep (dwMilliseconds=0x1) [0262.527] Sleep (dwMilliseconds=0x1) [0262.541] Sleep (dwMilliseconds=0x1) [0262.557] Sleep (dwMilliseconds=0x1) [0262.572] Sleep (dwMilliseconds=0x1) [0262.588] Sleep (dwMilliseconds=0x1) [0262.603] Sleep (dwMilliseconds=0x1) [0262.619] Sleep (dwMilliseconds=0x1) [0262.652] Sleep (dwMilliseconds=0x1) [0262.668] Sleep (dwMilliseconds=0x1) [0262.681] Sleep (dwMilliseconds=0x1) [0262.697] Sleep (dwMilliseconds=0x1) [0262.713] Sleep (dwMilliseconds=0x1) [0262.728] Sleep (dwMilliseconds=0x1) [0262.743] Sleep (dwMilliseconds=0x1) [0262.761] Sleep (dwMilliseconds=0x1) [0262.775] Sleep (dwMilliseconds=0x1) [0262.790] Sleep (dwMilliseconds=0x1) [0262.806] Sleep (dwMilliseconds=0x1) [0262.821] Sleep (dwMilliseconds=0x1) [0262.837] Sleep (dwMilliseconds=0x1) [0262.853] Sleep (dwMilliseconds=0x1) [0262.870] Sleep (dwMilliseconds=0x1) [0262.884] Sleep (dwMilliseconds=0x1) [0262.901] Sleep (dwMilliseconds=0x1) [0262.915] Sleep (dwMilliseconds=0x1) [0262.931] Sleep (dwMilliseconds=0x1) [0262.946] Sleep (dwMilliseconds=0x1) [0262.962] Sleep (dwMilliseconds=0x1) [0262.980] Sleep (dwMilliseconds=0x1) [0262.995] Sleep (dwMilliseconds=0x1) [0263.009] Sleep (dwMilliseconds=0x1) [0263.024] Sleep (dwMilliseconds=0x1) [0263.040] Sleep (dwMilliseconds=0x1) [0263.055] Sleep (dwMilliseconds=0x1) [0263.071] Sleep (dwMilliseconds=0x1) [0263.088] Sleep (dwMilliseconds=0x1) [0263.103] Sleep (dwMilliseconds=0x1) [0263.118] Sleep (dwMilliseconds=0x1) [0263.133] Sleep (dwMilliseconds=0x1) [0263.149] Sleep (dwMilliseconds=0x1) [0263.165] Sleep (dwMilliseconds=0x1) [0263.180] Sleep (dwMilliseconds=0x1) [0263.197] Sleep (dwMilliseconds=0x1) [0263.212] Sleep (dwMilliseconds=0x1) [0263.227] Sleep (dwMilliseconds=0x1) [0263.243] Sleep (dwMilliseconds=0x1) [0263.258] Sleep (dwMilliseconds=0x1) [0263.274] Sleep (dwMilliseconds=0x1) [0263.289] Sleep (dwMilliseconds=0x1) [0263.306] Sleep (dwMilliseconds=0x1) [0263.321] Sleep (dwMilliseconds=0x1) [0263.336] Sleep (dwMilliseconds=0x1) [0263.352] Sleep (dwMilliseconds=0x1) [0263.367] Sleep (dwMilliseconds=0x1) [0263.385] Sleep (dwMilliseconds=0x1) [0263.399] Sleep (dwMilliseconds=0x1) [0263.415] Sleep (dwMilliseconds=0x1) [0263.430] Sleep (dwMilliseconds=0x1) [0263.445] Sleep (dwMilliseconds=0x1) [0263.461] Sleep (dwMilliseconds=0x1) [0263.476] Sleep (dwMilliseconds=0x1) [0263.492] Sleep (dwMilliseconds=0x1) [0263.519] Sleep (dwMilliseconds=0x1) [0263.524] Sleep (dwMilliseconds=0x1) [0263.539] Sleep (dwMilliseconds=0x1) [0263.554] Sleep (dwMilliseconds=0x1) [0263.570] Sleep (dwMilliseconds=0x1) [0263.586] Sleep (dwMilliseconds=0x1) [0263.601] Sleep (dwMilliseconds=0x1) [0263.617] Sleep (dwMilliseconds=0x1) [0263.634] Sleep (dwMilliseconds=0x1) [0263.649] Sleep (dwMilliseconds=0x1) [0263.664] Sleep (dwMilliseconds=0x1) [0263.679] Sleep (dwMilliseconds=0x1) [0263.695] Sleep (dwMilliseconds=0x1) [0263.711] Sleep (dwMilliseconds=0x1) [0263.726] Sleep (dwMilliseconds=0x1) [0263.743] Sleep (dwMilliseconds=0x1) [0263.758] Sleep (dwMilliseconds=0x1) [0263.776] Sleep (dwMilliseconds=0x1) [0263.789] Sleep (dwMilliseconds=0x1) [0263.804] Sleep (dwMilliseconds=0x1) [0263.820] Sleep (dwMilliseconds=0x1) [0263.835] Sleep (dwMilliseconds=0x1) [0263.852] Sleep (dwMilliseconds=0x1) [0263.867] Sleep (dwMilliseconds=0x1) [0263.882] Sleep (dwMilliseconds=0x1) [0263.898] Sleep (dwMilliseconds=0x1) [0263.913] Sleep (dwMilliseconds=0x1) [0263.929] Sleep (dwMilliseconds=0x1) [0263.945] Sleep (dwMilliseconds=0x1) [0263.962] Sleep (dwMilliseconds=0x1) [0263.976] Sleep (dwMilliseconds=0x1) [0263.992] Sleep (dwMilliseconds=0x1) [0264.007] Sleep (dwMilliseconds=0x1) [0264.023] Sleep (dwMilliseconds=0x1) [0264.038] Sleep (dwMilliseconds=0x1) [0264.054] Sleep (dwMilliseconds=0x1) [0264.070] Sleep (dwMilliseconds=0x1) [0264.085] Sleep (dwMilliseconds=0x1) [0264.102] Sleep (dwMilliseconds=0x1) [0264.116] Sleep (dwMilliseconds=0x1) [0264.132] Sleep (dwMilliseconds=0x1) [0264.147] Sleep (dwMilliseconds=0x1) [0264.163] Sleep (dwMilliseconds=0x1) [0264.180] Sleep (dwMilliseconds=0x1) [0264.194] Sleep (dwMilliseconds=0x1) [0264.210] Sleep (dwMilliseconds=0x1) [0264.225] Sleep (dwMilliseconds=0x1) [0264.241] Sleep (dwMilliseconds=0x1) [0264.257] Sleep (dwMilliseconds=0x1) [0264.272] Sleep (dwMilliseconds=0x1) [0264.289] Sleep (dwMilliseconds=0x1) [0264.304] Sleep (dwMilliseconds=0x1) [0264.319] Sleep (dwMilliseconds=0x1) [0264.335] Sleep (dwMilliseconds=0x1) [0264.350] Sleep (dwMilliseconds=0x1) [0264.366] Sleep (dwMilliseconds=0x1) [0264.382] Sleep (dwMilliseconds=0x1) [0264.399] Sleep (dwMilliseconds=0x1) [0264.413] Sleep (dwMilliseconds=0x1) [0264.428] Sleep (dwMilliseconds=0x1) [0264.444] Sleep (dwMilliseconds=0x1) [0264.459] Sleep (dwMilliseconds=0x1) [0264.475] Sleep (dwMilliseconds=0x1) [0264.493] Sleep (dwMilliseconds=0x1) [0264.523] Sleep (dwMilliseconds=0x1) [0264.537] Sleep (dwMilliseconds=0x1) [0264.553] Sleep (dwMilliseconds=0x1) [0264.569] Sleep (dwMilliseconds=0x1) [0264.584] Sleep (dwMilliseconds=0x1) [0264.600] Sleep (dwMilliseconds=0x1) [0264.615] Sleep (dwMilliseconds=0x1) [0264.632] Sleep (dwMilliseconds=0x1) [0264.658] Sleep (dwMilliseconds=0x1) [0264.662] Sleep (dwMilliseconds=0x1) [0264.678] Sleep (dwMilliseconds=0x1) [0264.693] Sleep (dwMilliseconds=0x1) [0264.709] Sleep (dwMilliseconds=0x1) [0264.725] Sleep (dwMilliseconds=0x1) [0264.742] Sleep (dwMilliseconds=0x1) [0264.756] Sleep (dwMilliseconds=0x1) [0264.771] Sleep (dwMilliseconds=0x1) [0264.787] Sleep (dwMilliseconds=0x1) [0264.803] Sleep (dwMilliseconds=0x1) [0264.818] Sleep (dwMilliseconds=0x1) [0264.835] Sleep (dwMilliseconds=0x1) [0264.851] Sleep (dwMilliseconds=0x1) [0264.865] Sleep (dwMilliseconds=0x1) [0264.883] Sleep (dwMilliseconds=0x1) [0264.896] Sleep (dwMilliseconds=0x1) [0264.912] Sleep (dwMilliseconds=0x1) [0264.927] Sleep (dwMilliseconds=0x1) [0264.943] Sleep (dwMilliseconds=0x1) [0264.960] Sleep (dwMilliseconds=0x1) [0264.974] Sleep (dwMilliseconds=0x1) [0264.990] Sleep (dwMilliseconds=0x1) [0265.006] Sleep (dwMilliseconds=0x1) [0265.021] Sleep (dwMilliseconds=0x1) [0265.037] Sleep (dwMilliseconds=0x1) [0265.053] Sleep (dwMilliseconds=0x1) [0265.069] Sleep (dwMilliseconds=0x1) [0265.083] Sleep (dwMilliseconds=0x1) [0265.100] Sleep (dwMilliseconds=0x1) [0265.118] Sleep (dwMilliseconds=0x1) [0265.216] Sleep (dwMilliseconds=0x1) [0265.224] Sleep (dwMilliseconds=0x1) [0265.239] Sleep (dwMilliseconds=0x1) [0265.256] Sleep (dwMilliseconds=0x1) [0265.272] Sleep (dwMilliseconds=0x1) [0265.286] Sleep (dwMilliseconds=0x1) [0265.308] Sleep (dwMilliseconds=0x1) [0265.332] Sleep (dwMilliseconds=0x1) [0265.333] Sleep (dwMilliseconds=0x1) [0265.380] Sleep (dwMilliseconds=0x1) [0265.416] Sleep (dwMilliseconds=0x1) [0265.494] Sleep (dwMilliseconds=0x1) [0265.528] Sleep (dwMilliseconds=0x1) [0265.537] Sleep (dwMilliseconds=0x1) [0265.561] Sleep (dwMilliseconds=0x1) [0265.569] Sleep (dwMilliseconds=0x1) [0265.583] Sleep (dwMilliseconds=0x1) [0265.601] Sleep (dwMilliseconds=0x1) [0265.616] Sleep (dwMilliseconds=0x1) [0265.631] Sleep (dwMilliseconds=0x1) [0265.674] Sleep (dwMilliseconds=0x1) [0265.678] Sleep (dwMilliseconds=0x1) [0265.694] Sleep (dwMilliseconds=0x1) [0265.711] Sleep (dwMilliseconds=0x1) [0265.725] Sleep (dwMilliseconds=0x1) [0265.740] Sleep (dwMilliseconds=0x1) [0265.756] Sleep (dwMilliseconds=0x1) [0265.772] Sleep (dwMilliseconds=0x1) [0265.790] Sleep (dwMilliseconds=0x1) [0266.293] Sleep (dwMilliseconds=0x1) [0266.306] Sleep (dwMilliseconds=0x1) [0266.317] Sleep (dwMilliseconds=0x1) [0266.342] Sleep (dwMilliseconds=0x1) [0266.484] Sleep (dwMilliseconds=0x1) [0266.520] Sleep (dwMilliseconds=0x1) [0266.535] Sleep (dwMilliseconds=0x1) [0266.571] Sleep (dwMilliseconds=0x1) [0266.592] Sleep (dwMilliseconds=0x1) [0266.609] Sleep (dwMilliseconds=0x1) [0266.627] Sleep (dwMilliseconds=0x1) [0266.644] Sleep (dwMilliseconds=0x1) [0266.674] Sleep (dwMilliseconds=0x1) [0266.695] Sleep (dwMilliseconds=0x1) [0266.714] Sleep (dwMilliseconds=0x1) [0266.737] Sleep (dwMilliseconds=0x1) [0266.759] Sleep (dwMilliseconds=0x1) [0266.784] Sleep (dwMilliseconds=0x1) [0266.808] Sleep (dwMilliseconds=0x1) [0266.832] Sleep (dwMilliseconds=0x1) [0266.855] Sleep (dwMilliseconds=0x1) [0266.880] Sleep (dwMilliseconds=0x1) [0266.902] Sleep (dwMilliseconds=0x1) [0266.927] Sleep (dwMilliseconds=0x1) [0266.950] Sleep (dwMilliseconds=0x1) [0266.973] Sleep (dwMilliseconds=0x1) [0266.995] Sleep (dwMilliseconds=0x1) [0267.018] Sleep (dwMilliseconds=0x1) [0267.044] Sleep (dwMilliseconds=0x1) [0267.066] Sleep (dwMilliseconds=0x1) [0267.089] Sleep (dwMilliseconds=0x1) [0267.114] Sleep (dwMilliseconds=0x1) [0267.134] Sleep (dwMilliseconds=0x1) [0267.155] Sleep (dwMilliseconds=0x1) [0267.173] Sleep (dwMilliseconds=0x1) [0267.174] Sleep (dwMilliseconds=0x1) [0267.192] Sleep (dwMilliseconds=0x1) [0267.211] Sleep (dwMilliseconds=0x1) [0267.228] Sleep (dwMilliseconds=0x1) [0267.246] Sleep (dwMilliseconds=0x1) [0267.266] Sleep (dwMilliseconds=0x1) [0267.285] Sleep (dwMilliseconds=0x1) [0267.306] Sleep (dwMilliseconds=0x1) [0267.332] Sleep (dwMilliseconds=0x1) [0267.392] Sleep (dwMilliseconds=0x1) [0267.411] Sleep (dwMilliseconds=0x1) [0267.436] Sleep (dwMilliseconds=0x1) [0267.458] Sleep (dwMilliseconds=0x1) [0267.481] Sleep (dwMilliseconds=0x1) [0267.529] Sleep (dwMilliseconds=0x1) [0267.555] Sleep (dwMilliseconds=0x1) [0267.579] Sleep (dwMilliseconds=0x1) [0267.579] Sleep (dwMilliseconds=0x1) [0267.602] Sleep (dwMilliseconds=0x1) [0267.626] Sleep (dwMilliseconds=0x1) [0267.664] Sleep (dwMilliseconds=0x1) [0267.690] Sleep (dwMilliseconds=0x1) [0267.714] Sleep (dwMilliseconds=0x1) [0267.738] Sleep (dwMilliseconds=0x1) [0267.765] Sleep (dwMilliseconds=0x1) [0267.789] Sleep (dwMilliseconds=0x1) [0267.812] Sleep (dwMilliseconds=0x1) [0267.839] Sleep (dwMilliseconds=0x1) [0267.862] Sleep (dwMilliseconds=0x1) [0267.886] Sleep (dwMilliseconds=0x1) [0267.909] Sleep (dwMilliseconds=0x1) [0267.931] Sleep (dwMilliseconds=0x1) [0267.956] Sleep (dwMilliseconds=0x1) [0267.979] Sleep (dwMilliseconds=0x1) [0267.991] Sleep (dwMilliseconds=0x1) [0268.001] Sleep (dwMilliseconds=0x1) [0268.016] Sleep (dwMilliseconds=0x1) [0268.032] Sleep (dwMilliseconds=0x1) [0268.048] Sleep (dwMilliseconds=0x1) [0268.096] Sleep (dwMilliseconds=0x1) [0268.116] Sleep (dwMilliseconds=0x1) [0268.128] Sleep (dwMilliseconds=0x1) [0268.145] Sleep (dwMilliseconds=0x1) [0268.159] Sleep (dwMilliseconds=0x1) [0268.174] Sleep (dwMilliseconds=0x1) [0268.189] Sleep (dwMilliseconds=0x1) [0268.205] Sleep (dwMilliseconds=0x1) [0268.222] Sleep (dwMilliseconds=0x1) [0268.237] Sleep (dwMilliseconds=0x1) [0268.252] Sleep (dwMilliseconds=0x1) [0268.267] Sleep (dwMilliseconds=0x1) [0268.283] Sleep (dwMilliseconds=0x1) [0268.298] Sleep (dwMilliseconds=0x1) [0268.314] Sleep (dwMilliseconds=0x1) [0268.330] Sleep (dwMilliseconds=0x1) [0268.346] Sleep (dwMilliseconds=0x1) [0268.361] Sleep (dwMilliseconds=0x1) [0268.376] Sleep (dwMilliseconds=0x1) [0268.392] Sleep (dwMilliseconds=0x1) [0268.409] Sleep (dwMilliseconds=0x1) [0268.422] Sleep (dwMilliseconds=0x1) [0268.437] Sleep (dwMilliseconds=0x1) [0268.454] Sleep (dwMilliseconds=0x1) [0268.469] Sleep (dwMilliseconds=0x1) [0268.561] Sleep (dwMilliseconds=0x1) [0268.591] Sleep (dwMilliseconds=0x1) [0268.594] Sleep (dwMilliseconds=0x1) [0268.609] Sleep (dwMilliseconds=0x1) [0268.695] Sleep (dwMilliseconds=0x1) [0268.783] Sleep (dwMilliseconds=0x1) [0268.826] Sleep (dwMilliseconds=0x1) [0268.827] Sleep (dwMilliseconds=0x1) [0268.843] Sleep (dwMilliseconds=0x1) [0268.859] Sleep (dwMilliseconds=0x1) [0268.906] Sleep (dwMilliseconds=0x1) [0268.922] Sleep (dwMilliseconds=0x1) [0268.939] Sleep (dwMilliseconds=0x1) [0268.952] Sleep (dwMilliseconds=0x1) [0268.968] Sleep (dwMilliseconds=0x1) [0268.984] Sleep (dwMilliseconds=0x1) [0268.999] Sleep (dwMilliseconds=0x1) [0269.017] Sleep (dwMilliseconds=0x1) [0269.047] Sleep (dwMilliseconds=0x1) [0269.062] Sleep (dwMilliseconds=0x1) [0269.077] Sleep (dwMilliseconds=0x1) [0269.092] Sleep (dwMilliseconds=0x1) [0269.108] Sleep (dwMilliseconds=0x1) [0269.124] Sleep (dwMilliseconds=0x1) [0269.141] Sleep (dwMilliseconds=0x1) [0269.142] Sleep (dwMilliseconds=0x1) [0269.143] Sleep (dwMilliseconds=0x1) [0269.145] Sleep (dwMilliseconds=0x1) [0269.145] Sleep (dwMilliseconds=0x1) [0269.146] Sleep (dwMilliseconds=0x1) [0269.147] Sleep (dwMilliseconds=0x1) [0269.148] Sleep (dwMilliseconds=0x1) [0269.149] Sleep (dwMilliseconds=0x1) [0269.150] Sleep (dwMilliseconds=0x1) [0269.151] Sleep (dwMilliseconds=0x1) [0269.153] Sleep (dwMilliseconds=0x1) [0269.153] Sleep (dwMilliseconds=0x1) [0269.154] Sleep (dwMilliseconds=0x1) [0269.155] Sleep (dwMilliseconds=0x1) [0269.156] Sleep (dwMilliseconds=0x1) [0269.157] Sleep (dwMilliseconds=0x1) [0269.159] Sleep (dwMilliseconds=0x1) [0269.160] Sleep (dwMilliseconds=0x1) [0269.161] Sleep (dwMilliseconds=0x1) [0269.161] Sleep (dwMilliseconds=0x1) [0269.163] Sleep (dwMilliseconds=0x1) [0269.163] Sleep (dwMilliseconds=0x1) [0269.165] Sleep (dwMilliseconds=0x1) [0269.166] Sleep (dwMilliseconds=0x1) [0269.167] Sleep (dwMilliseconds=0x1) [0269.167] Sleep (dwMilliseconds=0x1) [0269.168] Sleep (dwMilliseconds=0x1) [0269.169] Sleep (dwMilliseconds=0x1) [0269.171] Sleep (dwMilliseconds=0x1) [0269.171] Sleep (dwMilliseconds=0x1) [0269.172] Sleep (dwMilliseconds=0x1) [0269.173] Sleep (dwMilliseconds=0x1) [0269.174] Sleep (dwMilliseconds=0x1) [0269.175] Sleep (dwMilliseconds=0x1) [0269.176] Sleep (dwMilliseconds=0x1) [0269.177] Sleep (dwMilliseconds=0x1) [0269.178] Sleep (dwMilliseconds=0x1) [0269.179] Sleep (dwMilliseconds=0x1) [0269.180] Sleep (dwMilliseconds=0x1) [0269.181] Sleep (dwMilliseconds=0x1) [0269.184] Sleep (dwMilliseconds=0x1) [0269.184] Sleep (dwMilliseconds=0x1) [0269.185] Sleep (dwMilliseconds=0x1) [0269.187] Sleep (dwMilliseconds=0x1) [0269.187] Sleep (dwMilliseconds=0x1) [0269.188] Sleep (dwMilliseconds=0x1) [0269.189] Sleep (dwMilliseconds=0x1) [0269.191] Sleep (dwMilliseconds=0x1) [0269.191] Sleep (dwMilliseconds=0x1) [0269.192] Sleep (dwMilliseconds=0x1) [0269.193] Sleep (dwMilliseconds=0x1) [0269.194] Sleep (dwMilliseconds=0x1) [0269.195] Sleep (dwMilliseconds=0x1) [0269.196] Sleep (dwMilliseconds=0x1) [0269.197] Sleep (dwMilliseconds=0x1) [0269.198] Sleep (dwMilliseconds=0x1) [0269.199] Sleep (dwMilliseconds=0x1) [0269.201] Sleep (dwMilliseconds=0x1) [0269.201] Sleep (dwMilliseconds=0x1) [0269.202] Sleep (dwMilliseconds=0x1) [0269.203] Sleep (dwMilliseconds=0x1) [0269.204] Sleep (dwMilliseconds=0x1) [0269.205] Sleep (dwMilliseconds=0x1) [0269.206] Sleep (dwMilliseconds=0x1) [0269.208] Sleep (dwMilliseconds=0x1) [0269.208] Sleep (dwMilliseconds=0x1) [0269.209] Sleep (dwMilliseconds=0x1) [0269.210] Sleep (dwMilliseconds=0x1) [0269.211] Sleep (dwMilliseconds=0x1) [0269.212] Sleep (dwMilliseconds=0x1) [0269.213] Sleep (dwMilliseconds=0x1) [0269.214] Sleep (dwMilliseconds=0x1) [0269.215] Sleep (dwMilliseconds=0x1) [0269.216] Sleep (dwMilliseconds=0x1) [0269.217] Sleep (dwMilliseconds=0x1) [0269.218] Sleep (dwMilliseconds=0x1) [0269.219] Sleep (dwMilliseconds=0x1) [0269.220] Sleep (dwMilliseconds=0x1) [0269.221] Sleep (dwMilliseconds=0x1) [0269.222] Sleep (dwMilliseconds=0x1) [0269.223] Sleep (dwMilliseconds=0x1) [0269.224] Sleep (dwMilliseconds=0x1) [0269.225] Sleep (dwMilliseconds=0x1) [0269.228] Sleep (dwMilliseconds=0x1) [0269.229] Sleep (dwMilliseconds=0x1) [0269.230] Sleep (dwMilliseconds=0x1) [0269.231] Sleep (dwMilliseconds=0x1) [0269.232] Sleep (dwMilliseconds=0x1) [0269.233] Sleep (dwMilliseconds=0x1) [0269.234] Sleep (dwMilliseconds=0x1) [0269.235] Sleep (dwMilliseconds=0x1) [0269.236] Sleep (dwMilliseconds=0x1) [0269.237] Sleep (dwMilliseconds=0x1) [0269.238] Sleep (dwMilliseconds=0x1) [0269.239] Sleep (dwMilliseconds=0x1) [0269.240] Sleep (dwMilliseconds=0x1) [0269.241] Sleep (dwMilliseconds=0x1) [0269.242] Sleep (dwMilliseconds=0x1) [0269.243] Sleep (dwMilliseconds=0x1) [0269.244] Sleep (dwMilliseconds=0x1) [0269.245] Sleep (dwMilliseconds=0x1) [0269.246] Sleep (dwMilliseconds=0x1) [0269.248] Sleep (dwMilliseconds=0x1) [0269.248] Sleep (dwMilliseconds=0x1) [0269.249] Sleep (dwMilliseconds=0x1) [0269.250] Sleep (dwMilliseconds=0x1) [0269.251] Sleep (dwMilliseconds=0x1) [0269.276] Sleep (dwMilliseconds=0x1) [0269.276] Sleep (dwMilliseconds=0x1) [0269.278] Sleep (dwMilliseconds=0x1) [0269.278] Sleep (dwMilliseconds=0x1) [0269.279] Sleep (dwMilliseconds=0x1) [0269.280] Sleep (dwMilliseconds=0x1) [0269.281] Sleep (dwMilliseconds=0x1) [0269.282] Sleep (dwMilliseconds=0x1) [0269.283] Sleep (dwMilliseconds=0x1) [0269.285] Sleep (dwMilliseconds=0x1) [0269.285] Sleep (dwMilliseconds=0x1) [0269.286] Sleep (dwMilliseconds=0x1) [0269.287] Sleep (dwMilliseconds=0x1) [0269.288] Sleep (dwMilliseconds=0x1) [0269.289] Sleep (dwMilliseconds=0x1) [0269.290] Sleep (dwMilliseconds=0x1) [0269.291] Sleep (dwMilliseconds=0x1) [0269.292] Sleep (dwMilliseconds=0x1) [0269.293] Sleep (dwMilliseconds=0x1) [0269.294] Sleep (dwMilliseconds=0x1) [0269.295] Sleep (dwMilliseconds=0x1) [0269.296] Sleep (dwMilliseconds=0x1) [0269.297] Sleep (dwMilliseconds=0x1) [0269.298] Sleep (dwMilliseconds=0x1) [0269.299] Sleep (dwMilliseconds=0x1) [0269.300] Sleep (dwMilliseconds=0x1) [0269.301] Sleep (dwMilliseconds=0x1) [0269.302] Sleep (dwMilliseconds=0x1) [0269.303] Sleep (dwMilliseconds=0x1) [0269.304] Sleep (dwMilliseconds=0x1) [0269.305] Sleep (dwMilliseconds=0x1) [0269.306] Sleep (dwMilliseconds=0x1) [0269.307] Sleep (dwMilliseconds=0x1) [0269.308] Sleep (dwMilliseconds=0x1) [0269.309] Sleep (dwMilliseconds=0x1) [0269.310] Sleep (dwMilliseconds=0x1) [0269.311] Sleep (dwMilliseconds=0x1) [0269.312] Sleep (dwMilliseconds=0x1) [0269.313] Sleep (dwMilliseconds=0x1) [0269.314] Sleep (dwMilliseconds=0x1) [0269.315] Sleep (dwMilliseconds=0x1) [0269.316] Sleep (dwMilliseconds=0x1) [0269.319] Sleep (dwMilliseconds=0x1) [0269.319] Sleep (dwMilliseconds=0x1) [0269.320] Sleep (dwMilliseconds=0x1) [0269.321] Sleep (dwMilliseconds=0x1) [0269.322] Sleep (dwMilliseconds=0x1) [0269.323] Sleep (dwMilliseconds=0x1) [0269.324] Sleep (dwMilliseconds=0x1) [0269.325] Sleep (dwMilliseconds=0x1) [0269.326] Sleep (dwMilliseconds=0x1) [0269.327] Sleep (dwMilliseconds=0x1) [0269.328] Sleep (dwMilliseconds=0x1) [0269.329] Sleep (dwMilliseconds=0x1) [0269.330] Sleep (dwMilliseconds=0x1) [0269.331] Sleep (dwMilliseconds=0x1) [0269.332] Sleep (dwMilliseconds=0x1) [0269.333] Sleep (dwMilliseconds=0x1) [0269.335] Sleep (dwMilliseconds=0x1) [0269.335] Sleep (dwMilliseconds=0x1) [0269.336] Sleep (dwMilliseconds=0x1) [0269.337] Sleep (dwMilliseconds=0x1) [0269.338] Sleep (dwMilliseconds=0x1) [0269.339] Sleep (dwMilliseconds=0x1) [0269.340] Sleep (dwMilliseconds=0x1) [0269.341] Sleep (dwMilliseconds=0x1) [0269.343] Sleep (dwMilliseconds=0x1) [0269.343] Sleep (dwMilliseconds=0x1) [0269.344] Sleep (dwMilliseconds=0x1) [0269.345] Sleep (dwMilliseconds=0x1) [0269.346] Sleep (dwMilliseconds=0x1) [0269.347] Sleep (dwMilliseconds=0x1) [0269.353] Sleep (dwMilliseconds=0x1) [0269.355] Sleep (dwMilliseconds=0x1) [0269.355] Sleep (dwMilliseconds=0x1) [0269.356] Sleep (dwMilliseconds=0x1) [0269.357] Sleep (dwMilliseconds=0x1) [0269.358] Sleep (dwMilliseconds=0x1) [0269.359] Sleep (dwMilliseconds=0x1) [0269.360] Sleep (dwMilliseconds=0x1) [0269.361] Sleep (dwMilliseconds=0x1) [0269.363] Sleep (dwMilliseconds=0x1) [0269.363] Sleep (dwMilliseconds=0x1) [0269.366] Sleep (dwMilliseconds=0x1) [0269.366] Sleep (dwMilliseconds=0x1) [0269.369] Sleep (dwMilliseconds=0x1) [0269.369] Sleep (dwMilliseconds=0x1) [0269.370] Sleep (dwMilliseconds=0x1) [0269.371] Sleep (dwMilliseconds=0x1) [0269.372] Sleep (dwMilliseconds=0x1) [0269.373] Sleep (dwMilliseconds=0x1) [0269.374] Sleep (dwMilliseconds=0x1) [0269.375] Sleep (dwMilliseconds=0x1) [0269.376] Sleep (dwMilliseconds=0x1) [0269.377] Sleep (dwMilliseconds=0x1) [0269.378] Sleep (dwMilliseconds=0x1) [0269.379] Sleep (dwMilliseconds=0x1) [0269.380] Sleep (dwMilliseconds=0x1) [0269.381] Sleep (dwMilliseconds=0x1) [0269.383] Sleep (dwMilliseconds=0x1) [0269.383] Sleep (dwMilliseconds=0x1) [0269.384] Sleep (dwMilliseconds=0x1) [0269.385] Sleep (dwMilliseconds=0x1) [0269.386] Sleep (dwMilliseconds=0x1) [0269.387] Sleep (dwMilliseconds=0x1) [0269.388] Sleep (dwMilliseconds=0x1) [0269.389] Sleep (dwMilliseconds=0x1) [0269.390] Sleep (dwMilliseconds=0x1) [0269.391] Sleep (dwMilliseconds=0x1) [0269.393] Sleep (dwMilliseconds=0x1) [0269.393] Sleep (dwMilliseconds=0x1) [0269.394] Sleep (dwMilliseconds=0x1) [0269.395] Sleep (dwMilliseconds=0x1) [0269.396] Sleep (dwMilliseconds=0x1) [0269.397] Sleep (dwMilliseconds=0x1) [0269.398] Sleep (dwMilliseconds=0x1) [0269.399] Sleep (dwMilliseconds=0x1) [0269.400] Sleep (dwMilliseconds=0x1) [0269.401] Sleep (dwMilliseconds=0x1) [0269.403] Sleep (dwMilliseconds=0x1) [0269.403] Sleep (dwMilliseconds=0x1) [0269.404] Sleep (dwMilliseconds=0x1) Thread: id = 122 os_tid = 0xffc [0120.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e57828 [0120.683] wcscpy (in: _Dest=0x3e57828, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.683] wcscat (in: _Dest=0x3e57828, _Source="*" | out: _Dest="C:\\*") returned="C:\\*" [0120.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0120.683] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbbd37a6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3dd0090 [0120.684] wcscmp (_String1="$Recycle.Bin", _String2=".") returned -1 [0120.684] wcscmp (_String1="$Recycle.Bin", _String2="..") returned -1 [0120.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3cf0 [0120.684] wcscpy (in: _Dest=0x3db3cf0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.684] wcscat (in: _Dest=0x3db3cf0, _Source="$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0120.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db3cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0120.685] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdb0de4, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x5cdb0de4, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x54e43b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="autoexec.bat", cAlternateFileName="")) returned 1 [0120.685] wcscmp (_String1="autoexec.bat", _String2=".") returned 1 [0120.685] wcscmp (_String1="autoexec.bat", _String2="..") returned 1 [0120.685] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x5524eae0, ftCreationTime.dwHighDateTime=0x1d2da3e, ftLastAccessTime.dwLowDateTime=0xe8c441c0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xe8c441c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0120.685] wcscmp (_String1="Boot", _String2=".") returned 1 [0120.685] wcscmp (_String1="Boot", _String2="..") returned 1 [0120.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb7e58 [0120.686] wcscpy (in: _Dest=0x3eb7e58, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.686] wcscat (in: _Dest=0x3eb7e58, _Source="Boot" | out: _Dest="C:\\Boot") returned="C:\\Boot" [0120.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e58) returned 1 [0120.686] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x553cb8a0, ftCreationTime.dwHighDateTime=0x1d2da3e, ftLastAccessTime.dwLowDateTime=0xe8c441c0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xc5bd5400, ftLastWriteTime.dwHighDateTime=0x1cb887d, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0120.686] wcscmp (_String1="bootmgr", _String2=".") returned 1 [0120.686] wcscmp (_String1="bootmgr", _String2="..") returned 1 [0120.686] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x58b95c40, ftCreationTime.dwHighDateTime=0x1d2da3e, ftLastAccessTime.dwLowDateTime=0x58b95c40, ftLastAccessTime.dwHighDateTime=0x1d2da3e, ftLastWriteTime.dwLowDateTime=0x58b95c40, ftLastWriteTime.dwHighDateTime=0x1d2da3e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0120.686] wcscmp (_String1="BOOTSECT.BAK", _String2=".") returned 1 [0120.686] wcscmp (_String1="BOOTSECT.BAK", _String2="..") returned 1 [0120.686] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdd6f43, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x5cdd6f43, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x54e43b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.sys", cAlternateFileName="")) returned 1 [0120.686] wcscmp (_String1="config.sys", _String2=".") returned 1 [0120.686] wcscmp (_String1="config.sys", _String2="..") returned 1 [0120.686] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1765f29d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1765f29d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1765f29d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0120.686] wcscmp (_String1="Documents and Settings", _String2=".") returned 1 [0120.686] wcscmp (_String1="Documents and Settings", _String2="..") returned 1 [0120.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfd50 [0120.687] wcscpy (in: _Dest=0x3dcfd50, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.687] wcscat (in: _Dest=0x3dcfd50, _Source="Documents and Settings" | out: _Dest="C:\\Documents and Settings") returned="C:\\Documents and Settings" [0120.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0 [0120.688] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9e132e40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0x9e132e40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0x631e0680, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0120.688] wcscmp (_String1="hiberfil.sys", _String2=".") returned 1 [0120.688] wcscmp (_String1="hiberfil.sys", _String2="..") returned 1 [0120.688] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0x2f8a2590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x2f8a2590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f8a2590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0120.688] wcscmp (_String1="MSOCache", _String2=".") returned 1 [0120.688] wcscmp (_String1="MSOCache", _String2="..") returned 1 [0120.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.688] wcscpy (in: _Dest=0x3dc9d60, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.688] wcscat (in: _Dest=0x3dc9d60, _Source="MSOCache" | out: _Dest="C:\\MSOCache") returned="C:\\MSOCache" [0120.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.688] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9e1a5260, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0x9e1a5260, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0x63500360, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0120.689] wcscmp (_String1="pagefile.sys", _String2=".") returned 1 [0120.689] wcscmp (_String1="pagefile.sys", _String2="..") returned 1 [0120.689] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a933d4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9a933d4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9a933d4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0120.689] wcscmp (_String1="PerfLogs", _String2=".") returned 1 [0120.689] wcscmp (_String1="PerfLogs", _String2="..") returned 1 [0120.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0120.689] wcscpy (in: _Dest=0x3dc9d60, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.689] wcscat (in: _Dest=0x3dc9d60, _Source="PerfLogs" | out: _Dest="C:\\PerfLogs") returned="C:\\PerfLogs" [0120.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0120.689] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x96009360, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x96009360, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0120.689] wcscmp (_String1="Program Files", _String2=".") returned 1 [0120.689] wcscmp (_String1="Program Files", _String2="..") returned 1 [0120.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db37b0 [0120.689] wcscpy (in: _Dest=0x3db37b0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.689] wcscat (in: _Dest=0x3db37b0, _Source="Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db37b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0120.690] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~2")) returned 1 [0120.691] wcscmp (_String1="ProgramData", _String2=".") returned 1 [0120.691] wcscmp (_String1="ProgramData", _String2="..") returned 1 [0120.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0120.691] wcscpy (in: _Dest=0x3dc9d60, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.691] wcscat (in: _Dest=0x3dc9d60, _Source="ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dc9d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0120.692] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8396470, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8408890, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8408890, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0120.692] wcscmp (_String1="Recovery", _String2=".") returned 1 [0120.692] wcscmp (_String1="Recovery", _String2="..") returned 1 [0120.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcab98 [0120.692] wcscpy (in: _Dest=0x3dcab98, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.692] wcscat (in: _Dest=0x3dcab98, _Source="Recovery" | out: _Dest="C:\\Recovery") returned="C:\\Recovery" [0120.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcab98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0120.694] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9e0c0a20, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0x98bf23f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98bf23f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0120.694] wcscmp (_String1="System Volume Information", _String2=".") returned 1 [0120.694] wcscmp (_String1="System Volume Information", _String2="..") returned 1 [0120.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e48cc0 [0120.694] wcscpy (in: _Dest=0x3e48cc0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.694] wcscat (in: _Dest=0x3e48cc0, _Source="System Volume Information" | out: _Dest="C:\\System Volume Information") returned="C:\\System Volume Information" [0120.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48cc0) returned 1 [0120.694] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8dda350, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8dda350, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0120.694] wcscmp (_String1="Users", _String2=".") returned 1 [0120.694] wcscmp (_String1="Users", _String2="..") returned 1 [0120.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb7ed8 [0120.694] wcscpy (in: _Dest=0x3eb7ed8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.694] wcscat (in: _Dest=0x3eb7ed8, _Source="Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0120.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb7ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0120.696] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0120.696] wcscmp (_String1="Windows", _String2=".") returned 1 [0120.696] wcscmp (_String1="Windows", _String2="..") returned 1 [0120.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb7f18 [0120.696] wcscpy (in: _Dest=0x3eb7f18, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\" [0120.696] wcscat (in: _Dest=0x3eb7f18, _Source="Windows" | out: _Dest="C:\\Windows") returned="C:\\Windows" [0120.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7f18) returned 1 [0120.696] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x78c711c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x78c711c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0120.696] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0120.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0120.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e57828) returned 1 [0120.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309fd68) returned 1 Thread: id = 125 os_tid = 0x81c [0120.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3180 [0120.729] wcscpy (in: _Dest=0x3db3180, _Source="C:\\$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0120.729] wcscat (in: _Dest=0x3db3180, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\") returned="C:\\$Recycle.Bin\\" [0120.729] wcscat (in: _Dest=0x3db3180, _Source="*" | out: _Dest="C:\\$Recycle.Bin\\*") returned="C:\\$Recycle.Bin\\*" [0120.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0120.729] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbbd37a6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0120.730] wcscmp (_String1=".", _String2=".") returned 0 [0120.730] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdbbd37a6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.730] wcscmp (_String1="..", _String2=".") returned 1 [0120.730] wcscmp (_String1="..", _String2="..") returned 0 [0120.730] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3785418085-2572485238-895829336-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0120.730] wcscmp (_String1="S-1-5-21-3785418085-2572485238-895829336-1000", _String2=".") returned 1 [0120.730] wcscmp (_String1="S-1-5-21-3785418085-2572485238-895829336-1000", _String2="..") returned 1 [0120.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ced8 [0120.730] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin" [0120.730] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\") returned="C:\\$Recycle.Bin\\" [0120.730] wcscat (in: _Dest=0x3e1ced8, _Source="S-1-5-21-3785418085-2572485238-895829336-1000" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000" [0120.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0120.732] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3785418085-2572485238-895829336-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0120.732] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0120.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0120.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3180) returned 1 [0120.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 Thread: id = 126 os_tid = 0x82c [0120.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dd0090 [0120.734] wcscpy (in: _Dest=0x3dd0090, _Source="C:\\Documents and Settings" | out: _Dest="C:\\Documents and Settings") returned="C:\\Documents and Settings" [0120.734] wcscat (in: _Dest=0x3dd0090, _Source="\\" | out: _Dest="C:\\Documents and Settings\\") returned="C:\\Documents and Settings\\" [0120.734] wcscat (in: _Dest=0x3dd0090, _Source="*" | out: _Dest="C:\\Documents and Settings\\*") returned="C:\\Documents and Settings\\*" [0120.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0120.734] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0120.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0120.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfd50) returned 1 Thread: id = 127 os_tid = 0x83c [0120.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0120.739] wcscpy (in: _Dest=0x3db3cf0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.739] wcscat (in: _Dest=0x3db3cf0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.739] wcscat (in: _Dest=0x3db3cf0, _Source="*" | out: _Dest="C:\\Program Files\\*") returned="C:\\Program Files\\*" [0120.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0120.739] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x96009360, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x96009360, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.739] wcscmp (_String1=".", _String2=".") returned 0 [0120.739] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x96009360, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x96009360, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.740] wcscmp (_String1="..", _String2=".") returned 1 [0120.740] wcscmp (_String1="..", _String2="..") returned 0 [0120.740] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x90d9d9a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d9d9a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0120.740] wcscmp (_String1="Adobe", _String2=".") returned 1 [0120.740] wcscmp (_String1="Adobe", _String2="..") returned 1 [0120.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e15f68 [0120.740] wcscpy (in: _Dest=0x3e15f68, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.740] wcscat (in: _Dest=0x3e15f68, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.740] wcscat (in: _Dest=0x3e15f68, _Source="Adobe" | out: _Dest="C:\\Program Files\\Adobe") returned="C:\\Program Files\\Adobe" [0120.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e15f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0120.741] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90e35f20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90e35f20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0120.741] wcscmp (_String1="Common Files", _String2=".") returned 1 [0120.742] wcscmp (_String1="Common Files", _String2="..") returned 1 [0120.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e48cc0 [0120.742] wcscpy (in: _Dest=0x3e48cc0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.742] wcscat (in: _Dest=0x3e48cc0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.742] wcscat (in: _Dest=0x3e48cc0, _Source="Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0120.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e48cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4 [0120.743] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b61335c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b61335c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.743] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0120.743] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0120.743] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90e35f20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90e35f20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1 [0120.743] wcscmp (_String1="DVD Maker", _String2=".") returned 1 [0120.743] wcscmp (_String1="DVD Maker", _String2="..") returned 1 [0120.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.743] wcscpy (in: _Dest=0x3dd0090, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.743] wcscat (in: _Dest=0x3dd0090, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.743] wcscat (in: _Dest=0x3dd0090, _Source="DVD Maker" | out: _Dest="C:\\Program Files\\DVD Maker") returned="C:\\Program Files\\DVD Maker" [0120.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.743] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffde9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x90d9d9a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d9d9a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0120.743] wcscmp (_String1="Google", _String2=".") returned 1 [0120.743] wcscmp (_String1="Google", _String2="..") returned 1 [0120.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e160b8 [0120.744] wcscpy (in: _Dest=0x3e160b8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.744] wcscat (in: _Dest=0x3e160b8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.744] wcscat (in: _Dest=0x3e160b8, _Source="Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0120.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e160b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0120.745] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x91a8f140, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x91a8f140, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0120.745] wcscmp (_String1="Internet Explorer", _String2=".") returned 1 [0120.745] wcscmp (_String1="Internet Explorer", _String2="..") returned 1 [0120.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6928 [0120.745] wcscpy (in: _Dest=0x3de6928, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.745] wcscat (in: _Dest=0x3de6928, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.745] wcscat (in: _Dest=0x3de6928, _Source="Internet Explorer" | out: _Dest="C:\\Program Files\\Internet Explorer") returned="C:\\Program Files\\Internet Explorer" [0120.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6928) returned 1 [0120.745] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x66f0ab20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x66f0ab20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0120.745] wcscmp (_String1="Java", _String2=".") returned 1 [0120.745] wcscmp (_String1="Java", _String2="..") returned 1 [0120.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e15ef8 [0120.745] wcscpy (in: _Dest=0x3e15ef8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.745] wcscat (in: _Dest=0x3e15ef8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.745] wcscat (in: _Dest=0x3e15ef8, _Source="Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java" [0120.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e15ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0120.747] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d516e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d516e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0120.747] wcscmp (_String1="Microsoft Analysis Services", _String2=".") returned 1 [0120.747] wcscmp (_String1="Microsoft Analysis Services", _String2="..") returned 1 [0120.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf2d0 [0120.747] wcscpy (in: _Dest=0x3edf2d0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.747] wcscat (in: _Dest=0x3edf2d0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.747] wcscat (in: _Dest=0x3edf2d0, _Source="Microsoft Analysis Services" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services" [0120.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0120.748] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90ef4600, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ef4600, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0120.748] wcscmp (_String1="Microsoft Office", _String2=".") returned 1 [0120.748] wcscmp (_String1="Microsoft Office", _String2="..") returned 1 [0120.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6928 [0120.748] wcscpy (in: _Dest=0x3de6928, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.748] wcscat (in: _Dest=0x3de6928, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.748] wcscat (in: _Dest=0x3de6928, _Source="Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0120.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c [0120.750] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fa929a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8fa929a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~4")) returned 1 [0120.750] wcscmp (_String1="Microsoft SQL Server Compact Edition", _String2=".") returned 1 [0120.750] wcscmp (_String1="Microsoft SQL Server Compact Edition", _String2="..") returned 1 [0120.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3bae0 [0120.750] wcscpy (in: _Dest=0x3e3bae0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.750] wcscat (in: _Dest=0x3e3bae0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.750] wcscat (in: _Dest=0x3e3bae0, _Source="Microsoft SQL Server Compact Edition" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition" [0120.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3bae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0120.751] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90ece4a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ece4a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MIA29A~1")) returned 1 [0120.751] wcscmp (_String1="Microsoft Sync Framework", _String2=".") returned 1 [0120.751] wcscmp (_String1="Microsoft Sync Framework", _String2="..") returned 1 [0120.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1328 [0120.751] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.751] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.751] wcscat (in: _Dest=0x2fe1328, _Source="Microsoft Sync Framework" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework" [0120.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0120.753] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d516e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d516e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1 [0120.753] wcscmp (_String1="Microsoft Synchronization Services", _String2=".") returned 1 [0120.753] wcscmp (_String1="Microsoft Synchronization Services", _String2="..") returned 1 [0120.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69ad8 [0120.753] wcscpy (in: _Dest=0x3e69ad8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.753] wcscat (in: _Dest=0x3e69ad8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.753] wcscat (in: _Dest=0x3e69ad8, _Source="Microsoft Synchronization Services" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services" [0120.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0120.754] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="MICROS~3")) returned 1 [0120.754] wcscmp (_String1="Microsoft Visual Studio 8", _String2=".") returned 1 [0120.754] wcscmp (_String1="Microsoft Visual Studio 8", _String2="..") returned 1 [0120.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe5e88 [0120.754] wcscpy (in: _Dest=0x2fe5e88, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.754] wcscat (in: _Dest=0x2fe5e88, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.754] wcscat (in: _Dest=0x2fe5e88, _Source="Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0120.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0120.756] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90ef4600, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ef4600, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0120.756] wcscmp (_String1="Microsoft.NET", _String2=".") returned 1 [0120.756] wcscmp (_String1="Microsoft.NET", _String2="..") returned 1 [0120.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e48be8 [0120.756] wcscpy (in: _Dest=0x3e48be8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.756] wcscat (in: _Dest=0x3e48be8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.756] wcscat (in: _Dest=0x3e48be8, _Source="Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0120.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e48be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0120.757] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7450cbf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x8fa20580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8fa20580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0120.757] wcscmp (_String1="Mozilla Firefox", _String2=".") returned 1 [0120.757] wcscmp (_String1="Mozilla Firefox", _String2="..") returned 1 [0120.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6068 [0120.757] wcscpy (in: _Dest=0x3de6068, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.757] wcscat (in: _Dest=0x3de6068, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.757] wcscat (in: _Dest=0x3de6068, _Source="Mozilla Firefox" | out: _Dest="C:\\Program Files\\Mozilla Firefox") returned="C:\\Program Files\\Mozilla Firefox" [0120.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 [0120.757] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74a8ded0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x90dc3b00, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90dc3b00, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1 [0120.758] wcscmp (_String1="Mozilla Maintenance Service", _String2=".") returned 1 [0120.758] wcscmp (_String1="Mozilla Maintenance Service", _String2="..") returned 1 [0120.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf268 [0120.758] wcscpy (in: _Dest=0x3edf268, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.758] wcscat (in: _Dest=0x3edf268, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.758] wcscat (in: _Dest=0x3edf268, _Source="Mozilla Maintenance Service" | out: _Dest="C:\\Program Files\\Mozilla Maintenance Service") returned="C:\\Program Files\\Mozilla Maintenance Service" [0120.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf268) returned 1 [0120.758] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90ea8340, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ea8340, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0120.758] wcscmp (_String1="MSBuild", _String2=".") returned 1 [0120.758] wcscmp (_String1="MSBuild", _String2="..") returned 1 [0120.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dd0090 [0120.758] wcscpy (in: _Dest=0x3dd0090, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.758] wcscat (in: _Dest=0x3dd0090, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.758] wcscat (in: _Dest=0x3dd0090, _Source="MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0120.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dd0090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0120.759] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90d2b580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d2b580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0120.759] wcscmp (_String1="Reference Assemblies", _String2=".") returned 1 [0120.759] wcscmp (_String1="Reference Assemblies", _String2="..") returned 1 [0120.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3dba2c8 [0120.759] wcscpy (in: _Dest=0x3dba2c8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.759] wcscat (in: _Dest=0x3dba2c8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.759] wcscat (in: _Dest=0x3dba2c8, _Source="Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0120.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dba2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0120.761] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x48a8eee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8fa20580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8fa20580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0120.761] wcscmp (_String1="Uninstall Information", _String2=".") returned 1 [0120.761] wcscmp (_String1="Uninstall Information", _String2="..") returned 1 [0120.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3db9be8 [0120.761] wcscpy (in: _Dest=0x3db9be8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.761] wcscat (in: _Dest=0x3db9be8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.761] wcscat (in: _Dest=0x3db9be8, _Source="Uninstall Information" | out: _Dest="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information" [0120.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db9be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0120.762] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90e5c080, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90e5c080, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0120.762] wcscmp (_String1="Windows Defender", _String2=".") returned 1 [0120.762] wcscmp (_String1="Windows Defender", _String2="..") returned 1 [0120.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6068 [0120.762] wcscpy (in: _Dest=0x3de6068, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.763] wcscat (in: _Dest=0x3de6068, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.763] wcscat (in: _Dest=0x3de6068, _Source="Windows Defender" | out: _Dest="C:\\Program Files\\Windows Defender") returned="C:\\Program Files\\Windows Defender" [0120.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 [0120.763] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ab4e22, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x90ef4600, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ef4600, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1 [0120.763] wcscmp (_String1="Windows Journal", _String2=".") returned 1 [0120.763] wcscmp (_String1="Windows Journal", _String2="..") returned 1 [0120.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6068 [0120.763] wcscpy (in: _Dest=0x3de6068, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.763] wcscat (in: _Dest=0x3de6068, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.763] wcscat (in: _Dest=0x3de6068, _Source="Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0120.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0120.764] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8fa466e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8fa466e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0120.764] wcscmp (_String1="Windows Mail", _String2=".") returned 1 [0120.764] wcscmp (_String1="Windows Mail", _String2="..") returned 1 [0120.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e48c30 [0120.764] wcscpy (in: _Dest=0x3e48c30, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.765] wcscat (in: _Dest=0x3e48c30, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.765] wcscat (in: _Dest=0x3e48c30, _Source="Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0120.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e48c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0120.766] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90ece4a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ece4a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0120.766] wcscmp (_String1="Windows Media Player", _String2=".") returned 1 [0120.766] wcscmp (_String1="Windows Media Player", _String2="..") returned 1 [0120.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3dba480 [0120.766] wcscpy (in: _Dest=0x3dba480, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.766] wcscat (in: _Dest=0x3dba480, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.766] wcscat (in: _Dest=0x3dba480, _Source="Windows Media Player" | out: _Dest="C:\\Program Files\\Windows Media Player") returned="C:\\Program Files\\Windows Media Player" [0120.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba480) returned 1 [0120.766] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e254bc, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90e35f20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90e35f20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0120.766] wcscmp (_String1="Windows NT", _String2=".") returned 1 [0120.766] wcscmp (_String1="Windows NT", _String2="..") returned 1 [0120.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dd0010 [0120.767] wcscpy (in: _Dest=0x3dd0010, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.767] wcscat (in: _Dest=0x3dd0010, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.767] wcscat (in: _Dest=0x3dd0010, _Source="Windows NT" | out: _Dest="C:\\Program Files\\Windows NT") returned="C:\\Program Files\\Windows NT" [0120.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0010) returned 1 [0120.767] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90f1a760, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90f1a760, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0120.767] wcscmp (_String1="Windows Photo Viewer", _String2=".") returned 1 [0120.767] wcscmp (_String1="Windows Photo Viewer", _String2="..") returned 1 [0120.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3dba480 [0120.767] wcscpy (in: _Dest=0x3dba480, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.767] wcscat (in: _Dest=0x3dba480, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.767] wcscat (in: _Dest=0x3dba480, _Source="Windows Photo Viewer" | out: _Dest="C:\\Program Files\\Windows Photo Viewer") returned="C:\\Program Files\\Windows Photo Viewer" [0120.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba480) returned 1 [0120.767] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90de9c60, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90de9c60, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0120.767] wcscmp (_String1="Windows Portable Devices", _String2=".") returned 1 [0120.767] wcscmp (_String1="Windows Portable Devices", _String2="..") returned 1 [0120.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1508 [0120.767] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.768] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.768] wcscat (in: _Dest=0x2fe1508, _Source="Windows Portable Devices" | out: _Dest="C:\\Program Files\\Windows Portable Devices") returned="C:\\Program Files\\Windows Portable Devices" [0120.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 [0120.768] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90e0fdc0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90e0fdc0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0120.768] wcscmp (_String1="Windows Sidebar", _String2=".") returned 1 [0120.768] wcscmp (_String1="Windows Sidebar", _String2="..") returned 1 [0120.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5f78 [0120.768] wcscpy (in: _Dest=0x3de5f78, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files" [0120.769] wcscat (in: _Dest=0x3de5f78, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\" [0120.769] wcscat (in: _Dest=0x3de5f78, _Source="Windows Sidebar" | out: _Dest="C:\\Program Files\\Windows Sidebar") returned="C:\\Program Files\\Windows Sidebar" [0120.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5f78) returned 1 [0120.769] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f9d17f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90e0fdc0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90e0fdc0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0 [0120.769] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0120.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 [0120.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db37b0) returned 1 Thread: id = 128 os_tid = 0x84c [0120.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db37b0 [0120.771] wcscpy (in: _Dest=0x3db37b0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.771] wcscat (in: _Dest=0x3db37b0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.771] wcscat (in: _Dest=0x3db37b0, _Source="*" | out: _Dest="C:\\ProgramData\\*") returned="C:\\ProgramData\\*" [0120.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0120.771] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.771] wcscmp (_String1=".", _String2=".") returned 0 [0120.771] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.771] wcscmp (_String1="..", _String2=".") returned 1 [0120.771] wcscmp (_String1="..", _String2="..") returned 0 [0120.772] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0120.772] wcscmp (_String1="Adobe", _String2=".") returned 1 [0120.772] wcscmp (_String1="Adobe", _String2="..") returned 1 [0120.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e159b8 [0120.772] wcscpy (in: _Dest=0x3e159b8, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.772] wcscat (in: _Dest=0x3e159b8, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.772] wcscat (in: _Dest=0x3e159b8, _Source="Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0120.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e159b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0120.773] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0120.773] wcscmp (_String1="Application Data", _String2=".") returned 1 [0120.774] wcscmp (_String1="Application Data", _String2="..") returned 1 [0120.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48b58 [0120.774] wcscpy (in: _Dest=0x3e48b58, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.774] wcscat (in: _Dest=0x3e48b58, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.774] wcscat (in: _Dest=0x3e48b58, _Source="Application Data" | out: _Dest="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0120.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e48b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0120.775] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0120.775] wcscmp (_String1="Desktop", _String2=".") returned 1 [0120.775] wcscmp (_String1="Desktop", _String2="..") returned 1 [0120.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e15b40 [0120.775] wcscpy (in: _Dest=0x3e15b40, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.775] wcscat (in: _Dest=0x3e15b40, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.775] wcscat (in: _Dest=0x3e15b40, _Source="Desktop" | out: _Dest="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0120.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e15b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0120.777] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0120.777] wcscmp (_String1="Documents", _String2=".") returned 1 [0120.777] wcscmp (_String1="Documents", _String2="..") returned 1 [0120.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dd0010 [0120.777] wcscpy (in: _Dest=0x3dd0010, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.777] wcscat (in: _Dest=0x3dd0010, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.777] wcscat (in: _Dest=0x3dd0010, _Source="Documents" | out: _Dest="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0120.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dd0010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0120.778] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0120.778] wcscmp (_String1="Favorites", _String2=".") returned 1 [0120.778] wcscmp (_String1="Favorites", _String2="..") returned 1 [0120.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfc10 [0120.778] wcscpy (in: _Dest=0x3dcfc10, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.778] wcscat (in: _Dest=0x3dcfc10, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.779] wcscat (in: _Dest=0x3dcfc10, _Source="Favorites" | out: _Dest="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites" [0120.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcfc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0120.780] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0120.780] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0120.780] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0120.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfa90 [0120.780] wcscpy (in: _Dest=0x3dcfa90, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.780] wcscat (in: _Dest=0x3dcfa90, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.780] wcscat (in: _Dest=0x3dcfa90, _Source="Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcfa90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0120.781] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0120.782] wcscmp (_String1="Microsoft Help", _String2=".") returned 1 [0120.782] wcscmp (_String1="Microsoft Help", _String2="..") returned 1 [0120.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e48ba0 [0120.782] wcscpy (in: _Dest=0x3e48ba0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.782] wcscat (in: _Dest=0x3e48ba0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.782] wcscat (in: _Dest=0x3e48ba0, _Source="Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0120.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e48ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0120.783] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74b72710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x74b72710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x74b72710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0120.783] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0120.783] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0120.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x322bf0 [0120.783] wcscpy (in: _Dest=0x322bf0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.783] wcscat (in: _Dest=0x322bf0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.783] wcscat (in: _Dest=0x322bf0, _Source="Mozilla" | out: _Dest="C:\\ProgramData\\Mozilla") returned="C:\\ProgramData\\Mozilla" [0120.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x322bf0) returned 1 [0120.784] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0120.784] wcscmp (_String1="Oracle", _String2=".") returned 1 [0120.784] wcscmp (_String1="Oracle", _String2="..") returned 1 [0120.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x322bf0 [0120.784] wcscpy (in: _Dest=0x322bf0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.784] wcscat (in: _Dest=0x322bf0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.784] wcscat (in: _Dest=0x322bf0, _Source="Oracle" | out: _Dest="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle" [0120.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x322bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0120.785] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0120.785] wcscmp (_String1="Package Cache", _String2=".") returned 1 [0120.785] wcscmp (_String1="Package Cache", _String2="..") returned 1 [0120.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e560f0 [0120.786] wcscpy (in: _Dest=0x3e560f0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.786] wcscat (in: _Dest=0x3e560f0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.786] wcscat (in: _Dest=0x3e560f0, _Source="Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0120.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e560f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0120.787] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0120.787] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0120.787] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0120.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcff90 [0120.787] wcscpy (in: _Dest=0x3dcff90, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.787] wcscat (in: _Dest=0x3dcff90, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.787] wcscat (in: _Dest=0x3dcff90, _Source="Start Menu" | out: _Dest="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0120.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcff90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0120.789] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0120.789] wcscmp (_String1="Sun", _String2=".") returned 1 [0120.789] wcscmp (_String1="Sun", _String2="..") returned 1 [0120.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0120.789] wcscpy (in: _Dest=0x3db3cf0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.789] wcscat (in: _Dest=0x3db3cf0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.789] wcscat (in: _Dest=0x3db3cf0, _Source="Sun" | out: _Dest="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun" [0120.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db3cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0120.790] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0120.790] wcscmp (_String1="Templates", _String2=".") returned 1 [0120.790] wcscmp (_String1="Templates", _String2="..") returned 1 [0120.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfa50 [0120.790] wcscpy (in: _Dest=0x3dcfa50, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData" [0120.790] wcscat (in: _Dest=0x3dcfa50, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\" [0120.790] wcscat (in: _Dest=0x3dcfa50, _Source="Templates" | out: _Dest="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0120.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcfa50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0120.792] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0120.792] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0120.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db37b0) returned 1 [0120.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 Thread: id = 129 os_tid = 0x85c [0120.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dc9d60 [0120.794] wcscpy (in: _Dest=0x3dc9d60, _Source="C:\\Recovery" | out: _Dest="C:\\Recovery") returned="C:\\Recovery" [0120.794] wcscat (in: _Dest=0x3dc9d60, _Source="\\" | out: _Dest="C:\\Recovery\\") returned="C:\\Recovery\\" [0120.794] wcscat (in: _Dest=0x3dc9d60, _Source="*" | out: _Dest="C:\\Recovery\\*") returned="C:\\Recovery\\*" [0120.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0120.794] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0121.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0121.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 Thread: id = 130 os_tid = 0x86c [0120.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb7e98 [0120.796] wcscpy (in: _Dest=0x3eb7e98, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0120.796] wcscat (in: _Dest=0x3eb7e98, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0120.796] wcscat (in: _Dest=0x3eb7e98, _Source="*" | out: _Dest="C:\\Users\\*") returned="C:\\Users\\*" [0120.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.796] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8dda350, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8dda350, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.796] wcscmp (_String1=".", _String2=".") returned 0 [0120.796] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8dda350, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x8dda350, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.796] wcscmp (_String1="..", _String2=".") returned 1 [0120.796] wcscmp (_String1="..", _String2="..") returned 0 [0120.796] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1765f29d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1765f29d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1765f29d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0120.796] wcscmp (_String1="All Users", _String2=".") returned 1 [0120.796] wcscmp (_String1="All Users", _String2="..") returned 1 [0120.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db37b0 [0120.797] wcscpy (in: _Dest=0x3db37b0, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0120.797] wcscat (in: _Dest=0x3db37b0, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0120.797] wcscat (in: _Dest=0x3db37b0, _Source="All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0120.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db37b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0120.798] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x6bd02b0, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0120.798] wcscmp (_String1="Default", _String2=".") returned 1 [0120.798] wcscmp (_String1="Default", _String2="..") returned 1 [0120.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db3180 [0120.798] wcscpy (in: _Dest=0x3db3180, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0120.798] wcscat (in: _Dest=0x3db3180, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0120.798] wcscat (in: _Dest=0x3db3180, _Source="Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0120.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db3180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0120.800] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1765f29d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1765f29d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1765f29d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0120.800] wcscmp (_String1="Default User", _String2=".") returned 1 [0120.800] wcscmp (_String1="Default User", _String2="..") returned 1 [0120.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78f78 [0120.800] wcscpy (in: _Dest=0x3e78f78, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0120.800] wcscat (in: _Dest=0x3e78f78, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0120.800] wcscat (in: _Dest=0x3e78f78, _Source="Default User" | out: _Dest="C:\\Users\\Default User") returned="C:\\Users\\Default User" [0120.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e78f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0120.801] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b61335c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b61335c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.801] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0120.801] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0120.801] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EEBsYm5", cAlternateFileName="")) returned 1 [0120.801] wcscmp (_String1="EEBsYm5", _String2=".") returned 1 [0120.801] wcscmp (_String1="EEBsYm5", _String2="..") returned 1 [0120.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3db37e0 [0120.802] wcscpy (in: _Dest=0x3db37e0, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0120.802] wcscat (in: _Dest=0x3db37e0, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0120.802] wcscat (in: _Dest=0x3db37e0, _Source="EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0120.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db37e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0120.803] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0120.803] wcscmp (_String1="Public", _String2=".") returned 1 [0120.803] wcscmp (_String1="Public", _String2="..") returned 1 [0120.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabc0 [0120.803] wcscpy (in: _Dest=0x3dcabc0, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users" [0120.803] wcscat (in: _Dest=0x3dcabc0, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\" [0120.803] wcscat (in: _Dest=0x3dcabc0, _Source="Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0120.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcabc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0120.804] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0120.804] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7e98) returned 1 [0120.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7ed8) returned 1 Thread: id = 131 os_tid = 0x88c [0120.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1cd40 [0120.817] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000" [0120.818] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\" [0120.818] wcscat (in: _Dest=0x3e1cd40, _Source="*" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\*") returned="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\*" [0120.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.818] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3785418085-2572485238-895829336-1000\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.818] wcscmp (_String1=".", _String2=".") returned 0 [0120.818] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4fdd2c00, ftLastAccessTime.dwHighDateTime=0x1d33781, ftLastWriteTime.dwLowDateTime=0x4fdd2c00, ftLastWriteTime.dwHighDateTime=0x1d33781, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.818] wcscmp (_String1="..", _String2=".") returned 1 [0120.818] wcscmp (_String1="..", _String2="..") returned 0 [0120.818] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.818] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0120.818] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0120.818] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdac4a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xdac4a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xdac4a30, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0120.818] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 [0120.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 132 os_tid = 0x89c [0120.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfd50 [0120.820] wcscpy (in: _Dest=0x3dcfd50, _Source="C:\\Program Files\\Adobe" | out: _Dest="C:\\Program Files\\Adobe") returned="C:\\Program Files\\Adobe" [0120.820] wcscat (in: _Dest=0x3dcfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\") returned="C:\\Program Files\\Adobe\\" [0120.821] wcscat (in: _Dest=0x3dcfd50, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\*") returned="C:\\Program Files\\Adobe\\*" [0120.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x90d9d9a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d9d9a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb90 [0120.821] wcscmp (_String1=".", _String2=".") returned 0 [0120.821] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x90d9d9a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d9d9a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.821] wcscmp (_String1="..", _String2=".") returned 1 [0120.821] wcscmp (_String1="..", _String2="..") returned 0 [0120.821] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d72a570, ftCreationTime.dwHighDateTime=0x1d5740e, ftLastAccessTime.dwLowDateTime=0xc0fd7dd0, ftLastAccessTime.dwHighDateTime=0x1d5823a, ftLastWriteTime.dwLowDateTime=0xc0fd7dd0, ftLastWriteTime.dwHighDateTime=0x1d5823a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="gear_panel.exe", cAlternateFileName="GEAR_P~1.EXE")) returned 1 [0120.821] wcscmp (_String1="gear_panel.exe", _String2=".") returned 1 [0120.821] wcscmp (_String1="gear_panel.exe", _String2="..") returned 1 [0120.821] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb282640, ftCreationTime.dwHighDateTime=0x1d593d7, ftLastAccessTime.dwLowDateTime=0xdf3c08c0, ftLastAccessTime.dwHighDateTime=0x1d5e040, ftLastWriteTime.dwLowDateTime=0xdf3c08c0, ftLastWriteTime.dwHighDateTime=0x1d5e040, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmailnotifierpro.exe", cAlternateFileName="GMAILN~1.EXE")) returned 1 [0120.821] wcscmp (_String1="gmailnotifierpro.exe", _String2=".") returned 1 [0120.822] wcscmp (_String1="gmailnotifierpro.exe", _String2="..") returned 1 [0120.822] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 1 [0120.822] wcscmp (_String1="Reader 10.0", _String2=".") returned 1 [0120.822] wcscmp (_String1="Reader 10.0", _String2="..") returned 1 [0120.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5f78 [0120.822] wcscpy (in: _Dest=0x3de5f78, _Source="C:\\Program Files\\Adobe" | out: _Dest="C:\\Program Files\\Adobe") returned="C:\\Program Files\\Adobe" [0120.822] wcscat (in: _Dest=0x3de5f78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\") returned="C:\\Program Files\\Adobe\\" [0120.822] wcscat (in: _Dest=0x3de5f78, _Source="Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0120.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de5f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0120.823] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 0 [0120.823] FindClose (in: hFindFile=0x3dcfb90 | out: hFindFile=0x3dcfb90) returned 1 [0120.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfd50) returned 1 [0120.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 Thread: id = 133 os_tid = 0x8ac [0120.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55958 [0120.825] wcscpy (in: _Dest=0x3e55958, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0120.825] wcscat (in: _Dest=0x3e55958, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0120.825] wcscat (in: _Dest=0x3e55958, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\*") returned="C:\\Program Files\\Common Files\\*" [0120.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90e35f20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90e35f20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.826] wcscmp (_String1=".", _String2=".") returned 0 [0120.826] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x90e35f20, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90e35f20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.826] wcscmp (_String1="..", _String2=".") returned 1 [0120.826] wcscmp (_String1="..", _String2="..") returned 0 [0120.826] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0120.826] wcscmp (_String1="Adobe", _String2=".") returned 1 [0120.826] wcscmp (_String1="Adobe", _String2="..") returned 1 [0120.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de5e88 [0120.826] wcscpy (in: _Dest=0x3de5e88, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0120.826] wcscat (in: _Dest=0x3de5e88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0120.826] wcscat (in: _Dest=0x3de5e88, _Source="Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0120.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0120.827] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8086a130, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0120.827] wcscmp (_String1="DESIGNER", _String2=".") returned 1 [0120.827] wcscmp (_String1="DESIGNER", _String2="..") returned 1 [0120.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3dba480 [0120.828] wcscpy (in: _Dest=0x3dba480, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0120.828] wcscat (in: _Dest=0x3dba480, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0120.828] wcscat (in: _Dest=0x3dba480, _Source="DESIGNER" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER" [0120.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dba480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0120.829] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x701bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x701bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0120.829] wcscmp (_String1="Java", _String2=".") returned 1 [0120.829] wcscmp (_String1="Java", _String2="..") returned 1 [0120.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5d48 [0120.829] wcscpy (in: _Dest=0x3de5d48, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0120.829] wcscat (in: _Dest=0x3de5d48, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0120.829] wcscat (in: _Dest=0x3de5d48, _Source="Java" | out: _Dest="C:\\Program Files\\Common Files\\Java") returned="C:\\Program Files\\Common Files\\Java" [0120.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de5d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0120.832] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ab9533, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbd988d10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd988d10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0120.832] wcscmp (_String1="microsoft shared", _String2=".") returned 1 [0120.832] wcscmp (_String1="microsoft shared", _String2="..") returned 1 [0120.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edf268 [0120.832] wcscpy (in: _Dest=0x3edf268, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0120.833] wcscat (in: _Dest=0x3edf268, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0120.833] wcscat (in: _Dest=0x3edf268, _Source="microsoft shared" | out: _Dest="C:\\Program Files\\Common Files\\microsoft shared") returned="C:\\Program Files\\Common Files\\microsoft shared" [0120.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf268) returned 1 [0120.833] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cce865, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cce865, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cce865, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0120.833] wcscmp (_String1="Services", _String2=".") returned 1 [0120.833] wcscmp (_String1="Services", _String2="..") returned 1 [0120.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3dba378 [0120.833] wcscpy (in: _Dest=0x3dba378, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0120.833] wcscat (in: _Dest=0x3dba378, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0120.833] wcscat (in: _Dest=0x3dba378, _Source="Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services" [0120.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dba378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0120.834] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cf49c4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cf49c4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0120.835] wcscmp (_String1="SpeechEngines", _String2=".") returned 1 [0120.835] wcscmp (_String1="SpeechEngines", _String2="..") returned 1 [0120.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1508 [0120.835] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0120.835] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0120.835] wcscat (in: _Dest=0x2fe1508, _Source="SpeechEngines" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines" [0120.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe1508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0120.836] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48c8dab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0120.836] wcscmp (_String1="System", _String2=".") returned 1 [0120.836] wcscmp (_String1="System", _String2="..") returned 1 [0120.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3dba008 [0120.836] wcscpy (in: _Dest=0x3dba008, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files" [0120.836] wcscat (in: _Dest=0x3dba008, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\" [0120.837] wcscat (in: _Dest=0x3dba008, _Source="System" | out: _Dest="C:\\Program Files\\Common Files\\System") returned="C:\\Program Files\\Common Files\\System" [0120.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba008) returned 1 [0120.837] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fb84f10, ftCreationTime.dwHighDateTime=0x1d5c7da, ftLastAccessTime.dwLowDateTime=0x75682cd0, ftLastAccessTime.dwHighDateTime=0x1d5c9b6, ftLastWriteTime.dwLowDateTime=0x75682cd0, ftLastWriteTime.dwHighDateTime=0x1d5c9b6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1 [0120.837] wcscmp (_String1="webdrive.exe", _String2=".") returned 1 [0120.837] wcscmp (_String1="webdrive.exe", _String2="..") returned 1 [0120.837] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fb84f10, ftCreationTime.dwHighDateTime=0x1d5c7da, ftLastAccessTime.dwLowDateTime=0x75682cd0, ftLastAccessTime.dwHighDateTime=0x1d5c9b6, ftLastWriteTime.dwLowDateTime=0x75682cd0, ftLastWriteTime.dwHighDateTime=0x1d5c9b6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 0 [0120.837] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55958) returned 1 [0120.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48cc0) returned 1 Thread: id = 134 os_tid = 0x8bc [0120.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfd50 [0120.842] wcscpy (in: _Dest=0x3dcfd50, _Source="C:\\Program Files\\Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0120.842] wcscat (in: _Dest=0x3dcfd50, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\") returned="C:\\Program Files\\Google\\" [0120.842] wcscat (in: _Dest=0x3dcfd50, _Source="*" | out: _Dest="C:\\Program Files\\Google\\*") returned="C:\\Program Files\\Google\\*" [0120.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.842] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffde9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x90d9d9a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d9d9a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb90 [0120.842] wcscmp (_String1=".", _String2=".") returned 0 [0120.842] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffde9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x90d9d9a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d9d9a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.843] wcscmp (_String1="..", _String2=".") returned 1 [0120.843] wcscmp (_String1="..", _String2="..") returned 0 [0120.843] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabf30370, ftCreationTime.dwHighDateTime=0x1d593c8, ftLastAccessTime.dwLowDateTime=0x9d3c2780, ftLastAccessTime.dwHighDateTime=0x1d5bc6d, ftLastWriteTime.dwLowDateTime=0x9d3c2780, ftLastWriteTime.dwHighDateTime=0x1d5bc6d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0120.843] wcscmp (_String1="bitkinex.exe", _String2=".") returned 1 [0120.843] wcscmp (_String1="bitkinex.exe", _String2="..") returned 1 [0120.843] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde8209d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0120.843] wcscmp (_String1="Chrome", _String2=".") returned 1 [0120.843] wcscmp (_String1="Chrome", _String2="..") returned 1 [0120.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e55958 [0120.843] wcscpy (in: _Dest=0x3e55958, _Source="C:\\Program Files\\Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0120.843] wcscat (in: _Dest=0x3e55958, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\") returned="C:\\Program Files\\Google\\" [0120.843] wcscat (in: _Dest=0x3e55958, _Source="Chrome" | out: _Dest="C:\\Program Files\\Google\\Chrome") returned="C:\\Program Files\\Google\\Chrome" [0120.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e55958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0120.845] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcffe10c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xcffe10c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcffe10c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0120.845] wcscmp (_String1="CrashReports", _String2=".") returned 1 [0120.845] wcscmp (_String1="CrashReports", _String2="..") returned 1 [0120.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3dba008 [0120.845] wcscpy (in: _Dest=0x3dba008, _Source="C:\\Program Files\\Google" | out: _Dest="C:\\Program Files\\Google") returned="C:\\Program Files\\Google" [0120.845] wcscat (in: _Dest=0x3dba008, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\") returned="C:\\Program Files\\Google\\" [0120.845] wcscat (in: _Dest=0x3dba008, _Source="CrashReports" | out: _Dest="C:\\Program Files\\Google\\CrashReports") returned="C:\\Program Files\\Google\\CrashReports" [0120.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dba008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0120.847] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe424da10, ftCreationTime.dwHighDateTime=0x1d5c4b6, ftLastAccessTime.dwLowDateTime=0xd88b2330, ftLastAccessTime.dwHighDateTime=0x1d59815, ftLastWriteTime.dwLowDateTime=0xd88b2330, ftLastWriteTime.dwHighDateTime=0x1d59815, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="FOXMAI~1.EXE")) returned 1 [0120.847] wcscmp (_String1="foxmailincmail.exe", _String2=".") returned 1 [0120.847] wcscmp (_String1="foxmailincmail.exe", _String2="..") returned 1 [0120.847] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe424da10, ftCreationTime.dwHighDateTime=0x1d5c4b6, ftLastAccessTime.dwLowDateTime=0xd88b2330, ftLastAccessTime.dwHighDateTime=0x1d59815, ftLastWriteTime.dwLowDateTime=0xd88b2330, ftLastWriteTime.dwHighDateTime=0x1d59815, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="FOXMAI~1.EXE")) returned 0 [0120.847] FindClose (in: hFindFile=0x3dcfb90 | out: hFindFile=0x3dcfb90) returned 1 [0120.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfd50) returned 1 [0120.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e160b8) returned 1 Thread: id = 135 os_tid = 0x8cc [0120.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e160b8 [0120.852] wcscpy (in: _Dest=0x3e160b8, _Source="C:\\Program Files\\Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java" [0120.852] wcscat (in: _Dest=0x3e160b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\") returned="C:\\Program Files\\Java\\" [0120.852] wcscat (in: _Dest=0x3e160b8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\*") returned="C:\\Program Files\\Java\\*" [0120.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.852] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x66f0ab20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x66f0ab20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.853] wcscmp (_String1=".", _String2=".") returned 0 [0120.853] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x66f0ab20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x66f0ab20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.853] wcscmp (_String1="..", _String2=".") returned 1 [0120.853] wcscmp (_String1="..", _String2="..") returned 0 [0120.853] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1 [0120.853] wcscmp (_String1="jre7", _String2=".") returned 1 [0120.853] wcscmp (_String1="jre7", _String2="..") returned 1 [0120.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfb90 [0120.853] wcscpy (in: _Dest=0x3dcfb90, _Source="C:\\Program Files\\Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java" [0120.853] wcscat (in: _Dest=0x3dcfb90, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\") returned="C:\\Program Files\\Java\\" [0120.853] wcscat (in: _Dest=0x3dcfb90, _Source="jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0120.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcfb90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0120.854] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 0 [0120.854] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e160b8) returned 1 [0120.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15ef8) returned 1 Thread: id = 136 os_tid = 0x8dc [0120.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edf268 [0120.856] wcscpy (in: _Dest=0x3edf268, _Source="C:\\Program Files\\Microsoft Analysis Services" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services" [0120.856] wcscat (in: _Dest=0x3edf268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\") returned="C:\\Program Files\\Microsoft Analysis Services\\" [0120.856] wcscat (in: _Dest=0x3edf268, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\*" [0120.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.856] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d516e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d516e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.857] wcscmp (_String1=".", _String2=".") returned 0 [0120.857] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d516e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d516e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.857] wcscmp (_String1="..", _String2=".") returned 1 [0120.857] wcscmp (_String1="..", _String2="..") returned 0 [0120.857] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0120.857] wcscmp (_String1="AS OLEDB", _String2=".") returned 1 [0120.857] wcscmp (_String1="AS OLEDB", _String2="..") returned 1 [0120.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3b018 [0120.857] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Analysis Services" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services") returned="C:\\Program Files\\Microsoft Analysis Services" [0120.857] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\") returned="C:\\Program Files\\Microsoft Analysis Services\\" [0120.857] wcscat (in: _Dest=0x3e3b018, _Source="AS OLEDB" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" [0120.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3b018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0120.858] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383210e0, ftCreationTime.dwHighDateTime=0x1d56a54, ftLastAccessTime.dwLowDateTime=0x2a907020, ftLastAccessTime.dwHighDateTime=0x1d5780b, ftLastWriteTime.dwLowDateTime=0x2a907020, ftLastWriteTime.dwHighDateTime=0x1d5780b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0120.858] wcscmp (_String1="barca.exe", _String2=".") returned 1 [0120.858] wcscmp (_String1="barca.exe", _String2="..") returned 1 [0120.859] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383210e0, ftCreationTime.dwHighDateTime=0x1d56a54, ftLastAccessTime.dwLowDateTime=0x2a907020, ftLastAccessTime.dwHighDateTime=0x1d5780b, ftLastWriteTime.dwLowDateTime=0x2a907020, ftLastWriteTime.dwHighDateTime=0x1d5780b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 0 [0120.859] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf268) returned 1 [0120.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf2d0) returned 1 Thread: id = 137 os_tid = 0x8ec [0120.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6388 [0120.863] wcscpy (in: _Dest=0x3de6388, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0120.863] wcscat (in: _Dest=0x3de6388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0120.863] wcscat (in: _Dest=0x3de6388, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\*") returned="C:\\Program Files\\Microsoft Office\\*" [0120.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.863] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90ef4600, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ef4600, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.864] wcscmp (_String1=".", _String2=".") returned 0 [0120.864] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90ef4600, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ef4600, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.864] wcscmp (_String1="..", _String2=".") returned 1 [0120.864] wcscmp (_String1="..", _String2="..") returned 0 [0120.864] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0120.864] wcscmp (_String1="CLIPART", _String2=".") returned 1 [0120.864] wcscmp (_String1="CLIPART", _String2="..") returned 1 [0120.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe5948 [0120.864] wcscpy (in: _Dest=0x2fe5948, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0120.864] wcscat (in: _Dest=0x2fe5948, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0120.864] wcscat (in: _Dest=0x2fe5948, _Source="CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0120.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe5948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28 [0120.865] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="DOCUME~1")) returned 1 [0120.865] wcscmp (_String1="Document Themes 14", _String2=".") returned 1 [0120.865] wcscmp (_String1="Document Themes 14", _String2="..") returned 1 [0120.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b6a8 [0120.866] wcscpy (in: _Dest=0x3e3b6a8, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0120.866] wcscat (in: _Dest=0x3e3b6a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0120.866] wcscat (in: _Dest=0x3e3b6a8, _Source="Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0120.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3b6a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb80 [0120.867] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f773e0, ftCreationTime.dwHighDateTime=0x1d58c21, ftLastAccessTime.dwLowDateTime=0xaccf5f40, ftLastAccessTime.dwHighDateTime=0x1d58f1e, ftLastWriteTime.dwLowDateTime=0xaccf5f40, ftLastWriteTime.dwHighDateTime=0x1d58f1e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0120.867] wcscmp (_String1="fling.exe", _String2=".") returned 1 [0120.867] wcscmp (_String1="fling.exe", _String2="..") returned 1 [0120.867] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c75ad0, ftCreationTime.dwHighDateTime=0x1d5819c, ftLastAccessTime.dwLowDateTime=0x3718be40, ftLastAccessTime.dwHighDateTime=0x1d5697b, ftLastWriteTime.dwLowDateTime=0x3718be40, ftLastWriteTime.dwHighDateTime=0x1d5697b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="functions_masturbating.exe", cAlternateFileName="FUNCTI~1.EXE")) returned 1 [0120.867] wcscmp (_String1="functions_masturbating.exe", _String2=".") returned 1 [0120.867] wcscmp (_String1="functions_masturbating.exe", _String2="..") returned 1 [0120.867] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0120.867] wcscmp (_String1="MEDIA", _String2=".") returned 1 [0120.867] wcscmp (_String1="MEDIA", _String2="..") returned 1 [0120.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3d48848 [0120.867] wcscpy (in: _Dest=0x3d48848, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0120.867] wcscat (in: _Dest=0x3d48848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0120.867] wcscat (in: _Dest=0x3d48848, _Source="MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0120.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58 [0120.869] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe942c610, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0120.869] wcscmp (_String1="Office14", _String2=".") returned 1 [0120.869] wcscmp (_String1="Office14", _String2="..") returned 1 [0120.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1d48 [0120.869] wcscpy (in: _Dest=0x2fe1d48, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0120.869] wcscat (in: _Dest=0x2fe1d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0120.869] wcscat (in: _Dest=0x2fe1d48, _Source="Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0120.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe1d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0120.870] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89550000, ftCreationTime.dwHighDateTime=0x1d5abe4, ftLastAccessTime.dwLowDateTime=0x217f40, ftLastAccessTime.dwHighDateTime=0x1d5743d, ftLastWriteTime.dwLowDateTime=0x217f40, ftLastWriteTime.dwHighDateTime=0x1d5743d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1 [0120.871] wcscmp (_String1="omnipos.exe", _String2=".") returned 1 [0120.871] wcscmp (_String1="omnipos.exe", _String2="..") returned 1 [0120.871] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48bf5530, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0120.871] wcscmp (_String1="Stationery", _String2=".") returned 1 [0120.871] wcscmp (_String1="Stationery", _String2="..") returned 1 [0120.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf2d0 [0120.871] wcscpy (in: _Dest=0x3edf2d0, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0120.871] wcscat (in: _Dest=0x3edf2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0120.871] wcscat (in: _Dest=0x3edf2d0, _Source="Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery" [0120.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78 [0120.872] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0120.872] wcscmp (_String1="Templates", _String2=".") returned 1 [0120.872] wcscmp (_String1="Templates", _String2="..") returned 1 [0120.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe2c48 [0120.873] wcscpy (in: _Dest=0x2fe2c48, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office" [0120.873] wcscat (in: _Dest=0x2fe2c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\" [0120.873] wcscat (in: _Dest=0x2fe2c48, _Source="Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0120.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe2c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb54 [0120.874] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0120.874] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6388) returned 1 [0120.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6928) returned 1 Thread: id = 138 os_tid = 0x8fc [0120.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b978 [0120.879] wcscpy (in: _Dest=0x3e3b978, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition" [0120.879] wcscat (in: _Dest=0x3e3b978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\" [0120.880] wcscat (in: _Dest=0x3e3b978, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*" [0120.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.880] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fa929a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8fa929a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.880] wcscmp (_String1=".", _String2=".") returned 0 [0120.880] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fa929a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8fa929a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.880] wcscmp (_String1="..", _String2=".") returned 1 [0120.880] wcscmp (_String1="..", _String2="..") returned 0 [0120.880] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418cdcf0, ftCreationTime.dwHighDateTime=0x1d5b7b2, ftLastAccessTime.dwLowDateTime=0xdb1fc080, ftLastAccessTime.dwHighDateTime=0x1d59804, ftLastWriteTime.dwLowDateTime=0xdb1fc080, ftLastWriteTime.dwHighDateTime=0x1d59804, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="elegant.exe", cAlternateFileName="")) returned 1 [0120.880] wcscmp (_String1="elegant.exe", _String2=".") returned 1 [0120.880] wcscmp (_String1="elegant.exe", _String2="..") returned 1 [0120.880] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f12560, ftCreationTime.dwHighDateTime=0x1d5639a, ftLastAccessTime.dwLowDateTime=0x974d8490, ftLastAccessTime.dwHighDateTime=0x1d5c8c5, ftLastWriteTime.dwLowDateTime=0x974d8490, ftLastWriteTime.dwHighDateTime=0x1d5c8c5, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="lamb-posted.exe", cAlternateFileName="LAMB-P~1.EXE")) returned 1 [0120.880] wcscmp (_String1="lamb-posted.exe", _String2=".") returned 1 [0120.881] wcscmp (_String1="lamb-posted.exe", _String2="..") returned 1 [0120.881] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0120.881] wcscmp (_String1="v3.5", _String2=".") returned 1 [0120.881] wcscmp (_String1="v3.5", _String2="..") returned 1 [0120.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da4af0 [0120.881] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition" [0120.881] wcscat (in: _Dest=0x3da4af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\" [0120.881] wcscat (in: _Dest=0x3da4af0, _Source="v3.5" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" [0120.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da4af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18 [0120.882] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0120.882] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0120.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 Thread: id = 139 os_tid = 0x90c [0120.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe14a8 [0120.890] wcscpy (in: _Dest=0x2fe14a8, _Source="C:\\Program Files\\Microsoft Sync Framework" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework" [0120.890] wcscat (in: _Dest=0x2fe14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\") returned="C:\\Program Files\\Microsoft Sync Framework\\" [0120.890] wcscat (in: _Dest=0x2fe14a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\*" [0120.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.890] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90ece4a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ece4a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.890] wcscmp (_String1=".", _String2=".") returned 0 [0120.891] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90ece4a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ece4a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.891] wcscmp (_String1="..", _String2=".") returned 1 [0120.891] wcscmp (_String1="..", _String2="..") returned 0 [0120.891] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6444b0, ftCreationTime.dwHighDateTime=0x1d55bbf, ftLastAccessTime.dwLowDateTime=0xfdf43420, ftLastAccessTime.dwHighDateTime=0x1d59079, ftLastWriteTime.dwLowDateTime=0xfdf43420, ftLastWriteTime.dwHighDateTime=0x1d59079, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delayed orientation.exe", cAlternateFileName="DELAYE~1.EXE")) returned 1 [0120.891] wcscmp (_String1="delayed orientation.exe", _String2=".") returned 1 [0120.891] wcscmp (_String1="delayed orientation.exe", _String2="..") returned 1 [0120.891] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b777f80, ftCreationTime.dwHighDateTime=0x1d5cc1d, ftLastAccessTime.dwLowDateTime=0x89db8970, ftLastAccessTime.dwHighDateTime=0x1d5ab05, ftLastWriteTime.dwLowDateTime=0x89db8970, ftLastWriteTime.dwHighDateTime=0x1d5ab05, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0120.891] wcscmp (_String1="fpos.exe", _String2=".") returned 1 [0120.891] wcscmp (_String1="fpos.exe", _String2="..") returned 1 [0120.891] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb00adf0, ftCreationTime.dwHighDateTime=0x1d56694, ftLastAccessTime.dwLowDateTime=0xabbe07e0, ftLastAccessTime.dwHighDateTime=0x1d5de52, ftLastWriteTime.dwLowDateTime=0xabbe07e0, ftLastWriteTime.dwHighDateTime=0x1d5de52, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewer.exe", cAlternateFileName="")) returned 1 [0120.891] wcscmp (_String1="reviewer.exe", _String2=".") returned 1 [0120.891] wcscmp (_String1="reviewer.exe", _String2="..") returned 1 [0120.891] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0120.891] wcscmp (_String1="v1.0", _String2=".") returned 1 [0120.891] wcscmp (_String1="v1.0", _String2="..") returned 1 [0120.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edf268 [0120.891] wcscpy (in: _Dest=0x3edf268, _Source="C:\\Program Files\\Microsoft Sync Framework" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework") returned="C:\\Program Files\\Microsoft Sync Framework" [0120.891] wcscat (in: _Dest=0x3edf268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\") returned="C:\\Program Files\\Microsoft Sync Framework\\" [0120.891] wcscat (in: _Dest=0x3edf268, _Source="v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0120.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c [0120.893] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d5f8590, ftCreationTime.dwHighDateTime=0x1d5bf3b, ftLastAccessTime.dwLowDateTime=0xa773d90, ftLastAccessTime.dwHighDateTime=0x1d58c1b, ftLastWriteTime.dwLowDateTime=0xa773d90, ftLastWriteTime.dwHighDateTime=0x1d58c1b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wma prime accommodate.exe", cAlternateFileName="WMAPRI~1.EXE")) returned 1 [0120.893] wcscmp (_String1="wma prime accommodate.exe", _String2=".") returned 1 [0120.893] wcscmp (_String1="wma prime accommodate.exe", _String2="..") returned 1 [0120.893] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d5f8590, ftCreationTime.dwHighDateTime=0x1d5bf3b, ftLastAccessTime.dwLowDateTime=0xa773d90, ftLastAccessTime.dwHighDateTime=0x1d58c1b, ftLastWriteTime.dwLowDateTime=0xa773d90, ftLastWriteTime.dwHighDateTime=0x1d58c1b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wma prime accommodate.exe", cAlternateFileName="WMAPRI~1.EXE")) returned 0 [0120.893] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe14a8) returned 1 [0120.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 140 os_tid = 0x91c [0120.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3bae0 [0120.895] wcscpy (in: _Dest=0x3e3bae0, _Source="C:\\Program Files\\Microsoft Synchronization Services" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services" [0120.895] wcscat (in: _Dest=0x3e3bae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\" [0120.895] wcscat (in: _Dest=0x3e3bae0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\*") returned="C:\\Program Files\\Microsoft Synchronization Services\\*" [0120.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.895] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d516e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d516e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.895] wcscmp (_String1=".", _String2=".") returned 0 [0120.895] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90d516e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d516e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.896] wcscmp (_String1="..", _String2=".") returned 1 [0120.896] wcscmp (_String1="..", _String2="..") returned 0 [0120.896] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c947b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO.NET", cAlternateFileName="")) returned 1 [0120.896] wcscmp (_String1="ADO.NET", _String2=".") returned 1 [0120.896] wcscmp (_String1="ADO.NET", _String2="..") returned 1 [0120.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5f70 [0120.896] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Program Files\\Microsoft Synchronization Services" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services") returned="C:\\Program Files\\Microsoft Synchronization Services" [0120.896] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\" [0120.896] wcscat (in: _Dest=0x3da5f70, _Source="ADO.NET" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" [0120.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da5f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8 [0120.897] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6577310, ftCreationTime.dwHighDateTime=0x1d5a054, ftLastAccessTime.dwLowDateTime=0x9bd103e0, ftLastAccessTime.dwHighDateTime=0x1d5cbc5, ftLastWriteTime.dwLowDateTime=0x9bd103e0, ftLastWriteTime.dwHighDateTime=0x1d5cbc5, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 1 [0120.897] wcscmp (_String1="far.exe", _String2=".") returned 1 [0120.897] wcscmp (_String1="far.exe", _String2="..") returned 1 [0120.897] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6577310, ftCreationTime.dwHighDateTime=0x1d5a054, ftLastAccessTime.dwLowDateTime=0x9bd103e0, ftLastAccessTime.dwHighDateTime=0x1d5cbc5, ftLastWriteTime.dwLowDateTime=0x9bd103e0, ftLastWriteTime.dwHighDateTime=0x1d5cbc5, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 0 [0120.897] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0120.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ad8) returned 1 Thread: id = 141 os_tid = 0x92c [0120.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf200 [0120.899] wcscpy (in: _Dest=0x3edf200, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0120.899] wcscat (in: _Dest=0x3edf200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0120.899] wcscat (in: _Dest=0x3edf200, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\*" [0120.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.899] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.900] wcscmp (_String1=".", _String2=".") returned 0 [0120.900] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.900] wcscmp (_String1="..", _String2=".") returned 1 [0120.900] wcscmp (_String1="..", _String2="..") returned 0 [0120.900] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common7", cAlternateFileName="")) returned 1 [0120.900] wcscmp (_String1="Common7", _String2=".") returned 1 [0120.900] wcscmp (_String1="Common7", _String2="..") returned 1 [0120.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69ad8 [0120.900] wcscpy (in: _Dest=0x3e69ad8, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0120.900] wcscat (in: _Dest=0x3e69ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0120.900] wcscat (in: _Dest=0x3e69ad8, _Source="Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0120.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c [0120.901] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDK", cAlternateFileName="")) returned 1 [0120.902] wcscmp (_String1="SDK", _String2=".") returned 1 [0120.902] wcscmp (_String1="SDK", _String2="..") returned 1 [0120.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edf198 [0120.902] wcscpy (in: _Dest=0x3edf198, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0120.902] wcscat (in: _Dest=0x3edf198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0120.902] wcscat (in: _Dest=0x3edf198, _Source="SDK" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK" [0120.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0120.903] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0120.903] wcscmp (_String1="VSTA", _String2=".") returned 1 [0120.903] wcscmp (_String1="VSTA", _String2="..") returned 1 [0120.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf9b8 [0120.903] wcscpy (in: _Dest=0x3edf9b8, _Source="C:\\Program Files\\Microsoft Visual Studio 8" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8") returned="C:\\Program Files\\Microsoft Visual Studio 8" [0120.903] wcscat (in: _Dest=0x3edf9b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\" [0120.903] wcscat (in: _Dest=0x3edf9b8, _Source="VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" [0120.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0120.904] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0 [0120.905] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf200) returned 1 [0120.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5e88) returned 1 Thread: id = 142 os_tid = 0x93c [0120.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6928 [0120.906] wcscpy (in: _Dest=0x3de6928, _Source="C:\\Program Files\\Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0120.906] wcscat (in: _Dest=0x3de6928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\") returned="C:\\Program Files\\Microsoft.NET\\" [0120.906] wcscat (in: _Dest=0x3de6928, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft.NET\\*") returned="C:\\Program Files\\Microsoft.NET\\*" [0120.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.906] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft.NET\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90ef4600, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ef4600, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0120.907] wcscmp (_String1=".", _String2=".") returned 0 [0120.907] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90ef4600, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ef4600, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.907] wcscmp (_String1="..", _String2=".") returned 1 [0120.907] wcscmp (_String1="..", _String2="..") returned 0 [0120.907] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3c61c0, ftCreationTime.dwHighDateTime=0x1d56e62, ftLastAccessTime.dwLowDateTime=0x569381a0, ftLastAccessTime.dwHighDateTime=0x1d59bae, ftLastWriteTime.dwLowDateTime=0x569381a0, ftLastWriteTime.dwHighDateTime=0x1d59bae, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="coreftp.exe", cAlternateFileName="")) returned 1 [0120.907] wcscmp (_String1="coreftp.exe", _String2=".") returned 1 [0120.907] wcscmp (_String1="coreftp.exe", _String2="..") returned 1 [0120.907] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80851d50, ftCreationTime.dwHighDateTime=0x1d5dba2, ftLastAccessTime.dwLowDateTime=0xb0ff58f0, ftLastAccessTime.dwHighDateTime=0x1d5c677, ftLastWriteTime.dwLowDateTime=0xb0ff58f0, ftLastWriteTime.dwHighDateTime=0x1d5c677, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="laptop-distributed-pasta.exe", cAlternateFileName="LAPTOP~1.EXE")) returned 1 [0120.907] wcscmp (_String1="laptop-distributed-pasta.exe", _String2=".") returned 1 [0120.907] wcscmp (_String1="laptop-distributed-pasta.exe", _String2="..") returned 1 [0120.907] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0120.907] wcscmp (_String1="Primary Interop Assemblies", _String2=".") returned 1 [0120.907] wcscmp (_String1="Primary Interop Assemblies", _String2="..") returned 1 [0120.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6270 [0120.908] wcscpy (in: _Dest=0x3da6270, _Source="C:\\Program Files\\Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0120.908] wcscat (in: _Dest=0x3da6270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\") returned="C:\\Program Files\\Microsoft.NET\\" [0120.908] wcscat (in: _Dest=0x3da6270, _Source="Primary Interop Assemblies" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies" [0120.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da6270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0120.909] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0a96460, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x4e6f04a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0120.909] wcscmp (_String1="RedistList", _String2=".") returned 1 [0120.909] wcscmp (_String1="RedistList", _String2="..") returned 1 [0120.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe5e88 [0120.909] wcscpy (in: _Dest=0x2fe5e88, _Source="C:\\Program Files\\Microsoft.NET" | out: _Dest="C:\\Program Files\\Microsoft.NET") returned="C:\\Program Files\\Microsoft.NET" [0120.909] wcscat (in: _Dest=0x2fe5e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\") returned="C:\\Program Files\\Microsoft.NET\\" [0120.909] wcscat (in: _Dest=0x2fe5e88, _Source="RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0120.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0120.911] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af0ee80, ftCreationTime.dwHighDateTime=0x1d5c27a, ftLastAccessTime.dwLowDateTime=0xdbf51080, ftLastAccessTime.dwHighDateTime=0x1d5a3fa, ftLastWriteTime.dwLowDateTime=0xdbf51080, ftLastWriteTime.dwHighDateTime=0x1d5a3fa, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0120.911] wcscmp (_String1="skype.exe", _String2=".") returned 1 [0120.911] wcscmp (_String1="skype.exe", _String2="..") returned 1 [0120.911] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19b2e80, ftCreationTime.dwHighDateTime=0x1d5c90e, ftLastAccessTime.dwLowDateTime=0x788840d0, ftLastAccessTime.dwHighDateTime=0x1d58352, ftLastWriteTime.dwLowDateTime=0x788840d0, ftLastWriteTime.dwHighDateTime=0x1d58352, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0120.911] wcscmp (_String1="spcwin.exe", _String2=".") returned 1 [0120.911] wcscmp (_String1="spcwin.exe", _String2="..") returned 1 [0120.911] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d84dff0, ftCreationTime.dwHighDateTime=0x1d58bb1, ftLastAccessTime.dwLowDateTime=0x5f63c050, ftLastAccessTime.dwHighDateTime=0x1d5bfe0, ftLastWriteTime.dwLowDateTime=0x5f63c050, ftLastWriteTime.dwHighDateTime=0x1d5bfe0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0120.911] wcscmp (_String1="winscp.exe", _String2=".") returned 1 [0120.911] wcscmp (_String1="winscp.exe", _String2="..") returned 1 [0120.911] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d84dff0, ftCreationTime.dwHighDateTime=0x1d58bb1, ftLastAccessTime.dwLowDateTime=0x5f63c050, ftLastAccessTime.dwHighDateTime=0x1d5bfe0, ftLastWriteTime.dwLowDateTime=0x5f63c050, ftLastWriteTime.dwHighDateTime=0x1d5bfe0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0120.911] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0120.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6928) returned 1 [0120.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48be8) returned 1 Thread: id = 143 os_tid = 0x94c [0120.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfd50 [0120.921] wcscpy (in: _Dest=0x3dcfd50, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0120.921] wcscat (in: _Dest=0x3dcfd50, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\" [0120.921] wcscat (in: _Dest=0x3dcfd50, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\*") returned="C:\\Program Files\\MSBuild\\*" [0120.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.921] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90ea8340, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ea8340, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb10 [0120.921] wcscmp (_String1=".", _String2=".") returned 0 [0120.921] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90ea8340, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ea8340, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.922] wcscmp (_String1="..", _String2=".") returned 1 [0120.922] wcscmp (_String1="..", _String2="..") returned 0 [0120.922] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10363080, ftCreationTime.dwHighDateTime=0x1d5a67c, ftLastAccessTime.dwLowDateTime=0xa0d676a0, ftLastAccessTime.dwHighDateTime=0x1d5b238, ftLastWriteTime.dwLowDateTime=0xa0d676a0, ftLastWriteTime.dwHighDateTime=0x1d5b238, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccv_server.exe", cAlternateFileName="CCV_SE~1.EXE")) returned 1 [0120.922] wcscmp (_String1="ccv_server.exe", _String2=".") returned 1 [0120.922] wcscmp (_String1="ccv_server.exe", _String2="..") returned 1 [0120.922] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16095bd0, ftCreationTime.dwHighDateTime=0x1d588c3, ftLastAccessTime.dwLowDateTime=0x96789470, ftLastAccessTime.dwHighDateTime=0x1d5ab91, ftLastWriteTime.dwLowDateTime=0x96789470, ftLastWriteTime.dwHighDateTime=0x1d5ab91, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="centralcreditcard.exe", cAlternateFileName="CENTRA~1.EXE")) returned 1 [0120.922] wcscmp (_String1="centralcreditcard.exe", _String2=".") returned 1 [0120.922] wcscmp (_String1="centralcreditcard.exe", _String2="..") returned 1 [0120.922] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0120.922] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0120.922] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0120.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6928 [0120.922] wcscpy (in: _Dest=0x3de6928, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0120.922] wcscat (in: _Dest=0x3de6928, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\" [0120.922] wcscat (in: _Dest=0x3de6928, _Source="Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft" [0120.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0120.924] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b04a00, ftCreationTime.dwHighDateTime=0x1cacf8d, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45b04a00, ftLastWriteTime.dwHighDateTime=0x1cacf8d, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 1 [0120.924] wcscmp (_String1="Microsoft.Office.InfoPath.targets", _String2=".") returned 1 [0120.924] wcscmp (_String1="Microsoft.Office.InfoPath.targets", _String2="..") returned 1 [0120.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da66f0 [0120.924] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild" [0120.924] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\" [0120.924] wcscat (in: _Dest=0x3da66f0, _Source="Microsoft.Office.InfoPath.targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets") returned="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets" [0120.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da66f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4 [0120.925] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b04a00, ftCreationTime.dwHighDateTime=0x1cacf8d, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45b04a00, ftLastWriteTime.dwHighDateTime=0x1cacf8d, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 0 [0120.925] FindClose (in: hFindFile=0x3dcfb10 | out: hFindFile=0x3dcfb10) returned 1 [0120.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfd50) returned 1 [0120.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 Thread: id = 144 os_tid = 0x95c [0120.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3d48c68 [0120.927] wcscpy (in: _Dest=0x3d48c68, _Source="C:\\Program Files\\Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0120.927] wcscat (in: _Dest=0x3d48c68, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\") returned="C:\\Program Files\\Reference Assemblies\\" [0120.927] wcscat (in: _Dest=0x3d48c68, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\*") returned="C:\\Program Files\\Reference Assemblies\\*" [0120.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.927] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90d2b580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d2b580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0120.927] wcscmp (_String1=".", _String2=".") returned 0 [0120.927] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x90d2b580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90d2b580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.928] wcscmp (_String1="..", _String2=".") returned 1 [0120.928] wcscmp (_String1="..", _String2="..") returned 0 [0120.928] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce972fb0, ftCreationTime.dwHighDateTime=0x1d56b09, ftLastAccessTime.dwLowDateTime=0x364f3980, ftLastAccessTime.dwHighDateTime=0x1d55f03, ftLastWriteTime.dwLowDateTime=0x364f3980, ftLastWriteTime.dwHighDateTime=0x1d55f03, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="absolutetelnet.exe", cAlternateFileName="ABSOLU~1.EXE")) returned 1 [0120.928] wcscmp (_String1="absolutetelnet.exe", _String2=".") returned 1 [0120.928] wcscmp (_String1="absolutetelnet.exe", _String2="..") returned 1 [0120.928] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58ecb310, ftCreationTime.dwHighDateTime=0x1d55ed5, ftLastAccessTime.dwLowDateTime=0x1cbd4d00, ftLastAccessTime.dwHighDateTime=0x1d5cc6c, ftLastWriteTime.dwLowDateTime=0x1cbd4d00, ftLastWriteTime.dwHighDateTime=0x1d5cc6c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="harder runs disclosure.exe", cAlternateFileName="HARDER~1.EXE")) returned 1 [0120.928] wcscmp (_String1="harder runs disclosure.exe", _String2=".") returned 1 [0120.928] wcscmp (_String1="harder runs disclosure.exe", _String2="..") returned 1 [0120.928] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0120.928] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0120.928] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0120.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf200 [0120.928] wcscpy (in: _Dest=0x3edf200, _Source="C:\\Program Files\\Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies" [0120.928] wcscat (in: _Dest=0x3edf200, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\") returned="C:\\Program Files\\Reference Assemblies\\" [0120.928] wcscat (in: _Dest=0x3edf200, _Source="Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft" [0120.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0120.929] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc1800, ftCreationTime.dwHighDateTime=0x1d57e45, ftLastAccessTime.dwLowDateTime=0xd55b21e0, ftLastAccessTime.dwHighDateTime=0x1d5df43, ftLastWriteTime.dwLowDateTime=0xd55b21e0, ftLastWriteTime.dwHighDateTime=0x1d5df43, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="phone_abortion_verbal.exe", cAlternateFileName="PHONE_~1.EXE")) returned 1 [0120.929] wcscmp (_String1="phone_abortion_verbal.exe", _String2=".") returned 1 [0120.929] wcscmp (_String1="phone_abortion_verbal.exe", _String2="..") returned 1 [0120.929] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc1800, ftCreationTime.dwHighDateTime=0x1d57e45, ftLastAccessTime.dwLowDateTime=0xd55b21e0, ftLastAccessTime.dwHighDateTime=0x1d5df43, ftLastWriteTime.dwLowDateTime=0xd55b21e0, ftLastWriteTime.dwHighDateTime=0x1d5df43, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="phone_abortion_verbal.exe", cAlternateFileName="PHONE_~1.EXE")) returned 0 [0120.929] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0120.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48c68) returned 1 [0120.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba2c8) returned 1 Thread: id = 145 os_tid = 0x96c [0120.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1328 [0120.931] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Uninstall Information" | out: _Dest="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information" [0120.931] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Uninstall Information\\") returned="C:\\Program Files\\Uninstall Information\\" [0120.931] wcscat (in: _Dest=0x2fe1328, _Source="*" | out: _Dest="C:\\Program Files\\Uninstall Information\\*") returned="C:\\Program Files\\Uninstall Information\\*" [0120.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.931] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x48a8eee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8fa20580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8fa20580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0120.932] wcscmp (_String1=".", _String2=".") returned 0 [0120.932] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x48a8eee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8fa20580, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8fa20580, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.932] wcscmp (_String1="..", _String2=".") returned 1 [0120.932] wcscmp (_String1="..", _String2="..") returned 0 [0120.932] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc4e60e0, ftCreationTime.dwHighDateTime=0x1d5de2c, ftLastAccessTime.dwLowDateTime=0x8112b250, ftLastAccessTime.dwHighDateTime=0x1d5be8d, ftLastWriteTime.dwLowDateTime=0x8112b250, ftLastWriteTime.dwHighDateTime=0x1d5be8d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="glow.exe", cAlternateFileName="")) returned 1 [0120.932] wcscmp (_String1="glow.exe", _String2=".") returned 1 [0120.932] wcscmp (_String1="glow.exe", _String2="..") returned 1 [0120.932] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc4e60e0, ftCreationTime.dwHighDateTime=0x1d5de2c, ftLastAccessTime.dwLowDateTime=0x8112b250, ftLastAccessTime.dwHighDateTime=0x1d5be8d, ftLastWriteTime.dwLowDateTime=0x8112b250, ftLastWriteTime.dwHighDateTime=0x1d5be8d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="glow.exe", cAlternateFileName="")) returned 0 [0120.932] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0120.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0120.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db9be8) returned 1 Thread: id = 146 os_tid = 0x97c [0120.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6388 [0120.934] wcscpy (in: _Dest=0x3de6388, _Source="C:\\Program Files\\Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0120.934] wcscat (in: _Dest=0x3de6388, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\") returned="C:\\Program Files\\Windows Journal\\" [0120.934] wcscat (in: _Dest=0x3de6388, _Source="*" | out: _Dest="C:\\Program Files\\Windows Journal\\*") returned="C:\\Program Files\\Windows Journal\\*" [0120.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.934] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ab4e22, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x90ef4600, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ef4600, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0120.935] wcscmp (_String1=".", _String2=".") returned 0 [0120.935] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ab4e22, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x90ef4600, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x90ef4600, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.935] wcscmp (_String1="..", _String2=".") returned 1 [0120.935] wcscmp (_String1="..", _String2="..") returned 0 [0120.935] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf30ca140, ftCreationTime.dwHighDateTime=0x1d56730, ftLastAccessTime.dwLowDateTime=0xada5f650, ftLastAccessTime.dwHighDateTime=0x1d56c86, ftLastWriteTime.dwLowDateTime=0xada5f650, ftLastWriteTime.dwHighDateTime=0x1d56c86, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="creditservice.exe", cAlternateFileName="CREDIT~1.EXE")) returned 1 [0120.935] wcscmp (_String1="creditservice.exe", _String2=".") returned 1 [0120.935] wcscmp (_String1="creditservice.exe", _String2="..") returned 1 [0120.935] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3608042, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee69aeba, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc386a5c2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0120.935] wcscmp (_String1="en-US", _String2=".") returned 1 [0120.935] wcscmp (_String1="en-US", _String2="..") returned 1 [0120.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3db9be8 [0120.935] wcscpy (in: _Dest=0x3db9be8, _Source="C:\\Program Files\\Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0120.936] wcscat (in: _Dest=0x3db9be8, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\") returned="C:\\Program Files\\Windows Journal\\" [0120.936] wcscat (in: _Dest=0x3db9be8, _Source="en-US" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US") returned="C:\\Program Files\\Windows Journal\\en-US" [0120.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db9be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0 [0120.937] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ce23e0, ftCreationTime.dwHighDateTime=0x1d564c6, ftLastAccessTime.dwLowDateTime=0x44af10a0, ftLastAccessTime.dwHighDateTime=0x1d5b0c4, ftLastWriteTime.dwLowDateTime=0x44af10a0, ftLastWriteTime.dwHighDateTime=0x1d5b0c4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="icq.exe", cAlternateFileName="")) returned 1 [0120.937] wcscmp (_String1="icq.exe", _String2=".") returned 1 [0120.937] wcscmp (_String1="icq.exe", _String2="..") returned 1 [0120.937] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ebe7e76, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4ebe7e76, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x95c30110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkSeg.dll", cAlternateFileName="")) returned 1 [0120.937] wcscmp (_String1="InkSeg.dll", _String2=".") returned 1 [0120.937] wcscmp (_String1="InkSeg.dll", _String2="..") returned 1 [0120.938] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d33f28, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x54d33f28, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96d00440, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll", cAlternateFileName="")) returned 1 [0120.938] wcscmp (_String1="JNTFiltr.dll", _String2=".") returned 1 [0120.938] wcscmp (_String1="JNTFiltr.dll", _String2="..") returned 1 [0120.938] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54dcc4a4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x54dcc4a4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ea4300, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xeca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNWDRV.dll", cAlternateFileName="")) returned 1 [0120.938] wcscmp (_String1="JNWDRV.dll", _String2=".") returned 1 [0120.938] wcscmp (_String1="JNWDRV.dll", _String2="..") returned 1 [0120.938] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed64c2c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4ed64c2c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ec8cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll", cAlternateFileName="")) returned 1 [0120.938] wcscmp (_String1="jnwdui.dll", _String2=".") returned 1 [0120.938] wcscmp (_String1="jnwdui.dll", _String2="..") returned 1 [0120.938] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffb14d1, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4ffb14d1, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ec8cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll", cAlternateFileName="")) returned 1 [0120.938] wcscmp (_String1="jnwmon.dll", _String2=".") returned 1 [0120.938] wcscmp (_String1="jnwmon.dll", _String2="..") returned 1 [0120.938] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4db8a7a4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4db8a7a4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96ec8cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwppr.dll", cAlternateFileName="")) returned 1 [0120.938] wcscmp (_String1="jnwppr.dll", _String2=".") returned 1 [0120.938] wcscmp (_String1="jnwppr.dll", _String2="..") returned 1 [0120.938] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37947e10, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x37947e10, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x93f6be00, ftLastWriteTime.dwHighDateTime=0x1cb887a, nFileSizeHigh=0x0, nFileSizeLow=0x1b3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe", cAlternateFileName="")) returned 1 [0120.939] wcscmp (_String1="Journal.exe", _String2=".") returned 1 [0120.939] wcscmp (_String1="Journal.exe", _String2="..") returned 1 [0120.939] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x595f3d9f, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x595f3d9f, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9e2fae70, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL", cAlternateFileName="")) returned 1 [0120.939] wcscmp (_String1="MSPVWCTL.DLL", _String2=".") returned 1 [0120.939] wcscmp (_String1="MSPVWCTL.DLL", _String2="..") returned 1 [0120.939] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cf907e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x55cf907e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xa7240260, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBDoc.DLL", cAlternateFileName="")) returned 1 [0120.939] wcscmp (_String1="NBDoc.DLL", _String2=".") returned 1 [0120.939] wcscmp (_String1="NBDoc.DLL", _String2="..") returned 1 [0120.939] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27ad38, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x4b27ad38, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xa7264c50, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll", cAlternateFileName="")) returned 1 [0120.939] wcscmp (_String1="NBMapTIP.dll", _String2=".") returned 1 [0120.939] wcscmp (_String1="NBMapTIP.dll", _String2="..") returned 1 [0120.939] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51bf5953, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x51bf5953, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x6f3fb0b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe", cAlternateFileName="")) returned 1 [0120.939] wcscmp (_String1="PDIALOG.exe", _String2=".") returned 1 [0120.939] wcscmp (_String1="PDIALOG.exe", _String2="..") returned 1 [0120.939] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e66ba0, ftCreationTime.dwHighDateTime=0x1d5ac75, ftLastAccessTime.dwLowDateTime=0xf7d86260, ftLastAccessTime.dwHighDateTime=0x1d5aa95, ftLastWriteTime.dwLowDateTime=0xf7d86260, ftLastWriteTime.dwHighDateTime=0x1d5aa95, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="SPGAGE~1.EXE")) returned 1 [0120.939] wcscmp (_String1="spgagentservice.exe", _String2=".") returned 1 [0120.939] wcscmp (_String1="spgagentservice.exe", _String2="..") returned 1 [0120.939] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0120.939] wcscmp (_String1="Templates", _String2=".") returned 1 [0120.939] wcscmp (_String1="Templates", _String2="..") returned 1 [0120.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1328 [0120.940] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Windows Journal" | out: _Dest="C:\\Program Files\\Windows Journal") returned="C:\\Program Files\\Windows Journal" [0120.940] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\") returned="C:\\Program Files\\Windows Journal\\" [0120.940] wcscat (in: _Dest=0x2fe1328, _Source="Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0120.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70 [0120.941] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c472f0, ftCreationTime.dwHighDateTime=0x1d57251, ftLastAccessTime.dwLowDateTime=0x3f79f230, ftLastAccessTime.dwHighDateTime=0x1d5a8ae, ftLastWriteTime.dwLowDateTime=0x3f79f230, ftLastWriteTime.dwHighDateTime=0x1d5a8ae, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1 [0120.941] wcscmp (_String1="totalcmd.exe", _String2=".") returned 1 [0120.941] wcscmp (_String1="totalcmd.exe", _String2="..") returned 1 [0120.941] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c472f0, ftCreationTime.dwHighDateTime=0x1d57251, ftLastAccessTime.dwLowDateTime=0x3f79f230, ftLastAccessTime.dwHighDateTime=0x1d5a8ae, ftLastWriteTime.dwLowDateTime=0x3f79f230, ftLastWriteTime.dwHighDateTime=0x1d5a8ae, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 0 [0120.941] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0120.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6388) returned 1 [0120.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 Thread: id = 147 os_tid = 0x98c [0120.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e568d0 [0120.945] wcscpy (in: _Dest=0x3e568d0, _Source="C:\\Program Files\\Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0120.945] wcscat (in: _Dest=0x3e568d0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\") returned="C:\\Program Files\\Windows Mail\\" [0120.945] wcscat (in: _Dest=0x3e568d0, _Source="*" | out: _Dest="C:\\Program Files\\Windows Mail\\*") returned="C:\\Program Files\\Windows Mail\\*" [0120.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8fa466e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8fa466e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0120.945] wcscmp (_String1=".", _String2=".") returned 0 [0120.945] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9dff35d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x8fa466e0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8fa466e0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.946] wcscmp (_String1="..", _String2=".") returned 1 [0120.946] wcscmp (_String1="..", _String2="..") returned 0 [0120.946] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42408900, ftCreationTime.dwHighDateTime=0x1d59375, ftLastAccessTime.dwLowDateTime=0x1737df90, ftLastAccessTime.dwHighDateTime=0x1d58e3b, ftLastWriteTime.dwLowDateTime=0x1737df90, ftLastWriteTime.dwHighDateTime=0x1d58e3b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.exe", cAlternateFileName="CONTAI~1.EXE")) returned 1 [0120.946] wcscmp (_String1="container.exe", _String2=".") returned 1 [0120.946] wcscmp (_String1="container.exe", _String2="..") returned 1 [0120.946] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0a419b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7f0a419b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f0a419b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0120.946] wcscmp (_String1="en-US", _String2=".") returned 1 [0120.946] wcscmp (_String1="en-US", _String2="..") returned 1 [0120.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6068 [0120.946] wcscpy (in: _Dest=0x3de6068, _Source="C:\\Program Files\\Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail" [0120.946] wcscat (in: _Dest=0x3de6068, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\") returned="C:\\Program Files\\Windows Mail\\" [0120.946] wcscat (in: _Dest=0x3de6068, _Source="en-US" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US" [0120.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0120.947] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c79d2d0, ftCreationTime.dwHighDateTime=0x1d5be72, ftLastAccessTime.dwLowDateTime=0xcb162ff0, ftLastAccessTime.dwHighDateTime=0x1d58ddf, ftLastWriteTime.dwLowDateTime=0xcb162ff0, ftLastWriteTime.dwHighDateTime=0x1d58ddf, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="michelorganisationselse.exe", cAlternateFileName="MICHEL~1.EXE")) returned 1 [0120.948] wcscmp (_String1="michelorganisationselse.exe", _String2=".") returned 1 [0120.948] wcscmp (_String1="michelorganisationselse.exe", _String2="..") returned 1 [0120.948] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94146c90, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x94146c90, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf223a100, ftLastWriteTime.dwHighDateTime=0x1cb887a, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0120.948] wcscmp (_String1="msoe.dll", _String2=".") returned 1 [0120.948] wcscmp (_String1="msoe.dll", _String2="..") returned 1 [0120.948] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0120.948] wcscmp (_String1="MSOERES.dll", _String2=".") returned 1 [0120.948] wcscmp (_String1="MSOERES.dll", _String2="..") returned 1 [0120.948] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94dc6010, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x94dc6010, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0x13848d00, ftLastWriteTime.dwHighDateTime=0x1cb887b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0120.948] wcscmp (_String1="oeimport.dll", _String2=".") returned 1 [0120.948] wcscmp (_String1="oeimport.dll", _String2="..") returned 1 [0120.948] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a5a5d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x89a5a5d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xa96be800, ftLastWriteTime.dwHighDateTime=0x1cb887a, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0120.948] wcscmp (_String1="wab.exe", _String2=".") returned 1 [0120.948] wcscmp (_String1="wab.exe", _String2="..") returned 1 [0120.948] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0120.948] wcscmp (_String1="wabfind.dll", _String2=".") returned 1 [0120.948] wcscmp (_String1="wabfind.dll", _String2="..") returned 1 [0120.948] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0120.948] wcscmp (_String1="wabimp.dll", _String2=".") returned 1 [0120.948] wcscmp (_String1="wabimp.dll", _String2="..") returned 1 [0120.948] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0120.949] wcscmp (_String1="wabmig.exe", _String2=".") returned 1 [0120.949] wcscmp (_String1="wabmig.exe", _String2="..") returned 1 [0120.949] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0120.949] wcscmp (_String1="WinMail.exe", _String2=".") returned 1 [0120.949] wcscmp (_String1="WinMail.exe", _String2="..") returned 1 [0120.949] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0120.949] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0120.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0120.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e568d0) returned 1 [0120.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48c30) returned 1 Thread: id = 148 os_tid = 0x99c [0120.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e15ef8 [0120.955] wcscpy (in: _Dest=0x3e15ef8, _Source="C:\\ProgramData\\Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0120.955] wcscat (in: _Dest=0x3e15ef8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\") returned="C:\\ProgramData\\Adobe\\" [0120.955] wcscat (in: _Dest=0x3e15ef8, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\*") returned="C:\\ProgramData\\Adobe\\*" [0120.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0120.955] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0124.052] wcscmp (_String1=".", _String2=".") returned 0 [0124.052] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.052] wcscmp (_String1="..", _String2=".") returned 1 [0124.052] wcscmp (_String1="..", _String2="..") returned 0 [0124.052] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0124.052] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0124.052] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0124.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a25ce0 [0124.053] wcscpy (in: _Dest=0x7a25ce0, _Source="C:\\ProgramData\\Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe" [0124.053] wcscat (in: _Dest=0x7a25ce0, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\") returned="C:\\ProgramData\\Adobe\\" [0124.053] wcscat (in: _Dest=0x7a25ce0, _Source="Acrobat" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat" [0130.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a25ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408 [0130.935] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 0 [0130.935] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0130.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0130.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15ef8) returned 1 [0130.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e159b8) returned 1 Thread: id = 149 os_tid = 0x9ac [0120.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6388 [0120.956] wcscpy (in: _Dest=0x3de6388, _Source="C:\\ProgramData\\Application Data" | out: _Dest="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data" [0120.956] wcscat (in: _Dest=0x3de6388, _Source="\\" | out: _Dest="C:\\ProgramData\\Application Data\\") returned="C:\\ProgramData\\Application Data\\" [0120.957] wcscat (in: _Dest=0x3de6388, _Source="*" | out: _Dest="C:\\ProgramData\\Application Data\\*") returned="C:\\ProgramData\\Application Data\\*" [0120.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0120.957] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0120.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0120.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6388) returned 1 [0120.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b58) returned 1 Thread: id = 150 os_tid = 0x740 [0120.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dd0090 [0120.958] wcscpy (in: _Dest=0x3dd0090, _Source="C:\\ProgramData\\Desktop" | out: _Dest="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop" [0120.958] wcscat (in: _Dest=0x3dd0090, _Source="\\" | out: _Dest="C:\\ProgramData\\Desktop\\") returned="C:\\ProgramData\\Desktop\\" [0120.958] wcscat (in: _Dest=0x3dd0090, _Source="*" | out: _Dest="C:\\ProgramData\\Desktop\\*") returned="C:\\ProgramData\\Desktop\\*" [0120.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0120.958] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0120.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0120.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15b40) returned 1 Thread: id = 151 os_tid = 0xc8 [0120.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0090 [0120.960] wcscpy (in: _Dest=0x3dd0090, _Source="C:\\ProgramData\\Documents" | out: _Dest="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents" [0120.960] wcscat (in: _Dest=0x3dd0090, _Source="\\" | out: _Dest="C:\\ProgramData\\Documents\\") returned="C:\\ProgramData\\Documents\\" [0120.960] wcscat (in: _Dest=0x3dd0090, _Source="*" | out: _Dest="C:\\ProgramData\\Documents\\*") returned="C:\\ProgramData\\Documents\\*" [0120.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0120.960] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0120.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0120.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 [0120.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0010) returned 1 Thread: id = 152 os_tid = 0x9bc [0120.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0010 [0120.962] wcscpy (in: _Dest=0x3dd0010, _Source="C:\\ProgramData\\Favorites" | out: _Dest="C:\\ProgramData\\Favorites") returned="C:\\ProgramData\\Favorites" [0120.962] wcscat (in: _Dest=0x3dd0010, _Source="\\" | out: _Dest="C:\\ProgramData\\Favorites\\") returned="C:\\ProgramData\\Favorites\\" [0120.962] wcscat (in: _Dest=0x3dd0010, _Source="*" | out: _Dest="C:\\ProgramData\\Favorites\\*") returned="C:\\ProgramData\\Favorites\\*" [0120.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0120.962] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0120.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0120.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0010) returned 1 [0120.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfc10) returned 1 Thread: id = 153 os_tid = 0x9cc [0120.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfc10 [0120.964] wcscpy (in: _Dest=0x3dcfc10, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.964] wcscat (in: _Dest=0x3dcfc10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.964] wcscat (in: _Dest=0x3dcfc10, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\*") returned="C:\\ProgramData\\Microsoft\\*" [0120.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0120.964] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0120.965] wcscmp (_String1=".", _String2=".") returned 0 [0120.965] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.965] wcscmp (_String1="..", _String2=".") returned 1 [0120.965] wcscmp (_String1="..", _String2="..") returned 0 [0120.965] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0120.965] wcscmp (_String1="Assistance", _String2=".") returned 1 [0120.965] wcscmp (_String1="Assistance", _String2="..") returned 1 [0120.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6388 [0120.965] wcscpy (in: _Dest=0x3de6388, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.965] wcscat (in: _Dest=0x3de6388, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.965] wcscat (in: _Dest=0x3de6388, _Source="Assistance" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance" [0120.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644 [0120.967] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0120.967] wcscmp (_String1="Crypto", _String2=".") returned 1 [0120.967] wcscmp (_String1="Crypto", _String2="..") returned 1 [0120.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56888 [0120.967] wcscpy (in: _Dest=0x3e56888, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.967] wcscat (in: _Dest=0x3e56888, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.967] wcscat (in: _Dest=0x3e56888, _Source="Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0120.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e56888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68 [0120.968] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0120.968] wcscmp (_String1="Device Stage", _String2=".") returned 1 [0120.968] wcscmp (_String1="Device Stage", _String2="..") returned 1 [0120.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3dba2c8 [0120.968] wcscpy (in: _Dest=0x3dba2c8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.968] wcscat (in: _Dest=0x3dba2c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.969] wcscat (in: _Dest=0x3dba2c8, _Source="Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0120.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dba2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c [0120.970] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0120.970] wcscmp (_String1="DeviceSync", _String2=".") returned 1 [0120.970] wcscmp (_String1="DeviceSync", _String2="..") returned 1 [0120.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de61a8 [0120.970] wcscpy (in: _Dest=0x3de61a8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.970] wcscat (in: _Dest=0x3de61a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.970] wcscat (in: _Dest=0x3de61a8, _Source="DeviceSync" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync" [0120.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de61a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0 [0120.971] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0120.971] wcscmp (_String1="DRM", _String2=".") returned 1 [0120.972] wcscmp (_String1="DRM", _String2="..") returned 1 [0120.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e567f8 [0120.972] wcscpy (in: _Dest=0x3e567f8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.972] wcscat (in: _Dest=0x3e567f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.972] wcscat (in: _Dest=0x3e567f8, _Source="DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM" [0120.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e567f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48 [0120.973] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0120.973] wcscmp (_String1="eHome", _String2=".") returned 1 [0120.973] wcscmp (_String1="eHome", _String2="..") returned 1 [0120.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e56840 [0120.973] wcscpy (in: _Dest=0x3e56840, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.973] wcscat (in: _Dest=0x3e56840, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.973] wcscat (in: _Dest=0x3e56840, _Source="eHome" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome" [0120.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e56840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc [0120.974] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0120.975] wcscmp (_String1="Event Viewer", _String2=".") returned 1 [0120.975] wcscmp (_String1="Event Viewer", _String2="..") returned 1 [0120.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48c68 [0120.975] wcscpy (in: _Dest=0x3d48c68, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.975] wcscat (in: _Dest=0x3d48c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.975] wcscat (in: _Dest=0x3d48c68, _Source="Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer" [0120.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8 [0120.976] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTML Help", cAlternateFileName="HTMLHE~1")) returned 1 [0120.976] wcscmp (_String1="HTML Help", _String2=".") returned 1 [0120.976] wcscmp (_String1="HTML Help", _String2="..") returned 1 [0120.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de60b8 [0120.977] wcscpy (in: _Dest=0x3de60b8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.977] wcscat (in: _Dest=0x3de60b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.977] wcscat (in: _Dest=0x3de60b8, _Source="HTML Help" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help") returned="C:\\ProgramData\\Microsoft\\HTML Help" [0120.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de60b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c [0120.978] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0120.978] wcscmp (_String1="IdentityCRL", _String2=".") returned 1 [0120.978] wcscmp (_String1="IdentityCRL", _String2="..") returned 1 [0120.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d48d18 [0120.978] wcscpy (in: _Dest=0x3d48d18, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.978] wcscat (in: _Dest=0x3d48d18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.978] wcscat (in: _Dest=0x3d48d18, _Source="IdentityCRL" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL" [0120.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0 [0120.980] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x263aa572, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x263aa572, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x263aa572, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0120.980] wcscmp (_String1="Media Player", _String2=".") returned 1 [0120.980] wcscmp (_String1="Media Player", _String2="..") returned 1 [0120.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48a58 [0120.980] wcscpy (in: _Dest=0x3d48a58, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.980] wcscat (in: _Dest=0x3d48a58, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.980] wcscat (in: _Dest=0x3d48a58, _Source="Media Player" | out: _Dest="C:\\ProgramData\\Microsoft\\Media Player") returned="C:\\ProgramData\\Microsoft\\Media Player" [0120.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48a58) returned 1 [0120.980] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0120.980] wcscmp (_String1="MF", _String2=".") returned 1 [0120.980] wcscmp (_String1="MF", _String2="..") returned 1 [0120.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dd0090 [0120.980] wcscpy (in: _Dest=0x3dd0090, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.980] wcscat (in: _Dest=0x3dd0090, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.980] wcscat (in: _Dest=0x3dd0090, _Source="MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0120.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dd0090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x84c [0120.982] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0120.982] wcscmp (_String1="MSDN", _String2=".") returned 1 [0120.982] wcscmp (_String1="MSDN", _String2="..") returned 1 [0120.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e56720 [0120.982] wcscpy (in: _Dest=0x3e56720, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.982] wcscat (in: _Dest=0x3e56720, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.982] wcscat (in: _Dest=0x3e56720, _Source="MSDN" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN" [0120.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e56720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0120.984] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0120.984] wcscmp (_String1="NetFramework", _String2=".") returned 1 [0120.984] wcscmp (_String1="NetFramework", _String2="..") returned 1 [0120.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48a58 [0120.984] wcscpy (in: _Dest=0x3d48a58, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.984] wcscat (in: _Dest=0x3d48a58, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.984] wcscat (in: _Dest=0x3d48a58, _Source="NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework" [0120.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0120.986] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0120.986] wcscmp (_String1="Network", _String2=".") returned 1 [0120.986] wcscmp (_String1="Network", _String2="..") returned 1 [0120.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5c08 [0120.986] wcscpy (in: _Dest=0x3de5c08, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.986] wcscat (in: _Dest=0x3de5c08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.986] wcscat (in: _Dest=0x3de5c08, _Source="Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0120.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de5c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0120.988] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0120.988] wcscmp (_String1="OFFICE", _String2=".") returned 1 [0120.988] wcscmp (_String1="OFFICE", _String2="..") returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56768 [0120.988] wcscpy (in: _Dest=0x3e56768, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.988] wcscat (in: _Dest=0x3e56768, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.988] wcscat (in: _Dest=0x3e56768, _Source="OFFICE" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE" [0120.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e56768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0120.990] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0120.990] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2=".") returned 1 [0120.990] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2="..") returned 1 [0120.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6170 [0120.990] wcscpy (in: _Dest=0x3da6170, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.990] wcscat (in: _Dest=0x3da6170, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.990] wcscat (in: _Dest=0x3da6170, _Source="OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0120.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da6170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0120.991] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0120.992] wcscmp (_String1="RAC", _String2=".") returned 1 [0120.992] wcscmp (_String1="RAC", _String2="..") returned 1 [0120.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e567b0 [0120.992] wcscpy (in: _Dest=0x3e567b0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.992] wcscat (in: _Dest=0x3e567b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.992] wcscat (in: _Dest=0x3e567b0, _Source="RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0120.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e567b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0120.993] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0120.993] wcscmp (_String1="Search", _String2=".") returned 1 [0120.993] wcscmp (_String1="Search", _String2="..") returned 1 [0120.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e566d8 [0120.994] wcscpy (in: _Dest=0x3e566d8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.994] wcscat (in: _Dest=0x3e566d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.994] wcscat (in: _Dest=0x3e566d8, _Source="Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search" [0120.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e566d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0120.995] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0120.995] wcscmp (_String1="User Account Pictures", _String2=".") returned 1 [0120.995] wcscmp (_String1="User Account Pictures", _String2="..") returned 1 [0120.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edf880 [0120.995] wcscpy (in: _Dest=0x3edf880, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.995] wcscat (in: _Dest=0x3edf880, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.995] wcscat (in: _Dest=0x3edf880, _Source="User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0120.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0120.997] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0120.997] wcscmp (_String1="Vault", _String2=".") returned 1 [0120.997] wcscmp (_String1="Vault", _String2="..") returned 1 [0120.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e56690 [0120.997] wcscpy (in: _Dest=0x3e56690, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0120.997] wcscat (in: _Dest=0x3e56690, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0120.997] wcscat (in: _Dest=0x3e56690, _Source="Vault" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault" [0120.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e56690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0121.326] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0121.326] wcscmp (_String1="VISIO", _String2=".") returned 1 [0121.326] wcscmp (_String1="VISIO", _String2="..") returned 1 [0121.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e562a0 [0121.327] wcscpy (in: _Dest=0x3e562a0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0121.327] wcscat (in: _Dest=0x3e562a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0121.327] wcscat (in: _Dest=0x3e562a0, _Source="VISIO" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO") returned="C:\\ProgramData\\Microsoft\\VISIO" [0121.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e562a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0121.789] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0121.789] wcscmp (_String1="Windows", _String2=".") returned 1 [0121.789] wcscmp (_String1="Windows", _String2="..") returned 1 [0121.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e58b08 [0121.789] wcscpy (in: _Dest=0x3e58b08, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0121.789] wcscat (in: _Dest=0x3e58b08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0121.789] wcscat (in: _Dest=0x3e58b08, _Source="Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0121.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e58b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0121.790] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe2b79540, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xe2b79540, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0121.790] wcscmp (_String1="Windows Defender", _String2=".") returned 1 [0121.790] wcscmp (_String1="Windows Defender", _String2="..") returned 1 [0121.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6788 [0121.790] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0121.790] wcscat (in: _Dest=0x2fe6788, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0121.790] wcscat (in: _Dest=0x2fe6788, _Source="Windows Defender" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender") returned="C:\\ProgramData\\Microsoft\\Windows Defender" [0121.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 [0121.790] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0121.790] wcscmp (_String1="Windows NT", _String2=".") returned 1 [0121.790] wcscmp (_String1="Windows NT", _String2="..") returned 1 [0121.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e58b58 [0121.790] wcscpy (in: _Dest=0x3e58b58, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0121.790] wcscat (in: _Dest=0x3e58b58, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0121.790] wcscat (in: _Dest=0x3e58b58, _Source="Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0121.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e58b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0121.791] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0121.792] wcscmp (_String1="WwanSvc", _String2=".") returned 1 [0121.792] wcscmp (_String1="WwanSvc", _String2="..") returned 1 [0121.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e589c8 [0121.792] wcscpy (in: _Dest=0x3e589c8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft" [0121.792] wcscat (in: _Dest=0x3e589c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\" [0121.792] wcscat (in: _Dest=0x3e589c8, _Source="WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc" [0121.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e589c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0121.793] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0122.634] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0123.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0123.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfc10) returned 1 [0123.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa90) returned 1 Thread: id = 154 os_tid = 0x9dc [0121.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56528 [0121.002] wcscpy (in: _Dest=0x3e56528, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0121.002] wcscat (in: _Dest=0x3e56528, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0121.002] wcscat (in: _Dest=0x3e56528, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft Help\\*") returned="C:\\ProgramData\\Microsoft Help\\*" [0121.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0121.002] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0124.309] wcscmp (_String1=".", _String2=".") returned 0 [0124.309] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.426] wcscmp (_String1="..", _String2=".") returned 1 [0124.426] wcscmp (_String1="..", _String2="..") returned 0 [0124.426] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa5d70f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d70f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0124.426] wcscmp (_String1="Hx.hxn", _String2=".") returned 1 [0124.427] wcscmp (_String1="Hx.hxn", _String2="..") returned 1 [0124.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6a798 [0124.427] wcscpy (in: _Dest=0x3e6a798, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0124.427] wcscat (in: _Dest=0x3e6a798, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0124.427] wcscat (in: _Dest=0x3e6a798, _Source="Hx.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx.hxn") returned="C:\\ProgramData\\Microsoft Help\\Hx.hxn" [0134.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e6a798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df4 [0134.895] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1659930, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_K.HxW", cAlternateFileName="HX_103~1.HXW")) returned 1 [0134.895] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2=".") returned 1 [0134.895] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2="..") returned 1 [0134.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23b50 [0134.895] wcscpy (in: _Dest=0x7a23b50, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.896] wcscat (in: _Dest=0x7a23b50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.896] wcscat (in: _Dest=0x7a23b50, _Source="Hx_1033_MKWD_K.HxW" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW" [0134.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0134.897] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1ed4790, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_NamedURL.HxW", cAlternateFileName="HX_103~2.HXW")) returned 1 [0134.897] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2=".") returned 1 [0134.897] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2="..") returned 1 [0134.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0134.897] wcscpy (in: _Dest=0x3015058, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.897] wcscat (in: _Dest=0x3015058, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.897] wcscat (in: _Dest=0x3015058, _Source="Hx_1033_MKWD_NamedURL.HxW" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" [0134.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3015058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc [0134.898] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0fcdcb0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MTOC_Hx.HxH", cAlternateFileName="HX_103~1.HXH")) returned 1 [0134.898] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2=".") returned 1 [0134.898] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2="..") returned 1 [0134.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23ed0 [0134.898] wcscpy (in: _Dest=0x7a23ed0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.899] wcscat (in: _Dest=0x7a23ed0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.899] wcscat (in: _Dest=0x7a23ed0, _Source="Hx_1033_MTOC_Hx.HxH" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" [0134.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00 [0134.900] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe343ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe343ca50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x25a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.HxD", cAlternateFileName="HX_103~1.HXD")) returned 1 [0134.900] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2=".") returned 1 [0134.900] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2="..") returned 1 [0134.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x30151c0 [0134.900] wcscpy (in: _Dest=0x30151c0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.900] wcscat (in: _Dest=0x30151c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.900] wcscat (in: _Dest=0x30151c0, _Source="Hx_1033_MValidator.HxD" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD" [0134.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30151c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04 [0134.901] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.Lck", cAlternateFileName="HX_103~1.LCK")) returned 1 [0134.901] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2=".") returned 1 [0134.901] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2="..") returned 1 [0134.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x30153a0 [0134.901] wcscpy (in: _Dest=0x30153a0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.901] wcscat (in: _Dest=0x30153a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.902] wcscat (in: _Dest=0x30153a0, _Source="Hx_1033_MValidator.Lck" | out: _Dest="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck") returned="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck" [0134.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30153a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0134.903] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43513230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43513230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0134.903] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2=".") returned 1 [0134.903] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2="..") returned 1 [0134.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23d80 [0134.903] wcscpy (in: _Dest=0x7a23d80, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.903] wcscat (in: _Dest=0x7a23d80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.903] wcscat (in: _Dest=0x7a23d80, _Source="MS.EXCEL.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" [0134.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c [0134.905] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43539390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43539390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0134.905] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2=".") returned 1 [0134.905] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2="..") returned 1 [0134.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3015490 [0134.905] wcscpy (in: _Dest=0x3015490, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.905] wcscat (in: _Dest=0x3015490, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.905] wcscat (in: _Dest=0x3015490, _Source="MS.EXCEL.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" [0134.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3015490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10 [0134.906] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0134.906] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2=".") returned 1 [0134.906] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2="..") returned 1 [0134.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23c30 [0134.906] wcscpy (in: _Dest=0x7a23c30, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.906] wcscat (in: _Dest=0x7a23c30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.906] wcscat (in: _Dest=0x7a23c30, _Source="MS.GRAPH.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" [0134.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0134.907] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x46aa2130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x46aa2130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46bd2c30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0134.908] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2=".") returned 1 [0134.908] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2="..") returned 1 [0134.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23a00 [0134.908] wcscpy (in: _Dest=0x7a23a00, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.908] wcscat (in: _Dest=0x7a23a00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.908] wcscat (in: _Dest=0x7a23a00, _Source="MS.GROOVE.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" [0134.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0134.909] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0134.909] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2=".") returned 1 [0134.909] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2="..") returned 1 [0134.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x348f48 [0134.909] wcscpy (in: _Dest=0x348f48, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.909] wcscat (in: _Dest=0x348f48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.909] wcscat (in: _Dest=0x348f48, _Source="MS.INFOPATH.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" [0134.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x348f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0134.911] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0134.911] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2=".") returned 1 [0134.911] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2="..") returned 1 [0134.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3093960 [0134.911] wcscpy (in: _Dest=0x3093960, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.911] wcscat (in: _Dest=0x3093960, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.911] wcscat (in: _Dest=0x3093960, _Source="MS.INFOPATHEDITOR.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" [0134.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3093960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0134.913] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0134.913] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2=".") returned 1 [0134.913] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2="..") returned 1 [0134.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x349128 [0134.913] wcscpy (in: _Dest=0x349128, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.913] wcscat (in: _Dest=0x349128, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.913] wcscat (in: _Dest=0x349128, _Source="MS.MSACCESS.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" [0134.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x349128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0134.914] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0134.914] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2=".") returned 1 [0134.914] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2="..") returned 1 [0134.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3093d60 [0134.914] wcscpy (in: _Dest=0x3093d60, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.914] wcscat (in: _Dest=0x3093d60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.914] wcscat (in: _Dest=0x3093d60, _Source="MS.MSACCESS.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" [0134.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3093d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0134.916] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3639a230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3639a230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0134.916] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2=".") returned 1 [0134.916] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2="..") returned 1 [0134.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23df0 [0134.916] wcscpy (in: _Dest=0x7a23df0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.916] wcscat (in: _Dest=0x7a23df0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.916] wcscat (in: _Dest=0x7a23df0, _Source="MS.MSOUC.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" [0134.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0134.918] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0134.918] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2=".") returned 1 [0134.918] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2="..") returned 1 [0134.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23e60 [0134.918] wcscpy (in: _Dest=0x7a23e60, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.918] wcscat (in: _Dest=0x7a23e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.918] wcscat (in: _Dest=0x7a23e60, _Source="MS.MSPUB.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" [0134.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0134.920] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0134.920] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2=".") returned 1 [0134.920] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2="..") returned 1 [0134.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3490b0 [0134.920] wcscpy (in: _Dest=0x3490b0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.920] wcscat (in: _Dest=0x3490b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.920] wcscat (in: _Dest=0x3490b0, _Source="MS.MSPUB.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" [0134.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3490b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0134.922] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35f6fbb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35f6fbb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0134.922] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2=".") returned 1 [0134.922] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2="..") returned 1 [0134.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23220 [0134.922] wcscpy (in: _Dest=0x7a23220, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.922] wcscat (in: _Dest=0x7a23220, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.922] wcscat (in: _Dest=0x7a23220, _Source="MS.MSTORE.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" [0134.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0134.923] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x362dbb50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x362dbb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0134.923] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2=".") returned 1 [0134.923] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2="..") returned 1 [0134.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26238 [0134.924] wcscpy (in: _Dest=0x7a26238, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.924] wcscat (in: _Dest=0x7a26238, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.924] wcscat (in: _Dest=0x7a26238, _Source="MS.OIS.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" [0134.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0134.925] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x555fe070, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x555fe070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5564a330, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0134.925] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2=".") returned 1 [0134.925] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2="..") returned 1 [0134.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e06878 [0134.925] wcscpy (in: _Dest=0x3e06878, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.925] wcscat (in: _Dest=0x3e06878, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.925] wcscat (in: _Dest=0x3e06878, _Source="MS.ONENOTE.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" [0134.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e06878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40 [0134.927] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0134.927] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2=".") returned 1 [0134.927] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2="..") returned 1 [0134.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e06ad0 [0134.927] wcscpy (in: _Dest=0x3e06ad0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.927] wcscat (in: _Dest=0x3e06ad0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.927] wcscat (in: _Dest=0x3e06ad0, _Source="MS.OUTLOOK.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" [0134.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e06ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0134.929] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0134.929] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2=".") returned 1 [0134.929] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2="..") returned 1 [0134.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x2fc9808 [0134.929] wcscpy (in: _Dest=0x2fc9808, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.929] wcscat (in: _Dest=0x2fc9808, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.929] wcscat (in: _Dest=0x2fc9808, _Source="MS.OUTLOOK.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" [0134.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fc9808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0134.930] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e281710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0134.930] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2=".") returned 1 [0134.930] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2="..") returned 1 [0134.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fce0 [0134.930] wcscpy (in: _Dest=0x3f3fce0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0134.930] wcscat (in: _Dest=0x3f3fce0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0134.930] wcscat (in: _Dest=0x3f3fce0, _Source="MS.POWERPNT.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" [0134.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0135.992] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ec06f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0135.992] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2=".") returned 1 [0135.992] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2="..") returned 1 [0135.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da63f0 [0135.992] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0135.992] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0135.992] wcscat (in: _Dest=0x3da63f0, _Source="MS.POWERPNT.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" [0136.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da63f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1710 [0136.766] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x36327e10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x36327e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0136.766] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2=".") returned 1 [0136.766] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2="..") returned 1 [0136.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa10 [0136.766] wcscpy (in: _Dest=0x3f3fa10, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0136.766] wcscat (in: _Dest=0x3f3fa10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0136.766] wcscat (in: _Dest=0x3f3fa10, _Source="MS.SETLANG.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" [0136.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fa10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0136.771] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa723f470, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa723f470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa75852b0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0136.772] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2=".") returned 1 [0136.772] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2="..") returned 1 [0136.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23ae0 [0136.772] wcscpy (in: _Dest=0x7a23ae0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0136.772] wcscat (in: _Dest=0x7a23ae0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0136.772] wcscat (in: _Dest=0x7a23ae0, _Source="MS.VISIO.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" [0136.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0136.773] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa780ca10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0136.773] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2=".") returned 1 [0136.773] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2="..") returned 1 [0136.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f470 [0136.773] wcscpy (in: _Dest=0x3f3f470, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0136.773] wcscat (in: _Dest=0x3f3f470, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0136.773] wcscat (in: _Dest=0x3f3f470, _Source="MS.VISIO.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" [0136.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0136.774] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa79fbbf0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0136.775] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2=".") returned 1 [0136.775] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2="..") returned 1 [0136.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb93c8 [0136.775] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0136.775] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0136.775] wcscat (in: _Dest=0x3eb93c8, _Source="MS.VISIO.SHAPESHEET.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" [0136.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0136.776] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa7a21d50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0137.290] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2=".") returned 1 [0137.291] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2="..") returned 1 [0137.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dd88 [0137.291] wcscpy (in: _Dest=0x3f3dd88, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0137.291] wcscat (in: _Dest=0x3f3dd88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0137.291] wcscat (in: _Dest=0x3f3dd88, _Source="MS.VISIO_PRM.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" [0138.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0138.738] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa77281d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0138.738] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2=".") returned 1 [0138.738] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2="..") returned 1 [0138.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e3bae0 [0138.738] wcscpy (in: _Dest=0x3e3bae0, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0138.738] wcscat (in: _Dest=0x3e3bae0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0138.738] wcscat (in: _Dest=0x3e3bae0, _Source="MS.VISIO_STD.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" [0138.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3bae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0138.739] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99cf35d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0138.739] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2=".") returned 1 [0138.739] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2="..") returned 1 [0138.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b978 [0138.739] wcscpy (in: _Dest=0x3e3b978, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0138.739] wcscat (in: _Dest=0x3e3b978, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0138.739] wcscat (in: _Dest=0x3e3b978, _Source="MS.WINPROJ.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" [0138.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3b978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0138.740] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99d3f890, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0138.740] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2=".") returned 1 [0138.740] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2="..") returned 1 [0138.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47598 [0138.740] wcscpy (in: _Dest=0x3e47598, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0138.740] wcscat (in: _Dest=0x3e47598, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0138.741] wcscat (in: _Dest=0x3e47598, _Source="MS.WINPROJ.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" [0138.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0138.741] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x649ec510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0138.741] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2=".") returned 1 [0138.741] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2="..") returned 1 [0138.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3bb58 [0138.742] wcscpy (in: _Dest=0x3e3bb58, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0138.742] wcscat (in: _Dest=0x3e3bb58, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0138.742] wcscat (in: _Dest=0x3e3bb58, _Source="MS.WINWORD.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" [0138.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3bb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0138.743] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64a12670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0138.743] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2=".") returned 1 [0138.743] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2="..") returned 1 [0138.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47b98 [0138.743] wcscpy (in: _Dest=0x3e47b98, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0138.743] wcscat (in: _Dest=0x3e47b98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0138.743] wcscat (in: _Dest=0x3e47b98, _Source="MS.WINWORD.DEV.14.1033.hxn" | out: _Dest="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" [0138.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0138.744] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0138.744] wcscmp (_String1="nslist.hxl", _String2=".") returned 1 [0138.744] wcscmp (_String1="nslist.hxl", _String2="..") returned 1 [0138.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1328 [0138.744] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\ProgramData\\Microsoft Help" | out: _Dest="C:\\ProgramData\\Microsoft Help") returned="C:\\ProgramData\\Microsoft Help" [0138.744] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft Help\\") returned="C:\\ProgramData\\Microsoft Help\\" [0138.744] wcscat (in: _Dest=0x2fe1328, _Source="nslist.hxl" | out: _Dest="C:\\ProgramData\\Microsoft Help\\nslist.hxl") returned="C:\\ProgramData\\Microsoft Help\\nslist.hxl" [0138.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168 [0138.745] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0139.150] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0139.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0139.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56528) returned 1 [0139.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48ba0) returned 1 Thread: id = 155 os_tid = 0x9ec [0121.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e15b40 [0121.003] wcscpy (in: _Dest=0x3e15b40, _Source="C:\\ProgramData\\Oracle" | out: _Dest="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle" [0121.003] wcscat (in: _Dest=0x3e15b40, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\") returned="C:\\ProgramData\\Oracle\\" [0121.003] wcscat (in: _Dest=0x3e15b40, _Source="*" | out: _Dest="C:\\ProgramData\\Oracle\\*") returned="C:\\ProgramData\\Oracle\\*" [0121.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0121.004] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0124.053] wcscmp (_String1=".", _String2=".") returned 0 [0124.053] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.053] wcscmp (_String1="..", _String2=".") returned 1 [0124.053] wcscmp (_String1="..", _String2="..") returned 0 [0124.053] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0124.053] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0124.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0124.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15b40) returned 1 [0124.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x322bf0) returned 1 Thread: id = 156 os_tid = 0x9fc [0121.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e565b8 [0121.004] wcscpy (in: _Dest=0x3e565b8, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.004] wcscat (in: _Dest=0x3e565b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.004] wcscat (in: _Dest=0x3e565b8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\*") returned="C:\\ProgramData\\Package Cache\\*" [0121.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0121.004] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0121.007] wcscmp (_String1=".", _String2=".") returned 0 [0121.007] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.007] wcscmp (_String1="..", _String2=".") returned 1 [0121.007] wcscmp (_String1="..", _String2="..") returned 0 [0121.007] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="564F02E6419B9858949B0CD5A65E2C8C0944DD88", cAlternateFileName="564F02~1")) returned 1 [0121.007] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2=".") returned 1 [0121.007] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2="..") returned 1 [0121.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0121.007] wcscpy (in: _Dest=0x32d408, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.007] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.007] wcscat (in: _Dest=0x32d408, _Source="564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0121.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0121.133] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D4036846864773E3D647F421DFE7F6CA536E307B", cAlternateFileName="D40368~1")) returned 1 [0121.133] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2=".") returned 1 [0121.133] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2="..") returned 1 [0121.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d538 [0121.133] wcscpy (in: _Dest=0x32d538, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.133] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.133] wcscat (in: _Dest=0x32d538, _Source="D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0121.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0121.135] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0121.135] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2=".") returned 1 [0121.135] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2="..") returned 1 [0121.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3054050 [0121.136] wcscpy (in: _Dest=0x3054050, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.136] wcscat (in: _Dest=0x3054050, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.136] wcscat (in: _Dest=0x3054050, _Source="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0121.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3054050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0121.139] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0121.139] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2=".") returned 1 [0121.139] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2="..") returned 1 [0121.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df19e8 [0121.139] wcscpy (in: _Dest=0x3df19e8, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.139] wcscat (in: _Dest=0x3df19e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.139] wcscat (in: _Dest=0x3df19e8, _Source="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0121.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df19e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0121.141] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0121.141] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2=".") returned 1 [0121.141] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2="..") returned 1 [0121.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053f00 [0121.141] wcscpy (in: _Dest=0x3053f00, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.141] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.141] wcscat (in: _Dest=0x3053f00, _Source="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0121.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0121.143] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0121.143] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2=".") returned 1 [0121.143] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2="..") returned 1 [0121.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x30539c0 [0121.143] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.143] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.144] wcscat (in: _Dest=0x30539c0, _Source="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0121.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30539c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0121.145] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0121.145] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2=".") returned 1 [0121.145] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2="..") returned 1 [0121.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053918 [0121.146] wcscpy (in: _Dest=0x3053918, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.146] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.146] wcscat (in: _Dest=0x3053918, _Source="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0121.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0121.148] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0121.148] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2=".") returned 1 [0121.148] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2="..") returned 1 [0121.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053a68 [0121.148] wcscpy (in: _Dest=0x3053a68, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.148] wcscat (in: _Dest=0x3053a68, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.148] wcscat (in: _Dest=0x3053a68, _Source="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0121.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0121.150] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0121.150] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2=".") returned 1 [0121.150] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2="..") returned 1 [0121.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1b98 [0121.150] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.150] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.150] wcscat (in: _Dest=0x3df1b98, _Source="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0121.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df1b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0121.153] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0121.153] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2=".") returned 1 [0121.153] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2="..") returned 1 [0121.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1c28 [0121.153] wcscpy (in: _Dest=0x3df1c28, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.153] wcscat (in: _Dest=0x3df1c28, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.153] wcscat (in: _Dest=0x3df1c28, _Source="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0121.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df1c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0121.154] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0121.155] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2=".") returned 1 [0121.155] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2="..") returned 1 [0121.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053c60 [0121.155] wcscpy (in: _Dest=0x3053c60, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache" [0121.155] wcscat (in: _Dest=0x3053c60, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\" [0121.155] wcscat (in: _Dest=0x3053c60, _Source="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0121.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0121.157] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0121.157] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0121.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0121.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e565b8) returned 1 [0121.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e560f0) returned 1 Thread: id = 157 os_tid = 0xa0c [0121.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcfb10 [0121.008] wcscpy (in: _Dest=0x3dcfb10, _Source="C:\\ProgramData\\Start Menu" | out: _Dest="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu" [0121.008] wcscat (in: _Dest=0x3dcfb10, _Source="\\" | out: _Dest="C:\\ProgramData\\Start Menu\\") returned="C:\\ProgramData\\Start Menu\\" [0121.008] wcscat (in: _Dest=0x3dcfb10, _Source="*" | out: _Dest="C:\\ProgramData\\Start Menu\\*") returned="C:\\ProgramData\\Start Menu\\*" [0121.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0121.008] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0121.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfb10) returned 1 [0121.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcff90) returned 1 Thread: id = 158 os_tid = 0xa1c [0121.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e160b8 [0121.009] wcscpy (in: _Dest=0x3e160b8, _Source="C:\\ProgramData\\Sun" | out: _Dest="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun" [0121.009] wcscat (in: _Dest=0x3e160b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\") returned="C:\\ProgramData\\Sun\\" [0121.009] wcscat (in: _Dest=0x3e160b8, _Source="*" | out: _Dest="C:\\ProgramData\\Sun\\*") returned="C:\\ProgramData\\Sun\\*" [0121.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0121.009] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc80 [0124.535] wcscmp (_String1=".", _String2=".") returned 0 [0124.535] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.536] wcscmp (_String1="..", _String2=".") returned 1 [0124.536] wcscmp (_String1="..", _String2="..") returned 0 [0124.536] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0124.536] wcscmp (_String1="Java", _String2=".") returned 1 [0124.536] wcscmp (_String1="Java", _String2="..") returned 1 [0124.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79218 [0124.536] wcscpy (in: _Dest=0x3e79218, _Source="C:\\ProgramData\\Sun" | out: _Dest="C:\\ProgramData\\Sun") returned="C:\\ProgramData\\Sun" [0124.536] wcscat (in: _Dest=0x3e79218, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\") returned="C:\\ProgramData\\Sun\\" [0124.536] wcscat (in: _Dest=0x3e79218, _Source="Java" | out: _Dest="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java" [0126.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e79218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0126.919] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0126.919] FindClose (in: hFindFile=0x7a2dc80 | out: hFindFile=0x7a2dc80) returned 1 [0126.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0126.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e160b8) returned 1 [0126.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3cf0) returned 1 Thread: id = 159 os_tid = 0xa2c [0121.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfad0 [0121.015] wcscpy (in: _Dest=0x3dcfad0, _Source="C:\\ProgramData\\Templates" | out: _Dest="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates" [0121.015] wcscat (in: _Dest=0x3dcfad0, _Source="\\" | out: _Dest="C:\\ProgramData\\Templates\\") returned="C:\\ProgramData\\Templates\\" [0121.015] wcscat (in: _Dest=0x3dcfad0, _Source="*" | out: _Dest="C:\\ProgramData\\Templates\\*") returned="C:\\ProgramData\\Templates\\*" [0121.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0121.015] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0121.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfad0) returned 1 [0121.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfa50) returned 1 Thread: id = 160 os_tid = 0xa3c [0121.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e15f68 [0121.019] wcscpy (in: _Dest=0x3e15f68, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0121.019] wcscat (in: _Dest=0x3e15f68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0121.019] wcscat (in: _Dest=0x3e15f68, _Source="*" | out: _Dest="C:\\Users\\All Users\\*") returned="C:\\Users\\All Users\\*" [0121.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0121.019] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf790 [0123.381] wcscmp (_String1=".", _String2=".") returned 0 [0123.381] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.975] wcscmp (_String1="..", _String2=".") returned 1 [0123.975] wcscmp (_String1="..", _String2="..") returned 0 [0123.976] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0123.976] wcscmp (_String1="Adobe", _String2=".") returned 1 [0123.976] wcscmp (_String1="Adobe", _String2="..") returned 1 [0123.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dd0010 [0123.976] wcscpy (in: _Dest=0x3dd0010, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0123.976] wcscat (in: _Dest=0x3dd0010, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0123.976] wcscat (in: _Dest=0x3dd0010, _Source="Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe" [0132.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dd0010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4 [0132.283] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0132.283] wcscmp (_String1="Application Data", _String2=".") returned 1 [0132.283] wcscmp (_String1="Application Data", _String2="..") returned 1 [0132.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e842b8 [0132.283] wcscpy (in: _Dest=0x3e842b8, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.283] wcscat (in: _Dest=0x3e842b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.283] wcscat (in: _Dest=0x3e842b8, _Source="Application Data" | out: _Dest="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data" [0132.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e842b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0132.285] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0132.285] wcscmp (_String1="Desktop", _String2=".") returned 1 [0132.286] wcscmp (_String1="Desktop", _String2="..") returned 1 [0132.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf950 [0132.286] wcscpy (in: _Dest=0x3dcf950, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.286] wcscat (in: _Dest=0x3dcf950, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.286] wcscat (in: _Dest=0x3dcf950, _Source="Desktop" | out: _Dest="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop" [0132.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0132.287] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0132.287] wcscmp (_String1="Documents", _String2=".") returned 1 [0132.287] wcscmp (_String1="Documents", _String2="..") returned 1 [0132.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07a88 [0132.287] wcscpy (in: _Dest=0x3e07a88, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.287] wcscat (in: _Dest=0x3e07a88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.288] wcscat (in: _Dest=0x3e07a88, _Source="Documents" | out: _Dest="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents" [0132.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e07a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0132.289] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176ab55d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176ab55d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176ab55d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0132.289] wcscmp (_String1="Favorites", _String2=".") returned 1 [0132.289] wcscmp (_String1="Favorites", _String2="..") returned 1 [0132.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07968 [0132.289] wcscpy (in: _Dest=0x3e07968, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.289] wcscat (in: _Dest=0x3e07968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.289] wcscat (in: _Dest=0x3e07968, _Source="Favorites" | out: _Dest="C:\\Users\\All Users\\Favorites") returned="C:\\Users\\All Users\\Favorites" [0132.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e07968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0132.290] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0132.290] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0132.290] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0132.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07ad0 [0132.290] wcscpy (in: _Dest=0x3e07ad0, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.290] wcscat (in: _Dest=0x3e07ad0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.290] wcscat (in: _Dest=0x3e07ad0, _Source="Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0132.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e07ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0132.292] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0132.292] wcscmp (_String1="Microsoft Help", _String2=".") returned 1 [0132.292] wcscmp (_String1="Microsoft Help", _String2="..") returned 1 [0132.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e849e8 [0132.292] wcscpy (in: _Dest=0x3e849e8, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.292] wcscat (in: _Dest=0x3e849e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.292] wcscat (in: _Dest=0x3e849e8, _Source="Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0132.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e849e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0132.294] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x74b72710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x74b72710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x74b72710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0132.294] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0132.294] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0132.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad7170 [0132.294] wcscpy (in: _Dest=0x7ad7170, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.294] wcscat (in: _Dest=0x7ad7170, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.294] wcscat (in: _Dest=0x7ad7170, _Source="Mozilla" | out: _Dest="C:\\Users\\All Users\\Mozilla") returned="C:\\Users\\All Users\\Mozilla" [0132.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7170) returned 1 [0132.294] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0132.294] wcscmp (_String1="Oracle", _String2=".") returned 1 [0132.294] wcscmp (_String1="Oracle", _String2="..") returned 1 [0132.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7ad7170 [0132.294] wcscpy (in: _Dest=0x7ad7170, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.294] wcscat (in: _Dest=0x7ad7170, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.294] wcscat (in: _Dest=0x7ad7170, _Source="Oracle" | out: _Dest="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle" [0132.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad7170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0132.321] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0132.321] wcscmp (_String1="Package Cache", _String2=".") returned 1 [0132.321] wcscmp (_String1="Package Cache", _String2="..") returned 1 [0132.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84128 [0132.321] wcscpy (in: _Dest=0x3e84128, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.321] wcscat (in: _Dest=0x3e84128, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.321] wcscat (in: _Dest=0x3e84128, _Source="Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0132.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e84128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88 [0132.323] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0132.323] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0132.323] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0132.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e08778 [0132.323] wcscpy (in: _Dest=0x3e08778, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.323] wcscat (in: _Dest=0x3e08778, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.323] wcscat (in: _Dest=0x3e08778, _Source="Start Menu" | out: _Dest="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu" [0132.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e08778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0132.325] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0132.325] wcscmp (_String1="Sun", _String2=".") returned 1 [0132.325] wcscmp (_String1="Sun", _String2="..") returned 1 [0132.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x30b9058 [0132.325] wcscpy (in: _Dest=0x30b9058, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.325] wcscat (in: _Dest=0x30b9058, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.325] wcscat (in: _Dest=0x30b9058, _Source="Sun" | out: _Dest="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun" [0132.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30b9058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0132.326] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0132.326] wcscmp (_String1="Templates", _String2=".") returned 1 [0132.326] wcscmp (_String1="Templates", _String2="..") returned 1 [0132.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07fe0 [0132.326] wcscpy (in: _Dest=0x3e07fe0, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users" [0132.326] wcscat (in: _Dest=0x3e07fe0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\" [0132.326] wcscat (in: _Dest=0x3e07fe0, _Source="Templates" | out: _Dest="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates" [0132.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e07fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0132.328] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0132.328] FindClose (in: hFindFile=0x3dcf790 | out: hFindFile=0x3dcf790) returned 1 [0132.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0132.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15f68) returned 1 [0132.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db37b0) returned 1 Thread: id = 161 os_tid = 0xa4c [0121.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3ed0 [0121.020] wcscpy (in: _Dest=0x3db3ed0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.020] wcscat (in: _Dest=0x3db3ed0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.021] wcscat (in: _Dest=0x3db3ed0, _Source="*" | out: _Dest="C:\\Users\\Default\\*") returned="C:\\Users\\Default\\*" [0121.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0121.021] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x6bd02b0, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfbd0 [0121.021] wcscmp (_String1=".", _String2=".") returned 0 [0121.021] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x6bd02b0, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.021] wcscmp (_String1="..", _String2=".") returned 1 [0121.021] wcscmp (_String1="..", _String2="..") returned 0 [0121.021] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0121.021] wcscmp (_String1="AppData", _String2=".") returned 1 [0121.021] wcscmp (_String1="AppData", _String2="..") returned 1 [0121.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf990 [0121.021] wcscpy (in: _Dest=0x3dcf990, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.021] wcscat (in: _Dest=0x3dcf990, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.022] wcscat (in: _Dest=0x3dcf990, _Source="AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0121.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0121.291] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175c6d1c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175c6d1c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175c6d1c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0121.291] wcscmp (_String1="Application Data", _String2=".") returned 1 [0121.291] wcscmp (_String1="Application Data", _String2="..") returned 1 [0121.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6928 [0121.291] wcscpy (in: _Dest=0x3de6928, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.291] wcscat (in: _Dest=0x3de6928, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.291] wcscat (in: _Dest=0x3de6928, _Source="Application Data" | out: _Dest="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data" [0121.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0121.292] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0121.292] wcscmp (_String1="Contacts", _String2=".") returned 1 [0121.292] wcscmp (_String1="Contacts", _String2="..") returned 1 [0121.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0110 [0121.292] wcscpy (in: _Dest=0x3dd0110, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.292] wcscat (in: _Dest=0x3dd0110, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.293] wcscat (in: _Dest=0x3dd0110, _Source="Contacts" | out: _Dest="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts" [0121.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dd0110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0121.294] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0121.294] wcscmp (_String1="Cookies", _String2=".") returned 1 [0121.294] wcscmp (_String1="Cookies", _String2="..") returned 1 [0121.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf9d0 [0121.294] wcscpy (in: _Dest=0x3dcf9d0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.294] wcscat (in: _Dest=0x3dcf9d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.294] wcscat (in: _Dest=0x3dcf9d0, _Source="Cookies" | out: _Dest="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies" [0121.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0121.296] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0121.296] wcscmp (_String1="Desktop", _String2=".") returned 1 [0121.296] wcscmp (_String1="Desktop", _String2="..") returned 1 [0121.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf690 [0121.296] wcscpy (in: _Dest=0x3dcf690, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.296] wcscat (in: _Dest=0x3dcf690, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.296] wcscat (in: _Dest=0x3dcf690, _Source="Desktop" | out: _Dest="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop" [0121.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0121.298] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0121.298] wcscmp (_String1="Documents", _String2=".") returned 1 [0121.298] wcscmp (_String1="Documents", _String2="..") returned 1 [0121.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcfb90 [0121.298] wcscpy (in: _Dest=0x3dcfb90, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.298] wcscat (in: _Dest=0x3dcfb90, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.298] wcscat (in: _Dest=0x3dcfb90, _Source="Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0121.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcfb90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0121.300] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0121.300] wcscmp (_String1="Downloads", _String2=".") returned 1 [0121.300] wcscmp (_String1="Downloads", _String2="..") returned 1 [0121.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf650 [0121.300] wcscpy (in: _Dest=0x3dcf650, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.300] wcscat (in: _Dest=0x3dcf650, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.300] wcscat (in: _Dest=0x3dcf650, _Source="Downloads" | out: _Dest="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads" [0121.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0121.302] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0121.302] wcscmp (_String1="Favorites", _String2=".") returned 1 [0121.302] wcscmp (_String1="Favorites", _String2="..") returned 1 [0121.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf790 [0121.302] wcscpy (in: _Dest=0x3dcf790, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.302] wcscat (in: _Dest=0x3dcf790, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.302] wcscat (in: _Dest=0x3dcf790, _Source="Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0121.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0121.304] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0121.304] wcscmp (_String1="Links", _String2=".") returned 1 [0121.304] wcscmp (_String1="Links", _String2="..") returned 1 [0121.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e791a8 [0121.304] wcscpy (in: _Dest=0x3e791a8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.304] wcscat (in: _Dest=0x3e791a8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.304] wcscat (in: _Dest=0x3e791a8, _Source="Links" | out: _Dest="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links" [0121.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e791a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0121.306] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0121.306] wcscmp (_String1="Local Settings", _String2=".") returned 1 [0121.306] wcscmp (_String1="Local Settings", _String2="..") returned 1 [0121.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55c28 [0121.306] wcscpy (in: _Dest=0x3e55c28, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.306] wcscat (in: _Dest=0x3e55c28, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.306] wcscat (in: _Dest=0x3e55c28, _Source="Local Settings" | out: _Dest="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings" [0121.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e55c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0121.308] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0121.308] wcscmp (_String1="Music", _String2=".") returned 1 [0121.308] wcscmp (_String1="Music", _String2="..") returned 1 [0121.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79020 [0121.308] wcscpy (in: _Dest=0x3e79020, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.308] wcscat (in: _Dest=0x3e79020, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.308] wcscat (in: _Dest=0x3e79020, _Source="Music" | out: _Dest="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music" [0121.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e79020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0121.310] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0121.310] wcscmp (_String1="My Documents", _String2=".") returned 1 [0121.310] wcscmp (_String1="My Documents", _String2="..") returned 1 [0121.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e55dd8 [0121.310] wcscpy (in: _Dest=0x3e55dd8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.310] wcscat (in: _Dest=0x3e55dd8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.311] wcscat (in: _Dest=0x3e55dd8, _Source="My Documents" | out: _Dest="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents" [0121.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e55dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0121.312] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0121.312] wcscmp (_String1="NetHood", _String2=".") returned 1 [0121.312] wcscmp (_String1="NetHood", _String2="..") returned 1 [0121.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf8d0 [0121.313] wcscpy (in: _Dest=0x3dcf8d0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.313] wcscat (in: _Dest=0x3dcf8d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.313] wcscat (in: _Dest=0x3dcf8d0, _Source="NetHood" | out: _Dest="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood" [0121.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0121.314] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4ef6cd7a, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0xe87815c0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0x7b6f310, ftLastWriteTime.dwHighDateTime=0x1d2da0d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0121.314] wcscmp (_String1="NTUSER.DAT", _String2=".") returned 1 [0121.314] wcscmp (_String1="NTUSER.DAT", _String2="..") returned 1 [0121.315] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4c6063a4, ftCreationTime.dwHighDateTime=0x1ca0453, ftLastAccessTime.dwLowDateTime=0x82363a0a, ftLastAccessTime.dwHighDateTime=0x1ca0458, ftLastWriteTime.dwLowDateTime=0x82389c62, ftLastWriteTime.dwHighDateTime=0x1ca0458, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1 [0121.315] wcscmp (_String1="NTUSER.DAT.LOG", _String2=".") returned 1 [0121.315] wcscmp (_String1="NTUSER.DAT.LOG", _String2="..") returned 1 [0121.315] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4ef6cd7a, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x4ef6cd7a, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xe862a960, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x30400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0121.315] wcscmp (_String1="NTUSER.DAT.LOG1", _String2=".") returned 1 [0121.315] wcscmp (_String1="NTUSER.DAT.LOG1", _String2="..") returned 1 [0121.315] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4ef6cd7a, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x4ef6cd7a, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x4ef6cd7a, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0121.315] wcscmp (_String1="NTUSER.DAT.LOG2", _String2=".") returned 1 [0121.315] wcscmp (_String1="NTUSER.DAT.LOG2", _String2="..") returned 1 [0121.315] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5bbcea65, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0x5bbcea65, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x5bfd2f8c, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0121.315] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2=".") returned 1 [0121.315] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2="..") returned 1 [0121.315] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5bc8d146, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0x5bc8d146, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x5bface2c, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0121.315] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2=".") returned 1 [0121.316] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2="..") returned 1 [0121.316] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5bd71988, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0x5bd71988, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x5bfd2f8c, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0121.316] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2=".") returned 1 [0121.316] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2="..") returned 1 [0121.316] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6baa150, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0121.316] wcscmp (_String1="ntuser.ini", _String2=".") returned 1 [0121.316] wcscmp (_String1="ntuser.ini", _String2="..") returned 1 [0121.316] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0121.316] wcscmp (_String1="Pictures", _String2=".") returned 1 [0121.316] wcscmp (_String1="Pictures", _String2="..") returned 1 [0121.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067180 [0121.316] wcscpy (in: _Dest=0x3067180, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.316] wcscat (in: _Dest=0x3067180, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.316] wcscat (in: _Dest=0x3067180, _Source="Pictures" | out: _Dest="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures" [0121.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3067180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0121.318] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0121.318] wcscmp (_String1="PrintHood", _String2=".") returned 1 [0121.318] wcscmp (_String1="PrintHood", _String2="..") returned 1 [0121.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067080 [0121.319] wcscpy (in: _Dest=0x3067080, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.319] wcscat (in: _Dest=0x3067080, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.319] wcscat (in: _Dest=0x3067080, _Source="PrintHood" | out: _Dest="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood" [0121.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3067080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0121.320] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0121.320] wcscmp (_String1="Recent", _String2=".") returned 1 [0121.320] wcscmp (_String1="Recent", _String2="..") returned 1 [0121.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78e60 [0121.321] wcscpy (in: _Dest=0x3e78e60, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.321] wcscat (in: _Dest=0x3e78e60, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.321] wcscat (in: _Dest=0x3e78e60, _Source="Recent" | out: _Dest="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent" [0121.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e78e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0121.322] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0121.322] wcscmp (_String1="Saved Games", _String2=".") returned 1 [0121.322] wcscmp (_String1="Saved Games", _String2="..") returned 1 [0121.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e56210 [0121.323] wcscpy (in: _Dest=0x3e56210, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.323] wcscat (in: _Dest=0x3e56210, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.323] wcscat (in: _Dest=0x3e56210, _Source="Saved Games" | out: _Dest="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games" [0121.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e56210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0121.324] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0121.324] wcscmp (_String1="Searches", _String2=".") returned 1 [0121.324] wcscmp (_String1="Searches", _String2="..") returned 1 [0121.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x30671c0 [0121.325] wcscpy (in: _Dest=0x30671c0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.325] wcscat (in: _Dest=0x30671c0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.325] wcscat (in: _Dest=0x30671c0, _Source="Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0121.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30671c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0121.633] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175ece7c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175ece7c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175ece7c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0121.633] wcscmp (_String1="SendTo", _String2=".") returned 1 [0121.633] wcscmp (_String1="SendTo", _String2="..") returned 1 [0121.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79138 [0121.633] wcscpy (in: _Dest=0x3e79138, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.633] wcscat (in: _Dest=0x3e79138, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.633] wcscat (in: _Dest=0x3e79138, _Source="SendTo" | out: _Dest="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo" [0121.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e79138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0121.898] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x17612fdc, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x17612fdc, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x17612fdc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0121.898] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0121.898] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0121.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066b40 [0121.898] wcscpy (in: _Dest=0x3066b40, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.899] wcscat (in: _Dest=0x3066b40, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.899] wcscat (in: _Dest=0x3066b40, _Source="Start Menu" | out: _Dest="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu" [0121.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3066b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0121.900] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0121.900] wcscmp (_String1="Templates", _String2=".") returned 1 [0121.900] wcscmp (_String1="Templates", _String2="..") returned 1 [0121.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066f40 [0121.900] wcscpy (in: _Dest=0x3066f40, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.900] wcscat (in: _Dest=0x3066f40, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.900] wcscat (in: _Dest=0x3066f40, _Source="Templates" | out: _Dest="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates" [0121.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3066f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0121.901] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0121.902] wcscmp (_String1="Videos", _String2=".") returned 1 [0121.902] wcscmp (_String1="Videos", _String2="..") returned 1 [0121.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79250 [0121.902] wcscpy (in: _Dest=0x3e79250, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default" [0121.902] wcscat (in: _Dest=0x3e79250, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\" [0121.902] wcscat (in: _Dest=0x3e79250, _Source="Videos" | out: _Dest="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos" [0121.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e79250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0121.903] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0121.903] FindClose (in: hFindFile=0x3dcfbd0 | out: hFindFile=0x3dcfbd0) returned 1 [0121.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0121.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3ed0) returned 1 [0121.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3180) returned 1 Thread: id = 162 os_tid = 0xa5c [0121.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e799c0 [0121.022] wcscpy (in: _Dest=0x3e799c0, _Source="C:\\Users\\Default User" | out: _Dest="C:\\Users\\Default User") returned="C:\\Users\\Default User" [0121.022] wcscat (in: _Dest=0x3e799c0, _Source="\\" | out: _Dest="C:\\Users\\Default User\\") returned="C:\\Users\\Default User\\" [0121.022] wcscat (in: _Dest=0x3e799c0, _Source="*" | out: _Dest="C:\\Users\\Default User\\*") returned="C:\\Users\\Default User\\*" [0121.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0121.022] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0121.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e799c0) returned 1 [0121.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 Thread: id = 163 os_tid = 0xa6c [0121.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db36f0 [0121.024] wcscpy (in: _Dest=0x3db36f0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.024] wcscat (in: _Dest=0x3db36f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.024] wcscat (in: _Dest=0x3db36f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\*") returned="C:\\Users\\EEBsYm5\\*" [0121.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0121.024] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf950 [0121.024] wcscmp (_String1=".", _String2=".") returned 0 [0121.024] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dda350, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.025] wcscmp (_String1="..", _String2=".") returned 1 [0121.025] wcscmp (_String1="..", _String2="..") returned 0 [0121.025] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0121.025] wcscmp (_String1="AppData", _String2=".") returned 1 [0121.025] wcscmp (_String1="AppData", _String2="..") returned 1 [0121.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf910 [0121.025] wcscpy (in: _Dest=0x3dcf910, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.025] wcscat (in: _Dest=0x3dcf910, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.025] wcscat (in: _Dest=0x3dcf910, _Source="AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0121.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0121.597] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0121.597] wcscmp (_String1="Application Data", _String2=".") returned 1 [0121.597] wcscmp (_String1="Application Data", _String2="..") returned 1 [0121.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de5e88 [0121.597] wcscpy (in: _Dest=0x3de5e88, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.597] wcscat (in: _Dest=0x3de5e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.597] wcscat (in: _Dest=0x3de5e88, _Source="Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data") returned="C:\\Users\\EEBsYm5\\Application Data" [0121.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0121.598] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0121.598] wcscmp (_String1="Contacts", _String2=".") returned 1 [0121.598] wcscmp (_String1="Contacts", _String2="..") returned 1 [0121.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcf7d0 [0121.598] wcscpy (in: _Dest=0x3dcf7d0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.598] wcscat (in: _Dest=0x3dcf7d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.599] wcscat (in: _Dest=0x3dcf7d0, _Source="Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0121.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0121.600] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0121.600] wcscmp (_String1="Cookies", _String2=".") returned 1 [0121.600] wcscmp (_String1="Cookies", _String2="..") returned 1 [0121.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e734f0 [0121.600] wcscpy (in: _Dest=0x3e734f0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.600] wcscat (in: _Dest=0x3e734f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.600] wcscat (in: _Dest=0x3e734f0, _Source="Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies") returned="C:\\Users\\EEBsYm5\\Cookies" [0121.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e734f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0121.601] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xc2308e80, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc2308e80, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0121.602] wcscmp (_String1="Desktop", _String2=".") returned 1 [0121.602] wcscmp (_String1="Desktop", _String2="..") returned 1 [0121.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e73730 [0121.602] wcscpy (in: _Dest=0x3e73730, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.602] wcscat (in: _Dest=0x3e73730, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.602] wcscat (in: _Dest=0x3e73730, _Source="Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e73730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1224 [0121.603] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f2b00c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f2b00c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0121.603] wcscmp (_String1="Documents", _String2=".") returned 1 [0121.603] wcscmp (_String1="Documents", _String2="..") returned 1 [0121.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73830 [0121.603] wcscpy (in: _Dest=0x3e73830, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.603] wcscat (in: _Dest=0x3e73830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.603] wcscat (in: _Dest=0x3e73830, _Source="Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0121.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e73830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0121.605] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xcb798a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0121.605] wcscmp (_String1="Downloads", _String2=".") returned 1 [0121.605] wcscmp (_String1="Downloads", _String2="..") returned 1 [0121.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73d30 [0121.605] wcscpy (in: _Dest=0x3e73d30, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.605] wcscat (in: _Dest=0x3e73d30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.605] wcscat (in: _Dest=0x3e73d30, _Source="Downloads" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads") returned="C:\\Users\\EEBsYm5\\Downloads" [0121.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e73d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0121.606] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0121.606] wcscmp (_String1="Favorites", _String2=".") returned 1 [0121.607] wcscmp (_String1="Favorites", _String2="..") returned 1 [0121.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73cb0 [0121.607] wcscpy (in: _Dest=0x3e73cb0, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.607] wcscat (in: _Dest=0x3e73cb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.607] wcscat (in: _Dest=0x3e73cb0, _Source="Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0121.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e73cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0121.608] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0121.608] wcscmp (_String1="Links", _String2=".") returned 1 [0121.608] wcscmp (_String1="Links", _String2="..") returned 1 [0121.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e78e60 [0121.608] wcscpy (in: _Dest=0x3e78e60, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.608] wcscat (in: _Dest=0x3e78e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.608] wcscat (in: _Dest=0x3e78e60, _Source="Links" | out: _Dest="C:\\Users\\EEBsYm5\\Links") returned="C:\\Users\\EEBsYm5\\Links" [0121.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e78e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234 [0121.610] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0121.610] wcscmp (_String1="Local Settings", _String2=".") returned 1 [0121.610] wcscmp (_String1="Local Settings", _String2="..") returned 1 [0121.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56498 [0121.610] wcscpy (in: _Dest=0x3e56498, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.610] wcscat (in: _Dest=0x3e56498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.610] wcscat (in: _Dest=0x3e56498, _Source="Local Settings" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings") returned="C:\\Users\\EEBsYm5\\Local Settings" [0121.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e56498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0121.611] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f36e7a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f36e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0121.611] wcscmp (_String1="Music", _String2=".") returned 1 [0121.611] wcscmp (_String1="Music", _String2="..") returned 1 [0121.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79218 [0121.611] wcscpy (in: _Dest=0x3e79218, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.611] wcscat (in: _Dest=0x3e79218, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.611] wcscat (in: _Dest=0x3e79218, _Source="Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0121.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e79218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0121.613] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0121.613] wcscmp (_String1="My Documents", _String2=".") returned 1 [0121.613] wcscmp (_String1="My Documents", _String2="..") returned 1 [0121.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e55dd8 [0121.613] wcscpy (in: _Dest=0x3e55dd8, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.613] wcscat (in: _Dest=0x3e55dd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.613] wcscat (in: _Dest=0x3e55dd8, _Source="My Documents" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents") returned="C:\\Users\\EEBsYm5\\My Documents" [0121.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e55dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0121.614] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0121.614] wcscmp (_String1="NetHood", _String2=".") returned 1 [0121.614] wcscmp (_String1="NetHood", _String2="..") returned 1 [0121.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x2fc8688 [0121.614] wcscpy (in: _Dest=0x2fc8688, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.614] wcscat (in: _Dest=0x2fc8688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.614] wcscat (in: _Dest=0x2fc8688, _Source="NetHood" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood") returned="C:\\Users\\EEBsYm5\\NetHood" [0121.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fc8688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0121.615] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8e4c770, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x4a55c980, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x4a55c980, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0121.615] wcscmp (_String1="NTUSER.DAT", _String2=".") returned 1 [0121.615] wcscmp (_String1="NTUSER.DAT", _String2="..") returned 1 [0121.615] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x90fa030, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x90fa030, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x4a5106c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0121.615] wcscmp (_String1="ntuser.dat.LOG1", _String2=".") returned 1 [0121.615] wcscmp (_String1="ntuser.dat.LOG1", _String2="..") returned 1 [0121.615] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9120190, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0121.615] wcscmp (_String1="ntuser.dat.LOG2", _String2=".") returned 1 [0121.615] wcscmp (_String1="ntuser.dat.LOG2", _String2="..") returned 1 [0121.615] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27f942d0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0121.616] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2=".") returned 1 [0121.616] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf", _String2="..") returned 1 [0121.616] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27f6e170, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0121.616] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2=".") returned 1 [0121.616] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms", _String2="..") returned 1 [0121.616] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9120190, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9120190, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27f942d0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0121.616] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2=".") returned 1 [0121.616] wcscmp (_String1="NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms", _String2="..") returned 1 [0121.616] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x8e4c770, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e4c770, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0121.616] wcscmp (_String1="ntuser.ini", _String2=".") returned 1 [0121.616] wcscmp (_String1="ntuser.ini", _String2="..") returned 1 [0121.616] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f5f5f00, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f5f5f00, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0121.616] wcscmp (_String1="Pictures", _String2=".") returned 1 [0121.616] wcscmp (_String1="Pictures", _String2="..") returned 1 [0121.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x2fc87c8 [0121.616] wcscpy (in: _Dest=0x2fc87c8, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.616] wcscat (in: _Dest=0x2fc87c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.616] wcscat (in: _Dest=0x2fc87c8, _Source="Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0121.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fc87c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228 [0121.617] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0121.617] wcscmp (_String1="PrintHood", _String2=".") returned 1 [0121.617] wcscmp (_String1="PrintHood", _String2="..") returned 1 [0121.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x2fc8d88 [0121.617] wcscpy (in: _Dest=0x2fc8d88, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.618] wcscat (in: _Dest=0x2fc8d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.618] wcscat (in: _Dest=0x2fc8d88, _Source="PrintHood" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood") returned="C:\\Users\\EEBsYm5\\PrintHood" [0121.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fc8d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0121.619] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0121.619] wcscmp (_String1="Recent", _String2=".") returned 1 [0121.619] wcscmp (_String1="Recent", _String2="..") returned 1 [0121.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79448 [0121.619] wcscpy (in: _Dest=0x3e79448, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.619] wcscat (in: _Dest=0x3e79448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.619] wcscat (in: _Dest=0x3e79448, _Source="Recent" | out: _Dest="C:\\Users\\EEBsYm5\\Recent") returned="C:\\Users\\EEBsYm5\\Recent" [0121.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e79448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x121c [0121.620] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0121.621] wcscmp (_String1="Saved Games", _String2=".") returned 1 [0121.621] wcscmp (_String1="Saved Games", _String2="..") returned 1 [0121.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e55c28 [0121.621] wcscpy (in: _Dest=0x3e55c28, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.621] wcscat (in: _Dest=0x3e55c28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.621] wcscat (in: _Dest=0x3e55c28, _Source="Saved Games" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games") returned="C:\\Users\\EEBsYm5\\Saved Games" [0121.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e55c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0121.622] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0121.622] wcscmp (_String1="Searches", _String2=".") returned 1 [0121.622] wcscmp (_String1="Searches", _String2="..") returned 1 [0121.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x2fc8dc8 [0121.622] wcscpy (in: _Dest=0x2fc8dc8, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.623] wcscat (in: _Dest=0x2fc8dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.623] wcscat (in: _Dest=0x2fc8dc8, _Source="Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0121.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fc8dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0121.624] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0121.624] wcscmp (_String1="SendTo", _String2=".") returned 1 [0121.624] wcscmp (_String1="SendTo", _String2="..") returned 1 [0121.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79100 [0121.624] wcscpy (in: _Dest=0x3e79100, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.624] wcscat (in: _Dest=0x3e79100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.624] wcscat (in: _Dest=0x3e79100, _Source="SendTo" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo") returned="C:\\Users\\EEBsYm5\\SendTo" [0121.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e79100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0121.625] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0121.625] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0121.625] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0121.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2fc8b08 [0121.625] wcscpy (in: _Dest=0x2fc8b08, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.625] wcscat (in: _Dest=0x2fc8b08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.625] wcscat (in: _Dest=0x2fc8b08, _Source="Start Menu" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu") returned="C:\\Users\\EEBsYm5\\Start Menu" [0121.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fc8b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0121.627] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0121.627] wcscmp (_String1="Templates", _String2=".") returned 1 [0121.627] wcscmp (_String1="Templates", _String2="..") returned 1 [0121.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x2fc8e48 [0121.627] wcscpy (in: _Dest=0x2fc8e48, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.627] wcscat (in: _Dest=0x2fc8e48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.627] wcscat (in: _Dest=0x2fc8e48, _Source="Templates" | out: _Dest="C:\\Users\\EEBsYm5\\Templates") returned="C:\\Users\\EEBsYm5\\Templates" [0121.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fc8e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0121.971] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f4c5400, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f4c5400, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0121.971] wcscmp (_String1="Videos", _String2=".") returned 1 [0121.971] wcscmp (_String1="Videos", _String2="..") returned 1 [0121.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79100 [0121.972] wcscpy (in: _Dest=0x3e79100, _Source="C:\\Users\\EEBsYm5" | out: _Dest="C:\\Users\\EEBsYm5") returned="C:\\Users\\EEBsYm5" [0121.972] wcscat (in: _Dest=0x3e79100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\") returned="C:\\Users\\EEBsYm5\\" [0121.972] wcscat (in: _Dest=0x3e79100, _Source="Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0122.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e79100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0122.664] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f4c5400, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f4c5400, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0122.664] FindClose (in: hFindFile=0x3dcf950 | out: hFindFile=0x3dcf950) returned 1 [0122.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0122.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db36f0) returned 1 [0122.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db37e0) returned 1 Thread: id = 164 os_tid = 0x7b4 [0121.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3db3c90 [0121.025] wcscpy (in: _Dest=0x3db3c90, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0121.025] wcscat (in: _Dest=0x3db3c90, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0121.025] wcscat (in: _Dest=0x3db3c90, _Source="*" | out: _Dest="C:\\Users\\Public\\*") returned="C:\\Users\\Public\\*" [0121.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0121.026] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0121.026] wcscmp (_String1=".", _String2=".") returned 0 [0121.026] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.026] wcscmp (_String1="..", _String2=".") returned 1 [0121.026] wcscmp (_String1="..", _String2="..") returned 0 [0121.026] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0121.026] wcscmp (_String1="Desktop", _String2=".") returned 1 [0121.026] wcscmp (_String1="Desktop", _String2="..") returned 1 [0121.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78f78 [0121.026] wcscpy (in: _Dest=0x3e78f78, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0121.026] wcscat (in: _Dest=0x3e78f78, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0121.026] wcscat (in: _Dest=0x3e78f78, _Source="Desktop" | out: _Dest="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop" [0121.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e78f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0121.194] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b61335c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b61335c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.194] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.195] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.195] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1771d97e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1771d97e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0121.195] wcscmp (_String1="Documents", _String2=".") returned 1 [0121.195] wcscmp (_String1="Documents", _String2="..") returned 1 [0121.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcf810 [0121.195] wcscpy (in: _Dest=0x3dcf810, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0121.195] wcscat (in: _Dest=0x3dcf810, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0121.195] wcscat (in: _Dest=0x3dcf810, _Source="Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0121.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0121.196] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0121.196] wcscmp (_String1="Downloads", _String2=".") returned 1 [0121.196] wcscmp (_String1="Downloads", _String2="..") returned 1 [0121.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcf710 [0121.197] wcscpy (in: _Dest=0x3dcf710, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0121.197] wcscat (in: _Dest=0x3dcf710, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0121.197] wcscat (in: _Dest=0x3dcf710, _Source="Downloads" | out: _Dest="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads" [0121.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0121.198] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0121.198] wcscmp (_String1="Favorites", _String2=".") returned 1 [0121.198] wcscmp (_String1="Favorites", _String2="..") returned 1 [0121.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcf610 [0121.198] wcscpy (in: _Dest=0x3dcf610, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0121.199] wcscat (in: _Dest=0x3dcf610, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0121.199] wcscat (in: _Dest=0x3dcf610, _Source="Favorites" | out: _Dest="C:\\Users\\Public\\Favorites") returned="C:\\Users\\Public\\Favorites" [0121.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcf610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0121.201] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0121.201] wcscmp (_String1="Libraries", _String2=".") returned 1 [0121.201] wcscmp (_String1="Libraries", _String2="..") returned 1 [0121.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfd50 [0121.201] wcscpy (in: _Dest=0x3dcfd50, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0121.201] wcscat (in: _Dest=0x3dcfd50, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0121.201] wcscat (in: _Dest=0x3dcfd50, _Source="Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries" [0121.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dcfd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0121.203] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0121.203] wcscmp (_String1="Music", _String2=".") returned 1 [0121.203] wcscmp (_String1="Music", _String2="..") returned 1 [0121.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e799c0 [0121.203] wcscpy (in: _Dest=0x3e799c0, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0121.203] wcscat (in: _Dest=0x3e799c0, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0121.203] wcscat (in: _Dest=0x3e799c0, _Source="Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music" [0121.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e799c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0121.205] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0121.205] wcscmp (_String1="Pictures", _String2=".") returned 1 [0121.205] wcscmp (_String1="Pictures", _String2="..") returned 1 [0121.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066500 [0121.205] wcscpy (in: _Dest=0x3066500, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0121.205] wcscat (in: _Dest=0x3066500, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0121.205] wcscat (in: _Dest=0x3066500, _Source="Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures" [0121.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3066500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0121.207] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0121.207] wcscmp (_String1="Recorded TV", _String2=".") returned 1 [0121.207] wcscmp (_String1="Recorded TV", _String2="..") returned 1 [0121.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x30670c0 [0121.207] wcscpy (in: _Dest=0x30670c0, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0121.207] wcscat (in: _Dest=0x30670c0, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0121.207] wcscat (in: _Dest=0x30670c0, _Source="Recorded TV" | out: _Dest="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV" [0121.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30670c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0121.208] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0121.208] wcscmp (_String1="Videos", _String2=".") returned 1 [0121.208] wcscmp (_String1="Videos", _String2="..") returned 1 [0121.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79250 [0121.208] wcscpy (in: _Dest=0x3e79250, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public" [0121.208] wcscat (in: _Dest=0x3e79250, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\" [0121.208] wcscat (in: _Dest=0x3e79250, _Source="Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos" [0121.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e79250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0121.210] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0121.210] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0121.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0121.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db3c90) returned 1 [0121.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabc0) returned 1 Thread: id = 165 os_tid = 0xa94 [0121.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d488a0 [0121.040] wcscpy (in: _Dest=0x3d488a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.040] wcscat (in: _Dest=0x3d488a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.041] wcscat (in: _Dest=0x3d488a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\*" [0121.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336f60 [0121.041] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\*", lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf850 [0121.041] wcscmp (_String1=".", _String2=".") returned 0 [0121.041] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.355] wcscmp (_String1="..", _String2=".") returned 1 [0121.355] wcscmp (_String1="..", _String2="..") returned 0 [0121.357] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4268, dwReserved0=0x0, dwReserved1=0x0, cFileName="Benioku.htm", cAlternateFileName="")) returned 1 [0121.357] wcscmp (_String1="Benioku.htm", _String2=".") returned 1 [0121.357] wcscmp (_String1="Benioku.htm", _String2="..") returned 1 [0121.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edf268 [0121.358] wcscpy (in: _Dest=0x3edf268, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.360] wcscat (in: _Dest=0x3edf268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.360] wcscat (in: _Dest=0x3edf268, _Source="Benioku.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm" [0121.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0121.925] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x42ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berime.htm", cAlternateFileName="")) returned 1 [0121.925] wcscmp (_String1="Berime.htm", _String2=".") returned 1 [0121.925] wcscmp (_String1="Berime.htm", _String2="..") returned 1 [0121.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee02a8 [0121.926] wcscpy (in: _Dest=0x3ee02a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.926] wcscat (in: _Dest=0x3ee02a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.926] wcscat (in: _Dest=0x3ee02a8, _Source="Berime.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm" [0121.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee02a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1114 [0121.927] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0121.927] wcscmp (_String1="Esl", _String2=".") returned 1 [0121.927] wcscmp (_String1="Esl", _String2="..") returned 1 [0121.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e15220 [0121.927] wcscpy (in: _Dest=0x3e15220, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.927] wcscat (in: _Dest=0x3e15220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.927] wcscat (in: _Dest=0x3e15220, _Source="Esl" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl" [0121.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e15220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0121.929] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4288, dwReserved0=0x0, dwReserved1=0x0, cFileName="IrakHau.htm", cAlternateFileName="")) returned 1 [0121.929] wcscmp (_String1="IrakHau.htm", _String2=".") returned 1 [0121.929] wcscmp (_String1="IrakHau.htm", _String2="..") returned 1 [0121.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0310 [0121.929] wcscpy (in: _Dest=0x3ee0310, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.929] wcscat (in: _Dest=0x3ee0310, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.929] wcscat (in: _Dest=0x3ee0310, _Source="IrakHau.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm" [0121.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068 [0121.931] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x423b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leame.htm", cAlternateFileName="")) returned 1 [0121.931] wcscmp (_String1="Leame.htm", _String2=".") returned 1 [0121.931] wcscmp (_String1="Leame.htm", _String2="..") returned 1 [0121.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0378 [0121.931] wcscpy (in: _Dest=0x3ee0378, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.931] wcscat (in: _Dest=0x3ee0378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.931] wcscat (in: _Dest=0x3ee0378, _Source="Leame.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm" [0121.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0121.933] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeesMij.htm", cAlternateFileName="")) returned 1 [0121.933] wcscmp (_String1="LeesMij.htm", _String2=".") returned 1 [0121.933] wcscmp (_String1="LeesMij.htm", _String2="..") returned 1 [0121.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee03e0 [0121.933] wcscpy (in: _Dest=0x3ee03e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.933] wcscat (in: _Dest=0x3ee03e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.933] wcscat (in: _Dest=0x3ee03e0, _Source="LeesMij.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm" [0121.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee03e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0121.935] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4289, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leggimi.htm", cAlternateFileName="")) returned 1 [0121.935] wcscmp (_String1="Leggimi.htm", _String2=".") returned 1 [0121.935] wcscmp (_String1="Leggimi.htm", _String2="..") returned 1 [0121.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0448 [0121.935] wcscpy (in: _Dest=0x3ee0448, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.936] wcscat (in: _Dest=0x3ee0448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.936] wcscat (in: _Dest=0x3ee0448, _Source="Leggimi.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm" [0121.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c [0121.938] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeiaMe.htm", cAlternateFileName="")) returned 1 [0121.938] wcscmp (_String1="LeiaMe.htm", _String2=".") returned 1 [0121.938] wcscmp (_String1="LeiaMe.htm", _String2="..") returned 1 [0121.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee04b0 [0121.938] wcscpy (in: _Dest=0x3ee04b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.938] wcscat (in: _Dest=0x3ee04b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.938] wcscat (in: _Dest=0x3ee04b0, _Source="LeiaMe.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm" [0121.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee04b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1074 [0121.940] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x42b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Liesmich.htm", cAlternateFileName="")) returned 1 [0121.940] wcscmp (_String1="Liesmich.htm", _String2=".") returned 1 [0121.940] wcscmp (_String1="Liesmich.htm", _String2="..") returned 1 [0121.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0518 [0121.940] wcscpy (in: _Dest=0x3ee0518, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.940] wcscat (in: _Dest=0x3ee0518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.940] wcscat (in: _Dest=0x3ee0518, _Source="Liesmich.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm" [0121.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0121.942] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb691e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisezmoi.htm", cAlternateFileName="")) returned 1 [0121.942] wcscmp (_String1="Lisezmoi.htm", _String2=".") returned 1 [0121.942] wcscmp (_String1="Lisezmoi.htm", _String2="..") returned 1 [0121.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0580 [0121.942] wcscpy (in: _Dest=0x3ee0580, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.942] wcscat (in: _Dest=0x3ee0580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.942] wcscat (in: _Dest=0x3ee0580, _Source="Lisezmoi.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm" [0121.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0121.951] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Llegiu-me.htm", cAlternateFileName="LLEGIU~1.HTM")) returned 1 [0121.951] wcscmp (_String1="Llegiu-me.htm", _String2=".") returned 1 [0121.951] wcscmp (_String1="Llegiu-me.htm", _String2="..") returned 1 [0121.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69f38 [0121.951] wcscpy (in: _Dest=0x3e69f38, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.952] wcscat (in: _Dest=0x3e69f38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.952] wcscat (in: _Dest=0x3e69f38, _Source="Llegiu-me.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm" [0121.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0121.953] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x434e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LueMinut.htm", cAlternateFileName="")) returned 1 [0121.953] wcscmp (_String1="LueMinut.htm", _String2=".") returned 1 [0121.953] wcscmp (_String1="LueMinut.htm", _String2="..") returned 1 [0121.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee05e8 [0121.954] wcscpy (in: _Dest=0x3ee05e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.954] wcscat (in: _Dest=0x3ee05e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.954] wcscat (in: _Dest=0x3ee05e8, _Source="LueMinut.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm" [0121.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee05e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0121.955] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e43ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0121.955] wcscmp (_String1="Reader", _String2=".") returned 1 [0121.955] wcscmp (_String1="Reader", _String2="..") returned 1 [0121.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe67e8 [0121.955] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.955] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.955] wcscat (in: _Dest=0x2fe67e8, _Source="Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0121.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0121.958] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0121.958] wcscmp (_String1="ReadMe.htm", _String2=".") returned 1 [0121.958] wcscmp (_String1="ReadMe.htm", _String2="..") returned 1 [0121.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0650 [0121.958] wcscpy (in: _Dest=0x3ee0650, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.959] wcscat (in: _Dest=0x3ee0650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.959] wcscat (in: _Dest=0x3ee0650, _Source="ReadMe.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm" [0121.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0121.960] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCS.htm", cAlternateFileName="")) returned 1 [0121.960] wcscmp (_String1="ReadMeCS.htm", _String2=".") returned 1 [0121.960] wcscmp (_String1="ReadMeCS.htm", _String2="..") returned 1 [0121.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee06b8 [0121.960] wcscpy (in: _Dest=0x3ee06b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.960] wcscat (in: _Dest=0x3ee06b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.960] wcscat (in: _Dest=0x3ee06b8, _Source="ReadMeCS.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm" [0121.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee06b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0121.962] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCT.htm", cAlternateFileName="")) returned 1 [0121.962] wcscmp (_String1="ReadMeCT.htm", _String2=".") returned 1 [0121.962] wcscmp (_String1="ReadMeCT.htm", _String2="..") returned 1 [0121.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0720 [0121.962] wcscpy (in: _Dest=0x3ee0720, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.962] wcscat (in: _Dest=0x3ee0720, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.962] wcscat (in: _Dest=0x3ee0720, _Source="ReadMeCT.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm" [0121.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0121.964] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4623, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCZE.htm", cAlternateFileName="REE3F7~1.HTM")) returned 1 [0121.964] wcscmp (_String1="ReadMeCZE.htm", _String2=".") returned 1 [0121.964] wcscmp (_String1="ReadMeCZE.htm", _String2="..") returned 1 [0121.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69fa8 [0121.964] wcscpy (in: _Dest=0x3e69fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.964] wcscat (in: _Dest=0x3e69fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.964] wcscat (in: _Dest=0x3e69fa8, _Source="ReadMeCZE.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm" [0121.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0121.966] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x42aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHRV.htm", cAlternateFileName="RE2D2E~1.HTM")) returned 1 [0121.966] wcscmp (_String1="ReadMeHRV.htm", _String2=".") returned 1 [0121.966] wcscmp (_String1="ReadMeHRV.htm", _String2="..") returned 1 [0121.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26008 [0121.966] wcscpy (in: _Dest=0x7a26008, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.966] wcscat (in: _Dest=0x7a26008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.966] wcscat (in: _Dest=0x7a26008, _Source="ReadMeHRV.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm" [0121.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0121.967] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4274, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHUN.htm", cAlternateFileName="RE50AF~1.HTM")) returned 1 [0121.967] wcscmp (_String1="ReadMeHUN.htm", _String2=".") returned 1 [0121.968] wcscmp (_String1="ReadMeHUN.htm", _String2="..") returned 1 [0121.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26078 [0121.968] wcscpy (in: _Dest=0x7a26078, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.968] wcscat (in: _Dest=0x7a26078, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.968] wcscat (in: _Dest=0x7a26078, _Source="ReadMeHUN.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm" [0121.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0121.970] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeJ.htm", cAlternateFileName="")) returned 1 [0121.970] wcscmp (_String1="ReadMeJ.htm", _String2=".") returned 1 [0121.970] wcscmp (_String1="ReadMeJ.htm", _String2="..") returned 1 [0121.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0788 [0121.970] wcscpy (in: _Dest=0x3ee0788, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0121.970] wcscat (in: _Dest=0x3ee0788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0121.970] wcscat (in: _Dest=0x3ee0788, _Source="ReadMeJ.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm" [0121.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0122.492] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeK.htm", cAlternateFileName="")) returned 1 [0122.492] wcscmp (_String1="ReadMeK.htm", _String2=".") returned 1 [0122.492] wcscmp (_String1="ReadMeK.htm", _String2="..") returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0ac8 [0122.492] wcscpy (in: _Dest=0x3ee0ac8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.492] wcscat (in: _Dest=0x3ee0ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.492] wcscat (in: _Dest=0x3ee0ac8, _Source="ReadMeK.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm" [0122.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0122.787] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMePOL.htm", cAlternateFileName="RECE99~1.HTM")) returned 1 [0122.787] wcscmp (_String1="ReadMePOL.htm", _String2=".") returned 1 [0122.787] wcscmp (_String1="ReadMePOL.htm", _String2="..") returned 1 [0122.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a267e8 [0122.787] wcscpy (in: _Dest=0x7a267e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.787] wcscat (in: _Dest=0x7a267e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.787] wcscat (in: _Dest=0x7a267e8, _Source="ReadMePOL.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm" [0122.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a267e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0122.788] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4318, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUM.htm", cAlternateFileName="README~4.HTM")) returned 1 [0122.788] wcscmp (_String1="ReadMeRUM.htm", _String2=".") returned 1 [0122.788] wcscmp (_String1="ReadMeRUM.htm", _String2="..") returned 1 [0122.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26858 [0122.789] wcscpy (in: _Dest=0x7a26858, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.789] wcscat (in: _Dest=0x7a26858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.789] wcscat (in: _Dest=0x7a26858, _Source="ReadMeRUM.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm" [0122.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0122.790] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4872, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUS.htm", cAlternateFileName="README~3.HTM")) returned 1 [0122.790] wcscmp (_String1="ReadMeRUS.htm", _String2=".") returned 1 [0122.790] wcscmp (_String1="ReadMeRUS.htm", _String2="..") returned 1 [0122.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a268c8 [0122.790] wcscpy (in: _Dest=0x7a268c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.791] wcscat (in: _Dest=0x7a268c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.791] wcscat (in: _Dest=0x7a268c8, _Source="ReadMeRUS.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm" [0122.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a268c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0122.792] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeSKY.htm", cAlternateFileName="README~2.HTM")) returned 1 [0122.792] wcscmp (_String1="ReadMeSKY.htm", _String2=".") returned 1 [0122.792] wcscmp (_String1="ReadMeSKY.htm", _String2="..") returned 1 [0122.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26938 [0122.792] wcscpy (in: _Dest=0x7a26938, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.792] wcscat (in: _Dest=0x7a26938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.792] wcscat (in: _Dest=0x7a26938, _Source="ReadMeSKY.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm" [0122.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0122.793] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4995, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeUKR.htm", cAlternateFileName="README~1.HTM")) returned 1 [0122.794] wcscmp (_String1="ReadMeUKR.htm", _String2=".") returned 1 [0122.794] wcscmp (_String1="ReadMeUKR.htm", _String2="..") returned 1 [0122.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a269a8 [0122.794] wcscpy (in: _Dest=0x7a269a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.794] wcscat (in: _Dest=0x7a269a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.794] wcscat (in: _Dest=0x7a269a8, _Source="ReadMeUKR.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm" [0122.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a269a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0122.796] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0122.796] wcscmp (_String1="Resource", _String2=".") returned 1 [0122.796] wcscmp (_String1="Resource", _String2="..") returned 1 [0122.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe66c8 [0122.796] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.796] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.796] wcscat (in: _Dest=0x2fe66c8, _Source="Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0122.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe66c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0122.797] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9009a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9009a20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0122.797] wcscmp (_String1="Setup Files", _String2=".") returned 1 [0122.797] wcscmp (_String1="Setup Files", _String2="..") returned 1 [0122.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edff00 [0122.797] wcscpy (in: _Dest=0x3edff00, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.797] wcscat (in: _Dest=0x3edff00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.797] wcscat (in: _Dest=0x3edff00, _Source="Setup Files" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" [0122.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edff00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0122.799] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vigtigt.htm", cAlternateFileName="")) returned 1 [0122.799] wcscmp (_String1="Vigtigt.htm", _String2=".") returned 1 [0122.799] wcscmp (_String1="Vigtigt.htm", _String2="..") returned 1 [0122.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0b98 [0122.799] wcscpy (in: _Dest=0x3ee0b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.799] wcscat (in: _Dest=0x3ee0b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.799] wcscat (in: _Dest=0x3ee0b98, _Source="Vigtigt.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm" [0122.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0122.801] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktig.htm", cAlternateFileName="")) returned 1 [0122.801] wcscmp (_String1="Viktig.htm", _String2=".") returned 1 [0122.801] wcscmp (_String1="Viktig.htm", _String2="..") returned 1 [0122.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0c00 [0122.801] wcscpy (in: _Dest=0x3ee0c00, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.801] wcscat (in: _Dest=0x3ee0c00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.801] wcscat (in: _Dest=0x3ee0c00, _Source="Viktig.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm" [0122.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc [0122.802] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 1 [0122.802] wcscmp (_String1="Viktigt.htm", _String2=".") returned 1 [0122.802] wcscmp (_String1="Viktigt.htm", _String2="..") returned 1 [0122.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0c68 [0122.802] wcscpy (in: _Dest=0x3ee0c68, _Source="C:\\Program Files\\Adobe\\Reader 10.0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0") returned="C:\\Program Files\\Adobe\\Reader 10.0" [0122.802] wcscat (in: _Dest=0x3ee0c68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\" [0122.802] wcscat (in: _Dest=0x3ee0c68, _Source="Viktigt.htm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm" [0122.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0122.804] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x336f60 | out: lpFindFileData=0x336f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf58f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 0 [0124.134] FindClose (in: hFindFile=0x3dcf850 | out: hFindFile=0x3dcf850) returned 1 [0124.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336f60) returned 1 [0124.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d488a0) returned 1 [0124.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5f78) returned 1 Thread: id = 166 os_tid = 0xa88 [0121.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48690 [0121.044] wcscpy (in: _Dest=0x3d48690, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0121.044] wcscat (in: _Dest=0x3d48690, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0121.044] wcscat (in: _Dest=0x3d48690, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\*") returned="C:\\Program Files\\Common Files\\Adobe\\*" [0121.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0121.044] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0121.044] wcscmp (_String1=".", _String2=".") returned 0 [0121.044] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.044] wcscmp (_String1="..", _String2=".") returned 1 [0121.044] wcscmp (_String1="..", _String2="..") returned 0 [0121.044] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd8fbd760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd8fbd760, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0121.045] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0121.045] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0121.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe14a8 [0121.045] wcscpy (in: _Dest=0x2fe14a8, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0121.045] wcscat (in: _Dest=0x2fe14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0121.045] wcscat (in: _Dest=0x2fe14a8, _Source="Acrobat" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat" [0121.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254 [0121.591] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0121.591] wcscmp (_String1="ARM", _String2=".") returned 1 [0121.591] wcscmp (_String1="ARM", _String2="..") returned 1 [0121.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e14ae8 [0121.592] wcscpy (in: _Dest=0x3e14ae8, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0121.592] wcscat (in: _Dest=0x3e14ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0121.592] wcscat (in: _Dest=0x3e14ae8, _Source="ARM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM") returned="C:\\Program Files\\Common Files\\Adobe\\ARM" [0121.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x125c [0121.593] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0121.593] wcscmp (_String1="HelpCfg", _String2=".") returned 1 [0121.593] wcscmp (_String1="HelpCfg", _String2="..") returned 1 [0121.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6668 [0121.593] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Program Files\\Common Files\\Adobe" | out: _Dest="C:\\Program Files\\Common Files\\Adobe") returned="C:\\Program Files\\Common Files\\Adobe" [0121.593] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\") returned="C:\\Program Files\\Common Files\\Adobe\\" [0121.593] wcscat (in: _Dest=0x2fe6668, _Source="HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0121.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240 [0121.594] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 0 [0121.594] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0121.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0121.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48690) returned 1 [0121.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5e88) returned 1 Thread: id = 167 os_tid = 0xa84 [0121.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6248 [0121.046] wcscpy (in: _Dest=0x2fe6248, _Source="C:\\Program Files\\Common Files\\DESIGNER" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER" [0121.046] wcscat (in: _Dest=0x2fe6248, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\") returned="C:\\Program Files\\Common Files\\DESIGNER\\" [0121.046] wcscat (in: _Dest=0x2fe6248, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\*") returned="C:\\Program Files\\Common Files\\DESIGNER\\*" [0121.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0121.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8086a130, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0124.555] wcscmp (_String1=".", _String2=".") returned 0 [0124.555] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8086a130, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.555] wcscmp (_String1="..", _String2=".") returned 1 [0124.555] wcscmp (_String1="..", _String2="..") returned 0 [0124.555] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be1ac00, ftCreationTime.dwHighDateTime=0x1ca8d8a, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5be1ac00, ftLastWriteTime.dwHighDateTime=0x1ca8d8a, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0124.555] wcscmp (_String1="MSADDNDR.DLL", _String2=".") returned 1 [0124.555] wcscmp (_String1="MSADDNDR.DLL", _String2="..") returned 1 [0124.555] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be1ac00, ftCreationTime.dwHighDateTime=0x1ca8d8a, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5be1ac00, ftLastWriteTime.dwHighDateTime=0x1ca8d8a, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0124.555] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0124.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0124.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6248) returned 1 [0124.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba480) returned 1 Thread: id = 168 os_tid = 0xa98 [0121.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d48cc0 [0121.049] wcscpy (in: _Dest=0x3d48cc0, _Source="C:\\Program Files\\Common Files\\Java" | out: _Dest="C:\\Program Files\\Common Files\\Java") returned="C:\\Program Files\\Common Files\\Java" [0121.049] wcscat (in: _Dest=0x3d48cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\") returned="C:\\Program Files\\Common Files\\Java\\" [0121.049] wcscat (in: _Dest=0x3d48cc0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Java\\*") returned="C:\\Program Files\\Common Files\\Java\\*" [0121.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0121.049] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Java\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x701bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x701bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0122.493] wcscmp (_String1=".", _String2=".") returned 0 [0122.493] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x701bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x701bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.493] wcscmp (_String1="..", _String2=".") returned 1 [0122.493] wcscmp (_String1="..", _String2="..") returned 0 [0122.493] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0122.493] wcscmp (_String1="Java Update", _String2=".") returned 1 [0122.493] wcscmp (_String1="Java Update", _String2="..") returned 1 [0122.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0b30 [0122.493] wcscpy (in: _Dest=0x3ee0b30, _Source="C:\\Program Files\\Common Files\\Java" | out: _Dest="C:\\Program Files\\Common Files\\Java") returned="C:\\Program Files\\Common Files\\Java" [0122.493] wcscat (in: _Dest=0x3ee0b30, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\") returned="C:\\Program Files\\Common Files\\Java\\" [0122.494] wcscat (in: _Dest=0x3ee0b30, _Source="Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0123.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0123.008] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0123.008] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0123.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0123.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48cc0) returned 1 [0123.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5d48) returned 1 Thread: id = 169 os_tid = 0xa80 [0121.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe4988 [0121.050] wcscpy (in: _Dest=0x2fe4988, _Source="C:\\Program Files\\Common Files\\Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services" [0121.050] wcscat (in: _Dest=0x2fe4988, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Services\\") returned="C:\\Program Files\\Common Files\\Services\\" [0121.050] wcscat (in: _Dest=0x2fe4988, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Services\\*") returned="C:\\Program Files\\Common Files\\Services\\*" [0121.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0121.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cce865, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cce865, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cce865, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0124.557] wcscmp (_String1=".", _String2=".") returned 0 [0124.557] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cce865, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cce865, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cce865, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.557] wcscmp (_String1="..", _String2=".") returned 1 [0124.557] wcscmp (_String1="..", _String2="..") returned 0 [0124.558] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0124.558] wcscmp (_String1="verisign.bmp", _String2=".") returned 1 [0124.558] wcscmp (_String1="verisign.bmp", _String2="..") returned 1 [0124.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69bb8 [0124.558] wcscpy (in: _Dest=0x3e69bb8, _Source="C:\\Program Files\\Common Files\\Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services" [0124.558] wcscat (in: _Dest=0x3e69bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Services\\") returned="C:\\Program Files\\Common Files\\Services\\" [0124.558] wcscat (in: _Dest=0x3e69bb8, _Source="verisign.bmp" | out: _Dest="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned="C:\\Program Files\\Common Files\\Services\\verisign.bmp" [0125.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0125.559] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0125.559] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0125.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0125.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4988) returned 1 [0125.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba378) returned 1 Thread: id = 170 os_tid = 0x6f0 [0121.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf818 [0121.050] wcscpy (in: _Dest=0x3edf818, _Source="C:\\Program Files\\Common Files\\SpeechEngines" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines" [0121.051] wcscat (in: _Dest=0x3edf818, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\" [0121.051] wcscat (in: _Dest=0x3edf818, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\*" [0121.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0121.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cf49c4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cf49c4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0124.967] wcscmp (_String1=".", _String2=".") returned 0 [0124.967] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9cf49c4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9cf49c4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.967] wcscmp (_String1="..", _String2=".") returned 1 [0124.967] wcscmp (_String1="..", _String2="..") returned 0 [0124.967] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0124.967] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0124.967] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0124.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fec0 [0124.968] wcscpy (in: _Dest=0x3f3fec0, _Source="C:\\Program Files\\Common Files\\SpeechEngines" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines") returned="C:\\Program Files\\Common Files\\SpeechEngines" [0124.968] wcscat (in: _Dest=0x3f3fec0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\" [0124.968] wcscat (in: _Dest=0x3f3fec0, _Source="Microsoft" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" [0125.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3fec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0125.945] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0125.945] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0125.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0125.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf818) returned 1 [0125.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 Thread: id = 171 os_tid = 0x10c [0121.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5ed8 [0121.051] wcscpy (in: _Dest=0x3de5ed8, _Source="C:\\Program Files\\Google\\Chrome" | out: _Dest="C:\\Program Files\\Google\\Chrome") returned="C:\\Program Files\\Google\\Chrome" [0121.051] wcscat (in: _Dest=0x3de5ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\") returned="C:\\Program Files\\Google\\Chrome\\" [0121.051] wcscat (in: _Dest=0x3de5ed8, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\*") returned="C:\\Program Files\\Google\\Chrome\\*" [0121.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0121.052] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde8209d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf790 [0121.052] wcscmp (_String1=".", _String2=".") returned 0 [0121.053] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde8209d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.053] wcscmp (_String1="..", _String2=".") returned 1 [0121.053] wcscmp (_String1="..", _String2="..") returned 0 [0121.053] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1 [0121.053] wcscmp (_String1="Application", _String2=".") returned 1 [0121.053] wcscmp (_String1="Application", _String2="..") returned 1 [0121.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6488 [0121.053] wcscpy (in: _Dest=0x2fe6488, _Source="C:\\Program Files\\Google\\Chrome" | out: _Dest="C:\\Program Files\\Google\\Chrome") returned="C:\\Program Files\\Google\\Chrome" [0121.053] wcscat (in: _Dest=0x2fe6488, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\") returned="C:\\Program Files\\Google\\Chrome\\" [0121.053] wcscat (in: _Dest=0x2fe6488, _Source="Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0121.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0121.220] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0 [0121.220] FindClose (in: hFindFile=0x3dcf790 | out: hFindFile=0x3dcf790) returned 1 [0121.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0121.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5ed8) returned 1 [0121.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55958) returned 1 Thread: id = 172 os_tid = 0xad8 [0121.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3d486e8 [0121.054] wcscpy (in: _Dest=0x3d486e8, _Source="C:\\Program Files\\Google\\CrashReports" | out: _Dest="C:\\Program Files\\Google\\CrashReports") returned="C:\\Program Files\\Google\\CrashReports" [0121.054] wcscat (in: _Dest=0x3d486e8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\CrashReports\\") returned="C:\\Program Files\\Google\\CrashReports\\" [0121.054] wcscat (in: _Dest=0x3d486e8, _Source="*" | out: _Dest="C:\\Program Files\\Google\\CrashReports\\*") returned="C:\\Program Files\\Google\\CrashReports\\*" [0121.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2220 [0121.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\CrashReports\\*", lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2220) returned 1 [0121.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d486e8) returned 1 [0121.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba008) returned 1 Thread: id = 173 os_tid = 0x1c0 [0121.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e56258 [0121.056] wcscpy (in: _Dest=0x3e56258, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0121.056] wcscat (in: _Dest=0x3e56258, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0121.056] wcscat (in: _Dest=0x3e56258, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\*") returned="C:\\Program Files\\Java\\jre7\\*" [0121.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2220 [0121.056] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\*", lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf650 [0121.056] wcscmp (_String1=".", _String2=".") returned 0 [0121.056] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66f0ab20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.056] wcscmp (_String1="..", _String2=".") returned 1 [0121.057] wcscmp (_String1="..", _String2="..") returned 0 [0121.057] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0121.057] wcscmp (_String1="bin", _String2=".") returned 1 [0121.057] wcscmp (_String1="bin", _String2="..") returned 1 [0121.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e561c8 [0121.057] wcscpy (in: _Dest=0x3e561c8, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0121.057] wcscat (in: _Dest=0x3e561c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0121.057] wcscat (in: _Dest=0x3e561c8, _Source="bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0121.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e561c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0121.222] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67654e80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0121.222] wcscmp (_String1="COPYRIGHT", _String2=".") returned 1 [0121.223] wcscmp (_String1="COPYRIGHT", _String2="..") returned 1 [0121.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e14ca0 [0121.223] wcscpy (in: _Dest=0x3e14ca0, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0121.223] wcscat (in: _Dest=0x3e14ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0121.223] wcscat (in: _Dest=0x3e14ca0, _Source="COPYRIGHT" | out: _Dest="C:\\Program Files\\Java\\jre7\\COPYRIGHT") returned="C:\\Program Files\\Java\\jre7\\COPYRIGHT" [0121.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e14ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0121.224] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0121.224] wcscmp (_String1="lib", _String2=".") returned 1 [0121.225] wcscmp (_String1="lib", _String2="..") returned 1 [0121.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e562e8 [0121.225] wcscpy (in: _Dest=0x3e562e8, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0121.225] wcscat (in: _Dest=0x3e562e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0121.225] wcscat (in: _Dest=0x3e562e8, _Source="lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0121.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e562e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0121.226] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67654e80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0121.226] wcscmp (_String1="LICENSE", _String2=".") returned 1 [0121.226] wcscmp (_String1="LICENSE", _String2="..") returned 1 [0121.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5ed8 [0121.226] wcscpy (in: _Dest=0x3de5ed8, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0121.226] wcscat (in: _Dest=0x3de5ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0121.227] wcscat (in: _Dest=0x3de5ed8, _Source="LICENSE" | out: _Dest="C:\\Program Files\\Java\\jre7\\LICENSE") returned="C:\\Program Files\\Java\\jre7\\LICENSE" [0121.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de5ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0121.228] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67654e80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0121.228] wcscmp (_String1="README.txt", _String2=".") returned 1 [0121.228] wcscmp (_String1="README.txt", _String2="..") returned 1 [0121.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14bf0 [0121.228] wcscpy (in: _Dest=0x3e14bf0, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0121.228] wcscat (in: _Dest=0x3e14bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0121.229] wcscat (in: _Dest=0x3e14bf0, _Source="README.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\README.txt") returned="C:\\Program Files\\Java\\jre7\\README.txt" [0121.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e14bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0121.230] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0121.230] wcscmp (_String1="release", _String2=".") returned 1 [0121.230] wcscmp (_String1="release", _String2="..") returned 1 [0121.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de65b8 [0121.230] wcscpy (in: _Dest=0x3de65b8, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0121.230] wcscat (in: _Dest=0x3de65b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0121.230] wcscat (in: _Dest=0x3de65b8, _Source="release" | out: _Dest="C:\\Program Files\\Java\\jre7\\release") returned="C:\\Program Files\\Java\\jre7\\release" [0121.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de65b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0121.232] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67654e80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67654e80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0121.232] wcscmp (_String1="THIRDPARTYLICENSEREADME-JAVAFX.txt", _String2=".") returned 1 [0121.233] wcscmp (_String1="THIRDPARTYLICENSEREADME-JAVAFX.txt", _String2="..") returned 1 [0121.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1bdd8 [0121.233] wcscpy (in: _Dest=0x3e1bdd8, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0121.233] wcscat (in: _Dest=0x3e1bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0121.233] wcscat (in: _Dest=0x3e1bdd8, _Source="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" [0121.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0121.234] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2b350, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0121.234] wcscmp (_String1="THIRDPARTYLICENSEREADME.txt", _String2=".") returned 1 [0121.234] wcscmp (_String1="THIRDPARTYLICENSEREADME.txt", _String2="..") returned 1 [0121.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51368 [0121.234] wcscpy (in: _Dest=0x3d51368, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0121.235] wcscat (in: _Dest=0x3d51368, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0121.235] wcscat (in: _Dest=0x3d51368, _Source="THIRDPARTYLICENSEREADME.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt") returned="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" [0121.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d51368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0121.264] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0121.264] wcscmp (_String1="Welcome.html", _String2=".") returned 1 [0121.264] wcscmp (_String1="Welcome.html", _String2="..") returned 1 [0121.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e14c48 [0121.264] wcscpy (in: _Dest=0x3e14c48, _Source="C:\\Program Files\\Java\\jre7" | out: _Dest="C:\\Program Files\\Java\\jre7") returned="C:\\Program Files\\Java\\jre7" [0121.265] wcscat (in: _Dest=0x3e14c48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\") returned="C:\\Program Files\\Java\\jre7\\" [0121.265] wcscat (in: _Dest=0x3e14c48, _Source="Welcome.html" | out: _Dest="C:\\Program Files\\Java\\jre7\\Welcome.html") returned="C:\\Program Files\\Java\\jre7\\Welcome.html" [0121.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e14c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280 [0121.266] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0121.266] FindClose (in: hFindFile=0x3dcf650 | out: hFindFile=0x3dcf650) returned 1 [0121.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2220) returned 1 [0121.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56258) returned 1 [0121.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfb90) returned 1 Thread: id = 174 os_tid = 0x4c0 [0121.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0121.058] wcscpy (in: _Dest=0x3e3bae0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" [0121.058] wcscat (in: _Dest=0x3e3bae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\" [0121.058] wcscat (in: _Dest=0x3e3bae0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*" [0121.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0121.058] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf690 [0121.058] wcscmp (_String1=".", _String2=".") returned 0 [0121.058] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.058] wcscmp (_String1="..", _String2=".") returned 1 [0121.058] wcscmp (_String1="..", _String2="..") returned 0 [0121.059] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0121.059] wcscmp (_String1="10", _String2=".") returned 1 [0121.059] wcscmp (_String1="10", _String2="..") returned 1 [0121.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5e70 [0121.059] wcscpy (in: _Dest=0x3da5e70, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB" [0121.059] wcscat (in: _Dest=0x3da5e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\" [0121.059] wcscat (in: _Dest=0x3da5e70, _Source="10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0121.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da5e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0121.269] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0121.270] FindClose (in: hFindFile=0x3dcf690 | out: hFindFile=0x3dcf690) returned 1 [0121.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0121.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0121.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 Thread: id = 175 os_tid = 0x6e4 [0121.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe65a8 [0121.059] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0121.059] wcscat (in: _Dest=0x2fe65a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\" [0121.060] wcscat (in: _Dest=0x2fe65a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\*" [0121.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef26f0 [0121.060] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0121.651] wcscmp (_String1=".", _String2=".") returned 0 [0121.651] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.652] wcscmp (_String1="..", _String2=".") returned 1 [0121.652] wcscmp (_String1="..", _String2="..") returned 0 [0121.652] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923f9df0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0121.652] wcscmp (_String1="PUB60COR", _String2=".") returned 1 [0121.652] wcscmp (_String1="PUB60COR", _String2="..") returned 1 [0121.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69c98 [0121.652] wcscpy (in: _Dest=0x3e69c98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0121.652] wcscat (in: _Dest=0x3e69c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\" [0121.652] wcscat (in: _Dest=0x3e69c98, _Source="PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0121.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284 [0121.831] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0121.831] wcscmp (_String1="Publisher", _String2=".") returned 1 [0121.831] wcscmp (_String1="Publisher", _String2="..") returned 1 [0121.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69e58 [0121.831] wcscpy (in: _Dest=0x3e69e58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\CLIPART" [0121.831] wcscat (in: _Dest=0x3e69e58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\" [0121.831] wcscat (in: _Dest=0x3e69e58, _Source="Publisher" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" [0121.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0121.833] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0121.833] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0121.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef26f0) returned 1 [0121.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 [0121.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5948) returned 1 Thread: id = 176 os_tid = 0x20c [0121.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e3b978 [0121.061] wcscpy (in: _Dest=0x3e3b978, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0121.061] wcscat (in: _Dest=0x3e3b978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0121.061] wcscat (in: _Dest=0x3e3b978, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*" [0121.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2958 [0121.061] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf990 [0121.974] wcscmp (_String1=".", _String2=".") returned 0 [0121.974] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.102] wcscmp (_String1="..", _String2=".") returned 1 [0123.102] wcscmp (_String1="..", _String2="..") returned 0 [0123.102] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52307700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94788d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52307700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd0aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.thmx", cAlternateFileName="ADJACE~1.THM")) returned 1 [0123.102] wcscmp (_String1="Adjacency.thmx", _String2=".") returned 1 [0123.102] wcscmp (_String1="Adjacency.thmx", _String2="..") returned 1 [0123.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2648 [0123.102] wcscpy (in: _Dest=0x3df2648, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.102] wcscat (in: _Dest=0x3df2648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.102] wcscat (in: _Dest=0x3df2648, _Source="Adjacency.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" [0123.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0123.849] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5492d100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe949ea30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5492d100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x11098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.thmx", cAlternateFileName="ANGLES~1.THM")) returned 1 [0123.849] wcscmp (_String1="Angles.thmx", _String2=".") returned 1 [0123.849] wcscmp (_String1="Angles.thmx", _String2="..") returned 1 [0123.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1838 [0123.849] wcscpy (in: _Dest=0x3df1838, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.849] wcscat (in: _Dest=0x3df1838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.849] wcscat (in: _Dest=0x3df1838, _Source="Angles.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" [0123.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0123.850] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3ee000, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xef3ee000, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x3f427, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.thmx", cAlternateFileName="APEX~1.THM")) returned 1 [0123.850] wcscmp (_String1="Apex.thmx", _String2=".") returned 1 [0123.850] wcscmp (_String1="Apex.thmx", _String2="..") returned 1 [0123.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9a28 [0123.850] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.850] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.850] wcscat (in: _Dest=0x3eb9a28, _Source="Apex.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" [0123.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0123.851] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6d3100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e6d3100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x15a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.thmx", cAlternateFileName="APOTHE~1.THM")) returned 1 [0123.851] wcscmp (_String1="Apothecary.thmx", _String2=".") returned 1 [0123.851] wcscmp (_String1="Apothecary.thmx", _String2="..") returned 1 [0123.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb57c8 [0123.852] wcscpy (in: _Dest=0x3eb57c8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.852] wcscat (in: _Dest=0x3eb57c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.852] wcscat (in: _Dest=0x3eb57c8, _Source="Apothecary.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" [0123.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb57c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0123.853] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d26700, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2d26700, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x109e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.thmx", cAlternateFileName="ASPECT~1.THM")) returned 1 [0123.853] wcscmp (_String1="Aspect.thmx", _String2=".") returned 1 [0123.853] wcscmp (_String1="Aspect.thmx", _String2="..") returned 1 [0123.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44180 [0123.853] wcscpy (in: _Dest=0x3d44180, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.853] wcscat (in: _Dest=0x3d44180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.853] wcscat (in: _Dest=0x3d44180, _Source="Aspect.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" [0123.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0123.860] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3200b800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94eacf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3200b800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1763b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.thmx", cAlternateFileName="AUSTIN~1.THM")) returned 1 [0123.860] wcscmp (_String1="Austin.thmx", _String2=".") returned 1 [0123.860] wcscmp (_String1="Austin.thmx", _String2="..") returned 1 [0123.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d447b0 [0123.861] wcscpy (in: _Dest=0x3d447b0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.861] wcscat (in: _Dest=0x3d447b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.861] wcscat (in: _Dest=0x3d447b0, _Source="Austin.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" [0123.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d447b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0123.862] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58265800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9510e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58265800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x9ff03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.thmx", cAlternateFileName="BLACKT~1.THM")) returned 1 [0123.862] wcscmp (_String1="Black Tie.thmx", _String2=".") returned 1 [0123.862] wcscmp (_String1="Black Tie.thmx", _String2="..") returned 1 [0123.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44840 [0123.862] wcscpy (in: _Dest=0x3d44840, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.862] wcscat (in: _Dest=0x3d44840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.862] wcscat (in: _Dest=0x3d44840, _Source="Black Tie.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" [0123.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0123.863] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf665ee00, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9536fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf665ee00, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x18c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.thmx", cAlternateFileName="CIVIC~1.THM")) returned 1 [0123.863] wcscmp (_String1="Civic.thmx", _String2=".") returned 1 [0123.863] wcscmp (_String1="Civic.thmx", _String2="..") returned 1 [0123.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0123.864] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.864] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.864] wcscat (in: _Dest=0x3eb9cd0, _Source="Civic.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" [0123.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0123.865] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35943f00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9536fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35943f00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x105f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.thmx", cAlternateFileName="CLARIT~1.THM")) returned 1 [0123.865] wcscmp (_String1="Clarity.thmx", _String2=".") returned 1 [0123.865] wcscmp (_String1="Clarity.thmx", _String2="..") returned 1 [0123.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d448d0 [0123.865] wcscpy (in: _Dest=0x3d448d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.865] wcscat (in: _Dest=0x3d448d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.865] wcscat (in: _Dest=0x3d448d0, _Source="Clarity.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" [0123.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d448d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0123.867] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ceb0c00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9583270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ceb0c00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8ad4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.thmx", cAlternateFileName="COMPOS~1.THM")) returned 1 [0123.867] wcscmp (_String1="Composite.thmx", _String2=".") returned 1 [0123.867] wcscmp (_String1="Composite.thmx", _String2="..") returned 1 [0123.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44960 [0123.867] wcscpy (in: _Dest=0x3d44960, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.867] wcscat (in: _Dest=0x3d44960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.867] wcscat (in: _Dest=0x3d44960, _Source="Composite.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" [0123.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860 [0123.869] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8c84800, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9583270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8c84800, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x1240d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.thmx", cAlternateFileName="CONCOU~1.THM")) returned 1 [0123.869] wcscmp (_String1="Concourse.thmx", _String2=".") returned 1 [0123.869] wcscmp (_String1="Concourse.thmx", _String2="..") returned 1 [0123.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d449f0 [0123.869] wcscpy (in: _Dest=0x3d449f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.869] wcscat (in: _Dest=0x3d449f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.869] wcscat (in: _Dest=0x3d449f0, _Source="Concourse.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" [0123.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d449f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0123.901] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61afc000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe95f5690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x61afc000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1e92c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.thmx", cAlternateFileName="COUTUR~1.THM")) returned 1 [0123.901] wcscmp (_String1="Couture.thmx", _String2=".") returned 1 [0123.902] wcscmp (_String1="Couture.thmx", _String2="..") returned 1 [0123.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44a80 [0123.902] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0123.902] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0123.902] wcscat (in: _Dest=0x3d44a80, _Source="Couture.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" [0125.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0125.585] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65434700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe961b7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65434700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x555df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.thmx", cAlternateFileName="ELEMEN~1.THM")) returned 1 [0125.585] wcscmp (_String1="Elemental.thmx", _String2=".") returned 1 [0125.585] wcscmp (_String1="Elemental.thmx", _String2="..") returned 1 [0125.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2d08 [0125.586] wcscpy (in: _Dest=0x3df2d08, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.586] wcscat (in: _Dest=0x3df2d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.586] wcscat (in: _Dest=0x3df2d08, _Source="Elemental.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" [0125.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0125.588] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc5bcf00, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc5bcf00, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x10f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.thmx", cAlternateFileName="EQUITY~1.THM")) returned 1 [0125.588] wcscmp (_String1="Equity.thmx", _String2=".") returned 1 [0125.588] wcscmp (_String1="Equity.thmx", _String2="..") returned 1 [0125.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df19e8 [0125.588] wcscpy (in: _Dest=0x3df19e8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.588] wcscat (in: _Dest=0x3df19e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.588] wcscat (in: _Dest=0x3df19e8, _Source="Equity.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" [0125.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df19e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0125.590] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3927c600, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3927c600, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xc278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.thmx", cAlternateFileName="ESSENT~1.THM")) returned 1 [0125.590] wcscmp (_String1="Essential.thmx", _String2=".") returned 1 [0125.590] wcscmp (_String1="Essential.thmx", _String2="..") returned 1 [0125.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1b98 [0125.591] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.591] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.591] wcscat (in: _Dest=0x3df1b98, _Source="Essential.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" [0125.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0125.592] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6ce00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68d6ce00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.thmx", cAlternateFileName="EXECUT~1.THM")) returned 1 [0125.592] wcscmp (_String1="Executive.thmx", _String2=".") returned 1 [0125.592] wcscmp (_String1="Executive.thmx", _String2="..") returned 1 [0125.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1c28 [0125.592] wcscpy (in: _Dest=0x3df1c28, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.592] wcscat (in: _Dest=0x3df1c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.593] wcscat (in: _Dest=0x3df1c28, _Source="Executive.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" [0125.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0125.596] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382dd00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9667ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x382dd00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x100a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.thmx", cAlternateFileName="FLOW~1.THM")) returned 1 [0125.596] wcscmp (_String1="Flow.thmx", _String2=".") returned 1 [0125.596] wcscmp (_String1="Flow.thmx", _String2="..") returned 1 [0125.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ced8 [0125.596] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.596] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.596] wcscat (in: _Dest=0x3e1ced8, _Source="Flow.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" [0125.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0125.598] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffef5600, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe968dc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xffef5600, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0xf814, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.thmx", cAlternateFileName="FOUNDR~1.THM")) returned 1 [0125.598] wcscmp (_String1="Foundry.thmx", _String2=".") returned 1 [0125.598] wcscmp (_String1="Foundry.thmx", _String2="..") returned 1 [0125.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df1cb8 [0125.598] wcscpy (in: _Dest=0x3df1cb8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.599] wcscat (in: _Dest=0x3df1cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.599] wcscat (in: _Dest=0x3df1cb8, _Source="Foundry.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" [0125.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0125.600] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cbb4d00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96b3d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cbb4d00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.thmx", cAlternateFileName="GRID~1.THM")) returned 1 [0125.600] wcscmp (_String1="Grid.thmx", _String2=".") returned 1 [0125.600] wcscmp (_String1="Grid.thmx", _String2="..") returned 1 [0125.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c6d0 [0125.600] wcscpy (in: _Dest=0x3f3c6d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.601] wcscat (in: _Dest=0x3f3c6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.601] wcscat (in: _Dest=0x3f3c6d0, _Source="Grid.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" [0125.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0125.602] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404ed400, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96b3d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x404ed400, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x60041, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.thmx", cAlternateFileName="HARDCO~1.THM")) returned 1 [0125.602] wcscmp (_String1="Hardcover.thmx", _String2=".") returned 1 [0125.602] wcscmp (_String1="Hardcover.thmx", _String2="..") returned 1 [0125.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d444e0 [0125.603] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.603] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.603] wcscat (in: _Dest=0x3d444e0, _Source="Hardcover.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" [0125.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0125.605] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6a5500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6c6a5500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x3becb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.thmx", cAlternateFileName="HORIZO~1.THM")) returned 1 [0125.605] wcscmp (_String1="Horizon.thmx", _String2=".") returned 1 [0125.605] wcscmp (_String1="Horizon.thmx", _String2="..") returned 1 [0125.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44210 [0125.605] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.605] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.605] wcscat (in: _Dest=0x3d44210, _Source="Horizon.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" [0125.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0125.607] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7166400, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7166400, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x146a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.thmx", cAlternateFileName="MEDIAN~1.THM")) returned 1 [0125.607] wcscmp (_String1="Median.thmx", _String2=".") returned 1 [0125.607] wcscmp (_String1="Median.thmx", _String2="..") returned 1 [0125.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44060 [0125.607] wcscpy (in: _Dest=0x3d44060, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.607] wcscat (in: _Dest=0x3d44060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.607] wcscat (in: _Dest=0x3d44060, _Source="Median.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" [0125.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c [0125.609] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x978be00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9726190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x978be00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x13af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.thmx", cAlternateFileName="METRO~1.THM")) returned 1 [0125.609] wcscmp (_String1="Metro.thmx", _String2=".") returned 1 [0125.609] wcscmp (_String1="Metro.thmx", _String2="..") returned 1 [0125.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c648 [0125.609] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.609] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.609] wcscat (in: _Dest=0x3f3c648, _Source="Metro.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" [0125.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0125.611] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c4500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9726190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0c4500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1583a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.thmx", cAlternateFileName="MODULE~1.THM")) returned 1 [0125.611] wcscmp (_String1="Module.thmx", _String2=".") returned 1 [0125.611] wcscmp (_String1="Module.thmx", _String2="..") returned 1 [0125.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45020 [0125.611] wcscpy (in: _Dest=0x3d45020, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.611] wcscat (in: _Dest=0x3d45020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.612] wcscat (in: _Dest=0x3d45020, _Source="Module.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" [0125.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0125.613] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffddc00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe974c2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6ffddc00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x96ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.thmx", cAlternateFileName="NEWSPR~1.THM")) returned 1 [0125.613] wcscmp (_String1="Newsprint.thmx", _String2=".") returned 1 [0125.613] wcscmp (_String1="Newsprint.thmx", _String2="..") returned 1 [0125.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d450b0 [0125.613] wcscpy (in: _Dest=0x3d450b0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.613] wcscat (in: _Dest=0x3d450b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.613] wcscat (in: _Dest=0x3d450b0, _Source="Newsprint.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" [0125.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d450b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0125.615] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109fcc00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x109fcc00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x132b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.thmx", cAlternateFileName="OPULEN~1.THM")) returned 1 [0125.615] wcscmp (_String1="Opulent.thmx", _String2=".") returned 1 [0125.615] wcscmp (_String1="Opulent.thmx", _String2="..") returned 1 [0125.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45140 [0125.616] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.616] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.616] wcscat (in: _Dest=0x3d45140, _Source="Opulent.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" [0125.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0125.618] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14335300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x14335300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x16ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.thmx", cAlternateFileName="ORIEL~1.THM")) returned 1 [0125.618] wcscmp (_String1="Oriel.thmx", _String2=".") returned 1 [0125.618] wcscmp (_String1="Oriel.thmx", _String2="..") returned 1 [0125.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c978 [0125.618] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.618] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.618] wcscat (in: _Dest=0x3f3c978, _Source="Oriel.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" [0125.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0125.620] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c6da00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17c6da00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1540b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.thmx", cAlternateFileName="ORIGIN~1.THM")) returned 1 [0125.620] wcscmp (_String1="Origin.thmx", _String2=".") returned 1 [0125.621] wcscmp (_String1="Origin.thmx", _String2="..") returned 1 [0125.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d451d0 [0125.621] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0125.621] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0125.621] wcscat (in: _Dest=0x3d451d0, _Source="Origin.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" [0125.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d451d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0126.052] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5a6100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b5a6100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x421e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.thmx", cAlternateFileName="PAPER~1.THM")) returned 1 [0126.052] wcscmp (_String1="Paper.thmx", _String2=".") returned 1 [0126.052] wcscmp (_String1="Paper.thmx", _String2="..") returned 1 [0126.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0126.052] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0126.052] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0126.052] wcscat (in: _Dest=0x3eb9ef0, _Source="Paper.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" [0133.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0133.058] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e25b00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97be710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x43e25b00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xd15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.thmx", cAlternateFileName="PERSPE~1.THM")) returned 1 [0133.058] wcscmp (_String1="Perspective.thmx", _String2=".") returned 1 [0133.058] wcscmp (_String1="Perspective.thmx", _String2="..") returned 1 [0133.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb57c8 [0133.058] wcscpy (in: _Dest=0x3eb57c8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.058] wcscat (in: _Dest=0x3eb57c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.058] wcscat (in: _Dest=0x3eb57c8, _Source="Perspective.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" [0133.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb57c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0133.060] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4775e200, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97e4870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4775e200, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xc97ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.thmx", cAlternateFileName="PUSHPI~1.THM")) returned 1 [0133.060] wcscmp (_String1="Pushpin.thmx", _String2=".") returned 1 [0133.060] wcscmp (_String1="Pushpin.thmx", _String2="..") returned 1 [0133.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df2d08 [0133.060] wcscpy (in: _Dest=0x3df2d08, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.060] wcscat (in: _Dest=0x3df2d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.060] wcscat (in: _Dest=0x3df2d08, _Source="Pushpin.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" [0133.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0133.065] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73916300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73916300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x106e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.thmx", cAlternateFileName="SLIPST~1.THM")) returned 1 [0133.065] wcscmp (_String1="Slipstream.thmx", _String2=".") returned 1 [0133.065] wcscmp (_String1="Slipstream.thmx", _String2="..") returned 1 [0133.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5a28 [0133.066] wcscpy (in: _Dest=0x3eb5a28, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.066] wcscat (in: _Dest=0x3eb5a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.066] wcscat (in: _Dest=0x3eb5a28, _Source="Slipstream.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" [0133.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0133.067] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbcbb00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1dbcbb00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x124a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.thmx", cAlternateFileName="SOLSTI~1.THM")) returned 1 [0133.067] wcscmp (_String1="Solstice.thmx", _String2=".") returned 1 [0133.067] wcscmp (_String1="Solstice.thmx", _String2="..") returned 1 [0133.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df1838 [0133.067] wcscpy (in: _Dest=0x3df1838, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.067] wcscat (in: _Dest=0x3df1838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.067] wcscat (in: _Dest=0x3df1838, _Source="Solstice.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" [0133.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0133.069] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21504200, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x21504200, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x10d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.thmx", cAlternateFileName="TECHNI~1.THM")) returned 1 [0133.069] wcscmp (_String1="Technic.thmx", _String2=".") returned 1 [0133.069] wcscmp (_String1="Technic.thmx", _String2="..") returned 1 [0133.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df25b8 [0133.069] wcscpy (in: _Dest=0x3df25b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.069] wcscat (in: _Dest=0x3df25b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.069] wcscat (in: _Dest=0x3df25b8, _Source="Technic.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" [0133.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df25b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0133.070] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b096900, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9830b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b096900, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x15d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.thmx", cAlternateFileName="THATCH~1.THM")) returned 1 [0133.070] wcscmp (_String1="Thatch.thmx", _String2=".") returned 1 [0133.070] wcscmp (_String1="Thatch.thmx", _String2="..") returned 1 [0133.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2648 [0133.071] wcscpy (in: _Dest=0x3df2648, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.071] wcscat (in: _Dest=0x3df2648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.071] wcscat (in: _Dest=0x3df2648, _Source="Thatch.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" [0133.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be8 [0133.073] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f53a50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c63d30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1 [0133.073] wcscmp (_String1="Theme Colors", _String2=".") returned 1 [0133.073] wcscmp (_String1="Theme Colors", _String2="..") returned 1 [0133.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45020 [0133.073] wcscpy (in: _Dest=0x3d45020, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.073] wcscat (in: _Dest=0x3d45020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.073] wcscat (in: _Dest=0x3d45020, _Source="Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0133.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d45020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0133.075] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1 [0133.075] wcscmp (_String1="Theme Effects", _String2=".") returned 1 [0133.075] wcscmp (_String1="Theme Effects", _String2="..") returned 1 [0133.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44060 [0133.075] wcscpy (in: _Dest=0x3d44060, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.075] wcscat (in: _Dest=0x3d44060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.075] wcscat (in: _Dest=0x3d44060, _Source="Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0133.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0133.077] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d4fb90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x883e5670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1 [0133.077] wcscmp (_String1="Theme Fonts", _String2=".") returned 1 [0133.077] wcscmp (_String1="Theme Fonts", _String2="..") returned 1 [0133.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44210 [0133.077] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.077] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.077] wcscat (in: _Dest=0x3d44210, _Source="Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0133.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0133.079] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24e3c900, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9856c90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x24e3c900, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x2a23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.thmx", cAlternateFileName="TREK~1.THM")) returned 1 [0133.079] wcscmp (_String1="Trek.thmx", _String2=".") returned 1 [0133.079] wcscmp (_String1="Trek.thmx", _String2="..") returned 1 [0133.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba660 [0133.079] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.079] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.079] wcscat (in: _Dest=0x3eba660, _Source="Trek.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" [0133.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0133.080] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28775000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9d8bcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28775000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xfc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.thmx", cAlternateFileName="URBAN~1.THM")) returned 1 [0133.081] wcscmp (_String1="Urban.thmx", _String2=".") returned 1 [0133.081] wcscmp (_String1="Urban.thmx", _String2="..") returned 1 [0133.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9918 [0133.081] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.081] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.081] wcscat (in: _Dest=0x3eb9918, _Source="Urban.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" [0133.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0133.082] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c0ad700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2c0ad700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.thmx", cAlternateFileName="VERVE~1.THM")) returned 1 [0133.082] wcscmp (_String1="Verve.thmx", _String2=".") returned 1 [0133.083] wcscmp (_String1="Verve.thmx", _String2="..") returned 1 [0133.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb92b8 [0133.083] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.083] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.083] wcscat (in: _Dest=0x3eb92b8, _Source="Verve.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" [0133.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c00 [0133.084] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9cf000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e9cf000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="WAVEFO~1.THM")) returned 1 [0133.084] wcscmp (_String1="Waveform.thmx", _String2=".") returned 1 [0133.084] wcscmp (_String1="Waveform.thmx", _String2="..") returned 1 [0133.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d444e0 [0133.084] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14" [0133.085] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\" [0133.085] wcscat (in: _Dest=0x3d444e0, _Source="Waveform.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" [0133.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0133.086] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9cf000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e9cf000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x2c681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.thmx", cAlternateFileName="WAVEFO~1.THM")) returned 0 [0133.086] FindClose (in: hFindFile=0x3dcf990 | out: hFindFile=0x3dcf990) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2958) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0133.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 Thread: id = 177 os_tid = 0x410 [0121.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe3b48 [0121.062] wcscpy (in: _Dest=0x2fe3b48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0121.062] wcscat (in: _Dest=0x2fe3b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\" [0121.063] wcscat (in: _Dest=0x2fe3b48, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\*" [0121.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2bc0 [0121.063] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0121.655] wcscmp (_String1=".", _String2=".") returned 0 [0121.655] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.655] wcscmp (_String1="..", _String2=".") returned 1 [0121.655] wcscmp (_String1="..", _String2="..") returned 0 [0121.655] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe30e510, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1 [0121.655] wcscmp (_String1="CAGCAT10", _String2=".") returned 1 [0121.655] wcscmp (_String1="CAGCAT10", _String2="..") returned 1 [0121.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69d78 [0121.656] wcscpy (in: _Dest=0x3e69d78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0121.656] wcscat (in: _Dest=0x3e69d78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\" [0121.656] wcscat (in: _Dest=0x3e69d78, _Source="CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0122.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0122.762] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0122.762] wcscmp (_String1="OFFICE14", _String2=".") returned 1 [0122.762] wcscmp (_String1="OFFICE14", _String2="..") returned 1 [0122.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a265b8 [0122.762] wcscpy (in: _Dest=0x7a265b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\MEDIA" [0122.762] wcscat (in: _Dest=0x7a265b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\" [0122.762] wcscat (in: _Dest=0x7a265b8, _Source="OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0122.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a265b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0122.763] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 0 [0122.763] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0122.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2bc0) returned 1 [0122.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3b48) returned 1 [0122.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48848) returned 1 Thread: id = 178 os_tid = 0x7e8 [0121.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf950 [0121.064] wcscpy (in: _Dest=0x3edf950, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0121.064] wcscat (in: _Dest=0x3edf950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0121.064] wcscat (in: _Dest=0x3edf950, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\*" [0121.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2e28 [0121.064] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe942c610, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf5d0 [0121.065] wcscmp (_String1=".", _String2=".") returned 0 [0121.065] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe942c610, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.403] wcscmp (_String1="..", _String2=".") returned 1 [0121.403] wcscmp (_String1="..", _String2="..") returned 0 [0121.403] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0121.403] wcscmp (_String1="1033", _String2=".") returned 1 [0121.403] wcscmp (_String1="1033", _String2="..") returned 1 [0121.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf880 [0121.403] wcscpy (in: _Dest=0x3edf880, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0121.403] wcscat (in: _Dest=0x3edf880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0121.403] wcscat (in: _Dest=0x3edf880, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0122.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0122.452] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e395f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e395f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0122.452] wcscmp (_String1="1036", _String2=".") returned 1 [0122.452] wcscmp (_String1="1036", _String2="..") returned 1 [0122.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee09f8 [0122.453] wcscpy (in: _Dest=0x3ee09f8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.453] wcscat (in: _Dest=0x3ee09f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.453] wcscat (in: _Dest=0x3ee09f8, _Source="1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036" [0122.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee09f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0122.455] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ba86390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ba86390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0122.455] wcscmp (_String1="3082", _String2=".") returned 1 [0122.455] wcscmp (_String1="3082", _String2="..") returned 1 [0122.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0a60 [0122.455] wcscpy (in: _Dest=0x3ee0a60, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.455] wcscat (in: _Dest=0x3ee0a60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.455] wcscat (in: _Dest=0x3ee0a60, _Source="3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082" [0122.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0122.456] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x7636cc50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0xdc5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDS.DLL", cAlternateFileName="")) returned 1 [0122.456] wcscmp (_String1="ACCDDS.DLL", _String2=".") returned 1 [0122.456] wcscmp (_String1="ACCDDS.DLL", _String2="..") returned 1 [0122.457] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x62fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSF.DLL", cAlternateFileName="")) returned 1 [0122.457] wcscmp (_String1="ACCDDSF.DLL", _String2=".") returned 1 [0122.457] wcscmp (_String1="ACCDDSF.DLL", _String2="..") returned 1 [0122.457] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x855c6c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x5a9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSLM.DLL", cAlternateFileName="")) returned 1 [0122.457] wcscmp (_String1="ACCDDSLM.DLL", _String2=".") returned 1 [0122.457] wcscmp (_String1="ACCDDSLM.DLL", _String2="..") returned 1 [0122.457] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c3dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1 [0122.457] wcscmp (_String1="AccessWeb", _String2=".") returned 1 [0122.457] wcscmp (_String1="AccessWeb", _String2="..") returned 1 [0122.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x348f48 [0122.457] wcscpy (in: _Dest=0x348f48, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.457] wcscat (in: _Dest=0x348f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.457] wcscat (in: _Dest=0x348f48, _Source="AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0122.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x348f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0122.459] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a619c00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x76392db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a619c00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x161d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1 [0122.459] wcscmp (_String1="ACCICONS.EXE", _String2=".") returned 1 [0122.459] wcscmp (_String1="ACCICONS.EXE", _String2="..") returned 1 [0122.459] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dd8200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x763df070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57dd8200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDT.DLL", cAlternateFileName="")) returned 1 [0122.459] wcscmp (_String1="ACCVDT.DLL", _String2=".") returned 1 [0122.459] wcscmp (_String1="ACCVDT.DLL", _String2="..") returned 1 [0122.459] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85769b50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1 [0122.459] wcscmp (_String1="ACCWIZ", _String2=".") returned 1 [0122.459] wcscmp (_String1="ACCWIZ", _String2="..") returned 1 [0122.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a261c8 [0122.459] wcscpy (in: _Dest=0x7a261c8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.459] wcscat (in: _Dest=0x7a261c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.459] wcscat (in: _Dest=0x7a261c8, _Source="ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0122.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a261c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0122.461] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x855ecd90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x28180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1 [0122.461] wcscmp (_String1="ACCWIZ.DLL", _String2=".") returned 1 [0122.461] wcscmp (_String1="ACCWIZ.DLL", _String2="..") returned 1 [0122.461] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0caa00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0caa00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x85fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0122.461] wcscmp (_String1="ACEDAO.DLL", _String2=".") returned 1 [0122.461] wcscmp (_String1="ACEDAO.DLL", _String2="..") returned 1 [0122.461] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x882688b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1 [0122.461] wcscmp (_String1="ADDINS", _String2=".") returned 1 [0122.461] wcscmp (_String1="ADDINS", _String2="..") returned 1 [0122.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26238 [0122.461] wcscpy (in: _Dest=0x7a26238, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.461] wcscat (in: _Dest=0x7a26238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.462] wcscat (in: _Dest=0x7a26238, _Source="ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0122.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0122.465] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a1f8b00, ftCreationTime.dwHighDateTime=0x1c9c9dd, ftLastAccessTime.dwLowDateTime=0x765a80f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a1f8b00, ftLastWriteTime.dwHighDateTime=0x1c9c9dd, nFileSizeHigh=0x0, nFileSizeLow=0x1934ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVCMP.DIC", cAlternateFileName="")) returned 1 [0122.465] wcscmp (_String1="ADVCMP.DIC", _String2=".") returned 1 [0122.465] wcscmp (_String1="ADVCMP.DIC", _String2="..") returned 1 [0122.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x349128 [0122.466] wcscpy (in: _Dest=0x349128, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.466] wcscat (in: _Dest=0x349128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.466] wcscat (in: _Dest=0x349128, _Source="ADVCMP.DIC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" [0122.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x349128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0122.467] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68715e00, ftCreationTime.dwHighDateTime=0x1c1866a, ftLastAccessTime.dwLowDateTime=0x858020d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68715e00, ftLastWriteTime.dwHighDateTime=0x1c1866a, nFileSizeHigh=0x0, nFileSizeLow=0x3a1fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVTEL.DIC", cAlternateFileName="")) returned 1 [0122.467] wcscmp (_String1="ADVTEL.DIC", _String2=".") returned 1 [0122.468] wcscmp (_String1="ADVTEL.DIC", _String2="..") returned 1 [0122.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e07610 [0122.468] wcscpy (in: _Dest=0x3e07610, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.468] wcscat (in: _Dest=0x3e07610, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.468] wcscat (in: _Dest=0x3e07610, _Source="ADVTEL.DIC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" [0122.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e07610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0122.469] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e917700, ftCreationTime.dwHighDateTime=0x1c9c9d0, ftLastAccessTime.dwLowDateTime=0x765f43b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e917700, ftLastWriteTime.dwHighDateTime=0x1c9c9d0, nFileSizeHigh=0x0, nFileSizeLow=0x2e25e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVZIP.DIC", cAlternateFileName="")) returned 1 [0122.469] wcscmp (_String1="ADVZIP.DIC", _String2=".") returned 1 [0122.469] wcscmp (_String1="ADVZIP.DIC", _String2="..") returned 1 [0122.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e06878 [0122.469] wcscpy (in: _Dest=0x3e06878, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.469] wcscat (in: _Dest=0x3e06878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.469] wcscat (in: _Dest=0x3e06878, _Source="ADVZIP.DIC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" [0122.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e06878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0122.471] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8bb17b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xdd178, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1 [0122.471] wcscmp (_String1="AEC.DLL", _String2=".") returned 1 [0122.471] wcscmp (_String1="AEC.DLL", _String2="..") returned 1 [0122.471] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90c0670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x75f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1 [0122.471] wcscmp (_String1="AECUTILS.DLL", _String2=".") returned 1 [0122.471] wcscmp (_String1="AECUTILS.DLL", _String2="..") returned 1 [0122.471] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4852fb00, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x769864b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4852fb00, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x46080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASCIIENG.LNG", cAlternateFileName="")) returned 1 [0122.471] wcscmp (_String1="ASCIIENG.LNG", _String2=".") returned 1 [0122.471] wcscmp (_String1="ASCIIENG.LNG", _String2="..") returned 1 [0122.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3efc0 [0122.471] wcscpy (in: _Dest=0x3f3efc0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.471] wcscat (in: _Dest=0x3f3efc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.471] wcscat (in: _Dest=0x3f3efc0, _Source="ASCIIENG.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" [0122.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3efc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0122.473] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc0dd00, ftCreationTime.dwHighDateTime=0x1ca9891, ftLastAccessTime.dwLowDateTime=0x85d5d250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedc0dd00, ftLastWriteTime.dwHighDateTime=0x1ca9891, nFileSizeHigh=0x0, nFileSizeLow=0x187b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="AUDIOS~2.DLL")) returned 1 [0122.473] wcscmp (_String1="AUDIOSEARCHLTS.DLL", _String2=".") returned 1 [0122.473] wcscmp (_String1="AUDIOSEARCHLTS.DLL", _String2="..") returned 1 [0122.473] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc0dd00, ftCreationTime.dwHighDateTime=0x1ca9891, ftLastAccessTime.dwLowDateTime=0x769ac610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedc0dd00, ftLastWriteTime.dwHighDateTime=0x1ca9891, nFileSizeHigh=0x0, nFileSizeLow=0xf3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="AUDIOS~1.DLL")) returned 1 [0122.473] wcscmp (_String1="AUDIOSEARCHMAIN.DLL", _String2=".") returned 1 [0122.473] wcscmp (_String1="AUDIOSEARCHMAIN.DLL", _String2="..") returned 1 [0122.473] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc0dd00, ftCreationTime.dwHighDateTime=0x1ca9891, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedc0dd00, ftLastWriteTime.dwHighDateTime=0x1ca9891, nFileSizeHigh=0x0, nFileSizeLow=0x214b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="AUDIOS~3.DLL")) returned 1 [0122.474] wcscmp (_String1="AUDIOSEARCHSAPIFE.DLL", _String2=".") returned 1 [0122.474] wcscmp (_String1="AUDIOSEARCHSAPIFE.DLL", _String2="..") returned 1 [0122.474] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3509e800, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3509e800, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0xd388, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1 [0122.474] wcscmp (_String1="AUTHZAX.DLL", _String2=".") returned 1 [0122.474] wcscmp (_String1="AUTHZAX.DLL", _String2="..") returned 1 [0122.474] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345f0200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x345f0200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x9d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAutogen.dll", cAlternateFileName="BCSAUT~1.DLL")) returned 1 [0122.474] wcscmp (_String1="BCSAutogen.dll", _String2=".") returned 1 [0122.474] wcscmp (_String1="BCSAutogen.dll", _String2="..") returned 1 [0122.474] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332dd500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x332dd500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x9760, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClient.Msg.dll", cAlternateFileName="BCSCLI~1.DLL")) returned 1 [0122.474] wcscmp (_String1="BCSClient.Msg.dll", _String2=".") returned 1 [0122.474] wcscmp (_String1="BCSClient.Msg.dll", _String2="..") returned 1 [0122.474] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ab5900, ftCreationTime.dwHighDateTime=0x1cac256, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8ab5900, ftLastWriteTime.dwHighDateTime=0x1cac256, nFileSizeHigh=0x0, nFileSizeLow=0x6886, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClientManifest.man", cAlternateFileName="BCSCLI~1.MAN")) returned 1 [0122.474] wcscmp (_String1="BCSClientManifest.man", _String2=".") returned 1 [0122.474] wcscmp (_String1="BCSClientManifest.man", _String2="..") returned 1 [0122.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44210 [0122.474] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.474] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.474] wcscat (in: _Dest=0x3d44210, _Source="BCSClientManifest.man" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man") returned="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" [0122.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0122.476] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e6a500, ftCreationTime.dwHighDateTime=0x1cac256, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3e6a500, ftLastWriteTime.dwHighDateTime=0x1cac256, nFileSizeHigh=0x0, nFileSizeLow=0x8d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSEvents.man", cAlternateFileName="BCSEVE~1.MAN")) returned 1 [0122.476] wcscmp (_String1="BCSEvents.man", _String2=".") returned 1 [0122.476] wcscmp (_String1="BCSEvents.man", _String2="..") returned 1 [0122.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da63f0 [0122.476] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.476] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.476] wcscat (in: _Dest=0x3da63f0, _Source="BCSEvents.man" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man") returned="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" [0122.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da63f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0122.478] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfced6000, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfced6000, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xdf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="BCSLAU~1.DLL")) returned 1 [0122.478] wcscmp (_String1="BCSLaunch.dll", _String2=".") returned 1 [0122.478] wcscmp (_String1="BCSLaunch.dll", _String2="..") returned 1 [0122.478] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd587a000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x19780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSProxy32.dll", cAlternateFileName="BCSPRO~1.DLL")) returned 1 [0122.478] wcscmp (_String1="BCSProxy32.dll", _String2=".") returned 1 [0122.478] wcscmp (_String1="BCSProxy32.dll", _String2="..") returned 1 [0122.478] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b8cd00, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6b8cd00, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x6d580, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntime.dll", cAlternateFileName="BCSRUN~2.DLL")) returned 1 [0122.478] wcscmp (_String1="BCSRuntime.dll", _String2=".") returned 1 [0122.478] wcscmp (_String1="BCSRuntime.dll", _String2="..") returned 1 [0122.478] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35902f00, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7d053ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35902f00, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeUI.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1 [0122.478] wcscmp (_String1="BCSRuntimeUI.dll", _String2=".") returned 1 [0122.478] wcscmp (_String1="BCSRuntimeUI.dll", _String2="..") returned 1 [0122.478] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd587a000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x1e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSStr32.dll", cAlternateFileName="")) returned 1 [0122.478] wcscmp (_String1="BCSStr32.dll", _String2=".") returned 1 [0122.478] wcscmp (_String1="BCSStr32.dll", _String2="..") returned 1 [0122.478] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b8cd00, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6b8cd00, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x16580, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSSync.exe", cAlternateFileName="")) returned 1 [0122.478] wcscmp (_String1="BCSSync.exe", _String2=".") returned 1 [0122.478] wcscmp (_String1="BCSSync.exe", _String2="..") returned 1 [0122.478] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe20600, ftCreationTime.dwHighDateTime=0x1cac09a, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdbe20600, ftLastWriteTime.dwHighDateTime=0x1cac09a, nFileSizeHigh=0x0, nFileSizeLow=0x65ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="BDCMET~1.XSD")) returned 1 [0122.479] wcscmp (_String1="bdcmetadata.xsd", _String2=".") returned 1 [0122.479] wcscmp (_String1="bdcmetadata.xsd", _String2="..") returned 1 [0122.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da6370 [0122.479] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.479] wcscat (in: _Dest=0x3da6370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.479] wcscat (in: _Dest=0x3da6370, _Source="bdcmetadata.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" [0122.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da6370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0122.480] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe20600, ftCreationTime.dwHighDateTime=0x1cac09a, ftLastAccessTime.dwLowDateTime=0x869dc5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdbe20600, ftLastWriteTime.dwHighDateTime=0x1cac09a, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="BDCMET~2.XSD")) returned 1 [0122.480] wcscmp (_String1="bdcmetadataresource.xsd", _String2=".") returned 1 [0122.480] wcscmp (_String1="bdcmetadataresource.xsd", _String2="..") returned 1 [0122.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d442a0 [0122.481] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.481] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.481] wcscat (in: _Dest=0x3d442a0, _Source="bdcmetadataresource.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" [0122.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0122.482] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85da9510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0122.482] wcscmp (_String1="Bibliography", _String2=".") returned 1 [0122.482] wcscmp (_String1="Bibliography", _String2="..") returned 1 [0122.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f038 [0122.482] wcscpy (in: _Dest=0x3f3f038, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.482] wcscat (in: _Dest=0x3f3f038, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.482] wcscat (in: _Dest=0x3f3f038, _Source="Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0122.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0122.484] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d4fa3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1 [0122.484] wcscmp (_String1="BORDERS", _String2=".") returned 1 [0122.484] wcscmp (_String1="BORDERS", _String2="..") returned 1 [0122.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a262a8 [0122.484] wcscpy (in: _Dest=0x7a262a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.484] wcscat (in: _Dest=0x7a262a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.484] wcscat (in: _Dest=0x7a262a8, _Source="BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0122.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a262a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x940 [0122.486] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90c0670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x21f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1 [0122.486] wcscmp (_String1="BRTVIEW.DLL", _String2=".") returned 1 [0122.486] wcscmp (_String1="BRTVIEW.DLL", _String2="..") returned 1 [0122.486] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8bd7910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1 [0122.486] wcscmp (_String1="BSTORM.DLL", _String2=".") returned 1 [0122.487] wcscmp (_String1="BSTORM.DLL", _String2="..") returned 1 [0122.487] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeffef000, ftCreationTime.dwHighDateTime=0x1cba639, ftLastAccessTime.dwLowDateTime=0xf72c8430, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xeffef000, ftLastWriteTime.dwHighDateTime=0x1cba639, nFileSizeHigh=0x0, nFileSizeLow=0x60f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLMSO.DLL", cAlternateFileName="")) returned 1 [0122.487] wcscmp (_String1="CDLMSO.DLL", _String2=".") returned 1 [0122.487] wcscmp (_String1="CDLMSO.DLL", _String2="..") returned 1 [0122.487] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a1d600, ftCreationTime.dwHighDateTime=0x1bcac51, ftLastAccessTime.dwLowDateTime=0x3527e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26a1d600, ftLastWriteTime.dwHighDateTime=0x1bcac51, nFileSizeHigh=0x0, nFileSizeLow=0x7b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.HLP", cAlternateFileName="")) returned 1 [0122.487] wcscmp (_String1="CGMIMP32.HLP", _String2=".") returned 1 [0122.487] wcscmp (_String1="CGMIMP32.HLP", _String2="..") returned 1 [0122.487] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49842800, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49842800, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0xdcc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CharSetTable.chr", cAlternateFileName="CHARSE~1.CHR")) returned 1 [0122.487] wcscmp (_String1="CharSetTable.chr", _String2=".") returned 1 [0122.487] wcscmp (_String1="CharSetTable.chr", _String2="..") returned 1 [0122.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1ab18 [0122.487] wcscpy (in: _Dest=0x3e1ab18, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.487] wcscat (in: _Dest=0x3e1ab18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.487] wcscat (in: _Dest=0x3e1ab18, _Source="CharSetTable.chr" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr") returned="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" [0122.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ab18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0122.489] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67250900, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf50907f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x67250900, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x33578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1 [0122.489] wcscmp (_String1="CLVIEW.EXE", _String2=".") returned 1 [0122.489] wcscmp (_String1="CLVIEW.EXE", _String2="..") returned 1 [0122.489] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8afeab00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90e67d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8afeab00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x7a578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAX20.DLL", cAlternateFileName="")) returned 1 [0122.489] wcscmp (_String1="CMAX20.DLL", _String2=".") returned 1 [0122.489] wcscmp (_String1="CMAX20.DLL", _String2="..") returned 1 [0122.489] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x24f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1 [0122.489] wcscmp (_String1="CNFNOT32.EXE", _String2=".") returned 1 [0122.489] wcscmp (_String1="CNFNOT32.EXE", _String2="..") returned 1 [0122.489] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90e67d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="CODEEDIT.DLL", cAlternateFileName="")) returned 1 [0122.489] wcscmp (_String1="CODEEDIT.DLL", _String2=".") returned 1 [0122.489] wcscmp (_String1="CODEEDIT.DLL", _String2="..") returned 1 [0122.489] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efe4100, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x86cafff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6efe4100, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x20f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1 [0122.490] wcscmp (_String1="CONTAB32.DLL", _String2=".") returned 1 [0122.490] wcscmp (_String1="CONTAB32.DLL", _String2="..") returned 1 [0122.490] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45a51900, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45a51900, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x28f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPicker.dll", cAlternateFileName="CONTAC~1.DLL")) returned 1 [0122.490] wcscmp (_String1="ContactPicker.dll", _String2=".") returned 1 [0122.490] wcscmp (_String1="ContactPicker.dll", _String2="..") returned 1 [0122.490] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x907b58b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1 [0122.490] wcscmp (_String1="CONVERT", _String2=".") returned 1 [0122.490] wcscmp (_String1="CONVERT", _String2="..") returned 1 [0122.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26318 [0122.490] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0122.490] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0122.490] wcscat (in: _Dest=0x7a26318, _Source="CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0122.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0123.042] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e19800, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xd87ae950, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa7e19800, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x78db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1 [0123.042] wcscmp (_String1="CSS7DATA0009.DLL", _String2=".") returned 1 [0123.042] wcscmp (_String1="CSS7DATA0009.DLL", _String2="..") returned 1 [0123.042] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1e0b00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf6f6dd0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xab1e0b00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0xa51b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="CSS7DA~1.DLL")) returned 1 [0123.042] wcscmp (_String1="CSS7DATA000A.DLL", _String2=".") returned 1 [0123.042] wcscmp (_String1="CSS7DATA000A.DLL", _String2="..") returned 1 [0123.042] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d5fe00, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdbdfbf30, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99d5fe00, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0xa3fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="CSS7DA~2.DLL")) returned 1 [0123.042] wcscmp (_String1="CSS7DATA000C.DLL", _String2=".") returned 1 [0123.042] wcscmp (_String1="CSS7DATA000C.DLL", _String2="..") returned 1 [0123.042] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee05000, ftCreationTime.dwHighDateTime=0x1c8da63, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee05000, ftLastWriteTime.dwHighDateTime=0x1c8da63, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="CUSTOM~1.PRO")) returned 1 [0123.042] wcscmp (_String1="Custom.propdesc", _String2=".") returned 1 [0123.042] wcscmp (_String1="Custom.propdesc", _String2="..") returned 1 [0123.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5e70 [0123.043] wcscpy (in: _Dest=0x3da5e70, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0123.043] wcscat (in: _Dest=0x3da5e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0123.043] wcscat (in: _Dest=0x3da5e70, _Source="Custom.propdesc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc") returned="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" [0134.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0134.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe910c930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x56f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1 [0134.575] wcscmp (_String1="DATAGATH.DLL", _String2=".") returned 1 [0134.575] wcscmp (_String1="DATAGATH.DLL", _String2="..") returned 1 [0134.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f93a000, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8bd7910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6f93a000, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xa1978, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.DLL", cAlternateFileName="")) returned 1 [0134.575] wcscmp (_String1="DBENGR.DLL", _String2=".") returned 1 [0134.575] wcscmp (_String1="DBENGR.DLL", _String2="..") returned 1 [0134.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2c4700, ftCreationTime.dwHighDateTime=0x1c98311, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb2c4700, ftLastWriteTime.dwHighDateTime=0x1c98311, nFileSizeHigh=0x0, nFileSizeLow=0x107d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0134.575] wcscmp (_String1="DBGHELP.DLL", _String2=".") returned 1 [0134.575] wcscmp (_String1="DBGHELP.DLL", _String2="..") returned 1 [0134.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe910c930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x147c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSHARE.DLL", cAlternateFileName="")) returned 1 [0134.575] wcscmp (_String1="DBSHARE.DLL", _String2=".") returned 1 [0134.575] wcscmp (_String1="DBSHARE.DLL", _String2="..") returned 1 [0134.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9132a90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xe1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1 [0134.575] wcscmp (_String1="DBWIZ.DLL", _String2=".") returned 1 [0134.575] wcscmp (_String1="DBWIZ.DLL", _String2="..") returned 1 [0134.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e01fe00, ftCreationTime.dwHighDateTime=0x1cb7188, ftLastAccessTime.dwLowDateTime=0xe9132a90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e01fe00, ftLastWriteTime.dwHighDateTime=0x1cb7188, nFileSizeHigh=0x0, nFileSizeLow=0x14768, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1 [0134.575] wcscmp (_String1="DGRMLNCH.DLL", _String2=".") returned 1 [0134.575] wcscmp (_String1="DGRMLNCH.DLL", _String2="..") returned 1 [0134.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x15570, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1 [0134.575] wcscmp (_String1="DLGSETP.DLL", _String2=".") returned 1 [0134.576] wcscmp (_String1="DLGSETP.DLL", _String2="..") returned 1 [0134.576] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="DOCUME~1")) returned 1 [0134.576] wcscmp (_String1="Document Parts", _String2=".") returned 1 [0134.576] wcscmp (_String1="Document Parts", _String2="..") returned 1 [0134.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da65f0 [0134.576] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.576] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.576] wcscat (in: _Dest=0x3da65f0, _Source="Document Parts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" [0134.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da65f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0134.578] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a524a00, ftCreationTime.dwHighDateTime=0x1cb722b, ftLastAccessTime.dwLowDateTime=0xe8bfda70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a524a00, ftLastWriteTime.dwHighDateTime=0x1cb722b, nFileSizeHigh=0x0, nFileSizeLow=0xe2578, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0134.578] wcscmp (_String1="DRILLDWN.DLL", _String2=".") returned 1 [0134.578] wcscmp (_String1="DRILLDWN.DLL", _String2="..") returned 1 [0134.578] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff23f200, ftCreationTime.dwHighDateTime=0x1cba0bd, ftLastAccessTime.dwLowDateTime=0xe8c23bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xff23f200, ftLastWriteTime.dwHighDateTime=0x1cba0bd, nFileSizeHigh=0x0, nFileSizeLow=0x23760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0134.578] wcscmp (_String1="DWGCNV.DLL", _String2=".") returned 1 [0134.578] wcscmp (_String1="DWGCNV.DLL", _String2="..") returned 1 [0134.578] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75752400, ftCreationTime.dwHighDateTime=0x1cba0bf, ftLastAccessTime.dwLowDateTime=0xe8c95ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x75752400, ftLastWriteTime.dwHighDateTime=0x1cba0bf, nFileSizeHigh=0x0, nFileSizeLow=0x59c368, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0134.578] wcscmp (_String1="DWGDP.DLL", _String2=".") returned 1 [0134.578] wcscmp (_String1="DWGDP.DLL", _String2="..") returned 1 [0134.578] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9158bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITOR.EXE", cAlternateFileName="")) returned 1 [0134.578] wcscmp (_String1="EDITOR.EXE", _String2=".") returned 1 [0134.578] wcscmp (_String1="EDITOR.EXE", _String2="..") returned 1 [0134.578] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9158bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x9588, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITORS.DLL", cAlternateFileName="")) returned 1 [0134.578] wcscmp (_String1="EDITORS.DLL", _String2=".") returned 1 [0134.579] wcscmp (_String1="EDITORS.DLL", _String2="..") returned 1 [0134.579] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe917ed50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x31388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMENTS.DLL", cAlternateFileName="")) returned 1 [0134.579] wcscmp (_String1="ELEMENTS.DLL", _String2=".") returned 1 [0134.579] wcscmp (_String1="ELEMENTS.DLL", _String2="..") returned 1 [0134.579] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe917ed50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMUTIL.DLL", cAlternateFileName="")) returned 1 [0134.579] wcscmp (_String1="ELEMUTIL.DLL", _String2=".") returned 1 [0134.579] wcscmp (_String1="ELEMUTIL.DLL", _String2="..") returned 1 [0134.579] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x878249d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x1c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0134.579] wcscmp (_String1="EMABLT32.DLL", _String2=".") returned 1 [0134.579] wcscmp (_String1="EMABLT32.DLL", _String2="..") returned 1 [0134.579] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efe4100, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x87896df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6efe4100, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x17a7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0134.579] wcscmp (_String1="EMSMDB32.DLL", _String2=".") returned 1 [0134.579] wcscmp (_String1="EMSMDB32.DLL", _String2="..") returned 1 [0134.579] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab55500, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x87896df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ab55500, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x46c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGDIC.DAT", cAlternateFileName="")) returned 1 [0134.579] wcscmp (_String1="ENGDIC.DAT", _String2=".") returned 1 [0134.579] wcscmp (_String1="ENGDIC.DAT", _String2="..") returned 1 [0134.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f830 [0134.580] wcscpy (in: _Dest=0x3f3f830, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.580] wcscat (in: _Dest=0x3f3f830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.580] wcscat (in: _Dest=0x3f3f830, _Source="ENGDIC.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" [0134.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0134.582] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab55500, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ab55500, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x8578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGIDX.DAT", cAlternateFileName="")) returned 1 [0134.582] wcscmp (_String1="ENGIDX.DAT", _String2=".") returned 1 [0134.582] wcscmp (_String1="ENGIDX.DAT", _String2="..") returned 1 [0134.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f6c8 [0134.582] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.582] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.582] wcscat (in: _Dest=0x3f3f6c8, _Source="ENGIDX.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" [0134.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f6c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0134.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618eab00, ftCreationTime.dwHighDateTime=0x1c3e3ed, ftLastAccessTime.dwLowDateTime=0x519710d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x618eab00, ftLastWriteTime.dwHighDateTime=0x1c3e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x4c22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGLISH.LNG", cAlternateFileName="")) returned 1 [0134.584] wcscmp (_String1="ENGLISH.LNG", _String2=".") returned 1 [0134.584] wcscmp (_String1="ENGLISH.LNG", _String2="..") returned 1 [0134.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f308 [0134.584] wcscpy (in: _Dest=0x3f3f308, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.584] wcscat (in: _Dest=0x3f3f308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.584] wcscat (in: _Dest=0x3f3f308, _Source="ENGLISH.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" [0134.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0134.586] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332dd500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x878bcf50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x332dd500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0xbd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1 [0134.586] wcscmp (_String1="EntityDataHandler.dll", _String2=".") returned 1 [0134.586] wcscmp (_String1="EntityDataHandler.dll", _String2="..") returned 1 [0134.586] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345f0200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x345f0200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x2ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0134.586] wcscmp (_String1="EntityPicker.dll", _String2=".") returned 1 [0134.586] wcscmp (_String1="EntityPicker.dll", _String2="..") returned 1 [0134.586] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x25d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0134.586] wcscmp (_String1="ENVELOPE.DLL", _String2=".") returned 1 [0134.587] wcscmp (_String1="ENVELOPE.DLL", _String2="..") returned 1 [0134.587] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdcf4cb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xffa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERXIMP.ADD", cAlternateFileName="")) returned 1 [0134.587] wcscmp (_String1="ERXIMP.ADD", _String2=".") returned 1 [0134.587] wcscmp (_String1="ERXIMP.ADD", _String2="..") returned 1 [0134.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f740 [0134.587] wcscpy (in: _Dest=0x3f3f740, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.587] wcscat (in: _Dest=0x3f3f740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.587] wcscat (in: _Dest=0x3f3f740, _Source="ERXIMP.ADD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD") returned="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" [0134.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0134.588] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc274d000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc274d000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x13cad60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0134.588] wcscmp (_String1="EXCEL.EXE", _String2=".") returned 1 [0134.588] wcscmp (_String1="EXCEL.EXE", _String2="..") returned 1 [0134.588] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ddd700, ftCreationTime.dwHighDateTime=0x1cac255, ftLastAccessTime.dwLowDateTime=0x77462910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7ddd700, ftLastWriteTime.dwHighDateTime=0x1cac255, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1 [0134.589] wcscmp (_String1="excel.exe.manifest", _String2=".") returned 1 [0134.589] wcscmp (_String1="excel.exe.manifest", _String2="..") returned 1 [0134.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3062c30 [0134.589] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.589] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.589] wcscat (in: _Dest=0x3062c30, _Source="excel.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" [0134.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0134.590] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c6f700, ftCreationTime.dwHighDateTime=0x1cac257, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7c6f700, ftLastWriteTime.dwHighDateTime=0x1cac257, nFileSizeHigh=0x0, nFileSizeLow=0x10f9d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0134.590] wcscmp (_String1="excelcnv.exe", _String2=".") returned 1 [0134.590] wcscmp (_String1="excelcnv.exe", _String2="..") returned 1 [0134.590] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c6f700, ftCreationTime.dwHighDateTime=0x1cac257, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7c6f700, ftLastWriteTime.dwHighDateTime=0x1cac257, nFileSizeHigh=0x0, nFileSizeLow=0xcf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1 [0134.590] wcscmp (_String1="excelcnvpxy.dll", _String2=".") returned 1 [0134.590] wcscmp (_String1="excelcnvpxy.dll", _String2="..") returned 1 [0134.590] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1372c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRM.XML", cAlternateFileName="")) returned 1 [0134.590] wcscmp (_String1="EXLIRM.XML", _String2=".") returned 1 [0134.591] wcscmp (_String1="EXLIRM.XML", _String2="..") returned 1 [0134.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f560 [0134.591] wcscpy (in: _Dest=0x3f3f560, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.591] wcscat (in: _Dest=0x3f3f560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.591] wcscat (in: _Dest=0x3f3f560, _Source="EXLIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" [0134.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0134.592] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1 [0134.592] wcscmp (_String1="EXLIRMV.XML", _String2=".") returned 1 [0134.592] wcscmp (_String1="EXLIRMV.XML", _String2="..") returned 1 [0134.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f998 [0134.593] wcscpy (in: _Dest=0x3f3f998, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.593] wcscat (in: _Dest=0x3f3f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.593] wcscat (in: _Dest=0x3f3f998, _Source="EXLIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" [0134.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0134.594] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x50950, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0134.594] wcscmp (_String1="EXSEC32.DLL", _String2=".") returned 1 [0134.594] wcscmp (_String1="EXSEC32.DLL", _String2="..") returned 1 [0134.594] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe917ed50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x393a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTRACT.DLL", cAlternateFileName="")) returned 1 [0134.594] wcscmp (_String1="EXTRACT.DLL", _String2=".") returned 1 [0134.594] wcscmp (_String1="EXTRACT.DLL", _String2="..") returned 1 [0134.594] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8cbc150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xf7968, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0134.594] wcscmp (_String1="FACILITY.DLL", _String2=".") returned 1 [0134.594] wcscmp (_String1="FACILITY.DLL", _String2="..") returned 1 [0134.594] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x34180, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.DLL", cAlternateFileName="")) returned 1 [0134.595] wcscmp (_String1="FORM.DLL", _String2=".") returned 1 [0134.595] wcscmp (_String1="FORM.DLL", _String2="..") returned 1 [0134.595] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ba9270, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0134.595] wcscmp (_String1="FORMS", _String2=".") returned 1 [0134.595] wcscmp (_String1="FORMS", _String2="..") returned 1 [0134.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a22ff0 [0134.595] wcscpy (in: _Dest=0x7a22ff0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.595] wcscat (in: _Dest=0x7a22ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.595] wcscat (in: _Dest=0x7a22ff0, _Source="FORMS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" [0134.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a22ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0134.596] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618eab00, ftCreationTime.dwHighDateTime=0x1c3e3ed, ftLastAccessTime.dwLowDateTime=0x4e669930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x618eab00, ftLastWriteTime.dwHighDateTime=0x1c3e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x88933, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRENCH.LNG", cAlternateFileName="")) returned 1 [0134.596] wcscmp (_String1="FRENCH.LNG", _String2=".") returned 1 [0134.596] wcscmp (_String1="FRENCH.LNG", _String2="..") returned 1 [0134.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f920 [0134.596] wcscpy (in: _Dest=0x3f3f920, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.596] wcscat (in: _Dest=0x3f3f920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.596] wcscat (in: _Dest=0x3f3f920, _Source="FRENCH.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" [0134.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0134.597] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8ce22b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xe8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1 [0134.597] wcscmp (_String1="GANTT.DLL", _String2=".") returned 1 [0134.597] wcscmp (_String1="GANTT.DLL", _String2="..") returned 1 [0134.597] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5957100, ftCreationTime.dwHighDateTime=0x1cbca52, ftLastAccessTime.dwLowDateTime=0xf6d93410, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x5957100, ftLastWriteTime.dwHighDateTime=0x1cbca52, nFileSizeHigh=0x0, nFileSizeLow=0x1aad68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GFX.DLL", cAlternateFileName="")) returned 1 [0134.598] wcscmp (_String1="GFX.DLL", _String2=".") returned 1 [0134.598] wcscmp (_String1="GFX.DLL", _String2="..") returned 1 [0134.598] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb18d00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x88705350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaeb18d00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0x333180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1 [0134.598] wcscmp (_String1="GKExcel.dll", _String2=".") returned 1 [0134.598] wcscmp (_String1="GKExcel.dll", _String2="..") returned 1 [0134.598] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb18d00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x77ef2ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaeb18d00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0x201580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="GKPOWE~1.DLL")) returned 1 [0134.598] wcscmp (_String1="GKPowerPoint.dll", _String2=".") returned 1 [0134.598] wcscmp (_String1="GKPowerPoint.dll", _String2="..") returned 1 [0134.598] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb18d00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaeb18d00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0x237580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1 [0134.598] wcscmp (_String1="GKWord.dll", _String2=".") returned 1 [0134.598] wcscmp (_String1="GKWord.dll", _String2="..") returned 1 [0134.598] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba7a700, ftCreationTime.dwHighDateTime=0x1cac246, ftLastAccessTime.dwLowDateTime=0x77f64ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba7a700, ftLastWriteTime.dwHighDateTime=0x1cac246, nFileSizeHigh=0x0, nFileSizeLow=0x419b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1 [0134.598] wcscmp (_String1="GRAPH.EXE", _String2=".") returned 1 [0134.598] wcscmp (_String1="GRAPH.EXE", _String2="..") returned 1 [0134.598] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6efd00, ftCreationTime.dwHighDateTime=0x1cac244, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6efd00, ftLastWriteTime.dwHighDateTime=0x1cac244, nFileSizeHigh=0x0, nFileSizeLow=0x3be, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="GRAPHE~1.MAN")) returned 1 [0134.598] wcscmp (_String1="Graph.exe.manifest", _String2=".") returned 1 [0134.598] wcscmp (_String1="Graph.exe.manifest", _String2="..") returned 1 [0134.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3062a10 [0134.598] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.598] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.598] wcscat (in: _Dest=0x3062a10, _Source="Graph.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" [0134.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0134.599] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82ab600, ftCreationTime.dwHighDateTime=0x1c3b9b4, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc82ab600, ftLastWriteTime.dwHighDateTime=0x1c3b9b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1 [0134.599] wcscmp (_String1="GRAPH.ICO", _String2=".") returned 1 [0134.599] wcscmp (_String1="GRAPH.ICO", _String2="..") returned 1 [0134.599] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x824623b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0134.599] wcscmp (_String1="Groove", _String2=".") returned 1 [0134.599] wcscmp (_String1="Groove", _String2="..") returned 1 [0134.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23f40 [0134.599] wcscpy (in: _Dest=0x7a23f40, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.600] wcscat (in: _Dest=0x7a23f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.600] wcscat (in: _Dest=0x7a23f40, _Source="Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0134.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0134.601] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1ae500, ftCreationTime.dwHighDateTime=0x1cacc16, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d1ae500, ftLastWriteTime.dwHighDateTime=0x1cacc16, nFileSizeHigh=0x0, nFileSizeLow=0x1d88d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1 [0134.601] wcscmp (_String1="GROOVE.EXE", _String2=".") returned 1 [0134.601] wcscmp (_String1="GROOVE.EXE", _String2="..") returned 1 [0134.601] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1ae500, ftCreationTime.dwHighDateTime=0x1cacc16, ftLastAccessTime.dwLowDateTime=0x78d3aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d1ae500, ftLastWriteTime.dwHighDateTime=0x1cacc16, nFileSizeHigh=0x0, nFileSizeLow=0x406f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0134.601] wcscmp (_String1="GROOVEEX.DLL", _String2=".") returned 1 [0134.601] wcscmp (_String1="GROOVEEX.DLL", _String2="..") returned 1 [0134.601] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305fa800, ftCreationTime.dwHighDateTime=0x1cacba8, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x305fa800, ftLastWriteTime.dwHighDateTime=0x1cacba8, nFileSizeHigh=0x0, nFileSizeLow=0xe6788, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEMN.EXE", cAlternateFileName="")) returned 1 [0134.605] wcscmp (_String1="GROOVEMN.EXE", _String2=".") returned 1 [0134.605] wcscmp (_String1="GROOVEMN.EXE", _String2="..") returned 1 [0134.605] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d08410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x55168, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1 [0134.605] wcscmp (_String1="HVAC.DLL", _String2=".") returned 1 [0134.605] wcscmp (_String1="HVAC.DLL", _String2="..") returned 1 [0134.605] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefad1200, ftCreationTime.dwHighDateTime=0x1cbcf63, ftLastAccessTime.dwLowDateTime=0xf5044530, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xefad1200, ftLastWriteTime.dwHighDateTime=0x1cbcf63, nFileSizeHigh=0x0, nFileSizeLow=0x2ff60, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0134.605] wcscmp (_String1="IEAWSDC.DLL", _String2=".") returned 1 [0134.605] wcscmp (_String1="IEAWSDC.DLL", _String2="..") returned 1 [0134.605] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7ad00, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7ad00, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x8d3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEContentService.exe", cAlternateFileName="IECONT~1.EXE")) returned 1 [0134.605] wcscmp (_String1="IEContentService.exe", _String2=".") returned 1 [0134.605] wcscmp (_String1="IEContentService.exe", _String2="..") returned 1 [0134.605] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91cb010, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x7b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCOMMON.DLL", cAlternateFileName="")) returned 1 [0134.605] wcscmp (_String1="IMCOMMON.DLL", _String2=".") returned 1 [0134.605] wcscmp (_String1="IMCOMMON.DLL", _String2="..") returned 1 [0134.605] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbdf30150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMDIMP.ADD", cAlternateFileName="")) returned 1 [0134.605] wcscmp (_String1="IMDIMP.ADD", _String2=".") returned 1 [0134.605] wcscmp (_String1="IMDIMP.ADD", _String2="..") returned 1 [0134.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f8a8 [0134.605] wcscpy (in: _Dest=0x3f3f8a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.605] wcscat (in: _Dest=0x3f3f8a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.605] wcscat (in: _Dest=0x3f3f8a8, _Source="IMDIMP.ADD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD") returned="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" [0134.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0134.606] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x20f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMPMAIL.DLL", cAlternateFileName="")) returned 1 [0134.606] wcscmp (_String1="IMPMAIL.DLL", _String2=".") returned 1 [0134.607] wcscmp (_String1="IMPMAIL.DLL", _String2="..") returned 1 [0134.607] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91cb010, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x23d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMUTIL.DLL", cAlternateFileName="")) returned 1 [0134.607] wcscmp (_String1="IMUTIL.DLL", _String2=".") returned 1 [0134.607] wcscmp (_String1="IMUTIL.DLL", _String2="..") returned 1 [0134.607] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91cb010, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x29d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWDD.DLL", cAlternateFileName="")) returned 1 [0134.607] wcscmp (_String1="IMWDD.DLL", _String2=".") returned 1 [0134.607] wcscmp (_String1="IMWDD.DLL", _String2="..") returned 1 [0134.607] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe91f1170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x3b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWIZ.DLL", cAlternateFileName="")) returned 1 [0134.607] wcscmp (_String1="IMWIZ.DLL", _String2=".") returned 1 [0134.607] wcscmp (_String1="IMWIZ.DLL", _String2="..") returned 1 [0134.607] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4c4200, ftCreationTime.dwHighDateTime=0x1cacff4, ftLastAccessTime.dwLowDateTime=0x88c86630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc4c4200, ftLastWriteTime.dwHighDateTime=0x1cacff4, nFileSizeHigh=0x0, nFileSizeLow=0x1a7570, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.EXE", cAlternateFileName="")) returned 1 [0134.607] wcscmp (_String1="INFOPATH.EXE", _String2=".") returned 1 [0134.607] wcscmp (_String1="INFOPATH.EXE", _String2="..") returned 1 [0134.607] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8922da70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOM", cAlternateFileName="INFOPA~1")) returned 1 [0134.607] wcscmp (_String1="InfoPathOM", _String2=".") returned 1 [0134.607] wcscmp (_String1="InfoPathOM", _String2="..") returned 1 [0134.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fbf0 [0134.607] wcscpy (in: _Dest=0x3f3fbf0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.607] wcscat (in: _Dest=0x3f3fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.607] wcscat (in: _Dest=0x3f3fbf0, _Source="InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0134.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3fbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0134.609] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65d4d800, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x65d4d800, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x62978, dwReserved0=0x0, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1 [0134.609] wcscmp (_String1="INLAUNCH.DLL", _String2=".") returned 1 [0134.609] wcscmp (_String1="INLAUNCH.DLL", _String2="..") returned 1 [0134.609] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9433a200, ftCreationTime.dwHighDateTime=0x1cacba3, ftLastAccessTime.dwLowDateTime=0x7900e8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9433a200, ftLastWriteTime.dwHighDateTime=0x1cacba3, nFileSizeHigh=0x0, nFileSizeLow=0x1bac000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_resources14.xss", cAlternateFileName="INSTAL~1.XSS")) returned 1 [0134.609] wcscmp (_String1="Installed_resources14.xss", _String2=".") returned 1 [0134.609] wcscmp (_String1="Installed_resources14.xss", _String2="..") returned 1 [0134.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb71e8 [0134.609] wcscpy (in: _Dest=0x3eb71e8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.609] wcscat (in: _Dest=0x3eb71e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.609] wcscat (in: _Dest=0x3eb71e8, _Source="Installed_resources14.xss" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss") returned="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" [0134.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb71e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0134.932] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9433a200, ftCreationTime.dwHighDateTime=0x1cacba3, ftLastAccessTime.dwLowDateTime=0x790ccfb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9433a200, ftLastWriteTime.dwHighDateTime=0x1cacba3, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_schemas14.xss", cAlternateFileName="INSTAL~2.XSS")) returned 1 [0134.932] wcscmp (_String1="Installed_schemas14.xss", _String2=".") returned 1 [0134.932] wcscmp (_String1="Installed_schemas14.xss", _String2="..") returned 1 [0134.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df1b98 [0134.932] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0134.932] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0134.932] wcscat (in: _Dest=0x3df1b98, _Source="Installed_schemas14.xss" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss") returned="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" [0140.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss")) returned 0x20 [0140.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss", dwFileAttributes=0x20) returned 0 [0140.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.547] GetLastError () returned 0x5 [0140.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss", dwFileAttributes=0x20) returned 0 [0140.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.547] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb40e4400, ftCreationTime.dwHighDateTime=0x1cb7066, ftLastAccessTime.dwLowDateTime=0xf590b650, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb40e4400, ftLastWriteTime.dwHighDateTime=0x1cb7066, nFileSizeHigh=0x0, nFileSizeLow=0x13580, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTLDATE.DLL", cAlternateFileName="")) returned 1 [0140.547] wcscmp (_String1="INTLDATE.DLL", _String2=".") returned 1 [0140.547] wcscmp (_String1="INTLDATE.DLL", _String2="..") returned 1 [0140.547] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4c4200, ftCreationTime.dwHighDateTime=0x1cacff4, ftLastAccessTime.dwLowDateTime=0x7a3fe110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc4c4200, ftLastWriteTime.dwHighDateTime=0x1cacff4, nFileSizeHigh=0x0, nFileSizeLow=0x598978, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDESIGN.DLL", cAlternateFileName="")) returned 1 [0140.547] wcscmp (_String1="IPDESIGN.DLL", _String2=".") returned 1 [0140.547] wcscmp (_String1="IPDESIGN.DLL", _String2="..") returned 1 [0140.548] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc4c4200, ftCreationTime.dwHighDateTime=0x1cacff4, ftLastAccessTime.dwLowDateTime=0x7a4e2950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc4c4200, ftLastWriteTime.dwHighDateTime=0x1cacff4, nFileSizeHigh=0x0, nFileSizeLow=0x53df70, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDITOR.DLL", cAlternateFileName="")) returned 1 [0140.548] wcscmp (_String1="IPEDITOR.DLL", _String2=".") returned 1 [0140.548] wcscmp (_String1="IPEDITOR.DLL", _String2="..") returned 1 [0140.548] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x89149230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1375c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRM.XML", cAlternateFileName="")) returned 1 [0140.548] wcscmp (_String1="IPIRM.XML", _String2=".") returned 1 [0140.548] wcscmp (_String1="IPIRM.XML", _String2="..") returned 1 [0140.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b018 [0140.548] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.548] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.548] wcscat (in: _Dest=0x3e3b018, _Source="IPIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" [0140.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml")) returned 0x20 [0140.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML", dwFileAttributes=0x20) returned 0 [0140.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.549] GetLastError () returned 0x5 [0140.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML", dwFileAttributes=0x20) returned 0 [0140.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x7a4e2950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x135a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRMV.XML", cAlternateFileName="")) returned 1 [0140.549] wcscmp (_String1="IPIRMV.XML", _String2=".") returned 1 [0140.549] wcscmp (_String1="IPIRMV.XML", _String2="..") returned 1 [0140.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3b018 [0140.549] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.549] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.550] wcscat (in: _Dest=0x3e3b018, _Source="IPIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" [0140.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml")) returned 0x20 [0140.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML", dwFileAttributes=0x20) returned 0 [0140.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.550] GetLastError () returned 0x5 [0140.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML", dwFileAttributes=0x20) returned 0 [0140.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.550] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x29588, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLK.DLL", cAlternateFileName="")) returned 1 [0140.551] wcscmp (_String1="IPOLK.DLL", _String2=".") returned 1 [0140.551] wcscmp (_String1="IPOLK.DLL", _String2="..") returned 1 [0140.551] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x39da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXACS.PDL", cAlternateFileName="")) returned 1 [0140.551] wcscmp (_String1="IXACS.PDL", _String2=".") returned 1 [0140.551] wcscmp (_String1="IXACS.PDL", _String2="..") returned 1 [0140.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b018 [0140.551] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.551] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.551] wcscat (in: _Dest=0x3e3b018, _Source="IXACS.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" [0140.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl")) returned 0x20 [0140.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL", dwFileAttributes=0x20) returned 0 [0140.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.551] GetLastError () returned 0x5 [0140.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL", dwFileAttributes=0x20) returned 0 [0140.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.552] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x29188, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXDB2.PDL", cAlternateFileName="")) returned 1 [0140.552] wcscmp (_String1="IXDB2.PDL", _String2=".") returned 1 [0140.552] wcscmp (_String1="IXDB2.PDL", _String2="..") returned 1 [0140.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b018 [0140.552] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.552] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.552] wcscat (in: _Dest=0x3e3b018, _Source="IXDB2.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" [0140.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl")) returned 0x20 [0140.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL", dwFileAttributes=0x20) returned 0 [0140.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.553] GetLastError () returned 0x5 [0140.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL", dwFileAttributes=0x20) returned 0 [0140.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.553] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x137b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXGENERC.PDL", cAlternateFileName="")) returned 1 [0140.553] wcscmp (_String1="IXGENERC.PDL", _String2=".") returned 1 [0140.553] wcscmp (_String1="IXGENERC.PDL", _String2="..") returned 1 [0140.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0140.553] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.553] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.553] wcscat (in: _Dest=0x3e3b018, _Source="IXGENERC.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" [0140.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl")) returned 0x20 [0140.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL", dwFileAttributes=0x20) returned 0 [0140.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.554] GetLastError () returned 0x5 [0140.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL", dwFileAttributes=0x20) returned 0 [0140.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.554] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf562b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x219a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXOLEDB.PDL", cAlternateFileName="")) returned 1 [0140.554] wcscmp (_String1="IXOLEDB.PDL", _String2=".") returned 1 [0140.554] wcscmp (_String1="IXOLEDB.PDL", _String2="..") returned 1 [0140.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e3b018 [0140.554] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.554] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.554] wcscat (in: _Dest=0x3e3b018, _Source="IXOLEDB.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" [0140.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl")) returned 0x20 [0140.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL", dwFileAttributes=0x20) returned 0 [0140.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.555] GetLastError () returned 0x5 [0140.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL", dwFileAttributes=0x20) returned 0 [0140.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.555] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x4b1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXORACLE.PDL", cAlternateFileName="")) returned 1 [0140.555] wcscmp (_String1="IXORACLE.PDL", _String2=".") returned 1 [0140.555] wcscmp (_String1="IXORACLE.PDL", _String2="..") returned 1 [0140.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0140.555] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.555] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.555] wcscat (in: _Dest=0x3e3b018, _Source="IXORACLE.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" [0140.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl")) returned 0x20 [0140.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL", dwFileAttributes=0x20) returned 0 [0140.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.556] GetLastError () returned 0x5 [0140.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL", dwFileAttributes=0x20) returned 0 [0140.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.556] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x25fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXSSRV.PDL", cAlternateFileName="")) returned 1 [0140.556] wcscmp (_String1="IXSSRV.PDL", _String2=".") returned 1 [0140.556] wcscmp (_String1="IXSSRV.PDL", _String2="..") returned 1 [0140.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3b018 [0140.557] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.557] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.557] wcscat (in: _Dest=0x3e3b018, _Source="IXSSRV.PDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" [0140.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl")) returned 0x20 [0140.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL", dwFileAttributes=0x20) returned 0 [0140.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.557] GetLastError () returned 0x5 [0140.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL", dwFileAttributes=0x20) returned 0 [0140.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.557] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92172d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x39780, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXUTIL.DLL", cAlternateFileName="")) returned 1 [0140.557] wcscmp (_String1="IXUTIL.DLL", _String2=".") returned 1 [0140.558] wcscmp (_String1="IXUTIL.DLL", _String2="..") returned 1 [0140.558] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d17af00, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d17af00, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x499c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JFONT.DAT", cAlternateFileName="")) returned 1 [0140.558] wcscmp (_String1="JFONT.DAT", _String2=".") returned 1 [0140.558] wcscmp (_String1="JFONT.DAT", _String2="..") returned 1 [0140.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b018 [0140.558] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.558] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.558] wcscat (in: _Dest=0x3e3b018, _Source="JFONT.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" [0140.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat")) returned 0x20 [0140.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT", dwFileAttributes=0x20) returned 0 [0140.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.558] GetLastError () returned 0x5 [0140.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT", dwFileAttributes=0x20) returned 0 [0140.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.559] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x89e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LATIN1.SHP", cAlternateFileName="")) returned 1 [0140.559] wcscmp (_String1="LATIN1.SHP", _String2=".") returned 1 [0140.559] wcscmp (_String1="LATIN1.SHP", _String2="..") returned 1 [0140.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3b018 [0140.559] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.559] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.559] wcscat (in: _Dest=0x3e3b018, _Source="LATIN1.SHP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP") returned="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" [0140.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp")) returned 0x20 [0140.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP", dwFileAttributes=0x20) returned 0 [0140.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.594] GetLastError () returned 0x5 [0140.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP", dwFileAttributes=0x20) returned 0 [0140.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.594] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92172d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x58970, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.DLL", cAlternateFileName="")) returned 1 [0140.594] wcscmp (_String1="LGND.DLL", _String2=".") returned 1 [0140.595] wcscmp (_String1="LGND.DLL", _String2="..") returned 1 [0140.595] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x878e30b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Library", cAlternateFileName="")) returned 1 [0140.595] wcscmp (_String1="Library", _String2=".") returned 1 [0140.595] wcscmp (_String1="Library", _String2="..") returned 1 [0140.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26a88 [0140.595] wcscpy (in: _Dest=0x7a26a88, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.595] wcscat (in: _Dest=0x7a26a88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.595] wcscat (in: _Dest=0x7a26a88, _Source="Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0140.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b018 [0140.595] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0140.595] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0140.595] wcscat (in: _Dest=0x3e3b018, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*" [0140.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59308 [0140.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x878e30b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78f0 [0140.596] wcscmp (_String1=".", _String2=".") returned 0 [0140.596] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x878e30b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.596] wcscmp (_String1="..", _String2=".") returned 1 [0140.596] wcscmp (_String1="..", _String2="..") returned 0 [0140.596] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f6bdf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Analysis", cAlternateFileName="")) returned 1 [0140.596] wcscmp (_String1="Analysis", _String2=".") returned 1 [0140.596] wcscmp (_String1="Analysis", _String2="..") returned 1 [0140.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da66f0 [0140.596] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0140.596] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0140.596] wcscat (in: _Dest=0x3da66f0, _Source="Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0140.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d748 [0140.596] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0140.596] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0140.596] wcscat (in: _Dest=0x3f3d748, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*" [0140.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0140.596] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f6bdf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b70 [0140.634] wcscmp (_String1=".", _String2=".") returned 0 [0140.634] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f6bdf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.634] wcscmp (_String1="..", _String2=".") returned 1 [0140.634] wcscmp (_String1="..", _String2="..") returned 0 [0140.634] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x2c360, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1 [0140.634] wcscmp (_String1="ANALYS32.XLL", _String2=".") returned 1 [0140.634] wcscmp (_String1="ANALYS32.XLL", _String2="..") returned 1 [0140.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df59a0 [0140.634] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0140.634] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0140.634] wcscat (in: _Dest=0x3df59a0, _Source="ANALYS32.XLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" [0140.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll")) returned 0x20 [0140.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL", dwFileAttributes=0x20) returned 0 [0140.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.635] GetLastError () returned 0x5 [0140.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL", dwFileAttributes=0x20) returned 0 [0140.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 [0140.635] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0xd726, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATPVBAEN.XLAM", cAlternateFileName="ATPVBA~1.XLA")) returned 1 [0140.635] wcscmp (_String1="ATPVBAEN.XLAM", _String2=".") returned 1 [0140.635] wcscmp (_String1="ATPVBAEN.XLAM", _String2="..") returned 1 [0140.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df59a0 [0140.635] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0140.635] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0140.635] wcscat (in: _Dest=0x3df59a0, _Source="ATPVBAEN.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" [0140.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam")) returned 0x20 [0140.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM", dwFileAttributes=0x20) returned 0 [0140.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.636] GetLastError () returned 0x5 [0140.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM", dwFileAttributes=0x20) returned 0 [0140.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 [0140.636] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x697b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUNCRES.XLAM", cAlternateFileName="FUNCRE~1.XLA")) returned 1 [0140.636] wcscmp (_String1="FUNCRES.XLAM", _String2=".") returned 1 [0140.636] wcscmp (_String1="FUNCRES.XLAM", _String2="..") returned 1 [0140.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df59a0 [0140.636] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0140.636] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0140.637] wcscat (in: _Dest=0x3df59a0, _Source="FUNCRES.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" [0140.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam")) returned 0x20 [0140.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM", dwFileAttributes=0x20) returned 0 [0140.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.637] GetLastError () returned 0x5 [0140.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM", dwFileAttributes=0x20) returned 0 [0140.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 [0140.637] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7697800, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42f91f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7697800, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0xce45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 1 [0140.637] wcscmp (_String1="PROCDB.XLAM", _String2=".") returned 1 [0140.637] wcscmp (_String1="PROCDB.XLAM", _String2="..") returned 1 [0140.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5698 [0140.638] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis" [0140.638] wcscat (in: _Dest=0x3eb5698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\" [0140.638] wcscat (in: _Dest=0x3eb5698, _Source="PROCDB.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" [0140.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam")) returned 0x20 [0140.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM", dwFileAttributes=0x20) returned 0 [0140.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.660] GetLastError () returned 0x5 [0140.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM", dwFileAttributes=0x20) returned 0 [0140.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 [0140.660] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7697800, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x42f91f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7697800, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0xce45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 0 [0140.660] FindClose (in: hFindFile=0x7ad7b70 | out: hFindFile=0x7ad7b70) returned 1 [0140.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0140.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0140.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0140.661] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x87909210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1 [0140.661] wcscmp (_String1="EUROTOOL.XLAM", _String2=".") returned 1 [0140.661] wcscmp (_String1="EUROTOOL.XLAM", _String2="..") returned 1 [0140.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0140.661] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0140.661] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0140.661] wcscat (in: _Dest=0x3df1b98, _Source="EUROTOOL.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" [0140.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam")) returned 0x20 [0140.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM", dwFileAttributes=0x20) returned 0 [0140.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.680] GetLastError () returned 0x5 [0140.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM", dwFileAttributes=0x20) returned 0 [0140.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.680] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 1 [0140.680] wcscmp (_String1="SOLVER", _String2=".") returned 1 [0140.680] wcscmp (_String1="SOLVER", _String2="..") returned 1 [0140.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da66f0 [0140.680] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library" [0140.681] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\" [0140.681] wcscat (in: _Dest=0x3da66f0, _Source="SOLVER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" [0140.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da65f0 [0140.681] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" [0140.681] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\" [0140.681] wcscat (in: _Dest=0x3da65f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*" [0140.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0140.681] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7930 [0140.681] wcscmp (_String1=".", _String2=".") returned 0 [0140.681] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.681] wcscmp (_String1="..", _String2=".") returned 1 [0140.681] wcscmp (_String1="..", _String2="..") returned 0 [0140.681] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x65460, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="SOLVER~1.XLA")) returned 1 [0140.681] wcscmp (_String1="SOLVER.XLAM", _String2=".") returned 1 [0140.681] wcscmp (_String1="SOLVER.XLAM", _String2="..") returned 1 [0140.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6b68 [0140.681] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER" [0140.682] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\" [0140.682] wcscat (in: _Dest=0x7ad6b68, _Source="SOLVER.XLAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" [0140.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam")) returned 0x20 [0140.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM", dwFileAttributes=0x20) returned 0 [0140.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.699] GetLastError () returned 0x5 [0140.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM", dwFileAttributes=0x20) returned 0 [0140.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 [0140.700] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x27958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1 [0140.700] wcscmp (_String1="SOLVER32.DLL", _String2=".") returned 1 [0140.700] wcscmp (_String1="SOLVER32.DLL", _String2="..") returned 1 [0140.700] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x27958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 0 [0140.700] FindClose (in: hFindFile=0x7ad7930 | out: hFindFile=0x7ad7930) returned 1 [0140.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0140.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 [0140.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0140.700] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 0 [0140.700] FindClose (in: hFindFile=0x7ad78f0 | out: hFindFile=0x7ad78f0) returned 1 [0140.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59308) returned 1 [0140.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a88) returned 1 [0140.701] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe923d430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xb27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGELEMS.DLL", cAlternateFileName="")) returned 1 [0140.701] wcscmp (_String1="LOGELEMS.DLL", _String2=".") returned 1 [0140.701] wcscmp (_String1="LOGELEMS.DLL", _String2="..") returned 1 [0140.701] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbe334670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x9990, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGMODEL.MDL", cAlternateFileName="")) returned 1 [0140.701] wcscmp (_String1="LOGMODEL.MDL", _String2=".") returned 1 [0140.701] wcscmp (_String1="LOGMODEL.MDL", _String2="..") returned 1 [0140.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0140.701] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0140.701] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0140.701] wcscat (in: _Dest=0x3e3b018, _Source="LOGMODEL.MDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" [0140.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl")) returned 0x20 [0140.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL", dwFileAttributes=0x20) returned 0 [0140.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.702] GetLastError () returned 0x5 [0140.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL", dwFileAttributes=0x20) returned 0 [0140.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe923d430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x571a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGVIEW.DLL", cAlternateFileName="")) returned 1 [0147.171] wcscmp (_String1="LOGVIEW.DLL", _String2=".") returned 1 [0147.171] wcscmp (_String1="LOGVIEW.DLL", _String2="..") returned 1 [0147.171] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOOKUP.DAT", cAlternateFileName="")) returned 1 [0147.171] wcscmp (_String1="LOOKUP.DAT", _String2=".") returned 1 [0147.171] wcscmp (_String1="LOOKUP.DAT", _String2="..") returned 1 [0147.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e850 [0147.171] wcscpy (in: _Dest=0x3f3e850, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0147.172] wcscat (in: _Dest=0x3f3e850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0147.172] wcscat (in: _Dest=0x3f3e850, _Source="LOOKUP.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" [0158.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0158.611] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x429a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIPH.DLL", cAlternateFileName="")) returned 1 [0158.611] wcscmp (_String1="MAPIPH.DLL", _String2=".") returned 1 [0158.611] wcscmp (_String1="MAPIPH.DLL", _String2="..") returned 1 [0158.611] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x311d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELL.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0158.611] wcscmp (_String1="MAPISHELL.DLL", _String2=".") returned 1 [0158.611] wcscmp (_String1="MAPISHELL.DLL", _String2="..") returned 1 [0158.611] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x8d18e430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x19b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCPS.DLL", cAlternateFileName="")) returned 1 [0158.611] wcscmp (_String1="MCPS.DLL", _String2=".") returned 1 [0158.611] wcscmp (_String1="MCPS.DLL", _String2="..") returned 1 [0158.611] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9535100, ftCreationTime.dwHighDateTime=0x1cb7079, ftLastAccessTime.dwLowDateTime=0xf4fabfb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x9535100, ftLastWriteTime.dwHighDateTime=0x1cb7079, nFileSizeHigh=0x0, nFileSizeLow=0xaa768, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDCAT.DLL", cAlternateFileName="")) returned 1 [0158.611] wcscmp (_String1="MEDCAT.DLL", _String2=".") returned 1 [0158.611] wcscmp (_String1="MEDCAT.DLL", _String2="..") returned 1 [0158.611] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76cf2450, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923d3c90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0158.611] wcscmp (_String1="MEDIA", _String2=".") returned 1 [0158.612] wcscmp (_String1="MEDIA", _String2="..") returned 1 [0158.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26e78 [0158.612] wcscpy (in: _Dest=0x7a26e78, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0158.612] wcscat (in: _Dest=0x7a26e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0158.612] wcscat (in: _Dest=0x7a26e78, _Source="MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0158.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0158.613] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe403300, ftCreationTime.dwHighDateTime=0x1cac09c, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe403300, ftLastWriteTime.dwHighDateTime=0x1cac09c, nFileSizeHigh=0x0, nFileSizeLow=0x1c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0158.613] wcscmp (_String1="Microsoft.BusinessData.dll", _String2=".") returned 1 [0158.613] wcscmp (_String1="Microsoft.BusinessData.dll", _String2="..") returned 1 [0158.613] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf54100, ftCreationTime.dwHighDateTime=0x1ca2511, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcbf54100, ftLastWriteTime.dwHighDateTime=0x1ca2511, nFileSizeHigh=0x0, nFileSizeLow=0x5a768, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0158.613] wcscmp (_String1="Microsoft.BusinessData.xml", _String2=".") returned 1 [0158.613] wcscmp (_String1="Microsoft.BusinessData.xml", _String2="..") returned 1 [0158.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6150 [0158.613] wcscpy (in: _Dest=0x7ad6150, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0158.613] wcscat (in: _Dest=0x7ad6150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0158.613] wcscat (in: _Dest=0x7ad6150, _Source="Microsoft.BusinessData.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" [0158.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0158.615] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe396200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7ba02c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe396200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x8a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0158.615] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.dll", _String2=".") returned 1 [0158.615] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.dll", _String2="..") returned 1 [0158.615] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3ba1200, ftCreationTime.dwHighDateTime=0x1ca2512, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3ba1200, ftLastWriteTime.dwHighDateTime=0x1ca2512, nFileSizeHigh=0x0, nFileSizeLow=0x295c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.xml", cAlternateFileName="MIAF81~1.XML")) returned 1 [0158.615] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.xml", _String2=".") returned 1 [0158.615] wcscmp (_String1="Microsoft.Office.BusinessApplications.Runtime.xml", _String2="..") returned 1 [0158.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d405d8 [0158.615] wcscpy (in: _Dest=0x3d405d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0158.615] wcscat (in: _Dest=0x3d405d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0158.615] wcscat (in: _Dest=0x3d405d8, _Source="Microsoft.Office.BusinessApplications.Runtime.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" [0158.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d405d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0158.616] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe396200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x7d2b50d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe396200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0xa2780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.dll", cAlternateFileName="MIBA26~1.DLL")) returned 1 [0158.616] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.dll", _String2=".") returned 1 [0158.616] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.dll", _String2="..") returned 1 [0158.616] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68711f00, ftCreationTime.dwHighDateTime=0x1ca25b6, ftLastAccessTime.dwLowDateTime=0x7d2b50d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68711f00, ftLastWriteTime.dwHighDateTime=0x1ca25b6, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.xml", cAlternateFileName="MICROS~3.XML")) returned 1 [0158.616] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.xml", _String2=".") returned 1 [0158.616] wcscmp (_String1="Microsoft.Office.BusinessApplications.RuntimeUi.xml", _String2="..") returned 1 [0158.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40ce0 [0158.616] wcscpy (in: _Dest=0x3d40ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0158.616] wcscat (in: _Dest=0x3d40ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0158.616] wcscat (in: _Dest=0x3d40ce0, _Source="Microsoft.Office.BusinessApplications.RuntimeUi.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" [0158.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0158.617] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd083500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd083500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0xea780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.dll", cAlternateFileName="MIB82D~1.DLL")) returned 1 [0158.617] wcscmp (_String1="Microsoft.Office.BusinessData.dll", _String2=".") returned 1 [0158.617] wcscmp (_String1="Microsoft.Office.BusinessData.dll", _String2="..") returned 1 [0158.617] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3ba1200, ftCreationTime.dwHighDateTime=0x1ca2512, ftLastAccessTime.dwLowDateTime=0x8d11c010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3ba1200, ftLastWriteTime.dwHighDateTime=0x1ca2512, nFileSizeHigh=0x0, nFileSizeLow=0x33737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.xml", cAlternateFileName="MIB8A9~1.XML")) returned 1 [0158.618] wcscmp (_String1="Microsoft.Office.BusinessData.xml", _String2=".") returned 1 [0158.618] wcscmp (_String1="Microsoft.Office.BusinessData.xml", _String2="..") returned 1 [0158.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053918 [0158.618] wcscpy (in: _Dest=0x3053918, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0158.618] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0158.618] wcscat (in: _Dest=0x3053918, _Source="Microsoft.Office.BusinessData.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" [0158.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0158.619] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cdca00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71cdca00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x4998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0158.619] wcscmp (_String1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", _String2=".") returned 1 [0158.619] wcscmp (_String1="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", _String2="..") returned 1 [0158.619] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76927e00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x891230d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76927e00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0xa780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.FormControl.dll", cAlternateFileName="MI8F13~1.DLL")) returned 1 [0158.619] wcscmp (_String1="Microsoft.Office.InfoPath.FormControl.dll", _String2=".") returned 1 [0158.619] wcscmp (_String1="Microsoft.Office.InfoPath.FormControl.dll", _String2="..") returned 1 [0158.619] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76927e00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x790ccfb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76927e00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x63790, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0158.619] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", _String2=".") returned 1 [0158.619] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", _String2="..") returned 1 [0158.619] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x891230d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0xc5265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", cAlternateFileName="MICROS~4.XML")) returned 1 [0158.619] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", _String2=".") returned 1 [0158.619] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", _String2="..") returned 1 [0158.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e666d8 [0158.619] wcscpy (in: _Dest=0x3e666d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0158.619] wcscat (in: _Dest=0x3e666d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0158.619] wcscat (in: _Dest=0x3e666d8, _Source="Microsoft.Office.Interop.InfoPath.SemiTrust.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" [0158.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e666d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0158.620] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76927e00, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x8b8b5e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76927e00, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.dll", cAlternateFileName="MI0E06~1.DLL")) returned 1 [0158.620] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.dll", _String2=".") returned 1 [0158.620] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.dll", _String2="..") returned 1 [0158.620] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf813d200, ftCreationTime.dwHighDateTime=0x1c9bc94, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf813d200, ftLastWriteTime.dwHighDateTime=0x1c9bc94, nFileSizeHigh=0x0, nFileSizeLow=0x837d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0158.620] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.xml", _String2=".") returned 1 [0158.620] wcscmp (_String1="Microsoft.Office.Interop.InfoPath.Xml.xml", _String2="..") returned 1 [0158.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff79f0 [0158.620] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0158.621] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0158.621] wcscat (in: _Dest=0x2ff79f0, _Source="Microsoft.Office.Interop.InfoPath.Xml.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" [0158.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0158.622] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6af05200, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0xc02be9f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6af05200, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x12798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", cAlternateFileName="MIAE71~1.DLL")) returned 1 [0158.622] wcscmp (_String1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", _String2=".") returned 1 [0158.622] wcscmp (_String1="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", _String2="..") returned 1 [0158.622] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xc02e4b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x67760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.workflow.actions.proxy.dll", cAlternateFileName="MIF37A~1.DLL")) returned 1 [0158.622] wcscmp (_String1="microsoft.office.workflow.actions.proxy.dll", _String2=".") returned 1 [0158.622] wcscmp (_String1="microsoft.office.workflow.actions.proxy.dll", _String2="..") returned 1 [0158.622] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd083500, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd083500, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x7e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.dll", cAlternateFileName="MI5DD9~1.DLL")) returned 1 [0158.622] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.dll", _String2=".") returned 1 [0158.622] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.dll", _String2="..") returned 1 [0158.622] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3ba1200, ftCreationTime.dwHighDateTime=0x1ca2512, ftLastAccessTime.dwLowDateTime=0x8be37170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3ba1200, ftLastWriteTime.dwHighDateTime=0x1ca2512, nFileSizeHigh=0x0, nFileSizeLow=0x311b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.xml", cAlternateFileName="MI14FC~1.XML")) returned 1 [0158.626] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.xml", _String2=".") returned 1 [0158.626] wcscmp (_String1="Microsoft.SharePoint.BusinessData.Administration.Client.xml", _String2="..") returned 1 [0158.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e37cd8 [0158.626] wcscpy (in: _Dest=0x3e37cd8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0158.626] wcscat (in: _Dest=0x3e37cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0158.626] wcscat (in: _Dest=0x3e37cd8, _Source="Microsoft.SharePoint.BusinessData.Administration.Client.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" [0165.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0165.558] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xc02e4b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x74760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.sharepoint.workflowactions.proxy.dll", cAlternateFileName="MI6AA3~1.DLL")) returned 1 [0165.559] wcscmp (_String1="microsoft.sharepoint.workflowactions.proxy.dll", _String2=".") returned 1 [0165.559] wcscmp (_String1="microsoft.sharepoint.workflowactions.proxy.dll", _String2="..") returned 1 [0165.559] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8d30b1f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x57760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MIMEDIR.DLL", cAlternateFileName="")) returned 1 [0165.559] wcscmp (_String1="MIMEDIR.DLL", _String2=".") returned 1 [0165.559] wcscmp (_String1="MIMEDIR.DLL", _String2="..") returned 1 [0165.559] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5df52300, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5df52300, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x8b760, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0165.559] wcscmp (_String1="misc.exe", _String2=".") returned 1 [0165.559] wcscmp (_String1="misc.exe", _String2="..") returned 1 [0165.559] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x807f7d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0xf588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLCFG32.CPL", cAlternateFileName="")) returned 1 [0165.559] wcscmp (_String1="MLCFG32.CPL", _String2=".") returned 1 [0165.559] wcscmp (_String1="MLCFG32.CPL", _String2="..") returned 1 [0165.559] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x5180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLSHEXT.DLL", cAlternateFileName="")) returned 1 [0165.559] wcscmp (_String1="MLSHEXT.DLL", _String2=".") returned 1 [0165.559] wcscmp (_String1="MLSHEXT.DLL", _String2="..") returned 1 [0165.559] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3aedd00, ftCreationTime.dwHighDateTime=0x1c9ce63, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3aedd00, ftLastWriteTime.dwHighDateTime=0x1c9ce63, nFileSizeHigh=0x0, nFileSizeLow=0x25f87, dwReserved0=0x0, dwReserved1=0x0, cFileName="MML2OMML.XSL", cAlternateFileName="")) returned 1 [0165.559] wcscmp (_String1="MML2OMML.XSL", _String2=".") returned 1 [0165.559] wcscmp (_String1="MML2OMML.XSL", _String2="..") returned 1 [0165.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0165.559] wcscpy (in: _Dest=0x3f3fa10, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.559] wcscat (in: _Dest=0x3f3fa10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.560] wcscat (in: _Dest=0x3f3fa10, _Source="MML2OMML.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" [0165.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fa10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0165.560] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9263590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x72768, dwReserved0=0x0, dwReserved1=0x0, cFileName="MODELENG.DLL", cAlternateFileName="")) returned 1 [0165.561] wcscmp (_String1="MODELENG.DLL", _String2=".") returned 1 [0165.561] wcscmp (_String1="MODELENG.DLL", _String2="..") returned 1 [0165.561] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5331d000, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x8d3574b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5331d000, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x6f990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MORPH9.DLL", cAlternateFileName="")) returned 1 [0165.561] wcscmp (_String1="MORPH9.DLL", _String2=".") returned 1 [0165.561] wcscmp (_String1="MORPH9.DLL", _String2="..") returned 1 [0165.561] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbe5bbdd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXINT.DLL", cAlternateFileName="")) returned 1 [0165.561] wcscmp (_String1="MPXINT.DLL", _String2=".") returned 1 [0165.561] wcscmp (_String1="MPXINT.DLL", _String2="..") returned 1 [0165.561] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0xa5580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACC.OLB", cAlternateFileName="")) returned 1 [0165.561] wcscmp (_String1="MSACC.OLB", _String2=".") returned 1 [0165.561] wcscmp (_String1="MSACC.OLB", _String2="..") returned 1 [0165.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa88 [0165.561] wcscpy (in: _Dest=0x3f3fa88, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.561] wcscat (in: _Dest=0x3f3fa88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.561] wcscat (in: _Dest=0x3f3fa88, _Source="MSACC.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" [0165.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fa88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0165.562] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1961c900, ftCreationTime.dwHighDateTime=0x1cab90e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1961c900, ftLastWriteTime.dwHighDateTime=0x1cab90e, nFileSizeHigh=0x0, nFileSizeLow=0xd57360, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.EXE", cAlternateFileName="")) returned 1 [0165.562] wcscmp (_String1="MSACCESS.EXE", _String2=".") returned 1 [0165.562] wcscmp (_String1="MSACCESS.EXE", _String2="..") returned 1 [0165.562] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca972f00, ftCreationTime.dwHighDateTime=0x1cab83a, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca972f00, ftLastWriteTime.dwHighDateTime=0x1cab83a, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe.manifest", cAlternateFileName="MSACCE~1.MAN")) returned 1 [0165.562] wcscmp (_String1="msaccess.exe.manifest", _String2=".") returned 1 [0165.562] wcscmp (_String1="msaccess.exe.manifest", _String2="..") returned 1 [0165.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60fc0 [0165.562] wcscpy (in: _Dest=0x7a60fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.562] wcscat (in: _Dest=0x7a60fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.562] wcscat (in: _Dest=0x7a60fc0, _Source="msaccess.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" [0165.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0165.563] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1961c900, ftCreationTime.dwHighDateTime=0x1cab90e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1961c900, ftLastWriteTime.dwHighDateTime=0x1cab90e, nFileSizeHigh=0x0, nFileSizeLow=0xf188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAEXP30.DLL", cAlternateFileName="")) returned 1 [0165.563] wcscmp (_String1="MSAEXP30.DLL", _String2=".") returned 1 [0165.563] wcscmp (_String1="MSAEXP30.DLL", _String2="..") returned 1 [0165.563] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcda9300, ftCreationTime.dwHighDateTime=0x1ca9a29, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfcda9300, ftLastWriteTime.dwHighDateTime=0x1ca9a29, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.INF", cAlternateFileName="")) returned 1 [0165.563] wcscmp (_String1="MSCOL11.INF", _String2=".") returned 1 [0165.563] wcscmp (_String1="MSCOL11.INF", _String2="..") returned 1 [0165.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3fdd0 [0165.564] wcscpy (in: _Dest=0x3f3fdd0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.564] wcscat (in: _Dest=0x3f3fdd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.564] wcscat (in: _Dest=0x3f3fdd0, _Source="MSCOL11.INF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" [0165.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fdd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0165.565] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7465ba00, ftCreationTime.dwHighDateTime=0x1c2f2c8, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7465ba00, ftLastWriteTime.dwHighDateTime=0x1c2f2c8, nFileSizeHigh=0x0, nFileSizeLow=0x1aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCOL11.PPD", cAlternateFileName="")) returned 1 [0165.565] wcscmp (_String1="MSCOL11.PPD", _String2=".") returned 1 [0165.565] wcscmp (_String1="MSCOL11.PPD", _String2="..") returned 1 [0165.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f4e8 [0165.565] wcscpy (in: _Dest=0x3f3f4e8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.565] wcscat (in: _Dest=0x3f3f4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.565] wcscat (in: _Dest=0x3f3f4e8, _Source="MSCOL11.PPD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" [0165.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0165.566] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896a5700, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd86ca110, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x896a5700, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_en.dub", cAlternateFileName="MSBB80~1.DUB")) returned 1 [0165.566] wcscmp (_String1="mscss7cm_en.dub", _String2=".") returned 1 [0165.566] wcscmp (_String1="mscss7cm_en.dub", _String2="..") returned 1 [0165.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47c98 [0165.566] wcscpy (in: _Dest=0x3e47c98, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.566] wcscat (in: _Dest=0x3e47c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.566] wcscat (in: _Dest=0x3e47c98, _Source="mscss7cm_en.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" [0165.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0165.567] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2f0b00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf6849b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8e2f0b00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_es.dub", cAlternateFileName="MSCSS7~1.DUB")) returned 1 [0165.567] wcscmp (_String1="mscss7cm_es.dub", _String2=".") returned 1 [0165.567] wcscmp (_String1="mscss7cm_es.dub", _String2="..") returned 1 [0165.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46d98 [0165.567] wcscpy (in: _Dest=0x3e46d98, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.567] wcscat (in: _Dest=0x3e46d98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.567] wcscat (in: _Dest=0x3e46d98, _Source="mscss7cm_es.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" [0165.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0165.568] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bccb100, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdbd639b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8bccb100, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7cm_fr.dub", cAlternateFileName="MSCSS7~3.DUB")) returned 1 [0165.568] wcscmp (_String1="mscss7cm_fr.dub", _String2=".") returned 1 [0165.568] wcscmp (_String1="mscss7cm_fr.dub", _String2="..") returned 1 [0165.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47098 [0165.568] wcscpy (in: _Dest=0x3e47098, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.568] wcscat (in: _Dest=0x3e47098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.568] wcscat (in: _Dest=0x3e47098, _Source="mscss7cm_fr.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" [0165.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0165.569] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f6fd00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xd8ef8cb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa3f6fd00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7en.dll", cAlternateFileName="")) returned 1 [0165.569] wcscmp (_String1="mscss7en.dll", _String2=".") returned 1 [0165.569] wcscmp (_String1="mscss7en.dll", _String2="..") returned 1 [0165.569] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1e0b00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf65e850, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xab1e0b00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7es.dll", cAlternateFileName="")) returned 1 [0165.569] wcscmp (_String1="mscss7es.dll", _String2=".") returned 1 [0165.569] wcscmp (_String1="mscss7es.dll", _String2="..") returned 1 [0165.569] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4909300, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdcf8a170, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa4909300, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x4ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7fr.dll", cAlternateFileName="")) returned 1 [0165.569] wcscmp (_String1="mscss7fr.dll", _String2=".") returned 1 [0165.569] wcscmp (_String1="mscss7fr.dll", _String2="..") returned 1 [0165.569] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9b8400, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd87d4ab0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8a9b8400, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_en.dub", cAlternateFileName="MS79E7~1.DUB")) returned 1 [0165.569] wcscmp (_String1="mscss7wre_en.dub", _String2=".") returned 1 [0165.569] wcscmp (_String1="mscss7wre_en.dub", _String2="..") returned 1 [0165.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46198 [0165.570] wcscpy (in: _Dest=0x3e46198, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.570] wcscat (in: _Dest=0x3e46198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.570] wcscat (in: _Dest=0x3e46198, _Source="mscss7wre_en.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" [0165.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0165.570] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f603800, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf6f6dd0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8f603800, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_es.dub", cAlternateFileName="MSCSS7~2.DUB")) returned 1 [0165.570] wcscmp (_String1="mscss7wre_es.dub", _String2=".") returned 1 [0165.570] wcscmp (_String1="mscss7wre_es.dub", _String2="..") returned 1 [0165.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46c98 [0165.571] wcscpy (in: _Dest=0x3e46c98, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.571] wcscat (in: _Dest=0x3e46c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.571] wcscat (in: _Dest=0x3e46c98, _Source="mscss7wre_es.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" [0165.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0165.573] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cfdde00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdbe22090, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8cfdde00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscss7wre_fr.dub", cAlternateFileName="MSCSS7~4.DUB")) returned 1 [0165.573] wcscmp (_String1="mscss7wre_fr.dub", _String2=".") returned 1 [0165.573] wcscmp (_String1="mscss7wre_fr.dub", _String2="..") returned 1 [0165.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47a98 [0165.573] wcscpy (in: _Dest=0x3e47a98, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.573] wcscat (in: _Dest=0x3e47a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.573] wcscat (in: _Dest=0x3e47a98, _Source="mscss7wre_fr.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" [0165.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0165.574] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3daad700, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x80a59310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3daad700, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x849a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7.dll", cAlternateFileName="")) returned 1 [0165.574] wcscmp (_String1="mset7.dll", _String2=".") returned 1 [0165.574] wcscmp (_String1="mset7.dll", _String2="..") returned 1 [0165.574] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eee2600, ftCreationTime.dwHighDateTime=0x1c87a58, ftLastAccessTime.dwLowDateTime=0x8d5dec10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4eee2600, ftLastWriteTime.dwHighDateTime=0x1c87a58, nFileSizeHigh=0x0, nFileSizeLow=0x2c5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7db.kic", cAlternateFileName="")) returned 1 [0165.574] wcscmp (_String1="mset7db.kic", _String2=".") returned 1 [0165.574] wcscmp (_String1="mset7db.kic", _String2="..") returned 1 [0165.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f830 [0165.574] wcscpy (in: _Dest=0x3f3f830, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.574] wcscat (in: _Dest=0x3f3f830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.574] wcscat (in: _Dest=0x3f3f830, _Source="mset7db.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" [0165.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0165.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e216400, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x8d604d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e216400, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7en.kic", cAlternateFileName="")) returned 1 [0165.575] wcscmp (_String1="mset7en.kic", _String2=".") returned 1 [0165.575] wcscmp (_String1="mset7en.kic", _String2="..") returned 1 [0165.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f290 [0165.575] wcscpy (in: _Dest=0x3f3f290, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.575] wcscat (in: _Dest=0x3f3f290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.575] wcscat (in: _Dest=0x3f3f290, _Source="mset7en.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" [0165.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0165.576] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e216400, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x8d62aed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e216400, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x13e9f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7es.kic", cAlternateFileName="")) returned 1 [0165.576] wcscmp (_String1="mset7es.kic", _String2=".") returned 1 [0165.576] wcscmp (_String1="mset7es.kic", _String2="..") returned 1 [0165.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3efc0 [0165.576] wcscpy (in: _Dest=0x3f3efc0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.576] wcscat (in: _Dest=0x3f3efc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.576] wcscat (in: _Dest=0x3f3efc0, _Source="mset7es.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" [0165.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3efc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0165.578] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f529100, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x80a7f470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f529100, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7fr.kic", cAlternateFileName="")) returned 1 [0165.578] wcscmp (_String1="mset7fr.kic", _String2=".") returned 1 [0165.578] wcscmp (_String1="mset7fr.kic", _String2="..") returned 1 [0165.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f3f8 [0165.578] wcscpy (in: _Dest=0x3f3f3f8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.578] wcscat (in: _Dest=0x3f3f3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.578] wcscat (in: _Dest=0x3f3f3f8, _Source="mset7fr.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" [0165.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0165.579] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e216400, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x80acb730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e216400, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x3567a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7ge.kic", cAlternateFileName="")) returned 1 [0165.579] wcscmp (_String1="mset7ge.kic", _String2=".") returned 1 [0165.579] wcscmp (_String1="mset7ge.kic", _String2="..") returned 1 [0165.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3fc68 [0165.579] wcscpy (in: _Dest=0x3f3fc68, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.579] wcscat (in: _Dest=0x3f3fc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.579] wcscat (in: _Dest=0x3f3fc68, _Source="mset7ge.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" [0165.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0165.580] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f529100, ftCreationTime.dwHighDateTime=0x1cacf8f, ftLastAccessTime.dwLowDateTime=0x80af1890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f529100, ftLastWriteTime.dwHighDateTime=0x1cacf8f, nFileSizeHigh=0x0, nFileSizeLow=0x1da59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7jp.kic", cAlternateFileName="")) returned 1 [0165.580] wcscmp (_String1="mset7jp.kic", _String2=".") returned 1 [0165.580] wcscmp (_String1="mset7jp.kic", _String2="..") returned 1 [0165.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f5d8 [0165.580] wcscpy (in: _Dest=0x3f3f5d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.581] wcscat (in: _Dest=0x3f3f5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.581] wcscat (in: _Dest=0x3f3f5d8, _Source="mset7jp.kic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic") returned="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" [0165.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0165.582] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400d3100, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x80af1890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x400d3100, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x7d188, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tk.dll", cAlternateFileName="")) returned 1 [0165.582] wcscmp (_String1="mset7tk.dll", _String2=".") returned 1 [0165.582] wcscmp (_String1="mset7tk.dll", _String2="..") returned 1 [0165.582] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35529c00, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x8d62aed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35529c00, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0xc0598, dwReserved0=0x0, dwReserved1=0x0, cFileName="mset7tkjp.dll", cAlternateFileName="MSET7T~1.DLL")) returned 1 [0165.582] wcscmp (_String1="mset7tkjp.dll", _String2=".") returned 1 [0165.582] wcscmp (_String1="mset7tkjp.dll", _String2="..") returned 1 [0165.582] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2feafd00, ftCreationTime.dwHighDateTime=0x1bf9d7f, ftLastAccessTime.dwLowDateTime=0x80b179f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2feafd00, ftLastWriteTime.dwHighDateTime=0x1bf9d7f, nFileSizeHigh=0x0, nFileSizeLow=0xe36, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.ICO", cAlternateFileName="")) returned 1 [0165.582] wcscmp (_String1="MSN.ICO", _String2=".") returned 1 [0165.582] wcscmp (_String1="MSN.ICO", _String2="..") returned 1 [0165.582] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49654b00, ftCreationTime.dwHighDateTime=0x1ca229f, ftLastAccessTime.dwLowDateTime=0x8d7cddf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49654b00, ftLastWriteTime.dwHighDateTime=0x1ca229f, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1 [0165.582] wcscmp (_String1="MSO0127.ACL", _String2=".") returned 1 [0165.582] wcscmp (_String1="MSO0127.ACL", _String2="..") returned 1 [0165.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f1a0 [0165.582] wcscpy (in: _Dest=0x3f3f1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.582] wcscat (in: _Dest=0x3f3f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.582] wcscat (in: _Dest=0x3f3f1a0, _Source="MSO0127.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" [0165.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0165.583] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7b4d00, ftCreationTime.dwHighDateTime=0x1cbe025, ftLastAccessTime.dwLowDateTime=0xf8b2e5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x1e7b4d00, ftLastWriteTime.dwHighDateTime=0x1cbe025, nFileSizeHigh=0x0, nFileSizeLow=0x25578, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCF.DLL", cAlternateFileName="")) returned 1 [0165.583] wcscmp (_String1="MSOCF.DLL", _String2=".") returned 1 [0165.583] wcscmp (_String1="MSOCF.DLL", _String2="..") returned 1 [0165.583] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc0400, ftCreationTime.dwHighDateTime=0x1cbe025, ftLastAccessTime.dwLowDateTime=0xf8b2e5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xefc0400, ftLastWriteTime.dwHighDateTime=0x1cbe025, nFileSizeHigh=0x0, nFileSizeLow=0x4990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFU.DLL", cAlternateFileName="")) returned 1 [0165.583] wcscmp (_String1="MSOCFU.DLL", _String2=".") returned 1 [0165.584] wcscmp (_String1="MSOCFU.DLL", _String2="..") returned 1 [0165.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7b4d00, ftCreationTime.dwHighDateTime=0x1cbe025, ftLastAccessTime.dwLowDateTime=0xf8b2e5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x1e7b4d00, ftLastWriteTime.dwHighDateTime=0x1cbe025, nFileSizeHigh=0x0, nFileSizeLow=0x3b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCFUIUTILITIESDLL.DLL", cAlternateFileName="MSOCFU~1.DLL")) returned 1 [0165.584] wcscmp (_String1="MSOCFUIUTILITIESDLL.DLL", _String2=".") returned 1 [0165.584] wcscmp (_String1="MSOCFUIUTILITIESDLL.DLL", _String2="..") returned 1 [0165.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c14100, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf5aae570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x83c14100, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x7a760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSODCW.DLL", cAlternateFileName="")) returned 1 [0165.584] wcscmp (_String1="MSODCW.DLL", _String2=".") returned 1 [0165.584] wcscmp (_String1="MSODCW.DLL", _String2="..") returned 1 [0165.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74830500, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x80b3db50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74830500, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0165.584] wcscmp (_String1="MSOHEV.DLL", _String2=".") returned 1 [0165.584] wcscmp (_String1="MSOHEV.DLL", _String2="..") returned 1 [0165.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7220ab00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x8d7f3f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7220ab00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xf180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHEVI.DLL", cAlternateFileName="")) returned 1 [0165.584] wcscmp (_String1="MSOHEVI.DLL", _String2=".") returned 1 [0165.584] wcscmp (_String1="MSOHEVI.DLL", _String2="..") returned 1 [0165.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbec9bc00, ftCreationTime.dwHighDateTime=0x1ca923e, ftLastAccessTime.dwLowDateTime=0x8d7f3f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbec9bc00, ftLastWriteTime.dwHighDateTime=0x1ca923e, nFileSizeHigh=0x0, nFileSizeLow=0x11580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0165.584] wcscmp (_String1="MSOHTMED.EXE", _String2=".") returned 1 [0165.584] wcscmp (_String1="MSOHTMED.EXE", _String2="..") returned 1 [0165.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c893400, ftCreationTime.dwHighDateTime=0x1caca89, ftLastAccessTime.dwLowDateTime=0x80b63cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c893400, ftLastWriteTime.dwHighDateTime=0x1caca89, nFileSizeHigh=0x0, nFileSizeLow=0x8598, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSTYLE.DLL", cAlternateFileName="")) returned 1 [0165.584] wcscmp (_String1="MSOSTYLE.DLL", _String2=".") returned 1 [0165.584] wcscmp (_String1="MSOSTYLE.DLL", _String2="..") returned 1 [0165.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17464200, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf5b46af0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x17464200, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0xaf780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSYNC.EXE", cAlternateFileName="")) returned 1 [0165.584] wcscmp (_String1="MSOSYNC.EXE", _String2=".") returned 1 [0165.584] wcscmp (_String1="MSOSYNC.EXE", _String2="..") returned 1 [0165.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16151500, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf5b92db0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x16151500, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x58178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.EXE", cAlternateFileName="")) returned 1 [0165.585] wcscmp (_String1="MSOUC.EXE", _String2=".") returned 1 [0165.585] wcscmp (_String1="MSOUC.EXE", _String2="..") returned 1 [0165.585] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x80b89e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x65d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTL.OLB", cAlternateFileName="")) returned 1 [0165.585] wcscmp (_String1="MSOUTL.OLB", _String2=".") returned 1 [0165.585] wcscmp (_String1="MSOUTL.OLB", _String2="..") returned 1 [0165.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f998 [0165.585] wcscpy (in: _Dest=0x3f3f998, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.585] wcscat (in: _Dest=0x3f3f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.585] wcscat (in: _Dest=0x3f3f998, _Source="MSOUTL.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" [0165.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0165.586] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49671f00, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xe92896f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49671f00, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x33378, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUTLS.DLL", cAlternateFileName="")) returned 1 [0165.586] wcscmp (_String1="MSOUTLS.DLL", _String2=".") returned 1 [0165.586] wcscmp (_String1="MSOUTLS.DLL", _String2="..") returned 1 [0165.586] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8889300, ftCreationTime.dwHighDateTime=0x1caba87, ftLastAccessTime.dwLowDateTime=0xb6f5ac70, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x8889300, ftLastWriteTime.dwHighDateTime=0x1caba87, nFileSizeHigh=0x0, nFileSizeLow=0xd560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPJEVTS.DLL", cAlternateFileName="")) returned 1 [0165.587] wcscmp (_String1="MSPJEVTS.DLL", _String2=".") returned 1 [0165.587] wcscmp (_String1="MSPJEVTS.DLL", _String2="..") returned 1 [0165.587] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a76e00, ftCreationTime.dwHighDateTime=0x1cabf05, ftLastAccessTime.dwLowDateTime=0x80baff70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95a76e00, ftLastWriteTime.dwHighDateTime=0x1cabf05, nFileSizeHigh=0x0, nFileSizeLow=0x62588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPPT.OLB", cAlternateFileName="")) returned 1 [0165.587] wcscmp (_String1="MSPPT.OLB", _String2=".") returned 1 [0165.587] wcscmp (_String1="MSPPT.OLB", _String2="..") returned 1 [0165.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f0b0 [0165.587] wcscpy (in: _Dest=0x3f3f0b0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.587] wcscat (in: _Dest=0x3f3f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.587] wcscat (in: _Dest=0x3f3f0b0, _Source="MSPPT.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" [0165.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0165.588] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f29f800, ftCreationTime.dwHighDateTime=0x1cb707d, ftLastAccessTime.dwLowDateTime=0xf5b92db0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x5f29f800, ftLastWriteTime.dwHighDateTime=0x1cb707d, nFileSizeHigh=0x0, nFileSizeLow=0xd6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPRJ.OLB", cAlternateFileName="")) returned 1 [0165.588] wcscmp (_String1="MSPRJ.OLB", _String2=".") returned 1 [0165.588] wcscmp (_String1="MSPRJ.OLB", _String2="..") returned 1 [0165.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fec0 [0165.588] wcscpy (in: _Dest=0x3f3fec0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.588] wcscat (in: _Dest=0x3f3fec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.588] wcscat (in: _Dest=0x3f3fec0, _Source="MSPRJ.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" [0165.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0165.589] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3764600, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xf85d3430, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3764600, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x35760, dwReserved0=0x0, dwReserved1=0x0, cFileName="msproof7.dll", cAlternateFileName="")) returned 1 [0165.589] wcscmp (_String1="msproof7.dll", _String2=".") returned 1 [0165.589] wcscmp (_String1="msproof7.dll", _String2="..") returned 1 [0165.589] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x12bbb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPST32.DLL", cAlternateFileName="")) returned 1 [0165.589] wcscmp (_String1="MSPST32.DLL", _String2=".") returned 1 [0165.589] wcscmp (_String1="MSPST32.DLL", _String2="..") returned 1 [0165.589] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462fd00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5462fd00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x9cbd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.EXE", cAlternateFileName="")) returned 1 [0165.589] wcscmp (_String1="MSPUB.EXE", _String2=".") returned 1 [0165.589] wcscmp (_String1="MSPUB.EXE", _String2="..") returned 1 [0165.589] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f1c700, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72f1c700, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x4b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="mspub.exe.manifest", cAlternateFileName="MSPUBE~1.MAN")) returned 1 [0165.589] wcscmp (_String1="mspub.exe.manifest", _String2=".") returned 1 [0165.589] wcscmp (_String1="mspub.exe.manifest", _String2="..") returned 1 [0165.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bed8 [0165.590] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.590] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.590] wcscat (in: _Dest=0x3f3bed8, _Source="mspub.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" [0165.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0165.591] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e8f900, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86e8f900, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0x3ff28, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.TLB", cAlternateFileName="")) returned 1 [0165.591] wcscmp (_String1="MSPUB.TLB", _String2=".") returned 1 [0165.591] wcscmp (_String1="MSPUB.TLB", _String2="..") returned 1 [0165.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x30151c0 [0165.591] wcscpy (in: _Dest=0x30151c0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.591] wcscat (in: _Dest=0x30151c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.591] wcscat (in: _Dest=0x30151c0, _Source="MSPUB.TLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" [0165.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30151c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0165.592] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b67b00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x80c22390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b67b00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0xa3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.EXE", cAlternateFileName="")) returned 1 [0165.592] wcscmp (_String1="MSQRY32.EXE", _String2=".") returned 1 [0165.593] wcscmp (_String1="MSQRY32.EXE", _String2="..") returned 1 [0165.593] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x17750, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSRTEDIT.DLL", cAlternateFileName="")) returned 1 [0165.593] wcscmp (_String1="MSRTEDIT.DLL", _String2=".") returned 1 [0165.593] wcscmp (_String1="MSRTEDIT.DLL", _String2="..") returned 1 [0165.593] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9535100, ftCreationTime.dwHighDateTime=0x1cb7079, ftLastAccessTime.dwLowDateTime=0xf4ff8270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x9535100, ftLastWriteTime.dwHighDateTime=0x1cb7079, nFileSizeHigh=0x0, nFileSizeLow=0xab768, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORDB.EXE", cAlternateFileName="")) returned 1 [0165.593] wcscmp (_String1="MSTORDB.EXE", _String2=".") returned 1 [0165.593] wcscmp (_String1="MSTORDB.EXE", _String2="..") returned 1 [0165.593] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x80c484f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x19f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.EXE", cAlternateFileName="")) returned 1 [0165.593] wcscmp (_String1="MSTORE.EXE", _String2=".") returned 1 [0165.593] wcscmp (_String1="MSTORE.EXE", _String2="..") returned 1 [0165.593] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x8dd4f0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x66d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORES.DLL", cAlternateFileName="")) returned 1 [0165.593] wcscmp (_String1="MSTORES.DLL", _String2=".") returned 1 [0165.593] wcscmp (_String1="MSTORES.DLL", _String2="..") returned 1 [0165.593] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf9f800, ftCreationTime.dwHighDateTime=0x1cacd3f, ftLastAccessTime.dwLowDateTime=0x8dd75230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5cf9f800, ftLastWriteTime.dwHighDateTime=0x1cacd3f, nFileSizeHigh=0x0, nFileSizeLow=0xdc158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWORD.OLB", cAlternateFileName="")) returned 1 [0165.593] wcscmp (_String1="MSWORD.OLB", _String2=".") returned 1 [0165.593] wcscmp (_String1="MSWORD.OLB", _String2="..") returned 1 [0165.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3015328 [0165.593] wcscpy (in: _Dest=0x3015328, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0165.593] wcscat (in: _Dest=0x3015328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0165.593] wcscat (in: _Dest=0x3015328, _Source="MSWORD.OLB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB") returned="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" [0165.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3015328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0166.038] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf611ed00, ftCreationTime.dwHighDateTime=0x1c9cea7, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf611ed00, ftLastWriteTime.dwHighDateTime=0x1c9cea7, nFileSizeHigh=0x0, nFileSizeLow=0x39530, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSYUBIN7.DLL", cAlternateFileName="")) returned 1 [0166.038] wcscmp (_String1="MSYUBIN7.DLL", _String2=".") returned 1 [0166.038] wcscmp (_String1="MSYUBIN7.DLL", _String2="..") returned 1 [0166.038] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a180200, ftCreationTime.dwHighDateTime=0x1c62b3a, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a180200, ftLastWriteTime.dwHighDateTime=0x1c62b3a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="MYSL.ICO", cAlternateFileName="")) returned 1 [0166.038] wcscmp (_String1="MYSL.ICO", _String2=".") returned 1 [0166.038] wcscmp (_String1="MYSL.ICO", _String2="..") returned 1 [0166.038] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b400, ftCreationTime.dwHighDateTime=0x1cb707a, ftLastAccessTime.dwLowDateTime=0xf7a388f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x16b400, ftLastWriteTime.dwHighDateTime=0x1cb707a, nFileSizeHigh=0x0, nFileSizeLow=0x14d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0166.038] wcscmp (_String1="NAME.DLL", _String2=".") returned 1 [0166.038] wcscmp (_String1="NAME.DLL", _String2="..") returned 1 [0166.038] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3208300, ftCreationTime.dwHighDateTime=0x1cab9fe, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3208300, ftLastWriteTime.dwHighDateTime=0x1cab9fe, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="NAMECO~1.DLL")) returned 1 [0166.038] wcscmp (_String1="NAMECONTROLPROXY.DLL", _String2=".") returned 1 [0166.038] wcscmp (_String1="NAMECONTROLPROXY.DLL", _String2="..") returned 1 [0166.038] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0be2900, ftCreationTime.dwHighDateTime=0x1cab9fe, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0be2900, ftLastWriteTime.dwHighDateTime=0x1cab9fe, nFileSizeHigh=0x0, nFileSizeLow=0x15b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMECONTROLSERVER.EXE", cAlternateFileName="NAMECO~1.EXE")) returned 1 [0166.783] wcscmp (_String1="NAMECONTROLSERVER.EXE", _String2=".") returned 1 [0166.784] wcscmp (_String1="NAMECONTROLSERVER.EXE", _String2="..") returned 1 [0166.784] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a51f00, ftCreationTime.dwHighDateTime=0x1ca919d, ftLastAccessTime.dwLowDateTime=0xb7065610, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x95a51f00, ftLastWriteTime.dwHighDateTime=0x1ca919d, nFileSizeHigh=0x0, nFileSizeLow=0x21180, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0166.784] wcscmp (_String1="NAMEEXT.DLL", _String2=".") returned 1 [0166.784] wcscmp (_String1="NAMEEXT.DLL", _String2="..") returned 1 [0166.784] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e62300, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x8df18150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x38e62300, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x71f1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Data0011.DLL", cAlternateFileName="NL7DAT~1.DLL")) returned 1 [0166.784] wcscmp (_String1="NL7Data0011.DLL", _String2=".") returned 1 [0166.784] wcscmp (_String1="NL7Data0011.DLL", _String2="..") returned 1 [0166.784] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43a0b800, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x80d9f150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x43a0b800, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x2589b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Lexicons0011.DLL", cAlternateFileName="NL7LEX~1.DLL")) returned 1 [0166.784] wcscmp (_String1="NL7Lexicons0011.DLL", _String2=".") returned 1 [0166.784] wcscmp (_String1="NL7Lexicons0011.DLL", _String2="..") returned 1 [0166.784] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e19800, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xd8e86890, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa7e19800, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x5899b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS0009.dll", cAlternateFileName="NL7MOD~3.DLL")) returned 1 [0166.784] wcscmp (_String1="NL7MODELS0009.dll", _String2=".") returned 1 [0166.785] wcscmp (_String1="NL7MODELS0009.dll", _String2="..") returned 1 [0166.785] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3764600, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdfdced10, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3764600, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x5ef1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000A.dll", cAlternateFileName="NL7MOD~1.DLL")) returned 1 [0166.785] wcscmp (_String1="NL7MODELS000A.dll", _String2=".") returned 1 [0166.785] wcscmp (_String1="NL7MODELS000A.dll", _String2="..") returned 1 [0166.785] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba9d5400, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdcf3deb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xba9d5400, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x5695b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7MODELS000C.dll", cAlternateFileName="NL7MOD~2.DLL")) returned 1 [0166.785] wcscmp (_String1="NL7MODELS000C.dll", _String2=".") returned 1 [0166.785] wcscmp (_String1="NL7MODELS000C.dll", _String2="..") returned 1 [0166.785] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48656c00, ftCreationTime.dwHighDateTime=0x1cacf9a, ftLastAccessTime.dwLowDateTime=0x8df64410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48656c00, ftLastWriteTime.dwHighDateTime=0x1cacf9a, nFileSizeHigh=0x0, nFileSizeLow=0x6529b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL7Models0011.DLL", cAlternateFileName="NL7MOD~4.DLL")) returned 1 [0166.785] wcscmp (_String1="NL7Models0011.DLL", _String2=".") returned 1 [0166.785] wcscmp (_String1="NL7Models0011.DLL", _String2="..") returned 1 [0166.785] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61256900, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61256900, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPAUTHZ.DLL", cAlternateFileName="")) returned 1 [0166.785] wcscmp (_String1="NPAUTHZ.DLL", _String2=".") returned 1 [0166.785] wcscmp (_String1="NPAUTHZ.DLL", _String2="..") returned 1 [0166.785] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x59e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPSPWRAP.DLL", cAlternateFileName="")) returned 1 [0166.785] wcscmp (_String1="NPSPWRAP.DLL", _String2=".") returned 1 [0166.786] wcscmp (_String1="NPSPWRAP.DLL", _String2="..") returned 1 [0166.786] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3593df00, ftCreationTime.dwHighDateTime=0x1cbe5d1, ftLastAccessTime.dwLowDateTime=0xfa74c990, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x3593df00, ftLastWriteTime.dwHighDateTime=0x1cbe5d1, nFileSizeHigh=0x0, nFileSizeLow=0x1393168, dwReserved0=0x0, dwReserved1=0x0, cFileName="OART.DLL", cAlternateFileName="")) returned 1 [0166.786] wcscmp (_String1="OART.DLL", _String2=".") returned 1 [0166.786] wcscmp (_String1="OART.DLL", _String2="..") returned 1 [0166.786] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa4d600, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0x811ef930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9fa4d600, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0xa9b378, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARTCONV.DLL", cAlternateFileName="")) returned 1 [0166.786] wcscmp (_String1="OARTCONV.DLL", _String2=".") returned 1 [0166.786] wcscmp (_String1="OARTCONV.DLL", _String2="..") returned 1 [0166.786] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0xd00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRHC.DAT", cAlternateFileName="")) returned 1 [0166.786] wcscmp (_String1="OCRHC.DAT", _String2=".") returned 1 [0166.786] wcscmp (_String1="OCRHC.DAT", _String2="..") returned 1 [0166.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f560 [0166.786] wcscpy (in: _Dest=0x3f3f560, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0166.787] wcscat (in: _Dest=0x3f3f560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0166.787] wcscat (in: _Dest=0x3f3f560, _Source="OCRHC.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" [0172.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0172.795] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59037100, ftCreationTime.dwHighDateTime=0x1c2137e, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59037100, ftLastWriteTime.dwHighDateTime=0x1c2137e, nFileSizeHigh=0x0, nFileSizeLow=0xa00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRVC.DAT", cAlternateFileName="")) returned 1 [0172.795] wcscmp (_String1="OCRVC.DAT", _String2=".") returned 1 [0172.795] wcscmp (_String1="OCRVC.DAT", _String2="..") returned 1 [0172.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd10 [0172.795] wcscpy (in: _Dest=0x3f3dd10, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.795] wcscat (in: _Dest=0x3f3dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.795] wcscat (in: _Dest=0x3f3dd10, _Source="OCRVC.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" [0172.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0172.796] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcda9300, ftCreationTime.dwHighDateTime=0x1ca9a29, ftLastAccessTime.dwLowDateTime=0x812ae010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfcda9300, ftLastWriteTime.dwHighDateTime=0x1ca9a29, nFileSizeHigh=0x0, nFileSizeLow=0x1c99, dwReserved0=0x0, dwReserved1=0x0, cFileName="OEMPRINT.CAT", cAlternateFileName="")) returned 1 [0172.796] wcscmp (_String1="OEMPRINT.CAT", _String2=".") returned 1 [0172.796] wcscmp (_String1="OEMPRINT.CAT", _String2="..") returned 1 [0172.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0172.796] wcscpy (in: _Dest=0x3f3dfe0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.796] wcscat (in: _Dest=0x3f3dfe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.796] wcscat (in: _Dest=0x3f3dfe0, _Source="OEMPRINT.CAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" [0172.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dfe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0172.797] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f5db00, ftCreationTime.dwHighDateTime=0x1cbd8c6, ftLastAccessTime.dwLowDateTime=0xf8834a30, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa8f5db00, ftLastWriteTime.dwHighDateTime=0x1cbd8c6, nFileSizeHigh=0x0, nFileSizeLow=0x6f1180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWC.DLL", cAlternateFileName="")) returned 1 [0172.797] wcscmp (_String1="OFFOWC.DLL", _String2=".") returned 1 [0172.797] wcscmp (_String1="OFFOWC.DLL", _String2="..") returned 1 [0172.797] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfbe600, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x8150f610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cfbe600, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0xdfe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFRHD.DLL", cAlternateFileName="")) returned 1 [0172.797] wcscmp (_String1="OFFRHD.DLL", _String2=".") returned 1 [0172.797] wcscmp (_String1="OFFRHD.DLL", _String2="..") returned 1 [0172.797] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9aad100, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x8e4bf590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9aad100, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0x62178, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFXML.DLL", cAlternateFileName="")) returned 1 [0172.798] wcscmp (_String1="OFFXML.DLL", _String2=".") returned 1 [0172.798] wcscmp (_String1="OFFXML.DLL", _String2="..") returned 1 [0172.798] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d87900, ftCreationTime.dwHighDateTime=0x1c6f433, ftLastAccessTime.dwLowDateTime=0x8e4bf590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7d87900, ftLastWriteTime.dwHighDateTime=0x1c6f433, nFileSizeHigh=0x0, nFileSizeLow=0x9bb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogalegit.dll", cAlternateFileName="")) returned 1 [0172.798] wcscmp (_String1="ogalegit.dll", _String2=".") returned 1 [0172.798] wcscmp (_String1="ogalegit.dll", _String2="..") returned 1 [0172.798] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa657bf00, ftCreationTime.dwHighDateTime=0x1cb7064, ftLastAccessTime.dwLowDateTime=0xf8c12df0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa657bf00, ftLastWriteTime.dwHighDateTime=0x1cb7064, nFileSizeHigh=0x0, nFileSizeLow=0x352578, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIMG.DLL", cAlternateFileName="")) returned 1 [0172.798] wcscmp (_String1="OIMG.DLL", _String2=".") returned 1 [0172.798] wcscmp (_String1="OIMG.DLL", _String2="..") returned 1 [0172.798] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d2c000, ftCreationTime.dwHighDateTime=0x1cba0bc, ftLastAccessTime.dwLowDateTime=0xfaa46510, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x88d2c000, ftLastWriteTime.dwHighDateTime=0x1cba0bc, nFileSizeHigh=0x0, nFileSizeLow=0x42f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.EXE", cAlternateFileName="")) returned 1 [0172.798] wcscmp (_String1="OIS.EXE", _String2=".") returned 1 [0172.798] wcscmp (_String1="OIS.EXE", _String2="..") returned 1 [0172.798] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d2c000, ftCreationTime.dwHighDateTime=0x1cba0bc, ftLastAccessTime.dwLowDateTime=0xfab2ad50, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x88d2c000, ftLastWriteTime.dwHighDateTime=0x1cba0bc, nFileSizeHigh=0x0, nFileSizeLow=0xd8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISAPP.DLL", cAlternateFileName="")) returned 1 [0172.798] wcscmp (_String1="OISAPP.DLL", _String2=".") returned 1 [0172.798] wcscmp (_String1="OISAPP.DLL", _String2="..") returned 1 [0172.798] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df92700, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7df92700, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x5988, dwReserved0=0x0, dwReserved1=0x0, cFileName="oisctrl.dll", cAlternateFileName="")) returned 1 [0172.798] wcscmp (_String1="oisctrl.dll", _String2=".") returned 1 [0172.798] wcscmp (_String1="oisctrl.dll", _String2="..") returned 1 [0172.798] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d2c000, ftCreationTime.dwHighDateTime=0x1cba0bc, ftLastAccessTime.dwLowDateTime=0xfab50eb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x88d2c000, ftLastWriteTime.dwHighDateTime=0x1cba0bc, nFileSizeHigh=0x0, nFileSizeLow=0x3f778, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISGRAPH.DLL", cAlternateFileName="")) returned 1 [0172.798] wcscmp (_String1="OISGRAPH.DLL", _String2=".") returned 1 [0172.798] wcscmp (_String1="OISGRAPH.DLL", _String2="..") returned 1 [0172.798] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x3e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0172.798] wcscmp (_String1="OLKFSTUB.DLL", _String2=".") returned 1 [0172.798] wcscmp (_String1="OLKFSTUB.DLL", _String2="..") returned 1 [0172.798] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKIRM.XML", cAlternateFileName="")) returned 1 [0172.798] wcscmp (_String1="OLKIRM.XML", _String2=".") returned 1 [0172.798] wcscmp (_String1="OLKIRM.XML", _String2="..") returned 1 [0172.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e490 [0172.798] wcscpy (in: _Dest=0x3f3e490, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.799] wcscat (in: _Dest=0x3f3e490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.799] wcscat (in: _Dest=0x3f3e490, _Source="OLKIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" [0172.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0172.799] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13594, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLKIRMV.XML", cAlternateFileName="")) returned 1 [0172.800] wcscmp (_String1="OLKIRMV.XML", _String2=".") returned 1 [0172.800] wcscmp (_String1="OLKIRMV.XML", _String2="..") returned 1 [0172.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e238 [0172.800] wcscpy (in: _Dest=0x3f3e238, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.800] wcscat (in: _Dest=0x3f3e238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.800] wcscat (in: _Dest=0x3f3e238, _Source="OLKIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" [0172.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0172.801] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x8e5319b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x30a980, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAPI32.DLL", cAlternateFileName="")) returned 1 [0172.801] wcscmp (_String1="OLMAPI32.DLL", _String2=".") returned 1 [0172.801] wcscmp (_String1="OLMAPI32.DLL", _String2="..") returned 1 [0172.801] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91d3b00, ftCreationTime.dwHighDateTime=0x1c9e609, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc91d3b00, ftLastWriteTime.dwHighDateTime=0x1c9e609, nFileSizeHigh=0x0, nFileSizeLow=0x172bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMML2MML.XSL", cAlternateFileName="")) returned 1 [0172.801] wcscmp (_String1="OMML2MML.XSL", _String2=".") returned 1 [0172.801] wcscmp (_String1="OMML2MML.XSL", _String2="..") returned 1 [0172.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e940 [0172.801] wcscpy (in: _Dest=0x3f3e940, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.801] wcscat (in: _Dest=0x3f3e940, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.801] wcscat (in: _Dest=0x3f3e940, _Source="OMML2MML.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" [0172.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0172.810] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf8fc300, ftCreationTime.dwHighDateTime=0x1cab90b, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf8fc300, ftLastWriteTime.dwHighDateTime=0x1cab90b, nFileSizeHigh=0x0, nFileSizeLow=0xb0d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMAIN.DLL", cAlternateFileName="")) returned 1 [0172.810] wcscmp (_String1="OMSMAIN.DLL", _String2=".") returned 1 [0172.810] wcscmp (_String1="OMSMAIN.DLL", _String2="..") returned 1 [0172.810] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf8fc300, ftCreationTime.dwHighDateTime=0x1cab90b, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf8fc300, ftLastWriteTime.dwHighDateTime=0x1cab90b, nFileSizeHigh=0x0, nFileSizeLow=0x39390, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSXP32.DLL", cAlternateFileName="")) returned 1 [0172.810] wcscmp (_String1="OMSXP32.DLL", _String2=".") returned 1 [0172.810] wcscmp (_String1="OMSXP32.DLL", _String2="..") returned 1 [0172.810] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x9d190, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0172.810] wcscmp (_String1="ONBttnIE.dll", _String2=".") returned 1 [0172.810] wcscmp (_String1="ONBttnIE.dll", _String2="..") returned 1 [0172.810] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x79390, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="ONBTTN~1.DLL")) returned 1 [0172.810] wcscmp (_String1="ONBttnIELinkedNotes.dll", _String2=".") returned 1 [0172.810] wcscmp (_String1="ONBttnIELinkedNotes.dll", _String2="..") returned 1 [0172.810] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e81ce00, ftCreationTime.dwHighDateTime=0x1cab90f, ftLastAccessTime.dwLowDateTime=0x816b2530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e81ce00, ftLastWriteTime.dwHighDateTime=0x1cab90f, nFileSizeHigh=0x0, nFileSizeLow=0xaa580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnOL.dll", cAlternateFileName="")) returned 1 [0172.810] wcscmp (_String1="ONBttnOL.dll", _String2=".") returned 1 [0172.810] wcscmp (_String1="ONBttnOL.dll", _String2="..") returned 1 [0172.810] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x816b2530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x82380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnPPT.dll", cAlternateFileName="ONBTTN~2.DLL")) returned 1 [0172.810] wcscmp (_String1="ONBttnPPT.dll", _String2=".") returned 1 [0172.811] wcscmp (_String1="ONBttnPPT.dll", _String2="..") returned 1 [0172.811] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x816b2530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x82378, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnWD.dll", cAlternateFileName="")) returned 1 [0172.811] wcscmp (_String1="ONBttnWD.dll", _String2=".") returned 1 [0172.811] wcscmp (_String1="ONBttnWD.dll", _String2="..") returned 1 [0172.811] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e57dc70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote", cAlternateFileName="")) returned 1 [0172.811] wcscmp (_String1="OneNote", _String2=".") returned 1 [0172.811] wcscmp (_String1="OneNote", _String2="..") returned 1 [0172.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69fa8 [0172.811] wcscpy (in: _Dest=0x3e69fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.811] wcscat (in: _Dest=0x3e69fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.811] wcscat (in: _Dest=0x3e69fa8, _Source="OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0172.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0172.812] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eb3900, ftCreationTime.dwHighDateTime=0x1cacff3, ftLastAccessTime.dwLowDateTime=0x816d8690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7eb3900, ftLastWriteTime.dwHighDateTime=0x1cacff3, nFileSizeHigh=0x0, nFileSizeLow=0x199360, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1 [0172.812] wcscmp (_String1="ONENOTE.EXE", _String2=".") returned 1 [0172.812] wcscmp (_String1="ONENOTE.EXE", _String2="..") returned 1 [0172.812] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b55b00, ftCreationTime.dwHighDateTime=0x1ca1b71, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73b55b00, ftLastWriteTime.dwHighDateTime=0x1ca1b71, nFileSizeHigh=0x0, nFileSizeLow=0x138f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEIRM.XML", cAlternateFileName="ONENOT~1.XML")) returned 1 [0172.812] wcscmp (_String1="ONENOTEIRM.XML", _String2=".") returned 1 [0172.812] wcscmp (_String1="ONENOTEIRM.XML", _String2="..") returned 1 [0172.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3efb620 [0172.812] wcscpy (in: _Dest=0x3efb620, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.812] wcscat (in: _Dest=0x3efb620, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.813] wcscat (in: _Dest=0x3efb620, _Source="ONENOTEIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" [0172.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efb620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0172.813] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e557b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x37980, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEM.EXE", cAlternateFileName="")) returned 1 [0172.814] wcscmp (_String1="ONENOTEM.EXE", _String2=".") returned 1 [0172.814] wcscmp (_String1="ONENOTEM.EXE", _String2="..") returned 1 [0172.814] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x22370, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEMANAGED.DLL", cAlternateFileName="ONENOT~2.DLL")) returned 1 [0172.814] wcscmp (_String1="ONENOTEMANAGED.DLL", _String2=".") returned 1 [0172.814] wcscmp (_String1="ONENOTEMANAGED.DLL", _String2="..") returned 1 [0172.814] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x412f2f00, ftCreationTime.dwHighDateTime=0x1cab831, ftLastAccessTime.dwLowDateTime=0x81a1e4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x412f2f00, ftLastWriteTime.dwHighDateTime=0x1cab831, nFileSizeHigh=0x0, nFileSizeLow=0xe0bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPC.dll", cAlternateFileName="ONENOT~1.DLL")) returned 1 [0172.814] wcscmp (_String1="OneNoteSyncPC.dll", _String2=".") returned 1 [0172.814] wcscmp (_String1="OneNoteSyncPC.dll", _String2="..") returned 1 [0172.814] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eb3900, ftCreationTime.dwHighDateTime=0x1cacff3, ftLastAccessTime.dwLowDateTime=0x8174aab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7eb3900, ftLastWriteTime.dwHighDateTime=0x1cacff3, nFileSizeHigh=0x0, nFileSizeLow=0x11f970, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONFILTER.DLL", cAlternateFileName="")) returned 1 [0172.814] wcscmp (_String1="ONFILTER.DLL", _String2=".") returned 1 [0172.814] wcscmp (_String1="ONFILTER.DLL", _String2="..") returned 1 [0172.814] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8174aab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xf9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="ONLNTC~1.DLL")) returned 1 [0172.814] wcscmp (_String1="ONLNTCOMLIB.DLL", _String2=".") returned 1 [0172.814] wcscmp (_String1="ONLNTCOMLIB.DLL", _String2="..") returned 1 [0172.814] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eb3900, ftCreationTime.dwHighDateTime=0x1cacff3, ftLastAccessTime.dwLowDateTime=0x8187b5b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7eb3900, ftLastWriteTime.dwHighDateTime=0x1cacff3, nFileSizeHigh=0x0, nFileSizeLow=0x8c1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONMAIN.DLL", cAlternateFileName="")) returned 1 [0172.814] wcscmp (_String1="ONMAIN.DLL", _String2=".") returned 1 [0172.814] wcscmp (_String1="ONMAIN.DLL", _String2="..") returned 1 [0172.814] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x88d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONPPTAddin.dll", cAlternateFileName="ONPPTA~1.DLL")) returned 1 [0172.814] wcscmp (_String1="ONPPTAddin.dll", _String2=".") returned 1 [0172.814] wcscmp (_String1="ONPPTAddin.dll", _String2="..") returned 1 [0172.814] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa68000, ftCreationTime.dwHighDateTime=0x1cab840, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffa68000, ftLastWriteTime.dwHighDateTime=0x1cab840, nFileSizeHigh=0x0, nFileSizeLow=0x96578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONWordAddin.dll", cAlternateFileName="ONWORD~1.DLL")) returned 1 [0172.814] wcscmp (_String1="ONWordAddin.dll", _String2=".") returned 1 [0172.814] wcscmp (_String1="ONWordAddin.dll", _String2="..") returned 1 [0172.814] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d2e570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x123188, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.DLL", cAlternateFileName="")) returned 1 [0172.814] wcscmp (_String1="ORGCHART.DLL", _String2=".") returned 1 [0172.814] wcscmp (_String1="ORGCHART.DLL", _String2="..") returned 1 [0172.814] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d546d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x70188, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHWIZ.DLL", cAlternateFileName="")) returned 1 [0172.814] wcscmp (_String1="ORGCHWIZ.DLL", _String2=".") returned 1 [0172.814] wcscmp (_String1="ORGCHWIZ.DLL", _String2="..") returned 1 [0172.814] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92af850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x13190, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.EXE", cAlternateFileName="")) returned 1 [0172.814] wcscmp (_String1="ORGWIZ.EXE", _String2=".") returned 1 [0172.814] wcscmp (_String1="ORGWIZ.EXE", _String2="..") returned 1 [0172.815] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92af850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x4fd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORMELEMS.DLL", cAlternateFileName="")) returned 1 [0172.815] wcscmp (_String1="ORMELEMS.DLL", _String2=".") returned 1 [0172.815] wcscmp (_String1="ORMELEMS.DLL", _String2="..") returned 1 [0172.815] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbeea9050, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xdf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORMMODEL.MDL", cAlternateFileName="")) returned 1 [0172.815] wcscmp (_String1="ORMMODEL.MDL", _String2=".") returned 1 [0172.815] wcscmp (_String1="ORMMODEL.MDL", _String2="..") returned 1 [0172.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0172.815] wcscpy (in: _Dest=0x3f3def0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.815] wcscat (in: _Dest=0x3f3def0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.815] wcscat (in: _Dest=0x3f3def0, _Source="ORMMODEL.MDL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL") returned="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" [0172.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3def0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0172.816] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2277df00, ftCreationTime.dwHighDateTime=0x1cabcee, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2277df00, ftLastWriteTime.dwHighDateTime=0x1cabcee, nFileSizeHigh=0x0, nFileSizeLow=0x3d05, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0172.816] wcscmp (_String1="OSPP.HTM", _String2=".") returned 1 [0172.816] wcscmp (_String1="OSPP.HTM", _String2="..") returned 1 [0172.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69d08 [0172.816] wcscpy (in: _Dest=0x3e69d08, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.816] wcscat (in: _Dest=0x3e69d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.816] wcscat (in: _Dest=0x3e69d08, _Source="OSPP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM") returned="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" [0172.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0172.817] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2277df00, ftCreationTime.dwHighDateTime=0x1cabcee, ftLastAccessTime.dwLowDateTime=0x81ab6a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2277df00, ftLastWriteTime.dwHighDateTime=0x1cabcee, nFileSizeHigh=0x0, nFileSizeLow=0xc119, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0172.817] wcscmp (_String1="OSPP.VBS", _String2=".") returned 1 [0172.817] wcscmp (_String1="OSPP.VBS", _String2="..") returned 1 [0172.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69b48 [0172.817] wcscpy (in: _Dest=0x3e69b48, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.817] wcscat (in: _Dest=0x3e69b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.817] wcscat (in: _Dest=0x3e69b48, _Source="OSPP.VBS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS") returned="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" [0172.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0172.818] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x7760, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLACCT.DLL", cAlternateFileName="")) returned 1 [0172.818] wcscmp (_String1="OUTLACCT.DLL", _String2=".") returned 1 [0172.819] wcscmp (_String1="OUTLACCT.DLL", _String2="..") returned 1 [0172.819] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8e5c9f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x1df60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLCTL.DLL", cAlternateFileName="")) returned 1 [0172.819] wcscmp (_String1="OUTLCTL.DLL", _String2=".") returned 1 [0172.819] wcscmp (_String1="OUTLCTL.DLL", _String2="..") returned 1 [0172.819] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b48400, ftCreationTime.dwHighDateTime=0x1ca0b8d, ftLastAccessTime.dwLowDateTime=0x81d64310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x58b48400, ftLastWriteTime.dwHighDateTime=0x1ca0b8d, nFileSizeHigh=0x0, nFileSizeLow=0x380000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLFLTR.DAT", cAlternateFileName="")) returned 1 [0172.819] wcscmp (_String1="OUTLFLTR.DAT", _String2=".") returned 1 [0172.819] wcscmp (_String1="OUTLFLTR.DAT", _String2="..") returned 1 [0172.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0172.819] wcscpy (in: _Dest=0x3f3e7d8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.819] wcscat (in: _Dest=0x3f3e7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.819] wcscat (in: _Dest=0x3f3e7d8, _Source="OUTLFLTR.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" [0172.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0172.822] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41fc600, ftCreationTime.dwHighDateTime=0x1ca50e7, ftLastAccessTime.dwLowDateTime=0x8e5c9f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd41fc600, ftLastWriteTime.dwHighDateTime=0x1ca50e7, nFileSizeHigh=0x0, nFileSizeLow=0xa5138, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLFLTR.DLL", cAlternateFileName="")) returned 1 [0172.822] wcscmp (_String1="OUTLFLTR.DLL", _String2=".") returned 1 [0172.822] wcscmp (_String1="OUTLFLTR.DLL", _String2="..") returned 1 [0172.822] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x81d8a470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x7fd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLMIME.DLL", cAlternateFileName="")) returned 1 [0172.822] wcscmp (_String1="OUTLMIME.DLL", _String2=".") returned 1 [0172.822] wcscmp (_String1="OUTLMIME.DLL", _String2="..") returned 1 [0172.822] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x8e720b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0xf27360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.EXE", cAlternateFileName="")) returned 1 [0172.822] wcscmp (_String1="OUTLOOK.EXE", _String2=".") returned 1 [0172.822] wcscmp (_String1="OUTLOOK.EXE", _String2="..") returned 1 [0172.822] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9830ba00, ftCreationTime.dwHighDateTime=0x1caca13, ftLastAccessTime.dwLowDateTime=0x8e720b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9830ba00, ftLastWriteTime.dwHighDateTime=0x1caca13, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.EXE.MANIFEST", cAlternateFileName="OUTLOO~1.MAN")) returned 1 [0172.822] wcscmp (_String1="OUTLOOK.EXE.MANIFEST", _String2=".") returned 1 [0172.822] wcscmp (_String1="OUTLOOK.EXE.MANIFEST", _String2="..") returned 1 [0172.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d7d0 [0172.822] wcscpy (in: _Dest=0x3f3d7d0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.822] wcscat (in: _Dest=0x3f3d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.822] wcscat (in: _Dest=0x3f3d7d0, _Source="OUTLOOK.EXE.MANIFEST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST") returned="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" [0172.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0172.823] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookAutoDiscover", cAlternateFileName="OUTLOO~1")) returned 1 [0172.823] wcscmp (_String1="OutlookAutoDiscover", _String2=".") returned 1 [0172.823] wcscmp (_String1="OutlookAutoDiscover", _String2="..") returned 1 [0172.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c6d0 [0172.823] wcscpy (in: _Dest=0x3f3c6d0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.823] wcscat (in: _Dest=0x3f3c6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.823] wcscat (in: _Dest=0x3f3c6d0, _Source="OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0172.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3c6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0172.824] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x81d8a470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x50590, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1 [0172.824] wcscmp (_String1="OUTLPH.DLL", _String2=".") returned 1 [0172.824] wcscmp (_String1="OUTLPH.DLL", _String2="..") returned 1 [0172.824] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x81dfc890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0xa958, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLRPC.DLL", cAlternateFileName="")) returned 1 [0172.824] wcscmp (_String1="OUTLRPC.DLL", _String2=".") returned 1 [0172.824] wcscmp (_String1="OUTLRPC.DLL", _String2="..") returned 1 [0172.824] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x8f888c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0xd970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBS.DLL", cAlternateFileName="")) returned 1 [0172.824] wcscmp (_String1="OUTLVBS.DLL", _String2=".") returned 1 [0172.824] wcscmp (_String1="OUTLVBS.DLL", _String2="..") returned 1 [0172.824] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ccc500, ftCreationTime.dwHighDateTime=0x1cb7078, ftLastAccessTime.dwLowDateTime=0xf733a850, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xc1ccc500, ftLastWriteTime.dwHighDateTime=0x1cb7078, nFileSizeHigh=0x0, nFileSizeLow=0x7ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSCLT.DLL", cAlternateFileName="")) returned 1 [0172.825] wcscmp (_String1="OWSCLT.DLL", _String2=".") returned 1 [0172.825] wcscmp (_String1="OWSCLT.DLL", _String2="..") returned 1 [0172.825] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x20d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSSUPP.DLL", cAlternateFileName="")) returned 1 [0172.826] wcscmp (_String1="OWSSUPP.DLL", _String2=".") returned 1 [0172.826] wcscmp (_String1="OWSSUPP.DLL", _String2="..") returned 1 [0172.826] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ebaf70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fba8950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAGESIZE", cAlternateFileName="")) returned 1 [0172.826] wcscmp (_String1="PAGESIZE", _String2=".") returned 1 [0172.826] wcscmp (_String1="PAGESIZE", _String2="..") returned 1 [0172.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69e58 [0172.826] wcscpy (in: _Dest=0x3e69e58, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0172.826] wcscat (in: _Dest=0x3e69e58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0172.827] wcscat (in: _Dest=0x3e69e58, _Source="PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0173.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0173.772] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92d59b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x549a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDSBASE.DLL", cAlternateFileName="")) returned 1 [0173.772] wcscmp (_String1="PDSBASE.DLL", _String2=".") returned 1 [0173.772] wcscmp (_String1="PDSBASE.DLL", _String2="..") returned 1 [0173.772] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8d546d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x86170, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.DLL", cAlternateFileName="")) returned 1 [0173.772] wcscmp (_String1="PE.DLL", _String2=".") returned 1 [0173.772] wcscmp (_String1="PE.DLL", _String2="..") returned 1 [0173.772] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b22a00, ftCreationTime.dwHighDateTime=0x1cba0b6, ftLastAccessTime.dwLowDateTime=0xf53b04d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xf4b22a00, ftLastWriteTime.dwHighDateTime=0x1cba0b6, nFileSizeHigh=0x0, nFileSizeLow=0x143a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEOPLEDATAHANDLER.DLL", cAlternateFileName="PEOPLE~1.DLL")) returned 1 [0173.772] wcscmp (_String1="PEOPLEDATAHANDLER.DLL", _String2=".") returned 1 [0173.772] wcscmp (_String1="PEOPLEDATAHANDLER.DLL", _String2="..") returned 1 [0173.772] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae97b700, ftCreationTime.dwHighDateTime=0x1caba0d, ftLastAccessTime.dwLowDateTime=0xb773d550, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xae97b700, ftLastWriteTime.dwHighDateTime=0x1caba0d, nFileSizeHigh=0x0, nFileSizeLow=0x22560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJCALEND.DLL", cAlternateFileName="")) returned 1 [0173.772] wcscmp (_String1="PJCALEND.DLL", _String2=".") returned 1 [0173.772] wcscmp (_String1="PJCALEND.DLL", _String2="..") returned 1 [0173.772] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ddd200, ftCreationTime.dwHighDateTime=0x1cabf7f, ftLastAccessTime.dwLowDateTime=0x82037d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7ddd200, ftLastWriteTime.dwHighDateTime=0x1cabf7f, nFileSizeHigh=0x0, nFileSizeLow=0x20fd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.EXE", cAlternateFileName="")) returned 1 [0173.772] wcscmp (_String1="POWERPNT.EXE", _String2=".") returned 1 [0173.772] wcscmp (_String1="POWERPNT.EXE", _String2="..") returned 1 [0173.772] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1591800, ftCreationTime.dwHighDateTime=0x1cabf03, ftLastAccessTime.dwLowDateTime=0x8fcd9450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1591800, ftLastWriteTime.dwHighDateTime=0x1cabf03, nFileSizeHigh=0x0, nFileSizeLow=0xdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpnt.exe.manifest", cAlternateFileName="POWERP~1.MAN")) returned 1 [0173.772] wcscmp (_String1="powerpnt.exe.manifest", _String2=".") returned 1 [0173.772] wcscmp (_String1="powerpnt.exe.manifest", _String2="..") returned 1 [0173.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61440 [0173.772] wcscpy (in: _Dest=0x7a61440, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.772] wcscat (in: _Dest=0x7a61440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.772] wcscat (in: _Dest=0x7a61440, _Source="powerpnt.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" [0173.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0173.773] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ddd200, ftCreationTime.dwHighDateTime=0x1cabf7f, ftLastAccessTime.dwLowDateTime=0x8fdbdc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7ddd200, ftLastWriteTime.dwHighDateTime=0x1cabf7f, nFileSizeHigh=0x0, nFileSizeLow=0x93f568, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPCORE.DLL", cAlternateFileName="")) returned 1 [0173.773] wcscmp (_String1="PPCORE.DLL", _String2=".") returned 1 [0173.773] wcscmp (_String1="PPCORE.DLL", _String2="..") returned 1 [0173.773] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0d9db00, ftCreationTime.dwHighDateTime=0x1cab83b, ftLastAccessTime.dwLowDateTime=0x8fdbdc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0d9db00, ftLastWriteTime.dwHighDateTime=0x1cab83b, nFileSizeHigh=0x0, nFileSizeLow=0x5ef90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPSLAX.DLL", cAlternateFileName="")) returned 1 [0173.773] wcscmp (_String1="PPSLAX.DLL", _String2=".") returned 1 [0173.774] wcscmp (_String1="PPSLAX.DLL", _String2="..") returned 1 [0173.774] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a619c00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x8205de90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a619c00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x39df60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPTICO.EXE", cAlternateFileName="")) returned 1 [0173.774] wcscmp (_String1="PPTICO.EXE", _String2=".") returned 1 [0173.774] wcscmp (_String1="PPTICO.EXE", _String2="..") returned 1 [0173.774] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8205de90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPTIRM.XML", cAlternateFileName="")) returned 1 [0173.774] wcscmp (_String1="PPTIRM.XML", _String2=".") returned 1 [0173.774] wcscmp (_String1="PPTIRM.XML", _String2="..") returned 1 [0173.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fb00 [0173.774] wcscpy (in: _Dest=0x3f3fb00, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.774] wcscat (in: _Dest=0x3f3fb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.774] wcscat (in: _Dest=0x3f3fb00, _Source="PPTIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" [0173.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0173.775] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x8fdbdc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x135b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPTIRMV.XML", cAlternateFileName="")) returned 1 [0173.775] wcscmp (_String1="PPTIRMV.XML", _String2=".") returned 1 [0173.775] wcscmp (_String1="PPTIRMV.XML", _String2="..") returned 1 [0173.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3fce0 [0173.775] wcscpy (in: _Dest=0x3f3fce0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.775] wcscat (in: _Dest=0x3f3fce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.775] wcscat (in: _Dest=0x3f3fce0, _Source="PPTIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" [0173.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0173.776] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92d59b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x13388, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJIMPT.EXE", cAlternateFileName="")) returned 1 [0173.777] wcscmp (_String1="PROJIMPT.EXE", _String2=".") returned 1 [0173.777] wcscmp (_String1="PROJIMPT.EXE", _String2="..") returned 1 [0173.777] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73272700, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92d59b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73272700, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1c960, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJMODL.DLL", cAlternateFileName="")) returned 1 [0173.777] wcscmp (_String1="PROJMODL.DLL", _String2=".") returned 1 [0173.777] wcscmp (_String1="PROJMODL.DLL", _String2="..") returned 1 [0173.777] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b97b9f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xdf9a4690, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdf9a4690, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0173.777] wcscmp (_String1="PROOF", _String2=".") returned 1 [0173.777] wcscmp (_String1="PROOF", _String2="..") returned 1 [0173.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a235a0 [0173.777] wcscpy (in: _Dest=0x7a235a0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.777] wcscat (in: _Dest=0x7a235a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.777] wcscat (in: _Dest=0x7a235a0, _Source="PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0173.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a235a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0173.778] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92fbb10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xeb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPMGR.DLL", cAlternateFileName="")) returned 1 [0173.778] wcscmp (_String1="PROPMGR.DLL", _String2=".") returned 1 [0173.778] wcscmp (_String1="PROPMGR.DLL", _String2="..") returned 1 [0173.779] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe92fbb10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xb3988, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.DLL", cAlternateFileName="")) returned 1 [0173.779] wcscmp (_String1="PROPRPT.DLL", _String2=".") returned 1 [0173.779] wcscmp (_String1="PROPRPT.DLL", _String2="..") returned 1 [0173.779] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x21f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRTF9.DLL", cAlternateFileName="")) returned 1 [0173.779] wcscmp (_String1="PRTF9.DLL", _String2=".") returned 1 [0173.779] wcscmp (_String1="PRTF9.DLL", _String2="..") returned 1 [0173.779] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x4b568, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTPRX32.DLL", cAlternateFileName="")) returned 1 [0173.779] wcscmp (_String1="PSTPRX32.DLL", _String2=".") returned 1 [0173.779] wcscmp (_String1="PSTPRX32.DLL", _String2="..") returned 1 [0173.779] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462fd00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x820f6410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5462fd00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x9e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTXT9.DLL", cAlternateFileName="")) returned 1 [0173.779] wcscmp (_String1="PTXT9.DLL", _String2=".") returned 1 [0173.779] wcscmp (_String1="PTXT9.DLL", _String2="..") returned 1 [0173.779] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80bd60d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd28f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBBA", cAlternateFileName="")) returned 1 [0173.779] wcscmp (_String1="PUBBA", _String2=".") returned 1 [0173.779] wcscmp (_String1="PUBBA", _String2="..") returned 1 [0173.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23290 [0173.780] wcscpy (in: _Dest=0x7a23290, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.780] wcscat (in: _Dest=0x7a23290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.780] wcscat (in: _Dest=0x7a23290, _Source="PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0173.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0173.781] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5462fd00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0x824160f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5462fd00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x93778, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1 [0173.781] wcscmp (_String1="PUBCONV.DLL", _String2=".") returned 1 [0173.781] wcscmp (_String1="PUBCONV.DLL", _String2="..") returned 1 [0173.781] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x903650d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xbd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBTRAP.DLL", cAlternateFileName="")) returned 1 [0173.781] wcscmp (_String1="PUBTRAP.DLL", _String2=".") returned 1 [0173.781] wcscmp (_String1="PUBTRAP.DLL", _String2="..") returned 1 [0173.781] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924460b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWIZ", cAlternateFileName="")) returned 1 [0173.781] wcscmp (_String1="PUBWIZ", _String2=".") returned 1 [0173.781] wcscmp (_String1="PUBWIZ", _String2="..") returned 1 [0173.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23300 [0173.781] wcscpy (in: _Dest=0x7a23300, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.782] wcscat (in: _Dest=0x7a23300, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.782] wcscat (in: _Dest=0x7a23300, _Source="PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0173.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0173.783] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ef99d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f1fb30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUERIES", cAlternateFileName="")) returned 1 [0173.783] wcscmp (_String1="QUERIES", _String2=".") returned 1 [0173.783] wcscmp (_String1="QUERIES", _String2="..") returned 1 [0173.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a22ff0 [0173.783] wcscpy (in: _Dest=0x7a22ff0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.783] wcscat (in: _Dest=0x7a22ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.783] wcscat (in: _Dest=0x7a22ff0, _Source="QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0173.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a22ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0173.784] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x9d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECALL.DLL", cAlternateFileName="")) returned 1 [0173.784] wcscmp (_String1="RECALL.DLL", _String2=".") returned 1 [0173.784] wcscmp (_String1="RECALL.DLL", _String2="..") returned 1 [0173.784] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFEDIT.DLL", cAlternateFileName="")) returned 1 [0173.784] wcscmp (_String1="REFEDIT.DLL", _String2=".") returned 1 [0173.784] wcscmp (_String1="REFEDIT.DLL", _String2="..") returned 1 [0173.784] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f864b00, ftCreationTime.dwHighDateTime=0x1c5c856, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f864b00, ftLastWriteTime.dwHighDateTime=0x1c5c856, nFileSizeHigh=0x0, nFileSizeLow=0x1a900, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMINDER.WAV", cAlternateFileName="")) returned 1 [0173.785] wcscmp (_String1="REMINDER.WAV", _String2=".") returned 1 [0173.785] wcscmp (_String1="REMINDER.WAV", _String2="..") returned 1 [0173.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0173.785] wcscpy (in: _Dest=0x3f3f470, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.785] wcscat (in: _Dest=0x3f3f470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.785] wcscat (in: _Dest=0x3f3f470, _Source="REMINDER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" [0173.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0173.786] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9321c70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x29f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.DLL", cAlternateFileName="")) returned 1 [0173.786] wcscmp (_String1="REPORT.DLL", _String2=".") returned 1 [0173.786] wcscmp (_String1="REPORT.DLL", _String2="..") returned 1 [0173.786] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x903fd650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x4f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="REVERSE.DLL", cAlternateFileName="")) returned 1 [0173.786] wcscmp (_String1="REVERSE.DLL", _String2=".") returned 1 [0173.786] wcscmp (_String1="REVERSE.DLL", _String2="..") returned 1 [0173.786] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30aa1100, ftCreationTime.dwHighDateTime=0x1c7a7cb, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30aa1100, ftLastWriteTime.dwHighDateTime=0x1c7a7cb, nFileSizeHigh=0x0, nFileSizeLow=0x353f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSWOP.ICM", cAlternateFileName="")) returned 1 [0173.786] wcscmp (_String1="RSWOP.ICM", _String2=".") returned 1 [0173.786] wcscmp (_String1="RSWOP.ICM", _String2="..") returned 1 [0173.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f8a8 [0173.786] wcscpy (in: _Dest=0x3f3f8a8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0173.786] wcscat (in: _Dest=0x3f3f8a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0173.786] wcscat (in: _Dest=0x3f3f8a8, _Source="RSWOP.ICM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM") returned="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" [0173.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c [0173.787] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702f6e00, ftCreationTime.dwHighDateTime=0x1caca88, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x702f6e00, ftLastWriteTime.dwHighDateTime=0x1caca88, nFileSizeHigh=0x0, nFileSizeLow=0x65570, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTFHTML.DLL", cAlternateFileName="")) returned 1 [0173.788] wcscmp (_String1="RTFHTML.DLL", _String2=".") returned 1 [0173.788] wcscmp (_String1="RTFHTML.DLL", _String2="..") returned 1 [0173.788] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494be600, ftCreationTime.dwHighDateTime=0x1ca9181, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x494be600, ftLastWriteTime.dwHighDateTime=0x1ca9181, nFileSizeHigh=0x0, nFileSizeLow=0x46d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAEXT.DLL", cAlternateFileName="")) returned 1 [0173.788] wcscmp (_String1="SAEXT.DLL", _String2=".") returned 1 [0173.788] wcscmp (_String1="SAEXT.DLL", _String2="..") returned 1 [0173.788] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4302a4d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAMPLES", cAlternateFileName="")) returned 1 [0175.317] wcscmp (_String1="SAMPLES", _String2=".") returned 1 [0175.317] wcscmp (_String1="SAMPLES", _String2="..") returned 1 [0175.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69c28 [0175.318] wcscpy (in: _Dest=0x3e69c28, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0175.318] wcscat (in: _Dest=0x3e69c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0175.318] wcscat (in: _Dest=0x3e69c28, _Source="SAMPLES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" [0175.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0175.666] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9321c70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x67b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1 [0175.666] wcscmp (_String1="SAVASWEB.DLL", _String2=".") returned 1 [0175.666] wcscmp (_String1="SAVASWEB.DLL", _String2="..") returned 1 [0175.666] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81754300, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9347dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81754300, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1c5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBHF.DLL", cAlternateFileName="")) returned 1 [0175.666] wcscmp (_String1="SAVWBHF.DLL", _String2=".") returned 1 [0175.666] wcscmp (_String1="SAVWBHF.DLL", _String2="..") returned 1 [0175.666] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9347dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2d988, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBRAS.DLL", cAlternateFileName="")) returned 1 [0175.667] wcscmp (_String1="SAVWBRAS.DLL", _String2=".") returned 1 [0175.667] wcscmp (_String1="SAVWBRAS.DLL", _String2="..") returned 1 [0175.667] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9347dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2bf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBVML.DLL", cAlternateFileName="")) returned 1 [0175.667] wcscmp (_String1="SAVWBVML.DLL", _String2=".") returned 1 [0175.667] wcscmp (_String1="SAVWBVML.DLL", _String2="..") returned 1 [0175.667] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe936df30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x22988, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBXAML.DLL", cAlternateFileName="SAVWBX~1.DLL")) returned 1 [0175.667] wcscmp (_String1="SAVWBXAML.DLL", _String2=".") returned 1 [0175.667] wcscmp (_String1="SAVWBXAML.DLL", _String2="..") returned 1 [0175.667] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCANPST.EXE", cAlternateFileName="")) returned 1 [0175.667] wcscmp (_String1="SCANPST.EXE", _String2=".") returned 1 [0175.667] wcscmp (_String1="SCANPST.EXE", _String2="..") returned 1 [0175.667] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x507a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST32.DLL", cAlternateFileName="")) returned 1 [0175.667] wcscmp (_String1="SCNPST32.DLL", _String2=".") returned 1 [0175.667] wcscmp (_String1="SCNPST32.DLL", _String2="..") returned 1 [0175.667] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x531b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST64.DLL", cAlternateFileName="")) returned 1 [0175.667] wcscmp (_String1="SCNPST64.DLL", _String2=".") returned 1 [0175.667] wcscmp (_String1="SCNPST64.DLL", _String2="..") returned 1 [0175.667] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74536f00, ftCreationTime.dwHighDateTime=0x1c74aa6, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74536f00, ftLastWriteTime.dwHighDateTime=0x1c74aa6, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="SegoeChess.ttf", cAlternateFileName="SEGOEC~1.TTF")) returned 1 [0175.667] wcscmp (_String1="SegoeChess.ttf", _String2=".") returned 1 [0175.667] wcscmp (_String1="SegoeChess.ttf", _String2="..") returned 1 [0175.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47898 [0175.667] wcscpy (in: _Dest=0x3e47898, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0175.667] wcscat (in: _Dest=0x3e47898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0175.667] wcscat (in: _Dest=0x3e47898, _Source="SegoeChess.ttf" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf") returned="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" [0175.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0175.669] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b690600, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf8c85210, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7b690600, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x7f590, dwReserved0=0x0, dwReserved1=0x0, cFileName="SELFCERT.EXE", cAlternateFileName="")) returned 1 [0175.669] wcscmp (_String1="SELFCERT.EXE", _String2=".") returned 1 [0175.669] wcscmp (_String1="SELFCERT.EXE", _String2="..") returned 1 [0175.669] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x904bbd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x5f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SENDTO.DLL", cAlternateFileName="")) returned 1 [0175.669] wcscmp (_String1="SENDTO.DLL", _String2=".") returned 1 [0175.669] wcscmp (_String1="SENDTO.DLL", _String2="..") returned 1 [0175.669] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef015400, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef015400, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x10b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEQCHK10.DLL", cAlternateFileName="")) returned 1 [0175.669] wcscmp (_String1="SEQCHK10.DLL", _String2=".") returned 1 [0175.669] wcscmp (_String1="SEQCHK10.DLL", _String2="..") returned 1 [0175.669] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3756fd00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3756fd00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x8180, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.EXE", cAlternateFileName="")) returned 1 [0175.669] wcscmp (_String1="SETLANG.EXE", _String2=".") returned 1 [0175.669] wcscmp (_String1="SETLANG.EXE", _String2="..") returned 1 [0175.669] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2fd800, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8da0990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8c2fd800, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x181968, dwReserved0=0x0, dwReserved1=0x0, cFileName="SG.DLL", cAlternateFileName="")) returned 1 [0175.669] wcscmp (_String1="SG.DLL", _String2=".") returned 1 [0175.669] wcscmp (_String1="SG.DLL", _String2="..") returned 1 [0175.669] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe936df30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x32b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.DLL", cAlternateFileName="")) returned 1 [0175.669] wcscmp (_String1="SHAPNUM.DLL", _String2=".") returned 1 [0175.669] wcscmp (_String1="SHAPNUM.DLL", _String2="..") returned 1 [0175.669] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1dc100, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff1dc100, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x31b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAREPOINTPROVIDER.DLL", cAlternateFileName="SHAREP~1.DLL")) returned 1 [0175.669] wcscmp (_String1="SHAREPOINTPROVIDER.DLL", _String2=".") returned 1 [0175.670] wcscmp (_String1="SHAREPOINTPROVIDER.DLL", _String2="..") returned 1 [0175.670] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d7eef00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6d7eef00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchPadTestSchema.xml", cAlternateFileName="SKETCH~1.XML")) returned 1 [0175.670] wcscmp (_String1="SketchPadTestSchema.xml", _String2=".") returned 1 [0175.670] wcscmp (_String1="SketchPadTestSchema.xml", _String2="..") returned 1 [0175.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45770 [0175.670] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0175.670] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0175.670] wcscat (in: _Dest=0x3d45770, _Source="SketchPadTestSchema.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" [0175.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0175.671] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23a90c00, ftCreationTime.dwHighDateTime=0x1cabcee, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23a90c00, ftLastWriteTime.dwHighDateTime=0x1cabcee, nFileSizeHigh=0x0, nFileSizeLow=0x80fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0175.671] wcscmp (_String1="SLERROR.XML", _String2=".") returned 1 [0175.671] wcscmp (_String1="SLERROR.XML", _String2="..") returned 1 [0175.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e0d0 [0175.671] wcscpy (in: _Dest=0x3f3e0d0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0175.672] wcscat (in: _Dest=0x3f3e0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0175.672] wcscat (in: _Dest=0x3f3e0d0, _Source="SLERROR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" [0175.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0175.673] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc9be00, ftCreationTime.dwHighDateTime=0x1cab90c, ftLastAccessTime.dwLowDateTime=0xbf2612b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccc9be00, ftLastWriteTime.dwHighDateTime=0x1cab90c, nFileSizeHigh=0x0, nFileSizeLow=0x23170, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIGRATE.DLL", cAlternateFileName="")) returned 1 [0175.673] wcscmp (_String1="SMIGRATE.DLL", _String2=".") returned 1 [0175.673] wcscmp (_String1="SMIGRATE.DLL", _String2="..") returned 1 [0175.673] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1961c900, ftCreationTime.dwHighDateTime=0x1cab90e, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1961c900, ftLastWriteTime.dwHighDateTime=0x1cab90e, nFileSizeHigh=0x0, nFileSizeLow=0x7ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOA.DLL", cAlternateFileName="")) returned 1 [0175.673] wcscmp (_String1="SOA.DLL", _String2=".") returned 1 [0175.673] wcscmp (_String1="SOA.DLL", _String2="..") returned 1 [0175.673] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1dc100, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x826776f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff1dc100, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x1a0f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTOR.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1 [0175.673] wcscmp (_String1="SOCIALCONNECTOR.DLL", _String2=".") returned 1 [0175.673] wcscmp (_String1="SOCIALCONNECTOR.DLL", _String2="..") returned 1 [0175.673] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdec9400, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdec9400, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x7ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALPROVIDER.DLL", cAlternateFileName="SOCIAL~2.DLL")) returned 1 [0175.673] wcscmp (_String1="SOCIALPROVIDER.DLL", _String2=".") returned 1 [0175.673] wcscmp (_String1="SOCIALPROVIDER.DLL", _String2="..") returned 1 [0175.673] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9394090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x32b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLUTILS.DLL", cAlternateFileName="")) returned 1 [0175.673] wcscmp (_String1="SOLUTILS.DLL", _String2=".") returned 1 [0175.673] wcscmp (_String1="SOLUTILS.DLL", _String2="..") returned 1 [0175.673] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66535f00, ftCreationTime.dwHighDateTime=0x1c3e3ed, ftLastAccessTime.dwLowDateTime=0x4bc03150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66535f00, ftLastWriteTime.dwHighDateTime=0x1c3e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x597e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPANISH.LNG", cAlternateFileName="")) returned 1 [0175.673] wcscmp (_String1="SPANISH.LNG", _String2=".") returned 1 [0175.673] wcscmp (_String1="SPANISH.LNG", _String2="..") returned 1 [0175.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e490 [0175.674] wcscpy (in: _Dest=0x3f3e490, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0175.674] wcscat (in: _Dest=0x3f3e490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0175.674] wcscat (in: _Dest=0x3f3e490, _Source="SPANISH.LNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG") returned="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" [0175.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0175.675] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dc200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c4dc200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x173e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0175.675] wcscmp (_String1="SplashScreen.bmp", _String2=".") returned 1 [0175.675] wcscmp (_String1="SplashScreen.bmp", _String2="..") returned 1 [0175.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47c18 [0175.675] wcscpy (in: _Dest=0x3e47c18, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0175.675] wcscat (in: _Dest=0x3e47c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0175.675] wcscat (in: _Dest=0x3e47c18, _Source="SplashScreen.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" [0175.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0175.676] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9394090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x2fda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLSHARE.DLL", cAlternateFileName="")) returned 1 [0175.676] wcscmp (_String1="SQLSHARE.DLL", _String2=".") returned 1 [0175.676] wcscmp (_String1="SQLSHARE.DLL", _String2="..") returned 1 [0175.676] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455f7900, ftCreationTime.dwHighDateTime=0x1ca50e8, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x455f7900, ftLastWriteTime.dwHighDateTime=0x1ca50e8, nFileSizeHigh=0x0, nFileSizeLow=0x29540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSGEN.DLL", cAlternateFileName="")) returned 1 [0175.676] wcscmp (_String1="SSGEN.DLL", _String2=".") returned 1 [0175.676] wcscmp (_String1="SSGEN.DLL", _String2="..") returned 1 [0175.676] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0175.677] wcscmp (_String1="STARTUP", _String2=".") returned 1 [0175.677] wcscmp (_String1="STARTUP", _String2="..") returned 1 [0175.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23c30 [0175.677] wcscpy (in: _Dest=0x7a23c30, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0175.677] wcscat (in: _Dest=0x7a23c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0175.677] wcscat (in: _Dest=0x7a23c30, _Source="STARTUP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" [0175.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0175.678] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x16f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSCOPY.DLL", cAlternateFileName="")) returned 1 [0175.678] wcscmp (_String1="STSCOPY.DLL", _String2=".") returned 1 [0175.678] wcscmp (_String1="STSCOPY.DLL", _String2="..") returned 1 [0175.678] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102eaf00, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xf5364210, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x102eaf00, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3998, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1 [0175.678] wcscmp (_String1="STSLIST.DLL", _String2=".") returned 1 [0175.678] wcscmp (_String1="STSLIST.DLL", _String2="..") returned 1 [0175.678] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69941a00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69941a00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.DLL", cAlternateFileName="")) returned 1 [0175.678] wcscmp (_String1="STSUPLD.DLL", _String2=".") returned 1 [0175.678] wcscmp (_String1="STSUPLD.DLL", _String2="..") returned 1 [0175.678] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe9394090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x18b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="STYLEMGR.DLL", cAlternateFileName="")) returned 1 [0175.678] wcscmp (_String1="STYLEMGR.DLL", _String2=".") returned 1 [0175.678] wcscmp (_String1="STYLEMGR.DLL", _String2="..") returned 1 [0175.678] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9dc8600, ftCreationTime.dwHighDateTime=0x1cac256, ftLastAccessTime.dwLowDateTime=0x7f10e950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9dc8600, ftLastWriteTime.dwHighDateTime=0x1cac256, nFileSizeHigh=0x0, nFileSizeLow=0x15f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="subscription.xsd", cAlternateFileName="SUBSCR~1.XSD")) returned 1 [0177.339] wcscmp (_String1="subscription.xsd", _String2=".") returned 1 [0177.339] wcscmp (_String1="subscription.xsd", _String2="..") returned 1 [0177.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46518 [0177.339] wcscpy (in: _Dest=0x3e46518, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0177.339] wcscat (in: _Dest=0x3e46518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0177.339] wcscat (in: _Dest=0x3e46518, _Source="subscription.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" [0178.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0178.552] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f12e900, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe93ba1f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f12e900, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xc798, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMINFO.DLL", cAlternateFileName="")) returned 1 [0178.552] wcscmp (_String1="SUMINFO.DLL", _String2=".") returned 1 [0178.552] wcscmp (_String1="SUMINFO.DLL", _String2="..") returned 1 [0178.552] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5786bc00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5786bc00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x17d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaxonomyControl.dll", cAlternateFileName="TAXONO~1.DLL")) returned 1 [0178.552] wcscmp (_String1="TaxonomyControl.dll", _String2=".") returned 1 [0178.552] wcscmp (_String1="TaxonomyControl.dll", _String2="..") returned 1 [0178.552] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77322a00, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77322a00, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="THOCR.PSP", cAlternateFileName="")) returned 1 [0178.552] wcscmp (_String1="THOCR.PSP", _String2=".") returned 1 [0178.552] wcscmp (_String1="THOCR.PSP", _String2="..") returned 1 [0178.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f560 [0178.552] wcscpy (in: _Dest=0x3f3f560, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.552] wcscat (in: _Dest=0x3f3f560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.552] wcscat (in: _Dest=0x3f3f560, _Source="THOCR.PSP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP") returned="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" [0178.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0178.554] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3aed00, ftCreationTime.dwHighDateTime=0x1cb7065, ftLastAccessTime.dwLowDateTime=0xfaf7b530, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6c3aed00, ftLastWriteTime.dwHighDateTime=0x1cb7065, nFileSizeHigh=0x0, nFileSizeLow=0x7358, dwReserved0=0x0, dwReserved1=0x0, cFileName="THOCRAPI.DLL", cAlternateFileName="")) returned 1 [0178.554] wcscmp (_String1="THOCRAPI.DLL", _String2=".") returned 1 [0178.554] wcscmp (_String1="THOCRAPI.DLL", _String2="..") returned 1 [0178.554] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8dc6af0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xe9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.DLL", cAlternateFileName="")) returned 1 [0178.554] wcscmp (_String1="TIMESOLN.DLL", _String2=".") returned 1 [0178.554] wcscmp (_String1="TIMESOLN.DLL", _String2="..") returned 1 [0178.554] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe93ba1f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLIMPT.EXE", cAlternateFileName="")) returned 1 [0178.554] wcscmp (_String1="TLIMPT.EXE", _String2=".") returned 1 [0178.554] wcscmp (_String1="TLIMPT.EXE", _String2="..") returned 1 [0178.554] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3aed00, ftCreationTime.dwHighDateTime=0x1cb7065, ftLastAccessTime.dwLowDateTime=0xfb085ed0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6c3aed00, ftLastWriteTime.dwHighDateTime=0x1cb7065, nFileSizeHigh=0x0, nFileSizeLow=0x20b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWCUTCHR.DLL", cAlternateFileName="")) returned 1 [0178.554] wcscmp (_String1="TWCUTCHR.DLL", _String2=".") returned 1 [0178.554] wcscmp (_String1="TWCUTCHR.DLL", _String2="..") returned 1 [0178.554] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x16380, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWCUTLIN.DLL", cAlternateFileName="")) returned 1 [0178.554] wcscmp (_String1="TWCUTLIN.DLL", _String2=".") returned 1 [0178.554] wcscmp (_String1="TWCUTLIN.DLL", _String2="..") returned 1 [0178.554] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0xe978, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWLAY32.DLL", cAlternateFileName="")) returned 1 [0178.554] wcscmp (_String1="TWLAY32.DLL", _String2=".") returned 1 [0178.554] wcscmp (_String1="TWLAY32.DLL", _String2="..") returned 1 [0178.554] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWORIENT.DLL", cAlternateFileName="")) returned 1 [0178.554] wcscmp (_String1="TWORIENT.DLL", _String2=".") returned 1 [0178.554] wcscmp (_String1="TWORIENT.DLL", _String2="..") returned 1 [0178.554] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x8780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECC.DLL", cAlternateFileName="")) returned 1 [0178.555] wcscmp (_String1="TWRECC.DLL", _String2=".") returned 1 [0178.555] wcscmp (_String1="TWRECC.DLL", _String2="..") returned 1 [0178.555] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0xd180, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECE.DLL", cAlternateFileName="")) returned 1 [0178.555] wcscmp (_String1="TWRECE.DLL", _String2=".") returned 1 [0178.555] wcscmp (_String1="TWRECE.DLL", _String2="..") returned 1 [0178.555] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWRECS.DLL", cAlternateFileName="")) returned 1 [0178.555] wcscmp (_String1="TWRECS.DLL", _String2=".") returned 1 [0178.555] wcscmp (_String1="TWRECS.DLL", _String2="..") returned 1 [0178.555] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x13b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="TWSTRUCT.DLL", cAlternateFileName="")) returned 1 [0178.555] wcscmp (_String1="TWSTRUCT.DLL", _String2=".") returned 1 [0178.555] wcscmp (_String1="TWSTRUCT.DLL", _String2="..") returned 1 [0178.555] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe8decc50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x193f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="UML.DLL", cAlternateFileName="")) returned 1 [0178.555] wcscmp (_String1="UML.DLL", _String2=".") returned 1 [0178.555] wcscmp (_String1="UML.DLL", _String2="..") returned 1 [0178.555] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfbc0950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x78f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSYS.DLL", cAlternateFileName="")) returned 1 [0178.555] wcscmp (_String1="UMLSYS.DLL", _String2=".") returned 1 [0178.555] wcscmp (_String1="UMLSYS.DLL", _String2="..") returned 1 [0178.555] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd0d100, ftCreationTime.dwHighDateTime=0x1cb7188, ftLastAccessTime.dwLowDateTime=0xe93e0350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cd0d100, ftLastWriteTime.dwHighDateTime=0x1cb7188, nFileSizeHigh=0x0, nFileSizeLow=0x22568, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVB.DLL", cAlternateFileName="")) returned 1 [0178.555] wcscmp (_String1="UMLVB.DLL", _String2=".") returned 1 [0178.555] wcscmp (_String1="UMLVB.DLL", _String2="..") returned 1 [0178.555] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xbfccb2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x22768, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVC60.DLL", cAlternateFileName="")) returned 1 [0178.555] wcscmp (_String1="UMLVC60.DLL", _String2=".") returned 1 [0178.555] wcscmp (_String1="UMLVC60.DLL", _String2="..") returned 1 [0178.555] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd0d100, ftCreationTime.dwHighDateTime=0x1cb7188, ftLastAccessTime.dwLowDateTime=0xe93e0350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cd0d100, ftLastWriteTime.dwHighDateTime=0x1cb7188, nFileSizeHigh=0x0, nFileSizeLow=0x3c378, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVS.DLL", cAlternateFileName="")) returned 1 [0178.556] wcscmp (_String1="UMLVS.DLL", _String2=".") returned 1 [0178.556] wcscmp (_String1="UMLVS.DLL", _String2="..") returned 1 [0178.556] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e40500, ftCreationTime.dwHighDateTime=0x1cba0bb, ftLastAccessTime.dwLowDateTime=0xf8c5f0b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xe7e40500, ftLastWriteTime.dwHighDateTime=0x1cba0bb, nFileSizeHigh=0x0, nFileSizeLow=0x89190, dwReserved0=0x0, dwReserved1=0x0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1 [0178.556] wcscmp (_String1="URLREDIR.DLL", _String2=".") returned 1 [0178.556] wcscmp (_String1="URLREDIR.DLL", _String2="..") returned 1 [0178.556] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe93e0350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x17b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VAOSOLX.DLL", cAlternateFileName="")) returned 1 [0178.556] wcscmp (_String1="VAOSOLX.DLL", _String2=".") returned 1 [0178.556] wcscmp (_String1="VAOSOLX.DLL", _String2="..") returned 1 [0178.556] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x1b5d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0007.TLL", cAlternateFileName="")) returned 1 [0178.556] wcscmp (_String1="VBLZ0007.TLL", _String2=".") returned 1 [0178.556] wcscmp (_String1="VBLZ0007.TLL", _String2="..") returned 1 [0178.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f740 [0178.556] wcscpy (in: _Dest=0x3f3f740, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.556] wcscat (in: _Dest=0x3f3f740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.556] wcscat (in: _Dest=0x3f3f740, _Source="VBLZ0007.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" [0178.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0178.558] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x18fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0009.TLL", cAlternateFileName="")) returned 1 [0178.558] wcscmp (_String1="VBLZ0009.TLL", _String2=".") returned 1 [0178.558] wcscmp (_String1="VBLZ0009.TLL", _String2="..") returned 1 [0178.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0178.558] wcscpy (in: _Dest=0x3f3f650, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.558] wcscat (in: _Dest=0x3f3f650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.558] wcscat (in: _Dest=0x3f3f650, _Source="VBLZ0009.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" [0178.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0178.560] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x203d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ000C.TLL", cAlternateFileName="")) returned 1 [0178.560] wcscmp (_String1="VBLZ000C.TLL", _String2=".") returned 1 [0178.560] wcscmp (_String1="VBLZ000C.TLL", _String2="..") returned 1 [0178.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0178.560] wcscpy (in: _Dest=0x3f3fc68, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.560] wcscat (in: _Dest=0x3f3fc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.560] wcscat (in: _Dest=0x3f3fc68, _Source="VBLZ000C.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" [0178.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0178.561] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x17be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLZ0011.TLL", cAlternateFileName="")) returned 1 [0178.561] wcscmp (_String1="VBLZ0011.TLL", _String2=".") returned 1 [0178.561] wcscmp (_String1="VBLZ0011.TLL", _String2="..") returned 1 [0178.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0178.562] wcscpy (in: _Dest=0x3f3f3f8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.562] wcscat (in: _Dest=0x3f3f3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.562] wcscat (in: _Dest=0x3f3f3f8, _Source="VBLZ0011.TLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" [0178.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0178.563] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3623e600, ftCreationTime.dwHighDateTime=0x1c444dd, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3623e600, ftLastWriteTime.dwHighDateTime=0x1c444dd, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBS2EXCL.XSL", cAlternateFileName="")) returned 1 [0178.563] wcscmp (_String1="VBS2EXCL.XSL", _String2=".") returned 1 [0178.563] wcscmp (_String1="VBS2EXCL.XSL", _String2="..") returned 1 [0178.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0178.563] wcscpy (in: _Dest=0x3f3f290, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.563] wcscat (in: _Dest=0x3f3f290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.563] wcscat (in: _Dest=0x3f3f290, _Source="VBS2EXCL.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" [0178.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec [0178.565] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3623e600, ftCreationTime.dwHighDateTime=0x1c444dd, ftLastAccessTime.dwLowDateTime=0xbfe6e210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3623e600, ftLastWriteTime.dwHighDateTime=0x1c444dd, nFileSizeHigh=0x0, nFileSizeLow=0x189d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBS2WORD.XSL", cAlternateFileName="")) returned 1 [0178.565] wcscmp (_String1="VBS2WORD.XSL", _String2=".") returned 1 [0178.565] wcscmp (_String1="VBS2WORD.XSL", _String2="..") returned 1 [0178.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f830 [0178.565] wcscpy (in: _Dest=0x3f3f830, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.565] wcscat (in: _Dest=0x3f3f830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.565] wcscat (in: _Dest=0x3f3f830, _Source="VBS2WORD.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" [0178.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0178.567] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a67000, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe94064b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x82a67000, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x1d980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VERBWIND.DLL", cAlternateFileName="")) returned 1 [0178.567] wcscmp (_String1="VERBWIND.DLL", _String2=".") returned 1 [0178.567] wcscmp (_String1="VERBWIND.DLL", _String2="..") returned 1 [0178.567] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80441600, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe94064b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80441600, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x17558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWMODL.DLL", cAlternateFileName="")) returned 1 [0178.567] wcscmp (_String1="VIEWMODL.DLL", _String2=".") returned 1 [0178.567] wcscmp (_String1="VIEWMODL.DLL", _String2="..") returned 1 [0178.567] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c7c500, ftCreationTime.dwHighDateTime=0x1cbb8ec, ftLastAccessTime.dwLowDateTime=0xe8ed1490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87c7c500, ftLastWriteTime.dwHighDateTime=0x1cbb8ec, nFileSizeHigh=0x0, nFileSizeLow=0x992d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRGR.DLL", cAlternateFileName="")) returned 1 [0178.567] wcscmp (_String1="VISBRGR.DLL", _String2=".") returned 1 [0178.567] wcscmp (_String1="VISBRGR.DLL", _String2="..") returned 1 [0178.567] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a524a00, ftCreationTime.dwHighDateTime=0x1cb722b, ftLastAccessTime.dwLowDateTime=0xe8ed1490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a524a00, ftLastWriteTime.dwHighDateTime=0x1cb722b, nFileSizeHigh=0x0, nFileSizeLow=0x36970, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.DLL", cAlternateFileName="")) returned 1 [0178.567] wcscmp (_String1="VISCOLOR.DLL", _String2=".") returned 1 [0178.567] wcscmp (_String1="VISCOLOR.DLL", _String2="..") returned 1 [0178.567] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49671f00, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xe8ef75f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49671f00, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x21f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISDLGU.DLL", cAlternateFileName="")) returned 1 [0178.567] wcscmp (_String1="VISDLGU.DLL", _String2=".") returned 1 [0178.567] wcscmp (_String1="VISDLGU.DLL", _String2="..") returned 1 [0178.567] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4a3000, ftCreationTime.dwHighDateTime=0x1cba63a, ftLastAccessTime.dwLowDateTime=0xe8ef75f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c4a3000, ftLastWriteTime.dwHighDateTime=0x1cba63a, nFileSizeHigh=0x0, nFileSizeLow=0x88f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISGRF.DLL", cAlternateFileName="")) returned 1 [0178.567] wcscmp (_String1="VISGRF.DLL", _String2=".") returned 1 [0178.567] wcscmp (_String1="VISGRF.DLL", _String2="..") returned 1 [0178.567] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dde200, ftCreationTime.dwHighDateTime=0x1cb706c, ftLastAccessTime.dwLowDateTime=0xe8f1d750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77dde200, ftLastWriteTime.dwHighDateTime=0x1cb706c, nFileSizeHigh=0x0, nFileSizeLow=0x11bd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISICON.EXE", cAlternateFileName="")) returned 1 [0178.568] wcscmp (_String1="VISICON.EXE", _String2=".") returned 1 [0178.568] wcscmp (_String1="VISICON.EXE", _String2="..") returned 1 [0178.568] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa4492e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4492e50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Content", cAlternateFileName="VISIOC~1")) returned 1 [0178.568] wcscmp (_String1="Visio Content", _String2=".") returned 1 [0178.568] wcscmp (_String1="Visio Content", _String2="..") returned 1 [0178.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19098 [0178.568] wcscpy (in: _Dest=0x3e19098, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.568] wcscat (in: _Dest=0x3e19098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.568] wcscat (in: _Dest=0x3e19098, _Source="Visio Content" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" [0178.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e19098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0178.570] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e778600, ftCreationTime.dwHighDateTime=0x1cbd92c, ftLastAccessTime.dwLowDateTime=0xe8f438b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e778600, ftLastWriteTime.dwHighDateTime=0x1cbd92c, nFileSizeHigh=0x0, nFileSizeLow=0x169f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.EXE", cAlternateFileName="")) returned 1 [0178.570] wcscmp (_String1="VISIO.EXE", _String2=".") returned 1 [0178.570] wcscmp (_String1="VISIO.EXE", _String2="..") returned 1 [0178.570] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5180100, ftCreationTime.dwHighDateTime=0x1cac24d, ftLastAccessTime.dwLowDateTime=0xbffeafd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5180100, ftLastWriteTime.dwHighDateTime=0x1cac24d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.exe.manifest", cAlternateFileName="VISIOE~1.MAN")) returned 1 [0178.570] wcscmp (_String1="visio.exe.manifest", _String2=".") returned 1 [0178.570] wcscmp (_String1="visio.exe.manifest", _String2="..") returned 1 [0178.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1bdd8 [0178.570] wcscpy (in: _Dest=0x3e1bdd8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.570] wcscat (in: _Dest=0x3e1bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.570] wcscat (in: _Dest=0x3e1bdd8, _Source="visio.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" [0178.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0178.572] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478e4300, ftCreationTime.dwHighDateTime=0x1c9abac, ftLastAccessTime.dwLowDateTime=0xbffeafd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x478e4300, ftLastWriteTime.dwHighDateTime=0x1c9abac, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioCustom.propdesc", cAlternateFileName="VISIOC~1.PRO")) returned 1 [0178.572] wcscmp (_String1="VisioCustom.propdesc", _String2=".") returned 1 [0178.572] wcscmp (_String1="VisioCustom.propdesc", _String2="..") returned 1 [0178.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099cf0 [0178.572] wcscpy (in: _Dest=0x3099cf0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.572] wcscat (in: _Dest=0x3099cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.572] wcscat (in: _Dest=0x3099cf0, _Source="VisioCustom.propdesc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc") returned="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" [0178.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3099cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0178.573] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e778600, ftCreationTime.dwHighDateTime=0x1cbd92c, ftLastAccessTime.dwLowDateTime=0xe904e250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e778600, ftLastWriteTime.dwHighDateTime=0x1cbd92c, nFileSizeHigh=0x0, nFileSizeLow=0xcfb368, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISLIB.DLL", cAlternateFileName="")) returned 1 [0178.574] wcscmp (_String1="VISLIB.DLL", _String2=".") returned 1 [0178.574] wcscmp (_String1="VISLIB.DLL", _String2="..") returned 1 [0178.574] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ba8200, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0xc0226470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x74ba8200, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0x62b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISOCX.DLL", cAlternateFileName="")) returned 1 [0178.574] wcscmp (_String1="VISOCX.DLL", _String2=".") returned 1 [0178.574] wcscmp (_String1="VISOCX.DLL", _String2="..") returned 1 [0178.574] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ba8200, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0x8520e9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74ba8200, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0xdbd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISSHE.DLL", cAlternateFileName="")) returned 1 [0178.574] wcscmp (_String1="VISSHE.DLL", _String2=".") returned 1 [0178.574] wcscmp (_String1="VISSHE.DLL", _String2="..") returned 1 [0178.574] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f5fa00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90743b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71f5fa00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x83b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISSUPP.DLL", cAlternateFileName="")) returned 1 [0178.574] wcscmp (_String1="VISSUPP.DLL", _String2=".") returned 1 [0178.574] wcscmp (_String1="VISSUPP.DLL", _String2="..") returned 1 [0178.574] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe90743b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x6db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUTILS.DLL", cAlternateFileName="")) returned 1 [0178.574] wcscmp (_String1="VISUTILS.DLL", _String2=".") returned 1 [0178.574] wcscmp (_String1="VISUTILS.DLL", _String2="..") returned 1 [0178.574] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81754300, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe909a510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81754300, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0xaab88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISWEB.DLL", cAlternateFileName="")) returned 1 [0178.574] wcscmp (_String1="VISWEB.DLL", _String2=".") returned 1 [0178.574] wcscmp (_String1="VISWEB.DLL", _String2="..") returned 1 [0178.574] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xc0272730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x14180, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISXDATA.DLL", cAlternateFileName="")) returned 1 [0178.574] wcscmp (_String1="VISXDATA.DLL", _String2=".") returned 1 [0178.574] wcscmp (_String1="VISXDATA.DLL", _String2="..") returned 1 [0178.574] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x9227d030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x8d980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VPREVIEW.EXE", cAlternateFileName="")) returned 1 [0178.574] wcscmp (_String1="VPREVIEW.EXE", _String2=".") returned 1 [0178.575] wcscmp (_String1="VPREVIEW.EXE", _String2="..") returned 1 [0178.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x582978, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWDWG.DLL", cAlternateFileName="")) returned 1 [0178.575] wcscmp (_String1="VVIEWDWG.DLL", _String2=".") returned 1 [0178.575] wcscmp (_String1="VVIEWDWG.DLL", _String2="..") returned 1 [0178.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad7e00, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbbad7e00, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x3fc368, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 1 [0178.575] wcscmp (_String1="VVIEWER.DLL", _String2=".") returned 1 [0178.575] wcscmp (_String1="VVIEWER.DLL", _String2="..") returned 1 [0178.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x952ee00, ftCreationTime.dwHighDateTime=0x1cbe026, ftLastAccessTime.dwLowDateTime=0xfadb24b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x952ee00, ftLastWriteTime.dwHighDateTime=0x1cbe026, nFileSizeHigh=0x0, nFileSizeLow=0xd3b960, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE", cAlternateFileName="")) returned 1 [0178.575] wcscmp (_String1="WINPROJ.EXE", _String2=".") returned 1 [0178.575] wcscmp (_String1="WINPROJ.EXE", _String2="..") returned 1 [0178.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7665000, ftCreationTime.dwHighDateTime=0x1caba0c, ftLastAccessTime.dwLowDateTime=0xb809cbf0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7665000, ftLastWriteTime.dwHighDateTime=0x1caba0c, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="winproj.exe.manifest", cAlternateFileName="WINPRO~1.MAN")) returned 1 [0178.575] wcscmp (_String1="winproj.exe.manifest", _String2=".") returned 1 [0178.575] wcscmp (_String1="winproj.exe.manifest", _String2="..") returned 1 [0178.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a5f8 [0178.575] wcscpy (in: _Dest=0x309a5f8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.575] wcscat (in: _Dest=0x309a5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.575] wcscat (in: _Dest=0x309a5f8, _Source="winproj.exe.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest") returned="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" [0178.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x309a5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0178.577] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d1200, ftCreationTime.dwHighDateTime=0x1cacd99, ftLastAccessTime.dwLowDateTime=0x8533f4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6d1200, ftLastWriteTime.dwHighDateTime=0x1cacd99, nFileSizeHigh=0x0, nFileSizeLow=0x15b358, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.EXE", cAlternateFileName="")) returned 1 [0178.577] wcscmp (_String1="WINWORD.EXE", _String2=".") returned 1 [0178.577] wcscmp (_String1="WINWORD.EXE", _String2="..") returned 1 [0178.577] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce1b00, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0ce1b00, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x535158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordcnv.dll", cAlternateFileName="")) returned 1 [0178.578] wcscmp (_String1="Wordcnv.dll", _String2=".") returned 1 [0178.578] wcscmp (_String1="Wordcnv.dll", _String2="..") returned 1 [0178.578] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3307500, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3307500, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x5f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordcnvpxy.cnv", cAlternateFileName="WORDCN~1.CNV")) returned 1 [0178.578] wcscmp (_String1="Wordcnvpxy.cnv", _String2=".") returned 1 [0178.578] wcscmp (_String1="Wordcnvpxy.cnv", _String2="..") returned 1 [0178.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a718 [0178.578] wcscpy (in: _Dest=0x3e1a718, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.578] wcscat (in: _Dest=0x3e1a718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.578] wcscat (in: _Dest=0x3e1a718, _Source="Wordcnvpxy.cnv" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv") returned="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" [0178.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0178.579] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3307500, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3307500, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x62f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordcnvr.dll", cAlternateFileName="")) returned 1 [0178.579] wcscmp (_String1="Wordcnvr.dll", _String2=".") returned 1 [0178.579] wcscmp (_String1="Wordcnvr.dll", _String2="..") returned 1 [0178.579] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce1b00, ftCreationTime.dwHighDateTime=0x1cacd9a, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0ce1b00, ftLastWriteTime.dwHighDateTime=0x1cacd9a, nFileSizeHigh=0x0, nFileSizeLow=0x5360, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordconv.exe", cAlternateFileName="")) returned 1 [0178.579] wcscmp (_String1="Wordconv.exe", _String2=".") returned 1 [0178.579] wcscmp (_String1="Wordconv.exe", _String2="..") returned 1 [0178.580] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a619c00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x9241ff50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a619c00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDICON.EXE", cAlternateFileName="")) returned 1 [0178.580] wcscmp (_String1="WORDICON.EXE", _String2=".") returned 1 [0178.580] wcscmp (_String1="WORDICON.EXE", _String2="..") returned 1 [0178.580] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x1373c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDIRM.XML", cAlternateFileName="")) returned 1 [0178.580] wcscmp (_String1="WORDIRM.XML", _String2=".") returned 1 [0178.580] wcscmp (_String1="WORDIRM.XML", _String2="..") returned 1 [0178.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f4e8 [0178.580] wcscpy (in: _Dest=0x3f3f4e8, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.580] wcscat (in: _Dest=0x3f3f4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.580] wcscat (in: _Dest=0x3f3f4e8, _Source="WORDIRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" [0178.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0178.581] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x9241ff50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13584, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDIRMV.XML", cAlternateFileName="")) returned 1 [0178.581] wcscmp (_String1="WORDIRMV.XML", _String2=".") returned 1 [0178.582] wcscmp (_String1="WORDIRMV.XML", _String2="..") returned 1 [0178.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fdd0 [0178.582] wcscpy (in: _Dest=0x3f3fdd0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.582] wcscat (in: _Dest=0x3f3fdd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.582] wcscat (in: _Dest=0x3f3fdd0, _Source="WORDIRMV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" [0178.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fdd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0178.583] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c4cd00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe942c610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70c4cd00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x5d178, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORKFLOW.DLL", cAlternateFileName="")) returned 1 [0178.583] wcscmp (_String1="WORKFLOW.DLL", _String2=".") returned 1 [0178.583] wcscmp (_String1="WORKFLOW.DLL", _String2="..") returned 1 [0178.583] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d1200, ftCreationTime.dwHighDateTime=0x1cacd99, ftLastAccessTime.dwLowDateTime=0x85508550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6d1200, ftLastWriteTime.dwHighDateTime=0x1cacd99, nFileSizeHigh=0x0, nFileSizeLow=0x1279358, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWLIB.DLL", cAlternateFileName="")) returned 1 [0178.584] wcscmp (_String1="WWLIB.DLL", _String2=".") returned 1 [0178.584] wcscmp (_String1="WWLIB.DLL", _String2="..") returned 1 [0178.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de1bc00, ftCreationTime.dwHighDateTime=0x1cb7088, ftLastAccessTime.dwLowDateTime=0xe909a510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7de1bc00, ftLastWriteTime.dwHighDateTime=0x1cb7088, nFileSizeHigh=0x0, nFileSizeLow=0x6eb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC.DLL", cAlternateFileName="")) returned 1 [0178.584] wcscmp (_String1="XFUNC.DLL", _String2=".") returned 1 [0178.584] wcscmp (_String1="XFUNC.DLL", _String2="..") returned 1 [0178.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c1e00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x924de630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a9c1e00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0xc0998, dwReserved0=0x0, dwReserved1=0x0, cFileName="XIMAGE3B.DLL", cAlternateFileName="")) returned 1 [0178.584] wcscmp (_String1="XIMAGE3B.DLL", _String2=".") returned 1 [0178.584] wcscmp (_String1="XIMAGE3B.DLL", _String2="..") returned 1 [0178.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d5300, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x738d5300, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x2578, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLCALL32.DLL", cAlternateFileName="")) returned 1 [0178.584] wcscmp (_String1="XLCALL32.DLL", _String2=".") returned 1 [0178.584] wcscmp (_String1="XLCALL32.DLL", _String2="..") returned 1 [0178.584] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e20d00, ftCreationTime.dwHighDateTime=0x1c6e447, ftLastAccessTime.dwLowDateTime=0x85508550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e20d00, ftLastWriteTime.dwHighDateTime=0x1c6e447, nFileSizeHigh=0x0, nFileSizeLow=0x13784, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLCPRTID.XML", cAlternateFileName="")) returned 1 [0178.584] wcscmp (_String1="XLCPRTID.XML", _String2=".") returned 1 [0178.584] wcscmp (_String1="XLCPRTID.XML", _String2="..") returned 1 [0178.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0178.584] wcscpy (in: _Dest=0x3f3fa10, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.584] wcscat (in: _Dest=0x3f3fa10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.584] wcscat (in: _Dest=0x3f3fa10, _Source="XLCPRTID.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" [0178.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fa10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0178.586] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60577d00, ftCreationTime.dwHighDateTime=0x1cacba1, ftLastAccessTime.dwLowDateTime=0x8552e6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60577d00, ftLastWriteTime.dwHighDateTime=0x1cacba1, nFileSizeHigh=0x0, nFileSizeLow=0x169360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLICONS.EXE", cAlternateFileName="")) returned 1 [0178.586] wcscmp (_String1="XLICONS.EXE", _String2=".") returned 1 [0178.586] wcscmp (_String1="XLICONS.EXE", _String2="..") returned 1 [0178.586] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0178.586] wcscmp (_String1="XLSTART", _String2=".") returned 1 [0178.586] wcscmp (_String1="XLSTART", _String2="..") returned 1 [0178.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23290 [0178.586] wcscpy (in: _Dest=0x7a23290, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.586] wcscat (in: _Dest=0x7a23290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.586] wcscat (in: _Dest=0x7a23290, _Source="XLSTART" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" [0178.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0178.587] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5204dc00, ftCreationTime.dwHighDateTime=0x1c43cd4, ftLastAccessTime.dwLowDateTime=0x8552e6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5204dc00, ftLastWriteTime.dwHighDateTime=0x1c43cd4, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 1 [0178.588] wcscmp (_String1="XML2WORD.XSL", _String2=".") returned 1 [0178.588] wcscmp (_String1="XML2WORD.XSL", _String2="..") returned 1 [0178.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f0b0 [0178.588] wcscpy (in: _Dest=0x3f3f0b0, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.588] wcscat (in: _Dest=0x3f3f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.588] wcscat (in: _Dest=0x3f3f0b0, _Source="XML2WORD.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" [0178.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0178.728] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ecbf00, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81ecbf00, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x14e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="XOCR3.PSP", cAlternateFileName="")) returned 1 [0178.728] wcscmp (_String1="XOCR3.PSP", _String2=".") returned 1 [0178.728] wcscmp (_String1="XOCR3.PSP", _String2="..") returned 1 [0178.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f290 [0178.728] wcscpy (in: _Dest=0x3f3f290, _Source="C:\\Program Files\\Microsoft Office\\Office14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14") returned="C:\\Program Files\\Microsoft Office\\Office14" [0178.729] wcscat (in: _Dest=0x3f3f290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\" [0178.729] wcscat (in: _Dest=0x3f3f290, _Source="XOCR3.PSP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP") returned="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" [0178.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0178.730] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x41390, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPAGE3C.DLL", cAlternateFileName="")) returned 1 [0178.730] wcscmp (_String1="XPAGE3C.DLL", _String2=".") returned 1 [0178.730] wcscmp (_String1="XPAGE3C.DLL", _String2="..") returned 1 [0178.730] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd4b00, ftCreationTime.dwHighDateTime=0x1ca9186, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bcd4b00, ftLastWriteTime.dwHighDateTime=0x1ca9186, nFileSizeHigh=0x0, nFileSizeLow=0x41390, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPAGE3C.DLL", cAlternateFileName="")) returned 0 [0180.018] FindClose (in: hFindFile=0x3dcf5d0 | out: hFindFile=0x3dcf5d0) returned 1 [0181.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2e28) returned 1 [0181.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf950) returned 1 [0181.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 Thread: id = 179 os_tid = 0xb0c [0121.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edff00 [0121.065] wcscpy (in: _Dest=0x3edff00, _Source="C:\\Program Files\\Microsoft Office\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery" [0121.066] wcscat (in: _Dest=0x3edff00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\" [0121.066] wcscat (in: _Dest=0x3edff00, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\*") returned="C:\\Program Files\\Microsoft Office\\Stationery\\*" [0121.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0121.066] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48bf5530, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067340 [0121.404] wcscmp (_String1=".", _String2=".") returned 0 [0121.405] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48bf5530, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.405] wcscmp (_String1="..", _String2=".") returned 1 [0121.405] wcscmp (_String1="..", _String2="..") returned 0 [0121.405] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0121.405] wcscmp (_String1="1033", _String2=".") returned 1 [0121.405] wcscmp (_String1="1033", _String2="..") returned 1 [0121.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69b48 [0121.405] wcscpy (in: _Dest=0x3e69b48, _Source="C:\\Program Files\\Microsoft Office\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Stationery" [0121.405] wcscat (in: _Dest=0x3e69b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\" [0121.405] wcscat (in: _Dest=0x3e69b48, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0122.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0122.727] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0122.728] FindClose (in: hFindFile=0x3067340 | out: hFindFile=0x3067340) returned 1 [0122.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0122.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edff00) returned 1 [0122.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf2d0) returned 1 Thread: id = 180 os_tid = 0xb14 [0121.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf7b0 [0121.069] wcscpy (in: _Dest=0x3edf7b0, _Source="C:\\Program Files\\Microsoft Office\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0121.069] wcscat (in: _Dest=0x3edf7b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\" [0121.069] wcscat (in: _Dest=0x3edf7b0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\*" [0121.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0121.069] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0121.406] wcscmp (_String1=".", _String2=".") returned 0 [0121.406] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.406] wcscmp (_String1="..", _String2=".") returned 1 [0121.406] wcscmp (_String1="..", _String2="..") returned 0 [0121.406] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x997722f0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0121.406] wcscmp (_String1="1033", _String2=".") returned 1 [0121.406] wcscmp (_String1="1033", _String2="..") returned 1 [0121.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69d08 [0121.406] wcscpy (in: _Dest=0x3e69d08, _Source="C:\\Program Files\\Microsoft Office\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0121.406] wcscat (in: _Dest=0x3e69d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\" [0121.406] wcscat (in: _Dest=0x3e69d08, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0121.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c8 [0121.795] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1 [0121.795] wcscmp (_String1="Presentation Designs", _String2=".") returned 1 [0121.795] wcscmp (_String1="Presentation Designs", _String2="..") returned 1 [0121.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2648 [0121.795] wcscpy (in: _Dest=0x3df2648, _Source="C:\\Program Files\\Microsoft Office\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates") returned="C:\\Program Files\\Microsoft Office\\Templates" [0121.795] wcscat (in: _Dest=0x3df2648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\" [0121.795] wcscat (in: _Dest=0x3df2648, _Source="Presentation Designs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" [0121.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df2648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0121.796] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0 [0121.797] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0121.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0121.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf7b0) returned 1 [0121.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe2c48) returned 1 Thread: id = 181 os_tid = 0xb28 [0121.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ced8 [0121.070] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" [0121.070] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\" [0121.070] wcscat (in: _Dest=0x3e1ced8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*" [0121.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3560 [0121.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067300 [0121.407] wcscmp (_String1=".", _String2=".") returned 0 [0121.407] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.407] wcscmp (_String1="..", _String2=".") returned 1 [0121.407] wcscmp (_String1="..", _String2="..") returned 0 [0121.407] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0121.407] wcscmp (_String1="Desktop", _String2=".") returned 1 [0121.407] wcscmp (_String1="Desktop", _String2="..") returned 1 [0121.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df30f8 [0121.407] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5" [0121.407] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\" [0121.407] wcscat (in: _Dest=0x3df30f8, _Source="Desktop" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" [0122.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df30f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0122.730] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfdedb00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfdedb00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceca35.dll", cAlternateFileName="SQLCEC~1.DLL")) returned 1 [0122.730] wcscmp (_String1="sqlceca35.dll", _String2=".") returned 1 [0122.730] wcscmp (_String1="sqlceca35.dll", _String2="..") returned 1 [0122.730] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcecompact35.dll", cAlternateFileName="SQLCEC~2.DLL")) returned 1 [0122.730] wcscmp (_String1="sqlcecompact35.dll", _String2=".") returned 1 [0122.730] wcscmp (_String1="sqlcecompact35.dll", _String2="..") returned 1 [0122.730] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x24240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceer35EN.dll", cAlternateFileName="SQLCEE~1.DLL")) returned 1 [0122.730] wcscmp (_String1="sqlceer35EN.dll", _String2=".") returned 1 [0122.730] wcscmp (_String1="sqlceer35EN.dll", _String2="..") returned 1 [0122.730] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0xfe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceme35.dll", cAlternateFileName="SQLCEM~1.DLL")) returned 1 [0122.730] wcscmp (_String1="sqlceme35.dll", _String2=".") returned 1 [0122.730] wcscmp (_String1="sqlceme35.dll", _String2="..") returned 1 [0122.730] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfdedb00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfdedb00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceoledb35.dll", cAlternateFileName="SQLCEO~1.DLL")) returned 1 [0122.730] wcscmp (_String1="sqlceoledb35.dll", _String2=".") returned 1 [0122.731] wcscmp (_String1="sqlceoledb35.dll", _String2="..") returned 1 [0122.731] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x9d440, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceqp35.dll", cAlternateFileName="SQLCEQ~1.DLL")) returned 1 [0122.731] wcscmp (_String1="sqlceqp35.dll", _String2=".") returned 1 [0122.731] wcscmp (_String1="sqlceqp35.dll", _String2="..") returned 1 [0122.731] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x55040, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="SQLCES~1.DLL")) returned 1 [0122.731] wcscmp (_String1="sqlcese35.dll", _String2=".") returned 1 [0122.731] wcscmp (_String1="sqlcese35.dll", _String2="..") returned 1 [0122.731] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeadae00, ftCreationTime.dwHighDateTime=0x1c8d6e4, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbeadae00, ftLastWriteTime.dwHighDateTime=0x1c8d6e4, nFileSizeHigh=0x0, nFileSizeLow=0x55040, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="SQLCES~1.DLL")) returned 0 [0122.731] FindClose (in: hFindFile=0x3067300 | out: hFindFile=0x3067300) returned 1 [0122.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3560) returned 1 [0122.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 [0122.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4af0) returned 1 Thread: id = 182 os_tid = 0xb24 [0121.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69b48 [0121.074] wcscpy (in: _Dest=0x3e69b48, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0121.074] wcscat (in: _Dest=0x3e69b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\" [0121.074] wcscat (in: _Dest=0x3e69b48, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*" [0121.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef37c8 [0121.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf9d0 [0121.075] wcscmp (_String1=".", _String2=".") returned 0 [0121.075] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.075] wcscmp (_String1="..", _String2=".") returned 1 [0121.075] wcscmp (_String1="..", _String2="..") returned 0 [0121.075] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documentation", cAlternateFileName="DOCUME~1")) returned 1 [0121.075] wcscmp (_String1="Documentation", _String2=".") returned 1 [0121.075] wcscmp (_String1="Documentation", _String2="..") returned 1 [0121.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1cd40 [0121.075] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0121.075] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\" [0121.075] wcscat (in: _Dest=0x3e1cd40, _Source="Documentation" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" [0121.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1cd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0121.283] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 1 [0121.283] wcscmp (_String1="Runtime", _String2=".") returned 1 [0121.283] wcscmp (_String1="Runtime", _String2="..") returned 1 [0121.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e3b018 [0121.283] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0" [0121.283] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\" [0121.283] wcscat (in: _Dest=0x3e3b018, _Source="Runtime" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" [0121.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3b018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0121.285] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 0 [0121.285] FindClose (in: hFindFile=0x3dcf9d0 | out: hFindFile=0x3dcf9d0) returned 1 [0121.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0121.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b48) returned 1 [0121.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf268) returned 1 Thread: id = 183 os_tid = 0xb20 [0121.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ca10 [0121.076] wcscpy (in: _Dest=0x3e1ca10, _Source="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" [0121.076] wcscat (in: _Dest=0x3e1ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\" [0121.076] wcscat (in: _Dest=0x3e1ca10, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*" [0121.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0121.076] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c947b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf590 [0121.077] wcscmp (_String1=".", _String2=".") returned 0 [0121.077] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c947b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.077] wcscmp (_String1="..", _String2=".") returned 1 [0121.077] wcscmp (_String1="..", _String2="..") returned 0 [0121.077] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0121.077] wcscmp (_String1="v1.0", _String2=".") returned 1 [0121.077] wcscmp (_String1="v1.0", _String2="..") returned 1 [0121.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2d08 [0121.077] wcscpy (in: _Dest=0x3df2d08, _Source="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET" [0121.077] wcscat (in: _Dest=0x3df2d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\" [0121.078] wcscat (in: _Dest=0x3df2d08, _Source="v1.0" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" [0122.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df2d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0122.661] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0 [0122.661] FindClose (in: hFindFile=0x3dcf590 | out: hFindFile=0x3dcf590) returned 1 [0122.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0122.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ca10) returned 1 [0122.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 Thread: id = 184 os_tid = 0xb48 [0121.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51458 [0121.078] wcscpy (in: _Dest=0x3d51458, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0121.078] wcscat (in: _Dest=0x3d51458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\" [0121.078] wcscat (in: _Dest=0x3d51458, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\*" [0121.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3c98 [0121.078] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0121.656] wcscmp (_String1=".", _String2=".") returned 0 [0121.656] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.656] wcscmp (_String1="..", _String2=".") returned 1 [0121.656] wcscmp (_String1="..", _String2="..") returned 0 [0121.656] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7788cf90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDE", cAlternateFileName="")) returned 1 [0121.657] wcscmp (_String1="IDE", _String2=".") returned 1 [0121.657] wcscmp (_String1="IDE", _String2="..") returned 1 [0121.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d517a0 [0121.657] wcscpy (in: _Dest=0x3d517a0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0121.657] wcscat (in: _Dest=0x3d517a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\" [0121.657] wcscat (in: _Dest=0x3d517a0, _Source="IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0121.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d517a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0121.835] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0121.835] wcscmp (_String1="Packages", _String2=".") returned 1 [0121.835] wcscmp (_String1="Packages", _String2="..") returned 1 [0121.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da4c70 [0121.836] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7" [0121.836] wcscat (in: _Dest=0x3da4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\" [0121.836] wcscat (in: _Dest=0x3da4c70, _Source="Packages" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" [0121.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0121.837] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0121.837] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0121.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c98) returned 1 [0121.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0121.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ad8) returned 1 Thread: id = 185 os_tid = 0x710 [0121.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69bb8 [0121.080] wcscpy (in: _Dest=0x3e69bb8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\SDK" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK" [0121.081] wcscat (in: _Dest=0x3e69bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\" [0121.081] wcscat (in: _Dest=0x3e69bb8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\*" [0121.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3f00 [0121.081] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0121.408] wcscmp (_String1=".", _String2=".") returned 0 [0121.408] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.408] wcscmp (_String1="..", _String2=".") returned 1 [0121.409] wcscmp (_String1="..", _String2="..") returned 0 [0121.409] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.409] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0121.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f00) returned 1 [0121.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 [0121.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf198) returned 1 Thread: id = 186 os_tid = 0xb7c [0121.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69c28 [0121.082] wcscpy (in: _Dest=0x3e69c28, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" [0121.082] wcscat (in: _Dest=0x3e69c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\" [0121.082] wcscat (in: _Dest=0x3e69c28, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\*" [0121.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0121.082] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0121.410] wcscmp (_String1=".", _String2=".") returned 0 [0121.410] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592d72d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.411] wcscmp (_String1="..", _String2=".") returned 1 [0121.411] wcscmp (_String1="..", _String2="..") returned 0 [0121.411] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1 [0121.411] wcscmp (_String1="Bin", _String2=".") returned 1 [0121.411] wcscmp (_String1="Bin", _String2="..") returned 1 [0121.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69bb8 [0121.411] wcscpy (in: _Dest=0x3e69bb8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA" [0121.411] wcscat (in: _Dest=0x3e69bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\" [0121.411] wcscat (in: _Dest=0x3e69bb8, _Source="Bin" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" [0121.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0121.799] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 0 [0121.799] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0121.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0121.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c28) returned 1 [0121.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf9b8) returned 1 Thread: id = 187 os_tid = 0xb68 [0121.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da65f0 [0121.083] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies" [0121.083] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\" [0121.083] wcscat (in: _Dest=0x3da65f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\*") returned="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\*" [0121.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef43d0 [0121.083] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0121.411] wcscmp (_String1=".", _String2=".") returned 0 [0121.411] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.412] wcscmp (_String1="..", _String2=".") returned 1 [0121.412] wcscmp (_String1="..", _String2="..") returned 0 [0121.412] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663bd400, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x87bb6ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x663bd400, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0121.412] wcscmp (_String1="adodb.dll", _String2=".") returned 1 [0121.412] wcscmp (_String1="adodb.dll", _String2="..") returned 1 [0121.412] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb155e700, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x87c9b310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb155e700, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0121.412] wcscmp (_String1="Microsoft.mshtml.dll", _String2=".") returned 1 [0121.412] wcscmp (_String1="Microsoft.mshtml.dll", _String2="..") returned 1 [0121.412] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e135800, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x87c9b310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e135800, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0121.412] wcscmp (_String1="Microsoft.stdformat.dll", _String2=".") returned 1 [0121.412] wcscmp (_String1="Microsoft.stdformat.dll", _String2="..") returned 1 [0121.412] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c0900, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x881aa1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x971c0900, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0121.412] wcscmp (_String1="msdatasrc.dll", _String2=".") returned 1 [0121.412] wcscmp (_String1="msdatasrc.dll", _String2="..") returned 1 [0121.412] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781d7700, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x781d7700, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0121.412] wcscmp (_String1="stdole.dll", _String2=".") returned 1 [0121.412] wcscmp (_String1="stdole.dll", _String2="..") returned 1 [0121.412] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781d7700, ftCreationTime.dwHighDateTime=0x1c2a1d8, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x781d7700, ftLastWriteTime.dwHighDateTime=0x1c2a1d8, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0121.413] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0121.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0121.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 [0121.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6270) returned 1 Thread: id = 188 os_tid = 0xb58 [0121.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe63c8 [0121.087] wcscpy (in: _Dest=0x2fe63c8, _Source="C:\\Program Files\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0121.087] wcscat (in: _Dest=0x2fe63c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\" [0121.087] wcscat (in: _Dest=0x2fe63c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\*") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\*" [0121.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4638 [0121.087] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0a96460, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x4e6f04a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf610 [0121.087] wcscmp (_String1=".", _String2=".") returned 0 [0121.087] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0a96460, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x4e6f04a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.088] wcscmp (_String1="..", _String2=".") returned 1 [0121.088] wcscmp (_String1="..", _String2="..") returned 0 [0121.088] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e2b00, ftCreationTime.dwHighDateTime=0x1cd906a, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x34e2b00, ftLastWriteTime.dwHighDateTime=0x1cd906a, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1 [0121.088] wcscmp (_String1="AssemblyList_4_client.xml", _String2=".") returned 1 [0121.088] wcscmp (_String1="AssemblyList_4_client.xml", _String2="..") returned 1 [0121.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1cb8 [0121.088] wcscpy (in: _Dest=0x3df1cb8, _Source="C:\\Program Files\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0121.088] wcscat (in: _Dest=0x3df1cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\" [0121.088] wcscat (in: _Dest=0x3df1cb8, _Source="AssemblyList_4_client.xml" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" [0121.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0121.162] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e2b00, ftCreationTime.dwHighDateTime=0x1cd906a, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x34e2b00, ftLastWriteTime.dwHighDateTime=0x1cd906a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1 [0121.162] wcscmp (_String1="AssemblyList_4_extended.xml", _String2=".") returned 1 [0121.162] wcscmp (_String1="AssemblyList_4_extended.xml", _String2="..") returned 1 [0121.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d1a8 [0121.162] wcscpy (in: _Dest=0x32d1a8, _Source="C:\\Program Files\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList") returned="C:\\Program Files\\Microsoft.NET\\RedistList" [0121.162] wcscat (in: _Dest=0x32d1a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\" [0121.162] wcscat (in: _Dest=0x32d1a8, _Source="AssemblyList_4_extended.xml" | out: _Dest="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" [0121.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0121.163] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e2b00, ftCreationTime.dwHighDateTime=0x1cd906a, ftLastAccessTime.dwLowDateTime=0x4e6f04a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x34e2b00, ftLastWriteTime.dwHighDateTime=0x1cd906a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 0 [0121.164] FindClose (in: hFindFile=0x3dcf610 | out: hFindFile=0x3dcf610) returned 1 [0121.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4638) returned 1 [0121.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe63c8) returned 1 [0121.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5e88) returned 1 Thread: id = 189 os_tid = 0xb50 [0121.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3dba008 [0121.089] wcscpy (in: _Dest=0x3dba008, _Source="C:\\Program Files\\MSBuild\\Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft" [0121.089] wcscat (in: _Dest=0x3dba008, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\" [0121.089] wcscat (in: _Dest=0x3dba008, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\*" [0121.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef48a0 [0121.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0121.089] wcscmp (_String1=".", _String2=".") returned 0 [0121.089] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.089] wcscmp (_String1="..", _String2=".") returned 1 [0121.090] wcscmp (_String1="..", _String2="..") returned 0 [0121.090] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0121.090] wcscmp (_String1="Windows Workflow Foundation", _String2=".") returned 1 [0121.090] wcscmp (_String1="Windows Workflow Foundation", _String2="..") returned 1 [0121.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ccb8 [0121.090] wcscpy (in: _Dest=0x3e1ccb8, _Source="C:\\Program Files\\MSBuild\\Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft" [0121.090] wcscat (in: _Dest=0x3e1ccb8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\" [0121.090] wcscat (in: _Dest=0x3e1ccb8, _Source="Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0121.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1ccb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0121.288] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0121.288] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0121.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a0) returned 1 [0121.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba008) returned 1 [0121.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6928) returned 1 Thread: id = 190 os_tid = 0xb40 [0121.090] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets" (normalized: "c:\\program files\\msbuild\\microsoft.office.infopath.targets")) returned 0x20 [0121.416] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets", dwFileAttributes=0x20) returned 0 [0121.417] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets" (normalized: "c:\\program files\\msbuild\\microsoft.office.infopath.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0121.417] GetLastError () returned 0x5 [0121.417] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft.Office.InfoPath.targets", dwFileAttributes=0x20) returned 0 [0121.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 Thread: id = 191 os_tid = 0xb4c [0121.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69c98 [0121.093] wcscpy (in: _Dest=0x3e69c98, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft" [0121.093] wcscat (in: _Dest=0x3e69c98, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\" [0121.093] wcscat (in: _Dest=0x3e69c98, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\*" [0121.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4b08 [0121.093] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0121.094] wcscmp (_String1=".", _String2=".") returned 0 [0121.094] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.094] wcscmp (_String1="..", _String2=".") returned 1 [0121.094] wcscmp (_String1="..", _String2="..") returned 0 [0121.094] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0121.094] wcscmp (_String1="Framework", _String2=".") returned 1 [0121.094] wcscmp (_String1="Framework", _String2="..") returned 1 [0121.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5cf0 [0121.094] wcscpy (in: _Dest=0x3da5cf0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft" [0121.094] wcscat (in: _Dest=0x3da5cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\" [0121.094] wcscat (in: _Dest=0x3da5cf0, _Source="Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0121.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da5cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0121.166] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0 [0121.166] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0121.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b08) returned 1 [0121.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c98) returned 1 [0121.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf200) returned 1 Thread: id = 192 os_tid = 0xb1c [0121.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6608 [0121.095] wcscpy (in: _Dest=0x2fe6608, _Source="C:\\Program Files\\Windows Journal\\en-US" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US") returned="C:\\Program Files\\Windows Journal\\en-US" [0121.095] wcscat (in: _Dest=0x2fe6608, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US\\") returned="C:\\Program Files\\Windows Journal\\en-US\\" [0121.095] wcscat (in: _Dest=0x2fe6608, _Source="*" | out: _Dest="C:\\Program Files\\Windows Journal\\en-US\\*") returned="C:\\Program Files\\Windows Journal\\en-US\\*" [0121.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4d70 [0121.095] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3608042, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee69aeba, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc386a5c2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0121.418] wcscmp (_String1=".", _String2=".") returned 0 [0121.419] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3608042, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee69aeba, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc386a5c2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.419] wcscmp (_String1="..", _String2=".") returned 1 [0121.419] wcscmp (_String1="..", _String2="..") returned 0 [0121.419] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e63554, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40e63554, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x53399a00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll.mui", cAlternateFileName="")) returned 1 [0121.419] wcscmp (_String1="JNTFiltr.dll.mui", _String2=".") returned 1 [0121.419] wcscmp (_String1="JNTFiltr.dll.mui", _String2="..") returned 1 [0121.419] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4115d0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x4115d0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xc0e5c600, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll.mui", cAlternateFileName="")) returned 1 [0121.419] wcscmp (_String1="jnwdui.dll.mui", _String2=".") returned 1 [0121.419] wcscmp (_String1="jnwdui.dll.mui", _String2="..") returned 1 [0121.419] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4115d0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x4115d0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1454400, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll.mui", cAlternateFileName="")) returned 1 [0121.419] wcscmp (_String1="jnwmon.dll.mui", _String2=".") returned 1 [0121.419] wcscmp (_String1="jnwmon.dll.mui", _String2="..") returned 1 [0121.419] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e63554, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40e63554, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x546ac700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe.mui", cAlternateFileName="")) returned 1 [0121.419] wcscmp (_String1="Journal.exe.mui", _String2=".") returned 1 [0121.419] wcscmp (_String1="Journal.exe.mui", _String2="..") returned 1 [0121.420] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f21c35, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40f21c35, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x72382c00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL.mui", cAlternateFileName="")) returned 1 [0121.420] wcscmp (_String1="MSPVWCTL.DLL.mui", _String2=".") returned 1 [0121.420] wcscmp (_String1="MSPVWCTL.DLL.mui", _String2="..") returned 1 [0121.420] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f21c35, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40f21c35, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xf2f72800, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll.mui", cAlternateFileName="")) returned 1 [0121.420] wcscmp (_String1="NBMapTIP.dll.mui", _String2=".") returned 1 [0121.420] wcscmp (_String1="NBMapTIP.dll.mui", _String2="..") returned 1 [0121.420] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411a939a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x411a939a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xe4a90c00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 1 [0121.420] wcscmp (_String1="PDIALOG.exe.mui", _String2=".") returned 1 [0121.420] wcscmp (_String1="PDIALOG.exe.mui", _String2="..") returned 1 [0121.420] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411a939a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x411a939a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xe4a90c00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 0 [0121.420] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0121.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d70) returned 1 [0121.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6608) returned 1 [0121.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db9be8) returned 1 Thread: id = 193 os_tid = 0xb54 [0121.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf4d8 [0121.098] wcscpy (in: _Dest=0x3edf4d8, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.098] wcscat (in: _Dest=0x3edf4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.098] wcscat (in: _Dest=0x3edf4d8, _Source="*" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\*") returned="C:\\Program Files\\Windows Journal\\Templates\\*" [0121.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0121.098] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0121.424] wcscmp (_String1=".", _String2=".") returned 0 [0121.424] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc392917a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xef4041aa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xc3eac832, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.424] wcscmp (_String1="..", _String2=".") returned 1 [0121.424] wcscmp (_String1="..", _String2="..") returned 0 [0121.424] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98deb0d2, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98deb0d2, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x249311fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x155e, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.jtp", cAlternateFileName="")) returned 1 [0121.424] wcscmp (_String1="blank.jtp", _String2=".") returned 1 [0121.424] wcscmp (_String1="blank.jtp", _String2="..") returned 1 [0121.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3bae0 [0121.424] wcscpy (in: _Dest=0x3e3bae0, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.424] wcscat (in: _Dest=0x3e3bae0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.424] wcscat (in: _Dest=0x3e3bae0, _Source="blank.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" [0121.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3bae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0121.802] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98e5d4ef, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98e5d4ef, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24c7703c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x2ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Line.jtp", cAlternateFileName="")) returned 1 [0121.802] wcscmp (_String1="Dotted_Line.jtp", _String2=".") returned 1 [0121.802] wcscmp (_String1="Dotted_Line.jtp", _String2="..") returned 1 [0121.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5c70 [0121.802] wcscpy (in: _Dest=0x3da5c70, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.802] wcscat (in: _Dest=0x3da5c70, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.802] wcscat (in: _Dest=0x3da5c70, _Source="Dotted_Line.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" [0121.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0121.803] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ea97ad, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98ea97ad, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24c9d19c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x361c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.jtp", cAlternateFileName="")) returned 1 [0121.803] wcscmp (_String1="Genko_1.jtp", _String2=".") returned 1 [0121.803] wcscmp (_String1="Genko_1.jtp", _String2="..") returned 1 [0121.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e3b018 [0121.803] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.803] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.803] wcscat (in: _Dest=0x3e3b018, _Source="Genko_1.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" [0121.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3b018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0121.805] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ecf90c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98ecf90c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24c9d19c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x4c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.jtp", cAlternateFileName="")) returned 1 [0121.805] wcscmp (_String1="Genko_2.jtp", _String2=".") returned 1 [0121.805] wcscmp (_String1="Genko_2.jtp", _String2="..") returned 1 [0121.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51368 [0121.805] wcscpy (in: _Dest=0x3d51368, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.805] wcscat (in: _Dest=0x3d51368, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.805] wcscat (in: _Dest=0x3d51368, _Source="Genko_2.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" [0121.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d51368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0121.807] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f1bbca, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98f1bbca, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24cc32fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1e15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.jtp", cAlternateFileName="")) returned 1 [0121.807] wcscmp (_String1="Graph.jtp", _String2=".") returned 1 [0121.807] wcscmp (_String1="Graph.jtp", _String2="..") returned 1 [0121.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d513e0 [0121.807] wcscpy (in: _Dest=0x3d513e0, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.807] wcscat (in: _Dest=0x3d513e0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.807] wcscat (in: _Dest=0x3d513e0, _Source="Graph.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" [0121.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d513e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0121.808] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f41d29, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98f41d29, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24ce945c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x26f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.jtp", cAlternateFileName="")) returned 1 [0121.808] wcscmp (_String1="Memo.jtp", _String2=".") returned 1 [0121.808] wcscmp (_String1="Memo.jtp", _String2="..") returned 1 [0121.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69c28 [0121.809] wcscpy (in: _Dest=0x3e69c28, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.809] wcscat (in: _Dest=0x3e69c28, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.809] wcscat (in: _Dest=0x3e69c28, _Source="Memo.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" [0121.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0121.810] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98fb4146, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98fb4146, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24ce945c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.jtp", cAlternateFileName="")) returned 1 [0121.810] wcscmp (_String1="Month_Calendar.jtp", _String2=".") returned 1 [0121.810] wcscmp (_String1="Month_Calendar.jtp", _String2="..") returned 1 [0121.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ccb8 [0121.810] wcscpy (in: _Dest=0x3e1ccb8, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.810] wcscat (in: _Dest=0x3e1ccb8, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.810] wcscat (in: _Dest=0x3e1ccb8, _Source="Month_Calendar.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" [0121.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ccb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0121.812] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98fda2a5, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x98fda2a5, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d0f5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x9f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.jtp", cAlternateFileName="")) returned 1 [0121.812] wcscmp (_String1="Music.jtp", _String2=".") returned 1 [0121.812] wcscmp (_String1="Music.jtp", _String2="..") returned 1 [0121.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51728 [0121.812] wcscpy (in: _Dest=0x3d51728, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.812] wcscat (in: _Dest=0x3d51728, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.812] wcscat (in: _Dest=0x3d51728, _Source="Music.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" [0121.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d51728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0121.814] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99026563, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x99026563, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d0f5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.jtp", cAlternateFileName="")) returned 1 [0121.814] wcscmp (_String1="Seyes.jtp", _String2=".") returned 1 [0121.814] wcscmp (_String1="Seyes.jtp", _String2="..") returned 1 [0121.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015490 [0121.814] wcscpy (in: _Dest=0x3015490, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.814] wcscat (in: _Dest=0x3015490, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.814] wcscat (in: _Dest=0x3015490, _Source="Seyes.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" [0121.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3015490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0121.816] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99098980, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x99098980, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d3571c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1575a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.jtp", cAlternateFileName="")) returned 1 [0121.816] wcscmp (_String1="Shorthand.jtp", _String2=".") returned 1 [0121.816] wcscmp (_String1="Shorthand.jtp", _String2="..") returned 1 [0121.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da61f0 [0121.816] wcscpy (in: _Dest=0x3da61f0, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.816] wcscat (in: _Dest=0x3da61f0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.816] wcscat (in: _Dest=0x3da61f0, _Source="Shorthand.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" [0121.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da61f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0121.817] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9910ad9d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9910ad9d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d5b87c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 1 [0121.817] wcscmp (_String1="To_Do_List.jtp", _String2=".") returned 1 [0121.817] wcscmp (_String1="To_Do_List.jtp", _String2="..") returned 1 [0121.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6670 [0121.817] wcscpy (in: _Dest=0x3da6670, _Source="C:\\Program Files\\Windows Journal\\Templates" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates") returned="C:\\Program Files\\Windows Journal\\Templates" [0121.817] wcscat (in: _Dest=0x3da6670, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\") returned="C:\\Program Files\\Windows Journal\\Templates\\" [0121.817] wcscat (in: _Dest=0x3da6670, _Source="To_Do_List.jtp" | out: _Dest="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp") returned="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" [0121.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da6670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0121.819] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9910ad9d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x9910ad9d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x24d5b87c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 0 [0121.819] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0121.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0121.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf4d8) returned 1 [0121.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 194 os_tid = 0xb3c [0121.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d486e8 [0121.101] wcscpy (in: _Dest=0x3d486e8, _Source="C:\\Program Files\\Windows Mail\\en-US" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US" [0121.101] wcscat (in: _Dest=0x3d486e8, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US\\") returned="C:\\Program Files\\Windows Mail\\en-US\\" [0121.101] wcscat (in: _Dest=0x3d486e8, _Source="*" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US\\*") returned="C:\\Program Files\\Windows Mail\\en-US\\*" [0121.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5240 [0121.101] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0a419b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7f0a419b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f0a419b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf810 [0121.102] wcscmp (_String1=".", _String2=".") returned 0 [0121.102] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0a419b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7f0a419b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f0a419b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.102] wcscmp (_String1="..", _String2=".") returned 1 [0121.102] wcscmp (_String1="..", _String2="..") returned 0 [0121.102] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b7eaad, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34b7eaad, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2767100, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0121.102] wcscmp (_String1="msoeres.dll.mui", _String2=".") returned 1 [0121.102] wcscmp (_String1="msoeres.dll.mui", _String2="..") returned 1 [0121.102] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ff53f5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34ff53f5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xfc33c500, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0121.102] wcscmp (_String1="WinMail.exe.mui", _String2=".") returned 1 [0121.102] wcscmp (_String1="WinMail.exe.mui", _String2="..") returned 1 [0121.102] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ff53f5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34ff53f5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xfc33c500, ftLastWriteTime.dwHighDateTime=0x1ca0426, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0121.102] FindClose (in: hFindFile=0x3dcf810 | out: hFindFile=0x3dcf810) returned 1 [0121.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5240) returned 1 [0121.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d486e8) returned 1 [0121.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 Thread: id = 195 os_tid = 0xb44 [0121.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d486e8 [0121.104] wcscpy (in: _Dest=0x3d486e8, _Source="C:\\ProgramData\\Microsoft\\Assistance" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance" [0121.105] wcscat (in: _Dest=0x3d486e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\" [0121.105] wcscat (in: _Dest=0x3d486e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\*" [0121.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5240 [0121.105] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0124.502] wcscmp (_String1=".", _String2=".") returned 0 [0124.502] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.502] wcscmp (_String1="..", _String2=".") returned 1 [0124.502] wcscmp (_String1="..", _String2="..") returned 0 [0124.502] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0124.502] wcscmp (_String1="Client", _String2=".") returned 1 [0124.502] wcscmp (_String1="Client", _String2="..") returned 1 [0124.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6968 [0124.502] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\ProgramData\\Microsoft\\Assistance" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance") returned="C:\\ProgramData\\Microsoft\\Assistance" [0124.502] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\" [0124.502] wcscat (in: _Dest=0x2fe6968, _Source="Client" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client" [0125.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0125.506] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0125.506] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0125.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5240) returned 1 [0125.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d486e8) returned 1 [0125.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6388) returned 1 Thread: id = 196 os_tid = 0xb38 [0121.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6068 [0121.105] wcscpy (in: _Dest=0x3de6068, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0121.106] wcscat (in: _Dest=0x3de6068, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0121.106] wcscat (in: _Dest=0x3de6068, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\*" [0121.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef54a8 [0121.106] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d980 [0124.489] wcscmp (_String1=".", _String2=".") returned 0 [0124.489] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.489] wcscmp (_String1="..", _String2=".") returned 1 [0124.489] wcscmp (_String1="..", _String2="..") returned 0 [0124.489] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0124.489] wcscmp (_String1="DSS", _String2=".") returned 1 [0124.489] wcscmp (_String1="DSS", _String2="..") returned 1 [0124.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6928 [0124.489] wcscpy (in: _Dest=0x3de6928, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0124.489] wcscat (in: _Dest=0x3de6928, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0124.489] wcscat (in: _Dest=0x3de6928, _Source="DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS" [0125.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0125.495] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0125.495] wcscmp (_String1="Keys", _String2=".") returned 1 [0125.495] wcscmp (_String1="Keys", _String2="..") returned 1 [0125.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d488a0 [0125.495] wcscpy (in: _Dest=0x3d488a0, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0125.495] wcscat (in: _Dest=0x3d488a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0125.495] wcscat (in: _Dest=0x3d488a0, _Source="Keys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys" [0125.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d488a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0125.497] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0125.497] wcscmp (_String1="RSA", _String2=".") returned 1 [0125.497] wcscmp (_String1="RSA", _String2="..") returned 1 [0125.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e84998 [0125.497] wcscpy (in: _Dest=0x3e84998, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto" [0125.497] wcscat (in: _Dest=0x3e84998, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\" [0125.497] wcscat (in: _Dest=0x3e84998, _Source="RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0125.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e84998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0125.499] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0125.499] FindClose (in: hFindFile=0x7a2d980 | out: hFindFile=0x7a2d980) returned 1 [0125.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54a8) returned 1 [0125.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6068) returned 1 [0125.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56888) returned 1 Thread: id = 197 os_tid = 0xb34 [0121.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3d48b60 [0121.107] wcscpy (in: _Dest=0x3d48b60, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0121.107] wcscat (in: _Dest=0x3d48b60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\" [0121.107] wcscat (in: _Dest=0x3d48b60, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\*" [0121.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5710 [0121.107] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0124.521] wcscmp (_String1=".", _String2=".") returned 0 [0124.521] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.521] wcscmp (_String1="..", _String2=".") returned 1 [0124.521] wcscmp (_String1="..", _String2="..") returned 0 [0124.521] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0124.521] wcscmp (_String1="Device", _String2=".") returned 1 [0124.521] wcscmp (_String1="Device", _String2="..") returned 1 [0124.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee12e8 [0124.522] wcscpy (in: _Dest=0x3ee12e8, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0124.522] wcscat (in: _Dest=0x3ee12e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\" [0124.522] wcscat (in: _Dest=0x3ee12e8, _Source="Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0125.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee12e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0125.522] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0125.522] wcscmp (_String1="Task", _String2=".") returned 1 [0125.522] wcscmp (_String1="Task", _String2="..") returned 1 [0125.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7208 [0125.522] wcscpy (in: _Dest=0x2fe7208, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage" [0125.523] wcscat (in: _Dest=0x2fe7208, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\" [0125.523] wcscat (in: _Dest=0x2fe7208, _Source="Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0125.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0125.525] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0125.525] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0125.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5710) returned 1 [0125.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48b60) returned 1 [0125.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba2c8) returned 1 Thread: id = 198 os_tid = 0xb30 [0121.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48798 [0121.109] wcscpy (in: _Dest=0x3d48798, _Source="C:\\ProgramData\\Microsoft\\DeviceSync" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync" [0121.109] wcscat (in: _Dest=0x3d48798, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync\\") returned="C:\\ProgramData\\Microsoft\\DeviceSync\\" [0121.109] wcscat (in: _Dest=0x3d48798, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync\\*") returned="C:\\ProgramData\\Microsoft\\DeviceSync\\*" [0121.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0121.109] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0124.522] wcscmp (_String1=".", _String2=".") returned 0 [0124.522] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.523] wcscmp (_String1="..", _String2=".") returned 1 [0124.523] wcscmp (_String1="..", _String2="..") returned 0 [0124.523] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0124.523] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0124.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0124.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48798) returned 1 [0124.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de61a8) returned 1 Thread: id = 199 os_tid = 0xb2c [0121.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e559e8 [0121.110] wcscpy (in: _Dest=0x3e559e8, _Source="C:\\ProgramData\\Microsoft\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM" [0121.110] wcscat (in: _Dest=0x3e559e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\") returned="C:\\ProgramData\\Microsoft\\DRM\\" [0121.110] wcscat (in: _Dest=0x3e559e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\*") returned="C:\\ProgramData\\Microsoft\\DRM\\*" [0121.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5be0 [0121.111] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0124.489] wcscmp (_String1=".", _String2=".") returned 0 [0124.490] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.490] wcscmp (_String1="..", _String2=".") returned 1 [0124.490] wcscmp (_String1="..", _String2="..") returned 0 [0124.490] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0124.490] wcscmp (_String1="Server", _String2=".") returned 1 [0124.490] wcscmp (_String1="Server", _String2="..") returned 1 [0124.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de5d48 [0124.490] wcscpy (in: _Dest=0x3de5d48, _Source="C:\\ProgramData\\Microsoft\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM" [0124.490] wcscat (in: _Dest=0x3de5d48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\") returned="C:\\ProgramData\\Microsoft\\DRM\\" [0124.490] wcscat (in: _Dest=0x3de5d48, _Source="Server" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server") returned="C:\\ProgramData\\Microsoft\\DRM\\Server" [0132.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de5d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0132.269] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0132.270] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0132.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5be0) returned 1 [0132.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e559e8) returned 1 [0132.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e567f8) returned 1 Thread: id = 200 os_tid = 0xb84 [0121.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6428 [0121.112] wcscpy (in: _Dest=0x3de6428, _Source="C:\\ProgramData\\Microsoft\\eHome" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome" [0121.112] wcscat (in: _Dest=0x3de6428, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\") returned="C:\\ProgramData\\Microsoft\\eHome\\" [0121.112] wcscat (in: _Dest=0x3de6428, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\*") returned="C:\\ProgramData\\Microsoft\\eHome\\*" [0121.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5e48 [0121.113] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0124.491] wcscmp (_String1=".", _String2=".") returned 0 [0124.491] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.491] wcscmp (_String1="..", _String2=".") returned 1 [0124.491] wcscmp (_String1="..", _String2="..") returned 0 [0124.491] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0124.491] wcscmp (_String1="logs", _String2=".") returned 1 [0124.491] wcscmp (_String1="logs", _String2="..") returned 1 [0124.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de64c8 [0124.491] wcscpy (in: _Dest=0x3de64c8, _Source="C:\\ProgramData\\Microsoft\\eHome" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome") returned="C:\\ProgramData\\Microsoft\\eHome" [0124.491] wcscat (in: _Dest=0x3de64c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\") returned="C:\\ProgramData\\Microsoft\\eHome\\" [0124.491] wcscat (in: _Dest=0x3de64c8, _Source="logs" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs") returned="C:\\ProgramData\\Microsoft\\eHome\\logs" [0126.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de64c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0126.914] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0126.914] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0126.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e48) returned 1 [0126.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6428) returned 1 [0126.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 Thread: id = 201 os_tid = 0xb88 [0121.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3d487f0 [0121.114] wcscpy (in: _Dest=0x3d487f0, _Source="C:\\ProgramData\\Microsoft\\Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer" [0121.114] wcscat (in: _Dest=0x3d487f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\" [0121.114] wcscat (in: _Dest=0x3d487f0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\*") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\*" [0121.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0c08 [0121.114] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0124.525] wcscmp (_String1=".", _String2=".") returned 0 [0124.525] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.525] wcscmp (_String1="..", _String2=".") returned 1 [0124.525] wcscmp (_String1="..", _String2="..") returned 0 [0124.525] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0124.525] wcscmp (_String1="Views", _String2=".") returned 1 [0124.525] wcscmp (_String1="Views", _String2="..") returned 1 [0124.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d28 [0124.525] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\ProgramData\\Microsoft\\Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer" [0124.525] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\" [0124.526] wcscat (in: _Dest=0x2fe6d28, _Source="Views" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0126.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0126.916] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0126.916] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0126.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0c08) returned 1 [0126.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d487f0) returned 1 [0126.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48c68) returned 1 Thread: id = 202 os_tid = 0xb98 [0121.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d489a8 [0121.115] wcscpy (in: _Dest=0x3d489a8, _Source="C:\\ProgramData\\Microsoft\\HTML Help" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help") returned="C:\\ProgramData\\Microsoft\\HTML Help" [0121.115] wcscat (in: _Dest=0x3d489a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help\\") returned="C:\\ProgramData\\Microsoft\\HTML Help\\" [0121.116] wcscat (in: _Dest=0x3d489a8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\HTML Help\\*") returned="C:\\ProgramData\\Microsoft\\HTML Help\\*" [0121.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0121.116] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\HTML Help\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0124.526] wcscmp (_String1=".", _String2=".") returned 0 [0124.526] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.526] wcscmp (_String1="..", _String2=".") returned 1 [0124.526] wcscmp (_String1="..", _String2="..") returned 0 [0124.526] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0124.526] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0124.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0124.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d489a8) returned 1 [0124.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de60b8) returned 1 Thread: id = 203 os_tid = 0xba4 [0121.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3d488f8 [0121.118] wcscpy (in: _Dest=0x3d488f8, _Source="C:\\ProgramData\\Microsoft\\IdentityCRL" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL" [0121.118] wcscat (in: _Dest=0x3d488f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\" [0121.119] wcscat (in: _Dest=0x3d488f8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\*") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\*" [0121.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb10d8 [0121.119] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0124.532] wcscmp (_String1=".", _String2=".") returned 0 [0124.532] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.532] wcscmp (_String1="..", _String2=".") returned 1 [0124.532] wcscmp (_String1="..", _String2="..") returned 0 [0124.532] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x9fd2229c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0124.532] wcscmp (_String1="ppcrlconfig.dll", _String2=".") returned 1 [0124.532] wcscmp (_String1="ppcrlconfig.dll", _String2="..") returned 1 [0124.532] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0124.532] wcscmp (_String1="ppcrlui.dll", _String2=".") returned 1 [0124.532] wcscmp (_String1="ppcrlui.dll", _String2="..") returned 1 [0124.532] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0124.532] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0124.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb10d8) returned 1 [0124.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d488f8) returned 1 [0124.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48d18) returned 1 Thread: id = 204 os_tid = 0xb90 [0121.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e85428 [0121.120] wcscpy (in: _Dest=0x3e85428, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0121.120] wcscat (in: _Dest=0x3e85428, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\" [0121.120] wcscat (in: _Dest=0x3e85428, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\*") returned="C:\\ProgramData\\Microsoft\\MF\\*" [0121.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1340 [0121.120] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0124.534] wcscmp (_String1=".", _String2=".") returned 0 [0124.534] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.534] wcscmp (_String1="..", _String2=".") returned 1 [0124.534] wcscmp (_String1="..", _String2="..") returned 0 [0124.534] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0124.535] wcscmp (_String1="Active.GRL", _String2=".") returned 1 [0124.535] wcscmp (_String1="Active.GRL", _String2="..") returned 1 [0124.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3d48d18 [0124.535] wcscpy (in: _Dest=0x3d48d18, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0124.535] wcscat (in: _Dest=0x3d48d18, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\" [0124.535] wcscat (in: _Dest=0x3d48d18, _Source="Active.GRL" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" [0125.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d48d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0125.528] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0125.528] wcscmp (_String1="Pending.GRL", _String2=".") returned 1 [0125.528] wcscmp (_String1="Pending.GRL", _String2="..") returned 1 [0125.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3dba2c8 [0125.528] wcscpy (in: _Dest=0x3dba2c8, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF" [0125.529] wcscat (in: _Dest=0x3dba2c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\" [0125.529] wcscat (in: _Dest=0x3dba2c8, _Source="Pending.GRL" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" [0125.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dba2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0125.532] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0125.532] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0125.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1340) returned 1 [0125.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85428) returned 1 [0125.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0090) returned 1 Thread: id = 205 os_tid = 0xb9c [0121.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e852c0 [0121.121] wcscpy (in: _Dest=0x3e852c0, _Source="C:\\ProgramData\\Microsoft\\MSDN" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN" [0121.121] wcscat (in: _Dest=0x3e852c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\") returned="C:\\ProgramData\\Microsoft\\MSDN\\" [0121.121] wcscat (in: _Dest=0x3e852c0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\*") returned="C:\\ProgramData\\Microsoft\\MSDN\\*" [0121.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb15a8 [0121.121] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0124.485] wcscmp (_String1=".", _String2=".") returned 0 [0124.485] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.485] wcscmp (_String1="..", _String2=".") returned 1 [0124.485] wcscmp (_String1="..", _String2="..") returned 0 [0124.485] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0124.485] wcscmp (_String1="8.0", _String2=".") returned 1 [0124.485] wcscmp (_String1="8.0", _String2="..") returned 1 [0124.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e846c8 [0124.486] wcscpy (in: _Dest=0x3e846c8, _Source="C:\\ProgramData\\Microsoft\\MSDN" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN") returned="C:\\ProgramData\\Microsoft\\MSDN" [0124.486] wcscat (in: _Dest=0x3e846c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\") returned="C:\\ProgramData\\Microsoft\\MSDN\\" [0124.486] wcscat (in: _Dest=0x3e846c8, _Source="8.0" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0" [0125.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e846c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0125.491] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0125.491] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0125.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb15a8) returned 1 [0125.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e852c0) returned 1 [0125.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56720) returned 1 Thread: id = 206 os_tid = 0xb8c [0121.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3d48ab0 [0121.122] wcscpy (in: _Dest=0x3d48ab0, _Source="C:\\ProgramData\\Microsoft\\NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework" [0121.122] wcscat (in: _Dest=0x3d48ab0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\" [0121.122] wcscat (in: _Dest=0x3d48ab0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\*") returned="C:\\ProgramData\\Microsoft\\NetFramework\\*" [0121.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1810 [0121.122] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0124.484] wcscmp (_String1=".", _String2=".") returned 0 [0124.484] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.484] wcscmp (_String1="..", _String2=".") returned 1 [0124.484] wcscmp (_String1="..", _String2="..") returned 0 [0124.484] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0124.484] wcscmp (_String1="BreadcrumbStore", _String2=".") returned 1 [0124.484] wcscmp (_String1="BreadcrumbStore", _String2="..") returned 1 [0124.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d513e0 [0124.484] wcscpy (in: _Dest=0x3d513e0, _Source="C:\\ProgramData\\Microsoft\\NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework" [0124.484] wcscat (in: _Dest=0x3d513e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\" [0124.484] wcscat (in: _Dest=0x3d513e0, _Source="BreadcrumbStore" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" [0142.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d513e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c4 [0142.308] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0142.308] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0142.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1810) returned 1 [0142.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48ab0) returned 1 [0142.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48a58) returned 1 Thread: id = 207 os_tid = 0xb94 [0121.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6108 [0121.123] wcscpy (in: _Dest=0x3de6108, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0121.123] wcscat (in: _Dest=0x3de6108, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\" [0121.123] wcscat (in: _Dest=0x3de6108, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\*") returned="C:\\ProgramData\\Microsoft\\Network\\*" [0121.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1a78 [0121.123] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d8c0 [0124.482] wcscmp (_String1=".", _String2=".") returned 0 [0124.482] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.482] wcscmp (_String1="..", _String2=".") returned 1 [0124.482] wcscmp (_String1="..", _String2="..") returned 0 [0124.483] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0124.483] wcscmp (_String1="Connections", _String2=".") returned 1 [0124.483] wcscmp (_String1="Connections", _String2="..") returned 1 [0124.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0c68 [0124.483] wcscpy (in: _Dest=0x3ee0c68, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0124.483] wcscat (in: _Dest=0x3ee0c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\" [0124.483] wcscat (in: _Dest=0x3ee0c68, _Source="Connections" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections" [0136.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec [0136.551] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0136.551] wcscmp (_String1="Downloader", _String2=".") returned 1 [0136.551] wcscmp (_String1="Downloader", _String2="..") returned 1 [0136.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f68 [0136.551] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network" [0136.551] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\" [0136.551] wcscat (in: _Dest=0x2fe6f68, _Source="Downloader" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader" [0136.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0136.552] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0136.553] FindClose (in: hFindFile=0x7a2d8c0 | out: hFindFile=0x7a2d8c0) returned 1 [0136.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a78) returned 1 [0136.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6108) returned 1 [0136.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5c08) returned 1 Thread: id = 208 os_tid = 0xbcc [0121.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de5fc8 [0121.124] wcscpy (in: _Dest=0x3de5fc8, _Source="C:\\ProgramData\\Microsoft\\OFFICE" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE" [0121.124] wcscat (in: _Dest=0x3de5fc8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\" [0121.124] wcscat (in: _Dest=0x3de5fc8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\*" [0121.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1ce0 [0121.124] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0124.917] wcscmp (_String1=".", _String2=".") returned 0 [0124.917] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.918] wcscmp (_String1="..", _String2=".") returned 1 [0124.918] wcscmp (_String1="..", _String2="..") returned 0 [0124.918] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe546bd00, ftCreationTime.dwHighDateTime=0x1ca0563, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe546bd00, ftLastWriteTime.dwHighDateTime=0x1ca0563, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0124.918] wcscmp (_String1="AssetLibrary.ico", _String2=".") returned 1 [0124.918] wcscmp (_String1="AssetLibrary.ico", _String2="..") returned 1 [0124.918] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4123ca00, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4123ca00, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0124.918] wcscmp (_String1="DocumentRepository.ico", _String2=".") returned 1 [0124.918] wcscmp (_String1="DocumentRepository.ico", _String2="..") returned 1 [0124.918] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc130b800, ftCreationTime.dwHighDateTime=0x1c9fb2f, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc130b800, ftLastWriteTime.dwHighDateTime=0x1c9fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0124.918] wcscmp (_String1="MySharePoints.ico", _String2=".") returned 1 [0124.918] wcscmp (_String1="MySharePoints.ico", _String2="..") returned 1 [0124.918] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e61fd00, ftCreationTime.dwHighDateTime=0x1c62807, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e61fd00, ftLastWriteTime.dwHighDateTime=0x1c62807, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0124.918] wcscmp (_String1="MySite.ico", _String2=".") returned 1 [0124.918] wcscmp (_String1="MySite.ico", _String2="..") returned 1 [0124.918] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87792900, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87792900, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0124.918] wcscmp (_String1="SharePointPortalSite.ico", _String2=".") returned 1 [0124.918] wcscmp (_String1="SharePointPortalSite.ico", _String2="..") returned 1 [0124.918] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42a91900, ftCreationTime.dwHighDateTime=0x1c6276b, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42a91900, ftLastWriteTime.dwHighDateTime=0x1c6276b, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0124.918] wcscmp (_String1="SharePointTeamSite.ico", _String2=".") returned 1 [0124.918] wcscmp (_String1="SharePointTeamSite.ico", _String2="..") returned 1 [0124.919] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0124.919] wcscmp (_String1="UICaptions", _String2=".") returned 1 [0124.919] wcscmp (_String1="UICaptions", _String2="..") returned 1 [0124.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6e48 [0124.919] wcscpy (in: _Dest=0x2fe6e48, _Source="C:\\ProgramData\\Microsoft\\OFFICE" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE") returned="C:\\ProgramData\\Microsoft\\OFFICE" [0124.919] wcscat (in: _Dest=0x2fe6e48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\" [0124.919] wcscat (in: _Dest=0x2fe6e48, _Source="UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0139.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0139.625] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0 [0139.625] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0139.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1ce0) returned 1 [0139.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5fc8) returned 1 [0139.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56768) returned 1 Thread: id = 209 os_tid = 0xbf0 [0121.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5ef0 [0121.125] wcscpy (in: _Dest=0x3da5ef0, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0121.125] wcscat (in: _Dest=0x3da5ef0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0121.125] wcscat (in: _Dest=0x3da5ef0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" [0121.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1f48 [0121.125] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0124.538] wcscmp (_String1=".", _String2=".") returned 0 [0124.538] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.538] wcscmp (_String1="..", _String2=".") returned 1 [0124.538] wcscmp (_String1="..", _String2="..") returned 0 [0124.538] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0124.538] wcscmp (_String1="Cache", _String2=".") returned 1 [0124.538] wcscmp (_String1="Cache", _String2="..") returned 1 [0124.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba330 [0124.538] wcscpy (in: _Dest=0x3eba330, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0124.538] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0124.538] wcscat (in: _Dest=0x3eba330, _Source="Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0126.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0126.922] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0126.922] wcscmp (_String1="tokens.dat", _String2=".") returned 1 [0126.922] wcscmp (_String1="tokens.dat", _String2="..") returned 1 [0126.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb61e0 [0126.922] wcscpy (in: _Dest=0x3eb61e0, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" [0126.922] wcscat (in: _Dest=0x3eb61e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0126.922] wcscat (in: _Dest=0x3eb61e0, _Source="tokens.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0126.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb61e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0126.923] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0126.923] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0126.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1f48) returned 1 [0126.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ef0) returned 1 [0126.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6170) returned 1 Thread: id = 210 os_tid = 0xbfc [0121.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e851a0 [0121.126] wcscpy (in: _Dest=0x3e851a0, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0121.126] wcscat (in: _Dest=0x3e851a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0121.126] wcscat (in: _Dest=0x3e851a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\*" [0121.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0121.127] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf810 [0121.127] wcscmp (_String1=".", _String2=".") returned 0 [0121.127] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.127] wcscmp (_String1="..", _String2=".") returned 1 [0121.127] wcscmp (_String1="..", _String2="..") returned 0 [0121.127] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0121.128] wcscmp (_String1="Outbound", _String2=".") returned 1 [0121.128] wcscmp (_String1="Outbound", _String2="..") returned 1 [0121.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48c10 [0121.128] wcscpy (in: _Dest=0x3d48c10, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0121.128] wcscat (in: _Dest=0x3d48c10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0121.128] wcscat (in: _Dest=0x3d48c10, _Source="Outbound" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound" [0121.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0121.168] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0121.169] wcscmp (_String1="PublishedData", _String2=".") returned 1 [0121.169] wcscmp (_String1="PublishedData", _String2="..") returned 1 [0121.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe5e88 [0121.169] wcscpy (in: _Dest=0x2fe5e88, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0121.169] wcscat (in: _Dest=0x2fe5e88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0121.169] wcscat (in: _Dest=0x2fe5e88, _Source="PublishedData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0121.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0121.170] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0121.170] wcscmp (_String1="StateData", _String2=".") returned 1 [0121.170] wcscmp (_String1="StateData", _String2="..") returned 1 [0121.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3d48d70 [0121.170] wcscpy (in: _Dest=0x3d48d70, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0121.170] wcscat (in: _Dest=0x3d48d70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0121.171] wcscat (in: _Dest=0x3d48d70, _Source="StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0121.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0121.172] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc5767280, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc5767280, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0121.172] wcscmp (_String1="Temp", _String2=".") returned 1 [0121.172] wcscmp (_String1="Temp", _String2="..") returned 1 [0121.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6248 [0121.173] wcscpy (in: _Dest=0x3de6248, _Source="C:\\ProgramData\\Microsoft\\RAC" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC") returned="C:\\ProgramData\\Microsoft\\RAC" [0121.173] wcscat (in: _Dest=0x3de6248, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\") returned="C:\\ProgramData\\Microsoft\\RAC\\" [0121.173] wcscat (in: _Dest=0x3de6248, _Source="Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0121.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e4 [0121.191] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc5767280, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc5767280, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0121.191] FindClose (in: hFindFile=0x3dcf810 | out: hFindFile=0x3dcf810) returned 1 [0121.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0121.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851a0) returned 1 [0121.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e567b0) returned 1 Thread: id = 211 os_tid = 0xbf4 [0121.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6018 [0121.128] wcscpy (in: _Dest=0x3de6018, _Source="C:\\ProgramData\\Microsoft\\Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search" [0121.128] wcscat (in: _Dest=0x3de6018, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\") returned="C:\\ProgramData\\Microsoft\\Search\\" [0121.128] wcscat (in: _Dest=0x3de6018, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\*") returned="C:\\ProgramData\\Microsoft\\Search\\*" [0121.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2418 [0121.129] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d640 [0124.003] wcscmp (_String1=".", _String2=".") returned 0 [0124.003] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.003] wcscmp (_String1="..", _String2=".") returned 1 [0124.004] wcscmp (_String1="..", _String2="..") returned 0 [0124.004] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0124.004] wcscmp (_String1="Data", _String2=".") returned 1 [0124.004] wcscmp (_String1="Data", _String2="..") returned 1 [0124.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6b0e0 [0124.004] wcscpy (in: _Dest=0x3e6b0e0, _Source="C:\\ProgramData\\Microsoft\\Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search" [0124.004] wcscat (in: _Dest=0x3e6b0e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\") returned="C:\\ProgramData\\Microsoft\\Search\\" [0124.004] wcscat (in: _Dest=0x3e6b0e0, _Source="Data" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data" [0133.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e6b0e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218 [0133.105] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0133.105] FindClose (in: hFindFile=0x7a2d640 | out: hFindFile=0x7a2d640) returned 1 [0133.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2418) returned 1 [0133.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6018) returned 1 [0133.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e566d8) returned 1 Thread: id = 212 os_tid = 0xbf8 [0121.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69d08 [0121.129] wcscpy (in: _Dest=0x3e69d08, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0121.129] wcscat (in: _Dest=0x3e69d08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0121.129] wcscat (in: _Dest=0x3e69d08, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\*") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\*" [0121.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0121.130] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0121.130] wcscmp (_String1=".", _String2=".") returned 0 [0121.130] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.130] wcscmp (_String1="..", _String2=".") returned 1 [0121.130] wcscmp (_String1="..", _String2="..") returned 0 [0121.131] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0121.131] wcscmp (_String1="Default Pictures", _String2=".") returned 1 [0121.131] wcscmp (_String1="Default Pictures", _String2="..") returned 1 [0121.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bd50 [0121.131] wcscpy (in: _Dest=0x3e1bd50, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0121.131] wcscat (in: _Dest=0x3e1bd50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0121.131] wcscat (in: _Dest=0x3e1bd50, _Source="Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0121.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0121.212] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9250c90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEBsYm5.dat", cAlternateFileName="")) returned 1 [0121.212] wcscmp (_String1="EEBsYm5.dat", _String2=".") returned 1 [0121.212] wcscmp (_String1="EEBsYm5.dat", _String2="..") returned 1 [0121.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5af0 [0121.213] wcscpy (in: _Dest=0x3da5af0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0121.213] wcscat (in: _Dest=0x3da5af0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0121.213] wcscat (in: _Dest=0x3da5af0, _Source="EEBsYm5.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat" [0121.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0121.214] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0121.214] wcscmp (_String1="guest.bmp", _String2=".") returned 1 [0121.214] wcscmp (_String1="guest.bmp", _String2="..") returned 1 [0121.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6770 [0121.214] wcscpy (in: _Dest=0x3da6770, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0121.214] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0121.214] wcscat (in: _Dest=0x3da6770, _Source="guest.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" [0121.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da6770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0121.216] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0121.216] wcscmp (_String1="user.bmp", _String2=".") returned 1 [0121.216] wcscmp (_String1="user.bmp", _String2="..") returned 1 [0121.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0121.216] wcscpy (in: _Dest=0x3d517a0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures" [0121.216] wcscat (in: _Dest=0x3d517a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\" [0121.216] wcscat (in: _Dest=0x3d517a0, _Source="user.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" [0121.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d517a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0121.217] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0121.217] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0121.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0121.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d08) returned 1 [0121.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf880) returned 1 Thread: id = 213 os_tid = 0xbe4 [0121.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5bb8 [0121.429] wcscpy (in: _Dest=0x3de5bb8, _Source="C:\\ProgramData\\Microsoft\\Vault" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault" [0121.429] wcscat (in: _Dest=0x3de5bb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\") returned="C:\\ProgramData\\Microsoft\\Vault\\" [0121.429] wcscat (in: _Dest=0x3de5bb8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\*") returned="C:\\ProgramData\\Microsoft\\Vault\\*" [0121.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4d70 [0121.429] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da40 [0124.492] wcscmp (_String1=".", _String2=".") returned 0 [0124.492] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.492] wcscmp (_String1="..", _String2=".") returned 1 [0124.492] wcscmp (_String1="..", _String2="..") returned 0 [0124.492] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0124.492] FindClose (in: hFindFile=0x7a2da40 | out: hFindFile=0x7a2da40) returned 1 [0124.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d70) returned 1 [0124.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5bb8) returned 1 [0124.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56690) returned 1 Thread: id = 215 os_tid = 0xbec [0121.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d078 [0121.429] wcscpy (in: _Dest=0x32d078, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0121.430] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0121.430] wcscat (in: _Dest=0x32d078, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*" [0121.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef43d0 [0121.430] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*", lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0124.517] wcscmp (_String1=".", _String2=".") returned 0 [0124.517] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.517] wcscmp (_String1="..", _String2=".") returned 1 [0124.517] wcscmp (_String1="..", _String2="..") returned 0 [0124.517] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0124.517] wcscmp (_String1="packages", _String2=".") returned 1 [0124.517] wcscmp (_String1="packages", _String2="..") returned 1 [0124.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053138 [0124.517] wcscpy (in: _Dest=0x3053138, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0124.517] wcscat (in: _Dest=0x3053138, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0124.518] wcscat (in: _Dest=0x3053138, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0125.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0125.513] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0125.513] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0125.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0125.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 [0125.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 216 os_tid = 0xbb8 [0121.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32ceb0 [0121.433] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0121.434] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0121.434] wcscat (in: _Dest=0x32ceb0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*" [0121.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3f00 [0121.434] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*", lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0124.518] wcscmp (_String1=".", _String2=".") returned 0 [0124.518] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.518] wcscmp (_String1="..", _String2=".") returned 1 [0124.518] wcscmp (_String1="..", _String2="..") returned 0 [0124.519] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0124.519] wcscmp (_String1="packages", _String2=".") returned 1 [0124.519] wcscmp (_String1="packages", _String2="..") returned 1 [0124.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053528 [0124.519] wcscpy (in: _Dest=0x3053528, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0124.519] wcscat (in: _Dest=0x3053528, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0124.519] wcscat (in: _Dest=0x3053528, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0125.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0125.516] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0125.516] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0125.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f00) returned 1 [0125.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 [0125.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 Thread: id = 217 os_tid = 0xbb4 [0121.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b878 [0121.435] wcscpy (in: _Dest=0x35b878, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0121.435] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0121.435] wcscat (in: _Dest=0x35b878, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" [0121.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef48a0 [0121.435] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db80 [0124.520] wcscmp (_String1=".", _String2=".") returned 0 [0124.520] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.520] wcscmp (_String1="..", _String2=".") returned 1 [0124.520] wcscmp (_String1="..", _String2="..") returned 0 [0124.520] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0124.520] wcscmp (_String1="packages", _String2=".") returned 1 [0124.520] wcscmp (_String1="packages", _String2="..") returned 1 [0124.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6180 [0124.520] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0124.520] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0124.520] wcscat (in: _Dest=0x2ff6180, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0125.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff6180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0125.519] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0125.519] FindClose (in: hFindFile=0x7a2db80 | out: hFindFile=0x7a2db80) returned 1 [0125.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a0) returned 1 [0125.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0125.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3054050) returned 1 Thread: id = 218 os_tid = 0x524 [0121.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d110 [0121.436] wcscpy (in: _Dest=0x32d110, _Source="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0121.436] wcscat (in: _Dest=0x32d110, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0121.436] wcscat (in: _Dest=0x32d110, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" [0121.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef37c8 [0121.437] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0124.545] wcscmp (_String1=".", _String2=".") returned 0 [0124.545] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.545] wcscmp (_String1="..", _String2=".") returned 1 [0124.545] wcscmp (_String1="..", _String2="..") returned 0 [0124.546] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xcae8da20, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0124.546] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0124.546] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0124.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053678 [0124.546] wcscpy (in: _Dest=0x3053678, _Source="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0124.546] wcscat (in: _Dest=0x3053678, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0124.546] wcscat (in: _Dest=0x3053678, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0125.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0125.556] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0125.556] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0125.556] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0125.556] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0125.556] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0125.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0125.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d110) returned 1 [0125.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df19e8) returned 1 Thread: id = 219 os_tid = 0xc08 [0121.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35aa08 [0121.444] wcscpy (in: _Dest=0x35aa08, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0121.444] wcscat (in: _Dest=0x35aa08, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0121.444] wcscat (in: _Dest=0x35aa08, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*" [0121.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0121.444] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0124.506] wcscmp (_String1=".", _String2=".") returned 0 [0124.507] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.513] wcscmp (_String1="..", _String2=".") returned 1 [0124.513] wcscmp (_String1="..", _String2="..") returned 0 [0124.513] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0124.513] wcscmp (_String1="packages", _String2=".") returned 1 [0124.513] wcscmp (_String1="packages", _String2="..") returned 1 [0124.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65b98 [0124.513] wcscpy (in: _Dest=0x3e65b98, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0124.513] wcscat (in: _Dest=0x3e65b98, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0124.513] wcscat (in: _Dest=0x3e65b98, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0125.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e65b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0125.509] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0125.509] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0125.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0125.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 [0125.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 Thread: id = 220 os_tid = 0x6c0 [0121.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b9d8 [0121.445] wcscpy (in: _Dest=0x35b9d8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0121.445] wcscat (in: _Dest=0x35b9d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0121.445] wcscat (in: _Dest=0x35b9d8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*" [0121.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2220 [0121.445] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0124.002] wcscmp (_String1=".", _String2=".") returned 0 [0124.002] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.002] wcscmp (_String1="..", _String2=".") returned 1 [0124.002] wcscmp (_String1="..", _String2="..") returned 0 [0124.002] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0124.002] wcscmp (_String1="packages", _String2=".") returned 1 [0124.002] wcscmp (_String1="packages", _String2="..") returned 1 [0124.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65ad8 [0124.002] wcscpy (in: _Dest=0x3e65ad8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0124.002] wcscat (in: _Dest=0x3e65ad8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0124.002] wcscat (in: _Dest=0x3e65ad8, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0133.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e65ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a5c [0133.102] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0133.102] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0133.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2220) returned 1 [0133.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b9d8) returned 1 [0133.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 Thread: id = 221 os_tid = 0x5ec [0121.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b7c8 [0121.446] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0121.446] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0121.446] wcscat (in: _Dest=0x35b7c8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" [0121.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4b08 [0121.446] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0124.544] wcscmp (_String1=".", _String2=".") returned 0 [0124.544] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.544] wcscmp (_String1="..", _String2=".") returned 1 [0124.544] wcscmp (_String1="..", _String2="..") returned 0 [0124.544] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0124.544] wcscmp (_String1="packages", _String2=".") returned 1 [0124.544] wcscmp (_String1="packages", _String2="..") returned 1 [0124.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6db8 [0124.544] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0124.544] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0124.544] wcscat (in: _Dest=0x2ff6db8, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0125.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff6db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0125.552] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0125.552] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0125.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b08) returned 1 [0125.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 [0125.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 222 os_tid = 0x668 [0121.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b718 [0121.447] wcscpy (in: _Dest=0x35b718, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0121.447] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0121.447] wcscat (in: _Dest=0x35b718, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" [0121.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4638 [0121.447] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d5c0 [0124.001] wcscmp (_String1=".", _String2=".") returned 0 [0124.001] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.001] wcscmp (_String1="..", _String2=".") returned 1 [0124.001] wcscmp (_String1="..", _String2="..") returned 0 [0124.001] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0124.001] wcscmp (_String1="packages", _String2=".") returned 1 [0124.001] wcscmp (_String1="packages", _String2="..") returned 1 [0124.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6968 [0124.001] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0124.001] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0124.001] wcscat (in: _Dest=0x2ff6968, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0138.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0138.598] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0138.599] FindClose (in: hFindFile=0x7a2d5c0 | out: hFindFile=0x7a2d5c0) returned 1 [0138.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4638) returned 1 [0138.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 [0138.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 Thread: id = 223 os_tid = 0x714 [0121.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0121.447] wcscpy (in: _Dest=0x32d700, _Source="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0121.448] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0121.448] wcscat (in: _Dest=0x32d700, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" [0121.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0121.448] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd80 [0124.542] wcscmp (_String1=".", _String2=".") returned 0 [0124.542] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.542] wcscmp (_String1="..", _String2=".") returned 1 [0124.542] wcscmp (_String1="..", _String2="..") returned 0 [0124.543] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb20410, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xd7101e80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0124.543] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0124.543] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0124.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053330 [0124.543] wcscpy (in: _Dest=0x3053330, _Source="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0124.543] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0124.543] wcscat (in: _Dest=0x3053330, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0125.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0125.548] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0125.548] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0125.548] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0125.548] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0125.548] FindClose (in: hFindFile=0x7a2dd80 | out: hFindFile=0x7a2dd80) returned 1 [0125.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0125.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0125.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 Thread: id = 224 os_tid = 0x508 [0121.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0121.448] wcscpy (in: _Dest=0x32d668, _Source="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0121.448] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0121.448] wcscat (in: _Dest=0x32d668, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*" [0121.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0121.449] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0124.539] wcscmp (_String1=".", _String2=".") returned 0 [0124.539] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.539] wcscmp (_String1="..", _String2=".") returned 1 [0124.539] wcscmp (_String1="..", _String2="..") returned 0 [0124.539] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe644ba0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x2fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0124.539] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0124.539] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0124.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053480 [0124.539] wcscpy (in: _Dest=0x3053480, _Source="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0124.540] wcscat (in: _Dest=0x3053480, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0124.540] wcscat (in: _Dest=0x3053480, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0125.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0125.545] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0125.545] wcscmp (_String1="VC_redist.x86.exe", _String2=".") returned 1 [0125.546] wcscmp (_String1="VC_redist.x86.exe", _String2="..") returned 1 [0125.546] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0125.546] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0125.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0125.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 [0125.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1c28) returned 1 Thread: id = 225 os_tid = 0x520 [0121.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b5b8 [0121.450] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0121.450] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0121.450] wcscat (in: _Dest=0x35b5b8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*" [0121.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb28e8 [0121.450] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0123.977] wcscmp (_String1=".", _String2=".") returned 0 [0123.977] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.977] wcscmp (_String1="..", _String2=".") returned 1 [0123.977] wcscmp (_String1="..", _String2="..") returned 0 [0123.977] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0123.977] wcscmp (_String1="packages", _String2=".") returned 1 [0123.977] wcscmp (_String1="packages", _String2="..") returned 1 [0123.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff62f0 [0123.977] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0123.977] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0123.977] wcscat (in: _Dest=0x2ff62f0, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0140.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65c58 [0140.512] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0140.512] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0140.512] wcscat (in: _Dest=0x3e65c58, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*" [0140.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc810 [0140.513] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0140.513] wcscmp (_String1=".", _String2=".") returned 0 [0140.513] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.513] wcscmp (_String1="..", _String2=".") returned 1 [0140.513] wcscmp (_String1="..", _String2="..") returned 0 [0140.513] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0140.513] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0140.513] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0140.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3d08 [0140.513] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0140.513] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0140.513] wcscat (in: _Dest=0x3dc3d08, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0140.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3daf178 [0140.514] wcscpy (in: _Dest=0x3daf178, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0140.514] wcscat (in: _Dest=0x3daf178, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\" [0140.514] wcscat (in: _Dest=0x3daf178, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*" [0140.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0140.514] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0140.514] wcscmp (_String1=".", _String2=".") returned 0 [0140.514] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.514] wcscmp (_String1="..", _String2=".") returned 1 [0140.514] wcscmp (_String1="..", _String2="..") returned 0 [0140.514] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8639f00, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe8639f00, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe8639f00, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.514] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0140.514] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0140.514] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.514] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0140.514] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0140.514] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0140.515] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0140.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0140.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf178) returned 1 [0140.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 [0140.515] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0140.515] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0140.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc810) returned 1 [0140.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 [0140.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 [0140.515] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0140.515] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0140.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb28e8) returned 1 [0140.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 [0140.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053c60) returned 1 Thread: id = 226 os_tid = 0x6b0 [0121.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_client.xml")) returned 0x20 [0121.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", dwFileAttributes=0x20) returned 0 [0121.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0121.661] GetLastError () returned 0x5 [0121.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", dwFileAttributes=0x20) returned 0 [0121.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1cb8) returned 1 Thread: id = 227 os_tid = 0xc20 [0121.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_extended.xml")) returned 0x20 [0121.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", dwFileAttributes=0x20) returned 0 [0121.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0121.662] GetLastError () returned 0x5 [0121.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", dwFileAttributes=0x20) returned 0 [0121.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d1a8) returned 1 Thread: id = 228 os_tid = 0xc28 [0121.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da66f0 [0121.453] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0121.453] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\" [0121.453] wcscat (in: _Dest=0x3da66f0, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*" [0121.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2b50 [0121.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0121.454] wcscmp (_String1=".", _String2=".") returned 0 [0121.454] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.454] wcscmp (_String1="..", _String2=".") returned 1 [0121.454] wcscmp (_String1="..", _String2="..") returned 0 [0121.454] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1318c0b0, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x1318c0b0, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0121.454] wcscmp (_String1="v3.0", _String2=".") returned 1 [0121.454] wcscmp (_String1="v3.0", _String2="..") returned 1 [0121.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ba20 [0121.454] wcscpy (in: _Dest=0x3e1ba20, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0121.454] wcscat (in: _Dest=0x3e1ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\" [0121.454] wcscat (in: _Dest=0x3e1ba20, _Source="v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0122.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0122.735] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0122.735] wcscmp (_String1="v3.5", _String2=".") returned 1 [0122.735] wcscmp (_String1="v3.5", _String2="..") returned 1 [0122.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ced8 [0122.735] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" [0122.735] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\" [0122.735] wcscat (in: _Dest=0x3e1ced8, _Source="v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0122.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0122.736] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0122.736] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0122.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2b50) returned 1 [0122.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0122.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5cf0) returned 1 Thread: id = 229 os_tid = 0xc24 [0121.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3db9be8 [0121.462] wcscpy (in: _Dest=0x3db9be8, _Source="C:\\ProgramData\\Microsoft\\RAC\\Outbound" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound" [0121.462] wcscat (in: _Dest=0x3db9be8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\" [0121.462] wcscat (in: _Dest=0x3db9be8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*" [0121.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2db8 [0121.462] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0121.462] wcscmp (_String1=".", _String2=".") returned 0 [0121.462] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.462] wcscmp (_String1="..", _String2=".") returned 1 [0121.462] wcscmp (_String1="..", _String2="..") returned 0 [0121.462] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.462] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0121.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 [0121.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db9be8) returned 1 [0121.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48c10) returned 1 Thread: id = 230 os_tid = 0xc1c [0121.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf198 [0121.464] wcscpy (in: _Dest=0x3edf198, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0121.464] wcscat (in: _Dest=0x3edf198, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\" [0121.464] wcscat (in: _Dest=0x3edf198, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*" [0121.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2db8 [0121.464] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0121.465] wcscmp (_String1=".", _String2=".") returned 0 [0121.465] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.465] wcscmp (_String1="..", _String2=".") returned 1 [0121.465] wcscmp (_String1="..", _String2="..") returned 0 [0121.465] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xea5ea0e0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0121.465] wcscmp (_String1="RacWmiDatabase.sdf", _String2=".") returned 1 [0121.465] wcscmp (_String1="RacWmiDatabase.sdf", _String2="..") returned 1 [0121.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8b48 [0121.465] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" [0121.465] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\" [0121.465] wcscat (in: _Dest=0x3eb8b48, _Source="RacWmiDatabase.sdf" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0122.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0122.890] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xea5ea0e0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0 [0122.890] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0122.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 [0122.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf198) returned 1 [0122.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5e88) returned 1 Thread: id = 231 os_tid = 0xbd4 [0121.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6608 [0121.466] wcscpy (in: _Dest=0x2fe6608, _Source="C:\\ProgramData\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0121.466] wcscat (in: _Dest=0x2fe6608, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\" [0121.466] wcscat (in: _Dest=0x2fe6608, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*" [0121.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3020 [0121.466] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0121.466] wcscmp (_String1=".", _String2=".") returned 0 [0121.466] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.466] wcscmp (_String1="..", _String2=".") returned 1 [0121.466] wcscmp (_String1="..", _String2="..") returned 0 [0121.466] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5093060, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5093060, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xea042ca0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0121.466] wcscmp (_String1="RacDatabase.sdf", _String2=".") returned 1 [0121.466] wcscmp (_String1="RacDatabase.sdf", _String2="..") returned 1 [0121.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d514d0 [0121.466] wcscpy (in: _Dest=0x3d514d0, _Source="C:\\ProgramData\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0121.467] wcscat (in: _Dest=0x3d514d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\" [0121.467] wcscat (in: _Dest=0x3d514d0, _Source="RacDatabase.sdf" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" [0122.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d514d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0122.739] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0122.739] wcscmp (_String1="RacMetaData.dat", _String2=".") returned 1 [0122.739] wcscmp (_String1="RacMetaData.dat", _String2="..") returned 1 [0122.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d517a0 [0122.739] wcscpy (in: _Dest=0x3d517a0, _Source="C:\\ProgramData\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData" [0122.739] wcscat (in: _Dest=0x3d517a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\" [0122.739] wcscat (in: _Dest=0x3d517a0, _Source="RacMetaData.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat") returned="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" [0122.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d517a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0122.740] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 0 [0122.740] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0122.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3020) returned 1 [0122.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6608) returned 1 [0122.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48d70) returned 1 Thread: id = 232 os_tid = 0xc2c [0121.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6298 [0121.467] wcscpy (in: _Dest=0x3de6298, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0121.467] wcscat (in: _Dest=0x3de6298, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\" [0121.467] wcscat (in: _Dest=0x3de6298, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*" [0121.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3288 [0121.467] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc5767280, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc5767280, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0121.467] wcscmp (_String1=".", _String2=".") returned 0 [0121.467] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc5767280, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc5767280, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.468] wcscmp (_String1="..", _String2=".") returned 1 [0121.468] wcscmp (_String1="..", _String2="..") returned 0 [0121.468] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc5741120, ftCreationTime.dwHighDateTime=0x1d699a5, ftLastAccessTime.dwLowDateTime=0xc5741120, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc5741120, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql7FE8.tmp", cAlternateFileName="")) returned 1 [0121.468] wcscmp (_String1="sql7FE8.tmp", _String2=".") returned 1 [0121.468] wcscmp (_String1="sql7FE8.tmp", _String2="..") returned 1 [0121.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf200 [0121.468] wcscpy (in: _Dest=0x3edf200, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0121.468] wcscat (in: _Dest=0x3edf200, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\" [0121.468] wcscat (in: _Dest=0x3edf200, _Source="sql7FE8.tmp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FE8.tmp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FE8.tmp" [0122.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0122.892] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc5767280, ftCreationTime.dwHighDateTime=0x1d699a5, ftLastAccessTime.dwLowDateTime=0xc5767280, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc5767280, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql7FF9.tmp", cAlternateFileName="")) returned 1 [0122.893] wcscmp (_String1="sql7FF9.tmp", _String2=".") returned 1 [0122.893] wcscmp (_String1="sql7FF9.tmp", _String2="..") returned 1 [0122.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf198 [0122.893] wcscpy (in: _Dest=0x3edf198, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp" [0122.893] wcscat (in: _Dest=0x3edf198, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\" [0122.893] wcscat (in: _Dest=0x3edf198, _Source="sql7FF9.tmp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp" [0122.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0122.894] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc5767280, ftCreationTime.dwHighDateTime=0x1d699a5, ftLastAccessTime.dwLowDateTime=0xc5767280, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc5767280, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql7FF9.tmp", cAlternateFileName="")) returned 0 [0122.894] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0122.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3288) returned 1 [0122.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6298) returned 1 [0122.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6248) returned 1 Thread: id = 233 os_tid = 0xbd0 [0121.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066e00 [0121.468] wcscpy (in: _Dest=0x3066e00, _Source="C:\\Users\\Public\\Desktop" | out: _Dest="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop" [0121.468] wcscat (in: _Dest=0x3066e00, _Source="\\" | out: _Dest="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\" [0121.468] wcscat (in: _Dest=0x3066e00, _Source="*" | out: _Dest="C:\\Users\\Public\\Desktop\\*") returned="C:\\Users\\Public\\Desktop\\*" [0121.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0121.468] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0121.469] wcscmp (_String1=".", _String2=".") returned 0 [0121.469] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.469] wcscmp (_String1="..", _String2=".") returned 1 [0121.469] wcscmp (_String1="..", _String2="..") returned 0 [0121.469] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f02380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1f02380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1f284e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x7cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0121.469] wcscmp (_String1="Adobe Reader X.lnk", _String2=".") returned 1 [0121.469] wcscmp (_String1="Adobe Reader X.lnk", _String2="..") returned 1 [0121.469] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b365a97, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b365a97, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b365a97, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.469] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.469] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.469] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe218dc90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe218dc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe218dc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x897, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0121.469] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1 [0121.469] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1 [0121.469] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77057c10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x7707dd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7707dd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x457, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0121.469] wcscmp (_String1="Mozilla Firefox.lnk", _String2=".") returned 1 [0121.469] wcscmp (_String1="Mozilla Firefox.lnk", _String2="..") returned 1 [0121.469] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77057c10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x7707dd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7707dd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x457, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0 [0121.470] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0121.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0121.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e00) returned 1 [0121.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 Thread: id = 234 os_tid = 0xad4 [0121.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066e00 [0121.471] wcscpy (in: _Dest=0x3066e00, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0121.471] wcscat (in: _Dest=0x3066e00, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0121.471] wcscat (in: _Dest=0x3066e00, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\*") returned="C:\\Users\\Public\\Documents\\*" [0121.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0121.471] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1771d97e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1771d97e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0121.472] wcscmp (_String1=".", _String2=".") returned 0 [0121.472] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x1771d97e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1771d97e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.472] wcscmp (_String1="..", _String2=".") returned 1 [0121.472] wcscmp (_String1="..", _String2="..") returned 0 [0121.472] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b5ed1fc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.472] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.472] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.472] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0121.472] wcscmp (_String1="My Music", _String2=".") returned 1 [0121.472] wcscmp (_String1="My Music", _String2="..") returned 1 [0121.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6518 [0121.472] wcscpy (in: _Dest=0x3de6518, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0121.472] wcscat (in: _Dest=0x3de6518, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0121.472] wcscat (in: _Dest=0x3de6518, _Source="My Music" | out: _Dest="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music" [0121.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0121.881] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0121.882] wcscmp (_String1="My Pictures", _String2=".") returned 1 [0121.882] wcscmp (_String1="My Pictures", _String2="..") returned 1 [0121.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14460 [0121.882] wcscpy (in: _Dest=0x3e14460, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0121.882] wcscat (in: _Dest=0x3e14460, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0121.882] wcscat (in: _Dest=0x3e14460, _Source="My Pictures" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures" [0121.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0121.884] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0121.884] wcscmp (_String1="My Videos", _String2=".") returned 1 [0121.884] wcscmp (_String1="My Videos", _String2="..") returned 1 [0121.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e58ce8 [0121.884] wcscpy (in: _Dest=0x3e58ce8, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents" [0121.884] wcscat (in: _Dest=0x3e58ce8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\" [0121.884] wcscat (in: _Dest=0x3e58ce8, _Source="My Videos" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos" [0121.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e58ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0121.885] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x176f781e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x176f781e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x176f781e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0121.885] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0121.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0121.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066e00) returned 1 [0121.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf810) returned 1 Thread: id = 235 os_tid = 0xad0 [0121.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066b00 [0121.473] wcscpy (in: _Dest=0x3066b00, _Source="C:\\Users\\Public\\Downloads" | out: _Dest="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads" [0121.473] wcscat (in: _Dest=0x3066b00, _Source="\\" | out: _Dest="C:\\Users\\Public\\Downloads\\") returned="C:\\Users\\Public\\Downloads\\" [0121.473] wcscat (in: _Dest=0x3066b00, _Source="*" | out: _Dest="C:\\Users\\Public\\Downloads\\*") returned="C:\\Users\\Public\\Downloads\\*" [0121.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3758 [0121.473] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d80 [0121.474] wcscmp (_String1=".", _String2=".") returned 0 [0121.474] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.474] wcscmp (_String1="..", _String2=".") returned 1 [0121.474] wcscmp (_String1="..", _String2="..") returned 0 [0121.474] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.474] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.474] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.474] FindNextFileW (in: hFindFile=0x3066d80, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3fe018, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.474] FindClose (in: hFindFile=0x3066d80 | out: hFindFile=0x3066d80) returned 1 [0121.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3758) returned 1 [0121.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b00) returned 1 [0121.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf710) returned 1 Thread: id = 236 os_tid = 0xacc [0121.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf710 [0121.476] wcscpy (in: _Dest=0x3dcf710, _Source="C:\\Users\\Public\\Favorites" | out: _Dest="C:\\Users\\Public\\Favorites") returned="C:\\Users\\Public\\Favorites" [0121.476] wcscat (in: _Dest=0x3dcf710, _Source="\\" | out: _Dest="C:\\Users\\Public\\Favorites\\") returned="C:\\Users\\Public\\Favorites\\" [0121.476] wcscat (in: _Dest=0x3dcf710, _Source="*" | out: _Dest="C:\\Users\\Public\\Favorites\\*") returned="C:\\Users\\Public\\Favorites\\*" [0121.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3758 [0121.476] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0121.476] wcscmp (_String1=".", _String2=".") returned 0 [0121.476] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.476] wcscmp (_String1="..", _String2=".") returned 1 [0121.477] wcscmp (_String1="..", _String2="..") returned 0 [0121.477] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa16b2e6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xfa16b2e6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.477] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0121.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3758) returned 1 [0121.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf710) returned 1 [0121.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf610) returned 1 Thread: id = 237 os_tid = 0xac8 [0121.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf610 [0121.478] wcscpy (in: _Dest=0x3dcf610, _Source="C:\\Users\\Public\\Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries" [0121.478] wcscat (in: _Dest=0x3dcf610, _Source="\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\" [0121.478] wcscat (in: _Dest=0x3dcf610, _Source="*" | out: _Dest="C:\\Users\\Public\\Libraries\\*") returned="C:\\Users\\Public\\Libraries\\*" [0121.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3758 [0121.478] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0121.479] wcscmp (_String1=".", _String2=".") returned 0 [0121.479] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b5ed1fc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.479] wcscmp (_String1="..", _String2=".") returned 1 [0121.479] wcscmp (_String1="..", _String2="..") returned 0 [0121.479] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b424179, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b424179, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b424179, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.479] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.479] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.479] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b5c709c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0121.479] wcscmp (_String1="RecordedTV.library-ms", _String2=".") returned 1 [0121.479] wcscmp (_String1="RecordedTV.library-ms", _String2="..") returned 1 [0121.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edff68 [0121.480] wcscpy (in: _Dest=0x3edff68, _Source="C:\\Users\\Public\\Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries" [0121.480] wcscat (in: _Dest=0x3edff68, _Source="\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\" [0121.480] wcscat (in: _Dest=0x3edff68, _Source="RecordedTV.library-ms" | out: _Dest="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" [0122.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edff68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0122.743] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3fe018, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b5c709c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b5ed1fc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0122.743] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0122.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3758) returned 1 [0122.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf610) returned 1 [0122.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfd50) returned 1 Thread: id = 238 os_tid = 0xb78 [0121.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78f78 [0121.480] wcscpy (in: _Dest=0x3e78f78, _Source="C:\\Users\\Public\\Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music" [0121.480] wcscat (in: _Dest=0x3e78f78, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\") returned="C:\\Users\\Public\\Music\\" [0121.480] wcscat (in: _Dest=0x3e78f78, _Source="*" | out: _Dest="C:\\Users\\Public\\Music\\*") returned="C:\\Users\\Public\\Music\\*" [0121.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0121.480] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0121.481] wcscmp (_String1=".", _String2=".") returned 0 [0121.481] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.481] wcscmp (_String1="..", _String2=".") returned 1 [0121.481] wcscmp (_String1="..", _String2="..") returned 0 [0121.481] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3b1d58, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.481] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.481] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.481] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0121.481] wcscmp (_String1="Sample Music", _String2=".") returned 1 [0121.481] wcscmp (_String1="Sample Music", _String2="..") returned 1 [0121.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de67e8 [0121.481] wcscpy (in: _Dest=0x3de67e8, _Source="C:\\Users\\Public\\Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music" [0121.481] wcscat (in: _Dest=0x3de67e8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\") returned="C:\\Users\\Public\\Music\\" [0121.481] wcscat (in: _Dest=0x3de67e8, _Source="Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0122.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0122.759] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 0 [0122.759] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0122.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0122.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 [0122.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e799c0) returned 1 Thread: id = 239 os_tid = 0xc54 [0121.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066d80 [0121.482] wcscpy (in: _Dest=0x3066d80, _Source="C:\\Users\\Public\\Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures" [0121.482] wcscat (in: _Dest=0x3066d80, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\") returned="C:\\Users\\Public\\Pictures\\" [0121.482] wcscat (in: _Dest=0x3066d80, _Source="*" | out: _Dest="C:\\Users\\Public\\Pictures\\*") returned="C:\\Users\\Public\\Pictures\\*" [0121.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3c28 [0121.482] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0121.482] wcscmp (_String1=".", _String2=".") returned 0 [0121.482] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.483] wcscmp (_String1="..", _String2=".") returned 1 [0121.483] wcscmp (_String1="..", _String2="..") returned 0 [0121.483] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b38bbf8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3b1d58, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.483] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.483] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.483] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0121.483] wcscmp (_String1="Sample Pictures", _String2=".") returned 1 [0121.483] wcscmp (_String1="Sample Pictures", _String2="..") returned 1 [0121.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe63c8 [0121.483] wcscpy (in: _Dest=0x2fe63c8, _Source="C:\\Users\\Public\\Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures" [0121.483] wcscat (in: _Dest=0x2fe63c8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\") returned="C:\\Users\\Public\\Pictures\\" [0121.483] wcscat (in: _Dest=0x2fe63c8, _Source="Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0121.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe63c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0121.888] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 0 [0121.888] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0121.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3c28) returned 1 [0121.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066d80) returned 1 [0121.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066500) returned 1 Thread: id = 240 os_tid = 0xb74 [0121.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e84ed0 [0121.484] wcscpy (in: _Dest=0x3e84ed0, _Source="C:\\Users\\Public\\Recorded TV" | out: _Dest="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV" [0121.484] wcscat (in: _Dest=0x3e84ed0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\") returned="C:\\Users\\Public\\Recorded TV\\" [0121.484] wcscat (in: _Dest=0x3e84ed0, _Source="*" | out: _Dest="C:\\Users\\Public\\Recorded TV\\*") returned="C:\\Users\\Public\\Recorded TV\\*" [0121.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3e90 [0121.484] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0121.485] wcscmp (_String1=".", _String2=".") returned 0 [0121.485] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.485] wcscmp (_String1="..", _String2=".") returned 1 [0121.485] wcscmp (_String1="..", _String2="..") returned 0 [0121.485] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x8426788a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x8426788a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.485] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.485] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.485] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0121.485] wcscmp (_String1="Sample Media", _String2=".") returned 1 [0121.485] wcscmp (_String1="Sample Media", _String2="..") returned 1 [0121.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe64e8 [0121.485] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\Public\\Recorded TV" | out: _Dest="C:\\Users\\Public\\Recorded TV") returned="C:\\Users\\Public\\Recorded TV" [0121.485] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\") returned="C:\\Users\\Public\\Recorded TV\\" [0121.485] wcscat (in: _Dest=0x2fe64e8, _Source="Sample Media" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media" [0121.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe64e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0121.890] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0 [0121.891] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0121.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3e90) returned 1 [0121.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84ed0) returned 1 [0121.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30670c0) returned 1 Thread: id = 241 os_tid = 0xb64 [0121.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066f40 [0121.487] wcscpy (in: _Dest=0x3066f40, _Source="C:\\Users\\Public\\Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos" [0121.487] wcscat (in: _Dest=0x3066f40, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\") returned="C:\\Users\\Public\\Videos\\" [0121.487] wcscat (in: _Dest=0x3066f40, _Source="*" | out: _Dest="C:\\Users\\Public\\Videos\\*") returned="C:\\Users\\Public\\Videos\\*" [0121.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb40f8 [0121.487] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0121.487] wcscmp (_String1=".", _String2=".") returned 0 [0121.487] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa191445, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.487] wcscmp (_String1="..", _String2=".") returned 1 [0121.487] wcscmp (_String1="..", _String2="..") returned 0 [0121.487] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b38bbf8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b38bbf8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b38bbf8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.487] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.487] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.488] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0121.488] wcscmp (_String1="Sample Videos", _String2=".") returned 1 [0121.488] wcscmp (_String1="Sample Videos", _String2="..") returned 1 [0121.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d48c10 [0121.488] wcscpy (in: _Dest=0x3d48c10, _Source="C:\\Users\\Public\\Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos" [0121.488] wcscat (in: _Dest=0x3d48c10, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\") returned="C:\\Users\\Public\\Videos\\" [0121.488] wcscat (in: _Dest=0x3d48c10, _Source="Sample Videos" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos" [0121.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0121.893] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 0 [0121.893] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0121.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb40f8) returned 1 [0121.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f40) returned 1 [0121.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79250) returned 1 Thread: id = 242 os_tid = 0xb6c [0121.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df1448 [0121.488] wcscpy (in: _Dest=0x3df1448, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0121.488] wcscat (in: _Dest=0x3df1448, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0121.488] wcscat (in: _Dest=0x3df1448, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*" [0121.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb4360 [0121.488] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0124.954] wcscmp (_String1=".", _String2=".") returned 0 [0124.954] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.955] wcscmp (_String1="..", _String2=".") returned 1 [0124.955] wcscmp (_String1="..", _String2="..") returned 0 [0124.955] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf171085c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0124.955] wcscmp (_String1="usertile10.bmp", _String2=".") returned 1 [0124.955] wcscmp (_String1="usertile10.bmp", _String2="..") returned 1 [0124.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30531e0 [0124.955] wcscpy (in: _Dest=0x30531e0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0124.955] wcscat (in: _Dest=0x30531e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0124.955] wcscat (in: _Dest=0x30531e0, _Source="usertile10.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" [0132.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30531e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0132.399] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf17369bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0132.399] wcscmp (_String1="usertile11.bmp", _String2=".") returned 1 [0132.400] wcscmp (_String1="usertile11.bmp", _String2="..") returned 1 [0132.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053528 [0132.400] wcscpy (in: _Dest=0x3053528, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.400] wcscat (in: _Dest=0x3053528, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.400] wcscat (in: _Dest=0x3053528, _Source="usertile11.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" [0132.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0132.401] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52733076, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52733076, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0132.401] wcscmp (_String1="usertile12.bmp", _String2=".") returned 1 [0132.401] wcscmp (_String1="usertile12.bmp", _String2="..") returned 1 [0132.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053fa8 [0132.402] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.402] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.402] wcscat (in: _Dest=0x3053fa8, _Source="usertile12.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" [0132.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0132.404] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0132.404] wcscmp (_String1="usertile13.bmp", _String2=".") returned 1 [0132.404] wcscmp (_String1="usertile13.bmp", _String2="..") returned 1 [0132.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053870 [0132.404] wcscpy (in: _Dest=0x3053870, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.404] wcscat (in: _Dest=0x3053870, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.404] wcscat (in: _Dest=0x3053870, _Source="usertile13.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" [0132.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0132.406] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e5abbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0132.406] wcscmp (_String1="usertile14.bmp", _String2=".") returned 1 [0132.406] wcscmp (_String1="usertile14.bmp", _String2="..") returned 1 [0132.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3052fe8 [0132.406] wcscpy (in: _Dest=0x3052fe8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.406] wcscat (in: _Dest=0x3052fe8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.406] wcscat (in: _Dest=0x3052fe8, _Source="usertile14.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" [0132.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0132.407] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5277f346, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5277f346, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e80d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0132.407] wcscmp (_String1="usertile15.bmp", _String2=".") returned 1 [0132.407] wcscmp (_String1="usertile15.bmp", _String2="..") returned 1 [0132.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053138 [0132.407] wcscpy (in: _Dest=0x3053138, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.407] wcscat (in: _Dest=0x3053138, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.407] wcscat (in: _Dest=0x3053138, _Source="usertile15.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" [0132.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0132.409] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527a54ae, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527a54ae, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0132.409] wcscmp (_String1="usertile16.bmp", _String2=".") returned 1 [0132.409] wcscmp (_String1="usertile16.bmp", _String2="..") returned 1 [0132.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053b10 [0132.409] wcscpy (in: _Dest=0x3053b10, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.409] wcscat (in: _Dest=0x3053b10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.409] wcscat (in: _Dest=0x3053b10, _Source="usertile16.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" [0132.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0132.411] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0132.411] wcscmp (_String1="usertile17.bmp", _String2=".") returned 1 [0132.411] wcscmp (_String1="usertile17.bmp", _String2="..") returned 1 [0132.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3054050 [0132.411] wcscpy (in: _Dest=0x3054050, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.411] wcscat (in: _Dest=0x3054050, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.411] wcscat (in: _Dest=0x3054050, _Source="usertile17.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" [0132.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3054050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0132.412] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1eccfdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0132.412] wcscmp (_String1="usertile18.bmp", _String2=".") returned 1 [0132.413] wcscmp (_String1="usertile18.bmp", _String2="..") returned 1 [0132.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053330 [0132.413] wcscpy (in: _Dest=0x3053330, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.413] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.413] wcscat (in: _Dest=0x3053330, _Source="usertile18.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" [0132.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0132.417] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ef313c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0132.417] wcscmp (_String1="usertile19.bmp", _String2=".") returned 1 [0132.417] wcscmp (_String1="usertile19.bmp", _String2="..") returned 1 [0132.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3052f40 [0132.417] wcscpy (in: _Dest=0x3052f40, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.417] wcscat (in: _Dest=0x3052f40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.417] wcscat (in: _Dest=0x3052f40, _Source="usertile19.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" [0132.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0132.419] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0132.419] wcscmp (_String1="usertile20.bmp", _String2=".") returned 1 [0132.419] wcscmp (_String1="usertile20.bmp", _String2="..") returned 1 [0132.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053678 [0132.419] wcscpy (in: _Dest=0x3053678, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.419] wcscat (in: _Dest=0x3053678, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.419] wcscat (in: _Dest=0x3053678, _Source="usertile20.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" [0132.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0132.420] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528178e6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528178e6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0132.420] wcscmp (_String1="usertile21.bmp", _String2=".") returned 1 [0132.420] wcscmp (_String1="usertile21.bmp", _String2="..") returned 1 [0132.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053d08 [0132.420] wcscpy (in: _Dest=0x3053d08, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.420] wcscat (in: _Dest=0x3053d08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.420] wcscat (in: _Dest=0x3053d08, _Source="usertile21.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" [0132.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0132.422] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5283da4e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5283da4e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f3f3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0132.422] wcscmp (_String1="usertile22.bmp", _String2=".") returned 1 [0132.422] wcscmp (_String1="usertile22.bmp", _String2="..") returned 1 [0132.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053720 [0132.422] wcscpy (in: _Dest=0x3053720, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.422] wcscat (in: _Dest=0x3053720, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.422] wcscat (in: _Dest=0x3053720, _Source="usertile22.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" [0132.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0132.423] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52863bb6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52863bb6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f6555c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0132.423] wcscmp (_String1="usertile23.bmp", _String2=".") returned 1 [0132.423] wcscmp (_String1="usertile23.bmp", _String2="..") returned 1 [0132.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053480 [0132.423] wcscpy (in: _Dest=0x3053480, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.424] wcscat (in: _Dest=0x3053480, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.424] wcscat (in: _Dest=0x3053480, _Source="usertile23.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" [0132.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0132.425] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528afe86, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528afe86, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2238f7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0132.425] wcscmp (_String1="usertile24.bmp", _String2=".") returned 1 [0132.425] wcscmp (_String1="usertile24.bmp", _String2="..") returned 1 [0132.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053f00 [0132.425] wcscpy (in: _Dest=0x3053f00, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.425] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.425] wcscat (in: _Dest=0x3053f00, _Source="usertile24.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" [0132.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0132.427] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf225f0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0132.427] wcscmp (_String1="usertile25.bmp", _String2=".") returned 1 [0132.427] wcscmp (_String1="usertile25.bmp", _String2="..") returned 1 [0132.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3052df0 [0132.427] wcscpy (in: _Dest=0x3052df0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.427] wcscat (in: _Dest=0x3052df0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.427] wcscat (in: _Dest=0x3052df0, _Source="usertile25.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" [0132.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0132.429] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf228523c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0132.429] wcscmp (_String1="usertile26.bmp", _String2=".") returned 1 [0132.429] wcscmp (_String1="usertile26.bmp", _String2="..") returned 1 [0132.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e7a640 [0132.429] wcscpy (in: _Dest=0x3e7a640, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.429] wcscat (in: _Dest=0x3e7a640, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.429] wcscat (in: _Dest=0x3e7a640, _Source="usertile26.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" [0132.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7a640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0132.431] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529222be, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529222be, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0132.431] wcscmp (_String1="usertile27.bmp", _String2=".") returned 1 [0132.431] wcscmp (_String1="usertile27.bmp", _String2="..") returned 1 [0132.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e7b750 [0132.431] wcscpy (in: _Dest=0x3e7b750, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.431] wcscat (in: _Dest=0x3e7b750, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.431] wcscat (in: _Dest=0x3e7b750, _Source="usertile27.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" [0132.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7b750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0132.433] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52948426, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52948426, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0132.433] wcscmp (_String1="usertile28.bmp", _String2=".") returned 1 [0132.433] wcscmp (_String1="usertile28.bmp", _String2="..") returned 1 [0132.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e7a2f8 [0132.433] wcscpy (in: _Dest=0x3e7a2f8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.433] wcscat (in: _Dest=0x3e7a2f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.433] wcscat (in: _Dest=0x3e7a2f8, _Source="usertile28.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" [0132.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7a2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0132.435] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296e58e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5296e58e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22d14fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0132.435] wcscmp (_String1="usertile29.bmp", _String2=".") returned 1 [0132.435] wcscmp (_String1="usertile29.bmp", _String2="..") returned 1 [0132.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e79d10 [0132.435] wcscpy (in: _Dest=0x3e79d10, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.435] wcscat (in: _Dest=0x3e79d10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.435] wcscat (in: _Dest=0x3e79d10, _Source="usertile29.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" [0132.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e79d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34 [0132.452] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529946f6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529946f6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0132.452] wcscmp (_String1="usertile30.bmp", _String2=".") returned 1 [0132.452] wcscmp (_String1="usertile30.bmp", _String2="..") returned 1 [0132.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e7acd0 [0132.452] wcscpy (in: _Dest=0x3e7acd0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0132.453] wcscat (in: _Dest=0x3e7acd0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0132.453] wcscat (in: _Dest=0x3e7acd0, _Source="usertile30.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" [0132.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7acd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0133.174] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529ba85e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529ba85e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0133.174] wcscmp (_String1="usertile31.bmp", _String2=".") returned 1 [0133.174] wcscmp (_String1="usertile31.bmp", _String2="..") returned 1 [0133.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0133.174] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0133.174] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0133.174] wcscat (in: _Dest=0x30539c0, _Source="usertile31.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" [0140.878] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp")) returned 0x20 [0140.889] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0140.890] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.890] GetLastError () returned 0x5 [0140.890] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0140.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.890] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a06b2e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a06b2e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0140.890] wcscmp (_String1="usertile32.bmp", _String2=".") returned 1 [0140.890] wcscmp (_String1="usertile32.bmp", _String2="..") returned 1 [0140.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.890] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.890] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.890] wcscat (in: _Dest=0x30539c0, _Source="usertile32.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" [0140.890] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp")) returned 0x20 [0140.891] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0140.891] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.891] GetLastError () returned 0x5 [0140.891] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0140.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.891] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a52dfe, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a52dfe, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0140.891] wcscmp (_String1="usertile33.bmp", _String2=".") returned 1 [0140.891] wcscmp (_String1="usertile33.bmp", _String2="..") returned 1 [0140.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.891] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.891] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.892] wcscat (in: _Dest=0x30539c0, _Source="usertile33.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" [0140.892] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp")) returned 0x20 [0140.892] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0140.892] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.892] GetLastError () returned 0x5 [0140.892] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0140.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.893] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a78f66, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a78f66, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23b5d3c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0140.893] wcscmp (_String1="usertile34.bmp", _String2=".") returned 1 [0140.893] wcscmp (_String1="usertile34.bmp", _String2="..") returned 1 [0140.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.893] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.893] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.893] wcscat (in: _Dest=0x30539c0, _Source="usertile34.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" [0140.893] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp")) returned 0x20 [0140.893] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0140.893] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.894] GetLastError () returned 0x5 [0140.894] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0140.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.894] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a9f0ce, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a9f0ce, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23dbe9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0140.894] wcscmp (_String1="usertile35.bmp", _String2=".") returned 1 [0140.894] wcscmp (_String1="usertile35.bmp", _String2="..") returned 1 [0140.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.894] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.894] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.894] wcscat (in: _Dest=0x30539c0, _Source="usertile35.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" [0140.894] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp")) returned 0x20 [0140.906] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0140.906] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.906] GetLastError () returned 0x5 [0140.906] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0140.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.906] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2401ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0140.906] wcscmp (_String1="usertile36.bmp", _String2=".") returned 1 [0140.906] wcscmp (_String1="usertile36.bmp", _String2="..") returned 1 [0140.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.906] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.906] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.906] wcscat (in: _Dest=0x30539c0, _Source="usertile36.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" [0140.907] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp")) returned 0x20 [0140.907] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0140.907] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.907] GetLastError () returned 0x5 [0140.907] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0140.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.907] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf242815c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0140.907] wcscmp (_String1="usertile37.bmp", _String2=".") returned 1 [0140.908] wcscmp (_String1="usertile37.bmp", _String2="..") returned 1 [0140.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.908] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.908] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.908] wcscat (in: _Dest=0x30539c0, _Source="usertile37.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" [0140.908] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp")) returned 0x20 [0140.908] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0140.908] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.908] GetLastError () returned 0x5 [0140.908] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0140.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.908] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b3766e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b3766e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf244e2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0140.909] wcscmp (_String1="usertile38.bmp", _String2=".") returned 1 [0140.909] wcscmp (_String1="usertile38.bmp", _String2="..") returned 1 [0140.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.909] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.909] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.909] wcscat (in: _Dest=0x30539c0, _Source="usertile38.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" [0140.909] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp")) returned 0x20 [0140.909] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0140.909] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.909] GetLastError () returned 0x5 [0140.909] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0140.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.910] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b5d7d6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b5d7d6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf247441c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0140.910] wcscmp (_String1="usertile39.bmp", _String2=".") returned 1 [0140.910] wcscmp (_String1="usertile39.bmp", _String2="..") returned 1 [0140.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.910] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.910] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.910] wcscat (in: _Dest=0x30539c0, _Source="usertile39.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" [0140.910] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp")) returned 0x20 [0140.950] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0140.950] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.950] GetLastError () returned 0x5 [0140.950] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0140.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.950] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b8393e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b8393e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0140.950] wcscmp (_String1="usertile40.bmp", _String2=".") returned 1 [0140.951] wcscmp (_String1="usertile40.bmp", _String2="..") returned 1 [0140.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.951] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.951] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.951] wcscat (in: _Dest=0x30539c0, _Source="usertile40.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" [0140.951] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp")) returned 0x20 [0140.951] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0140.951] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.952] GetLastError () returned 0x5 [0140.952] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0140.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.952] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ba9aa6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52ba9aa6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0140.952] wcscmp (_String1="usertile41.bmp", _String2=".") returned 1 [0140.952] wcscmp (_String1="usertile41.bmp", _String2="..") returned 1 [0140.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.952] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.952] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.952] wcscat (in: _Dest=0x30539c0, _Source="usertile41.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" [0140.952] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp")) returned 0x20 [0140.953] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0140.953] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.953] GetLastError () returned 0x5 [0140.953] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0140.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.953] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bcfc0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bcfc0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf257edbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0140.954] wcscmp (_String1="usertile42.bmp", _String2=".") returned 1 [0140.954] wcscmp (_String1="usertile42.bmp", _String2="..") returned 1 [0140.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.954] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.954] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.954] wcscat (in: _Dest=0x30539c0, _Source="usertile42.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" [0140.954] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp")) returned 0x20 [0140.954] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0140.954] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.955] GetLastError () returned 0x5 [0140.955] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0140.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.955] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bf5d76, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bf5d76, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25a4f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0140.955] wcscmp (_String1="usertile43.bmp", _String2=".") returned 1 [0140.955] wcscmp (_String1="usertile43.bmp", _String2="..") returned 1 [0140.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.955] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.955] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.955] wcscat (in: _Dest=0x30539c0, _Source="usertile43.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" [0140.955] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp")) returned 0x20 [0140.956] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0140.956] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.956] GetLastError () returned 0x5 [0140.956] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0140.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.956] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0140.956] wcscmp (_String1="usertile44.bmp", _String2=".") returned 1 [0140.956] wcscmp (_String1="usertile44.bmp", _String2="..") returned 1 [0140.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0140.956] wcscpy (in: _Dest=0x30539c0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" [0140.956] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.956] wcscat (in: _Dest=0x30539c0, _Source="usertile44.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" [0140.957] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp")) returned 0x20 [0140.957] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0140.957] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.957] GetLastError () returned 0x5 [0140.957] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0140.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 [0140.959] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0140.959] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0140.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb4360) returned 1 [0140.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1448) returned 1 [0140.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bd50) returned 1 Thread: id = 243 os_tid = 0xb70 [0121.489] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\eebsym5.dat")) returned 0x2020 [0124.514] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x20) returned 1 [0132.558] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\eebsym5.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b44 [0132.559] GetFileSizeEx (in: hFile=0x1b44, lpFileSize=0x801f83c | out: lpFileSize=0x801f83c*=0) returned 1 [0132.559] FlushFileBuffers (hFile=0x1b44) returned 1 [0135.682] CloseHandle (hObject=0x1b44) returned 1 [0135.683] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x2020) returned 1 [0135.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5af0) returned 1 Thread: id = 244 os_tid = 0xb60 [0121.490] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp")) returned 0x20 [0124.514] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0124.515] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.515] GetLastError () returned 0x5 [0124.515] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0124.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 Thread: id = 245 os_tid = 0xb5c [0121.490] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp")) returned 0x20 [0121.490] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0121.491] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0121.491] GetLastError () returned 0x5 [0121.491] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0121.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 Thread: id = 246 os_tid = 0x4bc [0121.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edffd0 [0121.493] wcscpy (in: _Dest=0x3edffd0, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0121.493] wcscat (in: _Dest=0x3edffd0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0121.493] wcscat (in: _Dest=0x3edffd0, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\*" [0121.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb45c8 [0121.493] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\*", lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0121.493] wcscmp (_String1=".", _String2=".") returned 0 [0121.493] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.493] wcscmp (_String1="..", _String2=".") returned 1 [0121.493] wcscmp (_String1="..", _String2="..") returned 0 [0121.493] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110", cAlternateFileName="580302~1.110")) returned 1 [0121.493] wcscmp (_String1="58.0.3029.110", _String2=".") returned 1 [0121.494] wcscmp (_String1="58.0.3029.110", _String2="..") returned 1 [0121.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6270 [0121.494] wcscpy (in: _Dest=0x3da6270, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0121.494] wcscat (in: _Dest=0x3da6270, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0121.494] wcscat (in: _Dest=0x3da6270, _Source="58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0121.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da6270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0121.823] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf8c1abb6, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0xee558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0121.823] wcscmp (_String1="chrome.exe", _String2=".") returned 1 [0121.823] wcscmp (_String1="chrome.exe", _String2="..") returned 1 [0121.823] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="CHROME~1.XML")) returned 1 [0121.823] wcscmp (_String1="chrome.VisualElementsManifest.xml", _String2=".") returned 1 [0121.823] wcscmp (_String1="chrome.VisualElementsManifest.xml", _String2="..") returned 1 [0121.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053fa8 [0121.823] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0121.824] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0121.824] wcscat (in: _Dest=0x3053fa8, _Source="chrome.VisualElementsManifest.xml" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml") returned="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" [0121.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0121.825] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1 [0121.825] wcscmp (_String1="SetupMetrics", _String2=".") returned 1 [0121.825] wcscmp (_String1="SetupMetrics", _String2="..") returned 1 [0121.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015670 [0121.825] wcscpy (in: _Dest=0x3015670, _Source="C:\\Program Files\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application") returned="C:\\Program Files\\Google\\Chrome\\Application" [0121.825] wcscat (in: _Dest=0x3015670, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\" [0121.825] wcscat (in: _Dest=0x3015670, _Source="SetupMetrics" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" [0121.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3015670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0121.827] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0 [0121.827] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0121.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb45c8) returned 1 [0121.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edffd0) returned 1 [0121.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6488) returned 1 Thread: id = 247 os_tid = 0xac4 [0121.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6b08 [0121.494] wcscpy (in: _Dest=0x3de6b08, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0121.495] wcscat (in: _Dest=0x3de6b08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0121.495] wcscat (in: _Dest=0x3de6b08, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\*" [0121.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb4830 [0121.495] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\*", lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0121.664] wcscmp (_String1=".", _String2=".") returned 0 [0121.664] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.983] wcscmp (_String1="..", _String2=".") returned 1 [0121.983] wcscmp (_String1="..", _String2="..") returned 0 [0121.983] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0121.984] wcscmp (_String1="awt.dll", _String2=".") returned 1 [0121.984] wcscmp (_String1="awt.dll", _String2="..") returned 1 [0121.984] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6767afe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1 [0121.984] wcscmp (_String1="axbridge.dll", _String2=".") returned 1 [0121.984] wcscmp (_String1="axbridge.dll", _String2="..") returned 1 [0121.984] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a8ea200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0121.984] wcscmp (_String1="client", _String2=".") returned 1 [0121.984] wcscmp (_String1="client", _String2="..") returned 1 [0121.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14988 [0121.984] wcscpy (in: _Dest=0x3e14988, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0121.984] wcscat (in: _Dest=0x3e14988, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0121.984] wcscat (in: _Dest=0x3e14988, _Source="client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0122.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0122.667] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0122.667] wcscmp (_String1="dcpr.dll", _String2=".") returned 1 [0122.667] wcscmp (_String1="dcpr.dll", _String2="..") returned 1 [0122.667] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0122.667] wcscmp (_String1="decora-sse.dll", _String2=".") returned 1 [0122.667] wcscmp (_String1="decora-sse.dll", _String2="..") returned 1 [0122.667] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0122.667] wcscmp (_String1="deploy.dll", _String2=".") returned 1 [0122.667] wcscmp (_String1="deploy.dll", _String2="..") returned 1 [0122.667] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0122.667] wcscmp (_String1="dtplugin", _String2=".") returned 1 [0122.667] wcscmp (_String1="dtplugin", _String2="..") returned 1 [0122.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e152d0 [0122.667] wcscpy (in: _Dest=0x3e152d0, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0122.667] wcscat (in: _Dest=0x3e152d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0122.667] wcscat (in: _Dest=0x3e152d0, _Source="dtplugin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin" [0122.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e152d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0122.669] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0122.669] wcscmp (_String1="dt_shmem.dll", _String2=".") returned 1 [0122.669] wcscmp (_String1="dt_shmem.dll", _String2="..") returned 1 [0122.669] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0122.669] wcscmp (_String1="dt_socket.dll", _String2=".") returned 1 [0122.669] wcscmp (_String1="dt_socket.dll", _String2="..") returned 1 [0122.669] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0122.669] wcscmp (_String1="eula.dll", _String2=".") returned 1 [0122.669] wcscmp (_String1="eula.dll", _String2="..") returned 1 [0122.669] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0122.669] wcscmp (_String1="fontmanager.dll", _String2=".") returned 1 [0122.669] wcscmp (_String1="fontmanager.dll", _String2="..") returned 1 [0122.669] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0122.669] wcscmp (_String1="fxplugins.dll", _String2=".") returned 1 [0122.669] wcscmp (_String1="fxplugins.dll", _String2="..") returned 1 [0122.669] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0122.669] wcscmp (_String1="glass.dll", _String2=".") returned 1 [0122.669] wcscmp (_String1="glass.dll", _String2="..") returned 1 [0122.669] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0122.669] wcscmp (_String1="glib-lite.dll", _String2=".") returned 1 [0122.669] wcscmp (_String1="glib-lite.dll", _String2="..") returned 1 [0122.669] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0122.670] wcscmp (_String1="gstreamer-lite.dll", _String2=".") returned 1 [0122.670] wcscmp (_String1="gstreamer-lite.dll", _String2="..") returned 1 [0122.670] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0122.670] wcscmp (_String1="hprof.dll", _String2=".") returned 1 [0122.670] wcscmp (_String1="hprof.dll", _String2="..") returned 1 [0122.670] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="INSTAL~1.DLL")) returned 1 [0122.670] wcscmp (_String1="installer.dll", _String2=".") returned 1 [0122.670] wcscmp (_String1="installer.dll", _String2="..") returned 1 [0122.670] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0122.670] wcscmp (_String1="instrument.dll", _String2=".") returned 1 [0122.670] wcscmp (_String1="instrument.dll", _String2="..") returned 1 [0122.670] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0122.670] wcscmp (_String1="j2pcsc.dll", _String2=".") returned 1 [0122.670] wcscmp (_String1="j2pcsc.dll", _String2="..") returned 1 [0122.670] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0122.670] wcscmp (_String1="j2pkcs11.dll", _String2=".") returned 1 [0122.670] wcscmp (_String1="j2pkcs11.dll", _String2="..") returned 1 [0122.670] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0122.670] wcscmp (_String1="jaas_nt.dll", _String2=".") returned 1 [0122.670] wcscmp (_String1="jaas_nt.dll", _String2="..") returned 1 [0122.670] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0122.670] wcscmp (_String1="jabswitch.exe", _String2=".") returned 1 [0122.670] wcscmp (_String1="jabswitch.exe", _String2="..") returned 1 [0122.671] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0122.671] wcscmp (_String1="java-rmi.exe", _String2=".") returned 1 [0122.671] wcscmp (_String1="java-rmi.exe", _String2="..") returned 1 [0122.671] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0122.671] wcscmp (_String1="java.dll", _String2=".") returned 1 [0122.671] wcscmp (_String1="java.dll", _String2="..") returned 1 [0122.671] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0122.671] wcscmp (_String1="java.exe", _String2=".") returned 1 [0122.671] wcscmp (_String1="java.exe", _String2="..") returned 1 [0122.671] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge.dll", cAlternateFileName="JAVAAC~2.DLL")) returned 1 [0122.671] wcscmp (_String1="JavaAccessBridge.dll", _String2=".") returned 1 [0122.671] wcscmp (_String1="JavaAccessBridge.dll", _String2="..") returned 1 [0122.671] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676ed400, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0122.671] wcscmp (_String1="javacpl.exe", _String2=".") returned 1 [0122.671] wcscmp (_String1="javacpl.exe", _String2="..") returned 1 [0122.671] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676ed400, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676ed400, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0122.671] wcscmp (_String1="javafx-font.dll", _String2=".") returned 1 [0122.671] wcscmp (_String1="javafx-font.dll", _String2="..") returned 1 [0122.671] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0122.671] wcscmp (_String1="javafx-iio.dll", _String2=".") returned 1 [0122.671] wcscmp (_String1="javafx-iio.dll", _String2="..") returned 1 [0122.671] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0122.672] wcscmp (_String1="javaw.exe", _String2=".") returned 1 [0122.672] wcscmp (_String1="javaw.exe", _String2="..") returned 1 [0122.672] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0122.672] wcscmp (_String1="javaws.exe", _String2=".") returned 1 [0122.672] wcscmp (_String1="javaws.exe", _String2="..") returned 1 [0122.672] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0122.672] wcscmp (_String1="java_crw_demo.dll", _String2=".") returned 1 [0122.672] wcscmp (_String1="java_crw_demo.dll", _String2="..") returned 1 [0122.672] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0122.672] wcscmp (_String1="jawt.dll", _String2=".") returned 1 [0122.672] wcscmp (_String1="jawt.dll", _String2="..") returned 1 [0122.672] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge.dll", cAlternateFileName="JAWTAC~2.DLL")) returned 1 [0122.676] wcscmp (_String1="JAWTAccessBridge.dll", _String2=".") returned 1 [0122.676] wcscmp (_String1="JAWTAccessBridge.dll", _String2="..") returned 1 [0122.676] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1 [0122.677] wcscmp (_String1="JdbcOdbc.dll", _String2=".") returned 1 [0122.677] wcscmp (_String1="JdbcOdbc.dll", _String2="..") returned 1 [0122.677] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0122.677] wcscmp (_String1="jdwp.dll", _String2=".") returned 1 [0122.677] wcscmp (_String1="jdwp.dll", _String2="..") returned 1 [0122.677] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0122.677] wcscmp (_String1="jfr.dll", _String2=".") returned 1 [0122.677] wcscmp (_String1="jfr.dll", _String2="..") returned 1 [0122.677] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67713560, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0122.677] wcscmp (_String1="jfxmedia.dll", _String2=".") returned 1 [0122.677] wcscmp (_String1="jfxmedia.dll", _String2="..") returned 1 [0122.677] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67713560, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67713560, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0122.677] wcscmp (_String1="jfxwebkit.dll", _String2=".") returned 1 [0122.677] wcscmp (_String1="jfxwebkit.dll", _String2="..") returned 1 [0122.677] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0122.677] wcscmp (_String1="jli.dll", _String2=".") returned 1 [0122.677] wcscmp (_String1="jli.dll", _String2="..") returned 1 [0122.677] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0122.677] wcscmp (_String1="jp2iexp.dll", _String2=".") returned 1 [0122.677] wcscmp (_String1="jp2iexp.dll", _String2="..") returned 1 [0122.677] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0122.677] wcscmp (_String1="jp2launcher.exe", _String2=".") returned 1 [0122.677] wcscmp (_String1="jp2launcher.exe", _String2="..") returned 1 [0122.677] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0122.678] wcscmp (_String1="jp2native.dll", _String2=".") returned 1 [0122.678] wcscmp (_String1="jp2native.dll", _String2="..") returned 1 [0122.678] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0122.678] wcscmp (_String1="jp2ssv.dll", _String2=".") returned 1 [0122.678] wcscmp (_String1="jp2ssv.dll", _String2="..") returned 1 [0122.678] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0122.678] wcscmp (_String1="jpeg.dll", _String2=".") returned 1 [0122.678] wcscmp (_String1="jpeg.dll", _String2="..") returned 1 [0122.678] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1 [0122.678] wcscmp (_String1="jpicom.dll", _String2=".") returned 1 [0122.678] wcscmp (_String1="jpicom.dll", _String2="..") returned 1 [0122.678] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1 [0122.678] wcscmp (_String1="jpiexp.dll", _String2=".") returned 1 [0122.678] wcscmp (_String1="jpiexp.dll", _String2="..") returned 1 [0122.678] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1 [0122.678] wcscmp (_String1="jpinscp.dll", _String2=".") returned 1 [0122.678] wcscmp (_String1="jpinscp.dll", _String2="..") returned 1 [0122.678] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1 [0122.678] wcscmp (_String1="jpioji.dll", _String2=".") returned 1 [0122.678] wcscmp (_String1="jpioji.dll", _String2="..") returned 1 [0122.678] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1 [0122.678] wcscmp (_String1="jpishare.dll", _String2=".") returned 1 [0122.678] wcscmp (_String1="jpishare.dll", _String2="..") returned 1 [0122.679] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1 [0122.679] wcscmp (_String1="jqs.exe", _String2=".") returned 1 [0122.679] wcscmp (_String1="jqs.exe", _String2="..") returned 1 [0122.679] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0122.679] wcscmp (_String1="jsdt.dll", _String2=".") returned 1 [0122.679] wcscmp (_String1="jsdt.dll", _String2="..") returned 1 [0122.679] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0122.679] wcscmp (_String1="jsound.dll", _String2=".") returned 1 [0122.679] wcscmp (_String1="jsound.dll", _String2="..") returned 1 [0122.679] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0122.679] wcscmp (_String1="jsoundds.dll", _String2=".") returned 1 [0122.679] wcscmp (_String1="jsoundds.dll", _String2="..") returned 1 [0122.679] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0122.679] wcscmp (_String1="kcms.dll", _String2=".") returned 1 [0122.679] wcscmp (_String1="kcms.dll", _String2="..") returned 1 [0122.679] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0122.679] wcscmp (_String1="keytool.exe", _String2=".") returned 1 [0122.679] wcscmp (_String1="keytool.exe", _String2="..") returned 1 [0122.679] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0122.679] wcscmp (_String1="kinit.exe", _String2=".") returned 1 [0122.679] wcscmp (_String1="kinit.exe", _String2="..") returned 1 [0122.679] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0122.679] wcscmp (_String1="klist.exe", _String2=".") returned 1 [0122.679] wcscmp (_String1="klist.exe", _String2="..") returned 1 [0122.679] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67785980, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67785980, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67785980, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0122.680] wcscmp (_String1="ktab.exe", _String2=".") returned 1 [0122.680] wcscmp (_String1="ktab.exe", _String2="..") returned 1 [0122.680] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1 [0122.680] wcscmp (_String1="libxml2.dll", _String2=".") returned 1 [0122.680] wcscmp (_String1="libxml2.dll", _String2="..") returned 1 [0122.680] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1 [0122.680] wcscmp (_String1="libxslt.dll", _String2=".") returned 1 [0122.680] wcscmp (_String1="libxslt.dll", _String2="..") returned 1 [0122.680] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0122.680] wcscmp (_String1="management.dll", _String2=".") returned 1 [0122.680] wcscmp (_String1="management.dll", _String2="..") returned 1 [0122.680] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0122.680] wcscmp (_String1="mlib_image.dll", _String2=".") returned 1 [0122.680] wcscmp (_String1="mlib_image.dll", _String2="..") returned 1 [0122.680] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0122.680] wcscmp (_String1="msvcr100.dll", _String2=".") returned 1 [0122.680] wcscmp (_String1="msvcr100.dll", _String2="..") returned 1 [0122.680] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0122.680] wcscmp (_String1="net.dll", _String2=".") returned 1 [0122.680] wcscmp (_String1="net.dll", _String2="..") returned 1 [0122.680] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0122.680] wcscmp (_String1="nio.dll", _String2=".") returned 1 [0122.680] wcscmp (_String1="nio.dll", _String2="..") returned 1 [0122.681] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="NPJPI1~1.DLL")) returned 1 [0122.681] wcscmp (_String1="npjpi170_45.dll", _String2=".") returned 1 [0122.681] wcscmp (_String1="npjpi170_45.dll", _String2="..") returned 1 [0122.681] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1 [0122.689] wcscmp (_String1="npoji610.dll", _String2=".") returned 1 [0122.689] wcscmp (_String1="npoji610.dll", _String2="..") returned 1 [0122.689] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0122.689] wcscmp (_String1="npt.dll", _String2=".") returned 1 [0122.689] wcscmp (_String1="npt.dll", _String2="..") returned 1 [0122.689] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0122.689] wcscmp (_String1="orbd.exe", _String2=".") returned 1 [0122.689] wcscmp (_String1="orbd.exe", _String2="..") returned 1 [0122.689] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0122.689] wcscmp (_String1="pack200.exe", _String2=".") returned 1 [0122.689] wcscmp (_String1="pack200.exe", _String2="..") returned 1 [0122.689] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0122.689] wcscmp (_String1="plugin2", _String2=".") returned 1 [0122.689] wcscmp (_String1="plugin2", _String2="..") returned 1 [0122.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e15380 [0122.690] wcscpy (in: _Dest=0x3e15380, _Source="C:\\Program Files\\Java\\jre7\\bin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin") returned="C:\\Program Files\\Java\\jre7\\bin" [0122.690] wcscat (in: _Dest=0x3e15380, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\" [0122.690] wcscat (in: _Dest=0x3e15380, _Source="plugin2" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2" [0122.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e15380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0122.691] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0122.691] wcscmp (_String1="policytool.exe", _String2=".") returned 1 [0122.691] wcscmp (_String1="policytool.exe", _String2="..") returned 1 [0122.691] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="PRISM-~1.DLL")) returned 1 [0122.691] wcscmp (_String1="prism-d3d.dll", _String2=".") returned 1 [0122.691] wcscmp (_String1="prism-d3d.dll", _String2="..") returned 1 [0122.691] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0122.691] wcscmp (_String1="rmid.exe", _String2=".") returned 1 [0122.691] wcscmp (_String1="rmid.exe", _String2="..") returned 1 [0122.691] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0122.691] wcscmp (_String1="rmiregistry.exe", _String2=".") returned 1 [0122.691] wcscmp (_String1="rmiregistry.exe", _String2="..") returned 1 [0122.691] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0122.691] wcscmp (_String1="servertool.exe", _String2=".") returned 1 [0122.691] wcscmp (_String1="servertool.exe", _String2="..") returned 1 [0122.691] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0122.691] wcscmp (_String1="splashscreen.dll", _String2=".") returned 1 [0122.692] wcscmp (_String1="splashscreen.dll", _String2="..") returned 1 [0122.692] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0122.692] wcscmp (_String1="ssv.dll", _String2=".") returned 1 [0122.692] wcscmp (_String1="ssv.dll", _String2="..") returned 1 [0122.692] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0122.692] wcscmp (_String1="ssvagent.exe", _String2=".") returned 1 [0122.692] wcscmp (_String1="ssvagent.exe", _String2="..") returned 1 [0122.692] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0122.692] wcscmp (_String1="sunec.dll", _String2=".") returned 1 [0122.692] wcscmp (_String1="sunec.dll", _String2="..") returned 1 [0122.692] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0122.692] wcscmp (_String1="sunmscapi.dll", _String2=".") returned 1 [0122.692] wcscmp (_String1="sunmscapi.dll", _String2="..") returned 1 [0122.692] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0122.692] wcscmp (_String1="t2k.dll", _String2=".") returned 1 [0122.692] wcscmp (_String1="t2k.dll", _String2="..") returned 1 [0122.692] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0122.692] wcscmp (_String1="tnameserv.exe", _String2=".") returned 1 [0122.692] wcscmp (_String1="tnameserv.exe", _String2="..") returned 1 [0122.692] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0122.692] wcscmp (_String1="unpack.dll", _String2=".") returned 1 [0122.692] wcscmp (_String1="unpack.dll", _String2="..") returned 1 [0122.692] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0122.692] wcscmp (_String1="unpack200.exe", _String2=".") returned 1 [0122.692] wcscmp (_String1="unpack200.exe", _String2="..") returned 1 [0122.693] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0122.693] wcscmp (_String1="verify.dll", _String2=".") returned 1 [0122.693] wcscmp (_String1="verify.dll", _String2="..") returned 1 [0122.693] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0122.693] wcscmp (_String1="w2k_lsa_auth.dll", _String2=".") returned 1 [0122.693] wcscmp (_String1="w2k_lsa_auth.dll", _String2="..") returned 1 [0122.693] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x171a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge.dll", cAlternateFileName="WINDOW~2.DLL")) returned 1 [0122.693] wcscmp (_String1="WindowsAccessBridge.dll", _String2=".") returned 1 [0122.693] wcscmp (_String1="WindowsAccessBridge.dll", _String2="..") returned 1 [0122.693] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0122.693] wcscmp (_String1="wsdetect.dll", _String2=".") returned 1 [0122.693] wcscmp (_String1="wsdetect.dll", _String2="..") returned 1 [0122.693] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0122.693] wcscmp (_String1="zip.dll", _String2=".") returned 1 [0122.693] wcscmp (_String1="zip.dll", _String2="..") returned 1 [0122.693] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0122.693] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0122.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb4830) returned 1 [0122.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6b08) returned 1 [0122.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e561c8) returned 1 Thread: id = 248 os_tid = 0xa9c [0121.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre7\\copyright")) returned 0x20 [0121.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT", dwFileAttributes=0x20) returned 0 [0121.985] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre7\\copyright"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0121.985] GetLastError () returned 0x5 [0121.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\COPYRIGHT", dwFileAttributes=0x20) returned 0 [0121.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14ca0) returned 1 Thread: id = 249 os_tid = 0x5d4 [0121.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6a18 [0121.497] wcscpy (in: _Dest=0x3de6a18, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0121.497] wcscat (in: _Dest=0x3de6a18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0121.497] wcscat (in: _Dest=0x3de6a18, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\*" [0121.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0121.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067040 [0122.501] wcscmp (_String1=".", _String2=".") returned 0 [0122.501] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.918] wcscmp (_String1="..", _String2=".") returned 1 [0123.918] wcscmp (_String1="..", _String2="..") returned 0 [0123.918] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0123.918] wcscmp (_String1="accessibility.properties", _String2=".") returned 1 [0123.950] wcscmp (_String1="accessibility.properties", _String2="..") returned 1 [0123.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0123.950] wcscpy (in: _Dest=0x3f3fa10, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0123.950] wcscat (in: _Dest=0x3f3fa10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0123.951] wcscat (in: _Dest=0x3f3fa10, _Source="accessibility.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties" [0126.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fa10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0126.935] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="alt-rt.jar", cAlternateFileName="")) returned 1 [0126.935] wcscmp (_String1="alt-rt.jar", _String2=".") returned 1 [0126.935] wcscmp (_String1="alt-rt.jar", _String2="..") returned 1 [0126.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe66c8 [0126.936] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.936] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.936] wcscat (in: _Dest=0x2fe66c8, _Source="alt-rt.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar" [0126.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe66c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0126.937] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0126.937] wcscmp (_String1="applet", _String2=".") returned 1 [0126.937] wcscmp (_String1="applet", _String2="..") returned 1 [0126.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48690 [0126.937] wcscpy (in: _Dest=0x3d48690, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.937] wcscat (in: _Dest=0x3d48690, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.937] wcscat (in: _Dest=0x3d48690, _Source="applet" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet") returned="C:\\Program Files\\Java\\jre7\\lib\\applet" [0126.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0126.938] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0126.939] wcscmp (_String1="calendars.properties", _String2=".") returned 1 [0126.939] wcscmp (_String1="calendars.properties", _String2="..") returned 1 [0126.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23760 [0126.939] wcscpy (in: _Dest=0x7a23760, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.939] wcscat (in: _Dest=0x7a23760, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.939] wcscat (in: _Dest=0x7a23760, _Source="calendars.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties" [0126.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0126.940] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6970fd00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6970fd00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69782120, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x364427, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0126.940] wcscmp (_String1="charsets.jar", _String2=".") returned 1 [0126.940] wcscmp (_String1="charsets.jar", _String2="..") returned 1 [0126.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe68a8 [0126.940] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.940] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.940] wcscat (in: _Dest=0x2fe68a8, _Source="charsets.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar" [0126.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe68a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0126.942] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12543, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0126.942] wcscmp (_String1="classlist", _String2=".") returned 1 [0126.942] wcscmp (_String1="classlist", _String2="..") returned 1 [0126.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe7328 [0126.942] wcscpy (in: _Dest=0x2fe7328, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.942] wcscat (in: _Dest=0x2fe7328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.942] wcscat (in: _Dest=0x2fe7328, _Source="classlist" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\classlist") returned="C:\\Program Files\\Java\\jre7\\lib\\classlist" [0126.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe7328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0126.943] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0126.943] wcscmp (_String1="cmm", _String2=".") returned 1 [0126.943] wcscmp (_String1="cmm", _String2="..") returned 1 [0126.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de67e8 [0126.943] wcscpy (in: _Dest=0x3de67e8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.943] wcscat (in: _Dest=0x3de67e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.943] wcscat (in: _Dest=0x3de67e8, _Source="cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0126.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0126.945] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0126.945] wcscmp (_String1="content-types.properties", _String2=".") returned 1 [0126.945] wcscmp (_String1="content-types.properties", _String2="..") returned 1 [0126.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3de00 [0126.945] wcscpy (in: _Dest=0x3f3de00, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.945] wcscat (in: _Dest=0x3f3de00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.945] wcscat (in: _Dest=0x3f3de00, _Source="content-types.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties" [0126.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0126.946] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0126.946] wcscmp (_String1="currency.data", _String2=".") returned 1 [0126.946] wcscmp (_String1="currency.data", _String2="..") returned 1 [0126.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee1078 [0126.946] wcscpy (in: _Dest=0x3ee1078, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.946] wcscat (in: _Dest=0x3ee1078, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.946] wcscat (in: _Dest=0x3ee1078, _Source="currency.data" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\currency.data") returned="C:\\Program Files\\Java\\jre7\\lib\\currency.data" [0126.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0126.947] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0126.948] wcscmp (_String1="deploy", _String2=".") returned 1 [0126.948] wcscmp (_String1="deploy", _String2="..") returned 1 [0126.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48c68 [0126.948] wcscpy (in: _Dest=0x3d48c68, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.948] wcscat (in: _Dest=0x3d48c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.948] wcscat (in: _Dest=0x3d48c68, _Source="deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0126.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0126.949] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x697a8280, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x697a8280, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6988cac0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0126.949] wcscmp (_String1="deploy.jar", _String2=".") returned 1 [0126.949] wcscmp (_String1="deploy.jar", _String2="..") returned 1 [0126.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe72c8 [0126.949] wcscpy (in: _Dest=0x2fe72c8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.949] wcscat (in: _Dest=0x2fe72c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.950] wcscat (in: _Dest=0x2fe72c8, _Source="deploy.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar" [0126.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe72c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0126.951] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0126.951] wcscmp (_String1="ext", _String2=".") returned 1 [0126.951] wcscmp (_String1="ext", _String2="..") returned 1 [0126.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6428 [0126.951] wcscpy (in: _Dest=0x3de6428, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.951] wcscat (in: _Dest=0x3de6428, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.951] wcscat (in: _Dest=0x3de6428, _Source="ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0126.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0126.953] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0126.953] wcscmp (_String1="flavormap.properties", _String2=".") returned 1 [0126.953] wcscmp (_String1="flavormap.properties", _String2="..") returned 1 [0126.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23140 [0126.953] wcscpy (in: _Dest=0x7a23140, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.953] wcscat (in: _Dest=0x7a23140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.953] wcscat (in: _Dest=0x7a23140, _Source="flavormap.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties" [0126.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0126.954] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0126.954] wcscmp (_String1="fontconfig.bfc", _String2=".") returned 1 [0126.954] wcscmp (_String1="fontconfig.bfc", _String2="..") returned 1 [0126.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1f220 [0126.954] wcscpy (in: _Dest=0x3e1f220, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.955] wcscat (in: _Dest=0x3e1f220, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.955] wcscat (in: _Dest=0x3e1f220, _Source="fontconfig.bfc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc") returned="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc" [0126.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0126.956] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x28ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0126.956] wcscmp (_String1="fontconfig.properties.src", _String2=".") returned 1 [0126.956] wcscmp (_String1="fontconfig.properties.src", _String2="..") returned 1 [0126.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6170 [0126.956] wcscpy (in: _Dest=0x3da6170, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.956] wcscat (in: _Dest=0x3da6170, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.956] wcscat (in: _Dest=0x3da6170, _Source="fontconfig.properties.src" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src") returned="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src" [0126.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da6170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0126.958] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0126.958] wcscmp (_String1="fonts", _String2=".") returned 1 [0126.958] wcscmp (_String1="fonts", _String2="..") returned 1 [0126.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d487f0 [0126.958] wcscpy (in: _Dest=0x3d487f0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.958] wcscat (in: _Dest=0x3d487f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.958] wcscat (in: _Dest=0x3d487f0, _Source="fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0126.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d487f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0126.960] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1 [0126.960] wcscmp (_String1="i386", _String2=".") returned 1 [0126.960] wcscmp (_String1="i386", _String2="..") returned 1 [0126.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de65b8 [0126.960] wcscpy (in: _Dest=0x3de65b8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.960] wcscat (in: _Dest=0x3de65b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.960] wcscat (in: _Dest=0x3de65b8, _Source="i386" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386") returned="C:\\Program Files\\Java\\jre7\\lib\\i386" [0126.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de65b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0126.962] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0126.962] wcscmp (_String1="images", _String2=".") returned 1 [0126.962] wcscmp (_String1="images", _String2="..") returned 1 [0126.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d488a0 [0126.962] wcscpy (in: _Dest=0x3d488a0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.962] wcscat (in: _Dest=0x3d488a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.962] wcscat (in: _Dest=0x3d488a0, _Source="images" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images") returned="C:\\Program Files\\Java\\jre7\\lib\\images" [0126.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d488a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0126.964] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0126.964] wcscmp (_String1="javafx.properties", _String2=".") returned 1 [0126.964] wcscmp (_String1="javafx.properties", _String2="..") returned 1 [0126.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a234c0 [0126.964] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.964] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.964] wcscat (in: _Dest=0x7a234c0, _Source="javafx.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties" [0126.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a234c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0126.965] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6988cac0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6988cac0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x698b2c20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd9d17, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0126.965] wcscmp (_String1="javaws.jar", _String2=".") returned 1 [0126.965] wcscmp (_String1="javaws.jar", _String2="..") returned 1 [0126.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7388 [0126.965] wcscpy (in: _Dest=0x2fe7388, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.965] wcscat (in: _Dest=0x2fe7388, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.966] wcscat (in: _Dest=0x2fe7388, _Source="javaws.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar" [0126.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe7388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0126.967] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1aa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0126.967] wcscmp (_String1="jce.jar", _String2=".") returned 1 [0126.967] wcscmp (_String1="jce.jar", _String2="..") returned 1 [0126.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3d48848 [0126.967] wcscpy (in: _Dest=0x3d48848, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.967] wcscat (in: _Dest=0x3d48848, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.967] wcscat (in: _Dest=0x3d48848, _Source="jce.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jce.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jce.jar" [0126.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d48848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0126.968] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0126.968] wcscmp (_String1="jfr", _String2=".") returned 1 [0126.968] wcscmp (_String1="jfr", _String2="..") returned 1 [0126.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6388 [0126.969] wcscpy (in: _Dest=0x3de6388, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.969] wcscat (in: _Dest=0x3de6388, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.969] wcscat (in: _Dest=0x3de6388, _Source="jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0126.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0126.970] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679c0e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8204f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0126.970] wcscmp (_String1="jfr.jar", _String2=".") returned 1 [0126.970] wcscmp (_String1="jfr.jar", _String2="..") returned 1 [0126.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a27118 [0126.971] wcscpy (in: _Dest=0x7a27118, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0126.971] wcscat (in: _Dest=0x7a27118, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0126.971] wcscat (in: _Dest=0x7a27118, _Source="jfr.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar" [0126.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a27118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0129.326] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69997460, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69997460, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xce642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0129.326] wcscmp (_String1="jfxrt.jar", _String2=".") returned 1 [0129.326] wcscmp (_String1="jfxrt.jar", _String2="..") returned 1 [0129.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1508 [0129.327] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0129.327] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0129.327] wcscat (in: _Dest=0x2fe1508, _Source="jfxrt.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar" [0138.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe1508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x778 [0138.600] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69925040, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69925040, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6994b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x809cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0138.600] wcscmp (_String1="jsse.jar", _String2=".") returned 1 [0138.600] wcscmp (_String1="jsse.jar", _String2="..") returned 1 [0138.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6a9a8 [0138.601] wcscpy (in: _Dest=0x3e6a9a8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.601] wcscat (in: _Dest=0x3e6a9a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.601] wcscat (in: _Dest=0x3e6a9a8, _Source="jsse.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar" [0138.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e6a9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034 [0138.601] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f8e3c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67f8e3c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67fb4520, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0138.601] wcscmp (_String1="jvm.hprof.txt", _String2=".") returned 1 [0138.602] wcscmp (_String1="jvm.hprof.txt", _String2="..") returned 1 [0138.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0108 [0138.602] wcscpy (in: _Dest=0x3ee0108, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.602] wcscat (in: _Dest=0x3ee0108, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.602] wcscat (in: _Dest=0x3ee0108, _Source="jvm.hprof.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt") returned="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt" [0138.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2038 [0138.603] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67fb4520, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67fb4520, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0138.603] wcscmp (_String1="logging.properties", _String2=".") returned 1 [0138.603] wcscmp (_String1="logging.properties", _String2="..") returned 1 [0138.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26468 [0138.603] wcscpy (in: _Dest=0x7a26468, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.603] wcscat (in: _Dest=0x7a26468, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.603] wcscat (in: _Dest=0x7a26468, _Source="logging.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\logging.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\logging.properties" [0138.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0138.604] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0138.604] wcscmp (_String1="management", _String2=".") returned 1 [0138.604] wcscmp (_String1="management", _String2="..") returned 1 [0138.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6848 [0138.604] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.604] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.604] wcscat (in: _Dest=0x2fe6848, _Source="management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0138.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0138.605] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0138.605] wcscmp (_String1="management-agent.jar", _String2=".") returned 1 [0138.605] wcscmp (_String1="management-agent.jar", _String2="..") returned 1 [0138.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26af8 [0138.605] wcscpy (in: _Dest=0x7a26af8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.605] wcscat (in: _Dest=0x7a26af8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.605] wcscat (in: _Dest=0x7a26af8, _Source="management-agent.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar" [0138.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2044 [0138.606] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6804caa0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0138.606] wcscmp (_String1="meta-index", _String2=".") returned 1 [0138.606] wcscmp (_String1="meta-index", _String2="..") returned 1 [0138.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe63c8 [0138.606] wcscpy (in: _Dest=0x2fe63c8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.606] wcscat (in: _Dest=0x2fe63c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.607] wcscat (in: _Dest=0x2fe63c8, _Source="meta-index" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\meta-index") returned="C:\\Program Files\\Java\\jre7\\lib\\meta-index" [0138.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe63c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2048 [0138.607] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6804caa0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6804caa0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6804caa0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0138.607] wcscmp (_String1="net.properties", _String2=".") returned 1 [0138.607] wcscmp (_String1="net.properties", _String2="..") returned 1 [0138.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0e08 [0138.608] wcscpy (in: _Dest=0x3ee0e08, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.608] wcscat (in: _Dest=0x3ee0e08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.608] wcscat (in: _Dest=0x3ee0e08, _Source="net.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\net.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\net.properties" [0138.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0138.609] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698d8d80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x698d8d80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69925040, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0138.609] wcscmp (_String1="plugin.jar", _String2=".") returned 1 [0138.609] wcscmp (_String1="plugin.jar", _String2="..") returned 1 [0138.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe14a8 [0138.609] wcscpy (in: _Dest=0x2fe14a8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.609] wcscat (in: _Dest=0x2fe14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.609] wcscat (in: _Dest=0x2fe14a8, _Source="plugin.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar" [0138.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2050 [0138.610] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68072c00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68072c00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68072c00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0138.610] wcscmp (_String1="psfont.properties.ja", _String2=".") returned 1 [0138.610] wcscmp (_String1="psfont.properties.ja", _String2="..") returned 1 [0138.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26bd8 [0138.610] wcscpy (in: _Dest=0x7a26bd8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.610] wcscat (in: _Dest=0x7a26bd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.610] wcscat (in: _Dest=0x7a26bd8, _Source="psfont.properties.ja" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja") returned="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja" [0138.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0138.611] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68072c00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68072c00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68072c00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0138.611] wcscmp (_String1="psfontj2d.properties", _String2=".") returned 1 [0138.612] wcscmp (_String1="psfontj2d.properties", _String2="..") returned 1 [0138.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a261c8 [0138.612] wcscpy (in: _Dest=0x7a261c8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.612] wcscat (in: _Dest=0x7a261c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.612] wcscat (in: _Dest=0x7a261c8, _Source="psfontj2d.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties" [0138.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a261c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0138.613] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68072c00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68072c00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68098d60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2562c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0138.613] wcscmp (_String1="resources.jar", _String2=".") returned 1 [0138.613] wcscmp (_String1="resources.jar", _String2="..") returned 1 [0138.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee08c0 [0138.613] wcscpy (in: _Dest=0x3ee08c0, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.613] wcscat (in: _Dest=0x3ee08c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.613] wcscat (in: _Dest=0x3ee08c0, _Source="resources.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\resources.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\resources.jar" [0138.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee08c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x205c [0138.614] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683928e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683928e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6970fd00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3124c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0138.614] wcscmp (_String1="rt.jar", _String2=".") returned 1 [0138.614] wcscmp (_String1="rt.jar", _String2="..") returned 1 [0138.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x7a39738 [0138.614] wcscpy (in: _Dest=0x7a39738, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.614] wcscat (in: _Dest=0x7a39738, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.614] wcscat (in: _Dest=0x7a39738, _Source="rt.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\rt.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\rt.jar" [0138.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a39738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060 [0138.615] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681312e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0138.615] wcscmp (_String1="security", _String2=".") returned 1 [0138.615] wcscmp (_String1="security", _String2="..") returned 1 [0138.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a39790 [0138.615] wcscpy (in: _Dest=0x7a39790, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.615] wcscat (in: _Dest=0x7a39790, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.615] wcscat (in: _Dest=0x7a39790, _Source="security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0138.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a39790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0138.616] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0138.616] wcscmp (_String1="sound.properties", _String2=".") returned 1 [0138.616] wcscmp (_String1="sound.properties", _String2="..") returned 1 [0138.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee06b8 [0138.616] wcscpy (in: _Dest=0x3ee06b8, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.616] wcscat (in: _Dest=0x3ee06b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.616] wcscat (in: _Dest=0x3ee06b8, _Source="sound.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\sound.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\sound.properties" [0138.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee06b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0138.617] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0138.617] wcscmp (_String1="tzmappings", _String2=".") returned 1 [0138.617] wcscmp (_String1="tzmappings", _String2="..") returned 1 [0138.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6908 [0138.617] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.617] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.617] wcscat (in: _Dest=0x2fe6908, _Source="tzmappings" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\tzmappings") returned="C:\\Program Files\\Java\\jre7\\lib\\tzmappings" [0138.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0138.618] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 1 [0138.618] wcscmp (_String1="zi", _String2=".") returned 1 [0138.618] wcscmp (_String1="zi", _String2="..") returned 1 [0138.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6158 [0138.618] wcscpy (in: _Dest=0x3de6158, _Source="C:\\Program Files\\Java\\jre7\\lib" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib") returned="C:\\Program Files\\Java\\jre7\\lib" [0138.618] wcscat (in: _Dest=0x3de6158, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\") returned="C:\\Program Files\\Java\\jre7\\lib\\" [0138.618] wcscat (in: _Dest=0x3de6158, _Source="zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0138.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2070 [0138.619] FindNextFileW (in: hFindFile=0x3067040, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zi", cAlternateFileName="")) returned 0 [0138.619] FindClose (in: hFindFile=0x3067040 | out: hFindFile=0x3067040) returned 1 [0138.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0138.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6a18) returned 1 [0138.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e562e8) returned 1 Thread: id = 250 os_tid = 0xb0 [0121.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE" (normalized: "c:\\program files\\java\\jre7\\license")) returned 0x20 [0121.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE", dwFileAttributes=0x20) returned 0 [0121.990] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE" (normalized: "c:\\program files\\java\\jre7\\license"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0121.991] GetLastError () returned 0x5 [0121.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\LICENSE", dwFileAttributes=0x20) returned 0 [0121.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5ed8) returned 1 Thread: id = 251 os_tid = 0x1c4 [0121.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt" (normalized: "c:\\program files\\java\\jre7\\readme.txt")) returned 0x20 [0121.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt", dwFileAttributes=0x20) returned 0 [0121.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt" (normalized: "c:\\program files\\java\\jre7\\readme.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0121.993] GetLastError () returned 0x5 [0121.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\README.txt", dwFileAttributes=0x20) returned 0 [0121.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14bf0) returned 1 Thread: id = 252 os_tid = 0x7fc [0121.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\release" (normalized: "c:\\program files\\java\\jre7\\release")) returned 0x20 [0121.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\release", dwFileAttributes=0x20) returned 0 [0121.997] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\release" (normalized: "c:\\program files\\java\\jre7\\release"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0121.998] GetLastError () returned 0x5 [0121.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\release", dwFileAttributes=0x20) returned 0 [0121.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de65b8) returned 1 Thread: id = 253 os_tid = 0xc5c [0121.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme-javafx.txt")) returned 0x20 [0121.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x20) returned 0 [0122.000] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0122.000] GetLastError () returned 0x5 [0122.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x20) returned 0 [0122.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bdd8) returned 1 Thread: id = 254 os_tid = 0xdb4 [0121.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme.txt")) returned 0x20 [0121.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x20) returned 0 [0121.682] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre7\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0121.682] GetLastError () returned 0x5 [0121.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x20) returned 0 [0121.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51368) returned 1 Thread: id = 255 os_tid = 0xdb8 [0121.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files\\java\\jre7\\welcome.html")) returned 0x20 [0121.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html", dwFileAttributes=0x20) returned 0 [0121.684] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files\\java\\jre7\\welcome.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0121.684] GetLastError () returned 0x5 [0121.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\Welcome.html", dwFileAttributes=0x20) returned 0 [0121.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14c48) returned 1 Thread: id = 256 os_tid = 0xbdc [0121.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da65f0 [0121.512] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0121.512] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\" [0121.512] wcscat (in: _Dest=0x3da65f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*" [0121.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0121.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0121.685] wcscmp (_String1=".", _String2=".") returned 0 [0121.685] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85ceae30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85ceae30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.685] wcscmp (_String1="..", _String2=".") returned 1 [0121.685] wcscmp (_String1="..", _String2="..") returned 0 [0121.685] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76724eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85cc4cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0121.685] wcscmp (_String1="Cartridges", _String2=".") returned 1 [0121.686] wcscmp (_String1="Cartridges", _String2="..") returned 1 [0121.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1cb8 [0121.686] wcscpy (in: _Dest=0x3df1cb8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0121.686] wcscat (in: _Dest=0x3df1cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\" [0121.686] wcscat (in: _Dest=0x3df1cb8, _Source="Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0122.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df1cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0122.999] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa3f4b00, ftCreationTime.dwHighDateTime=0x1ca2cc3, ftLastAccessTime.dwLowDateTime=0x7693a1f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaa3f4b00, ftLastWriteTime.dwHighDateTime=0x1ca2cc3, nFileSizeHigh=0x0, nFileSizeLow=0x1663968, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0122.999] wcscmp (_String1="msmdlocal.dll", _String2=".") returned 1 [0122.999] wcscmp (_String1="msmdlocal.dll", _String2="..") returned 1 [0122.999] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4f9e000, ftCreationTime.dwHighDateTime=0x1ca2cc3, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4f9e000, ftLastWriteTime.dwHighDateTime=0x1ca2cc3, nFileSizeHigh=0x0, nFileSizeLow=0x82b958, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0122.999] wcscmp (_String1="msmgdsrv.dll", _String2=".") returned 1 [0122.999] wcscmp (_String1="msmgdsrv.dll", _String2="..") returned 1 [0122.999] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb62b0d00, ftCreationTime.dwHighDateTime=0x1ca2cc3, ftLastAccessTime.dwLowDateTime=0x85d5d250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb62b0d00, ftLastWriteTime.dwHighDateTime=0x1ca2cc3, nFileSizeHigh=0x0, nFileSizeLow=0x63bb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0122.999] wcscmp (_String1="msolap100.dll", _String2=".") returned 1 [0122.999] wcscmp (_String1="msolap100.dll", _String2="..") returned 1 [0122.999] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970e2800, ftCreationTime.dwHighDateTime=0x1c8e244, ftLastAccessTime.dwLowDateTime=0x76960350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x970e2800, ftLastWriteTime.dwHighDateTime=0x1c8e244, nFileSizeHigh=0x0, nFileSizeLow=0x43618, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0122.999] wcscmp (_String1="msolui100.dll", _String2=".") returned 1 [0122.999] wcscmp (_String1="msolui100.dll", _String2="..") returned 1 [0122.999] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0123.000] wcscmp (_String1="Resources", _String2=".") returned 1 [0123.000] wcscmp (_String1="Resources", _String2="..") returned 1 [0123.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44690 [0123.000] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10" [0123.000] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\" [0123.000] wcscat (in: _Dest=0x3d44690, _Source="Resources" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" [0123.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0123.001] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 0 [0123.001] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0123.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0123.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 [0123.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5e70) returned 1 Thread: id = 257 os_tid = 0xbd8 [0121.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8bd0 [0121.516] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" [0121.516] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\" [0121.516] wcscat (in: _Dest=0x3eb8bd0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*" [0121.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0121.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0121.517] wcscmp (_String1=".", _String2=".") returned 0 [0121.517] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.517] wcscmp (_String1="..", _String2=".") returned 1 [0121.517] wcscmp (_String1="..", _String2="..") returned 0 [0121.517] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0121.517] wcscmp (_String1="1033", _String2=".") returned 1 [0121.517] wcscmp (_String1="1033", _String2="..") returned 1 [0121.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df1838 [0121.517] wcscpy (in: _Dest=0x3df1838, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation" [0121.517] wcscat (in: _Dest=0x3df1838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\" [0121.517] wcscat (in: _Dest=0x3df1838, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" [0121.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df1838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0121.896] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0121.896] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0121.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0121.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 [0121.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 Thread: id = 258 os_tid = 0xdcc [0121.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5c70 [0121.518] wcscpy (in: _Dest=0x3da5c70, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" [0121.518] wcscat (in: _Dest=0x3da5c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\" [0121.518] wcscat (in: _Dest=0x3da5c70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*" [0121.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2d68 [0121.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0121.518] wcscmp (_String1=".", _String2=".") returned 0 [0121.518] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.518] wcscmp (_String1="..", _String2=".") returned 1 [0121.518] wcscmp (_String1="..", _String2="..") returned 0 [0121.518] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0121.518] wcscmp (_String1="x86", _String2=".") returned 1 [0121.519] wcscmp (_String1="x86", _String2="..") returned 1 [0121.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da64f0 [0121.519] wcscpy (in: _Dest=0x3da64f0, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime" [0121.519] wcscat (in: _Dest=0x3da64f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\" [0121.519] wcscat (in: _Dest=0x3da64f0, _Source="x86" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" [0121.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da64f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0121.772] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0121.772] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0121.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0121.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5c70) returned 1 [0121.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 Thread: id = 259 os_tid = 0xdac [0121.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2648 [0121.519] wcscpy (in: _Dest=0x3df2648, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0121.519] wcscat (in: _Dest=0x3df2648, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\" [0121.519] wcscat (in: _Dest=0x3df2648, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*" [0121.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2fd0 [0121.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ac0 [0121.520] wcscmp (_String1=".", _String2=".") returned 0 [0121.520] FindNextFileW (in: hFindFile=0x3066ac0, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4f7701f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4f7701f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.520] wcscmp (_String1="..", _String2=".") returned 1 [0121.520] wcscmp (_String1="..", _String2="..") returned 0 [0121.520] FindNextFileW (in: hFindFile=0x3066ac0, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0121.520] wcscmp (_String1="v3.0", _String2=".") returned 1 [0121.520] wcscmp (_String1="v3.0", _String2="..") returned 1 [0121.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df25b8 [0121.520] wcscpy (in: _Dest=0x3df25b8, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0121.520] wcscat (in: _Dest=0x3df25b8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\" [0121.520] wcscat (in: _Dest=0x3df25b8, _Source="v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0121.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df25b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0121.774] FindNextFileW (in: hFindFile=0x3066ac0, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0121.775] wcscmp (_String1="v3.5", _String2=".") returned 1 [0121.775] wcscmp (_String1="v3.5", _String2="..") returned 1 [0121.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df18c8 [0121.775] wcscpy (in: _Dest=0x3df18c8, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" [0121.775] wcscat (in: _Dest=0x3df18c8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\" [0121.775] wcscat (in: _Dest=0x3df18c8, _Source="v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0121.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df18c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0121.776] FindNextFileW (in: hFindFile=0x3066ac0, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0121.776] FindClose (in: hFindFile=0x3066ac0 | out: hFindFile=0x3066ac0) returned 1 [0121.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fd0) returned 1 [0121.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2648) returned 1 [0121.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ccb8) returned 1 Thread: id = 260 os_tid = 0xda8 [0121.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73430 [0121.521] wcscpy (in: _Dest=0x3e73430, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0121.521] wcscat (in: _Dest=0x3e73430, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0121.521] wcscat (in: _Dest=0x3e73430, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\*") returned="C:\\Users\\Default\\AppData\\*" [0121.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3238 [0121.521] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73370 [0121.524] wcscmp (_String1=".", _String2=".") returned 0 [0121.524] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfa01468f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.524] wcscmp (_String1="..", _String2=".") returned 1 [0121.524] wcscmp (_String1="..", _String2="..") returned 0 [0121.524] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x79a6290, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c717c5e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0121.524] wcscmp (_String1="Local", _String2=".") returned 1 [0121.524] wcscmp (_String1="Local", _String2="..") returned 1 [0121.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e85b78 [0121.524] wcscpy (in: _Dest=0x3e85b78, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0121.524] wcscat (in: _Dest=0x3e85b78, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0121.524] wcscat (in: _Dest=0x3e85b78, _Source="Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0121.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e85b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc [0121.920] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0121.920] wcscmp (_String1="LocalLow", _String2=".") returned 1 [0121.920] wcscmp (_String1="LocalLow", _String2="..") returned 1 [0121.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e58f68 [0121.920] wcscpy (in: _Dest=0x3e58f68, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0121.920] wcscat (in: _Dest=0x3e58f68, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0121.920] wcscat (in: _Dest=0x3e58f68, _Source="LocalLow" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow") returned="C:\\Users\\Default\\AppData\\LocalLow" [0121.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e58f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0121.921] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0121.921] wcscmp (_String1="Roaming", _String2=".") returned 1 [0121.921] wcscmp (_String1="Roaming", _String2="..") returned 1 [0121.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e59058 [0121.921] wcscpy (in: _Dest=0x3e59058, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData" [0121.921] wcscat (in: _Dest=0x3e59058, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\" [0121.921] wcscat (in: _Dest=0x3e59058, _Source="Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0121.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e59058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd8 [0121.923] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0121.923] FindClose (in: hFindFile=0x3e73370 | out: hFindFile=0x3e73370) returned 1 [0121.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3238) returned 1 [0121.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73430) returned 1 [0121.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf990) returned 1 Thread: id = 261 os_tid = 0xdb0 [0121.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6158 [0121.525] wcscpy (in: _Dest=0x3de6158, _Source="C:\\Users\\Default\\Application Data" | out: _Dest="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data" [0121.525] wcscat (in: _Dest=0x3de6158, _Source="\\" | out: _Dest="C:\\Users\\Default\\Application Data\\") returned="C:\\Users\\Default\\Application Data\\" [0121.525] wcscat (in: _Dest=0x3de6158, _Source="*" | out: _Dest="C:\\Users\\Default\\Application Data\\*") returned="C:\\Users\\Default\\Application Data\\*" [0121.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea34a0 [0121.525] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea34a0) returned 1 [0121.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6158) returned 1 [0121.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6928) returned 1 Thread: id = 262 os_tid = 0xdbc [0121.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e73330 [0121.527] wcscpy (in: _Dest=0x3e73330, _Source="C:\\Users\\Default\\Contacts" | out: _Dest="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts" [0121.527] wcscat (in: _Dest=0x3e73330, _Source="\\" | out: _Dest="C:\\Users\\Default\\Contacts\\") returned="C:\\Users\\Default\\Contacts\\" [0121.527] wcscat (in: _Dest=0x3e73330, _Source="*" | out: _Dest="C:\\Users\\Default\\Contacts\\*") returned="C:\\Users\\Default\\Contacts\\*" [0121.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea34a0 [0121.527] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73470 [0121.528] wcscmp (_String1=".", _String2=".") returned 0 [0121.528] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.528] wcscmp (_String1="..", _String2=".") returned 1 [0121.528] wcscmp (_String1="..", _String2="..") returned 0 [0121.528] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x1ff8a75a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0121.528] wcscmp (_String1="Administrator.contact", _String2=".") returned 1 [0121.528] wcscmp (_String1="Administrator.contact", _String2="..") returned 1 [0121.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0038 [0121.528] wcscpy (in: _Dest=0x3ee0038, _Source="C:\\Users\\Default\\Contacts" | out: _Dest="C:\\Users\\Default\\Contacts") returned="C:\\Users\\Default\\Contacts" [0121.528] wcscat (in: _Dest=0x3ee0038, _Source="\\" | out: _Dest="C:\\Users\\Default\\Contacts\\") returned="C:\\Users\\Default\\Contacts\\" [0121.528] wcscat (in: _Dest=0x3ee0038, _Source="Administrator.contact" | out: _Dest="C:\\Users\\Default\\Contacts\\Administrator.contact") returned="C:\\Users\\Default\\Contacts\\Administrator.contact" [0121.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0121.779] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.779] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.779] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.779] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.779] FindClose (in: hFindFile=0x3e73470 | out: hFindFile=0x3e73470) returned 1 [0121.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea34a0) returned 1 [0121.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73330) returned 1 [0121.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0110) returned 1 Thread: id = 263 os_tid = 0xdc4 [0121.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e734f0 [0121.541] wcscpy (in: _Dest=0x3e734f0, _Source="C:\\Users\\Default\\Cookies" | out: _Dest="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies" [0121.541] wcscat (in: _Dest=0x3e734f0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Cookies\\") returned="C:\\Users\\Default\\Cookies\\" [0121.541] wcscat (in: _Dest=0x3e734f0, _Source="*" | out: _Dest="C:\\Users\\Default\\Cookies\\*") returned="C:\\Users\\Default\\Cookies\\*" [0121.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3708 [0121.541] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3708) returned 1 [0121.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e734f0) returned 1 [0121.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf9d0) returned 1 Thread: id = 264 os_tid = 0xdc8 [0121.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dcf9d0 [0121.543] wcscpy (in: _Dest=0x3dcf9d0, _Source="C:\\Users\\Default\\Desktop" | out: _Dest="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop" [0121.543] wcscat (in: _Dest=0x3dcf9d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Desktop\\") returned="C:\\Users\\Default\\Desktop\\" [0121.543] wcscat (in: _Dest=0x3dcf9d0, _Source="*" | out: _Dest="C:\\Users\\Default\\Desktop\\*") returned="C:\\Users\\Default\\Desktop\\*" [0121.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3708 [0121.543] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e734f0 [0121.544] wcscmp (_String1=".", _String2=".") returned 0 [0121.544] FindNextFileW (in: hFindFile=0x3e734f0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.544] wcscmp (_String1="..", _String2=".") returned 1 [0121.544] wcscmp (_String1="..", _String2="..") returned 0 [0121.544] FindNextFileW (in: hFindFile=0x3e734f0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.544] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.544] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.544] FindNextFileW (in: hFindFile=0x3e734f0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c82b40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.544] FindClose (in: hFindFile=0x3e734f0 | out: hFindFile=0x3e734f0) returned 1 [0121.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3708) returned 1 [0121.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf9d0) returned 1 [0121.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf690) returned 1 Thread: id = 265 os_tid = 0xdc0 [0121.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e85c50 [0121.546] wcscpy (in: _Dest=0x3e85c50, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0121.546] wcscat (in: _Dest=0x3e85c50, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0121.546] wcscat (in: _Dest=0x3e85c50, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\*") returned="C:\\Users\\Default\\Documents\\*" [0121.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3708 [0121.546] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf690 [0121.548] wcscmp (_String1=".", _String2=".") returned 0 [0121.548] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.548] wcscmp (_String1="..", _String2=".") returned 1 [0121.548] wcscmp (_String1="..", _String2="..") returned 0 [0121.549] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27f56565, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.549] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.549] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.549] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0121.549] wcscmp (_String1="My Music", _String2=".") returned 1 [0121.549] wcscmp (_String1="My Music", _String2="..") returned 1 [0121.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6928 [0121.549] wcscpy (in: _Dest=0x3de6928, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0121.549] wcscat (in: _Dest=0x3de6928, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0121.549] wcscat (in: _Dest=0x3de6928, _Source="My Music" | out: _Dest="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music" [0121.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0121.782] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0121.782] wcscmp (_String1="My Pictures", _String2=".") returned 1 [0121.782] wcscmp (_String1="My Pictures", _String2="..") returned 1 [0121.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e14c48 [0121.782] wcscpy (in: _Dest=0x3e14c48, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0121.782] wcscat (in: _Dest=0x3e14c48, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0121.782] wcscat (in: _Dest=0x3e14c48, _Source="My Pictures" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures" [0121.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0121.783] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0121.783] wcscmp (_String1="My Videos", _String2=".") returned 1 [0121.783] wcscmp (_String1="My Videos", _String2="..") returned 1 [0121.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e15278 [0121.783] wcscpy (in: _Dest=0x3e15278, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents" [0121.783] wcscat (in: _Dest=0x3e15278, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\" [0121.783] wcscat (in: _Dest=0x3e15278, _Source="My Videos" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos" [0121.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e15278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc [0121.785] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x175548fb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x175548fb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x175548fb, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0121.785] FindClose (in: hFindFile=0x3dcf690 | out: hFindFile=0x3dcf690) returned 1 [0121.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3708) returned 1 [0121.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0121.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfb90) returned 1 Thread: id = 266 os_tid = 0xda4 [0121.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e85ce0 [0121.550] wcscpy (in: _Dest=0x3e85ce0, _Source="C:\\Users\\Default\\Downloads" | out: _Dest="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads" [0121.550] wcscat (in: _Dest=0x3e85ce0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Downloads\\") returned="C:\\Users\\Default\\Downloads\\" [0121.550] wcscat (in: _Dest=0x3e85ce0, _Source="*" | out: _Dest="C:\\Users\\Default\\Downloads\\*") returned="C:\\Users\\Default\\Downloads\\*" [0121.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3970 [0121.550] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf9d0 [0121.551] wcscmp (_String1=".", _String2=".") returned 0 [0121.551] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.551] wcscmp (_String1="..", _String2=".") returned 1 [0121.551] wcscmp (_String1="..", _String2="..") returned 0 [0121.551] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.551] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.551] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.551] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ee4144, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.551] FindClose (in: hFindFile=0x3dcf9d0 | out: hFindFile=0x3dcf9d0) returned 1 [0121.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3970) returned 1 [0121.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ce0) returned 1 [0121.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf650) returned 1 Thread: id = 267 os_tid = 0xd9c [0121.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e85ce0 [0121.558] wcscpy (in: _Dest=0x3e85ce0, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0121.558] wcscat (in: _Dest=0x3e85ce0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0121.558] wcscat (in: _Dest=0x3e85ce0, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\*") returned="C:\\Users\\Default\\Favorites\\*" [0121.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3970 [0121.558] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0121.686] wcscmp (_String1=".", _String2=".") returned 0 [0121.686] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.686] wcscmp (_String1="..", _String2=".") returned 1 [0121.686] wcscmp (_String1="..", _String2="..") returned 0 [0121.686] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.686] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.686] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.687] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299394d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0121.687] wcscmp (_String1="Links", _String2=".") returned 1 [0121.687] wcscmp (_String1="Links", _String2="..") returned 1 [0121.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6158 [0121.687] wcscpy (in: _Dest=0x3de6158, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0121.687] wcscat (in: _Dest=0x3de6158, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0121.687] wcscat (in: _Dest=0x3de6158, _Source="Links" | out: _Dest="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links" [0121.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0121.839] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7614190, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0121.839] wcscmp (_String1="Microsoft Websites", _String2=".") returned 1 [0121.840] wcscmp (_String1="Microsoft Websites", _String2="..") returned 1 [0121.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edffd0 [0121.840] wcscpy (in: _Dest=0x3edffd0, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0121.840] wcscat (in: _Dest=0x3edffd0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0121.840] wcscat (in: _Dest=0x3edffd0, _Source="Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0121.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edffd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0121.841] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0121.841] wcscmp (_String1="MSN Websites", _String2=".") returned 1 [0121.841] wcscmp (_String1="MSN Websites", _String2="..") returned 1 [0121.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e14a38 [0121.841] wcscpy (in: _Dest=0x3e14a38, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0121.841] wcscat (in: _Dest=0x3e14a38, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0121.841] wcscat (in: _Dest=0x3e14a38, _Source="MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0121.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0121.843] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0121.843] wcscmp (_String1="Windows Live", _String2=".") returned 1 [0121.843] wcscmp (_String1="Windows Live", _String2="..") returned 1 [0121.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e147d0 [0121.843] wcscpy (in: _Dest=0x3e147d0, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites" [0121.843] wcscat (in: _Dest=0x3e147d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\" [0121.843] wcscat (in: _Dest=0x3e147d0, _Source="Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0121.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e147d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0121.845] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0121.845] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0121.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3970) returned 1 [0121.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ce0) returned 1 [0121.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf790) returned 1 Thread: id = 268 os_tid = 0xdd4 [0121.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf650 [0121.561] wcscpy (in: _Dest=0x3dcf650, _Source="C:\\Users\\Default\\Links" | out: _Dest="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links" [0121.562] wcscat (in: _Dest=0x3dcf650, _Source="\\" | out: _Dest="C:\\Users\\Default\\Links\\") returned="C:\\Users\\Default\\Links\\" [0121.562] wcscat (in: _Dest=0x3dcf650, _Source="*" | out: _Dest="C:\\Users\\Default\\Links\\*") returned="C:\\Users\\Default\\Links\\*" [0121.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3bd8 [0121.562] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0122.503] wcscmp (_String1=".", _String2=".") returned 0 [0122.503] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.503] wcscmp (_String1="..", _String2=".") returned 1 [0122.503] wcscmp (_String1="..", _String2="..") returned 0 [0122.503] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280f9488, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.503] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0122.503] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0122.503] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28087067, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0122.503] wcscmp (_String1="Desktop.lnk", _String2=".") returned 1 [0122.503] wcscmp (_String1="Desktop.lnk", _String2="..") returned 1 [0122.503] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x280d3328, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0122.503] wcscmp (_String1="Downloads.lnk", _String2=".") returned 1 [0122.503] wcscmp (_String1="Downloads.lnk", _String2="..") returned 1 [0122.503] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28087067, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0122.503] wcscmp (_String1="RecentPlaces.lnk", _String2=".") returned 1 [0122.503] wcscmp (_String1="RecentPlaces.lnk", _String2="..") returned 1 [0122.503] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28087067, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0122.503] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0122.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3bd8) returned 1 [0122.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf650) returned 1 [0122.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e791a8) returned 1 Thread: id = 269 os_tid = 0xa90 [0121.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6158 [0121.563] wcscpy (in: _Dest=0x3de6158, _Source="C:\\Users\\Default\\Local Settings" | out: _Dest="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings" [0121.563] wcscat (in: _Dest=0x3de6158, _Source="\\" | out: _Dest="C:\\Users\\Default\\Local Settings\\") returned="C:\\Users\\Default\\Local Settings\\" [0121.563] wcscat (in: _Dest=0x3de6158, _Source="*" | out: _Dest="C:\\Users\\Default\\Local Settings\\*") returned="C:\\Users\\Default\\Local Settings\\*" [0121.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3e40 [0121.563] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3e40) returned 1 [0121.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6158) returned 1 [0121.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55c28) returned 1 Thread: id = 270 os_tid = 0xc68 [0121.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf9d0 [0121.573] wcscpy (in: _Dest=0x3dcf9d0, _Source="C:\\Users\\Default\\Music" | out: _Dest="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music" [0121.573] wcscat (in: _Dest=0x3dcf9d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Music\\") returned="C:\\Users\\Default\\Music\\" [0121.573] wcscat (in: _Dest=0x3dcf9d0, _Source="*" | out: _Dest="C:\\Users\\Default\\Music\\*") returned="C:\\Users\\Default\\Music\\*" [0121.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3e40 [0121.573] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa50 [0122.005] wcscmp (_String1=".", _String2=".") returned 0 [0122.005] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa11f028, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.005] wcscmp (_String1="..", _String2=".") returned 1 [0122.005] wcscmp (_String1="..", _String2="..") returned 0 [0122.005] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.005] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0122.005] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0122.005] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27ccee00, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0122.006] FindClose (in: hFindFile=0x3dcfa50 | out: hFindFile=0x3dcfa50) returned 1 [0122.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3e40) returned 1 [0122.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf9d0) returned 1 [0122.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79020) returned 1 Thread: id = 271 os_tid = 0x474 [0121.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0121.576] wcscpy (in: _Dest=0x3e08220, _Source="C:\\Users\\Default\\My Documents" | out: _Dest="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents" [0121.576] wcscat (in: _Dest=0x3e08220, _Source="\\" | out: _Dest="C:\\Users\\Default\\My Documents\\") returned="C:\\Users\\Default\\My Documents\\" [0121.576] wcscat (in: _Dest=0x3e08220, _Source="*" | out: _Dest="C:\\Users\\Default\\My Documents\\*") returned="C:\\Users\\Default\\My Documents\\*" [0121.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea40a8 [0121.576] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea40a8) returned 1 [0121.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0121.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 Thread: id = 272 os_tid = 0x528 [0121.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e734f0 [0121.578] wcscpy (in: _Dest=0x3e734f0, _Source="C:\\Users\\Default\\NetHood" | out: _Dest="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood" [0121.578] wcscat (in: _Dest=0x3e734f0, _Source="\\" | out: _Dest="C:\\Users\\Default\\NetHood\\") returned="C:\\Users\\Default\\NetHood\\" [0121.578] wcscat (in: _Dest=0x3e734f0, _Source="*" | out: _Dest="C:\\Users\\Default\\NetHood\\*") returned="C:\\Users\\Default\\NetHood\\*" [0121.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea40a8 [0121.578] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea40a8) returned 1 [0121.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e734f0) returned 1 [0121.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf8d0) returned 1 Thread: id = 273 os_tid = 0x140 [0121.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf8d0 [0121.580] wcscpy (in: _Dest=0x3dcf8d0, _Source="C:\\Users\\Default\\Pictures" | out: _Dest="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures" [0121.580] wcscat (in: _Dest=0x3dcf8d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Pictures\\") returned="C:\\Users\\Default\\Pictures\\" [0121.580] wcscat (in: _Dest=0x3dcf8d0, _Source="*" | out: _Dest="C:\\Users\\Default\\Pictures\\*") returned="C:\\Users\\Default\\Pictures\\*" [0121.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea40a8 [0121.580] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0121.689] wcscmp (_String1=".", _String2=".") returned 0 [0121.689] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.689] wcscmp (_String1="..", _String2=".") returned 1 [0121.689] wcscmp (_String1="..", _String2="..") returned 0 [0121.689] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.689] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.689] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.689] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.689] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0121.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea40a8) returned 1 [0121.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf8d0) returned 1 [0121.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067180) returned 1 Thread: id = 274 os_tid = 0x484 [0121.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07f50 [0121.581] wcscpy (in: _Dest=0x3e07f50, _Source="C:\\Users\\Default\\PrintHood" | out: _Dest="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood" [0121.581] wcscat (in: _Dest=0x3e07f50, _Source="\\" | out: _Dest="C:\\Users\\Default\\PrintHood\\") returned="C:\\Users\\Default\\PrintHood\\" [0121.581] wcscat (in: _Dest=0x3e07f50, _Source="*" | out: _Dest="C:\\Users\\Default\\PrintHood\\*") returned="C:\\Users\\Default\\PrintHood\\*" [0121.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4310 [0121.581] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4310) returned 1 [0121.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f50) returned 1 [0121.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067080) returned 1 Thread: id = 275 os_tid = 0x5d0 [0121.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067080 [0121.588] wcscpy (in: _Dest=0x3067080, _Source="C:\\Users\\Default\\Recent" | out: _Dest="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent" [0121.588] wcscat (in: _Dest=0x3067080, _Source="\\" | out: _Dest="C:\\Users\\Default\\Recent\\") returned="C:\\Users\\Default\\Recent\\" [0121.588] wcscat (in: _Dest=0x3067080, _Source="*" | out: _Dest="C:\\Users\\Default\\Recent\\*") returned="C:\\Users\\Default\\Recent\\*" [0121.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4310 [0121.588] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4310) returned 1 [0121.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067080) returned 1 [0121.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78e60) returned 1 Thread: id = 276 os_tid = 0x244 [0121.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e07f50 [0121.589] wcscpy (in: _Dest=0x3e07f50, _Source="C:\\Users\\Default\\Saved Games" | out: _Dest="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games" [0121.590] wcscat (in: _Dest=0x3e07f50, _Source="\\" | out: _Dest="C:\\Users\\Default\\Saved Games\\") returned="C:\\Users\\Default\\Saved Games\\" [0121.590] wcscat (in: _Dest=0x3e07f50, _Source="*" | out: _Dest="C:\\Users\\Default\\Saved Games\\*") returned="C:\\Users\\Default\\Saved Games\\*" [0121.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4310 [0121.590] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0121.691] wcscmp (_String1=".", _String2=".") returned 0 [0121.691] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.691] wcscmp (_String1="..", _String2=".") returned 1 [0121.691] wcscmp (_String1="..", _String2="..") returned 0 [0121.691] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.691] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.691] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.691] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27fa2825, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.691] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0121.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4310) returned 1 [0121.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f50) returned 1 [0121.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56210) returned 1 Thread: id = 277 os_tid = 0x4d0 [0121.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3067180 [0121.693] wcscpy (in: _Dest=0x3067180, _Source="C:\\Users\\Default\\Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0121.693] wcscat (in: _Dest=0x3067180, _Source="\\" | out: _Dest="C:\\Users\\Default\\Searches\\") returned="C:\\Users\\Default\\Searches\\" [0121.693] wcscat (in: _Dest=0x3067180, _Source="*" | out: _Dest="C:\\Users\\Default\\Searches\\*") returned="C:\\Users\\Default\\Searches\\*" [0121.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4310 [0121.693] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf9d0 [0122.007] wcscmp (_String1=".", _String2=".") returned 0 [0122.008] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.008] wcscmp (_String1="..", _String2=".") returned 1 [0122.008] wcscmp (_String1="..", _String2="..") returned 0 [0122.008] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.008] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0122.008] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0122.008] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0122.008] wcscmp (_String1="Everywhere.search-ms", _String2=".") returned 1 [0122.008] wcscmp (_String1="Everywhere.search-ms", _String2="..") returned 1 [0122.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee07f0 [0122.008] wcscpy (in: _Dest=0x3ee07f0, _Source="C:\\Users\\Default\\Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0122.009] wcscat (in: _Dest=0x3ee07f0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Searches\\") returned="C:\\Users\\Default\\Searches\\" [0122.009] wcscat (in: _Dest=0x3ee07f0, _Source="Everywhere.search-ms" | out: _Dest="C:\\Users\\Default\\Searches\\Everywhere.search-ms") returned="C:\\Users\\Default\\Searches\\Everywhere.search-ms" [0122.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee07f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0122.981] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0122.981] wcscmp (_String1="Indexed Locations.search-ms", _String2=".") returned 1 [0122.982] wcscmp (_String1="Indexed Locations.search-ms", _String2="..") returned 1 [0122.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f3f8 [0122.982] wcscpy (in: _Dest=0x3f3f3f8, _Source="C:\\Users\\Default\\Searches" | out: _Dest="C:\\Users\\Default\\Searches") returned="C:\\Users\\Default\\Searches" [0122.982] wcscat (in: _Dest=0x3f3f3f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Searches\\") returned="C:\\Users\\Default\\Searches\\" [0122.982] wcscat (in: _Dest=0x3f3f3f8, _Source="Indexed Locations.search-ms" | out: _Dest="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms") returned="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" [0122.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0122.985] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6c426d0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c426d0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0122.985] FindClose (in: hFindFile=0x3dcf9d0 | out: hFindFile=0x3dcf9d0) returned 1 [0122.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4310) returned 1 [0122.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067180) returned 1 [0122.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30671c0) returned 1 Thread: id = 278 os_tid = 0x480 [0121.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf678 [0121.696] wcscpy (in: _Dest=0x3edf678, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat" [0121.696] wcscat (in: _Dest=0x3edf678, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\" [0121.696] wcscat (in: _Dest=0x3edf678, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\*") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\*" [0121.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea40a8 [0121.696] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd8fbd760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd8fbd760, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0124.965] wcscmp (_String1=".", _String2=".") returned 0 [0124.965] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd8fbd760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd8fbd760, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.966] wcscmp (_String1="..", _String2=".") returned 1 [0124.966] wcscmp (_String1="..", _String2="..") returned 0 [0124.966] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0124.966] wcscmp (_String1="ActiveX", _String2=".") returned 1 [0124.966] wcscmp (_String1="ActiveX", _String2="..") returned 1 [0124.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26e08 [0124.966] wcscpy (in: _Dest=0x7a26e08, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat" [0124.966] wcscat (in: _Dest=0x7a26e08, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\" [0124.966] wcscat (in: _Dest=0x7a26e08, _Source="ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0125.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0125.939] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 0 [0125.939] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0125.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea40a8) returned 1 [0125.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf678) returned 1 [0125.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe14a8) returned 1 Thread: id = 279 os_tid = 0x7bc [0121.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe66c8 [0121.697] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Program Files\\Common Files\\Adobe\\ARM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM") returned="C:\\Program Files\\Common Files\\Adobe\\ARM" [0121.697] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\" [0121.697] wcscat (in: _Dest=0x2fe66c8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\*") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\*" [0121.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4578 [0121.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0121.697] wcscmp (_String1=".", _String2=".") returned 0 [0121.697] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.698] wcscmp (_String1="..", _String2=".") returned 1 [0121.698] wcscmp (_String1="..", _String2="..") returned 0 [0121.698] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0121.698] wcscmp (_String1="1.0", _String2=".") returned 1 [0121.698] wcscmp (_String1="1.0", _String2="..") returned 1 [0121.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6728 [0121.698] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Program Files\\Common Files\\Adobe\\ARM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM") returned="C:\\Program Files\\Common Files\\Adobe\\ARM" [0121.698] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\" [0121.698] wcscat (in: _Dest=0x2fe6728, _Source="1.0" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0" [0122.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0122.766] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0122.766] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0122.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4578) returned 1 [0122.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0122.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14ae8) returned 1 Thread: id = 280 os_tid = 0x308 [0121.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee00a0 [0121.698] wcscpy (in: _Dest=0x3ee00a0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0121.698] wcscat (in: _Dest=0x3ee00a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0121.698] wcscat (in: _Dest=0x3ee00a0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\*" [0121.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea47e0 [0121.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0124.408] wcscmp (_String1=".", _String2=".") returned 0 [0124.408] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.408] wcscmp (_String1="..", _String2=".") returned 1 [0124.408] wcscmp (_String1="..", _String2="..") returned 0 [0124.408] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0124.408] wcscmp (_String1="ca_ES", _String2=".") returned 1 [0124.408] wcscmp (_String1="ca_ES", _String2="..") returned 1 [0124.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26858 [0124.408] wcscpy (in: _Dest=0x7a26858, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0124.408] wcscat (in: _Dest=0x7a26858, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0124.408] wcscat (in: _Dest=0x7a26858, _Source="ca_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" [0139.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0139.691] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0139.691] wcscmp (_String1="cs_CZ", _String2=".") returned 1 [0139.691] wcscmp (_String1="cs_CZ", _String2="..") returned 1 [0139.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a265b8 [0139.691] wcscpy (in: _Dest=0x7a265b8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.691] wcscat (in: _Dest=0x7a265b8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.691] wcscat (in: _Dest=0x7a265b8, _Source="cs_CZ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" [0139.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a265b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0139.692] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0139.692] wcscmp (_String1="da_DK", _String2=".") returned 1 [0139.692] wcscmp (_String1="da_DK", _String2="..") returned 1 [0139.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a264d8 [0139.692] wcscpy (in: _Dest=0x7a264d8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.692] wcscat (in: _Dest=0x7a264d8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.693] wcscat (in: _Dest=0x7a264d8, _Source="da_DK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" [0139.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a264d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0139.694] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0139.694] wcscmp (_String1="de_DE", _String2=".") returned 1 [0139.694] wcscmp (_String1="de_DE", _String2="..") returned 1 [0139.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26e78 [0139.694] wcscpy (in: _Dest=0x7a26e78, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.694] wcscat (in: _Dest=0x7a26e78, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.694] wcscat (in: _Dest=0x7a26e78, _Source="de_DE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" [0139.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b0 [0139.695] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0139.695] wcscmp (_String1="en_US", _String2=".") returned 1 [0139.695] wcscmp (_String1="en_US", _String2="..") returned 1 [0139.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26b68 [0139.695] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.695] wcscat (in: _Dest=0x7a26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.695] wcscat (in: _Dest=0x7a26b68, _Source="en_US" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" [0139.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0139.696] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0139.696] wcscmp (_String1="es_ES", _String2=".") returned 1 [0139.696] wcscmp (_String1="es_ES", _String2="..") returned 1 [0139.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26318 [0139.696] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.696] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.697] wcscat (in: _Dest=0x7a26318, _Source="es_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" [0139.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b8 [0139.697] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0139.697] wcscmp (_String1="eu_ES", _String2=".") returned 1 [0139.697] wcscmp (_String1="eu_ES", _String2="..") returned 1 [0139.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26548 [0139.698] wcscpy (in: _Dest=0x7a26548, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.698] wcscat (in: _Dest=0x7a26548, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.698] wcscat (in: _Dest=0x7a26548, _Source="eu_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" [0139.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0139.699] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0139.699] wcscmp (_String1="fi_FI", _String2=".") returned 1 [0139.699] wcscmp (_String1="fi_FI", _String2="..") returned 1 [0139.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a269a8 [0139.699] wcscpy (in: _Dest=0x7a269a8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.699] wcscat (in: _Dest=0x7a269a8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.699] wcscat (in: _Dest=0x7a269a8, _Source="fi_FI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" [0139.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a269a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0139.700] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0139.700] wcscmp (_String1="fr_FR", _String2=".") returned 1 [0139.700] wcscmp (_String1="fr_FR", _String2="..") returned 1 [0139.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26938 [0139.700] wcscpy (in: _Dest=0x7a26938, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.700] wcscat (in: _Dest=0x7a26938, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.700] wcscat (in: _Dest=0x7a26938, _Source="fr_FR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" [0139.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0139.701] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0139.701] wcscmp (_String1="hr_HR", _String2=".") returned 1 [0139.701] wcscmp (_String1="hr_HR", _String2="..") returned 1 [0139.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26708 [0139.701] wcscpy (in: _Dest=0x7a26708, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.702] wcscat (in: _Dest=0x7a26708, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.702] wcscat (in: _Dest=0x7a26708, _Source="hr_HR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" [0139.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0139.703] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0139.703] wcscmp (_String1="hu_HU", _String2=".") returned 1 [0139.703] wcscmp (_String1="hu_HU", _String2="..") returned 1 [0139.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26778 [0139.703] wcscpy (in: _Dest=0x7a26778, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.703] wcscat (in: _Dest=0x7a26778, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.703] wcscat (in: _Dest=0x7a26778, _Source="hu_HU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" [0139.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0139.704] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0139.704] wcscmp (_String1="it_IT", _String2=".") returned 1 [0139.704] wcscmp (_String1="it_IT", _String2="..") returned 1 [0139.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26a18 [0139.704] wcscpy (in: _Dest=0x7a26a18, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.704] wcscat (in: _Dest=0x7a26a18, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.704] wcscat (in: _Dest=0x7a26a18, _Source="it_IT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" [0139.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0139.712] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0139.712] wcscmp (_String1="ja_JP", _String2=".") returned 1 [0139.712] wcscmp (_String1="ja_JP", _String2="..") returned 1 [0139.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69bb8 [0139.712] wcscpy (in: _Dest=0x3e69bb8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.712] wcscat (in: _Dest=0x3e69bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.712] wcscat (in: _Dest=0x3e69bb8, _Source="ja_JP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" [0139.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0139.713] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0139.713] wcscmp (_String1="ko_KR", _String2=".") returned 1 [0139.713] wcscmp (_String1="ko_KR", _String2="..") returned 1 [0139.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69e58 [0139.713] wcscpy (in: _Dest=0x3e69e58, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.713] wcscat (in: _Dest=0x3e69e58, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.713] wcscat (in: _Dest=0x3e69e58, _Source="ko_KR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" [0139.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0139.714] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0139.714] wcscmp (_String1="nb_NO", _String2=".") returned 1 [0139.714] wcscmp (_String1="nb_NO", _String2="..") returned 1 [0139.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69ad8 [0139.714] wcscpy (in: _Dest=0x3e69ad8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.715] wcscat (in: _Dest=0x3e69ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.715] wcscat (in: _Dest=0x3e69ad8, _Source="nb_NO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" [0139.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0139.715] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0139.716] wcscmp (_String1="nl_NL", _String2=".") returned 1 [0139.716] wcscmp (_String1="nl_NL", _String2="..") returned 1 [0139.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69ec8 [0139.716] wcscpy (in: _Dest=0x3e69ec8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.716] wcscat (in: _Dest=0x3e69ec8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.716] wcscat (in: _Dest=0x3e69ec8, _Source="nl_NL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" [0139.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69ec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0139.721] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0139.721] wcscmp (_String1="pl_PL", _String2=".") returned 1 [0139.721] wcscmp (_String1="pl_PL", _String2="..") returned 1 [0139.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69de8 [0139.721] wcscpy (in: _Dest=0x3e69de8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.721] wcscat (in: _Dest=0x3e69de8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.721] wcscat (in: _Dest=0x3e69de8, _Source="pl_PL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" [0139.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0139.722] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0139.722] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0139.722] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0139.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69b48 [0139.722] wcscpy (in: _Dest=0x3e69b48, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.722] wcscat (in: _Dest=0x3e69b48, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.722] wcscat (in: _Dest=0x3e69b48, _Source="pt_BR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" [0139.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0139.723] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0139.723] wcscmp (_String1="ro_RO", _String2=".") returned 1 [0139.723] wcscmp (_String1="ro_RO", _String2="..") returned 1 [0139.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a230d0 [0139.723] wcscpy (in: _Dest=0x7a230d0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.723] wcscat (in: _Dest=0x7a230d0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.723] wcscat (in: _Dest=0x7a230d0, _Source="ro_RO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" [0139.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a230d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0139.724] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0139.724] wcscmp (_String1="ru_RU", _String2=".") returned 1 [0139.724] wcscmp (_String1="ru_RU", _String2="..") returned 1 [0139.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23530 [0139.725] wcscpy (in: _Dest=0x7a23530, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.725] wcscat (in: _Dest=0x7a23530, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.725] wcscat (in: _Dest=0x7a23530, _Source="ru_RU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" [0139.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0139.735] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0139.735] wcscmp (_String1="sk_SK", _String2=".") returned 1 [0139.735] wcscmp (_String1="sk_SK", _String2="..") returned 1 [0139.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23b50 [0139.735] wcscpy (in: _Dest=0x7a23b50, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.735] wcscat (in: _Dest=0x7a23b50, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.735] wcscat (in: _Dest=0x7a23b50, _Source="sk_SK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" [0139.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f4 [0139.736] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0139.736] wcscmp (_String1="sl_SI", _String2=".") returned 1 [0139.737] wcscmp (_String1="sl_SI", _String2="..") returned 1 [0139.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23610 [0139.737] wcscpy (in: _Dest=0x7a23610, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.737] wcscat (in: _Dest=0x7a23610, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.737] wcscat (in: _Dest=0x7a23610, _Source="sl_SI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" [0139.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0139.738] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0139.738] wcscmp (_String1="sv_SE", _String2=".") returned 1 [0139.738] wcscmp (_String1="sv_SE", _String2="..") returned 1 [0139.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23680 [0139.738] wcscpy (in: _Dest=0x7a23680, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.738] wcscat (in: _Dest=0x7a23680, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.738] wcscat (in: _Dest=0x7a23680, _Source="sv_SE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" [0139.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0139.739] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0139.739] wcscmp (_String1="tr_TR", _String2=".") returned 1 [0139.740] wcscmp (_String1="tr_TR", _String2="..") returned 1 [0139.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1398 [0139.740] wcscpy (in: _Dest=0x3db1398, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.740] wcscat (in: _Dest=0x3db1398, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.740] wcscat (in: _Dest=0x3db1398, _Source="tr_TR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" [0139.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db1398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0139.741] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0139.741] wcscmp (_String1="uk_UA", _String2=".") returned 1 [0139.741] wcscmp (_String1="uk_UA", _String2="..") returned 1 [0139.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1408 [0139.741] wcscpy (in: _Dest=0x3db1408, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.741] wcscat (in: _Dest=0x3db1408, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.741] wcscat (in: _Dest=0x3db1408, _Source="uk_UA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" [0139.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db1408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0139.742] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0139.742] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0139.742] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0139.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db12b8 [0139.742] wcscpy (in: _Dest=0x3db12b8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.743] wcscat (in: _Dest=0x3db12b8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.743] wcscat (in: _Dest=0x3db12b8, _Source="zh_CN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" [0139.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db12b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0139.743] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0139.744] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0139.744] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0139.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1248 [0139.744] wcscpy (in: _Dest=0x3db1248, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg" [0139.744] wcscat (in: _Dest=0x3db1248, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\" [0139.744] wcscat (in: _Dest=0x3db1248, _Source="zh_TW" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" [0139.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db1248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230c [0139.745] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0139.745] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0139.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea47e0) returned 1 [0139.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee00a0) returned 1 [0139.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 Thread: id = 281 os_tid = 0x370 [0121.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d1c0 [0121.699] wcscpy (in: _Dest=0x7a2d1c0, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0121.699] wcscat (in: _Dest=0x7a2d1c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0121.699] wcscat (in: _Dest=0x7a2d1c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\*") returned="C:\\Users\\EEBsYm5\\AppData\\*" [0121.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4a48 [0121.700] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\*", lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0121.700] wcscmp (_String1=".", _String2=".") returned 0 [0121.700] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.700] wcscmp (_String1="..", _String2=".") returned 1 [0121.700] wcscmp (_String1="..", _String2="..") returned 0 [0121.700] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0121.700] wcscmp (_String1="Local", _String2=".") returned 1 [0121.700] wcscmp (_String1="Local", _String2="..") returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e07c38 [0121.700] wcscpy (in: _Dest=0x3e07c38, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0121.700] wcscat (in: _Dest=0x3e07c38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0121.700] wcscat (in: _Dest=0x3e07c38, _Source="Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0121.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e07c38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0121.906] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0121.906] wcscmp (_String1="LocalLow", _String2=".") returned 1 [0121.906] wcscmp (_String1="LocalLow", _String2="..") returned 1 [0121.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e58bf8 [0121.906] wcscpy (in: _Dest=0x3e58bf8, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0121.907] wcscat (in: _Dest=0x3e58bf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0121.907] wcscat (in: _Dest=0x3e58bf8, _Source="LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0121.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e58bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0121.908] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f68e480, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f68e480, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0121.908] wcscmp (_String1="Roaming", _String2=".") returned 1 [0121.908] wcscmp (_String1="Roaming", _String2="..") returned 1 [0121.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e590f8 [0121.908] wcscpy (in: _Dest=0x3e590f8, _Source="C:\\Users\\EEBsYm5\\AppData" | out: _Dest="C:\\Users\\EEBsYm5\\AppData") returned="C:\\Users\\EEBsYm5\\AppData" [0121.908] wcscat (in: _Dest=0x3e590f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\") returned="C:\\Users\\EEBsYm5\\AppData\\" [0121.908] wcscat (in: _Dest=0x3e590f8, _Source="Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0121.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e590f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0121.910] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f68e480, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f68e480, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0121.910] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0121.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4a48) returned 1 [0121.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d1c0) returned 1 [0121.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf910) returned 1 Thread: id = 282 os_tid = 0x444 [0121.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de64c8 [0121.701] wcscpy (in: _Dest=0x3de64c8, _Source="C:\\Users\\EEBsYm5\\Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data") returned="C:\\Users\\EEBsYm5\\Application Data" [0121.701] wcscat (in: _Dest=0x3de64c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data\\") returned="C:\\Users\\EEBsYm5\\Application Data\\" [0121.701] wcscat (in: _Dest=0x3de64c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Application Data\\*") returned="C:\\Users\\EEBsYm5\\Application Data\\*" [0121.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0121.701] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Application Data\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0121.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de64c8) returned 1 [0121.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5e88) returned 1 Thread: id = 283 os_tid = 0x7f8 [0121.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d240 [0121.703] wcscpy (in: _Dest=0x7a2d240, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0121.703] wcscat (in: _Dest=0x7a2d240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0121.703] wcscat (in: _Dest=0x7a2d240, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\*") returned="C:\\Users\\EEBsYm5\\Contacts\\*" [0121.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0121.703] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Contacts\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d280 [0121.703] wcscmp (_String1=".", _String2=".") returned 0 [0121.703] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.703] wcscmp (_String1="..", _String2=".") returned 1 [0121.703] wcscmp (_String1="..", _String2="..") returned 0 [0121.703] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1ff8a75a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0121.703] wcscmp (_String1="Administrator.contact", _String2=".") returned 1 [0121.703] wcscmp (_String1="Administrator.contact", _String2="..") returned 1 [0121.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0108 [0121.704] wcscpy (in: _Dest=0x3ee0108, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0121.704] wcscat (in: _Dest=0x3ee0108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0121.704] wcscat (in: _Dest=0x3ee0108, _Source="Administrator.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" [0122.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208 [0122.769] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.769] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0122.769] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0122.769] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a55460, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x56a55460, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x56a55460, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ihnvbh euuncnh.contact", cAlternateFileName="IHNVBH~1.CON")) returned 1 [0122.769] wcscmp (_String1="ihnvbh euuncnh.contact", _String2=".") returned 1 [0122.769] wcscmp (_String1="ihnvbh euuncnh.contact", _String2="..") returned 1 [0122.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26628 [0122.769] wcscpy (in: _Dest=0x7a26628, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0122.769] wcscat (in: _Dest=0x7a26628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0122.769] wcscat (in: _Dest=0x7a26628, _Source="ihnvbh euuncnh.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" [0122.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0122.777] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abb8cc0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x7abb8cc0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x7abb8cc0, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lodkd auftnm.contact", cAlternateFileName="LODKDA~1.CON")) returned 1 [0122.777] wcscmp (_String1="lodkd auftnm.contact", _String2=".") returned 1 [0122.777] wcscmp (_String1="lodkd auftnm.contact", _String2="..") returned 1 [0122.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edf2d0 [0122.777] wcscpy (in: _Dest=0x3edf2d0, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0122.777] wcscat (in: _Dest=0x3edf2d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0122.777] wcscat (in: _Dest=0x3edf2d0, _Source="lodkd auftnm.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" [0122.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0122.779] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4ad560, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x6c4ad560, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x6c4ad560, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="mneuc uhnfghgg.contact", cAlternateFileName="MNEUCU~1.CON")) returned 1 [0122.779] wcscmp (_String1="mneuc uhnfghgg.contact", _String2=".") returned 1 [0122.779] wcscmp (_String1="mneuc uhnfghgg.contact", _String2="..") returned 1 [0122.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26698 [0122.779] wcscpy (in: _Dest=0x7a26698, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0122.779] wcscat (in: _Dest=0x7a26698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0122.779] wcscat (in: _Dest=0x7a26698, _Source="mneuc uhnfghgg.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" [0122.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0122.781] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25458f20, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x25458f20, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0x25458f20, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x4f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ofhbnh edferrr.contact", cAlternateFileName="OFHBNH~1.CON")) returned 1 [0122.781] wcscmp (_String1="ofhbnh edferrr.contact", _String2=".") returned 1 [0122.781] wcscmp (_String1="ofhbnh edferrr.contact", _String2="..") returned 1 [0122.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26708 [0122.781] wcscpy (in: _Dest=0x7a26708, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0122.781] wcscat (in: _Dest=0x7a26708, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0122.781] wcscat (in: _Dest=0x7a26708, _Source="ofhbnh edferrr.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" [0122.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0122.782] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3beee70, ftCreationTime.dwHighDateTime=0x1d2fb2e, ftLastAccessTime.dwLowDateTime=0xe3beee70, ftLastAccessTime.dwHighDateTime=0x1d2fb2e, ftLastWriteTime.dwLowDateTime=0xe3beee70, ftLastWriteTime.dwHighDateTime=0x1d2fb2e, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="uosjfl sidvllie.contact", cAlternateFileName="UOSJFL~1.CON")) returned 1 [0122.782] wcscmp (_String1="uosjfl sidvllie.contact", _String2=".") returned 1 [0122.782] wcscmp (_String1="uosjfl sidvllie.contact", _String2="..") returned 1 [0122.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26778 [0122.783] wcscpy (in: _Dest=0x7a26778, _Source="C:\\Users\\EEBsYm5\\Contacts" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts") returned="C:\\Users\\EEBsYm5\\Contacts" [0122.783] wcscat (in: _Dest=0x7a26778, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0122.783] wcscat (in: _Dest=0x7a26778, _Source="uosjfl sidvllie.contact" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact") returned="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" [0122.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0122.784] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3beee70, ftCreationTime.dwHighDateTime=0x1d2fb2e, ftLastAccessTime.dwLowDateTime=0xe3beee70, ftLastAccessTime.dwHighDateTime=0x1d2fb2e, ftLastWriteTime.dwLowDateTime=0xe3beee70, ftLastWriteTime.dwHighDateTime=0x1d2fb2e, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="uosjfl sidvllie.contact", cAlternateFileName="UOSJFL~1.CON")) returned 0 [0122.784] FindClose (in: hFindFile=0x7a2d280 | out: hFindFile=0x7a2d280) returned 1 [0122.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0122.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d240) returned 1 [0122.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf7d0) returned 1 Thread: id = 284 os_tid = 0x6a4 [0121.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d2c0 [0121.710] wcscpy (in: _Dest=0x7a2d2c0, _Source="C:\\Users\\EEBsYm5\\Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies") returned="C:\\Users\\EEBsYm5\\Cookies" [0121.710] wcscat (in: _Dest=0x7a2d2c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies\\") returned="C:\\Users\\EEBsYm5\\Cookies\\" [0121.710] wcscat (in: _Dest=0x7a2d2c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Cookies\\*") returned="C:\\Users\\EEBsYm5\\Cookies\\*" [0121.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58498 [0121.710] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Cookies\\*", lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58498) returned 1 [0121.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d2c0) returned 1 [0121.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e734f0) returned 1 Thread: id = 285 os_tid = 0x224 [0121.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e734f0 [0121.712] wcscpy (in: _Dest=0x3e734f0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.712] wcscat (in: _Dest=0x3e734f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.712] wcscat (in: _Dest=0x3e734f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\*" [0121.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58498 [0121.712] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\*", lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xc2308e80, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc2308e80, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0121.712] wcscmp (_String1=".", _String2=".") returned 0 [0121.713] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xc2308e80, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc2308e80, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.713] wcscmp (_String1="..", _String2=".") returned 1 [0121.713] wcscmp (_String1="..", _String2="..") returned 0 [0121.713] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4f2e790, ftCreationTime.dwHighDateTime=0x1d5e1f8, ftLastAccessTime.dwLowDateTime=0xa5f881c0, ftLastAccessTime.dwHighDateTime=0x1d5db49, ftLastWriteTime.dwLowDateTime=0xa5f881c0, ftLastWriteTime.dwHighDateTime=0x1d5db49, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4EZ86Z4HQQd5WK_s1z2", cAlternateFileName="4EZ86Z~1")) returned 1 [0121.713] wcscmp (_String1="4EZ86Z4HQQd5WK_s1z2", _String2=".") returned 1 [0121.713] wcscmp (_String1="4EZ86Z4HQQd5WK_s1z2", _String2="..") returned 1 [0121.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0170 [0121.713] wcscpy (in: _Dest=0x3ee0170, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.713] wcscat (in: _Dest=0x3ee0170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.713] wcscat (in: _Dest=0x3ee0170, _Source="4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0121.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0121.849] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd50cfc50, ftCreationTime.dwHighDateTime=0x1d5da29, ftLastAccessTime.dwLowDateTime=0x374ed520, ftLastAccessTime.dwHighDateTime=0x1d5d997, ftLastWriteTime.dwLowDateTime=0x374ed520, ftLastWriteTime.dwHighDateTime=0x1d5d997, nFileSizeHigh=0x0, nFileSizeLow=0x9d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="8pqGeUZ8xOdjF.mp3", cAlternateFileName="8PQGEU~1.MP3")) returned 1 [0121.849] wcscmp (_String1="8pqGeUZ8xOdjF.mp3", _String2=".") returned 1 [0121.849] wcscmp (_String1="8pqGeUZ8xOdjF.mp3", _String2="..") returned 1 [0121.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe5948 [0121.849] wcscpy (in: _Dest=0x2fe5948, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.849] wcscat (in: _Dest=0x2fe5948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.849] wcscat (in: _Dest=0x2fe5948, _Source="8pqGeUZ8xOdjF.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\8pqGeUZ8xOdjF.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\8pqGeUZ8xOdjF.mp3" [0121.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe5948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0121.851] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c16ea80, ftCreationTime.dwHighDateTime=0x1d5d9a3, ftLastAccessTime.dwLowDateTime=0xc0d35cf0, ftLastAccessTime.dwHighDateTime=0x1d5da94, ftLastWriteTime.dwLowDateTime=0xc0d35cf0, ftLastWriteTime.dwHighDateTime=0x1d5da94, nFileSizeHigh=0x0, nFileSizeLow=0x16ac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="9xFmWXpCcVZrm-C.mp4", cAlternateFileName="9XFMWX~1.MP4")) returned 1 [0121.851] wcscmp (_String1="9xFmWXpCcVZrm-C.mp4", _String2=".") returned 1 [0121.851] wcscmp (_String1="9xFmWXpCcVZrm-C.mp4", _String2="..") returned 1 [0121.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf4d8 [0121.852] wcscpy (in: _Dest=0x3edf4d8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.852] wcscat (in: _Dest=0x3edf4d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.852] wcscat (in: _Dest=0x3edf4d8, _Source="9xFmWXpCcVZrm-C.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\9xFmWXpCcVZrm-C.mp4") returned="C:\\Users\\EEBsYm5\\Desktop\\9xFmWXpCcVZrm-C.mp4" [0121.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0121.853] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc99cc0, ftCreationTime.dwHighDateTime=0x1d5dcd2, ftLastAccessTime.dwLowDateTime=0xd823a3e0, ftLastAccessTime.dwHighDateTime=0x1d5de97, ftLastWriteTime.dwLowDateTime=0xd823a3e0, ftLastWriteTime.dwHighDateTime=0x1d5de97, nFileSizeHigh=0x0, nFileSizeLow=0xa8ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="AqfrdmMXMVhakW.gif", cAlternateFileName="AQFRDM~1.GIF")) returned 1 [0121.853] wcscmp (_String1="AqfrdmMXMVhakW.gif", _String2=".") returned 1 [0121.853] wcscmp (_String1="AqfrdmMXMVhakW.gif", _String2="..") returned 1 [0121.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe65a8 [0121.853] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.853] wcscat (in: _Dest=0x2fe65a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.853] wcscat (in: _Dest=0x2fe65a8, _Source="AqfrdmMXMVhakW.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AqfrdmMXMVhakW.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\AqfrdmMXMVhakW.gif" [0121.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe65a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0121.855] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a12e7c0, ftCreationTime.dwHighDateTime=0x1d5dadc, ftLastAccessTime.dwLowDateTime=0x6a4b4ac0, ftLastAccessTime.dwHighDateTime=0x1d5db55, ftLastWriteTime.dwLowDateTime=0x6a4b4ac0, ftLastWriteTime.dwHighDateTime=0x1d5db55, nFileSizeHigh=0x0, nFileSizeLow=0xba6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AztICfsn72RYdP.swf", cAlternateFileName="AZTICF~1.SWF")) returned 1 [0121.855] wcscmp (_String1="AztICfsn72RYdP.swf", _String2=".") returned 1 [0121.855] wcscmp (_String1="AztICfsn72RYdP.swf", _String2="..") returned 1 [0121.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6488 [0121.855] wcscpy (in: _Dest=0x2fe6488, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.855] wcscat (in: _Dest=0x2fe6488, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.855] wcscat (in: _Dest=0x2fe6488, _Source="AztICfsn72RYdP.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\AztICfsn72RYdP.swf") returned="C:\\Users\\EEBsYm5\\Desktop\\AztICfsn72RYdP.swf" [0121.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0121.857] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b075d10, ftCreationTime.dwHighDateTime=0x1d5e5b5, ftLastAccessTime.dwLowDateTime=0xd244070, ftLastAccessTime.dwHighDateTime=0x1d5d85f, ftLastWriteTime.dwLowDateTime=0xd244070, ftLastWriteTime.dwHighDateTime=0x1d5d85f, nFileSizeHigh=0x0, nFileSizeLow=0x10907, dwReserved0=0x0, dwReserved1=0x0, cFileName="bAuATEq-1X.bmp", cAlternateFileName="BAUATE~1.BMP")) returned 1 [0121.857] wcscmp (_String1="bAuATEq-1X.bmp", _String2=".") returned 1 [0121.857] wcscmp (_String1="bAuATEq-1X.bmp", _String2="..") returned 1 [0121.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e14a90 [0121.857] wcscpy (in: _Dest=0x3e14a90, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.857] wcscat (in: _Dest=0x3e14a90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.857] wcscat (in: _Dest=0x3e14a90, _Source="bAuATEq-1X.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp" [0121.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e14a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0121.858] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.858] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.858] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.858] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0997b0, ftCreationTime.dwHighDateTime=0x1d5e0e7, ftLastAccessTime.dwLowDateTime=0xf5c82ac0, ftLastAccessTime.dwHighDateTime=0x1d5e071, ftLastWriteTime.dwLowDateTime=0xf5c82ac0, ftLastWriteTime.dwHighDateTime=0x1d5e071, nFileSizeHigh=0x0, nFileSizeLow=0x16829, dwReserved0=0x0, dwReserved1=0x0, cFileName="HLM3k8ymJZIH-.rtf", cAlternateFileName="HLM3K8~1.RTF")) returned 1 [0121.858] wcscmp (_String1="HLM3k8ymJZIH-.rtf", _String2=".") returned 1 [0121.859] wcscmp (_String1="HLM3k8ymJZIH-.rtf", _String2="..") returned 1 [0121.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1328 [0121.859] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.859] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.859] wcscat (in: _Dest=0x2fe1328, _Source="HLM3k8ymJZIH-.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\HLM3k8ymJZIH-.rtf") returned="C:\\Users\\EEBsYm5\\Desktop\\HLM3k8ymJZIH-.rtf" [0121.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0121.860] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa5a880, ftCreationTime.dwHighDateTime=0x1d5e3ce, ftLastAccessTime.dwLowDateTime=0x71b61ac0, ftLastAccessTime.dwHighDateTime=0x1d5e1f3, ftLastWriteTime.dwLowDateTime=0x71b61ac0, ftLastWriteTime.dwHighDateTime=0x1d5e1f3, nFileSizeHigh=0x0, nFileSizeLow=0x18347, dwReserved0=0x0, dwReserved1=0x0, cFileName="i5VXkzpaNxLo.ots", cAlternateFileName="I5VXKZ~1.OTS")) returned 1 [0121.860] wcscmp (_String1="i5VXkzpaNxLo.ots", _String2=".") returned 1 [0121.860] wcscmp (_String1="i5VXkzpaNxLo.ots", _String2="..") returned 1 [0121.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe2c48 [0121.860] wcscpy (in: _Dest=0x2fe2c48, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.861] wcscat (in: _Dest=0x2fe2c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.861] wcscat (in: _Dest=0x2fe2c48, _Source="i5VXkzpaNxLo.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\i5VXkzpaNxLo.ots") returned="C:\\Users\\EEBsYm5\\Desktop\\i5VXkzpaNxLo.ots" [0121.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe2c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0121.862] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c7e6b80, ftCreationTime.dwHighDateTime=0x1d5dbd7, ftLastAccessTime.dwLowDateTime=0x58fe9e60, ftLastAccessTime.dwHighDateTime=0x1d5e461, ftLastWriteTime.dwLowDateTime=0x58fe9e60, ftLastWriteTime.dwHighDateTime=0x1d5e461, nFileSizeHigh=0x0, nFileSizeLow=0x17486, dwReserved0=0x0, dwReserved1=0x0, cFileName="lIT7VQL9Kls_.wav", cAlternateFileName="LIT7VQ~1.WAV")) returned 1 [0121.862] wcscmp (_String1="lIT7VQL9Kls_.wav", _String2=".") returned 1 [0121.862] wcscmp (_String1="lIT7VQL9Kls_.wav", _String2="..") returned 1 [0121.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6788 [0121.862] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.862] wcscat (in: _Dest=0x2fe6788, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.862] wcscat (in: _Dest=0x2fe6788, _Source="lIT7VQL9Kls_.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\lIT7VQL9Kls_.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\lIT7VQL9Kls_.wav" [0121.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0121.864] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0456600, ftCreationTime.dwHighDateTime=0x1d699a5, ftLastAccessTime.dwLowDateTime=0xb0456600, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xb4708400, ftLastWriteTime.dwHighDateTime=0x1d699a3, nFileSizeHigh=0x0, nFileSizeLow=0xe1941, dwReserved0=0x0, dwReserved1=0x0, cFileName="pay.ps1", cAlternateFileName="")) returned 1 [0121.864] wcscmp (_String1="pay.ps1", _String2=".") returned 1 [0121.864] wcscmp (_String1="pay.ps1", _String2="..") returned 1 [0121.864] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1861fc70, ftCreationTime.dwHighDateTime=0x1d5e255, ftLastAccessTime.dwLowDateTime=0x5d3f1de0, ftLastAccessTime.dwHighDateTime=0x1d5d892, ftLastWriteTime.dwLowDateTime=0x5d3f1de0, ftLastWriteTime.dwHighDateTime=0x1d5d892, nFileSizeHigh=0x0, nFileSizeLow=0x1169f, dwReserved0=0x0, dwReserved1=0x0, cFileName="R5STJ4J_N.m4a", cAlternateFileName="R5STJ4~1.M4A")) returned 1 [0121.864] wcscmp (_String1="R5STJ4J_N.m4a", _String2=".") returned 1 [0121.864] wcscmp (_String1="R5STJ4J_N.m4a", _String2="..") returned 1 [0121.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e14510 [0121.864] wcscpy (in: _Dest=0x3e14510, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.864] wcscat (in: _Dest=0x3e14510, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.864] wcscat (in: _Dest=0x3e14510, _Source="R5STJ4J_N.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\R5STJ4J_N.m4a") returned="C:\\Users\\EEBsYm5\\Desktop\\R5STJ4J_N.m4a" [0121.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e14510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0121.865] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x451531d0, ftCreationTime.dwHighDateTime=0x1d5e15e, ftLastAccessTime.dwLowDateTime=0xce4ae970, ftLastAccessTime.dwHighDateTime=0x1d5e273, ftLastWriteTime.dwLowDateTime=0xce4ae970, ftLastWriteTime.dwHighDateTime=0x1d5e273, nFileSizeHigh=0x0, nFileSizeLow=0xa536, dwReserved0=0x0, dwReserved1=0x0, cFileName="TBjdFXzd.xls", cAlternateFileName="")) returned 1 [0121.866] wcscmp (_String1="TBjdFXzd.xls", _String2=".") returned 1 [0121.866] wcscmp (_String1="TBjdFXzd.xls", _String2="..") returned 1 [0121.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14e00 [0121.866] wcscpy (in: _Dest=0x3e14e00, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.866] wcscat (in: _Dest=0x3e14e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.866] wcscat (in: _Dest=0x3e14e00, _Source="TBjdFXzd.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\TBjdFXzd.xls") returned="C:\\Users\\EEBsYm5\\Desktop\\TBjdFXzd.xls" [0121.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e14e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148 [0121.867] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0c31ce0, ftCreationTime.dwHighDateTime=0x1d5d9e3, ftLastAccessTime.dwLowDateTime=0xa9e63d40, ftLastAccessTime.dwHighDateTime=0x1d5e2c9, ftLastWriteTime.dwLowDateTime=0xa9e63d40, ftLastWriteTime.dwHighDateTime=0x1d5e2c9, nFileSizeHigh=0x0, nFileSizeLow=0xb5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Usnx6hAukkt66TpR-Vk1.flv", cAlternateFileName="USNX6H~1.FLV")) returned 1 [0121.867] wcscmp (_String1="Usnx6hAukkt66TpR-Vk1.flv", _String2=".") returned 1 [0121.867] wcscmp (_String1="Usnx6hAukkt66TpR-Vk1.flv", _String2="..") returned 1 [0121.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69ad8 [0121.867] wcscpy (in: _Dest=0x3e69ad8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.867] wcscat (in: _Dest=0x3e69ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.867] wcscat (in: _Dest=0x3e69ad8, _Source="Usnx6hAukkt66TpR-Vk1.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\Usnx6hAukkt66TpR-Vk1.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\Usnx6hAukkt66TpR-Vk1.flv" [0121.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0121.869] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a7b100, ftCreationTime.dwHighDateTime=0x1d5e2e6, ftLastAccessTime.dwLowDateTime=0xdb260600, ftLastAccessTime.dwHighDateTime=0x1d5e6bc, ftLastWriteTime.dwLowDateTime=0xdb260600, ftLastWriteTime.dwHighDateTime=0x1d5e6bc, nFileSizeHigh=0x0, nFileSizeLow=0x14c2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="vMq 0VUOjf__Lh_NTS5C.ods", cAlternateFileName="VMQ0VU~1.ODS")) returned 1 [0121.869] wcscmp (_String1="vMq 0VUOjf__Lh_NTS5C.ods", _String2=".") returned 1 [0121.869] wcscmp (_String1="vMq 0VUOjf__Lh_NTS5C.ods", _String2="..") returned 1 [0121.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69ec8 [0121.869] wcscpy (in: _Dest=0x3e69ec8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.869] wcscat (in: _Dest=0x3e69ec8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.869] wcscat (in: _Dest=0x3e69ec8, _Source="vMq 0VUOjf__Lh_NTS5C.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\vMq 0VUOjf__Lh_NTS5C.ods") returned="C:\\Users\\EEBsYm5\\Desktop\\vMq 0VUOjf__Lh_NTS5C.ods" [0121.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69ec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0121.871] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb4c3710, ftCreationTime.dwHighDateTime=0x1d5e7ec, ftLastAccessTime.dwLowDateTime=0x7c9ec400, ftLastAccessTime.dwHighDateTime=0x1d5e248, ftLastWriteTime.dwLowDateTime=0x7c9ec400, ftLastWriteTime.dwHighDateTime=0x1d5e248, nFileSizeHigh=0x0, nFileSizeLow=0x10de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="W7n5FHZ2t34fcqfI.jpg", cAlternateFileName="W7N5FH~1.JPG")) returned 1 [0121.871] wcscmp (_String1="W7n5FHZ2t34fcqfI.jpg", _String2=".") returned 1 [0121.871] wcscmp (_String1="W7n5FHZ2t34fcqfI.jpg", _String2="..") returned 1 [0121.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf9b8 [0121.871] wcscpy (in: _Dest=0x3edf9b8, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.871] wcscat (in: _Dest=0x3edf9b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.871] wcscat (in: _Dest=0x3edf9b8, _Source="W7n5FHZ2t34fcqfI.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg" [0121.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0121.872] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b9f3a0, ftCreationTime.dwHighDateTime=0x1d5dcb3, ftLastAccessTime.dwLowDateTime=0x57af9770, ftLastAccessTime.dwHighDateTime=0x1d5e264, ftLastWriteTime.dwLowDateTime=0x57af9770, ftLastWriteTime.dwHighDateTime=0x1d5e264, nFileSizeHigh=0x0, nFileSizeLow=0x17d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9z-1kfI.rtf", cAlternateFileName="")) returned 1 [0121.872] wcscmp (_String1="X9z-1kfI.rtf", _String2=".") returned 1 [0121.872] wcscmp (_String1="X9z-1kfI.rtf", _String2="..") returned 1 [0121.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14880 [0121.872] wcscpy (in: _Dest=0x3e14880, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.872] wcscat (in: _Dest=0x3e14880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.873] wcscat (in: _Dest=0x3e14880, _Source="X9z-1kfI.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\X9z-1kfI.rtf") returned="C:\\Users\\EEBsYm5\\Desktop\\X9z-1kfI.rtf" [0121.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e14880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0121.874] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85059bc0, ftCreationTime.dwHighDateTime=0x1d5dbf7, ftLastAccessTime.dwLowDateTime=0x3ef2b910, ftLastAccessTime.dwHighDateTime=0x1d5e2ff, ftLastWriteTime.dwLowDateTime=0x3ef2b910, ftLastWriteTime.dwHighDateTime=0x1d5e2ff, nFileSizeHigh=0x0, nFileSizeLow=0x8365, dwReserved0=0x0, dwReserved1=0x0, cFileName="zlENN.bmp", cAlternateFileName="")) returned 1 [0121.874] wcscmp (_String1="zlENN.bmp", _String2=".") returned 1 [0121.874] wcscmp (_String1="zlENN.bmp", _String2="..") returned 1 [0121.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e58c48 [0121.875] wcscpy (in: _Dest=0x3e58c48, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.875] wcscat (in: _Dest=0x3e58c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.875] wcscat (in: _Dest=0x3e58c48, _Source="zlENN.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp" [0121.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e58c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150 [0121.877] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d7bd0, ftCreationTime.dwHighDateTime=0x1d5d9cf, ftLastAccessTime.dwLowDateTime=0x8d8251f0, ftLastAccessTime.dwHighDateTime=0x1d5e76c, ftLastWriteTime.dwLowDateTime=0x8d8251f0, ftLastWriteTime.dwHighDateTime=0x1d5e76c, nFileSizeHigh=0x0, nFileSizeLow=0x16504, dwReserved0=0x0, dwReserved1=0x0, cFileName="zskK9d4h1uJNEIn-.mp3", cAlternateFileName="ZSKK9D~1.MP3")) returned 1 [0121.877] wcscmp (_String1="zskK9d4h1uJNEIn-.mp3", _String2=".") returned 1 [0121.877] wcscmp (_String1="zskK9d4h1uJNEIn-.mp3", _String2="..") returned 1 [0121.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf7b0 [0121.877] wcscpy (in: _Dest=0x3edf7b0, _Source="C:\\Users\\EEBsYm5\\Desktop" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop") returned="C:\\Users\\EEBsYm5\\Desktop" [0121.877] wcscat (in: _Dest=0x3edf7b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0121.877] wcscat (in: _Dest=0x3edf7b0, _Source="zskK9d4h1uJNEIn-.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\zskK9d4h1uJNEIn-.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\zskK9d4h1uJNEIn-.mp3" [0121.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf7b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0121.878] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d7bd0, ftCreationTime.dwHighDateTime=0x1d5d9cf, ftLastAccessTime.dwLowDateTime=0x8d8251f0, ftLastAccessTime.dwHighDateTime=0x1d5e76c, ftLastWriteTime.dwLowDateTime=0x8d8251f0, ftLastWriteTime.dwHighDateTime=0x1d5e76c, nFileSizeHigh=0x0, nFileSizeLow=0x16504, dwReserved0=0x0, dwReserved1=0x0, cFileName="zskK9d4h1uJNEIn-.mp3", cAlternateFileName="ZSKK9D~1.MP3")) returned 0 [0121.879] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0121.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58498) returned 1 [0121.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e734f0) returned 1 [0121.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73730) returned 1 Thread: id = 286 os_tid = 0x78c [0121.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07b18 [0121.713] wcscpy (in: _Dest=0x3e07b18, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0121.713] wcscat (in: _Dest=0x3e07b18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0121.714] wcscat (in: _Dest=0x3e07b18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\*") returned="C:\\Users\\EEBsYm5\\Documents\\*" [0121.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0121.714] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f2b00c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f2b00c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0121.714] wcscmp (_String1=".", _String2=".") returned 0 [0121.714] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f2b00c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f2b00c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.714] wcscmp (_String1="..", _String2=".") returned 1 [0121.714] wcscmp (_String1="..", _String2="..") returned 0 [0121.714] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553ba9f0, ftCreationTime.dwHighDateTime=0x1d5e1a3, ftLastAccessTime.dwLowDateTime=0xf94a9fd0, ftLastAccessTime.dwHighDateTime=0x1d5dd05, ftLastWriteTime.dwLowDateTime=0xf94a9fd0, ftLastWriteTime.dwHighDateTime=0x1d5dd05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-n9-KuY", cAlternateFileName="")) returned 1 [0121.714] wcscmp (_String1="-n9-KuY", _String2=".") returned -1 [0121.714] wcscmp (_String1="-n9-KuY", _String2="..") returned -1 [0121.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5e88 [0121.714] wcscpy (in: _Dest=0x3de5e88, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0121.714] wcscat (in: _Dest=0x3de5e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0121.715] wcscat (in: _Dest=0x3de5e88, _Source="-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0122.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0122.896] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79f0c210, ftCreationTime.dwHighDateTime=0x1d57aad, ftLastAccessTime.dwLowDateTime=0xf642db70, ftLastAccessTime.dwHighDateTime=0x1d5e4c3, ftLastWriteTime.dwLowDateTime=0xf642db70, ftLastWriteTime.dwHighDateTime=0x1d5e4c3, nFileSizeHigh=0x0, nFileSizeLow=0x10cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="0COP87UrHnK.xlsx", cAlternateFileName="0COP87~1.XLS")) returned 1 [0122.896] wcscmp (_String1="0COP87UrHnK.xlsx", _String2=".") returned 1 [0122.897] wcscmp (_String1="0COP87UrHnK.xlsx", _String2="..") returned 1 [0122.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe5e88 [0122.897] wcscpy (in: _Dest=0x2fe5e88, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.897] wcscat (in: _Dest=0x2fe5e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.897] wcscat (in: _Dest=0x2fe5e88, _Source="0COP87UrHnK.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\0COP87UrHnK.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\0COP87UrHnK.xlsx" [0122.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0122.898] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9bd7000, ftCreationTime.dwHighDateTime=0x1d5dc6f, ftLastAccessTime.dwLowDateTime=0xbfe2a540, ftLastAccessTime.dwHighDateTime=0x1d5e461, ftLastWriteTime.dwLowDateTime=0xbfe2a540, ftLastWriteTime.dwHighDateTime=0x1d5e461, nFileSizeHigh=0x0, nFileSizeLow=0x12efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="5q5oH1f-NhnIv2ZA.pptx", cAlternateFileName="5Q5OH1~1.PPT")) returned 1 [0122.898] wcscmp (_String1="5q5oH1f-NhnIv2ZA.pptx", _String2=".") returned 1 [0122.898] wcscmp (_String1="5q5oH1f-NhnIv2ZA.pptx", _String2="..") returned 1 [0122.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26a18 [0122.898] wcscpy (in: _Dest=0x7a26a18, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.898] wcscat (in: _Dest=0x7a26a18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.898] wcscat (in: _Dest=0x7a26a18, _Source="5q5oH1f-NhnIv2ZA.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\5q5oH1f-NhnIv2ZA.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\5q5oH1f-NhnIv2ZA.pptx" [0122.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0122.900] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f7bc6a0, ftCreationTime.dwHighDateTime=0x1d5c784, ftLastAccessTime.dwLowDateTime=0x35f3b60, ftLastAccessTime.dwHighDateTime=0x1d593c9, ftLastWriteTime.dwLowDateTime=0x35f3b60, ftLastWriteTime.dwHighDateTime=0x1d593c9, nFileSizeHigh=0x0, nFileSizeLow=0x4ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="5U3YnOjHDVLnRurI.docx", cAlternateFileName="5U3YNO~1.DOC")) returned 1 [0122.900] wcscmp (_String1="5U3YnOjHDVLnRurI.docx", _String2=".") returned 1 [0122.900] wcscmp (_String1="5U3YnOjHDVLnRurI.docx", _String2="..") returned 1 [0122.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26a88 [0122.900] wcscpy (in: _Dest=0x7a26a88, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.900] wcscat (in: _Dest=0x7a26a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.900] wcscat (in: _Dest=0x7a26a88, _Source="5U3YnOjHDVLnRurI.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx") returned="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx" [0122.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0122.901] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdeb530, ftCreationTime.dwHighDateTime=0x1d5b221, ftLastAccessTime.dwLowDateTime=0xcc33d150, ftLastAccessTime.dwHighDateTime=0x1d5bf29, ftLastWriteTime.dwLowDateTime=0xcc33d150, ftLastWriteTime.dwHighDateTime=0x1d5bf29, nFileSizeHigh=0x0, nFileSizeLow=0xccbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="6KVwvQFMO0DlR2hb.xlsx", cAlternateFileName="6KVWVQ~1.XLS")) returned 1 [0122.901] wcscmp (_String1="6KVwvQFMO0DlR2hb.xlsx", _String2=".") returned 1 [0122.901] wcscmp (_String1="6KVwvQFMO0DlR2hb.xlsx", _String2="..") returned 1 [0122.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26af8 [0122.901] wcscpy (in: _Dest=0x7a26af8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.901] wcscat (in: _Dest=0x7a26af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.902] wcscat (in: _Dest=0x7a26af8, _Source="6KVwvQFMO0DlR2hb.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\6KVwvQFMO0DlR2hb.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\6KVwvQFMO0DlR2hb.xlsx" [0122.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0122.903] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c84d90, ftCreationTime.dwHighDateTime=0x1d57508, ftLastAccessTime.dwLowDateTime=0xfe4bf0a0, ftLastAccessTime.dwHighDateTime=0x1d5c438, ftLastWriteTime.dwLowDateTime=0xfe4bf0a0, ftLastWriteTime.dwHighDateTime=0x1d5c438, nFileSizeHigh=0x0, nFileSizeLow=0x10a6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DcHED.docx", cAlternateFileName="DCHED~1.DOC")) returned 1 [0122.903] wcscmp (_String1="DcHED.docx", _String2=".") returned 1 [0122.903] wcscmp (_String1="DcHED.docx", _String2="..") returned 1 [0122.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14460 [0122.903] wcscpy (in: _Dest=0x3e14460, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.903] wcscat (in: _Dest=0x3e14460, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.903] wcscat (in: _Dest=0x3e14460, _Source="DcHED.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx") returned="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx" [0122.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e14460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0122.904] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.904] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0122.904] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0122.904] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc4bcf0, ftCreationTime.dwHighDateTime=0x1d579b9, ftLastAccessTime.dwLowDateTime=0x6eaf8580, ftLastAccessTime.dwHighDateTime=0x1d5aa50, ftLastWriteTime.dwLowDateTime=0x6eaf8580, ftLastWriteTime.dwHighDateTime=0x1d5aa50, nFileSizeHigh=0x0, nFileSizeLow=0x7480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ei_zcYbZlFYZJn.xlsx", cAlternateFileName="EI_ZCY~1.XLS")) returned 1 [0122.904] wcscmp (_String1="Ei_zcYbZlFYZJn.xlsx", _String2=".") returned 1 [0122.904] wcscmp (_String1="Ei_zcYbZlFYZJn.xlsx", _String2="..") returned 1 [0122.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0928 [0122.905] wcscpy (in: _Dest=0x3ee0928, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.905] wcscat (in: _Dest=0x3ee0928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.905] wcscat (in: _Dest=0x3ee0928, _Source="Ei_zcYbZlFYZJn.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Ei_zcYbZlFYZJn.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\Ei_zcYbZlFYZJn.xlsx" [0122.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0122.906] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30fa94a0, ftCreationTime.dwHighDateTime=0x1d5a59b, ftLastAccessTime.dwLowDateTime=0xb9b36310, ftLastAccessTime.dwHighDateTime=0x1d59c47, ftLastWriteTime.dwLowDateTime=0xb9b36310, ftLastWriteTime.dwHighDateTime=0x1d59c47, nFileSizeHigh=0x0, nFileSizeLow=0x7187, dwReserved0=0x0, dwReserved1=0x0, cFileName="hc8ije.docx", cAlternateFileName="HC8IJE~1.DOC")) returned 1 [0122.906] wcscmp (_String1="hc8ije.docx", _String2=".") returned 1 [0122.906] wcscmp (_String1="hc8ije.docx", _String2="..") returned 1 [0122.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e14568 [0122.906] wcscpy (in: _Dest=0x3e14568, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.906] wcscat (in: _Dest=0x3e14568, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.906] wcscat (in: _Dest=0x3e14568, _Source="hc8ije.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx") returned="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx" [0122.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e14568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0122.907] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26833b10, ftCreationTime.dwHighDateTime=0x1d5d89c, ftLastAccessTime.dwLowDateTime=0x9c35f390, ftLastAccessTime.dwHighDateTime=0x1d55d61, ftLastWriteTime.dwLowDateTime=0x9c35f390, ftLastWriteTime.dwHighDateTime=0x1d55d61, nFileSizeHigh=0x0, nFileSizeLow=0x83be, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ih63MGV1-ZgXwHM.pptx", cAlternateFileName="IH63MG~1.PPT")) returned 1 [0122.908] wcscmp (_String1="Ih63MGV1-ZgXwHM.pptx", _String2=".") returned 1 [0122.908] wcscmp (_String1="Ih63MGV1-ZgXwHM.pptx", _String2="..") returned 1 [0122.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0cd0 [0122.908] wcscpy (in: _Dest=0x3ee0cd0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.908] wcscat (in: _Dest=0x3ee0cd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.908] wcscat (in: _Dest=0x3ee0cd0, _Source="Ih63MGV1-ZgXwHM.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Ih63MGV1-ZgXwHM.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\Ih63MGV1-ZgXwHM.pptx" [0122.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0122.909] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0122.909] wcscmp (_String1="My Music", _String2=".") returned 1 [0122.909] wcscmp (_String1="My Music", _String2="..") returned 1 [0122.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6248 [0122.909] wcscpy (in: _Dest=0x3de6248, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.909] wcscat (in: _Dest=0x3de6248, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.909] wcscat (in: _Dest=0x3de6248, _Source="My Music" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music") returned="C:\\Users\\EEBsYm5\\Documents\\My Music" [0122.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0122.910] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0122.910] wcscmp (_String1="My Pictures", _String2=".") returned 1 [0122.910] wcscmp (_String1="My Pictures", _String2="..") returned 1 [0122.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e15328 [0122.910] wcscpy (in: _Dest=0x3e15328, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.911] wcscat (in: _Dest=0x3e15328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.911] wcscat (in: _Dest=0x3e15328, _Source="My Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures" [0122.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e15328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0122.916] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0122.916] wcscmp (_String1="My Shapes", _String2=".") returned 1 [0122.916] wcscmp (_String1="My Shapes", _String2="..") returned 1 [0122.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6aa58 [0122.916] wcscpy (in: _Dest=0x3e6aa58, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.917] wcscat (in: _Dest=0x3e6aa58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.917] wcscat (in: _Dest=0x3e6aa58, _Source="My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0122.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e6aa58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0122.918] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0122.918] wcscmp (_String1="My Videos", _String2=".") returned 1 [0122.918] wcscmp (_String1="My Videos", _String2="..") returned 1 [0122.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e6a9a8 [0122.918] wcscpy (in: _Dest=0x3e6a9a8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.918] wcscat (in: _Dest=0x3e6a9a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.918] wcscat (in: _Dest=0x3e6a9a8, _Source="My Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos" [0122.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e6a9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0122.919] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b35890, ftCreationTime.dwHighDateTime=0x1d5a2f3, ftLastAccessTime.dwLowDateTime=0x772f7a50, ftLastAccessTime.dwHighDateTime=0x1d5a06c, ftLastWriteTime.dwLowDateTime=0x772f7a50, ftLastWriteTime.dwHighDateTime=0x1d5a06c, nFileSizeHigh=0x0, nFileSizeLow=0xc6ca, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NfQ5qewsgMea.pptx", cAlternateFileName="NFQ5QE~1.PPT")) returned 1 [0122.919] wcscmp (_String1="NfQ5qewsgMea.pptx", _String2=".") returned 1 [0122.919] wcscmp (_String1="NfQ5qewsgMea.pptx", _String2="..") returned 1 [0122.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0d38 [0122.919] wcscpy (in: _Dest=0x3ee0d38, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.919] wcscat (in: _Dest=0x3ee0d38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.919] wcscat (in: _Dest=0x3ee0d38, _Source="NfQ5qewsgMea.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\NfQ5qewsgMea.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\NfQ5qewsgMea.pptx" [0122.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0122.921] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x448c76c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0122.921] wcscmp (_String1="Outlook Files", _String2=".") returned 1 [0122.921] wcscmp (_String1="Outlook Files", _String2="..") returned 1 [0122.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6608 [0122.921] wcscpy (in: _Dest=0x2fe6608, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.921] wcscat (in: _Dest=0x2fe6608, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.921] wcscat (in: _Dest=0x2fe6608, _Source="Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0122.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c [0122.922] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43537880, ftCreationTime.dwHighDateTime=0x1d5c13c, ftLastAccessTime.dwLowDateTime=0x3fe85120, ftLastAccessTime.dwHighDateTime=0x1d5ada0, ftLastWriteTime.dwLowDateTime=0x3fe85120, ftLastWriteTime.dwHighDateTime=0x1d5ada0, nFileSizeHigh=0x0, nFileSizeLow=0x9526, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="p_TKsnph.docx", cAlternateFileName="P_TKSN~1.DOC")) returned 1 [0122.922] wcscmp (_String1="p_TKsnph.docx", _String2=".") returned 1 [0122.922] wcscmp (_String1="p_TKsnph.docx", _String2="..") returned 1 [0122.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c68 [0122.923] wcscpy (in: _Dest=0x2fe6c68, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.923] wcscat (in: _Dest=0x2fe6c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.923] wcscat (in: _Dest=0x2fe6c68, _Source="p_TKsnph.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx") returned="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx" [0122.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0122.924] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4bc26a0, ftCreationTime.dwHighDateTime=0x1d599d2, ftLastAccessTime.dwLowDateTime=0x308edb80, ftLastAccessTime.dwHighDateTime=0x1d56af8, ftLastWriteTime.dwLowDateTime=0x308edb80, ftLastWriteTime.dwHighDateTime=0x1d56af8, nFileSizeHigh=0x0, nFileSizeLow=0x1ebf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sqzc1AU8U _OWtpuY.xlsx", cAlternateFileName="SQZC1A~1.XLS")) returned 1 [0122.924] wcscmp (_String1="Sqzc1AU8U _OWtpuY.xlsx", _String2=".") returned 1 [0122.924] wcscmp (_String1="Sqzc1AU8U _OWtpuY.xlsx", _String2="..") returned 1 [0122.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26b68 [0122.924] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.924] wcscat (in: _Dest=0x7a26b68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.924] wcscat (in: _Dest=0x7a26b68, _Source="Sqzc1AU8U _OWtpuY.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Sqzc1AU8U _OWtpuY.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\Sqzc1AU8U _OWtpuY.xlsx" [0122.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0122.925] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0388970, ftCreationTime.dwHighDateTime=0x1d5cc23, ftLastAccessTime.dwLowDateTime=0xd21c1a20, ftLastAccessTime.dwHighDateTime=0x1d5ae88, ftLastWriteTime.dwLowDateTime=0xd21c1a20, ftLastWriteTime.dwHighDateTime=0x1d5ae88, nFileSizeHigh=0x0, nFileSizeLow=0x17fc4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tdWUbo9c.xlsx", cAlternateFileName="TDWUBO~1.XLS")) returned 1 [0122.925] wcscmp (_String1="tdWUbo9c.xlsx", _String2=".") returned 1 [0122.925] wcscmp (_String1="tdWUbo9c.xlsx", _String2="..") returned 1 [0122.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6cc8 [0122.925] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.925] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.925] wcscat (in: _Dest=0x2fe6cc8, _Source="tdWUbo9c.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\tdWUbo9c.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\tdWUbo9c.xlsx" [0122.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0122.927] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4000edd0, ftCreationTime.dwHighDateTime=0x1d5dda6, ftLastAccessTime.dwLowDateTime=0xb872a340, ftLastAccessTime.dwHighDateTime=0x1d5dec2, ftLastWriteTime.dwLowDateTime=0xb872a340, ftLastWriteTime.dwHighDateTime=0x1d5dec2, nFileSizeHigh=0x0, nFileSizeLow=0xaeb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UqRa3SXt2jn48vcn5Y.pps", cAlternateFileName="UQRA3S~1.PPS")) returned 1 [0122.927] wcscmp (_String1="UqRa3SXt2jn48vcn5Y.pps", _String2=".") returned 1 [0122.927] wcscmp (_String1="UqRa3SXt2jn48vcn5Y.pps", _String2="..") returned 1 [0122.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26bd8 [0122.927] wcscpy (in: _Dest=0x7a26bd8, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.927] wcscat (in: _Dest=0x7a26bd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.927] wcscat (in: _Dest=0x7a26bd8, _Source="UqRa3SXt2jn48vcn5Y.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\UqRa3SXt2jn48vcn5Y.pps") returned="C:\\Users\\EEBsYm5\\Documents\\UqRa3SXt2jn48vcn5Y.pps" [0122.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0122.928] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48e6c950, ftCreationTime.dwHighDateTime=0x1d5b2a5, ftLastAccessTime.dwLowDateTime=0x39568c90, ftLastAccessTime.dwHighDateTime=0x1d59339, ftLastWriteTime.dwLowDateTime=0x39568c90, ftLastWriteTime.dwHighDateTime=0x1d59339, nFileSizeHigh=0x0, nFileSizeLow=0x15beb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UyODi-5ywPL3.docx", cAlternateFileName="UYODI-~1.DOC")) returned 1 [0122.929] wcscmp (_String1="UyODi-5ywPL3.docx", _String2=".") returned 1 [0122.929] wcscmp (_String1="UyODi-5ywPL3.docx", _String2="..") returned 1 [0122.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0da0 [0122.929] wcscpy (in: _Dest=0x3ee0da0, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.929] wcscat (in: _Dest=0x3ee0da0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.929] wcscat (in: _Dest=0x3ee0da0, _Source="UyODi-5ywPL3.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx") returned="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx" [0122.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0122.930] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc178350, ftCreationTime.dwHighDateTime=0x1d56d4b, ftLastAccessTime.dwLowDateTime=0xeca36380, ftLastAccessTime.dwHighDateTime=0x1d5c05d, ftLastWriteTime.dwLowDateTime=0xeca36380, ftLastWriteTime.dwHighDateTime=0x1d5c05d, nFileSizeHigh=0x0, nFileSizeLow=0x11527, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yDSivynzHsD9.pptx", cAlternateFileName="YDSIVY~1.PPT")) returned 1 [0122.930] wcscmp (_String1="yDSivynzHsD9.pptx", _String2=".") returned 1 [0122.930] wcscmp (_String1="yDSivynzHsD9.pptx", _String2="..") returned 1 [0122.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0e08 [0122.931] wcscpy (in: _Dest=0x3ee0e08, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.931] wcscat (in: _Dest=0x3ee0e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.931] wcscat (in: _Dest=0x3ee0e08, _Source="yDSivynzHsD9.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\yDSivynzHsD9.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\yDSivynzHsD9.pptx" [0122.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04 [0122.932] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e1d7760, ftCreationTime.dwHighDateTime=0x1d5827f, ftLastAccessTime.dwLowDateTime=0x4c406680, ftLastAccessTime.dwHighDateTime=0x1d5dc24, ftLastWriteTime.dwLowDateTime=0x4c406680, ftLastWriteTime.dwHighDateTime=0x1d5dc24, nFileSizeHigh=0x0, nFileSizeLow=0x18633, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yfSxhA5dxbJ8DV.pptx", cAlternateFileName="YFSXHA~1.PPT")) returned 1 [0122.932] wcscmp (_String1="yfSxhA5dxbJ8DV.pptx", _String2=".") returned 1 [0122.932] wcscmp (_String1="yfSxhA5dxbJ8DV.pptx", _String2="..") returned 1 [0122.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0e70 [0122.932] wcscpy (in: _Dest=0x3ee0e70, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.932] wcscat (in: _Dest=0x3ee0e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.932] wcscat (in: _Dest=0x3ee0e70, _Source="yfSxhA5dxbJ8DV.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\yfSxhA5dxbJ8DV.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\yfSxhA5dxbJ8DV.pptx" [0122.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0122.933] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9de6d20, ftCreationTime.dwHighDateTime=0x1d5dd7b, ftLastAccessTime.dwLowDateTime=0x33d1fa50, ftLastAccessTime.dwHighDateTime=0x1d5e593, ftLastWriteTime.dwLowDateTime=0x33d1fa50, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YGvDFL", cAlternateFileName="")) returned 1 [0122.933] wcscmp (_String1="YGvDFL", _String2=".") returned 1 [0122.933] wcscmp (_String1="YGvDFL", _String2="..") returned 1 [0122.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6298 [0122.934] wcscpy (in: _Dest=0x3de6298, _Source="C:\\Users\\EEBsYm5\\Documents" | out: _Dest="C:\\Users\\EEBsYm5\\Documents") returned="C:\\Users\\EEBsYm5\\Documents" [0122.934] wcscat (in: _Dest=0x3de6298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0122.934] wcscat (in: _Dest=0x3de6298, _Source="YGvDFL" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" [0122.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0122.935] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9de6d20, ftCreationTime.dwHighDateTime=0x1d5dd7b, ftLastAccessTime.dwLowDateTime=0x33d1fa50, ftLastAccessTime.dwHighDateTime=0x1d5e593, ftLastWriteTime.dwLowDateTime=0x33d1fa50, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YGvDFL", cAlternateFileName="")) returned 0 [0122.935] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0122.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0122.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07b18) returned 1 [0122.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73830) returned 1 Thread: id = 287 os_tid = 0x390 [0121.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07a88 [0121.715] wcscpy (in: _Dest=0x3e07a88, _Source="C:\\Users\\EEBsYm5\\Downloads" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads") returned="C:\\Users\\EEBsYm5\\Downloads" [0121.715] wcscat (in: _Dest=0x3e07a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads\\") returned="C:\\Users\\EEBsYm5\\Downloads\\" [0121.715] wcscat (in: _Dest=0x3e07a88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Downloads\\*") returned="C:\\Users\\EEBsYm5\\Downloads\\*" [0121.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0121.715] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Downloads\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xcb798a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d340 [0121.716] wcscmp (_String1=".", _String2=".") returned 0 [0121.716] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xcb798a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.716] wcscmp (_String1="..", _String2=".") returned 1 [0121.716] wcscmp (_String1="..", _String2="..") returned 0 [0121.716] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb3ba6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xc9ff0fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcbf08f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChromeSetup.exe", cAlternateFileName="CHROME~1.EXE")) returned 1 [0121.716] wcscmp (_String1="ChromeSetup.exe", _String2=".") returned 1 [0121.716] wcscmp (_String1="ChromeSetup.exe", _String2="..") returned 1 [0121.716] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.716] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.716] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.716] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.716] FindClose (in: hFindFile=0x7a2d340 | out: hFindFile=0x7a2d340) returned 1 [0121.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0121.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0121.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73d30) returned 1 Thread: id = 288 os_tid = 0x380 [0121.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07a88 [0121.718] wcscpy (in: _Dest=0x3e07a88, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0121.718] wcscat (in: _Dest=0x3e07a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0121.718] wcscat (in: _Dest=0x3e07a88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\*" [0121.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0121.718] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73d30 [0121.719] wcscmp (_String1=".", _String2=".") returned 0 [0121.719] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.719] wcscmp (_String1="..", _String2=".") returned 1 [0121.719] wcscmp (_String1="..", _String2="..") returned 0 [0121.719] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.719] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.719] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.719] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0121.719] wcscmp (_String1="Links", _String2=".") returned 1 [0121.719] wcscmp (_String1="Links", _String2="..") returned 1 [0121.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de64c8 [0121.719] wcscpy (in: _Dest=0x3de64c8, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0121.719] wcscat (in: _Dest=0x3de64c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0121.719] wcscat (in: _Dest=0x3de64c8, _Source="Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0121.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de64c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0121.913] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0121.913] wcscmp (_String1="Microsoft Websites", _String2=".") returned 1 [0121.913] wcscmp (_String1="Microsoft Websites", _String2="..") returned 1 [0121.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0240 [0121.913] wcscpy (in: _Dest=0x3ee0240, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0121.913] wcscat (in: _Dest=0x3ee0240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0121.913] wcscat (in: _Dest=0x3ee0240, _Source="Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0121.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0121.914] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f57110, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0121.914] wcscmp (_String1="MSN Websites", _String2=".") returned 1 [0121.914] wcscmp (_String1="MSN Websites", _String2="..") returned 1 [0121.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e15118 [0121.915] wcscpy (in: _Dest=0x3e15118, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0121.915] wcscat (in: _Dest=0x3e15118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0121.915] wcscat (in: _Dest=0x3e15118, _Source="MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0121.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e15118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0121.916] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0121.916] wcscmp (_String1="Windows Live", _String2=".") returned 1 [0121.916] wcscmp (_String1="Windows Live", _String2="..") returned 1 [0121.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e14b98 [0121.916] wcscpy (in: _Dest=0x3e14b98, _Source="C:\\Users\\EEBsYm5\\Favorites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites") returned="C:\\Users\\EEBsYm5\\Favorites" [0121.916] wcscat (in: _Dest=0x3e14b98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\" [0121.916] wcscat (in: _Dest=0x3e14b98, _Source="Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0121.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0121.918] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0121.918] FindClose (in: hFindFile=0x3e73d30 | out: hFindFile=0x3e73d30) returned 1 [0121.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0121.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0121.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73cb0) returned 1 Thread: id = 289 os_tid = 0x3a0 [0121.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2d340 [0121.720] wcscpy (in: _Dest=0x7a2d340, _Source="C:\\Users\\EEBsYm5\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Links") returned="C:\\Users\\EEBsYm5\\Links" [0121.720] wcscat (in: _Dest=0x7a2d340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Links\\") returned="C:\\Users\\EEBsYm5\\Links\\" [0121.720] wcscat (in: _Dest=0x7a2d340, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Links\\*") returned="C:\\Users\\EEBsYm5\\Links\\*" [0121.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58bd0 [0121.720] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Links\\*", lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0121.721] wcscmp (_String1=".", _String2=".") returned 0 [0121.721] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.721] wcscmp (_String1="..", _String2=".") returned 1 [0121.721] wcscmp (_String1="..", _String2="..") returned 0 [0121.721] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.721] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.721] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.721] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0121.721] wcscmp (_String1="Desktop.lnk", _String2=".") returned 1 [0121.721] wcscmp (_String1="Desktop.lnk", _String2="..") returned 1 [0121.721] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4a6ae0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0121.721] wcscmp (_String1="Downloads.lnk", _String2=".") returned 1 [0121.722] wcscmp (_String1="Downloads.lnk", _String2="..") returned 1 [0121.722] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec480980, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0121.722] wcscmp (_String1="RecentPlaces.lnk", _String2=".") returned 1 [0121.722] wcscmp (_String1="RecentPlaces.lnk", _String2="..") returned 1 [0121.722] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec480980, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0121.722] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0121.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58bd0) returned 1 [0121.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d340) returned 1 [0121.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78e60) returned 1 Thread: id = 290 os_tid = 0x684 [0121.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de61f8 [0121.730] wcscpy (in: _Dest=0x3de61f8, _Source="C:\\Users\\EEBsYm5\\Local Settings" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings") returned="C:\\Users\\EEBsYm5\\Local Settings" [0121.730] wcscat (in: _Dest=0x3de61f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings\\") returned="C:\\Users\\EEBsYm5\\Local Settings\\" [0121.730] wcscat (in: _Dest=0x3de61f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Local Settings\\*") returned="C:\\Users\\EEBsYm5\\Local Settings\\*" [0121.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58bd0 [0121.731] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Local Settings\\*", lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58bd0) returned 1 [0121.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de61f8) returned 1 [0121.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56498) returned 1 Thread: id = 291 os_tid = 0x3f0 [0121.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2d340 [0121.734] wcscpy (in: _Dest=0x7a2d340, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0121.734] wcscat (in: _Dest=0x7a2d340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0121.734] wcscat (in: _Dest=0x7a2d340, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\*") returned="C:\\Users\\EEBsYm5\\Music\\*" [0121.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58bd0 [0121.734] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\*", lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f36e7a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f36e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0121.734] wcscmp (_String1=".", _String2=".") returned 0 [0121.734] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f36e7a0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f36e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.734] wcscmp (_String1="..", _String2=".") returned 1 [0121.734] wcscmp (_String1="..", _String2="..") returned 0 [0121.734] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49da5f0, ftCreationTime.dwHighDateTime=0x1d5e753, ftLastAccessTime.dwLowDateTime=0x5244110, ftLastAccessTime.dwHighDateTime=0x1d5e564, ftLastWriteTime.dwLowDateTime=0x5244110, ftLastWriteTime.dwHighDateTime=0x1d5e564, nFileSizeHigh=0x0, nFileSizeLow=0xeb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="7hI--tK.wav", cAlternateFileName="")) returned 1 [0121.734] wcscmp (_String1="7hI--tK.wav", _String2=".") returned 1 [0121.734] wcscmp (_String1="7hI--tK.wav", _String2="..") returned 1 [0121.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de61f8 [0121.735] wcscpy (in: _Dest=0x3de61f8, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0121.735] wcscat (in: _Dest=0x3de61f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0121.735] wcscat (in: _Dest=0x3de61f8, _Source="7hI--tK.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\7hI--tK.wav") returned="C:\\Users\\EEBsYm5\\Music\\7hI--tK.wav" [0122.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de61f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0122.838] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec40e560, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.838] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0122.838] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0122.838] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2484960, ftCreationTime.dwHighDateTime=0x1d5dc45, ftLastAccessTime.dwLowDateTime=0xa7cdac00, ftLastAccessTime.dwHighDateTime=0x1d5e733, ftLastWriteTime.dwLowDateTime=0xa7cdac00, ftLastWriteTime.dwHighDateTime=0x1d5e733, nFileSizeHigh=0x0, nFileSizeLow=0x105c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="flEnME.mp3", cAlternateFileName="")) returned 1 [0122.839] wcscmp (_String1="flEnME.mp3", _String2=".") returned 1 [0122.839] wcscmp (_String1="flEnME.mp3", _String2="..") returned 1 [0122.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e58ce8 [0122.839] wcscpy (in: _Dest=0x3e58ce8, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0122.839] wcscat (in: _Dest=0x3e58ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0122.839] wcscat (in: _Dest=0x3e58ce8, _Source="flEnME.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\flEnME.mp3") returned="C:\\Users\\EEBsYm5\\Music\\flEnME.mp3" [0122.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e58ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0122.840] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2d410, ftCreationTime.dwHighDateTime=0x1d5e4c8, ftLastAccessTime.dwLowDateTime=0x3bab5dc0, ftLastAccessTime.dwHighDateTime=0x1d5e174, ftLastWriteTime.dwLowDateTime=0x3bab5dc0, ftLastWriteTime.dwHighDateTime=0x1d5e174, nFileSizeHigh=0x0, nFileSizeLow=0x141b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OEIAgNH2G.mp3", cAlternateFileName="OEIAGN~1.MP3")) returned 1 [0122.840] wcscmp (_String1="OEIAgNH2G.mp3", _String2=".") returned 1 [0122.840] wcscmp (_String1="OEIAgNH2G.mp3", _String2="..") returned 1 [0122.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e14ae8 [0122.840] wcscpy (in: _Dest=0x3e14ae8, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0122.840] wcscat (in: _Dest=0x3e14ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0122.840] wcscat (in: _Dest=0x3e14ae8, _Source="OEIAgNH2G.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\OEIAgNH2G.mp3") returned="C:\\Users\\EEBsYm5\\Music\\OEIAgNH2G.mp3" [0122.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e14ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda0 [0122.848] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14795d40, ftCreationTime.dwHighDateTime=0x1d5e329, ftLastAccessTime.dwLowDateTime=0xfdb32320, ftLastAccessTime.dwHighDateTime=0x1d5dc8e, ftLastWriteTime.dwLowDateTime=0xfdb32320, ftLastWriteTime.dwHighDateTime=0x1d5dc8e, nFileSizeHigh=0x0, nFileSizeLow=0x10102, dwReserved0=0x0, dwReserved1=0x0, cFileName="PK0faatdzUV0i5Q5jU.m4a", cAlternateFileName="PK0FAA~1.M4A")) returned 1 [0122.848] wcscmp (_String1="PK0faatdzUV0i5Q5jU.m4a", _String2=".") returned 1 [0122.848] wcscmp (_String1="PK0faatdzUV0i5Q5jU.m4a", _String2="..") returned 1 [0122.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0170 [0122.848] wcscpy (in: _Dest=0x3ee0170, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0122.848] wcscat (in: _Dest=0x3ee0170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0122.849] wcscat (in: _Dest=0x3ee0170, _Source="PK0faatdzUV0i5Q5jU.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\PK0faatdzUV0i5Q5jU.m4a") returned="C:\\Users\\EEBsYm5\\Music\\PK0faatdzUV0i5Q5jU.m4a" [0122.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0122.850] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50767ec0, ftCreationTime.dwHighDateTime=0x1d5e1b9, ftLastAccessTime.dwLowDateTime=0xa18816f0, ftLastAccessTime.dwHighDateTime=0x1d5e0e9, ftLastWriteTime.dwLowDateTime=0xa18816f0, ftLastWriteTime.dwHighDateTime=0x1d5e0e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tj7HmjcCmKr7R9Oo4Hji", cAlternateFileName="TJ7HMJ~1")) returned 1 [0122.850] wcscmp (_String1="tj7HmjcCmKr7R9Oo4Hji", _String2=".") returned 1 [0122.850] wcscmp (_String1="tj7HmjcCmKr7R9Oo4Hji", _String2="..") returned 1 [0122.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe3b48 [0122.850] wcscpy (in: _Dest=0x2fe3b48, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0122.850] wcscat (in: _Dest=0x2fe3b48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0122.850] wcscat (in: _Dest=0x2fe3b48, _Source="tj7HmjcCmKr7R9Oo4Hji" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" [0122.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe3b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0122.852] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1359d0, ftCreationTime.dwHighDateTime=0x1d5daba, ftLastAccessTime.dwLowDateTime=0x3feca8d0, ftLastAccessTime.dwHighDateTime=0x1d5de72, ftLastWriteTime.dwLowDateTime=0x3feca8d0, ftLastWriteTime.dwHighDateTime=0x1d5de72, nFileSizeHigh=0x0, nFileSizeLow=0xfe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tX9MW0V8yhCieipdAUQV.wav", cAlternateFileName="TX9MW0~1.WAV")) returned 1 [0122.852] wcscmp (_String1="tX9MW0V8yhCieipdAUQV.wav", _String2=".") returned 1 [0122.852] wcscmp (_String1="tX9MW0V8yhCieipdAUQV.wav", _String2="..") returned 1 [0122.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee08c0 [0122.852] wcscpy (in: _Dest=0x3ee08c0, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0122.852] wcscat (in: _Dest=0x3ee08c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0122.852] wcscat (in: _Dest=0x3ee08c0, _Source="tX9MW0V8yhCieipdAUQV.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tX9MW0V8yhCieipdAUQV.wav") returned="C:\\Users\\EEBsYm5\\Music\\tX9MW0V8yhCieipdAUQV.wav" [0122.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee08c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98 [0122.853] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26886c0, ftCreationTime.dwHighDateTime=0x1d5e7b1, ftLastAccessTime.dwLowDateTime=0x9bc73850, ftLastAccessTime.dwHighDateTime=0x1d5e19c, ftLastWriteTime.dwLowDateTime=0x9bc73850, ftLastWriteTime.dwHighDateTime=0x1d5e19c, nFileSizeHigh=0x0, nFileSizeLow=0x11e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="yDJtUBzDhwL7XtuXW.m4a", cAlternateFileName="YDJTUB~1.M4A")) returned 1 [0122.853] wcscmp (_String1="yDJtUBzDhwL7XtuXW.m4a", _String2=".") returned 1 [0122.853] wcscmp (_String1="yDJtUBzDhwL7XtuXW.m4a", _String2="..") returned 1 [0122.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0240 [0122.853] wcscpy (in: _Dest=0x3ee0240, _Source="C:\\Users\\EEBsYm5\\Music" | out: _Dest="C:\\Users\\EEBsYm5\\Music") returned="C:\\Users\\EEBsYm5\\Music" [0122.853] wcscat (in: _Dest=0x3ee0240, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0122.854] wcscat (in: _Dest=0x3ee0240, _Source="yDJtUBzDhwL7XtuXW.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\yDJtUBzDhwL7XtuXW.m4a") returned="C:\\Users\\EEBsYm5\\Music\\yDJtUBzDhwL7XtuXW.m4a" [0122.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0 [0122.855] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26886c0, ftCreationTime.dwHighDateTime=0x1d5e7b1, ftLastAccessTime.dwLowDateTime=0x9bc73850, ftLastAccessTime.dwHighDateTime=0x1d5e19c, ftLastWriteTime.dwLowDateTime=0x9bc73850, ftLastWriteTime.dwHighDateTime=0x1d5e19c, nFileSizeHigh=0x0, nFileSizeLow=0x11e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="yDJtUBzDhwL7XtuXW.m4a", cAlternateFileName="YDJTUB~1.M4A")) returned 0 [0122.855] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0122.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58bd0) returned 1 [0122.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d340) returned 1 [0122.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79218) returned 1 Thread: id = 292 os_tid = 0x414 [0121.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07a40 [0121.736] wcscpy (in: _Dest=0x3e07a40, _Source="C:\\Users\\EEBsYm5\\My Documents" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents") returned="C:\\Users\\EEBsYm5\\My Documents" [0121.736] wcscat (in: _Dest=0x3e07a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents\\") returned="C:\\Users\\EEBsYm5\\My Documents\\" [0121.736] wcscat (in: _Dest=0x3e07a40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\My Documents\\*") returned="C:\\Users\\EEBsYm5\\My Documents\\*" [0121.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58e38 [0121.736] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\My Documents\\*", lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58e38) returned 1 [0121.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a40) returned 1 [0121.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 Thread: id = 293 os_tid = 0x328 [0121.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d3c0 [0121.738] wcscpy (in: _Dest=0x7a2d3c0, _Source="C:\\Users\\EEBsYm5\\NetHood" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood") returned="C:\\Users\\EEBsYm5\\NetHood" [0121.738] wcscat (in: _Dest=0x7a2d3c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood\\") returned="C:\\Users\\EEBsYm5\\NetHood\\" [0121.738] wcscat (in: _Dest=0x7a2d3c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\NetHood\\*") returned="C:\\Users\\EEBsYm5\\NetHood\\*" [0121.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58e38 [0121.739] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\NetHood\\*", lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58e38) returned 1 [0121.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d3c0) returned 1 [0121.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8688) returned 1 Thread: id = 294 os_tid = 0x48c [0121.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2fc8688 [0121.741] wcscpy (in: _Dest=0x2fc8688, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0121.741] wcscat (in: _Dest=0x2fc8688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0121.741] wcscat (in: _Dest=0x2fc8688, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\*" [0121.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58e38 [0121.741] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\*", lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f5f5f00, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f5f5f00, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0121.741] wcscmp (_String1=".", _String2=".") returned 0 [0121.741] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f5f5f00, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f5f5f00, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.741] wcscmp (_String1="..", _String2=".") returned 1 [0121.742] wcscmp (_String1="..", _String2="..") returned 0 [0121.742] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x691497a0, ftCreationTime.dwHighDateTime=0x1d5e3e9, ftLastAccessTime.dwLowDateTime=0xcb8b5780, ftLastAccessTime.dwHighDateTime=0x1d5df42, ftLastWriteTime.dwLowDateTime=0xcb8b5780, ftLastWriteTime.dwHighDateTime=0x1d5df42, nFileSizeHigh=0x0, nFileSizeLow=0x23bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="5RWcsLfRdUbXlTjTna6.jpg", cAlternateFileName="5RWCSL~1.JPG")) returned 1 [0121.742] wcscmp (_String1="5RWcsLfRdUbXlTjTna6.jpg", _String2=".") returned 1 [0121.742] wcscmp (_String1="5RWcsLfRdUbXlTjTna6.jpg", _String2="..") returned 1 [0121.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69de8 [0121.742] wcscpy (in: _Dest=0x3e69de8, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0121.742] wcscat (in: _Dest=0x3e69de8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0121.742] wcscat (in: _Dest=0x3e69de8, _Source="5RWcsLfRdUbXlTjTna6.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg" [0123.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0123.810] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0f7420, ftCreationTime.dwHighDateTime=0x1d5dc15, ftLastAccessTime.dwLowDateTime=0x9bca4800, ftLastAccessTime.dwHighDateTime=0x1d5de9b, ftLastWriteTime.dwLowDateTime=0x9bca4800, ftLastWriteTime.dwHighDateTime=0x1d5de9b, nFileSizeHigh=0x0, nFileSizeLow=0x2f85, dwReserved0=0x0, dwReserved1=0x0, cFileName="7qiK-0-.gif", cAlternateFileName="")) returned 1 [0123.811] wcscmp (_String1="7qiK-0-.gif", _String2=".") returned 1 [0123.811] wcscmp (_String1="7qiK-0-.gif", _String2="..") returned 1 [0123.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e15118 [0123.811] wcscpy (in: _Dest=0x3e15118, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0123.811] wcscat (in: _Dest=0x3e15118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0123.811] wcscat (in: _Dest=0x3e15118, _Source="7qiK-0-.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\7qiK-0-.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\7qiK-0-.gif" [0123.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e15118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0123.812] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.812] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0123.812] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0123.812] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101fd810, ftCreationTime.dwHighDateTime=0x1d5de50, ftLastAccessTime.dwLowDateTime=0xe3606900, ftLastAccessTime.dwHighDateTime=0x1d5e7de, ftLastWriteTime.dwLowDateTime=0xe3606900, ftLastWriteTime.dwHighDateTime=0x1d5e7de, nFileSizeHigh=0x0, nFileSizeLow=0xd4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVlZHa2L.png", cAlternateFileName="")) returned 1 [0123.813] wcscmp (_String1="HVlZHa2L.png", _String2=".") returned 1 [0123.813] wcscmp (_String1="HVlZHa2L.png", _String2="..") returned 1 [0123.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6ae20 [0123.813] wcscpy (in: _Dest=0x3e6ae20, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0123.813] wcscat (in: _Dest=0x3e6ae20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0123.813] wcscat (in: _Dest=0x3e6ae20, _Source="HVlZHa2L.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png") returned="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png" [0123.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e6ae20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0123.819] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b526a80, ftCreationTime.dwHighDateTime=0x1d5da57, ftLastAccessTime.dwLowDateTime=0xb18c4a30, ftLastAccessTime.dwHighDateTime=0x1d5de32, ftLastWriteTime.dwLowDateTime=0xb18c4a30, ftLastWriteTime.dwHighDateTime=0x1d5de32, nFileSizeHigh=0x0, nFileSizeLow=0x1ad3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lkb kIWGZi-.bmp", cAlternateFileName="LKBKIW~1.BMP")) returned 1 [0123.819] wcscmp (_String1="Lkb kIWGZi-.bmp", _String2=".") returned 1 [0123.819] wcscmp (_String1="Lkb kIWGZi-.bmp", _String2="..") returned 1 [0123.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6a28 [0123.819] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0123.819] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0123.819] wcscat (in: _Dest=0x2fe6a28, _Source="Lkb kIWGZi-.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp" [0123.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0123.821] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed549700, ftCreationTime.dwHighDateTime=0x1d5e05a, ftLastAccessTime.dwLowDateTime=0x53304c60, ftLastAccessTime.dwHighDateTime=0x1d5da0a, ftLastWriteTime.dwLowDateTime=0x53304c60, ftLastWriteTime.dwHighDateTime=0x1d5da0a, nFileSizeHigh=0x0, nFileSizeLow=0x8e43, dwReserved0=0x0, dwReserved1=0x0, cFileName="M_G YCxgr-cfX2.png", cAlternateFileName="M_GYCX~1.PNG")) returned 1 [0123.821] wcscmp (_String1="M_G YCxgr-cfX2.png", _String2=".") returned 1 [0123.821] wcscmp (_String1="M_G YCxgr-cfX2.png", _String2="..") returned 1 [0123.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee1148 [0123.821] wcscpy (in: _Dest=0x3ee1148, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0123.821] wcscat (in: _Dest=0x3ee1148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0123.821] wcscat (in: _Dest=0x3ee1148, _Source="M_G YCxgr-cfX2.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png") returned="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png" [0123.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee1148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0123.822] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57f4d6a0, ftCreationTime.dwHighDateTime=0x1d5e01b, ftLastAccessTime.dwLowDateTime=0x4f8d2210, ftLastAccessTime.dwHighDateTime=0x1d5dc88, ftLastWriteTime.dwLowDateTime=0x4f8d2210, ftLastWriteTime.dwHighDateTime=0x1d5dc88, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLp8ruxVl.bmp", cAlternateFileName="TLP8RU~1.BMP")) returned 1 [0123.822] wcscmp (_String1="TLp8ruxVl.bmp", _String2=".") returned 1 [0123.822] wcscmp (_String1="TLp8ruxVl.bmp", _String2="..") returned 1 [0123.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6a8a0 [0123.822] wcscpy (in: _Dest=0x3e6a8a0, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0123.822] wcscat (in: _Dest=0x3e6a8a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0123.822] wcscat (in: _Dest=0x3e6a8a0, _Source="TLp8ruxVl.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp" [0123.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e6a8a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0123.824] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e6ed00, ftCreationTime.dwHighDateTime=0x1d5e511, ftLastAccessTime.dwLowDateTime=0x7ec01e40, ftLastAccessTime.dwHighDateTime=0x1d5e154, ftLastWriteTime.dwLowDateTime=0x7ec01e40, ftLastWriteTime.dwHighDateTime=0x1d5e154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wrMMZ2_Y1ukGT0z1", cAlternateFileName="WRMMZ2~1")) returned 1 [0123.824] wcscmp (_String1="wrMMZ2_Y1ukGT0z1", _String2=".") returned 1 [0123.824] wcscmp (_String1="wrMMZ2_Y1ukGT0z1", _String2="..") returned 1 [0123.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe64e8 [0123.824] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\EEBsYm5\\Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures") returned="C:\\Users\\EEBsYm5\\Pictures" [0123.824] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0123.824] wcscat (in: _Dest=0x2fe64e8, _Source="wrMMZ2_Y1ukGT0z1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" [0123.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe64e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0123.846] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e6ed00, ftCreationTime.dwHighDateTime=0x1d5e511, ftLastAccessTime.dwLowDateTime=0x7ec01e40, ftLastAccessTime.dwHighDateTime=0x1d5e154, ftLastWriteTime.dwLowDateTime=0x7ec01e40, ftLastWriteTime.dwHighDateTime=0x1d5e154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wrMMZ2_Y1ukGT0z1", cAlternateFileName="WRMMZ2~1")) returned 0 [0123.846] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0123.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58e38) returned 1 [0123.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8688) returned 1 [0123.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc87c8) returned 1 Thread: id = 295 os_tid = 0x6b8 [0121.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07968 [0121.743] wcscpy (in: _Dest=0x3e07968, _Source="C:\\Users\\EEBsYm5\\PrintHood" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood") returned="C:\\Users\\EEBsYm5\\PrintHood" [0121.743] wcscat (in: _Dest=0x3e07968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood\\") returned="C:\\Users\\EEBsYm5\\PrintHood\\" [0121.743] wcscat (in: _Dest=0x3e07968, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\PrintHood\\*") returned="C:\\Users\\EEBsYm5\\PrintHood\\*" [0121.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d590a0 [0121.744] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\PrintHood\\*", lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d590a0) returned 1 [0121.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0121.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8d88) returned 1 Thread: id = 296 os_tid = 0x7d4 [0121.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x2fc8d88 [0121.746] wcscpy (in: _Dest=0x2fc8d88, _Source="C:\\Users\\EEBsYm5\\Recent" | out: _Dest="C:\\Users\\EEBsYm5\\Recent") returned="C:\\Users\\EEBsYm5\\Recent" [0121.746] wcscat (in: _Dest=0x2fc8d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Recent\\") returned="C:\\Users\\EEBsYm5\\Recent\\" [0121.746] wcscat (in: _Dest=0x2fc8d88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Recent\\*") returned="C:\\Users\\EEBsYm5\\Recent\\*" [0121.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d590a0 [0121.746] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Recent\\*", lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d590a0) returned 1 [0121.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8d88) returned 1 [0121.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79448) returned 1 Thread: id = 297 os_tid = 0x40c [0121.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e07968 [0121.748] wcscpy (in: _Dest=0x3e07968, _Source="C:\\Users\\EEBsYm5\\Saved Games" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games") returned="C:\\Users\\EEBsYm5\\Saved Games" [0121.748] wcscat (in: _Dest=0x3e07968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games\\") returned="C:\\Users\\EEBsYm5\\Saved Games\\" [0121.748] wcscat (in: _Dest=0x3e07968, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Saved Games\\*") returned="C:\\Users\\EEBsYm5\\Saved Games\\*" [0121.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d590a0 [0121.748] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Saved Games\\*", lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8d88 [0121.749] wcscmp (_String1=".", _String2=".") returned 0 [0121.749] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.749] wcscmp (_String1="..", _String2=".") returned 1 [0121.749] wcscmp (_String1="..", _String2="..") returned 0 [0121.749] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.749] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.749] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.749] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec45a820, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.749] FindClose (in: hFindFile=0x2fc8d88 | out: hFindFile=0x2fc8d88) returned 1 [0121.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d590a0) returned 1 [0121.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0121.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55c28) returned 1 Thread: id = 298 os_tid = 0x730 [0121.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2fc8d88 [0121.752] wcscpy (in: _Dest=0x2fc8d88, _Source="C:\\Users\\EEBsYm5\\Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0121.752] wcscat (in: _Dest=0x2fc8d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0121.752] wcscat (in: _Dest=0x2fc8d88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\*") returned="C:\\Users\\EEBsYm5\\Searches\\*" [0121.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d590a0 [0121.752] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Searches\\*", lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d400 [0121.752] wcscmp (_String1=".", _String2=".") returned 0 [0121.752] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.752] wcscmp (_String1="..", _String2=".") returned 1 [0121.752] wcscmp (_String1="..", _String2="..") returned 0 [0121.752] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec4346c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.752] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0121.753] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0121.753] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0121.753] wcscmp (_String1="Everywhere.search-ms", _String2=".") returned 1 [0121.753] wcscmp (_String1="Everywhere.search-ms", _String2="..") returned 1 [0121.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee01d8 [0121.753] wcscpy (in: _Dest=0x3ee01d8, _Source="C:\\Users\\EEBsYm5\\Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0121.753] wcscat (in: _Dest=0x3ee01d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0121.753] wcscat (in: _Dest=0x3ee01d8, _Source="Everywhere.search-ms" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms") returned="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" [0123.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee01d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0123.004] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0123.004] wcscmp (_String1="Indexed Locations.search-ms", _String2=".") returned 1 [0123.004] wcscmp (_String1="Indexed Locations.search-ms", _String2="..") returned 1 [0123.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f4e8 [0123.005] wcscpy (in: _Dest=0x3f3f4e8, _Source="C:\\Users\\EEBsYm5\\Searches" | out: _Dest="C:\\Users\\EEBsYm5\\Searches") returned="C:\\Users\\EEBsYm5\\Searches" [0123.005] wcscat (in: _Dest=0x3f3f4e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0123.005] wcscat (in: _Dest=0x3f3f4e8, _Source="Indexed Locations.search-ms" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms") returned="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" [0123.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0123.006] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x27feeae6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0123.006] FindClose (in: hFindFile=0x7a2d400 | out: hFindFile=0x7a2d400) returned 1 [0123.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d590a0) returned 1 [0123.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8d88) returned 1 [0123.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8dc8) returned 1 Thread: id = 299 os_tid = 0x808 [0121.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d440 [0121.753] wcscpy (in: _Dest=0x7a2d440, _Source="C:\\Users\\EEBsYm5\\SendTo" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo") returned="C:\\Users\\EEBsYm5\\SendTo" [0121.754] wcscat (in: _Dest=0x7a2d440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo\\") returned="C:\\Users\\EEBsYm5\\SendTo\\" [0121.754] wcscat (in: _Dest=0x7a2d440, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\SendTo\\*") returned="C:\\Users\\EEBsYm5\\SendTo\\*" [0121.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59308 [0121.754] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\SendTo\\*", lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59308) returned 1 [0121.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d440) returned 1 [0121.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79100) returned 1 Thread: id = 300 os_tid = 0x818 [0121.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e079b0 [0121.768] wcscpy (in: _Dest=0x3e079b0, _Source="C:\\Users\\EEBsYm5\\Start Menu" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu") returned="C:\\Users\\EEBsYm5\\Start Menu" [0121.769] wcscat (in: _Dest=0x3e079b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu\\") returned="C:\\Users\\EEBsYm5\\Start Menu\\" [0121.769] wcscat (in: _Dest=0x3e079b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Start Menu\\*") returned="C:\\Users\\EEBsYm5\\Start Menu\\*" [0121.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59308 [0121.769] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Start Menu\\*", lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59308) returned 1 [0121.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e079b0) returned 1 [0121.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8b08) returned 1 Thread: id = 301 os_tid = 0x828 [0122.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07b60 [0122.010] wcscpy (in: _Dest=0x3e07b60, _Source="C:\\Users\\EEBsYm5\\Templates" | out: _Dest="C:\\Users\\EEBsYm5\\Templates") returned="C:\\Users\\EEBsYm5\\Templates" [0122.010] wcscat (in: _Dest=0x3e07b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Templates\\") returned="C:\\Users\\EEBsYm5\\Templates\\" [0122.010] wcscat (in: _Dest=0x3e07b60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Templates\\*") returned="C:\\Users\\EEBsYm5\\Templates\\*" [0122.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3e40 [0122.010] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Templates\\*", lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3e40) returned 1 [0122.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07b60) returned 1 [0122.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8e48) returned 1 Thread: id = 302 os_tid = 0x838 [0122.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1bdd8 [0122.016] wcscpy (in: _Dest=0x3e1bdd8, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" [0122.016] wcscat (in: _Dest=0x3e1bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\" [0122.016] wcscat (in: _Dest=0x3e1bdd8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\*" [0122.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3e40 [0122.016] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\*", lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa50 [0123.104] wcscmp (_String1=".", _String2=".") returned 0 [0123.104] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.104] wcscmp (_String1="..", _String2=".") returned 1 [0123.104] wcscmp (_String1="..", _String2="..") returned 0 [0123.104] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x338d9500, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x338d9500, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x29370, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedSync.dll", cAlternateFileName="")) returned 1 [0123.104] wcscmp (_String1="FeedSync.dll", _String2=".") returned 1 [0123.104] wcscmp (_String1="FeedSync.dll", _String2="..") returned 1 [0123.104] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4902bf00, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4902bf00, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x33770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0123.104] wcscmp (_String1="Microsoft.Synchronization.dll", _String2=".") returned 1 [0123.104] wcscmp (_String1="Microsoft.Synchronization.dll", _String2="..") returned 1 [0123.104] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0123.104] wcscmp (_String1="resources", _String2=".") returned 1 [0123.105] wcscmp (_String1="resources", _String2="..") returned 1 [0123.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c9f0 [0123.105] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86" [0123.105] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\" [0123.105] wcscat (in: _Dest=0x32c9f0, _Source="resources" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" [0146.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0146.102] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35efef00, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35efef00, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x46f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 1 [0146.102] wcscmp (_String1="Synchronization.dll", _String2=".") returned 1 [0146.102] wcscmp (_String1="Synchronization.dll", _String2="..") returned 1 [0146.102] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35efef00, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35efef00, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x46f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 0 [0146.102] FindClose (in: hFindFile=0x3dcfa50 | out: hFindFile=0x3dcfa50) returned 1 [0146.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3e40) returned 1 [0146.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bdd8) returned 1 [0146.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da64f0) returned 1 Thread: id = 303 os_tid = 0x848 [0122.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d1a8 [0122.020] wcscpy (in: _Dest=0x32d1a8, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0122.020] wcscat (in: _Dest=0x32d1a8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\" [0122.020] wcscat (in: _Dest=0x32d1a8, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*" [0122.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3238 [0122.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8e48 [0122.021] wcscmp (_String1=".", _String2=".") returned 0 [0122.021] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.021] wcscmp (_String1="..", _String2=".") returned 1 [0122.021] wcscmp (_String1="..", _String2="..") returned 0 [0122.021] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d992d9, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe217e6ea, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe217e6ea, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0122.021] wcscmp (_String1="Workflow.Targets", _String2=".") returned 1 [0122.021] wcscmp (_String1="Workflow.Targets", _String2="..") returned 1 [0122.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6968 [0122.021] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0122.021] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\" [0122.022] wcscat (in: _Dest=0x2ff6968, _Source="Workflow.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" [0122.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0122.674] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d992d9, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe217e6ea, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe217e6ea, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0122.675] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2=".") returned 1 [0122.675] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2="..") returned 1 [0122.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85150 [0122.675] wcscpy (in: _Dest=0x3d85150, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" [0122.675] wcscat (in: _Dest=0x3d85150, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\" [0122.675] wcscat (in: _Dest=0x3d85150, _Source="Workflow.VisualBasic.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" [0122.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0122.682] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d992d9, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe217e6ea, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe217e6ea, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 0 [0122.682] FindClose (in: hFindFile=0x2fc8e48 | out: hFindFile=0x2fc8e48) returned 1 [0122.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3238) returned 1 [0122.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d1a8) returned 1 [0122.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df25b8) returned 1 Thread: id = 304 os_tid = 0x858 [0122.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d2d8 [0122.022] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0122.022] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\" [0122.023] wcscat (in: _Dest=0x32d2d8, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*" [0122.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4a48 [0122.023] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8b08 [0122.023] wcscmp (_String1=".", _String2=".") returned 0 [0122.023] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5d992d9, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5d992d9, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.023] wcscmp (_String1="..", _String2=".") returned 1 [0122.023] wcscmp (_String1="..", _String2="..") returned 0 [0122.023] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fae55dc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5fae55dc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x5fc160dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0122.023] wcscmp (_String1="Workflow.Targets", _String2=".") returned 1 [0122.023] wcscmp (_String1="Workflow.Targets", _String2="..") returned 1 [0122.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff62f0 [0122.024] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0122.024] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\" [0122.024] wcscat (in: _Dest=0x2ff62f0, _Source="Workflow.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" [0122.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0122.816] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0122.816] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2=".") returned 1 [0122.817] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2="..") returned 1 [0122.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d84ee0 [0122.817] wcscpy (in: _Dest=0x3d84ee0, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" [0122.817] wcscat (in: _Dest=0x3d84ee0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\" [0122.817] wcscat (in: _Dest=0x3d84ee0, _Source="Workflow.VisualBasic.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" [0122.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0122.818] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0122.818] FindClose (in: hFindFile=0x2fc8b08 | out: hFindFile=0x2fc8b08) returned 1 [0122.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4a48) returned 1 [0122.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 [0122.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df18c8) returned 1 Thread: id = 305 os_tid = 0x868 [0122.024] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact")) returned 0x20 [0122.510] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact", dwFileAttributes=0x20) returned 0 [0122.510] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0122.510] GetLastError () returned 0x5 [0122.510] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact", dwFileAttributes=0x20) returned 0 [0122.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0038) returned 1 Thread: id = 306 os_tid = 0x878 [0122.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14bf0 [0122.025] wcscpy (in: _Dest=0x3e14bf0, _Source="C:\\Users\\Default\\Documents\\My Music" | out: _Dest="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music" [0122.025] wcscat (in: _Dest=0x3e14bf0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Music\\") returned="C:\\Users\\Default\\Documents\\My Music\\" [0122.025] wcscat (in: _Dest=0x3e14bf0, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Music\\*") returned="C:\\Users\\Default\\Documents\\My Music\\*" [0122.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3970 [0122.025] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3970) returned 1 [0122.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14bf0) returned 1 [0122.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6928) returned 1 Thread: id = 307 os_tid = 0x888 [0122.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6848 [0122.046] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\Default\\Documents\\My Pictures" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures" [0122.046] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures\\") returned="C:\\Users\\Default\\Documents\\My Pictures\\" [0122.046] wcscat (in: _Dest=0x2fe6848, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures\\*") returned="C:\\Users\\Default\\Documents\\My Pictures\\*" [0122.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3970 [0122.046] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3970) returned 1 [0122.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 [0122.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14c48) returned 1 Thread: id = 308 os_tid = 0x898 [0122.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e14c48 [0122.056] wcscpy (in: _Dest=0x3e14c48, _Source="C:\\Users\\Default\\Documents\\My Videos" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos" [0122.056] wcscat (in: _Dest=0x3e14c48, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos\\") returned="C:\\Users\\Default\\Documents\\My Videos\\" [0122.057] wcscat (in: _Dest=0x3e14c48, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos\\*") returned="C:\\Users\\Default\\Documents\\My Videos\\*" [0122.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3970 [0122.057] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3970) returned 1 [0122.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14c48) returned 1 [0122.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15278) returned 1 Thread: id = 309 os_tid = 0x8a8 [0122.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6928 [0122.066] wcscpy (in: _Dest=0x3de6928, _Source="C:\\ProgramData\\Microsoft\\VISIO" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO") returned="C:\\ProgramData\\Microsoft\\VISIO" [0122.066] wcscat (in: _Dest=0x3de6928, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO\\") returned="C:\\ProgramData\\Microsoft\\VISIO\\" [0122.066] wcscat (in: _Dest=0x3de6928, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\VISIO\\*") returned="C:\\ProgramData\\Microsoft\\VISIO\\*" [0122.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3970 [0122.066] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d980 [0124.486] wcscmp (_String1=".", _String2=".") returned 0 [0124.486] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.486] wcscmp (_String1="..", _String2=".") returned 1 [0124.486] wcscmp (_String1="..", _String2="..") returned 0 [0124.486] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0124.486] FindClose (in: hFindFile=0x7a2d980 | out: hFindFile=0x7a2d980) returned 1 [0124.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3970) returned 1 [0124.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6928) returned 1 [0124.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e562a0) returned 1 Thread: id = 310 os_tid = 0x8b8 [0122.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de65b8 [0122.067] wcscpy (in: _Dest=0x3de65b8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0122.067] wcscat (in: _Dest=0x3de65b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0122.067] wcscat (in: _Dest=0x3de65b8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\*" [0122.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3708 [0122.067] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0122.067] wcscmp (_String1=".", _String2=".") returned 0 [0122.067] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.068] wcscmp (_String1="..", _String2=".") returned 1 [0122.068] wcscmp (_String1="..", _String2="..") returned 0 [0122.068] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0122.068] wcscmp (_String1="AIT", _String2=".") returned 1 [0122.068] wcscmp (_String1="AIT", _String2="..") returned 1 [0122.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e15278 [0122.068] wcscpy (in: _Dest=0x3e15278, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0122.068] wcscat (in: _Dest=0x3e15278, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0122.068] wcscat (in: _Dest=0x3e15278, _Source="AIT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT" [0125.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e15278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0125.978] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b470439, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xd800ce10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd800ce10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0125.978] wcscmp (_String1="Caches", _String2=".") returned 1 [0125.978] wcscmp (_String1="Caches", _String2="..") returned 1 [0125.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3d489a8 [0125.978] wcscpy (in: _Dest=0x3d489a8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0125.978] wcscat (in: _Dest=0x3d489a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0125.978] wcscat (in: _Dest=0x3d489a8, _Source="Caches" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Caches") returned="C:\\ProgramData\\Microsoft\\Windows\\Caches" [0125.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d489a8) returned 1 [0125.978] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0125.978] wcscmp (_String1="DeviceMetadataStore", _String2=".") returned 1 [0125.978] wcscmp (_String1="DeviceMetadataStore", _String2="..") returned 1 [0125.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x348f48 [0125.978] wcscpy (in: _Dest=0x348f48, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0125.979] wcscat (in: _Dest=0x348f48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0125.979] wcscat (in: _Dest=0x348f48, _Source="DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0125.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x348f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0125.981] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0125.981] wcscmp (_String1="DRM", _String2=".") returned 1 [0125.981] wcscmp (_String1="DRM", _String2="..") returned 1 [0125.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d489a8 [0125.981] wcscpy (in: _Dest=0x3d489a8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0125.981] wcscat (in: _Dest=0x3d489a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0125.981] wcscat (in: _Dest=0x3d489a8, _Source="DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0125.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d489a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0125.982] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0125.983] wcscmp (_String1="GameExplorer", _String2=".") returned 1 [0125.983] wcscmp (_String1="GameExplorer", _String2="..") returned 1 [0125.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0b30 [0125.983] wcscpy (in: _Dest=0x3ee0b30, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0125.983] wcscat (in: _Dest=0x3ee0b30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0125.983] wcscat (in: _Dest=0x3ee0b30, _Source="GameExplorer" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer" [0125.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0125.984] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7202b9f0, ftLastAccessTime.dwHighDateTime=0x1d30232, ftLastWriteTime.dwLowDateTime=0x7202b9f0, ftLastWriteTime.dwHighDateTime=0x1d30232, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0125.984] wcscmp (_String1="Power Efficiency Diagnostics", _String2=".") returned 1 [0125.984] wcscmp (_String1="Power Efficiency Diagnostics", _String2="..") returned 1 [0125.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9c48 [0125.985] wcscpy (in: _Dest=0x3eb9c48, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0125.985] wcscat (in: _Dest=0x3eb9c48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0125.985] wcscat (in: _Dest=0x3eb9c48, _Source="Power Efficiency Diagnostics" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0125.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0125.987] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0125.987] wcscmp (_String1="Ringtones", _String2=".") returned 1 [0125.987] wcscmp (_String1="Ringtones", _String2="..") returned 1 [0125.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe3b48 [0125.987] wcscpy (in: _Dest=0x2fe3b48, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0125.987] wcscat (in: _Dest=0x2fe3b48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0125.987] wcscat (in: _Dest=0x2fe3b48, _Source="Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0125.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe3b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808 [0125.992] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0125.992] wcscmp (_String1="Sqm", _String2=".") returned 1 [0125.992] wcscmp (_String1="Sqm", _String2="..") returned 1 [0125.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d488f8 [0125.992] wcscpy (in: _Dest=0x3d488f8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0125.992] wcscat (in: _Dest=0x3d488f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0125.992] wcscat (in: _Dest=0x3d488f8, _Source="Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0125.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d488f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0125.994] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0125.994] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0125.994] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0125.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1508 [0125.994] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0125.994] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0125.994] wcscat (in: _Dest=0x2fe1508, _Source="Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0125.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe1508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0125.996] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0125.996] wcscmp (_String1="Templates", _String2=".") returned 1 [0125.996] wcscmp (_String1="Templates", _String2="..") returned 1 [0125.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe14a8 [0125.996] wcscpy (in: _Dest=0x2fe14a8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0125.996] wcscat (in: _Dest=0x2fe14a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0125.997] wcscat (in: _Dest=0x2fe14a8, _Source="Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates" [0125.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0125.999] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0125.999] wcscmp (_String1="WER", _String2=".") returned 1 [0125.999] wcscmp (_String1="WER", _String2="..") returned 1 [0125.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3dba378 [0125.999] wcscpy (in: _Dest=0x3dba378, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows" [0125.999] wcscat (in: _Dest=0x3dba378, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\" [0125.999] wcscat (in: _Dest=0x3dba378, _Source="WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0125.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dba378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0126.001] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0126.001] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0126.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3708) returned 1 [0126.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de65b8) returned 1 [0126.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58b08) returned 1 Thread: id = 311 os_tid = 0x8c8 [0122.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14c48 [0122.069] wcscpy (in: _Dest=0x3e14c48, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0122.069] wcscat (in: _Dest=0x3e14c48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\" [0122.069] wcscat (in: _Dest=0x3e14c48, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\*" [0122.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea34a0 [0122.069] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0124.537] wcscmp (_String1=".", _String2=".") returned 0 [0124.537] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.537] wcscmp (_String1="..", _String2=".") returned 1 [0124.537] wcscmp (_String1="..", _String2="..") returned 0 [0124.537] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0124.537] wcscmp (_String1="MSFax", _String2=".") returned 1 [0124.537] wcscmp (_String1="MSFax", _String2="..") returned 1 [0124.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6d88 [0124.537] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0124.537] wcscat (in: _Dest=0x2fe6d88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\" [0124.537] wcscat (in: _Dest=0x2fe6d88, _Source="MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" [0125.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0125.541] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0125.541] wcscmp (_String1="MSScan", _String2=".") returned 1 [0125.541] wcscmp (_String1="MSScan", _String2="..") returned 1 [0125.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7268 [0125.541] wcscpy (in: _Dest=0x2fe7268, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT" [0125.541] wcscat (in: _Dest=0x2fe7268, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\" [0125.541] wcscat (in: _Dest=0x2fe7268, _Source="MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0125.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe7268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0125.542] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0125.543] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0125.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea34a0) returned 1 [0125.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14c48) returned 1 [0125.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58b58) returned 1 Thread: id = 312 os_tid = 0x8d8 [0122.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de5ed8 [0122.069] wcscpy (in: _Dest=0x3de5ed8, _Source="C:\\ProgramData\\Microsoft\\WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc" [0122.069] wcscat (in: _Dest=0x3de5ed8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\" [0122.069] wcscat (in: _Dest=0x3de5ed8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\*") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\*" [0122.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2fd0 [0122.069] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da40 [0124.494] wcscmp (_String1=".", _String2=".") returned 0 [0124.494] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.494] wcscmp (_String1="..", _String2=".") returned 1 [0124.494] wcscmp (_String1="..", _String2="..") returned 0 [0124.495] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0124.495] wcscmp (_String1="Profiles", _String2=".") returned 1 [0124.495] wcscmp (_String1="Profiles", _String2="..") returned 1 [0124.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6b48 [0124.495] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\ProgramData\\Microsoft\\WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc" [0124.495] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\" [0124.495] wcscat (in: _Dest=0x2fe6b48, _Source="Profiles" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" [0125.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0125.502] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0125.502] FindClose (in: hFindFile=0x7a2da40 | out: hFindFile=0x7a2da40) returned 1 [0125.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fd0) returned 1 [0125.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5ed8) returned 1 [0125.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e589c8) returned 1 Thread: id = 313 os_tid = 0x8e8 [0122.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a260e8 [0122.070] wcscpy (in: _Dest=0x7a260e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0122.070] wcscat (in: _Dest=0x7a260e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0122.070] wcscat (in: _Dest=0x7a260e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*" [0122.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2d68 [0122.070] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x997722f0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0124.124] wcscmp (_String1=".", _String2=".") returned 0 [0124.124] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d9481d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x997722f0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.155] wcscmp (_String1="..", _String2=".") returned 1 [0124.155] wcscmp (_String1="..", _String2="..") returned 0 [0124.155] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4f9290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0124.155] wcscmp (_String1="Access", _String2=".") returned 1 [0124.155] wcscmp (_String1="Access", _String2="..") returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb78 [0124.155] wcscpy (in: _Dest=0x3f3fb78, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0124.155] wcscat (in: _Dest=0x3f3fb78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0124.156] wcscat (in: _Dest=0x3f3fb78, _Source="Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0131.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3fb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0131.722] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cb86f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x329e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1 [0131.722] wcscmp (_String1="AdjacencyLetter.dotx", _String2=".") returned 1 [0131.722] wcscmp (_String1="AdjacencyLetter.dotx", _String2="..") returned 1 [0131.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb61e0 [0131.722] wcscpy (in: _Dest=0x3eb61e0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.722] wcscat (in: _Dest=0x3eb61e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.722] wcscat (in: _Dest=0x3eb61e0, _Source="AdjacencyLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" [0131.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb61e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0131.723] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cb86f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x33b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyMergeLetter.dotx", cAlternateFileName="ADJACE~2.DOT")) returned 1 [0131.723] wcscmp (_String1="AdjacencyMergeLetter.dotx", _String2=".") returned 1 [0131.723] wcscmp (_String1="AdjacencyMergeLetter.dotx", _String2="..") returned 1 [0131.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df48c0 [0131.724] wcscpy (in: _Dest=0x3df48c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.724] wcscat (in: _Dest=0x3df48c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.724] wcscat (in: _Dest=0x3df48c0, _Source="AdjacencyMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" [0131.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df48c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0131.725] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x36f0b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyReport.dotx", cAlternateFileName="ADJACE~3.DOT")) returned 1 [0131.725] wcscmp (_String1="AdjacencyReport.dotx", _String2=".") returned 1 [0131.725] wcscmp (_String1="AdjacencyReport.dotx", _String2="..") returned 1 [0131.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0131.726] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.726] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.726] wcscat (in: _Dest=0x3eb5d20, _Source="AdjacencyReport.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" [0131.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0131.727] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3bcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyResume.dotx", cAlternateFileName="ADJACE~4.DOT")) returned 1 [0131.727] wcscmp (_String1="AdjacencyResume.dotx", _String2=".") returned 1 [0131.727] wcscmp (_String1="AdjacencyResume.dotx", _String2="..") returned 1 [0131.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5db8 [0131.727] wcscpy (in: _Dest=0x3eb5db8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.727] wcscat (in: _Dest=0x3eb5db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.727] wcscat (in: _Dest=0x3eb5db8, _Source="AdjacencyResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" [0131.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0131.729] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR1.XLT", cAlternateFileName="")) returned 1 [0131.729] wcscmp (_String1="ADR1.XLT", _String2=".") returned 1 [0131.729] wcscmp (_String1="ADR1.XLT", _String2="..") returned 1 [0131.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da4c70 [0131.729] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.729] wcscat (in: _Dest=0x3da4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.730] wcscat (in: _Dest=0x3da4c70, _Source="ADR1.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" [0131.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0131.731] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR10.XLT", cAlternateFileName="")) returned 1 [0131.731] wcscmp (_String1="ADR10.XLT", _String2=".") returned 1 [0131.731] wcscmp (_String1="ADR10.XLT", _String2="..") returned 1 [0131.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5ef0 [0131.731] wcscpy (in: _Dest=0x3da5ef0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.731] wcscat (in: _Dest=0x3da5ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.731] wcscat (in: _Dest=0x3da5ef0, _Source="ADR10.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" [0131.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0131.733] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR2.XLT", cAlternateFileName="")) returned 1 [0131.733] wcscmp (_String1="ADR2.XLT", _String2=".") returned 1 [0131.733] wcscmp (_String1="ADR2.XLT", _String2="..") returned 1 [0131.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47918 [0131.733] wcscpy (in: _Dest=0x3e47918, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.733] wcscat (in: _Dest=0x3e47918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.733] wcscat (in: _Dest=0x3e47918, _Source="ADR2.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" [0131.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0131.734] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR3.XLT", cAlternateFileName="")) returned 1 [0131.734] wcscmp (_String1="ADR3.XLT", _String2=".") returned 1 [0131.734] wcscmp (_String1="ADR3.XLT", _String2="..") returned 1 [0131.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46c98 [0131.735] wcscpy (in: _Dest=0x3e46c98, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.735] wcscat (in: _Dest=0x3e46c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.735] wcscat (in: _Dest=0x3e46c98, _Source="ADR3.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" [0131.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0131.737] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR4.XLT", cAlternateFileName="")) returned 1 [0131.737] wcscmp (_String1="ADR4.XLT", _String2=".") returned 1 [0131.738] wcscmp (_String1="ADR4.XLT", _String2="..") returned 1 [0131.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46518 [0131.738] wcscpy (in: _Dest=0x3e46518, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.738] wcscat (in: _Dest=0x3e46518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.738] wcscat (in: _Dest=0x3e46518, _Source="ADR4.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" [0131.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0131.739] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR5.XLT", cAlternateFileName="")) returned 1 [0131.739] wcscmp (_String1="ADR5.XLT", _String2=".") returned 1 [0131.740] wcscmp (_String1="ADR5.XLT", _String2="..") returned 1 [0131.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46198 [0131.740] wcscpy (in: _Dest=0x3e46198, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.740] wcscat (in: _Dest=0x3e46198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.740] wcscat (in: _Dest=0x3e46198, _Source="ADR5.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" [0131.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0131.742] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273f8f00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x273f8f00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR6.XLT", cAlternateFileName="")) returned 1 [0131.742] wcscmp (_String1="ADR6.XLT", _String2=".") returned 1 [0131.742] wcscmp (_String1="ADR6.XLT", _String2="..") returned 1 [0131.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46e98 [0131.742] wcscpy (in: _Dest=0x3e46e98, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.742] wcscat (in: _Dest=0x3e46e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.743] wcscat (in: _Dest=0x3e46e98, _Source="ADR6.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" [0131.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0131.744] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2870bc00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2870bc00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR7.XLT", cAlternateFileName="")) returned 1 [0131.744] wcscmp (_String1="ADR7.XLT", _String2=".") returned 1 [0131.744] wcscmp (_String1="ADR7.XLT", _String2="..") returned 1 [0131.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47718 [0131.744] wcscpy (in: _Dest=0x3e47718, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.744] wcscat (in: _Dest=0x3e47718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.744] wcscat (in: _Dest=0x3e47718, _Source="ADR7.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" [0131.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0131.746] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2870bc00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2870bc00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR8.XLT", cAlternateFileName="")) returned 1 [0131.746] wcscmp (_String1="ADR8.XLT", _String2=".") returned 1 [0131.746] wcscmp (_String1="ADR8.XLT", _String2="..") returned 1 [0131.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47098 [0131.746] wcscpy (in: _Dest=0x3e47098, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.747] wcscat (in: _Dest=0x3e47098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.747] wcscat (in: _Dest=0x3e47098, _Source="ADR8.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" [0131.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0131.748] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2870bc00, ftCreationTime.dwHighDateTime=0x1ca4918, ftLastAccessTime.dwLowDateTime=0x995a9270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2870bc00, ftLastWriteTime.dwHighDateTime=0x1ca4918, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR9.XLT", cAlternateFileName="")) returned 1 [0131.748] wcscmp (_String1="ADR9.XLT", _String2=".") returned 1 [0131.748] wcscmp (_String1="ADR9.XLT", _String2="..") returned 1 [0131.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46f18 [0131.748] wcscpy (in: _Dest=0x3e46f18, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.748] wcscat (in: _Dest=0x3e46f18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.749] wcscat (in: _Dest=0x3e46f18, _Source="ADR9.XLT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" [0131.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0131.751] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2941e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryLetter.dotx", cAlternateFileName="APOTHE~1.DOT")) returned 1 [0131.751] wcscmp (_String1="ApothecaryLetter.dotx", _String2=".") returned 1 [0131.751] wcscmp (_String1="ApothecaryLetter.dotx", _String2="..") returned 1 [0131.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb60b0 [0131.751] wcscpy (in: _Dest=0x3eb60b0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.751] wcscat (in: _Dest=0x3eb60b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.751] wcscat (in: _Dest=0x3eb60b0, _Source="ApothecaryLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" [0131.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb60b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0131.753] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63cde850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2f0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryMergeLetter.dotx", cAlternateFileName="APOTHE~2.DOT")) returned 1 [0131.753] wcscmp (_String1="ApothecaryMergeLetter.dotx", _String2=".") returned 1 [0131.753] wcscmp (_String1="ApothecaryMergeLetter.dotx", _String2="..") returned 1 [0131.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5c20 [0131.753] wcscpy (in: _Dest=0x3df5c20, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.753] wcscat (in: _Dest=0x3df5c20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.753] wcscat (in: _Dest=0x3df5c20, _Source="ApothecaryMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" [0131.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0131.755] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3462a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryNewsletter.dotx", cAlternateFileName="APOTHE~3.DOT")) returned 1 [0131.755] wcscmp (_String1="ApothecaryNewsletter.dotx", _String2=".") returned 1 [0131.755] wcscmp (_String1="ApothecaryNewsletter.dotx", _String2="..") returned 1 [0131.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4fa0 [0131.755] wcscpy (in: _Dest=0x3df4fa0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.755] wcscat (in: _Dest=0x3df4fa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.755] wcscat (in: _Dest=0x3df4fa0, _Source="ApothecaryNewsletter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" [0131.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30 [0131.757] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x37879, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryResume.dotx", cAlternateFileName="APOTHE~4.DOT")) returned 1 [0131.757] wcscmp (_String1="ApothecaryResume.dotx", _String2=".") returned 1 [0131.757] wcscmp (_String1="ApothecaryResume.dotx", _String2="..") returned 1 [0131.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6900 [0131.757] wcscpy (in: _Dest=0x3eb6900, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.757] wcscat (in: _Dest=0x3eb6900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.757] wcscat (in: _Dest=0x3eb6900, _Source="ApothecaryResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" [0131.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0131.759] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24d7400, ftCreationTime.dwHighDateTime=0x1c6d8d2, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24d7400, ftLastWriteTime.dwHighDateTime=0x1c6d8d2, nFileSizeHigh=0x0, nFileSizeLow=0x47c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BillingStatement.xltx", cAlternateFileName="BILLIN~1.XLT")) returned 1 [0131.759] wcscmp (_String1="BillingStatement.xltx", _String2=".") returned 1 [0131.759] wcscmp (_String1="BillingStatement.xltx", _String2="..") returned 1 [0131.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6310 [0131.759] wcscpy (in: _Dest=0x3eb6310, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0131.759] wcscat (in: _Dest=0x3eb6310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0131.759] wcscat (in: _Dest=0x3eb6310, _Source="BillingStatement.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" [0131.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0132.454] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63d50c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x5d23e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieLetter.dotx", cAlternateFileName="BLACKT~1.DOT")) returned 1 [0132.454] wcscmp (_String1="BlackTieLetter.dotx", _String2=".") returned 1 [0132.454] wcscmp (_String1="BlackTieLetter.dotx", _String2="..") returned 1 [0132.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d240 [0132.454] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0132.454] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0132.455] wcscat (in: _Dest=0x32d240, _Source="BlackTieLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" [0136.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0136.350] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63dc3090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x5d2119, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieMergeLetter.dotx", cAlternateFileName="BLACKT~2.DOT")) returned 1 [0136.350] wcscmp (_String1="BlackTieMergeLetter.dotx", _String2=".") returned 1 [0136.350] wcscmp (_String1="BlackTieMergeLetter.dotx", _String2="..") returned 1 [0136.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4aa0 [0136.350] wcscpy (in: _Dest=0x3df4aa0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0136.350] wcscat (in: _Dest=0x3df4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0136.350] wcscat (in: _Dest=0x3df4aa0, _Source="BlackTieMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" [0136.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8 [0136.351] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63e5b610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x96f4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieNewsletter.dotx", cAlternateFileName="BLACKT~3.DOT")) returned 1 [0136.352] wcscmp (_String1="BlackTieNewsletter.dotx", _String2=".") returned 1 [0136.352] wcscmp (_String1="BlackTieNewsletter.dotx", _String2="..") returned 1 [0136.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4dc0 [0136.352] wcscpy (in: _Dest=0x3df4dc0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0136.352] wcscat (in: _Dest=0x3df4dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0136.352] wcscat (in: _Dest=0x3df4dc0, _Source="BlackTieNewsletter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" [0136.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0136.353] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x6724a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackTieResume.dotx", cAlternateFileName="BLACKT~4.DOT")) returned 1 [0136.353] wcscmp (_String1="BlackTieResume.dotx", _String2=".") returned 1 [0136.353] wcscmp (_String1="BlackTieResume.dotx", _String2="..") returned 1 [0136.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6f88 [0136.353] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0136.353] wcscat (in: _Dest=0x3eb6f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0136.353] wcscat (in: _Dest=0x3eb6f88, _Source="BlackTieResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" [0136.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48 [0136.355] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37e2000, ftCreationTime.dwHighDateTime=0x1ca588f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37e2000, ftLastWriteTime.dwHighDateTime=0x1ca588f, nFileSizeHigh=0x0, nFileSizeLow=0x4352, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blog.dotx", cAlternateFileName="BLOG~1.DOT")) returned 1 [0136.355] wcscmp (_String1="Blog.dotx", _String2=".") returned 1 [0136.355] wcscmp (_String1="Blog.dotx", _String2="..") returned 1 [0136.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19318 [0136.355] wcscpy (in: _Dest=0x3e19318, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0136.355] wcscat (in: _Dest=0x3e19318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0136.355] wcscat (in: _Dest=0x3e19318, _Source="Blog.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" [0136.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0136.356] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1674200, ftCreationTime.dwHighDateTime=0x1c6d8c5, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd1674200, ftLastWriteTime.dwHighDateTime=0x1c6d8c5, nFileSizeHigh=0x0, nFileSizeLow=0x72a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BloodPressureTracker.xltx", cAlternateFileName="BLOODP~1.XLT")) returned 1 [0136.356] wcscmp (_String1="BloodPressureTracker.xltx", _String2=".") returned 1 [0136.356] wcscmp (_String1="BloodPressureTracker.xltx", _String2="..") returned 1 [0136.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df61c0 [0136.356] wcscpy (in: _Dest=0x3df61c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0136.357] wcscat (in: _Dest=0x3df61c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0136.357] wcscat (in: _Dest=0x3df61c0, _Source="BloodPressureTracker.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" [0136.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df61c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0136.358] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec0000, ftCreationTime.dwHighDateTime=0x1c9d583, ftLastAccessTime.dwLowDateTime=0x3d96e330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ec0000, ftLastWriteTime.dwHighDateTime=0x1c9d583, nFileSizeHigh=0x0, nFileSizeLow=0x125418, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClassicPhotoAlbum.potx", cAlternateFileName="CLASSI~1.POT")) returned 1 [0136.358] wcscmp (_String1="ClassicPhotoAlbum.potx", _String2=".") returned 1 [0136.358] wcscmp (_String1="ClassicPhotoAlbum.potx", _String2="..") returned 1 [0136.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb67d0 [0136.358] wcscpy (in: _Dest=0x3eb67d0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0136.358] wcscat (in: _Dest=0x3eb67d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0136.358] wcscat (in: _Dest=0x3eb67d0, _Source="ClassicPhotoAlbum.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" [0136.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb67d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0136.359] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20883800, ftCreationTime.dwHighDateTime=0x1c9d583, ftLastAccessTime.dwLowDateTime=0x3d96e330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20883800, ftLastWriteTime.dwHighDateTime=0x1c9d583, nFileSizeHigh=0x0, nFileSizeLow=0x95482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContemporaryPhotoAlbum.potx", cAlternateFileName="CONTEM~1.POT")) returned 1 [0136.360] wcscmp (_String1="ContemporaryPhotoAlbum.potx", _String2=".") returned 1 [0136.360] wcscmp (_String1="ContemporaryPhotoAlbum.potx", _String2="..") returned 1 [0136.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e7a640 [0136.360] wcscpy (in: _Dest=0x3e7a640, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0136.360] wcscat (in: _Dest=0x3e7a640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0136.360] wcscat (in: _Dest=0x3e7a640, _Source="ContemporaryPhotoAlbum.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" [0136.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7a640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0136.361] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x26022, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityLetter.Dotx", cAlternateFileName="EQUITY~1.DOT")) returned 1 [0136.361] wcscmp (_String1="EquityLetter.Dotx", _String2=".") returned 1 [0136.361] wcscmp (_String1="EquityLetter.Dotx", _String2="..") returned 1 [0136.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45380 [0136.361] wcscpy (in: _Dest=0x3d45380, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0136.361] wcscat (in: _Dest=0x3d45380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0136.362] wcscat (in: _Dest=0x3d45380, _Source="EquityLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" [0136.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0136.363] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x145ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeFax.Dotx", cAlternateFileName="EQUITY~2.DOT")) returned 1 [0136.363] wcscmp (_String1="EquityMergeFax.Dotx", _String2=".") returned 1 [0136.363] wcscmp (_String1="EquityMergeFax.Dotx", _String2="..") returned 1 [0136.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7448 [0136.363] wcscpy (in: _Dest=0x3eb7448, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0136.363] wcscat (in: _Dest=0x3eb7448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0136.363] wcscat (in: _Dest=0x3eb7448, _Source="EquityMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" [0136.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0136.365] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x25ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityMergeLetter.Dotx", cAlternateFileName="EQUITY~3.DOT")) returned 1 [0136.435] wcscmp (_String1="EquityMergeLetter.Dotx", _String2=".") returned 1 [0136.435] wcscmp (_String1="EquityMergeLetter.Dotx", _String2="..") returned 1 [0136.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5860 [0136.435] wcscpy (in: _Dest=0x3eb5860, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0136.435] wcscat (in: _Dest=0x3eb5860, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0136.435] wcscat (in: _Dest=0x3eb5860, _Source="EquityMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" [0142.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0142.361] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1bec38, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityReport.Dotx", cAlternateFileName="EQUITY~4.DOT")) returned 1 [0142.361] wcscmp (_String1="EquityReport.Dotx", _String2=".") returned 1 [0142.361] wcscmp (_String1="EquityReport.Dotx", _String2="..") returned 1 [0142.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d440f0 [0142.361] wcscpy (in: _Dest=0x3d440f0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.361] wcscat (in: _Dest=0x3d440f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.361] wcscat (in: _Dest=0x3d440f0, _Source="EquityReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" [0142.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d440f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0142.362] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x45054, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityResume.Dotx", cAlternateFileName="EQD69A~1.DOT")) returned 1 [0142.362] wcscmp (_String1="EquityResume.Dotx", _String2=".") returned 1 [0142.362] wcscmp (_String1="EquityResume.Dotx", _String2="..") returned 1 [0142.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d448d0 [0142.362] wcscpy (in: _Dest=0x3d448d0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.362] wcscat (in: _Dest=0x3d448d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.362] wcscat (in: _Dest=0x3d448d0, _Source="EquityResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" [0142.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d448d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0142.363] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1f0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialLetter.dotx", cAlternateFileName="ESSENT~1.DOT")) returned 1 [0142.363] wcscmp (_String1="EssentialLetter.dotx", _String2=".") returned 1 [0142.363] wcscmp (_String1="EssentialLetter.dotx", _String2="..") returned 1 [0142.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d240 [0142.364] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.364] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.364] wcscat (in: _Dest=0x32d240, _Source="EssentialLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" [0142.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0142.365] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fb2270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1ea93, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialMergeLetter.dotx", cAlternateFileName="ESSENT~2.DOT")) returned 1 [0142.365] wcscmp (_String1="EssentialMergeLetter.dotx", _String2=".") returned 1 [0142.365] wcscmp (_String1="EssentialMergeLetter.dotx", _String2="..") returned 1 [0142.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5c20 [0142.365] wcscpy (in: _Dest=0x3df5c20, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.365] wcscat (in: _Dest=0x3df5c20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.365] wcscat (in: _Dest=0x3df5c20, _Source="EssentialMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" [0142.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0142.366] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xbc195, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialReport.dotx", cAlternateFileName="ESSENT~3.DOT")) returned 1 [0142.366] wcscmp (_String1="EssentialReport.dotx", _String2=".") returned 1 [0142.366] wcscmp (_String1="EssentialReport.dotx", _String2="..") returned 1 [0142.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cce8 [0142.366] wcscpy (in: _Dest=0x32cce8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.366] wcscat (in: _Dest=0x32cce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.366] wcscat (in: _Dest=0x32cce8, _Source="EssentialReport.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" [0142.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0142.367] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x47014, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialResume.dotx", cAlternateFileName="ESSENT~4.DOT")) returned 1 [0142.367] wcscmp (_String1="EssentialResume.dotx", _String2=".") returned 1 [0142.367] wcscmp (_String1="EssentialResume.dotx", _String2="..") returned 1 [0142.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cb20 [0142.367] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.367] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.367] wcscat (in: _Dest=0x32cb20, _Source="EssentialResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" [0142.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0142.368] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x11d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveLetter.dotx", cAlternateFileName="EXECUT~1.DOT")) returned 1 [0142.368] wcscmp (_String1="ExecutiveLetter.dotx", _String2=".") returned 1 [0142.368] wcscmp (_String1="ExecutiveLetter.dotx", _String2="..") returned 1 [0142.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5e58 [0142.368] wcscpy (in: _Dest=0x7ad5e58, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.368] wcscat (in: _Dest=0x7ad5e58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.368] wcscat (in: _Dest=0x7ad5e58, _Source="ExecutiveLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" [0142.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0142.369] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x12042, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveMergeLetter.dotx", cAlternateFileName="EXECUT~2.DOT")) returned 1 [0142.369] wcscmp (_String1="ExecutiveMergeLetter.dotx", _String2=".") returned 1 [0142.369] wcscmp (_String1="ExecutiveMergeLetter.dotx", _String2="..") returned 1 [0142.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4d20 [0142.369] wcscpy (in: _Dest=0x3df4d20, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.369] wcscat (in: _Dest=0x3df4d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.369] wcscat (in: _Dest=0x3df4d20, _Source="ExecutiveMergeLetter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" [0142.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0142.370] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63fd83d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3d49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveNewsletter.dotx", cAlternateFileName="EXECUT~3.DOT")) returned 1 [0142.371] wcscmp (_String1="ExecutiveNewsletter.dotx", _String2=".") returned 1 [0142.371] wcscmp (_String1="ExecutiveNewsletter.dotx", _String2="..") returned 1 [0142.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7698 [0142.371] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.371] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.371] wcscat (in: _Dest=0x2c7698, _Source="ExecutiveNewsletter.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" [0142.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0142.372] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5c2b800, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5c2b800, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xcb42a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveReport.dotx", cAlternateFileName="EXECUT~4.DOT")) returned 1 [0142.372] wcscmp (_String1="ExecutiveReport.dotx", _String2=".") returned 1 [0142.372] wcscmp (_String1="ExecutiveReport.dotx", _String2="..") returned 1 [0142.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5ac8 [0142.372] wcscpy (in: _Dest=0x7ad5ac8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.372] wcscat (in: _Dest=0x7ad5ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.372] wcscat (in: _Dest=0x7ad5ac8, _Source="ExecutiveReport.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" [0142.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0142.373] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1b00c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExecutiveResume.dotx", cAlternateFileName="EX9D69~1.DOT")) returned 1 [0142.373] wcscmp (_String1="ExecutiveResume.dotx", _String2=".") returned 1 [0142.373] wcscmp (_String1="ExecutiveResume.dotx", _String2="..") returned 1 [0142.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5868 [0142.373] wcscpy (in: _Dest=0x7ad5868, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.374] wcscat (in: _Dest=0x7ad5868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.374] wcscat (in: _Dest=0x7ad5868, _Source="ExecutiveResume.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" [0142.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0142.375] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666a3b00, ftCreationTime.dwHighDateTime=0x1c6d8c6, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x666a3b00, ftLastWriteTime.dwHighDateTime=0x1c6d8c6, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExpenseReport.xltx", cAlternateFileName="EXPENS~1.XLT")) returned 1 [0142.375] wcscmp (_String1="ExpenseReport.xltx", _String2=".") returned 1 [0142.375] wcscmp (_String1="ExpenseReport.xltx", _String2="..") returned 1 [0142.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44cc0 [0142.375] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.375] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.375] wcscat (in: _Dest=0x3d44cc0, _Source="ExpenseReport.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" [0142.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0142.376] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f8c110, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAX", cAlternateFileName="")) returned 1 [0142.376] wcscmp (_String1="FAX", _String2=".") returned 1 [0142.376] wcscmp (_String1="FAX", _String2="..") returned 1 [0142.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fbf0 [0142.376] wcscpy (in: _Dest=0x3f3fbf0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.376] wcscat (in: _Dest=0x3f3fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.376] wcscat (in: _Dest=0x3f3fbf0, _Source="FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0142.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3fbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0142.377] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d2f900, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3dd4c6f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6d2f900, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x1fa5cb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FiveRules.potx", cAlternateFileName="FIVERU~1.POT")) returned 1 [0142.377] wcscmp (_String1="FiveRules.potx", _String2=".") returned 1 [0142.377] wcscmp (_String1="FiveRules.potx", _String2="..") returned 1 [0142.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb91a8 [0142.377] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.377] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.378] wcscat (in: _Dest=0x3eb91a8, _Source="FiveRules.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" [0142.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0142.378] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0dd1800, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3daeb0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0dd1800, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x10b563f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntroducingPowerPoint2010.potx", cAlternateFileName="INTROD~1.POT")) returned 1 [0142.378] wcscmp (_String1="IntroducingPowerPoint2010.potx", _String2=".") returned 1 [0142.379] wcscmp (_String1="IntroducingPowerPoint2010.potx", _String2="..") returned 1 [0142.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e090 [0142.379] wcscpy (in: _Dest=0x7a5e090, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.379] wcscat (in: _Dest=0x7a5e090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.379] wcscat (in: _Dest=0x7a5e090, _Source="IntroducingPowerPoint2010.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" [0142.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0142.380] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe880000, ftCreationTime.dwHighDateTime=0x1c6d8d7, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe880000, ftLastWriteTime.dwHighDateTime=0x1c6d8d7, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1 [0142.380] wcscmp (_String1="LoanAmortization.xltx", _String2=".") returned 1 [0142.380] wcscmp (_String1="LoanAmortization.xltx", _String2="..") returned 1 [0142.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad5608 [0142.380] wcscpy (in: _Dest=0x7ad5608, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.380] wcscat (in: _Dest=0x7ad5608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.380] wcscat (in: _Dest=0x7ad5608, _Source="LoanAmortization.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" [0142.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0142.381] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1cbba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianLetter.Dotx", cAlternateFileName="MEDIAN~1.DOT")) returned 1 [0142.381] wcscmp (_String1="MedianLetter.Dotx", _String2=".") returned 1 [0142.381] wcscmp (_String1="MedianLetter.Dotx", _String2="..") returned 1 [0142.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df25b8 [0142.381] wcscpy (in: _Dest=0x3df25b8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.381] wcscat (in: _Dest=0x3df25b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.381] wcscat (in: _Dest=0x3df25b8, _Source="MedianLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" [0142.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df25b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0142.382] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1955a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeFax.Dotx", cAlternateFileName="MEDIAN~2.DOT")) returned 1 [0142.382] wcscmp (_String1="MedianMergeFax.Dotx", _String2=".") returned 1 [0142.382] wcscmp (_String1="MedianMergeFax.Dotx", _String2="..") returned 1 [0142.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad53a8 [0142.382] wcscpy (in: _Dest=0x7ad53a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.382] wcscat (in: _Dest=0x7ad53a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.382] wcscat (in: _Dest=0x7ad53a8, _Source="MedianMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" [0142.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad53a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0142.383] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1cd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianMergeLetter.Dotx", cAlternateFileName="MEDIAN~3.DOT")) returned 1 [0142.383] wcscmp (_String1="MedianMergeLetter.Dotx", _String2=".") returned 1 [0142.383] wcscmp (_String1="MedianMergeLetter.Dotx", _String2="..") returned 1 [0142.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad51e0 [0142.384] wcscpy (in: _Dest=0x7ad51e0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.384] wcscat (in: _Dest=0x7ad51e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.384] wcscat (in: _Dest=0x7ad51e0, _Source="MedianMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" [0142.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad51e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0142.384] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x48355, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianReport.Dotx", cAlternateFileName="MEDIAN~4.DOT")) returned 1 [0142.384] wcscmp (_String1="MedianReport.Dotx", _String2=".") returned 1 [0142.385] wcscmp (_String1="MedianReport.Dotx", _String2="..") returned 1 [0142.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2d08 [0142.385] wcscpy (in: _Dest=0x3df2d08, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.385] wcscat (in: _Dest=0x3df2d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.385] wcscat (in: _Dest=0x3df2d08, _Source="MedianReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" [0142.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0142.386] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x290e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianResume.Dotx", cAlternateFileName="ME105B~1.DOT")) returned 1 [0142.386] wcscmp (_String1="MedianResume.Dotx", _String2=".") returned 1 [0142.386] wcscmp (_String1="MedianResume.Dotx", _String2="..") returned 1 [0142.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df1c28 [0142.386] wcscpy (in: _Dest=0x3df1c28, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.386] wcscat (in: _Dest=0x3df1c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.386] wcscat (in: _Dest=0x3df1c28, _Source="MedianResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" [0142.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0142.387] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xab82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Word 2003 Look.dotx", cAlternateFileName="OFFICE~1.DOT")) returned 1 [0142.387] wcscmp (_String1="Office Word 2003 Look.dotx", _String2=".") returned 1 [0142.387] wcscmp (_String1="Office Word 2003 Look.dotx", _String2="..") returned 1 [0142.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c6e78 [0142.387] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.387] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.387] wcscat (in: _Dest=0x2c6e78, _Source="Office Word 2003 Look.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" [0142.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0142.388] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x553507b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x553507b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE", cAlternateFileName="")) returned 1 [0142.388] wcscmp (_String1="ONENOTE", _String2=".") returned 1 [0142.388] wcscmp (_String1="ONENOTE", _String2="..") returned 1 [0142.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3efaca0 [0142.388] wcscpy (in: _Dest=0x3efaca0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.388] wcscat (in: _Dest=0x3efaca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.388] wcscat (in: _Dest=0x3efaca0, _Source="ONENOTE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" [0142.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3efaca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0142.389] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2db52, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielLetter.Dotx", cAlternateFileName="ORIELL~1.DOT")) returned 1 [0142.389] wcscmp (_String1="OrielLetter.Dotx", _String2=".") returned 1 [0142.389] wcscmp (_String1="OrielLetter.Dotx", _String2="..") returned 1 [0142.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df30f8 [0142.389] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.389] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.389] wcscat (in: _Dest=0x3df30f8, _Source="OrielLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" [0142.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df30f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0142.391] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1b29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeFax.Dotx", cAlternateFileName="ORIELM~1.DOT")) returned 1 [0142.391] wcscmp (_String1="OrielMergeFax.Dotx", _String2=".") returned 1 [0142.391] wcscmp (_String1="OrielMergeFax.Dotx", _String2="..") returned 1 [0142.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df18c8 [0142.391] wcscpy (in: _Dest=0x3df18c8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.391] wcscat (in: _Dest=0x3df18c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.391] wcscat (in: _Dest=0x3df18c8, _Source="OrielMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" [0142.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df18c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0142.392] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x2b308, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielMergeLetter.Dotx", cAlternateFileName="ORIELM~2.DOT")) returned 1 [0142.392] wcscmp (_String1="OrielMergeLetter.Dotx", _String2=".") returned 1 [0142.392] wcscmp (_String1="OrielMergeLetter.Dotx", _String2="..") returned 1 [0142.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6dc8 [0142.392] wcscpy (in: _Dest=0x7ad6dc8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.392] wcscat (in: _Dest=0x7ad6dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.392] wcscat (in: _Dest=0x7ad6dc8, _Source="OrielMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" [0142.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0142.393] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x82b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielReport.Dotx", cAlternateFileName="ORIELR~1.DOT")) returned 1 [0142.393] wcscmp (_String1="OrielReport.Dotx", _String2=".") returned 1 [0142.393] wcscmp (_String1="OrielReport.Dotx", _String2="..") returned 1 [0142.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df19e8 [0142.393] wcscpy (in: _Dest=0x3df19e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.393] wcscat (in: _Dest=0x3df19e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.393] wcscat (in: _Dest=0x3df19e8, _Source="OrielReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" [0142.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df19e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0142.394] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x4ab41, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielResume.Dotx", cAlternateFileName="ORIELR~2.DOT")) returned 1 [0142.394] wcscmp (_String1="OrielResume.Dotx", _String2=".") returned 1 [0142.394] wcscmp (_String1="OrielResume.Dotx", _String2="..") returned 1 [0142.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x355680 [0142.394] wcscpy (in: _Dest=0x355680, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.394] wcscat (in: _Dest=0x355680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.394] wcscat (in: _Dest=0x355680, _Source="OrielResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" [0142.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x355680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0142.395] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1f56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1 [0142.396] wcscmp (_String1="OriginLetter.Dotx", _String2=".") returned 1 [0142.396] wcscmp (_String1="OriginLetter.Dotx", _String2="..") returned 1 [0142.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60090 [0142.396] wcscpy (in: _Dest=0x7a60090, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0142.396] wcscat (in: _Dest=0x7a60090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0142.396] wcscat (in: _Dest=0x7a60090, _Source="OriginLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" [0142.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68 [0142.397] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x172e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeFax.Dotx", cAlternateFileName="ORIGIN~2.DOT")) returned 1 [0143.650] wcscmp (_String1="OriginMergeFax.Dotx", _String2=".") returned 1 [0143.650] wcscmp (_String1="OriginMergeFax.Dotx", _String2="..") returned 1 [0143.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5440 [0143.650] wcscpy (in: _Dest=0x7ad5440, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0143.650] wcscat (in: _Dest=0x7ad5440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0143.650] wcscat (in: _Dest=0x7ad5440, _Source="OriginMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" [0150.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0150.005] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1f314, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginMergeLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1 [0150.005] wcscmp (_String1="OriginMergeLetter.Dotx", _String2=".") returned 1 [0150.005] wcscmp (_String1="OriginMergeLetter.Dotx", _String2="..") returned 1 [0150.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5868 [0150.005] wcscpy (in: _Dest=0x7ad5868, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.005] wcscat (in: _Dest=0x7ad5868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.005] wcscat (in: _Dest=0x7ad5868, _Source="OriginMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" [0150.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0150.007] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x5b011, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginReport.Dotx", cAlternateFileName="ORIGIN~4.DOT")) returned 1 [0150.007] wcscmp (_String1="OriginReport.Dotx", _String2=".") returned 1 [0150.007] wcscmp (_String1="OriginReport.Dotx", _String2="..") returned 1 [0150.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44f00 [0150.008] wcscpy (in: _Dest=0x3d44f00, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.008] wcscat (in: _Dest=0x3d44f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.008] wcscat (in: _Dest=0x3d44f00, _Source="OriginReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" [0150.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0 [0150.009] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x23247, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginResume.Dotx", cAlternateFileName="ORAE40~1.DOT")) returned 1 [0150.009] wcscmp (_String1="OriginResume.Dotx", _String2=".") returned 1 [0150.009] wcscmp (_String1="OriginResume.Dotx", _String2="..") returned 1 [0150.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45800 [0150.010] wcscpy (in: _Dest=0x3d45800, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.010] wcscat (in: _Dest=0x3d45800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.010] wcscat (in: _Dest=0x3d45800, _Source="OriginResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" [0150.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b94 [0150.012] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11c4700, ftCreationTime.dwHighDateTime=0x1c6d8d2, ftLastAccessTime.dwLowDateTime=0x42f6bdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11c4700, ftLastWriteTime.dwHighDateTime=0x1c6d8d2, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="PERSON~1.XLT")) returned 1 [0150.012] wcscmp (_String1="PersonalMonthlyBudget.xltx", _String2=".") returned 1 [0150.012] wcscmp (_String1="PersonalMonthlyBudget.xltx", _String2="..") returned 1 [0150.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5ea0 [0150.012] wcscpy (in: _Dest=0x3df5ea0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.012] wcscat (in: _Dest=0x3df5ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.012] wcscat (in: _Dest=0x3df5ea0, _Source="PersonalMonthlyBudget.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" [0150.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0150.013] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46628100, ftCreationTime.dwHighDateTime=0x1c69afa, ftLastAccessTime.dwLowDateTime=0x3dd989b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46628100, ftLastWriteTime.dwHighDateTime=0x1c69afa, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitchbook.potx", cAlternateFileName="PITCHB~1.POT")) returned 1 [0150.013] wcscmp (_String1="Pitchbook.potx", _String2=".") returned 1 [0150.013] wcscmp (_String1="Pitchbook.potx", _String2="..") returned 1 [0150.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0150.014] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.014] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.014] wcscat (in: _Dest=0x3eba220, _Source="Pitchbook.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" [0150.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0150.015] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8042600, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8042600, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusReport.potx", cAlternateFileName="PROJEC~1.POT")) returned 1 [0150.015] wcscmp (_String1="ProjectStatusReport.potx", _String2=".") returned 1 [0150.015] wcscmp (_String1="ProjectStatusReport.potx", _String2="..") returned 1 [0150.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4e60 [0150.015] wcscpy (in: _Dest=0x3df4e60, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.015] wcscat (in: _Dest=0x3df4e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.015] wcscat (in: _Dest=0x3df4e60, _Source="ProjectStatusReport.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" [0150.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc0 [0150.017] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x801f000, ftCreationTime.dwHighDateTime=0x1c99e65, ftLastAccessTime.dwLowDateTime=0x997722f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x801f000, ftLastWriteTime.dwHighDateTime=0x1c99e65, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJPLAN.XLTX", cAlternateFileName="PROJPL~1.XLT")) returned 1 [0150.017] wcscmp (_String1="PROJPLAN.XLTX", _String2=".") returned 1 [0150.017] wcscmp (_String1="PROJPLAN.XLTX", _String2="..") returned 1 [0150.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba2a8 [0150.018] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.018] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.018] wcscat (in: _Dest=0x3eba2a8, _Source="PROJPLAN.XLTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" [0150.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0150.019] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x740ee600, ftCreationTime.dwHighDateTime=0x1c6d9d6, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x740ee600, ftLastWriteTime.dwHighDateTime=0x1c6d9d6, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuizShow.potx", cAlternateFileName="QUIZSH~1.POT")) returned 1 [0150.019] wcscmp (_String1="QuizShow.potx", _String2=".") returned 1 [0150.019] wcscmp (_String1="QuizShow.potx", _String2="..") returned 1 [0150.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9670 [0150.019] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.019] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.019] wcscat (in: _Dest=0x3eb9670, _Source="QuizShow.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" [0150.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808 [0150.021] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11c4700, ftCreationTime.dwHighDateTime=0x1c6d8d2, ftLastAccessTime.dwLowDateTime=0x43004370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11c4700, ftLastWriteTime.dwHighDateTime=0x1c6d8d2, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="SalesReport.xltx", cAlternateFileName="SALESR~1.XLT")) returned 1 [0150.021] wcscmp (_String1="SalesReport.xltx", _String2=".") returned 1 [0150.021] wcscmp (_String1="SalesReport.xltx", _String2="..") returned 1 [0150.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d448d0 [0150.021] wcscpy (in: _Dest=0x3d448d0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.021] wcscat (in: _Dest=0x3d448d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.021] wcscat (in: _Dest=0x3d448d0, _Source="SalesReport.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" [0150.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d448d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0150.022] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d771a00, ftCreationTime.dwHighDateTime=0x1c99e65, ftLastAccessTime.dwLowDateTime=0x99798450, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x1d771a00, ftLastWriteTime.dwHighDateTime=0x1c99e65, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKLIST.XLTX", cAlternateFileName="TASKLI~1.XLT")) returned 1 [0150.022] wcscmp (_String1="TASKLIST.XLTX", _String2=".") returned 1 [0150.022] wcscmp (_String1="TASKLIST.XLTX", _String2="..") returned 1 [0150.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb91a8 [0150.023] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.023] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.023] wcscat (in: _Dest=0x3eb91a8, _Source="TASKLIST.XLTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" [0150.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f4 [0150.024] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e95500, ftCreationTime.dwHighDateTime=0x1c6d8cf, ftLastAccessTime.dwLowDateTime=0x4309c8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5e95500, ftLastWriteTime.dwHighDateTime=0x1c6d8cf, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimeCard.xltx", cAlternateFileName="TIMECA~1.XLT")) returned 1 [0150.024] wcscmp (_String1="TimeCard.xltx", _String2=".") returned 1 [0150.024] wcscmp (_String1="TimeCard.xltx", _String2="..") returned 1 [0150.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9890 [0150.024] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.024] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.025] wcscat (in: _Dest=0x3eb9890, _Source="TimeCard.xltx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" [0150.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0150.026] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8042600, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8042600, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Training.potx", cAlternateFileName="TRAINI~1.POT")) returned 1 [0150.026] wcscmp (_String1="Training.potx", _String2=".") returned 1 [0150.026] wcscmp (_String1="Training.potx", _String2="..") returned 1 [0150.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9f78 [0150.026] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.026] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.026] wcscat (in: _Dest=0x3eb9f78, _Source="Training.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" [0150.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0150.028] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanLetter.Dotx", cAlternateFileName="URBANL~1.DOT")) returned 1 [0150.028] wcscmp (_String1="UrbanLetter.Dotx", _String2=".") returned 1 [0150.028] wcscmp (_String1="UrbanLetter.Dotx", _String2="..") returned 1 [0150.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44cc0 [0150.028] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.028] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.028] wcscat (in: _Dest=0x3d44cc0, _Source="UrbanLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" [0150.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c0c [0150.029] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x138a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeFax.Dotx", cAlternateFileName="URBANM~1.DOT")) returned 1 [0150.029] wcscmp (_String1="UrbanMergeFax.Dotx", _String2=".") returned 1 [0150.029] wcscmp (_String1="UrbanMergeFax.Dotx", _String2="..") returned 1 [0150.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d440f0 [0150.029] wcscpy (in: _Dest=0x3d440f0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.030] wcscat (in: _Dest=0x3d440f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.030] wcscat (in: _Dest=0x3d440f0, _Source="UrbanMergeFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" [0150.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d440f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c14 [0150.031] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1c1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanMergeLetter.Dotx", cAlternateFileName="URBANM~2.DOT")) returned 1 [0150.031] wcscmp (_String1="UrbanMergeLetter.Dotx", _String2=".") returned 1 [0150.031] wcscmp (_String1="UrbanMergeLetter.Dotx", _String2="..") returned 1 [0150.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad5608 [0150.031] wcscpy (in: _Dest=0x7ad5608, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.031] wcscat (in: _Dest=0x7ad5608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.031] wcscat (in: _Dest=0x7ad5608, _Source="UrbanMergeLetter.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" [0150.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a5c [0150.032] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d2f900, ftCreationTime.dwHighDateTime=0x1ca8f6c, ftLastAccessTime.dwLowDateTime=0x3dd989b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6d2f900, ftLastWriteTime.dwHighDateTime=0x1ca8f6c, nFileSizeHigh=0x0, nFileSizeLow=0x40d6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanPhotoAlbum.potx", cAlternateFileName="URBANP~1.POT")) returned 1 [0150.032] wcscmp (_String1="UrbanPhotoAlbum.potx", _String2=".") returned 1 [0150.032] wcscmp (_String1="UrbanPhotoAlbum.potx", _String2="..") returned 1 [0150.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5bf8 [0150.033] wcscpy (in: _Dest=0x7ad5bf8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.033] wcscat (in: _Dest=0x7ad5bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.033] wcscat (in: _Dest=0x7ad5bf8, _Source="UrbanPhotoAlbum.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" [0150.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30 [0150.034] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0xd0fbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanReport.Dotx", cAlternateFileName="URBANR~1.DOT")) returned 1 [0150.034] wcscmp (_String1="UrbanReport.Dotx", _String2=".") returned 1 [0150.034] wcscmp (_String1="UrbanReport.Dotx", _String2="..") returned 1 [0150.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45140 [0150.034] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.034] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.034] wcscat (in: _Dest=0x3d45140, _Source="UrbanReport.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" [0150.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b60 [0150.036] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x640bcc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1ed1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanResume.Dotx", cAlternateFileName="URBANR~2.DOT")) returned 1 [0150.036] wcscmp (_String1="UrbanResume.Dotx", _String2=".") returned 1 [0150.036] wcscmp (_String1="UrbanResume.Dotx", _String2="..") returned 1 [0150.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44ba0 [0150.036] wcscpy (in: _Dest=0x3d44ba0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.036] wcscat (in: _Dest=0x3d44ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.036] wcscat (in: _Dest=0x3d44ba0, _Source="UrbanResume.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" [0150.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0150.037] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d22c00, ftCreationTime.dwHighDateTime=0x1c6d9d6, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97d22c00, ftLastWriteTime.dwHighDateTime=0x1c6d9d6, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 1 [0150.037] wcscmp (_String1="WidescreenPresentation.potx", _String2=".") returned 1 [0150.037] wcscmp (_String1="WidescreenPresentation.potx", _String2="..") returned 1 [0150.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053f00 [0150.037] wcscpy (in: _Dest=0x3053f00, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033" [0150.038] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\" [0150.038] wcscat (in: _Dest=0x3053f00, _Source="WidescreenPresentation.potx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" [0150.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc [0150.039] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d22c00, ftCreationTime.dwHighDateTime=0x1c6d9d6, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97d22c00, ftLastWriteTime.dwHighDateTime=0x1c6d9d6, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 0 [0150.039] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0150.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0150.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a260e8) returned 1 [0150.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d08) returned 1 Thread: id = 314 os_tid = 0x8f8 [0122.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44060 [0122.071] wcscpy (in: _Dest=0x3d44060, _Source="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" [0122.071] wcscat (in: _Dest=0x3d44060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\" [0122.071] wcscat (in: _Dest=0x3d44060, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*" [0122.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0122.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf650 [0122.513] wcscmp (_String1=".", _String2=".") returned 0 [0122.513] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.513] wcscmp (_String1="..", _String2=".") returned 1 [0122.513] wcscmp (_String1="..", _String2="..") returned 0 [0122.513] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4baef600, ftCreationTime.dwHighDateTime=0x1c65295, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4baef600, ftLastWriteTime.dwHighDateTime=0x1c65295, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 1 [0122.513] wcscmp (_String1="Maple.gif", _String2=".") returned 1 [0122.513] wcscmp (_String1="Maple.gif", _String2="..") returned 1 [0122.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4e60 [0122.513] wcscpy (in: _Dest=0x3df4e60, _Source="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs" [0122.513] wcscat (in: _Dest=0x3df4e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\" [0122.513] wcscat (in: _Dest=0x3df4e60, _Source="Maple.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif") returned="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" [0123.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0123.010] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4baef600, ftCreationTime.dwHighDateTime=0x1c65295, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4baef600, ftLastWriteTime.dwHighDateTime=0x1c65295, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 0 [0123.010] FindClose (in: hFindFile=0x3dcf650 | out: hFindFile=0x3dcf650) returned 1 [0123.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0123.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44060) returned 1 [0123.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2648) returned 1 Thread: id = 315 os_tid = 0x908 [0122.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d51458 [0122.072] wcscpy (in: _Dest=0x3d51458, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" [0122.072] wcscat (in: _Dest=0x3d51458, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\" [0122.072] wcscat (in: _Dest=0x3d51458, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\*" [0122.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58498 [0122.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa50 [0122.517] wcscmp (_String1=".", _String2=".") returned 0 [0122.517] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88373250, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.517] wcscmp (_String1="..", _String2=".") returned 1 [0122.517] wcscmp (_String1="..", _String2="..") returned 0 [0122.517] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592fd430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0122.517] wcscmp (_String1="1033", _String2=".") returned 1 [0122.517] wcscmp (_String1="1033", _String2="..") returned 1 [0122.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a218 [0122.517] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin" [0122.517] wcscat (in: _Dest=0x3e1a218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\" [0122.517] wcscat (in: _Dest=0x3e1a218, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" [0123.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1a218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0123.012] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaaee300, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x8834d0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaaee300, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0123.012] wcscmp (_String1="VSTAClientPkg.dll", _String2=".") returned 1 [0123.012] wcscmp (_String1="VSTAClientPkg.dll", _String2="..") returned 1 [0123.012] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe71b5c00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe71b5c00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0123.012] wcscmp (_String1="VSTAProject.dll", _String2=".") returned 1 [0123.012] wcscmp (_String1="VSTAProject.dll", _String2="..") returned 1 [0123.012] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe71b5c00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe71b5c00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0123.012] FindClose (in: hFindFile=0x3dcfa50 | out: hFindFile=0x3dcfa50) returned 1 [0123.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58498) returned 1 [0123.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0123.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 Thread: id = 316 os_tid = 0x918 [0122.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp")) returned 0x20 [0124.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp", dwFileAttributes=0x20) returned 0 [0124.723] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.724] GetLastError () returned 0x5 [0124.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp", dwFileAttributes=0x20) returned 0 [0124.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 Thread: id = 317 os_tid = 0x928 [0122.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp")) returned 0x20 [0124.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp", dwFileAttributes=0x20) returned 0 [0124.728] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.728] GetLastError () returned 0x5 [0124.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp", dwFileAttributes=0x20) returned 0 [0124.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5c70) returned 1 Thread: id = 318 os_tid = 0x938 [0122.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp")) returned 0x20 [0124.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp", dwFileAttributes=0x20) returned 0 [0124.159] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.160] GetLastError () returned 0x5 [0124.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp", dwFileAttributes=0x20) returned 0 [0124.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 Thread: id = 319 os_tid = 0x948 [0122.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp")) returned 0x20 [0124.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp", dwFileAttributes=0x20) returned 0 [0124.157] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.157] GetLastError () returned 0x5 [0124.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp", dwFileAttributes=0x20) returned 0 [0124.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51368) returned 1 Thread: id = 320 os_tid = 0x958 [0122.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp")) returned 0x20 [0124.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp", dwFileAttributes=0x20) returned 0 [0124.337] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.337] GetLastError () returned 0x5 [0124.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp", dwFileAttributes=0x20) returned 0 [0124.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 Thread: id = 321 os_tid = 0x968 [0122.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp")) returned 0x20 [0124.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp", dwFileAttributes=0x20) returned 0 [0124.739] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.739] GetLastError () returned 0x5 [0124.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp", dwFileAttributes=0x20) returned 0 [0124.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c28) returned 1 Thread: id = 322 os_tid = 0x978 [0122.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp")) returned 0x20 [0124.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp", dwFileAttributes=0x20) returned 0 [0124.736] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.737] GetLastError () returned 0x5 [0124.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp", dwFileAttributes=0x20) returned 0 [0124.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ccb8) returned 1 Thread: id = 323 os_tid = 0x988 [0122.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp")) returned 0x20 [0124.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp", dwFileAttributes=0x20) returned 0 [0124.734] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.734] GetLastError () returned 0x5 [0124.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp", dwFileAttributes=0x20) returned 0 [0124.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 Thread: id = 324 os_tid = 0x998 [0122.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp")) returned 0x20 [0124.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp", dwFileAttributes=0x20) returned 0 [0124.726] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.726] GetLastError () returned 0x5 [0124.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp", dwFileAttributes=0x20) returned 0 [0124.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 Thread: id = 325 os_tid = 0x9a8 [0122.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp")) returned 0x20 [0124.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp", dwFileAttributes=0x20) returned 0 [0124.732] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.732] GetLastError () returned 0x5 [0124.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp", dwFileAttributes=0x20) returned 0 [0124.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da61f0) returned 1 Thread: id = 326 os_tid = 0x9b8 [0122.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp")) returned 0x20 [0124.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp", dwFileAttributes=0x20) returned 0 [0124.730] CreateFileW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.730] GetLastError () returned 0x5 [0124.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp", dwFileAttributes=0x20) returned 0 [0124.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6670) returned 1 Thread: id = 327 os_tid = 0x9c8 [0122.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5d70 [0122.087] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.087] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.087] wcscat (in: _Dest=0x3da5d70, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\*" [0122.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59308 [0122.087] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0122.087] wcscmp (_String1=".", _String2=".") returned 0 [0122.087] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.518] wcscmp (_String1="..", _String2=".") returned 1 [0122.518] wcscmp (_String1="..", _String2="..") returned 0 [0122.518] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x260e6157, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110.manifest", cAlternateFileName="580302~1.MAN")) returned 1 [0122.518] wcscmp (_String1="58.0.3029.110.manifest", _String2=".") returned 1 [0122.518] wcscmp (_String1="58.0.3029.110.manifest", _String2="..") returned 1 [0122.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053d08 [0122.519] wcscpy (in: _Dest=0x3053d08, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.519] wcscat (in: _Dest=0x3053d08, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.519] wcscat (in: _Dest=0x3053d08, _Source="58.0.3029.110.manifest" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" [0122.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0 [0122.858] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0bfb530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0bfb530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf98067d6, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2164d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll", cAlternateFileName="")) returned 1 [0122.858] wcscmp (_String1="chrome.dll", _String2=".") returned 1 [0122.858] wcscmp (_String1="chrome.dll", _String2="..") returned 1 [0122.858] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf9ebb1a8, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll.sig", cAlternateFileName="CHROME~3.SIG")) returned 1 [0122.858] wcscmp (_String1="chrome.dll.sig", _String2=".") returned 1 [0122.858] wcscmp (_String1="chrome.dll.sig", _String2="..") returned 1 [0122.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cc50 [0122.858] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.858] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.858] wcscat (in: _Dest=0x32cc50, _Source="chrome.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" [0122.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c [0122.859] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf919e2b8, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe.sig", cAlternateFileName="CHROME~2.SIG")) returned 1 [0122.859] wcscmp (_String1="chrome.exe.sig", _String2=".") returned 1 [0122.859] wcscmp (_String1="chrome.exe.sig", _String2="..") returned 1 [0122.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cce8 [0122.859] wcscpy (in: _Dest=0x32cce8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.859] wcscat (in: _Dest=0x32cce8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.859] wcscat (in: _Dest=0x32cce8, _Source="chrome.exe.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" [0122.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0122.860] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2613dfbb, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x6f44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_100_percent.pak", cAlternateFileName="CHROME~1.PAK")) returned 1 [0122.860] wcscmp (_String1="chrome_100_percent.pak", _String2=".") returned 1 [0122.860] wcscmp (_String1="chrome_100_percent.pak", _String2="..") returned 1 [0122.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053bb8 [0122.861] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.861] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.861] wcscat (in: _Dest=0x3053bb8, _Source="chrome_100_percent.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" [0122.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0122.862] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26f2acaf, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xb0b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_200_percent.pak", cAlternateFileName="CHROME~2.PAK")) returned 1 [0122.862] wcscmp (_String1="chrome_200_percent.pak", _String2=".") returned 1 [0122.862] wcscmp (_String1="chrome_200_percent.pak", _String2="..") returned 1 [0122.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053b10 [0122.862] wcscpy (in: _Dest=0x3053b10, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.862] wcscat (in: _Dest=0x3053b10, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.862] wcscat (in: _Dest=0x3053b10, _Source="chrome_200_percent.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" [0122.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0122.864] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1cf11f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe1cf11f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfa6ed2fe, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2ca2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0122.864] wcscmp (_String1="chrome_child.dll", _String2=".") returned 1 [0122.864] wcscmp (_String1="chrome_child.dll", _String2="..") returned 1 [0122.864] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfaf456ae, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll.sig", cAlternateFileName="CHROME~1.SIG")) returned 1 [0122.864] wcscmp (_String1="chrome_child.dll.sig", _String2=".") returned 1 [0122.864] wcscmp (_String1="chrome_child.dll.sig", _String2="..") returned 1 [0122.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053e58 [0122.864] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.864] wcscat (in: _Dest=0x3053e58, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.864] wcscat (in: _Dest=0x3053e58, _Source="chrome_child.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" [0122.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0122.865] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2037030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2037030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfb1a7c4e, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x69d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~2.DLL")) returned 1 [0122.865] wcscmp (_String1="chrome_elf.dll", _String2=".") returned 1 [0122.865] wcscmp (_String1="chrome_elf.dll", _String2="..") returned 1 [0122.866] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2037030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2037030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfb515264, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x75558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_watcher.dll", cAlternateFileName="CHROME~3.DLL")) returned 1 [0122.866] wcscmp (_String1="chrome_watcher.dll", _String2=".") returned 1 [0122.866] wcscmp (_String1="chrome_watcher.dll", _String2="..") returned 1 [0122.866] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2645ed83, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x392eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0122.866] wcscmp (_String1="d3dcompiler_47.dll", _String2=".") returned 1 [0122.866] wcscmp (_String1="d3dcompiler_47.dll", _String2="..") returned 1 [0122.866] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_apps", cAlternateFileName="DEFAUL~1")) returned 1 [0122.866] wcscmp (_String1="default_apps", _String2=".") returned 1 [0122.866] wcscmp (_String1="default_apps", _String2="..") returned 1 [0122.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cb20 [0122.866] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.866] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.866] wcscat (in: _Dest=0x32cb20, _Source="default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0122.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0122.867] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2037030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2037030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfba7270c, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="EVENTL~1.DLL")) returned 1 [0122.867] wcscmp (_String1="eventlog_provider.dll", _String2=".") returned 1 [0122.868] wcscmp (_String1="eventlog_provider.dll", _String2="..") returned 1 [0122.868] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0122.868] wcscmp (_String1="Extensions", _String2=".") returned 1 [0122.868] wcscmp (_String1="Extensions", _String2="..") returned 1 [0122.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df18c8 [0122.868] wcscpy (in: _Dest=0x3df18c8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.868] wcscat (in: _Dest=0x3df18c8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.868] wcscat (in: _Dest=0x3df18c8, _Source="Extensions" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" [0122.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df18c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0122.869] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a0c350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a0c350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2647c24f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x9a9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0122.870] wcscmp (_String1="icudtl.dat", _String2=".") returned 1 [0122.870] wcscmp (_String1="icudtl.dat", _String2="..") returned 1 [0122.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d444e0 [0122.870] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.870] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.870] wcscat (in: _Dest=0x3d444e0, _Source="icudtl.dat" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" [0122.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0122.871] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0122.871] wcscmp (_String1="Installer", _String2=".") returned 1 [0122.871] wcscmp (_String1="Installer", _String2="..") returned 1 [0122.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44570 [0122.871] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.871] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.872] wcscat (in: _Dest=0x3d44570, _Source="Installer" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" [0122.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0122.873] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20a9450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20a9450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfbe2c1d6, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0122.873] wcscmp (_String1="libegl.dll", _String2=".") returned 1 [0122.873] wcscmp (_String1="libegl.dll", _String2="..") returned 1 [0122.873] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20cf5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20cf5b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfc1e5ca0, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x2bb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0122.873] wcscmp (_String1="libglesv2.dll", _String2=".") returned 1 [0122.873] wcscmp (_String1="libglesv2.dll", _String2="..") returned 1 [0122.873] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0acaa30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locales", cAlternateFileName="")) returned 1 [0122.873] wcscmp (_String1="Locales", _String2=".") returned 1 [0122.873] wcscmp (_String1="Locales", _String2="..") returned 1 [0122.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44600 [0122.873] wcscpy (in: _Dest=0x3d44600, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.873] wcscat (in: _Dest=0x3d44600, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.873] wcscat (in: _Dest=0x3d44600, _Source="Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0122.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74 [0122.875] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20f5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20f5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfc684586, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x60e358, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl64.exe", cAlternateFileName="")) returned 1 [0122.875] wcscmp (_String1="nacl64.exe", _String2=".") returned 1 [0122.875] wcscmp (_String1="nacl64.exe", _String2="..") returned 1 [0122.875] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2651ada0, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x3404b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_32.nexe", cAlternateFileName="NACL_I~1.NEX")) returned 1 [0122.875] wcscmp (_String1="nacl_irt_x86_32.nexe", _String2=".") returned 1 [0122.875] wcscmp (_String1="nacl_irt_x86_32.nexe", _String2="..") returned 1 [0122.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053870 [0122.875] wcscpy (in: _Dest=0x3053870, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.875] wcscat (in: _Dest=0x3053870, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.875] wcscat (in: _Dest=0x3053870, _Source="nacl_irt_x86_32.nexe" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe" [0122.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0122.876] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2656dde2, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x410630, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="NACL_I~2.NEX")) returned 1 [0122.876] wcscmp (_String1="nacl_irt_x86_64.nexe", _String2=".") returned 1 [0122.876] wcscmp (_String1="nacl_irt_x86_64.nexe", _String2="..") returned 1 [0122.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3052fe8 [0122.876] wcscpy (in: _Dest=0x3052fe8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.876] wcscat (in: _Dest=0x3052fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.877] wcscat (in: _Dest=0x3052fe8, _Source="nacl_irt_x86_64.nexe" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" [0122.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0122.878] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0af0b90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0af0b90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2657c848, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x40323, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1 [0122.878] wcscmp (_String1="natives_blob.bin", _String2=".") returned 1 [0122.878] wcscmp (_String1="natives_blob.bin", _String2="..") returned 1 [0122.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5a40 [0122.878] wcscpy (in: _Dest=0x3df5a40, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.878] wcscat (in: _Dest=0x3df5a40, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.878] wcscat (in: _Dest=0x3df5a40, _Source="natives_blob.bin" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" [0122.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0122.880] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b3ce50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b3ce50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265aae8b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x118671c, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pak", cAlternateFileName="RESOUR~1.PAK")) returned 1 [0122.880] wcscmp (_String1="resources.pak", _String2=".") returned 1 [0122.880] wcscmp (_String1="resources.pak", _String2="..") returned 1 [0122.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32b820 [0122.881] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.881] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.881] wcscat (in: _Dest=0x32b820, _Source="resources.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" [0122.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0122.882] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b3ce50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b3ce50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265afcad, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x10c4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1 [0122.882] wcscmp (_String1="snapshot_blob.bin", _String2=".") returned 1 [0122.882] wcscmp (_String1="snapshot_blob.bin", _String2="..") returned 1 [0122.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df48c0 [0122.882] wcscpy (in: _Dest=0x3df48c0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.882] wcscat (in: _Dest=0x3df48c0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.883] wcscat (in: _Dest=0x3df48c0, _Source="snapshot_blob.bin" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" [0122.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df48c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0122.884] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1 [0122.884] wcscmp (_String1="VisualElements", _String2=".") returned 1 [0122.884] wcscmp (_String1="VisualElements", _String2="..") returned 1 [0122.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c660 [0122.884] wcscpy (in: _Dest=0x32c660, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.885] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.885] wcscat (in: _Dest=0x32c660, _Source="VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0122.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c [0122.886] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0122.886] wcscmp (_String1="WidevineCdm", _String2=".") returned 1 [0122.886] wcscmp (_String1="WidevineCdm", _String2="..") returned 1 [0122.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ca88 [0122.886] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110" [0122.886] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\" [0122.886] wcscat (in: _Dest=0x32ca88, _Source="WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0122.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0122.887] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0122.888] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0122.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59308) returned 1 [0122.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 [0122.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6270) returned 1 Thread: id = 328 os_tid = 0x9d8 [0122.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files\\google\\chrome\\application\\chrome.visualelementsmanifest.xml")) returned 0x20 [0122.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", dwFileAttributes=0x20) returned 0 [0122.089] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0122.089] GetLastError () returned 0x5 [0122.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", dwFileAttributes=0x20) returned 0 [0122.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 Thread: id = 329 os_tid = 0x9e8 [0122.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6470 [0122.091] wcscpy (in: _Dest=0x3da6470, _Source="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" [0122.091] wcscat (in: _Dest=0x3da6470, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\" [0122.091] wcscat (in: _Dest=0x3da6470, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\*" [0122.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59570 [0122.091] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0122.091] wcscmp (_String1=".", _String2=".") returned 0 [0122.091] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2d4e930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2d4e930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.091] wcscmp (_String1="..", _String2=".") returned 1 [0122.091] wcscmp (_String1="..", _String2="..") returned 0 [0122.092] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23a2fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170531124044.pma", cAlternateFileName="201705~1.PMA")) returned 1 [0122.092] wcscmp (_String1="20170531124044.pma", _String2=".") returned 1 [0122.092] wcscmp (_String1="20170531124044.pma", _String2="..") returned 1 [0122.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df54a0 [0122.092] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics" [0122.092] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\" [0122.092] wcscat (in: _Dest=0x3df54a0, _Source="20170531124044.pma" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma") returned="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma" [0122.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df54a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0122.696] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23a2fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe23a2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe23a2fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170531124044.pma", cAlternateFileName="201705~1.PMA")) returned 0 [0122.696] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0122.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59570) returned 1 [0122.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6470) returned 1 [0122.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015670) returned 1 Thread: id = 330 os_tid = 0x9f8 [0122.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015508 [0122.093] wcscpy (in: _Dest=0x3015508, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0122.093] wcscat (in: _Dest=0x3015508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0122.093] wcscat (in: _Dest=0x3015508, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*" [0122.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d597d8 [0122.093] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923f9df0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfad0 [0122.526] wcscmp (_String1=".", _String2=".") returned 0 [0122.526] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x765f43b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923f9df0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.527] wcscmp (_String1="..", _String2=".") returned 1 [0122.527] wcscmp (_String1="..", _String2="..") returned 0 [0122.527] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ca0c00, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9ca0c00, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0122.527] wcscmp (_String1="AG00004_.GIF", _String2=".") returned 1 [0122.527] wcscmp (_String1="AG00004_.GIF", _String2="..") returned 1 [0122.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8bd0 [0122.527] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0122.527] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0122.527] wcscat (in: _Dest=0x3eb8bd0, _Source="AG00004_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" [0123.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0123.014] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1847e700, ftCreationTime.dwHighDateTime=0x1bd4bae, ftLastAccessTime.dwLowDateTime=0x765f43b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1847e700, ftLastWriteTime.dwHighDateTime=0x1bd4bae, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0123.014] wcscmp (_String1="AG00011_.GIF", _String2=".") returned 1 [0123.014] wcscmp (_String1="AG00011_.GIF", _String2="..") returned 1 [0123.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f88 [0123.014] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.014] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.014] wcscat (in: _Dest=0x3eb8f88, _Source="AG00011_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" [0123.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0123.015] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8d5200, ftCreationTime.dwHighDateTime=0x1bd4bae, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8d5200, ftLastWriteTime.dwHighDateTime=0x1bd4bae, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0123.015] wcscmp (_String1="AG00021_.GIF", _String2=".") returned 1 [0123.015] wcscmp (_String1="AG00021_.GIF", _String2="..") returned 1 [0123.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0123.015] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.015] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.015] wcscat (in: _Dest=0x3eb9010, _Source="AG00021_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" [0123.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0123.017] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9495500, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf9495500, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0123.017] wcscmp (_String1="AG00037_.GIF", _String2=".") returned 1 [0123.017] wcscmp (_String1="AG00037_.GIF", _String2="..") returned 1 [0123.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9098 [0123.017] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.017] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.017] wcscat (in: _Dest=0x3eb9098, _Source="AG00037_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" [0123.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0123.018] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8d7c00, ftCreationTime.dwHighDateTime=0x1bf32c1, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc8d7c00, ftLastWriteTime.dwHighDateTime=0x1bf32c1, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0123.018] wcscmp (_String1="AG00038_.GIF", _String2=".") returned 1 [0123.018] wcscmp (_String1="AG00038_.GIF", _String2="..") returned 1 [0123.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9120 [0123.018] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.018] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.018] wcscat (in: _Dest=0x3eb9120, _Source="AG00038_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" [0123.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0123.020] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf484a100, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf484a100, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0123.020] wcscmp (_String1="AG00040_.GIF", _String2=".") returned 1 [0123.020] wcscmp (_String1="AG00040_.GIF", _String2="..") returned 1 [0123.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb91a8 [0123.020] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.020] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.020] wcscat (in: _Dest=0x3eb91a8, _Source="AG00040_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" [0123.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0123.021] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb633400, ftCreationTime.dwHighDateTime=0x1bd4c74, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb633400, ftLastWriteTime.dwHighDateTime=0x1bd4c74, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0123.021] wcscmp (_String1="AG00052_.GIF", _String2=".") returned 1 [0123.021] wcscmp (_String1="AG00052_.GIF", _String2="..") returned 1 [0123.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0123.021] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.021] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.021] wcscat (in: _Dest=0x3eb9230, _Source="AG00052_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" [0123.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0123.023] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a02200, ftCreationTime.dwHighDateTime=0x1bd4bae, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20a02200, ftLastWriteTime.dwHighDateTime=0x1bd4bae, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0123.023] wcscmp (_String1="AG00057_.GIF", _String2=".") returned 1 [0123.023] wcscmp (_String1="AG00057_.GIF", _String2="..") returned 1 [0123.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb92b8 [0123.023] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.023] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.023] wcscat (in: _Dest=0x3eb92b8, _Source="AG00057_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" [0123.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0123.025] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe966e00, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe966e00, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0123.025] wcscmp (_String1="AG00090_.GIF", _String2=".") returned 1 [0123.025] wcscmp (_String1="AG00090_.GIF", _String2="..") returned 1 [0123.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9340 [0123.025] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.025] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.025] wcscat (in: _Dest=0x3eb9340, _Source="AG00090_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" [0123.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474 [0123.027] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc341400, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc341400, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0123.027] wcscmp (_String1="AG00092_.GIF", _String2=".") returned 1 [0123.027] wcscmp (_String1="AG00092_.GIF", _String2="..") returned 1 [0123.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb93c8 [0123.027] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.027] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.027] wcscat (in: _Dest=0x3eb93c8, _Source="AG00092_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" [0123.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0123.029] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42a5700, ftCreationTime.dwHighDateTime=0x1bd4fef, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe42a5700, ftLastWriteTime.dwHighDateTime=0x1bd4fef, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0123.029] wcscmp (_String1="AG00103_.GIF", _String2=".") returned 1 [0123.029] wcscmp (_String1="AG00103_.GIF", _String2="..") returned 1 [0123.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9450 [0123.029] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.029] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.029] wcscat (in: _Dest=0x3eb9450, _Source="AG00103_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" [0123.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0123.030] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884b8100, ftCreationTime.dwHighDateTime=0x1bd4c31, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x884b8100, ftLastWriteTime.dwHighDateTime=0x1bd4c31, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0123.030] wcscmp (_String1="AG00120_.GIF", _String2=".") returned 1 [0123.030] wcscmp (_String1="AG00120_.GIF", _String2="..") returned 1 [0123.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb94d8 [0123.030] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.030] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.031] wcscat (in: _Dest=0x3eb94d8, _Source="AG00120_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" [0123.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0123.032] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9870ce00, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9870ce00, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0123.032] wcscmp (_String1="AG00126_.GIF", _String2=".") returned 1 [0123.032] wcscmp (_String1="AG00126_.GIF", _String2="..") returned 1 [0123.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0123.032] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.032] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.032] wcscat (in: _Dest=0x3eb9560, _Source="AG00126_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" [0123.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0123.033] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x960e7400, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x960e7400, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0123.033] wcscmp (_String1="AG00129_.GIF", _String2=".") returned 1 [0123.033] wcscmp (_String1="AG00129_.GIF", _String2="..") returned 1 [0123.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0123.034] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.034] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.034] wcscat (in: _Dest=0x3eb95e8, _Source="AG00129_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" [0123.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98 [0123.035] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94dd4700, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94dd4700, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0123.035] wcscmp (_String1="AG00130_.GIF", _String2=".") returned 1 [0123.035] wcscmp (_String1="AG00130_.GIF", _String2="..") returned 1 [0123.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0123.035] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.035] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.035] wcscat (in: _Dest=0x3eb9670, _Source="AG00130_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" [0123.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0 [0123.037] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee76600, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ee76600, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0123.037] wcscmp (_String1="AG00135_.GIF", _String2=".") returned 1 [0123.037] wcscmp (_String1="AG00135_.GIF", _String2="..") returned 1 [0123.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb96f8 [0123.037] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.037] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.037] wcscat (in: _Dest=0x3eb96f8, _Source="AG00135_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" [0123.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0123.038] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88f18500, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88f18500, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0123.038] wcscmp (_String1="AG00139_.GIF", _String2=".") returned 1 [0123.038] wcscmp (_String1="AG00139_.GIF", _String2="..") returned 1 [0123.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9780 [0123.039] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.039] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.039] wcscat (in: _Dest=0x3eb9780, _Source="AG00139_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" [0123.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0123.040] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fba400, ftCreationTime.dwHighDateTime=0x1bd5113, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82fba400, ftLastWriteTime.dwHighDateTime=0x1bd5113, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0123.040] wcscmp (_String1="AG00142_.GIF", _String2=".") returned 1 [0123.040] wcscmp (_String1="AG00142_.GIF", _String2="..") returned 1 [0123.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9808 [0123.040] wcscpy (in: _Dest=0x3eb9808, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.040] wcscat (in: _Dest=0x3eb9808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.040] wcscat (in: _Dest=0x3eb9808, _Source="AG00142_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" [0123.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0123.902] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9d6900, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e9d6900, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0123.902] wcscmp (_String1="AG00154_.GIF", _String2=".") returned 1 [0123.902] wcscmp (_String1="AG00154_.GIF", _String2="..") returned 1 [0123.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba440 [0123.902] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0123.902] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0123.903] wcscat (in: _Dest=0x3eba440, _Source="AG00154_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" [0136.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0136.606] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47765b00, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47765b00, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0136.606] wcscmp (_String1="AG00157_.GIF", _String2=".") returned 1 [0136.606] wcscmp (_String1="AG00157_.GIF", _String2="..") returned 1 [0136.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0136.607] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.607] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.607] wcscat (in: _Dest=0x3eb95e8, _Source="AG00157_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" [0136.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0136.611] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b1a700, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42b1a700, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0136.611] wcscmp (_String1="AG00158_.GIF", _String2=".") returned 1 [0136.611] wcscmp (_String1="AG00158_.GIF", _String2="..") returned 1 [0136.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3ca00 [0136.611] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.611] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.611] wcscat (in: _Dest=0x3f3ca00, _Source="AG00158_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" [0136.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0136.612] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f9ed700, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f9ed700, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0136.612] wcscmp (_String1="AG00160_.GIF", _String2=".") returned 1 [0136.612] wcscmp (_String1="AG00160_.GIF", _String2="..") returned 1 [0136.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c290 [0136.613] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.613] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.613] wcscat (in: _Dest=0x3f3c290, _Source="AG00160_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" [0136.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0136.620] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ada2300, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2ada2300, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0136.620] wcscmp (_String1="AG00161_.GIF", _String2=".") returned 1 [0136.620] wcscmp (_String1="AG00161_.GIF", _String2="..") returned 1 [0136.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bed8 [0136.620] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.620] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.620] wcscat (in: _Dest=0x3f3bed8, _Source="AG00161_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" [0136.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0136.622] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb195e00, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb195e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0136.622] wcscmp (_String1="AG00163_.GIF", _String2=".") returned 1 [0136.622] wcscmp (_String1="AG00163_.GIF", _String2="..") returned 1 [0136.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0136.622] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.622] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.622] wcscat (in: _Dest=0x3f3cb10, _Source="AG00163_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" [0136.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0 [0136.623] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2281e800, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2281e800, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0136.623] wcscmp (_String1="AG00164_.GIF", _String2=".") returned 1 [0136.624] wcscmp (_String1="AG00164_.GIF", _String2="..") returned 1 [0136.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0136.624] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.624] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.624] wcscat (in: _Dest=0x3f3c208, _Source="AG00164_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" [0136.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0136.625] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee6100, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1eee6100, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0136.625] wcscmp (_String1="AG00165_.GIF", _String2=".") returned 1 [0136.625] wcscmp (_String1="AG00165_.GIF", _String2="..") returned 1 [0136.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c3a0 [0136.625] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.625] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.625] wcscat (in: _Dest=0x3f3c3a0, _Source="AG00165_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" [0136.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0136.631] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16962600, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16962600, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0136.631] wcscmp (_String1="AG00167_.GIF", _String2=".") returned 1 [0136.631] wcscmp (_String1="AG00167_.GIF", _String2="..") returned 1 [0136.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3db00 [0136.631] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.631] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.631] wcscat (in: _Dest=0x3f3db00, _Source="AG00167_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" [0136.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0136.633] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d17200, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11d17200, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0136.633] wcscmp (_String1="AG00169_.GIF", _String2=".") returned 1 [0136.633] wcscmp (_String1="AG00169_.GIF", _String2="..") returned 1 [0136.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3be50 [0136.633] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.633] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.633] wcscat (in: _Dest=0x3f3be50, _Source="AG00169_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" [0136.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0 [0136.634] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb9100, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x7661a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdb9100, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0136.635] wcscmp (_String1="AG00170_.GIF", _String2=".") returned 1 [0136.635] wcscmp (_String1="AG00170_.GIF", _String2="..") returned 1 [0136.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0136.635] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.635] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.635] wcscat (in: _Dest=0x3f3cd30, _Source="AG00170_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" [0136.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb4 [0136.641] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716dd00, ftCreationTime.dwHighDateTime=0x1bd4c77, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x716dd00, ftLastWriteTime.dwHighDateTime=0x1bd4c77, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0136.641] wcscmp (_String1="AG00171_.GIF", _String2=".") returned 1 [0136.641] wcscmp (_String1="AG00171_.GIF", _String2="..") returned 1 [0136.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cdb8 [0136.641] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.641] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.641] wcscat (in: _Dest=0x3f3cdb8, _Source="AG00171_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" [0136.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0136.646] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf39c500, ftCreationTime.dwHighDateTime=0x1bd4ec5, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf39c500, ftLastWriteTime.dwHighDateTime=0x1bd4ec5, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0136.646] wcscmp (_String1="AG00172_.GIF", _String2=".") returned 1 [0136.646] wcscmp (_String1="AG00172_.GIF", _String2="..") returned 1 [0136.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cec8 [0136.646] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.646] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.646] wcscat (in: _Dest=0x3f3cec8, _Source="AG00172_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" [0136.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0136.647] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73821e00, ftCreationTime.dwHighDateTime=0x1bd4ebb, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73821e00, ftLastWriteTime.dwHighDateTime=0x1bd4ebb, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0136.647] wcscmp (_String1="AG00174_.GIF", _String2=".") returned 1 [0136.648] wcscmp (_String1="AG00174_.GIF", _String2="..") returned 1 [0136.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d6c0 [0136.648] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.648] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.648] wcscat (in: _Dest=0x3f3d6c0, _Source="AG00174_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" [0136.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0136.649] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914d8400, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x914d8400, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0136.649] wcscmp (_String1="AG00175_.GIF", _String2=".") returned 1 [0136.649] wcscmp (_String1="AG00175_.GIF", _String2="..") returned 1 [0136.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d308 [0136.650] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0136.650] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0136.650] wcscat (in: _Dest=0x3f3d308, _Source="AG00175_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" [0136.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0136.651] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3719900, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x85828230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3719900, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0137.286] wcscmp (_String1="AG00176_.GIF", _String2=".") returned 1 [0137.286] wcscmp (_String1="AG00176_.GIF", _String2="..") returned 1 [0137.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9098 [0137.286] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0137.286] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0137.286] wcscat (in: _Dest=0x3eb9098, _Source="AG00176_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" [0140.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0140.465] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef940300, ftCreationTime.dwHighDateTime=0x1bd4b55, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef940300, ftLastWriteTime.dwHighDateTime=0x1bd4b55, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0140.465] wcscmp (_String1="AN00010_.WMF", _String2=".") returned 1 [0140.465] wcscmp (_String1="AN00010_.WMF", _String2="..") returned 1 [0140.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba4c8 [0140.465] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.465] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.465] wcscat (in: _Dest=0x3eba4c8, _Source="AN00010_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" [0140.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2484 [0140.466] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40512f00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x40512f00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0140.466] wcscmp (_String1="AN00015_.WMF", _String2=".") returned 1 [0140.466] wcscmp (_String1="AN00015_.WMF", _String2="..") returned 1 [0140.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb94d8 [0140.466] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.466] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.466] wcscat (in: _Dest=0x3eb94d8, _Source="AN00015_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" [0140.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2488 [0140.467] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b60b00, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x13b60b00, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0140.467] wcscmp (_String1="AN00790_.WMF", _String2=".") returned 1 [0140.467] wcscmp (_String1="AN00790_.WMF", _String2="..") returned 1 [0140.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0140.467] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.467] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.467] wcscat (in: _Dest=0x3eb9cd0, _Source="AN00790_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" [0140.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248c [0140.468] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f200200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f200200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0140.468] wcscmp (_String1="AN00853_.WMF", _String2=".") returned 1 [0140.468] wcscmp (_String1="AN00853_.WMF", _String2="..") returned 1 [0140.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba110 [0140.469] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.469] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.469] wcscat (in: _Dest=0x3eba110, _Source="AN00853_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" [0140.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0140.470] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4300900, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4300900, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0140.470] wcscmp (_String1="AN00914_.WMF", _String2=".") returned 1 [0140.470] wcscmp (_String1="AN00914_.WMF", _String2="..") returned 1 [0140.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0140.470] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.470] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.470] wcscat (in: _Dest=0x3eba770, _Source="AN00914_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" [0140.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0140.471] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3deed500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3deed500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0140.471] wcscmp (_String1="AN00932_.WMF", _String2=".") returned 1 [0140.471] wcscmp (_String1="AN00932_.WMF", _String2="..") returned 1 [0140.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9890 [0140.471] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.471] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.471] wcscat (in: _Dest=0x3eb9890, _Source="AN00932_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" [0140.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2498 [0140.472] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5683dd00, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5683dd00, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0140.472] wcscmp (_String1="AN00965_.WMF", _String2=".") returned 1 [0140.472] wcscmp (_String1="AN00965_.WMF", _String2="..") returned 1 [0140.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba440 [0140.472] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.472] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.473] wcscat (in: _Dest=0x3eba440, _Source="AN00965_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" [0140.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x249c [0140.473] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8ca00, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b8ca00, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0140.473] wcscmp (_String1="AN01039_.WMF", _String2=".") returned 1 [0140.474] wcscmp (_String1="AN01039_.WMF", _String2="..") returned 1 [0140.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba6e8 [0140.474] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.474] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.474] wcscat (in: _Dest=0x3eba6e8, _Source="AN01039_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" [0140.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a0 [0140.475] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc71e0000, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc71e0000, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0140.475] wcscmp (_String1="AN01044_.WMF", _String2=".") returned 1 [0140.475] wcscmp (_String1="AN01044_.WMF", _String2="..") returned 1 [0140.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9f78 [0140.475] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.475] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.475] wcscat (in: _Dest=0x3eb9f78, _Source="AN01044_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" [0140.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0140.476] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37328300, ftCreationTime.dwHighDateTime=0x1bd4b86, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37328300, ftLastWriteTime.dwHighDateTime=0x1bd4b86, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0140.476] wcscmp (_String1="AN01060_.WMF", _String2=".") returned 1 [0140.476] wcscmp (_String1="AN01060_.WMF", _String2="..") returned 1 [0140.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0140.476] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.476] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.476] wcscat (in: _Dest=0x3f3c208, _Source="AN01060_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" [0140.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0140.477] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c124400, ftCreationTime.dwHighDateTime=0x1bd4b83, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c124400, ftLastWriteTime.dwHighDateTime=0x1bd4b83, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0140.477] wcscmp (_String1="AN01084_.WMF", _String2=".") returned 1 [0140.477] wcscmp (_String1="AN01084_.WMF", _String2="..") returned 1 [0140.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d308 [0140.478] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.478] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.478] wcscat (in: _Dest=0x3f3d308, _Source="AN01084_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" [0140.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ac [0140.479] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9754500, ftCreationTime.dwHighDateTime=0x1bd4b9c, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9754500, ftLastWriteTime.dwHighDateTime=0x1bd4b9c, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0140.479] wcscmp (_String1="AN01173_.WMF", _String2=".") returned 1 [0140.479] wcscmp (_String1="AN01173_.WMF", _String2="..") returned 1 [0140.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d6c0 [0140.479] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.479] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.479] wcscat (in: _Dest=0x3f3d6c0, _Source="AN01173_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" [0140.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b0 [0140.480] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8441800, ftCreationTime.dwHighDateTime=0x1bd4b9c, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8441800, ftLastWriteTime.dwHighDateTime=0x1bd4b9c, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0140.480] wcscmp (_String1="AN01174_.WMF", _String2=".") returned 1 [0140.480] wcscmp (_String1="AN01174_.WMF", _String2="..") returned 1 [0140.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cdb8 [0140.480] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.480] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.480] wcscat (in: _Dest=0x3f3cdb8, _Source="AN01174_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" [0140.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b4 [0140.481] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f42f00, ftCreationTime.dwHighDateTime=0x1bd4b5b, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21f42f00, ftLastWriteTime.dwHighDateTime=0x1bd4b5b, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0140.481] wcscmp (_String1="AN01184_.WMF", _String2=".") returned 1 [0140.481] wcscmp (_String1="AN01184_.WMF", _String2="..") returned 1 [0140.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0140.481] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.482] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.482] wcscat (in: _Dest=0x3f3cd30, _Source="AN01184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" [0140.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b8 [0140.483] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x186ac700, ftCreationTime.dwHighDateTime=0x1bd4b5b, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x186ac700, ftLastWriteTime.dwHighDateTime=0x1bd4b5b, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0140.483] wcscmp (_String1="AN01216_.WMF", _String2=".") returned 1 [0140.483] wcscmp (_String1="AN01216_.WMF", _String2="..") returned 1 [0140.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c3a0 [0140.483] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.483] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.483] wcscat (in: _Dest=0x3f3c3a0, _Source="AN01216_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" [0140.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24bc [0140.484] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d74000, ftCreationTime.dwHighDateTime=0x1bd4b5b, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14d74000, ftLastWriteTime.dwHighDateTime=0x1bd4b5b, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0140.484] wcscmp (_String1="AN01218_.WMF", _String2=".") returned 1 [0140.484] wcscmp (_String1="AN01218_.WMF", _String2="..") returned 1 [0140.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0140.484] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.484] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.484] wcscat (in: _Dest=0x3f3cb10, _Source="AN01218_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" [0140.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c0 [0140.485] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf01800, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdf01800, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0140.485] wcscmp (_String1="AN01251_.WMF", _String2=".") returned 1 [0140.485] wcscmp (_String1="AN01251_.WMF", _String2="..") returned 1 [0140.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bed8 [0140.486] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.486] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.486] wcscat (in: _Dest=0x3f3bed8, _Source="AN01251_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" [0140.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c4 [0140.487] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596bd700, ftCreationTime.dwHighDateTime=0x1bd4b6d, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x596bd700, ftLastWriteTime.dwHighDateTime=0x1bd4b6d, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0140.487] wcscmp (_String1="AN01545_.WMF", _String2=".") returned 1 [0140.487] wcscmp (_String1="AN01545_.WMF", _String2="..") returned 1 [0140.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c290 [0140.487] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.487] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.487] wcscat (in: _Dest=0x3f3c290, _Source="AN01545_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" [0140.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c8 [0140.488] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78af3800, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78af3800, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0140.488] wcscmp (_String1="AN02122_.WMF", _String2=".") returned 1 [0140.488] wcscmp (_String1="AN02122_.WMF", _String2="..") returned 1 [0140.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3ca00 [0140.488] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.488] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.488] wcscat (in: _Dest=0x3f3ca00, _Source="AN02122_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" [0140.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24cc [0140.489] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63fe9d00, ftCreationTime.dwHighDateTime=0x1bd4c4f, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63fe9d00, ftLastWriteTime.dwHighDateTime=0x1bd4c4f, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0140.489] wcscmp (_String1="AN02559_.WMF", _String2=".") returned 1 [0140.490] wcscmp (_String1="AN02559_.WMF", _String2="..") returned 1 [0140.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cec8 [0140.490] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.490] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.490] wcscat (in: _Dest=0x3f3cec8, _Source="AN02559_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" [0140.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d0 [0140.491] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a0a300, ftCreationTime.dwHighDateTime=0x1bd4c64, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0a0a300, ftLastWriteTime.dwHighDateTime=0x1bd4c64, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0140.491] wcscmp (_String1="AN02724_.WMF", _String2=".") returned 1 [0140.491] wcscmp (_String1="AN02724_.WMF", _String2="..") returned 1 [0140.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0140.491] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.491] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.491] wcscat (in: _Dest=0x3f3d280, _Source="AN02724_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" [0140.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf")) returned 0x20 [0140.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x20) returned 0 [0140.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.511] GetLastError () returned 0x5 [0140.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x20) returned 0 [0140.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 [0140.511] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bc9100, ftCreationTime.dwHighDateTime=0x1bd4c7d, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1bc9100, ftLastWriteTime.dwHighDateTime=0x1bd4c7d, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0140.511] wcscmp (_String1="AN03500_.WMF", _String2=".") returned 1 [0140.511] wcscmp (_String1="AN03500_.WMF", _String2="..") returned 1 [0140.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0140.512] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.512] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.512] wcscat (in: _Dest=0x3f3d280, _Source="AN03500_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" [0140.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf")) returned 0x20 [0140.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x20) returned 0 [0140.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.574] GetLastError () returned 0x5 [0140.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x20) returned 0 [0140.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 [0140.574] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0140.574] wcscmp (_String1="AN04108_.WMF", _String2=".") returned 1 [0140.574] wcscmp (_String1="AN04108_.WMF", _String2="..") returned 1 [0140.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0140.575] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.575] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.575] wcscat (in: _Dest=0x3f3d280, _Source="AN04108_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" [0140.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf")) returned 0x20 [0140.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x20) returned 0 [0140.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.575] GetLastError () returned 0x5 [0140.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x20) returned 0 [0140.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 [0140.576] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0140.576] wcscmp (_String1="AN04117_.WMF", _String2=".") returned 1 [0140.576] wcscmp (_String1="AN04117_.WMF", _String2="..") returned 1 [0140.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0140.576] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.576] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.576] wcscat (in: _Dest=0x3f3d280, _Source="AN04117_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" [0140.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf")) returned 0x20 [0140.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x20) returned 0 [0140.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.577] GetLastError () returned 0x5 [0140.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x20) returned 0 [0140.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 [0140.577] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0140.577] wcscmp (_String1="AN04134_.WMF", _String2=".") returned 1 [0140.577] wcscmp (_String1="AN04134_.WMF", _String2="..") returned 1 [0140.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0140.577] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.577] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.577] wcscat (in: _Dest=0x3f3d280, _Source="AN04134_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" [0140.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf")) returned 0x20 [0140.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x20) returned 0 [0140.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.578] GetLastError () returned 0x5 [0140.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x20) returned 0 [0140.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 [0140.578] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0140.578] wcscmp (_String1="AN04174_.WMF", _String2=".") returned 1 [0140.578] wcscmp (_String1="AN04174_.WMF", _String2="..") returned 1 [0140.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0140.578] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.578] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.578] wcscat (in: _Dest=0x3f3d280, _Source="AN04174_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" [0140.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf")) returned 0x20 [0140.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x20) returned 0 [0140.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.579] GetLastError () returned 0x5 [0140.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x20) returned 0 [0140.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 [0140.579] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0140.579] wcscmp (_String1="AN04191_.WMF", _String2=".") returned 1 [0140.579] wcscmp (_String1="AN04191_.WMF", _String2="..") returned 1 [0140.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0140.579] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0140.579] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0140.579] wcscat (in: _Dest=0x3f3d280, _Source="AN04191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" [0152.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0 [0152.887] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0152.887] wcscmp (_String1="AN04195_.WMF", _String2=".") returned 1 [0152.887] wcscmp (_String1="AN04195_.WMF", _String2="..") returned 1 [0152.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9340 [0152.887] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0152.887] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0152.887] wcscat (in: _Dest=0x3eb9340, _Source="AN04195_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" [0152.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0152.888] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0152.888] wcscmp (_String1="AN04196_.WMF", _String2=".") returned 1 [0152.888] wcscmp (_String1="AN04196_.WMF", _String2="..") returned 1 [0152.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0152.889] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0152.889] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0152.889] wcscat (in: _Dest=0x3eb95e8, _Source="AN04196_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" [0152.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2050 [0152.890] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0152.890] wcscmp (_String1="AN04206_.WMF", _String2=".") returned 1 [0152.890] wcscmp (_String1="AN04206_.WMF", _String2="..") returned 1 [0152.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f88 [0152.890] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0152.890] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0152.890] wcscat (in: _Dest=0x3eb8f88, _Source="AN04206_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" [0152.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0152.891] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0152.891] wcscmp (_String1="AN04225_.WMF", _String2=".") returned 1 [0152.891] wcscmp (_String1="AN04225_.WMF", _String2="..") returned 1 [0152.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0152.891] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0152.891] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0152.891] wcscat (in: _Dest=0x3eb9560, _Source="AN04225_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" [0152.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2048 [0152.893] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0152.893] wcscmp (_String1="AN04235_.WMF", _String2=".") returned 1 [0152.893] wcscmp (_String1="AN04235_.WMF", _String2="..") returned 1 [0152.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9450 [0152.893] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0152.893] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0152.893] wcscat (in: _Dest=0x3eb9450, _Source="AN04235_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" [0152.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2044 [0152.894] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0152.894] wcscmp (_String1="AN04267_.WMF", _String2=".") returned 1 [0152.894] wcscmp (_String1="AN04267_.WMF", _String2="..") returned 1 [0152.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8ce0 [0152.894] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0152.894] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0152.894] wcscat (in: _Dest=0x3eb8ce0, _Source="AN04267_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" [0152.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0152.896] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0152.898] wcscmp (_String1="AN04269_.WMF", _String2=".") returned 1 [0152.898] wcscmp (_String1="AN04269_.WMF", _String2="..") returned 1 [0152.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9918 [0152.898] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0152.898] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0152.898] wcscat (in: _Dest=0x3eb9918, _Source="AN04269_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" [0163.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0163.725] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0163.726] wcscmp (_String1="AN04323_.WMF", _String2=".") returned 1 [0163.726] wcscmp (_String1="AN04323_.WMF", _String2="..") returned 1 [0163.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e588 [0163.726] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.726] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.726] wcscat (in: _Dest=0x36e588, _Source="AN04323_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" [0163.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0163.727] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0163.727] wcscmp (_String1="AN04326_.WMF", _String2=".") returned 1 [0163.727] wcscmp (_String1="AN04326_.WMF", _String2="..") returned 1 [0163.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0163.727] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.728] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.728] wcscat (in: _Dest=0x36e500, _Source="AN04326_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" [0163.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0163.729] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766d8bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0163.729] wcscmp (_String1="AN04332_.WMF", _String2=".") returned 1 [0163.729] wcscmp (_String1="AN04332_.WMF", _String2="..") returned 1 [0163.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36f3e0 [0163.729] wcscpy (in: _Dest=0x36f3e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.729] wcscat (in: _Dest=0x36f3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.729] wcscat (in: _Dest=0x36f3e0, _Source="AN04332_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" [0163.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0163.730] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766fed50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0163.730] wcscmp (_String1="AN04355_.WMF", _String2=".") returned 1 [0163.730] wcscmp (_String1="AN04355_.WMF", _String2="..") returned 1 [0163.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ed80 [0163.730] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.731] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.731] wcscat (in: _Dest=0x36ed80, _Source="AN04355_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" [0163.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0163.732] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x766fed50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0163.732] wcscmp (_String1="AN04369_.WMF", _String2=".") returned 1 [0163.732] wcscmp (_String1="AN04369_.WMF", _String2="..") returned 1 [0163.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e830 [0163.732] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.732] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.732] wcscat (in: _Dest=0x36e830, _Source="AN04369_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" [0163.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0163.733] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0163.733] wcscmp (_String1="AN04384_.WMF", _String2=".") returned 1 [0163.733] wcscmp (_String1="AN04384_.WMF", _String2="..") returned 1 [0163.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36fc60 [0163.733] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.733] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.733] wcscat (in: _Dest=0x36fc60, _Source="AN04384_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" [0163.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0163.735] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x858744f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0163.735] wcscmp (_String1="AN04385_.WMF", _String2=".") returned 1 [0163.735] wcscmp (_String1="AN04385_.WMF", _String2="..") returned 1 [0163.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb91a8 [0163.735] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.735] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.735] wcscat (in: _Dest=0x3eb91a8, _Source="AN04385_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" [0163.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0163.736] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f8f400, ftCreationTime.dwHighDateTime=0x1bd4c7a, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64f8f400, ftLastWriteTime.dwHighDateTime=0x1bd4c7a, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0163.736] wcscmp (_String1="BABY_01.MID", _String2=".") returned 1 [0163.736] wcscmp (_String1="BABY_01.MID", _String2="..") returned 1 [0163.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8bd0 [0163.736] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.736] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.736] wcscat (in: _Dest=0x3eb8bd0, _Source="BABY_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" [0163.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0163.737] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0163.738] wcscmp (_String1="BD00116_.WMF", _String2=".") returned 1 [0163.738] wcscmp (_String1="BD00116_.WMF", _String2="..") returned 1 [0163.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0163.738] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.738] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.738] wcscat (in: _Dest=0x3eb9ef0, _Source="BD00116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" [0163.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0163.739] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8679b00, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8679b00, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0163.739] wcscmp (_String1="BD00141_.WMF", _String2=".") returned 1 [0163.739] wcscmp (_String1="BD00141_.WMF", _String2="..") returned 1 [0163.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9890 [0163.739] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.739] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.739] wcscat (in: _Dest=0x3eb9890, _Source="BD00141_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" [0163.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0163.741] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb8b700, ftCreationTime.dwHighDateTime=0x1bf14f3, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4eb8b700, ftLastWriteTime.dwHighDateTime=0x1bf14f3, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0163.741] wcscmp (_String1="BD00146_.WMF", _String2=".") returned 1 [0163.741] wcscmp (_String1="BD00146_.WMF", _String2="..") returned 1 [0163.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0163.741] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.741] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.741] wcscat (in: _Dest=0x3eb9670, _Source="BD00146_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" [0163.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0163.742] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9706af00, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9706af00, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0163.742] wcscmp (_String1="BD00155_.WMF", _String2=".") returned 1 [0163.742] wcscmp (_String1="BD00155_.WMF", _String2="..") returned 1 [0163.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0163.742] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.742] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.743] wcscat (in: _Dest=0x3eba2a8, _Source="BD00155_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" [0163.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0163.744] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdfa100, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fdfa100, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0163.744] wcscmp (_String1="BD00160_.WMF", _String2=".") returned 1 [0163.744] wcscmp (_String1="BD00160_.WMF", _String2="..") returned 1 [0163.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0163.744] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.744] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.744] wcscat (in: _Dest=0x3eba220, _Source="BD00160_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" [0163.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0163.745] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60309900, ftCreationTime.dwHighDateTime=0x1bd5008, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60309900, ftLastWriteTime.dwHighDateTime=0x1bd5008, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0163.745] wcscmp (_String1="BD00173_.WMF", _String2=".") returned 1 [0163.745] wcscmp (_String1="BD00173_.WMF", _String2="..") returned 1 [0163.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9f78 [0163.746] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.746] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.746] wcscat (in: _Dest=0x3eb9f78, _Source="BD00173_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" [0163.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0163.747] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0163.747] wcscmp (_String1="BD05119_.WMF", _String2=".") returned 1 [0163.747] wcscmp (_String1="BD05119_.WMF", _String2="..") returned 1 [0163.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba330 [0163.747] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.747] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.747] wcscat (in: _Dest=0x3eba330, _Source="BD05119_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" [0163.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0163.749] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0163.749] wcscmp (_String1="BD06102_.WMF", _String2=".") returned 1 [0163.749] wcscmp (_String1="BD06102_.WMF", _String2="..") returned 1 [0163.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0163.749] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.749] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.749] wcscat (in: _Dest=0x3eb9230, _Source="BD06102_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" [0163.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0163.750] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0163.750] wcscmp (_String1="BD06200_.WMF", _String2=".") returned 1 [0163.750] wcscmp (_String1="BD06200_.WMF", _String2="..") returned 1 [0163.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb93c8 [0163.750] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.750] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.751] wcscat (in: _Dest=0x3eb93c8, _Source="BD06200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" [0163.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0163.752] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0163.752] wcscmp (_String1="BD07761_.WMF", _String2=".") returned 1 [0163.752] wcscmp (_String1="BD07761_.WMF", _String2="..") returned 1 [0163.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0163.752] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.752] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.752] wcscat (in: _Dest=0x3eb8e78, _Source="BD07761_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" [0163.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0163.753] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0163.753] wcscmp (_String1="BD07804_.WMF", _String2=".") returned 1 [0163.753] wcscmp (_String1="BD07804_.WMF", _String2="..") returned 1 [0163.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8ce0 [0163.753] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.753] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.753] wcscat (in: _Dest=0x3eb8ce0, _Source="BD07804_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" [0163.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0163.755] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0163.755] wcscmp (_String1="BD07831_.WMF", _String2=".") returned 1 [0163.755] wcscmp (_String1="BD07831_.WMF", _String2="..") returned 1 [0163.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0163.755] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.755] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.755] wcscat (in: _Dest=0x3eba770, _Source="BD07831_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" [0163.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0163.756] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0163.756] wcscmp (_String1="BD08758_.WMF", _String2=".") returned 1 [0163.756] wcscmp (_String1="BD08758_.WMF", _String2="..") returned 1 [0163.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb94d8 [0163.756] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.756] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.756] wcscat (in: _Dest=0x3eb94d8, _Source="BD08758_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" [0163.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0163.758] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0163.758] wcscmp (_String1="BD08773_.WMF", _String2=".") returned 1 [0163.758] wcscmp (_String1="BD08773_.WMF", _String2="..") returned 1 [0163.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9120 [0163.758] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.758] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.758] wcscat (in: _Dest=0x3eb9120, _Source="BD08773_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" [0163.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0163.759] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0163.759] wcscmp (_String1="BD08808_.WMF", _String2=".") returned 1 [0163.759] wcscmp (_String1="BD08808_.WMF", _String2="..") returned 1 [0163.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0163.759] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.759] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.759] wcscat (in: _Dest=0x3eb9cd0, _Source="BD08808_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" [0163.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0163.761] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x85df57d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0163.761] wcscmp (_String1="BD08868_.WMF", _String2=".") returned 1 [0163.761] wcscmp (_String1="BD08868_.WMF", _String2="..") returned 1 [0163.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0163.761] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0163.761] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0163.761] wcscat (in: _Dest=0x3eb95e8, _Source="BD08868_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" [0163.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0165.033] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0165.034] wcscmp (_String1="BD09031_.WMF", _String2=".") returned 1 [0165.034] wcscmp (_String1="BD09031_.WMF", _String2="..") returned 1 [0165.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0165.034] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0165.034] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0165.034] wcscat (in: _Dest=0x3f3c538, _Source="BD09031_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" [0166.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0166.639] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0166.639] wcscmp (_String1="BD09194_.WMF", _String2=".") returned 1 [0166.639] wcscmp (_String1="BD09194_.WMF", _String2="..") returned 1 [0166.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d6c0 [0166.639] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.639] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.639] wcscat (in: _Dest=0x3f3d6c0, _Source="BD09194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" [0166.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0166.643] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0166.643] wcscmp (_String1="BD09662_.WMF", _String2=".") returned 1 [0166.643] wcscmp (_String1="BD09662_.WMF", _String2="..") returned 1 [0166.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0166.643] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.643] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.643] wcscat (in: _Dest=0x3f3d748, _Source="BD09662_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" [0166.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0166.645] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76a44b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0166.645] wcscmp (_String1="BD09664_.WMF", _String2=".") returned 1 [0166.645] wcscmp (_String1="BD09664_.WMF", _String2="..") returned 1 [0166.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c5c0 [0166.645] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.645] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.645] wcscat (in: _Dest=0x3f3c5c0, _Source="BD09664_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" [0166.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0166.647] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe16b3a00, ftCreationTime.dwHighDateTime=0x1bd4fce, ftLastAccessTime.dwLowDateTime=0x85e1b930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe16b3a00, ftLastWriteTime.dwHighDateTime=0x1bd4fce, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0166.647] wcscmp (_String1="BD10890_.GIF", _String2=".") returned 1 [0166.647] wcscmp (_String1="BD10890_.GIF", _String2="..") returned 1 [0166.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d390 [0166.648] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.648] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.648] wcscat (in: _Dest=0x3f3d390, _Source="BD10890_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" [0166.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0166.649] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a4fb00, ftCreationTime.dwHighDateTime=0x1bd4fce, ftLastAccessTime.dwLowDateTime=0x76a6acf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28a4fb00, ftLastWriteTime.dwHighDateTime=0x1bd4fce, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0166.649] wcscmp (_String1="BD10972_.GIF", _String2=".") returned 1 [0166.649] wcscmp (_String1="BD10972_.GIF", _String2="..") returned 1 [0166.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3da78 [0166.650] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.650] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.650] wcscat (in: _Dest=0x3f3da78, _Source="BD10972_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" [0166.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0166.651] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b8a5800, ftCreationTime.dwHighDateTime=0x1bd4dbb, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b8a5800, ftLastWriteTime.dwHighDateTime=0x1bd4dbb, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0166.652] wcscmp (_String1="BD19563_.GIF", _String2=".") returned 1 [0166.652] wcscmp (_String1="BD19563_.GIF", _String2="..") returned 1 [0166.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c070 [0166.652] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.652] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.652] wcscat (in: _Dest=0x3f3c070, _Source="BD19563_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" [0166.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0166.653] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a296c00, ftCreationTime.dwHighDateTime=0x1bd4dbb, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7a296c00, ftLastWriteTime.dwHighDateTime=0x1bd4dbb, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0166.654] wcscmp (_String1="BD19582_.GIF", _String2=".") returned 1 [0166.654] wcscmp (_String1="BD19582_.GIF", _String2="..") returned 1 [0166.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0166.654] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.654] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.654] wcscat (in: _Dest=0x3f3bdc8, _Source="BD19582_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" [0166.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0166.666] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59fbac00, ftCreationTime.dwHighDateTime=0x1bd4dbf, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59fbac00, ftLastWriteTime.dwHighDateTime=0x1bd4dbf, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0166.667] wcscmp (_String1="BD19695_.WMF", _String2=".") returned 1 [0166.667] wcscmp (_String1="BD19695_.WMF", _String2="..") returned 1 [0166.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0166.667] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.667] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.667] wcscat (in: _Dest=0x3f3c208, _Source="BD19695_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" [0166.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0166.669] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83680800, ftCreationTime.dwHighDateTime=0x1bd4dbe, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x83680800, ftLastWriteTime.dwHighDateTime=0x1bd4dbe, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0166.671] wcscmp (_String1="BD19827_.WMF", _String2=".") returned 1 [0166.671] wcscmp (_String1="BD19827_.WMF", _String2="..") returned 1 [0166.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d638 [0166.671] wcscpy (in: _Dest=0x3f3d638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0166.671] wcscat (in: _Dest=0x3f3d638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0166.671] wcscat (in: _Dest=0x3f3d638, _Source="BD19827_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" [0172.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0172.074] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8236db00, ftCreationTime.dwHighDateTime=0x1bd4dbe, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8236db00, ftLastWriteTime.dwHighDateTime=0x1bd4dbe, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0172.074] wcscmp (_String1="BD19828_.WMF", _String2=".") returned 1 [0172.074] wcscmp (_String1="BD19828_.WMF", _String2="..") returned 1 [0172.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb93c8 [0172.074] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.074] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.074] wcscat (in: _Dest=0x3eb93c8, _Source="BD19828_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" [0172.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0172.075] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac30200, ftCreationTime.dwHighDateTime=0x1bd4dbd, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7ac30200, ftLastWriteTime.dwHighDateTime=0x1bd4dbd, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0172.075] wcscmp (_String1="BD19986_.WMF", _String2=".") returned 1 [0172.075] wcscmp (_String1="BD19986_.WMF", _String2="..") returned 1 [0172.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0172.075] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.075] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.075] wcscat (in: _Dest=0x3eb8e78, _Source="BD19986_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" [0172.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0172.094] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772f7b00, ftCreationTime.dwHighDateTime=0x1bd4dbd, ftLastAccessTime.dwLowDateTime=0x76b9b7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x772f7b00, ftLastWriteTime.dwHighDateTime=0x1bd4dbd, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0172.095] wcscmp (_String1="BD19988_.WMF", _String2=".") returned 1 [0172.095] wcscmp (_String1="BD19988_.WMF", _String2="..") returned 1 [0172.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb94d8 [0172.095] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.095] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.095] wcscat (in: _Dest=0x3eb94d8, _Source="BD19988_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" [0172.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0172.096] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549d6200, ftCreationTime.dwHighDateTime=0x1bd4dbd, ftLastAccessTime.dwLowDateTime=0x86944050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x549d6200, ftLastWriteTime.dwHighDateTime=0x1bd4dbd, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0172.096] wcscmp (_String1="BD20013_.WMF", _String2=".") returned 1 [0172.096] wcscmp (_String1="BD20013_.WMF", _String2="..") returned 1 [0172.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba4c8 [0172.097] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.097] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.097] wcscat (in: _Dest=0x3eba4c8, _Source="BD20013_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" [0172.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16fc [0172.098] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20495c00, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20495c00, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0172.098] wcscmp (_String1="BL00008_.WMF", _String2=".") returned 1 [0172.098] wcscmp (_String1="BL00008_.WMF", _String2="..") returned 1 [0172.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9450 [0172.098] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.098] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.098] wcscat (in: _Dest=0x3eb9450, _Source="BL00008_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" [0172.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0172.099] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a537b00, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a537b00, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0172.099] wcscmp (_String1="BL00012_.WMF", _String2=".") returned 1 [0172.099] wcscmp (_String1="BL00012_.WMF", _String2="..") returned 1 [0172.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0172.099] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.099] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.099] wcscat (in: _Dest=0x3eb8b48, _Source="BL00012_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" [0172.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0172.101] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fe6800, ftCreationTime.dwHighDateTime=0x1bd4b90, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76fe6800, ftLastWriteTime.dwHighDateTime=0x1bd4b90, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0172.101] wcscmp (_String1="BL00045_.WMF", _String2=".") returned 1 [0172.101] wcscmp (_String1="BL00045_.WMF", _String2="..") returned 1 [0172.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0172.101] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.101] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.101] wcscat (in: _Dest=0x3eb8c58, _Source="BL00045_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" [0172.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0172.102] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f75dd00, ftCreationTime.dwHighDateTime=0x1bd4b8c, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f75dd00, ftLastWriteTime.dwHighDateTime=0x1bd4b8c, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0172.102] wcscmp (_String1="BL00098_.WMF", _String2=".") returned 1 [0172.102] wcscmp (_String1="BL00098_.WMF", _String2="..") returned 1 [0172.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0172.102] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.103] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.103] wcscat (in: _Dest=0x3eb9560, _Source="BL00098_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" [0172.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0172.104] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbf1600, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1dbf1600, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0172.104] wcscmp (_String1="BL00105_.WMF", _String2=".") returned 1 [0172.104] wcscmp (_String1="BL00105_.WMF", _String2="..") returned 1 [0172.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0172.105] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.105] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.105] wcscat (in: _Dest=0x3eb9cd0, _Source="BL00105_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" [0172.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0172.106] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2443c00, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2443c00, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0172.106] wcscmp (_String1="BL00122_.WMF", _String2=".") returned 1 [0172.106] wcscmp (_String1="BL00122_.WMF", _String2="..") returned 1 [0172.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c758 [0172.106] wcscpy (in: _Dest=0x3f3c758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.106] wcscat (in: _Dest=0x3f3c758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.106] wcscat (in: _Dest=0x3f3c758, _Source="BL00122_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" [0172.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0172.107] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf316c00, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf316c00, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0172.107] wcscmp (_String1="BL00130_.WMF", _String2=".") returned 1 [0172.107] wcscmp (_String1="BL00130_.WMF", _String2="..") returned 1 [0172.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cc20 [0172.107] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.107] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.107] wcscat (in: _Dest=0x3f3cc20, _Source="BL00130_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" [0172.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0172.109] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18fa6200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18fa6200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0172.109] wcscmp (_String1="BL00148_.WMF", _String2=".") returned 1 [0172.109] wcscmp (_String1="BL00148_.WMF", _String2="..") returned 1 [0172.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cdb8 [0172.109] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.109] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.109] wcscat (in: _Dest=0x3f3cdb8, _Source="BL00148_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" [0172.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0172.110] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c93500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17c93500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0172.110] wcscmp (_String1="BL00152_.WMF", _String2=".") returned 1 [0172.110] wcscmp (_String1="BL00152_.WMF", _String2="..") returned 1 [0172.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d968 [0172.110] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.110] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.110] wcscat (in: _Dest=0x3f3d968, _Source="BL00152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" [0172.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0172.111] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2adc0500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2adc0500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0172.111] wcscmp (_String1="BL00194_.WMF", _String2=".") returned 1 [0172.111] wcscmp (_String1="BL00194_.WMF", _String2="..") returned 1 [0172.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d1f8 [0172.111] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.112] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.112] wcscat (in: _Dest=0x3f3d1f8, _Source="BL00194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" [0172.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0172.118] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16980800, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16980800, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0172.118] wcscmp (_String1="BL00195_.WMF", _String2=".") returned 1 [0172.118] wcscmp (_String1="BL00195_.WMF", _String2="..") returned 1 [0172.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c978 [0172.118] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.118] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.118] wcscat (in: _Dest=0x3f3c978, _Source="BL00195_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" [0172.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0172.119] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16bdf500, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16bdf500, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0172.119] wcscmp (_String1="BL00234_.WMF", _String2=".") returned 1 [0172.119] wcscmp (_String1="BL00234_.WMF", _String2="..") returned 1 [0172.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0172.119] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.120] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.120] wcscat (in: _Dest=0x3f3c538, _Source="BL00234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" [0172.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0172.121] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e786d00, ftCreationTime.dwHighDateTime=0x1bd4b94, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e786d00, ftLastWriteTime.dwHighDateTime=0x1bd4b94, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0172.121] wcscmp (_String1="BL00242_.WMF", _String2=".") returned 1 [0172.121] wcscmp (_String1="BL00242_.WMF", _String2="..") returned 1 [0172.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d6c0 [0172.121] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.121] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.121] wcscat (in: _Dest=0x3f3d6c0, _Source="BL00242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" [0172.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0172.122] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a472300, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7a472300, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0172.122] wcscmp (_String1="BL00247_.WMF", _String2=".") returned 1 [0172.122] wcscmp (_String1="BL00247_.WMF", _String2="..") returned 1 [0172.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0172.122] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.122] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.122] wcscat (in: _Dest=0x3f3d748, _Source="BL00247_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" [0172.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0172.123] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eeecb00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9eeecb00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0172.123] wcscmp (_String1="BL00248_.WMF", _String2=".") returned 1 [0172.123] wcscmp (_String1="BL00248_.WMF", _String2="..") returned 1 [0172.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c5c0 [0172.123] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.123] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.123] wcscat (in: _Dest=0x3f3c5c0, _Source="BL00248_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" [0172.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0172.124] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc09c8200, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc09c8200, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0172.124] wcscmp (_String1="BL00252_.WMF", _String2=".") returned 1 [0172.124] wcscmp (_String1="BL00252_.WMF", _String2="..") returned 1 [0172.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d390 [0172.125] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.125] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.125] wcscat (in: _Dest=0x3f3d390, _Source="BL00252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" [0172.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0172.126] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d35400, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11d35400, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0172.126] wcscmp (_String1="BL00254_.WMF", _String2=".") returned 1 [0172.126] wcscmp (_String1="BL00254_.WMF", _String2="..") returned 1 [0172.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0172.126] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.126] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.126] wcscat (in: _Dest=0x3f3bdc8, _Source="BL00254_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" [0172.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0172.127] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x159f00, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x159f00, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0172.127] wcscmp (_String1="BL00261_.WMF", _String2=".") returned 1 [0172.127] wcscmp (_String1="BL00261_.WMF", _String2="..") returned 1 [0172.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0172.127] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.127] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.127] wcscat (in: _Dest=0x3f3c208, _Source="BL00261_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" [0172.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0172.128] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8ee9100, ftCreationTime.dwHighDateTime=0x1bd4b90, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8ee9100, ftLastWriteTime.dwHighDateTime=0x1bd4b90, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0172.128] wcscmp (_String1="BL00262_.WMF", _String2=".") returned 1 [0172.128] wcscmp (_String1="BL00262_.WMF", _String2="..") returned 1 [0172.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c180 [0172.128] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.128] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.128] wcscat (in: _Dest=0x3f3c180, _Source="BL00262_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" [0172.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0172.129] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fff4c00, ftCreationTime.dwHighDateTime=0x1bd4b77, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5fff4c00, ftLastWriteTime.dwHighDateTime=0x1bd4b77, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0172.129] wcscmp (_String1="BL00265_.WMF", _String2=".") returned 1 [0172.129] wcscmp (_String1="BL00265_.WMF", _String2="..") returned 1 [0172.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bed8 [0172.129] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.129] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.130] wcscat (in: _Dest=0x3f3bed8, _Source="BL00265_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" [0172.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0172.131] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875a1700, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x875a1700, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0172.131] wcscmp (_String1="BL00267_.WMF", _String2=".") returned 1 [0172.131] wcscmp (_String1="BL00267_.WMF", _String2="..") returned 1 [0172.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bc30 [0172.131] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.131] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.131] wcscat (in: _Dest=0x3f3bc30, _Source="BL00267_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" [0172.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0172.132] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53173400, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53173400, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0172.132] wcscmp (_String1="BL00269_.WMF", _String2=".") returned 1 [0172.132] wcscmp (_String1="BL00269_.WMF", _String2="..") returned 1 [0172.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0172.132] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.132] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.132] wcscat (in: _Dest=0x3f3cd30, _Source="BL00269_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" [0172.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0172.133] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23e3f00, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe23e3f00, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0172.133] wcscmp (_String1="BL00270_.WMF", _String2=".") returned 1 [0172.133] wcscmp (_String1="BL00270_.WMF", _String2="..") returned 1 [0172.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3da78 [0172.133] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.133] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.133] wcscat (in: _Dest=0x3f3da78, _Source="BL00270_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" [0172.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0172.354] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925f7800, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x925f7800, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0172.354] wcscmp (_String1="BL00273_.WMF", _String2=".") returned 1 [0172.354] wcscmp (_String1="BL00273_.WMF", _String2="..") returned 1 [0172.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e478 [0172.354] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.354] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.354] wcscat (in: _Dest=0x36e478, _Source="BL00273_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" [0172.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0172.672] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f1ce900, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f1ce900, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0172.672] wcscmp (_String1="BL00274_.WMF", _String2=".") returned 1 [0172.672] wcscmp (_String1="BL00274_.WMF", _String2="..") returned 1 [0172.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0172.672] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.672] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.672] wcscat (in: _Dest=0x3eb9b38, _Source="BL00274_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" [0172.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0172.673] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41657900, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41657900, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0172.673] wcscmp (_String1="BL00296_.WMF", _String2=".") returned 1 [0172.673] wcscmp (_String1="BL00296_.WMF", _String2="..") returned 1 [0172.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb92b8 [0172.674] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.674] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.674] wcscat (in: _Dest=0x3eb92b8, _Source="BL00296_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" [0172.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0172.675] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74881800, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74881800, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0172.675] wcscmp (_String1="BL00390_.WMF", _String2=".") returned 1 [0172.675] wcscmp (_String1="BL00390_.WMF", _String2="..") returned 1 [0172.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bd50 [0172.675] wcscpy (in: _Dest=0x3e1bd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.675] wcscat (in: _Dest=0x3e1bd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.675] wcscat (in: _Dest=0x3e1bd50, _Source="BL00390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" [0172.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0172.676] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7225be00, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7225be00, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0172.676] wcscmp (_String1="BL00392_.WMF", _String2=".") returned 1 [0172.676] wcscmp (_String1="BL00392_.WMF", _String2="..") returned 1 [0172.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bdd8 [0172.676] wcscpy (in: _Dest=0x3e1bdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.676] wcscat (in: _Dest=0x3e1bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.676] wcscat (in: _Dest=0x3e1bdd8, _Source="BL00392_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" [0172.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0172.677] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b924900, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b924900, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0172.677] wcscmp (_String1="BL00524_.WMF", _String2=".") returned 1 [0172.677] wcscmp (_String1="BL00524_.WMF", _String2="..") returned 1 [0172.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ced8 [0172.677] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0172.677] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0172.677] wcscat (in: _Dest=0x3e1ced8, _Source="BL00524_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" [0172.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0172.678] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a611c00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a611c00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0174.761] wcscmp (_String1="BL00525_.WMF", _String2=".") returned 1 [0174.761] wcscmp (_String1="BL00525_.WMF", _String2="..") returned 1 [0174.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cf50 [0174.761] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0174.761] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0174.761] wcscat (in: _Dest=0x3f3cf50, _Source="BL00525_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" [0175.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0175.498] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x692fef00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x692fef00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0175.498] wcscmp (_String1="BL00526_.WMF", _String2=".") returned 1 [0175.498] wcscmp (_String1="BL00526_.WMF", _String2="..") returned 1 [0175.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d7d0 [0175.499] wcscpy (in: _Dest=0x3f3d7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.499] wcscat (in: _Dest=0x3f3d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.499] wcscat (in: _Dest=0x3f3d7d0, _Source="BL00526_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" [0175.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0175.500] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb631c500, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb631c500, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0175.500] wcscmp (_String1="BL00648_.WMF", _String2=".") returned 1 [0175.500] wcscmp (_String1="BL00648_.WMF", _String2="..") returned 1 [0175.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0175.500] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.500] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.500] wcscat (in: _Dest=0x3f3c208, _Source="BL00648_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" [0175.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0175.501] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d9a700, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80d9a700, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0175.501] wcscmp (_String1="BL00921_.WMF", _String2=".") returned 1 [0175.501] wcscmp (_String1="BL00921_.WMF", _String2="..") returned 1 [0175.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0175.501] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.501] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.501] wcscat (in: _Dest=0x3f3bdc8, _Source="BL00921_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" [0175.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0175.502] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b80900, ftCreationTime.dwHighDateTime=0x1bd4c5c, ftLastAccessTime.dwLowDateTime=0x76ca6190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b80900, ftLastWriteTime.dwHighDateTime=0x1bd4c5c, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0175.502] wcscmp (_String1="BL00923_.WMF", _String2=".") returned 1 [0175.502] wcscmp (_String1="BL00923_.WMF", _String2="..") returned 1 [0175.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0175.502] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.502] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.503] wcscat (in: _Dest=0x3f3d748, _Source="BL00923_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" [0175.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0175.504] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86a74b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0175.504] wcscmp (_String1="BL00932_.WMF", _String2=".") returned 1 [0175.504] wcscmp (_String1="BL00932_.WMF", _String2="..") returned 1 [0175.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c180 [0175.504] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.504] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.504] wcscat (in: _Dest=0x3f3c180, _Source="BL00932_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" [0175.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0175.505] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d094d00, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x76ccc2f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d094d00, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0175.505] wcscmp (_String1="BL00985_.WMF", _String2=".") returned 1 [0175.505] wcscmp (_String1="BL00985_.WMF", _String2="..") returned 1 [0175.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d390 [0175.505] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.505] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.505] wcscat (in: _Dest=0x3f3d390, _Source="BL00985_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" [0175.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0175.506] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x76ccc2f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0175.506] wcscmp (_String1="BOAT.WMF", _String2=".") returned 1 [0175.507] wcscmp (_String1="BOAT.WMF", _String2="..") returned 1 [0175.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46f18 [0175.507] wcscpy (in: _Dest=0x3e46f18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.507] wcscat (in: _Dest=0x3e46f18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.507] wcscat (in: _Dest=0x3e46f18, _Source="BOAT.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" [0175.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0175.508] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x76ccc2f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0175.508] wcscmp (_String1="BOATINST.WMF", _String2=".") returned 1 [0175.508] wcscmp (_String1="BOATINST.WMF", _String2="..") returned 1 [0175.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c5c0 [0175.508] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.508] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.508] wcscat (in: _Dest=0x3f3c5c0, _Source="BOATINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" [0175.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0175.510] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc98f800, ftCreationTime.dwHighDateTime=0x1bd4b8f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc98f800, ftLastWriteTime.dwHighDateTime=0x1bd4b8f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0175.510] wcscmp (_String1="BS00076_.WMF", _String2=".") returned 1 [0175.510] wcscmp (_String1="BS00076_.WMF", _String2="..") returned 1 [0175.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d6c0 [0175.510] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.510] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.510] wcscat (in: _Dest=0x3f3d6c0, _Source="BS00076_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" [0175.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0175.514] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e2ad00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4e2ad00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0175.514] wcscmp (_String1="BS00078_.WMF", _String2=".") returned 1 [0175.514] wcscmp (_String1="BS00078_.WMF", _String2="..") returned 1 [0175.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0175.514] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.514] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.514] wcscat (in: _Dest=0x3f3c538, _Source="BS00078_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" [0175.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0175.516] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8caa300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8caa300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0175.516] wcscmp (_String1="BS00092_.WMF", _String2=".") returned 1 [0175.516] wcscmp (_String1="BS00092_.WMF", _String2="..") returned 1 [0175.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c978 [0175.516] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.516] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.516] wcscat (in: _Dest=0x3f3c978, _Source="BS00092_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" [0175.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0175.518] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5371c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf5371c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0175.518] wcscmp (_String1="BS00100_.WMF", _String2=".") returned 1 [0175.518] wcscmp (_String1="BS00100_.WMF", _String2="..") returned 1 [0175.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d1f8 [0175.518] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.518] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.518] wcscat (in: _Dest=0x3f3d1f8, _Source="BS00100_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" [0175.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0175.519] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a39500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1a39500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0175.519] wcscmp (_String1="BS00135_.WMF", _String2=".") returned 1 [0175.519] wcscmp (_String1="BS00135_.WMF", _String2="..") returned 1 [0175.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d968 [0175.519] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.519] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.519] wcscat (in: _Dest=0x3f3d968, _Source="BS00135_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" [0175.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0175.521] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5e3200, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a5e3200, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0175.521] wcscmp (_String1="BS00136_.WMF", _String2=".") returned 1 [0175.521] wcscmp (_String1="BS00136_.WMF", _String2="..") returned 1 [0175.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cdb8 [0175.521] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.521] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.521] wcscat (in: _Dest=0x3f3cdb8, _Source="BS00136_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" [0175.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0175.522] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecf0a00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ecf0a00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0175.522] wcscmp (_String1="BS00145_.WMF", _String2=".") returned 1 [0175.522] wcscmp (_String1="BS00145_.WMF", _String2="..") returned 1 [0175.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cc20 [0175.522] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.523] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.523] wcscat (in: _Dest=0x3f3cc20, _Source="BS00145_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" [0175.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0175.524] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d95100, ftCreationTime.dwHighDateTime=0x1bd4b55, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11d95100, ftLastWriteTime.dwHighDateTime=0x1bd4b55, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0175.524] wcscmp (_String1="BS00174_.WMF", _String2=".") returned 1 [0175.524] wcscmp (_String1="BS00174_.WMF", _String2="..") returned 1 [0175.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c758 [0175.524] wcscpy (in: _Dest=0x3f3c758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.524] wcscat (in: _Dest=0x3f3c758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.524] wcscat (in: _Dest=0x3f3c758, _Source="BS00174_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" [0175.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0175.525] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a86600, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14a86600, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0175.525] wcscmp (_String1="BS00184_.WMF", _String2=".") returned 1 [0175.525] wcscmp (_String1="BS00184_.WMF", _String2="..") returned 1 [0175.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0175.525] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.525] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.525] wcscat (in: _Dest=0x3f3cd30, _Source="BS00184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" [0175.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0175.526] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1959600, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1959600, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0175.526] wcscmp (_String1="BS00186_.WMF", _String2=".") returned 1 [0175.526] wcscmp (_String1="BS00186_.WMF", _String2="..") returned 1 [0175.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3da78 [0175.526] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.526] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.527] wcscat (in: _Dest=0x3f3da78, _Source="BS00186_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" [0175.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0175.528] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f24b600, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f24b600, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0175.528] wcscmp (_String1="BS00200_.WMF", _String2=".") returned 1 [0175.528] wcscmp (_String1="BS00200_.WMF", _String2="..") returned 1 [0175.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d638 [0175.528] wcscpy (in: _Dest=0x3f3d638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.528] wcscat (in: _Dest=0x3f3d638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.528] wcscat (in: _Dest=0x3f3d638, _Source="BS00200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" [0175.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0175.529] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea2fbc00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xea2fbc00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0175.529] wcscmp (_String1="BS00224_.WMF", _String2=".") returned 1 [0175.529] wcscmp (_String1="BS00224_.WMF", _String2="..") returned 1 [0175.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0175.529] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.529] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.529] wcscat (in: _Dest=0x3f3d280, _Source="BS00224_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" [0175.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0175.532] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7fa3700, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7fa3700, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0175.532] wcscmp (_String1="BS00438_.WMF", _String2=".") returned 1 [0175.532] wcscmp (_String1="BS00438_.WMF", _String2="..") returned 1 [0175.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c3a0 [0175.532] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.532] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.532] wcscat (in: _Dest=0x3f3c3a0, _Source="BS00438_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" [0175.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0175.533] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca03e00, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbca03e00, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0175.534] wcscmp (_String1="BS00439_.WMF", _String2=".") returned 1 [0175.534] wcscmp (_String1="BS00439_.WMF", _String2="..") returned 1 [0175.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bc30 [0175.534] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.534] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.534] wcscat (in: _Dest=0x3f3bc30, _Source="BS00439_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" [0175.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0175.535] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6f1100, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb6f1100, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0175.535] wcscmp (_String1="BS00440_.WMF", _String2=".") returned 1 [0175.535] wcscmp (_String1="BS00440_.WMF", _String2="..") returned 1 [0175.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c7e0 [0175.535] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.535] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.535] wcscat (in: _Dest=0x3f3c7e0, _Source="BS00440_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" [0175.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0175.536] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3de400, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba3de400, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0175.536] wcscmp (_String1="BS00441_.WMF", _String2=".") returned 1 [0175.536] wcscmp (_String1="BS00441_.WMF", _String2="..") returned 1 [0175.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0175.537] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.537] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.537] wcscat (in: _Dest=0x3f3cb10, _Source="BS00441_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" [0175.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0175.538] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90cb700, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb90cb700, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0175.538] wcscmp (_String1="BS00442_.WMF", _String2=".") returned 1 [0175.538] wcscmp (_String1="BS00442_.WMF", _String2="..") returned 1 [0175.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d4a0 [0175.538] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.538] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.538] wcscat (in: _Dest=0x3f3d4a0, _Source="BS00442_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" [0175.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0175.539] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4da00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50b4da00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0175.539] wcscmp (_String1="BS00443_.WMF", _String2=".") returned 1 [0175.539] wcscmp (_String1="BS00443_.WMF", _String2="..") returned 1 [0175.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3ca00 [0175.540] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.540] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.540] wcscat (in: _Dest=0x3f3ca00, _Source="BS00443_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" [0175.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0175.730] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7db8a00, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7db8a00, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0175.730] wcscmp (_String1="BS00444_.WMF", _String2=".") returned 1 [0175.731] wcscmp (_String1="BS00444_.WMF", _String2="..") returned 1 [0175.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cf50 [0175.731] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.731] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.731] wcscat (in: _Dest=0x3f3cf50, _Source="BS00444_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" [0175.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0175.953] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6aa5d00, ftCreationTime.dwHighDateTime=0x1bd4b5a, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6aa5d00, ftLastWriteTime.dwHighDateTime=0x1bd4b5a, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0175.953] wcscmp (_String1="BS00445_.WMF", _String2=".") returned 1 [0175.953] wcscmp (_String1="BS00445_.WMF", _String2="..") returned 1 [0175.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9de0 [0175.953] wcscpy (in: _Dest=0x3eb9de0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.954] wcscat (in: _Dest=0x3eb9de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.954] wcscat (in: _Dest=0x3eb9de0, _Source="BS00445_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" [0175.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0175.955] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0175.955] wcscmp (_String1="BS00453_.WMF", _String2=".") returned 1 [0175.955] wcscmp (_String1="BS00453_.WMF", _String2="..") returned 1 [0175.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9c48 [0175.955] wcscpy (in: _Dest=0x3eb9c48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.955] wcscat (in: _Dest=0x3eb9c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.955] wcscat (in: _Dest=0x3eb9c48, _Source="BS00453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" [0175.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0175.956] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0dd4700, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0dd4700, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0175.956] wcscmp (_String1="BS01080_.WMF", _String2=".") returned 1 [0175.956] wcscmp (_String1="BS01080_.WMF", _String2="..") returned 1 [0175.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f00 [0175.956] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.956] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.956] wcscat (in: _Dest=0x3eb8f00, _Source="BS01080_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" [0175.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0175.957] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24d4600, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe24d4600, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0175.957] wcscmp (_String1="BS01603_.WMF", _String2=".") returned 1 [0175.957] wcscmp (_String1="BS01603_.WMF", _String2="..") returned 1 [0175.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb92b8 [0175.958] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.958] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.958] wcscat (in: _Dest=0x3eb92b8, _Source="BS01603_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" [0175.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0175.959] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5851ad00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5851ad00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0175.959] wcscmp (_String1="BS01634_.WMF", _String2=".") returned 1 [0175.959] wcscmp (_String1="BS01634_.WMF", _String2="..") returned 1 [0175.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba4c8 [0175.959] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.959] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.959] wcscat (in: _Dest=0x3eba4c8, _Source="BS01634_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" [0175.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0175.960] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8f39d00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8f39d00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0175.960] wcscmp (_String1="BS01635_.WMF", _String2=".") returned 1 [0175.960] wcscmp (_String1="BS01635_.WMF", _String2="..") returned 1 [0175.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9450 [0175.960] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0175.960] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0175.961] wcscat (in: _Dest=0x3eb9450, _Source="BS01635_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" [0175.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0175.962] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7975c600, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7975c600, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0177.299] wcscmp (_String1="BS01636_.WMF", _String2=".") returned 1 [0177.299] wcscmp (_String1="BS01636_.WMF", _String2="..") returned 1 [0177.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0177.299] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0177.299] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0177.299] wcscat (in: _Dest=0x3eb9010, _Source="BS01636_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" [0178.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0178.108] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26404b00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26404b00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0178.108] wcscmp (_String1="BS01637_.WMF", _String2=".") returned 1 [0178.108] wcscmp (_String1="BS01637_.WMF", _String2="..") returned 1 [0178.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0178.109] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.109] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.109] wcscat (in: _Dest=0x3eb8b48, _Source="BS01637_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" [0178.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0178.110] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x669fc900, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x669fc900, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0178.110] wcscmp (_String1="BS01638_.WMF", _String2=".") returned 1 [0178.110] wcscmp (_String1="BS01638_.WMF", _String2="..") returned 1 [0178.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9d58 [0178.110] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.110] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.110] wcscat (in: _Dest=0x3eb9d58, _Source="BS01638_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" [0178.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0178.111] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df80800, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1df80800, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0178.111] wcscmp (_String1="BS01639_.WMF", _String2=".") returned 1 [0178.111] wcscmp (_String1="BS01639_.WMF", _String2="..") returned 1 [0178.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9098 [0178.111] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.111] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.111] wcscat (in: _Dest=0x3eb9098, _Source="BS01639_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" [0178.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0178.112] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0178.112] wcscmp (_String1="CARBN_01.MID", _String2=".") returned 1 [0178.112] wcscmp (_String1="CARBN_01.MID", _String2="..") returned 1 [0178.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0178.112] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.112] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.113] wcscat (in: _Dest=0x3eba770, _Source="CARBN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" [0178.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0178.114] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6403ce00, ftCreationTime.dwHighDateTime=0x1c9b882, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6403ce00, ftLastWriteTime.dwHighDateTime=0x1c9b882, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0178.114] wcscmp (_String1="CG1606.WMF", _String2=".") returned 1 [0178.114] wcscmp (_String1="CG1606.WMF", _String2="..") returned 1 [0178.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9ef0 [0178.114] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.114] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.114] wcscat (in: _Dest=0x3eb9ef0, _Source="CG1606.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" [0178.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0178.115] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0178.115] wcscmp (_String1="CLASSIC1.WMF", _String2=".") returned 1 [0178.115] wcscmp (_String1="CLASSIC1.WMF", _String2="..") returned 1 [0178.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9f78 [0178.115] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.115] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.115] wcscat (in: _Dest=0x3eb9f78, _Source="CLASSIC1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" [0178.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0178.116] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0178.116] wcscmp (_String1="CLASSIC2.WMF", _String2=".") returned 1 [0178.116] wcscmp (_String1="CLASSIC2.WMF", _String2="..") returned 1 [0178.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0178.117] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.117] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.117] wcscat (in: _Dest=0x3eba220, _Source="CLASSIC2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" [0178.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0178.118] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0178.118] wcscmp (_String1="CLIP.WMF", _String2=".") returned 1 [0178.118] wcscmp (_String1="CLIP.WMF", _String2="..") returned 1 [0178.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47c98 [0178.118] wcscpy (in: _Dest=0x3e47c98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.118] wcscat (in: _Dest=0x3e47c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.118] wcscat (in: _Dest=0x3e47c98, _Source="CLIP.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" [0178.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0178.119] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0178.119] wcscmp (_String1="CMNTY_01.MID", _String2=".") returned 1 [0178.119] wcscmp (_String1="CMNTY_01.MID", _String2="..") returned 1 [0178.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba6e8 [0178.119] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.119] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.119] wcscat (in: _Dest=0x3eba6e8, _Source="CMNTY_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" [0178.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0178.120] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x77084550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0178.120] wcscmp (_String1="CRANE.WMF", _String2=".") returned 1 [0178.120] wcscmp (_String1="CRANE.WMF", _String2="..") returned 1 [0178.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba330 [0178.120] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.120] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.120] wcscat (in: _Dest=0x3eba330, _Source="CRANE.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" [0178.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0178.121] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x86cfc2b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0178.121] wcscmp (_String1="CRANINST.WMF", _String2=".") returned 1 [0178.121] wcscmp (_String1="CRANINST.WMF", _String2="..") returned 1 [0178.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0178.121] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.121] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.121] wcscat (in: _Dest=0x3eb9670, _Source="CRANINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" [0178.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0178.122] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0178.122] wcscmp (_String1="CUP.WMF", _String2=".") returned 1 [0178.122] wcscmp (_String1="CUP.WMF", _String2="..") returned 1 [0178.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46f98 [0178.122] wcscpy (in: _Dest=0x3e46f98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.123] wcscat (in: _Dest=0x3e46f98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.123] wcscat (in: _Dest=0x3e46f98, _Source="CUP.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" [0178.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0178.123] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0178.123] wcscmp (_String1="CUPINST.WMF", _String2=".") returned 1 [0178.123] wcscmp (_String1="CUPINST.WMF", _String2="..") returned 1 [0178.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8bd0 [0178.124] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.124] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.124] wcscat (in: _Dest=0x3eb8bd0, _Source="CUPINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" [0178.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0178.124] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0178.124] wcscmp (_String1="DD00117_.WMF", _String2=".") returned 1 [0178.124] wcscmp (_String1="DD00117_.WMF", _String2="..") returned 1 [0178.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9890 [0178.125] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.125] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.125] wcscat (in: _Dest=0x3eb9890, _Source="DD00117_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" [0178.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0178.125] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bd91700, ftCreationTime.dwHighDateTime=0x1bd4b53, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6bd91700, ftLastWriteTime.dwHighDateTime=0x1bd4b53, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0178.126] wcscmp (_String1="DD00121_.WMF", _String2=".") returned 1 [0178.126] wcscmp (_String1="DD00121_.WMF", _String2="..") returned 1 [0178.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb91a8 [0178.126] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.126] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.126] wcscat (in: _Dest=0x3eb91a8, _Source="DD00121_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" [0178.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0178.127] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0178.127] wcscmp (_String1="DD00234_.WMF", _String2=".") returned 1 [0178.127] wcscmp (_String1="DD00234_.WMF", _String2="..") returned 1 [0178.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0178.127] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.127] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.127] wcscat (in: _Dest=0x3eb95e8, _Source="DD00234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" [0178.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0178.128] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa499e000, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa499e000, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0178.128] wcscmp (_String1="DD00255_.WMF", _String2=".") returned 1 [0178.128] wcscmp (_String1="DD00255_.WMF", _String2="..") returned 1 [0178.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb99a0 [0178.128] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.128] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.128] wcscat (in: _Dest=0x3eb99a0, _Source="DD00255_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" [0178.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e4 [0178.129] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0178.129] wcscmp (_String1="DD00256_.WMF", _String2=".") returned 1 [0178.129] wcscmp (_String1="DD00256_.WMF", _String2="..") returned 1 [0178.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9120 [0178.129] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.129] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.129] wcscat (in: _Dest=0x3eb9120, _Source="DD00256_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" [0178.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x145c [0178.130] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5389ec00, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5389ec00, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0178.130] wcscmp (_String1="DD00261_.WMF", _String2=".") returned 1 [0178.130] wcscmp (_String1="DD00261_.WMF", _String2="..") returned 1 [0178.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9918 [0178.130] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.130] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.130] wcscat (in: _Dest=0x3eb9918, _Source="DD00261_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" [0178.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0178.131] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d8c0f00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d8c0f00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0178.131] wcscmp (_String1="DD00297_.WMF", _String2=".") returned 1 [0178.131] wcscmp (_String1="DD00297_.WMF", _String2="..") returned 1 [0178.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f88 [0178.131] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.131] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.131] wcscat (in: _Dest=0x3eb8f88, _Source="DD00297_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" [0178.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454 [0178.132] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c12300, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf2c12300, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0178.132] wcscmp (_String1="DD00372_.WMF", _String2=".") returned 1 [0178.132] wcscmp (_String1="DD00372_.WMF", _String2="..") returned 1 [0178.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9340 [0178.133] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.133] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.133] wcscat (in: _Dest=0x3eb9340, _Source="DD00372_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" [0178.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0178.339] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0178.339] wcscmp (_String1="DD00405_.WMF", _String2=".") returned 1 [0178.339] wcscmp (_String1="DD00405_.WMF", _String2="..") returned 1 [0178.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ecf8 [0178.339] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.339] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.339] wcscat (in: _Dest=0x36ecf8, _Source="DD00405_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" [0178.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ecf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0178.680] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0178.681] wcscmp (_String1="DD00407_.WMF", _String2=".") returned 1 [0178.681] wcscmp (_String1="DD00407_.WMF", _String2="..") returned 1 [0178.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8ce0 [0178.681] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.681] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.681] wcscat (in: _Dest=0x3eb8ce0, _Source="DD00407_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" [0178.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0178.688] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0178.688] wcscmp (_String1="DD00413_.WMF", _String2=".") returned 1 [0178.688] wcscmp (_String1="DD00413_.WMF", _String2="..") returned 1 [0178.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb96f8 [0178.688] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.688] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.688] wcscat (in: _Dest=0x3eb96f8, _Source="DD00413_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" [0178.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0178.689] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x86e52f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0178.689] wcscmp (_String1="DD00414_.WMF", _String2=".") returned 1 [0178.689] wcscmp (_String1="DD00414_.WMF", _String2="..") returned 1 [0178.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a708 [0178.689] wcscpy (in: _Dest=0x309a708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.689] wcscat (in: _Dest=0x309a708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.689] wcscat (in: _Dest=0x309a708, _Source="DD00414_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" [0178.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x309a708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0178.692] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f83ad00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x86e52f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f83ad00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0178.692] wcscmp (_String1="DD00419_.WMF", _String2=".") returned 1 [0178.692] wcscmp (_String1="DD00419_.WMF", _String2="..") returned 1 [0178.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a680 [0178.692] wcscpy (in: _Dest=0x309a680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.692] wcscat (in: _Dest=0x309a680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.692] wcscat (in: _Dest=0x309a680, _Source="DD00419_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" [0178.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x309a680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0178.693] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e528000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x86e52f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e528000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0178.693] wcscmp (_String1="DD00437_.WMF", _String2=".") returned 1 [0178.693] wcscmp (_String1="DD00437_.WMF", _String2="..") returned 1 [0178.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68090 [0178.693] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.693] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.693] wcscat (in: _Dest=0x7a68090, _Source="DD00437_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" [0178.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0178.694] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0178.694] wcscmp (_String1="DD00448_.WMF", _String2=".") returned 1 [0178.694] wcscmp (_String1="DD00448_.WMF", _String2="..") returned 1 [0178.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68118 [0178.694] wcscpy (in: _Dest=0x7a68118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.694] wcscat (in: _Dest=0x7a68118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.694] wcscat (in: _Dest=0x7a68118, _Source="DD00448_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" [0178.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0178.695] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0178.695] wcscmp (_String1="DD00449_.WMF", _String2=".") returned 1 [0178.696] wcscmp (_String1="DD00449_.WMF", _String2="..") returned 1 [0178.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a681a0 [0178.696] wcscpy (in: _Dest=0x7a681a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.696] wcscat (in: _Dest=0x7a681a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.696] wcscat (in: _Dest=0x7a681a0, _Source="DD00449_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" [0178.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a681a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0178.697] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4139de00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4139de00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0178.697] wcscmp (_String1="DD00687_.WMF", _String2=".") returned 1 [0178.697] wcscmp (_String1="DD00687_.WMF", _String2="..") returned 1 [0178.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68228 [0178.697] wcscpy (in: _Dest=0x7a68228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.697] wcscat (in: _Dest=0x7a68228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.697] wcscat (in: _Dest=0x7a68228, _Source="DD00687_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" [0178.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0178.698] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfffe00, ftCreationTime.dwHighDateTime=0x1bd4b9c, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfffe00, ftLastWriteTime.dwHighDateTime=0x1bd4b9c, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0178.698] wcscmp (_String1="DD00705_.WMF", _String2=".") returned 1 [0178.698] wcscmp (_String1="DD00705_.WMF", _String2="..") returned 1 [0178.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a682b0 [0178.698] wcscpy (in: _Dest=0x7a682b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.698] wcscat (in: _Dest=0x7a682b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.698] wcscat (in: _Dest=0x7a682b0, _Source="DD00705_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" [0178.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a682b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0178.699] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c7b600, ftCreationTime.dwHighDateTime=0x1bd4ba7, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x70c7b600, ftLastWriteTime.dwHighDateTime=0x1bd4ba7, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0178.699] wcscmp (_String1="DD01015_.WMF", _String2=".") returned 1 [0178.699] wcscmp (_String1="DD01015_.WMF", _String2="..") returned 1 [0178.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68338 [0178.700] wcscpy (in: _Dest=0x7a68338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.700] wcscat (in: _Dest=0x7a68338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.700] wcscat (in: _Dest=0x7a68338, _Source="DD01015_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" [0178.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0178.701] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0178.701] wcscmp (_String1="DD01039_.WMF", _String2=".") returned 1 [0178.701] wcscmp (_String1="DD01039_.WMF", _String2="..") returned 1 [0178.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a683c0 [0178.701] wcscpy (in: _Dest=0x7a683c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0178.701] wcscat (in: _Dest=0x7a683c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0178.701] wcscat (in: _Dest=0x7a683c0, _Source="DD01039_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" [0178.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a683c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0178.702] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0179.193] wcscmp (_String1="DD01138_.WMF", _String2=".") returned 1 [0179.193] wcscmp (_String1="DD01138_.WMF", _String2="..") returned 1 [0179.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9a28 [0179.193] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.193] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.193] wcscat (in: _Dest=0x3eb9a28, _Source="DD01138_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" [0179.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0179.207] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0179.207] wcscmp (_String1="DD01139_.WMF", _String2=".") returned 1 [0179.207] wcscmp (_String1="DD01139_.WMF", _String2="..") returned 1 [0179.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9e68 [0179.207] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.207] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.207] wcscat (in: _Dest=0x3eb9e68, _Source="DD01139_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" [0179.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0179.209] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x770f6970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0179.209] wcscmp (_String1="DD01140_.WMF", _String2=".") returned 1 [0179.209] wcscmp (_String1="DD01140_.WMF", _String2="..") returned 1 [0179.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8d68 [0179.209] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.209] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.209] wcscat (in: _Dest=0x3eb8d68, _Source="DD01140_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" [0179.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0179.211] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875c33d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0179.211] wcscmp (_String1="DD01143_.WMF", _String2=".") returned 1 [0179.211] wcscmp (_String1="DD01143_.WMF", _String2="..") returned 1 [0179.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9780 [0179.211] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.211] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.211] wcscat (in: _Dest=0x3eb9780, _Source="DD01143_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" [0179.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0179.216] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0179.216] wcscmp (_String1="DD01145_.WMF", _String2=".") returned 1 [0179.216] wcscmp (_String1="DD01145_.WMF", _String2="..") returned 1 [0179.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba3b8 [0179.216] wcscpy (in: _Dest=0x3eba3b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.216] wcscat (in: _Dest=0x3eba3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.216] wcscat (in: _Dest=0x3eba3b8, _Source="DD01145_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" [0179.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0179.218] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0179.218] wcscmp (_String1="DD01146_.WMF", _String2=".") returned 1 [0179.218] wcscmp (_String1="DD01146_.WMF", _String2="..") returned 1 [0179.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8df0 [0179.218] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.218] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.218] wcscat (in: _Dest=0x3eb8df0, _Source="DD01146_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" [0179.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0179.219] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0179.219] wcscmp (_String1="DD01151_.WMF", _String2=".") returned 1 [0179.219] wcscmp (_String1="DD01151_.WMF", _String2="..") returned 1 [0179.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68a20 [0179.219] wcscpy (in: _Dest=0x7a68a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.219] wcscat (in: _Dest=0x7a68a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.219] wcscat (in: _Dest=0x7a68a20, _Source="DD01151_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" [0179.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0179.220] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0179.220] wcscmp (_String1="DD01152_.WMF", _String2=".") returned 1 [0179.220] wcscmp (_String1="DD01152_.WMF", _String2="..") returned 1 [0179.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68bb8 [0179.221] wcscpy (in: _Dest=0x7a68bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.221] wcscat (in: _Dest=0x7a68bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.221] wcscat (in: _Dest=0x7a68bb8, _Source="DD01152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" [0179.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0179.222] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0179.222] wcscmp (_String1="DD01157_.WMF", _String2=".") returned 1 [0179.222] wcscmp (_String1="DD01157_.WMF", _String2="..") returned 1 [0179.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68998 [0179.222] wcscpy (in: _Dest=0x7a68998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.222] wcscat (in: _Dest=0x7a68998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.222] wcscat (in: _Dest=0x7a68998, _Source="DD01157_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" [0179.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0179.223] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0179.223] wcscmp (_String1="DD01160_.WMF", _String2=".") returned 1 [0179.223] wcscmp (_String1="DD01160_.WMF", _String2="..") returned 1 [0179.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68910 [0179.223] wcscpy (in: _Dest=0x7a68910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.224] wcscat (in: _Dest=0x7a68910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.224] wcscat (in: _Dest=0x7a68910, _Source="DD01160_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" [0179.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0179.225] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0179.225] wcscmp (_String1="DD01162_.WMF", _String2=".") returned 1 [0179.225] wcscmp (_String1="DD01162_.WMF", _String2="..") returned 1 [0179.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68b30 [0179.225] wcscpy (in: _Dest=0x7a68b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.225] wcscat (in: _Dest=0x7a68b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.225] wcscat (in: _Dest=0x7a68b30, _Source="DD01162_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" [0179.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0179.226] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0179.226] wcscmp (_String1="DD01163_.WMF", _String2=".") returned 1 [0179.226] wcscmp (_String1="DD01163_.WMF", _String2="..") returned 1 [0179.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68c40 [0179.226] wcscpy (in: _Dest=0x7a68c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.226] wcscat (in: _Dest=0x7a68c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.226] wcscat (in: _Dest=0x7a68c40, _Source="DD01163_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" [0179.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0179.228] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0179.228] wcscmp (_String1="DD01166_.WMF", _String2=".") returned 1 [0179.228] wcscmp (_String1="DD01166_.WMF", _String2="..") returned 1 [0179.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68aa8 [0179.228] wcscpy (in: _Dest=0x7a68aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0179.228] wcscat (in: _Dest=0x7a68aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0179.228] wcscat (in: _Dest=0x7a68aa8, _Source="DD01166_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" [0179.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0180.052] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0180.052] wcscmp (_String1="DD01167_.WMF", _String2=".") returned 1 [0180.053] wcscmp (_String1="DD01167_.WMF", _String2="..") returned 1 [0180.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68e60 [0180.053] wcscpy (in: _Dest=0x7a68e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0180.053] wcscat (in: _Dest=0x7a68e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0180.053] wcscat (in: _Dest=0x7a68e60, _Source="DD01167_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" [0181.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0181.431] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0181.431] wcscmp (_String1="DD01168_.WMF", _String2=".") returned 1 [0181.431] wcscmp (_String1="DD01168_.WMF", _String2="..") returned 1 [0181.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1cd40 [0181.431] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.432] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.432] wcscat (in: _Dest=0x3e1cd40, _Source="DD01168_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" [0181.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1cd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0181.433] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0181.433] wcscmp (_String1="DD01169_.WMF", _String2=".") returned 1 [0181.433] wcscmp (_String1="DD01169_.WMF", _String2="..") returned 1 [0181.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ba20 [0181.433] wcscpy (in: _Dest=0x3e1ba20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.433] wcscat (in: _Dest=0x3e1ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.433] wcscat (in: _Dest=0x3e1ba20, _Source="DD01169_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" [0181.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0181.435] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0181.435] wcscmp (_String1="DD01170_.WMF", _String2=".") returned 1 [0181.435] wcscmp (_String1="DD01170_.WMF", _String2="..") returned 1 [0181.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1b888 [0181.435] wcscpy (in: _Dest=0x3e1b888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.435] wcscat (in: _Dest=0x3e1b888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.435] wcscat (in: _Dest=0x3e1b888, _Source="DD01170_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" [0181.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1b888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0181.437] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0181.437] wcscmp (_String1="DD01171_.WMF", _String2=".") returned 1 [0181.437] wcscmp (_String1="DD01171_.WMF", _String2="..") returned 1 [0181.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ced8 [0181.437] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.437] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.437] wcscat (in: _Dest=0x3e1ced8, _Source="DD01171_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" [0181.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0181.439] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0181.439] wcscmp (_String1="DD01172_.WMF", _String2=".") returned 1 [0181.439] wcscmp (_String1="DD01172_.WMF", _String2="..") returned 1 [0181.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68998 [0181.439] wcscpy (in: _Dest=0x7a68998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.439] wcscat (in: _Dest=0x7a68998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.439] wcscat (in: _Dest=0x7a68998, _Source="DD01172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" [0181.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0181.440] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0181.440] wcscmp (_String1="DD01173_.WMF", _String2=".") returned 1 [0181.440] wcscmp (_String1="DD01173_.WMF", _String2="..") returned 1 [0181.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68bb8 [0181.441] wcscpy (in: _Dest=0x7a68bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.441] wcscat (in: _Dest=0x7a68bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.441] wcscat (in: _Dest=0x7a68bb8, _Source="DD01173_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" [0181.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0181.442] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0181.442] wcscmp (_String1="DD01176_.WMF", _String2=".") returned 1 [0181.442] wcscmp (_String1="DD01176_.WMF", _String2="..") returned 1 [0181.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68a20 [0181.442] wcscpy (in: _Dest=0x7a68a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.442] wcscat (in: _Dest=0x7a68a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.442] wcscat (in: _Dest=0x7a68a20, _Source="DD01176_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" [0181.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0181.447] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x875e9530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0181.447] wcscmp (_String1="DD01178_.WMF", _String2=".") returned 1 [0181.447] wcscmp (_String1="DD01178_.WMF", _String2="..") returned 1 [0181.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68aa8 [0181.447] wcscpy (in: _Dest=0x7a68aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.448] wcscat (in: _Dest=0x7a68aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.448] wcscat (in: _Dest=0x7a68aa8, _Source="DD01178_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" [0181.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0181.449] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0181.449] wcscmp (_String1="DD01179_.WMF", _String2=".") returned 1 [0181.449] wcscmp (_String1="DD01179_.WMF", _String2="..") returned 1 [0181.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68338 [0181.449] wcscpy (in: _Dest=0x7a68338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.450] wcscat (in: _Dest=0x7a68338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.450] wcscat (in: _Dest=0x7a68338, _Source="DD01179_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" [0181.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0181.451] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0181.451] wcscmp (_String1="DD01180_.WMF", _String2=".") returned 1 [0181.451] wcscmp (_String1="DD01180_.WMF", _String2="..") returned 1 [0181.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a681a0 [0181.471] wcscpy (in: _Dest=0x7a681a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.471] wcscat (in: _Dest=0x7a681a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.471] wcscat (in: _Dest=0x7a681a0, _Source="DD01180_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" [0181.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a681a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0181.479] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0181.479] wcscmp (_String1="DD01181_.WMF", _String2=".") returned 1 [0181.479] wcscmp (_String1="DD01181_.WMF", _String2="..") returned 1 [0181.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68118 [0181.479] wcscpy (in: _Dest=0x7a68118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.479] wcscat (in: _Dest=0x7a68118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.479] wcscat (in: _Dest=0x7a68118, _Source="DD01181_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" [0181.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0181.480] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0181.480] wcscmp (_String1="DD01182_.WMF", _String2=".") returned 1 [0181.480] wcscmp (_String1="DD01182_.WMF", _String2="..") returned 1 [0181.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68228 [0181.481] wcscpy (in: _Dest=0x7a68228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.481] wcscat (in: _Dest=0x7a68228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.481] wcscat (in: _Dest=0x7a68228, _Source="DD01182_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" [0181.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0181.481] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0181.481] wcscmp (_String1="DD01183_.WMF", _String2=".") returned 1 [0181.482] wcscmp (_String1="DD01183_.WMF", _String2="..") returned 1 [0181.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a683c0 [0181.482] wcscpy (in: _Dest=0x7a683c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.482] wcscat (in: _Dest=0x7a683c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.482] wcscat (in: _Dest=0x7a683c0, _Source="DD01183_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" [0181.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a683c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0181.487] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6bab00, ftCreationTime.dwHighDateTime=0x1bd4c73, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e6bab00, ftLastWriteTime.dwHighDateTime=0x1bd4c73, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0181.487] wcscmp (_String1="DD01186_.WMF", _String2=".") returned 1 [0181.487] wcscmp (_String1="DD01186_.WMF", _String2="..") returned 1 [0181.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68090 [0181.487] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.487] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.487] wcscat (in: _Dest=0x7a68090, _Source="DD01186_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" [0181.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0181.488] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a337900, ftCreationTime.dwHighDateTime=0x1c7a7cb, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a337900, ftLastWriteTime.dwHighDateTime=0x1c7a7cb, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0181.488] wcscmp (_String1="DD01366_.WMF", _String2=".") returned 1 [0181.488] wcscmp (_String1="DD01366_.WMF", _String2="..") returned 1 [0181.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a682b0 [0181.489] wcscpy (in: _Dest=0x7a682b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.489] wcscat (in: _Dest=0x7a682b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.489] wcscat (in: _Dest=0x7a682b0, _Source="DD01366_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" [0181.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a682b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0181.490] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x168e2a00, ftCreationTime.dwHighDateTime=0x1bd4c67, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x168e2a00, ftLastWriteTime.dwHighDateTime=0x1bd4c67, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0181.490] wcscmp (_String1="DD01434_.WMF", _String2=".") returned 1 [0181.490] wcscmp (_String1="DD01434_.WMF", _String2="..") returned 1 [0181.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68c40 [0181.490] wcscpy (in: _Dest=0x7a68c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.490] wcscat (in: _Dest=0x7a68c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.490] wcscat (in: _Dest=0x7a68c40, _Source="DD01434_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" [0181.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0181.491] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeab77800, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeab77800, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0181.491] wcscmp (_String1="DD01585_.WMF", _String2=".") returned 1 [0181.491] wcscmp (_String1="DD01585_.WMF", _String2="..") returned 1 [0181.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68b30 [0181.491] wcscpy (in: _Dest=0x7a68b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.491] wcscat (in: _Dest=0x7a68b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.491] wcscat (in: _Dest=0x7a68b30, _Source="DD01585_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" [0181.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0181.492] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe12e1000, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe12e1000, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0181.492] wcscmp (_String1="DD01586_.WMF", _String2=".") returned 1 [0181.492] wcscmp (_String1="DD01586_.WMF", _String2="..") returned 1 [0181.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a694c0 [0181.492] wcscpy (in: _Dest=0x7a694c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.492] wcscat (in: _Dest=0x7a694c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.492] wcscat (in: _Dest=0x7a694c0, _Source="DD01586_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" [0181.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a694c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0181.494] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c3e200, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87c3e200, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0181.494] wcscmp (_String1="DD01628_.WMF", _String2=".") returned 1 [0181.494] wcscmp (_String1="DD01628_.WMF", _String2="..") returned 1 [0181.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69548 [0181.494] wcscpy (in: _Dest=0x7a69548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.494] wcscat (in: _Dest=0x7a69548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.494] wcscat (in: _Dest=0x7a69548, _Source="DD01628_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" [0181.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0181.495] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f58f400, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f58f400, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0181.495] wcscmp (_String1="DD01629_.WMF", _String2=".") returned 1 [0181.495] wcscmp (_String1="DD01629_.WMF", _String2="..") returned 1 [0181.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a695d0 [0181.495] wcscpy (in: _Dest=0x7a695d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.495] wcscat (in: _Dest=0x7a695d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.495] wcscat (in: _Dest=0x7a695d0, _Source="DD01629_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" [0181.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a695d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0181.496] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c9f100, ftCreationTime.dwHighDateTime=0x1bd4c55, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84c9f100, ftLastWriteTime.dwHighDateTime=0x1bd4c55, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0181.498] wcscmp (_String1="DD01630_.WMF", _String2=".") returned 1 [0181.498] wcscmp (_String1="DD01630_.WMF", _String2="..") returned 1 [0181.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69658 [0181.498] wcscpy (in: _Dest=0x7a69658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.498] wcscat (in: _Dest=0x7a69658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.498] wcscat (in: _Dest=0x7a69658, _Source="DD01630_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" [0181.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0181.672] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b95ae00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b95ae00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0181.673] wcscmp (_String1="DD01631_.WMF", _String2=".") returned 1 [0181.673] wcscmp (_String1="DD01631_.WMF", _String2="..") returned 1 [0181.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a696e0 [0181.673] wcscpy (in: _Dest=0x7a696e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.673] wcscat (in: _Dest=0x7a696e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.673] wcscat (in: _Dest=0x7a696e0, _Source="DD01631_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" [0181.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a696e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0181.674] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8760f690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0181.674] wcscmp (_String1="DD01761_.WMF", _String2=".") returned 1 [0181.674] wcscmp (_String1="DD01761_.WMF", _String2="..") returned 1 [0181.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69768 [0181.675] wcscpy (in: _Dest=0x7a69768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.675] wcscat (in: _Dest=0x7a69768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.675] wcscat (in: _Dest=0x7a69768, _Source="DD01761_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" [0181.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0181.676] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0181.677] wcscmp (_String1="DD01772_.WMF", _String2=".") returned 1 [0181.677] wcscmp (_String1="DD01772_.WMF", _String2="..") returned 1 [0181.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a697f0 [0181.677] wcscpy (in: _Dest=0x7a697f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.677] wcscat (in: _Dest=0x7a697f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.677] wcscat (in: _Dest=0x7a697f0, _Source="DD01772_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" [0181.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a697f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0181.678] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0181.678] wcscmp (_String1="DD01793_.WMF", _String2=".") returned 1 [0181.679] wcscmp (_String1="DD01793_.WMF", _String2="..") returned 1 [0181.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69878 [0181.679] wcscpy (in: _Dest=0x7a69878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.679] wcscat (in: _Dest=0x7a69878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.679] wcscat (in: _Dest=0x7a69878, _Source="DD01793_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" [0181.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0181.680] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x773a4230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0181.680] wcscmp (_String1="EAST_01.MID", _String2=".") returned 1 [0181.680] wcscmp (_String1="EAST_01.MID", _String2="..") returned 1 [0181.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a69900 [0181.680] wcscpy (in: _Dest=0x7a69900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.680] wcscat (in: _Dest=0x7a69900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.680] wcscat (in: _Dest=0x7a69900, _Source="EAST_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" [0181.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0181.681] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ad5d00, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x773a4230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72ad5d00, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0181.681] wcscmp (_String1="ED00010_.WMF", _String2=".") returned 1 [0181.682] wcscmp (_String1="ED00010_.WMF", _String2="..") returned 1 [0181.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69988 [0181.682] wcscpy (in: _Dest=0x7a69988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.682] wcscat (in: _Dest=0x7a69988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.682] wcscat (in: _Dest=0x7a69988, _Source="ED00010_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" [0181.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0181.683] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47dcfc00, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x773f04f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47dcfc00, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0181.683] wcscmp (_String1="ED00019_.WMF", _String2=".") returned 1 [0181.683] wcscmp (_String1="ED00019_.WMF", _String2="..") returned 1 [0181.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69a10 [0181.683] wcscpy (in: _Dest=0x7a69a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.683] wcscat (in: _Dest=0x7a69a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.683] wcscat (in: _Dest=0x7a69a10, _Source="ED00019_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" [0181.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0181.685] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599ace00, ftCreationTime.dwHighDateTime=0x1bd4c64, ftLastAccessTime.dwLowDateTime=0x87740190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599ace00, ftLastWriteTime.dwHighDateTime=0x1bd4c64, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0181.685] wcscmp (_String1="ED00172_.WMF", _String2=".") returned 1 [0181.685] wcscmp (_String1="ED00172_.WMF", _String2="..") returned 1 [0181.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69a98 [0181.685] wcscpy (in: _Dest=0x7a69a98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.685] wcscat (in: _Dest=0x7a69a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.685] wcscat (in: _Dest=0x7a69a98, _Source="ED00172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" [0181.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0181.686] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b001000, ftCreationTime.dwHighDateTime=0x1bd4cc3, ftLastAccessTime.dwLowDateTime=0x773f04f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b001000, ftLastWriteTime.dwHighDateTime=0x1bd4cc3, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0181.686] wcscmp (_String1="ED00184_.WMF", _String2=".") returned 1 [0181.686] wcscmp (_String1="ED00184_.WMF", _String2="..") returned 1 [0181.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69b20 [0181.686] wcscpy (in: _Dest=0x7a69b20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.686] wcscat (in: _Dest=0x7a69b20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.686] wcscat (in: _Dest=0x7a69b20, _Source="ED00184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" [0181.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc [0181.687] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0cf900, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x87896df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbd0cf900, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0181.687] wcscmp (_String1="EN00006_.WMF", _String2=".") returned 1 [0181.687] wcscmp (_String1="EN00006_.WMF", _String2="..") returned 1 [0181.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ba8 [0181.687] wcscpy (in: _Dest=0x7a69ba8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.687] wcscat (in: _Dest=0x7a69ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.687] wcscat (in: _Dest=0x7a69ba8, _Source="EN00006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" [0181.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0181.688] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecba0200, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xecba0200, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0181.688] wcscmp (_String1="EN00202_.WMF", _String2=".") returned 1 [0181.688] wcscmp (_String1="EN00202_.WMF", _String2="..") returned 1 [0181.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69c30 [0181.688] wcscpy (in: _Dest=0x7a69c30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.688] wcscat (in: _Dest=0x7a69c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.688] wcscat (in: _Dest=0x7a69c30, _Source="EN00202_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" [0181.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0181.689] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdb6a00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cdb6a00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0181.689] wcscmp (_String1="EN00222_.WMF", _String2=".") returned 1 [0181.689] wcscmp (_String1="EN00222_.WMF", _String2="..") returned 1 [0181.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69cb8 [0181.689] wcscpy (in: _Dest=0x7a69cb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.689] wcscat (in: _Dest=0x7a69cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.689] wcscat (in: _Dest=0x7a69cb8, _Source="EN00222_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" [0181.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0181.690] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57117900, ftCreationTime.dwHighDateTime=0x1bd4b7d, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57117900, ftLastWriteTime.dwHighDateTime=0x1bd4b7d, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0181.690] wcscmp (_String1="EN00242_.WMF", _String2=".") returned 1 [0181.690] wcscmp (_String1="EN00242_.WMF", _String2="..") returned 1 [0181.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69d40 [0181.691] wcscpy (in: _Dest=0x7a69d40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.691] wcscat (in: _Dest=0x7a69d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.691] wcscat (in: _Dest=0x7a69d40, _Source="EN00242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" [0181.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0181.692] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d215300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d215300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0181.692] wcscmp (_String1="EN00319_.WMF", _String2=".") returned 1 [0181.692] wcscmp (_String1="EN00319_.WMF", _String2="..") returned 1 [0181.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69dc8 [0181.692] wcscpy (in: _Dest=0x7a69dc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.692] wcscat (in: _Dest=0x7a69dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.692] wcscat (in: _Dest=0x7a69dc8, _Source="EN00319_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" [0181.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0181.693] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f11900, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9f11900, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0181.693] wcscmp (_String1="EN00320_.WMF", _String2=".") returned 1 [0181.693] wcscmp (_String1="EN00320_.WMF", _String2="..") returned 1 [0181.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69e50 [0181.694] wcscpy (in: _Dest=0x7a69e50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.694] wcscat (in: _Dest=0x7a69e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.694] wcscat (in: _Dest=0x7a69e50, _Source="EN00320_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" [0181.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0181.695] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa666a200, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa666a200, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0181.695] wcscmp (_String1="EN00397_.WMF", _String2=".") returned 1 [0181.695] wcscmp (_String1="EN00397_.WMF", _String2="..") returned 1 [0181.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ed8 [0181.695] wcscpy (in: _Dest=0x7a69ed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.695] wcscat (in: _Dest=0x7a69ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.695] wcscat (in: _Dest=0x7a69ed8, _Source="EN00397_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" [0181.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0181.697] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c52f00, ftCreationTime.dwHighDateTime=0x1bd4c32, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe6c52f00, ftLastWriteTime.dwHighDateTime=0x1bd4c32, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0181.697] wcscmp (_String1="EN00902_.WMF", _String2=".") returned 1 [0181.697] wcscmp (_String1="EN00902_.WMF", _String2="..") returned 1 [0181.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69f60 [0181.697] wcscpy (in: _Dest=0x7a69f60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.697] wcscat (in: _Dest=0x7a69f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.697] wcscat (in: _Dest=0x7a69f60, _Source="EN00902_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" [0181.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0181.698] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0181.698] wcscmp (_String1="EXPLR_01.MID", _String2=".") returned 1 [0181.698] wcscmp (_String1="EXPLR_01.MID", _String2="..") returned 1 [0181.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69fe8 [0181.698] wcscpy (in: _Dest=0x7a69fe8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.698] wcscat (in: _Dest=0x7a69fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.698] wcscat (in: _Dest=0x7a69fe8, _Source="EXPLR_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" [0181.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0181.700] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0181.700] wcscmp (_String1="FALL_01.MID", _String2=".") returned 1 [0181.700] wcscmp (_String1="FALL_01.MID", _String2="..") returned 1 [0181.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba3b8 [0181.700] wcscpy (in: _Dest=0x3eba3b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.700] wcscat (in: _Dest=0x3eba3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.700] wcscat (in: _Dest=0x3eba3b8, _Source="FALL_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" [0181.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0181.701] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43244200, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x43244200, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0181.701] wcscmp (_String1="FD00074_.WMF", _String2=".") returned 1 [0181.701] wcscmp (_String1="FD00074_.WMF", _String2="..") returned 1 [0181.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9780 [0181.702] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.702] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.702] wcscat (in: _Dest=0x3eb9780, _Source="FD00074_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" [0181.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0181.703] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f90bb00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f90bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0181.703] wcscmp (_String1="FD00076_.WMF", _String2=".") returned 1 [0181.703] wcscmp (_String1="FD00076_.WMF", _String2="..") returned 1 [0181.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9e68 [0181.703] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.703] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.703] wcscat (in: _Dest=0x3eb9e68, _Source="FD00076_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" [0181.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0181.705] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf02600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bf02600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0181.705] wcscmp (_String1="FD00077_.WMF", _String2=".") returned 1 [0181.705] wcscmp (_String1="FD00077_.WMF", _String2="..") returned 1 [0181.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0181.705] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.705] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.705] wcscat (in: _Dest=0x3eb9010, _Source="FD00077_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" [0181.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0181.706] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abef900, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4abef900, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0181.706] wcscmp (_String1="FD00086_.WMF", _String2=".") returned 1 [0181.706] wcscmp (_String1="FD00086_.WMF", _String2="..") returned 1 [0181.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0181.706] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.707] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.707] wcscat (in: _Dest=0x3eb8b48, _Source="FD00086_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" [0181.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0181.708] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f60fc00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f60fc00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0181.708] wcscmp (_String1="FD00090_.WMF", _String2=".") returned 1 [0181.708] wcscmp (_String1="FD00090_.WMF", _String2="..") returned 1 [0181.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0181.708] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.708] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.708] wcscat (in: _Dest=0x3eb9ef0, _Source="FD00090_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" [0181.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0181.993] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498dcc00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x498dcc00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0181.993] wcscmp (_String1="FD00096_.WMF", _String2=".") returned 1 [0181.993] wcscmp (_String1="FD00096_.WMF", _String2="..") returned 1 [0181.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68e60 [0181.993] wcscpy (in: _Dest=0x7a68e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0181.993] wcscat (in: _Dest=0x7a68e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0181.993] wcscat (in: _Dest=0x7a68e60, _Source="FD00096_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" [0190.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0190.274] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472b7200, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x472b7200, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0190.274] wcscmp (_String1="FD00296_.WMF", _String2=".") returned 1 [0190.274] wcscmp (_String1="FD00296_.WMF", _String2="..") returned 1 [0190.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68800 [0190.274] wcscpy (in: _Dest=0x7a68800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.274] wcscat (in: _Dest=0x7a68800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.274] wcscat (in: _Dest=0x7a68800, _Source="FD00296_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" [0190.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec [0190.276] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e8ee00, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9e8ee00, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0190.276] wcscmp (_String1="FD00297_.WMF", _String2=".") returned 1 [0190.276] wcscmp (_String1="FD00297_.WMF", _String2="..") returned 1 [0190.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68dd8 [0190.276] wcscpy (in: _Dest=0x7a68dd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.276] wcscat (in: _Dest=0x7a68dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.276] wcscat (in: _Dest=0x7a68dd8, _Source="FD00297_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" [0190.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0190.277] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fa4500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fa4500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0190.277] wcscmp (_String1="FD00306_.WMF", _String2=".") returned 1 [0190.277] wcscmp (_String1="FD00306_.WMF", _String2="..") returned 1 [0190.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ed8 [0190.277] wcscpy (in: _Dest=0x7a69ed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.277] wcscat (in: _Dest=0x7a69ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.278] wcscat (in: _Dest=0x7a69ed8, _Source="FD00306_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" [0190.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0190.279] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87fda800, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x774aebd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87fda800, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0190.279] wcscmp (_String1="FD00336_.WMF", _String2=".") returned 1 [0190.279] wcscmp (_String1="FD00336_.WMF", _String2="..") returned 1 [0190.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68d50 [0190.279] wcscpy (in: _Dest=0x7a68d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.279] wcscat (in: _Dest=0x7a68d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.279] wcscat (in: _Dest=0x7a68d50, _Source="FD00336_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" [0190.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0190.280] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c91800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b446b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c91800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0190.280] wcscmp (_String1="FD00361_.WMF", _String2=".") returned 1 [0190.280] wcscmp (_String1="FD00361_.WMF", _String2="..") returned 1 [0190.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69658 [0190.281] wcscpy (in: _Dest=0x7a69658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.281] wcscat (in: _Dest=0x7a69658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.281] wcscat (in: _Dest=0x7a69658, _Source="FD00361_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" [0190.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0190.282] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a0af00, ftCreationTime.dwHighDateTime=0x1bd4b92, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90a0af00, ftLastWriteTime.dwHighDateTime=0x1bd4b92, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0190.282] wcscmp (_String1="FD00369_.WMF", _String2=".") returned 1 [0190.282] wcscmp (_String1="FD00369_.WMF", _String2="..") returned 1 [0190.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a696e0 [0190.283] wcscpy (in: _Dest=0x7a696e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.283] wcscat (in: _Dest=0x7a696e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.283] wcscat (in: _Dest=0x7a696e0, _Source="FD00369_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" [0190.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a696e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0190.284] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9214ac00, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9214ac00, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0190.285] wcscmp (_String1="FD00382_.WMF", _String2=".") returned 1 [0190.285] wcscmp (_String1="FD00382_.WMF", _String2="..") returned 1 [0190.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69768 [0190.286] wcscpy (in: _Dest=0x7a69768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.286] wcscat (in: _Dest=0x7a69768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.286] wcscat (in: _Dest=0x7a69768, _Source="FD00382_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" [0190.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c [0190.287] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4397eb00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4397eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0190.287] wcscmp (_String1="FD00397_.WMF", _String2=".") returned 1 [0190.287] wcscmp (_String1="FD00397_.WMF", _String2="..") returned 1 [0190.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a697f0 [0190.287] wcscpy (in: _Dest=0x7a697f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.287] wcscat (in: _Dest=0x7a697f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.287] wcscat (in: _Dest=0x7a697f0, _Source="FD00397_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" [0190.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a697f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0190.288] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4266be00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4266be00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0190.295] wcscmp (_String1="FD00403_.WMF", _String2=".") returned 1 [0190.295] wcscmp (_String1="FD00403_.WMF", _String2="..") returned 1 [0190.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69878 [0190.295] wcscpy (in: _Dest=0x7a69878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.295] wcscat (in: _Dest=0x7a69878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.295] wcscat (in: _Dest=0x7a69878, _Source="FD00403_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" [0190.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0190.920] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41359100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41359100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0190.920] wcscmp (_String1="FD00414_.WMF", _String2=".") returned 1 [0190.920] wcscmp (_String1="FD00414_.WMF", _String2="..") returned 1 [0190.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69d40 [0190.920] wcscpy (in: _Dest=0x7a69d40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.920] wcscat (in: _Dest=0x7a69d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.920] wcscat (in: _Dest=0x7a69d40, _Source="FD00414_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" [0190.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0190.922] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40046400, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x40046400, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0190.922] wcscmp (_String1="FD00419_.WMF", _String2=".") returned 1 [0190.922] wcscmp (_String1="FD00419_.WMF", _String2="..") returned 1 [0190.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69dc8 [0190.922] wcscpy (in: _Dest=0x7a69dc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.922] wcscat (in: _Dest=0x7a69dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.922] wcscat (in: _Dest=0x7a69dc8, _Source="FD00419_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" [0190.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0190.924] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da20a00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3da20a00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0190.924] wcscmp (_String1="FD00428_.WMF", _String2=".") returned 1 [0190.924] wcscmp (_String1="FD00428_.WMF", _String2="..") returned 1 [0190.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69e50 [0190.924] wcscpy (in: _Dest=0x7a69e50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.924] wcscat (in: _Dest=0x7a69e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.925] wcscat (in: _Dest=0x7a69e50, _Source="FD00428_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" [0190.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0190.926] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c70dd00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c70dd00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0190.926] wcscmp (_String1="FD00435_.WMF", _String2=".") returned 1 [0190.926] wcscmp (_String1="FD00435_.WMF", _String2="..") returned 1 [0190.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68bb8 [0190.926] wcscpy (in: _Dest=0x7a68bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.926] wcscat (in: _Dest=0x7a68bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.926] wcscat (in: _Dest=0x7a68bb8, _Source="FD00435_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" [0190.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0190.927] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3fb000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b3fb000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0190.927] wcscmp (_String1="FD00438_.WMF", _String2=".") returned 1 [0190.927] wcscmp (_String1="FD00438_.WMF", _String2="..") returned 1 [0190.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68a20 [0190.928] wcscpy (in: _Dest=0x7a68a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.928] wcscat (in: _Dest=0x7a68a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.928] wcscat (in: _Dest=0x7a68a20, _Source="FD00438_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" [0190.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0190.929] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0e8300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a0e8300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0190.929] wcscmp (_String1="FD00455_.WMF", _String2=".") returned 1 [0190.929] wcscmp (_String1="FD00455_.WMF", _String2="..") returned 1 [0190.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68338 [0190.929] wcscpy (in: _Dest=0x7a68338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.929] wcscat (in: _Dest=0x7a68338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.930] wcscat (in: _Dest=0x7a68338, _Source="FD00455_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" [0190.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0190.931] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38dd5600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x38dd5600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0190.931] wcscmp (_String1="FD00459_.WMF", _String2=".") returned 1 [0190.931] wcscmp (_String1="FD00459_.WMF", _String2="..") returned 1 [0190.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69900 [0190.931] wcscpy (in: _Dest=0x7a69900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.931] wcscat (in: _Dest=0x7a69900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.931] wcscat (in: _Dest=0x7a69900, _Source="FD00459_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" [0190.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208 [0190.932] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ac2900, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37ac2900, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0190.932] wcscmp (_String1="FD00543_.WMF", _String2=".") returned 1 [0190.932] wcscmp (_String1="FD00543_.WMF", _String2="..") returned 1 [0190.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68aa8 [0190.933] wcscpy (in: _Dest=0x7a68aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.933] wcscat (in: _Dest=0x7a68aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.933] wcscat (in: _Dest=0x7a68aa8, _Source="FD00543_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" [0190.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474 [0190.934] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a421100, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a421100, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0190.934] wcscmp (_String1="FD00544_.WMF", _String2=".") returned 1 [0190.934] wcscmp (_String1="FD00544_.WMF", _String2="..") returned 1 [0190.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69a98 [0190.934] wcscpy (in: _Dest=0x7a69a98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.934] wcscat (in: _Dest=0x7a69a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.934] wcscat (in: _Dest=0x7a69a98, _Source="FD00544_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" [0190.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0190.936] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e9d600, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81e9d600, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0190.936] wcscmp (_String1="FD00564_.WMF", _String2=".") returned 1 [0190.936] wcscmp (_String1="FD00564_.WMF", _String2="..") returned 1 [0190.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69438 [0190.936] wcscpy (in: _Dest=0x7a69438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.936] wcscat (in: _Dest=0x7a69438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.936] wcscat (in: _Dest=0x7a69438, _Source="FD00564_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" [0190.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0190.937] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a125200, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a125200, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0190.938] wcscmp (_String1="FD00586_.WMF", _String2=".") returned 1 [0190.938] wcscmp (_String1="FD00586_.WMF", _String2="..") returned 1 [0190.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a685e0 [0190.938] wcscpy (in: _Dest=0x7a685e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.938] wcscat (in: _Dest=0x7a685e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.938] wcscat (in: _Dest=0x7a685e0, _Source="FD00586_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" [0190.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a685e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0190.939] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54258100, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54258100, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0190.939] wcscmp (_String1="FD00775_.WMF", _String2=".") returned 1 [0190.939] wcscmp (_String1="FD00775_.WMF", _String2="..") returned 1 [0190.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68668 [0190.939] wcscpy (in: _Dest=0x7a68668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.939] wcscat (in: _Dest=0x7a68668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.939] wcscat (in: _Dest=0x7a68668, _Source="FD00775_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" [0190.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0190.940] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676b2900, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x676b2900, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0190.941] wcscmp (_String1="FD00779_.WMF", _String2=".") returned 1 [0190.941] wcscmp (_String1="FD00779_.WMF", _String2="..") returned 1 [0190.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a686f0 [0190.941] wcscpy (in: _Dest=0x7a686f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.941] wcscat (in: _Dest=0x7a686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.941] wcscat (in: _Dest=0x7a686f0, _Source="FD00779_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" [0190.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0190.942] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e29300, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49e29300, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0190.942] wcscmp (_String1="FD00799_.WMF", _String2=".") returned 1 [0190.942] wcscmp (_String1="FD00799_.WMF", _String2="..") returned 1 [0190.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68778 [0190.942] wcscpy (in: _Dest=0x7a68778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.942] wcscat (in: _Dest=0x7a68778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.942] wcscat (in: _Dest=0x7a68778, _Source="FD00799_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" [0190.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0190.944] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bb8500, ftCreationTime.dwHighDateTime=0x1bd4b59, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42bb8500, ftLastWriteTime.dwHighDateTime=0x1bd4b59, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0190.944] wcscmp (_String1="FD00814_.WMF", _String2=".") returned 1 [0190.944] wcscmp (_String1="FD00814_.WMF", _String2="..") returned 1 [0190.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68910 [0190.944] wcscpy (in: _Dest=0x7a68910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.944] wcscat (in: _Dest=0x7a68910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.944] wcscat (in: _Dest=0x7a68910, _Source="FD00814_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" [0190.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0190.945] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b32cb00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b32cb00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0190.945] wcscmp (_String1="FD00965_.WMF", _String2=".") returned 1 [0190.945] wcscmp (_String1="FD00965_.WMF", _String2="..") returned 1 [0190.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68558 [0190.945] wcscpy (in: _Dest=0x7a68558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.945] wcscat (in: _Dest=0x7a68558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.946] wcscat (in: _Dest=0x7a68558, _Source="FD00965_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" [0190.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0190.947] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e988600, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e988600, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0190.947] wcscmp (_String1="FD01074_.WMF", _String2=".") returned 1 [0190.947] wcscmp (_String1="FD01074_.WMF", _String2="..") returned 1 [0190.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a684d0 [0190.947] wcscpy (in: _Dest=0x7a684d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.947] wcscat (in: _Dest=0x7a684d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.947] wcscat (in: _Dest=0x7a684d0, _Source="FD01074_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" [0190.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a684d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d8 [0190.948] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898aa700, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x898aa700, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0190.948] wcscmp (_String1="FD01084_.WMF", _String2=".") returned 1 [0190.948] wcscmp (_String1="FD01084_.WMF", _String2="..") returned 1 [0190.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68448 [0190.948] wcscpy (in: _Dest=0x7a68448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.948] wcscat (in: _Dest=0x7a68448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.948] wcscat (in: _Dest=0x7a68448, _Source="FD01084_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" [0190.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0190.950] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe33f000, ftCreationTime.dwHighDateTime=0x1bd4c63, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe33f000, ftLastWriteTime.dwHighDateTime=0x1bd4c63, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0190.950] wcscmp (_String1="FD01176_.WMF", _String2=".") returned 1 [0190.950] wcscmp (_String1="FD01176_.WMF", _String2="..") returned 1 [0190.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68888 [0190.950] wcscpy (in: _Dest=0x7a68888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.950] wcscat (in: _Dest=0x7a68888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.950] wcscat (in: _Dest=0x7a68888, _Source="FD01176_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" [0190.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0190.951] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2aa0900, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2aa0900, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0190.951] wcscmp (_String1="FD01191_.WMF", _String2=".") returned 1 [0190.951] wcscmp (_String1="FD01191_.WMF", _String2="..") returned 1 [0190.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ee8 [0190.952] wcscpy (in: _Dest=0x7a68ee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.952] wcscat (in: _Dest=0x7a68ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.952] wcscat (in: _Dest=0x7a68ee8, _Source="FD01191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" [0190.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0190.953] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c362c00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c362c00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0190.953] wcscmp (_String1="FD01193_.WMF", _String2=".") returned 1 [0190.953] wcscmp (_String1="FD01193_.WMF", _String2="..") returned 1 [0190.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68f70 [0190.953] wcscpy (in: _Dest=0x7a68f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.953] wcscat (in: _Dest=0x7a68f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.953] wcscat (in: _Dest=0x7a68f70, _Source="FD01193_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" [0190.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0190.955] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf168200, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf168200, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0190.955] wcscmp (_String1="FD01196_.WMF", _String2=".") returned 1 [0190.955] wcscmp (_String1="FD01196_.WMF", _String2="..") returned 1 [0190.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ff8 [0190.955] wcscpy (in: _Dest=0x7a68ff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.955] wcscat (in: _Dest=0x7a68ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.955] wcscat (in: _Dest=0x7a68ff8, _Source="FD01196_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" [0190.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0190.956] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1604be00, ftCreationTime.dwHighDateTime=0x1bf32a7, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1604be00, ftLastWriteTime.dwHighDateTime=0x1bf32a7, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0190.956] wcscmp (_String1="FD01548_.WMF", _String2=".") returned 1 [0190.956] wcscmp (_String1="FD01548_.WMF", _String2="..") returned 1 [0190.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69080 [0190.956] wcscpy (in: _Dest=0x7a69080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0190.957] wcscat (in: _Dest=0x7a69080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0190.957] wcscat (in: _Dest=0x7a69080, _Source="FD01548_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" [0190.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0191.582] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a335000, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a335000, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0191.582] wcscmp (_String1="FD01657_.WMF", _String2=".") returned 1 [0191.583] wcscmp (_String1="FD01657_.WMF", _String2="..") returned 1 [0191.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69b20 [0191.583] wcscpy (in: _Dest=0x7a69b20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0191.583] wcscat (in: _Dest=0x7a69b20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0191.583] wcscat (in: _Dest=0x7a69b20, _Source="FD01657_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" [0194.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0194.964] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e92f00, ftCreationTime.dwHighDateTime=0x1bd4c70, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3e92f00, ftLastWriteTime.dwHighDateTime=0x1bd4c70, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0194.964] wcscmp (_String1="FD01658_.WMF", _String2=".") returned 1 [0194.964] wcscmp (_String1="FD01658_.WMF", _String2="..") returned 1 [0194.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a694c0 [0194.964] wcscpy (in: _Dest=0x7a694c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.964] wcscat (in: _Dest=0x7a694c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.964] wcscat (in: _Dest=0x7a694c0, _Source="FD01658_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" [0194.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a694c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0194.965] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85618800, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85618800, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0194.965] wcscmp (_String1="FD01659_.WMF", _String2=".") returned 1 [0194.965] wcscmp (_String1="FD01659_.WMF", _String2="..") returned 1 [0194.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69988 [0194.965] wcscpy (in: _Dest=0x7a69988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.965] wcscat (in: _Dest=0x7a69988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.965] wcscat (in: _Dest=0x7a69988, _Source="FD01659_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" [0194.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0194.966] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b647d00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b647d00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0194.966] wcscmp (_String1="FD01660_.WMF", _String2=".") returned 1 [0194.966] wcscmp (_String1="FD01660_.WMF", _String2="..") returned 1 [0194.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a697f0 [0194.966] wcscpy (in: _Dest=0x7a697f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.966] wcscat (in: _Dest=0x7a697f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.966] wcscat (in: _Dest=0x7a697f0, _Source="FD01660_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" [0194.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a697f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0194.967] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774d4d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0194.967] wcscmp (_String1="FD02068_.WMF", _String2=".") returned 1 [0194.967] wcscmp (_String1="FD02068_.WMF", _String2="..") returned 1 [0194.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69548 [0194.967] wcscpy (in: _Dest=0x7a69548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.968] wcscat (in: _Dest=0x7a69548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.968] wcscat (in: _Dest=0x7a69548, _Source="FD02068_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" [0194.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0194.968] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0194.969] wcscmp (_String1="FD02071_.WMF", _String2=".") returned 1 [0194.969] wcscmp (_String1="FD02071_.WMF", _String2="..") returned 1 [0194.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69768 [0194.969] wcscpy (in: _Dest=0x7a69768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.969] wcscat (in: _Dest=0x7a69768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.969] wcscat (in: _Dest=0x7a69768, _Source="FD02071_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" [0194.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0194.970] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b6a810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0194.970] wcscmp (_String1="FD02075_.WMF", _String2=".") returned 1 [0194.970] wcscmp (_String1="FD02075_.WMF", _String2="..") returned 1 [0194.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69108 [0194.970] wcscpy (in: _Dest=0x7a69108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.970] wcscat (in: _Dest=0x7a69108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.970] wcscat (in: _Dest=0x7a69108, _Source="FD02075_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" [0194.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0194.971] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0194.971] wcscmp (_String1="FD02088_.WMF", _String2=".") returned 1 [0194.971] wcscmp (_String1="FD02088_.WMF", _String2="..") returned 1 [0194.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69190 [0194.972] wcscpy (in: _Dest=0x7a69190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.972] wcscat (in: _Dest=0x7a69190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.972] wcscat (in: _Dest=0x7a69190, _Source="FD02088_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" [0194.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0194.973] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0194.973] wcscmp (_String1="FD02097_.WMF", _String2=".") returned 1 [0194.973] wcscmp (_String1="FD02097_.WMF", _String2="..") returned 1 [0194.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69218 [0194.973] wcscpy (in: _Dest=0x7a69218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.973] wcscat (in: _Dest=0x7a69218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.973] wcscat (in: _Dest=0x7a69218, _Source="FD02097_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" [0194.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0194.974] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0194.974] wcscmp (_String1="FD02115_.WMF", _String2=".") returned 1 [0194.974] wcscmp (_String1="FD02115_.WMF", _String2="..") returned 1 [0194.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a692a0 [0194.974] wcscpy (in: _Dest=0x7a692a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.974] wcscat (in: _Dest=0x7a692a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.974] wcscat (in: _Dest=0x7a692a0, _Source="FD02115_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" [0194.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a692a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0194.975] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0194.979] wcscmp (_String1="FD02116_.WMF", _String2=".") returned 1 [0194.979] wcscmp (_String1="FD02116_.WMF", _String2="..") returned 1 [0194.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69328 [0194.980] wcscpy (in: _Dest=0x7a69328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.980] wcscat (in: _Dest=0x7a69328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.980] wcscat (in: _Dest=0x7a69328, _Source="FD02116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" [0194.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0194.981] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0194.981] wcscmp (_String1="FD02141_.WMF", _String2=".") returned 1 [0194.981] wcscmp (_String1="FD02141_.WMF", _String2="..") returned 1 [0194.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a693b0 [0194.981] wcscpy (in: _Dest=0x7a693b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.981] wcscat (in: _Dest=0x7a693b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.981] wcscat (in: _Dest=0x7a693b0, _Source="FD02141_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" [0194.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a693b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0194.982] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0194.982] wcscmp (_String1="FD02153_.WMF", _String2=".") returned 1 [0194.982] wcscmp (_String1="FD02153_.WMF", _String2="..") returned 1 [0194.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68cc8 [0194.982] wcscpy (in: _Dest=0x7a68cc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.982] wcscat (in: _Dest=0x7a68cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.983] wcscat (in: _Dest=0x7a68cc8, _Source="FD02153_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" [0194.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0194.983] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0194.984] wcscmp (_String1="FD02158_.WMF", _String2=".") returned 1 [0194.984] wcscmp (_String1="FD02158_.WMF", _String2="..") returned 1 [0194.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba6e8 [0194.984] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.984] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.984] wcscat (in: _Dest=0x3eba6e8, _Source="FD02158_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" [0194.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0194.985] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0194.985] wcscmp (_String1="FD02161_.WMF", _String2=".") returned 1 [0194.985] wcscmp (_String1="FD02161_.WMF", _String2="..") returned 1 [0194.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0194.985] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.985] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.985] wcscat (in: _Dest=0x3eb9560, _Source="FD02161_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" [0194.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0194.986] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x87bb6ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0194.986] wcscmp (_String1="FINCL_01.MID", _String2=".") returned 1 [0194.986] wcscmp (_String1="FINCL_01.MID", _String2="..") returned 1 [0194.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba110 [0194.986] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.986] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.987] wcscat (in: _Dest=0x3eba110, _Source="FINCL_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" [0194.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0194.988] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x774fae90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0194.988] wcscmp (_String1="FINCL_02.MID", _String2=".") returned 1 [0194.988] wcscmp (_String1="FINCL_02.MID", _String2="..") returned 1 [0194.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0194.988] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.988] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.988] wcscat (in: _Dest=0x3eb9cd0, _Source="FINCL_02.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" [0194.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0194.989] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0194.989] wcscmp (_String1="FLAP.WMF", _String2=".") returned 1 [0194.989] wcscmp (_String1="FLAP.WMF", _String2="..") returned 1 [0194.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e18e18 [0194.989] wcscpy (in: _Dest=0x3e18e18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.989] wcscat (in: _Dest=0x3e18e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.989] wcscat (in: _Dest=0x3e18e18, _Source="FLAP.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" [0194.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e18e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8 [0194.990] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0194.990] wcscmp (_String1="GRDEN_01.MID", _String2=".") returned 1 [0194.990] wcscmp (_String1="GRDEN_01.MID", _String2="..") returned 1 [0194.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0194.991] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.991] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.991] wcscat (in: _Dest=0x3eba2a8, _Source="GRDEN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" [0194.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0194.992] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0194.992] wcscmp (_String1="GRID_01.MID", _String2=".") returned 1 [0194.992] wcscmp (_String1="GRID_01.MID", _String2="..") returned 1 [0194.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8c58 [0194.992] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0194.992] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0194.992] wcscat (in: _Dest=0x3eb8c58, _Source="GRID_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" [0195.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0195.017] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a1c600, ftCreationTime.dwHighDateTime=0x1bd4b8f, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8a1c600, ftLastWriteTime.dwHighDateTime=0x1bd4b8f, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0195.017] wcscmp (_String1="HH00057_.WMF", _String2=".") returned 1 [0195.017] wcscmp (_String1="HH00057_.WMF", _String2="..") returned 1 [0195.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0195.018] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.018] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.018] wcscat (in: _Dest=0x3eb8e78, _Source="HH00057_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" [0195.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0195.134] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e41b00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85e41b00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0195.134] wcscmp (_String1="HH00084_.WMF", _String2=".") returned 1 [0195.134] wcscmp (_String1="HH00084_.WMF", _String2="..") returned 1 [0195.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0195.141] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.141] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.141] wcscat (in: _Dest=0x3eb9230, _Source="HH00084_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" [0195.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0195.379] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d53f600, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d53f600, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0195.379] wcscmp (_String1="HH00231_.WMF", _String2=".") returned 1 [0195.379] wcscmp (_String1="HH00231_.WMF", _String2="..") returned 1 [0195.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68e60 [0195.379] wcscpy (in: _Dest=0x7a68e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0195.379] wcscat (in: _Dest=0x7a68e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0195.379] wcscat (in: _Dest=0x7a68e60, _Source="HH00231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" [0201.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0201.837] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fd2900, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x65fd2900, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0201.837] wcscmp (_String1="HH00235_.WMF", _String2=".") returned 1 [0201.837] wcscmp (_String1="HH00235_.WMF", _String2="..") returned 1 [0201.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ba8 [0201.838] wcscpy (in: _Dest=0x7a69ba8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.838] wcscat (in: _Dest=0x7a69ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.838] wcscat (in: _Dest=0x7a69ba8, _Source="HH00235_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" [0201.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0201.839] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64cbfc00, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64cbfc00, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0201.839] wcscmp (_String1="HH00236_.WMF", _String2=".") returned 1 [0201.839] wcscmp (_String1="HH00236_.WMF", _String2="..") returned 1 [0201.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9c48 [0201.839] wcscpy (in: _Dest=0x3eb9c48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.839] wcscat (in: _Dest=0x3eb9c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.839] wcscat (in: _Dest=0x3eb9c48, _Source="HH00236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" [0201.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0201.840] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220a2400, ftCreationTime.dwHighDateTime=0x1bd4b87, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x220a2400, ftLastWriteTime.dwHighDateTime=0x1bd4b87, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0201.840] wcscmp (_String1="HH00241_.WMF", _String2=".") returned 1 [0201.840] wcscmp (_String1="HH00241_.WMF", _String2="..") returned 1 [0201.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb92b8 [0201.840] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.840] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.840] wcscat (in: _Dest=0x3eb92b8, _Source="HH00241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" [0201.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0201.842] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x367afc00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x367afc00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0201.842] wcscmp (_String1="HH00260_.WMF", _String2=".") returned 1 [0201.842] wcscmp (_String1="HH00260_.WMF", _String2="..") returned 1 [0201.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba4c8 [0201.842] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.842] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.842] wcscat (in: _Dest=0x3eba4c8, _Source="HH00260_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" [0201.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0201.843] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3549cf00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3549cf00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0201.843] wcscmp (_String1="HH00276_.WMF", _String2=".") returned 1 [0201.843] wcscmp (_String1="HH00276_.WMF", _String2="..") returned 1 [0201.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9450 [0201.843] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.843] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.844] wcscat (in: _Dest=0x3eb9450, _Source="HH00276_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" [0201.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0201.845] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bd1400, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5bd1400, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0201.845] wcscmp (_String1="HH00334_.WMF", _String2=".") returned 1 [0201.845] wcscmp (_String1="HH00334_.WMF", _String2="..") returned 1 [0201.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba330 [0201.845] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.845] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.845] wcscat (in: _Dest=0x3eba330, _Source="HH00334_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" [0201.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0201.846] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78bf3000, ftCreationTime.dwHighDateTime=0x1bd4b7e, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78bf3000, ftLastWriteTime.dwHighDateTime=0x1bd4b7e, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0201.846] wcscmp (_String1="HH00443_.WMF", _String2=".") returned 1 [0201.846] wcscmp (_String1="HH00443_.WMF", _String2="..") returned 1 [0201.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0201.846] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.846] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.846] wcscat (in: _Dest=0x3eba220, _Source="HH00443_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" [0201.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0201.847] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7effdd00, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7effdd00, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0201.847] wcscmp (_String1="HH00513_.WMF", _String2=".") returned 1 [0201.847] wcscmp (_String1="HH00513_.WMF", _String2="..") returned 1 [0201.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8bd0 [0201.848] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.848] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.848] wcscat (in: _Dest=0x3eb8bd0, _Source="HH00513_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" [0201.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0201.849] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b8c4c00, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b8c4c00, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0201.849] wcscmp (_String1="HH00524_.WMF", _String2=".") returned 1 [0201.849] wcscmp (_String1="HH00524_.WMF", _String2="..") returned 1 [0201.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9890 [0201.849] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.849] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.849] wcscat (in: _Dest=0x3eb9890, _Source="HH00524_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" [0201.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0201.850] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6929f200, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6929f200, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0201.850] wcscmp (_String1="HH00526_.WMF", _String2=".") returned 1 [0201.850] wcscmp (_String1="HH00526_.WMF", _String2="..") returned 1 [0201.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8ce0 [0201.850] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.850] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.851] wcscat (in: _Dest=0x3eb8ce0, _Source="HH00526_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" [0201.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0201.852] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f8c500, ftCreationTime.dwHighDateTime=0x1bd4b52, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67f8c500, ftLastWriteTime.dwHighDateTime=0x1bd4b52, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0201.852] wcscmp (_String1="HH00527_.WMF", _String2=".") returned 1 [0201.852] wcscmp (_String1="HH00527_.WMF", _String2="..") returned 1 [0201.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb96f8 [0201.852] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.852] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.852] wcscat (in: _Dest=0x3eb96f8, _Source="HH00527_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" [0201.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0201.853] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17eb600, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf17eb600, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0201.853] wcscmp (_String1="HH00546_.WMF", _String2=".") returned 1 [0201.853] wcscmp (_String1="HH00546_.WMF", _String2="..") returned 1 [0201.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb94d8 [0201.853] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.853] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.853] wcscat (in: _Dest=0x3eb94d8, _Source="HH00546_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" [0201.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c [0201.855] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde1b1d00, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde1b1d00, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0201.855] wcscmp (_String1="HH00601_.WMF", _String2=".") returned 1 [0201.855] wcscmp (_String1="HH00601_.WMF", _String2="..") returned 1 [0201.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0201.855] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.855] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.855] wcscat (in: _Dest=0x3eba770, _Source="HH00601_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" [0201.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0201.857] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3eb0b00, ftCreationTime.dwHighDateTime=0x1bd4bab, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf3eb0b00, ftLastWriteTime.dwHighDateTime=0x1bd4bab, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0201.857] wcscmp (_String1="HH00602_.WMF", _String2=".") returned 1 [0201.857] wcscmp (_String1="HH00602_.WMF", _String2="..") returned 1 [0201.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9a28 [0201.857] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.857] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.857] wcscat (in: _Dest=0x3eb9a28, _Source="HH00602_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" [0201.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0201.858] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe21100, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafe21100, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0201.858] wcscmp (_String1="HH00612_.WMF", _String2=".") returned 1 [0201.858] wcscmp (_String1="HH00612_.WMF", _String2="..") returned 1 [0201.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0201.858] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.858] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.858] wcscat (in: _Dest=0x3eb9670, _Source="HH00612_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" [0201.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0201.860] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d585200, ftCreationTime.dwHighDateTime=0x1bd4b7d, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d585200, ftLastWriteTime.dwHighDateTime=0x1bd4b7d, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0201.860] wcscmp (_String1="HH00623_.WMF", _String2=".") returned 1 [0201.860] wcscmp (_String1="HH00623_.WMF", _String2="..") returned 1 [0201.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9f78 [0201.860] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.860] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.860] wcscat (in: _Dest=0x3eb9f78, _Source="HH00623_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" [0201.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0201.861] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10bc1a00, ftCreationTime.dwHighDateTime=0x1bd4b7d, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10bc1a00, ftLastWriteTime.dwHighDateTime=0x1bd4b7d, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0201.861] wcscmp (_String1="HH00625_.WMF", _String2=".") returned 1 [0201.861] wcscmp (_String1="HH00625_.WMF", _String2="..") returned 1 [0201.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9bc0 [0201.861] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.861] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.861] wcscat (in: _Dest=0x3eb9bc0, _Source="HH00625_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" [0201.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0201.862] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b0cd800, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x78dad2d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b0cd800, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0201.862] wcscmp (_String1="HH00636_.WMF", _String2=".") returned 1 [0201.862] wcscmp (_String1="HH00636_.WMF", _String2="..") returned 1 [0201.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba550 [0201.862] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.862] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.862] wcscat (in: _Dest=0x3eba550, _Source="HH00636_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" [0201.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0201.864] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e77500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x32e77500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0201.864] wcscmp (_String1="HH00669_.WMF", _String2=".") returned 1 [0201.864] wcscmp (_String1="HH00669_.WMF", _String2="..") returned 1 [0201.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0201.864] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.864] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.864] wcscat (in: _Dest=0x3eb9b38, _Source="HH00669_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" [0201.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0201.865] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf117c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf117c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0201.865] wcscmp (_String1="HH00681_.WMF", _String2=".") returned 1 [0201.865] wcscmp (_String1="HH00681_.WMF", _String2="..") returned 1 [0201.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bed8 [0201.866] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.866] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.866] wcscat (in: _Dest=0x3f3bed8, _Source="HH00681_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" [0201.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0201.867] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2295e00, ftCreationTime.dwHighDateTime=0x1bd4b82, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd2295e00, ftLastWriteTime.dwHighDateTime=0x1bd4b82, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0201.867] wcscmp (_String1="HH00685_.WMF", _String2=".") returned 1 [0201.867] wcscmp (_String1="HH00685_.WMF", _String2="..") returned 1 [0201.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3da78 [0201.867] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0201.867] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0201.867] wcscat (in: _Dest=0x3f3da78, _Source="HH00685_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" [0201.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0201.869] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b64800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31b64800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0203.223] wcscmp (_String1="HH00687_.WMF", _String2=".") returned 1 [0203.223] wcscmp (_String1="HH00687_.WMF", _String2="..") returned 1 [0203.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68c40 [0203.223] wcscpy (in: _Dest=0x7a68c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.223] wcscat (in: _Dest=0x7a68c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.223] wcscat (in: _Dest=0x7a68c40, _Source="HH00687_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" [0203.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0203.337] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaad29100, ftCreationTime.dwHighDateTime=0x1bd4b82, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaad29100, ftLastWriteTime.dwHighDateTime=0x1bd4b82, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0203.337] wcscmp (_String1="HH00688_.WMF", _String2=".") returned 1 [0203.337] wcscmp (_String1="HH00688_.WMF", _String2="..") returned 1 [0203.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68b30 [0203.337] wcscpy (in: _Dest=0x7a68b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.338] wcscat (in: _Dest=0x7a68b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.338] wcscat (in: _Dest=0x7a68b30, _Source="HH00688_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" [0203.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0203.339] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30851b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30851b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0203.339] wcscmp (_String1="HH00693_.WMF", _String2=".") returned 1 [0203.339] wcscmp (_String1="HH00693_.WMF", _String2="..") returned 1 [0203.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c5c0 [0203.339] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.339] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.339] wcscat (in: _Dest=0x3f3c5c0, _Source="HH00693_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" [0203.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0203.340] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c9b00, ftCreationTime.dwHighDateTime=0x1bd4b9b, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3c9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b9b, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0203.340] wcscmp (_String1="HH01013_.WMF", _String2=".") returned 1 [0203.340] wcscmp (_String1="HH01013_.WMF", _String2="..") returned 1 [0203.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c758 [0203.340] wcscpy (in: _Dest=0x3f3c758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.340] wcscat (in: _Dest=0x3f3c758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.340] wcscat (in: _Dest=0x3f3c758, _Source="HH01013_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" [0203.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0203.341] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0203.341] wcscmp (_String1="HH01015_.WMF", _String2=".") returned 1 [0203.341] wcscmp (_String1="HH01015_.WMF", _String2="..") returned 1 [0203.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d7d0 [0203.342] wcscpy (in: _Dest=0x3f3d7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.342] wcscat (in: _Dest=0x3f3d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.342] wcscat (in: _Dest=0x3f3d7d0, _Source="HH01015_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" [0203.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0203.343] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a2e000, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8a2e000, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0203.343] wcscmp (_String1="HH01058_.WMF", _String2=".") returned 1 [0203.343] wcscmp (_String1="HH01058_.WMF", _String2="..") returned 1 [0203.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cec8 [0203.343] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.343] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.343] wcscat (in: _Dest=0x3f3cec8, _Source="HH01058_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" [0203.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0203.344] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf197800, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf197800, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0203.344] wcscmp (_String1="HH01065_.WMF", _String2=".") returned 1 [0203.344] wcscmp (_String1="HH01065_.WMF", _String2="..") returned 1 [0203.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c070 [0203.344] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.344] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.344] wcscat (in: _Dest=0x3f3c070, _Source="HH01065_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" [0203.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0203.345] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad57b00, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbad57b00, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0203.345] wcscmp (_String1="HH01080_.WMF", _String2=".") returned 1 [0203.345] wcscmp (_String1="HH01080_.WMF", _String2="..") returned 1 [0203.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d308 [0203.345] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.345] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.345] wcscat (in: _Dest=0x3f3d308, _Source="HH01080_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" [0203.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0203.346] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0203.346] wcscmp (_String1="HH01242_.WMF", _String2=".") returned 1 [0203.346] wcscmp (_String1="HH01242_.WMF", _String2="..") returned 1 [0203.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bd40 [0203.346] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.346] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.347] wcscat (in: _Dest=0x3f3bd40, _Source="HH01242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" [0203.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0203.347] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0203.348] wcscmp (_String1="HH01291_.WMF", _String2=".") returned 1 [0203.348] wcscmp (_String1="HH01291_.WMF", _String2="..") returned 1 [0203.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c290 [0203.348] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.348] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.348] wcscat (in: _Dest=0x3f3c290, _Source="HH01291_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" [0203.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0203.349] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0203.349] wcscmp (_String1="HH01329_.WMF", _String2=".") returned 1 [0203.349] wcscmp (_String1="HH01329_.WMF", _String2="..") returned 1 [0203.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c648 [0203.349] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.349] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.349] wcscat (in: _Dest=0x3f3c648, _Source="HH01329_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" [0203.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0203.350] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253cea00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x253cea00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0203.350] wcscmp (_String1="HH01461_.WMF", _String2=".") returned 1 [0203.350] wcscmp (_String1="HH01461_.WMF", _String2="..") returned 1 [0203.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d060 [0203.350] wcscpy (in: _Dest=0x3f3d060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.350] wcscat (in: _Dest=0x3f3d060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.350] wcscat (in: _Dest=0x3f3d060, _Source="HH01461_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" [0203.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0203.351] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0203.351] wcscmp (_String1="HH01618_.WMF", _String2=".") returned 1 [0203.352] wcscmp (_String1="HH01618_.WMF", _String2="..") returned 1 [0203.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3db00 [0203.352] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.352] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.352] wcscat (in: _Dest=0x3f3db00, _Source="HH01618_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" [0203.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0203.353] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1844f700, ftCreationTime.dwHighDateTime=0x1bd4c41, ftLastAccessTime.dwLowDateTime=0x78dd3430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1844f700, ftLastWriteTime.dwHighDateTime=0x1bd4c41, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0203.353] wcscmp (_String1="HH01759_.WMF", _String2=".") returned 1 [0203.353] wcscmp (_String1="HH01759_.WMF", _String2="..") returned 1 [0203.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3be50 [0203.353] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.353] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.353] wcscat (in: _Dest=0x3f3be50, _Source="HH01759_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" [0203.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0203.354] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c86600, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0c86600, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0203.354] wcscmp (_String1="HH01875_.WMF", _String2=".") returned 1 [0203.354] wcscmp (_String1="HH01875_.WMF", _String2="..") returned 1 [0203.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c6d0 [0203.354] wcscpy (in: _Dest=0x3f3c6d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.354] wcscat (in: _Dest=0x3f3c6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.354] wcscat (in: _Dest=0x3f3c6d0, _Source="HH01875_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" [0203.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0203.355] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6774a00, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6774a00, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0203.355] wcscmp (_String1="HH01923_.WMF", _String2=".") returned 1 [0203.355] wcscmp (_String1="HH01923_.WMF", _String2="..") returned 1 [0203.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ecf8 [0203.355] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.355] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.356] wcscat (in: _Dest=0x36ecf8, _Source="HH01923_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" [0203.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ecf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0203.356] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0203.357] wcscmp (_String1="HH02155_.WMF", _String2=".") returned 1 [0203.357] wcscmp (_String1="HH02155_.WMF", _String2="..") returned 1 [0203.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ead8 [0203.357] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.357] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.357] wcscat (in: _Dest=0x36ead8, _Source="HH02155_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" [0203.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0203.364] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd07d9a00, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd07d9a00, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0203.364] wcscmp (_String1="HH02166_.WMF", _String2=".") returned 1 [0203.364] wcscmp (_String1="HH02166_.WMF", _String2="..") returned 1 [0203.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e478 [0203.364] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.364] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.364] wcscat (in: _Dest=0x36e478, _Source="HH02166_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" [0203.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0203.366] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47199800, ftCreationTime.dwHighDateTime=0x1bd4c56, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47199800, ftLastWriteTime.dwHighDateTime=0x1bd4c56, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0203.366] wcscmp (_String1="HH02282_.WMF", _String2=".") returned 1 [0203.366] wcscmp (_String1="HH02282_.WMF", _String2="..") returned 1 [0203.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e588 [0203.366] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.366] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.366] wcscat (in: _Dest=0x36e588, _Source="HH02282_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" [0203.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0203.367] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4da7600, ftCreationTime.dwHighDateTime=0x1bd4c59, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf4da7600, ftLastWriteTime.dwHighDateTime=0x1bd4c59, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0203.367] wcscmp (_String1="HH02298_.WMF", _String2=".") returned 1 [0203.367] wcscmp (_String1="HH02298_.WMF", _String2="..") returned 1 [0203.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36fc60 [0203.367] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.367] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.367] wcscat (in: _Dest=0x36fc60, _Source="HH02298_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" [0203.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0203.369] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69022300, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69022300, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0203.369] wcscmp (_String1="HH02312_.WMF", _String2=".") returned 1 [0203.369] wcscmp (_String1="HH02312_.WMF", _String2="..") returned 1 [0203.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e830 [0203.369] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.369] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.369] wcscat (in: _Dest=0x36e830, _Source="HH02312_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" [0203.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0203.371] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d3d200, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x88bc7f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x29d3d200, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0203.371] wcscmp (_String1="HH02313_.WMF", _String2=".") returned 1 [0203.371] wcscmp (_String1="HH02313_.WMF", _String2="..") returned 1 [0203.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ed80 [0203.371] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.371] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.371] wcscat (in: _Dest=0x36ed80, _Source="HH02313_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" [0203.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0203.652] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed850100, ftCreationTime.dwHighDateTime=0x1bf0b4c, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed850100, ftLastWriteTime.dwHighDateTime=0x1bf0b4c, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0203.652] wcscmp (_String1="HM00005_.WMF", _String2=".") returned 1 [0203.653] wcscmp (_String1="HM00005_.WMF", _String2="..") returned 1 [0203.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36f3e0 [0203.653] wcscpy (in: _Dest=0x36f3e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.653] wcscat (in: _Dest=0x36f3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.653] wcscat (in: _Dest=0x36f3e0, _Source="HM00005_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" [0203.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0203.654] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d2a700, ftCreationTime.dwHighDateTime=0x1bd4b98, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d2a700, ftLastWriteTime.dwHighDateTime=0x1bd4b98, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0203.654] wcscmp (_String1="HM00114_.WMF", _String2=".") returned 1 [0203.654] wcscmp (_String1="HM00114_.WMF", _String2="..") returned 1 [0203.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0203.654] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.654] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.654] wcscat (in: _Dest=0x36e500, _Source="HM00114_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" [0203.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0203.655] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f53ee00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f53ee00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0203.655] wcscmp (_String1="HM00116_.WMF", _String2=".") returned 1 [0203.655] wcscmp (_String1="HM00116_.WMF", _String2="..") returned 1 [0203.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bd50 [0203.655] wcscpy (in: _Dest=0x3e1bd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.655] wcscat (in: _Dest=0x3e1bd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.655] wcscat (in: _Dest=0x3e1bd50, _Source="HM00116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" [0203.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0203.656] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1242100, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1242100, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0203.656] wcscmp (_String1="HM00172_.WMF", _String2=".") returned 1 [0203.656] wcscmp (_String1="HM00172_.WMF", _String2="..") returned 1 [0203.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ca10 [0203.657] wcscpy (in: _Dest=0x3e1ca10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.657] wcscat (in: _Dest=0x3e1ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.657] wcscat (in: _Dest=0x3e1ca10, _Source="HM00172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" [0203.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0203.658] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c75e300, ftCreationTime.dwHighDateTime=0x1bf3c3d, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c75e300, ftLastWriteTime.dwHighDateTime=0x1bf3c3d, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0203.658] wcscmp (_String1="HM00426_.WMF", _String2=".") returned 1 [0203.658] wcscmp (_String1="HM00426_.WMF", _String2="..") returned 1 [0203.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ced8 [0203.658] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.658] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.658] wcscat (in: _Dest=0x3e1ced8, _Source="HM00426_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" [0203.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0203.659] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0203.659] wcscmp (_String1="HTECH_01.MID", _String2=".") returned 1 [0203.659] wcscmp (_String1="HTECH_01.MID", _String2="..") returned 1 [0203.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1b888 [0203.659] wcscpy (in: _Dest=0x3e1b888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.659] wcscat (in: _Dest=0x3e1b888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.659] wcscat (in: _Dest=0x3e1b888, _Source="HTECH_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" [0203.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1b888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0203.660] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146cc00, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x146cc00, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0203.660] wcscmp (_String1="IN00046_.WMF", _String2=".") returned 1 [0203.660] wcscmp (_String1="IN00046_.WMF", _String2="..") returned 1 [0203.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ba20 [0203.660] wcscpy (in: _Dest=0x3e1ba20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.661] wcscat (in: _Dest=0x3e1ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.661] wcscat (in: _Dest=0x3e1ba20, _Source="IN00046_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" [0203.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0203.662] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb628bb00, ftCreationTime.dwHighDateTime=0x1bd4b88, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb628bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b88, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0203.662] wcscmp (_String1="IN00118_.WMF", _String2=".") returned 1 [0203.662] wcscmp (_String1="IN00118_.WMF", _String2="..") returned 1 [0203.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1cd40 [0203.662] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.662] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.662] wcscat (in: _Dest=0x3e1cd40, _Source="IN00118_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" [0203.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1cd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0203.663] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa99f6500, ftCreationTime.dwHighDateTime=0x1bd4b7e, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa99f6500, ftLastWriteTime.dwHighDateTime=0x1bd4b7e, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0203.663] wcscmp (_String1="IN00177_.WMF", _String2=".") returned 1 [0203.663] wcscmp (_String1="IN00177_.WMF", _String2="..") returned 1 [0203.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bdd8 [0203.663] wcscpy (in: _Dest=0x3e1bdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.663] wcscat (in: _Dest=0x3e1bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.663] wcscat (in: _Dest=0x3e1bdd8, _Source="IN00177_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" [0203.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0203.664] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd23d900, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd23d900, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0203.664] wcscmp (_String1="IN00204_.WMF", _String2=".") returned 1 [0203.664] wcscmp (_String1="IN00204_.WMF", _String2="..") returned 1 [0203.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3063428 [0203.665] wcscpy (in: _Dest=0x3063428, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.665] wcscat (in: _Dest=0x3063428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.665] wcscat (in: _Dest=0x3063428, _Source="IN00204_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" [0203.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3063428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0203.666] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e22c100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e22c100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0203.666] wcscmp (_String1="IN00233_.WMF", _String2=".") returned 1 [0203.666] wcscmp (_String1="IN00233_.WMF", _String2="..") returned 1 [0203.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062a10 [0203.666] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.666] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.666] wcscat (in: _Dest=0x3062a10, _Source="IN00233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" [0203.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0203.668] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b776b00, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b776b00, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0203.668] wcscmp (_String1="IN00343_.WMF", _String2=".") returned 1 [0203.668] wcscmp (_String1="IN00343_.WMF", _String2="..") returned 1 [0203.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3061f70 [0203.668] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0203.668] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0203.669] wcscat (in: _Dest=0x3061f70, _Source="IN00343_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" [0203.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0203.670] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b2b700, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56b2b700, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0204.347] wcscmp (_String1="IN00346_.WMF", _String2=".") returned 1 [0204.347] wcscmp (_String1="IN00346_.WMF", _String2="..") returned 1 [0204.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ba20 [0204.347] wcscpy (in: _Dest=0x3e1ba20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.347] wcscat (in: _Dest=0x3e1ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.347] wcscat (in: _Dest=0x3e1ba20, _Source="IN00346_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" [0204.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0204.982] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8ba900, ftCreationTime.dwHighDateTime=0x1bd4b58, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f8ba900, ftLastWriteTime.dwHighDateTime=0x1bd4b58, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0204.982] wcscmp (_String1="IN00351_.WMF", _String2=".") returned 1 [0204.982] wcscmp (_String1="IN00351_.WMF", _String2="..") returned 1 [0204.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1cd40 [0204.983] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.983] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.983] wcscat (in: _Dest=0x3e1cd40, _Source="IN00351_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" [0204.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1cd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0204.984] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46233f00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46233f00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0204.984] wcscmp (_String1="IN00557_.WMF", _String2=".") returned 1 [0204.984] wcscmp (_String1="IN00557_.WMF", _String2="..") returned 1 [0204.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bdd8 [0204.984] wcscpy (in: _Dest=0x3e1bdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.984] wcscat (in: _Dest=0x3e1bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.984] wcscat (in: _Dest=0x3e1bdd8, _Source="IN00557_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" [0204.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0204.986] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81d00000, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81d00000, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0204.986] wcscmp (_String1="IN00915_.WMF", _String2=".") returned 1 [0204.986] wcscmp (_String1="IN00915_.WMF", _String2="..") returned 1 [0204.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bd50 [0204.986] wcscpy (in: _Dest=0x3e1bd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.986] wcscat (in: _Dest=0x3e1bd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.986] wcscat (in: _Dest=0x3e1bd50, _Source="IN00915_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" [0204.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0204.987] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa58100, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa58100, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0204.987] wcscmp (_String1="IN00919_.WMF", _String2=".") returned 1 [0204.987] wcscmp (_String1="IN00919_.WMF", _String2="..") returned 1 [0204.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ca10 [0204.987] wcscpy (in: _Dest=0x3e1ca10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.987] wcscat (in: _Dest=0x3e1ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.987] wcscat (in: _Dest=0x3e1ca10, _Source="IN00919_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" [0204.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0204.988] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9ec00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa9ec00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0204.988] wcscmp (_String1="IN00956_.WMF", _String2=".") returned 1 [0204.988] wcscmp (_String1="IN00956_.WMF", _String2="..") returned 1 [0204.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ced8 [0204.989] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.989] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.989] wcscat (in: _Dest=0x3e1ced8, _Source="IN00956_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" [0204.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0204.990] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97432b00, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97432b00, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0204.990] wcscmp (_String1="IN00957_.WMF", _String2=".") returned 1 [0204.990] wcscmp (_String1="IN00957_.WMF", _String2="..") returned 1 [0204.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1b888 [0204.990] wcscpy (in: _Dest=0x3e1b888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.990] wcscat (in: _Dest=0x3e1b888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.990] wcscat (in: _Dest=0x3e1b888, _Source="IN00957_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" [0204.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1b888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0204.991] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0204.991] wcscmp (_String1="INDST_01.MID", _String2=".") returned 1 [0204.991] wcscmp (_String1="INDST_01.MID", _String2="..") returned 1 [0204.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3063428 [0204.991] wcscpy (in: _Dest=0x3063428, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.991] wcscat (in: _Dest=0x3063428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.991] wcscat (in: _Dest=0x3063428, _Source="INDST_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" [0204.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3063428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0204.993] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22cfe900, ftCreationTime.dwHighDateTime=0x1bd63c5, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x22cfe900, ftLastWriteTime.dwHighDateTime=0x1bd63c5, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0204.993] wcscmp (_String1="J0075478.GIF", _String2=".") returned 1 [0204.993] wcscmp (_String1="J0075478.GIF", _String2="..") returned 1 [0204.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062a10 [0204.993] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.993] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.993] wcscat (in: _Dest=0x3062a10, _Source="J0075478.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" [0204.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0204.995] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0204.995] wcscmp (_String1="J0086384.WMF", _String2=".") returned 1 [0204.995] wcscmp (_String1="J0086384.WMF", _String2="..") returned 1 [0204.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3061f70 [0204.995] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.995] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.995] wcscat (in: _Dest=0x3061f70, _Source="J0086384.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" [0204.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0204.996] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0204.996] wcscmp (_String1="J0086420.WMF", _String2=".") returned 1 [0204.996] wcscmp (_String1="J0086420.WMF", _String2="..") returned 1 [0204.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30633a0 [0204.996] wcscpy (in: _Dest=0x30633a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.996] wcscat (in: _Dest=0x30633a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.996] wcscat (in: _Dest=0x30633a0, _Source="J0086420.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" [0204.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30633a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0204.997] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0204.997] wcscmp (_String1="J0086424.WMF", _String2=".") returned 1 [0204.997] wcscmp (_String1="J0086424.WMF", _String2="..") returned 1 [0204.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062c30 [0204.998] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.998] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.998] wcscat (in: _Dest=0x3062c30, _Source="J0086424.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" [0204.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0204.999] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0204.999] wcscmp (_String1="J0086426.WMF", _String2=".") returned 1 [0204.999] wcscmp (_String1="J0086426.WMF", _String2="..") returned 1 [0204.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062988 [0204.999] wcscpy (in: _Dest=0x3062988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0204.999] wcscat (in: _Dest=0x3062988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0204.999] wcscat (in: _Dest=0x3062988, _Source="J0086426.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" [0204.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0205.000] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0205.000] wcscmp (_String1="J0086428.WMF", _String2=".") returned 1 [0205.000] wcscmp (_String1="J0086428.WMF", _String2="..") returned 1 [0205.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68c40 [0205.000] wcscpy (in: _Dest=0x7a68c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.000] wcscat (in: _Dest=0x7a68c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.000] wcscat (in: _Dest=0x7a68c40, _Source="J0086428.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" [0205.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0205.001] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0205.001] wcscmp (_String1="J0086432.WMF", _String2=".") returned 1 [0205.001] wcscmp (_String1="J0086432.WMF", _String2="..") returned 1 [0205.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68b30 [0205.002] wcscpy (in: _Dest=0x7a68b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.002] wcscat (in: _Dest=0x7a68b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.002] wcscat (in: _Dest=0x7a68b30, _Source="J0086432.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" [0205.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0205.003] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0205.003] wcscmp (_String1="J0086478.WMF", _String2=".") returned 1 [0205.003] wcscmp (_String1="J0086478.WMF", _String2="..") returned 1 [0205.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68e60 [0205.003] wcscpy (in: _Dest=0x7a68e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.003] wcscat (in: _Dest=0x7a68e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.003] wcscat (in: _Dest=0x7a68e60, _Source="J0086478.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" [0205.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0205.004] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0205.004] wcscmp (_String1="J0089945.WMF", _String2=".") returned 1 [0205.004] wcscmp (_String1="J0089945.WMF", _String2="..") returned 1 [0205.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ba8 [0205.004] wcscpy (in: _Dest=0x7a69ba8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.004] wcscat (in: _Dest=0x7a69ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.004] wcscat (in: _Dest=0x7a69ba8, _Source="J0089945.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" [0205.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0205.005] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0205.006] wcscmp (_String1="J0089992.WMF", _String2=".") returned 1 [0205.006] wcscmp (_String1="J0089992.WMF", _String2="..") returned 1 [0205.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69900 [0205.006] wcscpy (in: _Dest=0x7a69900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.006] wcscat (in: _Dest=0x7a69900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.006] wcscat (in: _Dest=0x7a69900, _Source="J0089992.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" [0205.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0205.007] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0205.007] wcscmp (_String1="J0090027.WMF", _String2=".") returned 1 [0205.007] wcscmp (_String1="J0090027.WMF", _String2="..") returned 1 [0205.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68aa8 [0205.007] wcscpy (in: _Dest=0x7a68aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.007] wcscat (in: _Dest=0x7a68aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.007] wcscat (in: _Dest=0x7a68aa8, _Source="J0090027.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" [0205.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0205.008] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0205.008] wcscmp (_String1="J0090087.WMF", _String2=".") returned 1 [0205.008] wcscmp (_String1="J0090087.WMF", _String2="..") returned 1 [0205.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69a98 [0205.009] wcscpy (in: _Dest=0x7a69a98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.009] wcscat (in: _Dest=0x7a69a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.009] wcscat (in: _Dest=0x7a69a98, _Source="J0090087.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" [0205.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0205.010] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0205.010] wcscmp (_String1="J0090089.WMF", _String2=".") returned 1 [0205.010] wcscmp (_String1="J0090089.WMF", _String2="..") returned 1 [0205.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69438 [0205.010] wcscpy (in: _Dest=0x7a69438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.010] wcscat (in: _Dest=0x7a69438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.010] wcscat (in: _Dest=0x7a69438, _Source="J0090089.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" [0205.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0205.011] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0205.011] wcscmp (_String1="J0090149.WMF", _String2=".") returned 1 [0205.011] wcscmp (_String1="J0090149.WMF", _String2="..") returned 1 [0205.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68cc8 [0205.011] wcscpy (in: _Dest=0x7a68cc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.011] wcscat (in: _Dest=0x7a68cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.011] wcscat (in: _Dest=0x7a68cc8, _Source="J0090149.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" [0205.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0205.013] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0205.013] wcscmp (_String1="J0090390.WMF", _String2=".") returned 1 [0205.013] wcscmp (_String1="J0090390.WMF", _String2="..") returned 1 [0205.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69328 [0205.013] wcscpy (in: _Dest=0x7a69328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.013] wcscat (in: _Dest=0x7a69328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.013] wcscat (in: _Dest=0x7a69328, _Source="J0090390.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" [0205.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0205.014] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd20ba900, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd20ba900, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0205.014] wcscmp (_String1="J0090777.WMF", _String2=".") returned 1 [0205.014] wcscmp (_String1="J0090777.WMF", _String2="..") returned 1 [0205.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68888 [0205.014] wcscpy (in: _Dest=0x7a68888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.014] wcscat (in: _Dest=0x7a68888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.015] wcscat (in: _Dest=0x7a68888, _Source="J0090777.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" [0205.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0205.016] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33cd600, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd33cd600, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0205.016] wcscmp (_String1="J0090779.WMF", _String2=".") returned 1 [0205.016] wcscmp (_String1="J0090779.WMF", _String2="..") returned 1 [0205.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68338 [0205.016] wcscpy (in: _Dest=0x7a68338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.016] wcscat (in: _Dest=0x7a68338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.016] wcscat (in: _Dest=0x7a68338, _Source="J0090779.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" [0205.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0205.017] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33cd600, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd33cd600, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0205.017] wcscmp (_String1="J0090781.WMF", _String2=".") returned 1 [0205.017] wcscmp (_String1="J0090781.WMF", _String2="..") returned 1 [0205.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68a20 [0205.017] wcscpy (in: _Dest=0x7a68a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.017] wcscat (in: _Dest=0x7a68a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.017] wcscat (in: _Dest=0x7a68a20, _Source="J0090781.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" [0205.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0205.018] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33cd600, ftCreationTime.dwHighDateTime=0x1bd6d51, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd33cd600, ftLastWriteTime.dwHighDateTime=0x1bd6d51, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0205.018] wcscmp (_String1="J0090783.WMF", _String2=".") returned 1 [0205.018] wcscmp (_String1="J0090783.WMF", _String2="..") returned 1 [0205.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68bb8 [0205.019] wcscpy (in: _Dest=0x7a68bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.019] wcscat (in: _Dest=0x7a68bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.019] wcscat (in: _Dest=0x7a68bb8, _Source="J0090783.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" [0205.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0205.020] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0205.020] wcscmp (_String1="J0093905.WMF", _String2=".") returned 1 [0205.020] wcscmp (_String1="J0093905.WMF", _String2="..") returned 1 [0205.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69e50 [0205.020] wcscpy (in: _Dest=0x7a69e50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.020] wcscat (in: _Dest=0x7a69e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.020] wcscat (in: _Dest=0x7a69e50, _Source="J0093905.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" [0205.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0205.021] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0205.021] wcscmp (_String1="J0098497.WMF", _String2=".") returned 1 [0205.021] wcscmp (_String1="J0098497.WMF", _String2="..") returned 1 [0205.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69dc8 [0205.021] wcscpy (in: _Dest=0x7a69dc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.021] wcscat (in: _Dest=0x7a69dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.021] wcscat (in: _Dest=0x7a69dc8, _Source="J0098497.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" [0205.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0205.023] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0205.023] wcscmp (_String1="J0099145.JPG", _String2=".") returned 1 [0205.023] wcscmp (_String1="J0099145.JPG", _String2="..") returned 1 [0205.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ff8 [0205.023] wcscpy (in: _Dest=0x7a68ff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.023] wcscat (in: _Dest=0x7a68ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.023] wcscat (in: _Dest=0x7a68ff8, _Source="J0099145.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" [0205.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0205.116] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0205.116] wcscmp (_String1="J0099146.WMF", _String2=".") returned 1 [0205.116] wcscmp (_String1="J0099146.WMF", _String2="..") returned 1 [0205.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1cd40 [0205.116] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.116] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.116] wcscat (in: _Dest=0x3e1cd40, _Source="J0099146.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" [0205.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1cd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0205.118] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0205.118] wcscmp (_String1="J0099147.JPG", _String2=".") returned 1 [0205.118] wcscmp (_String1="J0099147.JPG", _String2="..") returned 1 [0205.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ba20 [0205.118] wcscpy (in: _Dest=0x3e1ba20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.118] wcscat (in: _Dest=0x3e1ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.118] wcscat (in: _Dest=0x3e1ba20, _Source="J0099147.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" [0205.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0205.119] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0205.119] wcscmp (_String1="J0099148.JPG", _String2=".") returned 1 [0205.119] wcscmp (_String1="J0099148.JPG", _String2="..") returned 1 [0205.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68f70 [0205.119] wcscpy (in: _Dest=0x7a68f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.119] wcscat (in: _Dest=0x7a68f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.119] wcscat (in: _Dest=0x7a68f70, _Source="J0099148.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" [0205.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0205.120] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0205.121] wcscmp (_String1="J0099149.WMF", _String2=".") returned 1 [0205.121] wcscmp (_String1="J0099149.WMF", _String2="..") returned 1 [0205.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69d40 [0205.121] wcscpy (in: _Dest=0x7a69d40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.121] wcscat (in: _Dest=0x7a69d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.121] wcscat (in: _Dest=0x7a69d40, _Source="J0099149.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" [0205.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0205.122] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0205.555] wcscmp (_String1="J0099150.JPG", _String2=".") returned 1 [0205.556] wcscmp (_String1="J0099150.JPG", _String2="..") returned 1 [0205.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a693b0 [0205.556] wcscpy (in: _Dest=0x7a693b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.556] wcscat (in: _Dest=0x7a693b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.556] wcscat (in: _Dest=0x7a693b0, _Source="J0099150.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" [0205.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a693b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0205.557] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0205.557] wcscmp (_String1="J0099151.WMF", _String2=".") returned 1 [0205.557] wcscmp (_String1="J0099151.WMF", _String2="..") returned 1 [0205.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69b20 [0205.557] wcscpy (in: _Dest=0x7a69b20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.557] wcscat (in: _Dest=0x7a69b20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.557] wcscat (in: _Dest=0x7a69b20, _Source="J0099151.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" [0205.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0205.558] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0205.558] wcscmp (_String1="J0099152.JPG", _String2=".") returned 1 [0205.558] wcscmp (_String1="J0099152.JPG", _String2="..") returned 1 [0205.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a694c0 [0205.558] wcscpy (in: _Dest=0x7a694c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.558] wcscat (in: _Dest=0x7a694c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.558] wcscat (in: _Dest=0x7a694c0, _Source="J0099152.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" [0205.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a694c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0205.559] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0205.559] wcscmp (_String1="J0099153.WMF", _String2=".") returned 1 [0205.559] wcscmp (_String1="J0099153.WMF", _String2="..") returned 1 [0205.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69988 [0205.559] wcscpy (in: _Dest=0x7a69988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.559] wcscat (in: _Dest=0x7a69988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.559] wcscat (in: _Dest=0x7a69988, _Source="J0099153.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" [0205.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0205.560] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0205.560] wcscmp (_String1="J0099154.JPG", _String2=".") returned 1 [0205.560] wcscmp (_String1="J0099154.JPG", _String2="..") returned 1 [0205.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a686f0 [0205.561] wcscpy (in: _Dest=0x7a686f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.561] wcscat (in: _Dest=0x7a686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.561] wcscat (in: _Dest=0x7a686f0, _Source="J0099154.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" [0205.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0205.562] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0205.562] wcscmp (_String1="J0099155.JPG", _String2=".") returned 1 [0205.562] wcscmp (_String1="J0099155.JPG", _String2="..") returned 1 [0205.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a697f0 [0205.562] wcscpy (in: _Dest=0x7a697f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.562] wcscat (in: _Dest=0x7a697f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.562] wcscat (in: _Dest=0x7a697f0, _Source="J0099155.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" [0205.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a697f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0205.588] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0205.588] wcscmp (_String1="J0099156.JPG", _String2=".") returned 1 [0205.588] wcscmp (_String1="J0099156.JPG", _String2="..") returned 1 [0205.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a684d0 [0205.589] wcscpy (in: _Dest=0x7a684d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.589] wcscat (in: _Dest=0x7a684d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.589] wcscat (in: _Dest=0x7a684d0, _Source="J0099156.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" [0205.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a684d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0205.590] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0205.590] wcscmp (_String1="J0099157.JPG", _String2=".") returned 1 [0205.590] wcscmp (_String1="J0099157.JPG", _String2="..") returned 1 [0205.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68090 [0205.591] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.591] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.591] wcscat (in: _Dest=0x7a68090, _Source="J0099157.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" [0205.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0205.592] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0205.592] wcscmp (_String1="J0099158.WMF", _String2=".") returned 1 [0205.592] wcscmp (_String1="J0099158.WMF", _String2="..") returned 1 [0205.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a695d0 [0205.592] wcscpy (in: _Dest=0x7a695d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.592] wcscat (in: _Dest=0x7a695d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.592] wcscat (in: _Dest=0x7a695d0, _Source="J0099158.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" [0205.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a695d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0205.599] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0205.599] wcscmp (_String1="J0099159.WMF", _String2=".") returned 1 [0205.599] wcscmp (_String1="J0099159.WMF", _String2="..") returned 1 [0205.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68800 [0205.599] wcscpy (in: _Dest=0x7a68800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.599] wcscat (in: _Dest=0x7a68800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.599] wcscat (in: _Dest=0x7a68800, _Source="J0099159.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" [0205.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0205.600] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3c32d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0205.600] wcscmp (_String1="J0099160.JPG", _String2=".") returned 1 [0205.600] wcscmp (_String1="J0099160.JPG", _String2="..") returned 1 [0205.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69658 [0205.600] wcscpy (in: _Dest=0x7a69658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.600] wcscat (in: _Dest=0x7a69658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.600] wcscat (in: _Dest=0x7a69658, _Source="J0099160.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" [0205.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0205.601] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0205.601] wcscmp (_String1="J0099161.JPG", _String2=".") returned 1 [0205.601] wcscmp (_String1="J0099161.JPG", _String2="..") returned 1 [0205.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68d50 [0205.601] wcscpy (in: _Dest=0x7a68d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.601] wcscat (in: _Dest=0x7a68d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.602] wcscat (in: _Dest=0x7a68d50, _Source="J0099161.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" [0205.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0205.605] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0205.605] wcscmp (_String1="J0099162.JPG", _String2=".") returned 1 [0205.605] wcscmp (_String1="J0099162.JPG", _String2="..") returned 1 [0205.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ed8 [0205.605] wcscpy (in: _Dest=0x7a69ed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.605] wcscat (in: _Dest=0x7a69ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.605] wcscat (in: _Dest=0x7a69ed8, _Source="J0099162.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" [0205.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0205.606] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0205.606] wcscmp (_String1="J0099163.WMF", _String2=".") returned 1 [0205.606] wcscmp (_String1="J0099163.WMF", _String2="..") returned 1 [0205.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a696e0 [0205.607] wcscpy (in: _Dest=0x7a696e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.607] wcscat (in: _Dest=0x7a696e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.607] wcscat (in: _Dest=0x7a696e0, _Source="J0099163.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" [0205.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a696e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c [0205.608] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b902150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0205.608] wcscmp (_String1="J0099164.WMF", _String2=".") returned 1 [0205.608] wcscmp (_String1="J0099164.WMF", _String2="..") returned 1 [0205.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a681a0 [0205.608] wcscpy (in: _Dest=0x7a681a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.608] wcscat (in: _Dest=0x7a681a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.608] wcscat (in: _Dest=0x7a681a0, _Source="J0099164.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" [0205.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a681a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0205.609] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0205.609] wcscmp (_String1="J0099165.JPG", _String2=".") returned 1 [0205.609] wcscmp (_String1="J0099165.JPG", _String2="..") returned 1 [0205.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a683c0 [0205.610] wcscpy (in: _Dest=0x7a683c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.610] wcscat (in: _Dest=0x7a683c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.631] wcscat (in: _Dest=0x7a683c0, _Source="J0099165.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" [0205.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a683c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0205.632] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0205.632] wcscmp (_String1="J0099166.JPG", _String2=".") returned 1 [0205.632] wcscmp (_String1="J0099166.JPG", _String2="..") returned 1 [0205.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68228 [0205.633] wcscpy (in: _Dest=0x7a68228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.633] wcscat (in: _Dest=0x7a68228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.633] wcscat (in: _Dest=0x7a68228, _Source="J0099166.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" [0205.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0205.634] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0205.634] wcscmp (_String1="J0099167.JPG", _String2=".") returned 1 [0205.634] wcscmp (_String1="J0099167.JPG", _String2="..") returned 1 [0205.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a682b0 [0205.635] wcscpy (in: _Dest=0x7a682b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.635] wcscat (in: _Dest=0x7a682b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.635] wcscat (in: _Dest=0x7a682b0, _Source="J0099167.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" [0205.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a682b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0205.683] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0205.683] wcscmp (_String1="J0099168.JPG", _String2=".") returned 1 [0205.683] wcscmp (_String1="J0099168.JPG", _String2="..") returned 1 [0205.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69878 [0205.683] wcscpy (in: _Dest=0x7a69878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.683] wcscat (in: _Dest=0x7a69878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.683] wcscat (in: _Dest=0x7a69878, _Source="J0099168.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" [0205.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ac [0205.684] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0205.684] wcscmp (_String1="J0099169.WMF", _String2=".") returned 1 [0205.684] wcscmp (_String1="J0099169.WMF", _String2="..") returned 1 [0205.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68118 [0205.685] wcscpy (in: _Dest=0x7a68118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.685] wcscat (in: _Dest=0x7a68118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.685] wcscat (in: _Dest=0x7a68118, _Source="J0099169.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" [0205.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0205.686] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0205.686] wcscmp (_String1="J0099170.WMF", _String2=".") returned 1 [0205.686] wcscmp (_String1="J0099170.WMF", _String2="..") returned 1 [0205.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68778 [0205.686] wcscpy (in: _Dest=0x7a68778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.686] wcscat (in: _Dest=0x7a68778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.686] wcscat (in: _Dest=0x7a68778, _Source="J0099170.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" [0205.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0205.687] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0205.687] wcscmp (_String1="J0099171.WMF", _String2=".") returned 1 [0205.687] wcscmp (_String1="J0099171.WMF", _String2="..") returned 1 [0205.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0205.687] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.687] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.688] wcscat (in: _Dest=0x3eb9670, _Source="J0099171.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" [0205.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0205.689] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0205.689] wcscmp (_String1="J0099172.WMF", _String2=".") returned 1 [0205.689] wcscmp (_String1="J0099172.WMF", _String2="..") returned 1 [0205.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0205.689] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.689] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.689] wcscat (in: _Dest=0x3eb9b38, _Source="J0099172.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" [0205.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0205.690] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b3e9430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0205.690] wcscmp (_String1="J0099173.WMF", _String2=".") returned 1 [0205.690] wcscmp (_String1="J0099173.WMF", _String2="..") returned 1 [0205.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba330 [0205.691] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.691] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.691] wcscat (in: _Dest=0x3eba330, _Source="J0099173.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" [0205.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fac [0205.692] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0205.692] wcscmp (_String1="J0099174.WMF", _String2=".") returned 1 [0205.692] wcscmp (_String1="J0099174.WMF", _String2="..") returned 1 [0205.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0205.692] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.692] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.692] wcscat (in: _Dest=0x3eba220, _Source="J0099174.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" [0205.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08 [0205.693] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0205.693] wcscmp (_String1="J0099175.WMF", _String2=".") returned 1 [0205.693] wcscmp (_String1="J0099175.WMF", _String2="..") returned 1 [0205.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9890 [0205.694] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0205.694] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0205.694] wcscat (in: _Dest=0x3eb9890, _Source="J0099175.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" [0205.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c98 [0206.790] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0206.790] wcscmp (_String1="J0099176.WMF", _String2=".") returned 1 [0206.790] wcscmp (_String1="J0099176.WMF", _String2="..") returned 1 [0206.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cf50 [0206.790] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0206.790] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0206.790] wcscat (in: _Dest=0x3f3cf50, _Source="J0099176.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" [0207.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0207.923] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0207.923] wcscmp (_String1="J0099177.WMF", _String2=".") returned 1 [0207.923] wcscmp (_String1="J0099177.WMF", _String2="..") returned 1 [0207.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d1f8 [0207.923] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.923] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.923] wcscat (in: _Dest=0x3f3d1f8, _Source="J0099177.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" [0207.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0207.925] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0207.925] wcscmp (_String1="J0099178.WMF", _String2=".") returned 1 [0207.925] wcscmp (_String1="J0099178.WMF", _String2="..") returned 1 [0207.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d6c0 [0207.925] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.925] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.925] wcscat (in: _Dest=0x3f3d6c0, _Source="J0099178.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" [0207.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0207.927] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0207.927] wcscmp (_String1="J0099179.WMF", _String2=".") returned 1 [0207.927] wcscmp (_String1="J0099179.WMF", _String2="..") returned 1 [0207.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cc20 [0207.927] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.927] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.927] wcscat (in: _Dest=0x3f3cc20, _Source="J0099179.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" [0207.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e0 [0207.929] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0207.929] wcscmp (_String1="J0099180.WMF", _String2=".") returned 1 [0207.929] wcscmp (_String1="J0099180.WMF", _String2="..") returned 1 [0207.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c180 [0207.929] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.929] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.929] wcscat (in: _Dest=0x3f3c180, _Source="J0099180.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" [0207.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0207.930] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0207.930] wcscmp (_String1="J0099181.WMF", _String2=".") returned 1 [0207.930] wcscmp (_String1="J0099181.WMF", _String2="..") returned 1 [0207.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0207.930] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.930] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.930] wcscat (in: _Dest=0x3f3d280, _Source="J0099181.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" [0207.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0207.932] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0207.932] wcscmp (_String1="J0099182.WMF", _String2=".") returned 1 [0207.932] wcscmp (_String1="J0099182.WMF", _String2="..") returned 1 [0207.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0207.932] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.932] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.932] wcscat (in: _Dest=0x3f3cd30, _Source="J0099182.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" [0207.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0207.933] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0207.933] wcscmp (_String1="J0099183.WMF", _String2=".") returned 1 [0207.933] wcscmp (_String1="J0099183.WMF", _String2="..") returned 1 [0207.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cdb8 [0207.933] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.934] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.934] wcscat (in: _Dest=0x3f3cdb8, _Source="J0099183.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" [0207.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0207.935] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0207.940] wcscmp (_String1="J0099184.WMF", _String2=".") returned 1 [0207.940] wcscmp (_String1="J0099184.WMF", _String2="..") returned 1 [0207.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c7e0 [0207.940] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0207.940] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0207.941] wcscat (in: _Dest=0x3f3c7e0, _Source="J0099184.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" [0210.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0210.640] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0210.640] wcscmp (_String1="J0099185.JPG", _String2=".") returned 1 [0210.640] wcscmp (_String1="J0099185.JPG", _String2="..") returned 1 [0210.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c180 [0210.640] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.640] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.640] wcscat (in: _Dest=0x3f3c180, _Source="J0099185.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" [0210.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0210.642] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad71cf00, ftCreationTime.dwHighDateTime=0x1bdbfd8, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad71cf00, ftLastWriteTime.dwHighDateTime=0x1bdbfd8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0210.642] wcscmp (_String1="J0099186.JPG", _String2=".") returned 1 [0210.642] wcscmp (_String1="J0099186.JPG", _String2="..") returned 1 [0210.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cc20 [0210.642] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.642] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.642] wcscat (in: _Dest=0x3f3cc20, _Source="J0099186.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" [0210.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0210.644] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5199400, ftCreationTime.dwHighDateTime=0x1bdbfd8, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5199400, ftLastWriteTime.dwHighDateTime=0x1bdbfd8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0210.644] wcscmp (_String1="J0099187.JPG", _String2=".") returned 1 [0210.644] wcscmp (_String1="J0099187.JPG", _String2="..") returned 1 [0210.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d6c0 [0210.644] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.644] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.644] wcscat (in: _Dest=0x3f3d6c0, _Source="J0099187.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" [0210.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0210.647] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0210.647] wcscmp (_String1="J0099188.JPG", _String2=".") returned 1 [0210.647] wcscmp (_String1="J0099188.JPG", _String2="..") returned 1 [0210.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d1f8 [0210.647] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.647] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.647] wcscat (in: _Dest=0x3f3d1f8, _Source="J0099188.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" [0210.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0210.649] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0210.649] wcscmp (_String1="J0099189.JPG", _String2=".") returned 1 [0210.649] wcscmp (_String1="J0099189.JPG", _String2="..") returned 1 [0210.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cf50 [0210.649] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.649] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.649] wcscat (in: _Dest=0x3f3cf50, _Source="J0099189.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" [0210.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0210.651] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0210.651] wcscmp (_String1="J0099190.JPG", _String2=".") returned 1 [0210.651] wcscmp (_String1="J0099190.JPG", _String2="..") returned 1 [0210.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c978 [0210.652] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.652] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.652] wcscat (in: _Dest=0x3f3c978, _Source="J0099190.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" [0210.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0210.654] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0210.654] wcscmp (_String1="J0099191.JPG", _String2=".") returned 1 [0210.654] wcscmp (_String1="J0099191.JPG", _String2="..") returned 1 [0210.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0210.654] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.654] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.654] wcscat (in: _Dest=0x3f3bdc8, _Source="J0099191.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" [0210.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0210.656] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0210.656] wcscmp (_String1="J0099192.GIF", _String2=".") returned 1 [0210.656] wcscmp (_String1="J0099192.GIF", _String2="..") returned 1 [0210.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0210.657] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.657] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.657] wcscat (in: _Dest=0x3f3d748, _Source="J0099192.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" [0210.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0210.658] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0210.658] wcscmp (_String1="J0099193.GIF", _String2=".") returned 1 [0210.658] wcscmp (_String1="J0099193.GIF", _String2="..") returned 1 [0210.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d390 [0210.658] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.658] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.658] wcscat (in: _Dest=0x3f3d390, _Source="J0099193.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" [0210.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0210.660] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0210.660] wcscmp (_String1="J0099194.GIF", _String2=".") returned 1 [0210.660] wcscmp (_String1="J0099194.GIF", _String2="..") returned 1 [0210.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d4a0 [0210.660] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.660] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.660] wcscat (in: _Dest=0x3f3d4a0, _Source="J0099194.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" [0210.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0210.662] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0210.662] wcscmp (_String1="J0099195.GIF", _String2=".") returned 1 [0210.662] wcscmp (_String1="J0099195.GIF", _String2="..") returned 1 [0210.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0210.663] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.663] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.663] wcscat (in: _Dest=0x3f3c208, _Source="J0099195.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" [0210.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0210.664] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0210.664] wcscmp (_String1="J0099196.GIF", _String2=".") returned 1 [0210.664] wcscmp (_String1="J0099196.GIF", _String2="..") returned 1 [0210.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d968 [0210.664] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.665] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.665] wcscat (in: _Dest=0x3f3d968, _Source="J0099196.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" [0210.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0210.666] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0210.666] wcscmp (_String1="J0099197.GIF", _String2=".") returned 1 [0210.666] wcscmp (_String1="J0099197.GIF", _String2="..") returned 1 [0210.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0210.667] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.667] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.667] wcscat (in: _Dest=0x3f3c538, _Source="J0099197.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" [0210.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0210.668] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b40f590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0210.668] wcscmp (_String1="J0099198.GIF", _String2=".") returned 1 [0210.668] wcscmp (_String1="J0099198.GIF", _String2="..") returned 1 [0210.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0210.668] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.668] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.669] wcscat (in: _Dest=0x3f3cb10, _Source="J0099198.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" [0210.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0210.671] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0210.671] wcscmp (_String1="J0099199.GIF", _String2=".") returned 1 [0210.672] wcscmp (_String1="J0099199.GIF", _String2="..") returned 1 [0210.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3ca00 [0210.672] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.672] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.672] wcscat (in: _Dest=0x3f3ca00, _Source="J0099199.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" [0210.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0210.673] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0210.673] wcscmp (_String1="J0099200.GIF", _String2=".") returned 1 [0210.673] wcscmp (_String1="J0099200.GIF", _String2="..") returned 1 [0210.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c3a0 [0210.674] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.674] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.674] wcscat (in: _Dest=0x3f3c3a0, _Source="J0099200.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" [0210.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0210.675] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b9282b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0210.675] wcscmp (_String1="J0099201.GIF", _String2=".") returned 1 [0210.675] wcscmp (_String1="J0099201.GIF", _String2="..") returned 1 [0210.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bc30 [0210.675] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.675] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.676] wcscat (in: _Dest=0x3f3bc30, _Source="J0099201.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" [0210.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0210.677] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0210.677] wcscmp (_String1="J0099202.GIF", _String2=".") returned 1 [0210.677] wcscmp (_String1="J0099202.GIF", _String2="..") returned 1 [0210.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c5c0 [0210.677] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.677] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.677] wcscat (in: _Dest=0x3f3c5c0, _Source="J0099202.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" [0210.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0210.678] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0210.678] wcscmp (_String1="J0099203.GIF", _String2=".") returned 1 [0210.678] wcscmp (_String1="J0099203.GIF", _String2="..") returned 1 [0210.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c758 [0210.679] wcscpy (in: _Dest=0x3f3c758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.679] wcscat (in: _Dest=0x3f3c758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.679] wcscat (in: _Dest=0x3f3c758, _Source="J0099203.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" [0210.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0210.680] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0210.680] wcscmp (_String1="J0099204.WMF", _String2=".") returned 1 [0210.680] wcscmp (_String1="J0099204.WMF", _String2="..") returned 1 [0210.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d7d0 [0210.680] wcscpy (in: _Dest=0x3f3d7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.680] wcscat (in: _Dest=0x3f3d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.680] wcscat (in: _Dest=0x3f3d7d0, _Source="J0099204.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" [0210.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0210.682] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500bf800, ftCreationTime.dwHighDateTime=0x1bd32ab, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x500bf800, ftLastWriteTime.dwHighDateTime=0x1bd32ab, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0210.682] wcscmp (_String1="J0099205.WMF", _String2=".") returned 1 [0210.682] wcscmp (_String1="J0099205.WMF", _String2="..") returned 1 [0210.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cec8 [0210.682] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0210.682] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0210.682] wcscat (in: _Dest=0x3f3cec8, _Source="J0099205.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" [0210.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0211.356] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52558e00, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x52558e00, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0211.356] wcscmp (_String1="J0101856.BMP", _String2=".") returned 1 [0211.356] wcscmp (_String1="J0101856.BMP", _String2="..") returned 1 [0211.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bd40 [0211.356] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.356] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.356] wcscat (in: _Dest=0x3f3bd40, _Source="J0101856.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" [0211.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0211.496] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b7e800, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54b7e800, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0211.497] wcscmp (_String1="J0101857.BMP", _String2=".") returned 1 [0211.497] wcscmp (_String1="J0101857.BMP", _String2="..") returned 1 [0211.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c290 [0211.497] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.497] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.497] wcscat (in: _Dest=0x3f3c290, _Source="J0101857.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" [0211.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0211.498] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bdef600, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5bdef600, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0211.499] wcscmp (_String1="J0101858.BMP", _String2=".") returned 1 [0211.499] wcscmp (_String1="J0101858.BMP", _String2="..") returned 1 [0211.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c648 [0211.499] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.499] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.499] wcscat (in: _Dest=0x3f3c648, _Source="J0101858.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" [0211.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0211.500] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a51800, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41a51800, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0211.500] wcscmp (_String1="J0101859.BMP", _String2=".") returned 1 [0211.500] wcscmp (_String1="J0101859.BMP", _String2="..") returned 1 [0211.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d060 [0211.501] wcscpy (in: _Dest=0x3f3d060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.501] wcscat (in: _Dest=0x3f3d060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.501] wcscat (in: _Dest=0x3f3d060, _Source="J0101859.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" [0211.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0211.502] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44077200, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44077200, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0211.502] wcscmp (_String1="J0101860.BMP", _String2=".") returned 1 [0211.502] wcscmp (_String1="J0101860.BMP", _String2="..") returned 1 [0211.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3db00 [0211.502] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.503] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.503] wcscat (in: _Dest=0x3f3db00, _Source="J0101860.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" [0211.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0211.504] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479af900, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x479af900, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0211.504] wcscmp (_String1="J0101861.BMP", _String2=".") returned 1 [0211.504] wcscmp (_String1="J0101861.BMP", _String2="..") returned 1 [0211.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3be50 [0211.504] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.504] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.504] wcscat (in: _Dest=0x3f3be50, _Source="J0101861.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" [0211.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0211.506] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2e8000, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b2e8000, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0211.506] wcscmp (_String1="J0101862.BMP", _String2=".") returned 1 [0211.506] wcscmp (_String1="J0101862.BMP", _String2="..") returned 1 [0211.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c6d0 [0211.506] wcscpy (in: _Dest=0x3f3c6d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.506] wcscat (in: _Dest=0x3f3c6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.506] wcscat (in: _Dest=0x3f3c6d0, _Source="J0101862.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" [0211.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0211.512] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571a4200, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x571a4200, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0211.512] wcscmp (_String1="J0101863.BMP", _String2=".") returned 1 [0211.512] wcscmp (_String1="J0101863.BMP", _String2="..") returned 1 [0211.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bed8 [0211.512] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.512] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.512] wcscat (in: _Dest=0x3f3bed8, _Source="J0101863.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" [0211.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0211.513] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597c9c00, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x597c9c00, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0211.514] wcscmp (_String1="J0101864.BMP", _String2=".") returned 1 [0211.514] wcscmp (_String1="J0101864.BMP", _String2="..") returned 1 [0211.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3da78 [0211.514] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.514] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.514] wcscat (in: _Dest=0x3f3da78, _Source="J0101864.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" [0211.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0211.520] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec20700, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ec20700, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0211.520] wcscmp (_String1="J0101865.BMP", _String2=".") returned 1 [0211.520] wcscmp (_String1="J0101865.BMP", _String2="..") returned 1 [0211.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0211.520] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.520] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.520] wcscat (in: _Dest=0x3eb9670, _Source="J0101865.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" [0211.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0211.522] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff33400, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ff33400, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0211.522] wcscmp (_String1="J0101866.BMP", _String2=".") returned 1 [0211.522] wcscmp (_String1="J0101866.BMP", _String2="..") returned 1 [0211.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9890 [0211.522] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.522] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.522] wcscat (in: _Dest=0x3eb9890, _Source="J0101866.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" [0211.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0211.523] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f42be00, ftCreationTime.dwHighDateTime=0x1bd7392, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f42be00, ftLastWriteTime.dwHighDateTime=0x1bd7392, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0211.523] wcscmp (_String1="J0101867.BMP", _String2=".") returned 1 [0211.523] wcscmp (_String1="J0101867.BMP", _String2="..") returned 1 [0211.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0211.523] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0211.523] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0211.523] wcscat (in: _Dest=0x3eba220, _Source="J0101867.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" [0211.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0211.524] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0212.688] wcscmp (_String1="J0101980.WMF", _String2=".") returned 1 [0212.688] wcscmp (_String1="J0101980.WMF", _String2="..") returned 1 [0212.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9de0 [0212.688] wcscpy (in: _Dest=0x3eb9de0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.688] wcscat (in: _Dest=0x3eb9de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.688] wcscat (in: _Dest=0x3eb9de0, _Source="J0101980.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" [0212.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0212.691] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0212.691] wcscmp (_String1="J0102002.WMF", _String2=".") returned 1 [0212.691] wcscmp (_String1="J0102002.WMF", _String2="..") returned 1 [0212.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9780 [0212.692] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.692] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.692] wcscat (in: _Dest=0x3eb9780, _Source="J0102002.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" [0212.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0212.693] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0212.693] wcscmp (_String1="J0102594.WMF", _String2=".") returned 1 [0212.693] wcscmp (_String1="J0102594.WMF", _String2="..") returned 1 [0212.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f00 [0212.693] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.693] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.693] wcscat (in: _Dest=0x3eb8f00, _Source="J0102594.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" [0212.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0212.694] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0212.694] wcscmp (_String1="J0102762.WMF", _String2=".") returned 1 [0212.694] wcscmp (_String1="J0102762.WMF", _String2="..") returned 1 [0212.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9098 [0212.694] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.694] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.694] wcscat (in: _Dest=0x3eb9098, _Source="J0102762.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" [0212.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0212.695] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b94e410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0212.695] wcscmp (_String1="J0102984.WMF", _String2=".") returned 1 [0212.695] wcscmp (_String1="J0102984.WMF", _String2="..") returned 1 [0212.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9e68 [0212.695] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.695] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.695] wcscat (in: _Dest=0x3eb9e68, _Source="J0102984.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" [0212.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0212.696] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0212.696] wcscmp (_String1="J0103058.WMF", _String2=".") returned 1 [0212.696] wcscmp (_String1="J0103058.WMF", _String2="..") returned 1 [0212.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f88 [0212.696] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.696] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.696] wcscat (in: _Dest=0x3eb8f88, _Source="J0103058.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" [0212.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0212.697] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0212.697] wcscmp (_String1="J0103262.WMF", _String2=".") returned 1 [0212.698] wcscmp (_String1="J0103262.WMF", _String2="..") returned 1 [0212.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9918 [0212.698] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.698] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.698] wcscat (in: _Dest=0x3eb9918, _Source="J0103262.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" [0212.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0212.699] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0212.699] wcscmp (_String1="J0103402.WMF", _String2=".") returned 1 [0212.699] wcscmp (_String1="J0103402.WMF", _String2="..") returned 1 [0212.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9d58 [0212.699] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.699] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.699] wcscat (in: _Dest=0x3eb9d58, _Source="J0103402.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" [0212.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0212.700] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0212.700] wcscmp (_String1="J0103812.WMF", _String2=".") returned 1 [0212.700] wcscmp (_String1="J0103812.WMF", _String2="..") returned 1 [0212.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0212.700] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.700] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.700] wcscat (in: _Dest=0x3eb8b48, _Source="J0103812.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" [0212.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0212.701] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0212.701] wcscmp (_String1="J0103850.WMF", _String2=".") returned 1 [0212.701] wcscmp (_String1="J0103850.WMF", _String2="..") returned 1 [0212.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba440 [0212.701] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.701] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.701] wcscat (in: _Dest=0x3eba440, _Source="J0103850.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" [0212.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0212.702] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0212.702] wcscmp (_String1="J0105230.WMF", _String2=".") returned 1 [0212.702] wcscmp (_String1="J0105230.WMF", _String2="..") returned 1 [0212.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0212.702] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.702] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.702] wcscat (in: _Dest=0x3eb9ef0, _Source="J0105230.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" [0212.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0212.703] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0212.703] wcscmp (_String1="J0105232.WMF", _String2=".") returned 1 [0212.703] wcscmp (_String1="J0105232.WMF", _String2="..") returned 1 [0212.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba3b8 [0212.703] wcscpy (in: _Dest=0x3eba3b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.703] wcscat (in: _Dest=0x3eba3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.703] wcscat (in: _Dest=0x3eba3b8, _Source="J0105232.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" [0212.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0212.704] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0212.704] wcscmp (_String1="J0105234.WMF", _String2=".") returned 1 [0212.704] wcscmp (_String1="J0105234.WMF", _String2="..") returned 1 [0212.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0212.704] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.704] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.704] wcscat (in: _Dest=0x3eb9010, _Source="J0105234.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" [0212.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0212.705] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4356f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0212.705] wcscmp (_String1="J0105238.WMF", _String2=".") returned 1 [0212.705] wcscmp (_String1="J0105238.WMF", _String2="..") returned 1 [0212.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba660 [0212.705] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.705] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.705] wcscat (in: _Dest=0x3eba660, _Source="J0105238.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" [0212.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0212.706] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0212.706] wcscmp (_String1="J0105240.WMF", _String2=".") returned 1 [0212.706] wcscmp (_String1="J0105240.WMF", _String2="..") returned 1 [0212.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0212.706] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.707] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.707] wcscat (in: _Dest=0x3eba770, _Source="J0105240.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" [0212.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0212.709] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0212.709] wcscmp (_String1="J0105244.WMF", _String2=".") returned 1 [0212.709] wcscmp (_String1="J0105244.WMF", _String2="..") returned 1 [0212.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0212.709] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.709] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.709] wcscat (in: _Dest=0x3f3d748, _Source="J0105244.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" [0212.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0212.907] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0212.907] wcscmp (_String1="J0105246.WMF", _String2=".") returned 1 [0212.907] wcscmp (_String1="J0105246.WMF", _String2="..") returned 1 [0212.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0212.908] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0212.908] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0212.908] wcscat (in: _Dest=0x3f3cd30, _Source="J0105246.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" [0216.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0216.007] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0216.008] wcscmp (_String1="J0105250.WMF", _String2=".") returned 1 [0216.008] wcscmp (_String1="J0105250.WMF", _String2="..") returned 1 [0216.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9e68 [0216.008] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.008] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.008] wcscat (in: _Dest=0x3eb9e68, _Source="J0105250.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" [0216.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0216.009] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0216.009] wcscmp (_String1="J0105266.WMF", _String2=".") returned 1 [0216.009] wcscmp (_String1="J0105266.WMF", _String2="..") returned 1 [0216.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9d58 [0216.010] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.010] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.010] wcscat (in: _Dest=0x3eb9d58, _Source="J0105266.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" [0216.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0216.011] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0216.011] wcscmp (_String1="J0105272.WMF", _String2=".") returned 1 [0216.011] wcscmp (_String1="J0105272.WMF", _String2="..") returned 1 [0216.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9120 [0216.011] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.011] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.011] wcscat (in: _Dest=0x3eb9120, _Source="J0105272.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" [0216.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0216.013] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0216.013] wcscmp (_String1="J0105276.WMF", _String2=".") returned 1 [0216.013] wcscmp (_String1="J0105276.WMF", _String2="..") returned 1 [0216.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0216.013] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.013] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.013] wcscat (in: _Dest=0x3eb95e8, _Source="J0105276.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" [0216.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0216.014] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0216.014] wcscmp (_String1="J0105280.WMF", _String2=".") returned 1 [0216.014] wcscmp (_String1="J0105280.WMF", _String2="..") returned 1 [0216.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8d68 [0216.014] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.014] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.015] wcscat (in: _Dest=0x3eb8d68, _Source="J0105280.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" [0216.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0216.015] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0216.015] wcscmp (_String1="J0105282.WMF", _String2=".") returned 1 [0216.015] wcscmp (_String1="J0105282.WMF", _String2="..") returned 1 [0216.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8df0 [0216.016] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.016] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.016] wcscat (in: _Dest=0x3eb8df0, _Source="J0105282.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" [0216.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0216.017] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0216.017] wcscmp (_String1="J0105286.WMF", _String2=".") returned 1 [0216.017] wcscmp (_String1="J0105286.WMF", _String2="..") returned 1 [0216.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb99a0 [0216.017] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.017] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.017] wcscat (in: _Dest=0x3eb99a0, _Source="J0105286.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" [0216.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0216.018] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0216.018] wcscmp (_String1="J0105288.WMF", _String2=".") returned 1 [0216.018] wcscmp (_String1="J0105288.WMF", _String2="..") returned 1 [0216.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0216.018] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.018] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.018] wcscat (in: _Dest=0x3eb9b38, _Source="J0105288.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" [0216.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0216.019] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0216.019] wcscmp (_String1="J0105292.WMF", _String2=".") returned 1 [0216.019] wcscmp (_String1="J0105292.WMF", _String2="..") returned 1 [0216.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba330 [0216.019] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.019] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.019] wcscat (in: _Dest=0x3eba330, _Source="J0105292.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" [0216.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0216.020] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0216.020] wcscmp (_String1="J0105294.WMF", _String2=".") returned 1 [0216.020] wcscmp (_String1="J0105294.WMF", _String2="..") returned 1 [0216.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb91a8 [0216.020] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.020] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.020] wcscat (in: _Dest=0x3eb91a8, _Source="J0105294.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" [0216.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0216.021] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b974570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0216.021] wcscmp (_String1="J0105298.WMF", _String2=".") returned 1 [0216.021] wcscmp (_String1="J0105298.WMF", _String2="..") returned 1 [0216.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0216.022] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.022] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.022] wcscat (in: _Dest=0x3eba2a8, _Source="J0105298.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" [0216.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0216.022] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0216.023] wcscmp (_String1="J0105306.WMF", _String2=".") returned 1 [0216.023] wcscmp (_String1="J0105306.WMF", _String2="..") returned 1 [0216.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0216.023] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.023] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.023] wcscat (in: _Dest=0x3eb8e78, _Source="J0105306.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" [0216.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0216.024] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0216.024] wcscmp (_String1="J0105320.WMF", _String2=".") returned 1 [0216.024] wcscmp (_String1="J0105320.WMF", _String2="..") returned 1 [0216.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0216.024] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.024] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.024] wcscat (in: _Dest=0x3eb9cd0, _Source="J0105320.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" [0216.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0216.025] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0216.025] wcscmp (_String1="J0105328.WMF", _String2=".") returned 1 [0216.025] wcscmp (_String1="J0105328.WMF", _String2="..") returned 1 [0216.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9340 [0216.025] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.025] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.025] wcscat (in: _Dest=0x3eb9340, _Source="J0105328.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" [0216.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0216.026] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0216.026] wcscmp (_String1="J0105332.WMF", _String2=".") returned 1 [0216.026] wcscmp (_String1="J0105332.WMF", _String2="..") returned 1 [0216.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0216.026] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.026] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.026] wcscat (in: _Dest=0x3eb9230, _Source="J0105332.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" [0216.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0216.027] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0216.027] wcscmp (_String1="J0105336.WMF", _String2=".") returned 1 [0216.027] wcscmp (_String1="J0105336.WMF", _String2="..") returned 1 [0216.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9a28 [0216.027] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.027] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.027] wcscat (in: _Dest=0x3eb9a28, _Source="J0105336.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" [0216.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0216.028] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0216.028] wcscmp (_String1="J0105338.WMF", _String2=".") returned 1 [0216.028] wcscmp (_String1="J0105338.WMF", _String2="..") returned 1 [0216.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68778 [0216.028] wcscpy (in: _Dest=0x7a68778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.028] wcscat (in: _Dest=0x7a68778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.028] wcscat (in: _Dest=0x7a68778, _Source="J0105338.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" [0216.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140c [0216.029] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0216.032] wcscmp (_String1="J0105348.WMF", _String2=".") returned 1 [0216.032] wcscmp (_String1="J0105348.WMF", _String2="..") returned 1 [0216.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68118 [0216.032] wcscpy (in: _Dest=0x7a68118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.032] wcscat (in: _Dest=0x7a68118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.032] wcscat (in: _Dest=0x7a68118, _Source="J0105348.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" [0216.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0216.062] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0216.062] wcscmp (_String1="J0105360.WMF", _String2=".") returned 1 [0216.062] wcscmp (_String1="J0105360.WMF", _String2="..") returned 1 [0216.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69878 [0216.062] wcscpy (in: _Dest=0x7a69878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.062] wcscat (in: _Dest=0x7a69878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.062] wcscat (in: _Dest=0x7a69878, _Source="J0105360.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" [0216.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0216.063] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0216.063] wcscmp (_String1="J0105368.WMF", _String2=".") returned 1 [0216.063] wcscmp (_String1="J0105368.WMF", _String2="..") returned 1 [0216.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a682b0 [0216.063] wcscpy (in: _Dest=0x7a682b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.063] wcscat (in: _Dest=0x7a682b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.064] wcscat (in: _Dest=0x7a682b0, _Source="J0105368.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" [0216.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a682b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0216.064] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0216.064] wcscmp (_String1="J0105376.WMF", _String2=".") returned 1 [0216.064] wcscmp (_String1="J0105376.WMF", _String2="..") returned 1 [0216.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68228 [0216.065] wcscpy (in: _Dest=0x7a68228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.065] wcscat (in: _Dest=0x7a68228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.065] wcscat (in: _Dest=0x7a68228, _Source="J0105376.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" [0216.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0216.066] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0216.066] wcscmp (_String1="J0105378.WMF", _String2=".") returned 1 [0216.066] wcscmp (_String1="J0105378.WMF", _String2="..") returned 1 [0216.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a683c0 [0216.066] wcscpy (in: _Dest=0x7a683c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.066] wcscat (in: _Dest=0x7a683c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.066] wcscat (in: _Dest=0x7a683c0, _Source="J0105378.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" [0216.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a683c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0216.095] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0216.095] wcscmp (_String1="J0105380.WMF", _String2=".") returned 1 [0216.095] wcscmp (_String1="J0105380.WMF", _String2="..") returned 1 [0216.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a681a0 [0216.095] wcscpy (in: _Dest=0x7a681a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.095] wcscat (in: _Dest=0x7a681a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.095] wcscat (in: _Dest=0x7a681a0, _Source="J0105380.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" [0216.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a681a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0216.096] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0216.096] wcscmp (_String1="J0105384.WMF", _String2=".") returned 1 [0216.096] wcscmp (_String1="J0105384.WMF", _String2="..") returned 1 [0216.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a696e0 [0216.097] wcscpy (in: _Dest=0x7a696e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.097] wcscat (in: _Dest=0x7a696e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.097] wcscat (in: _Dest=0x7a696e0, _Source="J0105384.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" [0216.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a696e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0216.098] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1 [0216.098] wcscmp (_String1="J0105386.WMF", _String2=".") returned 1 [0216.098] wcscmp (_String1="J0105386.WMF", _String2="..") returned 1 [0216.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ed8 [0216.098] wcscpy (in: _Dest=0x7a69ed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.098] wcscat (in: _Dest=0x7a69ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.098] wcscat (in: _Dest=0x7a69ed8, _Source="J0105386.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" [0216.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0216.099] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1 [0216.099] wcscmp (_String1="J0105388.WMF", _String2=".") returned 1 [0216.099] wcscmp (_String1="J0105388.WMF", _String2="..") returned 1 [0216.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68d50 [0216.099] wcscpy (in: _Dest=0x7a68d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.099] wcscat (in: _Dest=0x7a68d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.099] wcscat (in: _Dest=0x7a68d50, _Source="J0105388.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" [0216.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0216.100] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1 [0216.100] wcscmp (_String1="J0105390.WMF", _String2=".") returned 1 [0216.100] wcscmp (_String1="J0105390.WMF", _String2="..") returned 1 [0216.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69658 [0216.100] wcscpy (in: _Dest=0x7a69658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.100] wcscat (in: _Dest=0x7a69658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.100] wcscat (in: _Dest=0x7a69658, _Source="J0105390.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" [0216.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0216.101] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1 [0216.101] wcscmp (_String1="J0105396.WMF", _String2=".") returned 1 [0216.101] wcscmp (_String1="J0105396.WMF", _String2="..") returned 1 [0216.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68800 [0216.102] wcscpy (in: _Dest=0x7a68800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.102] wcscat (in: _Dest=0x7a68800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.102] wcscat (in: _Dest=0x7a68800, _Source="J0105396.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" [0216.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0216.102] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1 [0216.102] wcscmp (_String1="J0105398.WMF", _String2=".") returned 1 [0216.102] wcscmp (_String1="J0105398.WMF", _String2="..") returned 1 [0216.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a695d0 [0216.103] wcscpy (in: _Dest=0x7a695d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.103] wcscat (in: _Dest=0x7a695d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.103] wcscat (in: _Dest=0x7a695d0, _Source="J0105398.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" [0216.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a695d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0216.104] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1 [0216.104] wcscmp (_String1="J0105410.WMF", _String2=".") returned 1 [0216.104] wcscmp (_String1="J0105410.WMF", _String2="..") returned 1 [0216.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68090 [0216.104] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.104] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.104] wcscat (in: _Dest=0x7a68090, _Source="J0105410.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" [0216.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0216.257] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b45b850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1 [0216.257] wcscmp (_String1="J0105412.WMF", _String2=".") returned 1 [0216.257] wcscmp (_String1="J0105412.WMF", _String2="..") returned 1 [0216.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3be50 [0216.257] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.257] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.257] wcscat (in: _Dest=0x3f3be50, _Source="J0105412.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" [0216.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0216.258] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1 [0216.258] wcscmp (_String1="J0105414.WMF", _String2=".") returned 1 [0216.258] wcscmp (_String1="J0105414.WMF", _String2="..") returned 1 [0216.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3db00 [0216.258] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.258] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.258] wcscat (in: _Dest=0x3f3db00, _Source="J0105414.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" [0216.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0216.263] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1 [0216.263] wcscmp (_String1="J0105490.WMF", _String2=".") returned 1 [0216.263] wcscmp (_String1="J0105490.WMF", _String2="..") returned 1 [0216.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d060 [0216.263] wcscpy (in: _Dest=0x3f3d060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.263] wcscat (in: _Dest=0x3f3d060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.263] wcscat (in: _Dest=0x3f3d060, _Source="J0105490.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" [0216.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0216.264] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1 [0216.264] wcscmp (_String1="J0105496.WMF", _String2=".") returned 1 [0216.264] wcscmp (_String1="J0105496.WMF", _String2="..") returned 1 [0216.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c648 [0216.264] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.264] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.264] wcscat (in: _Dest=0x3f3c648, _Source="J0105496.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" [0216.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0216.265] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1 [0216.265] wcscmp (_String1="J0105502.WMF", _String2=".") returned 1 [0216.265] wcscmp (_String1="J0105502.WMF", _String2="..") returned 1 [0216.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c290 [0216.265] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.265] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.265] wcscat (in: _Dest=0x3f3c290, _Source="J0105502.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" [0216.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0216.266] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1 [0216.266] wcscmp (_String1="J0105504.WMF", _String2=".") returned 1 [0216.266] wcscmp (_String1="J0105504.WMF", _String2="..") returned 1 [0216.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bd40 [0216.266] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.266] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.266] wcscat (in: _Dest=0x3f3bd40, _Source="J0105504.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" [0216.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0216.267] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9067900, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9067900, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1 [0216.267] wcscmp (_String1="J0105506.WMF", _String2=".") returned 1 [0216.267] wcscmp (_String1="J0105506.WMF", _String2="..") returned 1 [0216.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cec8 [0216.267] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.267] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.268] wcscat (in: _Dest=0x3f3cec8, _Source="J0105506.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" [0216.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0216.268] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1 [0216.268] wcscmp (_String1="J0105520.WMF", _String2=".") returned 1 [0216.268] wcscmp (_String1="J0105520.WMF", _String2="..") returned 1 [0216.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d7d0 [0216.269] wcscpy (in: _Dest=0x3f3d7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.269] wcscat (in: _Dest=0x3f3d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.269] wcscat (in: _Dest=0x3f3d7d0, _Source="J0105520.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" [0216.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0216.269] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1 [0216.269] wcscmp (_String1="J0105526.WMF", _String2=".") returned 1 [0216.269] wcscmp (_String1="J0105526.WMF", _String2="..") returned 1 [0216.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c758 [0216.270] wcscpy (in: _Dest=0x3f3c758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.270] wcscat (in: _Dest=0x3f3c758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.270] wcscat (in: _Dest=0x3f3c758, _Source="J0105526.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" [0216.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0216.270] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1 [0216.270] wcscmp (_String1="J0105530.WMF", _String2=".") returned 1 [0216.271] wcscmp (_String1="J0105530.WMF", _String2="..") returned 1 [0216.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c5c0 [0216.271] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.271] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.271] wcscat (in: _Dest=0x3f3c5c0, _Source="J0105530.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" [0216.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0216.272] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1 [0216.272] wcscmp (_String1="J0105588.WMF", _String2=".") returned 1 [0216.272] wcscmp (_String1="J0105588.WMF", _String2="..") returned 1 [0216.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bc30 [0216.272] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.272] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.272] wcscat (in: _Dest=0x3f3bc30, _Source="J0105588.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" [0216.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0216.273] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b99a6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1 [0216.273] wcscmp (_String1="J0105600.WMF", _String2=".") returned 1 [0216.273] wcscmp (_String1="J0105600.WMF", _String2="..") returned 1 [0216.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c3a0 [0216.273] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.273] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.273] wcscat (in: _Dest=0x3f3c3a0, _Source="J0105600.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" [0216.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0216.274] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1 [0216.274] wcscmp (_String1="J0105638.WMF", _String2=".") returned 1 [0216.274] wcscmp (_String1="J0105638.WMF", _String2="..") returned 1 [0216.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3ca00 [0216.274] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.274] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.274] wcscat (in: _Dest=0x3f3ca00, _Source="J0105638.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" [0216.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0216.275] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1 [0216.275] wcscmp (_String1="J0105710.WMF", _String2=".") returned 1 [0216.275] wcscmp (_String1="J0105710.WMF", _String2="..") returned 1 [0216.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0216.275] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.275] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.275] wcscat (in: _Dest=0x3f3cb10, _Source="J0105710.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" [0216.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0216.276] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1 [0216.276] wcscmp (_String1="J0105846.WMF", _String2=".") returned 1 [0216.276] wcscmp (_String1="J0105846.WMF", _String2="..") returned 1 [0216.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0216.276] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.276] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.276] wcscat (in: _Dest=0x3f3c538, _Source="J0105846.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" [0216.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0216.288] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1 [0216.288] wcscmp (_String1="J0105912.WMF", _String2=".") returned 1 [0216.288] wcscmp (_String1="J0105912.WMF", _String2="..") returned 1 [0216.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d968 [0216.288] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.288] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.288] wcscat (in: _Dest=0x3f3d968, _Source="J0105912.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" [0216.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0216.289] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1 [0216.289] wcscmp (_String1="J0105974.WMF", _String2=".") returned 1 [0216.289] wcscmp (_String1="J0105974.WMF", _String2="..") returned 1 [0216.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d4a0 [0216.290] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.290] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.290] wcscat (in: _Dest=0x3f3d4a0, _Source="J0105974.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" [0216.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0216.291] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1 [0216.291] wcscmp (_String1="J0106020.WMF", _String2=".") returned 1 [0216.291] wcscmp (_String1="J0106020.WMF", _String2="..") returned 1 [0216.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0216.291] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.291] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.291] wcscat (in: _Dest=0x3f3d748, _Source="J0106020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" [0216.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0216.292] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1 [0216.292] wcscmp (_String1="J0106124.WMF", _String2=".") returned 1 [0216.292] wcscmp (_String1="J0106124.WMF", _String2="..") returned 1 [0216.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0216.292] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.292] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.292] wcscat (in: _Dest=0x3f3bdc8, _Source="J0106124.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" [0216.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0216.294] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1 [0216.294] wcscmp (_String1="J0106146.WMF", _String2=".") returned 1 [0216.294] wcscmp (_String1="J0106146.WMF", _String2="..") returned 1 [0216.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d1f8 [0216.294] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.294] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.294] wcscat (in: _Dest=0x3f3d1f8, _Source="J0106146.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" [0216.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0216.295] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1 [0216.295] wcscmp (_String1="J0106208.WMF", _String2=".") returned 1 [0216.295] wcscmp (_String1="J0106208.WMF", _String2="..") returned 1 [0216.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0216.295] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0216.295] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0216.296] wcscat (in: _Dest=0x3f3d280, _Source="J0106208.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" [0216.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0216.297] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1 [0218.519] wcscmp (_String1="J0106222.WMF", _String2=".") returned 1 [0218.519] wcscmp (_String1="J0106222.WMF", _String2="..") returned 1 [0218.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a686f0 [0218.519] wcscpy (in: _Dest=0x7a686f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0218.519] wcscat (in: _Dest=0x7a686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0218.519] wcscat (in: _Dest=0x7a686f0, _Source="J0106222.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" [0219.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0219.018] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1 [0219.018] wcscmp (_String1="J0106572.WMF", _String2=".") returned 1 [0219.018] wcscmp (_String1="J0106572.WMF", _String2="..") returned 1 [0219.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0219.018] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.018] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.018] wcscat (in: _Dest=0x3f3cb10, _Source="J0106572.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" [0219.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0219.020] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1 [0219.020] wcscmp (_String1="J0106816.WMF", _String2=".") returned 1 [0219.020] wcscmp (_String1="J0106816.WMF", _String2="..") returned 1 [0219.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0219.020] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.020] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.020] wcscat (in: _Dest=0x3f3c538, _Source="J0106816.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" [0219.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0219.021] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1 [0219.021] wcscmp (_String1="J0106958.WMF", _String2=".") returned 1 [0219.021] wcscmp (_String1="J0106958.WMF", _String2="..") returned 1 [0219.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d968 [0219.021] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.021] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.021] wcscat (in: _Dest=0x3f3d968, _Source="J0106958.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" [0219.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0219.022] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1 [0219.022] wcscmp (_String1="J0107024.WMF", _String2=".") returned 1 [0219.022] wcscmp (_String1="J0107024.WMF", _String2="..") returned 1 [0219.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d4a0 [0219.023] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.023] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.023] wcscat (in: _Dest=0x3f3d4a0, _Source="J0107024.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" [0219.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0219.024] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1 [0219.024] wcscmp (_String1="J0107026.WMF", _String2=".") returned 1 [0219.024] wcscmp (_String1="J0107026.WMF", _String2="..") returned 1 [0219.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0219.024] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.024] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.024] wcscat (in: _Dest=0x3f3d748, _Source="J0107026.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" [0219.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0219.025] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1 [0219.025] wcscmp (_String1="J0107042.WMF", _String2=".") returned 1 [0219.025] wcscmp (_String1="J0107042.WMF", _String2="..") returned 1 [0219.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0219.025] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.025] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.025] wcscat (in: _Dest=0x3f3bdc8, _Source="J0107042.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" [0219.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0219.026] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1 [0219.026] wcscmp (_String1="J0107090.WMF", _String2=".") returned 1 [0219.026] wcscmp (_String1="J0107090.WMF", _String2="..") returned 1 [0219.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d1f8 [0219.027] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.027] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.027] wcscat (in: _Dest=0x3f3d1f8, _Source="J0107090.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" [0219.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0219.028] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1 [0219.028] wcscmp (_String1="J0107130.WMF", _String2=".") returned 1 [0219.028] wcscmp (_String1="J0107130.WMF", _String2="..") returned 1 [0219.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0219.028] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.028] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.028] wcscat (in: _Dest=0x3f3d280, _Source="J0107130.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" [0219.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0219.029] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1 [0219.029] wcscmp (_String1="J0107132.WMF", _String2=".") returned 1 [0219.029] wcscmp (_String1="J0107132.WMF", _String2="..") returned 1 [0219.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3db00 [0219.029] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.029] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.029] wcscat (in: _Dest=0x3f3db00, _Source="J0107132.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" [0219.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0219.030] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4819b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1 [0219.030] wcscmp (_String1="J0107134.WMF", _String2=".") returned 1 [0219.030] wcscmp (_String1="J0107134.WMF", _String2="..") returned 1 [0219.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c648 [0219.030] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.030] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.031] wcscat (in: _Dest=0x3f3c648, _Source="J0107134.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" [0219.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0219.031] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1 [0219.031] wcscmp (_String1="J0107138.WMF", _String2=".") returned 1 [0219.032] wcscmp (_String1="J0107138.WMF", _String2="..") returned 1 [0219.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bd40 [0219.032] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.032] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.032] wcscat (in: _Dest=0x3f3bd40, _Source="J0107138.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" [0219.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0219.033] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1 [0219.033] wcscmp (_String1="J0107146.WMF", _String2=".") returned 1 [0219.033] wcscmp (_String1="J0107146.WMF", _String2="..") returned 1 [0219.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3be50 [0219.033] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.033] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.033] wcscat (in: _Dest=0x3f3be50, _Source="J0107146.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" [0219.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0219.035] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1 [0219.035] wcscmp (_String1="J0107148.WMF", _String2=".") returned 1 [0219.035] wcscmp (_String1="J0107148.WMF", _String2="..") returned 1 [0219.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0219.035] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.035] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.035] wcscat (in: _Dest=0x3f3cd30, _Source="J0107148.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" [0219.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0219.036] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1 [0219.036] wcscmp (_String1="J0107150.WMF", _String2=".") returned 1 [0219.036] wcscmp (_String1="J0107150.WMF", _String2="..") returned 1 [0219.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d060 [0219.036] wcscpy (in: _Dest=0x3f3d060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.036] wcscat (in: _Dest=0x3f3d060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.036] wcscat (in: _Dest=0x3f3d060, _Source="J0107150.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" [0219.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0219.037] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1 [0219.037] wcscmp (_String1="J0107152.WMF", _String2=".") returned 1 [0219.037] wcscmp (_String1="J0107152.WMF", _String2="..") returned 1 [0219.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68090 [0219.037] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.037] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.037] wcscat (in: _Dest=0x7a68090, _Source="J0107152.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" [0219.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0219.038] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1 [0219.038] wcscmp (_String1="J0107154.WMF", _String2=".") returned 1 [0219.038] wcscmp (_String1="J0107154.WMF", _String2="..") returned 1 [0219.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a695d0 [0219.038] wcscpy (in: _Dest=0x7a695d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.038] wcscat (in: _Dest=0x7a695d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.039] wcscat (in: _Dest=0x7a695d0, _Source="J0107154.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" [0219.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a695d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0219.040] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1 [0219.040] wcscmp (_String1="J0107158.WMF", _String2=".") returned 1 [0219.040] wcscmp (_String1="J0107158.WMF", _String2="..") returned 1 [0219.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68800 [0219.040] wcscpy (in: _Dest=0x7a68800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.040] wcscat (in: _Dest=0x7a68800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.040] wcscat (in: _Dest=0x7a68800, _Source="J0107158.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" [0219.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0219.041] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1 [0219.041] wcscmp (_String1="J0107182.WMF", _String2=".") returned 1 [0219.041] wcscmp (_String1="J0107182.WMF", _String2="..") returned 1 [0219.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69658 [0219.041] wcscpy (in: _Dest=0x7a69658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.041] wcscat (in: _Dest=0x7a69658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.041] wcscat (in: _Dest=0x7a69658, _Source="J0107182.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" [0219.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0219.042] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8b9c0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1 [0219.042] wcscmp (_String1="J0107188.WMF", _String2=".") returned 1 [0219.042] wcscmp (_String1="J0107188.WMF", _String2="..") returned 1 [0219.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68d50 [0219.043] wcscpy (in: _Dest=0x7a68d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.043] wcscat (in: _Dest=0x7a68d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.043] wcscat (in: _Dest=0x7a68d50, _Source="J0107188.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" [0219.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0219.044] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1 [0219.044] wcscmp (_String1="J0107192.WMF", _String2=".") returned 1 [0219.044] wcscmp (_String1="J0107192.WMF", _String2="..") returned 1 [0219.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ed8 [0219.044] wcscpy (in: _Dest=0x7a69ed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.044] wcscat (in: _Dest=0x7a69ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.044] wcscat (in: _Dest=0x7a69ed8, _Source="J0107192.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" [0219.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0219.045] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1 [0219.045] wcscmp (_String1="J0107254.WMF", _String2=".") returned 1 [0219.045] wcscmp (_String1="J0107254.WMF", _String2="..") returned 1 [0219.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a696e0 [0219.045] wcscpy (in: _Dest=0x7a696e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.045] wcscat (in: _Dest=0x7a696e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.045] wcscat (in: _Dest=0x7a696e0, _Source="J0107254.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" [0219.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a696e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0219.046] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1 [0219.046] wcscmp (_String1="J0107258.WMF", _String2=".") returned 1 [0219.046] wcscmp (_String1="J0107258.WMF", _String2="..") returned 1 [0219.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a681a0 [0219.046] wcscpy (in: _Dest=0x7a681a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.046] wcscat (in: _Dest=0x7a681a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.046] wcscat (in: _Dest=0x7a681a0, _Source="J0107258.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" [0219.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a681a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0219.047] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1 [0219.047] wcscmp (_String1="J0107262.WMF", _String2=".") returned 1 [0219.047] wcscmp (_String1="J0107262.WMF", _String2="..") returned 1 [0219.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a683c0 [0219.047] wcscpy (in: _Dest=0x7a683c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.047] wcscat (in: _Dest=0x7a683c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.047] wcscat (in: _Dest=0x7a683c0, _Source="J0107262.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" [0219.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a683c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0219.049] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1 [0219.049] wcscmp (_String1="J0107264.WMF", _String2=".") returned 1 [0219.049] wcscmp (_String1="J0107264.WMF", _String2="..") returned 1 [0219.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68228 [0219.049] wcscpy (in: _Dest=0x7a68228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.049] wcscat (in: _Dest=0x7a68228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.049] wcscat (in: _Dest=0x7a68228, _Source="J0107264.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" [0219.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0219.050] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1 [0219.050] wcscmp (_String1="J0107266.WMF", _String2=".") returned 1 [0219.050] wcscmp (_String1="J0107266.WMF", _String2="..") returned 1 [0219.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a682b0 [0219.050] wcscpy (in: _Dest=0x7a682b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.050] wcscat (in: _Dest=0x7a682b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.050] wcscat (in: _Dest=0x7a682b0, _Source="J0107266.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" [0219.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a682b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0219.051] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1 [0219.051] wcscmp (_String1="J0107280.WMF", _String2=".") returned 1 [0219.051] wcscmp (_String1="J0107280.WMF", _String2="..") returned 1 [0219.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69878 [0219.051] wcscpy (in: _Dest=0x7a69878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.051] wcscat (in: _Dest=0x7a69878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.051] wcscat (in: _Dest=0x7a69878, _Source="J0107280.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" [0219.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0219.052] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba0caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1 [0219.052] wcscmp (_String1="J0107282.WMF", _String2=".") returned 1 [0219.052] wcscmp (_String1="J0107282.WMF", _String2="..") returned 1 [0219.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68118 [0219.052] wcscpy (in: _Dest=0x7a68118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.052] wcscat (in: _Dest=0x7a68118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.053] wcscat (in: _Dest=0x7a68118, _Source="J0107282.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" [0219.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0219.151] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1 [0219.151] wcscmp (_String1="J0107288.WMF", _String2=".") returned 1 [0219.151] wcscmp (_String1="J0107288.WMF", _String2="..") returned 1 [0219.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0219.151] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.151] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.151] wcscat (in: _Dest=0x3f3c538, _Source="J0107288.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" [0219.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0219.152] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1 [0219.152] wcscmp (_String1="J0107290.WMF", _String2=".") returned 1 [0219.152] wcscmp (_String1="J0107290.WMF", _String2="..") returned 1 [0219.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0219.152] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.152] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.152] wcscat (in: _Dest=0x3f3cb10, _Source="J0107290.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" [0219.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0219.153] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1 [0219.153] wcscmp (_String1="J0107300.WMF", _String2=".") returned 1 [0219.153] wcscmp (_String1="J0107300.WMF", _String2="..") returned 1 [0219.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a686f0 [0219.153] wcscpy (in: _Dest=0x7a686f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.153] wcscat (in: _Dest=0x7a686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.153] wcscat (in: _Dest=0x7a686f0, _Source="J0107300.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" [0219.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0219.154] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1 [0219.154] wcscmp (_String1="J0107302.WMF", _String2=".") returned 1 [0219.154] wcscmp (_String1="J0107302.WMF", _String2="..") returned 1 [0219.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68778 [0219.154] wcscpy (in: _Dest=0x7a68778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.154] wcscat (in: _Dest=0x7a68778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.154] wcscat (in: _Dest=0x7a68778, _Source="J0107302.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" [0219.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0219.155] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1 [0219.155] wcscmp (_String1="J0107308.WMF", _String2=".") returned 1 [0219.155] wcscmp (_String1="J0107308.WMF", _String2="..") returned 1 [0219.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69b20 [0219.156] wcscpy (in: _Dest=0x7a69b20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.156] wcscat (in: _Dest=0x7a69b20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.156] wcscat (in: _Dest=0x7a69b20, _Source="J0107308.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" [0219.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0219.157] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1 [0219.157] wcscmp (_String1="J0107314.WMF", _String2=".") returned 1 [0219.157] wcscmp (_String1="J0107314.WMF", _String2="..") returned 1 [0219.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a693b0 [0219.157] wcscpy (in: _Dest=0x7a693b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.157] wcscat (in: _Dest=0x7a693b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.157] wcscat (in: _Dest=0x7a693b0, _Source="J0107314.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" [0219.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a693b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0219.158] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1 [0219.160] wcscmp (_String1="J0107316.WMF", _String2=".") returned 1 [0219.160] wcscmp (_String1="J0107316.WMF", _String2="..") returned 1 [0219.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ff8 [0219.160] wcscpy (in: _Dest=0x7a68ff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.160] wcscat (in: _Dest=0x7a68ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.160] wcscat (in: _Dest=0x7a68ff8, _Source="J0107316.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" [0219.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0219.161] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1 [0219.161] wcscmp (_String1="J0107328.WMF", _String2=".") returned 1 [0219.161] wcscmp (_String1="J0107328.WMF", _String2="..") returned 1 [0219.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68f70 [0219.161] wcscpy (in: _Dest=0x7a68f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.161] wcscat (in: _Dest=0x7a68f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.161] wcscat (in: _Dest=0x7a68f70, _Source="J0107328.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" [0219.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0219.162] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1 [0219.162] wcscmp (_String1="J0107342.WMF", _String2=".") returned 1 [0219.162] wcscmp (_String1="J0107342.WMF", _String2="..") returned 1 [0219.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69d40 [0219.162] wcscpy (in: _Dest=0x7a69d40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.162] wcscat (in: _Dest=0x7a69d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.162] wcscat (in: _Dest=0x7a69d40, _Source="J0107342.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" [0219.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0219.164] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1 [0219.164] wcscmp (_String1="J0107344.WMF", _String2=".") returned 1 [0219.164] wcscmp (_String1="J0107344.WMF", _String2="..") returned 1 [0219.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68888 [0219.164] wcscpy (in: _Dest=0x7a68888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.164] wcscat (in: _Dest=0x7a68888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.164] wcscat (in: _Dest=0x7a68888, _Source="J0107344.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" [0219.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0219.165] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1 [0219.165] wcscmp (_String1="J0107350.WMF", _String2=".") returned 1 [0219.165] wcscmp (_String1="J0107350.WMF", _String2="..") returned 1 [0219.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68338 [0219.165] wcscpy (in: _Dest=0x7a68338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.165] wcscat (in: _Dest=0x7a68338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.165] wcscat (in: _Dest=0x7a68338, _Source="J0107350.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" [0219.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0219.166] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1 [0219.166] wcscmp (_String1="J0107358.WMF", _String2=".") returned 1 [0219.166] wcscmp (_String1="J0107358.WMF", _String2="..") returned 1 [0219.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68a20 [0219.166] wcscpy (in: _Dest=0x7a68a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.166] wcscat (in: _Dest=0x7a68a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.166] wcscat (in: _Dest=0x7a68a20, _Source="J0107358.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" [0219.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0219.167] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1 [0219.167] wcscmp (_String1="J0107364.WMF", _String2=".") returned 1 [0219.167] wcscmp (_String1="J0107364.WMF", _String2="..") returned 1 [0219.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68bb8 [0219.167] wcscpy (in: _Dest=0x7a68bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.167] wcscat (in: _Dest=0x7a68bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.167] wcscat (in: _Dest=0x7a68bb8, _Source="J0107364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" [0219.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0219.168] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1 [0219.168] wcscmp (_String1="J0107426.WMF", _String2=".") returned 1 [0219.168] wcscmp (_String1="J0107426.WMF", _String2="..") returned 1 [0219.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69e50 [0219.169] wcscpy (in: _Dest=0x7a69e50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.169] wcscat (in: _Dest=0x7a69e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.169] wcscat (in: _Dest=0x7a69e50, _Source="J0107426.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" [0219.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0219.170] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1 [0219.170] wcscmp (_String1="J0107446.WMF", _String2=".") returned 1 [0219.170] wcscmp (_String1="J0107446.WMF", _String2="..") returned 1 [0219.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69dc8 [0219.170] wcscpy (in: _Dest=0x7a69dc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.170] wcscat (in: _Dest=0x7a69dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.170] wcscat (in: _Dest=0x7a69dc8, _Source="J0107446.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" [0219.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0219.171] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1 [0219.171] wcscmp (_String1="J0107450.WMF", _String2=".") returned 1 [0219.171] wcscmp (_String1="J0107450.WMF", _String2="..") returned 1 [0219.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68c40 [0219.171] wcscpy (in: _Dest=0x7a68c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.171] wcscat (in: _Dest=0x7a68c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.171] wcscat (in: _Dest=0x7a68c40, _Source="J0107450.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" [0219.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0219.173] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1 [0219.173] wcscmp (_String1="J0107452.WMF", _String2=".") returned 1 [0219.173] wcscmp (_String1="J0107452.WMF", _String2="..") returned 1 [0219.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68b30 [0219.173] wcscpy (in: _Dest=0x7a68b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.173] wcscat (in: _Dest=0x7a68b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.173] wcscat (in: _Dest=0x7a68b30, _Source="J0107452.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" [0219.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0219.174] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1 [0219.175] wcscmp (_String1="J0107456.WMF", _String2=".") returned 1 [0219.175] wcscmp (_String1="J0107456.WMF", _String2="..") returned 1 [0219.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68e60 [0219.175] wcscpy (in: _Dest=0x7a68e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.175] wcscat (in: _Dest=0x7a68e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.175] wcscat (in: _Dest=0x7a68e60, _Source="J0107456.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" [0219.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0219.176] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1 [0219.176] wcscmp (_String1="J0107458.WMF", _String2=".") returned 1 [0219.176] wcscmp (_String1="J0107458.WMF", _String2="..") returned 1 [0219.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ba8 [0219.176] wcscpy (in: _Dest=0x7a69ba8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.176] wcscat (in: _Dest=0x7a69ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.176] wcscat (in: _Dest=0x7a69ba8, _Source="J0107458.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" [0219.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0219.177] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1 [0219.177] wcscmp (_String1="J0107468.WMF", _String2=".") returned 1 [0219.177] wcscmp (_String1="J0107468.WMF", _String2="..") returned 1 [0219.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69900 [0219.177] wcscpy (in: _Dest=0x7a69900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.177] wcscat (in: _Dest=0x7a69900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.178] wcscat (in: _Dest=0x7a69900, _Source="J0107468.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" [0219.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0219.179] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1 [0219.179] wcscmp (_String1="J0107480.WMF", _String2=".") returned 1 [0219.179] wcscmp (_String1="J0107480.WMF", _String2="..") returned 1 [0219.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68aa8 [0219.179] wcscpy (in: _Dest=0x7a68aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.179] wcscat (in: _Dest=0x7a68aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.179] wcscat (in: _Dest=0x7a68aa8, _Source="J0107480.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" [0219.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0219.180] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1 [0219.180] wcscmp (_String1="J0107482.WMF", _String2=".") returned 1 [0219.180] wcscmp (_String1="J0107482.WMF", _String2="..") returned 1 [0219.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69a98 [0219.180] wcscpy (in: _Dest=0x7a69a98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.180] wcscat (in: _Dest=0x7a69a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.181] wcscat (in: _Dest=0x7a69a98, _Source="J0107482.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" [0219.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0219.182] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1 [0219.182] wcscmp (_String1="J0107484.WMF", _String2=".") returned 1 [0219.182] wcscmp (_String1="J0107484.WMF", _String2="..") returned 1 [0219.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69438 [0219.182] wcscpy (in: _Dest=0x7a69438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.182] wcscat (in: _Dest=0x7a69438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.182] wcscat (in: _Dest=0x7a69438, _Source="J0107484.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" [0219.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0219.183] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1 [0219.183] wcscmp (_String1="J0107488.WMF", _String2=".") returned 1 [0219.183] wcscmp (_String1="J0107488.WMF", _String2="..") returned 1 [0219.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68cc8 [0219.183] wcscpy (in: _Dest=0x7a68cc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.183] wcscat (in: _Dest=0x7a68cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.183] wcscat (in: _Dest=0x7a68cc8, _Source="J0107488.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" [0219.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0219.184] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1 [0219.184] wcscmp (_String1="J0107490.WMF", _String2=".") returned 1 [0219.184] wcscmp (_String1="J0107490.WMF", _String2="..") returned 1 [0219.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69328 [0219.184] wcscpy (in: _Dest=0x7a69328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.184] wcscat (in: _Dest=0x7a69328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.184] wcscat (in: _Dest=0x7a69328, _Source="J0107490.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" [0219.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0219.185] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1 [0219.185] wcscmp (_String1="J0107492.WMF", _String2=".") returned 1 [0219.186] wcscmp (_String1="J0107492.WMF", _String2="..") returned 1 [0219.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68558 [0219.186] wcscpy (in: _Dest=0x7a68558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.186] wcscat (in: _Dest=0x7a68558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.186] wcscat (in: _Dest=0x7a68558, _Source="J0107492.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" [0219.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0219.187] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1 [0219.187] wcscmp (_String1="J0107494.WMF", _String2=".") returned 1 [0219.187] wcscmp (_String1="J0107494.WMF", _String2="..") returned 1 [0219.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68910 [0219.187] wcscpy (in: _Dest=0x7a68910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.187] wcscat (in: _Dest=0x7a68910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.187] wcscat (in: _Dest=0x7a68910, _Source="J0107494.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" [0219.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0219.248] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1 [0219.248] wcscmp (_String1="J0107496.WMF", _String2=".") returned 1 [0219.248] wcscmp (_String1="J0107496.WMF", _String2="..") returned 1 [0219.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0219.248] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.248] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.248] wcscat (in: _Dest=0x3f3c538, _Source="J0107496.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" [0219.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0219.249] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1 [0219.249] wcscmp (_String1="J0107500.WMF", _String2=".") returned 1 [0219.249] wcscmp (_String1="J0107500.WMF", _String2="..") returned 1 [0219.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68118 [0219.250] wcscpy (in: _Dest=0x7a68118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.250] wcscat (in: _Dest=0x7a68118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.250] wcscat (in: _Dest=0x7a68118, _Source="J0107500.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" [0219.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0219.251] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1 [0219.251] wcscmp (_String1="J0107502.WMF", _String2=".") returned 1 [0219.251] wcscmp (_String1="J0107502.WMF", _String2="..") returned 1 [0219.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69878 [0219.251] wcscpy (in: _Dest=0x7a69878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.251] wcscat (in: _Dest=0x7a69878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.251] wcscat (in: _Dest=0x7a69878, _Source="J0107502.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" [0219.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0219.252] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1 [0219.252] wcscmp (_String1="J0107512.WMF", _String2=".") returned 1 [0219.252] wcscmp (_String1="J0107512.WMF", _String2="..") returned 1 [0219.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a682b0 [0219.252] wcscpy (in: _Dest=0x7a682b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.253] wcscat (in: _Dest=0x7a682b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.253] wcscat (in: _Dest=0x7a682b0, _Source="J0107512.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" [0219.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a682b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0219.254] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1 [0219.254] wcscmp (_String1="J0107514.WMF", _String2=".") returned 1 [0219.254] wcscmp (_String1="J0107514.WMF", _String2="..") returned 1 [0219.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ee8 [0219.254] wcscpy (in: _Dest=0x7a68ee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.254] wcscat (in: _Dest=0x7a68ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.254] wcscat (in: _Dest=0x7a68ee8, _Source="J0107514.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" [0219.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0219.255] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1 [0219.255] wcscmp (_String1="J0107516.WMF", _String2=".") returned 1 [0219.255] wcscmp (_String1="J0107516.WMF", _String2="..") returned 1 [0219.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a685e0 [0219.255] wcscpy (in: _Dest=0x7a685e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.255] wcscat (in: _Dest=0x7a685e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.255] wcscat (in: _Dest=0x7a685e0, _Source="J0107516.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" [0219.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a685e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0219.256] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1 [0219.256] wcscmp (_String1="J0107526.WMF", _String2=".") returned 1 [0219.256] wcscmp (_String1="J0107526.WMF", _String2="..") returned 1 [0219.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68668 [0219.257] wcscpy (in: _Dest=0x7a68668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.257] wcscat (in: _Dest=0x7a68668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.257] wcscat (in: _Dest=0x7a68668, _Source="J0107526.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" [0219.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0219.258] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1 [0219.258] wcscmp (_String1="J0107528.WMF", _String2=".") returned 1 [0219.258] wcscmp (_String1="J0107528.WMF", _String2="..") returned 1 [0219.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69548 [0219.258] wcscpy (in: _Dest=0x7a69548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.258] wcscat (in: _Dest=0x7a69548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.258] wcscat (in: _Dest=0x7a69548, _Source="J0107528.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" [0219.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0219.259] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba32c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1 [0219.259] wcscmp (_String1="J0107544.WMF", _String2=".") returned 1 [0219.259] wcscmp (_String1="J0107544.WMF", _String2="..") returned 1 [0219.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69768 [0219.259] wcscpy (in: _Dest=0x7a69768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.259] wcscat (in: _Dest=0x7a69768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.259] wcscat (in: _Dest=0x7a69768, _Source="J0107544.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" [0219.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0219.260] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1 [0219.260] wcscmp (_String1="J0107658.WMF", _String2=".") returned 1 [0219.260] wcscmp (_String1="J0107658.WMF", _String2="..") returned 1 [0219.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69108 [0219.260] wcscpy (in: _Dest=0x7a69108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.261] wcscat (in: _Dest=0x7a69108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.261] wcscat (in: _Dest=0x7a69108, _Source="J0107658.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" [0219.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0219.262] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1 [0219.262] wcscmp (_String1="J0107708.WMF", _String2=".") returned 1 [0219.262] wcscmp (_String1="J0107708.WMF", _String2="..") returned 1 [0219.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69190 [0219.262] wcscpy (in: _Dest=0x7a69190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.262] wcscat (in: _Dest=0x7a69190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.262] wcscat (in: _Dest=0x7a69190, _Source="J0107708.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" [0219.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0219.263] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1 [0219.263] wcscmp (_String1="J0107712.WMF", _String2=".") returned 1 [0219.263] wcscmp (_String1="J0107712.WMF", _String2="..") returned 1 [0219.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69218 [0219.263] wcscpy (in: _Dest=0x7a69218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.263] wcscat (in: _Dest=0x7a69218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.263] wcscat (in: _Dest=0x7a69218, _Source="J0107712.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" [0219.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0219.264] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1 [0219.264] wcscmp (_String1="J0107718.WMF", _String2=".") returned 1 [0219.264] wcscmp (_String1="J0107718.WMF", _String2="..") returned 1 [0219.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a692a0 [0219.264] wcscpy (in: _Dest=0x7a692a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.264] wcscat (in: _Dest=0x7a692a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.264] wcscat (in: _Dest=0x7a692a0, _Source="J0107718.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" [0219.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a692a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0219.266] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1 [0219.795] wcscmp (_String1="J0107722.WMF", _String2=".") returned 1 [0219.795] wcscmp (_String1="J0107722.WMF", _String2="..") returned 1 [0219.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c5c0 [0219.795] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.795] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.795] wcscat (in: _Dest=0x3f3c5c0, _Source="J0107722.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" [0219.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0219.796] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1 [0219.796] wcscmp (_String1="J0107724.WMF", _String2=".") returned 1 [0219.796] wcscmp (_String1="J0107724.WMF", _String2="..") returned 1 [0219.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c3a0 [0219.797] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.797] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.797] wcscat (in: _Dest=0x3f3c3a0, _Source="J0107724.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" [0219.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0219.798] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1 [0219.798] wcscmp (_String1="J0107728.WMF", _String2=".") returned 1 [0219.798] wcscmp (_String1="J0107728.WMF", _String2="..") returned 1 [0219.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cf50 [0219.798] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.798] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.798] wcscat (in: _Dest=0x3f3cf50, _Source="J0107728.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" [0219.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0219.800] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1 [0219.800] wcscmp (_String1="J0107730.WMF", _String2=".") returned 1 [0219.800] wcscmp (_String1="J0107730.WMF", _String2="..") returned 1 [0219.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c290 [0219.800] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.800] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.800] wcscat (in: _Dest=0x3f3c290, _Source="J0107730.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" [0219.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0219.802] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1 [0219.802] wcscmp (_String1="J0107734.WMF", _String2=".") returned 1 [0219.802] wcscmp (_String1="J0107734.WMF", _String2="..") returned 1 [0219.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cec8 [0219.802] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.802] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.802] wcscat (in: _Dest=0x3f3cec8, _Source="J0107734.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" [0219.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0219.803] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1 [0219.803] wcscmp (_String1="J0107742.WMF", _String2=".") returned 1 [0219.803] wcscmp (_String1="J0107742.WMF", _String2="..") returned 1 [0219.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d7d0 [0219.804] wcscpy (in: _Dest=0x3f3d7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.804] wcscat (in: _Dest=0x3f3d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.804] wcscat (in: _Dest=0x3f3d7d0, _Source="J0107742.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" [0219.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0219.805] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1 [0219.805] wcscmp (_String1="J0107744.WMF", _String2=".") returned 1 [0219.805] wcscmp (_String1="J0107744.WMF", _String2="..") returned 1 [0219.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c758 [0219.805] wcscpy (in: _Dest=0x3f3c758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.805] wcscat (in: _Dest=0x3f3c758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.805] wcscat (in: _Dest=0x3f3c758, _Source="J0107744.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" [0219.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0219.806] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b4f3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1 [0219.806] wcscmp (_String1="J0107746.WMF", _String2=".") returned 1 [0219.806] wcscmp (_String1="J0107746.WMF", _String2="..") returned 1 [0219.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bc30 [0219.806] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.806] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.806] wcscat (in: _Dest=0x3f3bc30, _Source="J0107746.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" [0219.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc8 [0219.809] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1 [0219.809] wcscmp (_String1="J0107748.WMF", _String2=".") returned 1 [0219.809] wcscmp (_String1="J0107748.WMF", _String2="..") returned 1 [0219.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3ca00 [0219.809] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.809] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.809] wcscat (in: _Dest=0x3f3ca00, _Source="J0107748.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" [0219.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0219.810] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba58db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1 [0219.810] wcscmp (_String1="J0107750.WMF", _String2=".") returned 1 [0219.810] wcscmp (_String1="J0107750.WMF", _String2="..") returned 1 [0219.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cc20 [0219.810] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.810] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.811] wcscat (in: _Dest=0x3f3cc20, _Source="J0107750.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" [0219.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0219.812] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1 [0219.812] wcscmp (_String1="J0136865.WMF", _String2=".") returned 1 [0219.812] wcscmp (_String1="J0136865.WMF", _String2="..") returned 1 [0219.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c7e0 [0219.813] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.813] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.813] wcscat (in: _Dest=0x3f3c7e0, _Source="J0136865.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" [0219.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0219.814] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb202900, ftCreationTime.dwHighDateTime=0x1bdbfd3, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb202900, ftLastWriteTime.dwHighDateTime=0x1bdbfd3, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1 [0219.814] wcscmp (_String1="J0144773.JPG", _String2=".") returned 1 [0219.814] wcscmp (_String1="J0144773.JPG", _String2="..") returned 1 [0219.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cdb8 [0219.814] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.814] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.814] wcscat (in: _Dest=0x3f3cdb8, _Source="J0144773.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" [0219.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0219.815] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1 [0219.815] wcscmp (_String1="J0145168.JPG", _String2=".") returned 1 [0219.815] wcscmp (_String1="J0145168.JPG", _String2="..") returned 1 [0219.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0219.815] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.816] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.816] wcscat (in: _Dest=0x3f3c208, _Source="J0145168.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" [0219.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0219.817] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1 [0219.817] wcscmp (_String1="J0145212.JPG", _String2=".") returned 1 [0219.817] wcscmp (_String1="J0145212.JPG", _String2="..") returned 1 [0219.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d638 [0219.817] wcscpy (in: _Dest=0x3f3d638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.817] wcscat (in: _Dest=0x3f3d638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.817] wcscat (in: _Dest=0x3f3d638, _Source="J0145212.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" [0219.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0219.818] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1 [0219.818] wcscmp (_String1="J0145272.JPG", _String2=".") returned 1 [0219.818] wcscmp (_String1="J0145272.JPG", _String2="..") returned 1 [0219.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0219.818] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.818] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.818] wcscat (in: _Dest=0x3f3bf60, _Source="J0145272.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" [0219.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bf60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0219.820] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1 [0219.820] wcscmp (_String1="J0145361.JPG", _String2=".") returned 1 [0219.820] wcscmp (_String1="J0145361.JPG", _String2="..") returned 1 [0219.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c070 [0219.820] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.820] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.820] wcscat (in: _Dest=0x3f3c070, _Source="J0145361.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" [0219.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0219.821] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6afac300, ftCreationTime.dwHighDateTime=0x1bdbfd5, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6afac300, ftLastWriteTime.dwHighDateTime=0x1bdbfd5, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1 [0219.821] wcscmp (_String1="J0145373.JPG", _String2=".") returned 1 [0219.821] wcscmp (_String1="J0145373.JPG", _String2="..") returned 1 [0219.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d308 [0219.821] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.821] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.821] wcscat (in: _Dest=0x3f3d308, _Source="J0145373.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" [0219.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0219.823] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd83900, ftCreationTime.dwHighDateTime=0x1bdbfd6, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacd83900, ftLastWriteTime.dwHighDateTime=0x1bdbfd6, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1 [0219.823] wcscmp (_String1="J0145669.JPG", _String2=".") returned 1 [0219.823] wcscmp (_String1="J0145669.JPG", _String2="..") returned 1 [0219.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d6c0 [0219.823] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.823] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.823] wcscat (in: _Dest=0x3f3d6c0, _Source="J0145669.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" [0219.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0219.824] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3a9300, ftCreationTime.dwHighDateTime=0x1bdbfd6, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf3a9300, ftLastWriteTime.dwHighDateTime=0x1bdbfd6, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1 [0219.824] wcscmp (_String1="J0145707.JPG", _String2=".") returned 1 [0219.824] wcscmp (_String1="J0145707.JPG", _String2="..") returned 1 [0219.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c180 [0219.824] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.824] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.824] wcscat (in: _Dest=0x3f3c180, _Source="J0145707.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" [0219.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0219.825] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe610a900, ftCreationTime.dwHighDateTime=0x1bdbfd6, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe610a900, ftLastWriteTime.dwHighDateTime=0x1bdbfd6, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1 [0219.825] wcscmp (_String1="J0145810.JPG", _String2=".") returned 1 [0219.826] wcscmp (_String1="J0145810.JPG", _String2="..") returned 1 [0219.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c978 [0219.826] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.826] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.826] wcscat (in: _Dest=0x3f3c978, _Source="J0145810.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" [0219.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0219.827] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0d2e00, ftCreationTime.dwHighDateTime=0x1c0271b, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b0d2e00, ftLastWriteTime.dwHighDateTime=0x1c0271b, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1 [0219.827] wcscmp (_String1="J0145879.JPG", _String2=".") returned 1 [0219.827] wcscmp (_String1="J0145879.JPG", _String2="..") returned 1 [0219.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d390 [0219.827] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.827] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.827] wcscat (in: _Dest=0x3f3d390, _Source="J0145879.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" [0219.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0219.829] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccb0500, ftCreationTime.dwHighDateTime=0x1c03dee, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ccb0500, ftLastWriteTime.dwHighDateTime=0x1c03dee, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1 [0219.829] wcscmp (_String1="J0145895.JPG", _String2=".") returned 1 [0219.829] wcscmp (_String1="J0145895.JPG", _String2="..") returned 1 [0219.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3da78 [0219.829] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.829] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.829] wcscat (in: _Dest=0x3f3da78, _Source="J0145895.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" [0219.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0219.830] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e47ab00, ftCreationTime.dwHighDateTime=0x1bdbfd7, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e47ab00, ftLastWriteTime.dwHighDateTime=0x1bdbfd7, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1 [0219.830] wcscmp (_String1="J0145904.JPG", _String2=".") returned 1 [0219.831] wcscmp (_String1="J0145904.JPG", _String2="..") returned 1 [0219.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bed8 [0219.831] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.831] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.831] wcscat (in: _Dest=0x3f3bed8, _Source="J0145904.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" [0219.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0219.832] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1 [0219.832] wcscmp (_String1="J0146142.JPG", _String2=".") returned 1 [0219.832] wcscmp (_String1="J0146142.JPG", _String2="..") returned 1 [0219.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c6d0 [0219.832] wcscpy (in: _Dest=0x3f3c6d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.832] wcscat (in: _Dest=0x3f3c6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.832] wcscat (in: _Dest=0x3f3c6d0, _Source="J0146142.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" [0219.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0219.910] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1 [0219.910] wcscmp (_String1="J0148309.JPG", _String2=".") returned 1 [0219.910] wcscmp (_String1="J0148309.JPG", _String2="..") returned 1 [0219.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a694c0 [0219.910] wcscpy (in: _Dest=0x7a694c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.910] wcscat (in: _Dest=0x7a694c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.910] wcscat (in: _Dest=0x7a694c0, _Source="J0148309.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" [0219.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a694c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0219.911] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1 [0219.912] wcscmp (_String1="J0148757.JPG", _String2=".") returned 1 [0219.912] wcscmp (_String1="J0148757.JPG", _String2="..") returned 1 [0219.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a697f0 [0219.912] wcscpy (in: _Dest=0x7a697f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.912] wcscat (in: _Dest=0x7a697f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.912] wcscat (in: _Dest=0x7a697f0, _Source="J0148757.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" [0219.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a697f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0219.913] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1 [0219.913] wcscmp (_String1="J0148798.JPG", _String2=".") returned 1 [0219.913] wcscmp (_String1="J0148798.JPG", _String2="..") returned 1 [0219.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69988 [0219.913] wcscpy (in: _Dest=0x7a69988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.913] wcscat (in: _Dest=0x7a69988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.913] wcscat (in: _Dest=0x7a69988, _Source="J0148798.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" [0219.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0219.915] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1 [0219.915] wcscmp (_String1="J0149018.JPG", _String2=".") returned 1 [0219.915] wcscmp (_String1="J0149018.JPG", _String2="..") returned 1 [0219.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a684d0 [0219.915] wcscpy (in: _Dest=0x7a684d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.915] wcscat (in: _Dest=0x7a684d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.915] wcscat (in: _Dest=0x7a684d0, _Source="J0149018.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" [0219.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a684d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0219.916] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1 [0219.916] wcscmp (_String1="J0149118.JPG", _String2=".") returned 1 [0219.916] wcscmp (_String1="J0149118.JPG", _String2="..") returned 1 [0219.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68998 [0219.916] wcscpy (in: _Dest=0x7a68998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.917] wcscat (in: _Dest=0x7a68998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.917] wcscat (in: _Dest=0x7a68998, _Source="J0149118.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" [0219.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0219.918] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1 [0219.918] wcscmp (_String1="J0150150.WMF", _String2=".") returned 1 [0219.918] wcscmp (_String1="J0150150.WMF", _String2="..") returned 1 [0219.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68dd8 [0219.918] wcscpy (in: _Dest=0x7a68dd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.918] wcscat (in: _Dest=0x7a68dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.918] wcscat (in: _Dest=0x7a68dd8, _Source="J0150150.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" [0219.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0219.919] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1 [0219.919] wcscmp (_String1="J0150861.WMF", _String2=".") returned 1 [0219.919] wcscmp (_String1="J0150861.WMF", _String2="..") returned 1 [0219.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69a10 [0219.919] wcscpy (in: _Dest=0x7a69a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.920] wcscat (in: _Dest=0x7a69a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.920] wcscat (in: _Dest=0x7a69a10, _Source="J0150861.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" [0219.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0219.921] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1 [0219.921] wcscmp (_String1="J0151041.WMF", _String2=".") returned 1 [0219.921] wcscmp (_String1="J0151041.WMF", _String2="..") returned 1 [0219.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68448 [0219.921] wcscpy (in: _Dest=0x7a68448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.921] wcscat (in: _Dest=0x7a68448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.921] wcscat (in: _Dest=0x7a68448, _Source="J0151041.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" [0219.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0219.922] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1 [0219.922] wcscmp (_String1="J0151045.WMF", _String2=".") returned 1 [0219.922] wcscmp (_String1="J0151045.WMF", _String2="..") returned 1 [0219.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69cb8 [0219.922] wcscpy (in: _Dest=0x7a69cb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.922] wcscat (in: _Dest=0x7a69cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.922] wcscat (in: _Dest=0x7a69cb8, _Source="J0151045.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" [0219.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0219.924] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1 [0219.924] wcscmp (_String1="J0151047.WMF", _String2=".") returned 1 [0219.924] wcscmp (_String1="J0151047.WMF", _String2="..") returned 1 [0219.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69080 [0219.924] wcscpy (in: _Dest=0x7a69080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0219.924] wcscat (in: _Dest=0x7a69080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0219.924] wcscat (in: _Dest=0x7a69080, _Source="J0151047.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" [0219.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0219.925] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1 [0220.009] wcscmp (_String1="J0151055.WMF", _String2=".") returned 1 [0220.009] wcscmp (_String1="J0151055.WMF", _String2="..") returned 1 [0220.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69fe8 [0220.010] wcscpy (in: _Dest=0x7a69fe8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.010] wcscat (in: _Dest=0x7a69fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.010] wcscat (in: _Dest=0x7a69fe8, _Source="J0151055.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" [0220.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0220.011] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1 [0220.011] wcscmp (_String1="J0151061.WMF", _String2=".") returned 1 [0220.011] wcscmp (_String1="J0151061.WMF", _String2="..") returned 1 [0220.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69f60 [0220.011] wcscpy (in: _Dest=0x7a69f60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.011] wcscat (in: _Dest=0x7a69f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.011] wcscat (in: _Dest=0x7a69f60, _Source="J0151061.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" [0220.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0220.012] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1 [0220.012] wcscmp (_String1="J0151063.WMF", _String2=".") returned 1 [0220.012] wcscmp (_String1="J0151063.WMF", _String2="..") returned 1 [0220.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9780 [0220.012] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.012] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.012] wcscat (in: _Dest=0x3eb9780, _Source="J0151063.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" [0220.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0220.013] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1 [0220.013] wcscmp (_String1="J0151067.WMF", _String2=".") returned 1 [0220.013] wcscmp (_String1="J0151067.WMF", _String2="..") returned 1 [0220.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba6e8 [0220.013] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.013] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.013] wcscat (in: _Dest=0x3eba6e8, _Source="J0151067.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" [0220.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0220.014] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1 [0220.014] wcscmp (_String1="J0151073.WMF", _String2=".") returned 1 [0220.014] wcscmp (_String1="J0151073.WMF", _String2="..") returned 1 [0220.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba4c8 [0220.014] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.014] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.014] wcscat (in: _Dest=0x3eba4c8, _Source="J0151073.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" [0220.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0220.015] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1 [0220.015] wcscmp (_String1="J0151581.WMF", _String2=".") returned 1 [0220.015] wcscmp (_String1="J0151581.WMF", _String2="..") returned 1 [0220.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb92b8 [0220.015] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.016] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.016] wcscat (in: _Dest=0x3eb92b8, _Source="J0151581.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" [0220.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0220.017] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1 [0220.017] wcscmp (_String1="J0152414.WMF", _String2=".") returned 1 [0220.017] wcscmp (_String1="J0152414.WMF", _String2="..") returned 1 [0220.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8ce0 [0220.017] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.017] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.017] wcscat (in: _Dest=0x3eb8ce0, _Source="J0152414.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" [0220.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0220.018] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1 [0220.018] wcscmp (_String1="J0152430.WMF", _String2=".") returned 1 [0220.018] wcscmp (_String1="J0152430.WMF", _String2="..") returned 1 [0220.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9f78 [0220.018] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.018] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.018] wcscat (in: _Dest=0x3eb9f78, _Source="J0152430.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" [0220.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0220.019] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5661f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1 [0220.019] wcscmp (_String1="J0152432.WMF", _String2=".") returned 1 [0220.019] wcscmp (_String1="J0152432.WMF", _String2="..") returned 1 [0220.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0220.019] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.019] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.019] wcscat (in: _Dest=0x3eb9560, _Source="J0152432.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" [0220.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0220.020] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1 [0220.021] wcscmp (_String1="J0152436.WMF", _String2=".") returned 1 [0220.021] wcscmp (_String1="J0152436.WMF", _String2="..") returned 1 [0220.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba110 [0220.021] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.021] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.021] wcscat (in: _Dest=0x3eba110, _Source="J0152436.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" [0220.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0220.022] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1 [0220.022] wcscmp (_String1="J0152556.WMF", _String2=".") returned 1 [0220.022] wcscmp (_String1="J0152556.WMF", _String2="..") returned 1 [0220.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9450 [0220.022] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.022] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.022] wcscat (in: _Dest=0x3eb9450, _Source="J0152556.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" [0220.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0220.023] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1 [0220.023] wcscmp (_String1="J0152558.WMF", _String2=".") returned 1 [0220.023] wcscmp (_String1="J0152558.WMF", _String2="..") returned 1 [0220.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9c48 [0220.023] wcscpy (in: _Dest=0x3eb9c48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.023] wcscat (in: _Dest=0x3eb9c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.023] wcscat (in: _Dest=0x3eb9c48, _Source="J0152558.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" [0220.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0220.024] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1 [0220.024] wcscmp (_String1="J0152560.WMF", _String2=".") returned 1 [0220.024] wcscmp (_String1="J0152560.WMF", _String2="..") returned 1 [0220.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb94d8 [0220.025] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.025] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.025] wcscat (in: _Dest=0x3eb94d8, _Source="J0152560.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" [0220.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0220.026] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1 [0220.026] wcscmp (_String1="J0152568.WMF", _String2=".") returned 1 [0220.026] wcscmp (_String1="J0152568.WMF", _String2="..") returned 1 [0220.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb96f8 [0220.027] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.027] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.027] wcscat (in: _Dest=0x3eb96f8, _Source="J0152568.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" [0220.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0220.028] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1 [0220.028] wcscmp (_String1="J0152570.WMF", _String2=".") returned 1 [0220.028] wcscmp (_String1="J0152570.WMF", _String2="..") returned 1 [0220.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8bd0 [0220.028] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.028] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.028] wcscat (in: _Dest=0x3eb8bd0, _Source="J0152570.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" [0220.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0220.029] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1 [0220.029] wcscmp (_String1="J0152590.WMF", _String2=".") returned 1 [0220.029] wcscmp (_String1="J0152590.WMF", _String2="..") returned 1 [0220.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba550 [0220.029] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.029] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.029] wcscat (in: _Dest=0x3eba550, _Source="J0152590.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" [0220.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0220.030] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1 [0220.030] wcscmp (_String1="J0152594.WMF", _String2=".") returned 1 [0220.030] wcscmp (_String1="J0152594.WMF", _String2="..") returned 1 [0220.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9bc0 [0220.030] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.031] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.031] wcscat (in: _Dest=0x3eb9bc0, _Source="J0152594.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" [0220.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0220.031] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baa5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1 [0220.031] wcscmp (_String1="J0152600.WMF", _String2=".") returned 1 [0220.032] wcscmp (_String1="J0152600.WMF", _String2="..") returned 1 [0220.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0220.032] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.032] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.032] wcscat (in: _Dest=0x3eb8c58, _Source="J0152600.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" [0220.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0220.033] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1 [0220.033] wcscmp (_String1="J0152602.WMF", _String2=".") returned 1 [0220.033] wcscmp (_String1="J0152602.WMF", _String2="..") returned 1 [0220.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9de0 [0220.033] wcscpy (in: _Dest=0x3eb9de0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.033] wcscat (in: _Dest=0x3eb9de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.033] wcscat (in: _Dest=0x3eb9de0, _Source="J0152602.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" [0220.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0220.034] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1 [0220.034] wcscmp (_String1="J0152606.WMF", _String2=".") returned 1 [0220.034] wcscmp (_String1="J0152606.WMF", _String2="..") returned 1 [0220.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0220.034] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.034] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.034] wcscat (in: _Dest=0x3eb9b38, _Source="J0152606.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" [0220.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0220.035] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1 [0220.035] wcscmp (_String1="J0152608.WMF", _String2=".") returned 1 [0220.035] wcscmp (_String1="J0152608.WMF", _String2="..") returned 1 [0220.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9a28 [0220.035] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.035] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.036] wcscat (in: _Dest=0x3eb9a28, _Source="J0152608.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" [0220.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0220.036] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1 [0220.037] wcscmp (_String1="J0152610.WMF", _String2=".") returned 1 [0220.037] wcscmp (_String1="J0152610.WMF", _String2="..") returned 1 [0220.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0220.037] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.037] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.037] wcscat (in: _Dest=0x3eb9230, _Source="J0152610.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" [0220.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0220.038] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1 [0220.038] wcscmp (_String1="J0152622.WMF", _String2=".") returned 1 [0220.038] wcscmp (_String1="J0152622.WMF", _String2="..") returned 1 [0220.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9340 [0220.038] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.038] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.038] wcscat (in: _Dest=0x3eb9340, _Source="J0152622.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" [0220.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0220.039] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1 [0220.039] wcscmp (_String1="J0152626.WMF", _String2=".") returned 1 [0220.039] wcscmp (_String1="J0152626.WMF", _String2="..") returned 1 [0220.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0220.039] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.039] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.039] wcscat (in: _Dest=0x3eb8e78, _Source="J0152626.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" [0220.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0220.040] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1 [0220.040] wcscmp (_String1="J0152628.WMF", _String2=".") returned 1 [0220.040] wcscmp (_String1="J0152628.WMF", _String2="..") returned 1 [0220.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0220.040] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.040] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.040] wcscat (in: _Dest=0x3eba2a8, _Source="J0152628.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" [0220.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0220.041] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1 [0220.041] wcscmp (_String1="J0152688.WMF", _String2=".") returned 1 [0220.041] wcscmp (_String1="J0152688.WMF", _String2="..") returned 1 [0220.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba330 [0220.041] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.041] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.041] wcscat (in: _Dest=0x3eba330, _Source="J0152688.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" [0220.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0220.042] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1 [0220.042] wcscmp (_String1="J0152690.WMF", _String2=".") returned 1 [0220.043] wcscmp (_String1="J0152690.WMF", _String2="..") returned 1 [0220.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb99a0 [0220.043] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.043] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.043] wcscat (in: _Dest=0x3eb99a0, _Source="J0152690.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" [0220.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0220.044] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37a600, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa37a600, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1 [0220.044] wcscmp (_String1="J0152694.WMF", _String2=".") returned 1 [0220.044] wcscmp (_String1="J0152694.WMF", _String2="..") returned 1 [0220.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8df0 [0220.044] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.044] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.044] wcscat (in: _Dest=0x3eb8df0, _Source="J0152694.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" [0220.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0220.045] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1 [0220.045] wcscmp (_String1="J0152696.WMF", _String2=".") returned 1 [0220.045] wcscmp (_String1="J0152696.WMF", _String2="..") returned 1 [0220.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8d68 [0220.045] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.045] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.045] wcscat (in: _Dest=0x3eb8d68, _Source="J0152696.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" [0220.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0220.177] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1 [0220.177] wcscmp (_String1="J0152698.WMF", _String2=".") returned 1 [0220.177] wcscmp (_String1="J0152698.WMF", _String2="..") returned 1 [0220.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0220.177] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.177] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.177] wcscat (in: _Dest=0x3eb95e8, _Source="J0152698.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" [0220.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0220.398] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1 [0220.398] wcscmp (_String1="J0152702.WMF", _String2=".") returned 1 [0220.398] wcscmp (_String1="J0152702.WMF", _String2="..") returned 1 [0220.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9120 [0220.399] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.399] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.399] wcscat (in: _Dest=0x3eb9120, _Source="J0152702.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" [0220.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0220.400] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1 [0220.400] wcscmp (_String1="J0152704.WMF", _String2=".") returned 1 [0220.400] wcscmp (_String1="J0152704.WMF", _String2="..") returned 1 [0220.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9d58 [0220.400] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.400] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.400] wcscat (in: _Dest=0x3eb9d58, _Source="J0152704.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" [0220.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0220.402] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1 [0220.402] wcscmp (_String1="J0152708.WMF", _String2=".") returned 1 [0220.402] wcscmp (_String1="J0152708.WMF", _String2="..") returned 1 [0220.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9e68 [0220.402] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.402] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.402] wcscat (in: _Dest=0x3eb9e68, _Source="J0152708.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" [0220.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0220.403] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1 [0220.403] wcscmp (_String1="J0152716.WMF", _String2=".") returned 1 [0220.403] wcscmp (_String1="J0152716.WMF", _String2="..") returned 1 [0220.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb91a8 [0220.403] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.403] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.403] wcscat (in: _Dest=0x3eb91a8, _Source="J0152716.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" [0220.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0220.404] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1 [0220.651] wcscmp (_String1="J0152722.WMF", _String2=".") returned 1 [0220.651] wcscmp (_String1="J0152722.WMF", _String2="..") returned 1 [0220.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0220.651] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.651] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.651] wcscat (in: _Dest=0x3eb9cd0, _Source="J0152722.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" [0220.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0220.652] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1 [0220.652] wcscmp (_String1="J0152876.WMF", _String2=".") returned 1 [0220.652] wcscmp (_String1="J0152876.WMF", _String2="..") returned 1 [0220.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0220.653] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.653] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.653] wcscat (in: _Dest=0x3eb8b48, _Source="J0152876.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" [0220.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0220.654] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1 [0220.654] wcscmp (_String1="J0152878.WMF", _String2=".") returned 1 [0220.654] wcscmp (_String1="J0152878.WMF", _String2="..") returned 1 [0220.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba440 [0220.654] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.654] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.654] wcscat (in: _Dest=0x3eba440, _Source="J0152878.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" [0220.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0220.655] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1 [0220.656] wcscmp (_String1="J0152882.WMF", _String2=".") returned 1 [0220.656] wcscmp (_String1="J0152882.WMF", _String2="..") returned 1 [0220.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0220.656] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.656] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.656] wcscat (in: _Dest=0x3eb9ef0, _Source="J0152882.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" [0220.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0220.658] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1 [0220.658] wcscmp (_String1="J0152884.WMF", _String2=".") returned 1 [0220.658] wcscmp (_String1="J0152884.WMF", _String2="..") returned 1 [0220.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0220.658] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.658] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.658] wcscat (in: _Dest=0x3eb9010, _Source="J0152884.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" [0220.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0220.662] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1 [0220.662] wcscmp (_String1="J0152890.WMF", _String2=".") returned 1 [0220.662] wcscmp (_String1="J0152890.WMF", _String2="..") returned 1 [0220.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba660 [0220.663] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.663] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.663] wcscat (in: _Dest=0x3eba660, _Source="J0152890.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" [0220.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0220.666] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1 [0220.666] wcscmp (_String1="J0152892.WMF", _String2=".") returned 1 [0220.667] wcscmp (_String1="J0152892.WMF", _String2="..") returned 1 [0220.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0220.667] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.667] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.667] wcscat (in: _Dest=0x3eba770, _Source="J0152892.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" [0220.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0220.671] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1 [0220.671] wcscmp (_String1="J0152894.WMF", _String2=".") returned 1 [0220.671] wcscmp (_String1="J0152894.WMF", _String2="..") returned 1 [0220.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f00 [0220.671] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.671] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.671] wcscat (in: _Dest=0x3eb8f00, _Source="J0152894.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" [0220.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0220.673] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b58c350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1 [0220.673] wcscmp (_String1="J0152898.WMF", _String2=".") returned 1 [0220.673] wcscmp (_String1="J0152898.WMF", _String2="..") returned 1 [0220.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0220.673] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.673] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.673] wcscat (in: _Dest=0x3eba220, _Source="J0152898.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" [0220.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0220.676] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1 [0220.676] wcscmp (_String1="J0153047.WMF", _String2=".") returned 1 [0220.676] wcscmp (_String1="J0153047.WMF", _String2="..") returned 1 [0220.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9098 [0220.677] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.677] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.677] wcscat (in: _Dest=0x3eb9098, _Source="J0153047.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" [0220.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0220.679] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1 [0220.679] wcscmp (_String1="J0153087.WMF", _String2=".") returned 1 [0220.679] wcscmp (_String1="J0153087.WMF", _String2="..") returned 1 [0220.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9890 [0220.679] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.679] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.679] wcscat (in: _Dest=0x3eb9890, _Source="J0153087.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" [0220.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0220.683] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bacb1d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1 [0220.683] wcscmp (_String1="J0153089.WMF", _String2=".") returned 1 [0220.683] wcscmp (_String1="J0153089.WMF", _String2="..") returned 1 [0220.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0220.684] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.684] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.684] wcscat (in: _Dest=0x3eb9670, _Source="J0153089.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" [0220.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0220.686] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1 [0220.686] wcscmp (_String1="J0153091.WMF", _String2=".") returned 1 [0220.686] wcscmp (_String1="J0153091.WMF", _String2="..") returned 1 [0220.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f88 [0220.686] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.686] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.687] wcscat (in: _Dest=0x3eb8f88, _Source="J0153091.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" [0220.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0220.689] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1 [0220.689] wcscmp (_String1="J0153093.WMF", _String2=".") returned 1 [0220.689] wcscmp (_String1="J0153093.WMF", _String2="..") returned 1 [0220.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9918 [0220.689] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.689] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.689] wcscat (in: _Dest=0x3eb9918, _Source="J0153093.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" [0220.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0220.691] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1 [0220.691] wcscmp (_String1="J0153095.WMF", _String2=".") returned 1 [0220.691] wcscmp (_String1="J0153095.WMF", _String2="..") returned 1 [0220.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba3b8 [0220.691] wcscpy (in: _Dest=0x3eba3b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.692] wcscat (in: _Dest=0x3eba3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.692] wcscat (in: _Dest=0x3eba3b8, _Source="J0153095.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" [0220.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0220.693] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1 [0220.694] wcscmp (_String1="J0153265.WMF", _String2=".") returned 1 [0220.694] wcscmp (_String1="J0153265.WMF", _String2="..") returned 1 [0220.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ecf8 [0220.694] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.694] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.694] wcscat (in: _Dest=0x36ecf8, _Source="J0153265.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" [0220.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ecf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0220.696] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1 [0220.696] wcscmp (_String1="J0153273.WMF", _String2=".") returned 1 [0220.696] wcscmp (_String1="J0153273.WMF", _String2="..") returned 1 [0220.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ed80 [0220.696] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.697] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.697] wcscat (in: _Dest=0x36ed80, _Source="J0153273.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" [0220.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0220.699] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1 [0220.699] wcscmp (_String1="J0153299.WMF", _String2=".") returned 1 [0220.699] wcscmp (_String1="J0153299.WMF", _String2="..") returned 1 [0220.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36f3e0 [0220.699] wcscpy (in: _Dest=0x36f3e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.699] wcscat (in: _Dest=0x36f3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.699] wcscat (in: _Dest=0x36f3e0, _Source="J0153299.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" [0220.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0220.701] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1 [0220.701] wcscmp (_String1="J0153302.WMF", _String2=".") returned 1 [0220.701] wcscmp (_String1="J0153302.WMF", _String2="..") returned 1 [0220.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0220.702] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.702] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.702] wcscat (in: _Dest=0x36e500, _Source="J0153302.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" [0220.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0220.705] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1 [0220.705] wcscmp (_String1="J0153305.WMF", _String2=".") returned 1 [0220.706] wcscmp (_String1="J0153305.WMF", _String2="..") returned 1 [0220.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ead8 [0220.706] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.706] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.706] wcscat (in: _Dest=0x36ead8, _Source="J0153305.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" [0220.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0220.709] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1 [0220.709] wcscmp (_String1="J0153307.WMF", _String2=".") returned 1 [0220.709] wcscmp (_String1="J0153307.WMF", _String2="..") returned 1 [0220.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e478 [0220.709] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.709] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.709] wcscat (in: _Dest=0x36e478, _Source="J0153307.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" [0220.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0220.713] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1 [0220.714] wcscmp (_String1="J0153313.WMF", _String2=".") returned 1 [0220.714] wcscmp (_String1="J0153313.WMF", _String2="..") returned 1 [0220.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e588 [0220.714] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.714] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.714] wcscat (in: _Dest=0x36e588, _Source="J0153313.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" [0220.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0220.777] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1 [0220.777] wcscmp (_String1="J0153398.WMF", _String2=".") returned 1 [0220.777] wcscmp (_String1="J0153398.WMF", _String2="..") returned 1 [0220.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36fc60 [0220.777] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.777] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.777] wcscat (in: _Dest=0x36fc60, _Source="J0153398.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" [0220.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0220.849] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1 [0220.849] wcscmp (_String1="J0153508.WMF", _String2=".") returned 1 [0220.849] wcscmp (_String1="J0153508.WMF", _String2="..") returned 1 [0220.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e830 [0220.851] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.851] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.851] wcscat (in: _Dest=0x36e830, _Source="J0153508.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" [0220.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0220.853] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1 [0220.853] wcscmp (_String1="J0153514.WMF", _String2=".") returned 1 [0220.853] wcscmp (_String1="J0153514.WMF", _String2="..") returned 1 [0220.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bdd8 [0220.853] wcscpy (in: _Dest=0x3e1bdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.853] wcscat (in: _Dest=0x3e1bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.853] wcscat (in: _Dest=0x3e1bdd8, _Source="J0153514.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" [0220.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0220.854] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1 [0220.854] wcscmp (_String1="J0153516.WMF", _String2=".") returned 1 [0220.854] wcscmp (_String1="J0153516.WMF", _String2="..") returned 1 [0220.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1cd40 [0220.855] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.855] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.855] wcscat (in: _Dest=0x3e1cd40, _Source="J0153516.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" [0220.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1cd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0220.856] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1 [0220.856] wcscmp (_String1="J0153518.WMF", _String2=".") returned 1 [0220.856] wcscmp (_String1="J0153518.WMF", _String2="..") returned 1 [0220.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ba20 [0220.856] wcscpy (in: _Dest=0x3e1ba20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.856] wcscat (in: _Dest=0x3e1ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.856] wcscat (in: _Dest=0x3e1ba20, _Source="J0153518.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" [0220.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0220.858] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1 [0220.858] wcscmp (_String1="J0156537.WMF", _String2=".") returned 1 [0220.858] wcscmp (_String1="J0156537.WMF", _String2="..") returned 1 [0220.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ca10 [0220.858] wcscpy (in: _Dest=0x3e1ca10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.858] wcscat (in: _Dest=0x3e1ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.858] wcscat (in: _Dest=0x3e1ca10, _Source="J0156537.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" [0220.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0220.860] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1 [0220.860] wcscmp (_String1="J0157167.WMF", _String2=".") returned 1 [0220.860] wcscmp (_String1="J0157167.WMF", _String2="..") returned 1 [0220.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ced8 [0220.860] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.860] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.860] wcscat (in: _Dest=0x3e1ced8, _Source="J0157167.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" [0220.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0220.862] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1 [0220.862] wcscmp (_String1="J0157177.WMF", _String2=".") returned 1 [0220.862] wcscmp (_String1="J0157177.WMF", _String2="..") returned 1 [0220.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1b888 [0220.862] wcscpy (in: _Dest=0x3e1b888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.862] wcscat (in: _Dest=0x3e1b888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.862] wcscat (in: _Dest=0x3e1b888, _Source="J0157177.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" [0220.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1b888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0220.863] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1 [0220.863] wcscmp (_String1="J0157191.WMF", _String2=".") returned 1 [0220.863] wcscmp (_String1="J0157191.WMF", _String2="..") returned 1 [0220.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1d4b0 [0220.863] wcscpy (in: _Dest=0x3e1d4b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.864] wcscat (in: _Dest=0x3e1d4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.864] wcscat (in: _Dest=0x3e1d4b0, _Source="J0157191.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" [0220.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0220.865] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5b24b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1 [0220.865] wcscmp (_String1="J0157831.WMF", _String2=".") returned 1 [0220.865] wcscmp (_String1="J0157831.WMF", _String2="..") returned 1 [0220.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bd50 [0220.865] wcscpy (in: _Dest=0x3e1bd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.865] wcscat (in: _Dest=0x3e1bd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.865] wcscat (in: _Dest=0x3e1bd50, _Source="J0157831.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" [0220.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0220.867] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1 [0220.867] wcscmp (_String1="J0158071.WMF", _String2=".") returned 1 [0220.867] wcscmp (_String1="J0158071.WMF", _String2="..") returned 1 [0220.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062a10 [0220.867] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.867] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.867] wcscat (in: _Dest=0x3062a10, _Source="J0158071.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" [0220.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0220.868] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1 [0220.868] wcscmp (_String1="J0158477.WMF", _String2=".") returned 1 [0220.869] wcscmp (_String1="J0158477.WMF", _String2="..") returned 1 [0220.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3061f70 [0220.869] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0220.869] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0220.869] wcscat (in: _Dest=0x3061f70, _Source="J0158477.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" [0220.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0220.870] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1 [0221.079] wcscmp (_String1="J0160590.WMF", _String2=".") returned 1 [0221.079] wcscmp (_String1="J0160590.WMF", _String2="..") returned 1 [0221.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30633a0 [0221.079] wcscpy (in: _Dest=0x30633a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.079] wcscat (in: _Dest=0x30633a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.079] wcscat (in: _Dest=0x30633a0, _Source="J0160590.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" [0221.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30633a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0221.135] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1 [0221.135] wcscmp (_String1="J0164153.JPG", _String2=".") returned 1 [0221.135] wcscmp (_String1="J0164153.JPG", _String2="..") returned 1 [0221.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062c30 [0221.135] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.135] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.135] wcscat (in: _Dest=0x3062c30, _Source="J0164153.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" [0221.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0221.136] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1 [0221.136] wcscmp (_String1="J0168644.WMF", _String2=".") returned 1 [0221.136] wcscmp (_String1="J0168644.WMF", _String2="..") returned 1 [0221.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062988 [0221.136] wcscpy (in: _Dest=0x3062988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.136] wcscat (in: _Dest=0x3062988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.136] wcscat (in: _Dest=0x3062988, _Source="J0168644.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" [0221.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0221.137] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1 [0221.137] wcscmp (_String1="J0171685.WMF", _String2=".") returned 1 [0221.137] wcscmp (_String1="J0171685.WMF", _String2="..") returned 1 [0221.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3063428 [0221.137] wcscpy (in: _Dest=0x3063428, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.137] wcscat (in: _Dest=0x3063428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.137] wcscat (in: _Dest=0x3063428, _Source="J0171685.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" [0221.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3063428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0221.139] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8baf1330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1 [0221.139] wcscmp (_String1="J0171847.WMF", _String2=".") returned 1 [0221.139] wcscmp (_String1="J0171847.WMF", _String2="..") returned 1 [0221.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a5f8 [0221.139] wcscpy (in: _Dest=0x309a5f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.139] wcscat (in: _Dest=0x309a5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.139] wcscat (in: _Dest=0x309a5f8, _Source="J0171847.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" [0221.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x309a5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0221.140] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1 [0221.140] wcscmp (_String1="J0172035.WMF", _String2=".") returned 1 [0221.140] wcscmp (_String1="J0172035.WMF", _String2="..") returned 1 [0221.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099cf0 [0221.140] wcscpy (in: _Dest=0x3099cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.140] wcscat (in: _Dest=0x3099cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.140] wcscat (in: _Dest=0x3099cf0, _Source="J0172035.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" [0221.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3099cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0221.141] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1 [0221.141] wcscmp (_String1="J0172067.WMF", _String2=".") returned 1 [0221.141] wcscmp (_String1="J0172067.WMF", _String2="..") returned 1 [0221.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a708 [0221.141] wcscpy (in: _Dest=0x309a708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.141] wcscat (in: _Dest=0x309a708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.141] wcscat (in: _Dest=0x309a708, _Source="J0172067.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" [0221.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x309a708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0221.142] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1 [0221.142] wcscmp (_String1="J0172193.WMF", _String2=".") returned 1 [0221.142] wcscmp (_String1="J0172193.WMF", _String2="..") returned 1 [0221.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a680 [0221.142] wcscpy (in: _Dest=0x309a680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.143] wcscat (in: _Dest=0x309a680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.143] wcscat (in: _Dest=0x309a680, _Source="J0172193.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" [0221.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x309a680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0221.144] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1 [0221.144] wcscmp (_String1="J0174315.WMF", _String2=".") returned 1 [0221.144] wcscmp (_String1="J0174315.WMF", _String2="..") returned 1 [0221.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62090 [0221.144] wcscpy (in: _Dest=0x7a62090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.144] wcscat (in: _Dest=0x7a62090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.144] wcscat (in: _Dest=0x7a62090, _Source="J0174315.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" [0221.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0221.145] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1 [0221.145] wcscmp (_String1="J0174635.WMF", _String2=".") returned 1 [0221.145] wcscmp (_String1="J0174635.WMF", _String2="..") returned 1 [0221.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62118 [0221.145] wcscpy (in: _Dest=0x7a62118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.145] wcscat (in: _Dest=0x7a62118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.145] wcscat (in: _Dest=0x7a62118, _Source="J0174635.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" [0221.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0221.146] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1 [0221.146] wcscmp (_String1="J0174639.WMF", _String2=".") returned 1 [0221.147] wcscmp (_String1="J0174639.WMF", _String2="..") returned 1 [0221.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a621a0 [0221.147] wcscpy (in: _Dest=0x7a621a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.147] wcscat (in: _Dest=0x7a621a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.147] wcscat (in: _Dest=0x7a621a0, _Source="J0174639.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" [0221.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a621a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0221.148] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1 [0221.148] wcscmp (_String1="J0174952.JPG", _String2=".") returned 1 [0221.148] wcscmp (_String1="J0174952.JPG", _String2="..") returned 1 [0221.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62228 [0221.148] wcscpy (in: _Dest=0x7a62228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.148] wcscat (in: _Dest=0x7a62228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.148] wcscat (in: _Dest=0x7a62228, _Source="J0174952.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" [0221.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0221.149] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1 [0221.149] wcscmp (_String1="J0175361.JPG", _String2=".") returned 1 [0221.149] wcscmp (_String1="J0175361.JPG", _String2="..") returned 1 [0221.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a622b0 [0221.149] wcscpy (in: _Dest=0x7a622b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.149] wcscat (in: _Dest=0x7a622b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.149] wcscat (in: _Dest=0x7a622b0, _Source="J0175361.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" [0221.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a622b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0221.150] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1 [0221.150] wcscmp (_String1="J0175428.JPG", _String2=".") returned 1 [0221.151] wcscmp (_String1="J0175428.JPG", _String2="..") returned 1 [0221.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62338 [0221.151] wcscpy (in: _Dest=0x7a62338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.151] wcscat (in: _Dest=0x7a62338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.151] wcscat (in: _Dest=0x7a62338, _Source="J0175428.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" [0221.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0221.152] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5d8610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1 [0221.152] wcscmp (_String1="J0177257.JPG", _String2=".") returned 1 [0221.152] wcscmp (_String1="J0177257.JPG", _String2="..") returned 1 [0221.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a623c0 [0221.152] wcscpy (in: _Dest=0x7a623c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.152] wcscat (in: _Dest=0x7a623c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.152] wcscat (in: _Dest=0x7a623c0, _Source="J0177257.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" [0221.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a623c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0221.153] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1 [0221.153] wcscmp (_String1="J0177806.JPG", _String2=".") returned 1 [0221.153] wcscmp (_String1="J0177806.JPG", _String2="..") returned 1 [0221.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62448 [0221.154] wcscpy (in: _Dest=0x7a62448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.154] wcscat (in: _Dest=0x7a62448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.154] wcscat (in: _Dest=0x7a62448, _Source="J0177806.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" [0221.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0221.155] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1 [0221.155] wcscmp (_String1="J0178348.JPG", _String2=".") returned 1 [0221.155] wcscmp (_String1="J0178348.JPG", _String2="..") returned 1 [0221.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a624d0 [0221.155] wcscpy (in: _Dest=0x7a624d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.155] wcscat (in: _Dest=0x7a624d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.155] wcscat (in: _Dest=0x7a624d0, _Source="J0178348.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" [0221.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a624d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0221.156] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1 [0221.156] wcscmp (_String1="J0178459.JPG", _String2=".") returned 1 [0221.156] wcscmp (_String1="J0178459.JPG", _String2="..") returned 1 [0221.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62558 [0221.156] wcscpy (in: _Dest=0x7a62558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.156] wcscat (in: _Dest=0x7a62558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.156] wcscat (in: _Dest=0x7a62558, _Source="J0178459.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" [0221.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0221.157] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x352e7200, ftCreationTime.dwHighDateTime=0x1c97c1a, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352e7200, ftLastWriteTime.dwHighDateTime=0x1c97c1a, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1 [0221.157] wcscmp (_String1="J0178460.JPG", _String2=".") returned 1 [0221.157] wcscmp (_String1="J0178460.JPG", _String2="..") returned 1 [0221.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a625e0 [0221.157] wcscpy (in: _Dest=0x7a625e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.157] wcscat (in: _Dest=0x7a625e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.158] wcscat (in: _Dest=0x7a625e0, _Source="J0178460.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" [0221.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a625e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0221.159] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1 [0221.159] wcscmp (_String1="J0178523.JPG", _String2=".") returned 1 [0221.159] wcscmp (_String1="J0178523.JPG", _String2="..") returned 1 [0221.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62668 [0221.159] wcscpy (in: _Dest=0x7a62668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.159] wcscat (in: _Dest=0x7a62668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.159] wcscat (in: _Dest=0x7a62668, _Source="J0178523.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" [0221.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0221.160] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1 [0221.160] wcscmp (_String1="J0178632.JPG", _String2=".") returned 1 [0221.160] wcscmp (_String1="J0178632.JPG", _String2="..") returned 1 [0221.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a626f0 [0221.160] wcscpy (in: _Dest=0x7a626f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.160] wcscat (in: _Dest=0x7a626f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.160] wcscat (in: _Dest=0x7a626f0, _Source="J0178632.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" [0221.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a626f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0221.161] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1 [0221.161] wcscmp (_String1="J0178639.JPG", _String2=".") returned 1 [0221.161] wcscmp (_String1="J0178639.JPG", _String2="..") returned 1 [0221.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62778 [0221.161] wcscpy (in: _Dest=0x7a62778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.161] wcscat (in: _Dest=0x7a62778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.161] wcscat (in: _Dest=0x7a62778, _Source="J0178639.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" [0221.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0221.162] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1 [0221.162] wcscmp (_String1="J0178932.JPG", _String2=".") returned 1 [0221.162] wcscmp (_String1="J0178932.JPG", _String2="..") returned 1 [0221.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62800 [0221.163] wcscpy (in: _Dest=0x7a62800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.163] wcscat (in: _Dest=0x7a62800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.163] wcscat (in: _Dest=0x7a62800, _Source="J0178932.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" [0221.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0221.164] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1 [0221.164] wcscmp (_String1="J0179963.JPG", _String2=".") returned 1 [0221.164] wcscmp (_String1="J0179963.JPG", _String2="..") returned 1 [0221.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62888 [0221.164] wcscpy (in: _Dest=0x7a62888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.164] wcscat (in: _Dest=0x7a62888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.164] wcscat (in: _Dest=0x7a62888, _Source="J0179963.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" [0221.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0221.165] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1 [0221.165] wcscmp (_String1="J0182689.JPG", _String2=".") returned 1 [0221.165] wcscmp (_String1="J0182689.JPG", _String2="..") returned 1 [0221.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62910 [0221.165] wcscpy (in: _Dest=0x7a62910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.165] wcscat (in: _Dest=0x7a62910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.165] wcscat (in: _Dest=0x7a62910, _Source="J0182689.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" [0221.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0221.166] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1 [0221.166] wcscmp (_String1="J0182888.WMF", _String2=".") returned 1 [0221.166] wcscmp (_String1="J0182888.WMF", _String2="..") returned 1 [0221.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62998 [0221.166] wcscpy (in: _Dest=0x7a62998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.167] wcscat (in: _Dest=0x7a62998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.167] wcscat (in: _Dest=0x7a62998, _Source="J0182888.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" [0221.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0221.168] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1 [0221.168] wcscmp (_String1="J0182898.WMF", _String2=".") returned 1 [0221.168] wcscmp (_String1="J0182898.WMF", _String2="..") returned 1 [0221.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62a20 [0221.168] wcscpy (in: _Dest=0x7a62a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.168] wcscat (in: _Dest=0x7a62a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.168] wcscat (in: _Dest=0x7a62a20, _Source="J0182898.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" [0221.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0221.169] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1 [0221.169] wcscmp (_String1="J0182902.WMF", _String2=".") returned 1 [0221.169] wcscmp (_String1="J0182902.WMF", _String2="..") returned 1 [0221.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62aa8 [0221.169] wcscpy (in: _Dest=0x7a62aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.169] wcscat (in: _Dest=0x7a62aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.169] wcscat (in: _Dest=0x7a62aa8, _Source="J0182902.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" [0221.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0221.215] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65dea00, ftCreationTime.dwHighDateTime=0x1bdf759, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb65dea00, ftLastWriteTime.dwHighDateTime=0x1bdf759, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1 [0221.215] wcscmp (_String1="J0182946.WMF", _String2=".") returned 1 [0221.215] wcscmp (_String1="J0182946.WMF", _String2="..") returned 1 [0221.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62b30 [0221.216] wcscpy (in: _Dest=0x7a62b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.216] wcscat (in: _Dest=0x7a62b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.216] wcscat (in: _Dest=0x7a62b30, _Source="J0182946.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" [0221.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0221.217] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1 [0221.217] wcscmp (_String1="J0183172.WMF", _String2=".") returned 1 [0221.217] wcscmp (_String1="J0183172.WMF", _String2="..") returned 1 [0221.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62bb8 [0221.218] wcscpy (in: _Dest=0x7a62bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.218] wcscat (in: _Dest=0x7a62bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.218] wcscat (in: _Dest=0x7a62bb8, _Source="J0183172.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" [0221.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0221.219] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb17490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1 [0221.219] wcscmp (_String1="J0183174.WMF", _String2=".") returned 1 [0221.219] wcscmp (_String1="J0183174.WMF", _String2="..") returned 1 [0221.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62c40 [0221.219] wcscpy (in: _Dest=0x7a62c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.219] wcscat (in: _Dest=0x7a62c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.219] wcscat (in: _Dest=0x7a62c40, _Source="J0183174.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" [0221.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0221.220] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1 [0221.220] wcscmp (_String1="J0183198.WMF", _String2=".") returned 1 [0221.220] wcscmp (_String1="J0183198.WMF", _String2="..") returned 1 [0221.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62cc8 [0221.220] wcscpy (in: _Dest=0x7a62cc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.220] wcscat (in: _Dest=0x7a62cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.220] wcscat (in: _Dest=0x7a62cc8, _Source="J0183198.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" [0221.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0221.221] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b5fe770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1 [0221.221] wcscmp (_String1="J0183574.WMF", _String2=".") returned 1 [0221.221] wcscmp (_String1="J0183574.WMF", _String2="..") returned 1 [0221.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62d50 [0221.222] wcscpy (in: _Dest=0x7a62d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.222] wcscat (in: _Dest=0x7a62d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.222] wcscat (in: _Dest=0x7a62d50, _Source="J0183574.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" [0221.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0221.223] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1 [0221.223] wcscmp (_String1="J0185670.WMF", _String2=".") returned 1 [0221.223] wcscmp (_String1="J0185670.WMF", _String2="..") returned 1 [0221.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62dd8 [0221.223] wcscpy (in: _Dest=0x7a62dd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.223] wcscat (in: _Dest=0x7a62dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.223] wcscat (in: _Dest=0x7a62dd8, _Source="J0185670.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" [0221.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0221.224] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1 [0221.314] wcscmp (_String1="J0185774.WMF", _String2=".") returned 1 [0221.314] wcscmp (_String1="J0185774.WMF", _String2="..") returned 1 [0221.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62e60 [0221.315] wcscpy (in: _Dest=0x7a62e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.315] wcscat (in: _Dest=0x7a62e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.315] wcscat (in: _Dest=0x7a62e60, _Source="J0185774.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" [0221.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0221.316] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1 [0221.316] wcscmp (_String1="J0185776.WMF", _String2=".") returned 1 [0221.316] wcscmp (_String1="J0185776.WMF", _String2="..") returned 1 [0221.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62ee8 [0221.316] wcscpy (in: _Dest=0x7a62ee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.316] wcscat (in: _Dest=0x7a62ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.317] wcscat (in: _Dest=0x7a62ee8, _Source="J0185776.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" [0221.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0221.318] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1 [0221.318] wcscmp (_String1="J0185778.WMF", _String2=".") returned 1 [0221.318] wcscmp (_String1="J0185778.WMF", _String2="..") returned 1 [0221.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62f70 [0221.318] wcscpy (in: _Dest=0x7a62f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.318] wcscat (in: _Dest=0x7a62f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.318] wcscat (in: _Dest=0x7a62f70, _Source="J0185778.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" [0221.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0221.320] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1 [0221.320] wcscmp (_String1="J0185780.WMF", _String2=".") returned 1 [0221.320] wcscmp (_String1="J0185780.WMF", _String2="..") returned 1 [0221.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62ff8 [0221.320] wcscpy (in: _Dest=0x7a62ff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.320] wcscat (in: _Dest=0x7a62ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.320] wcscat (in: _Dest=0x7a62ff8, _Source="J0185780.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" [0221.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0221.321] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1 [0221.321] wcscmp (_String1="J0185786.WMF", _String2=".") returned 1 [0221.321] wcscmp (_String1="J0185786.WMF", _String2="..") returned 1 [0221.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63080 [0221.322] wcscpy (in: _Dest=0x7a63080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.322] wcscat (in: _Dest=0x7a63080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.322] wcscat (in: _Dest=0x7a63080, _Source="J0185786.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" [0221.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0221.323] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1 [0221.323] wcscmp (_String1="J0185790.WMF", _String2=".") returned 1 [0221.323] wcscmp (_String1="J0185790.WMF", _String2="..") returned 1 [0221.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63108 [0221.323] wcscpy (in: _Dest=0x7a63108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.323] wcscat (in: _Dest=0x7a63108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.323] wcscat (in: _Dest=0x7a63108, _Source="J0185790.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" [0221.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0221.325] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1 [0221.325] wcscmp (_String1="J0185796.WMF", _String2=".") returned 1 [0221.325] wcscmp (_String1="J0185796.WMF", _String2="..") returned 1 [0221.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63190 [0221.325] wcscpy (in: _Dest=0x7a63190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.325] wcscat (in: _Dest=0x7a63190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.325] wcscat (in: _Dest=0x7a63190, _Source="J0185796.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" [0221.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0221.326] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1 [0221.326] wcscmp (_String1="J0185798.WMF", _String2=".") returned 1 [0221.326] wcscmp (_String1="J0185798.WMF", _String2="..") returned 1 [0221.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63218 [0221.327] wcscpy (in: _Dest=0x7a63218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.327] wcscat (in: _Dest=0x7a63218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.327] wcscat (in: _Dest=0x7a63218, _Source="J0185798.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" [0221.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0221.328] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1 [0221.328] wcscmp (_String1="J0185800.WMF", _String2=".") returned 1 [0221.328] wcscmp (_String1="J0185800.WMF", _String2="..") returned 1 [0221.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a632a0 [0221.328] wcscpy (in: _Dest=0x7a632a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.328] wcscat (in: _Dest=0x7a632a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.328] wcscat (in: _Dest=0x7a632a0, _Source="J0185800.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" [0221.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a632a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0221.330] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1 [0221.330] wcscmp (_String1="J0185806.WMF", _String2=".") returned 1 [0221.330] wcscmp (_String1="J0185806.WMF", _String2="..") returned 1 [0221.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63328 [0221.330] wcscpy (in: _Dest=0x7a63328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.330] wcscat (in: _Dest=0x7a63328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.330] wcscat (in: _Dest=0x7a63328, _Source="J0185806.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" [0221.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0221.331] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6248d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1 [0221.331] wcscmp (_String1="J0185818.WMF", _String2=".") returned 1 [0221.331] wcscmp (_String1="J0185818.WMF", _String2="..") returned 1 [0221.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a633b0 [0221.331] wcscpy (in: _Dest=0x7a633b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.331] wcscat (in: _Dest=0x7a633b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.331] wcscat (in: _Dest=0x7a633b0, _Source="J0185818.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" [0221.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a633b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0221.333] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1 [0221.333] wcscmp (_String1="J0185828.WMF", _String2=".") returned 1 [0221.333] wcscmp (_String1="J0185828.WMF", _String2="..") returned 1 [0221.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63438 [0221.333] wcscpy (in: _Dest=0x7a63438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.333] wcscat (in: _Dest=0x7a63438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.333] wcscat (in: _Dest=0x7a63438, _Source="J0185828.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" [0221.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0221.334] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1 [0221.334] wcscmp (_String1="J0185834.WMF", _String2=".") returned 1 [0221.334] wcscmp (_String1="J0185834.WMF", _String2="..") returned 1 [0221.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a634c0 [0221.335] wcscpy (in: _Dest=0x7a634c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.335] wcscat (in: _Dest=0x7a634c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.335] wcscat (in: _Dest=0x7a634c0, _Source="J0185834.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" [0221.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a634c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0221.336] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1 [0221.336] wcscmp (_String1="J0185842.WMF", _String2=".") returned 1 [0221.336] wcscmp (_String1="J0185842.WMF", _String2="..") returned 1 [0221.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63548 [0221.336] wcscpy (in: _Dest=0x7a63548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.336] wcscat (in: _Dest=0x7a63548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.336] wcscat (in: _Dest=0x7a63548, _Source="J0185842.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" [0221.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0221.337] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1 [0221.337] wcscmp (_String1="J0186346.WMF", _String2=".") returned 1 [0221.337] wcscmp (_String1="J0186346.WMF", _String2="..") returned 1 [0221.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a635d0 [0221.338] wcscpy (in: _Dest=0x7a635d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.338] wcscat (in: _Dest=0x7a635d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.338] wcscat (in: _Dest=0x7a635d0, _Source="J0186346.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" [0221.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a635d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0221.339] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1 [0221.339] wcscmp (_String1="J0186360.WMF", _String2=".") returned 1 [0221.339] wcscmp (_String1="J0186360.WMF", _String2="..") returned 1 [0221.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63658 [0221.339] wcscpy (in: _Dest=0x7a63658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.339] wcscat (in: _Dest=0x7a63658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.339] wcscat (in: _Dest=0x7a63658, _Source="J0186360.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" [0221.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0221.341] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1 [0221.341] wcscmp (_String1="J0186362.WMF", _String2=".") returned 1 [0221.341] wcscmp (_String1="J0186362.WMF", _String2="..") returned 1 [0221.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a636e0 [0221.341] wcscpy (in: _Dest=0x7a636e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.341] wcscat (in: _Dest=0x7a636e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.341] wcscat (in: _Dest=0x7a636e0, _Source="J0186362.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" [0221.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a636e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0221.342] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1 [0221.342] wcscmp (_String1="J0186364.WMF", _String2=".") returned 1 [0221.342] wcscmp (_String1="J0186364.WMF", _String2="..") returned 1 [0221.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63768 [0221.343] wcscpy (in: _Dest=0x7a63768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.343] wcscat (in: _Dest=0x7a63768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.343] wcscat (in: _Dest=0x7a63768, _Source="J0186364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" [0221.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0221.344] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1 [0221.344] wcscmp (_String1="J0187647.WMF", _String2=".") returned 1 [0221.344] wcscmp (_String1="J0187647.WMF", _String2="..") returned 1 [0221.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a637f0 [0221.344] wcscpy (in: _Dest=0x7a637f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.344] wcscat (in: _Dest=0x7a637f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.344] wcscat (in: _Dest=0x7a637f0, _Source="J0187647.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" [0221.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a637f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0221.346] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1 [0221.346] wcscmp (_String1="J0187815.WMF", _String2=".") returned 1 [0221.346] wcscmp (_String1="J0187815.WMF", _String2="..") returned 1 [0221.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63878 [0221.346] wcscpy (in: _Dest=0x7a63878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.346] wcscat (in: _Dest=0x7a63878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.346] wcscat (in: _Dest=0x7a63878, _Source="J0187815.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" [0221.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0221.347] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1 [0221.347] wcscmp (_String1="J0187817.WMF", _String2=".") returned 1 [0221.347] wcscmp (_String1="J0187817.WMF", _String2="..") returned 1 [0221.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63900 [0221.347] wcscpy (in: _Dest=0x7a63900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.347] wcscat (in: _Dest=0x7a63900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.347] wcscat (in: _Dest=0x7a63900, _Source="J0187817.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" [0221.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0221.349] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1 [0221.349] wcscmp (_String1="J0187819.WMF", _String2=".") returned 1 [0221.349] wcscmp (_String1="J0187819.WMF", _String2="..") returned 1 [0221.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63988 [0221.349] wcscpy (in: _Dest=0x7a63988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.349] wcscat (in: _Dest=0x7a63988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.349] wcscat (in: _Dest=0x7a63988, _Source="J0187819.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" [0221.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0221.382] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1 [0221.382] wcscmp (_String1="J0187825.WMF", _String2=".") returned 1 [0221.382] wcscmp (_String1="J0187825.WMF", _String2="..") returned 1 [0221.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63a10 [0221.382] wcscpy (in: _Dest=0x7a63a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.382] wcscat (in: _Dest=0x7a63a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.383] wcscat (in: _Dest=0x7a63a10, _Source="J0187825.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" [0221.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0221.384] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1 [0221.384] wcscmp (_String1="J0187829.WMF", _String2=".") returned 1 [0221.384] wcscmp (_String1="J0187829.WMF", _String2="..") returned 1 [0221.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63a98 [0221.384] wcscpy (in: _Dest=0x7a63a98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.384] wcscat (in: _Dest=0x7a63a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.384] wcscat (in: _Dest=0x7a63a98, _Source="J0187829.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" [0221.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0221.386] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1 [0221.386] wcscmp (_String1="J0187835.WMF", _String2=".") returned 1 [0221.386] wcscmp (_String1="J0187835.WMF", _String2="..") returned 1 [0221.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63b20 [0221.386] wcscpy (in: _Dest=0x7a63b20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.386] wcscat (in: _Dest=0x7a63b20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.386] wcscat (in: _Dest=0x7a63b20, _Source="J0187835.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" [0221.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0221.387] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1 [0221.387] wcscmp (_String1="J0187837.WMF", _String2=".") returned 1 [0221.387] wcscmp (_String1="J0187837.WMF", _String2="..") returned 1 [0221.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63ba8 [0221.388] wcscpy (in: _Dest=0x7a63ba8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.388] wcscat (in: _Dest=0x7a63ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.388] wcscat (in: _Dest=0x7a63ba8, _Source="J0187837.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" [0221.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0221.389] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b64aa30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1 [0221.389] wcscmp (_String1="J0187839.WMF", _String2=".") returned 1 [0221.389] wcscmp (_String1="J0187839.WMF", _String2="..") returned 1 [0221.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63c30 [0221.389] wcscpy (in: _Dest=0x7a63c30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.389] wcscat (in: _Dest=0x7a63c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.389] wcscat (in: _Dest=0x7a63c30, _Source="J0187839.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" [0221.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0221.390] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1 [0221.390] wcscmp (_String1="J0187847.WMF", _String2=".") returned 1 [0221.391] wcscmp (_String1="J0187847.WMF", _String2="..") returned 1 [0221.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63cb8 [0221.391] wcscpy (in: _Dest=0x7a63cb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.391] wcscat (in: _Dest=0x7a63cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.391] wcscat (in: _Dest=0x7a63cb8, _Source="J0187847.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" [0221.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0221.392] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1 [0221.392] wcscmp (_String1="J0187849.WMF", _String2=".") returned 1 [0221.392] wcscmp (_String1="J0187849.WMF", _String2="..") returned 1 [0221.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63d40 [0221.392] wcscpy (in: _Dest=0x7a63d40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.392] wcscat (in: _Dest=0x7a63d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.392] wcscat (in: _Dest=0x7a63d40, _Source="J0187849.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" [0221.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0221.394] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1 [0221.394] wcscmp (_String1="J0187851.WMF", _String2=".") returned 1 [0221.394] wcscmp (_String1="J0187851.WMF", _String2="..") returned 1 [0221.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63dc8 [0221.394] wcscpy (in: _Dest=0x7a63dc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.394] wcscat (in: _Dest=0x7a63dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.394] wcscat (in: _Dest=0x7a63dc8, _Source="J0187851.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" [0221.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0221.395] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1 [0221.395] wcscmp (_String1="J0187859.WMF", _String2=".") returned 1 [0221.395] wcscmp (_String1="J0187859.WMF", _String2="..") returned 1 [0221.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63e50 [0221.396] wcscpy (in: _Dest=0x7a63e50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.396] wcscat (in: _Dest=0x7a63e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.396] wcscat (in: _Dest=0x7a63e50, _Source="J0187859.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" [0221.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0221.397] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1 [0221.397] wcscmp (_String1="J0187861.WMF", _String2=".") returned 1 [0221.397] wcscmp (_String1="J0187861.WMF", _String2="..") returned 1 [0221.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63ed8 [0221.397] wcscpy (in: _Dest=0x7a63ed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.397] wcscat (in: _Dest=0x7a63ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.397] wcscat (in: _Dest=0x7a63ed8, _Source="J0187861.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" [0221.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0221.399] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1 [0221.399] wcscmp (_String1="J0187863.WMF", _String2=".") returned 1 [0221.399] wcscmp (_String1="J0187863.WMF", _String2="..") returned 1 [0221.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63f60 [0221.399] wcscpy (in: _Dest=0x7a63f60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.399] wcscat (in: _Dest=0x7a63f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.399] wcscat (in: _Dest=0x7a63f60, _Source="J0187863.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" [0221.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0221.400] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1 [0221.401] wcscmp (_String1="J0187881.WMF", _String2=".") returned 1 [0221.401] wcscmp (_String1="J0187881.WMF", _String2="..") returned 1 [0221.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a63fe8 [0221.401] wcscpy (in: _Dest=0x7a63fe8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.401] wcscat (in: _Dest=0x7a63fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.401] wcscat (in: _Dest=0x7a63fe8, _Source="J0187881.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" [0221.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0221.402] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1 [0221.663] wcscmp (_String1="J0187883.WMF", _String2=".") returned 1 [0221.663] wcscmp (_String1="J0187883.WMF", _String2="..") returned 1 [0221.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac020 [0221.663] wcscpy (in: _Dest=0x7cac020, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.663] wcscat (in: _Dest=0x7cac020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.664] wcscat (in: _Dest=0x7cac020, _Source="J0187883.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" [0221.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0221.691] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1 [0221.691] wcscmp (_String1="J0187893.WMF", _String2=".") returned 1 [0221.691] wcscmp (_String1="J0187893.WMF", _String2="..") returned 1 [0221.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac0a8 [0221.692] wcscpy (in: _Dest=0x7cac0a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.692] wcscat (in: _Dest=0x7cac0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.692] wcscat (in: _Dest=0x7cac0a8, _Source="J0187893.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" [0221.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0221.693] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1 [0221.693] wcscmp (_String1="J0187895.WMF", _String2=".") returned 1 [0221.693] wcscmp (_String1="J0187895.WMF", _String2="..") returned 1 [0221.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac130 [0221.693] wcscpy (in: _Dest=0x7cac130, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.693] wcscat (in: _Dest=0x7cac130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.693] wcscat (in: _Dest=0x7cac130, _Source="J0187895.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" [0221.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0221.695] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1 [0221.695] wcscmp (_String1="J0187921.WMF", _String2=".") returned 1 [0221.695] wcscmp (_String1="J0187921.WMF", _String2="..") returned 1 [0221.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac1b8 [0221.695] wcscpy (in: _Dest=0x7cac1b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.695] wcscat (in: _Dest=0x7cac1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.695] wcscat (in: _Dest=0x7cac1b8, _Source="J0187921.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" [0221.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0221.696] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1 [0221.696] wcscmp (_String1="J0188511.WMF", _String2=".") returned 1 [0221.696] wcscmp (_String1="J0188511.WMF", _String2="..") returned 1 [0221.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac240 [0221.696] wcscpy (in: _Dest=0x7cac240, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.697] wcscat (in: _Dest=0x7cac240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.697] wcscat (in: _Dest=0x7cac240, _Source="J0188511.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" [0221.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0221.698] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb3d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1 [0221.698] wcscmp (_String1="J0188513.WMF", _String2=".") returned 1 [0221.698] wcscmp (_String1="J0188513.WMF", _String2="..") returned 1 [0221.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac2c8 [0221.698] wcscpy (in: _Dest=0x7cac2c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.698] wcscat (in: _Dest=0x7cac2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.698] wcscat (in: _Dest=0x7cac2c8, _Source="J0188513.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" [0221.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0221.699] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1 [0221.699] wcscmp (_String1="J0188519.WMF", _String2=".") returned 1 [0221.699] wcscmp (_String1="J0188519.WMF", _String2="..") returned 1 [0221.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac350 [0221.700] wcscpy (in: _Dest=0x7cac350, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.700] wcscat (in: _Dest=0x7cac350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.700] wcscat (in: _Dest=0x7cac350, _Source="J0188519.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" [0221.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0221.701] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1 [0221.701] wcscmp (_String1="J0188587.WMF", _String2=".") returned 1 [0221.701] wcscmp (_String1="J0188587.WMF", _String2="..") returned 1 [0221.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac3d8 [0221.701] wcscpy (in: _Dest=0x7cac3d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.702] wcscat (in: _Dest=0x7cac3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.702] wcscat (in: _Dest=0x7cac3d8, _Source="J0188587.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" [0221.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0221.703] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1 [0221.703] wcscmp (_String1="J0188667.WMF", _String2=".") returned 1 [0221.703] wcscmp (_String1="J0188667.WMF", _String2="..") returned 1 [0221.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac460 [0221.703] wcscpy (in: _Dest=0x7cac460, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.703] wcscat (in: _Dest=0x7cac460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.703] wcscat (in: _Dest=0x7cac460, _Source="J0188667.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" [0221.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13fc [0221.705] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1 [0221.705] wcscmp (_String1="J0188669.WMF", _String2=".") returned 1 [0221.705] wcscmp (_String1="J0188669.WMF", _String2="..") returned 1 [0221.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac4e8 [0221.705] wcscpy (in: _Dest=0x7cac4e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.705] wcscat (in: _Dest=0x7cac4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.705] wcscat (in: _Dest=0x7cac4e8, _Source="J0188669.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" [0221.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0221.707] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1 [0221.707] wcscmp (_String1="J0188679.WMF", _String2=".") returned 1 [0221.707] wcscmp (_String1="J0188679.WMF", _String2="..") returned 1 [0221.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac570 [0221.707] wcscpy (in: _Dest=0x7cac570, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.707] wcscat (in: _Dest=0x7cac570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.707] wcscat (in: _Dest=0x7cac570, _Source="J0188679.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" [0221.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0221.708] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1 [0221.708] wcscmp (_String1="J0195248.WMF", _String2=".") returned 1 [0221.708] wcscmp (_String1="J0195248.WMF", _String2="..") returned 1 [0221.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac5f8 [0221.708] wcscpy (in: _Dest=0x7cac5f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.709] wcscat (in: _Dest=0x7cac5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.709] wcscat (in: _Dest=0x7cac5f8, _Source="J0195248.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" [0221.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0221.710] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17119f00, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17119f00, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1 [0221.710] wcscmp (_String1="J0195254.WMF", _String2=".") returned 1 [0221.710] wcscmp (_String1="J0195254.WMF", _String2="..") returned 1 [0221.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac680 [0221.710] wcscpy (in: _Dest=0x7cac680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.710] wcscat (in: _Dest=0x7cac680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.710] wcscat (in: _Dest=0x7cac680, _Source="J0195254.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" [0221.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1400 [0221.711] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aa52600, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aa52600, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1 [0221.711] wcscmp (_String1="J0195260.WMF", _String2=".") returned 1 [0221.711] wcscmp (_String1="J0195260.WMF", _String2="..") returned 1 [0221.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac708 [0221.712] wcscpy (in: _Dest=0x7cac708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.712] wcscat (in: _Dest=0x7cac708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.712] wcscat (in: _Dest=0x7cac708, _Source="J0195260.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" [0221.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0221.713] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db7f600, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2db7f600, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1 [0221.713] wcscmp (_String1="J0195320.WMF", _String2=".") returned 1 [0221.713] wcscmp (_String1="J0195320.WMF", _String2="..") returned 1 [0221.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac790 [0221.713] wcscpy (in: _Dest=0x7cac790, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.713] wcscat (in: _Dest=0x7cac790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.713] wcscat (in: _Dest=0x7cac790, _Source="J0195320.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" [0221.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0221.715] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e686c00, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e686c00, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1 [0221.715] wcscmp (_String1="J0195342.WMF", _String2=".") returned 1 [0221.715] wcscmp (_String1="J0195342.WMF", _String2="..") returned 1 [0221.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac818 [0221.715] wcscpy (in: _Dest=0x7cac818, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.715] wcscat (in: _Dest=0x7cac818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.715] wcscat (in: _Dest=0x7cac818, _Source="J0195342.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" [0221.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0221.717] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1 [0221.717] wcscmp (_String1="J0195428.WMF", _String2=".") returned 1 [0221.717] wcscmp (_String1="J0195428.WMF", _String2="..") returned 1 [0221.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac8a0 [0221.717] wcscpy (in: _Dest=0x7cac8a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.717] wcscat (in: _Dest=0x7cac8a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.717] wcscat (in: _Dest=0x7cac8a0, _Source="J0195428.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" [0221.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac8a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0221.718] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1 [0221.718] wcscmp (_String1="J0195772.WMF", _String2=".") returned 1 [0221.719] wcscmp (_String1="J0195772.WMF", _String2="..") returned 1 [0221.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac928 [0221.719] wcscpy (in: _Dest=0x7cac928, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.719] wcscat (in: _Dest=0x7cac928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.719] wcscat (in: _Dest=0x7cac928, _Source="J0195772.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" [0221.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0221.720] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1 [0221.720] wcscmp (_String1="J0195788.WMF", _String2=".") returned 1 [0221.720] wcscmp (_String1="J0195788.WMF", _String2="..") returned 1 [0221.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cac9b0 [0221.720] wcscpy (in: _Dest=0x7cac9b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.720] wcscat (in: _Dest=0x7cac9b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.720] wcscat (in: _Dest=0x7cac9b0, _Source="J0195788.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" [0221.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cac9b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0221.722] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b670b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1 [0221.722] wcscmp (_String1="J0196060.WMF", _String2=".") returned 1 [0221.722] wcscmp (_String1="J0196060.WMF", _String2="..") returned 1 [0221.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7caca38 [0221.722] wcscpy (in: _Dest=0x7caca38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.722] wcscat (in: _Dest=0x7caca38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.722] wcscat (in: _Dest=0x7caca38, _Source="J0196060.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" [0221.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caca38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0221.724] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1 [0221.724] wcscmp (_String1="J0196110.WMF", _String2=".") returned 1 [0221.724] wcscmp (_String1="J0196110.WMF", _String2="..") returned 1 [0221.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cacac0 [0221.724] wcscpy (in: _Dest=0x7cacac0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.724] wcscat (in: _Dest=0x7cacac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.724] wcscat (in: _Dest=0x7cacac0, _Source="J0196110.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" [0221.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cacac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0221.786] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1 [0221.786] wcscmp (_String1="J0196142.WMF", _String2=".") returned 1 [0221.786] wcscmp (_String1="J0196142.WMF", _String2="..") returned 1 [0221.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cacb48 [0221.786] wcscpy (in: _Dest=0x7cacb48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.786] wcscat (in: _Dest=0x7cacb48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.786] wcscat (in: _Dest=0x7cacb48, _Source="J0196142.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" [0221.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cacb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0221.814] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d32f00, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d32f00, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1 [0221.814] wcscmp (_String1="J0196354.WMF", _String2=".") returned 1 [0221.814] wcscmp (_String1="J0196354.WMF", _String2="..") returned 1 [0221.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0221.815] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.815] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.815] wcscat (in: _Dest=0x3f3d280, _Source="J0196354.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" [0221.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0221.816] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa045c00, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa045c00, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1 [0221.816] wcscmp (_String1="J0196358.WMF", _String2=".") returned 1 [0221.816] wcscmp (_String1="J0196358.WMF", _String2="..") returned 1 [0221.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3db00 [0221.816] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.816] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.817] wcscat (in: _Dest=0x3f3db00, _Source="J0196358.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" [0221.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0221.818] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd97e300, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd97e300, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1 [0221.818] wcscmp (_String1="J0196364.WMF", _String2=".") returned 1 [0221.818] wcscmp (_String1="J0196364.WMF", _String2="..") returned 1 [0221.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c648 [0221.818] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.818] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.818] wcscat (in: _Dest=0x3f3c648, _Source="J0196364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" [0221.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0221.820] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1 [0221.820] wcscmp (_String1="J0197979.WMF", _String2=".") returned 1 [0221.820] wcscmp (_String1="J0197979.WMF", _String2="..") returned 1 [0221.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cacbd0 [0221.820] wcscpy (in: _Dest=0x7cacbd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.820] wcscat (in: _Dest=0x7cacbd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.820] wcscat (in: _Dest=0x7cacbd0, _Source="J0197979.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" [0221.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cacbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0221.821] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb922a800, ftCreationTime.dwHighDateTime=0x1be3d65, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb922a800, ftLastWriteTime.dwHighDateTime=0x1be3d65, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1 [0221.821] wcscmp (_String1="J0197983.WMF", _String2=".") returned 1 [0221.821] wcscmp (_String1="J0197983.WMF", _String2="..") returned 1 [0221.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cacc58 [0221.822] wcscpy (in: _Dest=0x7cacc58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.822] wcscat (in: _Dest=0x7cacc58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.822] wcscat (in: _Dest=0x7cacc58, _Source="J0197983.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" [0221.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cacc58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0221.823] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f334800, ftCreationTime.dwHighDateTime=0x1c032a1, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f334800, ftLastWriteTime.dwHighDateTime=0x1c032a1, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1 [0221.823] wcscmp (_String1="J0198016.WMF", _String2=".") returned 1 [0221.823] wcscmp (_String1="J0198016.WMF", _String2="..") returned 1 [0221.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cacce0 [0221.824] wcscpy (in: _Dest=0x7cacce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.824] wcscat (in: _Dest=0x7cacce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.824] wcscat (in: _Dest=0x7cacce0, _Source="J0198016.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" [0221.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cacce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0221.825] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e2700, ftCreationTime.dwHighDateTime=0x1bd84c9, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72e2700, ftLastWriteTime.dwHighDateTime=0x1bd84c9, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1 [0221.825] wcscmp (_String1="J0198020.WMF", _String2=".") returned 1 [0221.825] wcscmp (_String1="J0198020.WMF", _String2="..") returned 1 [0221.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cacd68 [0221.826] wcscpy (in: _Dest=0x7cacd68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.826] wcscat (in: _Dest=0x7cacd68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.826] wcscat (in: _Dest=0x7cacd68, _Source="J0198020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" [0221.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cacd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0221.827] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9908100, ftCreationTime.dwHighDateTime=0x1bd84c9, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9908100, ftLastWriteTime.dwHighDateTime=0x1bd84c9, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1 [0221.827] wcscmp (_String1="J0198021.WMF", _String2=".") returned 1 [0221.827] wcscmp (_String1="J0198021.WMF", _String2="..") returned 1 [0221.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cacdf0 [0221.827] wcscpy (in: _Dest=0x7cacdf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.827] wcscat (in: _Dest=0x7cacdf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.827] wcscat (in: _Dest=0x7cacdf0, _Source="J0198021.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" [0221.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cacdf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0221.829] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae31da00, ftCreationTime.dwHighDateTime=0x1c032a1, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae31da00, ftLastWriteTime.dwHighDateTime=0x1c032a1, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1 [0221.829] wcscmp (_String1="J0198022.WMF", _String2=".") returned 1 [0221.829] wcscmp (_String1="J0198022.WMF", _String2="..") returned 1 [0221.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cace78 [0221.829] wcscpy (in: _Dest=0x7cace78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.829] wcscat (in: _Dest=0x7cace78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.829] wcscat (in: _Dest=0x7cace78, _Source="J0198022.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" [0221.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cace78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0221.830] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1319e900, ftCreationTime.dwHighDateTime=0x1bd84c9, ftLastAccessTime.dwLowDateTime=0x8bb63750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1319e900, ftLastWriteTime.dwHighDateTime=0x1bd84c9, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1 [0221.830] wcscmp (_String1="J0198025.WMF", _String2=".") returned 1 [0221.830] wcscmp (_String1="J0198025.WMF", _String2="..") returned 1 [0221.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cacf00 [0221.831] wcscpy (in: _Dest=0x7cacf00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.831] wcscat (in: _Dest=0x7cacf00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.831] wcscat (in: _Dest=0x7cacf00, _Source="J0198025.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" [0221.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cacf00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0221.832] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x608be900, ftCreationTime.dwHighDateTime=0x1bd9f94, ftLastAccessTime.dwLowDateTime=0x7b696cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x608be900, ftLastWriteTime.dwHighDateTime=0x1bd9f94, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1 [0221.832] wcscmp (_String1="J0198102.WMF", _String2=".") returned 1 [0221.832] wcscmp (_String1="J0198102.WMF", _String2="..") returned 1 [0221.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cacf88 [0221.832] wcscpy (in: _Dest=0x7cacf88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.832] wcscat (in: _Dest=0x7cacf88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.832] wcscat (in: _Dest=0x7cacf88, _Source="J0198102.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" [0221.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cacf88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0221.834] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6214ea00, ftCreationTime.dwHighDateTime=0x1bda044, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6214ea00, ftLastWriteTime.dwHighDateTime=0x1bda044, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1 [0221.834] wcscmp (_String1="J0198113.WMF", _String2=".") returned 1 [0221.834] wcscmp (_String1="J0198113.WMF", _String2="..") returned 1 [0221.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad010 [0221.834] wcscpy (in: _Dest=0x7cad010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.834] wcscat (in: _Dest=0x7cad010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.834] wcscat (in: _Dest=0x7cad010, _Source="J0198113.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" [0221.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0221.835] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1 [0221.887] wcscmp (_String1="J0198226.WMF", _String2=".") returned 1 [0221.888] wcscmp (_String1="J0198226.WMF", _String2="..") returned 1 [0221.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68228 [0221.888] wcscpy (in: _Dest=0x7a68228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.888] wcscat (in: _Dest=0x7a68228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.888] wcscat (in: _Dest=0x7a68228, _Source="J0198226.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" [0221.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0221.889] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1 [0221.889] wcscmp (_String1="J0198234.WMF", _String2=".") returned 1 [0221.889] wcscmp (_String1="J0198234.WMF", _String2="..") returned 1 [0221.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad098 [0221.890] wcscpy (in: _Dest=0x7cad098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.890] wcscat (in: _Dest=0x7cad098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.890] wcscat (in: _Dest=0x7cad098, _Source="J0198234.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" [0221.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0221.893] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1 [0221.894] wcscmp (_String1="J0198372.WMF", _String2=".") returned 1 [0221.894] wcscmp (_String1="J0198372.WMF", _String2="..") returned 1 [0221.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad120 [0221.894] wcscpy (in: _Dest=0x7cad120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.894] wcscat (in: _Dest=0x7cad120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.894] wcscat (in: _Dest=0x7cad120, _Source="J0198372.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" [0221.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0221.895] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c73100, ftCreationTime.dwHighDateTime=0x1be3a6d, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c73100, ftLastWriteTime.dwHighDateTime=0x1be3a6d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1 [0221.895] wcscmp (_String1="J0198377.WMF", _String2=".") returned 1 [0221.895] wcscmp (_String1="J0198377.WMF", _String2="..") returned 1 [0221.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad1a8 [0221.895] wcscpy (in: _Dest=0x7cad1a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.895] wcscat (in: _Dest=0x7cad1a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.895] wcscat (in: _Dest=0x7cad1a8, _Source="J0198377.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" [0221.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0221.897] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1 [0221.897] wcscmp (_String1="J0198447.WMF", _String2=".") returned 1 [0221.897] wcscmp (_String1="J0198447.WMF", _String2="..") returned 1 [0221.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad230 [0221.897] wcscpy (in: _Dest=0x7cad230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.897] wcscat (in: _Dest=0x7cad230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.897] wcscat (in: _Dest=0x7cad230, _Source="J0198447.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" [0221.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0221.898] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1 [0221.898] wcscmp (_String1="J0198494.WMF", _String2=".") returned 1 [0221.898] wcscmp (_String1="J0198494.WMF", _String2="..") returned 1 [0221.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad2b8 [0221.898] wcscpy (in: _Dest=0x7cad2b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.898] wcscat (in: _Dest=0x7cad2b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.898] wcscat (in: _Dest=0x7cad2b8, _Source="J0198494.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" [0221.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0221.900] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1 [0221.900] wcscmp (_String1="J0198712.WMF", _String2=".") returned 1 [0221.900] wcscmp (_String1="J0198712.WMF", _String2="..") returned 1 [0221.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad340 [0221.900] wcscpy (in: _Dest=0x7cad340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.900] wcscat (in: _Dest=0x7cad340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.900] wcscat (in: _Dest=0x7cad340, _Source="J0198712.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" [0221.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0221.901] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1 [0221.901] wcscmp (_String1="J0199279.WMF", _String2=".") returned 1 [0221.901] wcscmp (_String1="J0199279.WMF", _String2="..") returned 1 [0221.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad3c8 [0221.901] wcscpy (in: _Dest=0x7cad3c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.901] wcscat (in: _Dest=0x7cad3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.902] wcscat (in: _Dest=0x7cad3c8, _Source="J0199279.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" [0221.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0221.903] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1 [0221.903] wcscmp (_String1="J0199303.WMF", _String2=".") returned 1 [0221.903] wcscmp (_String1="J0199303.WMF", _String2="..") returned 1 [0221.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad450 [0221.903] wcscpy (in: _Dest=0x7cad450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.903] wcscat (in: _Dest=0x7cad450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.903] wcscat (in: _Dest=0x7cad450, _Source="J0199303.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" [0221.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0221.905] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1 [0221.905] wcscmp (_String1="J0199307.WMF", _String2=".") returned 1 [0221.905] wcscmp (_String1="J0199307.WMF", _String2="..") returned 1 [0221.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad4d8 [0221.905] wcscpy (in: _Dest=0x7cad4d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.905] wcscat (in: _Dest=0x7cad4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.905] wcscat (in: _Dest=0x7cad4d8, _Source="J0199307.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" [0221.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0221.906] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1 [0221.906] wcscmp (_String1="J0199423.WMF", _String2=".") returned 1 [0221.906] wcscmp (_String1="J0199423.WMF", _String2="..") returned 1 [0221.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad560 [0221.907] wcscpy (in: _Dest=0x7cad560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.907] wcscat (in: _Dest=0x7cad560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.907] wcscat (in: _Dest=0x7cad560, _Source="J0199423.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" [0221.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0221.908] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1 [0221.908] wcscmp (_String1="J0199429.WMF", _String2=".") returned 1 [0221.908] wcscmp (_String1="J0199429.WMF", _String2="..") returned 1 [0221.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad5e8 [0221.908] wcscpy (in: _Dest=0x7cad5e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.908] wcscat (in: _Dest=0x7cad5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.908] wcscat (in: _Dest=0x7cad5e8, _Source="J0199429.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" [0221.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0221.909] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6bce50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1 [0221.909] wcscmp (_String1="J0199465.WMF", _String2=".") returned 1 [0221.909] wcscmp (_String1="J0199465.WMF", _String2="..") returned 1 [0221.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad670 [0221.910] wcscpy (in: _Dest=0x7cad670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.910] wcscat (in: _Dest=0x7cad670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.910] wcscat (in: _Dest=0x7cad670, _Source="J0199465.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" [0221.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0221.911] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1 [0221.911] wcscmp (_String1="J0199469.WMF", _String2=".") returned 1 [0221.911] wcscmp (_String1="J0199469.WMF", _String2="..") returned 1 [0221.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad6f8 [0221.911] wcscpy (in: _Dest=0x7cad6f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.911] wcscat (in: _Dest=0x7cad6f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.911] wcscat (in: _Dest=0x7cad6f8, _Source="J0199469.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" [0221.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad6f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0221.913] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1 [0221.913] wcscmp (_String1="J0199473.WMF", _String2=".") returned 1 [0221.913] wcscmp (_String1="J0199473.WMF", _String2="..") returned 1 [0221.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad780 [0221.913] wcscpy (in: _Dest=0x7cad780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.913] wcscat (in: _Dest=0x7cad780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.913] wcscat (in: _Dest=0x7cad780, _Source="J0199473.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" [0221.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4 [0221.915] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1 [0221.915] wcscmp (_String1="J0199475.WMF", _String2=".") returned 1 [0221.915] wcscmp (_String1="J0199475.WMF", _String2="..") returned 1 [0221.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad808 [0221.915] wcscpy (in: _Dest=0x7cad808, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.915] wcscat (in: _Dest=0x7cad808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.915] wcscat (in: _Dest=0x7cad808, _Source="J0199475.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" [0221.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0221.917] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1 [0221.917] wcscmp (_String1="J0199483.WMF", _String2=".") returned 1 [0221.917] wcscmp (_String1="J0199483.WMF", _String2="..") returned 1 [0221.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad890 [0221.917] wcscpy (in: _Dest=0x7cad890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.917] wcscat (in: _Dest=0x7cad890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.917] wcscat (in: _Dest=0x7cad890, _Source="J0199483.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" [0221.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0221.919] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2c600, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f2c600, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1 [0221.919] wcscmp (_String1="J0199609.WMF", _String2=".") returned 1 [0221.919] wcscmp (_String1="J0199609.WMF", _String2="..") returned 1 [0221.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad918 [0221.919] wcscpy (in: _Dest=0x7cad918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.919] wcscat (in: _Dest=0x7cad918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.919] wcscat (in: _Dest=0x7cad918, _Source="J0199609.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" [0221.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0221.921] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bb898b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1 [0221.921] wcscmp (_String1="J0200151.WMF", _String2=".") returned 1 [0221.921] wcscmp (_String1="J0200151.WMF", _String2="..") returned 1 [0221.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad9a0 [0221.921] wcscpy (in: _Dest=0x7cad9a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.921] wcscat (in: _Dest=0x7cad9a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.921] wcscat (in: _Dest=0x7cad9a0, _Source="J0200151.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" [0221.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad9a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0221.922] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1 [0221.922] wcscmp (_String1="J0200163.WMF", _String2=".") returned 1 [0221.922] wcscmp (_String1="J0200163.WMF", _String2="..") returned 1 [0221.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cada28 [0221.922] wcscpy (in: _Dest=0x7cada28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.923] wcscat (in: _Dest=0x7cada28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.923] wcscat (in: _Dest=0x7cada28, _Source="J0200163.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" [0221.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cada28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0221.924] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb68d300, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb68d300, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1 [0221.924] wcscmp (_String1="J0200183.WMF", _String2=".") returned 1 [0221.925] wcscmp (_String1="J0200183.WMF", _String2="..") returned 1 [0221.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cadab0 [0221.925] wcscpy (in: _Dest=0x7cadab0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.925] wcscat (in: _Dest=0x7cadab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.925] wcscat (in: _Dest=0x7cadab0, _Source="J0200183.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" [0221.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cadab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0221.988] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1 [0221.988] wcscmp (_String1="J0200189.WMF", _String2=".") returned 1 [0221.989] wcscmp (_String1="J0200189.WMF", _String2="..") returned 1 [0221.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad120 [0221.989] wcscpy (in: _Dest=0x7cad120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.989] wcscat (in: _Dest=0x7cad120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.989] wcscat (in: _Dest=0x7cad120, _Source="J0200189.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" [0221.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0221.990] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b91a000, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b91a000, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1 [0221.990] wcscmp (_String1="J0200273.WMF", _String2=".") returned 1 [0221.990] wcscmp (_String1="J0200273.WMF", _String2="..") returned 1 [0221.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cad098 [0221.991] wcscpy (in: _Dest=0x7cad098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.991] wcscat (in: _Dest=0x7cad098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.991] wcscat (in: _Dest=0x7cad098, _Source="J0200273.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" [0221.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cad098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0221.992] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f252700, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f252700, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1 [0221.992] wcscmp (_String1="J0200279.WMF", _String2=".") returned 1 [0221.992] wcscmp (_String1="J0200279.WMF", _String2="..") returned 1 [0221.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cacdf0 [0221.992] wcscpy (in: _Dest=0x7cacdf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.992] wcscat (in: _Dest=0x7cacdf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.992] wcscat (in: _Dest=0x7cacdf0, _Source="J0200279.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" [0221.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cacdf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0221.993] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ae8f00, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ae8f00, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1 [0221.993] wcscmp (_String1="J0200289.WMF", _String2=".") returned 1 [0221.993] wcscmp (_String1="J0200289.WMF", _String2="..") returned 1 [0221.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cadb38 [0221.994] wcscpy (in: _Dest=0x7cadb38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.994] wcscat (in: _Dest=0x7cadb38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.994] wcscat (in: _Dest=0x7cadb38, _Source="J0200289.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" [0221.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cadb38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0221.995] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f86100, ftCreationTime.dwHighDateTime=0x1be3efd, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3f86100, ftLastWriteTime.dwHighDateTime=0x1be3efd, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1 [0221.995] wcscmp (_String1="J0200377.WMF", _String2=".") returned 1 [0221.995] wcscmp (_String1="J0200377.WMF", _String2="..") returned 1 [0221.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cadbc0 [0221.995] wcscpy (in: _Dest=0x7cadbc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.995] wcscat (in: _Dest=0x7cadbc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.995] wcscat (in: _Dest=0x7cadbc0, _Source="J0200377.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" [0221.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cadbc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0221.997] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1 [0221.997] wcscmp (_String1="J0200383.WMF", _String2=".") returned 1 [0221.997] wcscmp (_String1="J0200383.WMF", _String2="..") returned 1 [0221.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cadc48 [0221.997] wcscpy (in: _Dest=0x7cadc48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.997] wcscat (in: _Dest=0x7cadc48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.997] wcscat (in: _Dest=0x7cadc48, _Source="J0200383.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" [0221.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cadc48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0221.998] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b6e2fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1 [0221.998] wcscmp (_String1="J0200467.WMF", _String2=".") returned 1 [0221.998] wcscmp (_String1="J0200467.WMF", _String2="..") returned 1 [0221.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cadcd0 [0221.998] wcscpy (in: _Dest=0x7cadcd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0221.999] wcscat (in: _Dest=0x7cadcd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0221.999] wcscat (in: _Dest=0x7cadcd0, _Source="J0200467.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" [0221.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cadcd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0222.000] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1 [0222.000] wcscmp (_String1="J0200521.WMF", _String2=".") returned 1 [0222.000] wcscmp (_String1="J0200521.WMF", _String2="..") returned 1 [0222.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cadd58 [0222.000] wcscpy (in: _Dest=0x7cadd58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.000] wcscat (in: _Dest=0x7cadd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.000] wcscat (in: _Dest=0x7cadd58, _Source="J0200521.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" [0222.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cadd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0222.001] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1 [0222.001] wcscmp (_String1="J0200611.WMF", _String2=".") returned 1 [0222.001] wcscmp (_String1="J0200611.WMF", _String2="..") returned 1 [0222.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cadde0 [0222.001] wcscpy (in: _Dest=0x7cadde0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.002] wcscat (in: _Dest=0x7cadde0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.002] wcscat (in: _Dest=0x7cadde0, _Source="J0200611.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" [0222.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cadde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0222.003] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1 [0222.003] wcscmp (_String1="J0202045.JPG", _String2=".") returned 1 [0222.003] wcscmp (_String1="J0202045.JPG", _String2="..") returned 1 [0222.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cade68 [0222.003] wcscpy (in: _Dest=0x7cade68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.003] wcscat (in: _Dest=0x7cade68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.003] wcscat (in: _Dest=0x7cade68, _Source="J0202045.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" [0222.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cade68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0222.004] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5eb0300, ftCreationTime.dwHighDateTime=0x1be5673, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf5eb0300, ftLastWriteTime.dwHighDateTime=0x1be5673, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1 [0222.004] wcscmp (_String1="J0211981.WMF", _String2=".") returned 1 [0222.004] wcscmp (_String1="J0211981.WMF", _String2="..") returned 1 [0222.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cadef0 [0222.004] wcscpy (in: _Dest=0x7cadef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.004] wcscat (in: _Dest=0x7cadef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.005] wcscat (in: _Dest=0x7cadef0, _Source="J0211981.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" [0222.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cadef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0222.006] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1 [0222.006] wcscmp (_String1="J0212299.WMF", _String2=".") returned 1 [0222.006] wcscmp (_String1="J0212299.WMF", _String2="..") returned 1 [0222.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cadf78 [0222.006] wcscpy (in: _Dest=0x7cadf78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.006] wcscat (in: _Dest=0x7cadf78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.006] wcscat (in: _Dest=0x7cadf78, _Source="J0212299.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" [0222.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cadf78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0222.007] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1 [0222.007] wcscmp (_String1="J0212601.WMF", _String2=".") returned 1 [0222.007] wcscmp (_String1="J0212601.WMF", _String2="..") returned 1 [0222.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68228 [0222.007] wcscpy (in: _Dest=0x7a68228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.007] wcscat (in: _Dest=0x7a68228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.007] wcscat (in: _Dest=0x7a68228, _Source="J0212601.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" [0222.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0222.009] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1 [0222.066] wcscmp (_String1="J0212685.WMF", _String2=".") returned 1 [0222.066] wcscmp (_String1="J0212685.WMF", _String2="..") returned 1 [0222.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62d50 [0222.066] wcscpy (in: _Dest=0x7a62d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.066] wcscat (in: _Dest=0x7a62d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.066] wcscat (in: _Dest=0x7a62d50, _Source="J0212685.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" [0222.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc [0222.067] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1 [0222.067] wcscmp (_String1="J0212751.WMF", _String2=".") returned 1 [0222.067] wcscmp (_String1="J0212751.WMF", _String2="..") returned 1 [0222.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d1f8 [0222.068] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.068] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.068] wcscat (in: _Dest=0x3f3d1f8, _Source="J0212751.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" [0222.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0222.069] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1 [0222.069] wcscmp (_String1="J0212953.WMF", _String2=".") returned 1 [0222.069] wcscmp (_String1="J0212953.WMF", _String2="..") returned 1 [0222.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bb4d0 [0222.069] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.069] wcscat (in: _Dest=0x30bb4d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.069] wcscat (in: _Dest=0x30bb4d0, _Source="J0212953.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" [0222.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0222.070] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1 [0222.070] wcscmp (_String1="J0213243.WMF", _String2=".") returned 1 [0222.070] wcscmp (_String1="J0213243.WMF", _String2="..") returned 1 [0222.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bb558 [0222.070] wcscpy (in: _Dest=0x30bb558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.071] wcscat (in: _Dest=0x30bb558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.071] wcscat (in: _Dest=0x30bb558, _Source="J0213243.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" [0222.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0222.071] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1 [0222.072] wcscmp (_String1="J0213449.WMF", _String2=".") returned 1 [0222.072] wcscmp (_String1="J0213449.WMF", _String2="..") returned 1 [0222.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bb5e0 [0222.072] wcscpy (in: _Dest=0x30bb5e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.072] wcscat (in: _Dest=0x30bb5e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.072] wcscat (in: _Dest=0x30bb5e0, _Source="J0213449.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" [0222.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0222.073] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbafa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1 [0222.073] wcscmp (_String1="J0214934.WMF", _String2=".") returned 1 [0222.073] wcscmp (_String1="J0214934.WMF", _String2="..") returned 1 [0222.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bb668 [0222.073] wcscpy (in: _Dest=0x30bb668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.073] wcscat (in: _Dest=0x30bb668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.073] wcscat (in: _Dest=0x30bb668, _Source="J0214934.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" [0222.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0222.075] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1 [0222.075] wcscmp (_String1="J0214948.WMF", _String2=".") returned 1 [0222.075] wcscmp (_String1="J0214948.WMF", _String2="..") returned 1 [0222.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bb6f0 [0222.075] wcscpy (in: _Dest=0x30bb6f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.075] wcscat (in: _Dest=0x30bb6f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.075] wcscat (in: _Dest=0x30bb6f0, _Source="J0214948.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" [0222.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0222.076] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb575e00, ftCreationTime.dwHighDateTime=0x1be54ed, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb575e00, ftLastWriteTime.dwHighDateTime=0x1be54ed, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1 [0222.076] wcscmp (_String1="J0215070.WMF", _String2=".") returned 1 [0222.076] wcscmp (_String1="J0215070.WMF", _String2="..") returned 1 [0222.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bb778 [0222.076] wcscpy (in: _Dest=0x30bb778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.076] wcscat (in: _Dest=0x30bb778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.076] wcscat (in: _Dest=0x30bb778, _Source="J0215070.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" [0222.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0222.077] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73ec400, ftCreationTime.dwHighDateTime=0x1be1bbf, ftLastAccessTime.dwLowDateTime=0x7b709110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb73ec400, ftLastWriteTime.dwHighDateTime=0x1be1bbf, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1 [0222.078] wcscmp (_String1="J0215076.WMF", _String2=".") returned 1 [0222.078] wcscmp (_String1="J0215076.WMF", _String2="..") returned 1 [0222.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bb800 [0222.078] wcscpy (in: _Dest=0x30bb800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.078] wcscat (in: _Dest=0x30bb800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.078] wcscat (in: _Dest=0x30bb800, _Source="J0215076.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" [0222.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0222.079] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1 [0222.079] wcscmp (_String1="J0215210.WMF", _String2=".") returned 1 [0222.079] wcscmp (_String1="J0215210.WMF", _String2="..") returned 1 [0222.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bb888 [0222.079] wcscpy (in: _Dest=0x30bb888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.079] wcscat (in: _Dest=0x30bb888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.079] wcscat (in: _Dest=0x30bb888, _Source="J0215210.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" [0222.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0222.081] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a649100, ftCreationTime.dwHighDateTime=0x1be498c, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a649100, ftLastWriteTime.dwHighDateTime=0x1be498c, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1 [0222.081] wcscmp (_String1="J0215709.WMF", _String2=".") returned 1 [0222.081] wcscmp (_String1="J0215709.WMF", _String2="..") returned 1 [0222.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bb910 [0222.081] wcscpy (in: _Dest=0x30bb910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.081] wcscat (in: _Dest=0x30bb910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.081] wcscat (in: _Dest=0x30bb910, _Source="J0215709.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" [0222.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0222.082] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc6eb00, ftCreationTime.dwHighDateTime=0x1be498c, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1cc6eb00, ftLastWriteTime.dwHighDateTime=0x1be498c, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1 [0222.082] wcscmp (_String1="J0215710.WMF", _String2=".") returned 1 [0222.082] wcscmp (_String1="J0215710.WMF", _String2="..") returned 1 [0222.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bb998 [0222.082] wcscpy (in: _Dest=0x30bb998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.082] wcscat (in: _Dest=0x30bb998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.082] wcscat (in: _Dest=0x30bb998, _Source="J0215710.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" [0222.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0222.083] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b150700, ftCreationTime.dwHighDateTime=0x1be498c, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b150700, ftLastWriteTime.dwHighDateTime=0x1be498c, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1 [0222.083] wcscmp (_String1="J0215718.WMF", _String2=".") returned 1 [0222.083] wcscmp (_String1="J0215718.WMF", _String2="..") returned 1 [0222.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bba20 [0222.084] wcscpy (in: _Dest=0x30bba20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.084] wcscat (in: _Dest=0x30bba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.084] wcscat (in: _Dest=0x30bba20, _Source="J0215718.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" [0222.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0222.085] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1 [0222.085] wcscmp (_String1="J0216112.JPG", _String2=".") returned 1 [0222.085] wcscmp (_String1="J0216112.JPG", _String2="..") returned 1 [0222.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbaa8 [0222.085] wcscpy (in: _Dest=0x30bbaa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.085] wcscat (in: _Dest=0x30bbaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.085] wcscat (in: _Dest=0x30bbaa8, _Source="J0216112.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" [0222.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0222.086] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1 [0222.086] wcscmp (_String1="J0216153.JPG", _String2=".") returned 1 [0222.086] wcscmp (_String1="J0216153.JPG", _String2="..") returned 1 [0222.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbb30 [0222.086] wcscpy (in: _Dest=0x30bbb30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.086] wcscat (in: _Dest=0x30bbb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.086] wcscat (in: _Dest=0x30bbb30, _Source="J0216153.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" [0222.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0222.087] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1 [0222.087] wcscmp (_String1="J0216540.WMF", _String2=".") returned 1 [0222.087] wcscmp (_String1="J0216540.WMF", _String2="..") returned 1 [0222.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbbb8 [0222.088] wcscpy (in: _Dest=0x30bbbb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.088] wcscat (in: _Dest=0x30bbbb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.088] wcscat (in: _Dest=0x30bbbb8, _Source="J0216540.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" [0222.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0222.089] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1 [0222.089] wcscmp (_String1="J0216570.WMF", _String2=".") returned 1 [0222.089] wcscmp (_String1="J0216570.WMF", _String2="..") returned 1 [0222.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbc40 [0222.089] wcscpy (in: _Dest=0x30bbc40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.089] wcscat (in: _Dest=0x30bbc40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.089] wcscat (in: _Dest=0x30bbc40, _Source="J0216570.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" [0222.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0222.091] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1 [0222.091] wcscmp (_String1="J0216600.WMF", _String2=".") returned 1 [0222.091] wcscmp (_String1="J0216600.WMF", _String2="..") returned 1 [0222.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbcc8 [0222.091] wcscpy (in: _Dest=0x30bbcc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.091] wcscat (in: _Dest=0x30bbcc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.091] wcscat (in: _Dest=0x30bbcc8, _Source="J0216600.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" [0222.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbcc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0222.092] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1 [0222.092] wcscmp (_String1="J0216612.WMF", _String2=".") returned 1 [0222.092] wcscmp (_String1="J0216612.WMF", _String2="..") returned 1 [0222.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbd50 [0222.092] wcscpy (in: _Dest=0x30bbd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.092] wcscat (in: _Dest=0x30bbd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.093] wcscat (in: _Dest=0x30bbd50, _Source="J0216612.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" [0222.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0222.094] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1 [0222.094] wcscmp (_String1="J0216874.WMF", _String2=".") returned 1 [0222.094] wcscmp (_String1="J0216874.WMF", _String2="..") returned 1 [0222.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbdd8 [0222.094] wcscpy (in: _Dest=0x30bbdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.094] wcscat (in: _Dest=0x30bbdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.094] wcscat (in: _Dest=0x30bbdd8, _Source="J0216874.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" [0222.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0222.095] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1 [0222.095] wcscmp (_String1="J0217262.WMF", _String2=".") returned 1 [0222.095] wcscmp (_String1="J0217262.WMF", _String2="..") returned 1 [0222.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbe60 [0222.095] wcscpy (in: _Dest=0x30bbe60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.096] wcscat (in: _Dest=0x30bbe60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.096] wcscat (in: _Dest=0x30bbe60, _Source="J0217262.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" [0222.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0222.097] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b72f270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1 [0222.097] wcscmp (_String1="J0217302.WMF", _String2=".") returned 1 [0222.097] wcscmp (_String1="J0217302.WMF", _String2="..") returned 1 [0222.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbee8 [0222.097] wcscpy (in: _Dest=0x30bbee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.097] wcscat (in: _Dest=0x30bbee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.097] wcscat (in: _Dest=0x30bbee8, _Source="J0217302.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" [0222.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0222.098] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1 [0222.098] wcscmp (_String1="J0217872.WMF", _String2=".") returned 1 [0222.098] wcscmp (_String1="J0217872.WMF", _String2="..") returned 1 [0222.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbf70 [0222.099] wcscpy (in: _Dest=0x30bbf70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.099] wcscat (in: _Dest=0x30bbf70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.099] wcscat (in: _Dest=0x30bbf70, _Source="J0217872.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" [0222.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbf70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0222.100] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbd5b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1 [0222.100] wcscmp (_String1="J0227419.JPG", _String2=".") returned 1 [0222.100] wcscmp (_String1="J0227419.JPG", _String2="..") returned 1 [0222.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bbff8 [0222.100] wcscpy (in: _Dest=0x30bbff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.100] wcscat (in: _Dest=0x30bbff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.100] wcscat (in: _Dest=0x30bbff8, _Source="J0227419.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" [0222.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148 [0222.133] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1 [0222.133] wcscmp (_String1="J0227558.JPG", _String2=".") returned 1 [0222.133] wcscmp (_String1="J0227558.JPG", _String2="..") returned 1 [0222.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc080 [0222.134] wcscpy (in: _Dest=0x30bc080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.134] wcscat (in: _Dest=0x30bc080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.134] wcscat (in: _Dest=0x30bc080, _Source="J0227558.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" [0222.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0222.135] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41fff700, ftCreationTime.dwHighDateTime=0x1be8667, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41fff700, ftLastWriteTime.dwHighDateTime=0x1be8667, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1 [0222.135] wcscmp (_String1="J0228823.WMF", _String2=".") returned 1 [0222.135] wcscmp (_String1="J0228823.WMF", _String2="..") returned 1 [0222.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc108 [0222.135] wcscpy (in: _Dest=0x30bc108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.135] wcscat (in: _Dest=0x30bc108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.135] wcscat (in: _Dest=0x30bc108, _Source="J0228823.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" [0222.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0222.136] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1 [0222.136] wcscmp (_String1="J0228959.WMF", _String2=".") returned 1 [0222.137] wcscmp (_String1="J0228959.WMF", _String2="..") returned 1 [0222.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc190 [0222.137] wcscpy (in: _Dest=0x30bc190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.137] wcscat (in: _Dest=0x30bc190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.137] wcscat (in: _Dest=0x30bc190, _Source="J0228959.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" [0222.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0222.138] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1 [0222.138] wcscmp (_String1="J0230553.WMF", _String2=".") returned 1 [0222.138] wcscmp (_String1="J0230553.WMF", _String2="..") returned 1 [0222.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc218 [0222.138] wcscpy (in: _Dest=0x30bc218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.138] wcscat (in: _Dest=0x30bc218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.138] wcscat (in: _Dest=0x30bc218, _Source="J0230553.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" [0222.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0222.140] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1 [0222.140] wcscmp (_String1="J0230558.WMF", _String2=".") returned 1 [0222.140] wcscmp (_String1="J0230558.WMF", _String2="..") returned 1 [0222.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc2a0 [0222.140] wcscpy (in: _Dest=0x30bc2a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.140] wcscat (in: _Dest=0x30bc2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.140] wcscat (in: _Dest=0x30bc2a0, _Source="J0230558.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" [0222.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0222.141] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1 [0222.141] wcscmp (_String1="J0232171.WMF", _String2=".") returned 1 [0222.141] wcscmp (_String1="J0232171.WMF", _String2="..") returned 1 [0222.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc328 [0222.141] wcscpy (in: _Dest=0x30bc328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.141] wcscat (in: _Dest=0x30bc328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.141] wcscat (in: _Dest=0x30bc328, _Source="J0232171.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" [0222.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0222.142] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80da500, ftCreationTime.dwHighDateTime=0x1be205a, ftLastAccessTime.dwLowDateTime=0x7b7553d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb80da500, ftLastWriteTime.dwHighDateTime=0x1be205a, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1 [0222.143] wcscmp (_String1="J0232393.WMF", _String2=".") returned 1 [0222.143] wcscmp (_String1="J0232393.WMF", _String2="..") returned 1 [0222.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc3b0 [0222.143] wcscpy (in: _Dest=0x30bc3b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.143] wcscat (in: _Dest=0x30bc3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.143] wcscat (in: _Dest=0x30bc3b0, _Source="J0232393.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" [0222.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0222.144] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd6a300, ftCreationTime.dwHighDateTime=0x1be205a, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5fd6a300, ftLastWriteTime.dwHighDateTime=0x1be205a, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1 [0222.144] wcscmp (_String1="J0232395.WMF", _String2=".") returned 1 [0222.144] wcscmp (_String1="J0232395.WMF", _String2="..") returned 1 [0222.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc438 [0222.144] wcscpy (in: _Dest=0x30bc438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.144] wcscat (in: _Dest=0x30bc438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.144] wcscat (in: _Dest=0x30bc438, _Source="J0232395.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" [0222.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0222.146] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aac7c00, ftCreationTime.dwHighDateTime=0x1be0653, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9aac7c00, ftLastWriteTime.dwHighDateTime=0x1be0653, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1 [0222.146] wcscmp (_String1="J0232795.WMF", _String2=".") returned 1 [0222.146] wcscmp (_String1="J0232795.WMF", _String2="..") returned 1 [0222.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc4c0 [0222.146] wcscpy (in: _Dest=0x30bc4c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.146] wcscat (in: _Dest=0x30bc4c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.146] wcscat (in: _Dest=0x30bc4c0, _Source="J0232795.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" [0222.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc4c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0222.147] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0a25d00, ftCreationTime.dwHighDateTime=0x1be0653, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0a25d00, ftLastWriteTime.dwHighDateTime=0x1be0653, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1 [0222.147] wcscmp (_String1="J0232797.WMF", _String2=".") returned 1 [0222.147] wcscmp (_String1="J0232797.WMF", _String2="..") returned 1 [0222.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc548 [0222.147] wcscpy (in: _Dest=0x30bc548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.147] wcscat (in: _Dest=0x30bc548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.147] wcscat (in: _Dest=0x30bc548, _Source="J0232797.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" [0222.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0222.149] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b52d00, ftCreationTime.dwHighDateTime=0x1be0653, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3b52d00, ftLastWriteTime.dwHighDateTime=0x1be0653, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1 [0222.888] wcscmp (_String1="J0232803.WMF", _String2=".") returned 1 [0222.888] wcscmp (_String1="J0232803.WMF", _String2="..") returned 1 [0222.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc5d0 [0222.889] wcscpy (in: _Dest=0x30bc5d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.889] wcscat (in: _Dest=0x30bc5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.889] wcscat (in: _Dest=0x30bc5d0, _Source="J0232803.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" [0222.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0222.890] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1 [0222.890] wcscmp (_String1="J0233512.WMF", _String2=".") returned 1 [0222.890] wcscmp (_String1="J0233512.WMF", _String2="..") returned 1 [0222.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc658 [0222.890] wcscpy (in: _Dest=0x30bc658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.890] wcscat (in: _Dest=0x30bc658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.890] wcscat (in: _Dest=0x30bc658, _Source="J0233512.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" [0222.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0222.891] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1 [0222.891] wcscmp (_String1="J0233665.WMF", _String2=".") returned 1 [0222.891] wcscmp (_String1="J0233665.WMF", _String2="..") returned 1 [0222.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc6e0 [0222.891] wcscpy (in: _Dest=0x30bc6e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.891] wcscat (in: _Dest=0x30bc6e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.891] wcscat (in: _Dest=0x30bc6e0, _Source="J0233665.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" [0222.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0222.892] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa291f00, ftCreationTime.dwHighDateTime=0x1be80fe, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa291f00, ftLastWriteTime.dwHighDateTime=0x1be80fe, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1 [0222.892] wcscmp (_String1="J0233992.WMF", _String2=".") returned 1 [0222.892] wcscmp (_String1="J0233992.WMF", _String2="..") returned 1 [0222.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc768 [0222.892] wcscpy (in: _Dest=0x30bc768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.892] wcscat (in: _Dest=0x30bc768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.892] wcscat (in: _Dest=0x30bc768, _Source="J0233992.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" [0222.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0222.893] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a75e00, ftCreationTime.dwHighDateTime=0x1be7bbf, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4a75e00, ftLastWriteTime.dwHighDateTime=0x1be7bbf, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1 [0222.893] wcscmp (_String1="J0234000.WMF", _String2=".") returned 1 [0222.893] wcscmp (_String1="J0234000.WMF", _String2="..") returned 1 [0222.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc7f0 [0222.894] wcscpy (in: _Dest=0x30bc7f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.894] wcscat (in: _Dest=0x30bc7f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.894] wcscat (in: _Dest=0x30bc7f0, _Source="J0234000.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" [0222.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc7f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0222.894] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d315700, ftCreationTime.dwHighDateTime=0x1be7bc3, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d315700, ftLastWriteTime.dwHighDateTime=0x1be7bc3, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1 [0222.894] wcscmp (_String1="J0234001.WMF", _String2=".") returned 1 [0222.895] wcscmp (_String1="J0234001.WMF", _String2="..") returned 1 [0222.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc878 [0222.895] wcscpy (in: _Dest=0x30bc878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.895] wcscat (in: _Dest=0x30bc878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.895] wcscat (in: _Dest=0x30bc878, _Source="J0234001.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" [0222.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0222.896] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bbfbcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1 [0222.896] wcscmp (_String1="J0234376.WMF", _String2=".") returned 1 [0222.896] wcscmp (_String1="J0234376.WMF", _String2="..") returned 1 [0222.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc900 [0222.896] wcscpy (in: _Dest=0x30bc900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.896] wcscat (in: _Dest=0x30bc900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.896] wcscat (in: _Dest=0x30bc900, _Source="J0234376.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" [0222.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0222.897] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1 [0222.897] wcscmp (_String1="J0237225.WMF", _String2=".") returned 1 [0222.897] wcscmp (_String1="J0237225.WMF", _String2="..") returned 1 [0222.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bc988 [0222.897] wcscpy (in: _Dest=0x30bc988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.897] wcscat (in: _Dest=0x30bc988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.897] wcscat (in: _Dest=0x30bc988, _Source="J0237225.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" [0222.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0222.898] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9973400, ftCreationTime.dwHighDateTime=0x1be9020, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9973400, ftLastWriteTime.dwHighDateTime=0x1be9020, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1 [0222.898] wcscmp (_String1="J0237228.WMF", _String2=".") returned 1 [0222.898] wcscmp (_String1="J0237228.WMF", _String2="..") returned 1 [0222.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bca10 [0222.898] wcscpy (in: _Dest=0x30bca10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.898] wcscat (in: _Dest=0x30bca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.898] wcscat (in: _Dest=0x30bca10, _Source="J0237228.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" [0222.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0222.899] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1 [0222.899] wcscmp (_String1="J0237336.WMF", _String2=".") returned 1 [0222.899] wcscmp (_String1="J0237336.WMF", _String2="..") returned 1 [0222.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bca98 [0222.899] wcscpy (in: _Dest=0x30bca98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.899] wcscat (in: _Dest=0x30bca98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.899] wcscat (in: _Dest=0x30bca98, _Source="J0237336.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" [0222.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bca98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0222.900] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1 [0222.900] wcscmp (_String1="J0237759.WMF", _String2=".") returned 1 [0222.900] wcscmp (_String1="J0237759.WMF", _String2="..") returned 1 [0222.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bcb20 [0222.900] wcscpy (in: _Dest=0x30bcb20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.900] wcscat (in: _Dest=0x30bcb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.900] wcscat (in: _Dest=0x30bcb20, _Source="J0237759.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" [0222.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bcb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0222.901] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1 [0222.902] wcscmp (_String1="J0238333.WMF", _String2=".") returned 1 [0222.902] wcscmp (_String1="J0238333.WMF", _String2="..") returned 1 [0222.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bcba8 [0222.902] wcscpy (in: _Dest=0x30bcba8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.902] wcscat (in: _Dest=0x30bcba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.902] wcscat (in: _Dest=0x30bcba8, _Source="J0238333.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" [0222.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bcba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0222.903] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1 [0222.903] wcscmp (_String1="J0238927.WMF", _String2=".") returned 1 [0222.903] wcscmp (_String1="J0238927.WMF", _String2="..") returned 1 [0222.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bcc30 [0222.903] wcscpy (in: _Dest=0x30bcc30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.903] wcscat (in: _Dest=0x30bcc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.903] wcscat (in: _Dest=0x30bcc30, _Source="J0238927.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" [0222.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bcc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218 [0222.904] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b77b530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1 [0222.904] wcscmp (_String1="J0238959.WMF", _String2=".") returned 1 [0222.904] wcscmp (_String1="J0238959.WMF", _String2="..") returned 1 [0222.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bccb8 [0222.904] wcscpy (in: _Dest=0x30bccb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.904] wcscat (in: _Dest=0x30bccb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.904] wcscat (in: _Dest=0x30bccb8, _Source="J0238959.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" [0222.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bccb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0222.905] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1 [0222.905] wcscmp (_String1="J0238983.WMF", _String2=".") returned 1 [0222.905] wcscmp (_String1="J0238983.WMF", _String2="..") returned 1 [0222.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bcd40 [0222.905] wcscpy (in: _Dest=0x30bcd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.905] wcscat (in: _Dest=0x30bcd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.905] wcscat (in: _Dest=0x30bcd40, _Source="J0238983.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" [0222.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bcd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0222.906] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1 [0222.906] wcscmp (_String1="J0239057.WMF", _String2=".") returned 1 [0222.906] wcscmp (_String1="J0239057.WMF", _String2="..") returned 1 [0222.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bcdc8 [0222.906] wcscpy (in: _Dest=0x30bcdc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.906] wcscat (in: _Dest=0x30bcdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.906] wcscat (in: _Dest=0x30bcdc8, _Source="J0239057.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" [0222.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bcdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0222.907] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1 [0222.907] wcscmp (_String1="J0239063.WMF", _String2=".") returned 1 [0222.907] wcscmp (_String1="J0239063.WMF", _String2="..") returned 1 [0222.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bce50 [0222.908] wcscpy (in: _Dest=0x30bce50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.908] wcscat (in: _Dest=0x30bce50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.908] wcscat (in: _Dest=0x30bce50, _Source="J0239063.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" [0222.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bce50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0222.909] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1 [0222.909] wcscmp (_String1="J0239079.WMF", _String2=".") returned 1 [0222.909] wcscmp (_String1="J0239079.WMF", _String2="..") returned 1 [0222.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bced8 [0222.909] wcscpy (in: _Dest=0x30bced8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.909] wcscat (in: _Dest=0x30bced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.909] wcscat (in: _Dest=0x30bced8, _Source="J0239079.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" [0222.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0222.910] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1 [0222.910] wcscmp (_String1="J0239191.WMF", _String2=".") returned 1 [0222.910] wcscmp (_String1="J0239191.WMF", _String2="..") returned 1 [0222.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bcf60 [0222.910] wcscpy (in: _Dest=0x30bcf60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.910] wcscat (in: _Dest=0x30bcf60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.910] wcscat (in: _Dest=0x30bcf60, _Source="J0239191.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" [0222.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bcf60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0222.911] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1 [0222.911] wcscmp (_String1="J0239611.WMF", _String2=".") returned 1 [0222.912] wcscmp (_String1="J0239611.WMF", _String2="..") returned 1 [0222.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bcfe8 [0222.912] wcscpy (in: _Dest=0x30bcfe8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.912] wcscat (in: _Dest=0x30bcfe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.912] wcscat (in: _Dest=0x30bcfe8, _Source="J0239611.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" [0222.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bcfe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1224 [0222.913] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1 [0222.913] wcscmp (_String1="J0239935.WMF", _String2=".") returned 1 [0222.913] wcscmp (_String1="J0239935.WMF", _String2="..") returned 1 [0222.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bd070 [0222.913] wcscpy (in: _Dest=0x30bd070, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.913] wcscat (in: _Dest=0x30bd070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.913] wcscat (in: _Dest=0x30bd070, _Source="J0239935.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" [0222.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bd070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0222.915] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1 [0222.915] wcscmp (_String1="J0239941.WMF", _String2=".") returned 1 [0222.915] wcscmp (_String1="J0239941.WMF", _String2="..") returned 1 [0222.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bd0f8 [0222.915] wcscpy (in: _Dest=0x30bd0f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.915] wcscat (in: _Dest=0x30bd0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.915] wcscat (in: _Dest=0x30bd0f8, _Source="J0239941.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" [0222.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bd0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0222.916] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1 [0222.916] wcscmp (_String1="J0239943.WMF", _String2=".") returned 1 [0222.916] wcscmp (_String1="J0239943.WMF", _String2="..") returned 1 [0222.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bd180 [0222.917] wcscpy (in: _Dest=0x30bd180, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.917] wcscat (in: _Dest=0x30bd180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.917] wcscat (in: _Dest=0x30bd180, _Source="J0239943.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" [0222.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bd180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0222.918] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1 [0222.918] wcscmp (_String1="J0239951.WMF", _String2=".") returned 1 [0222.918] wcscmp (_String1="J0239951.WMF", _String2="..") returned 1 [0222.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bd208 [0222.919] wcscpy (in: _Dest=0x30bd208, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.919] wcscat (in: _Dest=0x30bd208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.919] wcscat (in: _Dest=0x30bd208, _Source="J0239951.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" [0222.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bd208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0222.920] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1 [0222.920] wcscmp (_String1="J0239953.WMF", _String2=".") returned 1 [0222.920] wcscmp (_String1="J0239953.WMF", _String2="..") returned 1 [0222.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bd290 [0222.920] wcscpy (in: _Dest=0x30bd290, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.920] wcscat (in: _Dest=0x30bd290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.920] wcscat (in: _Dest=0x30bd290, _Source="J0239953.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" [0222.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bd290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0222.922] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1 [0222.922] wcscmp (_String1="J0239955.WMF", _String2=".") returned 1 [0222.922] wcscmp (_String1="J0239955.WMF", _String2="..") returned 1 [0222.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bd318 [0222.922] wcscpy (in: _Dest=0x30bd318, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0222.922] wcscat (in: _Dest=0x30bd318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0222.922] wcscat (in: _Dest=0x30bd318, _Source="J0239955.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" [0222.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bd318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0225.011] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1 [0225.012] wcscmp (_String1="J0239965.WMF", _String2=".") returned 1 [0225.012] wcscmp (_String1="J0239965.WMF", _String2="..") returned 1 [0225.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bd3a0 [0225.012] wcscpy (in: _Dest=0x30bd3a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.012] wcscat (in: _Dest=0x30bd3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.012] wcscat (in: _Dest=0x30bd3a0, _Source="J0239965.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" [0225.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bd3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0225.013] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1 [0225.013] wcscmp (_String1="J0239967.WMF", _String2=".") returned 1 [0225.013] wcscmp (_String1="J0239967.WMF", _String2="..") returned 1 [0225.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30bd428 [0225.014] wcscpy (in: _Dest=0x30bd428, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.014] wcscat (in: _Dest=0x30bd428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.014] wcscat (in: _Dest=0x30bd428, _Source="J0239967.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" [0225.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bd428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0225.015] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1 [0225.015] wcscmp (_String1="J0239973.WMF", _String2=".") returned 1 [0225.015] wcscmp (_String1="J0239973.WMF", _String2="..") returned 1 [0225.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6818 [0225.015] wcscpy (in: _Dest=0x3ec6818, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.015] wcscat (in: _Dest=0x3ec6818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.015] wcscat (in: _Dest=0x3ec6818, _Source="J0239973.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" [0225.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0225.016] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1 [0225.016] wcscmp (_String1="J0239975.WMF", _String2=".") returned 1 [0225.016] wcscmp (_String1="J0239975.WMF", _String2="..") returned 1 [0225.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec68a0 [0225.016] wcscpy (in: _Dest=0x3ec68a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.016] wcscat (in: _Dest=0x3ec68a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.016] wcscat (in: _Dest=0x3ec68a0, _Source="J0239975.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" [0225.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec68a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0225.017] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc21e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1 [0225.018] wcscmp (_String1="J0239997.WMF", _String2=".") returned 1 [0225.018] wcscmp (_String1="J0239997.WMF", _String2="..") returned 1 [0225.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6928 [0225.018] wcscpy (in: _Dest=0x3ec6928, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.018] wcscat (in: _Dest=0x3ec6928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.018] wcscat (in: _Dest=0x3ec6928, _Source="J0239997.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" [0225.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0225.019] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1 [0225.019] wcscmp (_String1="J0240157.WMF", _String2=".") returned 1 [0225.019] wcscmp (_String1="J0240157.WMF", _String2="..") returned 1 [0225.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec69b0 [0225.019] wcscpy (in: _Dest=0x3ec69b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.019] wcscat (in: _Dest=0x3ec69b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.019] wcscat (in: _Dest=0x3ec69b0, _Source="J0240157.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" [0225.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec69b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0225.020] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1 [0225.020] wcscmp (_String1="J0240175.WMF", _String2=".") returned 1 [0225.020] wcscmp (_String1="J0240175.WMF", _String2="..") returned 1 [0225.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6a38 [0225.020] wcscpy (in: _Dest=0x3ec6a38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.020] wcscat (in: _Dest=0x3ec6a38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.020] wcscat (in: _Dest=0x3ec6a38, _Source="J0240175.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" [0225.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1404 [0225.022] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1 [0225.022] wcscmp (_String1="J0240189.WMF", _String2=".") returned 1 [0225.022] wcscmp (_String1="J0240189.WMF", _String2="..") returned 1 [0225.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6ac0 [0225.022] wcscpy (in: _Dest=0x3ec6ac0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0225.022] wcscat (in: _Dest=0x3ec6ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0225.022] wcscat (in: _Dest=0x3ec6ac0, _Source="J0240189.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" [0225.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0225.031] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1 [0226.009] wcscmp (_String1="J0240291.WMF", _String2=".") returned 1 [0226.009] wcscmp (_String1="J0240291.WMF", _String2="..") returned 1 [0226.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bed8 [0226.009] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.009] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.009] wcscat (in: _Dest=0x3f3bed8, _Source="J0240291.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" [0226.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0226.011] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x260f7400, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x260f7400, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1 [0226.011] wcscmp (_String1="J0241019.WMF", _String2=".") returned 1 [0226.011] wcscmp (_String1="J0241019.WMF", _String2="..") returned 1 [0226.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0226.011] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.011] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.011] wcscat (in: _Dest=0x3f3cb10, _Source="J0241019.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" [0226.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0226.012] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31fb3600, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31fb3600, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1 [0226.012] wcscmp (_String1="J0241037.WMF", _String2=".") returned 1 [0226.012] wcscmp (_String1="J0241037.WMF", _String2="..") returned 1 [0226.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bd40 [0226.012] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.013] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.013] wcscat (in: _Dest=0x3f3bd40, _Source="J0241037.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" [0226.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0226.013] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x358ebd00, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x7b7a1690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x358ebd00, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1 [0226.014] wcscmp (_String1="J0241041.WMF", _String2=".") returned 1 [0226.014] wcscmp (_String1="J0241041.WMF", _String2="..") returned 1 [0226.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3be50 [0226.014] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.014] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.014] wcscat (in: _Dest=0x3f3be50, _Source="J0241041.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" [0226.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0226.015] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36bfea00, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36bfea00, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1 [0226.015] wcscmp (_String1="J0241043.WMF", _String2=".") returned 1 [0226.015] wcscmp (_String1="J0241043.WMF", _String2="..") returned 1 [0226.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0226.015] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.015] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.015] wcscat (in: _Dest=0x3f3cd30, _Source="J0241043.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" [0226.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0226.016] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d2ba00, ftCreationTime.dwHighDateTime=0x1be9d3f, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49d2ba00, ftLastWriteTime.dwHighDateTime=0x1be9d3f, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1 [0226.016] wcscmp (_String1="J0241077.WMF", _String2=".") returned 1 [0226.016] wcscmp (_String1="J0241077.WMF", _String2="..") returned 1 [0226.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d060 [0226.016] wcscpy (in: _Dest=0x3f3d060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.016] wcscat (in: _Dest=0x3f3d060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.016] wcscat (in: _Dest=0x3f3d060, _Source="J0241077.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" [0226.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0226.017] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfe6900, ftCreationTime.dwHighDateTime=0x1be9d41, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cfe6900, ftLastWriteTime.dwHighDateTime=0x1be9d41, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1 [0226.017] wcscmp (_String1="J0241773.WMF", _String2=".") returned 1 [0226.017] wcscmp (_String1="J0241773.WMF", _String2="..") returned 1 [0226.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0226.017] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.017] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.017] wcscat (in: _Dest=0x3f3bdc8, _Source="J0241773.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" [0226.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0226.018] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091f000, ftCreationTime.dwHighDateTime=0x1be9d41, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7091f000, ftLastWriteTime.dwHighDateTime=0x1be9d41, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1 [0226.018] wcscmp (_String1="J0241781.WMF", _String2=".") returned 1 [0226.018] wcscmp (_String1="J0241781.WMF", _String2="..") returned 1 [0226.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0226.018] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.018] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.018] wcscat (in: _Dest=0x3f3d748, _Source="J0241781.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" [0226.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0226.019] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1 [0226.019] wcscmp (_String1="J0250504.WMF", _String2=".") returned 1 [0226.019] wcscmp (_String1="J0250504.WMF", _String2="..") returned 1 [0226.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d4a0 [0226.019] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.020] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.020] wcscat (in: _Dest=0x3f3d4a0, _Source="J0250504.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" [0226.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0226.020] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1 [0226.020] wcscmp (_String1="J0250997.WMF", _String2=".") returned 1 [0226.020] wcscmp (_String1="J0250997.WMF", _String2="..") returned 1 [0226.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d968 [0226.020] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.021] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.021] wcscat (in: _Dest=0x3f3d968, _Source="J0250997.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" [0226.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0226.021] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1 [0226.021] wcscmp (_String1="J0251007.WMF", _String2=".") returned 1 [0226.021] wcscmp (_String1="J0251007.WMF", _String2="..") returned 1 [0226.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6b48 [0226.022] wcscpy (in: _Dest=0x3ec6b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.022] wcscat (in: _Dest=0x3ec6b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.022] wcscat (in: _Dest=0x3ec6b48, _Source="J0251007.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" [0226.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0226.023] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4522200, ftCreationTime.dwHighDateTime=0x1beb35d, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4522200, ftLastWriteTime.dwHighDateTime=0x1beb35d, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1 [0226.023] wcscmp (_String1="J0252629.WMF", _String2=".") returned 1 [0226.023] wcscmp (_String1="J0252629.WMF", _String2="..") returned 1 [0226.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6bd0 [0226.023] wcscpy (in: _Dest=0x3ec6bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.023] wcscat (in: _Dest=0x3ec6bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.023] wcscat (in: _Dest=0x3ec6bd0, _Source="J0252629.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" [0226.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0226.024] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc29a600, ftCreationTime.dwHighDateTime=0x1beb35d, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc29a600, ftLastWriteTime.dwHighDateTime=0x1beb35d, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1 [0226.024] wcscmp (_String1="J0252669.WMF", _String2=".") returned 1 [0226.024] wcscmp (_String1="J0252669.WMF", _String2="..") returned 1 [0226.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6c58 [0226.024] wcscpy (in: _Dest=0x3ec6c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.024] wcscat (in: _Dest=0x3ec6c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.024] wcscat (in: _Dest=0x3ec6c58, _Source="J0252669.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" [0226.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0226.025] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd03600, ftCreationTime.dwHighDateTime=0x1bec159, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dd03600, ftLastWriteTime.dwHighDateTime=0x1bec159, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1 [0226.025] wcscmp (_String1="J0278702.WMF", _String2=".") returned 1 [0226.025] wcscmp (_String1="J0278702.WMF", _String2="..") returned 1 [0226.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6ce0 [0226.025] wcscpy (in: _Dest=0x3ec6ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.025] wcscat (in: _Dest=0x3ec6ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.025] wcscat (in: _Dest=0x3ec6ce0, _Source="J0278702.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" [0226.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0226.026] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc47f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1 [0226.026] wcscmp (_String1="J0279644.WMF", _String2=".") returned 1 [0226.026] wcscmp (_String1="J0279644.WMF", _String2="..") returned 1 [0226.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6d68 [0226.026] wcscpy (in: _Dest=0x3ec6d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.026] wcscat (in: _Dest=0x3ec6d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.026] wcscat (in: _Dest=0x3ec6d68, _Source="J0279644.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" [0226.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0226.027] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1 [0226.027] wcscmp (_String1="J0280468.WMF", _String2=".") returned 1 [0226.027] wcscmp (_String1="J0280468.WMF", _String2="..") returned 1 [0226.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6df0 [0226.027] wcscpy (in: _Dest=0x3ec6df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.027] wcscat (in: _Dest=0x3ec6df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.028] wcscat (in: _Dest=0x3ec6df0, _Source="J0280468.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" [0226.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0226.028] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56e6a00, ftCreationTime.dwHighDateTime=0x1bed373, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc56e6a00, ftLastWriteTime.dwHighDateTime=0x1bed373, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1 [0226.028] wcscmp (_String1="J0281008.WMF", _String2=".") returned 1 [0226.028] wcscmp (_String1="J0281008.WMF", _String2="..") returned 1 [0226.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6e78 [0226.029] wcscpy (in: _Dest=0x3ec6e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.029] wcscat (in: _Dest=0x3ec6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.029] wcscat (in: _Dest=0x3ec6e78, _Source="J0281008.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" [0226.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0226.030] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7275df00, ftCreationTime.dwHighDateTime=0x1bed467, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7275df00, ftLastWriteTime.dwHighDateTime=0x1bed467, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1 [0226.030] wcscmp (_String1="J0281243.WMF", _String2=".") returned 1 [0226.030] wcscmp (_String1="J0281243.WMF", _String2="..") returned 1 [0226.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6f00 [0226.030] wcscpy (in: _Dest=0x3ec6f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.030] wcscat (in: _Dest=0x3ec6f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.030] wcscat (in: _Dest=0x3ec6f00, _Source="J0281243.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" [0226.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0226.031] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11aa5700, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11aa5700, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1 [0226.031] wcscmp (_String1="J0281630.WMF", _String2=".") returned 1 [0226.031] wcscmp (_String1="J0281630.WMF", _String2="..") returned 1 [0226.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec6f88 [0226.031] wcscpy (in: _Dest=0x3ec6f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.031] wcscat (in: _Dest=0x3ec6f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.031] wcscat (in: _Dest=0x3ec6f88, _Source="J0281630.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" [0226.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0226.032] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12db8400, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12db8400, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1 [0226.032] wcscmp (_String1="J0281632.WMF", _String2=".") returned 1 [0226.032] wcscmp (_String1="J0281632.WMF", _String2="..") returned 1 [0226.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7010 [0226.032] wcscpy (in: _Dest=0x3ec7010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.032] wcscat (in: _Dest=0x3ec7010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.032] wcscat (in: _Dest=0x3ec7010, _Source="J0281632.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" [0226.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0226.033] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c64ec00, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c64ec00, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1 [0226.033] wcscmp (_String1="J0281638.WMF", _String2=".") returned 1 [0226.033] wcscmp (_String1="J0281638.WMF", _String2="..") returned 1 [0226.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7098 [0226.033] wcscpy (in: _Dest=0x3ec7098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.033] wcscat (in: _Dest=0x3ec7098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.033] wcscat (in: _Dest=0x3ec7098, _Source="J0281638.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" [0226.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0226.034] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d961900, ftCreationTime.dwHighDateTime=0x1bee4a7, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d961900, ftLastWriteTime.dwHighDateTime=0x1bee4a7, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1 [0226.034] wcscmp (_String1="J0281640.WMF", _String2=".") returned 1 [0226.034] wcscmp (_String1="J0281640.WMF", _String2="..") returned 1 [0226.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7120 [0226.034] wcscpy (in: _Dest=0x3ec7120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.034] wcscat (in: _Dest=0x3ec7120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.034] wcscat (in: _Dest=0x3ec7120, _Source="J0281640.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" [0226.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0226.035] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc43800, ftCreationTime.dwHighDateTime=0x1beed3d, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4fc43800, ftLastWriteTime.dwHighDateTime=0x1beed3d, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1 [0226.035] wcscmp (_String1="J0282126.WMF", _String2=".") returned 1 [0226.035] wcscmp (_String1="J0282126.WMF", _String2="..") returned 1 [0226.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec71a8 [0226.035] wcscpy (in: _Dest=0x3ec71a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.035] wcscat (in: _Dest=0x3ec71a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.035] wcscat (in: _Dest=0x3ec71a8, _Source="J0282126.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" [0226.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec71a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0226.036] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc6e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1 [0226.037] wcscmp (_String1="J0282928.WMF", _String2=".") returned 1 [0226.037] wcscmp (_String1="J0282928.WMF", _String2="..") returned 1 [0226.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7230 [0226.037] wcscpy (in: _Dest=0x3ec7230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.037] wcscat (in: _Dest=0x3ec7230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.037] wcscat (in: _Dest=0x3ec7230, _Source="J0282928.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" [0226.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0226.038] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1 [0226.038] wcscmp (_String1="J0282932.WMF", _String2=".") returned 1 [0226.038] wcscmp (_String1="J0282932.WMF", _String2="..") returned 1 [0226.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec72b8 [0226.038] wcscpy (in: _Dest=0x3ec72b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.038] wcscat (in: _Dest=0x3ec72b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.038] wcscat (in: _Dest=0x3ec72b8, _Source="J0282932.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" [0226.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec72b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0226.039] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1 [0226.039] wcscmp (_String1="J0285462.WMF", _String2=".") returned 1 [0226.039] wcscmp (_String1="J0285462.WMF", _String2="..") returned 1 [0226.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7340 [0226.039] wcscpy (in: _Dest=0x3ec7340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.039] wcscat (in: _Dest=0x3ec7340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.039] wcscat (in: _Dest=0x3ec7340, _Source="J0285462.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" [0226.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0226.040] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7c77f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1 [0226.040] wcscmp (_String1="J0285484.WMF", _String2=".") returned 1 [0226.040] wcscmp (_String1="J0285484.WMF", _String2="..") returned 1 [0226.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec73c8 [0226.040] wcscpy (in: _Dest=0x3ec73c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.040] wcscat (in: _Dest=0x3ec73c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.040] wcscat (in: _Dest=0x3ec73c8, _Source="J0285484.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" [0226.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec73c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0226.041] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1 [0226.041] wcscmp (_String1="J0285780.WMF", _String2=".") returned 1 [0226.041] wcscmp (_String1="J0285780.WMF", _String2="..") returned 1 [0226.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7450 [0226.042] wcscpy (in: _Dest=0x3ec7450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.042] wcscat (in: _Dest=0x3ec7450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.042] wcscat (in: _Dest=0x3ec7450, _Source="J0285780.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" [0226.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0226.042] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1 [0226.043] wcscmp (_String1="J0285782.WMF", _String2=".") returned 1 [0226.043] wcscmp (_String1="J0285782.WMF", _String2="..") returned 1 [0226.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec74d8 [0226.043] wcscpy (in: _Dest=0x3ec74d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.043] wcscat (in: _Dest=0x3ec74d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.043] wcscat (in: _Dest=0x3ec74d8, _Source="J0285782.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" [0226.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec74d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0226.044] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1 [0226.044] wcscmp (_String1="J0285792.WMF", _String2=".") returned 1 [0226.044] wcscmp (_String1="J0285792.WMF", _String2="..") returned 1 [0226.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7560 [0226.044] wcscpy (in: _Dest=0x3ec7560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.044] wcscat (in: _Dest=0x3ec7560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.044] wcscat (in: _Dest=0x3ec7560, _Source="J0285792.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" [0226.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0226.045] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1 [0226.045] wcscmp (_String1="J0285796.WMF", _String2=".") returned 1 [0226.045] wcscmp (_String1="J0285796.WMF", _String2="..") returned 1 [0226.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec75e8 [0226.045] wcscpy (in: _Dest=0x3ec75e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.045] wcscat (in: _Dest=0x3ec75e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.045] wcscat (in: _Dest=0x3ec75e8, _Source="J0285796.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" [0226.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec75e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0226.120] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1 [0226.120] wcscmp (_String1="J0285808.WMF", _String2=".") returned 1 [0226.120] wcscmp (_String1="J0285808.WMF", _String2="..") returned 1 [0226.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d060 [0226.121] wcscpy (in: _Dest=0x3f3d060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.121] wcscat (in: _Dest=0x3f3d060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.121] wcscat (in: _Dest=0x3f3d060, _Source="J0285808.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" [0226.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0226.122] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1 [0226.122] wcscmp (_String1="J0285820.WMF", _String2=".") returned 1 [0226.122] wcscmp (_String1="J0285820.WMF", _String2="..") returned 1 [0226.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0226.122] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.122] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.122] wcscat (in: _Dest=0x3f3cd30, _Source="J0285820.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" [0226.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0226.123] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1 [0226.123] wcscmp (_String1="J0285822.WMF", _String2=".") returned 1 [0226.123] wcscmp (_String1="J0285822.WMF", _String2="..") returned 1 [0226.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3be50 [0226.123] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0226.123] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0226.123] wcscat (in: _Dest=0x3f3be50, _Source="J0285822.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" [0226.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0226.124] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1 [0227.164] wcscmp (_String1="J0287018.WMF", _String2=".") returned 1 [0227.165] wcscmp (_String1="J0287018.WMF", _String2="..") returned 1 [0227.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68dd8 [0227.165] wcscpy (in: _Dest=0x7a68dd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.165] wcscat (in: _Dest=0x7a68dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.165] wcscat (in: _Dest=0x7a68dd8, _Source="J0287018.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" [0227.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0227.166] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1 [0227.166] wcscmp (_String1="J0287019.WMF", _String2=".") returned 1 [0227.166] wcscmp (_String1="J0287019.WMF", _String2="..") returned 1 [0227.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68e60 [0227.166] wcscpy (in: _Dest=0x7a68e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.166] wcscat (in: _Dest=0x7a68e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.166] wcscat (in: _Dest=0x7a68e60, _Source="J0287019.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" [0227.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0227.167] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1 [0227.167] wcscmp (_String1="J0287020.WMF", _String2=".") returned 1 [0227.167] wcscmp (_String1="J0287020.WMF", _String2="..") returned 1 [0227.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69cb8 [0227.167] wcscpy (in: _Dest=0x7a69cb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.167] wcscat (in: _Dest=0x7a69cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.167] wcscat (in: _Dest=0x7a69cb8, _Source="J0287020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" [0227.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0227.168] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1 [0227.168] wcscmp (_String1="J0287024.WMF", _String2=".") returned 1 [0227.168] wcscmp (_String1="J0287024.WMF", _String2="..") returned 1 [0227.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68558 [0227.168] wcscpy (in: _Dest=0x7a68558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.168] wcscat (in: _Dest=0x7a68558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.168] wcscat (in: _Dest=0x7a68558, _Source="J0287024.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" [0227.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec [0227.169] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1 [0227.170] wcscmp (_String1="J0287408.WMF", _String2=".") returned 1 [0227.170] wcscmp (_String1="J0287408.WMF", _String2="..") returned 1 [0227.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69328 [0227.170] wcscpy (in: _Dest=0x7a69328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.170] wcscat (in: _Dest=0x7a69328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.170] wcscat (in: _Dest=0x7a69328, _Source="J0287408.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" [0227.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0227.171] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1 [0227.171] wcscmp (_String1="J0287415.WMF", _String2=".") returned 1 [0227.171] wcscmp (_String1="J0287415.WMF", _String2="..") returned 1 [0227.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69a98 [0227.171] wcscpy (in: _Dest=0x7a69a98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.171] wcscat (in: _Dest=0x7a69a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.171] wcscat (in: _Dest=0x7a69a98, _Source="J0287415.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" [0227.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0227.172] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1 [0227.172] wcscmp (_String1="J0287417.WMF", _String2=".") returned 1 [0227.172] wcscmp (_String1="J0287417.WMF", _String2="..") returned 1 [0227.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ba8 [0227.172] wcscpy (in: _Dest=0x7a69ba8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.172] wcscat (in: _Dest=0x7a69ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.172] wcscat (in: _Dest=0x7a69ba8, _Source="J0287417.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" [0227.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0227.173] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x176b7200, ftCreationTime.dwHighDateTime=0x1bf594b, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x176b7200, ftLastWriteTime.dwHighDateTime=0x1bf594b, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1 [0227.173] wcscmp (_String1="J0287641.JPG", _String2=".") returned 1 [0227.173] wcscmp (_String1="J0287641.JPG", _String2="..") returned 1 [0227.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68bb8 [0227.173] wcscpy (in: _Dest=0x7a68bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.174] wcscat (in: _Dest=0x7a68bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.174] wcscat (in: _Dest=0x7a68bb8, _Source="J0287641.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" [0227.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0227.175] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c08f000, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bc94250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c08f000, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1 [0227.175] wcscmp (_String1="J0287642.JPG", _String2=".") returned 1 [0227.175] wcscmp (_String1="J0287642.JPG", _String2="..") returned 1 [0227.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68a20 [0227.175] wcscpy (in: _Dest=0x7a68a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.175] wcscat (in: _Dest=0x7a68a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.175] wcscat (in: _Dest=0x7a68a20, _Source="J0287642.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" [0227.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0227.176] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad7c300, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ad7c300, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1 [0227.176] wcscmp (_String1="J0287643.JPG", _String2=".") returned 1 [0227.176] wcscmp (_String1="J0287643.JPG", _String2="..") returned 1 [0227.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68338 [0227.176] wcscpy (in: _Dest=0x7a68338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.176] wcscat (in: _Dest=0x7a68338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.176] wcscat (in: _Dest=0x7a68338, _Source="J0287643.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" [0227.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0227.177] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad7c300, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ad7c300, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1 [0227.177] wcscmp (_String1="J0287644.JPG", _String2=".") returned 1 [0227.177] wcscmp (_String1="J0287644.JPG", _String2="..") returned 1 [0227.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69b20 [0227.178] wcscpy (in: _Dest=0x7a69b20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.178] wcscat (in: _Dest=0x7a69b20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.178] wcscat (in: _Dest=0x7a69b20, _Source="J0287644.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" [0227.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0227.179] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad7c300, ftCreationTime.dwHighDateTime=0x1bf593f, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ad7c300, ftLastWriteTime.dwHighDateTime=0x1bf593f, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1 [0227.179] wcscmp (_String1="J0287645.JPG", _String2=".") returned 1 [0227.179] wcscmp (_String1="J0287645.JPG", _String2="..") returned 1 [0227.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68778 [0227.179] wcscpy (in: _Dest=0x7a68778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.179] wcscat (in: _Dest=0x7a68778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.179] wcscat (in: _Dest=0x7a68778, _Source="J0287645.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" [0227.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0227.180] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1 [0227.180] wcscmp (_String1="J0289430.JPG", _String2=".") returned 1 [0227.180] wcscmp (_String1="J0289430.JPG", _String2="..") returned 1 [0227.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69438 [0227.180] wcscpy (in: _Dest=0x7a69438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.180] wcscat (in: _Dest=0x7a69438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.180] wcscat (in: _Dest=0x7a69438, _Source="J0289430.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" [0227.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0227.181] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b7ed950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1 [0227.181] wcscmp (_String1="J0290548.WMF", _String2=".") returned 1 [0227.181] wcscmp (_String1="J0290548.WMF", _String2="..") returned 1 [0227.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69a10 [0227.181] wcscpy (in: _Dest=0x7a69a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.181] wcscat (in: _Dest=0x7a69a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.181] wcscat (in: _Dest=0x7a69a10, _Source="J0290548.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" [0227.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0227.182] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1 [0227.182] wcscmp (_String1="J0291794.WMF", _String2=".") returned 1 [0227.182] wcscmp (_String1="J0291794.WMF", _String2="..") returned 1 [0227.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68aa8 [0227.182] wcscpy (in: _Dest=0x7a68aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.182] wcscat (in: _Dest=0x7a68aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.183] wcscat (in: _Dest=0x7a68aa8, _Source="J0291794.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" [0227.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0227.183] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1 [0227.183] wcscmp (_String1="J0292248.WMF", _String2=".") returned 1 [0227.184] wcscmp (_String1="J0292248.WMF", _String2="..") returned 1 [0227.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69900 [0227.184] wcscpy (in: _Dest=0x7a69900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.184] wcscat (in: _Dest=0x7a69900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.184] wcscat (in: _Dest=0x7a69900, _Source="J0292248.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" [0227.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0227.185] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292270.WMF", cAlternateFileName="")) returned 1 [0227.185] wcscmp (_String1="J0292270.WMF", _String2=".") returned 1 [0227.185] wcscmp (_String1="J0292270.WMF", _String2="..") returned 1 [0227.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69080 [0227.185] wcscpy (in: _Dest=0x7a69080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.185] wcscat (in: _Dest=0x7a69080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.185] wcscat (in: _Dest=0x7a69080, _Source="J0292270.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" [0227.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0227.186] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292272.WMF", cAlternateFileName="")) returned 1 [0227.186] wcscmp (_String1="J0292272.WMF", _String2=".") returned 1 [0227.186] wcscmp (_String1="J0292272.WMF", _String2="..") returned 1 [0227.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69988 [0227.186] wcscpy (in: _Dest=0x7a69988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.186] wcscat (in: _Dest=0x7a69988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.186] wcscat (in: _Dest=0x7a69988, _Source="J0292272.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" [0227.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0227.187] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292278.WMF", cAlternateFileName="")) returned 1 [0227.187] wcscmp (_String1="J0292278.WMF", _String2=".") returned 1 [0227.187] wcscmp (_String1="J0292278.WMF", _String2="..") returned 1 [0227.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a697f0 [0227.187] wcscpy (in: _Dest=0x7a697f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.187] wcscat (in: _Dest=0x7a697f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.187] wcscat (in: _Dest=0x7a697f0, _Source="J0292278.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" [0227.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a697f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0227.188] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292286.WMF", cAlternateFileName="")) returned 1 [0227.188] wcscmp (_String1="J0292286.WMF", _String2=".") returned 1 [0227.188] wcscmp (_String1="J0292286.WMF", _String2="..") returned 1 [0227.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a694c0 [0227.188] wcscpy (in: _Dest=0x7a694c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.188] wcscat (in: _Dest=0x7a694c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.188] wcscat (in: _Dest=0x7a694c0, _Source="J0292286.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" [0227.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a694c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0227.189] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293800.WMF", cAlternateFileName="")) returned 1 [0227.189] wcscmp (_String1="J0293800.WMF", _String2=".") returned 1 [0227.189] wcscmp (_String1="J0293800.WMF", _String2="..") returned 1 [0227.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69dc8 [0227.189] wcscpy (in: _Dest=0x7a69dc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.189] wcscat (in: _Dest=0x7a69dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.189] wcscat (in: _Dest=0x7a69dc8, _Source="J0293800.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" [0227.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0227.190] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bcba3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293832.WMF", cAlternateFileName="")) returned 1 [0227.190] wcscmp (_String1="J0293832.WMF", _String2=".") returned 1 [0227.190] wcscmp (_String1="J0293832.WMF", _String2="..") returned 1 [0227.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69e50 [0227.190] wcscpy (in: _Dest=0x7a69e50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.190] wcscat (in: _Dest=0x7a69e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.191] wcscat (in: _Dest=0x7a69e50, _Source="J0293832.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" [0227.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0227.191] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x37de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294989.WMF", cAlternateFileName="")) returned 1 [0227.191] wcscmp (_String1="J0294989.WMF", _String2=".") returned 1 [0227.191] wcscmp (_String1="J0294989.WMF", _String2="..") returned 1 [0227.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68888 [0227.192] wcscpy (in: _Dest=0x7a68888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.192] wcscat (in: _Dest=0x7a68888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.192] wcscat (in: _Dest=0x7a68888, _Source="J0294989.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" [0227.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0227.192] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b813ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294991.WMF", cAlternateFileName="")) returned 1 [0227.193] wcscmp (_String1="J0294991.WMF", _String2=".") returned 1 [0227.193] wcscmp (_String1="J0294991.WMF", _String2="..") returned 1 [0227.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69d40 [0227.193] wcscpy (in: _Dest=0x7a69d40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.193] wcscat (in: _Dest=0x7a69d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.193] wcscat (in: _Dest=0x7a69d40, _Source="J0294991.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" [0227.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0227.194] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x21b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295069.WMF", cAlternateFileName="")) returned 1 [0227.194] wcscmp (_String1="J0295069.WMF", _String2=".") returned 1 [0227.194] wcscmp (_String1="J0295069.WMF", _String2="..") returned 1 [0227.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68f70 [0227.194] wcscpy (in: _Dest=0x7a68f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.194] wcscat (in: _Dest=0x7a68f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.194] wcscat (in: _Dest=0x7a68f70, _Source="J0295069.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" [0227.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0227.195] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296277.WMF", cAlternateFileName="")) returned 1 [0227.195] wcscmp (_String1="J0296277.WMF", _String2=".") returned 1 [0227.195] wcscmp (_String1="J0296277.WMF", _String2="..") returned 1 [0227.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ff8 [0227.195] wcscpy (in: _Dest=0x7a68ff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.195] wcscat (in: _Dest=0x7a68ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.195] wcscat (in: _Dest=0x7a68ff8, _Source="J0296277.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" [0227.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0227.196] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296279.WMF", cAlternateFileName="")) returned 1 [0227.196] wcscmp (_String1="J0296279.WMF", _String2=".") returned 1 [0227.196] wcscmp (_String1="J0296279.WMF", _String2="..") returned 1 [0227.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a693b0 [0227.196] wcscpy (in: _Dest=0x7a693b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.196] wcscat (in: _Dest=0x7a693b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.196] wcscat (in: _Dest=0x7a693b0, _Source="J0296279.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" [0227.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a693b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0227.197] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x107ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296288.WMF", cAlternateFileName="")) returned 1 [0227.197] wcscmp (_String1="J0296288.WMF", _String2=".") returned 1 [0227.197] wcscmp (_String1="J0296288.WMF", _String2="..") returned 1 [0227.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68910 [0227.197] wcscpy (in: _Dest=0x7a68910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.197] wcscat (in: _Dest=0x7a68910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.197] wcscat (in: _Dest=0x7a68910, _Source="J0296288.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" [0227.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0227.198] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x59ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297229.WMF", cAlternateFileName="")) returned 1 [0227.198] wcscmp (_String1="J0297229.WMF", _String2=".") returned 1 [0227.198] wcscmp (_String1="J0297229.WMF", _String2="..") returned 1 [0227.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a692a0 [0227.198] wcscpy (in: _Dest=0x7a692a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.198] wcscat (in: _Dest=0x7a692a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.198] wcscat (in: _Dest=0x7a692a0, _Source="J0297229.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" [0227.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a692a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0227.199] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297269.WMF", cAlternateFileName="")) returned 1 [0227.199] wcscmp (_String1="J0297269.WMF", _String2=".") returned 1 [0227.199] wcscmp (_String1="J0297269.WMF", _String2="..") returned 1 [0227.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69218 [0227.199] wcscpy (in: _Dest=0x7a69218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.200] wcscat (in: _Dest=0x7a69218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.200] wcscat (in: _Dest=0x7a69218, _Source="J0297269.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" [0227.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0227.242] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4236, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297725.WMF", cAlternateFileName="")) returned 1 [0227.242] wcscmp (_String1="J0297725.WMF", _String2=".") returned 1 [0227.243] wcscmp (_String1="J0297725.WMF", _String2="..") returned 1 [0227.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9e68 [0227.243] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.243] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.243] wcscat (in: _Dest=0x3eb9e68, _Source="J0297725.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" [0227.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0227.244] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297727.WMF", cAlternateFileName="")) returned 1 [0227.244] wcscmp (_String1="J0297727.WMF", _String2=".") returned 1 [0227.244] wcscmp (_String1="J0297727.WMF", _String2="..") returned 1 [0227.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9d58 [0227.245] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.245] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.245] wcscat (in: _Dest=0x3eb9d58, _Source="J0297727.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" [0227.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0227.245] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x493e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297757.WMF", cAlternateFileName="")) returned 1 [0227.245] wcscmp (_String1="J0297757.WMF", _String2=".") returned 1 [0227.246] wcscmp (_String1="J0297757.WMF", _String2="..") returned 1 [0227.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0227.246] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.246] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.246] wcscat (in: _Dest=0x3eb95e8, _Source="J0297757.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" [0227.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0227.247] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bce0510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4960, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297759.WMF", cAlternateFileName="")) returned 1 [0227.247] wcscmp (_String1="J0297759.WMF", _String2=".") returned 1 [0227.247] wcscmp (_String1="J0297759.WMF", _String2="..") returned 1 [0227.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0227.247] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.247] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.247] wcscat (in: _Dest=0x3eb9cd0, _Source="J0297759.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" [0227.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0227.248] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b839c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300862.WMF", cAlternateFileName="")) returned 1 [0227.251] wcscmp (_String1="J0300862.WMF", _String2=".") returned 1 [0227.251] wcscmp (_String1="J0300862.WMF", _String2="..") returned 1 [0227.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0227.251] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.251] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.251] wcscat (in: _Dest=0x3eb9010, _Source="J0300862.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" [0227.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0227.252] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba43700, ftCreationTime.dwHighDateTime=0x1bf4592, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba43700, ftLastWriteTime.dwHighDateTime=0x1bf4592, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301044.WMF", cAlternateFileName="")) returned 1 [0227.252] wcscmp (_String1="J0301044.WMF", _String2=".") returned 1 [0227.252] wcscmp (_String1="J0301044.WMF", _String2="..") returned 1 [0227.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0227.252] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.252] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.252] wcscat (in: _Dest=0x3eb9ef0, _Source="J0301044.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" [0227.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0227.253] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e05300, ftCreationTime.dwHighDateTime=0x1bf4ad0, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5e05300, ftLastWriteTime.dwHighDateTime=0x1bf4ad0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301052.WMF", cAlternateFileName="")) returned 1 [0227.253] wcscmp (_String1="J0301052.WMF", _String2=".") returned 1 [0227.253] wcscmp (_String1="J0301052.WMF", _String2="..") returned 1 [0227.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba440 [0227.253] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.254] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.254] wcscat (in: _Dest=0x3eba440, _Source="J0301052.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" [0227.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0227.254] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301418.WMF", cAlternateFileName="")) returned 1 [0227.254] wcscmp (_String1="J0301418.WMF", _String2=".") returned 1 [0227.254] wcscmp (_String1="J0301418.WMF", _String2="..") returned 1 [0227.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0227.255] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.255] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.255] wcscat (in: _Dest=0x3eb8b48, _Source="J0301418.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" [0227.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0227.256] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301432.WMF", cAlternateFileName="")) returned 1 [0227.256] wcscmp (_String1="J0301432.WMF", _String2=".") returned 1 [0227.256] wcscmp (_String1="J0301432.WMF", _String2="..") returned 1 [0227.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb91a8 [0227.256] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.256] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.256] wcscat (in: _Dest=0x3eb91a8, _Source="J0301432.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" [0227.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0227.257] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304371.WMF", cAlternateFileName="")) returned 1 [0227.257] wcscmp (_String1="J0304371.WMF", _String2=".") returned 1 [0227.257] wcscmp (_String1="J0304371.WMF", _String2="..") returned 1 [0227.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9120 [0227.257] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.257] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.257] wcscat (in: _Dest=0x3eb9120, _Source="J0304371.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" [0227.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0227.258] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x103e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304405.WMF", cAlternateFileName="")) returned 1 [0227.258] wcscmp (_String1="J0304405.WMF", _String2=".") returned 1 [0227.258] wcscmp (_String1="J0304405.WMF", _String2="..") returned 1 [0227.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0227.258] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.258] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.258] wcscat (in: _Dest=0x3eba220, _Source="J0304405.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" [0227.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0227.259] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304853.WMF", cAlternateFileName="")) returned 1 [0227.259] wcscmp (_String1="J0304853.WMF", _String2=".") returned 1 [0227.259] wcscmp (_String1="J0304853.WMF", _String2="..") returned 1 [0227.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0227.259] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.259] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.259] wcscat (in: _Dest=0x3eba770, _Source="J0304853.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" [0227.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0227.260] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304861.WMF", cAlternateFileName="")) returned 1 [0227.260] wcscmp (_String1="J0304861.WMF", _String2=".") returned 1 [0227.260] wcscmp (_String1="J0304861.WMF", _String2="..") returned 1 [0227.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba3b8 [0227.260] wcscpy (in: _Dest=0x3eba3b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.260] wcscat (in: _Dest=0x3eba3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.260] wcscat (in: _Dest=0x3eba3b8, _Source="J0304861.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" [0227.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0227.261] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b85fd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304875.WMF", cAlternateFileName="")) returned 1 [0227.261] wcscmp (_String1="J0304875.WMF", _String2=".") returned 1 [0227.261] wcscmp (_String1="J0304875.WMF", _String2="..") returned 1 [0227.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9918 [0227.261] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.261] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.262] wcscat (in: _Dest=0x3eb9918, _Source="J0304875.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" [0227.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0227.263] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309480.JPG", cAlternateFileName="")) returned 1 [0227.263] wcscmp (_String1="J0309480.JPG", _String2=".") returned 1 [0227.263] wcscmp (_String1="J0309480.JPG", _String2="..") returned 1 [0227.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f88 [0227.263] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.263] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.263] wcscat (in: _Dest=0x3eb8f88, _Source="J0309480.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" [0227.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0227.264] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x544c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309567.JPG", cAlternateFileName="")) returned 1 [0227.264] wcscmp (_String1="J0309567.JPG", _String2=".") returned 1 [0227.264] wcscmp (_String1="J0309567.JPG", _String2="..") returned 1 [0227.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0227.264] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.264] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.264] wcscat (in: _Dest=0x3eb9670, _Source="J0309567.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" [0227.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0227.265] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309585.JPG", cAlternateFileName="")) returned 1 [0227.265] wcscmp (_String1="J0309585.JPG", _String2=".") returned 1 [0227.265] wcscmp (_String1="J0309585.JPG", _String2="..") returned 1 [0227.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9890 [0227.265] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.265] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.265] wcscat (in: _Dest=0x3eb9890, _Source="J0309585.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" [0227.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0227.266] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309598.JPG", cAlternateFileName="")) returned 1 [0227.266] wcscmp (_String1="J0309598.JPG", _String2=".") returned 1 [0227.266] wcscmp (_String1="J0309598.JPG", _String2="..") returned 1 [0227.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9098 [0227.266] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.266] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.266] wcscat (in: _Dest=0x3eb9098, _Source="J0309598.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" [0227.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0227.267] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a0000, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9a0000, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaabb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309664.JPG", cAlternateFileName="")) returned 1 [0227.267] wcscmp (_String1="J0309664.JPG", _String2=".") returned 1 [0227.267] wcscmp (_String1="J0309664.JPG", _String2="..") returned 1 [0227.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f00 [0227.268] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.268] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.268] wcscat (in: _Dest=0x3eb8f00, _Source="J0309664.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" [0227.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0227.269] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd06670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309705.JPG", cAlternateFileName="")) returned 1 [0227.269] wcscmp (_String1="J0309705.JPG", _String2=".") returned 1 [0227.269] wcscmp (_String1="J0309705.JPG", _String2="..") returned 1 [0227.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba660 [0227.269] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.269] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.269] wcscat (in: _Dest=0x3eba660, _Source="J0309705.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" [0227.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0227.270] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0ca8400, ftCreationTime.dwHighDateTime=0x1bf5d1a, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0ca8400, ftLastWriteTime.dwHighDateTime=0x1bf5d1a, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309902.WMF", cAlternateFileName="")) returned 1 [0227.270] wcscmp (_String1="J0309902.WMF", _String2=".") returned 1 [0227.270] wcscmp (_String1="J0309902.WMF", _String2="..") returned 1 [0227.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba4c8 [0227.270] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.270] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.270] wcscat (in: _Dest=0x3eba4c8, _Source="J0309902.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" [0227.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0227.271] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1fbb100, ftCreationTime.dwHighDateTime=0x1bf5d1a, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1fbb100, ftLastWriteTime.dwHighDateTime=0x1bf5d1a, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309904.WMF", cAlternateFileName="")) returned 1 [0227.271] wcscmp (_String1="J0309904.WMF", _String2=".") returned 1 [0227.271] wcscmp (_String1="J0309904.WMF", _String2="..") returned 1 [0227.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8d68 [0227.271] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.271] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.271] wcscat (in: _Dest=0x3eb8d68, _Source="J0309904.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" [0227.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0227.286] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd5400, ftCreationTime.dwHighDateTime=0x1bf5d1b, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dd5400, ftLastWriteTime.dwHighDateTime=0x1bf5d1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309920.WMF", cAlternateFileName="")) returned 1 [0227.286] wcscmp (_String1="J0309920.WMF", _String2=".") returned 1 [0227.286] wcscmp (_String1="J0309920.WMF", _String2="..") returned 1 [0227.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8df0 [0227.286] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.286] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.286] wcscat (in: _Dest=0x3eb8df0, _Source="J0309920.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" [0227.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0227.287] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f389100, ftCreationTime.dwHighDateTime=0x1c97c1a, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f389100, ftLastWriteTime.dwHighDateTime=0x1c97c1a, nFileSizeHigh=0x0, nFileSizeLow=0x911a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313896.JPG", cAlternateFileName="")) returned 1 [0227.287] wcscmp (_String1="J0313896.JPG", _String2=".") returned 1 [0227.287] wcscmp (_String1="J0313896.JPG", _String2="..") returned 1 [0227.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0227.287] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.287] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.288] wcscat (in: _Dest=0x3eba2a8, _Source="J0313896.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" [0227.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0227.288] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b09700, ftCreationTime.dwHighDateTime=0x1c97c1a, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b09700, ftLastWriteTime.dwHighDateTime=0x1c97c1a, nFileSizeHigh=0x0, nFileSizeLow=0xa75a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313965.JPG", cAlternateFileName="")) returned 1 [0227.289] wcscmp (_String1="J0313965.JPG", _String2=".") returned 1 [0227.289] wcscmp (_String1="J0313965.JPG", _String2="..") returned 1 [0227.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0227.289] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.289] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.289] wcscat (in: _Dest=0x3eb8e78, _Source="J0313965.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" [0227.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0227.290] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b20500, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7b20500, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0x81ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313970.JPG", cAlternateFileName="")) returned 1 [0227.290] wcscmp (_String1="J0313970.JPG", _String2=".") returned 1 [0227.290] wcscmp (_String1="J0313970.JPG", _String2="..") returned 1 [0227.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9340 [0227.290] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.290] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.290] wcscat (in: _Dest=0x3eb9340, _Source="J0313970.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" [0227.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0227.297] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23cdb00, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd23cdb00, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313974.JPG", cAlternateFileName="")) returned 1 [0227.297] wcscmp (_String1="J0313974.JPG", _String2=".") returned 1 [0227.297] wcscmp (_String1="J0313974.JPG", _String2="..") returned 1 [0227.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0227.298] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.320] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.320] wcscat (in: _Dest=0x3eb9230, _Source="J0313974.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" [0227.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0227.321] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51fec00, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc51fec00, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0x40f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0314068.JPG", cAlternateFileName="")) returned 1 [0227.321] wcscmp (_String1="J0314068.JPG", _String2=".") returned 1 [0227.321] wcscmp (_String1="J0314068.JPG", _String2="..") returned 1 [0227.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9a28 [0227.321] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.321] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.321] wcscat (in: _Dest=0x3eb9a28, _Source="J0314068.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" [0227.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0227.473] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b885ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315580.JPG", cAlternateFileName="")) returned 1 [0227.473] wcscmp (_String1="J0315580.JPG", _String2=".") returned 1 [0227.473] wcscmp (_String1="J0315580.JPG", _String2="..") returned 1 [0227.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a62558 [0227.473] wcscpy (in: _Dest=0x7a62558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.473] wcscat (in: _Dest=0x7a62558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.473] wcscat (in: _Dest=0x7a62558, _Source="J0315580.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" [0227.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0227.474] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x423a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315612.JPG", cAlternateFileName="")) returned 1 [0227.474] wcscmp (_String1="J0315612.JPG", _String2=".") returned 1 [0227.474] wcscmp (_String1="J0315612.JPG", _String2="..") returned 1 [0227.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7670 [0227.474] wcscpy (in: _Dest=0x3ec7670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.474] wcscat (in: _Dest=0x3ec7670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.474] wcscat (in: _Dest=0x3ec7670, _Source="J0315612.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" [0227.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0227.475] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318448.WMF", cAlternateFileName="")) returned 1 [0227.475] wcscmp (_String1="J0318448.WMF", _String2=".") returned 1 [0227.475] wcscmp (_String1="J0318448.WMF", _String2="..") returned 1 [0227.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec76f8 [0227.475] wcscpy (in: _Dest=0x3ec76f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.475] wcscat (in: _Dest=0x3ec76f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.475] wcscat (in: _Dest=0x3ec76f8, _Source="J0318448.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" [0227.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec76f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0227.476] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318804.WMF", cAlternateFileName="")) returned 1 [0227.476] wcscmp (_String1="J0318804.WMF", _String2=".") returned 1 [0227.476] wcscmp (_String1="J0318804.WMF", _String2="..") returned 1 [0227.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7780 [0227.477] wcscpy (in: _Dest=0x3ec7780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.477] wcscat (in: _Dest=0x3ec7780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.477] wcscat (in: _Dest=0x3ec7780, _Source="J0318804.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" [0227.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0227.477] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x28be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318810.WMF", cAlternateFileName="")) returned 1 [0227.478] wcscmp (_String1="J0318810.WMF", _String2=".") returned 1 [0227.478] wcscmp (_String1="J0318810.WMF", _String2="..") returned 1 [0227.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7808 [0227.478] wcscpy (in: _Dest=0x3ec7808, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.478] wcscat (in: _Dest=0x3ec7808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.478] wcscat (in: _Dest=0x3ec7808, _Source="J0318810.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" [0227.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0227.478] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0321179.JPG", cAlternateFileName="")) returned 1 [0227.478] wcscmp (_String1="J0321179.JPG", _String2=".") returned 1 [0227.479] wcscmp (_String1="J0321179.JPG", _String2="..") returned 1 [0227.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7890 [0227.479] wcscpy (in: _Dest=0x3ec7890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.479] wcscat (in: _Dest=0x3ec7890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.479] wcscat (in: _Dest=0x3ec7890, _Source="J0321179.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" [0227.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0227.480] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324694.WMF", cAlternateFileName="")) returned 1 [0227.480] wcscmp (_String1="J0324694.WMF", _String2=".") returned 1 [0227.480] wcscmp (_String1="J0324694.WMF", _String2="..") returned 1 [0227.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7918 [0227.480] wcscpy (in: _Dest=0x3ec7918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.480] wcscat (in: _Dest=0x3ec7918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.480] wcscat (in: _Dest=0x3ec7918, _Source="J0324694.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" [0227.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0227.481] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324704.WMF", cAlternateFileName="")) returned 1 [0227.481] wcscmp (_String1="J0324704.WMF", _String2=".") returned 1 [0227.481] wcscmp (_String1="J0324704.WMF", _String2="..") returned 1 [0227.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec79a0 [0227.481] wcscpy (in: _Dest=0x3ec79a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.481] wcscat (in: _Dest=0x3ec79a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.481] wcscat (in: _Dest=0x3ec79a0, _Source="J0324704.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" [0227.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec79a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0227.482] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0337280.JPG", cAlternateFileName="")) returned 1 [0227.482] wcscmp (_String1="J0337280.JPG", _String2=".") returned 1 [0227.482] wcscmp (_String1="J0337280.JPG", _String2="..") returned 1 [0227.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7a28 [0227.486] wcscpy (in: _Dest=0x3ec7a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.486] wcscat (in: _Dest=0x3ec7a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.486] wcscat (in: _Dest=0x3ec7a28, _Source="J0337280.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" [0227.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0227.487] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341328.JPG", cAlternateFileName="")) returned 1 [0227.487] wcscmp (_String1="J0341328.JPG", _String2=".") returned 1 [0227.487] wcscmp (_String1="J0341328.JPG", _String2="..") returned 1 [0227.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3ec7ab0 [0227.488] wcscpy (in: _Dest=0x3ec7ab0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0227.488] wcscat (in: _Dest=0x3ec7ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0227.488] wcscat (in: _Dest=0x3ec7ab0, _Source="J0341328.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" [0227.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0227.488] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341344.JPG", cAlternateFileName="")) returned 1 [0228.789] wcscmp (_String1="J0341344.JPG", _String2=".") returned 1 [0228.790] wcscmp (_String1="J0341344.JPG", _String2="..") returned 1 [0228.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9a28 [0228.790] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.790] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.790] wcscat (in: _Dest=0x3eb9a28, _Source="J0341344.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" [0228.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0228.791] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341439.JPG", cAlternateFileName="")) returned 1 [0228.791] wcscmp (_String1="J0341439.JPG", _String2=".") returned 1 [0228.791] wcscmp (_String1="J0341439.JPG", _String2="..") returned 1 [0228.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0228.792] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.792] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.792] wcscat (in: _Dest=0x3eb9b38, _Source="J0341439.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" [0228.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0228.793] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341447.JPG", cAlternateFileName="")) returned 1 [0228.793] wcscmp (_String1="J0341447.JPG", _String2=".") returned 1 [0228.793] wcscmp (_String1="J0341447.JPG", _String2="..") returned 1 [0228.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9de0 [0228.793] wcscpy (in: _Dest=0x3eb9de0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.793] wcscat (in: _Dest=0x3eb9de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.793] wcscat (in: _Dest=0x3eb9de0, _Source="J0341447.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" [0228.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0228.794] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8ac030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x52c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341448.JPG", cAlternateFileName="")) returned 1 [0228.794] wcscmp (_String1="J0341448.JPG", _String2=".") returned 1 [0228.794] wcscmp (_String1="J0341448.JPG", _String2="..") returned 1 [0228.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0228.795] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.795] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.795] wcscat (in: _Dest=0x3eb8c58, _Source="J0341448.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" [0228.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0228.796] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7457, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341455.JPG", cAlternateFileName="")) returned 1 [0228.796] wcscmp (_String1="J0341455.JPG", _String2=".") returned 1 [0228.796] wcscmp (_String1="J0341455.JPG", _String2="..") returned 1 [0228.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9bc0 [0228.796] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.796] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.796] wcscat (in: _Dest=0x3eb9bc0, _Source="J0341455.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" [0228.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0228.797] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341475.JPG", cAlternateFileName="")) returned 1 [0228.797] wcscmp (_String1="J0341475.JPG", _String2=".") returned 1 [0228.797] wcscmp (_String1="J0341475.JPG", _String2="..") returned 1 [0228.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba550 [0228.797] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.797] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.797] wcscat (in: _Dest=0x3eba550, _Source="J0341475.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" [0228.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0228.798] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341499.JPG", cAlternateFileName="")) returned 1 [0228.798] wcscmp (_String1="J0341499.JPG", _String2=".") returned 1 [0228.799] wcscmp (_String1="J0341499.JPG", _String2="..") returned 1 [0228.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8bd0 [0228.799] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.799] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.799] wcscat (in: _Dest=0x3eb8bd0, _Source="J0341499.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" [0228.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0228.800] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341534.JPG", cAlternateFileName="")) returned 1 [0228.800] wcscmp (_String1="J0341534.JPG", _String2=".") returned 1 [0228.800] wcscmp (_String1="J0341534.JPG", _String2="..") returned 1 [0228.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb96f8 [0228.800] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.800] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.801] wcscat (in: _Dest=0x3eb96f8, _Source="J0341534.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" [0228.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0228.801] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341551.JPG", cAlternateFileName="")) returned 1 [0228.802] wcscmp (_String1="J0341551.JPG", _String2=".") returned 1 [0228.802] wcscmp (_String1="J0341551.JPG", _String2="..") returned 1 [0228.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb94d8 [0228.802] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.802] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.802] wcscat (in: _Dest=0x3eb94d8, _Source="J0341551.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" [0228.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0228.803] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6f43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341554.JPG", cAlternateFileName="")) returned 1 [0228.803] wcscmp (_String1="J0341554.JPG", _String2=".") returned 1 [0228.803] wcscmp (_String1="J0341554.JPG", _String2="..") returned 1 [0228.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba110 [0228.803] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.803] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.803] wcscat (in: _Dest=0x3eba110, _Source="J0341554.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" [0228.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0228.804] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341557.JPG", cAlternateFileName="")) returned 1 [0228.804] wcscmp (_String1="J0341557.JPG", _String2=".") returned 1 [0228.804] wcscmp (_String1="J0341557.JPG", _String2="..") returned 1 [0228.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0228.805] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.805] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.805] wcscat (in: _Dest=0x3eb9560, _Source="J0341557.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" [0228.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0228.806] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6873, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341559.JPG", cAlternateFileName="")) returned 1 [0228.806] wcscmp (_String1="J0341559.JPG", _String2=".") returned 1 [0228.806] wcscmp (_String1="J0341559.JPG", _String2="..") returned 1 [0228.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9f78 [0228.806] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.806] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.806] wcscat (in: _Dest=0x3eb9f78, _Source="J0341559.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" [0228.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0228.807] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa497, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341561.JPG", cAlternateFileName="")) returned 1 [0228.807] wcscmp (_String1="J0341561.JPG", _String2=".") returned 1 [0228.807] wcscmp (_String1="J0341561.JPG", _String2="..") returned 1 [0228.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8ce0 [0228.807] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0228.807] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0228.807] wcscat (in: _Dest=0x3eb8ce0, _Source="J0341561.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" [0228.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0229.403] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341634.JPG", cAlternateFileName="")) returned 1 [0229.403] wcscmp (_String1="J0341634.JPG", _String2=".") returned 1 [0229.403] wcscmp (_String1="J0341634.JPG", _String2="..") returned 1 [0229.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0229.403] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.403] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.403] wcscat (in: _Dest=0x3eb9b38, _Source="J0341634.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" [0229.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0229.404] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd2c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3615, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341636.JPG", cAlternateFileName="")) returned 1 [0229.404] wcscmp (_String1="J0341636.JPG", _String2=".") returned 1 [0229.404] wcscmp (_String1="J0341636.JPG", _String2="..") returned 1 [0229.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9a28 [0229.405] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.405] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.405] wcscat (in: _Dest=0x3eb9a28, _Source="J0341636.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" [0229.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0229.406] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341645.JPG", cAlternateFileName="")) returned 1 [0229.406] wcscmp (_String1="J0341645.JPG", _String2=".") returned 1 [0229.406] wcscmp (_String1="J0341645.JPG", _String2="..") returned 1 [0229.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9120 [0229.406] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.406] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.406] wcscat (in: _Dest=0x3eb9120, _Source="J0341645.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" [0229.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0229.407] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341653.JPG", cAlternateFileName="")) returned 1 [0229.407] wcscmp (_String1="J0341653.JPG", _String2=".") returned 1 [0229.407] wcscmp (_String1="J0341653.JPG", _String2="..") returned 1 [0229.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0229.408] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.408] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.408] wcscat (in: _Dest=0x3eba220, _Source="J0341653.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" [0229.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0229.412] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341654.JPG", cAlternateFileName="")) returned 1 [0229.412] wcscmp (_String1="J0341654.JPG", _String2=".") returned 1 [0229.412] wcscmp (_String1="J0341654.JPG", _String2="..") returned 1 [0229.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0229.412] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.412] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.412] wcscat (in: _Dest=0x3eba770, _Source="J0341654.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" [0229.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0229.414] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341738.JPG", cAlternateFileName="")) returned 1 [0229.414] wcscmp (_String1="J0341738.JPG", _String2=".") returned 1 [0229.414] wcscmp (_String1="J0341738.JPG", _String2="..") returned 1 [0229.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0229.414] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.414] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.414] wcscat (in: _Dest=0x3eb9670, _Source="J0341738.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" [0229.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0229.415] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341742.JPG", cAlternateFileName="")) returned 1 [0229.415] wcscmp (_String1="J0341742.JPG", _String2=".") returned 1 [0229.416] wcscmp (_String1="J0341742.JPG", _String2="..") returned 1 [0229.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9098 [0229.416] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.416] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.416] wcscat (in: _Dest=0x3eb9098, _Source="J0341742.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" [0229.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1224 [0229.417] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8d2190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382836.JPG", cAlternateFileName="")) returned 1 [0229.417] wcscmp (_String1="J0382836.JPG", _String2=".") returned 1 [0229.417] wcscmp (_String1="J0382836.JPG", _String2="..") returned 1 [0229.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f00 [0229.417] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.418] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.418] wcscat (in: _Dest=0x3eb8f00, _Source="J0382836.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" [0229.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0229.419] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382925.JPG", cAlternateFileName="")) returned 1 [0229.419] wcscmp (_String1="J0382925.JPG", _String2=".") returned 1 [0229.419] wcscmp (_String1="J0382925.JPG", _String2="..") returned 1 [0229.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba660 [0229.419] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.419] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.419] wcscat (in: _Dest=0x3eba660, _Source="J0382925.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" [0229.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0229.421] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1672c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382926.JPG", cAlternateFileName="")) returned 1 [0229.421] wcscmp (_String1="J0382926.JPG", _String2=".") returned 1 [0229.421] wcscmp (_String1="J0382926.JPG", _String2="..") returned 1 [0229.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba4c8 [0229.421] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.421] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.421] wcscat (in: _Dest=0x3eba4c8, _Source="J0382926.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" [0229.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0229.423] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382927.JPG", cAlternateFileName="")) returned 1 [0229.423] wcscmp (_String1="J0382927.JPG", _String2=".") returned 1 [0229.423] wcscmp (_String1="J0382927.JPG", _String2="..") returned 1 [0229.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8d68 [0229.423] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.423] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.423] wcscat (in: _Dest=0x3eb8d68, _Source="J0382927.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" [0229.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0229.425] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382930.JPG", cAlternateFileName="")) returned 1 [0229.425] wcscmp (_String1="J0382930.JPG", _String2=".") returned 1 [0229.425] wcscmp (_String1="J0382930.JPG", _String2="..") returned 1 [0229.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8df0 [0229.425] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.425] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.425] wcscat (in: _Dest=0x3eb8df0, _Source="J0382930.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" [0229.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218 [0229.426] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1df43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382931.JPG", cAlternateFileName="")) returned 1 [0229.426] wcscmp (_String1="J0382931.JPG", _String2=".") returned 1 [0229.426] wcscmp (_String1="J0382931.JPG", _String2="..") returned 1 [0229.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0229.427] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.427] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.427] wcscat (in: _Dest=0x3eba2a8, _Source="J0382931.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" [0229.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0229.428] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x184d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382938.JPG", cAlternateFileName="")) returned 1 [0229.428] wcscmp (_String1="J0382938.JPG", _String2=".") returned 1 [0229.428] wcscmp (_String1="J0382938.JPG", _String2="..") returned 1 [0229.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0229.428] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.428] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.428] wcscat (in: _Dest=0x3eb8e78, _Source="J0382938.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" [0229.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0229.429] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382939.JPG", cAlternateFileName="")) returned 1 [0229.429] wcscmp (_String1="J0382939.JPG", _String2=".") returned 1 [0229.430] wcscmp (_String1="J0382939.JPG", _String2="..") returned 1 [0229.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9340 [0229.430] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.430] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.430] wcscat (in: _Dest=0x3eb9340, _Source="J0382939.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" [0229.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0229.432] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1653a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382942.JPG", cAlternateFileName="")) returned 1 [0229.432] wcscmp (_String1="J0382942.JPG", _String2=".") returned 1 [0229.432] wcscmp (_String1="J0382942.JPG", _String2="..") returned 1 [0229.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0229.432] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.432] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.432] wcscat (in: _Dest=0x3eb9230, _Source="J0382942.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" [0229.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0229.433] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd52930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382944.JPG", cAlternateFileName="")) returned 1 [0229.433] wcscmp (_String1="J0382944.JPG", _String2=".") returned 1 [0229.433] wcscmp (_String1="J0382944.JPG", _String2="..") returned 1 [0229.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9e68 [0229.433] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.433] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.433] wcscat (in: _Dest=0x3eb9e68, _Source="J0382944.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" [0229.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0229.435] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1531c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382947.JPG", cAlternateFileName="")) returned 1 [0229.435] wcscmp (_String1="J0382947.JPG", _String2=".") returned 1 [0229.435] wcscmp (_String1="J0382947.JPG", _String2="..") returned 1 [0229.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9d58 [0229.435] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.435] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.435] wcscat (in: _Dest=0x3eb9d58, _Source="J0382947.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" [0229.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0229.436] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382948.JPG", cAlternateFileName="")) returned 1 [0229.436] wcscmp (_String1="J0382948.JPG", _String2=".") returned 1 [0229.436] wcscmp (_String1="J0382948.JPG", _String2="..") returned 1 [0229.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0229.437] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.437] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.437] wcscat (in: _Dest=0x3eb95e8, _Source="J0382948.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" [0229.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0229.464] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x178d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382950.JPG", cAlternateFileName="")) returned 1 [0229.464] wcscmp (_String1="J0382950.JPG", _String2=".") returned 1 [0229.464] wcscmp (_String1="J0382950.JPG", _String2="..") returned 1 [0229.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0229.464] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.464] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.464] wcscat (in: _Dest=0x3eb9cd0, _Source="J0382950.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" [0229.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0229.465] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17749, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382952.JPG", cAlternateFileName="")) returned 1 [0229.465] wcscmp (_String1="J0382952.JPG", _String2=".") returned 1 [0229.465] wcscmp (_String1="J0382952.JPG", _String2="..") returned 1 [0229.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0229.466] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0229.466] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0229.466] wcscat (in: _Dest=0x3eb9010, _Source="J0382952.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" [0229.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0229.467] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382954.JPG", cAlternateFileName="")) returned 1 [0230.305] wcscmp (_String1="J0382954.JPG", _String2=".") returned 1 [0230.305] wcscmp (_String1="J0382954.JPG", _String2="..") returned 1 [0230.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0230.305] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.305] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.305] wcscat (in: _Dest=0x3eb9ef0, _Source="J0382954.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" [0230.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0230.310] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b8f82f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15fef, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382955.JPG", cAlternateFileName="")) returned 1 [0230.310] wcscmp (_String1="J0382955.JPG", _String2=".") returned 1 [0230.310] wcscmp (_String1="J0382955.JPG", _String2="..") returned 1 [0230.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba440 [0230.310] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.310] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.310] wcscat (in: _Dest=0x3eba440, _Source="J0382955.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" [0230.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0230.311] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382957.JPG", cAlternateFileName="")) returned 1 [0230.311] wcscmp (_String1="J0382957.JPG", _String2=".") returned 1 [0230.311] wcscmp (_String1="J0382957.JPG", _String2="..") returned 1 [0230.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0230.312] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.312] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.312] wcscat (in: _Dest=0x3eb8b48, _Source="J0382957.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" [0230.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0230.313] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x193e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382958.JPG", cAlternateFileName="")) returned 1 [0230.313] wcscmp (_String1="J0382958.JPG", _String2=".") returned 1 [0230.313] wcscmp (_String1="J0382958.JPG", _String2="..") returned 1 [0230.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb91a8 [0230.313] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.313] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.313] wcscat (in: _Dest=0x3eb91a8, _Source="J0382958.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" [0230.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0230.314] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382959.JPG", cAlternateFileName="")) returned 1 [0230.314] wcscmp (_String1="J0382959.JPG", _String2=".") returned 1 [0230.314] wcscmp (_String1="J0382959.JPG", _String2="..") returned 1 [0230.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba3b8 [0230.314] wcscpy (in: _Dest=0x3eba3b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.314] wcscat (in: _Dest=0x3eba3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.314] wcscat (in: _Dest=0x3eba3b8, _Source="J0382959.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" [0230.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0230.315] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382960.JPG", cAlternateFileName="")) returned 1 [0230.315] wcscmp (_String1="J0382960.JPG", _String2=".") returned 1 [0230.315] wcscmp (_String1="J0382960.JPG", _String2="..") returned 1 [0230.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9918 [0230.315] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.315] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.315] wcscat (in: _Dest=0x3eb9918, _Source="J0382960.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" [0230.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0230.316] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382961.JPG", cAlternateFileName="")) returned 1 [0230.316] wcscmp (_String1="J0382961.JPG", _String2=".") returned 1 [0230.316] wcscmp (_String1="J0382961.JPG", _String2="..") returned 1 [0230.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f88 [0230.316] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.316] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.316] wcscat (in: _Dest=0x3eb8f88, _Source="J0382961.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" [0230.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0230.317] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382962.JPG", cAlternateFileName="")) returned 1 [0230.317] wcscmp (_String1="J0382962.JPG", _String2=".") returned 1 [0230.317] wcscmp (_String1="J0382962.JPG", _String2="..") returned 1 [0230.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9890 [0230.317] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.317] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.317] wcscat (in: _Dest=0x3eb9890, _Source="J0382962.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" [0230.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0230.318] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382963.JPG", cAlternateFileName="")) returned 1 [0230.318] wcscmp (_String1="J0382963.JPG", _String2=".") returned 1 [0230.318] wcscmp (_String1="J0382963.JPG", _String2="..") returned 1 [0230.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb92b8 [0230.318] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.319] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.319] wcscat (in: _Dest=0x3eb92b8, _Source="J0382963.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" [0230.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0230.319] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd78a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382965.JPG", cAlternateFileName="")) returned 1 [0230.319] wcscmp (_String1="J0382965.JPG", _String2=".") returned 1 [0230.319] wcscmp (_String1="J0382965.JPG", _String2="..") returned 1 [0230.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba6e8 [0230.320] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.320] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.320] wcscat (in: _Dest=0x3eba6e8, _Source="J0382965.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" [0230.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0230.321] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382966.JPG", cAlternateFileName="")) returned 1 [0230.321] wcscmp (_String1="J0382966.JPG", _String2=".") returned 1 [0230.321] wcscmp (_String1="J0382966.JPG", _String2="..") returned 1 [0230.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9780 [0230.321] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.321] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.321] wcscat (in: _Dest=0x3eb9780, _Source="J0382966.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" [0230.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0230.322] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b91e450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382967.JPG", cAlternateFileName="")) returned 1 [0230.322] wcscmp (_String1="J0382967.JPG", _String2=".") returned 1 [0230.322] wcscmp (_String1="J0382967.JPG", _String2="..") returned 1 [0230.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb99a0 [0230.322] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.322] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.322] wcscat (in: _Dest=0x3eb99a0, _Source="J0382967.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" [0230.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0230.323] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382968.JPG", cAlternateFileName="")) returned 1 [0230.323] wcscmp (_String1="J0382968.JPG", _String2=".") returned 1 [0230.323] wcscmp (_String1="J0382968.JPG", _String2="..") returned 1 [0230.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba330 [0230.323] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.324] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.324] wcscat (in: _Dest=0x3eba330, _Source="J0382968.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" [0230.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148 [0230.325] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1779f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382969.JPG", cAlternateFileName="")) returned 1 [0230.325] wcscmp (_String1="J0382969.JPG", _String2=".") returned 1 [0230.325] wcscmp (_String1="J0382969.JPG", _String2="..") returned 1 [0230.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9c48 [0230.325] wcscpy (in: _Dest=0x3eb9c48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.325] wcscat (in: _Dest=0x3eb9c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.325] wcscat (in: _Dest=0x3eb9c48, _Source="J0382969.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" [0230.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0230.326] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382970.JPG", cAlternateFileName="")) returned 1 [0230.326] wcscmp (_String1="J0382970.JPG", _String2=".") returned 1 [0230.326] wcscmp (_String1="J0382970.JPG", _String2="..") returned 1 [0230.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9450 [0230.326] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.326] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.326] wcscat (in: _Dest=0x3eb9450, _Source="J0382970.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" [0230.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0230.327] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x190e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384862.JPG", cAlternateFileName="")) returned 1 [0230.327] wcscmp (_String1="J0384862.JPG", _String2=".") returned 1 [0230.327] wcscmp (_String1="J0384862.JPG", _String2="..") returned 1 [0230.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba5d8 [0230.327] wcscpy (in: _Dest=0x3eba5d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.327] wcscat (in: _Dest=0x3eba5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.328] wcscat (in: _Dest=0x3eba5d8, _Source="J0384862.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" [0230.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0230.328] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384885.JPG", cAlternateFileName="")) returned 1 [0230.329] wcscmp (_String1="J0384885.JPG", _String2=".") returned 1 [0230.329] wcscmp (_String1="J0384885.JPG", _String2="..") returned 1 [0230.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9808 [0230.329] wcscpy (in: _Dest=0x3eb9808, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.329] wcscat (in: _Dest=0x3eb9808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.329] wcscat (in: _Dest=0x3eb9808, _Source="J0384885.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" [0230.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0230.330] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384888.JPG", cAlternateFileName="")) returned 1 [0230.330] wcscmp (_String1="J0384888.JPG", _String2=".") returned 1 [0230.330] wcscmp (_String1="J0384888.JPG", _String2="..") returned 1 [0230.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb93c8 [0230.330] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.330] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.330] wcscat (in: _Dest=0x3eb93c8, _Source="J0384888.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" [0230.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0230.331] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384895.JPG", cAlternateFileName="")) returned 1 [0230.331] wcscmp (_String1="J0384895.JPG", _String2=".") returned 1 [0230.331] wcscmp (_String1="J0384895.JPG", _String2="..") returned 1 [0230.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0230.332] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.332] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.332] wcscat (in: _Dest=0x3f3bdc8, _Source="J0384895.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" [0230.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0230.333] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384900.JPG", cAlternateFileName="")) returned 1 [0230.333] wcscmp (_String1="J0384900.JPG", _String2=".") returned 1 [0230.333] wcscmp (_String1="J0384900.JPG", _String2="..") returned 1 [0230.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0230.333] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.333] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.333] wcscat (in: _Dest=0x3f3d748, _Source="J0384900.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" [0230.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090 [0230.334] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386120.JPG", cAlternateFileName="")) returned 1 [0230.334] wcscmp (_String1="J0386120.JPG", _String2=".") returned 1 [0230.334] wcscmp (_String1="J0386120.JPG", _String2="..") returned 1 [0230.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d4a0 [0230.334] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.334] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.334] wcscat (in: _Dest=0x3f3d4a0, _Source="J0386120.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" [0230.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0230.335] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa91e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386267.JPG", cAlternateFileName="")) returned 1 [0230.335] wcscmp (_String1="J0386267.JPG", _String2=".") returned 1 [0230.335] wcscmp (_String1="J0386267.JPG", _String2="..") returned 1 [0230.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d968 [0230.335] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.335] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.335] wcscat (in: _Dest=0x3f3d968, _Source="J0386267.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" [0230.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0230.338] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386270.JPG", cAlternateFileName="")) returned 1 [0230.338] wcscmp (_String1="J0386270.JPG", _String2=".") returned 1 [0230.338] wcscmp (_String1="J0386270.JPG", _String2="..") returned 1 [0230.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d060 [0230.338] wcscpy (in: _Dest=0x3f3d060, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.338] wcscat (in: _Dest=0x3f3d060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.338] wcscat (in: _Dest=0x3f3d060, _Source="J0386270.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" [0230.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0230.339] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x396a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386485.JPG", cAlternateFileName="")) returned 1 [0230.339] wcscmp (_String1="J0386485.JPG", _String2=".") returned 1 [0230.339] wcscmp (_String1="J0386485.JPG", _String2="..") returned 1 [0230.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0230.339] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.339] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.339] wcscat (in: _Dest=0x3f3cd30, _Source="J0386485.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" [0230.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0230.340] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x693e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386764.JPG", cAlternateFileName="")) returned 1 [0230.340] wcscmp (_String1="J0386764.JPG", _String2=".") returned 1 [0230.340] wcscmp (_String1="J0386764.JPG", _String2="..") returned 1 [0230.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d1f8 [0230.340] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.340] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.340] wcscat (in: _Dest=0x3f3d1f8, _Source="J0386764.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" [0230.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0230.341] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387337.JPG", cAlternateFileName="")) returned 1 [0230.341] wcscmp (_String1="J0387337.JPG", _String2=".") returned 1 [0230.341] wcscmp (_String1="J0387337.JPG", _String2="..") returned 1 [0230.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3be50 [0230.341] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.341] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.341] wcscat (in: _Dest=0x3f3be50, _Source="J0387337.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" [0230.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0230.342] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387578.JPG", cAlternateFileName="")) returned 1 [0230.342] wcscmp (_String1="J0387578.JPG", _String2=".") returned 1 [0230.342] wcscmp (_String1="J0387578.JPG", _String2="..") returned 1 [0230.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c648 [0230.343] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.343] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.343] wcscat (in: _Dest=0x3f3c648, _Source="J0387578.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" [0230.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0230.344] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387591.JPG", cAlternateFileName="")) returned 1 [0230.344] wcscmp (_String1="J0387591.JPG", _String2=".") returned 1 [0230.344] wcscmp (_String1="J0387591.JPG", _String2="..") returned 1 [0230.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3db00 [0230.344] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.344] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.344] wcscat (in: _Dest=0x3f3db00, _Source="J0387591.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" [0230.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0230.345] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8bd9ebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387604.JPG", cAlternateFileName="")) returned 1 [0230.345] wcscmp (_String1="J0387604.JPG", _String2=".") returned 1 [0230.345] wcscmp (_String1="J0387604.JPG", _String2="..") returned 1 [0230.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0230.345] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.345] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.345] wcscat (in: _Dest=0x3f3d280, _Source="J0387604.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" [0230.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0230.361] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x98ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387882.JPG", cAlternateFileName="")) returned 1 [0230.361] wcscmp (_String1="J0387882.JPG", _String2=".") returned 1 [0230.361] wcscmp (_String1="J0387882.JPG", _String2="..") returned 1 [0230.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9de0 [0230.361] wcscpy (in: _Dest=0x3eb9de0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.361] wcscat (in: _Dest=0x3eb9de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.362] wcscat (in: _Dest=0x3eb9de0, _Source="J0387882.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" [0230.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0230.362] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7df3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387895.JPG", cAlternateFileName="")) returned 1 [0230.362] wcscmp (_String1="J0387895.JPG", _String2=".") returned 1 [0230.362] wcscmp (_String1="J0387895.JPG", _String2="..") returned 1 [0230.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb94d8 [0230.362] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.363] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.363] wcscat (in: _Dest=0x3eb94d8, _Source="J0387895.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" [0230.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0230.363] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed91300, ftCreationTime.dwHighDateTime=0x1c97c19, ftLastAccessTime.dwLowDateTime=0x7b9445b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeed91300, ftLastWriteTime.dwHighDateTime=0x1c97c19, nFileSizeHigh=0x0, nFileSizeLow=0x351c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0390072.JPG", cAlternateFileName="")) returned 1 [0230.363] wcscmp (_String1="J0390072.JPG", _String2=".") returned 1 [0230.363] wcscmp (_String1="J0390072.JPG", _String2="..") returned 1 [0230.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8ce0 [0230.364] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.364] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.364] wcscat (in: _Dest=0x3eb8ce0, _Source="J0390072.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" [0230.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0230.365] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2a3f00, ftCreationTime.dwHighDateTime=0x1c98d34, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb2a3f00, ftLastWriteTime.dwHighDateTime=0x1c98d34, nFileSizeHigh=0x0, nFileSizeLow=0x31883, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400001.PNG", cAlternateFileName="")) returned 1 [0230.365] wcscmp (_String1="J0400001.PNG", _String2=".") returned 1 [0230.365] wcscmp (_String1="J0400001.PNG", _String2="..") returned 1 [0230.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0230.365] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.365] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.365] wcscat (in: _Dest=0x3f3c208, _Source="J0400001.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" [0230.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0230.366] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f48d600, ftCreationTime.dwHighDateTime=0x1c98d36, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7f48d600, ftLastWriteTime.dwHighDateTime=0x1c98d36, nFileSizeHigh=0x0, nFileSizeLow=0x15d49, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400002.PNG", cAlternateFileName="")) returned 1 [0230.366] wcscmp (_String1="J0400002.PNG", _String2=".") returned 1 [0230.366] wcscmp (_String1="J0400002.PNG", _String2="..") returned 1 [0230.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cdb8 [0230.366] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.366] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.366] wcscat (in: _Dest=0x3f3cdb8, _Source="J0400002.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" [0230.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0230.367] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8814600, ftCreationTime.dwHighDateTime=0x1c98d36, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8814600, ftLastWriteTime.dwHighDateTime=0x1c98d36, nFileSizeHigh=0x0, nFileSizeLow=0x1e836, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400003.PNG", cAlternateFileName="")) returned 1 [0230.370] wcscmp (_String1="J0400003.PNG", _String2=".") returned 1 [0230.370] wcscmp (_String1="J0400003.PNG", _String2="..") returned 1 [0230.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c6d0 [0230.370] wcscpy (in: _Dest=0x3f3c6d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.371] wcscat (in: _Dest=0x3f3c6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.371] wcscat (in: _Dest=0x3f3c6d0, _Source="J0400003.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" [0230.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0230.371] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf279d00, ftCreationTime.dwHighDateTime=0x1c98d36, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf279d00, ftLastWriteTime.dwHighDateTime=0x1c98d36, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400004.PNG", cAlternateFileName="")) returned 1 [0230.371] wcscmp (_String1="J0400004.PNG", _String2=".") returned 1 [0230.372] wcscmp (_String1="J0400004.PNG", _String2="..") returned 1 [0230.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0230.372] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.372] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.372] wcscat (in: _Dest=0x3f3c538, _Source="J0400004.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" [0230.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0230.373] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17df5600, ftCreationTime.dwHighDateTime=0x1c98d37, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17df5600, ftLastWriteTime.dwHighDateTime=0x1c98d37, nFileSizeHigh=0x0, nFileSizeLow=0x17742, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400005.PNG", cAlternateFileName="")) returned 1 [0230.373] wcscmp (_String1="J0400005.PNG", _String2=".") returned 1 [0230.373] wcscmp (_String1="J0400005.PNG", _String2="..") returned 1 [0230.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c7e0 [0230.373] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.373] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.373] wcscat (in: _Dest=0x3f3c7e0, _Source="J0400005.PNG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" [0230.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0230.374] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2645, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAVA_01.MID", cAlternateFileName="")) returned 1 [0230.374] wcscmp (_String1="JAVA_01.MID", _String2=".") returned 1 [0230.374] wcscmp (_String1="JAVA_01.MID", _String2="..") returned 1 [0230.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c290 [0230.374] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.374] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.374] wcscat (in: _Dest=0x3f3c290, _Source="JAVA_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" [0230.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0230.375] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNGLE_01.MID", cAlternateFileName="")) returned 1 [0230.375] wcscmp (_String1="JNGLE_01.MID", _String2=".") returned 1 [0230.375] wcscmp (_String1="JNGLE_01.MID", _String2="..") returned 1 [0230.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cf50 [0230.375] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.375] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.375] wcscat (in: _Dest=0x3f3cf50, _Source="JNGLE_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" [0230.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc [0230.376] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bc06700, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x807f7d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bc06700, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x15f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00021_.WMF", cAlternateFileName="")) returned 1 [0230.376] wcscmp (_String1="MP00021_.WMF", _String2=".") returned 1 [0230.376] wcscmp (_String1="MP00021_.WMF", _String2="..") returned 1 [0230.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c3a0 [0230.377] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.377] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.377] wcscat (in: _Dest=0x3f3c3a0, _Source="MP00021_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" [0230.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0230.380] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaee1bd00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8081de70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaee1bd00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00132_.WMF", cAlternateFileName="")) returned 1 [0230.380] wcscmp (_String1="MP00132_.WMF", _String2=".") returned 1 [0230.380] wcscmp (_String1="MP00132_.WMF", _String2="..") returned 1 [0230.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d308 [0230.380] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.380] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.380] wcscat (in: _Dest=0x3f3d308, _Source="MP00132_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" [0230.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0230.381] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb04bdc00, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x8d3574b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb04bdc00, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x31e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00646_.WMF", cAlternateFileName="")) returned 1 [0230.381] wcscmp (_String1="MP00646_.WMF", _String2=".") returned 1 [0230.381] wcscmp (_String1="MP00646_.WMF", _String2="..") returned 1 [0230.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c070 [0230.381] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.381] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.382] wcscat (in: _Dest=0x3f3c070, _Source="MP00646_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" [0230.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0230.382] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUSIC_01.MID", cAlternateFileName="")) returned 1 [0230.382] wcscmp (_String1="MUSIC_01.MID", _String2=".") returned 1 [0230.382] wcscmp (_String1="MUSIC_01.MID", _String2="..") returned 1 [0230.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0230.383] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.383] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.383] wcscat (in: _Dest=0x3f3bf60, _Source="MUSIC_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" [0230.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bf60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0230.384] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a5a700, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25a5a700, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00042_.WMF", cAlternateFileName="")) returned 1 [0230.384] wcscmp (_String1="NA00042_.WMF", _String2=".") returned 1 [0230.384] wcscmp (_String1="NA00042_.WMF", _String2="..") returned 1 [0230.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d638 [0230.384] wcscpy (in: _Dest=0x3f3d638, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.384] wcscat (in: _Dest=0x3f3d638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.384] wcscat (in: _Dest=0x3f3d638, _Source="NA00042_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" [0230.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0230.385] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc07e9100, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc07e9100, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00057_.WMF", cAlternateFileName="")) returned 1 [0230.385] wcscmp (_String1="NA00057_.WMF", _String2=".") returned 1 [0230.385] wcscmp (_String1="NA00057_.WMF", _String2="..") returned 1 [0230.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cc20 [0230.385] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.385] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.385] wcscat (in: _Dest=0x3f3cc20, _Source="NA00057_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" [0230.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0230.386] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f52900, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6f52900, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00058_.WMF", cAlternateFileName="")) returned 1 [0230.386] wcscmp (_String1="NA00058_.WMF", _String2=".") returned 1 [0230.386] wcscmp (_String1="NA00058_.WMF", _String2="..") returned 1 [0230.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3ca00 [0230.386] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.386] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.386] wcscat (in: _Dest=0x3f3ca00, _Source="NA00058_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" [0230.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0230.387] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750fb700, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x750fb700, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00068_.WMF", cAlternateFileName="")) returned 1 [0230.387] wcscmp (_String1="NA00068_.WMF", _String2=".") returned 1 [0230.387] wcscmp (_String1="NA00068_.WMF", _String2="..") returned 1 [0230.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bc30 [0230.387] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.387] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.387] wcscat (in: _Dest=0x3f3bc30, _Source="NA00068_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" [0230.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0230.388] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8d7d00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e8d7d00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00238_.WMF", cAlternateFileName="")) returned 1 [0230.388] wcscmp (_String1="NA00238_.WMF", _String2=".") returned 1 [0230.388] wcscmp (_String1="NA00238_.WMF", _String2="..") returned 1 [0230.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c758 [0230.388] wcscpy (in: _Dest=0x3f3c758, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.388] wcscat (in: _Dest=0x3f3c758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.388] wcscat (in: _Dest=0x3f3c758, _Source="NA00238_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" [0230.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0230.389] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5548b500, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5548b500, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00330_.WMF", cAlternateFileName="")) returned 1 [0230.389] wcscmp (_String1="NA00330_.WMF", _String2=".") returned 1 [0230.389] wcscmp (_String1="NA00330_.WMF", _String2="..") returned 1 [0230.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d7d0 [0230.389] wcscpy (in: _Dest=0x3f3d7d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.389] wcscat (in: _Dest=0x3f3d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.389] wcscat (in: _Dest=0x3f3d7d0, _Source="NA00330_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" [0230.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0230.390] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed43a000, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed43a000, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00388_.WMF", cAlternateFileName="")) returned 1 [0230.390] wcscmp (_String1="NA00388_.WMF", _String2=".") returned 1 [0230.390] wcscmp (_String1="NA00388_.WMF", _String2="..") returned 1 [0230.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cec8 [0230.390] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.390] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.390] wcscat (in: _Dest=0x3f3cec8, _Source="NA00388_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" [0230.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0230.391] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15ac800, ftCreationTime.dwHighDateTime=0x1bd4b4f, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf15ac800, ftLastWriteTime.dwHighDateTime=0x1bd4b4f, nFileSizeHigh=0x0, nFileSizeLow=0x20ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00389_.WMF", cAlternateFileName="")) returned 1 [0230.391] wcscmp (_String1="NA00389_.WMF", _String2=".") returned 1 [0230.391] wcscmp (_String1="NA00389_.WMF", _String2="..") returned 1 [0230.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c5c0 [0230.392] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.392] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.392] wcscat (in: _Dest=0x3f3c5c0, _Source="NA00389_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" [0230.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0230.393] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0299b00, ftCreationTime.dwHighDateTime=0x1bd4b4f, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0299b00, ftLastWriteTime.dwHighDateTime=0x1bd4b4f, nFileSizeHigh=0x0, nFileSizeLow=0x21c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00390_.WMF", cAlternateFileName="")) returned 1 [0230.393] wcscmp (_String1="NA00390_.WMF", _String2=".") returned 1 [0230.393] wcscmp (_String1="NA00390_.WMF", _String2="..") returned 1 [0230.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3da78 [0230.393] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.393] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.393] wcscat (in: _Dest=0x3f3da78, _Source="NA00390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" [0230.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0230.394] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734af100, ftCreationTime.dwHighDateTime=0x1bd4b50, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x734af100, ftLastWriteTime.dwHighDateTime=0x1bd4b50, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00391_.WMF", cAlternateFileName="")) returned 1 [0230.394] wcscmp (_String1="NA00391_.WMF", _String2=".") returned 1 [0230.394] wcscmp (_String1="NA00391_.WMF", _String2="..") returned 1 [0230.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d390 [0230.394] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.394] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.394] wcscat (in: _Dest=0x3f3d390, _Source="NA00391_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" [0230.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4 [0230.395] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1b0400, ftCreationTime.dwHighDateTime=0x1bd4bad, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba1b0400, ftLastWriteTime.dwHighDateTime=0x1bd4bad, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00394_.WMF", cAlternateFileName="")) returned 1 [0230.395] wcscmp (_String1="NA00394_.WMF", _String2=".") returned 1 [0230.395] wcscmp (_String1="NA00394_.WMF", _String2="..") returned 1 [0230.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c978 [0230.395] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.395] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.395] wcscat (in: _Dest=0x3f3c978, _Source="NA00394_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" [0230.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0230.396] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe157de00, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe157de00, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x194a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00395_.WMF", cAlternateFileName="")) returned 1 [0230.397] wcscmp (_String1="NA00395_.WMF", _String2=".") returned 1 [0230.397] wcscmp (_String1="NA00395_.WMF", _String2="..") returned 1 [0230.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c180 [0230.397] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.397] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.397] wcscat (in: _Dest=0x3f3c180, _Source="NA00395_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" [0230.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0230.398] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe026b100, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe026b100, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x38c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00396_.WMF", cAlternateFileName="")) returned 1 [0230.398] wcscmp (_String1="NA00396_.WMF", _String2=".") returned 1 [0230.398] wcscmp (_String1="NA00396_.WMF", _String2="..") returned 1 [0230.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d6c0 [0230.398] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.398] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.398] wcscat (in: _Dest=0x3f3d6c0, _Source="NA00396_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" [0230.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0230.399] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cfe400, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8cfe400, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x173e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00417_.WMF", cAlternateFileName="")) returned 1 [0230.399] wcscmp (_String1="NA00417_.WMF", _String2=".") returned 1 [0230.399] wcscmp (_String1="NA00417_.WMF", _String2="..") returned 1 [0230.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bd40 [0230.399] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.399] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.399] wcscat (in: _Dest=0x3f3bd40, _Source="NA00417_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" [0230.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0230.400] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6707400, ftCreationTime.dwHighDateTime=0x1bd4b4f, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc6707400, ftLastWriteTime.dwHighDateTime=0x1bd4b4f, nFileSizeHigh=0x0, nFileSizeLow=0x4696, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00433_.WMF", cAlternateFileName="")) returned 1 [0230.400] wcscmp (_String1="NA00433_.WMF", _String2=".") returned 1 [0230.400] wcscmp (_String1="NA00433_.WMF", _String2="..") returned 1 [0230.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0230.400] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.400] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.400] wcscat (in: _Dest=0x3f3cb10, _Source="NA00433_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" [0230.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0230.401] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de8a00, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73de8a00, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0x2f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00438_.WMF", cAlternateFileName="")) returned 1 [0230.401] wcscmp (_String1="NA00438_.WMF", _String2=".") returned 1 [0230.401] wcscmp (_String1="NA00438_.WMF", _String2="..") returned 1 [0230.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bed8 [0230.401] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.401] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.401] wcscat (in: _Dest=0x3f3bed8, _Source="NA00438_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" [0230.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0230.423] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb465f400, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb465f400, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x14bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00452_.WMF", cAlternateFileName="")) returned 1 [0230.423] wcscmp (_String1="NA00452_.WMF", _String2=".") returned 1 [0230.423] wcscmp (_String1="NA00452_.WMF", _String2="..") returned 1 [0230.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e478 [0230.423] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.423] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.423] wcscat (in: _Dest=0x36e478, _Source="NA00452_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" [0230.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0230.424] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2039a00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2039a00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00454_.WMF", cAlternateFileName="")) returned 1 [0230.424] wcscmp (_String1="NA00454_.WMF", _String2=".") returned 1 [0230.424] wcscmp (_String1="NA00454_.WMF", _String2="..") returned 1 [0230.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ead8 [0230.424] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.424] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.424] wcscat (in: _Dest=0x36ead8, _Source="NA00454_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" [0230.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0230.425] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc25c00, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8cc25c00, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00458_.WMF", cAlternateFileName="")) returned 1 [0230.425] wcscmp (_String1="NA00458_.WMF", _String2=".") returned 1 [0230.425] wcscmp (_String1="NA00458_.WMF", _String2="..") returned 1 [0230.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0230.425] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.425] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.425] wcscat (in: _Dest=0x36e500, _Source="NA00458_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" [0230.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0230.426] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d431300, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d431300, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00462_.WMF", cAlternateFileName="")) returned 1 [0230.426] wcscmp (_String1="NA00462_.WMF", _String2=".") returned 1 [0230.426] wcscmp (_String1="NA00462_.WMF", _String2="..") returned 1 [0230.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36f3e0 [0230.426] wcscpy (in: _Dest=0x36f3e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.426] wcscat (in: _Dest=0x36f3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.426] wcscat (in: _Dest=0x36f3e0, _Source="NA00462_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" [0230.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0230.427] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a83300, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95a83300, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00487_.WMF", cAlternateFileName="")) returned 1 [0230.427] wcscmp (_String1="NA00487_.WMF", _String2=".") returned 1 [0230.427] wcscmp (_String1="NA00487_.WMF", _String2="..") returned 1 [0230.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ed80 [0230.427] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.427] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.427] wcscat (in: _Dest=0x36ed80, _Source="NA00487_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" [0230.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0230.428] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a8f3a00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a8f3a00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00494_.WMF", cAlternateFileName="")) returned 1 [0230.428] wcscmp (_String1="NA00494_.WMF", _String2=".") returned 1 [0230.428] wcscmp (_String1="NA00494_.WMF", _String2="..") returned 1 [0230.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ecf8 [0230.428] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.428] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.428] wcscat (in: _Dest=0x36ecf8, _Source="NA00494_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" [0230.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ecf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0230.429] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1281f00, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1281f00, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00512_.WMF", cAlternateFileName="")) returned 1 [0230.429] wcscmp (_String1="NA00512_.WMF", _String2=".") returned 1 [0230.429] wcscmp (_String1="NA00512_.WMF", _String2="..") returned 1 [0230.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36fc60 [0230.429] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.430] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.430] wcscat (in: _Dest=0x36fc60, _Source="NA00512_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" [0230.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0230.431] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d00c00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61d00c00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x6efa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00523_.WMF", cAlternateFileName="")) returned 1 [0230.431] wcscmp (_String1="NA00523_.WMF", _String2=".") returned 1 [0230.431] wcscmp (_String1="NA00523_.WMF", _String2="..") returned 1 [0230.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e588 [0230.431] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.431] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.431] wcscat (in: _Dest=0x36e588, _Source="NA00523_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" [0230.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0230.432] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bda2b00, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5bda2b00, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00525_.WMF", cAlternateFileName="")) returned 1 [0230.432] wcscmp (_String1="NA00525_.WMF", _String2=".") returned 1 [0230.432] wcscmp (_String1="NA00525_.WMF", _String2="..") returned 1 [0230.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e830 [0230.432] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.432] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.432] wcscat (in: _Dest=0x36e830, _Source="NA00525_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" [0230.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0230.434] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb312a00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcb312a00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x477c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00530_.WMF", cAlternateFileName="")) returned 1 [0230.480] wcscmp (_String1="NA00530_.WMF", _String2=".") returned 1 [0230.480] wcscmp (_String1="NA00530_.WMF", _String2="..") returned 1 [0230.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bd50 [0230.480] wcscpy (in: _Dest=0x3e1bd50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.480] wcscat (in: _Dest=0x3e1bd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.480] wcscat (in: _Dest=0x3e1bd50, _Source="NA00530_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" [0230.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0230.481] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00532_.WMF", cAlternateFileName="")) returned 1 [0230.481] wcscmp (_String1="NA00532_.WMF", _String2=".") returned 1 [0230.481] wcscmp (_String1="NA00532_.WMF", _String2="..") returned 1 [0230.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ca10 [0230.481] wcscpy (in: _Dest=0x3e1ca10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.481] wcscat (in: _Dest=0x3e1ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.481] wcscat (in: _Dest=0x3e1ca10, _Source="NA00532_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" [0230.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0230.482] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fffd00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9fffd00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x7d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00538_.WMF", cAlternateFileName="")) returned 1 [0230.482] wcscmp (_String1="NA00538_.WMF", _String2=".") returned 1 [0230.482] wcscmp (_String1="NA00538_.WMF", _String2="..") returned 1 [0230.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1d4b0 [0230.482] wcscpy (in: _Dest=0x3e1d4b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.482] wcscat (in: _Dest=0x3e1d4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.482] wcscat (in: _Dest=0x3e1d4b0, _Source="NA00538_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" [0230.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0230.483] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cbe600, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8cbe600, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00641_.WMF", cAlternateFileName="")) returned 1 [0230.483] wcscmp (_String1="NA00641_.WMF", _String2=".") returned 1 [0230.483] wcscmp (_String1="NA00641_.WMF", _String2="..") returned 1 [0230.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1b888 [0230.483] wcscpy (in: _Dest=0x3e1b888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.483] wcscat (in: _Dest=0x3e1b888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.483] wcscat (in: _Dest=0x3e1b888, _Source="NA00641_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" [0230.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1b888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0230.484] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7658, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00784_.WMF", cAlternateFileName="")) returned 1 [0230.484] wcscmp (_String1="NA00784_.WMF", _String2=".") returned 1 [0230.484] wcscmp (_String1="NA00784_.WMF", _String2="..") returned 1 [0230.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ced8 [0230.484] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.484] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.484] wcscat (in: _Dest=0x3e1ced8, _Source="NA00784_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" [0230.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0230.485] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8561500, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8561500, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x23f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00798_.WMF", cAlternateFileName="")) returned 1 [0230.485] wcscmp (_String1="NA00798_.WMF", _String2=".") returned 1 [0230.485] wcscmp (_String1="NA00798_.WMF", _String2="..") returned 1 [0230.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ba20 [0230.486] wcscpy (in: _Dest=0x3e1ba20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.486] wcscat (in: _Dest=0x3e1ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.486] wcscat (in: _Dest=0x3e1ba20, _Source="NA00798_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" [0230.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0230.486] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f5d000, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81f5d000, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00806_.WMF", cAlternateFileName="")) returned 1 [0230.486] wcscmp (_String1="NA00806_.WMF", _String2=".") returned 1 [0230.486] wcscmp (_String1="NA00806_.WMF", _String2="..") returned 1 [0230.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1cd40 [0230.487] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.487] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.487] wcscat (in: _Dest=0x3e1cd40, _Source="NA00806_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" [0230.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1cd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0230.487] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c4a300, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80c4a300, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0xba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00807_.WMF", cAlternateFileName="")) returned 1 [0230.487] wcscmp (_String1="NA00807_.WMF", _String2=".") returned 1 [0230.487] wcscmp (_String1="NA00807_.WMF", _String2="..") returned 1 [0230.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bdd8 [0230.488] wcscpy (in: _Dest=0x3e1bdd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.488] wcscat (in: _Dest=0x3e1bdd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.488] wcscat (in: _Dest=0x3e1bdd8, _Source="NA00807_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" [0230.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0230.488] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1102e800, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1102e800, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00808_.WMF", cAlternateFileName="")) returned 1 [0230.489] wcscmp (_String1="NA00808_.WMF", _String2=".") returned 1 [0230.489] wcscmp (_String1="NA00808_.WMF", _String2="..") returned 1 [0230.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3063428 [0230.489] wcscpy (in: _Dest=0x3063428, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.489] wcscat (in: _Dest=0x3063428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.489] wcscat (in: _Dest=0x3063428, _Source="NA00808_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" [0230.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3063428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0230.490] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e624900, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e624900, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00809_.WMF", cAlternateFileName="")) returned 1 [0230.490] wcscmp (_String1="NA00809_.WMF", _String2=".") returned 1 [0230.490] wcscmp (_String1="NA00809_.WMF", _String2="..") returned 1 [0230.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062988 [0230.490] wcscpy (in: _Dest=0x3062988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.490] wcscat (in: _Dest=0x3062988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.490] wcscat (in: _Dest=0x3062988, _Source="NA00809_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" [0230.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0230.491] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00810_.WMF", cAlternateFileName="")) returned 1 [0230.491] wcscmp (_String1="NA00810_.WMF", _String2=".") returned 1 [0230.491] wcscmp (_String1="NA00810_.WMF", _String2="..") returned 1 [0230.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062c30 [0230.491] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.491] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.491] wcscat (in: _Dest=0x3062c30, _Source="NA00810_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" [0230.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0230.492] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3210, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00932_.WMF", cAlternateFileName="")) returned 1 [0230.492] wcscmp (_String1="NA00932_.WMF", _String2=".") returned 1 [0230.492] wcscmp (_String1="NA00932_.WMF", _String2="..") returned 1 [0230.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30633a0 [0230.492] wcscpy (in: _Dest=0x30633a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.492] wcscat (in: _Dest=0x30633a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.492] wcscat (in: _Dest=0x30633a0, _Source="NA00932_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" [0230.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30633a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0230.493] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de0d600, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4de0d600, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x7c46, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01064_.WMF", cAlternateFileName="")) returned 1 [0230.493] wcscmp (_String1="NA01064_.WMF", _String2=".") returned 1 [0230.493] wcscmp (_String1="NA01064_.WMF", _String2="..") returned 1 [0230.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062a10 [0230.493] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.493] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.493] wcscat (in: _Dest=0x3062a10, _Source="NA01064_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" [0230.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0230.494] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6af6f00, ftCreationTime.dwHighDateTime=0x1bd4b94, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6af6f00, ftLastWriteTime.dwHighDateTime=0x1bd4b94, nFileSizeHigh=0x0, nFileSizeLow=0x54a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01066_.WMF", cAlternateFileName="")) returned 1 [0230.494] wcscmp (_String1="NA01066_.WMF", _String2=".") returned 1 [0230.494] wcscmp (_String1="NA01066_.WMF", _String2="..") returned 1 [0230.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3061f70 [0230.494] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.495] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.495] wcscat (in: _Dest=0x3061f70, _Source="NA01066_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" [0230.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0230.495] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460a3d00, ftCreationTime.dwHighDateTime=0x1bd4b68, ftLastAccessTime.dwLowDateTime=0x8ddc14f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460a3d00, ftLastWriteTime.dwHighDateTime=0x1bd4b68, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01069_.WMF", cAlternateFileName="")) returned 1 [0230.496] wcscmp (_String1="NA01069_.WMF", _String2=".") returned 1 [0230.496] wcscmp (_String1="NA01069_.WMF", _String2="..") returned 1 [0230.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a680 [0230.496] wcscpy (in: _Dest=0x309a680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.496] wcscat (in: _Dest=0x309a680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.496] wcscat (in: _Dest=0x309a680, _Source="NA01069_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" [0230.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x309a680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0230.497] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ec000, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa34ec000, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01123_.WMF", cAlternateFileName="")) returned 1 [0230.497] wcscmp (_String1="NA01123_.WMF", _String2=".") returned 1 [0230.497] wcscmp (_String1="NA01123_.WMF", _String2="..") returned 1 [0230.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3099cf0 [0230.497] wcscpy (in: _Dest=0x3099cf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.497] wcscat (in: _Dest=0x3099cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.497] wcscat (in: _Dest=0x3099cf0, _Source="NA01123_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" [0230.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3099cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0230.498] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77721100, ftCreationTime.dwHighDateTime=0x1bd4b46, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77721100, ftLastWriteTime.dwHighDateTime=0x1bd4b46, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01126_.WMF", cAlternateFileName="")) returned 1 [0230.498] wcscmp (_String1="NA01126_.WMF", _String2=".") returned 1 [0230.498] wcscmp (_String1="NA01126_.WMF", _String2="..") returned 1 [0230.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a5f8 [0230.498] wcscpy (in: _Dest=0x309a5f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.498] wcscat (in: _Dest=0x309a5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.498] wcscat (in: _Dest=0x309a5f8, _Source="NA01126_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" [0230.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x309a5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1400 [0230.499] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295e0d00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x295e0d00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x16a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01130_.WMF", cAlternateFileName="")) returned 1 [0230.499] wcscmp (_String1="NA01130_.WMF", _String2=".") returned 1 [0230.499] wcscmp (_String1="NA01130_.WMF", _String2="..") returned 1 [0230.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x309a708 [0230.499] wcscpy (in: _Dest=0x309a708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.499] wcscat (in: _Dest=0x309a708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.499] wcscat (in: _Dest=0x309a708, _Source="NA01130_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" [0230.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x309a708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0230.500] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9762fe00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9762fe00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x16d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01141_.WMF", cAlternateFileName="")) returned 1 [0230.500] wcscmp (_String1="NA01141_.WMF", _String2=".") returned 1 [0230.500] wcscmp (_String1="NA01141_.WMF", _String2="..") returned 1 [0230.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb198 [0230.500] wcscpy (in: _Dest=0x3eeb198, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.500] wcscat (in: _Dest=0x3eeb198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.501] wcscat (in: _Dest=0x3eeb198, _Source="NA01141_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" [0230.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0230.501] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d1d00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x916d1d00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01148_.WMF", cAlternateFileName="")) returned 1 [0230.501] wcscmp (_String1="NA01148_.WMF", _String2=".") returned 1 [0230.502] wcscmp (_String1="NA01148_.WMF", _String2="..") returned 1 [0230.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb220 [0230.502] wcscpy (in: _Dest=0x3eeb220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.502] wcscat (in: _Dest=0x3eeb220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.502] wcscat (in: _Dest=0x3eeb220, _Source="NA01148_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" [0230.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0230.503] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80cba910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1248, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01149_.WMF", cAlternateFileName="")) returned 1 [0230.503] wcscmp (_String1="NA01149_.WMF", _String2=".") returned 1 [0230.503] wcscmp (_String1="NA01149_.WMF", _String2="..") returned 1 [0230.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb2a8 [0230.503] wcscpy (in: _Dest=0x3eeb2a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.503] wcscat (in: _Dest=0x3eeb2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.503] wcscat (in: _Dest=0x3eeb2a8, _Source="NA01149_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" [0230.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13fc [0230.504] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca86900, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ca86900, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x2230, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01152_.WMF", cAlternateFileName="")) returned 1 [0230.504] wcscmp (_String1="NA01152_.WMF", _String2=".") returned 1 [0230.504] wcscmp (_String1="NA01152_.WMF", _String2="..") returned 1 [0230.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb330 [0230.504] wcscpy (in: _Dest=0x3eeb330, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.504] wcscat (in: _Dest=0x3eeb330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.504] wcscat (in: _Dest=0x3eeb330, _Source="NA01152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" [0230.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0230.505] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b773c00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8b773c00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01154_.WMF", cAlternateFileName="")) returned 1 [0230.505] wcscmp (_String1="NA01154_.WMF", _String2=".") returned 1 [0230.505] wcscmp (_String1="NA01154_.WMF", _String2="..") returned 1 [0230.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb3b8 [0230.505] wcscpy (in: _Dest=0x3eeb3b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.505] wcscat (in: _Dest=0x3eeb3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.505] wcscat (in: _Dest=0x3eeb3b8, _Source="NA01154_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" [0230.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0230.506] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1858, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01157_.WMF", cAlternateFileName="")) returned 1 [0230.506] wcscmp (_String1="NA01157_.WMF", _String2=".") returned 1 [0230.506] wcscmp (_String1="NA01157_.WMF", _String2="..") returned 1 [0230.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb440 [0230.506] wcscpy (in: _Dest=0x3eeb440, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.506] wcscat (in: _Dest=0x3eeb440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.507] wcscat (in: _Dest=0x3eeb440, _Source="NA01157_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" [0230.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0230.508] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85815b00, ftCreationTime.dwHighDateTime=0x1bd4b61, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85815b00, ftLastWriteTime.dwHighDateTime=0x1bd4b61, nFileSizeHigh=0x0, nFileSizeLow=0x1c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01158_.WMF", cAlternateFileName="")) returned 1 [0230.508] wcscmp (_String1="NA01158_.WMF", _String2=".") returned 1 [0230.508] wcscmp (_String1="NA01158_.WMF", _String2="..") returned 1 [0230.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb4c8 [0230.508] wcscpy (in: _Dest=0x3eeb4c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.508] wcscat (in: _Dest=0x3eeb4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.508] wcscat (in: _Dest=0x3eeb4c8, _Source="NA01158_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" [0230.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0230.509] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01161_.WMF", cAlternateFileName="")) returned 1 [0230.509] wcscmp (_String1="NA01161_.WMF", _String2=".") returned 1 [0230.509] wcscmp (_String1="NA01161_.WMF", _String2="..") returned 1 [0230.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb550 [0230.509] wcscpy (in: _Dest=0x3eeb550, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.509] wcscat (in: _Dest=0x3eeb550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.509] wcscat (in: _Dest=0x3eeb550, _Source="NA01161_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" [0230.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0230.510] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282ce000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x282ce000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01164_.WMF", cAlternateFileName="")) returned 1 [0230.510] wcscmp (_String1="NA01164_.WMF", _String2=".") returned 1 [0230.510] wcscmp (_String1="NA01164_.WMF", _String2="..") returned 1 [0230.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb5d8 [0230.510] wcscpy (in: _Dest=0x3eeb5d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.510] wcscat (in: _Dest=0x3eeb5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.510] wcscat (in: _Dest=0x3eeb5d8, _Source="NA01164_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" [0230.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0230.511] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fbb300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26fbb300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x70f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01293_.WMF", cAlternateFileName="")) returned 1 [0230.511] wcscmp (_String1="NA01293_.WMF", _String2=".") returned 1 [0230.511] wcscmp (_String1="NA01293_.WMF", _String2="..") returned 1 [0230.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb660 [0230.511] wcscpy (in: _Dest=0x3eeb660, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.511] wcscat (in: _Dest=0x3eeb660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.511] wcscat (in: _Dest=0x3eeb660, _Source="NA01293_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" [0230.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0230.512] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d3e600, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67d3e600, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x16ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01354_.WMF", cAlternateFileName="")) returned 1 [0230.512] wcscmp (_String1="NA01354_.WMF", _String2=".") returned 1 [0230.512] wcscmp (_String1="NA01354_.WMF", _String2="..") returned 1 [0230.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb6e8 [0230.512] wcscpy (in: _Dest=0x3eeb6e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.513] wcscat (in: _Dest=0x3eeb6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.513] wcscat (in: _Dest=0x3eeb6e8, _Source="NA01354_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" [0230.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0230.514] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64405f00, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64405f00, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01356_.WMF", cAlternateFileName="")) returned 1 [0230.514] wcscmp (_String1="NA01356_.WMF", _String2=".") returned 1 [0230.514] wcscmp (_String1="NA01356_.WMF", _String2="..") returned 1 [0230.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb770 [0230.514] wcscpy (in: _Dest=0x3eeb770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.514] wcscat (in: _Dest=0x3eeb770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.514] wcscat (in: _Dest=0x3eeb770, _Source="NA01356_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" [0230.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0230.536] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x630f3200, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x630f3200, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01357_.WMF", cAlternateFileName="")) returned 1 [0230.536] wcscmp (_String1="NA01357_.WMF", _String2=".") returned 1 [0230.536] wcscmp (_String1="NA01357_.WMF", _String2="..") returned 1 [0230.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb7f8 [0230.536] wcscpy (in: _Dest=0x3eeb7f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.536] wcscat (in: _Dest=0x3eeb7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.536] wcscat (in: _Dest=0x3eeb7f8, _Source="NA01357_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" [0230.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0230.537] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61de0500, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61de0500, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01358_.WMF", cAlternateFileName="")) returned 1 [0230.537] wcscmp (_String1="NA01358_.WMF", _String2=".") returned 1 [0230.537] wcscmp (_String1="NA01358_.WMF", _String2="..") returned 1 [0230.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb880 [0230.537] wcscpy (in: _Dest=0x3eeb880, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.537] wcscat (in: _Dest=0x3eeb880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.537] wcscat (in: _Dest=0x3eeb880, _Source="NA01358_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" [0230.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0230.538] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be82400, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5be82400, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01361_.WMF", cAlternateFileName="")) returned 1 [0230.538] wcscmp (_String1="NA01361_.WMF", _String2=".") returned 1 [0230.538] wcscmp (_String1="NA01361_.WMF", _String2="..") returned 1 [0230.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb908 [0230.538] wcscpy (in: _Dest=0x3eeb908, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.538] wcscat (in: _Dest=0x3eeb908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.538] wcscat (in: _Dest=0x3eeb908, _Source="NA01361_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" [0230.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0230.539] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538fe900, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x538fe900, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x40412, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01368_.WMF", cAlternateFileName="")) returned 1 [0230.539] wcscmp (_String1="NA01368_.WMF", _String2=".") returned 1 [0230.539] wcscmp (_String1="NA01368_.WMF", _String2="..") returned 1 [0230.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeb990 [0230.539] wcscpy (in: _Dest=0x3eeb990, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.539] wcscat (in: _Dest=0x3eeb990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.539] wcscat (in: _Dest=0x3eeb990, _Source="NA01368_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" [0230.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0230.540] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b88a600, ftCreationTime.dwHighDateTime=0x1bd4ba1, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b88a600, ftLastWriteTime.dwHighDateTime=0x1bd4ba1, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01421_.WMF", cAlternateFileName="")) returned 1 [0230.547] wcscmp (_String1="NA01421_.WMF", _String2=".") returned 1 [0230.547] wcscmp (_String1="NA01421_.WMF", _String2="..") returned 1 [0230.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeba18 [0230.547] wcscpy (in: _Dest=0x3eeba18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.547] wcscat (in: _Dest=0x3eeba18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.547] wcscat (in: _Dest=0x3eeba18, _Source="NA01421_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" [0230.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeba18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0230.548] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20783600, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20783600, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x4e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01468_.WMF", cAlternateFileName="")) returned 1 [0230.548] wcscmp (_String1="NA01468_.WMF", _String2=".") returned 1 [0230.548] wcscmp (_String1="NA01468_.WMF", _String2="..") returned 1 [0230.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebaa0 [0230.548] wcscpy (in: _Dest=0x3eebaa0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.548] wcscat (in: _Dest=0x3eebaa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.548] wcscat (in: _Dest=0x3eebaa0, _Source="NA01468_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" [0230.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebaa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0230.549] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce4af00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ce4af00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01470_.WMF", cAlternateFileName="")) returned 1 [0230.549] wcscmp (_String1="NA01470_.WMF", _String2=".") returned 1 [0230.549] wcscmp (_String1="NA01470_.WMF", _String2="..") returned 1 [0230.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebb28 [0230.549] wcscpy (in: _Dest=0x3eebb28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.549] wcscat (in: _Dest=0x3eebb28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.549] wcscat (in: _Dest=0x3eebb28, _Source="NA01470_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" [0230.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebb28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0230.550] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19512800, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x19512800, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x2028, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01472_.WMF", cAlternateFileName="")) returned 1 [0230.550] wcscmp (_String1="NA01472_.WMF", _String2=".") returned 1 [0230.550] wcscmp (_String1="NA01472_.WMF", _String2="..") returned 1 [0230.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebbb0 [0230.550] wcscpy (in: _Dest=0x3eebbb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.550] wcscat (in: _Dest=0x3eebbb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.550] wcscat (in: _Dest=0x3eebbb0, _Source="NA01472_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" [0230.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebbb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0230.551] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181ffb00, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x181ffb00, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01473_.WMF", cAlternateFileName="")) returned 1 [0230.551] wcscmp (_String1="NA01473_.WMF", _String2=".") returned 1 [0230.551] wcscmp (_String1="NA01473_.WMF", _String2="..") returned 1 [0230.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebc38 [0230.552] wcscpy (in: _Dest=0x3eebc38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.552] wcscat (in: _Dest=0x3eebc38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.552] wcscat (in: _Dest=0x3eebc38, _Source="NA01473_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" [0230.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebc38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0230.552] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb492cf00, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x80ce0a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb492cf00, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x349c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01474_.WMF", cAlternateFileName="")) returned 1 [0230.552] wcscmp (_String1="NA01474_.WMF", _String2=".") returned 1 [0230.553] wcscmp (_String1="NA01474_.WMF", _String2="..") returned 1 [0230.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebcc0 [0230.553] wcscpy (in: _Dest=0x3eebcc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.553] wcscat (in: _Dest=0x3eebcc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.553] wcscat (in: _Dest=0x3eebcc0, _Source="NA01474_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" [0230.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebcc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0230.554] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ec5a00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0ec5a00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0xce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01627_.WMF", cAlternateFileName="")) returned 1 [0230.554] wcscmp (_String1="NA01627_.WMF", _String2=".") returned 1 [0230.554] wcscmp (_String1="NA01627_.WMF", _String2="..") returned 1 [0230.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebd48 [0230.554] wcscpy (in: _Dest=0x3eebd48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.554] wcscat (in: _Dest=0x3eebd48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.554] wcscat (in: _Dest=0x3eebd48, _Source="NA01627_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" [0230.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebd48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0230.555] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2436b600, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2436b600, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0xb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01680_.WMF", cAlternateFileName="")) returned 1 [0230.555] wcscmp (_String1="NA01680_.WMF", _String2=".") returned 1 [0230.555] wcscmp (_String1="NA01680_.WMF", _String2="..") returned 1 [0230.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebdd0 [0230.555] wcscpy (in: _Dest=0x3eebdd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.555] wcscat (in: _Dest=0x3eebdd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.555] wcscat (in: _Dest=0x3eebdd0, _Source="NA01680_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" [0230.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebdd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0230.556] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a32f00, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20a32f00, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0xc88, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01682_.WMF", cAlternateFileName="")) returned 1 [0230.556] wcscmp (_String1="NA01682_.WMF", _String2=".") returned 1 [0230.556] wcscmp (_String1="NA01682_.WMF", _String2="..") returned 1 [0230.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebe58 [0230.556] wcscpy (in: _Dest=0x3eebe58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.556] wcscat (in: _Dest=0x3eebe58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.556] wcscat (in: _Dest=0x3eebe58, _Source="NA01682_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" [0230.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebe58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0230.557] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb0f2900, ftCreationTime.dwHighDateTime=0x1bd4c3e, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb0f2900, ftLastWriteTime.dwHighDateTime=0x1bd4c3e, nFileSizeHigh=0x0, nFileSizeLow=0x14c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01701_.WMF", cAlternateFileName="")) returned 1 [0230.557] wcscmp (_String1="NA01701_.WMF", _String2=".") returned 1 [0230.558] wcscmp (_String1="NA01701_.WMF", _String2="..") returned 1 [0230.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebee0 [0230.558] wcscpy (in: _Dest=0x3eebee0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.558] wcscat (in: _Dest=0x3eebee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.558] wcscat (in: _Dest=0x3eebee0, _Source="NA01701_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" [0230.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0230.559] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01848_.WMF", cAlternateFileName="")) returned 1 [0230.559] wcscmp (_String1="NA01848_.WMF", _String2=".") returned 1 [0230.559] wcscmp (_String1="NA01848_.WMF", _String2="..") returned 1 [0230.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebf68 [0230.559] wcscpy (in: _Dest=0x3eebf68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.559] wcscat (in: _Dest=0x3eebf68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.559] wcscat (in: _Dest=0x3eebf68, _Source="NA01848_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" [0230.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0230.560] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01849_.WMF", cAlternateFileName="")) returned 1 [0230.560] wcscmp (_String1="NA01849_.WMF", _String2=".") returned 1 [0230.560] wcscmp (_String1="NA01849_.WMF", _String2="..") returned 1 [0230.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eebff0 [0230.560] wcscpy (in: _Dest=0x3eebff0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.560] wcscat (in: _Dest=0x3eebff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.560] wcscat (in: _Dest=0x3eebff0, _Source="NA01849_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" [0230.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eebff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0230.561] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf398b00, ftCreationTime.dwHighDateTime=0x1bd4c61, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf398b00, ftLastWriteTime.dwHighDateTime=0x1bd4c61, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01852_.WMF", cAlternateFileName="")) returned 1 [0230.561] wcscmp (_String1="NA01852_.WMF", _String2=".") returned 1 [0230.561] wcscmp (_String1="NA01852_.WMF", _String2="..") returned 1 [0230.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec078 [0230.561] wcscpy (in: _Dest=0x3eec078, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.561] wcscat (in: _Dest=0x3eec078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.561] wcscat (in: _Dest=0x3eec078, _Source="NA01852_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" [0230.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0230.562] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01858_.WMF", cAlternateFileName="")) returned 1 [0230.562] wcscmp (_String1="NA01858_.WMF", _String2=".") returned 1 [0230.562] wcscmp (_String1="NA01858_.WMF", _String2="..") returned 1 [0230.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec100 [0230.562] wcscpy (in: _Dest=0x3eec100, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.562] wcscat (in: _Dest=0x3eec100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.562] wcscat (in: _Dest=0x3eec100, _Source="NA01858_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" [0230.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0230.563] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f8a8300, ftCreationTime.dwHighDateTime=0x1bd4c61, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f8a8300, ftLastWriteTime.dwHighDateTime=0x1bd4c61, nFileSizeHigh=0x0, nFileSizeLow=0xdb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01866_.WMF", cAlternateFileName="")) returned 1 [0230.564] wcscmp (_String1="NA01866_.WMF", _String2=".") returned 1 [0230.564] wcscmp (_String1="NA01866_.WMF", _String2="..") returned 1 [0230.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec188 [0230.564] wcscpy (in: _Dest=0x3eec188, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.564] wcscat (in: _Dest=0x3eec188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.564] wcscat (in: _Dest=0x3eec188, _Source="NA01866_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" [0230.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0230.566] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02009_.WMF", cAlternateFileName="")) returned 1 [0230.566] wcscmp (_String1="NA02009_.WMF", _String2=".") returned 1 [0230.566] wcscmp (_String1="NA02009_.WMF", _String2="..") returned 1 [0230.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec210 [0230.566] wcscpy (in: _Dest=0x3eec210, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.566] wcscat (in: _Dest=0x3eec210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.566] wcscat (in: _Dest=0x3eec210, _Source="NA02009_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" [0230.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0230.567] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf742cd00, ftCreationTime.dwHighDateTime=0x1bd4c65, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf742cd00, ftLastWriteTime.dwHighDateTime=0x1bd4c65, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02041_.WMF", cAlternateFileName="")) returned 1 [0230.567] wcscmp (_String1="NA02041_.WMF", _String2=".") returned 1 [0230.567] wcscmp (_String1="NA02041_.WMF", _String2="..") returned 1 [0230.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec298 [0230.567] wcscpy (in: _Dest=0x3eec298, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.567] wcscat (in: _Dest=0x3eec298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.567] wcscat (in: _Dest=0x3eec298, _Source="NA02041_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" [0230.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0230.569] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d624100, ftCreationTime.dwHighDateTime=0x1bd4c63, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d624100, ftLastWriteTime.dwHighDateTime=0x1bd4c63, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02066_.WMF", cAlternateFileName="")) returned 1 [0230.569] wcscmp (_String1="NA02066_.WMF", _String2=".") returned 1 [0230.569] wcscmp (_String1="NA02066_.WMF", _String2="..") returned 1 [0230.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec320 [0230.569] wcscpy (in: _Dest=0x3eec320, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.569] wcscat (in: _Dest=0x3eec320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.569] wcscat (in: _Dest=0x3eec320, _Source="NA02066_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" [0230.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0230.570] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca87b900, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca87b900, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02091_.WMF", cAlternateFileName="")) returned 1 [0230.570] wcscmp (_String1="NA02091_.WMF", _String2=".") returned 1 [0230.570] wcscmp (_String1="NA02091_.WMF", _String2="..") returned 1 [0230.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec3a8 [0230.570] wcscpy (in: _Dest=0x3eec3a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.570] wcscat (in: _Dest=0x3eec3a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.570] wcscat (in: _Dest=0x3eec3a8, _Source="NA02091_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" [0230.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0230.571] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce1b4000, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce1b4000, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02092_.WMF", cAlternateFileName="")) returned 1 [0230.571] wcscmp (_String1="NA02092_.WMF", _String2=".") returned 1 [0230.571] wcscmp (_String1="NA02092_.WMF", _String2="..") returned 1 [0230.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec430 [0230.571] wcscpy (in: _Dest=0x3eec430, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.571] wcscat (in: _Dest=0x3eec430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.571] wcscat (in: _Dest=0x3eec430, _Source="NA02092_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" [0230.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0230.573] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c30500, ftCreationTime.dwHighDateTime=0x1bd4c57, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5c30500, ftLastWriteTime.dwHighDateTime=0x1bd4c57, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02093_.WMF", cAlternateFileName="")) returned 1 [0230.573] wcscmp (_String1="NA02093_.WMF", _String2=".") returned 1 [0230.573] wcscmp (_String1="NA02093_.WMF", _String2="..") returned 1 [0230.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec4b8 [0230.573] wcscpy (in: _Dest=0x3eec4b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.573] wcscat (in: _Dest=0x3eec4b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.574] wcscat (in: _Dest=0x3eec4b8, _Source="NA02093_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" [0230.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0230.574] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe99f800, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x8dde7650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe99f800, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02124_.WMF", cAlternateFileName="")) returned 1 [0230.575] wcscmp (_String1="NA02124_.WMF", _String2=".") returned 1 [0230.575] wcscmp (_String1="NA02124_.WMF", _String2="..") returned 1 [0230.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec540 [0230.575] wcscpy (in: _Dest=0x3eec540, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.575] wcscat (in: _Dest=0x3eec540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.575] wcscat (in: _Dest=0x3eec540, _Source="NA02124_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" [0230.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0230.576] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62d9800, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe62d9800, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x4816, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02125_.WMF", cAlternateFileName="")) returned 1 [0230.576] wcscmp (_String1="NA02125_.WMF", _String2=".") returned 1 [0230.576] wcscmp (_String1="NA02125_.WMF", _String2="..") returned 1 [0230.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec5c8 [0230.576] wcscpy (in: _Dest=0x3eec5c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.576] wcscat (in: _Dest=0x3eec5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.576] wcscat (in: _Dest=0x3eec5c8, _Source="NA02125_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" [0230.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0230.646] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16d0fa00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16d0fa00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x7c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02126_.WMF", cAlternateFileName="")) returned 1 [0230.646] wcscmp (_String1="NA02126_.WMF", _String2=".") returned 1 [0230.646] wcscmp (_String1="NA02126_.WMF", _String2="..") returned 1 [0230.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec650 [0230.646] wcscpy (in: _Dest=0x3eec650, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.646] wcscat (in: _Dest=0x3eec650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.646] wcscat (in: _Dest=0x3eec650, _Source="NA02126_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" [0230.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0230.647] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e6a3900, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9e6a3900, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0xfe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02127_.WMF", cAlternateFileName="")) returned 1 [0230.647] wcscmp (_String1="NA02127_.WMF", _String2=".") returned 1 [0230.647] wcscmp (_String1="NA02127_.WMF", _String2="..") returned 1 [0230.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec6d8 [0230.647] wcscpy (in: _Dest=0x3eec6d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.648] wcscat (in: _Dest=0x3eec6d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.648] wcscat (in: _Dest=0x3eec6d8, _Source="NA02127_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" [0230.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0230.649] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02262_.WMF", cAlternateFileName="")) returned 1 [0230.649] wcscmp (_String1="NA02262_.WMF", _String2=".") returned 1 [0230.649] wcscmp (_String1="NA02262_.WMF", _String2="..") returned 1 [0230.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec760 [0230.649] wcscpy (in: _Dest=0x3eec760, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.649] wcscat (in: _Dest=0x3eec760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.649] wcscat (in: _Dest=0x3eec760, _Source="NA02262_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" [0230.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0230.650] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02264_.WMF", cAlternateFileName="")) returned 1 [0230.650] wcscmp (_String1="NA02264_.WMF", _String2=".") returned 1 [0230.650] wcscmp (_String1="NA02264_.WMF", _String2="..") returned 1 [0230.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec7e8 [0230.650] wcscpy (in: _Dest=0x3eec7e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.650] wcscat (in: _Dest=0x3eec7e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.650] wcscat (in: _Dest=0x3eec7e8, _Source="NA02264_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" [0230.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec7e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0230.651] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02356_.WMF", cAlternateFileName="")) returned 1 [0230.651] wcscmp (_String1="NA02356_.WMF", _String2=".") returned 1 [0230.651] wcscmp (_String1="NA02356_.WMF", _String2="..") returned 1 [0230.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec870 [0230.651] wcscpy (in: _Dest=0x3eec870, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.651] wcscat (in: _Dest=0x3eec870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.651] wcscat (in: _Dest=0x3eec870, _Source="NA02356_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" [0230.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0230.652] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x17c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02361_.WMF", cAlternateFileName="")) returned 1 [0230.652] wcscmp (_String1="NA02361_.WMF", _String2=".") returned 1 [0230.652] wcscmp (_String1="NA02361_.WMF", _String2="..") returned 1 [0230.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec8f8 [0230.652] wcscpy (in: _Dest=0x3eec8f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.652] wcscat (in: _Dest=0x3eec8f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.652] wcscat (in: _Dest=0x3eec8f8, _Source="NA02361_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" [0230.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0230.653] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02368_.WMF", cAlternateFileName="")) returned 1 [0230.653] wcscmp (_String1="NA02368_.WMF", _String2=".") returned 1 [0230.653] wcscmp (_String1="NA02368_.WMF", _String2="..") returned 1 [0230.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eec980 [0230.653] wcscpy (in: _Dest=0x3eec980, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.653] wcscat (in: _Dest=0x3eec980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.653] wcscat (in: _Dest=0x3eec980, _Source="NA02368_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" [0230.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eec980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0230.654] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02371_.WMF", cAlternateFileName="")) returned 1 [0230.654] wcscmp (_String1="NA02371_.WMF", _String2=".") returned 1 [0230.654] wcscmp (_String1="NA02371_.WMF", _String2="..") returned 1 [0230.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeca08 [0230.654] wcscpy (in: _Dest=0x3eeca08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.655] wcscat (in: _Dest=0x3eeca08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.655] wcscat (in: _Dest=0x3eeca08, _Source="NA02371_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" [0230.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeca08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0230.655] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02373_.WMF", cAlternateFileName="")) returned 1 [0230.655] wcscmp (_String1="NA02373_.WMF", _String2=".") returned 1 [0230.656] wcscmp (_String1="NA02373_.WMF", _String2="..") returned 1 [0230.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeca90 [0230.656] wcscpy (in: _Dest=0x3eeca90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.656] wcscat (in: _Dest=0x3eeca90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.656] wcscat (in: _Dest=0x3eeca90, _Source="NA02373_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" [0230.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeca90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0230.657] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02384_.WMF", cAlternateFileName="")) returned 1 [0230.657] wcscmp (_String1="NA02384_.WMF", _String2=".") returned 1 [0230.657] wcscmp (_String1="NA02384_.WMF", _String2="..") returned 1 [0230.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eecb18 [0230.657] wcscpy (in: _Dest=0x3eecb18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.657] wcscat (in: _Dest=0x3eecb18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.657] wcscat (in: _Dest=0x3eecb18, _Source="NA02384_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" [0230.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eecb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0230.658] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d06bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02386_.WMF", cAlternateFileName="")) returned 1 [0230.658] wcscmp (_String1="NA02386_.WMF", _String2=".") returned 1 [0230.658] wcscmp (_String1="NA02386_.WMF", _String2="..") returned 1 [0230.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eecba0 [0230.658] wcscpy (in: _Dest=0x3eecba0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.658] wcscat (in: _Dest=0x3eecba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.658] wcscat (in: _Dest=0x3eecba0, _Source="NA02386_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" [0230.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eecba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0230.659] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc84, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02388_.WMF", cAlternateFileName="")) returned 1 [0230.664] wcscmp (_String1="NA02388_.WMF", _String2=".") returned 1 [0230.664] wcscmp (_String1="NA02388_.WMF", _String2="..") returned 1 [0230.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eecc28 [0230.664] wcscpy (in: _Dest=0x3eecc28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.664] wcscat (in: _Dest=0x3eecc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.664] wcscat (in: _Dest=0x3eecc28, _Source="NA02388_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" [0230.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eecc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0230.665] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02389_.WMF", cAlternateFileName="")) returned 1 [0230.665] wcscmp (_String1="NA02389_.WMF", _String2=".") returned 1 [0230.665] wcscmp (_String1="NA02389_.WMF", _String2="..") returned 1 [0230.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeccb0 [0230.665] wcscpy (in: _Dest=0x3eeccb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.665] wcscat (in: _Dest=0x3eeccb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.665] wcscat (in: _Dest=0x3eeccb0, _Source="NA02389_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" [0230.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeccb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0230.666] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe64, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02390_.WMF", cAlternateFileName="")) returned 1 [0230.666] wcscmp (_String1="NA02390_.WMF", _String2=".") returned 1 [0230.666] wcscmp (_String1="NA02390_.WMF", _String2="..") returned 1 [0230.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eecd38 [0230.666] wcscpy (in: _Dest=0x3eecd38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.667] wcscat (in: _Dest=0x3eecd38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.667] wcscat (in: _Dest=0x3eecd38, _Source="NA02390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" [0230.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eecd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0230.668] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02398_.WMF", cAlternateFileName="")) returned 1 [0230.668] wcscmp (_String1="NA02398_.WMF", _String2=".") returned 1 [0230.668] wcscmp (_String1="NA02398_.WMF", _String2="..") returned 1 [0230.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eecdc0 [0230.668] wcscpy (in: _Dest=0x3eecdc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.668] wcscat (in: _Dest=0x3eecdc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.668] wcscat (in: _Dest=0x3eecdc0, _Source="NA02398_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" [0230.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eecdc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0230.669] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02400_.WMF", cAlternateFileName="")) returned 1 [0230.669] wcscmp (_String1="NA02400_.WMF", _String2=".") returned 1 [0230.669] wcscmp (_String1="NA02400_.WMF", _String2="..") returned 1 [0230.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eece48 [0230.669] wcscpy (in: _Dest=0x3eece48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.669] wcscat (in: _Dest=0x3eece48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.669] wcscat (in: _Dest=0x3eece48, _Source="NA02400_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" [0230.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eece48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0230.670] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2120, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02404_.WMF", cAlternateFileName="")) returned 1 [0230.670] wcscmp (_String1="NA02404_.WMF", _String2=".") returned 1 [0230.670] wcscmp (_String1="NA02404_.WMF", _String2="..") returned 1 [0230.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eeced0 [0230.671] wcscpy (in: _Dest=0x3eeced0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.671] wcscat (in: _Dest=0x3eeced0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.671] wcscat (in: _Dest=0x3eeced0, _Source="NA02404_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" [0230.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeced0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0230.672] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02405_.WMF", cAlternateFileName="")) returned 1 [0230.672] wcscmp (_String1="NA02405_.WMF", _String2=".") returned 1 [0230.672] wcscmp (_String1="NA02405_.WMF", _String2="..") returned 1 [0230.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eecf58 [0230.672] wcscpy (in: _Dest=0x3eecf58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.672] wcscat (in: _Dest=0x3eecf58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.672] wcscat (in: _Dest=0x3eecf58, _Source="NA02405_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" [0230.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eecf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0230.673] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02407_.WMF", cAlternateFileName="")) returned 1 [0230.673] wcscmp (_String1="NA02407_.WMF", _String2=".") returned 1 [0230.673] wcscmp (_String1="NA02407_.WMF", _String2="..") returned 1 [0230.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eecfe0 [0230.673] wcscpy (in: _Dest=0x3eecfe0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.673] wcscat (in: _Dest=0x3eecfe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.673] wcscat (in: _Dest=0x3eecfe0, _Source="NA02407_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" [0230.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eecfe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0230.674] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x28ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02413_.WMF", cAlternateFileName="")) returned 1 [0230.674] wcscmp (_String1="NA02413_.WMF", _String2=".") returned 1 [0230.674] wcscmp (_String1="NA02413_.WMF", _String2="..") returned 1 [0230.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eed068 [0230.674] wcscpy (in: _Dest=0x3eed068, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.674] wcscat (in: _Dest=0x3eed068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.674] wcscat (in: _Dest=0x3eed068, _Source="NA02413_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" [0230.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eed068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0230.675] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02417_.WMF", cAlternateFileName="")) returned 1 [0230.675] wcscmp (_String1="NA02417_.WMF", _String2=".") returned 1 [0230.675] wcscmp (_String1="NA02417_.WMF", _String2="..") returned 1 [0230.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eed0f0 [0230.675] wcscpy (in: _Dest=0x3eed0f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.675] wcscat (in: _Dest=0x3eed0f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.675] wcscat (in: _Dest=0x3eed0f0, _Source="NA02417_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" [0230.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eed0f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0230.677] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02423_.WMF", cAlternateFileName="")) returned 1 [0230.677] wcscmp (_String1="NA02423_.WMF", _String2=".") returned 1 [0230.677] wcscmp (_String1="NA02423_.WMF", _String2="..") returned 1 [0230.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68090 [0230.677] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.677] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.677] wcscat (in: _Dest=0x7a68090, _Source="NA02423_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" [0230.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0230.678] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02424_.WMF", cAlternateFileName="")) returned 1 [0230.678] wcscmp (_String1="NA02424_.WMF", _String2=".") returned 1 [0230.678] wcscmp (_String1="NA02424_.WMF", _String2="..") returned 1 [0230.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68118 [0230.678] wcscpy (in: _Dest=0x7a68118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.678] wcscat (in: _Dest=0x7a68118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.678] wcscat (in: _Dest=0x7a68118, _Source="NA02424_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" [0230.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0230.679] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02426_.WMF", cAlternateFileName="")) returned 1 [0230.679] wcscmp (_String1="NA02426_.WMF", _String2=".") returned 1 [0230.679] wcscmp (_String1="NA02426_.WMF", _String2="..") returned 1 [0230.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a681a0 [0230.679] wcscpy (in: _Dest=0x7a681a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.679] wcscat (in: _Dest=0x7a681a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.679] wcscat (in: _Dest=0x7a681a0, _Source="NA02426_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" [0230.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a681a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0230.680] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02431_.WMF", cAlternateFileName="")) returned 1 [0230.680] wcscmp (_String1="NA02431_.WMF", _String2=".") returned 1 [0230.680] wcscmp (_String1="NA02431_.WMF", _String2="..") returned 1 [0230.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68228 [0230.681] wcscpy (in: _Dest=0x7a68228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.681] wcscat (in: _Dest=0x7a68228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.681] wcscat (in: _Dest=0x7a68228, _Source="NA02431_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" [0230.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0230.682] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02435_.WMF", cAlternateFileName="")) returned 1 [0230.682] wcscmp (_String1="NA02435_.WMF", _String2=".") returned 1 [0230.682] wcscmp (_String1="NA02435_.WMF", _String2="..") returned 1 [0230.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a682b0 [0230.682] wcscpy (in: _Dest=0x7a682b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.682] wcscat (in: _Dest=0x7a682b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.682] wcscat (in: _Dest=0x7a682b0, _Source="NA02435_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" [0230.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a682b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0230.683] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02439_.WMF", cAlternateFileName="")) returned 1 [0230.683] wcscmp (_String1="NA02439_.WMF", _String2=".") returned 1 [0230.683] wcscmp (_String1="NA02439_.WMF", _String2="..") returned 1 [0230.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68338 [0230.683] wcscpy (in: _Dest=0x7a68338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.683] wcscat (in: _Dest=0x7a68338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.683] wcscat (in: _Dest=0x7a68338, _Source="NA02439_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" [0230.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0230.684] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3218, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02441_.WMF", cAlternateFileName="")) returned 1 [0230.684] wcscmp (_String1="NA02441_.WMF", _String2=".") returned 1 [0230.684] wcscmp (_String1="NA02441_.WMF", _String2="..") returned 1 [0230.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a683c0 [0230.684] wcscpy (in: _Dest=0x7a683c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.684] wcscat (in: _Dest=0x7a683c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.684] wcscat (in: _Dest=0x7a683c0, _Source="NA02441_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" [0230.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a683c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0230.745] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02443_.WMF", cAlternateFileName="")) returned 1 [0230.746] wcscmp (_String1="NA02443_.WMF", _String2=".") returned 1 [0230.746] wcscmp (_String1="NA02443_.WMF", _String2="..") returned 1 [0230.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68448 [0230.746] wcscpy (in: _Dest=0x7a68448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.746] wcscat (in: _Dest=0x7a68448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.746] wcscat (in: _Dest=0x7a68448, _Source="NA02443_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" [0230.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0230.747] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02444_.WMF", cAlternateFileName="")) returned 1 [0230.747] wcscmp (_String1="NA02444_.WMF", _String2=".") returned 1 [0230.747] wcscmp (_String1="NA02444_.WMF", _String2="..") returned 1 [0230.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a684d0 [0230.747] wcscpy (in: _Dest=0x7a684d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.747] wcscat (in: _Dest=0x7a684d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.747] wcscat (in: _Dest=0x7a684d0, _Source="NA02444_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" [0230.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a684d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0230.749] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa34, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02446_.WMF", cAlternateFileName="")) returned 1 [0230.749] wcscmp (_String1="NA02446_.WMF", _String2=".") returned 1 [0230.749] wcscmp (_String1="NA02446_.WMF", _String2="..") returned 1 [0230.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68558 [0230.749] wcscpy (in: _Dest=0x7a68558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.749] wcscat (in: _Dest=0x7a68558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.749] wcscat (in: _Dest=0x7a68558, _Source="NA02446_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" [0230.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0230.750] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02448_.WMF", cAlternateFileName="")) returned 1 [0230.750] wcscmp (_String1="NA02448_.WMF", _String2=".") returned 1 [0230.750] wcscmp (_String1="NA02448_.WMF", _String2="..") returned 1 [0230.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a685e0 [0230.750] wcscpy (in: _Dest=0x7a685e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.751] wcscat (in: _Dest=0x7a685e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.751] wcscat (in: _Dest=0x7a685e0, _Source="NA02448_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" [0230.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a685e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0230.752] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02450_.WMF", cAlternateFileName="")) returned 1 [0230.752] wcscmp (_String1="NA02450_.WMF", _String2=".") returned 1 [0230.752] wcscmp (_String1="NA02450_.WMF", _String2="..") returned 1 [0230.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68668 [0230.752] wcscpy (in: _Dest=0x7a68668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.752] wcscat (in: _Dest=0x7a68668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.752] wcscat (in: _Dest=0x7a68668, _Source="NA02450_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" [0230.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0230.753] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02451_.WMF", cAlternateFileName="")) returned 1 [0230.753] wcscmp (_String1="NA02451_.WMF", _String2=".") returned 1 [0230.753] wcscmp (_String1="NA02451_.WMF", _String2="..") returned 1 [0230.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a686f0 [0230.753] wcscpy (in: _Dest=0x7a686f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.753] wcscat (in: _Dest=0x7a686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.753] wcscat (in: _Dest=0x7a686f0, _Source="NA02451_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" [0230.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0230.755] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8de0d7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02453_.WMF", cAlternateFileName="")) returned 1 [0230.755] wcscmp (_String1="NA02453_.WMF", _String2=".") returned 1 [0230.755] wcscmp (_String1="NA02453_.WMF", _String2="..") returned 1 [0230.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68778 [0230.755] wcscpy (in: _Dest=0x7a68778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.755] wcscat (in: _Dest=0x7a68778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.755] wcscat (in: _Dest=0x7a68778, _Source="NA02453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" [0230.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0230.756] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1750, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBOOK_01.MID", cAlternateFileName="")) returned 1 [0230.756] wcscmp (_String1="NBOOK_01.MID", _String2=".") returned 1 [0230.756] wcscmp (_String1="NBOOK_01.MID", _String2="..") returned 1 [0230.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68800 [0230.756] wcscpy (in: _Dest=0x7a68800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.756] wcscat (in: _Dest=0x7a68800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.756] wcscat (in: _Dest=0x7a68800, _Source="NBOOK_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" [0230.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0230.757] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCEAN_01.MID", cAlternateFileName="")) returned 1 [0230.757] wcscmp (_String1="OCEAN_01.MID", _String2=".") returned 1 [0230.757] wcscmp (_String1="OCEAN_01.MID", _String2="..") returned 1 [0230.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68888 [0230.758] wcscpy (in: _Dest=0x7a68888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.758] wcscat (in: _Dest=0x7a68888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.758] wcscat (in: _Dest=0x7a68888, _Source="OCEAN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" [0230.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1404 [0230.759] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x19f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTDR_01.MID", cAlternateFileName="")) returned 1 [0230.759] wcscmp (_String1="OUTDR_01.MID", _String2=".") returned 1 [0230.759] wcscmp (_String1="OUTDR_01.MID", _String2="..") returned 1 [0230.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68910 [0230.759] wcscpy (in: _Dest=0x7a68910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.759] wcscat (in: _Dest=0x7a68910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.759] wcscat (in: _Dest=0x7a68910, _Source="OUTDR_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" [0230.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0230.760] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPER_01.MID", cAlternateFileName="")) returned 1 [0230.760] wcscmp (_String1="PAPER_01.MID", _String2=".") returned 1 [0230.760] wcscmp (_String1="PAPER_01.MID", _String2="..") returned 1 [0230.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68998 [0230.760] wcscpy (in: _Dest=0x7a68998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.761] wcscat (in: _Dest=0x7a68998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.761] wcscat (in: _Dest=0x7a68998, _Source="PAPER_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" [0230.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0230.762] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x195b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_01.MID", cAlternateFileName="")) returned 1 [0230.762] wcscmp (_String1="PARNT_01.MID", _String2=".") returned 1 [0230.762] wcscmp (_String1="PARNT_01.MID", _String2="..") returned 1 [0230.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68a20 [0230.762] wcscpy (in: _Dest=0x7a68a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.762] wcscat (in: _Dest=0x7a68a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.762] wcscat (in: _Dest=0x7a68a20, _Source="PARNT_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" [0230.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0230.763] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_02.MID", cAlternateFileName="")) returned 1 [0230.763] wcscmp (_String1="PARNT_02.MID", _String2=".") returned 1 [0230.763] wcscmp (_String1="PARNT_02.MID", _String2="..") returned 1 [0230.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68aa8 [0230.764] wcscpy (in: _Dest=0x7a68aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.764] wcscat (in: _Dest=0x7a68aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.764] wcscat (in: _Dest=0x7a68aa8, _Source="PARNT_02.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" [0230.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0230.765] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x215a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_03.MID", cAlternateFileName="")) returned 1 [0230.765] wcscmp (_String1="PARNT_03.MID", _String2=".") returned 1 [0230.765] wcscmp (_String1="PARNT_03.MID", _String2="..") returned 1 [0230.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68b30 [0230.765] wcscpy (in: _Dest=0x7a68b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.765] wcscat (in: _Dest=0x7a68b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.765] wcscat (in: _Dest=0x7a68b30, _Source="PARNT_03.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" [0230.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0230.766] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8d4f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x17b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_04.MID", cAlternateFileName="")) returned 1 [0230.766] wcscmp (_String1="PARNT_04.MID", _String2=".") returned 1 [0230.766] wcscmp (_String1="PARNT_04.MID", _String2="..") returned 1 [0230.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68bb8 [0230.766] wcscpy (in: _Dest=0x7a68bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.767] wcscat (in: _Dest=0x7a68bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.767] wcscat (in: _Dest=0x7a68bb8, _Source="PARNT_04.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" [0230.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0230.768] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1784, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_05.MID", cAlternateFileName="")) returned 1 [0230.768] wcscmp (_String1="PARNT_05.MID", _String2=".") returned 1 [0230.768] wcscmp (_String1="PARNT_05.MID", _String2="..") returned 1 [0230.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68c40 [0230.768] wcscpy (in: _Dest=0x7a68c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.768] wcscat (in: _Dest=0x7a68c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.768] wcscat (in: _Dest=0x7a68c40, _Source="PARNT_05.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" [0230.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0230.769] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_06.MID", cAlternateFileName="")) returned 1 [0230.769] wcscmp (_String1="PARNT_06.MID", _String2=".") returned 1 [0230.769] wcscmp (_String1="PARNT_06.MID", _String2="..") returned 1 [0230.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68cc8 [0230.769] wcscpy (in: _Dest=0x7a68cc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.769] wcscat (in: _Dest=0x7a68cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.769] wcscat (in: _Dest=0x7a68cc8, _Source="PARNT_06.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" [0230.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0230.770] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_07.MID", cAlternateFileName="")) returned 1 [0230.783] wcscmp (_String1="PARNT_07.MID", _String2=".") returned 1 [0230.783] wcscmp (_String1="PARNT_07.MID", _String2="..") returned 1 [0230.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68d50 [0230.783] wcscpy (in: _Dest=0x7a68d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.783] wcscat (in: _Dest=0x7a68d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.783] wcscat (in: _Dest=0x7a68d50, _Source="PARNT_07.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" [0230.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0230.784] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_08.MID", cAlternateFileName="")) returned 1 [0230.785] wcscmp (_String1="PARNT_08.MID", _String2=".") returned 1 [0230.785] wcscmp (_String1="PARNT_08.MID", _String2="..") returned 1 [0230.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68dd8 [0230.785] wcscpy (in: _Dest=0x7a68dd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.785] wcscat (in: _Dest=0x7a68dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.785] wcscat (in: _Dest=0x7a68dd8, _Source="PARNT_08.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" [0230.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0230.786] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_09.MID", cAlternateFileName="")) returned 1 [0230.786] wcscmp (_String1="PARNT_09.MID", _String2=".") returned 1 [0230.786] wcscmp (_String1="PARNT_09.MID", _String2="..") returned 1 [0230.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68e60 [0230.786] wcscpy (in: _Dest=0x7a68e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.786] wcscat (in: _Dest=0x7a68e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.786] wcscat (in: _Dest=0x7a68e60, _Source="PARNT_09.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" [0230.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0230.787] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1511, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_10.MID", cAlternateFileName="")) returned 1 [0230.787] wcscmp (_String1="PARNT_10.MID", _String2=".") returned 1 [0230.787] wcscmp (_String1="PARNT_10.MID", _String2="..") returned 1 [0230.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ee8 [0230.788] wcscpy (in: _Dest=0x7a68ee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.788] wcscat (in: _Dest=0x7a68ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.788] wcscat (in: _Dest=0x7a68ee8, _Source="PARNT_10.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" [0230.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0230.860] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b5b800, ftCreationTime.dwHighDateTime=0x1bd4b98, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49b5b800, ftLastWriteTime.dwHighDateTime=0x1bd4b98, nFileSizeHigh=0x0, nFileSizeLow=0x6140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00013_.WMF", cAlternateFileName="")) returned 1 [0230.860] wcscmp (_String1="PE00013_.WMF", _String2=".") returned 1 [0230.860] wcscmp (_String1="PE00013_.WMF", _String2="..") returned 1 [0230.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68f70 [0230.860] wcscpy (in: _Dest=0x7a68f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.860] wcscat (in: _Dest=0x7a68f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.861] wcscat (in: _Dest=0x7a68f70, _Source="PE00013_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" [0230.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0230.862] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46223100, ftCreationTime.dwHighDateTime=0x1bd4b98, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46223100, ftLastWriteTime.dwHighDateTime=0x1bd4b98, nFileSizeHigh=0x0, nFileSizeLow=0x411a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00014_.WMF", cAlternateFileName="")) returned 1 [0230.862] wcscmp (_String1="PE00014_.WMF", _String2=".") returned 1 [0230.862] wcscmp (_String1="PE00014_.WMF", _String2="..") returned 1 [0230.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ff8 [0230.862] wcscpy (in: _Dest=0x7a68ff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.862] wcscat (in: _Dest=0x7a68ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.862] wcscat (in: _Dest=0x7a68ff8, _Source="PE00014_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" [0230.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0230.864] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00034_.WMF", cAlternateFileName="")) returned 1 [0230.864] wcscmp (_String1="PE00034_.WMF", _String2=".") returned 1 [0230.864] wcscmp (_String1="PE00034_.WMF", _String2="..") returned 1 [0230.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69080 [0230.864] wcscpy (in: _Dest=0x7a69080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.864] wcscat (in: _Dest=0x7a69080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.864] wcscat (in: _Dest=0x7a69080, _Source="PE00034_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" [0230.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0230.865] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24995900, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24995900, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00049_.WMF", cAlternateFileName="")) returned 1 [0230.865] wcscmp (_String1="PE00049_.WMF", _String2=".") returned 1 [0230.865] wcscmp (_String1="PE00049_.WMF", _String2="..") returned 1 [0230.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69108 [0230.866] wcscpy (in: _Dest=0x7a69108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.866] wcscat (in: _Dest=0x7a69108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.866] wcscat (in: _Dest=0x7a69108, _Source="PE00049_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" [0230.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0230.867] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23682c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23682c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x4d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00050_.WMF", cAlternateFileName="")) returned 1 [0230.867] wcscmp (_String1="PE00050_.WMF", _String2=".") returned 1 [0230.867] wcscmp (_String1="PE00050_.WMF", _String2="..") returned 1 [0230.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69190 [0230.868] wcscpy (in: _Dest=0x7a69190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.868] wcscat (in: _Dest=0x7a69190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.868] wcscat (in: _Dest=0x7a69190, _Source="PE00050_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" [0230.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0230.869] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2236ff00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2236ff00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x47ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00052_.WMF", cAlternateFileName="")) returned 1 [0230.869] wcscmp (_String1="PE00052_.WMF", _String2=".") returned 1 [0230.869] wcscmp (_String1="PE00052_.WMF", _String2="..") returned 1 [0230.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69218 [0230.869] wcscpy (in: _Dest=0x7a69218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.869] wcscat (in: _Dest=0x7a69218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.869] wcscat (in: _Dest=0x7a69218, _Source="PE00052_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" [0230.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0230.871] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00231_.WMF", cAlternateFileName="")) returned 1 [0230.871] wcscmp (_String1="PE00231_.WMF", _String2=".") returned 1 [0230.871] wcscmp (_String1="PE00231_.WMF", _String2="..") returned 1 [0230.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a692a0 [0230.871] wcscpy (in: _Dest=0x7a692a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.871] wcscat (in: _Dest=0x7a692a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.871] wcscat (in: _Dest=0x7a692a0, _Source="PE00231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" [0230.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a692a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0230.873] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xaf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00272_.WMF", cAlternateFileName="")) returned 1 [0230.873] wcscmp (_String1="PE00272_.WMF", _String2=".") returned 1 [0230.873] wcscmp (_String1="PE00272_.WMF", _String2="..") returned 1 [0230.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69328 [0230.873] wcscpy (in: _Dest=0x7a69328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.873] wcscat (in: _Dest=0x7a69328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.873] wcscat (in: _Dest=0x7a69328, _Source="PE00272_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" [0230.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0230.874] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fe9200, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fe9200, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00468_.WMF", cAlternateFileName="")) returned 1 [0230.874] wcscmp (_String1="PE00468_.WMF", _String2=".") returned 1 [0230.874] wcscmp (_String1="PE00468_.WMF", _String2="..") returned 1 [0230.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a693b0 [0230.874] wcscpy (in: _Dest=0x7a693b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.874] wcscat (in: _Dest=0x7a693b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.875] wcscat (in: _Dest=0x7a693b0, _Source="PE00468_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" [0230.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a693b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0230.876] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2266e700, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2266e700, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00478_.WMF", cAlternateFileName="")) returned 1 [0230.876] wcscmp (_String1="PE00478_.WMF", _String2=".") returned 1 [0230.876] wcscmp (_String1="PE00478_.WMF", _String2="..") returned 1 [0230.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69438 [0230.876] wcscpy (in: _Dest=0x7a69438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.876] wcscat (in: _Dest=0x7a69438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.876] wcscat (in: _Dest=0x7a69438, _Source="PE00478_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" [0230.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0230.878] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4860ec00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4860ec00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00485_.WMF", cAlternateFileName="")) returned 1 [0230.878] wcscmp (_String1="PE00485_.WMF", _String2=".") returned 1 [0230.878] wcscmp (_String1="PE00485_.WMF", _String2="..") returned 1 [0230.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a694c0 [0230.878] wcscpy (in: _Dest=0x7a694c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.878] wcscat (in: _Dest=0x7a694c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.878] wcscat (in: _Dest=0x7a694c0, _Source="PE00485_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" [0230.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a694c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0230.879] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2975000, ftCreationTime.dwHighDateTime=0x1bd9909, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf2975000, ftLastWriteTime.dwHighDateTime=0x1bd9909, nFileSizeHigh=0x0, nFileSizeLow=0x1402c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00489_.WMF", cAlternateFileName="")) returned 1 [0230.880] wcscmp (_String1="PE00489_.WMF", _String2=".") returned 1 [0230.880] wcscmp (_String1="PE00489_.WMF", _String2="..") returned 1 [0230.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69548 [0230.880] wcscpy (in: _Dest=0x7a69548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.880] wcscat (in: _Dest=0x7a69548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.880] wcscat (in: _Dest=0x7a69548, _Source="PE00489_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" [0230.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0230.881] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4860ec00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4860ec00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00531_.WMF", cAlternateFileName="")) returned 1 [0230.881] wcscmp (_String1="PE00531_.WMF", _String2=".") returned 1 [0230.881] wcscmp (_String1="PE00531_.WMF", _String2="..") returned 1 [0230.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a695d0 [0230.881] wcscpy (in: _Dest=0x7a695d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.881] wcscat (in: _Dest=0x7a695d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.882] wcscat (in: _Dest=0x7a695d0, _Source="PE00531_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" [0230.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a695d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0230.883] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc88d3700, ftCreationTime.dwHighDateTime=0x1bf3c3e, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc88d3700, ftLastWriteTime.dwHighDateTime=0x1bf3c3e, nFileSizeHigh=0x0, nFileSizeLow=0x8da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00542_.WMF", cAlternateFileName="")) returned 1 [0230.883] wcscmp (_String1="PE00542_.WMF", _String2=".") returned 1 [0230.883] wcscmp (_String1="PE00542_.WMF", _String2="..") returned 1 [0230.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69658 [0230.883] wcscpy (in: _Dest=0x7a69658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.883] wcscat (in: _Dest=0x7a69658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.883] wcscat (in: _Dest=0x7a69658, _Source="PE00542_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" [0230.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0230.885] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ba1b00, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10ba1b00, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x140c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00555_.WMF", cAlternateFileName="")) returned 1 [0230.885] wcscmp (_String1="PE00555_.WMF", _String2=".") returned 1 [0230.885] wcscmp (_String1="PE00555_.WMF", _String2="..") returned 1 [0230.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a696e0 [0230.885] wcscpy (in: _Dest=0x7a696e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.885] wcscat (in: _Dest=0x7a696e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.885] wcscat (in: _Dest=0x7a696e0, _Source="PE00555_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" [0230.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a696e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0230.887] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53b4900, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc53b4900, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00559_.WMF", cAlternateFileName="")) returned 1 [0230.887] wcscmp (_String1="PE00559_.WMF", _String2=".") returned 1 [0230.887] wcscmp (_String1="PE00559_.WMF", _String2="..") returned 1 [0230.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69768 [0230.887] wcscpy (in: _Dest=0x7a69768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.887] wcscat (in: _Dest=0x7a69768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.887] wcscat (in: _Dest=0x7a69768, _Source="PE00559_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" [0230.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0230.888] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf41a00, ftCreationTime.dwHighDateTime=0x1bd4b99, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacf41a00, ftLastWriteTime.dwHighDateTime=0x1bd4b99, nFileSizeHigh=0x0, nFileSizeLow=0x5670, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00563_.WMF", cAlternateFileName="")) returned 1 [0230.888] wcscmp (_String1="PE00563_.WMF", _String2=".") returned 1 [0230.889] wcscmp (_String1="PE00563_.WMF", _String2="..") returned 1 [0230.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a697f0 [0230.889] wcscpy (in: _Dest=0x7a697f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.889] wcscat (in: _Dest=0x7a697f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.889] wcscat (in: _Dest=0x7a697f0, _Source="PE00563_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" [0230.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a697f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0230.890] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00578_.WMF", cAlternateFileName="")) returned 1 [0230.890] wcscmp (_String1="PE00578_.WMF", _String2=".") returned 1 [0230.890] wcscmp (_String1="PE00578_.WMF", _String2="..") returned 1 [0230.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69878 [0230.891] wcscpy (in: _Dest=0x7a69878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.891] wcscat (in: _Dest=0x7a69878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.891] wcscat (in: _Dest=0x7a69878, _Source="PE00578_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" [0230.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0230.892] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ea37800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8f8fb090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ea37800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00608_.WMF", cAlternateFileName="")) returned 1 [0230.892] wcscmp (_String1="PE00608_.WMF", _String2=".") returned 1 [0230.892] wcscmp (_String1="PE00608_.WMF", _String2="..") returned 1 [0230.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69900 [0230.892] wcscpy (in: _Dest=0x7a69900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.892] wcscat (in: _Dest=0x7a69900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.892] wcscat (in: _Dest=0x7a69900, _Source="PE00608_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" [0230.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0230.893] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb16a0400, ftCreationTime.dwHighDateTime=0x1bd4b94, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb16a0400, ftLastWriteTime.dwHighDateTime=0x1bd4b94, nFileSizeHigh=0x0, nFileSizeLow=0x4cea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00633_.WMF", cAlternateFileName="")) returned 1 [0230.893] wcscmp (_String1="PE00633_.WMF", _String2=".") returned 1 [0230.894] wcscmp (_String1="PE00633_.WMF", _String2="..") returned 1 [0230.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69988 [0230.894] wcscpy (in: _Dest=0x7a69988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.894] wcscat (in: _Dest=0x7a69988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.894] wcscat (in: _Dest=0x7a69988, _Source="PE00633_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" [0230.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0230.921] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2105d200, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2105d200, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xb12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00640_.WMF", cAlternateFileName="")) returned 1 [0230.921] wcscmp (_String1="PE00640_.WMF", _String2=".") returned 1 [0230.921] wcscmp (_String1="PE00640_.WMF", _String2="..") returned 1 [0230.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69a10 [0230.921] wcscpy (in: _Dest=0x7a69a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.921] wcscat (in: _Dest=0x7a69a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.921] wcscat (in: _Dest=0x7a69a10, _Source="PE00640_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" [0230.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0230.922] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d724b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d724b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x6028, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00668_.WMF", cAlternateFileName="")) returned 1 [0230.922] wcscmp (_String1="PE00668_.WMF", _String2=".") returned 1 [0230.922] wcscmp (_String1="PE00668_.WMF", _String2="..") returned 1 [0230.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69a98 [0230.923] wcscpy (in: _Dest=0x7a69a98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.923] wcscat (in: _Dest=0x7a69a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.923] wcscat (in: _Dest=0x7a69a98, _Source="PE00668_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" [0230.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0230.924] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfd0ff00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfd0ff00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x108a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00685_.WMF", cAlternateFileName="")) returned 1 [0230.924] wcscmp (_String1="PE00685_.WMF", _String2=".") returned 1 [0230.924] wcscmp (_String1="PE00685_.WMF", _String2="..") returned 1 [0230.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69b20 [0230.924] wcscpy (in: _Dest=0x7a69b20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.924] wcscat (in: _Dest=0x7a69b20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.924] wcscat (in: _Dest=0x7a69b20, _Source="PE00685_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" [0230.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0230.925] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7dea00, ftCreationTime.dwHighDateTime=0x1bf0b78, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7dea00, ftLastWriteTime.dwHighDateTime=0x1bf0b78, nFileSizeHigh=0x0, nFileSizeLow=0x112e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00686_.WMF", cAlternateFileName="")) returned 1 [0230.926] wcscmp (_String1="PE00686_.WMF", _String2=".") returned 1 [0230.926] wcscmp (_String1="PE00686_.WMF", _String2="..") returned 1 [0230.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ba8 [0230.926] wcscpy (in: _Dest=0x7a69ba8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.926] wcscat (in: _Dest=0x7a69ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.926] wcscat (in: _Dest=0x7a69ba8, _Source="PE00686_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" [0230.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0230.927] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49921900, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49921900, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00693_.WMF", cAlternateFileName="")) returned 1 [0230.927] wcscmp (_String1="PE00693_.WMF", _String2=".") returned 1 [0230.927] wcscmp (_String1="PE00693_.WMF", _String2="..") returned 1 [0230.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69c30 [0230.927] wcscpy (in: _Dest=0x7a69c30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.927] wcscat (in: _Dest=0x7a69c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.927] wcscat (in: _Dest=0x7a69c30, _Source="PE00693_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" [0230.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0230.928] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf017e00, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf017e00, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00720_.WMF", cAlternateFileName="")) returned 1 [0230.928] wcscmp (_String1="PE00720_.WMF", _String2=".") returned 1 [0230.928] wcscmp (_String1="PE00720_.WMF", _String2="..") returned 1 [0230.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69cb8 [0230.928] wcscpy (in: _Dest=0x7a69cb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.928] wcscat (in: _Dest=0x7a69cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.928] wcscat (in: _Dest=0x7a69cb8, _Source="PE00720_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" [0230.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0230.929] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d411400, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d411400, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x1afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00723_.WMF", cAlternateFileName="")) returned 1 [0230.929] wcscmp (_String1="PE00723_.WMF", _String2=".") returned 1 [0230.929] wcscmp (_String1="PE00723_.WMF", _String2="..") returned 1 [0230.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69d40 [0230.929] wcscpy (in: _Dest=0x7a69d40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.929] wcscat (in: _Dest=0x7a69d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.929] wcscat (in: _Dest=0x7a69d40, _Source="PE00723_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" [0230.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0230.930] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2379300, ftCreationTime.dwHighDateTime=0x1c04274, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2379300, ftLastWriteTime.dwHighDateTime=0x1c04274, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00726_.WMF", cAlternateFileName="")) returned 1 [0230.931] wcscmp (_String1="PE00726_.WMF", _String2=".") returned 1 [0230.931] wcscmp (_String1="PE00726_.WMF", _String2="..") returned 1 [0230.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69dc8 [0230.931] wcscpy (in: _Dest=0x7a69dc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.931] wcscat (in: _Dest=0x7a69dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.931] wcscat (in: _Dest=0x7a69dc8, _Source="PE00726_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" [0230.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0230.932] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94323700, ftCreationTime.dwHighDateTime=0x1bd4b8e, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94323700, ftLastWriteTime.dwHighDateTime=0x1bd4b8e, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00737_.WMF", cAlternateFileName="")) returned 1 [0230.932] wcscmp (_String1="PE00737_.WMF", _String2=".") returned 1 [0230.932] wcscmp (_String1="PE00737_.WMF", _String2="..") returned 1 [0230.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69e50 [0230.932] wcscpy (in: _Dest=0x7a69e50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.932] wcscat (in: _Dest=0x7a69e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.932] wcscat (in: _Dest=0x7a69e50, _Source="PE00737_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" [0230.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0230.933] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bedc00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77bedc00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00833_.WMF", cAlternateFileName="")) returned 1 [0230.933] wcscmp (_String1="PE00833_.WMF", _String2=".") returned 1 [0230.933] wcscmp (_String1="PE00833_.WMF", _String2="..") returned 1 [0230.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69ed8 [0230.933] wcscpy (in: _Dest=0x7a69ed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.933] wcscat (in: _Dest=0x7a69ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.933] wcscat (in: _Dest=0x7a69ed8, _Source="PE00833_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" [0230.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0230.934] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c411e00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c411e00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1908, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00898_.WMF", cAlternateFileName="")) returned 1 [0230.949] wcscmp (_String1="PE00898_.WMF", _String2=".") returned 1 [0230.949] wcscmp (_String1="PE00898_.WMF", _String2="..") returned 1 [0230.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69f60 [0230.950] wcscpy (in: _Dest=0x7a69f60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.950] wcscat (in: _Dest=0x7a69f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.950] wcscat (in: _Dest=0x7a69f60, _Source="PE00898_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" [0230.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0230.951] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30edd800, ftCreationTime.dwHighDateTime=0x1bd4b81, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30edd800, ftLastWriteTime.dwHighDateTime=0x1bd4b81, nFileSizeHigh=0x0, nFileSizeLow=0x3100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00934_.WMF", cAlternateFileName="")) returned 1 [0230.951] wcscmp (_String1="PE00934_.WMF", _String2=".") returned 1 [0230.951] wcscmp (_String1="PE00934_.WMF", _String2="..") returned 1 [0230.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69fe8 [0230.951] wcscpy (in: _Dest=0x7a69fe8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.951] wcscat (in: _Dest=0x7a69fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.951] wcscat (in: _Dest=0x7a69fe8, _Source="PE00934_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" [0230.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0230.952] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ff1200, ftCreationTime.dwHighDateTime=0x1bd4b75, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9ff1200, ftLastWriteTime.dwHighDateTime=0x1bd4b75, nFileSizeHigh=0x0, nFileSizeLow=0x2904, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00998_.WMF", cAlternateFileName="")) returned 1 [0230.952] wcscmp (_String1="PE00998_.WMF", _String2=".") returned 1 [0230.952] wcscmp (_String1="PE00998_.WMF", _String2="..") returned 1 [0230.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80320 [0230.952] wcscpy (in: _Dest=0x7b80320, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.952] wcscat (in: _Dest=0x7b80320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.952] wcscat (in: _Dest=0x7b80320, _Source="PE00998_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" [0230.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0230.953] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1cca200, ftCreationTime.dwHighDateTime=0x1bf117c, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1cca200, ftLastWriteTime.dwHighDateTime=0x1bf117c, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01160_.WMF", cAlternateFileName="")) returned 1 [0230.953] wcscmp (_String1="PE01160_.WMF", _String2=".") returned 1 [0230.954] wcscmp (_String1="PE01160_.WMF", _String2="..") returned 1 [0230.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b803a8 [0230.954] wcscpy (in: _Dest=0x7b803a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.954] wcscat (in: _Dest=0x7b803a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.954] wcscat (in: _Dest=0x7b803a8, _Source="PE01160_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" [0230.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b803a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0230.955] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42efc00, ftCreationTime.dwHighDateTime=0x1bf117c, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf42efc00, ftLastWriteTime.dwHighDateTime=0x1bf117c, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01172_.WMF", cAlternateFileName="")) returned 1 [0230.955] wcscmp (_String1="PE01172_.WMF", _String2=".") returned 1 [0230.955] wcscmp (_String1="PE01172_.WMF", _String2="..") returned 1 [0230.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80430 [0230.955] wcscpy (in: _Dest=0x7b80430, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.955] wcscat (in: _Dest=0x7b80430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.955] wcscat (in: _Dest=0x7b80430, _Source="PE01172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" [0230.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0230.956] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac34600, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ac34600, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01191_.WMF", cAlternateFileName="")) returned 1 [0230.956] wcscmp (_String1="PE01191_.WMF", _String2=".") returned 1 [0230.957] wcscmp (_String1="PE01191_.WMF", _String2="..") returned 1 [0230.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b804b8 [0230.957] wcscpy (in: _Dest=0x7b804b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.957] wcscat (in: _Dest=0x7b804b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.957] wcscat (in: _Dest=0x7b804b8, _Source="PE01191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" [0230.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b804b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0230.958] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f937600, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7f937600, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01661_.WMF", cAlternateFileName="")) returned 1 [0230.958] wcscmp (_String1="PE01661_.WMF", _String2=".") returned 1 [0230.958] wcscmp (_String1="PE01661_.WMF", _String2="..") returned 1 [0230.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80540 [0230.958] wcscpy (in: _Dest=0x7b80540, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.958] wcscat (in: _Dest=0x7b80540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.958] wcscat (in: _Dest=0x7b80540, _Source="PE01661_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" [0230.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0230.959] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01797_.WMF", cAlternateFileName="")) returned 1 [0230.959] wcscmp (_String1="PE01797_.WMF", _String2=".") returned 1 [0230.959] wcscmp (_String1="PE01797_.WMF", _String2="..") returned 1 [0230.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b805c8 [0230.959] wcscpy (in: _Dest=0x7b805c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.959] wcscat (in: _Dest=0x7b805c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.959] wcscat (in: _Dest=0x7b805c8, _Source="PE01797_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" [0230.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b805c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0230.960] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02120_.WMF", cAlternateFileName="")) returned 1 [0230.960] wcscmp (_String1="PE02120_.WMF", _String2=".") returned 1 [0230.960] wcscmp (_String1="PE02120_.WMF", _String2="..") returned 1 [0230.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80650 [0230.960] wcscpy (in: _Dest=0x7b80650, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.960] wcscat (in: _Dest=0x7b80650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.960] wcscat (in: _Dest=0x7b80650, _Source="PE02120_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" [0230.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0230.962] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02169_.WMF", cAlternateFileName="")) returned 1 [0230.962] wcscmp (_String1="PE02169_.WMF", _String2=".") returned 1 [0230.962] wcscmp (_String1="PE02169_.WMF", _String2="..") returned 1 [0230.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b806d8 [0230.962] wcscpy (in: _Dest=0x7b806d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.962] wcscat (in: _Dest=0x7b806d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.962] wcscat (in: _Dest=0x7b806d8, _Source="PE02169_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" [0230.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b806d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0230.963] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18ad9700, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18ad9700, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x75e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02262_.WMF", cAlternateFileName="")) returned 1 [0230.963] wcscmp (_String1="PE02262_.WMF", _String2=".") returned 1 [0230.963] wcscmp (_String1="PE02262_.WMF", _String2="..") returned 1 [0230.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80760 [0230.963] wcscpy (in: _Dest=0x7b80760, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.963] wcscat (in: _Dest=0x7b80760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.963] wcscat (in: _Dest=0x7b80760, _Source="PE02262_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" [0230.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0230.964] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb8b700, ftCreationTime.dwHighDateTime=0x1bf14f3, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4eb8b700, ftLastWriteTime.dwHighDateTime=0x1bf14f3, nFileSizeHigh=0x0, nFileSizeLow=0x824e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02263_.WMF", cAlternateFileName="")) returned 1 [0230.964] wcscmp (_String1="PE02263_.WMF", _String2=".") returned 1 [0230.964] wcscmp (_String1="PE02263_.WMF", _String2="..") returned 1 [0230.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b807e8 [0230.964] wcscpy (in: _Dest=0x7b807e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.964] wcscat (in: _Dest=0x7b807e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.964] wcscat (in: _Dest=0x7b807e8, _Source="PE02263_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" [0230.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b807e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0230.965] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c88d100, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c88d100, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x62b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02265_.WMF", cAlternateFileName="")) returned 1 [0230.965] wcscmp (_String1="PE02265_.WMF", _String2=".") returned 1 [0230.965] wcscmp (_String1="PE02265_.WMF", _String2="..") returned 1 [0230.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80870 [0230.966] wcscpy (in: _Dest=0x7b80870, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.966] wcscat (in: _Dest=0x7b80870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.966] wcscat (in: _Dest=0x7b80870, _Source="PE02265_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" [0230.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0230.967] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59250900, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59250900, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x78e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02267_.WMF", cAlternateFileName="")) returned 1 [0230.967] wcscmp (_String1="PE02267_.WMF", _String2=".") returned 1 [0230.967] wcscmp (_String1="PE02267_.WMF", _String2="..") returned 1 [0230.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b808f8 [0230.967] wcscpy (in: _Dest=0x7b808f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.967] wcscat (in: _Dest=0x7b808f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.967] wcscat (in: _Dest=0x7b808f8, _Source="PE02267_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" [0230.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b808f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0230.968] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x151a1000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x151a1000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x6f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02270_.WMF", cAlternateFileName="")) returned 1 [0230.968] wcscmp (_String1="PE02270_.WMF", _String2=".") returned 1 [0230.968] wcscmp (_String1="PE02270_.WMF", _String2="..") returned 1 [0230.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80980 [0230.968] wcscpy (in: _Dest=0x7b80980, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.968] wcscat (in: _Dest=0x7b80980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.968] wcscat (in: _Dest=0x7b80980, _Source="PE02270_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" [0230.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0230.969] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d39d00, ftCreationTime.dwHighDateTime=0x1c003a3, ftLastAccessTime.dwLowDateTime=0x81e6ecb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4d39d00, ftLastWriteTime.dwHighDateTime=0x1c003a3, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02278_.WMF", cAlternateFileName="")) returned 1 [0230.969] wcscmp (_String1="PE02278_.WMF", _String2=".") returned 1 [0230.969] wcscmp (_String1="PE02278_.WMF", _String2="..") returned 1 [0230.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80a08 [0230.969] wcscpy (in: _Dest=0x7b80a08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0230.969] wcscat (in: _Dest=0x7b80a08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0230.969] wcscat (in: _Dest=0x7b80a08, _Source="PE02278_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" [0230.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0231.002] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47456500, ftCreationTime.dwHighDateTime=0x1bd4b7c, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47456500, ftLastWriteTime.dwHighDateTime=0x1bd4b7c, nFileSizeHigh=0x0, nFileSizeLow=0x6928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02280_.WMF", cAlternateFileName="")) returned 1 [0231.002] wcscmp (_String1="PE02280_.WMF", _String2=".") returned 1 [0231.002] wcscmp (_String1="PE02280_.WMF", _String2="..") returned 1 [0231.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80a90 [0231.003] wcscpy (in: _Dest=0x7b80a90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.003] wcscat (in: _Dest=0x7b80a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.003] wcscat (in: _Dest=0x7b80a90, _Source="PE02280_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" [0231.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0231.004] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7864bb00, ftCreationTime.dwHighDateTime=0x1bf32b5, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7864bb00, ftLastWriteTime.dwHighDateTime=0x1bf32b5, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02282_.WMF", cAlternateFileName="")) returned 1 [0231.004] wcscmp (_String1="PE02282_.WMF", _String2=".") returned 1 [0231.004] wcscmp (_String1="PE02282_.WMF", _String2="..") returned 1 [0231.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80b18 [0231.004] wcscpy (in: _Dest=0x7b80b18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.004] wcscat (in: _Dest=0x7b80b18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.005] wcscat (in: _Dest=0x7b80b18, _Source="PE02282_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" [0231.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0231.006] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94eb3800, ftCreationTime.dwHighDateTime=0x1bf34ed, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94eb3800, ftLastWriteTime.dwHighDateTime=0x1bf34ed, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02285_.WMF", cAlternateFileName="")) returned 1 [0231.006] wcscmp (_String1="PE02285_.WMF", _String2=".") returned 1 [0231.006] wcscmp (_String1="PE02285_.WMF", _String2="..") returned 1 [0231.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80ba0 [0231.006] wcscpy (in: _Dest=0x7b80ba0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.006] wcscat (in: _Dest=0x7b80ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.006] wcscat (in: _Dest=0x7b80ba0, _Source="PE02285_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" [0231.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0231.007] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf47300, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bf47300, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02287_.WMF", cAlternateFileName="")) returned 1 [0231.007] wcscmp (_String1="PE02287_.WMF", _String2=".") returned 1 [0231.008] wcscmp (_String1="PE02287_.WMF", _String2="..") returned 1 [0231.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80c28 [0231.008] wcscpy (in: _Dest=0x7b80c28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.008] wcscat (in: _Dest=0x7b80c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.008] wcscat (in: _Dest=0x7b80c28, _Source="PE02287_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" [0231.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0231.009] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d25a000, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d25a000, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x76e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02288_.WMF", cAlternateFileName="")) returned 1 [0231.009] wcscmp (_String1="PE02288_.WMF", _String2=".") returned 1 [0231.009] wcscmp (_String1="PE02288_.WMF", _String2="..") returned 1 [0231.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80cb0 [0231.009] wcscpy (in: _Dest=0x7b80cb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.009] wcscat (in: _Dest=0x7b80cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.009] wcscat (in: _Dest=0x7b80cb0, _Source="PE02288_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" [0231.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0231.011] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d25a000, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d25a000, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x5850, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02293_.WMF", cAlternateFileName="")) returned 1 [0231.011] wcscmp (_String1="PE02293_.WMF", _String2=".") returned 1 [0231.011] wcscmp (_String1="PE02293_.WMF", _String2="..") returned 1 [0231.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80d38 [0231.011] wcscpy (in: _Dest=0x7b80d38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.011] wcscat (in: _Dest=0x7b80d38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.011] wcscat (in: _Dest=0x7b80d38, _Source="PE02293_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" [0231.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0231.012] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993bc600, ftCreationTime.dwHighDateTime=0x1bf3a96, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x993bc600, ftLastWriteTime.dwHighDateTime=0x1bf3a96, nFileSizeHigh=0x0, nFileSizeLow=0x5328, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02296_.WMF", cAlternateFileName="")) returned 1 [0231.012] wcscmp (_String1="PE02296_.WMF", _String2=".") returned 1 [0231.012] wcscmp (_String1="PE02296_.WMF", _String2="..") returned 1 [0231.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80dc0 [0231.012] wcscpy (in: _Dest=0x7b80dc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.012] wcscat (in: _Dest=0x7b80dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.012] wcscat (in: _Dest=0x7b80dc0, _Source="PE02296_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" [0231.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0231.013] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64c5ff00, ftCreationTime.dwHighDateTime=0x1bd4b7b, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64c5ff00, ftLastWriteTime.dwHighDateTime=0x1bd4b7b, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02369_.WMF", cAlternateFileName="")) returned 1 [0231.013] wcscmp (_String1="PE02369_.WMF", _String2=".") returned 1 [0231.013] wcscmp (_String1="PE02369_.WMF", _String2="..") returned 1 [0231.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80e48 [0231.014] wcscpy (in: _Dest=0x7b80e48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.014] wcscat (in: _Dest=0x7b80e48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.014] wcscat (in: _Dest=0x7b80e48, _Source="PE02369_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" [0231.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0231.015] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c9b400, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x39c9b400, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x39f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02522_.WMF", cAlternateFileName="")) returned 1 [0231.015] wcscmp (_String1="PE02522_.WMF", _String2=".") returned 1 [0231.015] wcscmp (_String1="PE02522_.WMF", _String2="..") returned 1 [0231.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80ed0 [0231.015] wcscpy (in: _Dest=0x7b80ed0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.015] wcscat (in: _Dest=0x7b80ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.015] wcscat (in: _Dest=0x7b80ed0, _Source="PE02522_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" [0231.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0231.016] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02950_.WMF", cAlternateFileName="")) returned 1 [0231.016] wcscmp (_String1="PE02950_.WMF", _String2=".") returned 1 [0231.016] wcscmp (_String1="PE02950_.WMF", _String2="..") returned 1 [0231.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80f58 [0231.016] wcscpy (in: _Dest=0x7b80f58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.016] wcscat (in: _Dest=0x7b80f58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.016] wcscat (in: _Dest=0x7b80f58, _Source="PE02950_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" [0231.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0231.017] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02957_.WMF", cAlternateFileName="")) returned 1 [0231.017] wcscmp (_String1="PE02957_.WMF", _String2=".") returned 1 [0231.017] wcscmp (_String1="PE02957_.WMF", _String2="..") returned 1 [0231.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b80fe0 [0231.017] wcscpy (in: _Dest=0x7b80fe0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.017] wcscat (in: _Dest=0x7b80fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.017] wcscat (in: _Dest=0x7b80fe0, _Source="PE02957_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" [0231.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0231.018] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd04ca400, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd04ca400, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03236_.WMF", cAlternateFileName="")) returned 1 [0231.018] wcscmp (_String1="PE03236_.WMF", _String2=".") returned 1 [0231.018] wcscmp (_String1="PE03236_.WMF", _String2="..") returned 1 [0231.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81068 [0231.018] wcscpy (in: _Dest=0x7b81068, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.018] wcscat (in: _Dest=0x7b81068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.019] wcscat (in: _Dest=0x7b81068, _Source="PE03236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" [0231.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0231.020] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc035c400, ftCreationTime.dwHighDateTime=0x1bd4b5e, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc035c400, ftLastWriteTime.dwHighDateTime=0x1bd4b5e, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03241_.WMF", cAlternateFileName="")) returned 1 [0231.020] wcscmp (_String1="PE03241_.WMF", _String2=".") returned 1 [0231.020] wcscmp (_String1="PE03241_.WMF", _String2="..") returned 1 [0231.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b810f0 [0231.020] wcscpy (in: _Dest=0x7b810f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.020] wcscat (in: _Dest=0x7b810f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.020] wcscat (in: _Dest=0x7b810f0, _Source="PE03241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" [0231.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b810f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0231.021] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e56cd00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x8f9211f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e56cd00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x3380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03257_.WMF", cAlternateFileName="")) returned 1 [0231.021] wcscmp (_String1="PE03257_.WMF", _String2=".") returned 1 [0231.021] wcscmp (_String1="PE03257_.WMF", _String2="..") returned 1 [0231.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81178 [0231.021] wcscpy (in: _Dest=0x7b81178, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.021] wcscat (in: _Dest=0x7b81178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.021] wcscat (in: _Dest=0x7b81178, _Source="PE03257_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" [0231.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0231.022] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc66c7600, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc66c7600, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03331_.WMF", cAlternateFileName="")) returned 1 [0231.022] wcscmp (_String1="PE03331_.WMF", _String2=".") returned 1 [0231.023] wcscmp (_String1="PE03331_.WMF", _String2="..") returned 1 [0231.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81200 [0231.023] wcscpy (in: _Dest=0x7b81200, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.023] wcscat (in: _Dest=0x7b81200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.023] wcscat (in: _Dest=0x7b81200, _Source="PE03331_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" [0231.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0231.024] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7695ab00, ftCreationTime.dwHighDateTime=0x1bd4b57, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7695ab00, ftLastWriteTime.dwHighDateTime=0x1bd4b57, nFileSizeHigh=0x0, nFileSizeLow=0x282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03339_.WMF", cAlternateFileName="")) returned 1 [0231.024] wcscmp (_String1="PE03339_.WMF", _String2=".") returned 1 [0231.024] wcscmp (_String1="PE03339_.WMF", _String2="..") returned 1 [0231.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81288 [0231.024] wcscpy (in: _Dest=0x7b81288, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.024] wcscat (in: _Dest=0x7b81288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.024] wcscat (in: _Dest=0x7b81288, _Source="PE03339_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" [0231.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0231.025] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2108, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03451_.WMF", cAlternateFileName="")) returned 1 [0231.025] wcscmp (_String1="PE03451_.WMF", _String2=".") returned 1 [0231.025] wcscmp (_String1="PE03451_.WMF", _String2="..") returned 1 [0231.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81310 [0231.025] wcscpy (in: _Dest=0x7b81310, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.025] wcscat (in: _Dest=0x7b81310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.025] wcscat (in: _Dest=0x7b81310, _Source="PE03451_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" [0231.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0231.026] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb29e3e00, ftCreationTime.dwHighDateTime=0x1bd4c33, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb29e3e00, ftLastWriteTime.dwHighDateTime=0x1bd4c33, nFileSizeHigh=0x0, nFileSizeLow=0x1f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03453_.WMF", cAlternateFileName="")) returned 1 [0231.026] wcscmp (_String1="PE03453_.WMF", _String2=".") returned 1 [0231.026] wcscmp (_String1="PE03453_.WMF", _String2="..") returned 1 [0231.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81398 [0231.027] wcscpy (in: _Dest=0x7b81398, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.027] wcscat (in: _Dest=0x7b81398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.027] wcscat (in: _Dest=0x7b81398, _Source="PE03453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" [0231.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0231.028] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81e94e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03459_.WMF", cAlternateFileName="")) returned 1 [0231.034] wcscmp (_String1="PE03459_.WMF", _String2=".") returned 1 [0231.034] wcscmp (_String1="PE03459_.WMF", _String2="..") returned 1 [0231.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81420 [0231.035] wcscpy (in: _Dest=0x7b81420, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.035] wcscat (in: _Dest=0x7b81420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.035] wcscat (in: _Dest=0x7b81420, _Source="PE03459_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" [0231.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0231.036] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03464_.WMF", cAlternateFileName="")) returned 1 [0231.036] wcscmp (_String1="PE03464_.WMF", _String2=".") returned 1 [0231.036] wcscmp (_String1="PE03464_.WMF", _String2="..") returned 1 [0231.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b814a8 [0231.036] wcscpy (in: _Dest=0x7b814a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.036] wcscat (in: _Dest=0x7b814a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.036] wcscat (in: _Dest=0x7b814a8, _Source="PE03464_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" [0231.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b814a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0231.037] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03466_.WMF", cAlternateFileName="")) returned 1 [0231.037] wcscmp (_String1="PE03466_.WMF", _String2=".") returned 1 [0231.037] wcscmp (_String1="PE03466_.WMF", _String2="..") returned 1 [0231.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81530 [0231.037] wcscpy (in: _Dest=0x7b81530, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.037] wcscat (in: _Dest=0x7b81530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.037] wcscat (in: _Dest=0x7b81530, _Source="PE03466_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" [0231.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0231.038] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03470_.WMF", cAlternateFileName="")) returned 1 [0231.038] wcscmp (_String1="PE03470_.WMF", _String2=".") returned 1 [0231.039] wcscmp (_String1="PE03470_.WMF", _String2="..") returned 1 [0231.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b815b8 [0231.039] wcscpy (in: _Dest=0x7b815b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.039] wcscat (in: _Dest=0x7b815b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.039] wcscat (in: _Dest=0x7b815b8, _Source="PE03470_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" [0231.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b815b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0231.040] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a64500, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88a64500, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03513_.WMF", cAlternateFileName="")) returned 1 [0231.040] wcscmp (_String1="PE03513_.WMF", _String2=".") returned 1 [0231.040] wcscmp (_String1="PE03513_.WMF", _String2="..") returned 1 [0231.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81640 [0231.040] wcscpy (in: _Dest=0x7b81640, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.040] wcscat (in: _Dest=0x7b81640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.040] wcscat (in: _Dest=0x7b81640, _Source="PE03513_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" [0231.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0231.041] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc73b0000, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc73b0000, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x1868, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03668_.WMF", cAlternateFileName="")) returned 1 [0231.041] wcscmp (_String1="PE03668_.WMF", _String2=".") returned 1 [0231.041] wcscmp (_String1="PE03668_.WMF", _String2="..") returned 1 [0231.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b816c8 [0231.041] wcscpy (in: _Dest=0x7b816c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.041] wcscat (in: _Dest=0x7b816c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.041] wcscat (in: _Dest=0x7b816c8, _Source="PE03668_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" [0231.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b816c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0231.042] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064ea00, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9064ea00, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03731_.WMF", cAlternateFileName="")) returned 1 [0231.042] wcscmp (_String1="PE03731_.WMF", _String2=".") returned 1 [0231.042] wcscmp (_String1="PE03731_.WMF", _String2="..") returned 1 [0231.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81750 [0231.042] wcscpy (in: _Dest=0x7b81750, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.042] wcscat (in: _Dest=0x7b81750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.042] wcscat (in: _Dest=0x7b81750, _Source="PE03731_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" [0231.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0231.595] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66abc300, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66abc300, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03795_.WMF", cAlternateFileName="")) returned 1 [0231.595] wcscmp (_String1="PE03795_.WMF", _String2=".") returned 1 [0231.595] wcscmp (_String1="PE03795_.WMF", _String2="..") returned 1 [0231.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b817d8 [0231.595] wcscpy (in: _Dest=0x7b817d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.595] wcscat (in: _Dest=0x7b817d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.595] wcscat (in: _Dest=0x7b817d8, _Source="PE03795_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" [0231.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b817d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0231.596] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9c85f00, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9c85f00, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE04050_.WMF", cAlternateFileName="")) returned 1 [0231.597] wcscmp (_String1="PE04050_.WMF", _String2=".") returned 1 [0231.597] wcscmp (_String1="PE04050_.WMF", _String2="..") returned 1 [0231.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81860 [0231.597] wcscpy (in: _Dest=0x7b81860, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.597] wcscat (in: _Dest=0x7b81860, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.597] wcscat (in: _Dest=0x7b81860, _Source="PE04050_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" [0231.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0231.598] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x37f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05665_.WMF", cAlternateFileName="")) returned 1 [0231.598] wcscmp (_String1="PE05665_.WMF", _String2=".") returned 1 [0231.598] wcscmp (_String1="PE05665_.WMF", _String2="..") returned 1 [0231.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b818e8 [0231.598] wcscpy (in: _Dest=0x7b818e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.598] wcscat (in: _Dest=0x7b818e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.598] wcscat (in: _Dest=0x7b818e8, _Source="PE05665_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" [0231.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b818e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0231.599] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459bf00, ftCreationTime.dwHighDateTime=0x1bd4c5a, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x459bf00, ftLastWriteTime.dwHighDateTime=0x1bd4c5a, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05710_.WMF", cAlternateFileName="")) returned 1 [0231.599] wcscmp (_String1="PE05710_.WMF", _String2=".") returned 1 [0231.599] wcscmp (_String1="PE05710_.WMF", _String2="..") returned 1 [0231.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81970 [0231.599] wcscpy (in: _Dest=0x7b81970, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.599] wcscat (in: _Dest=0x7b81970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.599] wcscat (in: _Dest=0x7b81970, _Source="PE05710_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" [0231.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0231.600] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3c1b00, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde3c1b00, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05869_.WMF", cAlternateFileName="")) returned 1 [0231.600] wcscmp (_String1="PE05869_.WMF", _String2=".") returned 1 [0231.600] wcscmp (_String1="PE05869_.WMF", _String2="..") returned 1 [0231.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b819f8 [0231.601] wcscpy (in: _Dest=0x7b819f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.601] wcscat (in: _Dest=0x7b819f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.601] wcscat (in: _Dest=0x7b819f8, _Source="PE05869_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" [0231.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b819f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0231.602] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9776700, ftCreationTime.dwHighDateTime=0x1bd4c69, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd9776700, ftLastWriteTime.dwHighDateTime=0x1bd4c69, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05870_.WMF", cAlternateFileName="")) returned 1 [0231.602] wcscmp (_String1="PE05870_.WMF", _String2=".") returned 1 [0231.602] wcscmp (_String1="PE05870_.WMF", _String2="..") returned 1 [0231.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81a80 [0231.602] wcscpy (in: _Dest=0x7b81a80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.602] wcscat (in: _Dest=0x7b81a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.602] wcscat (in: _Dest=0x7b81a80, _Source="PE05870_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" [0231.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0231.603] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc504e00, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc504e00, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x7fce, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05930_.WMF", cAlternateFileName="")) returned 1 [0231.603] wcscmp (_String1="PE05930_.WMF", _String2=".") returned 1 [0231.603] wcscmp (_String1="PE05930_.WMF", _String2="..") returned 1 [0231.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81b08 [0231.603] wcscpy (in: _Dest=0x7b81b08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.603] wcscat (in: _Dest=0x7b81b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.603] wcscat (in: _Dest=0x7b81b08, _Source="PE05930_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" [0231.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0231.604] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54388600, ftCreationTime.dwHighDateTime=0x1bd4c5a, ftLastAccessTime.dwLowDateTime=0x8f947350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54388600, ftLastWriteTime.dwHighDateTime=0x1bd4c5a, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06049_.WMF", cAlternateFileName="")) returned 1 [0231.604] wcscmp (_String1="PE06049_.WMF", _String2=".") returned 1 [0231.604] wcscmp (_String1="PE06049_.WMF", _String2="..") returned 1 [0231.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81b90 [0231.604] wcscpy (in: _Dest=0x7b81b90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.604] wcscat (in: _Dest=0x7b81b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.604] wcscat (in: _Dest=0x7b81b90, _Source="PE06049_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" [0231.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0231.605] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06450_.WMF", cAlternateFileName="")) returned 1 [0231.605] wcscmp (_String1="PE06450_.WMF", _String2=".") returned 1 [0231.605] wcscmp (_String1="PE06450_.WMF", _String2="..") returned 1 [0231.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81c18 [0231.606] wcscpy (in: _Dest=0x7b81c18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.606] wcscat (in: _Dest=0x7b81c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.606] wcscat (in: _Dest=0x7b81c18, _Source="PE06450_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" [0231.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0231.607] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868ef100, ftCreationTime.dwHighDateTime=0x1bd4eaf, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x868ef100, ftLastWriteTime.dwHighDateTime=0x1bd4eaf, nFileSizeHigh=0x0, nFileSizeLow=0x629, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00601G.GIF", cAlternateFileName="")) returned 1 [0231.607] wcscmp (_String1="PH00601G.GIF", _String2=".") returned 1 [0231.607] wcscmp (_String1="PH00601G.GIF", _String2="..") returned 1 [0231.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81ca0 [0231.607] wcscpy (in: _Dest=0x7b81ca0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.607] wcscat (in: _Dest=0x7b81ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.607] wcscat (in: _Dest=0x7b81ca0, _Source="PH00601G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" [0231.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0231.608] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da31d00, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7da31d00, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x8628, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00780U.BMP", cAlternateFileName="")) returned 1 [0231.608] wcscmp (_String1="PH00780U.BMP", _String2=".") returned 1 [0231.608] wcscmp (_String1="PH00780U.BMP", _String2="..") returned 1 [0231.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81d28 [0231.608] wcscpy (in: _Dest=0x7b81d28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.608] wcscat (in: _Dest=0x7b81d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.608] wcscat (in: _Dest=0x7b81d28, _Source="PH00780U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" [0231.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0231.609] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957aa100, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x957aa100, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01035U.BMP", cAlternateFileName="")) returned 1 [0231.609] wcscmp (_String1="PH01035U.BMP", _String2=".") returned 1 [0231.609] wcscmp (_String1="PH01035U.BMP", _String2="..") returned 1 [0231.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81db0 [0231.610] wcscpy (in: _Dest=0x7b81db0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.610] wcscat (in: _Dest=0x7b81db0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.610] wcscat (in: _Dest=0x7b81db0, _Source="PH01035U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" [0231.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0231.611] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x211bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01046J.JPG", cAlternateFileName="")) returned 1 [0231.611] wcscmp (_String1="PH01046J.JPG", _String2=".") returned 1 [0231.611] wcscmp (_String1="PH01046J.JPG", _String2="..") returned 1 [0231.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81e38 [0231.611] wcscpy (in: _Dest=0x7b81e38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.611] wcscat (in: _Dest=0x7b81e38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.611] wcscat (in: _Dest=0x7b81e38, _Source="PH01046J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" [0231.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81e38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0231.612] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x627f1a00, ftCreationTime.dwHighDateTime=0x1bd5112, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x627f1a00, ftLastWriteTime.dwHighDateTime=0x1bd5112, nFileSizeHigh=0x0, nFileSizeLow=0xa202, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01179J.JPG", cAlternateFileName="")) returned 1 [0231.613] wcscmp (_String1="PH01179J.JPG", _String2=".") returned 1 [0231.613] wcscmp (_String1="PH01179J.JPG", _String2="..") returned 1 [0231.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81ec0 [0231.613] wcscpy (in: _Dest=0x7b81ec0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.613] wcscat (in: _Dest=0x7b81ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.613] wcscat (in: _Dest=0x7b81ec0, _Source="PH01179J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" [0231.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec [0231.614] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x18be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01213K.JPG", cAlternateFileName="")) returned 1 [0231.614] wcscmp (_String1="PH01213K.JPG", _String2=".") returned 1 [0231.614] wcscmp (_String1="PH01213K.JPG", _String2="..") returned 1 [0231.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81f48 [0231.614] wcscpy (in: _Dest=0x7b81f48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.614] wcscat (in: _Dest=0x7b81f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.614] wcscat (in: _Dest=0x7b81f48, _Source="PH01213K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" [0231.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0231.615] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c94, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01221K.JPG", cAlternateFileName="")) returned 1 [0231.615] wcscmp (_String1="PH01221K.JPG", _String2=".") returned 1 [0231.615] wcscmp (_String1="PH01221K.JPG", _String2="..") returned 1 [0231.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81fd0 [0231.616] wcscpy (in: _Dest=0x7b81fd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.616] wcscat (in: _Dest=0x7b81fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.616] wcscat (in: _Dest=0x7b81fd0, _Source="PH01221K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" [0231.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0231.617] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce84e00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcce84e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01235U.BMP", cAlternateFileName="")) returned 1 [0231.617] wcscmp (_String1="PH01235U.BMP", _String2=".") returned 1 [0231.617] wcscmp (_String1="PH01235U.BMP", _String2="..") returned 1 [0231.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b82058 [0231.617] wcscpy (in: _Dest=0x7b82058, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.617] wcscat (in: _Dest=0x7b82058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.617] wcscat (in: _Dest=0x7b82058, _Source="PH01235U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" [0231.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0231.618] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d735e00, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d735e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01236U.BMP", cAlternateFileName="")) returned 1 [0231.618] wcscmp (_String1="PH01236U.BMP", _String2=".") returned 1 [0231.618] wcscmp (_String1="PH01236U.BMP", _String2="..") returned 1 [0231.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b820e0 [0231.618] wcscpy (in: _Dest=0x7b820e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.618] wcscat (in: _Dest=0x7b820e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.618] wcscat (in: _Dest=0x7b820e0, _Source="PH01236U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" [0231.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b820e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0231.619] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01239K.JPG", cAlternateFileName="")) returned 1 [0231.619] wcscmp (_String1="PH01239K.JPG", _String2=".") returned 1 [0231.619] wcscmp (_String1="PH01239K.JPG", _String2="..") returned 1 [0231.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b82168 [0231.619] wcscpy (in: _Dest=0x7b82168, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.619] wcscat (in: _Dest=0x7b82168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.619] wcscat (in: _Dest=0x7b82168, _Source="PH01239K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" [0231.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0231.621] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e9f600, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53e9f600, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01247U.BMP", cAlternateFileName="")) returned 1 [0231.621] wcscmp (_String1="PH01247U.BMP", _String2=".") returned 1 [0231.621] wcscmp (_String1="PH01247U.BMP", _String2="..") returned 1 [0231.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b821f0 [0231.621] wcscpy (in: _Dest=0x7b821f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.621] wcscat (in: _Dest=0x7b821f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.621] wcscat (in: _Dest=0x7b821f0, _Source="PH01247U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" [0231.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b821f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0231.622] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x757e800, ftCreationTime.dwHighDateTime=0x1bd4ec4, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x757e800, ftLastWriteTime.dwHighDateTime=0x1bd4ec4, nFileSizeHigh=0x0, nFileSizeLow=0x1e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01255G.GIF", cAlternateFileName="")) returned 1 [0231.622] wcscmp (_String1="PH01255G.GIF", _String2=".") returned 1 [0231.622] wcscmp (_String1="PH01255G.GIF", _String2="..") returned 1 [0231.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b82278 [0231.622] wcscpy (in: _Dest=0x7b82278, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.622] wcscat (in: _Dest=0x7b82278, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.622] wcscat (in: _Dest=0x7b82278, _Source="PH01255G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" [0231.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0231.624] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ae7000, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2ae7000, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01265U.BMP", cAlternateFileName="")) returned 1 [0231.624] wcscmp (_String1="PH01265U.BMP", _String2=".") returned 1 [0231.624] wcscmp (_String1="PH01265U.BMP", _String2="..") returned 1 [0231.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64090 [0231.624] wcscpy (in: _Dest=0x7a64090, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.624] wcscat (in: _Dest=0x7a64090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.624] wcscat (in: _Dest=0x7a64090, _Source="PH01265U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" [0231.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0231.625] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4df41500, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4df41500, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01332U.BMP", cAlternateFileName="")) returned 1 [0231.626] wcscmp (_String1="PH01332U.BMP", _String2=".") returned 1 [0231.626] wcscmp (_String1="PH01332U.BMP", _String2="..") returned 1 [0231.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64118 [0231.626] wcscpy (in: _Dest=0x7a64118, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.626] wcscat (in: _Dest=0x7a64118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.626] wcscat (in: _Dest=0x7a64118, _Source="PH01332U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" [0231.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0231.627] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa5f900, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3fa5f900, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01478U.BMP", cAlternateFileName="")) returned 1 [0231.628] wcscmp (_String1="PH01478U.BMP", _String2=".") returned 1 [0231.628] wcscmp (_String1="PH01478U.BMP", _String2="..") returned 1 [0231.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a641a0 [0231.628] wcscpy (in: _Dest=0x7a641a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.628] wcscat (in: _Dest=0x7a641a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.628] wcscat (in: _Dest=0x7a641a0, _Source="PH01478U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" [0231.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a641a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0231.629] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b01800, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x39b01800, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01562U.BMP", cAlternateFileName="")) returned 1 [0231.629] wcscmp (_String1="PH01562U.BMP", _String2=".") returned 1 [0231.629] wcscmp (_String1="PH01562U.BMP", _String2="..") returned 1 [0231.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64228 [0231.630] wcscpy (in: _Dest=0x7a64228, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.630] wcscat (in: _Dest=0x7a64228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.630] wcscat (in: _Dest=0x7a64228, _Source="PH01562U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" [0231.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0231.735] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34eb6400, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34eb6400, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01607U.BMP", cAlternateFileName="")) returned 1 [0231.735] wcscmp (_String1="PH01607U.BMP", _String2=".") returned 1 [0231.735] wcscmp (_String1="PH01607U.BMP", _String2="..") returned 1 [0231.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81c18 [0231.735] wcscpy (in: _Dest=0x7b81c18, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.735] wcscat (in: _Dest=0x7b81c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.735] wcscat (in: _Dest=0x7b81c18, _Source="PH01607U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" [0231.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0231.736] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad8bc00, ftCreationTime.dwHighDateTime=0x1bd4ec4, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcad8bc00, ftLastWriteTime.dwHighDateTime=0x1bd4ec4, nFileSizeHigh=0x0, nFileSizeLow=0x9abe, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01931J.JPG", cAlternateFileName="")) returned 1 [0231.736] wcscmp (_String1="PH01931J.JPG", _String2=".") returned 1 [0231.736] wcscmp (_String1="PH01931J.JPG", _String2="..") returned 1 [0231.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81b90 [0231.736] wcscpy (in: _Dest=0x7b81b90, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.736] wcscat (in: _Dest=0x7b81b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.736] wcscat (in: _Dest=0x7b81b90, _Source="PH01931J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" [0231.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0231.738] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x451e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02028K.JPG", cAlternateFileName="")) returned 1 [0231.739] wcscmp (_String1="PH02028K.JPG", _String2=".") returned 1 [0231.739] wcscmp (_String1="PH02028K.JPG", _String2="..") returned 1 [0231.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81b08 [0231.739] wcscpy (in: _Dest=0x7b81b08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.739] wcscat (in: _Dest=0x7b81b08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.740] wcscat (in: _Dest=0x7b81b08, _Source="PH02028K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" [0231.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0231.741] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f763a00, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f763a00, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02039U.BMP", cAlternateFileName="")) returned 1 [0231.741] wcscmp (_String1="PH02039U.BMP", _String2=".") returned 1 [0231.741] wcscmp (_String1="PH02039U.BMP", _String2="..") returned 1 [0231.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81a80 [0231.741] wcscpy (in: _Dest=0x7b81a80, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.741] wcscat (in: _Dest=0x7b81a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.741] wcscat (in: _Dest=0x7b81a80, _Source="PH02039U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" [0231.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0231.742] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ab18600, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ab18600, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02040U.BMP", cAlternateFileName="")) returned 1 [0231.742] wcscmp (_String1="PH02040U.BMP", _String2=".") returned 1 [0231.742] wcscmp (_String1="PH02040U.BMP", _String2="..") returned 1 [0231.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b819f8 [0231.742] wcscpy (in: _Dest=0x7b819f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.742] wcscat (in: _Dest=0x7b819f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.742] wcscat (in: _Dest=0x7b819f8, _Source="PH02040U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" [0231.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b819f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0231.743] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8861b000, ftCreationTime.dwHighDateTime=0x1bd4ec1, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8861b000, ftLastWriteTime.dwHighDateTime=0x1bd4ec1, nFileSizeHigh=0x0, nFileSizeLow=0x6afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02053J.JPG", cAlternateFileName="")) returned 1 [0231.743] wcscmp (_String1="PH02053J.JPG", _String2=".") returned 1 [0231.743] wcscmp (_String1="PH02053J.JPG", _String2="..") returned 1 [0231.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81970 [0231.744] wcscpy (in: _Dest=0x7b81970, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.744] wcscat (in: _Dest=0x7b81970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.744] wcscat (in: _Dest=0x7b81970, _Source="PH02053J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" [0231.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0231.745] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15ecd200, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15ecd200, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02058U.BMP", cAlternateFileName="")) returned 1 [0231.745] wcscmp (_String1="PH02058U.BMP", _String2=".") returned 1 [0231.745] wcscmp (_String1="PH02058U.BMP", _String2="..") returned 1 [0231.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b818e8 [0231.745] wcscpy (in: _Dest=0x7b818e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.745] wcscat (in: _Dest=0x7b818e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.745] wcscat (in: _Dest=0x7b818e8, _Source="PH02058U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" [0231.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b818e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0231.747] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d500, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x8fbceab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a8d500, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02062U.BMP", cAlternateFileName="")) returned 1 [0231.747] wcscmp (_String1="PH02062U.BMP", _String2=".") returned 1 [0231.747] wcscmp (_String1="PH02062U.BMP", _String2="..") returned 1 [0231.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81860 [0231.747] wcscpy (in: _Dest=0x7b81860, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.747] wcscat (in: _Dest=0x7b81860, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.747] wcscat (in: _Dest=0x7b81860, _Source="PH02062U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" [0231.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0231.748] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e78ca00, ftCreationTime.dwHighDateTime=0x1bd4ec1, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e78ca00, ftLastWriteTime.dwHighDateTime=0x1bd4ec1, nFileSizeHigh=0x0, nFileSizeLow=0x7297, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02069J.JPG", cAlternateFileName="")) returned 1 [0231.748] wcscmp (_String1="PH02069J.JPG", _String2=".") returned 1 [0231.748] wcscmp (_String1="PH02069J.JPG", _String2="..") returned 1 [0231.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b817d8 [0231.748] wcscpy (in: _Dest=0x7b817d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.748] wcscat (in: _Dest=0x7b817d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.748] wcscat (in: _Dest=0x7b817d8, _Source="PH02069J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" [0231.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b817d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0231.749] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce42100, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfce42100, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02071U.BMP", cAlternateFileName="")) returned 1 [0231.749] wcscmp (_String1="PH02071U.BMP", _String2=".") returned 1 [0231.749] wcscmp (_String1="PH02071U.BMP", _String2="..") returned 1 [0231.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b81750 [0231.749] wcscpy (in: _Dest=0x7b81750, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.750] wcscat (in: _Dest=0x7b81750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.750] wcscat (in: _Dest=0x7b81750, _Source="PH02071U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" [0231.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0231.751] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb027e00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb027e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02074U.BMP", cAlternateFileName="")) returned 1 [0231.751] wcscmp (_String1="PH02074U.BMP", _String2=".") returned 1 [0231.751] wcscmp (_String1="PH02074U.BMP", _String2="..") returned 1 [0231.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7b814a8 [0231.751] wcscpy (in: _Dest=0x7b814a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.751] wcscat (in: _Dest=0x7b814a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.751] wcscat (in: _Dest=0x7b814a8, _Source="PH02074U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" [0231.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b814a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0231.752] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1791600, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f79650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1791600, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02208U.BMP", cAlternateFileName="")) returned 1 [0231.752] wcscmp (_String1="PH02208U.BMP", _String2=".") returned 1 [0231.752] wcscmp (_String1="PH02208U.BMP", _String2="..") returned 1 [0231.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a642b0 [0231.752] wcscpy (in: _Dest=0x7a642b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.752] wcscat (in: _Dest=0x7a642b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.752] wcscat (in: _Dest=0x7a642b0, _Source="PH02208U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" [0231.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a642b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0231.753] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe341da00, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe341da00, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02223U.BMP", cAlternateFileName="")) returned 1 [0231.753] wcscmp (_String1="PH02223U.BMP", _String2=".") returned 1 [0231.753] wcscmp (_String1="PH02223U.BMP", _String2="..") returned 1 [0231.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64338 [0231.753] wcscpy (in: _Dest=0x7a64338, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.754] wcscat (in: _Dest=0x7a64338, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.754] wcscat (in: _Dest=0x7a64338, _Source="PH02223U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" [0231.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0231.754] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60e0b00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc60e0b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02291U.BMP", cAlternateFileName="")) returned 1 [0231.754] wcscmp (_String1="PH02291U.BMP", _String2=".") returned 1 [0231.754] wcscmp (_String1="PH02291U.BMP", _String2="..") returned 1 [0231.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a643c0 [0231.755] wcscpy (in: _Dest=0x7a643c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.755] wcscat (in: _Dest=0x7a643c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.755] wcscat (in: _Dest=0x7a643c0, _Source="PH02291U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" [0231.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a643c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0231.756] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb5d000, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdb5d000, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02398U.BMP", cAlternateFileName="")) returned 1 [0231.756] wcscmp (_String1="PH02398U.BMP", _String2=".") returned 1 [0231.756] wcscmp (_String1="PH02398U.BMP", _String2="..") returned 1 [0231.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64448 [0231.756] wcscpy (in: _Dest=0x7a64448, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.756] wcscat (in: _Dest=0x7a64448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.756] wcscat (in: _Dest=0x7a64448, _Source="PH02398U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" [0231.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0231.757] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02412K.JPG", cAlternateFileName="")) returned 1 [0231.757] wcscmp (_String1="PH02412K.JPG", _String2=".") returned 1 [0231.757] wcscmp (_String1="PH02412K.JPG", _String2="..") returned 1 [0231.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a644d0 [0231.757] wcscpy (in: _Dest=0x7a644d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.757] wcscat (in: _Dest=0x7a644d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.757] wcscat (in: _Dest=0x7a644d0, _Source="PH02412K.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" [0231.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a644d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0231.758] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa30000, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa30000, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02417U.BMP", cAlternateFileName="")) returned 1 [0231.758] wcscmp (_String1="PH02417U.BMP", _String2=".") returned 1 [0231.758] wcscmp (_String1="PH02417U.BMP", _String2="..") returned 1 [0231.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64558 [0231.758] wcscpy (in: _Dest=0x7a64558, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.758] wcscat (in: _Dest=0x7a64558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.758] wcscat (in: _Dest=0x7a64558, _Source="PH02417U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" [0231.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0231.759] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ad1f00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4ad1f00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02466U.BMP", cAlternateFileName="")) returned 1 [0231.759] wcscmp (_String1="PH02466U.BMP", _String2=".") returned 1 [0231.759] wcscmp (_String1="PH02466U.BMP", _String2="..") returned 1 [0231.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a645e0 [0231.759] wcscpy (in: _Dest=0x7a645e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.759] wcscat (in: _Dest=0x7a645e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.759] wcscat (in: _Dest=0x7a645e0, _Source="PH02466U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" [0231.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a645e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0231.760] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd867700, ftCreationTime.dwHighDateTime=0x1bf1182, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd867700, ftLastWriteTime.dwHighDateTime=0x1bf1182, nFileSizeHigh=0x0, nFileSizeLow=0x48fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02470U.BMP", cAlternateFileName="")) returned 1 [0231.760] wcscmp (_String1="PH02470U.BMP", _String2=".") returned 1 [0231.760] wcscmp (_String1="PH02470U.BMP", _String2="..") returned 1 [0231.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64668 [0231.760] wcscpy (in: _Dest=0x7a64668, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.760] wcscat (in: _Dest=0x7a64668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.760] wcscat (in: _Dest=0x7a64668, _Source="PH02470U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" [0231.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0231.761] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd59b00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8cd59b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02503U.BMP", cAlternateFileName="")) returned 1 [0231.761] wcscmp (_String1="PH02503U.BMP", _String2=".") returned 1 [0231.762] wcscmp (_String1="PH02503U.BMP", _String2="..") returned 1 [0231.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a646f0 [0231.762] wcscpy (in: _Dest=0x7a646f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.762] wcscat (in: _Dest=0x7a646f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.762] wcscat (in: _Dest=0x7a646f0, _Source="PH02503U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" [0231.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a646f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0231.762] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18e6c300, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18e6c300, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x8499, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02567J.JPG", cAlternateFileName="")) returned 1 [0231.763] wcscmp (_String1="PH02567J.JPG", _String2=".") returned 1 [0231.763] wcscmp (_String1="PH02567J.JPG", _String2="..") returned 1 [0231.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64778 [0231.763] wcscpy (in: _Dest=0x7a64778, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.763] wcscat (in: _Dest=0x7a64778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.763] wcscat (in: _Dest=0x7a64778, _Source="PH02567J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" [0231.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0231.764] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c77e00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92c77e00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x639b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02736G.GIF", cAlternateFileName="")) returned 1 [0231.764] wcscmp (_String1="PH02736G.GIF", _String2=".") returned 1 [0231.764] wcscmp (_String1="PH02736G.GIF", _String2="..") returned 1 [0231.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64800 [0231.764] wcscpy (in: _Dest=0x7a64800, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.764] wcscat (in: _Dest=0x7a64800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.764] wcscat (in: _Dest=0x7a64800, _Source="PH02736G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" [0231.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0231.765] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2781aa00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fbf4c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2781aa00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02736U.BMP", cAlternateFileName="")) returned 1 [0231.765] wcscmp (_String1="PH02736U.BMP", _String2=".") returned 1 [0231.765] wcscmp (_String1="PH02736U.BMP", _String2="..") returned 1 [0231.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64888 [0231.765] wcscpy (in: _Dest=0x7a64888, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.765] wcscat (in: _Dest=0x7a64888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.765] wcscat (in: _Dest=0x7a64888, _Source="PH02736U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" [0231.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0231.766] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df84200, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1df84200, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x8118, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02738U.BMP", cAlternateFileName="")) returned 1 [0231.766] wcscmp (_String1="PH02738U.BMP", _String2=".") returned 1 [0231.766] wcscmp (_String1="PH02738U.BMP", _String2="..") returned 1 [0231.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64910 [0231.766] wcscpy (in: _Dest=0x7a64910, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.766] wcscat (in: _Dest=0x7a64910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.766] wcscat (in: _Dest=0x7a64910, _Source="PH02738U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" [0231.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0231.767] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33f700, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f33f700, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x5f2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02740G.GIF", cAlternateFileName="")) returned 1 [0231.767] wcscmp (_String1="PH02740G.GIF", _String2=".") returned 1 [0231.767] wcscmp (_String1="PH02740G.GIF", _String2="..") returned 1 [0231.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64998 [0231.767] wcscpy (in: _Dest=0x7a64998, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.767] wcscat (in: _Dest=0x7a64998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.767] wcscat (in: _Dest=0x7a64998, _Source="PH02740G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" [0231.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0231.768] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b44500, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b44500, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02740U.BMP", cAlternateFileName="")) returned 1 [0231.768] wcscmp (_String1="PH02740U.BMP", _String2=".") returned 1 [0231.768] wcscmp (_String1="PH02740U.BMP", _String2="..") returned 1 [0231.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64a20 [0231.768] wcscpy (in: _Dest=0x7a64a20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.768] wcscat (in: _Dest=0x7a64a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.768] wcscat (in: _Dest=0x7a64a20, _Source="PH02740U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" [0231.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0231.769] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6f4300, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a6f4300, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x50a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02742G.GIF", cAlternateFileName="")) returned 1 [0231.769] wcscmp (_String1="PH02742G.GIF", _String2=".") returned 1 [0231.769] wcscmp (_String1="PH02742G.GIF", _String2="..") returned 1 [0231.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64aa8 [0231.769] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.769] wcscat (in: _Dest=0x7a64aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.769] wcscat (in: _Dest=0x7a64aa8, _Source="PH02742G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" [0231.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0231.771] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d3700, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28d3700, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02742U.BMP", cAlternateFileName="")) returned 1 [0231.771] wcscmp (_String1="PH02742U.BMP", _String2=".") returned 1 [0231.771] wcscmp (_String1="PH02742U.BMP", _String2="..") returned 1 [0231.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64b30 [0231.771] wcscpy (in: _Dest=0x7a64b30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.771] wcscat (in: _Dest=0x7a64b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.771] wcscat (in: _Dest=0x7a64b30, _Source="PH02742U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" [0231.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0231.822] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbbc00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86dbbc00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x6d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02743G.GIF", cAlternateFileName="")) returned 1 [0231.822] wcscmp (_String1="PH02743G.GIF", _String2=".") returned 1 [0231.822] wcscmp (_String1="PH02743G.GIF", _String2="..") returned 1 [0231.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64bb8 [0231.822] wcscpy (in: _Dest=0x7a64bb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.822] wcscat (in: _Dest=0x7a64bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.822] wcscat (in: _Dest=0x7a64bb8, _Source="PH02743G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" [0231.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0231.823] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79becd00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79becd00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x5e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02746G.GIF", cAlternateFileName="")) returned 1 [0231.823] wcscmp (_String1="PH02746G.GIF", _String2=".") returned 1 [0231.823] wcscmp (_String1="PH02746G.GIF", _String2="..") returned 1 [0231.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64c40 [0231.824] wcscpy (in: _Dest=0x7a64c40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.824] wcscat (in: _Dest=0x7a64c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.824] wcscat (in: _Dest=0x7a64c40, _Source="PH02746G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" [0231.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0231.825] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa34fc00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa34fc00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02746U.BMP", cAlternateFileName="")) returned 1 [0231.825] wcscmp (_String1="PH02746U.BMP", _String2=".") returned 1 [0231.825] wcscmp (_String1="PH02746U.BMP", _String2="..") returned 1 [0231.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64cc8 [0231.825] wcscpy (in: _Dest=0x7a64cc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.825] wcscat (in: _Dest=0x7a64cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.825] wcscat (in: _Dest=0x7a64cc8, _Source="PH02746U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" [0231.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0231.826] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7297bf00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7297bf00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x6090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02748G.GIF", cAlternateFileName="")) returned 1 [0231.826] wcscmp (_String1="PH02748G.GIF", _String2=".") returned 1 [0231.826] wcscmp (_String1="PH02748G.GIF", _String2="..") returned 1 [0231.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64d50 [0231.826] wcscpy (in: _Dest=0x7a64d50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.826] wcscat (in: _Dest=0x7a64d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.826] wcscat (in: _Dest=0x7a64d50, _Source="PH02748G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" [0231.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0231.827] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1dcc100, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1dcc100, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02748U.BMP", cAlternateFileName="")) returned 1 [0231.827] wcscmp (_String1="PH02748U.BMP", _String2=".") returned 1 [0231.827] wcscmp (_String1="PH02748U.BMP", _String2="..") returned 1 [0231.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64dd8 [0231.827] wcscpy (in: _Dest=0x7a64dd8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.827] wcscat (in: _Dest=0x7a64dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.827] wcscat (in: _Dest=0x7a64dd8, _Source="PH02748U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" [0231.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0231.828] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x690e5700, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x690e5700, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x8795, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02749G.GIF", cAlternateFileName="")) returned 1 [0231.828] wcscmp (_String1="PH02749G.GIF", _String2=".") returned 1 [0231.828] wcscmp (_String1="PH02749G.GIF", _String2="..") returned 1 [0231.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64e60 [0231.828] wcscpy (in: _Dest=0x7a64e60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.828] wcscat (in: _Dest=0x7a64e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.828] wcscat (in: _Dest=0x7a64e60, _Source="PH02749G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" [0231.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0231.829] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb366a00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb366a00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x8118, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02749U.BMP", cAlternateFileName="")) returned 1 [0231.829] wcscmp (_String1="PH02749U.BMP", _String2=".") returned 1 [0231.829] wcscmp (_String1="PH02749U.BMP", _String2="..") returned 1 [0231.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64ee8 [0231.830] wcscpy (in: _Dest=0x7a64ee8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.830] wcscat (in: _Dest=0x7a64ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.830] wcscat (in: _Dest=0x7a64ee8, _Source="PH02749U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" [0231.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0231.831] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x657ad000, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x657ad000, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x64c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02750G.GIF", cAlternateFileName="")) returned 1 [0231.831] wcscmp (_String1="PH02750G.GIF", _String2=".") returned 1 [0231.831] wcscmp (_String1="PH02750G.GIF", _String2="..") returned 1 [0231.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64f70 [0231.831] wcscpy (in: _Dest=0x7a64f70, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.831] wcscat (in: _Dest=0x7a64f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.831] wcscat (in: _Dest=0x7a64f70, _Source="PH02750G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" [0231.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc8 [0231.832] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5918100, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5918100, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x16f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02750U.BMP", cAlternateFileName="")) returned 1 [0231.938] wcscmp (_String1="PH02750U.BMP", _String2=".") returned 1 [0231.938] wcscmp (_String1="PH02750U.BMP", _String2="..") returned 1 [0231.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba4c8 [0231.939] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.939] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.939] wcscat (in: _Dest=0x3eba4c8, _Source="PH02750U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" [0231.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0231.940] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f84ef00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f84ef00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0xc382, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02752G.GIF", cAlternateFileName="")) returned 1 [0231.940] wcscmp (_String1="PH02752G.GIF", _String2=".") returned 1 [0231.940] wcscmp (_String1="PH02752G.GIF", _String2="..") returned 1 [0231.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0231.940] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.940] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.940] wcscat (in: _Dest=0x3eba220, _Source="PH02752G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" [0231.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0231.941] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dab7700, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1dab7700, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02752U.BMP", cAlternateFileName="")) returned 1 [0231.941] wcscmp (_String1="PH02752U.BMP", _String2=".") returned 1 [0231.941] wcscmp (_String1="PH02752U.BMP", _String2="..") returned 1 [0231.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9120 [0231.942] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.942] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.942] wcscat (in: _Dest=0x3eb9120, _Source="PH02752U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" [0231.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0231.943] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821b0600, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81f9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x821b0600, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02753U.BMP", cAlternateFileName="")) returned 1 [0231.943] wcscmp (_String1="PH02753U.BMP", _String2=".") returned 1 [0231.943] wcscmp (_String1="PH02753U.BMP", _String2="..") returned 1 [0231.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0231.943] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.943] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.943] wcscat (in: _Dest=0x3eb9b38, _Source="PH02753U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" [0231.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0231.944] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c2cb00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79c2cb00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02754U.BMP", cAlternateFileName="")) returned 1 [0231.944] wcscmp (_String1="PH02754U.BMP", _String2=".") returned 1 [0231.944] wcscmp (_String1="PH02754U.BMP", _String2="..") returned 1 [0231.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0231.944] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.944] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.944] wcscat (in: _Dest=0x3eb9ef0, _Source="PH02754U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" [0231.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0231.945] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a438200, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a438200, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02755U.BMP", cAlternateFileName="")) returned 1 [0231.945] wcscmp (_String1="PH02755U.BMP", _String2=".") returned 1 [0231.945] wcscmp (_String1="PH02755U.BMP", _String2="..") returned 1 [0231.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a64ff8 [0231.945] wcscpy (in: _Dest=0x7a64ff8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.945] wcscat (in: _Dest=0x7a64ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.945] wcscat (in: _Dest=0x7a64ff8, _Source="PH02755U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" [0231.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0231.946] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60ba1a00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc1ad70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60ba1a00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x30408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02756U.BMP", cAlternateFileName="")) returned 1 [0231.946] wcscmp (_String1="PH02756U.BMP", _String2=".") returned 1 [0231.947] wcscmp (_String1="PH02756U.BMP", _String2="..") returned 1 [0231.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65080 [0231.947] wcscpy (in: _Dest=0x7a65080, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.947] wcscat (in: _Dest=0x7a65080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.947] wcscat (in: _Dest=0x7a65080, _Source="PH02756U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" [0231.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0231.948] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x539d2b00, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x539d2b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x30408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02757U.BMP", cAlternateFileName="")) returned 1 [0231.948] wcscmp (_String1="PH02757U.BMP", _String2=".") returned 1 [0231.948] wcscmp (_String1="PH02757U.BMP", _String2="..") returned 1 [0231.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65108 [0231.948] wcscpy (in: _Dest=0x7a65108, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.948] wcscat (in: _Dest=0x7a65108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.948] wcscat (in: _Dest=0x7a65108, _Source="PH02757U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" [0231.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0231.949] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf6d400, ftCreationTime.dwHighDateTime=0x1bd4eb8, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3cf6d400, ftLastWriteTime.dwHighDateTime=0x1bd4eb8, nFileSizeHigh=0x0, nFileSizeLow=0x307f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02758U.BMP", cAlternateFileName="")) returned 1 [0231.949] wcscmp (_String1="PH02758U.BMP", _String2=".") returned 1 [0231.949] wcscmp (_String1="PH02758U.BMP", _String2="..") returned 1 [0231.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65190 [0231.949] wcscpy (in: _Dest=0x7a65190, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.949] wcscat (in: _Dest=0x7a65190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.949] wcscat (in: _Dest=0x7a65190, _Source="PH02758U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" [0231.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0231.950] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8578600, ftCreationTime.dwHighDateTime=0x1bd4eb6, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8578600, ftLastWriteTime.dwHighDateTime=0x1bd4eb6, nFileSizeHigh=0x0, nFileSizeLow=0xa0d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02759J.JPG", cAlternateFileName="")) returned 1 [0231.950] wcscmp (_String1="PH02759J.JPG", _String2=".") returned 1 [0231.950] wcscmp (_String1="PH02759J.JPG", _String2="..") returned 1 [0231.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65218 [0231.950] wcscpy (in: _Dest=0x7a65218, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.950] wcscat (in: _Dest=0x7a65218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.950] wcscat (in: _Dest=0x7a65218, _Source="PH02759J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" [0231.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0231.951] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e51b00, ftCreationTime.dwHighDateTime=0x1bd4eb5, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91e51b00, ftLastWriteTime.dwHighDateTime=0x1bd4eb5, nFileSizeHigh=0x0, nFileSizeLow=0xc5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02810J.JPG", cAlternateFileName="")) returned 1 [0231.951] wcscmp (_String1="PH02810J.JPG", _String2=".") returned 1 [0231.951] wcscmp (_String1="PH02810J.JPG", _String2="..") returned 1 [0231.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a652a0 [0231.951] wcscpy (in: _Dest=0x7a652a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.951] wcscat (in: _Dest=0x7a652a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.951] wcscat (in: _Dest=0x7a652a0, _Source="PH02810J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" [0231.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a652a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0231.953] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164d5900, ftCreationTime.dwHighDateTime=0x1bd4c7e, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x164d5900, ftLastWriteTime.dwHighDateTime=0x1bd4c7e, nFileSizeHigh=0x0, nFileSizeLow=0xf438, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02829J.JPG", cAlternateFileName="")) returned 1 [0231.953] wcscmp (_String1="PH02829J.JPG", _String2=".") returned 1 [0231.953] wcscmp (_String1="PH02829J.JPG", _String2="..") returned 1 [0231.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65328 [0231.954] wcscpy (in: _Dest=0x7a65328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.954] wcscat (in: _Dest=0x7a65328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.954] wcscat (in: _Dest=0x7a65328, _Source="PH02829J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" [0231.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0231.955] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6c2600, ftCreationTime.dwHighDateTime=0x1bd4ec3, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb6c2600, ftLastWriteTime.dwHighDateTime=0x1bd4ec3, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02845G.GIF", cAlternateFileName="")) returned 1 [0231.955] wcscmp (_String1="PH02845G.GIF", _String2=".") returned 1 [0231.955] wcscmp (_String1="PH02845G.GIF", _String2="..") returned 1 [0231.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a653b0 [0231.955] wcscpy (in: _Dest=0x7a653b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.955] wcscat (in: _Dest=0x7a653b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.955] wcscat (in: _Dest=0x7a653b0, _Source="PH02845G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" [0231.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a653b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0231.956] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02897J.JPG", cAlternateFileName="")) returned 1 [0231.956] wcscmp (_String1="PH02897J.JPG", _String2=".") returned 1 [0231.956] wcscmp (_String1="PH02897J.JPG", _String2="..") returned 1 [0231.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65438 [0231.956] wcscpy (in: _Dest=0x7a65438, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.957] wcscat (in: _Dest=0x7a65438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.957] wcscat (in: _Dest=0x7a65438, _Source="PH02897J.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" [0231.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0231.958] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762b4600, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762b4600, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x3c76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03011U.BMP", cAlternateFileName="")) returned 1 [0231.958] wcscmp (_String1="PH03011U.BMP", _String2=".") returned 1 [0231.958] wcscmp (_String1="PH03011U.BMP", _String2="..") returned 1 [0231.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a654c0 [0231.958] wcscpy (in: _Dest=0x7a654c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.958] wcscat (in: _Dest=0x7a654c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.958] wcscat (in: _Dest=0x7a654c0, _Source="PH03011U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" [0231.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a654c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0231.959] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a907c00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a907c00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03012U.BMP", cAlternateFileName="")) returned 1 [0231.959] wcscmp (_String1="PH03012U.BMP", _String2=".") returned 1 [0231.959] wcscmp (_String1="PH03012U.BMP", _String2="..") returned 1 [0231.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65548 [0231.959] wcscpy (in: _Dest=0x7a65548, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.959] wcscat (in: _Dest=0x7a65548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.959] wcscat (in: _Dest=0x7a65548, _Source="PH03012U.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" [0231.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0231.960] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5982da00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5982da00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x49d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03014_.GIF", cAlternateFileName="")) returned 1 [0231.961] wcscmp (_String1="PH03014_.GIF", _String2=".") returned 1 [0231.961] wcscmp (_String1="PH03014_.GIF", _String2="..") returned 1 [0231.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a655d0 [0231.961] wcscpy (in: _Dest=0x7a655d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.961] wcscat (in: _Dest=0x7a655d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.961] wcscat (in: _Dest=0x7a655d0, _Source="PH03014_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" [0231.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a655d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0231.962] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x78af, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03041I.JPG", cAlternateFileName="")) returned 1 [0231.962] wcscmp (_String1="PH03041I.JPG", _String2=".") returned 1 [0231.962] wcscmp (_String1="PH03041I.JPG", _String2="..") returned 1 [0231.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65658 [0231.962] wcscpy (in: _Dest=0x7a65658, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.962] wcscat (in: _Dest=0x7a65658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.962] wcscat (in: _Dest=0x7a65658, _Source="PH03041I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" [0231.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0231.964] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7450, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03143I.JPG", cAlternateFileName="")) returned 1 [0231.964] wcscmp (_String1="PH03143I.JPG", _String2=".") returned 1 [0231.964] wcscmp (_String1="PH03143I.JPG", _String2="..") returned 1 [0231.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a656e0 [0231.964] wcscpy (in: _Dest=0x7a656e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.964] wcscat (in: _Dest=0x7a656e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.964] wcscat (in: _Dest=0x7a656e0, _Source="PH03143I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" [0231.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a656e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0231.965] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc40ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa343, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03205I.JPG", cAlternateFileName="")) returned 1 [0231.965] wcscmp (_String1="PH03205I.JPG", _String2=".") returned 1 [0231.965] wcscmp (_String1="PH03205I.JPG", _String2="..") returned 1 [0231.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65768 [0231.965] wcscpy (in: _Dest=0x7a65768, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.965] wcscat (in: _Dest=0x7a65768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.965] wcscat (in: _Dest=0x7a65768, _Source="PH03205I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" [0231.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0231.966] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xa445, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03224I.JPG", cAlternateFileName="")) returned 1 [0231.966] wcscmp (_String1="PH03224I.JPG", _String2=".") returned 1 [0231.966] wcscmp (_String1="PH03224I.JPG", _String2="..") returned 1 [0231.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a657f0 [0231.966] wcscpy (in: _Dest=0x7a657f0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.966] wcscat (in: _Dest=0x7a657f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.966] wcscat (in: _Dest=0x7a657f0, _Source="PH03224I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" [0231.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a657f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0231.967] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03379I.JPG", cAlternateFileName="")) returned 1 [0231.967] wcscmp (_String1="PH03379I.JPG", _String2=".") returned 1 [0231.967] wcscmp (_String1="PH03379I.JPG", _String2="..") returned 1 [0231.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65878 [0231.968] wcscpy (in: _Dest=0x7a65878, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.968] wcscat (in: _Dest=0x7a65878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.968] wcscat (in: _Dest=0x7a65878, _Source="PH03379I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" [0231.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0231.969] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x321f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03380I.JPG", cAlternateFileName="")) returned 1 [0231.969] wcscmp (_String1="PH03380I.JPG", _String2=".") returned 1 [0231.969] wcscmp (_String1="PH03380I.JPG", _String2="..") returned 1 [0231.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65900 [0231.969] wcscpy (in: _Dest=0x7a65900, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.969] wcscat (in: _Dest=0x7a65900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.969] wcscat (in: _Dest=0x7a65900, _Source="PH03380I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" [0231.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0231.970] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xbdae, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03425I.JPG", cAlternateFileName="")) returned 1 [0231.970] wcscmp (_String1="PH03425I.JPG", _String2=".") returned 1 [0231.970] wcscmp (_String1="PH03425I.JPG", _String2="..") returned 1 [0231.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65988 [0231.970] wcscpy (in: _Dest=0x7a65988, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.970] wcscat (in: _Dest=0x7a65988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.970] wcscat (in: _Dest=0x7a65988, _Source="PH03425I.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" [0231.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0231.972] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRRT.WMF", cAlternateFileName="")) returned 1 [0231.972] wcscmp (_String1="PRRT.WMF", _String2=".") returned 1 [0231.972] wcscmp (_String1="PRRT.WMF", _String2="..") returned 1 [0231.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19418 [0231.972] wcscpy (in: _Dest=0x3e19418, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.972] wcscat (in: _Dest=0x3e19418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.972] wcscat (in: _Dest=0x3e19418, _Source="PRRT.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" [0231.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0231.973] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb217e000, ftCreationTime.dwHighDateTime=0x1bd7922, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb217e000, ftLastWriteTime.dwHighDateTime=0x1bd7922, nFileSizeHigh=0x0, nFileSizeLow=0x7aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRRTINST.WMF", cAlternateFileName="")) returned 1 [0231.973] wcscmp (_String1="PRRTINST.WMF", _String2=".") returned 1 [0231.973] wcscmp (_String1="PRRTINST.WMF", _String2="..") returned 1 [0231.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65a10 [0231.973] wcscpy (in: _Dest=0x7a65a10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0231.973] wcscat (in: _Dest=0x7a65a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0231.973] wcscat (in: _Dest=0x7a65a10, _Source="PRRTINST.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" [0231.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0232.016] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRETRO.WMF", cAlternateFileName="")) returned 1 [0232.016] wcscmp (_String1="PSRETRO.WMF", _String2=".") returned 1 [0232.016] wcscmp (_String1="PSRETRO.WMF", _String2="..") returned 1 [0232.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a65a98 [0232.016] wcscpy (in: _Dest=0x7a65a98, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.016] wcscat (in: _Dest=0x7a65a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.016] wcscat (in: _Dest=0x7a65a98, _Source="PSRETRO.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" [0232.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0232.017] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSSKETLG.WMF", cAlternateFileName="")) returned 1 [0232.017] wcscmp (_String1="PSSKETLG.WMF", _String2=".") returned 1 [0232.017] wcscmp (_String1="PSSKETLG.WMF", _String2="..") returned 1 [0232.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65b20 [0232.018] wcscpy (in: _Dest=0x7a65b20, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.018] wcscat (in: _Dest=0x7a65b20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.018] wcscat (in: _Dest=0x7a65b20, _Source="PSSKETLG.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" [0232.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0232.019] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x776, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSSKETSM.WMF", cAlternateFileName="")) returned 1 [0232.019] wcscmp (_String1="PSSKETSM.WMF", _String2=".") returned 1 [0232.019] wcscmp (_String1="PSSKETSM.WMF", _String2="..") returned 1 [0232.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65ba8 [0232.019] wcscpy (in: _Dest=0x7a65ba8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.019] wcscat (in: _Dest=0x7a65ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.019] wcscat (in: _Dest=0x7a65ba8, _Source="PSSKETSM.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" [0232.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0232.021] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xb12, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSWAVY.WMF", cAlternateFileName="")) returned 1 [0232.021] wcscmp (_String1="PSWAVY.WMF", _String2=".") returned 1 [0232.021] wcscmp (_String1="PSWAVY.WMF", _String2="..") returned 1 [0232.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a65c30 [0232.021] wcscpy (in: _Dest=0x7a65c30, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.021] wcscat (in: _Dest=0x7a65c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.021] wcscat (in: _Dest=0x7a65c30, _Source="PSWAVY.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" [0232.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0232.022] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="RE00006_.WMF", cAlternateFileName="")) returned 1 [0232.022] wcscmp (_String1="RE00006_.WMF", _String2=".") returned 1 [0232.022] wcscmp (_String1="RE00006_.WMF", _String2="..") returned 1 [0232.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65cb8 [0232.022] wcscpy (in: _Dest=0x7a65cb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.023] wcscat (in: _Dest=0x7a65cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.023] wcscat (in: _Dest=0x7a65cb8, _Source="RE00006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" [0232.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0232.026] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7e9000, ftCreationTime.dwHighDateTime=0x1bd037c, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd7e9000, ftLastWriteTime.dwHighDateTime=0x1bd037c, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECYCLE.WMF", cAlternateFileName="")) returned 1 [0232.026] wcscmp (_String1="RECYCLE.WMF", _String2=".") returned 1 [0232.026] wcscmp (_String1="RECYCLE.WMF", _String2="..") returned 1 [0232.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a65d40 [0232.026] wcscpy (in: _Dest=0x7a65d40, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.026] wcscat (in: _Dest=0x7a65d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.027] wcscat (in: _Dest=0x7a65d40, _Source="RECYCLE.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" [0232.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0232.028] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x175f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_01.MID", cAlternateFileName="")) returned 1 [0232.028] wcscmp (_String1="ROAD_01.MID", _String2=".") returned 1 [0232.028] wcscmp (_String1="ROAD_01.MID", _String2="..") returned 1 [0232.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a65dc8 [0232.028] wcscpy (in: _Dest=0x7a65dc8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.028] wcscat (in: _Dest=0x7a65dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.028] wcscat (in: _Dest=0x7a65dc8, _Source="ROAD_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" [0232.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0232.029] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x278a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAFRI_01.MID", cAlternateFileName="")) returned 1 [0232.029] wcscmp (_String1="SAFRI_01.MID", _String2=".") returned 1 [0232.030] wcscmp (_String1="SAFRI_01.MID", _String2="..") returned 1 [0232.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65e50 [0232.030] wcscpy (in: _Dest=0x7a65e50, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.030] wcscat (in: _Dest=0x7a65e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.030] wcscat (in: _Dest=0x7a65e50, _Source="SAFRI_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" [0232.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0232.031] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x13c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHOL_02.MID", cAlternateFileName="")) returned 1 [0232.852] wcscmp (_String1="SCHOL_02.MID", _String2=".") returned 1 [0232.852] wcscmp (_String1="SCHOL_02.MID", _String2="..") returned 1 [0232.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65ed8 [0232.853] wcscpy (in: _Dest=0x7a65ed8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.853] wcscat (in: _Dest=0x7a65ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.853] wcscat (in: _Dest=0x7a65ed8, _Source="SCHOL_02.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" [0232.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0232.854] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x18f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOW_01.MID", cAlternateFileName="")) returned 1 [0232.854] wcscmp (_String1="SHOW_01.MID", _String2=".") returned 1 [0232.854] wcscmp (_String1="SHOW_01.MID", _String2="..") returned 1 [0232.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a65f60 [0232.855] wcscpy (in: _Dest=0x7a65f60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.855] wcscat (in: _Dest=0x7a65f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.855] wcscat (in: _Dest=0x7a65f60, _Source="SHOW_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" [0232.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0232.856] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c7200, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d0c7200, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x2a0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00256_.WMF", cAlternateFileName="")) returned 1 [0232.856] wcscmp (_String1="SL00256_.WMF", _String2=".") returned 1 [0232.856] wcscmp (_String1="SL00256_.WMF", _String2="..") returned 1 [0232.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65fe8 [0232.856] wcscpy (in: _Dest=0x7a65fe8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.856] wcscat (in: _Dest=0x7a65fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.856] wcscat (in: _Dest=0x7a65fe8, _Source="SL00256_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" [0232.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0232.858] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3978eb00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3978eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x7ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00260_.WMF", cAlternateFileName="")) returned 1 [0232.858] wcscmp (_String1="SL00260_.WMF", _String2=".") returned 1 [0232.858] wcscmp (_String1="SL00260_.WMF", _String2="..") returned 1 [0232.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe020 [0232.858] wcscpy (in: _Dest=0x7cbe020, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.858] wcscat (in: _Dest=0x7cbe020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.858] wcscat (in: _Dest=0x7cbe020, _Source="SL00260_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" [0232.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0232.860] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91b9b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc91b9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00268_.WMF", cAlternateFileName="")) returned 1 [0232.860] wcscmp (_String1="SL00268_.WMF", _String2=".") returned 1 [0232.860] wcscmp (_String1="SL00268_.WMF", _String2="..") returned 1 [0232.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe0a8 [0232.860] wcscpy (in: _Dest=0x7cbe0a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.860] wcscat (in: _Dest=0x7cbe0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.860] wcscat (in: _Dest=0x7cbe0a8, _Source="SL00268_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" [0232.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0232.862] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cfa7500, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4cfa7500, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x1dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00286_.WMF", cAlternateFileName="")) returned 1 [0232.862] wcscmp (_String1="SL00286_.WMF", _String2=".") returned 1 [0232.862] wcscmp (_String1="SL00286_.WMF", _String2="..") returned 1 [0232.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe130 [0232.862] wcscpy (in: _Dest=0x7cbe130, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.862] wcscat (in: _Dest=0x7cbe130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.862] wcscat (in: _Dest=0x7cbe130, _Source="SL00286_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" [0232.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0232.863] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde04f00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcde04f00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1268, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00298_.WMF", cAlternateFileName="")) returned 1 [0232.863] wcscmp (_String1="SL00298_.WMF", _String2=".") returned 1 [0232.863] wcscmp (_String1="SL00298_.WMF", _String2="..") returned 1 [0232.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe1b8 [0232.864] wcscpy (in: _Dest=0x7cbe1b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.864] wcscat (in: _Dest=0x7cbe1b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.864] wcscat (in: _Dest=0x7cbe1b8, _Source="SL00298_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" [0232.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0232.865] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd0af00, ftCreationTime.dwHighDateTime=0x1bd4b7f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dd0af00, ftLastWriteTime.dwHighDateTime=0x1bd4b7f, nFileSizeHigh=0x0, nFileSizeLow=0x20e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00308_.WMF", cAlternateFileName="")) returned 1 [0232.865] wcscmp (_String1="SL00308_.WMF", _String2=".") returned 1 [0232.865] wcscmp (_String1="SL00308_.WMF", _String2="..") returned 1 [0232.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe240 [0232.865] wcscpy (in: _Dest=0x7cbe240, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.866] wcscat (in: _Dest=0x7cbe240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.866] wcscat (in: _Dest=0x7cbe240, _Source="SL00308_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" [0232.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0232.867] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164b3d00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x164b3d00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00345_.WMF", cAlternateFileName="")) returned 1 [0232.867] wcscmp (_String1="SL00345_.WMF", _String2=".") returned 1 [0232.867] wcscmp (_String1="SL00345_.WMF", _String2="..") returned 1 [0232.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe2c8 [0232.867] wcscpy (in: _Dest=0x7cbe2c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.867] wcscat (in: _Dest=0x7cbe2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.867] wcscat (in: _Dest=0x7cbe2c8, _Source="SL00345_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" [0232.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0232.869] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe0ce00, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefe0ce00, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00452_.WMF", cAlternateFileName="")) returned 1 [0232.869] wcscmp (_String1="SL00452_.WMF", _String2=".") returned 1 [0232.869] wcscmp (_String1="SL00452_.WMF", _String2="..") returned 1 [0232.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe350 [0232.869] wcscpy (in: _Dest=0x7cbe350, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.870] wcscat (in: _Dest=0x7cbe350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.870] wcscat (in: _Dest=0x7cbe350, _Source="SL00452_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" [0232.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0232.871] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5263900, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5263900, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x1db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00712_.WMF", cAlternateFileName="")) returned 1 [0232.871] wcscmp (_String1="SL00712_.WMF", _String2=".") returned 1 [0232.871] wcscmp (_String1="SL00712_.WMF", _String2="..") returned 1 [0232.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe3d8 [0232.871] wcscpy (in: _Dest=0x7cbe3d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.871] wcscat (in: _Dest=0x7cbe3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.871] wcscat (in: _Dest=0x7cbe3d8, _Source="SL00712_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" [0232.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0232.873] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0b1d00, ftCreationTime.dwHighDateTime=0x1bd4c60, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad0b1d00, ftLastWriteTime.dwHighDateTime=0x1bd4c60, nFileSizeHigh=0x0, nFileSizeLow=0xcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01040_.WMF", cAlternateFileName="")) returned 1 [0232.873] wcscmp (_String1="SL01040_.WMF", _String2=".") returned 1 [0232.873] wcscmp (_String1="SL01040_.WMF", _String2="..") returned 1 [0232.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe460 [0232.873] wcscpy (in: _Dest=0x7cbe460, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.873] wcscat (in: _Dest=0x7cbe460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.873] wcscat (in: _Dest=0x7cbe460, _Source="SL01040_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" [0232.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0232.875] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa8c300, ftCreationTime.dwHighDateTime=0x1bd4c60, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa8c300, ftLastWriteTime.dwHighDateTime=0x1bd4c60, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01041_.WMF", cAlternateFileName="")) returned 1 [0232.875] wcscmp (_String1="SL01041_.WMF", _String2=".") returned 1 [0232.875] wcscmp (_String1="SL01041_.WMF", _String2="..") returned 1 [0232.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe4e8 [0232.875] wcscpy (in: _Dest=0x7cbe4e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.875] wcscat (in: _Dest=0x7cbe4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.875] wcscat (in: _Dest=0x7cbe4e8, _Source="SL01041_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" [0232.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0232.877] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x120c4600, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x120c4600, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x1b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01394_.WMF", cAlternateFileName="")) returned 1 [0232.877] wcscmp (_String1="SL01394_.WMF", _String2=".") returned 1 [0232.877] wcscmp (_String1="SL01394_.WMF", _String2="..") returned 1 [0232.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe570 [0232.877] wcscpy (in: _Dest=0x7cbe570, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.877] wcscat (in: _Dest=0x7cbe570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.877] wcscat (in: _Dest=0x7cbe570, _Source="SL01394_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" [0232.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0232.878] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b40b00, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b40b00, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01395_.WMF", cAlternateFileName="")) returned 1 [0232.878] wcscmp (_String1="SL01395_.WMF", _String2=".") returned 1 [0232.878] wcscmp (_String1="SL01395_.WMF", _String2="..") returned 1 [0232.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe5f8 [0232.879] wcscpy (in: _Dest=0x7cbe5f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.879] wcscat (in: _Dest=0x7cbe5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.879] wcscat (in: _Dest=0x7cbe5f8, _Source="SL01395_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" [0232.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0232.880] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01565_.WMF", cAlternateFileName="")) returned 1 [0232.880] wcscmp (_String1="SL01565_.WMF", _String2=".") returned 1 [0232.880] wcscmp (_String1="SL01565_.WMF", _String2="..") returned 1 [0232.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe680 [0232.880] wcscpy (in: _Dest=0x7cbe680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.880] wcscat (in: _Dest=0x7cbe680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.880] wcscat (in: _Dest=0x7cbe680, _Source="SL01565_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" [0232.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0232.882] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ddbc400, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5ddbc400, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x36aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00017_.WMF", cAlternateFileName="")) returned 1 [0232.882] wcscmp (_String1="SO00017_.WMF", _String2=".") returned 1 [0232.882] wcscmp (_String1="SO00017_.WMF", _String2="..") returned 1 [0232.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe708 [0232.882] wcscpy (in: _Dest=0x7cbe708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.883] wcscat (in: _Dest=0x7cbe708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.883] wcscat (in: _Dest=0x7cbe708, _Source="SO00017_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" [0232.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0232.884] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5caa9700, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5caa9700, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x32f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00018_.WMF", cAlternateFileName="")) returned 1 [0232.884] wcscmp (_String1="SO00018_.WMF", _String2=".") returned 1 [0232.884] wcscmp (_String1="SO00018_.WMF", _String2="..") returned 1 [0232.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe790 [0232.884] wcscpy (in: _Dest=0x7cbe790, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.884] wcscat (in: _Dest=0x7cbe790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.884] wcscat (in: _Dest=0x7cbe790, _Source="SO00018_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" [0232.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0232.886] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d41f00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6d41f00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x7a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00152_.WMF", cAlternateFileName="")) returned 1 [0232.886] wcscmp (_String1="SO00152_.WMF", _String2=".") returned 1 [0232.886] wcscmp (_String1="SO00152_.WMF", _String2="..") returned 1 [0232.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe818 [0232.886] wcscpy (in: _Dest=0x7cbe818, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.886] wcscat (in: _Dest=0x7cbe818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.886] wcscat (in: _Dest=0x7cbe818, _Source="SO00152_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" [0232.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0232.887] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaef9100, ftCreationTime.dwHighDateTime=0x1bf3c3e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaef9100, ftLastWriteTime.dwHighDateTime=0x1bf3c3e, nFileSizeHigh=0x0, nFileSizeLow=0x4754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00157_.WMF", cAlternateFileName="")) returned 1 [0232.887] wcscmp (_String1="SO00157_.WMF", _String2=".") returned 1 [0232.887] wcscmp (_String1="SO00157_.WMF", _String2="..") returned 1 [0232.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe8a0 [0232.887] wcscpy (in: _Dest=0x7cbe8a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.887] wcscat (in: _Dest=0x7cbe8a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.887] wcscat (in: _Dest=0x7cbe8a0, _Source="SO00157_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" [0232.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe8a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0232.988] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe36d6d00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe36d6d00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00159_.WMF", cAlternateFileName="")) returned 1 [0232.988] wcscmp (_String1="SO00159_.WMF", _String2=".") returned 1 [0232.988] wcscmp (_String1="SO00159_.WMF", _String2="..") returned 1 [0232.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9098 [0232.988] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.988] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.988] wcscat (in: _Dest=0x3eb9098, _Source="SO00159_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" [0232.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0232.990] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4ab700, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd4ab700, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x35b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00166_.WMF", cAlternateFileName="")) returned 1 [0232.990] wcscmp (_String1="SO00166_.WMF", _String2=".") returned 1 [0232.990] wcscmp (_String1="SO00166_.WMF", _String2="..") returned 1 [0232.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f00 [0232.990] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.990] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.990] wcscat (in: _Dest=0x3eb8f00, _Source="SO00166_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" [0232.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0232.991] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcae85d00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcae85d00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00168_.WMF", cAlternateFileName="")) returned 1 [0232.991] wcscmp (_String1="SO00168_.WMF", _String2=".") returned 1 [0232.991] wcscmp (_String1="SO00168_.WMF", _String2="..") returned 1 [0232.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba660 [0232.992] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.992] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.992] wcscat (in: _Dest=0x3eba660, _Source="SO00168_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" [0232.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0232.993] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9b73000, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9b73000, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x2242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00170_.WMF", cAlternateFileName="")) returned 1 [0232.993] wcscmp (_String1="SO00170_.WMF", _String2=".") returned 1 [0232.993] wcscmp (_String1="SO00170_.WMF", _String2="..") returned 1 [0232.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9f78 [0232.993] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.993] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.993] wcscat (in: _Dest=0x3eb9f78, _Source="SO00170_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" [0232.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0232.995] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02dc800, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc02dc800, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x8f0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00177_.WMF", cAlternateFileName="")) returned 1 [0232.995] wcscmp (_String1="SO00177_.WMF", _String2=".") returned 1 [0232.995] wcscmp (_String1="SO00177_.WMF", _String2="..") returned 1 [0232.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9a28 [0232.995] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.995] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.995] wcscat (in: _Dest=0x3eb9a28, _Source="SO00177_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" [0232.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0232.996] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x283c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00183_.WMF", cAlternateFileName="")) returned 1 [0232.996] wcscmp (_String1="SO00183_.WMF", _String2=".") returned 1 [0232.996] wcscmp (_String1="SO00183_.WMF", _String2="..") returned 1 [0232.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9340 [0232.996] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.997] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.997] wcscat (in: _Dest=0x3eb9340, _Source="SO00183_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" [0232.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0232.998] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7d58d00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7d58d00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x514c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00190_.WMF", cAlternateFileName="")) returned 1 [0232.998] wcscmp (_String1="SO00190_.WMF", _String2=".") returned 1 [0232.998] wcscmp (_String1="SO00190_.WMF", _String2="..") returned 1 [0232.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9e68 [0232.998] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0232.998] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0232.998] wcscat (in: _Dest=0x3eb9e68, _Source="SO00190_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" [0232.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1224 [0232.999] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2090, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00191_.WMF", cAlternateFileName="")) returned 1 [0232.999] wcscmp (_String1="SO00191_.WMF", _String2=".") returned 1 [0232.999] wcscmp (_String1="SO00191_.WMF", _String2="..") returned 1 [0232.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9d58 [0233.000] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.000] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.000] wcscat (in: _Dest=0x3eb9d58, _Source="SO00191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" [0233.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0233.001] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00192_.WMF", cAlternateFileName="")) returned 1 [0233.001] wcscmp (_String1="SO00192_.WMF", _String2=".") returned 1 [0233.001] wcscmp (_String1="SO00192_.WMF", _String2="..") returned 1 [0233.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe928 [0233.001] wcscpy (in: _Dest=0x7cbe928, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.001] wcscat (in: _Dest=0x7cbe928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.002] wcscat (in: _Dest=0x7cbe928, _Source="SO00192_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" [0233.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0233.003] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4420600, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4420600, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x27c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00194_.WMF", cAlternateFileName="")) returned 1 [0233.003] wcscmp (_String1="SO00194_.WMF", _String2=".") returned 1 [0233.003] wcscmp (_String1="SO00194_.WMF", _String2="..") returned 1 [0233.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbe9b0 [0233.003] wcscpy (in: _Dest=0x7cbe9b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.003] wcscat (in: _Dest=0x7cbe9b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.003] wcscat (in: _Dest=0x7cbe9b0, _Source="SO00194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" [0233.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe9b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0233.004] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x238c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00197_.WMF", cAlternateFileName="")) returned 1 [0233.004] wcscmp (_String1="SO00197_.WMF", _String2=".") returned 1 [0233.004] wcscmp (_String1="SO00197_.WMF", _String2="..") returned 1 [0233.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbea38 [0233.004] wcscpy (in: _Dest=0x7cbea38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.004] wcscat (in: _Dest=0x7cbea38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.005] wcscat (in: _Dest=0x7cbea38, _Source="SO00197_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" [0233.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbea38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0233.006] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4c2500, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae4c2500, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x15fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00199_.WMF", cAlternateFileName="")) returned 1 [0233.006] wcscmp (_String1="SO00199_.WMF", _String2=".") returned 1 [0233.006] wcscmp (_String1="SO00199_.WMF", _String2="..") returned 1 [0233.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbeac0 [0233.006] wcscpy (in: _Dest=0x7cbeac0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.006] wcscat (in: _Dest=0x7cbeac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.006] wcscat (in: _Dest=0x7cbeac0, _Source="SO00199_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" [0233.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbeac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0233.007] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe9cb00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabe9cb00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x2926, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00200_.WMF", cAlternateFileName="")) returned 1 [0233.007] wcscmp (_String1="SO00200_.WMF", _String2=".") returned 1 [0233.007] wcscmp (_String1="SO00200_.WMF", _String2="..") returned 1 [0233.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbeb48 [0233.008] wcscpy (in: _Dest=0x7cbeb48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.008] wcscat (in: _Dest=0x7cbeb48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.008] wcscat (in: _Dest=0x7cbeb48, _Source="SO00200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" [0233.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbeb48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0233.009] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa30def00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa30def00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00208_.WMF", cAlternateFileName="")) returned 1 [0233.009] wcscmp (_String1="SO00208_.WMF", _String2=".") returned 1 [0233.009] wcscmp (_String1="SO00208_.WMF", _String2="..") returned 1 [0233.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbebd0 [0233.009] wcscpy (in: _Dest=0x7cbebd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.009] wcscat (in: _Dest=0x7cbebd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.009] wcscat (in: _Dest=0x7cbebd0, _Source="SO00208_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" [0233.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbebd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0233.010] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be6e100, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9be6e100, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x4f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00212_.WMF", cAlternateFileName="")) returned 1 [0233.165] wcscmp (_String1="SO00212_.WMF", _String2=".") returned 1 [0233.165] wcscmp (_String1="SO00212_.WMF", _String2="..") returned 1 [0233.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0233.165] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.165] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.166] wcscat (in: _Dest=0x3eb9670, _Source="SO00212_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" [0233.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0233.167] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00221_.WMF", cAlternateFileName="")) returned 1 [0233.167] wcscmp (_String1="SO00221_.WMF", _String2=".") returned 1 [0233.167] wcscmp (_String1="SO00221_.WMF", _String2="..") returned 1 [0233.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0233.167] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.167] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.167] wcscat (in: _Dest=0x3eba770, _Source="SO00221_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" [0233.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0233.168] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00222_.WMF", cAlternateFileName="")) returned 1 [0233.168] wcscmp (_String1="SO00222_.WMF", _String2=".") returned 1 [0233.168] wcscmp (_String1="SO00222_.WMF", _String2="..") returned 1 [0233.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbec58 [0233.169] wcscpy (in: _Dest=0x7cbec58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.169] wcscat (in: _Dest=0x7cbec58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.169] wcscat (in: _Dest=0x7cbec58, _Source="SO00222_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" [0233.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbec58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0233.170] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3642, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00223_.WMF", cAlternateFileName="")) returned 1 [0233.170] wcscmp (_String1="SO00223_.WMF", _String2=".") returned 1 [0233.170] wcscmp (_String1="SO00223_.WMF", _String2="..") returned 1 [0233.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbece0 [0233.170] wcscpy (in: _Dest=0x7cbece0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.170] wcscat (in: _Dest=0x7cbece0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.170] wcscat (in: _Dest=0x7cbece0, _Source="SO00223_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" [0233.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbece0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0233.172] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a88df00, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a88df00, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x476e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00257_.WMF", cAlternateFileName="")) returned 1 [0233.172] wcscmp (_String1="SO00257_.WMF", _String2=".") returned 1 [0233.172] wcscmp (_String1="SO00257_.WMF", _String2="..") returned 1 [0233.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbed68 [0233.172] wcscpy (in: _Dest=0x7cbed68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.172] wcscat (in: _Dest=0x7cbed68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.172] wcscat (in: _Dest=0x7cbed68, _Source="SO00257_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" [0233.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbed68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0233.173] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b14d00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24b14d00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0xd8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00289_.WMF", cAlternateFileName="")) returned 1 [0233.173] wcscmp (_String1="SO00289_.WMF", _String2=".") returned 1 [0233.173] wcscmp (_String1="SO00289_.WMF", _String2="..") returned 1 [0233.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbedf0 [0233.174] wcscpy (in: _Dest=0x7cbedf0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.174] wcscat (in: _Dest=0x7cbedf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.174] wcscat (in: _Dest=0x7cbedf0, _Source="SO00289_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" [0233.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbedf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0233.175] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f87fa00, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f87fa00, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x10cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00299_.WMF", cAlternateFileName="")) returned 1 [0233.175] wcscmp (_String1="SO00299_.WMF", _String2=".") returned 1 [0233.175] wcscmp (_String1="SO00299_.WMF", _String2="..") returned 1 [0233.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbee78 [0233.175] wcscpy (in: _Dest=0x7cbee78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.175] wcscat (in: _Dest=0x7cbee78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.175] wcscat (in: _Dest=0x7cbee78, _Source="SO00299_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" [0233.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbee78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca4 [0233.176] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12b7b600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12b7b600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x7a04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00305_.WMF", cAlternateFileName="")) returned 1 [0233.177] wcscmp (_String1="SO00305_.WMF", _String2=".") returned 1 [0233.177] wcscmp (_String1="SO00305_.WMF", _String2="..") returned 1 [0233.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbef00 [0233.177] wcscpy (in: _Dest=0x7cbef00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.177] wcscat (in: _Dest=0x7cbef00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.177] wcscat (in: _Dest=0x7cbef00, _Source="SO00305_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" [0233.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbef00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0233.178] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10555c00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10555c00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xee4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00333_.WMF", cAlternateFileName="")) returned 1 [0233.178] wcscmp (_String1="SO00333_.WMF", _String2=".") returned 1 [0233.178] wcscmp (_String1="SO00333_.WMF", _String2="..") returned 1 [0233.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbef88 [0233.178] wcscpy (in: _Dest=0x7cbef88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.178] wcscat (in: _Dest=0x7cbef88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.178] wcscat (in: _Dest=0x7cbef88, _Source="SO00333_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" [0233.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbef88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0233.179] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56152300, ftCreationTime.dwHighDateTime=0x1bd4b4e, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56152300, ftLastWriteTime.dwHighDateTime=0x1bd4b4e, nFileSizeHigh=0x0, nFileSizeLow=0x8b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00345_.WMF", cAlternateFileName="")) returned 1 [0233.180] wcscmp (_String1="SO00345_.WMF", _String2=".") returned 1 [0233.180] wcscmp (_String1="SO00345_.WMF", _String2="..") returned 1 [0233.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf010 [0233.180] wcscpy (in: _Dest=0x7cbf010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.180] wcscat (in: _Dest=0x7cbf010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.180] wcscat (in: _Dest=0x7cbf010, _Source="SO00345_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" [0233.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0233.181] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b92700, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50b92700, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0xbbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00350_.WMF", cAlternateFileName="")) returned 1 [0233.181] wcscmp (_String1="SO00350_.WMF", _String2=".") returned 1 [0233.181] wcscmp (_String1="SO00350_.WMF", _String2="..") returned 1 [0233.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf098 [0233.182] wcscpy (in: _Dest=0x7cbf098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.182] wcscat (in: _Dest=0x7cbf098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.182] wcscat (in: _Dest=0x7cbf098, _Source="SO00350_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" [0233.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0233.183] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b92700, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50b92700, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x934c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00352_.WMF", cAlternateFileName="")) returned 1 [0233.183] wcscmp (_String1="SO00352_.WMF", _String2=".") returned 1 [0233.183] wcscmp (_String1="SO00352_.WMF", _String2="..") returned 1 [0233.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf120 [0233.183] wcscpy (in: _Dest=0x7cbf120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.183] wcscat (in: _Dest=0x7cbf120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.183] wcscat (in: _Dest=0x7cbf120, _Source="SO00352_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" [0233.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0233.185] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5881400, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5881400, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00364_.WMF", cAlternateFileName="")) returned 1 [0233.185] wcscmp (_String1="SO00364_.WMF", _String2=".") returned 1 [0233.185] wcscmp (_String1="SO00364_.WMF", _String2="..") returned 1 [0233.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf1a8 [0233.185] wcscpy (in: _Dest=0x7cbf1a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.185] wcscat (in: _Dest=0x7cbf1a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.185] wcscat (in: _Dest=0x7cbf1a8, _Source="SO00364_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" [0233.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0233.186] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b94100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc6b94100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x51ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00367_.WMF", cAlternateFileName="")) returned 1 [0233.186] wcscmp (_String1="SO00367_.WMF", _String2=".") returned 1 [0233.186] wcscmp (_String1="SO00367_.WMF", _String2="..") returned 1 [0233.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf230 [0233.187] wcscpy (in: _Dest=0x7cbf230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.187] wcscat (in: _Dest=0x7cbf230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.187] wcscat (in: _Dest=0x7cbf230, _Source="SO00367_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" [0233.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0233.188] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3308, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00373_.WMF", cAlternateFileName="")) returned 1 [0233.188] wcscmp (_String1="SO00373_.WMF", _String2=".") returned 1 [0233.188] wcscmp (_String1="SO00373_.WMF", _String2="..") returned 1 [0233.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf2b8 [0233.189] wcscpy (in: _Dest=0x7cbf2b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.189] wcscat (in: _Dest=0x7cbf2b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.189] wcscat (in: _Dest=0x7cbf2b8, _Source="SO00373_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" [0233.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0233.190] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ea6e00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7ea6e00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x27f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00382_.WMF", cAlternateFileName="")) returned 1 [0233.190] wcscmp (_String1="SO00382_.WMF", _String2=".") returned 1 [0233.190] wcscmp (_String1="SO00382_.WMF", _String2="..") returned 1 [0233.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf340 [0233.190] wcscpy (in: _Dest=0x7cbf340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.190] wcscat (in: _Dest=0x7cbf340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.190] wcscat (in: _Dest=0x7cbf340, _Source="SO00382_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" [0233.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0233.191] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbe2f00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbcbe2f00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00390_.WMF", cAlternateFileName="")) returned 1 [0233.191] wcscmp (_String1="SO00390_.WMF", _String2=".") returned 1 [0233.191] wcscmp (_String1="SO00390_.WMF", _String2="..") returned 1 [0233.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf3c8 [0233.192] wcscpy (in: _Dest=0x7cbf3c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.192] wcscat (in: _Dest=0x7cbf3c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.192] wcscat (in: _Dest=0x7cbf3c8, _Source="SO00390_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" [0233.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0233.193] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f97b00, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x825b9010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7f97b00, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00391_.WMF", cAlternateFileName="")) returned 1 [0233.193] wcscmp (_String1="SO00391_.WMF", _String2=".") returned 1 [0233.193] wcscmp (_String1="SO00391_.WMF", _String2="..") returned 1 [0233.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf450 [0233.193] wcscpy (in: _Dest=0x7cbf450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.193] wcscat (in: _Dest=0x7cbf450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.193] wcscat (in: _Dest=0x7cbf450, _Source="SO00391_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" [0233.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c18 [0233.194] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1a5d00, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef1a5d00, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x704e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00416_.WMF", cAlternateFileName="")) returned 1 [0233.194] wcscmp (_String1="SO00416_.WMF", _String2=".") returned 1 [0233.194] wcscmp (_String1="SO00416_.WMF", _String2="..") returned 1 [0233.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf4d8 [0233.195] wcscpy (in: _Dest=0x7cbf4d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.195] wcscat (in: _Dest=0x7cbf4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.195] wcscat (in: _Dest=0x7cbf4d8, _Source="SO00416_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" [0233.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0233.196] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb7df500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcb7df500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x143c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00423_.WMF", cAlternateFileName="")) returned 1 [0233.196] wcscmp (_String1="SO00423_.WMF", _String2=".") returned 1 [0233.196] wcscmp (_String1="SO00423_.WMF", _String2="..") returned 1 [0233.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf560 [0233.196] wcscpy (in: _Dest=0x7cbf560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.196] wcscat (in: _Dest=0x7cbf560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.196] wcscat (in: _Dest=0x7cbf560, _Source="SO00423_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" [0233.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e4 [0233.198] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf242f00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf242f00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1544, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00444_.WMF", cAlternateFileName="")) returned 1 [0233.198] wcscmp (_String1="SO00444_.WMF", _String2=".") returned 1 [0233.198] wcscmp (_String1="SO00444_.WMF", _String2="..") returned 1 [0233.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf5e8 [0233.198] wcscpy (in: _Dest=0x7cbf5e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.198] wcscat (in: _Dest=0x7cbf5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.198] wcscat (in: _Dest=0x7cbf5e8, _Source="SO00444_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" [0233.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0233.199] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa497e100, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa497e100, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00452_.WMF", cAlternateFileName="")) returned 1 [0233.199] wcscmp (_String1="SO00452_.WMF", _String2=".") returned 1 [0233.199] wcscmp (_String1="SO00452_.WMF", _String2="..") returned 1 [0233.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf670 [0233.199] wcscpy (in: _Dest=0x7cbf670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.199] wcscat (in: _Dest=0x7cbf670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.199] wcscat (in: _Dest=0x7cbf670, _Source="SO00452_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" [0233.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0233.249] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ea20000, ftCreationTime.dwHighDateTime=0x1bd4b91, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9ea20000, ftLastWriteTime.dwHighDateTime=0x1bd4b91, nFileSizeHigh=0x0, nFileSizeLow=0x59ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00453_.WMF", cAlternateFileName="")) returned 1 [0233.249] wcscmp (_String1="SO00453_.WMF", _String2=".") returned 1 [0233.249] wcscmp (_String1="SO00453_.WMF", _String2="..") returned 1 [0233.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8bd0 [0233.250] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.250] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.250] wcscat (in: _Dest=0x3eb8bd0, _Source="SO00453_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" [0233.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0233.251] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3582fb00, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3582fb00, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0xb6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00454_.WMF", cAlternateFileName="")) returned 1 [0233.251] wcscmp (_String1="SO00454_.WMF", _String2=".") returned 1 [0233.251] wcscmp (_String1="SO00454_.WMF", _String2="..") returned 1 [0233.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb96f8 [0233.251] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.251] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.252] wcscat (in: _Dest=0x3eb96f8, _Source="SO00454_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" [0233.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0233.253] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00466_.WMF", cAlternateFileName="")) returned 1 [0233.253] wcscmp (_String1="SO00466_.WMF", _String2=".") returned 1 [0233.253] wcscmp (_String1="SO00466_.WMF", _String2="..") returned 1 [0233.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0233.253] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.253] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.253] wcscat (in: _Dest=0x3eb9cd0, _Source="SO00466_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" [0233.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0233.254] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf30200, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdf30200, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00476_.WMF", cAlternateFileName="")) returned 1 [0233.254] wcscmp (_String1="SO00476_.WMF", _String2=".") returned 1 [0233.254] wcscmp (_String1="SO00476_.WMF", _String2="..") returned 1 [0233.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba440 [0233.254] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.254] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.254] wcscat (in: _Dest=0x3eba440, _Source="SO00476_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" [0233.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0233.255] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd173d600, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd173d600, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x5b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00479_.WMF", cAlternateFileName="")) returned 1 [0233.255] wcscmp (_String1="SO00479_.WMF", _String2=".") returned 1 [0233.255] wcscmp (_String1="SO00479_.WMF", _String2="..") returned 1 [0233.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0233.256] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.256] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.256] wcscat (in: _Dest=0x3eb8b48, _Source="SO00479_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" [0233.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0233.257] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1d500, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc1d500, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x2bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00483_.WMF", cAlternateFileName="")) returned 1 [0233.257] wcscmp (_String1="SO00483_.WMF", _String2=".") returned 1 [0233.257] wcscmp (_String1="SO00483_.WMF", _String2="..") returned 1 [0233.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0233.257] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.257] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.257] wcscat (in: _Dest=0x3eb9560, _Source="SO00483_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" [0233.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0233.258] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30057800, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30057800, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00486_.WMF", cAlternateFileName="")) returned 1 [0233.258] wcscmp (_String1="SO00486_.WMF", _String2=".") returned 1 [0233.259] wcscmp (_String1="SO00486_.WMF", _String2="..") returned 1 [0233.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba110 [0233.259] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.259] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.259] wcscat (in: _Dest=0x3eba110, _Source="SO00486_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" [0233.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0233.260] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f88800, ftCreationTime.dwHighDateTime=0x1bd4b85, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49f88800, ftLastWriteTime.dwHighDateTime=0x1bd4b85, nFileSizeHigh=0x0, nFileSizeLow=0xaa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00505_.WMF", cAlternateFileName="")) returned 1 [0233.260] wcscmp (_String1="SO00505_.WMF", _String2=".") returned 1 [0233.260] wcscmp (_String1="SO00505_.WMF", _String2="..") returned 1 [0233.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0233.260] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.260] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.260] wcscat (in: _Dest=0x3eb9010, _Source="SO00505_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" [0233.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0233.262] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90a800, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb90a800, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00513_.WMF", cAlternateFileName="")) returned 1 [0233.262] wcscmp (_String1="SO00513_.WMF", _String2=".") returned 1 [0233.262] wcscmp (_String1="SO00513_.WMF", _String2="..") returned 1 [0233.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0233.262] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.262] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.262] wcscat (in: _Dest=0x3eb95e8, _Source="SO00513_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" [0233.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0233.263] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2602, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00555_.WMF", cAlternateFileName="")) returned 1 [0233.263] wcscmp (_String1="SO00555_.WMF", _String2=".") returned 1 [0233.263] wcscmp (_String1="SO00555_.WMF", _String2="..") returned 1 [0233.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0233.263] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.264] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.264] wcscat (in: _Dest=0x3eb9230, _Source="SO00555_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" [0233.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0233.265] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bc7c00, ftCreationTime.dwHighDateTime=0x1c01cc1, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8bc7c00, ftLastWriteTime.dwHighDateTime=0x1c01cc1, nFileSizeHigh=0x0, nFileSizeLow=0x6260, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00603_.WMF", cAlternateFileName="")) returned 1 [0233.265] wcscmp (_String1="SO00603_.WMF", _String2=".") returned 1 [0233.265] wcscmp (_String1="SO00603_.WMF", _String2="..") returned 1 [0233.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0233.265] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.265] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.265] wcscat (in: _Dest=0x3eb8e78, _Source="SO00603_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" [0233.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0233.266] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8683b00, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8683b00, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0x9c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00610_.WMF", cAlternateFileName="")) returned 1 [0233.266] wcscmp (_String1="SO00610_.WMF", _String2=".") returned 1 [0233.266] wcscmp (_String1="SO00610_.WMF", _String2="..") returned 1 [0233.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0233.266] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.266] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.267] wcscat (in: _Dest=0x3eba2a8, _Source="SO00610_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" [0233.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0233.268] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c1e400, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91c1e400, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00629_.WMF", cAlternateFileName="")) returned 1 [0233.277] wcscmp (_String1="SO00629_.WMF", _String2=".") returned 1 [0233.277] wcscmp (_String1="SO00629_.WMF", _String2="..") returned 1 [0233.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8df0 [0233.277] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.277] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.277] wcscat (in: _Dest=0x3eb8df0, _Source="SO00629_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" [0233.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0233.278] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f7b00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5f7b00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x5006, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00633_.WMF", cAlternateFileName="")) returned 1 [0233.278] wcscmp (_String1="SO00633_.WMF", _String2=".") returned 1 [0233.278] wcscmp (_String1="SO00633_.WMF", _String2="..") returned 1 [0233.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8d68 [0233.279] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.279] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.279] wcscat (in: _Dest=0x3eb8d68, _Source="SO00633_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" [0233.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0233.280] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88387c00, ftCreationTime.dwHighDateTime=0x1bd4b72, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88387c00, ftLastWriteTime.dwHighDateTime=0x1bd4b72, nFileSizeHigh=0x0, nFileSizeLow=0x1aba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00638_.WMF", cAlternateFileName="")) returned 1 [0233.280] wcscmp (_String1="SO00638_.WMF", _String2=".") returned 1 [0233.280] wcscmp (_String1="SO00638_.WMF", _String2="..") returned 1 [0233.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0233.281] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.281] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.281] wcscat (in: _Dest=0x3eb8c58, _Source="SO00638_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" [0233.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0233.282] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84a1500, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe84a1500, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00656_.WMF", cAlternateFileName="")) returned 1 [0233.282] wcscmp (_String1="SO00656_.WMF", _String2=".") returned 1 [0233.282] wcscmp (_String1="SO00656_.WMF", _String2="..") returned 1 [0233.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9bc0 [0233.282] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.282] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.282] wcscat (in: _Dest=0x3eb9bc0, _Source="SO00656_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" [0233.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1608 [0233.283] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00668_.WMF", cAlternateFileName="")) returned 1 [0233.284] wcscmp (_String1="SO00668_.WMF", _String2=".") returned 1 [0233.284] wcscmp (_String1="SO00668_.WMF", _String2="..") returned 1 [0233.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba550 [0233.285] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.285] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.285] wcscat (in: _Dest=0x3eba550, _Source="SO00668_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" [0233.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218 [0233.287] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00670_.WMF", cAlternateFileName="")) returned 1 [0233.287] wcscmp (_String1="SO00670_.WMF", _String2=".") returned 1 [0233.287] wcscmp (_String1="SO00670_.WMF", _String2="..") returned 1 [0233.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf6f8 [0233.287] wcscpy (in: _Dest=0x7cbf6f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.287] wcscat (in: _Dest=0x7cbf6f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.287] wcscat (in: _Dest=0x7cbf6f8, _Source="SO00670_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" [0233.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf6f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0233.289] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00671_.WMF", cAlternateFileName="")) returned 1 [0233.289] wcscmp (_String1="SO00671_.WMF", _String2=".") returned 1 [0233.289] wcscmp (_String1="SO00671_.WMF", _String2="..") returned 1 [0233.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf780 [0233.289] wcscpy (in: _Dest=0x7cbf780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.289] wcscat (in: _Dest=0x7cbf780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.289] wcscat (in: _Dest=0x7cbf780, _Source="SO00671_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" [0233.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0233.290] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1449a400, ftCreationTime.dwHighDateTime=0x1bd4b71, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1449a400, ftLastWriteTime.dwHighDateTime=0x1bd4b71, nFileSizeHigh=0x0, nFileSizeLow=0x62b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00683_.WMF", cAlternateFileName="")) returned 1 [0233.290] wcscmp (_String1="SO00683_.WMF", _String2=".") returned 1 [0233.290] wcscmp (_String1="SO00683_.WMF", _String2="..") returned 1 [0233.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf808 [0233.291] wcscpy (in: _Dest=0x7cbf808, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.291] wcscat (in: _Dest=0x7cbf808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.291] wcscat (in: _Dest=0x7cbf808, _Source="SO00683_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" [0233.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0233.292] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905542b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00694_.WMF", cAlternateFileName="")) returned 1 [0233.292] wcscmp (_String1="SO00694_.WMF", _String2=".") returned 1 [0233.292] wcscmp (_String1="SO00694_.WMF", _String2="..") returned 1 [0233.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf890 [0233.292] wcscpy (in: _Dest=0x7cbf890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.292] wcscat (in: _Dest=0x7cbf890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.292] wcscat (in: _Dest=0x7cbf890, _Source="SO00694_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" [0233.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0233.317] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x825df170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3636, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00704_.WMF", cAlternateFileName="")) returned 1 [0233.317] wcscmp (_String1="SO00704_.WMF", _String2=".") returned 1 [0233.317] wcscmp (_String1="SO00704_.WMF", _String2="..") returned 1 [0233.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf918 [0233.317] wcscpy (in: _Dest=0x7cbf918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.317] wcscat (in: _Dest=0x7cbf918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.318] wcscat (in: _Dest=0x7cbf918, _Source="SO00704_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" [0233.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0233.319] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbcc9000, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfbcc9000, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x16478, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00726_.WMF", cAlternateFileName="")) returned 1 [0233.319] wcscmp (_String1="SO00726_.WMF", _String2=".") returned 1 [0233.319] wcscmp (_String1="SO00726_.WMF", _String2="..") returned 1 [0233.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbf9a0 [0233.319] wcscpy (in: _Dest=0x7cbf9a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.319] wcscat (in: _Dest=0x7cbf9a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.319] wcscat (in: _Dest=0x7cbf9a0, _Source="SO00726_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" [0233.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf9a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0233.320] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2543400, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2543400, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x1758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00728_.WMF", cAlternateFileName="")) returned 1 [0233.320] wcscmp (_String1="SO00728_.WMF", _String2=".") returned 1 [0233.320] wcscmp (_String1="SO00728_.WMF", _String2="..") returned 1 [0233.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbfa28 [0233.320] wcscpy (in: _Dest=0x7cbfa28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.320] wcscat (in: _Dest=0x7cbfa28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.320] wcscat (in: _Dest=0x7cbfa28, _Source="SO00728_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" [0233.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfa28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0233.322] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cbc900, ftCreationTime.dwHighDateTime=0x1bd4b70, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5cbc900, ftLastWriteTime.dwHighDateTime=0x1bd4b70, nFileSizeHigh=0x0, nFileSizeLow=0x13fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00732_.WMF", cAlternateFileName="")) returned 1 [0233.322] wcscmp (_String1="SO00732_.WMF", _String2=".") returned 1 [0233.322] wcscmp (_String1="SO00732_.WMF", _String2="..") returned 1 [0233.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbfab0 [0233.322] wcscpy (in: _Dest=0x7cbfab0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.322] wcscat (in: _Dest=0x7cbfab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.322] wcscat (in: _Dest=0x7cbfab0, _Source="SO00732_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" [0233.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0233.324] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3696f00, ftCreationTime.dwHighDateTime=0x1bd4b70, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3696f00, ftLastWriteTime.dwHighDateTime=0x1bd4b70, nFileSizeHigh=0x0, nFileSizeLow=0x660, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00734_.WMF", cAlternateFileName="")) returned 1 [0233.324] wcscmp (_String1="SO00734_.WMF", _String2=".") returned 1 [0233.324] wcscmp (_String1="SO00734_.WMF", _String2="..") returned 1 [0233.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbfb38 [0233.324] wcscpy (in: _Dest=0x7cbfb38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.324] wcscat (in: _Dest=0x7cbfb38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.324] wcscat (in: _Dest=0x7cbfb38, _Source="SO00734_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" [0233.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfb38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1444 [0233.325] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2384200, ftCreationTime.dwHighDateTime=0x1bd4b70, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2384200, ftLastWriteTime.dwHighDateTime=0x1bd4b70, nFileSizeHigh=0x0, nFileSizeLow=0x5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00735_.WMF", cAlternateFileName="")) returned 1 [0233.325] wcscmp (_String1="SO00735_.WMF", _String2=".") returned 1 [0233.325] wcscmp (_String1="SO00735_.WMF", _String2="..") returned 1 [0233.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbfbc0 [0233.326] wcscpy (in: _Dest=0x7cbfbc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.326] wcscat (in: _Dest=0x7cbfbc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.326] wcscat (in: _Dest=0x7cbfbc0, _Source="SO00735_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" [0233.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfbc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0233.327] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec0ad00, ftCreationTime.dwHighDateTime=0x1bd4ba8, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdec0ad00, ftLastWriteTime.dwHighDateTime=0x1bd4ba8, nFileSizeHigh=0x0, nFileSizeLow=0x184c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00736_.WMF", cAlternateFileName="")) returned 1 [0233.327] wcscmp (_String1="SO00736_.WMF", _String2=".") returned 1 [0233.327] wcscmp (_String1="SO00736_.WMF", _String2="..") returned 1 [0233.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbfc48 [0233.327] wcscpy (in: _Dest=0x7cbfc48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.327] wcscat (in: _Dest=0x7cbfc48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.327] wcscat (in: _Dest=0x7cbfc48, _Source="SO00736_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" [0233.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfc48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440 [0233.328] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e4e00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92e4e00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x543a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00768_.WMF", cAlternateFileName="")) returned 1 [0233.328] wcscmp (_String1="SO00768_.WMF", _String2=".") returned 1 [0233.329] wcscmp (_String1="SO00768_.WMF", _String2="..") returned 1 [0233.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbfcd0 [0233.329] wcscpy (in: _Dest=0x7cbfcd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.329] wcscat (in: _Dest=0x7cbfcd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.329] wcscat (in: _Dest=0x7cbfcd0, _Source="SO00768_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" [0233.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfcd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98 [0233.330] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ebfa00, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2ebfa00, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x16ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00783_.WMF", cAlternateFileName="")) returned 1 [0233.330] wcscmp (_String1="SO00783_.WMF", _String2=".") returned 1 [0233.330] wcscmp (_String1="SO00783_.WMF", _String2="..") returned 1 [0233.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbfd58 [0233.330] wcscpy (in: _Dest=0x7cbfd58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.330] wcscat (in: _Dest=0x7cbfd58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.330] wcscat (in: _Dest=0x7cbfd58, _Source="SO00783_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" [0233.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0233.332] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8444700, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8444700, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00820_.WMF", cAlternateFileName="")) returned 1 [0233.332] wcscmp (_String1="SO00820_.WMF", _String2=".") returned 1 [0233.332] wcscmp (_String1="SO00820_.WMF", _String2="..") returned 1 [0233.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbfde0 [0233.332] wcscpy (in: _Dest=0x7cbfde0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.332] wcscat (in: _Dest=0x7cbfde0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.332] wcscat (in: _Dest=0x7cbfde0, _Source="SO00820_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" [0233.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0233.333] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x816e3100, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x816e3100, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00828_.WMF", cAlternateFileName="")) returned 1 [0233.333] wcscmp (_String1="SO00828_.WMF", _String2=".") returned 1 [0233.333] wcscmp (_String1="SO00828_.WMF", _String2="..") returned 1 [0233.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbfe68 [0233.334] wcscpy (in: _Dest=0x7cbfe68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.334] wcscat (in: _Dest=0x7cbfe68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.334] wcscat (in: _Dest=0x7cbfe68, _Source="SO00828_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" [0233.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfe68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0233.335] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63a0cc00, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63a0cc00, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x36da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00834_.WMF", cAlternateFileName="")) returned 1 [0233.335] wcscmp (_String1="SO00834_.WMF", _String2=".") returned 1 [0233.335] wcscmp (_String1="SO00834_.WMF", _String2="..") returned 1 [0233.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbfef0 [0233.335] wcscpy (in: _Dest=0x7cbfef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.335] wcscat (in: _Dest=0x7cbfef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.335] wcscat (in: _Dest=0x7cbfef0, _Source="SO00834_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" [0233.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0233.337] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b489100, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b489100, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x3fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00837_.WMF", cAlternateFileName="")) returned 1 [0233.337] wcscmp (_String1="SO00837_.WMF", _String2=".") returned 1 [0233.337] wcscmp (_String1="SO00837_.WMF", _String2="..") returned 1 [0233.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cbff78 [0233.337] wcscpy (in: _Dest=0x7cbff78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.337] wcscat (in: _Dest=0x7cbff78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.337] wcscat (in: _Dest=0x7cbff78, _Source="SO00837_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" [0233.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbff78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0233.338] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1898, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00910_.WMF", cAlternateFileName="")) returned 1 [0233.338] wcscmp (_String1="SO00910_.WMF", _String2=".") returned 1 [0233.339] wcscmp (_String1="SO00910_.WMF", _String2="..") returned 1 [0233.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3db00 [0233.339] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.339] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.339] wcscat (in: _Dest=0x3f3db00, _Source="SO00910_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" [0233.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0233.340] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00911_.WMF", cAlternateFileName="")) returned 1 [0233.340] wcscmp (_String1="SO00911_.WMF", _String2=".") returned 1 [0233.340] wcscmp (_String1="SO00911_.WMF", _String2="..") returned 1 [0233.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6020 [0233.341] wcscpy (in: _Dest=0x7cb6020, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.341] wcscat (in: _Dest=0x7cb6020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.341] wcscat (in: _Dest=0x7cb6020, _Source="SO00911_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" [0233.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0233.342] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x28b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00913_.WMF", cAlternateFileName="")) returned 1 [0233.342] wcscmp (_String1="SO00913_.WMF", _String2=".") returned 1 [0233.342] wcscmp (_String1="SO00913_.WMF", _String2="..") returned 1 [0233.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb60a8 [0233.342] wcscpy (in: _Dest=0x7cb60a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.342] wcscat (in: _Dest=0x7cb60a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.342] wcscat (in: _Dest=0x7cb60a8, _Source="SO00913_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" [0233.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb60a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0233.344] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00914_.WMF", cAlternateFileName="")) returned 1 [0233.344] wcscmp (_String1="SO00914_.WMF", _String2=".") returned 1 [0233.344] wcscmp (_String1="SO00914_.WMF", _String2="..") returned 1 [0233.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6130 [0233.344] wcscpy (in: _Dest=0x7cb6130, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.344] wcscat (in: _Dest=0x7cb6130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.344] wcscat (in: _Dest=0x7cb6130, _Source="SO00914_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" [0233.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0233.345] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00915_.WMF", cAlternateFileName="")) returned 1 [0233.345] wcscmp (_String1="SO00915_.WMF", _String2=".") returned 1 [0233.345] wcscmp (_String1="SO00915_.WMF", _String2="..") returned 1 [0233.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb61b8 [0233.345] wcscpy (in: _Dest=0x7cb61b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.345] wcscat (in: _Dest=0x7cb61b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.345] wcscat (in: _Dest=0x7cb61b8, _Source="SO00915_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" [0233.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb61b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0233.347] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00916_.WMF", cAlternateFileName="")) returned 1 [0233.347] wcscmp (_String1="SO00916_.WMF", _String2=".") returned 1 [0233.347] wcscmp (_String1="SO00916_.WMF", _String2="..") returned 1 [0233.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6240 [0233.347] wcscpy (in: _Dest=0x7cb6240, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.347] wcscat (in: _Dest=0x7cb6240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.347] wcscat (in: _Dest=0x7cb6240, _Source="SO00916_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" [0233.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0233.349] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00917_.WMF", cAlternateFileName="")) returned 1 [0233.349] wcscmp (_String1="SO00917_.WMF", _String2=".") returned 1 [0233.349] wcscmp (_String1="SO00917_.WMF", _String2="..") returned 1 [0233.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb62c8 [0233.349] wcscpy (in: _Dest=0x7cb62c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.349] wcscat (in: _Dest=0x7cb62c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.349] wcscat (in: _Dest=0x7cb62c8, _Source="SO00917_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" [0233.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb62c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0233.350] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1f5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00918_.WMF", cAlternateFileName="")) returned 1 [0233.350] wcscmp (_String1="SO00918_.WMF", _String2=".") returned 1 [0233.350] wcscmp (_String1="SO00918_.WMF", _String2="..") returned 1 [0233.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6350 [0233.351] wcscpy (in: _Dest=0x7cb6350, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.351] wcscat (in: _Dest=0x7cb6350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.351] wcscat (in: _Dest=0x7cb6350, _Source="SO00918_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" [0233.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0233.352] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2944, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00935_.WMF", cAlternateFileName="")) returned 1 [0233.352] wcscmp (_String1="SO00935_.WMF", _String2=".") returned 1 [0233.352] wcscmp (_String1="SO00935_.WMF", _String2="..") returned 1 [0233.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb63d8 [0233.352] wcscpy (in: _Dest=0x7cb63d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.352] wcscat (in: _Dest=0x7cb63d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.352] wcscat (in: _Dest=0x7cb63d8, _Source="SO00935_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" [0233.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb63d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0233.414] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1960, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00938_.WMF", cAlternateFileName="")) returned 1 [0233.414] wcscmp (_String1="SO00938_.WMF", _String2=".") returned 1 [0233.414] wcscmp (_String1="SO00938_.WMF", _String2="..") returned 1 [0233.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6460 [0233.415] wcscpy (in: _Dest=0x7cb6460, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.415] wcscat (in: _Dest=0x7cb6460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.415] wcscat (in: _Dest=0x7cb6460, _Source="SO00938_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" [0233.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0233.416] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1708, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00941_.WMF", cAlternateFileName="")) returned 1 [0233.416] wcscmp (_String1="SO00941_.WMF", _String2=".") returned 1 [0233.416] wcscmp (_String1="SO00941_.WMF", _String2="..") returned 1 [0233.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb64e8 [0233.417] wcscpy (in: _Dest=0x7cb64e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.417] wcscat (in: _Dest=0x7cb64e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.417] wcscat (in: _Dest=0x7cb64e8, _Source="SO00941_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" [0233.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb64e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0233.418] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00942_.WMF", cAlternateFileName="")) returned 1 [0233.418] wcscmp (_String1="SO00942_.WMF", _String2=".") returned 1 [0233.418] wcscmp (_String1="SO00942_.WMF", _String2="..") returned 1 [0233.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6570 [0233.418] wcscpy (in: _Dest=0x7cb6570, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.418] wcscat (in: _Dest=0x7cb6570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.418] wcscat (in: _Dest=0x7cb6570, _Source="SO00942_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" [0233.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0233.420] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00943_.WMF", cAlternateFileName="")) returned 1 [0233.481] wcscmp (_String1="SO00943_.WMF", _String2=".") returned 1 [0233.481] wcscmp (_String1="SO00943_.WMF", _String2="..") returned 1 [0233.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb65f8 [0233.482] wcscpy (in: _Dest=0x7cb65f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.482] wcscat (in: _Dest=0x7cb65f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.482] wcscat (in: _Dest=0x7cb65f8, _Source="SO00943_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" [0233.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb65f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0233.483] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a853900, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a853900, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0xae1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01044_.WMF", cAlternateFileName="")) returned 1 [0233.483] wcscmp (_String1="SO01044_.WMF", _String2=".") returned 1 [0233.483] wcscmp (_String1="SO01044_.WMF", _String2="..") returned 1 [0233.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6680 [0233.483] wcscpy (in: _Dest=0x7cb6680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.483] wcscat (in: _Dest=0x7cb6680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.483] wcscat (in: _Dest=0x7cb6680, _Source="SO01044_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" [0233.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0233.484] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d684a00, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d684a00, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x5b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01063_.WMF", cAlternateFileName="")) returned 1 [0233.484] wcscmp (_String1="SO01063_.WMF", _String2=".") returned 1 [0233.484] wcscmp (_String1="SO01063_.WMF", _String2="..") returned 1 [0233.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6708 [0233.484] wcscpy (in: _Dest=0x7cb6708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.484] wcscat (in: _Dest=0x7cb6708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.484] wcscat (in: _Dest=0x7cb6708, _Source="SO01063_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" [0233.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0233.485] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x826052d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1075e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01236_.WMF", cAlternateFileName="")) returned 1 [0233.485] wcscmp (_String1="SO01236_.WMF", _String2=".") returned 1 [0233.485] wcscmp (_String1="SO01236_.WMF", _String2="..") returned 1 [0233.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6790 [0233.485] wcscpy (in: _Dest=0x7cb6790, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.485] wcscat (in: _Dest=0x7cb6790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.485] wcscat (in: _Dest=0x7cb6790, _Source="SO01236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" [0233.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0233.486] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e197c00, ftCreationTime.dwHighDateTime=0x1bd4b78, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e197c00, ftLastWriteTime.dwHighDateTime=0x1bd4b78, nFileSizeHigh=0x0, nFileSizeLow=0x43b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01560_.WMF", cAlternateFileName="")) returned 1 [0233.486] wcscmp (_String1="SO01560_.WMF", _String2=".") returned 1 [0233.486] wcscmp (_String1="SO01560_.WMF", _String2="..") returned 1 [0233.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6818 [0233.487] wcscpy (in: _Dest=0x7cb6818, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.487] wcscat (in: _Dest=0x7cb6818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.487] wcscat (in: _Dest=0x7cb6818, _Source="SO01560_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" [0233.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0233.487] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57e5e300, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57e5e300, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x59d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01561_.WMF", cAlternateFileName="")) returned 1 [0233.487] wcscmp (_String1="SO01561_.WMF", _String2=".") returned 1 [0233.488] wcscmp (_String1="SO01561_.WMF", _String2="..") returned 1 [0233.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb68a0 [0233.488] wcscpy (in: _Dest=0x7cb68a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.488] wcscat (in: _Dest=0x7cb68a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.488] wcscat (in: _Dest=0x7cb68a0, _Source="SO01561_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" [0233.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb68a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0233.489] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55838900, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55838900, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x75ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01563_.WMF", cAlternateFileName="")) returned 1 [0233.489] wcscmp (_String1="SO01563_.WMF", _String2=".") returned 1 [0233.489] wcscmp (_String1="SO01563_.WMF", _String2="..") returned 1 [0233.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6928 [0233.489] wcscpy (in: _Dest=0x7cb6928, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.489] wcscat (in: _Dest=0x7cb6928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.489] wcscat (in: _Dest=0x7cb6928, _Source="SO01563_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" [0233.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0233.490] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f00200, ftCreationTime.dwHighDateTime=0x1bd4b5c, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f00200, ftLastWriteTime.dwHighDateTime=0x1bd4b5c, nFileSizeHigh=0x0, nFileSizeLow=0x51a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01566_.WMF", cAlternateFileName="")) returned 1 [0233.490] wcscmp (_String1="SO01566_.WMF", _String2=".") returned 1 [0233.490] wcscmp (_String1="SO01566_.WMF", _String2="..") returned 1 [0233.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb69b0 [0233.490] wcscpy (in: _Dest=0x7cb69b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.490] wcscat (in: _Dest=0x7cb69b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.490] wcscat (in: _Dest=0x7cb69b0, _Source="SO01566_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" [0233.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb69b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0233.491] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f05200, ftCreationTime.dwHighDateTime=0x1bd4b73, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3f05200, ftLastWriteTime.dwHighDateTime=0x1bd4b73, nFileSizeHigh=0x0, nFileSizeLow=0x54b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01568_.WMF", cAlternateFileName="")) returned 1 [0233.491] wcscmp (_String1="SO01568_.WMF", _String2=".") returned 1 [0233.491] wcscmp (_String1="SO01568_.WMF", _String2="..") returned 1 [0233.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6a38 [0233.491] wcscpy (in: _Dest=0x7cb6a38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.491] wcscat (in: _Dest=0x7cb6a38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.491] wcscat (in: _Dest=0x7cb6a38, _Source="SO01568_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" [0233.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0233.492] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ea5400, ftCreationTime.dwHighDateTime=0x1bf32a4, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51ea5400, ftLastWriteTime.dwHighDateTime=0x1bf32a4, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01569_.WMF", cAlternateFileName="")) returned 1 [0233.492] wcscmp (_String1="SO01569_.WMF", _String2=".") returned 1 [0233.492] wcscmp (_String1="SO01569_.WMF", _String2="..") returned 1 [0233.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6ac0 [0233.492] wcscpy (in: _Dest=0x7cb6ac0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.493] wcscat (in: _Dest=0x7cb6ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.493] wcscat (in: _Dest=0x7cb6ac0, _Source="SO01569_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" [0233.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0233.494] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62947e00, ftCreationTime.dwHighDateTime=0x1bd4b44, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62947e00, ftLastWriteTime.dwHighDateTime=0x1bd4b44, nFileSizeHigh=0x0, nFileSizeLow=0xa8a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01575_.WMF", cAlternateFileName="")) returned 1 [0233.494] wcscmp (_String1="SO01575_.WMF", _String2=".") returned 1 [0233.494] wcscmp (_String1="SO01575_.WMF", _String2="..") returned 1 [0233.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6b48 [0233.494] wcscpy (in: _Dest=0x7cb6b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.494] wcscat (in: _Dest=0x7cb6b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.494] wcscat (in: _Dest=0x7cb6b48, _Source="SO01575_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" [0233.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0233.495] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc7c800, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6dc7c800, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x2566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01777_.WMF", cAlternateFileName="")) returned 1 [0233.495] wcscmp (_String1="SO01777_.WMF", _String2=".") returned 1 [0233.495] wcscmp (_String1="SO01777_.WMF", _String2="..") returned 1 [0233.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6bd0 [0233.495] wcscpy (in: _Dest=0x7cb6bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.495] wcscat (in: _Dest=0x7cb6bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.495] wcscat (in: _Dest=0x7cb6bd0, _Source="SO01777_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" [0233.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0233.496] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01785_.WMF", cAlternateFileName="")) returned 1 [0233.496] wcscmp (_String1="SO01785_.WMF", _String2=".") returned 1 [0233.496] wcscmp (_String1="SO01785_.WMF", _String2="..") returned 1 [0233.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6c58 [0233.496] wcscpy (in: _Dest=0x7cb6c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.496] wcscat (in: _Dest=0x7cb6c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.496] wcscat (in: _Dest=0x7cb6c58, _Source="SO01785_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" [0233.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0233.497] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d980900, ftCreationTime.dwHighDateTime=0x1bd4b9d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d980900, ftLastWriteTime.dwHighDateTime=0x1bd4b9d, nFileSizeHigh=0x0, nFileSizeLow=0x1088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01805_.WMF", cAlternateFileName="")) returned 1 [0233.497] wcscmp (_String1="SO01805_.WMF", _String2=".") returned 1 [0233.497] wcscmp (_String1="SO01805_.WMF", _String2="..") returned 1 [0233.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6ce0 [0233.498] wcscpy (in: _Dest=0x7cb6ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.498] wcscat (in: _Dest=0x7cb6ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.498] wcscat (in: _Dest=0x7cb6ce0, _Source="SO01805_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" [0233.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0233.498] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78626d00, ftCreationTime.dwHighDateTime=0x1bd4b5d, ftLastAccessTime.dwLowDateTime=0x9057a410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78626d00, ftLastWriteTime.dwHighDateTime=0x1bd4b5d, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01905_.WMF", cAlternateFileName="")) returned 1 [0233.498] wcscmp (_String1="SO01905_.WMF", _String2=".") returned 1 [0233.499] wcscmp (_String1="SO01905_.WMF", _String2="..") returned 1 [0233.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6d68 [0233.499] wcscpy (in: _Dest=0x7cb6d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.499] wcscat (in: _Dest=0x7cb6d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.499] wcscat (in: _Dest=0x7cb6d68, _Source="SO01905_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" [0233.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0233.500] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3086, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01954_.WMF", cAlternateFileName="")) returned 1 [0233.500] wcscmp (_String1="SO01954_.WMF", _String2=".") returned 1 [0233.500] wcscmp (_String1="SO01954_.WMF", _String2="..") returned 1 [0233.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6df0 [0233.500] wcscpy (in: _Dest=0x7cb6df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.500] wcscat (in: _Dest=0x7cb6df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.500] wcscat (in: _Dest=0x7cb6df0, _Source="SO01954_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" [0233.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0233.501] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02009_.WMF", cAlternateFileName="")) returned 1 [0233.501] wcscmp (_String1="SO02009_.WMF", _String2=".") returned 1 [0233.501] wcscmp (_String1="SO02009_.WMF", _String2="..") returned 1 [0233.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6e78 [0233.501] wcscpy (in: _Dest=0x7cb6e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.501] wcscat (in: _Dest=0x7cb6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.501] wcscat (in: _Dest=0x7cb6e78, _Source="SO02009_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" [0233.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0233.502] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02022_.WMF", cAlternateFileName="")) returned 1 [0233.502] wcscmp (_String1="SO02022_.WMF", _String2=".") returned 1 [0233.502] wcscmp (_String1="SO02022_.WMF", _String2="..") returned 1 [0233.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6f00 [0233.502] wcscpy (in: _Dest=0x7cb6f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.502] wcscat (in: _Dest=0x7cb6f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.502] wcscat (in: _Dest=0x7cb6f00, _Source="SO02022_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" [0233.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0233.503] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x23a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02024_.WMF", cAlternateFileName="")) returned 1 [0233.503] wcscmp (_String1="SO02024_.WMF", _String2=".") returned 1 [0233.503] wcscmp (_String1="SO02024_.WMF", _String2="..") returned 1 [0233.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb6f88 [0233.503] wcscpy (in: _Dest=0x7cb6f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.503] wcscat (in: _Dest=0x7cb6f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.503] wcscat (in: _Dest=0x7cb6f88, _Source="SO02024_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" [0233.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0233.504] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2016, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02025_.WMF", cAlternateFileName="")) returned 1 [0233.504] wcscmp (_String1="SO02025_.WMF", _String2=".") returned 1 [0233.504] wcscmp (_String1="SO02025_.WMF", _String2="..") returned 1 [0233.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7010 [0233.505] wcscpy (in: _Dest=0x7cb7010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.505] wcscat (in: _Dest=0x7cb7010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.505] wcscat (in: _Dest=0x7cb7010, _Source="SO02025_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" [0233.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc [0233.506] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x24c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02028_.WMF", cAlternateFileName="")) returned 1 [0233.506] wcscmp (_String1="SO02028_.WMF", _String2=".") returned 1 [0233.506] wcscmp (_String1="SO02028_.WMF", _String2="..") returned 1 [0233.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7098 [0233.506] wcscpy (in: _Dest=0x7cb7098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.506] wcscat (in: _Dest=0x7cb7098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.506] wcscat (in: _Dest=0x7cb7098, _Source="SO02028_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" [0233.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0233.507] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x266c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02045_.WMF", cAlternateFileName="")) returned 1 [0233.507] wcscmp (_String1="SO02045_.WMF", _String2=".") returned 1 [0233.507] wcscmp (_String1="SO02045_.WMF", _String2="..") returned 1 [0233.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7120 [0233.508] wcscpy (in: _Dest=0x7cb7120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.508] wcscat (in: _Dest=0x7cb7120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.508] wcscat (in: _Dest=0x7cb7120, _Source="SO02045_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" [0233.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0233.509] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02048_.WMF", cAlternateFileName="")) returned 1 [0233.509] wcscmp (_String1="SO02048_.WMF", _String2=".") returned 1 [0233.509] wcscmp (_String1="SO02048_.WMF", _String2="..") returned 1 [0233.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb71a8 [0233.509] wcscpy (in: _Dest=0x7cb71a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.510] wcscat (in: _Dest=0x7cb71a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.510] wcscat (in: _Dest=0x7cb71a8, _Source="SO02048_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" [0233.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb71a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0233.511] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02051_.WMF", cAlternateFileName="")) returned 1 [0233.511] wcscmp (_String1="SO02051_.WMF", _String2=".") returned 1 [0233.511] wcscmp (_String1="SO02051_.WMF", _String2="..") returned 1 [0233.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7230 [0233.511] wcscpy (in: _Dest=0x7cb7230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.511] wcscat (in: _Dest=0x7cb7230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.511] wcscat (in: _Dest=0x7cb7230, _Source="SO02051_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" [0233.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0233.512] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23525400, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23525400, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0x30ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02054_.WMF", cAlternateFileName="")) returned 1 [0233.512] wcscmp (_String1="SO02054_.WMF", _String2=".") returned 1 [0233.512] wcscmp (_String1="SO02054_.WMF", _String2="..") returned 1 [0233.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb72b8 [0233.512] wcscpy (in: _Dest=0x7cb72b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.512] wcscat (in: _Dest=0x7cb72b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.512] wcscat (in: _Dest=0x7cb72b8, _Source="SO02054_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" [0233.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb72b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0233.513] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22212700, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x22212700, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02055_.WMF", cAlternateFileName="")) returned 1 [0233.513] wcscmp (_String1="SO02055_.WMF", _String2=".") returned 1 [0233.513] wcscmp (_String1="SO02055_.WMF", _String2="..") returned 1 [0233.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7340 [0233.513] wcscpy (in: _Dest=0x7cb7340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.514] wcscat (in: _Dest=0x7cb7340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.514] wcscat (in: _Dest=0x7cb7340, _Source="SO02055_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" [0233.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0233.515] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1897bf00, ftCreationTime.dwHighDateTime=0x1bd4c4e, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1897bf00, ftLastWriteTime.dwHighDateTime=0x1bd4c4e, nFileSizeHigh=0x0, nFileSizeLow=0x382a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02067_.WMF", cAlternateFileName="")) returned 1 [0233.515] wcscmp (_String1="SO02067_.WMF", _String2=".") returned 1 [0233.515] wcscmp (_String1="SO02067_.WMF", _String2="..") returned 1 [0233.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb73c8 [0233.515] wcscpy (in: _Dest=0x7cb73c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.515] wcscat (in: _Dest=0x7cb73c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.515] wcscat (in: _Dest=0x7cb73c8, _Source="SO02067_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" [0233.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb73c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0233.516] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8680000, ftCreationTime.dwHighDateTime=0x1bd4c4d, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8680000, ftLastWriteTime.dwHighDateTime=0x1bd4c4d, nFileSizeHigh=0x0, nFileSizeLow=0x1b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02094_.WMF", cAlternateFileName="")) returned 1 [0233.516] wcscmp (_String1="SO02094_.WMF", _String2=".") returned 1 [0233.516] wcscmp (_String1="SO02094_.WMF", _String2="..") returned 1 [0233.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7450 [0233.516] wcscpy (in: _Dest=0x7cb7450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.516] wcscat (in: _Dest=0x7cb7450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.516] wcscat (in: _Dest=0x7cb7450, _Source="SO02094_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" [0233.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0233.530] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b04ff00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b04ff00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02227_.WMF", cAlternateFileName="")) returned 1 [0233.530] wcscmp (_String1="SO02227_.WMF", _String2=".") returned 1 [0233.530] wcscmp (_String1="SO02227_.WMF", _String2="..") returned 1 [0233.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb74d8 [0233.531] wcscpy (in: _Dest=0x7cb74d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.531] wcscat (in: _Dest=0x7cb74d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.531] wcscat (in: _Dest=0x7cb74d8, _Source="SO02227_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" [0233.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb74d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0233.532] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d72f500, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d72f500, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02228_.WMF", cAlternateFileName="")) returned 1 [0233.532] wcscmp (_String1="SO02228_.WMF", _String2=".") returned 1 [0233.532] wcscmp (_String1="SO02228_.WMF", _String2="..") returned 1 [0233.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7560 [0233.532] wcscpy (in: _Dest=0x7cb7560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.532] wcscat (in: _Dest=0x7cb7560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.532] wcscat (in: _Dest=0x7cb7560, _Source="SO02228_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" [0233.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0233.533] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7207ea00, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7207ea00, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02233_.WMF", cAlternateFileName="")) returned 1 [0233.533] wcscmp (_String1="SO02233_.WMF", _String2=".") returned 1 [0233.533] wcscmp (_String1="SO02233_.WMF", _String2="..") returned 1 [0233.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb75e8 [0233.533] wcscpy (in: _Dest=0x7cb75e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.533] wcscat (in: _Dest=0x7cb75e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.533] wcscat (in: _Dest=0x7cb75e8, _Source="SO02233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" [0233.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb75e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0233.534] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9207200, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9207200, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0xe88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02252_.WMF", cAlternateFileName="")) returned 1 [0233.534] wcscmp (_String1="SO02252_.WMF", _String2=".") returned 1 [0233.534] wcscmp (_String1="SO02252_.WMF", _String2="..") returned 1 [0233.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7670 [0233.534] wcscpy (in: _Dest=0x7cb7670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.534] wcscat (in: _Dest=0x7cb7670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.534] wcscat (in: _Dest=0x7cb7670, _Source="SO02252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" [0233.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0233.535] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45bbe00, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45bbe00, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02253_.WMF", cAlternateFileName="")) returned 1 [0233.535] wcscmp (_String1="SO02253_.WMF", _String2=".") returned 1 [0233.535] wcscmp (_String1="SO02253_.WMF", _String2="..") returned 1 [0233.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb76f8 [0233.535] wcscpy (in: _Dest=0x7cb76f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.535] wcscat (in: _Dest=0x7cb76f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.535] wcscat (in: _Dest=0x7cb76f8, _Source="SO02253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" [0233.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb76f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0233.536] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96b9c00, ftCreationTime.dwHighDateTime=0x1bd4c48, ftLastAccessTime.dwLowDateTime=0x8262b430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa96b9c00, ftLastWriteTime.dwHighDateTime=0x1bd4c48, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02261_.WMF", cAlternateFileName="")) returned 1 [0233.536] wcscmp (_String1="SO02261_.WMF", _String2=".") returned 1 [0233.536] wcscmp (_String1="SO02261_.WMF", _String2="..") returned 1 [0233.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7780 [0233.536] wcscpy (in: _Dest=0x7cb7780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.536] wcscat (in: _Dest=0x7cb7780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.536] wcscat (in: _Dest=0x7cb7780, _Source="SO02261_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" [0233.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0233.537] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1192f00, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd1192f00, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0xa94, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02263_.WMF", cAlternateFileName="")) returned 1 [0233.540] wcscmp (_String1="SO02263_.WMF", _String2=".") returned 1 [0233.540] wcscmp (_String1="SO02263_.WMF", _String2="..") returned 1 [0233.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7808 [0233.540] wcscpy (in: _Dest=0x7cb7808, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.540] wcscat (in: _Dest=0x7cb7808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.540] wcscat (in: _Dest=0x7cb7808, _Source="SO02263_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" [0233.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0233.541] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78fc700, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc78fc700, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02265_.WMF", cAlternateFileName="")) returned 1 [0233.541] wcscmp (_String1="SO02265_.WMF", _String2=".") returned 1 [0233.541] wcscmp (_String1="SO02265_.WMF", _String2="..") returned 1 [0233.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7890 [0233.541] wcscpy (in: _Dest=0x7cb7890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.541] wcscat (in: _Dest=0x7cb7890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.541] wcscat (in: _Dest=0x7cb7890, _Source="SO02265_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" [0233.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0233.542] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34bca00, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb34bca00, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02268_.WMF", cAlternateFileName="")) returned 1 [0233.542] wcscmp (_String1="SO02268_.WMF", _String2=".") returned 1 [0233.542] wcscmp (_String1="SO02268_.WMF", _String2="..") returned 1 [0233.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7918 [0233.542] wcscpy (in: _Dest=0x7cb7918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.542] wcscat (in: _Dest=0x7cb7918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.542] wcscat (in: _Dest=0x7cb7918, _Source="SO02268_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" [0233.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0233.543] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafb84300, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafb84300, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02269_.WMF", cAlternateFileName="")) returned 1 [0233.543] wcscmp (_String1="SO02269_.WMF", _String2=".") returned 1 [0233.543] wcscmp (_String1="SO02269_.WMF", _String2="..") returned 1 [0233.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb79a0 [0233.543] wcscpy (in: _Dest=0x7cb79a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.543] wcscat (in: _Dest=0x7cb79a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.544] wcscat (in: _Dest=0x7cb79a0, _Source="SO02269_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" [0233.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb79a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0233.544] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac24bc00, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac24bc00, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0xa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02270_.WMF", cAlternateFileName="")) returned 1 [0233.544] wcscmp (_String1="SO02270_.WMF", _String2=".") returned 1 [0233.544] wcscmp (_String1="SO02270_.WMF", _String2="..") returned 1 [0233.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7a28 [0233.545] wcscpy (in: _Dest=0x7cb7a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.545] wcscat (in: _Dest=0x7cb7a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.545] wcscat (in: _Dest=0x7cb7a28, _Source="SO02270_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" [0233.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0233.546] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98cb1e00, ftCreationTime.dwHighDateTime=0x1bd4c68, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x98cb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4c68, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02276_.WMF", cAlternateFileName="")) returned 1 [0233.546] wcscmp (_String1="SO02276_.WMF", _String2=".") returned 1 [0233.546] wcscmp (_String1="SO02276_.WMF", _String2="..") returned 1 [0233.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7ab0 [0233.546] wcscpy (in: _Dest=0x7cb7ab0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.546] wcscat (in: _Dest=0x7cb7ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.546] wcscat (in: _Dest=0x7cb7ab0, _Source="SO02276_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" [0233.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0233.547] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3b25f00, ftCreationTime.dwHighDateTime=0x1bd4c32, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd3b25f00, ftLastWriteTime.dwHighDateTime=0x1bd4c32, nFileSizeHigh=0x0, nFileSizeLow=0x17a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02413_.WMF", cAlternateFileName="")) returned 1 [0233.547] wcscmp (_String1="SO02413_.WMF", _String2=".") returned 1 [0233.547] wcscmp (_String1="SO02413_.WMF", _String2="..") returned 1 [0233.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7b38 [0233.547] wcscpy (in: _Dest=0x7cb7b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.547] wcscat (in: _Dest=0x7cb7b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.547] wcscat (in: _Dest=0x7cb7b38, _Source="SO02413_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" [0233.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0233.548] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a389100, ftCreationTime.dwHighDateTime=0x1bd4c65, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a389100, ftLastWriteTime.dwHighDateTime=0x1bd4c65, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02431_.WMF", cAlternateFileName="")) returned 1 [0233.548] wcscmp (_String1="SO02431_.WMF", _String2=".") returned 1 [0233.548] wcscmp (_String1="SO02431_.WMF", _String2="..") returned 1 [0233.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7bc0 [0233.548] wcscpy (in: _Dest=0x7cb7bc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.548] wcscat (in: _Dest=0x7cb7bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.548] wcscat (in: _Dest=0x7cb7bc0, _Source="SO02431_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" [0233.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0233.549] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b49c00, ftCreationTime.dwHighDateTime=0x1bd4c58, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28b49c00, ftLastWriteTime.dwHighDateTime=0x1bd4c58, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02437_.WMF", cAlternateFileName="")) returned 1 [0233.549] wcscmp (_String1="SO02437_.WMF", _String2=".") returned 1 [0233.549] wcscmp (_String1="SO02437_.WMF", _String2="..") returned 1 [0233.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7c48 [0233.549] wcscpy (in: _Dest=0x7cb7c48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.549] wcscat (in: _Dest=0x7cb7c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.549] wcscat (in: _Dest=0x7cb7c48, _Source="SO02437_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" [0233.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0233.550] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc8da00, ftCreationTime.dwHighDateTime=0x1bd4c58, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1cc8da00, ftLastWriteTime.dwHighDateTime=0x1bd4c58, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02439_.WMF", cAlternateFileName="")) returned 1 [0233.550] wcscmp (_String1="SO02439_.WMF", _String2=".") returned 1 [0233.550] wcscmp (_String1="SO02439_.WMF", _String2="..") returned 1 [0233.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7cd0 [0233.550] wcscpy (in: _Dest=0x7cb7cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.550] wcscat (in: _Dest=0x7cb7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.550] wcscat (in: _Dest=0x7cb7cd0, _Source="SO02439_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" [0233.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0233.551] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02464_.WMF", cAlternateFileName="")) returned 1 [0233.551] wcscmp (_String1="SO02464_.WMF", _String2=".") returned 1 [0233.552] wcscmp (_String1="SO02464_.WMF", _String2="..") returned 1 [0233.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7d58 [0233.552] wcscpy (in: _Dest=0x7cb7d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.552] wcscat (in: _Dest=0x7cb7d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.552] wcscat (in: _Dest=0x7cb7d58, _Source="SO02464_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" [0233.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0233.553] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78816c00, ftCreationTime.dwHighDateTime=0x1bd4c34, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78816c00, ftLastWriteTime.dwHighDateTime=0x1bd4c34, nFileSizeHigh=0x0, nFileSizeLow=0x574, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02465_.WMF", cAlternateFileName="")) returned 1 [0233.553] wcscmp (_String1="SO02465_.WMF", _String2=".") returned 1 [0233.553] wcscmp (_String1="SO02465_.WMF", _String2="..") returned 1 [0233.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7de0 [0233.553] wcscpy (in: _Dest=0x7cb7de0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.553] wcscat (in: _Dest=0x7cb7de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.553] wcscat (in: _Dest=0x7cb7de0, _Source="SO02465_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" [0233.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0233.554] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x19ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02578_.WMF", cAlternateFileName="")) returned 1 [0233.554] wcscmp (_String1="SO02578_.WMF", _String2=".") returned 1 [0233.554] wcscmp (_String1="SO02578_.WMF", _String2="..") returned 1 [0233.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7e68 [0233.554] wcscpy (in: _Dest=0x7cb7e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.554] wcscat (in: _Dest=0x7cb7e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.554] wcscat (in: _Dest=0x7cb7e68, _Source="SO02578_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" [0233.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0233.555] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c080800, ftCreationTime.dwHighDateTime=0x1bd4cb3, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c080800, ftLastWriteTime.dwHighDateTime=0x1bd4cb3, nFileSizeHigh=0x0, nFileSizeLow=0x5fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02617_.WMF", cAlternateFileName="")) returned 1 [0233.555] wcscmp (_String1="SO02617_.WMF", _String2=".") returned 1 [0233.555] wcscmp (_String1="SO02617_.WMF", _String2="..") returned 1 [0233.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7ef0 [0233.555] wcscpy (in: _Dest=0x7cb7ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.555] wcscat (in: _Dest=0x7cb7ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.555] wcscat (in: _Dest=0x7cb7ef0, _Source="SO02617_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" [0233.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0233.556] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905a0570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7f4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02790_.WMF", cAlternateFileName="")) returned 1 [0233.556] wcscmp (_String1="SO02790_.WMF", _String2=".") returned 1 [0233.556] wcscmp (_String1="SO02790_.WMF", _String2="..") returned 1 [0233.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cb7f78 [0233.556] wcscpy (in: _Dest=0x7cb7f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.556] wcscat (in: _Dest=0x7cb7f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.557] wcscat (in: _Dest=0x7cb7f78, _Source="SO02790_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" [0233.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0233.557] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb2d00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcb2d00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x430c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02791_.WMF", cAlternateFileName="")) returned 1 [0233.557] wcscmp (_String1="SO02791_.WMF", _String2=".") returned 1 [0233.557] wcscmp (_String1="SO02791_.WMF", _String2="..") returned 1 [0233.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0020 [0233.558] wcscpy (in: _Dest=0x7cc0020, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.558] wcscat (in: _Dest=0x7cc0020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.558] wcscat (in: _Dest=0x7cc0020, _Source="SO02791_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" [0233.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0233.559] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02793_.WMF", cAlternateFileName="")) returned 1 [0233.559] wcscmp (_String1="SO02793_.WMF", _String2=".") returned 1 [0233.559] wcscmp (_String1="SO02793_.WMF", _String2="..") returned 1 [0233.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc00a8 [0233.559] wcscpy (in: _Dest=0x7cc00a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.559] wcscat (in: _Dest=0x7cc00a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.559] wcscat (in: _Dest=0x7cc00a8, _Source="SO02793_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" [0233.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc00a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0233.560] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4b7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02794_.WMF", cAlternateFileName="")) returned 1 [0233.560] wcscmp (_String1="SO02794_.WMF", _String2=".") returned 1 [0233.560] wcscmp (_String1="SO02794_.WMF", _String2="..") returned 1 [0233.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0130 [0233.560] wcscpy (in: _Dest=0x7cc0130, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.560] wcscat (in: _Dest=0x7cc0130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.560] wcscat (in: _Dest=0x7cc0130, _Source="SO02794_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" [0233.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0233.561] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1262e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02862_.WMF", cAlternateFileName="")) returned 1 [0233.561] wcscmp (_String1="SO02862_.WMF", _String2=".") returned 1 [0233.561] wcscmp (_String1="SO02862_.WMF", _String2="..") returned 1 [0233.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc01b8 [0233.561] wcscpy (in: _Dest=0x7cc01b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.561] wcscat (in: _Dest=0x7cc01b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.561] wcscat (in: _Dest=0x7cc01b8, _Source="SO02862_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" [0233.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc01b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0233.562] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x967a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02886_.WMF", cAlternateFileName="")) returned 1 [0233.562] wcscmp (_String1="SO02886_.WMF", _String2=".") returned 1 [0233.562] wcscmp (_String1="SO02886_.WMF", _String2="..") returned 1 [0233.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0240 [0233.562] wcscpy (in: _Dest=0x7cc0240, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.562] wcscat (in: _Dest=0x7cc0240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.562] wcscat (in: _Dest=0x7cc0240, _Source="SO02886_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" [0233.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0233.563] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x82651590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x22f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02958_.WMF", cAlternateFileName="")) returned 1 [0233.563] wcscmp (_String1="SO02958_.WMF", _String2=".") returned 1 [0233.563] wcscmp (_String1="SO02958_.WMF", _String2="..") returned 1 [0233.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc02c8 [0233.564] wcscpy (in: _Dest=0x7cc02c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.564] wcscat (in: _Dest=0x7cc02c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.564] wcscat (in: _Dest=0x7cc02c8, _Source="SO02958_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" [0233.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc02c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0233.564] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x107b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE_01.MID", cAlternateFileName="")) returned 1 [0233.564] wcscmp (_String1="SPACE_01.MID", _String2=".") returned 1 [0233.565] wcscmp (_String1="SPACE_01.MID", _String2="..") returned 1 [0233.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0350 [0233.565] wcscpy (in: _Dest=0x7cc0350, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.565] wcscat (in: _Dest=0x7cc0350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.565] wcscat (in: _Dest=0x7cc0350, _Source="SPACE_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" [0233.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0233.566] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRNG_01.MID", cAlternateFileName="")) returned 1 [0233.566] wcscmp (_String1="SPRNG_01.MID", _String2=".") returned 1 [0233.566] wcscmp (_String1="SPRNG_01.MID", _String2="..") returned 1 [0233.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc03d8 [0233.566] wcscpy (in: _Dest=0x7cc03d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.566] wcscat (in: _Dest=0x7cc03d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.566] wcscat (in: _Dest=0x7cc03d8, _Source="SPRNG_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" [0233.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc03d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0233.567] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUBBY1.WMF", cAlternateFileName="")) returned 1 [0233.567] wcscmp (_String1="STUBBY1.WMF", _String2=".") returned 1 [0233.567] wcscmp (_String1="STUBBY1.WMF", _String2="..") returned 1 [0233.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7cc0460 [0233.567] wcscpy (in: _Dest=0x7cc0460, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0233.567] wcscat (in: _Dest=0x7cc0460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0233.567] wcscat (in: _Dest=0x7cc0460, _Source="STUBBY1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" [0233.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0234.004] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUBBY2.WMF", cAlternateFileName="")) returned 1 [0234.004] wcscmp (_String1="STUBBY2.WMF", _String2=".") returned 1 [0234.004] wcscmp (_String1="STUBBY2.WMF", _String2="..") returned 1 [0234.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7cc04e8 [0234.004] wcscpy (in: _Dest=0x7cc04e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.004] wcscat (in: _Dest=0x7cc04e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.004] wcscat (in: _Dest=0x7cc04e8, _Source="STUBBY2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" [0234.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc04e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0234.005] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x36dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMER_01.MID", cAlternateFileName="")) returned 1 [0234.005] wcscmp (_String1="SUMER_01.MID", _String2=".") returned 1 [0234.006] wcscmp (_String1="SUMER_01.MID", _String2="..") returned 1 [0234.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0570 [0234.006] wcscpy (in: _Dest=0x7cc0570, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.006] wcscat (in: _Dest=0x7cc0570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.006] wcscat (in: _Dest=0x7cc0570, _Source="SUMER_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" [0234.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0234.007] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2135, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWEST_01.MID", cAlternateFileName="")) returned 1 [0234.007] wcscmp (_String1="SWEST_01.MID", _String2=".") returned 1 [0234.007] wcscmp (_String1="SWEST_01.MID", _String2="..") returned 1 [0234.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc05f8 [0234.007] wcscpy (in: _Dest=0x7cc05f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.007] wcscat (in: _Dest=0x7cc05f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.007] wcscat (in: _Dest=0x7cc05f8, _Source="SWEST_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" [0234.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc05f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0234.009] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59ac700, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ac700, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00110_.WMF", cAlternateFileName="")) returned 1 [0234.009] wcscmp (_String1="SY00110_.WMF", _String2=".") returned 1 [0234.009] wcscmp (_String1="SY00110_.WMF", _String2="..") returned 1 [0234.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0680 [0234.009] wcscpy (in: _Dest=0x7cc0680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.009] wcscat (in: _Dest=0x7cc0680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.009] wcscat (in: _Dest=0x7cc0680, _Source="SY00110_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" [0234.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0234.010] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca3af00, ftCreationTime.dwHighDateTime=0x1bd4b7e, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ca3af00, ftLastWriteTime.dwHighDateTime=0x1bd4b7e, nFileSizeHigh=0x0, nFileSizeLow=0x1844, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00127_.WMF", cAlternateFileName="")) returned 1 [0234.010] wcscmp (_String1="SY00127_.WMF", _String2=".") returned 1 [0234.010] wcscmp (_String1="SY00127_.WMF", _String2="..") returned 1 [0234.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0708 [0234.011] wcscpy (in: _Dest=0x7cc0708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.011] wcscat (in: _Dest=0x7cc0708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.011] wcscat (in: _Dest=0x7cc0708, _Source="SY00127_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" [0234.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0234.012] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7097ce00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7097ce00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x81c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00132_.WMF", cAlternateFileName="")) returned 1 [0234.012] wcscmp (_String1="SY00132_.WMF", _String2=".") returned 1 [0234.012] wcscmp (_String1="SY00132_.WMF", _String2="..") returned 1 [0234.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0790 [0234.012] wcscpy (in: _Dest=0x7cc0790, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.012] wcscat (in: _Dest=0x7cc0790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.012] wcscat (in: _Dest=0x7cc0790, _Source="SY00132_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" [0234.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0234.013] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4699a00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4699a00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00170_.WMF", cAlternateFileName="")) returned 1 [0234.013] wcscmp (_String1="SY00170_.WMF", _String2=".") returned 1 [0234.013] wcscmp (_String1="SY00170_.WMF", _String2="..") returned 1 [0234.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0818 [0234.014] wcscpy (in: _Dest=0x7cc0818, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.014] wcscat (in: _Dest=0x7cc0818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.014] wcscat (in: _Dest=0x7cc0818, _Source="SY00170_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" [0234.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0234.015] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a50300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd2a50300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x50c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00560_.WMF", cAlternateFileName="")) returned 1 [0234.015] wcscmp (_String1="SY00560_.WMF", _String2=".") returned 1 [0234.015] wcscmp (_String1="SY00560_.WMF", _String2="..") returned 1 [0234.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc08a0 [0234.015] wcscpy (in: _Dest=0x7cc08a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.015] wcscat (in: _Dest=0x7cc08a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.015] wcscat (in: _Dest=0x7cc08a0, _Source="SY00560_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" [0234.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc08a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0234.016] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c99700, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66c99700, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00642_.WMF", cAlternateFileName="")) returned 1 [0234.016] wcscmp (_String1="SY00642_.WMF", _String2=".") returned 1 [0234.016] wcscmp (_String1="SY00642_.WMF", _String2="..") returned 1 [0234.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0928 [0234.017] wcscpy (in: _Dest=0x7cc0928, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.017] wcscat (in: _Dest=0x7cc0928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.017] wcscat (in: _Dest=0x7cc0928, _Source="SY00642_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" [0234.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0234.018] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00788_.WMF", cAlternateFileName="")) returned 1 [0234.018] wcscmp (_String1="SY00788_.WMF", _String2=".") returned 1 [0234.018] wcscmp (_String1="SY00788_.WMF", _String2="..") returned 1 [0234.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc09b0 [0234.018] wcscpy (in: _Dest=0x7cc09b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.018] wcscat (in: _Dest=0x7cc09b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.018] wcscat (in: _Dest=0x7cc09b0, _Source="SY00788_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" [0234.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc09b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0234.020] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00792_.WMF", cAlternateFileName="")) returned 1 [0234.156] wcscmp (_String1="SY00792_.WMF", _String2=".") returned 1 [0234.156] wcscmp (_String1="SY00792_.WMF", _String2="..") returned 1 [0234.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a65328 [0234.156] wcscpy (in: _Dest=0x7a65328, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.156] wcscat (in: _Dest=0x7a65328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.156] wcscat (in: _Dest=0x7a65328, _Source="SY00792_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" [0234.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0234.157] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2764, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00795_.WMF", cAlternateFileName="")) returned 1 [0234.158] wcscmp (_String1="SY00795_.WMF", _String2=".") returned 1 [0234.158] wcscmp (_String1="SY00795_.WMF", _String2="..") returned 1 [0234.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0818 [0234.158] wcscpy (in: _Dest=0x7cc0818, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.158] wcscat (in: _Dest=0x7cc0818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.158] wcscat (in: _Dest=0x7cc0818, _Source="SY00795_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" [0234.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0234.159] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa093a100, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa093a100, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY00882_.WMF", cAlternateFileName="")) returned 1 [0234.159] wcscmp (_String1="SY00882_.WMF", _String2=".") returned 1 [0234.159] wcscmp (_String1="SY00882_.WMF", _String2="..") returned 1 [0234.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0a38 [0234.159] wcscpy (in: _Dest=0x7cc0a38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.159] wcscat (in: _Dest=0x7cc0a38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.159] wcscat (in: _Dest=0x7cc0a38, _Source="SY00882_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" [0234.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0234.160] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01006_.WMF", cAlternateFileName="")) returned 1 [0234.160] wcscmp (_String1="SY01006_.WMF", _String2=".") returned 1 [0234.160] wcscmp (_String1="SY01006_.WMF", _String2="..") returned 1 [0234.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0ac0 [0234.161] wcscpy (in: _Dest=0x7cc0ac0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.161] wcscat (in: _Dest=0x7cc0ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.161] wcscat (in: _Dest=0x7cc0ac0, _Source="SY01006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" [0234.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0234.162] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b91b000, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b91b000, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x2734, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01252_.WMF", cAlternateFileName="")) returned 1 [0234.162] wcscmp (_String1="SY01252_.WMF", _String2=".") returned 1 [0234.162] wcscmp (_String1="SY01252_.WMF", _String2="..") returned 1 [0234.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0b48 [0234.162] wcscpy (in: _Dest=0x7cc0b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.162] wcscat (in: _Dest=0x7cc0b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.162] wcscat (in: _Dest=0x7cc0b48, _Source="SY01252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" [0234.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0234.163] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a608300, ftCreationTime.dwHighDateTime=0x1bd4c4c, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a608300, ftLastWriteTime.dwHighDateTime=0x1bd4c4c, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01253_.WMF", cAlternateFileName="")) returned 1 [0234.163] wcscmp (_String1="SY01253_.WMF", _String2=".") returned 1 [0234.163] wcscmp (_String1="SY01253_.WMF", _String2="..") returned 1 [0234.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0bd0 [0234.163] wcscpy (in: _Dest=0x7cc0bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.163] wcscat (in: _Dest=0x7cc0bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.163] wcscat (in: _Dest=0x7cc0bd0, _Source="SY01253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" [0234.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0234.165] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8996a100, ftCreationTime.dwHighDateTime=0x1bd4c65, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8996a100, ftLastWriteTime.dwHighDateTime=0x1bd4c65, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01462_.WMF", cAlternateFileName="")) returned 1 [0234.165] wcscmp (_String1="SY01462_.WMF", _String2=".") returned 1 [0234.165] wcscmp (_String1="SY01462_.WMF", _String2="..") returned 1 [0234.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0c58 [0234.165] wcscpy (in: _Dest=0x7cc0c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.165] wcscat (in: _Dest=0x7cc0c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.165] wcscat (in: _Dest=0x7cc0c58, _Source="SY01462_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" [0234.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0234.167] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c163600, ftCreationTime.dwHighDateTime=0x1bd4c5d, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c163600, ftLastWriteTime.dwHighDateTime=0x1bd4c5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01491_.WMF", cAlternateFileName="")) returned 1 [0234.169] wcscmp (_String1="SY01491_.WMF", _String2=".") returned 1 [0234.169] wcscmp (_String1="SY01491_.WMF", _String2="..") returned 1 [0234.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0ce0 [0234.169] wcscpy (in: _Dest=0x7cc0ce0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.169] wcscat (in: _Dest=0x7cc0ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.169] wcscat (in: _Dest=0x7cc0ce0, _Source="SY01491_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" [0234.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0234.171] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad96d00, ftCreationTime.dwHighDateTime=0x1bd4c32, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdad96d00, ftLastWriteTime.dwHighDateTime=0x1bd4c32, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01563_.WMF", cAlternateFileName="")) returned 1 [0234.171] wcscmp (_String1="SY01563_.WMF", _String2=".") returned 1 [0234.171] wcscmp (_String1="SY01563_.WMF", _String2="..") returned 1 [0234.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0d68 [0234.171] wcscpy (in: _Dest=0x7cc0d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.171] wcscat (in: _Dest=0x7cc0d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.171] wcscat (in: _Dest=0x7cc0d68, _Source="SY01563_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" [0234.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0234.172] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146ea000, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x146ea000, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01572_.WMF", cAlternateFileName="")) returned 1 [0234.172] wcscmp (_String1="SY01572_.WMF", _String2=".") returned 1 [0234.172] wcscmp (_String1="SY01572_.WMF", _String2="..") returned 1 [0234.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0df0 [0234.172] wcscpy (in: _Dest=0x7cc0df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.172] wcscat (in: _Dest=0x7cc0df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.173] wcscat (in: _Dest=0x7cc0df0, _Source="SY01572_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" [0234.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0234.174] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcf7b00, ftCreationTime.dwHighDateTime=0x1bd4cb2, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6fcf7b00, ftLastWriteTime.dwHighDateTime=0x1bd4cb2, nFileSizeHigh=0x0, nFileSizeLow=0x338e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY01590_.WMF", cAlternateFileName="")) returned 1 [0234.174] wcscmp (_String1="SY01590_.WMF", _String2=".") returned 1 [0234.174] wcscmp (_String1="SY01590_.WMF", _String2="..") returned 1 [0234.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0e78 [0234.174] wcscpy (in: _Dest=0x7cc0e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.174] wcscat (in: _Dest=0x7cc0e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.174] wcscat (in: _Dest=0x7cc0e78, _Source="SY01590_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" [0234.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0234.175] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAIL.WMF", cAlternateFileName="")) returned 1 [0234.175] wcscmp (_String1="TAIL.WMF", _String2=".") returned 1 [0234.175] wcscmp (_String1="TAIL.WMF", _String2="..") returned 1 [0234.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a318 [0234.175] wcscpy (in: _Dest=0x3e1a318, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.176] wcscat (in: _Dest=0x3e1a318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.176] wcscat (in: _Dest=0x3e1a318, _Source="TAIL.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" [0234.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0234.177] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e8d1f00, ftCreationTime.dwHighDateTime=0x1bd4b97, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e8d1f00, ftLastWriteTime.dwHighDateTime=0x1bd4b97, nFileSizeHigh=0x0, nFileSizeLow=0xbde2, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00011_.WMF", cAlternateFileName="")) returned 1 [0234.177] wcscmp (_String1="TN00011_.WMF", _String2=".") returned 1 [0234.177] wcscmp (_String1="TN00011_.WMF", _String2="..") returned 1 [0234.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0f00 [0234.177] wcscpy (in: _Dest=0x7cc0f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.177] wcscat (in: _Dest=0x7cc0f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.177] wcscat (in: _Dest=0x7cc0f00, _Source="TN00011_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" [0234.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0234.178] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00014_.WMF", cAlternateFileName="")) returned 1 [0234.178] wcscmp (_String1="TN00014_.WMF", _String2=".") returned 1 [0234.178] wcscmp (_String1="TN00014_.WMF", _String2="..") returned 1 [0234.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0f88 [0234.179] wcscpy (in: _Dest=0x7cc0f88, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.179] wcscat (in: _Dest=0x7cc0f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.179] wcscat (in: _Dest=0x7cc0f88, _Source="TN00014_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" [0234.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0234.180] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x243c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00018_.WMF", cAlternateFileName="")) returned 1 [0234.180] wcscmp (_String1="TN00018_.WMF", _String2=".") returned 1 [0234.180] wcscmp (_String1="TN00018_.WMF", _String2="..") returned 1 [0234.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1010 [0234.180] wcscpy (in: _Dest=0x7cc1010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.180] wcscat (in: _Dest=0x7cc1010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.180] wcscat (in: _Dest=0x7cc1010, _Source="TN00018_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" [0234.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0234.182] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x175a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00095_.WMF", cAlternateFileName="")) returned 1 [0234.182] wcscmp (_String1="TN00095_.WMF", _String2=".") returned 1 [0234.182] wcscmp (_String1="TN00095_.WMF", _String2="..") returned 1 [0234.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1098 [0234.182] wcscpy (in: _Dest=0x7cc1098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.182] wcscat (in: _Dest=0x7cc1098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.182] wcscat (in: _Dest=0x7cc1098, _Source="TN00095_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" [0234.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0234.183] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8fe8f00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8fe8f00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x1c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00211_.WMF", cAlternateFileName="")) returned 1 [0234.183] wcscmp (_String1="TN00211_.WMF", _String2=".") returned 1 [0234.183] wcscmp (_String1="TN00211_.WMF", _String2="..") returned 1 [0234.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1120 [0234.183] wcscpy (in: _Dest=0x7cc1120, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.183] wcscat (in: _Dest=0x7cc1120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.183] wcscat (in: _Dest=0x7cc1120, _Source="TN00211_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" [0234.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0234.185] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e98700, ftCreationTime.dwHighDateTime=0x1bd4b96, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66e98700, ftLastWriteTime.dwHighDateTime=0x1bd4b96, nFileSizeHigh=0x0, nFileSizeLow=0x1224, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00217_.WMF", cAlternateFileName="")) returned 1 [0234.185] wcscmp (_String1="TN00217_.WMF", _String2=".") returned 1 [0234.185] wcscmp (_String1="TN00217_.WMF", _String2="..") returned 1 [0234.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc11a8 [0234.185] wcscpy (in: _Dest=0x7cc11a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.185] wcscat (in: _Dest=0x7cc11a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.185] wcscat (in: _Dest=0x7cc11a8, _Source="TN00217_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" [0234.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc11a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0234.186] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a517c00, ftCreationTime.dwHighDateTime=0x1bd4b95, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a517c00, ftLastWriteTime.dwHighDateTime=0x1bd4b95, nFileSizeHigh=0x0, nFileSizeLow=0x1bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00218_.WMF", cAlternateFileName="")) returned 1 [0234.186] wcscmp (_String1="TN00218_.WMF", _String2=".") returned 1 [0234.186] wcscmp (_String1="TN00218_.WMF", _String2="..") returned 1 [0234.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1230 [0234.186] wcscpy (in: _Dest=0x7cc1230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.187] wcscat (in: _Dest=0x7cc1230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.187] wcscat (in: _Dest=0x7cc1230, _Source="TN00218_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" [0234.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0234.188] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ced000, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8ced000, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00231_.WMF", cAlternateFileName="")) returned 1 [0234.188] wcscmp (_String1="TN00231_.WMF", _String2=".") returned 1 [0234.188] wcscmp (_String1="TN00231_.WMF", _String2="..") returned 1 [0234.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc12b8 [0234.188] wcscpy (in: _Dest=0x7cc12b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.188] wcscat (in: _Dest=0x7cc12b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.188] wcscat (in: _Dest=0x7cc12b8, _Source="TN00231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" [0234.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc12b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0234.189] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaad5a00, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfaad5a00, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0xc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00234_.WMF", cAlternateFileName="")) returned 1 [0234.189] wcscmp (_String1="TN00234_.WMF", _String2=".") returned 1 [0234.189] wcscmp (_String1="TN00234_.WMF", _String2="..") returned 1 [0234.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1340 [0234.189] wcscpy (in: _Dest=0x7cc1340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.189] wcscat (in: _Dest=0x7cc1340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.189] wcscat (in: _Dest=0x7cc1340, _Source="TN00234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" [0234.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0234.191] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d8b200, ftCreationTime.dwHighDateTime=0x1bd4b7a, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4d8b200, ftLastWriteTime.dwHighDateTime=0x1bd4b7a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00241_.WMF", cAlternateFileName="")) returned 1 [0234.191] wcscmp (_String1="TN00241_.WMF", _String2=".") returned 1 [0234.191] wcscmp (_String1="TN00241_.WMF", _String2="..") returned 1 [0234.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc13c8 [0234.191] wcscpy (in: _Dest=0x7cc13c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.191] wcscat (in: _Dest=0x7cc13c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.191] wcscat (in: _Dest=0x7cc13c8, _Source="TN00241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" [0234.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc13c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0234.192] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3386d00, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3386d00, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0xf74, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00246_.WMF", cAlternateFileName="")) returned 1 [0234.192] wcscmp (_String1="TN00246_.WMF", _String2=".") returned 1 [0234.192] wcscmp (_String1="TN00246_.WMF", _String2="..") returned 1 [0234.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1450 [0234.192] wcscpy (in: _Dest=0x7cc1450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.192] wcscat (in: _Dest=0x7cc1450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.192] wcscat (in: _Dest=0x7cc1450, _Source="TN00246_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" [0234.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0234.194] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2074000, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2074000, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00253_.WMF", cAlternateFileName="")) returned 1 [0234.194] wcscmp (_String1="TN00253_.WMF", _String2=".") returned 1 [0234.194] wcscmp (_String1="TN00253_.WMF", _String2="..") returned 1 [0234.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc14d8 [0234.194] wcscpy (in: _Dest=0x7cc14d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0234.194] wcscat (in: _Dest=0x7cc14d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0234.194] wcscat (in: _Dest=0x7cc14d8, _Source="TN00253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" [0234.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc14d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0235.259] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b822200, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b822200, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x1da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00255_.WMF", cAlternateFileName="")) returned 1 [0235.259] wcscmp (_String1="TN00255_.WMF", _String2=".") returned 1 [0235.259] wcscmp (_String1="TN00255_.WMF", _String2="..") returned 1 [0235.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0818 [0235.260] wcscpy (in: _Dest=0x7cc0818, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.260] wcscat (in: _Dest=0x7cc0818, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.260] wcscat (in: _Dest=0x7cc0818, _Source="TN00255_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" [0235.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0235.261] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x194d2a00, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x194d2a00, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00330_.WMF", cAlternateFileName="")) returned 1 [0235.261] wcscmp (_String1="TN00330_.WMF", _String2=".") returned 1 [0235.261] wcscmp (_String1="TN00330_.WMF", _String2="..") returned 1 [0235.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc08a0 [0235.261] wcscpy (in: _Dest=0x7cc08a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.261] wcscat (in: _Dest=0x7cc08a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.261] wcscat (in: _Dest=0x7cc08a0, _Source="TN00330_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" [0235.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc08a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0235.263] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00411_.WMF", cAlternateFileName="")) returned 1 [0235.263] wcscmp (_String1="TN00411_.WMF", _String2=".") returned 1 [0235.263] wcscmp (_String1="TN00411_.WMF", _String2="..") returned 1 [0235.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0928 [0235.263] wcscpy (in: _Dest=0x7cc0928, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.263] wcscat (in: _Dest=0x7cc0928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.263] wcscat (in: _Dest=0x7cc0928, _Source="TN00411_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" [0235.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0235.269] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d36900, ftCreationTime.dwHighDateTime=0x1bd4c3b, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3d36900, ftLastWriteTime.dwHighDateTime=0x1bd4c3b, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN00687_.WMF", cAlternateFileName="")) returned 1 [0235.269] wcscmp (_String1="TN00687_.WMF", _String2=".") returned 1 [0235.269] wcscmp (_String1="TN00687_.WMF", _String2="..") returned 1 [0235.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc09b0 [0235.269] wcscpy (in: _Dest=0x7cc09b0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.269] wcscat (in: _Dest=0x7cc09b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.269] wcscat (in: _Dest=0x7cc09b0, _Source="TN00687_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" [0235.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc09b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0235.274] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c58d700, ftCreationTime.dwHighDateTime=0x1bd4c53, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c58d700, ftLastWriteTime.dwHighDateTime=0x1bd4c53, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01164_.WMF", cAlternateFileName="")) returned 1 [0235.274] wcscmp (_String1="TN01164_.WMF", _String2=".") returned 1 [0235.274] wcscmp (_String1="TN01164_.WMF", _String2="..") returned 1 [0235.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc04e8 [0235.274] wcscpy (in: _Dest=0x7cc04e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.274] wcscat (in: _Dest=0x7cc04e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.274] wcscat (in: _Dest=0x7cc04e8, _Source="TN01164_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" [0235.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc04e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0235.278] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef5700, ftCreationTime.dwHighDateTime=0x1bd4c54, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ef5700, ftLastWriteTime.dwHighDateTime=0x1bd4c54, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01165_.WMF", cAlternateFileName="")) returned 1 [0235.278] wcscmp (_String1="TN01165_.WMF", _String2=".") returned 1 [0235.278] wcscmp (_String1="TN01165_.WMF", _String2="..") returned 1 [0235.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0570 [0235.278] wcscpy (in: _Dest=0x7cc0570, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.278] wcscat (in: _Dest=0x7cc0570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.278] wcscat (in: _Dest=0x7cc0570, _Source="TN01165_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" [0235.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0235.280] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x4e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="TN01308_.WMF", cAlternateFileName="")) returned 1 [0235.280] wcscmp (_String1="TN01308_.WMF", _String2=".") returned 1 [0235.280] wcscmp (_String1="TN01308_.WMF", _String2="..") returned 1 [0235.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc05f8 [0235.280] wcscpy (in: _Dest=0x7cc05f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.280] wcscat (in: _Dest=0x7cc05f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.280] wcscat (in: _Dest=0x7cc05f8, _Source="TN01308_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" [0235.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc05f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0235.282] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec238c00, ftCreationTime.dwHighDateTime=0x1bf117d, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec238c00, ftLastWriteTime.dwHighDateTime=0x1bf117d, nFileSizeHigh=0x0, nFileSizeLow=0x276a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00006_.WMF", cAlternateFileName="")) returned 1 [0235.282] wcscmp (_String1="TR00006_.WMF", _String2=".") returned 1 [0235.283] wcscmp (_String1="TR00006_.WMF", _String2="..") returned 1 [0235.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0680 [0235.283] wcscpy (in: _Dest=0x7cc0680, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.283] wcscat (in: _Dest=0x7cc0680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.283] wcscat (in: _Dest=0x7cc0680, _Source="TR00006_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" [0235.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0235.285] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c28c600, ftCreationTime.dwHighDateTime=0x1bd4b93, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8c28c600, ftLastWriteTime.dwHighDateTime=0x1bd4b93, nFileSizeHigh=0x0, nFileSizeLow=0x228c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00095_.WMF", cAlternateFileName="")) returned 1 [0235.286] wcscmp (_String1="TR00095_.WMF", _String2=".") returned 1 [0235.286] wcscmp (_String1="TR00095_.WMF", _String2="..") returned 1 [0235.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0708 [0235.286] wcscpy (in: _Dest=0x7cc0708, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.286] wcscat (in: _Dest=0x7cc0708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.286] wcscat (in: _Dest=0x7cc0708, _Source="TR00095_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" [0235.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0235.287] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61300, ftCreationTime.dwHighDateTime=0x1bd4b48, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd61300, ftLastWriteTime.dwHighDateTime=0x1bd4b48, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00097_.WMF", cAlternateFileName="")) returned 1 [0235.288] wcscmp (_String1="TR00097_.WMF", _String2=".") returned 1 [0235.288] wcscmp (_String1="TR00097_.WMF", _String2="..") returned 1 [0235.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc02c8 [0235.288] wcscpy (in: _Dest=0x7cc02c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.288] wcscat (in: _Dest=0x7cc02c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.288] wcscat (in: _Dest=0x7cc02c8, _Source="TR00097_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" [0235.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc02c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0235.289] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d565300, ftCreationTime.dwHighDateTime=0x1bd4b79, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d565300, ftLastWriteTime.dwHighDateTime=0x1bd4b79, nFileSizeHigh=0x0, nFileSizeLow=0x25bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00116_.WMF", cAlternateFileName="")) returned 1 [0235.305] wcscmp (_String1="TR00116_.WMF", _String2=".") returned 1 [0235.305] wcscmp (_String1="TR00116_.WMF", _String2="..") returned 1 [0235.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc01b8 [0235.305] wcscpy (in: _Dest=0x7cc01b8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.305] wcscat (in: _Dest=0x7cc01b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.305] wcscat (in: _Dest=0x7cc01b8, _Source="TR00116_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" [0235.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc01b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0235.307] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc20be00, ftCreationTime.dwHighDateTime=0x1bf3c3e, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc20be00, ftLastWriteTime.dwHighDateTime=0x1bf3c3e, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00126_.WMF", cAlternateFileName="")) returned 1 [0235.307] wcscmp (_String1="TR00126_.WMF", _String2=".") returned 1 [0235.307] wcscmp (_String1="TR00126_.WMF", _String2="..") returned 1 [0235.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0130 [0235.307] wcscpy (in: _Dest=0x7cc0130, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.307] wcscat (in: _Dest=0x7cc0130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.307] wcscat (in: _Dest=0x7cc0130, _Source="TR00126_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" [0235.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0235.309] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc724f00, ftCreationTime.dwHighDateTime=0x1bd4b67, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc724f00, ftLastWriteTime.dwHighDateTime=0x1bd4b67, nFileSizeHigh=0x0, nFileSizeLow=0x235c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00172_.WMF", cAlternateFileName="")) returned 1 [0235.309] wcscmp (_String1="TR00172_.WMF", _String2=".") returned 1 [0235.309] wcscmp (_String1="TR00172_.WMF", _String2="..") returned 1 [0235.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc00a8 [0235.309] wcscpy (in: _Dest=0x7cc00a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.309] wcscat (in: _Dest=0x7cc00a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.309] wcscat (in: _Dest=0x7cc00a8, _Source="TR00172_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" [0235.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc00a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0235.310] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff0e00, ftCreationTime.dwHighDateTime=0x1bd4b56, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaff0e00, ftLastWriteTime.dwHighDateTime=0x1bd4b56, nFileSizeHigh=0x0, nFileSizeLow=0x2142, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00178_.WMF", cAlternateFileName="")) returned 1 [0235.310] wcscmp (_String1="TR00178_.WMF", _String2=".") returned 1 [0235.310] wcscmp (_String1="TR00178_.WMF", _String2="..") returned 1 [0235.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0020 [0235.311] wcscpy (in: _Dest=0x7cc0020, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.311] wcscat (in: _Dest=0x7cc0020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.311] wcscat (in: _Dest=0x7cc0020, _Source="TR00178_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" [0235.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0235.312] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4317200, ftCreationTime.dwHighDateTime=0x1bf32b0, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4317200, ftLastWriteTime.dwHighDateTime=0x1bf32b0, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00232_.WMF", cAlternateFileName="")) returned 1 [0235.312] wcscmp (_String1="TR00232_.WMF", _String2=".") returned 1 [0235.312] wcscmp (_String1="TR00232_.WMF", _String2="..") returned 1 [0235.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc03d8 [0235.312] wcscpy (in: _Dest=0x7cc03d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.313] wcscat (in: _Dest=0x7cc03d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.313] wcscat (in: _Dest=0x7cc03d8, _Source="TR00232_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" [0235.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc03d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0235.314] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d78500, ftCreationTime.dwHighDateTime=0x1bd4b67, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90d78500, ftLastWriteTime.dwHighDateTime=0x1bd4b67, nFileSizeHigh=0x0, nFileSizeLow=0x7c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00233_.WMF", cAlternateFileName="")) returned 1 [0235.314] wcscmp (_String1="TR00233_.WMF", _String2=".") returned 1 [0235.314] wcscmp (_String1="TR00233_.WMF", _String2="..") returned 1 [0235.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0350 [0235.314] wcscpy (in: _Dest=0x7cc0350, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.314] wcscat (in: _Dest=0x7cc0350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.314] wcscat (in: _Dest=0x7cc0350, _Source="TR00233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" [0235.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0235.316] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc5a00, ftCreationTime.dwHighDateTime=0x1c7a7ca, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefc5a00, ftLastWriteTime.dwHighDateTime=0x1c7a7ca, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00402_.WMF", cAlternateFileName="")) returned 1 [0235.316] wcscmp (_String1="TR00402_.WMF", _String2=".") returned 1 [0235.316] wcscmp (_String1="TR00402_.WMF", _String2="..") returned 1 [0235.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0240 [0235.316] wcscpy (in: _Dest=0x7cc0240, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.316] wcscat (in: _Dest=0x7cc0240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.316] wcscat (in: _Dest=0x7cc0240, _Source="TR00402_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" [0235.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0235.317] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746e4200, ftCreationTime.dwHighDateTime=0x1bd4c66, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x746e4200, ftLastWriteTime.dwHighDateTime=0x1bd4c66, nFileSizeHigh=0x0, nFileSizeLow=0x2054, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00482_.WMF", cAlternateFileName="")) returned 1 [0235.318] wcscmp (_String1="TR00482_.WMF", _String2=".") returned 1 [0235.318] wcscmp (_String1="TR00482_.WMF", _String2="..") returned 1 [0235.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0460 [0235.318] wcscpy (in: _Dest=0x7cc0460, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.318] wcscat (in: _Dest=0x7cc0460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.318] wcscat (in: _Dest=0x7cc0460, _Source="TR00482_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" [0235.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0235.320] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a921200, ftCreationTime.dwHighDateTime=0x1bd4c59, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a921200, ftLastWriteTime.dwHighDateTime=0x1bd4c59, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TR00494_.WMF", cAlternateFileName="")) returned 1 [0235.320] wcscmp (_String1="TR00494_.WMF", _String2=".") returned 1 [0235.320] wcscmp (_String1="TR00494_.WMF", _String2="..") returned 1 [0235.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc0790 [0235.320] wcscpy (in: _Dest=0x7cc0790, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.320] wcscat (in: _Dest=0x7cc0790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.320] wcscat (in: _Dest=0x7cc0790, _Source="TR00494_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" [0235.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0235.321] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x921e4ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x342e, dwReserved0=0x0, dwReserved1=0x0, cFileName="URBAN_01.MID", cAlternateFileName="")) returned 1 [0235.322] wcscmp (_String1="URBAN_01.MID", _String2=".") returned 1 [0235.322] wcscmp (_String1="URBAN_01.MID", _String2="..") returned 1 [0235.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1560 [0235.322] wcscpy (in: _Dest=0x7cc1560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.322] wcscat (in: _Dest=0x7cc1560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.322] wcscat (in: _Dest=0x7cc1560, _Source="URBAN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" [0235.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0235.324] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="VCTRN_01.MID", cAlternateFileName="")) returned 1 [0235.324] wcscmp (_String1="VCTRN_01.MID", _String2=".") returned 1 [0235.324] wcscmp (_String1="VCTRN_01.MID", _String2="..") returned 1 [0235.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc15e8 [0235.324] wcscpy (in: _Dest=0x7cc15e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.324] wcscat (in: _Dest=0x7cc15e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.324] wcscat (in: _Dest=0x7cc15e8, _Source="VCTRN_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" [0235.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc15e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0235.326] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb216d900, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb216d900, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01219_.GIF", cAlternateFileName="")) returned 1 [0235.326] wcscmp (_String1="WB01219_.GIF", _String2=".") returned 1 [0235.326] wcscmp (_String1="WB01219_.GIF", _String2="..") returned 1 [0235.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1670 [0235.326] wcscpy (in: _Dest=0x7cc1670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.326] wcscat (in: _Dest=0x7cc1670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.326] wcscat (in: _Dest=0x7cc1670, _Source="WB01219_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" [0235.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0235.355] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9539d000, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9539d000, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01237_.GIF", cAlternateFileName="")) returned 1 [0235.355] wcscmp (_String1="WB01237_.GIF", _String2=".") returned 1 [0235.355] wcscmp (_String1="WB01237_.GIF", _String2="..") returned 1 [0235.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc16f8 [0235.355] wcscpy (in: _Dest=0x7cc16f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.355] wcscat (in: _Dest=0x7cc16f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.356] wcscat (in: _Dest=0x7cc16f8, _Source="WB01237_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" [0235.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc16f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0235.357] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789d9800, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x789d9800, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x167, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01238_.GIF", cAlternateFileName="")) returned 1 [0235.357] wcscmp (_String1="WB01238_.GIF", _String2=".") returned 1 [0235.357] wcscmp (_String1="WB01238_.GIF", _String2="..") returned 1 [0235.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1780 [0235.357] wcscpy (in: _Dest=0x7cc1780, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.357] wcscat (in: _Dest=0x7cc1780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.357] wcscat (in: _Dest=0x7cc1780, _Source="WB01238_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" [0235.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0235.362] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54da5200, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54da5200, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01239_.GIF", cAlternateFileName="")) returned 1 [0235.362] wcscmp (_String1="WB01239_.GIF", _String2=".") returned 1 [0235.362] wcscmp (_String1="WB01239_.GIF", _String2="..") returned 1 [0235.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1808 [0235.363] wcscpy (in: _Dest=0x7cc1808, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.363] wcscat (in: _Dest=0x7cc1808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.363] wcscat (in: _Dest=0x7cc1808, _Source="WB01239_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" [0235.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0235.364] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x370ced00, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x370ced00, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01240_.GIF", cAlternateFileName="")) returned 1 [0235.365] wcscmp (_String1="WB01240_.GIF", _String2=".") returned 1 [0235.365] wcscmp (_String1="WB01240_.GIF", _String2="..") returned 1 [0235.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1890 [0235.365] wcscpy (in: _Dest=0x7cc1890, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.365] wcscat (in: _Dest=0x7cc1890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.365] wcscat (in: _Dest=0x7cc1890, _Source="WB01240_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" [0235.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0235.366] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba1e200, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ba1e200, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01241_.GIF", cAlternateFileName="")) returned 1 [0235.367] wcscmp (_String1="WB01241_.GIF", _String2=".") returned 1 [0235.367] wcscmp (_String1="WB01241_.GIF", _String2="..") returned 1 [0235.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1918 [0235.367] wcscpy (in: _Dest=0x7cc1918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.367] wcscat (in: _Dest=0x7cc1918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.367] wcscat (in: _Dest=0x7cc1918, _Source="WB01241_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" [0235.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0235.370] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1349a700, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1349a700, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01242_.GIF", cAlternateFileName="")) returned 1 [0235.370] wcscmp (_String1="WB01242_.GIF", _String2=".") returned 1 [0235.370] wcscmp (_String1="WB01242_.GIF", _String2="..") returned 1 [0235.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc19a0 [0235.370] wcscpy (in: _Dest=0x7cc19a0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.370] wcscat (in: _Dest=0x7cc19a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.370] wcscat (in: _Dest=0x7cc19a0, _Source="WB01242_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" [0235.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc19a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0235.372] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d700, ftCreationTime.dwHighDateTime=0x1bd4ed0, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36d700, ftLastWriteTime.dwHighDateTime=0x1bd4ed0, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01243_.GIF", cAlternateFileName="")) returned 1 [0235.372] wcscmp (_String1="WB01243_.GIF", _String2=".") returned 1 [0235.372] wcscmp (_String1="WB01243_.GIF", _String2="..") returned 1 [0235.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1a28 [0235.372] wcscpy (in: _Dest=0x7cc1a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.372] wcscat (in: _Dest=0x7cc1a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.372] wcscat (in: _Dest=0x7cc1a28, _Source="WB01243_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" [0235.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0235.376] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b78e00, ftCreationTime.dwHighDateTime=0x1bd4ecf, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0b78e00, ftLastWriteTime.dwHighDateTime=0x1bd4ecf, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01244_.GIF", cAlternateFileName="")) returned 1 [0235.376] wcscmp (_String1="WB01244_.GIF", _String2=".") returned 1 [0235.376] wcscmp (_String1="WB01244_.GIF", _String2="..") returned 1 [0235.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1ab0 [0235.377] wcscpy (in: _Dest=0x7cc1ab0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.377] wcscat (in: _Dest=0x7cc1ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.377] wcscat (in: _Dest=0x7cc1ab0, _Source="WB01244_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" [0235.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0235.378] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9908000, ftCreationTime.dwHighDateTime=0x1bd4ecf, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe9908000, ftLastWriteTime.dwHighDateTime=0x1bd4ecf, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01245_.GIF", cAlternateFileName="")) returned 1 [0235.378] wcscmp (_String1="WB01245_.GIF", _String2=".") returned 1 [0235.378] wcscmp (_String1="WB01245_.GIF", _String2="..") returned 1 [0235.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1b38 [0235.379] wcscpy (in: _Dest=0x7cc1b38, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.379] wcscat (in: _Dest=0x7cc1b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.379] wcscat (in: _Dest=0x7cc1b38, _Source="WB01245_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" [0235.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0235.385] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda4be00, ftCreationTime.dwHighDateTime=0x1bd4ecf, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdda4be00, ftLastWriteTime.dwHighDateTime=0x1bd4ecf, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01246_.GIF", cAlternateFileName="")) returned 1 [0235.385] wcscmp (_String1="WB01246_.GIF", _String2=".") returned 1 [0235.385] wcscmp (_String1="WB01246_.GIF", _String2="..") returned 1 [0235.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1bc0 [0235.385] wcscpy (in: _Dest=0x7cc1bc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.385] wcscat (in: _Dest=0x7cc1bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.385] wcscat (in: _Dest=0x7cc1bc0, _Source="WB01246_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" [0235.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0235.387] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b43e00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2b43e00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0xff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01253_.GIF", cAlternateFileName="")) returned 1 [0235.387] wcscmp (_String1="WB01253_.GIF", _String2=".") returned 1 [0235.387] wcscmp (_String1="WB01253_.GIF", _String2="..") returned 1 [0235.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1c48 [0235.387] wcscpy (in: _Dest=0x7cc1c48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.387] wcscat (in: _Dest=0x7cc1c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.387] wcscat (in: _Dest=0x7cc1c48, _Source="WB01253_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" [0235.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0235.389] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a859600, ftCreationTime.dwHighDateTime=0x1bd4eca, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a859600, ftLastWriteTime.dwHighDateTime=0x1bd4eca, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01268_.GIF", cAlternateFileName="")) returned 1 [0235.389] wcscmp (_String1="WB01268_.GIF", _String2=".") returned 1 [0235.389] wcscmp (_String1="WB01268_.GIF", _String2="..") returned 1 [0235.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1cd0 [0235.389] wcscpy (in: _Dest=0x7cc1cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.389] wcscat (in: _Dest=0x7cc1cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.389] wcscat (in: _Dest=0x7cc1cd0, _Source="WB01268_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" [0235.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0235.391] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586bda00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x586bda00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01292_.GIF", cAlternateFileName="")) returned 1 [0235.391] wcscmp (_String1="WB01292_.GIF", _String2=".") returned 1 [0235.391] wcscmp (_String1="WB01292_.GIF", _String2="..") returned 1 [0235.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1d58 [0235.391] wcscpy (in: _Dest=0x7cc1d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.391] wcscat (in: _Dest=0x7cc1d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.391] wcscat (in: _Dest=0x7cc1d58, _Source="WB01292_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" [0235.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0235.393] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5144cc00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5144cc00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01293_.GIF", cAlternateFileName="")) returned 1 [0235.393] wcscmp (_String1="WB01293_.GIF", _String2=".") returned 1 [0235.393] wcscmp (_String1="WB01293_.GIF", _String2="..") returned 1 [0235.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1de0 [0235.393] wcscpy (in: _Dest=0x7cc1de0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.393] wcscat (in: _Dest=0x7cc1de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.393] wcscat (in: _Dest=0x7cc1de0, _Source="WB01293_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" [0235.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0235.395] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45590a00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45590a00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01294_.GIF", cAlternateFileName="")) returned 1 [0235.395] wcscmp (_String1="WB01294_.GIF", _String2=".") returned 1 [0235.395] wcscmp (_String1="WB01294_.GIF", _String2="..") returned 1 [0235.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1e68 [0235.395] wcscpy (in: _Dest=0x7cc1e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.395] wcscat (in: _Dest=0x7cc1e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.395] wcscat (in: _Dest=0x7cc1e68, _Source="WB01294_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" [0235.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0235.397] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5ab200, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc5ab200, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01295_.GIF", cAlternateFileName="")) returned 1 [0235.397] wcscmp (_String1="WB01295_.GIF", _String2=".") returned 1 [0235.397] wcscmp (_String1="WB01295_.GIF", _String2="..") returned 1 [0235.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1ef0 [0235.397] wcscpy (in: _Dest=0x7cc1ef0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.397] wcscat (in: _Dest=0x7cc1ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.397] wcscat (in: _Dest=0x7cc1ef0, _Source="WB01295_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" [0235.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0235.402] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eb2b300, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2eb2b300, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x1ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01296_.GIF", cAlternateFileName="")) returned 1 [0235.402] wcscmp (_String1="WB01296_.GIF", _String2=".") returned 1 [0235.402] wcscmp (_String1="WB01296_.GIF", _String2="..") returned 1 [0235.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7cc1f78 [0235.402] wcscpy (in: _Dest=0x7cc1f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.402] wcscat (in: _Dest=0x7cc1f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.402] wcscat (in: _Dest=0x7cc1f78, _Source="WB01296_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" [0235.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0235.404] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bcd200, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28bcd200, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01297_.GIF", cAlternateFileName="")) returned 1 [0235.404] wcscmp (_String1="WB01297_.GIF", _String2=".") returned 1 [0235.404] wcscmp (_String1="WB01297_.GIF", _String2="..") returned 1 [0235.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9bc0 [0235.404] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.404] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.404] wcscat (in: _Dest=0x3eb9bc0, _Source="WB01297_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" [0235.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0235.406] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c6f100, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x22c6f100, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01298_.GIF", cAlternateFileName="")) returned 1 [0235.406] wcscmp (_String1="WB01298_.GIF", _String2=".") returned 1 [0235.406] wcscmp (_String1="WB01298_.GIF", _String2="..") returned 1 [0235.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba550 [0235.406] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.406] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.406] wcscat (in: _Dest=0x3eba550, _Source="WB01298_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" [0235.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0235.407] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x180c5c00, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x180c5c00, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01299_.GIF", cAlternateFileName="")) returned 1 [0235.407] wcscmp (_String1="WB01299_.GIF", _String2=".") returned 1 [0235.407] wcscmp (_String1="WB01299_.GIF", _String2="..") returned 1 [0235.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8bd0 [0235.408] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.408] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.408] wcscat (in: _Dest=0x3eb8bd0, _Source="WB01299_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" [0235.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0235.409] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82f400, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe82f400, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01300_.GIF", cAlternateFileName="")) returned 1 [0235.409] wcscmp (_String1="WB01300_.GIF", _String2=".") returned 1 [0235.409] wcscmp (_String1="WB01300_.GIF", _String2="..") returned 1 [0235.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb96f8 [0235.409] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.409] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.410] wcscat (in: _Dest=0x3eb96f8, _Source="WB01300_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" [0235.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0235.411] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be4000, ftCreationTime.dwHighDateTime=0x1bd4ecc, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9be4000, ftLastWriteTime.dwHighDateTime=0x1bd4ecc, nFileSizeHigh=0x0, nFileSizeLow=0x2a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01301_.GIF", cAlternateFileName="")) returned 1 [0235.411] wcscmp (_String1="WB01301_.GIF", _String2=".") returned 1 [0235.411] wcscmp (_String1="WB01301_.GIF", _String2="..") returned 1 [0235.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0235.411] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.411] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.411] wcscat (in: _Dest=0x3eb9cd0, _Source="WB01301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" [0235.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0235.413] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd5ca00, ftCreationTime.dwHighDateTime=0x1bd4eaf, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5cd5ca00, ftLastWriteTime.dwHighDateTime=0x1bd4eaf, nFileSizeHigh=0x0, nFileSizeLow=0x2076, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01304G.GIF", cAlternateFileName="")) returned 1 [0235.513] wcscmp (_String1="WB01304G.GIF", _String2=".") returned 1 [0235.513] wcscmp (_String1="WB01304G.GIF", _String2="..") returned 1 [0235.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba440 [0235.513] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.513] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.513] wcscat (in: _Dest=0x3eba440, _Source="WB01304G.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" [0235.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0235.515] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69feb300, ftCreationTime.dwHighDateTime=0x1bd4ec7, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69feb300, ftLastWriteTime.dwHighDateTime=0x1bd4ec7, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01330_.GIF", cAlternateFileName="")) returned 1 [0235.515] wcscmp (_String1="WB01330_.GIF", _String2=".") returned 1 [0235.515] wcscmp (_String1="WB01330_.GIF", _String2="..") returned 1 [0235.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0235.515] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.515] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.515] wcscat (in: _Dest=0x3eb8b48, _Source="WB01330_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" [0235.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0235.517] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c9f2300, ftCreationTime.dwHighDateTime=0x1bd4ed1, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c9f2300, ftLastWriteTime.dwHighDateTime=0x1bd4ed1, nFileSizeHigh=0x0, nFileSizeLow=0x899, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01734_.GIF", cAlternateFileName="")) returned 1 [0235.517] wcscmp (_String1="WB01734_.GIF", _String2=".") returned 1 [0235.517] wcscmp (_String1="WB01734_.GIF", _String2="..") returned 1 [0235.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0235.517] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.517] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.517] wcscat (in: _Dest=0x3eb9560, _Source="WB01734_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" [0235.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0235.518] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x104db700, ftCreationTime.dwHighDateTime=0x1bd4ece, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x104db700, ftLastWriteTime.dwHighDateTime=0x1bd4ece, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01740_.GIF", cAlternateFileName="")) returned 1 [0235.518] wcscmp (_String1="WB01740_.GIF", _String2=".") returned 1 [0235.518] wcscmp (_String1="WB01740_.GIF", _String2="..") returned 1 [0235.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba110 [0235.518] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.518] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.518] wcscat (in: _Dest=0x3eba110, _Source="WB01740_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" [0235.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0235.519] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3c5500, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde3c5500, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01742_.GIF", cAlternateFileName="")) returned 1 [0235.519] wcscmp (_String1="WB01742_.GIF", _String2=".") returned 1 [0235.519] wcscmp (_String1="WB01742_.GIF", _String2="..") returned 1 [0235.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0235.519] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.519] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.519] wcscat (in: _Dest=0x3eb9010, _Source="WB01742_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" [0235.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0235.520] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0b2800, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd0b2800, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01743_.GIF", cAlternateFileName="")) returned 1 [0235.520] wcscmp (_String1="WB01743_.GIF", _String2=".") returned 1 [0235.520] wcscmp (_String1="WB01743_.GIF", _String2="..") returned 1 [0235.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0235.520] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.521] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.521] wcscat (in: _Dest=0x3eb95e8, _Source="WB01743_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" [0235.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc [0235.522] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e6a7300, ftCreationTime.dwHighDateTime=0x1bd4eb7, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9e6a7300, ftLastWriteTime.dwHighDateTime=0x1bd4eb7, nFileSizeHigh=0x0, nFileSizeLow=0x31f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01744_.GIF", cAlternateFileName="")) returned 1 [0235.522] wcscmp (_String1="WB01744_.GIF", _String2=".") returned 1 [0235.522] wcscmp (_String1="WB01744_.GIF", _String2="..") returned 1 [0235.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0235.522] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.522] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.522] wcscat (in: _Dest=0x3eb9230, _Source="WB01744_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" [0235.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0235.523] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8467400, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8467400, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01745_.GIF", cAlternateFileName="")) returned 1 [0235.523] wcscmp (_String1="WB01745_.GIF", _String2=".") returned 1 [0235.523] wcscmp (_String1="WB01745_.GIF", _String2="..") returned 1 [0235.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0235.523] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.523] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.523] wcscat (in: _Dest=0x3eb8e78, _Source="WB01745_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" [0235.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0235.524] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfee3900, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfee3900, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01746_.GIF", cAlternateFileName="")) returned 1 [0235.524] wcscmp (_String1="WB01746_.GIF", _String2=".") returned 1 [0235.524] wcscmp (_String1="WB01746_.GIF", _String2="..") returned 1 [0235.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0235.525] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.525] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.525] wcscat (in: _Dest=0x3eba2a8, _Source="WB01746_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" [0235.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0235.527] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9f85800, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x852cd0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9f85800, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01747_.GIF", cAlternateFileName="")) returned 1 [0235.527] wcscmp (_String1="WB01747_.GIF", _String2=".") returned 1 [0235.527] wcscmp (_String1="WB01747_.GIF", _String2="..") returned 1 [0235.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8df0 [0235.527] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.527] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.527] wcscat (in: _Dest=0x3eb8df0, _Source="WB01747_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" [0235.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0235.528] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d14a00, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc2d14a00, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01748_.GIF", cAlternateFileName="")) returned 1 [0235.528] wcscmp (_String1="WB01748_.GIF", _String2=".") returned 1 [0235.528] wcscmp (_String1="WB01748_.GIF", _String2="..") returned 1 [0235.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8d68 [0235.529] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.529] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.529] wcscat (in: _Dest=0x3eb8d68, _Source="WB01748_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" [0235.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0235.530] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe0c9600, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe0c9600, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x3b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01749_.GIF", cAlternateFileName="")) returned 1 [0235.530] wcscmp (_String1="WB01749_.GIF", _String2=".") returned 1 [0235.530] wcscmp (_String1="WB01749_.GIF", _String2="..") returned 1 [0235.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0235.530] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.530] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.530] wcscat (in: _Dest=0x3eb8c58, _Source="WB01749_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" [0235.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0235.531] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b45b00, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5b45b00, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01750_.GIF", cAlternateFileName="")) returned 1 [0235.531] wcscmp (_String1="WB01750_.GIF", _String2=".") returned 1 [0235.531] wcscmp (_String1="WB01750_.GIF", _String2="..") returned 1 [0235.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0235.532] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.532] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.532] wcscat (in: _Dest=0x3eba770, _Source="WB01750_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" [0235.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0235.533] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb220d400, ftCreationTime.dwHighDateTime=0x1bd4ecd, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb220d400, ftLastWriteTime.dwHighDateTime=0x1bd4ecd, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01751_.GIF", cAlternateFileName="")) returned 1 [0235.533] wcscmp (_String1="WB01751_.GIF", _String2=".") returned 1 [0235.533] wcscmp (_String1="WB01751_.GIF", _String2="..") returned 1 [0235.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0235.533] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.533] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.533] wcscat (in: _Dest=0x3eb9670, _Source="WB01751_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" [0235.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0235.534] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79313100, ftCreationTime.dwHighDateTime=0x1bd4ec6, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79313100, ftLastWriteTime.dwHighDateTime=0x1bd4ec6, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01770_.GIF", cAlternateFileName="")) returned 1 [0235.534] wcscmp (_String1="WB01770_.GIF", _String2=".") returned 1 [0235.535] wcscmp (_String1="WB01770_.GIF", _String2="..") returned 1 [0235.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba660 [0235.535] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.535] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.535] wcscat (in: _Dest=0x3eba660, _Source="WB01770_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" [0235.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0235.536] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395f4f00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x395f4f00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0xe44, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01838_.GIF", cAlternateFileName="")) returned 1 [0235.536] wcscmp (_String1="WB01838_.GIF", _String2=".") returned 1 [0235.536] wcscmp (_String1="WB01838_.GIF", _String2="..") returned 1 [0235.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9a28 [0235.536] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.536] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.536] wcscat (in: _Dest=0x3eb9a28, _Source="WB01838_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" [0235.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0235.538] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fcf500, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36fcf500, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x446, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01839_.GIF", cAlternateFileName="")) returned 1 [0235.538] wcscmp (_String1="WB01839_.GIF", _String2=".") returned 1 [0235.538] wcscmp (_String1="WB01839_.GIF", _String2="..") returned 1 [0235.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9d58 [0235.538] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.538] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.538] wcscat (in: _Dest=0x3eb9d58, _Source="WB01839_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" [0235.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0235.539] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x990e2800, ftCreationTime.dwHighDateTime=0x1bd4eb9, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x990e2800, ftLastWriteTime.dwHighDateTime=0x1bd4eb9, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01840_.GIF", cAlternateFileName="")) returned 1 [0235.539] wcscmp (_String1="WB01840_.GIF", _String2=".") returned 1 [0235.539] wcscmp (_String1="WB01840_.GIF", _String2="..") returned 1 [0235.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9098 [0235.539] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.539] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.539] wcscat (in: _Dest=0x3eb9098, _Source="WB01840_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" [0235.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0235.541] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d738d00, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d738d00, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01842_.GIF", cAlternateFileName="")) returned 1 [0235.541] wcscmp (_String1="WB01842_.GIF", _String2=".") returned 1 [0235.541] wcscmp (_String1="WB01842_.GIF", _String2="..") returned 1 [0235.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f00 [0235.541] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.541] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.541] wcscat (in: _Dest=0x3eb8f00, _Source="WB01842_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" [0235.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0235.542] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c426000, ftCreationTime.dwHighDateTime=0x1bd4eb0, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c426000, ftLastWriteTime.dwHighDateTime=0x1bd4eb0, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01843_.GIF", cAlternateFileName="")) returned 1 [0235.542] wcscmp (_String1="WB01843_.GIF", _String2=".") returned 1 [0235.542] wcscmp (_String1="WB01843_.GIF", _String2="..") returned 1 [0235.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9f78 [0235.542] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.542] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.542] wcscat (in: _Dest=0x3eb9f78, _Source="WB01843_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" [0235.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0235.544] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60695100, ftCreationTime.dwHighDateTime=0x1bd4eaf, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60695100, ftLastWriteTime.dwHighDateTime=0x1bd4eaf, nFileSizeHigh=0x0, nFileSizeLow=0x102b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02229_.GIF", cAlternateFileName="")) returned 1 [0235.544] wcscmp (_String1="WB02229_.GIF", _String2=".") returned 1 [0235.544] wcscmp (_String1="WB02229_.GIF", _String2="..") returned 1 [0235.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9340 [0235.544] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.544] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.544] wcscat (in: _Dest=0x3eb9340, _Source="WB02229_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" [0235.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0235.545] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHIRL1.WMF", cAlternateFileName="")) returned 1 [0235.545] wcscmp (_String1="WHIRL1.WMF", _String2=".") returned 1 [0235.545] wcscmp (_String1="WHIRL1.WMF", _String2="..") returned 1 [0235.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9e68 [0235.545] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.545] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.545] wcscat (in: _Dest=0x3eb9e68, _Source="WHIRL1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" [0235.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0235.546] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHIRL2.WMF", cAlternateFileName="")) returned 1 [0235.546] wcscmp (_String1="WHIRL2.WMF", _String2=".") returned 1 [0235.546] wcscmp (_String1="WHIRL2.WMF", _String2="..") returned 1 [0235.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb93c8 [0235.547] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.547] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.547] wcscat (in: _Dest=0x3eb93c8, _Source="WHIRL2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" [0235.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0235.548] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="WING1.WMF", cAlternateFileName="")) returned 1 [0235.548] wcscmp (_String1="WING1.WMF", _String2=".") returned 1 [0235.548] wcscmp (_String1="WING1.WMF", _String2="..") returned 1 [0235.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9808 [0235.548] wcscpy (in: _Dest=0x3eb9808, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.548] wcscat (in: _Dest=0x3eb9808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.548] wcscat (in: _Dest=0x3eb9808, _Source="WING1.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" [0235.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0235.549] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="WING2.WMF", cAlternateFileName="")) returned 1 [0235.549] wcscmp (_String1="WING2.WMF", _String2=".") returned 1 [0235.549] wcscmp (_String1="WING2.WMF", _String2="..") returned 1 [0235.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba5d8 [0235.549] wcscpy (in: _Dest=0x3eba5d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.549] wcscat (in: _Dest=0x3eba5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.549] wcscat (in: _Dest=0x3eba5d8, _Source="WING2.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" [0235.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0235.550] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNTER_01.MID", cAlternateFileName="")) returned 1 [0235.550] wcscmp (_String1="WNTER_01.MID", _String2=".") returned 1 [0235.550] wcscmp (_String1="WNTER_01.MID", _String2="..") returned 1 [0235.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9450 [0235.550] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR" [0235.550] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\" [0235.550] wcscat (in: _Dest=0x3eb9450, _Source="WNTER_01.MID" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" [0235.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0235.551] FindNextFileW (in: hFindFile=0x3dcfad0, lpFindFileData=0x3d597d8 | out: lpFindFileData=0x3d597d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923f9df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="WNTER_01.MID", cAlternateFileName="")) returned 0 [0235.559] FindClose (in: hFindFile=0x3dcfad0 | out: hFindFile=0x3dcfad0) returned 1 [0236.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d597d8) returned 1 [0236.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015508) returned 1 [0236.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c98) returned 1 Thread: id = 331 os_tid = 0xa08 [0122.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3015238 [0122.094] wcscpy (in: _Dest=0x3015238, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" [0122.094] wcscat (in: _Dest=0x3015238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\" [0122.094] wcscat (in: _Dest=0x3015238, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*" [0122.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59a40 [0122.095] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff90 [0122.528] wcscmp (_String1=".", _String2=".") returned 0 [0122.528] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b519f30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.528] wcscmp (_String1="..", _String2=".") returned 1 [0122.528] wcscmp (_String1="..", _String2="..") returned 0 [0122.528] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1 [0122.528] wcscmp (_String1="Backgrounds", _String2=".") returned 1 [0122.528] wcscmp (_String1="Backgrounds", _String2="..") returned 1 [0122.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0122.528] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher" [0122.528] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\" [0122.528] wcscat (in: _Dest=0x3eb8c58, _Source="Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0136.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0136.347] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0 [0136.347] FindClose (in: hFindFile=0x3dcff90 | out: hFindFile=0x3dcff90) returned 1 [0136.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59a40) returned 1 [0136.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0136.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69e58) returned 1 Thread: id = 332 os_tid = 0xa18 [0122.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da60f0 [0122.096] wcscpy (in: _Dest=0x3da60f0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0122.096] wcscat (in: _Dest=0x3da60f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0122.096] wcscat (in: _Dest=0x3da60f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\*" [0122.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0122.096] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7788cf90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0122.096] wcscmp (_String1=".", _String2=".") returned 0 [0122.096] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7788cf90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.096] wcscmp (_String1="..", _String2=".") returned 1 [0122.096] wcscmp (_String1="..", _String2="..") returned 0 [0122.096] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77651af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivateAssemblies", cAlternateFileName="PRIVAT~1")) returned 1 [0122.096] wcscmp (_String1="PrivateAssemblies", _String2=".") returned 1 [0122.097] wcscmp (_String1="PrivateAssemblies", _String2="..") returned 1 [0122.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df59a0 [0122.097] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0122.097] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0122.097] wcscat (in: _Dest=0x3df59a0, _Source="PrivateAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" [0122.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df59a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0122.698] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7788cf90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87d599f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 1 [0122.698] wcscmp (_String1="PublicAssemblies", _String2=".") returned 1 [0122.698] wcscmp (_String1="PublicAssemblies", _String2="..") returned 1 [0122.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d1a8 [0122.698] wcscpy (in: _Dest=0x32d1a8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0122.698] wcscat (in: _Dest=0x32d1a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0122.698] wcscat (in: _Dest=0x32d1a8, _Source="PublicAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" [0122.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0122.700] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0122.700] wcscmp (_String1="VSTA", _String2=".") returned 1 [0122.700] wcscmp (_String1="VSTA", _String2="..") returned 1 [0122.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da6470 [0122.700] wcscpy (in: _Dest=0x3da6470, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE" [0122.700] wcscat (in: _Dest=0x3da6470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\" [0122.700] wcscat (in: _Dest=0x3da6470, _Source="VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" [0122.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da6470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0122.701] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0 [0122.701] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0122.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0122.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da60f0) returned 1 [0122.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 Thread: id = 333 os_tid = 0xa28 [0122.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1cd40 [0122.097] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" [0122.097] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\" [0122.097] wcscat (in: _Dest=0x3e1cd40, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\*" [0122.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59f10 [0122.097] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb10 [0122.529] wcscmp (_String1=".", _String2=".") returned 0 [0122.529] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.529] wcscmp (_String1="..", _String2=".") returned 1 [0122.529] wcscmp (_String1="..", _String2="..") returned 0 [0122.529] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1 [0122.529] wcscmp (_String1="Debugger", _String2=".") returned 1 [0122.529] wcscmp (_String1="Debugger", _String2="..") returned 1 [0122.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d240 [0122.530] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages" [0122.530] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\" [0122.530] wcscat (in: _Dest=0x32d240, _Source="Debugger" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" [0131.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0131.695] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 0 [0131.695] FindClose (in: hFindFile=0x3dcfb10 | out: hFindFile=0x3dcfb10) returned 1 [0131.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59f10) returned 1 [0131.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 [0131.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 Thread: id = 334 os_tid = 0xa38 [0122.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e58ba8 [0122.099] wcscpy (in: _Dest=0x3e58ba8, _Source="C:\\Users\\Default\\Favorites\\Links" | out: _Dest="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links" [0122.099] wcscat (in: _Dest=0x3e58ba8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\") returned="C:\\Users\\Default\\Favorites\\Links\\" [0122.099] wcscat (in: _Dest=0x3e58ba8, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\*") returned="C:\\Users\\Default\\Favorites\\Links\\*" [0122.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d5a178 [0122.099] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299394d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf650 [0123.115] wcscmp (_String1=".", _String2=".") returned 0 [0123.115] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299394d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.115] wcscmp (_String1="..", _String2=".") returned 1 [0123.115] wcscmp (_String1="..", _String2="..") returned 0 [0123.115] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29913374, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.115] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0123.115] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0123.115] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299f7bb6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0123.115] wcscmp (_String1="Web Slice Gallery.url", _String2=".") returned 1 [0123.115] wcscmp (_String1="Web Slice Gallery.url", _String2="..") returned 1 [0123.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51458 [0123.116] wcscpy (in: _Dest=0x3d51458, _Source="C:\\Users\\Default\\Favorites\\Links" | out: _Dest="C:\\Users\\Default\\Favorites\\Links") returned="C:\\Users\\Default\\Favorites\\Links" [0123.116] wcscat (in: _Dest=0x3d51458, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\") returned="C:\\Users\\Default\\Favorites\\Links\\" [0123.116] wcscat (in: _Dest=0x3d51458, _Source="Web Slice Gallery.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url") returned="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" [0129.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d51458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0129.151] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x299f7bb6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0129.152] FindClose (in: hFindFile=0x3dcf650 | out: hFindFile=0x3dcf650) returned 1 [0129.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a178) returned 1 [0129.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58ba8) returned 1 [0129.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6158) returned 1 Thread: id = 335 os_tid = 0xa48 [0122.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0858 [0122.102] wcscpy (in: _Dest=0x3ee0858, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0122.102] wcscat (in: _Dest=0x3ee0858, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0122.102] wcscat (in: _Dest=0x3ee0858, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*" [0122.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3c98 [0122.102] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7614190, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0124.162] wcscmp (_String1=".", _String2=".") returned 0 [0124.162] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7614190, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.162] wcscmp (_String1="..", _String2=".") returned 1 [0124.162] wcscmp (_String1="..", _String2="..") returned 0 [0124.162] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb4af0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cb4af0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x290260e4, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0124.162] wcscmp (_String1="IE Add-on site.url", _String2=".") returned 1 [0124.162] wcscmp (_String1="IE Add-on site.url", _String2="..") returned 1 [0124.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44cc0 [0124.162] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0124.162] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0124.162] wcscat (in: _Dest=0x3d44cc0, _Source="IE Add-on site.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" [0136.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08 [0136.445] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x28ffff84, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0136.445] wcscmp (_String1="IE site on Microsoft.com.url", _String2=".") returned 1 [0136.445] wcscmp (_String1="IE site on Microsoft.com.url", _String2="..") returned 1 [0136.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6080 [0136.445] wcscpy (in: _Dest=0x3df6080, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0136.445] wcscat (in: _Dest=0x3df6080, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0136.445] wcscat (in: _Dest=0x3df6080, _Source="IE site on Microsoft.com.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" [0136.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0136.450] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x290e47c5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0136.450] wcscmp (_String1="Microsoft At Home.url", _String2=".") returned 1 [0136.450] wcscmp (_String1="Microsoft At Home.url", _String2="..") returned 1 [0136.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d440f0 [0136.450] wcscpy (in: _Dest=0x3d440f0, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0136.450] wcscat (in: _Dest=0x3d440f0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0136.450] wcscat (in: _Dest=0x3d440f0, _Source="Microsoft At Home.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" [0136.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d440f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0136.451] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cdac50, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6cdac50, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x290e47c5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0136.451] wcscmp (_String1="Microsoft At Work.url", _String2=".") returned 1 [0136.451] wcscmp (_String1="Microsoft At Work.url", _String2="..") returned 1 [0136.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45410 [0136.451] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0136.452] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0136.452] wcscat (in: _Dest=0x3d45410, _Source="Microsoft At Work.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" [0136.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0136.453] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0136.453] wcscmp (_String1="Microsoft Store.url", _String2=".") returned 1 [0136.453] wcscmp (_String1="Microsoft Store.url", _String2="..") returned 1 [0136.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d448d0 [0136.453] wcscpy (in: _Dest=0x3d448d0, _Source="C:\\Users\\Default\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites" [0136.453] wcscat (in: _Dest=0x3d448d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\" [0136.453] wcscat (in: _Dest=0x3d448d0, _Source="Microsoft Store.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" [0136.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d448d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640 [0136.454] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8e990, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c8e990, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0136.454] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0136.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c98) returned 1 [0136.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0858) returned 1 [0136.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edffd0) returned 1 Thread: id = 336 os_tid = 0xa58 [0122.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6848 [0122.110] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0122.110] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0122.110] wcscat (in: _Dest=0x2fe6848, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\*") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\*" [0122.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef26f0 [0122.110] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0122.534] wcscmp (_String1=".", _String2=".") returned 0 [0122.534] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.534] wcscmp (_String1="..", _String2=".") returned 1 [0122.534] wcscmp (_String1="..", _String2="..") returned 0 [0122.534] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0122.534] wcscmp (_String1="MSN Autos.url", _String2=".") returned 1 [0122.534] wcscmp (_String1="MSN Autos.url", _String2="..") returned 1 [0122.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f0b0 [0122.534] wcscpy (in: _Dest=0x3f3f0b0, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0122.535] wcscat (in: _Dest=0x3f3f0b0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0122.535] wcscat (in: _Dest=0x3f3f0b0, _Source="MSN Autos.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" [0131.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0131.698] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0131.698] wcscmp (_String1="MSN Entertainment.url", _String2=".") returned 1 [0131.699] wcscmp (_String1="MSN Entertainment.url", _String2="..") returned 1 [0131.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1cd40 [0131.699] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0131.699] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0131.699] wcscat (in: _Dest=0x3e1cd40, _Source="MSN Entertainment.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" [0131.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1cd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0131.700] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0131.701] wcscmp (_String1="MSN Money.url", _String2=".") returned 1 [0131.701] wcscmp (_String1="MSN Money.url", _String2="..") returned 1 [0131.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d517a0 [0131.701] wcscpy (in: _Dest=0x3d517a0, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0131.701] wcscat (in: _Dest=0x3d517a0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0131.701] wcscat (in: _Dest=0x3d517a0, _Source="MSN Money.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" [0131.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d517a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0131.702] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0131.702] wcscmp (_String1="MSN Sports.url", _String2=".") returned 1 [0131.702] wcscmp (_String1="MSN Sports.url", _String2="..") returned 1 [0131.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d50c60 [0131.702] wcscpy (in: _Dest=0x3d50c60, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0131.702] wcscat (in: _Dest=0x3d50c60, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0131.702] wcscat (in: _Dest=0x3d50c60, _Source="MSN Sports.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" [0131.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d50c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0131.704] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0131.704] wcscmp (_String1="MSN.url", _String2=".") returned 1 [0131.704] wcscmp (_String1="MSN.url", _String2="..") returned 1 [0131.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0a60 [0131.704] wcscpy (in: _Dest=0x3ee0a60, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0131.704] wcscat (in: _Dest=0x3ee0a60, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0131.704] wcscat (in: _Dest=0x3ee0a60, _Source="MSN.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" [0131.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0131.713] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0131.713] wcscmp (_String1="MSNBC News.url", _String2=".") returned 1 [0131.713] wcscmp (_String1="MSNBC News.url", _String2="..") returned 1 [0131.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51728 [0131.713] wcscpy (in: _Dest=0x3d51728, _Source="C:\\Users\\Default\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites") returned="C:\\Users\\Default\\Favorites\\MSN Websites" [0131.713] wcscat (in: _Dest=0x3d51728, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\" [0131.714] wcscat (in: _Dest=0x3d51728, _Source="MSNBC News.url" | out: _Dest="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" [0131.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d51728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0131.715] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2910a926, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0131.715] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0131.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef26f0) returned 1 [0131.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 [0131.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14a38) returned 1 Thread: id = 337 os_tid = 0xa68 [0122.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe68a8 [0122.111] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0122.111] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0122.111] wcscat (in: _Dest=0x2fe68a8, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\*") returned="C:\\Users\\Default\\Favorites\\Windows Live\\*" [0122.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0122.111] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf9d0 [0123.119] wcscmp (_String1=".", _String2=".") returned 0 [0123.119] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6baa150, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.119] wcscmp (_String1="..", _String2=".") returned 1 [0123.119] wcscmp (_String1="..", _String2="..") returned 0 [0123.119] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0123.119] wcscmp (_String1="Get Windows Live.url", _String2=".") returned 1 [0123.120] wcscmp (_String1="Get Windows Live.url", _String2="..") returned 1 [0123.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9890 [0123.120] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0123.120] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0123.120] wcscat (in: _Dest=0x3eb9890, _Source="Get Windows Live.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" [0126.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0126.004] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0126.004] wcscmp (_String1="Windows Live Gallery.url", _String2=".") returned 1 [0126.004] wcscmp (_String1="Windows Live Gallery.url", _String2="..") returned 1 [0126.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45410 [0126.004] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0126.004] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0126.004] wcscat (in: _Dest=0x3d45410, _Source="Windows Live Gallery.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" [0126.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0126.006] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29156be6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0126.006] wcscmp (_String1="Windows Live Mail.url", _String2=".") returned 1 [0126.006] wcscmp (_String1="Windows Live Mail.url", _String2="..") returned 1 [0126.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9cd0 [0126.006] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0126.006] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0126.006] wcscat (in: _Dest=0x3eb9cd0, _Source="Windows Live Mail.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" [0126.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0126.008] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29156be6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0126.008] wcscmp (_String1="Windows Live Spaces.url", _String2=".") returned 1 [0126.008] wcscmp (_String1="Windows Live Spaces.url", _String2="..") returned 1 [0126.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0126.009] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Users\\Default\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live") returned="C:\\Users\\Default\\Favorites\\Windows Live" [0126.009] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\") returned="C:\\Users\\Default\\Favorites\\Windows Live\\" [0126.009] wcscat (in: _Dest=0x3eb95e8, _Source="Windows Live Spaces.url" | out: _Dest="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" [0126.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0126.010] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c68830, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c68830, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x29156be6, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0126.011] FindClose (in: hFindFile=0x3dcf9d0 | out: hFindFile=0x3dcf9d0) returned 1 [0126.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0126.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 [0126.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e147d0) returned 1 Thread: id = 338 os_tid = 0xa78 [0122.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee08c0 [0122.113] wcscpy (in: _Dest=0x3ee08c0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.113] wcscat (in: _Dest=0x3ee08c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.113] wcscat (in: _Dest=0x3ee08c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\*" [0122.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0122.113] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4f2e790, ftCreationTime.dwHighDateTime=0x1d5e1f8, ftLastAccessTime.dwLowDateTime=0xa5f881c0, ftLastAccessTime.dwHighDateTime=0x1d5db49, ftLastWriteTime.dwLowDateTime=0xa5f881c0, ftLastWriteTime.dwHighDateTime=0x1d5db49, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0122.113] wcscmp (_String1=".", _String2=".") returned 0 [0122.113] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4f2e790, ftCreationTime.dwHighDateTime=0x1d5e1f8, ftLastAccessTime.dwLowDateTime=0xa5f881c0, ftLastAccessTime.dwHighDateTime=0x1d5db49, ftLastWriteTime.dwLowDateTime=0xa5f881c0, ftLastWriteTime.dwHighDateTime=0x1d5db49, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.113] wcscmp (_String1="..", _String2=".") returned 1 [0122.113] wcscmp (_String1="..", _String2="..") returned 0 [0122.114] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d7c820, ftCreationTime.dwHighDateTime=0x1d5dfb4, ftLastAccessTime.dwLowDateTime=0xd5245e0, ftLastAccessTime.dwHighDateTime=0x1d5e5b3, ftLastWriteTime.dwLowDateTime=0xd5245e0, ftLastWriteTime.dwHighDateTime=0x1d5e5b3, nFileSizeHigh=0x0, nFileSizeLow=0x9074, dwReserved0=0x0, dwReserved1=0x0, cFileName="3hJ4_EkXHl9ZYnPj.csv", cAlternateFileName="3HJ4_E~1.CSV")) returned 1 [0122.114] wcscmp (_String1="3hJ4_EkXHl9ZYnPj.csv", _String2=".") returned 1 [0122.114] wcscmp (_String1="3hJ4_EkXHl9ZYnPj.csv", _String2="..") returned 1 [0122.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d440f0 [0122.114] wcscpy (in: _Dest=0x3d440f0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.114] wcscat (in: _Dest=0x3d440f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.114] wcscat (in: _Dest=0x3d440f0, _Source="3hJ4_EkXHl9ZYnPj.csv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\3hJ4_EkXHl9ZYnPj.csv") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\3hJ4_EkXHl9ZYnPj.csv" [0122.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d440f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0122.820] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8442d40, ftCreationTime.dwHighDateTime=0x1d5e511, ftLastAccessTime.dwLowDateTime=0xdb2218c0, ftLastAccessTime.dwHighDateTime=0x1d5da63, ftLastWriteTime.dwLowDateTime=0xdb2218c0, ftLastWriteTime.dwHighDateTime=0x1d5da63, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e13D4YrK6pCxYb", cAlternateFileName="E13D4Y~1")) returned 1 [0122.820] wcscmp (_String1="e13D4YrK6pCxYb", _String2=".") returned 1 [0122.820] wcscmp (_String1="e13D4YrK6pCxYb", _String2="..") returned 1 [0122.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5cf0 [0122.820] wcscpy (in: _Dest=0x3da5cf0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.820] wcscat (in: _Dest=0x3da5cf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.820] wcscat (in: _Dest=0x3da5cf0, _Source="e13D4YrK6pCxYb" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb" [0122.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da5cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0122.822] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30522450, ftCreationTime.dwHighDateTime=0x1d5dc7d, ftLastAccessTime.dwLowDateTime=0xa22503e0, ftLastAccessTime.dwHighDateTime=0x1d5dcaf, ftLastWriteTime.dwLowDateTime=0xa22503e0, ftLastWriteTime.dwHighDateTime=0x1d5dcaf, nFileSizeHigh=0x0, nFileSizeLow=0x12740, dwReserved0=0x0, dwReserved1=0x0, cFileName="FcNZOQeXf.wav", cAlternateFileName="FCNZOQ~1.WAV")) returned 1 [0122.822] wcscmp (_String1="FcNZOQeXf.wav", _String2=".") returned 1 [0122.822] wcscmp (_String1="FcNZOQeXf.wav", _String2="..") returned 1 [0122.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da66f0 [0122.822] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.822] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.822] wcscat (in: _Dest=0x3da66f0, _Source="FcNZOQeXf.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\FcNZOQeXf.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\FcNZOQeXf.wav" [0122.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da66f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0122.823] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bc3130, ftCreationTime.dwHighDateTime=0x1d5db25, ftLastAccessTime.dwLowDateTime=0x269d2530, ftLastAccessTime.dwHighDateTime=0x1d5dc8d, ftLastWriteTime.dwLowDateTime=0x269d2530, ftLastWriteTime.dwHighDateTime=0x1d5dc8d, nFileSizeHigh=0x0, nFileSizeLow=0x1493f, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmJfHgBj-usKXI.wav", cAlternateFileName="QMJFHG~1.WAV")) returned 1 [0122.823] wcscmp (_String1="qmJfHgBj-usKXI.wav", _String2=".") returned 1 [0122.823] wcscmp (_String1="qmJfHgBj-usKXI.wav", _String2="..") returned 1 [0122.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ca10 [0122.823] wcscpy (in: _Dest=0x3e1ca10, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.823] wcscat (in: _Dest=0x3e1ca10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.823] wcscat (in: _Dest=0x3e1ca10, _Source="qmJfHgBj-usKXI.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\qmJfHgBj-usKXI.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\qmJfHgBj-usKXI.wav" [0122.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0122.825] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7795ce80, ftCreationTime.dwHighDateTime=0x1d5dfec, ftLastAccessTime.dwLowDateTime=0x22b41a90, ftLastAccessTime.dwHighDateTime=0x1d5e4e5, ftLastWriteTime.dwLowDateTime=0x22b41a90, ftLastWriteTime.dwHighDateTime=0x1d5e4e5, nFileSizeHigh=0x0, nFileSizeLow=0x748c, dwReserved0=0x0, dwReserved1=0x0, cFileName="s BhIyPV.mkv", cAlternateFileName="SBHIYP~1.MKV")) returned 1 [0122.825] wcscmp (_String1="s BhIyPV.mkv", _String2=".") returned 1 [0122.825] wcscmp (_String1="s BhIyPV.mkv", _String2="..") returned 1 [0122.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da4af0 [0122.825] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.825] wcscat (in: _Dest=0x3da4af0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.825] wcscat (in: _Dest=0x3da4af0, _Source="s BhIyPV.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\s BhIyPV.mkv") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\s BhIyPV.mkv" [0122.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da4af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0122.826] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf802690, ftCreationTime.dwHighDateTime=0x1d5dde3, ftLastAccessTime.dwLowDateTime=0x9fb9e780, ftLastAccessTime.dwHighDateTime=0x1d5dd84, ftLastWriteTime.dwLowDateTime=0x9fb9e780, ftLastWriteTime.dwHighDateTime=0x1d5dd84, nFileSizeHigh=0x0, nFileSizeLow=0xe004, dwReserved0=0x0, dwReserved1=0x0, cFileName="vrlqnyWfc.pdf", cAlternateFileName="VRLQNY~1.PDF")) returned 1 [0122.826] wcscmp (_String1="vrlqnyWfc.pdf", _String2=".") returned 1 [0122.826] wcscmp (_String1="vrlqnyWfc.pdf", _String2="..") returned 1 [0122.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da60f0 [0122.826] wcscpy (in: _Dest=0x3da60f0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.826] wcscat (in: _Dest=0x3da60f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.826] wcscat (in: _Dest=0x3da60f0, _Source="vrlqnyWfc.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vrlqnyWfc.pdf") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vrlqnyWfc.pdf" [0122.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da60f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0122.828] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4303e970, ftCreationTime.dwHighDateTime=0x1d5ddfa, ftLastAccessTime.dwLowDateTime=0x403867b0, ftLastAccessTime.dwHighDateTime=0x1d5df4a, ftLastWriteTime.dwLowDateTime=0x403867b0, ftLastWriteTime.dwHighDateTime=0x1d5df4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vuUzPRG1C7QTuAya2e", cAlternateFileName="VUUZPR~1")) returned 1 [0122.828] wcscmp (_String1="vuUzPRG1C7QTuAya2e", _String2=".") returned 1 [0122.829] wcscmp (_String1="vuUzPRG1C7QTuAya2e", _String2="..") returned 1 [0122.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8d68 [0122.829] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.829] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.829] wcscat (in: _Dest=0x3eb8d68, _Source="vuUzPRG1C7QTuAya2e" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e" [0122.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0 [0122.830] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbef0cd0, ftCreationTime.dwHighDateTime=0x1d5ddbe, ftLastAccessTime.dwLowDateTime=0xdca873d0, ftLastAccessTime.dwHighDateTime=0x1d5e65a, ftLastWriteTime.dwLowDateTime=0xdca873d0, ftLastWriteTime.dwHighDateTime=0x1d5e65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vw_yloNL3faM5Py", cAlternateFileName="VW_YLO~1")) returned 1 [0122.830] wcscmp (_String1="vw_yloNL3faM5Py", _String2=".") returned 1 [0122.830] wcscmp (_String1="vw_yloNL3faM5Py", _String2="..") returned 1 [0122.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8df0 [0122.830] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.830] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.830] wcscat (in: _Dest=0x3eb8df0, _Source="vw_yloNL3faM5Py" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py" [0122.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8 [0122.831] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f8b9b0, ftCreationTime.dwHighDateTime=0x1d5e875, ftLastAccessTime.dwLowDateTime=0x932e6cd0, ftLastAccessTime.dwHighDateTime=0x1d5e026, ftLastWriteTime.dwLowDateTime=0x932e6cd0, ftLastWriteTime.dwHighDateTime=0x1d5e026, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WkVWlOdO3dW", cAlternateFileName="WKVWLO~1")) returned 1 [0122.831] wcscmp (_String1="WkVWlOdO3dW", _String2=".") returned 1 [0122.831] wcscmp (_String1="WkVWlOdO3dW", _String2="..") returned 1 [0122.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5f70 [0122.831] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.832] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.832] wcscat (in: _Dest=0x3da5f70, _Source="WkVWlOdO3dW" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" [0122.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da5f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4 [0122.833] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dd406a0, ftCreationTime.dwHighDateTime=0x1d5e592, ftLastAccessTime.dwLowDateTime=0x92b04650, ftLastAccessTime.dwHighDateTime=0x1d5d88a, ftLastWriteTime.dwLowDateTime=0x92b04650, ftLastWriteTime.dwHighDateTime=0x1d5d88a, nFileSizeHigh=0x0, nFileSizeLow=0xc025, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y LYLxKsyoJGF.mp3", cAlternateFileName="YLYLXK~1.MP3")) returned 1 [0122.833] wcscmp (_String1="Y LYLxKsyoJGF.mp3", _String2=".") returned 1 [0122.833] wcscmp (_String1="Y LYLxKsyoJGF.mp3", _String2="..") returned 1 [0122.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8e78 [0122.833] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.833] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.833] wcscat (in: _Dest=0x3eb8e78, _Source="Y LYLxKsyoJGF.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\Y LYLxKsyoJGF.mp3") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\Y LYLxKsyoJGF.mp3" [0122.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0122.835] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd4e6e0, ftCreationTime.dwHighDateTime=0x1d5dc16, ftLastAccessTime.dwLowDateTime=0xa3d6a30, ftLastAccessTime.dwHighDateTime=0x1d5db3e, ftLastWriteTime.dwLowDateTime=0xa3d6a30, ftLastWriteTime.dwHighDateTime=0x1d5db3e, nFileSizeHigh=0x0, nFileSizeLow=0x57c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zsnh30orZMyzL6PBDir.png", cAlternateFileName="ZSNH30~1.PNG")) returned 1 [0122.835] wcscmp (_String1="zsnh30orZMyzL6PBDir.png", _String2=".") returned 1 [0122.835] wcscmp (_String1="zsnh30orZMyzL6PBDir.png", _String2="..") returned 1 [0122.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d2d8 [0122.835] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2" [0122.835] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0122.835] wcscat (in: _Dest=0x32d2d8, _Source="zsnh30orZMyzL6PBDir.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png" [0122.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0122.836] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd4e6e0, ftCreationTime.dwHighDateTime=0x1d5dc16, ftLastAccessTime.dwLowDateTime=0xa3d6a30, ftLastAccessTime.dwHighDateTime=0x1d5db3e, ftLastWriteTime.dwLowDateTime=0xa3d6a30, ftLastWriteTime.dwHighDateTime=0x1d5db3e, nFileSizeHigh=0x0, nFileSizeLow=0x57c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zsnh30orZMyzL6PBDir.png", cAlternateFileName="ZSNH30~1.PNG")) returned 0 [0122.836] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0122.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0122.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee08c0) returned 1 [0122.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0170) returned 1 Thread: id = 339 os_tid = 0xa7c [0122.114] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\8pqGeUZ8xOdjF.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\8pqgeuz8xodjf.mp3")) returned 0x20 [0122.115] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\8pqGeUZ8xOdjF.mp3", dwFileAttributes=0x20) returned 1 [0122.116] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\8pqGeUZ8xOdjF.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\8pqgeuz8xodjf.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1040 [0122.116] GetFileSizeEx (in: hFile=0x1040, lpFileSize=0x9c5fbf4 | out: lpFileSize=0x9c5fbf4*=40281) returned 1 [0122.117] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x9d55, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.117] ReadFile (in: hFile=0x1040, lpBuffer=0x9c5fbd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9c5fbe0, lpOverlapped=0x0 | out: lpBuffer=0x9c5fbd0*, lpNumberOfBytesRead=0x9c5fbe0*=0x4, lpOverlapped=0x0) returned 1 [0122.119] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0122.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0122.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0122.119] NtQuerySystemTime (in: CurrentTime=0x9c5fb68 | out: CurrentTime=0x9c5fb68*=132462177015384000) returned 0x0 [0122.119] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x58855602 [0122.119] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x681a9a3d [0122.119] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x70d80bcc [0122.119] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x725867c7 [0122.119] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x1ca27b2a [0122.119] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x61f5e7dc [0122.119] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x57b32324 [0122.119] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x16a39943 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x4074ff7a [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x3bc1afad [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x57cac297 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x3858279c [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x62703dff [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x75e033b4 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x46bb2596 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x45c38656 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x4fe5c897 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x66f6e37d [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x7593ed6 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x7c9356cb [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x4eddae20 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x487aec61 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x423d28b3 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x4f9225fa [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x26d61341 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x160e7bb1 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0xd68e305 [0122.120] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x6d0329ca [0122.121] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x52296c31 [0122.121] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x39166446 [0122.121] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x288f6a45 [0122.121] RtlRandomEx (in: Seed=0x9c5fb60 | out: Seed=0x9c5fb60) returned 0x7f977c7e [0122.135] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.135] ReadFile (in: hFile=0x1040, lpBuffer=0x7a28000, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9c5fb68, lpOverlapped=0x0 | out: lpBuffer=0x7a28000*, lpNumberOfBytesRead=0x9c5fb68*=0x3c00, lpOverlapped=0x0) returned 1 [0122.135] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84ed0 [0122.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3490b0 [0122.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0122.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0122.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x3f33b90 [0122.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0122.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0122.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0122.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 [0122.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84ed0) returned 1 [0122.136] WriteFile (in: hFile=0x1040, lpBuffer=0x3f33b90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9c5fb68, lpOverlapped=0x0 | out: lpBuffer=0x3f33b90*, lpNumberOfBytesWritten=0x9c5fb68*=0x3c00, lpOverlapped=0x0) returned 1 [0122.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33b90) returned 1 [0122.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28000) returned 1 [0122.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e791a8 [0122.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb850) returned 1 [0122.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79250 [0122.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb850 [0122.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb828 [0122.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb828) returned 1 [0122.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0122.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d54498 [0122.562] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.562] WriteFile (in: hFile=0x1040, lpBuffer=0x3d54498*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x9c5fbe8, lpOverlapped=0x0 | out: lpBuffer=0x3d54498*, lpNumberOfBytesWritten=0x9c5fbe8*=0x114, lpOverlapped=0x0) returned 1 [0123.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07bf0 [0123.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0123.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb5f8 [0123.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb5f8) returned 1 [0123.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86278 [0123.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb5f8 [0123.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb620 [0123.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb620) returned 1 [0123.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0123.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07bf0) returned 1 [0123.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e84858 [0123.170] sprintf (in: _Dest=0x3e84858, _Format="%c%c" | out: _Dest="0a") returned 2 [0123.170] sprintf (in: _Dest=0x3e8485a, _Format="%c%c" | out: _Dest="68") returned 2 [0123.170] sprintf (in: _Dest=0x3e8485c, _Format="%c%c" | out: _Dest="c1") returned 2 [0123.170] sprintf (in: _Dest=0x3e8485e, _Format="%c%c" | out: _Dest="22") returned 2 [0123.170] sprintf (in: _Dest=0x3e84860, _Format="%c%c" | out: _Dest="6e") returned 2 [0123.170] sprintf (in: _Dest=0x3e84862, _Format="%c%c" | out: _Dest="be") returned 2 [0123.170] sprintf (in: _Dest=0x3e84864, _Format="%c%c" | out: _Dest="60") returned 2 [0123.170] sprintf (in: _Dest=0x3e84866, _Format="%c%c" | out: _Dest="c3") returned 2 [0123.171] sprintf (in: _Dest=0x3e84868, _Format="%c%c" | out: _Dest="00") returned 2 [0123.171] sprintf (in: _Dest=0x3e8486a, _Format="%c%c" | out: _Dest="2d") returned 2 [0123.171] sprintf (in: _Dest=0x3e8486c, _Format="%c%c" | out: _Dest="1a") returned 2 [0123.171] sprintf (in: _Dest=0x3e8486e, _Format="%c%c" | out: _Dest="ba") returned 2 [0123.171] sprintf (in: _Dest=0x3e84870, _Format="%c%c" | out: _Dest="04") returned 2 [0123.171] sprintf (in: _Dest=0x3e84872, _Format="%c%c" | out: _Dest="df") returned 2 [0123.171] sprintf (in: _Dest=0x3e84874, _Format="%c%c" | out: _Dest="02") returned 2 [0123.171] sprintf (in: _Dest=0x3e84876, _Format="%c%c" | out: _Dest="62") returned 2 [0123.171] sprintf (in: _Dest=0x3e84878, _Format="%c%c" | out: _Dest="83") returned 2 [0123.171] sprintf (in: _Dest=0x3e8487a, _Format="%c%c" | out: _Dest="5f") returned 2 [0123.171] sprintf (in: _Dest=0x3e8487c, _Format="%c%c" | out: _Dest="96") returned 2 [0123.171] sprintf (in: _Dest=0x3e8487e, _Format="%c%c" | out: _Dest="83") returned 2 [0123.171] sprintf (in: _Dest=0x3e84880, _Format="%c%c" | out: _Dest="a7") returned 2 [0123.171] sprintf (in: _Dest=0x3e84882, _Format="%c%c" | out: _Dest="f1") returned 2 [0123.171] sprintf (in: _Dest=0x3e84884, _Format="%c%c" | out: _Dest="65") returned 2 [0123.171] sprintf (in: _Dest=0x3e84886, _Format="%c%c" | out: _Dest="7d") returned 2 [0123.171] sprintf (in: _Dest=0x3e84888, _Format="%c%c" | out: _Dest="8e") returned 2 [0123.171] sprintf (in: _Dest=0x3e8488a, _Format="%c%c" | out: _Dest="1d") returned 2 [0123.171] sprintf (in: _Dest=0x3e8488c, _Format="%c%c" | out: _Dest="f4") returned 2 [0123.171] sprintf (in: _Dest=0x3e8488e, _Format="%c%c" | out: _Dest="37") returned 2 [0123.171] sprintf (in: _Dest=0x3e84890, _Format="%c%c" | out: _Dest="92") returned 2 [0123.171] sprintf (in: _Dest=0x3e84892, _Format="%c%c" | out: _Dest="c1") returned 2 [0123.171] sprintf (in: _Dest=0x3e84894, _Format="%c%c" | out: _Dest="03") returned 2 [0123.172] sprintf (in: _Dest=0x3e84896, _Format="%c%c" | out: _Dest="8d") returned 2 [0123.172] sprintf (in: _Dest=0x3e84898, _Format="%c%c" | out: _Dest="57") returned 2 [0123.172] sprintf (in: _Dest=0x3e8489a, _Format="%c%c" | out: _Dest="eb") returned 2 [0123.172] RtlInitAnsiString (in: DestinationString=0x9c5fb70, SourceString="0a68c1226ebe60c3002d1aba04df0262835f9683a7f1657d8e1df43792c1038d57eb" | out: DestinationString="0a68c1226ebe60c3002d1aba04df0262835f9683a7f1657d8e1df43792c1038d57eb") [0123.172] RtlAnsiStringToUnicodeString (in: DestinationString=0x9c5fb68, SourceString="0a68c1226ebe60c3002d1aba04df0262835f9683a7f1657d8e1df43792c1038d57eb", AllocateDestinationString=1 | out: DestinationString="0a68c1226ebe60c3002d1aba04df0262835f9683a7f1657d8e1df43792c1038d57eb") returned 0x0 [0123.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5698 [0123.172] wcscat (in: _Dest=0x3e69bb8, _Source="0a68c1226ebe60c30" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0a68c1226ebe60c30") returned="C:\\Users\\EEBsYm5\\Desktop\\0a68c1226ebe60c30" [0123.172] wcscat (in: _Dest=0x3e69bb8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0a68c1226ebe60c30.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\0a68c1226ebe60c30.68814f" [0123.172] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0a68c1226ebe60c30.68814f", NtPathName=0x9c5fb60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0a68c1226ebe60c30.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0123.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9918 [0123.172] NtSetInformationFile (FileHandle=0x1040, IoStatusBlock=0x9c5fb68, FileInformation=0x3eb9918, Length=0x7a, FileInformationClass=0xa) returned 0x0 [0123.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 [0123.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d404b0) returned 1 [0123.174] NtQueryInformationFile (in: FileHandle=0x1040, IoStatusBlock=0x9c5fb38, FileInformation=0x9c5fb40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9c5fb38, FileInformation=0x9c5fb40) returned 0x0 [0123.174] NtSetInformationFile (FileHandle=0x1040, IoStatusBlock=0x9c5fb38, FileInformation=0x9c5fb40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0123.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 [0123.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 [0123.180] FlushFileBuffers (hFile=0x1040) returned 1 [0123.966] CloseHandle (hObject=0x1040) returned 1 [0127.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe65a8 [0127.299] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0127.299] wcscat (in: _Dest=0x2fe65a8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0127.299] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0127.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 [0127.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5948) returned 1 Thread: id = 340 os_tid = 0xa8c [0122.151] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\9xFmWXpCcVZrm-C.mp4" (normalized: "c:\\users\\eebsym5\\desktop\\9xfmwxpccvzrm-c.mp4")) returned 0x20 [0122.151] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\9xFmWXpCcVZrm-C.mp4", dwFileAttributes=0x20) returned 1 [0122.152] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\9xFmWXpCcVZrm-C.mp4" (normalized: "c:\\users\\eebsym5\\desktop\\9xfmwxpccvzrm-c.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x103c [0122.152] GetFileSizeEx (in: hFile=0x103c, lpFileSize=0x823fcbc | out: lpFileSize=0x823fcbc*=92865) returned 1 [0122.153] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x16abd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.153] ReadFile (in: hFile=0x103c, lpBuffer=0x823fc98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x823fca8, lpOverlapped=0x0 | out: lpBuffer=0x823fc98*, lpNumberOfBytesRead=0x823fca8*=0x4, lpOverlapped=0x0) returned 1 [0122.154] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0122.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0122.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0122.155] NtQuerySystemTime (in: CurrentTime=0x823fc30 | out: CurrentTime=0x823fc30*=132462177015696000) returned 0x0 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x34f8152d [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x4037e2de [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x78bf5671 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x7c6cf2cf [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x468e8292 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x260bee15 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x9cd36c4 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x643bcfd6 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x73cb62a9 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x9fad176 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x10cf2b5c [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x41ab3a37 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x7469c178 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x6bd92b1a [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x4953f250 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x43bcc9e2 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x43b55078 [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x21711d6d [0122.155] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x5818f619 [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x2e7b42a2 [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x4cf38ae6 [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x25c7707a [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x63fd885b [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x58095c90 [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x4c5d4576 [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x553df9db [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x1cb2a2d8 [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x433c3fa2 [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x5077ef34 [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x354ed559 [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0xa01aa14 [0122.156] RtlRandomEx (in: Seed=0x823fc28 | out: Seed=0x823fc28) returned 0x516ef349 [0122.166] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.167] ReadFile (in: hFile=0x103c, lpBuffer=0x3f37798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x823fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f37798*, lpNumberOfBytesRead=0x823fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0122.167] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0122.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3490b0 [0122.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0122.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0122.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x3f3b3a0 [0122.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0122.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0122.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0122.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 [0122.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0122.168] WriteFile (in: hFile=0x103c, lpBuffer=0x3f3b3a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x823fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f3b3a0*, lpNumberOfBytesWritten=0x823fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0122.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b3a0) returned 1 [0122.563] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.564] ReadFile (in: hFile=0x103c, lpBuffer=0x3f37798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x823fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f37798*, lpNumberOfBytesRead=0x823fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0122.564] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07f08 [0122.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f128 [0122.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb828 [0122.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb828) returned 1 [0122.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x3f3b3a0 [0122.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb828 [0122.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb7d8 [0122.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb7d8) returned 1 [0122.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0122.565] WriteFile (in: hFile=0x103c, lpBuffer=0x3f3b3a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x823fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f3b3a0*, lpNumberOfBytesWritten=0x823fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0123.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b3a0) returned 1 [0123.175] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x12ec1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.175] ReadFile (in: hFile=0x103c, lpBuffer=0x3f37798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x823fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f37798*, lpNumberOfBytesRead=0x823fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0123.182] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x12ec1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07bf0 [0123.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0123.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca968 [0123.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca968) returned 1 [0123.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x3f3b3a0 [0123.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca968 [0123.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0123.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0123.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0123.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07bf0) returned 1 [0123.183] WriteFile (in: hFile=0x103c, lpBuffer=0x3f3b3a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x823fc30, lpOverlapped=0x0 | out: lpBuffer=0x3f3b3a0*, lpNumberOfBytesWritten=0x823fc30*=0x3c00, lpOverlapped=0x0) returned 1 [0123.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b3a0) returned 1 [0123.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee1218 [0123.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca968) returned 1 [0123.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb828) returned 1 [0123.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0123.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37798) returned 1 [0123.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfa90 [0123.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a252c0 [0123.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0123.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0123.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0123.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfc10 [0123.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0123.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca968 [0123.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca968) returned 1 [0123.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0123.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a252c0) returned 1 [0123.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x158) returned 0x3dcd460 [0123.968] SetFilePointerEx (in: hFile=0x103c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.968] WriteFile (in: hFile=0x103c, lpBuffer=0x3dcd460*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x823fcb0, lpOverlapped=0x0 | out: lpBuffer=0x3dcd460*, lpNumberOfBytesWritten=0x823fcb0*=0x158, lpOverlapped=0x0) returned 1 [0127.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0127.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0127.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0127.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3178) returned 1 [0127.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3db3cf0 [0127.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0127.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30d8 [0127.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30d8) returned 1 [0127.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0127.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0127.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4d) returned 0x3e14a90 [0127.231] sprintf (in: _Dest=0x3e14a90, _Format="%c%c" | out: _Dest="d6") returned 2 [0127.231] sprintf (in: _Dest=0x3e14a92, _Format="%c%c" | out: _Dest="b0") returned 2 [0127.231] sprintf (in: _Dest=0x3e14a94, _Format="%c%c" | out: _Dest="77") returned 2 [0127.231] sprintf (in: _Dest=0x3e14a96, _Format="%c%c" | out: _Dest="94") returned 2 [0127.231] sprintf (in: _Dest=0x3e14a98, _Format="%c%c" | out: _Dest="65") returned 2 [0127.231] sprintf (in: _Dest=0x3e14a9a, _Format="%c%c" | out: _Dest="17") returned 2 [0127.231] sprintf (in: _Dest=0x3e14a9c, _Format="%c%c" | out: _Dest="74") returned 2 [0127.231] sprintf (in: _Dest=0x3e14a9e, _Format="%c%c" | out: _Dest="3e") returned 2 [0127.231] sprintf (in: _Dest=0x3e14aa0, _Format="%c%c" | out: _Dest="ea") returned 2 [0127.232] sprintf (in: _Dest=0x3e14aa2, _Format="%c%c" | out: _Dest="fe") returned 2 [0127.232] sprintf (in: _Dest=0x3e14aa4, _Format="%c%c" | out: _Dest="53") returned 2 [0127.232] sprintf (in: _Dest=0x3e14aa6, _Format="%c%c" | out: _Dest="48") returned 2 [0127.232] sprintf (in: _Dest=0x3e14aa8, _Format="%c%c" | out: _Dest="1a") returned 2 [0127.232] sprintf (in: _Dest=0x3e14aaa, _Format="%c%c" | out: _Dest="98") returned 2 [0127.232] sprintf (in: _Dest=0x3e14aac, _Format="%c%c" | out: _Dest="4e") returned 2 [0127.232] sprintf (in: _Dest=0x3e14aae, _Format="%c%c" | out: _Dest="0d") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ab0, _Format="%c%c" | out: _Dest="60") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ab2, _Format="%c%c" | out: _Dest="62") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ab4, _Format="%c%c" | out: _Dest="3b") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ab6, _Format="%c%c" | out: _Dest="f8") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ab8, _Format="%c%c" | out: _Dest="e4") returned 2 [0127.232] sprintf (in: _Dest=0x3e14aba, _Format="%c%c" | out: _Dest="66") returned 2 [0127.232] sprintf (in: _Dest=0x3e14abc, _Format="%c%c" | out: _Dest="d9") returned 2 [0127.232] sprintf (in: _Dest=0x3e14abe, _Format="%c%c" | out: _Dest="a5") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ac0, _Format="%c%c" | out: _Dest="4c") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ac2, _Format="%c%c" | out: _Dest="9f") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ac4, _Format="%c%c" | out: _Dest="97") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ac6, _Format="%c%c" | out: _Dest="6f") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ac8, _Format="%c%c" | out: _Dest="2e") returned 2 [0127.232] sprintf (in: _Dest=0x3e14aca, _Format="%c%c" | out: _Dest="f4") returned 2 [0127.232] sprintf (in: _Dest=0x3e14acc, _Format="%c%c" | out: _Dest="ec") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ace, _Format="%c%c" | out: _Dest="e6") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ad0, _Format="%c%c" | out: _Dest="ce") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ad2, _Format="%c%c" | out: _Dest="ad") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ad4, _Format="%c%c" | out: _Dest="c9") returned 2 [0127.232] sprintf (in: _Dest=0x3e14ad6, _Format="%c%c" | out: _Dest="8a") returned 2 [0127.233] sprintf (in: _Dest=0x3e14ad8, _Format="%c%c" | out: _Dest="a4") returned 2 [0127.233] sprintf (in: _Dest=0x3e14ada, _Format="%c%c" | out: _Dest="33") returned 2 [0127.233] RtlInitAnsiString (in: DestinationString=0x823fc38, SourceString="d6b077946517743eeafe53481a984e0d60623bf8e466d9a54c9f976f2ef4ece6ceadc98aa433" | out: DestinationString="d6b077946517743eeafe53481a984e0d60623bf8e466d9a54c9f976f2ef4ece6ceadc98aa433") [0127.233] RtlAnsiStringToUnicodeString (in: DestinationString=0x823fc30, SourceString="d6b077946517743eeafe53481a984e0d60623bf8e466d9a54c9f976f2ef4ece6ceadc98aa433", AllocateDestinationString=1 | out: DestinationString="d6b077946517743eeafe53481a984e0d60623bf8e466d9a54c9f976f2ef4ece6ceadc98aa433") returned 0x0 [0127.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053480 [0127.233] wcscat (in: _Dest=0x3e3fbb0, _Source="d6b077946517743eeaf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\d6b077946517743eeaf") returned="C:\\Users\\EEBsYm5\\Desktop\\d6b077946517743eeaf" [0127.233] wcscat (in: _Dest=0x3e3fbb0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\d6b077946517743eeaf.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\d6b077946517743eeaf.68814f" [0127.233] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\d6b077946517743eeaf.68814f", NtPathName=0x823fc28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\d6b077946517743eeaf.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8f88 [0127.233] NtSetInformationFile (FileHandle=0x103c, IoStatusBlock=0x823fc30, FileInformation=0x3eb8f88, Length=0x7e, FileInformationClass=0xa) returned 0x0 [0128.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 [0128.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40d50) returned 1 [0128.085] NtQueryInformationFile (in: FileHandle=0x103c, IoStatusBlock=0x823fc00, FileInformation=0x823fc08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x823fc00, FileInformation=0x823fc08) returned 0x0 [0128.085] NtSetInformationFile (FileHandle=0x103c, IoStatusBlock=0x823fc00, FileInformation=0x823fc08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3fbb0) returned 1 [0128.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 [0128.087] FlushFileBuffers (hFile=0x103c) returned 1 [0128.092] CloseHandle (hObject=0x103c) returned 1 [0128.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe5948 [0128.095] wcscpy (in: _Dest=0x2fe5948, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0128.095] wcscat (in: _Dest=0x2fe5948, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0128.095] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0128.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5948) returned 1 [0128.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf4d8) returned 1 Thread: id = 341 os_tid = 0xb18 [0122.170] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AqfrdmMXMVhakW.gif" (normalized: "c:\\users\\eebsym5\\desktop\\aqfrdmmxmvhakw.gif")) returned 0x20 [0122.171] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AqfrdmMXMVhakW.gif", dwFileAttributes=0x20) returned 1 [0122.171] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AqfrdmMXMVhakW.gif" (normalized: "c:\\users\\eebsym5\\desktop\\aqfrdmmxmvhakw.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1034 [0122.172] GetFileSizeEx (in: hFile=0x1034, lpFileSize=0x98bfe8c | out: lpFileSize=0x98bfe8c*=43210) returned 1 [0122.172] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0xa8c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.172] ReadFile (in: hFile=0x1034, lpBuffer=0x98bfe68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x98bfe78, lpOverlapped=0x0 | out: lpBuffer=0x98bfe68*, lpNumberOfBytesRead=0x98bfe78*=0x4, lpOverlapped=0x0) returned 1 [0122.174] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0122.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0122.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0122.174] NtQuerySystemTime (in: CurrentTime=0x98bfe00 | out: CurrentTime=0x98bfe00*=132462177016008000) returned 0x0 [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x4c4092f0 [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x18408dae [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x5b28876d [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x3b555059 [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x57cac297 [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x17267a0d [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x3cd29ddf [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x3239bd59 [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0xea82ba7 [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x30a45934 [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x6e04262e [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x4f9225fa [0122.174] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x2e21276b [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x52161da4 [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x31b35471 [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x6b2693ba [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x9fad176 [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x9cd36c4 [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x7ab5ef85 [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x7c120c1e [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x17f9b536 [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x7d0d73c [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x4037e2de [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x7bb994b6 [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x1b9fc7d [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x6db81aaa [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x410435ac [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x4478dd7c [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0xfefa2d5 [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x75e033b4 [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x53be5119 [0122.175] RtlRandomEx (in: Seed=0x98bfdf8 | out: Seed=0x98bfdf8) returned 0x2112b90 [0122.188] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.188] ReadFile (in: hFile=0x1034, lpBuffer=0x7a30038, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x98bfe00, lpOverlapped=0x0 | out: lpBuffer=0x7a30038*, lpNumberOfBytesRead=0x98bfe00*=0x3c00, lpOverlapped=0x0) returned 1 [0122.189] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84ff0 [0122.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3490b0 [0122.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0122.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0122.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a33c40 [0122.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0122.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0122.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0122.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 [0122.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84ff0) returned 1 [0122.190] WriteFile (in: hFile=0x1034, lpBuffer=0x7a33c40*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x98bfe00, lpOverlapped=0x0 | out: lpBuffer=0x7a33c40*, lpNumberOfBytesWritten=0x98bfe00*=0x3c00, lpOverlapped=0x0) returned 1 [0122.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33c40) returned 1 [0122.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a30038) returned 1 [0122.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfbd0 [0122.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb7d8) returned 1 [0122.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf810 [0122.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb7d8 [0122.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb7b0 [0122.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb7b0) returned 1 [0122.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0122.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d54f00 [0122.572] SetFilePointerEx (in: hFile=0x1034, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.572] WriteFile (in: hFile=0x1034, lpBuffer=0x3d54f00*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x98bfe80, lpOverlapped=0x0 | out: lpBuffer=0x3d54f00*, lpNumberOfBytesWritten=0x98bfe80*=0x116, lpOverlapped=0x0) returned 1 [0123.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07bf0 [0123.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0123.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0123.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0123.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86278 [0123.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0123.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0123.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0123.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0123.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07bf0) returned 1 [0123.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3e6adc8 [0123.189] sprintf (in: _Dest=0x3e6adc8, _Format="%c%c" | out: _Dest="cd") returned 2 [0123.189] sprintf (in: _Dest=0x3e6adca, _Format="%c%c" | out: _Dest="0b") returned 2 [0123.189] sprintf (in: _Dest=0x3e6adcc, _Format="%c%c" | out: _Dest="d5") returned 2 [0123.189] sprintf (in: _Dest=0x3e6adce, _Format="%c%c" | out: _Dest="59") returned 2 [0123.189] sprintf (in: _Dest=0x3e6add0, _Format="%c%c" | out: _Dest="54") returned 2 [0123.189] sprintf (in: _Dest=0x3e6add2, _Format="%c%c" | out: _Dest="d4") returned 2 [0123.189] sprintf (in: _Dest=0x3e6add4, _Format="%c%c" | out: _Dest="86") returned 2 [0123.189] sprintf (in: _Dest=0x3e6add6, _Format="%c%c" | out: _Dest="c7") returned 2 [0123.189] sprintf (in: _Dest=0x3e6add8, _Format="%c%c" | out: _Dest="1b") returned 2 [0123.189] sprintf (in: _Dest=0x3e6adda, _Format="%c%c" | out: _Dest="35") returned 2 [0123.189] sprintf (in: _Dest=0x3e6addc, _Format="%c%c" | out: _Dest="97") returned 2 [0123.189] sprintf (in: _Dest=0x3e6adde, _Format="%c%c" | out: _Dest="89") returned 2 [0123.189] sprintf (in: _Dest=0x3e6ade0, _Format="%c%c" | out: _Dest="ab") returned 2 [0123.189] sprintf (in: _Dest=0x3e6ade2, _Format="%c%c" | out: _Dest="1c") returned 2 [0123.189] sprintf (in: _Dest=0x3e6ade4, _Format="%c%c" | out: _Dest="57") returned 2 [0123.189] sprintf (in: _Dest=0x3e6ade6, _Format="%c%c" | out: _Dest="38") returned 2 [0123.189] sprintf (in: _Dest=0x3e6ade8, _Format="%c%c" | out: _Dest="b5") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adea, _Format="%c%c" | out: _Dest="60") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adec, _Format="%c%c" | out: _Dest="74") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adee, _Format="%c%c" | out: _Dest="c0") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adf0, _Format="%c%c" | out: _Dest="ad") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adf2, _Format="%c%c" | out: _Dest="0c") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adf4, _Format="%c%c" | out: _Dest="a6") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adf6, _Format="%c%c" | out: _Dest="cb") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adf8, _Format="%c%c" | out: _Dest="53") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adfa, _Format="%c%c" | out: _Dest="52") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adfc, _Format="%c%c" | out: _Dest="36") returned 2 [0123.190] sprintf (in: _Dest=0x3e6adfe, _Format="%c%c" | out: _Dest="81") returned 2 [0123.190] sprintf (in: _Dest=0x3e6ae00, _Format="%c%c" | out: _Dest="85") returned 2 [0123.190] sprintf (in: _Dest=0x3e6ae02, _Format="%c%c" | out: _Dest="c5") returned 2 [0123.190] sprintf (in: _Dest=0x3e6ae04, _Format="%c%c" | out: _Dest="78") returned 2 [0123.190] sprintf (in: _Dest=0x3e6ae06, _Format="%c%c" | out: _Dest="a9") returned 2 [0123.190] sprintf (in: _Dest=0x3e6ae08, _Format="%c%c" | out: _Dest="b7") returned 2 [0123.190] sprintf (in: _Dest=0x3e6ae0a, _Format="%c%c" | out: _Dest="fd") returned 2 [0123.190] sprintf (in: _Dest=0x3e6ae0c, _Format="%c%c" | out: _Dest="f2") returned 2 [0123.190] sprintf (in: _Dest=0x3e6ae0e, _Format="%c%c" | out: _Dest="1f") returned 2 [0123.191] RtlInitAnsiString (in: DestinationString=0x98bfe08, SourceString="cd0bd55954d486c71b359789ab1c5738b56074c0ad0ca6cb5352368185c578a9b7fdf21f" | out: DestinationString="cd0bd55954d486c71b359789ab1c5738b56074c0ad0ca6cb5352368185c578a9b7fdf21f") [0123.191] RtlAnsiStringToUnicodeString (in: DestinationString=0x98bfe00, SourceString="cd0bd55954d486c71b359789ab1c5738b56074c0ad0ca6cb5352368185c578a9b7fdf21f", AllocateDestinationString=1 | out: DestinationString="cd0bd55954d486c71b359789ab1c5738b56074c0ad0ca6cb5352368185c578a9b7fdf21f") returned 0x0 [0123.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4be0 [0123.191] wcscat (in: _Dest=0x3e69bb8, _Source="cd0bd55954d486c71b" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\cd0bd55954d486c71b") returned="C:\\Users\\EEBsYm5\\Desktop\\cd0bd55954d486c71b" [0123.191] wcscat (in: _Dest=0x3e69bb8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\cd0bd55954d486c71b.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\cd0bd55954d486c71b.68814f" [0123.191] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\cd0bd55954d486c71b.68814f", NtPathName=0x98bfdf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\cd0bd55954d486c71b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0123.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9918 [0123.191] NtSetInformationFile (FileHandle=0x1034, IoStatusBlock=0x98bfe00, FileInformation=0x3eb9918, Length=0x7c, FileInformationClass=0xa) returned 0x0 [0123.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 [0123.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d404b0) returned 1 [0123.211] NtQueryInformationFile (in: FileHandle=0x1034, IoStatusBlock=0x98bfdd0, FileInformation=0x98bfdd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x98bfdd0, FileInformation=0x98bfdd8) returned 0x0 [0123.211] NtSetInformationFile (FileHandle=0x1034, IoStatusBlock=0x98bfdd0, FileInformation=0x98bfdd8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0123.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 [0123.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4be0) returned 1 [0123.213] FlushFileBuffers (hFile=0x1034) returned 1 [0124.951] CloseHandle (hObject=0x1034) returned 1 [0127.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6488 [0127.226] wcscpy (in: _Dest=0x2fe6488, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0127.226] wcscat (in: _Dest=0x2fe6488, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0127.226] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0127.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6488) returned 1 [0127.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 Thread: id = 342 os_tid = 0x51c [0122.223] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AztICfsn72RYdP.swf" (normalized: "c:\\users\\eebsym5\\desktop\\azticfsn72rydp.swf")) returned 0x20 [0122.224] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AztICfsn72RYdP.swf", dwFileAttributes=0x20) returned 1 [0122.225] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\AztICfsn72RYdP.swf" (normalized: "c:\\users\\eebsym5\\desktop\\azticfsn72rydp.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x102c [0122.225] GetFileSizeEx (in: hFile=0x102c, lpFileSize=0x9cefd2c | out: lpFileSize=0x9cefd2c*=47723) returned 1 [0122.225] SetFilePointerEx (in: hFile=0x102c, liDistanceToMove=0xba67, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.225] ReadFile (in: hFile=0x102c, lpBuffer=0x9cefd08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9cefd18, lpOverlapped=0x0 | out: lpBuffer=0x9cefd08*, lpNumberOfBytesRead=0x9cefd18*=0x4, lpOverlapped=0x0) returned 1 [0122.227] SetFilePointerEx (in: hFile=0x102c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0122.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0122.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0122.227] NtQuerySystemTime (in: CurrentTime=0x9cefca0 | out: CurrentTime=0x9cefca0*=132462177016476000) returned 0x0 [0122.227] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x4e3eb1f5 [0122.227] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x18408dae [0122.227] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x7fc224c5 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x41288600 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x287ae35c [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x4db9687 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x57fa172a [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x4a6583d9 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x1c7536d5 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x44dcba77 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x196f1fde [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x65af95e7 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x1471ba15 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x79e35332 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x3af3b841 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x2ed0f422 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x6abaf7e0 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x3cd2bbfc [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0xf8fa1df [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x3b87c4d2 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x1c9e4bf6 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x40716e50 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x4b760984 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x2affb815 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x57d51e5a [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x53be5119 [0122.228] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x275c0346 [0122.229] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x4b760984 [0122.229] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x7eda91f4 [0122.229] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0xcee4aa9 [0122.229] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x491775ce [0122.229] RtlRandomEx (in: Seed=0x9cefc98 | out: Seed=0x9cefc98) returned 0x3a71ea30 [0122.259] SetFilePointerEx (in: hFile=0x102c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.259] ReadFile (in: hFile=0x102c, lpBuffer=0x7a37848, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9cefca0, lpOverlapped=0x0 | out: lpBuffer=0x7a37848*, lpNumberOfBytesRead=0x9cefca0*=0x3c00, lpOverlapped=0x0) returned 1 [0122.260] SetFilePointerEx (in: hFile=0x102c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c98 [0122.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3490b0 [0122.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0122.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0122.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a3b450 [0122.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0122.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0122.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0122.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 [0122.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c98) returned 1 [0122.261] WriteFile (in: hFile=0x102c, lpBuffer=0x7a3b450*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9cefca0, lpOverlapped=0x0 | out: lpBuffer=0x7a3b450*, lpNumberOfBytesWritten=0x9cefca0*=0x3c00, lpOverlapped=0x0) returned 1 [0122.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b450) returned 1 [0122.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37848) returned 1 [0122.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf790 [0122.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb7b0) returned 1 [0122.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfb90 [0122.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb7b0 [0122.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb788 [0122.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb788) returned 1 [0122.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0122.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d545c0 [0122.574] SetFilePointerEx (in: hFile=0x102c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.574] WriteFile (in: hFile=0x102c, lpBuffer=0x3d545c0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x9cefd20, lpOverlapped=0x0 | out: lpBuffer=0x3d545c0*, lpNumberOfBytesWritten=0x9cefd20*=0x116, lpOverlapped=0x0) returned 1 [0123.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07bf0 [0123.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0123.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0123.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0123.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86278 [0123.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0123.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0123.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0123.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0123.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07bf0) returned 1 [0123.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3e6adc8 [0123.215] sprintf (in: _Dest=0x3e6adc8, _Format="%c%c" | out: _Dest="80") returned 2 [0123.215] sprintf (in: _Dest=0x3e6adca, _Format="%c%c" | out: _Dest="84") returned 2 [0123.215] sprintf (in: _Dest=0x3e6adcc, _Format="%c%c" | out: _Dest="66") returned 2 [0123.215] sprintf (in: _Dest=0x3e6adce, _Format="%c%c" | out: _Dest="48") returned 2 [0123.215] sprintf (in: _Dest=0x3e6add0, _Format="%c%c" | out: _Dest="e0") returned 2 [0123.215] sprintf (in: _Dest=0x3e6add2, _Format="%c%c" | out: _Dest="97") returned 2 [0123.215] sprintf (in: _Dest=0x3e6add4, _Format="%c%c" | out: _Dest="d3") returned 2 [0123.215] sprintf (in: _Dest=0x3e6add6, _Format="%c%c" | out: _Dest="77") returned 2 [0123.215] sprintf (in: _Dest=0x3e6add8, _Format="%c%c" | out: _Dest="ae") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adda, _Format="%c%c" | out: _Dest="28") returned 2 [0123.216] sprintf (in: _Dest=0x3e6addc, _Format="%c%c" | out: _Dest="0a") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adde, _Format="%c%c" | out: _Dest="52") returned 2 [0123.216] sprintf (in: _Dest=0x3e6ade0, _Format="%c%c" | out: _Dest="e7") returned 2 [0123.216] sprintf (in: _Dest=0x3e6ade2, _Format="%c%c" | out: _Dest="a4") returned 2 [0123.216] sprintf (in: _Dest=0x3e6ade4, _Format="%c%c" | out: _Dest="fa") returned 2 [0123.216] sprintf (in: _Dest=0x3e6ade6, _Format="%c%c" | out: _Dest="db") returned 2 [0123.216] sprintf (in: _Dest=0x3e6ade8, _Format="%c%c" | out: _Dest="76") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adea, _Format="%c%c" | out: _Dest="1c") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adec, _Format="%c%c" | out: _Dest="ac") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adee, _Format="%c%c" | out: _Dest="49") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adf0, _Format="%c%c" | out: _Dest="66") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adf2, _Format="%c%c" | out: _Dest="25") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adf4, _Format="%c%c" | out: _Dest="ba") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adf6, _Format="%c%c" | out: _Dest="c1") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adf8, _Format="%c%c" | out: _Dest="85") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adfa, _Format="%c%c" | out: _Dest="92") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adfc, _Format="%c%c" | out: _Dest="b0") returned 2 [0123.216] sprintf (in: _Dest=0x3e6adfe, _Format="%c%c" | out: _Dest="73") returned 2 [0123.216] sprintf (in: _Dest=0x3e6ae00, _Format="%c%c" | out: _Dest="f7") returned 2 [0123.216] sprintf (in: _Dest=0x3e6ae02, _Format="%c%c" | out: _Dest="45") returned 2 [0123.217] sprintf (in: _Dest=0x3e6ae04, _Format="%c%c" | out: _Dest="fb") returned 2 [0123.217] sprintf (in: _Dest=0x3e6ae06, _Format="%c%c" | out: _Dest="50") returned 2 [0123.217] sprintf (in: _Dest=0x3e6ae08, _Format="%c%c" | out: _Dest="44") returned 2 [0123.217] sprintf (in: _Dest=0x3e6ae0a, _Format="%c%c" | out: _Dest="bd") returned 2 [0123.217] sprintf (in: _Dest=0x3e6ae0c, _Format="%c%c" | out: _Dest="9f") returned 2 [0123.217] sprintf (in: _Dest=0x3e6ae0e, _Format="%c%c" | out: _Dest="f9") returned 2 [0123.217] RtlInitAnsiString (in: DestinationString=0x9cefca8, SourceString="80846648e097d377ae280a52e7a4fadb761cac496625bac18592b073f745fb5044bd9ff9" | out: DestinationString="80846648e097d377ae280a52e7a4fadb761cac496625bac18592b073f745fb5044bd9ff9") [0123.217] RtlAnsiStringToUnicodeString (in: DestinationString=0x9cefca0, SourceString="80846648e097d377ae280a52e7a4fadb761cac496625bac18592b073f745fb5044bd9ff9", AllocateDestinationString=1 | out: DestinationString="80846648e097d377ae280a52e7a4fadb761cac496625bac18592b073f745fb5044bd9ff9") returned 0x0 [0123.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5d60 [0123.217] wcscat (in: _Dest=0x3e69bb8, _Source="80846648e097d377ae" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\80846648e097d377ae") returned="C:\\Users\\EEBsYm5\\Desktop\\80846648e097d377ae" [0123.217] wcscat (in: _Dest=0x3e69bb8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\80846648e097d377ae.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\80846648e097d377ae.68814f" [0123.218] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\80846648e097d377ae.68814f", NtPathName=0x9cefc98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\80846648e097d377ae.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0123.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9918 [0123.218] NtSetInformationFile (FileHandle=0x102c, IoStatusBlock=0x9cefca0, FileInformation=0x3eb9918, Length=0x7c, FileInformationClass=0xa) returned 0x0 [0123.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 [0123.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d404b0) returned 1 [0123.220] NtQueryInformationFile (in: FileHandle=0x102c, IoStatusBlock=0x9cefc70, FileInformation=0x9cefc78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9cefc70, FileInformation=0x9cefc78) returned 0x0 [0123.220] NtSetInformationFile (FileHandle=0x102c, IoStatusBlock=0x9cefc70, FileInformation=0x9cefc78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0123.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 [0123.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5d60) returned 1 [0123.221] FlushFileBuffers (hFile=0x102c) returned 1 [0124.950] CloseHandle (hObject=0x102c) returned 1 [0127.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6b48 [0127.219] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0127.220] wcscat (in: _Dest=0x2fe6b48, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0127.220] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0127.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 [0127.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6488) returned 1 Thread: id = 343 os_tid = 0xd6c [0122.264] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\bauateq-1x.bmp")) returned 0x20 [0122.264] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp", dwFileAttributes=0x20) returned 1 [0122.265] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\bauateq-1x.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1030 [0122.265] GetFileSizeEx (in: hFile=0x1030, lpFileSize=0x9d3fb54 | out: lpFileSize=0x9d3fb54*=67847) returned 1 [0122.265] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x10903, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.265] ReadFile (in: hFile=0x1030, lpBuffer=0x9d3fb30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d3fb40, lpOverlapped=0x0 | out: lpBuffer=0x9d3fb30*, lpNumberOfBytesRead=0x9d3fb40*=0x4, lpOverlapped=0x0) returned 1 [0122.267] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0122.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0122.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0122.268] NtQuerySystemTime (in: CurrentTime=0x9d3fac8 | out: CurrentTime=0x9d3fac8*=132462177016944000) returned 0x0 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x77499ca0 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x1700ad74 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x77f0af7a [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x3c9f37a6 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x42a400eb [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x3aef86af [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x64506bff [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x10e4361a [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x271956f0 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x5f4b6ad6 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x288f6a45 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x687f390a [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x49192781 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x1b6da946 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x6ab4bf5b [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x74d3ef91 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x3d603f9 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x5f7eb254 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x56826662 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x75c8b3b5 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x255c844d [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x44f2a52c [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x57912e10 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x6b6adbb6 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x2e259122 [0122.268] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x4c9e1b93 [0122.269] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x5bb30fd1 [0122.269] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x57fa172a [0122.269] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x75195c96 [0122.269] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x727c8ce8 [0122.269] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x2d247ca2 [0122.269] RtlRandomEx (in: Seed=0x9d3fac0 | out: Seed=0x9d3fac0) returned 0x4f577d97 [0122.278] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.278] ReadFile (in: hFile=0x1030, lpBuffer=0x7a3f058, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9d3fac8, lpOverlapped=0x0 | out: lpBuffer=0x7a3f058*, lpNumberOfBytesRead=0x9d3fac8*=0x3c00, lpOverlapped=0x0) returned 1 [0122.279] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85ce0 [0122.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3490b0 [0122.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0122.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a42c60 [0122.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0122.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0122.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0122.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 [0122.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ce0) returned 1 [0122.280] WriteFile (in: hFile=0x1030, lpBuffer=0x7a42c60*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9d3fac8, lpOverlapped=0x0 | out: lpBuffer=0x7a42c60*, lpNumberOfBytesWritten=0x9d3fac8*=0x3c00, lpOverlapped=0x0) returned 1 [0122.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a42c60) returned 1 [0122.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f058) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79138 [0122.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb788) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79020 [0122.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb788 [0122.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb760 [0122.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb760) returned 1 [0122.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3deaf00 [0122.576] SetFilePointerEx (in: hFile=0x1030, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.576] WriteFile (in: hFile=0x1030, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x9d3fb48, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0x9d3fb48*=0x10e, lpOverlapped=0x0) returned 1 [0123.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deaf00) returned 1 [0123.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79020) returned 1 [0123.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb788) returned 1 [0123.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79138) returned 1 [0123.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0123.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c20) returned 1 [0123.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0123.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e00) returned 1 [0123.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0fa8 [0123.225] wcscpy (in: _Dest=0x3ee0fa8, _Source="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp" [0123.225] wcscat (in: _Dest=0x3ee0fa8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp.68814f" [0123.225] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp.68814f", NtPathName=0x9d3fac0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\bAuATEq-1X.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0123.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e18e18 [0123.225] NtSetInformationFile (FileHandle=0x1030, IoStatusBlock=0x9d3fac8, FileInformation=0x3e18e18, Length=0x74, FileInformationClass=0xa) returned 0x0 [0123.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18e18) returned 1 [0123.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d404b0) returned 1 [0123.226] NtQueryInformationFile (in: FileHandle=0x1030, IoStatusBlock=0x9d3fa98, FileInformation=0x9d3faa0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9d3fa98, FileInformation=0x9d3faa0) returned 0x0 [0123.227] NtSetInformationFile (FileHandle=0x1030, IoStatusBlock=0x9d3fa98, FileInformation=0x9d3faa0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0123.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0fa8) returned 1 [0123.229] FlushFileBuffers (hFile=0x1030) returned 1 [0124.951] CloseHandle (hObject=0x1030) returned 1 [0127.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6488 [0127.222] wcscpy (in: _Dest=0x2fe6488, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0127.222] wcscat (in: _Dest=0x2fe6488, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0127.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0127.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6488) returned 1 [0127.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14a90) returned 1 Thread: id = 344 os_tid = 0xda0 [0122.287] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\HLM3k8ymJZIH-.rtf" (normalized: "c:\\users\\eebsym5\\desktop\\hlm3k8ymjzih-.rtf")) returned 0x20 [0122.287] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\HLM3k8ymJZIH-.rtf", dwFileAttributes=0x20) returned 1 [0122.288] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\HLM3k8ymJZIH-.rtf" (normalized: "c:\\users\\eebsym5\\desktop\\hlm3k8ymjzih-.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1008 [0122.288] GetFileSizeEx (in: hFile=0x1008, lpFileSize=0x8eefc14 | out: lpFileSize=0x8eefc14*=92201) returned 1 [0122.288] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x16825, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.288] ReadFile (in: hFile=0x1008, lpBuffer=0x8eefbf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8eefc00, lpOverlapped=0x0 | out: lpBuffer=0x8eefbf0*, lpNumberOfBytesRead=0x8eefc00*=0x4, lpOverlapped=0x0) returned 1 [0122.290] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0122.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c48 [0122.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0f8 [0122.291] NtQuerySystemTime (in: CurrentTime=0x8eefb88 | out: CurrentTime=0x8eefb88*=132462177017100000) returned 0x0 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x1000ea47 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x65d94f55 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x16fbec3b [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x46bb2596 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x1a46e52 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x433c3fa2 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x173ebfe0 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x7800e8b7 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x4a320f4c [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x6ad4ccd3 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x44377d27 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x733e1763 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x362fc224 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x507428f7 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x392ec803 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x3e534b6d [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x618bee19 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x28c154dc [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x7dbc5ed3 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x41d8e570 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x2f639234 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x5acaefa3 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0xe58e7a4 [0122.291] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x48905f22 [0122.292] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x7cdea873 [0122.292] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x3c11ec60 [0122.292] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x60ec3ef9 [0122.292] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x6d75b2e [0122.292] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x41e8ddaa [0122.292] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x29dcf721 [0122.292] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x45c38656 [0122.292] RtlRandomEx (in: Seed=0x8eefb80 | out: Seed=0x8eefb80) returned 0x6bf36e75 [0122.304] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.304] ReadFile (in: hFile=0x1008, lpBuffer=0x7a46868, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8eefb88, lpOverlapped=0x0 | out: lpBuffer=0x7a46868*, lpNumberOfBytesRead=0x8eefb88*=0x3c00, lpOverlapped=0x0) returned 1 [0122.304] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e855d8 [0122.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3490b0 [0122.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0122.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0122.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a4a470 [0122.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0122.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0f8 [0122.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0f8) returned 1 [0122.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 [0122.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e855d8) returned 1 [0122.305] WriteFile (in: hFile=0x1008, lpBuffer=0x7a4a470*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8eefb88, lpOverlapped=0x0 | out: lpBuffer=0x7a4a470*, lpNumberOfBytesWritten=0x8eefb88*=0x3c00, lpOverlapped=0x0) returned 1 [0123.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4a470) returned 1 [0123.362] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.362] ReadFile (in: hFile=0x1008, lpBuffer=0x7a46868, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8eefb88, lpOverlapped=0x0 | out: lpBuffer=0x7a46868*, lpNumberOfBytesRead=0x8eefb88*=0x3c00, lpOverlapped=0x0) returned 1 [0123.362] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07bf0 [0123.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0123.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0123.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0123.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a4a470 [0123.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0123.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0123.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0123.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0123.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07bf0) returned 1 [0123.363] WriteFile (in: hFile=0x1008, lpBuffer=0x7a4a470*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8eefb88, lpOverlapped=0x0 | out: lpBuffer=0x7a4a470*, lpNumberOfBytesWritten=0x8eefb88*=0x3c00, lpOverlapped=0x0) returned 1 [0123.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4a470) returned 1 [0123.974] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x12c29, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.974] ReadFile (in: hFile=0x1008, lpBuffer=0x7a46868, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8eefb88, lpOverlapped=0x0 | out: lpBuffer=0x7a46868*, lpNumberOfBytesRead=0x8eefb88*=0x3c00, lpOverlapped=0x0) returned 1 [0124.303] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x12c29, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0124.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0124.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd740 [0124.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd740) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ada308 [0124.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd740 [0124.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb738 [0124.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb738) returned 1 [0124.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0124.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0124.305] WriteFile (in: hFile=0x1008, lpBuffer=0x7ada308*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8eefb88, lpOverlapped=0x0 | out: lpBuffer=0x7ada308*, lpNumberOfBytesWritten=0x8eefb88*=0x3c00, lpOverlapped=0x0) returned 1 [0124.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ada308) returned 1 [0124.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0ac8 [0124.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0124.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79020 [0124.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0124.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0124.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0124.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 [0124.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0124.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dcde38 [0124.404] SetFilePointerEx (in: hFile=0x1008, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.404] WriteFile (in: hFile=0x1008, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x8eefc08, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x8eefc08*=0x154, lpOverlapped=0x0) returned 1 [0127.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0127.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0127.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0127.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0127.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e85d68 [0127.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0127.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0127.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0127.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0127.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0127.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3de5ed8 [0127.239] sprintf (in: _Dest=0x3de5ed8, _Format="%c%c" | out: _Dest="cd") returned 2 [0127.240] sprintf (in: _Dest=0x3de5eda, _Format="%c%c" | out: _Dest="a8") returned 2 [0127.240] sprintf (in: _Dest=0x3de5edc, _Format="%c%c" | out: _Dest="cf") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ede, _Format="%c%c" | out: _Dest="5c") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ee0, _Format="%c%c" | out: _Dest="75") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ee2, _Format="%c%c" | out: _Dest="03") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ee4, _Format="%c%c" | out: _Dest="ee") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ee6, _Format="%c%c" | out: _Dest="6b") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ee8, _Format="%c%c" | out: _Dest="ed") returned 2 [0127.240] sprintf (in: _Dest=0x3de5eea, _Format="%c%c" | out: _Dest="49") returned 2 [0127.240] sprintf (in: _Dest=0x3de5eec, _Format="%c%c" | out: _Dest="dd") returned 2 [0127.240] sprintf (in: _Dest=0x3de5eee, _Format="%c%c" | out: _Dest="7a") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ef0, _Format="%c%c" | out: _Dest="1b") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ef2, _Format="%c%c" | out: _Dest="43") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ef4, _Format="%c%c" | out: _Dest="48") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ef6, _Format="%c%c" | out: _Dest="53") returned 2 [0127.240] sprintf (in: _Dest=0x3de5ef8, _Format="%c%c" | out: _Dest="06") returned 2 [0127.240] sprintf (in: _Dest=0x3de5efa, _Format="%c%c" | out: _Dest="94") returned 2 [0127.240] sprintf (in: _Dest=0x3de5efc, _Format="%c%c" | out: _Dest="3b") returned 2 [0127.240] sprintf (in: _Dest=0x3de5efe, _Format="%c%c" | out: _Dest="12") returned 2 [0127.240] sprintf (in: _Dest=0x3de5f00, _Format="%c%c" | out: _Dest="0b") returned 2 [0127.240] sprintf (in: _Dest=0x3de5f02, _Format="%c%c" | out: _Dest="54") returned 2 [0127.240] sprintf (in: _Dest=0x3de5f04, _Format="%c%c" | out: _Dest="33") returned 2 [0127.240] sprintf (in: _Dest=0x3de5f06, _Format="%c%c" | out: _Dest="92") returned 2 [0127.240] sprintf (in: _Dest=0x3de5f08, _Format="%c%c" | out: _Dest="98") returned 2 [0127.240] sprintf (in: _Dest=0x3de5f0a, _Format="%c%c" | out: _Dest="f3") returned 2 [0127.240] sprintf (in: _Dest=0x3de5f0c, _Format="%c%c" | out: _Dest="a7") returned 2 [0127.240] sprintf (in: _Dest=0x3de5f0e, _Format="%c%c" | out: _Dest="7b") returned 2 [0127.240] sprintf (in: _Dest=0x3de5f10, _Format="%c%c" | out: _Dest="dc") returned 2 [0127.241] sprintf (in: _Dest=0x3de5f12, _Format="%c%c" | out: _Dest="eb") returned 2 [0127.241] sprintf (in: _Dest=0x3de5f14, _Format="%c%c" | out: _Dest="8e") returned 2 [0127.241] sprintf (in: _Dest=0x3de5f16, _Format="%c%c" | out: _Dest="a9") returned 2 [0127.241] sprintf (in: _Dest=0x3de5f18, _Format="%c%c" | out: _Dest="47") returned 2 [0127.241] sprintf (in: _Dest=0x3de5f1a, _Format="%c%c" | out: _Dest="10") returned 2 [0127.241] RtlInitAnsiString (in: DestinationString=0x8eefb90, SourceString="cda8cf5c7503ee6bed49dd7a1b43485306943b120b54339298f3a77bdceb8ea94710" | out: DestinationString="cda8cf5c7503ee6bed49dd7a1b43485306943b120b54339298f3a77bdceb8ea94710") [0127.241] RtlAnsiStringToUnicodeString (in: DestinationString=0x8eefb88, SourceString="cda8cf5c7503ee6bed49dd7a1b43485306943b120b54339298f3a77bdceb8ea94710", AllocateDestinationString=1 | out: DestinationString="cda8cf5c7503ee6bed49dd7a1b43485306943b120b54339298f3a77bdceb8ea94710") returned 0x0 [0127.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb67d0 [0127.241] wcscat (in: _Dest=0x7a23920, _Source="cda8cf5c7503ee6be" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\cda8cf5c7503ee6be") returned="C:\\Users\\EEBsYm5\\Desktop\\cda8cf5c7503ee6be" [0127.241] wcscat (in: _Dest=0x7a23920, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\cda8cf5c7503ee6be.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\cda8cf5c7503ee6be.68814f" [0127.241] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\cda8cf5c7503ee6be.68814f", NtPathName=0x8eefb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\cda8cf5c7503ee6be.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9010 [0127.241] NtSetInformationFile (FileHandle=0x1008, IoStatusBlock=0x8eefb88, FileInformation=0x3eb9010, Length=0x7a, FileInformationClass=0xa) returned 0x0 [0128.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 [0128.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40f78) returned 1 [0128.240] NtQueryInformationFile (in: FileHandle=0x1008, IoStatusBlock=0x8eefb58, FileInformation=0x8eefb60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8eefb58, FileInformation=0x8eefb60) returned 0x0 [0128.240] NtSetInformationFile (FileHandle=0x1008, IoStatusBlock=0x8eefb58, FileInformation=0x8eefb60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23920) returned 1 [0128.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb67d0) returned 1 [0128.241] FlushFileBuffers (hFile=0x1008) returned 1 [0128.254] CloseHandle (hObject=0x1008) returned 1 [0128.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe65a8 [0128.254] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0128.254] wcscat (in: _Dest=0x2fe65a8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0128.254] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0128.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 [0128.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 345 os_tid = 0xd98 [0122.324] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\i5VXkzpaNxLo.ots" (normalized: "c:\\users\\eebsym5\\desktop\\i5vxkzpanxlo.ots")) returned 0x20 [0122.326] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\i5VXkzpaNxLo.ots", dwFileAttributes=0x20) returned 1 [0123.230] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\i5VXkzpaNxLo.ots" (normalized: "c:\\users\\eebsym5\\desktop\\i5vxkzpanxlo.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1028 [0123.231] GetFileSizeEx (in: hFile=0x1028, lpFileSize=0x840f784 | out: lpFileSize=0x840f784*=99143) returned 1 [0123.231] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x18343, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.231] ReadFile (in: hFile=0x1028, lpBuffer=0x840f760, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x840f770, lpOverlapped=0x0 | out: lpBuffer=0x840f760*, lpNumberOfBytesRead=0x840f770*=0x4, lpOverlapped=0x0) returned 1 [0123.267] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e00 [0123.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0123.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0123.268] NtQuerySystemTime (in: CurrentTime=0x840f6f8 | out: CurrentTime=0x840f6f8*=132462177026928000) returned 0x0 [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x267161cc [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x4c071f66 [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0xea82ba7 [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x45969d8 [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x398272ad [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x217adc31 [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x16889239 [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x59a77577 [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x288696d5 [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x59789712 [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x4373f33d [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x222dc176 [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x1f3de75b [0123.268] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x6b7de89 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x7cbea241 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x40257e30 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x7cdea873 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x62c22c01 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x1d93e2f1 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x659f456d [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x226e4ca2 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x440cc328 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x507141f4 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x2a79de23 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x60d47d0e [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x536f3c59 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x186ba6b2 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x4ff431ed [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x58289873 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x11e5cbe6 [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x5acd1e0b [0123.269] RtlRandomEx (in: Seed=0x840f6f0 | out: Seed=0x840f6f0) returned 0x2f73b95e [0123.282] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.282] ReadFile (in: hFile=0x1028, lpBuffer=0x7a5e078, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x840f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7a5e078*, lpNumberOfBytesRead=0x840f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0123.282] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07bf0 [0123.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0123.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e00 [0123.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e00) returned 1 [0123.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a61c80 [0123.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e00 [0123.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0123.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c20) returned 1 [0123.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0123.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07bf0) returned 1 [0123.283] WriteFile (in: hFile=0x1028, lpBuffer=0x7a61c80*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x840f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7a61c80*, lpNumberOfBytesWritten=0x840f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0123.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61c80) returned 1 [0123.970] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.970] ReadFile (in: hFile=0x1028, lpBuffer=0x7a5e078, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x840f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7a5e078*, lpNumberOfBytesRead=0x840f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0124.298] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0124.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0124.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbda0 [0124.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbda0) returned 1 [0124.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a69490 [0124.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbda0 [0124.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb648 [0124.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb648) returned 1 [0124.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0124.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0124.299] WriteFile (in: hFile=0x1028, lpBuffer=0x7a69490*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x840f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7a69490*, lpNumberOfBytesWritten=0x840f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0124.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69490) returned 1 [0124.398] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x14747, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.398] ReadFile (in: hFile=0x1028, lpBuffer=0x7a5e078, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x840f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7a5e078*, lpNumberOfBytesRead=0x840f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0124.398] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x14747, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0124.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d513e0 [0124.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb738 [0124.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb738) returned 1 [0124.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a69490 [0124.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb738 [0124.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb9e0 [0124.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb9e0) returned 1 [0124.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 [0124.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0124.399] WriteFile (in: hFile=0x1028, lpBuffer=0x7a69490*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x840f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7a69490*, lpNumberOfBytesWritten=0x840f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0124.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69490) returned 1 [0124.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b98 [0124.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e00) returned 1 [0124.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79448 [0124.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e00 [0124.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0124.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0124.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 [0124.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25db8) returned 1 [0124.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x152) returned 0x3dcdfa0 [0124.423] SetFilePointerEx (in: hFile=0x1028, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.423] WriteFile (in: hFile=0x1028, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x840f778, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0x840f778*=0x152, lpOverlapped=0x0) returned 1 [0127.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0127.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0127.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd6f0 [0127.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd6f0) returned 1 [0127.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd6f0 [0127.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0127.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30d8 [0127.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30d8) returned 1 [0127.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0127.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0127.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3de5ed8 [0127.243] sprintf (in: _Dest=0x3de5ed8, _Format="%c%c" | out: _Dest="06") returned 2 [0127.243] sprintf (in: _Dest=0x3de5eda, _Format="%c%c" | out: _Dest="46") returned 2 [0127.243] sprintf (in: _Dest=0x3de5edc, _Format="%c%c" | out: _Dest="b6") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ede, _Format="%c%c" | out: _Dest="2c") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ee0, _Format="%c%c" | out: _Dest="b8") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ee2, _Format="%c%c" | out: _Dest="bb") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ee4, _Format="%c%c" | out: _Dest="9b") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ee6, _Format="%c%c" | out: _Dest="8e") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ee8, _Format="%c%c" | out: _Dest="08") returned 2 [0127.243] sprintf (in: _Dest=0x3de5eea, _Format="%c%c" | out: _Dest="69") returned 2 [0127.243] sprintf (in: _Dest=0x3de5eec, _Format="%c%c" | out: _Dest="8d") returned 2 [0127.243] sprintf (in: _Dest=0x3de5eee, _Format="%c%c" | out: _Dest="be") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ef0, _Format="%c%c" | out: _Dest="ee") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ef2, _Format="%c%c" | out: _Dest="63") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ef4, _Format="%c%c" | out: _Dest="5d") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ef6, _Format="%c%c" | out: _Dest="c3") returned 2 [0127.243] sprintf (in: _Dest=0x3de5ef8, _Format="%c%c" | out: _Dest="99") returned 2 [0127.243] sprintf (in: _Dest=0x3de5efa, _Format="%c%c" | out: _Dest="0a") returned 2 [0127.243] sprintf (in: _Dest=0x3de5efc, _Format="%c%c" | out: _Dest="ff") returned 2 [0127.243] sprintf (in: _Dest=0x3de5efe, _Format="%c%c" | out: _Dest="bb") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f00, _Format="%c%c" | out: _Dest="6d") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f02, _Format="%c%c" | out: _Dest="d6") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f04, _Format="%c%c" | out: _Dest="c2") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f06, _Format="%c%c" | out: _Dest="8d") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f08, _Format="%c%c" | out: _Dest="12") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f0a, _Format="%c%c" | out: _Dest="dd") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f0c, _Format="%c%c" | out: _Dest="46") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f0e, _Format="%c%c" | out: _Dest="23") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f10, _Format="%c%c" | out: _Dest="e2") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f12, _Format="%c%c" | out: _Dest="31") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f14, _Format="%c%c" | out: _Dest="6d") returned 2 [0127.244] sprintf (in: _Dest=0x3de5f16, _Format="%c%c" | out: _Dest="d6") returned 2 [0127.244] RtlInitAnsiString (in: DestinationString=0x840f700, SourceString="0646b62cb8bb9b8e08698dbeee635dc3990affbb6dd6c28d12dd4623e2316dd6" | out: DestinationString="0646b62cb8bb9b8e08698dbeee635dc3990affbb6dd6c28d12dd4623e2316dd6") [0127.244] RtlAnsiStringToUnicodeString (in: DestinationString=0x840f6f8, SourceString="0646b62cb8bb9b8e08698dbeee635dc3990affbb6dd6c28d12dd4623e2316dd6", AllocateDestinationString=1 | out: DestinationString="0646b62cb8bb9b8e08698dbeee635dc3990affbb6dd6c28d12dd4623e2316dd6") returned 0x0 [0127.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44c30 [0127.244] wcscat (in: _Dest=0x7a236f0, _Source="0646b62cb8bb9b8e" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0646b62cb8bb9b8e") returned="C:\\Users\\EEBsYm5\\Desktop\\0646b62cb8bb9b8e" [0127.244] wcscat (in: _Dest=0x7a236f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\0646b62cb8bb9b8e.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\0646b62cb8bb9b8e.68814f" [0127.244] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\0646b62cb8bb9b8e.68814f", NtPathName=0x840f6f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\0646b62cb8bb9b8e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19598 [0127.245] NtSetInformationFile (FileHandle=0x1028, IoStatusBlock=0x840f6f8, FileInformation=0x3e19598, Length=0x78, FileInformationClass=0xa) returned 0x0 [0128.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19598) returned 1 [0128.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d404b0) returned 1 [0128.243] NtQueryInformationFile (in: FileHandle=0x1028, IoStatusBlock=0x840f6c8, FileInformation=0x840f6d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x840f6c8, FileInformation=0x840f6d0) returned 0x0 [0128.243] NtSetInformationFile (FileHandle=0x1028, IoStatusBlock=0x840f6c8, FileInformation=0x840f6d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a236f0) returned 1 [0128.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0128.245] FlushFileBuffers (hFile=0x1028) returned 1 [0128.283] CloseHandle (hObject=0x1028) returned 1 [0128.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1328 [0128.286] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0128.286] wcscat (in: _Dest=0x2fe1328, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0128.286] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0128.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 [0128.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe2c48) returned 1 Thread: id = 346 os_tid = 0x448 [0122.327] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\lIT7VQL9Kls_.wav" (normalized: "c:\\users\\eebsym5\\desktop\\lit7vql9kls_.wav")) returned 0x20 [0122.328] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\lIT7VQL9Kls_.wav", dwFileAttributes=0x20) returned 1 [0123.286] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\lIT7VQL9Kls_.wav" (normalized: "c:\\users\\eebsym5\\desktop\\lit7vql9kls_.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x101c [0123.287] GetFileSizeEx (in: hFile=0x101c, lpFileSize=0x9dffa1c | out: lpFileSize=0x9dffa1c*=95366) returned 1 [0123.287] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x17482, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.287] ReadFile (in: hFile=0x101c, lpBuffer=0x9dff9f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9dffa08, lpOverlapped=0x0 | out: lpBuffer=0x9dff9f8*, lpNumberOfBytesRead=0x9dffa08*=0x4, lpOverlapped=0x0) returned 1 [0123.289] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0123.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0123.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0123.289] NtQuerySystemTime (in: CurrentTime=0x9dff990 | out: CurrentTime=0x9dff990*=132462177027084000) returned 0x0 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x43c61d85 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x21652cd6 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x28bebc1 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x4056ed24 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x1e24b211 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0xf86b54c [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x3903c1d4 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x3b932f77 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x6c0dad5c [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x35534016 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x2ef5b080 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x113911c0 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x4d2547a1 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x792a3fa9 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x141ba3c8 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x602135c6 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x6d75b2e [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x616b7a8d [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x7dbfb639 [0123.290] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x45c12164 [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x1cd2fc73 [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0xce09825 [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x5d968200 [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x6aed24f7 [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x2da506e2 [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x23e356fb [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x68e23b7a [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x250082b6 [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x494f3c29 [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x16e03b8d [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x6f57bd62 [0123.291] RtlRandomEx (in: Seed=0x9dff988 | out: Seed=0x9dff988) returned 0x414f6d7d [0123.305] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.306] ReadFile (in: hFile=0x101c, lpBuffer=0x7a65888, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9dff990, lpOverlapped=0x0 | out: lpBuffer=0x7a65888*, lpNumberOfBytesRead=0x9dff990*=0x3c00, lpOverlapped=0x0) returned 1 [0123.306] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07bf0 [0123.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0123.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0123.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c20) returned 1 [0123.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a69490 [0123.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0123.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0123.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9978) returned 1 [0123.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0123.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07bf0) returned 1 [0123.307] WriteFile (in: hFile=0x101c, lpBuffer=0x7a69490*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9dff990, lpOverlapped=0x0 | out: lpBuffer=0x7a69490*, lpNumberOfBytesWritten=0x9dff990*=0x3c00, lpOverlapped=0x0) returned 1 [0123.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69490) returned 1 [0123.970] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.970] ReadFile (in: hFile=0x101c, lpBuffer=0x7a65888, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9dff990, lpOverlapped=0x0 | out: lpBuffer=0x7a65888*, lpNumberOfBytesRead=0x9dff990*=0x3c00, lpOverlapped=0x0) returned 1 [0124.301] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0124.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0124.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb648 [0124.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb648) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a61c80 [0124.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb648 [0124.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd740 [0124.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd740) returned 1 [0124.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0124.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0124.302] WriteFile (in: hFile=0x101c, lpBuffer=0x7a61c80*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9dff990, lpOverlapped=0x0 | out: lpBuffer=0x7a61c80*, lpNumberOfBytesWritten=0x9dff990*=0x3c00, lpOverlapped=0x0) returned 1 [0124.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61c80) returned 1 [0124.400] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x13886, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.400] ReadFile (in: hFile=0x101c, lpBuffer=0x7a65888, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9dff990, lpOverlapped=0x0 | out: lpBuffer=0x7a65888*, lpNumberOfBytesRead=0x9dff990*=0x3c00, lpOverlapped=0x0) returned 1 [0124.401] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x13886, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0124.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d513e0 [0124.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb9e0 [0124.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb9e0) returned 1 [0124.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a61c80 [0124.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb9e0 [0124.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edc1d8 [0124.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc1d8) returned 1 [0124.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 [0124.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0124.402] WriteFile (in: hFile=0x101c, lpBuffer=0x7a61c80*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9dff990, lpOverlapped=0x0 | out: lpBuffer=0x7a61c80*, lpNumberOfBytesWritten=0x9dff990*=0x3c00, lpOverlapped=0x0) returned 1 [0124.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61c80) returned 1 [0124.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0c00 [0124.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c20) returned 1 [0124.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e799c0 [0124.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0124.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0124.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0124.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 [0124.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25db8) returned 1 [0124.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x152) returned 0x3dce108 [0124.425] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.425] WriteFile (in: hFile=0x101c, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x9dffa10, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x9dffa10*=0x152, lpOverlapped=0x0) returned 1 [0127.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0127.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0127.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f40 [0127.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f40) returned 1 [0127.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f40 [0127.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0127.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0127.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0127.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0127.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0127.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3de5ed8 [0127.247] sprintf (in: _Dest=0x3de5ed8, _Format="%c%c" | out: _Dest="6c") returned 2 [0127.247] sprintf (in: _Dest=0x3de5eda, _Format="%c%c" | out: _Dest="af") returned 2 [0127.247] sprintf (in: _Dest=0x3de5edc, _Format="%c%c" | out: _Dest="c4") returned 2 [0127.247] sprintf (in: _Dest=0x3de5ede, _Format="%c%c" | out: _Dest="17") returned 2 [0127.247] sprintf (in: _Dest=0x3de5ee0, _Format="%c%c" | out: _Dest="fa") returned 2 [0127.247] sprintf (in: _Dest=0x3de5ee2, _Format="%c%c" | out: _Dest="0f") returned 2 [0127.247] sprintf (in: _Dest=0x3de5ee4, _Format="%c%c" | out: _Dest="82") returned 2 [0127.247] sprintf (in: _Dest=0x3de5ee6, _Format="%c%c" | out: _Dest="c6") returned 2 [0127.247] sprintf (in: _Dest=0x3de5ee8, _Format="%c%c" | out: _Dest="ec") returned 2 [0127.247] sprintf (in: _Dest=0x3de5eea, _Format="%c%c" | out: _Dest="c2") returned 2 [0127.247] sprintf (in: _Dest=0x3de5eec, _Format="%c%c" | out: _Dest="73") returned 2 [0127.247] sprintf (in: _Dest=0x3de5eee, _Format="%c%c" | out: _Dest="63") returned 2 [0127.247] sprintf (in: _Dest=0x3de5ef0, _Format="%c%c" | out: _Dest="3a") returned 2 [0127.247] sprintf (in: _Dest=0x3de5ef2, _Format="%c%c" | out: _Dest="31") returned 2 [0127.247] sprintf (in: _Dest=0x3de5ef4, _Format="%c%c" | out: _Dest="7b") returned 2 [0127.247] sprintf (in: _Dest=0x3de5ef6, _Format="%c%c" | out: _Dest="8d") returned 2 [0127.248] sprintf (in: _Dest=0x3de5ef8, _Format="%c%c" | out: _Dest="b1") returned 2 [0127.248] sprintf (in: _Dest=0x3de5efa, _Format="%c%c" | out: _Dest="b5") returned 2 [0127.248] sprintf (in: _Dest=0x3de5efc, _Format="%c%c" | out: _Dest="c3") returned 2 [0127.248] sprintf (in: _Dest=0x3de5efe, _Format="%c%c" | out: _Dest="43") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f00, _Format="%c%c" | out: _Dest="6c") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f02, _Format="%c%c" | out: _Dest="4e") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f04, _Format="%c%c" | out: _Dest="aa") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f06, _Format="%c%c" | out: _Dest="e2") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f08, _Format="%c%c" | out: _Dest="3e") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f0a, _Format="%c%c" | out: _Dest="bb") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f0c, _Format="%c%c" | out: _Dest="b4") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f0e, _Format="%c%c" | out: _Dest="aa") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f10, _Format="%c%c" | out: _Dest="1c") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f12, _Format="%c%c" | out: _Dest="0c") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f14, _Format="%c%c" | out: _Dest="0f") returned 2 [0127.248] sprintf (in: _Dest=0x3de5f16, _Format="%c%c" | out: _Dest="fe") returned 2 [0127.248] RtlInitAnsiString (in: DestinationString=0x9dff998, SourceString="6cafc417fa0f82c6ecc273633a317b8db1b5c3436c4eaae23ebbb4aa1c0c0ffe" | out: DestinationString="6cafc417fa0f82c6ecc273633a317b8db1b5c3436c4eaae23ebbb4aa1c0c0ffe") [0127.248] RtlAnsiStringToUnicodeString (in: DestinationString=0x9dff990, SourceString="6cafc417fa0f82c6ecc273633a317b8db1b5c3436c4eaae23ebbb4aa1c0c0ffe", AllocateDestinationString=1 | out: DestinationString="6cafc417fa0f82c6ecc273633a317b8db1b5c3436c4eaae23ebbb4aa1c0c0ffe") returned 0x0 [0127.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44b10 [0127.248] wcscat (in: _Dest=0x7a237d0, _Source="6cafc417fa0f82c6" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\6cafc417fa0f82c6") returned="C:\\Users\\EEBsYm5\\Desktop\\6cafc417fa0f82c6" [0127.249] wcscat (in: _Dest=0x7a237d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\6cafc417fa0f82c6.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\6cafc417fa0f82c6.68814f" [0127.249] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\6cafc417fa0f82c6.68814f", NtPathName=0x9dff988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\6cafc417fa0f82c6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a118 [0127.249] NtSetInformationFile (FileHandle=0x101c, IoStatusBlock=0x9dff990, FileInformation=0x3e1a118, Length=0x78, FileInformationClass=0xa) returned 0x0 [0128.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a118) returned 1 [0128.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0128.248] NtQueryInformationFile (in: FileHandle=0x101c, IoStatusBlock=0x9dff960, FileInformation=0x9dff968, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9dff960, FileInformation=0x9dff968) returned 0x0 [0128.248] NtSetInformationFile (FileHandle=0x101c, IoStatusBlock=0x9dff960, FileInformation=0x9dff968, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a237d0) returned 1 [0128.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44b10) returned 1 [0128.249] FlushFileBuffers (hFile=0x101c) returned 1 [0128.288] CloseHandle (hObject=0x101c) returned 1 [0128.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe2c48 [0128.297] wcscpy (in: _Dest=0x2fe2c48, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0128.297] wcscat (in: _Dest=0x2fe2c48, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0128.297] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0128.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe2c48) returned 1 [0128.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 Thread: id = 347 os_tid = 0x500 [0122.329] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\R5STJ4J_N.m4a" (normalized: "c:\\users\\eebsym5\\desktop\\r5stj4j_n.m4a")) returned 0x20 [0122.329] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\R5STJ4J_N.m4a", dwFileAttributes=0x20) returned 1 [0123.311] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\R5STJ4J_N.m4a" (normalized: "c:\\users\\eebsym5\\desktop\\r5stj4j_n.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1020 [0123.311] GetFileSizeEx (in: hFile=0x1020, lpFileSize=0x9b1fa6c | out: lpFileSize=0x9b1fa6c*=71327) returned 1 [0123.311] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x1169b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.311] ReadFile (in: hFile=0x1020, lpBuffer=0x9b1fa48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b1fa58, lpOverlapped=0x0 | out: lpBuffer=0x9b1fa48*, lpNumberOfBytesRead=0x9b1fa58*=0x4, lpOverlapped=0x0) returned 1 [0123.314] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0123.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0123.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0123.314] NtQuerySystemTime (in: CurrentTime=0x9b1f9e0 | out: CurrentTime=0x9b1f9e0*=132462177027396000) returned 0x0 [0123.314] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x3238bb42 [0123.314] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x48482899 [0123.314] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x18354d28 [0123.314] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x124c9cf0 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x25ca1874 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x7b536656 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x7db6fa6c [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x32b996bd [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x6f2b3d4a [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x5add0b29 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x4f3ce20f [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x49c89149 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x6bba1a02 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x686a4cf0 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x14af6ad3 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x7ad13dbe [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x35856073 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x36cc4d69 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x65f6cef2 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x2b922ca3 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x5788ef94 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x18c86573 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x5303dd63 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x4a56e9f6 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x224373e2 [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x2c71786b [0123.315] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x45e38c6d [0123.316] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x6fb8dc47 [0123.316] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x14a1bc8a [0123.316] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x103ef9e [0123.316] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x42a400eb [0123.316] RtlRandomEx (in: Seed=0x9b1f9d8 | out: Seed=0x9b1f9d8) returned 0x54a572b1 [0123.329] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.329] ReadFile (in: hFile=0x1020, lpBuffer=0x7a30038, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9b1f9e0, lpOverlapped=0x0 | out: lpBuffer=0x7a30038*, lpNumberOfBytesRead=0x9b1f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0123.330] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07bf0 [0123.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0123.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0123.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9978) returned 1 [0123.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a33c40 [0123.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0123.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0123.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0123.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0123.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07bf0) returned 1 [0123.331] WriteFile (in: hFile=0x1020, lpBuffer=0x7a33c40*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9b1f9e0, lpOverlapped=0x0 | out: lpBuffer=0x7a33c40*, lpNumberOfBytesWritten=0x9b1f9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0123.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33c40) returned 1 [0123.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a30038) returned 1 [0123.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85d68 [0123.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a252c0 [0123.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0123.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca968 [0123.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca968) returned 1 [0123.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86158 [0123.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca968 [0123.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7b0 [0123.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7b0) returned 1 [0123.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0123.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a252c0) returned 1 [0123.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deaf00 [0123.972] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.972] WriteFile (in: hFile=0x1020, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9b1fa60, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0x9b1fa60*=0x10c, lpOverlapped=0x0) returned 1 [0127.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0127.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0127.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca710 [0127.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca710) returned 1 [0127.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca710 [0127.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0127.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0127.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca990) returned 1 [0127.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0127.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0127.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfa90 [0127.237] sprintf (in: _Dest=0x3dcfa90, _Format="%c%c" | out: _Dest="5f") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfa92, _Format="%c%c" | out: _Dest="d7") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfa94, _Format="%c%c" | out: _Dest="c9") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfa96, _Format="%c%c" | out: _Dest="5c") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfa98, _Format="%c%c" | out: _Dest="18") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfa9a, _Format="%c%c" | out: _Dest="0c") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfa9c, _Format="%c%c" | out: _Dest="10") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfa9e, _Format="%c%c" | out: _Dest="3b") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfaa0, _Format="%c%c" | out: _Dest="ee") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfaa2, _Format="%c%c" | out: _Dest="d6") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfaa4, _Format="%c%c" | out: _Dest="ae") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfaa6, _Format="%c%c" | out: _Dest="8f") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfaa8, _Format="%c%c" | out: _Dest="ba") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfaaa, _Format="%c%c" | out: _Dest="1e") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfaac, _Format="%c%c" | out: _Dest="68") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfaae, _Format="%c%c" | out: _Dest="74") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfab0, _Format="%c%c" | out: _Dest="2b") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfab2, _Format="%c%c" | out: _Dest="44") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfab4, _Format="%c%c" | out: _Dest="83") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfab6, _Format="%c%c" | out: _Dest="3a") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfab8, _Format="%c%c" | out: _Dest="d5") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfaba, _Format="%c%c" | out: _Dest="4b") returned 2 [0127.237] sprintf (in: _Dest=0x3dcfabc, _Format="%c%c" | out: _Dest="28") returned 2 [0127.238] sprintf (in: _Dest=0x3dcfabe, _Format="%c%c" | out: _Dest="b1") returned 2 [0127.238] sprintf (in: _Dest=0x3dcfac0, _Format="%c%c" | out: _Dest="5c") returned 2 [0127.238] sprintf (in: _Dest=0x3dcfac2, _Format="%c%c" | out: _Dest="b9") returned 2 [0127.238] RtlInitAnsiString (in: DestinationString=0x9b1f9e8, SourceString="5fd7c95c180c103beed6ae8fba1e68742b44833ad54b28b15cb9" | out: DestinationString="5fd7c95c180c103beed6ae8fba1e68742b44833ad54b28b15cb9") [0127.238] RtlAnsiStringToUnicodeString (in: DestinationString=0x9b1f9e0, SourceString="5fd7c95c180c103beed6ae8fba1e68742b44833ad54b28b15cb9", AllocateDestinationString=1 | out: DestinationString="5fd7c95c180c103beed6ae8fba1e68742b44833ad54b28b15cb9") returned 0x0 [0127.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e0d0 [0127.238] wcscat (in: _Dest=0x3ee1218, _Source="5fd7c95c180c1" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\5fd7c95c180c1") returned="C:\\Users\\EEBsYm5\\Desktop\\5fd7c95c180c1" [0127.238] wcscat (in: _Dest=0x3ee1218, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\5fd7c95c180c1.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\5fd7c95c180c1.68814f" [0127.238] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\5fd7c95c180c1.68814f", NtPathName=0x9b1f9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\5fd7c95c180c1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5ef0 [0127.238] NtSetInformationFile (FileHandle=0x1020, IoStatusBlock=0x9b1f9e0, FileInformation=0x3da5ef0, Length=0x72, FileInformationClass=0xa) returned 0x0 [0128.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ef0) returned 1 [0128.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d411a0) returned 1 [0128.236] NtQueryInformationFile (in: FileHandle=0x1020, IoStatusBlock=0x9b1f9b0, FileInformation=0x9b1f9b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9b1f9b0, FileInformation=0x9b1f9b8) returned 0x0 [0128.236] NtSetInformationFile (FileHandle=0x1020, IoStatusBlock=0x9b1f9b0, FileInformation=0x9b1f9b8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1218) returned 1 [0128.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.237] FlushFileBuffers (hFile=0x1020) returned 1 [0128.250] CloseHandle (hObject=0x1020) returned 1 [0128.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe65a8 [0128.251] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0128.251] wcscat (in: _Dest=0x2fe65a8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0128.251] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0128.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 [0128.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14510) returned 1 Thread: id = 348 os_tid = 0xddc [0122.329] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\TBjdFXzd.xls" (normalized: "c:\\users\\eebsym5\\desktop\\tbjdfxzd.xls")) returned 0x20 [0122.329] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\TBjdFXzd.xls", dwFileAttributes=0x20) returned 1 [0123.334] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\TBjdFXzd.xls" (normalized: "c:\\users\\eebsym5\\desktop\\tbjdfxzd.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1024 [0123.334] GetFileSizeEx (in: hFile=0x1024, lpFileSize=0x477fe2c | out: lpFileSize=0x477fe2c*=42294) returned 1 [0123.334] SetFilePointerEx (in: hFile=0x1024, liDistanceToMove=0xa532, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.334] ReadFile (in: hFile=0x1024, lpBuffer=0x477fe08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x477fe18, lpOverlapped=0x0 | out: lpBuffer=0x477fe08*, lpNumberOfBytesRead=0x477fe18*=0x4, lpOverlapped=0x0) returned 1 [0123.337] SetFilePointerEx (in: hFile=0x1024, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0123.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0123.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0123.338] NtQuerySystemTime (in: CurrentTime=0x477fda0 | out: CurrentTime=0x477fda0*=132462177027552000) returned 0x0 [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x232eac83 [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x733a15d1 [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x5567872f [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x204b925b [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x143e9c5b [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0xf8b6972 [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x29cb8da2 [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x14135b07 [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x3aafb559 [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x6cea2b90 [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x3858279c [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x44c0c0e7 [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x1741d9db [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x6ef36672 [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x3cce160f [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x7006a8b [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x6ba4fefc [0123.338] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x5d49a856 [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x68874069 [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x5e07180c [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x5e370b38 [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x683efd81 [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x4f7927c0 [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x1aae6c0a [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x7c0c4ae8 [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x58c86c2e [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x2017d121 [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x74ca30cd [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x365ac78f [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x31b68e93 [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0xccf28e2 [0123.339] RtlRandomEx (in: Seed=0x477fd98 | out: Seed=0x477fd98) returned 0x155653c5 [0123.352] SetFilePointerEx (in: hFile=0x1024, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.352] ReadFile (in: hFile=0x1024, lpBuffer=0x7a37848, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x477fda0, lpOverlapped=0x0 | out: lpBuffer=0x7a37848*, lpNumberOfBytesRead=0x477fda0*=0x3c00, lpOverlapped=0x0) returned 1 [0123.353] SetFilePointerEx (in: hFile=0x1024, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0123.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07bf0 [0123.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0123.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0123.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0123.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a3b450 [0123.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0123.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0123.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0123.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0123.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07bf0) returned 1 [0123.354] WriteFile (in: hFile=0x1024, lpBuffer=0x7a3b450*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x477fda0, lpOverlapped=0x0 | out: lpBuffer=0x7a3b450*, lpNumberOfBytesWritten=0x477fda0*=0x3c00, lpOverlapped=0x0) returned 1 [0124.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b450) returned 1 [0124.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37848) returned 1 [0124.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e85f48 [0124.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb800) returned 1 [0124.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e85e88 [0124.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0124.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb710 [0124.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb710) returned 1 [0124.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0124.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48c30) returned 1 [0124.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3debf68 [0124.964] SetFilePointerEx (in: hFile=0x1024, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.964] WriteFile (in: hFile=0x1024, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x477fe20, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0x477fe20*=0x10a, lpOverlapped=0x0) returned 1 [0129.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85a58 [0129.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0129.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0129.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0129.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e0e8 [0129.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0129.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0129.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0129.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0129.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0129.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x2fc87c8 [0129.976] sprintf (in: _Dest=0x2fc87c8, _Format="%c%c" | out: _Dest="f5") returned 2 [0129.976] sprintf (in: _Dest=0x2fc87ca, _Format="%c%c" | out: _Dest="a6") returned 2 [0129.976] sprintf (in: _Dest=0x2fc87cc, _Format="%c%c" | out: _Dest="64") returned 2 [0129.976] sprintf (in: _Dest=0x2fc87ce, _Format="%c%c" | out: _Dest="24") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87d0, _Format="%c%c" | out: _Dest="f5") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87d2, _Format="%c%c" | out: _Dest="90") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87d4, _Format="%c%c" | out: _Dest="88") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87d6, _Format="%c%c" | out: _Dest="59") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87d8, _Format="%c%c" | out: _Dest="7f") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87da, _Format="%c%c" | out: _Dest="b3") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87dc, _Format="%c%c" | out: _Dest="74") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87de, _Format="%c%c" | out: _Dest="2f") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87e0, _Format="%c%c" | out: _Dest="a3") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87e2, _Format="%c%c" | out: _Dest="d8") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87e4, _Format="%c%c" | out: _Dest="25") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87e6, _Format="%c%c" | out: _Dest="5a") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87e8, _Format="%c%c" | out: _Dest="c2") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87ea, _Format="%c%c" | out: _Dest="79") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87ec, _Format="%c%c" | out: _Dest="16") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87ee, _Format="%c%c" | out: _Dest="2a") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87f0, _Format="%c%c" | out: _Dest="21") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87f2, _Format="%c%c" | out: _Dest="b6") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87f4, _Format="%c%c" | out: _Dest="be") returned 2 [0129.977] sprintf (in: _Dest=0x2fc87f6, _Format="%c%c" | out: _Dest="3f") returned 2 [0129.978] RtlInitAnsiString (in: DestinationString=0x477fda8, SourceString="f5a66424f59088597fb3742fa3d8255ac279162a21b6be3f" | out: DestinationString="f5a66424f59088597fb3742fa3d8255ac279162a21b6be3f") [0129.978] RtlAnsiStringToUnicodeString (in: DestinationString=0x477fda0, SourceString="f5a66424f59088597fb3742fa3d8255ac279162a21b6be3f", AllocateDestinationString=1 | out: DestinationString="f5a66424f59088597fb3742fa3d8255ac279162a21b6be3f") returned 0x0 [0129.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23ca0 [0129.978] wcscat (in: _Dest=0x3e1ec08, _Source="f5a66424f590" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\f5a66424f590") returned="C:\\Users\\EEBsYm5\\Desktop\\f5a66424f590" [0129.978] wcscat (in: _Dest=0x3e1ec08, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\f5a66424f590.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\f5a66424f590.68814f" [0129.978] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\f5a66424f590.68814f", NtPathName=0x477fd98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\f5a66424f590.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0129.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0129.978] NtSetInformationFile (FileHandle=0x1024, IoStatusBlock=0x477fda0, FileInformation=0x3d51728, Length=0x70, FileInformationClass=0xa) returned 0x0 [0130.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0130.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f4c0) returned 1 [0130.128] NtQueryInformationFile (in: FileHandle=0x1024, IoStatusBlock=0x477fd70, FileInformation=0x477fd78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x477fd70, FileInformation=0x477fd78) returned 0x0 [0130.128] NtSetInformationFile (FileHandle=0x1024, IoStatusBlock=0x477fd70, FileInformation=0x477fd78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec08) returned 1 [0130.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ca0) returned 1 [0130.528] FlushFileBuffers (hFile=0x1024) returned 1 [0130.706] CloseHandle (hObject=0x1024) returned 1 [0130.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f08 [0130.708] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0130.708] wcscat (in: _Dest=0x2fe6f08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0130.708] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0130.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 [0130.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14e00) returned 1 Thread: id = 349 os_tid = 0xe1c [0122.330] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Usnx6hAukkt66TpR-Vk1.flv" (normalized: "c:\\users\\eebsym5\\desktop\\usnx6haukkt66tpr-vk1.flv")) returned 0x20 [0122.330] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Usnx6hAukkt66TpR-Vk1.flv", dwFileAttributes=0x20) returned 1 [0127.192] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\Usnx6hAukkt66TpR-Vk1.flv" (normalized: "c:\\users\\eebsym5\\desktop\\usnx6haukkt66tpr-vk1.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1018 [0127.192] GetFileSizeEx (in: hFile=0x1018, lpFileSize=0x9c0ff04 | out: lpFileSize=0x9c0ff04*=46507) returned 1 [0127.192] SetFilePointerEx (in: hFile=0x1018, liDistanceToMove=0xb5a7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.192] ReadFile (in: hFile=0x1018, lpBuffer=0x9c0fee0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9c0fef0, lpOverlapped=0x0 | out: lpBuffer=0x9c0fee0*, lpNumberOfBytesRead=0x9c0fef0*=0x4, lpOverlapped=0x0) returned 1 [0127.194] SetFilePointerEx (in: hFile=0x1018, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0127.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0127.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0127.194] NtQuerySystemTime (in: CurrentTime=0x9c0fe78 | out: CurrentTime=0x9c0fe78*=132462177065772000) returned 0x0 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x744b7131 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x3864f002 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x739d235 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x36d1c54a [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x8706404 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x6eac9b07 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x629955d6 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x2f7b4726 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x56f08b5b [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x33d3ece1 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x7f990863 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x454afced [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x252e0f22 [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x158ac80e [0127.195] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0xae705a5 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x2dafaaad [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x1265c885 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x6898f368 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x1d1840cf [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x6d1819cf [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x12360c81 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x79ef702c [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x5c7c4d65 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x37dd1936 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x4d0380db [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x2d7fce29 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x58a07c97 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x72c60038 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x2eb7f7b6 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x6b728f74 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0xbbe0363 [0127.196] RtlRandomEx (in: Seed=0x9c0fe70 | out: Seed=0x9c0fe70) returned 0x44840072 [0127.207] SetFilePointerEx (in: hFile=0x1018, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.207] ReadFile (in: hFile=0x1018, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9c0fe78, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0x9c0fe78*=0x3c00, lpOverlapped=0x0) returned 1 [0127.207] SetFilePointerEx (in: hFile=0x1018, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55b08 [0127.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0127.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0127.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3218) returned 1 [0127.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0127.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0127.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0127.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3178) returned 1 [0127.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0127.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55b08) returned 1 [0127.209] WriteFile (in: hFile=0x1018, lpBuffer=0x7beeb90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9c0fe78, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesWritten=0x9c0fe78*=0x3c00, lpOverlapped=0x0) returned 1 [0130.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0130.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0130.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e55c28 [0130.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53698) returned 1 [0130.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e564e0 [0130.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53698 [0130.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0130.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53648) returned 1 [0130.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0130.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 [0130.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9b98 [0130.075] SetFilePointerEx (in: hFile=0x1018, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.076] WriteFile (in: hFile=0x1018, lpBuffer=0x3ec9b98*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x9c0fef8, lpOverlapped=0x0 | out: lpBuffer=0x3ec9b98*, lpNumberOfBytesWritten=0x9c0fef8*=0x122, lpOverlapped=0x0) returned 1 [0130.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0130.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0130.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0130.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3240) returned 1 [0130.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3013f88 [0130.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0130.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3268 [0130.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3268) returned 1 [0130.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0130.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a23e60 [0130.198] sprintf (in: _Dest=0x7a23e60, _Format="%c%c" | out: _Dest="5e") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e62, _Format="%c%c" | out: _Dest="fe") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e64, _Format="%c%c" | out: _Dest="f1") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e66, _Format="%c%c" | out: _Dest="ff") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e68, _Format="%c%c" | out: _Dest="27") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e6a, _Format="%c%c" | out: _Dest="cc") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e6c, _Format="%c%c" | out: _Dest="27") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e6e, _Format="%c%c" | out: _Dest="be") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e70, _Format="%c%c" | out: _Dest="5e") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e72, _Format="%c%c" | out: _Dest="11") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e74, _Format="%c%c" | out: _Dest="a3") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e76, _Format="%c%c" | out: _Dest="e3") returned 2 [0130.198] sprintf (in: _Dest=0x7a23e78, _Format="%c%c" | out: _Dest="28") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e7a, _Format="%c%c" | out: _Dest="a0") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e7c, _Format="%c%c" | out: _Dest="be") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e7e, _Format="%c%c" | out: _Dest="6a") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e80, _Format="%c%c" | out: _Dest="9c") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e82, _Format="%c%c" | out: _Dest="82") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e84, _Format="%c%c" | out: _Dest="84") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e86, _Format="%c%c" | out: _Dest="5c") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e88, _Format="%c%c" | out: _Dest="f3") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e8a, _Format="%c%c" | out: _Dest="82") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e8c, _Format="%c%c" | out: _Dest="4f") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e8e, _Format="%c%c" | out: _Dest="63") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e90, _Format="%c%c" | out: _Dest="92") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e92, _Format="%c%c" | out: _Dest="89") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e94, _Format="%c%c" | out: _Dest="9f") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e96, _Format="%c%c" | out: _Dest="1c") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e98, _Format="%c%c" | out: _Dest="b8") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e9a, _Format="%c%c" | out: _Dest="b4") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e9c, _Format="%c%c" | out: _Dest="2c") returned 2 [0130.199] sprintf (in: _Dest=0x7a23e9e, _Format="%c%c" | out: _Dest="ca") returned 2 [0130.199] sprintf (in: _Dest=0x7a23ea0, _Format="%c%c" | out: _Dest="8e") returned 2 [0130.199] sprintf (in: _Dest=0x7a23ea2, _Format="%c%c" | out: _Dest="1e") returned 2 [0130.199] sprintf (in: _Dest=0x7a23ea4, _Format="%c%c" | out: _Dest="91") returned 2 [0130.199] sprintf (in: _Dest=0x7a23ea6, _Format="%c%c" | out: _Dest="8a") returned 2 [0130.199] sprintf (in: _Dest=0x7a23ea8, _Format="%c%c" | out: _Dest="34") returned 2 [0130.199] sprintf (in: _Dest=0x7a23eaa, _Format="%c%c" | out: _Dest="17") returned 2 [0130.199] sprintf (in: _Dest=0x7a23eac, _Format="%c%c" | out: _Dest="70") returned 2 [0130.200] sprintf (in: _Dest=0x7a23eae, _Format="%c%c" | out: _Dest="9c") returned 2 [0130.200] sprintf (in: _Dest=0x7a23eb0, _Format="%c%c" | out: _Dest="48") returned 2 [0130.200] sprintf (in: _Dest=0x7a23eb2, _Format="%c%c" | out: _Dest="ec") returned 2 [0130.200] sprintf (in: _Dest=0x7a23eb4, _Format="%c%c" | out: _Dest="e4") returned 2 [0130.200] sprintf (in: _Dest=0x7a23eb6, _Format="%c%c" | out: _Dest="b7") returned 2 [0130.200] sprintf (in: _Dest=0x7a23eb8, _Format="%c%c" | out: _Dest="2b") returned 2 [0130.200] sprintf (in: _Dest=0x7a23eba, _Format="%c%c" | out: _Dest="66") returned 2 [0130.200] sprintf (in: _Dest=0x7a23ebc, _Format="%c%c" | out: _Dest="db") returned 2 [0130.200] sprintf (in: _Dest=0x7a23ebe, _Format="%c%c" | out: _Dest="9a") returned 2 [0130.200] RtlInitAnsiString (in: DestinationString=0x9c0fe80, SourceString="5efef1ff27cc27be5e11a3e328a0be6a9c82845cf3824f6392899f1cb8b42cca8e1e918a3417709c48ece4b72b66db9a" | out: DestinationString="5efef1ff27cc27be5e11a3e328a0be6a9c82845cf3824f6392899f1cb8b42cca8e1e918a3417709c48ece4b72b66db9a") [0130.200] RtlAnsiStringToUnicodeString (in: DestinationString=0x9c0fe78, SourceString="5efef1ff27cc27be5e11a3e328a0be6a9c82845cf3824f6392899f1cb8b42cca8e1e918a3417709c48ece4b72b66db9a", AllocateDestinationString=1 | out: DestinationString="5efef1ff27cc27be5e11a3e328a0be6a9c82845cf3824f6392899f1cb8b42cca8e1e918a3417709c48ece4b72b66db9a") returned 0x0 [0130.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85150 [0130.200] wcscat (in: _Dest=0x3e46c98, _Source="5efef1ff27cc27be5e11a3e3" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\5efef1ff27cc27be5e11a3e3") returned="C:\\Users\\EEBsYm5\\Desktop\\5efef1ff27cc27be5e11a3e3" [0130.200] wcscat (in: _Dest=0x3e46c98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\5efef1ff27cc27be5e11a3e3.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\5efef1ff27cc27be5e11a3e3.68814f" [0130.200] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\5efef1ff27cc27be5e11a3e3.68814f", NtPathName=0x9c0fe70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\5efef1ff27cc27be5e11a3e3.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45920 [0130.200] NtSetInformationFile (FileHandle=0x1018, IoStatusBlock=0x9c0fe78, FileInformation=0x3d45920, Length=0x88, FileInformationClass=0xa) returned 0x0 [0130.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 [0130.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a72ee0) returned 1 [0130.615] NtQueryInformationFile (in: FileHandle=0x1018, IoStatusBlock=0x9c0fe48, FileInformation=0x9c0fe50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9c0fe48, FileInformation=0x9c0fe50) returned 0x0 [0130.615] NtSetInformationFile (FileHandle=0x1018, IoStatusBlock=0x9c0fe48, FileInformation=0x9c0fe50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c98) returned 1 [0130.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85150) returned 1 [0130.646] FlushFileBuffers (hFile=0x1018) returned 1 [0130.684] CloseHandle (hObject=0x1018) returned 1 [0130.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ea8 [0130.685] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0130.685] wcscat (in: _Dest=0x2fe6ea8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0130.686] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0130.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 [0130.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ad8) returned 1 Thread: id = 350 os_tid = 0xe20 [0122.331] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\vMq 0VUOjf__Lh_NTS5C.ods" (normalized: "c:\\users\\eebsym5\\desktop\\vmq 0vuojf__lh_nts5c.ods")) returned 0x20 [0122.331] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\vMq 0VUOjf__Lh_NTS5C.ods", dwFileAttributes=0x20) returned 1 [0127.170] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\vMq 0VUOjf__Lh_NTS5C.ods" (normalized: "c:\\users\\eebsym5\\desktop\\vmq 0vuojf__lh_nts5c.ods"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1014 [0127.170] GetFileSizeEx (in: hFile=0x1014, lpFileSize=0x9e6fbdc | out: lpFileSize=0x9e6fbdc*=85039) returned 1 [0127.170] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x14c2b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.170] ReadFile (in: hFile=0x1014, lpBuffer=0x9e6fbb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9e6fbc8, lpOverlapped=0x0 | out: lpBuffer=0x9e6fbb8*, lpNumberOfBytesRead=0x9e6fbc8*=0x4, lpOverlapped=0x0) returned 1 [0127.172] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0127.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0127.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0127.173] NtQuerySystemTime (in: CurrentTime=0x9e6fb50 | out: CurrentTime=0x9e6fb50*=132462177065616000) returned 0x0 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x3b7b0733 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x73451af1 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x1722ec28 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x7eb6f2dd [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x7fd011f7 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x1369d57c [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x48c0321c [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x6b696ca [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x6818f77a [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x790c707 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x588bcfc7 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x62c2ef5a [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0xb1898f2 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x8414eb5 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x1c7470c4 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x2e0d4bd4 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x2dc791f3 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x32e8209f [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x21047681 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x2986d42c [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x62a9b515 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x371094f1 [0127.173] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x18a4104e [0127.174] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x5a67dc15 [0127.174] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x72a7a124 [0127.174] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x2954ff11 [0127.174] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x606c2b8a [0127.174] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x617db62e [0127.174] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x6dc94db8 [0127.174] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x294c37f8 [0127.174] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x71f1e98c [0127.174] RtlRandomEx (in: Seed=0x9e6fb48 | out: Seed=0x9e6fb48) returned 0x7c5ef2e0 [0127.186] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.186] ReadFile (in: hFile=0x1014, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9e6fb50, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0x9e6fb50*=0x3c00, lpOverlapped=0x0) returned 1 [0127.186] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55b08 [0127.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0127.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0127.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3330) returned 1 [0127.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0127.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0127.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0127.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3218) returned 1 [0127.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0127.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55b08) returned 1 [0127.187] WriteFile (in: hFile=0x1014, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9e6fb50, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0x9e6fb50*=0x3c00, lpOverlapped=0x0) returned 1 [0130.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0130.071] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.071] ReadFile (in: hFile=0x1014, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9e6fb50, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0x9e6fb50*=0x3c00, lpOverlapped=0x0) returned 1 [0130.071] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55c28 [0130.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0130.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e536e8 [0130.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e536e8) returned 1 [0130.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0130.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e536e8 [0130.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53698 [0130.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53698) returned 1 [0130.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0130.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55c28) returned 1 [0130.073] WriteFile (in: hFile=0x1014, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9e6fb50, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0x9e6fb50*=0x3c00, lpOverlapped=0x0) returned 1 [0130.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0130.076] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x1102f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.076] ReadFile (in: hFile=0x1014, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9e6fb50, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0x9e6fb50*=0x3c00, lpOverlapped=0x0) returned 1 [0130.077] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x1102f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56840 [0130.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0130.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0130.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53648) returned 1 [0130.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0130.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0130.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0130.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535f8) returned 1 [0130.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0130.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 [0130.078] WriteFile (in: hFile=0x1014, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9e6fb50, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0x9e6fb50*=0x3c00, lpOverlapped=0x0) returned 1 [0130.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0130.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f150 [0130.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3330) returned 1 [0130.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x2ff00e8 [0130.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0130.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0130.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f48) returned 1 [0130.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0130.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0130.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x2fee7d8 [0130.087] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.087] WriteFile (in: hFile=0x1014, lpBuffer=0x2fee7d8*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x9e6fbd0, lpOverlapped=0x0 | out: lpBuffer=0x2fee7d8*, lpNumberOfBytesWritten=0x9e6fbd0*=0x162, lpOverlapped=0x0) returned 1 [0130.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55c28 [0130.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0130.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0130.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0130.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3013f88 [0130.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0130.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0130.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0130.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0130.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55c28) returned 1 [0130.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a23e60 [0130.203] sprintf (in: _Dest=0x7a23e60, _Format="%c%c" | out: _Dest="3e") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e62, _Format="%c%c" | out: _Dest="87") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e64, _Format="%c%c" | out: _Dest="04") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e66, _Format="%c%c" | out: _Dest="00") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e68, _Format="%c%c" | out: _Dest="e4") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e6a, _Format="%c%c" | out: _Dest="94") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e6c, _Format="%c%c" | out: _Dest="8f") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e6e, _Format="%c%c" | out: _Dest="c5") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e70, _Format="%c%c" | out: _Dest="ad") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e72, _Format="%c%c" | out: _Dest="c8") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e74, _Format="%c%c" | out: _Dest="77") returned 2 [0130.203] sprintf (in: _Dest=0x7a23e76, _Format="%c%c" | out: _Dest="41") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e78, _Format="%c%c" | out: _Dest="59") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e7a, _Format="%c%c" | out: _Dest="b7") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e7c, _Format="%c%c" | out: _Dest="78") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e7e, _Format="%c%c" | out: _Dest="d8") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e80, _Format="%c%c" | out: _Dest="b5") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e82, _Format="%c%c" | out: _Dest="5a") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e84, _Format="%c%c" | out: _Dest="c4") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e86, _Format="%c%c" | out: _Dest="07") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e88, _Format="%c%c" | out: _Dest="22") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e8a, _Format="%c%c" | out: _Dest="03") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e8c, _Format="%c%c" | out: _Dest="71") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e8e, _Format="%c%c" | out: _Dest="c2") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e90, _Format="%c%c" | out: _Dest="5d") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e92, _Format="%c%c" | out: _Dest="fe") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e94, _Format="%c%c" | out: _Dest="25") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e96, _Format="%c%c" | out: _Dest="d0") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e98, _Format="%c%c" | out: _Dest="d9") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e9a, _Format="%c%c" | out: _Dest="48") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e9c, _Format="%c%c" | out: _Dest="f5") returned 2 [0130.204] sprintf (in: _Dest=0x7a23e9e, _Format="%c%c" | out: _Dest="7b") returned 2 [0130.204] sprintf (in: _Dest=0x7a23ea0, _Format="%c%c" | out: _Dest="14") returned 2 [0130.204] sprintf (in: _Dest=0x7a23ea2, _Format="%c%c" | out: _Dest="4c") returned 2 [0130.205] sprintf (in: _Dest=0x7a23ea4, _Format="%c%c" | out: _Dest="91") returned 2 [0130.205] sprintf (in: _Dest=0x7a23ea6, _Format="%c%c" | out: _Dest="55") returned 2 [0130.205] sprintf (in: _Dest=0x7a23ea8, _Format="%c%c" | out: _Dest="d9") returned 2 [0130.205] sprintf (in: _Dest=0x7a23eaa, _Format="%c%c" | out: _Dest="7b") returned 2 [0130.205] sprintf (in: _Dest=0x7a23eac, _Format="%c%c" | out: _Dest="4e") returned 2 [0130.205] sprintf (in: _Dest=0x7a23eae, _Format="%c%c" | out: _Dest="0b") returned 2 [0130.205] sprintf (in: _Dest=0x7a23eb0, _Format="%c%c" | out: _Dest="6d") returned 2 [0130.205] sprintf (in: _Dest=0x7a23eb2, _Format="%c%c" | out: _Dest="a8") returned 2 [0130.205] sprintf (in: _Dest=0x7a23eb4, _Format="%c%c" | out: _Dest="10") returned 2 [0130.205] sprintf (in: _Dest=0x7a23eb6, _Format="%c%c" | out: _Dest="11") returned 2 [0130.205] sprintf (in: _Dest=0x7a23eb8, _Format="%c%c" | out: _Dest="0d") returned 2 [0130.205] sprintf (in: _Dest=0x7a23eba, _Format="%c%c" | out: _Dest="33") returned 2 [0130.205] sprintf (in: _Dest=0x7a23ebc, _Format="%c%c" | out: _Dest="29") returned 2 [0130.205] sprintf (in: _Dest=0x7a23ebe, _Format="%c%c" | out: _Dest="8d") returned 2 [0130.205] RtlInitAnsiString (in: DestinationString=0x9e6fb58, SourceString="3e870400e4948fc5adc8774159b778d8b55ac407220371c25dfe25d0d948f57b144c9155d97b4e0b6da810110d33298d" | out: DestinationString="3e870400e4948fc5adc8774159b778d8b55ac407220371c25dfe25d0d948f57b144c9155d97b4e0b6da810110d33298d") [0130.205] RtlAnsiStringToUnicodeString (in: DestinationString=0x9e6fb50, SourceString="3e870400e4948fc5adc8774159b778d8b55ac407220371c25dfe25d0d948f57b144c9155d97b4e0b6da810110d33298d", AllocateDestinationString=1 | out: DestinationString="3e870400e4948fc5adc8774159b778d8b55ac407220371c25dfe25d0d948f57b144c9155d97b4e0b6da810110d33298d") returned 0x0 [0130.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d84e10 [0130.205] wcscat (in: _Dest=0x3e47918, _Source="3e870400e4948fc5adc87741" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\3e870400e4948fc5adc87741") returned="C:\\Users\\EEBsYm5\\Desktop\\3e870400e4948fc5adc87741" [0130.205] wcscat (in: _Dest=0x3e47918, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\3e870400e4948fc5adc87741.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\3e870400e4948fc5adc87741.68814f" [0130.206] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\3e870400e4948fc5adc87741.68814f", NtPathName=0x9e6fb48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\3e870400e4948fc5adc87741.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d459b0 [0130.206] NtSetInformationFile (FileHandle=0x1014, IoStatusBlock=0x9e6fb50, FileInformation=0x3d459b0, Length=0x88, FileInformationClass=0xa) returned 0x0 [0130.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d459b0) returned 1 [0130.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a72a90) returned 1 [0130.605] NtQueryInformationFile (in: FileHandle=0x1014, IoStatusBlock=0x9e6fb20, FileInformation=0x9e6fb28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9e6fb20, FileInformation=0x9e6fb28) returned 0x0 [0130.605] NtSetInformationFile (FileHandle=0x1014, IoStatusBlock=0x9e6fb20, FileInformation=0x9e6fb28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47918) returned 1 [0130.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 [0130.609] FlushFileBuffers (hFile=0x1014) returned 1 [0130.612] CloseHandle (hObject=0x1014) returned 1 [0130.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a28 [0130.613] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0130.613] wcscat (in: _Dest=0x2fe6a28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0130.613] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0130.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0130.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ec8) returned 1 Thread: id = 351 os_tid = 0xe34 [0122.332] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\w7n5fhz2t34fcqfi.jpg")) returned 0x20 [0122.332] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg", dwFileAttributes=0x20) returned 1 [0127.123] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\w7n5fhz2t34fcqfi.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1010 [0127.123] GetFileSizeEx (in: hFile=0x1010, lpFileSize=0x779f964 | out: lpFileSize=0x779f964*=69088) returned 1 [0129.423] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x10ddc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.423] ReadFile (in: hFile=0x1010, lpBuffer=0x779f940, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x779f950, lpOverlapped=0x0 | out: lpBuffer=0x779f940*, lpNumberOfBytesRead=0x779f950*=0x4, lpOverlapped=0x0) returned 1 [0129.425] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0129.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0129.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0129.425] NtQuerySystemTime (in: CurrentTime=0x779f8d8 | out: CurrentTime=0x779f8d8*=132462177088080000) returned 0x0 [0129.425] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x56b41957 [0129.425] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x448062a9 [0129.425] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x60d266a1 [0129.425] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0xb8b257e [0129.425] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x797fa196 [0129.425] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x40c9587c [0129.425] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x61955b32 [0129.425] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x1fca8d6a [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x13b7f87 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x748fcaee [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x4f7ca00d [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x75472051 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x6d08b5a [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x46513ce0 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x2e318ae4 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x275b95b3 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x17b14de3 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x99a9c64 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x6741b338 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x7ebb2a35 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x3c7690a4 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0xd1253a0 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x29f620d6 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x7a3a93e7 [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x73e3bd3b [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x660ebeef [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x6d7a1b9d [0129.426] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x23dbd128 [0129.427] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x558885ca [0129.427] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x1d34933d [0129.427] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x62b9f62b [0129.427] RtlRandomEx (in: Seed=0x779f8d0 | out: Seed=0x779f8d0) returned 0x63c81cf4 [0129.438] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.438] ReadFile (in: hFile=0x1010, lpBuffer=0x7a78cb8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x779f8d8, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesRead=0x779f8d8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.439] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a258a8 [0129.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0129.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0129.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38f8) returned 1 [0129.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a7c8c0 [0129.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0129.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0129.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0129.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0129.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258a8) returned 1 [0129.439] WriteFile (in: hFile=0x1010, lpBuffer=0x7a7c8c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x779f8d8, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesWritten=0x779f8d8*=0x3c00, lpOverlapped=0x0) returned 1 [0130.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a7c8c0) returned 1 [0130.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a78cb8) returned 1 [0130.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d200 [0130.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0130.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d3c0 [0130.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0130.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0130.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0130.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0130.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0130.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55840 [0130.110] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.110] WriteFile (in: hFile=0x1010, lpBuffer=0x3d55840*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x779f958, lpOverlapped=0x0 | out: lpBuffer=0x3d55840*, lpNumberOfBytesWritten=0x779f958*=0x11a, lpOverlapped=0x0) returned 1 [0130.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55840) returned 1 [0130.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d3c0) returned 1 [0130.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0130.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d200) returned 1 [0130.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38f8) returned 1 [0130.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0130.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0130.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0130.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e850 [0130.224] wcscpy (in: _Dest=0x3f3e850, _Source="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg" [0130.224] wcscat (in: _Dest=0x3f3e850, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg.68814f" [0130.224] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg.68814f", NtPathName=0x779f8d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\W7n5FHZ2t34fcqfI.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c318 [0130.224] NtSetInformationFile (FileHandle=0x1010, IoStatusBlock=0x779f8d8, FileInformation=0x3f3c318, Length=0x80, FileInformationClass=0xa) returned 0x0 [0130.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c318) returned 1 [0130.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a71fc8) returned 1 [0130.606] NtQueryInformationFile (in: FileHandle=0x1010, IoStatusBlock=0x779f8a8, FileInformation=0x779f8b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x779f8a8, FileInformation=0x779f8b0) returned 0x0 [0130.606] NtSetInformationFile (FileHandle=0x1010, IoStatusBlock=0x779f8a8, FileInformation=0x779f8b0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0130.608] FlushFileBuffers (hFile=0x1010) returned 1 [0130.610] CloseHandle (hObject=0x1010) returned 1 [0130.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a28 [0130.611] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0130.611] wcscat (in: _Dest=0x2fe6a28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0130.611] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0130.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0130.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf9b8) returned 1 Thread: id = 352 os_tid = 0xe30 [0122.333] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\X9z-1kfI.rtf" (normalized: "c:\\users\\eebsym5\\desktop\\x9z-1kfi.rtf")) returned 0x20 [0122.333] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\X9z-1kfI.rtf", dwFileAttributes=0x20) returned 1 [0127.149] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\X9z-1kfI.rtf" (normalized: "c:\\users\\eebsym5\\desktop\\x9z-1kfi.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xff0 [0127.149] GetFileSizeEx (in: hFile=0xff0, lpFileSize=0x9dbf88c | out: lpFileSize=0x9dbf88c*=6096) returned 1 [0127.149] SetFilePointerEx (in: hFile=0xff0, liDistanceToMove=0x17cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.149] ReadFile (in: hFile=0xff0, lpBuffer=0x9dbf868, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9dbf878, lpOverlapped=0x0 | out: lpBuffer=0x9dbf868*, lpNumberOfBytesRead=0x9dbf878*=0x4, lpOverlapped=0x0) returned 1 [0127.151] SetFilePointerEx (in: hFile=0xff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0127.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32b8 [0127.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0127.152] NtQuerySystemTime (in: CurrentTime=0x9dbf800 | out: CurrentTime=0x9dbf800*=132462177065460000) returned 0x0 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0xd51f8ba [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x4a5f63b6 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x5607e197 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x71eef6a2 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x19a9faaa [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x340daabf [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x3bfec3ba [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x5c49f1bc [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x28a5df90 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x52b20a41 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x50768af4 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x2945f4f8 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x6d2a1c9a [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x72c661f1 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x765877e0 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x4313fa22 [0127.152] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x23c8fc58 [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x2cdaa3bb [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x61183a39 [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x35d6be65 [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x61075643 [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x5bbecf85 [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x57a942aa [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x77e9584d [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x36988ed2 [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x6401e4f3 [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x682b68b6 [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x7d32a84f [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x6d82ddab [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x523109d8 [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0x2d7bef00 [0127.153] RtlRandomEx (in: Seed=0x9dbf7f8 | out: Seed=0x9dbf7f8) returned 0xe3e9bf7 [0127.165] ReadFile (in: hFile=0xff0, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x17d0, lpNumberOfBytesRead=0x9dbf7f4, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0x9dbf7f4*=0x17d0, lpOverlapped=0x0) returned 1 [0127.165] SetFilePointerEx (in: hFile=0xff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.165] WriteFile (in: hFile=0xff0, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0x17d0, lpNumberOfBytesWritten=0x9dbf7f8, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0x9dbf7f8*=0x17d0, lpOverlapped=0x0) returned 1 [0130.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53878 [0130.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53738 [0130.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53738) returned 1 [0130.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0130.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0130.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0130.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55c28) returned 1 [0130.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86ba8 [0130.069] SetFilePointerEx (in: hFile=0xff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.069] WriteFile (in: hFile=0xff0, lpBuffer=0x7ad5740*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x9dbf880, lpOverlapped=0x0 | out: lpBuffer=0x7ad5740*, lpNumberOfBytesWritten=0x9dbf880*=0x10a, lpOverlapped=0x0) returned 1 [0130.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0130.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0130.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0130.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0130.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e0e8 [0130.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0130.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0130.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3308) returned 1 [0130.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0130.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x2fc8dc8 [0130.194] sprintf (in: _Dest=0x2fc8dc8, _Format="%c%c" | out: _Dest="a4") returned 2 [0130.194] sprintf (in: _Dest=0x2fc8dca, _Format="%c%c" | out: _Dest="94") returned 2 [0130.194] sprintf (in: _Dest=0x2fc8dcc, _Format="%c%c" | out: _Dest="4b") returned 2 [0130.194] sprintf (in: _Dest=0x2fc8dce, _Format="%c%c" | out: _Dest="4a") returned 2 [0130.194] sprintf (in: _Dest=0x2fc8dd0, _Format="%c%c" | out: _Dest="0f") returned 2 [0130.194] sprintf (in: _Dest=0x2fc8dd2, _Format="%c%c" | out: _Dest="1d") returned 2 [0130.194] sprintf (in: _Dest=0x2fc8dd4, _Format="%c%c" | out: _Dest="0b") returned 2 [0130.194] sprintf (in: _Dest=0x2fc8dd6, _Format="%c%c" | out: _Dest="4a") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8dd8, _Format="%c%c" | out: _Dest="40") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8dda, _Format="%c%c" | out: _Dest="23") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8ddc, _Format="%c%c" | out: _Dest="3f") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8dde, _Format="%c%c" | out: _Dest="d6") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8de0, _Format="%c%c" | out: _Dest="bc") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8de2, _Format="%c%c" | out: _Dest="38") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8de4, _Format="%c%c" | out: _Dest="d0") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8de6, _Format="%c%c" | out: _Dest="5e") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8de8, _Format="%c%c" | out: _Dest="62") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8dea, _Format="%c%c" | out: _Dest="8b") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8dec, _Format="%c%c" | out: _Dest="6b") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8dee, _Format="%c%c" | out: _Dest="56") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8df0, _Format="%c%c" | out: _Dest="9c") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8df2, _Format="%c%c" | out: _Dest="a8") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8df4, _Format="%c%c" | out: _Dest="3e") returned 2 [0130.195] sprintf (in: _Dest=0x2fc8df6, _Format="%c%c" | out: _Dest="96") returned 2 [0130.195] RtlInitAnsiString (in: DestinationString=0x9dbf808, SourceString="a4944b4a0f1d0b4a40233fd6bc38d05e628b6b569ca83e96" | out: DestinationString="a4944b4a0f1d0b4a40233fd6bc38d05e628b6b569ca83e96") [0130.195] RtlAnsiStringToUnicodeString (in: DestinationString=0x9dbf800, SourceString="a4944b4a0f1d0b4a40233fd6bc38d05e628b6b569ca83e96", AllocateDestinationString=1 | out: DestinationString="a4944b4a0f1d0b4a40233fd6bc38d05e628b6b569ca83e96") returned 0x0 [0130.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23ed0 [0130.195] wcscat (in: _Dest=0x3d46a88, _Source="a4944b4a0f1d" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\a4944b4a0f1d") returned="C:\\Users\\EEBsYm5\\Desktop\\a4944b4a0f1d" [0130.195] wcscat (in: _Dest=0x3d46a88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\a4944b4a0f1d.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\a4944b4a0f1d.68814f" [0130.195] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\a4944b4a0f1d.68814f", NtPathName=0x9dbf7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\a4944b4a0f1d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0130.196] NtSetInformationFile (FileHandle=0xff0, IoStatusBlock=0x9dbf800, FileInformation=0x3f3df68, Length=0x70, FileInformationClass=0xa) returned 0x0 [0130.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0130.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a73330) returned 1 [0130.578] NtQueryInformationFile (in: FileHandle=0xff0, IoStatusBlock=0x9dbf7d0, FileInformation=0x9dbf7d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9dbf7d0, FileInformation=0x9dbf7d8) returned 0x0 [0130.578] NtSetInformationFile (FileHandle=0xff0, IoStatusBlock=0x9dbf7d0, FileInformation=0x9dbf7d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46a88) returned 1 [0130.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ed0) returned 1 [0130.582] FlushFileBuffers (hFile=0xff0) returned 1 [0130.645] CloseHandle (hObject=0xff0) returned 1 [0130.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a28 [0130.681] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0130.682] wcscat (in: _Dest=0x2fe6a28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0130.682] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0130.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0130.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14880) returned 1 Thread: id = 353 os_tid = 0xe2c [0122.333] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\zlenn.bmp")) returned 0x20 [0122.333] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp", dwFileAttributes=0x20) returned 1 [0127.104] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\zlenn.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfd0 [0127.105] GetFileSizeEx (in: hFile=0xfd0, lpFileSize=0x9ebfc8c | out: lpFileSize=0x9ebfc8c*=33637) returned 1 [0127.105] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x8361, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.105] ReadFile (in: hFile=0xfd0, lpBuffer=0x9ebfc68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9ebfc78, lpOverlapped=0x0 | out: lpBuffer=0x9ebfc68*, lpNumberOfBytesRead=0x9ebfc78*=0x4, lpOverlapped=0x0) returned 1 [0127.107] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0127.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0127.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0127.107] NtQuerySystemTime (in: CurrentTime=0x9ebfc00 | out: CurrentTime=0x9ebfc00*=132462177064992000) returned 0x0 [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x4476da44 [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x61e87dab [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x2b077660 [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x5ad6ce6d [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x4eea3ad1 [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x27c41098 [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x48d3fcc0 [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x1742e272 [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x612ad0e3 [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x266c42b9 [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x12d768ab [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x7f5f11d9 [0127.107] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x12de1491 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x7b214364 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x1a3c37f4 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x37cf7420 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x7997b5a1 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x10da806f [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x23e479c1 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x1eba12a5 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0xc5e1333 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x52540763 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x37768e81 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x34d7e667 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x388d4e88 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x6a3f115f [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x601397f2 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x35ebc54 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x530a784 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x48d1cc7e [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x4d95f6d5 [0127.108] RtlRandomEx (in: Seed=0x9ebfbf8 | out: Seed=0x9ebfbf8) returned 0x1e2a424e [0127.120] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.120] ReadFile (in: hFile=0xfd0, lpBuffer=0x7bbcbd0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9ebfc00, lpOverlapped=0x0 | out: lpBuffer=0x7bbcbd0*, lpNumberOfBytesRead=0x9ebfc00*=0x3c00, lpOverlapped=0x0) returned 1 [0127.121] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55c28 [0127.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0127.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0127.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3588) returned 1 [0127.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bc07d8 [0127.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0127.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0127.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0127.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0127.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55c28) returned 1 [0127.122] WriteFile (in: hFile=0xfd0, lpBuffer=0x7bc07d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9ebfc00, lpOverlapped=0x0 | out: lpBuffer=0x7bc07d8*, lpNumberOfBytesWritten=0x9ebfc00*=0x3c00, lpOverlapped=0x0) returned 1 [0130.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc07d8) returned 1 [0130.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bbcbd0) returned 1 [0130.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52338 [0130.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53670) returned 1 [0130.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53670 [0130.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53800 [0130.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538f0 [0130.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538f0) returned 1 [0130.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0130.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 [0130.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7ad5510 [0130.063] SetFilePointerEx (in: hFile=0xfd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.063] WriteFile (in: hFile=0xfd0, lpBuffer=0x7ad5510*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x9ebfc80, lpOverlapped=0x0 | out: lpBuffer=0x7ad5510*, lpNumberOfBytesWritten=0x9ebfc80*=0x104, lpOverlapped=0x0) returned 1 [0130.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5510) returned 1 [0130.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53670) returned 1 [0130.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53800) returned 1 [0130.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52338) returned 1 [0130.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3588) returned 1 [0130.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0130.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33a8) returned 1 [0130.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0130.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6ba8 [0130.188] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp" [0130.188] wcscat (in: _Dest=0x2fe6ba8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp.68814f" [0130.188] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp.68814f", NtPathName=0x9ebfbf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\zlENN.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e418 [0130.189] NtSetInformationFile (FileHandle=0xfd0, IoStatusBlock=0x9ebfc00, FileInformation=0x3f3e418, Length=0x6a, FileInformationClass=0xa) returned 0x0 [0130.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0130.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a72418) returned 1 [0130.502] NtQueryInformationFile (in: FileHandle=0xfd0, IoStatusBlock=0x9ebfbd0, FileInformation=0x9ebfbd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9ebfbd0, FileInformation=0x9ebfbd8) returned 0x0 [0130.502] NtSetInformationFile (FileHandle=0xfd0, IoStatusBlock=0x9ebfbd0, FileInformation=0x9ebfbd8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 [0130.527] FlushFileBuffers (hFile=0xfd0) returned 1 [0130.629] CloseHandle (hObject=0xfd0) returned 1 [0130.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a28 [0130.649] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0130.649] wcscat (in: _Dest=0x2fe6a28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0130.649] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0x20 [0130.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0130.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58c48) returned 1 Thread: id = 354 os_tid = 0xe24 [0122.334] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\zskK9d4h1uJNEIn-.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\zskk9d4h1ujnein-.mp3")) returned 0x20 [0122.334] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\zskK9d4h1uJNEIn-.mp3", dwFileAttributes=0x20) returned 1 [0122.577] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\zskK9d4h1uJNEIn-.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\zskk9d4h1ujnein-.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfec [0122.578] GetFileSizeEx (in: hFile=0xfec, lpFileSize=0x9fafaac | out: lpFileSize=0x9fafaac*=91396) returned 1 [0122.578] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x16500, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.578] ReadFile (in: hFile=0xfec, lpBuffer=0x9fafa88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9fafa98, lpOverlapped=0x0 | out: lpBuffer=0x9fafa88*, lpNumberOfBytesRead=0x9fafa98*=0x4, lpOverlapped=0x0) returned 1 [0122.579] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb760 [0122.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb738 [0122.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb6e8 [0122.580] NtQuerySystemTime (in: CurrentTime=0x9fafa20 | out: CurrentTime=0x9fafa20*=132462177020064000) returned 0x0 [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x21711d6d [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0xca0be0d [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x34f8152d [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x1ed1e3e2 [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x6db439a2 [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x22680846 [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x54005979 [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x3daa37ca [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x2e03373c [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x392dff3b [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x6b9a0acd [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x415bcb59 [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x5c59b73d [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x28852fb0 [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0xea00968 [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x678bb378 [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x6e6611fc [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x50906543 [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x310f34ba [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x1b11d6d [0122.580] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x6ab88fca [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x75b6555c [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x7aec25b [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x7b0785d0 [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x5da069c6 [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0xbaa7ceb [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x277fca8d [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x382d6145 [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x56b86bbb [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0xb5a971 [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x73fdbea0 [0122.581] RtlRandomEx (in: Seed=0x9fafa18 | out: Seed=0x9fafa18) returned 0x7a050e43 [0122.592] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.592] ReadFile (in: hFile=0xfec, lpBuffer=0x3f33b90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9fafa20, lpOverlapped=0x0 | out: lpBuffer=0x3f33b90*, lpNumberOfBytesRead=0x9fafa20*=0x3c00, lpOverlapped=0x0) returned 1 [0122.592] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07f08 [0122.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f128 [0122.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb760 [0122.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb760) returned 1 [0122.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a28000 [0122.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb760 [0122.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb6e8 [0122.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb6e8) returned 1 [0122.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0122.593] WriteFile (in: hFile=0xfec, lpBuffer=0x7a28000*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9fafa20, lpOverlapped=0x0 | out: lpBuffer=0x7a28000*, lpNumberOfBytesWritten=0x9fafa20*=0x3c00, lpOverlapped=0x0) returned 1 [0122.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28000) returned 1 [0122.598] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.598] ReadFile (in: hFile=0xfec, lpBuffer=0x3f33b90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9fafa20, lpOverlapped=0x0 | out: lpBuffer=0x3f33b90*, lpNumberOfBytesRead=0x9fafa20*=0x3c00, lpOverlapped=0x0) returned 1 [0122.598] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07f08 [0122.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f128 [0122.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb6e8 [0122.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb6e8) returned 1 [0122.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a28000 [0122.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb6e8 [0122.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb670 [0122.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb670) returned 1 [0122.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0122.599] WriteFile (in: hFile=0xfec, lpBuffer=0x7a28000*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9fafa20, lpOverlapped=0x0 | out: lpBuffer=0x7a28000*, lpNumberOfBytesWritten=0x9fafa20*=0x3c00, lpOverlapped=0x0) returned 1 [0122.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28000) returned 1 [0122.600] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x12904, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.600] ReadFile (in: hFile=0xfec, lpBuffer=0x3f33b90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9fafa20, lpOverlapped=0x0 | out: lpBuffer=0x3f33b90*, lpNumberOfBytesRead=0x9fafa20*=0x3c00, lpOverlapped=0x0) returned 1 [0122.600] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x12904, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07f08 [0122.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f128 [0122.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb670 [0122.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb670) returned 1 [0122.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a28000 [0122.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb670 [0122.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb648 [0122.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb648) returned 1 [0122.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0122.601] WriteFile (in: hFile=0xfec, lpBuffer=0x7a28000*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9fafa20, lpOverlapped=0x0 | out: lpBuffer=0x7a28000*, lpNumberOfBytesWritten=0x9fafa20*=0x3c00, lpOverlapped=0x0) returned 1 [0122.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28000) returned 1 [0122.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0038 [0122.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb760) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3dd0110 [0122.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb760 [0122.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb6e8 [0122.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb6e8) returned 1 [0122.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15a) returned 0x3dcd460 [0122.603] SetFilePointerEx (in: hFile=0xfec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.603] WriteFile (in: hFile=0xfec, lpBuffer=0x3dcd460*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x9fafaa0, lpOverlapped=0x0 | out: lpBuffer=0x3dcd460*, lpNumberOfBytesWritten=0x9fafaa0*=0x15a, lpOverlapped=0x0) returned 1 [0122.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07f08 [0122.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f128 [0122.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb6e8 [0122.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb6e8) returned 1 [0122.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3180 [0122.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb6e8 [0122.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb670 [0122.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb670) returned 1 [0122.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0122.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6ba8 [0122.605] sprintf (in: _Dest=0x2fe6ba8, _Format="%c%c" | out: _Dest="bc") returned 2 [0122.605] sprintf (in: _Dest=0x2fe6baa, _Format="%c%c" | out: _Dest="3a") returned 2 [0122.605] sprintf (in: _Dest=0x2fe6bac, _Format="%c%c" | out: _Dest="e4") returned 2 [0122.605] sprintf (in: _Dest=0x2fe6bae, _Format="%c%c" | out: _Dest="65") returned 2 [0122.605] sprintf (in: _Dest=0x2fe6bb0, _Format="%c%c" | out: _Dest="8a") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bb2, _Format="%c%c" | out: _Dest="9c") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bb4, _Format="%c%c" | out: _Dest="1f") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bb6, _Format="%c%c" | out: _Dest="43") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bb8, _Format="%c%c" | out: _Dest="45") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bba, _Format="%c%c" | out: _Dest="bf") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bbc, _Format="%c%c" | out: _Dest="f5") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bbe, _Format="%c%c" | out: _Dest="49") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bc0, _Format="%c%c" | out: _Dest="f0") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bc2, _Format="%c%c" | out: _Dest="cd") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bc4, _Format="%c%c" | out: _Dest="03") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bc6, _Format="%c%c" | out: _Dest="dd") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bc8, _Format="%c%c" | out: _Dest="6b") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bca, _Format="%c%c" | out: _Dest="c6") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bcc, _Format="%c%c" | out: _Dest="22") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bce, _Format="%c%c" | out: _Dest="0a") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bd0, _Format="%c%c" | out: _Dest="be") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bd2, _Format="%c%c" | out: _Dest="c7") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bd4, _Format="%c%c" | out: _Dest="b5") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bd6, _Format="%c%c" | out: _Dest="39") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bd8, _Format="%c%c" | out: _Dest="6b") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bda, _Format="%c%c" | out: _Dest="6e") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bdc, _Format="%c%c" | out: _Dest="9c") returned 2 [0122.606] sprintf (in: _Dest=0x2fe6bde, _Format="%c%c" | out: _Dest="04") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6be0, _Format="%c%c" | out: _Dest="53") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6be2, _Format="%c%c" | out: _Dest="92") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6be4, _Format="%c%c" | out: _Dest="ae") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6be6, _Format="%c%c" | out: _Dest="c0") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6be8, _Format="%c%c" | out: _Dest="be") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6bea, _Format="%c%c" | out: _Dest="ba") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6bec, _Format="%c%c" | out: _Dest="61") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6bee, _Format="%c%c" | out: _Dest="7c") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6bf0, _Format="%c%c" | out: _Dest="23") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6bf2, _Format="%c%c" | out: _Dest="ba") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6bf4, _Format="%c%c" | out: _Dest="bd") returned 2 [0122.607] sprintf (in: _Dest=0x2fe6bf6, _Format="%c%c" | out: _Dest="09") returned 2 [0122.607] RtlInitAnsiString (in: DestinationString=0x9fafa28, SourceString="bc3ae4658a9c1f4345bff549f0cd03dd6bc6220abec7b5396b6e9c045392aec0beba617c23babd09" | out: DestinationString="bc3ae4658a9c1f4345bff549f0cd03dd6bc6220abec7b5396b6e9c045392aec0beba617c23babd09") [0122.607] RtlAnsiStringToUnicodeString (in: DestinationString=0x9fafa20, SourceString="bc3ae4658a9c1f4345bff549f0cd03dd6bc6220abec7b5396b6e9c045392aec0beba617c23babd09", AllocateDestinationString=1 | out: DestinationString="bc3ae4658a9c1f4345bff549f0cd03dd6bc6220abec7b5396b6e9c045392aec0beba617c23babd09") returned 0x0 [0122.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c008 [0122.607] wcscat (in: _Dest=0x3f3f128, _Source="bc3ae4658a9c1f4345bf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\bc3ae4658a9c1f4345bf") returned="C:\\Users\\EEBsYm5\\Desktop\\bc3ae4658a9c1f4345bf" [0122.607] wcscat (in: _Dest=0x3f3f128, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\bc3ae4658a9c1f4345bf.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\bc3ae4658a9c1f4345bf.68814f" [0122.608] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\bc3ae4658a9c1f4345bf.68814f", NtPathName=0x9fafa18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\bc3ae4658a9c1f4345bf.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0122.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8ce0 [0122.608] NtSetInformationFile (FileHandle=0xfec, IoStatusBlock=0x9fafa20, FileInformation=0x3eb8ce0, Length=0x80, FileInformationClass=0xa) returned 0x0 [0122.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 [0122.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0122.610] NtQueryInformationFile (in: FileHandle=0xfec, IoStatusBlock=0x9faf9f0, FileInformation=0x9faf9f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9faf9f0, FileInformation=0x9faf9f8) returned 0x0 [0122.610] NtSetInformationFile (FileHandle=0xfec, IoStatusBlock=0x9faf9f0, FileInformation=0x9faf9f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0122.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0122.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 [0122.612] FlushFileBuffers (hFile=0xfec) returned 1 [0122.614] CloseHandle (hObject=0xfec) returned 1 [0122.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ba8 [0122.615] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Users\\EEBsYm5\\Desktop\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\") returned="C:\\Users\\EEBsYm5\\Desktop\\" [0122.615] wcscat (in: _Dest=0x2fe6ba8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" [0122.615] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt")) returned 0xffffffff [0122.615] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfec [0122.616] WriteFile (in: hFile=0xfec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9fafa34, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9fafa34*=0x8b9, lpOverlapped=0x0) returned 1 [0122.619] CloseHandle (hObject=0xfec) returned 1 [0122.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 [0122.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf7b0) returned 1 Thread: id = 355 os_tid = 0xe18 [0122.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e14bf0 [0122.337] wcscpy (in: _Dest=0x3e14bf0, _Source="C:\\Users\\Public\\Documents\\My Music" | out: _Dest="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music" [0122.337] wcscat (in: _Dest=0x3e14bf0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Music\\") returned="C:\\Users\\Public\\Documents\\My Music\\" [0122.337] wcscat (in: _Dest=0x3e14bf0, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Music\\*") returned="C:\\Users\\Public\\Documents\\My Music\\*" [0122.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0122.337] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0122.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14bf0) returned 1 [0122.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6518) returned 1 Thread: id = 356 os_tid = 0xe38 [0122.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e14bf0 [0122.341] wcscpy (in: _Dest=0x3e14bf0, _Source="C:\\Users\\Public\\Documents\\My Pictures" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures" [0122.341] wcscat (in: _Dest=0x3e14bf0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures\\") returned="C:\\Users\\Public\\Documents\\My Pictures\\" [0122.341] wcscat (in: _Dest=0x3e14bf0, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures\\*") returned="C:\\Users\\Public\\Documents\\My Pictures\\*" [0122.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0122.341] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0122.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14bf0) returned 1 [0122.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14460) returned 1 Thread: id = 357 os_tid = 0xe10 [0122.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14460 [0122.343] wcscpy (in: _Dest=0x3e14460, _Source="C:\\Users\\Public\\Documents\\My Videos" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos" [0122.343] wcscat (in: _Dest=0x3e14460, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos\\") returned="C:\\Users\\Public\\Documents\\My Videos\\" [0122.343] wcscat (in: _Dest=0x3e14460, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos\\*") returned="C:\\Users\\Public\\Documents\\My Videos\\*" [0122.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0122.343] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0122.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14460) returned 1 [0122.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58ce8) returned 1 Thread: id = 358 os_tid = 0xe8c [0122.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6908 [0122.345] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0122.345] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0122.345] wcscat (in: _Dest=0x2fe6908, _Source="*" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\*") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\*" [0122.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0122.345] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf690 [0122.623] wcscmp (_String1=".", _String2=".") returned 0 [0122.623] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.623] wcscmp (_String1="..", _String2=".") returned 1 [0122.623] wcscmp (_String1="..", _String2="..") returned 0 [0122.623] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0122.624] wcscmp (_String1="Chrysanthemum.jpg", _String2=".") returned 1 [0122.624] wcscmp (_String1="Chrysanthemum.jpg", _String2="..") returned 1 [0122.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a918 [0122.624] wcscpy (in: _Dest=0x3e1a918, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0122.624] wcscat (in: _Dest=0x3e1a918, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0122.624] wcscat (in: _Dest=0x3e1a918, _Source="Chrysanthemum.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" [0133.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0133.015] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0133.015] wcscmp (_String1="Desert.jpg", _String2=".") returned 1 [0133.015] wcscmp (_String1="Desert.jpg", _String2="..") returned 1 [0133.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23a70 [0133.015] wcscpy (in: _Dest=0x7a23a70, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0133.015] wcscat (in: _Dest=0x7a23a70, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0133.015] wcscat (in: _Dest=0x7a23a70, _Source="Desert.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" [0133.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0133.017] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0133.017] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0133.017] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0133.017] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0133.017] wcscmp (_String1="Hydrangeas.jpg", _String2=".") returned 1 [0133.017] wcscmp (_String1="Hydrangeas.jpg", _String2="..") returned 1 [0133.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0133.018] wcscpy (in: _Dest=0x3f3e2b0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0133.018] wcscat (in: _Dest=0x3f3e2b0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0133.018] wcscat (in: _Dest=0x3f3e2b0, _Source="Hydrangeas.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" [0133.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc8 [0133.019] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0133.019] wcscmp (_String1="Jellyfish.jpg", _String2=".") returned 1 [0133.019] wcscmp (_String1="Jellyfish.jpg", _String2="..") returned 1 [0133.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3df68 [0133.019] wcscpy (in: _Dest=0x3f3df68, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0133.019] wcscat (in: _Dest=0x3f3df68, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0133.019] wcscat (in: _Dest=0x3f3df68, _Source="Jellyfish.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" [0133.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3df68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bac [0133.021] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0133.021] wcscmp (_String1="Koala.jpg", _String2=".") returned 1 [0133.021] wcscmp (_String1="Koala.jpg", _String2="..") returned 1 [0133.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23bc0 [0133.021] wcscpy (in: _Dest=0x7a23bc0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0133.021] wcscat (in: _Dest=0x7a23bc0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0133.021] wcscat (in: _Dest=0x7a23bc0, _Source="Koala.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" [0133.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb0 [0133.023] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0133.023] wcscmp (_String1="Lighthouse.jpg", _String2=".") returned 1 [0133.023] wcscmp (_String1="Lighthouse.jpg", _String2="..") returned 1 [0133.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e940 [0133.023] wcscpy (in: _Dest=0x3f3e940, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0133.023] wcscat (in: _Dest=0x3f3e940, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0133.023] wcscat (in: _Dest=0x3f3e940, _Source="Lighthouse.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" [0133.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb4 [0133.027] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0133.027] wcscmp (_String1="Penguins.jpg", _String2=".") returned 1 [0133.027] wcscmp (_String1="Penguins.jpg", _String2="..") returned 1 [0133.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e850 [0133.027] wcscpy (in: _Dest=0x3f3e850, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0133.027] wcscat (in: _Dest=0x3f3e850, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0133.027] wcscat (in: _Dest=0x3f3e850, _Source="Penguins.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" [0133.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb8 [0133.033] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0133.034] wcscmp (_String1="Tulips.jpg", _String2=".") returned 1 [0133.034] wcscmp (_String1="Tulips.jpg", _String2="..") returned 1 [0133.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23920 [0133.034] wcscpy (in: _Dest=0x7a23920, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures") returned="C:\\Users\\Public\\Pictures\\Sample Pictures" [0133.034] wcscat (in: _Dest=0x7a23920, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0133.034] wcscat (in: _Dest=0x7a23920, _Source="Tulips.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" [0133.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bbc [0133.035] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d07da2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0133.035] FindClose (in: hFindFile=0x3dcf690 | out: hFindFile=0x3dcf690) returned 1 [0133.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0133.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 [0133.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe63c8) returned 1 Thread: id = 359 os_tid = 0xe04 [0122.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6968 [0122.350] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media" [0122.350] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\" [0122.350] wcscat (in: _Dest=0x2fe6968, _Source="*" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\*") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\*" [0122.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb40f8 [0122.350] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d440 [0122.351] wcscmp (_String1=".", _String2=".") returned 0 [0122.351] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.351] wcscmp (_String1="..", _String2=".") returned 1 [0122.351] wcscmp (_String1="..", _String2="..") returned 0 [0122.351] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84e06f5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x84e06f5a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.351] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0122.351] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0122.351] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84d6e5fa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x84d6e5fa, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0122.351] wcscmp (_String1="win7_scenic-demoshort_raw.wtv", _String2=".") returned 1 [0122.351] wcscmp (_String1="win7_scenic-demoshort_raw.wtv", _String2="..") returned 1 [0122.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d5d0 [0122.352] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media") returned="C:\\Users\\Public\\Recorded TV\\Sample Media" [0122.352] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\" [0122.352] wcscat (in: _Dest=0x32d5d0, _Source="win7_scenic-demoshort_raw.wtv" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" [0122.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0122.989] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84d6e5fa, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x84d6e5fa, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0 [0122.989] FindClose (in: hFindFile=0x7a2d440 | out: hFindFile=0x7a2d440) returned 1 [0122.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb40f8) returned 1 [0122.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 [0122.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 Thread: id = 360 os_tid = 0xdec [0122.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e14460 [0122.358] wcscpy (in: _Dest=0x3e14460, _Source="C:\\Users\\Public\\Videos\\Sample Videos" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos" [0122.359] wcscat (in: _Dest=0x3e14460, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\") returned="C:\\Users\\Public\\Videos\\Sample Videos\\" [0122.359] wcscat (in: _Dest=0x3e14460, _Source="*" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\*") returned="C:\\Users\\Public\\Videos\\Sample Videos\\*" [0122.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3e90 [0122.359] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d480 [0122.359] wcscmp (_String1=".", _String2=".") returned 0 [0122.359] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe50f3de2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3fe018, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.359] wcscmp (_String1="..", _String2=".") returned 1 [0122.359] wcscmp (_String1="..", _String2="..") returned 0 [0122.359] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1ce1c42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.359] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0122.359] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0122.359] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1c496c1, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0122.360] wcscmp (_String1="Wildlife.wmv", _String2=".") returned 1 [0122.360] wcscmp (_String1="Wildlife.wmv", _String2="..") returned 1 [0122.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26158 [0122.360] wcscpy (in: _Dest=0x7a26158, _Source="C:\\Users\\Public\\Videos\\Sample Videos" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos") returned="C:\\Users\\Public\\Videos\\Sample Videos" [0122.360] wcscat (in: _Dest=0x7a26158, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\") returned="C:\\Users\\Public\\Videos\\Sample Videos\\" [0122.360] wcscat (in: _Dest=0x7a26158, _Source="Wildlife.wmv" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv") returned="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" [0122.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c [0122.712] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f3de2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1c496c1, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1ce1c42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0122.712] FindClose (in: hFindFile=0x7a2d480 | out: hFindFile=0x7a2d480) returned 1 [0122.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3e90) returned 1 [0122.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14460) returned 1 [0122.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48c10) returned 1 Thread: id = 361 os_tid = 0xdf0 [0122.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44180 [0122.360] wcscpy (in: _Dest=0x3d44180, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" [0122.360] wcscat (in: _Dest=0x3d44180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\" [0122.361] wcscat (in: _Dest=0x3d44180, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*" [0122.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3c28 [0122.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0122.625] wcscmp (_String1=".", _String2=".") returned 0 [0122.625] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.625] wcscmp (_String1="..", _String2=".") returned 1 [0122.625] wcscmp (_String1="..", _String2="..") returned 0 [0122.625] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 1 [0122.625] wcscmp (_String1="License Agreements", _String2=".") returned 1 [0122.625] wcscmp (_String1="License Agreements", _String2="..") returned 1 [0122.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff63a8 [0122.625] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033" [0122.625] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\" [0122.625] wcscat (in: _Dest=0x2ff63a8, _Source="License Agreements" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" [0123.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0123.797] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 0 [0123.797] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0123.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3c28) returned 1 [0123.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44180) returned 1 [0123.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1838) returned 1 Thread: id = 362 os_tid = 0xe90 [0122.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d4c0 [0122.362] wcscpy (in: _Dest=0x7a2d4c0, _Source="C:\\Users\\Default\\SendTo" | out: _Dest="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo" [0122.362] wcscat (in: _Dest=0x7a2d4c0, _Source="\\" | out: _Dest="C:\\Users\\Default\\SendTo\\") returned="C:\\Users\\Default\\SendTo\\" [0122.362] wcscat (in: _Dest=0x7a2d4c0, _Source="*" | out: _Dest="C:\\Users\\Default\\SendTo\\*") returned="C:\\Users\\Default\\SendTo\\*" [0122.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0122.362] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0122.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d4c0) returned 1 [0122.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79138) returned 1 Thread: id = 363 os_tid = 0xdf4 [0122.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x30b3980 [0122.364] wcscpy (in: _Dest=0x30b3980, _Source="C:\\Users\\Default\\Start Menu" | out: _Dest="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu" [0122.364] wcscat (in: _Dest=0x30b3980, _Source="\\" | out: _Dest="C:\\Users\\Default\\Start Menu\\") returned="C:\\Users\\Default\\Start Menu\\" [0122.364] wcscat (in: _Dest=0x30b3980, _Source="*" | out: _Dest="C:\\Users\\Default\\Start Menu\\*") returned="C:\\Users\\Default\\Start Menu\\*" [0122.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0122.364] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0122.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3980) returned 1 [0122.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066b40) returned 1 Thread: id = 364 os_tid = 0xdf8 [0122.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30b3980 [0122.366] wcscpy (in: _Dest=0x30b3980, _Source="C:\\Users\\Default\\Templates" | out: _Dest="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates" [0122.366] wcscat (in: _Dest=0x30b3980, _Source="\\" | out: _Dest="C:\\Users\\Default\\Templates\\") returned="C:\\Users\\Default\\Templates\\" [0122.366] wcscat (in: _Dest=0x30b3980, _Source="*" | out: _Dest="C:\\Users\\Default\\Templates\\*") returned="C:\\Users\\Default\\Templates\\*" [0122.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0122.366] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0122.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0122.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3980) returned 1 [0122.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f40) returned 1 Thread: id = 365 os_tid = 0xe08 [0122.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3066f40 [0122.368] wcscpy (in: _Dest=0x3066f40, _Source="C:\\Users\\Default\\Videos" | out: _Dest="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos" [0122.368] wcscat (in: _Dest=0x3066f40, _Source="\\" | out: _Dest="C:\\Users\\Default\\Videos\\") returned="C:\\Users\\Default\\Videos\\" [0122.368] wcscat (in: _Dest=0x3066f40, _Source="*" | out: _Dest="C:\\Users\\Default\\Videos\\*") returned="C:\\Users\\Default\\Videos\\*" [0122.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0122.368] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0122.369] wcscmp (_String1=".", _String2=".") returned 0 [0122.369] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfa145187, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.369] wcscmp (_String1="..", _String2=".") returned 1 [0122.369] wcscmp (_String1="..", _String2="..") returned 0 [0122.369] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.369] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0122.369] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0122.369] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c1c570, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x27c5c9df, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0122.369] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0122.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0122.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066f40) returned 1 [0122.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79250) returned 1 Thread: id = 366 os_tid = 0xe00 [0122.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e58ce8 [0122.371] wcscpy (in: _Dest=0x3e58ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.371] wcscat (in: _Dest=0x3e58ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.371] wcscat (in: _Dest=0x3e58ce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\*" [0122.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0122.371] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0122.371] wcscmp (_String1=".", _String2=".") returned 0 [0122.371] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.371] wcscmp (_String1="..", _String2=".") returned 1 [0122.371] wcscmp (_String1="..", _String2="..") returned 0 [0122.371] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0122.372] wcscmp (_String1="Adobe", _String2=".") returned 1 [0122.372] wcscmp (_String1="Adobe", _String2="..") returned 1 [0122.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e14bf0 [0122.372] wcscpy (in: _Dest=0x3e14bf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.372] wcscat (in: _Dest=0x3e14bf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.372] wcscat (in: _Dest=0x3e14bf0, _Source="Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0122.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004 [0122.714] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0122.714] wcscmp (_String1="Application Data", _String2=".") returned 1 [0122.714] wcscmp (_String1="Application Data", _String2="..") returned 1 [0122.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf7b0 [0122.715] wcscpy (in: _Dest=0x3edf7b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.715] wcscat (in: _Dest=0x3edf7b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.715] wcscat (in: _Dest=0x3edf7b0, _Source="Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data" [0122.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf7b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0122.716] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7756010, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xb7756010, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xb7756010, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0122.716] wcscmp (_String1="GDIPFONTCACHEV1.DAT", _String2=".") returned 1 [0122.716] wcscmp (_String1="GDIPFONTCACHEV1.DAT", _String2="..") returned 1 [0122.716] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0122.716] wcscmp (_String1="Google", _String2=".") returned 1 [0122.716] wcscmp (_String1="Google", _String2="..") returned 1 [0122.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48c10 [0122.716] wcscpy (in: _Dest=0x3d48c10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.716] wcscat (in: _Dest=0x3d48c10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.716] wcscat (in: _Dest=0x3d48c10, _Source="Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0122.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0122.718] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0122.718] wcscmp (_String1="History", _String2=".") returned 1 [0122.718] wcscmp (_String1="History", _String2="..") returned 1 [0122.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3d48690 [0122.718] wcscpy (in: _Dest=0x3d48690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.718] wcscat (in: _Dest=0x3d48690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.718] wcscat (in: _Dest=0x3d48690, _Source="History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History" [0122.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0122.720] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x90d3ed0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x90d3ed0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x49056c20, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0xf541a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0122.720] wcscmp (_String1="IconCache.db", _String2=".") returned 1 [0122.720] wcscmp (_String1="IconCache.db", _String2="..") returned 1 [0122.720] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x3b4a6850, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3b4a6850, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0122.720] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0122.720] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0122.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c08 [0122.720] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.720] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.720] wcscat (in: _Dest=0x2fe6c08, _Source="Microsoft" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft" [0122.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0122.721] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0122.721] wcscmp (_String1="Microsoft Help", _String2=".") returned 1 [0122.721] wcscmp (_String1="Microsoft Help", _String2="..") returned 1 [0122.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0038 [0122.721] wcscpy (in: _Dest=0x3ee0038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.721] wcscat (in: _Dest=0x3ee0038, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.721] wcscat (in: _Dest=0x3ee0038, _Source="Microsoft Help" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help" [0122.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40 [0122.722] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b774d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x887736a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x887736a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0122.722] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0122.722] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0122.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e14460 [0122.722] wcscpy (in: _Dest=0x3e14460, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.722] wcscat (in: _Dest=0x3e14460, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.722] wcscat (in: _Dest=0x3e14460, _Source="Mozilla" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Mozilla") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Mozilla" [0122.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14460) returned 1 [0122.722] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0xe78d6040, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xe78d6040, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0122.723] wcscmp (_String1="Temp", _String2=".") returned 1 [0122.723] wcscmp (_String1="Temp", _String2="..") returned 1 [0122.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6b08 [0122.723] wcscpy (in: _Dest=0x3de6b08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.723] wcscat (in: _Dest=0x3de6b08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.723] wcscat (in: _Dest=0x3de6b08, _Source="Temp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Temp" [0122.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6b08) returned 1 [0122.723] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x916c450, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x916c450, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x916c450, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0122.723] wcscmp (_String1="Temporary Internet Files", _String2=".") returned 1 [0122.723] wcscmp (_String1="Temporary Internet Files", _String2="..") returned 1 [0122.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0122.723] wcscpy (in: _Dest=0x3d517a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.723] wcscat (in: _Dest=0x3d517a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.723] wcscat (in: _Dest=0x3d517a0, _Source="Temporary Internet Files" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Temporary Internet Files" [0122.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0122.723] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0122.723] wcscmp (_String1="VirtualStore", _String2=".") returned 1 [0122.723] wcscmp (_String1="VirtualStore", _String2="..") returned 1 [0122.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6c08 [0122.723] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local") returned="C:\\Users\\EEBsYm5\\AppData\\Local" [0122.723] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\" [0122.724] wcscat (in: _Dest=0x2fe6c08, _Source="VirtualStore" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore" [0122.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0122.725] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0122.725] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0122.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0122.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58ce8) returned 1 [0122.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 Thread: id = 367 os_tid = 0xde8 [0122.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e59148 [0122.373] wcscpy (in: _Dest=0x3e59148, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0122.373] wcscat (in: _Dest=0x3e59148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0122.373] wcscat (in: _Dest=0x3e59148, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\*" [0122.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb45c8 [0122.373] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\*", lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0122.376] wcscmp (_String1=".", _String2=".") returned 0 [0122.376] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.376] wcscmp (_String1="..", _String2=".") returned 1 [0122.376] wcscmp (_String1="..", _String2="..") returned 0 [0122.376] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0122.376] wcscmp (_String1="Adobe", _String2=".") returned 1 [0122.376] wcscmp (_String1="Adobe", _String2="..") returned 1 [0122.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e14ca0 [0122.376] wcscpy (in: _Dest=0x3e14ca0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0122.376] wcscat (in: _Dest=0x3e14ca0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0122.376] wcscat (in: _Dest=0x3e14ca0, _Source="Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0122.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0122.991] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc0b07b20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0x77142c30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77142c30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0122.991] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0122.991] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0122.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe64e8 [0122.991] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0122.991] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0122.991] wcscat (in: _Dest=0x2fe64e8, _Source="Microsoft" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Microsoft") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Microsoft" [0122.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0122.991] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0122.991] wcscmp (_String1="Sun", _String2=".") returned 1 [0122.992] wcscmp (_String1="Sun", _String2="..") returned 1 [0122.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e6a2c8 [0122.992] wcscpy (in: _Dest=0x3e6a2c8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow" [0122.992] wcscat (in: _Dest=0x3e6a2c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\" [0122.992] wcscat (in: _Dest=0x3e6a2c8, _Source="Sun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" [0122.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e6a2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4 [0122.993] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0122.993] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0122.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb45c8) returned 1 [0122.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e59148) returned 1 [0122.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58bf8) returned 1 Thread: id = 368 os_tid = 0xde4 [0122.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e588d8 [0122.382] wcscpy (in: _Dest=0x3e588d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0122.382] wcscat (in: _Dest=0x3e588d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0122.382] wcscat (in: _Dest=0x3e588d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\*" [0122.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0122.382] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f68e480, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f68e480, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0122.382] wcscmp (_String1=".", _String2=".") returned 0 [0122.382] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f68e480, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f68e480, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.382] wcscmp (_String1="..", _String2=".") returned 1 [0122.382] wcscmp (_String1="..", _String2="..") returned 0 [0122.383] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ae533f0, ftCreationTime.dwHighDateTime=0x1d5e13a, ftLastAccessTime.dwLowDateTime=0x90aeca60, ftLastAccessTime.dwHighDateTime=0x1d5e7c7, ftLastWriteTime.dwLowDateTime=0x90aeca60, ftLastWriteTime.dwHighDateTime=0x1d5e7c7, nFileSizeHigh=0x0, nFileSizeLow=0x1191c, dwReserved0=0x0, dwReserved1=0x0, cFileName="0mSP.png", cAlternateFileName="")) returned 1 [0122.383] wcscmp (_String1="0mSP.png", _String2=".") returned 1 [0122.383] wcscmp (_String1="0mSP.png", _String2="..") returned 1 [0122.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe69c8 [0122.383] wcscpy (in: _Dest=0x2fe69c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0122.383] wcscat (in: _Dest=0x2fe69c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0122.383] wcscat (in: _Dest=0x2fe69c8, _Source="0mSP.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png" [0125.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe69c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0125.030] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc305eda0, ftCreationTime.dwHighDateTime=0x1d5e406, ftLastAccessTime.dwLowDateTime=0xda4567f0, ftLastAccessTime.dwHighDateTime=0x1d5e796, ftLastWriteTime.dwLowDateTime=0xda4567f0, ftLastWriteTime.dwHighDateTime=0x1d5e796, nFileSizeHigh=0x0, nFileSizeLow=0x18cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="0TlX-QZ1m9K8A.gif", cAlternateFileName="0TLX-Q~1.GIF")) returned 1 [0125.030] wcscmp (_String1="0TlX-QZ1m9K8A.gif", _String2=".") returned 1 [0125.030] wcscmp (_String1="0TlX-QZ1m9K8A.gif", _String2="..") returned 1 [0125.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23530 [0125.030] wcscpy (in: _Dest=0x7a23530, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.030] wcscat (in: _Dest=0x7a23530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.031] wcscat (in: _Dest=0x7a23530, _Source="0TlX-QZ1m9K8A.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0TlX-QZ1m9K8A.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0TlX-QZ1m9K8A.gif" [0125.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0125.032] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3b351c30, ftCreationTime.dwHighDateTime=0x1d5dba9, ftLastAccessTime.dwLowDateTime=0xf8fae820, ftLastAccessTime.dwHighDateTime=0x1d5e848, ftLastWriteTime.dwLowDateTime=0xf8fae820, ftLastWriteTime.dwHighDateTime=0x1d5e848, nFileSizeHigh=0x0, nFileSizeLow=0xb09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="1tKqBR.odp", cAlternateFileName="")) returned 1 [0125.032] wcscmp (_String1="1tKqBR.odp", _String2=".") returned 1 [0125.032] wcscmp (_String1="1tKqBR.odp", _String2="..") returned 1 [0125.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6fc8 [0125.032] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.032] wcscat (in: _Dest=0x2fe6fc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.032] wcscat (in: _Dest=0x2fe6fc8, _Source="1tKqBR.odp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1tKqBR.odp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1tKqBR.odp" [0125.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1644 [0125.034] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94b5d2a0, ftCreationTime.dwHighDateTime=0x1d5e625, ftLastAccessTime.dwLowDateTime=0xa74cb550, ftLastAccessTime.dwHighDateTime=0x1d5d9c3, ftLastWriteTime.dwLowDateTime=0xa74cb550, ftLastWriteTime.dwHighDateTime=0x1d5d9c3, nFileSizeHigh=0x0, nFileSizeLow=0x15f0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="1vaMIWSlIHoeVm.mp3", cAlternateFileName="1VAMIW~1.MP3")) returned 1 [0125.034] wcscmp (_String1="1vaMIWSlIHoeVm.mp3", _String2=".") returned 1 [0125.034] wcscmp (_String1="1vaMIWSlIHoeVm.mp3", _String2="..") returned 1 [0125.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23610 [0125.034] wcscpy (in: _Dest=0x7a23610, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.034] wcscat (in: _Dest=0x7a23610, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.034] wcscat (in: _Dest=0x7a23610, _Source="1vaMIWSlIHoeVm.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1vaMIWSlIHoeVm.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1vaMIWSlIHoeVm.mp3" [0125.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0125.036] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf797f340, ftCreationTime.dwHighDateTime=0x1d5d8d2, ftLastAccessTime.dwLowDateTime=0x7f0f9320, ftLastAccessTime.dwHighDateTime=0x1d5e54c, ftLastWriteTime.dwLowDateTime=0x7f0f9320, ftLastWriteTime.dwHighDateTime=0x1d5e54c, nFileSizeHigh=0x0, nFileSizeLow=0x10fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="752T-9jXWSE04pJrd75j.flv", cAlternateFileName="752T-9~1.FLV")) returned 1 [0125.036] wcscmp (_String1="752T-9jXWSE04pJrd75j.flv", _String2=".") returned 1 [0125.036] wcscmp (_String1="752T-9jXWSE04pJrd75j.flv", _String2="..") returned 1 [0125.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6370 [0125.036] wcscpy (in: _Dest=0x3da6370, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.036] wcscat (in: _Dest=0x3da6370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.036] wcscat (in: _Dest=0x3da6370, _Source="752T-9jXWSE04pJrd75j.flv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\752T-9jXWSE04pJrd75j.flv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\752T-9jXWSE04pJrd75j.flv" [0125.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da6370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0125.038] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc03f4ff0, ftCreationTime.dwHighDateTime=0x1d5d847, ftLastAccessTime.dwLowDateTime=0x610aedd0, ftLastAccessTime.dwHighDateTime=0x1d5df33, ftLastWriteTime.dwLowDateTime=0x610aedd0, ftLastWriteTime.dwHighDateTime=0x1d5df33, nFileSizeHigh=0x0, nFileSizeLow=0xafa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ac_2qHvGqVj.gif", cAlternateFileName="AC_2QH~1.GIF")) returned 1 [0125.038] wcscmp (_String1="ac_2qHvGqVj.gif", _String2=".") returned 1 [0125.038] wcscmp (_String1="ac_2qHvGqVj.gif", _String2="..") returned 1 [0125.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23680 [0125.038] wcscpy (in: _Dest=0x7a23680, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.038] wcscat (in: _Dest=0x7a23680, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.038] wcscat (in: _Dest=0x7a23680, _Source="ac_2qHvGqVj.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ac_2qHvGqVj.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ac_2qHvGqVj.gif" [0125.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0125.040] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0125.040] wcscmp (_String1="Adobe", _String2=".") returned 1 [0125.040] wcscmp (_String1="Adobe", _String2="..") returned 1 [0125.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3d48cc0 [0125.040] wcscpy (in: _Dest=0x3d48cc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.041] wcscat (in: _Dest=0x3d48cc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.041] wcscat (in: _Dest=0x3d48cc0, _Source="Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0125.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d48cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0125.043] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5660ff50, ftCreationTime.dwHighDateTime=0x1d5e2d0, ftLastAccessTime.dwLowDateTime=0x5b11d1c0, ftLastAccessTime.dwHighDateTime=0x1d5e634, ftLastWriteTime.dwLowDateTime=0x5b11d1c0, ftLastWriteTime.dwHighDateTime=0x1d5e634, nFileSizeHigh=0x0, nFileSizeLow=0x98ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="BWEb_V6SG3.mp3", cAlternateFileName="BWEB_V~1.MP3")) returned 1 [0125.043] wcscmp (_String1="BWEb_V6SG3.mp3", _String2=".") returned 1 [0125.043] wcscmp (_String1="BWEb_V6SG3.mp3", _String2="..") returned 1 [0125.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee03e0 [0125.043] wcscpy (in: _Dest=0x3ee03e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.043] wcscat (in: _Dest=0x3ee03e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.043] wcscat (in: _Dest=0x3ee03e0, _Source="BWEb_V6SG3.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\BWEb_V6SG3.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\BWEb_V6SG3.mp3" [0125.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee03e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0125.045] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x27197c20, ftCreationTime.dwHighDateTime=0x1d5da53, ftLastAccessTime.dwLowDateTime=0x448dbbf0, ftLastAccessTime.dwHighDateTime=0x1d5d953, ftLastWriteTime.dwLowDateTime=0x448dbbf0, ftLastWriteTime.dwHighDateTime=0x1d5d953, nFileSizeHigh=0x0, nFileSizeLow=0x12b1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dsXJ_2RfXzOit_cemFh.bmp", cAlternateFileName="DSXJ_2~1.BMP")) returned 1 [0125.045] wcscmp (_String1="dsXJ_2RfXzOit_cemFh.bmp", _String2=".") returned 1 [0125.045] wcscmp (_String1="dsXJ_2RfXzOit_cemFh.bmp", _String2="..") returned 1 [0125.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da63f0 [0125.045] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.045] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.045] wcscat (in: _Dest=0x3da63f0, _Source="dsXJ_2RfXzOit_cemFh.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp" [0125.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da63f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0125.047] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ecc3c0, ftCreationTime.dwHighDateTime=0x1d5e2aa, ftLastAccessTime.dwLowDateTime=0xbdd52ab0, ftLastAccessTime.dwHighDateTime=0x1d5de0e, ftLastWriteTime.dwLowDateTime=0xbdd52ab0, ftLastWriteTime.dwHighDateTime=0x1d5de0e, nFileSizeHigh=0x0, nFileSizeLow=0x113f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="dWck9.jpg", cAlternateFileName="")) returned 1 [0125.047] wcscmp (_String1="dWck9.jpg", _String2=".") returned 1 [0125.047] wcscmp (_String1="dWck9.jpg", _String2="..") returned 1 [0125.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7028 [0125.048] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.048] wcscat (in: _Dest=0x2fe7028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.048] wcscat (in: _Dest=0x2fe7028, _Source="dWck9.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg" [0125.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe7028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0125.050] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8971e4b0, ftCreationTime.dwHighDateTime=0x1d5dda6, ftLastAccessTime.dwLowDateTime=0xf96a4420, ftLastAccessTime.dwHighDateTime=0x1d5e408, ftLastWriteTime.dwLowDateTime=0xf96a4420, ftLastWriteTime.dwHighDateTime=0x1d5e408, nFileSizeHigh=0x0, nFileSizeLow=0x2572, dwReserved0=0x0, dwReserved1=0x0, cFileName="eeDj0ryX7zpDHi-Tge.rtf", cAlternateFileName="EEDJ0R~1.RTF")) returned 1 [0125.050] wcscmp (_String1="eeDj0ryX7zpDHi-Tge.rtf", _String2=".") returned 1 [0125.050] wcscmp (_String1="eeDj0ryX7zpDHi-Tge.rtf", _String2="..") returned 1 [0125.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fdd0 [0125.050] wcscpy (in: _Dest=0x3f3fdd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.050] wcscat (in: _Dest=0x3f3fdd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.050] wcscat (in: _Dest=0x3f3fdd0, _Source="eeDj0ryX7zpDHi-Tge.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eeDj0ryX7zpDHi-Tge.rtf") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eeDj0ryX7zpDHi-Tge.rtf" [0125.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fdd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0125.052] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0d0db0, ftCreationTime.dwHighDateTime=0x1d5dd98, ftLastAccessTime.dwLowDateTime=0x35481b10, ftLastAccessTime.dwHighDateTime=0x1d5d857, ftLastWriteTime.dwLowDateTime=0x35481b10, ftLastWriteTime.dwHighDateTime=0x1d5d857, nFileSizeHigh=0x0, nFileSizeLow=0x13a96, dwReserved0=0x0, dwReserved1=0x0, cFileName="EJyCCMuT1.png", cAlternateFileName="EJYCCM~1.PNG")) returned 1 [0125.052] wcscmp (_String1="EJyCCMuT1.png", _String2=".") returned 1 [0125.052] wcscmp (_String1="EJyCCMuT1.png", _String2="..") returned 1 [0125.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee06b8 [0125.053] wcscpy (in: _Dest=0x3ee06b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.053] wcscat (in: _Dest=0x3ee06b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.053] wcscat (in: _Dest=0x3ee06b8, _Source="EJyCCMuT1.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png" [0125.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee06b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0125.056] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55d63e60, ftCreationTime.dwHighDateTime=0x1d5db23, ftLastAccessTime.dwLowDateTime=0x66123960, ftLastAccessTime.dwHighDateTime=0x1d5df91, ftLastWriteTime.dwLowDateTime=0x66123960, ftLastWriteTime.dwHighDateTime=0x1d5df91, nFileSizeHigh=0x0, nFileSizeLow=0x14e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HnPNtCA VKOCQ6Lgo.mp3", cAlternateFileName="HNPNTC~1.MP3")) returned 1 [0125.056] wcscmp (_String1="HnPNtCA VKOCQ6Lgo.mp3", _String2=".") returned 1 [0125.056] wcscmp (_String1="HnPNtCA VKOCQ6Lgo.mp3", _String2="..") returned 1 [0125.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e3b018 [0125.056] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.056] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.056] wcscat (in: _Dest=0x3e3b018, _Source="HnPNtCA VKOCQ6Lgo.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HnPNtCA VKOCQ6Lgo.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HnPNtCA VKOCQ6Lgo.mp3" [0125.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3b018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0125.058] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0125.059] wcscmp (_String1="Identities", _String2=".") returned 1 [0125.059] wcscmp (_String1="Identities", _String2="..") returned 1 [0125.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7088 [0125.059] wcscpy (in: _Dest=0x2fe7088, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.059] wcscat (in: _Dest=0x2fe7088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.059] wcscat (in: _Dest=0x2fe7088, _Source="Identities" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" [0125.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe7088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0125.061] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7c10c70, ftCreationTime.dwHighDateTime=0x1d5da62, ftLastAccessTime.dwLowDateTime=0xe9f95f30, ftLastAccessTime.dwHighDateTime=0x1d5dc56, ftLastWriteTime.dwLowDateTime=0xe9f95f30, ftLastWriteTime.dwHighDateTime=0x1d5dc56, nFileSizeHigh=0x0, nFileSizeLow=0x129b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="JclZ.wav", cAlternateFileName="")) returned 1 [0125.061] wcscmp (_String1="JclZ.wav", _String2=".") returned 1 [0125.061] wcscmp (_String1="JclZ.wav", _String2="..") returned 1 [0125.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe70e8 [0125.061] wcscpy (in: _Dest=0x2fe70e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.061] wcscat (in: _Dest=0x2fe70e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.061] wcscat (in: _Dest=0x2fe70e8, _Source="JclZ.wav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\JclZ.wav") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\JclZ.wav" [0125.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe70e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0125.066] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74f750c0, ftCreationTime.dwHighDateTime=0x1d5e1ab, ftLastAccessTime.dwLowDateTime=0xc1560d40, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0xc1560d40, ftLastWriteTime.dwHighDateTime=0x1d5e0f1, nFileSizeHigh=0x0, nFileSizeLow=0xfd1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="KJY_e2yhZs.swf", cAlternateFileName="KJY_E2~1.SWF")) returned 1 [0125.066] wcscmp (_String1="KJY_e2yhZs.swf", _String2=".") returned 1 [0125.066] wcscmp (_String1="KJY_e2yhZs.swf", _String2="..") returned 1 [0125.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edff00 [0125.066] wcscpy (in: _Dest=0x3edff00, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.066] wcscat (in: _Dest=0x3edff00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.066] wcscat (in: _Dest=0x3edff00, _Source="KJY_e2yhZs.swf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KJY_e2yhZs.swf") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KJY_e2yhZs.swf" [0125.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edff00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0125.068] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ff282a0, ftCreationTime.dwHighDateTime=0x1d5e028, ftLastAccessTime.dwLowDateTime=0xbcb0d9d0, ftLastAccessTime.dwHighDateTime=0x1d5e670, ftLastWriteTime.dwLowDateTime=0xbcb0d9d0, ftLastWriteTime.dwHighDateTime=0x1d5e670, nFileSizeHigh=0x0, nFileSizeLow=0x17afb, dwReserved0=0x0, dwReserved1=0x0, cFileName="KTPF3a_0BBExX5rwTf-U.png", cAlternateFileName="KTPF3A~1.PNG")) returned 1 [0125.068] wcscmp (_String1="KTPF3a_0BBExX5rwTf-U.png", _String2=".") returned 1 [0125.068] wcscmp (_String1="KTPF3a_0BBExX5rwTf-U.png", _String2="..") returned 1 [0125.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1ab18 [0125.068] wcscpy (in: _Dest=0x3e1ab18, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.068] wcscat (in: _Dest=0x3e1ab18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.068] wcscat (in: _Dest=0x3e1ab18, _Source="KTPF3a_0BBExX5rwTf-U.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png" [0125.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ab18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0125.069] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0125.069] wcscmp (_String1="Macromedia", _String2=".") returned 1 [0125.070] wcscmp (_String1="Macromedia", _String2="..") returned 1 [0125.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7148 [0125.070] wcscpy (in: _Dest=0x2fe7148, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.070] wcscat (in: _Dest=0x2fe7148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.070] wcscat (in: _Dest=0x2fe7148, _Source="Macromedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" [0125.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe7148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0125.622] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x87b9a590, ftLastAccessTime.dwHighDateTime=0x1d30234, ftLastWriteTime.dwLowDateTime=0x87b9a590, ftLastWriteTime.dwHighDateTime=0x1d30234, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0125.622] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0125.622] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0125.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe4988 [0125.623] wcscpy (in: _Dest=0x2fe4988, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.623] wcscat (in: _Dest=0x2fe4988, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.623] wcscat (in: _Dest=0x2fe4988, _Source="Microsoft" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Microsoft" [0125.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4988) returned 1 [0125.623] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7b774d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x7e0ad140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7e0ad140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0125.623] wcscmp (_String1="Mozilla", _String2=".") returned 1 [0125.623] wcscmp (_String1="Mozilla", _String2="..") returned 1 [0125.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe4988 [0125.623] wcscpy (in: _Dest=0x2fe4988, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.623] wcscat (in: _Dest=0x2fe4988, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.623] wcscat (in: _Dest=0x2fe4988, _Source="Mozilla" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Mozilla") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Mozilla" [0125.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe4988) returned 1 [0125.623] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b493d70, ftCreationTime.dwHighDateTime=0x1d5ded7, ftLastAccessTime.dwLowDateTime=0xeb8ecf50, ftLastAccessTime.dwHighDateTime=0x1d5dde2, ftLastWriteTime.dwLowDateTime=0xeb8ecf50, ftLastWriteTime.dwHighDateTime=0x1d5dde2, nFileSizeHigh=0x0, nFileSizeLow=0x11865, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxId4_L3NmN8nSOye_t-.pps", cAlternateFileName="MXID4_~1.PPS")) returned 1 [0125.623] wcscmp (_String1="mxId4_L3NmN8nSOye_t-.pps", _String2=".") returned 1 [0125.623] wcscmp (_String1="mxId4_L3NmN8nSOye_t-.pps", _String2="..") returned 1 [0125.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5d70 [0125.623] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0125.624] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0125.624] wcscat (in: _Dest=0x3da5d70, _Source="mxId4_L3NmN8nSOye_t-.pps" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mxId4_L3NmN8nSOye_t-.pps") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mxId4_L3NmN8nSOye_t-.pps" [0132.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0132.358] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf0500, ftCreationTime.dwHighDateTime=0x1d5e7f1, ftLastAccessTime.dwLowDateTime=0x9ce2b6d0, ftLastAccessTime.dwHighDateTime=0x1d5d84e, ftLastWriteTime.dwLowDateTime=0x9ce2b6d0, ftLastWriteTime.dwHighDateTime=0x1d5d84e, nFileSizeHigh=0x0, nFileSizeLow=0xdd0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="nVvUwxkVm9S.bmp", cAlternateFileName="NVVUWX~1.BMP")) returned 1 [0132.358] wcscmp (_String1="nVvUwxkVm9S.bmp", _String2=".") returned 1 [0132.358] wcscmp (_String1="nVvUwxkVm9S.bmp", _String2="..") returned 1 [0132.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a263f8 [0132.358] wcscpy (in: _Dest=0x7a263f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.358] wcscat (in: _Dest=0x7a263f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.358] wcscat (in: _Dest=0x7a263f8, _Source="nVvUwxkVm9S.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp" [0132.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0132.360] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x190d2260, ftCreationTime.dwHighDateTime=0x1d5d906, ftLastAccessTime.dwLowDateTime=0xeba98b0, ftLastAccessTime.dwHighDateTime=0x1d5e1f3, ftLastWriteTime.dwLowDateTime=0xeba98b0, ftLastWriteTime.dwHighDateTime=0x1d5e1f3, nFileSizeHigh=0x0, nFileSizeLow=0x7151, dwReserved0=0x0, dwReserved1=0x0, cFileName="NZajeYu2.mp3", cAlternateFileName="")) returned 1 [0132.360] wcscmp (_String1="NZajeYu2.mp3", _String2=".") returned 1 [0132.360] wcscmp (_String1="NZajeYu2.mp3", _String2="..") returned 1 [0132.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee09f8 [0132.360] wcscpy (in: _Dest=0x3ee09f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.360] wcscat (in: _Dest=0x3ee09f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.360] wcscat (in: _Dest=0x3ee09f8, _Source="NZajeYu2.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NZajeYu2.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NZajeYu2.mp3" [0132.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee09f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0132.362] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2e143a0, ftCreationTime.dwHighDateTime=0x1d5e012, ftLastAccessTime.dwLowDateTime=0xa4c782a0, ftLastAccessTime.dwHighDateTime=0x1d5dfb9, ftLastWriteTime.dwLowDateTime=0xa4c782a0, ftLastWriteTime.dwHighDateTime=0x1d5dfb9, nFileSizeHigh=0x0, nFileSizeLow=0x23ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Or2asX-5Z d8by.png", cAlternateFileName="OR2ASX~1.PNG")) returned 1 [0132.362] wcscmp (_String1="Or2asX-5Z d8by.png", _String2=".") returned 1 [0132.362] wcscmp (_String1="Or2asX-5Z d8by.png", _String2="..") returned 1 [0132.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26698 [0132.362] wcscpy (in: _Dest=0x7a26698, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.362] wcscat (in: _Dest=0x7a26698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.362] wcscat (in: _Dest=0x7a26698, _Source="Or2asX-5Z d8by.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png" [0132.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0132.364] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6838a2f0, ftCreationTime.dwHighDateTime=0x1d5e780, ftLastAccessTime.dwLowDateTime=0xe28f99a0, ftLastAccessTime.dwHighDateTime=0x1d5dfc9, ftLastWriteTime.dwLowDateTime=0xe28f99a0, ftLastWriteTime.dwHighDateTime=0x1d5dfc9, nFileSizeHigh=0x0, nFileSizeLow=0xb839, dwReserved0=0x0, dwReserved1=0x0, cFileName="pW7uGXwc1Wcv5Ubl.mp3", cAlternateFileName="PW7UGX~1.MP3")) returned 1 [0132.364] wcscmp (_String1="pW7uGXwc1Wcv5Ubl.mp3", _String2=".") returned 1 [0132.364] wcscmp (_String1="pW7uGXwc1Wcv5Ubl.mp3", _String2="..") returned 1 [0132.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f0b0 [0132.364] wcscpy (in: _Dest=0x3f3f0b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.364] wcscat (in: _Dest=0x3f3f0b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.364] wcscat (in: _Dest=0x3f3f0b0, _Source="pW7uGXwc1Wcv5Ubl.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\pW7uGXwc1Wcv5Ubl.mp3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\pW7uGXwc1Wcv5Ubl.mp3" [0132.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0132.366] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbee55460, ftCreationTime.dwHighDateTime=0x1d5e3af, ftLastAccessTime.dwLowDateTime=0xd56406a0, ftLastAccessTime.dwHighDateTime=0x1d5e706, ftLastWriteTime.dwLowDateTime=0xd56406a0, ftLastWriteTime.dwHighDateTime=0x1d5e706, nFileSizeHigh=0x0, nFileSizeLow=0x5ed9, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTAjqLttKGE1.avi", cAlternateFileName="TTAJQL~1.AVI")) returned 1 [0132.366] wcscmp (_String1="TTAjqLttKGE1.avi", _String2=".") returned 1 [0132.366] wcscmp (_String1="TTAjqLttKGE1.avi", _String2="..") returned 1 [0132.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26628 [0132.366] wcscpy (in: _Dest=0x7a26628, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.366] wcscat (in: _Dest=0x7a26628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.366] wcscat (in: _Dest=0x7a26628, _Source="TTAjqLttKGE1.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TTAjqLttKGE1.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TTAjqLttKGE1.avi" [0132.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0132.368] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xedf5a600, ftCreationTime.dwHighDateTime=0x1d5e12b, ftLastAccessTime.dwLowDateTime=0x3bee0c0, ftLastAccessTime.dwHighDateTime=0x1d5dd79, ftLastWriteTime.dwLowDateTime=0x3bee0c0, ftLastWriteTime.dwHighDateTime=0x1d5dd79, nFileSizeHigh=0x0, nFileSizeLow=0x28e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ulr9gbLcwE.png", cAlternateFileName="ULR9GB~1.PNG")) returned 1 [0132.368] wcscmp (_String1="Ulr9gbLcwE.png", _String2=".") returned 1 [0132.368] wcscmp (_String1="Ulr9gbLcwE.png", _String2="..") returned 1 [0132.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf2d0 [0132.368] wcscpy (in: _Dest=0x3edf2d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.368] wcscat (in: _Dest=0x3edf2d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.368] wcscat (in: _Dest=0x3edf2d0, _Source="Ulr9gbLcwE.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png" [0132.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0132.370] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5fc48b20, ftCreationTime.dwHighDateTime=0x1d5df33, ftLastAccessTime.dwLowDateTime=0x219c06a0, ftLastAccessTime.dwHighDateTime=0x1d5e17e, ftLastWriteTime.dwLowDateTime=0x219c06a0, ftLastWriteTime.dwHighDateTime=0x1d5e17e, nFileSizeHigh=0x0, nFileSizeLow=0x14f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="uZNZacDeTv9aahHHvDr.avi", cAlternateFileName="UZNZAC~1.AVI")) returned 1 [0132.370] wcscmp (_String1="uZNZacDeTv9aahHHvDr.avi", _String2=".") returned 1 [0132.370] wcscmp (_String1="uZNZacDeTv9aahHHvDr.avi", _String2="..") returned 1 [0132.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a018 [0132.370] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.370] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.370] wcscat (in: _Dest=0x3e1a018, _Source="uZNZacDeTv9aahHHvDr.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\uZNZacDeTv9aahHHvDr.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\uZNZacDeTv9aahHHvDr.avi" [0132.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0132.372] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f538e40, ftCreationTime.dwHighDateTime=0x1d5e09c, ftLastAccessTime.dwLowDateTime=0xd5e35b60, ftLastAccessTime.dwHighDateTime=0x1d5de98, ftLastWriteTime.dwLowDateTime=0xd5e35b60, ftLastWriteTime.dwHighDateTime=0x1d5de98, nFileSizeHigh=0x0, nFileSizeLow=0x15d31, dwReserved0=0x0, dwReserved1=0x0, cFileName="WOJjXGS.jpg", cAlternateFileName="")) returned 1 [0132.372] wcscmp (_String1="WOJjXGS.jpg", _String2=".") returned 1 [0132.372] wcscmp (_String1="WOJjXGS.jpg", _String2="..") returned 1 [0132.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee1218 [0132.372] wcscpy (in: _Dest=0x3ee1218, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.372] wcscat (in: _Dest=0x3ee1218, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.372] wcscat (in: _Dest=0x3ee1218, _Source="WOJjXGS.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg" [0132.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee1218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0132.374] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d24efd0, ftCreationTime.dwHighDateTime=0x1d5e2d7, ftLastAccessTime.dwLowDateTime=0x297a3ae0, ftLastAccessTime.dwHighDateTime=0x1d5e066, ftLastWriteTime.dwLowDateTime=0x297a3ae0, ftLastWriteTime.dwHighDateTime=0x1d5e066, nFileSizeHigh=0x0, nFileSizeLow=0x26ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="X1Rp.flv", cAlternateFileName="")) returned 1 [0132.374] wcscmp (_String1="X1Rp.flv", _String2=".") returned 1 [0132.374] wcscmp (_String1="X1Rp.flv", _String2="..") returned 1 [0132.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6ae8 [0132.375] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.375] wcscat (in: _Dest=0x2fe6ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.375] wcscat (in: _Dest=0x2fe6ae8, _Source="X1Rp.flv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\X1Rp.flv") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\X1Rp.flv" [0132.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0132.376] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x569dae80, ftCreationTime.dwHighDateTime=0x1d5da9e, ftLastAccessTime.dwLowDateTime=0x782ecbb0, ftLastAccessTime.dwHighDateTime=0x1d5df53, ftLastWriteTime.dwLowDateTime=0x782ecbb0, ftLastWriteTime.dwHighDateTime=0x1d5df53, nFileSizeHigh=0x0, nFileSizeLow=0x6398, dwReserved0=0x0, dwReserved1=0x0, cFileName="xX5sdZJvrq.pptx", cAlternateFileName="XX5SDZ~1.PPT")) returned 1 [0132.376] wcscmp (_String1="xX5sdZJvrq.pptx", _String2=".") returned 1 [0132.376] wcscmp (_String1="xX5sdZJvrq.pptx", _String2="..") returned 1 [0132.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26008 [0132.377] wcscpy (in: _Dest=0x7a26008, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.377] wcscat (in: _Dest=0x7a26008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.377] wcscat (in: _Dest=0x7a26008, _Source="xX5sdZJvrq.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\xX5sdZJvrq.pptx") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\xX5sdZJvrq.pptx" [0132.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0132.378] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd7b7940, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x71b8cb10, ftLastAccessTime.dwHighDateTime=0x1d5e2bd, ftLastWriteTime.dwLowDateTime=0x71b8cb10, ftLastWriteTime.dwHighDateTime=0x1d5e2bd, nFileSizeHigh=0x0, nFileSizeLow=0x132e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="YcBT5ILWPYB.png", cAlternateFileName="YCBT5I~1.PNG")) returned 1 [0132.378] wcscmp (_String1="YcBT5ILWPYB.png", _String2=".") returned 1 [0132.378] wcscmp (_String1="YcBT5ILWPYB.png", _String2="..") returned 1 [0132.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26d98 [0132.379] wcscpy (in: _Dest=0x7a26d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.379] wcscat (in: _Dest=0x7a26d98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.379] wcscat (in: _Dest=0x7a26d98, _Source="YcBT5ILWPYB.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png" [0132.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad8 [0132.380] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeecf6ab0, ftCreationTime.dwHighDateTime=0x1d5e21c, ftLastAccessTime.dwLowDateTime=0x8adc2b0, ftLastAccessTime.dwHighDateTime=0x1d5e303, ftLastWriteTime.dwLowDateTime=0x8adc2b0, ftLastWriteTime.dwHighDateTime=0x1d5e303, nFileSizeHigh=0x0, nFileSizeLow=0xb785, dwReserved0=0x0, dwReserved1=0x0, cFileName="YlixU3KMaw.ots", cAlternateFileName="YLIXU3~1.OTS")) returned 1 [0132.380] wcscmp (_String1="YlixU3KMaw.ots", _String2=".") returned 1 [0132.380] wcscmp (_String1="YlixU3KMaw.ots", _String2="..") returned 1 [0132.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0ac8 [0132.381] wcscpy (in: _Dest=0x3ee0ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.381] wcscat (in: _Dest=0x3ee0ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.381] wcscat (in: _Dest=0x3ee0ac8, _Source="YlixU3KMaw.ots" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YlixU3KMaw.ots") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YlixU3KMaw.ots" [0132.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1adc [0132.382] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x78ac08e0, ftCreationTime.dwHighDateTime=0x1d5e891, ftLastAccessTime.dwLowDateTime=0x6d195c70, ftLastAccessTime.dwHighDateTime=0x1d5d974, ftLastWriteTime.dwLowDateTime=0x6d195c70, ftLastWriteTime.dwHighDateTime=0x1d5d974, nFileSizeHigh=0x0, nFileSizeLow=0xf422, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ze9H4j0.bmp", cAlternateFileName="")) returned 1 [0132.382] wcscmp (_String1="Ze9H4j0.bmp", _String2=".") returned 1 [0132.383] wcscmp (_String1="Ze9H4j0.bmp", _String2="..") returned 1 [0132.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf4d8 [0132.383] wcscpy (in: _Dest=0x3edf4d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.383] wcscat (in: _Dest=0x3edf4d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.383] wcscat (in: _Dest=0x3edf4d8, _Source="Ze9H4j0.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp" [0132.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0132.385] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9e78550, ftCreationTime.dwHighDateTime=0x1d5e0be, ftLastAccessTime.dwLowDateTime=0x64b2c20, ftLastAccessTime.dwHighDateTime=0x1d5d8f3, ftLastWriteTime.dwLowDateTime=0x64b2c20, ftLastWriteTime.dwHighDateTime=0x1d5d8f3, nFileSizeHigh=0x0, nFileSizeLow=0xce6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zeqt0 q7CNEAosBiQXf7.avi", cAlternateFileName="ZEQT0Q~1.AVI")) returned 1 [0132.385] wcscmp (_String1="Zeqt0 q7CNEAosBiQXf7.avi", _String2=".") returned 1 [0132.385] wcscmp (_String1="Zeqt0 q7CNEAosBiQXf7.avi", _String2="..") returned 1 [0132.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a398 [0132.385] wcscpy (in: _Dest=0x3e1a398, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming" [0132.385] wcscat (in: _Dest=0x3e1a398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0132.385] wcscat (in: _Dest=0x3e1a398, _Source="Zeqt0 q7CNEAosBiQXf7.avi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Zeqt0 q7CNEAosBiQXf7.avi") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Zeqt0 q7CNEAosBiQXf7.avi" [0132.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae4 [0132.386] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9e78550, ftCreationTime.dwHighDateTime=0x1d5e0be, ftLastAccessTime.dwLowDateTime=0x64b2c20, ftLastAccessTime.dwHighDateTime=0x1d5d8f3, ftLastWriteTime.dwLowDateTime=0x64b2c20, ftLastWriteTime.dwHighDateTime=0x1d5d8f3, nFileSizeHigh=0x0, nFileSizeLow=0xce6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zeqt0 q7CNEAosBiQXf7.avi", cAlternateFileName="ZEQT0Q~1.AVI")) returned 0 [0132.387] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0132.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0132.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e588d8) returned 1 [0132.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e590f8) returned 1 Thread: id = 369 os_tid = 0xeb0 [0122.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e58e28 [0122.383] wcscpy (in: _Dest=0x3e58e28, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0122.383] wcscat (in: _Dest=0x3e58e28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0122.384] wcscat (in: _Dest=0x3e58e28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\*" [0122.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0122.384] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0122.384] wcscmp (_String1=".", _String2=".") returned 0 [0122.384] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.384] wcscmp (_String1="..", _String2=".") returned 1 [0122.384] wcscmp (_String1="..", _String2="..") returned 0 [0122.384] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x78028160, ftLastWriteTime.dwHighDateTime=0x1d2f584, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.384] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0122.384] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0122.385] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfe16b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7cfe16b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d3737b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0122.385] wcscmp (_String1="Suggested Sites.url", _String2=".") returned 1 [0122.385] wcscmp (_String1="Suggested Sites.url", _String2="..") returned 1 [0122.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3490b0 [0122.385] wcscpy (in: _Dest=0x3490b0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0122.385] wcscat (in: _Dest=0x3490b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0122.385] wcscat (in: _Dest=0x3490b0, _Source="Suggested Sites.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" [0122.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3490b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0122.995] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3a0830, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0122.995] wcscmp (_String1="Web Slice Gallery.url", _String2=".") returned 1 [0122.995] wcscmp (_String1="Web Slice Gallery.url", _String2="..") returned 1 [0122.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f470 [0122.995] wcscpy (in: _Dest=0x3f3f470, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links") returned="C:\\Users\\EEBsYm5\\Favorites\\Links" [0122.995] wcscat (in: _Dest=0x3f3f470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0122.996] wcscat (in: _Dest=0x3f3f470, _Source="Web Slice Gallery.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" [0122.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb8 [0122.997] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3a0830, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0122.997] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0122.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0122.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58e28) returned 1 [0122.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de64c8) returned 1 Thread: id = 370 os_tid = 0xdd0 [0122.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0928 [0122.390] wcscpy (in: _Dest=0x3ee0928, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0122.390] wcscat (in: _Dest=0x3ee0928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0122.390] wcscat (in: _Dest=0x3ee0928, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\*" [0122.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0122.390] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0122.626] wcscmp (_String1=".", _String2=".") returned 0 [0122.626] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.626] wcscmp (_String1="..", _String2=".") returned 1 [0122.626] wcscmp (_String1="..", _String2="..") returned 0 [0122.626] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2bbff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0122.626] wcscmp (_String1="IE Add-on site.url", _String2=".") returned 1 [0122.626] wcscmp (_String1="IE Add-on site.url", _String2="..") returned 1 [0122.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44330 [0122.626] wcscpy (in: _Dest=0x3d44330, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0122.626] wcscat (in: _Dest=0x3d44330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0122.627] wcscat (in: _Dest=0x3d44330, _Source="IE Add-on site.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" [0122.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0122.806] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2bbff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0122.806] wcscmp (_String1="IE site on Microsoft.com.url", _String2=".") returned 1 [0122.806] wcscmp (_String1="IE site on Microsoft.com.url", _String2="..") returned 1 [0122.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5c20 [0122.806] wcscpy (in: _Dest=0x3df5c20, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0122.806] wcscat (in: _Dest=0x3df5c20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0122.806] wcscat (in: _Dest=0x3df5c20, _Source="IE site on Microsoft.com.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" [0122.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0122.807] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903b950, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x903b950, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2bbff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0122.807] wcscmp (_String1="Microsoft At Home.url", _String2=".") returned 1 [0122.807] wcscmp (_String1="Microsoft At Home.url", _String2="..") returned 1 [0122.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df25b8 [0122.807] wcscpy (in: _Dest=0x3df25b8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0122.807] wcscat (in: _Dest=0x3df25b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0122.808] wcscat (in: _Dest=0x3df25b8, _Source="Microsoft At Home.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" [0122.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df25b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0122.809] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0122.809] wcscmp (_String1="Microsoft At Work.url", _String2=".") returned 1 [0122.809] wcscmp (_String1="Microsoft At Work.url", _String2="..") returned 1 [0122.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d443c0 [0122.809] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0122.809] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0122.809] wcscat (in: _Dest=0x3d443c0, _Source="Microsoft At Work.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" [0122.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d443c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0122.810] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0122.810] wcscmp (_String1="Microsoft Store.url", _String2=".") returned 1 [0122.810] wcscmp (_String1="Microsoft Store.url", _String2="..") returned 1 [0122.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44450 [0122.810] wcscpy (in: _Dest=0x3d44450, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites" [0122.810] wcscat (in: _Dest=0x3d44450, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0122.810] wcscat (in: _Dest=0x3d44450, _Source="Microsoft Store.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" [0122.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0122.812] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0122.812] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0122.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0122.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0928) returned 1 [0122.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0240) returned 1 Thread: id = 371 os_tid = 0xdd8 [0122.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6a28 [0122.396] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0122.396] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0122.396] wcscat (in: _Dest=0x2fe6a28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\*" [0122.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0122.396] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f57110, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0122.627] wcscmp (_String1=".", _String2=".") returned 0 [0122.627] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f57110, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x29130a86, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.627] wcscmp (_String1="..", _String2=".") returned 1 [0122.627] wcscmp (_String1="..", _String2="..") returned 0 [0122.627] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0122.627] wcscmp (_String1="MSN Autos.url", _String2=".") returned 1 [0122.627] wcscmp (_String1="MSN Autos.url", _String2="..") returned 1 [0122.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f128 [0122.627] wcscpy (in: _Dest=0x3f3f128, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0122.628] wcscat (in: _Dest=0x3f3f128, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0122.628] wcscat (in: _Dest=0x3f3f128, _Source="MSN Autos.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" [0123.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0123.799] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0123.799] wcscmp (_String1="MSN Entertainment.url", _String2=".") returned 1 [0123.799] wcscmp (_String1="MSN Entertainment.url", _String2="..") returned 1 [0123.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb99a0 [0123.799] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0123.799] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0123.799] wcscat (in: _Dest=0x3eb99a0, _Source="MSN Entertainment.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" [0123.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0123.800] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0123.800] wcscmp (_String1="MSN Money.url", _String2=".") returned 1 [0123.800] wcscmp (_String1="MSN Money.url", _String2="..") returned 1 [0123.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f8a8 [0123.801] wcscpy (in: _Dest=0x3f3f8a8, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0123.801] wcscat (in: _Dest=0x3f3f8a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0123.801] wcscat (in: _Dest=0x3f3f8a8, _Source="MSN Money.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" [0123.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0123.802] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0123.802] wcscmp (_String1="MSN Sports.url", _String2=".") returned 1 [0123.802] wcscmp (_String1="MSN Sports.url", _String2="..") returned 1 [0123.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f920 [0123.802] wcscpy (in: _Dest=0x3f3f920, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0123.802] wcscat (in: _Dest=0x3f3f920, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0123.802] wcscat (in: _Dest=0x3f3f920, _Source="MSN Sports.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" [0123.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0123.803] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0123.803] wcscmp (_String1="MSN.url", _String2=".") returned 1 [0123.803] wcscmp (_String1="MSN.url", _String2="..") returned 1 [0123.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee10e0 [0123.803] wcscpy (in: _Dest=0x3ee10e0, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0123.803] wcscat (in: _Dest=0x3ee10e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0123.803] wcscat (in: _Dest=0x3ee10e0, _Source="MSN.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" [0123.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee10e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0123.805] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0123.805] wcscmp (_String1="MSNBC News.url", _String2=".") returned 1 [0123.805] wcscmp (_String1="MSNBC News.url", _String2="..") returned 1 [0123.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f998 [0123.805] wcscpy (in: _Dest=0x3f3f998, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites" [0123.805] wcscat (in: _Dest=0x3f3f998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0123.805] wcscat (in: _Dest=0x3f3f998, _Source="MSNBC News.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" [0123.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0123.806] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee4cf0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ee4cf0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0123.806] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0123.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0123.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0123.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15118) returned 1 Thread: id = 372 os_tid = 0xec0 [0122.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6a88 [0122.400] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0122.400] wcscat (in: _Dest=0x2fe6a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0122.400] wcscat (in: _Dest=0x2fe6a88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\*") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\*" [0122.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52090 [0122.402] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\*", lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0122.628] wcscmp (_String1=".", _String2=".") returned 0 [0122.628] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x2917cd46, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.628] wcscmp (_String1="..", _String2=".") returned 1 [0122.628] wcscmp (_String1="..", _String2="..") returned 0 [0122.628] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0122.628] wcscmp (_String1="Get Windows Live.url", _String2=".") returned 1 [0122.628] wcscmp (_String1="Get Windows Live.url", _String2="..") returned 1 [0122.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8ce0 [0122.629] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0122.629] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0122.629] wcscat (in: _Dest=0x3eb8ce0, _Source="Get Windows Live.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" [0141.012] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\get windows live.url")) returned 0x20 [0141.013] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url", dwFileAttributes=0x20) returned 1 [0141.013] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd50 [0141.014] GetFileSizeEx (in: hFile=0xd50, lpFileSize=0x844fcf4 | out: lpFileSize=0x844fcf4*=133) returned 1 [0141.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddad8 [0141.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd9c0 [0141.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd948 [0141.014] NtQuerySystemTime (in: CurrentTime=0x844fc68 | out: CurrentTime=0x844fc68*=132462177202116000) returned 0x0 [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x772b45ff [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x1657ca5f [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x71142ff4 [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x5823b911 [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x6f8bc204 [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x688bcaed [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x5ecb3b29 [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x1d127acd [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x7e9e4db6 [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x66797a60 [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x683c9e40 [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x3aca3e78 [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x5e04dbdb [0141.014] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x6e4962a4 [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x7fcc5191 [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x4f8a5b1f [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x63a88a50 [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x41e824ce [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x5c0288f7 [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x25fb01ae [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x18f40d05 [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x7ff3b8bd [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x55b5d6d4 [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x6789ecaa [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x46c93d01 [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x38ce6946 [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x28ba195e [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x980ca6e [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x47af9832 [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x1a4a108e [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x5b85bf60 [0141.015] RtlRandomEx (in: Seed=0x844fc60 | out: Seed=0x844fc60) returned 0x3c1143b5 [0141.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddad8) returned 1 [0141.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9a900 [0141.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a930f0 [0141.027] ReadFile (in: hFile=0xd50, lpBuffer=0x7a9a900, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x844fc5c, lpOverlapped=0x0 | out: lpBuffer=0x7a9a900*, lpNumberOfBytesRead=0x844fc5c*=0x85, lpOverlapped=0x0) returned 1 [0141.029] SetFilePointerEx (in: hFile=0xd50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.029] WriteFile (in: hFile=0xd50, lpBuffer=0x7a930f0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x844fc60, lpOverlapped=0x0 | out: lpBuffer=0x7a930f0*, lpNumberOfBytesWritten=0x844fc60*=0x85, lpOverlapped=0x0) returned 1 [0142.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0142.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0142.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0142.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a930f0) returned 1 [0142.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9a900) returned 1 [0142.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0142.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0142.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad8030 [0142.925] SetFilePointerEx (in: hFile=0xd50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.925] WriteFile (in: hFile=0xd50, lpBuffer=0x3d55a90*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x844fce8, lpOverlapped=0x0 | out: lpBuffer=0x3d55a90*, lpNumberOfBytesWritten=0x844fce8*=0x11a, lpOverlapped=0x0) returned 1 [0143.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85158 [0143.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edda38 [0143.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edda38) returned 1 [0143.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0143.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edda38 [0143.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edda88 [0143.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edda88) returned 1 [0143.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0143.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe14a8 [0143.018] sprintf (in: _Dest=0x2fe14a8, _Format="%c%c" | out: _Dest="c3") returned 2 [0143.018] sprintf (in: _Dest=0x2fe14aa, _Format="%c%c" | out: _Dest="23") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14ac, _Format="%c%c" | out: _Dest="b0") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14ae, _Format="%c%c" | out: _Dest="53") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14b0, _Format="%c%c" | out: _Dest="ca") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14b2, _Format="%c%c" | out: _Dest="61") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14b4, _Format="%c%c" | out: _Dest="4e") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14b6, _Format="%c%c" | out: _Dest="7b") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14b8, _Format="%c%c" | out: _Dest="19") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14ba, _Format="%c%c" | out: _Dest="e7") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14bc, _Format="%c%c" | out: _Dest="ad") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14be, _Format="%c%c" | out: _Dest="68") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14c0, _Format="%c%c" | out: _Dest="df") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14c2, _Format="%c%c" | out: _Dest="ab") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14c4, _Format="%c%c" | out: _Dest="3a") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14c6, _Format="%c%c" | out: _Dest="2b") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14c8, _Format="%c%c" | out: _Dest="d7") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14ca, _Format="%c%c" | out: _Dest="ec") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14cc, _Format="%c%c" | out: _Dest="73") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14ce, _Format="%c%c" | out: _Dest="90") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14d0, _Format="%c%c" | out: _Dest="3e") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14d2, _Format="%c%c" | out: _Dest="77") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14d4, _Format="%c%c" | out: _Dest="47") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14d6, _Format="%c%c" | out: _Dest="e6") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14d8, _Format="%c%c" | out: _Dest="0c") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14da, _Format="%c%c" | out: _Dest="cb") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14dc, _Format="%c%c" | out: _Dest="7c") returned 2 [0143.019] sprintf (in: _Dest=0x2fe14de, _Format="%c%c" | out: _Dest="a4") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14e0, _Format="%c%c" | out: _Dest="d9") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14e2, _Format="%c%c" | out: _Dest="10") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14e4, _Format="%c%c" | out: _Dest="5e") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14e6, _Format="%c%c" | out: _Dest="04") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14e8, _Format="%c%c" | out: _Dest="bd") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14ea, _Format="%c%c" | out: _Dest="dd") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14ec, _Format="%c%c" | out: _Dest="6f") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14ee, _Format="%c%c" | out: _Dest="fe") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14f0, _Format="%c%c" | out: _Dest="0b") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14f2, _Format="%c%c" | out: _Dest="b4") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14f4, _Format="%c%c" | out: _Dest="18") returned 2 [0143.020] sprintf (in: _Dest=0x2fe14f6, _Format="%c%c" | out: _Dest="3e") returned 2 [0143.020] RtlInitAnsiString (in: DestinationString=0x844fc70, SourceString="c323b053ca614e7b19e7ad68dfab3a2bd7ec73903e7747e60ccb7ca4d9105e04bddd6ffe0bb4183e" | out: DestinationString="c323b053ca614e7b19e7ad68dfab3a2bd7ec73903e7747e60ccb7ca4d9105e04bddd6ffe0bb4183e") [0143.020] RtlAnsiStringToUnicodeString (in: DestinationString=0x844fc68, SourceString="c323b053ca614e7b19e7ad68dfab3a2bd7ec73903e7747e60ccb7ca4d9105e04bddd6ffe0bb4183e", AllocateDestinationString=1 | out: DestinationString="c323b053ca614e7b19e7ad68dfab3a2bd7ec73903e7747e60ccb7ca4d9105e04bddd6ffe0bb4183e") returned 0x0 [0143.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bbe8 [0143.020] wcscat (in: _Dest=0x3d45770, _Source="c323b053ca614e7b19e7" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\c323b053ca614e7b19e7") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\c323b053ca614e7b19e7" [0143.020] wcscat (in: _Dest=0x3d45770, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\c323b053ca614e7b19e7.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\c323b053ca614e7b19e7.68814f" [0143.020] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\c323b053ca614e7b19e7.68814f", NtPathName=0x844fc60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\c323b053ca614e7b19e7.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e330 [0143.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e330) returned 1 [0143.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a57a70) returned 1 [0143.110] NtQueryInformationFile (in: FileHandle=0xd50, IoStatusBlock=0x844fc38, FileInformation=0x844fc40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x844fc38, FileInformation=0x844fc40) returned 0x0 [0143.110] NtSetInformationFile (FileHandle=0xd50, IoStatusBlock=0x844fc38, FileInformation=0x844fc40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0143.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0143.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 [0143.129] FlushFileBuffers (hFile=0xd50) returned 1 [0143.329] CloseHandle (hObject=0xd50) returned 1 [0143.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a018 [0143.988] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0143.988] wcscat (in: _Dest=0x3e1a018, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt" [0143.988] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\68814f-readme.txt")) returned 0xffffffff [0143.988] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ba4 [0144.069] WriteFile (in: hFile=0x1ba4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x844fc7c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x844fc7c*=0x8b9, lpOverlapped=0x0) returned 1 [0144.071] CloseHandle (hObject=0x1ba4) returned 1 [0144.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 [0144.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 [0144.071] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd3082b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0144.071] wcscmp (_String1="Windows Live Gallery.url", _String2=".") returned 1 [0144.071] wcscmp (_String1="Windows Live Gallery.url", _String2="..") returned 1 [0144.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45ec0 [0144.072] wcscpy (in: _Dest=0x3d45ec0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0144.072] wcscat (in: _Dest=0x3d45ec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0144.072] wcscat (in: _Dest=0x3d45ec0, _Source="Windows Live Gallery.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" [0146.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0146.091] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0146.092] wcscmp (_String1="Windows Live Mail.url", _String2=".") returned 1 [0146.092] wcscmp (_String1="Windows Live Mail.url", _String2="..") returned 1 [0146.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba2a8 [0146.092] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0146.092] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0146.092] wcscat (in: _Dest=0x3eba2a8, _Source="Windows Live Mail.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" [0146.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0146.094] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0146.094] wcscmp (_String1="Windows Live Spaces.url", _String2=".") returned 1 [0146.094] wcscmp (_String1="Windows Live Spaces.url", _String2="..") returned 1 [0146.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0146.094] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live" [0146.094] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0146.094] wcscat (in: _Dest=0x3eb9ef0, _Source="Windows Live Spaces.url" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" [0146.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78 [0146.096] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebeb90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8ebeb90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xd2e2150, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0146.096] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0146.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52090) returned 1 [0146.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 [0146.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14b98) returned 1 Thread: id = 373 os_tid = 0xecc [0122.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e58ec8 [0122.410] wcscpy (in: _Dest=0x3e58ec8, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0122.410] wcscat (in: _Dest=0x3e58ec8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0122.410] wcscat (in: _Dest=0x3e58ec8, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\*") returned="C:\\Users\\Default\\AppData\\Local\\*" [0122.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0122.410] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x79a6290, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c717c5e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066fc0 [0122.412] wcscmp (_String1=".", _String2=".") returned 0 [0122.412] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x79a6290, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c717c5e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.412] wcscmp (_String1="..", _String2=".") returned 1 [0122.412] wcscmp (_String1="..", _String2="..") returned 0 [0122.413] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0122.413] wcscmp (_String1="Application Data", _String2=".") returned 1 [0122.413] wcscmp (_String1="Application Data", _String2="..") returned 1 [0122.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0990 [0122.413] wcscpy (in: _Dest=0x3ee0990, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0122.413] wcscat (in: _Dest=0x3ee0990, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0122.413] wcscat (in: _Dest=0x3ee0990, _Source="Application Data" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data" [0136.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0136.340] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0136.340] wcscmp (_String1="History", _String2=".") returned 1 [0136.340] wcscmp (_String1="History", _String2="..") returned 1 [0136.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e14ca0 [0136.340] wcscpy (in: _Dest=0x3e14ca0, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0136.340] wcscat (in: _Dest=0x3e14ca0, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0136.340] wcscat (in: _Dest=0x3e14ca0, _Source="History" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History" [0136.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0136.341] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x7959fd0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x7959fd0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x7c78a07f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xbd860, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0136.341] wcscmp (_String1="IconCache.db", _String2=".") returned 1 [0136.341] wcscmp (_String1="IconCache.db", _String2="..") returned 1 [0136.341] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa03a7ee, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6c1c570, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x2b4e54c8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0136.341] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0136.341] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0136.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c08 [0136.342] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0136.342] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0136.342] wcscat (in: _Dest=0x2fe6c08, _Source="Microsoft" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Microsoft") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft" [0136.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0136.342] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x771eb30, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x5ac162de, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0136.342] wcscmp (_String1="Temp", _String2=".") returned 1 [0136.342] wcscmp (_String1="Temp", _String2="..") returned 1 [0136.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e84218 [0136.342] wcscpy (in: _Dest=0x3e84218, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0136.342] wcscat (in: _Dest=0x3e84218, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0136.342] wcscat (in: _Dest=0x3e84218, _Source="Temp" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Temp") returned="C:\\Users\\Default\\AppData\\Local\\Temp" [0136.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84218) returned 1 [0136.342] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0136.342] wcscmp (_String1="Temporary Internet Files", _String2=".") returned 1 [0136.342] wcscmp (_String1="Temporary Internet Files", _String2="..") returned 1 [0136.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0136.342] wcscpy (in: _Dest=0x3f3e670, _Source="C:\\Users\\Default\\AppData\\Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local" [0136.342] wcscat (in: _Dest=0x3f3e670, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\") returned="C:\\Users\\Default\\AppData\\Local\\" [0136.342] wcscat (in: _Dest=0x3f3e670, _Source="Temporary Internet Files" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files" [0136.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0136.343] FindNextFileW (in: hFindFile=0x3066fc0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x1763913d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1763913d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1763913d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0136.343] FindClose (in: hFindFile=0x3066fc0 | out: hFindFile=0x3066fc0) returned 1 [0136.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0136.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58ec8) returned 1 [0136.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b78) returned 1 Thread: id = 374 os_tid = 0xed8 [0122.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e59008 [0122.414] wcscpy (in: _Dest=0x3e59008, _Source="C:\\Users\\Default\\AppData\\LocalLow" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow") returned="C:\\Users\\Default\\AppData\\LocalLow" [0122.414] wcscat (in: _Dest=0x3e59008, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow\\") returned="C:\\Users\\Default\\AppData\\LocalLow\\" [0122.414] wcscat (in: _Dest=0x3e59008, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\LocalLow\\*") returned="C:\\Users\\Default\\AppData\\LocalLow\\*" [0122.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52560 [0122.414] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d540 [0122.630] wcscmp (_String1=".", _String2=".") returned 0 [0122.630] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.630] wcscmp (_String1="..", _String2=".") returned 1 [0122.630] wcscmp (_String1="..", _String2="..") returned 0 [0122.630] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bf6410, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bf6410, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x19e18206, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.630] FindClose (in: hFindFile=0x7a2d540 | out: hFindFile=0x7a2d540) returned 1 [0122.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52560) returned 1 [0122.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e59008) returned 1 [0122.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58f68) returned 1 Thread: id = 375 os_tid = 0xe88 [0122.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e58fb8 [0122.415] wcscpy (in: _Dest=0x3e58fb8, _Source="C:\\Users\\Default\\AppData\\Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0122.415] wcscat (in: _Dest=0x3e58fb8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\") returned="C:\\Users\\Default\\AppData\\Roaming\\" [0122.415] wcscat (in: _Dest=0x3e58fb8, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\*" [0122.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a527c8 [0122.416] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d540 [0122.631] wcscmp (_String1=".", _String2=".") returned 0 [0122.631] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa06094d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.632] wcscmp (_String1="..", _String2=".") returned 1 [0122.632] wcscmp (_String1="..", _String2="..") returned 0 [0122.632] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0122.632] wcscmp (_String1="Identities", _String2=".") returned 1 [0122.632] wcscmp (_String1="Identities", _String2="..") returned 1 [0122.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ba8 [0122.632] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Users\\Default\\AppData\\Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0122.632] wcscat (in: _Dest=0x2fe6ba8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\") returned="C:\\Users\\Default\\AppData\\Roaming\\" [0122.632] wcscat (in: _Dest=0x2fe6ba8, _Source="Identities" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities" [0125.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0125.974] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfa086aac, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x216e5f65, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0125.974] wcscmp (_String1="Microsoft", _String2=".") returned 1 [0125.974] wcscmp (_String1="Microsoft", _String2="..") returned 1 [0125.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe3b48 [0125.974] wcscpy (in: _Dest=0x2fe3b48, _Source="C:\\Users\\Default\\AppData\\Roaming" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming") returned="C:\\Users\\Default\\AppData\\Roaming" [0125.974] wcscat (in: _Dest=0x2fe3b48, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\") returned="C:\\Users\\Default\\AppData\\Roaming\\" [0125.974] wcscat (in: _Dest=0x2fe3b48, _Source="Microsoft" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft" [0125.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3b48) returned 1 [0125.975] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfa086aac, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x216e5f65, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0125.975] FindClose (in: hFindFile=0x7a2d540 | out: hFindFile=0x7a2d540) returned 1 [0125.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a527c8) returned 1 [0125.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58fb8) returned 1 [0125.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e59058) returned 1 Thread: id = 376 os_tid = 0xee8 [0122.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\benioku.htm")) returned 0x20 [0124.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm", dwFileAttributes=0x20) returned 0 [0124.673] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\benioku.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.673] GetLastError () returned 0x5 [0124.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Benioku.htm", dwFileAttributes=0x20) returned 0 [0124.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf268) returned 1 Thread: id = 377 os_tid = 0xe84 [0122.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\berime.htm")) returned 0x20 [0124.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm", dwFileAttributes=0x20) returned 0 [0124.677] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\berime.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.678] GetLastError () returned 0x5 [0124.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Berime.htm", dwFileAttributes=0x20) returned 0 [0124.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee02a8) returned 1 Thread: id = 378 os_tid = 0xeac [0122.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6ae8 [0122.421] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Esl" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl" [0122.421] wcscat (in: _Dest=0x2fe6ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\" [0122.421] wcscat (in: _Dest=0x2fe6ae8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\*" [0122.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0122.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dec0 [0124.679] wcscmp (_String1=".", _String2=".") returned 0 [0124.679] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.679] wcscmp (_String1="..", _String2=".") returned 1 [0124.679] wcscmp (_String1="..", _String2="..") returned 0 [0124.679] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0124.679] wcscmp (_String1="AiodLite.dll", _String2=".") returned 1 [0124.679] wcscmp (_String1="AiodLite.dll", _String2="..") returned 1 [0124.679] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0124.680] FindClose (in: hFindFile=0x7a2dec0 | out: hFindFile=0x7a2dec0) returned 1 [0124.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0124.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 [0124.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15220) returned 1 Thread: id = 379 os_tid = 0xde0 [0122.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\irakhau.htm")) returned 0x20 [0124.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm", dwFileAttributes=0x20) returned 0 [0124.682] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\irakhau.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.682] GetLastError () returned 0x5 [0124.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\IrakHau.htm", dwFileAttributes=0x20) returned 0 [0124.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0310) returned 1 Thread: id = 380 os_tid = 0xe78 [0122.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leame.htm")) returned 0x20 [0124.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm", dwFileAttributes=0x20) returned 0 [0124.684] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leame.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.684] GetLastError () returned 0x5 [0124.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leame.htm", dwFileAttributes=0x20) returned 0 [0124.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0378) returned 1 Thread: id = 381 os_tid = 0xe7c [0122.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leesmij.htm")) returned 0x20 [0124.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm", dwFileAttributes=0x20) returned 0 [0124.717] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leesmij.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.717] GetLastError () returned 0x5 [0124.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeesMij.htm", dwFileAttributes=0x20) returned 0 [0124.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee03e0) returned 1 Thread: id = 382 os_tid = 0xe80 [0122.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leggimi.htm")) returned 0x20 [0124.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm", dwFileAttributes=0x20) returned 0 [0124.698] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leggimi.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.698] GetLastError () returned 0x5 [0124.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Leggimi.htm", dwFileAttributes=0x20) returned 0 [0124.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0448) returned 1 Thread: id = 383 os_tid = 0xe74 [0122.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leiame.htm")) returned 0x20 [0124.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm", dwFileAttributes=0x20) returned 0 [0124.695] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\leiame.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.695] GetLastError () returned 0x5 [0124.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LeiaMe.htm", dwFileAttributes=0x20) returned 0 [0124.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee04b0) returned 1 Thread: id = 384 os_tid = 0xe70 [0122.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\liesmich.htm")) returned 0x20 [0124.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm", dwFileAttributes=0x20) returned 0 [0124.700] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\liesmich.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.700] GetLastError () returned 0x5 [0124.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Liesmich.htm", dwFileAttributes=0x20) returned 0 [0124.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0518) returned 1 Thread: id = 385 os_tid = 0xeec [0122.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lisezmoi.htm")) returned 0x20 [0124.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm", dwFileAttributes=0x20) returned 0 [0124.702] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lisezmoi.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.702] GetLastError () returned 0x5 [0124.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Lisezmoi.htm", dwFileAttributes=0x20) returned 0 [0124.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0580) returned 1 Thread: id = 386 os_tid = 0xea8 [0122.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\llegiu-me.htm")) returned 0x20 [0124.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm", dwFileAttributes=0x20) returned 0 [0124.690] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\llegiu-me.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.690] GetLastError () returned 0x5 [0124.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Llegiu-me.htm", dwFileAttributes=0x20) returned 0 [0124.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69f38) returned 1 Thread: id = 387 os_tid = 0xe9c [0122.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lueminut.htm")) returned 0x20 [0124.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm", dwFileAttributes=0x20) returned 0 [0124.704] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\lueminut.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.705] GetLastError () returned 0x5 [0124.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\LueMinut.htm", dwFileAttributes=0x20) returned 0 [0124.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee05e8) returned 1 Thread: id = 388 os_tid = 0xea0 [0122.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6b48 [0122.433] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.433] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.433] wcscat (in: _Dest=0x2fe6b48, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\*" [0122.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52c98 [0122.433] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e43ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0122.434] wcscmp (_String1=".", _String2=".") returned 0 [0122.434] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e43ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.434] wcscmp (_String1="..", _String2=".") returned 1 [0122.434] wcscmp (_String1="..", _String2="..") returned 0 [0122.434] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x32398, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0122.434] wcscmp (_String1="A3DUtils.dll", _String2=".") returned 1 [0122.434] wcscmp (_String1="A3DUtils.dll", _String2="..") returned 1 [0122.434] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca81680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc7d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0122.434] wcscmp (_String1="ACE.dll", _String2=".") returned 1 [0122.434] wcscmp (_String1="ACE.dll", _String2="..") returned 1 [0122.434] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x47f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0122.434] wcscmp (_String1="AcroBroker.exe", _String2=".") returned 1 [0122.435] wcscmp (_String1="AcroBroker.exe", _String2="..") returned 1 [0122.435] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0122.435] wcscmp (_String1="Acrofx32.dll", _String2=".") returned 1 [0122.435] wcscmp (_String1="Acrofx32.dll", _String2="..") returned 1 [0122.435] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd550a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16a0398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0122.435] wcscmp (_String1="AcroRd32.dll", _String2=".") returned 1 [0122.435] wcscmp (_String1="AcroRd32.dll", _String2="..") returned 1 [0122.435] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf32e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0122.435] wcscmp (_String1="AcroRd32.exe", _String2=".") returned 1 [0122.435] wcscmp (_String1="AcroRd32.exe", _String2="..") returned 1 [0122.435] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca81680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0122.435] wcscmp (_String1="AcroRd32Info.exe", _String2=".") returned 1 [0122.435] wcscmp (_String1="AcroRd32Info.exe", _String2="..") returned 1 [0122.435] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd406e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0122.435] wcscmp (_String1="AcroTextExtractor.exe", _String2=".") returned 1 [0122.435] wcscmp (_String1="AcroTextExtractor.exe", _String2="..") returned 1 [0122.435] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7e5240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0122.435] wcscmp (_String1="Adobe.Reader.Dependencies.manifest", _String2=".") returned 1 [0122.435] wcscmp (_String1="Adobe.Reader.Dependencies.manifest", _String2="..") returned 1 [0122.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053fa8 [0122.436] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.436] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.436] wcscat (in: _Dest=0x3053fa8, _Source="Adobe.Reader.Dependencies.manifest" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" [0122.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0122.937] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcda1360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x128fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0122.937] wcscmp (_String1="AdobeCollabSync.exe", _String2=".") returned 1 [0122.937] wcscmp (_String1="AdobeCollabSync.exe", _String2="..") returned 1 [0122.937] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb8fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0122.937] wcscmp (_String1="AdobeLinguistic.dll", _String2=".") returned 1 [0122.938] wcscmp (_String1="AdobeLinguistic.dll", _String2="..") returned 1 [0122.938] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37398, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0122.938] wcscmp (_String1="adoberfp.dll", _String2=".") returned 1 [0122.938] wcscmp (_String1="adoberfp.dll", _String2="..") returned 1 [0122.938] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca81680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a598, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0122.938] wcscmp (_String1="AdobeXMP.dll", _String2=".") returned 1 [0122.938] wcscmp (_String1="AdobeXMP.dll", _String2="..") returned 1 [0122.938] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0122.938] wcscmp (_String1="AGM.dll", _String2=".") returned 1 [0122.938] wcscmp (_String1="AGM.dll", _String2="..") returned 1 [0122.938] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0122.938] wcscmp (_String1="AGMGPUOptIn.ini", _String2=".") returned 1 [0122.938] wcscmp (_String1="AGMGPUOptIn.ini", _String2="..") returned 1 [0122.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6270 [0122.938] wcscpy (in: _Dest=0x3da6270, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.938] wcscat (in: _Dest=0x3da6270, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.938] wcscat (in: _Dest=0x3da6270, _Source="AGMGPUOptIn.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" [0122.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da6270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0122.940] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x366c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0122.940] wcscmp (_String1="ahclient.dll", _String2=".") returned 1 [0122.940] wcscmp (_String1="ahclient.dll", _String2="..") returned 1 [0122.940] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca353c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0122.940] wcscmp (_String1="AIR", _String2=".") returned 1 [0122.940] wcscmp (_String1="AIR", _String2="..") returned 1 [0122.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0ed8 [0122.940] wcscpy (in: _Dest=0x3ee0ed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.940] wcscat (in: _Dest=0x3ee0ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.940] wcscat (in: _Dest=0x3ee0ed8, _Source="AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0122.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0122.941] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3e0d20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5ef398, dwReserved0=0x0, dwReserved1=0x0, cFileName="authplay.dll", cAlternateFileName="")) returned 1 [0122.941] wcscmp (_String1="authplay.dll", _String2=".") returned 1 [0122.941] wcscmp (_String1="authplay.dll", _String2="..") returned 1 [0122.941] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0122.941] wcscmp (_String1="AXE8SharedExpat.dll", _String2=".") returned 1 [0122.941] wcscmp (_String1="AXE8SharedExpat.dll", _String2="..") returned 1 [0122.941] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x91590, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0122.942] wcscmp (_String1="AXSLE.dll", _String2=".") returned 1 [0122.942] wcscmp (_String1="AXSLE.dll", _String2="..") returned 1 [0122.942] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1af88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0122.942] wcscmp (_String1="BIB.dll", _String2=".") returned 1 [0122.942] wcscmp (_String1="BIB.dll", _String2="..") returned 1 [0122.942] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0122.942] wcscmp (_String1="BIBUtils.dll", _String2=".") returned 1 [0122.942] wcscmp (_String1="BIBUtils.dll", _String2="..") returned 1 [0122.942] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda5e8440, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0122.942] wcscmp (_String1="Browser", _String2=".") returned 1 [0122.942] wcscmp (_String1="Browser", _String2="..") returned 1 [0122.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26c48 [0122.942] wcscpy (in: _Dest=0x7a26c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.942] wcscat (in: _Dest=0x7a26c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.942] wcscat (in: _Dest=0x7a26c48, _Source="Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0122.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0122.944] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0122.944] wcscmp (_String1="ccme_base.dll", _String2=".") returned 1 [0122.944] wcscmp (_String1="ccme_base.dll", _String2="..") returned 1 [0122.944] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc60ad40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2aa998, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0122.944] wcscmp (_String1="CoolType.dll", _String2=".") returned 1 [0122.944] wcscmp (_String1="CoolType.dll", _String2="..") returned 1 [0122.944] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9e9100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0122.944] wcscmp (_String1="cryptocme2.dll", _String2=".") returned 1 [0122.944] wcscmp (_String1="cryptocme2.dll", _String2="..") returned 1 [0122.944] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x647, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0122.944] wcscmp (_String1="cryptocme2.sig", _String2=".") returned 1 [0122.944] wcscmp (_String1="cryptocme2.sig", _String2="..") returned 1 [0122.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5d70 [0122.944] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.944] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.944] wcscat (in: _Dest=0x3da5d70, _Source="cryptocme2.sig" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" [0122.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0122.946] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0122.946] wcscmp (_String1="Eula.exe", _String2=".") returned 1 [0122.946] wcscmp (_String1="Eula.exe", _String2="..") returned 1 [0122.946] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7e5240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1 [0122.946] wcscmp (_String1="ExtendScript.dll", _String2=".") returned 1 [0122.946] wcscmp (_String1="ExtendScript.dll", _String2="..") returned 1 [0122.946] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb03a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0122.946] wcscmp (_String1="icucnv40.dll", _String2=".") returned 1 [0122.946] wcscmp (_String1="icucnv40.dll", _String2="..") returned 1 [0122.946] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17790, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0122.946] wcscmp (_String1="icudt40.dll", _String2=".") returned 1 [0122.946] wcscmp (_String1="icudt40.dll", _String2="..") returned 1 [0122.946] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd46fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40_full.dll", cAlternateFileName="ICUDT4~1.DLL")) returned 1 [0122.946] wcscmp (_String1="icudt40_full.dll", _String2=".") returned 1 [0122.946] wcscmp (_String1="icudt40_full.dll", _String2="..") returned 1 [0122.946] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1131a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icuuc40.dll", cAlternateFileName="")) returned 1 [0122.946] wcscmp (_String1="icuuc40.dll", _String2=".") returned 1 [0122.946] wcscmp (_String1="icuuc40.dll", _String2="..") returned 1 [0122.946] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1 [0122.946] wcscmp (_String1="IDTemplates", _String2=".") returned 1 [0122.946] wcscmp (_String1="IDTemplates", _String2="..") returned 1 [0122.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f290 [0122.947] wcscpy (in: _Dest=0x3f3f290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.947] wcscat (in: _Dest=0x3f3f290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.947] wcscat (in: _Dest=0x3f3f290, _Source="IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0122.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0122.948] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1 [0122.948] wcscmp (_String1="Javascripts", _String2=".") returned 1 [0122.948] wcscmp (_String1="Javascripts", _String2="..") returned 1 [0122.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f308 [0122.948] wcscpy (in: _Dest=0x3f3f308, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.948] wcscat (in: _Dest=0x3f3f308, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.948] wcscat (in: _Dest=0x3f3f308, _Source="Javascripts" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" [0122.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0122.949] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa6790, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0122.949] wcscmp (_String1="JP2KLib.dll", _String2=".") returned 1 [0122.949] wcscmp (_String1="JP2KLib.dll", _String2="..") returned 1 [0122.949] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0122.949] wcscmp (_String1="Legal", _String2=".") returned 1 [0122.949] wcscmp (_String1="Legal", _String2="..") returned 1 [0122.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0f40 [0122.949] wcscpy (in: _Dest=0x3ee0f40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.950] wcscat (in: _Dest=0x3ee0f40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.950] wcscat (in: _Dest=0x3ee0f40, _Source="Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0122.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84 [0122.951] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0122.951] wcscmp (_String1="Locale", _String2=".") returned 1 [0122.951] wcscmp (_String1="Locale", _String2="..") returned 1 [0122.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26cb8 [0122.951] wcscpy (in: _Dest=0x7a26cb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.951] wcscat (in: _Dest=0x7a26cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.951] wcscat (in: _Dest=0x7a26cb8, _Source="Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0122.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc [0122.953] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd36e900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1 [0122.953] wcscmp (_String1="logsession.dll", _String2=".") returned 1 [0122.953] wcscmp (_String1="logsession.dll", _String2="..") returned 1 [0122.953] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1 [0122.953] wcscmp (_String1="LogTransport2.exe", _String2=".") returned 1 [0122.953] wcscmp (_String1="LogTransport2.exe", _String2="..") returned 1 [0122.953] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9884880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0122.953] wcscmp (_String1="Onix32.dll", _String2=".") returned 1 [0122.953] wcscmp (_String1="Onix32.dll", _String2="..") returned 1 [0122.953] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1 [0122.953] wcscmp (_String1="PDFPrevHndlr.dll", _String2=".") returned 1 [0122.953] wcscmp (_String1="PDFPrevHndlr.dll", _String2="..") returned 1 [0122.953] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1 [0122.953] wcscmp (_String1="PDFSigQFormalRep.pdf", _String2=".") returned 1 [0122.953] wcscmp (_String1="PDFSigQFormalRep.pdf", _String2="..") returned 1 [0122.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8f00 [0122.953] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.953] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.953] wcscat (in: _Dest=0x3eb8f00, _Source="PDFSigQFormalRep.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" [0122.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0122.954] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18dd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0122.954] wcscmp (_String1="pe.dll", _String2=".") returned 1 [0122.954] wcscmp (_String1="pe.dll", _String2="..") returned 1 [0122.954] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="piaglbreakfinder.dll", cAlternateFileName="PIAGLB~1.DLL")) returned 1 [0122.954] wcscmp (_String1="piaglbreakfinder.dll", _String2=".") returned 1 [0122.954] wcscmp (_String1="piaglbreakfinder.dll", _String2="..") returned 1 [0122.955] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15eefa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0122.955] wcscmp (_String1="plug_ins", _String2=".") returned 1 [0122.955] wcscmp (_String1="plug_ins", _String2="..") returned 1 [0122.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26d28 [0122.955] wcscpy (in: _Dest=0x7a26d28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.955] wcscat (in: _Dest=0x7a26d28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.955] wcscat (in: _Dest=0x7a26d28, _Source="plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0122.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4 [0122.956] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab435c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac9a220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1 [0122.956] wcscmp (_String1="plug_ins3d", _String2=".") returned 1 [0122.956] wcscmp (_String1="plug_ins3d", _String2="..") returned 1 [0122.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f380 [0122.956] wcscpy (in: _Dest=0x3f3f380, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.956] wcscat (in: _Dest=0x3f3f380, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.956] wcscat (in: _Dest=0x3f3f380, _Source="plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0122.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc [0122.957] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0122.957] wcscmp (_String1="pmd.cer", _String2=".") returned 1 [0122.958] wcscmp (_String1="pmd.cer", _String2="..") returned 1 [0122.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26d98 [0122.958] wcscpy (in: _Dest=0x7a26d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.958] wcscat (in: _Dest=0x7a26d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.958] wcscat (in: _Dest=0x7a26d98, _Source="pmd.cer" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer" [0122.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0122.959] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0122.959] wcscmp (_String1="reader_sl.exe", _String2=".") returned 1 [0122.959] wcscmp (_String1="reader_sl.exe", _String2="..") returned 1 [0122.959] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0122.959] wcscmp (_String1="rt3d.dll", _String2=".") returned 1 [0122.959] wcscmp (_String1="rt3d.dll", _String2="..") returned 1 [0122.959] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0122.959] wcscmp (_String1="RTC.der", _String2=".") returned 1 [0122.959] wcscmp (_String1="RTC.der", _String2="..") returned 1 [0122.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26e08 [0122.960] wcscpy (in: _Dest=0x7a26e08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.960] wcscat (in: _Dest=0x7a26e08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.960] wcscat (in: _Dest=0x7a26e08, _Source="RTC.der" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der" [0122.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0122.961] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7e5240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0122.961] wcscmp (_String1="ScCore.dll", _String2=".") returned 1 [0122.961] wcscmp (_String1="ScCore.dll", _String2="..") returned 1 [0122.961] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd80b3a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd80b3a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0122.961] wcscmp (_String1="Services", _String2=".") returned 1 [0122.961] wcscmp (_String1="Services", _String2="..") returned 1 [0122.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26e78 [0122.961] wcscpy (in: _Dest=0x7a26e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.961] wcscat (in: _Dest=0x7a26e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.961] wcscat (in: _Dest=0x7a26e78, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0122.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4 [0122.962] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc630ea0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc630ea0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPPlugins", cAlternateFileName="SPPLUG~1")) returned 1 [0122.962] wcscmp (_String1="SPPlugins", _String2=".") returned 1 [0122.962] wcscmp (_String1="SPPlugins", _String2="..") returned 1 [0122.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26ee8 [0122.963] wcscpy (in: _Dest=0x7a26ee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.963] wcscat (in: _Dest=0x7a26ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.963] wcscat (in: _Dest=0x7a26ee8, _Source="SPPlugins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" [0122.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc0 [0122.964] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0122.964] wcscmp (_String1="sqlite.dll", _String2=".") returned 1 [0122.964] wcscmp (_String1="sqlite.dll", _String2="..") returned 1 [0122.964] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc92aa20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc9c2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0122.964] wcscmp (_String1="Tracker", _String2=".") returned 1 [0122.964] wcscmp (_String1="Tracker", _String2="..") returned 1 [0122.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26f58 [0122.964] wcscpy (in: _Dest=0x7a26f58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader" [0122.964] wcscat (in: _Dest=0x7a26f58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\" [0122.964] wcscat (in: _Dest=0x7a26f58, _Source="Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0122.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0122.965] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1 [0122.965] wcscmp (_String1="ViewerPS.dll", _String2=".") returned 1 [0122.965] wcscmp (_String1="ViewerPS.dll", _String2="..") returned 1 [0122.965] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 0 [0122.965] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0122.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52c98) returned 1 [0122.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 [0122.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 389 os_tid = 0xea4 [0122.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readme.htm")) returned 0x20 [0124.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm", dwFileAttributes=0x20) returned 0 [0124.707] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readme.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.707] GetLastError () returned 0x5 [0124.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMe.htm", dwFileAttributes=0x20) returned 0 [0124.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0650) returned 1 Thread: id = 390 os_tid = 0xe98 [0122.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecs.htm")) returned 0x20 [0124.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm", dwFileAttributes=0x20) returned 0 [0124.709] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecs.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.709] GetLastError () returned 0x5 [0124.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCS.htm", dwFileAttributes=0x20) returned 0 [0124.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee06b8) returned 1 Thread: id = 391 os_tid = 0xe94 [0122.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmect.htm")) returned 0x20 [0124.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm", dwFileAttributes=0x20) returned 0 [0124.686] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmect.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.687] GetLastError () returned 0x5 [0124.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCT.htm", dwFileAttributes=0x20) returned 0 [0124.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0720) returned 1 Thread: id = 392 os_tid = 0xe50 [0122.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecze.htm")) returned 0x20 [0124.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm", dwFileAttributes=0x20) returned 0 [0124.711] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmecze.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.712] GetLastError () returned 0x5 [0124.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeCZE.htm", dwFileAttributes=0x20) returned 0 [0124.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69fa8) returned 1 Thread: id = 393 os_tid = 0xe4c [0122.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehrv.htm")) returned 0x20 [0124.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm", dwFileAttributes=0x20) returned 0 [0124.714] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehrv.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.714] GetLastError () returned 0x5 [0124.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHRV.htm", dwFileAttributes=0x20) returned 0 [0124.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26008) returned 1 Thread: id = 394 os_tid = 0xe54 [0122.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehun.htm")) returned 0x20 [0124.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm", dwFileAttributes=0x20) returned 0 [0124.667] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmehun.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.668] GetLastError () returned 0x5 [0124.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeHUN.htm", dwFileAttributes=0x20) returned 0 [0124.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26078) returned 1 Thread: id = 395 os_tid = 0xe40 [0122.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmej.htm")) returned 0x20 [0124.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm", dwFileAttributes=0x20) returned 0 [0124.721] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmej.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.721] GetLastError () returned 0x5 [0124.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeJ.htm", dwFileAttributes=0x20) returned 0 [0124.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0788) returned 1 Thread: id = 396 os_tid = 0xe44 [0122.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26388 [0122.638] wcscpy (in: _Dest=0x7a26388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0122.638] wcscat (in: _Dest=0x7a26388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0122.638] wcscat (in: _Dest=0x7a26388, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*" [0122.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52560 [0122.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb90 [0123.385] wcscmp (_String1=".", _String2=".") returned 0 [0123.385] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35232150, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.407] wcscmp (_String1="..", _String2=".") returned 1 [0124.407] wcscmp (_String1="..", _String2="..") returned 0 [0124.407] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ac5500, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x5c2e3f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56ac5500, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x53b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSUI.DLL", cAlternateFileName="")) returned 1 [0124.407] wcscmp (_String1="ACCDDSUI.DLL", _String2=".") returned 1 [0124.407] wcscmp (_String1="ACCDDSUI.DLL", _String2="..") returned 1 [0124.407] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32755000, ftCreationTime.dwHighDateTime=0x1ca8d8b, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x32755000, ftLastWriteTime.dwHighDateTime=0x1ca8d8b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCESS12.ACC", cAlternateFileName="")) returned 1 [0124.407] wcscmp (_String1="ACCESS12.ACC", _String2=".") returned 1 [0124.407] wcscmp (_String1="ACCESS12.ACC", _String2="..") returned 1 [0124.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c0f8 [0124.407] wcscpy (in: _Dest=0x3f3c0f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0124.407] wcscat (in: _Dest=0x3f3c0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0124.407] wcscat (in: _Dest=0x3f3c0f8, _Source="ACCESS12.ACC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" [0129.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0129.291] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x5c51f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x33b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLKI.DLL", cAlternateFileName="")) returned 1 [0129.291] wcscmp (_String1="ACCOLKI.DLL", _String2=".") returned 1 [0129.291] wcscmp (_String1="ACCOLKI.DLL", _String2="..") returned 1 [0129.291] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ac5500, ftCreationTime.dwHighDateTime=0x1cab841, ftLastAccessTime.dwLowDateTime=0x5c51f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56ac5500, ftLastWriteTime.dwHighDateTime=0x1cab841, nFileSizeHigh=0x0, nFileSizeLow=0x26b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDTUI.DLL", cAlternateFileName="")) returned 1 [0129.291] wcscmp (_String1="ACCVDTUI.DLL", _String2=".") returned 1 [0129.291] wcscmp (_String1="ACCVDTUI.DLL", _String2="..") returned 1 [0129.291] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6ba100, ftCreationTime.dwHighDateTime=0x1c6affe, ftLastAccessTime.dwLowDateTime=0x5c545550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef6ba100, ftLastWriteTime.dwHighDateTime=0x1c6affe, nFileSizeHigh=0x0, nFileSizeLow=0x53de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIP10.HLP", cAlternateFileName="")) returned 1 [0129.291] wcscmp (_String1="ACTIP10.HLP", _String2=".") returned 1 [0129.291] wcscmp (_String1="ACTIP10.HLP", _String2="..") returned 1 [0129.291] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f13f00, ftCreationTime.dwHighDateTime=0x1ca67ab, ftLastAccessTime.dwLowDateTime=0x5c545550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf4f13f00, ftLastWriteTime.dwHighDateTime=0x1ca67ab, nFileSizeHigh=0x0, nFileSizeLow=0x43590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWIZRC.DLL", cAlternateFileName="")) returned 1 [0129.291] wcscmp (_String1="ACWIZRC.DLL", _String2=".") returned 1 [0129.291] wcscmp (_String1="ACWIZRC.DLL", _String2="..") returned 1 [0129.291] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xf778, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.VSL", cAlternateFileName="")) returned 1 [0129.291] wcscmp (_String1="AEC.VSL", _String2=".") returned 1 [0129.291] wcscmp (_String1="AEC.VSL", _String2="..") returned 1 [0129.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0129.291] wcscpy (in: _Dest=0x348f48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.292] wcscat (in: _Dest=0x348f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.292] wcscat (in: _Dest=0x348f48, _Source="AEC.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" [0129.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x348f48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0129.293] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.VSL", cAlternateFileName="")) returned 1 [0129.293] wcscmp (_String1="AECUTILS.VSL", _String2=".") returned 1 [0129.293] wcscmp (_String1="AECUTILS.VSL", _String2="..") returned 1 [0129.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba550 [0129.293] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.293] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.293] wcscat (in: _Dest=0x3eba550, _Source="AECUTILS.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" [0129.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0129.295] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e65900, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4551530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77e65900, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASSET.VRD", cAlternateFileName="")) returned 1 [0129.295] wcscmp (_String1="ASSET.VRD", _String2=".") returned 1 [0129.295] wcscmp (_String1="ASSET.VRD", _String2="..") returned 1 [0129.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a418 [0129.295] wcscpy (in: _Dest=0x3e1a418, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.295] wcscat (in: _Dest=0x3e1a418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.295] wcscat (in: _Dest=0x3e1a418, _Source="ASSET.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" [0129.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0129.296] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586c3600, ftCreationTime.dwHighDateTime=0x1c2fece, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x586c3600, ftLastWriteTime.dwHighDateTime=0x1c2fece, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC.HTM", cAlternateFileName="")) returned 1 [0129.296] wcscmp (_String1="BASIC.HTM", _String2=".") returned 1 [0129.296] wcscmp (_String1="BASIC.HTM", _String2="..") returned 1 [0129.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19018 [0129.296] wcscpy (in: _Dest=0x3e19018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.296] wcscat (in: _Dest=0x3e19018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.296] wcscat (in: _Dest=0x3e19018, _Source="BASIC.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" [0129.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0129.298] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35902f00, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35902f00, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeRes.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1 [0129.298] wcscmp (_String1="BCSRuntimeRes.dll", _String2=".") returned 1 [0129.298] wcscmp (_String1="BCSRuntimeRes.dll", _String2="..") returned 1 [0129.298] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530ed300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x35232150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x530ed300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2778, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0129.298] wcscmp (_String1="BHOINTL.DLL", _String2=".") returned 1 [0129.298] wcscmp (_String1="BHOINTL.DLL", _String2="..") returned 1 [0129.298] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63d049b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63d049b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0129.298] wcscmp (_String1="Bibliography", _String2=".") returned 1 [0129.299] wcscmp (_String1="Bibliography", _String2="..") returned 1 [0129.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9230 [0129.299] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.299] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.299] wcscat (in: _Dest=0x3eb9230, _Source="Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" [0129.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0129.301] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x9f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1 [0129.301] wcscmp (_String1="BSTORM.VSL", _String2=".") returned 1 [0129.301] wcscmp (_String1="BSTORM.VSL", _String2="..") returned 1 [0129.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e18f18 [0129.301] wcscpy (in: _Dest=0x3e18f18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.301] wcscat (in: _Dest=0x3e18f18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.302] wcscat (in: _Dest=0x3e18f18, _Source="BSTORM.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" [0129.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e18f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0129.303] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BW.CSS", cAlternateFileName="")) returned 1 [0129.303] wcscmp (_String1="BW.CSS", _String2=".") returned 1 [0129.303] wcscmp (_String1="BW.CSS", _String2="..") returned 1 [0129.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x349128 [0129.304] wcscpy (in: _Dest=0x349128, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.304] wcscat (in: _Dest=0x349128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.304] wcscat (in: _Dest=0x349128, _Source="BW.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" [0129.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x349128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0129.306] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803e9400, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x803e9400, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1 [0129.306] wcscmp (_String1="CALEVENT.VRD", _String2=".") returned 1 [0129.306] wcscmp (_String1="CALEVENT.VRD", _String2="..") returned 1 [0129.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8f88 [0129.306] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.306] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.306] wcscat (in: _Dest=0x3eb8f88, _Source="CALEVENT.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" [0129.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998 [0129.308] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b7e900, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x58b7e900, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x2f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1 [0129.308] wcscmp (_String1="CERTINTL.DLL", _String2=".") returned 1 [0129.308] wcscmp (_String1="CERTINTL.DLL", _String2="..") returned 1 [0129.308] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb07a5100, ftCreationTime.dwHighDateTime=0x1cab90d, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb07a5100, ftLastWriteTime.dwHighDateTime=0x1cab90d, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1 [0129.308] wcscmp (_String1="CLVWINTL.DLL", _String2=".") returned 1 [0129.308] wcscmp (_String1="CLVWINTL.DLL", _String2="..") returned 1 [0129.308] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x8990, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAXRES.DLL", cAlternateFileName="")) returned 1 [0129.308] wcscmp (_String1="CMAXRES.DLL", _String2=".") returned 1 [0129.308] wcscmp (_String1="CMAXRES.DLL", _String2="..") returned 1 [0129.308] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1 [0129.308] wcscmp (_String1="COFFEE.CSS", _String2=".") returned 1 [0129.308] wcscmp (_String1="COFFEE.CSS", _String2="..") returned 1 [0129.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19318 [0129.309] wcscpy (in: _Dest=0x3e19318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.309] wcscat (in: _Dest=0x3e19318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.309] wcscat (in: _Dest=0x3e19318, _Source="COFFEE.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" [0129.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0129.311] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f12600, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7f12600, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x35be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="COLLEC~1.XSN")) returned 1 [0129.311] wcscmp (_String1="CollectSignatures_Init.xsn", _String2=".") returned 1 [0129.311] wcscmp (_String1="CollectSignatures_Init.xsn", _String2="..") returned 1 [0129.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df54a0 [0129.311] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.311] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.311] wcscat (in: _Dest=0x3df54a0, _Source="CollectSignatures_Init.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" [0129.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df54a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0129.313] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x36fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="COLLEC~2.XSN")) returned 1 [0129.313] wcscmp (_String1="CollectSignatures_Sign.xsn", _String2=".") returned 1 [0129.313] wcscmp (_String1="CollectSignatures_Sign.xsn", _String2="..") returned 1 [0129.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5220 [0129.313] wcscpy (in: _Dest=0x3df5220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.313] wcscat (in: _Dest=0x3df5220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.313] wcscat (in: _Dest=0x3df5220, _Source="CollectSignatures_Sign.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" [0129.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0129.315] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d64600, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46d64600, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPickerIntl.dll", cAlternateFileName="CONTAC~1.DLL")) returned 1 [0129.315] wcscmp (_String1="ContactPickerIntl.dll", _String2=".") returned 1 [0129.315] wcscmp (_String1="ContactPickerIntl.dll", _String2="..") returned 1 [0129.315] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c56200, ftCreationTime.dwHighDateTime=0x1ca7b1a, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8c56200, ftLastWriteTime.dwHighDateTime=0x1ca7b1a, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1 [0129.315] wcscmp (_String1="CT_ROOTS.XML", _String2=".") returned 1 [0129.315] wcscmp (_String1="CT_ROOTS.XML", _String2="..") returned 1 [0129.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb91a8 [0129.315] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.315] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.315] wcscat (in: _Dest=0x3eb91a8, _Source="CT_ROOTS.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" [0129.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0129.317] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a4570, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="DATASE~1")) returned 1 [0129.317] wcscmp (_String1="DataServices", _String2=".") returned 1 [0129.317] wcscmp (_String1="DataServices", _String2="..") returned 1 [0129.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9120 [0129.317] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.317] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.317] wcscat (in: _Dest=0x3eb9120, _Source="DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0129.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0129.319] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa49edfd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xbd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.VSL", cAlternateFileName="")) returned 1 [0129.319] wcscmp (_String1="DBENGR.VSL", _String2=".") returned 1 [0129.319] wcscmp (_String1="DBENGR.VSL", _String2="..") returned 1 [0129.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19418 [0129.319] wcscpy (in: _Dest=0x3e19418, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.319] wcscat (in: _Dest=0x3e19418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.319] wcscat (in: _Dest=0x3e19418, _Source="DBENGR.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" [0129.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0129.321] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1eea00, ftCreationTime.dwHighDateTime=0x1c321da, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe1eea00, ftLastWriteTime.dwHighDateTime=0x1c321da, nFileSizeHigh=0x0, nFileSizeLow=0x76000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1 [0129.322] wcscmp (_String1="DBSAMPLE.MDB", _String2=".") returned 1 [0129.322] wcscmp (_String1="DBSAMPLE.MDB", _String2="..") returned 1 [0129.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb92b8 [0129.322] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.322] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.322] wcscat (in: _Dest=0x3eb92b8, _Source="DBSAMPLE.MDB" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" [0129.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0129.324] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x26978, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1 [0129.324] wcscmp (_String1="DBWIZ.VSL", _String2=".") returned 1 [0129.324] wcscmp (_String1="DBWIZ.VSL", _String2="..") returned 1 [0129.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19498 [0129.324] wcscpy (in: _Dest=0x3e19498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0129.324] wcscat (in: _Dest=0x3e19498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0129.325] wcscat (in: _Dest=0x3e19498, _Source="DBWIZ.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" [0129.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0130.984] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1 [0130.984] wcscmp (_String1="DEFAULT.CSS", _String2=".") returned 1 [0130.984] wcscmp (_String1="DEFAULT.CSS", _String2="..") returned 1 [0130.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da4af0 [0130.985] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0130.985] wcscat (in: _Dest=0x3da4af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0130.985] wcscat (in: _Dest=0x3da4af0, _Source="DEFAULT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" [0138.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da4af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0138.638] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2cf800, ftCreationTime.dwHighDateTime=0x1c91404, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc2cf800, ftLastWriteTime.dwHighDateTime=0x1c91404, nFileSizeHigh=0x0, nFileSizeLow=0x19984, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.gta", cAlternateFileName="DISCUS~1.GTA")) returned 1 [0138.638] wcscmp (_String1="Discussion.gta", _String2=".") returned 1 [0138.638] wcscmp (_String1="Discussion.gta", _String2="..") returned 1 [0138.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba110 [0138.638] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0138.638] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0138.638] wcscat (in: _Dest=0x3eba110, _Source="Discussion.gta" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" [0138.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0138.639] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae60e00, ftCreationTime.dwHighDateTime=0x1ca9a33, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdae60e00, ftLastWriteTime.dwHighDateTime=0x1ca9a33, nFileSizeHigh=0x0, nFileSizeLow=0x587c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion14.gta", cAlternateFileName="DISCUS~2.GTA")) returned 1 [0138.639] wcscmp (_String1="Discussion14.gta", _String2=".") returned 1 [0138.639] wcscmp (_String1="Discussion14.gta", _String2="..") returned 1 [0138.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44180 [0138.639] wcscpy (in: _Dest=0x3d44180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0138.639] wcscat (in: _Dest=0x3d44180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0138.639] wcscat (in: _Dest=0x3d44180, _Source="Discussion14.gta" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" [0138.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0138.640] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL_RES.DLL", cAlternateFileName="")) returned 1 [0138.640] wcscmp (_String1="DL_RES.DLL", _String2=".") returned 1 [0138.640] wcscmp (_String1="DL_RES.DLL", _String2="..") returned 1 [0138.640] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86347500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x86347500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1 [0138.647] wcscmp (_String1="DOORSCHD.VRD", _String2=".") returned 1 [0138.647] wcscmp (_String1="DOORSCHD.VRD", _String2="..") returned 1 [0138.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb92b8 [0138.647] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0138.647] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0138.647] wcscat (in: _Dest=0x3eb92b8, _Source="DOORSCHD.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" [0140.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd")) returned 0x20 [0147.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD", dwFileAttributes=0x20) returned 0 [0147.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.373] GetLastError () returned 0x5 [0147.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD", dwFileAttributes=0x20) returned 0 [0147.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 [0147.373] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4af8970, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xe568, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1 [0147.374] wcscmp (_String1="DRILLDWN.VSL", _String2=".") returned 1 [0147.374] wcscmp (_String1="DRILLDWN.VSL", _String2="..") returned 1 [0147.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb92b8 [0147.374] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0147.374] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0147.374] wcscat (in: _Dest=0x3eb92b8, _Source="DRILLDWN.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" [0172.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0172.307] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252c8d00, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x252c8d00, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x8360, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1 [0172.307] wcscmp (_String1="DWGCNV.VSL", _String2=".") returned 1 [0172.307] wcscmp (_String1="DWGCNV.VSL", _String2="..") returned 1 [0172.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da6170 [0172.308] wcscpy (in: _Dest=0x3da6170, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.308] wcscat (in: _Dest=0x3da6170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.308] wcscat (in: _Dest=0x3da6170, _Source="DWGCNV.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" [0172.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da6170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0172.309] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1 [0172.309] wcscmp (_String1="DWGDPRES.DLL", _String2=".") returned 1 [0172.309] wcscmp (_String1="DWGDPRES.DLL", _String2="..") returned 1 [0172.309] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x388e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="EADOCU~1.XSN")) returned 1 [0172.309] wcscmp (_String1="EADOCUMENTAPPROVAL_INIT.XSN", _String2=".") returned 1 [0172.309] wcscmp (_String1="EADOCUMENTAPPROVAL_INIT.XSN", _String2="..") returned 1 [0172.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a630d0 [0172.310] wcscpy (in: _Dest=0x7a630d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.310] wcscat (in: _Dest=0x7a630d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.310] wcscat (in: _Dest=0x7a630d0, _Source="EADOCUMENTAPPROVAL_INIT.XSN" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" [0172.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a630d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0172.311] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f12600, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7f12600, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="EADOCU~2.XSN")) returned 1 [0172.311] wcscmp (_String1="EADOCUMENTAPPROVAL_REVIEW.XSN", _String2=".") returned 1 [0172.311] wcscmp (_String1="EADOCUMENTAPPROVAL_REVIEW.XSN", _String2="..") returned 1 [0172.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3052f40 [0172.312] wcscpy (in: _Dest=0x3052f40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.312] wcscat (in: _Dest=0x3052f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.312] wcscat (in: _Dest=0x3052f40, _Source="EADOCUMENTAPPROVAL_REVIEW.XSN" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" [0172.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0172.313] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1a4300, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b1a4300, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0xc990, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1 [0172.313] wcscmp (_String1="EAWFINTL.DLL", _String2=".") returned 1 [0172.313] wcscmp (_String1="EAWFINTL.DLL", _String2="..") returned 1 [0172.313] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITRES.DLL", cAlternateFileName="")) returned 1 [0172.313] wcscmp (_String1="EDITRES.DLL", _String2=".") returned 1 [0172.313] wcscmp (_String1="EDITRES.DLL", _String2="..") returned 1 [0172.313] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345f0200, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x345f0200, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPickerIntl.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0172.313] wcscmp (_String1="EntityPickerIntl.dll", _String2=".") returned 1 [0172.313] wcscmp (_String1="EntityPickerIntl.dll", _String2="..") returned 1 [0172.313] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x4388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1 [0172.314] wcscmp (_String1="ENVELOPR.DLL", _String2=".") returned 1 [0172.314] wcscmp (_String1="ENVELOPR.DLL", _String2="..") returned 1 [0172.314] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.IDX_DLL", cAlternateFileName="ENVELO~1.IDX")) returned 1 [0172.314] wcscmp (_String1="ENVELOPR.DLL.IDX_DLL", _String2=".") returned 1 [0172.314] wcscmp (_String1="ENVELOPR.DLL.IDX_DLL", _String2="..") returned 1 [0172.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c9f0 [0172.314] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.314] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.314] wcscat (in: _Dest=0x32c9f0, _Source="ENVELOPR.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" [0172.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0172.315] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f167600, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f167600, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1 [0172.315] wcscmp (_String1="EQPLIST.VRD", _String2=".") returned 1 [0172.316] wcscmp (_String1="EQPLIST.VRD", _String2="..") returned 1 [0172.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5f70 [0172.316] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.316] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.316] wcscat (in: _Dest=0x3da5f70, _Source="EQPLIST.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" [0172.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0172.317] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f4e5900, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f4e5900, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x6b2dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV.HXS", cAlternateFileName="EXCELD~1.HXS")) returned 1 [0172.317] wcscmp (_String1="EXCEL.DEV.HXS", _String2=".") returned 1 [0172.317] wcscmp (_String1="EXCEL.DEV.HXS", _String2="..") returned 1 [0172.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba110 [0172.318] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.318] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.318] wcscat (in: _Dest=0x3eba110, _Source="EXCEL.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" [0172.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0172.319] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXC", cAlternateFileName="EXCELD~1.HXC")) returned 1 [0172.319] wcscmp (_String1="EXCEL.DEV_COL.HXC", _String2=".") returned 1 [0172.319] wcscmp (_String1="EXCEL.DEV_COL.HXC", _String2="..") returned 1 [0172.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a618c0 [0172.319] wcscpy (in: _Dest=0x7a618c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.320] wcscat (in: _Dest=0x7a618c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.320] wcscat (in: _Dest=0x7a618c0, _Source="EXCEL.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" [0172.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a618c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0172.329] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ae9500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1ae9500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXT", cAlternateFileName="EXCELD~1.HXT")) returned 1 [0172.329] wcscmp (_String1="EXCEL.DEV_COL.HXT", _String2=".") returned 1 [0172.329] wcscmp (_String1="EXCEL.DEV_COL.HXT", _String2="..") returned 1 [0172.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61950 [0172.329] wcscpy (in: _Dest=0x7a61950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.329] wcscat (in: _Dest=0x7a61950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.329] wcscat (in: _Dest=0x7a61950, _Source="EXCEL.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" [0172.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0172.330] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ae9500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1ae9500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_F_COL.HXK", cAlternateFileName="EXCELD~1.HXK")) returned 1 [0172.330] wcscmp (_String1="EXCEL.DEV_F_COL.HXK", _String2=".") returned 1 [0172.330] wcscmp (_String1="EXCEL.DEV_F_COL.HXK", _String2="..") returned 1 [0172.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a602d0 [0172.330] wcscpy (in: _Dest=0x7a602d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.330] wcscat (in: _Dest=0x7a602d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.330] wcscat (in: _Dest=0x7a602d0, _Source="EXCEL.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" [0172.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a602d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0172.331] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ae9500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42e875b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1ae9500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_K_COL.HXK", cAlternateFileName="EXCELD~2.HXK")) returned 1 [0172.332] wcscmp (_String1="EXCEL.DEV_K_COL.HXK", _String2=".") returned 1 [0172.332] wcscmp (_String1="EXCEL.DEV_K_COL.HXK", _String2="..") returned 1 [0172.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60750 [0172.332] wcscpy (in: _Dest=0x7a60750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.332] wcscat (in: _Dest=0x7a60750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.332] wcscat (in: _Dest=0x7a60750, _Source="EXCEL.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" [0172.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0172.333] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x742e7800, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x742e7800, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x7770e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1 [0172.333] wcscmp (_String1="EXCEL.HXS", _String2=".") returned 1 [0172.333] wcscmp (_String1="EXCEL.HXS", _String2="..") returned 1 [0172.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da60f0 [0172.333] wcscpy (in: _Dest=0x3da60f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.333] wcscat (in: _Dest=0x3da60f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.333] wcscat (in: _Dest=0x3da60f0, _Source="EXCEL.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" [0172.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da60f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0172.334] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXC", cAlternateFileName="EXCEL_~1.HXC")) returned 1 [0172.334] wcscmp (_String1="EXCEL_COL.HXC", _String2=".") returned 1 [0172.334] wcscmp (_String1="EXCEL_COL.HXC", _String2="..") returned 1 [0172.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36ecf8 [0172.334] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.335] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.335] wcscat (in: _Dest=0x36ecf8, _Source="EXCEL_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" [0172.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ecf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0172.336] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace9e100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace9e100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXT", cAlternateFileName="EXCEL_~1.HXT")) returned 1 [0172.336] wcscmp (_String1="EXCEL_COL.HXT", _String2=".") returned 1 [0172.336] wcscmp (_String1="EXCEL_COL.HXT", _String2="..") returned 1 [0172.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36ed80 [0172.336] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.336] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.336] wcscat (in: _Dest=0x36ed80, _Source="EXCEL_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" [0172.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0172.337] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace9e100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42ed3870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace9e100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="EXCEL_~1.HXK")) returned 1 [0172.337] wcscmp (_String1="EXCEL_F_COL.HXK", _String2=".") returned 1 [0172.337] wcscmp (_String1="EXCEL_F_COL.HXK", _String2="..") returned 1 [0172.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e830 [0172.337] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.337] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.338] wcscat (in: _Dest=0x36e830, _Source="EXCEL_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" [0172.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0172.339] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace9e100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace9e100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="EXCEL_~2.HXK")) returned 1 [0172.339] wcscmp (_String1="EXCEL_K_COL.HXK", _String2=".") returned 1 [0172.339] wcscmp (_String1="EXCEL_K_COL.HXK", _String2="..") returned 1 [0172.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36fc60 [0172.339] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.339] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.339] wcscat (in: _Dest=0x36fc60, _Source="EXCEL_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" [0172.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0172.340] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x352f0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1 [0172.340] wcscmp (_String1="EXPTOOWS.DLL", _String2=".") returned 1 [0172.340] wcscmp (_String1="EXPTOOWS.DLL", _String2="..") returned 1 [0172.340] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735c500, ftCreationTime.dwHighDateTime=0x1cac800, ftLastAccessTime.dwLowDateTime=0x352f0830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x735c500, ftLastWriteTime.dwHighDateTime=0x1cac800, nFileSizeHigh=0x0, nFileSizeLow=0x18a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1 [0172.340] wcscmp (_String1="EXPTOOWS.XLA", _String2=".") returned 1 [0172.340] wcscmp (_String1="EXPTOOWS.XLA", _String2="..") returned 1 [0172.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36e588 [0172.341] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.341] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.341] wcscat (in: _Dest=0x36e588, _Source="EXPTOOWS.XLA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" [0172.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0172.342] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x12f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1 [0172.342] wcscmp (_String1="FACILITY.VSL", _String2=".") returned 1 [0172.342] wcscmp (_String1="FACILITY.VSL", _String2="..") returned 1 [0172.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36f3e0 [0172.342] wcscpy (in: _Dest=0x36f3e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.342] wcscat (in: _Dest=0x36f3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.342] wcscat (in: _Dest=0x36f3e0, _Source="FACILITY.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" [0172.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0172.343] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1868e500, ftCreationTime.dwHighDateTime=0x1c9384b, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1868e500, ftLastWriteTime.dwHighDateTime=0x1c9384b, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1 [0172.343] wcscmp (_String1="FLOCH.VRD", _String2=".") returned 1 [0172.343] wcscmp (_String1="FLOCH.VRD", _String2="..") returned 1 [0172.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da61f0 [0172.343] wcscpy (in: _Dest=0x3da61f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.343] wcscat (in: _Dest=0x3da61f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.343] wcscat (in: _Dest=0x3da61f0, _Source="FLOCH.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" [0172.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da61f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0172.344] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1 [0172.344] wcscmp (_String1="FOREST.CSS", _String2=".") returned 1 [0172.345] wcscmp (_String1="FOREST.CSS", _String2="..") returned 1 [0172.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5bf0 [0172.345] wcscpy (in: _Dest=0x3da5bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.345] wcscat (in: _Dest=0x3da5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.345] wcscat (in: _Dest=0x3da5bf0, _Source="FOREST.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" [0172.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0172.346] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0cc200, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a0cc200, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1 [0172.346] wcscmp (_String1="GANTT.CSS", _String2=".") returned 1 [0172.346] wcscmp (_String1="GANTT.CSS", _String2="..") returned 1 [0172.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6770 [0172.346] wcscpy (in: _Dest=0x3da6770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.347] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.347] wcscat (in: _Dest=0x3da6770, _Source="GANTT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" [0172.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da6770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0172.349] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef0a00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90ef0a00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1 [0172.349] wcscmp (_String1="GANTT.VRD", _String2=".") returned 1 [0172.349] wcscmp (_String1="GANTT.VRD", _String2="..") returned 1 [0172.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da4c70 [0172.349] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.349] wcscat (in: _Dest=0x3da4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.349] wcscat (in: _Dest=0x3da4c70, _Source="GANTT.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" [0172.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0172.350] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x4cd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1 [0172.350] wcscmp (_String1="GANTT.VSL", _String2=".") returned 1 [0172.350] wcscmp (_String1="GANTT.VSL", _String2="..") returned 1 [0172.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5ef0 [0172.351] wcscpy (in: _Dest=0x3da5ef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.351] wcscat (in: _Dest=0x3da5ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.351] wcscat (in: _Dest=0x3da5ef0, _Source="GANTT.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" [0172.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0172.352] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0b1000, ftCreationTime.dwHighDateTime=0x1bbd42b, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0b1000, ftLastWriteTime.dwHighDateTime=0x1bbd42b, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1 [0172.352] wcscmp (_String1="GR8GALRY.GRA", _String2=".") returned 1 [0172.352] wcscmp (_String1="GR8GALRY.GRA", _String2="..") returned 1 [0172.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36e500 [0172.353] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0172.353] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0172.353] wcscat (in: _Dest=0x36e500, _Source="GR8GALRY.GRA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" [0172.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0173.044] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf64a0c00, ftCreationTime.dwHighDateTime=0x1c6e65e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf64a0c00, ftLastWriteTime.dwHighDateTime=0x1c6e65e, nFileSizeHigh=0x0, nFileSizeLow=0x94f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1 [0173.044] wcscmp (_String1="GRAPH.HXS", _String2=".") returned 1 [0173.044] wcscmp (_String1="GRAPH.HXS", _String2="..") returned 1 [0173.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5a70 [0173.044] wcscpy (in: _Dest=0x3da5a70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0173.045] wcscat (in: _Dest=0x3da5a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0173.045] wcscat (in: _Dest=0x3da5a70, _Source="GRAPH.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" [0173.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0173.826] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXC", cAlternateFileName="GRAPH_~1.HXC")) returned 1 [0173.826] wcscmp (_String1="GRAPH_COL.HXC", _String2=".") returned 1 [0173.826] wcscmp (_String1="GRAPH_COL.HXC", _String2="..") returned 1 [0173.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c070 [0173.826] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0173.826] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0173.826] wcscat (in: _Dest=0x3f3c070, _Source="GRAPH_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" [0173.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0173.827] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc692a00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc692a00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXT", cAlternateFileName="GRAPH_~1.HXT")) returned 1 [0174.155] wcscmp (_String1="GRAPH_COL.HXT", _String2=".") returned 1 [0174.155] wcscmp (_String1="GRAPH_COL.HXT", _String2="..") returned 1 [0174.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba660 [0174.155] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.155] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.155] wcscat (in: _Dest=0x3eba660, _Source="GRAPH_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" [0174.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0174.455] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc692a00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc692a00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="GRAPH_~1.HXK")) returned 1 [0174.455] wcscmp (_String1="GRAPH_F_COL.HXK", _String2=".") returned 1 [0174.455] wcscmp (_String1="GRAPH_F_COL.HXK", _String2="..") returned 1 [0174.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3061f70 [0174.455] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.455] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.455] wcscat (in: _Dest=0x3061f70, _Source="GRAPH_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" [0174.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0174.457] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc692a00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc692a00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="GRAPH_~2.HXK")) returned 1 [0174.457] wcscmp (_String1="GRAPH_K_COL.HXK", _String2=".") returned 1 [0174.457] wcscmp (_String1="GRAPH_K_COL.HXK", _String2="..") returned 1 [0174.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ced8 [0174.457] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.457] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.457] wcscat (in: _Dest=0x3e1ced8, _Source="GRAPH_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" [0174.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0174.459] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba7a700, ftCreationTime.dwHighDateTime=0x1cac246, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba7a700, ftLastWriteTime.dwHighDateTime=0x1cac246, nFileSizeHigh=0x0, nFileSizeLow=0x2cb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1 [0174.459] wcscmp (_String1="GRINTL32.DLL", _String2=".") returned 1 [0174.459] wcscmp (_String1="GRINTL32.DLL", _String2="..") returned 1 [0174.459] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42585700, ftCreationTime.dwHighDateTime=0x1cac248, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42585700, ftLastWriteTime.dwHighDateTime=0x1cac248, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.IDX_DLL", cAlternateFileName="GRINTL~1.IDX")) returned 1 [0174.459] wcscmp (_String1="GRINTL32.DLL.IDX_DLL", _String2=".") returned 1 [0174.459] wcscmp (_String1="GRINTL32.DLL.IDX_DLL", _String2="..") returned 1 [0174.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7150 [0174.459] wcscpy (in: _Dest=0x3eb7150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.459] wcscat (in: _Dest=0x3eb7150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.459] wcscat (in: _Dest=0x3eb7150, _Source="GRINTL32.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" [0174.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0174.460] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42585700, ftCreationTime.dwHighDateTime=0x1cac248, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42585700, ftLastWriteTime.dwHighDateTime=0x1cac248, nFileSizeHigh=0x0, nFileSizeLow=0x18780, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.IDX_DLL", cAlternateFileName="GRINTL~2.IDX")) returned 1 [0174.460] wcscmp (_String1="GRINTL32.REST.IDX_DLL", _String2=".") returned 1 [0174.460] wcscmp (_String1="GRINTL32.REST.IDX_DLL", _String2="..") returned 1 [0174.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb64d8 [0174.461] wcscpy (in: _Dest=0x3eb64d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.461] wcscat (in: _Dest=0x3eb64d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.461] wcscat (in: _Dest=0x3eb64d8, _Source="GRINTL32.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" [0174.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb64d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0174.462] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba7a700, ftCreationTime.dwHighDateTime=0x1cac246, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ba7a700, ftLastWriteTime.dwHighDateTime=0x1cac246, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1 [0174.462] wcscmp (_String1="GRLEX.DLL", _String2=".") returned 1 [0174.462] wcscmp (_String1="GRLEX.DLL", _String2="..") returned 1 [0174.462] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd90b0900, ftCreationTime.dwHighDateTime=0x1cacba2, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd90b0900, ftLastWriteTime.dwHighDateTime=0x1cacba2, nFileSizeHigh=0x0, nFileSizeLow=0xbb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove Starter Template.xsn", cAlternateFileName="GROOVE~1.XSN")) returned 1 [0174.462] wcscmp (_String1="Groove Starter Template.xsn", _String2=".") returned 1 [0174.462] wcscmp (_String1="Groove Starter Template.xsn", _String2="..") returned 1 [0174.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df48c0 [0174.463] wcscpy (in: _Dest=0x3df48c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.463] wcscat (in: _Dest=0x3df48c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.463] wcscat (in: _Dest=0x3df48c0, _Source="Groove Starter Template.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" [0174.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df48c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0174.464] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b0b300, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x46011f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21b0b300, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x22c410, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1 [0174.464] wcscmp (_String1="GROOVE.HXS", _String2=".") returned 1 [0174.464] wcscmp (_String1="GROOVE.HXS", _String2="..") returned 1 [0174.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47918 [0174.464] wcscpy (in: _Dest=0x3e47918, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.464] wcscat (in: _Dest=0x3e47918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.464] wcscat (in: _Dest=0x3e47918, _Source="GROOVE.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" [0174.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0174.466] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f79a10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="GROOVE~1")) returned 1 [0174.466] wcscmp (_String1="GrooveForms5", _String2=".") returned 1 [0174.466] wcscmp (_String1="GrooveForms5", _String2="..") returned 1 [0174.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1cd40 [0174.466] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.466] wcscat (in: _Dest=0x3e1cd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.466] wcscat (in: _Dest=0x3e1cd40, _Source="GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0174.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1cd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0174.467] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305fa800, ftCreationTime.dwHighDateTime=0x1cacba8, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x305fa800, ftLastWriteTime.dwHighDateTime=0x1cacba8, nFileSizeHigh=0x0, nFileSizeLow=0x863160, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1 [0174.467] wcscmp (_String1="GrooveIntlResource.dll", _String2=".") returned 1 [0174.467] wcscmp (_String1="GrooveIntlResource.dll", _String2="..") returned 1 [0174.467] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="GROOVE~1.HXC")) returned 1 [0174.467] wcscmp (_String1="GROOVE_COL.HXC", _String2=".") returned 1 [0174.467] wcscmp (_String1="GROOVE_COL.HXC", _String2="..") returned 1 [0174.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ba20 [0174.468] wcscpy (in: _Dest=0x3e1ba20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.468] wcscat (in: _Dest=0x3e1ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.468] wcscat (in: _Dest=0x3e1ba20, _Source="GROOVE_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" [0174.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0174.469] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b1c9500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b1c9500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="GROOVE~1.HXT")) returned 1 [0174.469] wcscmp (_String1="GROOVE_COL.HXT", _String2=".") returned 1 [0174.469] wcscmp (_String1="GROOVE_COL.HXT", _String2="..") returned 1 [0174.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1b888 [0174.469] wcscpy (in: _Dest=0x3e1b888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.469] wcscat (in: _Dest=0x3e1b888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.469] wcscat (in: _Dest=0x3e1b888, _Source="GROOVE_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" [0174.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1b888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0174.470] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b1c9500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b1c9500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="GROOVE~1.HXK")) returned 1 [0174.470] wcscmp (_String1="GROOVE_F_COL.HXK", _String2=".") returned 1 [0174.470] wcscmp (_String1="GROOVE_F_COL.HXK", _String2="..") returned 1 [0174.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61560 [0174.471] wcscpy (in: _Dest=0x7a61560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.471] wcscat (in: _Dest=0x7a61560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.471] wcscat (in: _Dest=0x7a61560, _Source="GROOVE_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" [0174.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0174.472] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b1c9500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460380f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6b1c9500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="GROOVE~2.HXK")) returned 1 [0174.472] wcscmp (_String1="GROOVE_K_COL.HXK", _String2=".") returned 1 [0174.472] wcscmp (_String1="GROOVE_K_COL.HXK", _String2="..") returned 1 [0174.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60870 [0174.472] wcscpy (in: _Dest=0x7a60870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.472] wcscat (in: _Dest=0x7a60870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.473] wcscat (in: _Dest=0x7a60870, _Source="GROOVE_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" [0174.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0174.474] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1 [0174.474] wcscmp (_String1="HVAC.VSL", _String2=".") returned 1 [0174.474] wcscmp (_String1="HVAC.VSL", _String2="..") returned 1 [0174.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47318 [0174.474] wcscpy (in: _Dest=0x3e47318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0174.474] wcscat (in: _Dest=0x3e47318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0174.474] wcscat (in: _Dest=0x3e47318, _Source="HVAC.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" [0174.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0175.262] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b3be00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95b3be00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1 [0175.262] wcscmp (_String1="HVACDIFF.VRD", _String2=".") returned 1 [0175.262] wcscmp (_String1="HVACDIFF.VRD", _String2="..") returned 1 [0175.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3062a10 [0175.263] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0175.263] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0175.263] wcscat (in: _Dest=0x3062a10, _Source="HVACDIFF.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" [0176.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0176.101] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b3be00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95b3be00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1 [0176.101] wcscmp (_String1="HVACDUCT.VRD", _String2=".") returned 1 [0176.101] wcscmp (_String1="HVACDUCT.VRD", _String2="..") returned 1 [0176.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8b48 [0176.101] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.101] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.101] wcscat (in: _Dest=0x3eb8b48, _Source="HVACDUCT.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" [0176.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0176.103] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x75990, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFINTL.DLL", cAlternateFileName="")) returned 1 [0176.103] wcscmp (_String1="INFINTL.DLL", _String2=".") returned 1 [0176.103] wcscmp (_String1="INFINTL.DLL", _String2="..") returned 1 [0176.103] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9c7500, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d9c7500, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x174d06, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.HXS", cAlternateFileName="")) returned 1 [0176.103] wcscmp (_String1="INFOPATH.HXS", _String2=".") returned 1 [0176.103] wcscmp (_String1="INFOPATH.HXS", _String2="..") returned 1 [0176.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb94d8 [0176.103] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.103] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.103] wcscat (in: _Dest=0x3eb94d8, _Source="INFOPATH.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" [0176.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0176.104] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9c7500, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d9c7500, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x697e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR.HXS", cAlternateFileName="INFOPA~1.HXS")) returned 1 [0176.104] wcscmp (_String1="INFOPATHEDITOR.HXS", _String2=".") returned 1 [0176.105] wcscmp (_String1="INFOPATHEDITOR.HXS", _String2="..") returned 1 [0176.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61cb0 [0176.105] wcscpy (in: _Dest=0x7a61cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.105] wcscat (in: _Dest=0x7a61cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.105] wcscat (in: _Dest=0x7a61cb0, _Source="INFOPATHEDITOR.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" [0176.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0176.106] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXC", cAlternateFileName="INFOPA~2.HXC")) returned 1 [0176.106] wcscmp (_String1="INFOPATHEDITOR_COL.HXC", _String2=".") returned 1 [0176.106] wcscmp (_String1="INFOPATHEDITOR_COL.HXC", _String2="..") returned 1 [0176.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad60b8 [0176.107] wcscpy (in: _Dest=0x7ad60b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.107] wcscat (in: _Dest=0x7ad60b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.107] wcscat (in: _Dest=0x7ad60b8, _Source="INFOPATHEDITOR_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" [0176.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad60b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0176.108] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f77600, ftCreationTime.dwHighDateTime=0x1c59386, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f77600, ftLastWriteTime.dwHighDateTime=0x1c59386, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXT", cAlternateFileName="INFOPA~2.HXT")) returned 1 [0176.108] wcscmp (_String1="INFOPATHEDITOR_COL.HXT", _String2=".") returned 1 [0176.108] wcscmp (_String1="INFOPATHEDITOR_COL.HXT", _String2="..") returned 1 [0176.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6280 [0176.108] wcscpy (in: _Dest=0x7ad6280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.108] wcscat (in: _Dest=0x7ad6280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.109] wcscat (in: _Dest=0x7ad6280, _Source="INFOPATHEDITOR_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" [0176.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0176.110] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f77600, ftCreationTime.dwHighDateTime=0x1c59386, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f77600, ftLastWriteTime.dwHighDateTime=0x1c59386, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_F_COL.HXK", cAlternateFileName="INFOPA~3.HXK")) returned 1 [0176.110] wcscmp (_String1="INFOPATHEDITOR_F_COL.HXK", _String2=".") returned 1 [0176.110] wcscmp (_String1="INFOPATHEDITOR_F_COL.HXK", _String2="..") returned 1 [0176.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62ef0 [0176.110] wcscpy (in: _Dest=0x7a62ef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.110] wcscat (in: _Dest=0x7a62ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.111] wcscat (in: _Dest=0x7a62ef0, _Source="INFOPATHEDITOR_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" [0176.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0176.112] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f77600, ftCreationTime.dwHighDateTime=0x1c59386, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51f77600, ftLastWriteTime.dwHighDateTime=0x1c59386, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_K_COL.HXK", cAlternateFileName="INFOPA~4.HXK")) returned 1 [0176.112] wcscmp (_String1="INFOPATHEDITOR_K_COL.HXK", _String2=".") returned 1 [0176.112] wcscmp (_String1="INFOPATHEDITOR_K_COL.HXK", _String2="..") returned 1 [0176.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62950 [0176.112] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.112] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.112] wcscat (in: _Dest=0x7a62950, _Source="INFOPATHEDITOR_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" [0176.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0176.114] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXC", cAlternateFileName="INFOPA~1.HXC")) returned 1 [0176.114] wcscmp (_String1="INFOPATH_COL.HXC", _String2=".") returned 1 [0176.114] wcscmp (_String1="INFOPATH_COL.HXC", _String2="..") returned 1 [0176.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61440 [0176.114] wcscpy (in: _Dest=0x7a61440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.114] wcscat (in: _Dest=0x7a61440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.114] wcscat (in: _Dest=0x7a61440, _Source="INFOPATH_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" [0176.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0176.116] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c16500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4c16500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXT", cAlternateFileName="INFOPA~1.HXT")) returned 1 [0176.116] wcscmp (_String1="INFOPATH_COL.HXT", _String2=".") returned 1 [0176.116] wcscmp (_String1="INFOPATH_COL.HXT", _String2="..") returned 1 [0176.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60090 [0176.117] wcscpy (in: _Dest=0x7a60090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.118] wcscat (in: _Dest=0x7a60090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.118] wcscat (in: _Dest=0x7a60090, _Source="INFOPATH_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" [0176.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0176.119] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c16500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4c16500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_F_COL.HXK", cAlternateFileName="INFOPA~1.HXK")) returned 1 [0176.119] wcscmp (_String1="INFOPATH_F_COL.HXK", _String2=".") returned 1 [0176.119] wcscmp (_String1="INFOPATH_F_COL.HXK", _String2="..") returned 1 [0176.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61b00 [0176.119] wcscpy (in: _Dest=0x7a61b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.119] wcscat (in: _Dest=0x7a61b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.119] wcscat (in: _Dest=0x7a61b00, _Source="INFOPATH_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" [0176.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0176.121] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c16500, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x593496f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4c16500, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_K_COL.HXK", cAlternateFileName="INFOPA~2.HXK")) returned 1 [0176.121] wcscmp (_String1="INFOPATH_K_COL.HXK", _String2=".") returned 1 [0176.121] wcscmp (_String1="INFOPATH_K_COL.HXK", _String2="..") returned 1 [0176.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60a20 [0176.121] wcscpy (in: _Dest=0x7a60a20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.121] wcscat (in: _Dest=0x7a60a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.121] wcscat (in: _Dest=0x7a60a20, _Source="INFOPATH_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" [0176.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0176.124] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x963d8400, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x963d8400, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1 [0176.124] wcscmp (_String1="INSTLIST.VRD", _String2=".") returned 1 [0176.124] wcscmp (_String1="INSTLIST.VRD", _String2="..") returned 1 [0176.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9098 [0176.124] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.124] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.124] wcscat (in: _Dest=0x3eb9098, _Source="INSTLIST.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" [0176.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0176.126] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd139a00, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd139a00, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1 [0176.126] wcscmp (_String1="INVENTRY.VRD", _String2=".") returned 1 [0176.126] wcscmp (_String1="INVENTRY.VRD", _String2="..") returned 1 [0176.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba440 [0176.127] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0176.127] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0176.127] wcscat (in: _Dest=0x3eba440, _Source="INVENTRY.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" [0176.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0176.129] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687dff00, ftCreationTime.dwHighDateTime=0x1ca0fb7, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x687dff00, ftLastWriteTime.dwHighDateTime=0x1ca0fb7, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="INVITE~1.ONE")) returned 1 [0177.325] wcscmp (_String1="Invite or Link.one", _String2=".") returned 1 [0177.325] wcscmp (_String1="Invite or Link.one", _String2="..") returned 1 [0177.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45c80 [0177.325] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0177.325] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0177.326] wcscat (in: _Dest=0x3d45c80, _Source="Invite or Link.one" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" [0177.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0177.853] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x5936f850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x22a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDSINTL.DLL", cAlternateFileName="")) returned 1 [0177.853] wcscmp (_String1="IPDSINTL.DLL", _String2=".") returned 1 [0177.853] wcscmp (_String1="IPDSINTL.DLL", _String2="..") returned 1 [0177.853] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0xd7b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDINTL.DLL", cAlternateFileName="")) returned 1 [0177.853] wcscmp (_String1="IPEDINTL.DLL", _String2=".") returned 1 [0177.853] wcscmp (_String1="IPEDINTL.DLL", _String2="..") returned 1 [0177.853] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827e4000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x593959b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x827e4000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x3e7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLKINTL.DLL", cAlternateFileName="IPOLKI~1.DLL")) returned 1 [0177.853] wcscmp (_String1="IPOLKINTL.DLL", _String2=".") returned 1 [0177.853] wcscmp (_String1="IPOLKINTL.DLL", _String2="..") returned 1 [0177.853] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2cf800, ftCreationTime.dwHighDateTime=0x1c91404, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc2cf800, ftLastWriteTime.dwHighDateTime=0x1c91404, nFileSizeHigh=0x0, nFileSizeLow=0x3cebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issue Tracking.gta", cAlternateFileName="ISSUET~1.GTA")) returned 1 [0177.854] wcscmp (_String1="Issue Tracking.gta", _String2=".") returned 1 [0177.854] wcscmp (_String1="Issue Tracking.gta", _String2="..") returned 1 [0177.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45770 [0177.854] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0177.854] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0177.854] wcscat (in: _Dest=0x3d45770, _Source="Issue Tracking.gta" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" [0177.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0177.855] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1 [0177.855] wcscmp (_String1="JADE.CSS", _String2=".") returned 1 [0177.855] wcscmp (_String1="JADE.CSS", _String2="..") returned 1 [0177.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47c18 [0177.855] wcscpy (in: _Dest=0x3e47c18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0177.855] wcscat (in: _Dest=0x3e47c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0177.855] wcscat (in: _Dest=0x3e47c18, _Source="JADE.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" [0177.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0177.856] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8180, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1 [0177.856] wcscmp (_String1="LGND.VSL", _String2=".") returned 1 [0177.856] wcscmp (_String1="LGND.VSL", _String2="..") returned 1 [0177.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47898 [0177.856] wcscpy (in: _Dest=0x3e47898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0177.856] wcscat (in: _Dest=0x3e47898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0177.856] wcscat (in: _Dest=0x3e47898, _Source="LGND.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" [0177.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0177.857] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48c67950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x112970, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1 [0177.857] wcscmp (_String1="MAPIR.DLL", _String2=".") returned 1 [0177.857] wcscmp (_String1="MAPIR.DLL", _String2="..") returned 1 [0177.857] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.IDX_DLL", cAlternateFileName="MAPIRD~1.IDX")) returned 1 [0177.857] wcscmp (_String1="MAPIR.DLL.IDX_DLL", _String2=".") returned 1 [0177.857] wcscmp (_String1="MAPIR.DLL.IDX_DLL", _String2="..") returned 1 [0177.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44a80 [0177.858] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0177.858] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0177.858] wcscat (in: _Dest=0x3d44a80, _Source="MAPIR.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" [0177.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0177.859] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0177.859] wcscmp (_String1="MAPISHELLR.DLL", _String2=".") returned 1 [0177.859] wcscmp (_String1="MAPISHELLR.DLL", _String2="..") returned 1 [0177.859] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x1009b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MERES.DLL", cAlternateFileName="")) returned 1 [0177.859] wcscmp (_String1="MERES.DLL", _String2=".") returned 1 [0177.859] wcscmp (_String1="MERES.DLL", _String2="..") returned 1 [0177.859] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x6209a310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x6cf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1 [0177.859] wcscmp (_String1="MOR6INT.DLL", _String2=".") returned 1 [0177.859] wcscmp (_String1="MOR6INT.DLL", _String2="..") returned 1 [0177.859] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e81c00, ftCreationTime.dwHighDateTime=0x1cab82f, ftLastAccessTime.dwLowDateTime=0x6209a310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4e81c00, ftLastWriteTime.dwHighDateTime=0x1cab82f, nFileSizeHigh=0x0, nFileSizeLow=0x9b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.IDX_DLL", cAlternateFileName="MOR6IN~1.IDX")) returned 1 [0177.859] wcscmp (_String1="MOR6INT.REST.IDX_DLL", _String2=".") returned 1 [0177.859] wcscmp (_String1="MOR6INT.REST.IDX_DLL", _String2="..") returned 1 [0177.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad60b8 [0177.859] wcscpy (in: _Dest=0x7ad60b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0177.859] wcscat (in: _Dest=0x7ad60b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0177.859] wcscat (in: _Dest=0x7ad60b8, _Source="MOR6INT.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" [0177.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad60b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0177.892] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e4eb00, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96e4eb00, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1 [0177.892] wcscmp (_String1="MOVE.VRD", _String2=".") returned 1 [0177.892] wcscmp (_String1="MOVE.VRD", _String2="..") returned 1 [0177.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47318 [0177.892] wcscpy (in: _Dest=0x3e47318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0177.892] wcscat (in: _Dest=0x3e47318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0177.893] wcscat (in: _Dest=0x3e47318, _Source="MOVE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" [0178.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0178.482] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x3178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1 [0178.482] wcscmp (_String1="MPXRES.DLL", _String2=".") returned 1 [0178.482] wcscmp (_String1="MPXRES.DLL", _String2="..") returned 1 [0178.482] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d2c00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e1d2c00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0xa3f874, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV.HXS", cAlternateFileName="MSACCE~1.HXS")) returned 1 [0178.482] wcscmp (_String1="MSACCESS.DEV.HXS", _String2=".") returned 1 [0178.482] wcscmp (_String1="MSACCESS.DEV.HXS", _String2="..") returned 1 [0178.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45ad0 [0178.482] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.482] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.482] wcscat (in: _Dest=0x3d45ad0, _Source="MSACCESS.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" [0178.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0178.484] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXC", cAlternateFileName="MSACCE~1.HXC")) returned 1 [0178.484] wcscmp (_String1="MSACCESS.DEV_COL.HXC", _String2=".") returned 1 [0178.484] wcscmp (_String1="MSACCESS.DEV_COL.HXC", _String2="..") returned 1 [0178.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5868 [0178.484] wcscpy (in: _Dest=0x7ad5868, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.484] wcscat (in: _Dest=0x7ad5868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.484] wcscat (in: _Dest=0x7ad5868, _Source="MSACCESS.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" [0178.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0178.485] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19a000, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd19a000, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXT", cAlternateFileName="MSACCE~1.HXT")) returned 1 [0178.486] wcscmp (_String1="MSACCESS.DEV_COL.HXT", _String2=".") returned 1 [0178.486] wcscmp (_String1="MSACCESS.DEV_COL.HXT", _String2="..") returned 1 [0178.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5440 [0178.486] wcscpy (in: _Dest=0x7ad5440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.486] wcscat (in: _Dest=0x7ad5440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.486] wcscat (in: _Dest=0x7ad5440, _Source="MSACCESS.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" [0178.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0178.487] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19a000, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd19a000, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_F_COL.HXK", cAlternateFileName="MSACCE~1.HXK")) returned 1 [0178.487] wcscmp (_String1="MSACCESS.DEV_F_COL.HXK", _String2=".") returned 1 [0178.487] wcscmp (_String1="MSACCESS.DEV_F_COL.HXK", _String2="..") returned 1 [0178.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad5e58 [0178.487] wcscpy (in: _Dest=0x7ad5e58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.487] wcscat (in: _Dest=0x7ad5e58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.487] wcscat (in: _Dest=0x7ad5e58, _Source="MSACCESS.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" [0178.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0178.489] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19a000, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c64fef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd19a000, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_K_COL.HXK", cAlternateFileName="MSACCE~2.HXK")) returned 1 [0178.489] wcscmp (_String1="MSACCESS.DEV_K_COL.HXK", _String2=".") returned 1 [0178.489] wcscmp (_String1="MSACCESS.DEV_K_COL.HXK", _String2="..") returned 1 [0178.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad5570 [0178.489] wcscpy (in: _Dest=0x7ad5570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.489] wcscat (in: _Dest=0x7ad5570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.489] wcscat (in: _Dest=0x7ad5570, _Source="MSACCESS.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" [0178.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0178.491] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d2c00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x5c676050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e1d2c00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1 [0178.491] wcscmp (_String1="MSACCESS.HXS", _String2=".") returned 1 [0178.491] wcscmp (_String1="MSACCESS.HXS", _String2="..") returned 1 [0178.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3062a10 [0178.491] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.491] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.491] wcscat (in: _Dest=0x3062a10, _Source="MSACCESS.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" [0178.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0178.492] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x5c676050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="MSACCE~2.HXC")) returned 1 [0178.492] wcscmp (_String1="MSACCESS_COL.HXC", _String2=".") returned 1 [0178.492] wcscmp (_String1="MSACCESS_COL.HXC", _String2="..") returned 1 [0178.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44690 [0178.493] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.493] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.493] wcscat (in: _Dest=0x3d44690, _Source="MSACCESS_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" [0178.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0178.494] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc854ec00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc854ec00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="MSACCE~2.HXT")) returned 1 [0178.494] wcscmp (_String1="MSACCESS_COL.HXT", _String2=".") returned 1 [0178.494] wcscmp (_String1="MSACCESS_COL.HXT", _String2="..") returned 1 [0178.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45ec0 [0178.495] wcscpy (in: _Dest=0x3d45ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.495] wcscat (in: _Dest=0x3d45ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.495] wcscat (in: _Dest=0x3d45ec0, _Source="MSACCESS_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" [0178.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0178.496] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc854ec00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc854ec00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="MSACCE~3.HXK")) returned 1 [0178.496] wcscmp (_String1="MSACCESS_F_COL.HXK", _String2=".") returned 1 [0178.496] wcscmp (_String1="MSACCESS_F_COL.HXK", _String2="..") returned 1 [0178.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45410 [0178.496] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.496] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.496] wcscat (in: _Dest=0x3d45410, _Source="MSACCESS_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" [0178.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0178.502] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc854ec00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc854ec00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="MSACCE~4.HXK")) returned 1 [0178.502] wcscmp (_String1="MSACCESS_K_COL.HXK", _String2=".") returned 1 [0178.502] wcscmp (_String1="MSACCESS_K_COL.HXK", _String2="..") returned 1 [0178.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45650 [0178.502] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.502] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.502] wcscat (in: _Dest=0x3d45650, _Source="MSACCESS_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" [0178.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0178.504] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x127f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1 [0178.504] wcscmp (_String1="MSAIN.DLL", _String2=".") returned 1 [0178.504] wcscmp (_String1="MSAIN.DLL", _String2="..") returned 1 [0178.504] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedd2ea00, ftCreationTime.dwHighDateTime=0x1c99288, ftLastAccessTime.dwLowDateTime=0x51781ef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedd2ea00, ftLastWriteTime.dwHighDateTime=0x1c99288, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0178.504] wcscmp (_String1="MSO.ACL", _String2=".") returned 1 [0178.504] wcscmp (_String1="MSO.ACL", _String2="..") returned 1 [0178.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0178.504] wcscpy (in: _Dest=0x3f3fb00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.504] wcscat (in: _Dest=0x3f3fb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.504] wcscat (in: _Dest=0x3f3fb00, _Source="MSO.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" [0178.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0178.506] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7690d200, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7690d200, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x69560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1 [0178.506] wcscmp (_String1="MSOUC.HXS", _String2=".") returned 1 [0178.506] wcscmp (_String1="MSOUC.HXS", _String2="..") returned 1 [0178.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x290300 [0178.506] wcscpy (in: _Dest=0x290300, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.506] wcscat (in: _Dest=0x290300, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.506] wcscat (in: _Dest=0x290300, _Source="MSOUC.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" [0178.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x290300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0178.508] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="MSOUC_~1.HXC")) returned 1 [0178.508] wcscmp (_String1="MSOUC_COL.HXC", _String2=".") returned 1 [0178.508] wcscmp (_String1="MSOUC_COL.HXC", _String2="..") returned 1 [0178.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3061f70 [0178.508] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.508] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.508] wcscat (in: _Dest=0x3061f70, _Source="MSOUC_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" [0178.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0178.509] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="MSOUC_~1.HXT")) returned 1 [0178.510] wcscmp (_String1="MSOUC_COL.HXT", _String2=".") returned 1 [0178.510] wcscmp (_String1="MSOUC_COL.HXT", _String2="..") returned 1 [0178.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x30633a0 [0178.510] wcscpy (in: _Dest=0x30633a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.510] wcscat (in: _Dest=0x30633a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.510] wcscat (in: _Dest=0x30633a0, _Source="MSOUC_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" [0178.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30633a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0178.511] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="MSOUC_~1.HXK")) returned 1 [0178.511] wcscmp (_String1="MSOUC_F_COL.HXK", _String2=".") returned 1 [0178.511] wcscmp (_String1="MSOUC_F_COL.HXK", _String2="..") returned 1 [0178.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062c30 [0178.512] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.512] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.512] wcscat (in: _Dest=0x3062c30, _Source="MSOUC_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" [0178.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0178.513] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1455b00, ftCreationTime.dwHighDateTime=0x1ca7833, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1455b00, ftLastWriteTime.dwHighDateTime=0x1ca7833, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="MSOUC_~2.HXK")) returned 1 [0178.513] wcscmp (_String1="MSOUC_K_COL.HXK", _String2=".") returned 1 [0178.513] wcscmp (_String1="MSOUC_K_COL.HXK", _String2="..") returned 1 [0178.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3063428 [0178.513] wcscpy (in: _Dest=0x3063428, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0178.513] wcscat (in: _Dest=0x3063428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0178.513] wcscat (in: _Dest=0x3063428, _Source="MSOUC_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" [0178.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3063428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0178.515] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26756700, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x6210c730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26756700, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x487dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV.HXS", cAlternateFileName="MSPUBD~1.HXS")) returned 1 [0179.238] wcscmp (_String1="MSPUB.DEV.HXS", _String2=".") returned 1 [0179.238] wcscmp (_String1="MSPUB.DEV.HXS", _String2="..") returned 1 [0179.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68cc8 [0179.238] wcscpy (in: _Dest=0x7a68cc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0179.238] wcscat (in: _Dest=0x7a68cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0179.238] wcscat (in: _Dest=0x7a68cc8, _Source="MSPUB.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" [0180.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0180.037] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x6210c730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXC", cAlternateFileName="MSPUBD~1.HXC")) returned 1 [0180.038] wcscmp (_String1="MSPUB.DEV_COL.HXC", _String2=".") returned 1 [0180.038] wcscmp (_String1="MSPUB.DEV_COL.HXC", _String2="..") returned 1 [0180.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44e70 [0180.038] wcscpy (in: _Dest=0x3d44e70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.038] wcscat (in: _Dest=0x3d44e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.038] wcscat (in: _Dest=0x3d44e70, _Source="MSPUB.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" [0180.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c [0180.039] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30f8100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x6210c730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30f8100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXT", cAlternateFileName="MSPUBD~1.HXT")) returned 1 [0180.039] wcscmp (_String1="MSPUB.DEV_COL.HXT", _String2=".") returned 1 [0180.039] wcscmp (_String1="MSPUB.DEV_COL.HXT", _String2="..") returned 1 [0180.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45140 [0180.039] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.039] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.039] wcscat (in: _Dest=0x3d45140, _Source="MSPUB.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" [0180.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0180.041] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30f8100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x62132890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30f8100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_F_COL.HXK", cAlternateFileName="MSPUBD~1.HXK")) returned 1 [0180.041] wcscmp (_String1="MSPUB.DEV_F_COL.HXK", _String2=".") returned 1 [0180.041] wcscmp (_String1="MSPUB.DEV_F_COL.HXK", _String2="..") returned 1 [0180.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0180.041] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.041] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.041] wcscat (in: _Dest=0x3d44d50, _Source="MSPUB.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" [0180.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0180.042] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30f8100, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x62132890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30f8100, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_K_COL.HXK", cAlternateFileName="MSPUBD~2.HXK")) returned 1 [0180.042] wcscmp (_String1="MSPUB.DEV_K_COL.HXK", _String2=".") returned 1 [0180.042] wcscmp (_String1="MSPUB.DEV_K_COL.HXK", _String2="..") returned 1 [0180.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d450b0 [0180.042] wcscpy (in: _Dest=0x3d450b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.042] wcscat (in: _Dest=0x3d450b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.042] wcscat (in: _Dest=0x3d450b0, _Source="MSPUB.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" [0180.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d450b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0180.043] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a69400, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x62132890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27a69400, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cc936, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1 [0180.044] wcscmp (_String1="MSPUB.HXS", _String2=".") returned 1 [0180.044] wcscmp (_String1="MSPUB.HXS", _String2="..") returned 1 [0180.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47398 [0180.044] wcscpy (in: _Dest=0x3e47398, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.044] wcscat (in: _Dest=0x3e47398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.044] wcscat (in: _Dest=0x3e47398, _Source="MSPUB.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" [0180.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0180.045] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2517e400, ftCreationTime.dwHighDateTime=0x1c2a219, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2517e400, ftLastWriteTime.dwHighDateTime=0x1c2a219, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1 [0180.045] wcscmp (_String1="MSPUB.OPG", _String2=".") returned 1 [0180.045] wcscmp (_String1="MSPUB.OPG", _String2="..") returned 1 [0180.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46718 [0180.045] wcscpy (in: _Dest=0x3e46718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.045] wcscat (in: _Dest=0x3e46718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.045] wcscat (in: _Dest=0x3e46718, _Source="MSPUB.OPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" [0180.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0180.047] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="MSPUB_~1.HXC")) returned 1 [0180.047] wcscmp (_String1="MSPUB_COL.HXC", _String2=".") returned 1 [0180.047] wcscmp (_String1="MSPUB_COL.HXC", _String2="..") returned 1 [0180.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ca10 [0180.047] wcscpy (in: _Dest=0x3e1ca10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.047] wcscat (in: _Dest=0x3e1ca10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.047] wcscat (in: _Dest=0x3e1ca10, _Source="MSPUB_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" [0180.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0180.048] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad2700, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0ad2700, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="MSPUB_~1.HXT")) returned 1 [0180.048] wcscmp (_String1="MSPUB_COL.HXT", _String2=".") returned 1 [0180.048] wcscmp (_String1="MSPUB_COL.HXT", _String2="..") returned 1 [0180.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68800 [0180.048] wcscpy (in: _Dest=0x7a68800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.048] wcscat (in: _Dest=0x7a68800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.048] wcscat (in: _Dest=0x7a68800, _Source="MSPUB_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" [0180.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0180.049] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad2700, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0ad2700, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="MSPUB_~1.HXK")) returned 1 [0180.049] wcscmp (_String1="MSPUB_F_COL.HXK", _String2=".") returned 1 [0180.049] wcscmp (_String1="MSPUB_F_COL.HXK", _String2="..") returned 1 [0180.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68d50 [0180.049] wcscpy (in: _Dest=0x7a68d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.049] wcscat (in: _Dest=0x7a68d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.049] wcscat (in: _Dest=0x7a68d50, _Source="MSPUB_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" [0180.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0180.050] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad2700, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0ad2700, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="MSPUB_~2.HXK")) returned 1 [0180.050] wcscmp (_String1="MSPUB_K_COL.HXK", _String2=".") returned 1 [0180.050] wcscmp (_String1="MSPUB_K_COL.HXK", _String2="..") returned 1 [0180.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68dd8 [0180.050] wcscpy (in: _Dest=0x7a68dd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.050] wcscat (in: _Dest=0x7a68dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.050] wcscat (in: _Dest=0x7a68dd8, _Source="MSPUB_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" [0180.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0180.051] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d875700, ftCreationTime.dwHighDateTime=0x1c33b04, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6d875700, ftLastWriteTime.dwHighDateTime=0x1c33b04, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1 [0180.051] wcscmp (_String1="MSQRY32.CHM", _String2=".") returned 1 [0180.051] wcscmp (_String1="MSQRY32.CHM", _String2="..") returned 1 [0180.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46c18 [0180.051] wcscpy (in: _Dest=0x3e46c18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.052] wcscat (in: _Dest=0x3e46c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.052] wcscat (in: _Dest=0x3e46c18, _Source="MSQRY32.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" [0180.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0180.810] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b79c100, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b79c100, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTINTL.DLL", cAlternateFileName="")) returned 1 [0180.810] wcscmp (_String1="MSTINTL.DLL", _String2=".") returned 1 [0180.810] wcscmp (_String1="MSTINTL.DLL", _String2="..") returned 1 [0180.810] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1d2c00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e1d2c00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x5f254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.HXS", cAlternateFileName="")) returned 1 [0180.810] wcscmp (_String1="MSTORE.HXS", _String2=".") returned 1 [0180.810] wcscmp (_String1="MSTORE.HXS", _String2="..") returned 1 [0180.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a018 [0180.810] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0180.810] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0180.810] wcscat (in: _Dest=0x3e1a018, _Source="MSTORE.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" [0182.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0182.616] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877c0900, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x877c0900, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXC", cAlternateFileName="MSTORE~1.HXC")) returned 1 [0182.616] wcscmp (_String1="MSTORE_COL.HXC", _String2=".") returned 1 [0182.616] wcscmp (_String1="MSTORE_COL.HXC", _String2="..") returned 1 [0182.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9670 [0182.617] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.617] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.617] wcscat (in: _Dest=0x3eb9670, _Source="MSTORE_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" [0182.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0182.618] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a30800, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6a30800, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXT", cAlternateFileName="MSTORE~1.HXT")) returned 1 [0182.618] wcscmp (_String1="MSTORE_COL.HXT", _String2=".") returned 1 [0182.618] wcscmp (_String1="MSTORE_COL.HXT", _String2="..") returned 1 [0182.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba330 [0182.618] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.618] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.618] wcscat (in: _Dest=0x3eba330, _Source="MSTORE_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" [0182.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0182.620] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a30800, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x354b98b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6a30800, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_F_COL.HXK", cAlternateFileName="MSTORE~1.HXK")) returned 1 [0182.620] wcscmp (_String1="MSTORE_F_COL.HXK", _String2=".") returned 1 [0182.620] wcscmp (_String1="MSTORE_F_COL.HXK", _String2="..") returned 1 [0182.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44570 [0182.620] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.620] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.620] wcscat (in: _Dest=0x3d44570, _Source="MSTORE_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" [0182.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0182.623] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a30800, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6a30800, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_K_COL.HXK", cAlternateFileName="MSTORE~2.HXK")) returned 1 [0182.623] wcscmp (_String1="MSTORE_K_COL.HXK", _String2=".") returned 1 [0182.623] wcscmp (_String1="MSTORE_K_COL.HXK", _String2="..") returned 1 [0182.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45770 [0182.623] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.623] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.623] wcscat (in: _Dest=0x3d45770, _Source="MSTORE_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" [0182.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0182.625] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1 [0182.625] wcscmp (_String1="NETWORK.CSS", _String2=".") returned 1 [0182.625] wcscmp (_String1="NETWORK.CSS", _String2="..") returned 1 [0182.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47318 [0182.625] wcscpy (in: _Dest=0x3e47318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.626] wcscat (in: _Dest=0x3e47318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.626] wcscat (in: _Dest=0x3e47318, _Source="NETWORK.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" [0182.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0182.627] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99474500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99474500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1 [0182.627] wcscmp (_String1="NETWORK1.VRD", _String2=".") returned 1 [0182.627] wcscmp (_String1="NETWORK1.VRD", _String2="..") returned 1 [0182.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba6e8 [0182.628] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.628] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.628] wcscat (in: _Dest=0x3eba6e8, _Source="NETWORK1.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" [0182.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0182.629] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99474500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99474500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1 [0182.629] wcscmp (_String1="NETWORK2.VRD", _String2=".") returned 1 [0182.629] wcscmp (_String1="NETWORK2.VRD", _String2="..") returned 1 [0182.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba220 [0182.630] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.630] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.630] wcscat (in: _Dest=0x3eba220, _Source="NETWORK2.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" [0182.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0182.631] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99474500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99474500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1 [0182.631] wcscmp (_String1="NETWORK3.VRD", _String2=".") returned 1 [0182.631] wcscmp (_String1="NETWORK3.VRD", _String2="..") returned 1 [0182.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8bd0 [0182.631] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.631] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.631] wcscat (in: _Dest=0x3eb8bd0, _Source="NETWORK3.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" [0182.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0182.633] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8023dd00, ftCreationTime.dwHighDateTime=0x1c2c0db, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8023dd00, ftLastWriteTime.dwHighDateTime=0x1c2c0db, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1 [0182.633] wcscmp (_String1="OCCMPVRD.XML", _String2=".") returned 1 [0182.633] wcscmp (_String1="OCCMPVRD.XML", _String2="..") returned 1 [0182.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9890 [0182.633] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.633] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.633] wcscat (in: _Dest=0x3eb9890, _Source="OCCMPVRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" [0182.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0182.635] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x19f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCLTINT.DLL", cAlternateFileName="")) returned 1 [0182.635] wcscmp (_String1="OCLTINT.DLL", _String2=".") returned 1 [0182.635] wcscmp (_String1="OCLTINT.DLL", _String2="..") returned 1 [0182.635] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09c3400, ftCreationTime.dwHighDateTime=0x1c2c146, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe09c3400, ftLastWriteTime.dwHighDateTime=0x1c2c146, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1 [0182.635] wcscmp (_String1="OCMODVRD.XML", _String2=".") returned 1 [0182.635] wcscmp (_String1="OCMODVRD.XML", _String2="..") returned 1 [0182.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8ce0 [0182.635] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.635] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.635] wcscat (in: _Dest=0x3eb8ce0, _Source="OCMODVRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" [0182.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0182.637] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34104100, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34104100, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x81380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWCI.DLL", cAlternateFileName="")) returned 1 [0182.637] wcscmp (_String1="OFFOWCI.DLL", _String2=".") returned 1 [0182.637] wcscmp (_String1="OFFOWCI.DLL", _String2="..") returned 1 [0182.637] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b0b300, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21b0b300, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.HXS", cAlternateFileName="")) returned 1 [0182.637] wcscmp (_String1="OIS.HXS", _String2=".") returned 1 [0182.637] wcscmp (_String1="OIS.HXS", _String2="..") returned 1 [0182.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0182.637] wcscpy (in: _Dest=0x3f3fa88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.637] wcscat (in: _Dest=0x3f3fa88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.637] wcscat (in: _Dest=0x3f3fa88, _Source="OIS.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" [0182.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fa88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0182.639] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df92700, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7df92700, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISINTL.DLL", cAlternateFileName="")) returned 1 [0182.639] wcscmp (_String1="OISINTL.DLL", _String2=".") returned 1 [0182.639] wcscmp (_String1="OISINTL.DLL", _String2="..") returned 1 [0182.639] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXC", cAlternateFileName="")) returned 1 [0182.639] wcscmp (_String1="OIS_COL.HXC", _String2=".") returned 1 [0182.639] wcscmp (_String1="OIS_COL.HXC", _String2="..") returned 1 [0182.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47898 [0182.639] wcscpy (in: _Dest=0x3e47898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.639] wcscat (in: _Dest=0x3e47898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.639] wcscat (in: _Dest=0x3e47898, _Source="OIS_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" [0182.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0182.641] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda368f00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda368f00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXT", cAlternateFileName="")) returned 1 [0182.641] wcscmp (_String1="OIS_COL.HXT", _String2=".") returned 1 [0182.641] wcscmp (_String1="OIS_COL.HXT", _String2="..") returned 1 [0182.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47c18 [0182.641] wcscpy (in: _Dest=0x3e47c18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.641] wcscat (in: _Dest=0x3e47c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.641] wcscat (in: _Dest=0x3e47c18, _Source="OIS_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" [0182.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0182.643] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda368f00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda368f00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_F_COL.HXK", cAlternateFileName="OIS_F_~1.HXK")) returned 1 [0182.643] wcscmp (_String1="OIS_F_COL.HXK", _String2=".") returned 1 [0182.643] wcscmp (_String1="OIS_F_COL.HXK", _String2="..") returned 1 [0182.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb96f8 [0182.643] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.643] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.643] wcscat (in: _Dest=0x3eb96f8, _Source="OIS_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" [0182.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0182.645] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda368f00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda368f00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_K_COL.HXK", cAlternateFileName="OIS_K_~1.HXK")) returned 1 [0182.645] wcscmp (_String1="OIS_K_COL.HXK", _String2=".") returned 1 [0182.645] wcscmp (_String1="OIS_K_COL.HXK", _String2="..") returned 1 [0182.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb99a0 [0182.645] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.645] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.645] wcscat (in: _Dest=0x3eb99a0, _Source="OIS_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" [0182.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0182.647] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde5e9600, ftCreationTime.dwHighDateTime=0x1cab90b, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde5e9600, ftLastWriteTime.dwHighDateTime=0x1cab90b, nFileSizeHigh=0x0, nFileSizeLow=0x62180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1 [0182.647] wcscmp (_String1="OMSINTL.DLL", _String2=".") returned 1 [0182.647] wcscmp (_String1="OMSINTL.DLL", _String2="..") returned 1 [0182.647] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b30f400, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b30f400, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.IDX_DLL", cAlternateFileName="OMSINT~1.IDX")) returned 1 [0182.660] wcscmp (_String1="OMSINTL.DLL.IDX_DLL", _String2=".") returned 1 [0182.660] wcscmp (_String1="OMSINTL.DLL.IDX_DLL", _String2="..") returned 1 [0182.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d455c0 [0182.660] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0182.660] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0182.660] wcscat (in: _Dest=0x3d455c0, _Source="OMSINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" [0184.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0184.415] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xb388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONELEV.EXE", cAlternateFileName="")) returned 1 [0184.415] wcscmp (_String1="ONELEV.EXE", _String2=".") returned 1 [0184.415] wcscmp (_String1="ONELEV.EXE", _String2="..") returned 1 [0184.415] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b0b300, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x21b0b300, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1 [0184.415] wcscmp (_String1="ONENOTE.HXS", _String2=".") returned 1 [0184.415] wcscmp (_String1="ONENOTE.HXS", _String2="..") returned 1 [0184.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47c18 [0184.415] wcscpy (in: _Dest=0x3e47c18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.415] wcscat (in: _Dest=0x3e47c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.416] wcscat (in: _Dest=0x3e47c18, _Source="ONENOTE.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" [0184.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0184.417] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x412f2f00, ftCreationTime.dwHighDateTime=0x1cab831, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x412f2f00, ftLastWriteTime.dwHighDateTime=0x1cab831, nFileSizeHigh=0x0, nFileSizeLow=0x25e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPCIntl.dll", cAlternateFileName="ONENOT~1.DLL")) returned 1 [0184.417] wcscmp (_String1="OneNoteSyncPCIntl.dll", _String2=".") returned 1 [0184.417] wcscmp (_String1="OneNoteSyncPCIntl.dll", _String2="..") returned 1 [0184.417] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="ONENOT~1.HXC")) returned 1 [0184.417] wcscmp (_String1="ONENOTE_COL.HXC", _String2=".") returned 1 [0184.417] wcscmp (_String1="ONENOTE_COL.HXC", _String2="..") returned 1 [0184.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba110 [0184.418] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.418] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.418] wcscat (in: _Dest=0x3eba110, _Source="ONENOTE_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" [0184.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0184.419] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddca1600, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddca1600, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="ONENOT~1.HXT")) returned 1 [0184.419] wcscmp (_String1="ONENOTE_COL.HXT", _String2=".") returned 1 [0184.419] wcscmp (_String1="ONENOTE_COL.HXT", _String2="..") returned 1 [0184.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0184.420] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.420] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.420] wcscat (in: _Dest=0x3eb9560, _Source="ONENOTE_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" [0184.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0184.421] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddca1600, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddca1600, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="ONENOT~1.HXK")) returned 1 [0184.421] wcscmp (_String1="ONENOTE_F_COL.HXK", _String2=".") returned 1 [0184.421] wcscmp (_String1="ONENOTE_F_COL.HXK", _String2="..") returned 1 [0184.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44570 [0184.421] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.421] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.421] wcscat (in: _Dest=0x3d44570, _Source="ONENOTE_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" [0184.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0184.422] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddca1600, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x5545b150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddca1600, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="ONENOT~2.HXK")) returned 1 [0184.422] wcscmp (_String1="ONENOTE_K_COL.HXK", _String2=".") returned 1 [0184.422] wcscmp (_String1="ONENOTE_K_COL.HXK", _String2="..") returned 1 [0184.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45410 [0184.423] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.423] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.423] wcscat (in: _Dest=0x3d45410, _Source="ONENOTE_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" [0184.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0184.424] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa429f800, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554812b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa429f800, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x148d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="ONGUID~1.ONE")) returned 1 [0184.424] wcscmp (_String1="ONGuide.onepkg", _String2=".") returned 1 [0184.424] wcscmp (_String1="ONGuide.onepkg", _String2="..") returned 1 [0184.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8c58 [0184.424] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.424] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.424] wcscat (in: _Dest=0x3eb8c58, _Source="ONGuide.onepkg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" [0184.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0184.425] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x341f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1 [0184.426] wcscmp (_String1="ONINTL.DLL", _String2=".") returned 1 [0184.426] wcscmp (_String1="ONINTL.DLL", _String2="..") returned 1 [0184.426] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3584900, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554812b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3584900, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x3b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.IDX_DLL", cAlternateFileName="ONINTL~1.IDX")) returned 1 [0184.426] wcscmp (_String1="ONINTL.DLL.IDX_DLL", _String2=".") returned 1 [0184.426] wcscmp (_String1="ONINTL.DLL.IDX_DLL", _String2="..") returned 1 [0184.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d442a0 [0184.426] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.426] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.426] wcscat (in: _Dest=0x3d442a0, _Source="ONINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" [0184.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0184.427] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3584900, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3584900, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x1bf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.IDX_DLL", cAlternateFileName="ONINTL~2.IDX")) returned 1 [0184.427] wcscmp (_String1="ONINTL.REST.IDX_DLL", _String2=".") returned 1 [0184.427] wcscmp (_String1="ONINTL.REST.IDX_DLL", _String2="..") returned 1 [0184.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d454a0 [0184.428] wcscpy (in: _Dest=0x3d454a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.428] wcscat (in: _Dest=0x3d454a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.428] wcscat (in: _Dest=0x3d454a0, _Source="ONINTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" [0184.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d454a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0184.429] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a787200, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a787200, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1 [0184.429] wcscmp (_String1="ORGCH.VRD", _String2=".") returned 1 [0184.429] wcscmp (_String1="ORGCH.VRD", _String2="..") returned 1 [0184.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47898 [0184.429] wcscpy (in: _Dest=0x3e47898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.429] wcscat (in: _Dest=0x3e47898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.429] wcscat (in: _Dest=0x3e47898, _Source="ORGCH.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" [0184.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0184.431] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xc9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1 [0184.431] wcscmp (_String1="ORGCHART.VSL", _String2=".") returned 1 [0184.431] wcscmp (_String1="ORGCHART.VSL", _String2="..") returned 1 [0184.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9cd0 [0184.431] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.431] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.431] wcscat (in: _Dest=0x3eb9cd0, _Source="ORGCHART.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" [0184.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0184.432] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a787200, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a787200, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1 [0184.433] wcscmp (_String1="ORGPOS.VRD", _String2=".") returned 1 [0184.433] wcscmp (_String1="ORGPOS.VRD", _String2="..") returned 1 [0184.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46c18 [0184.433] wcscpy (in: _Dest=0x3e46c18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.433] wcscat (in: _Dest=0x3e46c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.433] wcscat (in: _Dest=0x3e46c18, _Source="ORGPOS.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" [0184.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0184.434] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0xedb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1 [0184.434] wcscmp (_String1="ORGWIZ.VSL", _String2=".") returned 1 [0184.434] wcscmp (_String1="ORGWIZ.VSL", _String2="..") returned 1 [0184.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46718 [0184.434] wcscpy (in: _Dest=0x3e46718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.434] wcscat (in: _Dest=0x3e46718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.434] wcscat (in: _Dest=0x3e46718, _Source="ORGWIZ.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" [0184.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0184.435] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c42600, ftCreationTime.dwHighDateTime=0x1cac4c5, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55c42600, ftLastWriteTime.dwHighDateTime=0x1cac4c5, nFileSizeHigh=0x0, nFileSizeLow=0x4790, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1 [0184.435] wcscmp (_String1="ospintl.dll", _String2=".") returned 1 [0184.435] wcscmp (_String1="ospintl.dll", _String2="..") returned 1 [0184.435] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c12100, ftCreationTime.dwHighDateTime=0x1c67f3f, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82c12100, ftLastWriteTime.dwHighDateTime=0x1c67f3f, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1 [0184.436] wcscmp (_String1="OUTFORM.DAT", _String2=".") returned 1 [0184.436] wcscmp (_String1="OUTFORM.DAT", _String2="..") returned 1 [0184.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46518 [0184.436] wcscpy (in: _Dest=0x3e46518, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.436] wcscat (in: _Dest=0x3e46518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.436] wcscat (in: _Dest=0x3e46518, _Source="OUTFORM.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" [0184.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0184.437] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f584200, ftCreationTime.dwHighDateTime=0x1ca0fb6, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f584200, ftLastWriteTime.dwHighDateTime=0x1ca0fb6, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLBAR.INF", cAlternateFileName="")) returned 1 [0184.437] wcscmp (_String1="OUTLBAR.INF", _String2=".") returned 1 [0184.437] wcscmp (_String1="OUTLBAR.INF", _String2="..") returned 1 [0184.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46e98 [0184.437] wcscpy (in: _Dest=0x3e46e98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.437] wcscat (in: _Dest=0x3e46e98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.437] wcscat (in: _Dest=0x3e46e98, _Source="OUTLBAR.INF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" [0184.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0184.438] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48d4c190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x645d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1 [0184.438] wcscmp (_String1="OUTLLIBR.DLL", _String2=".") returned 1 [0184.438] wcscmp (_String1="OUTLLIBR.DLL", _String2="..") returned 1 [0184.438] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48cffed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x1d380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.IDX_DLL", cAlternateFileName="OUTLLI~1.IDX")) returned 1 [0184.438] wcscmp (_String1="OUTLLIBR.DLL.IDX_DLL", _String2=".") returned 1 [0184.438] wcscmp (_String1="OUTLLIBR.DLL.IDX_DLL", _String2="..") returned 1 [0184.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0184.438] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.439] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.439] wcscat (in: _Dest=0x3eb5d20, _Source="OUTLLIBR.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" [0184.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0184.440] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aba7900, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48d722f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1aba7900, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x46f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.IDX_DLL", cAlternateFileName="OUTLLI~2.IDX")) returned 1 [0184.440] wcscmp (_String1="OUTLLIBR.REST.IDX_DLL", _String2=".") returned 1 [0184.440] wcscmp (_String1="OUTLLIBR.REST.IDX_DLL", _String2="..") returned 1 [0184.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7150 [0184.440] wcscpy (in: _Dest=0x3eb7150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.440] wcscat (in: _Dest=0x3eb7150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.440] wcscat (in: _Dest=0x3eb7150, _Source="OUTLLIBR.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" [0184.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0184.441] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d430700, ftCreationTime.dwHighDateTime=0x1ca8f7c, ftLastAccessTime.dwLowDateTime=0x48de4710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d430700, ftLastWriteTime.dwHighDateTime=0x1ca8f7c, nFileSizeHigh=0x0, nFileSizeLow=0x6aa3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV.HXS", cAlternateFileName="OUTLOO~1.HXS")) returned 1 [0184.441] wcscmp (_String1="OUTLOOK.DEV.HXS", _String2=".") returned 1 [0184.441] wcscmp (_String1="OUTLOOK.DEV.HXS", _String2="..") returned 1 [0184.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0184.441] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.441] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.441] wcscat (in: _Dest=0x3eba2a8, _Source="OUTLOOK.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" [0184.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0184.442] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXC", cAlternateFileName="OUTLOO~1.HXC")) returned 1 [0184.442] wcscmp (_String1="OUTLOOK.DEV_COL.HXC", _String2=".") returned 1 [0184.442] wcscmp (_String1="OUTLOOK.DEV_COL.HXC", _String2="..") returned 1 [0184.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45530 [0184.442] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.442] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.442] wcscat (in: _Dest=0x3d45530, _Source="OUTLOOK.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" [0184.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0184.443] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f12400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4f12400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXT", cAlternateFileName="OUTLOO~1.HXT")) returned 1 [0184.443] wcscmp (_String1="OUTLOOK.DEV_COL.HXT", _String2=".") returned 1 [0184.443] wcscmp (_String1="OUTLOOK.DEV_COL.HXT", _String2="..") returned 1 [0184.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d452f0 [0184.444] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.444] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.444] wcscat (in: _Dest=0x3d452f0, _Source="OUTLOOK.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" [0184.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0184.445] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f12400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4f12400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_F_COL.HXK", cAlternateFileName="OUTLOO~1.HXK")) returned 1 [0184.445] wcscmp (_String1="OUTLOOK.DEV_F_COL.HXK", _String2=".") returned 1 [0184.445] wcscmp (_String1="OUTLOOK.DEV_F_COL.HXK", _String2="..") returned 1 [0184.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb64d8 [0184.445] wcscpy (in: _Dest=0x3eb64d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.445] wcscat (in: _Dest=0x3eb64d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.445] wcscat (in: _Dest=0x3eb64d8, _Source="OUTLOOK.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" [0184.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb64d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0184.446] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f12400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4f12400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_K_COL.HXK", cAlternateFileName="OUTLOO~2.HXK")) returned 1 [0184.446] wcscmp (_String1="OUTLOOK.DEV_K_COL.HXK", _String2=".") returned 1 [0184.446] wcscmp (_String1="OUTLOOK.DEV_K_COL.HXK", _String2="..") returned 1 [0184.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5860 [0184.446] wcscpy (in: _Dest=0x3eb5860, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.446] wcscat (in: _Dest=0x3eb5860, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.446] wcscat (in: _Dest=0x3eb5860, _Source="OUTLOOK.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" [0184.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0184.447] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9aa9500, ftCreationTime.dwHighDateTime=0x1ca9620, ftLastAccessTime.dwLowDateTime=0x48e0a870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9aa9500, ftLastWriteTime.dwHighDateTime=0x1ca9620, nFileSizeHigh=0x0, nFileSizeLow=0x13a57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1 [0184.447] wcscmp (_String1="OUTLOOK.HOL", _String2=".") returned 1 [0184.447] wcscmp (_String1="OUTLOOK.HOL", _String2="..") returned 1 [0184.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47d98 [0184.447] wcscpy (in: _Dest=0x3e47d98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.447] wcscat (in: _Dest=0x3e47d98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.448] wcscat (in: _Dest=0x3e47d98, _Source="OUTLOOK.HOL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" [0184.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0184.449] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24130d00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24130d00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1 [0184.449] wcscmp (_String1="OUTLOOK.HXS", _String2=".") returned 1 [0184.449] wcscmp (_String1="OUTLOOK.HXS", _String2="..") returned 1 [0184.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e48018 [0184.449] wcscpy (in: _Dest=0x3e48018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.449] wcscat (in: _Dest=0x3e48018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.449] wcscat (in: _Dest=0x3e48018, _Source="OUTLOOK.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" [0184.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e48018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0184.450] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="OUTLOO~2.HXC")) returned 1 [0184.450] wcscmp (_String1="OUTLOOK_COL.HXC", _String2=".") returned 1 [0184.450] wcscmp (_String1="OUTLOOK_COL.HXC", _String2="..") returned 1 [0184.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0184.450] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.450] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.450] wcscat (in: _Dest=0x3eb8e78, _Source="OUTLOOK_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" [0184.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0184.451] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15d9d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe15d9d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="OUTLOO~2.HXT")) returned 1 [0184.451] wcscmp (_String1="OUTLOOK_COL.HXT", _String2=".") returned 1 [0184.451] wcscmp (_String1="OUTLOOK_COL.HXT", _String2="..") returned 1 [0184.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0184.451] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.451] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.451] wcscat (in: _Dest=0x3eb9230, _Source="OUTLOOK_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" [0184.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c [0184.452] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15d9d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe15d9d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="OUTLOO~3.HXK")) returned 1 [0184.452] wcscmp (_String1="OUTLOOK_F_COL.HXK", _String2=".") returned 1 [0184.453] wcscmp (_String1="OUTLOOK_F_COL.HXK", _String2="..") returned 1 [0184.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45920 [0184.453] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0184.453] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0184.453] wcscat (in: _Dest=0x3d45920, _Source="OUTLOOK_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" [0184.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0185.048] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15d9d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe15d9d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="OUTLOO~4.HXK")) returned 1 [0186.359] wcscmp (_String1="OUTLOOK_K_COL.HXK", _String2=".") returned 1 [0186.359] wcscmp (_String1="OUTLOOK_K_COL.HXK", _String2="..") returned 1 [0186.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45770 [0186.359] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0186.359] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0186.359] wcscat (in: _Dest=0x3d45770, _Source="OUTLOOK_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" [0187.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0187.200] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dcf2c00, ftCreationTime.dwHighDateTime=0x1c5b4a9, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9dcf2c00, ftLastWriteTime.dwHighDateTime=0x1c5b4a9, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1 [0187.200] wcscmp (_String1="OUTLPERF.H", _String2=".") returned 1 [0187.200] wcscmp (_String1="OUTLPERF.H", _String2="..") returned 1 [0187.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a698 [0187.201] wcscpy (in: _Dest=0x3e1a698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.201] wcscat (in: _Dest=0x3e1a698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.201] wcscat (in: _Dest=0x3e1a698, _Source="OUTLPERF.H" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" [0187.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0187.202] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dcf2c00, ftCreationTime.dwHighDateTime=0x1c5b4a9, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9dcf2c00, ftLastWriteTime.dwHighDateTime=0x1c5b4a9, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1 [0187.202] wcscmp (_String1="OUTLPERF.INI", _String2=".") returned 1 [0187.202] wcscmp (_String1="OUTLPERF.INI", _String2="..") returned 1 [0187.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69ba8 [0187.202] wcscpy (in: _Dest=0x7a69ba8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.202] wcscat (in: _Dest=0x7a69ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.202] wcscat (in: _Dest=0x7a69ba8, _Source="OUTLPERF.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" [0187.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0187.204] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949f3200, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x949f3200, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x1f360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1 [0187.204] wcscmp (_String1="OUTLWVW.DLL", _String2=".") returned 1 [0187.204] wcscmp (_String1="OUTLWVW.DLL", _String2="..") returned 1 [0187.204] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19894c00, ftCreationTime.dwHighDateTime=0x1caca16, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x19894c00, ftLastWriteTime.dwHighDateTime=0x1caca16, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.IDX_DLL", cAlternateFileName="OUTLWV~1.IDX")) returned 1 [0187.204] wcscmp (_String1="OUTLWVW.DLL.IDX_DLL", _String2=".") returned 1 [0187.204] wcscmp (_String1="OUTLWVW.DLL.IDX_DLL", _String2="..") returned 1 [0187.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d455c0 [0187.204] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.204] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.204] wcscat (in: _Dest=0x3d455c0, _Source="OUTLWVW.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" [0187.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0187.205] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d708c00, ftCreationTime.dwHighDateTime=0x1c65123, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d708c00, ftLastWriteTime.dwHighDateTime=0x1c65123, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSHLP10.CHM", cAlternateFileName="")) returned 1 [0187.205] wcscmp (_String1="OWSHLP10.CHM", _String2=".") returned 1 [0187.205] wcscmp (_String1="OWSHLP10.CHM", _String2="..") returned 1 [0187.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a68800 [0187.206] wcscpy (in: _Dest=0x7a68800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.206] wcscat (in: _Dest=0x7a68800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.206] wcscat (in: _Dest=0x7a68800, _Source="OWSHLP10.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM" [0187.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0187.207] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1 [0187.207] wcscmp (_String1="PASSPORT.CSS", _String2=".") returned 1 [0187.207] wcscmp (_String1="PASSPORT.CSS", _String2="..") returned 1 [0187.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a68d50 [0187.207] wcscpy (in: _Dest=0x7a68d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.207] wcscat (in: _Dest=0x7a68d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.207] wcscat (in: _Dest=0x7a68d50, _Source="PASSPORT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" [0187.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16fc [0187.209] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1 [0187.209] wcscmp (_String1="PASTEL.CSS", _String2=".") returned 1 [0187.209] wcscmp (_String1="PASTEL.CSS", _String2="..") returned 1 [0187.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a218 [0187.209] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.209] wcscat (in: _Dest=0x3e1a218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.209] wcscat (in: _Dest=0x3e1a218, _Source="PASTEL.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" [0187.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0187.211] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x13180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1 [0187.211] wcscmp (_String1="PE.VSL", _String2=".") returned 1 [0187.211] wcscmp (_String1="PE.VSL", _String2="..") returned 1 [0187.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3eaa8 [0187.211] wcscpy (in: _Dest=0x3f3eaa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.211] wcscat (in: _Dest=0x3f3eaa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.211] wcscat (in: _Dest=0x3f3eaa8, _Source="PE.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" [0187.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3eaa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0187.212] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b023800, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa51aa750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9b023800, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1 [0187.212] wcscmp (_String1="PIPELINE.VRD", _String2=".") returned 1 [0187.212] wcscmp (_String1="PIPELINE.VRD", _String2="..") returned 1 [0187.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a68dd8 [0187.212] wcscpy (in: _Dest=0x7a68dd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.212] wcscat (in: _Dest=0x7a68dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.212] wcscat (in: _Dest=0x7a68dd8, _Source="PIPELINE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" [0187.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0187.213] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb53c9e00, ftCreationTime.dwHighDateTime=0x1cb722b, ftLastAccessTime.dwLowDateTime=0xeb649610, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb53c9e00, ftLastWriteTime.dwHighDateTime=0x1cb722b, nFileSizeHigh=0x0, nFileSizeLow=0x33a380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1 [0187.213] wcscmp (_String1="PJINTL.DLL", _String2=".") returned 1 [0187.214] wcscmp (_String1="PJINTL.DLL", _String2="..") returned 1 [0187.214] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f29f800, ftCreationTime.dwHighDateTime=0x1cb707d, ftLastAccessTime.dwLowDateTime=0xeb5fd350, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x5f29f800, ftLastWriteTime.dwHighDateTime=0x1cb707d, nFileSizeHigh=0x0, nFileSizeLow=0x25780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTLC.DLL", cAlternateFileName="")) returned 1 [0187.214] wcscmp (_String1="PJINTLC.DLL", _String2=".") returned 1 [0187.214] wcscmp (_String1="PJINTLC.DLL", _String2="..") returned 1 [0187.214] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1 [0187.214] wcscmp (_String1="PMENURES.DLL", _String2=".") returned 1 [0187.214] wcscmp (_String1="PMENURES.DLL", _String2="..") returned 1 [0187.214] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25443a00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25443a00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x4cf264, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV.HXS", cAlternateFileName="POWERP~1.HXS")) returned 1 [0187.214] wcscmp (_String1="POWERPNT.DEV.HXS", _String2=".") returned 1 [0187.214] wcscmp (_String1="POWERPNT.DEV.HXS", _String2="..") returned 1 [0187.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d444e0 [0187.214] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.214] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.214] wcscat (in: _Dest=0x3d444e0, _Source="POWERPNT.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" [0187.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0187.215] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXC", cAlternateFileName="POWERP~1.HXC")) returned 1 [0187.215] wcscmp (_String1="POWERPNT.DEV_COL.HXC", _String2=".") returned 1 [0187.216] wcscmp (_String1="POWERPNT.DEV_COL.HXC", _String2="..") returned 1 [0187.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c9f0 [0187.216] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.216] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.216] wcscat (in: _Dest=0x32c9f0, _Source="POWERPNT.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" [0187.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0187.217] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec183200, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec183200, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXT", cAlternateFileName="POWERP~1.HXT")) returned 1 [0187.218] wcscmp (_String1="POWERPNT.DEV_COL.HXT", _String2=".") returned 1 [0187.218] wcscmp (_String1="POWERPNT.DEV_COL.HXT", _String2="..") returned 1 [0187.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c5c8 [0187.218] wcscpy (in: _Dest=0x32c5c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.218] wcscat (in: _Dest=0x32c5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.218] wcscat (in: _Dest=0x32c5c8, _Source="POWERPNT.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" [0187.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0187.219] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec183200, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec183200, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_F_COL.HXK", cAlternateFileName="POWERP~1.HXK")) returned 1 [0187.219] wcscmp (_String1="POWERPNT.DEV_F_COL.HXK", _String2=".") returned 1 [0187.220] wcscmp (_String1="POWERPNT.DEV_F_COL.HXK", _String2="..") returned 1 [0187.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cc50 [0187.220] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.220] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.220] wcscat (in: _Dest=0x32cc50, _Source="POWERPNT.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" [0187.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0187.222] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec183200, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de0add0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec183200, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_K_COL.HXK", cAlternateFileName="POWERP~2.HXK")) returned 1 [0187.222] wcscmp (_String1="POWERPNT.DEV_K_COL.HXK", _String2=".") returned 1 [0187.222] wcscmp (_String1="POWERPNT.DEV_K_COL.HXK", _String2="..") returned 1 [0187.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d078 [0187.222] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.223] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.223] wcscat (in: _Dest=0x32d078, _Source="POWERPNT.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" [0187.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0187.224] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x755fa500, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x755fa500, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x68013d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1 [0187.224] wcscmp (_String1="POWERPNT.HXS", _String2=".") returned 1 [0187.224] wcscmp (_String1="POWERPNT.HXS", _String2="..") returned 1 [0187.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69ed8 [0187.224] wcscpy (in: _Dest=0x7a69ed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.224] wcscat (in: _Dest=0x7a69ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.224] wcscat (in: _Dest=0x7a69ed8, _Source="POWERPNT.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" [0187.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0187.226] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="POWERP~2.HXC")) returned 1 [0187.226] wcscmp (_String1="POWERPNT_COL.HXC", _String2=".") returned 1 [0187.226] wcscmp (_String1="POWERPNT_COL.HXC", _String2="..") returned 1 [0187.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45a40 [0187.226] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.226] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.226] wcscat (in: _Dest=0x3d45a40, _Source="POWERPNT_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" [0187.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0187.227] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe884ab00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe884ab00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="POWERP~2.HXT")) returned 1 [0187.227] wcscmp (_String1="POWERPNT_COL.HXT", _String2=".") returned 1 [0187.228] wcscmp (_String1="POWERPNT_COL.HXT", _String2="..") returned 1 [0187.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45650 [0187.228] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.228] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.228] wcscat (in: _Dest=0x3d45650, _Source="POWERPNT_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" [0187.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0187.229] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe884ab00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe884ab00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="POWERP~3.HXK")) returned 1 [0187.229] wcscmp (_String1="POWERPNT_F_COL.HXK", _String2=".") returned 1 [0187.229] wcscmp (_String1="POWERPNT_F_COL.HXK", _String2="..") returned 1 [0187.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44a80 [0187.229] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.229] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.229] wcscat (in: _Dest=0x3d44a80, _Source="POWERPNT_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" [0187.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c [0187.231] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe884ab00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe884ab00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="POWERP~4.HXK")) returned 1 [0187.231] wcscmp (_String1="POWERPNT_K_COL.HXK", _String2=".") returned 1 [0187.231] wcscmp (_String1="POWERPNT_K_COL.HXK", _String2="..") returned 1 [0187.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45ad0 [0187.231] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.231] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.231] wcscat (in: _Dest=0x3d45ad0, _Source="POWERPNT_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" [0187.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0187.232] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a76e00, ftCreationTime.dwHighDateTime=0x1cabf05, ftLastAccessTime.dwLowDateTime=0x3df15770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95a76e00, ftLastWriteTime.dwHighDateTime=0x1cabf05, nFileSizeHigh=0x0, nFileSizeLow=0x139968, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1 [0187.232] wcscmp (_String1="PPINTL.DLL", _String2=".") returned 1 [0187.233] wcscmp (_String1="PPINTL.DLL", _String2="..") returned 1 [0187.233] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46157200, ftCreationTime.dwHighDateTime=0x1cabf06, ftLastAccessTime.dwLowDateTime=0x3de57090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46157200, ftLastWriteTime.dwHighDateTime=0x1cabf06, nFileSizeHigh=0x0, nFileSizeLow=0x9580, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.IDX_DLL", cAlternateFileName="PPINTL~1.IDX")) returned 1 [0187.233] wcscmp (_String1="PPINTL.DLL.IDX_DLL", _String2=".") returned 1 [0187.233] wcscmp (_String1="PPINTL.DLL.IDX_DLL", _String2="..") returned 1 [0187.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44690 [0187.233] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.233] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.233] wcscat (in: _Dest=0x3d44690, _Source="PPINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" [0187.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0187.234] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46157200, ftCreationTime.dwHighDateTime=0x1cabf06, ftLastAccessTime.dwLowDateTime=0x3df15770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46157200, ftLastWriteTime.dwHighDateTime=0x1cabf06, nFileSizeHigh=0x0, nFileSizeLow=0x22180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.IDX_DLL", cAlternateFileName="PPINTL~2.IDX")) returned 1 [0187.234] wcscmp (_String1="PPINTL.REST.IDX_DLL", _String2=".") returned 1 [0187.234] wcscmp (_String1="PPINTL.REST.IDX_DLL", _String2="..") returned 1 [0187.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45ec0 [0187.234] wcscpy (in: _Dest=0x3d45ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.235] wcscat (in: _Dest=0x3d45ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.235] wcscat (in: _Dest=0x3d45ec0, _Source="PPINTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" [0187.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0187.236] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1 [0187.236] wcscmp (_String1="PRIMARY.CSS", _String2=".") returned 1 [0187.236] wcscmp (_String1="PRIMARY.CSS", _String2="..") returned 1 [0187.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a018 [0187.236] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.236] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.236] wcscat (in: _Dest=0x3e1a018, _Source="PRIMARY.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" [0187.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0187.237] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x1ff88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1 [0187.237] wcscmp (_String1="PROPRPT.VSL", _String2=".") returned 1 [0187.237] wcscmp (_String1="PROPRPT.VSL", _String2="..") returned 1 [0187.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19098 [0187.237] wcscpy (in: _Dest=0x3e19098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.238] wcscat (in: _Dest=0x3e19098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.238] wcscat (in: _Dest=0x3e19098, _Source="PROPRPT.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" [0187.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0187.588] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b7eb00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13b7eb00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSS", cAlternateFileName="")) returned 1 [0187.588] wcscmp (_String1="PROPRPT.VSS", _String2=".") returned 1 [0187.588] wcscmp (_String1="PROPRPT.VSS", _String2="..") returned 1 [0187.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a698 [0187.588] wcscpy (in: _Dest=0x3e1a698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0187.588] wcscat (in: _Dest=0x3e1a698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0187.588] wcscat (in: _Dest=0x3e1a698, _Source="PROPRPT.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" [0190.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0190.818] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc57b700, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x43004370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc57b700, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1 [0190.818] wcscmp (_String1="PROTTPLN.DOC", _String2=".") returned 1 [0190.818] wcscmp (_String1="PROTTPLN.DOC", _String2="..") returned 1 [0190.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a68e60 [0190.818] wcscpy (in: _Dest=0x7a68e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.818] wcscat (in: _Dest=0x7a68e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.818] wcscat (in: _Dest=0x7a68e60, _Source="PROTTPLN.DOC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" [0190.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0190.819] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c79b100, ftCreationTime.dwHighDateTime=0x1c7e414, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c79b100, ftLastWriteTime.dwHighDateTime=0x1c7e414, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1 [0190.819] wcscmp (_String1="PROTTPLN.PPT", _String2=".") returned 1 [0190.819] wcscmp (_String1="PROTTPLN.PPT", _String2="..") returned 1 [0190.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69a10 [0190.820] wcscpy (in: _Dest=0x7a69a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.820] wcscat (in: _Dest=0x7a69a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.820] wcscat (in: _Dest=0x7a69a10, _Source="PROTTPLN.PPT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" [0190.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0190.821] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7124c00, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe7124c00, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1 [0190.821] wcscmp (_String1="PROTTPLN.XLS", _String2=".") returned 1 [0190.821] wcscmp (_String1="PROTTPLN.XLS", _String2="..") returned 1 [0190.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69b20 [0190.821] wcscpy (in: _Dest=0x7a69b20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.821] wcscat (in: _Dest=0x7a69b20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.821] wcscat (in: _Dest=0x7a69b20, _Source="PROTTPLN.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" [0190.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69b20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0190.822] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb268a00, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x43004370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb268a00, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1 [0190.826] wcscmp (_String1="PROTTPLV.DOC", _String2=".") returned 1 [0190.826] wcscmp (_String1="PROTTPLV.DOC", _String2="..") returned 1 [0190.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69cb8 [0190.826] wcscpy (in: _Dest=0x7a69cb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0190.826] wcscat (in: _Dest=0x7a69cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0190.826] wcscat (in: _Dest=0x7a69cb8, _Source="PROTTPLV.DOC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" [0191.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0191.720] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c79b100, ftCreationTime.dwHighDateTime=0x1c7e414, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c79b100, ftLastWriteTime.dwHighDateTime=0x1c7e414, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1 [0191.720] wcscmp (_String1="PROTTPLV.PPT", _String2=".") returned 1 [0191.720] wcscmp (_String1="PROTTPLV.PPT", _String2="..") returned 1 [0191.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69a10 [0191.721] wcscpy (in: _Dest=0x7a69a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.721] wcscat (in: _Dest=0x7a69a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.721] wcscat (in: _Dest=0x7a69a10, _Source="PROTTPLV.PPT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" [0191.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0191.722] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24d9800, ftCreationTime.dwHighDateTime=0x1c4c04c, ftLastAccessTime.dwLowDateTime=0x3df3b8d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe24d9800, ftLastWriteTime.dwHighDateTime=0x1c4c04c, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1 [0191.722] wcscmp (_String1="PROTTPLV.XLS", _String2=".") returned 1 [0191.722] wcscmp (_String1="PROTTPLV.XLS", _String2="..") returned 1 [0191.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a68e60 [0191.722] wcscpy (in: _Dest=0x7a68e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.722] wcscat (in: _Dest=0x7a68e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.722] wcscat (in: _Dest=0x7a68e60, _Source="PROTTPLV.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" [0191.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0191.723] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1cba00, ftCreationTime.dwHighDateTime=0x1c5c9e6, ftLastAccessTime.dwLowDateTime=0x554f36d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f1cba00, ftLastWriteTime.dwHighDateTime=0x1c5c9e6, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1 [0191.723] wcscmp (_String1="PSRCHKEY.DAT", _String2=".") returned 1 [0191.723] wcscmp (_String1="PSRCHKEY.DAT", _String2="..") returned 1 [0191.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a694c0 [0191.723] wcscpy (in: _Dest=0x7a694c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.723] wcscat (in: _Dest=0x7a694c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.723] wcscat (in: _Dest=0x7a694c0, _Source="PSRCHKEY.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" [0191.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a694c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0191.724] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8381d00, ftCreationTime.dwHighDateTime=0x1c56dc6, ftLastAccessTime.dwLowDateTime=0x55519830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8381d00, ftLastWriteTime.dwHighDateTime=0x1c56dc6, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1 [0191.724] wcscmp (_String1="PSRCHLEX.DAT", _String2=".") returned 1 [0191.725] wcscmp (_String1="PSRCHLEX.DAT", _String2="..") returned 1 [0191.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a68b30 [0191.725] wcscpy (in: _Dest=0x7a68b30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.725] wcscat (in: _Dest=0x7a68b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.725] wcscat (in: _Dest=0x7a68b30, _Source="PSRCHLEX.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" [0191.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0191.726] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8381d00, ftCreationTime.dwHighDateTime=0x1c56dc6, ftLastAccessTime.dwLowDateTime=0x55519830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8381d00, ftLastWriteTime.dwHighDateTime=0x1c56dc6, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1 [0191.726] wcscmp (_String1="PSRCHLTS.DAT", _String2=".") returned 1 [0191.726] wcscmp (_String1="PSRCHLTS.DAT", _String2="..") returned 1 [0191.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a68c40 [0191.726] wcscpy (in: _Dest=0x7a68c40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.726] wcscat (in: _Dest=0x7a68c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.726] wcscat (in: _Dest=0x7a68c40, _Source="PSRCHLTS.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" [0191.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0191.728] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8381d00, ftCreationTime.dwHighDateTime=0x1c56dc6, ftLastAccessTime.dwLowDateTime=0x55519830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8381d00, ftLastWriteTime.dwHighDateTime=0x1c56dc6, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1 [0191.728] wcscmp (_String1="PSRCHPHN.DAT", _String2=".") returned 1 [0191.728] wcscmp (_String1="PSRCHPHN.DAT", _String2="..") returned 1 [0191.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a682b0 [0191.728] wcscpy (in: _Dest=0x7a682b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.728] wcscat (in: _Dest=0x7a682b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.728] wcscat (in: _Dest=0x7a682b0, _Source="PSRCHPHN.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" [0191.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a682b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0191.729] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304de700, ftCreationTime.dwHighDateTime=0x1c5c9e6, ftLastAccessTime.dwLowDateTime=0x555b1db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x304de700, ftLastWriteTime.dwHighDateTime=0x1c5c9e6, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1 [0191.729] wcscmp (_String1="PSRCHSRN.DAT", _String2=".") returned 1 [0191.729] wcscmp (_String1="PSRCHSRN.DAT", _String2="..") returned 1 [0191.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a68090 [0191.729] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.729] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.729] wcscat (in: _Dest=0x7a68090, _Source="PSRCHSRN.DAT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" [0191.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0191.731] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26ce300, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb26ce300, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x6a6568, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1 [0191.731] wcscmp (_String1="PUB6INTL.DLL", _String2=".") returned 1 [0191.731] wcscmp (_String1="PUB6INTL.DLL", _String2="..") returned 1 [0191.731] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e81c00, ftCreationTime.dwHighDateTime=0x1cab82f, ftLastAccessTime.dwLowDateTime=0x6223d230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4e81c00, ftLastWriteTime.dwHighDateTime=0x1cab82f, nFileSizeHigh=0x0, nFileSizeLow=0x10980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.IDX_DLL", cAlternateFileName="PUB6IN~1.IDX")) returned 1 [0191.731] wcscmp (_String1="PUB6INTL.DLL.IDX_DLL", _String2=".") returned 1 [0191.731] wcscmp (_String1="PUB6INTL.DLL.IDX_DLL", _String2="..") returned 1 [0191.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d078 [0191.731] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.731] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.731] wcscat (in: _Dest=0x32d078, _Source="PUB6INTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" [0191.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0191.732] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6194900, ftCreationTime.dwHighDateTime=0x1cab82f, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc6194900, ftLastWriteTime.dwHighDateTime=0x1cab82f, nFileSizeHigh=0x0, nFileSizeLow=0x41b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.IDX_DLL", cAlternateFileName="PUB6IN~2.IDX")) returned 1 [0191.732] wcscmp (_String1="PUB6INTL.REST.IDX_DLL", _String2=".") returned 1 [0191.732] wcscmp (_String1="PUB6INTL.REST.IDX_DLL", _String2="..") returned 1 [0191.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c9f0 [0191.732] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.732] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.732] wcscat (in: _Dest=0x32c9f0, _Source="PUB6INTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" [0191.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0191.734] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c73f00, ftCreationTime.dwHighDateTime=0x1c92e11, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c73f00, ftLastWriteTime.dwHighDateTime=0x1c92e11, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1 [0191.734] wcscmp (_String1="PUBCOLOR.SCM", _String2=".") returned 1 [0191.734] wcscmp (_String1="PUBCOLOR.SCM", _String2="..") returned 1 [0191.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a695d0 [0191.734] wcscpy (in: _Dest=0x7a695d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.734] wcscat (in: _Dest=0x7a695d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.734] wcscat (in: _Dest=0x7a695d0, _Source="PUBCOLOR.SCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" [0191.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a695d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0191.735] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x620741b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62347bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1 [0191.735] wcscmp (_String1="PUBFTSCM", _String2=".") returned 1 [0191.735] wcscmp (_String1="PUBFTSCM", _String2="..") returned 1 [0191.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a698 [0191.735] wcscpy (in: _Dest=0x3e1a698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.735] wcscat (in: _Dest=0x3e1a698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.736] wcscat (in: _Dest=0x3e1a698, _Source="PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0191.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0191.737] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x621589f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x624062b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1 [0191.737] wcscmp (_String1="PUBSPAPR", _String2=".") returned 1 [0191.737] wcscmp (_String1="PUBSPAPR", _String2="..") returned 1 [0191.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19198 [0191.737] wcscpy (in: _Dest=0x3e19198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.737] wcscat (in: _Dest=0x3e19198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.737] wcscat (in: _Dest=0x3e19198, _Source="PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0191.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e19198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0191.738] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb05b00, ftCreationTime.dwHighDateTime=0x1ca9bec, ftLastAccessTime.dwLowDateTime=0x622894f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7cb05b00, ftLastWriteTime.dwHighDateTime=0x1ca9bec, nFileSizeHigh=0x0, nFileSizeLow=0x29d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1 [0191.738] wcscmp (_String1="PUBWZINT.DLL", _String2=".") returned 1 [0191.738] wcscmp (_String1="PUBWZINT.DLL", _String2="..") returned 1 [0191.738] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e1a500, ftCreationTime.dwHighDateTime=0x1ca9bed, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50e1a500, ftLastWriteTime.dwHighDateTime=0x1ca9bed, nFileSizeHigh=0x0, nFileSizeLow=0x2a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.IDX_DLL", cAlternateFileName="PUBWZI~1.IDX")) returned 1 [0191.738] wcscmp (_String1="PUBWZINT.REST.IDX_DLL", _String2=".") returned 1 [0191.739] wcscmp (_String1="PUBWZINT.REST.IDX_DLL", _String2="..") returned 1 [0191.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c5c8 [0191.739] wcscpy (in: _Dest=0x32c5c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.739] wcscat (in: _Dest=0x32c5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.739] wcscat (in: _Dest=0x32c5c8, _Source="PUBWZINT.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" [0191.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0191.740] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b67b00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b67b00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x14560, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRYINT32.DLL", cAlternateFileName="")) returned 1 [0191.740] wcscmp (_String1="QRYINT32.DLL", _String2=".") returned 1 [0191.740] wcscmp (_String1="QRYINT32.DLL", _String2="..") returned 1 [0191.740] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63ef3b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickStyles", cAlternateFileName="QUICKS~1")) returned 1 [0191.741] wcscmp (_String1="QuickStyles", _String2=".") returned 1 [0191.741] wcscmp (_String1="QuickStyles", _String2="..") returned 1 [0191.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a598 [0191.741] wcscpy (in: _Dest=0x3e1a598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.741] wcscat (in: _Dest=0x3e1a598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.741] wcscat (in: _Dest=0x3e1a598, _Source="QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0191.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1a598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0191.742] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x39aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1 [0191.742] wcscmp (_String1="ReviewRouting_Init.xsn", _String2=".") returned 1 [0191.742] wcscmp (_String1="ReviewRouting_Init.xsn", _String2="..") returned 1 [0191.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cc50 [0191.742] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.742] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.742] wcscat (in: _Dest=0x32cc50, _Source="ReviewRouting_Init.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" [0191.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0191.744] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x482d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="REVIEW~2.XSN")) returned 1 [0191.744] wcscmp (_String1="ReviewRouting_Review.xsn", _String2=".") returned 1 [0191.744] wcscmp (_String1="ReviewRouting_Review.xsn", _String2="..") returned 1 [0191.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a621d0 [0191.744] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.744] wcscat (in: _Dest=0x7a621d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.744] wcscat (in: _Dest=0x7a621d0, _Source="ReviewRouting_Review.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" [0191.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a621d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0191.745] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1 [0191.745] wcscmp (_String1="ROSE.CSS", _String2=".") returned 1 [0191.745] wcscmp (_String1="ROSE.CSS", _String2="..") returned 1 [0191.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19718 [0191.745] wcscpy (in: _Dest=0x3e19718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.745] wcscat (in: _Dest=0x3e19718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.745] wcscat (in: _Dest=0x3e19718, _Source="ROSE.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" [0191.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0191.746] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57088600, ftCreationTime.dwHighDateTime=0x1be1e3c, ftLastAccessTime.dwLowDateTime=0x5c69c1b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x57088600, ftLastWriteTime.dwHighDateTime=0x1be1e3c, nFileSizeHigh=0x0, nFileSizeLow=0xc06d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPLBRF35.CHM", cAlternateFileName="")) returned 1 [0191.746] wcscmp (_String1="RPLBRF35.CHM", _String2=".") returned 1 [0191.746] wcscmp (_String1="RPLBRF35.CHM", _String2="..") returned 1 [0191.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a683c0 [0191.746] wcscpy (in: _Dest=0x7a683c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.746] wcscat (in: _Dest=0x7a683c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.746] wcscat (in: _Dest=0x7a683c0, _Source="RPLBRF35.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" [0191.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a683c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0191.748] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xa568, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1 [0191.748] wcscmp (_String1="SAVASWEB.VSL", _String2=".") returned 1 [0191.748] wcscmp (_String1="SAVASWEB.VSL", _String2="..") returned 1 [0191.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a68228 [0191.748] wcscpy (in: _Dest=0x7a68228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.748] wcscat (in: _Dest=0x7a68228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.748] wcscat (in: _Dest=0x7a68228, _Source="SAVASWEB.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" [0191.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0191.749] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a69400, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27a69400, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x61204, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1 [0191.749] wcscmp (_String1="SETLANG.HXS", _String2=".") returned 1 [0191.749] wcscmp (_String1="SETLANG.HXS", _String2="..") returned 1 [0191.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a718 [0191.749] wcscpy (in: _Dest=0x3e1a718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.749] wcscat (in: _Dest=0x3e1a718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.749] wcscat (in: _Dest=0x3e1a718, _Source="SETLANG.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" [0191.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0191.750] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXC", cAlternateFileName="SETLAN~1.HXC")) returned 1 [0191.750] wcscmp (_String1="SETLANG_COL.HXC", _String2=".") returned 1 [0191.750] wcscmp (_String1="SETLANG_COL.HXC", _String2="..") returned 1 [0191.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68118 [0191.750] wcscpy (in: _Dest=0x7a68118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.750] wcscat (in: _Dest=0x7a68118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.750] wcscat (in: _Dest=0x7a68118, _Source="SETLANG_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" [0191.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0191.751] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefabb900, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefabb900, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXT", cAlternateFileName="SETLAN~1.HXT")) returned 1 [0191.752] wcscmp (_String1="SETLANG_COL.HXT", _String2=".") returned 1 [0191.752] wcscmp (_String1="SETLANG_COL.HXT", _String2="..") returned 1 [0191.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a681a0 [0191.752] wcscpy (in: _Dest=0x7a681a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.752] wcscat (in: _Dest=0x7a681a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.752] wcscat (in: _Dest=0x7a681a0, _Source="SETLANG_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" [0191.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a681a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0191.753] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefabb900, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefabb900, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_F_COL.HXK", cAlternateFileName="SETLAN~1.HXK")) returned 1 [0191.753] wcscmp (_String1="SETLANG_F_COL.HXK", _String2=".") returned 1 [0191.753] wcscmp (_String1="SETLANG_F_COL.HXK", _String2="..") returned 1 [0191.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d455c0 [0191.753] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.753] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.753] wcscat (in: _Dest=0x3d455c0, _Source="SETLANG_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" [0191.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0191.754] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefabb900, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xefabb900, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_K_COL.HXK", cAlternateFileName="SETLAN~2.HXK")) returned 1 [0191.755] wcscmp (_String1="SETLANG_K_COL.HXK", _String2=".") returned 1 [0191.755] wcscmp (_String1="SETLANG_K_COL.HXK", _String2="..") returned 1 [0191.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45770 [0191.755] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0191.755] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0191.755] wcscat (in: _Dest=0x3d45770, _Source="SETLANG_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" [0191.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0192.308] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc14f800, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc14f800, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x10d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL", cAlternateFileName="")) returned 1 [0192.308] wcscmp (_String1="SGRES.DLL", _String2=".") returned 1 [0192.308] wcscmp (_String1="SGRES.DLL", _String2="..") returned 1 [0192.308] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe948f600, ftCreationTime.dwHighDateTime=0x1cab839, ftLastAccessTime.dwLowDateTime=0xa5431eb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe948f600, ftLastWriteTime.dwHighDateTime=0x1cab839, nFileSizeHigh=0x0, nFileSizeLow=0x2d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.IDX_DLL", cAlternateFileName="SGRESD~1.IDX")) returned 1 [0192.308] wcscmp (_String1="SGRES.DLL.IDX_DLL", _String2=".") returned 1 [0192.309] wcscmp (_String1="SGRES.DLL.IDX_DLL", _String2="..") returned 1 [0192.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45650 [0192.309] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0192.309] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0192.309] wcscat (in: _Dest=0x3d45650, _Source="SGRES.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" [0195.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0195.673] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7504400, ftCreationTime.dwHighDateTime=0x1cab844, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7504400, ftLastWriteTime.dwHighDateTime=0x1cab844, nFileSizeHigh=0x0, nFileSizeLow=0x8d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.VSL", cAlternateFileName="")) returned 1 [0195.673] wcscmp (_String1="SHAPNUM.VSL", _String2=".") returned 1 [0195.673] wcscmp (_String1="SHAPNUM.VSL", _String2="..") returned 1 [0195.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1ab98 [0195.673] wcscpy (in: _Dest=0x3e1ab98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.673] wcscat (in: _Dest=0x3e1ab98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.673] wcscat (in: _Dest=0x3e1ab98, _Source="SHAPNUM.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" [0195.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ab98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0195.675] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.CSS", cAlternateFileName="")) returned 1 [0195.675] wcscmp (_String1="SKY.CSS", _String2=".") returned 1 [0195.675] wcscmp (_String1="SKY.CSS", _String2="..") returned 1 [0195.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015490 [0195.675] wcscpy (in: _Dest=0x3015490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0195.675] wcscat (in: _Dest=0x3015490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0195.675] wcscat (in: _Dest=0x3015490, _Source="SKY.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" [0195.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3015490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0195.676] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3756fd00, ftCreationTime.dwHighDateTime=0x1cab82c, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3756fd00, ftLastWriteTime.dwHighDateTime=0x1cab82c, nFileSizeHigh=0x0, nFileSizeLow=0x2380, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLINTL.DLL", cAlternateFileName="")) returned 1 [0195.676] wcscmp (_String1="SLINTL.DLL", _String2=".") returned 1 [0195.677] wcscmp (_String1="SLINTL.DLL", _String2="..") returned 1 [0195.677] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x931e700, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x931e700, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIGRATE.VSL", cAlternateFileName="")) returned 1 [0199.494] wcscmp (_String1="SMIGRATE.VSL", _String2=".") returned 1 [0199.494] wcscmp (_String1="SMIGRATE.VSL", _String2="..") returned 1 [0199.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9340 [0199.494] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0199.494] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0199.494] wcscat (in: _Dest=0x3eb9340, _Source="SMIGRATE.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" [0201.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0201.566] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff1dc100, ftCreationTime.dwHighDateTime=0x1cacc15, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff1dc100, ftLastWriteTime.dwHighDateTime=0x1cacc15, nFileSizeHigh=0x0, nFileSizeLow=0x4e5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTORRES.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1 [0201.566] wcscmp (_String1="SOCIALCONNECTORRES.DLL", _String2=".") returned 1 [0201.566] wcscmp (_String1="SOCIALCONNECTORRES.DLL", _String2="..") returned 1 [0201.566] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5330700, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5330700, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x644, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE.VRD", cAlternateFileName="")) returned 1 [0201.566] wcscmp (_String1="SPACE.VRD", _String2=".") returned 1 [0201.566] wcscmp (_String1="SPACE.VRD", _String2="..") returned 1 [0201.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a298 [0201.566] wcscpy (in: _Dest=0x3e1a298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.566] wcscat (in: _Dest=0x3e1a298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.566] wcscat (in: _Dest=0x3e1a298, _Source="SPACE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" [0201.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0201.567] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.CSS", cAlternateFileName="")) returned 1 [0201.571] wcscmp (_String1="SPRING.CSS", _String2=".") returned 1 [0201.571] wcscmp (_String1="SPRING.CSS", _String2="..") returned 1 [0201.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a398 [0201.571] wcscpy (in: _Dest=0x3e1a398, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.571] wcscat (in: _Dest=0x3e1a398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.571] wcscat (in: _Dest=0x3e1a398, _Source="SPRING.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" [0201.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0201.573] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPS.CSS", cAlternateFileName="")) returned 1 [0201.573] wcscmp (_String1="SPS.CSS", _String2=".") returned 1 [0201.573] wcscmp (_String1="SPS.CSS", _String2="..") returned 1 [0201.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f128 [0201.573] wcscpy (in: _Dest=0x3f3f128, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.573] wcscat (in: _Dest=0x3f3f128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.573] wcscat (in: _Dest=0x3f3f128, _Source="SPS.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" [0201.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0201.574] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STEEL.CSS", cAlternateFileName="")) returned 1 [0201.574] wcscmp (_String1="STEEL.CSS", _String2=".") returned 1 [0201.574] wcscmp (_String1="STEEL.CSS", _String2="..") returned 1 [0201.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a098 [0201.574] wcscpy (in: _Dest=0x3e1a098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.574] wcscat (in: _Dest=0x3e1a098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.574] wcscat (in: _Dest=0x3e1a098, _Source="STEEL.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" [0201.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0201.575] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc836ff00, ftCreationTime.dwHighDateTime=0x1ca65d4, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc836ff00, ftLastWriteTime.dwHighDateTime=0x1ca65d4, nFileSizeHigh=0x0, nFileSizeLow=0x69d1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.CHM", cAlternateFileName="")) returned 1 [0201.575] wcscmp (_String1="STSLIST.CHM", _String2=".") returned 1 [0201.575] wcscmp (_String1="STSLIST.CHM", _String2="..") returned 1 [0201.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19d18 [0201.575] wcscpy (in: _Dest=0x3e19d18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.575] wcscat (in: _Dest=0x3e19d18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.576] wcscat (in: _Dest=0x3e19d18, _Source="STSLIST.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" [0201.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0201.577] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce47b600, ftCreationTime.dwHighDateTime=0x1cab90d, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce47b600, ftLastWriteTime.dwHighDateTime=0x1cab90d, nFileSizeHigh=0x0, nFileSizeLow=0x15990, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLISTI.DLL", cAlternateFileName="")) returned 1 [0201.577] wcscmp (_String1="STSLISTI.DLL", _String2=".") returned 1 [0201.577] wcscmp (_String1="STSLISTI.DLL", _String2="..") returned 1 [0201.577] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ccb00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x829ccb00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x37b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUCRES.DLL", cAlternateFileName="")) returned 1 [0201.577] wcscmp (_String1="STSUCRES.DLL", _String2=".") returned 1 [0201.577] wcscmp (_String1="STSUCRES.DLL", _String2="..") returned 1 [0201.577] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69941a00, ftCreationTime.dwHighDateTime=0x1cacba0, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69941a00, ftLastWriteTime.dwHighDateTime=0x1cacba0, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.INTL.DLL", cAlternateFileName="STSUPL~1.DLL")) returned 1 [0201.577] wcscmp (_String1="STSUPLD.INTL.DLL", _String2=".") returned 1 [0201.577] wcscmp (_String1="STSUPLD.INTL.DLL", _String2="..") returned 1 [0201.577] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNNY.CSS", cAlternateFileName="")) returned 1 [0201.577] wcscmp (_String1="SUNNY.CSS", _String2=".") returned 1 [0201.577] wcscmp (_String1="SUNNY.CSS", _String2="..") returned 1 [0201.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19598 [0201.577] wcscpy (in: _Dest=0x3e19598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.577] wcscat (in: _Dest=0x3e19598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.577] wcscat (in: _Dest=0x3e19598, _Source="SUNNY.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" [0201.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0201.578] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNSET.CSS", cAlternateFileName="")) returned 1 [0201.578] wcscmp (_String1="SUNSET.CSS", _String2=".") returned 1 [0201.578] wcscmp (_String1="SUNSET.CSS", _String2="..") returned 1 [0201.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a618 [0201.578] wcscpy (in: _Dest=0x3e1a618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.578] wcscat (in: _Dest=0x3e1a618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.578] wcscat (in: _Dest=0x3e1a618, _Source="SUNSET.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" [0201.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0201.579] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TERRCOTT.CSS", cAlternateFileName="")) returned 1 [0201.579] wcscmp (_String1="TERRCOTT.CSS", _String2=".") returned 1 [0201.579] wcscmp (_String1="TERRCOTT.CSS", _String2="..") returned 1 [0201.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69658 [0201.580] wcscpy (in: _Dest=0x7a69658, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.580] wcscat (in: _Dest=0x7a69658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.580] wcscat (in: _Dest=0x7a69658, _Source="TERRCOTT.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" [0201.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0201.581] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x43768, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.VSL", cAlternateFileName="")) returned 1 [0201.581] wcscmp (_String1="TIMESOLN.VSL", _String2=".") returned 1 [0201.581] wcscmp (_String1="TIMESOLN.VSL", _String2="..") returned 1 [0201.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a68d50 [0201.581] wcscpy (in: _Dest=0x7a68d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.581] wcscat (in: _Dest=0x7a68d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.581] wcscat (in: _Dest=0x7a68d50, _Source="TIMESOLN.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" [0201.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0201.582] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x5eb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="UML.VSL", cAlternateFileName="")) returned 1 [0201.582] wcscmp (_String1="UML.VSL", _String2=".") returned 1 [0201.582] wcscmp (_String1="UML.VSL", _String2="..") returned 1 [0201.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0201.582] wcscpy (in: _Dest=0x3f3fc68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.582] wcscat (in: _Dest=0x3f3fc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.582] wcscat (in: _Dest=0x3f3fc68, _Source="UML.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" [0201.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0201.583] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x5f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVBRES.DLL", cAlternateFileName="")) returned 1 [0201.583] wcscmp (_String1="UMLVBRES.DLL", _String2=".") returned 1 [0201.583] wcscmp (_String1="UMLVBRES.DLL", _String2="..") returned 1 [0201.583] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x6980, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVC60R.DLL", cAlternateFileName="")) returned 1 [0201.583] wcscmp (_String1="UMLVC60R.DLL", _String2=".") returned 1 [0201.583] wcscmp (_String1="UMLVC60R.DLL", _String2="..") returned 1 [0201.583] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0x4590, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLVSUI.DLL", cAlternateFileName="")) returned 1 [0201.583] wcscmp (_String1="UMLVSUI.DLL", _String2=".") returned 1 [0201.583] wcscmp (_String1="UMLVSUI.DLL", _String2="..") returned 1 [0201.583] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc12ac700, ftCreationTime.dwHighDateTime=0x1cab90d, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc12ac700, ftLastWriteTime.dwHighDateTime=0x1cab90d, nFileSizeHigh=0x0, nFileSizeLow=0xe780, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookStrings.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1 [0201.583] wcscmp (_String1="UmOutlookStrings.dll", _String2=".") returned 1 [0201.583] wcscmp (_String1="UmOutlookStrings.dll", _String2="..") returned 1 [0201.583] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e95bf00, ftCreationTime.dwHighDateTime=0x1c56c29, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e95bf00, ftLastWriteTime.dwHighDateTime=0x1c56c29, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE.VRD", cAlternateFileName="")) returned 1 [0201.583] wcscmp (_String1="VALVE.VRD", _String2=".") returned 1 [0201.583] wcscmp (_String1="VALVE.VRD", _String2="..") returned 1 [0201.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a118 [0201.584] wcscpy (in: _Dest=0x3e1a118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.584] wcscat (in: _Dest=0x3e1a118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.584] wcscat (in: _Dest=0x3e1a118, _Source="VALVE.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" [0201.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0201.585] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34395000, ftCreationTime.dwHighDateTime=0x1c314a0, ftLastAccessTime.dwLowDateTime=0x35636670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34395000, ftLastWriteTime.dwHighDateTime=0x1c314a0, nFileSizeHigh=0x0, nFileSizeLow=0x411f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAOWS10.CHM", cAlternateFileName="")) returned 1 [0201.585] wcscmp (_String1="VBAOWS10.CHM", _String2=".") returned 1 [0201.585] wcscmp (_String1="VBAOWS10.CHM", _String2="..") returned 1 [0201.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69ed8 [0201.585] wcscpy (in: _Dest=0x7a69ed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.585] wcscat (in: _Dest=0x7a69ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.585] wcscat (in: _Dest=0x7a69ed8, _Source="VBAOWS10.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" [0201.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0201.586] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x265dba00, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x265dba00, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x8d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL", cAlternateFileName="")) returned 1 [0201.586] wcscmp (_String1="VISBRRES.DLL", _String2=".") returned 1 [0201.586] wcscmp (_String1="VISBRRES.DLL", _String2="..") returned 1 [0201.586] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b30f400, ftCreationTime.dwHighDateTime=0x1cab833, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9b30f400, ftLastWriteTime.dwHighDateTime=0x1cab833, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.IDX_DLL", cAlternateFileName="VISBRR~1.IDX")) returned 1 [0201.586] wcscmp (_String1="VISBRRES.DLL.IDX_DLL", _String2=".") returned 1 [0201.586] wcscmp (_String1="VISBRRES.DLL.IDX_DLL", _String2="..") returned 1 [0201.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d110 [0201.586] wcscpy (in: _Dest=0x32d110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.587] wcscat (in: _Dest=0x32d110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.587] wcscat (in: _Dest=0x32d110, _Source="VISBRRES.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" [0201.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0201.587] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x9180, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.VSL", cAlternateFileName="")) returned 1 [0201.588] wcscmp (_String1="VISCOLOR.VSL", _String2=".") returned 1 [0201.588] wcscmp (_String1="VISCOLOR.VSL", _String2="..") returned 1 [0201.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a696e0 [0201.588] wcscpy (in: _Dest=0x7a696e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.588] wcscat (in: _Dest=0x7a696e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.588] wcscat (in: _Dest=0x7a696e0, _Source="VISCOLOR.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" [0201.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a696e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0201.589] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ba8200, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0xa5621090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x74ba8200, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0xb9378, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL", cAlternateFileName="")) returned 1 [0201.589] wcscmp (_String1="VISINTL.DLL", _String2=".") returned 1 [0201.589] wcscmp (_String1="VISINTL.DLL", _String2="..") returned 1 [0201.589] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c838000, ftCreationTime.dwHighDateTime=0x1cac251, ftLastAccessTime.dwLowDateTime=0xa5621090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1c838000, ftLastWriteTime.dwHighDateTime=0x1cac251, nFileSizeHigh=0x0, nFileSizeLow=0x3a980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.IDX_DLL", cAlternateFileName="VISINT~1.IDX")) returned 1 [0201.589] wcscmp (_String1="VISINTL.DLL.IDX_DLL", _String2=".") returned 1 [0201.589] wcscmp (_String1="VISINTL.DLL.IDX_DLL", _String2="..") returned 1 [0201.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45a40 [0201.589] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.589] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.589] wcscat (in: _Dest=0x3d45a40, _Source="VISINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" [0201.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0201.590] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78db9500, ftCreationTime.dwHighDateTime=0x1c9c503, ftLastAccessTime.dwLowDateTime=0xa5621090, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78db9500, ftLastWriteTime.dwHighDateTime=0x1c9c503, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.CSS", cAlternateFileName="")) returned 1 [0201.591] wcscmp (_String1="VISIO.CSS", _String2=".") returned 1 [0201.591] wcscmp (_String1="VISIO.CSS", _String2="..") returned 1 [0201.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19318 [0201.591] wcscpy (in: _Dest=0x3e19318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.591] wcscat (in: _Dest=0x3e19318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.591] wcscat (in: _Dest=0x3e19318, _Source="VISIO.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" [0201.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0201.592] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a08ee00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0xa566d350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2a08ee00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x588a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV.HXS", cAlternateFileName="VISIOD~1.HXS")) returned 1 [0201.592] wcscmp (_String1="VISIO.DEV.HXS", _String2=".") returned 1 [0201.592] wcscmp (_String1="VISIO.DEV.HXS", _String2="..") returned 1 [0201.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68800 [0201.592] wcscpy (in: _Dest=0x7a68800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.592] wcscat (in: _Dest=0x7a68800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.592] wcscat (in: _Dest=0x7a68800, _Source="VISIO.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" [0201.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0201.593] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa566d350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXC", cAlternateFileName="VISIOD~1.HXC")) returned 1 [0201.593] wcscmp (_String1="VISIO.DEV_COL.HXC", _String2=".") returned 1 [0201.593] wcscmp (_String1="VISIO.DEV_COL.HXC", _String2="..") returned 1 [0201.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44570 [0201.594] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.594] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.594] wcscat (in: _Dest=0x3d44570, _Source="VISIO.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" [0201.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0201.595] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf803f400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf803f400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXT", cAlternateFileName="VISIOD~1.HXT")) returned 1 [0201.595] wcscmp (_String1="VISIO.DEV_COL.HXT", _String2=".") returned 1 [0201.595] wcscmp (_String1="VISIO.DEV_COL.HXT", _String2="..") returned 1 [0201.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45920 [0201.595] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.595] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.595] wcscat (in: _Dest=0x3d45920, _Source="VISIO.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" [0201.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0201.596] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf803f400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf803f400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_F_COL.HXK", cAlternateFileName="VISIOD~1.HXK")) returned 1 [0201.596] wcscmp (_String1="VISIO.DEV_F_COL.HXK", _String2=".") returned 1 [0201.596] wcscmp (_String1="VISIO.DEV_F_COL.HXK", _String2="..") returned 1 [0201.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45530 [0201.596] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.596] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.596] wcscat (in: _Dest=0x3d45530, _Source="VISIO.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" [0201.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0201.597] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf803f400, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf803f400, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_K_COL.HXK", cAlternateFileName="VISIOD~2.HXK")) returned 1 [0201.597] wcscmp (_String1="VISIO.DEV_K_COL.HXK", _String2=".") returned 1 [0201.597] wcscmp (_String1="VISIO.DEV_K_COL.HXK", _String2="..") returned 1 [0201.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d454a0 [0201.597] wcscpy (in: _Dest=0x3d454a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.597] wcscat (in: _Dest=0x3d454a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.597] wcscat (in: _Dest=0x3d454a0, _Source="VISIO.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" [0201.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d454a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0201.598] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b3a1b00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0xa56934b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b3a1b00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x2b532a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.HXS", cAlternateFileName="")) returned 1 [0201.598] wcscmp (_String1="VISIO.HXS", _String2=".") returned 1 [0201.598] wcscmp (_String1="VISIO.HXS", _String2="..") returned 1 [0201.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19398 [0201.598] wcscpy (in: _Dest=0x3e19398, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0201.599] wcscat (in: _Dest=0x3e19398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0201.599] wcscat (in: _Dest=0x3e19398, _Source="VISIO.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" [0201.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0201.599] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a182500, ftCreationTime.dwHighDateTime=0x1ca9159, ftLastAccessTime.dwLowDateTime=0xa5882690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a182500, ftLastWriteTime.dwHighDateTime=0x1ca9159, nFileSizeHigh=0x0, nFileSizeLow=0xd6cc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET.HXS", cAlternateFileName="VISIOS~1.HXS")) returned 1 [0204.423] wcscmp (_String1="VISIO.SHAPESHEET.HXS", _String2=".") returned 1 [0204.423] wcscmp (_String1="VISIO.SHAPESHEET.HXS", _String2="..") returned 1 [0204.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d700 [0204.423] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0204.423] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0204.423] wcscat (in: _Dest=0x32d700, _Source="VISIO.SHAPESHEET.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" [0205.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0205.140] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa5882690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXC", cAlternateFileName="VISIOS~1.HXC")) returned 1 [0205.140] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXC", _String2=".") returned 1 [0205.140] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXC", _String2="..") returned 1 [0205.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb6700 [0205.140] wcscpy (in: _Dest=0x7cb6700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.140] wcscat (in: _Dest=0x7cb6700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.140] wcscat (in: _Dest=0x7cb6700, _Source="VISIO.SHAPESHEET_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" [0205.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0205.141] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f88d300, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f88d300, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXT", cAlternateFileName="VISIOS~1.HXT")) returned 1 [0205.141] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXT", _String2=".") returned 1 [0205.141] wcscmp (_String1="VISIO.SHAPESHEET_COL.HXT", _String2="..") returned 1 [0205.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb6660 [0205.141] wcscpy (in: _Dest=0x7cb6660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.141] wcscat (in: _Dest=0x7cb6660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.141] wcscat (in: _Dest=0x7cb6660, _Source="VISIO.SHAPESHEET_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" [0205.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0205.143] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f88d300, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f88d300, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_F_COL.HXK", cAlternateFileName="VISIOS~1.HXK")) returned 1 [0205.143] wcscmp (_String1="VISIO.SHAPESHEET_F_COL.HXK", _String2=".") returned 1 [0205.143] wcscmp (_String1="VISIO.SHAPESHEET_F_COL.HXK", _String2="..") returned 1 [0205.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb63e0 [0205.143] wcscpy (in: _Dest=0x7cb63e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.143] wcscat (in: _Dest=0x7cb63e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.143] wcscat (in: _Dest=0x7cb63e0, _Source="VISIO.SHAPESHEET_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" [0205.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb63e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0205.144] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f88d300, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f88d300, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_K_COL.HXK", cAlternateFileName="VISIOS~2.HXK")) returned 1 [0205.144] wcscmp (_String1="VISIO.SHAPESHEET_K_COL.HXK", _String2=".") returned 1 [0205.144] wcscmp (_String1="VISIO.SHAPESHEET_K_COL.HXK", _String2="..") returned 1 [0205.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb60c0 [0205.144] wcscpy (in: _Dest=0x7cb60c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.145] wcscat (in: _Dest=0x7cb60c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.145] wcscat (in: _Dest=0x7cb60c0, _Source="VISIO.SHAPESHEET_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" [0205.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb60c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0205.146] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXC", cAlternateFileName="VISIO_~1.HXC")) returned 1 [0205.146] wcscmp (_String1="VISIO_COL.HXC", _String2=".") returned 1 [0205.146] wcscmp (_String1="VISIO_COL.HXC", _String2="..") returned 1 [0205.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68558 [0205.146] wcscpy (in: _Dest=0x7a68558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.146] wcscat (in: _Dest=0x7a68558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.146] wcscat (in: _Dest=0x7a68558, _Source="VISIO_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" [0205.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0205.147] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4706d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4706d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXT", cAlternateFileName="VISIO_~1.HXT")) returned 1 [0205.147] wcscmp (_String1="VISIO_COL.HXT", _String2=".") returned 1 [0205.147] wcscmp (_String1="VISIO_COL.HXT", _String2="..") returned 1 [0205.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68910 [0205.147] wcscpy (in: _Dest=0x7a68910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.147] wcscat (in: _Dest=0x7a68910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.147] wcscat (in: _Dest=0x7a68910, _Source="VISIO_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" [0205.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0205.148] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4706d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4706d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_F_COL.HXK", cAlternateFileName="VISIO_~1.HXK")) returned 1 [0205.148] wcscmp (_String1="VISIO_F_COL.HXK", _String2=".") returned 1 [0205.148] wcscmp (_String1="VISIO_F_COL.HXK", _String2="..") returned 1 [0205.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ee8 [0205.149] wcscpy (in: _Dest=0x7a68ee8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.149] wcscat (in: _Dest=0x7a68ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.149] wcscat (in: _Dest=0x7a68ee8, _Source="VISIO_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" [0205.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0205.150] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4706d00, ftCreationTime.dwHighDateTime=0x1c5620e, ftLastAccessTime.dwLowDateTime=0xa58a87f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4706d00, ftLastWriteTime.dwHighDateTime=0x1c5620e, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_K_COL.HXK", cAlternateFileName="VISIO_~2.HXK")) returned 1 [0205.150] wcscmp (_String1="VISIO_K_COL.HXK", _String2=".") returned 1 [0205.150] wcscmp (_String1="VISIO_K_COL.HXK", _String2="..") returned 1 [0205.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a685e0 [0205.150] wcscpy (in: _Dest=0x7a685e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.150] wcscat (in: _Dest=0x7a685e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.150] wcscat (in: _Dest=0x7a685e0, _Source="VISIO_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" [0205.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a685e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0205.151] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b601700, ftCreationTime.dwHighDateTime=0x1ca506e, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7b601700, ftLastWriteTime.dwHighDateTime=0x1ca506e, nFileSizeHigh=0x0, nFileSizeLow=0x22e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM.HXS", cAlternateFileName="VISIO_~1.HXS")) returned 1 [0205.151] wcscmp (_String1="VISIO_PRM.HXS", _String2=".") returned 1 [0205.151] wcscmp (_String1="VISIO_PRM.HXS", _String2="..") returned 1 [0205.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68668 [0205.151] wcscpy (in: _Dest=0x7a68668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.151] wcscat (in: _Dest=0x7a68668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.151] wcscat (in: _Dest=0x7a68668, _Source="VISIO_PRM.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" [0205.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0205.152] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaa57000, ftCreationTime.dwHighDateTime=0x1ca540b, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfaa57000, ftLastWriteTime.dwHighDateTime=0x1ca540b, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXC", cAlternateFileName="VISIO_~2.HXC")) returned 1 [0205.152] wcscmp (_String1="VISIO_PRM_COL.HXC", _String2=".") returned 1 [0205.152] wcscmp (_String1="VISIO_PRM_COL.HXC", _String2="..") returned 1 [0205.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44570 [0205.152] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.152] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.152] wcscat (in: _Dest=0x3d44570, _Source="VISIO_PRM_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" [0205.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0205.153] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf11c0800, ftCreationTime.dwHighDateTime=0x1ca540b, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf11c0800, ftLastWriteTime.dwHighDateTime=0x1ca540b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXT", cAlternateFileName="VISIO_~2.HXT")) returned 1 [0205.153] wcscmp (_String1="VISIO_PRM_COL.HXT", _String2=".") returned 1 [0205.153] wcscmp (_String1="VISIO_PRM_COL.HXT", _String2="..") returned 1 [0205.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d454a0 [0205.154] wcscpy (in: _Dest=0x3d454a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.154] wcscat (in: _Dest=0x3d454a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.154] wcscat (in: _Dest=0x3d454a0, _Source="VISIO_PRM_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" [0205.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d454a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0205.155] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c59b200, ftCreationTime.dwHighDateTime=0x1ca50be, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c59b200, ftLastWriteTime.dwHighDateTime=0x1ca50be, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_F_COL.HXK", cAlternateFileName="VISIO_~3.HXK")) returned 1 [0205.155] wcscmp (_String1="VISIO_PRM_F_COL.HXK", _String2=".") returned 1 [0205.155] wcscmp (_String1="VISIO_PRM_F_COL.HXK", _String2="..") returned 1 [0205.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45a40 [0205.155] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.155] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.155] wcscat (in: _Dest=0x3d45a40, _Source="VISIO_PRM_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" [0205.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0205.156] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c59b200, ftCreationTime.dwHighDateTime=0x1ca50be, ftLastAccessTime.dwLowDateTime=0xa58ce950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c59b200, ftLastWriteTime.dwHighDateTime=0x1ca50be, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_K_COL.HXK", cAlternateFileName="VISIO_~4.HXK")) returned 1 [0205.156] wcscmp (_String1="VISIO_PRM_K_COL.HXK", _String2=".") returned 1 [0205.156] wcscmp (_String1="VISIO_PRM_K_COL.HXK", _String2="..") returned 1 [0205.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45920 [0205.156] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.156] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.156] wcscat (in: _Dest=0x3d45920, _Source="VISIO_PRM_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" [0205.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0205.157] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a08ee00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2a08ee00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x26745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD.HXS", cAlternateFileName="VISIO_~2.HXS")) returned 1 [0205.157] wcscmp (_String1="VISIO_STD.HXS", _String2=".") returned 1 [0205.157] wcscmp (_String1="VISIO_STD.HXS", _String2="..") returned 1 [0205.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a69548 [0205.158] wcscpy (in: _Dest=0x7a69548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.158] wcscat (in: _Dest=0x7a69548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.158] wcscat (in: _Dest=0x7a69548, _Source="VISIO_STD.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" [0205.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694 [0205.159] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXC", cAlternateFileName="VISIO_~3.HXC")) returned 1 [0205.159] wcscmp (_String1="VISIO_STD_COL.HXC", _String2=".") returned 1 [0205.159] wcscmp (_String1="VISIO_STD_COL.HXC", _String2="..") returned 1 [0205.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45530 [0205.159] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.159] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.159] wcscat (in: _Dest=0x3d45530, _Source="VISIO_STD_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" [0205.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0205.160] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5c200, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca5c200, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXT", cAlternateFileName="VISIO_~3.HXT")) returned 1 [0205.160] wcscmp (_String1="VISIO_STD_COL.HXT", _String2=".") returned 1 [0205.160] wcscmp (_String1="VISIO_STD_COL.HXT", _String2="..") returned 1 [0205.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d455c0 [0205.160] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.160] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.160] wcscat (in: _Dest=0x3d455c0, _Source="VISIO_STD_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" [0205.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0205.161] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5c200, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca5c200, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_F_COL.HXK", cAlternateFileName="VIB8A9~1.HXK")) returned 1 [0205.161] wcscmp (_String1="VISIO_STD_F_COL.HXK", _String2=".") returned 1 [0205.161] wcscmp (_String1="VISIO_STD_F_COL.HXK", _String2="..") returned 1 [0205.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45650 [0205.161] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.161] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.161] wcscat (in: _Dest=0x3d45650, _Source="VISIO_STD_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" [0205.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0205.163] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5c200, ftCreationTime.dwHighDateTime=0x1c5af16, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca5c200, ftLastWriteTime.dwHighDateTime=0x1c5af16, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_K_COL.HXK", cAlternateFileName="VI5545~1.HXK")) returned 1 [0205.163] wcscmp (_String1="VISIO_STD_K_COL.HXK", _String2=".") returned 1 [0205.163] wcscmp (_String1="VISIO_STD_K_COL.HXK", _String2="..") returned 1 [0205.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45770 [0205.163] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.163] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.163] wcscat (in: _Dest=0x3d45770, _Source="VISIO_STD_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" [0205.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0205.164] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800ba00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x800ba00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xad70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUTILS.VSL", cAlternateFileName="")) returned 1 [0205.164] wcscmp (_String1="VISUTILS.VSL", _String2=".") returned 1 [0205.164] wcscmp (_String1="VISUTILS.VSL", _String2="..") returned 1 [0205.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69768 [0205.164] wcscpy (in: _Dest=0x7a69768, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.164] wcscat (in: _Dest=0x7a69768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.164] wcscat (in: _Dest=0x7a69768, _Source="VISUTILS.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" [0205.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0205.165] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa58f4ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xf588, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISWEB.VSL", cAlternateFileName="")) returned 1 [0205.165] wcscmp (_String1="VISWEB.VSL", _String2=".") returned 1 [0205.165] wcscmp (_String1="VISWEB.VSL", _String2="..") returned 1 [0205.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e18e18 [0205.166] wcscpy (in: _Dest=0x3e18e18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.166] wcscat (in: _Dest=0x3e18e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.166] wcscat (in: _Dest=0x3e18e18, _Source="VISWEB.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" [0205.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e18e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0205.167] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa55faf30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vsdir", cAlternateFileName="")) returned 1 [0205.167] wcscmp (_String1="Vsdir", _String2=".") returned 1 [0205.167] wcscmp (_String1="Vsdir", _String2="..") returned 1 [0205.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fc68 [0205.167] wcscpy (in: _Dest=0x3f3fc68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.167] wcscat (in: _Dest=0x3f3fc68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.167] wcscat (in: _Dest=0x3f3fc68, _Source="Vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" [0205.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3fc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0205.168] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba7c5100, ftCreationTime.dwHighDateTime=0x1cab834, ftLastAccessTime.dwLowDateTime=0x35682930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba7c5100, ftLastWriteTime.dwHighDateTime=0x1cab834, nFileSizeHigh=0x0, nFileSizeLow=0xa2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1 [0205.168] wcscmp (_String1="VVIEWRES.DLL", _String2=".") returned 1 [0205.168] wcscmp (_String1="VVIEWRES.DLL", _String2="..") returned 1 [0205.168] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab28e800, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab28e800, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDALLLNK.VRD", cAlternateFileName="")) returned 1 [0205.168] wcscmp (_String1="WDALLLNK.VRD", _String2=".") returned 1 [0205.168] wcscmp (_String1="WDALLLNK.VRD", _String2="..") returned 1 [0205.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69108 [0205.168] wcscpy (in: _Dest=0x7a69108, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.168] wcscat (in: _Dest=0x7a69108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.168] wcscat (in: _Dest=0x7a69108, _Source="WDALLLNK.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" [0205.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0205.169] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69727b00, ftCreationTime.dwHighDateTime=0x1c2a085, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x69727b00, ftLastWriteTime.dwHighDateTime=0x1c2a085, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDCMPVRD.XML", cAlternateFileName="")) returned 1 [0205.169] wcscmp (_String1="WDCMPVRD.XML", _String2=".") returned 1 [0205.169] wcscmp (_String1="WDCMPVRD.XML", _String2="..") returned 1 [0205.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69190 [0205.170] wcscpy (in: _Dest=0x7a69190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.170] wcscat (in: _Dest=0x7a69190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.170] wcscat (in: _Dest=0x7a69190, _Source="WDCMPVRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" [0205.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0205.171] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab28e800, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab28e800, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x722, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDERRLNK.VRD", cAlternateFileName="")) returned 1 [0205.171] wcscmp (_String1="WDERRLNK.VRD", _String2=".") returned 1 [0205.171] wcscmp (_String1="WDERRLNK.VRD", _String2="..") returned 1 [0205.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69218 [0205.171] wcscpy (in: _Dest=0x7a69218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.171] wcscat (in: _Dest=0x7a69218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.171] wcscat (in: _Dest=0x7a69218, _Source="WDERRLNK.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" [0205.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0205.172] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25443a00, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x997be5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x25443a00, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x4b425a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV.HXS", cAlternateFileName="WINPRO~1.HXS")) returned 1 [0205.172] wcscmp (_String1="WINPROJ.DEV.HXS", _String2=".") returned 1 [0205.172] wcscmp (_String1="WINPROJ.DEV.HXS", _String2="..") returned 1 [0205.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a692a0 [0205.172] wcscpy (in: _Dest=0x7a692a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.172] wcscat (in: _Dest=0x7a692a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.172] wcscat (in: _Dest=0x7a692a0, _Source="WINPROJ.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" [0205.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a692a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0205.173] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x997be5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXC", cAlternateFileName="WINPRO~1.HXC")) returned 1 [0205.173] wcscmp (_String1="WINPROJ.DEV_COL.HXC", _String2=".") returned 1 [0205.173] wcscmp (_String1="WINPROJ.DEV_COL.HXC", _String2="..") returned 1 [0205.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d442a0 [0205.174] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.174] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.174] wcscat (in: _Dest=0x3d442a0, _Source="WINPROJ.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" [0205.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e0 [0205.175] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6521000, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x997be5b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6521000, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXT", cAlternateFileName="WINPRO~1.HXT")) returned 1 [0205.175] wcscmp (_String1="WINPROJ.DEV_COL.HXT", _String2=".") returned 1 [0205.175] wcscmp (_String1="WINPROJ.DEV_COL.HXT", _String2="..") returned 1 [0205.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45410 [0205.175] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.175] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.175] wcscat (in: _Dest=0x3d45410, _Source="WINPROJ.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" [0205.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0205.176] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6521000, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6521000, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_F_COL.HXK", cAlternateFileName="WINPRO~1.HXK")) returned 1 [0205.176] wcscmp (_String1="WINPROJ.DEV_F_COL.HXK", _String2=".") returned 1 [0205.176] wcscmp (_String1="WINPROJ.DEV_F_COL.HXK", _String2="..") returned 1 [0205.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d110 [0205.176] wcscpy (in: _Dest=0x32d110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.176] wcscat (in: _Dest=0x32d110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.176] wcscat (in: _Dest=0x32d110, _Source="WINPROJ.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" [0205.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0205.177] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6521000, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x6521000, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_K_COL.HXK", cAlternateFileName="WINPRO~2.HXK")) returned 1 [0205.177] wcscmp (_String1="WINPROJ.DEV_K_COL.HXK", _String2=".") returned 1 [0205.177] wcscmp (_String1="WINPROJ.DEV_K_COL.HXK", _String2="..") returned 1 [0205.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c5c8 [0205.178] wcscpy (in: _Dest=0x32c5c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0205.178] wcscat (in: _Dest=0x32c5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0205.178] wcscat (in: _Dest=0x32c5c8, _Source="WINPROJ.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" [0205.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0205.179] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26756700, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x26756700, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x168406, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.HXS", cAlternateFileName="")) returned 1 [0207.673] wcscmp (_String1="WINPROJ.HXS", _String2=".") returned 1 [0207.673] wcscmp (_String1="WINPROJ.HXS", _String2="..") returned 1 [0207.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1ab18 [0207.673] wcscpy (in: _Dest=0x3e1ab18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0207.673] wcscat (in: _Dest=0x3e1ab18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0207.673] wcscat (in: _Dest=0x3e1ab18, _Source="WINPROJ.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" [0211.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ab18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0211.525] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x997e4710, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXC", cAlternateFileName="WINPRO~2.HXC")) returned 1 [0211.525] wcscmp (_String1="WINPROJ_COL.HXC", _String2=".") returned 1 [0211.525] wcscmp (_String1="WINPROJ_COL.HXC", _String2="..") returned 1 [0211.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba330 [0211.526] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.526] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.526] wcscat (in: _Dest=0x3eba330, _Source="WINPROJ_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" [0211.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0211.527] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be8900, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x9980a870, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2be8900, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXT", cAlternateFileName="WINPRO~2.HXT")) returned 1 [0211.527] wcscmp (_String1="WINPROJ_COL.HXT", _String2=".") returned 1 [0211.527] wcscmp (_String1="WINPROJ_COL.HXT", _String2="..") returned 1 [0211.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb99a0 [0211.527] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.527] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.527] wcscat (in: _Dest=0x3eb99a0, _Source="WINPROJ_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" [0211.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0211.528] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be8900, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x9980a870, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2be8900, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_F_COL.HXK", cAlternateFileName="WINPRO~3.HXK")) returned 1 [0211.528] wcscmp (_String1="WINPROJ_F_COL.HXK", _String2=".") returned 1 [0211.528] wcscmp (_String1="WINPROJ_F_COL.HXK", _String2="..") returned 1 [0211.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45a40 [0211.528] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.528] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.528] wcscat (in: _Dest=0x3d45a40, _Source="WINPROJ_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" [0211.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0211.530] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be8900, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x998309d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x2be8900, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_K_COL.HXK", cAlternateFileName="WINPRO~4.HXK")) returned 1 [0211.530] wcscmp (_String1="WINPROJ_K_COL.HXK", _String2=".") returned 1 [0211.530] wcscmp (_String1="WINPROJ_K_COL.HXK", _String2="..") returned 1 [0211.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45920 [0211.530] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.530] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.530] wcscat (in: _Dest=0x3d45920, _Source="WINPROJ_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" [0211.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0211.531] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac5a1500, ftCreationTime.dwHighDateTime=0x1c55595, ftLastAccessTime.dwLowDateTime=0xa5cd2e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xac5a1500, ftLastWriteTime.dwHighDateTime=0x1c55595, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINSCHD.VRD", cAlternateFileName="")) returned 1 [0211.531] wcscmp (_String1="WINSCHD.VRD", _String2=".") returned 1 [0211.531] wcscmp (_String1="WINSCHD.VRD", _String2="..") returned 1 [0211.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19298 [0211.531] wcscpy (in: _Dest=0x3e19298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.531] wcscat (in: _Dest=0x3e19298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.531] wcscat (in: _Dest=0x3e19298, _Source="WINSCHD.VRD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" [0211.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0211.533] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6b4800, ftCreationTime.dwHighDateTime=0x1ca80d8, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c6b4800, ftLastWriteTime.dwHighDateTime=0x1ca80d8, nFileSizeHigh=0x0, nFileSizeLow=0x718092, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV.HXS", cAlternateFileName="WINWOR~1.HXS")) returned 1 [0211.533] wcscmp (_String1="WINWORD.DEV.HXS", _String2=".") returned 1 [0211.533] wcscmp (_String1="WINWORD.DEV.HXS", _String2="..") returned 1 [0211.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0211.533] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.533] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.533] wcscat (in: _Dest=0x3eb9b38, _Source="WINWORD.DEV.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" [0211.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0211.534] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXC", cAlternateFileName="WINWOR~1.HXC")) returned 1 [0211.534] wcscmp (_String1="WINWORD.DEV_COL.HXC", _String2=".") returned 1 [0211.534] wcscmp (_String1="WINWORD.DEV_COL.HXC", _String2="..") returned 1 [0211.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45530 [0211.534] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.534] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.535] wcscat (in: _Dest=0x3d45530, _Source="WINWORD.DEV_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" [0211.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0211.535] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136eff00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x136eff00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXT", cAlternateFileName="WINWOR~1.HXT")) returned 1 [0211.536] wcscmp (_String1="WINWORD.DEV_COL.HXT", _String2=".") returned 1 [0211.536] wcscmp (_String1="WINWORD.DEV_COL.HXT", _String2="..") returned 1 [0211.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d455c0 [0211.536] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.536] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.536] wcscat (in: _Dest=0x3d455c0, _Source="WINWORD.DEV_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" [0211.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0211.537] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136eff00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x136eff00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_F_COL.HXK", cAlternateFileName="WINWOR~1.HXK")) returned 1 [0211.537] wcscmp (_String1="WINWORD.DEV_F_COL.HXK", _String2=".") returned 1 [0211.537] wcscmp (_String1="WINWORD.DEV_F_COL.HXK", _String2="..") returned 1 [0211.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0740 [0211.537] wcscpy (in: _Dest=0x7cc0740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.537] wcscat (in: _Dest=0x7cc0740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.537] wcscat (in: _Dest=0x7cc0740, _Source="WINWORD.DEV_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" [0211.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0211.538] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136eff00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x64155190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x136eff00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_K_COL.HXK", cAlternateFileName="WINWOR~2.HXK")) returned 1 [0211.538] wcscmp (_String1="WINWORD.DEV_K_COL.HXK", _String2=".") returned 1 [0211.538] wcscmp (_String1="WINWORD.DEV_K_COL.HXK", _String2="..") returned 1 [0211.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc07d8 [0211.538] wcscpy (in: _Dest=0x7cc07d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.538] wcscat (in: _Dest=0x7cc07d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.539] wcscat (in: _Dest=0x7cc07d8, _Source="WINWORD.DEV_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" [0211.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc07d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0211.544] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x755fa500, ftCreationTime.dwHighDateTime=0x1ca93d5, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x755fa500, ftLastWriteTime.dwHighDateTime=0x1ca93d5, nFileSizeHigh=0x0, nFileSizeLow=0x4ff5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.HXS", cAlternateFileName="")) returned 1 [0211.544] wcscmp (_String1="WINWORD.HXS", _String2=".") returned 1 [0211.545] wcscmp (_String1="WINWORD.HXS", _String2="..") returned 1 [0211.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e18e18 [0211.545] wcscpy (in: _Dest=0x3e18e18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.545] wcscat (in: _Dest=0x3e18e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.545] wcscat (in: _Dest=0x3e18e18, _Source="WINWORD.HXS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" [0211.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e18e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0211.546] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fb5200, ftCreationTime.dwHighDateTime=0x1c9ff96, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x96fb5200, ftLastWriteTime.dwHighDateTime=0x1c9ff96, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXC", cAlternateFileName="WINWOR~2.HXC")) returned 1 [0211.546] wcscmp (_String1="WINWORD_COL.HXC", _String2=".") returned 1 [0211.546] wcscmp (_String1="WINWORD_COL.HXC", _String2="..") returned 1 [0211.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9120 [0211.546] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.546] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.547] wcscat (in: _Dest=0x3eb9120, _Source="WINWORD_COL.HXC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" [0211.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0211.554] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa4b00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa4b00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXT", cAlternateFileName="WINWOR~2.HXT")) returned 1 [0211.554] wcscmp (_String1="WINWORD_COL.HXT", _String2=".") returned 1 [0211.554] wcscmp (_String1="WINWORD_COL.HXT", _String2="..") returned 1 [0211.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb95e8 [0211.554] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.554] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.554] wcscat (in: _Dest=0x3eb95e8, _Source="WINWORD_COL.HXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" [0211.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0211.555] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa4b00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa4b00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_F_COL.HXK", cAlternateFileName="WINWOR~3.HXK")) returned 1 [0211.555] wcscmp (_String1="WINWORD_F_COL.HXK", _String2=".") returned 1 [0211.555] wcscmp (_String1="WINWORD_F_COL.HXK", _String2="..") returned 1 [0211.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45650 [0211.556] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.556] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.556] wcscat (in: _Dest=0x3d45650, _Source="WINWORD_F_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" [0211.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0211.557] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa4b00, ftCreationTime.dwHighDateTime=0x1c5620f, ftLastAccessTime.dwLowDateTime=0x641a1450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeaa4b00, ftLastWriteTime.dwHighDateTime=0x1c5620f, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_K_COL.HXK", cAlternateFileName="WINWOR~4.HXK")) returned 1 [0211.557] wcscmp (_String1="WINWORD_K_COL.HXK", _String2=".") returned 1 [0211.557] wcscmp (_String1="WINWORD_K_COL.HXK", _String2="..") returned 1 [0211.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45770 [0211.557] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.557] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.557] wcscat (in: _Dest=0x3d45770, _Source="WINWORD_K_COL.HXK" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" [0211.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0211.558] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ac00, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa5cf8fd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9ac00, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0x8d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORKFLOW.VSL", cAlternateFileName="")) returned 1 [0211.558] wcscmp (_String1="WORKFLOW.VSL", _String2=".") returned 1 [0211.558] wcscmp (_String1="WORKFLOW.VSL", _String2="..") returned 1 [0211.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb91a8 [0211.558] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.558] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.558] wcscat (in: _Dest=0x3eb91a8, _Source="WORKFLOW.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" [0211.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0211.560] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6d1200, ftCreationTime.dwHighDateTime=0x1cacd99, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac6d1200, ftLastWriteTime.dwHighDateTime=0x1cacd99, nFileSizeHigh=0x0, nFileSizeLow=0xc8958, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL", cAlternateFileName="")) returned 1 [0211.560] wcscmp (_String1="WWINTL.DLL", _String2=".") returned 1 [0211.560] wcscmp (_String1="WWINTL.DLL", _String2="..") returned 1 [0211.560] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa62400, ftCreationTime.dwHighDateTime=0x1cacd3f, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaa62400, ftLastWriteTime.dwHighDateTime=0x1cacd3f, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.IDX_DLL", cAlternateFileName="WWINTL~1.IDX")) returned 1 [0211.560] wcscmp (_String1="WWINTL.DLL.IDX_DLL", _String2=".") returned 1 [0211.560] wcscmp (_String1="WWINTL.DLL.IDX_DLL", _String2="..") returned 1 [0211.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d442a0 [0211.560] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.560] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.560] wcscat (in: _Dest=0x3d442a0, _Source="WWINTL.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" [0211.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0211.561] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa62400, ftCreationTime.dwHighDateTime=0x1cacd3f, ftLastAccessTime.dwLowDateTime=0x48f614d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaa62400, ftLastWriteTime.dwHighDateTime=0x1cacd3f, nFileSizeHigh=0x0, nFileSizeLow=0x96180, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.IDX_DLL", cAlternateFileName="WWINTL~2.IDX")) returned 1 [0211.561] wcscmp (_String1="WWINTL.REST.IDX_DLL", _String2=".") returned 1 [0211.562] wcscmp (_String1="WWINTL.REST.IDX_DLL", _String2="..") returned 1 [0211.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45410 [0211.562] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.562] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.562] wcscat (in: _Dest=0x3d45410, _Source="WWINTL.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" [0211.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0211.563] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c42600, ftCreationTime.dwHighDateTime=0x1cac4c5, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55c42600, ftLastWriteTime.dwHighDateTime=0x1cac4c5, nFileSizeHigh=0x0, nFileSizeLow=0x4188, dwReserved0=0x0, dwReserved1=0x0, cFileName="wxpr.dll", cAlternateFileName="")) returned 1 [0211.563] wcscmp (_String1="wxpr.dll", _String2=".") returned 1 [0211.563] wcscmp (_String1="wxpr.dll", _String2="..") returned 1 [0211.563] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5346a00, ftCreationTime.dwHighDateTime=0x1bdfffe, ftLastAccessTime.dwLowDateTime=0x5c6e8470, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5346a00, ftLastWriteTime.dwHighDateTime=0x1bdfffe, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WZCNFLCT.CHM", cAlternateFileName="")) returned 1 [0211.563] wcscmp (_String1="WZCNFLCT.CHM", _String2=".") returned 1 [0211.563] wcscmp (_String1="WZCNFLCT.CHM", _String2="..") returned 1 [0211.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8d68 [0211.563] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.563] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.563] wcscat (in: _Dest=0x3eb8d68, _Source="WZCNFLCT.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" [0211.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0211.565] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d3300, ftCreationTime.dwHighDateTime=0x1cab845, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46d3300, ftLastWriteTime.dwHighDateTime=0x1cab845, nFileSizeHigh=0x0, nFileSizeLow=0xb590, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC.VSL", cAlternateFileName="")) returned 1 [0211.565] wcscmp (_String1="XFUNC.VSL", _String2=".") returned 1 [0211.565] wcscmp (_String1="XFUNC.VSL", _String2="..") returned 1 [0211.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a318 [0211.565] wcscpy (in: _Dest=0x3e1a318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.565] wcscat (in: _Dest=0x3e1a318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.565] wcscat (in: _Dest=0x3e1a318, _Source="XFUNC.VSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" [0211.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0211.566] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x3283, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Complete.xsn", cAlternateFileName="XLATE_~1.XSN")) returned 1 [0211.566] wcscmp (_String1="Xlate_Complete.xsn", _String2=".") returned 1 [0211.566] wcscmp (_String1="Xlate_Complete.xsn", _String2="..") returned 1 [0211.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d452f0 [0211.566] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.566] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.566] wcscat (in: _Dest=0x3d452f0, _Source="Xlate_Complete.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" [0211.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0211.567] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6bff900, ftCreationTime.dwHighDateTime=0x1ca9183, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf6bff900, ftLastWriteTime.dwHighDateTime=0x1ca9183, nFileSizeHigh=0x0, nFileSizeLow=0x2d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Init.xsn", cAlternateFileName="XLATE_~2.XSN")) returned 1 [0211.568] wcscmp (_String1="Xlate_Init.xsn", _String2=".") returned 1 [0211.568] wcscmp (_String1="Xlate_Init.xsn", _String2="..") returned 1 [0211.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8df0 [0211.568] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.568] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.568] wcscat (in: _Dest=0x3eb8df0, _Source="Xlate_Init.xsn" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" [0211.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0211.569] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74be8000, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3df87b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74be8000, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x231980, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL", cAlternateFileName="")) returned 1 [0211.569] wcscmp (_String1="XLINTL32.DLL", _String2=".") returned 1 [0211.569] wcscmp (_String1="XLINTL32.DLL", _String2="..") returned 1 [0211.569] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd89300, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3df61a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd89300, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x18380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.IDX_DLL", cAlternateFileName="XLINTL~1.IDX")) returned 1 [0211.569] wcscmp (_String1="XLINTL32.DLL.IDX_DLL", _String2=".") returned 1 [0211.569] wcscmp (_String1="XLINTL32.DLL.IDX_DLL", _String2="..") returned 1 [0211.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0870 [0211.570] wcscpy (in: _Dest=0x7cc0870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.570] wcscat (in: _Dest=0x7cc0870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.570] wcscat (in: _Dest=0x7cc0870, _Source="XLINTL32.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" [0211.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0211.571] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd89300, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3dfadcf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd89300, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x5db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.IDX_DLL", cAlternateFileName="XLINTL~2.IDX")) returned 1 [0211.571] wcscmp (_String1="XLINTL32.REST.IDX_DLL", _String2=".") returned 1 [0211.571] wcscmp (_String1="XLINTL32.REST.IDX_DLL", _String2="..") returned 1 [0211.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0908 [0211.571] wcscpy (in: _Dest=0x7cc0908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.571] wcscat (in: _Dest=0x7cc0908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.571] wcscat (in: _Dest=0x7cc0908, _Source="XLINTL32.REST.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" [0211.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0211.686] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74be8000, ftCreationTime.dwHighDateTime=0x1cac259, ftLastAccessTime.dwLowDateTime=0x3dfadcf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74be8000, ftLastWriteTime.dwHighDateTime=0x1cac259, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLLEX.DLL", cAlternateFileName="")) returned 1 [0211.686] wcscmp (_String1="XLLEX.DLL", _String2=".") returned 1 [0211.686] wcscmp (_String1="XLLEX.DLL", _String2="..") returned 1 [0211.686] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433e4500, ftCreationTime.dwHighDateTime=0x1c30db2, ftLastAccessTime.dwLowDateTime=0x430c2a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x433e4500, ftLastWriteTime.dwHighDateTime=0x1c30db2, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLMACRO.CHM", cAlternateFileName="")) returned 1 [0211.686] wcscmp (_String1="XLMACRO.CHM", _String2=".") returned 1 [0211.687] wcscmp (_String1="XLMACRO.CHM", _String2="..") returned 1 [0211.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19418 [0211.687] wcscpy (in: _Dest=0x3e19418, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.687] wcscat (in: _Dest=0x3e19418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.687] wcscat (in: _Dest=0x3e19418, _Source="XLMACRO.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" [0211.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0211.688] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6384b00, ftCreationTime.dwHighDateTime=0x1cac25b, ftLastAccessTime.dwLowDateTime=0x430e8bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa6384b00, ftLastWriteTime.dwHighDateTime=0x1cac25b, nFileSizeHigh=0x0, nFileSizeLow=0x24780, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL", cAlternateFileName="")) returned 1 [0211.688] wcscmp (_String1="XLSLICER.DLL", _String2=".") returned 1 [0211.689] wcscmp (_String1="XLSLICER.DLL", _String2="..") returned 1 [0211.689] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b1dc00, ftCreationTime.dwHighDateTime=0x1cac25c, ftLastAccessTime.dwLowDateTime=0x430c2a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31b1dc00, ftLastWriteTime.dwHighDateTime=0x1cac25c, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.IDX_DLL", cAlternateFileName="XLSLIC~1.IDX")) returned 1 [0211.689] wcscmp (_String1="XLSLICER.DLL.IDX_DLL", _String2=".") returned 1 [0211.689] wcscmp (_String1="XLSLICER.DLL.IDX_DLL", _String2="..") returned 1 [0211.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d110 [0211.689] wcscpy (in: _Dest=0x32d110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0211.689] wcscat (in: _Dest=0x32d110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0211.689] wcscat (in: _Dest=0x32d110, _Source="XLSLICER.DLL.IDX_DLL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" [0211.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0211.690] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c9d400, ftCreationTime.dwHighDateTime=0x1c55713, ftLastAccessTime.dwLowDateTime=0x593e1c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c9d400, ftLastWriteTime.dwHighDateTime=0x1c55713, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 1 [0212.710] wcscmp (_String1="XMLSDK5.CHM", _String2=".") returned 1 [0212.710] wcscmp (_String1="XMLSDK5.CHM", _String2="..") returned 1 [0212.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19b18 [0212.710] wcscpy (in: _Dest=0x3e19b18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033" [0212.710] wcscat (in: _Dest=0x3e19b18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\" [0212.710] wcscat (in: _Dest=0x3e19b18, _Source="XMLSDK5.CHM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" [0212.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0212.843] FindNextFileW (in: hFindFile=0x3dcfb90, lpFindFileData=0x7a52560 | out: lpFindFileData=0x7a52560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c9d400, ftCreationTime.dwHighDateTime=0x1c55713, ftLastAccessTime.dwLowDateTime=0x593e1c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x44c9d400, ftLastWriteTime.dwHighDateTime=0x1c55713, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 0 [0212.990] FindClose (in: hFindFile=0x3dcfb90 | out: hFindFile=0x3dcfb90) returned 1 [0213.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52560) returned 1 [0213.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26388) returned 1 [0213.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf880) returned 1 Thread: id = 397 os_tid = 0xe48 [0122.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a263f8 [0122.639] wcscpy (in: _Dest=0x7a263f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036" [0122.639] wcscat (in: _Dest=0x7a263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\" [0122.639] wcscat (in: _Dest=0x7a263f8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*" [0122.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52f00 [0122.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e395f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e395f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0124.920] wcscmp (_String1=".", _String2=".") returned 0 [0124.920] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e395f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e395f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.920] wcscmp (_String1="..", _String2=".") returned 1 [0124.920] wcscmp (_String1="..", _String2="..") returned 0 [0124.920] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc03b7000, ftCreationTime.dwHighDateTime=0x1c9928b, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc03b7000, ftLastWriteTime.dwHighDateTime=0x1c9928b, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0124.920] wcscmp (_String1="MSO.ACL", _String2=".") returned 1 [0124.920] wcscmp (_String1="MSO.ACL", _String2="..") returned 1 [0124.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bb58 [0124.920] wcscpy (in: _Dest=0x3e3bb58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036" [0124.920] wcscat (in: _Dest=0x3e3bb58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\" [0124.920] wcscat (in: _Dest=0x3e3bb58, _Source="MSO.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" [0132.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3bb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0132.355] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc03b7000, ftCreationTime.dwHighDateTime=0x1c9928b, ftLastAccessTime.dwLowDateTime=0x4e395f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc03b7000, ftLastWriteTime.dwHighDateTime=0x1c9928b, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0132.355] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0132.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52f00) returned 1 [0132.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a263f8) returned 1 [0132.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee09f8) returned 1 Thread: id = 398 os_tid = 0xe3c [0122.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26468 [0122.640] wcscpy (in: _Dest=0x7a26468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082" [0122.640] wcscat (in: _Dest=0x7a26468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\" [0122.640] wcscat (in: _Dest=0x7a26468, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*" [0122.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0122.640] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ba86390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ba86390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dec0 [0124.921] wcscmp (_String1=".", _String2=".") returned 0 [0124.921] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ba86390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ba86390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.921] wcscmp (_String1="..", _String2=".") returned 1 [0124.921] wcscmp (_String1="..", _String2="..") returned 0 [0124.921] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc29fc900, ftCreationTime.dwHighDateTime=0x1c9928f, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc29fc900, ftLastWriteTime.dwHighDateTime=0x1c9928f, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0124.921] wcscmp (_String1="MSO.ACL", _String2=".") returned 1 [0124.921] wcscmp (_String1="MSO.ACL", _String2="..") returned 1 [0124.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0124.921] wcscpy (in: _Dest=0x3e3bae0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082" [0124.921] wcscat (in: _Dest=0x3e3bae0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\" [0124.921] wcscat (in: _Dest=0x3e3bae0, _Source="MSO.ACL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL") returned="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" [0125.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3bae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0125.926] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc29fc900, ftCreationTime.dwHighDateTime=0x1c9928f, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc29fc900, ftLastWriteTime.dwHighDateTime=0x1c9928f, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0125.926] FindClose (in: hFindFile=0x7a2dec0 | out: hFindFile=0x7a2dec0) returned 1 [0125.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0125.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26468) returned 1 [0125.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0a60) returned 1 Thread: id = 399 os_tid = 0x150 [0122.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f1a0 [0122.641] wcscpy (in: _Dest=0x3f3f1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0122.641] wcscat (in: _Dest=0x3f3f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0122.642] wcscat (in: _Dest=0x3f3f1a0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*" [0122.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a533d0 [0122.642] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c3dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0124.922] wcscmp (_String1=".", _String2=".") returned 0 [0124.922] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c3dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.922] wcscmp (_String1="..", _String2=".") returned 1 [0124.922] wcscmp (_String1="..", _String2="..") returned 0 [0124.922] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d93600, ftCreationTime.dwHighDateTime=0x1c90e05, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85d93600, ftLastWriteTime.dwHighDateTime=0x1c90e05, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1 [0124.922] wcscmp (_String1="CLNTWRAP.HTM", _String2=".") returned 1 [0124.922] wcscmp (_String1="CLNTWRAP.HTM", _String2="..") returned 1 [0124.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44f00 [0124.922] wcscpy (in: _Dest=0x3d44f00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0124.923] wcscat (in: _Dest=0x3d44f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0124.923] wcscat (in: _Dest=0x3d44f00, _Source="CLNTWRAP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" [0125.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0125.930] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387b000, ftCreationTime.dwHighDateTime=0x1ca107c, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3387b000, ftLastWriteTime.dwHighDateTime=0x1ca107c, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1 [0125.930] wcscmp (_String1="RPT2HTM4.XSL", _String2=".") returned 1 [0125.930] wcscmp (_String1="RPT2HTM4.XSL", _String2="..") returned 1 [0125.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d447b0 [0125.930] wcscpy (in: _Dest=0x3d447b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0125.931] wcscat (in: _Dest=0x3d447b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0125.931] wcscat (in: _Dest=0x3d447b0, _Source="RPT2HTM4.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" [0125.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d447b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0125.932] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d87d00, ftCreationTime.dwHighDateTime=0x1c89f18, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64d87d00, ftLastWriteTime.dwHighDateTime=0x1c89f18, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1 [0125.932] wcscmp (_String1="SERVWRAP.ASP", _String2=".") returned 1 [0125.932] wcscmp (_String1="SERVWRAP.ASP", _String2="..") returned 1 [0125.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45260 [0125.933] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb" [0125.933] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\" [0125.933] wcscat (in: _Dest=0x3d45260, _Source="SERVWRAP.ASP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP") returned="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" [0125.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0125.935] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d87d00, ftCreationTime.dwHighDateTime=0x1c89f18, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64d87d00, ftLastWriteTime.dwHighDateTime=0x1c89f18, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 0 [0125.935] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0125.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a533d0) returned 1 [0125.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0125.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 Thread: id = 400 os_tid = 0x11c [0122.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a264d8 [0122.643] wcscpy (in: _Dest=0x7a264d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0122.643] wcscat (in: _Dest=0x7a264d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0122.643] wcscat (in: _Dest=0x7a264d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*" [0122.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53638 [0122.643] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85769b50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0125.384] wcscmp (_String1=".", _String2=".") returned 0 [0125.384] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85769b50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.384] wcscmp (_String1="..", _String2=".") returned 1 [0125.384] wcscmp (_String1="..", _String2="..") returned 0 [0125.384] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80dd7a00, ftCreationTime.dwHighDateTime=0x1cabb95, ftLastAccessTime.dwLowDateTime=0x856d15d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80dd7a00, ftLastWriteTime.dwHighDateTime=0x1cabb95, nFileSizeHigh=0x0, nFileSizeLow=0x5f6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="ACWZDA~1.ACC")) returned 1 [0125.384] wcscmp (_String1="ACWZDAT12.ACCDU", _String2=".") returned 1 [0125.384] wcscmp (_String1="ACWZDAT12.ACCDU", _String2="..") returned 1 [0125.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44f90 [0125.384] wcscpy (in: _Dest=0x3d44f90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0125.384] wcscat (in: _Dest=0x3d44f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0125.384] wcscat (in: _Dest=0x3d44f90, _Source="ACWZDAT12.ACCDU" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" [0129.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0129.181] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a767200, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x856f7730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a767200, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0x1ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZLIB.ACCDE", cAlternateFileName="ACWZLI~1.ACC")) returned 1 [0129.181] wcscmp (_String1="ACWZLIB.ACCDE", _String2=".") returned 1 [0129.181] wcscmp (_String1="ACWZLIB.ACCDE", _String2="..") returned 1 [0129.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3db00 [0129.181] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0129.181] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0129.181] wcscat (in: _Dest=0x3f3db00, _Source="ACWZLIB.ACCDE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" [0129.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0129.183] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a767200, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a767200, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0x7e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="ACWZMA~1.ACC")) returned 1 [0129.183] wcscmp (_String1="ACWZMAIN.ACCDE", _String2=".") returned 1 [0129.183] wcscmp (_String1="ACWZMAIN.ACCDE", _String2="..") returned 1 [0129.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d456e0 [0129.183] wcscpy (in: _Dest=0x3d456e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0129.183] wcscat (in: _Dest=0x3d456e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0129.183] wcscat (in: _Dest=0x3d456e0, _Source="ACWZMAIN.ACCDE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" [0129.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d456e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0129.185] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba79f00, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x85769b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ba79f00, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0x964000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="ACWZTO~1.ACC")) returned 1 [0129.186] wcscmp (_String1="ACWZTOOL.ACCDE", _String2=".") returned 1 [0129.186] wcscmp (_String1="ACWZTOOL.ACCDE", _String2="..") returned 1 [0129.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44330 [0129.186] wcscpy (in: _Dest=0x3d44330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0129.186] wcscat (in: _Dest=0x3d44330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0129.186] wcscat (in: _Dest=0x3d44330, _Source="ACWZTOOL.ACCDE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" [0129.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0129.188] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80dd7a00, ftCreationTime.dwHighDateTime=0x1cabb95, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80dd7a00, ftLastWriteTime.dwHighDateTime=0x1cabb95, nFileSizeHigh=0x0, nFileSizeLow=0x348000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="ACWZUS~1.ACC")) returned 1 [0129.188] wcscmp (_String1="ACWZUSR12.ACCDU", _String2=".") returned 1 [0129.188] wcscmp (_String1="ACWZUSR12.ACCDU", _String2="..") returned 1 [0129.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d440f0 [0129.188] wcscpy (in: _Dest=0x3d440f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0129.188] wcscat (in: _Dest=0x3d440f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0129.188] wcscat (in: _Dest=0x3d440f0, _Source="ACWZUSR12.ACCDU" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" [0129.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d440f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0129.190] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba79f00, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x8512a190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ba79f00, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 1 [0129.190] wcscmp (_String1="UTILITY.ACCDA", _String2=".") returned 1 [0129.190] wcscmp (_String1="UTILITY.ACCDA", _String2="..") returned 1 [0129.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0129.191] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ" [0129.191] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\" [0129.191] wcscat (in: _Dest=0x3eb9010, _Source="UTILITY.ACCDA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA") returned="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" [0129.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0129.192] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba79f00, ftCreationTime.dwHighDateTime=0x1cab61b, ftLastAccessTime.dwLowDateTime=0x8512a190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ba79f00, ftLastWriteTime.dwHighDateTime=0x1cab61b, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 0 [0129.193] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0129.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53638) returned 1 [0129.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a264d8) returned 1 [0129.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a261c8) returned 1 Thread: id = 401 os_tid = 0xef8 [0122.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26548 [0122.644] wcscpy (in: _Dest=0x7a26548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0122.644] wcscat (in: _Dest=0x7a26548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0122.644] wcscat (in: _Dest=0x7a26548, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*" [0122.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a538a0 [0122.644] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x882688b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30670c0 [0125.385] wcscmp (_String1=".", _String2=".") returned 0 [0125.385] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x882688b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.385] wcscmp (_String1="..", _String2=".") returned 1 [0125.385] wcscmp (_String1="..", _String2="..") returned 0 [0125.385] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed781200, ftCreationTime.dwHighDateTime=0x1cab83f, ftLastAccessTime.dwLowDateTime=0x76392db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed781200, ftLastWriteTime.dwHighDateTime=0x1cab83f, nFileSizeHigh=0x0, nFileSizeLow=0x16d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1 [0125.385] wcscmp (_String1="ACCOLK.DLL", _String2=".") returned 1 [0125.385] wcscmp (_String1="ACCOLK.DLL", _String2="..") returned 1 [0125.385] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a000, ftCreationTime.dwHighDateTime=0x1cac2cd, ftLastAccessTime.dwLowDateTime=0x7f1f3190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd587a000, ftLastWriteTime.dwHighDateTime=0x1cac2cd, nFileSizeHigh=0x0, nFileSizeLow=0x25380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAddin.dll", cAlternateFileName="")) returned 1 [0125.385] wcscmp (_String1="BCSAddin.dll", _String2=".") returned 1 [0125.385] wcscmp (_String1="BCSAddin.dll", _String2="..") returned 1 [0125.385] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28734900, ftCreationTime.dwHighDateTime=0x1cab832, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28734900, ftLastWriteTime.dwHighDateTime=0x1cab832, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="COLLEA~1.DLL")) returned 1 [0125.385] wcscmp (_String1="ColleagueImport.dll", _String2=".") returned 1 [0125.385] wcscmp (_String1="ColleagueImport.dll", _String2="..") returned 1 [0125.386] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a73100, ftCreationTime.dwHighDateTime=0x1bdbc83, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a73100, ftLastWriteTime.dwHighDateTime=0x1bdbc83, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1 [0125.386] wcscmp (_String1="FAXEXT.ECF", _String2=".") returned 1 [0125.386] wcscmp (_String1="FAXEXT.ECF", _String2="..") returned 1 [0125.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9670 [0125.386] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0125.386] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0125.386] wcscat (in: _Dest=0x3eb9670, _Source="FAXEXT.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" [0133.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0133.040] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69984400, ftCreationTime.dwHighDateTime=0x1c52bc7, ftLastAccessTime.dwLowDateTime=0x77b609b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x69984400, ftLastWriteTime.dwHighDateTime=0x1c52bc7, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1 [0133.040] wcscmp (_String1="MSOSEC.DLL", _String2=".") returned 1 [0133.040] wcscmp (_String1="MSOSEC.DLL", _String2="..") returned 1 [0133.040] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2c7900, ftCreationTime.dwHighDateTime=0x1c51fe0, ftLastAccessTime.dwLowDateTime=0x881d0330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9d2c7900, ftLastWriteTime.dwHighDateTime=0x1c51fe0, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1 [0133.041] wcscmp (_String1="MSOSEC.XML", _String2=".") returned 1 [0133.041] wcscmp (_String1="MSOSEC.XML", _String2="..") returned 1 [0133.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9098 [0133.041] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0133.041] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0133.041] wcscat (in: _Dest=0x3eb9098, _Source="MSOSEC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" [0133.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0133.042] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711f5100, ftCreationTime.dwHighDateTime=0x1bdf25d, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x711f5100, ftLastWriteTime.dwHighDateTime=0x1bdf25d, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1 [0133.042] wcscmp (_String1="MSSPC.ECF", _String2=".") returned 1 [0133.043] wcscmp (_String1="MSSPC.ECF", _String2="..") returned 1 [0133.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19318 [0133.043] wcscpy (in: _Dest=0x3e19318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0133.043] wcscat (in: _Dest=0x3e19318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0133.043] wcscat (in: _Dest=0x3e19318, _Source="MSSPC.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" [0133.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc4 [0133.044] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde238e00, ftCreationTime.dwHighDateTime=0x1c51fde, ftLastAccessTime.dwLowDateTime=0x77bd2dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde238e00, ftLastWriteTime.dwHighDateTime=0x1c51fde, nFileSizeHigh=0x0, nFileSizeLow=0x54000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSVCR71.DLL", cAlternateFileName="")) returned 1 [0133.044] wcscmp (_String1="MSVCR71.DLL", _String2=".") returned 1 [0133.044] wcscmp (_String1="MSVCR71.DLL", _String2="..") returned 1 [0133.044] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdb2dd00, ftCreationTime.dwHighDateTime=0x1c52bc0, ftLastAccessTime.dwLowDateTime=0x882688b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdb2dd00, ftLastWriteTime.dwHighDateTime=0x1c52bc0, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTKLOADR.DLL", cAlternateFileName="")) returned 1 [0133.045] wcscmp (_String1="OTKLOADR.DLL", _String2=".") returned 1 [0133.045] wcscmp (_String1="OTKLOADR.DLL", _String2="..") returned 1 [0133.045] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5cc500, ftCreationTime.dwHighDateTime=0x1c859e3, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfe5cc500, ftLastWriteTime.dwHighDateTime=0x1c859e3, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1 [0133.045] wcscmp (_String1="OUTEX.ECF", _String2=".") returned 1 [0133.045] wcscmp (_String1="OUTEX.ECF", _String2="..") returned 1 [0133.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a498 [0133.045] wcscpy (in: _Dest=0x3e1a498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0133.045] wcscat (in: _Dest=0x3e1a498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0133.045] wcscat (in: _Dest=0x3e1a498, _Source="OUTEX.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" [0133.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc8 [0133.046] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583d300, ftCreationTime.dwHighDateTime=0x1c859e4, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x583d300, ftLastWriteTime.dwHighDateTime=0x1c859e4, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1 [0133.046] wcscmp (_String1="OUTEX2.ECF", _String2=".") returned 1 [0133.046] wcscmp (_String1="OUTEX2.ECF", _String2="..") returned 1 [0133.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba770 [0133.046] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0133.046] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0133.046] wcscat (in: _Dest=0x3eba770, _Source="OUTEX2.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" [0133.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0133.047] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x81dfc890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0xe578, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1 [0133.048] wcscmp (_String1="OUTLVBA.DLL", _String2=".") returned 1 [0133.048] wcscmp (_String1="OUTLVBA.DLL", _String2="..") returned 1 [0133.048] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a280200, ftCreationTime.dwHighDateTime=0x1bdf25d, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a280200, ftLastWriteTime.dwHighDateTime=0x1bdf25d, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1 [0133.048] wcscmp (_String1="PMAILEXT.ECF", _String2=".") returned 1 [0133.048] wcscmp (_String1="PMAILEXT.ECF", _String2="..") returned 1 [0133.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba6e8 [0133.048] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS" [0133.048] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\" [0133.048] wcscat (in: _Dest=0x3eba6e8, _Source="PMAILEXT.ECF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF") returned="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" [0133.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0133.049] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4771db00, ftCreationTime.dwHighDateTime=0x1cab832, ftLastAccessTime.dwLowDateTime=0x85104030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4771db00, ftLastWriteTime.dwHighDateTime=0x1cab832, nFileSizeHigh=0x0, nFileSizeLow=0xfe160, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1 [0133.049] wcscmp (_String1="UmOutlookAddin.dll", _String2=".") returned 1 [0133.049] wcscmp (_String1="UmOutlookAddin.dll", _String2="..") returned 1 [0133.049] FindNextFileW (in: hFindFile=0x30670c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4771db00, ftCreationTime.dwHighDateTime=0x1cab832, ftLastAccessTime.dwLowDateTime=0x85104030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4771db00, ftLastWriteTime.dwHighDateTime=0x1cab832, nFileSizeHigh=0x0, nFileSizeLow=0xfe160, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 0 [0133.049] FindClose (in: hFindFile=0x30670c0 | out: hFindFile=0x30670c0) returned 1 [0133.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a538a0) returned 1 [0133.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26548) returned 1 [0133.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26238) returned 1 Thread: id = 402 os_tid = 0x4e4 [0122.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic")) returned 0x20 [0124.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC", dwFileAttributes=0x20) returned 0 [0124.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.676] GetLastError () returned 0x5 [0124.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC", dwFileAttributes=0x20) returned 0 [0124.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x349128) returned 1 Thread: id = 403 os_tid = 0x530 [0122.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic")) returned 0x20 [0124.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC", dwFileAttributes=0x20) returned 0 [0124.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.930] GetLastError () returned 0x5 [0124.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC", dwFileAttributes=0x20) returned 0 [0124.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 Thread: id = 404 os_tid = 0x608 [0122.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic")) returned 0x20 [0124.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC", dwFileAttributes=0x20) returned 0 [0124.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.932] GetLastError () returned 0x5 [0124.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC", dwFileAttributes=0x20) returned 0 [0124.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 Thread: id = 405 os_tid = 0x5c8 [0122.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng")) returned 0x20 [0124.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG", dwFileAttributes=0x20) returned 0 [0124.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.940] GetLastError () returned 0x5 [0124.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG", dwFileAttributes=0x20) returned 0 [0124.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3efc0) returned 1 Thread: id = 406 os_tid = 0xf08 [0122.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man")) returned 0x20 [0124.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man", dwFileAttributes=0x20) returned 0 [0124.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.935] GetLastError () returned 0x5 [0124.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man", dwFileAttributes=0x20) returned 0 [0124.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 Thread: id = 407 os_tid = 0xf04 [0122.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man")) returned 0x20 [0124.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man", dwFileAttributes=0x20) returned 0 [0124.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.938] GetLastError () returned 0x5 [0124.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man", dwFileAttributes=0x20) returned 0 [0124.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 Thread: id = 408 os_tid = 0xf00 [0122.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd")) returned 0x20 [0124.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd", dwFileAttributes=0x20) returned 0 [0124.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.944] GetLastError () returned 0x5 [0124.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd", dwFileAttributes=0x20) returned 0 [0124.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 Thread: id = 409 os_tid = 0x7ec [0122.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd")) returned 0x20 [0124.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd", dwFileAttributes=0x20) returned 0 [0124.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.946] GetLastError () returned 0x5 [0124.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd", dwFileAttributes=0x20) returned 0 [0124.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 410 os_tid = 0x754 [0122.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a718 [0122.656] wcscpy (in: _Dest=0x3e1a718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0122.656] wcscat (in: _Dest=0x3e1a718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0122.656] wcscat (in: _Dest=0x3e1a718, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*" [0122.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53b08 [0122.656] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85da9510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0125.386] wcscmp (_String1=".", _String2=".") returned 0 [0125.386] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85da9510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.386] wcscmp (_String1="..", _String2=".") returned 1 [0125.386] wcscmp (_String1="..", _String2="..") returned 0 [0125.386] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64cf300, ftCreationTime.dwHighDateTime=0x1c6a3a7, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb64cf300, ftLastWriteTime.dwHighDateTime=0x1c6a3a7, nFileSizeHigh=0x0, nFileSizeLow=0x7925, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2String.XSL", cAlternateFileName="AUTHOR~1.XSL")) returned 1 [0125.386] wcscmp (_String1="Author2String.XSL", _String2=".") returned 1 [0125.387] wcscmp (_String1="Author2String.XSL", _String2="..") returned 1 [0125.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5a40 [0125.387] wcscpy (in: _Dest=0x3df5a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0125.387] wcscat (in: _Dest=0x3df5a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0125.387] wcscat (in: _Dest=0x3df5a40, _Source="Author2String.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" [0141.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694 [0141.093] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64cf300, ftCreationTime.dwHighDateTime=0x1c6a3a7, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb64cf300, ftLastWriteTime.dwHighDateTime=0x1c6a3a7, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2XML.XSL", cAlternateFileName="AUTHOR~2.XSL")) returned 1 [0141.093] wcscmp (_String1="Author2XML.XSL", _String2=".") returned 1 [0141.093] wcscmp (_String1="Author2XML.XSL", _String2="..") returned 1 [0141.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6c00 [0141.093] wcscpy (in: _Dest=0x7ad6c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0141.093] wcscat (in: _Dest=0x7ad6c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0141.093] wcscat (in: _Dest=0x7ad6c00, _Source="Author2XML.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" [0141.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0141.095] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sort", cAlternateFileName="")) returned 1 [0141.095] wcscmp (_String1="Sort", _String2=".") returned 1 [0141.095] wcscmp (_String1="Sort", _String2="..") returned 1 [0141.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0141.095] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0141.095] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0141.095] wcscat (in: _Dest=0x3f3d748, _Source="Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0141.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0141.111] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0141.111] wcscmp (_String1="Style", _String2=".") returned 1 [0141.111] wcscmp (_String1="Style", _String2="..") returned 1 [0141.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c180 [0141.111] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography" [0141.111] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\" [0141.111] wcscat (in: _Dest=0x3f3c180, _Source="Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0141.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0141.114] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0141.114] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0141.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53b08) returned 1 [0141.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a718) returned 1 [0141.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f038) returned 1 Thread: id = 411 os_tid = 0xefc [0122.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f218 [0122.658] wcscpy (in: _Dest=0x3f3f218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0122.658] wcscat (in: _Dest=0x3f3f218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0122.658] wcscat (in: _Dest=0x3f3f218, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*" [0122.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53d70 [0122.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d4fa3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0125.072] wcscmp (_String1=".", _String2=".") returned 0 [0125.072] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8086a130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d4fa3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.073] wcscmp (_String1="..", _String2=".") returned 1 [0125.073] wcscmp (_String1="..", _String2="..") returned 0 [0125.073] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1 [0125.073] wcscmp (_String1="MSART1.BDR", _String2=".") returned 1 [0125.073] wcscmp (_String1="MSART1.BDR", _String2="..") returned 1 [0125.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9b38 [0125.073] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0125.073] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0125.074] wcscat (in: _Dest=0x3eb9b38, _Source="MSART1.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" [0153.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a4 [0153.283] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1 [0153.283] wcscmp (_String1="MSART10.BDR", _String2=".") returned 1 [0153.283] wcscmp (_String1="MSART10.BDR", _String2="..") returned 1 [0153.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba330 [0153.285] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.285] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.285] wcscat (in: _Dest=0x3eba330, _Source="MSART10.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" [0153.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e5c [0153.286] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1 [0153.286] wcscmp (_String1="MSART11.BDR", _String2=".") returned 1 [0153.286] wcscmp (_String1="MSART11.BDR", _String2="..") returned 1 [0153.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9230 [0153.286] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.286] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.286] wcscat (in: _Dest=0x3eb9230, _Source="MSART11.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" [0153.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0153.288] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1 [0153.288] wcscmp (_String1="MSART12.BDR", _String2=".") returned 1 [0153.288] wcscmp (_String1="MSART12.BDR", _String2="..") returned 1 [0153.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c5c0 [0153.288] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.288] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.288] wcscat (in: _Dest=0x3f3c5c0, _Source="MSART12.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" [0153.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0153.289] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1 [0153.289] wcscmp (_String1="MSART13.BDR", _String2=".") returned 1 [0153.290] wcscmp (_String1="MSART13.BDR", _String2="..") returned 1 [0153.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cd30 [0153.290] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.290] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.290] wcscat (in: _Dest=0x3f3cd30, _Source="MSART13.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" [0153.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0153.292] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1 [0153.292] wcscmp (_String1="MSART14.BDR", _String2=".") returned 1 [0153.292] wcscmp (_String1="MSART14.BDR", _String2="..") returned 1 [0153.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c3a0 [0153.292] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.292] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.292] wcscat (in: _Dest=0x3f3c3a0, _Source="MSART14.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" [0153.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0153.294] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1 [0153.294] wcscmp (_String1="MSART15.BDR", _String2=".") returned 1 [0153.294] wcscmp (_String1="MSART15.BDR", _String2="..") returned 1 [0153.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cb10 [0153.294] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.294] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.294] wcscat (in: _Dest=0x3f3cb10, _Source="MSART15.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" [0153.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0153.295] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1 [0153.295] wcscmp (_String1="MSART2.BDR", _String2=".") returned 1 [0153.295] wcscmp (_String1="MSART2.BDR", _String2="..") returned 1 [0153.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bed8 [0153.296] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.296] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.296] wcscat (in: _Dest=0x3f3bed8, _Source="MSART2.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" [0153.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec [0153.297] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1 [0153.297] wcscmp (_String1="MSART3.BDR", _String2=".") returned 1 [0153.297] wcscmp (_String1="MSART3.BDR", _String2="..") returned 1 [0153.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c290 [0153.297] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.297] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.297] wcscat (in: _Dest=0x3f3c290, _Source="MSART3.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" [0153.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0153.299] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8086a130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1 [0153.299] wcscmp (_String1="MSART4.BDR", _String2=".") returned 1 [0153.299] wcscmp (_String1="MSART4.BDR", _String2="..") returned 1 [0153.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3ca00 [0153.299] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.299] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.299] wcscat (in: _Dest=0x3f3ca00, _Source="MSART4.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" [0153.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0153.301] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4d4270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1 [0153.301] wcscmp (_String1="MSART5.BDR", _String2=".") returned 1 [0153.301] wcscmp (_String1="MSART5.BDR", _String2="..") returned 1 [0153.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3da78 [0153.301] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.301] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.301] wcscat (in: _Dest=0x3f3da78, _Source="MSART5.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" [0153.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0153.303] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x808b63f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1 [0153.303] wcscmp (_String1="MSART6.BDR", _String2=".") returned 1 [0153.303] wcscmp (_String1="MSART6.BDR", _String2="..") returned 1 [0153.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d4a0 [0153.303] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.303] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.303] wcscat (in: _Dest=0x3f3d4a0, _Source="MSART6.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" [0153.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0153.305] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1 [0153.305] wcscmp (_String1="MSART7.BDR", _String2=".") returned 1 [0153.305] wcscmp (_String1="MSART7.BDR", _String2="..") returned 1 [0153.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3db00 [0153.305] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.305] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.305] wcscat (in: _Dest=0x3f3db00, _Source="MSART7.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" [0153.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0153.307] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1 [0153.307] wcscmp (_String1="MSART8.BDR", _String2=".") returned 1 [0153.307] wcscmp (_String1="MSART8.BDR", _String2="..") returned 1 [0153.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cf50 [0153.307] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.307] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.307] wcscat (in: _Dest=0x3f3cf50, _Source="MSART8.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" [0153.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0153.309] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1 [0153.309] wcscmp (_String1="MSART9.BDR", _String2=".") returned 1 [0153.309] wcscmp (_String1="MSART9.BDR", _String2="..") returned 1 [0153.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cc20 [0153.309] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS" [0153.309] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\" [0153.310] wcscat (in: _Dest=0x3f3cc20, _Source="MSART9.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" [0153.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0153.311] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23881000, ftCreationTime.dwHighDateTime=0x1bc8d9e, ftLastAccessTime.dwLowDateTime=0x8d4fa3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23881000, ftLastWriteTime.dwHighDateTime=0x1bc8d9e, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0 [0153.311] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0153.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53d70) returned 1 [0153.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0153.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a262a8) returned 1 Thread: id = 412 os_tid = 0xef4 [0122.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr")) returned 0x20 [0124.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr", dwFileAttributes=0x20) returned 0 [0124.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.942] GetLastError () returned 0x5 [0124.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr", dwFileAttributes=0x20) returned 0 [0124.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab18) returned 1 Thread: id = 413 os_tid = 0xf2c [0123.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e06ad0 [0123.460] wcscpy (in: _Dest=0x3e06ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0123.460] wcscat (in: _Dest=0x3e06ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0123.461] wcscat (in: _Dest=0x3e06ad0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*" [0123.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0123.461] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x907b58b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df40 [0124.953] wcscmp (_String1=".", _String2=".") returned 0 [0124.953] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x907b58b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.953] wcscmp (_String1="..", _String2=".") returned 1 [0124.953] wcscmp (_String1="..", _String2="..") returned 0 [0124.954] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0124.954] wcscmp (_String1="1033", _String2=".") returned 1 [0124.954] wcscmp (_String1="1033", _String2="..") returned 1 [0124.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3efc0 [0124.954] wcscpy (in: _Dest=0x3f3efc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0124.954] wcscat (in: _Dest=0x3f3efc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0124.954] wcscat (in: _Dest=0x3f3efc0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0129.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3efc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0129.117] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xfb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3.SAM", cAlternateFileName="")) returned 1 [0129.117] wcscmp (_String1="ACT3.SAM", _String2=".") returned 1 [0129.118] wcscmp (_String1="ACT3.SAM", _String2="..") returned 1 [0129.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19598 [0129.118] wcscpy (in: _Dest=0x3e19598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.118] wcscat (in: _Dest=0x3e19598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.118] wcscat (in: _Dest=0x3e19598, _Source="ACT3.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" [0129.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0129.119] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x6390, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMDOS.FAE", cAlternateFileName="")) returned 1 [0129.119] wcscmp (_String1="DELIMDOS.FAE", _String2=".") returned 1 [0129.119] wcscmp (_String1="DELIMDOS.FAE", _String2="..") returned 1 [0129.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bfe8 [0129.119] wcscpy (in: _Dest=0x3f3bfe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.119] wcscat (in: _Dest=0x3f3bfe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.119] wcscat (in: _Dest=0x3f3bfe8, _Source="DELIMDOS.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" [0129.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bfe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0129.121] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1 [0129.121] wcscmp (_String1="DELIMWIN.FAE", _String2=".") returned 1 [0129.121] wcscmp (_String1="DELIMWIN.FAE", _String2="..") returned 1 [0129.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d1f8 [0129.121] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.121] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.121] wcscat (in: _Dest=0x3f3d1f8, _Source="DELIMWIN.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" [0129.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0129.123] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x771b5050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x4d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1 [0129.123] wcscmp (_String1="DESKSAM.SAM", _String2=".") returned 1 [0129.123] wcscmp (_String1="DESKSAM.SAM", _String2="..") returned 1 [0129.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cf50 [0129.123] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.123] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.123] wcscat (in: _Dest=0x3f3cf50, _Source="DESKSAM.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" [0129.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0129.124] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x812ae010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xc178, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC.SAM", cAlternateFileName="")) returned 1 [0129.124] wcscmp (_String1="ODBC.SAM", _String2=".") returned 1 [0129.124] wcscmp (_String1="ODBC.SAM", _String2="..") returned 1 [0129.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19198 [0129.124] wcscpy (in: _Dest=0x3e19198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.124] wcscat (in: _Dest=0x3e19198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.124] wcscat (in: _Dest=0x3e19198, _Source="ODBC.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" [0129.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0129.126] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x5980, dwReserved0=0x0, dwReserved1=0x0, cFileName="OL.SAM", cAlternateFileName="")) returned 1 [0129.126] wcscmp (_String1="OL.SAM", _String2=".") returned 1 [0129.126] wcscmp (_String1="OL.SAM", _String2="..") returned 1 [0129.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19b98 [0129.126] wcscpy (in: _Dest=0x3e19b98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.126] wcscat (in: _Dest=0x3e19b98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.126] wcscat (in: _Dest=0x3e19b98, _Source="OL.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" [0129.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0129.128] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x81581a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x16da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1 [0129.128] wcscmp (_String1="OLADD.FAE", _String2=".") returned 1 [0129.128] wcscmp (_String1="OLADD.FAE", _String2="..") returned 1 [0129.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3cc20 [0129.128] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.128] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.128] wcscat (in: _Dest=0x3f3cc20, _Source="OLADD.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" [0129.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0129.130] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x155a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1 [0129.130] wcscmp (_String1="OLAPPT.FAE", _String2=".") returned 1 [0129.130] wcscmp (_String1="OLAPPT.FAE", _String2="..") returned 1 [0129.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bd40 [0129.130] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.130] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.130] wcscat (in: _Dest=0x3f3bd40, _Source="OLAPPT.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" [0129.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0129.132] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x81619fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1 [0129.132] wcscmp (_String1="OLJRNL.FAE", _String2=".") returned 1 [0129.132] wcscmp (_String1="OLJRNL.FAE", _String2="..") returned 1 [0129.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bdc8 [0129.132] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.132] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.132] wcscat (in: _Dest=0x3f3bdc8, _Source="OLJRNL.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" [0129.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0129.134] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xb998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1 [0129.134] wcscmp (_String1="OLMAIL.FAE", _String2=".") returned 1 [0129.134] wcscmp (_String1="OLMAIL.FAE", _String2="..") returned 1 [0129.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d6c0 [0129.134] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.134] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.134] wcscat (in: _Dest=0x3f3d6c0, _Source="OLMAIL.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" [0129.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0129.135] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8168c3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x9798, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1 [0129.135] wcscmp (_String1="OLNOTE.FAE", _String2=".") returned 1 [0129.135] wcscmp (_String1="OLNOTE.FAE", _String2="..") returned 1 [0129.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d858 [0129.136] wcscpy (in: _Dest=0x3f3d858, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.136] wcscat (in: _Dest=0x3f3d858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.136] wcscat (in: _Dest=0x3f3d858, _Source="OLNOTE.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" [0129.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0129.141] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8e5319b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x14198, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1 [0129.141] wcscmp (_String1="OLTASK.FAE", _String2=".") returned 1 [0129.141] wcscmp (_String1="OLTASK.FAE", _String2="..") returned 1 [0129.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d8e0 [0129.142] wcscpy (in: _Dest=0x3f3d8e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.142] wcscat (in: _Dest=0x3f3d8e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.142] wcscat (in: _Dest=0x3f3d8e0, _Source="OLTASK.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" [0129.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0129.143] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x81a1e4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xa988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97.SAM", cAlternateFileName="")) returned 1 [0129.143] wcscmp (_String1="ORG97.SAM", _String2=".") returned 1 [0129.143] wcscmp (_String1="ORG97.SAM", _String2="..") returned 1 [0129.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d968 [0129.143] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.143] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.143] wcscat (in: _Dest=0x3f3d968, _Source="ORG97.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" [0129.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0129.145] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x8f8aedd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0xb778, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAB.SAM", cAlternateFileName="")) returned 1 [0129.145] wcscmp (_String1="PAB.SAM", _String2=".") returned 1 [0129.145] wcscmp (_String1="PAB.SAM", _String2="..") returned 1 [0129.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19d18 [0129.145] wcscpy (in: _Dest=0x3e19d18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT" [0129.145] wcscat (in: _Dest=0x3e19d18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\" [0129.145] wcscat (in: _Dest=0x3e19d18, _Source="PAB.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" [0129.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0129.147] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963e600, ftCreationTime.dwHighDateTime=0x1caca17, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9963e600, ftLastWriteTime.dwHighDateTime=0x1caca17, nFileSizeHigh=0x0, nFileSizeLow=0x13168, dwReserved0=0x0, dwReserved1=0x0, cFileName="RM.DLL", cAlternateFileName="")) returned 1 [0129.147] wcscmp (_String1="RM.DLL", _String2=".") returned 1 [0129.147] wcscmp (_String1="RM.DLL", _String2="..") returned 1 [0129.147] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1 [0129.147] wcscmp (_String1="TRANSMGR.DLL", _String2=".") returned 1 [0129.147] wcscmp (_String1="TRANSMGR.DLL", _String2="..") returned 1 [0129.147] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0 [0129.147] FindClose (in: hFindFile=0x7a2df40 | out: hFindFile=0x7a2df40) returned 1 [0129.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0129.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0129.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 Thread: id = 414 os_tid = 0xf40 [0123.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44060 [0123.462] wcscpy (in: _Dest=0x3d44060, _Source="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0" [0123.462] wcscat (in: _Dest=0x3d44060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\" [0123.462] wcscat (in: _Dest=0x3d44060, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*") returned="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*" [0123.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58498 [0123.462] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0123.467] wcscmp (_String1=".", _String2=".") returned 0 [0123.467] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80c947b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd9b390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.468] wcscmp (_String1="..", _String2=".") returned 1 [0123.468] wcscmp (_String1="..", _String2="..") returned 0 [0123.468] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a500, ftCreationTime.dwHighDateTime=0x1c8bd71, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7a500, ftLastWriteTime.dwHighDateTime=0x1c8bd71, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0123.468] wcscmp (_String1="Microsoft.Synchronization.Data.dll", _String2=".") returned 1 [0123.468] wcscmp (_String1="Microsoft.Synchronization.Data.dll", _String2="..") returned 1 [0123.468] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a500, ftCreationTime.dwHighDateTime=0x1c8bd71, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7a500, ftLastWriteTime.dwHighDateTime=0x1c8bd71, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.Server.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0123.468] wcscmp (_String1="Microsoft.Synchronization.Data.Server.dll", _String2=".") returned 1 [0123.468] wcscmp (_String1="Microsoft.Synchronization.Data.Server.dll", _String2="..") returned 1 [0123.468] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5500700, ftCreationTime.dwHighDateTime=0x1c8d6dc, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5500700, ftLastWriteTime.dwHighDateTime=0x1c8d6dc, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0123.468] wcscmp (_String1="Microsoft.Synchronization.Data.SqlServerCe.dll", _String2=".") returned 1 [0123.468] wcscmp (_String1="Microsoft.Synchronization.Data.SqlServerCe.dll", _String2="..") returned 1 [0123.468] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5500700, ftCreationTime.dwHighDateTime=0x1c8d6dc, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5500700, ftLastWriteTime.dwHighDateTime=0x1c8d6dc, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0123.468] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0123.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58498) returned 1 [0123.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44060) returned 1 [0123.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 Thread: id = 415 os_tid = 0x15c [0123.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfbd0 [0123.466] wcscpy (in: _Dest=0x3dcfbd0, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0123.466] wcscat (in: _Dest=0x3dcfbd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0123.466] wcscat (in: _Dest=0x3dcfbd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\*") returned="C:\\Users\\EEBsYm5\\Videos\\*" [0123.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d590a0 [0123.466] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\*", lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f4c5400, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f4c5400, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf810 [0123.466] wcscmp (_String1=".", _String2=".") returned 0 [0123.467] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8f4c5400, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x8f4c5400, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.467] wcscmp (_String1="..", _String2=".") returned 1 [0123.467] wcscmp (_String1="..", _String2="..") returned 0 [0123.467] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x497212a0, ftCreationTime.dwHighDateTime=0x1d5e0b6, ftLastAccessTime.dwLowDateTime=0x15396b20, ftLastAccessTime.dwHighDateTime=0x1d5e3e8, ftLastWriteTime.dwLowDateTime=0x15396b20, ftLastWriteTime.dwHighDateTime=0x1d5e3e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-ixq1 4vSzRQo_", cAlternateFileName="-IXQ14~1")) returned 1 [0123.467] wcscmp (_String1="-ixq1 4vSzRQo_", _String2=".") returned -1 [0123.467] wcscmp (_String1="-ixq1 4vSzRQo_", _String2="..") returned -1 [0123.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6adc8 [0123.467] wcscpy (in: _Dest=0x3e6adc8, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0123.467] wcscat (in: _Dest=0x3e6adc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0123.467] wcscat (in: _Dest=0x3e6adc8, _Source="-ixq1 4vSzRQo_" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" [0129.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e6adc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0129.154] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfcb6d70, ftCreationTime.dwHighDateTime=0x1d5e3e3, ftLastAccessTime.dwLowDateTime=0xb21d9020, ftLastAccessTime.dwHighDateTime=0x1d5db31, ftLastWriteTime.dwLowDateTime=0xb21d9020, ftLastWriteTime.dwHighDateTime=0x1d5db31, nFileSizeHigh=0x0, nFileSizeLow=0xb1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="C-R9.flv", cAlternateFileName="")) returned 1 [0129.154] wcscmp (_String1="C-R9.flv", _String2=".") returned 1 [0129.154] wcscmp (_String1="C-R9.flv", _String2="..") returned 1 [0129.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6158 [0129.155] wcscpy (in: _Dest=0x3de6158, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0129.155] wcscat (in: _Dest=0x3de6158, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0129.155] wcscat (in: _Dest=0x3de6158, _Source="C-R9.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\C-R9.flv") returned="C:\\Users\\EEBsYm5\\Videos\\C-R9.flv" [0129.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de6158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0129.156] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e98a30, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e98a30, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0xec3e8400, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0129.156] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0129.156] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0129.156] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5997e760, ftCreationTime.dwHighDateTime=0x1d5ddee, ftLastAccessTime.dwLowDateTime=0x964714f0, ftLastAccessTime.dwHighDateTime=0x1d5e76d, ftLastWriteTime.dwLowDateTime=0x964714f0, ftLastWriteTime.dwHighDateTime=0x1d5e76d, nFileSizeHigh=0x0, nFileSizeLow=0x2f94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUlAOJyb9C9h903.mp4", cAlternateFileName="FULAOJ~1.MP4")) returned 1 [0129.156] wcscmp (_String1="FUlAOJyb9C9h903.mp4", _String2=".") returned 1 [0129.156] wcscmp (_String1="FUlAOJyb9C9h903.mp4", _String2="..") returned 1 [0129.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6968 [0129.156] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0129.156] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0129.156] wcscat (in: _Dest=0x2fe6968, _Source="FUlAOJyb9C9h903.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\FUlAOJyb9C9h903.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\FUlAOJyb9C9h903.mp4" [0129.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0129.158] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfef4dc30, ftCreationTime.dwHighDateTime=0x1d5e434, ftLastAccessTime.dwLowDateTime=0x87a1d360, ftLastAccessTime.dwHighDateTime=0x1d5e61c, ftLastWriteTime.dwLowDateTime=0x87a1d360, ftLastWriteTime.dwHighDateTime=0x1d5e61c, nFileSizeHigh=0x0, nFileSizeLow=0x28d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="H_tw3aZJK7h33TLqGM_F.flv", cAlternateFileName="H_TW3A~1.FLV")) returned 1 [0129.158] wcscmp (_String1="H_tw3aZJK7h33TLqGM_F.flv", _String2=".") returned 1 [0129.158] wcscmp (_String1="H_tw3aZJK7h33TLqGM_F.flv", _String2="..") returned 1 [0129.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26318 [0129.158] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0129.158] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0129.158] wcscat (in: _Dest=0x7a26318, _Source="H_tw3aZJK7h33TLqGM_F.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\H_tw3aZJK7h33TLqGM_F.flv") returned="C:\\Users\\EEBsYm5\\Videos\\H_tw3aZJK7h33TLqGM_F.flv" [0129.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0129.159] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f1fea0, ftCreationTime.dwHighDateTime=0x1d5e6d7, ftLastAccessTime.dwLowDateTime=0x34e8de80, ftLastAccessTime.dwHighDateTime=0x1d5df72, ftLastWriteTime.dwLowDateTime=0x34e8de80, ftLastWriteTime.dwHighDateTime=0x1d5df72, nFileSizeHigh=0x0, nFileSizeLow=0x10194, dwReserved0=0x0, dwReserved1=0x0, cFileName="wfgZDs.flv", cAlternateFileName="")) returned 1 [0129.159] wcscmp (_String1="wfgZDs.flv", _String2=".") returned 1 [0129.159] wcscmp (_String1="wfgZDs.flv", _String2="..") returned 1 [0129.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de64c8 [0129.160] wcscpy (in: _Dest=0x3de64c8, _Source="C:\\Users\\EEBsYm5\\Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Videos") returned="C:\\Users\\EEBsYm5\\Videos" [0129.160] wcscat (in: _Dest=0x3de64c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0129.160] wcscat (in: _Dest=0x3de64c8, _Source="wfgZDs.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\wfgZDs.flv") returned="C:\\Users\\EEBsYm5\\Videos\\wfgZDs.flv" [0129.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de64c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0129.161] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f1fea0, ftCreationTime.dwHighDateTime=0x1d5e6d7, ftLastAccessTime.dwLowDateTime=0x34e8de80, ftLastAccessTime.dwHighDateTime=0x1d5df72, ftLastWriteTime.dwLowDateTime=0x34e8de80, ftLastWriteTime.dwHighDateTime=0x1d5df72, nFileSizeHigh=0x0, nFileSizeLow=0x10194, dwReserved0=0x0, dwReserved1=0x0, cFileName="wfgZDs.flv", cAlternateFileName="")) returned 0 [0129.161] FindClose (in: hFindFile=0x3dcf810 | out: hFindFile=0x3dcf810) returned 1 [0129.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d590a0) returned 1 [0129.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfbd0) returned 1 [0129.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79100) returned 1 Thread: id = 416 os_tid = 0x5f4 [0123.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6ae78 [0123.472] wcscpy (in: _Dest=0x3e6ae78, _Source="C:\\Program Files\\Java\\jre7\\bin\\client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0123.472] wcscat (in: _Dest=0x3e6ae78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\" [0123.472] wcscat (in: _Dest=0x3e6ae78, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\*" [0123.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58498 [0123.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a8ea200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0123.476] wcscmp (_String1=".", _String2=".") returned 0 [0123.476] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a8ea200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.476] wcscmp (_String1="..", _String2=".") returned 1 [0123.476] wcscmp (_String1="..", _String2="..") returned 0 [0123.476] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6a8ea200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6a8ea200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6a910360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0123.476] wcscmp (_String1="classes.jsa", _String2=".") returned 1 [0123.476] wcscmp (_String1="classes.jsa", _String2="..") returned 1 [0123.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69bb8 [0123.476] wcscpy (in: _Dest=0x3e69bb8, _Source="C:\\Program Files\\Java\\jre7\\bin\\client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0123.476] wcscat (in: _Dest=0x3e69bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\" [0123.476] wcscat (in: _Dest=0x3e69bb8, _Source="classes.jsa" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa" [0123.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0123.856] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6767afe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6767afe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0123.857] wcscmp (_String1="jvm.dll", _String2=".") returned 1 [0123.857] wcscmp (_String1="jvm.dll", _String2="..") returned 1 [0123.857] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0123.857] wcscmp (_String1="Xusage.txt", _String2=".") returned 1 [0123.857] wcscmp (_String1="Xusage.txt", _String2="..") returned 1 [0123.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23530 [0123.857] wcscpy (in: _Dest=0x7a23530, _Source="C:\\Program Files\\Java\\jre7\\bin\\client" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client") returned="C:\\Program Files\\Java\\jre7\\bin\\client" [0123.857] wcscat (in: _Dest=0x7a23530, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\" [0123.857] wcscat (in: _Dest=0x7a23530, _Source="Xusage.txt" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt") returned="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt" [0123.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0123.859] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676a1140, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676a1140, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676a1140, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0123.859] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0123.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58498) returned 1 [0123.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ae78) returned 1 [0123.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14988) returned 1 Thread: id = 417 os_tid = 0x778 [0123.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe64e8 [0123.473] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Program Files\\Java\\jre7\\bin\\dtplugin" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin" [0123.473] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\" [0123.473] wcscat (in: _Dest=0x2fe64e8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\*" [0123.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0123.473] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0123.477] wcscmp (_String1=".", _String2=".") returned 0 [0123.477] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.477] wcscmp (_String1="..", _String2=".") returned 1 [0123.477] wcscmp (_String1="..", _String2="..") returned 0 [0123.477] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0123.477] wcscmp (_String1="deployJava1.dll", _String2=".") returned 1 [0123.477] wcscmp (_String1="deployJava1.dll", _String2="..") returned 1 [0123.477] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0123.477] wcscmp (_String1="npdeployJava1.dll", _String2=".") returned 1 [0123.478] wcscmp (_String1="npdeployJava1.dll", _String2="..") returned 1 [0123.478] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676c72a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x676c72a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x676c72a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0123.478] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0123.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0123.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0123.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e152d0) returned 1 Thread: id = 418 os_tid = 0x300 [0123.474] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets")) returned 0x20 [0123.482] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0123.482] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.482] GetLastError () returned 0x5 [0123.482] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0123.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 419 os_tid = 0x7c8 [0123.479] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets")) returned 0x20 [0123.484] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0123.484] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.484] GetLastError () returned 0x5 [0123.484] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0123.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85150) returned 1 Thread: id = 420 os_tid = 0x14c [0123.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe64e8 [0123.481] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Program Files\\Java\\jre7\\bin\\plugin2" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2" [0123.481] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\" [0123.481] wcscat (in: _Dest=0x2fe64e8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\*") returned="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\*" [0123.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0123.481] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0123.489] wcscmp (_String1=".", _String2=".") returned 0 [0123.489] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.489] wcscmp (_String1="..", _String2=".") returned 1 [0123.489] wcscmp (_String1="..", _String2="..") returned 0 [0123.489] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0123.489] wcscmp (_String1="msvcr100.dll", _String2=".") returned 1 [0123.489] wcscmp (_String1="msvcr100.dll", _String2="..") returned 1 [0123.489] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0123.489] wcscmp (_String1="npjp2.dll", _String2=".") returned 1 [0123.489] wcscmp (_String1="npjp2.dll", _String2="..") returned 1 [0123.489] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677abae0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677abae0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677abae0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0123.489] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0123.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0123.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0123.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15380) returned 1 Thread: id = 421 os_tid = 0x490 [0123.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma" (normalized: "c:\\program files\\google\\chrome\\application\\setupmetrics\\20170531124044.pma")) returned 0x20 [0123.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma", dwFileAttributes=0x20) returned 0 [0123.486] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma" (normalized: "c:\\program files\\google\\chrome\\application\\setupmetrics\\20170531124044.pma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.487] GetLastError () returned 0x5 [0123.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\SetupMetrics\\20170531124044.pma", dwFileAttributes=0x20) returned 0 [0123.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 Thread: id = 422 os_tid = 0xfb0 [0123.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df54a0 [0123.491] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies" [0123.491] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\" [0123.491] wcscat (in: _Dest=0x3df54a0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*" [0123.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0123.491] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77651af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0123.492] wcscmp (_String1=".", _String2=".") returned 0 [0123.492] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77651af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.492] wcscmp (_String1="..", _String2=".") returned 1 [0123.492] wcscmp (_String1="..", _String2="..") returned 0 [0123.492] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef739700, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef739700, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0123.492] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Project.dll", _String2=".") returned 1 [0123.492] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Project.dll", _String2="..") returned 1 [0123.492] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef739700, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77651af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xef739700, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0123.492] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0123.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0123.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 [0123.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 Thread: id = 423 os_tid = 0x32c [0123.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df59a0 [0123.494] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies" [0123.494] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\" [0123.494] wcscat (in: _Dest=0x3df59a0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*" [0123.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0123.495] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7788cf90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87d599f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0123.505] wcscmp (_String1=".", _String2=".") returned 0 [0123.505] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7788cf90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87d599f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.505] wcscmp (_String1="..", _String2=".") returned 1 [0123.505] wcscmp (_String1="..", _String2="..") returned 0 [0123.505] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b90200, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x7788cf90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4b90200, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x337a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0123.505] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", _String2=".") returned 1 [0123.505] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", _String2="..") returned 1 [0123.505] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5ea2f00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5ea2f00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x197b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0123.505] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", _String2=".") returned 1 [0123.505] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", _String2="..") returned 1 [0123.505] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed113d00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x778b30f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed113d00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x97b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0123.505] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", _String2=".") returned 1 [0123.505] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", _String2="..") returned 1 [0123.505] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee426a00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x87d599f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xee426a00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x117a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0123.505] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", _String2=".") returned 1 [0123.506] wcscmp (_String1="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", _String2="..") returned 1 [0123.506] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe01000, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77c451f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xebe01000, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1 [0123.506] wcscmp (_String1="System.AddIn.dll", _String2=".") returned 1 [0123.506] wcscmp (_String1="System.AddIn.dll", _String2="..") returned 1 [0123.506] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe01000, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x77c451f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xebe01000, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 0 [0123.506] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0123.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0123.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 [0123.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d1a8) returned 1 Thread: id = 424 os_tid = 0x3c4 [0123.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9918 [0123.496] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" [0123.496] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\" [0123.496] wcscat (in: _Dest=0x3eb9918, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*" [0123.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59308 [0123.496] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0123.497] wcscmp (_String1=".", _String2=".") returned 0 [0123.497] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.497] wcscmp (_String1="..", _String2=".") returned 1 [0123.497] wcscmp (_String1="..", _String2="..") returned 0 [0123.497] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 1 [0123.497] wcscmp (_String1="ItemTemplates", _String2=".") returned 1 [0123.497] wcscmp (_String1="ItemTemplates", _String2="..") returned 1 [0123.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df54a0 [0123.497] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA" [0123.497] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\" [0123.497] wcscat (in: _Dest=0x3df54a0, _Source="ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0124.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df54a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0124.117] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 0 [0124.117] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0124.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59308) returned 1 [0124.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 [0124.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6470) returned 1 Thread: id = 425 os_tid = 0x7e0 [0123.504] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv")) returned 0x20 [0123.504] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", dwFileAttributes=0x20) returned 1 [0129.403] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcf8 [0129.403] GetFileSizeEx (in: hFile=0xcf8, lpFileSize=0xa35f7b4 | out: lpFileSize=0xa35f7b4*=26246026) returned 1 [0129.403] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x1907b86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.403] ReadFile (in: hFile=0xcf8, lpBuffer=0xa35f790, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa35f7a0, lpOverlapped=0x0 | out: lpBuffer=0xa35f790*, lpNumberOfBytesRead=0xa35f7a0*=0x4, lpOverlapped=0x0) returned 1 [0129.407] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0129.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38d0 [0129.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0129.407] NtQuerySystemTime (in: CurrentTime=0xa35f728 | out: CurrentTime=0xa35f728*=132462177087924000) returned 0x0 [0129.407] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x628c2ec0 [0129.407] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x3fa9d433 [0129.407] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x28895dbf [0129.407] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x30f45472 [0129.407] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x6c8e7c5b [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x1e121cfa [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x49814f9e [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x58805d14 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x6f0eded9 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0xcb1b0b2 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x1d1e03b2 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x2e3fabf [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x5f0f2ffe [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x614886be [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x53d055e3 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x235f3605 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x556336f [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x39755767 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x1b8027a [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x3882a2e9 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x107703b [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x1f982018 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x16b53d24 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x6c3bfe60 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x641b5840 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x5fcda5b [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x5ea38909 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x3b8f7928 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0xe8af7c5 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x2c85230a [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x71d7c702 [0129.408] RtlRandomEx (in: Seed=0xa35f720 | out: Seed=0xa35f720) returned 0x7a8b4aee [0129.417] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.417] ReadFile (in: hFile=0xcf8, lpBuffer=0x7cd43e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa35f728, lpOverlapped=0x0 | out: lpBuffer=0x7cd43e0*, lpNumberOfBytesRead=0xa35f728*=0x3c00, lpOverlapped=0x0) returned 1 [0129.420] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a258a8 [0129.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0129.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0129.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0129.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a750b0 [0129.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0129.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0129.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38f8) returned 1 [0129.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0129.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258a8) returned 1 [0129.421] WriteFile (in: hFile=0xcf8, lpBuffer=0x7a750b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa35f728, lpOverlapped=0x0 | out: lpBuffer=0x7a750b0*, lpNumberOfBytesWritten=0xa35f728*=0x3c00, lpOverlapped=0x0) returned 1 [0133.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a750b0) returned 1 [0133.233] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0xc86400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.233] ReadFile (in: hFile=0xcf8, lpBuffer=0x7cd43e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa35f728, lpOverlapped=0x0 | out: lpBuffer=0x7cd43e0*, lpNumberOfBytesRead=0xa35f728*=0x3c00, lpOverlapped=0x0) returned 1 [0133.261] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0xc86400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07890 [0133.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0133.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0133.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0133.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb63a0 [0133.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0133.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0133.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0133.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0133.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0133.263] WriteFile (in: hFile=0xcf8, lpBuffer=0x7cb63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa35f728, lpOverlapped=0x0 | out: lpBuffer=0x7cb63a0*, lpNumberOfBytesWritten=0xa35f728*=0x3c00, lpOverlapped=0x0) returned 1 [0134.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63a0) returned 1 [0134.996] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x1903f8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.996] ReadFile (in: hFile=0xcf8, lpBuffer=0x7cd43e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa35f728, lpOverlapped=0x0 | out: lpBuffer=0x7cd43e0*, lpNumberOfBytesRead=0xa35f728*=0x3c00, lpOverlapped=0x0) returned 1 [0135.112] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x1903f8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a246b0 [0135.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0135.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54110 [0135.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54110) returned 1 [0135.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c98360 [0135.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54110 [0135.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53fa8 [0135.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53fa8) returned 1 [0135.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0135.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a246b0) returned 1 [0135.113] WriteFile (in: hFile=0xcf8, lpBuffer=0x7c98360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa35f728, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesWritten=0xa35f728*=0x3c00, lpOverlapped=0x0) returned 1 [0137.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c98360) returned 1 [0137.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf9b8 [0137.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0137.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3dc2f78 [0137.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0137.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0137.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0137.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0137.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095c18) returned 1 [0137.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e0a560 [0137.029] SetFilePointerEx (in: hFile=0xcf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.029] WriteFile (in: hFile=0xcf8, lpBuffer=0x3e0a560*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xa35f7a8, lpOverlapped=0x0 | out: lpBuffer=0x3e0a560*, lpNumberOfBytesWritten=0xa35f7a8*=0x14a, lpOverlapped=0x0) returned 1 [0138.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25f68 [0138.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51278 [0138.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ca0 [0138.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ca0) returned 1 [0138.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e80e60 [0138.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ca0 [0138.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cf0 [0138.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cf0) returned 1 [0138.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0138.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25f68) returned 1 [0138.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x7ad7af0 [0138.113] sprintf (in: _Dest=0x7ad7af0, _Format="%c%c" | out: _Dest="1a") returned 2 [0138.113] sprintf (in: _Dest=0x7ad7af2, _Format="%c%c" | out: _Dest="04") returned 2 [0138.113] sprintf (in: _Dest=0x7ad7af4, _Format="%c%c" | out: _Dest="8a") returned 2 [0138.113] sprintf (in: _Dest=0x7ad7af6, _Format="%c%c" | out: _Dest="a2") returned 2 [0138.113] sprintf (in: _Dest=0x7ad7af8, _Format="%c%c" | out: _Dest="33") returned 2 [0138.113] sprintf (in: _Dest=0x7ad7afa, _Format="%c%c" | out: _Dest="41") returned 2 [0138.113] sprintf (in: _Dest=0x7ad7afc, _Format="%c%c" | out: _Dest="e1") returned 2 [0138.113] sprintf (in: _Dest=0x7ad7afe, _Format="%c%c" | out: _Dest="3c") returned 2 [0138.113] sprintf (in: _Dest=0x7ad7b00, _Format="%c%c" | out: _Dest="b2") returned 2 [0138.113] sprintf (in: _Dest=0x7ad7b02, _Format="%c%c" | out: _Dest="c0") returned 2 [0138.113] sprintf (in: _Dest=0x7ad7b04, _Format="%c%c" | out: _Dest="5c") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b06, _Format="%c%c" | out: _Dest="e3") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b08, _Format="%c%c" | out: _Dest="85") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b0a, _Format="%c%c" | out: _Dest="15") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b0c, _Format="%c%c" | out: _Dest="02") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b0e, _Format="%c%c" | out: _Dest="38") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b10, _Format="%c%c" | out: _Dest="8a") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b12, _Format="%c%c" | out: _Dest="48") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b14, _Format="%c%c" | out: _Dest="09") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b16, _Format="%c%c" | out: _Dest="c0") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b18, _Format="%c%c" | out: _Dest="6e") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b1a, _Format="%c%c" | out: _Dest="7d") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b1c, _Format="%c%c" | out: _Dest="db") returned 2 [0138.114] sprintf (in: _Dest=0x7ad7b1e, _Format="%c%c" | out: _Dest="eb") returned 2 [0138.114] RtlInitAnsiString (in: DestinationString=0xa35f730, SourceString="1a048aa23341e13cb2c05ce3851502388a4809c06e7ddbeb" | out: DestinationString="1a048aa23341e13cb2c05ce3851502388a4809c06e7ddbeb") [0138.114] RtlAnsiStringToUnicodeString (in: DestinationString=0xa35f728, SourceString="1a048aa23341e13cb2c05ce3851502388a4809c06e7ddbeb", AllocateDestinationString=1 | out: DestinationString="1a048aa23341e13cb2c05ce3851502388a4809c06e7ddbeb") returned 0x0 [0138.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23530 [0138.114] wcscat (in: _Dest=0x3e47918, _Source="1a048aa23341" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\1a048aa23341") returned="C:\\Users\\Public\\Videos\\Sample Videos\\1a048aa23341" [0138.114] wcscat (in: _Dest=0x3e47918, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\1a048aa23341.68814f") returned="C:\\Users\\Public\\Videos\\Sample Videos\\1a048aa23341.68814f" [0138.114] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Videos\\Sample Videos\\1a048aa23341.68814f", NtPathName=0xa35f720, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Videos\\Sample Videos\\1a048aa23341.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44960 [0138.115] NtSetInformationFile (FileHandle=0xcf8, IoStatusBlock=0xa35f728, FileInformation=0x3d44960, Length=0x88, FileInformationClass=0xa) returned 0x0 [0138.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44960) returned 1 [0138.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e800e0) returned 1 [0138.194] NtQueryInformationFile (in: FileHandle=0xcf8, IoStatusBlock=0xa35f6f8, FileInformation=0xa35f700, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa35f6f8, FileInformation=0xa35f700) returned 0x0 [0138.194] NtSetInformationFile (FileHandle=0xcf8, IoStatusBlock=0xa35f6f8, FileInformation=0xa35f700, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47918) returned 1 [0138.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23530) returned 1 [0138.226] FlushFileBuffers (hFile=0xcf8) returned 1 [0138.230] CloseHandle (hObject=0xcf8) returned 1 [0138.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0138.252] wcscpy (in: _Dest=0x3d51200, _Source="C:\\Users\\Public\\Videos\\Sample Videos\\" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\") returned="C:\\Users\\Public\\Videos\\Sample Videos\\" [0138.252] wcscat (in: _Dest=0x3d51200, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Videos\\Sample Videos\\68814F-Readme.txt") returned="C:\\Users\\Public\\Videos\\Sample Videos\\68814F-Readme.txt" [0138.252] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\68814F-Readme.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\68814f-readme.txt")) returned 0xffffffff [0138.252] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\68814F-Readme.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ba0 [0138.265] WriteFile (in: hFile=0x1ba0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa35f73c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa35f73c*=0x8b9, lpOverlapped=0x0) returned 1 [0138.281] CloseHandle (hObject=0x1ba0) returned 1 [0138.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0138.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26158) returned 1 Thread: id = 426 os_tid = 0x584 [0123.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e15380 [0123.509] wcscpy (in: _Dest=0x3e15380, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0123.509] wcscat (in: _Dest=0x3e15380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\" [0123.509] wcscat (in: _Dest=0x3e15380, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\*" [0123.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0123.509] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0123.510] wcscmp (_String1=".", _String2=".") returned 0 [0123.510] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.510] wcscmp (_String1="..", _String2=".") returned 1 [0123.510] wcscmp (_String1="..", _String2="..") returned 0 [0123.510] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0123.510] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0123.510] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0123.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0fa8 [0123.510] wcscpy (in: _Dest=0x3ee0fa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0123.510] wcscat (in: _Dest=0x3ee0fa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\" [0123.510] wcscat (in: _Dest=0x3ee0fa8, _Source="Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" [0136.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28 [0136.433] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0136.433] wcscmp (_String1="Color", _String2=".") returned 1 [0136.433] wcscmp (_String1="Color", _String2="..") returned 1 [0136.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6c08 [0136.434] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe" [0136.434] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\" [0136.434] wcscat (in: _Dest=0x2fe6c08, _Source="Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0136.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0136.441] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0136.441] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15380) returned 1 [0136.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14bf0) returned 1 Thread: id = 427 os_tid = 0x774 [0123.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a22ff0 [0123.511] wcscpy (in: _Dest=0x7a22ff0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data" [0123.511] wcscat (in: _Dest=0x7a22ff0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\" [0123.511] wcscat (in: _Dest=0x7a22ff0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\*" [0123.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58bd0 [0123.511] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Application Data\\*", lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58bd0) returned 1 [0123.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 [0123.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf7b0) returned 1 Thread: id = 428 os_tid = 0x5d8 [0123.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e152d0 [0123.513] wcscpy (in: _Dest=0x3e152d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0123.513] wcscat (in: _Dest=0x3e152d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\" [0123.513] wcscat (in: _Dest=0x3e152d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\*" [0123.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58bd0 [0123.513] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\*", lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf610 [0123.514] wcscmp (_String1=".", _String2=".") returned 0 [0123.514] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.514] wcscmp (_String1="..", _String2=".") returned 1 [0123.514] wcscmp (_String1="..", _String2="..") returned 0 [0123.514] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0123.514] wcscmp (_String1="Chrome", _String2=".") returned 1 [0123.514] wcscmp (_String1="Chrome", _String2="..") returned 1 [0123.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf7b0 [0123.514] wcscpy (in: _Dest=0x3edf7b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0123.514] wcscat (in: _Dest=0x3edf7b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\" [0123.515] wcscat (in: _Dest=0x3edf7b0, _Source="Chrome" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" [0146.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf7b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c [0146.112] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0146.112] wcscmp (_String1="CrashReports", _String2=".") returned 1 [0146.112] wcscmp (_String1="CrashReports", _String2="..") returned 1 [0146.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a236f0 [0146.112] wcscpy (in: _Dest=0x7a236f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google" [0146.112] wcscat (in: _Dest=0x7a236f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\" [0146.112] wcscat (in: _Dest=0x7a236f0, _Source="CrashReports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports" [0146.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a236f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0146.114] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0 [0146.115] FindClose (in: hFindFile=0x3dcf610 | out: hFindFile=0x3dcf610) returned 1 [0146.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58bd0) returned 1 [0146.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e152d0) returned 1 [0146.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48c10) returned 1 Thread: id = 429 os_tid = 0x650 [0123.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe64e8 [0123.515] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History" [0123.515] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\" [0123.515] wcscat (in: _Dest=0x2fe64e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\*" [0123.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0123.515] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\History\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0123.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0123.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48690) returned 1 Thread: id = 430 os_tid = 0x644 [0123.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee1078 [0123.517] wcscpy (in: _Dest=0x3ee1078, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help" [0123.517] wcscat (in: _Dest=0x3ee1078, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\" [0123.517] wcscat (in: _Dest=0x3ee1078, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\*" [0123.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0123.517] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0123.517] wcscmp (_String1=".", _String2=".") returned 0 [0123.517] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.517] wcscmp (_String1="..", _String2=".") returned 1 [0123.517] wcscmp (_String1="..", _String2="..") returned 0 [0123.518] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35b1f3d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0123.518] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0123.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0123.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 [0123.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0038) returned 1 Thread: id = 431 os_tid = 0x3ec [0123.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0038 [0123.519] wcscpy (in: _Dest=0x3ee0038, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore" [0123.519] wcscat (in: _Dest=0x3ee0038, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\" [0123.519] wcscat (in: _Dest=0x3ee0038, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\*" [0123.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0123.519] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0123.519] wcscmp (_String1=".", _String2=".") returned 0 [0123.519] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.520] wcscmp (_String1="..", _String2=".") returned 1 [0123.520] wcscmp (_String1="..", _String2="..") returned 0 [0123.520] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x94d83f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x94d83f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x94d83f0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0123.520] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0123.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0123.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0038) returned 1 [0123.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 432 os_tid = 0xfb8 [0123.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a22ff0 [0123.521] wcscpy (in: _Dest=0x7a22ff0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0123.521] wcscat (in: _Dest=0x7a22ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0123.521] wcscat (in: _Dest=0x7a22ff0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*" [0123.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0123.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0123.528] wcscmp (_String1=".", _String2=".") returned 0 [0123.528] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48bf5530, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.528] wcscmp (_String1="..", _String2=".") returned 1 [0123.528] wcscmp (_String1="..", _String2="..") returned 0 [0123.528] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x176f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.GIF", cAlternateFileName="")) returned 1 [0123.528] wcscmp (_String1="CURRENCY.GIF", _String2=".") returned 1 [0123.528] wcscmp (_String1="CURRENCY.GIF", _String2="..") returned 1 [0123.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9b38 [0123.528] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0123.528] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0123.528] wcscat (in: _Dest=0x3eb9b38, _Source="CURRENCY.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" [0124.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0124.627] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbd4800, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8cbd4800, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x224, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.HTM", cAlternateFileName="")) returned 1 [0124.627] wcscmp (_String1="CURRENCY.HTM", _String2=".") returned 1 [0124.627] wcscmp (_String1="CURRENCY.HTM", _String2="..") returned 1 [0124.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba220 [0124.627] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.628] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.628] wcscat (in: _Dest=0x3eba220, _Source="CURRENCY.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" [0124.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0124.629] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.GIF", cAlternateFileName="")) returned 1 [0124.629] wcscmp (_String1="DADSHIRT.GIF", _String2=".") returned 1 [0124.629] wcscmp (_String1="DADSHIRT.GIF", _String2="..") returned 1 [0124.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3bf60 [0124.629] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.629] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.629] wcscat (in: _Dest=0x3f3bf60, _Source="DADSHIRT.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" [0124.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bf60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0124.631] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4f6100, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf4f6100, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.HTM", cAlternateFileName="")) returned 1 [0124.631] wcscmp (_String1="DADSHIRT.HTM", _String2=".") returned 1 [0124.631] wcscmp (_String1="DADSHIRT.HTM", _String2="..") returned 1 [0124.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3bfe8 [0124.631] wcscpy (in: _Dest=0x3f3bfe8, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.631] wcscat (in: _Dest=0x3f3bfe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.631] wcscat (in: _Dest=0x3f3bfe8, _Source="DADSHIRT.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" [0124.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bfe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0124.632] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda4a900, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdda4a900, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0xd36, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.GIF", cAlternateFileName="")) returned 1 [0124.632] wcscmp (_String1="JUDGESCH.GIF", _String2=".") returned 1 [0124.632] wcscmp (_String1="JUDGESCH.GIF", _String2="..") returned 1 [0124.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3be50 [0124.633] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.633] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.633] wcscat (in: _Dest=0x3f3be50, _Source="JUDGESCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" [0124.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0124.634] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8581200, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8581200, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.HTM", cAlternateFileName="")) returned 1 [0124.634] wcscmp (_String1="JUDGESCH.HTM", _String2=".") returned 1 [0124.635] wcscmp (_String1="JUDGESCH.HTM", _String2="..") returned 1 [0124.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3bed8 [0124.635] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.635] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.635] wcscat (in: _Dest=0x3f3bed8, _Source="JUDGESCH.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" [0124.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0124.636] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded5d600, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded5d600, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.GIF", cAlternateFileName="")) returned 1 [0124.636] wcscmp (_String1="JUNGLE.GIF", _String2=".") returned 1 [0124.636] wcscmp (_String1="JUNGLE.GIF", _String2="..") returned 1 [0124.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c180 [0124.637] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.637] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.637] wcscat (in: _Dest=0x3f3c180, _Source="JUNGLE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" [0124.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0124.638] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddcd3c00, ftCreationTime.dwHighDateTime=0x1c05fdd, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xddcd3c00, ftLastWriteTime.dwHighDateTime=0x1c05fdd, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.HTM", cAlternateFileName="")) returned 1 [0124.638] wcscmp (_String1="JUNGLE.HTM", _String2=".") returned 1 [0124.639] wcscmp (_String1="JUNGLE.HTM", _String2="..") returned 1 [0124.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c208 [0124.639] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.639] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.639] wcscat (in: _Dest=0x3f3c208, _Source="JUNGLE.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" [0124.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0124.640] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13722500, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x13722500, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.HTM", cAlternateFileName="")) returned 1 [0124.640] wcscmp (_String1="NOTEBOOK.HTM", _String2=".") returned 1 [0124.640] wcscmp (_String1="NOTEBOOK.HTM", _String2="..") returned 1 [0124.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c290 [0124.641] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.641] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.641] wcscat (in: _Dest=0x3f3c290, _Source="NOTEBOOK.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" [0124.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0124.642] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0070300, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0070300, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.JPG", cAlternateFileName="")) returned 1 [0124.642] wcscmp (_String1="NOTEBOOK.JPG", _String2=".") returned 1 [0124.642] wcscmp (_String1="NOTEBOOK.JPG", _String2="..") returned 1 [0124.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c318 [0124.642] wcscpy (in: _Dest=0x3f3c318, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.643] wcscat (in: _Dest=0x3f3c318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.643] wcscat (in: _Dest=0x3f3c318, _Source="NOTEBOOK.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" [0124.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0124.644] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0070300, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0070300, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x1202, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.GIF", cAlternateFileName="")) returned 1 [0124.644] wcscmp (_String1="OFFISUPP.GIF", _String2=".") returned 1 [0124.644] wcscmp (_String1="OFFISUPP.GIF", _String2="..") returned 1 [0124.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c3a0 [0124.644] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.644] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.645] wcscat (in: _Dest=0x3f3c3a0, _Source="OFFISUPP.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" [0124.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0124.647] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38669800, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x38669800, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.HTM", cAlternateFileName="")) returned 1 [0124.647] wcscmp (_String1="OFFISUPP.HTM", _String2=".") returned 1 [0124.647] wcscmp (_String1="OFFISUPP.HTM", _String2="..") returned 1 [0124.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c428 [0124.647] wcscpy (in: _Dest=0x3f3c428, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.647] wcscat (in: _Dest=0x3f3c428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.647] wcscat (in: _Dest=0x3f3c428, _Source="OFFISUPP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" [0124.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0124.649] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e1e800, ftCreationTime.dwHighDateTime=0x1bdaf42, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x93e1e800, ftLastWriteTime.dwHighDateTime=0x1bdaf42, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.GIF", cAlternateFileName="")) returned 1 [0124.649] wcscmp (_String1="PAWPRINT.GIF", _String2=".") returned 1 [0124.649] wcscmp (_String1="PAWPRINT.GIF", _String2="..") returned 1 [0124.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c4b0 [0124.650] wcscpy (in: _Dest=0x3f3c4b0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.650] wcscat (in: _Dest=0x3f3c4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.650] wcscat (in: _Dest=0x3f3c4b0, _Source="PAWPRINT.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" [0124.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0124.652] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x516f4900, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x516f4900, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.HTM", cAlternateFileName="")) returned 1 [0124.652] wcscmp (_String1="PAWPRINT.HTM", _String2=".") returned 1 [0124.652] wcscmp (_String1="PAWPRINT.HTM", _String2="..") returned 1 [0124.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c538 [0124.652] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.653] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.653] wcscat (in: _Dest=0x3f3c538, _Source="PAWPRINT.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" [0124.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0124.654] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3800, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e8c3800, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.HTM", cAlternateFileName="")) returned 1 [0124.654] wcscmp (_String1="PINELUMB.HTM", _String2=".") returned 1 [0124.654] wcscmp (_String1="PINELUMB.HTM", _String2="..") returned 1 [0124.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c5c0 [0124.655] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.655] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.655] wcscat (in: _Dest=0x3f3c5c0, _Source="PINELUMB.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" [0124.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0124.657] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a69c00, ftCreationTime.dwHighDateTime=0x1bdaf42, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x98a69c00, ftLastWriteTime.dwHighDateTime=0x1bdaf42, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.JPG", cAlternateFileName="")) returned 1 [0124.657] wcscmp (_String1="PINELUMB.JPG", _String2=".") returned 1 [0124.657] wcscmp (_String1="PINELUMB.JPG", _String2="..") returned 1 [0124.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c648 [0124.657] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.657] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.657] wcscat (in: _Dest=0x3f3c648, _Source="PINELUMB.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" [0124.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0124.662] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7794e900, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7794e900, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.HTM", cAlternateFileName="")) returned 1 [0124.662] wcscmp (_String1="SEAMARBL.HTM", _String2=".") returned 1 [0124.662] wcscmp (_String1="SEAMARBL.HTM", _String2="..") returned 1 [0124.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c6d0 [0124.662] wcscpy (in: _Dest=0x3f3c6d0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.662] wcscat (in: _Dest=0x3f3c6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.662] wcscat (in: _Dest=0x3f3c6d0, _Source="SEAMARBL.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" [0124.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0124.664] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x1889, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.JPG", cAlternateFileName="")) returned 1 [0124.664] wcscmp (_String1="SEAMARBL.JPG", _String2=".") returned 1 [0124.664] wcscmp (_String1="SEAMARBL.JPG", _String2="..") returned 1 [0124.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c758 [0124.664] wcscpy (in: _Dest=0x3f3c758, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0124.664] wcscat (in: _Dest=0x3f3c758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0124.664] wcscat (in: _Dest=0x3f3c758, _Source="SEAMARBL.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" [0124.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0125.071] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc1f900, ftCreationTime.dwHighDateTime=0x1c02f7e, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2fc1f900, ftLastWriteTime.dwHighDateTime=0x1c02f7e, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.GIF", cAlternateFileName="")) returned 1 [0125.072] wcscmp (_String1="TECHTOOL.GIF", _String2=".") returned 1 [0125.072] wcscmp (_String1="TECHTOOL.GIF", _String2="..") returned 1 [0125.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8d68 [0125.072] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0125.072] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0125.072] wcscat (in: _Dest=0x3eb8d68, _Source="TECHTOOL.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" [0129.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0129.167] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91cec700, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91cec700, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 1 [0129.167] wcscmp (_String1="TECHTOOL.HTM", _String2=".") returned 1 [0129.167] wcscmp (_String1="TECHTOOL.HTM", _String2="..") returned 1 [0129.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d9f0 [0129.167] wcscpy (in: _Dest=0x3f3d9f0, _Source="C:\\Program Files\\Microsoft Office\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033" [0129.167] wcscat (in: _Dest=0x3f3d9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\" [0129.167] wcscat (in: _Dest=0x3f3d9f0, _Source="TECHTOOL.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM") returned="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" [0129.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0129.169] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91cec700, ftCreationTime.dwHighDateTime=0x1c05fde, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91cec700, ftLastWriteTime.dwHighDateTime=0x1c05fde, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 0 [0129.169] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0129.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0129.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 [0129.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b48) returned 1 Thread: id = 433 os_tid = 0xf68 [0123.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d1a8 [0123.524] wcscpy (in: _Dest=0x32d1a8, _Source="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop" [0123.524] wcscat (in: _Dest=0x32d1a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\" [0123.524] wcscat (in: _Dest=0x32d1a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*") returned="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*" [0123.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59570 [0123.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0123.526] wcscmp (_String1=".", _String2=".") returned 0 [0123.526] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.526] wcscmp (_String1="..", _String2=".") returned 1 [0123.526] wcscmp (_String1="..", _String2="..") returned 0 [0123.526] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0123.526] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0123.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59570) returned 1 [0123.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d1a8) returned 1 [0123.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 Thread: id = 434 os_tid = 0xab0 [0123.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df30f8 [0123.528] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0123.528] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0123.529] wcscat (in: _Dest=0x3df30f8, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*" [0123.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59570 [0123.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1318c0b0, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x1318c0b0, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf950 [0123.532] wcscmp (_String1=".", _String2=".") returned 0 [0123.532] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1318c0b0, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x1318c0b0, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.532] wcscmp (_String1="..", _String2=".") returned 1 [0123.532] wcscmp (_String1="..", _String2="..") returned 0 [0123.532] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8adb1890, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8adb1890, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xef5d6500, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0123.532] wcscmp (_String1="PresentationBuildTasks.dll", _String2=".") returned 1 [0123.532] wcscmp (_String1="PresentationBuildTasks.dll", _String2="..") returned 1 [0123.532] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a231830, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3a231830, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf08e9200, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0123.532] wcscmp (_String1="PresentationCore.dll", _String2=".") returned 1 [0123.532] wcscmp (_String1="PresentationCore.dll", _String2="..") returned 1 [0123.533] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0123.533] wcscmp (_String1="PresentationFramework.Aero.dll", _String2=".") returned 1 [0123.533] wcscmp (_String1="PresentationFramework.Aero.dll", _String2="..") returned 1 [0123.533] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0123.533] wcscmp (_String1="PresentationFramework.Classic.dll", _String2=".") returned 1 [0123.533] wcscmp (_String1="PresentationFramework.Classic.dll", _String2="..") returned 1 [0123.533] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad3f470, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8ad3f470, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf08e9200, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x509000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0123.533] wcscmp (_String1="PresentationFramework.dll", _String2=".") returned 1 [0123.533] wcscmp (_String1="PresentationFramework.dll", _String2="..") returned 1 [0123.533] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a33c1d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3a33c1d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf08e9200, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0123.533] wcscmp (_String1="PresentationFramework.Luna.dll", _String2=".") returned 1 [0123.533] wcscmp (_String1="PresentationFramework.Luna.dll", _String2="..") returned 1 [0123.533] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0123.533] wcscmp (_String1="PresentationFramework.Royale.dll", _String2=".") returned 1 [0123.533] wcscmp (_String1="PresentationFramework.Royale.dll", _String2="..") returned 1 [0123.533] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ba30b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x91ba30b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf1bfbf00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0123.533] wcscmp (_String1="ReachFramework.dll", _String2=".") returned 1 [0123.533] wcscmp (_String1="ReachFramework.dll", _String2="..") returned 1 [0123.533] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0123.533] wcscmp (_String1="RedistList", _String2=".") returned 1 [0123.533] wcscmp (_String1="RedistList", _String2="..") returned 1 [0123.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df59a0 [0123.534] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0123.534] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0123.534] wcscat (in: _Dest=0x3df59a0, _Source="RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" [0132.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df59a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0132.272] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0132.272] wcscmp (_String1="SubsetList", _String2=".") returned 1 [0132.272] wcscmp (_String1="SubsetList", _String2="..") returned 1 [0132.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df57c0 [0132.273] wcscpy (in: _Dest=0x3df57c0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0132.273] wcscat (in: _Dest=0x3df57c0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0132.273] wcscat (in: _Dest=0x3df57c0, _Source="SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" [0132.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df57c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0132.274] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a216d50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a216d50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xcf2da600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0132.274] wcscmp (_String1="System.IdentityModel.dll", _String2=".") returned 1 [0132.274] wcscmp (_String1="System.IdentityModel.dll", _String2="..") returned 1 [0132.274] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380de430, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x380de430, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xcf2da600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0132.274] wcscmp (_String1="System.IdentityModel.Selectors.dll", _String2=".") returned 1 [0132.274] wcscmp (_String1="System.IdentityModel.Selectors.dll", _String2="..") returned 1 [0132.274] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0132.274] wcscmp (_String1="System.IO.Log.dll", _String2=".") returned 1 [0132.274] wcscmp (_String1="System.IO.Log.dll", _String2="..") returned 1 [0132.274] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a36d9b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a36d9b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf1bfbf00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0132.274] wcscmp (_String1="System.Printing.dll", _String2=".") returned 1 [0132.275] wcscmp (_String1="System.Printing.dll", _String2="..") returned 1 [0132.275] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2d5430, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a2d5430, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xcf2da600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0132.275] wcscmp (_String1="System.Runtime.Serialization.dll", _String2=".") returned 1 [0132.275] wcscmp (_String1="System.Runtime.Serialization.dll", _String2="..") returned 1 [0132.275] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3820ef30, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3820ef30, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xd1900000, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0132.275] wcscmp (_String1="System.ServiceModel.dll", _String2=".") returned 1 [0132.275] wcscmp (_String1="System.ServiceModel.dll", _String2="..") returned 1 [0132.275] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0132.275] wcscmp (_String1="System.Speech.dll", _String2=".") returned 1 [0132.275] wcscmp (_String1="System.Speech.dll", _String2="..") returned 1 [0132.275] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xfdab8100, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0132.275] wcscmp (_String1="System.Workflow.Activities.dll", _String2=".") returned 1 [0132.275] wcscmp (_String1="System.Workflow.Activities.dll", _String2="..") returned 1 [0132.275] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a94eb0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a94eb0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xfedcae00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0132.275] wcscmp (_String1="System.Workflow.ComponentModel.dll", _String2=".") returned 1 [0132.275] wcscmp (_String1="System.Workflow.ComponentModel.dll", _String2="..") returned 1 [0132.275] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xfedcae00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0132.275] wcscmp (_String1="System.Workflow.Runtime.dll", _String2=".") returned 1 [0132.275] wcscmp (_String1="System.Workflow.Runtime.dll", _String2="..") returned 1 [0132.275] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0132.275] wcscmp (_String1="UIAutomationClient.dll", _String2=".") returned 1 [0132.275] wcscmp (_String1="UIAutomationClient.dll", _String2="..") returned 1 [0132.276] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0132.276] wcscmp (_String1="UIAutomationClientsideProviders.dll", _String2=".") returned 1 [0132.276] wcscmp (_String1="UIAutomationClientsideProviders.dll", _String2="..") returned 1 [0132.276] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0132.276] wcscmp (_String1="UIAutomationProvider.dll", _String2=".") returned 1 [0132.276] wcscmp (_String1="UIAutomationProvider.dll", _String2="..") returned 1 [0132.276] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0132.276] wcscmp (_String1="UIAutomationTypes.dll", _String2=".") returned 1 [0132.276] wcscmp (_String1="UIAutomationTypes.dll", _String2="..") returned 1 [0132.276] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932d8730, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x932d8730, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf2f0ec00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0132.276] wcscmp (_String1="WindowsBase.dll", _String2=".") returned 1 [0132.276] wcscmp (_String1="WindowsBase.dll", _String2="..") returned 1 [0132.276] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0132.276] wcscmp (_String1="WindowsFormsIntegration.dll", _String2=".") returned 1 [0132.276] wcscmp (_String1="WindowsFormsIntegration.dll", _String2="..") returned 1 [0132.276] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e0b6fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21a484a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21a484a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0132.276] wcscmp (_String1="WinFXList.xml", _String2=".") returned 1 [0132.276] wcscmp (_String1="WinFXList.xml", _String2="..") returned 1 [0132.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053288 [0132.276] wcscpy (in: _Dest=0x3053288, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" [0132.277] wcscat (in: _Dest=0x3053288, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\" [0132.277] wcscat (in: _Dest=0x3053288, _Source="WinFXList.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" [0132.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0132.278] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e0b6fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21a484a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21a484a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0 [0132.278] FindClose (in: hFindFile=0x3dcf950 | out: hFindFile=0x3dcf950) returned 1 [0132.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59570) returned 1 [0132.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 [0132.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ba20) returned 1 Thread: id = 435 os_tid = 0x670 [0123.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2d08 [0123.531] wcscpy (in: _Dest=0x3df2d08, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0123.531] wcscat (in: _Dest=0x3df2d08, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\" [0123.531] wcscat (in: _Dest=0x3df2d08, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*" [0123.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52c98 [0123.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf590 [0123.540] wcscmp (_String1=".", _String2=".") returned 0 [0123.540] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x130f3b30, ftLastAccessTime.dwHighDateTime=0x1d2f580, ftLastWriteTime.dwLowDateTime=0x130f3b30, ftLastWriteTime.dwHighDateTime=0x1d2f580, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.541] wcscmp (_String1="..", _String2=".") returned 1 [0123.541] wcscmp (_String1="..", _String2="..") returned 0 [0123.541] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0123.541] wcscmp (_String1="Microsoft.Build.Conversion.v3.5.dll", _String2=".") returned 1 [0123.541] wcscmp (_String1="Microsoft.Build.Conversion.v3.5.dll", _String2="..") returned 1 [0123.541] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a492e30, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3a492e30, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0123.541] wcscmp (_String1="Microsoft.Build.Engine.dll", _String2=".") returned 1 [0123.542] wcscmp (_String1="Microsoft.Build.Engine.dll", _String2="..") returned 1 [0123.542] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0123.542] wcscmp (_String1="Microsoft.Build.Framework.dll", _String2=".") returned 1 [0123.542] wcscmp (_String1="Microsoft.Build.Framework.dll", _String2="..") returned 1 [0123.542] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9166e090, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x9166e090, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0123.542] wcscmp (_String1="Microsoft.Build.Utilities.v3.5.dll", _String2=".") returned 1 [0123.542] wcscmp (_String1="Microsoft.Build.Utilities.v3.5.dll", _String2="..") returned 1 [0123.542] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0123.542] wcscmp (_String1="Microsoft.VisualC.STLCLR.dll", _String2=".") returned 1 [0123.542] wcscmp (_String1="Microsoft.VisualC.STLCLR.dll", _String2="..") returned 1 [0123.542] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0123.542] wcscmp (_String1="RedistList", _String2=".") returned 1 [0123.542] wcscmp (_String1="RedistList", _String2="..") returned 1 [0123.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5d60 [0123.542] wcscpy (in: _Dest=0x3df5d60, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0123.542] wcscat (in: _Dest=0x3df5d60, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\" [0123.542] wcscat (in: _Dest=0x3df5d60, _Source="RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" [0125.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df5d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0125.575] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0125.575] wcscmp (_String1="SubsetList", _String2=".") returned 1 [0125.575] wcscmp (_String1="SubsetList", _String2="..") returned 1 [0125.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df54a0 [0125.575] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5" [0125.575] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\" [0125.575] wcscat (in: _Dest=0x3df54a0, _Source="SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" [0125.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df54a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0125.576] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9380d750, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x9380d750, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0125.576] wcscmp (_String1="System.AddIn.Contract.dll", _String2=".") returned 1 [0125.576] wcscmp (_String1="System.AddIn.Contract.dll", _String2="..") returned 1 [0125.576] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2aba70, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c2aba70, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0125.576] wcscmp (_String1="System.AddIn.dll", _String2=".") returned 1 [0125.576] wcscmp (_String1="System.AddIn.dll", _String2="..") returned 1 [0125.577] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2aba70, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c2aba70, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0125.577] wcscmp (_String1="System.ComponentModel.DataAnnotations.dll", _String2=".") returned 1 [0125.577] wcscmp (_String1="System.ComponentModel.DataAnnotations.dll", _String2="..") returned 1 [0125.577] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc3a8d0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3bc3a8d0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0125.577] wcscmp (_String1="System.Core.dll", _String2=".") returned 1 [0125.577] wcscmp (_String1="System.Core.dll", _String2="..") returned 1 [0125.577] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382cd610, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x382cd610, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0125.577] wcscmp (_String1="System.Data.DataSetExtensions.dll", _String2=".") returned 1 [0125.577] wcscmp (_String1="System.Data.DataSetExtensions.dll", _String2="..") returned 1 [0125.577] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a216d50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a216d50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0125.577] wcscmp (_String1="System.Data.Entity.Design.dll", _String2=".") returned 1 [0125.577] wcscmp (_String1="System.Data.Entity.Design.dll", _String2="..") returned 1 [0125.577] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2134f0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c2134f0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0125.577] wcscmp (_String1="System.Data.Entity.dll", _String2=".") returned 1 [0125.577] wcscmp (_String1="System.Data.Entity.dll", _String2="..") returned 1 [0125.577] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c285910, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c285910, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf5534600, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0125.577] wcscmp (_String1="System.Data.Linq.dll", _String2=".") returned 1 [0125.577] wcscmp (_String1="System.Data.Linq.dll", _String2="..") returned 1 [0125.577] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a216d50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a216d50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0125.578] wcscmp (_String1="System.Data.Services.Client.dll", _String2=".") returned 1 [0125.578] wcscmp (_String1="System.Data.Services.Client.dll", _String2="..") returned 1 [0125.578] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383fe110, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x383fe110, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0125.578] wcscmp (_String1="System.Data.Services.Design.dll", _String2=".") returned 1 [0125.578] wcscmp (_String1="System.Data.Services.Design.dll", _String2="..") returned 1 [0125.578] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383b1e50, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x383b1e50, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0125.578] wcscmp (_String1="System.Data.Services.dll", _String2=".") returned 1 [0125.578] wcscmp (_String1="System.Data.Services.dll", _String2="..") returned 1 [0125.578] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a48bf0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a48bf0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0125.578] wcscmp (_String1="System.DirectoryServices.AccountManagement.dll", _String2=".") returned 1 [0125.578] wcscmp (_String1="System.DirectoryServices.AccountManagement.dll", _String2="..") returned 1 [0125.578] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a36d9b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8a36d9b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0125.578] wcscmp (_String1="System.Management.Instrumentation.dll", _String2=".") returned 1 [0125.578] wcscmp (_String1="System.Management.Instrumentation.dll", _String2="..") returned 1 [0125.578] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a22a90, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a22a90, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0125.578] wcscmp (_String1="System.Net.dll", _String2=".") returned 1 [0125.578] wcscmp (_String1="System.Net.dll", _String2="..") returned 1 [0125.578] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a94eb0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93a94eb0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xd9e83b00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0125.578] wcscmp (_String1="System.ServiceModel.Web.dll", _String2=".") returned 1 [0125.579] wcscmp (_String1="System.ServiceModel.Web.dll", _String2="..") returned 1 [0125.579] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c343ff0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8c343ff0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0125.579] wcscmp (_String1="System.Web.Abstractions.dll", _String2=".") returned 1 [0125.579] wcscmp (_String1="System.Web.Abstractions.dll", _String2="..") returned 1 [0125.579] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x381769b0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x381769b0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0125.579] wcscmp (_String1="System.Web.DynamicData.Design.dll", _String2=".") returned 1 [0125.579] wcscmp (_String1="System.Web.DynamicData.Design.dll", _String2="..") returned 1 [0125.579] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93abb010, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93abb010, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0125.579] wcscmp (_String1="System.Web.DynamicData.dll", _String2=".") returned 1 [0125.579] wcscmp (_String1="System.Web.DynamicData.dll", _String2="..") returned 1 [0125.579] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f32bab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8f32bab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0125.579] wcscmp (_String1="System.Web.Entity.Design.dll", _String2=".") returned 1 [0125.579] wcscmp (_String1="System.Web.Entity.Design.dll", _String2="..") returned 1 [0125.579] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384bc7f0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x384bc7f0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0125.579] wcscmp (_String1="System.Web.Entity.dll", _String2=".") returned 1 [0125.579] wcscmp (_String1="System.Web.Entity.dll", _String2="..") returned 1 [0125.579] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384e2950, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x384e2950, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0125.580] wcscmp (_String1="System.Web.Extensions.Design.dll", _String2=".") returned 1 [0125.580] wcscmp (_String1="System.Web.Extensions.Design.dll", _String2="..") returned 1 [0125.580] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f351c10, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x8f351c10, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0125.580] wcscmp (_String1="System.Web.Extensions.dll", _String2=".") returned 1 [0125.580] wcscmp (_String1="System.Web.Extensions.dll", _String2="..") returned 1 [0125.580] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93abb010, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x93abb010, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf6847300, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0125.580] wcscmp (_String1="System.Web.Routing.dll", _String2=".") returned 1 [0125.580] wcscmp (_String1="System.Web.Routing.dll", _String2="..") returned 1 [0125.580] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0125.580] wcscmp (_String1="System.Windows.Presentation.dll", _String2=".") returned 1 [0125.580] wcscmp (_String1="System.Windows.Presentation.dll", _String2="..") returned 1 [0125.580] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3852ec10, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x3852ec10, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xd9e83b00, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0125.580] wcscmp (_String1="System.WorkflowServices.dll", _String2=".") returned 1 [0125.580] wcscmp (_String1="System.WorkflowServices.dll", _String2="..") returned 1 [0125.580] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf7b5a000, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0125.580] wcscmp (_String1="System.Xml.Linq.dll", _String2=".") returned 1 [0125.580] wcscmp (_String1="System.Xml.Linq.dll", _String2="..") returned 1 [0125.580] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38508ab0, ftCreationTime.dwHighDateTime=0x1d2f57c, ftLastAccessTime.dwLowDateTime=0x38508ab0, ftLastAccessTime.dwHighDateTime=0x1d2f57c, ftLastWriteTime.dwLowDateTime=0xf7b5a000, ftLastWriteTime.dwHighDateTime=0x1cb7c59, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0 [0125.580] FindClose (in: hFindFile=0x3dcf590 | out: hFindFile=0x3dcf590) returned 1 [0125.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52c98) returned 1 [0125.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 [0125.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 436 os_tid = 0x7c4 [0123.534] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf")) returned 0x2020 [0123.534] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x20) returned 0 [0123.534] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.534] GetLastError () returned 0x5 [0123.534] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x2020) returned 0 [0123.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d514d0) returned 1 Thread: id = 437 os_tid = 0x7b0 [0123.538] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat")) returned 0x2020 [0123.538] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x20) returned 0 [0123.539] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.539] GetLastError () returned 0x5 [0123.539] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x2020) returned 0 [0123.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 Thread: id = 438 os_tid = 0xfc8 [0123.541] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms")) returned 0x20 [0123.541] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", dwFileAttributes=0x20) returned 1 [0129.541] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcec [0129.541] GetFileSizeEx (in: hFile=0xcec, lpFileSize=0x8c1fefc | out: lpFileSize=0x8c1fefc*=876) returned 1 [0129.541] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x368, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.541] ReadFile (in: hFile=0xcec, lpBuffer=0x8c1fed8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c1fee8, lpOverlapped=0x0 | out: lpBuffer=0x8c1fed8*, lpNumberOfBytesRead=0x8c1fee8*=0x4, lpOverlapped=0x0) returned 1 [0129.544] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0129.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0129.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0129.545] NtQuerySystemTime (in: CurrentTime=0x8c1fe70 | out: CurrentTime=0x8c1fe70*=132462177089328000) returned 0x0 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x4de3baf7 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x6699079d [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x27adf2a4 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x4d2c8dc5 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x62361f1e [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x25820030 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x451fe39 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x499efa0e [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x385af74c [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x7ed4018f [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x610fd32f [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x3134c864 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x5f7ba0a1 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x753ae4bf [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x62f7dde6 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x4944a9c8 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x1f0ac321 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0xb4c1d67 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x54e8669d [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x588a8bac [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x60fd3f61 [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x4ddaaa1e [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x4e33fdac [0129.545] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x237f9632 [0129.546] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x41bce4e3 [0129.546] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0xd4008dc [0129.546] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x13acb81c [0129.546] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x52f692e7 [0129.546] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x39b7ea12 [0129.546] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x2c3b83cd [0129.546] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x5bc3d6c1 [0129.546] RtlRandomEx (in: Seed=0x8c1fe68 | out: Seed=0x8c1fe68) returned 0x14045f37 [0129.556] ReadFile (in: hFile=0xcec, lpBuffer=0x7c79fa8, nNumberOfBytesToRead=0x36c, lpNumberOfBytesRead=0x8c1fe64, lpOverlapped=0x0 | out: lpBuffer=0x7c79fa8*, lpNumberOfBytesRead=0x8c1fe64*=0x36c, lpOverlapped=0x0) returned 1 [0129.557] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.557] WriteFile (in: hFile=0xcec, lpBuffer=0x7c7dbb0*, nNumberOfBytesToWrite=0x36c, lpNumberOfBytesWritten=0x8c1fe68, lpOverlapped=0x0 | out: lpBuffer=0x7c7dbb0*, lpNumberOfBytesWritten=0x8c1fe68*=0x36c, lpOverlapped=0x0) returned 1 [0132.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0132.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0132.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0132.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c7dbb0) returned 1 [0132.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c79fa8) returned 1 [0132.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0132.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e497b8) returned 1 [0132.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066b80 [0132.697] SetFilePointerEx (in: hFile=0xcec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.697] WriteFile (in: hFile=0xcec, lpBuffer=0x3d55150*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x8c1fef0, lpOverlapped=0x0 | out: lpBuffer=0x3d55150*, lpNumberOfBytesWritten=0x8c1fef0*=0x11c, lpOverlapped=0x0) returned 1 [0132.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e497b8 [0132.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0132.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0132.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a48) returned 1 [0132.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3013690 [0132.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0132.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0132.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0132.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0132.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e497b8) returned 1 [0132.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6788 [0132.700] sprintf (in: _Dest=0x2fe6788, _Format="%c%c" | out: _Dest="a8") returned 2 [0132.700] sprintf (in: _Dest=0x2fe678a, _Format="%c%c" | out: _Dest="e2") returned 2 [0132.700] sprintf (in: _Dest=0x2fe678c, _Format="%c%c" | out: _Dest="3a") returned 2 [0132.700] sprintf (in: _Dest=0x2fe678e, _Format="%c%c" | out: _Dest="77") returned 2 [0132.700] sprintf (in: _Dest=0x2fe6790, _Format="%c%c" | out: _Dest="4e") returned 2 [0132.700] sprintf (in: _Dest=0x2fe6792, _Format="%c%c" | out: _Dest="3f") returned 2 [0132.700] sprintf (in: _Dest=0x2fe6794, _Format="%c%c" | out: _Dest="e9") returned 2 [0132.700] sprintf (in: _Dest=0x2fe6796, _Format="%c%c" | out: _Dest="8f") returned 2 [0132.700] sprintf (in: _Dest=0x2fe6798, _Format="%c%c" | out: _Dest="c6") returned 2 [0132.700] sprintf (in: _Dest=0x2fe679a, _Format="%c%c" | out: _Dest="9e") returned 2 [0132.700] sprintf (in: _Dest=0x2fe679c, _Format="%c%c" | out: _Dest="13") returned 2 [0132.700] sprintf (in: _Dest=0x2fe679e, _Format="%c%c" | out: _Dest="89") returned 2 [0132.700] sprintf (in: _Dest=0x2fe67a0, _Format="%c%c" | out: _Dest="a6") returned 2 [0132.700] sprintf (in: _Dest=0x2fe67a2, _Format="%c%c" | out: _Dest="c7") returned 2 [0132.700] sprintf (in: _Dest=0x2fe67a4, _Format="%c%c" | out: _Dest="fd") returned 2 [0132.700] sprintf (in: _Dest=0x2fe67a6, _Format="%c%c" | out: _Dest="a1") returned 2 [0132.700] sprintf (in: _Dest=0x2fe67a8, _Format="%c%c" | out: _Dest="dc") returned 2 [0132.700] sprintf (in: _Dest=0x2fe67aa, _Format="%c%c" | out: _Dest="2d") returned 2 [0132.700] sprintf (in: _Dest=0x2fe67ac, _Format="%c%c" | out: _Dest="d2") returned 2 [0132.700] sprintf (in: _Dest=0x2fe67ae, _Format="%c%c" | out: _Dest="49") returned 2 [0132.700] sprintf (in: _Dest=0x2fe67b0, _Format="%c%c" | out: _Dest="d3") returned 2 [0132.700] sprintf (in: _Dest=0x2fe67b2, _Format="%c%c" | out: _Dest="d7") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67b4, _Format="%c%c" | out: _Dest="37") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67b6, _Format="%c%c" | out: _Dest="96") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67b8, _Format="%c%c" | out: _Dest="98") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67ba, _Format="%c%c" | out: _Dest="3b") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67bc, _Format="%c%c" | out: _Dest="58") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67be, _Format="%c%c" | out: _Dest="b4") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67c0, _Format="%c%c" | out: _Dest="8a") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67c2, _Format="%c%c" | out: _Dest="20") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67c4, _Format="%c%c" | out: _Dest="32") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67c6, _Format="%c%c" | out: _Dest="fb") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67c8, _Format="%c%c" | out: _Dest="d6") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67ca, _Format="%c%c" | out: _Dest="2d") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67cc, _Format="%c%c" | out: _Dest="af") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67ce, _Format="%c%c" | out: _Dest="11") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67d0, _Format="%c%c" | out: _Dest="6a") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67d2, _Format="%c%c" | out: _Dest="cb") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67d4, _Format="%c%c" | out: _Dest="2c") returned 2 [0132.701] sprintf (in: _Dest=0x2fe67d6, _Format="%c%c" | out: _Dest="17") returned 2 [0132.702] sprintf (in: _Dest=0x2fe67d8, _Format="%c%c" | out: _Dest="30") returned 2 [0132.702] sprintf (in: _Dest=0x2fe67da, _Format="%c%c" | out: _Dest="9d") returned 2 [0132.702] RtlInitAnsiString (in: DestinationString=0x8c1fe78, SourceString="a8e23a774e3fe98fc69e1389a6c7fda1dc2dd249d3d73796983b58b48a2032fbd62daf116acb2c17309d" | out: DestinationString="a8e23a774e3fe98fc69e1389a6c7fda1dc2dd249d3d73796983b58b48a2032fbd62daf116acb2c17309d") [0132.702] RtlAnsiStringToUnicodeString (in: DestinationString=0x8c1fe70, SourceString="a8e23a774e3fe98fc69e1389a6c7fda1dc2dd249d3d73796983b58b48a2032fbd62daf116acb2c17309d", AllocateDestinationString=1 | out: DestinationString="a8e23a774e3fe98fc69e1389a6c7fda1dc2dd249d3d73796983b58b48a2032fbd62daf116acb2c17309d") returned 0x0 [0132.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7880 [0132.702] wcscat (in: _Dest=0x3f3e670, _Source="a8e23a774e3fe98fc69e1" | out: _Dest="C:\\Users\\Public\\Libraries\\a8e23a774e3fe98fc69e1") returned="C:\\Users\\Public\\Libraries\\a8e23a774e3fe98fc69e1" [0132.702] wcscat (in: _Dest=0x3f3e670, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Libraries\\a8e23a774e3fe98fc69e1.68814f") returned="C:\\Users\\Public\\Libraries\\a8e23a774e3fe98fc69e1.68814f" [0132.702] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Libraries\\a8e23a774e3fe98fc69e1.68814f", NtPathName=0x8c1fe68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Libraries\\a8e23a774e3fe98fc69e1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df1b98 [0132.702] NtSetInformationFile (FileHandle=0xcec, IoStatusBlock=0x8c1fe70, FileInformation=0x3df1b98, Length=0x84, FileInformationClass=0xa) returned 0x0 [0134.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0134.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33410) returned 1 [0134.816] NtQueryInformationFile (in: FileHandle=0xcec, IoStatusBlock=0x8c1fe40, FileInformation=0x8c1fe48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8c1fe40, FileInformation=0x8c1fe48) returned 0x0 [0134.816] NtSetInformationFile (FileHandle=0xcec, IoStatusBlock=0x8c1fe40, FileInformation=0x8c1fe48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0134.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 [0134.960] FlushFileBuffers (hFile=0xcec) returned 1 [0135.420] CloseHandle (hObject=0xcec) returned 1 [0135.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0cd0 [0135.507] wcscpy (in: _Dest=0x3ee0cd0, _Source="C:\\Users\\Public\\Libraries\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\" [0135.508] wcscat (in: _Dest=0x3ee0cd0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Libraries\\68814F-Readme.txt") returned="C:\\Users\\Public\\Libraries\\68814F-Readme.txt" [0135.508] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\68814F-Readme.txt" (normalized: "c:\\users\\public\\libraries\\68814f-readme.txt")) returned 0xffffffff [0135.508] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\68814F-Readme.txt" (normalized: "c:\\users\\public\\libraries\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcb4 [0135.523] WriteFile (in: hFile=0xcb4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8c1fe84, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8c1fe84*=0x8b9, lpOverlapped=0x0) returned 1 [0135.525] CloseHandle (hObject=0xcb4) returned 1 [0135.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0cd0) returned 1 [0135.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edff68) returned 1 Thread: id = 439 os_tid = 0x728 [0123.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d48690 [0123.543] wcscpy (in: _Dest=0x3d48690, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0123.543] wcscat (in: _Dest=0x3d48690, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0123.543] wcscat (in: _Dest=0x3d48690, _Source="*" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\*") returned="C:\\Users\\Public\\Music\\Sample Music\\*" [0123.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53fd8 [0123.543] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d400 [0123.547] wcscmp (_String1=".", _String2=".") returned 0 [0123.547] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.547] wcscmp (_String1="..", _String2=".") returned 1 [0123.547] wcscmp (_String1="..", _String2="..") returned 0 [0123.547] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x6b61335c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.547] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0123.547] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0123.547] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d54062, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0123.547] wcscmp (_String1="Kalimba.mp3", _String2=".") returned 1 [0123.547] wcscmp (_String1="Kalimba.mp3", _String2="..") returned 1 [0123.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0038 [0123.547] wcscpy (in: _Dest=0x3ee0038, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0123.547] wcscat (in: _Dest=0x3ee0038, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0123.547] wcscat (in: _Dest=0x3ee0038, _Source="Kalimba.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" [0126.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f4 [0126.927] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d2df02, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d54062, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0126.927] wcscmp (_String1="Maid with the Flaxen Hair.mp3", _String2=".") returned 1 [0126.927] wcscmp (_String1="Maid with the Flaxen Hair.mp3", _String2="..") returned 1 [0126.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44690 [0126.927] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0126.927] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0126.927] wcscat (in: _Dest=0x3d44690, _Source="Maid with the Flaxen Hair.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" [0126.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0126.929] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d2df02, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0126.929] wcscmp (_String1="Sleep Away.mp3", _String2=".") returned 1 [0126.929] wcscmp (_String1="Sleep Away.mp3", _String2="..") returned 1 [0126.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69c28 [0126.929] wcscpy (in: _Dest=0x3e69c28, _Source="C:\\Users\\Public\\Music\\Sample Music" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music") returned="C:\\Users\\Public\\Music\\Sample Music" [0126.929] wcscat (in: _Dest=0x3e69c28, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0126.930] wcscat (in: _Dest=0x3e69c28, _Source="Sleep Away.mp3" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3") returned="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" [0126.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0126.931] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d07da2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d2df02, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0 [0126.931] FindClose (in: hFindFile=0x7a2d400 | out: hFindFile=0x7a2d400) returned 1 [0126.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53fd8) returned 1 [0126.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48690) returned 1 [0126.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de67e8) returned 1 Thread: id = 440 os_tid = 0xfd0 [0123.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23060 [0123.545] wcscpy (in: _Dest=0x7a23060, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.546] wcscat (in: _Dest=0x7a23060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.546] wcscat (in: _Dest=0x7a23060, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*" [0123.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54240 [0123.546] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe30e510, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0123.554] wcscmp (_String1=".", _String2=".") returned 0 [0123.554] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe30e510, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.555] wcscmp (_String1="..", _String2=".") returned 1 [0123.555] wcscmp (_String1="..", _String2="..") returned 0 [0123.555] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352582b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0123.555] wcscmp (_String1="1033", _String2=".") returned 1 [0123.555] wcscmp (_String1="1033", _String2="..") returned 1 [0123.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d517a0 [0123.555] wcscpy (in: _Dest=0x3d517a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.555] wcscat (in: _Dest=0x3d517a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.555] wcscat (in: _Dest=0x3d517a0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" [0123.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d517a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0123.872] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x39a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1 [0123.872] wcscmp (_String1="CAGCAT10.DLL", _String2=".") returned 1 [0123.872] wcscmp (_String1="CAGCAT10.DLL", _String2="..") returned 1 [0123.873] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83ee400, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x76dd6c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa83ee400, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1 [0123.873] wcscmp (_String1="CAGCAT10.MMW", _String2=".") returned 1 [0123.873] wcscmp (_String1="CAGCAT10.MMW", _String2="..") returned 1 [0123.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9d58 [0123.873] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.873] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.873] wcscat (in: _Dest=0x3eb9d58, _Source="CAGCAT10.MMW" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" [0123.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c [0123.875] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7213600, ftCreationTime.dwHighDateTime=0x1bd4c78, ftLastAccessTime.dwLowDateTime=0xbdcceb50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa7213600, ftLastWriteTime.dwHighDateTime=0x1bd4c78, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1 [0123.875] wcscmp (_String1="ELPHRG01.WAV", _String2=".") returned 1 [0123.875] wcscmp (_String1="ELPHRG01.WAV", _String2="..") returned 1 [0123.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9de0 [0123.875] wcscpy (in: _Dest=0x3eb9de0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.875] wcscat (in: _Dest=0x3eb9de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.875] wcscat (in: _Dest=0x3eb9de0, _Source="ELPHRG01.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" [0123.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0123.877] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8f69400, ftCreationTime.dwHighDateTime=0x1bd21d2, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8f69400, ftLastWriteTime.dwHighDateTime=0x1bd21d2, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1 [0123.877] wcscmp (_String1="J0088542.WMF", _String2=".") returned 1 [0123.877] wcscmp (_String1="J0088542.WMF", _String2="..") returned 1 [0123.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9e68 [0123.877] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.877] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.877] wcscat (in: _Dest=0x3eb9e68, _Source="J0088542.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" [0123.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0123.879] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfde24a00, ftCreationTime.dwHighDateTime=0x1bcf8eb, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfde24a00, ftLastWriteTime.dwHighDateTime=0x1bcf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1 [0123.879] wcscmp (_String1="J0090070.WMF", _String2=".") returned 1 [0123.879] wcscmp (_String1="J0090070.WMF", _String2="..") returned 1 [0123.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9ef0 [0123.879] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.879] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.879] wcscat (in: _Dest=0x3eb9ef0, _Source="J0090070.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" [0123.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0123.880] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefd6400, ftCreationTime.dwHighDateTime=0x1bd20f2, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeefd6400, ftLastWriteTime.dwHighDateTime=0x1bd20f2, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1 [0123.880] wcscmp (_String1="J0090386.WMF", _String2=".") returned 1 [0123.880] wcscmp (_String1="J0090386.WMF", _String2="..") returned 1 [0123.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9f78 [0123.880] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.881] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.881] wcscat (in: _Dest=0x3eb9f78, _Source="J0090386.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" [0123.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0123.882] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3680700, ftCreationTime.dwHighDateTime=0x1bd3deb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3680700, ftLastWriteTime.dwHighDateTime=0x1bd3deb, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1 [0123.882] wcscmp (_String1="J0149407.WMF", _String2=".") returned 1 [0123.882] wcscmp (_String1="J0149407.WMF", _String2="..") returned 1 [0123.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba000 [0123.882] wcscpy (in: _Dest=0x3eba000, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.882] wcscat (in: _Dest=0x3eba000, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.882] wcscat (in: _Dest=0x3eba000, _Source="J0149407.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" [0123.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0123.883] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a323900, ftCreationTime.dwHighDateTime=0x1bd42ad, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a323900, ftLastWriteTime.dwHighDateTime=0x1bd42ad, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1 [0123.883] wcscmp (_String1="J0149481.WMF", _String2=".") returned 1 [0123.883] wcscmp (_String1="J0149481.WMF", _String2="..") returned 1 [0123.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba088 [0123.883] wcscpy (in: _Dest=0x3eba088, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.883] wcscat (in: _Dest=0x3eba088, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.883] wcscat (in: _Dest=0x3eba088, _Source="J0149481.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" [0123.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0123.884] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd518d700, ftCreationTime.dwHighDateTime=0x1bd50cb, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd518d700, ftLastWriteTime.dwHighDateTime=0x1bd50cb, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1 [0123.884] wcscmp (_String1="J0149627.WMF", _String2=".") returned 1 [0123.884] wcscmp (_String1="J0149627.WMF", _String2="..") returned 1 [0123.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba110 [0123.884] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.885] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.885] wcscat (in: _Dest=0x3eba110, _Source="J0149627.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" [0123.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0123.893] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3307c700, ftCreationTime.dwHighDateTime=0x1bd649e, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3307c700, ftLastWriteTime.dwHighDateTime=0x1bd649e, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1 [0123.893] wcscmp (_String1="J0149887.WMF", _String2=".") returned 1 [0123.893] wcscmp (_String1="J0149887.WMF", _String2="..") returned 1 [0123.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba198 [0123.893] wcscpy (in: _Dest=0x3eba198, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.893] wcscat (in: _Dest=0x3eba198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.893] wcscat (in: _Dest=0x3eba198, _Source="J0149887.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" [0123.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0123.894] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4fd5200, ftCreationTime.dwHighDateTime=0x1bd7f29, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd4fd5200, ftLastWriteTime.dwHighDateTime=0x1bd7f29, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1 [0123.894] wcscmp (_String1="J0157763.WMF", _String2=".") returned 1 [0123.895] wcscmp (_String1="J0157763.WMF", _String2="..") returned 1 [0123.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba220 [0123.895] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.895] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.895] wcscat (in: _Dest=0x3eba220, _Source="J0157763.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" [0123.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0123.896] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44348900, ftCreationTime.dwHighDateTime=0x1bd955e, ftLastAccessTime.dwLowDateTime=0xbe03aaf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x44348900, ftLastWriteTime.dwHighDateTime=0x1bd955e, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1 [0123.896] wcscmp (_String1="J0157995.WMF", _String2=".") returned 1 [0123.896] wcscmp (_String1="J0157995.WMF", _String2="..") returned 1 [0123.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba2a8 [0123.896] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.896] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.897] wcscat (in: _Dest=0x3eba2a8, _Source="J0157995.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" [0123.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0123.898] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eef1e00, ftCreationTime.dwHighDateTime=0x1bd955e, ftLastAccessTime.dwLowDateTime=0xbe060c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4eef1e00, ftLastWriteTime.dwHighDateTime=0x1bd955e, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1 [0123.898] wcscmp (_String1="J0158007.WMF", _String2=".") returned 1 [0123.898] wcscmp (_String1="J0158007.WMF", _String2="..") returned 1 [0123.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba330 [0123.898] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.898] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.898] wcscat (in: _Dest=0x3eba330, _Source="J0158007.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" [0123.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0123.900] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7435a800, ftCreationTime.dwHighDateTime=0x1bdf75b, ftLastAccessTime.dwLowDateTime=0xbe060c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7435a800, ftLastWriteTime.dwHighDateTime=0x1bdf75b, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1 [0123.900] wcscmp (_String1="J0183168.WMF", _String2=".") returned 1 [0123.900] wcscmp (_String1="J0183168.WMF", _String2="..") returned 1 [0123.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba3b8 [0123.900] wcscpy (in: _Dest=0x3eba3b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0123.900] wcscat (in: _Dest=0x3eba3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0123.900] wcscat (in: _Dest=0x3eba3b8, _Source="J0183168.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" [0123.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0124.123] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0d4900, ftCreationTime.dwHighDateTime=0x1bdf75c, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5f0d4900, ftLastWriteTime.dwHighDateTime=0x1bdf75c, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1 [0124.123] wcscmp (_String1="J0183290.WMF", _String2=".") returned 1 [0124.123] wcscmp (_String1="J0183290.WMF", _String2="..") returned 1 [0124.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bdc8 [0124.123] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0124.123] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0124.123] wcscat (in: _Dest=0x3f3bdc8, _Source="J0183290.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" [0126.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0126.016] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d8b2400, ftCreationTime.dwHighDateTime=0x1bdf75c, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8d8b2400, ftLastWriteTime.dwHighDateTime=0x1bdf75c, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1 [0126.016] wcscmp (_String1="J0183328.WMF", _String2=".") returned 1 [0126.016] wcscmp (_String1="J0183328.WMF", _String2="..") returned 1 [0126.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9560 [0126.016] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.016] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.016] wcscat (in: _Dest=0x3eb9560, _Source="J0183328.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" [0126.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0126.018] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88cb8700, ftCreationTime.dwHighDateTime=0x1be0d7f, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x88cb8700, ftLastWriteTime.dwHighDateTime=0x1be0d7f, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1 [0126.018] wcscmp (_String1="J0185604.WMF", _String2=".") returned 1 [0126.018] wcscmp (_String1="J0185604.WMF", _String2="..") returned 1 [0126.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb94d8 [0126.018] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.018] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.018] wcscat (in: _Dest=0x3eb94d8, _Source="J0185604.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" [0126.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0126.020] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7144cc00, ftCreationTime.dwHighDateTime=0x1be0d88, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7144cc00, ftLastWriteTime.dwHighDateTime=0x1be0d88, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1 [0126.020] wcscmp (_String1="J0186002.WMF", _String2=".") returned 1 [0126.020] wcscmp (_String1="J0186002.WMF", _String2="..") returned 1 [0126.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9450 [0126.020] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.020] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.021] wcscat (in: _Dest=0x3eb9450, _Source="J0186002.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" [0126.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0126.023] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80774a00, ftCreationTime.dwHighDateTime=0x1be0d87, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x80774a00, ftLastWriteTime.dwHighDateTime=0x1be0d87, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1 [0126.023] wcscmp (_String1="J0186348.WMF", _String2=".") returned 1 [0126.023] wcscmp (_String1="J0186348.WMF", _String2="..") returned 1 [0126.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb93c8 [0126.023] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.023] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.023] wcscat (in: _Dest=0x3eb93c8, _Source="J0186348.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" [0126.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0126.025] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0956300, ftCreationTime.dwHighDateTime=0x1be1162, ftLastAccessTime.dwLowDateTime=0xbe086db0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb0956300, ftLastWriteTime.dwHighDateTime=0x1be1162, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1 [0126.025] wcscmp (_String1="J0187423.WMF", _String2=".") returned 1 [0126.025] wcscmp (_String1="J0187423.WMF", _String2="..") returned 1 [0126.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9340 [0126.025] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.025] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.025] wcscat (in: _Dest=0x3eb9340, _Source="J0187423.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" [0126.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0126.027] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58a24a00, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58a24a00, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1 [0126.027] wcscmp (_String1="J0195384.WMF", _String2=".") returned 1 [0126.027] wcscmp (_String1="J0195384.WMF", _String2="..") returned 1 [0126.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb92b8 [0126.027] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.027] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.027] wcscat (in: _Dest=0x3eb92b8, _Source="J0195384.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" [0126.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0126.029] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f786000, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f786000, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1 [0126.029] wcscmp (_String1="J0195534.WMF", _String2=".") returned 1 [0126.029] wcscmp (_String1="J0195534.WMF", _String2="..") returned 1 [0126.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9230 [0126.030] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.030] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.030] wcscat (in: _Dest=0x3eb9230, _Source="J0195534.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" [0126.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0126.031] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda927300, ftCreationTime.dwHighDateTime=0x1be276a, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xda927300, ftLastWriteTime.dwHighDateTime=0x1be276a, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1 [0126.031] wcscmp (_String1="J0195812.WMF", _String2=".") returned 1 [0126.031] wcscmp (_String1="J0195812.WMF", _String2="..") returned 1 [0126.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb91a8 [0126.031] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.031] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.032] wcscat (in: _Dest=0x3eb91a8, _Source="J0195812.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" [0126.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0126.033] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33faa200, ftCreationTime.dwHighDateTime=0x1be276b, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x33faa200, ftLastWriteTime.dwHighDateTime=0x1be276b, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1 [0126.033] wcscmp (_String1="J0196164.WMF", _String2=".") returned 1 [0126.033] wcscmp (_String1="J0196164.WMF", _String2="..") returned 1 [0126.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9120 [0126.033] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.033] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.033] wcscat (in: _Dest=0x3eb9120, _Source="J0196164.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" [0126.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0126.035] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17214b00, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17214b00, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1 [0126.035] wcscmp (_String1="J0196374.WMF", _String2=".") returned 1 [0126.035] wcscmp (_String1="J0196374.WMF", _String2="..") returned 1 [0126.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9098 [0126.035] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.036] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.036] wcscat (in: _Dest=0x3eb9098, _Source="J0196374.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" [0126.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0126.037] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d1c100, ftCreationTime.dwHighDateTime=0x1be3974, ftLastAccessTime.dwLowDateTime=0xbe0acf10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x27d1c100, ftLastWriteTime.dwHighDateTime=0x1be3974, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1 [0126.037] wcscmp (_String1="J0196400.WMF", _String2=".") returned 1 [0126.037] wcscmp (_String1="J0196400.WMF", _String2="..") returned 1 [0126.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9010 [0126.037] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.037] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.037] wcscat (in: _Dest=0x3eb9010, _Source="J0196400.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" [0126.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0126.039] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c6dc00, ftCreationTime.dwHighDateTime=0x1bdf12a, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95c6dc00, ftLastWriteTime.dwHighDateTime=0x1bdf12a, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1 [0126.039] wcscmp (_String1="J0199036.WMF", _String2=".") returned 1 [0126.039] wcscmp (_String1="J0199036.WMF", _String2="..") returned 1 [0126.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8f88 [0126.040] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.040] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.040] wcscat (in: _Dest=0x3eb8f88, _Source="J0199036.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" [0126.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0126.042] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x810a3500, ftCreationTime.dwHighDateTime=0x1be0651, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x810a3500, ftLastWriteTime.dwHighDateTime=0x1be0651, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1 [0126.042] wcscmp (_String1="J0199283.WMF", _String2=".") returned 1 [0126.042] wcscmp (_String1="J0199283.WMF", _String2="..") returned 1 [0126.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8bd0 [0126.042] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.042] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.042] wcscat (in: _Dest=0x3eb8bd0, _Source="J0199283.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" [0126.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0126.044] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ea1500, ftCreationTime.dwHighDateTime=0x1be3efe, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9ea1500, ftLastWriteTime.dwHighDateTime=0x1be3efe, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1 [0126.044] wcscmp (_String1="J0199549.WMF", _String2=".") returned 1 [0126.044] wcscmp (_String1="J0199549.WMF", _String2="..") returned 1 [0126.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9780 [0126.044] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.044] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.044] wcscat (in: _Dest=0x3eb9780, _Source="J0199549.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" [0126.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0126.046] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20c02b00, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x20c02b00, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1 [0126.046] wcscmp (_String1="J0199661.WMF", _String2=".") returned 1 [0126.046] wcscmp (_String1="J0199661.WMF", _String2="..") returned 1 [0126.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9808 [0126.046] wcscpy (in: _Dest=0x3eb9808, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.046] wcscat (in: _Dest=0x3eb9808, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.046] wcscat (in: _Dest=0x3eb9808, _Source="J0199661.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" [0126.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0126.048] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e5cb00, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0d3070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46e5cb00, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1 [0126.048] wcscmp (_String1="J0199727.WMF", _String2=".") returned 1 [0126.048] wcscmp (_String1="J0199727.WMF", _String2="..") returned 1 [0126.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8f00 [0126.048] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.048] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.048] wcscat (in: _Dest=0x3eb8f00, _Source="J0199727.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" [0126.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0126.050] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a06000, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x51a06000, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1 [0126.050] wcscmp (_String1="J0199755.WMF", _String2=".") returned 1 [0126.050] wcscmp (_String1="J0199755.WMF", _String2="..") returned 1 [0126.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9e68 [0126.051] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0126.051] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0126.051] wcscat (in: _Dest=0x3eb9e68, _Source="J0199755.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" [0126.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0126.972] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6846b700, ftCreationTime.dwHighDateTime=0x1be3eff, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6846b700, ftLastWriteTime.dwHighDateTime=0x1be3eff, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1 [0130.985] wcscmp (_String1="J0199805.WMF", _String2=".") returned 1 [0130.985] wcscmp (_String1="J0199805.WMF", _String2="..") returned 1 [0130.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0130.985] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0130.986] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0130.986] wcscat (in: _Dest=0x3f3c5c0, _Source="J0199805.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" [0140.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf")) returned 0x20 [0140.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF", dwFileAttributes=0x20) returned 0 [0140.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.749] GetLastError () returned 0x5 [0140.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF", dwFileAttributes=0x20) returned 0 [0140.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.749] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b018b00, ftCreationTime.dwHighDateTime=0x1be4dc3, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b018b00, ftLastWriteTime.dwHighDateTime=0x1be4dc3, nFileSizeHigh=0x0, nFileSizeLow=0x2398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205462.WMF", cAlternateFileName="")) returned 1 [0140.749] wcscmp (_String1="J0205462.WMF", _String2=".") returned 1 [0140.749] wcscmp (_String1="J0205462.WMF", _String2="..") returned 1 [0140.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.749] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.749] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.749] wcscat (in: _Dest=0x3f3c5c0, _Source="J0205462.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" [0140.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf")) returned 0x20 [0140.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF", dwFileAttributes=0x20) returned 0 [0140.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.750] GetLastError () returned 0x5 [0140.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF", dwFileAttributes=0x20) returned 0 [0140.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.750] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e951200, ftCreationTime.dwHighDateTime=0x1be4dc3, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e951200, ftLastWriteTime.dwHighDateTime=0x1be4dc3, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205466.WMF", cAlternateFileName="")) returned 1 [0140.750] wcscmp (_String1="J0205466.WMF", _String2=".") returned 1 [0140.750] wcscmp (_String1="J0205466.WMF", _String2="..") returned 1 [0140.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.750] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.750] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.751] wcscat (in: _Dest=0x3f3c5c0, _Source="J0205466.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" [0140.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf")) returned 0x20 [0140.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF", dwFileAttributes=0x20) returned 0 [0140.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.751] GetLastError () returned 0x5 [0140.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF", dwFileAttributes=0x20) returned 0 [0140.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.751] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0ea300, ftCreationTime.dwHighDateTime=0x1be4dc3, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaa0ea300, ftLastWriteTime.dwHighDateTime=0x1be4dc3, nFileSizeHigh=0x0, nFileSizeLow=0x17f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205582.WMF", cAlternateFileName="")) returned 1 [0140.751] wcscmp (_String1="J0205582.WMF", _String2=".") returned 1 [0140.751] wcscmp (_String1="J0205582.WMF", _String2="..") returned 1 [0140.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.752] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.752] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.752] wcscat (in: _Dest=0x3f3c5c0, _Source="J0205582.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" [0140.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf")) returned 0x20 [0140.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF", dwFileAttributes=0x20) returned 0 [0140.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.860] GetLastError () returned 0x5 [0140.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF", dwFileAttributes=0x20) returned 0 [0140.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.860] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd358ea00, ftCreationTime.dwHighDateTime=0x1be5673, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd358ea00, ftLastWriteTime.dwHighDateTime=0x1be5673, nFileSizeHigh=0x0, nFileSizeLow=0xb34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211949.WMF", cAlternateFileName="")) returned 1 [0140.861] wcscmp (_String1="J0211949.WMF", _String2=".") returned 1 [0140.861] wcscmp (_String1="J0211949.WMF", _String2="..") returned 1 [0140.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.861] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.861] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.861] wcscat (in: _Dest=0x3f3c5c0, _Source="J0211949.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" [0140.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf")) returned 0x20 [0140.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF", dwFileAttributes=0x20) returned 0 [0140.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.862] GetLastError () returned 0x5 [0140.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF", dwFileAttributes=0x20) returned 0 [0140.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.862] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5875800, ftCreationTime.dwHighDateTime=0x1be5674, ftLastAccessTime.dwLowDateTime=0xbe0f91d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe5875800, ftLastWriteTime.dwHighDateTime=0x1be5674, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212219.WMF", cAlternateFileName="")) returned 1 [0140.862] wcscmp (_String1="J0212219.WMF", _String2=".") returned 1 [0140.862] wcscmp (_String1="J0212219.WMF", _String2="..") returned 1 [0140.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.862] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.862] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.862] wcscat (in: _Dest=0x3f3c5c0, _Source="J0212219.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" [0140.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf")) returned 0x20 [0140.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF", dwFileAttributes=0x20) returned 0 [0140.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.879] GetLastError () returned 0x5 [0140.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF", dwFileAttributes=0x20) returned 0 [0140.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.880] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebca0400, ftCreationTime.dwHighDateTime=0x1be5675, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xebca0400, ftLastWriteTime.dwHighDateTime=0x1be5675, nFileSizeHigh=0x0, nFileSizeLow=0x248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212661.WMF", cAlternateFileName="")) returned 1 [0140.880] wcscmp (_String1="J0212661.WMF", _String2=".") returned 1 [0140.880] wcscmp (_String1="J0212661.WMF", _String2="..") returned 1 [0140.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.880] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.880] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.880] wcscat (in: _Dest=0x3f3c5c0, _Source="J0212661.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" [0140.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf")) returned 0x20 [0140.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF", dwFileAttributes=0x20) returned 0 [0140.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.881] GetLastError () returned 0x5 [0140.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF", dwFileAttributes=0x20) returned 0 [0140.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.881] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a18800, ftCreationTime.dwHighDateTime=0x1be5676, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3a18800, ftLastWriteTime.dwHighDateTime=0x1be5676, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212701.WMF", cAlternateFileName="")) returned 1 [0140.881] wcscmp (_String1="J0212701.WMF", _String2=".") returned 1 [0140.881] wcscmp (_String1="J0212701.WMF", _String2="..") returned 1 [0140.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.882] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.882] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.882] wcscat (in: _Dest=0x3f3c5c0, _Source="J0212701.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" [0140.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf")) returned 0x20 [0140.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF", dwFileAttributes=0x20) returned 0 [0140.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.882] GetLastError () returned 0x5 [0140.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF", dwFileAttributes=0x20) returned 0 [0140.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.883] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701c8700, ftCreationTime.dwHighDateTime=0x1be5676, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x701c8700, ftLastWriteTime.dwHighDateTime=0x1be5676, nFileSizeHigh=0x0, nFileSizeLow=0x2424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212957.WMF", cAlternateFileName="")) returned 1 [0140.883] wcscmp (_String1="J0212957.WMF", _String2=".") returned 1 [0140.883] wcscmp (_String1="J0212957.WMF", _String2="..") returned 1 [0140.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.883] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.883] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.883] wcscat (in: _Dest=0x3f3c5c0, _Source="J0212957.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" [0140.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf")) returned 0x20 [0140.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF", dwFileAttributes=0x20) returned 0 [0140.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.884] GetLastError () returned 0x5 [0140.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF", dwFileAttributes=0x20) returned 0 [0140.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.884] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c5bc600, ftCreationTime.dwHighDateTime=0x1be5a07, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1c5bc600, ftLastWriteTime.dwHighDateTime=0x1be5a07, nFileSizeHigh=0x0, nFileSizeLow=0x68ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214098.WAV", cAlternateFileName="")) returned 1 [0140.884] wcscmp (_String1="J0214098.WAV", _String2=".") returned 1 [0140.884] wcscmp (_String1="J0214098.WAV", _String2="..") returned 1 [0140.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.884] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.884] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.884] wcscat (in: _Dest=0x3f3c5c0, _Source="J0214098.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" [0140.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav")) returned 0x20 [0140.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV", dwFileAttributes=0x20) returned 0 [0140.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.885] GetLastError () returned 0x5 [0140.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV", dwFileAttributes=0x20) returned 0 [0140.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.885] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ef3a00, ftCreationTime.dwHighDateTime=0x1be1bbf, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc7ef3a00, ftLastWriteTime.dwHighDateTime=0x1be1bbf, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215086.WMF", cAlternateFileName="")) returned 1 [0140.885] wcscmp (_String1="J0215086.WMF", _String2=".") returned 1 [0140.885] wcscmp (_String1="J0215086.WMF", _String2="..") returned 1 [0140.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.885] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.885] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.885] wcscat (in: _Dest=0x3f3c5c0, _Source="J0215086.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" [0140.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf")) returned 0x20 [0140.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF", dwFileAttributes=0x20) returned 0 [0140.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.886] GetLastError () returned 0x5 [0140.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF", dwFileAttributes=0x20) returned 0 [0140.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.886] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaf9cc00, ftCreationTime.dwHighDateTime=0x1be6c7e, ftLastAccessTime.dwLowDateTime=0xbe11f330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcaf9cc00, ftLastWriteTime.dwHighDateTime=0x1be6c7e, nFileSizeHigh=0x0, nFileSizeLow=0x3138, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216516.WMF", cAlternateFileName="")) returned 1 [0140.886] wcscmp (_String1="J0216516.WMF", _String2=".") returned 1 [0140.886] wcscmp (_String1="J0216516.WMF", _String2="..") returned 1 [0140.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.887] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.887] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.887] wcscat (in: _Dest=0x3f3c5c0, _Source="J0216516.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" [0140.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf")) returned 0x20 [0140.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF", dwFileAttributes=0x20) returned 0 [0140.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.887] GetLastError () returned 0x5 [0140.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF", dwFileAttributes=0x20) returned 0 [0140.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.888] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b18500, ftCreationTime.dwHighDateTime=0x1be6c7f, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13b18500, ftLastWriteTime.dwHighDateTime=0x1be6c7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216588.WMF", cAlternateFileName="")) returned 1 [0140.888] wcscmp (_String1="J0216588.WMF", _String2=".") returned 1 [0140.888] wcscmp (_String1="J0216588.WMF", _String2="..") returned 1 [0140.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.888] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.888] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.888] wcscat (in: _Dest=0x3f3c5c0, _Source="J0216588.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" [0140.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf")) returned 0x20 [0140.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF", dwFileAttributes=0x20) returned 0 [0140.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.899] GetLastError () returned 0x5 [0140.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF", dwFileAttributes=0x20) returned 0 [0140.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.900] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94708100, ftCreationTime.dwHighDateTime=0x1be6c7f, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x94708100, ftLastWriteTime.dwHighDateTime=0x1be6c7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216724.WMF", cAlternateFileName="")) returned 1 [0140.900] wcscmp (_String1="J0216724.WMF", _String2=".") returned 1 [0140.900] wcscmp (_String1="J0216724.WMF", _String2="..") returned 1 [0140.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.900] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.900] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.900] wcscat (in: _Dest=0x3f3c5c0, _Source="J0216724.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" [0140.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf")) returned 0x20 [0140.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF", dwFileAttributes=0x20) returned 0 [0140.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.901] GetLastError () returned 0x5 [0140.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF", dwFileAttributes=0x20) returned 0 [0140.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.901] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1791d700, ftCreationTime.dwHighDateTime=0x1be6c80, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1791d700, ftLastWriteTime.dwHighDateTime=0x1be6c80, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216858.WMF", cAlternateFileName="")) returned 1 [0140.901] wcscmp (_String1="J0216858.WMF", _String2=".") returned 1 [0140.901] wcscmp (_String1="J0216858.WMF", _String2="..") returned 1 [0140.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.901] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.901] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.901] wcscat (in: _Dest=0x3f3c5c0, _Source="J0216858.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" [0140.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf")) returned 0x20 [0140.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF", dwFileAttributes=0x20) returned 0 [0140.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.911] GetLastError () returned 0x5 [0140.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF", dwFileAttributes=0x20) returned 0 [0140.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.911] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e001500, ftCreationTime.dwHighDateTime=0x1be6c82, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6e001500, ftLastWriteTime.dwHighDateTime=0x1be6c82, nFileSizeHigh=0x0, nFileSizeLow=0x1aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217698.WMF", cAlternateFileName="")) returned 1 [0140.911] wcscmp (_String1="J0217698.WMF", _String2=".") returned 1 [0140.911] wcscmp (_String1="J0217698.WMF", _String2="..") returned 1 [0140.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.911] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.911] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.911] wcscat (in: _Dest=0x3f3c5c0, _Source="J0217698.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" [0140.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf")) returned 0x20 [0140.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF", dwFileAttributes=0x20) returned 0 [0140.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.976] GetLastError () returned 0x5 [0140.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF", dwFileAttributes=0x20) returned 0 [0140.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.977] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11329600, ftCreationTime.dwHighDateTime=0x1be7a9b, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x11329600, ftLastWriteTime.dwHighDateTime=0x1be7a9b, nFileSizeHigh=0x0, nFileSizeLow=0x3838, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0221903.WMF", cAlternateFileName="")) returned 1 [0140.977] wcscmp (_String1="J0221903.WMF", _String2=".") returned 1 [0140.977] wcscmp (_String1="J0221903.WMF", _String2="..") returned 1 [0140.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.977] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.977] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.977] wcscat (in: _Dest=0x3f3c5c0, _Source="J0221903.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" [0140.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf")) returned 0x20 [0140.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF", dwFileAttributes=0x20) returned 0 [0140.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.977] GetLastError () returned 0x5 [0140.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF", dwFileAttributes=0x20) returned 0 [0140.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.978] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12b08e00, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe145490, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x12b08e00, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222015.WMF", cAlternateFileName="")) returned 1 [0140.978] wcscmp (_String1="J0222015.WMF", _String2=".") returned 1 [0140.978] wcscmp (_String1="J0222015.WMF", _String2="..") returned 1 [0140.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.978] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.978] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.978] wcscat (in: _Dest=0x3f3c5c0, _Source="J0222015.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" [0140.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf")) returned 0x20 [0140.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF", dwFileAttributes=0x20) returned 0 [0140.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.995] GetLastError () returned 0x5 [0140.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF", dwFileAttributes=0x20) returned 0 [0140.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.996] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1512e800, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1512e800, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222017.WMF", cAlternateFileName="")) returned 1 [0140.996] wcscmp (_String1="J0222017.WMF", _String2=".") returned 1 [0140.996] wcscmp (_String1="J0222017.WMF", _String2="..") returned 1 [0140.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.996] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.996] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.996] wcscat (in: _Dest=0x3f3c5c0, _Source="J0222017.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" [0140.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf")) returned 0x20 [0140.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF", dwFileAttributes=0x20) returned 0 [0140.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.997] GetLastError () returned 0x5 [0140.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF", dwFileAttributes=0x20) returned 0 [0140.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.997] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17754200, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17754200, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222019.WMF", cAlternateFileName="")) returned 1 [0140.997] wcscmp (_String1="J0222019.WMF", _String2=".") returned 1 [0140.997] wcscmp (_String1="J0222019.WMF", _String2="..") returned 1 [0140.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.998] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.998] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.998] wcscat (in: _Dest=0x3f3c5c0, _Source="J0222019.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" [0140.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf")) returned 0x20 [0140.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF", dwFileAttributes=0x20) returned 0 [0140.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.999] GetLastError () returned 0x5 [0140.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF", dwFileAttributes=0x20) returned 0 [0140.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0140.999] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b08c900, ftCreationTime.dwHighDateTime=0x1be7a9c, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b08c900, ftLastWriteTime.dwHighDateTime=0x1be7a9c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222021.WMF", cAlternateFileName="")) returned 1 [0140.999] wcscmp (_String1="J0222021.WMF", _String2=".") returned 1 [0140.999] wcscmp (_String1="J0222021.WMF", _String2="..") returned 1 [0140.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0140.999] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0140.999] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0140.999] wcscat (in: _Dest=0x3f3c5c0, _Source="J0222021.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" [0141.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf")) returned 0x20 [0141.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF", dwFileAttributes=0x20) returned 0 [0141.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.000] GetLastError () returned 0x5 [0141.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF", dwFileAttributes=0x20) returned 0 [0141.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0141.001] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f5e00, ftCreationTime.dwHighDateTime=0x1be8670, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x103f5e00, ftLastWriteTime.dwHighDateTime=0x1be8670, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229385.WMF", cAlternateFileName="")) returned 1 [0141.001] wcscmp (_String1="J0229385.WMF", _String2=".") returned 1 [0141.001] wcscmp (_String1="J0229385.WMF", _String2="..") returned 1 [0141.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0141.001] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0141.001] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0141.001] wcscat (in: _Dest=0x3f3c5c0, _Source="J0229385.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" [0141.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf")) returned 0x20 [0141.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF", dwFileAttributes=0x20) returned 0 [0141.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.006] GetLastError () returned 0x5 [0141.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF", dwFileAttributes=0x20) returned 0 [0141.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0141.006] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11708b00, ftCreationTime.dwHighDateTime=0x1be8670, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x11708b00, ftLastWriteTime.dwHighDateTime=0x1be8670, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229389.WMF", cAlternateFileName="")) returned 1 [0141.007] wcscmp (_String1="J0229389.WMF", _String2=".") returned 1 [0141.007] wcscmp (_String1="J0229389.WMF", _String2="..") returned 1 [0141.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0141.007] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0141.007] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0141.007] wcscat (in: _Dest=0x3f3c5c0, _Source="J0229389.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" [0141.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf")) returned 0x20 [0141.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF", dwFileAttributes=0x20) returned 0 [0141.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.008] GetLastError () returned 0x5 [0141.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF", dwFileAttributes=0x20) returned 0 [0141.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0141.009] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b2900, ftCreationTime.dwHighDateTime=0x1bc8349, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x50b2900, ftLastWriteTime.dwHighDateTime=0x1bc8349, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230876.WMF", cAlternateFileName="")) returned 1 [0141.009] wcscmp (_String1="J0230876.WMF", _String2=".") returned 1 [0141.009] wcscmp (_String1="J0230876.WMF", _String2="..") returned 1 [0141.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0141.009] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0141.009] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0141.009] wcscat (in: _Dest=0x3f3c5c0, _Source="J0230876.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" [0141.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf")) returned 0x20 [0141.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF", dwFileAttributes=0x20) returned 0 [0141.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.010] GetLastError () returned 0x5 [0141.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF", dwFileAttributes=0x20) returned 0 [0141.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0141.010] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41169900, ftCreationTime.dwHighDateTime=0x1be51d0, ftLastAccessTime.dwLowDateTime=0xbe16b5f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x41169900, ftLastWriteTime.dwHighDateTime=0x1be51d0, nFileSizeHigh=0x0, nFileSizeLow=0x77f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233018.WMF", cAlternateFileName="")) returned 1 [0141.010] wcscmp (_String1="J0233018.WMF", _String2=".") returned 1 [0141.010] wcscmp (_String1="J0233018.WMF", _String2="..") returned 1 [0141.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0141.010] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0141.010] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0141.010] wcscat (in: _Dest=0x3f3c5c0, _Source="J0233018.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" [0141.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf")) returned 0x20 [0141.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF", dwFileAttributes=0x20) returned 0 [0141.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.011] GetLastError () returned 0x5 [0141.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF", dwFileAttributes=0x20) returned 0 [0141.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0141.011] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd178a200, ftCreationTime.dwHighDateTime=0x1be1bbf, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd178a200, ftLastWriteTime.dwHighDateTime=0x1be1bbf, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233070.WMF", cAlternateFileName="")) returned 1 [0141.011] wcscmp (_String1="J0233070.WMF", _String2=".") returned 1 [0141.011] wcscmp (_String1="J0233070.WMF", _String2="..") returned 1 [0141.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0141.011] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0141.011] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0141.011] wcscat (in: _Dest=0x3f3c5c0, _Source="J0233070.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" [0141.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf")) returned 0x20 [0142.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF", dwFileAttributes=0x20) returned 0 [0142.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.134] GetLastError () returned 0x5 [0142.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF", dwFileAttributes=0x20) returned 0 [0142.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 [0142.134] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc080e00, ftCreationTime.dwHighDateTime=0x1be5751, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc080e00, ftLastWriteTime.dwHighDateTime=0x1be5751, nFileSizeHigh=0x0, nFileSizeLow=0x80f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233312.WMF", cAlternateFileName="")) returned 1 [0142.134] wcscmp (_String1="J0233312.WMF", _String2=".") returned 1 [0142.135] wcscmp (_String1="J0233312.WMF", _String2="..") returned 1 [0142.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0142.135] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0142.135] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0142.135] wcscat (in: _Dest=0x3f3c5c0, _Source="J0233312.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" [0152.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2038 [0152.898] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92e0c00, ftCreationTime.dwHighDateTime=0x1be80f8, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb92e0c00, ftLastWriteTime.dwHighDateTime=0x1be80f8, nFileSizeHigh=0x0, nFileSizeLow=0x6632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234131.WMF", cAlternateFileName="")) returned 1 [0152.898] wcscmp (_String1="J0234131.WMF", _String2=".") returned 1 [0152.899] wcscmp (_String1="J0234131.WMF", _String2="..") returned 1 [0152.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9230 [0152.899] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0152.899] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0152.899] wcscat (in: _Dest=0x3eb9230, _Source="J0234131.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" [0152.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034 [0152.900] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4aa200, ftCreationTime.dwHighDateTime=0x1be804d, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdf4aa200, ftLastWriteTime.dwHighDateTime=0x1be804d, nFileSizeHigh=0x0, nFileSizeLow=0xa87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234266.WMF", cAlternateFileName="")) returned 1 [0152.900] wcscmp (_String1="J0234266.WMF", _String2=".") returned 1 [0152.900] wcscmp (_String1="J0234266.WMF", _String2="..") returned 1 [0152.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba330 [0152.900] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0152.900] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0152.900] wcscat (in: _Dest=0x3eba330, _Source="J0234266.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" [0152.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x778 [0152.901] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96382e00, ftCreationTime.dwHighDateTime=0x1be7609, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96382e00, ftLastWriteTime.dwHighDateTime=0x1be7609, nFileSizeHigh=0x0, nFileSizeLow=0x27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234657.WMF", cAlternateFileName="")) returned 1 [0152.901] wcscmp (_String1="J0234657.WMF", _String2=".") returned 1 [0152.901] wcscmp (_String1="J0234657.WMF", _String2="..") returned 1 [0152.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb93c8 [0152.901] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0152.902] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0152.902] wcscat (in: _Dest=0x3eb93c8, _Source="J0234657.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" [0152.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0152.903] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f239500, ftCreationTime.dwHighDateTime=0x1bf2c4b, ftLastAccessTime.dwLowDateTime=0xbe191750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5f239500, ftLastWriteTime.dwHighDateTime=0x1bf2c4b, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234687.GIF", cAlternateFileName="")) returned 1 [0152.903] wcscmp (_String1="J0234687.GIF", _String2=".") returned 1 [0152.903] wcscmp (_String1="J0234687.GIF", _String2="..") returned 1 [0152.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8e78 [0152.903] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0152.903] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0152.903] wcscat (in: _Dest=0x3eb8e78, _Source="J0234687.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" [0152.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0152.904] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b4d00, ftCreationTime.dwHighDateTime=0x1be9184, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1a8b4d00, ftLastWriteTime.dwHighDateTime=0x1be9184, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235241.WMF", cAlternateFileName="")) returned 1 [0152.904] wcscmp (_String1="J0235241.WMF", _String2=".") returned 1 [0152.904] wcscmp (_String1="J0235241.WMF", _String2="..") returned 1 [0152.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d390 [0152.904] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0152.904] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0152.904] wcscat (in: _Dest=0x3f3d390, _Source="J0235241.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" [0152.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0152.905] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99fa4b00, ftCreationTime.dwHighDateTime=0x1c03781, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99fa4b00, ftLastWriteTime.dwHighDateTime=0x1c03781, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235319.WMF", cAlternateFileName="")) returned 1 [0152.905] wcscmp (_String1="J0235319.WMF", _String2=".") returned 1 [0152.905] wcscmp (_String1="J0235319.WMF", _String2="..") returned 1 [0152.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c208 [0152.906] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0152.906] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0152.906] wcscat (in: _Dest=0x3f3c208, _Source="J0235319.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" [0152.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0152.907] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f26800, ftCreationTime.dwHighDateTime=0x1be9d3e, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x45f26800, ftLastWriteTime.dwHighDateTime=0x1be9d3e, nFileSizeHigh=0x0, nFileSizeLow=0x13d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240695.WMF", cAlternateFileName="")) returned 1 [0152.907] wcscmp (_String1="J0240695.WMF", _String2=".") returned 1 [0152.907] wcscmp (_String1="J0240695.WMF", _String2="..") returned 1 [0152.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cec8 [0152.907] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0152.907] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0152.907] wcscat (in: _Dest=0x3f3cec8, _Source="J0240695.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" [0152.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0152.908] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a2de00, ftCreationTime.dwHighDateTime=0x1be9d3e, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56a2de00, ftLastWriteTime.dwHighDateTime=0x1be9d3e, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240719.WMF", cAlternateFileName="")) returned 1 [0152.910] wcscmp (_String1="J0240719.WMF", _String2=".") returned 1 [0152.910] wcscmp (_String1="J0240719.WMF", _String2="..") returned 1 [0152.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d308 [0152.910] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0152.910] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0152.910] wcscat (in: _Dest=0x3f3d308, _Source="J0240719.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" [0157.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0157.631] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe0d7700, ftCreationTime.dwHighDateTime=0x1beb358, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe0d7700, ftLastWriteTime.dwHighDateTime=0x1beb358, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251301.WMF", cAlternateFileName="")) returned 1 [0157.631] wcscmp (_String1="J0251301.WMF", _String2=".") returned 1 [0157.631] wcscmp (_String1="J0251301.WMF", _String2="..") returned 1 [0157.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9560 [0157.631] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.631] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.631] wcscat (in: _Dest=0x3eb9560, _Source="J0251301.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" [0157.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0157.632] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa46d2f00, ftCreationTime.dwHighDateTime=0x1beb35a, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa46d2f00, ftLastWriteTime.dwHighDateTime=0x1beb35a, nFileSizeHigh=0x0, nFileSizeLow=0x1232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251871.WMF", cAlternateFileName="")) returned 1 [0157.632] wcscmp (_String1="J0251871.WMF", _String2=".") returned 1 [0157.632] wcscmp (_String1="J0251871.WMF", _String2="..") returned 1 [0157.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8f88 [0157.632] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.632] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.632] wcscat (in: _Dest=0x3eb8f88, _Source="J0251871.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" [0157.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0157.633] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2eb0a00, ftCreationTime.dwHighDateTime=0x1beb35a, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2eb0a00, ftLastWriteTime.dwHighDateTime=0x1beb35a, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251925.WMF", cAlternateFileName="")) returned 1 [0157.634] wcscmp (_String1="J0251925.WMF", _String2=".") returned 1 [0157.634] wcscmp (_String1="J0251925.WMF", _String2="..") returned 1 [0157.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9340 [0157.634] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.634] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.634] wcscat (in: _Dest=0x3eb9340, _Source="J0251925.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" [0157.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0157.635] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c2c800, ftCreationTime.dwHighDateTime=0x1beb35c, ftLastAccessTime.dwLowDateTime=0xbe1b78b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90c2c800, ftLastWriteTime.dwHighDateTime=0x1beb35c, nFileSizeHigh=0x0, nFileSizeLow=0x158c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252349.WMF", cAlternateFileName="")) returned 1 [0157.635] wcscmp (_String1="J0252349.WMF", _String2=".") returned 1 [0157.635] wcscmp (_String1="J0252349.WMF", _String2="..") returned 1 [0157.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb95e8 [0157.635] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.635] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.635] wcscat (in: _Dest=0x3eb95e8, _Source="J0252349.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" [0157.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528 [0157.636] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5140000, ftCreationTime.dwHighDateTime=0x1becd2e, ftLastAccessTime.dwLowDateTime=0xbe1dda10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5140000, ftLastWriteTime.dwHighDateTime=0x1becd2e, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278882.WMF", cAlternateFileName="")) returned 1 [0157.636] wcscmp (_String1="J0278882.WMF", _String2=".") returned 1 [0157.636] wcscmp (_String1="J0278882.WMF", _String2="..") returned 1 [0157.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c648 [0157.636] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.636] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.636] wcscat (in: _Dest=0x3f3c648, _Source="J0278882.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" [0157.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0157.638] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8205a800, ftCreationTime.dwHighDateTime=0x1bee4a8, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8205a800, ftLastWriteTime.dwHighDateTime=0x1bee4a8, nFileSizeHigh=0x0, nFileSizeLow=0x4ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281904.WMF", cAlternateFileName="")) returned 1 [0157.638] wcscmp (_String1="J0281904.WMF", _String2=".") returned 1 [0157.638] wcscmp (_String1="J0281904.WMF", _String2="..") returned 1 [0157.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d280 [0157.638] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.638] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.638] wcscat (in: _Dest=0x3f3d280, _Source="J0281904.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" [0157.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0157.639] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d9d200, ftCreationTime.dwHighDateTime=0x1bed43e, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76d9d200, ftLastWriteTime.dwHighDateTime=0x1bed43e, nFileSizeHigh=0x0, nFileSizeLow=0x4dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0283209.GIF", cAlternateFileName="")) returned 1 [0157.639] wcscmp (_String1="J0283209.GIF", _String2=".") returned 1 [0157.639] wcscmp (_String1="J0283209.GIF", _String2="..") returned 1 [0157.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3ca00 [0157.639] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.639] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.639] wcscat (in: _Dest=0x3f3ca00, _Source="J0283209.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" [0157.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0157.641] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ce31400, ftCreationTime.dwHighDateTime=0x1bea231, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ce31400, ftLastWriteTime.dwHighDateTime=0x1bea231, nFileSizeHigh=0x0, nFileSizeLow=0x62e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0284916.JPG", cAlternateFileName="")) returned 1 [0157.641] wcscmp (_String1="J0284916.JPG", _String2=".") returned 1 [0157.641] wcscmp (_String1="J0284916.JPG", _String2="..") returned 1 [0157.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bed8 [0157.641] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.641] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.641] wcscat (in: _Dest=0x3f3bed8, _Source="J0284916.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" [0157.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0157.642] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc0a300, ftCreationTime.dwHighDateTime=0x1befdde, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3bc0a300, ftLastWriteTime.dwHighDateTime=0x1befdde, nFileSizeHigh=0x0, nFileSizeLow=0x7876, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285360.WMF", cAlternateFileName="")) returned 1 [0157.642] wcscmp (_String1="J0285360.WMF", _String2=".") returned 1 [0157.642] wcscmp (_String1="J0285360.WMF", _String2="..") returned 1 [0157.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cb10 [0157.642] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.642] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.642] wcscat (in: _Dest=0x3f3cb10, _Source="J0285360.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" [0157.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0157.644] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6fab00, ftCreationTime.dwHighDateTime=0x1befdde, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b6fab00, ftLastWriteTime.dwHighDateTime=0x1befdde, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285410.WMF", cAlternateFileName="")) returned 1 [0157.644] wcscmp (_String1="J0285410.WMF", _String2=".") returned 1 [0157.644] wcscmp (_String1="J0285410.WMF", _String2="..") returned 1 [0157.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3da78 [0157.644] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.644] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.644] wcscat (in: _Dest=0x3f3da78, _Source="J0285410.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" [0157.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0157.645] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb23a00, ftCreationTime.dwHighDateTime=0x1befdde, ftLastAccessTime.dwLowDateTime=0xbe203b70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9eb23a00, ftLastWriteTime.dwHighDateTime=0x1befdde, nFileSizeHigh=0x0, nFileSizeLow=0x2448, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285444.WMF", cAlternateFileName="")) returned 1 [0157.645] wcscmp (_String1="J0285444.WMF", _String2=".") returned 1 [0157.645] wcscmp (_String1="J0285444.WMF", _String2="..") returned 1 [0157.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c290 [0157.645] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.645] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.645] wcscat (in: _Dest=0x3f3c290, _Source="J0285444.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" [0157.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0157.652] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2715300, ftCreationTime.dwHighDateTime=0x1befddf, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2715300, ftLastWriteTime.dwHighDateTime=0x1befddf, nFileSizeHigh=0x0, nFileSizeLow=0x2a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285698.WMF", cAlternateFileName="")) returned 1 [0157.652] wcscmp (_String1="J0285698.WMF", _String2=".") returned 1 [0157.652] wcscmp (_String1="J0285698.WMF", _String2="..") returned 1 [0157.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c3a0 [0157.652] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.652] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.652] wcscat (in: _Dest=0x3f3c3a0, _Source="J0285698.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" [0157.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0157.653] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3401fe00, ftCreationTime.dwHighDateTime=0x1befde0, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3401fe00, ftLastWriteTime.dwHighDateTime=0x1befde0, nFileSizeHigh=0x0, nFileSizeLow=0x958c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285750.WMF", cAlternateFileName="")) returned 1 [0157.653] wcscmp (_String1="J0285750.WMF", _String2=".") returned 1 [0157.653] wcscmp (_String1="J0285750.WMF", _String2="..") returned 1 [0157.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cd30 [0157.653] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.653] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.653] wcscat (in: _Dest=0x3f3cd30, _Source="J0285750.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" [0157.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0157.654] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac56100, ftCreationTime.dwHighDateTime=0x1befde1, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2ac56100, ftLastWriteTime.dwHighDateTime=0x1befde1, nFileSizeHigh=0x0, nFileSizeLow=0x3452, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285926.WMF", cAlternateFileName="")) returned 1 [0157.654] wcscmp (_String1="J0285926.WMF", _String2=".") returned 1 [0157.654] wcscmp (_String1="J0285926.WMF", _String2="..") returned 1 [0157.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0157.654] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.654] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.654] wcscat (in: _Dest=0x3f3c5c0, _Source="J0285926.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" [0157.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0157.656] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547e8800, ftCreationTime.dwHighDateTime=0x1befde1, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x547e8800, ftLastWriteTime.dwHighDateTime=0x1befde1, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286034.WMF", cAlternateFileName="")) returned 1 [0157.656] wcscmp (_String1="J0286034.WMF", _String2=".") returned 1 [0157.656] wcscmp (_String1="J0286034.WMF", _String2="..") returned 1 [0157.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cc20 [0157.656] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.656] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.656] wcscat (in: _Dest=0x3f3cc20, _Source="J0286034.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" [0157.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0157.658] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b24df00, ftCreationTime.dwHighDateTime=0x1befde1, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b24df00, ftLastWriteTime.dwHighDateTime=0x1befde1, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286068.WMF", cAlternateFileName="")) returned 1 [0157.658] wcscmp (_String1="J0286068.WMF", _String2=".") returned 1 [0157.658] wcscmp (_String1="J0286068.WMF", _String2="..") returned 1 [0157.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d968 [0157.658] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.658] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.658] wcscat (in: _Dest=0x3f3d968, _Source="J0286068.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" [0157.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0157.659] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f367c00, ftCreationTime.dwHighDateTime=0x1bef5df, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f367c00, ftLastWriteTime.dwHighDateTime=0x1bef5df, nFileSizeHigh=0x0, nFileSizeLow=0xb21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287005.WMF", cAlternateFileName="")) returned 1 [0157.659] wcscmp (_String1="J0287005.WMF", _String2=".") returned 1 [0157.659] wcscmp (_String1="J0287005.WMF", _String2="..") returned 1 [0157.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c7e0 [0157.659] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.659] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.659] wcscat (in: _Dest=0x3f3c7e0, _Source="J0287005.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" [0157.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16fc [0157.660] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c15400, ftCreationTime.dwHighDateTime=0x1bf1586, ftLastAccessTime.dwLowDateTime=0xbe229cd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x29c15400, ftLastWriteTime.dwHighDateTime=0x1bf1586, nFileSizeHigh=0x0, nFileSizeLow=0x76ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291984.WMF", cAlternateFileName="")) returned 1 [0157.660] wcscmp (_String1="J0291984.WMF", _String2=".") returned 1 [0157.661] wcscmp (_String1="J0291984.WMF", _String2="..") returned 1 [0157.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c070 [0157.661] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.661] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.661] wcscat (in: _Dest=0x3f3c070, _Source="J0291984.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" [0157.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0157.662] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e351000, ftCreationTime.dwHighDateTime=0x1bf1586, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e351000, ftLastWriteTime.dwHighDateTime=0x1bf1586, nFileSizeHigh=0x0, nFileSizeLow=0x7148, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292020.WMF", cAlternateFileName="")) returned 1 [0157.662] wcscmp (_String1="J0292020.WMF", _String2=".") returned 1 [0157.662] wcscmp (_String1="J0292020.WMF", _String2="..") returned 1 [0157.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e830 [0157.662] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.662] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.662] wcscat (in: _Dest=0x36e830, _Source="J0292020.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" [0157.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0157.663] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0253900, ftCreationTime.dwHighDateTime=0x1bf1586, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe0253900, ftLastWriteTime.dwHighDateTime=0x1bf1586, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292152.WMF", cAlternateFileName="")) returned 1 [0157.663] wcscmp (_String1="J0292152.WMF", _String2=".") returned 1 [0157.663] wcscmp (_String1="J0292152.WMF", _String2="..") returned 1 [0157.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36ed80 [0157.663] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.663] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.663] wcscat (in: _Dest=0x36ed80, _Source="J0292152.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" [0157.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0157.665] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddeae800, ftCreationTime.dwHighDateTime=0x1bf1708, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xddeae800, ftLastWriteTime.dwHighDateTime=0x1bf1708, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292982.WMF", cAlternateFileName="")) returned 1 [0157.665] wcscmp (_String1="J0292982.WMF", _String2=".") returned 1 [0157.665] wcscmp (_String1="J0292982.WMF", _String2="..") returned 1 [0157.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36f3e0 [0157.665] wcscpy (in: _Dest=0x36f3e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.665] wcscat (in: _Dest=0x36f3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.665] wcscat (in: _Dest=0x36f3e0, _Source="J0292982.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" [0157.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0157.666] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302c0900, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x302c0900, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293234.WMF", cAlternateFileName="")) returned 1 [0157.666] wcscmp (_String1="J0293234.WMF", _String2=".") returned 1 [0157.666] wcscmp (_String1="J0293234.WMF", _String2="..") returned 1 [0157.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e588 [0157.667] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.667] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.667] wcscat (in: _Dest=0x36e588, _Source="J0293234.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" [0157.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0157.668] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302c0900, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x302c0900, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293236.WMF", cAlternateFileName="")) returned 1 [0157.668] wcscmp (_String1="J0293236.WMF", _String2=".") returned 1 [0157.668] wcscmp (_String1="J0293236.WMF", _String2="..") returned 1 [0157.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36ecf8 [0157.668] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.668] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.668] wcscat (in: _Dest=0x36ecf8, _Source="J0293236.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" [0157.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ecf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0157.669] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302c0900, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x302c0900, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293238.WMF", cAlternateFileName="")) returned 1 [0157.669] wcscmp (_String1="J0293238.WMF", _String2=".") returned 1 [0157.669] wcscmp (_String1="J0293238.WMF", _String2="..") returned 1 [0157.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e478 [0157.669] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.670] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.670] wcscat (in: _Dest=0x36e478, _Source="J0293238.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" [0157.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0157.671] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315d3600, ftCreationTime.dwHighDateTime=0x1bf1709, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x315d3600, ftLastWriteTime.dwHighDateTime=0x1bf1709, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293240.WMF", cAlternateFileName="")) returned 1 [0157.671] wcscmp (_String1="J0293240.WMF", _String2=".") returned 1 [0157.671] wcscmp (_String1="J0293240.WMF", _String2="..") returned 1 [0157.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e500 [0157.671] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.671] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.671] wcscat (in: _Dest=0x36e500, _Source="J0293240.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" [0157.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0157.672] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde7d00, ftCreationTime.dwHighDateTime=0x1bf1587, ftLastAccessTime.dwLowDateTime=0xbe24fe30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdcde7d00, ftLastWriteTime.dwHighDateTime=0x1bf1587, nFileSizeHigh=0x0, nFileSizeLow=0x92c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293570.WMF", cAlternateFileName="")) returned 1 [0157.672] wcscmp (_String1="J0293570.WMF", _String2=".") returned 1 [0157.672] wcscmp (_String1="J0293570.WMF", _String2="..") returned 1 [0157.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36ead8 [0157.672] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0157.672] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0157.673] wcscat (in: _Dest=0x36ead8, _Source="J0293570.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" [0157.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0158.008] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c5f500, ftCreationTime.dwHighDateTime=0x1bf1588, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x45c5f500, ftLastWriteTime.dwHighDateTime=0x1bf1588, nFileSizeHigh=0x0, nFileSizeLow=0x15ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293828.WMF", cAlternateFileName="")) returned 1 [0158.008] wcscmp (_String1="J0293828.WMF", _String2=".") returned 1 [0158.008] wcscmp (_String1="J0293828.WMF", _String2="..") returned 1 [0158.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8f88 [0158.009] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0158.009] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0158.009] wcscat (in: _Dest=0x3eb8f88, _Source="J0293828.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" [0170.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0170.373] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ced0300, ftCreationTime.dwHighDateTime=0x1bf1588, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ced0300, ftLastWriteTime.dwHighDateTime=0x1bf1588, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293844.WMF", cAlternateFileName="")) returned 1 [0170.373] wcscmp (_String1="J0293844.WMF", _String2=".") returned 1 [0170.373] wcscmp (_String1="J0293844.WMF", _String2="..") returned 1 [0170.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3062a10 [0170.373] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.373] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.373] wcscat (in: _Dest=0x3062a10, _Source="J0293844.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" [0170.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0170.375] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8116d00, ftCreationTime.dwHighDateTime=0x1bf08f6, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8116d00, ftLastWriteTime.dwHighDateTime=0x1bf08f6, nFileSizeHigh=0x0, nFileSizeLow=0x29e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295241.GIF", cAlternateFileName="")) returned 1 [0170.375] wcscmp (_String1="J0295241.GIF", _String2=".") returned 1 [0170.375] wcscmp (_String1="J0295241.GIF", _String2="..") returned 1 [0170.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3063428 [0170.376] wcscpy (in: _Dest=0x3063428, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.376] wcscat (in: _Dest=0x3063428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.376] wcscat (in: _Dest=0x3063428, _Source="J0295241.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" [0170.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3063428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0170.377] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10810400, ftCreationTime.dwHighDateTime=0x1bf2cfa, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10810400, ftLastWriteTime.dwHighDateTime=0x1bf2cfa, nFileSizeHigh=0x0, nFileSizeLow=0xcd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297185.WMF", cAlternateFileName="")) returned 1 [0170.377] wcscmp (_String1="J0297185.WMF", _String2=".") returned 1 [0170.377] wcscmp (_String1="J0297185.WMF", _String2="..") returned 1 [0170.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d280 [0170.377] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.377] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.377] wcscat (in: _Dest=0x3f3d280, _Source="J0297185.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" [0170.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0170.379] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f38c00, ftCreationTime.dwHighDateTime=0x1bf2cfc, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9f38c00, ftLastWriteTime.dwHighDateTime=0x1bf2cfc, nFileSizeHigh=0x0, nFileSizeLow=0x6db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297551.WMF", cAlternateFileName="")) returned 1 [0170.379] wcscmp (_String1="J0297551.WMF", _String2=".") returned 1 [0170.379] wcscmp (_String1="J0297551.WMF", _String2="..") returned 1 [0170.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c3a0 [0170.379] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.379] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.379] wcscat (in: _Dest=0x3f3c3a0, _Source="J0297551.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" [0170.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0170.380] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54be400, ftCreationTime.dwHighDateTime=0x1bf2cfc, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe54be400, ftLastWriteTime.dwHighDateTime=0x1bf2cfc, nFileSizeHigh=0x0, nFileSizeLow=0xa7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297707.WMF", cAlternateFileName="")) returned 1 [0170.381] wcscmp (_String1="J0297707.WMF", _String2=".") returned 1 [0170.381] wcscmp (_String1="J0297707.WMF", _String2="..") returned 1 [0170.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d1f8 [0170.381] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.381] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.381] wcscat (in: _Dest=0x3f3d1f8, _Source="J0297707.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" [0170.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0170.382] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bfa000, ftCreationTime.dwHighDateTime=0x1bf2cfd, ftLastAccessTime.dwLowDateTime=0xbe275f90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19bfa000, ftLastWriteTime.dwHighDateTime=0x1bf2cfd, nFileSizeHigh=0x0, nFileSizeLow=0x27ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297749.WMF", cAlternateFileName="")) returned 1 [0170.382] wcscmp (_String1="J0297749.WMF", _String2=".") returned 1 [0170.382] wcscmp (_String1="J0297749.WMF", _String2="..") returned 1 [0170.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d968 [0170.382] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.382] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.383] wcscat (in: _Dest=0x3f3d968, _Source="J0297749.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" [0170.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0170.384] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4372ca00, ftCreationTime.dwHighDateTime=0x1bf2cf1, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4372ca00, ftLastWriteTime.dwHighDateTime=0x1bf2cf1, nFileSizeHigh=0x0, nFileSizeLow=0x197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298653.WMF", cAlternateFileName="")) returned 1 [0170.386] wcscmp (_String1="J0298653.WMF", _String2=".") returned 1 [0170.386] wcscmp (_String1="J0298653.WMF", _String2="..") returned 1 [0170.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cc20 [0170.386] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.386] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.386] wcscat (in: _Dest=0x3f3cc20, _Source="J0298653.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" [0170.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0170.857] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3009900, ftCreationTime.dwHighDateTime=0x1bf2cf1, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc3009900, ftLastWriteTime.dwHighDateTime=0x1bf2cf1, nFileSizeHigh=0x0, nFileSizeLow=0x19a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298897.WMF", cAlternateFileName="")) returned 1 [0170.857] wcscmp (_String1="J0298897.WMF", _String2=".") returned 1 [0170.857] wcscmp (_String1="J0298897.WMF", _String2="..") returned 1 [0170.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9918 [0170.857] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.857] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.857] wcscat (in: _Dest=0x3eb9918, _Source="J0298897.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" [0170.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0170.858] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab2f1200, ftCreationTime.dwHighDateTime=0x1bf2cfd, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab2f1200, ftLastWriteTime.dwHighDateTime=0x1bf2cfd, nFileSizeHigh=0x0, nFileSizeLow=0x163c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299125.WMF", cAlternateFileName="")) returned 1 [0170.859] wcscmp (_String1="J0299125.WMF", _String2=".") returned 1 [0170.859] wcscmp (_String1="J0299125.WMF", _String2="..") returned 1 [0170.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9340 [0170.859] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.859] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.859] wcscat (in: _Dest=0x3eb9340, _Source="J0299125.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" [0170.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0170.860] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc8ffe00, ftCreationTime.dwHighDateTime=0x1bf2cfd, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc8ffe00, ftLastWriteTime.dwHighDateTime=0x1bf2cfd, nFileSizeHigh=0x0, nFileSizeLow=0x23b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299171.WMF", cAlternateFileName="")) returned 1 [0170.860] wcscmp (_String1="J0299171.WMF", _String2=".") returned 1 [0170.860] wcscmp (_String1="J0299171.WMF", _String2="..") returned 1 [0170.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb99a0 [0170.861] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.861] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.861] wcscat (in: _Dest=0x3eb99a0, _Source="J0299171.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" [0170.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0170.862] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c44100, ftCreationTime.dwHighDateTime=0x1bf2cff, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35c44100, ftLastWriteTime.dwHighDateTime=0x1bf2cff, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299587.WMF", cAlternateFileName="")) returned 1 [0170.862] wcscmp (_String1="J0299587.WMF", _String2=".") returned 1 [0170.862] wcscmp (_String1="J0299587.WMF", _String2="..") returned 1 [0170.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba660 [0170.862] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.862] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.862] wcscat (in: _Dest=0x3eba660, _Source="J0299587.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" [0170.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0170.864] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52607900, ftCreationTime.dwHighDateTime=0x1bf2cff, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52607900, ftLastWriteTime.dwHighDateTime=0x1bf2cff, nFileSizeHigh=0x0, nFileSizeLow=0x1310, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299611.WMF", cAlternateFileName="")) returned 1 [0170.864] wcscmp (_String1="J0299611.WMF", _String2=".") returned 1 [0170.864] wcscmp (_String1="J0299611.WMF", _String2="..") returned 1 [0170.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9098 [0170.864] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.864] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.864] wcscat (in: _Dest=0x3eb9098, _Source="J0299611.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" [0170.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0170.866] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34f3400, ftCreationTime.dwHighDateTime=0x1bf2cff, ftLastAccessTime.dwLowDateTime=0xbe29c0f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf34f3400, ftLastWriteTime.dwHighDateTime=0x1bf2cff, nFileSizeHigh=0x0, nFileSizeLow=0x4322, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299763.WMF", cAlternateFileName="")) returned 1 [0170.866] wcscmp (_String1="J0299763.WMF", _String2=".") returned 1 [0170.866] wcscmp (_String1="J0299763.WMF", _String2="..") returned 1 [0170.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba440 [0170.866] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.866] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.866] wcscat (in: _Dest=0x3eba440, _Source="J0299763.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" [0170.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0170.867] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85856500, ftCreationTime.dwHighDateTime=0x1bf3a80, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x85856500, ftLastWriteTime.dwHighDateTime=0x1bf3a80, nFileSizeHigh=0x0, nFileSizeLow=0x3465, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300520.GIF", cAlternateFileName="")) returned 1 [0170.867] wcscmp (_String1="J0300520.GIF", _String2=".") returned 1 [0170.868] wcscmp (_String1="J0300520.GIF", _String2="..") returned 1 [0170.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba6e8 [0170.868] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.868] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.868] wcscat (in: _Dest=0x3eba6e8, _Source="J0300520.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" [0170.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0170.869] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eeaf300, ftCreationTime.dwHighDateTime=0x1bf4591, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8eeaf300, ftLastWriteTime.dwHighDateTime=0x1bf4591, nFileSizeHigh=0x0, nFileSizeLow=0x239c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300840.WMF", cAlternateFileName="")) returned 1 [0170.869] wcscmp (_String1="J0300840.WMF", _String2=".") returned 1 [0170.869] wcscmp (_String1="J0300840.WMF", _String2="..") returned 1 [0170.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9bc0 [0170.869] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.869] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.869] wcscat (in: _Dest=0x3eb9bc0, _Source="J0300840.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" [0170.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0170.871] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a13e00, ftCreationTime.dwHighDateTime=0x1bf4591, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf6a13e00, ftLastWriteTime.dwHighDateTime=0x1bf4591, nFileSizeHigh=0x0, nFileSizeLow=0xdafc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300912.WMF", cAlternateFileName="")) returned 1 [0170.871] wcscmp (_String1="J0300912.WMF", _String2=".") returned 1 [0170.871] wcscmp (_String1="J0300912.WMF", _String2="..") returned 1 [0170.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba550 [0170.871] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.871] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.871] wcscat (in: _Dest=0x3eba550, _Source="J0300912.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" [0170.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0170.873] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9068eb00, ftCreationTime.dwHighDateTime=0x1bf4592, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9068eb00, ftLastWriteTime.dwHighDateTime=0x1bf4592, nFileSizeHigh=0x0, nFileSizeLow=0x2fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301050.WMF", cAlternateFileName="")) returned 1 [0170.873] wcscmp (_String1="J0301050.WMF", _String2=".") returned 1 [0170.873] wcscmp (_String1="J0301050.WMF", _String2="..") returned 1 [0170.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9230 [0170.873] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.873] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.873] wcscat (in: _Dest=0x3eb9230, _Source="J0301050.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" [0170.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0170.878] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ace800, ftCreationTime.dwHighDateTime=0x1bf4592, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4ace800, ftLastWriteTime.dwHighDateTime=0x1bf4592, nFileSizeHigh=0x0, nFileSizeLow=0x224e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301076.WMF", cAlternateFileName="")) returned 1 [0170.878] wcscmp (_String1="J0301076.WMF", _String2=".") returned 1 [0170.878] wcscmp (_String1="J0301076.WMF", _String2="..") returned 1 [0170.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba2a8 [0170.878] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.878] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.878] wcscat (in: _Dest=0x3eba2a8, _Source="J0301076.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" [0170.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0170.880] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e535c00, ftCreationTime.dwHighDateTime=0x1bf4593, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8e535c00, ftLastWriteTime.dwHighDateTime=0x1bf4593, nFileSizeHigh=0x0, nFileSizeLow=0x953a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301252.WMF", cAlternateFileName="")) returned 1 [0170.880] wcscmp (_String1="J0301252.WMF", _String2=".") returned 1 [0170.880] wcscmp (_String1="J0301252.WMF", _String2="..") returned 1 [0170.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba770 [0170.880] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.880] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.880] wcscat (in: _Dest=0x3eba770, _Source="J0301252.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" [0170.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0170.882] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8be900, ftCreationTime.dwHighDateTime=0x1bf4594, ftLastAccessTime.dwLowDateTime=0xbe2c2250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a8be900, ftLastWriteTime.dwHighDateTime=0x1bf4594, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301480.WMF", cAlternateFileName="")) returned 1 [0170.882] wcscmp (_String1="J0301480.WMF", _String2=".") returned 1 [0170.882] wcscmp (_String1="J0301480.WMF", _String2="..") returned 1 [0170.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8ce0 [0170.882] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.882] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.882] wcscat (in: _Dest=0x3eb8ce0, _Source="J0301480.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" [0170.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0170.883] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x640a1d00, ftCreationTime.dwHighDateTime=0x1bf4b04, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x640a1d00, ftLastWriteTime.dwHighDateTime=0x1bf4b04, nFileSizeHigh=0x0, nFileSizeLow=0x5a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302827.JPG", cAlternateFileName="")) returned 1 [0170.883] wcscmp (_String1="J0302827.JPG", _String2=".") returned 1 [0170.883] wcscmp (_String1="J0302827.JPG", _String2="..") returned 1 [0170.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba220 [0170.883] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.884] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.884] wcscat (in: _Dest=0x3eba220, _Source="J0302827.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" [0170.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0170.885] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8db7b00, ftCreationTime.dwHighDateTime=0x1bf4bc9, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8db7b00, ftLastWriteTime.dwHighDateTime=0x1bf4bc9, nFileSizeHigh=0x0, nFileSizeLow=0x25c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302953.JPG", cAlternateFileName="")) returned 1 [0170.885] wcscmp (_String1="J0302953.JPG", _String2=".") returned 1 [0170.885] wcscmp (_String1="J0302953.JPG", _String2="..") returned 1 [0170.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9f78 [0170.885] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.885] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.885] wcscat (in: _Dest=0x3eb9f78, _Source="J0302953.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" [0170.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0170.886] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f39bd00, ftCreationTime.dwHighDateTime=0x1bf4596, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f39bd00, ftLastWriteTime.dwHighDateTime=0x1bf4596, nFileSizeHigh=0x0, nFileSizeLow=0x4d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304933.WMF", cAlternateFileName="")) returned 1 [0170.886] wcscmp (_String1="J0304933.WMF", _String2=".") returned 1 [0170.886] wcscmp (_String1="J0304933.WMF", _String2="..") returned 1 [0170.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba330 [0170.886] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.886] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.887] wcscat (in: _Dest=0x3eba330, _Source="J0304933.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" [0170.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0170.888] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe60600, ftCreationTime.dwHighDateTime=0x1bf4597, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcfe60600, ftLastWriteTime.dwHighDateTime=0x1bf4597, nFileSizeHigh=0x0, nFileSizeLow=0x5af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305257.WMF", cAlternateFileName="")) returned 1 [0170.888] wcscmp (_String1="J0305257.WMF", _String2=".") returned 1 [0170.888] wcscmp (_String1="J0305257.WMF", _String2="..") returned 1 [0170.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9670 [0170.888] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.888] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.888] wcscat (in: _Dest=0x3eb9670, _Source="J0305257.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" [0170.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0170.890] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde80ed00, ftCreationTime.dwHighDateTime=0x1bf4598, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde80ed00, ftLastWriteTime.dwHighDateTime=0x1bf4598, nFileSizeHigh=0x0, nFileSizeLow=0x3372, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305493.WMF", cAlternateFileName="")) returned 1 [0170.890] wcscmp (_String1="J0305493.WMF", _String2=".") returned 1 [0170.890] wcscmp (_String1="J0305493.WMF", _String2="..") returned 1 [0170.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9ef0 [0170.890] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.890] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.890] wcscat (in: _Dest=0x3eb9ef0, _Source="J0305493.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" [0170.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0170.891] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d8e6100, ftCreationTime.dwHighDateTime=0x1bf722b, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d8e6100, ftLastWriteTime.dwHighDateTime=0x1bf722b, nFileSizeHigh=0x0, nFileSizeLow=0x60e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315447.JPG", cAlternateFileName="")) returned 1 [0170.891] wcscmp (_String1="J0315447.JPG", _String2=".") returned 1 [0170.891] wcscmp (_String1="J0315447.JPG", _String2="..") returned 1 [0170.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8bd0 [0170.891] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.891] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.891] wcscat (in: _Dest=0x3eb8bd0, _Source="J0315447.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" [0170.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0170.893] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa6fb300, ftCreationTime.dwHighDateTime=0x1bfafbc, ftLastAccessTime.dwLowDateTime=0xbe2e83b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfa6fb300, ftLastWriteTime.dwHighDateTime=0x1bfafbc, nFileSizeHigh=0x0, nFileSizeLow=0x5168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332268.WMF", cAlternateFileName="")) returned 1 [0170.893] wcscmp (_String1="J0332268.WMF", _String2=".") returned 1 [0170.893] wcscmp (_String1="J0332268.WMF", _String2="..") returned 1 [0170.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9890 [0170.893] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.893] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.893] wcscat (in: _Dest=0x3eb9890, _Source="J0332268.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" [0170.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0170.894] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfba0e000, ftCreationTime.dwHighDateTime=0x1bfafbc, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfba0e000, ftLastWriteTime.dwHighDateTime=0x1bfafbc, nFileSizeHigh=0x0, nFileSizeLow=0x47c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332364.WMF", cAlternateFileName="")) returned 1 [0170.894] wcscmp (_String1="J0332364.WMF", _String2=".") returned 1 [0170.894] wcscmp (_String1="J0332364.WMF", _String2="..") returned 1 [0170.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb91a8 [0170.894] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.895] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.895] wcscat (in: _Dest=0x3eb91a8, _Source="J0332364.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" [0170.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0170.896] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5afef000, ftCreationTime.dwHighDateTime=0x1bfafbd, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5afef000, ftLastWriteTime.dwHighDateTime=0x1bfafbd, nFileSizeHigh=0x0, nFileSizeLow=0x1f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0335112.WMF", cAlternateFileName="")) returned 1 [0170.896] wcscmp (_String1="J0335112.WMF", _String2=".") returned 1 [0170.896] wcscmp (_String1="J0335112.WMF", _String2="..") returned 1 [0170.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb95e8 [0170.896] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.896] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.896] wcscat (in: _Dest=0x3eb95e8, _Source="J0335112.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" [0170.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0170.898] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1394200, ftCreationTime.dwHighDateTime=0x1bfafc0, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1394200, ftLastWriteTime.dwHighDateTime=0x1bfafc0, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 1 [0170.898] wcscmp (_String1="J0336075.WMF", _String2=".") returned 1 [0170.898] wcscmp (_String1="J0336075.WMF", _String2="..") returned 1 [0170.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9120 [0170.898] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10" [0170.898] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\" [0170.898] wcscat (in: _Dest=0x3eb9120, _Source="J0336075.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" [0170.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0171.509] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1394200, ftCreationTime.dwHighDateTime=0x1bfafc0, ftLastAccessTime.dwLowDateTime=0xbe30e510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1394200, ftLastWriteTime.dwHighDateTime=0x1bfafc0, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 0 [0171.509] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0172.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54240) returned 1 [0172.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23060) returned 1 [0172.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d78) returned 1 Thread: id = 441 os_tid = 0xfcc [0123.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a230d0 [0123.547] wcscpy (in: _Dest=0x7a230d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0123.548] wcscat (in: _Dest=0x7a230d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0123.548] wcscat (in: _Dest=0x7a230d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*" [0123.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a544a8 [0123.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d440 [0123.556] wcscmp (_String1=".", _String2=".") returned 0 [0123.556] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e499430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.556] wcscmp (_String1="..", _String2=".") returned 1 [0123.556] wcscmp (_String1="..", _String2="..") returned 0 [0123.556] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0123.556] wcscmp (_String1="1033", _String2=".") returned 1 [0123.556] wcscmp (_String1="1033", _String2="..") returned 1 [0123.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d514d0 [0123.556] wcscpy (in: _Dest=0x3d514d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0123.556] wcscat (in: _Dest=0x3d514d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0123.556] wcscat (in: _Dest=0x3d514d0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" [0139.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d514d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0139.609] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76b293d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd799b30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP", cAlternateFileName="")) returned 1 [0139.609] wcscmp (_String1="AUTOSHAP", _String2=".") returned 1 [0139.609] wcscmp (_String1="AUTOSHAP", _String2="..") returned 1 [0139.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da4af0 [0139.609] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0139.609] wcscat (in: _Dest=0x3da4af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0139.609] wcscat (in: _Dest=0x3da4af0, _Source="AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0139.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da4af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0139.610] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS", cAlternateFileName="")) returned 1 [0139.610] wcscmp (_String1="BULLETS", _String2=".") returned 1 [0139.610] wcscmp (_String1="BULLETS", _String2="..") returned 1 [0139.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5c70 [0139.610] wcscpy (in: _Dest=0x3da5c70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0139.610] wcscat (in: _Dest=0x3da5c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0139.610] wcscat (in: _Dest=0x3da5c70, _Source="BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0139.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da5c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2208 [0139.611] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES", cAlternateFileName="")) returned 1 [0139.611] wcscmp (_String1="LINES", _String2=".") returned 1 [0139.612] wcscmp (_String1="LINES", _String2="..") returned 1 [0139.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e1c0 [0139.612] wcscpy (in: _Dest=0x3f3e1c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0139.612] wcscat (in: _Dest=0x3f3e1c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0139.612] wcscat (in: _Dest=0x3f3e1c0, _Source="LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0139.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0139.613] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x39a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.DLL", cAlternateFileName="")) returned 1 [0139.613] wcscmp (_String1="OFFICE10.DLL", _String2=".") returned 1 [0139.613] wcscmp (_String1="OFFICE10.DLL", _String2="..") returned 1 [0139.613] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa13e00, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa13e00, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 1 [0139.613] wcscmp (_String1="OFFICE10.MMW", _String2=".") returned 1 [0139.613] wcscmp (_String1="OFFICE10.MMW", _String2="..") returned 1 [0139.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3be50 [0139.613] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14" [0139.613] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\" [0139.613] wcscat (in: _Dest=0x3f3be50, _Source="OFFICE10.MMW" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" [0139.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2210 [0139.614] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa13e00, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x8e499430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa13e00, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x78450, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MMW", cAlternateFileName="")) returned 0 [0139.614] FindClose (in: hFindFile=0x7a2d440 | out: hFindFile=0x7a2d440) returned 1 [0139.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a544a8) returned 1 [0139.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a230d0) returned 1 [0139.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a265b8) returned 1 Thread: id = 442 os_tid = 0x368 [0123.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee1078 [0123.549] wcscpy (in: _Dest=0x3ee1078, _Source="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0" [0123.549] wcscat (in: _Dest=0x3ee1078, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\" [0123.549] wcscat (in: _Dest=0x3ee1078, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\*") returned="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\*" [0123.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54710 [0123.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0123.549] wcscmp (_String1=".", _String2=".") returned 0 [0123.549] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1e69e00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e8ff60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.549] wcscmp (_String1="..", _String2=".") returned 1 [0123.549] wcscmp (_String1="..", _String2="..") returned 0 [0123.549] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcrobatUpdater.exe", cAlternateFileName="ACROBA~1.EXE")) returned 1 [0123.550] wcscmp (_String1="AcrobatUpdater.exe", _String2=".") returned 1 [0123.550] wcscmp (_String1="AcrobatUpdater.exe", _String2="..") returned 1 [0123.550] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e8ff60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe39c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.exe", cAlternateFileName="")) returned 1 [0123.550] wcscmp (_String1="AdobeARM.exe", _String2=".") returned 1 [0123.550] wcscmp (_String1="AdobeARM.exe", _String2="..") returned 1 [0123.550] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeExtractFiles.dll", cAlternateFileName="ADOBEE~1.DLL")) returned 1 [0123.550] wcscmp (_String1="AdobeExtractFiles.dll", _String2=".") returned 1 [0123.550] wcscmp (_String1="AdobeExtractFiles.dll", _String2="..") returned 1 [0123.550] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0123.550] wcscmp (_String1="ReaderUpdater.exe", _String2=".") returned 1 [0123.550] wcscmp (_String1="ReaderUpdater.exe", _String2="..") returned 1 [0123.550] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderUpdater.exe", cAlternateFileName="READER~1.EXE")) returned 0 [0123.550] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0123.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54710) returned 1 [0123.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 [0123.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 Thread: id = 443 os_tid = 0xfc4 [0123.557] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" (normalized: "c:\\users\\eebsym5\\contacts\\administrator.contact")) returned 0x20 [0123.557] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact", dwFileAttributes=0x20) returned 1 [0128.343] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\Administrator.contact" (normalized: "c:\\users\\eebsym5\\contacts\\administrator.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd8 [0128.343] GetFileSizeEx (in: hFile=0xcd8, lpFileSize=0xa9cfd6c | out: lpFileSize=0xa9cfd6c*=68382) returned 1 [0128.343] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x10b1a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.343] ReadFile (in: hFile=0xcd8, lpBuffer=0xa9cfd48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa9cfd58, lpOverlapped=0x0 | out: lpBuffer=0xa9cfd48*, lpNumberOfBytesRead=0xa9cfd58*=0x4, lpOverlapped=0x0) returned 1 [0128.346] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4bb8 [0128.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0128.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0128.346] NtQuerySystemTime (in: CurrentTime=0xa9cfce0 | out: CurrentTime=0xa9cfce0*=132462177077316000) returned 0x0 [0128.346] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x256a8e5b [0128.346] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x5e81fd58 [0128.346] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x3bc54393 [0128.346] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x7a39613 [0128.346] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x5a5da2be [0128.346] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x2d206807 [0128.346] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x307727c6 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x128e5157 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x362d47a2 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x9ce57f2 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x223e7cf [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x27306038 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x31fe47a3 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x5a144090 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x733b8921 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x3955675 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0xecef9e8 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x3f7feb89 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x1b2e8978 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x65d1e3b6 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x5c0f7924 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x7c9c997b [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x39efb552 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x4b6737d [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x1b536856 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x47f0285 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x871b711 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x45d2aec6 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x56ce5b0e [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x2bcd81c9 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x51000537 [0128.347] RtlRandomEx (in: Seed=0xa9cfcd8 | out: Seed=0xa9cfcd8) returned 0x20861375 [0128.360] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.360] ReadFile (in: hFile=0xcd8, lpBuffer=0x7c72798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa9cfce0, lpOverlapped=0x0 | out: lpBuffer=0x7c72798*, lpNumberOfBytesRead=0xa9cfce0*=0x3c00, lpOverlapped=0x0) returned 1 [0128.361] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f88 [0128.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0128.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4bb8 [0128.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4bb8) returned 1 [0128.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c763a0 [0128.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4bb8 [0128.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0128.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0128.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f88) returned 1 [0128.362] WriteFile (in: hFile=0xcd8, lpBuffer=0x7c763a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa9cfce0, lpOverlapped=0x0 | out: lpBuffer=0x7c763a0*, lpNumberOfBytesWritten=0xa9cfce0*=0x3c00, lpOverlapped=0x0) returned 1 [0128.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c763a0) returned 1 [0128.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c72798) returned 1 [0128.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d800 [0128.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0128.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2dac0 [0128.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0128.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0128.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0128.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f88) returned 1 [0128.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55278 [0128.366] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.366] WriteFile (in: hFile=0xcd8, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xa9cfd60, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0xa9cfd60*=0x11c, lpOverlapped=0x0) returned 1 [0134.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24158 [0134.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0134.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0134.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c50) returned 1 [0134.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac3e8 [0134.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0134.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b60 [0134.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b60) returned 1 [0134.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0134.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24158) returned 1 [0134.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe7088 [0134.100] sprintf (in: _Dest=0x2fe7088, _Format="%c%c" | out: _Dest="23") returned 2 [0134.100] sprintf (in: _Dest=0x2fe708a, _Format="%c%c" | out: _Dest="58") returned 2 [0134.100] sprintf (in: _Dest=0x2fe708c, _Format="%c%c" | out: _Dest="b4") returned 2 [0134.100] sprintf (in: _Dest=0x2fe708e, _Format="%c%c" | out: _Dest="62") returned 2 [0134.100] sprintf (in: _Dest=0x2fe7090, _Format="%c%c" | out: _Dest="74") returned 2 [0134.100] sprintf (in: _Dest=0x2fe7092, _Format="%c%c" | out: _Dest="9c") returned 2 [0134.100] sprintf (in: _Dest=0x2fe7094, _Format="%c%c" | out: _Dest="48") returned 2 [0134.100] sprintf (in: _Dest=0x2fe7096, _Format="%c%c" | out: _Dest="f4") returned 2 [0134.100] sprintf (in: _Dest=0x2fe7098, _Format="%c%c" | out: _Dest="46") returned 2 [0134.100] sprintf (in: _Dest=0x2fe709a, _Format="%c%c" | out: _Dest="39") returned 2 [0134.100] sprintf (in: _Dest=0x2fe709c, _Format="%c%c" | out: _Dest="48") returned 2 [0134.100] sprintf (in: _Dest=0x2fe709e, _Format="%c%c" | out: _Dest="7f") returned 2 [0134.100] sprintf (in: _Dest=0x2fe70a0, _Format="%c%c" | out: _Dest="05") returned 2 [0134.100] sprintf (in: _Dest=0x2fe70a2, _Format="%c%c" | out: _Dest="63") returned 2 [0134.100] sprintf (in: _Dest=0x2fe70a4, _Format="%c%c" | out: _Dest="42") returned 2 [0134.100] sprintf (in: _Dest=0x2fe70a6, _Format="%c%c" | out: _Dest="dc") returned 2 [0134.100] sprintf (in: _Dest=0x2fe70a8, _Format="%c%c" | out: _Dest="94") returned 2 [0134.100] sprintf (in: _Dest=0x2fe70aa, _Format="%c%c" | out: _Dest="a3") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70ac, _Format="%c%c" | out: _Dest="d2") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70ae, _Format="%c%c" | out: _Dest="7f") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70b0, _Format="%c%c" | out: _Dest="2f") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70b2, _Format="%c%c" | out: _Dest="57") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70b4, _Format="%c%c" | out: _Dest="ae") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70b6, _Format="%c%c" | out: _Dest="2f") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70b8, _Format="%c%c" | out: _Dest="6d") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70ba, _Format="%c%c" | out: _Dest="a7") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70bc, _Format="%c%c" | out: _Dest="a7") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70be, _Format="%c%c" | out: _Dest="8f") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70c0, _Format="%c%c" | out: _Dest="47") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70c2, _Format="%c%c" | out: _Dest="48") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70c4, _Format="%c%c" | out: _Dest="f4") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70c6, _Format="%c%c" | out: _Dest="38") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70c8, _Format="%c%c" | out: _Dest="bc") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70ca, _Format="%c%c" | out: _Dest="26") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70cc, _Format="%c%c" | out: _Dest="ec") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70ce, _Format="%c%c" | out: _Dest="e3") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70d0, _Format="%c%c" | out: _Dest="fd") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70d2, _Format="%c%c" | out: _Dest="26") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70d4, _Format="%c%c" | out: _Dest="0c") returned 2 [0134.101] sprintf (in: _Dest=0x2fe70d6, _Format="%c%c" | out: _Dest="24") returned 2 [0134.102] sprintf (in: _Dest=0x2fe70d8, _Format="%c%c" | out: _Dest="e3") returned 2 [0134.102] sprintf (in: _Dest=0x2fe70da, _Format="%c%c" | out: _Dest="e9") returned 2 [0134.102] RtlInitAnsiString (in: DestinationString=0xa9cfce8, SourceString="2358b462749c48f44639487f056342dc94a3d27f2f57ae2f6da7a78f4748f438bc26ece3fd260c24e3e9" | out: DestinationString="2358b462749c48f44639487f056342dc94a3d27f2f57ae2f6da7a78f4748f438bc26ece3fd260c24e3e9") [0134.102] RtlAnsiStringToUnicodeString (in: DestinationString=0xa9cfce0, SourceString="2358b462749c48f44639487f056342dc94a3d27f2f57ae2f6da7a78f4748f438bc26ece3fd260c24e3e9", AllocateDestinationString=1 | out: DestinationString="2358b462749c48f44639487f056342dc94a3d27f2f57ae2f6da7a78f4748f438bc26ece3fd260c24e3e9") returned 0x0 [0134.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6e70 [0134.102] wcscat (in: _Dest=0x3f3fb00, _Source="2358b462749c48f446394" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\2358b462749c48f446394") returned="C:\\Users\\EEBsYm5\\Contacts\\2358b462749c48f446394" [0134.102] wcscat (in: _Dest=0x3f3fb00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\2358b462749c48f446394.68814f") returned="C:\\Users\\EEBsYm5\\Contacts\\2358b462749c48f446394.68814f" [0134.102] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\2358b462749c48f446394.68814f", NtPathName=0xa9cfcd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\2358b462749c48f446394.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45920 [0134.102] NtSetInformationFile (FileHandle=0xcd8, IoStatusBlock=0xa9cfce0, FileInformation=0x3d45920, Length=0x84, FileInformationClass=0xa) returned 0x0 [0134.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 [0134.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7fd0) returned 1 [0134.109] NtQueryInformationFile (in: FileHandle=0xcd8, IoStatusBlock=0xa9cfcb0, FileInformation=0xa9cfcb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa9cfcb0, FileInformation=0xa9cfcb8) returned 0x0 [0134.109] NtSetInformationFile (FileHandle=0xcd8, IoStatusBlock=0xa9cfcb0, FileInformation=0xa9cfcb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0134.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 [0134.112] FlushFileBuffers (hFile=0xcd8) returned 1 [0135.674] CloseHandle (hObject=0xcd8) returned 1 [0135.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0e08 [0135.675] wcscpy (in: _Dest=0x3ee0e08, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0135.675] wcscat (in: _Dest=0x3ee0e08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" [0135.675] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\68814f-readme.txt")) returned 0x20 [0135.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0e08) returned 1 [0135.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0108) returned 1 Thread: id = 444 os_tid = 0xf70 [0123.557] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ihnvbh euuncnh.contact")) returned 0x20 [0123.565] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact", dwFileAttributes=0x20) returned 1 [0127.719] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ihnvbh euuncnh.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ihnvbh euuncnh.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd0 [0127.719] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0x5c4fc74 | out: lpFileSize=0x5c4fc74*=1259) returned 1 [0127.719] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x4e7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.719] ReadFile (in: hFile=0xcd0, lpBuffer=0x5c4fc50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5c4fc60, lpOverlapped=0x0 | out: lpBuffer=0x5c4fc50*, lpNumberOfBytesRead=0x5c4fc60*=0x4, lpOverlapped=0x0) returned 1 [0127.722] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0127.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0127.723] NtQuerySystemTime (in: CurrentTime=0x5c4fbe8 | out: CurrentTime=0x5c4fbe8*=132462177071076000) returned 0x0 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x1ce8cde7 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x36732ad3 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x3adbc8eb [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x33c8c47f [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x3788dca9 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0xc99de8d [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x4a999a91 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x5fc9e061 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x789c8c2b [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x51656a02 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x66e60020 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x2e9f305 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x7fcc1c58 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x26cf164b [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x46de8b94 [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x3cfd350c [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x1d03ad4a [0127.723] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0xa39a572 [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x33ef4bab [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x2afed18c [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x16ba5550 [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x6b8cdf9b [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x19d857b8 [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x62f0cee7 [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x3b5bd705 [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x60daacdd [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x14a21e4a [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x292814cb [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x77412dec [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x240a99e1 [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x1e19ec8d [0127.724] RtlRandomEx (in: Seed=0x5c4fbe0 | out: Seed=0x5c4fbe0) returned 0x6f33dffe [0127.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c79fa8 [0127.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c7dbb0 [0127.738] ReadFile (in: hFile=0xcd0, lpBuffer=0x7c79fa8, nNumberOfBytesToRead=0x4eb, lpNumberOfBytesRead=0x5c4fbdc, lpOverlapped=0x0 | out: lpBuffer=0x7c79fa8*, lpNumberOfBytesRead=0x5c4fbdc*=0x4eb, lpOverlapped=0x0) returned 1 [0127.738] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.738] WriteFile (in: hFile=0xcd0, lpBuffer=0x7c7dbb0*, nNumberOfBytesToWrite=0x4eb, lpNumberOfBytesWritten=0x5c4fbe0, lpOverlapped=0x0 | out: lpBuffer=0x7c7dbb0*, lpNumberOfBytesWritten=0x5c4fbe0*=0x4eb, lpOverlapped=0x0) returned 1 [0129.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c270 [0129.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0129.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0129.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c7dbb0) returned 1 [0129.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c79fa8) returned 1 [0129.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0129.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48c30) returned 1 [0129.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e48c30 [0129.453] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.453] WriteFile (in: hFile=0xcd0, lpBuffer=0x3d55150*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x5c4fc68, lpOverlapped=0x0 | out: lpBuffer=0x3d55150*, lpNumberOfBytesWritten=0x5c4fc68*=0x11e, lpOverlapped=0x0) returned 1 [0130.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e079f8 [0130.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0130.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0130.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0130.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3013f88 [0130.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0130.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0130.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b960) returned 1 [0130.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0130.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e079f8) returned 1 [0130.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3edf9b8 [0130.698] sprintf (in: _Dest=0x3edf9b8, _Format="%c%c" | out: _Dest="20") returned 2 [0130.698] sprintf (in: _Dest=0x3edf9ba, _Format="%c%c" | out: _Dest="77") returned 2 [0130.698] sprintf (in: _Dest=0x3edf9bc, _Format="%c%c" | out: _Dest="23") returned 2 [0130.698] sprintf (in: _Dest=0x3edf9be, _Format="%c%c" | out: _Dest="12") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9c0, _Format="%c%c" | out: _Dest="ce") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9c2, _Format="%c%c" | out: _Dest="cf") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9c4, _Format="%c%c" | out: _Dest="50") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9c6, _Format="%c%c" | out: _Dest="c4") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9c8, _Format="%c%c" | out: _Dest="77") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9ca, _Format="%c%c" | out: _Dest="dc") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9cc, _Format="%c%c" | out: _Dest="c4") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9ce, _Format="%c%c" | out: _Dest="8d") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9d0, _Format="%c%c" | out: _Dest="33") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9d2, _Format="%c%c" | out: _Dest="14") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9d4, _Format="%c%c" | out: _Dest="d1") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9d6, _Format="%c%c" | out: _Dest="00") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9d8, _Format="%c%c" | out: _Dest="85") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9da, _Format="%c%c" | out: _Dest="c9") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9dc, _Format="%c%c" | out: _Dest="99") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9de, _Format="%c%c" | out: _Dest="5e") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9e0, _Format="%c%c" | out: _Dest="69") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9e2, _Format="%c%c" | out: _Dest="b9") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9e4, _Format="%c%c" | out: _Dest="4e") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9e6, _Format="%c%c" | out: _Dest="7c") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9e8, _Format="%c%c" | out: _Dest="66") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9ea, _Format="%c%c" | out: _Dest="98") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9ec, _Format="%c%c" | out: _Dest="c6") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9ee, _Format="%c%c" | out: _Dest="29") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9f0, _Format="%c%c" | out: _Dest="b6") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9f2, _Format="%c%c" | out: _Dest="b1") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9f4, _Format="%c%c" | out: _Dest="22") returned 2 [0130.699] sprintf (in: _Dest=0x3edf9f6, _Format="%c%c" | out: _Dest="d9") returned 2 [0130.700] sprintf (in: _Dest=0x3edf9f8, _Format="%c%c" | out: _Dest="b5") returned 2 [0130.700] sprintf (in: _Dest=0x3edf9fa, _Format="%c%c" | out: _Dest="70") returned 2 [0130.700] sprintf (in: _Dest=0x3edf9fc, _Format="%c%c" | out: _Dest="23") returned 2 [0130.700] sprintf (in: _Dest=0x3edf9fe, _Format="%c%c" | out: _Dest="93") returned 2 [0130.700] sprintf (in: _Dest=0x3edfa00, _Format="%c%c" | out: _Dest="32") returned 2 [0130.700] sprintf (in: _Dest=0x3edfa02, _Format="%c%c" | out: _Dest="91") returned 2 [0130.700] sprintf (in: _Dest=0x3edfa04, _Format="%c%c" | out: _Dest="c5") returned 2 [0130.700] sprintf (in: _Dest=0x3edfa06, _Format="%c%c" | out: _Dest="23") returned 2 [0130.700] sprintf (in: _Dest=0x3edfa08, _Format="%c%c" | out: _Dest="ca") returned 2 [0130.700] sprintf (in: _Dest=0x3edfa0a, _Format="%c%c" | out: _Dest="1f") returned 2 [0130.700] sprintf (in: _Dest=0x3edfa0c, _Format="%c%c" | out: _Dest="a2") returned 2 [0130.700] sprintf (in: _Dest=0x3edfa0e, _Format="%c%c" | out: _Dest="ed") returned 2 [0130.700] RtlInitAnsiString (in: DestinationString=0x5c4fbf0, SourceString="20772312cecf50c477dcc48d3314d10085c9995e69b94e7c6698c629b6b122d9b57023933291c523ca1fa2ed" | out: DestinationString="20772312cecf50c477dcc48d3314d10085c9995e69b94e7c6698c629b6b122d9b57023933291c523ca1fa2ed") [0130.700] RtlAnsiStringToUnicodeString (in: DestinationString=0x5c4fbe8, SourceString="20772312cecf50c477dcc48d3314d10085c9995e69b94e7c6698c629b6b122d9b57023933291c523ca1fa2ed", AllocateDestinationString=1 | out: DestinationString="20772312cecf50c477dcc48d3314d10085c9995e69b94e7c6698c629b6b122d9b57023933291c523ca1fa2ed") returned 0x0 [0130.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66558 [0130.700] wcscat (in: _Dest=0x3f3f470, _Source="20772312cecf50c477dcc4" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\20772312cecf50c477dcc4") returned="C:\\Users\\EEBsYm5\\Contacts\\20772312cecf50c477dcc4" [0130.700] wcscat (in: _Dest=0x3f3f470, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\20772312cecf50c477dcc4.68814f") returned="C:\\Users\\EEBsYm5\\Contacts\\20772312cecf50c477dcc4.68814f" [0130.700] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\20772312cecf50c477dcc4.68814f", NtPathName=0x5c4fbe0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\20772312cecf50c477dcc4.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45920 [0130.700] NtSetInformationFile (FileHandle=0xcd0, IoStatusBlock=0x5c4fbe8, FileInformation=0x3d45920, Length=0x86, FileInformationClass=0xa) returned 0x0 [0130.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 [0130.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8f830) returned 1 [0130.702] NtQueryInformationFile (in: FileHandle=0xcd0, IoStatusBlock=0x5c4fbb8, FileInformation=0x5c4fbc0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5c4fbb8, FileInformation=0x5c4fbc0) returned 0x0 [0130.702] NtSetInformationFile (FileHandle=0xcd0, IoStatusBlock=0x5c4fbb8, FileInformation=0x5c4fbc0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0130.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 [0130.703] FlushFileBuffers (hFile=0xcd0) returned 1 [0130.746] CloseHandle (hObject=0xcd0) returned 1 [0130.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf9b8 [0130.749] wcscpy (in: _Dest=0x3edf9b8, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0130.749] wcscat (in: _Dest=0x3edf9b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" [0130.749] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\68814f-readme.txt")) returned 0x20 [0130.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf9b8) returned 1 [0130.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 Thread: id = 445 os_tid = 0xf78 [0123.558] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" (normalized: "c:\\users\\eebsym5\\contacts\\lodkd auftnm.contact")) returned 0x20 [0123.565] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact", dwFileAttributes=0x20) returned 1 [0127.666] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\lodkd auftnm.contact" (normalized: "c:\\users\\eebsym5\\contacts\\lodkd auftnm.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcac [0127.666] GetFileSizeEx (in: hFile=0xcac, lpFileSize=0x9fdfe6c | out: lpFileSize=0x9fdfe6c*=1256) returned 1 [0127.667] SetFilePointerEx (in: hFile=0xcac, liDistanceToMove=0x4e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.667] ReadFile (in: hFile=0xcac, lpBuffer=0x9fdfe48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9fdfe58, lpOverlapped=0x0 | out: lpBuffer=0x9fdfe48*, lpNumberOfBytesRead=0x9fdfe58*=0x4, lpOverlapped=0x0) returned 1 [0127.674] SetFilePointerEx (in: hFile=0xcac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0127.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0127.674] NtQuerySystemTime (in: CurrentTime=0x9fdfde0 | out: CurrentTime=0x9fdfde0*=132462177070608000) returned 0x0 [0127.674] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x69326cdc [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x3ab14f75 [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x1a74583d [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x179f33d1 [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x718ebf1d [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x584cccbb [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x1428f05e [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x1b4c53a3 [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x1b3c353d [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x277368eb [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x6287d5 [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x2a937597 [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x70d7dda4 [0127.675] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x5793469e [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x3b7fffb2 [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x75be176b [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x667d31e5 [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x23d1cb76 [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x10d26a2c [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x6a67a43c [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x3283ae82 [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x20ab983a [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x3042dee5 [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x363244e3 [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x43bf512 [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x5d2b428f [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x698a3419 [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x41332187 [0127.676] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x10581783 [0127.677] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x1af50318 [0127.677] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x39e7ef98 [0127.677] RtlRandomEx (in: Seed=0x9fdfdd8 | out: Seed=0x9fdfdd8) returned 0x76981acd [0127.692] ReadFile (in: hFile=0xcac, lpBuffer=0x7c6af88, nNumberOfBytesToRead=0x4e8, lpNumberOfBytesRead=0x9fdfdd4, lpOverlapped=0x0 | out: lpBuffer=0x7c6af88*, lpNumberOfBytesRead=0x9fdfdd4*=0x4e8, lpOverlapped=0x0) returned 1 [0127.692] SetFilePointerEx (in: hFile=0xcac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.692] WriteFile (in: hFile=0xcac, lpBuffer=0x7c6eb90*, nNumberOfBytesToWrite=0x4e8, lpNumberOfBytesWritten=0x9fdfdd8, lpOverlapped=0x0 | out: lpBuffer=0x7c6eb90*, lpNumberOfBytesWritten=0x9fdfdd8*=0x4e8, lpOverlapped=0x0) returned 1 [0127.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0127.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0127.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0127.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c6eb90) returned 1 [0127.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c6af88) returned 1 [0127.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0127.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56498) returned 1 [0127.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2da80 [0127.851] SetFilePointerEx (in: hFile=0xcac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.852] WriteFile (in: hFile=0xcac, lpBuffer=0x3d55028*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x9fdfe60, lpOverlapped=0x0 | out: lpBuffer=0x3d55028*, lpNumberOfBytesWritten=0x9fdfe60*=0x11a, lpOverlapped=0x0) returned 1 [0127.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3010 [0127.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3010) returned 1 [0127.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86788 [0127.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3010 [0127.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0127.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0127.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe5948 [0127.927] sprintf (in: _Dest=0x2fe5948, _Format="%c%c" | out: _Dest="70") returned 2 [0127.927] sprintf (in: _Dest=0x2fe594a, _Format="%c%c" | out: _Dest="59") returned 2 [0127.927] sprintf (in: _Dest=0x2fe594c, _Format="%c%c" | out: _Dest="4b") returned 2 [0127.928] sprintf (in: _Dest=0x2fe594e, _Format="%c%c" | out: _Dest="87") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5950, _Format="%c%c" | out: _Dest="30") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5952, _Format="%c%c" | out: _Dest="60") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5954, _Format="%c%c" | out: _Dest="1a") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5956, _Format="%c%c" | out: _Dest="51") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5958, _Format="%c%c" | out: _Dest="2b") returned 2 [0127.928] sprintf (in: _Dest=0x2fe595a, _Format="%c%c" | out: _Dest="93") returned 2 [0127.928] sprintf (in: _Dest=0x2fe595c, _Format="%c%c" | out: _Dest="e5") returned 2 [0127.928] sprintf (in: _Dest=0x2fe595e, _Format="%c%c" | out: _Dest="0e") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5960, _Format="%c%c" | out: _Dest="a0") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5962, _Format="%c%c" | out: _Dest="a8") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5964, _Format="%c%c" | out: _Dest="c7") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5966, _Format="%c%c" | out: _Dest="15") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5968, _Format="%c%c" | out: _Dest="2b") returned 2 [0127.928] sprintf (in: _Dest=0x2fe596a, _Format="%c%c" | out: _Dest="a6") returned 2 [0127.928] sprintf (in: _Dest=0x2fe596c, _Format="%c%c" | out: _Dest="28") returned 2 [0127.928] sprintf (in: _Dest=0x2fe596e, _Format="%c%c" | out: _Dest="e8") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5970, _Format="%c%c" | out: _Dest="14") returned 2 [0127.928] sprintf (in: _Dest=0x2fe5972, _Format="%c%c" | out: _Dest="cc") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5974, _Format="%c%c" | out: _Dest="34") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5976, _Format="%c%c" | out: _Dest="c3") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5978, _Format="%c%c" | out: _Dest="5a") returned 2 [0127.929] sprintf (in: _Dest=0x2fe597a, _Format="%c%c" | out: _Dest="c1") returned 2 [0127.929] sprintf (in: _Dest=0x2fe597c, _Format="%c%c" | out: _Dest="ae") returned 2 [0127.929] sprintf (in: _Dest=0x2fe597e, _Format="%c%c" | out: _Dest="90") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5980, _Format="%c%c" | out: _Dest="91") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5982, _Format="%c%c" | out: _Dest="e1") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5984, _Format="%c%c" | out: _Dest="05") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5986, _Format="%c%c" | out: _Dest="64") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5988, _Format="%c%c" | out: _Dest="09") returned 2 [0127.929] sprintf (in: _Dest=0x2fe598a, _Format="%c%c" | out: _Dest="5d") returned 2 [0127.929] sprintf (in: _Dest=0x2fe598c, _Format="%c%c" | out: _Dest="3a") returned 2 [0127.929] sprintf (in: _Dest=0x2fe598e, _Format="%c%c" | out: _Dest="de") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5990, _Format="%c%c" | out: _Dest="64") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5992, _Format="%c%c" | out: _Dest="2c") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5994, _Format="%c%c" | out: _Dest="09") returned 2 [0127.929] sprintf (in: _Dest=0x2fe5996, _Format="%c%c" | out: _Dest="8b") returned 2 [0127.930] RtlInitAnsiString (in: DestinationString=0x9fdfde8, SourceString="70594b8730601a512b93e50ea0a8c7152ba628e814cc34c35ac1ae9091e10564095d3ade642c098b" | out: DestinationString="70594b8730601a512b93e50ea0a8c7152ba628e814cc34c35ac1ae9091e10564095d3ade642c098b") [0127.930] RtlAnsiStringToUnicodeString (in: DestinationString=0x9fdfde0, SourceString="70594b8730601a512b93e50ea0a8c7152ba628e814cc34c35ac1ae9091e10564095d3ade642c098b", AllocateDestinationString=1 | out: DestinationString="70594b8730601a512b93e50ea0a8c7152ba628e814cc34c35ac1ae9091e10564095d3ade642c098b") returned 0x0 [0127.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x3e3c670 [0127.930] wcscat (in: _Dest=0x3f3e5f8, _Source="70594b8730601a512b93" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\70594b8730601a512b93") returned="C:\\Users\\EEBsYm5\\Contacts\\70594b8730601a512b93" [0127.930] wcscat (in: _Dest=0x3f3e5f8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\70594b8730601a512b93.68814f") returned="C:\\Users\\EEBsYm5\\Contacts\\70594b8730601a512b93.68814f" [0127.930] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\70594b8730601a512b93.68814f", NtPathName=0x9fdfdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\70594b8730601a512b93.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44ba0 [0127.930] NtSetInformationFile (FileHandle=0xcac, IoStatusBlock=0x9fdfde0, FileInformation=0x3d44ba0, Length=0x82, FileInformationClass=0xa) returned 0x0 [0127.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 [0127.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03998) returned 1 [0127.967] NtQueryInformationFile (in: FileHandle=0xcac, IoStatusBlock=0x9fdfdb0, FileInformation=0x9fdfdb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9fdfdb0, FileInformation=0x9fdfdb8) returned 0x0 [0127.967] NtSetInformationFile (FileHandle=0xcac, IoStatusBlock=0x9fdfdb0, FileInformation=0x9fdfdb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0127.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c670) returned 1 [0127.986] FlushFileBuffers (hFile=0xcac) returned 1 [0127.994] CloseHandle (hObject=0xcac) returned 1 [0128.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0ac8 [0128.009] wcscpy (in: _Dest=0x3ee0ac8, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0128.009] wcscat (in: _Dest=0x3ee0ac8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" [0128.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\68814f-readme.txt")) returned 0xffffffff [0128.009] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcac [0128.018] WriteFile (in: hFile=0xcac, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9fdfdf4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9fdfdf4*=0x8b9, lpOverlapped=0x0) returned 1 [0128.033] CloseHandle (hObject=0xcac) returned 1 [0128.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0ac8) returned 1 [0128.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf2d0) returned 1 Thread: id = 446 os_tid = 0xf84 [0123.559] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" (normalized: "c:\\users\\eebsym5\\contacts\\mneuc uhnfghgg.contact")) returned 0x20 [0123.564] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact", dwFileAttributes=0x20) returned 1 [0126.187] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\mneuc uhnfghgg.contact" (normalized: "c:\\users\\eebsym5\\contacts\\mneuc uhnfghgg.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xce0 [0126.187] GetFileSizeEx (in: hFile=0xce0, lpFileSize=0xac7f94c | out: lpFileSize=0xac7f94c*=1257) returned 1 [0126.187] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x4e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.187] ReadFile (in: hFile=0xce0, lpBuffer=0xac7f928, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac7f938, lpOverlapped=0x0 | out: lpBuffer=0xac7f928*, lpNumberOfBytesRead=0xac7f938*=0x4, lpOverlapped=0x0) returned 1 [0126.237] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0126.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edddd0 [0126.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbd28 [0126.238] NtQuerySystemTime (in: CurrentTime=0xac7f8c0 | out: CurrentTime=0xac7f8c0*=132462177056412000) returned 0x0 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0xfa741a [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x741d289e [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x60058837 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x65a25abd [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x3248b702 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x1fbc670c [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x44a58a1a [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x5c86dbf9 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x3cfaf4e6 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x1420986 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0xe769f6c [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x2f71fa2 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x5f8d6b69 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x4722bb62 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x6fd2d43e [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x3a65f252 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x38d51d57 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x3d41c4af [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x2407a303 [0126.238] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x1f881fd [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x44e0b411 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x37c952e5 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x5acefbe1 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x60dba636 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x52226dc8 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x74e76d19 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x140d51e2 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x26e2d8b3 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x28335688 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x3ce697d3 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x399447a8 [0126.239] RtlRandomEx (in: Seed=0xac7f8b8 | out: Seed=0xac7f8b8) returned 0x6e696b93 [0126.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc68) returned 1 [0126.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a48c60 [0126.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a5e078 [0126.337] ReadFile (in: hFile=0xce0, lpBuffer=0x7a48c60, nNumberOfBytesToRead=0x4e9, lpNumberOfBytesRead=0xac7f8b4, lpOverlapped=0x0 | out: lpBuffer=0x7a48c60*, lpNumberOfBytesRead=0xac7f8b4*=0x4e9, lpOverlapped=0x0) returned 1 [0126.337] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.337] WriteFile (in: hFile=0xce0, lpBuffer=0x7a5e078*, nNumberOfBytesToWrite=0x4e9, lpNumberOfBytesWritten=0xac7f8b8, lpOverlapped=0x0 | out: lpBuffer=0x7a5e078*, lpNumberOfBytesWritten=0xac7f8b8*=0x4e9, lpOverlapped=0x0) returned 1 [0129.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0129.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6d0 [0129.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6d0) returned 1 [0129.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e078) returned 1 [0129.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a48c60) returned 1 [0129.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0129.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0129.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e853e0 [0129.974] SetFilePointerEx (in: hFile=0xce0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.974] WriteFile (in: hFile=0xce0, lpBuffer=0x30413a8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xac7f940, lpOverlapped=0x0 | out: lpBuffer=0x30413a8*, lpNumberOfBytesWritten=0xac7f940*=0x11e, lpOverlapped=0x0) returned 1 [0130.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85a58 [0130.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0130.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddec0 [0130.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddec0) returned 1 [0130.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x7ad7120 [0130.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddec0 [0130.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde48 [0130.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edde48) returned 1 [0130.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0130.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0130.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3d46a88 [0130.133] sprintf (in: _Dest=0x3d46a88, _Format="%c%c" | out: _Dest="71") returned 2 [0130.133] sprintf (in: _Dest=0x3d46a8a, _Format="%c%c" | out: _Dest="60") returned 2 [0130.133] sprintf (in: _Dest=0x3d46a8c, _Format="%c%c" | out: _Dest="ee") returned 2 [0130.133] sprintf (in: _Dest=0x3d46a8e, _Format="%c%c" | out: _Dest="0d") returned 2 [0130.133] sprintf (in: _Dest=0x3d46a90, _Format="%c%c" | out: _Dest="7a") returned 2 [0130.133] sprintf (in: _Dest=0x3d46a92, _Format="%c%c" | out: _Dest="db") returned 2 [0130.133] sprintf (in: _Dest=0x3d46a94, _Format="%c%c" | out: _Dest="46") returned 2 [0130.133] sprintf (in: _Dest=0x3d46a96, _Format="%c%c" | out: _Dest="3c") returned 2 [0130.133] sprintf (in: _Dest=0x3d46a98, _Format="%c%c" | out: _Dest="94") returned 2 [0130.133] sprintf (in: _Dest=0x3d46a9a, _Format="%c%c" | out: _Dest="1b") returned 2 [0130.133] sprintf (in: _Dest=0x3d46a9c, _Format="%c%c" | out: _Dest="81") returned 2 [0130.134] sprintf (in: _Dest=0x3d46a9e, _Format="%c%c" | out: _Dest="90") returned 2 [0130.134] sprintf (in: _Dest=0x3d46aa0, _Format="%c%c" | out: _Dest="53") returned 2 [0130.134] sprintf (in: _Dest=0x3d46aa2, _Format="%c%c" | out: _Dest="3d") returned 2 [0130.134] sprintf (in: _Dest=0x3d46aa4, _Format="%c%c" | out: _Dest="26") returned 2 [0130.134] sprintf (in: _Dest=0x3d46aa6, _Format="%c%c" | out: _Dest="3d") returned 2 [0130.134] sprintf (in: _Dest=0x3d46aa8, _Format="%c%c" | out: _Dest="c5") returned 2 [0130.134] sprintf (in: _Dest=0x3d46aaa, _Format="%c%c" | out: _Dest="cd") returned 2 [0130.134] sprintf (in: _Dest=0x3d46aac, _Format="%c%c" | out: _Dest="51") returned 2 [0130.134] sprintf (in: _Dest=0x3d46aae, _Format="%c%c" | out: _Dest="90") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ab0, _Format="%c%c" | out: _Dest="b7") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ab2, _Format="%c%c" | out: _Dest="87") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ab4, _Format="%c%c" | out: _Dest="ad") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ab6, _Format="%c%c" | out: _Dest="47") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ab8, _Format="%c%c" | out: _Dest="a9") returned 2 [0130.134] sprintf (in: _Dest=0x3d46aba, _Format="%c%c" | out: _Dest="20") returned 2 [0130.134] sprintf (in: _Dest=0x3d46abc, _Format="%c%c" | out: _Dest="83") returned 2 [0130.134] sprintf (in: _Dest=0x3d46abe, _Format="%c%c" | out: _Dest="85") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ac0, _Format="%c%c" | out: _Dest="d1") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ac2, _Format="%c%c" | out: _Dest="b8") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ac4, _Format="%c%c" | out: _Dest="71") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ac6, _Format="%c%c" | out: _Dest="b1") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ac8, _Format="%c%c" | out: _Dest="07") returned 2 [0130.134] sprintf (in: _Dest=0x3d46aca, _Format="%c%c" | out: _Dest="e9") returned 2 [0130.134] sprintf (in: _Dest=0x3d46acc, _Format="%c%c" | out: _Dest="2a") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ace, _Format="%c%c" | out: _Dest="0e") returned 2 [0130.134] sprintf (in: _Dest=0x3d46ad0, _Format="%c%c" | out: _Dest="fe") returned 2 [0130.135] sprintf (in: _Dest=0x3d46ad2, _Format="%c%c" | out: _Dest="af") returned 2 [0130.135] sprintf (in: _Dest=0x3d46ad4, _Format="%c%c" | out: _Dest="5b") returned 2 [0130.135] sprintf (in: _Dest=0x3d46ad6, _Format="%c%c" | out: _Dest="98") returned 2 [0130.135] sprintf (in: _Dest=0x3d46ad8, _Format="%c%c" | out: _Dest="84") returned 2 [0130.135] sprintf (in: _Dest=0x3d46ada, _Format="%c%c" | out: _Dest="e4") returned 2 [0130.135] sprintf (in: _Dest=0x3d46adc, _Format="%c%c" | out: _Dest="b7") returned 2 [0130.135] sprintf (in: _Dest=0x3d46ade, _Format="%c%c" | out: _Dest="14") returned 2 [0130.135] RtlInitAnsiString (in: DestinationString=0xac7f8c8, SourceString="7160ee0d7adb463c941b8190533d263dc5cd5190b787ad47a9208385d1b871b107e92a0efeaf5b9884e4b714" | out: DestinationString="7160ee0d7adb463c941b8190533d263dc5cd5190b787ad47a9208385d1b871b107e92a0efeaf5b9884e4b714") [0130.135] RtlAnsiStringToUnicodeString (in: DestinationString=0xac7f8c0, SourceString="7160ee0d7adb463c941b8190533d263dc5cd5190b787ad47a9208385d1b871b107e92a0efeaf5b9884e4b714", AllocateDestinationString=1 | out: DestinationString="7160ee0d7adb463c941b8190533d263dc5cd5190b787ad47a9208385d1b871b107e92a0efeaf5b9884e4b714") returned 0x0 [0130.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66618 [0130.135] wcscat (in: _Dest=0x3d51728, _Source="7160ee0d7adb463c941b81" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\7160ee0d7adb463c941b81") returned="C:\\Users\\EEBsYm5\\Contacts\\7160ee0d7adb463c941b81" [0130.135] wcscat (in: _Dest=0x3d51728, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\7160ee0d7adb463c941b81.68814f") returned="C:\\Users\\EEBsYm5\\Contacts\\7160ee0d7adb463c941b81.68814f" [0130.135] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\7160ee0d7adb463c941b81.68814f", NtPathName=0xac7f8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\7160ee0d7adb463c941b81.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44ba0 [0130.135] NtSetInformationFile (FileHandle=0xce0, IoStatusBlock=0xac7f8c0, FileInformation=0x3d44ba0, Length=0x86, FileInformationClass=0xa) returned 0x0 [0130.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 [0130.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a401b0) returned 1 [0130.244] NtQueryInformationFile (in: FileHandle=0xce0, IoStatusBlock=0xac7f890, FileInformation=0xac7f898, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xac7f890, FileInformation=0xac7f898) returned 0x0 [0130.245] NtSetInformationFile (FileHandle=0xce0, IoStatusBlock=0xac7f890, FileInformation=0xac7f898, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0130.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66618) returned 1 [0130.314] FlushFileBuffers (hFile=0xce0) returned 1 [0130.321] CloseHandle (hObject=0xce0) returned 1 [0130.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47650 [0130.368] wcscpy (in: _Dest=0x3d47650, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0130.368] wcscat (in: _Dest=0x3d47650, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" [0130.368] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\68814f-readme.txt")) returned 0x20 [0130.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47650) returned 1 [0130.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26698) returned 1 Thread: id = 447 os_tid = 0xf80 [0123.560] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ofhbnh edferrr.contact")) returned 0x20 [0123.565] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact", dwFileAttributes=0x20) returned 1 [0127.692] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\ofhbnh edferrr.contact" (normalized: "c:\\users\\eebsym5\\contacts\\ofhbnh edferrr.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xccc [0127.693] GetFileSizeEx (in: hFile=0xccc, lpFileSize=0xacef8fc | out: lpFileSize=0xacef8fc*=1265) returned 1 [0127.693] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.693] ReadFile (in: hFile=0xccc, lpBuffer=0xacef8d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xacef8e8, lpOverlapped=0x0 | out: lpBuffer=0xacef8d8*, lpNumberOfBytesRead=0xacef8e8*=0x4, lpOverlapped=0x0) returned 1 [0127.696] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0127.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0127.697] NtQuerySystemTime (in: CurrentTime=0xacef870 | out: CurrentTime=0xacef870*=132462177070920000) returned 0x0 [0127.697] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x18cf66bc [0127.697] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x39d382d8 [0127.697] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x75726d71 [0127.697] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x18607bda [0127.697] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x3b594b92 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x4c213f65 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x1a1bb20 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x2b2be0f9 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x538ae161 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x7d1f0e27 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x23911adb [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x25a98a9f [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0xf656528 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0xc683ea4 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x4c3f0cb7 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x2a6eb4b9 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x5a1cc421 [0127.698] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x740bed66 [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x5637ef92 [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x1be6506f [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x3810f21a [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x3b182d80 [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x624bd48b [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x72f551a8 [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x29fa3565 [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x3a43bdbd [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x69c23791 [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x1e183b4a [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x210683fa [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x622d5dd5 [0127.699] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x3dd80cf8 [0127.700] RtlRandomEx (in: Seed=0xacef868 | out: Seed=0xacef868) returned 0x45706e78 [0127.718] ReadFile (in: hFile=0xccc, lpBuffer=0x7c72798, nNumberOfBytesToRead=0x4f1, lpNumberOfBytesRead=0xacef864, lpOverlapped=0x0 | out: lpBuffer=0x7c72798*, lpNumberOfBytesRead=0xacef864*=0x4f1, lpOverlapped=0x0) returned 1 [0127.718] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.718] WriteFile (in: hFile=0xccc, lpBuffer=0x7c763a0*, nNumberOfBytesToWrite=0x4f1, lpNumberOfBytesWritten=0xacef868, lpOverlapped=0x0 | out: lpBuffer=0x7c763a0*, lpNumberOfBytesWritten=0xacef868*=0x4f1, lpOverlapped=0x0) returned 1 [0127.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0127.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4bb8 [0127.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4bb8) returned 1 [0127.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c763a0) returned 1 [0127.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c72798) returned 1 [0127.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56330) returned 1 [0127.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e56330 [0127.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4bb8) returned 1 [0127.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e55e20 [0127.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4bb8 [0127.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4370 [0127.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4370) returned 1 [0127.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56498) returned 1 [0127.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d55278 [0127.855] SetFilePointerEx (in: hFile=0xccc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.856] WriteFile (in: hFile=0xccc, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xacef8f0, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0xacef8f0*=0x11e, lpOverlapped=0x0) returned 1 [0127.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e508 [0127.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0127.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0127.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0127.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0127.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0127.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0127.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0127.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3ee0ac8 [0127.937] sprintf (in: _Dest=0x3ee0ac8, _Format="%c%c" | out: _Dest="7d") returned 2 [0127.937] sprintf (in: _Dest=0x3ee0aca, _Format="%c%c" | out: _Dest="fd") returned 2 [0127.937] sprintf (in: _Dest=0x3ee0acc, _Format="%c%c" | out: _Dest="09") returned 2 [0127.937] sprintf (in: _Dest=0x3ee0ace, _Format="%c%c" | out: _Dest="db") returned 2 [0127.937] sprintf (in: _Dest=0x3ee0ad0, _Format="%c%c" | out: _Dest="88") returned 2 [0127.937] sprintf (in: _Dest=0x3ee0ad2, _Format="%c%c" | out: _Dest="4f") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0ad4, _Format="%c%c" | out: _Dest="19") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0ad6, _Format="%c%c" | out: _Dest="1c") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0ad8, _Format="%c%c" | out: _Dest="e1") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0ada, _Format="%c%c" | out: _Dest="6f") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0adc, _Format="%c%c" | out: _Dest="c1") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0ade, _Format="%c%c" | out: _Dest="12") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0ae0, _Format="%c%c" | out: _Dest="f4") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0ae2, _Format="%c%c" | out: _Dest="4a") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0ae4, _Format="%c%c" | out: _Dest="45") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0ae6, _Format="%c%c" | out: _Dest="97") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0ae8, _Format="%c%c" | out: _Dest="64") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0aea, _Format="%c%c" | out: _Dest="1d") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0aec, _Format="%c%c" | out: _Dest="d6") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0aee, _Format="%c%c" | out: _Dest="59") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0af0, _Format="%c%c" | out: _Dest="45") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0af2, _Format="%c%c" | out: _Dest="4a") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0af4, _Format="%c%c" | out: _Dest="6e") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0af6, _Format="%c%c" | out: _Dest="2d") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0af8, _Format="%c%c" | out: _Dest="cf") returned 2 [0127.938] sprintf (in: _Dest=0x3ee0afa, _Format="%c%c" | out: _Dest="ee") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0afc, _Format="%c%c" | out: _Dest="a5") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0afe, _Format="%c%c" | out: _Dest="e8") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b00, _Format="%c%c" | out: _Dest="9e") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b02, _Format="%c%c" | out: _Dest="f4") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b04, _Format="%c%c" | out: _Dest="67") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b06, _Format="%c%c" | out: _Dest="ad") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b08, _Format="%c%c" | out: _Dest="90") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b0a, _Format="%c%c" | out: _Dest="0c") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b0c, _Format="%c%c" | out: _Dest="93") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b0e, _Format="%c%c" | out: _Dest="33") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b10, _Format="%c%c" | out: _Dest="08") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b12, _Format="%c%c" | out: _Dest="57") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b14, _Format="%c%c" | out: _Dest="a8") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b16, _Format="%c%c" | out: _Dest="8b") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b18, _Format="%c%c" | out: _Dest="db") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b1a, _Format="%c%c" | out: _Dest="7f") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b1c, _Format="%c%c" | out: _Dest="3d") returned 2 [0127.939] sprintf (in: _Dest=0x3ee0b1e, _Format="%c%c" | out: _Dest="71") returned 2 [0127.940] RtlInitAnsiString (in: DestinationString=0xacef878, SourceString="7dfd09db884f191ce16fc112f44a4597641dd659454a6e2dcfeea5e89ef467ad900c93330857a88bdb7f3d71" | out: DestinationString="7dfd09db884f191ce16fc112f44a4597641dd659454a6e2dcfeea5e89ef467ad900c93330857a88bdb7f3d71") [0127.940] RtlAnsiStringToUnicodeString (in: DestinationString=0xacef870, SourceString="7dfd09db884f191ce16fc112f44a4597641dd659454a6e2dcfeea5e89ef467ad900c93330857a88bdb7f3d71", AllocateDestinationString=1 | out: DestinationString="7dfd09db884f191ce16fc112f44a4597641dd659454a6e2dcfeea5e89ef467ad900c93330857a88bdb7f3d71") returned 0x0 [0127.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66a98 [0127.940] wcscat (in: _Dest=0x3f3e508, _Source="7dfd09db884f191ce16fc1" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\7dfd09db884f191ce16fc1") returned="C:\\Users\\EEBsYm5\\Contacts\\7dfd09db884f191ce16fc1" [0127.940] wcscat (in: _Dest=0x3f3e508, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\7dfd09db884f191ce16fc1.68814f") returned="C:\\Users\\EEBsYm5\\Contacts\\7dfd09db884f191ce16fc1.68814f" [0127.940] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\7dfd09db884f191ce16fc1.68814f", NtPathName=0xacef868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\7dfd09db884f191ce16fc1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d454a0 [0127.940] NtSetInformationFile (FileHandle=0xccc, IoStatusBlock=0xacef870, FileInformation=0x3d454a0, Length=0x86, FileInformationClass=0xa) returned 0x0 [0128.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d454a0) returned 1 [0128.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03de8) returned 1 [0128.081] NtQueryInformationFile (in: FileHandle=0xccc, IoStatusBlock=0xacef840, FileInformation=0xacef848, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xacef840, FileInformation=0xacef848) returned 0x0 [0128.081] NtSetInformationFile (FileHandle=0xccc, IoStatusBlock=0xacef840, FileInformation=0xacef848, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0128.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66a98) returned 1 [0128.083] FlushFileBuffers (hFile=0xccc) returned 1 [0128.096] CloseHandle (hObject=0xccc) returned 1 [0128.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf4d8 [0128.101] wcscpy (in: _Dest=0x3edf4d8, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0128.101] wcscat (in: _Dest=0x3edf4d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" [0128.101] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\68814f-readme.txt")) returned 0x20 [0128.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf4d8) returned 1 [0128.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26708) returned 1 Thread: id = 448 os_tid = 0xf7c [0123.561] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" (normalized: "c:\\users\\eebsym5\\contacts\\uosjfl sidvllie.contact")) returned 0x20 [0123.564] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact", dwFileAttributes=0x20) returned 1 [0127.738] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\uosjfl sidvllie.contact" (normalized: "c:\\users\\eebsym5\\contacts\\uosjfl sidvllie.contact"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd8 [0127.739] GetFileSizeEx (in: hFile=0xcd8, lpFileSize=0x8b2fe94 | out: lpFileSize=0x8b2fe94*=1267) returned 1 [0127.739] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x4ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.739] ReadFile (in: hFile=0xcd8, lpBuffer=0x8b2fe70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b2fe80, lpOverlapped=0x0 | out: lpBuffer=0x8b2fe70*, lpNumberOfBytesRead=0x8b2fe80*=0x4, lpOverlapped=0x0) returned 1 [0128.301] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0128.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0128.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0128.301] NtQuerySystemTime (in: CurrentTime=0x8b2fe08 | out: CurrentTime=0x8b2fe08*=132462177076848000) returned 0x0 [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x128c8058 [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x474562c1 [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x4069e65 [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x6e7e23d9 [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x49374a6c [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x6092d35a [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x558585ae [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x23302832 [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x24d28829 [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x657d98bb [0128.301] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x74677661 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x51e5c660 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x592cadb6 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x584b7c62 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x68d398e1 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x57a563b7 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x7eac2a79 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x176876a8 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x2e5a3fd8 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x767f726c [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x2f7dc5f1 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x5de61e00 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x53ea94b [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x2b09f41b [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x45a2f52 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x38a25a2d [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x211f3fe3 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x3b217a72 [0128.302] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x73913aa1 [0128.303] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x74924f21 [0128.303] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x35ad2362 [0128.303] RtlRandomEx (in: Seed=0x8b2fe00 | out: Seed=0x8b2fe00) returned 0x5adc2f86 [0128.314] ReadFile (in: hFile=0xcd8, lpBuffer=0x7c72798, nNumberOfBytesToRead=0x4f3, lpNumberOfBytesRead=0x8b2fdfc, lpOverlapped=0x0 | out: lpBuffer=0x7c72798*, lpNumberOfBytesRead=0x8b2fdfc*=0x4f3, lpOverlapped=0x0) returned 1 [0128.314] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.314] WriteFile (in: hFile=0xcd8, lpBuffer=0x7c763a0*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0x8b2fe00, lpOverlapped=0x0 | out: lpBuffer=0x7c763a0*, lpNumberOfBytesWritten=0x8b2fe00*=0x4f3, lpOverlapped=0x0) returned 1 [0128.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0128.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0128.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0128.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c763a0) returned 1 [0128.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c72798) returned 1 [0128.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c08) returned 1 [0128.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e85c08 [0128.329] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.329] WriteFile (in: hFile=0xcd8, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x8b2fe88, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0x8b2fe88*=0x120, lpOverlapped=0x0) returned 1 [0128.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e855d8 [0128.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0128.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0128.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0128.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79368 [0128.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0128.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0128.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0128.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e855d8) returned 1 [0128.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5d) returned 0x3ee1218 [0128.331] sprintf (in: _Dest=0x3ee1218, _Format="%c%c" | out: _Dest="1d") returned 2 [0128.331] sprintf (in: _Dest=0x3ee121a, _Format="%c%c" | out: _Dest="e0") returned 2 [0128.331] sprintf (in: _Dest=0x3ee121c, _Format="%c%c" | out: _Dest="7b") returned 2 [0128.331] sprintf (in: _Dest=0x3ee121e, _Format="%c%c" | out: _Dest="6a") returned 2 [0128.331] sprintf (in: _Dest=0x3ee1220, _Format="%c%c" | out: _Dest="a6") returned 2 [0128.332] sprintf (in: _Dest=0x3ee1222, _Format="%c%c" | out: _Dest="63") returned 2 [0128.332] sprintf (in: _Dest=0x3ee1224, _Format="%c%c" | out: _Dest="ff") returned 2 [0128.332] sprintf (in: _Dest=0x3ee1226, _Format="%c%c" | out: _Dest="f3") returned 2 [0128.332] sprintf (in: _Dest=0x3ee1228, _Format="%c%c" | out: _Dest="91") returned 2 [0128.332] sprintf (in: _Dest=0x3ee122a, _Format="%c%c" | out: _Dest="ef") returned 2 [0128.332] sprintf (in: _Dest=0x3ee122c, _Format="%c%c" | out: _Dest="3d") returned 2 [0128.332] sprintf (in: _Dest=0x3ee122e, _Format="%c%c" | out: _Dest="1d") returned 2 [0128.332] sprintf (in: _Dest=0x3ee1230, _Format="%c%c" | out: _Dest="06") returned 2 [0128.332] sprintf (in: _Dest=0x3ee1232, _Format="%c%c" | out: _Dest="88") returned 2 [0128.332] sprintf (in: _Dest=0x3ee1234, _Format="%c%c" | out: _Dest="a7") returned 2 [0128.332] sprintf (in: _Dest=0x3ee1236, _Format="%c%c" | out: _Dest="2a") returned 2 [0128.332] sprintf (in: _Dest=0x3ee1238, _Format="%c%c" | out: _Dest="3a") returned 2 [0128.332] sprintf (in: _Dest=0x3ee123a, _Format="%c%c" | out: _Dest="61") returned 2 [0128.332] sprintf (in: _Dest=0x3ee123c, _Format="%c%c" | out: _Dest="99") returned 2 [0128.332] sprintf (in: _Dest=0x3ee123e, _Format="%c%c" | out: _Dest="e4") returned 2 [0128.333] sprintf (in: _Dest=0x3ee1240, _Format="%c%c" | out: _Dest="3f") returned 2 [0128.333] sprintf (in: _Dest=0x3ee1242, _Format="%c%c" | out: _Dest="b3") returned 2 [0128.333] sprintf (in: _Dest=0x3ee1244, _Format="%c%c" | out: _Dest="c1") returned 2 [0128.333] sprintf (in: _Dest=0x3ee1246, _Format="%c%c" | out: _Dest="d0") returned 2 [0128.333] sprintf (in: _Dest=0x3ee1248, _Format="%c%c" | out: _Dest="38") returned 2 [0128.333] sprintf (in: _Dest=0x3ee124a, _Format="%c%c" | out: _Dest="e9") returned 2 [0128.333] sprintf (in: _Dest=0x3ee124c, _Format="%c%c" | out: _Dest="ba") returned 2 [0128.333] sprintf (in: _Dest=0x3ee124e, _Format="%c%c" | out: _Dest="30") returned 2 [0128.333] sprintf (in: _Dest=0x3ee1250, _Format="%c%c" | out: _Dest="37") returned 2 [0128.333] sprintf (in: _Dest=0x3ee1252, _Format="%c%c" | out: _Dest="fa") returned 2 [0128.333] sprintf (in: _Dest=0x3ee1254, _Format="%c%c" | out: _Dest="26") returned 2 [0128.333] sprintf (in: _Dest=0x3ee1256, _Format="%c%c" | out: _Dest="ca") returned 2 [0128.333] sprintf (in: _Dest=0x3ee1258, _Format="%c%c" | out: _Dest="ec") returned 2 [0128.333] sprintf (in: _Dest=0x3ee125a, _Format="%c%c" | out: _Dest="7f") returned 2 [0128.333] sprintf (in: _Dest=0x3ee125c, _Format="%c%c" | out: _Dest="14") returned 2 [0128.333] sprintf (in: _Dest=0x3ee125e, _Format="%c%c" | out: _Dest="56") returned 2 [0128.334] sprintf (in: _Dest=0x3ee1260, _Format="%c%c" | out: _Dest="f4") returned 2 [0128.334] sprintf (in: _Dest=0x3ee1262, _Format="%c%c" | out: _Dest="dd") returned 2 [0128.334] sprintf (in: _Dest=0x3ee1264, _Format="%c%c" | out: _Dest="df") returned 2 [0128.334] sprintf (in: _Dest=0x3ee1266, _Format="%c%c" | out: _Dest="72") returned 2 [0128.334] sprintf (in: _Dest=0x3ee1268, _Format="%c%c" | out: _Dest="01") returned 2 [0128.334] sprintf (in: _Dest=0x3ee126a, _Format="%c%c" | out: _Dest="88") returned 2 [0128.334] sprintf (in: _Dest=0x3ee126c, _Format="%c%c" | out: _Dest="64") returned 2 [0128.334] sprintf (in: _Dest=0x3ee126e, _Format="%c%c" | out: _Dest="59") returned 2 [0128.334] sprintf (in: _Dest=0x3ee1270, _Format="%c%c" | out: _Dest="f3") returned 2 [0128.334] sprintf (in: _Dest=0x3ee1272, _Format="%c%c" | out: _Dest="29") returned 2 [0128.334] RtlInitAnsiString (in: DestinationString=0x8b2fe10, SourceString="1de07b6aa663fff391ef3d1d0688a72a3a6199e43fb3c1d038e9ba3037fa26caec7f1456f4dddf7201886459f329" | out: DestinationString="1de07b6aa663fff391ef3d1d0688a72a3a6199e43fb3c1d038e9ba3037fa26caec7f1456f4dddf7201886459f329") [0128.334] RtlAnsiStringToUnicodeString (in: DestinationString=0x8b2fe08, SourceString="1de07b6aa663fff391ef3d1d0688a72a3a6199e43fb3c1d038e9ba3037fa26caec7f1456f4dddf7201886459f329", AllocateDestinationString=1 | out: DestinationString="1de07b6aa663fff391ef3d1d0688a72a3a6199e43fb3c1d038e9ba3037fa26caec7f1456f4dddf7201886459f329") returned 0x0 [0128.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a2b0 [0128.335] wcscat (in: _Dest=0x3e1a118, _Source="1de07b6aa663fff391ef3d1" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\1de07b6aa663fff391ef3d1") returned="C:\\Users\\EEBsYm5\\Contacts\\1de07b6aa663fff391ef3d1" [0128.335] wcscat (in: _Dest=0x3e1a118, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\1de07b6aa663fff391ef3d1.68814f") returned="C:\\Users\\EEBsYm5\\Contacts\\1de07b6aa663fff391ef3d1.68814f" [0128.335] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Contacts\\1de07b6aa663fff391ef3d1.68814f", NtPathName=0x8b2fe00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Contacts\\1de07b6aa663fff391ef3d1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0128.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44b10 [0128.335] NtSetInformationFile (FileHandle=0xcd8, IoStatusBlock=0x8b2fe08, FileInformation=0x3d44b10, Length=0x88, FileInformationClass=0xa) returned 0x0 [0128.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44b10) returned 1 [0128.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41818) returned 1 [0128.337] NtQueryInformationFile (in: FileHandle=0xcd8, IoStatusBlock=0x8b2fdd8, FileInformation=0x8b2fde0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8b2fdd8, FileInformation=0x8b2fde0) returned 0x0 [0128.337] NtSetInformationFile (FileHandle=0xcd8, IoStatusBlock=0x8b2fdd8, FileInformation=0x8b2fde0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a118) returned 1 [0128.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a2b0) returned 1 [0128.339] FlushFileBuffers (hFile=0xcd8) returned 1 [0128.340] CloseHandle (hObject=0xcd8) returned 1 [0128.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee1218 [0128.341] wcscpy (in: _Dest=0x3ee1218, _Source="C:\\Users\\EEBsYm5\\Contacts\\" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\") returned="C:\\Users\\EEBsYm5\\Contacts\\" [0128.341] wcscat (in: _Dest=0x3ee1218, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" [0128.341] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Contacts\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\contacts\\68814f-readme.txt")) returned 0x20 [0128.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1218) returned 1 [0128.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26778) returned 1 Thread: id = 449 os_tid = 0x330 [0123.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmek.htm")) returned 0x20 [0124.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm", dwFileAttributes=0x20) returned 0 [0124.328] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmek.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.328] GetLastError () returned 0x5 [0124.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeK.htm", dwFileAttributes=0x20) returned 0 [0124.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0ac8) returned 1 Thread: id = 450 os_tid = 0xaf0 [0123.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmepol.htm")) returned 0x20 [0124.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm", dwFileAttributes=0x20) returned 0 [0124.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmepol.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.326] GetLastError () returned 0x5 [0124.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMePOL.htm", dwFileAttributes=0x20) returned 0 [0124.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a267e8) returned 1 Thread: id = 451 os_tid = 0xb10 [0123.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerum.htm")) returned 0x20 [0124.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm", dwFileAttributes=0x20) returned 0 [0124.324] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerum.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.324] GetLastError () returned 0x5 [0124.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUM.htm", dwFileAttributes=0x20) returned 0 [0124.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26858) returned 1 Thread: id = 452 os_tid = 0x188 [0123.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerus.htm")) returned 0x20 [0124.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm", dwFileAttributes=0x20) returned 0 [0124.322] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmerus.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.322] GetLastError () returned 0x5 [0124.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeRUS.htm", dwFileAttributes=0x20) returned 0 [0124.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a268c8) returned 1 Thread: id = 453 os_tid = 0xfc0 [0123.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmesky.htm")) returned 0x20 [0124.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm", dwFileAttributes=0x20) returned 0 [0124.320] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmesky.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.320] GetLastError () returned 0x5 [0124.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeSKY.htm", dwFileAttributes=0x20) returned 0 [0124.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26938) returned 1 Thread: id = 454 os_tid = 0x4f8 [0123.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmeukr.htm")) returned 0x20 [0124.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm", dwFileAttributes=0x20) returned 0 [0124.317] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\readmeukr.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.318] GetLastError () returned 0x5 [0124.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\ReadMeUKR.htm", dwFileAttributes=0x20) returned 0 [0124.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a269a8) returned 1 Thread: id = 455 os_tid = 0x3c8 [0123.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee1078 [0123.569] wcscpy (in: _Dest=0x3ee1078, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0123.569] wcscat (in: _Dest=0x3ee1078, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0123.569] wcscat (in: _Dest=0x3ee1078, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\*" [0123.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54710 [0123.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0124.405] wcscmp (_String1=".", _String2=".") returned 0 [0124.405] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.405] wcscmp (_String1="..", _String2=".") returned 1 [0124.405] wcscmp (_String1="..", _String2="..") returned 0 [0124.405] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb80ec00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc86c340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc86c340, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIDFont", cAlternateFileName="")) returned 1 [0124.405] wcscmp (_String1="CIDFont", _String2=".") returned 1 [0124.405] wcscmp (_String1="CIDFont", _String2="..") returned 1 [0124.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a267e8 [0124.405] wcscpy (in: _Dest=0x7a267e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0124.405] wcscat (in: _Dest=0x7a267e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0124.405] wcscat (in: _Dest=0x7a267e8, _Source="CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0126.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a267e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0126.897] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc7619a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1 [0126.897] wcscmp (_String1="CMap", _String2=".") returned 1 [0126.897] wcscmp (_String1="CMap", _String2="..") returned 1 [0126.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69f38 [0126.898] wcscpy (in: _Dest=0x3e69f38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0126.898] wcscat (in: _Dest=0x3e69f38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0126.898] wcscat (in: _Dest=0x3e69f38, _Source="CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0126.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0126.900] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1 [0126.900] wcscmp (_String1="ENUtxt.pdf", _String2=".") returned 1 [0126.900] wcscmp (_String1="ENUtxt.pdf", _String2="..") returned 1 [0126.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dc20 [0126.900] wcscpy (in: _Dest=0x3f3dc20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0126.900] wcscat (in: _Dest=0x3f3dc20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0126.900] wcscat (in: _Dest=0x3f3dc20, _Source="ENUtxt.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" [0126.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0126.902] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0126.902] wcscmp (_String1="Font", _String2=".") returned 1 [0126.902] wcscmp (_String1="Font", _String2="..") returned 1 [0126.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69fa8 [0126.903] wcscpy (in: _Dest=0x3e69fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0126.903] wcscat (in: _Dest=0x3e69fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0126.903] wcscat (in: _Dest=0x3e69fa8, _Source="Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0126.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0126.904] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdadcad20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0126.904] wcscmp (_String1="Linguistics", _String2=".") returned 1 [0126.904] wcscmp (_String1="Linguistics", _String2="..") returned 1 [0126.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dc98 [0126.904] wcscpy (in: _Dest=0x3f3dc98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0126.904] wcscat (in: _Dest=0x3f3dc98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0126.905] wcscat (in: _Dest=0x3f3dc98, _Source="Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0126.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3dc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0126.906] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1 [0126.906] wcscmp (_String1="SaslPrep", _String2=".") returned 1 [0126.906] wcscmp (_String1="SaslPrep", _String2="..") returned 1 [0126.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd10 [0126.906] wcscpy (in: _Dest=0x3f3dd10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0126.906] wcscat (in: _Dest=0x3f3dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0126.906] wcscat (in: _Dest=0x3f3dd10, _Source="SaslPrep" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" [0126.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0126.908] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1 [0126.908] wcscmp (_String1="TypeSupport", _String2=".") returned 1 [0126.908] wcscmp (_String1="TypeSupport", _String2="..") returned 1 [0126.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd88 [0126.908] wcscpy (in: _Dest=0x3f3dd88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource" [0126.908] wcscat (in: _Dest=0x3f3dd88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\" [0126.908] wcscat (in: _Dest=0x3f3dd88, _Source="TypeSupport" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" [0126.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3dd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0126.909] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 0 [0126.909] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0126.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54710) returned 1 [0126.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 [0126.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 Thread: id = 456 os_tid = 0x3f4 [0123.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23140 [0123.570] wcscpy (in: _Dest=0x7a23140, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" [0123.570] wcscat (in: _Dest=0x7a23140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\" [0123.570] wcscat (in: _Dest=0x7a23140, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\*" [0123.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0123.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9009a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9009a20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0124.138] wcscmp (_String1=".", _String2=".") returned 0 [0124.138] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9009a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9009a20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.138] wcscmp (_String1="..", _String2=".") returned 1 [0124.138] wcscmp (_String1="..", _String2="..") returned 0 [0124.138] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 1 [0124.138] wcscmp (_String1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", _String2=".") returned 1 [0124.139] wcscmp (_String1="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", _String2="..") returned 1 [0124.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6740 [0124.139] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files" [0124.139] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\" [0124.139] wcscat (in: _Dest=0x2ff6740, _Source="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0125.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0125.064] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 0 [0125.064] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0125.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0125.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23140) returned 1 [0125.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edff00) returned 1 Thread: id = 457 os_tid = 0xbc0 [0123.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\vigtigt.htm")) returned 0x20 [0124.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm", dwFileAttributes=0x20) returned 0 [0124.315] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\vigtigt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.316] GetLastError () returned 0x5 [0124.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Vigtigt.htm", dwFileAttributes=0x20) returned 0 [0124.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 Thread: id = 458 os_tid = 0xba8 [0123.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktig.htm")) returned 0x20 [0124.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm", dwFileAttributes=0x20) returned 0 [0124.313] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktig.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.313] GetLastError () returned 0x5 [0124.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktig.htm", dwFileAttributes=0x20) returned 0 [0124.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0c00) returned 1 Thread: id = 459 os_tid = 0xbc8 [0123.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktigt.htm")) returned 0x20 [0124.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm", dwFileAttributes=0x20) returned 0 [0124.311] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files\\adobe\\reader 10.0\\viktigt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.311] GetLastError () returned 0x5 [0124.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Viktigt.htm", dwFileAttributes=0x20) returned 0 [0124.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0c68) returned 1 Thread: id = 460 os_tid = 0xadc [0123.572] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie add-on site.url")) returned 0x20 [0123.576] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url", dwFileAttributes=0x20) returned 1 [0127.645] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc90 [0127.645] GetFileSizeEx (in: hFile=0xc90, lpFileSize=0xafafb44 | out: lpFileSize=0xafafb44*=133) returned 1 [0127.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0127.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0127.645] NtQuerySystemTime (in: CurrentTime=0xafafab8 | out: CurrentTime=0xafafab8*=132462177070296000) returned 0x0 [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x26b33aee [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x5f68d3c2 [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x353969eb [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x4a43419c [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x2388bf8d [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x13a07d05 [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x1d03a95a [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x7cb3ed90 [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x76ea2e3b [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x59c36561 [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x4d4479fe [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x6905897c [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x1d2e59d8 [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x5077d165 [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x2a38d1d1 [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x53b8af3f [0127.646] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x459d0e09 [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x254d2d22 [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x566564d1 [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x7fcf9fba [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x791272c9 [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x188e5939 [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x4142cf46 [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x79db947a [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x29ef803c [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x2193cf40 [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x639d6109 [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x8013f0c [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x7b3fb172 [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x6e10cdcb [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x26b51149 [0127.647] RtlRandomEx (in: Seed=0xafafab0 | out: Seed=0xafafab0) returned 0x7411c4e1 [0127.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c63778 [0127.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c67380 [0127.662] ReadFile (in: hFile=0xc90, lpBuffer=0x7c63778, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xafafaac, lpOverlapped=0x0 | out: lpBuffer=0x7c63778*, lpNumberOfBytesRead=0xafafaac*=0x85, lpOverlapped=0x0) returned 1 [0127.666] SetFilePointerEx (in: hFile=0xc90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.666] WriteFile (in: hFile=0xc90, lpBuffer=0x7c67380*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xafafab0, lpOverlapped=0x0 | out: lpBuffer=0x7c67380*, lpNumberOfBytesWritten=0xafafab0*=0x85, lpOverlapped=0x0) returned 1 [0127.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0127.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0127.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0127.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c67380) returned 1 [0127.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c63778) returned 1 [0127.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0127.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55e20) returned 1 [0127.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2d800 [0127.848] SetFilePointerEx (in: hFile=0xc90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.849] WriteFile (in: hFile=0xc90, lpBuffer=0x3d54938*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xafafb38, lpOverlapped=0x0 | out: lpBuffer=0x3d54938*, lpNumberOfBytesWritten=0xafafb38*=0x116, lpOverlapped=0x0) returned 1 [0127.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e508 [0127.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0127.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0127.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86788 [0127.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0127.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0127.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e80) returned 1 [0127.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0127.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3e14a90 [0127.932] sprintf (in: _Dest=0x3e14a90, _Format="%c%c" | out: _Dest="91") returned 2 [0127.932] sprintf (in: _Dest=0x3e14a92, _Format="%c%c" | out: _Dest="a1") returned 2 [0127.932] sprintf (in: _Dest=0x3e14a94, _Format="%c%c" | out: _Dest="89") returned 2 [0127.932] sprintf (in: _Dest=0x3e14a96, _Format="%c%c" | out: _Dest="c3") returned 2 [0127.932] sprintf (in: _Dest=0x3e14a98, _Format="%c%c" | out: _Dest="22") returned 2 [0127.932] sprintf (in: _Dest=0x3e14a9a, _Format="%c%c" | out: _Dest="8f") returned 2 [0127.932] sprintf (in: _Dest=0x3e14a9c, _Format="%c%c" | out: _Dest="53") returned 2 [0127.932] sprintf (in: _Dest=0x3e14a9e, _Format="%c%c" | out: _Dest="29") returned 2 [0127.932] sprintf (in: _Dest=0x3e14aa0, _Format="%c%c" | out: _Dest="e6") returned 2 [0127.932] sprintf (in: _Dest=0x3e14aa2, _Format="%c%c" | out: _Dest="84") returned 2 [0127.932] sprintf (in: _Dest=0x3e14aa4, _Format="%c%c" | out: _Dest="27") returned 2 [0127.932] sprintf (in: _Dest=0x3e14aa6, _Format="%c%c" | out: _Dest="4f") returned 2 [0127.932] sprintf (in: _Dest=0x3e14aa8, _Format="%c%c" | out: _Dest="c4") returned 2 [0127.932] sprintf (in: _Dest=0x3e14aaa, _Format="%c%c" | out: _Dest="44") returned 2 [0127.932] sprintf (in: _Dest=0x3e14aac, _Format="%c%c" | out: _Dest="dd") returned 2 [0127.933] sprintf (in: _Dest=0x3e14aae, _Format="%c%c" | out: _Dest="5a") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ab0, _Format="%c%c" | out: _Dest="05") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ab2, _Format="%c%c" | out: _Dest="6e") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ab4, _Format="%c%c" | out: _Dest="2e") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ab6, _Format="%c%c" | out: _Dest="6f") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ab8, _Format="%c%c" | out: _Dest="4c") returned 2 [0127.933] sprintf (in: _Dest=0x3e14aba, _Format="%c%c" | out: _Dest="eb") returned 2 [0127.933] sprintf (in: _Dest=0x3e14abc, _Format="%c%c" | out: _Dest="25") returned 2 [0127.933] sprintf (in: _Dest=0x3e14abe, _Format="%c%c" | out: _Dest="33") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ac0, _Format="%c%c" | out: _Dest="95") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ac2, _Format="%c%c" | out: _Dest="0b") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ac4, _Format="%c%c" | out: _Dest="ad") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ac6, _Format="%c%c" | out: _Dest="a4") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ac8, _Format="%c%c" | out: _Dest="16") returned 2 [0127.933] sprintf (in: _Dest=0x3e14aca, _Format="%c%c" | out: _Dest="82") returned 2 [0127.933] sprintf (in: _Dest=0x3e14acc, _Format="%c%c" | out: _Dest="bb") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ace, _Format="%c%c" | out: _Dest="84") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ad0, _Format="%c%c" | out: _Dest="37") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ad2, _Format="%c%c" | out: _Dest="b6") returned 2 [0127.933] sprintf (in: _Dest=0x3e14ad4, _Format="%c%c" | out: _Dest="1f") returned 2 [0127.934] sprintf (in: _Dest=0x3e14ad6, _Format="%c%c" | out: _Dest="d4") returned 2 [0127.934] RtlInitAnsiString (in: DestinationString=0xafafac0, SourceString="91a189c3228f5329e684274fc444dd5a056e2e6f4ceb2533950bada41682bb8437b61fd4" | out: DestinationString="91a189c3228f5329e684274fc444dd5a056e2e6f4ceb2533950bada41682bb8437b61fd4") [0127.934] RtlAnsiStringToUnicodeString (in: DestinationString=0xafafab8, SourceString="91a189c3228f5329e684274fc444dd5a056e2e6f4ceb2533950bada41682bb8437b61fd4", AllocateDestinationString=1 | out: DestinationString="91a189c3228f5329e684274fc444dd5a056e2e6f4ceb2533950bada41682bb8437b61fd4") returned 0x0 [0127.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5540 [0127.934] wcscat (in: _Dest=0x3eb5d20, _Source="91a189c3228f5329e6" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\91a189c3228f5329e6") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\91a189c3228f5329e6" [0127.934] wcscat (in: _Dest=0x3eb5d20, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\91a189c3228f5329e6.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\91a189c3228f5329e6.68814f" [0127.934] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\91a189c3228f5329e6.68814f", NtPathName=0xafafab0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\91a189c3228f5329e6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c3b0 [0127.934] NtSetInformationFile (FileHandle=0xc90, IoStatusBlock=0xafafab8, FileInformation=0x3e3c3b0, Length=0xa6, FileInformationClass=0xa) returned 0x0 [0128.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c3b0) returned 1 [0128.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03bc0) returned 1 [0128.076] NtQueryInformationFile (in: FileHandle=0xc90, IoStatusBlock=0xafafa88, FileInformation=0xafafa90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xafafa88, FileInformation=0xafafa90) returned 0x0 [0128.076] NtSetInformationFile (FileHandle=0xc90, IoStatusBlock=0xafafa88, FileInformation=0xafafa90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0128.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5540) returned 1 [0128.078] FlushFileBuffers (hFile=0xc90) returned 1 [0128.211] CloseHandle (hObject=0xc90) returned 1 [0128.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d440f0 [0128.213] wcscpy (in: _Dest=0x3d440f0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0128.213] wcscat (in: _Dest=0x3d440f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" [0128.213] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\68814f-readme.txt")) returned 0x20 [0128.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d440f0) returned 1 [0128.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44330) returned 1 Thread: id = 461 os_tid = 0x570 [0123.575] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie site on microsoft.com.url")) returned 0x20 [0123.576] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", dwFileAttributes=0x20) returned 1 [0126.190] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcc8 [0126.191] GetFileSizeEx (in: hFile=0xcc8, lpFileSize=0xaebfc6c | out: lpFileSize=0xaebfc6c*=133) returned 1 [0126.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0126.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb940 [0126.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddce0 [0126.191] NtQuerySystemTime (in: CurrentTime=0xaebfbe0 | out: CurrentTime=0xaebfbe0*=132462177055944000) returned 0x0 [0126.191] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x65ea7701 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x2a081387 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x4ae49581 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x7b708c8f [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x32e2cbb0 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x77c60926 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x2a726f7c [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x6df6cda5 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x220202e5 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x6af2e14 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x2d38b30c [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x4b2d89e8 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x242941f4 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x7f05e380 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x63d1a51c [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x7f52cb8 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x4632e496 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0xfb00a5a [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x42bacba5 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x6182cd91 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x163b65f9 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x7f8ed2d5 [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x158d8a0c [0126.192] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x64068 [0126.193] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x3f42906 [0126.193] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0xa58d377 [0126.193] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x5796c322 [0126.193] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x7d5d205a [0126.193] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x26a2a55e [0126.193] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x7ba8ca29 [0126.193] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x480e7254 [0126.193] RtlRandomEx (in: Seed=0xaebfbd8 | out: Seed=0xaebfbd8) returned 0x34cd122 [0126.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc68) returned 1 [0126.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ad50a8 [0126.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a374b8 [0126.217] ReadFile (in: hFile=0xcc8, lpBuffer=0x7ad50a8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xaebfbd4, lpOverlapped=0x0 | out: lpBuffer=0x7ad50a8*, lpNumberOfBytesRead=0xaebfbd4*=0x85, lpOverlapped=0x0) returned 1 [0126.219] SetFilePointerEx (in: hFile=0xcc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.219] WriteFile (in: hFile=0xcc8, lpBuffer=0x7a374b8*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xaebfbd8, lpOverlapped=0x0 | out: lpBuffer=0x7a374b8*, lpNumberOfBytesWritten=0xaebfbd8*=0x85, lpOverlapped=0x0) returned 1 [0129.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b848 [0129.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0129.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbf8) returned 1 [0129.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374b8) returned 1 [0129.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad50a8) returned 1 [0129.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0129.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85470) returned 1 [0129.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e842b8 [0129.968] SetFilePointerEx (in: hFile=0xcc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.968] WriteFile (in: hFile=0xcc8, lpBuffer=0x3ec9928*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0xaebfc60, lpOverlapped=0x0 | out: lpBuffer=0x3ec9928*, lpNumberOfBytesWritten=0xaebfc60*=0x12a, lpOverlapped=0x0) returned 1 [0130.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85a58 [0130.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0130.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0130.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535f8) returned 1 [0130.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2fc8b08 [0130.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0130.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53580 [0130.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53580) returned 1 [0130.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0130.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0130.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x71) returned 0x3e19398 [0130.121] sprintf (in: _Dest=0x3e19398, _Format="%c%c" | out: _Dest="33") returned 2 [0130.121] sprintf (in: _Dest=0x3e1939a, _Format="%c%c" | out: _Dest="dd") returned 2 [0130.121] sprintf (in: _Dest=0x3e1939c, _Format="%c%c" | out: _Dest="1d") returned 2 [0130.121] sprintf (in: _Dest=0x3e1939e, _Format="%c%c" | out: _Dest="93") returned 2 [0130.121] sprintf (in: _Dest=0x3e193a0, _Format="%c%c" | out: _Dest="a4") returned 2 [0130.121] sprintf (in: _Dest=0x3e193a2, _Format="%c%c" | out: _Dest="5c") returned 2 [0130.121] sprintf (in: _Dest=0x3e193a4, _Format="%c%c" | out: _Dest="8a") returned 2 [0130.121] sprintf (in: _Dest=0x3e193a6, _Format="%c%c" | out: _Dest="33") returned 2 [0130.121] sprintf (in: _Dest=0x3e193a8, _Format="%c%c" | out: _Dest="c4") returned 2 [0130.121] sprintf (in: _Dest=0x3e193aa, _Format="%c%c" | out: _Dest="e6") returned 2 [0130.121] sprintf (in: _Dest=0x3e193ac, _Format="%c%c" | out: _Dest="9d") returned 2 [0130.121] sprintf (in: _Dest=0x3e193ae, _Format="%c%c" | out: _Dest="05") returned 2 [0130.121] sprintf (in: _Dest=0x3e193b0, _Format="%c%c" | out: _Dest="bf") returned 2 [0130.121] sprintf (in: _Dest=0x3e193b2, _Format="%c%c" | out: _Dest="f1") returned 2 [0130.122] sprintf (in: _Dest=0x3e193b4, _Format="%c%c" | out: _Dest="2c") returned 2 [0130.122] sprintf (in: _Dest=0x3e193b6, _Format="%c%c" | out: _Dest="de") returned 2 [0130.122] sprintf (in: _Dest=0x3e193b8, _Format="%c%c" | out: _Dest="e8") returned 2 [0130.122] sprintf (in: _Dest=0x3e193ba, _Format="%c%c" | out: _Dest="75") returned 2 [0130.122] sprintf (in: _Dest=0x3e193bc, _Format="%c%c" | out: _Dest="1c") returned 2 [0130.122] sprintf (in: _Dest=0x3e193be, _Format="%c%c" | out: _Dest="28") returned 2 [0130.122] sprintf (in: _Dest=0x3e193c0, _Format="%c%c" | out: _Dest="7e") returned 2 [0130.122] sprintf (in: _Dest=0x3e193c2, _Format="%c%c" | out: _Dest="b0") returned 2 [0130.122] sprintf (in: _Dest=0x3e193c4, _Format="%c%c" | out: _Dest="b0") returned 2 [0130.122] sprintf (in: _Dest=0x3e193c6, _Format="%c%c" | out: _Dest="83") returned 2 [0130.122] sprintf (in: _Dest=0x3e193c8, _Format="%c%c" | out: _Dest="eb") returned 2 [0130.122] sprintf (in: _Dest=0x3e193ca, _Format="%c%c" | out: _Dest="9e") returned 2 [0130.122] sprintf (in: _Dest=0x3e193cc, _Format="%c%c" | out: _Dest="89") returned 2 [0130.122] sprintf (in: _Dest=0x3e193ce, _Format="%c%c" | out: _Dest="6b") returned 2 [0130.122] sprintf (in: _Dest=0x3e193d0, _Format="%c%c" | out: _Dest="e1") returned 2 [0130.122] sprintf (in: _Dest=0x3e193d2, _Format="%c%c" | out: _Dest="26") returned 2 [0130.122] sprintf (in: _Dest=0x3e193d4, _Format="%c%c" | out: _Dest="08") returned 2 [0130.122] sprintf (in: _Dest=0x3e193d6, _Format="%c%c" | out: _Dest="38") returned 2 [0130.122] sprintf (in: _Dest=0x3e193d8, _Format="%c%c" | out: _Dest="66") returned 2 [0130.122] sprintf (in: _Dest=0x3e193da, _Format="%c%c" | out: _Dest="11") returned 2 [0130.122] sprintf (in: _Dest=0x3e193dc, _Format="%c%c" | out: _Dest="26") returned 2 [0130.123] sprintf (in: _Dest=0x3e193de, _Format="%c%c" | out: _Dest="a1") returned 2 [0130.123] sprintf (in: _Dest=0x3e193e0, _Format="%c%c" | out: _Dest="21") returned 2 [0130.123] sprintf (in: _Dest=0x3e193e2, _Format="%c%c" | out: _Dest="94") returned 2 [0130.123] sprintf (in: _Dest=0x3e193e4, _Format="%c%c" | out: _Dest="92") returned 2 [0130.123] sprintf (in: _Dest=0x3e193e6, _Format="%c%c" | out: _Dest="86") returned 2 [0130.123] sprintf (in: _Dest=0x3e193e8, _Format="%c%c" | out: _Dest="6f") returned 2 [0130.123] sprintf (in: _Dest=0x3e193ea, _Format="%c%c" | out: _Dest="ef") returned 2 [0130.123] sprintf (in: _Dest=0x3e193ec, _Format="%c%c" | out: _Dest="55") returned 2 [0130.123] sprintf (in: _Dest=0x3e193ee, _Format="%c%c" | out: _Dest="d3") returned 2 [0130.123] sprintf (in: _Dest=0x3e193f0, _Format="%c%c" | out: _Dest="78") returned 2 [0130.123] sprintf (in: _Dest=0x3e193f2, _Format="%c%c" | out: _Dest="44") returned 2 [0130.123] sprintf (in: _Dest=0x3e193f4, _Format="%c%c" | out: _Dest="b4") returned 2 [0130.123] sprintf (in: _Dest=0x3e193f6, _Format="%c%c" | out: _Dest="09") returned 2 [0130.123] sprintf (in: _Dest=0x3e193f8, _Format="%c%c" | out: _Dest="32") returned 2 [0130.123] sprintf (in: _Dest=0x3e193fa, _Format="%c%c" | out: _Dest="82") returned 2 [0130.123] sprintf (in: _Dest=0x3e193fc, _Format="%c%c" | out: _Dest="b1") returned 2 [0130.123] sprintf (in: _Dest=0x3e193fe, _Format="%c%c" | out: _Dest="c5") returned 2 [0130.123] sprintf (in: _Dest=0x3e19400, _Format="%c%c" | out: _Dest="73") returned 2 [0130.123] sprintf (in: _Dest=0x3e19402, _Format="%c%c" | out: _Dest="c2") returned 2 [0130.123] sprintf (in: _Dest=0x3e19404, _Format="%c%c" | out: _Dest="f7") returned 2 [0130.123] sprintf (in: _Dest=0x3e19406, _Format="%c%c" | out: _Dest="f4") returned 2 [0130.123] RtlInitAnsiString (in: DestinationString=0xaebfbe8, SourceString="33dd1d93a45c8a33c4e69d05bff12cdee8751c287eb0b083eb9e896be1260838661126a1219492866fef55d37844b4093282b1c573c2f7f4" | out: DestinationString="33dd1d93a45c8a33c4e69d05bff12cdee8751c287eb0b083eb9e896be1260838661126a1219492866fef55d37844b4093282b1c573c2f7f4") [0130.123] RtlAnsiStringToUnicodeString (in: DestinationString=0xaebfbe0, SourceString="33dd1d93a45c8a33c4e69d05bff12cdee8751c287eb0b083eb9e896be1260838661126a1219492866fef55d37844b4093282b1c573c2f7f4", AllocateDestinationString=1 | out: DestinationString="33dd1d93a45c8a33c4e69d05bff12cdee8751c287eb0b083eb9e896be1260838661126a1219492866fef55d37844b4093282b1c573c2f7f4") returned 0x0 [0130.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ddf1f8 [0130.124] wcscat (in: _Dest=0x35c6e8, _Source="33dd1d93a45c8a33c4e69d05bff1" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\33dd1d93a45c8a33c4e69d05bff1") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\33dd1d93a45c8a33c4e69d05bff1" [0130.124] wcscat (in: _Dest=0x35c6e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\33dd1d93a45c8a33c4e69d05bff1.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\33dd1d93a45c8a33c4e69d05bff1.68814f" [0130.124] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\33dd1d93a45c8a33c4e69d05bff1.68814f", NtPathName=0xaebfbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\33dd1d93a45c8a33c4e69d05bff1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a2b0 [0130.124] NtSetInformationFile (FileHandle=0xcc8, IoStatusBlock=0xaebfbe0, FileInformation=0x3e3a2b0, Length=0xba, FileInformationClass=0xa) returned 0x0 [0130.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a2b0) returned 1 [0130.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ff88) returned 1 [0130.233] NtQueryInformationFile (in: FileHandle=0xcc8, IoStatusBlock=0xaebfbb0, FileInformation=0xaebfbb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaebfbb0, FileInformation=0xaebfbb8) returned 0x0 [0130.233] NtSetInformationFile (FileHandle=0xcc8, IoStatusBlock=0xaebfbb0, FileInformation=0xaebfbb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 [0130.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf1f8) returned 1 [0130.309] FlushFileBuffers (hFile=0xcc8) returned 1 [0130.348] CloseHandle (hObject=0xcc8) returned 1 [0130.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d455c0 [0130.373] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0130.373] wcscat (in: _Dest=0x3d455c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" [0130.374] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\68814f-readme.txt")) returned 0x20 [0130.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 [0130.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5c20) returned 1 Thread: id = 462 os_tid = 0xbac [0123.577] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at home.url")) returned 0x20 [0123.577] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url", dwFileAttributes=0x20) returned 1 [0127.623] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcbc [0127.623] GetFileSizeEx (in: hFile=0xcbc, lpFileSize=0x5c8fe2c | out: lpFileSize=0x5c8fe2c*=133) returned 1 [0127.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0127.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0127.623] NtQuerySystemTime (in: CurrentTime=0x5c8fda0 | out: CurrentTime=0x5c8fda0*=132462177070140000) returned 0x0 [0127.623] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x504767b4 [0127.623] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x30d0f658 [0127.623] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x6b0cf00f [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x6e8f8f1e [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x30179657 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x2b5e82a8 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x132ed45c [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x7db73007 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x4b327d9b [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x79171ea6 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x239b6d3f [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x59ce588b [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x151f1925 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0xea1f833 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x7a1543e5 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x7c0abcfa [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x1485394f [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x74bd27e1 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x7c5fd806 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x3d03b27 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x5e4b57d0 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x5ae4fb84 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x66a6c184 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x237e3f2f [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x203c26e6 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x4877cbd7 [0127.624] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x43d3fd75 [0127.625] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x2ce59b3b [0127.625] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x15c44176 [0127.625] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x54356efd [0127.625] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x4f7dd0be [0127.625] RtlRandomEx (in: Seed=0x5c8fd98 | out: Seed=0x5c8fd98) returned 0x210c6bfc [0127.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c5bf68 [0127.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c5fb70 [0127.640] ReadFile (in: hFile=0xcbc, lpBuffer=0x7c5bf68, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x5c8fd94, lpOverlapped=0x0 | out: lpBuffer=0x7c5bf68*, lpNumberOfBytesRead=0x5c8fd94*=0x85, lpOverlapped=0x0) returned 1 [0127.644] SetFilePointerEx (in: hFile=0xcbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.644] WriteFile (in: hFile=0xcbc, lpBuffer=0x7c5fb70*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x5c8fd98, lpOverlapped=0x0 | out: lpBuffer=0x7c5fb70*, lpNumberOfBytesWritten=0x5c8fd98*=0x85, lpOverlapped=0x0) returned 1 [0127.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0127.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0127.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0127.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c5fb70) returned 1 [0127.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c5bf68) returned 1 [0127.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 [0127.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55b08) returned 1 [0127.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2da00 [0127.846] SetFilePointerEx (in: hFile=0xcbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.846] WriteFile (in: hFile=0xcbc, lpBuffer=0x3d55150*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x5c8fe20, lpOverlapped=0x0 | out: lpBuffer=0x3d55150*, lpNumberOfBytesWritten=0x5c8fe20*=0x11c, lpOverlapped=0x0) returned 1 [0127.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0127.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0127.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79368 [0127.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0127.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0127.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0127.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe5948 [0127.924] sprintf (in: _Dest=0x2fe5948, _Format="%c%c" | out: _Dest="a2") returned 2 [0127.924] sprintf (in: _Dest=0x2fe594a, _Format="%c%c" | out: _Dest="18") returned 2 [0127.924] sprintf (in: _Dest=0x2fe594c, _Format="%c%c" | out: _Dest="67") returned 2 [0127.924] sprintf (in: _Dest=0x2fe594e, _Format="%c%c" | out: _Dest="65") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5950, _Format="%c%c" | out: _Dest="ba") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5952, _Format="%c%c" | out: _Dest="b2") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5954, _Format="%c%c" | out: _Dest="28") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5956, _Format="%c%c" | out: _Dest="7e") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5958, _Format="%c%c" | out: _Dest="bc") returned 2 [0127.924] sprintf (in: _Dest=0x2fe595a, _Format="%c%c" | out: _Dest="39") returned 2 [0127.924] sprintf (in: _Dest=0x2fe595c, _Format="%c%c" | out: _Dest="89") returned 2 [0127.924] sprintf (in: _Dest=0x2fe595e, _Format="%c%c" | out: _Dest="8c") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5960, _Format="%c%c" | out: _Dest="b8") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5962, _Format="%c%c" | out: _Dest="71") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5964, _Format="%c%c" | out: _Dest="3c") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5966, _Format="%c%c" | out: _Dest="ce") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5968, _Format="%c%c" | out: _Dest="ca") returned 2 [0127.924] sprintf (in: _Dest=0x2fe596a, _Format="%c%c" | out: _Dest="fe") returned 2 [0127.924] sprintf (in: _Dest=0x2fe596c, _Format="%c%c" | out: _Dest="d2") returned 2 [0127.924] sprintf (in: _Dest=0x2fe596e, _Format="%c%c" | out: _Dest="d3") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5970, _Format="%c%c" | out: _Dest="80") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5972, _Format="%c%c" | out: _Dest="7a") returned 2 [0127.924] sprintf (in: _Dest=0x2fe5974, _Format="%c%c" | out: _Dest="b5") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5976, _Format="%c%c" | out: _Dest="0c") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5978, _Format="%c%c" | out: _Dest="ee") returned 2 [0127.925] sprintf (in: _Dest=0x2fe597a, _Format="%c%c" | out: _Dest="56") returned 2 [0127.925] sprintf (in: _Dest=0x2fe597c, _Format="%c%c" | out: _Dest="b4") returned 2 [0127.925] sprintf (in: _Dest=0x2fe597e, _Format="%c%c" | out: _Dest="d8") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5980, _Format="%c%c" | out: _Dest="b3") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5982, _Format="%c%c" | out: _Dest="e0") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5984, _Format="%c%c" | out: _Dest="77") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5986, _Format="%c%c" | out: _Dest="05") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5988, _Format="%c%c" | out: _Dest="2d") returned 2 [0127.925] sprintf (in: _Dest=0x2fe598a, _Format="%c%c" | out: _Dest="9f") returned 2 [0127.925] sprintf (in: _Dest=0x2fe598c, _Format="%c%c" | out: _Dest="a1") returned 2 [0127.925] sprintf (in: _Dest=0x2fe598e, _Format="%c%c" | out: _Dest="c5") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5990, _Format="%c%c" | out: _Dest="b1") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5992, _Format="%c%c" | out: _Dest="6f") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5994, _Format="%c%c" | out: _Dest="a8") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5996, _Format="%c%c" | out: _Dest="ef") returned 2 [0127.925] sprintf (in: _Dest=0x2fe5998, _Format="%c%c" | out: _Dest="10") returned 2 [0127.925] sprintf (in: _Dest=0x2fe599a, _Format="%c%c" | out: _Dest="d8") returned 2 [0127.925] RtlInitAnsiString (in: DestinationString=0x5c8fda8, SourceString="a2186765bab2287ebc39898cb8713ccecafed2d3807ab50cee56b4d8b3e077052d9fa1c5b16fa8ef10d8" | out: DestinationString="a2186765bab2287ebc39898cb8713ccecafed2d3807ab50cee56b4d8b3e077052d9fa1c5b16fa8ef10d8") [0127.925] RtlAnsiStringToUnicodeString (in: DestinationString=0x5c8fda0, SourceString="a2186765bab2287ebc39898cb8713ccecafed2d3807ab50cee56b4d8b3e077052d9fa1c5b16fa8ef10d8", AllocateDestinationString=1 | out: DestinationString="a2186765bab2287ebc39898cb8713ccecafed2d3807ab50cee56b4d8b3e077052d9fa1c5b16fa8ef10d8") returned 0x0 [0127.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7d88 [0127.925] wcscat (in: _Dest=0x3df57c0, _Source="a2186765bab2287ebc398" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\a2186765bab2287ebc398") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\a2186765bab2287ebc398" [0127.926] wcscat (in: _Dest=0x3df57c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\a2186765bab2287ebc398.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\a2186765bab2287ebc398.68814f" [0127.926] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\a2186765bab2287ebc398.68814f", NtPathName=0x5c8fd98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\a2186765bab2287ebc398.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7c18 [0127.926] NtSetInformationFile (FileHandle=0xcbc, IoStatusBlock=0x5c8fda0, FileInformation=0x2ff7c18, Length=0xac, FileInformationClass=0xa) returned 0x0 [0127.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 [0127.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03770) returned 1 [0127.965] NtQueryInformationFile (in: FileHandle=0xcbc, IoStatusBlock=0x5c8fd70, FileInformation=0x5c8fd78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5c8fd70, FileInformation=0x5c8fd78) returned 0x0 [0127.965] NtSetInformationFile (FileHandle=0xcbc, IoStatusBlock=0x5c8fd70, FileInformation=0x5c8fd78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0127.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 [0127.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7d88) returned 1 [0127.980] FlushFileBuffers (hFile=0xcbc) returned 1 [0127.990] CloseHandle (hObject=0xcbc) returned 1 [0128.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44ba0 [0128.006] wcscpy (in: _Dest=0x3d44ba0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0128.006] wcscat (in: _Dest=0x3d44ba0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" [0128.006] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\68814f-readme.txt")) returned 0xffffffff [0128.006] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1510 [0128.017] WriteFile (in: hFile=0x1510, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5c8fdb4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x5c8fdb4*=0x8b9, lpOverlapped=0x0) returned 1 [0128.029] CloseHandle (hObject=0x1510) returned 1 [0128.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 [0128.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df25b8) returned 1 Thread: id = 463 os_tid = 0xbc4 [0123.577] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at work.url")) returned 0x20 [0123.581] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url", dwFileAttributes=0x20) returned 1 [0126.220] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcc0 [0126.220] GetFileSizeEx (in: hFile=0xcc0, lpFileSize=0xaaefc34 | out: lpFileSize=0xaaefc34*=133) returned 1 [0126.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0126.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddce0 [0126.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edddd0 [0126.220] NtQuerySystemTime (in: CurrentTime=0xaaefba8 | out: CurrentTime=0xaaefba8*=132462177056256000) returned 0x0 [0126.220] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0xb6ea040 [0126.220] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x5a959e6b [0126.220] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x782c694f [0126.220] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x1b94f5ea [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x1399015b [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x7a03e218 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x29ba6ec2 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x24cd8b84 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x19fe119 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x5d5eae5a [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x6efbf5d1 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x77768988 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x268964c4 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x6a1f304e [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x48fb47f6 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x486e473c [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x5faab52d [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x251f0509 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x4da5bb59 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x9ce9a39 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x4c3a7b27 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x6709cf3c [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x6db926a7 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x3f9c6bd8 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x92a4d18 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x494d3bfd [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x45853208 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x1bdbcba5 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x5b069412 [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x40c40d0b [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x34536baa [0126.221] RtlRandomEx (in: Seed=0xaaefba0 | out: Seed=0xaaefba0) returned 0x41e8647b [0126.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc68) returned 1 [0126.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a3b0c0 [0126.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a45058 [0126.232] ReadFile (in: hFile=0xcc0, lpBuffer=0x7a3b0c0, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xaaefb9c, lpOverlapped=0x0 | out: lpBuffer=0x7a3b0c0*, lpNumberOfBytesRead=0xaaefb9c*=0x85, lpOverlapped=0x0) returned 1 [0126.237] SetFilePointerEx (in: hFile=0xcc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.237] WriteFile (in: hFile=0xcc0, lpBuffer=0x7a45058*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xaaefba0, lpOverlapped=0x0 | out: lpBuffer=0x7a45058*, lpNumberOfBytesWritten=0xaaefba0*=0x85, lpOverlapped=0x0) returned 1 [0129.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baf0 [0129.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0129.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0129.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a45058) returned 1 [0129.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b0c0) returned 1 [0129.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 [0129.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0129.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcfa90 [0129.971] SetFilePointerEx (in: hFile=0xcc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.971] WriteFile (in: hFile=0xcc0, lpBuffer=0x3d562a8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xaaefc28, lpOverlapped=0x0 | out: lpBuffer=0x3d562a8*, lpNumberOfBytesWritten=0xaaefc28*=0x11c, lpOverlapped=0x0) returned 1 [0130.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85a58 [0130.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0130.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0130.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0130.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x7ad7120 [0130.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0130.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b848 [0130.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b848) returned 1 [0130.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0130.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0130.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6ba8 [0130.129] sprintf (in: _Dest=0x2fe6ba8, _Format="%c%c" | out: _Dest="fa") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6baa, _Format="%c%c" | out: _Dest="ae") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bac, _Format="%c%c" | out: _Dest="c0") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bae, _Format="%c%c" | out: _Dest="86") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bb0, _Format="%c%c" | out: _Dest="0b") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bb2, _Format="%c%c" | out: _Dest="51") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bb4, _Format="%c%c" | out: _Dest="87") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bb6, _Format="%c%c" | out: _Dest="4d") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bb8, _Format="%c%c" | out: _Dest="e4") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bba, _Format="%c%c" | out: _Dest="36") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bbc, _Format="%c%c" | out: _Dest="c4") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bbe, _Format="%c%c" | out: _Dest="a8") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bc0, _Format="%c%c" | out: _Dest="a0") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bc2, _Format="%c%c" | out: _Dest="8b") returned 2 [0130.129] sprintf (in: _Dest=0x2fe6bc4, _Format="%c%c" | out: _Dest="36") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bc6, _Format="%c%c" | out: _Dest="0f") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bc8, _Format="%c%c" | out: _Dest="9d") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bca, _Format="%c%c" | out: _Dest="46") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bcc, _Format="%c%c" | out: _Dest="42") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bce, _Format="%c%c" | out: _Dest="d8") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bd0, _Format="%c%c" | out: _Dest="19") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bd2, _Format="%c%c" | out: _Dest="24") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bd4, _Format="%c%c" | out: _Dest="15") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bd6, _Format="%c%c" | out: _Dest="c8") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bd8, _Format="%c%c" | out: _Dest="f0") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bda, _Format="%c%c" | out: _Dest="36") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bdc, _Format="%c%c" | out: _Dest="b1") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bde, _Format="%c%c" | out: _Dest="37") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6be0, _Format="%c%c" | out: _Dest="46") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6be2, _Format="%c%c" | out: _Dest="8e") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6be4, _Format="%c%c" | out: _Dest="39") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6be6, _Format="%c%c" | out: _Dest="3c") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6be8, _Format="%c%c" | out: _Dest="be") returned 2 [0130.130] sprintf (in: _Dest=0x2fe6bea, _Format="%c%c" | out: _Dest="7e") returned 2 [0130.131] sprintf (in: _Dest=0x2fe6bec, _Format="%c%c" | out: _Dest="c5") returned 2 [0130.131] sprintf (in: _Dest=0x2fe6bee, _Format="%c%c" | out: _Dest="53") returned 2 [0130.131] sprintf (in: _Dest=0x2fe6bf0, _Format="%c%c" | out: _Dest="48") returned 2 [0130.131] sprintf (in: _Dest=0x2fe6bf2, _Format="%c%c" | out: _Dest="91") returned 2 [0130.131] sprintf (in: _Dest=0x2fe6bf4, _Format="%c%c" | out: _Dest="e9") returned 2 [0130.131] sprintf (in: _Dest=0x2fe6bf6, _Format="%c%c" | out: _Dest="01") returned 2 [0130.131] sprintf (in: _Dest=0x2fe6bf8, _Format="%c%c" | out: _Dest="1b") returned 2 [0130.131] sprintf (in: _Dest=0x2fe6bfa, _Format="%c%c" | out: _Dest="1d") returned 2 [0130.131] RtlInitAnsiString (in: DestinationString=0xaaefbb0, SourceString="faaec0860b51874de436c4a8a08b360f9d4642d8192415c8f036b137468e393cbe7ec5534891e9011b1d" | out: DestinationString="faaec0860b51874de436c4a8a08b360f9d4642d8192415c8f036b137468e393cbe7ec5534891e9011b1d") [0130.131] RtlAnsiStringToUnicodeString (in: DestinationString=0xaaefba8, SourceString="faaec0860b51874de436c4a8a08b360f9d4642d8192415c8f036b137468e393cbe7ec5534891e9011b1d", AllocateDestinationString=1 | out: DestinationString="faaec0860b51874de436c4a8a08b360f9d4642d8192415c8f036b137468e393cbe7ec5534891e9011b1d") returned 0x0 [0130.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7c18 [0130.131] wcscat (in: _Dest=0x3df48c0, _Source="faaec0860b51874de436c" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\faaec0860b51874de436c") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\faaec0860b51874de436c" [0130.131] wcscat (in: _Dest=0x3df48c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\faaec0860b51874de436c.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\faaec0860b51874de436c.68814f" [0130.131] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\faaec0860b51874de436c.68814f", NtPathName=0xaaefba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\faaec0860b51874de436c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7d88 [0130.131] NtSetInformationFile (FileHandle=0xcc0, IoStatusBlock=0xaaefba8, FileInformation=0x2ff7d88, Length=0xac, FileInformationClass=0xa) returned 0x0 [0130.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7d88) returned 1 [0130.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f4c0) returned 1 [0130.412] NtQueryInformationFile (in: FileHandle=0xcc0, IoStatusBlock=0xaaefb78, FileInformation=0xaaefb80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaaefb78, FileInformation=0xaaefb80) returned 0x0 [0130.412] NtSetInformationFile (FileHandle=0xcc0, IoStatusBlock=0xaaefb78, FileInformation=0xaaefb80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df48c0) returned 1 [0130.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 [0130.415] FlushFileBuffers (hFile=0xcc0) returned 1 [0130.419] CloseHandle (hObject=0xcc0) returned 1 [0130.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d455c0 [0130.421] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0130.421] wcscat (in: _Dest=0x3d455c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" [0130.421] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\68814f-readme.txt")) returned 0x20 [0130.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 [0130.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 Thread: id = 464 os_tid = 0x248 [0123.578] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft store.url")) returned 0x20 [0123.581] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url", dwFileAttributes=0x20) returned 1 [0127.596] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcb4 [0127.596] GetFileSizeEx (in: hFile=0xcb4, lpFileSize=0xadbfabc | out: lpFileSize=0xadbfabc*=134) returned 1 [0127.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0127.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0127.596] NtQuerySystemTime (in: CurrentTime=0xadbfa30 | out: CurrentTime=0xadbfa30*=132462177069828000) returned 0x0 [0127.596] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x1c11ae78 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x5be22ece [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x78336574 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x7f93f0e4 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x7ac72890 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x60daacdd [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x38a755ed [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x50b9ace1 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x760efa67 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x92c2ae7 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x57294e87 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x6a813998 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x52f1d7e6 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x47489aa [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x702d157 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x4744c89c [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x486894a4 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x660d423 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x7eef2d13 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x9fce415 [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x6badb48e [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x4846646d [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x4d3b921d [0127.597] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x738212d3 [0127.598] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x45fdb9be [0127.598] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0xacb257d [0127.598] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x1724d7c7 [0127.598] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x3ba2fe61 [0127.598] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x473eb61e [0127.598] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x10b64812 [0127.598] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x47ceb0d4 [0127.598] RtlRandomEx (in: Seed=0xadbfa28 | out: Seed=0xadbfa28) returned 0x5eb3d316 [0127.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c543e0 [0127.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c58360 [0127.620] ReadFile (in: hFile=0xcb4, lpBuffer=0x7c543e0, nNumberOfBytesToRead=0x86, lpNumberOfBytesRead=0xadbfa24, lpOverlapped=0x0 | out: lpBuffer=0x7c543e0*, lpNumberOfBytesRead=0xadbfa24*=0x86, lpOverlapped=0x0) returned 1 [0127.622] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.622] WriteFile (in: hFile=0xcb4, lpBuffer=0x7c58360*, nNumberOfBytesToWrite=0x86, lpNumberOfBytesWritten=0xadbfa28, lpOverlapped=0x0 | out: lpBuffer=0x7c58360*, lpNumberOfBytesWritten=0xadbfa28*=0x86, lpOverlapped=0x0) returned 1 [0129.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0129.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0129.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0129.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c58360) returned 1 [0129.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c543e0) returned 1 [0129.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0129.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e852c0) returned 1 [0129.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2db00 [0129.445] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.445] WriteFile (in: hFile=0xcb4, lpBuffer=0x3d54938*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xadbfab0, lpOverlapped=0x0 | out: lpBuffer=0x3d54938*, lpNumberOfBytesWritten=0xadbfab0*=0x118, lpOverlapped=0x0) returned 1 [0130.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095a20 [0130.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0130.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0130.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0130.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c08 [0130.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0130.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0130.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0130.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0130.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095a20) returned 1 [0130.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4d) returned 0x3e14e00 [0130.731] sprintf (in: _Dest=0x3e14e00, _Format="%c%c" | out: _Dest="4c") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e02, _Format="%c%c" | out: _Dest="52") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e04, _Format="%c%c" | out: _Dest="70") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e06, _Format="%c%c" | out: _Dest="6e") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e08, _Format="%c%c" | out: _Dest="ab") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e0a, _Format="%c%c" | out: _Dest="71") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e0c, _Format="%c%c" | out: _Dest="29") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e0e, _Format="%c%c" | out: _Dest="44") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e10, _Format="%c%c" | out: _Dest="1d") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e12, _Format="%c%c" | out: _Dest="88") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e14, _Format="%c%c" | out: _Dest="de") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e16, _Format="%c%c" | out: _Dest="c3") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e18, _Format="%c%c" | out: _Dest="17") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e1a, _Format="%c%c" | out: _Dest="ea") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e1c, _Format="%c%c" | out: _Dest="c8") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e1e, _Format="%c%c" | out: _Dest="a2") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e20, _Format="%c%c" | out: _Dest="b9") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e22, _Format="%c%c" | out: _Dest="25") returned 2 [0130.731] sprintf (in: _Dest=0x3e14e24, _Format="%c%c" | out: _Dest="89") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e26, _Format="%c%c" | out: _Dest="9e") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e28, _Format="%c%c" | out: _Dest="ed") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e2a, _Format="%c%c" | out: _Dest="37") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e2c, _Format="%c%c" | out: _Dest="42") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e2e, _Format="%c%c" | out: _Dest="d3") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e30, _Format="%c%c" | out: _Dest="d2") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e32, _Format="%c%c" | out: _Dest="59") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e34, _Format="%c%c" | out: _Dest="1c") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e36, _Format="%c%c" | out: _Dest="6a") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e38, _Format="%c%c" | out: _Dest="ee") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e3a, _Format="%c%c" | out: _Dest="da") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e3c, _Format="%c%c" | out: _Dest="70") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e3e, _Format="%c%c" | out: _Dest="d6") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e40, _Format="%c%c" | out: _Dest="36") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e42, _Format="%c%c" | out: _Dest="8c") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e44, _Format="%c%c" | out: _Dest="81") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e46, _Format="%c%c" | out: _Dest="14") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e48, _Format="%c%c" | out: _Dest="fb") returned 2 [0130.732] sprintf (in: _Dest=0x3e14e4a, _Format="%c%c" | out: _Dest="a6") returned 2 [0130.733] RtlInitAnsiString (in: DestinationString=0xadbfa38, SourceString="4c52706eab7129441d88dec317eac8a2b925899eed3742d3d2591c6aeeda70d6368c8114fba6" | out: DestinationString="4c52706eab7129441d88dec317eac8a2b925899eed3742d3d2591c6aeeda70d6368c8114fba6") [0130.733] RtlAnsiStringToUnicodeString (in: DestinationString=0xadbfa30, SourceString="4c52706eab7129441d88dec317eac8a2b925899eed3742d3d2591c6aeeda70d6368c8114fba6", AllocateDestinationString=1 | out: DestinationString="4c52706eab7129441d88dec317eac8a2b925899eed3742d3d2591c6aeeda70d6368c8114fba6") returned 0x0 [0130.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053288 [0130.733] wcscat (in: _Dest=0x3df5d60, _Source="4c52706eab7129441d8" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\4c52706eab7129441d8") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\4c52706eab7129441d8" [0130.733] wcscat (in: _Dest=0x3df5d60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\4c52706eab7129441d8.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\4c52706eab7129441d8.68814f" [0130.733] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\4c52706eab7129441d8.68814f", NtPathName=0xadbfa28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\4c52706eab7129441d8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c6e8 [0130.733] NtSetInformationFile (FileHandle=0xcb4, IoStatusBlock=0xadbfa30, FileInformation=0x35c6e8, Length=0xa8, FileInformationClass=0xa) returned 0x0 [0130.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 [0130.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a73bd0) returned 1 [0130.735] NtQueryInformationFile (in: FileHandle=0xcb4, IoStatusBlock=0xadbfa00, FileInformation=0xadbfa08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xadbfa00, FileInformation=0xadbfa08) returned 0x0 [0130.735] NtSetInformationFile (FileHandle=0xcb4, IoStatusBlock=0xadbfa00, FileInformation=0xadbfa08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5d60) returned 1 [0130.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 [0130.736] FlushFileBuffers (hFile=0xcb4) returned 1 [0130.768] CloseHandle (hObject=0xcb4) returned 1 [0130.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45800 [0130.781] wcscpy (in: _Dest=0x3d45800, _Source="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\" [0130.781] wcscat (in: _Dest=0x3d45800, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" [0130.781] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Microsoft Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\microsoft websites\\68814f-readme.txt")) returned 0x20 [0130.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45800) returned 1 [0130.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44450) returned 1 Thread: id = 465 os_tid = 0x220 [0123.579] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets")) returned 0x20 [0123.579] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0123.579] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.580] GetLastError () returned 0x5 [0123.580] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets", dwFileAttributes=0x20) returned 0 [0123.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 Thread: id = 466 os_tid = 0x564 [0123.582] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets")) returned 0x20 [0123.582] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0123.582] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.582] GetLastError () returned 0x5 [0123.582] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0 [0123.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ee0) returned 1 Thread: id = 467 os_tid = 0x5f8 [0123.584] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\3hJ4_EkXHl9ZYnPj.csv" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\3hj4_ekxhl9zynpj.csv")) returned 0x20 [0123.584] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\3hJ4_EkXHl9ZYnPj.csv", dwFileAttributes=0x20) returned 1 [0127.573] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\3hJ4_EkXHl9ZYnPj.csv" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\3hj4_ekxhl9zynpj.csv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcb8 [0127.573] GetFileSizeEx (in: hFile=0xcb8, lpFileSize=0xb0ef7f4 | out: lpFileSize=0xb0ef7f4*=36980) returned 1 [0127.573] SetFilePointerEx (in: hFile=0xcb8, liDistanceToMove=0x9070, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.573] ReadFile (in: hFile=0xcb8, lpBuffer=0xb0ef7d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb0ef7e0, lpOverlapped=0x0 | out: lpBuffer=0xb0ef7d0*, lpNumberOfBytesRead=0xb0ef7e0*=0x4, lpOverlapped=0x0) returned 1 [0127.576] SetFilePointerEx (in: hFile=0xcb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0127.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0127.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.577] NtQuerySystemTime (in: CurrentTime=0xb0ef768 | out: CurrentTime=0xb0ef768*=132462177069672000) returned 0x0 [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x6b0205f5 [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x19aef329 [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x6fe990ea [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x6c1bb50 [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x4afc3c8e [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x5f187a39 [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x4aa11c12 [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x1a7da366 [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x7ad69995 [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x3db75cf8 [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x2fce51cf [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x31e595ea [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x616560c3 [0127.577] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x5afab510 [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x5f886981 [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x6927525c [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x353063dc [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x2bdb23e8 [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x49de924 [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x4db66f61 [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x532eee7d [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x16a49ca1 [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x359c8361 [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x3da7828d [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x32be4c70 [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x2b1db3f8 [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x321ef991 [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x5caa11ee [0127.578] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x738212d3 [0127.579] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x14c2cca5 [0127.579] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x341cbe8b [0127.579] RtlRandomEx (in: Seed=0xb0ef760 | out: Seed=0xb0ef760) returned 0x5dff2592 [0127.594] SetFilePointerEx (in: hFile=0xcb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.594] ReadFile (in: hFile=0xcb8, lpBuffer=0x7c4cbd0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb0ef768, lpOverlapped=0x0 | out: lpBuffer=0x7c4cbd0*, lpNumberOfBytesRead=0xb0ef768*=0x3c00, lpOverlapped=0x0) returned 1 [0127.594] SetFilePointerEx (in: hFile=0xcb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e852c0 [0127.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e418 [0127.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0127.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0127.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c507d8 [0127.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0127.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0127.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e852c0) returned 1 [0127.595] WriteFile (in: hFile=0xcb8, lpBuffer=0x7c507d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb0ef768, lpOverlapped=0x0 | out: lpBuffer=0x7c507d8*, lpNumberOfBytesWritten=0xb0ef768*=0x3c00, lpOverlapped=0x0) returned 1 [0127.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c507d8) returned 1 [0127.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c4cbd0) returned 1 [0127.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2dc80 [0127.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0127.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2dc00 [0127.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0127.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0127.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28b8) returned 1 [0127.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0127.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0127.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d54cb0 [0127.839] SetFilePointerEx (in: hFile=0xcb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.839] WriteFile (in: hFile=0xcb8, lpBuffer=0x3d54cb0*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xb0ef7e8, lpOverlapped=0x0 | out: lpBuffer=0x3d54cb0*, lpNumberOfBytesWritten=0xb0ef7e8*=0x11a, lpOverlapped=0x0) returned 1 [0127.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0127.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0127.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86728 [0127.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0127.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0127.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2980) returned 1 [0127.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe5948 [0127.913] sprintf (in: _Dest=0x2fe5948, _Format="%c%c" | out: _Dest="88") returned 2 [0127.913] sprintf (in: _Dest=0x2fe594a, _Format="%c%c" | out: _Dest="15") returned 2 [0127.914] sprintf (in: _Dest=0x2fe594c, _Format="%c%c" | out: _Dest="ab") returned 2 [0127.914] sprintf (in: _Dest=0x2fe594e, _Format="%c%c" | out: _Dest="73") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5950, _Format="%c%c" | out: _Dest="ff") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5952, _Format="%c%c" | out: _Dest="7d") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5954, _Format="%c%c" | out: _Dest="a3") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5956, _Format="%c%c" | out: _Dest="c6") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5958, _Format="%c%c" | out: _Dest="28") returned 2 [0127.914] sprintf (in: _Dest=0x2fe595a, _Format="%c%c" | out: _Dest="e5") returned 2 [0127.914] sprintf (in: _Dest=0x2fe595c, _Format="%c%c" | out: _Dest="a1") returned 2 [0127.914] sprintf (in: _Dest=0x2fe595e, _Format="%c%c" | out: _Dest="93") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5960, _Format="%c%c" | out: _Dest="91") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5962, _Format="%c%c" | out: _Dest="c9") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5964, _Format="%c%c" | out: _Dest="33") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5966, _Format="%c%c" | out: _Dest="9b") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5968, _Format="%c%c" | out: _Dest="b2") returned 2 [0127.914] sprintf (in: _Dest=0x2fe596a, _Format="%c%c" | out: _Dest="7e") returned 2 [0127.914] sprintf (in: _Dest=0x2fe596c, _Format="%c%c" | out: _Dest="91") returned 2 [0127.914] sprintf (in: _Dest=0x2fe596e, _Format="%c%c" | out: _Dest="1a") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5970, _Format="%c%c" | out: _Dest="cb") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5972, _Format="%c%c" | out: _Dest="37") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5974, _Format="%c%c" | out: _Dest="62") returned 2 [0127.914] sprintf (in: _Dest=0x2fe5976, _Format="%c%c" | out: _Dest="54") returned 2 [0127.915] sprintf (in: _Dest=0x2fe5978, _Format="%c%c" | out: _Dest="8b") returned 2 [0127.915] sprintf (in: _Dest=0x2fe597a, _Format="%c%c" | out: _Dest="98") returned 2 [0127.915] sprintf (in: _Dest=0x2fe597c, _Format="%c%c" | out: _Dest="f8") returned 2 [0127.915] sprintf (in: _Dest=0x2fe597e, _Format="%c%c" | out: _Dest="5c") returned 2 [0127.915] sprintf (in: _Dest=0x2fe5980, _Format="%c%c" | out: _Dest="7f") returned 2 [0127.915] sprintf (in: _Dest=0x2fe5982, _Format="%c%c" | out: _Dest="60") returned 2 [0127.915] sprintf (in: _Dest=0x2fe5984, _Format="%c%c" | out: _Dest="1e") returned 2 [0127.915] sprintf (in: _Dest=0x2fe5986, _Format="%c%c" | out: _Dest="e8") returned 2 [0127.915] sprintf (in: _Dest=0x2fe5988, _Format="%c%c" | out: _Dest="64") returned 2 [0127.915] sprintf (in: _Dest=0x2fe598a, _Format="%c%c" | out: _Dest="9f") returned 2 [0127.915] sprintf (in: _Dest=0x2fe598c, _Format="%c%c" | out: _Dest="73") returned 2 [0127.915] sprintf (in: _Dest=0x2fe598e, _Format="%c%c" | out: _Dest="1e") returned 2 [0127.915] sprintf (in: _Dest=0x2fe5990, _Format="%c%c" | out: _Dest="9b") returned 2 [0127.915] sprintf (in: _Dest=0x2fe5992, _Format="%c%c" | out: _Dest="4b") returned 2 [0127.915] sprintf (in: _Dest=0x2fe5994, _Format="%c%c" | out: _Dest="c7") returned 2 [0127.915] sprintf (in: _Dest=0x2fe5996, _Format="%c%c" | out: _Dest="d7") returned 2 [0127.915] RtlInitAnsiString (in: DestinationString=0xb0ef770, SourceString="8815ab73ff7da3c628e5a19391c9339bb27e911acb3762548b98f85c7f601ee8649f731e9b4bc7d7" | out: DestinationString="8815ab73ff7da3c628e5a19391c9339bb27e911acb3762548b98f85c7f601ee8649f731e9b4bc7d7") [0127.915] RtlAnsiStringToUnicodeString (in: DestinationString=0xb0ef768, SourceString="8815ab73ff7da3c628e5a19391c9339bb27e911acb3762548b98f85c7f601ee8649f731e9b4bc7d7", AllocateDestinationString=1 | out: DestinationString="8815ab73ff7da3c628e5a19391c9339bb27e911acb3762548b98f85c7f601ee8649f731e9b4bc7d7") returned 0x0 [0127.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35af88 [0127.915] wcscat (in: _Dest=0x3df6120, _Source="8815ab73ff7da3c628e5" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8815ab73ff7da3c628e5") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8815ab73ff7da3c628e5" [0127.915] wcscat (in: _Dest=0x3df6120, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8815ab73ff7da3c628e5.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8815ab73ff7da3c628e5.68814f" [0127.916] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8815ab73ff7da3c628e5.68814f", NtPathName=0xb0ef760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8815ab73ff7da3c628e5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0127.916] NtSetInformationFile (FileHandle=0xcb8, IoStatusBlock=0xb0ef768, FileInformation=0x35c378, Length=0xa8, FileInformationClass=0xa) returned 0x0 [0128.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 [0128.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01940) returned 1 [0128.121] NtQueryInformationFile (in: FileHandle=0xcb8, IoStatusBlock=0xb0ef738, FileInformation=0xb0ef740, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb0ef738, FileInformation=0xb0ef740) returned 0x0 [0128.121] NtSetInformationFile (FileHandle=0xcb8, IoStatusBlock=0xb0ef738, FileInformation=0xb0ef740, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6120) returned 1 [0128.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 [0128.134] FlushFileBuffers (hFile=0xcb8) returned 1 [0128.142] CloseHandle (hObject=0xcb8) returned 1 [0128.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0128.147] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0128.147] wcscat (in: _Dest=0x3eb9230, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" [0128.147] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\68814f-readme.txt")) returned 0x20 [0128.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 [0128.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d440f0) returned 1 Thread: id = 468 os_tid = 0x640 [0123.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9bc0 [0123.585] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb" [0123.585] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\" [0123.585] wcscat (in: _Dest=0x3eb9bc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\*" [0123.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0123.585] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8442d40, ftCreationTime.dwHighDateTime=0x1d5e511, ftLastAccessTime.dwLowDateTime=0xdb2218c0, ftLastAccessTime.dwHighDateTime=0x1d5da63, ftLastWriteTime.dwLowDateTime=0xdb2218c0, ftLastWriteTime.dwHighDateTime=0x1d5da63, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0123.585] wcscmp (_String1=".", _String2=".") returned 0 [0123.585] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8442d40, ftCreationTime.dwHighDateTime=0x1d5e511, ftLastAccessTime.dwLowDateTime=0xdb2218c0, ftLastAccessTime.dwHighDateTime=0x1d5da63, ftLastWriteTime.dwLowDateTime=0xdb2218c0, ftLastWriteTime.dwHighDateTime=0x1d5da63, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.586] wcscmp (_String1="..", _String2=".") returned 1 [0123.586] wcscmp (_String1="..", _String2="..") returned 0 [0123.586] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ae3f00, ftCreationTime.dwHighDateTime=0x1d5e38b, ftLastAccessTime.dwLowDateTime=0x9b18c950, ftLastAccessTime.dwHighDateTime=0x1d5defe, ftLastWriteTime.dwLowDateTime=0x9b18c950, ftLastWriteTime.dwHighDateTime=0x1d5defe, nFileSizeHigh=0x0, nFileSizeLow=0x155ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="356mwgw.gif", cAlternateFileName="")) returned 1 [0123.586] wcscmp (_String1="356mwgw.gif", _String2=".") returned 1 [0123.586] wcscmp (_String1="356mwgw.gif", _String2="..") returned 1 [0123.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d1a8 [0123.586] wcscpy (in: _Dest=0x32d1a8, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb" [0123.586] wcscat (in: _Dest=0x32d1a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\" [0123.586] wcscat (in: _Dest=0x32d1a8, _Source="356mwgw.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\356mwgw.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\356mwgw.gif" [0124.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0124.064] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb343bd60, ftCreationTime.dwHighDateTime=0x1d5de62, ftLastAccessTime.dwLowDateTime=0x8f022640, ftLastAccessTime.dwHighDateTime=0x1d5e78f, ftLastWriteTime.dwLowDateTime=0x8f022640, ftLastWriteTime.dwHighDateTime=0x1d5e78f, nFileSizeHigh=0x0, nFileSizeLow=0xdaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADZCx5HscPtV3CzFbFq.flv", cAlternateFileName="ADZCX5~1.FLV")) returned 1 [0124.064] wcscmp (_String1="ADZCx5HscPtV3CzFbFq.flv", _String2=".") returned 1 [0124.064] wcscmp (_String1="ADZCx5HscPtV3CzFbFq.flv", _String2="..") returned 1 [0124.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c428 [0124.065] wcscpy (in: _Dest=0x35c428, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb" [0124.065] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\" [0124.065] wcscat (in: _Dest=0x35c428, _Source="ADZCx5HscPtV3CzFbFq.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\ADZCx5HscPtV3CzFbFq.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\ADZCx5HscPtV3CzFbFq.flv" [0124.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1414 [0124.066] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df1bde0, ftCreationTime.dwHighDateTime=0x1d5dadc, ftLastAccessTime.dwLowDateTime=0x9fb93d30, ftLastAccessTime.dwHighDateTime=0x1d5dee2, ftLastWriteTime.dwLowDateTime=0x9fb93d30, ftLastWriteTime.dwHighDateTime=0x1d5dee2, nFileSizeHigh=0x0, nFileSizeLow=0x152ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="sY9nAO.flv", cAlternateFileName="")) returned 1 [0124.067] wcscmp (_String1="sY9nAO.flv", _String2=".") returned 1 [0124.067] wcscmp (_String1="sY9nAO.flv", _String2="..") returned 1 [0124.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5db8 [0124.067] wcscpy (in: _Dest=0x3eb5db8, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb" [0124.067] wcscat (in: _Dest=0x3eb5db8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\" [0124.067] wcscat (in: _Dest=0x3eb5db8, _Source="sY9nAO.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\sY9nAO.flv") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\sY9nAO.flv" [0124.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418 [0124.069] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df1bde0, ftCreationTime.dwHighDateTime=0x1d5dadc, ftLastAccessTime.dwLowDateTime=0x9fb93d30, ftLastAccessTime.dwHighDateTime=0x1d5dee2, ftLastWriteTime.dwLowDateTime=0x9fb93d30, ftLastWriteTime.dwHighDateTime=0x1d5dee2, nFileSizeHigh=0x0, nFileSizeLow=0x152ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="sY9nAO.flv", cAlternateFileName="")) returned 0 [0124.069] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0124.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0124.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 [0124.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5cf0) returned 1 Thread: id = 469 os_tid = 0x72c [0123.587] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\FcNZOQeXf.wav" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\fcnzoqexf.wav")) returned 0x20 [0123.587] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\FcNZOQeXf.wav", dwFileAttributes=0x20) returned 1 [0127.124] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\FcNZOQeXf.wav" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\fcnzoqexf.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xca0 [0127.124] GetFileSizeEx (in: hFile=0xca0, lpFileSize=0xb17f884 | out: lpFileSize=0xb17f884*=75584) returned 1 [0127.124] SetFilePointerEx (in: hFile=0xca0, liDistanceToMove=0x1273c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.124] ReadFile (in: hFile=0xca0, lpBuffer=0xb17f860, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb17f870, lpOverlapped=0x0 | out: lpBuffer=0xb17f860*, lpNumberOfBytesRead=0xb17f870*=0x4, lpOverlapped=0x0) returned 1 [0127.127] SetFilePointerEx (in: hFile=0xca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0127.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0127.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0127.127] NtQuerySystemTime (in: CurrentTime=0xb17f7f8 | out: CurrentTime=0xb17f7f8*=132462177065148000) returned 0x0 [0127.127] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x253ee265 [0127.127] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x73722319 [0127.127] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x73553a60 [0127.127] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x28fda6f8 [0127.127] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x2afd4fc0 [0127.127] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x11f2351d [0127.127] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x27eac256 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x77dde69f [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x25c99f3b [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x3f58ffcc [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x441f747e [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0xea48c15 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x6b687708 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x2294387b [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0xe41d454 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x1fa19d1 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x1197ca49 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x7c3deec4 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x5536fff0 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x507fed69 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x65bf57ff [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x37f3c0b8 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x103c82ae [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x4c634ebc [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x71e9c256 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x2ca3c2cc [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x2c628d8f [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x39cd5dd2 [0127.128] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x148514a6 [0127.129] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x7036ab2b [0127.129] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x1806108c [0127.129] RtlRandomEx (in: Seed=0xb17f7f0 | out: Seed=0xb17f7f0) returned 0x6c84a3c4 [0127.140] SetFilePointerEx (in: hFile=0xca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.140] ReadFile (in: hFile=0xca0, lpBuffer=0x7bc43e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb17f7f8, lpOverlapped=0x0 | out: lpBuffer=0x7bc43e0*, lpNumberOfBytesRead=0xb17f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0127.140] SetFilePointerEx (in: hFile=0xca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55c28 [0127.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0127.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0127.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0127.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0127.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0127.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0127.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3330) returned 1 [0127.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0127.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55c28) returned 1 [0127.148] WriteFile (in: hFile=0xca0, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb17f7f8, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xb17f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0130.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0130.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc43e0) returned 1 [0130.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86b48 [0130.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538f0) returned 1 [0130.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86b78 [0130.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538f0 [0130.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53878 [0130.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53878) returned 1 [0130.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0130.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 [0130.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7ad5628 [0130.066] SetFilePointerEx (in: hFile=0xca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.067] WriteFile (in: hFile=0xca0, lpBuffer=0x7ad5628*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb17f878, lpOverlapped=0x0 | out: lpBuffer=0x7ad5628*, lpNumberOfBytesWritten=0xb17f878*=0x10c, lpOverlapped=0x0) returned 1 [0130.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0130.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0130.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0130.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0130.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3380 [0130.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0130.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0130.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0130.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0130.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x2fc8dc8 [0130.190] sprintf (in: _Dest=0x2fc8dc8, _Format="%c%c" | out: _Dest="1e") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8dca, _Format="%c%c" | out: _Dest="2e") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8dcc, _Format="%c%c" | out: _Dest="2e") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8dce, _Format="%c%c" | out: _Dest="a0") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8dd0, _Format="%c%c" | out: _Dest="c4") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8dd2, _Format="%c%c" | out: _Dest="c3") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8dd4, _Format="%c%c" | out: _Dest="b3") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8dd6, _Format="%c%c" | out: _Dest="ec") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8dd8, _Format="%c%c" | out: _Dest="0e") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8dda, _Format="%c%c" | out: _Dest="57") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8ddc, _Format="%c%c" | out: _Dest="b8") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8dde, _Format="%c%c" | out: _Dest="05") returned 2 [0130.190] sprintf (in: _Dest=0x2fc8de0, _Format="%c%c" | out: _Dest="f4") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8de2, _Format="%c%c" | out: _Dest="1f") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8de4, _Format="%c%c" | out: _Dest="e5") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8de6, _Format="%c%c" | out: _Dest="26") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8de8, _Format="%c%c" | out: _Dest="df") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8dea, _Format="%c%c" | out: _Dest="58") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8dec, _Format="%c%c" | out: _Dest="40") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8dee, _Format="%c%c" | out: _Dest="bb") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8df0, _Format="%c%c" | out: _Dest="d5") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8df2, _Format="%c%c" | out: _Dest="21") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8df4, _Format="%c%c" | out: _Dest="ec") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8df6, _Format="%c%c" | out: _Dest="6c") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8df8, _Format="%c%c" | out: _Dest="4e") returned 2 [0130.191] sprintf (in: _Dest=0x2fc8dfa, _Format="%c%c" | out: _Dest="1c") returned 2 [0130.191] RtlInitAnsiString (in: DestinationString=0xb17f800, SourceString="1e2e2ea0c4c3b3ec0e57b805f41fe526df5840bbd521ec6c4e1c" | out: DestinationString="1e2e2ea0c4c3b3ec0e57b805f41fe526df5840bbd521ec6c4e1c") [0130.191] RtlAnsiStringToUnicodeString (in: DestinationString=0xb17f7f8, SourceString="1e2e2ea0c4c3b3ec0e57b805f41fe526df5840bbd521ec6c4e1c", AllocateDestinationString=1 | out: DestinationString="1e2e2ea0c4c3b3ec0e57b805f41fe526df5840bbd521ec6c4e1c") returned 0x0 [0130.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3def0 [0130.191] wcscat (in: _Dest=0x3d45800, _Source="1e2e2ea0c4c3b" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\1e2e2ea0c4c3b") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\1e2e2ea0c4c3b" [0130.191] wcscat (in: _Dest=0x3d45800, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\1e2e2ea0c4c3b.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\1e2e2ea0c4c3b.68814f" [0130.191] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\1e2e2ea0c4c3b.68814f", NtPathName=0xb17f7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\1e2e2ea0c4c3b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053528 [0130.191] NtSetInformationFile (FileHandle=0xca0, IoStatusBlock=0xb17f7f8, FileInformation=0x3053528, Length=0x9a, FileInformationClass=0xa) returned 0x0 [0130.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053528) returned 1 [0130.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a73bd0) returned 1 [0130.721] NtQueryInformationFile (in: FileHandle=0xca0, IoStatusBlock=0xb17f7c8, FileInformation=0xb17f7d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb17f7c8, FileInformation=0xb17f7d0) returned 0x0 [0130.721] NtSetInformationFile (FileHandle=0xca0, IoStatusBlock=0xb17f7c8, FileInformation=0xb17f7d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45800) returned 1 [0130.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0130.723] FlushFileBuffers (hFile=0xca0) returned 1 [0130.754] CloseHandle (hObject=0xca0) returned 1 [0130.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c318 [0130.758] wcscpy (in: _Dest=0x3f3c318, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0130.758] wcscat (in: _Dest=0x3f3c318, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" [0130.758] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\68814f-readme.txt")) returned 0x20 [0130.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c318) returned 1 [0130.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 Thread: id = 470 os_tid = 0xbb0 [0123.587] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\qmJfHgBj-usKXI.wav" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\qmjfhgbj-uskxi.wav")) returned 0x20 [0123.587] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\qmJfHgBj-usKXI.wav", dwFileAttributes=0x20) returned 1 [0127.451] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\qmJfHgBj-usKXI.wav" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\qmjfhgbj-uskxi.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xca4 [0127.451] GetFileSizeEx (in: hFile=0xca4, lpFileSize=0xb0aff5c | out: lpFileSize=0xb0aff5c*=84287) returned 1 [0127.451] SetFilePointerEx (in: hFile=0xca4, liDistanceToMove=0x1493b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.451] ReadFile (in: hFile=0xca4, lpBuffer=0xb0aff38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb0aff48, lpOverlapped=0x0 | out: lpBuffer=0xb0aff38*, lpNumberOfBytesRead=0xb0aff48*=0x4, lpOverlapped=0x0) returned 1 [0127.453] SetFilePointerEx (in: hFile=0xca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0127.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0127.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0127.454] NtQuerySystemTime (in: CurrentTime=0xb0afed0 | out: CurrentTime=0xb0afed0*=132462177068424000) returned 0x0 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x38453ebe [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x57aa3a90 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x3300132b [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x4877cbd7 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x400487db [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x5309fce0 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x7354a120 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x4374abc [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x636a01ea [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x5f85cb51 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x49951d21 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0xb6734a1 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x763ec6a1 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x24b1a763 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x76947821 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x1524ab0e [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x7554fff0 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x6e0b070a [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x4cf9ba14 [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x4e10dbfc [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x353c1c1c [0127.454] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x6b823ac8 [0127.455] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x3dbc27c3 [0127.455] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x327b4c5e [0127.455] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x1ecb399e [0127.455] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0xfe1da55 [0127.455] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x5bbf5ca [0127.455] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x77a18581 [0127.455] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x673ca871 [0127.455] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x3f5dd265 [0127.455] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0xb365f90 [0127.455] RtlRandomEx (in: Seed=0xb0afec8 | out: Seed=0xb0afec8) returned 0x4c3fc142 [0127.470] SetFilePointerEx (in: hFile=0xca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.470] ReadFile (in: hFile=0xca4, lpBuffer=0x7c18360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb0afed0, lpOverlapped=0x0 | out: lpBuffer=0x7c18360*, lpNumberOfBytesRead=0xb0afed0*=0x3c00, lpOverlapped=0x0) returned 1 [0127.470] SetFilePointerEx (in: hFile=0xca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e857d0 [0127.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0127.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0127.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0127.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1bf68 [0127.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0127.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0127.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0127.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0127.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e857d0) returned 1 [0127.471] WriteFile (in: hFile=0xca4, lpBuffer=0x7c1bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb0afed0, lpOverlapped=0x0 | out: lpBuffer=0x7c1bf68*, lpNumberOfBytesWritten=0xb0afed0*=0x3c00, lpOverlapped=0x0) returned 1 [0127.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1bf68) returned 1 [0127.790] SetFilePointerEx (in: hFile=0xca4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.790] ReadFile (in: hFile=0xca4, lpBuffer=0x7c18360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb0afed0, lpOverlapped=0x0 | out: lpBuffer=0x7c18360*, lpNumberOfBytesRead=0xb0afed0*=0x3c00, lpOverlapped=0x0) returned 1 [0127.790] SetFilePointerEx (in: hFile=0xca4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0127.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1bf68 [0127.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0127.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0127.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0127.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.791] WriteFile (in: hFile=0xca4, lpBuffer=0x7c1bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb0afed0, lpOverlapped=0x0 | out: lpBuffer=0x7c1bf68*, lpNumberOfBytesWritten=0xb0afed0*=0x3c00, lpOverlapped=0x0) returned 1 [0127.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1bf68) returned 1 [0127.794] SetFilePointerEx (in: hFile=0xca4, liDistanceToMove=0x10d3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.794] ReadFile (in: hFile=0xca4, lpBuffer=0x7c18360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb0afed0, lpOverlapped=0x0 | out: lpBuffer=0x7c18360*, lpNumberOfBytesRead=0xb0afed0*=0x3c00, lpOverlapped=0x0) returned 1 [0127.794] SetFilePointerEx (in: hFile=0xca4, liDistanceToMove=0x10d3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0127.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0127.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0127.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1bf68 [0127.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0127.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0127.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0127.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0127.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.795] WriteFile (in: hFile=0xca4, lpBuffer=0x7c1bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb0afed0, lpOverlapped=0x0 | out: lpBuffer=0x7c1bf68*, lpNumberOfBytesWritten=0xb0afed0*=0x3c00, lpOverlapped=0x0) returned 1 [0127.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1bf68) returned 1 [0127.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0c00 [0127.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0127.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2dd00 [0127.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0127.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0127.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dce108 [0127.798] SetFilePointerEx (in: hFile=0xca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.799] WriteFile (in: hFile=0xca4, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0xb0aff50, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0xb0aff50*=0x156, lpOverlapped=0x0) returned 1 [0127.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07800 [0127.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0127.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0127.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e866c8 [0127.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0127.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0127.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0127.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0127.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3e14a90 [0127.897] sprintf (in: _Dest=0x3e14a90, _Format="%c%c" | out: _Dest="24") returned 2 [0127.897] sprintf (in: _Dest=0x3e14a92, _Format="%c%c" | out: _Dest="b9") returned 2 [0127.897] sprintf (in: _Dest=0x3e14a94, _Format="%c%c" | out: _Dest="54") returned 2 [0127.898] sprintf (in: _Dest=0x3e14a96, _Format="%c%c" | out: _Dest="30") returned 2 [0127.898] sprintf (in: _Dest=0x3e14a98, _Format="%c%c" | out: _Dest="56") returned 2 [0127.898] sprintf (in: _Dest=0x3e14a9a, _Format="%c%c" | out: _Dest="10") returned 2 [0127.898] sprintf (in: _Dest=0x3e14a9c, _Format="%c%c" | out: _Dest="68") returned 2 [0127.898] sprintf (in: _Dest=0x3e14a9e, _Format="%c%c" | out: _Dest="b9") returned 2 [0127.898] sprintf (in: _Dest=0x3e14aa0, _Format="%c%c" | out: _Dest="9d") returned 2 [0127.898] sprintf (in: _Dest=0x3e14aa2, _Format="%c%c" | out: _Dest="cb") returned 2 [0127.898] sprintf (in: _Dest=0x3e14aa4, _Format="%c%c" | out: _Dest="38") returned 2 [0127.898] sprintf (in: _Dest=0x3e14aa6, _Format="%c%c" | out: _Dest="7f") returned 2 [0127.898] sprintf (in: _Dest=0x3e14aa8, _Format="%c%c" | out: _Dest="ab") returned 2 [0127.898] sprintf (in: _Dest=0x3e14aaa, _Format="%c%c" | out: _Dest="3d") returned 2 [0127.898] sprintf (in: _Dest=0x3e14aac, _Format="%c%c" | out: _Dest="12") returned 2 [0127.898] sprintf (in: _Dest=0x3e14aae, _Format="%c%c" | out: _Dest="54") returned 2 [0127.898] sprintf (in: _Dest=0x3e14ab0, _Format="%c%c" | out: _Dest="45") returned 2 [0127.898] sprintf (in: _Dest=0x3e14ab2, _Format="%c%c" | out: _Dest="0e") returned 2 [0127.898] sprintf (in: _Dest=0x3e14ab4, _Format="%c%c" | out: _Dest="af") returned 2 [0127.898] sprintf (in: _Dest=0x3e14ab6, _Format="%c%c" | out: _Dest="08") returned 2 [0127.898] sprintf (in: _Dest=0x3e14ab8, _Format="%c%c" | out: _Dest="aa") returned 2 [0127.898] sprintf (in: _Dest=0x3e14aba, _Format="%c%c" | out: _Dest="cb") returned 2 [0127.898] sprintf (in: _Dest=0x3e14abc, _Format="%c%c" | out: _Dest="68") returned 2 [0127.898] sprintf (in: _Dest=0x3e14abe, _Format="%c%c" | out: _Dest="60") returned 2 [0127.898] sprintf (in: _Dest=0x3e14ac0, _Format="%c%c" | out: _Dest="39") returned 2 [0127.898] sprintf (in: _Dest=0x3e14ac2, _Format="%c%c" | out: _Dest="71") returned 2 [0127.899] sprintf (in: _Dest=0x3e14ac4, _Format="%c%c" | out: _Dest="72") returned 2 [0127.899] sprintf (in: _Dest=0x3e14ac6, _Format="%c%c" | out: _Dest="4c") returned 2 [0127.899] sprintf (in: _Dest=0x3e14ac8, _Format="%c%c" | out: _Dest="85") returned 2 [0127.899] sprintf (in: _Dest=0x3e14aca, _Format="%c%c" | out: _Dest="12") returned 2 [0127.899] sprintf (in: _Dest=0x3e14acc, _Format="%c%c" | out: _Dest="fd") returned 2 [0127.899] sprintf (in: _Dest=0x3e14ace, _Format="%c%c" | out: _Dest="3f") returned 2 [0127.899] sprintf (in: _Dest=0x3e14ad0, _Format="%c%c" | out: _Dest="c5") returned 2 [0127.899] sprintf (in: _Dest=0x3e14ad2, _Format="%c%c" | out: _Dest="5c") returned 2 [0127.899] sprintf (in: _Dest=0x3e14ad4, _Format="%c%c" | out: _Dest="9c") returned 2 [0127.899] sprintf (in: _Dest=0x3e14ad6, _Format="%c%c" | out: _Dest="bc") returned 2 [0127.899] RtlInitAnsiString (in: DestinationString=0xb0afed8, SourceString="24b95430561068b99dcb387fab3d1254450eaf08aacb68603971724c8512fd3fc55c9cbc" | out: DestinationString="24b95430561068b99dcb387fab3d1254450eaf08aacb68603971724c8512fd3fc55c9cbc") [0127.899] RtlAnsiStringToUnicodeString (in: DestinationString=0xb0afed0, SourceString="24b95430561068b99dcb387fab3d1254450eaf08aacb68603971724c8512fd3fc55c9cbc", AllocateDestinationString=1 | out: DestinationString="24b95430561068b99dcb387fab3d1254450eaf08aacb68603971724c8512fd3fc55c9cbc") returned 0x0 [0127.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4d20 [0127.899] wcscat (in: _Dest=0x3eb60b0, _Source="24b95430561068b99d" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\24b95430561068b99d") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\24b95430561068b99d" [0127.899] wcscat (in: _Dest=0x3eb60b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\24b95430561068b99d.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\24b95430561068b99d.68814f" [0127.899] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\24b95430561068b99d.68814f", NtPathName=0xb0afec8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\24b95430561068b99d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bc98 [0127.899] NtSetInformationFile (FileHandle=0xca4, IoStatusBlock=0xb0afed0, FileInformation=0x35bc98, Length=0xa4, FileInformationClass=0xa) returned 0x0 [0128.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 [0128.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02630) returned 1 [0128.121] NtQueryInformationFile (in: FileHandle=0xca4, IoStatusBlock=0xb0afea0, FileInformation=0xb0afea8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb0afea0, FileInformation=0xb0afea8) returned 0x0 [0128.121] NtSetInformationFile (FileHandle=0xca4, IoStatusBlock=0xb0afea0, FileInformation=0xb0afea8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 [0128.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 [0128.129] FlushFileBuffers (hFile=0xca4) returned 1 [0128.138] CloseHandle (hObject=0xca4) returned 1 [0128.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f88 [0128.144] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0128.144] wcscat (in: _Dest=0x3eb8f88, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" [0128.144] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\68814f-readme.txt")) returned 0xffffffff [0128.144] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcb8 [0128.148] WriteFile (in: hFile=0xcb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb0afee4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb0afee4*=0x8b9, lpOverlapped=0x0) returned 1 [0128.151] CloseHandle (hObject=0xcb8) returned 1 [0128.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 [0128.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ca10) returned 1 Thread: id = 471 os_tid = 0x56c [0123.588] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\s BhIyPV.mkv" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\s bhiypv.mkv")) returned 0x20 [0123.588] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\s BhIyPV.mkv", dwFileAttributes=0x20) returned 1 [0127.438] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\s BhIyPV.mkv" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\s bhiypv.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc6c [0127.439] GetFileSizeEx (in: hFile=0xc6c, lpFileSize=0xb2bfdcc | out: lpFileSize=0xb2bfdcc*=29836) returned 1 [0127.439] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x7488, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.439] ReadFile (in: hFile=0xc6c, lpBuffer=0xb2bfda8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb2bfdb8, lpOverlapped=0x0 | out: lpBuffer=0xb2bfda8*, lpNumberOfBytesRead=0xb2bfdb8*=0x4, lpOverlapped=0x0) returned 1 [0127.440] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0127.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0127.440] NtQuerySystemTime (in: CurrentTime=0xb2bfd40 | out: CurrentTime=0xb2bfd40*=132462177068268000) returned 0x0 [0127.440] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0xd28fb86 [0127.440] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x5383f367 [0127.440] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x7def3808 [0127.440] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x38a9e5cf [0127.440] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x7a471b20 [0127.440] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x21845a3e [0127.440] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x3460a81b [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x588630e [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x69c8c930 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x5989c7c8 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x43977fff [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x6b00a27f [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x686cfc6e [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x5260ddfe [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x3f68faa [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x5c1db148 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x467cfaad [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x9d61c2 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x786f19ea [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x18564ea9 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x7fae7254 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x9fc7540 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x114ead8d [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x5fffd9c3 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x5f531f2c [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x131e5056 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x4c6328eb [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0xc95685d [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x42d1876e [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x739502e9 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x4a4e63d6 [0127.441] RtlRandomEx (in: Seed=0xb2bfd38 | out: Seed=0xb2bfd38) returned 0x4eb9c2fe [0127.449] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.449] ReadFile (in: hFile=0xc6c, lpBuffer=0x7b78fc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb2bfd40, lpOverlapped=0x0 | out: lpBuffer=0x7b78fc8*, lpNumberOfBytesRead=0xb2bfd40*=0x3c00, lpOverlapped=0x0) returned 1 [0127.450] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e857d0 [0127.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0127.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0127.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b7cbd0 [0127.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0127.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0127.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0127.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e857d0) returned 1 [0127.450] WriteFile (in: hFile=0xc6c, lpBuffer=0x7b7cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb2bfd40, lpOverlapped=0x0 | out: lpBuffer=0x7b7cbd0*, lpNumberOfBytesWritten=0xb2bfd40*=0x3c00, lpOverlapped=0x0) returned 1 [0127.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cbd0) returned 1 [0127.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b78fc8) returned 1 [0127.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e866c8 [0127.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4118) returned 1 [0127.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e866f8 [0127.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4118 [0127.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0127.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec940 [0127.788] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.788] WriteFile (in: hFile=0xc6c, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xb2bfdc0, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xb2bfdc0*=0x10a, lpOverlapped=0x0) returned 1 [0127.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07800 [0127.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0127.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f48) returned 1 [0127.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2f770 [0127.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0127.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0127.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0127.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0127.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x3dcfa90 [0127.891] sprintf (in: _Dest=0x3dcfa90, _Format="%c%c" | out: _Dest="a2") returned 2 [0127.891] sprintf (in: _Dest=0x3dcfa92, _Format="%c%c" | out: _Dest="0b") returned 2 [0127.891] sprintf (in: _Dest=0x3dcfa94, _Format="%c%c" | out: _Dest="c0") returned 2 [0127.891] sprintf (in: _Dest=0x3dcfa96, _Format="%c%c" | out: _Dest="ed") returned 2 [0127.891] sprintf (in: _Dest=0x3dcfa98, _Format="%c%c" | out: _Dest="cb") returned 2 [0127.891] sprintf (in: _Dest=0x3dcfa9a, _Format="%c%c" | out: _Dest="9b") returned 2 [0127.891] sprintf (in: _Dest=0x3dcfa9c, _Format="%c%c" | out: _Dest="19") returned 2 [0127.891] sprintf (in: _Dest=0x3dcfa9e, _Format="%c%c" | out: _Dest="d2") returned 2 [0127.891] sprintf (in: _Dest=0x3dcfaa0, _Format="%c%c" | out: _Dest="b7") returned 2 [0127.891] sprintf (in: _Dest=0x3dcfaa2, _Format="%c%c" | out: _Dest="d7") returned 2 [0127.891] sprintf (in: _Dest=0x3dcfaa4, _Format="%c%c" | out: _Dest="30") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfaa6, _Format="%c%c" | out: _Dest="14") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfaa8, _Format="%c%c" | out: _Dest="3a") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfaaa, _Format="%c%c" | out: _Dest="a7") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfaac, _Format="%c%c" | out: _Dest="f5") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfaae, _Format="%c%c" | out: _Dest="25") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfab0, _Format="%c%c" | out: _Dest="a2") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfab2, _Format="%c%c" | out: _Dest="2c") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfab4, _Format="%c%c" | out: _Dest="39") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfab6, _Format="%c%c" | out: _Dest="84") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfab8, _Format="%c%c" | out: _Dest="9d") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfaba, _Format="%c%c" | out: _Dest="7d") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfabc, _Format="%c%c" | out: _Dest="00") returned 2 [0127.892] sprintf (in: _Dest=0x3dcfabe, _Format="%c%c" | out: _Dest="e5") returned 2 [0127.892] RtlInitAnsiString (in: DestinationString=0xb2bfd48, SourceString="a20bc0edcb9b19d2b7d730143aa7f525a22c39849d7d00e5" | out: DestinationString="a20bc0edcb9b19d2b7d730143aa7f525a22c39849d7d00e5") [0127.892] RtlAnsiStringToUnicodeString (in: DestinationString=0xb2bfd40, SourceString="a20bc0edcb9b19d2b7d730143aa7f525a22c39849d7d00e5", AllocateDestinationString=1 | out: DestinationString="a20bc0edcb9b19d2b7d730143aa7f525a22c39849d7d00e5") returned 0x0 [0127.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23a00 [0127.892] wcscat (in: _Dest=0x3d456e0, _Source="a20bc0edcb9b" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\a20bc0edcb9b") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\a20bc0edcb9b" [0127.892] wcscat (in: _Dest=0x3d456e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\a20bc0edcb9b.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\a20bc0edcb9b.68814f" [0127.892] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\a20bc0edcb9b.68814f", NtPathName=0xb2bfd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\a20bc0edcb9b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4460 [0127.893] NtSetInformationFile (FileHandle=0xc6c, IoStatusBlock=0xb2bfd40, FileInformation=0x3df4460, Length=0x98, FileInformationClass=0xa) returned 0x0 [0128.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4460) returned 1 [0128.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03320) returned 1 [0128.216] NtQueryInformationFile (in: FileHandle=0xc6c, IoStatusBlock=0xb2bfd10, FileInformation=0xb2bfd18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb2bfd10, FileInformation=0xb2bfd18) returned 0x0 [0128.216] NtSetInformationFile (FileHandle=0xc6c, IoStatusBlock=0xb2bfd10, FileInformation=0xb2bfd18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d456e0) returned 1 [0128.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a00) returned 1 [0128.217] FlushFileBuffers (hFile=0xc6c) returned 1 [0128.225] CloseHandle (hObject=0xc6c) returned 1 [0128.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0128.231] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0128.231] wcscat (in: _Dest=0x3eb9230, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" [0128.231] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\68814f-readme.txt")) returned 0x20 [0128.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 [0128.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4af0) returned 1 Thread: id = 472 os_tid = 0x2ac [0123.589] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vrlqnyWfc.pdf" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vrlqnywfc.pdf")) returned 0x20 [0123.589] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vrlqnyWfc.pdf", dwFileAttributes=0x20) returned 1 [0128.856] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vrlqnyWfc.pdf" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vrlqnywfc.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x640 [0128.856] GetFileSizeEx (in: hFile=0x640, lpFileSize=0xaf3fc7c | out: lpFileSize=0xaf3fc7c*=57348) returned 1 [0128.856] SetFilePointerEx (in: hFile=0x640, liDistanceToMove=0xe000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.856] ReadFile (in: hFile=0x640, lpBuffer=0xaf3fc58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaf3fc68, lpOverlapped=0x0 | out: lpBuffer=0xaf3fc58*, lpNumberOfBytesRead=0xaf3fc68*=0x4, lpOverlapped=0x0) returned 1 [0128.858] SetFilePointerEx (in: hFile=0x640, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b550 [0128.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0128.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0128.859] NtQuerySystemTime (in: CurrentTime=0xaf3fbf0 | out: CurrentTime=0xaf3fbf0*=132462177082464000) returned 0x0 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x71e524c [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x67596be1 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x5e2f2637 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x6930bc21 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x4c553a74 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x1e5ed2eb [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x32b89f6 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x2a456d31 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x2602c3e [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x34a5ee84 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x146e1cae [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x2699eeee [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x2201e391 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x28e1b696 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x724da575 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x46f04c77 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x71118a77 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x11d697af [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x710d343a [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x1a3343b6 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x21ae1eca [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x8bf52b9 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x367ea0b8 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x7a8c8ae [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x7621e386 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x32acb163 [0128.859] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x4820cb4b [0128.860] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x41b4dc0e [0128.860] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x45888707 [0128.860] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x405c7702 [0128.860] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x611978e [0128.860] RtlRandomEx (in: Seed=0xaf3fbe8 | out: Seed=0xaf3fbe8) returned 0x7ed1102d [0128.872] SetFilePointerEx (in: hFile=0x640, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.872] ReadFile (in: hFile=0x640, lpBuffer=0x7cbdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf3fbf0, lpOverlapped=0x0 | out: lpBuffer=0x7cbdbb0*, lpNumberOfBytesRead=0xaf3fbf0*=0x3c00, lpOverlapped=0x0) returned 1 [0128.873] SetFilePointerEx (in: hFile=0x640, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b550 [0128.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b550) returned 1 [0128.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cc17b8 [0128.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b550 [0128.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0128.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0128.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.874] WriteFile (in: hFile=0x640, lpBuffer=0x7cc17b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf3fbf0, lpOverlapped=0x0 | out: lpBuffer=0x7cc17b8*, lpNumberOfBytesWritten=0xaf3fbf0*=0x3c00, lpOverlapped=0x0) returned 1 [0129.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc17b8) returned 1 [0129.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdbb0) returned 1 [0129.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e869c8 [0129.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd20) returned 1 [0129.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e869f8 [0129.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd20 [0129.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0129.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0129.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55958) returned 1 [0129.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deaf00 [0129.618] SetFilePointerEx (in: hFile=0x640, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.619] WriteFile (in: hFile=0x640, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf3fc70, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xaf3fc70*=0x10c, lpOverlapped=0x0) returned 1 [0132.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25350 [0132.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0132.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca968 [0132.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca968) returned 1 [0132.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca968 [0132.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0132.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0132.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6e8) returned 1 [0132.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0132.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d580 [0132.563] sprintf (in: _Dest=0x7a2d580, _Format="%c%c" | out: _Dest="8e") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d582, _Format="%c%c" | out: _Dest="27") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d584, _Format="%c%c" | out: _Dest="b7") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d586, _Format="%c%c" | out: _Dest="7c") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d588, _Format="%c%c" | out: _Dest="f3") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d58a, _Format="%c%c" | out: _Dest="3f") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d58c, _Format="%c%c" | out: _Dest="f0") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d58e, _Format="%c%c" | out: _Dest="e9") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d590, _Format="%c%c" | out: _Dest="29") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d592, _Format="%c%c" | out: _Dest="60") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d594, _Format="%c%c" | out: _Dest="d5") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d596, _Format="%c%c" | out: _Dest="9d") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d598, _Format="%c%c" | out: _Dest="51") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d59a, _Format="%c%c" | out: _Dest="0f") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d59c, _Format="%c%c" | out: _Dest="b1") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d59e, _Format="%c%c" | out: _Dest="5a") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d5a0, _Format="%c%c" | out: _Dest="0a") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d5a2, _Format="%c%c" | out: _Dest="9d") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d5a4, _Format="%c%c" | out: _Dest="eb") returned 2 [0132.563] sprintf (in: _Dest=0x7a2d5a6, _Format="%c%c" | out: _Dest="2d") returned 2 [0132.564] sprintf (in: _Dest=0x7a2d5a8, _Format="%c%c" | out: _Dest="c3") returned 2 [0132.564] sprintf (in: _Dest=0x7a2d5aa, _Format="%c%c" | out: _Dest="aa") returned 2 [0132.564] sprintf (in: _Dest=0x7a2d5ac, _Format="%c%c" | out: _Dest="b7") returned 2 [0132.564] sprintf (in: _Dest=0x7a2d5ae, _Format="%c%c" | out: _Dest="80") returned 2 [0132.564] sprintf (in: _Dest=0x7a2d5b0, _Format="%c%c" | out: _Dest="d6") returned 2 [0132.564] sprintf (in: _Dest=0x7a2d5b2, _Format="%c%c" | out: _Dest="aa") returned 2 [0132.564] RtlInitAnsiString (in: DestinationString=0xaf3fbf8, SourceString="8e27b77cf33ff0e92960d59d510fb15a0a9deb2dc3aab780d6aa" | out: DestinationString="8e27b77cf33ff0e92960d59d510fb15a0a9deb2dc3aab780d6aa") [0132.564] RtlAnsiStringToUnicodeString (in: DestinationString=0xaf3fbf0, SourceString="8e27b77cf33ff0e92960d59d510fb15a0a9deb2dc3aab780d6aa", AllocateDestinationString=1 | out: DestinationString="8e27b77cf33ff0e92960d59d510fb15a0a9deb2dc3aab780d6aa") returned 0x0 [0132.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x349128 [0132.564] wcscat (in: _Dest=0x3df1cb8, _Source="8e27b77cf33ff" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8e27b77cf33ff") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8e27b77cf33ff" [0132.564] wcscat (in: _Dest=0x3df1cb8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8e27b77cf33ff.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8e27b77cf33ff.68814f" [0132.564] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8e27b77cf33ff.68814f", NtPathName=0xaf3fbe8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\8e27b77cf33ff.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e7b600 [0132.564] NtSetInformationFile (FileHandle=0x640, IoStatusBlock=0xaf3fbf0, FileInformation=0x3e7b600, Length=0x9a, FileInformationClass=0xa) returned 0x0 [0132.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7b600) returned 1 [0132.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33638) returned 1 [0132.623] NtQueryInformationFile (in: FileHandle=0x640, IoStatusBlock=0xaf3fbc0, FileInformation=0xaf3fbc8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaf3fbc0, FileInformation=0xaf3fbc8) returned 0x0 [0132.623] NtSetInformationFile (FileHandle=0x640, IoStatusBlock=0xaf3fbc0, FileInformation=0xaf3fbc8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1cb8) returned 1 [0132.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x349128) returned 1 [0132.640] FlushFileBuffers (hFile=0x640) returned 1 [0135.180] CloseHandle (hObject=0x640) returned 1 [0135.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1cd40 [0135.191] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0135.191] wcscat (in: _Dest=0x3e1cd40, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" [0135.191] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\68814f-readme.txt")) returned 0x20 [0135.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 [0135.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da60f0) returned 1 Thread: id = 473 os_tid = 0x518 [0123.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44060 [0123.589] wcscpy (in: _Dest=0x3d44060, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e" [0123.589] wcscat (in: _Dest=0x3d44060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\" [0123.589] wcscat (in: _Dest=0x3d44060, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\*" [0123.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0123.590] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4303e970, ftCreationTime.dwHighDateTime=0x1d5ddfa, ftLastAccessTime.dwLowDateTime=0x403867b0, ftLastAccessTime.dwHighDateTime=0x1d5df4a, ftLastWriteTime.dwLowDateTime=0x403867b0, ftLastWriteTime.dwHighDateTime=0x1d5df4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0123.590] wcscmp (_String1=".", _String2=".") returned 0 [0123.590] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4303e970, ftCreationTime.dwHighDateTime=0x1d5ddfa, ftLastAccessTime.dwLowDateTime=0x403867b0, ftLastAccessTime.dwHighDateTime=0x1d5df4a, ftLastWriteTime.dwLowDateTime=0x403867b0, ftLastWriteTime.dwHighDateTime=0x1d5df4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.590] wcscmp (_String1="..", _String2=".") returned 1 [0123.590] wcscmp (_String1="..", _String2="..") returned 0 [0123.590] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0252750, ftCreationTime.dwHighDateTime=0x1d5d88c, ftLastAccessTime.dwLowDateTime=0x5fd36ef0, ftLastAccessTime.dwHighDateTime=0x1d5e3b7, ftLastWriteTime.dwLowDateTime=0x5fd36ef0, ftLastWriteTime.dwHighDateTime=0x1d5e3b7, nFileSizeHigh=0x0, nFileSizeLow=0x1464c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lk-cCgTmMD6rPRHqNiFu.wav", cAlternateFileName="LK-CCG~1.WAV")) returned 1 [0123.590] wcscmp (_String1="Lk-cCgTmMD6rPRHqNiFu.wav", _String2=".") returned 1 [0123.590] wcscmp (_String1="Lk-cCgTmMD6rPRHqNiFu.wav", _String2="..") returned 1 [0123.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65c58 [0123.591] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e" [0123.591] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\" [0123.591] wcscat (in: _Dest=0x3e65c58, _Source="Lk-cCgTmMD6rPRHqNiFu.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\Lk-cCgTmMD6rPRHqNiFu.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\Lk-cCgTmMD6rPRHqNiFu.wav" [0125.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0125.004] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87384280, ftCreationTime.dwHighDateTime=0x1d5ded1, ftLastAccessTime.dwLowDateTime=0xc6079f50, ftLastAccessTime.dwHighDateTime=0x1d5e0ad, ftLastWriteTime.dwLowDateTime=0xc6079f50, ftLastWriteTime.dwHighDateTime=0x1d5e0ad, nFileSizeHigh=0x0, nFileSizeLow=0x18be1, dwReserved0=0x0, dwReserved1=0x0, cFileName="mdlsvyrKz4Fq4.wav", cAlternateFileName="MDLSVY~1.WAV")) returned 1 [0125.004] wcscmp (_String1="mdlsvyrKz4Fq4.wav", _String2=".") returned 1 [0125.004] wcscmp (_String1="mdlsvyrKz4Fq4.wav", _String2="..") returned 1 [0125.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bdf8 [0125.004] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e" [0125.004] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\" [0125.004] wcscat (in: _Dest=0x35bdf8, _Source="mdlsvyrKz4Fq4.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\mdlsvyrKz4Fq4.wav") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\mdlsvyrKz4Fq4.wav" [0125.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0125.005] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4582e80, ftCreationTime.dwHighDateTime=0x1d5d9b7, ftLastAccessTime.dwLowDateTime=0x899df7d0, ftLastAccessTime.dwHighDateTime=0x1d5e477, ftLastWriteTime.dwLowDateTime=0x899df7d0, ftLastWriteTime.dwHighDateTime=0x1d5e477, nFileSizeHigh=0x0, nFileSizeLow=0xbeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="t5_tReDnA9Z.jpg", cAlternateFileName="T5_TRE~1.JPG")) returned 1 [0125.005] wcscmp (_String1="t5_tReDnA9Z.jpg", _String2=".") returned 1 [0125.005] wcscmp (_String1="t5_tReDnA9Z.jpg", _String2="..") returned 1 [0125.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053288 [0125.006] wcscpy (in: _Dest=0x3053288, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e" [0125.006] wcscat (in: _Dest=0x3053288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\" [0125.006] wcscat (in: _Dest=0x3053288, _Source="t5_tReDnA9Z.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg" [0125.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0125.007] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4582e80, ftCreationTime.dwHighDateTime=0x1d5d9b7, ftLastAccessTime.dwLowDateTime=0x899df7d0, ftLastAccessTime.dwHighDateTime=0x1d5e477, ftLastWriteTime.dwLowDateTime=0x899df7d0, ftLastWriteTime.dwHighDateTime=0x1d5e477, nFileSizeHigh=0x0, nFileSizeLow=0xbeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="t5_tReDnA9Z.jpg", cAlternateFileName="T5_TRE~1.JPG")) returned 0 [0125.007] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0125.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0125.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44060) returned 1 [0125.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 474 os_tid = 0x6fc [0123.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9c48 [0123.591] wcscpy (in: _Dest=0x3eb9c48, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py" [0123.591] wcscat (in: _Dest=0x3eb9c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\" [0123.592] wcscat (in: _Dest=0x3eb9c48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\*" [0123.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a550b0 [0123.592] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\*", lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbef0cd0, ftCreationTime.dwHighDateTime=0x1d5ddbe, ftLastAccessTime.dwLowDateTime=0xdca873d0, ftLastAccessTime.dwHighDateTime=0x1d5e65a, ftLastWriteTime.dwLowDateTime=0xdca873d0, ftLastWriteTime.dwHighDateTime=0x1d5e65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d340 [0123.592] wcscmp (_String1=".", _String2=".") returned 0 [0123.592] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbef0cd0, ftCreationTime.dwHighDateTime=0x1d5ddbe, ftLastAccessTime.dwLowDateTime=0xdca873d0, ftLastAccessTime.dwHighDateTime=0x1d5e65a, ftLastWriteTime.dwLowDateTime=0xdca873d0, ftLastWriteTime.dwHighDateTime=0x1d5e65a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.592] wcscmp (_String1="..", _String2=".") returned 1 [0123.592] wcscmp (_String1="..", _String2="..") returned 0 [0123.592] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19d9a170, ftCreationTime.dwHighDateTime=0x1d5d9c7, ftLastAccessTime.dwLowDateTime=0xbdcacde0, ftLastAccessTime.dwHighDateTime=0x1d5dd73, ftLastWriteTime.dwLowDateTime=0xbdcacde0, ftLastWriteTime.dwHighDateTime=0x1d5dd73, nFileSizeHigh=0x0, nFileSizeLow=0x444f, dwReserved0=0x0, dwReserved1=0x0, cFileName="YG4f3-6JBhNwHo2Gj8.png", cAlternateFileName="YG4F3-~1.PNG")) returned 1 [0123.592] wcscmp (_String1="YG4f3-6JBhNwHo2Gj8.png", _String2=".") returned 1 [0123.592] wcscmp (_String1="YG4f3-6JBhNwHo2Gj8.png", _String2="..") returned 1 [0123.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c008 [0123.592] wcscpy (in: _Dest=0x35c008, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py" [0123.593] wcscat (in: _Dest=0x35c008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\" [0123.593] wcscat (in: _Dest=0x35c008, _Source="YG4f3-6JBhNwHo2Gj8.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png" [0125.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0125.950] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19d9a170, ftCreationTime.dwHighDateTime=0x1d5d9c7, ftLastAccessTime.dwLowDateTime=0xbdcacde0, ftLastAccessTime.dwHighDateTime=0x1d5dd73, ftLastWriteTime.dwLowDateTime=0xbdcacde0, ftLastWriteTime.dwHighDateTime=0x1d5dd73, nFileSizeHigh=0x0, nFileSizeLow=0x444f, dwReserved0=0x0, dwReserved1=0x0, cFileName="YG4f3-6JBhNwHo2Gj8.png", cAlternateFileName="YG4F3-~1.PNG")) returned 0 [0125.950] FindClose (in: hFindFile=0x7a2d340 | out: hFindFile=0x7a2d340) returned 1 [0125.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a550b0) returned 1 [0125.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9c48) returned 1 [0125.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 475 os_tid = 0xf74 [0123.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e18e18 [0123.593] wcscpy (in: _Dest=0x3e18e18, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" [0123.593] wcscat (in: _Dest=0x3e18e18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0123.593] wcscat (in: _Dest=0x3e18e18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\*") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\*" [0123.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55318 [0123.593] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\*", lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f8b9b0, ftCreationTime.dwHighDateTime=0x1d5e875, ftLastAccessTime.dwLowDateTime=0x932e6cd0, ftLastAccessTime.dwHighDateTime=0x1d5e026, ftLastWriteTime.dwLowDateTime=0x932e6cd0, ftLastWriteTime.dwHighDateTime=0x1d5e026, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0123.594] wcscmp (_String1=".", _String2=".") returned 0 [0123.594] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f8b9b0, ftCreationTime.dwHighDateTime=0x1d5e875, ftLastAccessTime.dwLowDateTime=0x932e6cd0, ftLastAccessTime.dwHighDateTime=0x1d5e026, ftLastWriteTime.dwLowDateTime=0x932e6cd0, ftLastWriteTime.dwHighDateTime=0x1d5e026, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.594] wcscmp (_String1="..", _String2=".") returned 1 [0123.594] wcscmp (_String1="..", _String2="..") returned 0 [0123.594] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262bf3f0, ftCreationTime.dwHighDateTime=0x1d5e6ed, ftLastAccessTime.dwLowDateTime=0xf6a139f0, ftLastAccessTime.dwHighDateTime=0x1d5d950, ftLastWriteTime.dwLowDateTime=0xf6a139f0, ftLastWriteTime.dwHighDateTime=0x1d5d950, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="7wQx69LU6t.gif", cAlternateFileName="7WQX69~1.GIF")) returned 1 [0123.594] wcscmp (_String1="7wQx69LU6t.gif", _String2=".") returned 1 [0123.594] wcscmp (_String1="7wQx69LU6t.gif", _String2="..") returned 1 [0123.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32bd78 [0123.594] wcscpy (in: _Dest=0x32bd78, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" [0123.594] wcscat (in: _Dest=0x32bd78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0123.594] wcscat (in: _Dest=0x32bd78, _Source="7wQx69LU6t.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7wQx69LU6t.gif") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7wQx69LU6t.gif" [0124.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32bd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0124.072] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21bae3e0, ftCreationTime.dwHighDateTime=0x1d5e59d, ftLastAccessTime.dwLowDateTime=0x23df1e50, ftLastAccessTime.dwHighDateTime=0x1d5e75c, ftLastWriteTime.dwLowDateTime=0x23df1e50, ftLastWriteTime.dwHighDateTime=0x1d5e75c, nFileSizeHigh=0x0, nFileSizeLow=0x16efe, dwReserved0=0x0, dwReserved1=0x0, cFileName="eLf7plfk.ots", cAlternateFileName="")) returned 1 [0124.072] wcscmp (_String1="eLf7plfk.ots", _String2=".") returned 1 [0124.072] wcscmp (_String1="eLf7plfk.ots", _String2="..") returned 1 [0124.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6bf8 [0124.072] wcscpy (in: _Dest=0x3eb6bf8, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" [0124.072] wcscat (in: _Dest=0x3eb6bf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0124.072] wcscat (in: _Dest=0x3eb6bf8, _Source="eLf7plfk.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\eLf7plfk.ots") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\eLf7plfk.ots" [0124.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0124.074] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6871ed80, ftCreationTime.dwHighDateTime=0x1d5dddf, ftLastAccessTime.dwLowDateTime=0x428ce3b0, ftLastAccessTime.dwHighDateTime=0x1d5db94, ftLastWriteTime.dwLowDateTime=0x428ce3b0, ftLastWriteTime.dwHighDateTime=0x1d5db94, nFileSizeHigh=0x0, nFileSizeLow=0xbc7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP5qtAGSdAZINa.pdf", cAlternateFileName="JP5QTA~1.PDF")) returned 1 [0124.074] wcscmp (_String1="JP5qtAGSdAZINa.pdf", _String2=".") returned 1 [0124.074] wcscmp (_String1="JP5qtAGSdAZINa.pdf", _String2="..") returned 1 [0124.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5ea0 [0124.074] wcscpy (in: _Dest=0x3df5ea0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" [0124.074] wcscat (in: _Dest=0x3df5ea0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0124.074] wcscat (in: _Dest=0x3df5ea0, _Source="JP5qtAGSdAZINa.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\JP5qtAGSdAZINa.pdf") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\JP5qtAGSdAZINa.pdf" [0124.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0124.076] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d0bd80, ftCreationTime.dwHighDateTime=0x1d5e6f8, ftLastAccessTime.dwLowDateTime=0x5be379c0, ftLastAccessTime.dwHighDateTime=0x1d5d877, ftLastWriteTime.dwLowDateTime=0x5be379c0, ftLastWriteTime.dwHighDateTime=0x1d5d877, nFileSizeHigh=0x0, nFileSizeLow=0xe4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="qQYf1sP1RQE8GHNhye6H.rtf", cAlternateFileName="QQYF1S~1.RTF")) returned 1 [0124.076] wcscmp (_String1="qQYf1sP1RQE8GHNhye6H.rtf", _String2=".") returned 1 [0124.076] wcscmp (_String1="qQYf1sP1RQE8GHNhye6H.rtf", _String2="..") returned 1 [0124.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bbe8 [0124.076] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" [0124.077] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0124.077] wcscat (in: _Dest=0x35bbe8, _Source="qQYf1sP1RQE8GHNhye6H.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\qQYf1sP1RQE8GHNhye6H.rtf") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\qQYf1sP1RQE8GHNhye6H.rtf" [0124.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0124.078] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1706e940, ftCreationTime.dwHighDateTime=0x1d5e687, ftLastAccessTime.dwLowDateTime=0x21a4dc60, ftLastAccessTime.dwHighDateTime=0x1d5e504, ftLastWriteTime.dwLowDateTime=0x21a4dc60, ftLastWriteTime.dwHighDateTime=0x1d5e504, nFileSizeHigh=0x0, nFileSizeLow=0x2048, dwReserved0=0x0, dwReserved1=0x0, cFileName="vmvTjDsQy.bmp", cAlternateFileName="VMVTJD~1.BMP")) returned 1 [0124.078] wcscmp (_String1="vmvTjDsQy.bmp", _String2=".") returned 1 [0124.078] wcscmp (_String1="vmvTjDsQy.bmp", _String2="..") returned 1 [0124.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6900 [0124.078] wcscpy (in: _Dest=0x3eb6900, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" [0124.078] wcscat (in: _Dest=0x3eb6900, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0124.078] wcscat (in: _Dest=0x3eb6900, _Source="vmvTjDsQy.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp" [0124.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0124.080] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b674a0, ftCreationTime.dwHighDateTime=0x1d5db09, ftLastAccessTime.dwLowDateTime=0x228e2760, ftLastAccessTime.dwHighDateTime=0x1d5d881, ftLastWriteTime.dwLowDateTime=0x228e2760, ftLastWriteTime.dwHighDateTime=0x1d5d881, nFileSizeHigh=0x0, nFileSizeLow=0x258e, dwReserved0=0x0, dwReserved1=0x0, cFileName="zZBUv_mKgX.bmp", cAlternateFileName="ZZBUV_~1.BMP")) returned 1 [0124.080] wcscmp (_String1="zZBUv_mKgX.bmp", _String2=".") returned 1 [0124.080] wcscmp (_String1="zZBUv_mKgX.bmp", _String2="..") returned 1 [0124.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5ee8 [0124.080] wcscpy (in: _Dest=0x3eb5ee8, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW" [0124.080] wcscat (in: _Dest=0x3eb5ee8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0124.080] wcscat (in: _Dest=0x3eb5ee8, _Source="zZBUv_mKgX.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp" [0124.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0124.081] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b674a0, ftCreationTime.dwHighDateTime=0x1d5db09, ftLastAccessTime.dwLowDateTime=0x228e2760, ftLastAccessTime.dwHighDateTime=0x1d5d881, ftLastWriteTime.dwLowDateTime=0x228e2760, ftLastWriteTime.dwHighDateTime=0x1d5d881, nFileSizeHigh=0x0, nFileSizeLow=0x258e, dwReserved0=0x0, dwReserved1=0x0, cFileName="zZBUv_mKgX.bmp", cAlternateFileName="ZZBUV_~1.BMP")) returned 0 [0124.081] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0124.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55318) returned 1 [0124.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18e18) returned 1 [0124.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 Thread: id = 476 os_tid = 0xf6c [0123.595] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\Y LYLxKsyoJGF.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\y lylxksyojgf.mp3")) returned 0x20 [0123.595] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\Y LYLxKsyoJGF.mp3", dwFileAttributes=0x20) returned 1 [0128.836] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\Y LYLxKsyoJGF.mp3" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\y lylxksyojgf.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc98 [0128.836] GetFileSizeEx (in: hFile=0xc98, lpFileSize=0xb47fb74 | out: lpFileSize=0xb47fb74*=49189) returned 1 [0128.836] SetFilePointerEx (in: hFile=0xc98, liDistanceToMove=0xc021, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.836] ReadFile (in: hFile=0xc98, lpBuffer=0xb47fb50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb47fb60, lpOverlapped=0x0 | out: lpBuffer=0xb47fb50*, lpNumberOfBytesRead=0xb47fb60*=0x4, lpOverlapped=0x0) returned 1 [0128.838] SetFilePointerEx (in: hFile=0xc98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0128.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b708 [0128.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b550 [0128.838] NtQuerySystemTime (in: CurrentTime=0xb47fae8 | out: CurrentTime=0xb47fae8*=132462177082308000) returned 0x0 [0128.838] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x154cdc88 [0128.838] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x68261a15 [0128.838] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x4e347e9c [0128.838] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x20562245 [0128.838] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x6e7cd20c [0128.838] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x12f09529 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x1ff48a48 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x6101fa67 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x3feb7dbc [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x43a76de4 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x2104e31b [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x60b7e7c4 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x2d522a3b [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x16d707f8 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x55c2fe62 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x153717cc [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x73f4aaae [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x1f57dfb9 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x1b575640 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0xa92658a [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x7506a326 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x3dab1a3b [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0xaef2c50 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x1a92c563 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x16f23ac5 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x4d4283ed [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x3311b3ee [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x987e31 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x522072fb [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x40ffba01 [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x7fde366a [0128.839] RtlRandomEx (in: Seed=0xb47fae0 | out: Seed=0xb47fae0) returned 0x18b63bdb [0128.852] SetFilePointerEx (in: hFile=0xc98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.852] ReadFile (in: hFile=0xc98, lpBuffer=0x7cb63a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb47fae8, lpOverlapped=0x0 | out: lpBuffer=0x7cb63a0*, lpNumberOfBytesRead=0xb47fae8*=0x3c00, lpOverlapped=0x0) returned 1 [0128.852] SetFilePointerEx (in: hFile=0xc98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0128.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b398) returned 1 [0128.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb9fa8 [0128.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0128.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b550 [0128.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b550) returned 1 [0128.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.853] WriteFile (in: hFile=0xc98, lpBuffer=0x7cb9fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb47fae8, lpOverlapped=0x0 | out: lpBuffer=0x7cb9fa8*, lpNumberOfBytesWritten=0xb47fae8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa8) returned 1 [0129.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63a0) returned 1 [0129.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3dac618 [0129.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0129.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3dac3e8 [0129.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0129.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd20 [0129.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd20) returned 1 [0129.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55958) returned 1 [0129.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d56058 [0129.617] SetFilePointerEx (in: hFile=0xc98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.617] WriteFile (in: hFile=0xc98, lpBuffer=0x3d56058*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xb47fb68, lpOverlapped=0x0 | out: lpBuffer=0x3d56058*, lpNumberOfBytesWritten=0xb47fb68*=0x114, lpOverlapped=0x0) returned 1 [0133.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55dd8 [0133.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0133.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b528 [0133.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0133.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86968 [0133.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b528 [0133.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0133.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0133.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0133.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 [0133.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3de6018 [0133.719] sprintf (in: _Dest=0x3de6018, _Format="%c%c" | out: _Dest="03") returned 2 [0133.719] sprintf (in: _Dest=0x3de601a, _Format="%c%c" | out: _Dest="9e") returned 2 [0133.719] sprintf (in: _Dest=0x3de601c, _Format="%c%c" | out: _Dest="2c") returned 2 [0133.719] sprintf (in: _Dest=0x3de601e, _Format="%c%c" | out: _Dest="91") returned 2 [0133.719] sprintf (in: _Dest=0x3de6020, _Format="%c%c" | out: _Dest="fa") returned 2 [0133.719] sprintf (in: _Dest=0x3de6022, _Format="%c%c" | out: _Dest="ed") returned 2 [0133.719] sprintf (in: _Dest=0x3de6024, _Format="%c%c" | out: _Dest="df") returned 2 [0133.719] sprintf (in: _Dest=0x3de6026, _Format="%c%c" | out: _Dest="5d") returned 2 [0133.719] sprintf (in: _Dest=0x3de6028, _Format="%c%c" | out: _Dest="ee") returned 2 [0133.720] sprintf (in: _Dest=0x3de602a, _Format="%c%c" | out: _Dest="06") returned 2 [0133.720] sprintf (in: _Dest=0x3de602c, _Format="%c%c" | out: _Dest="7d") returned 2 [0133.720] sprintf (in: _Dest=0x3de602e, _Format="%c%c" | out: _Dest="cb") returned 2 [0133.720] sprintf (in: _Dest=0x3de6030, _Format="%c%c" | out: _Dest="d6") returned 2 [0133.720] sprintf (in: _Dest=0x3de6032, _Format="%c%c" | out: _Dest="9c") returned 2 [0133.720] sprintf (in: _Dest=0x3de6034, _Format="%c%c" | out: _Dest="eb") returned 2 [0133.720] sprintf (in: _Dest=0x3de6036, _Format="%c%c" | out: _Dest="3a") returned 2 [0133.720] sprintf (in: _Dest=0x3de6038, _Format="%c%c" | out: _Dest="9e") returned 2 [0133.720] sprintf (in: _Dest=0x3de603a, _Format="%c%c" | out: _Dest="47") returned 2 [0133.720] sprintf (in: _Dest=0x3de603c, _Format="%c%c" | out: _Dest="63") returned 2 [0133.720] sprintf (in: _Dest=0x3de603e, _Format="%c%c" | out: _Dest="ac") returned 2 [0133.720] sprintf (in: _Dest=0x3de6040, _Format="%c%c" | out: _Dest="47") returned 2 [0133.720] sprintf (in: _Dest=0x3de6042, _Format="%c%c" | out: _Dest="31") returned 2 [0133.720] sprintf (in: _Dest=0x3de6044, _Format="%c%c" | out: _Dest="f0") returned 2 [0133.720] sprintf (in: _Dest=0x3de6046, _Format="%c%c" | out: _Dest="e7") returned 2 [0133.720] sprintf (in: _Dest=0x3de6048, _Format="%c%c" | out: _Dest="43") returned 2 [0133.720] sprintf (in: _Dest=0x3de604a, _Format="%c%c" | out: _Dest="7d") returned 2 [0133.720] sprintf (in: _Dest=0x3de604c, _Format="%c%c" | out: _Dest="1e") returned 2 [0133.720] sprintf (in: _Dest=0x3de604e, _Format="%c%c" | out: _Dest="87") returned 2 [0133.720] sprintf (in: _Dest=0x3de6050, _Format="%c%c" | out: _Dest="99") returned 2 [0133.720] sprintf (in: _Dest=0x3de6052, _Format="%c%c" | out: _Dest="93") returned 2 [0133.720] sprintf (in: _Dest=0x3de6054, _Format="%c%c" | out: _Dest="64") returned 2 [0133.721] sprintf (in: _Dest=0x3de6056, _Format="%c%c" | out: _Dest="d0") returned 2 [0133.721] sprintf (in: _Dest=0x3de6058, _Format="%c%c" | out: _Dest="bb") returned 2 [0133.721] sprintf (in: _Dest=0x3de605a, _Format="%c%c" | out: _Dest="80") returned 2 [0133.721] RtlInitAnsiString (in: DestinationString=0xb47faf0, SourceString="039e2c91faeddf5dee067dcbd69ceb3a9e4763ac4731f0e7437d1e87999364d0bb80" | out: DestinationString="039e2c91faeddf5dee067dcbd69ceb3a9e4763ac4731f0e7437d1e87999364d0bb80") [0133.721] RtlAnsiStringToUnicodeString (in: DestinationString=0xb47fae8, SourceString="039e2c91faeddf5dee067dcbd69ceb3a9e4763ac4731f0e7437d1e87999364d0bb80", AllocateDestinationString=1 | out: DestinationString="039e2c91faeddf5dee067dcbd69ceb3a9e4763ac4731f0e7437d1e87999364d0bb80") returned 0x0 [0133.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0133.721] wcscat (in: _Dest=0x3eb5990, _Source="039e2c91faeddf5de" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\039e2c91faeddf5de") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\039e2c91faeddf5de" [0133.721] wcscat (in: _Dest=0x3eb5990, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\039e2c91faeddf5de.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\039e2c91faeddf5de.68814f" [0133.721] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\039e2c91faeddf5de.68814f", NtPathName=0xb47fae0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\039e2c91faeddf5de.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b9d8 [0133.721] NtSetInformationFile (FileHandle=0xc98, IoStatusBlock=0xb47fae8, FileInformation=0x35b9d8, Length=0xa2, FileInformationClass=0xa) returned 0x0 [0133.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b9d8) returned 1 [0133.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6dda0) returned 1 [0133.957] NtQueryInformationFile (in: FileHandle=0xc98, IoStatusBlock=0xb47fab8, FileInformation=0xb47fac0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb47fab8, FileInformation=0xb47fac0) returned 0x0 [0133.957] NtSetInformationFile (FileHandle=0xc98, IoStatusBlock=0xb47fab8, FileInformation=0xb47fac0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5990) returned 1 [0133.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0133.962] FlushFileBuffers (hFile=0xc98) returned 1 [0135.322] CloseHandle (hObject=0xc98) returned 1 [0135.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1cd40 [0135.443] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0135.443] wcscat (in: _Dest=0x3e1cd40, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" [0135.443] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\68814f-readme.txt")) returned 0x20 [0135.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 [0135.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 477 os_tid = 0x738 [0123.595] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\zsnh30orzmyzl6pbdir.png")) returned 0x20 [0123.596] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png", dwFileAttributes=0x20) returned 1 [0128.820] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\zsnh30orzmyzl6pbdir.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc8c [0128.820] GetFileSizeEx (in: hFile=0xc8c, lpFileSize=0x61ffae4 | out: lpFileSize=0x61ffae4*=22464) returned 1 [0128.820] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x57bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.820] ReadFile (in: hFile=0xc8c, lpBuffer=0x61ffac0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x61ffad0, lpOverlapped=0x0 | out: lpBuffer=0x61ffac0*, lpNumberOfBytesRead=0x61ffad0*=0x4, lpOverlapped=0x0) returned 1 [0128.822] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0128.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0128.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0128.822] NtQuerySystemTime (in: CurrentTime=0x61ffa58 | out: CurrentTime=0x61ffa58*=132462177082152000) returned 0x0 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x4ce273bb [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x44cac92b [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x491e62a5 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x3952483d [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x12de07df [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0xcae988 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x7bbd92c [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x6a1e8f78 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x6a06f7e1 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x329bb5f9 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x5bdd101f [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0xdcae5b3 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x2ddc6478 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x6fdb86c6 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x784a1cd3 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0xa74dd89 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x29f82795 [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x49bedfbf [0128.822] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x5ae65af7 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0xb424e99 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x50390797 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0xcc44356 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x1b6fd748 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x41f5819a [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x419a1b93 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x21755da7 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x5d552b39 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x3ee95573 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0xe49b7fa [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x795396d1 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x71feaba1 [0128.823] RtlRandomEx (in: Seed=0x61ffa50 | out: Seed=0x61ffa50) returned 0x5578b0c1 [0128.832] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.832] ReadFile (in: hFile=0xc8c, lpBuffer=0x7caeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x61ffa58, lpOverlapped=0x0 | out: lpBuffer=0x7caeb90*, lpNumberOfBytesRead=0x61ffa58*=0x3c00, lpOverlapped=0x0) returned 1 [0128.833] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0128.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0128.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb2798 [0128.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0128.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0128.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b398) returned 1 [0128.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.834] WriteFile (in: hFile=0xc8c, lpBuffer=0x7cb2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x61ffa58, lpOverlapped=0x0 | out: lpBuffer=0x7cb2798*, lpNumberOfBytesWritten=0x61ffa58*=0x3c00, lpOverlapped=0x0) returned 1 [0129.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2798) returned 1 [0129.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caeb90) returned 1 [0129.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e55dd8 [0129.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0129.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x7a25e00 [0129.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0129.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0129.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0129.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55958) returned 1 [0129.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55f30 [0129.615] SetFilePointerEx (in: hFile=0xc8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.615] WriteFile (in: hFile=0xc8c, lpBuffer=0x3d55f30*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x61ffad8, lpOverlapped=0x0 | out: lpBuffer=0x3d55f30*, lpNumberOfBytesWritten=0x61ffad8*=0x120, lpOverlapped=0x0) returned 1 [0133.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55f30) returned 1 [0133.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e00) returned 1 [0133.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0133.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 [0133.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0133.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b578) returned 1 [0133.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0133.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0133.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4e60 [0133.717] wcscpy (in: _Dest=0x3df4e60, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png" [0133.717] wcscat (in: _Dest=0x3df4e60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png.68814f" [0133.717] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png.68814f", NtPathName=0x61ffa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\zsnh30orZMyzL6PBDir.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff63a8 [0133.717] NtSetInformationFile (FileHandle=0xc8c, IoStatusBlock=0x61ffa58, FileInformation=0x2ff63a8, Length=0xae, FileInformationClass=0xa) returned 0x0 [0133.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 [0133.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d0b0) returned 1 [0133.831] NtQueryInformationFile (in: FileHandle=0xc8c, IoStatusBlock=0x61ffa28, FileInformation=0x61ffa30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x61ffa28, FileInformation=0x61ffa30) returned 0x0 [0133.831] NtSetInformationFile (FileHandle=0xc8c, IoStatusBlock=0x61ffa28, FileInformation=0x61ffa30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4e60) returned 1 [0133.889] FlushFileBuffers (hFile=0xc8c) returned 1 [0135.232] CloseHandle (hObject=0xc8c) returned 1 [0135.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1cd40 [0135.417] wcscpy (in: _Dest=0x3e1cd40, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\" [0135.417] wcscat (in: _Dest=0x3e1cd40, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" [0135.417] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\68814f-readme.txt")) returned 0x20 [0135.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 [0135.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 478 os_tid = 0xb04 [0123.596] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\7hI--tK.wav" (normalized: "c:\\users\\eebsym5\\music\\7hi--tk.wav")) returned 0x20 [0123.596] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\7hI--tK.wav", dwFileAttributes=0x20) returned 1 [0128.804] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\7hI--tK.wav" (normalized: "c:\\users\\eebsym5\\music\\7hi--tk.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc7c [0128.804] GetFileSizeEx (in: hFile=0xc7c, lpFileSize=0xb24f85c | out: lpFileSize=0xb24f85c*=60232) returned 1 [0128.804] SetFilePointerEx (in: hFile=0xc7c, liDistanceToMove=0xeb44, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.804] ReadFile (in: hFile=0xc7c, lpBuffer=0xb24f838, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb24f848, lpOverlapped=0x0 | out: lpBuffer=0xb24f838*, lpNumberOfBytesRead=0xb24f848*=0x4, lpOverlapped=0x0) returned 1 [0128.806] SetFilePointerEx (in: hFile=0xc7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0128.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0128.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0128.806] NtQuerySystemTime (in: CurrentTime=0xb24f7d0 | out: CurrentTime=0xb24f7d0*=132462177081996000) returned 0x0 [0128.806] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x6bc1c1e9 [0128.806] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x601d56b6 [0128.806] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x78436d65 [0128.806] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x56b813aa [0128.806] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x4ead98e8 [0128.806] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x7d839225 [0128.806] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x60f1425 [0128.806] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x787ccc0f [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x2cbfb918 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x739a6a5 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x261ccf72 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0xf9387a3 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x68b031e1 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x5ab401c7 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x3bb669e3 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x10e3a564 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x1803dc32 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x68d41404 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x660b268d [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x55933272 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x533749cb [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x43c86c20 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x63a044c0 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x2ba30db8 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x62278866 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x2c637213 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x3bf016f3 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x6d0363a1 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0xb31da9d [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x263cf3d3 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x1712883 [0128.807] RtlRandomEx (in: Seed=0xb24f7c8 | out: Seed=0xb24f7c8) returned 0x28653cf4 [0128.816] SetFilePointerEx (in: hFile=0xc7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.816] ReadFile (in: hFile=0xc7c, lpBuffer=0x7ca7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb24f7d0, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesRead=0xb24f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0128.816] SetFilePointerEx (in: hFile=0xc7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0128.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0128.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caaf88 [0128.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0128.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0128.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0128.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.817] WriteFile (in: hFile=0xc7c, lpBuffer=0x7caaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb24f7d0, lpOverlapped=0x0 | out: lpBuffer=0x7caaf88*, lpNumberOfBytesWritten=0xb24f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0129.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf88) returned 1 [0129.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca7380) returned 1 [0129.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86968 [0129.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd98) returned 1 [0129.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86998 [0129.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0129.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0129.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0129.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 [0129.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec5f8 [0129.613] SetFilePointerEx (in: hFile=0xc7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.614] WriteFile (in: hFile=0xc7c, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xb24f850, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0xb24f850*=0x108, lpOverlapped=0x0) returned 1 [0133.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55ac0 [0133.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0133.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0133.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0133.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2f190 [0133.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0133.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0133.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0133.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0133.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55ac0) returned 1 [0133.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x3dac500 [0133.710] sprintf (in: _Dest=0x3dac500, _Format="%c%c" | out: _Dest="ec") returned 2 [0133.710] sprintf (in: _Dest=0x3dac502, _Format="%c%c" | out: _Dest="e3") returned 2 [0133.710] sprintf (in: _Dest=0x3dac504, _Format="%c%c" | out: _Dest="3b") returned 2 [0133.711] sprintf (in: _Dest=0x3dac506, _Format="%c%c" | out: _Dest="c6") returned 2 [0133.711] sprintf (in: _Dest=0x3dac508, _Format="%c%c" | out: _Dest="b9") returned 2 [0133.711] sprintf (in: _Dest=0x3dac50a, _Format="%c%c" | out: _Dest="ae") returned 2 [0133.711] sprintf (in: _Dest=0x3dac50c, _Format="%c%c" | out: _Dest="d5") returned 2 [0133.711] sprintf (in: _Dest=0x3dac50e, _Format="%c%c" | out: _Dest="62") returned 2 [0133.711] sprintf (in: _Dest=0x3dac510, _Format="%c%c" | out: _Dest="da") returned 2 [0133.711] sprintf (in: _Dest=0x3dac512, _Format="%c%c" | out: _Dest="90") returned 2 [0133.711] sprintf (in: _Dest=0x3dac514, _Format="%c%c" | out: _Dest="8f") returned 2 [0133.711] sprintf (in: _Dest=0x3dac516, _Format="%c%c" | out: _Dest="92") returned 2 [0133.711] sprintf (in: _Dest=0x3dac518, _Format="%c%c" | out: _Dest="4d") returned 2 [0133.711] sprintf (in: _Dest=0x3dac51a, _Format="%c%c" | out: _Dest="dd") returned 2 [0133.711] sprintf (in: _Dest=0x3dac51c, _Format="%c%c" | out: _Dest="1d") returned 2 [0133.711] sprintf (in: _Dest=0x3dac51e, _Format="%c%c" | out: _Dest="e4") returned 2 [0133.711] sprintf (in: _Dest=0x3dac520, _Format="%c%c" | out: _Dest="24") returned 2 [0133.711] sprintf (in: _Dest=0x3dac522, _Format="%c%c" | out: _Dest="e5") returned 2 [0133.711] sprintf (in: _Dest=0x3dac524, _Format="%c%c" | out: _Dest="64") returned 2 [0133.711] sprintf (in: _Dest=0x3dac526, _Format="%c%c" | out: _Dest="7c") returned 2 [0133.711] sprintf (in: _Dest=0x3dac528, _Format="%c%c" | out: _Dest="12") returned 2 [0133.711] sprintf (in: _Dest=0x3dac52a, _Format="%c%c" | out: _Dest="a1") returned 2 [0133.711] RtlInitAnsiString (in: DestinationString=0xb24f7d8, SourceString="ece33bc6b9aed562da908f924ddd1de424e5647c12a1" | out: DestinationString="ece33bc6b9aed562da908f924ddd1de424e5647c12a1") [0133.711] RtlAnsiStringToUnicodeString (in: DestinationString=0xb24f7d0, SourceString="ece33bc6b9aed562da908f924ddd1de424e5647c12a1", AllocateDestinationString=1 | out: DestinationString="ece33bc6b9aed562da908f924ddd1de424e5647c12a1") returned 0x0 [0133.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1e7f8 [0133.712] wcscat (in: _Dest=0x2fe6968, _Source="ece33bc6b9a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\ece33bc6b9a") returned="C:\\Users\\EEBsYm5\\Music\\ece33bc6b9a" [0133.712] wcscat (in: _Dest=0x2fe6968, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\ece33bc6b9a.68814f") returned="C:\\Users\\EEBsYm5\\Music\\ece33bc6b9a.68814f" [0133.712] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\ece33bc6b9a.68814f", NtPathName=0xb24f7c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\ece33bc6b9a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fec0 [0133.712] NtSetInformationFile (FileHandle=0xc7c, IoStatusBlock=0xb24f7d0, FileInformation=0x3f3fec0, Length=0x6a, FileInformationClass=0xa) returned 0x0 [0134.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0134.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f558) returned 1 [0134.003] NtQueryInformationFile (in: FileHandle=0xc7c, IoStatusBlock=0xb24f7a0, FileInformation=0xb24f7a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb24f7a0, FileInformation=0xb24f7a8) returned 0x0 [0134.003] NtSetInformationFile (FileHandle=0xc7c, IoStatusBlock=0xb24f7a0, FileInformation=0xb24f7a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 [0134.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e7f8) returned 1 [0134.005] FlushFileBuffers (hFile=0xc7c) returned 1 [0135.335] CloseHandle (hObject=0xc7c) returned 1 [0135.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe64e8 [0135.447] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0135.448] wcscat (in: _Dest=0x2fe64e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" [0135.448] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\68814f-readme.txt")) returned 0x20 [0135.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0135.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de61f8) returned 1 Thread: id = 479 os_tid = 0x59c [0123.597] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\flEnME.mp3" (normalized: "c:\\users\\eebsym5\\music\\flenme.mp3")) returned 0x20 [0123.597] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\flEnME.mp3", dwFileAttributes=0x20) returned 1 [0128.785] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\flEnME.mp3" (normalized: "c:\\users\\eebsym5\\music\\flenme.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc84 [0128.785] GetFileSizeEx (in: hFile=0xc84, lpFileSize=0xb56fbfc | out: lpFileSize=0xb56fbfc*=67014) returned 1 [0128.785] SetFilePointerEx (in: hFile=0xc84, liDistanceToMove=0x105c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.785] ReadFile (in: hFile=0xc84, lpBuffer=0xb56fbd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb56fbe8, lpOverlapped=0x0 | out: lpBuffer=0xb56fbd8*, lpNumberOfBytesRead=0xb56fbe8*=0x4, lpOverlapped=0x0) returned 1 [0128.787] SetFilePointerEx (in: hFile=0xc84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0128.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0128.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0128.788] NtQuerySystemTime (in: CurrentTime=0xb56fb70 | out: CurrentTime=0xb56fb70*=132462177081840000) returned 0x0 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x2402c3b9 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x7717a8bf [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x591d6115 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x5cbce2e6 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x61396ff0 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x662cb616 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x2ca63663 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x39f196e5 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x7b86beea [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x30375ce6 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x46422d9f [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x43befce7 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x71c32979 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x3dc1e774 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x7eaa73c0 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x53fd1b96 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x25bf6a01 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x71dbab92 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x279efbcb [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x229085c8 [0128.788] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x678444a1 [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x1cd0b07f [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x5c502cc7 [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x2a952f0e [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x65aa3317 [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x680f60b5 [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x7613cb35 [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x3defe6ea [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x2715bbee [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x6e8908cd [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x61ecaca7 [0128.789] RtlRandomEx (in: Seed=0xb56fb68 | out: Seed=0xb56fb68) returned 0x205efbf9 [0128.800] SetFilePointerEx (in: hFile=0xc84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.800] ReadFile (in: hFile=0xc84, lpBuffer=0x7c9fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb56fb70, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesRead=0xb56fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0128.801] SetFilePointerEx (in: hFile=0xc84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0128.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0128.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca3778 [0128.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0128.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0128.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0128.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.802] WriteFile (in: hFile=0xc84, lpBuffer=0x7ca3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb56fb70, lpOverlapped=0x0 | out: lpBuffer=0x7ca3778*, lpNumberOfBytesWritten=0xb56fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0129.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca3778) returned 1 [0129.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0129.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86908 [0129.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bdc0) returned 1 [0129.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86938 [0129.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0129.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0129.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd98) returned 1 [0129.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 [0129.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec710 [0129.611] SetFilePointerEx (in: hFile=0xc84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.611] WriteFile (in: hFile=0xc84, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xb56fbf0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xb56fbf0*=0x106, lpOverlapped=0x0) returned 1 [0133.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55ac0 [0133.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0133.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0133.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0133.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2f190 [0133.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0133.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec48e8 [0133.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec48e8) returned 1 [0133.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0133.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55ac0) returned 1 [0133.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3dac500 [0133.706] sprintf (in: _Dest=0x3dac500, _Format="%c%c" | out: _Dest="19") returned 2 [0133.707] sprintf (in: _Dest=0x3dac502, _Format="%c%c" | out: _Dest="e6") returned 2 [0133.707] sprintf (in: _Dest=0x3dac504, _Format="%c%c" | out: _Dest="42") returned 2 [0133.707] sprintf (in: _Dest=0x3dac506, _Format="%c%c" | out: _Dest="89") returned 2 [0133.707] sprintf (in: _Dest=0x3dac508, _Format="%c%c" | out: _Dest="47") returned 2 [0133.707] sprintf (in: _Dest=0x3dac50a, _Format="%c%c" | out: _Dest="b6") returned 2 [0133.707] sprintf (in: _Dest=0x3dac50c, _Format="%c%c" | out: _Dest="1d") returned 2 [0133.707] sprintf (in: _Dest=0x3dac50e, _Format="%c%c" | out: _Dest="8e") returned 2 [0133.707] sprintf (in: _Dest=0x3dac510, _Format="%c%c" | out: _Dest="e0") returned 2 [0133.707] sprintf (in: _Dest=0x3dac512, _Format="%c%c" | out: _Dest="41") returned 2 [0133.707] sprintf (in: _Dest=0x3dac514, _Format="%c%c" | out: _Dest="b1") returned 2 [0133.707] sprintf (in: _Dest=0x3dac516, _Format="%c%c" | out: _Dest="8b") returned 2 [0133.707] sprintf (in: _Dest=0x3dac518, _Format="%c%c" | out: _Dest="bc") returned 2 [0133.707] sprintf (in: _Dest=0x3dac51a, _Format="%c%c" | out: _Dest="12") returned 2 [0133.707] sprintf (in: _Dest=0x3dac51c, _Format="%c%c" | out: _Dest="0f") returned 2 [0133.707] sprintf (in: _Dest=0x3dac51e, _Format="%c%c" | out: _Dest="36") returned 2 [0133.707] sprintf (in: _Dest=0x3dac520, _Format="%c%c" | out: _Dest="ce") returned 2 [0133.707] sprintf (in: _Dest=0x3dac522, _Format="%c%c" | out: _Dest="62") returned 2 [0133.707] sprintf (in: _Dest=0x3dac524, _Format="%c%c" | out: _Dest="8d") returned 2 [0133.707] sprintf (in: _Dest=0x3dac526, _Format="%c%c" | out: _Dest="a4") returned 2 [0133.707] RtlInitAnsiString (in: DestinationString=0xb56fb78, SourceString="19e6428947b61d8ee041b18bbc120f36ce628da4" | out: DestinationString="19e6428947b61d8ee041b18bbc120f36ce628da4") [0133.707] RtlAnsiStringToUnicodeString (in: DestinationString=0xb56fb70, SourceString="19e6428947b61d8ee041b18bbc120f36ce628da4", AllocateDestinationString=1 | out: DestinationString="19e6428947b61d8ee041b18bbc120f36ce628da4") returned 0x0 [0133.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe64e8 [0133.708] wcscat (in: _Dest=0x2fe14a8, _Source="19e6428947" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\19e6428947") returned="C:\\Users\\EEBsYm5\\Music\\19e6428947" [0133.708] wcscat (in: _Dest=0x2fe14a8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\19e6428947.68814f") returned="C:\\Users\\EEBsYm5\\Music\\19e6428947.68814f" [0133.708] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\19e6428947.68814f", NtPathName=0xb56fb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\19e6428947.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23ed0 [0133.708] NtSetInformationFile (FileHandle=0xc84, IoStatusBlock=0xb56fb70, FileInformation=0x7a23ed0, Length=0x68, FileInformationClass=0xa) returned 0x0 [0133.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ed0) returned 1 [0133.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f330) returned 1 [0133.988] NtQueryInformationFile (in: FileHandle=0xc84, IoStatusBlock=0xb56fb40, FileInformation=0xb56fb48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb56fb40, FileInformation=0xb56fb48) returned 0x0 [0133.988] NtSetInformationFile (FileHandle=0xc84, IoStatusBlock=0xb56fb40, FileInformation=0xb56fb48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe14a8) returned 1 [0134.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0134.007] FlushFileBuffers (hFile=0xc84) returned 1 [0135.336] CloseHandle (hObject=0xc84) returned 1 [0135.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe64e8 [0135.450] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0135.450] wcscat (in: _Dest=0x2fe64e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" [0135.450] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\68814f-readme.txt")) returned 0x20 [0135.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0135.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e58ce8) returned 1 Thread: id = 480 os_tid = 0xcd8 [0123.598] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\OEIAgNH2G.mp3" (normalized: "c:\\users\\eebsym5\\music\\oeiagnh2g.mp3")) returned 0x20 [0123.598] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\OEIAgNH2G.mp3", dwFileAttributes=0x20) returned 1 [0128.756] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\OEIAgNH2G.mp3" (normalized: "c:\\users\\eebsym5\\music\\oeiagnh2g.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc88 [0128.756] GetFileSizeEx (in: hFile=0xc88, lpFileSize=0x8d8fa2c | out: lpFileSize=0x8d8fa2c*=82355) returned 1 [0128.756] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0x141af, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.756] ReadFile (in: hFile=0xc88, lpBuffer=0x8d8fa08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d8fa18, lpOverlapped=0x0 | out: lpBuffer=0x8d8fa08*, lpNumberOfBytesRead=0x8d8fa18*=0x4, lpOverlapped=0x0) returned 1 [0128.759] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0128.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0128.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0128.759] NtQuerySystemTime (in: CurrentTime=0x8d8f9a0 | out: CurrentTime=0x8d8f9a0*=132462177081528000) returned 0x0 [0128.759] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x1938688a [0128.759] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x6414237e [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x7749bd4a [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x678e25aa [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x3de02b54 [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x137fba7b [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x685a8061 [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x7e70f39f [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x1397fda5 [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x1c0ede84 [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x4a2f727b [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x77ce3cbc [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x640ce863 [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x5a719fc7 [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x2205369 [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x6f8a884f [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0xac9f8dd [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x4829ab5 [0128.760] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x6905e361 [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x67d9f621 [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x36b7ae6f [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x3222882e [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x6c605d52 [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x4ffe5eb9 [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x3b05a35c [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x2536b14c [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x5d71c89b [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x682fa7a1 [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x5094444b [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x2da807d9 [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0x3bef2c3d [0128.761] RtlRandomEx (in: Seed=0x8d8f998 | out: Seed=0x8d8f998) returned 0xf58ca8c [0128.780] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.780] ReadFile (in: hFile=0xc88, lpBuffer=0x7c98360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d8f9a0, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesRead=0x8d8f9a0*=0x3c00, lpOverlapped=0x0) returned 1 [0128.781] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0128.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0128.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0128.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0128.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0128.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0128.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.782] WriteFile (in: hFile=0xc88, lpBuffer=0x7c9bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d8f9a0, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesWritten=0x8d8f9a0*=0x3c00, lpOverlapped=0x0) returned 1 [0129.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0129.608] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.608] ReadFile (in: hFile=0xc88, lpBuffer=0x7c98360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d8f9a0, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesRead=0x8d8f9a0*=0x3c00, lpOverlapped=0x0) returned 1 [0129.609] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55dd8 [0129.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0129.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0129.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0129.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0129.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0129.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0129.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bdc0) returned 1 [0129.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 [0129.610] WriteFile (in: hFile=0xc88, lpBuffer=0x7c9bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d8f9a0, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesWritten=0x8d8f9a0*=0x3c00, lpOverlapped=0x0) returned 1 [0131.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0131.156] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0x105b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.157] ReadFile (in: hFile=0xc88, lpBuffer=0x7c98360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8d8f9a0, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesRead=0x8d8f9a0*=0x3c00, lpOverlapped=0x0) returned 1 [0131.157] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0x105b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08268 [0131.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0131.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0131.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0131.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0131.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0131.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0131.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0131.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0131.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08268) returned 1 [0131.158] WriteFile (in: hFile=0xc88, lpBuffer=0x7c9bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8d8f9a0, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesWritten=0x8d8f9a0*=0x3c00, lpOverlapped=0x0) returned 1 [0131.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0131.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf678 [0131.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0131.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86ba8 [0131.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0131.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0131.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0131.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0131.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24e90) returned 1 [0131.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e0a560 [0131.899] SetFilePointerEx (in: hFile=0xc88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.899] WriteFile (in: hFile=0xc88, lpBuffer=0x3e0a560*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x8d8fa20, lpOverlapped=0x0 | out: lpBuffer=0x3e0a560*, lpNumberOfBytesWritten=0x8d8fa20*=0x14c, lpOverlapped=0x0) returned 1 [0132.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25350 [0132.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3490b0 [0132.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0132.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e30) returned 1 [0132.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2e30 [0132.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0132.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0132.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f98) returned 1 [0132.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 [0132.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0132.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066b80 [0132.616] sprintf (in: _Dest=0x3066b80, _Format="%c%c" | out: _Dest="44") returned 2 [0132.616] sprintf (in: _Dest=0x3066b82, _Format="%c%c" | out: _Dest="24") returned 2 [0132.617] sprintf (in: _Dest=0x3066b84, _Format="%c%c" | out: _Dest="1b") returned 2 [0132.617] sprintf (in: _Dest=0x3066b86, _Format="%c%c" | out: _Dest="6a") returned 2 [0132.617] sprintf (in: _Dest=0x3066b88, _Format="%c%c" | out: _Dest="8b") returned 2 [0132.617] sprintf (in: _Dest=0x3066b8a, _Format="%c%c" | out: _Dest="3e") returned 2 [0132.617] sprintf (in: _Dest=0x3066b8c, _Format="%c%c" | out: _Dest="21") returned 2 [0132.617] sprintf (in: _Dest=0x3066b8e, _Format="%c%c" | out: _Dest="9e") returned 2 [0132.617] sprintf (in: _Dest=0x3066b90, _Format="%c%c" | out: _Dest="75") returned 2 [0132.617] sprintf (in: _Dest=0x3066b92, _Format="%c%c" | out: _Dest="0e") returned 2 [0132.617] sprintf (in: _Dest=0x3066b94, _Format="%c%c" | out: _Dest="af") returned 2 [0132.617] sprintf (in: _Dest=0x3066b96, _Format="%c%c" | out: _Dest="0e") returned 2 [0132.617] sprintf (in: _Dest=0x3066b98, _Format="%c%c" | out: _Dest="4c") returned 2 [0132.617] sprintf (in: _Dest=0x3066b9a, _Format="%c%c" | out: _Dest="14") returned 2 [0132.617] sprintf (in: _Dest=0x3066b9c, _Format="%c%c" | out: _Dest="55") returned 2 [0132.617] sprintf (in: _Dest=0x3066b9e, _Format="%c%c" | out: _Dest="f9") returned 2 [0132.617] sprintf (in: _Dest=0x3066ba0, _Format="%c%c" | out: _Dest="af") returned 2 [0132.617] sprintf (in: _Dest=0x3066ba2, _Format="%c%c" | out: _Dest="df") returned 2 [0132.617] sprintf (in: _Dest=0x3066ba4, _Format="%c%c" | out: _Dest="14") returned 2 [0132.617] sprintf (in: _Dest=0x3066ba6, _Format="%c%c" | out: _Dest="1a") returned 2 [0132.618] sprintf (in: _Dest=0x3066ba8, _Format="%c%c" | out: _Dest="cc") returned 2 [0132.618] sprintf (in: _Dest=0x3066baa, _Format="%c%c" | out: _Dest="dd") returned 2 [0132.618] sprintf (in: _Dest=0x3066bac, _Format="%c%c" | out: _Dest="99") returned 2 [0132.618] sprintf (in: _Dest=0x3066bae, _Format="%c%c" | out: _Dest="05") returned 2 [0132.618] sprintf (in: _Dest=0x3066bb0, _Format="%c%c" | out: _Dest="a1") returned 2 [0132.618] sprintf (in: _Dest=0x3066bb2, _Format="%c%c" | out: _Dest="4b") returned 2 [0132.618] RtlInitAnsiString (in: DestinationString=0x8d8f9a8, SourceString="44241b6a8b3e219e750eaf0e4c1455f9afdf141accdd9905a14b" | out: DestinationString="44241b6a8b3e219e750eaf0e4c1455f9afdf141accdd9905a14b") [0132.618] RtlAnsiStringToUnicodeString (in: DestinationString=0x8d8f9a0, SourceString="44241b6a8b3e219e750eaf0e4c1455f9afdf141accdd9905a14b", AllocateDestinationString=1 | out: DestinationString="44241b6a8b3e219e750eaf0e4c1455f9afdf141accdd9905a14b") returned 0x0 [0132.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e760 [0132.618] wcscat (in: _Dest=0x2fe6ba8, _Source="44241b6a8b3e2" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\44241b6a8b3e2") returned="C:\\Users\\EEBsYm5\\Music\\44241b6a8b3e2" [0132.618] wcscat (in: _Dest=0x2fe6ba8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\44241b6a8b3e2.68814f") returned="C:\\Users\\EEBsYm5\\Music\\44241b6a8b3e2.68814f" [0132.618] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\44241b6a8b3e2.68814f", NtPathName=0x8d8f998, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\44241b6a8b3e2.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3490b0 [0132.618] NtSetInformationFile (FileHandle=0xc88, IoStatusBlock=0x8d8f9a0, FileInformation=0x3490b0, Length=0x6e, FileInformationClass=0xa) returned 0x0 [0132.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 [0132.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a31e80) returned 1 [0132.638] NtQueryInformationFile (in: FileHandle=0xc88, IoStatusBlock=0x8d8f970, FileInformation=0x8d8f978, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8d8f970, FileInformation=0x8d8f978) returned 0x0 [0132.638] NtSetInformationFile (FileHandle=0xc88, IoStatusBlock=0x8d8f970, FileInformation=0x8d8f978, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 [0132.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0132.657] FlushFileBuffers (hFile=0xc88) returned 1 [0135.201] CloseHandle (hObject=0xc88) returned 1 [0135.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe64e8 [0135.203] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0135.203] wcscat (in: _Dest=0x2fe64e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" [0135.203] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\68814f-readme.txt")) returned 0xffffffff [0135.204] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc88 [0135.204] WriteFile (in: hFile=0xc88, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8d8f9b4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8d8f9b4*=0x8b9, lpOverlapped=0x0) returned 1 [0135.207] CloseHandle (hObject=0xc88) returned 1 [0135.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0135.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14ae8) returned 1 Thread: id = 481 os_tid = 0xcc4 [0123.598] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\PK0faatdzUV0i5Q5jU.m4a" (normalized: "c:\\users\\eebsym5\\music\\pk0faatdzuv0i5q5ju.m4a")) returned 0x20 [0123.599] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\PK0faatdzUV0i5Q5jU.m4a", dwFileAttributes=0x20) returned 1 [0128.732] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\PK0faatdzUV0i5Q5jU.m4a" (normalized: "c:\\users\\eebsym5\\music\\pk0faatdzuv0i5q5ju.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc10 [0128.732] GetFileSizeEx (in: hFile=0xc10, lpFileSize=0xb31fb44 | out: lpFileSize=0xb31fb44*=65794) returned 1 [0128.732] SetFilePointerEx (in: hFile=0xc10, liDistanceToMove=0x100fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.732] ReadFile (in: hFile=0xc10, lpBuffer=0xb31fb20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb31fb30, lpOverlapped=0x0 | out: lpBuffer=0xb31fb20*, lpNumberOfBytesRead=0xb31fb30*=0x4, lpOverlapped=0x0) returned 1 [0128.734] SetFilePointerEx (in: hFile=0xc10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0128.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0128.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0128.734] NtQuerySystemTime (in: CurrentTime=0xb31fab8 | out: CurrentTime=0xb31fab8*=132462177081216000) returned 0x0 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x656f2887 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x18de6b27 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x5cdbfc5e [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x33766a17 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x4fba843c [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x769580d9 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x52147bc7 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x5df2849e [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x297cf071 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x65ca00f4 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x1fcab90c [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x104f0555 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x695b94e1 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x120f57a2 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x33ac6286 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x3c92377c [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x7002f5b4 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x3db81903 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x42eb5a8 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x509678d6 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x22a646cd [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x1813dc93 [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x2eeb32fb [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x1c9c29ca [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x6a525f3f [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x3b393adc [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0xcf941e [0128.735] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x61ac8a1e [0128.736] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x64e2b380 [0128.736] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x36d24b78 [0128.736] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x20994063 [0128.736] RtlRandomEx (in: Seed=0xb31fab0 | out: Seed=0xb31fab0) returned 0x781f6500 [0128.751] SetFilePointerEx (in: hFile=0xc10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.751] ReadFile (in: hFile=0xc10, lpBuffer=0x7b807d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb31fab8, lpOverlapped=0x0 | out: lpBuffer=0x7b807d8*, lpNumberOfBytesRead=0xb31fab8*=0x3c00, lpOverlapped=0x0) returned 1 [0128.752] SetFilePointerEx (in: hFile=0xc10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0128.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4be0) returned 1 [0128.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b843e0 [0128.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0128.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0128.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0128.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.753] WriteFile (in: hFile=0xc10, lpBuffer=0x7b843e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb31fab8, lpOverlapped=0x0 | out: lpBuffer=0x7b843e0*, lpNumberOfBytesWritten=0xb31fab8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b843e0) returned 1 [0129.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b807d8) returned 1 [0129.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e55ac0 [0129.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0129.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e56720 [0129.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be10 [0129.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0129.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0129.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 [0129.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d55e08 [0129.607] SetFilePointerEx (in: hFile=0xc10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.607] WriteFile (in: hFile=0xc10, lpBuffer=0x3d55e08*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xb31fb38, lpOverlapped=0x0 | out: lpBuffer=0x3d55e08*, lpNumberOfBytesWritten=0xb31fb38*=0x11e, lpOverlapped=0x0) returned 1 [0133.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e561c8 [0133.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f830 [0133.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0133.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0133.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3dac500 [0133.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0133.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0133.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0133.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0133.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e561c8) returned 1 [0133.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1d888 [0133.702] sprintf (in: _Dest=0x3e1d888, _Format="%c%c" | out: _Dest="99") returned 2 [0133.702] sprintf (in: _Dest=0x3e1d88a, _Format="%c%c" | out: _Dest="3d") returned 2 [0133.702] sprintf (in: _Dest=0x3e1d88c, _Format="%c%c" | out: _Dest="aa") returned 2 [0133.702] sprintf (in: _Dest=0x3e1d88e, _Format="%c%c" | out: _Dest="64") returned 2 [0133.702] sprintf (in: _Dest=0x3e1d890, _Format="%c%c" | out: _Dest="0f") returned 2 [0133.702] sprintf (in: _Dest=0x3e1d892, _Format="%c%c" | out: _Dest="8d") returned 2 [0133.702] sprintf (in: _Dest=0x3e1d894, _Format="%c%c" | out: _Dest="19") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d896, _Format="%c%c" | out: _Dest="7a") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d898, _Format="%c%c" | out: _Dest="af") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d89a, _Format="%c%c" | out: _Dest="f1") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d89c, _Format="%c%c" | out: _Dest="75") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d89e, _Format="%c%c" | out: _Dest="b8") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8a0, _Format="%c%c" | out: _Dest="c5") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8a2, _Format="%c%c" | out: _Dest="33") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8a4, _Format="%c%c" | out: _Dest="72") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8a6, _Format="%c%c" | out: _Dest="9d") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8a8, _Format="%c%c" | out: _Dest="77") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8aa, _Format="%c%c" | out: _Dest="a8") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8ac, _Format="%c%c" | out: _Dest="e9") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8ae, _Format="%c%c" | out: _Dest="b9") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8b0, _Format="%c%c" | out: _Dest="32") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8b2, _Format="%c%c" | out: _Dest="b7") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8b4, _Format="%c%c" | out: _Dest="04") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8b6, _Format="%c%c" | out: _Dest="dd") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8b8, _Format="%c%c" | out: _Dest="ca") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8ba, _Format="%c%c" | out: _Dest="7d") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8bc, _Format="%c%c" | out: _Dest="7e") returned 2 [0133.703] sprintf (in: _Dest=0x3e1d8be, _Format="%c%c" | out: _Dest="66") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8c0, _Format="%c%c" | out: _Dest="59") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8c2, _Format="%c%c" | out: _Dest="9c") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8c4, _Format="%c%c" | out: _Dest="57") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8c6, _Format="%c%c" | out: _Dest="75") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8c8, _Format="%c%c" | out: _Dest="97") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8ca, _Format="%c%c" | out: _Dest="67") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8cc, _Format="%c%c" | out: _Dest="2d") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8ce, _Format="%c%c" | out: _Dest="e3") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8d0, _Format="%c%c" | out: _Dest="9c") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8d2, _Format="%c%c" | out: _Dest="70") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8d4, _Format="%c%c" | out: _Dest="1d") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8d6, _Format="%c%c" | out: _Dest="56") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8d8, _Format="%c%c" | out: _Dest="ea") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8da, _Format="%c%c" | out: _Dest="66") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8dc, _Format="%c%c" | out: _Dest="7a") returned 2 [0133.704] sprintf (in: _Dest=0x3e1d8de, _Format="%c%c" | out: _Dest="79") returned 2 [0133.704] RtlInitAnsiString (in: DestinationString=0xb31fac0, SourceString="993daa640f8d197aaff175b8c533729d77a8e9b932b704ddca7d7e66599c577597672de39c701d56ea667a79" | out: DestinationString="993daa640f8d197aaff175b8c533729d77a8e9b932b704ddca7d7e66599c577597672de39c701d56ea667a79") [0133.704] RtlAnsiStringToUnicodeString (in: DestinationString=0xb31fab8, SourceString="993daa640f8d197aaff175b8c533729d77a8e9b932b704ddca7d7e66599c577597672de39c701d56ea667a79", AllocateDestinationString=1 | out: DestinationString="993daa640f8d197aaff175b8c533729d77a8e9b932b704ddca7d7e66599c577597672de39c701d56ea667a79") returned 0x0 [0133.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66618 [0133.704] wcscat (in: _Dest=0x3f3f830, _Source="993daa640f8d197aaff175" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\993daa640f8d197aaff175") returned="C:\\Users\\EEBsYm5\\Music\\993daa640f8d197aaff175" [0133.704] wcscat (in: _Dest=0x3f3f830, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\993daa640f8d197aaff175.68814f") returned="C:\\Users\\EEBsYm5\\Music\\993daa640f8d197aaff175.68814f" [0133.705] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\993daa640f8d197aaff175.68814f", NtPathName=0xb31fab0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\993daa640f8d197aaff175.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f00 [0133.705] NtSetInformationFile (FileHandle=0xc10, IoStatusBlock=0xb31fab8, FileInformation=0x3eb8f00, Length=0x80, FileInformationClass=0xa) returned 0x0 [0133.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 [0133.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f780) returned 1 [0133.986] NtQueryInformationFile (in: FileHandle=0xc10, IoStatusBlock=0xb31fa88, FileInformation=0xb31fa90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb31fa88, FileInformation=0xb31fa90) returned 0x0 [0133.986] NtSetInformationFile (FileHandle=0xc10, IoStatusBlock=0xb31fa88, FileInformation=0xb31fa90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0134.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66618) returned 1 [0134.001] FlushFileBuffers (hFile=0xc10) returned 1 [0135.329] CloseHandle (hObject=0xc10) returned 1 [0135.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe64e8 [0135.445] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0135.445] wcscat (in: _Dest=0x2fe64e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" [0135.445] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\68814f-readme.txt")) returned 0x20 [0135.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0135.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0170) returned 1 Thread: id = 482 os_tid = 0xfdc [0123.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee1010 [0123.599] wcscpy (in: _Dest=0x3ee1010, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" [0123.599] wcscat (in: _Dest=0x3ee1010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" [0123.599] wcscat (in: _Dest=0x3ee1010, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\*") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\*" [0123.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55580 [0123.599] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\*", lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50767ec0, ftCreationTime.dwHighDateTime=0x1d5e1b9, ftLastAccessTime.dwLowDateTime=0xa18816f0, ftLastAccessTime.dwHighDateTime=0x1d5e0e9, ftLastWriteTime.dwLowDateTime=0xa18816f0, ftLastWriteTime.dwHighDateTime=0x1d5e0e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0123.600] wcscmp (_String1=".", _String2=".") returned 0 [0123.600] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50767ec0, ftCreationTime.dwHighDateTime=0x1d5e1b9, ftLastAccessTime.dwLowDateTime=0xa18816f0, ftLastAccessTime.dwHighDateTime=0x1d5e0e9, ftLastWriteTime.dwLowDateTime=0xa18816f0, ftLastWriteTime.dwHighDateTime=0x1d5e0e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.600] wcscmp (_String1="..", _String2=".") returned 1 [0123.600] wcscmp (_String1="..", _String2="..") returned 0 [0123.600] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb14b990, ftCreationTime.dwHighDateTime=0x1d5e6be, ftLastAccessTime.dwLowDateTime=0x3460d8e0, ftLastAccessTime.dwHighDateTime=0x1d5e1da, ftLastWriteTime.dwLowDateTime=0x3460d8e0, ftLastWriteTime.dwHighDateTime=0x1d5e1da, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kXe l9", cAlternateFileName="KXEL9~1")) returned 1 [0123.600] wcscmp (_String1="kXe l9", _String2=".") returned 1 [0123.600] wcscmp (_String1="kXe l9", _String2="..") returned 1 [0123.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a231b0 [0123.600] wcscpy (in: _Dest=0x7a231b0, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" [0123.600] wcscat (in: _Dest=0x7a231b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" [0123.600] wcscat (in: _Dest=0x7a231b0, _Source="kXe l9" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9" [0125.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a231b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0125.954] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8297f390, ftCreationTime.dwHighDateTime=0x1d5e7de, ftLastAccessTime.dwLowDateTime=0x5f3337b0, ftLastAccessTime.dwHighDateTime=0x1d5e190, ftLastWriteTime.dwLowDateTime=0x5f3337b0, ftLastWriteTime.dwHighDateTime=0x1d5e190, nFileSizeHigh=0x0, nFileSizeLow=0x78cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ps2J-ThD tiS9f.wav", cAlternateFileName="PS2J-T~1.WAV")) returned 1 [0125.954] wcscmp (_String1="Ps2J-ThD tiS9f.wav", _String2=".") returned 1 [0125.954] wcscmp (_String1="Ps2J-ThD tiS9f.wav", _String2="..") returned 1 [0125.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8df0 [0125.954] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" [0125.954] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" [0125.954] wcscat (in: _Dest=0x3eb8df0, _Source="Ps2J-ThD tiS9f.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\Ps2J-ThD tiS9f.wav") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\Ps2J-ThD tiS9f.wav" [0125.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0125.956] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b6b740, ftCreationTime.dwHighDateTime=0x1d5e330, ftLastAccessTime.dwLowDateTime=0xe9de8270, ftLastAccessTime.dwHighDateTime=0x1d5e591, ftLastWriteTime.dwLowDateTime=0xe9de8270, ftLastWriteTime.dwHighDateTime=0x1d5e591, nFileSizeHigh=0x0, nFileSizeLow=0x30f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="t-WHUwpUzYF83tRM_qd.m4a", cAlternateFileName="T-WHUW~1.M4A")) returned 1 [0125.956] wcscmp (_String1="t-WHUwpUzYF83tRM_qd.m4a", _String2=".") returned 1 [0125.956] wcscmp (_String1="t-WHUwpUzYF83tRM_qd.m4a", _String2="..") returned 1 [0125.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d452f0 [0125.956] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" [0125.956] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" [0125.956] wcscat (in: _Dest=0x3d452f0, _Source="t-WHUwpUzYF83tRM_qd.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\t-WHUwpUzYF83tRM_qd.m4a") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\t-WHUwpUzYF83tRM_qd.m4a" [0125.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0125.959] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a471230, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0xb52d9560, ftLastAccessTime.dwHighDateTime=0x1d5d967, ftLastWriteTime.dwLowDateTime=0xb52d9560, ftLastWriteTime.dwHighDateTime=0x1d5d967, nFileSizeHigh=0x0, nFileSizeLow=0x34cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="whC6icRkRMapuP0oFQ.mp3", cAlternateFileName="WHC6IC~1.MP3")) returned 1 [0125.959] wcscmp (_String1="whC6icRkRMapuP0oFQ.mp3", _String2=".") returned 1 [0125.959] wcscmp (_String1="whC6icRkRMapuP0oFQ.mp3", _String2="..") returned 1 [0125.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45380 [0125.959] wcscpy (in: _Dest=0x3d45380, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" [0125.959] wcscat (in: _Dest=0x3d45380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" [0125.959] wcscat (in: _Dest=0x3d45380, _Source="whC6icRkRMapuP0oFQ.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\whC6icRkRMapuP0oFQ.mp3") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\whC6icRkRMapuP0oFQ.mp3" [0125.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0125.961] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1bf4f0, ftCreationTime.dwHighDateTime=0x1d5e1d1, ftLastAccessTime.dwLowDateTime=0xd02e2110, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0xd02e2110, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zygsL", cAlternateFileName="")) returned 1 [0125.961] wcscmp (_String1="zygsL", _String2=".") returned 1 [0125.961] wcscmp (_String1="zygsL", _String2="..") returned 1 [0125.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26468 [0125.962] wcscpy (in: _Dest=0x7a26468, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji" [0125.962] wcscat (in: _Dest=0x7a26468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" [0125.962] wcscat (in: _Dest=0x7a26468, _Source="zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0125.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0125.964] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1bf4f0, ftCreationTime.dwHighDateTime=0x1d5e1d1, ftLastAccessTime.dwLowDateTime=0xd02e2110, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0xd02e2110, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zygsL", cAlternateFileName="")) returned 0 [0125.964] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0125.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55580) returned 1 [0125.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1010) returned 1 [0125.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3b48) returned 1 Thread: id = 483 os_tid = 0xd10 [0123.601] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tX9MW0V8yhCieipdAUQV.wav" (normalized: "c:\\users\\eebsym5\\music\\tx9mw0v8yhcieipdauqv.wav")) returned 0x20 [0123.601] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tX9MW0V8yhCieipdAUQV.wav", dwFileAttributes=0x20) returned 1 [0128.706] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tX9MW0V8yhCieipdAUQV.wav" (normalized: "c:\\users\\eebsym5\\music\\tx9mw0v8yhcieipdauqv.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc74 [0128.707] GetFileSizeEx (in: hFile=0xc74, lpFileSize=0xb5ffe7c | out: lpFileSize=0xb5ffe7c*=65051) returned 1 [0128.707] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0xfe17, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.707] ReadFile (in: hFile=0xc74, lpBuffer=0xb5ffe58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb5ffe68, lpOverlapped=0x0 | out: lpBuffer=0xb5ffe58*, lpNumberOfBytesRead=0xb5ffe68*=0x4, lpOverlapped=0x0) returned 1 [0128.709] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0128.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0128.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0128.709] NtQuerySystemTime (in: CurrentTime=0xb5ffdf0 | out: CurrentTime=0xb5ffdf0*=132462177081060000) returned 0x0 [0128.709] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x1192dd5b [0128.709] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x5692d53 [0128.709] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x4fb6dae8 [0128.709] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x716795a7 [0128.709] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x71bb9433 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x4078c902 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x6097aa43 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x5430cadd [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x239c7de3 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x127b5245 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x25d9543a [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x169ee26e [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x354bd11b [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x5b6aed31 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x128a7fc8 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x3aebd65d [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x335436e7 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x74cabaaa [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x6b779f6 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x3322c501 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x29a2f8e3 [0128.710] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x1152b90f [0128.711] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x5c6876ef [0128.711] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x1e9acfed [0128.711] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x28d158e [0128.711] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x5d22195 [0128.711] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x3c5e9cdd [0128.711] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x21de499a [0128.714] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x1c66813c [0128.714] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x662ef22e [0128.714] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x1222dcb0 [0128.714] RtlRandomEx (in: Seed=0xb5ffde8 | out: Seed=0xb5ffde8) returned 0x4f38c264 [0128.728] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.728] ReadFile (in: hFile=0xc74, lpBuffer=0x7b78fc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb5ffdf0, lpOverlapped=0x0 | out: lpBuffer=0x7b78fc8*, lpNumberOfBytesRead=0xb5ffdf0*=0x3c00, lpOverlapped=0x0) returned 1 [0128.728] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0128.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4820) returned 1 [0128.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b7cbd0 [0128.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0128.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0128.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4be0) returned 1 [0128.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.730] WriteFile (in: hFile=0xc74, lpBuffer=0x7b7cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb5ffdf0, lpOverlapped=0x0 | out: lpBuffer=0x7b7cbd0*, lpNumberOfBytesWritten=0xb5ffdf0*=0x3c00, lpOverlapped=0x0) returned 1 [0129.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cbd0) returned 1 [0129.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b78fc8) returned 1 [0129.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e561c8 [0129.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be38) returned 1 [0129.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e55a78 [0129.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be38 [0129.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be10 [0129.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0129.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55ac0) returned 1 [0129.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9a60 [0129.606] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.606] WriteFile (in: hFile=0xc74, lpBuffer=0x3ec9a60*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xb5ffe70, lpOverlapped=0x0 | out: lpBuffer=0x3ec9a60*, lpNumberOfBytesWritten=0xb5ffe70*=0x122, lpOverlapped=0x0) returned 1 [0133.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55e68 [0133.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f128 [0133.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0133.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0133.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3dac500 [0133.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0133.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0133.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a78) returned 1 [0133.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0133.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55e68) returned 1 [0133.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a23ed0 [0133.697] sprintf (in: _Dest=0x7a23ed0, _Format="%c%c" | out: _Dest="d4") returned 2 [0133.697] sprintf (in: _Dest=0x7a23ed2, _Format="%c%c" | out: _Dest="56") returned 2 [0133.697] sprintf (in: _Dest=0x7a23ed4, _Format="%c%c" | out: _Dest="43") returned 2 [0133.697] sprintf (in: _Dest=0x7a23ed6, _Format="%c%c" | out: _Dest="35") returned 2 [0133.697] sprintf (in: _Dest=0x7a23ed8, _Format="%c%c" | out: _Dest="91") returned 2 [0133.697] sprintf (in: _Dest=0x7a23eda, _Format="%c%c" | out: _Dest="24") returned 2 [0133.697] sprintf (in: _Dest=0x7a23edc, _Format="%c%c" | out: _Dest="b1") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ede, _Format="%c%c" | out: _Dest="4a") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ee0, _Format="%c%c" | out: _Dest="5e") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ee2, _Format="%c%c" | out: _Dest="e8") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ee4, _Format="%c%c" | out: _Dest="b1") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ee6, _Format="%c%c" | out: _Dest="6a") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ee8, _Format="%c%c" | out: _Dest="e7") returned 2 [0133.698] sprintf (in: _Dest=0x7a23eea, _Format="%c%c" | out: _Dest="75") returned 2 [0133.698] sprintf (in: _Dest=0x7a23eec, _Format="%c%c" | out: _Dest="3a") returned 2 [0133.698] sprintf (in: _Dest=0x7a23eee, _Format="%c%c" | out: _Dest="82") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ef0, _Format="%c%c" | out: _Dest="6b") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ef2, _Format="%c%c" | out: _Dest="8f") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ef4, _Format="%c%c" | out: _Dest="68") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ef6, _Format="%c%c" | out: _Dest="f0") returned 2 [0133.698] sprintf (in: _Dest=0x7a23ef8, _Format="%c%c" | out: _Dest="52") returned 2 [0133.698] sprintf (in: _Dest=0x7a23efa, _Format="%c%c" | out: _Dest="a1") returned 2 [0133.698] sprintf (in: _Dest=0x7a23efc, _Format="%c%c" | out: _Dest="bd") returned 2 [0133.698] sprintf (in: _Dest=0x7a23efe, _Format="%c%c" | out: _Dest="7e") returned 2 [0133.698] sprintf (in: _Dest=0x7a23f00, _Format="%c%c" | out: _Dest="c8") returned 2 [0133.698] sprintf (in: _Dest=0x7a23f02, _Format="%c%c" | out: _Dest="92") returned 2 [0133.698] sprintf (in: _Dest=0x7a23f04, _Format="%c%c" | out: _Dest="aa") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f06, _Format="%c%c" | out: _Dest="05") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f08, _Format="%c%c" | out: _Dest="e8") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f0a, _Format="%c%c" | out: _Dest="a6") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f0c, _Format="%c%c" | out: _Dest="34") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f0e, _Format="%c%c" | out: _Dest="e8") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f10, _Format="%c%c" | out: _Dest="f5") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f12, _Format="%c%c" | out: _Dest="d7") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f14, _Format="%c%c" | out: _Dest="c8") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f16, _Format="%c%c" | out: _Dest="a5") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f18, _Format="%c%c" | out: _Dest="95") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f1a, _Format="%c%c" | out: _Dest="b1") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f1c, _Format="%c%c" | out: _Dest="53") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f1e, _Format="%c%c" | out: _Dest="64") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f20, _Format="%c%c" | out: _Dest="1a") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f22, _Format="%c%c" | out: _Dest="36") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f24, _Format="%c%c" | out: _Dest="20") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f26, _Format="%c%c" | out: _Dest="61") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f28, _Format="%c%c" | out: _Dest="32") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f2a, _Format="%c%c" | out: _Dest="49") returned 2 [0133.699] sprintf (in: _Dest=0x7a23f2c, _Format="%c%c" | out: _Dest="9d") returned 2 [0133.700] sprintf (in: _Dest=0x7a23f2e, _Format="%c%c" | out: _Dest="d1") returned 2 [0133.700] RtlInitAnsiString (in: DestinationString=0xb5ffdf8, SourceString="d45643359124b14a5ee8b16ae7753a826b8f68f052a1bd7ec892aa05e8a634e8f5d7c8a595b153641a36206132499dd1" | out: DestinationString="d45643359124b14a5ee8b16ae7753a826b8f68f052a1bd7ec892aa05e8a634e8f5d7c8a595b153641a36206132499dd1") [0133.700] RtlAnsiStringToUnicodeString (in: DestinationString=0xb5ffdf0, SourceString="d45643359124b14a5ee8b16ae7753a826b8f68f052a1bd7ec892aa05e8a634e8f5d7c8a595b153641a36206132499dd1", AllocateDestinationString=1 | out: DestinationString="d45643359124b14a5ee8b16ae7753a826b8f68f052a1bd7ec892aa05e8a634e8f5d7c8a595b153641a36206132499dd1") returned 0x0 [0133.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85cb0 [0133.700] wcscat (in: _Dest=0x3f3f128, _Source="d45643359124b14a5ee8b16a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\d45643359124b14a5ee8b16a") returned="C:\\Users\\EEBsYm5\\Music\\d45643359124b14a5ee8b16a" [0133.700] wcscat (in: _Dest=0x3f3f128, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\d45643359124b14a5ee8b16a.68814f") returned="C:\\Users\\EEBsYm5\\Music\\d45643359124b14a5ee8b16a.68814f" [0133.700] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\d45643359124b14a5ee8b16a.68814f", NtPathName=0xb5ffde8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\d45643359124b14a5ee8b16a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d448d0 [0133.700] NtSetInformationFile (FileHandle=0xc74, IoStatusBlock=0xb5ffdf0, FileInformation=0x3d448d0, Length=0x84, FileInformationClass=0xa) returned 0x0 [0134.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448d0) returned 1 [0134.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6fbd0) returned 1 [0134.060] NtQueryInformationFile (in: FileHandle=0xc74, IoStatusBlock=0xb5ffdc0, FileInformation=0xb5ffdc8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb5ffdc0, FileInformation=0xb5ffdc8) returned 0x0 [0134.060] NtSetInformationFile (FileHandle=0xc74, IoStatusBlock=0xb5ffdc0, FileInformation=0xb5ffdc8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0134.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85cb0) returned 1 [0134.071] FlushFileBuffers (hFile=0xc74) returned 1 [0135.609] CloseHandle (hObject=0xc74) returned 1 [0135.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6fc8 [0135.613] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0135.613] wcscat (in: _Dest=0x2fe6fc8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" [0135.613] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\68814f-readme.txt")) returned 0x20 [0135.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 [0135.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee08c0) returned 1 Thread: id = 484 os_tid = 0x8c4 [0123.601] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\yDJtUBzDhwL7XtuXW.m4a" (normalized: "c:\\users\\eebsym5\\music\\ydjtubzdhwl7xtuxw.m4a")) returned 0x20 [0123.602] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\yDJtUBzDhwL7XtuXW.m4a", dwFileAttributes=0x20) returned 1 [0128.684] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\yDJtUBzDhwL7XtuXW.m4a" (normalized: "c:\\users\\eebsym5\\music\\ydjtubzdhwl7xtuxw.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc78 [0128.684] GetFileSizeEx (in: hFile=0xc78, lpFileSize=0xb50fe34 | out: lpFileSize=0xb50fe34*=73363) returned 1 [0128.685] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x11e8f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.685] ReadFile (in: hFile=0xc78, lpBuffer=0xb50fe10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb50fe20, lpOverlapped=0x0 | out: lpBuffer=0xb50fe10*, lpNumberOfBytesRead=0xb50fe20*=0x4, lpOverlapped=0x0) returned 1 [0128.687] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3948 [0128.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0128.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0128.687] NtQuerySystemTime (in: CurrentTime=0xb50fda8 | out: CurrentTime=0xb50fda8*=132462177080748000) returned 0x0 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x12c357c7 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x741f52e9 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x7af0c28a [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x779fbff1 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x3f3b1c07 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x6f45a78 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x48508fde [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x717f076c [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x6bb36f61 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x5cd5d93e [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x4bd244bd [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x2b372a6f [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x482efcb3 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x1f27bd6b [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x79926c80 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x30e994e5 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x1739a349 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x1bcd9a59 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x1a892d41 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x5b1251fe [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x50ee9fda [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x6ae7503a [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x2d1a353 [0128.687] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x2e43d3c3 [0128.688] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x1d9602e3 [0128.688] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x7eff25c8 [0128.688] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x4b3cbc2a [0128.688] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x5de11250 [0128.688] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x59ba2261 [0128.688] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x6cf7d78 [0128.688] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x3ff55cce [0128.688] RtlRandomEx (in: Seed=0xb50fda0 | out: Seed=0xb50fda0) returned 0x5117a1c [0128.703] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.703] ReadFile (in: hFile=0xc78, lpBuffer=0x7b8fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb50fda8, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesRead=0xb50fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0128.703] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3948 [0128.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3948) returned 1 [0128.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b93778 [0128.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3948 [0128.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0128.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4820) returned 1 [0128.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.704] WriteFile (in: hFile=0xc78, lpBuffer=0x7b93778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb50fda8, lpOverlapped=0x0 | out: lpBuffer=0x7b93778*, lpNumberOfBytesWritten=0xb50fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0129.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0129.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2ddc0 [0129.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be60) returned 1 [0129.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2de40 [0129.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0129.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be38 [0129.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be38) returned 1 [0129.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e561c8) returned 1 [0129.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55ce0 [0129.604] SetFilePointerEx (in: hFile=0xc78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.604] WriteFile (in: hFile=0xc78, lpBuffer=0x3d55ce0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xb50fe28, lpOverlapped=0x0 | out: lpBuffer=0x3d55ce0*, lpNumberOfBytesWritten=0xb50fe28*=0x11c, lpOverlapped=0x0) returned 1 [0133.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55e68 [0133.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f128 [0133.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4370 [0133.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4370) returned 1 [0133.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac500 [0133.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4370 [0133.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0133.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3920) returned 1 [0133.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0133.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55e68) returned 1 [0133.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe14a8 [0133.693] sprintf (in: _Dest=0x2fe14a8, _Format="%c%c" | out: _Dest="65") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14aa, _Format="%c%c" | out: _Dest="c0") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14ac, _Format="%c%c" | out: _Dest="8e") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14ae, _Format="%c%c" | out: _Dest="ae") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14b0, _Format="%c%c" | out: _Dest="70") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14b2, _Format="%c%c" | out: _Dest="ea") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14b4, _Format="%c%c" | out: _Dest="9b") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14b6, _Format="%c%c" | out: _Dest="a8") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14b8, _Format="%c%c" | out: _Dest="56") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14ba, _Format="%c%c" | out: _Dest="cf") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14bc, _Format="%c%c" | out: _Dest="2e") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14be, _Format="%c%c" | out: _Dest="22") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14c0, _Format="%c%c" | out: _Dest="7d") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14c2, _Format="%c%c" | out: _Dest="40") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14c4, _Format="%c%c" | out: _Dest="22") returned 2 [0133.693] sprintf (in: _Dest=0x2fe14c6, _Format="%c%c" | out: _Dest="2f") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14c8, _Format="%c%c" | out: _Dest="c4") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14ca, _Format="%c%c" | out: _Dest="7a") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14cc, _Format="%c%c" | out: _Dest="f3") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14ce, _Format="%c%c" | out: _Dest="81") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14d0, _Format="%c%c" | out: _Dest="8d") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14d2, _Format="%c%c" | out: _Dest="aa") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14d4, _Format="%c%c" | out: _Dest="5c") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14d6, _Format="%c%c" | out: _Dest="ca") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14d8, _Format="%c%c" | out: _Dest="ed") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14da, _Format="%c%c" | out: _Dest="ce") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14dc, _Format="%c%c" | out: _Dest="d8") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14de, _Format="%c%c" | out: _Dest="ad") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14e0, _Format="%c%c" | out: _Dest="2d") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14e2, _Format="%c%c" | out: _Dest="a3") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14e4, _Format="%c%c" | out: _Dest="4e") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14e6, _Format="%c%c" | out: _Dest="1c") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14e8, _Format="%c%c" | out: _Dest="3a") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14ea, _Format="%c%c" | out: _Dest="5d") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14ec, _Format="%c%c" | out: _Dest="8c") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14ee, _Format="%c%c" | out: _Dest="ec") returned 2 [0133.694] sprintf (in: _Dest=0x2fe14f0, _Format="%c%c" | out: _Dest="59") returned 2 [0133.695] sprintf (in: _Dest=0x2fe14f2, _Format="%c%c" | out: _Dest="fb") returned 2 [0133.695] sprintf (in: _Dest=0x2fe14f4, _Format="%c%c" | out: _Dest="3e") returned 2 [0133.695] sprintf (in: _Dest=0x2fe14f6, _Format="%c%c" | out: _Dest="f6") returned 2 [0133.695] sprintf (in: _Dest=0x2fe14f8, _Format="%c%c" | out: _Dest="9b") returned 2 [0133.695] sprintf (in: _Dest=0x2fe14fa, _Format="%c%c" | out: _Dest="06") returned 2 [0133.695] RtlInitAnsiString (in: DestinationString=0xb50fdb0, SourceString="65c08eae70ea9ba856cf2e227d40222fc47af3818daa5ccaedced8ad2da34e1c3a5d8cec59fb3ef69b06" | out: DestinationString="65c08eae70ea9ba856cf2e227d40222fc47af3818daa5ccaedced8ad2da34e1c3a5d8cec59fb3ef69b06") [0133.695] RtlAnsiStringToUnicodeString (in: DestinationString=0xb50fda8, SourceString="65c08eae70ea9ba856cf2e227d40222fc47af3818daa5ccaedced8ad2da34e1c3a5d8cec59fb3ef69b06", AllocateDestinationString=1 | out: DestinationString="65c08eae70ea9ba856cf2e227d40222fc47af3818daa5ccaedced8ad2da34e1c3a5d8cec59fb3ef69b06") returned 0x0 [0133.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7d88 [0133.695] wcscat (in: _Dest=0x7a23a00, _Source="65c08eae70ea9ba856cf2" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\65c08eae70ea9ba856cf2") returned="C:\\Users\\EEBsYm5\\Music\\65c08eae70ea9ba856cf2" [0133.695] wcscat (in: _Dest=0x7a23a00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\65c08eae70ea9ba856cf2.68814f") returned="C:\\Users\\EEBsYm5\\Music\\65c08eae70ea9ba856cf2.68814f" [0133.695] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\65c08eae70ea9ba856cf2.68814f", NtPathName=0xb50fda0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\65c08eae70ea9ba856cf2.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9cd0 [0133.695] NtSetInformationFile (FileHandle=0xc78, IoStatusBlock=0xb50fda8, FileInformation=0x3eb9cd0, Length=0x7e, FileInformationClass=0xa) returned 0x0 [0133.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 [0133.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f9a8) returned 1 [0133.837] NtQueryInformationFile (in: FileHandle=0xc78, IoStatusBlock=0xb50fd78, FileInformation=0xb50fd80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb50fd78, FileInformation=0xb50fd80) returned 0x0 [0133.837] NtSetInformationFile (FileHandle=0xc78, IoStatusBlock=0xb50fd78, FileInformation=0xb50fd80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a00) returned 1 [0133.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7d88) returned 1 [0133.891] FlushFileBuffers (hFile=0xc78) returned 1 [0135.260] CloseHandle (hObject=0xc78) returned 1 [0135.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe64e8 [0135.424] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\EEBsYm5\\Music\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\") returned="C:\\Users\\EEBsYm5\\Music\\" [0135.424] wcscat (in: _Dest=0x2fe64e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" [0135.424] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\68814f-readme.txt")) returned 0x20 [0135.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0135.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0240) returned 1 Thread: id = 485 os_tid = 0x914 [0123.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest")) returned 0x20 [0123.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest", dwFileAttributes=0x20) returned 0 [0123.604] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.604] GetLastError () returned 0x5 [0123.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest", dwFileAttributes=0x20) returned 0 [0123.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053d08) returned 1 Thread: id = 486 os_tid = 0x67c [0123.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig")) returned 0x20 [0123.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig", dwFileAttributes=0x20) returned 0 [0123.606] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.606] GetLastError () returned 0x5 [0123.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig", dwFileAttributes=0x20) returned 0 [0123.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 487 os_tid = 0x8c0 [0123.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig")) returned 0x20 [0123.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig", dwFileAttributes=0x20) returned 0 [0123.608] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.609] GetLastError () returned 0x5 [0123.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig", dwFileAttributes=0x20) returned 0 [0123.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cce8) returned 1 Thread: id = 488 os_tid = 0x910 [0123.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak")) returned 0x20 [0123.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak", dwFileAttributes=0x20) returned 0 [0123.611] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.611] GetLastError () returned 0x5 [0123.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak", dwFileAttributes=0x20) returned 0 [0123.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 489 os_tid = 0xffc [0123.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak")) returned 0x20 [0125.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak", dwFileAttributes=0x20) returned 0 [0125.410] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.410] GetLastError () returned 0x5 [0125.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak", dwFileAttributes=0x20) returned 0 [0125.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053b10) returned 1 Thread: id = 490 os_tid = 0x81c [0123.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig")) returned 0x20 [0125.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig", dwFileAttributes=0x20) returned 0 [0125.395] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.395] GetLastError () returned 0x5 [0125.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig", dwFileAttributes=0x20) returned 0 [0125.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 Thread: id = 491 os_tid = 0x82c [0123.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cce8 [0123.615] wcscpy (in: _Dest=0x32cce8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0123.615] wcscat (in: _Dest=0x32cce8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0123.615] wcscat (in: _Dest=0x32cce8, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*" [0123.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a557e8 [0123.615] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066d40 [0125.802] wcscmp (_String1=".", _String2=".") returned 0 [0125.802] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.802] wcscmp (_String1="..", _String2=".") returned 1 [0125.802] wcscmp (_String1="..", _String2="..") returned 0 [0125.802] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265c5c46, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1 [0125.802] wcscmp (_String1="docs.crx", _String2=".") returned 1 [0125.802] wcscmp (_String1="docs.crx", _String2="..") returned 1 [0125.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053918 [0125.802] wcscpy (in: _Dest=0x3053918, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0125.803] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0125.803] wcscat (in: _Dest=0x3053918, _Source="docs.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" [0138.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0138.621] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265d46ac, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1 [0138.622] wcscmp (_String1="drive.crx", _String2=".") returned 1 [0138.622] wcscmp (_String1="drive.crx", _String2="..") returned 1 [0138.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053a68 [0138.622] wcscpy (in: _Dest=0x3053a68, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0138.622] wcscat (in: _Dest=0x3053a68, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0138.622] wcscat (in: _Dest=0x3053a68, _Source="drive.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" [0138.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0138.623] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26602cef, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0138.623] wcscmp (_String1="external_extensions.json", _String2=".") returned 1 [0138.623] wcscmp (_String1="external_extensions.json", _String2="..") returned 1 [0138.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a2b0 [0138.623] wcscpy (in: _Dest=0x3e3a2b0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0138.623] wcscat (in: _Dest=0x3e3a2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0138.623] wcscat (in: _Dest=0x3e3a2b0, _Source="external_extensions.json" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" [0138.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0138.624] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265e3112, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1 [0138.624] wcscmp (_String1="gmail.crx", _String2=".") returned 1 [0138.624] wcscmp (_String1="gmail.crx", _String2="..") returned 1 [0138.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053288 [0138.624] wcscpy (in: _Dest=0x3053288, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0138.624] wcscat (in: _Dest=0x3053288, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0138.624] wcscat (in: _Dest=0x3053288, _Source="gmail.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" [0138.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0138.625] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265f90ab, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1 [0138.625] wcscmp (_String1="youtube.crx", _String2=".") returned 1 [0138.625] wcscmp (_String1="youtube.crx", _String2="..") returned 1 [0138.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b718 [0138.626] wcscpy (in: _Dest=0x35b718, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps" [0138.626] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\" [0138.626] wcscat (in: _Dest=0x35b718, _Source="youtube.crx" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" [0138.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0138.627] FindNextFileW (in: hFindFile=0x3066d40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x265f90ab, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 0 [0138.627] FindClose (in: hFindFile=0x3066d40 | out: hFindFile=0x3066d40) returned 1 [0138.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a557e8) returned 1 [0138.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cce8) returned 1 [0138.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 492 os_tid = 0x89c [0123.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0123.616] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" [0123.616] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\" [0123.616] wcscat (in: _Dest=0x32cc50, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*" [0123.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55a50 [0123.616] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067180 [0125.397] wcscmp (_String1=".", _String2=".") returned 0 [0125.397] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09e61f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.397] wcscmp (_String1="..", _String2=".") returned 1 [0125.397] wcscmp (_String1="..", _String2="..") returned 0 [0125.397] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26605400, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0125.397] wcscmp (_String1="external_extensions.json", _String2=".") returned 1 [0125.397] wcscmp (_String1="external_extensions.json", _String2="..") returned 1 [0125.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e39310 [0125.397] wcscpy (in: _Dest=0x3e39310, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions" [0125.397] wcscat (in: _Dest=0x3e39310, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\" [0125.397] wcscat (in: _Dest=0x3e39310, _Source="external_extensions.json" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" [0136.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e39310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0136.482] FindNextFileW (in: hFindFile=0x3067180, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09e61f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09e61f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26605400, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 0 [0136.482] FindClose (in: hFindFile=0x3067180 | out: hFindFile=0x3067180) returned 1 [0136.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55a50) returned 1 [0136.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0136.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df18c8) returned 1 Thread: id = 493 os_tid = 0x8ac [0123.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat")) returned 0x20 [0125.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", dwFileAttributes=0x20) returned 0 [0125.403] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.403] GetLastError () returned 0x5 [0125.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat", dwFileAttributes=0x20) returned 0 [0125.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 494 os_tid = 0x8bc [0123.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5698 [0123.619] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" [0123.619] wcscat (in: _Dest=0x3eb5698, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\" [0123.619] wcscat (in: _Dest=0x3eb5698, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*" [0123.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55cb8 [0123.619] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066500 [0125.398] wcscmp (_String1=".", _String2=".") returned 0 [0125.398] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21419d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.398] wcscmp (_String1="..", _String2=".") returned 1 [0125.398] wcscmp (_String1="..", _String2="..") returned 0 [0125.398] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xde7ae5b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14ed58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1 [0125.398] wcscmp (_String1="chrmstp.exe", _String2=".") returned 1 [0125.398] wcscmp (_String1="chrmstp.exe", _String2="..") returned 1 [0125.399] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe067a250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe067a250, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x62faaaa, ftLastWriteTime.dwHighDateTime=0x1d2c89c, nFileSizeHigh=0x0, nFileSizeLow=0x9aa2b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.7z", cAlternateFileName="")) returned 1 [0125.399] wcscmp (_String1="chrome.7z", _String2=".") returned 1 [0125.399] wcscmp (_String1="chrome.7z", _String2="..") returned 1 [0125.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053e58 [0125.399] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer" [0125.399] wcscat (in: _Dest=0x3053e58, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\" [0125.399] wcscat (in: _Dest=0x3053e58, _Source="chrome.7z" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" [0136.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a4 [0136.485] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xde7ae5b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14ed58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0136.485] wcscmp (_String1="setup.exe", _String2=".") returned 1 [0136.485] wcscmp (_String1="setup.exe", _String2="..") returned 1 [0136.485] FindNextFileW (in: hFindFile=0x3066500, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21419d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21419d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xde7ae5b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14ed58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 0 [0136.485] FindClose (in: hFindFile=0x3066500 | out: hFindFile=0x3066500) returned 1 [0136.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55cb8) returned 1 [0136.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 [0136.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 495 os_tid = 0x83c [0123.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44720 [0123.620] wcscpy (in: _Dest=0x3d44720, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0123.620] wcscat (in: _Dest=0x3d44720, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0123.620] wcscat (in: _Dest=0x3d44720, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*" [0123.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb45c8 [0123.620] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0acaa30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0125.803] wcscmp (_String1=".", _String2=".") returned 0 [0125.803] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0acaa30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.174] wcscmp (_String1="..", _String2=".") returned 1 [0126.175] wcscmp (_String1="..", _String2="..") returned 0 [0126.175] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26638865, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1 [0126.175] wcscmp (_String1="am.pak", _String2=".") returned 1 [0126.175] wcscmp (_String1="am.pak", _String2="..") returned 1 [0126.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb64d8 [0126.175] wcscpy (in: _Dest=0x3eb64d8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0126.175] wcscat (in: _Dest=0x3eb64d8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0126.175] wcscat (in: _Dest=0x3eb64d8, _Source="am.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" [0151.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb64d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44 [0151.553] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26664797, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x6df65, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar.pak", cAlternateFileName="")) returned 1 [0151.553] wcscmp (_String1="ar.pak", _String2=".") returned 1 [0151.553] wcscmp (_String1="ar.pak", _String2="..") returned 1 [0151.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64e38 [0151.553] wcscpy (in: _Dest=0x7a64e38, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.553] wcscat (in: _Dest=0x7a64e38, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.553] wcscat (in: _Dest=0x7a64e38, _Source="ar.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" [0151.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64e38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0151.559] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26686a85, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x84ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg.pak", cAlternateFileName="")) returned 1 [0151.559] wcscmp (_String1="bg.pak", _String2=".") returned 1 [0151.559] wcscmp (_String1="bg.pak", _String2="..") returned 1 [0151.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64ed0 [0151.559] wcscpy (in: _Dest=0x7a64ed0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.560] wcscat (in: _Dest=0x7a64ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.560] wcscat (in: _Dest=0x7a64ed0, _Source="bg.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" [0151.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b5c [0151.561] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x266b9eea, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xa9727, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn.pak", cAlternateFileName="")) returned 1 [0151.561] wcscmp (_String1="bn.pak", _String2=".") returned 1 [0151.561] wcscmp (_String1="bn.pak", _String2="..") returned 1 [0151.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64f68 [0151.561] wcscpy (in: _Dest=0x7a64f68, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.561] wcscat (in: _Dest=0x7a64f68, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.561] wcscat (in: _Dest=0x7a64f68, _Source="bn.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" [0151.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0151.563] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x266e370b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5082b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca.pak", cAlternateFileName="")) returned 1 [0151.563] wcscmp (_String1="ca.pak", _String2=".") returned 1 [0151.563] wcscmp (_String1="ca.pak", _String2="..") returned 1 [0151.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65000 [0151.563] wcscpy (in: _Dest=0x7a65000, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.563] wcscat (in: _Dest=0x7a65000, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.563] wcscat (in: _Dest=0x7a65000, _Source="ca.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" [0151.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0151.565] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2670a81b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51809, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1 [0151.565] wcscmp (_String1="cs.pak", _String2=".") returned 1 [0151.565] wcscmp (_String1="cs.pak", _String2="..") returned 1 [0151.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65098 [0151.565] wcscpy (in: _Dest=0x7a65098, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.565] wcscat (in: _Dest=0x7a65098, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.565] wcscat (in: _Dest=0x7a65098, _Source="cs.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" [0151.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c [0151.566] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2673b56f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x494f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1 [0151.566] wcscmp (_String1="da.pak", _String2=".") returned 1 [0151.566] wcscmp (_String1="da.pak", _String2="..") returned 1 [0151.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65130 [0151.567] wcscpy (in: _Dest=0x7a65130, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.567] wcscat (in: _Dest=0x7a65130, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.567] wcscat (in: _Dest=0x7a65130, _Source="da.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" [0151.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0151.568] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a324b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a324b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2675ff6e, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x463fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1 [0151.568] wcscmp (_String1="de.pak", _String2=".") returned 1 [0151.568] wcscmp (_String1="de.pak", _String2="..") returned 1 [0151.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a651c8 [0151.568] wcscpy (in: _Dest=0x7a651c8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.568] wcscat (in: _Dest=0x7a651c8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.568] wcscat (in: _Dest=0x7a651c8, _Source="de.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" [0151.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a651c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1710 [0151.569] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2678225c, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x8f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1 [0151.569] wcscmp (_String1="el.pak", _String2=".") returned 1 [0151.569] wcscmp (_String1="el.pak", _String2="..") returned 1 [0151.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65260 [0151.570] wcscpy (in: _Dest=0x7a65260, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.570] wcscat (in: _Dest=0x7a65260, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.570] wcscat (in: _Dest=0x7a65260, _Source="el.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" [0151.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0151.571] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2678496d, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4244f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1 [0151.571] wcscmp (_String1="en-GB.pak", _String2=".") returned 1 [0151.571] wcscmp (_String1="en-GB.pak", _String2="..") returned 1 [0151.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a628b0 [0151.571] wcscpy (in: _Dest=0x7a628b0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.571] wcscat (in: _Dest=0x7a628b0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.571] wcscat (in: _Dest=0x7a628b0, _Source="en-GB.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" [0151.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a628b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0151.572] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2678496d, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x42442, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0151.572] wcscmp (_String1="en-US.pak", _String2=".") returned 1 [0151.572] wcscmp (_String1="en-US.pak", _String2="..") returned 1 [0151.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a623b0 [0151.572] wcscpy (in: _Dest=0x7a623b0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.572] wcscat (in: _Dest=0x7a623b0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.573] wcscat (in: _Dest=0x7a623b0, _Source="en-US.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" [0151.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a623b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0151.574] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x267ae18e, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4fca5, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1 [0151.574] wcscmp (_String1="es-419.pak", _String2=".") returned 1 [0151.574] wcscmp (_String1="es-419.pak", _String2="..") returned 1 [0151.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63f30 [0151.574] wcscpy (in: _Dest=0x7a63f30, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.574] wcscat (in: _Dest=0x7a63f30, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.574] wcscat (in: _Dest=0x7a63f30, _Source="es-419.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" [0151.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0151.575] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x267d79af, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x512b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1 [0151.575] wcscmp (_String1="es.pak", _String2=".") returned 1 [0151.575] wcscmp (_String1="es.pak", _String2="..") returned 1 [0151.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a652f8 [0151.575] wcscpy (in: _Dest=0x7a652f8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.575] wcscat (in: _Dest=0x7a652f8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.575] wcscat (in: _Dest=0x7a652f8, _Source="es.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" [0151.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a652f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0151.576] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268038e1, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x469ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1 [0151.576] wcscmp (_String1="et.pak", _String2=".") returned 1 [0151.576] wcscmp (_String1="et.pak", _String2="..") returned 1 [0151.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65390 [0151.576] wcscpy (in: _Dest=0x7a65390, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.576] wcscat (in: _Dest=0x7a65390, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.576] wcscat (in: _Dest=0x7a65390, _Source="et.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" [0151.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0151.577] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26820dad, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x72286, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1 [0151.578] wcscmp (_String1="fa.pak", _String2=".") returned 1 [0151.578] wcscmp (_String1="fa.pak", _String2="..") returned 1 [0151.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65428 [0151.578] wcscpy (in: _Dest=0x7a65428, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.578] wcscat (in: _Dest=0x7a65428, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.578] wcscat (in: _Dest=0x7a65428, _Source="fa.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" [0151.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0151.579] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2684309b, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4b6ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1 [0151.579] wcscmp (_String1="fi.pak", _String2=".") returned 1 [0151.579] wcscmp (_String1="fi.pak", _String2="..") returned 1 [0151.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a654c0 [0151.579] wcscpy (in: _Dest=0x7a654c0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.579] wcscat (in: _Dest=0x7a654c0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.579] wcscat (in: _Dest=0x7a654c0, _Source="fi.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" [0151.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a654c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0151.580] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2686c8bc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51c09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1 [0151.580] wcscmp (_String1="fil.pak", _String2=".") returned 1 [0151.580] wcscmp (_String1="fil.pak", _String2="..") returned 1 [0151.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63e90 [0151.580] wcscpy (in: _Dest=0x7a63e90, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.580] wcscat (in: _Dest=0x7a63e90, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.580] wcscat (in: _Dest=0x7a63e90, _Source="fil.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" [0151.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0151.581] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268716de, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x55a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1 [0151.581] wcscmp (_String1="fr.pak", _String2=".") returned 1 [0151.581] wcscmp (_String1="fr.pak", _String2="..") returned 1 [0151.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65558 [0151.582] wcscpy (in: _Dest=0x7a65558, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.582] wcscat (in: _Dest=0x7a65558, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.582] wcscat (in: _Dest=0x7a65558, _Source="fr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" [0151.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0151.583] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268939cc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x9f1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1 [0151.583] wcscmp (_String1="gu.pak", _String2=".") returned 1 [0151.583] wcscmp (_String1="gu.pak", _String2="..") returned 1 [0151.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a655f0 [0151.583] wcscpy (in: _Dest=0x7a655f0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.583] wcscat (in: _Dest=0x7a655f0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.583] wcscat (in: _Dest=0x7a655f0, _Source="gu.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" [0151.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a655f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0151.584] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268c200f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5df23, dwReserved0=0x0, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1 [0151.584] wcscmp (_String1="he.pak", _String2=".") returned 1 [0151.584] wcscmp (_String1="he.pak", _String2="..") returned 1 [0151.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65688 [0151.584] wcscpy (in: _Dest=0x7a65688, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.584] wcscat (in: _Dest=0x7a65688, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.584] wcscat (in: _Dest=0x7a65688, _Source="he.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" [0151.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0151.586] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268eb830, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xa3281, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1 [0151.586] wcscmp (_String1="hi.pak", _String2=".") returned 1 [0151.586] wcscmp (_String1="hi.pak", _String2="..") returned 1 [0151.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65720 [0151.586] wcscpy (in: _Dest=0x7a65720, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.586] wcscat (in: _Dest=0x7a65720, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.586] wcscat (in: _Dest=0x7a65720, _Source="hi.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" [0151.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0151.587] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a58610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a58610, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268edf41, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4bc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1 [0151.587] wcscmp (_String1="hr.pak", _String2=".") returned 1 [0151.587] wcscmp (_String1="hr.pak", _String2="..") returned 1 [0151.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a657b8 [0151.587] wcscpy (in: _Dest=0x7a657b8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.587] wcscat (in: _Dest=0x7a657b8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.587] wcscat (in: _Dest=0x7a657b8, _Source="hr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" [0151.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a657b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0151.588] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268f2d63, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x54a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1 [0151.588] wcscmp (_String1="hu.pak", _String2=".") returned 1 [0151.588] wcscmp (_String1="hu.pak", _String2="..") returned 1 [0151.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65850 [0151.589] wcscpy (in: _Dest=0x7a65850, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.589] wcscat (in: _Dest=0x7a65850, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.589] wcscat (in: _Dest=0x7a65850, _Source="hu.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" [0151.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0151.590] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x268f5474, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1 [0151.590] wcscmp (_String1="id.pak", _String2=".") returned 1 [0151.590] wcscmp (_String1="id.pak", _String2="..") returned 1 [0151.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a658e8 [0151.590] wcscpy (in: _Dest=0x7a658e8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.590] wcscat (in: _Dest=0x7a658e8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.590] wcscat (in: _Dest=0x7a658e8, _Source="id.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" [0151.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a658e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0151.591] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x269213a6, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4e532, dwReserved0=0x0, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1 [0151.591] wcscmp (_String1="it.pak", _String2=".") returned 1 [0151.591] wcscmp (_String1="it.pak", _String2="..") returned 1 [0151.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65980 [0151.591] wcscpy (in: _Dest=0x7a65980, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0151.591] wcscat (in: _Dest=0x7a65980, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0151.591] wcscat (in: _Dest=0x7a65980, _Source="it.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" [0151.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0153.005] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2694abc7, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5f8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1 [0153.005] wcscmp (_String1="ja.pak", _String2=".") returned 1 [0153.005] wcscmp (_String1="ja.pak", _String2="..") returned 1 [0153.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64e38 [0153.005] wcscpy (in: _Dest=0x7a64e38, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0153.005] wcscat (in: _Dest=0x7a64e38, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0153.005] wcscat (in: _Dest=0x7a64e38, _Source="ja.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" [0157.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64e38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0157.957] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2696ceb5, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xb6beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1 [0157.957] wcscmp (_String1="kn.pak", _String2=".") returned 1 [0157.957] wcscmp (_String1="kn.pak", _String2="..") returned 1 [0157.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6448 [0157.957] wcscpy (in: _Dest=0x7ad6448, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.957] wcscat (in: _Dest=0x7ad6448, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.957] wcscat (in: _Dest=0x7ad6448, _Source="kn.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" [0157.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0157.959] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26971cd7, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x50b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1 [0157.959] wcscmp (_String1="ko.pak", _String2=".") returned 1 [0157.959] wcscmp (_String1="ko.pak", _String2="..") returned 1 [0157.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5b60 [0157.959] wcscpy (in: _Dest=0x7ad5b60, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.959] wcscat (in: _Dest=0x7ad5b60, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.959] wcscat (in: _Dest=0x7ad5b60, _Source="ko.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" [0157.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0157.960] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2698f1a3, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1 [0157.960] wcscmp (_String1="lt.pak", _String2=".") returned 1 [0157.960] wcscmp (_String1="lt.pak", _String2="..") returned 1 [0157.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad64e0 [0157.960] wcscpy (in: _Dest=0x7ad64e0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.960] wcscat (in: _Dest=0x7ad64e0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.960] wcscat (in: _Dest=0x7ad64e0, _Source="lt.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" [0157.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad64e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0157.962] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x269b62b3, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1 [0157.962] wcscmp (_String1="lv.pak", _String2=".") returned 1 [0157.962] wcscmp (_String1="lv.pak", _String2="..") returned 1 [0157.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5608 [0157.962] wcscpy (in: _Dest=0x7ad5608, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.962] wcscat (in: _Dest=0x7ad5608, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.962] wcscat (in: _Dest=0x7ad5608, _Source="lv.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" [0157.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0157.963] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x269e21e5, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xccccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1 [0157.963] wcscmp (_String1="ml.pak", _String2=".") returned 1 [0157.964] wcscmp (_String1="ml.pak", _String2="..") returned 1 [0157.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5bf8 [0157.964] wcscpy (in: _Dest=0x7ad5bf8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.964] wcscat (in: _Dest=0x7ad5bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.964] wcscat (in: _Dest=0x7ad5bf8, _Source="ml.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" [0157.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0157.965] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a044d3, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xa1beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1 [0157.965] wcscmp (_String1="mr.pak", _String2=".") returned 1 [0157.965] wcscmp (_String1="mr.pak", _String2="..") returned 1 [0157.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5998 [0157.965] wcscpy (in: _Dest=0x7ad5998, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.965] wcscat (in: _Dest=0x7ad5998, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.965] wcscat (in: _Dest=0x7ad5998, _Source="mr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" [0157.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0157.967] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a2dcf4, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x3e2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1 [0157.967] wcscmp (_String1="ms.pak", _String2=".") returned 1 [0157.967] wcscmp (_String1="ms.pak", _String2="..") returned 1 [0157.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6b68 [0157.967] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.967] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.968] wcscat (in: _Dest=0x7ad6b68, _Source="ms.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" [0157.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0157.969] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a5c337, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x487e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1 [0157.969] wcscmp (_String1="nb.pak", _String2=".") returned 1 [0157.969] wcscmp (_String1="nb.pak", _String2="..") returned 1 [0157.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6a38 [0157.969] wcscpy (in: _Dest=0x7ad6a38, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.969] wcscat (in: _Dest=0x7ad6a38, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.969] wcscat (in: _Dest=0x7ad6a38, _Source="nb.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" [0157.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0157.971] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26a80d36, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4d450, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1 [0157.971] wcscmp (_String1="nl.pak", _String2=".") returned 1 [0157.971] wcscmp (_String1="nl.pak", _String2="..") returned 1 [0157.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad63b0 [0157.972] wcscpy (in: _Dest=0x7ad63b0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.972] wcscat (in: _Dest=0x7ad63b0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.972] wcscat (in: _Dest=0x7ad63b0, _Source="nl.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" [0157.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad63b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0157.974] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26aaa557, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x500e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1 [0157.974] wcscmp (_String1="pl.pak", _String2=".") returned 1 [0157.974] wcscmp (_String1="pl.pak", _String2="..") returned 1 [0157.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5148 [0157.974] wcscpy (in: _Dest=0x7ad5148, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.974] wcscat (in: _Dest=0x7ad5148, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.974] wcscat (in: _Dest=0x7ad5148, _Source="pl.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" [0157.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0157.976] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26acef56, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4e63d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1 [0157.976] wcscmp (_String1="pt-BR.pak", _String2=".") returned 1 [0157.976] wcscmp (_String1="pt-BR.pak", _String2="..") returned 1 [0157.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62c70 [0157.976] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.976] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.976] wcscat (in: _Dest=0x7a62c70, _Source="pt-BR.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" [0157.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0157.977] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0a7e770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26af1244, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4f596, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1 [0157.978] wcscmp (_String1="pt-PT.pak", _String2=".") returned 1 [0157.978] wcscmp (_String1="pt-PT.pak", _String2="..") returned 1 [0157.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a629f0 [0157.978] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.978] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.978] wcscat (in: _Dest=0x7a629f0, _Source="pt-PT.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" [0157.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0157.979] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b1d176, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x51b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1 [0157.979] wcscmp (_String1="ro.pak", _String2=".") returned 1 [0157.979] wcscmp (_String1="ro.pak", _String2="..") returned 1 [0157.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6c00 [0157.979] wcscpy (in: _Dest=0x7ad6c00, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.979] wcscat (in: _Dest=0x7ad6c00, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.979] wcscat (in: _Dest=0x7ad6c00, _Source="ro.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" [0157.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0157.981] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b2e2ed, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x7e47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1 [0157.981] wcscmp (_String1="ru.pak", _String2=".") returned 1 [0157.981] wcscmp (_String1="ru.pak", _String2="..") returned 1 [0157.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad54d8 [0157.981] wcscpy (in: _Dest=0x7ad54d8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.981] wcscat (in: _Dest=0x7ad54d8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.981] wcscat (in: _Dest=0x7ad54d8, _Source="ru.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" [0157.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad54d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0157.982] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b63e63, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5402d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1 [0157.982] wcscmp (_String1="sk.pak", _String2=".") returned 1 [0157.982] wcscmp (_String1="sk.pak", _String2="..") returned 1 [0157.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6740 [0157.982] wcscpy (in: _Dest=0x7ad6740, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.982] wcscat (in: _Dest=0x7ad6740, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.983] wcscat (in: _Dest=0x7ad6740, _Source="sk.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" [0157.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0157.984] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26b8af73, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4bb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1 [0157.984] wcscmp (_String1="sl.pak", _String2=".") returned 1 [0157.984] wcscmp (_String1="sl.pak", _String2="..") returned 1 [0157.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5310 [0157.984] wcscpy (in: _Dest=0x7ad5310, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.984] wcscat (in: _Dest=0x7ad5310, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.984] wcscat (in: _Dest=0x7ad5310, _Source="sl.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" [0157.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0157.988] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26bb2083, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x79e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1 [0157.988] wcscmp (_String1="sr.pak", _String2=".") returned 1 [0157.988] wcscmp (_String1="sr.pak", _String2="..") returned 1 [0157.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6d30 [0157.988] wcscpy (in: _Dest=0x7ad6d30, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.988] wcscat (in: _Dest=0x7ad6d30, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.989] wcscat (in: _Dest=0x7ad6d30, _Source="sr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" [0157.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0157.990] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26bdb8a4, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x496bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1 [0157.990] wcscmp (_String1="sv.pak", _String2=".") returned 1 [0157.990] wcscmp (_String1="sv.pak", _String2="..") returned 1 [0157.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6c98 [0157.990] wcscpy (in: _Dest=0x7ad6c98, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.990] wcscat (in: _Dest=0x7ad6c98, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.990] wcscat (in: _Dest=0x7ad6c98, _Source="sv.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" [0157.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0157.991] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c050c5, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x44b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1 [0157.991] wcscmp (_String1="sw.pak", _String2=".") returned 1 [0157.991] wcscmp (_String1="sw.pak", _String2="..") returned 1 [0157.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6908 [0157.991] wcscpy (in: _Dest=0x7ad6908, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.991] wcscat (in: _Dest=0x7ad6908, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.991] wcscat (in: _Dest=0x7ad6908, _Source="sw.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" [0157.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0157.997] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c3852a, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xbcd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1 [0157.997] wcscmp (_String1="ta.pak", _String2=".") returned 1 [0157.997] wcscmp (_String1="ta.pak", _String2="..") returned 1 [0157.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad60b8 [0157.997] wcscpy (in: _Dest=0x7ad60b8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.997] wcscat (in: _Dest=0x7ad60b8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.997] wcscat (in: _Dest=0x7ad60b8, _Source="ta.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" [0157.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad60b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0157.998] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c707b1, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0xb0b7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1 [0157.998] wcscmp (_String1="te.pak", _String2=".") returned 1 [0157.998] wcscmp (_String1="te.pak", _String2="..") returned 1 [0157.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5f88 [0157.999] wcscpy (in: _Dest=0x7ad5f88, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0157.999] wcscat (in: _Dest=0x7ad5f88, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0157.999] wcscat (in: _Dest=0x7ad5f88, _Source="te.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" [0157.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0158.005] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26c978c1, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x9efb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1 [0158.005] wcscmp (_String1="th.pak", _String2=".") returned 1 [0158.006] wcscmp (_String1="th.pak", _String2="..") returned 1 [0158.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6ad0 [0158.006] wcscpy (in: _Dest=0x7ad6ad0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0158.006] wcscat (in: _Dest=0x7ad6ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0158.006] wcscat (in: _Dest=0x7ad6ad0, _Source="th.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" [0158.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0158.007] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26cc8615, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4f508, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1 [0158.007] wcscmp (_String1="tr.pak", _String2=".") returned 1 [0158.007] wcscmp (_String1="tr.pak", _String2="..") returned 1 [0158.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5ef0 [0158.007] wcscpy (in: _Dest=0x7ad5ef0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0158.007] wcscat (in: _Dest=0x7ad5ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0158.007] wcscat (in: _Dest=0x7ad5ef0, _Source="tr.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" [0158.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0158.297] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26cf4547, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x7e1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1 [0158.297] wcscmp (_String1="uk.pak", _String2=".") returned 1 [0158.297] wcscmp (_String1="uk.pak", _String2="..") returned 1 [0158.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6280 [0158.297] wcscpy (in: _Dest=0x7ad6280, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0158.297] wcscat (in: _Dest=0x7ad6280, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0158.297] wcscat (in: _Dest=0x7ad6280, _Source="uk.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" [0164.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak")) returned 0x20 [0164.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak", dwFileAttributes=0x20) returned 0 [0164.676] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.676] GetLastError () returned 0x5 [0164.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak", dwFileAttributes=0x20) returned 0 [0164.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 [0164.677] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d11a13, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5af42, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1 [0164.677] wcscmp (_String1="vi.pak", _String2=".") returned 1 [0164.677] wcscmp (_String1="vi.pak", _String2="..") returned 1 [0164.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6280 [0164.677] wcscpy (in: _Dest=0x7ad6280, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0164.677] wcscat (in: _Dest=0x7ad6280, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0164.677] wcscat (in: _Dest=0x7ad6280, _Source="vi.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" [0164.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak")) returned 0x20 [0164.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak", dwFileAttributes=0x20) returned 0 [0164.678] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.678] GetLastError () returned 0x5 [0164.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak", dwFileAttributes=0x20) returned 0 [0164.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 [0164.678] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0aa48d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0aa48d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d3d945, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x4217c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1 [0164.678] wcscmp (_String1="zh-CN.pak", _String2=".") returned 1 [0164.678] wcscmp (_String1="zh-CN.pak", _String2="..") returned 1 [0164.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a68090 [0164.678] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0164.678] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0164.679] wcscat (in: _Dest=0x7a68090, _Source="zh-CN.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" [0164.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak")) returned 0x20 [0164.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak", dwFileAttributes=0x20) returned 0 [0164.679] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.679] GetLastError () returned 0x5 [0164.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak", dwFileAttributes=0x20) returned 0 [0164.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 [0164.680] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d62344, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1 [0164.680] wcscmp (_String1="zh-TW.pak", _String2=".") returned 1 [0164.680] wcscmp (_String1="zh-TW.pak", _String2="..") returned 1 [0164.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a68090 [0164.680] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales" [0164.680] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\" [0164.680] wcscat (in: _Dest=0x7a68090, _Source="zh-TW.pak" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" [0164.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak")) returned 0x20 [0164.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak", dwFileAttributes=0x20) returned 0 [0164.680] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.681] GetLastError () returned 0x5 [0164.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak", dwFileAttributes=0x20) returned 0 [0164.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 [0164.681] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0acaa30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0acaa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d62344, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 0 [0164.681] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0164.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb45c8) returned 1 [0164.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44720) returned 1 [0164.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44600) returned 1 Thread: id = 496 os_tid = 0x84c [0123.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_32.nexe")) returned 0x20 [0125.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe", dwFileAttributes=0x20) returned 0 [0125.405] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_32.nexe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.405] GetLastError () returned 0x5 [0125.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_32.nexe", dwFileAttributes=0x20) returned 0 [0125.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053870) returned 1 Thread: id = 497 os_tid = 0x86c [0123.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe")) returned 0x20 [0125.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe", dwFileAttributes=0x20) returned 0 [0125.392] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.392] GetLastError () returned 0x5 [0125.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe", dwFileAttributes=0x20) returned 0 [0125.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052fe8) returned 1 Thread: id = 498 os_tid = 0x88c [0123.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin")) returned 0x20 [0124.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin", dwFileAttributes=0x20) returned 0 [0124.961] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.961] GetLastError () returned 0x5 [0124.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin", dwFileAttributes=0x20) returned 0 [0124.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5a40) returned 1 Thread: id = 499 os_tid = 0x8cc [0123.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\resources.pak")) returned 0x20 [0124.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak", dwFileAttributes=0x20) returned 0 [0124.958] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\resources.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.958] GetLastError () returned 0x5 [0124.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak", dwFileAttributes=0x20) returned 0 [0124.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 500 os_tid = 0x8dc [0123.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin")) returned 0x20 [0125.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin", dwFileAttributes=0x20) returned 0 [0125.415] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.415] GetLastError () returned 0x5 [0125.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin", dwFileAttributes=0x20) returned 0 [0125.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df48c0) returned 1 Thread: id = 501 os_tid = 0x8ec [0123.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4be0 [0123.654] wcscpy (in: _Dest=0x3df4be0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0123.654] wcscat (in: _Dest=0x3df4be0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0123.654] wcscat (in: _Dest=0x3df4be0, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*" [0123.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb40f8 [0123.654] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0125.800] wcscmp (_String1=".", _String2=".") returned 0 [0125.800] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.800] wcscmp (_String1="..", _String2=".") returned 1 [0125.801] wcscmp (_String1="..", _String2="..") returned 0 [0125.801] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d75bcc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0125.801] wcscmp (_String1="logo.png", _String2=".") returned 1 [0125.801] wcscmp (_String1="logo.png", _String2="..") returned 1 [0125.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b878 [0125.801] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0125.801] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0125.801] wcscat (in: _Dest=0x35b878, _Source="logo.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" [0140.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png")) returned 0x20 [0140.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", dwFileAttributes=0x20) returned 0 [0140.643] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.644] GetLastError () returned 0x5 [0140.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", dwFileAttributes=0x20) returned 0 [0140.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0140.644] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d75bcc, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x0, dwReserved1=0x0, cFileName="logocanary.png", cAlternateFileName="LOGOCA~1.PNG")) returned 1 [0140.644] wcscmp (_String1="logocanary.png", _String2=".") returned 1 [0140.644] wcscmp (_String1="logocanary.png", _String2="..") returned 1 [0140.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff62f0 [0140.644] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0140.644] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0140.644] wcscat (in: _Dest=0x2ff62f0, _Source="logocanary.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" [0140.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png")) returned 0x20 [0140.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", dwFileAttributes=0x20) returned 0 [0140.665] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.666] GetLastError () returned 0x5 [0140.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", dwFileAttributes=0x20) returned 0 [0140.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 [0140.666] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d86d43, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.png", cAlternateFileName="SMALLL~1.PNG")) returned 1 [0140.666] wcscmp (_String1="smalllogo.png", _String2=".") returned 1 [0140.666] wcscmp (_String1="smalllogo.png", _String2="..") returned 1 [0140.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff62f0 [0140.666] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0140.666] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0140.666] wcscat (in: _Dest=0x2ff62f0, _Source="smalllogo.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" [0140.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png")) returned 0x20 [0140.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", dwFileAttributes=0x20) returned 0 [0140.667] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.667] GetLastError () returned 0x5 [0140.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", dwFileAttributes=0x20) returned 0 [0140.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 [0140.667] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d90987, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 1 [0140.667] wcscmp (_String1="smalllogocanary.png", _String2=".") returned 1 [0140.668] wcscmp (_String1="smalllogocanary.png", _String2="..") returned 1 [0140.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65c58 [0140.668] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements" [0140.668] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\" [0140.668] wcscat (in: _Dest=0x3e65c58, _Source="smalllogocanary.png" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" [0140.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png")) returned 0x20 [0140.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", dwFileAttributes=0x20) returned 0 [0140.668] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.669] GetLastError () returned 0x5 [0140.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", dwFileAttributes=0x20) returned 0 [0140.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 [0140.669] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d90987, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 0 [0140.669] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0140.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb40f8) returned 1 [0140.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4be0) returned 1 [0140.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 502 os_tid = 0x8fc [0123.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5bf0 [0123.655] wcscpy (in: _Dest=0x3eb5bf0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0123.655] wcscat (in: _Dest=0x3eb5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\" [0123.655] wcscat (in: _Dest=0x3eb5bf0, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*" [0123.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3288 [0123.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0125.387] wcscmp (_String1=".", _String2=".") returned 0 [0125.387] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe0b62fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.387] wcscmp (_String1="..", _String2=".") returned 1 [0125.387] wcscmp (_String1="..", _String2="..") returned 0 [0125.387] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26d9f3ed, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0125.388] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0125.388] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0125.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bf58 [0125.388] wcscpy (in: _Dest=0x35bf58, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0125.388] wcscat (in: _Dest=0x35bf58, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\" [0125.388] wcscat (in: _Dest=0x35bf58, _Source="manifest.json" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" [0146.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc [0146.119] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1 [0146.119] wcscmp (_String1="_platform_specific", _String2=".") returned 1 [0146.119] wcscmp (_String1="_platform_specific", _String2="..") returned 1 [0146.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6740 [0146.119] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm" [0146.119] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\" [0146.119] wcscat (in: _Dest=0x2ff6740, _Source="_platform_specific" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" [0146.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48 [0146.121] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0 [0146.121] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0146.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3288) returned 1 [0146.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5bf0) returned 1 [0146.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 503 os_tid = 0x85c [0123.656] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0123.656] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0131.252] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.252] GetLastError () returned 0x20 [0131.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x309ff68 [0131.252] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0131.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309ff68) returned 1 [0131.253] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x309ff58, Size=0x10) returned 0x3e577c8 [0131.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d9f0 [0131.253] wcscpy (in: _Dest=0x3f3d9f0, _Source="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0131.253] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x2020) returned 1 [0131.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 504 os_tid = 0xb58 [0123.657] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FE8.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7fe8.tmp")) returned 0x2020 [0123.657] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FE8.tmp", dwFileAttributes=0x20) returned 0 [0123.657] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FE8.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7fe8.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.657] GetLastError () returned 0x5 [0123.657] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FE8.tmp", dwFileAttributes=0x2020) returned 0 [0123.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf200) returned 1 Thread: id = 505 os_tid = 0xb4c [0123.659] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7ff9.tmp")) returned 0x2020 [0123.659] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp", dwFileAttributes=0x20) returned 1 [0131.248] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7ff9.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.248] GetLastError () returned 0x20 [0131.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x309ff58 [0131.249] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0131.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309ff58) returned 1 [0131.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x309ff58 [0131.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee10e0 [0131.249] wcscpy (in: _Dest=0x3ee10e0, _Source="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp" | out: _Dest="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp") returned="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp" [0131.249] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp", dwFileAttributes=0x2020) returned 1 [0131.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf198) returned 1 Thread: id = 506 os_tid = 0x90c [0123.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d48cc0 [0123.659] wcscpy (in: _Dest=0x3d48cc0, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0123.659] wcscat (in: _Dest=0x3d48cc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0123.660] wcscat (in: _Dest=0x3d48cc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\*") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\*" [0123.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2db8 [0123.660] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\*", lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553ba9f0, ftCreationTime.dwHighDateTime=0x1d5e1a3, ftLastAccessTime.dwLowDateTime=0xf94a9fd0, ftLastAccessTime.dwHighDateTime=0x1d5dd05, ftLastWriteTime.dwLowDateTime=0xf94a9fd0, ftLastWriteTime.dwHighDateTime=0x1d5dd05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d280 [0123.660] wcscmp (_String1=".", _String2=".") returned 0 [0123.660] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553ba9f0, ftCreationTime.dwHighDateTime=0x1d5e1a3, ftLastAccessTime.dwLowDateTime=0xf94a9fd0, ftLastAccessTime.dwHighDateTime=0x1d5dd05, ftLastWriteTime.dwLowDateTime=0xf94a9fd0, ftLastWriteTime.dwHighDateTime=0x1d5dd05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.660] wcscmp (_String1="..", _String2=".") returned 1 [0123.660] wcscmp (_String1="..", _String2="..") returned 0 [0123.660] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93b5390, ftCreationTime.dwHighDateTime=0x1d5e6c2, ftLastAccessTime.dwLowDateTime=0xc78f84f0, ftLastAccessTime.dwHighDateTime=0x1d5e378, ftLastWriteTime.dwLowDateTime=0xc78f84f0, ftLastWriteTime.dwHighDateTime=0x1d5e378, nFileSizeHigh=0x0, nFileSizeLow=0x46b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="54ws0wTc5G.xls", cAlternateFileName="54WS0W~1.XLS")) returned 1 [0123.660] wcscmp (_String1="54ws0wTc5G.xls", _String2=".") returned 1 [0123.660] wcscmp (_String1="54ws0wTc5G.xls", _String2="..") returned 1 [0123.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23220 [0123.661] wcscpy (in: _Dest=0x7a23220, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0123.661] wcscat (in: _Dest=0x7a23220, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0123.661] wcscat (in: _Dest=0x7a23220, _Source="54ws0wTc5G.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\54ws0wTc5G.xls") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\54ws0wTc5G.xls" [0125.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0125.011] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc6c2e0, ftCreationTime.dwHighDateTime=0x1d5dd37, ftLastAccessTime.dwLowDateTime=0xcd546250, ftLastAccessTime.dwHighDateTime=0x1d5e0f0, ftLastWriteTime.dwLowDateTime=0xcd546250, ftLastWriteTime.dwHighDateTime=0x1d5e0f0, nFileSizeHigh=0x0, nFileSizeLow=0x16a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="C0NW.pdf", cAlternateFileName="")) returned 1 [0125.011] wcscmp (_String1="C0NW.pdf", _String2=".") returned 1 [0125.011] wcscmp (_String1="C0NW.pdf", _String2="..") returned 1 [0125.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ea8 [0125.011] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0125.011] wcscat (in: _Dest=0x2fe6ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0125.011] wcscat (in: _Dest=0x2fe6ea8, _Source="C0NW.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\C0NW.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\C0NW.pdf" [0125.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0125.012] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x446fa1e0, ftCreationTime.dwHighDateTime=0x1d5db9e, ftLastAccessTime.dwLowDateTime=0x26674f80, ftLastAccessTime.dwHighDateTime=0x1d5defb, ftLastWriteTime.dwLowDateTime=0x26674f80, ftLastWriteTime.dwHighDateTime=0x1d5defb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DmeEBdWZu35ue8", cAlternateFileName="DMEEBD~1")) returned 1 [0125.013] wcscmp (_String1="DmeEBdWZu35ue8", _String2=".") returned 1 [0125.013] wcscmp (_String1="DmeEBdWZu35ue8", _String2="..") returned 1 [0125.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26008 [0125.013] wcscpy (in: _Dest=0x7a26008, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0125.013] wcscat (in: _Dest=0x7a26008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0125.013] wcscat (in: _Dest=0x7a26008, _Source="DmeEBdWZu35ue8" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" [0125.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0125.014] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51b05a0, ftCreationTime.dwHighDateTime=0x1d5e1a8, ftLastAccessTime.dwLowDateTime=0x358fe20, ftLastAccessTime.dwHighDateTime=0x1d5d907, ftLastWriteTime.dwLowDateTime=0x358fe20, ftLastWriteTime.dwHighDateTime=0x1d5d907, nFileSizeHigh=0x0, nFileSizeLow=0xdef, dwReserved0=0x0, dwReserved1=0x0, cFileName="gGxd.ppt", cAlternateFileName="")) returned 1 [0125.014] wcscmp (_String1="gGxd.ppt", _String2=".") returned 1 [0125.015] wcscmp (_String1="gGxd.ppt", _String2="..") returned 1 [0125.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f08 [0125.015] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0125.015] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0125.015] wcscat (in: _Dest=0x2fe6f08, _Source="gGxd.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\gGxd.ppt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\gGxd.ppt" [0125.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0125.016] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11541bb0, ftCreationTime.dwHighDateTime=0x1d5e319, ftLastAccessTime.dwLowDateTime=0x62fa4330, ftLastAccessTime.dwHighDateTime=0x1d5e4f0, ftLastWriteTime.dwLowDateTime=0x62fa4330, ftLastWriteTime.dwHighDateTime=0x1d5e4f0, nFileSizeHigh=0x0, nFileSizeLow=0x4270, dwReserved0=0x0, dwReserved1=0x0, cFileName="IsKPN-OAEg.doc", cAlternateFileName="ISKPN-~1.DOC")) returned 1 [0125.016] wcscmp (_String1="IsKPN-OAEg.doc", _String2=".") returned 1 [0125.016] wcscmp (_String1="IsKPN-OAEg.doc", _String2="..") returned 1 [0125.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26078 [0125.016] wcscpy (in: _Dest=0x7a26078, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0125.016] wcscat (in: _Dest=0x7a26078, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0125.016] wcscat (in: _Dest=0x7a26078, _Source="IsKPN-OAEg.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc" [0125.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0125.018] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcb72a0, ftCreationTime.dwHighDateTime=0x1d5df65, ftLastAccessTime.dwLowDateTime=0xebfe8880, ftLastAccessTime.dwHighDateTime=0x1d5e6df, ftLastWriteTime.dwLowDateTime=0xebfe8880, ftLastWriteTime.dwHighDateTime=0x1d5e6df, nFileSizeHigh=0x0, nFileSizeLow=0x16b37, dwReserved0=0x0, dwReserved1=0x0, cFileName="P9qZbsB3z_N.pptx", cAlternateFileName="P9QZBS~1.PPT")) returned 1 [0125.018] wcscmp (_String1="P9qZbsB3z_N.pptx", _String2=".") returned 1 [0125.018] wcscmp (_String1="P9qZbsB3z_N.pptx", _String2="..") returned 1 [0125.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a268c8 [0125.018] wcscpy (in: _Dest=0x7a268c8, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0125.018] wcscat (in: _Dest=0x7a268c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0125.018] wcscat (in: _Dest=0x7a268c8, _Source="P9qZbsB3z_N.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\P9qZbsB3z_N.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\P9qZbsB3z_N.pptx" [0125.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a268c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0125.020] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce2d190, ftCreationTime.dwHighDateTime=0x1d5e6b8, ftLastAccessTime.dwLowDateTime=0x60f0f770, ftLastAccessTime.dwHighDateTime=0x1d5dc65, ftLastWriteTime.dwLowDateTime=0x60f0f770, ftLastWriteTime.dwHighDateTime=0x1d5dc65, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="u0e_Xfok", cAlternateFileName="")) returned 1 [0125.020] wcscmp (_String1="u0e_Xfok", _String2=".") returned 1 [0125.020] wcscmp (_String1="u0e_Xfok", _String2="..") returned 1 [0125.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f68 [0125.020] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0125.020] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0125.020] wcscat (in: _Dest=0x2fe6f68, _Source="u0e_Xfok" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok" [0125.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0125.022] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b37cf0, ftCreationTime.dwHighDateTime=0x1d5db30, ftLastAccessTime.dwLowDateTime=0x7e01f70, ftLastAccessTime.dwHighDateTime=0x1d5e4e5, ftLastWriteTime.dwLowDateTime=0x7e01f70, ftLastWriteTime.dwHighDateTime=0x1d5e4e5, nFileSizeHigh=0x0, nFileSizeLow=0xdd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UBRRjIwQ.pptx", cAlternateFileName="UBRRJI~1.PPT")) returned 1 [0125.022] wcscmp (_String1="UBRRjIwQ.pptx", _String2=".") returned 1 [0125.023] wcscmp (_String1="UBRRjIwQ.pptx", _String2="..") returned 1 [0125.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26938 [0125.023] wcscpy (in: _Dest=0x7a26938, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0125.023] wcscat (in: _Dest=0x7a26938, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0125.023] wcscat (in: _Dest=0x7a26938, _Source="UBRRjIwQ.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\UBRRjIwQ.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\UBRRjIwQ.pptx" [0125.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0125.025] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c099930, ftCreationTime.dwHighDateTime=0x1d5e05c, ftLastAccessTime.dwLowDateTime=0x34232240, ftLastAccessTime.dwHighDateTime=0x1d5dd69, ftLastWriteTime.dwLowDateTime=0x34232240, ftLastWriteTime.dwHighDateTime=0x1d5dd69, nFileSizeHigh=0x0, nFileSizeLow=0xa815, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZHbAH1CVyiJ.csv", cAlternateFileName="ZHBAH1~1.CSV")) returned 1 [0125.025] wcscmp (_String1="ZHbAH1CVyiJ.csv", _String2=".") returned 1 [0125.025] wcscmp (_String1="ZHbAH1CVyiJ.csv", _String2="..") returned 1 [0125.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a269a8 [0125.025] wcscpy (in: _Dest=0x7a269a8, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY" [0125.025] wcscat (in: _Dest=0x7a269a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0125.025] wcscat (in: _Dest=0x7a269a8, _Source="ZHbAH1CVyiJ.csv" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\ZHbAH1CVyiJ.csv") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\ZHbAH1CVyiJ.csv" [0125.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a269a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0125.027] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c099930, ftCreationTime.dwHighDateTime=0x1d5e05c, ftLastAccessTime.dwLowDateTime=0x34232240, ftLastAccessTime.dwHighDateTime=0x1d5dd69, ftLastWriteTime.dwLowDateTime=0x34232240, ftLastWriteTime.dwHighDateTime=0x1d5dd69, nFileSizeHigh=0x0, nFileSizeLow=0xa815, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZHbAH1CVyiJ.csv", cAlternateFileName="ZHBAH1~1.CSV")) returned 0 [0125.027] FindClose (in: hFindFile=0x7a2d280 | out: hFindFile=0x7a2d280) returned 1 [0125.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 [0125.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48cc0) returned 1 [0125.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5e88) returned 1 Thread: id = 507 os_tid = 0x91c [0123.661] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\0COP87UrHnK.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\0cop87urhnk.xlsx")) returned 0x20 [0123.661] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\0COP87UrHnK.xlsx", dwFileAttributes=0x20) returned 1 [0128.669] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\0COP87UrHnK.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\0cop87urhnk.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc5c [0128.669] GetFileSizeEx (in: hFile=0xc5c, lpFileSize=0xbc8fedc | out: lpFileSize=0xbc8fedc*=68792) returned 1 [0128.669] SetFilePointerEx (in: hFile=0xc5c, liDistanceToMove=0x10cb4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.669] ReadFile (in: hFile=0xc5c, lpBuffer=0xbc8feb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbc8fec8, lpOverlapped=0x0 | out: lpBuffer=0xbc8feb8*, lpNumberOfBytesRead=0xbc8fec8*=0x4, lpOverlapped=0x0) returned 1 [0128.671] SetFilePointerEx (in: hFile=0xc5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0128.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0128.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3948 [0128.671] NtQuerySystemTime (in: CurrentTime=0xbc8fe50 | out: CurrentTime=0xbc8fe50*=132462177080592000) returned 0x0 [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x6b73cbc9 [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x216d3b43 [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x432277e3 [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x1a0529e4 [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x709f16ef [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x556b80ac [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x7511f0f7 [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x7e8def6f [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x5b77d73e [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x1d4663cd [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x20277e81 [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x3a5d614a [0128.671] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x6cb23b23 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x2884181 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x1cede5a3 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0xe496f8c [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x6cc4db7e [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x6354d47 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x7ab80b8a [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x6a31d0a1 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x77cb3f68 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x2ab4fdc0 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x14b231bd [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x74368b61 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x21c1d58b [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x7b00823f [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x1c1b7791 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0xc726a15 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0xa7a2e9 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x353978c9 [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0xdd8073d [0128.672] RtlRandomEx (in: Seed=0xbc8fe48 | out: Seed=0xbc8fe48) returned 0x6e0254b0 [0128.681] SetFilePointerEx (in: hFile=0xc5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.681] ReadFile (in: hFile=0xc5c, lpBuffer=0x7b88360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbc8fe50, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesRead=0xbc8fe50*=0x3c00, lpOverlapped=0x0) returned 1 [0128.681] SetFilePointerEx (in: hFile=0xc5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0128.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0128.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b8bf68 [0128.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0128.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3948 [0128.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3948) returned 1 [0128.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.682] WriteFile (in: hFile=0xc5c, lpBuffer=0x7b8bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbc8fe50, lpOverlapped=0x0 | out: lpBuffer=0x7b8bf68*, lpNumberOfBytesWritten=0xbc8fe50*=0x3c00, lpOverlapped=0x0) returned 1 [0129.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0129.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0129.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3dac500 [0129.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be88) returned 1 [0129.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3dabe38 [0129.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0129.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0129.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be60) returned 1 [0129.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e561c8) returned 1 [0129.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55bb8 [0129.603] SetFilePointerEx (in: hFile=0xc5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.603] WriteFile (in: hFile=0xc5c, lpBuffer=0x3d55bb8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xbc8fed0, lpOverlapped=0x0 | out: lpBuffer=0x3d55bb8*, lpNumberOfBytesWritten=0xbc8fed0*=0x112, lpOverlapped=0x0) returned 1 [0133.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55e68 [0133.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f128 [0133.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0133.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3178) returned 1 [0133.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0133.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0133.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0133.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30b0) returned 1 [0133.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0133.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55e68) returned 1 [0133.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3de6018 [0133.688] sprintf (in: _Dest=0x3de6018, _Format="%c%c" | out: _Dest="d4") returned 2 [0133.688] sprintf (in: _Dest=0x3de601a, _Format="%c%c" | out: _Dest="45") returned 2 [0133.688] sprintf (in: _Dest=0x3de601c, _Format="%c%c" | out: _Dest="17") returned 2 [0133.688] sprintf (in: _Dest=0x3de601e, _Format="%c%c" | out: _Dest="5f") returned 2 [0133.688] sprintf (in: _Dest=0x3de6020, _Format="%c%c" | out: _Dest="f9") returned 2 [0133.688] sprintf (in: _Dest=0x3de6022, _Format="%c%c" | out: _Dest="37") returned 2 [0133.689] sprintf (in: _Dest=0x3de6024, _Format="%c%c" | out: _Dest="c6") returned 2 [0133.689] sprintf (in: _Dest=0x3de6026, _Format="%c%c" | out: _Dest="08") returned 2 [0133.689] sprintf (in: _Dest=0x3de6028, _Format="%c%c" | out: _Dest="4b") returned 2 [0133.689] sprintf (in: _Dest=0x3de602a, _Format="%c%c" | out: _Dest="ed") returned 2 [0133.689] sprintf (in: _Dest=0x3de602c, _Format="%c%c" | out: _Dest="d9") returned 2 [0133.689] sprintf (in: _Dest=0x3de602e, _Format="%c%c" | out: _Dest="75") returned 2 [0133.689] sprintf (in: _Dest=0x3de6030, _Format="%c%c" | out: _Dest="85") returned 2 [0133.689] sprintf (in: _Dest=0x3de6032, _Format="%c%c" | out: _Dest="cf") returned 2 [0133.689] sprintf (in: _Dest=0x3de6034, _Format="%c%c" | out: _Dest="a2") returned 2 [0133.689] sprintf (in: _Dest=0x3de6036, _Format="%c%c" | out: _Dest="18") returned 2 [0133.689] sprintf (in: _Dest=0x3de6038, _Format="%c%c" | out: _Dest="1c") returned 2 [0133.689] sprintf (in: _Dest=0x3de603a, _Format="%c%c" | out: _Dest="0b") returned 2 [0133.689] sprintf (in: _Dest=0x3de603c, _Format="%c%c" | out: _Dest="80") returned 2 [0133.689] sprintf (in: _Dest=0x3de603e, _Format="%c%c" | out: _Dest="1e") returned 2 [0133.689] sprintf (in: _Dest=0x3de6040, _Format="%c%c" | out: _Dest="d9") returned 2 [0133.689] sprintf (in: _Dest=0x3de6042, _Format="%c%c" | out: _Dest="2c") returned 2 [0133.689] sprintf (in: _Dest=0x3de6044, _Format="%c%c" | out: _Dest="05") returned 2 [0133.689] sprintf (in: _Dest=0x3de6046, _Format="%c%c" | out: _Dest="d1") returned 2 [0133.689] sprintf (in: _Dest=0x3de6048, _Format="%c%c" | out: _Dest="62") returned 2 [0133.689] sprintf (in: _Dest=0x3de604a, _Format="%c%c" | out: _Dest="72") returned 2 [0133.689] sprintf (in: _Dest=0x3de604c, _Format="%c%c" | out: _Dest="58") returned 2 [0133.690] sprintf (in: _Dest=0x3de604e, _Format="%c%c" | out: _Dest="41") returned 2 [0133.690] sprintf (in: _Dest=0x3de6050, _Format="%c%c" | out: _Dest="6b") returned 2 [0133.690] sprintf (in: _Dest=0x3de6052, _Format="%c%c" | out: _Dest="60") returned 2 [0133.690] sprintf (in: _Dest=0x3de6054, _Format="%c%c" | out: _Dest="d9") returned 2 [0133.690] sprintf (in: _Dest=0x3de6056, _Format="%c%c" | out: _Dest="8a") returned 2 [0133.690] RtlInitAnsiString (in: DestinationString=0xbc8fe58, SourceString="d445175ff937c6084bedd97585cfa2181c0b801ed92c05d1627258416b60d98a" | out: DestinationString="d445175ff937c6084bedd97585cfa2181c0b801ed92c05d1627258416b60d98a") [0133.690] RtlAnsiStringToUnicodeString (in: DestinationString=0xbc8fe50, SourceString="d445175ff937c6084bedd97585cfa2181c0b801ed92c05d1627258416b60d98a", AllocateDestinationString=1 | out: DestinationString="d445175ff937c6084bedd97585cfa2181c0b801ed92c05d1627258416b60d98a") returned 0x0 [0133.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44960 [0133.690] wcscat (in: _Dest=0x7a23b50, _Source="d445175ff937c608" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\d445175ff937c608") returned="C:\\Users\\EEBsYm5\\Documents\\d445175ff937c608" [0133.690] wcscat (in: _Dest=0x7a23b50, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\d445175ff937c608.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\d445175ff937c608.68814f" [0133.690] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\d445175ff937c608.68814f", NtPathName=0xbc8fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\d445175ff937c608.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba3b8 [0133.690] NtSetInformationFile (FileHandle=0xc5c, IoStatusBlock=0xbc8fe50, FileInformation=0x3eba3b8, Length=0x7c, FileInformationClass=0xa) returned 0x0 [0134.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 [0134.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e1f0) returned 1 [0134.013] NtQueryInformationFile (in: FileHandle=0xc5c, IoStatusBlock=0xbc8fe20, FileInformation=0xbc8fe28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbc8fe20, FileInformation=0xbc8fe28) returned 0x0 [0134.013] NtSetInformationFile (FileHandle=0xc5c, IoStatusBlock=0xbc8fe20, FileInformation=0xbc8fe28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23b50) returned 1 [0134.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44960) returned 1 [0134.019] FlushFileBuffers (hFile=0xc5c) returned 1 [0135.338] CloseHandle (hObject=0xc5c) returned 1 [0135.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0170 [0135.455] wcscpy (in: _Dest=0x3ee0170, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.455] wcscat (in: _Dest=0x3ee0170, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.455] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0170) returned 1 [0135.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5e88) returned 1 Thread: id = 508 os_tid = 0x92c [0123.662] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\5q5oH1f-NhnIv2ZA.pptx" (normalized: "c:\\users\\eebsym5\\documents\\5q5oh1f-nhniv2za.pptx")) returned 0x20 [0123.662] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\5q5oH1f-NhnIv2ZA.pptx", dwFileAttributes=0x20) returned 1 [0128.651] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\5q5oH1f-NhnIv2ZA.pptx" (normalized: "c:\\users\\eebsym5\\documents\\5q5oh1f-nhniv2za.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc60 [0128.651] GetFileSizeEx (in: hFile=0xc60, lpFileSize=0xb66faac | out: lpFileSize=0xb66faac*=77563) returned 1 [0128.651] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0x12ef7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.651] ReadFile (in: hFile=0xc60, lpBuffer=0xb66fa88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb66fa98, lpOverlapped=0x0 | out: lpBuffer=0xb66fa88*, lpNumberOfBytesRead=0xb66fa98*=0x4, lpOverlapped=0x0) returned 1 [0128.653] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0128.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30d8 [0128.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0128.653] NtQuerySystemTime (in: CurrentTime=0xb66fa20 | out: CurrentTime=0xb66fa20*=132462177080436000) returned 0x0 [0128.653] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x479391c4 [0128.653] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x7836eb71 [0128.653] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x69dc1f21 [0128.653] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x59f6d744 [0128.653] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x52a2a68a [0128.653] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x3686c1a2 [0128.653] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x159d4a83 [0128.653] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x6e7fafcc [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x5a2890d8 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0xfe7b02a [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x3a8f4bba [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x42300882 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x18abd946 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x9d9e945 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x2a866258 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x12e15bfe [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x599a8343 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x589f6696 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x69cb9644 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x60af4fd8 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x77a4f405 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x2ca4dcef [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x53c854cd [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x670c10cc [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x50db3229 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x6d9292aa [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x653871a3 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x225ad12e [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x51a7ff83 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x7a976acb [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x471532 [0128.654] RtlRandomEx (in: Seed=0xb66fa18 | out: Seed=0xb66fa18) returned 0x43ac6f5b [0128.665] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.666] ReadFile (in: hFile=0xc60, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb66fa20, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xb66fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0128.666] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0128.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c30) returned 1 [0128.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0128.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0128.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0128.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0128.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.667] WriteFile (in: hFile=0xc60, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb66fa20, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xb66fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0129.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0129.600] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.600] ReadFile (in: hFile=0xc60, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb66fa20, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xb66fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0129.600] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e561c8 [0129.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0129.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0129.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305beb0) returned 1 [0129.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0129.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0129.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0129.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be88) returned 1 [0129.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e561c8) returned 1 [0129.601] WriteFile (in: hFile=0xc60, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb66fa20, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xb66fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0131.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0131.153] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0xf2fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.154] ReadFile (in: hFile=0xc60, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb66fa20, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xb66fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0131.154] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0xf2fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08268 [0131.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0131.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0131.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e80) returned 1 [0131.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0131.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0131.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0131.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0131.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0131.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08268) returned 1 [0131.155] WriteFile (in: hFile=0xc60, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb66fa20, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xb66fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0131.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0131.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee01d8 [0131.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c30) returned 1 [0131.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcfb10 [0131.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0131.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0131.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e80) returned 1 [0131.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0131.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24e90) returned 1 [0131.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15c) returned 0x3dce108 [0131.897] SetFilePointerEx (in: hFile=0xc60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.897] WriteFile (in: hFile=0xc60, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x15c, lpNumberOfBytesWritten=0xb66faa0, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0xb66faa0*=0x15c, lpOverlapped=0x0) returned 1 [0133.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07890 [0133.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0133.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3858 [0133.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3858) returned 1 [0133.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79368 [0133.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3858 [0133.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3830 [0133.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3830) returned 1 [0133.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0133.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0133.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe14a8 [0133.655] sprintf (in: _Dest=0x2fe14a8, _Format="%c%c" | out: _Dest="57") returned 2 [0133.655] sprintf (in: _Dest=0x2fe14aa, _Format="%c%c" | out: _Dest="2e") returned 2 [0133.655] sprintf (in: _Dest=0x2fe14ac, _Format="%c%c" | out: _Dest="6d") returned 2 [0133.655] sprintf (in: _Dest=0x2fe14ae, _Format="%c%c" | out: _Dest="00") returned 2 [0133.655] sprintf (in: _Dest=0x2fe14b0, _Format="%c%c" | out: _Dest="53") returned 2 [0133.655] sprintf (in: _Dest=0x2fe14b2, _Format="%c%c" | out: _Dest="57") returned 2 [0133.655] sprintf (in: _Dest=0x2fe14b4, _Format="%c%c" | out: _Dest="8e") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14b6, _Format="%c%c" | out: _Dest="0e") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14b8, _Format="%c%c" | out: _Dest="7e") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14ba, _Format="%c%c" | out: _Dest="d1") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14bc, _Format="%c%c" | out: _Dest="a6") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14be, _Format="%c%c" | out: _Dest="53") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14c0, _Format="%c%c" | out: _Dest="d1") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14c2, _Format="%c%c" | out: _Dest="50") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14c4, _Format="%c%c" | out: _Dest="50") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14c6, _Format="%c%c" | out: _Dest="65") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14c8, _Format="%c%c" | out: _Dest="4f") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14ca, _Format="%c%c" | out: _Dest="86") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14cc, _Format="%c%c" | out: _Dest="d9") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14ce, _Format="%c%c" | out: _Dest="bb") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14d0, _Format="%c%c" | out: _Dest="e3") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14d2, _Format="%c%c" | out: _Dest="9a") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14d4, _Format="%c%c" | out: _Dest="f7") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14d6, _Format="%c%c" | out: _Dest="73") returned 2 [0133.656] sprintf (in: _Dest=0x2fe14d8, _Format="%c%c" | out: _Dest="b0") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14da, _Format="%c%c" | out: _Dest="a1") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14dc, _Format="%c%c" | out: _Dest="ae") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14de, _Format="%c%c" | out: _Dest="00") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14e0, _Format="%c%c" | out: _Dest="9e") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14e2, _Format="%c%c" | out: _Dest="ab") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14e4, _Format="%c%c" | out: _Dest="11") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14e6, _Format="%c%c" | out: _Dest="8f") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14e8, _Format="%c%c" | out: _Dest="c4") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14ea, _Format="%c%c" | out: _Dest="1f") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14ec, _Format="%c%c" | out: _Dest="bf") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14ee, _Format="%c%c" | out: _Dest="99") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14f0, _Format="%c%c" | out: _Dest="7e") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14f2, _Format="%c%c" | out: _Dest="38") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14f4, _Format="%c%c" | out: _Dest="88") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14f6, _Format="%c%c" | out: _Dest="e6") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14f8, _Format="%c%c" | out: _Dest="74") returned 2 [0133.657] sprintf (in: _Dest=0x2fe14fa, _Format="%c%c" | out: _Dest="53") returned 2 [0133.658] RtlInitAnsiString (in: DestinationString=0xb66fa28, SourceString="572e6d0053578e0e7ed1a653d15050654f86d9bbe39af773b0a1ae009eab118fc41fbf997e3888e67453" | out: DestinationString="572e6d0053578e0e7ed1a653d15050654f86d9bbe39af773b0a1ae009eab118fc41fbf997e3888e67453") [0133.658] RtlAnsiStringToUnicodeString (in: DestinationString=0xb66fa20, SourceString="572e6d0053578e0e7ed1a653d15050654f86d9bbe39af773b0a1ae009eab118fc41fbf997e3888e67453", AllocateDestinationString=1 | out: DestinationString="572e6d0053578e0e7ed1a653d15050654f86d9bbe39af773b0a1ae009eab118fc41fbf997e3888e67453") returned 0x0 [0133.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6e70 [0133.658] wcscat (in: _Dest=0x3f3f6c8, _Source="572e6d0053578e0e7ed1a" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\572e6d0053578e0e7ed1a") returned="C:\\Users\\EEBsYm5\\Documents\\572e6d0053578e0e7ed1a" [0133.658] wcscat (in: _Dest=0x3f3f6c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\572e6d0053578e0e7ed1a.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\572e6d0053578e0e7ed1a.68814f" [0133.658] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\572e6d0053578e0e7ed1a.68814f", NtPathName=0xb66fa18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\572e6d0053578e0e7ed1a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44a80 [0133.658] NtSetInformationFile (FileHandle=0xc60, IoStatusBlock=0xb66fa20, FileInformation=0x3d44a80, Length=0x86, FileInformationClass=0xa) returned 0x0 [0133.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 [0133.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ecb8) returned 1 [0133.926] NtQueryInformationFile (in: FileHandle=0xc60, IoStatusBlock=0xb66f9f0, FileInformation=0xb66f9f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb66f9f0, FileInformation=0xb66f9f8) returned 0x0 [0133.926] NtSetInformationFile (FileHandle=0xc60, IoStatusBlock=0xb66f9f0, FileInformation=0xb66f9f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0133.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 [0133.928] FlushFileBuffers (hFile=0xc60) returned 1 [0135.307] CloseHandle (hObject=0xc60) returned 1 [0135.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0240 [0135.441] wcscpy (in: _Dest=0x3ee0240, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.441] wcscat (in: _Dest=0x3ee0240, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.441] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0240) returned 1 [0135.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a18) returned 1 Thread: id = 509 os_tid = 0x93c [0123.663] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx" (normalized: "c:\\users\\eebsym5\\documents\\5u3ynojhdvlnruri.docx")) returned 0x20 [0123.663] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx", dwFileAttributes=0x20) returned 1 [0128.630] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx" (normalized: "c:\\users\\eebsym5\\documents\\5u3ynojhdvlnruri.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc54 [0128.630] GetFileSizeEx (in: hFile=0xc54, lpFileSize=0xbcef8fc | out: lpFileSize=0xbcef8fc*=19362) returned 1 [0128.630] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x4b9e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.631] ReadFile (in: hFile=0xc54, lpBuffer=0xbcef8d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbcef8e8, lpOverlapped=0x0 | out: lpBuffer=0xbcef8d8*, lpNumberOfBytesRead=0xbcef8e8*=0x4, lpOverlapped=0x0) returned 1 [0128.633] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0128.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0128.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0128.633] NtQuerySystemTime (in: CurrentTime=0xbcef870 | out: CurrentTime=0xbcef870*=132462177080280000) returned 0x0 [0128.633] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x49743aa7 [0128.633] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x2925d087 [0128.633] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x615a7d6c [0128.633] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x44bd0e55 [0128.633] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x13dbef40 [0128.633] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x38348447 [0128.633] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x40f8e7ff [0128.633] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x15dacb75 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x11890ce3 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x622d0e45 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x2b68ae19 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x57e871ca [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0xc2371c1 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x7520fe54 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x12d32527 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x771a4011 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x2ed11f09 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x29bddab4 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x30d1bdcc [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x24c569cb [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0xc4eb2be [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x55cc2b51 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x5448d035 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x4e9a7d6a [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x10a69f16 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x1d3c44cb [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x13b58a63 [0128.634] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x38185d58 [0128.635] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x445d17cb [0128.635] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x66b6bdf [0128.635] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x40ce46af [0128.635] RtlRandomEx (in: Seed=0xbcef868 | out: Seed=0xbcef868) returned 0x50b2f879 [0128.646] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.646] ReadFile (in: hFile=0xc54, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbcef870, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0xbcef870*=0x3c00, lpOverlapped=0x0) returned 1 [0128.647] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0128.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4140) returned 1 [0128.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0128.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0128.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0128.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c30) returned 1 [0128.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.648] WriteFile (in: hFile=0xc54, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbcef870, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0xbcef870*=0x3c00, lpOverlapped=0x0) returned 1 [0129.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0129.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0129.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2df40 [0129.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0129.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2dd80 [0129.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0129.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0129.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305beb0) returned 1 [0129.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e561c8) returned 1 [0129.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55a90 [0129.599] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.599] WriteFile (in: hFile=0xc54, lpBuffer=0x3d55a90*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xbcef8f0, lpOverlapped=0x0 | out: lpBuffer=0x3d55a90*, lpNumberOfBytesWritten=0xbcef8f0*=0x11c, lpOverlapped=0x0) returned 1 [0133.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55a90) returned 1 [0133.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2dd80) returned 1 [0133.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0133.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2df40) returned 1 [0133.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4140) returned 1 [0133.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30b0) returned 1 [0133.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec46e0) returned 1 [0133.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3178) returned 1 [0133.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0133.686] wcscpy (in: _Dest=0x3f3f470, _Source="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx") returned="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx" [0133.686] wcscat (in: _Dest=0x3f3f470, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx.68814f" [0133.686] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx.68814f", NtPathName=0xbcef868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\5U3YnOjHDVLnRurI.docx.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45920 [0133.686] NtSetInformationFile (FileHandle=0xc54, IoStatusBlock=0xbcef870, FileInformation=0x3d45920, Length=0x86, FileInformationClass=0xa) returned 0x0 [0134.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 [0134.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d728) returned 1 [0134.065] NtQueryInformationFile (in: FileHandle=0xc54, IoStatusBlock=0xbcef840, FileInformation=0xbcef848, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbcef840, FileInformation=0xbcef848) returned 0x0 [0134.065] NtSetInformationFile (FileHandle=0xc54, IoStatusBlock=0xbcef840, FileInformation=0xbcef848, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0134.085] FlushFileBuffers (hFile=0xc54) returned 1 [0135.643] CloseHandle (hObject=0xc54) returned 1 [0135.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0e08 [0135.644] wcscpy (in: _Dest=0x3ee0e08, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.644] wcscat (in: _Dest=0x3ee0e08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.644] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0e08) returned 1 [0135.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a88) returned 1 Thread: id = 510 os_tid = 0x94c [0123.663] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\6KVwvQFMO0DlR2hb.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\6kvwvqfmo0dlr2hb.xlsx")) returned 0x20 [0123.663] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\6KVwvQFMO0DlR2hb.xlsx", dwFileAttributes=0x20) returned 1 [0128.613] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\6KVwvQFMO0DlR2hb.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\6kvwvqfmo0dlr2hb.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc58 [0128.613] GetFileSizeEx (in: hFile=0xc58, lpFileSize=0xbbff7c4 | out: lpFileSize=0xbbff7c4*=52414) returned 1 [0128.613] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0xccba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.613] ReadFile (in: hFile=0xc58, lpBuffer=0xbbff7a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbbff7b0, lpOverlapped=0x0 | out: lpBuffer=0xbbff7a0*, lpNumberOfBytesRead=0xbbff7b0*=0x4, lpOverlapped=0x0) returned 1 [0128.615] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0128.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0128.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0128.615] NtQuerySystemTime (in: CurrentTime=0xbbff738 | out: CurrentTime=0xbbff738*=132462177080124000) returned 0x0 [0128.615] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x7368a5e2 [0128.615] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x476500c7 [0128.615] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x69b14661 [0128.615] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0xb788077 [0128.615] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x28426a26 [0128.615] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x536a8736 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x22827dec [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x740e5c79 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x6a5ca961 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x670e9dc3 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x2b548912 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x16c480c1 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x75c43186 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x61b59ccd [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x2198187d [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x3da7d7ed [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x1d5bdbf8 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x3186f764 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x533b0987 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x5086933e [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x43ae1dcb [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x178f87e3 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x53085960 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x3692a185 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x55f9dc43 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x27a32e1e [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x3d0519d1 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x64f2ac9a [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x398c7b61 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x234e46f5 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x34b739f3 [0128.616] RtlRandomEx (in: Seed=0xbbff730 | out: Seed=0xbbff730) returned 0x6208023f [0128.626] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.626] ReadFile (in: hFile=0xc58, lpBuffer=0x7c08fc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbbff738, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesRead=0xbbff738*=0x3c00, lpOverlapped=0x0) returned 1 [0128.627] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0128.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0128.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0128.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0128.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0128.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4140) returned 1 [0128.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.627] WriteFile (in: hFile=0xc58, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbbff738, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0xbbff738*=0x3c00, lpOverlapped=0x0) returned 1 [0129.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0129.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0129.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d240 [0129.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf00) returned 1 [0129.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d300 [0129.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0129.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0129.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0129.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e561c8) returned 1 [0129.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55968 [0129.597] SetFilePointerEx (in: hFile=0xc58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.597] WriteFile (in: hFile=0xc58, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xbbff7b8, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xbbff7b8*=0x11c, lpOverlapped=0x0) returned 1 [0133.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55e68 [0133.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0133.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0133.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0133.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79950 [0133.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0133.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0133.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0133.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0133.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55e68) returned 1 [0133.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe14a8 [0133.682] sprintf (in: _Dest=0x2fe14a8, _Format="%c%c" | out: _Dest="02") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14aa, _Format="%c%c" | out: _Dest="03") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14ac, _Format="%c%c" | out: _Dest="f3") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14ae, _Format="%c%c" | out: _Dest="26") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14b0, _Format="%c%c" | out: _Dest="af") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14b2, _Format="%c%c" | out: _Dest="05") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14b4, _Format="%c%c" | out: _Dest="5b") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14b6, _Format="%c%c" | out: _Dest="2d") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14b8, _Format="%c%c" | out: _Dest="38") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14ba, _Format="%c%c" | out: _Dest="97") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14bc, _Format="%c%c" | out: _Dest="7e") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14be, _Format="%c%c" | out: _Dest="35") returned 2 [0133.682] sprintf (in: _Dest=0x2fe14c0, _Format="%c%c" | out: _Dest="e7") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14c2, _Format="%c%c" | out: _Dest="cc") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14c4, _Format="%c%c" | out: _Dest="25") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14c6, _Format="%c%c" | out: _Dest="35") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14c8, _Format="%c%c" | out: _Dest="83") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14ca, _Format="%c%c" | out: _Dest="9a") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14cc, _Format="%c%c" | out: _Dest="92") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14ce, _Format="%c%c" | out: _Dest="81") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14d0, _Format="%c%c" | out: _Dest="8f") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14d2, _Format="%c%c" | out: _Dest="8c") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14d4, _Format="%c%c" | out: _Dest="90") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14d6, _Format="%c%c" | out: _Dest="cc") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14d8, _Format="%c%c" | out: _Dest="95") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14da, _Format="%c%c" | out: _Dest="a9") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14dc, _Format="%c%c" | out: _Dest="65") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14de, _Format="%c%c" | out: _Dest="01") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14e0, _Format="%c%c" | out: _Dest="86") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14e2, _Format="%c%c" | out: _Dest="c7") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14e4, _Format="%c%c" | out: _Dest="d9") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14e6, _Format="%c%c" | out: _Dest="5a") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14e8, _Format="%c%c" | out: _Dest="2c") returned 2 [0133.683] sprintf (in: _Dest=0x2fe14ea, _Format="%c%c" | out: _Dest="d3") returned 2 [0133.684] sprintf (in: _Dest=0x2fe14ec, _Format="%c%c" | out: _Dest="13") returned 2 [0133.684] sprintf (in: _Dest=0x2fe14ee, _Format="%c%c" | out: _Dest="ef") returned 2 [0133.684] sprintf (in: _Dest=0x2fe14f0, _Format="%c%c" | out: _Dest="f3") returned 2 [0133.684] sprintf (in: _Dest=0x2fe14f2, _Format="%c%c" | out: _Dest="d3") returned 2 [0133.684] sprintf (in: _Dest=0x2fe14f4, _Format="%c%c" | out: _Dest="1e") returned 2 [0133.684] sprintf (in: _Dest=0x2fe14f6, _Format="%c%c" | out: _Dest="76") returned 2 [0133.684] sprintf (in: _Dest=0x2fe14f8, _Format="%c%c" | out: _Dest="0b") returned 2 [0133.684] sprintf (in: _Dest=0x2fe14fa, _Format="%c%c" | out: _Dest="b8") returned 2 [0133.684] RtlInitAnsiString (in: DestinationString=0xbbff740, SourceString="0203f326af055b2d38977e35e7cc2535839a92818f8c90cc95a9650186c7d95a2cd313eff3d31e760bb8" | out: DestinationString="0203f326af055b2d38977e35e7cc2535839a92818f8c90cc95a9650186c7d95a2cd313eff3d31e760bb8") [0133.684] RtlAnsiStringToUnicodeString (in: DestinationString=0xbbff738, SourceString="0203f326af055b2d38977e35e7cc2535839a92818f8c90cc95a9650186c7d95a2cd313eff3d31e760bb8", AllocateDestinationString=1 | out: DestinationString="0203f326af055b2d38977e35e7cc2535839a92818f8c90cc95a9650186c7d95a2cd313eff3d31e760bb8") returned 0x0 [0133.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7430 [0133.684] wcscat (in: _Dest=0x3f3fb00, _Source="0203f326af055b2d38977" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\0203f326af055b2d38977") returned="C:\\Users\\EEBsYm5\\Documents\\0203f326af055b2d38977" [0133.684] wcscat (in: _Dest=0x3f3fb00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\0203f326af055b2d38977.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\0203f326af055b2d38977.68814f" [0133.684] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\0203f326af055b2d38977.68814f", NtPathName=0xbbff730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\0203f326af055b2d38977.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45800 [0133.684] NtSetInformationFile (FileHandle=0xc58, IoStatusBlock=0xbbff738, FileInformation=0x3d45800, Length=0x86, FileInformationClass=0xa) returned 0x0 [0134.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45800) returned 1 [0134.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e418) returned 1 [0134.064] NtQueryInformationFile (in: FileHandle=0xc58, IoStatusBlock=0xbbff708, FileInformation=0xbbff710, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbbff708, FileInformation=0xbbff710) returned 0x0 [0134.064] NtSetInformationFile (FileHandle=0xc58, IoStatusBlock=0xbbff708, FileInformation=0xbbff710, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0134.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0134.083] FlushFileBuffers (hFile=0xc58) returned 1 [0135.636] CloseHandle (hObject=0xc58) returned 1 [0135.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0e08 [0135.641] wcscpy (in: _Dest=0x3ee0e08, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.641] wcscat (in: _Dest=0x3ee0e08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.641] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0e08) returned 1 [0135.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26af8) returned 1 Thread: id = 511 os_tid = 0x95c [0123.664] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx" (normalized: "c:\\users\\eebsym5\\documents\\dched.docx")) returned 0x20 [0123.664] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx", dwFileAttributes=0x20) returned 1 [0128.366] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx" (normalized: "c:\\users\\eebsym5\\documents\\dched.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc44 [0128.366] GetFileSizeEx (in: hFile=0xc44, lpFileSize=0x880fe24 | out: lpFileSize=0x880fe24*=68203) returned 1 [0128.366] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x10a67, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.366] ReadFile (in: hFile=0xc44, lpBuffer=0x880fe00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x880fe10, lpOverlapped=0x0 | out: lpBuffer=0x880fe00*, lpNumberOfBytesRead=0x880fe10*=0x4, lpOverlapped=0x0) returned 1 [0128.368] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0128.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0128.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0128.369] NtQuerySystemTime (in: CurrentTime=0x880fd98 | out: CurrentTime=0x880fd98*=132462177077628000) returned 0x0 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x7e7b5dbe [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x6a329242 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x6c0920e1 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x694d6cce [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x68012090 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x245c2443 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x67f904e0 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x26216b99 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x7e2a4dfc [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x16ab0df0 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x3a60182 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0xa18b53b [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x2be6fce6 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x6d523875 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x38c5e152 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x5eb9a1cf [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x30bf345b [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x42f08d73 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x6d253ff7 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x2fd6f2fa [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0xb117378 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x4fe24ad [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x21627f8 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x4e3f051c [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x76671a7 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x4d714c2a [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x7e9484a [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x701846ce [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x2651d509 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x33f81b8 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x53b8af77 [0128.369] RtlRandomEx (in: Seed=0x880fd90 | out: Seed=0x880fd90) returned 0x203630d7 [0128.380] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.381] ReadFile (in: hFile=0xc44, lpBuffer=0x7c72798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x880fd98, lpOverlapped=0x0 | out: lpBuffer=0x7c72798*, lpNumberOfBytesRead=0x880fd98*=0x3c00, lpOverlapped=0x0) returned 1 [0128.381] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f88 [0128.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0128.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0128.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0128.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c763a0 [0128.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0128.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0128.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a48) returned 1 [0128.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f88) returned 1 [0128.382] WriteFile (in: hFile=0xc44, lpBuffer=0x7c763a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x880fd98, lpOverlapped=0x0 | out: lpBuffer=0x7c763a0*, lpNumberOfBytesWritten=0x880fd98*=0x3c00, lpOverlapped=0x0) returned 1 [0129.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c763a0) returned 1 [0129.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c72798) returned 1 [0129.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86668 [0129.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0129.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86848 [0129.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0129.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0129.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0129.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0129.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e00) returned 1 [0129.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3deca58 [0129.562] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.562] WriteFile (in: hFile=0xc44, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x880fe18, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x880fe18*=0x106, lpOverlapped=0x0) returned 1 [0131.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0131.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0131.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0131.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86668) returned 1 [0131.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0131.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0131.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28b8) returned 1 [0131.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0131.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee1280 [0131.123] wcscpy (in: _Dest=0x3ee1280, _Source="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx") returned="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx" [0131.123] wcscat (in: _Dest=0x3ee1280, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx.68814f" [0131.123] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\DcHED.docx.68814f", NtPathName=0x880fd90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\DcHED.docx.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0131.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0131.123] NtSetInformationFile (FileHandle=0xc44, IoStatusBlock=0x880fd98, FileInformation=0x3f3fa88, Length=0x70, FileInformationClass=0xa) returned 0x0 [0131.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0131.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00c50) returned 1 [0131.125] NtQueryInformationFile (in: FileHandle=0xc44, IoStatusBlock=0x880fd68, FileInformation=0x880fd70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x880fd68, FileInformation=0x880fd70) returned 0x0 [0131.125] NtSetInformationFile (FileHandle=0xc44, IoStatusBlock=0x880fd68, FileInformation=0x880fd70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0131.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1280) returned 1 [0131.127] FlushFileBuffers (hFile=0xc44) returned 1 [0131.886] CloseHandle (hObject=0xc44) returned 1 [0134.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0b98 [0134.097] wcscpy (in: _Dest=0x3ee0b98, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0134.097] wcscat (in: _Dest=0x3ee0b98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0134.097] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0134.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 [0134.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14460) returned 1 Thread: id = 512 os_tid = 0x96c [0123.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Ei_zcYbZlFYZJn.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\ei_zcybzlfyzjn.xlsx")) returned 0x20 [0123.665] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Ei_zcYbZlFYZJn.xlsx", dwFileAttributes=0x20) returned 1 [0128.384] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Ei_zcYbZlFYZJn.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\ei_zcybzlfyzjn.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc48 [0128.384] GetFileSizeEx (in: hFile=0xc48, lpFileSize=0xbdaf7e4 | out: lpFileSize=0xbdaf7e4*=29824) returned 1 [0128.384] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x747c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.384] ReadFile (in: hFile=0xc48, lpBuffer=0xbdaf7c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbdaf7d0, lpOverlapped=0x0 | out: lpBuffer=0xbdaf7c0*, lpNumberOfBytesRead=0xbdaf7d0*=0x4, lpOverlapped=0x0) returned 1 [0128.386] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0128.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0128.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0128.386] NtQuerySystemTime (in: CurrentTime=0xbdaf758 | out: CurrentTime=0xbdaf758*=132462177077784000) returned 0x0 [0128.386] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x5aa7a7f0 [0128.386] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x3b8da1d1 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x1c6030e4 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x2d771058 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x1a5f4497 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x7198ea8e [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x56f29f28 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x1939cb3f [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x172fb5ce [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x38730a31 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x349a22a5 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x53618056 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x6cdf5ca1 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x1e576d9f [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x11f8e71 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x6e97b2f [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x2f11d269 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x5a713053 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x5f40d116 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x57db1597 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x1a63fbb5 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x3f8970e3 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x3c3090a1 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x5da43755 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x8560fc5 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x24f84d06 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x20247511 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x43ce38e4 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x307da7f5 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x6c5ed261 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x6a5eed62 [0128.387] RtlRandomEx (in: Seed=0xbdaf750 | out: Seed=0xbdaf750) returned 0x36469e8 [0128.398] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.398] ReadFile (in: hFile=0xc48, lpBuffer=0x7c6af88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbdaf758, lpOverlapped=0x0 | out: lpBuffer=0x7c6af88*, lpNumberOfBytesRead=0xbdaf758*=0x3c00, lpOverlapped=0x0) returned 1 [0128.399] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f88 [0128.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0128.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0128.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a48) returned 1 [0128.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c6eb90 [0128.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0128.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0128.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e80) returned 1 [0128.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f88) returned 1 [0128.400] WriteFile (in: hFile=0xc48, lpBuffer=0x7c6eb90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbdaf758, lpOverlapped=0x0 | out: lpBuffer=0x7c6eb90*, lpNumberOfBytesWritten=0xbdaf758*=0x3c00, lpOverlapped=0x0) returned 1 [0129.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c6eb90) returned 1 [0129.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c6af88) returned 1 [0129.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2dd40 [0129.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0129.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2df00 [0129.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0129.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c158 [0129.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0129.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0129.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e00) returned 1 [0129.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d54cb0 [0129.564] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.564] WriteFile (in: hFile=0xc48, lpBuffer=0x3d54cb0*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xbdaf7d8, lpOverlapped=0x0 | out: lpBuffer=0x3d54cb0*, lpNumberOfBytesWritten=0xbdaf7d8*=0x118, lpOverlapped=0x0) returned 1 [0131.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08268 [0131.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0131.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0131.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0131.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86668 [0131.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0131.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0131.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28b8) returned 1 [0131.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0131.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08268) returned 1 [0131.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4d) returned 0x3e14988 [0131.130] sprintf (in: _Dest=0x3e14988, _Format="%c%c" | out: _Dest="f7") returned 2 [0131.131] sprintf (in: _Dest=0x3e1498a, _Format="%c%c" | out: _Dest="0c") returned 2 [0131.131] sprintf (in: _Dest=0x3e1498c, _Format="%c%c" | out: _Dest="d7") returned 2 [0131.131] sprintf (in: _Dest=0x3e1498e, _Format="%c%c" | out: _Dest="7e") returned 2 [0131.131] sprintf (in: _Dest=0x3e14990, _Format="%c%c" | out: _Dest="69") returned 2 [0131.131] sprintf (in: _Dest=0x3e14992, _Format="%c%c" | out: _Dest="38") returned 2 [0131.131] sprintf (in: _Dest=0x3e14994, _Format="%c%c" | out: _Dest="d7") returned 2 [0131.131] sprintf (in: _Dest=0x3e14996, _Format="%c%c" | out: _Dest="36") returned 2 [0131.131] sprintf (in: _Dest=0x3e14998, _Format="%c%c" | out: _Dest="41") returned 2 [0131.131] sprintf (in: _Dest=0x3e1499a, _Format="%c%c" | out: _Dest="0b") returned 2 [0131.131] sprintf (in: _Dest=0x3e1499c, _Format="%c%c" | out: _Dest="3e") returned 2 [0131.131] sprintf (in: _Dest=0x3e1499e, _Format="%c%c" | out: _Dest="15") returned 2 [0131.131] sprintf (in: _Dest=0x3e149a0, _Format="%c%c" | out: _Dest="37") returned 2 [0131.131] sprintf (in: _Dest=0x3e149a2, _Format="%c%c" | out: _Dest="8d") returned 2 [0131.131] sprintf (in: _Dest=0x3e149a4, _Format="%c%c" | out: _Dest="57") returned 2 [0131.131] sprintf (in: _Dest=0x3e149a6, _Format="%c%c" | out: _Dest="d1") returned 2 [0131.131] sprintf (in: _Dest=0x3e149a8, _Format="%c%c" | out: _Dest="b0") returned 2 [0131.131] sprintf (in: _Dest=0x3e149aa, _Format="%c%c" | out: _Dest="ac") returned 2 [0131.132] sprintf (in: _Dest=0x3e149ac, _Format="%c%c" | out: _Dest="42") returned 2 [0131.132] sprintf (in: _Dest=0x3e149ae, _Format="%c%c" | out: _Dest="18") returned 2 [0131.132] sprintf (in: _Dest=0x3e149b0, _Format="%c%c" | out: _Dest="73") returned 2 [0131.132] sprintf (in: _Dest=0x3e149b2, _Format="%c%c" | out: _Dest="79") returned 2 [0131.132] sprintf (in: _Dest=0x3e149b4, _Format="%c%c" | out: _Dest="68") returned 2 [0131.132] sprintf (in: _Dest=0x3e149b6, _Format="%c%c" | out: _Dest="c7") returned 2 [0131.132] sprintf (in: _Dest=0x3e149b8, _Format="%c%c" | out: _Dest="bb") returned 2 [0131.132] sprintf (in: _Dest=0x3e149ba, _Format="%c%c" | out: _Dest="a6") returned 2 [0131.132] sprintf (in: _Dest=0x3e149bc, _Format="%c%c" | out: _Dest="c8") returned 2 [0131.132] sprintf (in: _Dest=0x3e149be, _Format="%c%c" | out: _Dest="39") returned 2 [0131.132] sprintf (in: _Dest=0x3e149c0, _Format="%c%c" | out: _Dest="b6") returned 2 [0131.132] sprintf (in: _Dest=0x3e149c2, _Format="%c%c" | out: _Dest="5e") returned 2 [0131.132] sprintf (in: _Dest=0x3e149c4, _Format="%c%c" | out: _Dest="92") returned 2 [0131.132] sprintf (in: _Dest=0x3e149c6, _Format="%c%c" | out: _Dest="27") returned 2 [0131.132] sprintf (in: _Dest=0x3e149c8, _Format="%c%c" | out: _Dest="24") returned 2 [0131.132] sprintf (in: _Dest=0x3e149ca, _Format="%c%c" | out: _Dest="a7") returned 2 [0131.132] sprintf (in: _Dest=0x3e149cc, _Format="%c%c" | out: _Dest="44") returned 2 [0131.133] sprintf (in: _Dest=0x3e149ce, _Format="%c%c" | out: _Dest="43") returned 2 [0131.133] sprintf (in: _Dest=0x3e149d0, _Format="%c%c" | out: _Dest="ce") returned 2 [0131.133] sprintf (in: _Dest=0x3e149d2, _Format="%c%c" | out: _Dest="ee") returned 2 [0131.133] RtlInitAnsiString (in: DestinationString=0xbdaf760, SourceString="f70cd77e6938d736410b3e15378d57d1b0ac4218737968c7bba6c839b65e922724a74443ceee" | out: DestinationString="f70cd77e6938d736410b3e15378d57d1b0ac4218737968c7bba6c839b65e922724a74443ceee") [0131.133] RtlAnsiStringToUnicodeString (in: DestinationString=0xbdaf758, SourceString="f70cd77e6938d736410b3e15378d57d1b0ac4218737968c7bba6c839b65e922724a74443ceee", AllocateDestinationString=1 | out: DestinationString="f70cd77e6938d736410b3e15378d57d1b0ac4218737968c7bba6c839b65e922724a74443ceee") returned 0x0 [0131.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053288 [0131.133] wcscat (in: _Dest=0x3f3fa88, _Source="f70cd77e6938d736410" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\f70cd77e6938d736410") returned="C:\\Users\\EEBsYm5\\Documents\\f70cd77e6938d736410" [0131.133] wcscat (in: _Dest=0x3f3fa88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\f70cd77e6938d736410.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\f70cd77e6938d736410.68814f" [0131.133] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\f70cd77e6938d736410.68814f", NtPathName=0xbdaf750, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\f70cd77e6938d736410.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0131.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1838 [0131.133] NtSetInformationFile (FileHandle=0xc48, IoStatusBlock=0xbdaf758, FileInformation=0x3df1838, Length=0x82, FileInformationClass=0xa) returned 0x0 [0131.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1838) returned 1 [0131.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00c50) returned 1 [0131.136] NtQueryInformationFile (in: FileHandle=0xc48, IoStatusBlock=0xbdaf728, FileInformation=0xbdaf730, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbdaf728, FileInformation=0xbdaf730) returned 0x0 [0131.136] NtSetInformationFile (FileHandle=0xc48, IoStatusBlock=0xbdaf728, FileInformation=0xbdaf730, Length=0x28, FileInformationClass=0x4) returned 0x0 [0131.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0131.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 [0131.138] FlushFileBuffers (hFile=0xc48) returned 1 [0133.250] CloseHandle (hObject=0xc48) returned 1 [0133.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee01d8 [0133.660] wcscpy (in: _Dest=0x3ee01d8, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0133.660] wcscat (in: _Dest=0x3ee01d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0133.660] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0xffffffff [0133.929] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cc4 [0133.929] WriteFile (in: hFile=0x1cc4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbdaf76c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbdaf76c*=0x8b9, lpOverlapped=0x0) returned 1 [0133.932] CloseHandle (hObject=0x1cc4) returned 1 [0133.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee01d8) returned 1 [0133.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0928) returned 1 Thread: id = 513 os_tid = 0x97c [0123.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx" (normalized: "c:\\users\\eebsym5\\documents\\hc8ije.docx")) returned 0x20 [0123.665] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx", dwFileAttributes=0x20) returned 1 [0128.401] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx" (normalized: "c:\\users\\eebsym5\\documents\\hc8ije.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc38 [0128.401] GetFileSizeEx (in: hFile=0xc38, lpFileSize=0xbdffd0c | out: lpFileSize=0xbdffd0c*=29063) returned 1 [0128.401] SetFilePointerEx (in: hFile=0xc38, liDistanceToMove=0x7183, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.402] ReadFile (in: hFile=0xc38, lpBuffer=0xbdffce8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbdffcf8, lpOverlapped=0x0 | out: lpBuffer=0xbdffce8*, lpNumberOfBytesRead=0xbdffcf8*=0x4, lpOverlapped=0x0) returned 1 [0128.403] SetFilePointerEx (in: hFile=0xc38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0128.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0128.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3010 [0128.404] NtQuerySystemTime (in: CurrentTime=0xbdffc80 | out: CurrentTime=0xbdffc80*=132462177077940000) returned 0x0 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x7898f694 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x794cd5d7 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x738b3253 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x573dfce9 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x4dffa1da [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x7c27c32 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x7714fee7 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x65d05b61 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x668a9552 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x42173e0e [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x5038077a [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x44ed30a3 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x1bd435a [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x17e50330 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x5f08968a [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x69f2e3e8 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x675bafe2 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x13c8fb8 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x3f667de7 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x4d299022 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x500a9f09 [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0xb05f5df [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x5da7db6a [0128.404] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x289a6fc7 [0128.405] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x615534e2 [0128.405] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x4a417ff1 [0128.405] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0xab0b3cf [0128.405] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x7f1891c8 [0128.405] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x482f9801 [0128.405] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x5455a013 [0128.405] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x22e2ea29 [0128.405] RtlRandomEx (in: Seed=0xbdffc78 | out: Seed=0xbdffc78) returned 0x7453443e [0128.415] SetFilePointerEx (in: hFile=0xc38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.415] ReadFile (in: hFile=0xc38, lpBuffer=0x7c63778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbdffc80, lpOverlapped=0x0 | out: lpBuffer=0x7c63778*, lpNumberOfBytesRead=0xbdffc80*=0x3c00, lpOverlapped=0x0) returned 1 [0128.416] SetFilePointerEx (in: hFile=0xc38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f88 [0128.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0128.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0128.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e80) returned 1 [0128.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c67380 [0128.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0128.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3010 [0128.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3010) returned 1 [0128.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f88) returned 1 [0128.416] WriteFile (in: hFile=0xc38, lpBuffer=0x7c67380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbdffc80, lpOverlapped=0x0 | out: lpBuffer=0x7c67380*, lpNumberOfBytesWritten=0xbdffc80*=0x3c00, lpOverlapped=0x0) returned 1 [0129.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c67380) returned 1 [0129.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c63778) returned 1 [0129.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0129.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0129.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86698 [0129.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c158 [0129.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0129.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0129.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0129.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e00) returned 1 [0129.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec828 [0129.566] SetFilePointerEx (in: hFile=0xc38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.566] WriteFile (in: hFile=0xc38, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xbdffd00, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xbdffd00*=0x108, lpOverlapped=0x0) returned 1 [0131.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0131.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86698) returned 1 [0131.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0131.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0131.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e80) returned 1 [0131.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0131.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0131.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2818) returned 1 [0131.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee1280 [0131.140] wcscpy (in: _Dest=0x3ee1280, _Source="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx") returned="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx" [0131.140] wcscat (in: _Dest=0x3ee1280, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx.68814f" [0131.140] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx.68814f", NtPathName=0xbdffc78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\hc8ije.docx.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0131.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a398 [0131.141] NtSetInformationFile (FileHandle=0xc38, IoStatusBlock=0xbdffc80, FileInformation=0x3e1a398, Length=0x72, FileInformationClass=0xa) returned 0x0 [0132.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a398) returned 1 [0132.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00c50) returned 1 [0132.261] NtQueryInformationFile (in: FileHandle=0xc38, IoStatusBlock=0xbdffc50, FileInformation=0xbdffc58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbdffc50, FileInformation=0xbdffc58) returned 0x0 [0132.261] NtSetInformationFile (FileHandle=0xc38, IoStatusBlock=0xbdffc50, FileInformation=0xbdffc58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1280) returned 1 [0132.603] FlushFileBuffers (hFile=0xc38) returned 1 [0135.176] CloseHandle (hObject=0xc38) returned 1 [0135.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee01d8 [0135.178] wcscpy (in: _Dest=0x3ee01d8, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.178] wcscat (in: _Dest=0x3ee01d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.178] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee01d8) returned 1 [0135.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14568) returned 1 Thread: id = 514 os_tid = 0x98c [0123.666] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Ih63MGV1-ZgXwHM.pptx" (normalized: "c:\\users\\eebsym5\\documents\\ih63mgv1-zgxwhm.pptx")) returned 0x20 [0123.666] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Ih63MGV1-ZgXwHM.pptx", dwFileAttributes=0x20) returned 1 [0128.418] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Ih63MGV1-ZgXwHM.pptx" (normalized: "c:\\users\\eebsym5\\documents\\ih63mgv1-zgxwhm.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc2c [0128.418] GetFileSizeEx (in: hFile=0xc2c, lpFileSize=0xbc3ff44 | out: lpFileSize=0xbc3ff44*=33726) returned 1 [0128.418] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0x83ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.418] ReadFile (in: hFile=0xc2c, lpBuffer=0xbc3ff20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbc3ff30, lpOverlapped=0x0 | out: lpBuffer=0xbc3ff20*, lpNumberOfBytesRead=0xbc3ff30*=0x4, lpOverlapped=0x0) returned 1 [0128.420] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3010 [0128.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0128.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0128.420] NtQuerySystemTime (in: CurrentTime=0xbc3feb8 | out: CurrentTime=0xbc3feb8*=132462177078096000) returned 0x0 [0128.420] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x11fabe62 [0128.420] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x1c84a84b [0128.420] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x52987b19 [0128.420] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x3c0d46b [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x6bde4821 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x7f125150 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x252423c0 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x70656862 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x75bdd08b [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x3f935b34 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x3c3192f6 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x394ab12d [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x5c8bdf35 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x565efcd9 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x18d2e300 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x35a42f09 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x17d27bf4 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x79cdab7a [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x63757c3e [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x56c027e1 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x71857308 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x6f89f11e [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x5ce93338 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0xd5dec25 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x4ab140d3 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x4588e0d3 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x280247d2 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x2e242dd1 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x2324f9ac [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x17b1e27d [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x7c540ac2 [0128.421] RtlRandomEx (in: Seed=0xbc3feb0 | out: Seed=0xbc3feb0) returned 0x5b4dee94 [0128.432] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.433] ReadFile (in: hFile=0xc2c, lpBuffer=0x7c5bf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbc3feb8, lpOverlapped=0x0 | out: lpBuffer=0x7c5bf68*, lpNumberOfBytesRead=0xbc3feb8*=0x3c00, lpOverlapped=0x0) returned 1 [0128.433] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f88 [0128.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0128.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3010 [0128.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3010) returned 1 [0128.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c5fb70 [0128.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3010 [0128.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0128.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0128.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f88) returned 1 [0128.434] WriteFile (in: hFile=0xc2c, lpBuffer=0x7c5fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbc3feb8, lpOverlapped=0x0 | out: lpBuffer=0x7c5fb70*, lpNumberOfBytesWritten=0xbc3feb8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c5fb70) returned 1 [0129.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c5bf68) returned 1 [0129.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2dfc0 [0129.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0129.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d080 [0129.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0129.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0129.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0129.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0129.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e00) returned 1 [0129.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d54810 [0129.568] SetFilePointerEx (in: hFile=0xc2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.568] WriteFile (in: hFile=0xc2c, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xbc3ff38, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0xbc3ff38*=0x11a, lpOverlapped=0x0) returned 1 [0133.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55dd8 [0133.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0133.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0133.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0133.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86968 [0133.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0133.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3c0 [0133.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3c0) returned 1 [0133.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0133.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 [0133.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe7208 [0133.725] sprintf (in: _Dest=0x2fe7208, _Format="%c%c" | out: _Dest="9f") returned 2 [0133.725] sprintf (in: _Dest=0x2fe720a, _Format="%c%c" | out: _Dest="f7") returned 2 [0133.725] sprintf (in: _Dest=0x2fe720c, _Format="%c%c" | out: _Dest="2a") returned 2 [0133.725] sprintf (in: _Dest=0x2fe720e, _Format="%c%c" | out: _Dest="67") returned 2 [0133.725] sprintf (in: _Dest=0x2fe7210, _Format="%c%c" | out: _Dest="e5") returned 2 [0133.725] sprintf (in: _Dest=0x2fe7212, _Format="%c%c" | out: _Dest="c5") returned 2 [0133.725] sprintf (in: _Dest=0x2fe7214, _Format="%c%c" | out: _Dest="b2") returned 2 [0133.725] sprintf (in: _Dest=0x2fe7216, _Format="%c%c" | out: _Dest="89") returned 2 [0133.725] sprintf (in: _Dest=0x2fe7218, _Format="%c%c" | out: _Dest="f2") returned 2 [0133.725] sprintf (in: _Dest=0x2fe721a, _Format="%c%c" | out: _Dest="45") returned 2 [0133.726] sprintf (in: _Dest=0x2fe721c, _Format="%c%c" | out: _Dest="d7") returned 2 [0133.726] sprintf (in: _Dest=0x2fe721e, _Format="%c%c" | out: _Dest="e4") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7220, _Format="%c%c" | out: _Dest="45") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7222, _Format="%c%c" | out: _Dest="ae") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7224, _Format="%c%c" | out: _Dest="a8") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7226, _Format="%c%c" | out: _Dest="a0") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7228, _Format="%c%c" | out: _Dest="fa") returned 2 [0133.726] sprintf (in: _Dest=0x2fe722a, _Format="%c%c" | out: _Dest="62") returned 2 [0133.726] sprintf (in: _Dest=0x2fe722c, _Format="%c%c" | out: _Dest="b8") returned 2 [0133.726] sprintf (in: _Dest=0x2fe722e, _Format="%c%c" | out: _Dest="11") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7230, _Format="%c%c" | out: _Dest="0e") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7232, _Format="%c%c" | out: _Dest="ed") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7234, _Format="%c%c" | out: _Dest="c7") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7236, _Format="%c%c" | out: _Dest="1a") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7238, _Format="%c%c" | out: _Dest="e0") returned 2 [0133.726] sprintf (in: _Dest=0x2fe723a, _Format="%c%c" | out: _Dest="74") returned 2 [0133.726] sprintf (in: _Dest=0x2fe723c, _Format="%c%c" | out: _Dest="1d") returned 2 [0133.726] sprintf (in: _Dest=0x2fe723e, _Format="%c%c" | out: _Dest="33") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7240, _Format="%c%c" | out: _Dest="20") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7242, _Format="%c%c" | out: _Dest="21") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7244, _Format="%c%c" | out: _Dest="3d") returned 2 [0133.726] sprintf (in: _Dest=0x2fe7246, _Format="%c%c" | out: _Dest="85") returned 2 [0133.727] sprintf (in: _Dest=0x2fe7248, _Format="%c%c" | out: _Dest="b0") returned 2 [0133.727] sprintf (in: _Dest=0x2fe724a, _Format="%c%c" | out: _Dest="8d") returned 2 [0133.727] sprintf (in: _Dest=0x2fe724c, _Format="%c%c" | out: _Dest="b6") returned 2 [0133.727] sprintf (in: _Dest=0x2fe724e, _Format="%c%c" | out: _Dest="d2") returned 2 [0133.727] sprintf (in: _Dest=0x2fe7250, _Format="%c%c" | out: _Dest="3d") returned 2 [0133.727] sprintf (in: _Dest=0x2fe7252, _Format="%c%c" | out: _Dest="3c") returned 2 [0133.727] sprintf (in: _Dest=0x2fe7254, _Format="%c%c" | out: _Dest="53") returned 2 [0133.727] sprintf (in: _Dest=0x2fe7256, _Format="%c%c" | out: _Dest="e4") returned 2 [0133.727] RtlInitAnsiString (in: DestinationString=0xbc3fec0, SourceString="9ff72a67e5c5b289f245d7e445aea8a0fa62b8110eedc71ae0741d3320213d85b08db6d23d3c53e4" | out: DestinationString="9ff72a67e5c5b289f245d7e445aea8a0fa62b8110eedc71ae0741d3320213d85b08db6d23d3c53e4") [0133.727] RtlAnsiStringToUnicodeString (in: DestinationString=0xbc3feb8, SourceString="9ff72a67e5c5b289f245d7e445aea8a0fa62b8110eedc71ae0741d3320213d85b08db6d23d3c53e4", AllocateDestinationString=1 | out: DestinationString="9ff72a67e5c5b289f245d7e445aea8a0fa62b8110eedc71ae0741d3320213d85b08db6d23d3c53e4") returned 0x0 [0133.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35af88 [0133.727] wcscat (in: _Dest=0x3f3fc68, _Source="9ff72a67e5c5b289f245" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\9ff72a67e5c5b289f245") returned="C:\\Users\\EEBsYm5\\Documents\\9ff72a67e5c5b289f245" [0133.727] wcscat (in: _Dest=0x3f3fc68, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\9ff72a67e5c5b289f245.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\9ff72a67e5c5b289f245.68814f" [0133.727] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\9ff72a67e5c5b289f245.68814f", NtPathName=0xbc3feb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\9ff72a67e5c5b289f245.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d449f0 [0133.727] NtSetInformationFile (FileHandle=0xc2c, IoStatusBlock=0xbc3feb8, FileInformation=0x3d449f0, Length=0x84, FileInformationClass=0xa) returned 0x0 [0134.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449f0) returned 1 [0134.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6eee0) returned 1 [0134.017] NtQueryInformationFile (in: FileHandle=0xc2c, IoStatusBlock=0xbc3fe88, FileInformation=0xbc3fe90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbc3fe88, FileInformation=0xbc3fe90) returned 0x0 [0134.017] NtSetInformationFile (FileHandle=0xc2c, IoStatusBlock=0xbc3fe88, FileInformation=0xbc3fe90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0134.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 [0134.025] FlushFileBuffers (hFile=0xc2c) returned 1 [0135.341] CloseHandle (hObject=0xc2c) returned 1 [0135.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0d38 [0135.459] wcscpy (in: _Dest=0x3ee0d38, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.459] wcscat (in: _Dest=0x3ee0d38, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.459] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0d38) returned 1 [0135.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0cd0) returned 1 Thread: id = 515 os_tid = 0x9ac [0123.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48848 [0123.667] wcscpy (in: _Dest=0x3d48848, _Source="C:\\Users\\EEBsYm5\\Documents\\My Music" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music") returned="C:\\Users\\EEBsYm5\\Documents\\My Music" [0123.667] wcscat (in: _Dest=0x3d48848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Music\\" [0123.667] wcscat (in: _Dest=0x3d48848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Music\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Music\\*" [0123.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0123.667] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Music\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0123.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48848) returned 1 [0123.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6248) returned 1 Thread: id = 516 os_tid = 0x740 [0123.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6728 [0123.670] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\EEBsYm5\\Documents\\My Pictures" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures" [0123.670] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\" [0123.670] wcscat (in: _Dest=0x2fe6728, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\*" [0123.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0123.670] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Pictures\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0123.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 [0123.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15328) returned 1 Thread: id = 517 os_tid = 0xc8 [0123.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e15328 [0123.672] wcscpy (in: _Dest=0x3e15328, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0123.672] wcscat (in: _Dest=0x3e15328, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\" [0123.673] wcscat (in: _Dest=0x3e15328, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\*" [0123.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0123.673] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0123.677] wcscmp (_String1=".", _String2=".") returned 0 [0123.677] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.677] wcscmp (_String1="..", _String2=".") returned 1 [0123.677] wcscmp (_String1="..", _String2="..") returned 0 [0123.677] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.677] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0123.677] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0123.677] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0123.677] wcscmp (_String1="Favorites.vss", _String2=".") returned 1 [0123.677] wcscmp (_String1="Favorites.vss", _String2="..") returned 1 [0123.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23290 [0123.677] wcscpy (in: _Dest=0x7a23290, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0123.678] wcscat (in: _Dest=0x7a23290, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\" [0123.678] wcscat (in: _Dest=0x7a23290, _Source="Favorites.vss" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss" [0138.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0138.634] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0138.634] wcscmp (_String1="_private", _String2=".") returned 1 [0138.634] wcscmp (_String1="_private", _String2="..") returned 1 [0138.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1da28 [0138.634] wcscpy (in: _Dest=0x3e1da28, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes" [0138.634] wcscat (in: _Dest=0x3e1da28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\" [0138.634] wcscat (in: _Dest=0x3e1da28, _Source="_private" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private" [0138.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1da28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0138.636] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0138.636] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0138.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0138.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15328) returned 1 [0138.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6aa58) returned 1 Thread: id = 518 os_tid = 0x9bc [0123.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e6b138 [0123.674] wcscpy (in: _Dest=0x3e6b138, _Source="C:\\Users\\EEBsYm5\\Documents\\My Videos" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos" [0123.674] wcscat (in: _Dest=0x3e6b138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos\\" [0123.674] wcscat (in: _Dest=0x3e6b138, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Videos\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Videos\\*" [0123.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3758 [0123.674] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Videos\\*", lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3758) returned 1 [0123.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6b138) returned 1 [0123.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a9a8) returned 1 Thread: id = 519 os_tid = 0x9fc [0123.678] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\NfQ5qewsgMea.pptx" (normalized: "c:\\users\\eebsym5\\documents\\nfq5qewsgmea.pptx")) returned 0x20 [0123.678] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\NfQ5qewsgMea.pptx", dwFileAttributes=0x20) returned 1 [0128.436] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\NfQ5qewsgMea.pptx" (normalized: "c:\\users\\eebsym5\\documents\\nfq5qewsgmea.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc40 [0128.437] GetFileSizeEx (in: hFile=0xc40, lpFileSize=0xbedfc64 | out: lpFileSize=0xbedfc64*=50890) returned 1 [0128.437] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0xc6c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.437] ReadFile (in: hFile=0xc40, lpBuffer=0xbedfc40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbedfc50, lpOverlapped=0x0 | out: lpBuffer=0xbedfc40*, lpNumberOfBytesRead=0xbedfc50*=0x4, lpOverlapped=0x0) returned 1 [0128.439] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0128.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0128.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0128.439] NtQuerySystemTime (in: CurrentTime=0xbedfbd8 | out: CurrentTime=0xbedfbd8*=132462177078252000) returned 0x0 [0128.439] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x7ae5f1bb [0128.439] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x3994b614 [0128.439] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x667e0a2a [0128.439] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x38202d7e [0128.439] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x4da0d98d [0128.439] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x4ce7e52e [0128.439] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x52253357 [0128.439] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x74e0e951 [0128.439] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x7f91a3c0 [0128.439] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x6ac041e3 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x1b9eb804 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x6a3adb04 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x3e53e49f [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x1e19ef4e [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x7310b061 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x1d6ac51b [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x6967b987 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x1313dd55 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x18468d2d [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x57fc9ef1 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x25ffdc06 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x2f508aa2 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x4158f831 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x4f18fbd0 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x6746d3e2 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x53a939cd [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x412c09c0 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x6b5dbde1 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x4495d469 [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x61ef797b [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x60b1436f [0128.440] RtlRandomEx (in: Seed=0xbedfbd0 | out: Seed=0xbedfbd0) returned 0x7acc0204 [0128.451] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.451] ReadFile (in: hFile=0xc40, lpBuffer=0x7c817b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbedfbd8, lpOverlapped=0x0 | out: lpBuffer=0x7c817b8*, lpNumberOfBytesRead=0xbedfbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0128.452] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f88 [0128.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0128.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0128.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0128.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c853c0 [0128.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0128.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0128.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0128.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f88) returned 1 [0128.453] WriteFile (in: hFile=0xc40, lpBuffer=0x7c853c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbedfbd8, lpOverlapped=0x0 | out: lpBuffer=0x7c853c0*, lpNumberOfBytesWritten=0xbedfbd8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c853c0) returned 1 [0129.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c817b8) returned 1 [0129.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79870 [0129.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c108) returned 1 [0129.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79100 [0129.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0129.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0129.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0129.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0129.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e00) returned 1 [0129.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d54dd8 [0129.579] SetFilePointerEx (in: hFile=0xc40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.579] WriteFile (in: hFile=0xc40, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xbedfc58, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0xbedfc58*=0x114, lpOverlapped=0x0) returned 1 [0133.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55dd8 [0133.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f740 [0133.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0133.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0133.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86968 [0133.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0133.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0133.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0133.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0133.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 [0133.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3de6018 [0133.729] sprintf (in: _Dest=0x3de6018, _Format="%c%c" | out: _Dest="91") returned 2 [0133.729] sprintf (in: _Dest=0x3de601a, _Format="%c%c" | out: _Dest="c0") returned 2 [0133.729] sprintf (in: _Dest=0x3de601c, _Format="%c%c" | out: _Dest="ab") returned 2 [0133.729] sprintf (in: _Dest=0x3de601e, _Format="%c%c" | out: _Dest="9a") returned 2 [0133.729] sprintf (in: _Dest=0x3de6020, _Format="%c%c" | out: _Dest="92") returned 2 [0133.729] sprintf (in: _Dest=0x3de6022, _Format="%c%c" | out: _Dest="7b") returned 2 [0133.729] sprintf (in: _Dest=0x3de6024, _Format="%c%c" | out: _Dest="d8") returned 2 [0133.729] sprintf (in: _Dest=0x3de6026, _Format="%c%c" | out: _Dest="4d") returned 2 [0133.729] sprintf (in: _Dest=0x3de6028, _Format="%c%c" | out: _Dest="5b") returned 2 [0133.729] sprintf (in: _Dest=0x3de602a, _Format="%c%c" | out: _Dest="7c") returned 2 [0133.729] sprintf (in: _Dest=0x3de602c, _Format="%c%c" | out: _Dest="1f") returned 2 [0133.730] sprintf (in: _Dest=0x3de602e, _Format="%c%c" | out: _Dest="03") returned 2 [0133.730] sprintf (in: _Dest=0x3de6030, _Format="%c%c" | out: _Dest="c1") returned 2 [0133.730] sprintf (in: _Dest=0x3de6032, _Format="%c%c" | out: _Dest="8a") returned 2 [0133.730] sprintf (in: _Dest=0x3de6034, _Format="%c%c" | out: _Dest="5c") returned 2 [0133.730] sprintf (in: _Dest=0x3de6036, _Format="%c%c" | out: _Dest="fc") returned 2 [0133.730] sprintf (in: _Dest=0x3de6038, _Format="%c%c" | out: _Dest="5f") returned 2 [0133.730] sprintf (in: _Dest=0x3de603a, _Format="%c%c" | out: _Dest="96") returned 2 [0133.730] sprintf (in: _Dest=0x3de603c, _Format="%c%c" | out: _Dest="4e") returned 2 [0133.730] sprintf (in: _Dest=0x3de603e, _Format="%c%c" | out: _Dest="6a") returned 2 [0133.730] sprintf (in: _Dest=0x3de6040, _Format="%c%c" | out: _Dest="62") returned 2 [0133.730] sprintf (in: _Dest=0x3de6042, _Format="%c%c" | out: _Dest="07") returned 2 [0133.730] sprintf (in: _Dest=0x3de6044, _Format="%c%c" | out: _Dest="85") returned 2 [0133.730] sprintf (in: _Dest=0x3de6046, _Format="%c%c" | out: _Dest="e7") returned 2 [0133.730] sprintf (in: _Dest=0x3de6048, _Format="%c%c" | out: _Dest="f4") returned 2 [0133.730] sprintf (in: _Dest=0x3de604a, _Format="%c%c" | out: _Dest="86") returned 2 [0133.730] sprintf (in: _Dest=0x3de604c, _Format="%c%c" | out: _Dest="80") returned 2 [0133.730] sprintf (in: _Dest=0x3de604e, _Format="%c%c" | out: _Dest="d7") returned 2 [0133.730] sprintf (in: _Dest=0x3de6050, _Format="%c%c" | out: _Dest="bd") returned 2 [0133.730] sprintf (in: _Dest=0x3de6052, _Format="%c%c" | out: _Dest="e6") returned 2 [0133.730] sprintf (in: _Dest=0x3de6054, _Format="%c%c" | out: _Dest="a5") returned 2 [0133.730] sprintf (in: _Dest=0x3de6056, _Format="%c%c" | out: _Dest="73") returned 2 [0133.730] sprintf (in: _Dest=0x3de6058, _Format="%c%c" | out: _Dest="90") returned 2 [0133.731] sprintf (in: _Dest=0x3de605a, _Format="%c%c" | out: _Dest="e0") returned 2 [0133.731] RtlInitAnsiString (in: DestinationString=0xbedfbe0, SourceString="91c0ab9a927bd84d5b7c1f03c18a5cfc5f964e6a620785e7f48680d7bde6a57390e0" | out: DestinationString="91c0ab9a927bd84d5b7c1f03c18a5cfc5f964e6a620785e7f48680d7bde6a57390e0") [0133.731] RtlAnsiStringToUnicodeString (in: DestinationString=0xbedfbd8, SourceString="91c0ab9a927bd84d5b7c1f03c18a5cfc5f964e6a620785e7f48680d7bde6a57390e0", AllocateDestinationString=1 | out: DestinationString="91c0ab9a927bd84d5b7c1f03c18a5cfc5f964e6a620785e7f48680d7bde6a57390e0") returned 0x0 [0133.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7020 [0133.731] wcscat (in: _Dest=0x7a23ca0, _Source="91c0ab9a927bd84d5" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\91c0ab9a927bd84d5") returned="C:\\Users\\EEBsYm5\\Documents\\91c0ab9a927bd84d5" [0133.731] wcscat (in: _Dest=0x7a23ca0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\91c0ab9a927bd84d5.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\91c0ab9a927bd84d5.68814f" [0133.731] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\91c0ab9a927bd84d5.68814f", NtPathName=0xbedfbd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\91c0ab9a927bd84d5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9780 [0133.731] NtSetInformationFile (FileHandle=0xc40, IoStatusBlock=0xbedfbd8, FileInformation=0x3eb9780, Length=0x7e, FileInformationClass=0xa) returned 0x0 [0134.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 [0134.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f108) returned 1 [0134.020] NtQueryInformationFile (in: FileHandle=0xc40, IoStatusBlock=0xbedfba8, FileInformation=0xbedfbb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbedfba8, FileInformation=0xbedfbb0) returned 0x0 [0134.020] NtSetInformationFile (FileHandle=0xc40, IoStatusBlock=0xbedfba8, FileInformation=0xbedfbb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ca0) returned 1 [0134.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7020) returned 1 [0134.023] FlushFileBuffers (hFile=0xc40) returned 1 [0135.340] CloseHandle (hObject=0xc40) returned 1 [0135.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0170 [0135.457] wcscpy (in: _Dest=0x3ee0170, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.457] wcscat (in: _Dest=0x3ee0170, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.457] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0170) returned 1 [0135.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0d38) returned 1 Thread: id = 520 os_tid = 0xa5c [0123.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6728 [0123.679] wcscpy (in: _Dest=0x2fe6728, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0123.679] wcscat (in: _Dest=0x2fe6728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0123.679] wcscat (in: _Dest=0x2fe6728, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\*") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\*" [0123.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3758 [0123.679] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\*", lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x448c76c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0123.683] wcscmp (_String1=".", _String2=".") returned 0 [0123.683] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0x448c76c0, ftLastAccessTime.dwHighDateTime=0x1d5e89c, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.683] wcscmp (_String1="..", _String2=".") returned 1 [0123.683] wcscmp (_String1="..", _String2="..") returned 0 [0123.683] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74e91a80, ftCreationTime.dwHighDateTime=0x1d2fb32, ftLastAccessTime.dwLowDateTime=0x74e91a80, ftLastAccessTime.dwHighDateTime=0x1d2fb32, ftLastWriteTime.dwLowDateTime=0x448c76c0, ftLastWriteTime.dwHighDateTime=0x1d5e89c, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="feasf@efw.com.pst", cAlternateFileName="FEASF@~1.PST")) returned 1 [0123.683] wcscmp (_String1="feasf@efw.com.pst", _String2=".") returned 1 [0123.683] wcscmp (_String1="feasf@efw.com.pst", _String2="..") returned 1 [0123.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a318 [0123.683] wcscpy (in: _Dest=0x3e1a318, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0123.683] wcscat (in: _Dest=0x3e1a318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0123.683] wcscat (in: _Dest=0x3e1a318, _Source="feasf@efw.com.pst" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" [0140.725] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\feasf@efw.com.pst")) returned 0x2020 [0140.726] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst", dwFileAttributes=0x20) returned 1 [0144.520] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\feasf@efw.com.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\feasf@efw.com.pst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dd4 [0144.520] GetFileSizeEx (in: hFile=0x1dd4, lpFileSize=0xc07fedc | out: lpFileSize=0xc07fedc*=271360) returned 1 [0144.520] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x423fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.520] ReadFile (in: hFile=0x1dd4, lpBuffer=0xc07feb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc07fec8, lpOverlapped=0x0 | out: lpBuffer=0xc07feb8*, lpNumberOfBytesRead=0xc07fec8*=0x4, lpOverlapped=0x0) returned 1 [0144.522] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0144.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0144.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0144.522] NtQuerySystemTime (in: CurrentTime=0xc07fe50 | out: CurrentTime=0xc07fe50*=132462177233628000) returned 0x0 [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x6c5c994a [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x21af88e7 [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x12d5e525 [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x459d7137 [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x355d60df [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x634aa2e7 [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x253206b6 [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x4c8a3a1a [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x30f03642 [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x6b04e8aa [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x43800ccf [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x439ff0af [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x46a7d8e6 [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x875ec7b [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x53340e6b [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x64dcd6cb [0144.522] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x5b54d2e7 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x44d54ba0 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x34ec4c63 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x416761e6 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x6e103aa2 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x45eec3d3 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x135082b2 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x6300edd1 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x832bf8e [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0xdaffd13 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x2c0b6529 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x9ef4704 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x1ff37c23 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x5a83597e [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x44921a25 [0144.523] RtlRandomEx (in: Seed=0xc07fe48 | out: Seed=0xc07fe48) returned 0x44aa72e0 [0144.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0144.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0144.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0144.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0144.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0144.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0144.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0144.531] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.531] ReadFile (in: hFile=0x1dd4, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc07fe50, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xc07fe50*=0x3c00, lpOverlapped=0x0) returned 1 [0144.534] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49a40 [0144.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0144.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0144.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0144.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0144.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0144.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0144.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0144.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0144.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a40) returned 1 [0144.535] WriteFile (in: hFile=0x1dd4, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc07fe50, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0xc07fe50*=0x3c00, lpOverlapped=0x0) returned 1 [0144.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0144.537] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.537] ReadFile (in: hFile=0x1dd4, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc07fe50, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xc07fe50*=0x3c00, lpOverlapped=0x0) returned 1 [0144.538] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49a40 [0144.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0144.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0144.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0144.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0144.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0144.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0144.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0144.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0144.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a40) returned 1 [0144.539] WriteFile (in: hFile=0x1dd4, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc07fe50, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0xc07fe50*=0x3c00, lpOverlapped=0x0) returned 1 [0149.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0149.286] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.286] ReadFile (in: hFile=0x1dd4, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc07fe50, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xc07fe50*=0x3c00, lpOverlapped=0x0) returned 1 [0149.287] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24860 [0149.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30153a0 [0149.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0149.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0149.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0149.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0149.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0149.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0149.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30153a0) returned 1 [0149.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24860) returned 1 [0149.288] WriteFile (in: hFile=0x1dd4, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc07fe50, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0xc07fe50*=0x3c00, lpOverlapped=0x0) returned 1 [0153.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0153.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d472a8 [0153.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0153.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0153.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0153.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78fb0 [0153.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08388 [0153.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e148 [0153.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0153.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0153.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79218 [0153.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0153.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0153.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0153.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08388) returned 1 [0153.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dce108 [0153.066] SetFilePointerEx (in: hFile=0x1dd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.066] WriteFile (in: hFile=0x1dd4, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0xc07fed0, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0xc07fed0*=0x154, lpOverlapped=0x0) returned 1 [0155.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08460 [0155.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0155.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0155.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0155.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86878 [0155.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0155.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0155.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0155.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0155.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08460) returned 1 [0155.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e84268 [0155.503] sprintf (in: _Dest=0x3e84268, _Format="%c%c" | out: _Dest="ce") returned 2 [0155.503] sprintf (in: _Dest=0x3e8426a, _Format="%c%c" | out: _Dest="3a") returned 2 [0155.503] sprintf (in: _Dest=0x3e8426c, _Format="%c%c" | out: _Dest="f5") returned 2 [0155.503] sprintf (in: _Dest=0x3e8426e, _Format="%c%c" | out: _Dest="e5") returned 2 [0155.503] sprintf (in: _Dest=0x3e84270, _Format="%c%c" | out: _Dest="bb") returned 2 [0155.503] sprintf (in: _Dest=0x3e84272, _Format="%c%c" | out: _Dest="5a") returned 2 [0155.503] sprintf (in: _Dest=0x3e84274, _Format="%c%c" | out: _Dest="9c") returned 2 [0155.503] sprintf (in: _Dest=0x3e84276, _Format="%c%c" | out: _Dest="cc") returned 2 [0155.503] sprintf (in: _Dest=0x3e84278, _Format="%c%c" | out: _Dest="97") returned 2 [0155.503] sprintf (in: _Dest=0x3e8427a, _Format="%c%c" | out: _Dest="1c") returned 2 [0155.503] sprintf (in: _Dest=0x3e8427c, _Format="%c%c" | out: _Dest="b9") returned 2 [0155.504] sprintf (in: _Dest=0x3e8427e, _Format="%c%c" | out: _Dest="72") returned 2 [0155.504] sprintf (in: _Dest=0x3e84280, _Format="%c%c" | out: _Dest="dc") returned 2 [0155.504] sprintf (in: _Dest=0x3e84282, _Format="%c%c" | out: _Dest="5f") returned 2 [0155.504] sprintf (in: _Dest=0x3e84284, _Format="%c%c" | out: _Dest="f3") returned 2 [0155.504] sprintf (in: _Dest=0x3e84286, _Format="%c%c" | out: _Dest="25") returned 2 [0155.504] sprintf (in: _Dest=0x3e84288, _Format="%c%c" | out: _Dest="e3") returned 2 [0155.504] sprintf (in: _Dest=0x3e8428a, _Format="%c%c" | out: _Dest="c3") returned 2 [0155.504] sprintf (in: _Dest=0x3e8428c, _Format="%c%c" | out: _Dest="a4") returned 2 [0155.504] sprintf (in: _Dest=0x3e8428e, _Format="%c%c" | out: _Dest="dc") returned 2 [0155.504] sprintf (in: _Dest=0x3e84290, _Format="%c%c" | out: _Dest="ce") returned 2 [0155.504] sprintf (in: _Dest=0x3e84292, _Format="%c%c" | out: _Dest="d5") returned 2 [0155.504] sprintf (in: _Dest=0x3e84294, _Format="%c%c" | out: _Dest="31") returned 2 [0155.504] sprintf (in: _Dest=0x3e84296, _Format="%c%c" | out: _Dest="4f") returned 2 [0155.504] sprintf (in: _Dest=0x3e84298, _Format="%c%c" | out: _Dest="70") returned 2 [0155.504] sprintf (in: _Dest=0x3e8429a, _Format="%c%c" | out: _Dest="53") returned 2 [0155.504] sprintf (in: _Dest=0x3e8429c, _Format="%c%c" | out: _Dest="ef") returned 2 [0155.504] sprintf (in: _Dest=0x3e8429e, _Format="%c%c" | out: _Dest="e6") returned 2 [0155.504] sprintf (in: _Dest=0x3e842a0, _Format="%c%c" | out: _Dest="11") returned 2 [0155.504] sprintf (in: _Dest=0x3e842a2, _Format="%c%c" | out: _Dest="62") returned 2 [0155.504] sprintf (in: _Dest=0x3e842a4, _Format="%c%c" | out: _Dest="f5") returned 2 [0155.504] sprintf (in: _Dest=0x3e842a6, _Format="%c%c" | out: _Dest="81") returned 2 [0155.504] sprintf (in: _Dest=0x3e842a8, _Format="%c%c" | out: _Dest="d8") returned 2 [0155.504] sprintf (in: _Dest=0x3e842aa, _Format="%c%c" | out: _Dest="88") returned 2 [0155.505] RtlInitAnsiString (in: DestinationString=0xc07fe58, SourceString="ce3af5e5bb5a9ccc971cb972dc5ff325e3c3a4dcced5314f7053efe61162f581d888" | out: DestinationString="ce3af5e5bb5a9ccc971cb972dc5ff325e3c3a4dcced5314f7053efe61162f581d888") [0155.505] RtlAnsiStringToUnicodeString (in: DestinationString=0xc07fe50, SourceString="ce3af5e5bb5a9ccc971cb972dc5ff325e3c3a4dcced5314f7053efe61162f581d888", AllocateDestinationString=1 | out: DestinationString="ce3af5e5bb5a9ccc971cb972dc5ff325e3c3a4dcced5314f7053efe61162f581d888") returned 0x0 [0155.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5608 [0155.505] RtlFreeAnsiString (AnsiString="c") [0155.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84268) returned 1 [0155.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0155.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0155.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce108) returned 1 [0155.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79218) returned 1 [0155.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0155.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0155.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d472a8) returned 1 [0155.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37e0) returned 1 [0155.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0155.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0155.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a607e0 [0155.506] wcscat (in: _Dest=0x7a607e0, _Source="ce3af5e5bb5a9ccc9" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\ce3af5e5bb5a9ccc9") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\ce3af5e5bb5a9ccc9" [0155.506] wcscat (in: _Dest=0x7a607e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\ce3af5e5bb5a9ccc9.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\ce3af5e5bb5a9ccc9.68814f" [0155.506] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\ce3af5e5bb5a9ccc9.68814f", NtPathName=0xc07fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\ce3af5e5bb5a9ccc9.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053bb8 [0155.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 [0155.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b8b8) returned 1 [0155.508] NtQueryInformationFile (in: FileHandle=0x1dd4, IoStatusBlock=0xc07fe20, FileInformation=0xc07fe28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc07fe20, FileInformation=0xc07fe28) returned 0x0 [0155.508] NtSetInformationFile (FileHandle=0x1dd4, IoStatusBlock=0xc07fe20, FileInformation=0xc07fe28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0155.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a607e0) returned 1 [0155.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5608) returned 1 [0155.510] FlushFileBuffers (hFile=0x1dd4) returned 1 [0155.609] CloseHandle (hObject=0x1dd4) returned 1 [0155.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19598 [0155.811] wcscpy (in: _Dest=0x3e19598, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0155.811] wcscat (in: _Dest=0x3e19598, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\68814F-Readme.txt" [0155.811] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\68814f-readme.txt")) returned 0xffffffff [0155.811] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dd4 [0155.839] WriteFile (in: hFile=0x1dd4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc07fe64, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc07fe64*=0x8b9, lpOverlapped=0x0) returned 1 [0155.851] CloseHandle (hObject=0x1dd4) returned 1 [0155.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19598) returned 1 [0155.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a318) returned 1 [0155.859] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0xf60f53c0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0xf61d9c00, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Data File - mail.pst", cAlternateFileName="OUTLOO~1.PST")) returned 1 [0155.859] wcscmp (_String1="Outlook Data File - mail.pst", _String2=".") returned 1 [0155.859] wcscmp (_String1="Outlook Data File - mail.pst", _String2="..") returned 1 [0155.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7448 [0155.859] wcscpy (in: _Dest=0x3eb7448, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files" [0155.859] wcscat (in: _Dest=0x3eb7448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0155.859] wcscat (in: _Dest=0x3eb7448, _Source="Outlook Data File - mail.pst" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" [0156.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0156.878] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf60f53c0, ftCreationTime.dwHighDateTime=0x1d2fb2f, ftLastAccessTime.dwLowDateTime=0xf60f53c0, ftLastAccessTime.dwHighDateTime=0x1d2fb2f, ftLastWriteTime.dwLowDateTime=0xf61d9c00, ftLastWriteTime.dwHighDateTime=0x1d2fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Data File - mail.pst", cAlternateFileName="OUTLOO~1.PST")) returned 0 [0156.878] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0156.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3758) returned 1 [0156.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6728) returned 1 [0156.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6608) returned 1 Thread: id = 521 os_tid = 0x7b4 [0123.684] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx" (normalized: "c:\\users\\eebsym5\\documents\\p_tksnph.docx")) returned 0x20 [0123.684] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx", dwFileAttributes=0x20) returned 1 [0128.455] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx" (normalized: "c:\\users\\eebsym5\\documents\\p_tksnph.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc30 [0128.455] GetFileSizeEx (in: hFile=0xc30, lpFileSize=0xbb5fc94 | out: lpFileSize=0xbb5fc94*=38182) returned 1 [0128.456] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x9522, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.456] ReadFile (in: hFile=0xc30, lpBuffer=0xbb5fc70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbb5fc80, lpOverlapped=0x0 | out: lpBuffer=0xbb5fc70*, lpNumberOfBytesRead=0xbb5fc80*=0x4, lpOverlapped=0x0) returned 1 [0128.457] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0128.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0128.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0128.458] NtQuerySystemTime (in: CurrentTime=0xbb5fc08 | out: CurrentTime=0xbb5fc08*=132462177078408000) returned 0x0 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x37dd9c52 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x6adee2f1 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x73e6ec21 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x7bb02977 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x4401e914 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x5dda4a91 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x6b32e521 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x54028752 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x3c71103d [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x7315c49f [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x69bde4d3 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x165e11dc [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x3c2bb62c [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x5b18865d [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x4feb74d0 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x3e993bce [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x5534ed1 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x6ea9b9a5 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x19d0dbd7 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x727d3618 [0128.458] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0xc0b88dd [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x3a74b11a [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x5bb3abc1 [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x10a5e8df [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x6f605d27 [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x70a8821 [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x5bd5008c [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x7dc996d [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x6d62be48 [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x38de29e2 [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0x3df44dc1 [0128.459] RtlRandomEx (in: Seed=0xbb5fc00 | out: Seed=0xbb5fc00) returned 0xe80cc54 [0128.470] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.470] ReadFile (in: hFile=0xc30, lpBuffer=0x7c88fc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbb5fc08, lpOverlapped=0x0 | out: lpBuffer=0x7c88fc8*, lpNumberOfBytesRead=0xbb5fc08*=0x3c00, lpOverlapped=0x0) returned 1 [0128.470] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f88 [0128.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0128.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0128.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0128.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c8cbd0 [0128.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0128.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0128.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0128.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0128.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f88) returned 1 [0128.471] WriteFile (in: hFile=0xc30, lpBuffer=0x7c8cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbb5fc08, lpOverlapped=0x0 | out: lpBuffer=0x7c8cbd0*, lpNumberOfBytesWritten=0xbb5fc08*=0x3c00, lpOverlapped=0x0) returned 1 [0129.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c8cbd0) returned 1 [0129.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c88fc8) returned 1 [0129.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e868a8 [0129.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0129.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e868d8 [0129.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0129.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0129.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0b8) returned 1 [0129.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0129.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e00) returned 1 [0129.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec940 [0129.581] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.581] WriteFile (in: hFile=0xc30, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbb5fc88, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xbb5fc88*=0x10c, lpOverlapped=0x0) returned 1 [0133.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0133.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e868d8) returned 1 [0133.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0133.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e868a8) returned 1 [0133.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0133.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0133.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0133.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0133.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d9c0 [0133.668] wcscpy (in: _Dest=0x3e1d9c0, _Source="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx") returned="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx" [0133.668] wcscat (in: _Dest=0x3e1d9c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx.68814f" [0133.668] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx.68814f", NtPathName=0xbb5fc00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\p_TKsnph.docx.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46718 [0133.668] NtSetInformationFile (FileHandle=0xc30, IoStatusBlock=0xbb5fc08, FileInformation=0x3e46718, Length=0x76, FileInformationClass=0xa) returned 0x0 [0134.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46718) returned 1 [0134.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d500) returned 1 [0134.061] NtQueryInformationFile (in: FileHandle=0xc30, IoStatusBlock=0xbb5fbd8, FileInformation=0xbb5fbe0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbb5fbd8, FileInformation=0xbb5fbe0) returned 0x0 [0134.061] NtSetInformationFile (FileHandle=0xc30, IoStatusBlock=0xbb5fbd8, FileInformation=0xbb5fbe0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 [0134.073] FlushFileBuffers (hFile=0xc30) returned 1 [0135.615] CloseHandle (hObject=0xc30) returned 1 [0135.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee08c0 [0135.617] wcscpy (in: _Dest=0x3ee08c0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.617] wcscat (in: _Dest=0x3ee08c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.617] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee08c0) returned 1 [0135.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 Thread: id = 522 os_tid = 0x10c [0123.686] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Sqzc1AU8U _OWtpuY.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\sqzc1au8u _owtpuy.xlsx")) returned 0x20 [0123.686] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Sqzc1AU8U _OWtpuY.xlsx", dwFileAttributes=0x20) returned 1 [0128.473] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Sqzc1AU8U _OWtpuY.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\sqzc1au8u _owtpuy.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc14 [0128.473] GetFileSizeEx (in: hFile=0xc14, lpFileSize=0xb4bfb34 | out: lpFileSize=0xb4bfb34*=7871) returned 1 [0128.473] SetFilePointerEx (in: hFile=0xc14, liDistanceToMove=0x1ebb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.473] ReadFile (in: hFile=0xc14, lpBuffer=0xb4bfb10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb4bfb20, lpOverlapped=0x0 | out: lpBuffer=0xb4bfb10*, lpNumberOfBytesRead=0xb4bfb20*=0x4, lpOverlapped=0x0) returned 1 [0128.476] SetFilePointerEx (in: hFile=0xc14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0128.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0128.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0128.476] NtQuerySystemTime (in: CurrentTime=0xb4bfaa8 | out: CurrentTime=0xb4bfaa8*=132462177078720000) returned 0x0 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x64b542c5 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x72bdae8f [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x3ea68e37 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x16b4f437 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x172a3083 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x7c725e62 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x6b414ddb [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x6dffe4d0 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x2b3972f6 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x7568864e [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x2d8ab82b [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x1849ffdd [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x1d297510 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x34b583c1 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x575992e3 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x54f0352a [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x3472eb46 [0128.476] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x72897955 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x53334898 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x67be8c48 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x7bbc5ba0 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x1ee6a5f1 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x1426d71 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x603675dd [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x182b0c2 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x2664e508 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x1071f728 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x71c42c4 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x771bf19f [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x503cd2c5 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x622d2c43 [0128.477] RtlRandomEx (in: Seed=0xb4bfaa0 | out: Seed=0xb4bfaa0) returned 0x27529444 [0128.487] ReadFile (in: hFile=0xc14, lpBuffer=0x7c907d8, nNumberOfBytesToRead=0x1ebf, lpNumberOfBytesRead=0xb4bfa9c, lpOverlapped=0x0 | out: lpBuffer=0x7c907d8*, lpNumberOfBytesRead=0xb4bfa9c*=0x1ebf, lpOverlapped=0x0) returned 1 [0128.487] SetFilePointerEx (in: hFile=0xc14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.487] WriteFile (in: hFile=0xc14, lpBuffer=0x7c943e0*, nNumberOfBytesToWrite=0x1ebf, lpNumberOfBytesWritten=0xb4bfaa0, lpOverlapped=0x0 | out: lpBuffer=0x7c943e0*, lpNumberOfBytesWritten=0xb4bfaa0*=0x1ebf, lpOverlapped=0x0) returned 1 [0129.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0129.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0129.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0129.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c943e0) returned 1 [0129.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c907d8) returned 1 [0129.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0129.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f88) returned 1 [0129.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e55f88 [0129.582] SetFilePointerEx (in: hFile=0xc14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.583] WriteFile (in: hFile=0xc14, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xb4bfb28, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0xb4bfb28*=0x11e, lpOverlapped=0x0) returned 1 [0133.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07968 [0133.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0133.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0133.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0133.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0133.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0133.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0133.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0133.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0133.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0133.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1d888 [0133.670] sprintf (in: _Dest=0x3e1d888, _Format="%c%c" | out: _Dest="57") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d88a, _Format="%c%c" | out: _Dest="56") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d88c, _Format="%c%c" | out: _Dest="17") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d88e, _Format="%c%c" | out: _Dest="62") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d890, _Format="%c%c" | out: _Dest="4a") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d892, _Format="%c%c" | out: _Dest="21") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d894, _Format="%c%c" | out: _Dest="48") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d896, _Format="%c%c" | out: _Dest="7f") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d898, _Format="%c%c" | out: _Dest="40") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d89a, _Format="%c%c" | out: _Dest="f8") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d89c, _Format="%c%c" | out: _Dest="57") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d89e, _Format="%c%c" | out: _Dest="dd") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d8a0, _Format="%c%c" | out: _Dest="83") returned 2 [0133.670] sprintf (in: _Dest=0x3e1d8a2, _Format="%c%c" | out: _Dest="e5") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8a4, _Format="%c%c" | out: _Dest="dc") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8a6, _Format="%c%c" | out: _Dest="07") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8a8, _Format="%c%c" | out: _Dest="41") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8aa, _Format="%c%c" | out: _Dest="a4") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8ac, _Format="%c%c" | out: _Dest="d6") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8ae, _Format="%c%c" | out: _Dest="eb") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8b0, _Format="%c%c" | out: _Dest="81") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8b2, _Format="%c%c" | out: _Dest="95") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8b4, _Format="%c%c" | out: _Dest="db") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8b6, _Format="%c%c" | out: _Dest="30") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8b8, _Format="%c%c" | out: _Dest="a7") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8ba, _Format="%c%c" | out: _Dest="3f") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8bc, _Format="%c%c" | out: _Dest="51") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8be, _Format="%c%c" | out: _Dest="ed") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8c0, _Format="%c%c" | out: _Dest="ad") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8c2, _Format="%c%c" | out: _Dest="76") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8c4, _Format="%c%c" | out: _Dest="fb") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8c6, _Format="%c%c" | out: _Dest="a1") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8c8, _Format="%c%c" | out: _Dest="01") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8ca, _Format="%c%c" | out: _Dest="bd") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8cc, _Format="%c%c" | out: _Dest="3e") returned 2 [0133.671] sprintf (in: _Dest=0x3e1d8ce, _Format="%c%c" | out: _Dest="7f") returned 2 [0133.672] sprintf (in: _Dest=0x3e1d8d0, _Format="%c%c" | out: _Dest="25") returned 2 [0133.672] sprintf (in: _Dest=0x3e1d8d2, _Format="%c%c" | out: _Dest="6e") returned 2 [0133.672] sprintf (in: _Dest=0x3e1d8d4, _Format="%c%c" | out: _Dest="a9") returned 2 [0133.672] sprintf (in: _Dest=0x3e1d8d6, _Format="%c%c" | out: _Dest="7a") returned 2 [0133.672] sprintf (in: _Dest=0x3e1d8d8, _Format="%c%c" | out: _Dest="46") returned 2 [0133.672] sprintf (in: _Dest=0x3e1d8da, _Format="%c%c" | out: _Dest="cf") returned 2 [0133.672] sprintf (in: _Dest=0x3e1d8dc, _Format="%c%c" | out: _Dest="6d") returned 2 [0133.672] sprintf (in: _Dest=0x3e1d8de, _Format="%c%c" | out: _Dest="63") returned 2 [0133.672] RtlInitAnsiString (in: DestinationString=0xb4bfab0, SourceString="575617624a21487f40f857dd83e5dc0741a4d6eb8195db30a73f51edad76fba101bd3e7f256ea97a46cf6d63" | out: DestinationString="575617624a21487f40f857dd83e5dc0741a4d6eb8195db30a73f51edad76fba101bd3e7f256ea97a46cf6d63") [0133.672] RtlAnsiStringToUnicodeString (in: DestinationString=0xb4bfaa8, SourceString="575617624a21487f40f857dd83e5dc0741a4d6eb8195db30a73f51edad76fba101bd3e7f256ea97a46cf6d63", AllocateDestinationString=1 | out: DestinationString="575617624a21487f40f857dd83e5dc0741a4d6eb8195db30a73f51edad76fba101bd3e7f256ea97a46cf6d63") returned 0x0 [0133.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66858 [0133.672] wcscat (in: _Dest=0x3e46c18, _Source="575617624a21487f40f857" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\575617624a21487f40f857") returned="C:\\Users\\EEBsYm5\\Documents\\575617624a21487f40f857" [0133.672] wcscat (in: _Dest=0x3e46c18, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\575617624a21487f40f857.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\575617624a21487f40f857.68814f" [0133.672] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\575617624a21487f40f857.68814f", NtPathName=0xb4bfaa0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\575617624a21487f40f857.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44180 [0133.672] NtSetInformationFile (FileHandle=0xc14, IoStatusBlock=0xb4bfaa8, FileInformation=0x3d44180, Length=0x88, FileInformationClass=0xa) returned 0x0 [0134.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44180) returned 1 [0134.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e640) returned 1 [0134.010] NtQueryInformationFile (in: FileHandle=0xc14, IoStatusBlock=0xb4bfa78, FileInformation=0xb4bfa80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb4bfa78, FileInformation=0xb4bfa80) returned 0x0 [0134.011] NtSetInformationFile (FileHandle=0xc14, IoStatusBlock=0xb4bfa78, FileInformation=0xb4bfa80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c18) returned 1 [0134.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 [0134.015] FlushFileBuffers (hFile=0xc14) returned 1 [0135.338] CloseHandle (hObject=0xc14) returned 1 [0135.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0170 [0135.453] wcscpy (in: _Dest=0x3ee0170, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.453] wcscat (in: _Dest=0x3ee0170, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.453] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0170) returned 1 [0135.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 Thread: id = 523 os_tid = 0xad8 [0123.687] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\tdWUbo9c.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\tdwubo9c.xlsx")) returned 0x20 [0123.687] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\tdWUbo9c.xlsx", dwFileAttributes=0x20) returned 1 [0128.489] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\tdWUbo9c.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\tdwubo9c.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc0c [0128.489] GetFileSizeEx (in: hFile=0xc0c, lpFileSize=0xbf6f84c | out: lpFileSize=0xbf6f84c*=98244) returned 1 [0128.489] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x17fc0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.489] ReadFile (in: hFile=0xc0c, lpBuffer=0xbf6f828, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbf6f838, lpOverlapped=0x0 | out: lpBuffer=0xbf6f828*, lpNumberOfBytesRead=0xbf6f838*=0x4, lpOverlapped=0x0) returned 1 [0128.491] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0128.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0128.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0128.491] NtQuerySystemTime (in: CurrentTime=0xbf6f7c0 | out: CurrentTime=0xbf6f7c0*=132462177078876000) returned 0x0 [0128.491] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x1bea094e [0128.491] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x725577b9 [0128.491] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0xed70f78 [0128.491] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x62a455cf [0128.491] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x7f759be2 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x75fd94b1 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x40582120 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x6ca74fa7 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x4b8ce969 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x5433cafa [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x342b8b41 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x608bcd2f [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x78bf8a91 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x779a65c6 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x7c1ef646 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x75f5ea71 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x6add33a1 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x2c2ed19c [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x4d9d1554 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x6d622ae2 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x1e4b0538 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0xdbb6b00 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x1491bc2e [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x5bb92dde [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x278cde5b [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x6b8896a1 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x6133701e [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x2f5e6a4f [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x3657304c [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x18128703 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x4b1deca6 [0128.492] RtlRandomEx (in: Seed=0xbf6f7b8 | out: Seed=0xbf6f7b8) returned 0x68782c85 [0128.502] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.502] ReadFile (in: hFile=0xc0c, lpBuffer=0x7c3dbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbf6f7c0, lpOverlapped=0x0 | out: lpBuffer=0x7c3dbb0*, lpNumberOfBytesRead=0xbf6f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0128.503] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55ac0 [0128.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e508 [0128.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0128.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0128.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c417b8 [0128.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0128.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0128.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0128.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0128.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55ac0) returned 1 [0128.504] WriteFile (in: hFile=0xc0c, lpBuffer=0x7c417b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbf6f7c0, lpOverlapped=0x0 | out: lpBuffer=0x7c417b8*, lpNumberOfBytesWritten=0xbf6f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0129.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c417b8) returned 1 [0129.583] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.583] ReadFile (in: hFile=0xc0c, lpBuffer=0x7c3dbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbf6f7c0, lpOverlapped=0x0 | out: lpBuffer=0x7c3dbb0*, lpNumberOfBytesRead=0xbf6f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0129.584] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55e68 [0129.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0129.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0129.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0129.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c417b8 [0129.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0129.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0129.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0129.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0129.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55e68) returned 1 [0129.585] WriteFile (in: hFile=0xc0c, lpBuffer=0x7c417b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbf6f7c0, lpOverlapped=0x0 | out: lpBuffer=0x7c417b8*, lpNumberOfBytesWritten=0xbf6f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0131.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c417b8) returned 1 [0131.144] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x143c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.144] ReadFile (in: hFile=0xc0c, lpBuffer=0x7c3dbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbf6f7c0, lpOverlapped=0x0 | out: lpBuffer=0x7c3dbb0*, lpNumberOfBytesRead=0xbf6f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0131.144] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x143c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08268 [0131.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0131.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0131.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2818) returned 1 [0131.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c417b8 [0131.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0131.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0131.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0131.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0131.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08268) returned 1 [0131.146] WriteFile (in: hFile=0xc0c, lpBuffer=0x7c417b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbf6f7c0, lpOverlapped=0x0 | out: lpBuffer=0x7c417b8*, lpNumberOfBytesWritten=0xbf6f7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0131.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c417b8) returned 1 [0131.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b98 [0131.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0131.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86848 [0131.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0131.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0131.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2818) returned 1 [0131.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0131.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24e90) returned 1 [0131.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e0ac18 [0131.890] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.890] WriteFile (in: hFile=0xc0c, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0xbf6f840, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0xbf6f840*=0x14c, lpOverlapped=0x0) returned 1 [0134.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a241a0 [0134.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0134.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0134.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0134.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305cc20 [0134.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0134.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0134.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0134.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0134.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a241a0) returned 1 [0134.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2ddc0 [0134.091] sprintf (in: _Dest=0x7a2ddc0, _Format="%c%c" | out: _Dest="0c") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddc2, _Format="%c%c" | out: _Dest="c5") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddc4, _Format="%c%c" | out: _Dest="38") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddc6, _Format="%c%c" | out: _Dest="50") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddc8, _Format="%c%c" | out: _Dest="f1") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddca, _Format="%c%c" | out: _Dest="d7") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddcc, _Format="%c%c" | out: _Dest="b0") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddce, _Format="%c%c" | out: _Dest="54") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddd0, _Format="%c%c" | out: _Dest="dc") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddd2, _Format="%c%c" | out: _Dest="d4") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddd4, _Format="%c%c" | out: _Dest="ec") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddd6, _Format="%c%c" | out: _Dest="a6") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddd8, _Format="%c%c" | out: _Dest="28") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddda, _Format="%c%c" | out: _Dest="63") returned 2 [0134.091] sprintf (in: _Dest=0x7a2dddc, _Format="%c%c" | out: _Dest="e8") returned 2 [0134.091] sprintf (in: _Dest=0x7a2ddde, _Format="%c%c" | out: _Dest="9d") returned 2 [0134.091] sprintf (in: _Dest=0x7a2dde0, _Format="%c%c" | out: _Dest="2c") returned 2 [0134.091] sprintf (in: _Dest=0x7a2dde2, _Format="%c%c" | out: _Dest="cc") returned 2 [0134.091] sprintf (in: _Dest=0x7a2dde4, _Format="%c%c" | out: _Dest="6c") returned 2 [0134.091] sprintf (in: _Dest=0x7a2dde6, _Format="%c%c" | out: _Dest="a7") returned 2 [0134.091] sprintf (in: _Dest=0x7a2dde8, _Format="%c%c" | out: _Dest="34") returned 2 [0134.092] sprintf (in: _Dest=0x7a2ddea, _Format="%c%c" | out: _Dest="c3") returned 2 [0134.092] sprintf (in: _Dest=0x7a2ddec, _Format="%c%c" | out: _Dest="62") returned 2 [0134.092] sprintf (in: _Dest=0x7a2ddee, _Format="%c%c" | out: _Dest="21") returned 2 [0134.092] sprintf (in: _Dest=0x7a2ddf0, _Format="%c%c" | out: _Dest="98") returned 2 [0134.092] sprintf (in: _Dest=0x7a2ddf2, _Format="%c%c" | out: _Dest="0f") returned 2 [0134.092] RtlInitAnsiString (in: DestinationString=0xbf6f7c8, SourceString="0cc53850f1d7b054dcd4eca62863e89d2ccc6ca734c36221980f" | out: DestinationString="0cc53850f1d7b054dcd4eca62863e89d2ccc6ca734c36221980f") [0134.092] RtlAnsiStringToUnicodeString (in: DestinationString=0xbf6f7c0, SourceString="0cc53850f1d7b054dcd4eca62863e89d2ccc6ca734c36221980f", AllocateDestinationString=1 | out: DestinationString="0cc53850f1d7b054dcd4eca62863e89d2ccc6ca734c36221980f") returned 0x0 [0134.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fb00 [0134.092] wcscat (in: _Dest=0x3ee0b98, _Source="0cc53850f1d7b" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\0cc53850f1d7b") returned="C:\\Users\\EEBsYm5\\Documents\\0cc53850f1d7b" [0134.092] wcscat (in: _Dest=0x3ee0b98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\0cc53850f1d7b.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\0cc53850f1d7b.68814f" [0134.092] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\0cc53850f1d7b.68814f", NtPathName=0xbf6f7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\0cc53850f1d7b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efa220 [0134.092] NtSetInformationFile (FileHandle=0xc0c, IoStatusBlock=0xbf6f7c0, FileInformation=0x3efa220, Length=0x76, FileInformationClass=0xa) returned 0x0 [0134.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa220) returned 1 [0134.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a41fe0) returned 1 [0134.095] NtQueryInformationFile (in: FileHandle=0xc0c, IoStatusBlock=0xbf6f790, FileInformation=0xbf6f798, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbf6f790, FileInformation=0xbf6f798) returned 0x0 [0134.095] NtSetInformationFile (FileHandle=0xc0c, IoStatusBlock=0xbf6f790, FileInformation=0xbf6f798, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 [0134.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0134.096] FlushFileBuffers (hFile=0xc0c) returned 1 [0135.669] CloseHandle (hObject=0xc0c) returned 1 [0135.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0e08 [0135.671] wcscpy (in: _Dest=0x3ee0e08, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.671] wcscat (in: _Dest=0x3ee0e08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.671] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0e08) returned 1 [0135.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 Thread: id = 524 os_tid = 0x1c0 [0123.687] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\UqRa3SXt2jn48vcn5Y.pps" (normalized: "c:\\users\\eebsym5\\documents\\uqra3sxt2jn48vcn5y.pps")) returned 0x20 [0123.687] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\UqRa3SXt2jn48vcn5Y.pps", dwFileAttributes=0x20) returned 1 [0128.506] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\UqRa3SXt2jn48vcn5Y.pps" (normalized: "c:\\users\\eebsym5\\documents\\uqra3sxt2jn48vcn5y.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc24 [0128.507] GetFileSizeEx (in: hFile=0xc24, lpFileSize=0xc10f884 | out: lpFileSize=0xc10f884*=44720) returned 1 [0128.507] SetFilePointerEx (in: hFile=0xc24, liDistanceToMove=0xaeac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.507] ReadFile (in: hFile=0xc24, lpBuffer=0xc10f860, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc10f870, lpOverlapped=0x0 | out: lpBuffer=0xc10f860*, lpNumberOfBytesRead=0xc10f870*=0x4, lpOverlapped=0x0) returned 1 [0128.509] SetFilePointerEx (in: hFile=0xc24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0128.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0128.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0128.510] NtQuerySystemTime (in: CurrentTime=0xc10f7f8 | out: CurrentTime=0xc10f7f8*=132462177079032000) returned 0x0 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x7ed627e9 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x72a3c1fb [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x9bb09ce [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x57cbee8d [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x8722e68 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x7fc4841d [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x416ac688 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x610dd8 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x29b0a462 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x5d60b721 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x33bb3b07 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x2dde9a64 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x2a32d111 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x33390a18 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x5cfc573a [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x174186ca [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x2ee76043 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x2c564059 [0128.510] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x400cdb71 [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x78f6b95a [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x3d6fc48d [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x361520f5 [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x3e4884fd [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x18dea8d0 [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x769db186 [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x3cb3bfa5 [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x362b9268 [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x2c6a02cf [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x69544dd1 [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x474dbe0f [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x657aa07a [0128.511] RtlRandomEx (in: Seed=0xc10f7f0 | out: Seed=0xc10f7f0) returned 0x7af1a1d9 [0128.523] SetFilePointerEx (in: hFile=0xc24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.523] ReadFile (in: hFile=0xc24, lpBuffer=0x7c4cbd0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc10f7f8, lpOverlapped=0x0 | out: lpBuffer=0x7c4cbd0*, lpNumberOfBytesRead=0xc10f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0128.523] SetFilePointerEx (in: hFile=0xc24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55ac0 [0128.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e508 [0128.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0128.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0128.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c507d8 [0128.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0128.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0128.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0128.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0128.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55ac0) returned 1 [0128.524] WriteFile (in: hFile=0xc24, lpBuffer=0x7c507d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc10f7f8, lpOverlapped=0x0 | out: lpBuffer=0x7c507d8*, lpNumberOfBytesWritten=0xc10f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c507d8) returned 1 [0129.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c4cbd0) returned 1 [0129.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e55e68 [0129.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0129.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e55c70 [0129.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0129.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0129.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0129.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0129.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55a78) returned 1 [0129.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d554c8 [0129.587] SetFilePointerEx (in: hFile=0xc24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.587] WriteFile (in: hFile=0xc24, lpBuffer=0x3d554c8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xc10f878, lpOverlapped=0x0 | out: lpBuffer=0x3d554c8*, lpNumberOfBytesWritten=0xc10f878*=0x11e, lpOverlapped=0x0) returned 1 [0133.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f88 [0133.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0133.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0133.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0133.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0133.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0133.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0133.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0133.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0133.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f88) returned 1 [0133.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1d888 [0133.674] sprintf (in: _Dest=0x3e1d888, _Format="%c%c" | out: _Dest="a7") returned 2 [0133.674] sprintf (in: _Dest=0x3e1d88a, _Format="%c%c" | out: _Dest="94") returned 2 [0133.674] sprintf (in: _Dest=0x3e1d88c, _Format="%c%c" | out: _Dest="5b") returned 2 [0133.674] sprintf (in: _Dest=0x3e1d88e, _Format="%c%c" | out: _Dest="b7") returned 2 [0133.674] sprintf (in: _Dest=0x3e1d890, _Format="%c%c" | out: _Dest="6d") returned 2 [0133.674] sprintf (in: _Dest=0x3e1d892, _Format="%c%c" | out: _Dest="83") returned 2 [0133.674] sprintf (in: _Dest=0x3e1d894, _Format="%c%c" | out: _Dest="66") returned 2 [0133.674] sprintf (in: _Dest=0x3e1d896, _Format="%c%c" | out: _Dest="6d") returned 2 [0133.674] sprintf (in: _Dest=0x3e1d898, _Format="%c%c" | out: _Dest="ed") returned 2 [0133.674] sprintf (in: _Dest=0x3e1d89a, _Format="%c%c" | out: _Dest="00") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d89c, _Format="%c%c" | out: _Dest="25") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d89e, _Format="%c%c" | out: _Dest="04") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8a0, _Format="%c%c" | out: _Dest="ff") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8a2, _Format="%c%c" | out: _Dest="d0") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8a4, _Format="%c%c" | out: _Dest="b0") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8a6, _Format="%c%c" | out: _Dest="74") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8a8, _Format="%c%c" | out: _Dest="44") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8aa, _Format="%c%c" | out: _Dest="43") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8ac, _Format="%c%c" | out: _Dest="5e") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8ae, _Format="%c%c" | out: _Dest="16") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8b0, _Format="%c%c" | out: _Dest="bd") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8b2, _Format="%c%c" | out: _Dest="ef") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8b4, _Format="%c%c" | out: _Dest="8f") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8b6, _Format="%c%c" | out: _Dest="92") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8b8, _Format="%c%c" | out: _Dest="1d") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8ba, _Format="%c%c" | out: _Dest="df") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8bc, _Format="%c%c" | out: _Dest="e4") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8be, _Format="%c%c" | out: _Dest="f1") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8c0, _Format="%c%c" | out: _Dest="76") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8c2, _Format="%c%c" | out: _Dest="36") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8c4, _Format="%c%c" | out: _Dest="39") returned 2 [0133.675] sprintf (in: _Dest=0x3e1d8c6, _Format="%c%c" | out: _Dest="ed") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8c8, _Format="%c%c" | out: _Dest="72") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8ca, _Format="%c%c" | out: _Dest="66") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8cc, _Format="%c%c" | out: _Dest="cf") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8ce, _Format="%c%c" | out: _Dest="f4") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8d0, _Format="%c%c" | out: _Dest="a5") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8d2, _Format="%c%c" | out: _Dest="51") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8d4, _Format="%c%c" | out: _Dest="80") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8d6, _Format="%c%c" | out: _Dest="cf") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8d8, _Format="%c%c" | out: _Dest="17") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8da, _Format="%c%c" | out: _Dest="cf") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8dc, _Format="%c%c" | out: _Dest="b3") returned 2 [0133.676] sprintf (in: _Dest=0x3e1d8de, _Format="%c%c" | out: _Dest="c5") returned 2 [0133.676] RtlInitAnsiString (in: DestinationString=0xc10f800, SourceString="a7945bb76d83666ded002504ffd0b07444435e16bdef8f921ddfe4f1763639ed7266cff4a55180cf17cfb3c5" | out: DestinationString="a7945bb76d83666ded002504ffd0b07444435e16bdef8f921ddfe4f1763639ed7266cff4a55180cf17cfb3c5") [0133.676] RtlAnsiStringToUnicodeString (in: DestinationString=0xc10f7f8, SourceString="a7945bb76d83666ded002504ffd0b07444435e16bdef8f921ddfe4f1763639ed7266cff4a55180cf17cfb3c5", AllocateDestinationString=1 | out: DestinationString="a7945bb76d83666ded002504ffd0b07444435e16bdef8f921ddfe4f1763639ed7266cff4a55180cf17cfb3c5") returned 0x0 [0133.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e663d8 [0133.676] wcscat (in: _Dest=0x3e47318, _Source="a7945bb76d83666ded0025" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\a7945bb76d83666ded0025") returned="C:\\Users\\EEBsYm5\\Documents\\a7945bb76d83666ded0025" [0133.676] wcscat (in: _Dest=0x3e47318, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\a7945bb76d83666ded0025.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\a7945bb76d83666ded0025.68814f" [0133.676] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\a7945bb76d83666ded0025.68814f", NtPathName=0xc10f7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\a7945bb76d83666ded0025.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44840 [0133.676] NtSetInformationFile (FileHandle=0xc24, IoStatusBlock=0xc10f7f8, FileInformation=0x3d44840, Length=0x88, FileInformationClass=0xa) returned 0x0 [0134.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44840) returned 1 [0134.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e868) returned 1 [0134.061] NtQueryInformationFile (in: FileHandle=0xc24, IoStatusBlock=0xc10f7c8, FileInformation=0xc10f7d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc10f7c8, FileInformation=0xc10f7d0) returned 0x0 [0134.061] NtSetInformationFile (FileHandle=0xc24, IoStatusBlock=0xc10f7c8, FileInformation=0xc10f7d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47318) returned 1 [0134.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e663d8) returned 1 [0134.075] FlushFileBuffers (hFile=0xc24) returned 1 [0135.619] CloseHandle (hObject=0xc24) returned 1 [0135.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee08c0 [0135.621] wcscpy (in: _Dest=0x3ee08c0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.621] wcscat (in: _Dest=0x3ee08c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.621] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee08c0) returned 1 [0135.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26bd8) returned 1 Thread: id = 525 os_tid = 0x4c0 [0123.688] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx" (normalized: "c:\\users\\eebsym5\\documents\\uyodi-5ywpl3.docx")) returned 0x20 [0123.688] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx", dwFileAttributes=0x20) returned 1 [0128.526] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx" (normalized: "c:\\users\\eebsym5\\documents\\uyodi-5ywpl3.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc28 [0128.526] GetFileSizeEx (in: hFile=0xc28, lpFileSize=0xc0cfe4c | out: lpFileSize=0xc0cfe4c*=89067) returned 1 [0128.526] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x15be7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.526] ReadFile (in: hFile=0xc28, lpBuffer=0xc0cfe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc0cfe38, lpOverlapped=0x0 | out: lpBuffer=0xc0cfe28*, lpNumberOfBytesRead=0xc0cfe38*=0x4, lpOverlapped=0x0) returned 1 [0128.528] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0128.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0128.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0128.528] NtQuerySystemTime (in: CurrentTime=0xc0cfdc0 | out: CurrentTime=0xc0cfdc0*=132462177079188000) returned 0x0 [0128.528] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x4f0e9ea4 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x344c4c11 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x28e98447 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x18429b16 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x792d0693 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x707c5c0d [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x118ce939 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x3e648fac [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x703e4b18 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x4b0a1296 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x2b5c862f [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x441799bf [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x4f6e820a [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x64cf921f [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x5d64858c [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x465924b5 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x4b511834 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x478b6e3f [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x284d0b98 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x20f3254e [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x6a878221 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x13825879 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x5bddd266 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x44be4dfc [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x34dfb [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x65fd4a0c [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x526b64b1 [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x30efb46c [0128.529] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x7745da49 [0128.530] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x278d963 [0128.530] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x78323f4b [0128.530] RtlRandomEx (in: Seed=0xc0cfdb8 | out: Seed=0xc0cfdb8) returned 0x766be362 [0128.539] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.539] ReadFile (in: hFile=0xc28, lpBuffer=0x7c453c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0cfdc0, lpOverlapped=0x0 | out: lpBuffer=0x7c453c0*, lpNumberOfBytesRead=0xc0cfdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0128.540] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55ac0 [0128.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e508 [0128.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0128.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0128.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c48fc8 [0128.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0128.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0128.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0128.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0128.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55ac0) returned 1 [0128.540] WriteFile (in: hFile=0xc28, lpBuffer=0x7c48fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0cfdc0, lpOverlapped=0x0 | out: lpBuffer=0x7c48fc8*, lpNumberOfBytesWritten=0xc0cfdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0129.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c48fc8) returned 1 [0129.587] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.588] ReadFile (in: hFile=0xc28, lpBuffer=0x7c453c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0cfdc0, lpOverlapped=0x0 | out: lpBuffer=0x7c453c0*, lpNumberOfBytesRead=0xc0cfdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0129.588] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55a78 [0129.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0129.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0129.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0129.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c48fc8 [0129.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0129.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0129.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0129.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0129.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55a78) returned 1 [0129.589] WriteFile (in: hFile=0xc28, lpBuffer=0x7c48fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0cfdc0, lpOverlapped=0x0 | out: lpBuffer=0x7c48fc8*, lpNumberOfBytesWritten=0xc0cfdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0131.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c48fc8) returned 1 [0131.147] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x11feb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.147] ReadFile (in: hFile=0xc28, lpBuffer=0x7c453c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc0cfdc0, lpOverlapped=0x0 | out: lpBuffer=0x7c453c0*, lpNumberOfBytesRead=0xc0cfdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0131.148] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x11feb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08268 [0131.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0131.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0131.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0131.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c48fc8 [0131.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0131.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0131.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0131.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0131.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08268) returned 1 [0131.149] WriteFile (in: hFile=0xc28, lpBuffer=0x7c48fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc0cfdc0, lpOverlapped=0x0 | out: lpBuffer=0x7c48fc8*, lpNumberOfBytesWritten=0xc0cfdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0131.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c48fc8) returned 1 [0131.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf198 [0131.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0131.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e159b8 [0131.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0131.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0131.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0131.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0131.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24e90) returned 1 [0131.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dcde38 [0131.893] SetFilePointerEx (in: hFile=0xc28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.893] WriteFile (in: hFile=0xc28, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0xc0cfe40, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0xc0cfe40*=0x154, lpOverlapped=0x0) returned 1 [0132.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0132.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e159b8) returned 1 [0132.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0132.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15b40) returned 1 [0132.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf198) returned 1 [0132.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bb0) returned 1 [0132.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0132.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d68) returned 1 [0132.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23a70 [0132.610] wcscpy (in: _Dest=0x7a23a70, _Source="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx") returned="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx" [0132.610] wcscat (in: _Dest=0x7a23a70, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx.68814f" [0132.610] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx.68814f", NtPathName=0xc0cfdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\UyODi-5ywPL3.docx.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c3a0 [0132.610] NtSetInformationFile (FileHandle=0xc28, IoStatusBlock=0xc0cfdc0, FileInformation=0x3f3c3a0, Length=0x7e, FileInformationClass=0xa) returned 0x0 [0132.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 [0132.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33860) returned 1 [0132.670] NtQueryInformationFile (in: FileHandle=0xc28, IoStatusBlock=0xc0cfd90, FileInformation=0xc0cfd98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc0cfd90, FileInformation=0xc0cfd98) returned 0x0 [0132.670] NtSetInformationFile (FileHandle=0xc28, IoStatusBlock=0xc0cfd90, FileInformation=0xc0cfd98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a70) returned 1 [0132.673] FlushFileBuffers (hFile=0xc28) returned 1 [0135.212] CloseHandle (hObject=0xc28) returned 1 [0135.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee01d8 [0135.216] wcscpy (in: _Dest=0x3ee01d8, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.216] wcscat (in: _Dest=0x3ee01d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.216] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee01d8) returned 1 [0135.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0da0) returned 1 Thread: id = 526 os_tid = 0xb3c [0123.689] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\yDSivynzHsD9.pptx" (normalized: "c:\\users\\eebsym5\\documents\\ydsivynzhsd9.pptx")) returned 0x20 [0123.689] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\yDSivynzHsD9.pptx", dwFileAttributes=0x20) returned 1 [0128.542] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\yDSivynzHsD9.pptx" (normalized: "c:\\users\\eebsym5\\documents\\ydsivynzhsd9.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc20 [0128.542] GetFileSizeEx (in: hFile=0xc20, lpFileSize=0xc01fbbc | out: lpFileSize=0xc01fbbc*=70951) returned 1 [0128.542] SetFilePointerEx (in: hFile=0xc20, liDistanceToMove=0x11523, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.542] ReadFile (in: hFile=0xc20, lpBuffer=0xc01fb98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc01fba8, lpOverlapped=0x0 | out: lpBuffer=0xc01fb98*, lpNumberOfBytesRead=0xc01fba8*=0x4, lpOverlapped=0x0) returned 1 [0128.544] SetFilePointerEx (in: hFile=0xc20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0128.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0128.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0128.544] NtQuerySystemTime (in: CurrentTime=0xc01fb30 | out: CurrentTime=0xc01fb30*=132462177079344000) returned 0x0 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x73323203 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x14d062e6 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x11df86d2 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x54b2aca7 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x503ac9a1 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x87f5463 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x145bba24 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x57bd2f48 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x4174c70b [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x8d279c2 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x126b01f8 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x4b160da4 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x4126d15d [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0xdc0c485 [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0xcfac61b [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x18340f2c [0128.544] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x6ab25ae1 [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x2969b6f8 [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0xa4d9c27 [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x3ff381bc [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x16ce854b [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x5380b6cd [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x35560700 [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x3a67b124 [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x2e67caac [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x33d100f4 [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x5b5c5067 [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x50d94f46 [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0xc62dd8b [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0x1422a9b4 [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0xaf47fd1 [0128.545] RtlRandomEx (in: Seed=0xc01fb28 | out: Seed=0xc01fb28) returned 0xa67348b [0128.555] SetFilePointerEx (in: hFile=0xc20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.556] ReadFile (in: hFile=0xc20, lpBuffer=0x7c2eb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc01fb30, lpOverlapped=0x0 | out: lpBuffer=0x7c2eb90*, lpNumberOfBytesRead=0xc01fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0128.556] SetFilePointerEx (in: hFile=0xc20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55ac0 [0128.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e508 [0128.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0128.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0128.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c32798 [0128.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0128.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0128.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0128.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0128.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55ac0) returned 1 [0128.557] WriteFile (in: hFile=0xc20, lpBuffer=0x7c32798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc01fb30, lpOverlapped=0x0 | out: lpBuffer=0x7c32798*, lpNumberOfBytesWritten=0xc01fb30*=0x3c00, lpOverlapped=0x0) returned 1 [0129.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c32798) returned 1 [0129.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c2eb90) returned 1 [0129.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79950 [0129.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0129.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79288 [0129.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0129.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0129.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfc8) returned 1 [0129.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0129.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55a78) returned 1 [0129.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d555f0 [0129.591] SetFilePointerEx (in: hFile=0xc20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.591] WriteFile (in: hFile=0xc20, lpBuffer=0x3d555f0*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xc01fbb0, lpOverlapped=0x0 | out: lpBuffer=0x3d555f0*, lpNumberOfBytesWritten=0xc01fbb0*=0x114, lpOverlapped=0x0) returned 1 [0133.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55e68 [0133.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0133.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0133.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0133.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e868a8 [0133.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0133.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ae8 [0133.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ae8) returned 1 [0133.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0133.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55e68) returned 1 [0133.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3de6018 [0133.678] sprintf (in: _Dest=0x3de6018, _Format="%c%c" | out: _Dest="0e") returned 2 [0133.678] sprintf (in: _Dest=0x3de601a, _Format="%c%c" | out: _Dest="4e") returned 2 [0133.678] sprintf (in: _Dest=0x3de601c, _Format="%c%c" | out: _Dest="58") returned 2 [0133.678] sprintf (in: _Dest=0x3de601e, _Format="%c%c" | out: _Dest="17") returned 2 [0133.678] sprintf (in: _Dest=0x3de6020, _Format="%c%c" | out: _Dest="34") returned 2 [0133.678] sprintf (in: _Dest=0x3de6022, _Format="%c%c" | out: _Dest="6e") returned 2 [0133.678] sprintf (in: _Dest=0x3de6024, _Format="%c%c" | out: _Dest="41") returned 2 [0133.678] sprintf (in: _Dest=0x3de6026, _Format="%c%c" | out: _Dest="69") returned 2 [0133.679] sprintf (in: _Dest=0x3de6028, _Format="%c%c" | out: _Dest="b8") returned 2 [0133.679] sprintf (in: _Dest=0x3de602a, _Format="%c%c" | out: _Dest="ef") returned 2 [0133.679] sprintf (in: _Dest=0x3de602c, _Format="%c%c" | out: _Dest="7e") returned 2 [0133.679] sprintf (in: _Dest=0x3de602e, _Format="%c%c" | out: _Dest="98") returned 2 [0133.679] sprintf (in: _Dest=0x3de6030, _Format="%c%c" | out: _Dest="d9") returned 2 [0133.679] sprintf (in: _Dest=0x3de6032, _Format="%c%c" | out: _Dest="61") returned 2 [0133.679] sprintf (in: _Dest=0x3de6034, _Format="%c%c" | out: _Dest="81") returned 2 [0133.679] sprintf (in: _Dest=0x3de6036, _Format="%c%c" | out: _Dest="c4") returned 2 [0133.679] sprintf (in: _Dest=0x3de6038, _Format="%c%c" | out: _Dest="bf") returned 2 [0133.679] sprintf (in: _Dest=0x3de603a, _Format="%c%c" | out: _Dest="c1") returned 2 [0133.679] sprintf (in: _Dest=0x3de603c, _Format="%c%c" | out: _Dest="85") returned 2 [0133.679] sprintf (in: _Dest=0x3de603e, _Format="%c%c" | out: _Dest="de") returned 2 [0133.679] sprintf (in: _Dest=0x3de6040, _Format="%c%c" | out: _Dest="ea") returned 2 [0133.679] sprintf (in: _Dest=0x3de6042, _Format="%c%c" | out: _Dest="2e") returned 2 [0133.679] sprintf (in: _Dest=0x3de6044, _Format="%c%c" | out: _Dest="31") returned 2 [0133.679] sprintf (in: _Dest=0x3de6046, _Format="%c%c" | out: _Dest="03") returned 2 [0133.679] sprintf (in: _Dest=0x3de6048, _Format="%c%c" | out: _Dest="71") returned 2 [0133.679] sprintf (in: _Dest=0x3de604a, _Format="%c%c" | out: _Dest="f2") returned 2 [0133.679] sprintf (in: _Dest=0x3de604c, _Format="%c%c" | out: _Dest="95") returned 2 [0133.679] sprintf (in: _Dest=0x3de604e, _Format="%c%c" | out: _Dest="08") returned 2 [0133.679] sprintf (in: _Dest=0x3de6050, _Format="%c%c" | out: _Dest="d5") returned 2 [0133.679] sprintf (in: _Dest=0x3de6052, _Format="%c%c" | out: _Dest="5d") returned 2 [0133.680] sprintf (in: _Dest=0x3de6054, _Format="%c%c" | out: _Dest="17") returned 2 [0133.680] sprintf (in: _Dest=0x3de6056, _Format="%c%c" | out: _Dest="cc") returned 2 [0133.680] sprintf (in: _Dest=0x3de6058, _Format="%c%c" | out: _Dest="d6") returned 2 [0133.680] sprintf (in: _Dest=0x3de605a, _Format="%c%c" | out: _Dest="66") returned 2 [0133.680] RtlInitAnsiString (in: DestinationString=0xc01fb38, SourceString="0e4e5817346e4169b8ef7e98d96181c4bfc185deea2e310371f29508d55d17ccd666" | out: DestinationString="0e4e5817346e4169b8ef7e98d96181c4bfc185deea2e310371f29508d55d17ccd666") [0133.680] RtlAnsiStringToUnicodeString (in: DestinationString=0xc01fb30, SourceString="0e4e5817346e4169b8ef7e98d96181c4bfc185deea2e310371f29508d55d17ccd666", AllocateDestinationString=1 | out: DestinationString="0e4e5817346e4169b8ef7e98d96181c4bfc185deea2e310371f29508d55d17ccd666") returned 0x0 [0133.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5860 [0133.680] wcscat (in: _Dest=0x7a22ff0, _Source="0e4e5817346e4169b" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\0e4e5817346e4169b") returned="C:\\Users\\EEBsYm5\\Documents\\0e4e5817346e4169b" [0133.680] wcscat (in: _Dest=0x7a22ff0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\0e4e5817346e4169b.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\0e4e5817346e4169b.68814f" [0133.680] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\0e4e5817346e4169b.68814f", NtPathName=0xc01fb28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\0e4e5817346e4169b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba550 [0133.680] NtSetInformationFile (FileHandle=0xc20, IoStatusBlock=0xc01fb30, FileInformation=0x3eba550, Length=0x7e, FileInformationClass=0xa) returned 0x0 [0134.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 [0134.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6db78) returned 1 [0134.062] NtQueryInformationFile (in: FileHandle=0xc20, IoStatusBlock=0xc01fb00, FileInformation=0xc01fb08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc01fb00, FileInformation=0xc01fb08) returned 0x0 [0134.062] NtSetInformationFile (FileHandle=0xc20, IoStatusBlock=0xc01fb00, FileInformation=0xc01fb08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 [0134.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5860) returned 1 [0134.077] FlushFileBuffers (hFile=0xc20) returned 1 [0135.623] CloseHandle (hObject=0xc20) returned 1 [0135.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee08c0 [0135.626] wcscpy (in: _Dest=0x3ee08c0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.626] wcscat (in: _Dest=0x3ee08c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.626] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee08c0) returned 1 [0135.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0e08) returned 1 Thread: id = 527 os_tid = 0xbfc [0123.689] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\yfSxhA5dxbJ8DV.pptx" (normalized: "c:\\users\\eebsym5\\documents\\yfsxha5dxbj8dv.pptx")) returned 0x20 [0123.689] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\yfSxhA5dxbJ8DV.pptx", dwFileAttributes=0x20) returned 1 [0128.558] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\yfSxhA5dxbJ8DV.pptx" (normalized: "c:\\users\\eebsym5\\documents\\yfsxha5dxbj8dv.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc1c [0128.558] GetFileSizeEx (in: hFile=0xc1c, lpFileSize=0xb6afef4 | out: lpFileSize=0xb6afef4*=99891) returned 1 [0128.558] SetFilePointerEx (in: hFile=0xc1c, liDistanceToMove=0x1862f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.559] ReadFile (in: hFile=0xc1c, lpBuffer=0xb6afed0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb6afee0, lpOverlapped=0x0 | out: lpBuffer=0xb6afed0*, lpNumberOfBytesRead=0xb6afee0*=0x4, lpOverlapped=0x0) returned 1 [0128.560] SetFilePointerEx (in: hFile=0xc1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0128.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0128.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0128.560] NtQuerySystemTime (in: CurrentTime=0xb6afe68 | out: CurrentTime=0xb6afe68*=132462177079500000) returned 0x0 [0128.560] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x79dc9efb [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x37e55c0d [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0xf255025 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x7ad5895c [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x6119d7e5 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x50b86ccc [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x9590b95 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x4cc18e72 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0xe90300b [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x9017019 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x22776e66 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x1d16a691 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x7d050f8b [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x7ea6f75e [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x1f94b2c0 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x3acf0310 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x6f331f64 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x7030368d [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x35bac4c5 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x4317f7fe [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x710cfb55 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x6b454730 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x291b764b [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x2968f368 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0xe0e083 [0128.561] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x4eb2818a [0128.562] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x285db993 [0128.562] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x1691224e [0128.562] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x737e906f [0128.562] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0xe08a4c5 [0128.562] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x7641dda2 [0128.562] RtlRandomEx (in: Seed=0xb6afe60 | out: Seed=0xb6afe60) returned 0x5f619ab [0128.575] SetFilePointerEx (in: hFile=0xc1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.575] ReadFile (in: hFile=0xc1c, lpBuffer=0x7c363a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6afe68, lpOverlapped=0x0 | out: lpBuffer=0x7c363a0*, lpNumberOfBytesRead=0xb6afe68*=0x3c00, lpOverlapped=0x0) returned 1 [0128.575] SetFilePointerEx (in: hFile=0xc1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55ac0 [0128.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e508 [0128.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0128.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0128.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c39fa8 [0128.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0128.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0128.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0128.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0128.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55ac0) returned 1 [0128.576] WriteFile (in: hFile=0xc1c, lpBuffer=0x7c39fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6afe68, lpOverlapped=0x0 | out: lpBuffer=0x7c39fa8*, lpNumberOfBytesWritten=0xb6afe68*=0x3c00, lpOverlapped=0x0) returned 1 [0129.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c39fa8) returned 1 [0129.592] SetFilePointerEx (in: hFile=0xc1c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.592] ReadFile (in: hFile=0xc1c, lpBuffer=0x7c363a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6afe68, lpOverlapped=0x0 | out: lpBuffer=0x7c363a0*, lpNumberOfBytesRead=0xb6afe68*=0x3c00, lpOverlapped=0x0) returned 1 [0129.592] SetFilePointerEx (in: hFile=0xc1c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55a78 [0129.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0129.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0129.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfc8) returned 1 [0129.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c39fa8 [0129.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0129.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0129.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0129.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0129.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55a78) returned 1 [0129.593] WriteFile (in: hFile=0xc1c, lpBuffer=0x7c39fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6afe68, lpOverlapped=0x0 | out: lpBuffer=0x7c39fa8*, lpNumberOfBytesWritten=0xb6afe68*=0x3c00, lpOverlapped=0x0) returned 1 [0131.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c39fa8) returned 1 [0131.150] SetFilePointerEx (in: hFile=0xc1c, liDistanceToMove=0x14a33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.150] ReadFile (in: hFile=0xc1c, lpBuffer=0x7c363a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6afe68, lpOverlapped=0x0 | out: lpBuffer=0x7c363a0*, lpNumberOfBytesRead=0xb6afe68*=0x3c00, lpOverlapped=0x0) returned 1 [0131.151] SetFilePointerEx (in: hFile=0xc1c, liDistanceToMove=0x14a33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08268 [0131.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0131.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0131.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0131.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c39fa8 [0131.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0131.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0131.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e80) returned 1 [0131.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0131.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08268) returned 1 [0131.152] WriteFile (in: hFile=0xc1c, lpBuffer=0x7c39fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6afe68, lpOverlapped=0x0 | out: lpBuffer=0x7c39fa8*, lpNumberOfBytesWritten=0xb6afe68*=0x3c00, lpOverlapped=0x0) returned 1 [0131.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c39fa8) returned 1 [0131.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf818 [0131.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0131.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3067000 [0131.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0131.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0131.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0131.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0131.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24e90) returned 1 [0131.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x158) returned 0x3dcdfa0 [0131.895] SetFilePointerEx (in: hFile=0xc1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.895] WriteFile (in: hFile=0xc1c, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0xb6afee8, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xb6afee8*=0x158, lpOverlapped=0x0) returned 1 [0132.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25350 [0132.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0132.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0132.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d68) returned 1 [0132.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86b78 [0132.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0132.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0132.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0132.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0132.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4d) returned 0x7a27b10 [0132.612] sprintf (in: _Dest=0x7a27b10, _Format="%c%c" | out: _Dest="9a") returned 2 [0132.612] sprintf (in: _Dest=0x7a27b12, _Format="%c%c" | out: _Dest="bf") returned 2 [0132.612] sprintf (in: _Dest=0x7a27b14, _Format="%c%c" | out: _Dest="59") returned 2 [0132.612] sprintf (in: _Dest=0x7a27b16, _Format="%c%c" | out: _Dest="65") returned 2 [0132.612] sprintf (in: _Dest=0x7a27b18, _Format="%c%c" | out: _Dest="f0") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b1a, _Format="%c%c" | out: _Dest="94") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b1c, _Format="%c%c" | out: _Dest="e1") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b1e, _Format="%c%c" | out: _Dest="cc") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b20, _Format="%c%c" | out: _Dest="0b") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b22, _Format="%c%c" | out: _Dest="b0") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b24, _Format="%c%c" | out: _Dest="a3") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b26, _Format="%c%c" | out: _Dest="3c") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b28, _Format="%c%c" | out: _Dest="d1") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b2a, _Format="%c%c" | out: _Dest="f4") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b2c, _Format="%c%c" | out: _Dest="ce") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b2e, _Format="%c%c" | out: _Dest="c4") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b30, _Format="%c%c" | out: _Dest="01") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b32, _Format="%c%c" | out: _Dest="ab") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b34, _Format="%c%c" | out: _Dest="0a") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b36, _Format="%c%c" | out: _Dest="ac") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b38, _Format="%c%c" | out: _Dest="00") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b3a, _Format="%c%c" | out: _Dest="92") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b3c, _Format="%c%c" | out: _Dest="84") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b3e, _Format="%c%c" | out: _Dest="26") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b40, _Format="%c%c" | out: _Dest="68") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b42, _Format="%c%c" | out: _Dest="a0") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b44, _Format="%c%c" | out: _Dest="00") returned 2 [0132.613] sprintf (in: _Dest=0x7a27b46, _Format="%c%c" | out: _Dest="cd") returned 2 [0132.614] sprintf (in: _Dest=0x7a27b48, _Format="%c%c" | out: _Dest="34") returned 2 [0132.614] sprintf (in: _Dest=0x7a27b4a, _Format="%c%c" | out: _Dest="5b") returned 2 [0132.614] sprintf (in: _Dest=0x7a27b4c, _Format="%c%c" | out: _Dest="8b") returned 2 [0132.614] sprintf (in: _Dest=0x7a27b4e, _Format="%c%c" | out: _Dest="d4") returned 2 [0132.614] sprintf (in: _Dest=0x7a27b50, _Format="%c%c" | out: _Dest="58") returned 2 [0132.614] sprintf (in: _Dest=0x7a27b52, _Format="%c%c" | out: _Dest="d5") returned 2 [0132.614] sprintf (in: _Dest=0x7a27b54, _Format="%c%c" | out: _Dest="28") returned 2 [0132.614] sprintf (in: _Dest=0x7a27b56, _Format="%c%c" | out: _Dest="3f") returned 2 [0132.614] sprintf (in: _Dest=0x7a27b58, _Format="%c%c" | out: _Dest="ec") returned 2 [0132.614] sprintf (in: _Dest=0x7a27b5a, _Format="%c%c" | out: _Dest="0e") returned 2 [0132.614] RtlInitAnsiString (in: DestinationString=0xb6afe70, SourceString="9abf5965f094e1cc0bb0a33cd1f4cec401ab0aac0092842668a000cd345b8bd458d5283fec0e" | out: DestinationString="9abf5965f094e1cc0bb0a33cd1f4cec401ab0aac0092842668a000cd345b8bd458d5283fec0e") [0132.614] RtlAnsiStringToUnicodeString (in: DestinationString=0xb6afe68, SourceString="9abf5965f094e1cc0bb0a33cd1f4cec401ab0aac0092842668a000cd345b8bd458d5283fec0e", AllocateDestinationString=1 | out: DestinationString="9abf5965f094e1cc0bb0a33cd1f4cec401ab0aac0092842668a000cd345b8bd458d5283fec0e") returned 0x0 [0132.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x326430 [0132.614] wcscat (in: _Dest=0x348f48, _Source="9abf5965f094e1cc0bb" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\9abf5965f094e1cc0bb") returned="C:\\Users\\EEBsYm5\\Documents\\9abf5965f094e1cc0bb" [0132.614] wcscat (in: _Dest=0x348f48, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\9abf5965f094e1cc0bb.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\9abf5965f094e1cc0bb.68814f" [0132.614] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\9abf5965f094e1cc0bb.68814f", NtPathName=0xb6afe60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\9abf5965f094e1cc0bb.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1c28 [0132.615] NtSetInformationFile (FileHandle=0xc1c, IoStatusBlock=0xb6afe68, FileInformation=0x3df1c28, Length=0x82, FileInformationClass=0xa) returned 0x0 [0132.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1c28) returned 1 [0132.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a31c58) returned 1 [0132.674] NtQueryInformationFile (in: FileHandle=0xc1c, IoStatusBlock=0xb6afe38, FileInformation=0xb6afe40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb6afe38, FileInformation=0xb6afe40) returned 0x0 [0132.674] NtSetInformationFile (FileHandle=0xc1c, IoStatusBlock=0xb6afe38, FileInformation=0xb6afe40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x326430) returned 1 [0132.675] FlushFileBuffers (hFile=0xc1c) returned 1 [0135.217] CloseHandle (hObject=0xc1c) returned 1 [0135.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0da0 [0135.220] wcscpy (in: _Dest=0x3ee0da0, _Source="C:\\Users\\EEBsYm5\\Documents\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\") returned="C:\\Users\\EEBsYm5\\Documents\\" [0135.220] wcscat (in: _Dest=0x3ee0da0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" [0135.220] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\68814f-readme.txt")) returned 0x20 [0135.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0da0) returned 1 [0135.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0e70) returned 1 Thread: id = 528 os_tid = 0xbf8 [0123.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6248 [0123.690] wcscpy (in: _Dest=0x3de6248, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" [0123.690] wcscat (in: _Dest=0x3de6248, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" [0123.690] wcscat (in: _Dest=0x3de6248, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\*") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\*" [0123.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3020 [0123.690] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\*", lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9de6d20, ftCreationTime.dwHighDateTime=0x1d5dd7b, ftLastAccessTime.dwLowDateTime=0x33d1fa50, ftLastAccessTime.dwHighDateTime=0x1d5e593, ftLastWriteTime.dwLowDateTime=0x33d1fa50, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d480 [0123.690] wcscmp (_String1=".", _String2=".") returned 0 [0123.690] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9de6d20, ftCreationTime.dwHighDateTime=0x1d5dd7b, ftLastAccessTime.dwLowDateTime=0x33d1fa50, ftLastAccessTime.dwHighDateTime=0x1d5e593, ftLastWriteTime.dwLowDateTime=0x33d1fa50, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.690] wcscmp (_String1="..", _String2=".") returned 1 [0123.691] wcscmp (_String1="..", _String2="..") returned 0 [0123.691] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x278d11c0, ftCreationTime.dwHighDateTime=0x1d5e1e3, ftLastAccessTime.dwLowDateTime=0xb6354170, ftLastAccessTime.dwHighDateTime=0x1d5dff6, ftLastWriteTime.dwLowDateTime=0xb6354170, ftLastWriteTime.dwHighDateTime=0x1d5dff6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0b72X", cAlternateFileName="")) returned 1 [0123.691] wcscmp (_String1="0b72X", _String2=".") returned 1 [0123.691] wcscmp (_String1="0b72X", _String2="..") returned 1 [0123.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6a9a8 [0123.691] wcscpy (in: _Dest=0x3e6a9a8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" [0123.691] wcscat (in: _Dest=0x3e6a9a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" [0123.691] wcscat (in: _Dest=0x3e6a9a8, _Source="0b72X" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" [0131.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e6a9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0131.673] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c13a0b0, ftCreationTime.dwHighDateTime=0x1d5e517, ftLastAccessTime.dwLowDateTime=0x59dc9f60, ftLastAccessTime.dwHighDateTime=0x1d5e14d, ftLastWriteTime.dwLowDateTime=0x59dc9f60, ftLastWriteTime.dwHighDateTime=0x1d5e14d, nFileSizeHigh=0x0, nFileSizeLow=0xea54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELeS3Q.pps", cAlternateFileName="")) returned 1 [0131.673] wcscmp (_String1="ELeS3Q.pps", _String2=".") returned 1 [0131.673] wcscmp (_String1="ELeS3Q.pps", _String2="..") returned 1 [0131.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee12e8 [0131.673] wcscpy (in: _Dest=0x3ee12e8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" [0131.673] wcscat (in: _Dest=0x3ee12e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" [0131.673] wcscat (in: _Dest=0x3ee12e8, _Source="ELeS3Q.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\ELeS3Q.pps") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\ELeS3Q.pps" [0131.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee12e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704 [0131.681] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b34d0c0, ftCreationTime.dwHighDateTime=0x1d5e290, ftLastAccessTime.dwLowDateTime=0xebaf9c0, ftLastAccessTime.dwHighDateTime=0x1d5e1e6, ftLastWriteTime.dwLowDateTime=0xebaf9c0, ftLastWriteTime.dwHighDateTime=0x1d5e1e6, nFileSizeHigh=0x0, nFileSizeLow=0xa738, dwReserved0=0x0, dwReserved1=0x0, cFileName="FkkoFu 4Ew4.doc", cAlternateFileName="FKKOFU~1.DOC")) returned 1 [0131.682] wcscmp (_String1="FkkoFu 4Ew4.doc", _String2=".") returned 1 [0131.682] wcscmp (_String1="FkkoFu 4Ew4.doc", _String2="..") returned 1 [0131.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26318 [0131.682] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" [0131.682] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" [0131.682] wcscat (in: _Dest=0x7a26318, _Source="FkkoFu 4Ew4.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc" [0131.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0131.685] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd700420, ftCreationTime.dwHighDateTime=0x1d5e6e4, ftLastAccessTime.dwLowDateTime=0x3c900f0, ftLastAccessTime.dwHighDateTime=0x1d5e36e, ftLastWriteTime.dwLowDateTime=0x3c900f0, ftLastWriteTime.dwHighDateTime=0x1d5e36e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="j7DPDV-k", cAlternateFileName="")) returned 1 [0131.685] wcscmp (_String1="j7DPDV-k", _String2=".") returned 1 [0131.685] wcscmp (_String1="j7DPDV-k", _String2="..") returned 1 [0131.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f08 [0131.685] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" [0131.685] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" [0131.685] wcscat (in: _Dest=0x2fe6f08, _Source="j7DPDV-k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" [0131.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0131.687] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e06490, ftCreationTime.dwHighDateTime=0x1d5d915, ftLastAccessTime.dwLowDateTime=0x86b079a0, ftLastAccessTime.dwHighDateTime=0x1d5e1aa, ftLastWriteTime.dwLowDateTime=0x86b079a0, ftLastWriteTime.dwHighDateTime=0x1d5e1aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="K1EfFx06Kg7AtC", cAlternateFileName="K1EFFX~1")) returned 1 [0131.687] wcscmp (_String1="K1EfFx06Kg7AtC", _String2=".") returned 1 [0131.687] wcscmp (_String1="K1EfFx06Kg7AtC", _String2="..") returned 1 [0131.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a268c8 [0131.687] wcscpy (in: _Dest=0x7a268c8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" [0131.687] wcscat (in: _Dest=0x7a268c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" [0131.688] wcscat (in: _Dest=0x7a268c8, _Source="K1EfFx06Kg7AtC" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC" [0131.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a268c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0131.690] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65cc53f0, ftCreationTime.dwHighDateTime=0x1d5dd66, ftLastAccessTime.dwLowDateTime=0x3c4f2790, ftLastAccessTime.dwHighDateTime=0x1d5e3d4, ftLastWriteTime.dwLowDateTime=0x3c4f2790, ftLastWriteTime.dwHighDateTime=0x1d5e3d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="q3s-6c", cAlternateFileName="")) returned 1 [0131.690] wcscmp (_String1="q3s-6c", _String2=".") returned 1 [0131.690] wcscmp (_String1="q3s-6c", _String2="..") returned 1 [0131.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6968 [0131.690] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL" [0131.690] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" [0131.690] wcscat (in: _Dest=0x2fe6968, _Source="q3s-6c" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" [0131.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0131.692] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65cc53f0, ftCreationTime.dwHighDateTime=0x1d5dd66, ftLastAccessTime.dwLowDateTime=0x3c4f2790, ftLastAccessTime.dwHighDateTime=0x1d5e3d4, ftLastWriteTime.dwLowDateTime=0x3c4f2790, ftLastWriteTime.dwHighDateTime=0x1d5e3d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="q3s-6c", cAlternateFileName="")) returned 0 [0131.692] FindClose (in: hFindFile=0x7a2d480 | out: hFindFile=0x7a2d480) returned 1 [0131.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3020) returned 1 [0131.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6248) returned 1 [0131.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6298) returned 1 Thread: id = 529 os_tid = 0xba0 [0123.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest")) returned 0x20 [0125.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest", dwFileAttributes=0x20) returned 0 [0125.233] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.233] GetLastError () returned 0x5 [0125.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest", dwFileAttributes=0x20) returned 0 [0125.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 Thread: id = 530 os_tid = 0x1004 [0123.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini")) returned 0x20 [0125.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini", dwFileAttributes=0x20) returned 0 [0125.219] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.220] GetLastError () returned 0x5 [0125.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini", dwFileAttributes=0x20) returned 0 [0125.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6270) returned 1 Thread: id = 531 os_tid = 0x1008 [0123.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf200 [0123.701] wcscpy (in: _Dest=0x3edf200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0123.701] wcscat (in: _Dest=0x3edf200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0123.701] wcscat (in: _Dest=0x3edf200, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\*" [0123.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2b50 [0123.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca353c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf850 [0125.737] wcscmp (_String1=".", _String2=".") returned 0 [0125.737] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca353c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.737] wcscmp (_String1="..", _String2=".") returned 1 [0125.737] wcscmp (_String1="..", _String2="..") returned 0 [0125.737] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0125.737] wcscmp (_String1="nppdf32.CAT", _String2=".") returned 1 [0125.737] wcscmp (_String1="nppdf32.CAT", _String2="..") returned 1 [0125.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da5b70 [0125.737] wcscpy (in: _Dest=0x3da5b70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0125.737] wcscat (in: _Dest=0x3da5b70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0125.737] wcscat (in: _Dest=0x3da5b70, _Source="nppdf32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" [0139.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0139.627] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0139.627] wcscmp (_String1="nppdf32.CHS", _String2=".") returned 1 [0139.627] wcscmp (_String1="nppdf32.CHS", _String2="..") returned 1 [0139.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19998 [0139.627] wcscpy (in: _Dest=0x3e19998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.628] wcscat (in: _Dest=0x3e19998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.628] wcscat (in: _Dest=0x3e19998, _Source="nppdf32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" [0139.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2218 [0139.629] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0139.629] wcscmp (_String1="nppdf32.CHT", _String2=".") returned 1 [0139.629] wcscmp (_String1="nppdf32.CHT", _String2="..") returned 1 [0139.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a198 [0139.629] wcscpy (in: _Dest=0x3e1a198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.629] wcscat (in: _Dest=0x3e1a198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.629] wcscat (in: _Dest=0x3e1a198, _Source="nppdf32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" [0139.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x221c [0139.631] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0139.631] wcscmp (_String1="nppdf32.CZE", _String2=".") returned 1 [0139.631] wcscmp (_String1="nppdf32.CZE", _String2="..") returned 1 [0139.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19b18 [0139.631] wcscpy (in: _Dest=0x3e19b18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.631] wcscat (in: _Dest=0x3e19b18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.631] wcscat (in: _Dest=0x3e19b18, _Source="nppdf32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" [0139.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2220 [0139.632] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0139.632] wcscmp (_String1="nppdf32.DAN", _String2=".") returned 1 [0139.632] wcscmp (_String1="nppdf32.DAN", _String2="..") returned 1 [0139.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a118 [0139.632] wcscpy (in: _Dest=0x3e1a118, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.633] wcscat (in: _Dest=0x3e1a118, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.633] wcscat (in: _Dest=0x3e1a118, _Source="nppdf32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" [0139.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2224 [0139.640] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0139.641] wcscmp (_String1="nppdf32.DEU", _String2=".") returned 1 [0139.641] wcscmp (_String1="nppdf32.DEU", _String2="..") returned 1 [0139.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a098 [0139.641] wcscpy (in: _Dest=0x3e1a098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.641] wcscat (in: _Dest=0x3e1a098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.641] wcscat (in: _Dest=0x3e1a098, _Source="nppdf32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" [0139.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0139.642] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0139.642] wcscmp (_String1="nppdf32.dll", _String2=".") returned 1 [0139.642] wcscmp (_String1="nppdf32.dll", _String2="..") returned 1 [0139.642] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0139.642] wcscmp (_String1="nppdf32.ESP", _String2=".") returned 1 [0139.642] wcscmp (_String1="nppdf32.ESP", _String2="..") returned 1 [0139.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a298 [0139.642] wcscpy (in: _Dest=0x3e1a298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.642] wcscat (in: _Dest=0x3e1a298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.642] wcscat (in: _Dest=0x3e1a298, _Source="nppdf32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" [0139.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x222c [0139.644] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0139.644] wcscmp (_String1="nppdf32.EUQ", _String2=".") returned 1 [0139.644] wcscmp (_String1="nppdf32.EUQ", _String2="..") returned 1 [0139.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19398 [0139.644] wcscpy (in: _Dest=0x3e19398, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.644] wcscat (in: _Dest=0x3e19398, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.644] wcscat (in: _Dest=0x3e19398, _Source="nppdf32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" [0139.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230 [0139.645] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0139.645] wcscmp (_String1="nppdf32.FRA", _String2=".") returned 1 [0139.645] wcscmp (_String1="nppdf32.FRA", _String2="..") returned 1 [0139.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19898 [0139.645] wcscpy (in: _Dest=0x3e19898, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.645] wcscat (in: _Dest=0x3e19898, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.645] wcscat (in: _Dest=0x3e19898, _Source="nppdf32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" [0139.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0139.646] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0139.646] wcscmp (_String1="nppdf32.HRV", _String2=".") returned 1 [0139.646] wcscmp (_String1="nppdf32.HRV", _String2="..") returned 1 [0139.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a418 [0139.647] wcscpy (in: _Dest=0x3e1a418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.647] wcscat (in: _Dest=0x3e1a418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.647] wcscat (in: _Dest=0x3e1a418, _Source="nppdf32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" [0139.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0139.648] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0139.648] wcscmp (_String1="nppdf32.HUN", _String2=".") returned 1 [0139.648] wcscmp (_String1="nppdf32.HUN", _String2="..") returned 1 [0139.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19298 [0139.648] wcscpy (in: _Dest=0x3e19298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.648] wcscat (in: _Dest=0x3e19298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.648] wcscat (in: _Dest=0x3e19298, _Source="nppdf32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" [0139.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0139.649] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0139.649] wcscmp (_String1="nppdf32.ITA", _String2=".") returned 1 [0139.649] wcscmp (_String1="nppdf32.ITA", _String2="..") returned 1 [0139.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19698 [0139.649] wcscpy (in: _Dest=0x3e19698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.649] wcscat (in: _Dest=0x3e19698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.649] wcscat (in: _Dest=0x3e19698, _Source="nppdf32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" [0139.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0139.650] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0139.650] wcscmp (_String1="nppdf32.JPN", _String2=".") returned 1 [0139.650] wcscmp (_String1="nppdf32.JPN", _String2="..") returned 1 [0139.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19418 [0139.651] wcscpy (in: _Dest=0x3e19418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.651] wcscat (in: _Dest=0x3e19418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.651] wcscat (in: _Dest=0x3e19418, _Source="nppdf32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" [0139.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0139.654] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0139.654] wcscmp (_String1="nppdf32.KOR", _String2=".") returned 1 [0139.654] wcscmp (_String1="nppdf32.KOR", _String2="..") returned 1 [0139.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a818 [0139.654] wcscpy (in: _Dest=0x3e1a818, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.654] wcscat (in: _Dest=0x3e1a818, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.654] wcscat (in: _Dest=0x3e1a818, _Source="nppdf32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" [0139.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0139.655] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0139.655] wcscmp (_String1="nppdf32.NLD", _String2=".") returned 1 [0139.655] wcscmp (_String1="nppdf32.NLD", _String2="..") returned 1 [0139.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1ab18 [0139.655] wcscpy (in: _Dest=0x3e1ab18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.655] wcscat (in: _Dest=0x3e1ab18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.655] wcscat (in: _Dest=0x3e1ab18, _Source="nppdf32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" [0139.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ab18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0139.656] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0139.656] wcscmp (_String1="nppdf32.NOR", _String2=".") returned 1 [0139.656] wcscmp (_String1="nppdf32.NOR", _String2="..") returned 1 [0139.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x303290 [0139.656] wcscpy (in: _Dest=0x303290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.656] wcscat (in: _Dest=0x303290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.656] wcscat (in: _Dest=0x303290, _Source="nppdf32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" [0139.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x303290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0139.657] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0139.657] wcscmp (_String1="nppdf32.POL", _String2=".") returned 1 [0139.657] wcscmp (_String1="nppdf32.POL", _String2="..") returned 1 [0139.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47498 [0139.657] wcscpy (in: _Dest=0x3e47498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.657] wcscat (in: _Dest=0x3e47498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.657] wcscat (in: _Dest=0x3e47498, _Source="nppdf32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" [0139.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0139.658] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0139.658] wcscmp (_String1="nppdf32.PTB", _String2=".") returned 1 [0139.658] wcscmp (_String1="nppdf32.PTB", _String2="..") returned 1 [0139.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46518 [0139.658] wcscpy (in: _Dest=0x3e46518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.658] wcscat (in: _Dest=0x3e46518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.659] wcscat (in: _Dest=0x3e46518, _Source="nppdf32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" [0139.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0139.660] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0139.660] wcscmp (_String1="nppdf32.RUM", _String2=".") returned 1 [0139.660] wcscmp (_String1="nppdf32.RUM", _String2="..") returned 1 [0139.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46b98 [0139.660] wcscpy (in: _Dest=0x3e46b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.660] wcscat (in: _Dest=0x3e46b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.660] wcscat (in: _Dest=0x3e46b98, _Source="nppdf32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" [0139.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0139.661] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0139.661] wcscmp (_String1="nppdf32.RUS", _String2=".") returned 1 [0139.661] wcscmp (_String1="nppdf32.RUS", _String2="..") returned 1 [0139.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47398 [0139.661] wcscpy (in: _Dest=0x3e47398, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.661] wcscat (in: _Dest=0x3e47398, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.661] wcscat (in: _Dest=0x3e47398, _Source="nppdf32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" [0139.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260 [0139.662] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0139.662] wcscmp (_String1="nppdf32.SKY", _String2=".") returned 1 [0139.662] wcscmp (_String1="nppdf32.SKY", _String2="..") returned 1 [0139.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47518 [0139.662] wcscpy (in: _Dest=0x3e47518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.662] wcscat (in: _Dest=0x3e47518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.662] wcscat (in: _Dest=0x3e47518, _Source="nppdf32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" [0139.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0139.663] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0139.663] wcscmp (_String1="nppdf32.SLV", _String2=".") returned 1 [0139.663] wcscmp (_String1="nppdf32.SLV", _String2="..") returned 1 [0139.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46f98 [0139.664] wcscpy (in: _Dest=0x3e46f98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.664] wcscat (in: _Dest=0x3e46f98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.664] wcscat (in: _Dest=0x3e46f98, _Source="nppdf32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" [0139.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0139.665] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca353c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0139.665] wcscmp (_String1="nppdf32.SUO", _String2=".") returned 1 [0139.665] wcscmp (_String1="nppdf32.SUO", _String2="..") returned 1 [0139.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47a18 [0139.665] wcscpy (in: _Dest=0x3e47a18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.665] wcscat (in: _Dest=0x3e47a18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.665] wcscat (in: _Dest=0x3e47a18, _Source="nppdf32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" [0139.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x226c [0139.666] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdca5b520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0139.666] wcscmp (_String1="nppdf32.SVE", _String2=".") returned 1 [0139.666] wcscmp (_String1="nppdf32.SVE", _String2="..") returned 1 [0139.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47c18 [0139.666] wcscpy (in: _Dest=0x3e47c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.666] wcscat (in: _Dest=0x3e47c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.666] wcscat (in: _Dest=0x3e47c18, _Source="nppdf32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" [0139.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2270 [0139.667] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0139.667] wcscmp (_String1="nppdf32.TUR", _String2=".") returned 1 [0139.667] wcscmp (_String1="nppdf32.TUR", _String2="..") returned 1 [0139.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47098 [0139.667] wcscpy (in: _Dest=0x3e47098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.667] wcscat (in: _Dest=0x3e47098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.667] wcscat (in: _Dest=0x3e47098, _Source="nppdf32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" [0139.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0139.668] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0139.668] wcscmp (_String1="nppdf32.UKR", _String2=".") returned 1 [0139.668] wcscmp (_String1="nppdf32.UKR", _String2="..") returned 1 [0139.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46198 [0139.669] wcscpy (in: _Dest=0x3e46198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR" [0139.669] wcscat (in: _Dest=0x3e46198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\" [0139.669] wcscat (in: _Dest=0x3e46198, _Source="nppdf32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" [0139.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0139.670] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0139.670] FindClose (in: hFindFile=0x3dcf850 | out: hFindFile=0x3dcf850) returned 1 [0139.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2b50) returned 1 [0139.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf200) returned 1 [0139.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0ed8) returned 1 Thread: id = 532 os_tid = 0x100c [0123.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23300 [0123.702] wcscpy (in: _Dest=0x7a23300, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0123.702] wcscat (in: _Dest=0x7a23300, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0123.702] wcscat (in: _Dest=0x7a23300, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\*" [0123.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0123.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda5e8440, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066dc0 [0125.738] wcscmp (_String1=".", _String2=".") returned 0 [0125.738] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda5e8440, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.738] wcscmp (_String1="..", _String2=".") returned 1 [0125.738] wcscmp (_String1="..", _String2="..") returned 0 [0125.738] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CAT", cAlternateFileName="")) returned 1 [0125.738] wcscmp (_String1="nppdf32.CAT", _String2=".") returned 1 [0125.738] wcscmp (_String1="nppdf32.CAT", _String2="..") returned 1 [0125.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d308 [0125.739] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0125.739] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0125.739] wcscat (in: _Dest=0x3f3d308, _Source="nppdf32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" [0130.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0130.948] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHS", cAlternateFileName="")) returned 1 [0130.948] wcscmp (_String1="nppdf32.CHS", _String2=".") returned 1 [0130.948] wcscmp (_String1="nppdf32.CHS", _String2="..") returned 1 [0130.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9918 [0130.949] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.949] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.949] wcscat (in: _Dest=0x3eb9918, _Source="nppdf32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" [0130.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8 [0130.950] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CHT", cAlternateFileName="")) returned 1 [0130.950] wcscmp (_String1="nppdf32.CHT", _String2=".") returned 1 [0130.950] wcscmp (_String1="nppdf32.CHT", _String2="..") returned 1 [0130.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba660 [0130.951] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.951] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.951] wcscat (in: _Dest=0x3eba660, _Source="nppdf32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" [0130.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0130.952] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.CZE", cAlternateFileName="")) returned 1 [0130.952] wcscmp (_String1="nppdf32.CZE", _String2=".") returned 1 [0130.952] wcscmp (_String1="nppdf32.CZE", _String2="..") returned 1 [0130.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba6e8 [0130.952] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.953] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.953] wcscat (in: _Dest=0x3eba6e8, _Source="nppdf32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" [0130.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13fc [0130.954] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DAN", cAlternateFileName="")) returned 1 [0130.954] wcscmp (_String1="nppdf32.DAN", _String2=".") returned 1 [0130.954] wcscmp (_String1="nppdf32.DAN", _String2="..") returned 1 [0130.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba770 [0130.955] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.955] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.955] wcscat (in: _Dest=0x3eba770, _Source="nppdf32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" [0130.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1400 [0130.956] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.DEU", cAlternateFileName="")) returned 1 [0130.956] wcscmp (_String1="nppdf32.DEU", _String2=".") returned 1 [0130.956] wcscmp (_String1="nppdf32.DEU", _String2="..") returned 1 [0130.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9bc0 [0130.956] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.956] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.957] wcscat (in: _Dest=0x3eb9bc0, _Source="nppdf32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" [0130.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0130.958] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21190, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0130.958] wcscmp (_String1="nppdf32.dll", _String2=".") returned 1 [0130.958] wcscmp (_String1="nppdf32.dll", _String2="..") returned 1 [0130.958] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ESP", cAlternateFileName="")) returned 1 [0130.958] wcscmp (_String1="nppdf32.ESP", _String2=".") returned 1 [0130.958] wcscmp (_String1="nppdf32.ESP", _String2="..") returned 1 [0130.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb96f8 [0130.958] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.958] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.958] wcscat (in: _Dest=0x3eb96f8, _Source="nppdf32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" [0130.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0130.960] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.EUQ", cAlternateFileName="")) returned 1 [0130.960] wcscmp (_String1="nppdf32.EUQ", _String2=".") returned 1 [0130.960] wcscmp (_String1="nppdf32.EUQ", _String2="..") returned 1 [0130.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9de0 [0130.960] wcscpy (in: _Dest=0x3eb9de0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.960] wcscat (in: _Dest=0x3eb9de0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.960] wcscat (in: _Dest=0x3eb9de0, _Source="nppdf32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" [0130.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f0 [0130.961] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.FRA", cAlternateFileName="")) returned 1 [0130.961] wcscmp (_String1="nppdf32.FRA", _String2=".") returned 1 [0130.961] wcscmp (_String1="nppdf32.FRA", _String2="..") returned 1 [0130.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9d58 [0130.961] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.961] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.961] wcscat (in: _Dest=0x3eb9d58, _Source="nppdf32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" [0130.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0130.963] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HRV", cAlternateFileName="")) returned 1 [0130.963] wcscmp (_String1="nppdf32.HRV", _String2=".") returned 1 [0130.963] wcscmp (_String1="nppdf32.HRV", _String2="..") returned 1 [0130.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c318 [0130.963] wcscpy (in: _Dest=0x3f3c318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.963] wcscat (in: _Dest=0x3f3c318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.963] wcscat (in: _Dest=0x3f3c318, _Source="nppdf32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" [0130.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0130.964] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.HUN", cAlternateFileName="")) returned 1 [0130.964] wcscmp (_String1="nppdf32.HUN", _String2=".") returned 1 [0130.964] wcscmp (_String1="nppdf32.HUN", _String2="..") returned 1 [0130.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c290 [0130.964] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.964] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.964] wcscat (in: _Dest=0x3f3c290, _Source="nppdf32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" [0130.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0130.966] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.ITA", cAlternateFileName="")) returned 1 [0130.966] wcscmp (_String1="nppdf32.ITA", _String2=".") returned 1 [0130.966] wcscmp (_String1="nppdf32.ITA", _String2="..") returned 1 [0130.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bed8 [0130.966] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.966] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.966] wcscat (in: _Dest=0x3f3bed8, _Source="nppdf32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" [0130.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4 [0130.967] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.JPN", cAlternateFileName="")) returned 1 [0130.967] wcscmp (_String1="nppdf32.JPN", _String2=".") returned 1 [0130.967] wcscmp (_String1="nppdf32.JPN", _String2="..") returned 1 [0130.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c180 [0130.967] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.968] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.968] wcscat (in: _Dest=0x3f3c180, _Source="nppdf32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" [0130.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec [0130.969] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.KOR", cAlternateFileName="")) returned 1 [0130.969] wcscmp (_String1="nppdf32.KOR", _String2=".") returned 1 [0130.969] wcscmp (_String1="nppdf32.KOR", _String2="..") returned 1 [0130.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c208 [0130.970] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.970] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.970] wcscat (in: _Dest=0x3f3c208, _Source="nppdf32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" [0130.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0130.971] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NLD", cAlternateFileName="")) returned 1 [0130.971] wcscmp (_String1="nppdf32.NLD", _String2=".") returned 1 [0130.971] wcscmp (_String1="nppdf32.NLD", _String2="..") returned 1 [0130.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3db00 [0130.972] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.972] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.972] wcscat (in: _Dest=0x3f3db00, _Source="nppdf32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" [0130.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0130.973] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.NOR", cAlternateFileName="")) returned 1 [0130.974] wcscmp (_String1="nppdf32.NOR", _String2=".") returned 1 [0130.974] wcscmp (_String1="nppdf32.NOR", _String2="..") returned 1 [0130.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3be50 [0130.974] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.974] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.974] wcscat (in: _Dest=0x3f3be50, _Source="nppdf32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" [0130.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0130.976] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.POL", cAlternateFileName="")) returned 1 [0130.976] wcscmp (_String1="nppdf32.POL", _String2=".") returned 1 [0130.976] wcscmp (_String1="nppdf32.POL", _String2="..") returned 1 [0130.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c3a0 [0130.976] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.976] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.976] wcscat (in: _Dest=0x3f3c3a0, _Source="nppdf32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" [0130.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0130.978] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4b7940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.PTB", cAlternateFileName="")) returned 1 [0130.978] wcscmp (_String1="nppdf32.PTB", _String2=".") returned 1 [0130.978] wcscmp (_String1="nppdf32.PTB", _String2="..") returned 1 [0130.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c428 [0130.978] wcscpy (in: _Dest=0x3f3c428, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.978] wcscat (in: _Dest=0x3f3c428, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.978] wcscat (in: _Dest=0x3f3c428, _Source="nppdf32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" [0130.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0130.980] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUM", cAlternateFileName="")) returned 1 [0130.980] wcscmp (_String1="nppdf32.RUM", _String2=".") returned 1 [0130.980] wcscmp (_String1="nppdf32.RUM", _String2="..") returned 1 [0130.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c4b0 [0130.980] wcscpy (in: _Dest=0x3f3c4b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.980] wcscat (in: _Dest=0x3f3c4b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.980] wcscat (in: _Dest=0x3f3c4b0, _Source="nppdf32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" [0130.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0130.982] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.RUS", cAlternateFileName="")) returned 1 [0130.982] wcscmp (_String1="nppdf32.RUS", _String2=".") returned 1 [0130.982] wcscmp (_String1="nppdf32.RUS", _String2="..") returned 1 [0130.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c538 [0130.983] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0130.983] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0130.983] wcscat (in: _Dest=0x3f3c538, _Source="nppdf32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" [0130.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0131.761] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SKY", cAlternateFileName="")) returned 1 [0131.761] wcscmp (_String1="nppdf32.SKY", _String2=".") returned 1 [0131.761] wcscmp (_String1="nppdf32.SKY", _String2="..") returned 1 [0131.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1ced8 [0131.761] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0131.761] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0131.761] wcscat (in: _Dest=0x3e1ced8, _Source="nppdf32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" [0136.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0136.555] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SLV", cAlternateFileName="")) returned 1 [0136.555] wcscmp (_String1="nppdf32.SLV", _String2=".") returned 1 [0136.555] wcscmp (_String1="nppdf32.SLV", _String2="..") returned 1 [0136.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9098 [0136.555] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0136.555] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0136.555] wcscat (in: _Dest=0x3eb9098, _Source="nppdf32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" [0136.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0136.556] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SUO", cAlternateFileName="")) returned 1 [0136.556] wcscmp (_String1="nppdf32.SUO", _String2=".") returned 1 [0136.556] wcscmp (_String1="nppdf32.SUO", _String2="..") returned 1 [0136.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba6e8 [0136.557] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0136.557] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0136.557] wcscat (in: _Dest=0x3eba6e8, _Source="nppdf32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" [0136.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0136.558] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.SVE", cAlternateFileName="")) returned 1 [0136.558] wcscmp (_String1="nppdf32.SVE", _String2=".") returned 1 [0136.558] wcscmp (_String1="nppdf32.SVE", _String2="..") returned 1 [0136.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba770 [0136.558] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0136.558] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0136.558] wcscat (in: _Dest=0x3eba770, _Source="nppdf32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" [0136.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0136.559] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.TUR", cAlternateFileName="")) returned 1 [0136.559] wcscmp (_String1="nppdf32.TUR", _String2=".") returned 1 [0136.559] wcscmp (_String1="nppdf32.TUR", _String2="..") returned 1 [0136.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9670 [0136.559] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0136.559] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0136.559] wcscat (in: _Dest=0x3eb9670, _Source="nppdf32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" [0136.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0136.560] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 1 [0136.560] wcscmp (_String1="nppdf32.UKR", _String2=".") returned 1 [0136.560] wcscmp (_String1="nppdf32.UKR", _String2="..") returned 1 [0136.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9890 [0136.560] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser" [0136.560] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\" [0136.560] wcscat (in: _Dest=0x3eb9890, _Source="nppdf32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" [0136.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0136.561] FindNextFileW (in: hFindFile=0x3066dc0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.UKR", cAlternateFileName="")) returned 0 [0136.561] FindClose (in: hFindFile=0x3066dc0 | out: hFindFile=0x3066dc0) returned 1 [0136.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0136.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23300) returned 1 [0136.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26c48) returned 1 Thread: id = 533 os_tid = 0x1010 [0123.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\cryptocme2.sig")) returned 0x20 [0125.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig", dwFileAttributes=0x20) returned 0 [0125.231] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\cryptocme2.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.231] GetLastError () returned 0x5 [0125.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig", dwFileAttributes=0x20) returned 0 [0125.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 Thread: id = 534 os_tid = 0x1014 [0123.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0123.710] wcscpy (in: _Dest=0x3f3f650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0123.711] wcscat (in: _Dest=0x3f3f650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0123.711] wcscat (in: _Dest=0x3f3f650, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*" [0123.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3e90 [0123.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0125.739] wcscmp (_String1=".", _String2=".") returned 0 [0125.739] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.739] wcscmp (_String1="..", _String2=".") returned 1 [0125.739] wcscmp (_String1="..", _String2="..") returned 0 [0125.739] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0125.740] wcscmp (_String1="CAT", _String2=".") returned 1 [0125.740] wcscmp (_String1="CAT", _String2="..") returned 1 [0125.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da6770 [0125.740] wcscpy (in: _Dest=0x3da6770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0125.740] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0125.740] wcscat (in: _Dest=0x3da6770, _Source="CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0133.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da6770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0133.137] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb65ec0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0133.137] wcscmp (_String1="CHS", _String2=".") returned 1 [0133.137] wcscmp (_String1="CHS", _String2="..") returned 1 [0133.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47898 [0133.137] wcscpy (in: _Dest=0x3e47898, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.137] wcscat (in: _Dest=0x3e47898, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.137] wcscat (in: _Dest=0x3e47898, _Source="CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0133.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0133.138] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb3fd60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0133.138] wcscmp (_String1="CHT", _String2=".") returned 1 [0133.139] wcscmp (_String1="CHT", _String2="..") returned 1 [0133.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47a18 [0133.139] wcscpy (in: _Dest=0x3e47a18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.139] wcscat (in: _Dest=0x3e47a18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.139] wcscat (in: _Dest=0x3e47a18, _Source="CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0133.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0133.140] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0133.140] wcscmp (_String1="CZE", _String2=".") returned 1 [0133.140] wcscmp (_String1="CZE", _String2="..") returned 1 [0133.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47218 [0133.140] wcscpy (in: _Dest=0x3e47218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.141] wcscat (in: _Dest=0x3e47218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.141] wcscat (in: _Dest=0x3e47218, _Source="CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0133.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0133.142] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb19c00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb19c00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0133.142] wcscmp (_String1="DAN", _String2=".") returned 1 [0133.142] wcscmp (_String1="DAN", _String2="..") returned 1 [0133.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47d98 [0133.142] wcscpy (in: _Dest=0x3e47d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.142] wcscat (in: _Dest=0x3e47d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.142] wcscat (in: _Dest=0x3e47d98, _Source="DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0133.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0133.144] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0133.144] wcscmp (_String1="DEU", _String2=".") returned 1 [0133.144] wcscmp (_String1="DEU", _String2="..") returned 1 [0133.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46f98 [0133.144] wcscpy (in: _Dest=0x3e46f98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.144] wcscat (in: _Dest=0x3e46f98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.144] wcscat (in: _Dest=0x3e46f98, _Source="DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0133.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e46f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0133.146] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0133.146] wcscmp (_String1="ENU", _String2=".") returned 1 [0133.146] wcscmp (_String1="ENU", _String2="..") returned 1 [0133.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47698 [0133.146] wcscpy (in: _Dest=0x3e47698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.146] wcscat (in: _Dest=0x3e47698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.146] wcscat (in: _Dest=0x3e47698, _Source="ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0133.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0133.147] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0133.147] wcscmp (_String1="ESP", _String2=".") returned 1 [0133.147] wcscmp (_String1="ESP", _String2="..") returned 1 [0133.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47a98 [0133.147] wcscpy (in: _Dest=0x3e47a98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.148] wcscat (in: _Dest=0x3e47a98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.148] wcscat (in: _Dest=0x3e47a98, _Source="ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0133.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0133.149] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0133.149] wcscmp (_String1="EUQ", _String2=".") returned 1 [0133.149] wcscmp (_String1="EUQ", _String2="..") returned 1 [0133.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47418 [0133.149] wcscpy (in: _Dest=0x3e47418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.149] wcscat (in: _Dest=0x3e47418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.149] wcscat (in: _Dest=0x3e47418, _Source="EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" [0133.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0133.151] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0133.151] wcscmp (_String1="FRA", _String2=".") returned 1 [0133.151] wcscmp (_String1="FRA", _String2="..") returned 1 [0133.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47518 [0133.151] wcscpy (in: _Dest=0x3e47518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.151] wcscat (in: _Dest=0x3e47518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.151] wcscat (in: _Dest=0x3e47518, _Source="FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0133.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0133.153] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0133.153] wcscmp (_String1="HRV", _String2=".") returned 1 [0133.153] wcscmp (_String1="HRV", _String2="..") returned 1 [0133.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47c18 [0133.153] wcscpy (in: _Dest=0x3e47c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.153] wcscat (in: _Dest=0x3e47c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.153] wcscat (in: _Dest=0x3e47c18, _Source="HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0133.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0133.155] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0133.155] wcscmp (_String1="HUN", _String2=".") returned 1 [0133.155] wcscmp (_String1="HUN", _String2="..") returned 1 [0133.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47998 [0133.155] wcscpy (in: _Dest=0x3e47998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.155] wcscat (in: _Dest=0x3e47998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.155] wcscat (in: _Dest=0x3e47998, _Source="HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0133.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0133.157] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0133.157] wcscmp (_String1="ITA", _String2=".") returned 1 [0133.157] wcscmp (_String1="ITA", _String2="..") returned 1 [0133.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47398 [0133.157] wcscpy (in: _Dest=0x3e47398, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.157] wcscat (in: _Dest=0x3e47398, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.157] wcscat (in: _Dest=0x3e47398, _Source="ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0133.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0133.159] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0133.159] wcscmp (_String1="JPN", _String2=".") returned 1 [0133.159] wcscmp (_String1="JPN", _String2="..") returned 1 [0133.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e48018 [0133.159] wcscpy (in: _Dest=0x3e48018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.159] wcscat (in: _Dest=0x3e48018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.159] wcscat (in: _Dest=0x3e48018, _Source="JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0133.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e48018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0133.160] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0133.160] wcscmp (_String1="KOR", _String2=".") returned 1 [0133.160] wcscmp (_String1="KOR", _String2="..") returned 1 [0133.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46b98 [0133.161] wcscpy (in: _Dest=0x3e46b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.161] wcscat (in: _Dest=0x3e46b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.161] wcscat (in: _Dest=0x3e46b98, _Source="KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0133.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e46b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0133.162] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0133.162] wcscmp (_String1="NLD", _String2=".") returned 1 [0133.162] wcscmp (_String1="NLD", _String2="..") returned 1 [0133.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47d18 [0133.162] wcscpy (in: _Dest=0x3e47d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.162] wcscat (in: _Dest=0x3e47d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.163] wcscat (in: _Dest=0x3e47d18, _Source="NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0133.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0133.164] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0133.164] wcscmp (_String1="NOR", _String2=".") returned 1 [0133.164] wcscmp (_String1="NOR", _String2="..") returned 1 [0133.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47b98 [0133.164] wcscpy (in: _Dest=0x3e47b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.164] wcscat (in: _Dest=0x3e47b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.164] wcscat (in: _Dest=0x3e47b98, _Source="NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0133.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0133.166] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0133.166] wcscmp (_String1="POL", _String2=".") returned 1 [0133.166] wcscmp (_String1="POL", _String2="..") returned 1 [0133.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47c98 [0133.166] wcscpy (in: _Dest=0x3e47c98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.166] wcscat (in: _Dest=0x3e47c98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.166] wcscat (in: _Dest=0x3e47c98, _Source="POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0133.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0133.168] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0133.168] wcscmp (_String1="PTB", _String2=".") returned 1 [0133.168] wcscmp (_String1="PTB", _String2="..") returned 1 [0133.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47598 [0133.168] wcscpy (in: _Dest=0x3e47598, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.168] wcscat (in: _Dest=0x3e47598, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.168] wcscat (in: _Dest=0x3e47598, _Source="PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0133.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0133.170] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0133.170] wcscmp (_String1="RUM", _String2=".") returned 1 [0133.170] wcscmp (_String1="RUM", _String2="..") returned 1 [0133.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47198 [0133.170] wcscpy (in: _Dest=0x3e47198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.170] wcscat (in: _Dest=0x3e47198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.170] wcscat (in: _Dest=0x3e47198, _Source="RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0133.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0133.172] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0133.172] wcscmp (_String1="RUS", _String2=".") returned 1 [0133.172] wcscmp (_String1="RUS", _String2="..") returned 1 [0133.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47b18 [0133.172] wcscpy (in: _Dest=0x3e47b18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0133.172] wcscat (in: _Dest=0x3e47b18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0133.172] wcscat (in: _Dest=0x3e47b18, _Source="RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0133.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0134.610] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0134.610] wcscmp (_String1="SKY", _String2=".") returned 1 [0134.610] wcscmp (_String1="SKY", _String2="..") returned 1 [0134.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x2fcaa88 [0134.611] wcscpy (in: _Dest=0x2fcaa88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0134.611] wcscat (in: _Dest=0x2fcaa88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0134.611] wcscat (in: _Dest=0x2fcaa88, _Source="SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0140.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fcaa88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0140.387] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0140.387] wcscmp (_String1="SLV", _String2=".") returned 1 [0140.387] wcscmp (_String1="SLV", _String2="..") returned 1 [0140.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46c98 [0140.387] wcscpy (in: _Dest=0x3e46c98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0140.387] wcscat (in: _Dest=0x3e46c98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0140.387] wcscat (in: _Dest=0x3e46c98, _Source="SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0140.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e46c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0140.388] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0140.388] wcscmp (_String1="SUO", _String2=".") returned 1 [0140.388] wcscmp (_String1="SUO", _String2="..") returned 1 [0140.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3efb520 [0140.388] wcscpy (in: _Dest=0x3efb520, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0140.388] wcscat (in: _Dest=0x3efb520, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0140.388] wcscat (in: _Dest=0x3efb520, _Source="SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0140.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3efb520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x245c [0140.389] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce85ba0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0140.389] wcscmp (_String1="SVE", _String2=".") returned 1 [0140.389] wcscmp (_String1="SVE", _String2="..") returned 1 [0140.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3efab20 [0140.390] wcscpy (in: _Dest=0x3efab20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0140.390] wcscat (in: _Dest=0x3efab20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0140.390] wcscat (in: _Dest=0x3efab20, _Source="SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0140.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3efab20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0140.391] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0140.391] wcscmp (_String1="TUR", _String2=".") returned 1 [0140.391] wcscmp (_String1="TUR", _String2="..") returned 1 [0140.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3efb120 [0140.391] wcscpy (in: _Dest=0x3efb120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0140.391] wcscat (in: _Dest=0x3efb120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0140.391] wcscat (in: _Dest=0x3efb120, _Source="TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0140.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3efb120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0140.392] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0140.392] wcscmp (_String1="UKR", _String2=".") returned 1 [0140.392] wcscmp (_String1="UKR", _String2="..") returned 1 [0140.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3efb7a0 [0140.392] wcscpy (in: _Dest=0x3efb7a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates" [0140.392] wcscat (in: _Dest=0x3efb7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\" [0140.392] wcscat (in: _Dest=0x3efb7a0, _Source="UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0140.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3efb7a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0140.393] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0140.393] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0140.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3e90) returned 1 [0140.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0140.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 Thread: id = 535 os_tid = 0x1018 [0123.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0123.711] wcscpy (in: _Dest=0x3f3f560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" [0123.711] wcscat (in: _Dest=0x3f3f560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\" [0123.711] wcscat (in: _Dest=0x3f3f560, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*" [0123.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb4830 [0123.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d240 [0125.239] wcscmp (_String1=".", _String2=".") returned 0 [0125.239] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc67d160, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc67d160, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.239] wcscmp (_String1="..", _String2=".") returned 1 [0125.239] wcscmp (_String1="..", _String2="..") returned 0 [0125.239] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1 [0125.239] wcscmp (_String1="JSByteCodeWin.bin", _String2=".") returned 1 [0125.240] wcscmp (_String1="JSByteCodeWin.bin", _String2="..") returned 1 [0125.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb6310 [0125.269] wcscpy (in: _Dest=0x3eb6310, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts" [0125.269] wcscat (in: _Dest=0x3eb6310, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\" [0125.270] wcscat (in: _Dest=0x3eb6310, _Source="JSByteCodeWin.bin" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" [0129.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0129.172] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 0 [0129.172] FindClose (in: hFindFile=0x7a2d240 | out: hFindFile=0x7a2d240) returned 1 [0129.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb4830) returned 1 [0129.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0129.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 Thread: id = 536 os_tid = 0x101c [0123.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23370 [0123.712] wcscpy (in: _Dest=0x7a23370, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0123.712] wcscat (in: _Dest=0x7a23370, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0123.712] wcscat (in: _Dest=0x7a23370, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\*" [0123.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0123.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067340 [0125.742] wcscmp (_String1=".", _String2=".") returned 0 [0125.742] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.742] wcscmp (_String1="..", _String2=".") returned 1 [0125.742] wcscmp (_String1="..", _String2="..") returned 0 [0125.742] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0125.742] wcscmp (_String1="CAT", _String2=".") returned 1 [0125.742] wcscmp (_String1="CAT", _String2="..") returned 1 [0125.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0125.742] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0125.742] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0125.743] wcscat (in: _Dest=0x7a23840, _Source="CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0140.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0140.519] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0140.519] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\" [0140.519] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*" [0140.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0140.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0140.524] wcscmp (_String1=".", _String2=".") returned 0 [0140.524] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.524] wcscmp (_String1="..", _String2=".") returned 1 [0140.524] wcscmp (_String1="..", _String2="..") returned 0 [0140.524] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0140.524] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0140.524] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0140.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0140.524] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0140.524] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\" [0140.524] wcscat (in: _Dest=0x3f3d748, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" [0140.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini")) returned 0x20 [0140.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.580] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.580] GetLastError () returned 0x5 [0140.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0140.580] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0140.580] wcscmp (_String1="license.html", _String2=".") returned 1 [0140.580] wcscmp (_String1="license.html", _String2="..") returned 1 [0140.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0140.581] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT" [0140.581] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\" [0140.581] wcscat (in: _Dest=0x3df1b98, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" [0140.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html")) returned 0x20 [0140.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", dwFileAttributes=0x20) returned 0 [0140.581] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.581] GetLastError () returned 0x5 [0140.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", dwFileAttributes=0x20) returned 0 [0140.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.581] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0140.582] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0140.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0140.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0140.582] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd3487a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0140.582] wcscmp (_String1="CHS", _String2=".") returned 1 [0140.582] wcscmp (_String1="CHS", _String2="..") returned 1 [0140.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0140.582] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0140.582] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0140.582] wcscat (in: _Dest=0x7a23840, _Source="CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0140.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0140.582] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0140.582] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\" [0140.582] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*" [0140.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0140.583] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd3487a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b70 [0140.597] wcscmp (_String1=".", _String2=".") returned 0 [0140.597] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd3487a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.597] wcscmp (_String1="..", _String2=".") returned 1 [0140.597] wcscmp (_String1="..", _String2="..") returned 0 [0140.597] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0140.597] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0140.597] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0140.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d4a0 [0140.598] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0140.598] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\" [0140.598] wcscat (in: _Dest=0x3f3d4a0, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" [0140.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini")) returned 0x20 [0140.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.613] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.613] GetLastError () returned 0x5 [0140.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 [0140.613] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0140.613] wcscmp (_String1="license.html", _String2=".") returned 1 [0140.613] wcscmp (_String1="license.html", _String2="..") returned 1 [0140.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0140.613] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS" [0140.613] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\" [0140.613] wcscat (in: _Dest=0x3df1b98, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" [0140.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html")) returned 0x20 [0140.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", dwFileAttributes=0x20) returned 0 [0140.614] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.614] GetLastError () returned 0x5 [0140.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", dwFileAttributes=0x20) returned 0 [0140.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.614] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0140.614] FindClose (in: hFindFile=0x7ad7b70 | out: hFindFile=0x7ad7b70) returned 1 [0140.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0140.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0140.614] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0140.615] wcscmp (_String1="CHT", _String2=".") returned 1 [0140.615] wcscmp (_String1="CHT", _String2="..") returned 1 [0140.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0140.615] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0140.615] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0140.615] wcscat (in: _Dest=0x7a23840, _Source="CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0140.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0140.615] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0140.615] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\" [0140.615] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*" [0140.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0140.615] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7830 [0140.639] wcscmp (_String1=".", _String2=".") returned 0 [0140.639] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd3487a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.639] wcscmp (_String1="..", _String2=".") returned 1 [0140.639] wcscmp (_String1="..", _String2="..") returned 0 [0140.639] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0140.639] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0140.639] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0140.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d4a0 [0140.639] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0140.639] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\" [0140.639] wcscat (in: _Dest=0x3f3d4a0, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" [0140.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini")) returned 0x20 [0140.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.640] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.640] GetLastError () returned 0x5 [0140.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 [0140.640] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0140.640] wcscmp (_String1="license.html", _String2=".") returned 1 [0140.640] wcscmp (_String1="license.html", _String2="..") returned 1 [0140.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df30f8 [0140.640] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT" [0140.640] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\" [0140.640] wcscat (in: _Dest=0x3df30f8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" [0140.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html")) returned 0x20 [0140.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", dwFileAttributes=0x20) returned 0 [0140.641] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.641] GetLastError () returned 0x5 [0140.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", dwFileAttributes=0x20) returned 0 [0140.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 [0140.641] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd3487a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0140.641] FindClose (in: hFindFile=0x7ad7830 | out: hFindFile=0x7ad7830) returned 1 [0140.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0140.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0140.642] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0140.642] wcscmp (_String1="CZE", _String2=".") returned 1 [0140.642] wcscmp (_String1="CZE", _String2="..") returned 1 [0140.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0140.642] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0140.642] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0140.642] wcscat (in: _Dest=0x7a23840, _Source="CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0140.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0140.642] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0140.642] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\" [0140.642] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*" [0140.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0140.642] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b70 [0140.662] wcscmp (_String1=".", _String2=".") returned 0 [0140.662] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.662] wcscmp (_String1="..", _String2=".") returned 1 [0140.662] wcscmp (_String1="..", _String2="..") returned 0 [0140.662] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0140.662] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0140.662] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0140.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0140.662] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0140.662] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\" [0140.662] wcscat (in: _Dest=0x3f3d748, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" [0140.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini")) returned 0x20 [0140.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.683] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.683] GetLastError () returned 0x5 [0140.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0140.683] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0140.683] wcscmp (_String1="license.html", _String2=".") returned 1 [0140.683] wcscmp (_String1="license.html", _String2="..") returned 1 [0140.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0140.683] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE" [0140.683] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\" [0140.683] wcscat (in: _Dest=0x3df1b98, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" [0140.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html")) returned 0x20 [0140.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", dwFileAttributes=0x20) returned 0 [0140.684] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.684] GetLastError () returned 0x5 [0140.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", dwFileAttributes=0x20) returned 0 [0140.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.684] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0140.684] FindClose (in: hFindFile=0x7ad7b70 | out: hFindFile=0x7ad7b70) returned 1 [0140.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0140.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0140.685] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0140.685] wcscmp (_String1="DAN", _String2=".") returned 1 [0140.685] wcscmp (_String1="DAN", _String2="..") returned 1 [0140.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0140.685] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0140.685] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0140.685] wcscat (in: _Dest=0x7a23840, _Source="DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0140.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0140.685] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0140.685] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\" [0140.685] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*" [0140.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0140.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78f0 [0140.710] wcscmp (_String1=".", _String2=".") returned 0 [0140.710] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.710] wcscmp (_String1="..", _String2=".") returned 1 [0140.710] wcscmp (_String1="..", _String2="..") returned 0 [0140.710] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0140.710] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0140.711] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0140.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0140.711] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0140.711] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\" [0140.711] wcscat (in: _Dest=0x3f3d748, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" [0140.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini")) returned 0x20 [0140.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.711] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.711] GetLastError () returned 0x5 [0140.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0140.712] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0140.712] wcscmp (_String1="license.html", _String2=".") returned 1 [0140.712] wcscmp (_String1="license.html", _String2="..") returned 1 [0140.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df30f8 [0140.712] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN" [0140.712] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\" [0140.712] wcscat (in: _Dest=0x3df30f8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" [0140.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html")) returned 0x20 [0140.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", dwFileAttributes=0x20) returned 0 [0140.719] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.719] GetLastError () returned 0x5 [0140.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", dwFileAttributes=0x20) returned 0 [0140.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 [0140.720] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0140.720] FindClose (in: hFindFile=0x7ad78f0 | out: hFindFile=0x7ad78f0) returned 1 [0140.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0140.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0140.720] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0140.720] wcscmp (_String1="DEU", _String2=".") returned 1 [0140.720] wcscmp (_String1="DEU", _String2="..") returned 1 [0140.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0140.720] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0140.720] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0140.720] wcscat (in: _Dest=0x7a23840, _Source="DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0140.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0140.721] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0140.721] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\" [0140.721] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*" [0140.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0140.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78f0 [0140.721] wcscmp (_String1=".", _String2=".") returned 0 [0140.721] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.721] wcscmp (_String1="..", _String2=".") returned 1 [0140.721] wcscmp (_String1="..", _String2="..") returned 0 [0140.721] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0140.721] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0140.721] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0140.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0140.721] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0140.721] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\" [0140.721] wcscat (in: _Dest=0x3f3d748, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" [0140.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini")) returned 0x20 [0140.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.722] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.722] GetLastError () returned 0x5 [0140.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0140.722] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0140.722] wcscmp (_String1="license.html", _String2=".") returned 1 [0140.722] wcscmp (_String1="license.html", _String2="..") returned 1 [0140.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df30f8 [0140.722] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU" [0140.722] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\" [0140.722] wcscat (in: _Dest=0x3df30f8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" [0140.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html")) returned 0x20 [0140.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", dwFileAttributes=0x20) returned 0 [0140.723] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.723] GetLastError () returned 0x5 [0140.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", dwFileAttributes=0x20) returned 0 [0140.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 [0140.723] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0140.723] FindClose (in: hFindFile=0x7ad78f0 | out: hFindFile=0x7ad78f0) returned 1 [0140.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0140.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0140.724] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0140.724] wcscmp (_String1="ENU", _String2=".") returned 1 [0140.724] wcscmp (_String1="ENU", _String2="..") returned 1 [0140.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0140.724] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0140.724] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0140.724] wcscat (in: _Dest=0x7a23840, _Source="ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0140.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0140.724] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0140.724] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\" [0140.724] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*" [0140.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0140.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0140.743] wcscmp (_String1=".", _String2=".") returned 0 [0140.743] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.743] wcscmp (_String1="..", _String2=".") returned 1 [0140.743] wcscmp (_String1="..", _String2="..") returned 0 [0140.743] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0140.743] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0140.743] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0140.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0140.743] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0140.743] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\" [0140.743] wcscat (in: _Dest=0x3f3d748, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" [0140.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini")) returned 0x20 [0140.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.744] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.744] GetLastError () returned 0x5 [0140.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0140.744] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0140.744] wcscmp (_String1="license.html", _String2=".") returned 1 [0140.744] wcscmp (_String1="license.html", _String2="..") returned 1 [0140.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0140.744] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU" [0140.744] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\" [0140.745] wcscat (in: _Dest=0x3df1b98, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" [0140.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html")) returned 0x20 [0140.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", dwFileAttributes=0x20) returned 0 [0140.745] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.745] GetLastError () returned 0x5 [0140.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", dwFileAttributes=0x20) returned 0 [0140.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.746] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0140.746] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0140.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0140.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0140.746] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0140.746] wcscmp (_String1="ESP", _String2=".") returned 1 [0140.746] wcscmp (_String1="ESP", _String2="..") returned 1 [0140.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0140.746] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0140.746] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0140.746] wcscat (in: _Dest=0x7a23840, _Source="ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0140.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0140.747] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0140.747] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\" [0140.747] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*" [0140.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0140.747] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0140.836] wcscmp (_String1=".", _String2=".") returned 0 [0140.836] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.836] wcscmp (_String1="..", _String2=".") returned 1 [0140.836] wcscmp (_String1="..", _String2="..") returned 0 [0140.836] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0140.836] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0140.836] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0140.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0140.836] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0140.836] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\" [0140.836] wcscat (in: _Dest=0x3f3d748, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" [0140.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini")) returned 0x20 [0140.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.837] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.837] GetLastError () returned 0x5 [0140.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0140.837] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0140.837] wcscmp (_String1="license.html", _String2=".") returned 1 [0140.837] wcscmp (_String1="license.html", _String2="..") returned 1 [0140.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0140.837] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP" [0140.837] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\" [0140.837] wcscat (in: _Dest=0x3df1b98, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" [0140.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html")) returned 0x20 [0140.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", dwFileAttributes=0x20) returned 0 [0140.838] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.838] GetLastError () returned 0x5 [0140.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", dwFileAttributes=0x20) returned 0 [0140.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.838] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0140.838] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0140.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0140.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0140.839] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0140.839] wcscmp (_String1="EUQ", _String2=".") returned 1 [0140.839] wcscmp (_String1="EUQ", _String2="..") returned 1 [0140.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0140.839] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0140.839] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0140.839] wcscat (in: _Dest=0x7a23840, _Source="EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0140.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0140.839] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0140.839] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\" [0140.839] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*" [0140.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0140.840] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0140.840] wcscmp (_String1=".", _String2=".") returned 0 [0140.840] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.840] wcscmp (_String1="..", _String2=".") returned 1 [0140.840] wcscmp (_String1="..", _String2="..") returned 0 [0140.840] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0140.840] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0140.840] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0140.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0140.840] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0140.840] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\" [0140.840] wcscat (in: _Dest=0x3f3d748, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" [0140.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini")) returned 0x20 [0140.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.841] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.841] GetLastError () returned 0x5 [0140.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini", dwFileAttributes=0x20) returned 0 [0140.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0140.841] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0140.841] wcscmp (_String1="license.html", _String2=".") returned 1 [0140.841] wcscmp (_String1="license.html", _String2="..") returned 1 [0140.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0140.842] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ" [0140.842] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\" [0140.842] wcscat (in: _Dest=0x3df1b98, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" [0140.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html")) returned 0x20 [0140.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", dwFileAttributes=0x20) returned 0 [0140.842] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.842] GetLastError () returned 0x5 [0140.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", dwFileAttributes=0x20) returned 0 [0140.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.842] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0140.843] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0140.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0140.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0140.843] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0140.843] wcscmp (_String1="FRA", _String2=".") returned 1 [0140.843] wcscmp (_String1="FRA", _String2="..") returned 1 [0140.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0140.843] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0140.843] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0140.843] wcscat (in: _Dest=0x7a23840, _Source="FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0140.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0140.843] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0140.843] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\" [0140.844] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*" [0140.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0140.844] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7930 [0142.127] wcscmp (_String1=".", _String2=".") returned 0 [0142.127] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.127] wcscmp (_String1="..", _String2=".") returned 1 [0142.127] wcscmp (_String1="..", _String2="..") returned 0 [0142.127] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0142.127] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0142.127] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0142.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9098 [0142.127] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0142.127] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\" [0142.127] wcscat (in: _Dest=0x3eb9098, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" [0157.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0157.588] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0157.588] wcscmp (_String1="license.html", _String2=".") returned 1 [0157.588] wcscmp (_String1="license.html", _String2="..") returned 1 [0157.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61170 [0157.588] wcscpy (in: _Dest=0x7a61170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA" [0157.588] wcscat (in: _Dest=0x7a61170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\" [0157.588] wcscat (in: _Dest=0x7a61170, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" [0157.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0157.589] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0157.589] FindClose (in: hFindFile=0x7ad7930 | out: hFindFile=0x7ad7930) returned 1 [0157.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0157.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0157.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0157.590] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0157.590] wcscmp (_String1="HRV", _String2=".") returned 1 [0157.590] wcscmp (_String1="HRV", _String2="..") returned 1 [0157.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0157.590] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.590] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.590] wcscat (in: _Dest=0x7a23840, _Source="HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0157.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0157.592] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0157.592] wcscmp (_String1="HUN", _String2=".") returned 1 [0157.592] wcscmp (_String1="HUN", _String2="..") returned 1 [0157.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23610 [0157.592] wcscpy (in: _Dest=0x7a23610, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.592] wcscat (in: _Dest=0x7a23610, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.592] wcscat (in: _Dest=0x7a23610, _Source="HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0157.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0157.594] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0157.594] wcscmp (_String1="ITA", _String2=".") returned 1 [0157.594] wcscmp (_String1="ITA", _String2="..") returned 1 [0157.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23bc0 [0157.594] wcscpy (in: _Dest=0x7a23bc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.594] wcscat (in: _Dest=0x7a23bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.594] wcscat (in: _Dest=0x7a23bc0, _Source="ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0157.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0157.595] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0157.595] wcscmp (_String1="JPN", _String2=".") returned 1 [0157.595] wcscmp (_String1="JPN", _String2="..") returned 1 [0157.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23f40 [0157.595] wcscpy (in: _Dest=0x7a23f40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.596] wcscat (in: _Dest=0x7a23f40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.596] wcscat (in: _Dest=0x7a23f40, _Source="JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0157.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0157.597] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0157.597] wcscmp (_String1="KOR", _String2=".") returned 1 [0157.597] wcscmp (_String1="KOR", _String2="..") returned 1 [0157.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23ca0 [0157.597] wcscpy (in: _Dest=0x7a23ca0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.597] wcscat (in: _Dest=0x7a23ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.597] wcscat (in: _Dest=0x7a23ca0, _Source="KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0157.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0157.598] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0157.598] wcscmp (_String1="NLD", _String2=".") returned 1 [0157.598] wcscmp (_String1="NLD", _String2="..") returned 1 [0157.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23a70 [0157.598] wcscpy (in: _Dest=0x7a23a70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.598] wcscat (in: _Dest=0x7a23a70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.598] wcscat (in: _Dest=0x7a23a70, _Source="NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0157.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0157.603] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0157.603] wcscmp (_String1="NOR", _String2=".") returned 1 [0157.603] wcscmp (_String1="NOR", _String2="..") returned 1 [0157.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23290 [0157.603] wcscpy (in: _Dest=0x7a23290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.603] wcscat (in: _Dest=0x7a23290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.603] wcscat (in: _Dest=0x7a23290, _Source="NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0157.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0157.604] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0157.605] wcscmp (_String1="POL", _String2=".") returned 1 [0157.605] wcscmp (_String1="POL", _String2="..") returned 1 [0157.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a238b0 [0157.605] wcscpy (in: _Dest=0x7a238b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.605] wcscat (in: _Dest=0x7a238b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.605] wcscat (in: _Dest=0x7a238b0, _Source="POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0157.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a238b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0157.606] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0157.606] wcscmp (_String1="PTB", _String2=".") returned 1 [0157.606] wcscmp (_String1="PTB", _String2="..") returned 1 [0157.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23920 [0157.606] wcscpy (in: _Dest=0x7a23920, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.606] wcscat (in: _Dest=0x7a23920, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.606] wcscat (in: _Dest=0x7a23920, _Source="PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0157.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0157.607] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0157.607] wcscmp (_String1="RUM", _String2=".") returned 1 [0157.607] wcscmp (_String1="RUM", _String2="..") returned 1 [0157.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23760 [0157.607] wcscpy (in: _Dest=0x7a23760, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.607] wcscat (in: _Dest=0x7a23760, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.607] wcscat (in: _Dest=0x7a23760, _Source="RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0157.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0157.608] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0157.608] wcscmp (_String1="RUS", _String2=".") returned 1 [0157.609] wcscmp (_String1="RUS", _String2="..") returned 1 [0157.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a236f0 [0157.609] wcscpy (in: _Dest=0x7a236f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.609] wcscat (in: _Dest=0x7a236f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.609] wcscat (in: _Dest=0x7a236f0, _Source="RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0157.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a236f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0157.610] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0157.610] wcscmp (_String1="SKY", _String2=".") returned 1 [0157.610] wcscmp (_String1="SKY", _String2="..") returned 1 [0157.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23680 [0157.610] wcscpy (in: _Dest=0x7a23680, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.610] wcscat (in: _Dest=0x7a23680, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.610] wcscat (in: _Dest=0x7a23680, _Source="SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0157.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0157.611] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0157.611] wcscmp (_String1="SLV", _String2=".") returned 1 [0157.611] wcscmp (_String1="SLV", _String2="..") returned 1 [0157.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23530 [0157.611] wcscpy (in: _Dest=0x7a23530, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.611] wcscat (in: _Dest=0x7a23530, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.611] wcscat (in: _Dest=0x7a23530, _Source="SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0157.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0157.612] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0157.613] wcscmp (_String1="SUO", _String2=".") returned 1 [0157.613] wcscmp (_String1="SUO", _String2="..") returned 1 [0157.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23b50 [0157.613] wcscpy (in: _Dest=0x7a23b50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.613] wcscat (in: _Dest=0x7a23b50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.613] wcscat (in: _Dest=0x7a23b50, _Source="SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0157.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0157.614] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0157.614] wcscmp (_String1="SVE", _String2=".") returned 1 [0157.614] wcscmp (_String1="SVE", _String2="..") returned 1 [0157.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a230d0 [0157.614] wcscpy (in: _Dest=0x7a230d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.614] wcscat (in: _Dest=0x7a230d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.615] wcscat (in: _Dest=0x7a230d0, _Source="SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0157.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a230d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0157.616] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0157.616] wcscmp (_String1="TUR", _String2=".") returned 1 [0157.616] wcscmp (_String1="TUR", _String2="..") returned 1 [0157.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a235a0 [0157.616] wcscpy (in: _Dest=0x7a235a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.616] wcscat (in: _Dest=0x7a235a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.616] wcscat (in: _Dest=0x7a235a0, _Source="TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0157.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a235a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0157.618] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0157.618] wcscmp (_String1="UKR", _String2=".") returned 1 [0157.618] wcscmp (_String1="UKR", _String2="..") returned 1 [0157.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23990 [0157.618] wcscpy (in: _Dest=0x7a23990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal" [0157.618] wcscat (in: _Dest=0x7a23990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\" [0157.618] wcscat (in: _Dest=0x7a23990, _Source="UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0157.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0157.619] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0157.620] FindClose (in: hFindFile=0x3067340 | out: hFindFile=0x3067340) returned 1 [0157.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0157.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23370) returned 1 [0157.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0f40) returned 1 Thread: id = 537 os_tid = 0x1020 [0123.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a233e0 [0123.713] wcscpy (in: _Dest=0x7a233e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0123.713] wcscat (in: _Dest=0x7a233e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0123.713] wcscat (in: _Dest=0x7a233e0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\*" [0123.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0123.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067300 [0125.740] wcscmp (_String1=".", _String2=".") returned 0 [0125.740] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.741] wcscmp (_String1="..", _String2=".") returned 1 [0125.741] wcscmp (_String1="..", _String2="..") returned 0 [0125.741] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0125.741] wcscmp (_String1="ca_ES", _String2=".") returned 1 [0125.741] wcscmp (_String1="ca_ES", _String2="..") returned 1 [0125.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51020 [0125.741] wcscpy (in: _Dest=0x3d51020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0125.741] wcscat (in: _Dest=0x3d51020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0125.741] wcscat (in: _Dest=0x3d51020, _Source="ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5af0 [0140.518] wcscpy (in: _Dest=0x3da5af0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.518] wcscat (in: _Dest=0x3da5af0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.518] wcscat (in: _Dest=0x3da5af0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*" [0140.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb28e8 [0140.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0140.525] wcscmp (_String1=".", _String2=".") returned 0 [0140.525] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.525] wcscmp (_String1="..", _String2=".") returned 1 [0140.525] wcscmp (_String1="..", _String2="..") returned 0 [0140.525] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CAT", cAlternateFileName="ACCESS~1.CAT")) returned 1 [0140.525] wcscmp (_String1="accessibility.CAT", _String2=".") returned 1 [0140.525] wcscmp (_String1="accessibility.CAT", _String2="..") returned 1 [0140.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df59a0 [0140.526] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.526] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.526] wcscat (in: _Dest=0x3df59a0, _Source="accessibility.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" [0140.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat")) returned 0x20 [0140.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT", dwFileAttributes=0x20) returned 0 [0140.583] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.584] GetLastError () returned 0x5 [0140.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT", dwFileAttributes=0x20) returned 0 [0140.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 [0140.584] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1 [0140.584] wcscmp (_String1="Acroform.CAT", _String2=".") returned 1 [0140.584] wcscmp (_String1="Acroform.CAT", _String2="..") returned 1 [0140.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1b98 [0140.584] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.584] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.584] wcscat (in: _Dest=0x3df1b98, _Source="Acroform.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" [0140.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat")) returned 0x20 [0140.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT", dwFileAttributes=0x20) returned 0 [0140.599] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.599] GetLastError () returned 0x5 [0140.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT", dwFileAttributes=0x20) returned 0 [0140.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.600] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="ADOBEC~1.CAT")) returned 1 [0140.600] wcscmp (_String1="AdobeCollabSync.CAT", _String2=".") returned 1 [0140.600] wcscmp (_String1="AdobeCollabSync.CAT", _String2="..") returned 1 [0140.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df59a0 [0140.600] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.600] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.600] wcscat (in: _Dest=0x3df59a0, _Source="AdobeCollabSync.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" [0140.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat")) returned 0x20 [0140.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT", dwFileAttributes=0x20) returned 0 [0140.626] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.627] GetLastError () returned 0x5 [0140.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT", dwFileAttributes=0x20) returned 0 [0140.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 [0140.627] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1 [0140.627] wcscmp (_String1="Annots.CAT", _String2=".") returned 1 [0140.627] wcscmp (_String1="Annots.CAT", _String2="..") returned 1 [0140.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df1b98 [0140.627] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.627] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.627] wcscat (in: _Dest=0x3df1b98, _Source="Annots.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" [0140.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat")) returned 0x20 [0140.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT", dwFileAttributes=0x20) returned 0 [0140.653] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.653] GetLastError () returned 0x5 [0140.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT", dwFileAttributes=0x20) returned 0 [0140.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.653] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="BRDLAN~1.CAT")) returned 1 [0140.653] wcscmp (_String1="BRdlang32.CAT", _String2=".") returned 1 [0140.653] wcscmp (_String1="BRdlang32.CAT", _String2="..") returned 1 [0140.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6b68 [0140.654] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.654] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.654] wcscat (in: _Dest=0x7ad6b68, _Source="BRdlang32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" [0140.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat")) returned 0x20 [0140.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT", dwFileAttributes=0x20) returned 0 [0140.671] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.671] GetLastError () returned 0x5 [0140.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT", dwFileAttributes=0x20) returned 0 [0140.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 [0140.671] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1 [0140.671] wcscmp (_String1="Checkers.CAT", _String2=".") returned 1 [0140.671] wcscmp (_String1="Checkers.CAT", _String2="..") returned 1 [0140.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df30f8 [0140.671] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.671] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.671] wcscat (in: _Dest=0x3df30f8, _Source="Checkers.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" [0140.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat")) returned 0x20 [0140.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT", dwFileAttributes=0x20) returned 0 [0140.672] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.672] GetLastError () returned 0x5 [0140.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT", dwFileAttributes=0x20) returned 0 [0140.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 [0140.672] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1 [0140.672] wcscmp (_String1="DigSig.CAT", _String2=".") returned 1 [0140.672] wcscmp (_String1="DigSig.CAT", _String2="..") returned 1 [0140.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df30f8 [0140.672] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.672] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.672] wcscat (in: _Dest=0x3df30f8, _Source="DigSig.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" [0140.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat")) returned 0x20 [0140.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT", dwFileAttributes=0x20) returned 0 [0140.703] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.703] GetLastError () returned 0x5 [0140.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT", dwFileAttributes=0x20) returned 0 [0140.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 [0140.703] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1 [0140.703] wcscmp (_String1="DVA.CAT", _String2=".") returned 1 [0140.703] wcscmp (_String1="DVA.CAT", _String2="..") returned 1 [0140.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d748 [0140.704] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.704] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.704] wcscat (in: _Dest=0x3f3d748, _Source="DVA.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" [0140.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat")) returned 0x20 [0140.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT", dwFileAttributes=0x20) returned 0 [0140.704] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.704] GetLastError () returned 0x5 [0140.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT", dwFileAttributes=0x20) returned 0 [0140.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0140.705] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1 [0140.705] wcscmp (_String1="eBook.CAT", _String2=".") returned 1 [0140.705] wcscmp (_String1="eBook.CAT", _String2="..") returned 1 [0140.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df30f8 [0140.705] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.705] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.705] wcscat (in: _Dest=0x3df30f8, _Source="eBook.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" [0140.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat")) returned 0x20 [0140.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT", dwFileAttributes=0x20) returned 0 [0140.705] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.705] GetLastError () returned 0x5 [0140.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT", dwFileAttributes=0x20) returned 0 [0140.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 [0140.706] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1 [0140.706] wcscmp (_String1="EScript.CAT", _String2=".") returned 1 [0140.706] wcscmp (_String1="EScript.CAT", _String2="..") returned 1 [0140.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df30f8 [0140.706] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.706] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.706] wcscat (in: _Dest=0x3df30f8, _Source="EScript.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" [0140.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat")) returned 0x20 [0140.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT", dwFileAttributes=0x20) returned 0 [0140.706] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.706] GetLastError () returned 0x5 [0140.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT", dwFileAttributes=0x20) returned 0 [0140.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 [0140.707] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1 [0140.707] wcscmp (_String1="IA32.CAT", _String2=".") returned 1 [0140.707] wcscmp (_String1="IA32.CAT", _String2="..") returned 1 [0140.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0140.707] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.707] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.707] wcscat (in: _Dest=0x3f3d748, _Source="IA32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" [0140.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat")) returned 0x20 [0140.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT", dwFileAttributes=0x20) returned 0 [0140.707] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.708] GetLastError () returned 0x5 [0140.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT", dwFileAttributes=0x20) returned 0 [0140.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0140.708] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="MAKEAC~1.CAT")) returned 1 [0140.708] wcscmp (_String1="makeaccessible.CAT", _String2=".") returned 1 [0140.708] wcscmp (_String1="makeaccessible.CAT", _String2="..") returned 1 [0140.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4460 [0140.708] wcscpy (in: _Dest=0x3df4460, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.708] wcscat (in: _Dest=0x3df4460, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.708] wcscat (in: _Dest=0x3df4460, _Source="makeaccessible.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" [0140.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat")) returned 0x20 [0140.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT", dwFileAttributes=0x20) returned 0 [0140.709] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.709] GetLastError () returned 0x5 [0140.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT", dwFileAttributes=0x20) returned 0 [0140.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4460) returned 1 [0140.709] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="MULTIM~1.CAT")) returned 1 [0140.709] wcscmp (_String1="Multimedia.CAT", _String2=".") returned 1 [0140.709] wcscmp (_String1="Multimedia.CAT", _String2="..") returned 1 [0140.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6b68 [0140.709] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.709] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.709] wcscat (in: _Dest=0x7ad6b68, _Source="Multimedia.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" [0140.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat")) returned 0x20 [0140.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT", dwFileAttributes=0x20) returned 0 [0140.718] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.718] GetLastError () returned 0x5 [0140.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT", dwFileAttributes=0x20) returned 0 [0140.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 [0140.718] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1 [0140.718] wcscmp (_String1="pddom.CAT", _String2=".") returned 1 [0140.718] wcscmp (_String1="pddom.CAT", _String2="..") returned 1 [0140.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0140.718] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.718] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.718] wcscat (in: _Dest=0x3df1b98, _Source="pddom.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" [0140.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat")) returned 0x20 [0140.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT", dwFileAttributes=0x20) returned 0 [0140.736] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.737] GetLastError () returned 0x5 [0140.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT", dwFileAttributes=0x20) returned 0 [0140.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.737] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b4a120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1 [0140.737] wcscmp (_String1="PPKLite.CAT", _String2=".") returned 1 [0140.737] wcscmp (_String1="PPKLite.CAT", _String2="..") returned 1 [0140.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df1b98 [0140.737] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.737] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.737] wcscat (in: _Dest=0x3df1b98, _Source="PPKLite.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" [0140.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat")) returned 0x20 [0140.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT", dwFileAttributes=0x20) returned 0 [0140.738] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.738] GetLastError () returned 0x5 [0140.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT", dwFileAttributes=0x20) returned 0 [0140.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.738] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd68e5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1 [0140.738] wcscmp (_String1="RdLang32.CAT", _String2=".") returned 1 [0140.738] wcscmp (_String1="RdLang32.CAT", _String2="..") returned 1 [0140.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1b98 [0140.739] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.739] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.739] wcscat (in: _Dest=0x3df1b98, _Source="RdLang32.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" [0140.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat")) returned 0x20 [0140.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT", dwFileAttributes=0x20) returned 0 [0140.739] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.740] GetLastError () returned 0x5 [0140.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT", dwFileAttributes=0x20) returned 0 [0140.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.740] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="READOU~1.CAT")) returned 1 [0140.740] wcscmp (_String1="ReadOutLoud.CAT", _String2=".") returned 1 [0140.740] wcscmp (_String1="ReadOutLoud.CAT", _String2="..") returned 1 [0140.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6b68 [0140.740] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.740] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.740] wcscat (in: _Dest=0x7ad6b68, _Source="ReadOutLoud.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" [0140.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat")) returned 0x20 [0140.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT", dwFileAttributes=0x20) returned 0 [0140.767] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.767] GetLastError () returned 0x5 [0140.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT", dwFileAttributes=0x20) returned 0 [0140.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 [0140.767] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1 [0140.767] wcscmp (_String1="reflow.CAT", _String2=".") returned 1 [0140.767] wcscmp (_String1="reflow.CAT", _String2="..") returned 1 [0140.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df1b98 [0140.767] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.767] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.768] wcscat (in: _Dest=0x3df1b98, _Source="reflow.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" [0140.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat")) returned 0x20 [0140.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT", dwFileAttributes=0x20) returned 0 [0140.768] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.768] GetLastError () returned 0x5 [0140.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT", dwFileAttributes=0x20) returned 0 [0140.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.768] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="SAVEAS~1.CAT")) returned 1 [0140.768] wcscmp (_String1="SaveAsRTF.CAT", _String2=".") returned 1 [0140.768] wcscmp (_String1="SaveAsRTF.CAT", _String2="..") returned 1 [0140.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6b68 [0140.769] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.769] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.769] wcscat (in: _Dest=0x7ad6b68, _Source="SaveAsRTF.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" [0140.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat")) returned 0x20 [0140.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT", dwFileAttributes=0x20) returned 0 [0140.877] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.877] GetLastError () returned 0x5 [0140.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT", dwFileAttributes=0x20) returned 0 [0140.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 [0140.877] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1 [0140.877] wcscmp (_String1="Search.CAT", _String2=".") returned 1 [0140.877] wcscmp (_String1="Search.CAT", _String2="..") returned 1 [0140.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df1b98 [0140.877] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.877] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.877] wcscat (in: _Dest=0x3df1b98, _Source="Search.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" [0140.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat")) returned 0x20 [0140.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT", dwFileAttributes=0x20) returned 0 [0140.895] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.896] GetLastError () returned 0x5 [0140.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT", dwFileAttributes=0x20) returned 0 [0140.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.896] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1 [0140.896] wcscmp (_String1="SendMail.CAT", _String2=".") returned 1 [0140.896] wcscmp (_String1="SendMail.CAT", _String2="..") returned 1 [0140.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1b98 [0140.896] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.896] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.896] wcscat (in: _Dest=0x3df1b98, _Source="SendMail.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" [0140.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat")) returned 0x20 [0140.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT", dwFileAttributes=0x20) returned 0 [0140.897] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.897] GetLastError () returned 0x5 [0140.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT", dwFileAttributes=0x20) returned 0 [0140.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.897] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0140.897] wcscmp (_String1="Services", _String2=".") returned 1 [0140.897] wcscmp (_String1="Services", _String2="..") returned 1 [0140.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.898] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0140.898] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0140.898] wcscat (in: _Dest=0x3f3bf60, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0140.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df1b98 [0140.898] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0140.898] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\" [0140.898] wcscat (in: _Dest=0x3df1b98, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*" [0140.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2fd0 [0140.898] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b70 [0142.129] wcscmp (_String1=".", _String2=".") returned 0 [0142.129] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.129] wcscmp (_String1="..", _String2=".") returned 1 [0142.129] wcscmp (_String1="..", _String2="..") returned 0 [0142.129] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0142.129] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0142.129] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0142.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053480 [0142.129] wcscpy (in: _Dest=0x3053480, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0142.129] wcscat (in: _Dest=0x3053480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\" [0142.129] wcscat (in: _Dest=0x3053480, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" [0148.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0148.416] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0148.416] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0148.416] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0148.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e5d0 [0148.416] wcscpy (in: _Dest=0x7a5e5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services" [0148.416] wcscat (in: _Dest=0x7a5e5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\" [0148.416] wcscat (in: _Dest=0x7a5e5d0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" [0148.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0148.418] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0148.418] FindClose (in: hFindFile=0x7ad7b70 | out: hFindFile=0x7ad7b70) returned 1 [0148.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fd0) returned 1 [0148.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0148.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0148.418] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1 [0148.419] wcscmp (_String1="Spelling.CAT", _String2=".") returned 1 [0148.419] wcscmp (_String1="Spelling.CAT", _String2="..") returned 1 [0148.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1b98 [0148.419] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0148.419] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0148.419] wcscat (in: _Dest=0x3df1b98, _Source="Spelling.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" [0148.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0148.420] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1 [0148.420] wcscmp (_String1="updater.CAT", _String2=".") returned 1 [0148.420] wcscmp (_String1="updater.CAT", _String2="..") returned 1 [0148.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2d08 [0148.420] wcscpy (in: _Dest=0x3df2d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0148.421] wcscat (in: _Dest=0x3df2d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0148.421] wcscat (in: _Dest=0x3df2d08, _Source="updater.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" [0148.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0148.422] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1 [0148.422] wcscmp (_String1="WebLink.CAT", _String2=".") returned 1 [0148.422] wcscmp (_String1="WebLink.CAT", _String2="..") returned 1 [0148.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df1c28 [0148.422] wcscpy (in: _Dest=0x3df1c28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES" [0148.423] wcscat (in: _Dest=0x3df1c28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\" [0148.423] wcscat (in: _Dest=0x3df1c28, _Source="WebLink.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" [0148.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0148.424] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 0 [0148.424] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0148.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb28e8) returned 1 [0148.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5af0) returned 1 [0148.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51020) returned 1 [0148.425] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0148.425] wcscmp (_String1="cs_CZ", _String2=".") returned 1 [0148.425] wcscmp (_String1="cs_CZ", _String2="..") returned 1 [0148.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51020 [0148.425] wcscpy (in: _Dest=0x3d51020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.425] wcscat (in: _Dest=0x3d51020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.425] wcscat (in: _Dest=0x3d51020, _Source="cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0148.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d51020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d8 [0148.427] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9cfb1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0148.427] wcscmp (_String1="da_DK", _String2=".") returned 1 [0148.427] wcscmp (_String1="da_DK", _String2="..") returned 1 [0148.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d513e0 [0148.427] wcscpy (in: _Dest=0x3d513e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.427] wcscat (in: _Dest=0x3d513e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.427] wcscat (in: _Dest=0x3d513e0, _Source="da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0148.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d513e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0148.428] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0148.428] wcscmp (_String1="de_DE", _String2=".") returned 1 [0148.428] wcscmp (_String1="de_DE", _String2="..") returned 1 [0148.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51200 [0148.428] wcscpy (in: _Dest=0x3d51200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.428] wcscat (in: _Dest=0x3d51200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.428] wcscat (in: _Dest=0x3d51200, _Source="de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0148.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d51200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae4 [0148.429] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0148.430] wcscmp (_String1="es_ES", _String2=".") returned 1 [0148.430] wcscmp (_String1="es_ES", _String2="..") returned 1 [0148.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51728 [0148.430] wcscpy (in: _Dest=0x3d51728, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.430] wcscat (in: _Dest=0x3d51728, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.430] wcscat (in: _Dest=0x3d51728, _Source="es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0148.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d51728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0148.431] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0148.431] wcscmp (_String1="eu_ES", _String2=".") returned 1 [0148.431] wcscmp (_String1="eu_ES", _String2="..") returned 1 [0148.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51188 [0148.431] wcscpy (in: _Dest=0x3d51188, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.431] wcscat (in: _Dest=0x3d51188, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.431] wcscat (in: _Dest=0x3d51188, _Source="eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0148.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d51188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1adc [0148.433] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0148.433] wcscmp (_String1="fi_FI", _String2=".") returned 1 [0148.433] wcscmp (_String1="fi_FI", _String2="..") returned 1 [0148.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d517a0 [0148.433] wcscpy (in: _Dest=0x3d517a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.433] wcscat (in: _Dest=0x3d517a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.433] wcscat (in: _Dest=0x3d517a0, _Source="fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0148.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d517a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad8 [0148.435] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0148.435] wcscmp (_String1="fr_FR", _String2=".") returned 1 [0148.435] wcscmp (_String1="fr_FR", _String2="..") returned 1 [0148.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d50c60 [0148.435] wcscpy (in: _Dest=0x3d50c60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.435] wcscat (in: _Dest=0x3d50c60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.435] wcscat (in: _Dest=0x3d50c60, _Source="fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0148.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d50c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0148.437] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0148.437] wcscmp (_String1="hr_HR", _String2=".") returned 1 [0148.437] wcscmp (_String1="hr_HR", _String2="..") returned 1 [0148.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f128 [0148.437] wcscpy (in: _Dest=0x3f3f128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.437] wcscat (in: _Dest=0x3f3f128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.437] wcscat (in: _Dest=0x3f3f128, _Source="hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0148.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0148.438] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0148.438] wcscmp (_String1="hu_HU", _String2=".") returned 1 [0148.438] wcscmp (_String1="hu_HU", _String2="..") returned 1 [0148.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f0b0 [0148.438] wcscpy (in: _Dest=0x3f3f0b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.438] wcscat (in: _Dest=0x3f3f0b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.438] wcscat (in: _Dest=0x3f3f0b0, _Source="hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0148.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc [0148.439] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0148.439] wcscmp (_String1="it_IT", _String2=".") returned 1 [0148.439] wcscmp (_String1="it_IT", _String2="..") returned 1 [0148.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3fb00 [0148.439] wcscpy (in: _Dest=0x3f3fb00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.440] wcscat (in: _Dest=0x3f3fb00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.440] wcscat (in: _Dest=0x3f3fb00, _Source="it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0148.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3fb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0148.441] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0148.441] wcscmp (_String1="ja_JP", _String2=".") returned 1 [0148.441] wcscmp (_String1="ja_JP", _String2="..") returned 1 [0148.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3fce0 [0148.441] wcscpy (in: _Dest=0x3f3fce0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.441] wcscat (in: _Dest=0x3f3fce0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.441] wcscat (in: _Dest=0x3f3fce0, _Source="ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0148.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3fce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0148.443] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a4d900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0148.443] wcscmp (_String1="ko_KR", _String2=".") returned 1 [0148.443] wcscmp (_String1="ko_KR", _String2="..") returned 1 [0148.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f470 [0148.443] wcscpy (in: _Dest=0x3f3f470, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.443] wcscat (in: _Dest=0x3f3f470, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.443] wcscat (in: _Dest=0x3f3f470, _Source="ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0148.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0148.445] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0148.445] wcscmp (_String1="nb_NO", _String2=".") returned 1 [0148.445] wcscmp (_String1="nb_NO", _String2="..") returned 1 [0148.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f038 [0148.445] wcscpy (in: _Dest=0x3f3f038, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.445] wcscat (in: _Dest=0x3f3f038, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.445] wcscat (in: _Dest=0x3f3f038, _Source="nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0148.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0148.447] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda33ab80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0148.447] wcscmp (_String1="nl_NL", _String2=".") returned 1 [0148.447] wcscmp (_String1="nl_NL", _String2="..") returned 1 [0148.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f7b8 [0148.448] wcscpy (in: _Dest=0x3f3f7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.448] wcscat (in: _Dest=0x3f3f7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.448] wcscat (in: _Dest=0x3f3f7b8, _Source="nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0148.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0148.449] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0148.449] wcscmp (_String1="pl_PL", _String2=".") returned 1 [0148.449] wcscmp (_String1="pl_PL", _String2="..") returned 1 [0148.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f290 [0148.450] wcscpy (in: _Dest=0x3f3f290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.450] wcscat (in: _Dest=0x3f3f290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.450] wcscat (in: _Dest=0x3f3f290, _Source="pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0148.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4 [0148.451] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0148.451] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0148.451] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0148.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f650 [0148.451] wcscpy (in: _Dest=0x3f3f650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.452] wcscat (in: _Dest=0x3f3f650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.452] wcscat (in: _Dest=0x3f3f650, _Source="pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0148.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1600 [0148.987] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0148.987] wcscmp (_String1="ro_RO", _String2=".") returned 1 [0148.987] wcscmp (_String1="ro_RO", _String2="..") returned 1 [0148.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dc98 [0148.987] wcscpy (in: _Dest=0x3f3dc98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0148.987] wcscat (in: _Dest=0x3f3dc98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0148.987] wcscat (in: _Dest=0x3f3dc98, _Source="ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0158.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3dc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0158.624] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0158.624] wcscmp (_String1="ru_RU", _String2=".") returned 1 [0158.624] wcscmp (_String1="ru_RU", _String2="..") returned 1 [0158.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e760 [0158.625] wcscpy (in: _Dest=0x3f3e760, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0158.625] wcscat (in: _Dest=0x3f3e760, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0158.625] wcscat (in: _Dest=0x3f3e760, _Source="ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0158.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0158.626] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0158.626] wcscmp (_String1="sk_SK", _String2=".") returned 1 [0158.626] wcscmp (_String1="sk_SK", _String2="..") returned 1 [0158.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dd10 [0158.626] wcscpy (in: _Dest=0x3f3dd10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0158.627] wcscat (in: _Dest=0x3f3dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0158.627] wcscat (in: _Dest=0x3f3dd10, _Source="sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0158.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0158.628] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0158.628] wcscmp (_String1="sl_SI", _String2=".") returned 1 [0158.628] wcscmp (_String1="sl_SI", _String2="..") returned 1 [0158.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e6e8 [0158.628] wcscpy (in: _Dest=0x3f3e6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0158.628] wcscat (in: _Dest=0x3f3e6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0158.628] wcscat (in: _Dest=0x3f3e6e8, _Source="sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0158.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0158.636] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0158.636] wcscmp (_String1="sv_SE", _String2=".") returned 1 [0158.636] wcscmp (_String1="sv_SE", _String2="..") returned 1 [0158.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e940 [0158.636] wcscpy (in: _Dest=0x3f3e940, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0158.636] wcscat (in: _Dest=0x3f3e940, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0158.636] wcscat (in: _Dest=0x3f3e940, _Source="sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0158.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0158.637] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0158.638] wcscmp (_String1="tr_TR", _String2=".") returned 1 [0158.638] wcscmp (_String1="tr_TR", _String2="..") returned 1 [0158.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e0d0 [0158.638] wcscpy (in: _Dest=0x3f3e0d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0158.638] wcscat (in: _Dest=0x3f3e0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0158.638] wcscat (in: _Dest=0x3f3e0d0, _Source="tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0158.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0158.639] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0158.639] wcscmp (_String1="uk_UA", _String2=".") returned 1 [0158.639] wcscmp (_String1="uk_UA", _String2="..") returned 1 [0158.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e238 [0158.639] wcscpy (in: _Dest=0x3f3e238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0158.639] wcscat (in: _Dest=0x3f3e238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0158.639] wcscat (in: _Dest=0x3f3e238, _Source="uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0158.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0158.640] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9942f60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0158.640] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0158.640] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0158.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3de00 [0158.640] wcscpy (in: _Dest=0x3f3de00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0158.640] wcscat (in: _Dest=0x3f3de00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0158.641] wcscat (in: _Dest=0x3f3de00, _Source="zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0158.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0158.641] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0158.641] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0158.641] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0158.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dfe0 [0158.642] wcscpy (in: _Dest=0x3f3dfe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale" [0158.642] wcscat (in: _Dest=0x3f3dfe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\" [0158.642] wcscat (in: _Dest=0x3f3dfe0, _Source="zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0158.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3dfe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0158.643] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0158.643] FindClose (in: hFindFile=0x3067300 | out: hFindFile=0x3067300) returned 1 [0158.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0158.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a233e0) returned 1 [0158.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26cb8) returned 1 Thread: id = 538 os_tid = 0x1024 [0123.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf")) returned 0x20 [0125.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", dwFileAttributes=0x20) returned 0 [0125.299] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.299] GetLastError () returned 0x5 [0125.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", dwFileAttributes=0x20) returned 0 [0125.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 539 os_tid = 0x1028 [0123.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f6c8 [0123.715] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0123.715] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0123.715] wcscat (in: _Dest=0x3f3f6c8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*" [0123.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0123.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15eefa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0123.718] wcscmp (_String1=".", _String2=".") returned 0 [0123.718] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15eefa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.718] wcscmp (_String1="..", _String2=".") returned 1 [0123.718] wcscmp (_String1="..", _String2="..") returned 0 [0123.718] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ec63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="ACCESS~1.API")) returned 1 [0123.718] wcscmp (_String1="Accessibility.api", _String2=".") returned 1 [0123.718] wcscmp (_String1="Accessibility.api", _String2="..") returned 1 [0123.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0123.718] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0123.718] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0123.718] wcscat (in: _Dest=0x3eb5d20, _Source="Accessibility.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" [0124.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0124.084] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe138d9a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1425f20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm", cAlternateFileName="")) returned 1 [0124.084] wcscmp (_String1="AcroForm", _String2=".") returned 1 [0124.084] wcscmp (_String1="AcroForm", _String2="..") returned 1 [0124.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5f70 [0124.084] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.084] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.084] wcscat (in: _Dest=0x3da5f70, _Source="AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0124.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da5f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0124.086] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe171faa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xae8a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm.api", cAlternateFileName="")) returned 1 [0124.086] wcscmp (_String1="AcroForm.api", _String2=".") returned 1 [0124.086] wcscmp (_String1="AcroForm.api", _String2="..") returned 1 [0124.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9bc0 [0124.086] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.086] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.086] wcscat (in: _Dest=0x3eb9bc0, _Source="AcroForm.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" [0124.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0124.088] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13d9c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x217e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSign.prc", cAlternateFileName="")) returned 1 [0124.088] wcscmp (_String1="AcroSign.prc", _String2=".") returned 1 [0124.088] wcscmp (_String1="AcroSign.prc", _String2="..") returned 1 [0124.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba660 [0124.088] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.088] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.088] wcscat (in: _Dest=0x3eba660, _Source="AcroSign.prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" [0124.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0124.089] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annotations", cAlternateFileName="ANNOTA~1")) returned 1 [0124.089] wcscmp (_String1="Annotations", _String2=".") returned 1 [0124.089] wcscmp (_String1="Annotations", _String2="..") returned 1 [0124.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba550 [0124.090] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.090] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.090] wcscat (in: _Dest=0x3eba550, _Source="Annotations" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" [0124.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0124.091] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5dbe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.api", cAlternateFileName="")) returned 1 [0124.091] wcscmp (_String1="Annots.api", _String2=".") returned 1 [0124.091] wcscmp (_String1="Annots.api", _String2="..") returned 1 [0124.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba6e8 [0124.091] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.091] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.091] wcscat (in: _Dest=0x3eba6e8, _Source="Annots.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" [0124.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440 [0124.093] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe150a760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd2463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.api", cAlternateFileName="")) returned 1 [0124.093] wcscmp (_String1="Checkers.api", _String2=".") returned 1 [0124.093] wcscmp (_String1="Checkers.api", _String2="..") returned 1 [0124.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba770 [0124.093] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.093] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.093] wcscat (in: _Dest=0x3eba770, _Source="Checkers.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" [0124.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1444 [0124.095] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15de63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.api", cAlternateFileName="")) returned 1 [0124.095] wcscmp (_String1="DigSig.api", _String2=".") returned 1 [0124.095] wcscmp (_String1="DigSig.api", _String2="..") returned 1 [0124.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3061f70 [0124.095] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.095] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.095] wcscat (in: _Dest=0x3061f70, _Source="DigSig.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" [0124.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0124.097] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.api", cAlternateFileName="")) returned 1 [0124.097] wcscmp (_String1="DVA.api", _String2=".") returned 1 [0124.097] wcscmp (_String1="DVA.api", _String2="..") returned 1 [0124.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5cf0 [0124.097] wcscpy (in: _Dest=0x3da5cf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.097] wcscat (in: _Dest=0x3da5cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.097] wcscat (in: _Dest=0x3da5cf0, _Source="DVA.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" [0124.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0124.099] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd063, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.api", cAlternateFileName="")) returned 1 [0124.099] wcscmp (_String1="eBook.api", _String2=".") returned 1 [0124.099] wcscmp (_String1="eBook.api", _String2="..") returned 1 [0124.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3062a10 [0124.099] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.099] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.099] wcscat (in: _Dest=0x3062a10, _Source="eBook.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" [0124.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0124.101] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13d9c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ab863, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.api", cAlternateFileName="")) returned 1 [0124.101] wcscmp (_String1="EScript.api", _String2=".") returned 1 [0124.101] wcscmp (_String1="EScript.api", _String2="..") returned 1 [0124.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3bba8 [0124.101] wcscpy (in: _Dest=0x3f3bba8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.101] wcscat (in: _Dest=0x3f3bba8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.101] wcscat (in: _Dest=0x3f3bba8, _Source="EScript.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" [0124.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454 [0124.103] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18463, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.api", cAlternateFileName="")) returned 1 [0124.103] wcscmp (_String1="IA32.api", _String2=".") returned 1 [0124.103] wcscmp (_String1="IA32.api", _String2="..") returned 1 [0124.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da65f0 [0124.103] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.103] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.103] wcscat (in: _Dest=0x3da65f0, _Source="IA32.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" [0124.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da65f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0124.104] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6809c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x234a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.api", cAlternateFileName="MAKEAC~1.API")) returned 1 [0124.105] wcscmp (_String1="MakeAccessible.api", _String2=".") returned 1 [0124.105] wcscmp (_String1="MakeAccessible.api", _String2="..") returned 1 [0124.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6018 [0124.105] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.105] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.105] wcscat (in: _Dest=0x3eb6018, _Source="MakeAccessible.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" [0124.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x145c [0124.107] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia", cAlternateFileName="MULTIM~1")) returned 1 [0124.107] wcscmp (_String1="Multimedia", _String2=".") returned 1 [0124.107] wcscmp (_String1="Multimedia", _String2="..") returned 1 [0124.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bc30 [0124.107] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.107] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.107] wcscat (in: _Dest=0x3f3bc30, _Source="Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0124.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3bc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0124.109] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98aa9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x174c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.api", cAlternateFileName="MULTIM~1.API")) returned 1 [0124.109] wcscmp (_String1="Multimedia.api", _String2=".") returned 1 [0124.109] wcscmp (_String1="Multimedia.api", _String2="..") returned 1 [0124.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44b10 [0124.109] wcscpy (in: _Dest=0x3d44b10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.109] wcscat (in: _Dest=0x3d44b10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.109] wcscat (in: _Dest=0x3d44b10, _Source="Multimedia.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" [0124.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0124.110] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.api", cAlternateFileName="")) returned 1 [0124.110] wcscmp (_String1="PDDom.api", _String2=".") returned 1 [0124.110] wcscmp (_String1="PDDom.api", _String2="..") returned 1 [0124.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3bcb8 [0124.110] wcscpy (in: _Dest=0x3f3bcb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.110] wcscat (in: _Dest=0x3f3bcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.110] wcscat (in: _Dest=0x3f3bcb8, _Source="PDDom.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" [0124.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0124.112] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe150a760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x73f263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.api", cAlternateFileName="")) returned 1 [0124.112] wcscmp (_String1="PPKLite.api", _String2=".") returned 1 [0124.112] wcscmp (_String1="PPKLite.api", _String2="..") returned 1 [0124.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3bd40 [0124.112] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.112] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.112] wcscat (in: _Dest=0x3f3bd40, _Source="PPKLite.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" [0124.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0124.114] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe150a760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b663, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.api", cAlternateFileName="READOU~1.API")) returned 1 [0124.114] wcscmp (_String1="ReadOutLoud.api", _String2=".") returned 1 [0124.114] wcscmp (_String1="ReadOutLoud.api", _String2="..") returned 1 [0124.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44ba0 [0124.114] wcscpy (in: _Dest=0x3d44ba0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.114] wcscat (in: _Dest=0x3d44ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.114] wcscat (in: _Dest=0x3d44ba0, _Source="ReadOutLoud.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" [0124.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0124.119] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x54e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.api", cAlternateFileName="")) returned 1 [0124.119] wcscmp (_String1="reflow.api", _String2=".") returned 1 [0124.119] wcscmp (_String1="reflow.api", _String2="..") returned 1 [0124.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9918 [0124.119] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.119] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.119] wcscat (in: _Dest=0x3eb9918, _Source="reflow.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" [0124.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0124.121] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63263, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.api", cAlternateFileName="SAVEAS~1.API")) returned 1 [0124.121] wcscmp (_String1="SaveAsRTF.api", _String2=".") returned 1 [0124.121] wcscmp (_String1="SaveAsRTF.api", _String2="..") returned 1 [0124.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44c30 [0124.121] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.121] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.121] wcscat (in: _Dest=0x3d44c30, _Source="SaveAsRTF.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" [0124.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0124.666] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9884880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.api", cAlternateFileName="")) returned 1 [0124.666] wcscmp (_String1="Search.api", _String2=".") returned 1 [0124.666] wcscmp (_String1="Search.api", _String2="..") returned 1 [0124.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c7e0 [0124.666] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0124.666] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0124.666] wcscat (in: _Dest=0x3f3c7e0, _Source="Search.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" [0130.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140c [0130.938] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13b3b00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.api", cAlternateFileName="")) returned 1 [0130.938] wcscmp (_String1="SendMail.api", _String2=".") returned 1 [0130.938] wcscmp (_String1="SendMail.api", _String2="..") returned 1 [0130.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9450 [0130.938] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0130.938] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0130.939] wcscat (in: _Dest=0x3eb9450, _Source="SendMail.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" [0130.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0130.940] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.api", cAlternateFileName="")) returned 1 [0130.940] wcscmp (_String1="Spelling.api", _String2=".") returned 1 [0130.940] wcscmp (_String1="Spelling.api", _String2="..") returned 1 [0130.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb94d8 [0130.940] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0130.940] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0130.940] wcscat (in: _Dest=0x3eb94d8, _Source="Spelling.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" [0130.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0130.942] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x29463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.api", cAlternateFileName="")) returned 1 [0130.942] wcscmp (_String1="Updater.api", _String2=".") returned 1 [0130.942] wcscmp (_String1="Updater.api", _String2="..") returned 1 [0130.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9560 [0130.942] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0130.942] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0130.942] wcscat (in: _Dest=0x3eb9560, _Source="Updater.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" [0130.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0130.943] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 1 [0130.944] wcscmp (_String1="weblink.api", _String2=".") returned 1 [0130.944] wcscmp (_String1="weblink.api", _String2="..") returned 1 [0130.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9c48 [0130.944] wcscpy (in: _Dest=0x3eb9c48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins" [0130.944] wcscat (in: _Dest=0x3eb9c48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\" [0130.944] wcscat (in: _Dest=0x3eb9c48, _Source="weblink.api" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" [0130.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0130.945] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15eefa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4ac63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 0 [0130.945] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0130.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0130.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0130.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26d28) returned 1 Thread: id = 540 os_tid = 0x102c [0123.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f5d8 [0123.719] wcscpy (in: _Dest=0x3f3f5d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0123.719] wcscat (in: _Dest=0x3f3f5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0123.719] wcscat (in: _Dest=0x3f3f5d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*" [0123.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0123.719] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab435c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac9a220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0125.743] wcscmp (_String1=".", _String2=".") returned 0 [0125.743] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab435c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac9a220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac9a220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.743] wcscmp (_String1="..", _String2=".") returned 1 [0125.743] wcscmp (_String1="..", _String2="..") returned 0 [0125.743] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac740c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x86988, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1 [0125.743] wcscmp (_String1="2d.x3d", _String2=".") returned 1 [0125.744] wcscmp (_String1="2d.x3d", _String2="..") returned 1 [0125.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5c70 [0125.744] wcscpy (in: _Dest=0x3da5c70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0125.744] wcscat (in: _Dest=0x3da5c70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0125.744] wcscat (in: _Dest=0x3da5c70, _Source="2d.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" [0135.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0135.937] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac4df60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1 [0135.937] wcscmp (_String1="3difr.x3d", _String2=".") returned 1 [0135.937] wcscmp (_String1="3difr.x3d", _String2="..") returned 1 [0135.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb94d8 [0135.938] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0135.938] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0135.938] wcscat (in: _Dest=0x3eb94d8, _Source="3difr.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" [0135.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0135.939] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac4df60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX8.x3d", cAlternateFileName="")) returned 1 [0135.939] wcscmp (_String1="drvDX8.x3d", _String2=".") returned 1 [0135.939] wcscmp (_String1="drvDX8.x3d", _String2="..") returned 1 [0135.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0135.940] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0135.940] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0135.940] wcscat (in: _Dest=0x3eb9cd0, _Source="drvDX8.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" [0135.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0135.941] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac27e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc6f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1 [0135.941] wcscmp (_String1="drvDX9.x3d", _String2=".") returned 1 [0135.941] wcscmp (_String1="drvDX9.x3d", _String2="..") returned 1 [0135.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0135.941] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0135.941] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0135.941] wcscat (in: _Dest=0x3eb8b48, _Source="drvDX9.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" [0135.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0135.942] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x35190, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1 [0135.943] wcscmp (_String1="drvSOFT.x3d", _String2=".") returned 1 [0135.943] wcscmp (_String1="drvSOFT.x3d", _String2="..") returned 1 [0135.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44690 [0135.943] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0135.943] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0135.943] wcscat (in: _Dest=0x3d44690, _Source="drvSOFT.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" [0135.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0135.944] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac01ca0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac01ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1 [0135.944] wcscmp (_String1="prc", _String2=".") returned 1 [0135.944] wcscmp (_String1="prc", _String2="..") returned 1 [0135.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5af0 [0135.944] wcscpy (in: _Dest=0x3da5af0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0135.945] wcscat (in: _Dest=0x3da5af0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0135.945] wcscat (in: _Dest=0x3da5af0, _Source="prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" [0135.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da5af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0135.946] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad0c640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x301190, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1 [0135.946] wcscmp (_String1="prcr.x3d", _String2=".") returned 1 [0135.946] wcscmp (_String1="prcr.x3d", _String2="..") returned 1 [0135.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba4c8 [0135.946] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0135.946] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0135.946] wcscat (in: _Dest=0x3eba4c8, _Source="prcr.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" [0135.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0135.948] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 1 [0135.948] wcscmp (_String1="tesselate.x3d", _String2=".") returned 1 [0135.948] wcscmp (_String1="tesselate.x3d", _String2="..") returned 1 [0135.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d459b0 [0135.948] wcscpy (in: _Dest=0x3d459b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d" [0135.948] wcscat (in: _Dest=0x3d459b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\" [0135.948] wcscat (in: _Dest=0x3d459b0, _Source="tesselate.x3d" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" [0135.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d459b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0135.949] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 0 [0135.949] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0135.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0135.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0135.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f380) returned 1 Thread: id = 541 os_tid = 0x1030 [0123.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pmd.cer")) returned 0x20 [0125.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer", dwFileAttributes=0x20) returned 0 [0125.289] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\pmd.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.289] GetLastError () returned 0x5 [0125.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\pmd.cer", dwFileAttributes=0x20) returned 0 [0125.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26d98) returned 1 Thread: id = 542 os_tid = 0x1034 [0123.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\rtc.der")) returned 0x20 [0124.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der", dwFileAttributes=0x20) returned 0 [0124.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\rtc.der"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.789] GetLastError () returned 0x5 [0124.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\RTC.der", dwFileAttributes=0x20) returned 0 [0124.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e08) returned 1 Thread: id = 543 os_tid = 0x1038 [0123.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f740 [0123.720] wcscpy (in: _Dest=0x3f3f740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0123.720] wcscat (in: _Dest=0x3f3f740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\" [0123.721] wcscat (in: _Dest=0x3f3f740, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\*" [0123.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0123.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd80b3a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd80b3a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0125.292] wcscmp (_String1=".", _String2=".") returned 0 [0125.292] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd80b3a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd80b3a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.292] wcscmp (_String1="..", _String2=".") returned 1 [0125.292] wcscmp (_String1="..", _String2="..") returned 0 [0125.292] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.spi", cAlternateFileName="")) returned 1 [0125.292] wcscmp (_String1="DEXShare.spi", _String2=".") returned 1 [0125.292] wcscmp (_String1="DEXShare.spi", _String2="..") returned 1 [0125.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3ca00 [0125.292] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0125.292] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\" [0125.293] wcscat (in: _Dest=0x3f3ca00, _Source="DEXShare.spi" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" [0129.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0129.175] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 1 [0129.175] wcscmp (_String1="Services.cfg", _String2=".") returned 1 [0129.175] wcscmp (_String1="Services.cfg", _String2="..") returned 1 [0129.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3da78 [0129.175] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services" [0129.175] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\" [0129.175] wcscat (in: _Dest=0x3f3da78, _Source="Services.cfg" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" [0129.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0129.177] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd80b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.cfg", cAlternateFileName="")) returned 0 [0129.177] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0129.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0129.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0129.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e78) returned 1 Thread: id = 544 os_tid = 0x103c [0123.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f7b8 [0123.721] wcscpy (in: _Dest=0x3f3f7b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" [0123.721] wcscat (in: _Dest=0x3f3f7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\" [0123.721] wcscat (in: _Dest=0x3f3f7b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*" [0123.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0123.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc630ea0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc630ea0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d280 [0125.294] wcscmp (_String1=".", _String2=".") returned 0 [0125.294] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc630ea0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc630ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc630ea0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.294] wcscmp (_String1="..", _String2=".") returned 1 [0125.294] wcscmp (_String1="..", _String2="..") returned 0 [0125.294] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc657000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 1 [0125.294] wcscmp (_String1="ADMPlugin.apl", _String2=".") returned 1 [0125.294] wcscmp (_String1="ADMPlugin.apl", _String2="..") returned 1 [0125.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d442a0 [0125.294] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins" [0125.294] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\" [0125.295] wcscat (in: _Dest=0x3d442a0, _Source="ADMPlugin.apl" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" [0141.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0 [0141.090] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc657000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x154e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADMPlugin.apl", cAlternateFileName="ADMPLU~1.APL")) returned 0 [0141.090] FindClose (in: hFindFile=0x7a2d280 | out: hFindFile=0x7a2d280) returned 1 [0141.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0141.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 [0141.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26ee8) returned 1 Thread: id = 545 os_tid = 0x1040 [0123.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23450 [0123.722] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0123.722] wcscat (in: _Dest=0x7a23450, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0123.722] wcscat (in: _Dest=0x7a23450, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\*" [0123.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4310 [0123.722] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc92aa20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc9c2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0125.736] wcscmp (_String1=".", _String2=".") returned 0 [0125.736] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc92aa20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc9c2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.973] wcscmp (_String1="..", _String2=".") returned 1 [0126.973] wcscmp (_String1="..", _String2="..") returned 0 [0126.973] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="ADD_RE~1.GIF")) returned 1 [0126.973] wcscmp (_String1="add_reviewer.gif", _String2=".") returned 1 [0126.973] wcscmp (_String1="add_reviewer.gif", _String2="..") returned 1 [0126.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45770 [0126.973] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0126.973] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0126.973] wcscat (in: _Dest=0x3d45770, _Source="add_reviewer.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" [0139.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0139.830] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1 [0139.830] wcscmp (_String1="bl.gif", _String2=".") returned 1 [0139.830] wcscmp (_String1="bl.gif", _String2="..") returned 1 [0139.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47718 [0139.830] wcscpy (in: _Dest=0x3e47718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.830] wcscat (in: _Dest=0x3e47718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.830] wcscat (in: _Dest=0x3e47718, _Source="bl.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" [0139.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2388 [0139.877] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1 [0139.877] wcscmp (_String1="br.gif", _String2=".") returned 1 [0139.878] wcscmp (_String1="br.gif", _String2="..") returned 1 [0139.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e46e98 [0139.878] wcscpy (in: _Dest=0x3e46e98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.878] wcscat (in: _Dest=0x3e46e98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.878] wcscat (in: _Dest=0x3e46e98, _Source="br.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" [0139.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238c [0139.879] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="CREATE~1.GIF")) returned 1 [0139.879] wcscmp (_String1="create_form.gif", _String2=".") returned 1 [0139.879] wcscmp (_String1="create_form.gif", _String2="..") returned 1 [0139.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45d10 [0139.879] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.879] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.879] wcscat (in: _Dest=0x3d45d10, _Source="create_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" [0139.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0139.881] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="DISTRI~1.GIF")) returned 1 [0139.881] wcscmp (_String1="distribute_form.gif", _String2=".") returned 1 [0139.881] wcscmp (_String1="distribute_form.gif", _String2="..") returned 1 [0139.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6020 [0139.881] wcscpy (in: _Dest=0x7ad6020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.881] wcscat (in: _Dest=0x7ad6020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.881] wcscat (in: _Dest=0x7ad6020, _Source="distribute_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" [0139.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0139.882] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="EMAIL_~2.GIF")) returned 1 [0139.882] wcscmp (_String1="email_all.gif", _String2=".") returned 1 [0139.882] wcscmp (_String1="email_all.gif", _String2="..") returned 1 [0139.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9450 [0139.882] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.882] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.882] wcscat (in: _Dest=0x3eb9450, _Source="email_all.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" [0139.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2398 [0139.883] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="EMAIL_~1.GIF")) returned 1 [0139.883] wcscmp (_String1="email_initiator.gif", _String2=".") returned 1 [0139.883] wcscmp (_String1="email_initiator.gif", _String2="..") returned 1 [0139.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad56a0 [0139.884] wcscpy (in: _Dest=0x7ad56a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.884] wcscat (in: _Dest=0x7ad56a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.884] wcscat (in: _Dest=0x7ad56a0, _Source="email_initiator.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" [0139.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad56a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x239c [0139.885] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="ENDED_~1.GIF")) returned 1 [0139.885] wcscmp (_String1="ended_review_or_form.gif", _String2=".") returned 1 [0139.885] wcscmp (_String1="ended_review_or_form.gif", _String2="..") returned 1 [0139.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4fa0 [0139.885] wcscpy (in: _Dest=0x3df4fa0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.885] wcscat (in: _Dest=0x3df4fa0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.885] wcscat (in: _Dest=0x3df4fa0, _Source="ended_review_or_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" [0139.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0139.886] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="END_RE~1.GIF")) returned 1 [0139.886] wcscmp (_String1="end_review.gif", _String2=".") returned 1 [0139.886] wcscmp (_String1="end_review.gif", _String2="..") returned 1 [0139.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45da0 [0139.886] wcscpy (in: _Dest=0x3d45da0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.886] wcscat (in: _Dest=0x3d45da0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.886] wcscat (in: _Dest=0x3d45da0, _Source="end_review.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" [0139.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0139.887] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="FORMS_~1.GIF")) returned 1 [0139.887] wcscmp (_String1="forms_distributed.gif", _String2=".") returned 1 [0139.887] wcscmp (_String1="forms_distributed.gif", _String2="..") returned 1 [0139.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5148 [0139.888] wcscpy (in: _Dest=0x7ad5148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.888] wcscat (in: _Dest=0x7ad5148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.888] wcscat (in: _Dest=0x7ad5148, _Source="forms_distributed.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" [0139.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0139.889] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="FORMS_~3.GIF")) returned 1 [0139.889] wcscmp (_String1="forms_received.gif", _String2=".") returned 1 [0139.889] wcscmp (_String1="forms_received.gif", _String2="..") returned 1 [0139.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5570 [0139.889] wcscpy (in: _Dest=0x7ad5570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.889] wcscat (in: _Dest=0x7ad5570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.889] wcscat (in: _Dest=0x7ad5570, _Source="forms_received.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" [0139.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ac [0139.890] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="FORMS_~2.GIF")) returned 1 [0139.890] wcscmp (_String1="forms_super.gif", _String2=".") returned 1 [0139.890] wcscmp (_String1="forms_super.gif", _String2="..") returned 1 [0139.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45e30 [0139.890] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.890] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.890] wcscat (in: _Dest=0x3d45e30, _Source="forms_super.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" [0139.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0139.891] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="FORM_R~1.GIF")) returned 1 [0139.891] wcscmp (_String1="form_responses.gif", _String2=".") returned 1 [0139.891] wcscmp (_String1="form_responses.gif", _String2="..") returned 1 [0139.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5440 [0139.892] wcscpy (in: _Dest=0x7ad5440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.892] wcscat (in: _Dest=0x7ad5440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.892] wcscat (in: _Dest=0x7ad5440, _Source="form_responses.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" [0139.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0139.893] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1 [0139.893] wcscmp (_String1="info.gif", _String2=".") returned 1 [0139.893] wcscmp (_String1="info.gif", _String2="..") returned 1 [0139.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47418 [0139.893] wcscpy (in: _Dest=0x3e47418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.893] wcscat (in: _Dest=0x3e47418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.893] wcscat (in: _Dest=0x3e47418, _Source="info.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" [0139.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b8 [0139.894] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0139.894] wcscmp (_String1="main.css", _String2=".") returned 1 [0139.894] wcscmp (_String1="main.css", _String2="..") returned 1 [0139.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47b18 [0139.894] wcscpy (in: _Dest=0x3e47b18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.894] wcscat (in: _Dest=0x3e47b18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.894] wcscat (in: _Dest=0x3e47b18, _Source="main.css" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" [0139.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23bc [0139.895] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="OPEN_O~1.GIF")) returned 1 [0139.895] wcscmp (_String1="open_original_form.gif", _String2=".") returned 1 [0139.895] wcscmp (_String1="open_original_form.gif", _String2="..") returned 1 [0139.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5220 [0139.896] wcscpy (in: _Dest=0x3df5220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.896] wcscat (in: _Dest=0x3df5220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.896] wcscat (in: _Dest=0x3df5220, _Source="open_original_form.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" [0139.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c0 [0139.897] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1 [0139.897] wcscmp (_String1="pdf.gif", _String2=".") returned 1 [0139.897] wcscmp (_String1="pdf.gif", _String2="..") returned 1 [0139.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47318 [0139.897] wcscpy (in: _Dest=0x3e47318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.897] wcscat (in: _Dest=0x3e47318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.897] wcscat (in: _Dest=0x3e47318, _Source="pdf.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" [0139.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c4 [0139.898] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="REVIEW~4.GIF")) returned 1 [0139.898] wcscmp (_String1="reviewers.gif", _String2=".") returned 1 [0139.898] wcscmp (_String1="reviewers.gif", _String2="..") returned 1 [0139.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0139.898] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.898] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.898] wcscat (in: _Dest=0x3eb9560, _Source="reviewers.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" [0139.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c8 [0139.899] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="RE99D5~1.GIF")) returned 1 [0139.899] wcscmp (_String1="reviews_joined.gif", _String2=".") returned 1 [0139.899] wcscmp (_String1="reviews_joined.gif", _String2="..") returned 1 [0139.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5310 [0139.899] wcscpy (in: _Dest=0x7ad5310, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.899] wcscat (in: _Dest=0x7ad5310, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.900] wcscat (in: _Dest=0x7ad5310, _Source="reviews_joined.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" [0139.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0139.901] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="RECDE7~1.GIF")) returned 1 [0139.901] wcscmp (_String1="reviews_sent.gif", _String2=".") returned 1 [0139.901] wcscmp (_String1="reviews_sent.gif", _String2="..") returned 1 [0139.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45ec0 [0139.901] wcscpy (in: _Dest=0x3d45ec0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.901] wcscat (in: _Dest=0x3d45ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.901] wcscat (in: _Dest=0x3d45ec0, _Source="reviews_sent.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" [0139.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0139.902] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="RE1558~1.GIF")) returned 1 [0139.902] wcscmp (_String1="reviews_super.gif", _String2=".") returned 1 [0139.902] wcscmp (_String1="reviews_super.gif", _String2="..") returned 1 [0139.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45f50 [0139.902] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.902] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.902] wcscat (in: _Dest=0x3d45f50, _Source="reviews_super.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" [0139.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d4 [0139.903] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="REVIEW~3.GIF")) returned 1 [0139.903] wcscmp (_String1="review_browser.gif", _String2=".") returned 1 [0139.903] wcscmp (_String1="review_browser.gif", _String2="..") returned 1 [0139.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6ad0 [0139.903] wcscpy (in: _Dest=0x7ad6ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.903] wcscat (in: _Dest=0x7ad6ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.903] wcscat (in: _Dest=0x7ad6ad0, _Source="review_browser.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" [0139.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0139.905] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="REVIEW~2.GIF")) returned 1 [0139.905] wcscmp (_String1="review_email.gif", _String2=".") returned 1 [0139.905] wcscmp (_String1="review_email.gif", _String2="..") returned 1 [0139.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2648 [0139.905] wcscpy (in: _Dest=0x3df2648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.905] wcscat (in: _Dest=0x3df2648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.905] wcscat (in: _Dest=0x3df2648, _Source="review_email.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" [0139.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0139.906] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9c2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="RE78D9~1.GIF")) returned 1 [0139.906] wcscmp (_String1="review_same_reviewers.gif", _String2=".") returned 1 [0139.906] wcscmp (_String1="review_same_reviewers.gif", _String2="..") returned 1 [0139.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df57c0 [0139.906] wcscpy (in: _Dest=0x3df57c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.906] wcscat (in: _Dest=0x3df57c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.906] wcscat (in: _Dest=0x3df57c0, _Source="review_same_reviewers.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" [0139.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df57c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0139.907] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="REVIEW~1.GIF")) returned 1 [0139.907] wcscmp (_String1="review_shared.gif", _String2=".") returned 1 [0139.907] wcscmp (_String1="review_shared.gif", _String2="..") returned 1 [0139.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df25b8 [0139.907] wcscpy (in: _Dest=0x3df25b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.907] wcscat (in: _Dest=0x3df25b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.907] wcscat (in: _Dest=0x3df25b8, _Source="review_shared.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" [0139.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df25b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0139.908] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1 [0139.908] wcscmp (_String1="rss.gif", _String2=".") returned 1 [0139.908] wcscmp (_String1="rss.gif", _String2="..") returned 1 [0139.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3efa2a0 [0139.908] wcscpy (in: _Dest=0x3efa2a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.908] wcscat (in: _Dest=0x3efa2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.908] wcscat (in: _Dest=0x3efa2a0, _Source="rss.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" [0139.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efa2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0139.909] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="SERVER~3.GIF")) returned 1 [0139.910] wcscmp (_String1="server_issue.gif", _String2=".") returned 1 [0139.910] wcscmp (_String1="server_issue.gif", _String2="..") returned 1 [0139.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df1838 [0139.910] wcscpy (in: _Dest=0x3df1838, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.910] wcscat (in: _Dest=0x3df1838, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.910] wcscat (in: _Dest=0x3df1838, _Source="server_issue.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" [0139.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ec [0139.911] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="SERVER~1.GIF")) returned 1 [0139.911] wcscmp (_String1="server_lg.gif", _String2=".") returned 1 [0139.911] wcscmp (_String1="server_lg.gif", _String2="..") returned 1 [0139.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8bd0 [0139.911] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0139.911] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0139.911] wcscat (in: _Dest=0x3eb8bd0, _Source="server_lg.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" [0139.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0141.201] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_ok.gif", cAlternateFileName="SERVER~2.GIF")) returned 1 [0141.201] wcscmp (_String1="server_ok.gif", _String2=".") returned 1 [0141.201] wcscmp (_String1="server_ok.gif", _String2="..") returned 1 [0141.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d390 [0141.201] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0141.201] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0141.201] wcscat (in: _Dest=0x3f3d390, _Source="server_ok.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" [0142.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0142.407] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop_collection_data.gif", cAlternateFileName="STOP_C~1.GIF")) returned 1 [0142.407] wcscmp (_String1="stop_collection_data.gif", _String2=".") returned 1 [0142.407] wcscmp (_String1="stop_collection_data.gif", _String2="..") returned 1 [0142.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7558 [0142.407] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.407] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.407] wcscat (in: _Dest=0x2c7558, _Source="stop_collection_data.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" [0142.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0142.409] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x0, cFileName="submission_history.gif", cAlternateFileName="SUBMIS~1.GIF")) returned 1 [0142.409] wcscmp (_String1="submission_history.gif", _String2=".") returned 1 [0142.409] wcscmp (_String1="submission_history.gif", _String2="..") returned 1 [0142.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62090 [0142.409] wcscpy (in: _Dest=0x7a62090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.409] wcscat (in: _Dest=0x7a62090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.409] wcscat (in: _Dest=0x7a62090, _Source="submission_history.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" [0142.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0142.410] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tl.gif", cAlternateFileName="")) returned 1 [0142.410] wcscmp (_String1="tl.gif", _String2=".") returned 1 [0142.410] wcscmp (_String1="tl.gif", _String2="..") returned 1 [0142.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3efbba0 [0142.410] wcscpy (in: _Dest=0x3efbba0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.410] wcscat (in: _Dest=0x3efbba0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.411] wcscat (in: _Dest=0x3efbba0, _Source="tl.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" [0142.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efbba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0142.412] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.gif", cAlternateFileName="")) returned 1 [0142.412] wcscmp (_String1="tr.gif", _String2=".") returned 1 [0142.412] wcscmp (_String1="tr.gif", _String2="..") returned 1 [0142.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3efb020 [0142.412] wcscpy (in: _Dest=0x3efb020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.412] wcscat (in: _Dest=0x3efb020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.412] wcscat (in: _Dest=0x3efb020, _Source="tr.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" [0142.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efb020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0142.413] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc950b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="trash.gif", cAlternateFileName="")) returned 1 [0142.413] wcscmp (_String1="trash.gif", _String2=".") returned 1 [0142.413] wcscmp (_String1="trash.gif", _String2="..") returned 1 [0142.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efa720 [0142.413] wcscpy (in: _Dest=0x3efa720, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.413] wcscat (in: _Dest=0x3efa720, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.413] wcscat (in: _Dest=0x3efa720, _Source="trash.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" [0142.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efa720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0142.414] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInAcrobat.gif", cAlternateFileName="TURNOF~2.GIF")) returned 1 [0142.414] wcscmp (_String1="turnOffNotificationInAcrobat.gif", _String2=".") returned 1 [0142.414] wcscmp (_String1="turnOffNotificationInAcrobat.gif", _String2="..") returned 1 [0142.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c588 [0142.414] wcscpy (in: _Dest=0x35c588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.415] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.415] wcscat (in: _Dest=0x35c588, _Source="turnOffNotificationInAcrobat.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" [0142.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0142.416] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc99ce40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInTray.gif", cAlternateFileName="TURNOF~1.GIF")) returned 1 [0142.416] wcscmp (_String1="turnOffNotificationInTray.gif", _String2=".") returned 1 [0142.416] wcscmp (_String1="turnOffNotificationInTray.gif", _String2="..") returned 1 [0142.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e138 [0142.416] wcscpy (in: _Dest=0x7a5e138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.416] wcscat (in: _Dest=0x7a5e138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.416] wcscat (in: _Dest=0x7a5e138, _Source="turnOffNotificationInTray.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" [0142.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b48 [0142.417] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInAcrobat.gif", cAlternateFileName="TURNON~2.GIF")) returned 1 [0142.417] wcscmp (_String1="turnOnNotificationInAcrobat.gif", _String2=".") returned 1 [0142.417] wcscmp (_String1="turnOnNotificationInAcrobat.gif", _String2="..") returned 1 [0142.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c218 [0142.417] wcscpy (in: _Dest=0x35c218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.417] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.417] wcscat (in: _Dest=0x35c218, _Source="turnOnNotificationInAcrobat.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" [0142.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b40 [0142.419] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInTray.gif", cAlternateFileName="TURNON~1.GIF")) returned 1 [0142.419] wcscmp (_String1="turnOnNotificationInTray.gif", _String2=".") returned 1 [0142.419] wcscmp (_String1="turnOnNotificationInTray.gif", _String2="..") returned 1 [0142.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e1e0 [0142.419] wcscpy (in: _Dest=0x7a5e1e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.419] wcscat (in: _Dest=0x7a5e1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.419] wcscat (in: _Dest=0x7a5e1e0, _Source="turnOnNotificationInTray.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" [0142.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0142.420] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 1 [0142.420] wcscmp (_String1="warning.gif", _String2=".") returned 1 [0142.420] wcscmp (_String1="warning.gif", _String2="..") returned 1 [0142.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9670 [0142.420] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker" [0142.420] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\" [0142.421] wcscat (in: _Dest=0x3eb9670, _Source="warning.gif" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" [0142.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0142.422] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc976ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 0 [0142.422] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0142.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4310) returned 1 [0142.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 [0142.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26f58) returned 1 Thread: id = 546 os_tid = 0x1044 [0123.723] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms")) returned 0x23 [0123.745] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms", dwFileAttributes=0x20) returned 0 [0123.745] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0123.745] GetLastError () returned 0x5 [0123.745] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms", dwFileAttributes=0x23) returned 0 [0123.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee07f0) returned 1 Thread: id = 547 os_tid = 0x1048 [0123.747] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms")) returned 0x23 [0124.334] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x20) returned 0 [0124.334] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.334] GetLastError () returned 0x5 [0124.334] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x23) returned 0 [0124.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 Thread: id = 548 os_tid = 0x104c [0123.749] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv")) returned 0x20 [0124.336] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv", dwFileAttributes=0x20) returned 1 [0127.472] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1488 [0127.472] GetFileSizeEx (in: hFile=0x1488, lpFileSize=0xc7afd54 | out: lpFileSize=0xc7afd54*=9699328) returned 1 [0127.472] SetFilePointerEx (in: hFile=0x1488, liDistanceToMove=0x93fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.472] ReadFile (in: hFile=0x1488, lpBuffer=0xc7afd30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc7afd40, lpOverlapped=0x0 | out: lpBuffer=0xc7afd30*, lpNumberOfBytesRead=0xc7afd40*=0x4, lpOverlapped=0x0) returned 1 [0127.478] SetFilePointerEx (in: hFile=0x1488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0127.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cf0 [0127.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0127.479] NtQuerySystemTime (in: CurrentTime=0xc7afcc8 | out: CurrentTime=0xc7afcc8*=132462177068736000) returned 0x0 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x329945e1 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x5e085536 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0xb365f90 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x366c49e [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x512ae02d [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0xfec2547 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x513488a9 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x39e29f38 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x49c0745a [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x75e91521 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x19ac2253 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x70d7dda4 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x291e9f34 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x326013ac [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x20090285 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x2f960861 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0xc446f88 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x5dadbbeb [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x66cc9ba6 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x2c92cae1 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0xac18234 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x759363a1 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x1db135fb [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0xb09c45 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x3ba2fe61 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x3afec2ea [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x39040b8a [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x112f6bdd [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x69fea6b6 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x6cdee905 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x2b7811d0 [0127.479] RtlRandomEx (in: Seed=0xc7afcc0 | out: Seed=0xc7afcc0) returned 0x7cfd93db [0127.487] SetFilePointerEx (in: hFile=0x1488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.488] ReadFile (in: hFile=0x1488, lpBuffer=0x7c1fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc7afcc8, lpOverlapped=0x0 | out: lpBuffer=0x7c1fb70*, lpNumberOfBytesRead=0xc7afcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0127.490] SetFilePointerEx (in: hFile=0x1488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e857d0 [0127.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0127.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0127.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0127.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c23778 [0127.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0127.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0127.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0127.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0127.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e857d0) returned 1 [0127.491] WriteFile (in: hFile=0x1488, lpBuffer=0x7c23778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc7afcc8, lpOverlapped=0x0 | out: lpBuffer=0x7c23778*, lpNumberOfBytesWritten=0xc7afcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c23778) returned 1 [0129.448] SetFilePointerEx (in: hFile=0x1488, liDistanceToMove=0x4a1000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.448] ReadFile (in: hFile=0x1488, lpBuffer=0x7c1fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc7afcc8, lpOverlapped=0x0 | out: lpBuffer=0x7c1fb70*, lpNumberOfBytesRead=0xc7afcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.451] SetFilePointerEx (in: hFile=0x1488, liDistanceToMove=0x4a1000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c98 [0129.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e148 [0129.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c298 [0129.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c298) returned 1 [0129.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c23778 [0129.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c298 [0129.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c270 [0129.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c270) returned 1 [0129.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0129.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c98) returned 1 [0129.451] WriteFile (in: hFile=0x1488, lpBuffer=0x7c23778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc7afcc8, lpOverlapped=0x0 | out: lpBuffer=0x7c23778*, lpNumberOfBytesWritten=0xc7afcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0131.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c23778) returned 1 [0131.781] SetFilePointerEx (in: hFile=0x1488, liDistanceToMove=0x93c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.781] ReadFile (in: hFile=0x1488, lpBuffer=0x7c1fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc7afcc8, lpOverlapped=0x0 | out: lpBuffer=0x7c1fb70*, lpNumberOfBytesRead=0xc7afcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0131.782] SetFilePointerEx (in: hFile=0x1488, liDistanceToMove=0x93c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85b30 [0131.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e850 [0131.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0131.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0131.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c23778 [0131.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0131.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0131.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33a8) returned 1 [0131.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0131.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b30) returned 1 [0131.783] WriteFile (in: hFile=0x1488, lpBuffer=0x7c23778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc7afcc8, lpOverlapped=0x0 | out: lpBuffer=0x7c23778*, lpNumberOfBytesWritten=0xc7afcc8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c23778) returned 1 [0133.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d9c0 [0133.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0133.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6388 [0133.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0133.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0133.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0133.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0133.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0133.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16c) returned 0x2fee7d8 [0133.250] SetFilePointerEx (in: hFile=0x1488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.250] WriteFile (in: hFile=0x1488, lpBuffer=0x2fee7d8*, nNumberOfBytesToWrite=0x16c, lpNumberOfBytesWritten=0xc7afd48, lpOverlapped=0x0 | out: lpBuffer=0x2fee7d8*, lpNumberOfBytesWritten=0xc7afd48*=0x16c, lpOverlapped=0x0) returned 1 [0133.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07890 [0133.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0133.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0133.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0133.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07968 [0133.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0133.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0133.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3998) returned 1 [0133.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0133.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0133.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x75) returned 0x3e46718 [0133.662] sprintf (in: _Dest=0x3e46718, _Format="%c%c" | out: _Dest="97") returned 2 [0133.662] sprintf (in: _Dest=0x3e4671a, _Format="%c%c" | out: _Dest="d6") returned 2 [0133.662] sprintf (in: _Dest=0x3e4671c, _Format="%c%c" | out: _Dest="4f") returned 2 [0133.662] sprintf (in: _Dest=0x3e4671e, _Format="%c%c" | out: _Dest="23") returned 2 [0133.662] sprintf (in: _Dest=0x3e46720, _Format="%c%c" | out: _Dest="a6") returned 2 [0133.662] sprintf (in: _Dest=0x3e46722, _Format="%c%c" | out: _Dest="eb") returned 2 [0133.662] sprintf (in: _Dest=0x3e46724, _Format="%c%c" | out: _Dest="34") returned 2 [0133.662] sprintf (in: _Dest=0x3e46726, _Format="%c%c" | out: _Dest="4d") returned 2 [0133.662] sprintf (in: _Dest=0x3e46728, _Format="%c%c" | out: _Dest="bf") returned 2 [0133.662] sprintf (in: _Dest=0x3e4672a, _Format="%c%c" | out: _Dest="1d") returned 2 [0133.662] sprintf (in: _Dest=0x3e4672c, _Format="%c%c" | out: _Dest="8a") returned 2 [0133.662] sprintf (in: _Dest=0x3e4672e, _Format="%c%c" | out: _Dest="b0") returned 2 [0133.662] sprintf (in: _Dest=0x3e46730, _Format="%c%c" | out: _Dest="40") returned 2 [0133.662] sprintf (in: _Dest=0x3e46732, _Format="%c%c" | out: _Dest="c1") returned 2 [0133.662] sprintf (in: _Dest=0x3e46734, _Format="%c%c" | out: _Dest="2d") returned 2 [0133.662] sprintf (in: _Dest=0x3e46736, _Format="%c%c" | out: _Dest="58") returned 2 [0133.662] sprintf (in: _Dest=0x3e46738, _Format="%c%c" | out: _Dest="84") returned 2 [0133.662] sprintf (in: _Dest=0x3e4673a, _Format="%c%c" | out: _Dest="ab") returned 2 [0133.663] sprintf (in: _Dest=0x3e4673c, _Format="%c%c" | out: _Dest="ff") returned 2 [0133.663] sprintf (in: _Dest=0x3e4673e, _Format="%c%c" | out: _Dest="50") returned 2 [0133.663] sprintf (in: _Dest=0x3e46740, _Format="%c%c" | out: _Dest="74") returned 2 [0133.663] sprintf (in: _Dest=0x3e46742, _Format="%c%c" | out: _Dest="c7") returned 2 [0133.663] sprintf (in: _Dest=0x3e46744, _Format="%c%c" | out: _Dest="05") returned 2 [0133.663] sprintf (in: _Dest=0x3e46746, _Format="%c%c" | out: _Dest="11") returned 2 [0133.663] sprintf (in: _Dest=0x3e46748, _Format="%c%c" | out: _Dest="d0") returned 2 [0133.663] sprintf (in: _Dest=0x3e4674a, _Format="%c%c" | out: _Dest="d7") returned 2 [0133.663] sprintf (in: _Dest=0x3e4674c, _Format="%c%c" | out: _Dest="fa") returned 2 [0133.663] sprintf (in: _Dest=0x3e4674e, _Format="%c%c" | out: _Dest="9e") returned 2 [0133.663] sprintf (in: _Dest=0x3e46750, _Format="%c%c" | out: _Dest="ea") returned 2 [0133.663] sprintf (in: _Dest=0x3e46752, _Format="%c%c" | out: _Dest="0f") returned 2 [0133.663] sprintf (in: _Dest=0x3e46754, _Format="%c%c" | out: _Dest="f3") returned 2 [0133.663] sprintf (in: _Dest=0x3e46756, _Format="%c%c" | out: _Dest="f4") returned 2 [0133.663] sprintf (in: _Dest=0x3e46758, _Format="%c%c" | out: _Dest="70") returned 2 [0133.663] sprintf (in: _Dest=0x3e4675a, _Format="%c%c" | out: _Dest="e7") returned 2 [0133.663] sprintf (in: _Dest=0x3e4675c, _Format="%c%c" | out: _Dest="72") returned 2 [0133.663] sprintf (in: _Dest=0x3e4675e, _Format="%c%c" | out: _Dest="ee") returned 2 [0133.663] sprintf (in: _Dest=0x3e46760, _Format="%c%c" | out: _Dest="78") returned 2 [0133.663] sprintf (in: _Dest=0x3e46762, _Format="%c%c" | out: _Dest="a6") returned 2 [0133.663] sprintf (in: _Dest=0x3e46764, _Format="%c%c" | out: _Dest="53") returned 2 [0133.663] sprintf (in: _Dest=0x3e46766, _Format="%c%c" | out: _Dest="37") returned 2 [0133.663] sprintf (in: _Dest=0x3e46768, _Format="%c%c" | out: _Dest="81") returned 2 [0133.664] sprintf (in: _Dest=0x3e4676a, _Format="%c%c" | out: _Dest="0d") returned 2 [0133.664] sprintf (in: _Dest=0x3e4676c, _Format="%c%c" | out: _Dest="d3") returned 2 [0133.664] sprintf (in: _Dest=0x3e4676e, _Format="%c%c" | out: _Dest="46") returned 2 [0133.664] sprintf (in: _Dest=0x3e46770, _Format="%c%c" | out: _Dest="9f") returned 2 [0133.664] sprintf (in: _Dest=0x3e46772, _Format="%c%c" | out: _Dest="3f") returned 2 [0133.664] sprintf (in: _Dest=0x3e46774, _Format="%c%c" | out: _Dest="5c") returned 2 [0133.664] sprintf (in: _Dest=0x3e46776, _Format="%c%c" | out: _Dest="4c") returned 2 [0133.664] sprintf (in: _Dest=0x3e46778, _Format="%c%c" | out: _Dest="92") returned 2 [0133.664] sprintf (in: _Dest=0x3e4677a, _Format="%c%c" | out: _Dest="02") returned 2 [0133.664] sprintf (in: _Dest=0x3e4677c, _Format="%c%c" | out: _Dest="8b") returned 2 [0133.664] sprintf (in: _Dest=0x3e4677e, _Format="%c%c" | out: _Dest="66") returned 2 [0133.664] sprintf (in: _Dest=0x3e46780, _Format="%c%c" | out: _Dest="ad") returned 2 [0133.664] sprintf (in: _Dest=0x3e46782, _Format="%c%c" | out: _Dest="5a") returned 2 [0133.664] sprintf (in: _Dest=0x3e46784, _Format="%c%c" | out: _Dest="6a") returned 2 [0133.664] sprintf (in: _Dest=0x3e46786, _Format="%c%c" | out: _Dest="f4") returned 2 [0133.664] sprintf (in: _Dest=0x3e46788, _Format="%c%c" | out: _Dest="d2") returned 2 [0133.664] sprintf (in: _Dest=0x3e4678a, _Format="%c%c" | out: _Dest="f2") returned 2 [0133.664] RtlInitAnsiString (in: DestinationString=0xc7afcd0, SourceString="97d64f23a6eb344dbf1d8ab040c12d5884abff5074c70511d0d7fa9eea0ff3f470e772ee78a65337810dd3469f3f5c4c92028b66ad5a6af4d2f2" | out: DestinationString="97d64f23a6eb344dbf1d8ab040c12d5884abff5074c70511d0d7fa9eea0ff3f470e772ee78a65337810dd3469f3f5c4c92028b66ad5a6af4d2f2") [0133.664] RtlAnsiStringToUnicodeString (in: DestinationString=0xc7afcc8, SourceString="97d64f23a6eb344dbf1d8ab040c12d5884abff5074c70511d0d7fa9eea0ff3f470e772ee78a65337810dd3469f3f5c4c92028b66ad5a6af4d2f2", AllocateDestinationString=1 | out: DestinationString="97d64f23a6eb344dbf1d8ab040c12d5884abff5074c70511d0d7fa9eea0ff3f470e772ee78a65337810dd3469f3f5c4c92028b66ad5a6af4d2f2") returned 0x0 [0133.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dad750 [0133.665] wcscat (in: _Dest=0x30531e0, _Source="97d64f23a6eb344dbf1d8ab040c12" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\97d64f23a6eb344dbf1d8ab040c12") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\97d64f23a6eb344dbf1d8ab040c12" [0133.665] wcscat (in: _Dest=0x30531e0, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\97d64f23a6eb344dbf1d8ab040c12.68814f") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\97d64f23a6eb344dbf1d8ab040c12.68814f" [0133.665] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Recorded TV\\Sample Media\\97d64f23a6eb344dbf1d8ab040c12.68814f", NtPathName=0xc7afcc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Recorded TV\\Sample Media\\97d64f23a6eb344dbf1d8ab040c12.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65d18 [0133.665] NtSetInformationFile (FileHandle=0x1488, IoStatusBlock=0xc7afcc8, FileInformation=0x3e65d18, Length=0xb2, FileInformationClass=0xa) returned 0x0 [0133.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0133.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ea90) returned 1 [0133.813] NtQueryInformationFile (in: FileHandle=0x1488, IoStatusBlock=0xc7afc98, FileInformation=0xc7afca0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc7afc98, FileInformation=0xc7afca0) returned 0x0 [0133.813] NtSetInformationFile (FileHandle=0x1488, IoStatusBlock=0xc7afc98, FileInformation=0xc7afca0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 [0133.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad750) returned 1 [0133.884] FlushFileBuffers (hFile=0x1488) returned 1 [0135.230] CloseHandle (hObject=0x1488) returned 1 [0135.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da60f0 [0135.231] wcscpy (in: _Dest=0x3da60f0, _Source="C:\\Users\\Public\\Recorded TV\\Sample Media\\" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\" [0135.231] wcscat (in: _Dest=0x3da60f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Recorded TV\\Sample Media\\68814F-Readme.txt") returned="C:\\Users\\Public\\Recorded TV\\Sample Media\\68814F-Readme.txt" [0135.231] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\68814F-Readme.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\68814f-readme.txt")) returned 0xffffffff [0135.231] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\68814F-Readme.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcb4 [0135.528] WriteFile (in: hFile=0xcb4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc7afcdc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc7afcdc*=0x8b9, lpOverlapped=0x0) returned 1 [0135.530] CloseHandle (hObject=0xcb4) returned 1 [0135.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da60f0) returned 1 [0135.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 549 os_tid = 0x1050 [0123.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c08 [0123.750] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0123.750] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\" [0123.750] wcscat (in: _Dest=0x2fe6c08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\*" [0123.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4a48 [0123.750] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0123.751] wcscmp (_String1=".", _String2=".") returned 0 [0123.751] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.751] wcscmp (_String1="..", _String2=".") returned 1 [0123.751] wcscmp (_String1="..", _String2="..") returned 0 [0123.751] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0123.751] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0123.752] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0123.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee07f0 [0123.752] wcscpy (in: _Dest=0x3ee07f0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0123.752] wcscat (in: _Dest=0x3ee07f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\" [0123.752] wcscat (in: _Dest=0x3ee07f0, _Source="Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" [0136.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee07f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0136.335] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0136.335] wcscmp (_String1="Linguistics", _String2=".") returned 1 [0136.335] wcscmp (_String1="Linguistics", _String2="..") returned 1 [0136.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23140 [0136.335] wcscpy (in: _Dest=0x7a23140, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe" [0136.335] wcscat (in: _Dest=0x7a23140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\" [0136.335] wcscat (in: _Dest=0x7a23140, _Source="Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" [0136.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0136.337] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0136.337] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0136.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4a48) returned 1 [0136.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0136.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14ca0) returned 1 Thread: id = 550 os_tid = 0x1054 [0123.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e6b138 [0123.752] wcscpy (in: _Dest=0x3e6b138, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" [0123.752] wcscat (in: _Dest=0x3e6b138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\" [0123.753] wcscat (in: _Dest=0x3e6b138, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\*" [0123.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4578 [0123.753] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0124.339] wcscmp (_String1=".", _String2=".") returned 0 [0124.339] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x58231e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.339] wcscmp (_String1="..", _String2=".") returned 1 [0124.339] wcscmp (_String1="..", _String2="..") returned 0 [0124.339] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0124.339] wcscmp (_String1="Java", _String2=".") returned 1 [0124.339] wcscmp (_String1="Java", _String2="..") returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe67e8 [0124.339] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun" [0124.339] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\" [0124.339] wcscat (in: _Dest=0x2fe67e8, _Source="Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0129.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0129.164] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0129.164] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0129.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4578) returned 1 [0129.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6b138) returned 1 [0129.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a2c8) returned 1 Thread: id = 551 os_tid = 0x1058 [0123.754] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\suggested sites.url")) returned 0x20 [0123.754] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url", dwFileAttributes=0x20) returned 1 [0128.578] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc08 [0128.578] GetFileSizeEx (in: hFile=0xc08, lpFileSize=0xc62fa34 | out: lpFileSize=0xc62fa34*=236) returned 1 [0128.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0128.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e08 [0128.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0128.579] NtQuerySystemTime (in: CurrentTime=0xc62f9a8 | out: CurrentTime=0xc62f9a8*=132462177079656000) returned 0x0 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x139a3c93 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x2febb595 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x6b3c361f [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x4b2348c1 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x63cb8be7 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0xd1653ba [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x58cbff77 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x14f13150 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x67f8bc72 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x31a8abff [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x70f8d830 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x41a80959 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x73b45eb2 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0xcebf965 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x57c16e3 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x2c695a15 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0xc778c6d [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x6171c918 [0128.579] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x55d3dffb [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x56fd7f31 [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x7468498d [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x35a4e7ec [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x3962639a [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x1140a765 [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x30f7fd51 [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0xb6fdbfa [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0xdab79a [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x2116976d [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x2a9e8402 [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x30904a04 [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x746e8301 [0128.580] RtlRandomEx (in: Seed=0xc62f9a0 | out: Seed=0xc62f9a0) returned 0x50aad3c9 [0128.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0128.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c18360 [0128.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1bf68 [0128.591] ReadFile (in: hFile=0xc08, lpBuffer=0x7c18360, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0xc62f99c, lpOverlapped=0x0 | out: lpBuffer=0x7c18360*, lpNumberOfBytesRead=0xc62f99c*=0xec, lpOverlapped=0x0) returned 1 [0128.593] SetFilePointerEx (in: hFile=0xc08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.593] WriteFile (in: hFile=0xc08, lpBuffer=0x7c1bf68*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xc62f9a0, lpOverlapped=0x0 | out: lpBuffer=0x7c1bf68*, lpNumberOfBytesWritten=0xc62f9a0*=0xec, lpOverlapped=0x0) returned 1 [0129.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0129.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0129.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0129.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1bf68) returned 1 [0129.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c18360) returned 1 [0129.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0129.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55ac0) returned 1 [0129.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d0c0 [0129.595] SetFilePointerEx (in: hFile=0xc08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.595] WriteFile (in: hFile=0xc08, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xc62fa28, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0xc62fa28*=0x118, lpOverlapped=0x0) returned 1 [0130.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56840 [0130.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0130.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0130.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535f8) returned 1 [0130.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c08 [0130.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0130.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53580 [0130.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53580) returned 1 [0130.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0130.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 [0130.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4d) returned 0x3d48848 [0130.084] sprintf (in: _Dest=0x3d48848, _Format="%c%c" | out: _Dest="90") returned 2 [0130.084] sprintf (in: _Dest=0x3d4884a, _Format="%c%c" | out: _Dest="88") returned 2 [0130.084] sprintf (in: _Dest=0x3d4884c, _Format="%c%c" | out: _Dest="94") returned 2 [0130.084] sprintf (in: _Dest=0x3d4884e, _Format="%c%c" | out: _Dest="49") returned 2 [0130.084] sprintf (in: _Dest=0x3d48850, _Format="%c%c" | out: _Dest="ab") returned 2 [0130.084] sprintf (in: _Dest=0x3d48852, _Format="%c%c" | out: _Dest="ef") returned 2 [0130.084] sprintf (in: _Dest=0x3d48854, _Format="%c%c" | out: _Dest="1a") returned 2 [0130.084] sprintf (in: _Dest=0x3d48856, _Format="%c%c" | out: _Dest="cc") returned 2 [0130.084] sprintf (in: _Dest=0x3d48858, _Format="%c%c" | out: _Dest="a2") returned 2 [0130.084] sprintf (in: _Dest=0x3d4885a, _Format="%c%c" | out: _Dest="0e") returned 2 [0130.084] sprintf (in: _Dest=0x3d4885c, _Format="%c%c" | out: _Dest="ba") returned 2 [0130.084] sprintf (in: _Dest=0x3d4885e, _Format="%c%c" | out: _Dest="b6") returned 2 [0130.084] sprintf (in: _Dest=0x3d48860, _Format="%c%c" | out: _Dest="f6") returned 2 [0130.084] sprintf (in: _Dest=0x3d48862, _Format="%c%c" | out: _Dest="c3") returned 2 [0130.085] sprintf (in: _Dest=0x3d48864, _Format="%c%c" | out: _Dest="8a") returned 2 [0130.085] sprintf (in: _Dest=0x3d48866, _Format="%c%c" | out: _Dest="5e") returned 2 [0130.085] sprintf (in: _Dest=0x3d48868, _Format="%c%c" | out: _Dest="f2") returned 2 [0130.085] sprintf (in: _Dest=0x3d4886a, _Format="%c%c" | out: _Dest="a9") returned 2 [0130.085] sprintf (in: _Dest=0x3d4886c, _Format="%c%c" | out: _Dest="76") returned 2 [0130.085] sprintf (in: _Dest=0x3d4886e, _Format="%c%c" | out: _Dest="f1") returned 2 [0130.085] sprintf (in: _Dest=0x3d48870, _Format="%c%c" | out: _Dest="54") returned 2 [0130.085] sprintf (in: _Dest=0x3d48872, _Format="%c%c" | out: _Dest="98") returned 2 [0130.085] sprintf (in: _Dest=0x3d48874, _Format="%c%c" | out: _Dest="1f") returned 2 [0130.085] sprintf (in: _Dest=0x3d48876, _Format="%c%c" | out: _Dest="83") returned 2 [0130.085] sprintf (in: _Dest=0x3d48878, _Format="%c%c" | out: _Dest="db") returned 2 [0130.085] sprintf (in: _Dest=0x3d4887a, _Format="%c%c" | out: _Dest="68") returned 2 [0130.085] sprintf (in: _Dest=0x3d4887c, _Format="%c%c" | out: _Dest="a3") returned 2 [0130.085] sprintf (in: _Dest=0x3d4887e, _Format="%c%c" | out: _Dest="f1") returned 2 [0130.085] sprintf (in: _Dest=0x3d48880, _Format="%c%c" | out: _Dest="df") returned 2 [0130.085] sprintf (in: _Dest=0x3d48882, _Format="%c%c" | out: _Dest="2a") returned 2 [0130.085] sprintf (in: _Dest=0x3d48884, _Format="%c%c" | out: _Dest="ae") returned 2 [0130.085] sprintf (in: _Dest=0x3d48886, _Format="%c%c" | out: _Dest="43") returned 2 [0130.085] sprintf (in: _Dest=0x3d48888, _Format="%c%c" | out: _Dest="e3") returned 2 [0130.085] sprintf (in: _Dest=0x3d4888a, _Format="%c%c" | out: _Dest="6f") returned 2 [0130.085] sprintf (in: _Dest=0x3d4888c, _Format="%c%c" | out: _Dest="97") returned 2 [0130.085] sprintf (in: _Dest=0x3d4888e, _Format="%c%c" | out: _Dest="fa") returned 2 [0130.085] sprintf (in: _Dest=0x3d48890, _Format="%c%c" | out: _Dest="b6") returned 2 [0130.085] sprintf (in: _Dest=0x3d48892, _Format="%c%c" | out: _Dest="ec") returned 2 [0130.085] RtlInitAnsiString (in: DestinationString=0xc62f9b0, SourceString="90889449abef1acca20ebab6f6c38a5ef2a976f154981f83db68a3f1df2aae43e36f97fab6ec" | out: DestinationString="90889449abef1acca20ebab6f6c38a5ef2a976f154981f83db68a3f1df2aae43e36f97fab6ec") [0130.085] RtlAnsiStringToUnicodeString (in: DestinationString=0xc62f9a8, SourceString="90889449abef1acca20ebab6f6c38a5ef2a976f154981f83db68a3f1df2aae43e36f97fab6ec", AllocateDestinationString=1 | out: DestinationString="90889449abef1acca20ebab6f6c38a5ef2a976f154981f83db68a3f1df2aae43e36f97fab6ec") returned 0x0 [0130.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053138 [0130.086] wcscat (in: _Dest=0x3e19298, _Source="90889449abef1acca20" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\90889449abef1acca20") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\90889449abef1acca20" [0130.086] wcscat (in: _Dest=0x3e19298, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\90889449abef1acca20.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\90889449abef1acca20.68814f" [0130.086] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Links\\90889449abef1acca20.68814f", NtPathName=0xc62f9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Links\\90889449abef1acca20.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6310 [0130.086] NtSetInformationFile (FileHandle=0xc08, IoStatusBlock=0xc62f9a8, FileInformation=0x3eb6310, Length=0x8e, FileInformationClass=0xa) returned 0x0 [0130.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6310) returned 1 [0130.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40c78) returned 1 [0130.206] NtQueryInformationFile (in: FileHandle=0xc08, IoStatusBlock=0xc62f978, FileInformation=0xc62f980, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc62f978, FileInformation=0xc62f980) returned 0x0 [0130.206] NtSetInformationFile (FileHandle=0xc08, IoStatusBlock=0xc62f978, FileInformation=0xc62f980, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 [0130.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053138) returned 1 [0130.287] FlushFileBuffers (hFile=0xc08) returned 1 [0130.297] CloseHandle (hObject=0xc08) returned 1 [0130.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23e60 [0130.357] wcscpy (in: _Dest=0x7a23e60, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0130.357] wcscat (in: _Dest=0x7a23e60, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\68814F-Readme.txt" [0130.357] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\links\\68814f-readme.txt")) returned 0xffffffff [0130.358] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\links\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c0 [0130.387] WriteFile (in: hFile=0x19c0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc62f9bc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc62f9bc*=0x8b9, lpOverlapped=0x0) returned 1 [0130.393] CloseHandle (hObject=0x19c0) returned 1 [0130.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23e60) returned 1 [0130.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 Thread: id = 552 os_tid = 0x105c [0123.756] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\web slice gallery.url")) returned 0x20 [0123.756] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url", dwFileAttributes=0x20) returned 1 [0128.595] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbfc [0128.595] GetFileSizeEx (in: hFile=0xbfc, lpFileSize=0xc94fa54 | out: lpFileSize=0xc94fa54*=226) returned 1 [0128.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0128.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0128.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0128.595] NtQuerySystemTime (in: CurrentTime=0xc94f9c8 | out: CurrentTime=0xc94f9c8*=132462177079812000) returned 0x0 [0128.595] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0xbf793f [0128.595] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x5c3c65f6 [0128.595] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x41061448 [0128.595] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0xfaf6eed [0128.595] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x40ab4bd6 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x64b58b33 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x4bb1afc0 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x6a55e21d [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x622f5778 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x20d5c73f [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x3082bfb1 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x5a086817 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0xe85cf63 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x5689a55c [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x5b029e70 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x4acc0236 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x7c88a2ab [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x2d81a439 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x31fc1f91 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x79232e44 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x43eab8d4 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x4f34ae39 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x3479dc51 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x1041fb85 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x66efdce1 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x7c45c78a [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x397f00d2 [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x3d391aad [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x18d4fedc [0128.596] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x6eee9bde [0128.597] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x1045bfa2 [0128.597] RtlRandomEx (in: Seed=0xc94f9c0 | out: Seed=0xc94f9c0) returned 0x380159c1 [0128.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0128.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0128.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c143e0 [0128.607] ReadFile (in: hFile=0xbfc, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0xc94f9bc, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0xc94f9bc*=0xe2, lpOverlapped=0x0) returned 1 [0128.609] SetFilePointerEx (in: hFile=0xbfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.609] WriteFile (in: hFile=0xbfc, lpBuffer=0x7c143e0*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0xc94f9c0, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesWritten=0xc94f9c0*=0xe2, lpOverlapped=0x0) returned 1 [0129.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0129.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0129.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0129.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0129.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0129.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e561c8) returned 1 [0129.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d200 [0129.596] SetFilePointerEx (in: hFile=0xbfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.596] WriteFile (in: hFile=0xbfc, lpBuffer=0x3d55840*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xc94fa48, lpOverlapped=0x0 | out: lpBuffer=0x3d55840*, lpNumberOfBytesWritten=0xc94fa48*=0x11c, lpOverlapped=0x0) returned 1 [0130.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07c38 [0130.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0130.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0130.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f48) returned 1 [0130.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x7ad7120 [0130.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0130.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4118 [0130.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4118) returned 1 [0130.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0130.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0130.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6ba8 [0130.090] sprintf (in: _Dest=0x2fe6ba8, _Format="%c%c" | out: _Dest="ae") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6baa, _Format="%c%c" | out: _Dest="88") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bac, _Format="%c%c" | out: _Dest="b4") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bae, _Format="%c%c" | out: _Dest="b4") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bb0, _Format="%c%c" | out: _Dest="c3") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bb2, _Format="%c%c" | out: _Dest="0e") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bb4, _Format="%c%c" | out: _Dest="1b") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bb6, _Format="%c%c" | out: _Dest="76") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bb8, _Format="%c%c" | out: _Dest="0f") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bba, _Format="%c%c" | out: _Dest="56") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bbc, _Format="%c%c" | out: _Dest="2e") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bbe, _Format="%c%c" | out: _Dest="3d") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bc0, _Format="%c%c" | out: _Dest="1a") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bc2, _Format="%c%c" | out: _Dest="49") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bc4, _Format="%c%c" | out: _Dest="82") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bc6, _Format="%c%c" | out: _Dest="b4") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bc8, _Format="%c%c" | out: _Dest="2c") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bca, _Format="%c%c" | out: _Dest="9d") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bcc, _Format="%c%c" | out: _Dest="a4") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bce, _Format="%c%c" | out: _Dest="55") returned 2 [0130.090] sprintf (in: _Dest=0x2fe6bd0, _Format="%c%c" | out: _Dest="34") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bd2, _Format="%c%c" | out: _Dest="50") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bd4, _Format="%c%c" | out: _Dest="8f") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bd6, _Format="%c%c" | out: _Dest="21") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bd8, _Format="%c%c" | out: _Dest="e5") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bda, _Format="%c%c" | out: _Dest="80") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bdc, _Format="%c%c" | out: _Dest="45") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bde, _Format="%c%c" | out: _Dest="b4") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6be0, _Format="%c%c" | out: _Dest="6a") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6be2, _Format="%c%c" | out: _Dest="05") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6be4, _Format="%c%c" | out: _Dest="0a") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6be6, _Format="%c%c" | out: _Dest="43") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6be8, _Format="%c%c" | out: _Dest="70") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bea, _Format="%c%c" | out: _Dest="24") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bec, _Format="%c%c" | out: _Dest="5c") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bee, _Format="%c%c" | out: _Dest="3c") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bf0, _Format="%c%c" | out: _Dest="ab") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bf2, _Format="%c%c" | out: _Dest="11") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bf4, _Format="%c%c" | out: _Dest="a0") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bf6, _Format="%c%c" | out: _Dest="a4") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bf8, _Format="%c%c" | out: _Dest="e9") returned 2 [0130.091] sprintf (in: _Dest=0x2fe6bfa, _Format="%c%c" | out: _Dest="cf") returned 2 [0130.091] RtlInitAnsiString (in: DestinationString=0xc94f9d0, SourceString="ae88b4b4c30e1b760f562e3d1a4982b42c9da45534508f21e58045b46a050a4370245c3cab11a0a4e9cf" | out: DestinationString="ae88b4b4c30e1b760f562e3d1a4982b42c9da45534508f21e58045b46a050a4370245c3cab11a0a4e9cf") [0130.091] RtlAnsiStringToUnicodeString (in: DestinationString=0xc94f9c8, SourceString="ae88b4b4c30e1b760f562e3d1a4982b42c9da45534508f21e58045b46a050a4370245c3cab11a0a4e9cf", AllocateDestinationString=1 | out: DestinationString="ae88b4b4c30e1b760f562e3d1a4982b42c9da45534508f21e58045b46a050a4370245c3cab11a0a4e9cf") returned 0x0 [0130.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6d00 [0130.091] wcscat (in: _Dest=0x3f3db00, _Source="ae88b4b4c30e1b760f562" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\ae88b4b4c30e1b760f562") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\ae88b4b4c30e1b760f562" [0130.092] wcscat (in: _Dest=0x3f3db00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\ae88b4b4c30e1b760f562.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\ae88b4b4c30e1b760f562.68814f" [0130.092] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Links\\ae88b4b4c30e1b760f562.68814f", NtPathName=0xc94f9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Links\\ae88b4b4c30e1b760f562.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5d60 [0130.092] NtSetInformationFile (FileHandle=0xbfc, IoStatusBlock=0xc94f9c8, FileInformation=0x3df5d60, Length=0x92, FileInformationClass=0xa) returned 0x0 [0130.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5d60) returned 1 [0130.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40828) returned 1 [0130.438] NtQueryInformationFile (in: FileHandle=0xbfc, IoStatusBlock=0xc94f998, FileInformation=0xc94f9a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc94f998, FileInformation=0xc94f9a0) returned 0x0 [0130.438] NtSetInformationFile (FileHandle=0xbfc, IoStatusBlock=0xc94f998, FileInformation=0xc94f9a0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 [0130.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 [0130.443] FlushFileBuffers (hFile=0xbfc) returned 1 [0130.643] CloseHandle (hObject=0xbfc) returned 1 [0130.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26318 [0130.673] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Users\\EEBsYm5\\Favorites\\Links\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\" [0130.673] wcscat (in: _Dest=0x7a26318, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Links\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Links\\68814F-Readme.txt" [0130.673] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Links\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\links\\68814f-readme.txt")) returned 0x20 [0130.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 [0130.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 Thread: id = 553 os_tid = 0x1060 [0123.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5a28 [0123.763] wcscpy (in: _Dest=0x3eb5a28, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0123.763] wcscat (in: _Dest=0x3eb5a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0123.763] wcscat (in: _Dest=0x3eb5a28, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*" [0123.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3238 [0123.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76724eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85cc4cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d7c0 [0124.340] wcscmp (_String1=".", _String2=".") returned 0 [0124.340] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76724eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85cc4cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.340] wcscmp (_String1="..", _String2=".") returned 1 [0124.340] wcscmp (_String1="..", _String2="..") returned 0 [0124.340] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x76724eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0124.341] wcscmp (_String1="as80.xsl", _String2=".") returned 1 [0124.341] wcscmp (_String1="as80.xsl", _String2="..") returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053d08 [0124.341] wcscpy (in: _Dest=0x3053d08, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0124.341] wcscat (in: _Dest=0x3053d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0124.341] wcscat (in: _Dest=0x3053d08, _Source="as80.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" [0125.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0125.472] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x85c065f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0125.472] wcscmp (_String1="as90.xsl", _String2=".") returned 1 [0125.472] wcscmp (_String1="as90.xsl", _String2="..") returned 1 [0125.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053b10 [0125.472] wcscpy (in: _Dest=0x3053b10, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0125.473] wcscat (in: _Dest=0x3053b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0125.473] wcscat (in: _Dest=0x3053b10, _Source="as90.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" [0125.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0125.474] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54bc00, ftCreationTime.dwHighDateTime=0x1c8dd73, ftLastAccessTime.dwLowDateTime=0x7674b010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d54bc00, ftLastWriteTime.dwHighDateTime=0x1c8dd73, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0125.474] wcscmp (_String1="Informix.xsl", _String2=".") returned 1 [0125.474] wcscmp (_String1="Informix.xsl", _String2="..") returned 1 [0125.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bea8 [0125.474] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0125.474] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0125.474] wcscat (in: _Dest=0x35bea8, _Source="Informix.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" [0125.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0125.476] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x7674b010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0125.476] wcscmp (_String1="msjet.xsl", _String2=".") returned 1 [0125.476] wcscmp (_String1="msjet.xsl", _String2="..") returned 1 [0125.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053870 [0125.476] wcscpy (in: _Dest=0x3053870, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0125.476] wcscat (in: _Dest=0x3053870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0125.476] wcscat (in: _Dest=0x3053870, _Source="msjet.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" [0125.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0125.477] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0125.477] wcscmp (_String1="sql2000.xsl", _String2=".") returned 1 [0125.477] wcscmp (_String1="sql2000.xsl", _String2="..") returned 1 [0125.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3052fe8 [0125.477] wcscpy (in: _Dest=0x3052fe8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0125.478] wcscat (in: _Dest=0x3052fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0125.478] wcscat (in: _Dest=0x3052fe8, _Source="sql2000.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" [0125.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0125.480] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0125.481] wcscmp (_String1="sql70.xsl", _String2=".") returned 1 [0125.481] wcscmp (_String1="sql70.xsl", _String2="..") returned 1 [0125.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053fa8 [0125.481] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0125.481] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0125.481] wcscat (in: _Dest=0x3053fa8, _Source="sql70.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" [0125.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0125.482] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e035000, ftCreationTime.dwHighDateTime=0x1c9b070, ftLastAccessTime.dwLowDateTime=0x7674b010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e035000, ftLastWriteTime.dwHighDateTime=0x1c9b070, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0125.482] wcscmp (_String1="sql90.xsl", _String2=".") returned 1 [0125.482] wcscmp (_String1="sql90.xsl", _String2="..") returned 1 [0125.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053720 [0125.482] wcscpy (in: _Dest=0x3053720, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0125.482] wcscat (in: _Dest=0x3053720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0125.482] wcscat (in: _Dest=0x3053720, _Source="sql90.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" [0125.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0125.484] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54bc00, ftCreationTime.dwHighDateTime=0x1c8dd73, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d54bc00, ftLastWriteTime.dwHighDateTime=0x1c8dd73, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0125.484] wcscmp (_String1="Sybase.xsl", _String2=".") returned 1 [0125.484] wcscmp (_String1="Sybase.xsl", _String2="..") returned 1 [0125.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3052f40 [0125.484] wcscpy (in: _Dest=0x3052f40, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges" [0125.484] wcscat (in: _Dest=0x3052f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\" [0125.484] wcscat (in: _Dest=0x3052f40, _Source="Sybase.xsl" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" [0125.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0125.486] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54bc00, ftCreationTime.dwHighDateTime=0x1c8dd73, ftLastAccessTime.dwLowDateTime=0x85cc4cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3d54bc00, ftLastWriteTime.dwHighDateTime=0x1c8dd73, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0125.486] FindClose (in: hFindFile=0x7a2d7c0 | out: hFindFile=0x7a2d7c0) returned 1 [0125.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3238) returned 1 [0125.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5a28) returned 1 [0125.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1cb8) returned 1 Thread: id = 554 os_tid = 0x1064 [0123.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb61e0 [0123.776] wcscpy (in: _Dest=0x3eb61e0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" [0123.776] wcscat (in: _Dest=0x3eb61e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\" [0123.777] wcscat (in: _Dest=0x3eb61e0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*" [0123.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3bd8 [0123.777] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0124.342] wcscmp (_String1=".", _String2=".") returned 0 [0124.342] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42dc8ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42dc8ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.342] wcscmp (_String1="..", _String2=".") returned 1 [0124.342] wcscmp (_String1="..", _String2="..") returned 0 [0124.342] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0124.342] wcscmp (_String1="1033", _String2=".") returned 1 [0124.342] wcscmp (_String1="1033", _String2="..") returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5f80 [0124.342] wcscpy (in: _Dest=0x3eb5f80, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources" [0124.342] wcscat (in: _Dest=0x3eb5f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\" [0124.342] wcscat (in: _Dest=0x3eb5f80, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0126.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb5f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0126.894] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0126.894] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0126.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3bd8) returned 1 [0126.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb61e0) returned 1 [0126.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 555 os_tid = 0x1068 [0123.778] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\everywhere.search-ms")) returned 0x23 [0123.778] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms", dwFileAttributes=0x20) returned 1 [0128.925] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc00 [0128.925] GetFileSizeEx (in: hFile=0xc00, lpFileSize=0xca6fec4 | out: lpFileSize=0xca6fec4*=248) returned 1 [0128.925] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0xf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.925] ReadFile (in: hFile=0xc00, lpBuffer=0xca6fea0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xca6feb0, lpOverlapped=0x0 | out: lpBuffer=0xca6fea0*, lpNumberOfBytesRead=0xca6feb0*=0x4, lpOverlapped=0x0) returned 1 [0128.927] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0128.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0128.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0128.927] NtQuerySystemTime (in: CurrentTime=0xca6fe38 | out: CurrentTime=0xca6fe38*=132462177083244000) returned 0x0 [0128.927] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x7ebd0acf [0128.927] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x59fcb18d [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x275d22c [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x3be8657a [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x14b61e82 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x5319b1df [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x34e3365 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x553ce367 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x2b18b2cc [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0xf4d6adb [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x26576850 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x44c02263 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x647f2c7e [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x2f44d1eb [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x69d10845 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x492d3302 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x2b1582df [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x46f9744f [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x20212932 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x58074c6d [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x4680ef4d [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x31a9f5c [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x31ca3521 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x7888411a [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x4bf85e55 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x68c15900 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0xc3ae625 [0128.928] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x7a704231 [0128.929] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x693cbece [0128.929] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x493d76ab [0128.929] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x6e04eba8 [0128.929] RtlRandomEx (in: Seed=0xca6fe30 | out: Seed=0xca6fe30) returned 0x1224b636 [0128.939] ReadFile (in: hFile=0xc00, lpBuffer=0x7cccbd0, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0xca6fe2c, lpOverlapped=0x0 | out: lpBuffer=0x7cccbd0*, lpNumberOfBytesRead=0xca6fe2c*=0xf8, lpOverlapped=0x0) returned 1 [0128.939] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.939] WriteFile (in: hFile=0xc00, lpBuffer=0x7cd07d8*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xca6fe30, lpOverlapped=0x0 | out: lpBuffer=0x7cd07d8*, lpNumberOfBytesWritten=0xca6fe30*=0xf8, lpOverlapped=0x0) returned 1 [0129.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0129.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0129.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0129.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd07d8) returned 1 [0129.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccbd0) returned 1 [0129.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0129.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48cc0) returned 1 [0129.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2de80 [0129.630] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.630] WriteFile (in: hFile=0xc00, lpBuffer=0x3d56180*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xca6feb8, lpOverlapped=0x0 | out: lpBuffer=0x3d56180*, lpNumberOfBytesWritten=0xca6feb8*=0x11a, lpOverlapped=0x0) returned 1 [0130.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07c38 [0130.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0130.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0130.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5db0) returned 1 [0130.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c08 [0130.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0130.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0130.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3038) returned 1 [0130.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0130.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0130.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6ba8 [0130.095] sprintf (in: _Dest=0x2fe6ba8, _Format="%c%c" | out: _Dest="85") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6baa, _Format="%c%c" | out: _Dest="ec") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bac, _Format="%c%c" | out: _Dest="a7") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bae, _Format="%c%c" | out: _Dest="24") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bb0, _Format="%c%c" | out: _Dest="9d") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bb2, _Format="%c%c" | out: _Dest="23") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bb4, _Format="%c%c" | out: _Dest="b7") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bb6, _Format="%c%c" | out: _Dest="e4") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bb8, _Format="%c%c" | out: _Dest="a3") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bba, _Format="%c%c" | out: _Dest="03") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bbc, _Format="%c%c" | out: _Dest="cd") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bbe, _Format="%c%c" | out: _Dest="3b") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bc0, _Format="%c%c" | out: _Dest="4d") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bc2, _Format="%c%c" | out: _Dest="21") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bc4, _Format="%c%c" | out: _Dest="21") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bc6, _Format="%c%c" | out: _Dest="c5") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bc8, _Format="%c%c" | out: _Dest="d6") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bca, _Format="%c%c" | out: _Dest="3f") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bcc, _Format="%c%c" | out: _Dest="7a") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bce, _Format="%c%c" | out: _Dest="90") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bd0, _Format="%c%c" | out: _Dest="f7") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bd2, _Format="%c%c" | out: _Dest="be") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bd4, _Format="%c%c" | out: _Dest="c7") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bd6, _Format="%c%c" | out: _Dest="ba") returned 2 [0130.095] sprintf (in: _Dest=0x2fe6bd8, _Format="%c%c" | out: _Dest="68") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6bda, _Format="%c%c" | out: _Dest="ef") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6bdc, _Format="%c%c" | out: _Dest="96") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6bde, _Format="%c%c" | out: _Dest="3f") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6be0, _Format="%c%c" | out: _Dest="91") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6be2, _Format="%c%c" | out: _Dest="5b") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6be4, _Format="%c%c" | out: _Dest="32") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6be6, _Format="%c%c" | out: _Dest="d7") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6be8, _Format="%c%c" | out: _Dest="c6") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6bea, _Format="%c%c" | out: _Dest="f5") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6bec, _Format="%c%c" | out: _Dest="43") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6bee, _Format="%c%c" | out: _Dest="60") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6bf0, _Format="%c%c" | out: _Dest="df") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6bf2, _Format="%c%c" | out: _Dest="2e") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6bf4, _Format="%c%c" | out: _Dest="ce") returned 2 [0130.096] sprintf (in: _Dest=0x2fe6bf6, _Format="%c%c" | out: _Dest="80") returned 2 [0130.096] RtlInitAnsiString (in: DestinationString=0xca6fe40, SourceString="85eca7249d23b7e4a303cd3b4d2121c5d63f7a90f7bec7ba68ef963f915b32d7c6f54360df2ece80" | out: DestinationString="85eca7249d23b7e4a303cd3b4d2121c5d63f7a90f7bec7ba68ef963f915b32d7c6f54360df2ece80") [0130.096] RtlAnsiStringToUnicodeString (in: DestinationString=0xca6fe38, SourceString="85eca7249d23b7e4a303cd3b4d2121c5d63f7a90f7bec7ba68ef963f915b32d7c6f54360df2ece80", AllocateDestinationString=1 | out: DestinationString="85eca7249d23b7e4a303cd3b4d2121c5d63f7a90f7bec7ba68ef963f915b32d7c6f54360df2ece80") returned 0x0 [0130.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c218 [0130.097] wcscat (in: _Dest=0x3f3dfe0, _Source="85eca7249d23b7e4a303" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\85eca7249d23b7e4a303") returned="C:\\Users\\EEBsYm5\\Searches\\85eca7249d23b7e4a303" [0130.097] wcscat (in: _Dest=0x3f3dfe0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\85eca7249d23b7e4a303.68814f") returned="C:\\Users\\EEBsYm5\\Searches\\85eca7249d23b7e4a303.68814f" [0130.097] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Searches\\85eca7249d23b7e4a303.68814f", NtPathName=0xca6fe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Searches\\85eca7249d23b7e4a303.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d447b0 [0130.097] NtSetInformationFile (FileHandle=0xc00, IoStatusBlock=0xca6fe38, FileInformation=0x3d447b0, Length=0x82, FileInformationClass=0xa) returned 0x0 [0130.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 [0130.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3fd60) returned 1 [0130.207] NtQueryInformationFile (in: FileHandle=0xc00, IoStatusBlock=0xca6fe08, FileInformation=0xca6fe10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xca6fe08, FileInformation=0xca6fe10) returned 0x0 [0130.207] NtSetInformationFile (FileHandle=0xc00, IoStatusBlock=0xca6fe08, FileInformation=0xca6fe10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0130.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 [0130.291] FlushFileBuffers (hFile=0xc00) returned 1 [0130.310] CloseHandle (hObject=0xc00) returned 1 [0130.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47108 [0130.360] wcscpy (in: _Dest=0x3d47108, _Source="C:\\Users\\EEBsYm5\\Searches\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0130.361] wcscat (in: _Dest=0x3d47108, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Searches\\68814F-Readme.txt" [0130.361] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\searches\\68814f-readme.txt")) returned 0xffffffff [0130.361] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\searches\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13fc [0130.547] WriteFile (in: hFile=0x13fc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xca6fe4c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xca6fe4c*=0x8b9, lpOverlapped=0x0) returned 1 [0130.549] CloseHandle (hObject=0x13fc) returned 1 [0130.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47108) returned 1 [0130.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee01d8) returned 1 Thread: id = 556 os_tid = 0x106c [0123.779] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\indexed locations.search-ms")) returned 0x23 [0123.779] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x20) returned 1 [0131.263] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\eebsym5\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1728 [0131.264] GetFileSizeEx (in: hFile=0x1728, lpFileSize=0xcb3fdcc | out: lpFileSize=0xcb3fdcc*=248) returned 1 [0131.264] SetFilePointerEx (in: hFile=0x1728, liDistanceToMove=0xf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.264] ReadFile (in: hFile=0x1728, lpBuffer=0xcb3fda8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcb3fdb8, lpOverlapped=0x0 | out: lpBuffer=0xcb3fda8*, lpNumberOfBytesRead=0xcb3fdb8*=0x4, lpOverlapped=0x0) returned 1 [0131.267] SetFilePointerEx (in: hFile=0x1728, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0131.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0131.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0131.268] NtQuerySystemTime (in: CurrentTime=0xcb3fd40 | out: CurrentTime=0xcb3fd40*=132462177106488000) returned 0x0 [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x654868ef [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x2fa4d378 [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x43254135 [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x1d10d74b [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0xb67a683 [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x6da48970 [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x75010f0d [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x6f2ec1e4 [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x5c60e29e [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x45ecf0c9 [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x5116d021 [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x2669214d [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0xa7b8df5 [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x24934daf [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x1ac7eec3 [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0xadda44e [0131.268] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x2bb9e06c [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x1a223a04 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x65ae39fa [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x3b346cf8 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x15571198 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x7e30691 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x442ae6fa [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x372d69a5 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x77c5c42a [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x7c31ca81 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x4b2b709 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x41191c85 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x434a2b89 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x11c46db3 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x2f26d7e1 [0131.269] RtlRandomEx (in: Seed=0xcb3fd38 | out: Seed=0xcb3fd38) returned 0x1458a48f [0131.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0131.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb63a0 [0131.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb9fa8 [0131.383] ReadFile (in: hFile=0x1728, lpBuffer=0x7cb63a0, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0xcb3fd34, lpOverlapped=0x0 | out: lpBuffer=0x7cb63a0*, lpNumberOfBytesRead=0xcb3fd34*=0xf8, lpOverlapped=0x0) returned 1 [0131.383] SetFilePointerEx (in: hFile=0x1728, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.383] WriteFile (in: hFile=0x1728, lpBuffer=0x7cb9fa8*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xcb3fd38, lpOverlapped=0x0 | out: lpBuffer=0x7cb9fa8*, lpNumberOfBytesWritten=0xcb3fd38*=0xf8, lpOverlapped=0x0) returned 1 [0132.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0132.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0132.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec49d8) returned 1 [0132.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa8) returned 1 [0132.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63a0) returned 1 [0132.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0132.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0132.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e590f8 [0132.624] SetFilePointerEx (in: hFile=0x1728, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.624] WriteFile (in: hFile=0x1728, lpBuffer=0x3ec9b98*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0xcb3fdc0, lpOverlapped=0x0 | out: lpBuffer=0x3ec9b98*, lpNumberOfBytesWritten=0xcb3fdc0*=0x128, lpOverlapped=0x0) returned 1 [0132.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0132.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x349128 [0132.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0132.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0132.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066b80 [0132.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0132.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0132.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0132.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x349128) returned 1 [0132.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0132.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6d) returned 0x349128 [0132.647] sprintf (in: _Dest=0x349128, _Format="%c%c" | out: _Dest="e6") returned 2 [0132.647] sprintf (in: _Dest=0x34912a, _Format="%c%c" | out: _Dest="f1") returned 2 [0132.647] sprintf (in: _Dest=0x34912c, _Format="%c%c" | out: _Dest="c5") returned 2 [0132.647] sprintf (in: _Dest=0x34912e, _Format="%c%c" | out: _Dest="f3") returned 2 [0132.647] sprintf (in: _Dest=0x349130, _Format="%c%c" | out: _Dest="08") returned 2 [0132.647] sprintf (in: _Dest=0x349132, _Format="%c%c" | out: _Dest="d0") returned 2 [0132.648] sprintf (in: _Dest=0x349134, _Format="%c%c" | out: _Dest="1a") returned 2 [0132.648] sprintf (in: _Dest=0x349136, _Format="%c%c" | out: _Dest="3d") returned 2 [0132.648] sprintf (in: _Dest=0x349138, _Format="%c%c" | out: _Dest="9c") returned 2 [0132.648] sprintf (in: _Dest=0x34913a, _Format="%c%c" | out: _Dest="8c") returned 2 [0132.648] sprintf (in: _Dest=0x34913c, _Format="%c%c" | out: _Dest="00") returned 2 [0132.648] sprintf (in: _Dest=0x34913e, _Format="%c%c" | out: _Dest="c9") returned 2 [0132.648] sprintf (in: _Dest=0x349140, _Format="%c%c" | out: _Dest="77") returned 2 [0132.648] sprintf (in: _Dest=0x349142, _Format="%c%c" | out: _Dest="d5") returned 2 [0132.648] sprintf (in: _Dest=0x349144, _Format="%c%c" | out: _Dest="ba") returned 2 [0132.648] sprintf (in: _Dest=0x349146, _Format="%c%c" | out: _Dest="c7") returned 2 [0132.648] sprintf (in: _Dest=0x349148, _Format="%c%c" | out: _Dest="06") returned 2 [0132.648] sprintf (in: _Dest=0x34914a, _Format="%c%c" | out: _Dest="32") returned 2 [0132.648] sprintf (in: _Dest=0x34914c, _Format="%c%c" | out: _Dest="47") returned 2 [0132.648] sprintf (in: _Dest=0x34914e, _Format="%c%c" | out: _Dest="b9") returned 2 [0132.648] sprintf (in: _Dest=0x349150, _Format="%c%c" | out: _Dest="13") returned 2 [0132.648] sprintf (in: _Dest=0x349152, _Format="%c%c" | out: _Dest="df") returned 2 [0132.648] sprintf (in: _Dest=0x349154, _Format="%c%c" | out: _Dest="b4") returned 2 [0132.648] sprintf (in: _Dest=0x349156, _Format="%c%c" | out: _Dest="36") returned 2 [0132.648] sprintf (in: _Dest=0x349158, _Format="%c%c" | out: _Dest="0b") returned 2 [0132.649] sprintf (in: _Dest=0x34915a, _Format="%c%c" | out: _Dest="bd") returned 2 [0132.649] sprintf (in: _Dest=0x34915c, _Format="%c%c" | out: _Dest="f1") returned 2 [0132.649] sprintf (in: _Dest=0x34915e, _Format="%c%c" | out: _Dest="96") returned 2 [0132.649] sprintf (in: _Dest=0x349160, _Format="%c%c" | out: _Dest="15") returned 2 [0132.649] sprintf (in: _Dest=0x349162, _Format="%c%c" | out: _Dest="16") returned 2 [0132.649] sprintf (in: _Dest=0x349164, _Format="%c%c" | out: _Dest="75") returned 2 [0132.649] sprintf (in: _Dest=0x349166, _Format="%c%c" | out: _Dest="74") returned 2 [0132.649] sprintf (in: _Dest=0x349168, _Format="%c%c" | out: _Dest="32") returned 2 [0132.649] sprintf (in: _Dest=0x34916a, _Format="%c%c" | out: _Dest="11") returned 2 [0132.649] sprintf (in: _Dest=0x34916c, _Format="%c%c" | out: _Dest="24") returned 2 [0132.649] sprintf (in: _Dest=0x34916e, _Format="%c%c" | out: _Dest="b9") returned 2 [0132.649] sprintf (in: _Dest=0x349170, _Format="%c%c" | out: _Dest="ef") returned 2 [0132.649] sprintf (in: _Dest=0x349172, _Format="%c%c" | out: _Dest="9b") returned 2 [0132.649] sprintf (in: _Dest=0x349174, _Format="%c%c" | out: _Dest="96") returned 2 [0132.649] sprintf (in: _Dest=0x349176, _Format="%c%c" | out: _Dest="51") returned 2 [0132.649] sprintf (in: _Dest=0x349178, _Format="%c%c" | out: _Dest="66") returned 2 [0132.649] sprintf (in: _Dest=0x34917a, _Format="%c%c" | out: _Dest="10") returned 2 [0132.649] sprintf (in: _Dest=0x34917c, _Format="%c%c" | out: _Dest="bb") returned 2 [0132.649] sprintf (in: _Dest=0x34917e, _Format="%c%c" | out: _Dest="03") returned 2 [0132.649] sprintf (in: _Dest=0x349180, _Format="%c%c" | out: _Dest="41") returned 2 [0132.649] sprintf (in: _Dest=0x349182, _Format="%c%c" | out: _Dest="81") returned 2 [0132.649] sprintf (in: _Dest=0x349184, _Format="%c%c" | out: _Dest="ef") returned 2 [0132.649] sprintf (in: _Dest=0x349186, _Format="%c%c" | out: _Dest="28") returned 2 [0132.649] sprintf (in: _Dest=0x349188, _Format="%c%c" | out: _Dest="61") returned 2 [0132.649] sprintf (in: _Dest=0x34918a, _Format="%c%c" | out: _Dest="20") returned 2 [0132.650] sprintf (in: _Dest=0x34918c, _Format="%c%c" | out: _Dest="95") returned 2 [0132.650] sprintf (in: _Dest=0x34918e, _Format="%c%c" | out: _Dest="60") returned 2 [0132.650] sprintf (in: _Dest=0x349190, _Format="%c%c" | out: _Dest="5a") returned 2 [0132.650] sprintf (in: _Dest=0x349192, _Format="%c%c" | out: _Dest="42") returned 2 [0132.650] RtlInitAnsiString (in: DestinationString=0xcb3fd48, SourceString="e6f1c5f308d01a3d9c8c00c977d5bac7063247b913dfb4360bbdf19615167574321124b9ef9b96516610bb034181ef28612095605a42" | out: DestinationString="e6f1c5f308d01a3d9c8c00c977d5bac7063247b913dfb4360bbdf19615167574321124b9ef9b96516610bb034181ef28612095605a42") [0132.650] RtlAnsiStringToUnicodeString (in: DestinationString=0xcb3fd40, SourceString="e6f1c5f308d01a3d9c8c00c977d5bac7063247b913dfb4360bbdf19615167574321124b9ef9b96516610bb034181ef28612095605a42", AllocateDestinationString=1 | out: DestinationString="e6f1c5f308d01a3d9c8c00c977d5bac7063247b913dfb4360bbdf19615167574321124b9ef9b96516610bb034181ef28612095605a42") returned 0x0 [0132.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc3d08 [0132.650] wcscat (in: _Dest=0x3f3c208, _Source="e6f1c5f308d01a3d9c8c00c977d" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\e6f1c5f308d01a3d9c8c00c977d") returned="C:\\Users\\EEBsYm5\\Searches\\e6f1c5f308d01a3d9c8c00c977d" [0132.650] wcscat (in: _Dest=0x3f3c208, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\e6f1c5f308d01a3d9c8c00c977d.68814f") returned="C:\\Users\\EEBsYm5\\Searches\\e6f1c5f308d01a3d9c8c00c977d.68814f" [0132.650] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Searches\\e6f1c5f308d01a3d9c8c00c977d.68814f", NtPathName=0xcb3fd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Searches\\e6f1c5f308d01a3d9c8c00c977d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32bd78 [0132.650] NtSetInformationFile (FileHandle=0x1728, IoStatusBlock=0xcb3fd40, FileInformation=0x32bd78, Length=0x90, FileInformationClass=0xa) returned 0x0 [0132.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 [0132.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a31e80) returned 1 [0132.661] NtQueryInformationFile (in: FileHandle=0x1728, IoStatusBlock=0xcb3fd10, FileInformation=0xcb3fd18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcb3fd10, FileInformation=0xcb3fd18) returned 0x0 [0132.661] NtSetInformationFile (FileHandle=0x1728, IoStatusBlock=0xcb3fd10, FileInformation=0xcb3fd18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 [0132.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 [0132.666] FlushFileBuffers (hFile=0x1728) returned 1 [0135.209] CloseHandle (hObject=0x1728) returned 1 [0135.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee01d8 [0135.211] wcscpy (in: _Dest=0x3ee01d8, _Source="C:\\Users\\EEBsYm5\\Searches\\" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\") returned="C:\\Users\\EEBsYm5\\Searches\\" [0135.211] wcscat (in: _Dest=0x3ee01d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Searches\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Searches\\68814F-Readme.txt" [0135.211] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Searches\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\searches\\68814f-readme.txt")) returned 0x20 [0135.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee01d8) returned 1 [0135.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 Thread: id = 557 os_tid = 0x1070 [0123.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a234c0 [0123.780] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Program Files\\Common Files\\Java\\Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0123.780] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\" [0123.780] wcscat (in: _Dest=0x7a234c0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\*") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\*" [0123.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0123.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0123.782] wcscmp (_String1=".", _String2=".") returned 0 [0123.782] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701bb6e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70253c60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.782] wcscmp (_String1="..", _String2=".") returned 1 [0123.782] wcscmp (_String1="..", _String2="..") returned 0 [0123.782] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd6dc00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x7022db00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x9fd6dc00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x3cb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaucheck.exe", cAlternateFileName="")) returned 1 [0123.782] wcscmp (_String1="jaucheck.exe", _String2=".") returned 1 [0123.782] wcscmp (_String1="jaucheck.exe", _String2="..") returned 1 [0123.782] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d748200, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x7022db00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x9d748200, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x39780, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureg.exe", cAlternateFileName="")) returned 1 [0123.782] wcscmp (_String1="jaureg.exe", _String2=".") returned 1 [0123.782] wcscmp (_String1="jaureg.exe", _String2="..") returned 1 [0123.782] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b122800, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x9b122800, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x7bd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jucheck.exe", cAlternateFileName="")) returned 1 [0123.782] wcscmp (_String1="jucheck.exe", _String2=".") returned 1 [0123.782] wcscmp (_String1="jucheck.exe", _String2="..") returned 1 [0123.782] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x977ea100, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x977ea100, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x3e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 1 [0123.782] wcscmp (_String1="jusched.exe", _String2=".") returned 1 [0123.782] wcscmp (_String1="jusched.exe", _String2="..") returned 1 [0123.782] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93eb1a00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x93eb1a00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x583, dwReserved0=0x0, dwReserved1=0x0, cFileName="task.xml", cAlternateFileName="")) returned 1 [0123.782] wcscmp (_String1="task.xml", _String2=".") returned 1 [0123.783] wcscmp (_String1="task.xml", _String2="..") returned 1 [0123.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f830 [0123.783] wcscpy (in: _Dest=0x3f3f830, _Source="C:\\Program Files\\Common Files\\Java\\Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0123.783] wcscat (in: _Dest=0x3f3f830, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\" [0123.783] wcscat (in: _Dest=0x3f3f830, _Source="task.xml" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml" [0125.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0125.968] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93eb1a00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x93eb1a00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 1 [0125.968] wcscmp (_String1="task64.xml", _String2=".") returned 1 [0125.968] wcscmp (_String1="task64.xml", _String2="..") returned 1 [0125.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19998 [0125.968] wcscpy (in: _Dest=0x3e19998, _Source="C:\\Program Files\\Common Files\\Java\\Java Update" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update") returned="C:\\Program Files\\Common Files\\Java\\Java Update" [0125.968] wcscat (in: _Dest=0x3e19998, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\" [0125.968] wcscat (in: _Dest=0x3e19998, _Source="task64.xml" | out: _Dest="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml") returned="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml" [0125.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0125.970] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93eb1a00, ftCreationTime.dwHighDateTime=0x1ce7715, ftLastAccessTime.dwLowDateTime=0x70253c60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x93eb1a00, ftLastWriteTime.dwHighDateTime=0x1ce7715, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 0 [0125.970] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0125.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0125.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 [0125.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b30) returned 1 Thread: id = 558 os_tid = 0x1074 [0123.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif")) returned 0x20 [0124.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif", dwFileAttributes=0x20) returned 0 [0124.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.343] GetLastError () returned 0x5 [0124.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif", dwFileAttributes=0x20) returned 0 [0124.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4e60) returned 1 Thread: id = 559 os_tid = 0x1078 [0123.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a398 [0123.784] wcscpy (in: _Dest=0x3e1a398, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033" [0123.784] wcscat (in: _Dest=0x3e1a398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\" [0123.784] wcscat (in: _Dest=0x3e1a398, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*" [0123.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2bc0 [0123.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592fd430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0123.785] wcscmp (_String1=".", _String2=".") returned 0 [0123.785] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x592d72d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592fd430, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.785] wcscmp (_String1="..", _String2=".") returned 1 [0123.785] wcscmp (_String1="..", _String2="..") returned 0 [0123.785] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257b00, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x592fd430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1257b00, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0123.785] wcscmp (_String1="VSTAClientPkgUI.dll", _String2=".") returned 1 [0123.785] wcscmp (_String1="VSTAClientPkgUI.dll", _String2="..") returned 1 [0123.785] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec32100, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdec32100, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0123.785] wcscmp (_String1="VSTAProjectUI.dll", _String2=".") returned 1 [0123.785] wcscmp (_String1="VSTAProjectUI.dll", _String2="..") returned 1 [0123.785] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec32100, ftCreationTime.dwHighDateTime=0x1c9e4a0, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdec32100, ftLastWriteTime.dwHighDateTime=0x1c9e4a0, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0123.785] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0123.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2bc0) returned 1 [0123.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a398) returned 1 [0123.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 Thread: id = 560 os_tid = 0x107c [0123.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 0x20 [0125.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x20) returned 0 [0125.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.345] GetLastError () returned 0x5 [0125.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x20) returned 0 [0125.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 561 os_tid = 0x1080 [0123.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 0x20 [0125.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x20) returned 0 [0125.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.347] GetLastError () returned 0x5 [0125.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x20) returned 0 [0125.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 562 os_tid = 0x1084 [0123.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 0x20 [0125.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x20) returned 0 [0125.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.349] GetLastError () returned 0x5 [0125.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x20) returned 0 [0125.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 563 os_tid = 0x1088 [0123.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 0x20 [0125.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x20) returned 0 [0125.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.351] GetLastError () returned 0x5 [0125.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x20) returned 0 [0125.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 564 os_tid = 0x108c [0123.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 0x20 [0125.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x20) returned 0 [0125.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.354] GetLastError () returned 0x5 [0125.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x20) returned 0 [0125.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 565 os_tid = 0x1090 [0123.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 0x20 [0125.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x20) returned 0 [0125.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.356] GetLastError () returned 0x5 [0125.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x20) returned 0 [0125.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 566 os_tid = 0x1094 [0123.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 0x20 [0125.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x20) returned 0 [0125.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.358] GetLastError () returned 0x5 [0125.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x20) returned 0 [0125.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 567 os_tid = 0x1098 [0123.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 0x20 [0125.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x20) returned 0 [0125.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.360] GetLastError () returned 0x5 [0125.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x20) returned 0 [0125.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 568 os_tid = 0x109c [0123.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 0x20 [0125.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x20) returned 0 [0125.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.362] GetLastError () returned 0x5 [0125.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x20) returned 0 [0125.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 569 os_tid = 0x10a0 [0123.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 0x20 [0125.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x20) returned 0 [0125.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.364] GetLastError () returned 0x5 [0125.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x20) returned 0 [0125.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 570 os_tid = 0x10a4 [0123.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 0x20 [0125.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x20) returned 0 [0125.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.366] GetLastError () returned 0x5 [0125.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x20) returned 0 [0125.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 571 os_tid = 0x10a8 [0123.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 0x20 [0125.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x20) returned 0 [0125.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.369] GetLastError () returned 0x5 [0125.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x20) returned 0 [0125.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 572 os_tid = 0x10ac [0123.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 0x20 [0125.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x20) returned 0 [0125.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.371] GetLastError () returned 0x5 [0125.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x20) returned 0 [0125.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 573 os_tid = 0x10b0 [0123.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 0x20 [0125.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x20) returned 0 [0125.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.373] GetLastError () returned 0x5 [0125.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x20) returned 0 [0125.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 574 os_tid = 0x10b4 [0123.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 0x20 [0125.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x20) returned 0 [0125.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.375] GetLastError () returned 0x5 [0125.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x20) returned 0 [0125.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 575 os_tid = 0x10b8 [0123.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 0x20 [0124.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x20) returned 0 [0124.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.854] GetLastError () returned 0x5 [0124.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x20) returned 0 [0124.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 576 os_tid = 0x10bc [0123.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 0x20 [0125.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x20) returned 0 [0125.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.342] GetLastError () returned 0x5 [0125.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x20) returned 0 [0125.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 577 os_tid = 0x10c0 [0124.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 0x20 [0125.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x20) returned 0 [0125.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.340] GetLastError () returned 0x5 [0125.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x20) returned 0 [0125.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9808) returned 1 Thread: id = 578 os_tid = 0x10cc [0124.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6e70 [0124.007] wcscpy (in: _Dest=0x2ff6e70, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" [0124.007] wcscat (in: _Dest=0x2ff6e70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\" [0124.007] wcscat (in: _Dest=0x2ff6e70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*" [0124.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0124.007] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d680 [0124.007] wcscmp (_String1=".", _String2=".") returned 0 [0124.007] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b9b69d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.007] wcscmp (_String1="..", _String2=".") returned 1 [0124.007] wcscmp (_String1="..", _String2="..") returned 0 [0124.007] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80607400, ftCreationTime.dwHighDateTime=0x1c9c5bf, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80607400, ftLastWriteTime.dwHighDateTime=0x1c9c5bf, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 1 [0124.007] wcscmp (_String1="SynchronizationEula.rtf", _String2=".") returned 1 [0124.007] wcscmp (_String1="SynchronizationEula.rtf", _String2="..") returned 1 [0124.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x2ff1f88 [0124.008] wcscpy (in: _Dest=0x2ff1f88, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements" [0124.008] wcscat (in: _Dest=0x2ff1f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\" [0124.008] wcscat (in: _Dest=0x2ff1f88, _Source="SynchronizationEula.rtf" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" [0133.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff1f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e4 [0133.109] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80607400, ftCreationTime.dwHighDateTime=0x1c9c5bf, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x80607400, ftLastWriteTime.dwHighDateTime=0x1c9c5bf, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 0 [0133.109] FindClose (in: hFindFile=0x7a2d680 | out: hFindFile=0x7a2d680) returned 1 [0133.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0133.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 [0133.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 579 os_tid = 0x10d0 [0124.008] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn autos.url")) returned 0x20 [0124.409] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url", dwFileAttributes=0x20) returned 1 [0126.496] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1498 [0126.496] GetFileSizeEx (in: hFile=0x1498, lpFileSize=0x849fcf4 | out: lpFileSize=0x849fcf4*=133) returned 1 [0126.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0126.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5568 [0126.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0126.496] NtQuerySystemTime (in: CurrentTime=0x849fc68 | out: CurrentTime=0x849fc68*=132462177058908000) returned 0x0 [0126.496] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x6b5f5862 [0126.496] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x711f3d04 [0126.496] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x343d67a7 [0126.496] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x47ba53f1 [0126.496] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x73cf213 [0126.496] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x2c63ea2e [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x70ea0859 [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x231fdffe [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x585f274f [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x74e618c7 [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x46bd60fb [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x5216c7db [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x661b2dc5 [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x2375aad9 [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x7e9879c [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x7ac40d95 [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x697b3438 [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x45ff428c [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x564f7a02 [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x448703de [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x520368e5 [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x2252088b [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x46195a64 [0126.497] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x5da8ef14 [0126.498] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x5583a1a3 [0126.498] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x1ebae2 [0126.498] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x7dd6dbdf [0126.498] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x5fb674df [0126.498] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x4144a868 [0126.498] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x723714f4 [0126.498] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x5fef86c3 [0126.498] RtlRandomEx (in: Seed=0x849fc60 | out: Seed=0x849fc60) returned 0x735893c4 [0126.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc68) returned 1 [0126.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a69490 [0126.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b2a308 [0126.516] ReadFile (in: hFile=0x1498, lpBuffer=0x7a69490, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x849fc5c, lpOverlapped=0x0 | out: lpBuffer=0x7a69490*, lpNumberOfBytesRead=0x849fc5c*=0x85, lpOverlapped=0x0) returned 1 [0126.518] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.518] WriteFile (in: hFile=0x1498, lpBuffer=0x7b2a308*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x849fc60, lpOverlapped=0x0 | out: lpBuffer=0x7b2a308*, lpNumberOfBytesWritten=0x849fc60*=0x85, lpOverlapped=0x0) returned 1 [0129.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0129.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0129.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0129.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b2a308) returned 1 [0129.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69490) returned 1 [0129.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0129.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f20) returned 1 [0129.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85f48 [0129.985] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.985] WriteFile (in: hFile=0x1498, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x849fce8, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0x849fce8*=0x10c, lpOverlapped=0x0) returned 1 [0130.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85428 [0130.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50c60 [0130.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3df8 [0130.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3df8) returned 1 [0130.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3df8 [0130.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0130.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0130.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e98) returned 1 [0130.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0130.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85428) returned 1 [0130.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfa90 [0130.142] sprintf (in: _Dest=0x3dcfa90, _Format="%c%c" | out: _Dest="a3") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfa92, _Format="%c%c" | out: _Dest="13") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfa94, _Format="%c%c" | out: _Dest="ca") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfa96, _Format="%c%c" | out: _Dest="bc") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfa98, _Format="%c%c" | out: _Dest="29") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfa9a, _Format="%c%c" | out: _Dest="d3") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfa9c, _Format="%c%c" | out: _Dest="90") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfa9e, _Format="%c%c" | out: _Dest="af") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfaa0, _Format="%c%c" | out: _Dest="8d") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfaa2, _Format="%c%c" | out: _Dest="86") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfaa4, _Format="%c%c" | out: _Dest="3e") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfaa6, _Format="%c%c" | out: _Dest="25") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfaa8, _Format="%c%c" | out: _Dest="cb") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfaaa, _Format="%c%c" | out: _Dest="77") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfaac, _Format="%c%c" | out: _Dest="5f") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfaae, _Format="%c%c" | out: _Dest="36") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfab0, _Format="%c%c" | out: _Dest="03") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfab2, _Format="%c%c" | out: _Dest="08") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfab4, _Format="%c%c" | out: _Dest="2c") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfab6, _Format="%c%c" | out: _Dest="2e") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfab8, _Format="%c%c" | out: _Dest="6d") returned 2 [0130.142] sprintf (in: _Dest=0x3dcfaba, _Format="%c%c" | out: _Dest="d0") returned 2 [0130.143] sprintf (in: _Dest=0x3dcfabc, _Format="%c%c" | out: _Dest="ef") returned 2 [0130.143] sprintf (in: _Dest=0x3dcfabe, _Format="%c%c" | out: _Dest="d2") returned 2 [0130.143] sprintf (in: _Dest=0x3dcfac0, _Format="%c%c" | out: _Dest="b4") returned 2 [0130.143] sprintf (in: _Dest=0x3dcfac2, _Format="%c%c" | out: _Dest="d0") returned 2 [0130.143] RtlInitAnsiString (in: DestinationString=0x849fc70, SourceString="a313cabc29d390af8d863e25cb775f3603082c2e6dd0efd2b4d0" | out: DestinationString="a313cabc29d390af8d863e25cb775f3603082c2e6dd0efd2b4d0") [0130.143] RtlAnsiStringToUnicodeString (in: DestinationString=0x849fc68, SourceString="a313cabc29d390af8d863e25cb775f3603082c2e6dd0efd2b4d0", AllocateDestinationString=1 | out: DestinationString="a313cabc29d390af8d863e25cb775f3603082c2e6dd0efd2b4d0") returned 0x0 [0130.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e328 [0130.143] wcscat (in: _Dest=0x3f3be50, _Source="a313cabc29d39" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\a313cabc29d39") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\a313cabc29d39" [0130.143] wcscat (in: _Dest=0x3f3be50, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\a313cabc29d39.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\a313cabc29d39.68814f" [0130.143] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\a313cabc29d39.68814f", NtPathName=0x849fc60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\a313cabc29d39.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb6900 [0130.143] NtSetInformationFile (FileHandle=0x1498, IoStatusBlock=0x849fc68, FileInformation=0x3eb6900, Length=0x90, FileInformationClass=0xa) returned 0x0 [0130.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6900) returned 1 [0130.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a42880) returned 1 [0130.248] NtQueryInformationFile (in: FileHandle=0x1498, IoStatusBlock=0x849fc38, FileInformation=0x849fc40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x849fc38, FileInformation=0x849fc40) returned 0x0 [0130.248] NtSetInformationFile (FileHandle=0x1498, IoStatusBlock=0x849fc38, FileInformation=0x849fc40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 [0130.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0130.319] FlushFileBuffers (hFile=0x1498) returned 1 [0130.352] CloseHandle (hObject=0x1498) returned 1 [0130.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19698 [0130.380] wcscpy (in: _Dest=0x3e19698, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0130.380] wcscat (in: _Dest=0x3e19698, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" [0130.381] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\68814f-readme.txt")) returned 0x20 [0130.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19698) returned 1 [0130.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 Thread: id = 580 os_tid = 0x10d4 [0124.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn entertainment.url")) returned 0x20 [0124.856] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url", dwFileAttributes=0x20) returned 1 [0127.385] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15f0 [0127.385] GetFileSizeEx (in: hFile=0x15f0, lpFileSize=0x8cef8bc | out: lpFileSize=0x8cef8bc*=133) returned 1 [0127.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca120 [0127.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0127.385] NtQuerySystemTime (in: CurrentTime=0x8cef830 | out: CurrentTime=0x8cef830*=132462177067800000) returned 0x0 [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x527ed76e [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x77150261 [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x25402088 [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x40382c7b [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x76f049dc [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x42945e27 [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x1d5a4c56 [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x2085d4e1 [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x67ba7aed [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x1c6908c7 [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x48163ca7 [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x7f428e9c [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x29617112 [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x2648a11e [0127.385] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x7678f35e [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x2656de1 [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x633f88b4 [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x5709fe4e [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x3f64f173 [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x51342dd6 [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x76ea29a1 [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x2e3e9921 [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x2410aea9 [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x4718504a [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x6b81dfcc [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x57df491e [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x65241ac1 [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x36bf8c5 [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x8f2e39d [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x17a78f1f [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0x7002d7 [0127.386] RtlRandomEx (in: Seed=0x8cef828 | out: Seed=0x8cef828) returned 0xb219660 [0127.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0127.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0127.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0127.395] ReadFile (in: hFile=0x15f0, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x8cef824, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0x8cef824*=0x85, lpOverlapped=0x0) returned 1 [0127.397] SetFilePointerEx (in: hFile=0x15f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.397] WriteFile (in: hFile=0x15f0, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x8cef828, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0x8cef828*=0x85, lpOverlapped=0x0) returned 1 [0129.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0129.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0129.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0129.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0129.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0129.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0129.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c98) returned 1 [0129.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2db80 [0129.446] SetFilePointerEx (in: hFile=0x15f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.446] WriteFile (in: hFile=0x15f0, lpBuffer=0x3d55028*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x8cef8b0, lpOverlapped=0x0 | out: lpBuffer=0x3d55028*, lpNumberOfBytesWritten=0x8cef8b0*=0x11c, lpOverlapped=0x0) returned 1 [0130.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095a20 [0130.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0130.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0130.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0130.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3013f88 [0130.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0130.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2908 [0130.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2908) returned 1 [0130.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0130.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095a20) returned 1 [0130.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6968 [0130.739] sprintf (in: _Dest=0x2fe6968, _Format="%c%c" | out: _Dest="2e") returned 2 [0130.739] sprintf (in: _Dest=0x2fe696a, _Format="%c%c" | out: _Dest="1e") returned 2 [0130.739] sprintf (in: _Dest=0x2fe696c, _Format="%c%c" | out: _Dest="09") returned 2 [0130.739] sprintf (in: _Dest=0x2fe696e, _Format="%c%c" | out: _Dest="6b") returned 2 [0130.739] sprintf (in: _Dest=0x2fe6970, _Format="%c%c" | out: _Dest="dc") returned 2 [0130.739] sprintf (in: _Dest=0x2fe6972, _Format="%c%c" | out: _Dest="d8") returned 2 [0130.739] sprintf (in: _Dest=0x2fe6974, _Format="%c%c" | out: _Dest="e8") returned 2 [0130.739] sprintf (in: _Dest=0x2fe6976, _Format="%c%c" | out: _Dest="63") returned 2 [0130.739] sprintf (in: _Dest=0x2fe6978, _Format="%c%c" | out: _Dest="77") returned 2 [0130.739] sprintf (in: _Dest=0x2fe697a, _Format="%c%c" | out: _Dest="0a") returned 2 [0130.739] sprintf (in: _Dest=0x2fe697c, _Format="%c%c" | out: _Dest="ed") returned 2 [0130.739] sprintf (in: _Dest=0x2fe697e, _Format="%c%c" | out: _Dest="3d") returned 2 [0130.739] sprintf (in: _Dest=0x2fe6980, _Format="%c%c" | out: _Dest="12") returned 2 [0130.739] sprintf (in: _Dest=0x2fe6982, _Format="%c%c" | out: _Dest="15") returned 2 [0130.739] sprintf (in: _Dest=0x2fe6984, _Format="%c%c" | out: _Dest="4b") returned 2 [0130.739] sprintf (in: _Dest=0x2fe6986, _Format="%c%c" | out: _Dest="8b") returned 2 [0130.739] sprintf (in: _Dest=0x2fe6988, _Format="%c%c" | out: _Dest="5c") returned 2 [0130.739] sprintf (in: _Dest=0x2fe698a, _Format="%c%c" | out: _Dest="60") returned 2 [0130.739] sprintf (in: _Dest=0x2fe698c, _Format="%c%c" | out: _Dest="c8") returned 2 [0130.740] sprintf (in: _Dest=0x2fe698e, _Format="%c%c" | out: _Dest="98") returned 2 [0130.740] sprintf (in: _Dest=0x2fe6990, _Format="%c%c" | out: _Dest="88") returned 2 [0130.740] sprintf (in: _Dest=0x2fe6992, _Format="%c%c" | out: _Dest="5f") returned 2 [0130.740] sprintf (in: _Dest=0x2fe6994, _Format="%c%c" | out: _Dest="8d") returned 2 [0130.740] sprintf (in: _Dest=0x2fe6996, _Format="%c%c" | out: _Dest="bc") returned 2 [0130.740] sprintf (in: _Dest=0x2fe6998, _Format="%c%c" | out: _Dest="57") returned 2 [0130.740] sprintf (in: _Dest=0x2fe699a, _Format="%c%c" | out: _Dest="d0") returned 2 [0130.740] sprintf (in: _Dest=0x2fe699c, _Format="%c%c" | out: _Dest="27") returned 2 [0130.740] sprintf (in: _Dest=0x2fe699e, _Format="%c%c" | out: _Dest="f9") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69a0, _Format="%c%c" | out: _Dest="b9") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69a2, _Format="%c%c" | out: _Dest="d9") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69a4, _Format="%c%c" | out: _Dest="2c") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69a6, _Format="%c%c" | out: _Dest="50") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69a8, _Format="%c%c" | out: _Dest="a8") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69aa, _Format="%c%c" | out: _Dest="25") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69ac, _Format="%c%c" | out: _Dest="41") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69ae, _Format="%c%c" | out: _Dest="72") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69b0, _Format="%c%c" | out: _Dest="02") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69b2, _Format="%c%c" | out: _Dest="ca") returned 2 [0130.740] sprintf (in: _Dest=0x2fe69b4, _Format="%c%c" | out: _Dest="10") returned 2 [0130.741] sprintf (in: _Dest=0x2fe69b6, _Format="%c%c" | out: _Dest="61") returned 2 [0130.741] sprintf (in: _Dest=0x2fe69b8, _Format="%c%c" | out: _Dest="94") returned 2 [0130.741] sprintf (in: _Dest=0x2fe69ba, _Format="%c%c" | out: _Dest="5b") returned 2 [0130.741] RtlInitAnsiString (in: DestinationString=0x8cef838, SourceString="2e1e096bdcd8e863770aed3d12154b8b5c60c898885f8dbc57d027f9b9d92c50a825417202ca1061945b" | out: DestinationString="2e1e096bdcd8e863770aed3d12154b8b5c60c898885f8dbc57d027f9b9d92c50a825417202ca1061945b") [0130.741] RtlAnsiStringToUnicodeString (in: DestinationString=0x8cef830, SourceString="2e1e096bdcd8e863770aed3d12154b8b5c60c898885f8dbc57d027f9b9d92c50a825417202ca1061945b", AllocateDestinationString=1 | out: DestinationString="2e1e096bdcd8e863770aed3d12154b8b5c60c898885f8dbc57d027f9b9d92c50a825417202ca1061945b") returned 0x0 [0130.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6d00 [0130.741] wcscat (in: _Dest=0x3eb5e50, _Source="2e1e096bdcd8e863770ae" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\2e1e096bdcd8e863770ae") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\2e1e096bdcd8e863770ae" [0130.741] wcscat (in: _Dest=0x3eb5e50, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\2e1e096bdcd8e863770ae.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\2e1e096bdcd8e863770ae.68814f" [0130.741] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\2e1e096bdcd8e863770ae.68814f", NtPathName=0x8cef828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\2e1e096bdcd8e863770ae.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053288 [0130.741] NtSetInformationFile (FileHandle=0x15f0, IoStatusBlock=0x8cef830, FileInformation=0x3053288, Length=0xa0, FileInformationClass=0xa) returned 0x0 [0130.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 [0130.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a73bd0) returned 1 [0130.744] NtQueryInformationFile (in: FileHandle=0x15f0, IoStatusBlock=0x8cef800, FileInformation=0x8cef808, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8cef800, FileInformation=0x8cef808) returned 0x0 [0130.744] NtSetInformationFile (FileHandle=0x15f0, IoStatusBlock=0x8cef800, FileInformation=0x8cef808, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5e50) returned 1 [0130.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 [0130.745] FlushFileBuffers (hFile=0x15f0) returned 1 [0130.783] CloseHandle (hObject=0x15f0) returned 1 [0130.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da66f0 [0130.785] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0130.785] wcscat (in: _Dest=0x3da66f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" [0130.785] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\68814f-readme.txt")) returned 0x20 [0130.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0130.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 581 os_tid = 0x10d8 [0124.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn money.url")) returned 0x20 [0124.856] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url", dwFileAttributes=0x20) returned 1 [0127.397] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15f4 [0127.397] GetFileSizeEx (in: hFile=0x15f4, lpFileSize=0x90ff954 | out: lpFileSize=0x90ff954*=133) returned 1 [0127.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0127.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0127.398] NtQuerySystemTime (in: CurrentTime=0x90ff8c8 | out: CurrentTime=0x90ff8c8*=132462177067956000) returned 0x0 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x666c3571 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x3d3a7a38 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x4a30f790 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x62217b4e [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x55b5f2a3 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x67001772 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x44b73d19 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x2533789d [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x4198ea2b [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x31b2e6de [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x36177ac2 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x70112773 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x3f1d0650 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x7990faa [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x76d3b7dc [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x8e71f98 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x43398100 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x3706de87 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x3699a771 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x6e0d1cc1 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x20f3a803 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x773ce5ce [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0xbf1e87d [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x24b1a763 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x38911c15 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x37715bb2 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x6ad5fb10 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x8302d3f [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x21845a3e [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x24b1ac71 [0127.398] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x22ae65cc [0127.399] RtlRandomEx (in: Seed=0x90ff8c0 | out: Seed=0x90ff8c0) returned 0x69d2c3b [0127.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0127.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0127.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0127.407] ReadFile (in: hFile=0x15f4, lpBuffer=0x7c08fc8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x90ff8bc, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesRead=0x90ff8bc*=0x85, lpOverlapped=0x0) returned 1 [0127.409] SetFilePointerEx (in: hFile=0x15f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.409] WriteFile (in: hFile=0x15f4, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x90ff8c0, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0x90ff8c0*=0x85, lpOverlapped=0x0) returned 1 [0127.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0127.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0127.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec46e0) returned 1 [0127.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0127.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0127.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0127.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84ff0) returned 1 [0127.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86278 [0127.779] SetFilePointerEx (in: hFile=0x15f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.779] WriteFile (in: hFile=0x15f4, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x90ff948, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x90ff948*=0x10c, lpOverlapped=0x0) returned 1 [0127.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07800 [0127.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30d8 [0127.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30d8) returned 1 [0127.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec30d8 [0127.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0127.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0127.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0127.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0127.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfa90 [0127.882] sprintf (in: _Dest=0x3dcfa90, _Format="%c%c" | out: _Dest="75") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfa92, _Format="%c%c" | out: _Dest="a2") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfa94, _Format="%c%c" | out: _Dest="4d") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfa96, _Format="%c%c" | out: _Dest="b1") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfa98, _Format="%c%c" | out: _Dest="c3") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfa9a, _Format="%c%c" | out: _Dest="3c") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfa9c, _Format="%c%c" | out: _Dest="0d") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfa9e, _Format="%c%c" | out: _Dest="a9") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfaa0, _Format="%c%c" | out: _Dest="1c") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfaa2, _Format="%c%c" | out: _Dest="b1") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfaa4, _Format="%c%c" | out: _Dest="82") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfaa6, _Format="%c%c" | out: _Dest="8b") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfaa8, _Format="%c%c" | out: _Dest="90") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfaaa, _Format="%c%c" | out: _Dest="cc") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfaac, _Format="%c%c" | out: _Dest="15") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfaae, _Format="%c%c" | out: _Dest="a9") returned 2 [0127.882] sprintf (in: _Dest=0x3dcfab0, _Format="%c%c" | out: _Dest="11") returned 2 [0127.883] sprintf (in: _Dest=0x3dcfab2, _Format="%c%c" | out: _Dest="74") returned 2 [0127.883] sprintf (in: _Dest=0x3dcfab4, _Format="%c%c" | out: _Dest="98") returned 2 [0127.883] sprintf (in: _Dest=0x3dcfab6, _Format="%c%c" | out: _Dest="0e") returned 2 [0127.883] sprintf (in: _Dest=0x3dcfab8, _Format="%c%c" | out: _Dest="e9") returned 2 [0127.883] sprintf (in: _Dest=0x3dcfaba, _Format="%c%c" | out: _Dest="21") returned 2 [0127.883] sprintf (in: _Dest=0x3dcfabc, _Format="%c%c" | out: _Dest="8d") returned 2 [0127.883] sprintf (in: _Dest=0x3dcfabe, _Format="%c%c" | out: _Dest="77") returned 2 [0127.883] sprintf (in: _Dest=0x3dcfac0, _Format="%c%c" | out: _Dest="63") returned 2 [0127.883] sprintf (in: _Dest=0x3dcfac2, _Format="%c%c" | out: _Dest="54") returned 2 [0127.883] RtlInitAnsiString (in: DestinationString=0x90ff8d0, SourceString="75a24db1c33c0da91cb1828b90cc15a91174980ee9218d776354" | out: DestinationString="75a24db1c33c0da91cb1828b90cc15a91174980ee9218d776354") [0127.883] RtlAnsiStringToUnicodeString (in: DestinationString=0x90ff8c8, SourceString="75a24db1c33c0da91cb1828b90cc15a91174980ee9218d776354", AllocateDestinationString=1 | out: DestinationString="75a24db1c33c0da91cb1828b90cc15a91174980ee9218d776354") returned 0x0 [0127.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e580 [0127.883] wcscat (in: _Dest=0x3eb9098, _Source="75a24db1c33c0" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a24db1c33c0") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a24db1c33c0" [0127.883] wcscat (in: _Dest=0x3eb9098, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a24db1c33c0.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a24db1c33c0.68814f" [0127.883] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a24db1c33c0.68814f", NtPathName=0x90ff8c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a24db1c33c0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb6a30 [0127.884] NtSetInformationFile (FileHandle=0x15f4, IoStatusBlock=0x90ff8c8, FileInformation=0x3eb6a30, Length=0x90, FileInformationClass=0xa) returned 0x0 [0127.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0127.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e014f0) returned 1 [0127.960] NtQueryInformationFile (in: FileHandle=0x15f4, IoStatusBlock=0x90ff898, FileInformation=0x90ff8a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x90ff898, FileInformation=0x90ff8a0) returned 0x0 [0127.960] NtSetInformationFile (FileHandle=0x15f4, IoStatusBlock=0x90ff898, FileInformation=0x90ff8a0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0127.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 [0127.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0127.970] FlushFileBuffers (hFile=0x15f4) returned 1 [0127.984] CloseHandle (hObject=0x15f4) returned 1 [0128.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19b98 [0128.004] wcscpy (in: _Dest=0x3e19b98, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0128.004] wcscat (in: _Dest=0x3e19b98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" [0128.004] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\68814f-readme.txt")) returned 0xffffffff [0128.005] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1520 [0128.017] WriteFile (in: hFile=0x1520, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x90ff8dc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x90ff8dc*=0x8b9, lpOverlapped=0x0) returned 1 [0128.024] CloseHandle (hObject=0x1520) returned 1 [0128.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b98) returned 1 [0128.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 Thread: id = 582 os_tid = 0x10dc [0124.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn sports.url")) returned 0x20 [0124.857] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url", dwFileAttributes=0x20) returned 1 [0127.409] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15f8 [0127.409] GetFileSizeEx (in: hFile=0x15f8, lpFileSize=0x858fadc | out: lpFileSize=0x858fadc*=133) returned 1 [0127.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0127.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0127.410] NtQuerySystemTime (in: CurrentTime=0x858fa50 | out: CurrentTime=0x858fa50*=132462177067956000) returned 0x0 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x4a5a86 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x10d26a2c [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x40dd72e [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x7051fce0 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x144855f3 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x11940719 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x76699f61 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x1db7d737 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x177c1c61 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x379e00cf [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x7934f041 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x5cc0642 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x3d14642b [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x6b823ac8 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x54de45f1 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x362d47a2 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x70de435c [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x6793aa9b [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x1a078d38 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x19d857b8 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x26cc393a [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x264b0360 [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x35cf091d [0127.410] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x34e35b0b [0127.411] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x13e80eec [0127.411] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x5dadbbeb [0127.411] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x3706de87 [0127.411] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x5e1a9594 [0127.411] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x79f492c6 [0127.411] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x344ff3a7 [0127.411] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x16bc421 [0127.411] RtlRandomEx (in: Seed=0x858fa48 | out: Seed=0x858fa48) returned 0x467cfaad [0127.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0127.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0127.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c143e0 [0127.423] ReadFile (in: hFile=0x15f8, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x858fa44, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0x858fa44*=0x85, lpOverlapped=0x0) returned 1 [0127.425] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.425] WriteFile (in: hFile=0x15f8, lpBuffer=0x7c143e0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x858fa48, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesWritten=0x858fa48*=0x85, lpOverlapped=0x0) returned 1 [0127.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0127.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0127.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4140) returned 1 [0127.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0127.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0127.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0127.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0127.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e791a8 [0127.782] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.783] WriteFile (in: hFile=0x15f8, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x858fad0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x858fad0*=0x10e, lpOverlapped=0x0) returned 1 [0127.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07800 [0127.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fc0 [0127.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fc0) returned 1 [0127.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec2fc0 [0127.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0127.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0127.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30b0) returned 1 [0127.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0127.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x3e07800 [0127.887] sprintf (in: _Dest=0x3e07800, _Format="%c%c" | out: _Dest="9d") returned 2 [0127.887] sprintf (in: _Dest=0x3e07802, _Format="%c%c" | out: _Dest="0c") returned 2 [0127.887] sprintf (in: _Dest=0x3e07804, _Format="%c%c" | out: _Dest="b6") returned 2 [0127.887] sprintf (in: _Dest=0x3e07806, _Format="%c%c" | out: _Dest="1f") returned 2 [0127.887] sprintf (in: _Dest=0x3e07808, _Format="%c%c" | out: _Dest="f3") returned 2 [0127.887] sprintf (in: _Dest=0x3e0780a, _Format="%c%c" | out: _Dest="09") returned 2 [0127.887] sprintf (in: _Dest=0x3e0780c, _Format="%c%c" | out: _Dest="52") returned 2 [0127.887] sprintf (in: _Dest=0x3e0780e, _Format="%c%c" | out: _Dest="af") returned 2 [0127.887] sprintf (in: _Dest=0x3e07810, _Format="%c%c" | out: _Dest="1f") returned 2 [0127.887] sprintf (in: _Dest=0x3e07812, _Format="%c%c" | out: _Dest="20") returned 2 [0127.887] sprintf (in: _Dest=0x3e07814, _Format="%c%c" | out: _Dest="6f") returned 2 [0127.887] sprintf (in: _Dest=0x3e07816, _Format="%c%c" | out: _Dest="b0") returned 2 [0127.887] sprintf (in: _Dest=0x3e07818, _Format="%c%c" | out: _Dest="57") returned 2 [0127.887] sprintf (in: _Dest=0x3e0781a, _Format="%c%c" | out: _Dest="ee") returned 2 [0127.887] sprintf (in: _Dest=0x3e0781c, _Format="%c%c" | out: _Dest="d5") returned 2 [0127.887] sprintf (in: _Dest=0x3e0781e, _Format="%c%c" | out: _Dest="96") returned 2 [0127.887] sprintf (in: _Dest=0x3e07820, _Format="%c%c" | out: _Dest="e7") returned 2 [0127.887] sprintf (in: _Dest=0x3e07822, _Format="%c%c" | out: _Dest="9c") returned 2 [0127.888] sprintf (in: _Dest=0x3e07824, _Format="%c%c" | out: _Dest="a4") returned 2 [0127.888] sprintf (in: _Dest=0x3e07826, _Format="%c%c" | out: _Dest="74") returned 2 [0127.888] sprintf (in: _Dest=0x3e07828, _Format="%c%c" | out: _Dest="2c") returned 2 [0127.888] sprintf (in: _Dest=0x3e0782a, _Format="%c%c" | out: _Dest="be") returned 2 [0127.888] sprintf (in: _Dest=0x3e0782c, _Format="%c%c" | out: _Dest="7b") returned 2 [0127.888] sprintf (in: _Dest=0x3e0782e, _Format="%c%c" | out: _Dest="ab") returned 2 [0127.888] sprintf (in: _Dest=0x3e07830, _Format="%c%c" | out: _Dest="16") returned 2 [0127.888] sprintf (in: _Dest=0x3e07832, _Format="%c%c" | out: _Dest="f9") returned 2 [0127.888] sprintf (in: _Dest=0x3e07834, _Format="%c%c" | out: _Dest="01") returned 2 [0127.888] sprintf (in: _Dest=0x3e07836, _Format="%c%c" | out: _Dest="a8") returned 2 [0127.888] RtlInitAnsiString (in: DestinationString=0x858fa58, SourceString="9d0cb61ff30952af1f206fb057eed596e79ca4742cbe7bab16f901a8" | out: DestinationString="9d0cb61ff30952af1f206fb057eed596e79ca4742cbe7bab16f901a8") [0127.888] RtlAnsiStringToUnicodeString (in: DestinationString=0x858fa50, SourceString="9d0cb61ff30952af1f206fb057eed596e79ca4742cbe7bab16f901a8", AllocateDestinationString=1 | out: DestinationString="9d0cb61ff30952af1f206fb057eed596e79ca4742cbe7bab16f901a8") returned 0x0 [0127.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a818 [0127.888] wcscat (in: _Dest=0x3eb91a8, _Source="9d0cb61ff30952" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\9d0cb61ff30952") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\9d0cb61ff30952" [0127.888] wcscat (in: _Dest=0x3eb91a8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\9d0cb61ff30952.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\9d0cb61ff30952.68814f" [0127.888] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\9d0cb61ff30952.68814f", NtPathName=0x858fa48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\9d0cb61ff30952.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5f40 [0127.889] NtSetInformationFile (FileHandle=0x15f8, IoStatusBlock=0x858fa50, FileInformation=0x3df5f40, Length=0x92, FileInformationClass=0xa) returned 0x0 [0128.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 [0128.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e030f8) returned 1 [0128.059] NtQueryInformationFile (in: FileHandle=0x15f8, IoStatusBlock=0x858fa20, FileInformation=0x858fa28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x858fa20, FileInformation=0x858fa28) returned 0x0 [0128.059] NtSetInformationFile (FileHandle=0x15f8, IoStatusBlock=0x858fa20, FileInformation=0x858fa28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 [0128.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a818) returned 1 [0128.065] FlushFileBuffers (hFile=0x15f8) returned 1 [0128.202] CloseHandle (hObject=0x15f8) returned 1 [0128.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1ab98 [0128.205] wcscpy (in: _Dest=0x3e1ab98, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0128.205] wcscat (in: _Dest=0x3e1ab98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" [0128.205] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\68814f-readme.txt")) returned 0x20 [0128.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab98) returned 1 [0128.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f920) returned 1 Thread: id = 583 os_tid = 0x10e0 [0124.010] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn.url")) returned 0x20 [0124.410] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url", dwFileAttributes=0x20) returned 1 [0127.478] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x149c [0127.478] GetFileSizeEx (in: hFile=0x149c, lpFileSize=0x94afb94 | out: lpFileSize=0x94afb94*=133) returned 1 [0127.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0127.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0127.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0127.490] NtQuerySystemTime (in: CurrentTime=0x94afb08 | out: CurrentTime=0x94afb08*=132462177068736000) returned 0x0 [0127.490] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x7ddb7548 [0127.490] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x718ebf1d [0127.490] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x23846915 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x45f4edba [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x6ded0700 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x66cc9ba6 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x59693dcb [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x11f8e71 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x134b7668 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x369707ed [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x5fbfc712 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x6e9e9fdc [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x309fd82c [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x47c90309 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x4c643dc3 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x298f8d61 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x640cab73 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x1ac5c810 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x58539d5a [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x4d566fb1 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x1af50318 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x42c62ca7 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x1ffce112 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x28563ff9 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x522a711f [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x28bdd42 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x164a06c8 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x1881f09c [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0xf92159a [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x1ac5c810 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x459d0e09 [0127.492] RtlRandomEx (in: Seed=0x94afb00 | out: Seed=0x94afb00) returned 0x33769ee2 [0127.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0127.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c27380 [0127.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c2af88 [0127.502] ReadFile (in: hFile=0x149c, lpBuffer=0x7c27380, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x94afafc, lpOverlapped=0x0 | out: lpBuffer=0x7c27380*, lpNumberOfBytesRead=0x94afafc*=0x85, lpOverlapped=0x0) returned 1 [0127.505] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.506] WriteFile (in: hFile=0x149c, lpBuffer=0x7c2af88*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x94afb00, lpOverlapped=0x0 | out: lpBuffer=0x7c2af88*, lpNumberOfBytesWritten=0x94afb00*=0x85, lpOverlapped=0x0) returned 1 [0129.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0129.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0129.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0129.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c2af88) returned 1 [0129.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c27380) returned 1 [0129.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0129.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e857d0) returned 1 [0129.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x305c400 [0129.444] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.444] WriteFile (in: hFile=0x149c, lpBuffer=0x2f9a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x94afb88, lpOverlapped=0x0 | out: lpBuffer=0x2f9a00*, lpNumberOfBytesWritten=0x94afb88*=0x100, lpOverlapped=0x0) returned 1 [0130.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3096050 [0130.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0130.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0130.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ea8) returned 1 [0130.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e57558 [0130.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0130.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0130.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0130.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0130.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096050) returned 1 [0130.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3ec37b8 [0130.725] sprintf (in: _Dest=0x3ec37b8, _Format="%c%c" | out: _Dest="75") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37ba, _Format="%c%c" | out: _Dest="a8") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37bc, _Format="%c%c" | out: _Dest="0b") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37be, _Format="%c%c" | out: _Dest="0d") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37c0, _Format="%c%c" | out: _Dest="84") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37c2, _Format="%c%c" | out: _Dest="48") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37c4, _Format="%c%c" | out: _Dest="e7") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37c6, _Format="%c%c" | out: _Dest="17") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37c8, _Format="%c%c" | out: _Dest="c4") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37ca, _Format="%c%c" | out: _Dest="ac") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37cc, _Format="%c%c" | out: _Dest="d5") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37ce, _Format="%c%c" | out: _Dest="ac") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37d0, _Format="%c%c" | out: _Dest="24") returned 2 [0130.725] sprintf (in: _Dest=0x3ec37d2, _Format="%c%c" | out: _Dest="d2") returned 2 [0130.725] RtlInitAnsiString (in: DestinationString=0x94afb10, SourceString="75a80b0d8448e717c4acd5ac24d2" | out: DestinationString="75a80b0d8448e717c4acd5ac24d2") [0130.725] RtlAnsiStringToUnicodeString (in: DestinationString=0x94afb08, SourceString="75a80b0d8448e717c4acd5ac24d2", AllocateDestinationString=1 | out: DestinationString="75a80b0d8448e717c4acd5ac24d2") returned 0x0 [0130.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3095a20 [0130.725] wcscat (in: _Dest=0x3f3def0, _Source="75a80b0" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a80b0") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a80b0" [0130.725] wcscat (in: _Dest=0x3f3def0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a80b0.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a80b0.68814f" [0130.725] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a80b0.68814f", NtPathName=0x94afb00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\75a80b0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45800 [0130.725] NtSetInformationFile (FileHandle=0x149c, IoStatusBlock=0x94afb08, FileInformation=0x3d45800, Length=0x84, FileInformationClass=0xa) returned 0x0 [0130.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45800) returned 1 [0130.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a73bd0) returned 1 [0130.727] NtQueryInformationFile (in: FileHandle=0x149c, IoStatusBlock=0x94afad8, FileInformation=0x94afae0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x94afad8, FileInformation=0x94afae0) returned 0x0 [0130.727] NtSetInformationFile (FileHandle=0x149c, IoStatusBlock=0x94afad8, FileInformation=0x94afae0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0130.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095a20) returned 1 [0130.729] FlushFileBuffers (hFile=0x149c) returned 1 [0130.760] CloseHandle (hObject=0x149c) returned 1 [0130.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da66f0 [0130.766] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0130.766] wcscat (in: _Dest=0x3da66f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" [0130.766] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\68814f-readme.txt")) returned 0x20 [0130.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0130.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee10e0) returned 1 Thread: id = 584 os_tid = 0x10e4 [0124.010] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msnbc news.url")) returned 0x20 [0124.857] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url", dwFileAttributes=0x20) returned 1 [0127.425] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15fc [0127.426] GetFileSizeEx (in: hFile=0x15fc, lpFileSize=0x8bbfcf4 | out: lpFileSize=0x8bbfcf4*=133) returned 1 [0127.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0127.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0127.426] NtQuerySystemTime (in: CurrentTime=0x8bbfc68 | out: CurrentTime=0x8bbfc68*=132462177068112000) returned 0x0 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x797b4719 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x460a07a1 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x2ec9d4d0 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x6ccdadc6 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x77958ca1 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x35cf091d [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x2ec9d4d0 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x4a4e63d6 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x1a078d38 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x5477e257 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x513e66f2 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x488e9799 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x1cac65e3 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x30d0f658 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x20b8e27a [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x621ea5c7 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x2c92cae1 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x513488a9 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x753e9da4 [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x105f433c [0127.426] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x4aaa6a37 [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x594d4589 [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x7c0cdf14 [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x40dd72e [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x7be0d5c9 [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x19a5543a [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x3f68faa [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x38a9e5cf [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x6793aa9b [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0xfe1da55 [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x41fe59b1 [0127.427] RtlRandomEx (in: Seed=0x8bbfc60 | out: Seed=0x8bbfc60) returned 0x379e00cf [0127.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0127.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b807d8 [0127.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b843e0 [0127.436] ReadFile (in: hFile=0x15fc, lpBuffer=0x7b807d8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x8bbfc5c, lpOverlapped=0x0 | out: lpBuffer=0x7b807d8*, lpNumberOfBytesRead=0x8bbfc5c*=0x85, lpOverlapped=0x0) returned 1 [0127.438] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.438] WriteFile (in: hFile=0x15fc, lpBuffer=0x7b843e0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x8bbfc60, lpOverlapped=0x0 | out: lpBuffer=0x7b843e0*, lpNumberOfBytesWritten=0x8bbfc60*=0x85, lpOverlapped=0x0) returned 1 [0127.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0127.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0127.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4168) returned 1 [0127.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b843e0) returned 1 [0127.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b807d8) returned 1 [0127.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0127.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79138 [0127.785] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.785] WriteFile (in: hFile=0x15fc, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x8bbfce8, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x8bbfce8*=0x10e, lpOverlapped=0x0) returned 1 [0127.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07800 [0127.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e08 [0127.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e08) returned 1 [0127.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec2e08 [0127.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0127.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0127.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f20) returned 1 [0127.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0127.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x3e07800 [0127.894] sprintf (in: _Dest=0x3e07800, _Format="%c%c" | out: _Dest="f2") returned 2 [0127.894] sprintf (in: _Dest=0x3e07802, _Format="%c%c" | out: _Dest="86") returned 2 [0127.894] sprintf (in: _Dest=0x3e07804, _Format="%c%c" | out: _Dest="d5") returned 2 [0127.894] sprintf (in: _Dest=0x3e07806, _Format="%c%c" | out: _Dest="31") returned 2 [0127.894] sprintf (in: _Dest=0x3e07808, _Format="%c%c" | out: _Dest="f8") returned 2 [0127.894] sprintf (in: _Dest=0x3e0780a, _Format="%c%c" | out: _Dest="a0") returned 2 [0127.894] sprintf (in: _Dest=0x3e0780c, _Format="%c%c" | out: _Dest="ec") returned 2 [0127.894] sprintf (in: _Dest=0x3e0780e, _Format="%c%c" | out: _Dest="c1") returned 2 [0127.894] sprintf (in: _Dest=0x3e07810, _Format="%c%c" | out: _Dest="ef") returned 2 [0127.894] sprintf (in: _Dest=0x3e07812, _Format="%c%c" | out: _Dest="0e") returned 2 [0127.894] sprintf (in: _Dest=0x3e07814, _Format="%c%c" | out: _Dest="4d") returned 2 [0127.894] sprintf (in: _Dest=0x3e07816, _Format="%c%c" | out: _Dest="56") returned 2 [0127.894] sprintf (in: _Dest=0x3e07818, _Format="%c%c" | out: _Dest="de") returned 2 [0127.894] sprintf (in: _Dest=0x3e0781a, _Format="%c%c" | out: _Dest="71") returned 2 [0127.894] sprintf (in: _Dest=0x3e0781c, _Format="%c%c" | out: _Dest="77") returned 2 [0127.894] sprintf (in: _Dest=0x3e0781e, _Format="%c%c" | out: _Dest="56") returned 2 [0127.894] sprintf (in: _Dest=0x3e07820, _Format="%c%c" | out: _Dest="eb") returned 2 [0127.894] sprintf (in: _Dest=0x3e07822, _Format="%c%c" | out: _Dest="b6") returned 2 [0127.895] sprintf (in: _Dest=0x3e07824, _Format="%c%c" | out: _Dest="dd") returned 2 [0127.895] sprintf (in: _Dest=0x3e07826, _Format="%c%c" | out: _Dest="56") returned 2 [0127.895] sprintf (in: _Dest=0x3e07828, _Format="%c%c" | out: _Dest="0b") returned 2 [0127.895] sprintf (in: _Dest=0x3e0782a, _Format="%c%c" | out: _Dest="e0") returned 2 [0127.895] sprintf (in: _Dest=0x3e0782c, _Format="%c%c" | out: _Dest="30") returned 2 [0127.895] sprintf (in: _Dest=0x3e0782e, _Format="%c%c" | out: _Dest="85") returned 2 [0127.895] sprintf (in: _Dest=0x3e07830, _Format="%c%c" | out: _Dest="b0") returned 2 [0127.895] sprintf (in: _Dest=0x3e07832, _Format="%c%c" | out: _Dest="48") returned 2 [0127.895] sprintf (in: _Dest=0x3e07834, _Format="%c%c" | out: _Dest="85") returned 2 [0127.895] sprintf (in: _Dest=0x3e07836, _Format="%c%c" | out: _Dest="b3") returned 2 [0127.895] RtlInitAnsiString (in: DestinationString=0x8bbfc70, SourceString="f286d531f8a0ecc1ef0e4d56de717756ebb6dd560be03085b04885b3" | out: DestinationString="f286d531f8a0ecc1ef0e4d56de717756ebb6dd560be03085b04885b3") [0127.895] RtlAnsiStringToUnicodeString (in: DestinationString=0x8bbfc68, SourceString="f286d531f8a0ecc1ef0e4d56de717756ebb6dd560be03085b04885b3", AllocateDestinationString=1 | out: DestinationString="f286d531f8a0ecc1ef0e4d56de717756ebb6dd560be03085b04885b3") returned 0x0 [0127.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19898 [0127.895] wcscat (in: _Dest=0x3eb9230, _Source="f286d531f8a0ec" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\f286d531f8a0ec") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\f286d531f8a0ec" [0127.895] wcscat (in: _Dest=0x3eb9230, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\f286d531f8a0ec.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\f286d531f8a0ec.68814f" [0127.895] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\f286d531f8a0ec.68814f", NtPathName=0x8bbfc60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\f286d531f8a0ec.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4fa0 [0127.895] NtSetInformationFile (FileHandle=0x15fc, IoStatusBlock=0x8bbfc68, FileInformation=0x3df4fa0, Length=0x92, FileInformationClass=0xa) returned 0x0 [0128.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 [0128.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02408) returned 1 [0128.069] NtQueryInformationFile (in: FileHandle=0x15fc, IoStatusBlock=0x8bbfc38, FileInformation=0x8bbfc40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8bbfc38, FileInformation=0x8bbfc40) returned 0x0 [0128.069] NtSetInformationFile (FileHandle=0x15fc, IoStatusBlock=0x8bbfc38, FileInformation=0x8bbfc40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 [0128.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19898) returned 1 [0128.071] FlushFileBuffers (hFile=0x15fc) returned 1 [0128.207] CloseHandle (hObject=0x15fc) returned 1 [0128.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1ab98 [0128.209] wcscpy (in: _Dest=0x3e1ab98, _Source="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\" [0128.209] wcscat (in: _Dest=0x3e1ab98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" [0128.209] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\MSN Websites\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\msn websites\\68814f-readme.txt")) returned 0x20 [0128.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab98) returned 1 [0128.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 Thread: id = 585 os_tid = 0x10e8 [0124.011] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\5rwcslfrdubxltjtna6.jpg")) returned 0x20 [0124.011] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg", dwFileAttributes=0x20) returned 1 [0126.339] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\5rwcslfrdubxltjtna6.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13ec [0126.339] GetFileSizeEx (in: hFile=0x13ec, lpFileSize=0x7f2f864 | out: lpFileSize=0x7f2f864*=9151) returned 1 [0126.339] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x23bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.339] ReadFile (in: hFile=0x13ec, lpBuffer=0x7f2f840, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f2f850, lpOverlapped=0x0 | out: lpBuffer=0x7f2f840*, lpNumberOfBytesRead=0x7f2f850*=0x4, lpOverlapped=0x0) returned 1 [0126.342] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0126.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbd28 [0126.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5568 [0126.342] NtQuerySystemTime (in: CurrentTime=0x7f2f7d8 | out: CurrentTime=0x7f2f7d8*=132462177057348000) returned 0x0 [0126.342] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x55f32497 [0126.342] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x5c3b38a7 [0126.342] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x3bd0c835 [0126.342] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x5e54f06d [0126.342] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x31602b6d [0126.342] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x7392f5eb [0126.342] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x1181bd18 [0126.342] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x733760ff [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x53294244 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x3d6c2b1f [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x7b4263bd [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x1d973d36 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x3fe65cc3 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x3bed7ca7 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x73697c9e [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x683295bd [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x691e5a47 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0xa8bae26 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x5ebfddda [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x35664660 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x17103ddd [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x19aa5423 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x7e0c738a [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x719476ca [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x567279d9 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x452bc808 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x16002010 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x50c7fb5 [0126.343] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x1d7249e5 [0126.344] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x267d7853 [0126.344] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x44994b5f [0126.344] RtlRandomEx (in: Seed=0x7f2f7d0 | out: Seed=0x7f2f7d0) returned 0x7e848834 [0126.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc68) returned 1 [0126.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a61c80 [0126.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a65888 [0126.358] ReadFile (in: hFile=0x13ec, lpBuffer=0x7a61c80, nNumberOfBytesToRead=0x23bf, lpNumberOfBytesRead=0x7f2f7cc, lpOverlapped=0x0 | out: lpBuffer=0x7a61c80*, lpNumberOfBytesRead=0x7f2f7cc*=0x23bf, lpOverlapped=0x0) returned 1 [0126.358] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.358] WriteFile (in: hFile=0x13ec, lpBuffer=0x7a65888*, nNumberOfBytesToWrite=0x23bf, lpNumberOfBytesWritten=0x7f2f7d0, lpOverlapped=0x0 | out: lpBuffer=0x7a65888*, lpNumberOfBytesWritten=0x7f2f7d0*=0x23bf, lpOverlapped=0x0) returned 1 [0129.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca738 [0129.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2b0 [0129.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0129.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65888) returned 1 [0129.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61c80) returned 1 [0129.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0129.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85428) returned 1 [0129.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e85428 [0129.980] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.980] WriteFile (in: hFile=0x13ec, lpBuffer=0x3040a68*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x7f2f858, lpOverlapped=0x0 | out: lpBuffer=0x3040a68*, lpNumberOfBytesWritten=0x7f2f858*=0x120, lpOverlapped=0x0) returned 1 [0130.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 [0130.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48cc0) returned 1 [0130.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0130.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85428) returned 1 [0130.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca738) returned 1 [0130.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbd28) returned 1 [0130.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec54a0) returned 1 [0130.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec65a8) returned 1 [0130.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19398 [0130.138] wcscpy (in: _Dest=0x3e19398, _Source="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg" [0130.138] wcscat (in: _Dest=0x3e19398, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg.68814f" [0130.138] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg.68814f", NtPathName=0x7f2f7d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\5RWcsLfRdUbXlTjTna6.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d452f0 [0130.138] NtSetInformationFile (FileHandle=0x13ec, IoStatusBlock=0x7f2f7d8, FileInformation=0x3d452f0, Length=0x88, FileInformationClass=0xa) returned 0x0 [0130.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0130.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a403d8) returned 1 [0130.279] NtQueryInformationFile (in: FileHandle=0x13ec, IoStatusBlock=0x7f2f7a8, FileInformation=0x7f2f7b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7f2f7a8, FileInformation=0x7f2f7b0) returned 0x0 [0130.279] NtSetInformationFile (FileHandle=0x13ec, IoStatusBlock=0x7f2f7a8, FileInformation=0x7f2f7b0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19398) returned 1 [0130.350] FlushFileBuffers (hFile=0x13ec) returned 1 [0130.355] CloseHandle (hObject=0x13ec) returned 1 [0130.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47650 [0130.383] wcscpy (in: _Dest=0x3d47650, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0130.383] wcscat (in: _Dest=0x3d47650, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" [0130.383] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\68814f-readme.txt")) returned 0xffffffff [0130.383] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19d4 [0130.391] WriteFile (in: hFile=0x19d4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7f2f7ec, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x7f2f7ec*=0x8b9, lpOverlapped=0x0) returned 1 [0130.397] CloseHandle (hObject=0x19d4) returned 1 [0130.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47650) returned 1 [0130.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69de8) returned 1 Thread: id = 586 os_tid = 0x10ec [0124.011] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\7qiK-0-.gif" (normalized: "c:\\users\\eebsym5\\pictures\\7qik-0-.gif")) returned 0x20 [0124.011] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\7qiK-0-.gif", dwFileAttributes=0x20) returned 1 [0127.010] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\7qiK-0-.gif" (normalized: "c:\\users\\eebsym5\\pictures\\7qik-0-.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13f0 [0127.011] GetFileSizeEx (in: hFile=0x13f0, lpFileSize=0x97bf8e4 | out: lpFileSize=0x97bf8e4*=12165) returned 1 [0127.011] SetFilePointerEx (in: hFile=0x13f0, liDistanceToMove=0x2f81, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.011] ReadFile (in: hFile=0x13f0, lpBuffer=0x97bf8c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x97bf8d0, lpOverlapped=0x0 | out: lpBuffer=0x97bf8c0*, lpNumberOfBytesRead=0x97bf8d0*=0x4, lpOverlapped=0x0) returned 1 [0127.012] SetFilePointerEx (in: hFile=0x13f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3880 [0127.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3858 [0127.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3830 [0127.013] NtQuerySystemTime (in: CurrentTime=0x97bf858 | out: CurrentTime=0x97bf858*=132462177064056000) returned 0x0 [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x458babf0 [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x133be8eb [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x1137f6aa [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x172b9edd [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x76ae95e4 [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x1da729b0 [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x7df1b921 [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x41a225e2 [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x3e9f50b2 [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x57d2cd98 [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x106f3ac [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x6f382670 [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x79dfb1c8 [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x1bda544f [0127.013] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x1448fed8 [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x4369a90d [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x295fd6f6 [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0xaa61232 [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x56eab025 [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x1c2de8da [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x5eeed436 [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x7d9055a7 [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x1ce57c0d [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x64f0a7c2 [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x25211900 [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x55f55a0b [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x22ebef2a [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x10dc72cc [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x44ae98fd [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x7f1da661 [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x3dc8cfe8 [0127.014] RtlRandomEx (in: Seed=0x97bf850 | out: Seed=0x97bf850) returned 0x60727547 [0127.028] ReadFile (in: hFile=0x13f0, lpBuffer=0x7b97380, nNumberOfBytesToRead=0x2f85, lpNumberOfBytesRead=0x97bf84c, lpOverlapped=0x0 | out: lpBuffer=0x7b97380*, lpNumberOfBytesRead=0x97bf84c*=0x2f85, lpOverlapped=0x0) returned 1 [0127.029] SetFilePointerEx (in: hFile=0x13f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.029] WriteFile (in: hFile=0x13f0, lpBuffer=0x7b9af88*, nNumberOfBytesToWrite=0x2f85, lpNumberOfBytesWritten=0x97bf850, lpOverlapped=0x0 | out: lpBuffer=0x7b9af88*, lpNumberOfBytesWritten=0x97bf850*=0x2f85, lpOverlapped=0x0) returned 1 [0130.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0130.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52658 [0130.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52658) returned 1 [0130.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9af88) returned 1 [0130.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b97380) returned 1 [0130.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0130.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0130.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86a28 [0130.047] SetFilePointerEx (in: hFile=0x13f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.047] WriteFile (in: hFile=0x13f0, lpBuffer=0x7ad50b0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x97bf8d8, lpOverlapped=0x0 | out: lpBuffer=0x7ad50b0*, lpNumberOfBytesWritten=0x97bf8d8*=0x108, lpOverlapped=0x0) returned 1 [0130.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0130.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50c60 [0130.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0130.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0130.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2e0e8 [0130.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0130.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36f0 [0130.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36f0) returned 1 [0130.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0130.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x322bf0 [0130.180] sprintf (in: _Dest=0x322bf0, _Format="%c%c" | out: _Dest="60") returned 2 [0130.180] sprintf (in: _Dest=0x322bf2, _Format="%c%c" | out: _Dest="33") returned 2 [0130.180] sprintf (in: _Dest=0x322bf4, _Format="%c%c" | out: _Dest="9f") returned 2 [0130.180] sprintf (in: _Dest=0x322bf6, _Format="%c%c" | out: _Dest="ed") returned 2 [0130.181] sprintf (in: _Dest=0x322bf8, _Format="%c%c" | out: _Dest="e6") returned 2 [0130.181] sprintf (in: _Dest=0x322bfa, _Format="%c%c" | out: _Dest="18") returned 2 [0130.181] sprintf (in: _Dest=0x322bfc, _Format="%c%c" | out: _Dest="7e") returned 2 [0130.181] sprintf (in: _Dest=0x322bfe, _Format="%c%c" | out: _Dest="10") returned 2 [0130.181] sprintf (in: _Dest=0x322c00, _Format="%c%c" | out: _Dest="31") returned 2 [0130.181] sprintf (in: _Dest=0x322c02, _Format="%c%c" | out: _Dest="5b") returned 2 [0130.181] sprintf (in: _Dest=0x322c04, _Format="%c%c" | out: _Dest="7a") returned 2 [0130.181] sprintf (in: _Dest=0x322c06, _Format="%c%c" | out: _Dest="3c") returned 2 [0130.181] sprintf (in: _Dest=0x322c08, _Format="%c%c" | out: _Dest="16") returned 2 [0130.181] sprintf (in: _Dest=0x322c0a, _Format="%c%c" | out: _Dest="4d") returned 2 [0130.181] sprintf (in: _Dest=0x322c0c, _Format="%c%c" | out: _Dest="00") returned 2 [0130.181] sprintf (in: _Dest=0x322c0e, _Format="%c%c" | out: _Dest="46") returned 2 [0130.181] sprintf (in: _Dest=0x322c10, _Format="%c%c" | out: _Dest="bd") returned 2 [0130.181] sprintf (in: _Dest=0x322c12, _Format="%c%c" | out: _Dest="f5") returned 2 [0130.181] sprintf (in: _Dest=0x322c14, _Format="%c%c" | out: _Dest="a0") returned 2 [0130.181] sprintf (in: _Dest=0x322c16, _Format="%c%c" | out: _Dest="25") returned 2 [0130.181] sprintf (in: _Dest=0x322c18, _Format="%c%c" | out: _Dest="1d") returned 2 [0130.181] sprintf (in: _Dest=0x322c1a, _Format="%c%c" | out: _Dest="db") returned 2 [0130.181] RtlInitAnsiString (in: DestinationString=0x97bf860, SourceString="60339fede6187e10315b7a3c164d0046bdf5a0251ddb" | out: DestinationString="60339fede6187e10315b7a3c164d0046bdf5a0251ddb") [0130.181] RtlAnsiStringToUnicodeString (in: DestinationString=0x97bf858, SourceString="60339fede6187e10315b7a3c164d0046bdf5a0251ddb", AllocateDestinationString=1 | out: DestinationString="60339fede6187e10315b7a3c164d0046bdf5a0251ddb") returned 0x0 [0130.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1d8f0 [0130.181] wcscat (in: _Dest=0x3e20608, _Source="60339fede61" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\60339fede61") returned="C:\\Users\\EEBsYm5\\Pictures\\60339fede61" [0130.181] wcscat (in: _Dest=0x3e20608, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\60339fede61.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\60339fede61.68814f" [0130.181] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\60339fede61.68814f", NtPathName=0x97bf850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\60339fede61.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50c60 [0130.181] NtSetInformationFile (FileHandle=0x13f0, IoStatusBlock=0x97bf858, FileInformation=0x3d50c60, Length=0x70, FileInformationClass=0xa) returned 0x0 [0130.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0130.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a71728) returned 1 [0130.425] NtQueryInformationFile (in: FileHandle=0x13f0, IoStatusBlock=0x97bf828, FileInformation=0x97bf830, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x97bf828, FileInformation=0x97bf830) returned 0x0 [0130.425] NtSetInformationFile (FileHandle=0x13f0, IoStatusBlock=0x97bf828, FileInformation=0x97bf830, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20608) returned 1 [0130.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d8f0) returned 1 [0130.427] FlushFileBuffers (hFile=0x13f0) returned 1 [0130.429] CloseHandle (hObject=0x13f0) returned 1 [0130.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e20400 [0130.431] wcscpy (in: _Dest=0x3e20400, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0130.431] wcscat (in: _Dest=0x3e20400, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" [0130.431] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\68814f-readme.txt")) returned 0x20 [0130.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20400) returned 1 [0130.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15118) returned 1 Thread: id = 587 os_tid = 0x10f0 [0124.012] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png" (normalized: "c:\\users\\eebsym5\\pictures\\hvlzha2l.png")) returned 0x20 [0124.012] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png", dwFileAttributes=0x20) returned 1 [0127.030] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png" (normalized: "c:\\users\\eebsym5\\pictures\\hvlzha2l.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13f4 [0127.030] GetFileSizeEx (in: hFile=0x13f4, lpFileSize=0xa05feb4 | out: lpFileSize=0xa05feb4*=54446) returned 1 [0127.030] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0xd4aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.030] ReadFile (in: hFile=0x13f4, lpBuffer=0xa05fe90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa05fea0, lpOverlapped=0x0 | out: lpBuffer=0xa05fe90*, lpNumberOfBytesRead=0xa05fea0*=0x4, lpOverlapped=0x0) returned 1 [0127.032] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3880 [0127.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3830 [0127.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0127.033] NtQuerySystemTime (in: CurrentTime=0xa05fe28 | out: CurrentTime=0xa05fe28*=132462177064212000) returned 0x0 [0127.033] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x5997810a [0127.033] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x70a69c7e [0127.033] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x4310aad5 [0127.033] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x7571d5e8 [0127.033] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x6b9193c2 [0127.033] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x2cbb2d68 [0127.033] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x61120baf [0127.033] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x76639669 [0127.033] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x51597e25 [0127.033] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x7f92a979 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x46b8f0cc [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x26869e68 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x18cc5337 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x2c4be7b4 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x7a98ca21 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x3e4afef3 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x5554fc68 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x5c54aad8 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x435fdd1e [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x62acfb77 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x19a0917d [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x1a7871c6 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x43c72e00 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x6bfd23ae [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x7543ab9d [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x21582c45 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x7a6df161 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x41c605c4 [0127.034] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x12621285 [0127.035] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x8390c3a [0127.035] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x4a10a7cd [0127.035] RtlRandomEx (in: Seed=0xa05fe20 | out: Seed=0xa05fe20) returned 0x781fcca5 [0127.049] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.049] ReadFile (in: hFile=0x13f4, lpBuffer=0x7b9eb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa05fe28, lpOverlapped=0x0 | out: lpBuffer=0x7b9eb90*, lpNumberOfBytesRead=0xa05fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0127.049] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e564e0 [0127.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0127.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3880 [0127.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3880) returned 1 [0127.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba2798 [0127.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3880 [0127.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0127.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0127.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0127.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e564e0) returned 1 [0127.050] WriteFile (in: hFile=0x13f4, lpBuffer=0x7ba2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa05fe28, lpOverlapped=0x0 | out: lpBuffer=0x7ba2798*, lpNumberOfBytesWritten=0xa05fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0130.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba2798) returned 1 [0130.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9eb90) returned 1 [0130.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86a88 [0130.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52568) returned 1 [0130.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86ab8 [0130.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52568 [0130.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52518 [0130.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52518) returned 1 [0130.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0130.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0130.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x7ad51c8 [0130.050] SetFilePointerEx (in: hFile=0x13f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.050] WriteFile (in: hFile=0x13f4, lpBuffer=0x7ad51c8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xa05fea8, lpOverlapped=0x0 | out: lpBuffer=0x7ad51c8*, lpNumberOfBytesWritten=0xa05fea8*=0x10a, lpOverlapped=0x0) returned 1 [0130.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad51c8) returned 1 [0130.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86ab8) returned 1 [0130.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52568) returned 1 [0130.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86a88) returned 1 [0130.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3880) returned 1 [0130.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3830) returned 1 [0130.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36f0) returned 1 [0130.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0130.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e20400 [0130.179] wcscpy (in: _Dest=0x3e20400, _Source="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png") returned="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png" [0130.179] wcscat (in: _Dest=0x3e20400, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png.68814f" [0130.179] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png.68814f", NtPathName=0xa05fe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\HVlZHa2L.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e46198 [0130.179] NtSetInformationFile (FileHandle=0x13f4, IoStatusBlock=0xa05fe28, FileInformation=0x3e46198, Length=0x72, FileInformationClass=0xa) returned 0x0 [0130.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46198) returned 1 [0130.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a71500) returned 1 [0130.423] NtQueryInformationFile (in: FileHandle=0x13f4, IoStatusBlock=0xa05fdf8, FileInformation=0xa05fe00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa05fdf8, FileInformation=0xa05fe00) returned 0x0 [0130.424] NtSetInformationFile (FileHandle=0x13f4, IoStatusBlock=0xa05fdf8, FileInformation=0xa05fe00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20400) returned 1 [0130.429] FlushFileBuffers (hFile=0x13f4) returned 1 [0130.433] CloseHandle (hObject=0x13f4) returned 1 [0130.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e20400 [0130.436] wcscpy (in: _Dest=0x3e20400, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0130.436] wcscat (in: _Dest=0x3e20400, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" [0130.436] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\68814f-readme.txt")) returned 0x20 [0130.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20400) returned 1 [0130.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6ae20) returned 1 Thread: id = 588 os_tid = 0x10f4 [0124.020] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lkb kiwgzi-.bmp")) returned 0x20 [0124.021] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp", dwFileAttributes=0x20) returned 1 [0127.051] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\lkb kiwgzi-.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13f8 [0127.051] GetFileSizeEx (in: hFile=0x13f8, lpFileSize=0xa23f934 | out: lpFileSize=0xa23f934*=6867) returned 1 [0127.051] SetFilePointerEx (in: hFile=0x13f8, liDistanceToMove=0x1acf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.051] ReadFile (in: hFile=0x13f8, lpBuffer=0xa23f910, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa23f920, lpOverlapped=0x0 | out: lpBuffer=0xa23f910*, lpNumberOfBytesRead=0xa23f920*=0x4, lpOverlapped=0x0) returned 1 [0127.054] SetFilePointerEx (in: hFile=0x13f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0127.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0127.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0127.054] NtQuerySystemTime (in: CurrentTime=0xa23f8a8 | out: CurrentTime=0xa23f8a8*=132462177064368000) returned 0x0 [0127.054] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x553e29d9 [0127.054] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x4553de9e [0127.054] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x3bd98ca3 [0127.054] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x68337d78 [0127.054] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x3e25c4a3 [0127.054] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x7d1b7d61 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x2456479e [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x644506e0 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x238a6829 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x462b63b9 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x7e1c91e1 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x2a35b832 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x7979acfd [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x2cff6c51 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0xf5e9661 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x7387dd06 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x70a617ba [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x1588d98a [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x228efd09 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x7a30643d [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x2c612d45 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x21aaabd9 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x4ad4334f [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x320c5fcc [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x7b01530 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x413deea9 [0127.055] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x741d0934 [0127.056] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x619414a4 [0127.056] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x732583f5 [0127.056] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x4a85fac1 [0127.056] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x77d20144 [0127.056] RtlRandomEx (in: Seed=0xa23f8a0 | out: Seed=0xa23f8a0) returned 0x6ff1162 [0127.068] ReadFile (in: hFile=0x13f8, lpBuffer=0x7ba63a0, nNumberOfBytesToRead=0x1ad3, lpNumberOfBytesRead=0xa23f89c, lpOverlapped=0x0 | out: lpBuffer=0x7ba63a0*, lpNumberOfBytesRead=0xa23f89c*=0x1ad3, lpOverlapped=0x0) returned 1 [0127.068] SetFilePointerEx (in: hFile=0x13f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.068] WriteFile (in: hFile=0x13f8, lpBuffer=0x7ba9fa8*, nNumberOfBytesToWrite=0x1ad3, lpNumberOfBytesWritten=0xa23f8a0, lpOverlapped=0x0 | out: lpBuffer=0x7ba9fa8*, lpNumberOfBytesWritten=0xa23f8a0*=0x1ad3, lpOverlapped=0x0) returned 1 [0130.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52518 [0130.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b58 [0130.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52b58) returned 1 [0130.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba9fa8) returned 1 [0130.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba63a0) returned 1 [0130.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0130.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e564e0) returned 1 [0130.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x7ad70b0 [0130.053] SetFilePointerEx (in: hFile=0x13f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.053] WriteFile (in: hFile=0x13f8, lpBuffer=0x7ad52e0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xa23f928, lpOverlapped=0x0 | out: lpBuffer=0x7ad52e0*, lpNumberOfBytesWritten=0xa23f928*=0x110, lpOverlapped=0x0) returned 1 [0130.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad52e0) returned 1 [0130.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad70e8) returned 1 [0130.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52b58) returned 1 [0130.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad70b0) returned 1 [0130.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52518) returned 1 [0130.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0130.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35d8) returned 1 [0130.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0130.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23d80 [0130.183] wcscpy (in: _Dest=0x7a23d80, _Source="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp" [0130.183] wcscat (in: _Dest=0x7a23d80, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp.68814f" [0130.183] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp.68814f", NtPathName=0xa23f8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\Lkb kIWGZi-.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46518 [0130.183] NtSetInformationFile (FileHandle=0x13f8, IoStatusBlock=0xa23f8a8, FileInformation=0x3e46518, Length=0x78, FileInformationClass=0xa) returned 0x0 [0130.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46518) returned 1 [0130.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a710b0) returned 1 [0130.479] NtQueryInformationFile (in: FileHandle=0x13f8, IoStatusBlock=0xa23f878, FileInformation=0xa23f880, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa23f878, FileInformation=0xa23f880) returned 0x0 [0130.479] NtSetInformationFile (FileHandle=0x13f8, IoStatusBlock=0xa23f878, FileInformation=0xa23f880, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d80) returned 1 [0130.481] FlushFileBuffers (hFile=0x13f8) returned 1 [0130.574] CloseHandle (hObject=0x13f8) returned 1 [0130.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee01d8 [0130.575] wcscpy (in: _Dest=0x3ee01d8, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0130.575] wcscat (in: _Dest=0x3ee01d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" [0130.575] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\68814f-readme.txt")) returned 0x20 [0130.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee01d8) returned 1 [0130.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 Thread: id = 589 os_tid = 0x10f8 [0124.021] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png" (normalized: "c:\\users\\eebsym5\\pictures\\m_g ycxgr-cfx2.png")) returned 0x20 [0124.021] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png", dwFileAttributes=0x20) returned 1 [0127.069] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png" (normalized: "c:\\users\\eebsym5\\pictures\\m_g ycxgr-cfx2.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13fc [0127.069] GetFileSizeEx (in: hFile=0x13fc, lpFileSize=0xa96fa0c | out: lpFileSize=0xa96fa0c*=36419) returned 1 [0127.069] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x8e3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.069] ReadFile (in: hFile=0x13fc, lpBuffer=0xa96f9e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa96f9f8, lpOverlapped=0x0 | out: lpBuffer=0xa96f9e8*, lpNumberOfBytesRead=0xa96f9f8*=0x4, lpOverlapped=0x0) returned 1 [0127.071] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0127.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0127.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0127.071] NtQuerySystemTime (in: CurrentTime=0xa96f980 | out: CurrentTime=0xa96f980*=132462177064680000) returned 0x0 [0127.071] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x31cc6a54 [0127.071] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x34112ee0 [0127.071] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x3cf843b7 [0127.071] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x2e0ab3e0 [0127.071] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x67484460 [0127.071] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x255528d7 [0127.071] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x45a3f9aa [0127.071] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x35c9cede [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x617e2943 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x23968c2e [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x6b596cef [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x42984bfe [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x7808f7a1 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x25fe2970 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x675cb879 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x7a4318a1 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0xd0506fd [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x10f2fcb8 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x69a537d8 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x34f5b9b8 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x258a1d39 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x15a581f8 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x6f8f66f7 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x79ed6721 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0xdc39c19 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x627c79c1 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x4356c1db [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x127104b9 [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x519160fc [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x47b5211e [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x6df25e1c [0127.072] RtlRandomEx (in: Seed=0xa96f978 | out: Seed=0xa96f978) returned 0x433f59fd [0127.083] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.083] ReadFile (in: hFile=0x13fc, lpBuffer=0x7badbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa96f980, lpOverlapped=0x0 | out: lpBuffer=0x7badbb0*, lpNumberOfBytesRead=0xa96f980*=0x3c00, lpOverlapped=0x0) returned 1 [0127.083] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56840 [0127.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0127.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0127.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0127.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb17b8 [0127.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0127.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0127.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3588) returned 1 [0127.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0127.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 [0127.084] WriteFile (in: hFile=0x13fc, lpBuffer=0x7bb17b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa96f980, lpOverlapped=0x0 | out: lpBuffer=0x7bb17b8*, lpNumberOfBytesWritten=0xa96f980*=0x3c00, lpOverlapped=0x0) returned 1 [0130.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb17b8) returned 1 [0130.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7badbb0) returned 1 [0130.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x2fc8dc8 [0130.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e529c8) returned 1 [0130.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x2fc8d88 [0130.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e529c8 [0130.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e529f0 [0130.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e529f0) returned 1 [0130.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0130.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e564e0) returned 1 [0130.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x330cd0 [0130.056] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.056] WriteFile (in: hFile=0x13fc, lpBuffer=0x330cd0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xa96fa00, lpOverlapped=0x0 | out: lpBuffer=0x330cd0*, lpNumberOfBytesWritten=0xa96fa00*=0x116, lpOverlapped=0x0) returned 1 [0130.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330cd0) returned 1 [0130.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8d88) returned 1 [0130.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e529c8) returned 1 [0130.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc8dc8) returned 1 [0130.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0130.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3600) returned 1 [0130.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0130.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0130.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23df0 [0130.185] wcscpy (in: _Dest=0x7a23df0, _Source="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png") returned="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png" [0130.185] wcscat (in: _Dest=0x7a23df0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png.68814f" [0130.185] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png.68814f", NtPathName=0xa96f978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\M_G YCxgr-cfX2.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c208 [0130.185] NtSetInformationFile (FileHandle=0x13fc, IoStatusBlock=0xa96f980, FileInformation=0x3f3c208, Length=0x7e, FileInformationClass=0xa) returned 0x0 [0130.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 [0130.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a712d8) returned 1 [0130.455] NtQueryInformationFile (in: FileHandle=0x13fc, IoStatusBlock=0xa96f950, FileInformation=0xa96f958, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa96f950, FileInformation=0xa96f958) returned 0x0 [0130.455] NtSetInformationFile (FileHandle=0x13fc, IoStatusBlock=0xa96f950, FileInformation=0xa96f958, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23df0) returned 1 [0130.461] FlushFileBuffers (hFile=0x13fc) returned 1 [0130.465] CloseHandle (hObject=0x13fc) returned 1 [0130.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1ea68 [0130.476] wcscpy (in: _Dest=0x3e1ea68, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0130.477] wcscat (in: _Dest=0x3e1ea68, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" [0130.477] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\68814f-readme.txt")) returned 0x20 [0130.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ea68) returned 1 [0130.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1148) returned 1 Thread: id = 590 os_tid = 0x10fc [0124.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\tlp8ruxvl.bmp")) returned 0x20 [0124.022] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp", dwFileAttributes=0x20) returned 1 [0127.085] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\tlp8ruxvl.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1400 [0127.085] GetFileSizeEx (in: hFile=0x1400, lpFileSize=0xa1ffc24 | out: lpFileSize=0xa1ffc24*=15308) returned 1 [0127.085] SetFilePointerEx (in: hFile=0x1400, liDistanceToMove=0x3bc8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.085] ReadFile (in: hFile=0x1400, lpBuffer=0xa1ffc00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa1ffc10, lpOverlapped=0x0 | out: lpBuffer=0xa1ffc00*, lpNumberOfBytesRead=0xa1ffc10*=0x4, lpOverlapped=0x0) returned 1 [0127.087] SetFilePointerEx (in: hFile=0x1400, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0127.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0127.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0127.088] NtQuerySystemTime (in: CurrentTime=0xa1ffb98 | out: CurrentTime=0xa1ffb98*=132462177064836000) returned 0x0 [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x5d4c13bc [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0xc67d76e [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x7d465621 [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x351ab267 [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x514aa7de [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x368b3cdd [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x72386401 [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x6e13fbc3 [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x2cd007f [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x317e55b2 [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x7fa085d4 [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x73b656e6 [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x7cf55a8c [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x43e65e54 [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x11eb0963 [0127.088] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x2fa4a6f2 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x51df939 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0xb74a4bf [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x49a5ff93 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x7f16dbb4 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x542504c0 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x83f0600 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x34529be2 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x3436d50e [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x61f987f1 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x14ab7312 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x4c6ec00e [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x50a2f7f3 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x56194fc3 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x5d2de387 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x6141c960 [0127.089] RtlRandomEx (in: Seed=0xa1ffb90 | out: Seed=0xa1ffb90) returned 0x7eda07d0 [0127.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3588) returned 1 [0127.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb53c0 [0127.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb8fc8 [0127.103] ReadFile (in: hFile=0x1400, lpBuffer=0x7bb53c0, nNumberOfBytesToRead=0x3bcc, lpNumberOfBytesRead=0xa1ffb8c, lpOverlapped=0x0 | out: lpBuffer=0x7bb53c0*, lpNumberOfBytesRead=0xa1ffb8c*=0x3bcc, lpOverlapped=0x0) returned 1 [0127.103] SetFilePointerEx (in: hFile=0x1400, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.103] WriteFile (in: hFile=0x1400, lpBuffer=0x7bb8fc8*, nNumberOfBytesToWrite=0x3bcc, lpNumberOfBytesWritten=0xa1ffb90, lpOverlapped=0x0 | out: lpBuffer=0x7bb8fc8*, lpNumberOfBytesWritten=0xa1ffb90*=0x3bcc, lpOverlapped=0x0) returned 1 [0130.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e529f0 [0130.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e528b0 [0130.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e528b0) returned 1 [0130.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb8fc8) returned 1 [0130.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb53c0) returned 1 [0130.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0130.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 [0130.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86ae8 [0130.060] SetFilePointerEx (in: hFile=0x1400, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.060] WriteFile (in: hFile=0x1400, lpBuffer=0x7ad53f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa1ffc18, lpOverlapped=0x0 | out: lpBuffer=0x7ad53f8*, lpNumberOfBytesWritten=0xa1ffc18*=0x10c, lpOverlapped=0x0) returned 1 [0130.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad53f8) returned 1 [0130.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86b18) returned 1 [0130.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e528b0) returned 1 [0130.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86ae8) returned 1 [0130.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e529f0) returned 1 [0130.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34c0) returned 1 [0130.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0130.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33f8) returned 1 [0130.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1ea68 [0130.187] wcscpy (in: _Dest=0x3e1ea68, _Source="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp" [0130.187] wcscat (in: _Dest=0x3e1ea68, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp.68814f" [0130.187] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp.68814f", NtPathName=0xa1ffb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\TLp8ruxVl.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46e98 [0130.187] NtSetInformationFile (FileHandle=0x1400, IoStatusBlock=0xa1ffb98, FileInformation=0x3e46e98, Length=0x74, FileInformationClass=0xa) returned 0x0 [0130.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46e98) returned 1 [0130.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a721f0) returned 1 [0130.456] NtQueryInformationFile (in: FileHandle=0x1400, IoStatusBlock=0xa1ffb68, FileInformation=0xa1ffb70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa1ffb68, FileInformation=0xa1ffb70) returned 0x0 [0130.456] NtSetInformationFile (FileHandle=0x1400, IoStatusBlock=0xa1ffb68, FileInformation=0xa1ffb70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ea68) returned 1 [0130.458] FlushFileBuffers (hFile=0x1400) returned 1 [0130.462] CloseHandle (hObject=0x1400) returned 1 [0130.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1ea68 [0130.463] wcscpy (in: _Dest=0x3e1ea68, _Source="C:\\Users\\EEBsYm5\\Pictures\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\") returned="C:\\Users\\EEBsYm5\\Pictures\\" [0130.463] wcscat (in: _Dest=0x3e1ea68, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" [0130.463] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\68814f-readme.txt")) returned 0x20 [0130.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ea68) returned 1 [0130.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a8a0) returned 1 Thread: id = 591 os_tid = 0x1100 [0124.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47038 [0124.025] wcscpy (in: _Dest=0x3d47038, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" [0124.025] wcscat (in: _Dest=0x3d47038, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" [0124.025] wcscat (in: _Dest=0x3d47038, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\*" [0124.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0124.025] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e6ed00, ftCreationTime.dwHighDateTime=0x1d5e511, ftLastAccessTime.dwLowDateTime=0x7ec01e40, ftLastAccessTime.dwHighDateTime=0x1d5e154, ftLastWriteTime.dwLowDateTime=0x7ec01e40, ftLastWriteTime.dwHighDateTime=0x1d5e154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0124.026] wcscmp (_String1=".", _String2=".") returned 0 [0124.026] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e6ed00, ftCreationTime.dwHighDateTime=0x1d5e511, ftLastAccessTime.dwLowDateTime=0x7ec01e40, ftLastAccessTime.dwHighDateTime=0x1d5e154, ftLastWriteTime.dwLowDateTime=0x7ec01e40, ftLastWriteTime.dwHighDateTime=0x1d5e154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.026] wcscmp (_String1="..", _String2=".") returned 1 [0124.026] wcscmp (_String1="..", _String2="..") returned 0 [0124.026] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28ec9960, ftCreationTime.dwHighDateTime=0x1d5e6d3, ftLastAccessTime.dwLowDateTime=0x1c7b9bc0, ftLastAccessTime.dwHighDateTime=0x1d5dba4, ftLastWriteTime.dwLowDateTime=0x1c7b9bc0, ftLastWriteTime.dwHighDateTime=0x1d5dba4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1wJXxR0YtjSkGApw", cAlternateFileName="1WJXXR~1")) returned 1 [0124.026] wcscmp (_String1="1wJXxR0YtjSkGApw", _String2=".") returned 1 [0124.026] wcscmp (_String1="1wJXxR0YtjSkGApw", _String2="..") returned 1 [0124.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a218 [0124.026] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" [0124.026] wcscat (in: _Dest=0x3e1a218, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" [0124.026] wcscat (in: _Dest=0x3e1a218, _Source="1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0133.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1a218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0133.111] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd778d7d0, ftCreationTime.dwHighDateTime=0x1d5de3d, ftLastAccessTime.dwLowDateTime=0x93431190, ftLastAccessTime.dwHighDateTime=0x1d5e0bb, ftLastWriteTime.dwLowDateTime=0x93431190, ftLastWriteTime.dwHighDateTime=0x1d5e0bb, nFileSizeHigh=0x0, nFileSizeLow=0xabd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GJbqAyskGmsEXhID_.jpg", cAlternateFileName="GJBQAY~1.JPG")) returned 1 [0133.111] wcscmp (_String1="GJbqAyskGmsEXhID_.jpg", _String2=".") returned 1 [0133.111] wcscmp (_String1="GJbqAyskGmsEXhID_.jpg", _String2="..") returned 1 [0133.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45140 [0133.112] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" [0133.112] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" [0133.112] wcscat (in: _Dest=0x3d45140, _Source="GJbqAyskGmsEXhID_.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg" [0133.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c18 [0133.113] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ea30970, ftCreationTime.dwHighDateTime=0x1d5e81d, ftLastAccessTime.dwLowDateTime=0xf83e43d0, ftLastAccessTime.dwHighDateTime=0x1d5d86e, ftLastWriteTime.dwLowDateTime=0xf83e43d0, ftLastWriteTime.dwHighDateTime=0x1d5d86e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LMQ8IvMz1qyiBP", cAlternateFileName="LMQ8IV~1")) returned 1 [0133.113] wcscmp (_String1="LMQ8IvMz1qyiBP", _String2=".") returned 1 [0133.113] wcscmp (_String1="LMQ8IvMz1qyiBP", _String2="..") returned 1 [0133.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19d18 [0133.113] wcscpy (in: _Dest=0x3e19d18, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" [0133.113] wcscat (in: _Dest=0x3e19d18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" [0133.113] wcscat (in: _Dest=0x3e19d18, _Source="LMQ8IvMz1qyiBP" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP" [0133.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e19d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0133.115] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ca8e00, ftCreationTime.dwHighDateTime=0x1d5d8eb, ftLastAccessTime.dwLowDateTime=0xc3ca25e0, ftLastAccessTime.dwHighDateTime=0x1d5e5a4, ftLastWriteTime.dwLowDateTime=0xc3ca25e0, ftLastWriteTime.dwHighDateTime=0x1d5e5a4, nFileSizeHigh=0x0, nFileSizeLow=0x179ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrOJURtfOY.bmp", cAlternateFileName="RDROJU~1.BMP")) returned 1 [0133.115] wcscmp (_String1="rdrOJURtfOY.bmp", _String2=".") returned 1 [0133.115] wcscmp (_String1="rdrOJURtfOY.bmp", _String2="..") returned 1 [0133.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19698 [0133.115] wcscpy (in: _Dest=0x3e19698, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" [0133.115] wcscat (in: _Dest=0x3e19698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" [0133.115] wcscat (in: _Dest=0x3e19698, _Source="rdrOJURtfOY.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp" [0133.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0133.117] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ddbecd0, ftCreationTime.dwHighDateTime=0x1d5d861, ftLastAccessTime.dwLowDateTime=0x33b99710, ftLastAccessTime.dwHighDateTime=0x1d5e5e5, ftLastWriteTime.dwLowDateTime=0x33b99710, ftLastWriteTime.dwHighDateTime=0x1d5e5e5, nFileSizeHigh=0x0, nFileSizeLow=0x183e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIpGpFRYQBnD.gif", cAlternateFileName="SIPGPF~1.GIF")) returned 1 [0133.117] wcscmp (_String1="SIpGpFRYQBnD.gif", _String2=".") returned 1 [0133.117] wcscmp (_String1="SIpGpFRYQBnD.gif", _String2="..") returned 1 [0133.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19298 [0133.117] wcscpy (in: _Dest=0x3e19298, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1" [0133.117] wcscat (in: _Dest=0x3e19298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" [0133.117] wcscat (in: _Dest=0x3e19298, _Source="SIpGpFRYQBnD.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\SIpGpFRYQBnD.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\SIpGpFRYQBnD.gif" [0133.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0133.119] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ddbecd0, ftCreationTime.dwHighDateTime=0x1d5d861, ftLastAccessTime.dwLowDateTime=0x33b99710, ftLastAccessTime.dwHighDateTime=0x1d5e5e5, ftLastWriteTime.dwLowDateTime=0x33b99710, ftLastWriteTime.dwHighDateTime=0x1d5e5e5, nFileSizeHigh=0x0, nFileSizeLow=0x183e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIpGpFRYQBnD.gif", cAlternateFileName="SIPGPF~1.GIF")) returned 0 [0133.119] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0133.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0133.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47038) returned 1 [0133.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 Thread: id = 592 os_tid = 0x1104 [0124.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx")) returned 0x20 [0128.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx", dwFileAttributes=0x20) returned 0 [0128.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.006] GetLastError () returned 0x5 [0132.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx", dwFileAttributes=0x20) returned 0 [0132.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2648) returned 1 Thread: id = 593 os_tid = 0x1108 [0124.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx")) returned 0x20 [0131.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx", dwFileAttributes=0x20) returned 0 [0131.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.022] GetLastError () returned 0x5 [0131.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx", dwFileAttributes=0x20) returned 0 [0131.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1838) returned 1 Thread: id = 594 os_tid = 0x110c [0124.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx")) returned 0x20 [0131.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx", dwFileAttributes=0x20) returned 0 [0131.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.181] GetLastError () returned 0x5 [0131.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx", dwFileAttributes=0x20) returned 0 [0131.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 595 os_tid = 0x1110 [0124.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx")) returned 0x20 [0131.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx", dwFileAttributes=0x20) returned 0 [0131.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.969] GetLastError () returned 0x5 [0131.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx", dwFileAttributes=0x20) returned 0 [0131.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb57c8) returned 1 Thread: id = 596 os_tid = 0x1114 [0124.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx")) returned 0x20 [0131.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx", dwFileAttributes=0x20) returned 0 [0131.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.967] GetLastError () returned 0x5 [0131.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx", dwFileAttributes=0x20) returned 0 [0131.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44180) returned 1 Thread: id = 597 os_tid = 0x1118 [0124.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\classes.jsa")) returned 0x21 [0124.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa", dwFileAttributes=0x20) returned 0 [0124.414] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\classes.jsa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.414] GetLastError () returned 0x5 [0124.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\classes.jsa", dwFileAttributes=0x21) returned 0 [0124.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 Thread: id = 598 os_tid = 0x111c [0124.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\xusage.txt")) returned 0x20 [0124.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt", dwFileAttributes=0x20) returned 0 [0124.412] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files\\java\\jre7\\bin\\client\\xusage.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.412] GetLastError () returned 0x5 [0124.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\bin\\client\\Xusage.txt", dwFileAttributes=0x20) returned 0 [0124.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23530) returned 1 Thread: id = 599 os_tid = 0x1120 [0124.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx")) returned 0x20 [0125.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx", dwFileAttributes=0x20) returned 0 [0125.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.798] GetLastError () returned 0x5 [0125.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx", dwFileAttributes=0x20) returned 0 [0125.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 Thread: id = 600 os_tid = 0x1124 [0124.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx")) returned 0x20 [0131.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx", dwFileAttributes=0x20) returned 0 [0131.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.964] GetLastError () returned 0x5 [0131.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx", dwFileAttributes=0x20) returned 0 [0131.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44840) returned 1 Thread: id = 601 os_tid = 0x1128 [0124.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx")) returned 0x20 [0125.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx", dwFileAttributes=0x20) returned 0 [0125.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.796] GetLastError () returned 0x5 [0125.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx", dwFileAttributes=0x20) returned 0 [0125.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 602 os_tid = 0x112c [0124.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx")) returned 0x20 [0131.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx", dwFileAttributes=0x20) returned 0 [0131.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.187] GetLastError () returned 0x5 [0131.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx", dwFileAttributes=0x20) returned 0 [0131.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448d0) returned 1 Thread: id = 603 os_tid = 0x1130 [0124.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx")) returned 0x20 [0131.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx", dwFileAttributes=0x20) returned 0 [0131.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.185] GetLastError () returned 0x5 [0131.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx", dwFileAttributes=0x20) returned 0 [0131.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44960) returned 1 Thread: id = 604 os_tid = 0x1134 [0124.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx")) returned 0x20 [0131.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx", dwFileAttributes=0x20) returned 0 [0131.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.183] GetLastError () returned 0x5 [0131.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx", dwFileAttributes=0x20) returned 0 [0131.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449f0) returned 1 Thread: id = 605 os_tid = 0x1138 [0124.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0124.040] wcscpy (in: _Dest=0x3f3fb00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" [0124.040] wcscat (in: _Dest=0x3f3fb00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\" [0124.040] wcscat (in: _Dest=0x3f3fb00, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*" [0124.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2bc0 [0124.040] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352582b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0124.041] wcscmp (_String1=".", _String2=".") returned 0 [0124.041] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352582b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352582b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.041] wcscmp (_String1="..", _String2=".") returned 1 [0124.041] wcscmp (_String1="..", _String2="..") returned 0 [0124.041] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70db700, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa70db700, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 1 [0124.041] wcscmp (_String1="CAGCAT10.MML", _String2=".") returned 1 [0124.041] wcscmp (_String1="CAGCAT10.MML", _String2="..") returned 1 [0124.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x355680 [0124.041] wcscpy (in: _Dest=0x355680, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033" [0124.041] wcscat (in: _Dest=0x355680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\" [0124.041] wcscat (in: _Dest=0x355680, _Source="CAGCAT10.MML" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" [0130.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x355680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0130.932] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70db700, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x352582b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa70db700, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c450, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MML", cAlternateFileName="")) returned 0 [0130.932] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0130.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2bc0) returned 1 [0130.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0130.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 Thread: id = 606 os_tid = 0x113c [0124.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw")) returned 0x20 [0124.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW", dwFileAttributes=0x20) returned 0 [0124.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.862] GetLastError () returned 0x5 [0124.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW", dwFileAttributes=0x20) returned 0 [0124.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 607 os_tid = 0x1140 [0124.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav")) returned 0x20 [0124.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV", dwFileAttributes=0x20) returned 0 [0124.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.864] GetLastError () returned 0x5 [0124.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV", dwFileAttributes=0x20) returned 0 [0124.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9de0) returned 1 Thread: id = 608 os_tid = 0x1144 [0124.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf")) returned 0x20 [0124.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF", dwFileAttributes=0x20) returned 0 [0124.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.867] GetLastError () returned 0x5 [0124.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF", dwFileAttributes=0x20) returned 0 [0124.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 609 os_tid = 0x1148 [0124.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf")) returned 0x20 [0124.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF", dwFileAttributes=0x20) returned 0 [0124.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.869] GetLastError () returned 0x5 [0124.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF", dwFileAttributes=0x20) returned 0 [0124.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 610 os_tid = 0x114c [0124.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf")) returned 0x20 [0124.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF", dwFileAttributes=0x20) returned 0 [0124.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.872] GetLastError () returned 0x5 [0124.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF", dwFileAttributes=0x20) returned 0 [0124.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 611 os_tid = 0x1150 [0124.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf")) returned 0x20 [0124.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF", dwFileAttributes=0x20) returned 0 [0124.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.874] GetLastError () returned 0x5 [0124.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF", dwFileAttributes=0x20) returned 0 [0124.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba000) returned 1 Thread: id = 612 os_tid = 0x1154 [0124.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf")) returned 0x20 [0124.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF", dwFileAttributes=0x20) returned 0 [0124.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.876] GetLastError () returned 0x5 [0124.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF", dwFileAttributes=0x20) returned 0 [0124.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba088) returned 1 Thread: id = 613 os_tid = 0x1158 [0124.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf")) returned 0x20 [0124.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF", dwFileAttributes=0x20) returned 0 [0124.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.879] GetLastError () returned 0x5 [0124.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF", dwFileAttributes=0x20) returned 0 [0124.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 614 os_tid = 0x115c [0124.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf")) returned 0x20 [0124.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF", dwFileAttributes=0x20) returned 0 [0124.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.881] GetLastError () returned 0x5 [0124.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF", dwFileAttributes=0x20) returned 0 [0124.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba198) returned 1 Thread: id = 615 os_tid = 0x1160 [0124.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf")) returned 0x20 [0124.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF", dwFileAttributes=0x20) returned 0 [0124.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.418] GetLastError () returned 0x5 [0124.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF", dwFileAttributes=0x20) returned 0 [0124.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 616 os_tid = 0x1164 [0124.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf")) returned 0x20 [0124.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF", dwFileAttributes=0x20) returned 0 [0124.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.420] GetLastError () returned 0x5 [0124.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF", dwFileAttributes=0x20) returned 0 [0124.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 617 os_tid = 0x1168 [0124.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf")) returned 0x20 [0124.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF", dwFileAttributes=0x20) returned 0 [0124.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.428] GetLastError () returned 0x5 [0124.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF", dwFileAttributes=0x20) returned 0 [0124.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 618 os_tid = 0x116c [0124.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf")) returned 0x20 [0124.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF", dwFileAttributes=0x20) returned 0 [0124.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.560] GetLastError () returned 0x5 [0124.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF", dwFileAttributes=0x20) returned 0 [0124.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 Thread: id = 619 os_tid = 0x1170 [0124.561] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\356mwgw.gif" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\e13d4yrk6pcxyb\\356mwgw.gif")) returned 0x20 [0124.562] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\356mwgw.gif", dwFileAttributes=0x20) returned 1 [0127.506] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\356mwgw.gif" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\e13d4yrk6pcxyb\\356mwgw.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x150c [0127.506] GetFileSizeEx (in: hFile=0x150c, lpFileSize=0xab6fb14 | out: lpFileSize=0xab6fb14*=87533) returned 1 [0127.506] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x155e9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.506] ReadFile (in: hFile=0x150c, lpBuffer=0xab6faf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xab6fb00, lpOverlapped=0x0 | out: lpBuffer=0xab6faf0*, lpNumberOfBytesRead=0xab6fb00*=0x4, lpOverlapped=0x0) returned 1 [0127.509] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0127.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0127.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0127.509] NtQuerySystemTime (in: CurrentTime=0xab6fa88 | out: CurrentTime=0xab6fa88*=132462177069048000) returned 0x0 [0127.509] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x7bde418e [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x468b0504 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x26df3200 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x621576e8 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x57a5089b [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x237e3f2f [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x70f5685d [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x399537d4 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x35b09954 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x18c8b78f [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x4c37f648 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x22225764 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x76981acd [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0xa4d9c27 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x2ede2f89 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x4e8a1ce9 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x1c27f6ae [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x4897b404 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x759363a1 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x1e17eea0 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x2b7811d0 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0xebea92a [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x455581b4 [0127.510] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x6ecb85b0 [0127.511] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x621ea5c7 [0127.511] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x4a54c6ac [0127.511] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x1995dab7 [0127.511] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x294e1d49 [0127.511] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x59709a99 [0127.511] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x3913eefb [0127.511] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x55fa99f6 [0127.511] RtlRandomEx (in: Seed=0xab6fa80 | out: Seed=0xab6fa80) returned 0x164a06c8 [0127.523] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.523] ReadFile (in: hFile=0x150c, lpBuffer=0x7c2eb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xab6fa88, lpOverlapped=0x0 | out: lpBuffer=0x7c2eb90*, lpNumberOfBytesRead=0xab6fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0127.523] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85398 [0127.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0127.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0127.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0127.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c32798 [0127.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0127.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0127.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bb0) returned 1 [0127.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0127.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0127.524] WriteFile (in: hFile=0x150c, lpBuffer=0x7c32798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xab6fa88, lpOverlapped=0x0 | out: lpBuffer=0x7c32798*, lpNumberOfBytesWritten=0xab6fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0127.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c32798) returned 1 [0127.801] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.801] ReadFile (in: hFile=0x150c, lpBuffer=0x7c2eb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xab6fa88, lpOverlapped=0x0 | out: lpBuffer=0x7c2eb90*, lpNumberOfBytesRead=0xab6fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0127.801] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0127.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c32798 [0127.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0127.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0127.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0127.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.802] WriteFile (in: hFile=0x150c, lpBuffer=0x7c32798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xab6fa88, lpOverlapped=0x0 | out: lpBuffer=0x7c32798*, lpNumberOfBytesWritten=0xab6fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0127.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c32798) returned 1 [0127.808] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x119ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.808] ReadFile (in: hFile=0x150c, lpBuffer=0x7c2eb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xab6fa88, lpOverlapped=0x0 | out: lpBuffer=0x7c2eb90*, lpNumberOfBytesRead=0xab6fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0127.808] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x119ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85158 [0127.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0127.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0127.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0127.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c32798 [0127.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0127.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0127.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0127.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0127.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0127.809] WriteFile (in: hFile=0x150c, lpBuffer=0x7c32798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xab6fa88, lpOverlapped=0x0 | out: lpBuffer=0x7c32798*, lpNumberOfBytesWritten=0xab6fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0127.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c32798) returned 1 [0127.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b98 [0127.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0127.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86758 [0127.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0127.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0127.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0127.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e0a560 [0127.815] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.815] WriteFile (in: hFile=0x150c, lpBuffer=0x3e0a560*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0xab6fb08, lpOverlapped=0x0 | out: lpBuffer=0x3e0a560*, lpNumberOfBytesWritten=0xab6fb08*=0x148, lpOverlapped=0x0) returned 1 [0127.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0127.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0127.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a2f770 [0127.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0127.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ae8 [0127.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ae8) returned 1 [0127.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x3e79138 [0127.907] sprintf (in: _Dest=0x3e79138, _Format="%c%c" | out: _Dest="49") returned 2 [0127.907] sprintf (in: _Dest=0x3e7913a, _Format="%c%c" | out: _Dest="64") returned 2 [0127.907] sprintf (in: _Dest=0x3e7913c, _Format="%c%c" | out: _Dest="a6") returned 2 [0127.907] sprintf (in: _Dest=0x3e7913e, _Format="%c%c" | out: _Dest="e7") returned 2 [0127.907] sprintf (in: _Dest=0x3e79140, _Format="%c%c" | out: _Dest="08") returned 2 [0127.907] sprintf (in: _Dest=0x3e79142, _Format="%c%c" | out: _Dest="12") returned 2 [0127.907] sprintf (in: _Dest=0x3e79144, _Format="%c%c" | out: _Dest="c2") returned 2 [0127.907] sprintf (in: _Dest=0x3e79146, _Format="%c%c" | out: _Dest="71") returned 2 [0127.907] sprintf (in: _Dest=0x3e79148, _Format="%c%c" | out: _Dest="28") returned 2 [0127.907] sprintf (in: _Dest=0x3e7914a, _Format="%c%c" | out: _Dest="21") returned 2 [0127.907] sprintf (in: _Dest=0x3e7914c, _Format="%c%c" | out: _Dest="2c") returned 2 [0127.907] sprintf (in: _Dest=0x3e7914e, _Format="%c%c" | out: _Dest="f0") returned 2 [0127.907] sprintf (in: _Dest=0x3e79150, _Format="%c%c" | out: _Dest="f4") returned 2 [0127.907] sprintf (in: _Dest=0x3e79152, _Format="%c%c" | out: _Dest="f2") returned 2 [0127.907] sprintf (in: _Dest=0x3e79154, _Format="%c%c" | out: _Dest="ac") returned 2 [0127.907] sprintf (in: _Dest=0x3e79156, _Format="%c%c" | out: _Dest="a7") returned 2 [0127.907] sprintf (in: _Dest=0x3e79158, _Format="%c%c" | out: _Dest="c7") returned 2 [0127.907] sprintf (in: _Dest=0x3e7915a, _Format="%c%c" | out: _Dest="bf") returned 2 [0127.907] sprintf (in: _Dest=0x3e7915c, _Format="%c%c" | out: _Dest="ac") returned 2 [0127.907] sprintf (in: _Dest=0x3e7915e, _Format="%c%c" | out: _Dest="0b") returned 2 [0127.907] sprintf (in: _Dest=0x3e79160, _Format="%c%c" | out: _Dest="3b") returned 2 [0127.907] sprintf (in: _Dest=0x3e79162, _Format="%c%c" | out: _Dest="0e") returned 2 [0127.907] RtlInitAnsiString (in: DestinationString=0xab6fa90, SourceString="4964a6e70812c27128212cf0f4f2aca7c7bfac0b3b0e" | out: DestinationString="4964a6e70812c27128212cf0f4f2aca7c7bfac0b3b0e") [0127.908] RtlAnsiStringToUnicodeString (in: DestinationString=0xab6fa88, SourceString="4964a6e70812c27128212cf0f4f2aca7c7bfac0b3b0e", AllocateDestinationString=1 | out: DestinationString="4964a6e70812c27128212cf0f4f2aca7c7bfac0b3b0e") returned 0x0 [0127.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e20608 [0127.908] wcscat (in: _Dest=0x3053720, _Source="4964a6e7081" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\4964a6e7081") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\4964a6e7081" [0127.908] wcscat (in: _Dest=0x3053720, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\4964a6e7081.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\4964a6e7081.68814f" [0127.908] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\4964a6e7081.68814f", NtPathName=0xab6fa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\4964a6e7081.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66798 [0127.908] NtSetInformationFile (FileHandle=0x150c, IoStatusBlock=0xab6fa88, FileInformation=0x3e66798, Length=0xb4, FileInformationClass=0xa) returned 0x0 [0128.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66798) returned 1 [0128.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e021e0) returned 1 [0128.115] NtQueryInformationFile (in: FileHandle=0x150c, IoStatusBlock=0xab6fa58, FileInformation=0xab6fa60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xab6fa58, FileInformation=0xab6fa60) returned 0x0 [0128.115] NtSetInformationFile (FileHandle=0x150c, IoStatusBlock=0xab6fa58, FileInformation=0xab6fa60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 [0128.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20608) returned 1 [0128.119] FlushFileBuffers (hFile=0x150c) returned 1 [0128.124] CloseHandle (hObject=0x150c) returned 1 [0128.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053d08 [0128.136] wcscpy (in: _Dest=0x3053d08, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\" [0128.136] wcscat (in: _Dest=0x3053d08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\68814F-Readme.txt" [0128.136] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\e13d4yrk6pcxyb\\68814f-readme.txt")) returned 0x20 [0128.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053d08) returned 1 [0128.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d1a8) returned 1 Thread: id = 620 os_tid = 0x1174 [0124.562] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\ADZCx5HscPtV3CzFbFq.flv" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\e13d4yrk6pcxyb\\adzcx5hscptv3czfbfq.flv")) returned 0x20 [0124.562] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\ADZCx5HscPtV3CzFbFq.flv", dwFileAttributes=0x20) returned 1 [0127.525] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\ADZCx5HscPtV3CzFbFq.flv" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\e13d4yrk6pcxyb\\adzcx5hscptv3czfbfq.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1510 [0127.525] GetFileSizeEx (in: hFile=0x1510, lpFileSize=0xc5af844 | out: lpFileSize=0xc5af844*=55968) returned 1 [0127.525] SetFilePointerEx (in: hFile=0x1510, liDistanceToMove=0xda9c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.525] ReadFile (in: hFile=0x1510, lpBuffer=0xc5af820, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc5af830, lpOverlapped=0x0 | out: lpBuffer=0xc5af820*, lpNumberOfBytesRead=0xc5af830*=0x4, lpOverlapped=0x0) returned 1 [0127.526] SetFilePointerEx (in: hFile=0x1510, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0127.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0127.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0127.527] NtQuerySystemTime (in: CurrentTime=0xc5af7b8 | out: CurrentTime=0xc5af7b8*=132462177069204000) returned 0x0 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x753db221 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x5f90f629 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x7a49f756 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x23534da4 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x1cd47a5 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x2d08801 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x47a9d5a1 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x76eb91b1 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x22211a86 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x6ea8e103 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x294e1d49 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x41a97961 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0xa39a572 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x4a1eef63 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x159760b [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x46dd14c8 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x6251387f [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x7a49f756 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x2fce51cf [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x236fc141 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x30fc858b [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x1881f09c [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x47f25dbe [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x735acfed [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x309fd82c [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x232a8294 [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x7d97319d [0127.527] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x468b0504 [0127.528] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x35b09954 [0127.528] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x3e64d81a [0127.528] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x7613ede1 [0127.528] RtlRandomEx (in: Seed=0xc5af7b0 | out: Seed=0xc5af7b0) returned 0x74612c6b [0127.536] SetFilePointerEx (in: hFile=0x1510, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.536] ReadFile (in: hFile=0x1510, lpBuffer=0x7c363a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc5af7b8, lpOverlapped=0x0 | out: lpBuffer=0x7c363a0*, lpNumberOfBytesRead=0xc5af7b8*=0x3c00, lpOverlapped=0x0) returned 1 [0127.537] SetFilePointerEx (in: hFile=0x1510, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85398 [0127.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0127.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0127.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bb0) returned 1 [0127.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c39fa8 [0127.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0127.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0127.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0127.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0127.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0127.537] WriteFile (in: hFile=0x1510, lpBuffer=0x7c39fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc5af7b8, lpOverlapped=0x0 | out: lpBuffer=0x7c39fa8*, lpNumberOfBytesWritten=0xc5af7b8*=0x3c00, lpOverlapped=0x0) returned 1 [0127.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c39fa8) returned 1 [0127.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c363a0) returned 1 [0127.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e85500 [0127.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0127.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e84ff0 [0127.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0127.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0127.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0127.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0127.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0127.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d54810 [0127.807] SetFilePointerEx (in: hFile=0x1510, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.807] WriteFile (in: hFile=0x1510, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xc5af838, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0xc5af838*=0x120, lpOverlapped=0x0) returned 1 [0127.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07800 [0127.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0127.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0127.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79138 [0127.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0127.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0127.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d68) returned 1 [0127.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0127.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5d) returned 0x3ee0c00 [0127.901] sprintf (in: _Dest=0x3ee0c00, _Format="%c%c" | out: _Dest="fd") returned 2 [0127.901] sprintf (in: _Dest=0x3ee0c02, _Format="%c%c" | out: _Dest="49") returned 2 [0127.901] sprintf (in: _Dest=0x3ee0c04, _Format="%c%c" | out: _Dest="e2") returned 2 [0127.901] sprintf (in: _Dest=0x3ee0c06, _Format="%c%c" | out: _Dest="f5") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c08, _Format="%c%c" | out: _Dest="e8") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c0a, _Format="%c%c" | out: _Dest="e3") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c0c, _Format="%c%c" | out: _Dest="be") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c0e, _Format="%c%c" | out: _Dest="e6") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c10, _Format="%c%c" | out: _Dest="4e") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c12, _Format="%c%c" | out: _Dest="8e") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c14, _Format="%c%c" | out: _Dest="7a") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c16, _Format="%c%c" | out: _Dest="f9") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c18, _Format="%c%c" | out: _Dest="ff") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c1a, _Format="%c%c" | out: _Dest="21") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c1c, _Format="%c%c" | out: _Dest="98") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c1e, _Format="%c%c" | out: _Dest="c6") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c20, _Format="%c%c" | out: _Dest="36") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c22, _Format="%c%c" | out: _Dest="fa") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c24, _Format="%c%c" | out: _Dest="fe") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c26, _Format="%c%c" | out: _Dest="57") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c28, _Format="%c%c" | out: _Dest="d9") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c2a, _Format="%c%c" | out: _Dest="f9") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c2c, _Format="%c%c" | out: _Dest="99") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c2e, _Format="%c%c" | out: _Dest="14") returned 2 [0127.902] sprintf (in: _Dest=0x3ee0c30, _Format="%c%c" | out: _Dest="7e") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c32, _Format="%c%c" | out: _Dest="53") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c34, _Format="%c%c" | out: _Dest="eb") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c36, _Format="%c%c" | out: _Dest="cc") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c38, _Format="%c%c" | out: _Dest="41") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c3a, _Format="%c%c" | out: _Dest="d1") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c3c, _Format="%c%c" | out: _Dest="e2") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c3e, _Format="%c%c" | out: _Dest="35") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c40, _Format="%c%c" | out: _Dest="c5") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c42, _Format="%c%c" | out: _Dest="30") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c44, _Format="%c%c" | out: _Dest="a8") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c46, _Format="%c%c" | out: _Dest="1b") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c48, _Format="%c%c" | out: _Dest="f5") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c4a, _Format="%c%c" | out: _Dest="ab") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c4c, _Format="%c%c" | out: _Dest="b5") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c4e, _Format="%c%c" | out: _Dest="a1") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c50, _Format="%c%c" | out: _Dest="d7") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c52, _Format="%c%c" | out: _Dest="bd") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c54, _Format="%c%c" | out: _Dest="30") returned 2 [0127.903] sprintf (in: _Dest=0x3ee0c56, _Format="%c%c" | out: _Dest="8a") returned 2 [0127.904] sprintf (in: _Dest=0x3ee0c58, _Format="%c%c" | out: _Dest="d6") returned 2 [0127.904] sprintf (in: _Dest=0x3ee0c5a, _Format="%c%c" | out: _Dest="61") returned 2 [0127.904] RtlInitAnsiString (in: DestinationString=0xc5af7c0, SourceString="fd49e2f5e8e3bee64e8e7af9ff2198c636fafe57d9f999147e53ebcc41d1e235c530a81bf5abb5a1d7bd308ad661" | out: DestinationString="fd49e2f5e8e3bee64e8e7af9ff2198c636fafe57d9f999147e53ebcc41d1e235c530a81bf5abb5a1d7bd308ad661") [0127.904] RtlAnsiStringToUnicodeString (in: DestinationString=0xc5af7b8, SourceString="fd49e2f5e8e3bee64e8e7af9ff2198c636fafe57d9f999147e53ebcc41d1e235c530a81bf5abb5a1d7bd308ad661", AllocateDestinationString=1 | out: DestinationString="fd49e2f5e8e3bee64e8e7af9ff2198c636fafe57d9f999147e53ebcc41d1e235c530a81bf5abb5a1d7bd308ad661") returned 0x0 [0127.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a378 [0127.904] wcscat (in: _Dest=0x3e666d8, _Source="fd49e2f5e8e3bee64e8e7af" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\fd49e2f5e8e3bee64e8e7af") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\fd49e2f5e8e3bee64e8e7af" [0127.904] wcscat (in: _Dest=0x3e666d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\fd49e2f5e8e3bee64e8e7af.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\fd49e2f5e8e3bee64e8e7af.68814f" [0127.904] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\fd49e2f5e8e3bee64e8e7af.68814f", NtPathName=0xc5af7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\fd49e2f5e8e3bee64e8e7af.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x30115c0 [0127.904] NtSetInformationFile (FileHandle=0x1510, IoStatusBlock=0xc5af7b8, FileInformation=0x30115c0, Length=0xcc, FileInformationClass=0xa) returned 0x0 [0127.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30115c0) returned 1 [0127.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02a80) returned 1 [0127.967] NtQueryInformationFile (in: FileHandle=0x1510, IoStatusBlock=0xc5af788, FileInformation=0xc5af790, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc5af788, FileInformation=0xc5af790) returned 0x0 [0127.967] NtSetInformationFile (FileHandle=0x1510, IoStatusBlock=0xc5af788, FileInformation=0xc5af790, Length=0x28, FileInformationClass=0x4) returned 0x0 [0127.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e666d8) returned 1 [0127.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a378) returned 1 [0127.989] FlushFileBuffers (hFile=0x1510) returned 1 [0128.000] CloseHandle (hObject=0x1510) returned 1 [0128.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3054050 [0128.012] wcscpy (in: _Dest=0x3054050, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\" [0128.012] wcscat (in: _Dest=0x3054050, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\68814F-Readme.txt" [0128.012] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\e13d4yrk6pcxyb\\68814f-readme.txt")) returned 0xffffffff [0128.012] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\e13d4yrk6pcxyb\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc90 [0128.219] WriteFile (in: hFile=0xc90, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc5af7cc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc5af7cc*=0x8b9, lpOverlapped=0x0) returned 1 [0128.222] CloseHandle (hObject=0xc90) returned 1 [0128.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3054050) returned 1 [0128.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 621 os_tid = 0x1178 [0124.563] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\sY9nAO.flv" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\e13d4yrk6pcxyb\\sy9nao.flv")) returned 0x20 [0124.563] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\sY9nAO.flv", dwFileAttributes=0x20) returned 1 [0127.538] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\sY9nAO.flv" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\e13d4yrk6pcxyb\\sy9nao.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1514 [0127.538] GetFileSizeEx (in: hFile=0x1514, lpFileSize=0xd15fdcc | out: lpFileSize=0xd15fdcc*=86700) returned 1 [0127.538] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x152a8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.538] ReadFile (in: hFile=0x1514, lpBuffer=0xd15fda8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd15fdb8, lpOverlapped=0x0 | out: lpBuffer=0xd15fda8*, lpNumberOfBytesRead=0xd15fdb8*=0x4, lpOverlapped=0x0) returned 1 [0127.540] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0127.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0127.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0127.540] NtQuerySystemTime (in: CurrentTime=0xd15fd40 | out: CurrentTime=0xd15fd40*=132462177069360000) returned 0x0 [0127.540] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x67b5b2fd [0127.540] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x1bd8ce16 [0127.540] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x330dea20 [0127.540] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x32f26475 [0127.540] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x65f956f7 [0127.540] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x76699f61 [0127.540] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x74e800a1 [0127.540] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x713915ea [0127.540] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x47f25dbe [0127.540] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x1e17eea0 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x444e7bbe [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x5a164b47 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x640f5b72 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x737790d1 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x6251387f [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x6ecb85b0 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x314757f6 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0xebea92a [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x68a58c31 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x8fbd071 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x41f68d36 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x14c2cca5 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x47aff461 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x72bdba98 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x2691c0a2 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x1f930257 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x6197d101 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x46dd14c8 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x44acb6e1 [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x224692d [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x498b40ee [0127.541] RtlRandomEx (in: Seed=0xd15fd38 | out: Seed=0xd15fd38) returned 0x143e31ee [0127.552] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.552] ReadFile (in: hFile=0x1514, lpBuffer=0x7c3dbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd15fd40, lpOverlapped=0x0 | out: lpBuffer=0x7c3dbb0*, lpNumberOfBytesRead=0xd15fd40*=0x3c00, lpOverlapped=0x0) returned 1 [0127.553] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85398 [0127.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0127.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0127.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0127.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c417b8 [0127.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0127.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0127.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0127.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0127.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0127.554] WriteFile (in: hFile=0x1514, lpBuffer=0x7c417b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd15fd40, lpOverlapped=0x0 | out: lpBuffer=0x7c417b8*, lpNumberOfBytesWritten=0xd15fd40*=0x3c00, lpOverlapped=0x0) returned 1 [0127.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c417b8) returned 1 [0127.812] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.812] ReadFile (in: hFile=0x1514, lpBuffer=0x7c3dbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd15fd40, lpOverlapped=0x0 | out: lpBuffer=0x7c3dbb0*, lpNumberOfBytesRead=0xd15fd40*=0x3c00, lpOverlapped=0x0) returned 1 [0127.812] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85158 [0127.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0127.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0127.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0127.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c417b8 [0127.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0127.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0127.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0127.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0127.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0127.813] WriteFile (in: hFile=0x1514, lpBuffer=0x7c417b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd15fd40, lpOverlapped=0x0 | out: lpBuffer=0x7c417b8*, lpNumberOfBytesWritten=0xd15fd40*=0x3c00, lpOverlapped=0x0) returned 1 [0127.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c417b8) returned 1 [0127.834] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x116ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.834] ReadFile (in: hFile=0x1514, lpBuffer=0x7c3dbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd15fd40, lpOverlapped=0x0 | out: lpBuffer=0x7c3dbb0*, lpNumberOfBytesRead=0xd15fd40*=0x3c00, lpOverlapped=0x0) returned 1 [0127.835] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x116ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85398 [0127.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0127.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0127.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0127.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c417b8 [0127.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0127.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0127.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0127.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0127.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0127.835] WriteFile (in: hFile=0x1514, lpBuffer=0x7c417b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd15fd40, lpOverlapped=0x0 | out: lpBuffer=0x7c417b8*, lpNumberOfBytesWritten=0xd15fd40*=0x3c00, lpOverlapped=0x0) returned 1 [0127.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c417b8) returned 1 [0127.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0ac8 [0127.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0127.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e867b8 [0127.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0127.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0127.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0127.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0127.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0127.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x146) returned 0x3e0ac18 [0127.841] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.841] WriteFile (in: hFile=0x1514, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0xd15fdc0, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0xd15fdc0*=0x146, lpOverlapped=0x0) returned 1 [0127.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0127.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0127.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2f770 [0127.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0127.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0127.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0127.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3e79368 [0127.918] sprintf (in: _Dest=0x3e79368, _Format="%c%c" | out: _Dest="74") returned 2 [0127.918] sprintf (in: _Dest=0x3e7936a, _Format="%c%c" | out: _Dest="2f") returned 2 [0127.918] sprintf (in: _Dest=0x3e7936c, _Format="%c%c" | out: _Dest="27") returned 2 [0127.918] sprintf (in: _Dest=0x3e7936e, _Format="%c%c" | out: _Dest="3b") returned 2 [0127.918] sprintf (in: _Dest=0x3e79370, _Format="%c%c" | out: _Dest="c9") returned 2 [0127.918] sprintf (in: _Dest=0x3e79372, _Format="%c%c" | out: _Dest="34") returned 2 [0127.918] sprintf (in: _Dest=0x3e79374, _Format="%c%c" | out: _Dest="fa") returned 2 [0127.918] sprintf (in: _Dest=0x3e79376, _Format="%c%c" | out: _Dest="7b") returned 2 [0127.918] sprintf (in: _Dest=0x3e79378, _Format="%c%c" | out: _Dest="1a") returned 2 [0127.918] sprintf (in: _Dest=0x3e7937a, _Format="%c%c" | out: _Dest="1d") returned 2 [0127.918] sprintf (in: _Dest=0x3e7937c, _Format="%c%c" | out: _Dest="45") returned 2 [0127.918] sprintf (in: _Dest=0x3e7937e, _Format="%c%c" | out: _Dest="ff") returned 2 [0127.918] sprintf (in: _Dest=0x3e79380, _Format="%c%c" | out: _Dest="0a") returned 2 [0127.918] sprintf (in: _Dest=0x3e79382, _Format="%c%c" | out: _Dest="97") returned 2 [0127.918] sprintf (in: _Dest=0x3e79384, _Format="%c%c" | out: _Dest="45") returned 2 [0127.918] sprintf (in: _Dest=0x3e79386, _Format="%c%c" | out: _Dest="64") returned 2 [0127.918] sprintf (in: _Dest=0x3e79388, _Format="%c%c" | out: _Dest="1d") returned 2 [0127.919] sprintf (in: _Dest=0x3e7938a, _Format="%c%c" | out: _Dest="6f") returned 2 [0127.919] sprintf (in: _Dest=0x3e7938c, _Format="%c%c" | out: _Dest="6f") returned 2 [0127.919] sprintf (in: _Dest=0x3e7938e, _Format="%c%c" | out: _Dest="be") returned 2 [0127.919] RtlInitAnsiString (in: DestinationString=0xd15fd48, SourceString="742f273bc934fa7b1a1d45ff0a9745641d6f6fbe" | out: DestinationString="742f273bc934fa7b1a1d45ff0a9745641d6f6fbe") [0127.919] RtlAnsiStringToUnicodeString (in: DestinationString=0xd15fd40, SourceString="742f273bc934fa7b1a1d45ff0a9745641d6f6fbe", AllocateDestinationString=1 | out: DestinationString="742f273bc934fa7b1a1d45ff0a9745641d6f6fbe") returned 0x0 [0127.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe65a8 [0127.919] wcscat (in: _Dest=0x3053d08, _Source="742f273bc9" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\742f273bc9") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\742f273bc9" [0127.919] wcscat (in: _Dest=0x3053d08, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\742f273bc9.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\742f273bc9.68814f" [0127.919] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\742f273bc9.68814f", NtPathName=0xd15fd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\742f273bc9.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66918 [0127.919] NtSetInformationFile (FileHandle=0x1514, IoStatusBlock=0xd15fd40, FileInformation=0x3e66918, Length=0xb2, FileInformationClass=0xa) returned 0x0 [0128.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66918) returned 1 [0128.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03548) returned 1 [0128.116] NtQueryInformationFile (in: FileHandle=0x1514, IoStatusBlock=0xd15fd10, FileInformation=0xd15fd18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd15fd10, FileInformation=0xd15fd18) returned 0x0 [0128.116] NtSetInformationFile (FileHandle=0x1514, IoStatusBlock=0xd15fd10, FileInformation=0xd15fd18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053d08) returned 1 [0128.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 [0128.123] FlushFileBuffers (hFile=0x1514) returned 1 [0128.135] CloseHandle (hObject=0x1514) returned 1 [0128.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053d08 [0128.140] wcscpy (in: _Dest=0x3053d08, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\" [0128.140] wcscat (in: _Dest=0x3053d08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\68814F-Readme.txt" [0128.140] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\e13D4YrK6pCxYb\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\e13d4yrk6pcxyb\\68814f-readme.txt")) returned 0x20 [0128.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053d08) returned 1 [0128.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 Thread: id = 622 os_tid = 0x117c [0124.563] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7wQx69LU6t.gif" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\7wqx69lu6t.gif")) returned 0x20 [0124.564] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7wQx69LU6t.gif", dwFileAttributes=0x20) returned 1 [0127.554] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7wQx69LU6t.gif" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\7wqx69lu6t.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1518 [0127.555] GetFileSizeEx (in: hFile=0x1518, lpFileSize=0xc72fedc | out: lpFileSize=0xc72fedc*=15256) returned 1 [0127.555] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x3b94, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.555] ReadFile (in: hFile=0x1518, lpBuffer=0xc72feb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc72fec8, lpOverlapped=0x0 | out: lpBuffer=0xc72feb8*, lpNumberOfBytesRead=0xc72fec8*=0x4, lpOverlapped=0x0) returned 1 [0127.557] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0127.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0127.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0127.557] NtQuerySystemTime (in: CurrentTime=0xc72fe50 | out: CurrentTime=0xc72fe50*=132462177069516000) returned 0x0 [0127.557] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x6b54abaf [0127.557] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x4e8a1ce9 [0127.557] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x1d9c54fd [0127.557] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x6a97796d [0127.557] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x69c8c930 [0127.557] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x6af4ef82 [0127.557] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x575b282a [0127.557] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x5b972cc3 [0127.557] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x41e317b2 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x4002b000 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0xd31154d [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x6db1270b [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x47489aa [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x65555771 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x356e47e5 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x79d2738a [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x114ead8d [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x37715bb2 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x28c53405 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x4248a37 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x7d29e4c1 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x75a0d0e7 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x399537d4 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x64b8da83 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x4ab331e1 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x70f5685d [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x3e3ef1a2 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0xf5eda01 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x4765db02 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x6f20cc8b [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x61a8d3d8 [0127.558] RtlRandomEx (in: Seed=0xc72fe48 | out: Seed=0xc72fe48) returned 0x7512d961 [0127.572] ReadFile (in: hFile=0x1518, lpBuffer=0x7c453c0, nNumberOfBytesToRead=0x3b98, lpNumberOfBytesRead=0xc72fe44, lpOverlapped=0x0 | out: lpBuffer=0x7c453c0*, lpNumberOfBytesRead=0xc72fe44*=0x3b98, lpOverlapped=0x0) returned 1 [0127.572] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.573] WriteFile (in: hFile=0x1518, lpBuffer=0x7c48fc8*, nNumberOfBytesToWrite=0x3b98, lpNumberOfBytesWritten=0xc72fe48, lpOverlapped=0x0 | out: lpBuffer=0x7c48fc8*, lpNumberOfBytesWritten=0xc72fe48*=0x3b98, lpOverlapped=0x0) returned 1 [0127.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0127.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0127.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c48fc8) returned 1 [0127.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c453c0) returned 1 [0127.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0127.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0127.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79368 [0127.833] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.833] WriteFile (in: hFile=0x1518, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xc72fed0, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xc72fed0*=0x10e, lpOverlapped=0x0) returned 1 [0127.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0127.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b60 [0127.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b60) returned 1 [0127.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec2b60 [0127.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0127.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0127.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c50) returned 1 [0127.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0127.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x3e85500 [0127.910] sprintf (in: _Dest=0x3e85500, _Format="%c%c" | out: _Dest="c7") returned 2 [0127.910] sprintf (in: _Dest=0x3e85502, _Format="%c%c" | out: _Dest="f4") returned 2 [0127.910] sprintf (in: _Dest=0x3e85504, _Format="%c%c" | out: _Dest="cc") returned 2 [0127.910] sprintf (in: _Dest=0x3e85506, _Format="%c%c" | out: _Dest="c7") returned 2 [0127.910] sprintf (in: _Dest=0x3e85508, _Format="%c%c" | out: _Dest="7c") returned 2 [0127.910] sprintf (in: _Dest=0x3e8550a, _Format="%c%c" | out: _Dest="78") returned 2 [0127.910] sprintf (in: _Dest=0x3e8550c, _Format="%c%c" | out: _Dest="56") returned 2 [0127.910] sprintf (in: _Dest=0x3e8550e, _Format="%c%c" | out: _Dest="10") returned 2 [0127.910] sprintf (in: _Dest=0x3e85510, _Format="%c%c" | out: _Dest="1a") returned 2 [0127.910] sprintf (in: _Dest=0x3e85512, _Format="%c%c" | out: _Dest="1e") returned 2 [0127.910] sprintf (in: _Dest=0x3e85514, _Format="%c%c" | out: _Dest="3e") returned 2 [0127.910] sprintf (in: _Dest=0x3e85516, _Format="%c%c" | out: _Dest="ac") returned 2 [0127.910] sprintf (in: _Dest=0x3e85518, _Format="%c%c" | out: _Dest="7e") returned 2 [0127.910] sprintf (in: _Dest=0x3e8551a, _Format="%c%c" | out: _Dest="f9") returned 2 [0127.910] sprintf (in: _Dest=0x3e8551c, _Format="%c%c" | out: _Dest="55") returned 2 [0127.910] sprintf (in: _Dest=0x3e8551e, _Format="%c%c" | out: _Dest="6a") returned 2 [0127.910] sprintf (in: _Dest=0x3e85520, _Format="%c%c" | out: _Dest="4f") returned 2 [0127.910] sprintf (in: _Dest=0x3e85522, _Format="%c%c" | out: _Dest="78") returned 2 [0127.910] sprintf (in: _Dest=0x3e85524, _Format="%c%c" | out: _Dest="d4") returned 2 [0127.910] sprintf (in: _Dest=0x3e85526, _Format="%c%c" | out: _Dest="39") returned 2 [0127.910] sprintf (in: _Dest=0x3e85528, _Format="%c%c" | out: _Dest="20") returned 2 [0127.910] sprintf (in: _Dest=0x3e8552a, _Format="%c%c" | out: _Dest="70") returned 2 [0127.910] sprintf (in: _Dest=0x3e8552c, _Format="%c%c" | out: _Dest="45") returned 2 [0127.910] sprintf (in: _Dest=0x3e8552e, _Format="%c%c" | out: _Dest="33") returned 2 [0127.911] sprintf (in: _Dest=0x3e85530, _Format="%c%c" | out: _Dest="eb") returned 2 [0127.911] sprintf (in: _Dest=0x3e85532, _Format="%c%c" | out: _Dest="0c") returned 2 [0127.911] sprintf (in: _Dest=0x3e85534, _Format="%c%c" | out: _Dest="e0") returned 2 [0127.911] sprintf (in: _Dest=0x3e85536, _Format="%c%c" | out: _Dest="fb") returned 2 [0127.911] RtlInitAnsiString (in: DestinationString=0xc72fe58, SourceString="c7f4ccc77c7856101a1e3eac7ef9556a4f78d43920704533eb0ce0fb" | out: DestinationString="c7f4ccc77c7856101a1e3eac7ef9556a4f78d43920704533eb0ce0fb") [0127.911] RtlAnsiStringToUnicodeString (in: DestinationString=0xc72fe50, SourceString="c7f4ccc77c7856101a1e3eac7ef9556a4f78d43920704533eb0ce0fb", AllocateDestinationString=1 | out: DestinationString="c7f4ccc77c7856101a1e3eac7ef9556a4f78d43920704533eb0ce0fb") returned 0x0 [0127.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1ab98 [0127.911] wcscat (in: _Dest=0x3053330, _Source="c7f4ccc77c7856" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\c7f4ccc77c7856") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\c7f4ccc77c7856" [0127.911] wcscat (in: _Dest=0x3053330, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\c7f4ccc77c7856.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\c7f4ccc77c7856.68814f" [0127.911] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\c7f4ccc77c7856.68814f", NtPathName=0xc72fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\c7f4ccc77c7856.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66858 [0127.911] NtSetInformationFile (FileHandle=0x1518, IoStatusBlock=0xc72fe50, FileInformation=0x3e66858, Length=0xb4, FileInformationClass=0xa) returned 0x0 [0128.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 [0128.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01718) returned 1 [0128.176] NtQueryInformationFile (in: FileHandle=0x1518, IoStatusBlock=0xc72fe20, FileInformation=0xc72fe28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc72fe20, FileInformation=0xc72fe28) returned 0x0 [0128.176] NtSetInformationFile (FileHandle=0x1518, IoStatusBlock=0xc72fe20, FileInformation=0xc72fe28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 [0128.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab98) returned 1 [0128.187] FlushFileBuffers (hFile=0x1518) returned 1 [0128.189] CloseHandle (hObject=0x1518) returned 1 [0128.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4fa0 [0128.190] wcscpy (in: _Dest=0x3df4fa0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0128.190] wcscat (in: _Dest=0x3df4fa0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" [0128.190] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\68814f-readme.txt")) returned 0x20 [0128.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 [0128.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32bd78) returned 1 Thread: id = 623 os_tid = 0x1180 [0124.564] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\eLf7plfk.ots" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\elf7plfk.ots")) returned 0x20 [0124.564] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\eLf7plfk.ots", dwFileAttributes=0x20) returned 1 [0128.875] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\eLf7plfk.ots" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\elf7plfk.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x151c [0128.877] GetFileSizeEx (in: hFile=0x151c, lpFileSize=0xb6ff974 | out: lpFileSize=0xb6ff974*=93950) returned 1 [0128.877] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x16efa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.877] ReadFile (in: hFile=0x151c, lpBuffer=0xb6ff950, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb6ff960, lpOverlapped=0x0 | out: lpBuffer=0xb6ff950*, lpNumberOfBytesRead=0xb6ff960*=0x4, lpOverlapped=0x0) returned 1 [0128.879] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0128.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0128.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0128.880] NtQuerySystemTime (in: CurrentTime=0xb6ff8e8 | out: CurrentTime=0xb6ff8e8*=132462177082776000) returned 0x0 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x6e23286b [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x6455683a [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x3e3a45b2 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x324303b1 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x366e0c6 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x67a0764b [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x14b4a905 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x48a9f313 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x49a8dd27 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x492ee371 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x38b32c63 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x2a7d94c4 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x2267bdb5 [0128.880] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x3e08eec3 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x319e0047 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x7781dd96 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0xed20fb9 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x70aeaae [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x2aa9ab7a [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x2d276303 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x43d60b54 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x35567900 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x28317e0a [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x672e9321 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x5ad26995 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0xc8d3744 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x5a84fc0d [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x25cd9b9 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0xa6407d6 [0128.881] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x42c431d7 [0128.882] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x5dfb414e [0128.882] RtlRandomEx (in: Seed=0xb6ff8e0 | out: Seed=0xb6ff8e0) returned 0x3eb9a763 [0128.896] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.896] ReadFile (in: hFile=0x151c, lpBuffer=0x7cc53c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6ff8e8, lpOverlapped=0x0 | out: lpBuffer=0x7cc53c0*, lpNumberOfBytesRead=0xb6ff8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0128.897] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0128.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0128.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0128.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0128.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0128.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cc8fc8 [0128.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0128.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0128.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0128.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0128.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0128.898] WriteFile (in: hFile=0x151c, lpBuffer=0x7cc8fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6ff8e8, lpOverlapped=0x0 | out: lpBuffer=0x7cc8fc8*, lpNumberOfBytesWritten=0xb6ff8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc8fc8) returned 1 [0129.619] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.619] ReadFile (in: hFile=0x151c, lpBuffer=0x7cc53c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6ff8e8, lpOverlapped=0x0 | out: lpBuffer=0x7cc53c0*, lpNumberOfBytesRead=0xb6ff8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.620] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55958 [0129.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0129.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0129.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0129.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cc8fc8 [0129.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0129.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0129.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0129.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0129.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55958) returned 1 [0129.621] WriteFile (in: hFile=0x151c, lpBuffer=0x7cc8fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6ff8e8, lpOverlapped=0x0 | out: lpBuffer=0x7cc8fc8*, lpNumberOfBytesWritten=0xb6ff8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0131.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc8fc8) returned 1 [0131.160] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x132fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.160] ReadFile (in: hFile=0x151c, lpBuffer=0x7cc53c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb6ff8e8, lpOverlapped=0x0 | out: lpBuffer=0x7cc53c0*, lpNumberOfBytesRead=0xb6ff8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0131.160] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x132fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08268 [0131.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0131.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0131.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0131.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cc8fc8 [0131.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0131.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0131.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0131.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0131.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08268) returned 1 [0131.161] WriteFile (in: hFile=0x151c, lpBuffer=0x7cc8fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb6ff8e8, lpOverlapped=0x0 | out: lpBuffer=0x7cc8fc8*, lpNumberOfBytesWritten=0xb6ff8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0131.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc8fc8) returned 1 [0131.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee1148 [0131.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0131.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86b48 [0131.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0131.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0131.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0131.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0131.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24e90) returned 1 [0131.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e0b2d0 [0131.901] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.901] WriteFile (in: hFile=0x151c, lpBuffer=0x3e0b2d0*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xb6ff968, lpOverlapped=0x0 | out: lpBuffer=0x3e0b2d0*, lpNumberOfBytesWritten=0xb6ff968*=0x14a, lpOverlapped=0x0) returned 1 [0134.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a241a0 [0134.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0134.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36f0 [0134.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36f0) returned 1 [0134.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e5c8 [0134.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36f0 [0134.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0134.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0134.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0134.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a241a0) returned 1 [0134.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x7a2ddc0 [0134.050] sprintf (in: _Dest=0x7a2ddc0, _Format="%c%c" | out: _Dest="98") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddc2, _Format="%c%c" | out: _Dest="70") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddc4, _Format="%c%c" | out: _Dest="f8") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddc6, _Format="%c%c" | out: _Dest="70") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddc8, _Format="%c%c" | out: _Dest="42") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddca, _Format="%c%c" | out: _Dest="15") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddcc, _Format="%c%c" | out: _Dest="34") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddce, _Format="%c%c" | out: _Dest="dc") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddd0, _Format="%c%c" | out: _Dest="60") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddd2, _Format="%c%c" | out: _Dest="dc") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddd4, _Format="%c%c" | out: _Dest="36") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddd6, _Format="%c%c" | out: _Dest="1f") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddd8, _Format="%c%c" | out: _Dest="83") returned 2 [0134.050] sprintf (in: _Dest=0x7a2ddda, _Format="%c%c" | out: _Dest="88") returned 2 [0134.051] sprintf (in: _Dest=0x7a2dddc, _Format="%c%c" | out: _Dest="89") returned 2 [0134.051] sprintf (in: _Dest=0x7a2ddde, _Format="%c%c" | out: _Dest="5e") returned 2 [0134.051] sprintf (in: _Dest=0x7a2dde0, _Format="%c%c" | out: _Dest="a5") returned 2 [0134.051] sprintf (in: _Dest=0x7a2dde2, _Format="%c%c" | out: _Dest="6a") returned 2 [0134.051] sprintf (in: _Dest=0x7a2dde4, _Format="%c%c" | out: _Dest="e1") returned 2 [0134.051] sprintf (in: _Dest=0x7a2dde6, _Format="%c%c" | out: _Dest="33") returned 2 [0134.051] sprintf (in: _Dest=0x7a2dde8, _Format="%c%c" | out: _Dest="91") returned 2 [0134.051] sprintf (in: _Dest=0x7a2ddea, _Format="%c%c" | out: _Dest="c6") returned 2 [0134.051] sprintf (in: _Dest=0x7a2ddec, _Format="%c%c" | out: _Dest="3b") returned 2 [0134.051] sprintf (in: _Dest=0x7a2ddee, _Format="%c%c" | out: _Dest="ee") returned 2 [0134.051] RtlInitAnsiString (in: DestinationString=0xb6ff8f0, SourceString="9870f870421534dc60dc361f8388895ea56ae13391c63bee" | out: DestinationString="9870f870421534dc60dc361f8388895ea56ae13391c63bee") [0134.051] RtlAnsiStringToUnicodeString (in: DestinationString=0xb6ff8e8, SourceString="9870f870421534dc60dc361f8388895ea56ae13391c63bee", AllocateDestinationString=1 | out: DestinationString="9870f870421534dc60dc361f8388895ea56ae13391c63bee") returned 0x0 [0134.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23ca0 [0134.051] wcscat (in: _Dest=0x30531e0, _Source="9870f8704215" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\9870f8704215") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\9870f8704215" [0134.051] wcscat (in: _Dest=0x30531e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\9870f8704215.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\9870f8704215.68814f" [0134.051] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\9870f8704215.68814f", NtPathName=0xb6ff8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\9870f8704215.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6e70 [0134.052] NtSetInformationFile (FileHandle=0x151c, IoStatusBlock=0xb6ff8e8, FileInformation=0x2ff6e70, Length=0xb0, FileInformationClass=0xa) returned 0x0 [0134.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 [0134.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a41968) returned 1 [0134.056] NtQueryInformationFile (in: FileHandle=0x151c, IoStatusBlock=0xb6ff8b8, FileInformation=0xb6ff8c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb6ff8b8, FileInformation=0xb6ff8c0) returned 0x0 [0134.057] NtSetInformationFile (FileHandle=0x151c, IoStatusBlock=0xb6ff8b8, FileInformation=0xb6ff8c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 [0134.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ca0) returned 1 [0134.058] FlushFileBuffers (hFile=0x151c) returned 1 [0135.602] CloseHandle (hObject=0x151c) returned 1 [0135.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4aa0 [0135.608] wcscpy (in: _Dest=0x3df4aa0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0135.608] wcscat (in: _Dest=0x3df4aa0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" [0135.608] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\68814f-readme.txt")) returned 0x20 [0135.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 [0135.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6bf8) returned 1 Thread: id = 624 os_tid = 0x1184 [0124.565] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\JP5qtAGSdAZINa.pdf" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\jp5qtagsdazina.pdf")) returned 0x20 [0124.565] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\JP5qtAGSdAZINa.pdf", dwFileAttributes=0x20) returned 1 [0127.301] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\JP5qtAGSdAZINa.pdf" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\jp5qtagsdazina.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1520 [0127.301] GetFileSizeEx (in: hFile=0x1520, lpFileSize=0x7edf7f4 | out: lpFileSize=0x7edf7f4*=48253) returned 1 [0127.301] SetFilePointerEx (in: hFile=0x1520, liDistanceToMove=0xbc79, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.301] ReadFile (in: hFile=0x1520, lpBuffer=0x7edf7d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7edf7e0, lpOverlapped=0x0 | out: lpBuffer=0x7edf7d0*, lpNumberOfBytesRead=0x7edf7e0*=0x4, lpOverlapped=0x0) returned 1 [0127.303] SetFilePointerEx (in: hFile=0x1520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e00 [0127.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0127.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c48 [0127.303] NtQuerySystemTime (in: CurrentTime=0x7edf768 | out: CurrentTime=0x7edf768*=132462177066864000) returned 0x0 [0127.303] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x78ec52a1 [0127.303] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x6107a2c [0127.303] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x11cfb9af [0127.303] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x85f14c6 [0127.303] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x1d7ea938 [0127.303] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x79172b61 [0127.303] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x15c0f053 [0127.303] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0xc976d86 [0127.303] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x5b1957ea [0127.303] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x133f7024 [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x7c993215 [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x2412bec5 [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x16825598 [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x23cf6166 [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x20ba3710 [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0xe4b2b62 [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x63163351 [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x4d4931bd [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x3314d9fc [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x631a972a [0127.304] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0xf2f4cb5 [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x73ddc917 [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x2663e76d [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x729658f [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x3ceb30f5 [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x6c6bc4ad [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x6888ac04 [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x7e02b376 [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x2529307a [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x7b6b2692 [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x127439f0 [0127.320] RtlRandomEx (in: Seed=0x7edf760 | out: Seed=0x7edf760) returned 0x37a36d02 [0127.333] SetFilePointerEx (in: hFile=0x1520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.333] ReadFile (in: hFile=0x1520, lpBuffer=0x7b8fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7edf768, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesRead=0x7edf768*=0x3c00, lpOverlapped=0x0) returned 1 [0127.334] SetFilePointerEx (in: hFile=0x1520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84e88 [0127.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0127.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e00 [0127.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e00) returned 1 [0127.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b93778 [0127.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e00 [0127.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c48 [0127.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c48) returned 1 [0127.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0127.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84e88) returned 1 [0127.335] WriteFile (in: hFile=0x1520, lpBuffer=0x7b93778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7edf768, lpOverlapped=0x0 | out: lpBuffer=0x7b93778*, lpNumberOfBytesWritten=0x7edf768*=0x3c00, lpOverlapped=0x0) returned 1 [0127.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0127.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0127.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfa90 [0127.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3920) returned 1 [0127.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcfc10 [0127.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0127.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3948 [0127.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3948) returned 1 [0127.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0127.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0127.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d54dd8 [0127.767] SetFilePointerEx (in: hFile=0x1520, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.767] WriteFile (in: hFile=0x1520, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x7edf7e8, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0x7edf7e8*=0x116, lpOverlapped=0x0) returned 1 [0127.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56498 [0127.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4370 [0127.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4370) returned 1 [0127.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e867e8 [0127.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4370 [0127.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0127.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0127.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56498) returned 1 [0127.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3e14a90 [0127.859] sprintf (in: _Dest=0x3e14a90, _Format="%c%c" | out: _Dest="7a") returned 2 [0127.859] sprintf (in: _Dest=0x3e14a92, _Format="%c%c" | out: _Dest="da") returned 2 [0127.859] sprintf (in: _Dest=0x3e14a94, _Format="%c%c" | out: _Dest="2c") returned 2 [0127.859] sprintf (in: _Dest=0x3e14a96, _Format="%c%c" | out: _Dest="f9") returned 2 [0127.859] sprintf (in: _Dest=0x3e14a98, _Format="%c%c" | out: _Dest="42") returned 2 [0127.860] sprintf (in: _Dest=0x3e14a9a, _Format="%c%c" | out: _Dest="5a") returned 2 [0127.860] sprintf (in: _Dest=0x3e14a9c, _Format="%c%c" | out: _Dest="4f") returned 2 [0127.860] sprintf (in: _Dest=0x3e14a9e, _Format="%c%c" | out: _Dest="7b") returned 2 [0127.860] sprintf (in: _Dest=0x3e14aa0, _Format="%c%c" | out: _Dest="2d") returned 2 [0127.860] sprintf (in: _Dest=0x3e14aa2, _Format="%c%c" | out: _Dest="2d") returned 2 [0127.860] sprintf (in: _Dest=0x3e14aa4, _Format="%c%c" | out: _Dest="48") returned 2 [0127.860] sprintf (in: _Dest=0x3e14aa6, _Format="%c%c" | out: _Dest="e7") returned 2 [0127.860] sprintf (in: _Dest=0x3e14aa8, _Format="%c%c" | out: _Dest="43") returned 2 [0127.860] sprintf (in: _Dest=0x3e14aaa, _Format="%c%c" | out: _Dest="8e") returned 2 [0127.860] sprintf (in: _Dest=0x3e14aac, _Format="%c%c" | out: _Dest="63") returned 2 [0127.860] sprintf (in: _Dest=0x3e14aae, _Format="%c%c" | out: _Dest="f8") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ab0, _Format="%c%c" | out: _Dest="fa") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ab2, _Format="%c%c" | out: _Dest="a0") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ab4, _Format="%c%c" | out: _Dest="70") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ab6, _Format="%c%c" | out: _Dest="e7") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ab8, _Format="%c%c" | out: _Dest="d2") returned 2 [0127.860] sprintf (in: _Dest=0x3e14aba, _Format="%c%c" | out: _Dest="52") returned 2 [0127.860] sprintf (in: _Dest=0x3e14abc, _Format="%c%c" | out: _Dest="d5") returned 2 [0127.860] sprintf (in: _Dest=0x3e14abe, _Format="%c%c" | out: _Dest="3e") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ac0, _Format="%c%c" | out: _Dest="84") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ac2, _Format="%c%c" | out: _Dest="80") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ac4, _Format="%c%c" | out: _Dest="78") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ac6, _Format="%c%c" | out: _Dest="da") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ac8, _Format="%c%c" | out: _Dest="8f") returned 2 [0127.860] sprintf (in: _Dest=0x3e14aca, _Format="%c%c" | out: _Dest="20") returned 2 [0127.860] sprintf (in: _Dest=0x3e14acc, _Format="%c%c" | out: _Dest="52") returned 2 [0127.860] sprintf (in: _Dest=0x3e14ace, _Format="%c%c" | out: _Dest="fd") returned 2 [0127.861] sprintf (in: _Dest=0x3e14ad0, _Format="%c%c" | out: _Dest="b1") returned 2 [0127.861] sprintf (in: _Dest=0x3e14ad2, _Format="%c%c" | out: _Dest="d7") returned 2 [0127.861] sprintf (in: _Dest=0x3e14ad4, _Format="%c%c" | out: _Dest="88") returned 2 [0127.861] sprintf (in: _Dest=0x3e14ad6, _Format="%c%c" | out: _Dest="5a") returned 2 [0127.861] RtlInitAnsiString (in: DestinationString=0x7edf770, SourceString="7ada2cf9425a4f7b2d2d48e7438e63f8faa070e7d252d53e848078da8f2052fdb1d7885a" | out: DestinationString="7ada2cf9425a4f7b2d2d48e7438e63f8faa070e7d252d53e848078da8f2052fdb1d7885a") [0127.861] RtlAnsiStringToUnicodeString (in: DestinationString=0x7edf768, SourceString="7ada2cf9425a4f7b2d2d48e7438e63f8faa070e7d252d53e848078da8f2052fdb1d7885a", AllocateDestinationString=1 | out: DestinationString="7ada2cf9425a4f7b2d2d48e7438e63f8faa070e7d252d53e848078da8f2052fdb1d7885a") returned 0x0 [0127.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5fe0 [0127.861] wcscat (in: _Dest=0x35c638, _Source="7ada2cf9425a4f7b2d" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7ada2cf9425a4f7b2d") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7ada2cf9425a4f7b2d" [0127.861] wcscat (in: _Dest=0x35c638, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7ada2cf9425a4f7b2d.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7ada2cf9425a4f7b2d.68814f" [0127.861] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7ada2cf9425a4f7b2d.68814f", NtPathName=0x7edf760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\7ada2cf9425a4f7b2d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a2b0 [0127.861] NtSetInformationFile (FileHandle=0x1520, IoStatusBlock=0x7edf768, FileInformation=0x3e3a2b0, Length=0xbc, FileInformationClass=0xa) returned 0x0 [0127.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a2b0) returned 1 [0127.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04460) returned 1 [0127.962] NtQueryInformationFile (in: FileHandle=0x1520, IoStatusBlock=0x7edf738, FileInformation=0x7edf740, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7edf738, FileInformation=0x7edf740) returned 0x0 [0127.962] NtSetInformationFile (FileHandle=0x1520, IoStatusBlock=0x7edf738, FileInformation=0x7edf740, Length=0x28, FileInformationClass=0x4) returned 0x0 [0127.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c638) returned 1 [0127.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 [0127.973] FlushFileBuffers (hFile=0x1520) returned 1 [0127.976] CloseHandle (hObject=0x1520) returned 1 [0127.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df57c0 [0127.999] wcscpy (in: _Dest=0x3df57c0, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0127.999] wcscat (in: _Dest=0x3df57c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" [0127.999] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\68814f-readme.txt")) returned 0xffffffff [0128.000] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0128.198] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7edf77c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x7edf77c*=0x8b9, lpOverlapped=0x0) returned 1 [0128.200] CloseHandle (hObject=0x1518) returned 1 [0128.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 [0128.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5ea0) returned 1 Thread: id = 625 os_tid = 0x1188 [0124.566] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\qQYf1sP1RQE8GHNhye6H.rtf" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\qqyf1sp1rqe8ghnhye6h.rtf")) returned 0x20 [0124.566] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\qQYf1sP1RQE8GHNhye6H.rtf", dwFileAttributes=0x20) returned 1 [0127.335] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\qQYf1sP1RQE8GHNhye6H.rtf" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\qqyf1sp1rqe8ghnhye6h.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1524 [0127.336] GetFileSizeEx (in: hFile=0x1524, lpFileSize=0xb1bf84c | out: lpFileSize=0xb1bf84c*=58559) returned 1 [0127.336] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0xe4bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.336] ReadFile (in: hFile=0x1524, lpBuffer=0xb1bf828, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb1bf838, lpOverlapped=0x0 | out: lpBuffer=0xb1bf828*, lpNumberOfBytesRead=0xb1bf838*=0x4, lpOverlapped=0x0) returned 1 [0127.337] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c48 [0127.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0127.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.338] NtQuerySystemTime (in: CurrentTime=0xb1bf7c0 | out: CurrentTime=0xb1bf7c0*=132462177067332000) returned 0x0 [0127.338] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x24b2863d [0127.338] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x5f8b64f0 [0127.338] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x67acf568 [0127.338] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x73ebee54 [0127.338] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x362b9a4c [0127.338] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x339cd5fc [0127.338] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x3f993b6b [0127.338] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x5eac7bec [0127.338] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x12e9f4ab [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x56cab3fc [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x49ee77de [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x30ef2664 [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x2b7ee317 [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x626184b4 [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x32702a24 [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x7cf45894 [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x6c0f860e [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x7019ac97 [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x7094bbfb [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x48986956 [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x3e59b5e0 [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x3bc19a28 [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x78c179e1 [0127.339] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x43a5aec5 [0127.340] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x599bf093 [0127.340] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x594600ee [0127.340] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x536816c6 [0127.340] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x4ee4aba2 [0127.340] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x2cf2a2e9 [0127.340] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0xfbcd767 [0127.340] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x6d4ebf60 [0127.340] RtlRandomEx (in: Seed=0xb1bf7b8 | out: Seed=0xb1bf7b8) returned 0x4c27ce9e [0127.350] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.350] ReadFile (in: hFile=0x1524, lpBuffer=0x7b88360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb1bf7c0, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesRead=0xb1bf7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0127.350] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84e88 [0127.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0127.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c48 [0127.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c48) returned 1 [0127.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b8bf68 [0127.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c48 [0127.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0127.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0127.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84e88) returned 1 [0127.352] WriteFile (in: hFile=0x1524, lpBuffer=0x7b8bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb1bf7c0, lpOverlapped=0x0 | out: lpBuffer=0x7b8bf68*, lpNumberOfBytesWritten=0xb1bf7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0127.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0127.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0127.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e07800 [0127.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3948) returned 1 [0127.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e48be8 [0127.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3948 [0127.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0127.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0127.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0127.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08190) returned 1 [0127.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9a60 [0127.770] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.770] WriteFile (in: hFile=0x1524, lpBuffer=0x3ec9a60*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xb1bf840, lpOverlapped=0x0 | out: lpBuffer=0x3ec9a60*, lpNumberOfBytesWritten=0xb1bf840*=0x122, lpOverlapped=0x0) returned 1 [0127.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56498 [0127.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0127.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0127.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0127.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79800 [0127.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0127.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0127.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0127.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0127.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56498) returned 1 [0127.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a23990 [0127.864] sprintf (in: _Dest=0x7a23990, _Format="%c%c" | out: _Dest="48") returned 2 [0127.865] sprintf (in: _Dest=0x7a23992, _Format="%c%c" | out: _Dest="42") returned 2 [0127.865] sprintf (in: _Dest=0x7a23994, _Format="%c%c" | out: _Dest="c4") returned 2 [0127.865] sprintf (in: _Dest=0x7a23996, _Format="%c%c" | out: _Dest="5e") returned 2 [0127.865] sprintf (in: _Dest=0x7a23998, _Format="%c%c" | out: _Dest="cb") returned 2 [0127.865] sprintf (in: _Dest=0x7a2399a, _Format="%c%c" | out: _Dest="65") returned 2 [0127.865] sprintf (in: _Dest=0x7a2399c, _Format="%c%c" | out: _Dest="fb") returned 2 [0127.865] sprintf (in: _Dest=0x7a2399e, _Format="%c%c" | out: _Dest="52") returned 2 [0127.865] sprintf (in: _Dest=0x7a239a0, _Format="%c%c" | out: _Dest="05") returned 2 [0127.865] sprintf (in: _Dest=0x7a239a2, _Format="%c%c" | out: _Dest="48") returned 2 [0127.865] sprintf (in: _Dest=0x7a239a4, _Format="%c%c" | out: _Dest="20") returned 2 [0127.865] sprintf (in: _Dest=0x7a239a6, _Format="%c%c" | out: _Dest="94") returned 2 [0127.865] sprintf (in: _Dest=0x7a239a8, _Format="%c%c" | out: _Dest="1e") returned 2 [0127.865] sprintf (in: _Dest=0x7a239aa, _Format="%c%c" | out: _Dest="9d") returned 2 [0127.865] sprintf (in: _Dest=0x7a239ac, _Format="%c%c" | out: _Dest="6e") returned 2 [0127.865] sprintf (in: _Dest=0x7a239ae, _Format="%c%c" | out: _Dest="d8") returned 2 [0127.865] sprintf (in: _Dest=0x7a239b0, _Format="%c%c" | out: _Dest="72") returned 2 [0127.865] sprintf (in: _Dest=0x7a239b2, _Format="%c%c" | out: _Dest="8e") returned 2 [0127.865] sprintf (in: _Dest=0x7a239b4, _Format="%c%c" | out: _Dest="07") returned 2 [0127.865] sprintf (in: _Dest=0x7a239b6, _Format="%c%c" | out: _Dest="dc") returned 2 [0127.865] sprintf (in: _Dest=0x7a239b8, _Format="%c%c" | out: _Dest="50") returned 2 [0127.865] sprintf (in: _Dest=0x7a239ba, _Format="%c%c" | out: _Dest="b7") returned 2 [0127.865] sprintf (in: _Dest=0x7a239bc, _Format="%c%c" | out: _Dest="2e") returned 2 [0127.869] sprintf (in: _Dest=0x7a239be, _Format="%c%c" | out: _Dest="04") returned 2 [0127.869] sprintf (in: _Dest=0x7a239c0, _Format="%c%c" | out: _Dest="58") returned 2 [0127.869] sprintf (in: _Dest=0x7a239c2, _Format="%c%c" | out: _Dest="3b") returned 2 [0127.870] sprintf (in: _Dest=0x7a239c4, _Format="%c%c" | out: _Dest="fd") returned 2 [0127.870] sprintf (in: _Dest=0x7a239c6, _Format="%c%c" | out: _Dest="31") returned 2 [0127.870] sprintf (in: _Dest=0x7a239c8, _Format="%c%c" | out: _Dest="98") returned 2 [0127.870] sprintf (in: _Dest=0x7a239ca, _Format="%c%c" | out: _Dest="30") returned 2 [0127.870] sprintf (in: _Dest=0x7a239cc, _Format="%c%c" | out: _Dest="8d") returned 2 [0127.870] sprintf (in: _Dest=0x7a239ce, _Format="%c%c" | out: _Dest="44") returned 2 [0127.870] sprintf (in: _Dest=0x7a239d0, _Format="%c%c" | out: _Dest="2c") returned 2 [0127.870] sprintf (in: _Dest=0x7a239d2, _Format="%c%c" | out: _Dest="47") returned 2 [0127.870] sprintf (in: _Dest=0x7a239d4, _Format="%c%c" | out: _Dest="6a") returned 2 [0127.870] sprintf (in: _Dest=0x7a239d6, _Format="%c%c" | out: _Dest="df") returned 2 [0127.870] sprintf (in: _Dest=0x7a239d8, _Format="%c%c" | out: _Dest="0d") returned 2 [0127.870] sprintf (in: _Dest=0x7a239da, _Format="%c%c" | out: _Dest="06") returned 2 [0127.870] sprintf (in: _Dest=0x7a239dc, _Format="%c%c" | out: _Dest="17") returned 2 [0127.870] sprintf (in: _Dest=0x7a239de, _Format="%c%c" | out: _Dest="59") returned 2 [0127.870] sprintf (in: _Dest=0x7a239e0, _Format="%c%c" | out: _Dest="fb") returned 2 [0127.870] sprintf (in: _Dest=0x7a239e2, _Format="%c%c" | out: _Dest="b0") returned 2 [0127.870] sprintf (in: _Dest=0x7a239e4, _Format="%c%c" | out: _Dest="19") returned 2 [0127.870] sprintf (in: _Dest=0x7a239e6, _Format="%c%c" | out: _Dest="3e") returned 2 [0127.870] sprintf (in: _Dest=0x7a239e8, _Format="%c%c" | out: _Dest="26") returned 2 [0127.870] sprintf (in: _Dest=0x7a239ea, _Format="%c%c" | out: _Dest="f6") returned 2 [0127.870] sprintf (in: _Dest=0x7a239ec, _Format="%c%c" | out: _Dest="cb") returned 2 [0127.871] sprintf (in: _Dest=0x7a239ee, _Format="%c%c" | out: _Dest="00") returned 2 [0127.871] RtlInitAnsiString (in: DestinationString=0xb1bf7c8, SourceString="4842c45ecb65fb52054820941e9d6ed8728e07dc50b72e04583bfd3198308d442c476adf0d061759fbb0193e26f6cb00" | out: DestinationString="4842c45ecb65fb52054820941e9d6ed8728e07dc50b72e04583bfd3198308d442c476adf0d061759fbb0193e26f6cb00") [0127.871] RtlAnsiStringToUnicodeString (in: DestinationString=0xb1bf7c0, SourceString="4842c45ecb65fb52054820941e9d6ed8728e07dc50b72e04583bfd3198308d442c476adf0d061759fbb0193e26f6cb00", AllocateDestinationString=1 | out: DestinationString="4842c45ecb65fb52054820941e9d6ed8728e07dc50b72e04583bfd3198308d442c476adf0d061759fbb0193e26f6cb00") returned 0x0 [0127.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3036d70 [0127.871] wcscat (in: _Dest=0x3e663d8, _Source="4842c45ecb65fb5205482094" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\4842c45ecb65fb5205482094") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\4842c45ecb65fb5205482094" [0127.871] wcscat (in: _Dest=0x3e663d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\4842c45ecb65fb5205482094.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\4842c45ecb65fb5205482094.68814f" [0127.871] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\4842c45ecb65fb5205482094.68814f", NtPathName=0xb1bf7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\4842c45ecb65fb5205482094.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x30352a0 [0127.871] NtSetInformationFile (FileHandle=0x1524, IoStatusBlock=0xb1bf7c0, FileInformation=0x30352a0, Length=0xc8, FileInformationClass=0xa) returned 0x0 [0128.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30352a0) returned 1 [0128.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40900) returned 1 [0128.165] NtQueryInformationFile (in: FileHandle=0x1524, IoStatusBlock=0xb1bf790, FileInformation=0xb1bf798, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb1bf790, FileInformation=0xb1bf798) returned 0x0 [0128.165] NtSetInformationFile (FileHandle=0x1524, IoStatusBlock=0xb1bf790, FileInformation=0xb1bf798, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e663d8) returned 1 [0128.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036d70) returned 1 [0128.169] FlushFileBuffers (hFile=0x1524) returned 1 [0128.172] CloseHandle (hObject=0x1524) returned 1 [0128.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df6120 [0128.173] wcscpy (in: _Dest=0x3df6120, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0128.173] wcscat (in: _Dest=0x3df6120, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" [0128.173] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\68814f-readme.txt")) returned 0x20 [0128.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6120) returned 1 [0128.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 626 os_tid = 0x118c [0124.566] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\vmvtjdsqy.bmp")) returned 0x20 [0124.567] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp", dwFileAttributes=0x20) returned 1 [0127.352] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\vmvtjdsqy.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1528 [0127.352] GetFileSizeEx (in: hFile=0x1528, lpFileSize=0xbe9fa54 | out: lpFileSize=0xbe9fa54*=8264) returned 1 [0127.352] SetFilePointerEx (in: hFile=0x1528, liDistanceToMove=0x2044, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.352] ReadFile (in: hFile=0x1528, lpBuffer=0xbe9fa30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbe9fa40, lpOverlapped=0x0 | out: lpBuffer=0xbe9fa30*, lpNumberOfBytesRead=0xbe9fa40*=0x4, lpOverlapped=0x0) returned 1 [0127.354] SetFilePointerEx (in: hFile=0x1528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0127.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca710 [0127.354] NtQuerySystemTime (in: CurrentTime=0xbe9f9c8 | out: CurrentTime=0xbe9f9c8*=132462177067488000) returned 0x0 [0127.354] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0xb50be70 [0127.354] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x79c28e61 [0127.354] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x5277496e [0127.354] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x607e7433 [0127.354] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x4a3bf198 [0127.354] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x21071f33 [0127.354] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x2b8ccbbb [0127.354] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x36bfa1da [0127.354] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x47f7bca7 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x4152ebf2 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x36e69ca2 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x4f92d5e8 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x5cf947cc [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x6fa6a1b3 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x796cdce1 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x695089d6 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x5ef8f404 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x371bd420 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x66e892b8 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x7114081f [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x6c9cd154 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x548a90a2 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x3e623546 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x499cc2b4 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x47d888c4 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x8215ec2 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x248d9c0a [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x480398f6 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x14c748a6 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x7f623060 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x54a6dd58 [0127.355] RtlRandomEx (in: Seed=0xbe9f9c0 | out: Seed=0xbe9f9c0) returned 0x6fbf3e6d [0127.366] ReadFile (in: hFile=0x1528, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x2048, lpNumberOfBytesRead=0xbe9f9bc, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xbe9f9bc*=0x2048, lpOverlapped=0x0) returned 1 [0127.366] SetFilePointerEx (in: hFile=0x1528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.366] WriteFile (in: hFile=0x1528, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x2048, lpNumberOfBytesWritten=0xbe9f9c0, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xbe9f9c0*=0x2048, lpOverlapped=0x0) returned 1 [0127.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0127.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0127.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0127.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0127.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0127.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0127.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84e88) returned 1 [0127.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85d68 [0127.772] SetFilePointerEx (in: hFile=0x1528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.772] WriteFile (in: hFile=0x1528, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbe9fa48, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xbe9fa48*=0x10c, lpOverlapped=0x0) returned 1 [0127.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0127.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86158) returned 1 [0127.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0127.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85d68) returned 1 [0127.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0127.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0127.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca990) returned 1 [0127.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0127.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053678 [0127.874] wcscpy (in: _Dest=0x3053678, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp" [0127.874] wcscat (in: _Dest=0x3053678, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp.68814f" [0127.874] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp.68814f", NtPathName=0xbe9f9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\vmvTjDsQy.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66558 [0127.874] NtSetInformationFile (FileHandle=0x1528, IoStatusBlock=0xbe9f9c8, FileInformation=0x3e66558, Length=0xb2, FileInformationClass=0xa) returned 0x0 [0128.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 [0128.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01d90) returned 1 [0128.167] NtQueryInformationFile (in: FileHandle=0x1528, IoStatusBlock=0xbe9f998, FileInformation=0xbe9f9a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbe9f998, FileInformation=0xbe9f9a0) returned 0x0 [0128.167] NtSetInformationFile (FileHandle=0x1528, IoStatusBlock=0xbe9f998, FileInformation=0xbe9f9a0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053678) returned 1 [0128.174] FlushFileBuffers (hFile=0x1528) returned 1 [0128.177] CloseHandle (hObject=0x1528) returned 1 [0128.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4d20 [0128.182] wcscpy (in: _Dest=0x3df4d20, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0128.182] wcscat (in: _Dest=0x3df4d20, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" [0128.182] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\68814f-readme.txt")) returned 0x20 [0128.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 [0128.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6900) returned 1 Thread: id = 627 os_tid = 0x1190 [0124.567] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\zzbuv_mkgx.bmp")) returned 0x20 [0124.567] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp", dwFileAttributes=0x20) returned 1 [0127.367] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\zzbuv_mkgx.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x152c [0127.367] GetFileSizeEx (in: hFile=0x152c, lpFileSize=0xbacf8d4 | out: lpFileSize=0xbacf8d4*=9614) returned 1 [0127.367] SetFilePointerEx (in: hFile=0x152c, liDistanceToMove=0x258a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.367] ReadFile (in: hFile=0x152c, lpBuffer=0xbacf8b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbacf8c0, lpOverlapped=0x0 | out: lpBuffer=0xbacf8b0*, lpNumberOfBytesRead=0xbacf8c0*=0x4, lpOverlapped=0x0) returned 1 [0127.369] SetFilePointerEx (in: hFile=0x152c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0127.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca710 [0127.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca120 [0127.369] NtQuerySystemTime (in: CurrentTime=0xbacf848 | out: CurrentTime=0xbacf848*=132462177067644000) returned 0x0 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x7d712ee1 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x210c6df [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x4832e6d6 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x43a535ea [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x76bf50e1 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x268c4fe1 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x1670ea51 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x251d123b [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x77dd46d5 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x400600d3 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x1565aa38 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x20d586ca [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x614c1e3b [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x17260c7a [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x532d8b07 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x4298fa44 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x231ace3b [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x81d7f99 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x5eebfeb8 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x6912dde1 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x786e2647 [0127.369] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x613f9edd [0127.370] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x23891261 [0127.370] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x5cb4ed [0127.370] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x426881e9 [0127.370] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x4a2261ec [0127.370] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x7ac5a257 [0127.370] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x31e367cb [0127.370] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0xc1846e9 [0127.370] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x6da7561e [0127.370] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x74bfaaf1 [0127.370] RtlRandomEx (in: Seed=0xbacf840 | out: Seed=0xbacf840) returned 0x1e31dd16 [0127.381] ReadFile (in: hFile=0x152c, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0x258e, lpNumberOfBytesRead=0xbacf83c, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0xbacf83c*=0x258e, lpOverlapped=0x0) returned 1 [0127.382] SetFilePointerEx (in: hFile=0x152c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.382] WriteFile (in: hFile=0x152c, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0x258e, lpNumberOfBytesWritten=0xbacf840, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0xbacf840*=0x258e, lpOverlapped=0x0) returned 1 [0127.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0127.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0127.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3998) returned 1 [0127.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0127.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0127.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0127.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0127.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79250 [0127.775] SetFilePointerEx (in: hFile=0x152c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.775] WriteFile (in: hFile=0x152c, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xbacf8c8, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xbacf8c8*=0x10e, lpOverlapped=0x0) returned 1 [0127.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deaf00) returned 1 [0127.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e799c0) returned 1 [0127.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3998) returned 1 [0127.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79250) returned 1 [0127.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0127.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca710) returned 1 [0127.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3178) returned 1 [0127.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30d8) returned 1 [0127.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3052f40 [0127.877] wcscpy (in: _Dest=0x3052f40, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp" [0127.877] wcscat (in: _Dest=0x3052f40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp.68814f" [0127.877] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp.68814f", NtPathName=0xbacf840, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\zZBUv_mKgX.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66618 [0127.877] NtSetInformationFile (FileHandle=0x152c, IoStatusBlock=0xbacf848, FileInformation=0x3e66618, Length=0xb4, FileInformationClass=0xa) returned 0x0 [0128.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66618) returned 1 [0128.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e012c8) returned 1 [0128.171] NtQueryInformationFile (in: FileHandle=0x152c, IoStatusBlock=0xbacf818, FileInformation=0xbacf820, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbacf818, FileInformation=0xbacf820) returned 0x0 [0128.171] NtSetInformationFile (FileHandle=0x152c, IoStatusBlock=0xbacf818, FileInformation=0xbacf820, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052f40) returned 1 [0128.183] FlushFileBuffers (hFile=0x152c) returned 1 [0128.184] CloseHandle (hObject=0x152c) returned 1 [0128.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5540 [0128.186] wcscpy (in: _Dest=0x3df5540, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\" [0128.186] wcscat (in: _Dest=0x3df5540, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" [0128.186] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\WkVWlOdO3dW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\wkvwlodo3dw\\68814f-readme.txt")) returned 0x20 [0128.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5540) returned 1 [0128.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5ee8) returned 1 Thread: id = 628 os_tid = 0x1194 [0124.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api")) returned 0x20 [0125.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api", dwFileAttributes=0x20) returned 0 [0125.235] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.374] GetLastError () returned 0x5 [0126.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api", dwFileAttributes=0x20) returned 0 [0126.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 Thread: id = 629 os_tid = 0x1198 [0124.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba3b8 [0124.575] wcscpy (in: _Dest=0x3eba3b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0124.575] wcscat (in: _Dest=0x3eba3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\" [0124.575] wcscat (in: _Dest=0x3eba3b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*" [0124.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0124.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe138d9a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1425f20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067140 [0125.836] wcscmp (_String1=".", _String2=".") returned 0 [0125.836] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe138d9a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1425f20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.836] wcscmp (_String1="..", _String2=".") returned 1 [0125.836] wcscmp (_String1="..", _String2="..") returned 0 [0125.837] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobepdf.xdc", cAlternateFileName="")) returned 1 [0125.837] wcscmp (_String1="adobepdf.xdc", _String2=".") returned 1 [0125.837] wcscmp (_String1="adobepdf.xdc", _String2="..") returned 1 [0125.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4e60 [0125.837] wcscpy (in: _Dest=0x3df4e60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0125.837] wcscat (in: _Dest=0x3df4e60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\" [0125.837] wcscat (in: _Dest=0x3df4e60, _Source="adobepdf.xdc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" [0132.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc [0132.391] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 1 [0132.391] wcscmp (_String1="PMP", _String2=".") returned 1 [0132.391] wcscmp (_String1="PMP", _String2="..") returned 1 [0132.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0132.392] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm" [0132.392] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\" [0132.392] wcscat (in: _Dest=0x3eba220, _Source="PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0132.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0132.393] FindNextFileW (in: hFindFile=0x3067140, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0 [0132.393] FindClose (in: hFindFile=0x3067140 | out: hFindFile=0x3067140) returned 1 [0132.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0132.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 [0132.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 Thread: id = 630 os_tid = 0x119c [0124.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api")) returned 0x20 [0126.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api", dwFileAttributes=0x20) returned 0 [0126.372] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.372] GetLastError () returned 0x5 [0126.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api", dwFileAttributes=0x20) returned 0 [0126.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 631 os_tid = 0x11a0 [0124.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc")) returned 0x20 [0126.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc", dwFileAttributes=0x20) returned 0 [0126.427] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.427] GetLastError () returned 0x5 [0126.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc", dwFileAttributes=0x20) returned 0 [0126.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 632 os_tid = 0x11a4 [0124.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0124.586] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" [0124.587] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\" [0124.587] wcscat (in: _Dest=0x3d44d50, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*" [0124.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0124.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf9d0 [0126.436] wcscmp (_String1=".", _String2=".") returned 0 [0126.436] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.436] wcscmp (_String1="..", _String2=".") returned 1 [0126.436] wcscmp (_String1="..", _String2="..") returned 0 [0126.436] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1 [0126.436] wcscmp (_String1="Stamps", _String2=".") returned 1 [0126.436] wcscmp (_String1="Stamps", _String2="..") returned 1 [0126.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6018 [0126.437] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations" [0126.437] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\" [0126.437] wcscat (in: _Dest=0x3eb6018, _Source="Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0129.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0129.219] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0 [0129.219] FindClose (in: hFindFile=0x3dcf9d0 | out: hFindFile=0x3dcf9d0) returned 1 [0129.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0129.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0129.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 633 os_tid = 0x11a8 [0124.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api")) returned 0x20 [0126.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api", dwFileAttributes=0x20) returned 0 [0126.421] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.422] GetLastError () returned 0x5 [0126.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api", dwFileAttributes=0x20) returned 0 [0126.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 634 os_tid = 0x11ac [0124.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api")) returned 0x20 [0126.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api", dwFileAttributes=0x20) returned 0 [0126.410] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.410] GetLastError () returned 0x5 [0126.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api", dwFileAttributes=0x20) returned 0 [0126.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 635 os_tid = 0x11b0 [0124.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api")) returned 0x20 [0126.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api", dwFileAttributes=0x20) returned 0 [0126.405] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.405] GetLastError () returned 0x5 [0126.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api", dwFileAttributes=0x20) returned 0 [0126.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 636 os_tid = 0x11b4 [0124.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api")) returned 0x20 [0126.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api", dwFileAttributes=0x20) returned 0 [0126.402] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.403] GetLastError () returned 0x5 [0126.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api", dwFileAttributes=0x20) returned 0 [0126.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5cf0) returned 1 Thread: id = 637 os_tid = 0x11b8 [0124.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api")) returned 0x20 [0126.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api", dwFileAttributes=0x20) returned 0 [0126.400] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.400] GetLastError () returned 0x5 [0126.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api", dwFileAttributes=0x20) returned 0 [0126.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062a10) returned 1 Thread: id = 638 os_tid = 0x11bc [0124.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api")) returned 0x20 [0126.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api", dwFileAttributes=0x20) returned 0 [0126.397] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.397] GetLastError () returned 0x5 [0126.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api", dwFileAttributes=0x20) returned 0 [0126.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bba8) returned 1 Thread: id = 639 os_tid = 0x11c0 [0124.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api")) returned 0x20 [0126.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api", dwFileAttributes=0x20) returned 0 [0126.391] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.392] GetLastError () returned 0x5 [0126.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api", dwFileAttributes=0x20) returned 0 [0126.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 Thread: id = 640 os_tid = 0x11c4 [0124.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api")) returned 0x20 [0126.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api", dwFileAttributes=0x20) returned 0 [0126.389] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.389] GetLastError () returned 0x5 [0126.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api", dwFileAttributes=0x20) returned 0 [0126.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 641 os_tid = 0x11c8 [0124.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0124.619] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0124.619] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0124.619] wcscat (in: _Dest=0x3eba2a8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*" [0124.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0124.619] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0128.942] wcscmp (_String1=".", _String2=".") returned 0 [0128.942] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.942] wcscmp (_String1="..", _String2=".") returned 1 [0128.942] wcscmp (_String1="..", _String2="..") returned 0 [0128.942] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda4917e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0128.942] wcscmp (_String1="MPP", _String2=".") returned 1 [0128.942] wcscmp (_String1="MPP", _String2="..") returned 1 [0128.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44b10 [0128.942] wcscpy (in: _Dest=0x3d44b10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0128.942] wcscat (in: _Dest=0x3d44b10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0128.942] wcscat (in: _Dest=0x3d44b10, _Source="MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0136.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0136.705] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1 [0136.705] wcscmp (_String1="MPP_CZE", _String2=".") returned 1 [0136.705] wcscmp (_String1="MPP_CZE", _String2="..") returned 1 [0136.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0136.705] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0136.705] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0136.705] wcscat (in: _Dest=0x32cc50, _Source="MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0136.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0136.706] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1 [0136.706] wcscmp (_String1="MPP_HRV", _String2=".") returned 1 [0136.706] wcscmp (_String1="MPP_HRV", _String2="..") returned 1 [0136.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d5d0 [0136.706] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0136.706] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0136.706] wcscat (in: _Dest=0x32d5d0, _Source="MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0136.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0136.708] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1 [0136.708] wcscmp (_String1="MPP_HUN", _String2=".") returned 1 [0136.708] wcscmp (_String1="MPP_HUN", _String2="..") returned 1 [0136.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d2d8 [0136.708] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0136.708] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0136.708] wcscat (in: _Dest=0x32d2d8, _Source="MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0136.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0136.709] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1 [0136.709] wcscmp (_String1="MPP_POL", _String2=".") returned 1 [0136.710] wcscmp (_String1="MPP_POL", _String2="..") returned 1 [0136.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0136.710] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0136.710] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0136.710] wcscat (in: _Dest=0x32d668, _Source="MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0136.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0136.711] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1 [0136.711] wcscmp (_String1="MPP_RUM", _String2=".") returned 1 [0136.711] wcscmp (_String1="MPP_RUM", _String2="..") returned 1 [0136.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d700 [0136.711] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0136.711] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0136.711] wcscat (in: _Dest=0x32d700, _Source="MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0136.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0136.713] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1 [0136.713] wcscmp (_String1="MPP_RUS", _String2=".") returned 1 [0136.713] wcscmp (_String1="MPP_RUS", _String2="..") returned 1 [0136.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ceb0 [0136.713] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0136.714] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0136.714] wcscat (in: _Dest=0x32ceb0, _Source="MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0136.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0136.715] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1 [0136.715] wcscmp (_String1="MPP_SKY", _String2=".") returned 1 [0136.715] wcscmp (_String1="MPP_SKY", _String2="..") returned 1 [0136.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0136.715] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0136.715] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0136.715] wcscat (in: _Dest=0x32d408, _Source="MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0136.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0136.717] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1 [0136.717] wcscmp (_String1="MPP_SLV", _String2=".") returned 1 [0136.717] wcscmp (_String1="MPP_SLV", _String2="..") returned 1 [0136.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d078 [0136.717] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0136.717] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0136.717] wcscat (in: _Dest=0x32d078, _Source="MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0136.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0136.719] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1 [0136.719] wcscmp (_String1="MPP_TUR", _String2=".") returned 1 [0136.719] wcscmp (_String1="MPP_TUR", _String2="..") returned 1 [0136.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0136.719] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0136.719] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0136.719] wcscat (in: _Dest=0x32b820, _Source="MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0136.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0136.720] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1 [0136.720] wcscmp (_String1="MPP_UKR", _String2=".") returned 1 [0136.720] wcscmp (_String1="MPP_UKR", _String2="..") returned 1 [0136.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad50b0 [0136.721] wcscpy (in: _Dest=0x7ad50b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia" [0136.721] wcscat (in: _Dest=0x7ad50b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\" [0136.721] wcscat (in: _Dest=0x7ad50b0, _Source="MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0136.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0136.722] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 0 [0136.722] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0136.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0136.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 [0136.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 Thread: id = 642 os_tid = 0x11cc [0124.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api")) returned 0x20 [0126.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api", dwFileAttributes=0x20) returned 0 [0126.386] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.386] GetLastError () returned 0x5 [0126.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api", dwFileAttributes=0x20) returned 0 [0126.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44b10) returned 1 Thread: id = 643 os_tid = 0x11d0 [0124.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api")) returned 0x20 [0126.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api", dwFileAttributes=0x20) returned 0 [0126.383] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.383] GetLastError () returned 0x5 [0126.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api", dwFileAttributes=0x20) returned 0 [0126.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bcb8) returned 1 Thread: id = 644 os_tid = 0x11d4 [0124.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api")) returned 0x20 [0126.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api", dwFileAttributes=0x20) returned 0 [0126.380] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.380] GetLastError () returned 0x5 [0126.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api", dwFileAttributes=0x20) returned 0 [0126.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 645 os_tid = 0x11d8 [0124.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api")) returned 0x20 [0126.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api", dwFileAttributes=0x20) returned 0 [0126.377] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.377] GetLastError () returned 0x5 [0126.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api", dwFileAttributes=0x20) returned 0 [0126.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 Thread: id = 646 os_tid = 0x11dc [0124.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4e60 [0124.623] wcscpy (in: _Dest=0x3df4e60, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0124.623] wcscat (in: _Dest=0x3df4e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\" [0124.623] wcscat (in: _Dest=0x3df4e60, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*" [0124.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0124.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0124.624] wcscmp (_String1=".", _String2=".") returned 0 [0124.624] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.624] wcscmp (_String1="..", _String2=".") returned 1 [0124.624] wcscmp (_String1="..", _String2="..") returned 0 [0124.624] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSharp", cAlternateFileName="")) returned 1 [0124.624] wcscmp (_String1="CSharp", _String2=".") returned 1 [0124.624] wcscmp (_String1="CSharp", _String2="..") returned 1 [0124.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c218 [0124.624] wcscpy (in: _Dest=0x35c218, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0124.624] wcscat (in: _Dest=0x35c218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\" [0124.625] wcscat (in: _Dest=0x35c218, _Source="CSharp" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" [0125.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35c218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0125.568] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 1 [0125.568] wcscmp (_String1="VisualBasic", _String2=".") returned 1 [0125.568] wcscmp (_String1="VisualBasic", _String2="..") returned 1 [0125.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6460 [0125.569] wcscpy (in: _Dest=0x2ff6460, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates" [0125.569] wcscat (in: _Dest=0x2ff6460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\" [0125.569] wcscat (in: _Dest=0x2ff6460, _Source="VisualBasic" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" [0125.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff6460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0125.570] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 0 [0125.570] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0125.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0125.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4e60) returned 1 [0125.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 Thread: id = 647 os_tid = 0x11e0 [0124.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api")) returned 0x20 [0126.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api", dwFileAttributes=0x20) returned 0 [0126.176] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.176] GetLastError () returned 0x5 [0126.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api", dwFileAttributes=0x20) returned 0 [0126.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 648 os_tid = 0x11e4 [0124.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api")) returned 0x20 [0126.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api", dwFileAttributes=0x20) returned 0 [0126.438] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.438] GetLastError () returned 0x5 [0126.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api", dwFileAttributes=0x20) returned 0 [0126.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 Thread: id = 649 os_tid = 0x11e8 [0124.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif")) returned 0x20 [0124.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF", dwFileAttributes=0x20) returned 0 [0124.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0124.973] GetLastError () returned 0x5 [0124.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF", dwFileAttributes=0x20) returned 0 [0124.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 650 os_tid = 0x11ec [0124.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm")) returned 0x20 [0126.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM", dwFileAttributes=0x20) returned 0 [0126.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.642] GetLastError () returned 0x5 [0129.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM", dwFileAttributes=0x20) returned 0 [0129.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 651 os_tid = 0x11f0 [0124.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif")) returned 0x20 [0126.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF", dwFileAttributes=0x20) returned 0 [0126.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0128.923] GetLastError () returned 0x5 [0128.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF", dwFileAttributes=0x20) returned 0 [0128.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 Thread: id = 652 os_tid = 0x11f4 [0124.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm")) returned 0x20 [0129.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM", dwFileAttributes=0x20) returned 0 [0129.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.042] GetLastError () returned 0x5 [0129.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM", dwFileAttributes=0x20) returned 0 [0129.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bfe8) returned 1 Thread: id = 653 os_tid = 0x11f8 [0124.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif")) returned 0x20 [0129.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF", dwFileAttributes=0x20) returned 0 [0129.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.660] GetLastError () returned 0x5 [0129.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF", dwFileAttributes=0x20) returned 0 [0129.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 654 os_tid = 0x11fc [0124.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm")) returned 0x20 [0129.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM", dwFileAttributes=0x20) returned 0 [0129.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.658] GetLastError () returned 0x5 [0129.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM", dwFileAttributes=0x20) returned 0 [0129.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 655 os_tid = 0x1200 [0124.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif")) returned 0x20 [0129.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF", dwFileAttributes=0x20) returned 0 [0129.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.656] GetLastError () returned 0x5 [0129.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF", dwFileAttributes=0x20) returned 0 [0129.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 656 os_tid = 0x1204 [0124.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm")) returned 0x20 [0129.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM", dwFileAttributes=0x20) returned 0 [0129.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.654] GetLastError () returned 0x5 [0129.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM", dwFileAttributes=0x20) returned 0 [0129.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 657 os_tid = 0x1208 [0124.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm")) returned 0x20 [0129.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM", dwFileAttributes=0x20) returned 0 [0129.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.652] GetLastError () returned 0x5 [0129.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM", dwFileAttributes=0x20) returned 0 [0129.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 658 os_tid = 0x120c [0124.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg")) returned 0x20 [0129.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG", dwFileAttributes=0x20) returned 0 [0129.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.651] GetLastError () returned 0x5 [0129.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG", dwFileAttributes=0x20) returned 0 [0129.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c318) returned 1 Thread: id = 659 os_tid = 0x1210 [0124.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif")) returned 0x20 [0129.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF", dwFileAttributes=0x20) returned 0 [0129.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.649] GetLastError () returned 0x5 [0129.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF", dwFileAttributes=0x20) returned 0 [0129.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 660 os_tid = 0x1214 [0124.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm")) returned 0x20 [0129.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM", dwFileAttributes=0x20) returned 0 [0129.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.647] GetLastError () returned 0x5 [0129.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM", dwFileAttributes=0x20) returned 0 [0129.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c428) returned 1 Thread: id = 661 os_tid = 0x1218 [0124.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif")) returned 0x20 [0129.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF", dwFileAttributes=0x20) returned 0 [0129.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.645] GetLastError () returned 0x5 [0129.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF", dwFileAttributes=0x20) returned 0 [0129.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c4b0) returned 1 Thread: id = 662 os_tid = 0x121c [0124.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm")) returned 0x20 [0129.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM", dwFileAttributes=0x20) returned 0 [0129.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.644] GetLastError () returned 0x5 [0129.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM", dwFileAttributes=0x20) returned 0 [0129.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 663 os_tid = 0x1220 [0124.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm")) returned 0x20 [0129.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM", dwFileAttributes=0x20) returned 0 [0129.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.627] GetLastError () returned 0x5 [0129.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM", dwFileAttributes=0x20) returned 0 [0129.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 664 os_tid = 0x1224 [0124.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg")) returned 0x20 [0125.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG", dwFileAttributes=0x20) returned 0 [0125.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.428] GetLastError () returned 0x5 [0125.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG", dwFileAttributes=0x20) returned 0 [0125.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 Thread: id = 665 os_tid = 0x1228 [0125.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm")) returned 0x20 [0125.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM", dwFileAttributes=0x20) returned 0 [0125.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.431] GetLastError () returned 0x5 [0125.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM", dwFileAttributes=0x20) returned 0 [0125.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c6d0) returned 1 Thread: id = 666 os_tid = 0x122c [0125.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg")) returned 0x20 [0129.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG", dwFileAttributes=0x20) returned 0 [0129.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.625] GetLastError () returned 0x5 [0129.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG", dwFileAttributes=0x20) returned 0 [0129.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c758) returned 1 Thread: id = 667 os_tid = 0x123c [0125.434] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\Lk-cCgTmMD6rPRHqNiFu.wav" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vuuzprg1c7qtuaya2e\\lk-ccgtmmd6rprhqnifu.wav")) returned 0x20 [0125.435] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\Lk-cCgTmMD6rPRHqNiFu.wav", dwFileAttributes=0x20) returned 1 [0126.546] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\Lk-cCgTmMD6rPRHqNiFu.wav" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vuuzprg1c7qtuaya2e\\lk-ccgtmmd6rprhqnifu.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16b4 [0126.546] GetFileSizeEx (in: hFile=0x16b4, lpFileSize=0x5e0f904 | out: lpFileSize=0x5e0f904*=83532) returned 1 [0126.546] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x14648, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.546] ReadFile (in: hFile=0x16b4, lpBuffer=0x5e0f8e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5e0f8f0, lpOverlapped=0x0 | out: lpBuffer=0x5e0f8e0*, lpNumberOfBytesRead=0x5e0f8f0*=0x4, lpOverlapped=0x0) returned 1 [0126.548] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0126.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0126.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0126.548] NtQuerySystemTime (in: CurrentTime=0x5e0f878 | out: CurrentTime=0x5e0f878*=132462177059376000) returned 0x0 [0126.548] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x4da303df [0126.548] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x5b2405ea [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x6988e106 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x7d0998de [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x1accee5d [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x43ee4b76 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x7f9e30a1 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x1cd7a05 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x2bd4aed0 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x2b893e2a [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x3c966f5e [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x3ecf0cfc [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x47d241b5 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x2c5c49e6 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x63c59beb [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0xd9cfa98 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x4e21c8d0 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x422dc116 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x46e2172a [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x19899673 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x4b51ec01 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x57664753 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x7820868b [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x41a5ec6 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x49fcc041 [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x3bc29f9e [0126.549] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x60f98881 [0126.550] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x432c5408 [0126.550] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x2218a38 [0126.550] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x7c120c1e [0126.550] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0x46fe22f9 [0126.550] RtlRandomEx (in: Seed=0x5e0f870 | out: Seed=0x5e0f870) returned 0xbcdb56c [0126.563] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.563] ReadFile (in: hFile=0x16b4, lpBuffer=0x7b2df10, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5e0f878, lpOverlapped=0x0 | out: lpBuffer=0x7b2df10*, lpNumberOfBytesRead=0x5e0f878*=0x3c00, lpOverlapped=0x0) returned 1 [0126.563] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0126.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0126.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0126.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4050) returned 1 [0126.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b31b18 [0126.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0126.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0126.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4000) returned 1 [0126.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0126.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0126.564] WriteFile (in: hFile=0x16b4, lpBuffer=0x7b31b18*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5e0f878, lpOverlapped=0x0 | out: lpBuffer=0x7b31b18*, lpNumberOfBytesWritten=0x5e0f878*=0x3c00, lpOverlapped=0x0) returned 1 [0129.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b31b18) returned 1 [0129.987] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.988] ReadFile (in: hFile=0x16b4, lpBuffer=0x7b2df10, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5e0f878, lpOverlapped=0x0 | out: lpBuffer=0x7b2df10*, lpNumberOfBytesRead=0x5e0f878*=0x3c00, lpOverlapped=0x0) returned 1 [0129.988] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24f20 [0129.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0129.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9e0 [0129.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9e0) returned 1 [0129.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a87cd8 [0129.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9e0 [0129.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0129.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6e8) returned 1 [0129.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0129.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f20) returned 1 [0129.989] WriteFile (in: hFile=0x16b4, lpBuffer=0x7a87cd8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5e0f878, lpOverlapped=0x0 | out: lpBuffer=0x7a87cd8*, lpNumberOfBytesWritten=0x5e0f878*=0x3c00, lpOverlapped=0x0) returned 1 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a87cd8) returned 1 [0129.995] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x10a4c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.995] ReadFile (in: hFile=0x16b4, lpBuffer=0x7b2df10, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5e0f878, lpOverlapped=0x0 | out: lpBuffer=0x7b2df10*, lpNumberOfBytesRead=0x5e0f878*=0x3c00, lpOverlapped=0x0) returned 1 [0129.995] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x10a4c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24f20 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0129.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0129.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a87cd8 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0129.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0129.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f20) returned 1 [0129.996] WriteFile (in: hFile=0x16b4, lpBuffer=0x7a87cd8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5e0f878, lpOverlapped=0x0 | out: lpBuffer=0x7a87cd8*, lpNumberOfBytesWritten=0x5e0f878*=0x3c00, lpOverlapped=0x0) returned 1 [0130.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a87cd8) returned 1 [0130.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1ea68 [0130.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4050) returned 1 [0130.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x30b4238 [0130.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0130.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0130.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0130.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0130.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff00e8) returned 1 [0130.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x2fed4c0 [0130.004] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.004] WriteFile (in: hFile=0x16b4, lpBuffer=0x2fed4c0*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x5e0f8f8, lpOverlapped=0x0 | out: lpBuffer=0x2fed4c0*, lpNumberOfBytesWritten=0x5e0f8f8*=0x162, lpOverlapped=0x0) returned 1 [0130.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85428 [0130.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50c60 [0130.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0130.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40a0) returned 1 [0130.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3013ff8 [0130.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0130.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40c8 [0130.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40c8) returned 1 [0130.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0130.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85428) returned 1 [0130.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a23c30 [0130.148] sprintf (in: _Dest=0x7a23c30, _Format="%c%c" | out: _Dest="0e") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c32, _Format="%c%c" | out: _Dest="dd") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c34, _Format="%c%c" | out: _Dest="88") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c36, _Format="%c%c" | out: _Dest="db") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c38, _Format="%c%c" | out: _Dest="cc") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c3a, _Format="%c%c" | out: _Dest="fa") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c3c, _Format="%c%c" | out: _Dest="cd") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c3e, _Format="%c%c" | out: _Dest="01") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c40, _Format="%c%c" | out: _Dest="23") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c42, _Format="%c%c" | out: _Dest="37") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c44, _Format="%c%c" | out: _Dest="20") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c46, _Format="%c%c" | out: _Dest="ca") returned 2 [0130.148] sprintf (in: _Dest=0x7a23c48, _Format="%c%c" | out: _Dest="01") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c4a, _Format="%c%c" | out: _Dest="cc") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c4c, _Format="%c%c" | out: _Dest="6c") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c4e, _Format="%c%c" | out: _Dest="fb") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c50, _Format="%c%c" | out: _Dest="a1") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c52, _Format="%c%c" | out: _Dest="fd") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c54, _Format="%c%c" | out: _Dest="6d") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c56, _Format="%c%c" | out: _Dest="d6") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c58, _Format="%c%c" | out: _Dest="b0") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c5a, _Format="%c%c" | out: _Dest="20") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c5c, _Format="%c%c" | out: _Dest="80") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c5e, _Format="%c%c" | out: _Dest="d0") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c60, _Format="%c%c" | out: _Dest="7d") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c62, _Format="%c%c" | out: _Dest="b6") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c64, _Format="%c%c" | out: _Dest="ff") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c66, _Format="%c%c" | out: _Dest="94") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c68, _Format="%c%c" | out: _Dest="bf") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c6a, _Format="%c%c" | out: _Dest="45") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c6c, _Format="%c%c" | out: _Dest="41") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c6e, _Format="%c%c" | out: _Dest="c9") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c70, _Format="%c%c" | out: _Dest="ba") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c72, _Format="%c%c" | out: _Dest="ca") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c74, _Format="%c%c" | out: _Dest="2d") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c76, _Format="%c%c" | out: _Dest="31") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c78, _Format="%c%c" | out: _Dest="7d") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c7a, _Format="%c%c" | out: _Dest="71") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c7c, _Format="%c%c" | out: _Dest="21") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c7e, _Format="%c%c" | out: _Dest="2c") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c80, _Format="%c%c" | out: _Dest="db") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c82, _Format="%c%c" | out: _Dest="f1") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c84, _Format="%c%c" | out: _Dest="b6") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c86, _Format="%c%c" | out: _Dest="35") returned 2 [0130.149] sprintf (in: _Dest=0x7a23c88, _Format="%c%c" | out: _Dest="89") returned 2 [0130.150] sprintf (in: _Dest=0x7a23c8a, _Format="%c%c" | out: _Dest="d0") returned 2 [0130.150] sprintf (in: _Dest=0x7a23c8c, _Format="%c%c" | out: _Dest="3d") returned 2 [0130.150] sprintf (in: _Dest=0x7a23c8e, _Format="%c%c" | out: _Dest="43") returned 2 [0130.150] RtlInitAnsiString (in: DestinationString=0x5e0f880, SourceString="0edd88dbccfacd01233720ca01cc6cfba1fd6dd6b02080d07db6ff94bf4541c9baca2d317d71212cdbf1b63589d03d43" | out: DestinationString="0edd88dbccfacd01233720ca01cc6cfba1fd6dd6b02080d07db6ff94bf4541c9baca2d317d71212cdbf1b63589d03d43") [0130.150] RtlAnsiStringToUnicodeString (in: DestinationString=0x5e0f878, SourceString="0edd88dbccfacd01233720ca01cc6cfba1fd6dd6b02080d07db6ff94bf4541c9baca2d317d71212cdbf1b63589d03d43", AllocateDestinationString=1 | out: DestinationString="0edd88dbccfacd01233720ca01cc6cfba1fd6dd6b02080d07db6ff94bf4541c9baca2d317d71212cdbf1b63589d03d43") returned 0x0 [0130.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3035370 [0130.150] wcscat (in: _Dest=0x3e3a378, _Source="0edd88dbccfacd01233720ca" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\0edd88dbccfacd01233720ca") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\0edd88dbccfacd01233720ca" [0130.150] wcscat (in: _Dest=0x3e3a378, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\0edd88dbccfacd01233720ca.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\0edd88dbccfacd01233720ca.68814f" [0130.150] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\0edd88dbccfacd01233720ca.68814f", NtPathName=0x5e0f870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\0edd88dbccfacd01233720ca.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8648 [0130.150] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0x5e0f878, FileInformation=0x2c8648, Length=0xd6, FileInformationClass=0xa) returned 0x0 [0130.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 [0130.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a41fe0) returned 1 [0130.562] NtQueryInformationFile (in: FileHandle=0x16b4, IoStatusBlock=0x5e0f848, FileInformation=0x5e0f850, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5e0f848, FileInformation=0x5e0f850) returned 0x0 [0130.562] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0x5e0f848, FileInformation=0x5e0f850, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a378) returned 1 [0130.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3035370) returned 1 [0130.567] FlushFileBuffers (hFile=0x16b4) returned 1 [0130.583] CloseHandle (hObject=0x16b4) returned 1 [0130.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c6e8 [0130.598] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\" [0130.598] wcscat (in: _Dest=0x35c6e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\68814F-Readme.txt" [0130.598] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vuuzprg1c7qtuaya2e\\68814f-readme.txt")) returned 0x20 [0130.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 [0130.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 Thread: id = 668 os_tid = 0x1240 [0125.435] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\mdlsvyrKz4Fq4.wav" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vuuzprg1c7qtuaya2e\\mdlsvyrkz4fq4.wav")) returned 0x20 [0125.435] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\mdlsvyrKz4Fq4.wav", dwFileAttributes=0x20) returned 1 [0126.565] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\mdlsvyrKz4Fq4.wav" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vuuzprg1c7qtuaya2e\\mdlsvyrkz4fq4.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16b8 [0126.565] GetFileSizeEx (in: hFile=0x16b8, lpFileSize=0x46bfc54 | out: lpFileSize=0x46bfc54*=101345) returned 1 [0126.565] SetFilePointerEx (in: hFile=0x16b8, liDistanceToMove=0x18bdd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.565] ReadFile (in: hFile=0x16b8, lpBuffer=0x46bfc30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x46bfc40, lpOverlapped=0x0 | out: lpBuffer=0x46bfc30*, lpNumberOfBytesRead=0x46bfc40*=0x4, lpOverlapped=0x0) returned 1 [0126.568] SetFilePointerEx (in: hFile=0x16b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0126.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f60 [0126.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0126.568] NtQuerySystemTime (in: CurrentTime=0x46bfbc8 | out: CurrentTime=0x46bfbc8*=132462177059532000) returned 0x0 [0126.568] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x26e48a04 [0126.568] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x2d9df7ae [0126.568] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x315ff69e [0126.568] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x2e64f78d [0126.568] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x35529949 [0126.568] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x46618934 [0126.568] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x20270348 [0126.568] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x3358ed03 [0126.568] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x62953c97 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x7c8a04e6 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x6d5bf81e [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x1d4854db [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x547f4845 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x7f8f7873 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x4b944e5f [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x4dfb3e02 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x64abe113 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x70d229aa [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x2f927d0b [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x6e09460 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x5422cda6 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x3ec04b52 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x6b0bb51d [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x5b508720 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x329ab57c [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x63804ede [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x1ae52841 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x11226d69 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x6b5db1f3 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x6906b457 [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x745781cc [0126.569] RtlRandomEx (in: Seed=0x46bfbc0 | out: Seed=0x46bfbc0) returned 0x799785ff [0126.587] SetFilePointerEx (in: hFile=0x16b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.587] ReadFile (in: hFile=0x16b8, lpBuffer=0x7b35720, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x46bfbc8, lpOverlapped=0x0 | out: lpBuffer=0x7b35720*, lpNumberOfBytesRead=0x46bfbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0126.587] SetFilePointerEx (in: hFile=0x16b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0126.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0126.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0126.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4000) returned 1 [0126.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b39328 [0126.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0126.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0126.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f10) returned 1 [0126.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0126.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0126.588] WriteFile (in: hFile=0x16b8, lpBuffer=0x7b39328*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x46bfbc8, lpOverlapped=0x0 | out: lpBuffer=0x7b39328*, lpNumberOfBytesWritten=0x46bfbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b39328) returned 1 [0129.992] SetFilePointerEx (in: hFile=0x16b8, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.992] ReadFile (in: hFile=0x16b8, lpBuffer=0x7b35720, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x46bfbc8, lpOverlapped=0x0 | out: lpBuffer=0x7b35720*, lpNumberOfBytesRead=0x46bfbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.992] SetFilePointerEx (in: hFile=0x16b8, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24f20 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6e8) returned 1 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a8b8e0 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0129.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0129.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f20) returned 1 [0129.993] WriteFile (in: hFile=0x16b8, lpBuffer=0x7a8b8e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x46bfbc8, lpOverlapped=0x0 | out: lpBuffer=0x7a8b8e0*, lpNumberOfBytesWritten=0x46bfbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0130.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8b8e0) returned 1 [0130.001] SetFilePointerEx (in: hFile=0x16b8, liDistanceToMove=0x14fe1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.001] ReadFile (in: hFile=0x16b8, lpBuffer=0x7b35720, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x46bfbc8, lpOverlapped=0x0 | out: lpBuffer=0x7b35720*, lpNumberOfBytesRead=0x46bfbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0130.001] SetFilePointerEx (in: hFile=0x16b8, liDistanceToMove=0x14fe1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24f20 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0130.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0130.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a8b8e0 [0130.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0130.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0130.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0130.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0130.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f20) returned 1 [0130.002] WriteFile (in: hFile=0x16b8, lpBuffer=0x7a8b8e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x46bfbc8, lpOverlapped=0x0 | out: lpBuffer=0x7a8b8e0*, lpNumberOfBytesWritten=0x46bfbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0130.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8b8e0) returned 1 [0130.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d8f0 [0130.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4000) returned 1 [0130.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x30b8b88 [0130.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0130.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0130.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0130.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0130.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff00e8) returned 1 [0130.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dce108 [0130.009] SetFilePointerEx (in: hFile=0x16b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.009] WriteFile (in: hFile=0x16b8, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x46bfc48, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x46bfc48*=0x154, lpOverlapped=0x0) returned 1 [0130.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24f20 [0130.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50c60 [0130.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0130.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d58) returned 1 [0130.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e85f48 [0130.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0130.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d80 [0130.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d80) returned 1 [0130.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0130.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f20) returned 1 [0130.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e842b8 [0130.154] sprintf (in: _Dest=0x3e842b8, _Format="%c%c" | out: _Dest="a0") returned 2 [0130.154] sprintf (in: _Dest=0x3e842ba, _Format="%c%c" | out: _Dest="7b") returned 2 [0130.154] sprintf (in: _Dest=0x3e842bc, _Format="%c%c" | out: _Dest="79") returned 2 [0130.155] sprintf (in: _Dest=0x3e842be, _Format="%c%c" | out: _Dest="aa") returned 2 [0130.155] sprintf (in: _Dest=0x3e842c0, _Format="%c%c" | out: _Dest="32") returned 2 [0130.155] sprintf (in: _Dest=0x3e842c2, _Format="%c%c" | out: _Dest="f8") returned 2 [0130.155] sprintf (in: _Dest=0x3e842c4, _Format="%c%c" | out: _Dest="5f") returned 2 [0130.155] sprintf (in: _Dest=0x3e842c6, _Format="%c%c" | out: _Dest="d2") returned 2 [0130.155] sprintf (in: _Dest=0x3e842c8, _Format="%c%c" | out: _Dest="b9") returned 2 [0130.155] sprintf (in: _Dest=0x3e842ca, _Format="%c%c" | out: _Dest="bf") returned 2 [0130.155] sprintf (in: _Dest=0x3e842cc, _Format="%c%c" | out: _Dest="d4") returned 2 [0130.155] sprintf (in: _Dest=0x3e842ce, _Format="%c%c" | out: _Dest="e0") returned 2 [0130.155] sprintf (in: _Dest=0x3e842d0, _Format="%c%c" | out: _Dest="d4") returned 2 [0130.155] sprintf (in: _Dest=0x3e842d2, _Format="%c%c" | out: _Dest="bf") returned 2 [0130.155] sprintf (in: _Dest=0x3e842d4, _Format="%c%c" | out: _Dest="a6") returned 2 [0130.155] sprintf (in: _Dest=0x3e842d6, _Format="%c%c" | out: _Dest="b7") returned 2 [0130.155] sprintf (in: _Dest=0x3e842d8, _Format="%c%c" | out: _Dest="db") returned 2 [0130.155] sprintf (in: _Dest=0x3e842da, _Format="%c%c" | out: _Dest="5f") returned 2 [0130.155] sprintf (in: _Dest=0x3e842dc, _Format="%c%c" | out: _Dest="88") returned 2 [0130.155] sprintf (in: _Dest=0x3e842de, _Format="%c%c" | out: _Dest="f4") returned 2 [0130.155] sprintf (in: _Dest=0x3e842e0, _Format="%c%c" | out: _Dest="fb") returned 2 [0130.155] sprintf (in: _Dest=0x3e842e2, _Format="%c%c" | out: _Dest="5a") returned 2 [0130.155] sprintf (in: _Dest=0x3e842e4, _Format="%c%c" | out: _Dest="b0") returned 2 [0130.155] sprintf (in: _Dest=0x3e842e6, _Format="%c%c" | out: _Dest="a0") returned 2 [0130.155] sprintf (in: _Dest=0x3e842e8, _Format="%c%c" | out: _Dest="f1") returned 2 [0130.155] sprintf (in: _Dest=0x3e842ea, _Format="%c%c" | out: _Dest="4e") returned 2 [0130.155] sprintf (in: _Dest=0x3e842ec, _Format="%c%c" | out: _Dest="2c") returned 2 [0130.155] sprintf (in: _Dest=0x3e842ee, _Format="%c%c" | out: _Dest="82") returned 2 [0130.155] sprintf (in: _Dest=0x3e842f0, _Format="%c%c" | out: _Dest="40") returned 2 [0130.155] sprintf (in: _Dest=0x3e842f2, _Format="%c%c" | out: _Dest="ae") returned 2 [0130.156] sprintf (in: _Dest=0x3e842f4, _Format="%c%c" | out: _Dest="d9") returned 2 [0130.156] sprintf (in: _Dest=0x3e842f6, _Format="%c%c" | out: _Dest="68") returned 2 [0130.156] sprintf (in: _Dest=0x3e842f8, _Format="%c%c" | out: _Dest="d8") returned 2 [0130.156] sprintf (in: _Dest=0x3e842fa, _Format="%c%c" | out: _Dest="3d") returned 2 [0130.156] RtlInitAnsiString (in: DestinationString=0x46bfbd0, SourceString="a07b79aa32f85fd2b9bfd4e0d4bfa6b7db5f88f4fb5ab0a0f14e2c8240aed968d83d" | out: DestinationString="a07b79aa32f85fd2b9bfd4e0d4bfa6b7db5f88f4fb5ab0a0f14e2c8240aed968d83d") [0130.156] RtlAnsiStringToUnicodeString (in: DestinationString=0x46bfbc8, SourceString="a07b79aa32f85fd2b9bfd4e0d4bfa6b7db5f88f4fb5ab0a0f14e2c8240aed968d83d", AllocateDestinationString=1 | out: DestinationString="a07b79aa32f85fd2b9bfd4e0d4bfa6b7db5f88f4fb5ab0a0f14e2c8240aed968d83d") returned 0x0 [0130.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb60b0 [0130.156] wcscat (in: _Dest=0x3e65d18, _Source="a07b79aa32f85fd2b" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\a07b79aa32f85fd2b") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\a07b79aa32f85fd2b" [0130.156] wcscat (in: _Dest=0x3e65d18, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\a07b79aa32f85fd2b.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\a07b79aa32f85fd2b.68814f" [0130.156] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\a07b79aa32f85fd2b.68814f", NtPathName=0x46bfbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\a07b79aa32f85fd2b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3035780 [0130.156] NtSetInformationFile (FileHandle=0x16b8, IoStatusBlock=0x46bfbc8, FileInformation=0x3035780, Length=0xc8, FileInformationClass=0xa) returned 0x0 [0130.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3035780) returned 1 [0130.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a412f0) returned 1 [0130.563] NtQueryInformationFile (in: FileHandle=0x16b8, IoStatusBlock=0x46bfb98, FileInformation=0x46bfba0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x46bfb98, FileInformation=0x46bfba0) returned 0x0 [0130.564] NtSetInformationFile (FileHandle=0x16b8, IoStatusBlock=0x46bfb98, FileInformation=0x46bfba0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0130.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 [0130.565] FlushFileBuffers (hFile=0x16b8) returned 1 [0130.583] CloseHandle (hObject=0x16b8) returned 1 [0130.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35af88 [0130.595] wcscpy (in: _Dest=0x35af88, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\" [0130.595] wcscat (in: _Dest=0x35af88, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\68814F-Readme.txt" [0130.595] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vuuzprg1c7qtuaya2e\\68814f-readme.txt")) returned 0xffffffff [0130.595] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vuuzprg1c7qtuaya2e\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19d0 [0130.715] WriteFile (in: hFile=0x19d0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x46bfbdc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x46bfbdc*=0x8b9, lpOverlapped=0x0) returned 1 [0130.718] CloseHandle (hObject=0x19d0) returned 1 [0130.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 [0130.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 Thread: id = 669 os_tid = 0x1244 [0125.436] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vuuzprg1c7qtuaya2e\\t5_tredna9z.jpg")) returned 0x20 [0125.436] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg", dwFileAttributes=0x20) returned 1 [0126.590] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vuuzprg1c7qtuaya2e\\t5_tredna9z.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16bc [0126.590] GetFileSizeEx (in: hFile=0x16bc, lpFileSize=0x8c6fd34 | out: lpFileSize=0x8c6fd34*=48814) returned 1 [0126.590] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0xbeaa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.590] ReadFile (in: hFile=0x16bc, lpBuffer=0x8c6fd10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c6fd20, lpOverlapped=0x0 | out: lpBuffer=0x8c6fd10*, lpNumberOfBytesRead=0x8c6fd20*=0x4, lpOverlapped=0x0) returned 1 [0126.592] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0126.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0126.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0126.592] NtQuerySystemTime (in: CurrentTime=0x8c6fca8 | out: CurrentTime=0x8c6fca8*=132462177059844000) returned 0x0 [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x7fee1be6 [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x119600b2 [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x67e69e13 [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x7c23fe3 [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x59a447d3 [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x308e4fea [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x15711603 [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x1360f667 [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x7a14992f [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x6d4a38f [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x740a8a1 [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0xaf66112 [0126.592] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x455a395 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x6e63d5ef [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x2d77e575 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x2922641a [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x7d380c73 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x692c286a [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x2125fb24 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x15fe6149 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x6249639a [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x5e7b86b3 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x232d1358 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x67b95424 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x19b2b192 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x3937be96 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x4031389a [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x6e586636 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x695b5457 [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x1eae384f [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0xf0ceade [0126.593] RtlRandomEx (in: Seed=0x8c6fca0 | out: Seed=0x8c6fca0) returned 0x4250eafc [0126.605] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.605] ReadFile (in: hFile=0x16bc, lpBuffer=0x7b3cf30, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8c6fca8, lpOverlapped=0x0 | out: lpBuffer=0x7b3cf30*, lpNumberOfBytesRead=0x8c6fca8*=0x3c00, lpOverlapped=0x0) returned 1 [0126.605] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0126.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0126.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0126.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f10) returned 1 [0126.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b40b38 [0126.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0126.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0126.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e70) returned 1 [0126.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0126.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0126.609] WriteFile (in: hFile=0x16bc, lpBuffer=0x7b40b38*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8c6fca8, lpOverlapped=0x0 | out: lpBuffer=0x7b40b38*, lpNumberOfBytesWritten=0x8c6fca8*=0x3c00, lpOverlapped=0x0) returned 1 [0129.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b40b38) returned 1 [0129.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3cf30) returned 1 [0129.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3013ff8 [0129.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0129.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3014030 [0129.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0129.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0129.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0129.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0129.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f20) returned 1 [0129.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec4e0 [0130.000] SetFilePointerEx (in: hFile=0x16bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.000] WriteFile (in: hFile=0x16bc, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x8c6fd28, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x8c6fd28*=0x110, lpOverlapped=0x0) returned 1 [0130.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0130.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014030) returned 1 [0130.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0130.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3013ff8) returned 1 [0130.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f10) returned 1 [0130.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e98) returned 1 [0130.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e20) returned 1 [0130.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3df8) returned 1 [0130.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0130.141] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg" [0130.141] wcscat (in: _Dest=0x2ff6b90, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg.68814f" [0130.141] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg.68814f", NtPathName=0x8c6fca0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\t5_tReDnA9Z.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x30352a0 [0130.141] NtSetInformationFile (FileHandle=0x16bc, IoStatusBlock=0x8c6fca8, FileInformation=0x30352a0, Length=0xc4, FileInformationClass=0xa) returned 0x0 [0130.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30352a0) returned 1 [0130.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a42cd0) returned 1 [0130.568] NtQueryInformationFile (in: FileHandle=0x16bc, IoStatusBlock=0x8c6fc78, FileInformation=0x8c6fc80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8c6fc78, FileInformation=0x8c6fc80) returned 0x0 [0130.568] NtSetInformationFile (FileHandle=0x16bc, IoStatusBlock=0x8c6fc78, FileInformation=0x8c6fc80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0130.571] FlushFileBuffers (hFile=0x16bc) returned 1 [0130.632] CloseHandle (hObject=0x16bc) returned 1 [0130.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c218 [0130.672] wcscpy (in: _Dest=0x35c218, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\" [0130.672] wcscat (in: _Dest=0x35c218, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\68814F-Readme.txt" [0130.672] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vuUzPRG1C7QTuAya2e\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vuuzprg1c7qtuaya2e\\68814f-readme.txt")) returned 0x20 [0130.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 [0130.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 Thread: id = 670 os_tid = 0x1248 [0125.436] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\54ws0wTc5G.xls" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\54ws0wtc5g.xls")) returned 0x20 [0125.437] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\54ws0wTc5G.xls", dwFileAttributes=0x20) returned 1 [0126.610] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\54ws0wTc5G.xls" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\54ws0wtc5g.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16c0 [0126.610] GetFileSizeEx (in: hFile=0x16c0, lpFileSize=0x8a7fb8c | out: lpFileSize=0x8a7fb8c*=18101) returned 1 [0126.610] SetFilePointerEx (in: hFile=0x16c0, liDistanceToMove=0x46b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.610] ReadFile (in: hFile=0x16c0, lpBuffer=0x8a7fb68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8a7fb78, lpOverlapped=0x0 | out: lpBuffer=0x8a7fb68*, lpNumberOfBytesRead=0x8a7fb78*=0x4, lpOverlapped=0x0) returned 1 [0126.612] SetFilePointerEx (in: hFile=0x16c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0126.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3dd0 [0126.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0126.612] NtQuerySystemTime (in: CurrentTime=0x8a7fb00 | out: CurrentTime=0x8a7fb00*=132462177060000000) returned 0x0 [0126.612] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x63c4ef93 [0126.612] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0xd245a12 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x5fd2dedf [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x218dd972 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x38c069f5 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x7c8bfc49 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x28d33925 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x53861e9f [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x4359103 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x628c105 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x7ef2cda1 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x30d00325 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x48f9232b [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x793f4fcc [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x6a8d3a64 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x2ff1a711 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x792d43aa [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x53cb8bd2 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0xe6c7572 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x798c635a [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x4a9fc65f [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x148cbd45 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x73eaebea [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x389612f6 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x343bcd8d [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x7125a21 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x7aefc6c4 [0126.613] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x64d4f5f7 [0126.614] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x24894fa4 [0126.614] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x71ddd061 [0126.614] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x41091cde [0126.614] RtlRandomEx (in: Seed=0x8a7faf8 | out: Seed=0x8a7faf8) returned 0x651fb9c9 [0126.623] SetFilePointerEx (in: hFile=0x16c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.623] ReadFile (in: hFile=0x16c0, lpBuffer=0x7b44740, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8a7fb00, lpOverlapped=0x0 | out: lpBuffer=0x7b44740*, lpNumberOfBytesRead=0x8a7fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0126.623] SetFilePointerEx (in: hFile=0x16c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0126.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0126.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0126.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e70) returned 1 [0126.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b48360 [0126.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0126.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0126.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3da8) returned 1 [0126.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0126.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0126.631] WriteFile (in: hFile=0x16c0, lpBuffer=0x7b48360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8a7fb00, lpOverlapped=0x0 | out: lpBuffer=0x7b48360*, lpNumberOfBytesWritten=0x8a7fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0130.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b48360) returned 1 [0130.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b44740) returned 1 [0130.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3013f88 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3013690 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0130.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff00e8) returned 1 [0130.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x300e668 [0130.007] SetFilePointerEx (in: hFile=0x16c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.007] WriteFile (in: hFile=0x16c0, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x8a7fb80, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x8a7fb80*=0x10e, lpOverlapped=0x0) returned 1 [0130.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24f20 [0130.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50c60 [0130.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f88 [0130.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f88) returned 1 [0130.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3f88 [0130.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0130.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0130.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4028) returned 1 [0130.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0130.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f20) returned 1 [0130.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x7a24f20 [0130.152] sprintf (in: _Dest=0x7a24f20, _Format="%c%c" | out: _Dest="f7") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f22, _Format="%c%c" | out: _Dest="b9") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f24, _Format="%c%c" | out: _Dest="0c") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f26, _Format="%c%c" | out: _Dest="be") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f28, _Format="%c%c" | out: _Dest="6b") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f2a, _Format="%c%c" | out: _Dest="70") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f2c, _Format="%c%c" | out: _Dest="90") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f2e, _Format="%c%c" | out: _Dest="bc") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f30, _Format="%c%c" | out: _Dest="c4") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f32, _Format="%c%c" | out: _Dest="bd") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f34, _Format="%c%c" | out: _Dest="75") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f36, _Format="%c%c" | out: _Dest="14") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f38, _Format="%c%c" | out: _Dest="e1") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f3a, _Format="%c%c" | out: _Dest="a2") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f3c, _Format="%c%c" | out: _Dest="59") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f3e, _Format="%c%c" | out: _Dest="92") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f40, _Format="%c%c" | out: _Dest="e9") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f42, _Format="%c%c" | out: _Dest="34") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f44, _Format="%c%c" | out: _Dest="a1") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f46, _Format="%c%c" | out: _Dest="bf") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f48, _Format="%c%c" | out: _Dest="58") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f4a, _Format="%c%c" | out: _Dest="fd") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f4c, _Format="%c%c" | out: _Dest="82") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f4e, _Format="%c%c" | out: _Dest="06") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f50, _Format="%c%c" | out: _Dest="78") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f52, _Format="%c%c" | out: _Dest="c3") returned 2 [0130.152] sprintf (in: _Dest=0x7a24f54, _Format="%c%c" | out: _Dest="74") returned 2 [0130.153] sprintf (in: _Dest=0x7a24f56, _Format="%c%c" | out: _Dest="a0") returned 2 [0130.153] RtlInitAnsiString (in: DestinationString=0x8a7fb08, SourceString="f7b90cbe6b7090bcc4bd7514e1a25992e934a1bf58fd820678c374a0" | out: DestinationString="f7b90cbe6b7090bcc4bd7514e1a25992e934a1bf58fd820678c374a0") [0130.153] RtlAnsiStringToUnicodeString (in: DestinationString=0x8a7fb00, SourceString="f7b90cbe6b7090bcc4bd7514e1a25992e934a1bf58fd820678c374a0", AllocateDestinationString=1 | out: DestinationString="f7b90cbe6b7090bcc4bd7514e1a25992e934a1bf58fd820678c374a0") returned 0x0 [0130.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19698 [0130.153] wcscat (in: _Dest=0x3e19718, _Source="f7b90cbe6b7090" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\f7b90cbe6b7090") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\f7b90cbe6b7090" [0130.153] wcscat (in: _Dest=0x3e19718, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\f7b90cbe6b7090.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\f7b90cbe6b7090.68814f" [0130.153] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\f7b90cbe6b7090.68814f", NtPathName=0x8a7faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\f7b90cbe6b7090.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d455c0 [0130.153] NtSetInformationFile (FileHandle=0x16c0, IoStatusBlock=0x8a7fb00, FileInformation=0x3d455c0, Length=0x88, FileInformationClass=0xa) returned 0x0 [0130.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 [0130.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a41968) returned 1 [0130.290] NtQueryInformationFile (in: FileHandle=0x16c0, IoStatusBlock=0x8a7fad0, FileInformation=0x8a7fad8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8a7fad0, FileInformation=0x8a7fad8) returned 0x0 [0130.290] NtSetInformationFile (FileHandle=0x16c0, IoStatusBlock=0x8a7fad0, FileInformation=0x8a7fad8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19718) returned 1 [0130.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19698) returned 1 [0130.354] FlushFileBuffers (hFile=0x16c0) returned 1 [0130.359] CloseHandle (hObject=0x16c0) returned 1 [0130.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f128 [0130.385] wcscpy (in: _Dest=0x3f3f128, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0130.385] wcscat (in: _Dest=0x3f3f128, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" [0130.386] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\68814f-readme.txt")) returned 0x20 [0130.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0130.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23220) returned 1 Thread: id = 671 os_tid = 0x124c [0125.437] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\C0NW.pdf" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\c0nw.pdf")) returned 0x20 [0125.437] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\C0NW.pdf", dwFileAttributes=0x20) returned 1 [0126.632] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\C0NW.pdf" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\c0nw.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16c4 [0126.632] GetFileSizeEx (in: hFile=0x16c4, lpFileSize=0x5d3febc | out: lpFileSize=0x5d3febc*=92725) returned 1 [0126.632] SetFilePointerEx (in: hFile=0x16c4, liDistanceToMove=0x16a31, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.632] ReadFile (in: hFile=0x16c4, lpBuffer=0x5d3fe98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5d3fea8, lpOverlapped=0x0 | out: lpBuffer=0x5d3fe98*, lpNumberOfBytesRead=0x5d3fea8*=0x4, lpOverlapped=0x0) returned 1 [0126.635] SetFilePointerEx (in: hFile=0x16c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0126.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0126.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0126.635] NtQuerySystemTime (in: CurrentTime=0x5d3fe30 | out: CurrentTime=0x5d3fe30*=132462177060312000) returned 0x0 [0126.635] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x12ed8a60 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x7c5fbdbd [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x1df003e3 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x7e9d1c21 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x5b4d83b1 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x56be6605 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0xc5def46 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x3ed79f00 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x5957eb5e [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x14567f77 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x1371aa7e [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x4d91dd83 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x115fc723 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x597b693f [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x3fc7b476 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x362555d7 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x1be32b2e [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x76e32198 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x21f8f84 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x371a46ea [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x7059a0c9 [0126.636] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x2b881f5b [0126.637] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x1db733dc [0126.637] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x2b4cd130 [0126.637] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x6bea2c5f [0126.637] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0xe1ab0e7 [0126.637] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x586dc4d7 [0126.637] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0xb692ecb [0126.637] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x17941197 [0126.637] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x3206154a [0126.637] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x79c84819 [0126.637] RtlRandomEx (in: Seed=0x5d3fe28 | out: Seed=0x5d3fe28) returned 0x40ec7be4 [0126.650] SetFilePointerEx (in: hFile=0x16c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.650] ReadFile (in: hFile=0x16c4, lpBuffer=0x7b4bf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d3fe30, lpOverlapped=0x0 | out: lpBuffer=0x7b4bf68*, lpNumberOfBytesRead=0x5d3fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0126.650] SetFilePointerEx (in: hFile=0x16c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0126.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0126.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0126.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3da8) returned 1 [0126.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b4fb70 [0126.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0126.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0126.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d08) returned 1 [0126.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0126.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0126.652] WriteFile (in: hFile=0x16c4, lpBuffer=0x7b4fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d3fe30, lpOverlapped=0x0 | out: lpBuffer=0x7b4fb70*, lpNumberOfBytesWritten=0x5d3fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0130.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b4fb70) returned 1 [0130.012] SetFilePointerEx (in: hFile=0x16c4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.012] ReadFile (in: hFile=0x16c4, lpBuffer=0x7b4bf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d3fe30, lpOverlapped=0x0 | out: lpBuffer=0x7b4bf68*, lpNumberOfBytesRead=0x5d3fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0130.013] SetFilePointerEx (in: hFile=0x16c4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x2ff00e8 [0130.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0130.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0130.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0130.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b4fb70 [0130.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0130.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0130.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5f0) returned 1 [0130.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0130.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff00e8) returned 1 [0130.014] WriteFile (in: hFile=0x16c4, lpBuffer=0x7b4fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d3fe30, lpOverlapped=0x0 | out: lpBuffer=0x7b4fb70*, lpNumberOfBytesWritten=0x5d3fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0130.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b4fb70) returned 1 [0130.021] SetFilePointerEx (in: hFile=0x16c4, liDistanceToMove=0x12e35, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.021] ReadFile (in: hFile=0x16c4, lpBuffer=0x7b4bf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5d3fe30, lpOverlapped=0x0 | out: lpBuffer=0x7b4bf68*, lpNumberOfBytesRead=0x5d3fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0130.021] SetFilePointerEx (in: hFile=0x16c4, liDistanceToMove=0x12e35, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0130.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0130.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0130.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0130.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b4fb70 [0130.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0130.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0130.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0130.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0130.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.022] WriteFile (in: hFile=0x16c4, lpBuffer=0x7b4fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5d3fe30, lpOverlapped=0x0 | out: lpBuffer=0x7b4fb70*, lpNumberOfBytesWritten=0x5d3fe30*=0x3c00, lpOverlapped=0x0) returned 1 [0130.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b4fb70) returned 1 [0130.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e20608 [0130.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0130.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x305ba50 [0130.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0130.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0130.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0130.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0130.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0ac18 [0130.027] SetFilePointerEx (in: hFile=0x16c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.027] WriteFile (in: hFile=0x16c4, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x5d3feb0, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0x5d3feb0*=0x142, lpOverlapped=0x0) returned 1 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24f20 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50c60 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0130.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ba0) returned 1 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57e28 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0130.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0130.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0130.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f20) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x3e85f48 [0130.162] sprintf (in: _Dest=0x3e85f48, _Format="%c%c" | out: _Dest="b1") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f4a, _Format="%c%c" | out: _Dest="d4") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f4c, _Format="%c%c" | out: _Dest="d7") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f4e, _Format="%c%c" | out: _Dest="38") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f50, _Format="%c%c" | out: _Dest="29") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f52, _Format="%c%c" | out: _Dest="a1") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f54, _Format="%c%c" | out: _Dest="dd") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f56, _Format="%c%c" | out: _Dest="a7") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f58, _Format="%c%c" | out: _Dest="03") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f5a, _Format="%c%c" | out: _Dest="ee") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f5c, _Format="%c%c" | out: _Dest="22") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f5e, _Format="%c%c" | out: _Dest="1e") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f60, _Format="%c%c" | out: _Dest="99") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f62, _Format="%c%c" | out: _Dest="4d") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f64, _Format="%c%c" | out: _Dest="c4") returned 2 [0130.162] sprintf (in: _Dest=0x3e85f66, _Format="%c%c" | out: _Dest="ee") returned 2 [0130.162] RtlInitAnsiString (in: DestinationString=0x5d3fe38, SourceString="b1d4d73829a1dda703ee221e994dc4ee" | out: DestinationString="b1d4d73829a1dda703ee221e994dc4ee") [0130.162] RtlAnsiStringToUnicodeString (in: DestinationString=0x5d3fe30, SourceString="b1d4d73829a1dda703ee221e994dc4ee", AllocateDestinationString=1 | out: DestinationString="b1d4d73829a1dda703ee221e994dc4ee") returned 0x0 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e843a8 [0130.162] wcscat (in: _Dest=0x7a23d10, _Source="b1d4d738" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\b1d4d738") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\b1d4d738" [0130.162] wcscat (in: _Dest=0x7a23d10, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\b1d4d738.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\b1d4d738.68814f" [0130.162] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\b1d4d738.68814f", NtPathName=0x5d3fe28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\b1d4d738.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c180 [0130.163] NtSetInformationFile (FileHandle=0x16c4, IoStatusBlock=0x5d3fe30, FileInformation=0x3f3c180, Length=0x7c, FileInformationClass=0xa) returned 0x0 [0130.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0130.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a73108) returned 1 [0130.490] NtQueryInformationFile (in: FileHandle=0x16c4, IoStatusBlock=0x5d3fe00, FileInformation=0x5d3fe08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5d3fe00, FileInformation=0x5d3fe08) returned 0x0 [0130.490] NtSetInformationFile (FileHandle=0x16c4, IoStatusBlock=0x5d3fe00, FileInformation=0x5d3fe08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d10) returned 1 [0130.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e843a8) returned 1 [0130.497] FlushFileBuffers (hFile=0x16c4) returned 1 [0130.629] CloseHandle (hObject=0x16c4) returned 1 [0130.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f470 [0130.683] wcscpy (in: _Dest=0x3f3f470, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0130.683] wcscat (in: _Dest=0x3f3f470, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" [0130.683] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\68814f-readme.txt")) returned 0x20 [0130.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0130.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 Thread: id = 672 os_tid = 0x1250 [0125.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26d98 [0125.438] wcscpy (in: _Dest=0x7a26d98, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" [0125.438] wcscat (in: _Dest=0x7a26d98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0125.438] wcscat (in: _Dest=0x7a26d98, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\*") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\*" [0125.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0125.438] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x446fa1e0, ftCreationTime.dwHighDateTime=0x1d5db9e, ftLastAccessTime.dwLowDateTime=0x26674f80, ftLastAccessTime.dwHighDateTime=0x1d5defb, ftLastWriteTime.dwLowDateTime=0x26674f80, ftLastWriteTime.dwHighDateTime=0x1d5defb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e40 [0125.438] wcscmp (_String1=".", _String2=".") returned 0 [0125.438] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x446fa1e0, ftCreationTime.dwHighDateTime=0x1d5db9e, ftLastAccessTime.dwLowDateTime=0x26674f80, ftLastAccessTime.dwHighDateTime=0x1d5defb, ftLastWriteTime.dwLowDateTime=0x26674f80, ftLastWriteTime.dwHighDateTime=0x1d5defb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.444] wcscmp (_String1="..", _String2=".") returned 1 [0125.444] wcscmp (_String1="..", _String2="..") returned 0 [0125.444] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731ee4a0, ftCreationTime.dwHighDateTime=0x1d5e6f8, ftLastAccessTime.dwLowDateTime=0x5fd53b50, ftLastAccessTime.dwHighDateTime=0x1d5e154, ftLastWriteTime.dwLowDateTime=0x5fd53b50, ftLastWriteTime.dwHighDateTime=0x1d5e154, nFileSizeHigh=0x0, nFileSizeLow=0x14e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuwypP HJgMbd x7.odp", cAlternateFileName="AUWYPP~1.ODP")) returned 1 [0125.444] wcscmp (_String1="AuwypP HJgMbd x7.odp", _String2=".") returned 1 [0125.444] wcscmp (_String1="AuwypP HJgMbd x7.odp", _String2="..") returned 1 [0125.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5e50 [0125.444] wcscpy (in: _Dest=0x3eb5e50, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" [0125.444] wcscat (in: _Dest=0x3eb5e50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0125.445] wcscat (in: _Dest=0x3eb5e50, _Source="AuwypP HJgMbd x7.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\AuwypP HJgMbd x7.odp") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\AuwypP HJgMbd x7.odp" [0129.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0129.204] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca47e60, ftCreationTime.dwHighDateTime=0x1d5deef, ftLastAccessTime.dwLowDateTime=0xb9922d60, ftLastAccessTime.dwHighDateTime=0x1d5de5c, ftLastWriteTime.dwLowDateTime=0xb9922d60, ftLastWriteTime.dwHighDateTime=0x1d5de5c, nFileSizeHigh=0x0, nFileSizeLow=0x662b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bb2FqnIGSXrVjU6Pu.ppt", cAlternateFileName="BB2FQN~1.PPT")) returned 1 [0129.204] wcscmp (_String1="Bb2FqnIGSXrVjU6Pu.ppt", _String2=".") returned 1 [0129.204] wcscmp (_String1="Bb2FqnIGSXrVjU6Pu.ppt", _String2="..") returned 1 [0129.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb61e0 [0129.204] wcscpy (in: _Dest=0x3eb61e0, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" [0129.204] wcscat (in: _Dest=0x3eb61e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0129.204] wcscat (in: _Dest=0x3eb61e0, _Source="Bb2FqnIGSXrVjU6Pu.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\Bb2FqnIGSXrVjU6Pu.ppt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\Bb2FqnIGSXrVjU6Pu.ppt" [0129.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb61e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0129.206] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8aefc90, ftCreationTime.dwHighDateTime=0x1d5db52, ftLastAccessTime.dwLowDateTime=0xbe1c9770, ftLastAccessTime.dwHighDateTime=0x1d5da3e, ftLastWriteTime.dwLowDateTime=0xbe1c9770, ftLastWriteTime.dwHighDateTime=0x1d5da3e, nFileSizeHigh=0x0, nFileSizeLow=0xee85, dwReserved0=0x0, dwReserved1=0x0, cFileName="fiiQeUY_FSsPPoFf7.ppt", cAlternateFileName="FIIQEU~1.PPT")) returned 1 [0129.206] wcscmp (_String1="fiiQeUY_FSsPPoFf7.ppt", _String2=".") returned 1 [0129.206] wcscmp (_String1="fiiQeUY_FSsPPoFf7.ppt", _String2="..") returned 1 [0129.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb67d0 [0129.206] wcscpy (in: _Dest=0x3eb67d0, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" [0129.206] wcscat (in: _Dest=0x3eb67d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0129.206] wcscat (in: _Dest=0x3eb67d0, _Source="fiiQeUY_FSsPPoFf7.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\fiiQeUY_FSsPPoFf7.ppt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\fiiQeUY_FSsPPoFf7.ppt" [0129.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb67d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1964 [0129.208] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b87fa80, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0xc977cf0, ftLastAccessTime.dwHighDateTime=0x1d5e3e8, ftLastWriteTime.dwLowDateTime=0xc977cf0, ftLastWriteTime.dwHighDateTime=0x1d5e3e8, nFileSizeHigh=0x0, nFileSizeLow=0x789d, dwReserved0=0x0, dwReserved1=0x0, cFileName="kjpUZbzH8dC.pps", cAlternateFileName="KJPUZB~1.PPS")) returned 1 [0129.208] wcscmp (_String1="kjpUZbzH8dC.pps", _String2=".") returned 1 [0129.208] wcscmp (_String1="kjpUZbzH8dC.pps", _String2="..") returned 1 [0129.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d454a0 [0129.208] wcscpy (in: _Dest=0x3d454a0, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" [0129.208] wcscat (in: _Dest=0x3d454a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0129.208] wcscat (in: _Dest=0x3d454a0, _Source="kjpUZbzH8dC.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\kjpUZbzH8dC.pps") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\kjpUZbzH8dC.pps" [0129.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d454a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0129.211] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c45a20, ftCreationTime.dwHighDateTime=0x1d5e4d8, ftLastAccessTime.dwLowDateTime=0xd5f6ff0, ftLastAccessTime.dwHighDateTime=0x1d5e69d, ftLastWriteTime.dwLowDateTime=0xd5f6ff0, ftLastWriteTime.dwHighDateTime=0x1d5e69d, nFileSizeHigh=0x0, nFileSizeLow=0xc901, dwReserved0=0x0, dwReserved1=0x0, cFileName="QJUW TFKNDy.pptx", cAlternateFileName="QJUWTF~1.PPT")) returned 1 [0129.211] wcscmp (_String1="QJUW TFKNDy.pptx", _String2=".") returned 1 [0129.211] wcscmp (_String1="QJUW TFKNDy.pptx", _String2="..") returned 1 [0129.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45380 [0129.211] wcscpy (in: _Dest=0x3d45380, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8" [0129.211] wcscat (in: _Dest=0x3d45380, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0129.211] wcscat (in: _Dest=0x3d45380, _Source="QJUW TFKNDy.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\QJUW TFKNDy.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\QJUW TFKNDy.pptx" [0129.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0129.213] FindNextFileW (in: hFindFile=0x3066e40, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c45a20, ftCreationTime.dwHighDateTime=0x1d5e4d8, ftLastAccessTime.dwLowDateTime=0xd5f6ff0, ftLastAccessTime.dwHighDateTime=0x1d5e69d, ftLastWriteTime.dwLowDateTime=0xd5f6ff0, ftLastWriteTime.dwHighDateTime=0x1d5e69d, nFileSizeHigh=0x0, nFileSizeLow=0xc901, dwReserved0=0x0, dwReserved1=0x0, cFileName="QJUW TFKNDy.pptx", cAlternateFileName="QJUWTF~1.PPT")) returned 0 [0129.213] FindClose (in: hFindFile=0x3066e40 | out: hFindFile=0x3066e40) returned 1 [0129.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0129.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26d98) returned 1 [0129.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26008) returned 1 Thread: id = 673 os_tid = 0x1254 [0125.445] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\gGxd.ppt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\ggxd.ppt")) returned 0x20 [0125.445] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\gGxd.ppt", dwFileAttributes=0x20) returned 1 [0126.653] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\gGxd.ppt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\ggxd.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16cc [0126.653] GetFileSizeEx (in: hFile=0x16cc, lpFileSize=0x5bbfaec | out: lpFileSize=0x5bbfaec*=3567) returned 1 [0126.653] SetFilePointerEx (in: hFile=0x16cc, liDistanceToMove=0xdeb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.653] ReadFile (in: hFile=0x16cc, lpBuffer=0x5bbfac8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5bbfad8, lpOverlapped=0x0 | out: lpBuffer=0x5bbfac8*, lpNumberOfBytesRead=0x5bbfad8*=0x4, lpOverlapped=0x0) returned 1 [0126.655] SetFilePointerEx (in: hFile=0x16cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0126.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c90 [0126.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c68 [0126.655] NtQuerySystemTime (in: CurrentTime=0x5bbfa60 | out: CurrentTime=0x5bbfa60*=132462177060468000) returned 0x0 [0126.655] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x3f5602df [0126.655] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x75e7ad9c [0126.655] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x21c2e9a2 [0126.655] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0xcd7437d [0126.655] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0xdb689ed [0126.655] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x217b44d4 [0126.655] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x13d82ba2 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x706dcb57 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x2e7466a4 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x7c27275f [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0xbf3cc0d [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x4b82aa7a [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x46d9b43b [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x4ab41c45 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x16b029df [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x167ab3f7 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x14d6d1bb [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x68660b08 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x1cb3262 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x7c630c9a [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x3f54f6f [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0xa06f684 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x316f837c [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x7f9fae47 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x29d53a4f [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x1bd913ff [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x553ee00b [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x734bc8d0 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x70c2dad2 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x64796f04 [0126.656] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x27e1616b [0126.657] RtlRandomEx (in: Seed=0x5bbfa58 | out: Seed=0x5bbfa58) returned 0x7411dddf [0126.669] ReadFile (in: hFile=0x16cc, lpBuffer=0x7b53778, nNumberOfBytesToRead=0xdef, lpNumberOfBytesRead=0x5bbfa54, lpOverlapped=0x0 | out: lpBuffer=0x7b53778*, lpNumberOfBytesRead=0x5bbfa54*=0xdef, lpOverlapped=0x0) returned 1 [0126.669] SetFilePointerEx (in: hFile=0x16cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.670] WriteFile (in: hFile=0x16cc, lpBuffer=0x7b57380*, nNumberOfBytesToWrite=0xdef, lpNumberOfBytesWritten=0x5bbfa58, lpOverlapped=0x0 | out: lpBuffer=0x7b57380*, lpNumberOfBytesWritten=0x5bbfa58*=0xdef, lpOverlapped=0x0) returned 1 [0130.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0130.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0130.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0130.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b57380) returned 1 [0130.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b53778) returned 1 [0130.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0130.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x305cc48 [0130.020] SetFilePointerEx (in: hFile=0x16cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.020] WriteFile (in: hFile=0x16cc, lpBuffer=0x300dfd8*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x5bbfae0, lpOverlapped=0x0 | out: lpBuffer=0x300dfd8*, lpNumberOfBytesWritten=0x5bbfae0*=0x102, lpOverlapped=0x0) returned 1 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24f20 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50c60 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ec0 [0130.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ec0) returned 1 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57e28 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ec0 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ee8 [0130.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ee8) returned 1 [0130.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0130.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f20) returned 1 [0130.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x3e85f48 [0130.157] sprintf (in: _Dest=0x3e85f48, _Format="%c%c" | out: _Dest="5e") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f4a, _Format="%c%c" | out: _Dest="db") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f4c, _Format="%c%c" | out: _Dest="17") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f4e, _Format="%c%c" | out: _Dest="7a") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f50, _Format="%c%c" | out: _Dest="4c") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f52, _Format="%c%c" | out: _Dest="5d") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f54, _Format="%c%c" | out: _Dest="37") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f56, _Format="%c%c" | out: _Dest="36") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f58, _Format="%c%c" | out: _Dest="a3") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f5a, _Format="%c%c" | out: _Dest="5c") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f5c, _Format="%c%c" | out: _Dest="30") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f5e, _Format="%c%c" | out: _Dest="76") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f60, _Format="%c%c" | out: _Dest="69") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f62, _Format="%c%c" | out: _Dest="15") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f64, _Format="%c%c" | out: _Dest="88") returned 2 [0130.158] sprintf (in: _Dest=0x3e85f66, _Format="%c%c" | out: _Dest="f8") returned 2 [0130.158] RtlInitAnsiString (in: DestinationString=0x5bbfa68, SourceString="5edb177a4c5d3736a35c3076691588f8" | out: DestinationString="5edb177a4c5d3736a35c3076691588f8") [0130.158] RtlAnsiStringToUnicodeString (in: DestinationString=0x5bbfa60, SourceString="5edb177a4c5d3736a35c3076691588f8", AllocateDestinationString=1 | out: DestinationString="5edb177a4c5d3736a35c3076691588f8") returned 0x0 [0130.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e844e8 [0130.158] wcscat (in: _Dest=0x7a23c30, _Source="5edb177a" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\5edb177a") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\5edb177a" [0130.158] wcscat (in: _Dest=0x7a23c30, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\5edb177a.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\5edb177a.68814f" [0130.158] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\5edb177a.68814f", NtPathName=0x5bbfa58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\5edb177a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bed8 [0130.158] NtSetInformationFile (FileHandle=0x16cc, IoStatusBlock=0x5bbfa60, FileInformation=0x3f3bed8, Length=0x7c, FileInformationClass=0xa) returned 0x0 [0130.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 [0130.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a41518) returned 1 [0130.498] NtQueryInformationFile (in: FileHandle=0x16cc, IoStatusBlock=0x5bbfa30, FileInformation=0x5bbfa38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5bbfa30, FileInformation=0x5bbfa38) returned 0x0 [0130.498] NtSetInformationFile (FileHandle=0x16cc, IoStatusBlock=0x5bbfa30, FileInformation=0x5bbfa38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23c30) returned 1 [0130.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e844e8) returned 1 [0130.500] FlushFileBuffers (hFile=0x16cc) returned 1 [0130.704] CloseHandle (hObject=0x16cc) returned 1 [0130.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f470 [0130.705] wcscpy (in: _Dest=0x3f3f470, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0130.705] wcscat (in: _Dest=0x3f3f470, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" [0130.705] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\68814f-readme.txt")) returned 0x20 [0130.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0130.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 Thread: id = 674 os_tid = 0x1258 [0125.446] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\iskpn-oaeg.doc")) returned 0x20 [0125.446] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc", dwFileAttributes=0x20) returned 1 [0126.670] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\iskpn-oaeg.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d0 [0126.670] GetFileSizeEx (in: hFile=0x16d0, lpFileSize=0x798fdd4 | out: lpFileSize=0x798fdd4*=17008) returned 1 [0126.670] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x426c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.670] ReadFile (in: hFile=0x16d0, lpBuffer=0x798fdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x798fdc0, lpOverlapped=0x0 | out: lpBuffer=0x798fdb0*, lpNumberOfBytesRead=0x798fdc0*=0x4, lpOverlapped=0x0) returned 1 [0126.672] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0126.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c68 [0126.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bf0 [0126.672] NtQuerySystemTime (in: CurrentTime=0x798fd48 | out: CurrentTime=0x798fd48*=132462177060624000) returned 0x0 [0126.672] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x270dfd01 [0126.672] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x639392bf [0126.672] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x4743ff4b [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x3bbd826b [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x7d742470 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x4f888d98 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x3e4ba786 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x3aad2c7e [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x38166b3d [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x21edc262 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0xf8f178d [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x6f5f49b2 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x3fe33944 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x600320a0 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x2cc46e2 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x6feaedf0 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x7acc81ff [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x40945683 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x120222d7 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x27b334f7 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x2147382a [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x438fd223 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x74a325ab [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x7421035e [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x4d38c529 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0xabc97d2 [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x12455fdd [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x5fe174dc [0126.673] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x618971b [0126.674] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x350a7dca [0126.674] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x453f3b04 [0126.674] RtlRandomEx (in: Seed=0x798fd40 | out: Seed=0x798fd40) returned 0x393eb16e [0126.683] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.683] ReadFile (in: hFile=0x16d0, lpBuffer=0x7b5af88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x798fd48, lpOverlapped=0x0 | out: lpBuffer=0x7b5af88*, lpNumberOfBytesRead=0x798fd48*=0x3c00, lpOverlapped=0x0) returned 1 [0126.683] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e079f8 [0126.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x349128 [0126.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0126.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d08) returned 1 [0126.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5eb90 [0126.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0126.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bf0 [0126.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bf0) returned 1 [0126.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x349128) returned 1 [0126.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e079f8) returned 1 [0126.684] WriteFile (in: hFile=0x16d0, lpBuffer=0x7b5eb90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x798fd48, lpOverlapped=0x0 | out: lpBuffer=0x7b5eb90*, lpNumberOfBytesWritten=0x798fd48*=0x3c00, lpOverlapped=0x0) returned 1 [0130.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5eb90) returned 1 [0130.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5af88) returned 1 [0130.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e15b78 [0130.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0130.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e15b40 [0130.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0130.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0130.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0130.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0130.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x300da60 [0130.025] SetFilePointerEx (in: hFile=0x16d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.026] WriteFile (in: hFile=0x16d0, lpBuffer=0x300da60*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x798fdc8, lpOverlapped=0x0 | out: lpBuffer=0x300da60*, lpNumberOfBytesWritten=0x798fdc8*=0x10e, lpOverlapped=0x0) returned 1 [0130.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300da60) returned 1 [0130.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15b40) returned 1 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15b78) returned 1 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d08) returned 1 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c68) returned 1 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0130.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ba0) returned 1 [0130.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a198 [0130.160] wcscpy (in: _Dest=0x3e1a198, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc" [0130.160] wcscat (in: _Dest=0x3e1a198, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc.68814f" [0130.160] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc.68814f", NtPathName=0x798fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\IsKPN-OAEg.doc.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45650 [0130.160] NtSetInformationFile (FileHandle=0x16d0, IoStatusBlock=0x798fd48, FileInformation=0x3d45650, Length=0x88, FileInformationClass=0xa) returned 0x0 [0130.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 [0130.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a739a8) returned 1 [0130.489] NtQueryInformationFile (in: FileHandle=0x16d0, IoStatusBlock=0x798fd18, FileInformation=0x798fd20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x798fd18, FileInformation=0x798fd20) returned 0x0 [0130.489] NtSetInformationFile (FileHandle=0x16d0, IoStatusBlock=0x798fd18, FileInformation=0x798fd20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a198) returned 1 [0130.491] FlushFileBuffers (hFile=0x16d0) returned 1 [0130.583] CloseHandle (hObject=0x16d0) returned 1 [0130.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3df68 [0130.599] wcscpy (in: _Dest=0x3f3df68, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0130.599] wcscat (in: _Dest=0x3f3df68, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" [0130.599] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\68814f-readme.txt")) returned 0x20 [0130.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0130.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26078) returned 1 Thread: id = 675 os_tid = 0x125c [0125.446] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\P9qZbsB3z_N.pptx" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\p9qzbsb3z_n.pptx")) returned 0x20 [0125.446] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\P9qZbsB3z_N.pptx", dwFileAttributes=0x20) returned 1 [0126.685] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\P9qZbsB3z_N.pptx" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\p9qzbsb3z_n.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d4 [0126.685] GetFileSizeEx (in: hFile=0x16d4, lpFileSize=0x941fc5c | out: lpFileSize=0x941fc5c*=92983) returned 1 [0126.685] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x16b33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.685] ReadFile (in: hFile=0x16d4, lpBuffer=0x941fc38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x941fc48, lpOverlapped=0x0 | out: lpBuffer=0x941fc38*, lpNumberOfBytesRead=0x941fc48*=0x4, lpOverlapped=0x0) returned 1 [0126.687] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bf0 [0126.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0126.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b28 [0126.687] NtQuerySystemTime (in: CurrentTime=0x941fbd0 | out: CurrentTime=0x941fbd0*=132462177060780000) returned 0x0 [0126.687] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x208e448e [0126.687] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x129cf98 [0126.687] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x1bf742e0 [0126.687] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x5a1ed214 [0126.687] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x74994a5d [0126.687] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x57c00a31 [0126.687] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x13c93431 [0126.687] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x2dd775f9 [0126.687] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x4225c83e [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x63bf5586 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x1847b396 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x669cd35d [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x4b15394 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x42921cd0 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x2515b2b5 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x7591ea84 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x1c28a5ff [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x36f50271 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x560a620b [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x1bb02af4 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x2b545737 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x35bec60b [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x31fa7f49 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x1943ef2 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x6b0f6713 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x63ac3dbe [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x340ec806 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x28dba6d8 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x5e8c8289 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x35ff2dc3 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x2b4c4501 [0126.688] RtlRandomEx (in: Seed=0x941fbc8 | out: Seed=0x941fbc8) returned 0x21fdbde0 [0126.701] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.701] ReadFile (in: hFile=0x16d4, lpBuffer=0x7b62798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x941fbd0, lpOverlapped=0x0 | out: lpBuffer=0x7b62798*, lpNumberOfBytesRead=0x941fbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0126.701] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e079f8 [0126.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x349128 [0126.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bf0 [0126.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bf0) returned 1 [0126.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b663a0 [0126.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bf0 [0126.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b28 [0126.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b28) returned 1 [0126.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x349128) returned 1 [0126.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e079f8) returned 1 [0126.702] WriteFile (in: hFile=0x16d4, lpBuffer=0x7b663a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x941fbd0, lpOverlapped=0x0 | out: lpBuffer=0x7b663a0*, lpNumberOfBytesWritten=0x941fbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0130.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b663a0) returned 1 [0130.030] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.030] ReadFile (in: hFile=0x16d4, lpBuffer=0x7b62798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x941fbd0, lpOverlapped=0x0 | out: lpBuffer=0x7b62798*, lpNumberOfBytesRead=0x941fbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0130.030] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0130.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0130.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0130.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0130.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b663a0 [0130.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0130.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537b0 [0130.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e537b0) returned 1 [0130.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0130.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.031] WriteFile (in: hFile=0x16d4, lpBuffer=0x7b663a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x941fbd0, lpOverlapped=0x0 | out: lpBuffer=0x7b663a0*, lpNumberOfBytesWritten=0x941fbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0130.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b663a0) returned 1 [0130.035] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x12f37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.035] ReadFile (in: hFile=0x16d4, lpBuffer=0x7b62798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x941fbd0, lpOverlapped=0x0 | out: lpBuffer=0x7b62798*, lpNumberOfBytesRead=0x941fbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0130.036] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x12f37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x2ff00e8 [0130.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0130.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0130.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52360) returned 1 [0130.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b663a0 [0130.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0130.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e526f8 [0130.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e526f8) returned 1 [0130.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0130.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff00e8) returned 1 [0130.037] WriteFile (in: hFile=0x16d4, lpBuffer=0x7b663a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x941fbd0, lpOverlapped=0x0 | out: lpBuffer=0x7b663a0*, lpNumberOfBytesWritten=0x941fbd0*=0x3c00, lpOverlapped=0x0) returned 1 [0130.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b663a0) returned 1 [0130.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e20400 [0130.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bf0) returned 1 [0130.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x2bfa28 [0130.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bf0 [0130.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0130.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52360) returned 1 [0130.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0130.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff00e8) returned 1 [0130.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x152) returned 0x3dcdfa0 [0130.040] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.041] WriteFile (in: hFile=0x16d4, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x941fc50, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0x941fc50*=0x152, lpOverlapped=0x0) returned 1 [0130.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50c60 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40f0 [0130.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40f0) returned 1 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40f0 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4078 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39e8 [0130.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39e8) returned 1 [0130.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0130.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e842b8 [0130.169] sprintf (in: _Dest=0x3e842b8, _Format="%c%c" | out: _Dest="91") returned 2 [0130.169] sprintf (in: _Dest=0x3e842ba, _Format="%c%c" | out: _Dest="4a") returned 2 [0130.169] sprintf (in: _Dest=0x3e842bc, _Format="%c%c" | out: _Dest="9e") returned 2 [0130.169] sprintf (in: _Dest=0x3e842be, _Format="%c%c" | out: _Dest="0b") returned 2 [0130.169] sprintf (in: _Dest=0x3e842c0, _Format="%c%c" | out: _Dest="c6") returned 2 [0130.169] sprintf (in: _Dest=0x3e842c2, _Format="%c%c" | out: _Dest="52") returned 2 [0130.169] sprintf (in: _Dest=0x3e842c4, _Format="%c%c" | out: _Dest="00") returned 2 [0130.169] sprintf (in: _Dest=0x3e842c6, _Format="%c%c" | out: _Dest="f8") returned 2 [0130.169] sprintf (in: _Dest=0x3e842c8, _Format="%c%c" | out: _Dest="7d") returned 2 [0130.169] sprintf (in: _Dest=0x3e842ca, _Format="%c%c" | out: _Dest="3b") returned 2 [0130.169] sprintf (in: _Dest=0x3e842cc, _Format="%c%c" | out: _Dest="bf") returned 2 [0130.169] sprintf (in: _Dest=0x3e842ce, _Format="%c%c" | out: _Dest="71") returned 2 [0130.169] sprintf (in: _Dest=0x3e842d0, _Format="%c%c" | out: _Dest="16") returned 2 [0130.169] sprintf (in: _Dest=0x3e842d2, _Format="%c%c" | out: _Dest="15") returned 2 [0130.169] sprintf (in: _Dest=0x3e842d4, _Format="%c%c" | out: _Dest="b8") returned 2 [0130.170] sprintf (in: _Dest=0x3e842d6, _Format="%c%c" | out: _Dest="84") returned 2 [0130.170] sprintf (in: _Dest=0x3e842d8, _Format="%c%c" | out: _Dest="03") returned 2 [0130.170] sprintf (in: _Dest=0x3e842da, _Format="%c%c" | out: _Dest="49") returned 2 [0130.170] sprintf (in: _Dest=0x3e842dc, _Format="%c%c" | out: _Dest="87") returned 2 [0130.170] sprintf (in: _Dest=0x3e842de, _Format="%c%c" | out: _Dest="2d") returned 2 [0130.170] sprintf (in: _Dest=0x3e842e0, _Format="%c%c" | out: _Dest="75") returned 2 [0130.170] sprintf (in: _Dest=0x3e842e2, _Format="%c%c" | out: _Dest="ed") returned 2 [0130.170] sprintf (in: _Dest=0x3e842e4, _Format="%c%c" | out: _Dest="d8") returned 2 [0130.170] sprintf (in: _Dest=0x3e842e6, _Format="%c%c" | out: _Dest="d2") returned 2 [0130.170] sprintf (in: _Dest=0x3e842e8, _Format="%c%c" | out: _Dest="34") returned 2 [0130.170] sprintf (in: _Dest=0x3e842ea, _Format="%c%c" | out: _Dest="73") returned 2 [0130.170] sprintf (in: _Dest=0x3e842ec, _Format="%c%c" | out: _Dest="f4") returned 2 [0130.170] sprintf (in: _Dest=0x3e842ee, _Format="%c%c" | out: _Dest="e1") returned 2 [0130.170] sprintf (in: _Dest=0x3e842f0, _Format="%c%c" | out: _Dest="11") returned 2 [0130.170] sprintf (in: _Dest=0x3e842f2, _Format="%c%c" | out: _Dest="15") returned 2 [0130.170] sprintf (in: _Dest=0x3e842f4, _Format="%c%c" | out: _Dest="c6") returned 2 [0130.170] sprintf (in: _Dest=0x3e842f6, _Format="%c%c" | out: _Dest="61") returned 2 [0130.170] RtlInitAnsiString (in: DestinationString=0x941fbd8, SourceString="914a9e0bc65200f87d3bbf711615b8840349872d75edd8d23473f4e11115c661" | out: DestinationString="914a9e0bc65200f87d3bbf711615b8840349872d75edd8d23473f4e11115c661") [0130.170] RtlAnsiStringToUnicodeString (in: DestinationString=0x941fbd0, SourceString="914a9e0bc65200f87d3bbf711615b8840349872d75edd8d23473f4e11115c661", AllocateDestinationString=1 | out: DestinationString="914a9e0bc65200f87d3bbf711615b8840349872d75edd8d23473f4e11115c661") returned 0x0 [0130.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45890 [0130.170] wcscat (in: _Dest=0x3e19b18, _Source="914a9e0bc65200f8" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\914a9e0bc65200f8") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\914a9e0bc65200f8" [0130.170] wcscat (in: _Dest=0x3e19b18, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\914a9e0bc65200f8.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\914a9e0bc65200f8.68814f" [0130.170] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\914a9e0bc65200f8.68814f", NtPathName=0x941fbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\914a9e0bc65200f8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0130.170] NtSetInformationFile (FileHandle=0x16d4, IoStatusBlock=0x941fbd0, FileInformation=0x3eb5d20, Length=0x8c, FileInformationClass=0xa) returned 0x0 [0130.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0130.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a71b78) returned 1 [0130.493] NtQueryInformationFile (in: FileHandle=0x16d4, IoStatusBlock=0x941fba0, FileInformation=0x941fba8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x941fba0, FileInformation=0x941fba8) returned 0x0 [0130.493] NtSetInformationFile (FileHandle=0x16d4, IoStatusBlock=0x941fba0, FileInformation=0x941fba8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b18) returned 1 [0130.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45890) returned 1 [0130.496] FlushFileBuffers (hFile=0x16d4) returned 1 [0130.629] CloseHandle (hObject=0x16d4) returned 1 [0130.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e850 [0130.637] wcscpy (in: _Dest=0x3f3e850, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0130.637] wcscat (in: _Dest=0x3f3e850, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" [0130.637] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\68814f-readme.txt")) returned 0x20 [0130.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0130.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a268c8) returned 1 Thread: id = 676 os_tid = 0x1260 [0125.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0788 [0125.447] wcscpy (in: _Dest=0x3ee0788, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok" [0125.447] wcscat (in: _Dest=0x3ee0788, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\" [0125.447] wcscat (in: _Dest=0x3ee0788, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\*") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\*" [0125.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0125.447] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce2d190, ftCreationTime.dwHighDateTime=0x1d5e6b8, ftLastAccessTime.dwLowDateTime=0x60f0f770, ftLastAccessTime.dwHighDateTime=0x1d5dc65, ftLastWriteTime.dwLowDateTime=0x60f0f770, ftLastWriteTime.dwHighDateTime=0x1d5dc65, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e80 [0125.447] wcscmp (_String1=".", _String2=".") returned 0 [0125.448] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce2d190, ftCreationTime.dwHighDateTime=0x1d5e6b8, ftLastAccessTime.dwLowDateTime=0x60f0f770, ftLastAccessTime.dwHighDateTime=0x1d5dc65, ftLastWriteTime.dwLowDateTime=0x60f0f770, ftLastWriteTime.dwHighDateTime=0x1d5dc65, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.448] wcscmp (_String1="..", _String2=".") returned 1 [0125.448] wcscmp (_String1="..", _String2="..") returned 0 [0125.448] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d8b9150, ftCreationTime.dwHighDateTime=0x1d5db45, ftLastAccessTime.dwLowDateTime=0x8d1a7f60, ftLastAccessTime.dwHighDateTime=0x1d5da3a, ftLastWriteTime.dwLowDateTime=0x8d1a7f60, ftLastWriteTime.dwHighDateTime=0x1d5da3a, nFileSizeHigh=0x0, nFileSizeLow=0x39b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="f-v_S.doc", cAlternateFileName="")) returned 1 [0125.448] wcscmp (_String1="f-v_S.doc", _String2=".") returned 1 [0125.448] wcscmp (_String1="f-v_S.doc", _String2="..") returned 1 [0125.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e069e0 [0125.448] wcscpy (in: _Dest=0x3e069e0, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok" [0125.448] wcscat (in: _Dest=0x3e069e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\" [0125.448] wcscat (in: _Dest=0x3e069e0, _Source="f-v_S.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc" [0136.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e069e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0136.488] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27894990, ftCreationTime.dwHighDateTime=0x1d5e446, ftLastAccessTime.dwLowDateTime=0x723a2740, ftLastAccessTime.dwHighDateTime=0x1d5de63, ftLastWriteTime.dwLowDateTime=0x723a2740, ftLastWriteTime.dwHighDateTime=0x1d5de63, nFileSizeHigh=0x0, nFileSizeLow=0x1527e, dwReserved0=0x0, dwReserved1=0x0, cFileName="hNC8.ppt", cAlternateFileName="")) returned 1 [0136.488] wcscmp (_String1="hNC8.ppt", _String2=".") returned 1 [0136.488] wcscmp (_String1="hNC8.ppt", _String2="..") returned 1 [0136.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015238 [0136.488] wcscpy (in: _Dest=0x3015238, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok" [0136.488] wcscat (in: _Dest=0x3015238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\" [0136.488] wcscat (in: _Dest=0x3015238, _Source="hNC8.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\hNC8.ppt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\hNC8.ppt" [0136.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3015238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0136.489] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7d1c00, ftCreationTime.dwHighDateTime=0x1d5dbc0, ftLastAccessTime.dwLowDateTime=0x6f110280, ftLastAccessTime.dwHighDateTime=0x1d5e6c1, ftLastWriteTime.dwLowDateTime=0x6f110280, ftLastWriteTime.dwHighDateTime=0x1d5e6c1, nFileSizeHigh=0x0, nFileSizeLow=0x9293, dwReserved0=0x0, dwReserved1=0x0, cFileName="nYKyr_VCw.ots", cAlternateFileName="NYKYR_~1.OTS")) returned 1 [0136.489] wcscmp (_String1="nYKyr_VCw.ots", _String2=".") returned 1 [0136.489] wcscmp (_String1="nYKyr_VCw.ots", _String2="..") returned 1 [0136.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19418 [0136.489] wcscpy (in: _Dest=0x3e19418, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok" [0136.489] wcscat (in: _Dest=0x3e19418, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\" [0136.490] wcscat (in: _Dest=0x3e19418, _Source="nYKyr_VCw.ots" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\nYKyr_VCw.ots") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\nYKyr_VCw.ots" [0136.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0136.491] FindNextFileW (in: hFindFile=0x3066e80, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7d1c00, ftCreationTime.dwHighDateTime=0x1d5dbc0, ftLastAccessTime.dwLowDateTime=0x6f110280, ftLastAccessTime.dwHighDateTime=0x1d5e6c1, ftLastWriteTime.dwLowDateTime=0x6f110280, ftLastWriteTime.dwHighDateTime=0x1d5e6c1, nFileSizeHigh=0x0, nFileSizeLow=0x9293, dwReserved0=0x0, dwReserved1=0x0, cFileName="nYKyr_VCw.ots", cAlternateFileName="NYKYR_~1.OTS")) returned 0 [0136.491] FindClose (in: hFindFile=0x3066e80 | out: hFindFile=0x3066e80) returned 1 [0136.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0136.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0788) returned 1 [0136.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 Thread: id = 677 os_tid = 0x1264 [0125.449] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\UBRRjIwQ.pptx" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\ubrrjiwq.pptx")) returned 0x20 [0125.449] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\UBRRjIwQ.pptx", dwFileAttributes=0x20) returned 1 [0126.767] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\UBRRjIwQ.pptx" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\ubrrjiwq.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16dc [0126.767] GetFileSizeEx (in: hFile=0x16dc, lpFileSize=0x97ffab4 | out: lpFileSize=0x97ffab4*=3540) returned 1 [0126.767] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0xdd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.767] ReadFile (in: hFile=0x16dc, lpBuffer=0x97ffa90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x97ffaa0, lpOverlapped=0x0 | out: lpBuffer=0x97ffa90*, lpNumberOfBytesRead=0x97ffaa0*=0x4, lpOverlapped=0x0) returned 1 [0126.769] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0126.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0126.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0126.770] NtQuerySystemTime (in: CurrentTime=0x97ffa28 | out: CurrentTime=0x97ffa28*=132462177061560000) returned 0x0 [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x22c5d3ca [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x330626dd [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x3ebd52fe [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x2bb93df0 [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x3dea2250 [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x32c7de50 [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x4f2d38f6 [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x45432788 [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x5f4f2e34 [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x49d11ad2 [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x1e231978 [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0xa89ba0b [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x4a88dc6e [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x6ed1fe6c [0126.770] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x23721aff [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x7a5cdc50 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x65788212 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0xe171b8b [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x3490f4b5 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x26449944 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x5910a52e [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x6c5beb4 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x67143411 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x3c2b1675 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x7d9c07a1 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x4af55f34 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x61869801 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x524cdb9b [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x4c54716c [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x637dad57 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x3dfef563 [0126.771] RtlRandomEx (in: Seed=0x97ffa20 | out: Seed=0x97ffa20) returned 0x177f1341 [0126.784] ReadFile (in: hFile=0x16dc, lpBuffer=0x7b88360, nNumberOfBytesToRead=0xdd4, lpNumberOfBytesRead=0x97ffa1c, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesRead=0x97ffa1c*=0xdd4, lpOverlapped=0x0) returned 1 [0126.784] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.784] WriteFile (in: hFile=0x16dc, lpBuffer=0x7b8bf68*, nNumberOfBytesToWrite=0xdd4, lpNumberOfBytesWritten=0x97ffa20, lpOverlapped=0x0 | out: lpBuffer=0x7b8bf68*, lpNumberOfBytesWritten=0x97ffa20*=0xdd4, lpOverlapped=0x0) returned 1 [0127.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0127.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f40 [0127.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f40) returned 1 [0127.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0127.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0127.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0127.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x301080) returned 1 [0127.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85d68 [0127.292] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.292] WriteFile (in: hFile=0x16dc, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x97ffaa8, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0x97ffaa8*=0x10c, lpOverlapped=0x0) returned 1 [0127.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07800 [0127.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0127.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0127.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5db0) returned 1 [0127.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5db0 [0127.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0127.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0127.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4140) returned 1 [0127.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0127.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0127.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfa90 [0127.756] sprintf (in: _Dest=0x3dcfa90, _Format="%c%c" | out: _Dest="da") returned 2 [0127.756] sprintf (in: _Dest=0x3dcfa92, _Format="%c%c" | out: _Dest="0a") returned 2 [0127.756] sprintf (in: _Dest=0x3dcfa94, _Format="%c%c" | out: _Dest="d9") returned 2 [0127.756] sprintf (in: _Dest=0x3dcfa96, _Format="%c%c" | out: _Dest="40") returned 2 [0127.756] sprintf (in: _Dest=0x3dcfa98, _Format="%c%c" | out: _Dest="4c") returned 2 [0127.756] sprintf (in: _Dest=0x3dcfa9a, _Format="%c%c" | out: _Dest="a1") returned 2 [0127.756] sprintf (in: _Dest=0x3dcfa9c, _Format="%c%c" | out: _Dest="dc") returned 2 [0127.756] sprintf (in: _Dest=0x3dcfa9e, _Format="%c%c" | out: _Dest="18") returned 2 [0127.756] sprintf (in: _Dest=0x3dcfaa0, _Format="%c%c" | out: _Dest="ca") returned 2 [0127.756] sprintf (in: _Dest=0x3dcfaa2, _Format="%c%c" | out: _Dest="e5") returned 2 [0127.756] sprintf (in: _Dest=0x3dcfaa4, _Format="%c%c" | out: _Dest="bb") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfaa6, _Format="%c%c" | out: _Dest="ad") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfaa8, _Format="%c%c" | out: _Dest="21") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfaaa, _Format="%c%c" | out: _Dest="dc") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfaac, _Format="%c%c" | out: _Dest="f8") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfaae, _Format="%c%c" | out: _Dest="8e") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfab0, _Format="%c%c" | out: _Dest="11") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfab2, _Format="%c%c" | out: _Dest="5f") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfab4, _Format="%c%c" | out: _Dest="48") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfab6, _Format="%c%c" | out: _Dest="fd") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfab8, _Format="%c%c" | out: _Dest="c6") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfaba, _Format="%c%c" | out: _Dest="28") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfabc, _Format="%c%c" | out: _Dest="41") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfabe, _Format="%c%c" | out: _Dest="13") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfac0, _Format="%c%c" | out: _Dest="9c") returned 2 [0127.757] sprintf (in: _Dest=0x3dcfac2, _Format="%c%c" | out: _Dest="7a") returned 2 [0127.757] RtlInitAnsiString (in: DestinationString=0x97ffa30, SourceString="da0ad9404ca1dc18cae5bbad21dcf88e115f48fdc62841139c7a" | out: DestinationString="da0ad9404ca1dc18cae5bbad21dcf88e115f48fdc62841139c7a") [0127.757] RtlAnsiStringToUnicodeString (in: DestinationString=0x97ffa28, SourceString="da0ad9404ca1dc18cae5bbad21dcf88e115f48fdc62841139c7a", AllocateDestinationString=1 | out: DestinationString="da0ad9404ca1dc18cae5bbad21dcf88e115f48fdc62841139c7a") returned 0x0 [0127.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e760 [0127.758] wcscat (in: _Dest=0x3f3e6e8, _Source="da0ad9404ca1d" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\da0ad9404ca1d") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\da0ad9404ca1d" [0127.758] wcscat (in: _Dest=0x3f3e6e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\da0ad9404ca1d.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\da0ad9404ca1d.68814f" [0127.758] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\da0ad9404ca1d.68814f", NtPathName=0x97ffa20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\da0ad9404ca1d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d456e0 [0127.758] NtSetInformationFile (FileHandle=0x16dc, IoStatusBlock=0x97ffa28, FileInformation=0x3d456e0, Length=0x86, FileInformationClass=0xa) returned 0x0 [0127.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d456e0) returned 1 [0127.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01d90) returned 1 [0127.872] NtQueryInformationFile (in: FileHandle=0x16dc, IoStatusBlock=0x97ff9f8, FileInformation=0x97ffa00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x97ff9f8, FileInformation=0x97ffa00) returned 0x0 [0127.872] NtSetInformationFile (FileHandle=0x16dc, IoStatusBlock=0x97ff9f8, FileInformation=0x97ffa00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0127.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0127.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0127.946] FlushFileBuffers (hFile=0x16dc) returned 1 [0127.950] CloseHandle (hObject=0x16dc) returned 1 [0127.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e760 [0127.966] wcscpy (in: _Dest=0x3f3e760, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0127.966] wcscat (in: _Dest=0x3f3e760, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" [0127.966] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\68814f-readme.txt")) returned 0xffffffff [0127.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1520 [0127.982] WriteFile (in: hFile=0x1520, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x97ffa3c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x97ffa3c*=0x8b9, lpOverlapped=0x0) returned 1 [0128.002] CloseHandle (hObject=0x1520) returned 1 [0128.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0128.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26938) returned 1 Thread: id = 678 os_tid = 0x1268 [0125.449] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\ZHbAH1CVyiJ.csv" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\zhbah1cvyij.csv")) returned 0x20 [0125.449] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\ZHbAH1CVyiJ.csv", dwFileAttributes=0x20) returned 1 [0126.785] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\ZHbAH1CVyiJ.csv" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\zhbah1cvyij.csv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e0 [0126.785] GetFileSizeEx (in: hFile=0x16e0, lpFileSize=0x5e4f974 | out: lpFileSize=0x5e4f974*=43029) returned 1 [0126.785] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0xa811, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.785] ReadFile (in: hFile=0x16e0, lpBuffer=0x5e4f950, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5e4f960, lpOverlapped=0x0 | out: lpBuffer=0x5e4f950*, lpNumberOfBytesRead=0x5e4f960*=0x4, lpOverlapped=0x0) returned 1 [0126.787] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0126.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0126.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0126.787] NtQuerySystemTime (in: CurrentTime=0x5e4f8e8 | out: CurrentTime=0x5e4f8e8*=132462177061716000) returned 0x0 [0126.787] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x5c9d092d [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x759e8262 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x310df160 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x1914c64e [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x3d7956cb [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x7e724361 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x2162a62c [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x6ad48bee [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x2a1ab82b [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x1b1e140 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x4ccc69ae [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x533513ea [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x5fa53f79 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x201a589e [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x2cf9a3e2 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x57014e56 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x33091561 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x21ffea7d [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x32b5c4f6 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x4342739e [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x637f9d1d [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x51d8df5b [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x1011443c [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x1efa8060 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x3c8a0e44 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x20bfc87 [0126.788] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x6a63e466 [0126.789] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x51b9f91a [0126.789] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x2387ffd4 [0126.789] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x5d86da71 [0126.789] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x3adad4cf [0126.789] RtlRandomEx (in: Seed=0x5e4f8e0 | out: Seed=0x5e4f8e0) returned 0x5262f8ff [0126.802] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.802] ReadFile (in: hFile=0x16e0, lpBuffer=0x7b8fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5e4f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesRead=0x5e4f8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0126.803] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x301038 [0126.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dba8 [0126.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0126.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0126.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b93778 [0126.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0126.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0126.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0126.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dba8) returned 1 [0126.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x301038) returned 1 [0126.804] WriteFile (in: hFile=0x16e0, lpBuffer=0x7b93778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5e4f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7b93778*, lpNumberOfBytesWritten=0x5e4f8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0127.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0127.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0127.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79250 [0127.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0127.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e799c0 [0127.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0127.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e00 [0127.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e00) returned 1 [0127.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0127.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x301080) returned 1 [0127.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec4e0 [0127.296] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.296] WriteFile (in: hFile=0x16e0, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x5e4f968, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x5e4f968*=0x110, lpOverlapped=0x0) returned 1 [0127.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07800 [0127.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0127.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0127.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3998) returned 1 [0127.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec3998 [0127.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0127.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0127.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c30) returned 1 [0127.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0127.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0127.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x3e07800 [0127.760] sprintf (in: _Dest=0x3e07800, _Format="%c%c" | out: _Dest="6b") returned 2 [0127.760] sprintf (in: _Dest=0x3e07802, _Format="%c%c" | out: _Dest="94") returned 2 [0127.760] sprintf (in: _Dest=0x3e07804, _Format="%c%c" | out: _Dest="9b") returned 2 [0127.760] sprintf (in: _Dest=0x3e07806, _Format="%c%c" | out: _Dest="73") returned 2 [0127.760] sprintf (in: _Dest=0x3e07808, _Format="%c%c" | out: _Dest="3c") returned 2 [0127.761] sprintf (in: _Dest=0x3e0780a, _Format="%c%c" | out: _Dest="94") returned 2 [0127.761] sprintf (in: _Dest=0x3e0780c, _Format="%c%c" | out: _Dest="10") returned 2 [0127.761] sprintf (in: _Dest=0x3e0780e, _Format="%c%c" | out: _Dest="9d") returned 2 [0127.761] sprintf (in: _Dest=0x3e07810, _Format="%c%c" | out: _Dest="a6") returned 2 [0127.761] sprintf (in: _Dest=0x3e07812, _Format="%c%c" | out: _Dest="79") returned 2 [0127.761] sprintf (in: _Dest=0x3e07814, _Format="%c%c" | out: _Dest="d7") returned 2 [0127.761] sprintf (in: _Dest=0x3e07816, _Format="%c%c" | out: _Dest="52") returned 2 [0127.761] sprintf (in: _Dest=0x3e07818, _Format="%c%c" | out: _Dest="6e") returned 2 [0127.761] sprintf (in: _Dest=0x3e0781a, _Format="%c%c" | out: _Dest="41") returned 2 [0127.761] sprintf (in: _Dest=0x3e0781c, _Format="%c%c" | out: _Dest="56") returned 2 [0127.761] sprintf (in: _Dest=0x3e0781e, _Format="%c%c" | out: _Dest="6d") returned 2 [0127.761] sprintf (in: _Dest=0x3e07820, _Format="%c%c" | out: _Dest="f1") returned 2 [0127.761] sprintf (in: _Dest=0x3e07822, _Format="%c%c" | out: _Dest="9c") returned 2 [0127.761] sprintf (in: _Dest=0x3e07824, _Format="%c%c" | out: _Dest="69") returned 2 [0127.761] sprintf (in: _Dest=0x3e07826, _Format="%c%c" | out: _Dest="41") returned 2 [0127.761] sprintf (in: _Dest=0x3e07828, _Format="%c%c" | out: _Dest="fe") returned 2 [0127.761] sprintf (in: _Dest=0x3e0782a, _Format="%c%c" | out: _Dest="8e") returned 2 [0127.761] sprintf (in: _Dest=0x3e0782c, _Format="%c%c" | out: _Dest="a5") returned 2 [0127.761] sprintf (in: _Dest=0x3e0782e, _Format="%c%c" | out: _Dest="e4") returned 2 [0127.761] sprintf (in: _Dest=0x3e07830, _Format="%c%c" | out: _Dest="95") returned 2 [0127.761] sprintf (in: _Dest=0x3e07832, _Format="%c%c" | out: _Dest="52") returned 2 [0127.762] sprintf (in: _Dest=0x3e07834, _Format="%c%c" | out: _Dest="d8") returned 2 [0127.762] sprintf (in: _Dest=0x3e07836, _Format="%c%c" | out: _Dest="c9") returned 2 [0127.762] sprintf (in: _Dest=0x3e07838, _Format="%c%c" | out: _Dest="02") returned 2 [0127.762] sprintf (in: _Dest=0x3e0783a, _Format="%c%c" | out: _Dest="62") returned 2 [0127.762] RtlInitAnsiString (in: DestinationString=0x5e4f8f0, SourceString="6b949b733c94109da679d7526e41566df19c6941fe8ea5e49552d8c90262" | out: DestinationString="6b949b733c94109da679d7526e41566df19c6941fe8ea5e49552d8c90262") [0127.762] RtlAnsiStringToUnicodeString (in: DestinationString=0x5e4f8e8, SourceString="6b949b733c94109da679d7526e41566df19c6941fe8ea5e49552d8c90262", AllocateDestinationString=1 | out: DestinationString="6b949b733c94109da679d7526e41566df19c6941fe8ea5e49552d8c90262") returned 0x0 [0127.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9120 [0127.762] wcscat (in: _Dest=0x3e19198, _Source="6b949b733c94109" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\6b949b733c94109") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\6b949b733c94109" [0127.762] wcscat (in: _Dest=0x3e19198, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\6b949b733c94109.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\6b949b733c94109.68814f" [0127.762] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\6b949b733c94109.68814f", NtPathName=0x5e4f8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\6b949b733c94109.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6ef0 [0127.762] NtSetInformationFile (FileHandle=0x16e0, IoStatusBlock=0x5e4f8e8, FileInformation=0x3eb6ef0, Length=0x8a, FileInformationClass=0xa) returned 0x0 [0128.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6ef0) returned 1 [0128.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04238) returned 1 [0128.026] NtQueryInformationFile (in: FileHandle=0x16e0, IoStatusBlock=0x5e4f8b8, FileInformation=0x5e4f8c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5e4f8b8, FileInformation=0x5e4f8c0) returned 0x0 [0128.026] NtSetInformationFile (FileHandle=0x16e0, IoStatusBlock=0x5e4f8b8, FileInformation=0x5e4f8c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19198) returned 1 [0128.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 [0128.042] FlushFileBuffers (hFile=0x16e0) returned 1 [0128.047] CloseHandle (hObject=0x16e0) returned 1 [0128.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f8a8 [0128.056] wcscpy (in: _Dest=0x3f3f8a8, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\" [0128.056] wcscat (in: _Dest=0x3f3f8a8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" [0128.056] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\68814f-readme.txt")) returned 0x20 [0128.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0128.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a269a8) returned 1 Thread: id = 679 os_tid = 0x126c [0125.450] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\0msp.png")) returned 0x2020 [0125.450] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png", dwFileAttributes=0x20) returned 1 [0133.306] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\0msp.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc48 [0133.306] GetFileSizeEx (in: hFile=0xc48, lpFileSize=0x977f884 | out: lpFileSize=0x977f884*=71964) returned 1 [0133.306] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x11918, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.306] ReadFile (in: hFile=0xc48, lpBuffer=0x977f860, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x977f870, lpOverlapped=0x0 | out: lpBuffer=0x977f860*, lpNumberOfBytesRead=0x977f870*=0x4, lpOverlapped=0x0) returned 1 [0133.308] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0133.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0133.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0133.309] NtQuerySystemTime (in: CurrentTime=0x977f7f8 | out: CurrentTime=0x977f7f8*=132462177126300000) returned 0x0 [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x3588865a [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x3a9eee [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x487a9f16 [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x32b64a8c [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x422aa167 [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x78a5f22d [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x5c393982 [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x37d0f6e1 [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x75083ec7 [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x24a526b3 [0133.309] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x33266652 [0133.310] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x27e744ce [0133.310] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x5fda7ed8 [0133.310] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x797983 [0133.310] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x786b2b6a [0133.310] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x3a4c776a [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x4faf35a7 [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x27744f66 [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x57a534d4 [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x5076d262 [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x6c73dc7e [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0xfebf664 [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x4152333d [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x7775748d [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x75e88841 [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x134ea3ea [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x715b220 [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x3d013621 [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x22819fdf [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x6ec1db1e [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x2c17fc12 [0133.311] RtlRandomEx (in: Seed=0x977f7f0 | out: Seed=0x977f7f0) returned 0x4ca486cc [0133.322] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.322] ReadFile (in: hFile=0xc48, lpBuffer=0x7cb9fa8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x977f7f8, lpOverlapped=0x0 | out: lpBuffer=0x7cb9fa8*, lpNumberOfBytesRead=0x977f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.323] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0133.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0133.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0133.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0133.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca3778 [0133.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0133.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0133.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0133.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0133.324] WriteFile (in: hFile=0xc48, lpBuffer=0x7ca3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x977f7f8, lpOverlapped=0x0 | out: lpBuffer=0x7ca3778*, lpNumberOfBytesWritten=0x977f7f8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca3778) returned 1 [0133.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa8) returned 1 [0133.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec2890 [0133.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0133.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec2868 [0133.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0133.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0133.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0133.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0133.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55dd8) returned 1 [0133.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec5f8 [0133.737] SetFilePointerEx (in: hFile=0xc48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.737] WriteFile (in: hFile=0xc48, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x977f878, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x977f878*=0x102, lpOverlapped=0x0) returned 1 [0133.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0133.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0133.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0133.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0133.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0133.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0133.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a48) returned 1 [0133.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0133.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23c30 [0133.826] wcscpy (in: _Dest=0x7a23c30, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png" [0133.826] wcscat (in: _Dest=0x7a23c30, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png.68814f" [0133.826] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png.68814f", NtPathName=0x977f7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\0mSP.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efa320 [0133.826] NtSetInformationFile (FileHandle=0xc48, IoStatusBlock=0x977f7f8, FileInformation=0x3efa320, Length=0x78, FileInformationClass=0xa) returned 0x0 [0133.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa320) returned 1 [0133.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ea90) returned 1 [0133.903] NtQueryInformationFile (in: FileHandle=0xc48, IoStatusBlock=0x977f7c8, FileInformation=0x977f7d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x977f7c8, FileInformation=0x977f7d0) returned 0x0 [0133.903] NtSetInformationFile (FileHandle=0xc48, IoStatusBlock=0x977f7c8, FileInformation=0x977f7d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23c30) returned 1 [0133.905] FlushFileBuffers (hFile=0xc48) returned 1 [0135.261] CloseHandle (hObject=0xc48) returned 1 [0135.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26318 [0135.427] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.427] wcscat (in: _Dest=0x7a26318, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.427] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0xffffffff [0135.428] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcb4 [0135.576] WriteFile (in: hFile=0xcb4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x977f80c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x977f80c*=0x8b9, lpOverlapped=0x0) returned 1 [0135.578] CloseHandle (hObject=0xcb4) returned 1 [0135.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 [0135.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe69c8) returned 1 Thread: id = 680 os_tid = 0x1270 [0125.451] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0TlX-QZ1m9K8A.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\0tlx-qz1m9k8a.gif")) returned 0x2020 [0125.451] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0TlX-QZ1m9K8A.gif", dwFileAttributes=0x20) returned 1 [0133.325] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\0TlX-QZ1m9K8A.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\0tlx-qz1m9k8a.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c8c [0133.325] GetFileSizeEx (in: hFile=0x1c8c, lpFileSize=0x3bef89c | out: lpFileSize=0x3bef89c*=6347) returned 1 [0133.325] SetFilePointerEx (in: hFile=0x1c8c, liDistanceToMove=0x18c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.325] ReadFile (in: hFile=0x1c8c, lpBuffer=0x3bef878, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3bef888, lpOverlapped=0x0 | out: lpBuffer=0x3bef878*, lpNumberOfBytesRead=0x3bef888*=0x4, lpOverlapped=0x0) returned 1 [0133.349] SetFilePointerEx (in: hFile=0x1c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0133.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0133.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0133.349] NtQuerySystemTime (in: CurrentTime=0x3bef810 | out: CurrentTime=0x3bef810*=132462177126768000) returned 0x0 [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x3ef3e9e9 [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x2774975f [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x3e73dfb1 [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x4ac373b3 [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x631c3f0b [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x70809a63 [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x1c6e8561 [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x1bda4549 [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x323631bc [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x37506ca1 [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x665c5ab [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x66bf85e1 [0133.349] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x772713db [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x6c4cb760 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x2478794d [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x3384fac9 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x6f877854 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x63097ce2 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x65122f9e [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x461c0c26 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x66382a87 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x30a7879e [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x7d993622 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x7f4e3359 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x35a66b21 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x80390f0 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x4419c07 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x24d1f03b [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x8cd6646 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x8e3c0d5 [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x61ff46db [0133.350] RtlRandomEx (in: Seed=0x3bef808 | out: Seed=0x3bef808) returned 0x87427ea [0133.358] ReadFile (in: hFile=0x1c8c, lpBuffer=0x7ca7380, nNumberOfBytesToRead=0x18cb, lpNumberOfBytesRead=0x3bef804, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesRead=0x3bef804*=0x18cb, lpOverlapped=0x0) returned 1 [0133.358] SetFilePointerEx (in: hFile=0x1c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.359] WriteFile (in: hFile=0x1c8c, lpBuffer=0x7cb2798*, nNumberOfBytesToWrite=0x18cb, lpNumberOfBytesWritten=0x3bef808, lpOverlapped=0x0 | out: lpBuffer=0x7cb2798*, lpNumberOfBytesWritten=0x3bef808*=0x18cb, lpOverlapped=0x0) returned 1 [0133.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0133.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0133.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0133.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2798) returned 1 [0133.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca7380) returned 1 [0133.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0133.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79870 [0133.740] SetFilePointerEx (in: hFile=0x1c8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.740] WriteFile (in: hFile=0x1c8c, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x3bef890, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0x3bef890*=0x114, lpOverlapped=0x0) returned 1 [0133.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07c38 [0133.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0133.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0133.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e868a8 [0133.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0133.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0133.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a48) returned 1 [0133.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0133.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3de6018 [0133.828] sprintf (in: _Dest=0x3de6018, _Format="%c%c" | out: _Dest="fd") returned 2 [0133.828] sprintf (in: _Dest=0x3de601a, _Format="%c%c" | out: _Dest="39") returned 2 [0133.828] sprintf (in: _Dest=0x3de601c, _Format="%c%c" | out: _Dest="70") returned 2 [0133.828] sprintf (in: _Dest=0x3de601e, _Format="%c%c" | out: _Dest="ac") returned 2 [0133.828] sprintf (in: _Dest=0x3de6020, _Format="%c%c" | out: _Dest="52") returned 2 [0133.828] sprintf (in: _Dest=0x3de6022, _Format="%c%c" | out: _Dest="1f") returned 2 [0133.828] sprintf (in: _Dest=0x3de6024, _Format="%c%c" | out: _Dest="42") returned 2 [0133.828] sprintf (in: _Dest=0x3de6026, _Format="%c%c" | out: _Dest="e1") returned 2 [0133.828] sprintf (in: _Dest=0x3de6028, _Format="%c%c" | out: _Dest="6e") returned 2 [0133.828] sprintf (in: _Dest=0x3de602a, _Format="%c%c" | out: _Dest="79") returned 2 [0133.828] sprintf (in: _Dest=0x3de602c, _Format="%c%c" | out: _Dest="26") returned 2 [0133.829] sprintf (in: _Dest=0x3de602e, _Format="%c%c" | out: _Dest="1a") returned 2 [0133.829] sprintf (in: _Dest=0x3de6030, _Format="%c%c" | out: _Dest="0e") returned 2 [0133.829] sprintf (in: _Dest=0x3de6032, _Format="%c%c" | out: _Dest="74") returned 2 [0133.829] sprintf (in: _Dest=0x3de6034, _Format="%c%c" | out: _Dest="1a") returned 2 [0133.829] sprintf (in: _Dest=0x3de6036, _Format="%c%c" | out: _Dest="c7") returned 2 [0133.829] sprintf (in: _Dest=0x3de6038, _Format="%c%c" | out: _Dest="70") returned 2 [0133.829] sprintf (in: _Dest=0x3de603a, _Format="%c%c" | out: _Dest="df") returned 2 [0133.829] sprintf (in: _Dest=0x3de603c, _Format="%c%c" | out: _Dest="72") returned 2 [0133.829] sprintf (in: _Dest=0x3de603e, _Format="%c%c" | out: _Dest="8a") returned 2 [0133.829] sprintf (in: _Dest=0x3de6040, _Format="%c%c" | out: _Dest="9d") returned 2 [0133.829] sprintf (in: _Dest=0x3de6042, _Format="%c%c" | out: _Dest="17") returned 2 [0133.829] sprintf (in: _Dest=0x3de6044, _Format="%c%c" | out: _Dest="3f") returned 2 [0133.829] sprintf (in: _Dest=0x3de6046, _Format="%c%c" | out: _Dest="ee") returned 2 [0133.829] sprintf (in: _Dest=0x3de6048, _Format="%c%c" | out: _Dest="4d") returned 2 [0133.829] sprintf (in: _Dest=0x3de604a, _Format="%c%c" | out: _Dest="fd") returned 2 [0133.829] sprintf (in: _Dest=0x3de604c, _Format="%c%c" | out: _Dest="02") returned 2 [0133.829] sprintf (in: _Dest=0x3de604e, _Format="%c%c" | out: _Dest="b3") returned 2 [0133.829] sprintf (in: _Dest=0x3de6050, _Format="%c%c" | out: _Dest="0d") returned 2 [0133.829] sprintf (in: _Dest=0x3de6052, _Format="%c%c" | out: _Dest="2f") returned 2 [0133.829] sprintf (in: _Dest=0x3de6054, _Format="%c%c" | out: _Dest="e8") returned 2 [0133.829] sprintf (in: _Dest=0x3de6056, _Format="%c%c" | out: _Dest="93") returned 2 [0133.829] sprintf (in: _Dest=0x3de6058, _Format="%c%c" | out: _Dest="79") returned 2 [0133.829] sprintf (in: _Dest=0x3de605a, _Format="%c%c" | out: _Dest="a3") returned 2 [0133.829] RtlInitAnsiString (in: DestinationString=0x3bef818, SourceString="fd3970ac521f42e16e79261a0e741ac770df728a9d173fee4dfd02b30d2fe89379a3" | out: DestinationString="fd3970ac521f42e16e79261a0e741ac770df728a9d173fee4dfd02b30d2fe89379a3") [0133.829] RtlAnsiStringToUnicodeString (in: DestinationString=0x3bef810, SourceString="fd3970ac521f42e16e79261a0e741ac770df728a9d173fee4dfd02b30d2fe89379a3", AllocateDestinationString=1 | out: DestinationString="fd3970ac521f42e16e79261a0e741ac770df728a9d173fee4dfd02b30d2fe89379a3") returned 0x0 [0133.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb70b8 [0133.830] wcscat (in: _Dest=0x3efa220, _Source="fd3970ac521f42e16" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd3970ac521f42e16") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd3970ac521f42e16" [0133.830] wcscat (in: _Dest=0x3efa220, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd3970ac521f42e16.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd3970ac521f42e16.68814f" [0133.830] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd3970ac521f42e16.68814f", NtPathName=0x3bef808, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd3970ac521f42e16.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6f88 [0133.830] NtSetInformationFile (FileHandle=0x1c8c, IoStatusBlock=0x3bef810, FileInformation=0x3eb6f88, Length=0x8a, FileInformationClass=0xa) returned 0x0 [0134.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 [0134.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f6e8) returned 1 [0134.063] NtQueryInformationFile (in: FileHandle=0x1c8c, IoStatusBlock=0x3bef7e0, FileInformation=0x3bef7e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x3bef7e0, FileInformation=0x3bef7e8) returned 0x0 [0134.063] NtSetInformationFile (FileHandle=0x1c8c, IoStatusBlock=0x3bef7e0, FileInformation=0x3bef7e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa220) returned 1 [0134.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb70b8) returned 1 [0134.080] FlushFileBuffers (hFile=0x1c8c) returned 1 [0135.627] CloseHandle (hObject=0x1c8c) returned 1 [0135.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26bd8 [0135.634] wcscpy (in: _Dest=0x7a26bd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.634] wcscat (in: _Dest=0x7a26bd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.634] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26bd8) returned 1 [0135.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23530) returned 1 Thread: id = 681 os_tid = 0x1274 [0125.451] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1tKqBR.odp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\1tkqbr.odp")) returned 0x2020 [0125.451] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1tKqBR.odp", dwFileAttributes=0x20) returned 1 [0133.359] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1tKqBR.odp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\1tkqbr.odp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c90 [0133.360] GetFileSizeEx (in: hFile=0x1c90, lpFileSize=0x915fc34 | out: lpFileSize=0x915fc34*=45210) returned 1 [0133.360] SetFilePointerEx (in: hFile=0x1c90, liDistanceToMove=0xb096, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.360] ReadFile (in: hFile=0x1c90, lpBuffer=0x915fc10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x915fc20, lpOverlapped=0x0 | out: lpBuffer=0x915fc10*, lpNumberOfBytesRead=0x915fc20*=0x4, lpOverlapped=0x0) returned 1 [0133.361] SetFilePointerEx (in: hFile=0x1c90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0133.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0133.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0133.361] NtQuerySystemTime (in: CurrentTime=0x915fba8 | out: CurrentTime=0x915fba8*=132462177126924000) returned 0x0 [0133.361] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x7a52582e [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x5fd4fa6b [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x248373d0 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x1207250e [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x73683c01 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x4e5b0b33 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x50a0a6b6 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x43066430 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x13e3a129 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x1ab32bcd [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x3b7f64c5 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x71baddb2 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x97403de [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x4030492b [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x3275d9bc [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0xb31919 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x73376c30 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x550ff898 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x652918ed [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x1bc69bf [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x403fb4a6 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x1598d3f8 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x350140b8 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x3429c782 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x7b854c0e [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x2e4ee556 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x76c22307 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x324b6be9 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x625b10a7 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x32dd1e67 [0133.362] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x43e23627 [0133.363] RtlRandomEx (in: Seed=0x915fba0 | out: Seed=0x915fba0) returned 0x2ea57e6b [0133.375] SetFilePointerEx (in: hFile=0x1c90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.375] ReadFile (in: hFile=0x1c90, lpBuffer=0x7c9fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x915fba8, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesRead=0x915fba8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.375] SetFilePointerEx (in: hFile=0x1c90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851e8 [0133.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0133.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0133.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caaf88 [0133.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0133.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0133.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0133.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.376] WriteFile (in: hFile=0x1c90, lpBuffer=0x7caaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x915fba8, lpOverlapped=0x0 | out: lpBuffer=0x7caaf88*, lpNumberOfBytesWritten=0x915fba8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf88) returned 1 [0133.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0133.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86968 [0133.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0133.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86998 [0133.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0133.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0133.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0133.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0133.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec710 [0133.745] SetFilePointerEx (in: hFile=0x1c90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.745] WriteFile (in: hFile=0x1c90, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x915fc28, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x915fc28*=0x106, lpOverlapped=0x0) returned 1 [0133.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07c38 [0133.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0133.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ac8) returned 1 [0133.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2f190 [0133.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0133.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0133.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3308) returned 1 [0133.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0133.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3e79870 [0133.833] sprintf (in: _Dest=0x3e79870, _Format="%c%c" | out: _Dest="7b") returned 2 [0133.833] sprintf (in: _Dest=0x3e79872, _Format="%c%c" | out: _Dest="e4") returned 2 [0133.833] sprintf (in: _Dest=0x3e79874, _Format="%c%c" | out: _Dest="9f") returned 2 [0133.833] sprintf (in: _Dest=0x3e79876, _Format="%c%c" | out: _Dest="fa") returned 2 [0133.833] sprintf (in: _Dest=0x3e79878, _Format="%c%c" | out: _Dest="9a") returned 2 [0133.833] sprintf (in: _Dest=0x3e7987a, _Format="%c%c" | out: _Dest="41") returned 2 [0133.833] sprintf (in: _Dest=0x3e7987c, _Format="%c%c" | out: _Dest="0c") returned 2 [0133.833] sprintf (in: _Dest=0x3e7987e, _Format="%c%c" | out: _Dest="18") returned 2 [0133.833] sprintf (in: _Dest=0x3e79880, _Format="%c%c" | out: _Dest="ac") returned 2 [0133.833] sprintf (in: _Dest=0x3e79882, _Format="%c%c" | out: _Dest="ce") returned 2 [0133.833] sprintf (in: _Dest=0x3e79884, _Format="%c%c" | out: _Dest="b1") returned 2 [0133.834] sprintf (in: _Dest=0x3e79886, _Format="%c%c" | out: _Dest="18") returned 2 [0133.834] sprintf (in: _Dest=0x3e79888, _Format="%c%c" | out: _Dest="07") returned 2 [0133.834] sprintf (in: _Dest=0x3e7988a, _Format="%c%c" | out: _Dest="a8") returned 2 [0133.834] sprintf (in: _Dest=0x3e7988c, _Format="%c%c" | out: _Dest="a8") returned 2 [0133.834] sprintf (in: _Dest=0x3e7988e, _Format="%c%c" | out: _Dest="75") returned 2 [0133.834] sprintf (in: _Dest=0x3e79890, _Format="%c%c" | out: _Dest="33") returned 2 [0133.834] sprintf (in: _Dest=0x3e79892, _Format="%c%c" | out: _Dest="f7") returned 2 [0133.834] sprintf (in: _Dest=0x3e79894, _Format="%c%c" | out: _Dest="47") returned 2 [0133.834] sprintf (in: _Dest=0x3e79896, _Format="%c%c" | out: _Dest="55") returned 2 [0133.834] RtlInitAnsiString (in: DestinationString=0x915fbb0, SourceString="7be49ffa9a410c18acceb11807a8a87533f74755" | out: DestinationString="7be49ffa9a410c18acceb11807a8a87533f74755") [0133.834] RtlAnsiStringToUnicodeString (in: DestinationString=0x915fba8, SourceString="7be49ffa9a410c18acceb11807a8a87533f74755", AllocateDestinationString=1 | out: DestinationString="7be49ffa9a410c18acceb11807a8a87533f74755") returned 0x0 [0133.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe7088 [0133.834] wcscat (in: _Dest=0x7a23d10, _Source="7be49ffa9a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\7be49ffa9a") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\7be49ffa9a" [0133.834] wcscat (in: _Dest=0x7a23d10, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\7be49ffa9a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\7be49ffa9a.68814f" [0133.834] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\7be49ffa9a.68814f", NtPathName=0x915fba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\7be49ffa9a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8df0 [0133.834] NtSetInformationFile (FileHandle=0x1c90, IoStatusBlock=0x915fba8, FileInformation=0x3eb8df0, Length=0x7c, FileInformationClass=0xa) returned 0x0 [0134.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 [0134.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d0b0) returned 1 [0134.027] NtQueryInformationFile (in: FileHandle=0x1c90, IoStatusBlock=0x915fb78, FileInformation=0x915fb80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x915fb78, FileInformation=0x915fb80) returned 0x0 [0134.027] NtSetInformationFile (FileHandle=0x1c90, IoStatusBlock=0x915fb78, FileInformation=0x915fb80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d10) returned 1 [0134.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7088) returned 1 [0134.032] FlushFileBuffers (hFile=0x1c90) returned 1 [0135.351] CloseHandle (hObject=0x1c90) returned 1 [0135.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26b68 [0135.462] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.462] wcscat (in: _Dest=0x7a26b68, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.462] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 [0135.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 Thread: id = 682 os_tid = 0x1278 [0125.452] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1vaMIWSlIHoeVm.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\1vamiwslihoevm.mp3")) returned 0x2020 [0125.452] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1vaMIWSlIHoeVm.mp3", dwFileAttributes=0x20) returned 1 [0133.377] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1vaMIWSlIHoeVm.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\1vamiwslihoevm.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c94 [0133.377] GetFileSizeEx (in: hFile=0x1c94, lpFileSize=0x89ff9dc | out: lpFileSize=0x89ff9dc*=89870) returned 1 [0133.377] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x15f0a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.377] ReadFile (in: hFile=0x1c94, lpBuffer=0x89ff9b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x89ff9c8, lpOverlapped=0x0 | out: lpBuffer=0x89ff9b8*, lpNumberOfBytesRead=0x89ff9c8*=0x4, lpOverlapped=0x0) returned 1 [0133.379] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0133.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0133.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0133.379] NtQuerySystemTime (in: CurrentTime=0x89ff950 | out: CurrentTime=0x89ff950*=132462177127080000) returned 0x0 [0133.379] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x35ea3169 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x3b315c8b [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x4b5be4e5 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x4eeb91b4 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x320ffaa2 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x19bdcdc9 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x10f4fcf4 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x4d752655 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x629b1af4 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x6635cc76 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x40ca0e6b [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x2b3a314e [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x372593e1 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x78caddaa [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x11181a8e [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x4b8f2d4b [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x177627f3 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x4fb7e0e5 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x56877df5 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x53136db9 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x72c8c722 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x2660c7cb [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x276839e9 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x2c286228 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x66504679 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x3123f439 [0133.380] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x47a3dcc9 [0133.381] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x468895e3 [0133.381] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x143876a1 [0133.381] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x1407a86f [0133.381] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x4ccef49f [0133.381] RtlRandomEx (in: Seed=0x89ff948 | out: Seed=0x89ff948) returned 0x8a67b [0133.392] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.392] ReadFile (in: hFile=0x1c94, lpBuffer=0x7cc17b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x89ff950, lpOverlapped=0x0 | out: lpBuffer=0x7cc17b8*, lpNumberOfBytesRead=0x89ff950*=0x3c00, lpOverlapped=0x0) returned 1 [0133.393] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851e8 [0133.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0133.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0133.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cccbd0 [0133.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0133.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0133.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0133.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.394] WriteFile (in: hFile=0x1c94, lpBuffer=0x7cccbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x89ff950, lpOverlapped=0x0 | out: lpBuffer=0x7cccbd0*, lpNumberOfBytesWritten=0x89ff950*=0x3c00, lpOverlapped=0x0) returned 1 [0133.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccbd0) returned 1 [0133.747] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.747] ReadFile (in: hFile=0x1c94, lpBuffer=0x7cc17b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x89ff950, lpOverlapped=0x0 | out: lpBuffer=0x7cc17b8*, lpNumberOfBytesRead=0x89ff950*=0x3c00, lpOverlapped=0x0) returned 1 [0133.748] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0133.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0133.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0133.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0133.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cccbd0 [0133.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0133.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3010 [0133.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3010) returned 1 [0133.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0133.749] WriteFile (in: hFile=0x1c94, lpBuffer=0x7cccbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x89ff950, lpOverlapped=0x0 | out: lpBuffer=0x7cccbd0*, lpNumberOfBytesWritten=0x89ff950*=0x3c00, lpOverlapped=0x0) returned 1 [0133.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccbd0) returned 1 [0133.754] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x1230e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.754] ReadFile (in: hFile=0x1c94, lpBuffer=0x7cc17b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x89ff950, lpOverlapped=0x0 | out: lpBuffer=0x7cc17b8*, lpNumberOfBytesRead=0x89ff950*=0x3c00, lpOverlapped=0x0) returned 1 [0133.754] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x1230e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07968 [0133.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0133.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0133.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0133.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cccbd0 [0133.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0133.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0133.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4438) returned 1 [0133.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0133.756] WriteFile (in: hFile=0x1c94, lpBuffer=0x7cccbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x89ff950, lpOverlapped=0x0 | out: lpBuffer=0x7cccbd0*, lpNumberOfBytesWritten=0x89ff950*=0x3c00, lpOverlapped=0x0) returned 1 [0133.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccbd0) returned 1 [0133.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d888 [0133.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0133.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2d080 [0133.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0133.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0133.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0133.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0133.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dce108 [0133.760] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.760] WriteFile (in: hFile=0x1c94, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x89ff9d0, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x89ff9d0*=0x156, lpOverlapped=0x0) returned 1 [0133.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0133.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f740 [0133.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31c8 [0133.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31c8) returned 1 [0133.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86968 [0133.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31c8 [0133.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0133.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38f8) returned 1 [0133.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0133.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0133.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3e6adc8 [0133.860] sprintf (in: _Dest=0x3e6adc8, _Format="%c%c" | out: _Dest="cb") returned 2 [0133.860] sprintf (in: _Dest=0x3e6adca, _Format="%c%c" | out: _Dest="a9") returned 2 [0133.860] sprintf (in: _Dest=0x3e6adcc, _Format="%c%c" | out: _Dest="9d") returned 2 [0133.860] sprintf (in: _Dest=0x3e6adce, _Format="%c%c" | out: _Dest="56") returned 2 [0133.860] sprintf (in: _Dest=0x3e6add0, _Format="%c%c" | out: _Dest="aa") returned 2 [0133.860] sprintf (in: _Dest=0x3e6add2, _Format="%c%c" | out: _Dest="11") returned 2 [0133.860] sprintf (in: _Dest=0x3e6add4, _Format="%c%c" | out: _Dest="54") returned 2 [0133.860] sprintf (in: _Dest=0x3e6add6, _Format="%c%c" | out: _Dest="37") returned 2 [0133.860] sprintf (in: _Dest=0x3e6add8, _Format="%c%c" | out: _Dest="18") returned 2 [0133.860] sprintf (in: _Dest=0x3e6adda, _Format="%c%c" | out: _Dest="10") returned 2 [0133.860] sprintf (in: _Dest=0x3e6addc, _Format="%c%c" | out: _Dest="7e") returned 2 [0133.860] sprintf (in: _Dest=0x3e6adde, _Format="%c%c" | out: _Dest="35") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ade0, _Format="%c%c" | out: _Dest="24") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ade2, _Format="%c%c" | out: _Dest="d4") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ade4, _Format="%c%c" | out: _Dest="25") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ade6, _Format="%c%c" | out: _Dest="5b") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ade8, _Format="%c%c" | out: _Dest="4b") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adea, _Format="%c%c" | out: _Dest="89") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adec, _Format="%c%c" | out: _Dest="08") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adee, _Format="%c%c" | out: _Dest="c7") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adf0, _Format="%c%c" | out: _Dest="43") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adf2, _Format="%c%c" | out: _Dest="bb") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adf4, _Format="%c%c" | out: _Dest="c0") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adf6, _Format="%c%c" | out: _Dest="13") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adf8, _Format="%c%c" | out: _Dest="5a") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adfa, _Format="%c%c" | out: _Dest="5b") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adfc, _Format="%c%c" | out: _Dest="fd") returned 2 [0133.861] sprintf (in: _Dest=0x3e6adfe, _Format="%c%c" | out: _Dest="f8") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ae00, _Format="%c%c" | out: _Dest="69") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ae02, _Format="%c%c" | out: _Dest="3e") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ae04, _Format="%c%c" | out: _Dest="e6") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ae06, _Format="%c%c" | out: _Dest="81") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ae08, _Format="%c%c" | out: _Dest="f6") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ae0a, _Format="%c%c" | out: _Dest="8c") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ae0c, _Format="%c%c" | out: _Dest="97") returned 2 [0133.861] sprintf (in: _Dest=0x3e6ae0e, _Format="%c%c" | out: _Dest="9c") returned 2 [0133.862] RtlInitAnsiString (in: DestinationString=0x89ff958, SourceString="cba99d56aa11543718107e3524d4255b4b8908c743bbc0135a5bfdf8693ee681f68c979c" | out: DestinationString="cba99d56aa11543718107e3524d4255b4b8908c743bbc0135a5bfdf8693ee681f68c979c") [0133.862] RtlAnsiStringToUnicodeString (in: DestinationString=0x89ff950, SourceString="cba99d56aa11543718107e3524d4255b4b8908c743bbc0135a5bfdf8693ee681f68c979c", AllocateDestinationString=1 | out: DestinationString="cba99d56aa11543718107e3524d4255b4b8908c743bbc0135a5bfdf8693ee681f68c979c") returned 0x0 [0133.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4aa0 [0133.862] wcscat (in: _Dest=0x3efa2a0, _Source="cba99d56aa11543718" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cba99d56aa11543718") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cba99d56aa11543718" [0133.862] wcscat (in: _Dest=0x3efa2a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cba99d56aa11543718.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cba99d56aa11543718.68814f" [0133.862] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\cba99d56aa11543718.68814f", NtPathName=0x89ff948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\cba99d56aa11543718.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7150 [0133.862] NtSetInformationFile (FileHandle=0x1c94, IoStatusBlock=0x89ff950, FileInformation=0x3eb7150, Length=0x8c, FileInformationClass=0xa) returned 0x0 [0134.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7150) returned 1 [0134.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a42cd0) returned 1 [0134.039] NtQueryInformationFile (in: FileHandle=0x1c94, IoStatusBlock=0x89ff920, FileInformation=0x89ff928, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x89ff920, FileInformation=0x89ff928) returned 0x0 [0134.039] NtSetInformationFile (FileHandle=0x1c94, IoStatusBlock=0x89ff920, FileInformation=0x89ff928, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa2a0) returned 1 [0134.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 [0134.046] FlushFileBuffers (hFile=0x1c94) returned 1 [0135.405] CloseHandle (hObject=0x1c94) returned 1 [0135.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26938 [0135.503] wcscpy (in: _Dest=0x7a26938, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.503] wcscat (in: _Dest=0x7a26938, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.503] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26938) returned 1 [0135.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23610) returned 1 Thread: id = 683 os_tid = 0x127c [0125.453] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\752T-9jXWSE04pJrd75j.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\752t-9jxwse04pjrd75j.flv")) returned 0x2020 [0125.453] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\752T-9jXWSE04pJrd75j.flv", dwFileAttributes=0x20) returned 1 [0133.395] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\752T-9jXWSE04pJrd75j.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\752t-9jxwse04pjrd75j.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c98 [0133.396] GetFileSizeEx (in: hFile=0x1c98, lpFileSize=0x7f8fc1c | out: lpFileSize=0x7f8fc1c*=69631) returned 1 [0133.396] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x10ffb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.396] ReadFile (in: hFile=0x1c98, lpBuffer=0x7f8fbf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f8fc08, lpOverlapped=0x0 | out: lpBuffer=0x7f8fbf8*, lpNumberOfBytesRead=0x7f8fc08*=0x4, lpOverlapped=0x0) returned 1 [0133.398] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0133.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0133.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0133.398] NtQuerySystemTime (in: CurrentTime=0x7f8fb90 | out: CurrentTime=0x7f8fb90*=132462177127236000) returned 0x0 [0133.398] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x23f574aa [0133.398] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x6d81cca [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x4ebfcc5 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x7f644b1d [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x298473b5 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x1d2e65d [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x2cb40f7f [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x4e9f8a2 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x6ce108a4 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x40bbf4ec [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x3d34b2e1 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x41986d00 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x283e7878 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x35ed9dfa [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x3966fe0a [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x51c0743a [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x7b754edc [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x127ce149 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x406bd2e8 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x510ae9e1 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x4e736ec [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x54642ad2 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x73b6b084 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x951ab71 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x5b56e8cf [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x1554da4b [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x7ae06058 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x6de1ff4f [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0xaa7209e [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x5070fb7f [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0x48c726b7 [0133.399] RtlRandomEx (in: Seed=0x7f8fb88 | out: Seed=0x7f8fb88) returned 0xba27579 [0133.410] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.410] ReadFile (in: hFile=0x1c98, lpBuffer=0x7cd07d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7f8fb90, lpOverlapped=0x0 | out: lpBuffer=0x7cd07d8*, lpNumberOfBytesRead=0x7f8fb90*=0x3c00, lpOverlapped=0x0) returned 1 [0133.410] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851e8 [0133.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0133.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0133.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a750b0 [0133.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0133.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0133.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0133.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.411] WriteFile (in: hFile=0x1c98, lpBuffer=0x7a750b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7f8fb90, lpOverlapped=0x0 | out: lpBuffer=0x7a750b0*, lpNumberOfBytesWritten=0x7f8fb90*=0x3c00, lpOverlapped=0x0) returned 1 [0133.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a750b0) returned 1 [0133.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd07d8) returned 1 [0133.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e84f18 [0133.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3010) returned 1 [0133.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e07890 [0133.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3010 [0133.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0133.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0133.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0133.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9a60 [0133.754] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.754] WriteFile (in: hFile=0x1c98, lpBuffer=0x3ec9a60*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x7f8fc10, lpOverlapped=0x0 | out: lpBuffer=0x3ec9a60*, lpNumberOfBytesWritten=0x7f8fc10*=0x122, lpOverlapped=0x0) returned 1 [0133.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07c38 [0133.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0133.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e30) returned 1 [0133.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79870 [0133.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0133.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0133.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4168) returned 1 [0133.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0133.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a23f40 [0133.841] sprintf (in: _Dest=0x7a23f40, _Format="%c%c" | out: _Dest="5a") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f42, _Format="%c%c" | out: _Dest="35") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f44, _Format="%c%c" | out: _Dest="81") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f46, _Format="%c%c" | out: _Dest="72") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f48, _Format="%c%c" | out: _Dest="ce") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f4a, _Format="%c%c" | out: _Dest="ef") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f4c, _Format="%c%c" | out: _Dest="7a") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f4e, _Format="%c%c" | out: _Dest="e5") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f50, _Format="%c%c" | out: _Dest="24") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f52, _Format="%c%c" | out: _Dest="f6") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f54, _Format="%c%c" | out: _Dest="2b") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f56, _Format="%c%c" | out: _Dest="8d") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f58, _Format="%c%c" | out: _Dest="0c") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f5a, _Format="%c%c" | out: _Dest="72") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f5c, _Format="%c%c" | out: _Dest="64") returned 2 [0133.841] sprintf (in: _Dest=0x7a23f5e, _Format="%c%c" | out: _Dest="96") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f60, _Format="%c%c" | out: _Dest="a8") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f62, _Format="%c%c" | out: _Dest="0b") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f64, _Format="%c%c" | out: _Dest="08") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f66, _Format="%c%c" | out: _Dest="ef") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f68, _Format="%c%c" | out: _Dest="67") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f6a, _Format="%c%c" | out: _Dest="85") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f6c, _Format="%c%c" | out: _Dest="4f") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f6e, _Format="%c%c" | out: _Dest="84") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f70, _Format="%c%c" | out: _Dest="28") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f72, _Format="%c%c" | out: _Dest="bf") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f74, _Format="%c%c" | out: _Dest="62") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f76, _Format="%c%c" | out: _Dest="12") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f78, _Format="%c%c" | out: _Dest="df") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f7a, _Format="%c%c" | out: _Dest="4b") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f7c, _Format="%c%c" | out: _Dest="5b") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f7e, _Format="%c%c" | out: _Dest="c7") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f80, _Format="%c%c" | out: _Dest="23") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f82, _Format="%c%c" | out: _Dest="e2") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f84, _Format="%c%c" | out: _Dest="81") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f86, _Format="%c%c" | out: _Dest="9d") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f88, _Format="%c%c" | out: _Dest="b9") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f8a, _Format="%c%c" | out: _Dest="e2") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f8c, _Format="%c%c" | out: _Dest="56") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f8e, _Format="%c%c" | out: _Dest="3c") returned 2 [0133.842] sprintf (in: _Dest=0x7a23f90, _Format="%c%c" | out: _Dest="73") returned 2 [0133.843] sprintf (in: _Dest=0x7a23f92, _Format="%c%c" | out: _Dest="e4") returned 2 [0133.843] sprintf (in: _Dest=0x7a23f94, _Format="%c%c" | out: _Dest="9b") returned 2 [0133.843] sprintf (in: _Dest=0x7a23f96, _Format="%c%c" | out: _Dest="b9") returned 2 [0133.843] sprintf (in: _Dest=0x7a23f98, _Format="%c%c" | out: _Dest="69") returned 2 [0133.843] sprintf (in: _Dest=0x7a23f9a, _Format="%c%c" | out: _Dest="f7") returned 2 [0133.843] sprintf (in: _Dest=0x7a23f9c, _Format="%c%c" | out: _Dest="1e") returned 2 [0133.843] sprintf (in: _Dest=0x7a23f9e, _Format="%c%c" | out: _Dest="be") returned 2 [0133.843] RtlInitAnsiString (in: DestinationString=0x7f8fb98, SourceString="5a358172ceef7ae524f62b8d0c726496a80b08ef67854f8428bf6212df4b5bc723e2819db9e2563c73e49bb969f71ebe" | out: DestinationString="5a358172ceef7ae524f62b8d0c726496a80b08ef67854f8428bf6212df4b5bc723e2819db9e2563c73e49bb969f71ebe") [0133.843] RtlAnsiStringToUnicodeString (in: DestinationString=0x7f8fb90, SourceString="5a358172ceef7ae524f62b8d0c726496a80b08ef67854f8428bf6212df4b5bc723e2819db9e2563c73e49bb969f71ebe", AllocateDestinationString=1 | out: DestinationString="5a358172ceef7ae524f62b8d0c726496a80b08ef67854f8428bf6212df4b5bc723e2819db9e2563c73e49bb969f71ebe") returned 0x0 [0133.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85970 [0133.843] wcscat (in: _Dest=0x3d45410, _Source="5a358172ceef7ae524f62b8d" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5a358172ceef7ae524f62b8d") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5a358172ceef7ae524f62b8d" [0133.843] wcscat (in: _Dest=0x3d45410, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5a358172ceef7ae524f62b8d.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5a358172ceef7ae524f62b8d.68814f" [0133.843] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\5a358172ceef7ae524f62b8d.68814f", NtPathName=0x7f8fb88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\5a358172ceef7ae524f62b8d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4dc0 [0133.843] NtSetInformationFile (FileHandle=0x1c98, IoStatusBlock=0x7f8fb90, FileInformation=0x3df4dc0, Length=0x98, FileInformationClass=0xa) returned 0x0 [0134.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4dc0) returned 1 [0134.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f9a8) returned 1 [0134.029] NtQueryInformationFile (in: FileHandle=0x1c98, IoStatusBlock=0x7f8fb60, FileInformation=0x7f8fb68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7f8fb60, FileInformation=0x7f8fb68) returned 0x0 [0134.029] NtSetInformationFile (FileHandle=0x1c98, IoStatusBlock=0x7f8fb60, FileInformation=0x7f8fb68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 [0134.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85970) returned 1 [0134.035] FlushFileBuffers (hFile=0x1c98) returned 1 [0135.351] CloseHandle (hObject=0x1c98) returned 1 [0135.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26a18 [0135.463] wcscpy (in: _Dest=0x7a26a18, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.463] wcscat (in: _Dest=0x7a26a18, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.463] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a18) returned 1 [0135.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6370) returned 1 Thread: id = 684 os_tid = 0x1280 [0125.453] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ac_2qHvGqVj.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac_2qhvgqvj.gif")) returned 0x2020 [0125.453] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ac_2qHvGqVj.gif", dwFileAttributes=0x20) returned 1 [0133.413] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ac_2qHvGqVj.gif" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ac_2qhvgqvj.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c9c [0133.413] GetFileSizeEx (in: hFile=0x1c9c, lpFileSize=0x9d7fc24 | out: lpFileSize=0x9d7fc24*=44967) returned 1 [0133.413] SetFilePointerEx (in: hFile=0x1c9c, liDistanceToMove=0xafa3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.413] ReadFile (in: hFile=0x1c9c, lpBuffer=0x9d7fc00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d7fc10, lpOverlapped=0x0 | out: lpBuffer=0x9d7fc00*, lpNumberOfBytesRead=0x9d7fc10*=0x4, lpOverlapped=0x0) returned 1 [0133.415] SetFilePointerEx (in: hFile=0x1c9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0133.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0133.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0133.415] NtQuerySystemTime (in: CurrentTime=0x9d7fb98 | out: CurrentTime=0x9d7fb98*=132462177127392000) returned 0x0 [0133.415] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x5416d165 [0133.415] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x4d3b8de6 [0133.415] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x256214ea [0133.415] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x1f66eb56 [0133.415] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x365e9798 [0133.415] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x67a2f754 [0133.415] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x5d933e94 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x3bc2320b [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x1595ed62 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x181cbed9 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x76279168 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x5b3074b7 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x287989cc [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0xb78d3bb [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x21c75a7f [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x4efe5183 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x3c998445 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x4e2e16b7 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x5035f0d5 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x31811c9c [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x582d642c [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0xdd78c9c [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x1c9804c [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x26a3dab4 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x7803ebb6 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x3c69ffa5 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x6e5b3838 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x7a42b28d [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x71e6e8a7 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x6350b5aa [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x4b5cff17 [0133.416] RtlRandomEx (in: Seed=0x9d7fb90 | out: Seed=0x9d7fb90) returned 0x225ed76a [0133.436] SetFilePointerEx (in: hFile=0x1c9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.437] ReadFile (in: hFile=0x1c9c, lpBuffer=0x7a96cf8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9d7fb98, lpOverlapped=0x0 | out: lpBuffer=0x7a96cf8*, lpNumberOfBytesRead=0x9d7fb98*=0x3c00, lpOverlapped=0x0) returned 1 [0133.437] SetFilePointerEx (in: hFile=0x1c9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851e8 [0133.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0133.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0133.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9a900 [0133.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0133.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0133.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3218) returned 1 [0133.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.438] WriteFile (in: hFile=0x1c9c, lpBuffer=0x7a9a900*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9d7fb98, lpOverlapped=0x0 | out: lpBuffer=0x7a9a900*, lpNumberOfBytesWritten=0x9d7fb98*=0x3c00, lpOverlapped=0x0) returned 1 [0133.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9a900) returned 1 [0133.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a96cf8) returned 1 [0133.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79950 [0133.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4438) returned 1 [0133.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79288 [0133.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0133.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0133.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0133.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0133.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec940 [0133.759] SetFilePointerEx (in: hFile=0x1c9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.759] WriteFile (in: hFile=0x1c9c, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x9d7fc18, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x9d7fc18*=0x110, lpOverlapped=0x0) returned 1 [0133.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0133.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0133.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3240) returned 1 [0133.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec3240 [0133.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3268 [0133.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0133.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bb0) returned 1 [0133.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0133.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x3e84f18 [0133.851] sprintf (in: _Dest=0x3e84f18, _Format="%c%c" | out: _Dest="ea") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f1a, _Format="%c%c" | out: _Dest="72") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f1c, _Format="%c%c" | out: _Dest="2b") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f1e, _Format="%c%c" | out: _Dest="c9") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f20, _Format="%c%c" | out: _Dest="4f") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f22, _Format="%c%c" | out: _Dest="88") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f24, _Format="%c%c" | out: _Dest="ec") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f26, _Format="%c%c" | out: _Dest="ad") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f28, _Format="%c%c" | out: _Dest="86") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f2a, _Format="%c%c" | out: _Dest="72") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f2c, _Format="%c%c" | out: _Dest="2e") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f2e, _Format="%c%c" | out: _Dest="ff") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f30, _Format="%c%c" | out: _Dest="f5") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f32, _Format="%c%c" | out: _Dest="72") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f34, _Format="%c%c" | out: _Dest="12") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f36, _Format="%c%c" | out: _Dest="84") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f38, _Format="%c%c" | out: _Dest="f7") returned 2 [0133.851] sprintf (in: _Dest=0x3e84f3a, _Format="%c%c" | out: _Dest="86") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f3c, _Format="%c%c" | out: _Dest="ad") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f3e, _Format="%c%c" | out: _Dest="1a") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f40, _Format="%c%c" | out: _Dest="77") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f42, _Format="%c%c" | out: _Dest="09") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f44, _Format="%c%c" | out: _Dest="0c") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f46, _Format="%c%c" | out: _Dest="29") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f48, _Format="%c%c" | out: _Dest="cf") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f4a, _Format="%c%c" | out: _Dest="a4") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f4c, _Format="%c%c" | out: _Dest="54") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f4e, _Format="%c%c" | out: _Dest="fe") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f50, _Format="%c%c" | out: _Dest="2c") returned 2 [0133.852] sprintf (in: _Dest=0x3e84f52, _Format="%c%c" | out: _Dest="3d") returned 2 [0133.852] RtlInitAnsiString (in: DestinationString=0x9d7fba0, SourceString="ea722bc94f88ecad86722efff5721284f786ad1a77090c29cfa454fe2c3d" | out: DestinationString="ea722bc94f88ecad86722efff5721284f786ad1a77090c29cfa454fe2c3d") [0133.852] RtlAnsiStringToUnicodeString (in: DestinationString=0x9d7fb98, SourceString="ea722bc94f88ecad86722efff5721284f786ad1a77090c29cfa454fe2c3d", AllocateDestinationString=1 | out: DestinationString="ea722bc94f88ecad86722efff5721284f786ad1a77090c29cfa454fe2c3d") returned 0x0 [0133.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9560 [0133.852] wcscat (in: _Dest=0x3f3fa88, _Source="ea722bc94f88eca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ea722bc94f88eca") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ea722bc94f88eca" [0133.852] wcscat (in: _Dest=0x3f3fa88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ea722bc94f88eca.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ea722bc94f88eca.68814f" [0133.852] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\ea722bc94f88eca.68814f", NtPathName=0x9d7fb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\ea722bc94f88eca.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44f00 [0133.853] NtSetInformationFile (FileHandle=0x1c9c, IoStatusBlock=0x9d7fb98, FileInformation=0x3d44f00, Length=0x86, FileInformationClass=0xa) returned 0x0 [0134.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f00) returned 1 [0134.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a410c8) returned 1 [0134.033] NtQueryInformationFile (in: FileHandle=0x1c9c, IoStatusBlock=0x9d7fb68, FileInformation=0x9d7fb70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9d7fb68, FileInformation=0x9d7fb70) returned 0x0 [0134.033] NtSetInformationFile (FileHandle=0x1c9c, IoStatusBlock=0x9d7fb68, FileInformation=0x9d7fb70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0134.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 [0134.038] FlushFileBuffers (hFile=0x1c9c) returned 1 [0135.404] CloseHandle (hObject=0x1c9c) returned 1 [0135.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26778 [0135.465] wcscpy (in: _Dest=0x7a26778, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.465] wcscat (in: _Dest=0x7a26778, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.465] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26778) returned 1 [0135.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23680) returned 1 Thread: id = 685 os_tid = 0x1284 [0125.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6ae8 [0125.454] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0125.454] wcscat (in: _Dest=0x2fe6ae8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0125.454] wcscat (in: _Dest=0x2fe6ae8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\*" [0125.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0125.454] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0125.811] wcscmp (_String1=".", _String2=".") returned 0 [0125.811] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.811] wcscmp (_String1="..", _String2=".") returned 1 [0125.811] wcscmp (_String1="..", _String2="..") returned 0 [0125.811] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0125.811] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0125.811] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0125.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1d9c0 [0125.811] wcscpy (in: _Dest=0x3e1d9c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0125.811] wcscat (in: _Dest=0x3e1d9c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0125.811] wcscat (in: _Dest=0x3e1d9c0, _Source="Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" [0129.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1d9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0129.092] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0129.092] wcscmp (_String1="Flash Player", _String2=".") returned 1 [0129.092] wcscmp (_String1="Flash Player", _String2="..") returned 1 [0129.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a236f0 [0129.092] wcscpy (in: _Dest=0x7a236f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0129.093] wcscat (in: _Dest=0x7a236f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0129.093] wcscat (in: _Dest=0x7a236f0, _Source="Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" [0129.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a236f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0129.094] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0129.094] wcscmp (_String1="Headlights", _String2=".") returned 1 [0129.094] wcscmp (_String1="Headlights", _String2="..") returned 1 [0129.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23990 [0129.094] wcscpy (in: _Dest=0x7a23990, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0129.094] wcscat (in: _Dest=0x7a23990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0129.094] wcscat (in: _Dest=0x7a23990, _Source="Headlights" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights" [0129.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0129.095] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0129.095] wcscmp (_String1="Linguistics", _String2=".") returned 1 [0129.095] wcscmp (_String1="Linguistics", _String2="..") returned 1 [0129.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23a70 [0129.096] wcscpy (in: _Dest=0x7a23a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0129.096] wcscat (in: _Dest=0x7a23a70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0129.096] wcscat (in: _Dest=0x7a23a70, _Source="Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" [0129.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0129.097] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0129.097] wcscmp (_String1="LogTransport2", _String2=".") returned 1 [0129.097] wcscmp (_String1="LogTransport2", _String2="..") returned 1 [0129.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e058 [0129.098] wcscpy (in: _Dest=0x3f3e058, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe" [0129.098] wcscat (in: _Dest=0x3f3e058, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\" [0129.098] wcscat (in: _Dest=0x3f3e058, _Source="LogTransport2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2" [0129.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0129.100] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 0 [0129.100] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0129.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0129.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 [0129.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48cc0) returned 1 Thread: id = 686 os_tid = 0x1288 [0125.459] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\BWEb_V6SG3.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\bweb_v6sg3.mp3")) returned 0x2020 [0125.459] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\BWEb_V6SG3.mp3", dwFileAttributes=0x20) returned 1 [0133.439] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\BWEb_V6SG3.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\bweb_v6sg3.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ca0 [0133.439] GetFileSizeEx (in: hFile=0x1ca0, lpFileSize=0x9f3f8ec | out: lpFileSize=0x9f3f8ec*=39167) returned 1 [0133.439] SetFilePointerEx (in: hFile=0x1ca0, liDistanceToMove=0x98fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.439] ReadFile (in: hFile=0x1ca0, lpBuffer=0x9f3f8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f3f8d8, lpOverlapped=0x0 | out: lpBuffer=0x9f3f8c8*, lpNumberOfBytesRead=0x9f3f8d8*=0x4, lpOverlapped=0x0) returned 1 [0133.442] SetFilePointerEx (in: hFile=0x1ca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0133.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0133.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0133.443] NtQuerySystemTime (in: CurrentTime=0x9f3f860 | out: CurrentTime=0x9f3f860*=132462177127704000) returned 0x0 [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x5876e57f [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x56cd174d [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x4077d3a4 [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x59b130aa [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x7dc3a3f5 [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x5d27966b [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x2feed073 [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x30d74322 [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0xdbe3e43 [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0xe8a844a [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x2cfd044a [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x6f348177 [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x3e76f22c [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x2a3fd601 [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x2b732bf3 [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x498cf45a [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x5635b289 [0133.443] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x36a509a1 [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x36cfe261 [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x6953bc7e [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x6a00956e [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x354ae428 [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x404e8d0d [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x4c587af5 [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x14afdd04 [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x6c634728 [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x4d31f378 [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x2eb8534c [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x3d960bc4 [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x23007683 [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x1c585c6a [0133.444] RtlRandomEx (in: Seed=0x9f3f858 | out: Seed=0x9f3f858) returned 0x2825c72 [0133.457] SetFilePointerEx (in: hFile=0x1ca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.457] ReadFile (in: hFile=0x1ca0, lpBuffer=0x7a9e508, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9f3f860, lpOverlapped=0x0 | out: lpBuffer=0x7a9e508*, lpNumberOfBytesRead=0x9f3f860*=0x3c00, lpOverlapped=0x0) returned 1 [0133.458] SetFilePointerEx (in: hFile=0x1ca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851e8 [0133.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0133.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3218) returned 1 [0133.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa2110 [0133.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0133.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0133.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0133.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.459] WriteFile (in: hFile=0x1ca0, lpBuffer=0x7aa2110*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9f3f860, lpOverlapped=0x0 | out: lpBuffer=0x7aa2110*, lpNumberOfBytesWritten=0x9f3f860*=0x3c00, lpOverlapped=0x0) returned 1 [0133.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa2110) returned 1 [0133.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9e508) returned 1 [0133.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79368 [0133.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0133.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac618 [0133.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0133.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0133.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0133.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0133.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3dec828 [0133.763] SetFilePointerEx (in: hFile=0x1ca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.763] WriteFile (in: hFile=0x1ca0, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x9f3f8e0, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x9f3f8e0*=0x10e, lpOverlapped=0x0) returned 1 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f18 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0133.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec37b8 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0133.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0133.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f18) returned 1 [0133.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x3e84f18 [0133.854] sprintf (in: _Dest=0x3e84f18, _Format="%c%c" | out: _Dest="1b") returned 2 [0133.854] sprintf (in: _Dest=0x3e84f1a, _Format="%c%c" | out: _Dest="dc") returned 2 [0133.854] sprintf (in: _Dest=0x3e84f1c, _Format="%c%c" | out: _Dest="81") returned 2 [0133.854] sprintf (in: _Dest=0x3e84f1e, _Format="%c%c" | out: _Dest="83") returned 2 [0133.854] sprintf (in: _Dest=0x3e84f20, _Format="%c%c" | out: _Dest="ef") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f22, _Format="%c%c" | out: _Dest="a1") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f24, _Format="%c%c" | out: _Dest="11") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f26, _Format="%c%c" | out: _Dest="d0") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f28, _Format="%c%c" | out: _Dest="50") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f2a, _Format="%c%c" | out: _Dest="e5") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f2c, _Format="%c%c" | out: _Dest="96") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f2e, _Format="%c%c" | out: _Dest="14") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f30, _Format="%c%c" | out: _Dest="1d") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f32, _Format="%c%c" | out: _Dest="be") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f34, _Format="%c%c" | out: _Dest="af") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f36, _Format="%c%c" | out: _Dest="57") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f38, _Format="%c%c" | out: _Dest="3d") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f3a, _Format="%c%c" | out: _Dest="44") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f3c, _Format="%c%c" | out: _Dest="e5") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f3e, _Format="%c%c" | out: _Dest="65") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f40, _Format="%c%c" | out: _Dest="b9") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f42, _Format="%c%c" | out: _Dest="f3") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f44, _Format="%c%c" | out: _Dest="f0") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f46, _Format="%c%c" | out: _Dest="d3") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f48, _Format="%c%c" | out: _Dest="00") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f4a, _Format="%c%c" | out: _Dest="90") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f4c, _Format="%c%c" | out: _Dest="4f") returned 2 [0133.855] sprintf (in: _Dest=0x3e84f4e, _Format="%c%c" | out: _Dest="80") returned 2 [0133.855] RtlInitAnsiString (in: DestinationString=0x9f3f868, SourceString="1bdc8183efa111d050e596141dbeaf573d44e565b9f3f0d300904f80" | out: DestinationString="1bdc8183efa111d050e596141dbeaf573d44e565b9f3f0d300904f80") [0133.856] RtlAnsiStringToUnicodeString (in: DestinationString=0x9f3f860, SourceString="1bdc8183efa111d050e596141dbeaf573d44e565b9f3f0d300904f80", AllocateDestinationString=1 | out: DestinationString="1bdc8183efa111d050e596141dbeaf573d44e565b9f3f0d300904f80") returned 0x0 [0133.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3efa720 [0133.856] wcscat (in: _Dest=0x3f3fa10, _Source="1bdc8183efa111" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1bdc8183efa111") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1bdc8183efa111" [0133.856] wcscat (in: _Dest=0x3f3fa10, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1bdc8183efa111.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1bdc8183efa111.68814f" [0133.856] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\1bdc8183efa111.68814f", NtPathName=0x9f3f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\1bdc8183efa111.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45890 [0133.856] NtSetInformationFile (FileHandle=0x1ca0, IoStatusBlock=0x9f3f860, FileInformation=0x3d45890, Length=0x84, FileInformationClass=0xa) returned 0x0 [0134.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45890) returned 1 [0134.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a42430) returned 1 [0134.036] NtQueryInformationFile (in: FileHandle=0x1ca0, IoStatusBlock=0x9f3f830, FileInformation=0x9f3f838, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9f3f830, FileInformation=0x9f3f838) returned 0x0 [0134.036] NtSetInformationFile (FileHandle=0x1ca0, IoStatusBlock=0x9f3f830, FileInformation=0x9f3f838, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0134.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa720) returned 1 [0134.044] FlushFileBuffers (hFile=0x1ca0) returned 1 [0135.405] CloseHandle (hObject=0x1ca0) returned 1 [0135.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26708 [0135.502] wcscpy (in: _Dest=0x7a26708, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.502] wcscat (in: _Dest=0x7a26708, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.502] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26708) returned 1 [0135.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee03e0) returned 1 Thread: id = 687 os_tid = 0x128c [0125.459] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\dsxj_2rfxzoit_cemfh.bmp")) returned 0x2020 [0125.459] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp", dwFileAttributes=0x20) returned 1 [0133.459] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\dsxj_2rfxzoit_cemfh.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ca4 [0133.460] GetFileSizeEx (in: hFile=0x1ca4, lpFileSize=0x999f774 | out: lpFileSize=0x999f774*=76571) returned 1 [0133.460] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x12b17, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.460] ReadFile (in: hFile=0x1ca4, lpBuffer=0x999f750, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x999f760, lpOverlapped=0x0 | out: lpBuffer=0x999f750*, lpNumberOfBytesRead=0x999f760*=0x4, lpOverlapped=0x0) returned 1 [0133.463] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0133.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0133.463] NtQuerySystemTime (in: CurrentTime=0x999f6e8 | out: CurrentTime=0x999f6e8*=132462177127860000) returned 0x0 [0133.463] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x6e4eb9a4 [0133.463] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x21f7b922 [0133.463] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x278c845f [0133.463] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x3137c663 [0133.463] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x408c0621 [0133.463] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x3338289f [0133.463] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x2836a533 [0133.463] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x2e93bd40 [0133.463] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x3225f01f [0133.463] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x761028f6 [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x318a93c3 [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x8b467ac [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x2d59570c [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x70397215 [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x1ffba2d1 [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x782f3ac [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x5a2bd66 [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0xf61e563 [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x636a8912 [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x4dfa947e [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x1665469e [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x3df44aff [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0xb470a9d [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x2b9b874e [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x3329355d [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x54b446ec [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x1972cc8b [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x634855ba [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x32fff7af [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x472c67f7 [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x2ef1c78f [0133.464] RtlRandomEx (in: Seed=0x999f6e0 | out: Seed=0x999f6e0) returned 0x6ba5994e [0133.495] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.495] ReadFile (in: hFile=0x1ca4, lpBuffer=0x7aa5d18, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x999f6e8, lpOverlapped=0x0 | out: lpBuffer=0x7aa5d18*, lpNumberOfBytesRead=0x999f6e8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.495] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851e8 [0133.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0133.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0133.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa9920 [0133.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0133.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0133.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0133.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.497] WriteFile (in: hFile=0x1ca4, lpBuffer=0x7aa9920*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x999f6e8, lpOverlapped=0x0 | out: lpBuffer=0x7aa9920*, lpNumberOfBytesWritten=0x999f6e8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa9920) returned 1 [0133.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa5d18) returned 1 [0133.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e07968 [0133.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0133.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e08268 [0133.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0133.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0133.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0133.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d54810 [0133.766] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.766] WriteFile (in: hFile=0x1ca4, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x999f768, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0x999f768*=0x120, lpOverlapped=0x0) returned 1 [0133.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 [0133.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08268) returned 1 [0133.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0133.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0133.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0133.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3330) returned 1 [0133.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ea8) returned 1 [0133.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0133.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0133.864] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp" [0133.864] wcscat (in: _Dest=0x3eb9cd0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp.68814f" [0133.864] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp.68814f", NtPathName=0x999f6e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\dsXJ_2RfXzOit_cemFh.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5fe0 [0133.864] NtSetInformationFile (FileHandle=0x1ca4, IoStatusBlock=0x999f6e8, FileInformation=0x3df5fe0, Length=0x96, FileInformationClass=0xa) returned 0x0 [0134.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 [0134.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a412f0) returned 1 [0134.065] NtQueryInformationFile (in: FileHandle=0x1ca4, IoStatusBlock=0x999f6b8, FileInformation=0x999f6c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x999f6b8, FileInformation=0x999f6c0) returned 0x0 [0134.065] NtSetInformationFile (FileHandle=0x1ca4, IoStatusBlock=0x999f6b8, FileInformation=0x999f6c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 [0134.087] FlushFileBuffers (hFile=0x1ca4) returned 1 [0135.645] CloseHandle (hObject=0x1ca4) returned 1 [0135.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26a88 [0135.654] wcscpy (in: _Dest=0x7a26a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.654] wcscat (in: _Dest=0x7a26a88, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.654] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a88) returned 1 [0135.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 Thread: id = 688 os_tid = 0x1290 [0125.460] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\dwck9.jpg")) returned 0x2020 [0125.460] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg", dwFileAttributes=0x20) returned 1 [0133.497] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\dwck9.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ca8 [0133.498] GetFileSizeEx (in: hFile=0x1ca8, lpFileSize=0xa31f974 | out: lpFileSize=0xa31f974*=70649) returned 1 [0133.498] SetFilePointerEx (in: hFile=0x1ca8, liDistanceToMove=0x113f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.498] ReadFile (in: hFile=0x1ca8, lpBuffer=0xa31f950, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa31f960, lpOverlapped=0x0 | out: lpBuffer=0xa31f950*, lpNumberOfBytesRead=0xa31f960*=0x4, lpOverlapped=0x0) returned 1 [0133.500] SetFilePointerEx (in: hFile=0x1ca8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0133.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec66e8 [0133.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0133.501] NtQuerySystemTime (in: CurrentTime=0xa31f8e8 | out: CurrentTime=0xa31f8e8*=132462177128328000) returned 0x0 [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0xfb96ce7 [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x5afa34cd [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x64f65783 [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x4618edd [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x1697cad9 [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x216c66aa [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x4e08508 [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x381eb110 [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x28d6145b [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x39d26a92 [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x6b1ddecb [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x3a78c36a [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x28e0344a [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x5f1a874a [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x1f5b99ea [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x527ddddb [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x6f8f989b [0133.501] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x79df2e8f [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x5793988d [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x1db5018f [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x48836913 [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x214970a2 [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x2e6bcd6a [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x47c6c6c7 [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x1089d4a1 [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x6313b49 [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x782018f8 [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x692cc5c3 [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x579f45cd [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x4db45a04 [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x2bef4a55 [0133.502] RtlRandomEx (in: Seed=0xa31f8e0 | out: Seed=0xa31f8e0) returned 0x6bfcc9b2 [0133.515] SetFilePointerEx (in: hFile=0x1ca8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.515] ReadFile (in: hFile=0x1ca8, lpBuffer=0x7aad528, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa31f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7aad528*, lpNumberOfBytesRead=0xa31f8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.515] SetFilePointerEx (in: hFile=0x1ca8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851e8 [0133.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0133.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0133.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab1130 [0133.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0133.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0133.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0133.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.517] WriteFile (in: hFile=0x1ca8, lpBuffer=0x7ab1130*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa31f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7ab1130*, lpNumberOfBytesWritten=0xa31f8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab1130) returned 1 [0133.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aad528) returned 1 [0133.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0133.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0133.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0133.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0133.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0133.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0133.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0133.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3deca58 [0133.770] SetFilePointerEx (in: hFile=0x1ca8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.770] WriteFile (in: hFile=0x1ca8, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xa31f968, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xa31f968*=0x104, lpOverlapped=0x0) returned 1 [0133.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0133.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0133.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0133.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0133.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0133.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec66e8) returned 1 [0133.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0133.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0133.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23f40 [0133.865] wcscpy (in: _Dest=0x7a23f40, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg" [0133.865] wcscat (in: _Dest=0x7a23f40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg.68814f" [0133.866] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg.68814f", NtPathName=0xa31f8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\dWck9.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb94d8 [0133.866] NtSetInformationFile (FileHandle=0x1ca8, IoStatusBlock=0xa31f8e8, FileInformation=0x3eb94d8, Length=0x7a, FileInformationClass=0xa) returned 0x0 [0134.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 [0134.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a41fe0) returned 1 [0134.066] NtQueryInformationFile (in: FileHandle=0x1ca8, IoStatusBlock=0xa31f8b8, FileInformation=0xa31f8c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa31f8b8, FileInformation=0xa31f8c0) returned 0x0 [0134.066] NtSetInformationFile (FileHandle=0x1ca8, IoStatusBlock=0xa31f8b8, FileInformation=0xa31f8c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23f40) returned 1 [0134.068] FlushFileBuffers (hFile=0x1ca8) returned 1 [0135.409] CloseHandle (hObject=0x1ca8) returned 1 [0135.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69ad8 [0135.506] wcscpy (in: _Dest=0x3e69ad8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.506] wcscat (in: _Dest=0x3e69ad8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.506] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ad8) returned 1 [0135.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7028) returned 1 Thread: id = 689 os_tid = 0x1294 [0125.461] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eeDj0ryX7zpDHi-Tge.rtf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\eedj0ryx7zpdhi-tge.rtf")) returned 0x2020 [0125.461] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eeDj0ryX7zpDHi-Tge.rtf", dwFileAttributes=0x20) returned 1 [0133.522] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\eeDj0ryX7zpDHi-Tge.rtf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\eedj0ryx7zpdhi-tge.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cac [0133.523] GetFileSizeEx (in: hFile=0x1cac, lpFileSize=0xa09fe4c | out: lpFileSize=0xa09fe4c*=9586) returned 1 [0133.523] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x256e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.523] ReadFile (in: hFile=0x1cac, lpBuffer=0xa09fe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa09fe38, lpOverlapped=0x0 | out: lpBuffer=0xa09fe28*, lpNumberOfBytesRead=0xa09fe38*=0x4, lpOverlapped=0x0) returned 1 [0133.525] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0133.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0133.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0133.526] NtQuerySystemTime (in: CurrentTime=0xa09fdc0 | out: CurrentTime=0xa09fdc0*=132462177128484000) returned 0x0 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x36fabb21 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x1aa6ac50 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x114e085f [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x478d0a0c [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x3d72d3aa [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x6760d02d [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x22b3733e [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x2d47ef47 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x1433994c [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x2047e220 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x7130bc2a [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0xa963976 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x56502825 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x65945c4d [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x11d0058d [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x406ffe99 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x4f0ada4a [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x3c0bc152 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x3aef15f2 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0xc806370 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x5841f1d0 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x1caa4fd2 [0133.526] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x2c627282 [0133.527] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x3e315267 [0133.527] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x41ae2a42 [0133.527] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x5224f1df [0133.527] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x713ca684 [0133.527] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x3376101b [0133.527] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0xba06d23 [0133.527] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x2088347d [0133.527] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x79551d8e [0133.527] RtlRandomEx (in: Seed=0xa09fdb8 | out: Seed=0xa09fdb8) returned 0x364f5821 [0133.538] ReadFile (in: hFile=0x1cac, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0x2572, lpNumberOfBytesRead=0xa09fdb4, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0xa09fdb4*=0x2572, lpOverlapped=0x0) returned 1 [0133.539] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.539] WriteFile (in: hFile=0x1cac, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x2572, lpNumberOfBytesWritten=0xa09fdb8, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0xa09fdb8*=0x2572, lpOverlapped=0x0) returned 1 [0133.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0133.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0133.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0133.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0133.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0133.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e851e8 [0133.784] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.784] WriteFile (in: hFile=0x1cac, lpBuffer=0x3d56058*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xa09fe40, lpOverlapped=0x0 | out: lpBuffer=0x3d56058*, lpNumberOfBytesWritten=0xa09fe40*=0x11e, lpOverlapped=0x0) returned 1 [0133.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07968 [0133.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f740 [0133.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0133.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0133.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0133.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0133.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0133.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0133.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0133.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0133.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1d888 [0133.867] sprintf (in: _Dest=0x3e1d888, _Format="%c%c" | out: _Dest="21") returned 2 [0133.867] sprintf (in: _Dest=0x3e1d88a, _Format="%c%c" | out: _Dest="4f") returned 2 [0133.867] sprintf (in: _Dest=0x3e1d88c, _Format="%c%c" | out: _Dest="2a") returned 2 [0133.867] sprintf (in: _Dest=0x3e1d88e, _Format="%c%c" | out: _Dest="22") returned 2 [0133.867] sprintf (in: _Dest=0x3e1d890, _Format="%c%c" | out: _Dest="ec") returned 2 [0133.867] sprintf (in: _Dest=0x3e1d892, _Format="%c%c" | out: _Dest="ab") returned 2 [0133.867] sprintf (in: _Dest=0x3e1d894, _Format="%c%c" | out: _Dest="2c") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d896, _Format="%c%c" | out: _Dest="32") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d898, _Format="%c%c" | out: _Dest="39") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d89a, _Format="%c%c" | out: _Dest="0c") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d89c, _Format="%c%c" | out: _Dest="06") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d89e, _Format="%c%c" | out: _Dest="3b") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8a0, _Format="%c%c" | out: _Dest="c7") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8a2, _Format="%c%c" | out: _Dest="c9") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8a4, _Format="%c%c" | out: _Dest="83") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8a6, _Format="%c%c" | out: _Dest="bb") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8a8, _Format="%c%c" | out: _Dest="7b") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8aa, _Format="%c%c" | out: _Dest="f5") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8ac, _Format="%c%c" | out: _Dest="6f") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8ae, _Format="%c%c" | out: _Dest="93") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8b0, _Format="%c%c" | out: _Dest="30") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8b2, _Format="%c%c" | out: _Dest="2c") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8b4, _Format="%c%c" | out: _Dest="dd") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8b6, _Format="%c%c" | out: _Dest="e3") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8b8, _Format="%c%c" | out: _Dest="5d") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8ba, _Format="%c%c" | out: _Dest="e0") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8bc, _Format="%c%c" | out: _Dest="60") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8be, _Format="%c%c" | out: _Dest="e0") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8c0, _Format="%c%c" | out: _Dest="e8") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8c2, _Format="%c%c" | out: _Dest="56") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8c4, _Format="%c%c" | out: _Dest="c0") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8c6, _Format="%c%c" | out: _Dest="a2") returned 2 [0133.868] sprintf (in: _Dest=0x3e1d8c8, _Format="%c%c" | out: _Dest="05") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8ca, _Format="%c%c" | out: _Dest="b7") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8cc, _Format="%c%c" | out: _Dest="1f") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8ce, _Format="%c%c" | out: _Dest="df") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8d0, _Format="%c%c" | out: _Dest="90") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8d2, _Format="%c%c" | out: _Dest="6d") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8d4, _Format="%c%c" | out: _Dest="5d") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8d6, _Format="%c%c" | out: _Dest="a1") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8d8, _Format="%c%c" | out: _Dest="b0") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8da, _Format="%c%c" | out: _Dest="73") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8dc, _Format="%c%c" | out: _Dest="3a") returned 2 [0133.869] sprintf (in: _Dest=0x3e1d8de, _Format="%c%c" | out: _Dest="d4") returned 2 [0133.869] RtlInitAnsiString (in: DestinationString=0xa09fdc8, SourceString="214f2a22ecab2c32390c063bc7c983bb7bf56f93302cdde35de060e0e856c0a205b71fdf906d5da1b0733ad4" | out: DestinationString="214f2a22ecab2c32390c063bc7c983bb7bf56f93302cdde35de060e0e856c0a205b71fdf906d5da1b0733ad4") [0133.869] RtlAnsiStringToUnicodeString (in: DestinationString=0xa09fdc0, SourceString="214f2a22ecab2c32390c063bc7c983bb7bf56f93302cdde35de060e0e856c0a205b71fdf906d5da1b0733ad4", AllocateDestinationString=1 | out: DestinationString="214f2a22ecab2c32390c063bc7c983bb7bf56f93302cdde35de060e0e856c0a205b71fdf906d5da1b0733ad4") returned 0x0 [0133.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66558 [0133.869] wcscat (in: _Dest=0x3eb9e68, _Source="214f2a22ecab2c32390c06" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\214f2a22ecab2c32390c06") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\214f2a22ecab2c32390c06" [0133.869] wcscat (in: _Dest=0x3eb9e68, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\214f2a22ecab2c32390c06.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\214f2a22ecab2c32390c06.68814f" [0133.869] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\214f2a22ecab2c32390c06.68814f", NtPathName=0xa09fdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\214f2a22ecab2c32390c06.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5b80 [0133.869] NtSetInformationFile (FileHandle=0x1cac, IoStatusBlock=0xa09fdc0, FileInformation=0x3df5b80, Length=0x94, FileInformationClass=0xa) returned 0x0 [0134.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5b80) returned 1 [0134.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a41968) returned 1 [0134.047] NtQueryInformationFile (in: FileHandle=0x1cac, IoStatusBlock=0xa09fd90, FileInformation=0xa09fd98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa09fd90, FileInformation=0xa09fd98) returned 0x0 [0134.047] NtSetInformationFile (FileHandle=0x1cac, IoStatusBlock=0xa09fd90, FileInformation=0xa09fd98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 [0134.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 [0134.049] FlushFileBuffers (hFile=0x1cac) returned 1 [0135.405] CloseHandle (hObject=0x1cac) returned 1 [0135.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a269a8 [0135.504] wcscpy (in: _Dest=0x7a269a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.504] wcscat (in: _Dest=0x7a269a8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.504] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a269a8) returned 1 [0135.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 Thread: id = 690 os_tid = 0x1298 [0125.462] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ejyccmut1.png")) returned 0x2020 [0125.462] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png", dwFileAttributes=0x20) returned 1 [0133.540] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ejyccmut1.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cb0 [0133.540] GetFileSizeEx (in: hFile=0x1cb0, lpFileSize=0x934fc04 | out: lpFileSize=0x934fc04*=80534) returned 1 [0133.540] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x13a92, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.540] ReadFile (in: hFile=0x1cb0, lpBuffer=0x934fbe0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x934fbf0, lpOverlapped=0x0 | out: lpBuffer=0x934fbe0*, lpNumberOfBytesRead=0x934fbf0*=0x4, lpOverlapped=0x0) returned 1 [0133.542] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0133.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0133.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0133.542] NtQuerySystemTime (in: CurrentTime=0x934fb78 | out: CurrentTime=0x934fb78*=132462177128640000) returned 0x0 [0133.542] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x740605bb [0133.542] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0xaf2b7a8 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x6113f299 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x1ada17ff [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x633e11e8 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x770d9c46 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x3ce797c [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x7ee0b05b [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x354e43a1 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x5fe94f43 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x3f5f9bd7 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x407f3e6a [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x33285b37 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x50f12cbf [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0xe4df24c [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x213557a7 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x316f0aea [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x1c94fb5b [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x4cdf98f [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x77e6556e [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x656b4ad8 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x6839d130 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x6e5d2d1d [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x5e74bc85 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x660d248e [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0xadebe80 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x4a07080e [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x794a3058 [0133.543] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x6a054f41 [0133.544] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x52d57fbf [0133.544] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0xfd02bef [0133.544] RtlRandomEx (in: Seed=0x934fb70 | out: Seed=0x934fb70) returned 0x3c80abe1 [0133.555] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.555] ReadFile (in: hFile=0x1cb0, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x934fb78, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0x934fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.555] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07890 [0133.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0133.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0133.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0133.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0133.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0133.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0133.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33a8) returned 1 [0133.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0133.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0133.557] WriteFile (in: hFile=0x1cb0, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x934fb78, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x934fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0133.787] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.787] ReadFile (in: hFile=0x1cb0, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x934fb78, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0x934fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.787] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07a88 [0133.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0133.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0133.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0133.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0133.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0133.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0133.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.788] WriteFile (in: hFile=0x1cb0, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x934fb78, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x934fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0133.793] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0xfe96, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.794] ReadFile (in: hFile=0x1cb0, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x934fb78, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0x934fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.794] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0xfe96, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07a88 [0133.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0133.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0133.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0133.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0133.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec48e8 [0133.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec48e8) returned 1 [0133.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.795] WriteFile (in: hFile=0x1cb0, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x934fb78, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x934fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0133.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1ec08 [0133.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0133.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86938 [0133.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0133.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0133.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0133.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e0aac0 [0133.802] SetFilePointerEx (in: hFile=0x1cb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.802] WriteFile (in: hFile=0x1cb0, lpBuffer=0x3e0aac0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x934fbf8, lpOverlapped=0x0 | out: lpBuffer=0x3e0aac0*, lpNumberOfBytesWritten=0x934fbf8*=0x14c, lpOverlapped=0x0) returned 1 [0133.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0aac0) returned 1 [0133.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86938) returned 1 [0133.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0133.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86908) returned 1 [0133.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec08) returned 1 [0133.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0133.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0133.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0133.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f740 [0133.874] wcscpy (in: _Dest=0x3f3f740, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png" [0133.874] wcscat (in: _Dest=0x3f3f740, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png.68814f" [0133.874] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png.68814f", NtPathName=0x934fb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\EJyCCMuT1.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45650 [0133.874] NtSetInformationFile (FileHandle=0x1cb0, IoStatusBlock=0x934fb78, FileInformation=0x3d45650, Length=0x82, FileInformationClass=0xa) returned 0x0 [0133.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 [0133.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40c78) returned 1 [0133.907] NtQueryInformationFile (in: FileHandle=0x1cb0, IoStatusBlock=0x934fb48, FileInformation=0x934fb50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x934fb48, FileInformation=0x934fb50) returned 0x0 [0133.908] NtSetInformationFile (FileHandle=0x1cb0, IoStatusBlock=0x934fb48, FileInformation=0x934fb50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0133.915] FlushFileBuffers (hFile=0x1cb0) returned 1 [0135.280] CloseHandle (hObject=0x1cb0) returned 1 [0135.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a261c8 [0135.429] wcscpy (in: _Dest=0x7a261c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.430] wcscat (in: _Dest=0x7a261c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.430] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a261c8) returned 1 [0135.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee06b8) returned 1 Thread: id = 691 os_tid = 0x129c [0125.462] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HnPNtCA VKOCQ6Lgo.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\hnpntca vkocq6lgo.mp3")) returned 0x2020 [0125.462] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HnPNtCA VKOCQ6Lgo.mp3", dwFileAttributes=0x20) returned 1 [0133.557] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\HnPNtCA VKOCQ6Lgo.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\hnpntca vkocq6lgo.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cb4 [0133.557] GetFileSizeEx (in: hFile=0x1cb4, lpFileSize=0xa62ff04 | out: lpFileSize=0xa62ff04*=85643) returned 1 [0133.557] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x14e87, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.558] ReadFile (in: hFile=0x1cb4, lpBuffer=0xa62fee0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa62fef0, lpOverlapped=0x0 | out: lpBuffer=0xa62fee0*, lpNumberOfBytesRead=0xa62fef0*=0x4, lpOverlapped=0x0) returned 1 [0133.560] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0133.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0133.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33f8 [0133.560] NtQuerySystemTime (in: CurrentTime=0xa62fe78 | out: CurrentTime=0xa62fe78*=132462177128952000) returned 0x0 [0133.560] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x1a68494d [0133.560] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x1a8eae97 [0133.560] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x3af2197f [0133.560] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x3f137619 [0133.560] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x145f3869 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x66add87f [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0xa98f646 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x2c98f154 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x3b7b750b [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x7e84f669 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x2afaccdc [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x35791c61 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x63824247 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x61c10716 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x465100bf [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x45339c2 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x674f71c8 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x6e711fe9 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x210b02c7 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x2ded1dc7 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x3c569ac2 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x64c6d0ea [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x4681d8f5 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x3c6b8e49 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x203c528a [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x2c98f0f4 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x564f0c6f [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x68386570 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x5de24db5 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x77931e32 [0133.561] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0x1bf5fa3a [0133.562] RtlRandomEx (in: Seed=0xa62fe70 | out: Seed=0xa62fe70) returned 0xc7018bb [0133.574] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.574] ReadFile (in: hFile=0x1cb4, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa62fe78, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xa62fe78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.575] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07890 [0133.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0133.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0133.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33a8) returned 1 [0133.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0133.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0133.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33f8 [0133.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33f8) returned 1 [0133.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0133.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0133.576] WriteFile (in: hFile=0x1cb4, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa62fe78, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0xa62fe78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0133.791] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.791] ReadFile (in: hFile=0x1cb4, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa62fe78, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xa62fe78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.791] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07a88 [0133.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0133.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0133.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0133.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0133.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0133.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0133.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.792] WriteFile (in: hFile=0x1cb4, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa62fe78, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0xa62fe78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0133.799] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x1128b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.799] ReadFile (in: hFile=0x1cb4, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa62fe78, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xa62fe78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.799] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x1128b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07a88 [0133.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0133.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0133.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0133.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0133.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0133.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0133.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.800] WriteFile (in: hFile=0x1cb4, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa62fe78, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0xa62fe78*=0x3c00, lpOverlapped=0x0) returned 1 [0133.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0133.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1ea68 [0133.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33a8) returned 1 [0133.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2de40 [0133.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0133.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0133.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0133.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15c) returned 0x3dcdfa0 [0133.806] SetFilePointerEx (in: hFile=0x1cb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.806] WriteFile (in: hFile=0x1cb4, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x15c, lpNumberOfBytesWritten=0xa62fef8, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0xa62fef8*=0x15c, lpOverlapped=0x0) returned 1 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851e8 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0133.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37e0) returned 1 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac3e8 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0133.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0133.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0133.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0133.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe7208 [0133.880] sprintf (in: _Dest=0x2fe7208, _Format="%c%c" | out: _Dest="67") returned 2 [0133.880] sprintf (in: _Dest=0x2fe720a, _Format="%c%c" | out: _Dest="29") returned 2 [0133.880] sprintf (in: _Dest=0x2fe720c, _Format="%c%c" | out: _Dest="09") returned 2 [0133.880] sprintf (in: _Dest=0x2fe720e, _Format="%c%c" | out: _Dest="2e") returned 2 [0133.880] sprintf (in: _Dest=0x2fe7210, _Format="%c%c" | out: _Dest="18") returned 2 [0133.880] sprintf (in: _Dest=0x2fe7212, _Format="%c%c" | out: _Dest="43") returned 2 [0133.880] sprintf (in: _Dest=0x2fe7214, _Format="%c%c" | out: _Dest="fb") returned 2 [0133.880] sprintf (in: _Dest=0x2fe7216, _Format="%c%c" | out: _Dest="4d") returned 2 [0133.880] sprintf (in: _Dest=0x2fe7218, _Format="%c%c" | out: _Dest="9e") returned 2 [0133.880] sprintf (in: _Dest=0x2fe721a, _Format="%c%c" | out: _Dest="88") returned 2 [0133.880] sprintf (in: _Dest=0x2fe721c, _Format="%c%c" | out: _Dest="ec") returned 2 [0133.880] sprintf (in: _Dest=0x2fe721e, _Format="%c%c" | out: _Dest="a8") returned 2 [0133.880] sprintf (in: _Dest=0x2fe7220, _Format="%c%c" | out: _Dest="96") returned 2 [0133.880] sprintf (in: _Dest=0x2fe7222, _Format="%c%c" | out: _Dest="03") returned 2 [0133.880] sprintf (in: _Dest=0x2fe7224, _Format="%c%c" | out: _Dest="43") returned 2 [0133.880] sprintf (in: _Dest=0x2fe7226, _Format="%c%c" | out: _Dest="dd") returned 2 [0133.880] sprintf (in: _Dest=0x2fe7228, _Format="%c%c" | out: _Dest="22") returned 2 [0133.880] sprintf (in: _Dest=0x2fe722a, _Format="%c%c" | out: _Dest="1b") returned 2 [0133.880] sprintf (in: _Dest=0x2fe722c, _Format="%c%c" | out: _Dest="a5") returned 2 [0133.880] sprintf (in: _Dest=0x2fe722e, _Format="%c%c" | out: _Dest="7a") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7230, _Format="%c%c" | out: _Dest="d4") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7232, _Format="%c%c" | out: _Dest="76") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7234, _Format="%c%c" | out: _Dest="89") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7236, _Format="%c%c" | out: _Dest="42") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7238, _Format="%c%c" | out: _Dest="d2") returned 2 [0133.881] sprintf (in: _Dest=0x2fe723a, _Format="%c%c" | out: _Dest="b0") returned 2 [0133.881] sprintf (in: _Dest=0x2fe723c, _Format="%c%c" | out: _Dest="2d") returned 2 [0133.881] sprintf (in: _Dest=0x2fe723e, _Format="%c%c" | out: _Dest="bb") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7240, _Format="%c%c" | out: _Dest="a1") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7242, _Format="%c%c" | out: _Dest="40") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7244, _Format="%c%c" | out: _Dest="de") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7246, _Format="%c%c" | out: _Dest="7a") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7248, _Format="%c%c" | out: _Dest="d6") returned 2 [0133.881] sprintf (in: _Dest=0x2fe724a, _Format="%c%c" | out: _Dest="fc") returned 2 [0133.881] sprintf (in: _Dest=0x2fe724c, _Format="%c%c" | out: _Dest="ca") returned 2 [0133.881] sprintf (in: _Dest=0x2fe724e, _Format="%c%c" | out: _Dest="9f") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7250, _Format="%c%c" | out: _Dest="d8") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7252, _Format="%c%c" | out: _Dest="f0") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7254, _Format="%c%c" | out: _Dest="f2") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7256, _Format="%c%c" | out: _Dest="a9") returned 2 [0133.881] sprintf (in: _Dest=0x2fe7258, _Format="%c%c" | out: _Dest="cb") returned 2 [0133.881] sprintf (in: _Dest=0x2fe725a, _Format="%c%c" | out: _Dest="82") returned 2 [0133.881] RtlInitAnsiString (in: DestinationString=0xa62fe80, SourceString="6729092e1843fb4d9e88eca8960343dd221ba57ad4768942d2b02dbba140de7ad6fcca9fd8f0f2a9cb82" | out: DestinationString="6729092e1843fb4d9e88eca8960343dd221ba57ad4768942d2b02dbba140de7ad6fcca9fd8f0f2a9cb82") [0133.881] RtlAnsiStringToUnicodeString (in: DestinationString=0xa62fe78, SourceString="6729092e1843fb4d9e88eca8960343dd221ba57ad4768942d2b02dbba140de7ad6fcca9fd8f0f2a9cb82", AllocateDestinationString=1 | out: DestinationString="6729092e1843fb4d9e88eca8960343dd221ba57ad4768942d2b02dbba140de7ad6fcca9fd8f0f2a9cb82") returned 0x0 [0133.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7938 [0133.882] wcscat (in: _Dest=0x3eb9c48, _Source="6729092e1843fb4d9e88e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\6729092e1843fb4d9e88e") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\6729092e1843fb4d9e88e" [0133.882] wcscat (in: _Dest=0x3eb9c48, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\6729092e1843fb4d9e88e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\6729092e1843fb4d9e88e.68814f" [0133.882] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\6729092e1843fb4d9e88e.68814f", NtPathName=0xa62fe70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\6729092e1843fb4d9e88e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df6080 [0133.882] NtSetInformationFile (FileHandle=0x1cb4, IoStatusBlock=0xa62fe78, FileInformation=0x3df6080, Length=0x92, FileInformationClass=0xa) returned 0x0 [0133.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6080) returned 1 [0133.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40828) returned 1 [0133.916] NtQueryInformationFile (in: FileHandle=0x1cb4, IoStatusBlock=0xa62fe48, FileInformation=0xa62fe50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa62fe48, FileInformation=0xa62fe50) returned 0x0 [0133.916] NtSetInformationFile (FileHandle=0x1cb4, IoStatusBlock=0xa62fe48, FileInformation=0xa62fe50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9c48) returned 1 [0133.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7938) returned 1 [0133.923] FlushFileBuffers (hFile=0x1cb4) returned 1 [0135.289] CloseHandle (hObject=0x1cb4) returned 1 [0135.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26e78 [0135.440] wcscpy (in: _Dest=0x7a26e78, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.440] wcscat (in: _Dest=0x7a26e78, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.440] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e78) returned 1 [0135.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 Thread: id = 692 os_tid = 0x12a0 [0125.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0650 [0125.463] wcscpy (in: _Dest=0x3ee0650, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" [0125.463] wcscat (in: _Dest=0x3ee0650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\" [0125.463] wcscat (in: _Dest=0x3ee0650, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\*" [0125.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55318 [0125.463] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b00 [0125.464] wcscmp (_String1=".", _String2=".") returned 0 [0125.464] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.464] wcscmp (_String1="..", _String2=".") returned 1 [0125.464] wcscmp (_String1="..", _String2="..") returned 0 [0125.464] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 1 [0125.464] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2=".") returned 1 [0125.464] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2="..") returned 1 [0125.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c168 [0125.465] wcscpy (in: _Dest=0x35c168, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities" [0125.465] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\" [0125.465] wcscat (in: _Dest=0x35c168, _Source="{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0133.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0133.054] FindNextFileW (in: hFindFile=0x3066b00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 0 [0133.054] FindClose (in: hFindFile=0x3066b00 | out: hFindFile=0x3066b00) returned 1 [0133.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55318) returned 1 [0133.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0650) returned 1 [0133.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7088) returned 1 Thread: id = 693 os_tid = 0x12a4 [0125.465] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\JclZ.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\jclz.wav")) returned 0x2020 [0125.465] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\JclZ.wav", dwFileAttributes=0x20) returned 1 [0133.576] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\JclZ.wav" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\jclz.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cb8 [0133.577] GetFileSizeEx (in: hFile=0x1cb8, lpFileSize=0x90bfa04 | out: lpFileSize=0x90bfa04*=76217) returned 1 [0133.577] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x129b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.577] ReadFile (in: hFile=0x1cb8, lpBuffer=0x90bf9e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x90bf9f0, lpOverlapped=0x0 | out: lpBuffer=0x90bf9e0*, lpNumberOfBytesRead=0x90bf9f0*=0x4, lpOverlapped=0x0) returned 1 [0133.579] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33f8 [0133.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0133.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0133.580] NtQuerySystemTime (in: CurrentTime=0x90bf978 | out: CurrentTime=0x90bf978*=132462177129108000) returned 0x0 [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x3d7c00ea [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x2851e6e8 [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x31bd2942 [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x28bd2440 [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x206d802a [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x1899f78e [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x35a3f521 [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x7a5d9845 [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x6fbfcee2 [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x47c6a825 [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x1089c4de [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x719172bc [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x1ba2f8a3 [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x51ef882b [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x781df00e [0133.580] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x432dcfd9 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x306d0f06 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x2d39cdc1 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x10e05813 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0xbbe9d3f [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x71447bf9 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x2c08ddd5 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x1c61448e [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x36247f61 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0xf27ed84 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x4c99c378 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x5039ce6b [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x5d3f07d5 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x729b689d [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x2865526a [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x1d304149 [0133.581] RtlRandomEx (in: Seed=0x90bf970 | out: Seed=0x90bf970) returned 0x11cdfdf7 [0133.593] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.593] ReadFile (in: hFile=0x1cb8, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x90bf978, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0x90bf978*=0x3c00, lpOverlapped=0x0) returned 1 [0133.593] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07890 [0133.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0133.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33f8 [0133.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33f8) returned 1 [0133.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0133.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33f8 [0133.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0133.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0133.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0133.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0133.594] WriteFile (in: hFile=0x1cb8, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x90bf978, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0x90bf978*=0x3c00, lpOverlapped=0x0) returned 1 [0133.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0133.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0133.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec48e8 [0133.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0133.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec47f8 [0133.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0133.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0133.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0133.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3deaf00 [0133.798] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.798] WriteFile (in: hFile=0x1cb8, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x90bf9f8, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0x90bf9f8*=0x102, lpOverlapped=0x0) returned 1 [0133.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851e8 [0133.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f740 [0133.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0133.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2818) returned 1 [0133.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9148 [0133.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0133.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0133.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0133.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0133.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x3e86968 [0133.871] sprintf (in: _Dest=0x3e86968, _Format="%c%c" | out: _Dest="90") returned 2 [0133.871] sprintf (in: _Dest=0x3e8696a, _Format="%c%c" | out: _Dest="01") returned 2 [0133.871] sprintf (in: _Dest=0x3e8696c, _Format="%c%c" | out: _Dest="61") returned 2 [0133.871] sprintf (in: _Dest=0x3e8696e, _Format="%c%c" | out: _Dest="92") returned 2 [0133.871] sprintf (in: _Dest=0x3e86970, _Format="%c%c" | out: _Dest="8d") returned 2 [0133.871] sprintf (in: _Dest=0x3e86972, _Format="%c%c" | out: _Dest="4b") returned 2 [0133.871] sprintf (in: _Dest=0x3e86974, _Format="%c%c" | out: _Dest="65") returned 2 [0133.871] sprintf (in: _Dest=0x3e86976, _Format="%c%c" | out: _Dest="95") returned 2 [0133.871] sprintf (in: _Dest=0x3e86978, _Format="%c%c" | out: _Dest="f1") returned 2 [0133.871] sprintf (in: _Dest=0x3e8697a, _Format="%c%c" | out: _Dest="1a") returned 2 [0133.871] sprintf (in: _Dest=0x3e8697c, _Format="%c%c" | out: _Dest="bb") returned 2 [0133.871] sprintf (in: _Dest=0x3e8697e, _Format="%c%c" | out: _Dest="95") returned 2 [0133.871] sprintf (in: _Dest=0x3e86980, _Format="%c%c" | out: _Dest="61") returned 2 [0133.872] sprintf (in: _Dest=0x3e86982, _Format="%c%c" | out: _Dest="3d") returned 2 [0133.872] sprintf (in: _Dest=0x3e86984, _Format="%c%c" | out: _Dest="25") returned 2 [0133.872] sprintf (in: _Dest=0x3e86986, _Format="%c%c" | out: _Dest="d2") returned 2 [0133.872] RtlInitAnsiString (in: DestinationString=0x90bf980, SourceString="900161928d4b6595f11abb95613d25d2" | out: DestinationString="900161928d4b6595f11abb95613d25d2") [0133.872] RtlAnsiStringToUnicodeString (in: DestinationString=0x90bf978, SourceString="900161928d4b6595f11abb95613d25d2", AllocateDestinationString=1 | out: DestinationString="900161928d4b6595f11abb95613d25d2") returned 0x0 [0133.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6388 [0133.872] wcscat (in: _Dest=0x7a23d80, _Source="90016192" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\90016192") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\90016192" [0133.872] wcscat (in: _Dest=0x7a23d80, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\90016192.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\90016192.68814f" [0133.872] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\90016192.68814f", NtPathName=0x90bf970, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\90016192.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efb620 [0133.872] NtSetInformationFile (FileHandle=0x1cb8, IoStatusBlock=0x90bf978, FileInformation=0x3efb620, Length=0x78, FileInformationClass=0xa) returned 0x0 [0133.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb620) returned 1 [0133.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ff88) returned 1 [0133.906] NtQueryInformationFile (in: FileHandle=0x1cb8, IoStatusBlock=0x90bf948, FileInformation=0x90bf950, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x90bf948, FileInformation=0x90bf950) returned 0x0 [0133.906] NtSetInformationFile (FileHandle=0x1cb8, IoStatusBlock=0x90bf948, FileInformation=0x90bf950, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d80) returned 1 [0133.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6388) returned 1 [0133.910] FlushFileBuffers (hFile=0x1cb8) returned 1 [0135.261] CloseHandle (hObject=0x1cb8) returned 1 [0135.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26548 [0135.428] wcscpy (in: _Dest=0x7a26548, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.428] wcscat (in: _Dest=0x7a26548, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.429] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26548) returned 1 [0135.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe70e8) returned 1 Thread: id = 694 os_tid = 0x12a8 [0125.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7378 [0125.466] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0125.466] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0125.466] wcscat (in: _Dest=0x2ff7378, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*" [0125.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0125.466] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f00 [0125.812] wcscmp (_String1=".", _String2=".") returned 0 [0125.812] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9009a20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.812] wcscmp (_String1="..", _String2=".") returned 1 [0125.812] wcscmp (_String1="..", _String2="..") returned 0 [0125.812] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90a1fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027.mst", cAlternateFileName="")) returned 1 [0125.812] wcscmp (_String1="1027.mst", _String2=".") returned 1 [0125.812] wcscmp (_String1="1027.mst", _String2="..") returned 1 [0125.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a120 [0125.813] wcscpy (in: _Dest=0x3e3a120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0125.813] wcscat (in: _Dest=0x3e3a120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0125.813] wcscat (in: _Dest=0x3e3a120, _Source="1027.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" [0135.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0135.954] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028.mst", cAlternateFileName="")) returned 1 [0135.954] wcscmp (_String1="1028.mst", _String2=".") returned 1 [0135.954] wcscmp (_String1="1028.mst", _String2="..") returned 1 [0135.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a378 [0135.954] wcscpy (in: _Dest=0x3e3a378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.954] wcscat (in: _Dest=0x3e3a378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.954] wcscat (in: _Dest=0x3e3a378, _Source="1028.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" [0135.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0135.955] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029.mst", cAlternateFileName="")) returned 1 [0135.955] wcscmp (_String1="1029.mst", _String2=".") returned 1 [0135.955] wcscmp (_String1="1029.mst", _String2="..") returned 1 [0135.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e38e60 [0135.956] wcscpy (in: _Dest=0x3e38e60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.956] wcscat (in: _Dest=0x3e38e60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.956] wcscat (in: _Dest=0x3e38e60, _Source="1029.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" [0135.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0135.957] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030.mst", cAlternateFileName="")) returned 1 [0135.957] wcscmp (_String1="1030.mst", _String2=".") returned 1 [0135.957] wcscmp (_String1="1030.mst", _String2="..") returned 1 [0135.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a440 [0135.957] wcscpy (in: _Dest=0x3e3a440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.957] wcscat (in: _Dest=0x3e3a440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.957] wcscat (in: _Dest=0x3e3a440, _Source="1030.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" [0135.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b6c [0135.959] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031.mst", cAlternateFileName="")) returned 1 [0135.959] wcscmp (_String1="1031.mst", _String2=".") returned 1 [0135.959] wcscmp (_String1="1031.mst", _String2="..") returned 1 [0135.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a508 [0135.959] wcscpy (in: _Dest=0x3e3a508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.959] wcscat (in: _Dest=0x3e3a508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.959] wcscat (in: _Dest=0x3e3a508, _Source="1031.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" [0135.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0135.960] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033.mst", cAlternateFileName="")) returned 1 [0135.960] wcscmp (_String1="1033.mst", _String2=".") returned 1 [0135.960] wcscmp (_String1="1033.mst", _String2="..") returned 1 [0135.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a5d0 [0135.960] wcscpy (in: _Dest=0x3e3a5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.960] wcscat (in: _Dest=0x3e3a5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.960] wcscat (in: _Dest=0x3e3a5d0, _Source="1033.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" [0135.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0135.961] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1034.mst", cAlternateFileName="")) returned 1 [0135.961] wcscmp (_String1="1034.mst", _String2=".") returned 1 [0135.962] wcscmp (_String1="1034.mst", _String2="..") returned 1 [0135.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a698 [0135.962] wcscpy (in: _Dest=0x3e3a698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.962] wcscat (in: _Dest=0x3e3a698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.962] wcscat (in: _Dest=0x3e3a698, _Source="1034.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" [0135.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8 [0135.964] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035.mst", cAlternateFileName="")) returned 1 [0135.964] wcscmp (_String1="1035.mst", _String2=".") returned 1 [0135.964] wcscmp (_String1="1035.mst", _String2="..") returned 1 [0135.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a760 [0135.964] wcscpy (in: _Dest=0x3e3a760, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.964] wcscat (in: _Dest=0x3e3a760, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.964] wcscat (in: _Dest=0x3e3a760, _Source="1035.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" [0135.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0135.966] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036.mst", cAlternateFileName="")) returned 1 [0135.966] wcscmp (_String1="1036.mst", _String2=".") returned 1 [0135.966] wcscmp (_String1="1036.mst", _String2="..") returned 1 [0135.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a828 [0135.966] wcscpy (in: _Dest=0x3e3a828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.966] wcscat (in: _Dest=0x3e3a828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.966] wcscat (in: _Dest=0x3e3a828, _Source="1036.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" [0135.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0135.967] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038.mst", cAlternateFileName="")) returned 1 [0135.967] wcscmp (_String1="1038.mst", _String2=".") returned 1 [0135.967] wcscmp (_String1="1038.mst", _String2="..") returned 1 [0135.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a8f0 [0135.967] wcscpy (in: _Dest=0x3e3a8f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.967] wcscat (in: _Dest=0x3e3a8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.967] wcscat (in: _Dest=0x3e3a8f0, _Source="1038.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" [0135.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0135.968] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97c61a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040.mst", cAlternateFileName="")) returned 1 [0135.968] wcscmp (_String1="1040.mst", _String2=".") returned 1 [0135.968] wcscmp (_String1="1040.mst", _String2="..") returned 1 [0135.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a9b8 [0135.969] wcscpy (in: _Dest=0x3e3a9b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.969] wcscat (in: _Dest=0x3e3a9b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.969] wcscat (in: _Dest=0x3e3a9b8, _Source="1040.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" [0135.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0135.970] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041.mst", cAlternateFileName="")) returned 1 [0135.970] wcscmp (_String1="1041.mst", _String2=".") returned 1 [0135.970] wcscmp (_String1="1041.mst", _String2="..") returned 1 [0135.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3aa80 [0135.970] wcscpy (in: _Dest=0x3e3aa80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.970] wcscat (in: _Dest=0x3e3aa80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.970] wcscat (in: _Dest=0x3e3aa80, _Source="1041.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" [0135.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3aa80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c98 [0135.971] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042.mst", cAlternateFileName="")) returned 1 [0135.971] wcscmp (_String1="1042.mst", _String2=".") returned 1 [0135.971] wcscmp (_String1="1042.mst", _String2="..") returned 1 [0135.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3ab48 [0135.972] wcscpy (in: _Dest=0x3e3ab48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.972] wcscat (in: _Dest=0x3e3ab48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.972] wcscat (in: _Dest=0x3e3ab48, _Source="1042.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" [0135.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3ab48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90 [0135.973] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043.mst", cAlternateFileName="")) returned 1 [0135.973] wcscmp (_String1="1043.mst", _String2=".") returned 1 [0135.973] wcscmp (_String1="1043.mst", _String2="..") returned 1 [0135.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40060 [0135.973] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.973] wcscat (in: _Dest=0x3d40060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.974] wcscat (in: _Dest=0x3d40060, _Source="1043.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" [0135.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0135.975] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044.mst", cAlternateFileName="")) returned 1 [0135.975] wcscmp (_String1="1044.mst", _String2=".") returned 1 [0135.975] wcscmp (_String1="1044.mst", _String2="..") returned 1 [0135.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40128 [0135.975] wcscpy (in: _Dest=0x3d40128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.975] wcscat (in: _Dest=0x3d40128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.975] wcscat (in: _Dest=0x3d40128, _Source="1044.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" [0135.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40 [0135.976] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045.mst", cAlternateFileName="")) returned 1 [0135.976] wcscmp (_String1="1045.mst", _String2=".") returned 1 [0135.977] wcscmp (_String1="1045.mst", _String2="..") returned 1 [0135.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d401f0 [0135.977] wcscpy (in: _Dest=0x3d401f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.977] wcscat (in: _Dest=0x3d401f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.977] wcscat (in: _Dest=0x3d401f0, _Source="1045.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" [0135.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d401f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc5c [0135.978] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046.mst", cAlternateFileName="")) returned 1 [0135.978] wcscmp (_String1="1046.mst", _String2=".") returned 1 [0135.978] wcscmp (_String1="1046.mst", _String2="..") returned 1 [0135.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d402b8 [0135.978] wcscpy (in: _Dest=0x3d402b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.978] wcscat (in: _Dest=0x3d402b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.978] wcscat (in: _Dest=0x3d402b8, _Source="1046.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" [0135.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d402b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14 [0135.980] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048.mst", cAlternateFileName="")) returned 1 [0135.980] wcscmp (_String1="1048.mst", _String2=".") returned 1 [0135.980] wcscmp (_String1="1048.mst", _String2="..") returned 1 [0135.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40380 [0135.980] wcscpy (in: _Dest=0x3d40380, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.980] wcscat (in: _Dest=0x3d40380, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.980] wcscat (in: _Dest=0x3d40380, _Source="1048.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" [0135.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0135.981] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd97a0040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049.mst", cAlternateFileName="")) returned 1 [0135.981] wcscmp (_String1="1049.mst", _String2=".") returned 1 [0135.981] wcscmp (_String1="1049.mst", _String2="..") returned 1 [0135.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40448 [0135.981] wcscpy (in: _Dest=0x3d40448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.981] wcscat (in: _Dest=0x3d40448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.981] wcscat (in: _Dest=0x3d40448, _Source="1049.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" [0135.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c [0135.983] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050.mst", cAlternateFileName="")) returned 1 [0135.983] wcscmp (_String1="1050.mst", _String2=".") returned 1 [0135.983] wcscmp (_String1="1050.mst", _String2="..") returned 1 [0135.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40510 [0135.983] wcscpy (in: _Dest=0x3d40510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.983] wcscat (in: _Dest=0x3d40510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.983] wcscat (in: _Dest=0x3d40510, _Source="1050.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" [0135.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0135.984] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051.mst", cAlternateFileName="")) returned 1 [0135.984] wcscmp (_String1="1051.mst", _String2=".") returned 1 [0135.984] wcscmp (_String1="1051.mst", _String2="..") returned 1 [0135.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d405d8 [0135.984] wcscpy (in: _Dest=0x3d405d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.985] wcscat (in: _Dest=0x3d405d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.985] wcscat (in: _Dest=0x3d405d8, _Source="1051.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" [0135.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d405d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0135.986] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053.mst", cAlternateFileName="")) returned 1 [0135.986] wcscmp (_String1="1053.mst", _String2=".") returned 1 [0135.986] wcscmp (_String1="1053.mst", _String2="..") returned 1 [0135.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d406a0 [0135.986] wcscpy (in: _Dest=0x3d406a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.986] wcscat (in: _Dest=0x3d406a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.986] wcscat (in: _Dest=0x3d406a0, _Source="1053.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" [0135.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d406a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0135.987] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055.mst", cAlternateFileName="")) returned 1 [0135.987] wcscmp (_String1="1055.mst", _String2=".") returned 1 [0135.988] wcscmp (_String1="1055.mst", _String2="..") returned 1 [0135.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40768 [0135.988] wcscpy (in: _Dest=0x3d40768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.988] wcscat (in: _Dest=0x3d40768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.988] wcscat (in: _Dest=0x3d40768, _Source="1055.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" [0135.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0135.989] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058.mst", cAlternateFileName="")) returned 1 [0135.989] wcscmp (_String1="1058.mst", _String2=".") returned 1 [0135.989] wcscmp (_String1="1058.mst", _String2="..") returned 1 [0135.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40830 [0135.989] wcscpy (in: _Dest=0x3d40830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.989] wcscat (in: _Dest=0x3d40830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.989] wcscat (in: _Dest=0x3d40830, _Source="1058.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" [0135.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0135.990] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060.mst", cAlternateFileName="")) returned 1 [0135.990] wcscmp (_String1="1060.mst", _String2=".") returned 1 [0135.991] wcscmp (_String1="1060.mst", _String2="..") returned 1 [0135.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d408f8 [0135.991] wcscpy (in: _Dest=0x3d408f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0135.991] wcscat (in: _Dest=0x3d408f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0135.991] wcscat (in: _Dest=0x3d408f8, _Source="1060.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" [0135.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d408f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0136.827] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9779ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069.mst", cAlternateFileName="")) returned 1 [0136.827] wcscmp (_String1="1069.mst", _String2=".") returned 1 [0136.827] wcscmp (_String1="1069.mst", _String2="..") returned 1 [0136.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a440 [0136.827] wcscpy (in: _Dest=0x3e3a440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0136.827] wcscat (in: _Dest=0x3e3a440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0136.827] wcscat (in: _Dest=0x3e3a440, _Source="1069.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" [0138.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0138.694] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052.mst", cAlternateFileName="")) returned 1 [0138.694] wcscmp (_String1="2052.mst", _String2=".") returned 1 [0138.694] wcscmp (_String1="2052.mst", _String2="..") returned 1 [0138.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40768 [0138.694] wcscpy (in: _Dest=0x3d40768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0138.694] wcscat (in: _Dest=0x3d40768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0138.694] wcscat (in: _Dest=0x3d40768, _Source="2052.mst" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" [0138.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0138.695] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x6c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABCPY.INI", cAlternateFileName="")) returned 1 [0138.695] wcscmp (_String1="ABCPY.INI", _String2=".") returned 1 [0138.695] wcscmp (_String1="ABCPY.INI", _String2="..") returned 1 [0138.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d409c0 [0138.695] wcscpy (in: _Dest=0x3d409c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0138.695] wcscat (in: _Dest=0x3d409c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0138.695] wcscat (in: _Dest=0x3d409c0, _Source="ABCPY.INI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" [0138.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d409c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c [0138.696] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x268000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRead.msi", cAlternateFileName="")) returned 1 [0138.696] wcscmp (_String1="AcroRead.msi", _String2=".") returned 1 [0138.696] wcscmp (_String1="AcroRead.msi", _String2="..") returned 1 [0138.696] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x37422680, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd9753d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x37422680, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x7a3f7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0138.696] wcscmp (_String1="Data1.cab", _String2=".") returned 1 [0138.696] wcscmp (_String1="Data1.cab", _String2="..") returned 1 [0138.697] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90c8100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x525c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0138.697] wcscmp (_String1="Setup.exe", _String2=".") returned 1 [0138.697] wcscmp (_String1="Setup.exe", _String2="..") returned 1 [0138.697] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90a1fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 1 [0138.697] wcscmp (_String1="setup.ini", _String2=".") returned 1 [0138.697] wcscmp (_String1="setup.ini", _String2="..") returned 1 [0138.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d40a88 [0138.697] wcscpy (in: _Dest=0x3d40a88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" [0138.697] wcscat (in: _Dest=0x3d40a88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\" [0138.697] wcscat (in: _Dest=0x3d40a88, _Source="setup.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" [0138.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0138.698] FindNextFileW (in: hFindFile=0x3066f00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x34dfcc80, ftCreationTime.dwHighDateTime=0x1d0cebc, ftLastAccessTime.dwLowDateTime=0xd90a1fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x34dfcc80, ftLastWriteTime.dwHighDateTime=0x1d0cebc, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 0 [0138.698] FindClose (in: hFindFile=0x3066f00 | out: hFindFile=0x3066f00) returned 1 [0138.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0138.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 [0138.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 695 os_tid = 0x12ac [0125.470] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KJY_e2yhZs.swf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\kjy_e2yhzs.swf")) returned 0x2020 [0125.470] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KJY_e2yhZs.swf", dwFileAttributes=0x20) returned 1 [0133.595] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KJY_e2yhZs.swf" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\kjy_e2yhzs.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cbc [0133.595] GetFileSizeEx (in: hFile=0x1cbc, lpFileSize=0xa5cff44 | out: lpFileSize=0xa5cff44*=64794) returned 1 [0133.595] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0xfd16, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.595] ReadFile (in: hFile=0x1cbc, lpBuffer=0xa5cff20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa5cff30, lpOverlapped=0x0 | out: lpBuffer=0xa5cff20*, lpNumberOfBytesRead=0xa5cff30*=0x4, lpOverlapped=0x0) returned 1 [0133.597] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0133.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0133.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35d8 [0133.598] NtQuerySystemTime (in: CurrentTime=0xa5cfeb8 | out: CurrentTime=0xa5cfeb8*=132462177129264000) returned 0x0 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x45e972cc [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x7190f93c [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x10dd4759 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x635ce8f3 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x2400b13f [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x201e429c [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x50c2c42a [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x33630745 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x580e50ca [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x3785ab1f [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x4553e7bf [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x26598935 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x618eced6 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x25bbb92d [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x679504b3 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x545ea345 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x524e34c4 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x4b816ebd [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x370a2465 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x60c09055 [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x688b72ee [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x5b19342c [0133.598] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x50227c82 [0133.599] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x1292dc4 [0133.599] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x661688fc [0133.599] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x3f842463 [0133.599] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x34f89221 [0133.599] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x72043e37 [0133.599] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x30e6366f [0133.599] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x384cfccb [0133.599] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0x745bfc9a [0133.599] RtlRandomEx (in: Seed=0xa5cfeb0 | out: Seed=0xa5cfeb0) returned 0xcb06bd2 [0133.610] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.610] ReadFile (in: hFile=0x1cbc, lpBuffer=0x7bf63a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa5cfeb8, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesRead=0xa5cfeb8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.611] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07890 [0133.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0133.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0133.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0133.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0133.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0133.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35d8 [0133.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35d8) returned 1 [0133.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0133.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0133.612] WriteFile (in: hFile=0x1cbc, lpBuffer=0x7bf9fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa5cfeb8, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesWritten=0xa5cfeb8*=0x3c00, lpOverlapped=0x0) returned 1 [0133.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0133.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0133.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac3e8 [0133.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0133.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac500 [0133.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0133.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0133.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0133.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3debf68 [0133.805] SetFilePointerEx (in: hFile=0x1cbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.805] WriteFile (in: hFile=0x1cbc, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xa5cff38, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0xa5cff38*=0x10e, lpOverlapped=0x0) returned 1 [0133.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851e8 [0133.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0133.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0133.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0133.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3448 [0133.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0133.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0133.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0133.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0133.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0133.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x3e851e8 [0133.876] sprintf (in: _Dest=0x3e851e8, _Format="%c%c" | out: _Dest="be") returned 2 [0133.876] sprintf (in: _Dest=0x3e851ea, _Format="%c%c" | out: _Dest="e7") returned 2 [0133.876] sprintf (in: _Dest=0x3e851ec, _Format="%c%c" | out: _Dest="ec") returned 2 [0133.877] sprintf (in: _Dest=0x3e851ee, _Format="%c%c" | out: _Dest="0a") returned 2 [0133.877] sprintf (in: _Dest=0x3e851f0, _Format="%c%c" | out: _Dest="89") returned 2 [0133.877] sprintf (in: _Dest=0x3e851f2, _Format="%c%c" | out: _Dest="85") returned 2 [0133.877] sprintf (in: _Dest=0x3e851f4, _Format="%c%c" | out: _Dest="37") returned 2 [0133.877] sprintf (in: _Dest=0x3e851f6, _Format="%c%c" | out: _Dest="d8") returned 2 [0133.877] sprintf (in: _Dest=0x3e851f8, _Format="%c%c" | out: _Dest="0a") returned 2 [0133.877] sprintf (in: _Dest=0x3e851fa, _Format="%c%c" | out: _Dest="30") returned 2 [0133.877] sprintf (in: _Dest=0x3e851fc, _Format="%c%c" | out: _Dest="f9") returned 2 [0133.877] sprintf (in: _Dest=0x3e851fe, _Format="%c%c" | out: _Dest="bf") returned 2 [0133.877] sprintf (in: _Dest=0x3e85200, _Format="%c%c" | out: _Dest="4a") returned 2 [0133.877] sprintf (in: _Dest=0x3e85202, _Format="%c%c" | out: _Dest="48") returned 2 [0133.877] sprintf (in: _Dest=0x3e85204, _Format="%c%c" | out: _Dest="29") returned 2 [0133.877] sprintf (in: _Dest=0x3e85206, _Format="%c%c" | out: _Dest="c2") returned 2 [0133.877] sprintf (in: _Dest=0x3e85208, _Format="%c%c" | out: _Dest="76") returned 2 [0133.877] sprintf (in: _Dest=0x3e8520a, _Format="%c%c" | out: _Dest="e5") returned 2 [0133.877] sprintf (in: _Dest=0x3e8520c, _Format="%c%c" | out: _Dest="f6") returned 2 [0133.877] sprintf (in: _Dest=0x3e8520e, _Format="%c%c" | out: _Dest="97") returned 2 [0133.877] sprintf (in: _Dest=0x3e85210, _Format="%c%c" | out: _Dest="04") returned 2 [0133.877] sprintf (in: _Dest=0x3e85212, _Format="%c%c" | out: _Dest="99") returned 2 [0133.877] sprintf (in: _Dest=0x3e85214, _Format="%c%c" | out: _Dest="ea") returned 2 [0133.877] sprintf (in: _Dest=0x3e85216, _Format="%c%c" | out: _Dest="f1") returned 2 [0133.877] sprintf (in: _Dest=0x3e85218, _Format="%c%c" | out: _Dest="68") returned 2 [0133.877] sprintf (in: _Dest=0x3e8521a, _Format="%c%c" | out: _Dest="70") returned 2 [0133.877] sprintf (in: _Dest=0x3e8521c, _Format="%c%c" | out: _Dest="19") returned 2 [0133.877] sprintf (in: _Dest=0x3e8521e, _Format="%c%c" | out: _Dest="4e") returned 2 [0133.877] RtlInitAnsiString (in: DestinationString=0xa5cfec0, SourceString="bee7ec0a898537d80a30f9bf4a4829c276e5f6970499eaf16870194e" | out: DestinationString="bee7ec0a898537d80a30f9bf4a4829c276e5f6970499eaf16870194e") [0133.878] RtlAnsiStringToUnicodeString (in: DestinationString=0xa5cfeb8, SourceString="bee7ec0a898537d80a30f9bf4a4829c276e5f6970499eaf16870194e", AllocateDestinationString=1 | out: DestinationString="bee7ec0a898537d80a30f9bf4a4829c276e5f6970499eaf16870194e") returned 0x0 [0133.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3efb020 [0133.878] wcscat (in: _Dest=0x3f3f308, _Source="bee7ec0a898537" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bee7ec0a898537") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bee7ec0a898537" [0133.878] wcscat (in: _Dest=0x3f3f308, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bee7ec0a898537.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bee7ec0a898537.68814f" [0133.878] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bee7ec0a898537.68814f", NtPathName=0xa5cfeb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\bee7ec0a898537.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d443c0 [0133.878] NtSetInformationFile (FileHandle=0x1cbc, IoStatusBlock=0xa5cfeb8, FileInformation=0x3d443c0, Length=0x84, FileInformationClass=0xa) returned 0x0 [0133.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 [0133.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a41518) returned 1 [0133.913] NtQueryInformationFile (in: FileHandle=0x1cbc, IoStatusBlock=0xa5cfe88, FileInformation=0xa5cfe90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa5cfe88, FileInformation=0xa5cfe90) returned 0x0 [0133.913] NtSetInformationFile (FileHandle=0x1cbc, IoStatusBlock=0xa5cfe88, FileInformation=0xa5cfe90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0133.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb020) returned 1 [0133.917] FlushFileBuffers (hFile=0x1cbc) returned 1 [0135.283] CloseHandle (hObject=0x1cbc) returned 1 [0135.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26078 [0135.431] wcscpy (in: _Dest=0x7a26078, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.431] wcscat (in: _Dest=0x7a26078, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.431] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26078) returned 1 [0135.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edff00) returned 1 Thread: id = 696 os_tid = 0x12b0 [0125.470] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ktpf3a_0bbexx5rwtf-u.png")) returned 0x2020 [0125.470] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png", dwFileAttributes=0x20) returned 1 [0133.612] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ktpf3a_0bbexx5rwtf-u.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cc0 [0133.612] GetFileSizeEx (in: hFile=0x1cc0, lpFileSize=0x991f804 | out: lpFileSize=0x991f804*=97019) returned 1 [0133.612] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0x17af7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.612] ReadFile (in: hFile=0x1cc0, lpBuffer=0x991f7e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x991f7f0, lpOverlapped=0x0 | out: lpBuffer=0x991f7e0*, lpNumberOfBytesRead=0x991f7f0*=0x4, lpOverlapped=0x0) returned 1 [0133.614] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35d8 [0133.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0133.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3858 [0133.615] NtQuerySystemTime (in: CurrentTime=0x991f778 | out: CurrentTime=0x991f778*=132462177129420000) returned 0x0 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x42db0359 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x7b411850 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x7c0662fb [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0xbf57df9 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x89f9f0c [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x67e9fd44 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x3d286cb2 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x7bb39fd5 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x5bef7c32 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x15fae3bb [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x721e4482 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x141364b0 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0xf4879e4 [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x5d9be21c [0133.615] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x50c71d80 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x3c015ac8 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x4988f6ea [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x58ccfa94 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x4f8f71ea [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x557702d8 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x5417c717 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x3779ea0 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x7437915e [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x3a971a47 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x51ffecb8 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x78154ae1 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x16a2eb61 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x34cdb961 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x642c97be [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x2dd617b7 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x8b570c5 [0133.616] RtlRandomEx (in: Seed=0x991f770 | out: Seed=0x991f770) returned 0x4840267e [0133.628] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.628] ReadFile (in: hFile=0x1cc0, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x991f778, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x991f778*=0x3c00, lpOverlapped=0x0) returned 1 [0133.629] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07890 [0133.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0133.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35d8 [0133.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35d8) returned 1 [0133.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0133.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35d8 [0133.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3858 [0133.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3858) returned 1 [0133.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0133.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0133.630] WriteFile (in: hFile=0x1cc0, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x991f778, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0x991f778*=0x3c00, lpOverlapped=0x0) returned 1 [0133.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0133.809] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.809] ReadFile (in: hFile=0x1cc0, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x991f778, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x991f778*=0x3c00, lpOverlapped=0x0) returned 1 [0133.810] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07a88 [0133.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0133.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0133.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0133.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0133.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0133.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0133.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.811] WriteFile (in: hFile=0x1cc0, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x991f778, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0x991f778*=0x3c00, lpOverlapped=0x0) returned 1 [0133.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0133.813] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0x13efb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.813] ReadFile (in: hFile=0x1cc0, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x991f778, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x991f778*=0x3c00, lpOverlapped=0x0) returned 1 [0133.814] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0x13efb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07a88 [0133.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0133.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0133.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0133.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0133.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0133.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0133.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0133.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.815] WriteFile (in: hFile=0x1cc0, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x991f778, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0x991f778*=0x3c00, lpOverlapped=0x0) returned 1 [0133.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0133.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e20400 [0133.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35d8) returned 1 [0133.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e08220 [0133.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35d8 [0133.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0133.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0133.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0133.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0133.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x2fee7d8 [0133.823] SetFilePointerEx (in: hFile=0x1cc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.823] WriteFile (in: hFile=0x1cc0, lpBuffer=0x2fee7d8*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x991f7f8, lpOverlapped=0x0 | out: lpBuffer=0x2fee7d8*, lpNumberOfBytesWritten=0x991f7f8*=0x162, lpOverlapped=0x0) returned 1 [0133.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fee7d8) returned 1 [0133.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0133.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35d8) returned 1 [0133.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0133.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20400) returned 1 [0133.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3808) returned 1 [0133.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0133.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36f0) returned 1 [0133.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d455c0 [0133.886] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png" [0133.886] wcscat (in: _Dest=0x3d455c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png.68814f" [0133.886] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png.68814f", NtPathName=0x991f770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\KTPF3a_0BBExX5rwTf-U.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0133.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df61c0 [0133.886] NtSetInformationFile (FileHandle=0x1cc0, IoStatusBlock=0x991f778, FileInformation=0x3df61c0, Length=0x98, FileInformationClass=0xa) returned 0x0 [0133.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df61c0) returned 1 [0133.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f4c0) returned 1 [0133.919] NtQueryInformationFile (in: FileHandle=0x1cc0, IoStatusBlock=0x991f748, FileInformation=0x991f750, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x991f748, FileInformation=0x991f750) returned 0x0 [0133.920] NtSetInformationFile (FileHandle=0x1cc0, IoStatusBlock=0x991f748, FileInformation=0x991f750, Length=0x28, FileInformationClass=0x4) returned 0x0 [0133.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 [0133.922] FlushFileBuffers (hFile=0x1cc0) returned 1 [0135.283] CloseHandle (hObject=0x1cc0) returned 1 [0135.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a264d8 [0135.432] wcscpy (in: _Dest=0x7a264d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0135.432] wcscat (in: _Dest=0x7a264d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0135.432] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0135.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a264d8) returned 1 [0135.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab18) returned 1 Thread: id = 697 os_tid = 0x12b4 [0125.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1da28 [0125.818] wcscpy (in: _Dest=0x3e1da28, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" [0125.818] wcscat (in: _Dest=0x3e1da28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\" [0125.818] wcscat (in: _Dest=0x3e1da28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\*" [0125.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52c98 [0125.818] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067380 [0125.819] wcscmp (_String1=".", _String2=".") returned 0 [0125.819] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.819] wcscmp (_String1="..", _String2=".") returned 1 [0125.819] wcscmp (_String1="..", _String2="..") returned 0 [0125.819] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0125.819] wcscmp (_String1="Flash Player", _String2=".") returned 1 [0125.819] wcscmp (_String1="Flash Player", _String2="..") returned 1 [0125.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da61f0 [0125.819] wcscpy (in: _Dest=0x3da61f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia" [0125.819] wcscat (in: _Dest=0x3da61f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\" [0125.819] wcscat (in: _Dest=0x3da61f0, _Source="Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" [0138.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da61f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0138.630] FindNextFileW (in: hFindFile=0x3067380, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0138.630] FindClose (in: hFindFile=0x3067380 | out: hFindFile=0x3067380) returned 1 [0138.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52c98) returned 1 [0138.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1da28) returned 1 [0138.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7148) returned 1 Thread: id = 698 os_tid = 0x12c0 [0125.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0x20 [0125.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl", dwFileAttributes=0x20) returned 0 [0125.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.823] GetLastError () returned 0x5 [0125.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl", dwFileAttributes=0x20) returned 0 [0125.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053d08) returned 1 Thread: id = 699 os_tid = 0x12c4 [0125.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20 [0128.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl", dwFileAttributes=0x20) returned 0 [0128.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0128.949] GetLastError () returned 0x5 [0128.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl", dwFileAttributes=0x20) returned 0 [0128.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053b10) returned 1 Thread: id = 700 os_tid = 0x12c8 [0125.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20 [0128.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl", dwFileAttributes=0x20) returned 0 [0128.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0128.951] GetLastError () returned 0x5 [0128.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl", dwFileAttributes=0x20) returned 0 [0128.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 Thread: id = 701 os_tid = 0x12cc [0125.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0x20 [0128.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl", dwFileAttributes=0x20) returned 0 [0128.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0128.953] GetLastError () returned 0x5 [0128.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl", dwFileAttributes=0x20) returned 0 [0128.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053870) returned 1 Thread: id = 702 os_tid = 0x12d0 [0125.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0x20 [0128.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl", dwFileAttributes=0x20) returned 0 [0128.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0128.955] GetLastError () returned 0x5 [0128.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl", dwFileAttributes=0x20) returned 0 [0128.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052fe8) returned 1 Thread: id = 703 os_tid = 0x12d4 [0125.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20 [0128.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl", dwFileAttributes=0x20) returned 0 [0128.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0128.957] GetLastError () returned 0x5 [0128.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl", dwFileAttributes=0x20) returned 0 [0128.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 Thread: id = 704 os_tid = 0x12d8 [0125.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0x20 [0126.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl", dwFileAttributes=0x20) returned 0 [0126.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.455] GetLastError () returned 0x5 [0126.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl", dwFileAttributes=0x20) returned 0 [0126.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 Thread: id = 705 os_tid = 0x12dc [0125.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0x20 [0126.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl", dwFileAttributes=0x20) returned 0 [0126.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.458] GetLastError () returned 0x5 [0126.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl", dwFileAttributes=0x20) returned 0 [0126.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052f40) returned 1 Thread: id = 706 os_tid = 0x12e0 [0125.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e84768 [0125.851] wcscpy (in: _Dest=0x3e84768, _Source="C:\\ProgramData\\Microsoft\\MSDN\\8.0" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0" [0125.851] wcscat (in: _Dest=0x3e84768, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\" [0125.851] wcscat (in: _Dest=0x3e84768, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*") returned="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*" [0125.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0125.851] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ac0 [0125.852] wcscmp (_String1=".", _String2=".") returned 0 [0125.852] FindNextFileW (in: hFindFile=0x3066ac0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.852] wcscmp (_String1="..", _String2=".") returned 1 [0125.852] wcscmp (_String1="..", _String2="..") returned 0 [0125.852] FindNextFileW (in: hFindFile=0x3066ac0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0125.852] FindClose (in: hFindFile=0x3066ac0 | out: hFindFile=0x3066ac0) returned 1 [0125.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0125.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84768) returned 1 [0125.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e846c8) returned 1 Thread: id = 707 os_tid = 0x12e4 [0125.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48d70 [0125.856] wcscpy (in: _Dest=0x3d48d70, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS" [0125.856] wcscat (in: _Dest=0x3d48d70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\" [0125.856] wcscat (in: _Dest=0x3d48d70, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*" [0125.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0125.856] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ac0 [0125.857] wcscmp (_String1=".", _String2=".") returned 0 [0125.857] FindNextFileW (in: hFindFile=0x3066ac0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.857] wcscmp (_String1="..", _String2=".") returned 1 [0125.857] wcscmp (_String1="..", _String2="..") returned 0 [0125.857] FindNextFileW (in: hFindFile=0x3066ac0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0125.857] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0125.857] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0125.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d958 [0125.857] wcscpy (in: _Dest=0x3e1d958, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS" [0125.857] wcscat (in: _Dest=0x3e1d958, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\" [0125.857] wcscat (in: _Dest=0x3e1d958, _Source="MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" [0138.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1d958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0138.632] FindNextFileW (in: hFindFile=0x3066ac0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0138.632] FindClose (in: hFindFile=0x3066ac0 | out: hFindFile=0x3066ac0) returned 1 [0138.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0138.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48d70) returned 1 [0138.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6928) returned 1 Thread: id = 708 os_tid = 0x12e8 [0125.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3d48848 [0125.858] wcscpy (in: _Dest=0x3d48848, _Source="C:\\ProgramData\\Microsoft\\Crypto\\Keys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys" [0125.858] wcscat (in: _Dest=0x3d48848, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\" [0125.858] wcscat (in: _Dest=0x3d48848, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*" [0125.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef37c8 [0125.858] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf590 [0126.460] wcscmp (_String1=".", _String2=".") returned 0 [0126.461] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.461] wcscmp (_String1="..", _String2=".") returned 1 [0126.461] wcscmp (_String1="..", _String2="..") returned 0 [0126.461] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0126.461] FindClose (in: hFindFile=0x3dcf590 | out: hFindFile=0x3dcf590) returned 1 [0126.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0126.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48848) returned 1 [0126.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d488a0) returned 1 Thread: id = 709 os_tid = 0x12ec [0125.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48798 [0125.860] wcscpy (in: _Dest=0x3d48798, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0125.860] wcscat (in: _Dest=0x3d48798, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\" [0125.860] wcscat (in: _Dest=0x3d48798, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*" [0125.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4b08 [0125.860] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf590 [0126.463] wcscmp (_String1=".", _String2=".") returned 0 [0126.463] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.463] wcscmp (_String1="..", _String2=".") returned 1 [0126.463] wcscmp (_String1="..", _String2="..") returned 0 [0126.463] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0126.463] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0126.463] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0126.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0a60 [0126.464] wcscpy (in: _Dest=0x3ee0a60, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0126.464] wcscat (in: _Dest=0x3ee0a60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\" [0126.464] wcscat (in: _Dest=0x3ee0a60, _Source="MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" [0129.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0129.221] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0129.221] wcscmp (_String1="S-1-5-18", _String2=".") returned 1 [0129.221] wcscmp (_String1="S-1-5-18", _String2="..") returned 1 [0129.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee12e8 [0129.221] wcscpy (in: _Dest=0x3ee12e8, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA" [0129.221] wcscat (in: _Dest=0x3ee12e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\" [0129.221] wcscat (in: _Dest=0x3ee12e8, _Source="S-1-5-18" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0129.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee12e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0129.223] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0129.223] FindClose (in: hFindFile=0x3dcf590 | out: hFindFile=0x3dcf590) returned 1 [0129.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b08) returned 1 [0129.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48798) returned 1 [0129.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84998) returned 1 Thread: id = 710 os_tid = 0x12f0 [0125.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7328 [0125.861] wcscpy (in: _Dest=0x2fe7328, _Source="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" [0125.861] wcscat (in: _Dest=0x2fe7328, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\" [0125.861] wcscat (in: _Dest=0x2fe7328, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*" [0125.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5710 [0125.862] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0125.862] wcscmp (_String1=".", _String2=".") returned 0 [0125.862] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.862] wcscmp (_String1="..", _String2=".") returned 1 [0125.862] wcscmp (_String1="..", _String2="..") returned 0 [0125.862] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0125.863] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0125.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5710) returned 1 [0125.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7328) returned 1 [0125.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 Thread: id = 711 os_tid = 0x12f4 [0125.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1d8f0 [0125.865] wcscpy (in: _Dest=0x3e1d8f0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client" [0125.865] wcscat (in: _Dest=0x3e1d8f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\" [0125.865] wcscat (in: _Dest=0x3e1d8f0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*" [0125.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5710 [0125.865] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0125.866] wcscmp (_String1=".", _String2=".") returned 0 [0125.866] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.866] wcscmp (_String1="..", _String2=".") returned 1 [0125.866] wcscmp (_String1="..", _String2="..") returned 0 [0125.866] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0125.866] wcscmp (_String1="1.0", _String2=".") returned 1 [0125.866] wcscmp (_String1="1.0", _String2="..") returned 1 [0125.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1d888 [0125.867] wcscpy (in: _Dest=0x3e1d888, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client" [0125.867] wcscat (in: _Dest=0x3e1d888, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\" [0125.867] wcscat (in: _Dest=0x3e1d888, _Source="1.0" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" [0129.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1d888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16fc [0129.104] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0129.104] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0129.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5710) returned 1 [0129.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d8f0) returned 1 [0129.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 Thread: id = 712 os_tid = 0x12f8 [0125.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e65dd8 [0125.867] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0125.868] wcscat (in: _Dest=0x3e65dd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0125.868] wcscat (in: _Dest=0x3e65dd8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*" [0125.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef48a0 [0125.868] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0126.465] wcscmp (_String1=".", _String2=".") returned 0 [0126.465] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.465] wcscmp (_String1="..", _String2=".") returned 1 [0126.465] wcscmp (_String1="..", _String2="..") returned 0 [0126.465] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0126.465] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0126.465] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0126.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3ed8 [0126.465] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0126.465] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0126.465] wcscat (in: _Dest=0x3dc3ed8, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0134.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dc3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0134.603] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0134.603] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0134.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a0) returned 1 [0134.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 [0134.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b98) returned 1 Thread: id = 713 os_tid = 0x12fc [0125.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35aa08 [0125.869] wcscpy (in: _Dest=0x35aa08, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0125.869] wcscat (in: _Dest=0x35aa08, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0125.869] wcscat (in: _Dest=0x35aa08, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*" [0125.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3f00 [0125.870] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*", lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d540 [0126.466] wcscmp (_String1=".", _String2=".") returned 0 [0126.466] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.466] wcscmp (_String1="..", _String2=".") returned 1 [0126.466] wcscmp (_String1="..", _String2="..") returned 0 [0126.466] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0126.466] wcscmp (_String1="Patch", _String2=".") returned 1 [0126.466] wcscmp (_String1="Patch", _String2="..") returned 1 [0126.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7ef8 [0126.467] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0126.467] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0126.467] wcscat (in: _Dest=0x2ff7ef8, _Source="Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0129.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0129.227] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0129.227] FindClose (in: hFindFile=0x7a2d540 | out: hFindFile=0x7a2d540) returned 1 [0129.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f00) returned 1 [0129.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 [0129.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053138) returned 1 Thread: id = 714 os_tid = 0x1300 [0125.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c2c8 [0125.871] wcscpy (in: _Dest=0x35c2c8, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0125.871] wcscat (in: _Dest=0x35c2c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0125.871] wcscat (in: _Dest=0x35c2c8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*" [0125.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef43d0 [0125.871] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*", lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0126.468] wcscmp (_String1=".", _String2=".") returned 0 [0126.468] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.468] wcscmp (_String1="..", _String2=".") returned 1 [0126.468] wcscmp (_String1="..", _String2="..") returned 0 [0126.468] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0126.468] wcscmp (_String1="Patch", _String2=".") returned 1 [0126.468] wcscmp (_String1="Patch", _String2="..") returned 1 [0126.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6ad8 [0126.468] wcscpy (in: _Dest=0x2ff6ad8, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0126.468] wcscat (in: _Dest=0x2ff6ad8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0126.468] wcscat (in: _Dest=0x2ff6ad8, _Source="Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0129.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff6ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0129.230] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0129.230] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0129.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0129.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c2c8) returned 1 [0129.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053528) returned 1 Thread: id = 715 os_tid = 0x1304 [0125.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65d18 [0125.873] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0125.873] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0125.873] wcscat (in: _Dest=0x3e65d18, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" [0125.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0125.874] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0125.874] wcscmp (_String1=".", _String2=".") returned 0 [0125.874] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.874] wcscmp (_String1="..", _String2=".") returned 1 [0125.874] wcscmp (_String1="..", _String2="..") returned 0 [0125.874] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0125.874] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0125.874] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0125.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4190 [0125.875] wcscpy (in: _Dest=0x3dc4190, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0125.875] wcscat (in: _Dest=0x3dc4190, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0125.875] wcscat (in: _Dest=0x3dc4190, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0129.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dc4190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0129.107] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0129.107] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0129.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0129.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0129.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 Thread: id = 716 os_tid = 0x1308 [0125.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1ea68 [0125.876] wcscpy (in: _Dest=0x3e1ea68, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0125.876] wcscat (in: _Dest=0x3e1ea68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\" [0125.876] wcscat (in: _Dest=0x3e1ea68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*" [0125.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5240 [0125.876] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0125.876] wcscmp (_String1=".", _String2=".") returned 0 [0125.876] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.876] wcscmp (_String1="..", _String2=".") returned 1 [0125.877] wcscmp (_String1="..", _String2="..") returned 0 [0125.877] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0125.877] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2=".") returned 1 [0125.877] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2="..") returned 1 [0125.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c0b8 [0125.877] wcscpy (in: _Dest=0x35c0b8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0125.877] wcscat (in: _Dest=0x35c0b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\" [0125.877] wcscat (in: _Dest=0x35c0b8, _Source="{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0129.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35c0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0129.109] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0129.109] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2=".") returned 1 [0129.109] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2="..") returned 1 [0129.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c428 [0129.109] wcscpy (in: _Dest=0x35c428, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device" [0129.109] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\" [0129.109] wcscat (in: _Dest=0x35c428, _Source="{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0129.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0129.110] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0129.111] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0129.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5240) returned 1 [0129.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ea68) returned 1 [0129.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee12e8) returned 1 Thread: id = 717 os_tid = 0x130c [0125.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1ec08 [0125.878] wcscpy (in: _Dest=0x3e1ec08, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0125.878] wcscat (in: _Dest=0x3e1ec08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\" [0125.878] wcscat (in: _Dest=0x3e1ec08, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*" [0125.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef54a8 [0125.878] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0126.469] wcscmp (_String1=".", _String2=".") returned 0 [0126.469] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.469] wcscmp (_String1="..", _String2=".") returned 1 [0126.469] wcscmp (_String1="..", _String2="..") returned 0 [0126.469] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0126.469] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2=".") returned 1 [0126.469] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2="..") returned 1 [0126.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b7c8 [0126.469] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0126.470] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\" [0126.470] wcscat (in: _Dest=0x35b7c8, _Source="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0129.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0129.233] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0129.234] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2=".") returned 1 [0129.234] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2="..") returned 1 [0129.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c2c8 [0129.234] wcscpy (in: _Dest=0x35c2c8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task" [0129.234] wcscat (in: _Dest=0x35c2c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\" [0129.234] wcscat (in: _Dest=0x35c2c8, _Source="{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0129.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35c2c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0129.236] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0129.236] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0129.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54a8) returned 1 [0129.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec08) returned 1 [0129.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7208) returned 1 Thread: id = 718 os_tid = 0x1310 [0125.882] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl")) returned 0x20 [0125.882] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0128.611] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0128.611] GetLastError () returned 0x5 [0128.611] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0128.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48d18) returned 1 Thread: id = 719 os_tid = 0x1314 [0125.883] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl")) returned 0x20 [0126.470] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0126.471] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.471] GetLastError () returned 0x5 [0126.471] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0126.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba2c8) returned 1 Thread: id = 720 os_tid = 0x1318 [0125.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6b48 [0125.884] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" [0125.884] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\" [0125.884] wcscat (in: _Dest=0x2fe6b48, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*" [0125.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4d70 [0125.884] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d70) returned 1 [0125.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 [0125.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 Thread: id = 721 os_tid = 0x131c [0125.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1e0a8 [0125.886] wcscpy (in: _Dest=0x3e1e0a8, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0125.886] wcscat (in: _Dest=0x3e1e0a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\" [0125.886] wcscat (in: _Dest=0x3e1e0a8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*" [0125.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4d70 [0125.886] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d340 [0126.474] wcscmp (_String1=".", _String2=".") returned 0 [0126.474] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.474] wcscmp (_String1="..", _String2=".") returned 1 [0126.474] wcscmp (_String1="..", _String2="..") returned 0 [0126.474] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0126.474] wcscmp (_String1="WelcomeScan.jpg", _String2=".") returned 1 [0126.474] wcscmp (_String1="WelcomeScan.jpg", _String2="..") returned 1 [0126.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5cf0 [0126.474] wcscpy (in: _Dest=0x3da5cf0, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" [0126.474] wcscat (in: _Dest=0x3da5cf0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\" [0126.474] wcscat (in: _Dest=0x3da5cf0, _Source="WelcomeScan.jpg" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" [0146.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0146.125] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0146.125] FindClose (in: hFindFile=0x7a2d340 | out: hFindFile=0x7a2d340) returned 1 [0146.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d70) returned 1 [0146.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e0a8) returned 1 [0146.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7268) returned 1 Thread: id = 722 os_tid = 0x1320 [0125.887] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm")) returned 0x20 [0126.475] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0126.475] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.476] GetLastError () returned 0x5 [0126.476] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0126.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 Thread: id = 723 os_tid = 0x1324 [0125.889] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm")) returned 0x20 [0125.889] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0125.889] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0125.890] GetLastError () returned 0x5 [0125.890] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0125.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 724 os_tid = 0x1328 [0125.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66198 [0125.892] wcscpy (in: _Dest=0x3e66198, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0125.892] wcscat (in: _Dest=0x3e66198, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0125.892] wcscat (in: _Dest=0x3e66198, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" [0125.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3560 [0125.892] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0125.892] wcscmp (_String1=".", _String2=".") returned 0 [0125.892] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.892] wcscmp (_String1="..", _String2=".") returned 1 [0125.893] wcscmp (_String1="..", _String2="..") returned 0 [0125.893] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0125.893] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0125.893] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0125.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3df0 [0125.893] wcscpy (in: _Dest=0x3dc3df0, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0125.893] wcscat (in: _Dest=0x3dc3df0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0125.893] wcscat (in: _Dest=0x3dc3df0, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0132.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dc3df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0132.397] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0132.397] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0132.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3560) returned 1 [0132.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0132.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 Thread: id = 725 os_tid = 0x132c [0125.893] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm")) returned 0x20 [0126.478] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0126.478] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.478] GetLastError () returned 0x5 [0126.479] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0126.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053678) returned 1 Thread: id = 726 os_tid = 0x1330 [0125.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0126.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x20) returned 0 [0126.481] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.481] GetLastError () returned 0x5 [0126.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x20) returned 0 [0126.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 Thread: id = 727 os_tid = 0x1334 [0125.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c6e8 [0125.896] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" [0125.896] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\" [0125.896] wcscat (in: _Dest=0x35c6e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*" [0125.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0125.896] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0126.484] wcscmp (_String1=".", _String2=".") returned 0 [0126.484] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x590038b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x590038b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.484] wcscmp (_String1="..", _String2=".") returned 1 [0126.484] wcscmp (_String1="..", _String2="..") returned 0 [0126.484] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0126.484] wcscmp (_String1="1033", _String2=".") returned 1 [0126.485] wcscmp (_String1="1033", _String2="..") returned 1 [0126.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7208 [0126.485] wcscpy (in: _Dest=0x2ff7208, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp" [0126.485] wcscat (in: _Dest=0x2ff7208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\" [0126.485] wcscat (in: _Dest=0x2ff7208, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0129.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0129.238] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0129.239] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0129.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0129.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 [0129.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 728 os_tid = 0x1338 [0125.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7880 [0125.897] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" [0125.898] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\" [0125.898] wcscat (in: _Dest=0x2ff7880, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*" [0125.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0125.898] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0126.486] wcscmp (_String1=".", _String2=".") returned 0 [0126.486] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5904fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.486] wcscmp (_String1="..", _String2=".") returned 1 [0126.486] wcscmp (_String1="..", _String2="..") returned 0 [0126.486] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0126.486] wcscmp (_String1="1033", _String2=".") returned 1 [0126.486] wcscmp (_String1="1033", _String2="..") returned 1 [0126.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66318 [0126.486] wcscpy (in: _Dest=0x3e66318, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic" [0126.486] wcscat (in: _Dest=0x3e66318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\" [0126.486] wcscat (in: _Dest=0x3e66318, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0129.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e66318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0129.241] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0129.241] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0129.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0129.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 [0129.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6460) returned 1 Thread: id = 729 os_tid = 0x133c [0125.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df48c0 [0125.899] wcscpy (in: _Dest=0x3df48c0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" [0125.899] wcscat (in: _Dest=0x3df48c0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\" [0125.899] wcscat (in: _Dest=0x3df48c0, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*" [0125.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0125.900] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0125.903] wcscmp (_String1=".", _String2=".") returned 0 [0125.903] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.903] wcscmp (_String1="..", _String2=".") returned 1 [0125.903] wcscmp (_String1="..", _String2="..") returned 0 [0125.903] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0125.903] wcscmp (_String1="FrameworkList.xml", _String2=".") returned 1 [0125.903] wcscmp (_String1="FrameworkList.xml", _String2="..") returned 1 [0125.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66258 [0125.903] wcscpy (in: _Dest=0x3e66258, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList" [0125.903] wcscat (in: _Dest=0x3e66258, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\" [0125.903] wcscat (in: _Dest=0x3e66258, _Source="FrameworkList.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" [0129.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0129.113] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0129.113] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0129.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0129.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df48c0) returned 1 [0129.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5d60) returned 1 Thread: id = 730 os_tid = 0x1340 [0125.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5220 [0125.904] wcscpy (in: _Dest=0x3df5220, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" [0125.904] wcscat (in: _Dest=0x3df5220, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\" [0125.905] wcscat (in: _Dest=0x3df5220, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*" [0125.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0125.905] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd80 [0125.905] wcscmp (_String1=".", _String2=".") returned 0 [0125.905] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e0b6fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e0b6fa, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.905] wcscmp (_String1="..", _String2=".") returned 1 [0125.905] wcscmp (_String1="..", _String2="..") returned 0 [0125.905] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0125.905] wcscmp (_String1="Client.xml", _String2=".") returned 1 [0125.906] wcscmp (_String1="Client.xml", _String2="..") returned 1 [0125.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7e40 [0125.906] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList" [0125.906] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\" [0125.906] wcscat (in: _Dest=0x2ff7e40, _Source="Client.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" [0129.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0129.115] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0129.115] FindClose (in: hFindFile=0x7a2dd80 | out: hFindFile=0x7a2dd80) returned 1 [0129.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0129.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 [0129.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 Thread: id = 731 os_tid = 0x1344 [0125.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx")) returned 0x20 [0132.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx", dwFileAttributes=0x20) returned 0 [0132.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.008] GetLastError () returned 0x5 [0132.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx", dwFileAttributes=0x20) returned 0 [0132.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 732 os_tid = 0x1348 [0125.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx")) returned 0x20 [0132.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx", dwFileAttributes=0x20) returned 0 [0132.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.010] GetLastError () returned 0x5 [0132.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx", dwFileAttributes=0x20) returned 0 [0132.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 Thread: id = 733 os_tid = 0x134c [0125.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx")) returned 0x20 [0132.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx", dwFileAttributes=0x20) returned 0 [0132.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.012] GetLastError () returned 0x5 [0132.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx", dwFileAttributes=0x20) returned 0 [0132.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df19e8) returned 1 Thread: id = 734 os_tid = 0x1350 [0125.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx")) returned 0x20 [0132.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx", dwFileAttributes=0x20) returned 0 [0132.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.015] GetLastError () returned 0x5 [0132.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx", dwFileAttributes=0x20) returned 0 [0132.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 Thread: id = 735 os_tid = 0x1354 [0125.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx")) returned 0x20 [0132.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx", dwFileAttributes=0x20) returned 0 [0132.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.017] GetLastError () returned 0x5 [0132.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx", dwFileAttributes=0x20) returned 0 [0132.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1c28) returned 1 Thread: id = 736 os_tid = 0x1358 [0125.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx")) returned 0x20 [0131.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx", dwFileAttributes=0x20) returned 0 [0131.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.261] GetLastError () returned 0x5 [0131.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx", dwFileAttributes=0x20) returned 0 [0131.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 737 os_tid = 0x135c [0125.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx")) returned 0x20 [0132.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx", dwFileAttributes=0x20) returned 0 [0132.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.024] GetLastError () returned 0x5 [0132.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx", dwFileAttributes=0x20) returned 0 [0132.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1cb8) returned 1 Thread: id = 738 os_tid = 0x1360 [0125.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx")) returned 0x20 [0132.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx", dwFileAttributes=0x20) returned 0 [0132.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.030] GetLastError () returned 0x5 [0132.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx", dwFileAttributes=0x20) returned 0 [0132.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c6d0) returned 1 Thread: id = 739 os_tid = 0x1364 [0125.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx")) returned 0x20 [0132.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx", dwFileAttributes=0x20) returned 0 [0132.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.032] GetLastError () returned 0x5 [0132.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx", dwFileAttributes=0x20) returned 0 [0132.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 740 os_tid = 0x1368 [0125.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx")) returned 0x20 [0132.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx", dwFileAttributes=0x20) returned 0 [0132.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.035] GetLastError () returned 0x5 [0132.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx", dwFileAttributes=0x20) returned 0 [0132.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 Thread: id = 741 os_tid = 0x136c [0125.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx")) returned 0x20 [0132.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx", dwFileAttributes=0x20) returned 0 [0132.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.037] GetLastError () returned 0x5 [0132.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx", dwFileAttributes=0x20) returned 0 [0132.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44060) returned 1 Thread: id = 742 os_tid = 0x1370 [0125.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx")) returned 0x20 [0132.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx", dwFileAttributes=0x20) returned 0 [0132.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.040] GetLastError () returned 0x5 [0132.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx", dwFileAttributes=0x20) returned 0 [0132.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 Thread: id = 743 os_tid = 0x1374 [0125.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx")) returned 0x20 [0132.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx", dwFileAttributes=0x20) returned 0 [0132.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.042] GetLastError () returned 0x5 [0132.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx", dwFileAttributes=0x20) returned 0 [0132.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45020) returned 1 Thread: id = 744 os_tid = 0x1378 [0125.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx")) returned 0x20 [0132.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx", dwFileAttributes=0x20) returned 0 [0132.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.044] GetLastError () returned 0x5 [0132.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx", dwFileAttributes=0x20) returned 0 [0132.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d450b0) returned 1 Thread: id = 745 os_tid = 0x137c [0125.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx")) returned 0x20 [0132.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx", dwFileAttributes=0x20) returned 0 [0132.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.019] GetLastError () returned 0x5 [0132.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx", dwFileAttributes=0x20) returned 0 [0132.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 Thread: id = 746 os_tid = 0x1380 [0125.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx")) returned 0x20 [0132.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx", dwFileAttributes=0x20) returned 0 [0132.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.021] GetLastError () returned 0x5 [0132.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx", dwFileAttributes=0x20) returned 0 [0132.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 747 os_tid = 0x1384 [0126.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx")) returned 0x20 [0132.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx", dwFileAttributes=0x20) returned 0 [0132.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.028] GetLastError () returned 0x5 [0132.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx", dwFileAttributes=0x20) returned 0 [0132.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 Thread: id = 748 os_tid = 0x1388 [0126.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl")) returned 0x20 [0126.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0126.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.492] GetLastError () returned 0x5 [0126.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0126.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 Thread: id = 749 os_tid = 0x138c [0126.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm")) returned 0x20 [0130.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", dwFileAttributes=0x20) returned 0 [0130.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0130.999] GetLastError () returned 0x5 [0130.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM", dwFileAttributes=0x20) returned 0 [0131.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f00) returned 1 Thread: id = 750 os_tid = 0x1390 [0126.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl")) returned 0x20 [0129.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", dwFileAttributes=0x20) returned 0 [0129.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.395] GetLastError () returned 0x5 [0129.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL", dwFileAttributes=0x20) returned 0 [0129.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 Thread: id = 751 os_tid = 0x1394 [0126.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp")) returned 0x20 [0130.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", dwFileAttributes=0x20) returned 0 [0130.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0130.997] GetLastError () returned 0x5 [0130.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP", dwFileAttributes=0x20) returned 0 [0130.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 Thread: id = 752 os_tid = 0x1398 [0126.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f1a0 [0126.520] wcscpy (in: _Dest=0x3f3f1a0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0126.520] wcscat (in: _Dest=0x3f3f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0126.520] wcscat (in: _Dest=0x3f3f1a0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\*") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\*" [0126.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef37c8 [0126.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dec0 [0126.523] wcscmp (_String1=".", _String2=".") returned 0 [0126.523] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd8fbd760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6da8a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.959] wcscmp (_String1="..", _String2=".") returned 1 [0128.959] wcscmp (_String1="..", _String2="..") returned 0 [0128.959] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda576020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelper.dll", cAlternateFileName="ACROIE~1.DLL")) returned 1 [0128.960] wcscmp (_String1="AcroIEHelper.dll", _String2=".") returned 1 [0128.960] wcscmp (_String1="AcroIEHelper.dll", _String2="..") returned 1 [0128.960] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelperShim.dll", cAlternateFileName="ACROIE~2.DLL")) returned 1 [0128.960] wcscmp (_String1="AcroIEHelperShim.dll", _String2=".") returned 1 [0128.960] wcscmp (_String1="AcroIEHelperShim.dll", _String2="..") returned 1 [0128.960] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CAT", cAlternateFileName="")) returned 1 [0128.960] wcscmp (_String1="AcroPDF.CAT", _String2=".") returned 1 [0128.960] wcscmp (_String1="AcroPDF.CAT", _String2="..") returned 1 [0128.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0128.960] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0128.960] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0128.960] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.CAT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" [0140.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cat")) returned 0x20 [0140.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT", dwFileAttributes=0x20) returned 0 [0140.664] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.664] GetLastError () returned 0x5 [0140.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT", dwFileAttributes=0x20) returned 0 [0140.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.664] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda54fec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHS", cAlternateFileName="")) returned 1 [0140.664] wcscmp (_String1="AcroPDF.CHS", _String2=".") returned 1 [0140.664] wcscmp (_String1="AcroPDF.CHS", _String2="..") returned 1 [0140.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.664] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.664] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.664] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.CHS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" [0140.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.chs")) returned 0x20 [0140.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS", dwFileAttributes=0x20) returned 0 [0140.689] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.690] GetLastError () returned 0x5 [0140.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS", dwFileAttributes=0x20) returned 0 [0140.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.690] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda54fec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHT", cAlternateFileName="")) returned 1 [0140.690] wcscmp (_String1="AcroPDF.CHT", _String2=".") returned 1 [0140.690] wcscmp (_String1="AcroPDF.CHT", _String2="..") returned 1 [0140.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.690] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.690] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.690] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.CHT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" [0140.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cht")) returned 0x20 [0140.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT", dwFileAttributes=0x20) returned 0 [0140.691] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.691] GetLastError () returned 0x5 [0140.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT", dwFileAttributes=0x20) returned 0 [0140.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CZE", cAlternateFileName="")) returned 1 [0140.691] wcscmp (_String1="AcroPDF.CZE", _String2=".") returned 1 [0140.691] wcscmp (_String1="AcroPDF.CZE", _String2="..") returned 1 [0140.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.691] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.691] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.691] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.CZE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" [0140.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cze")) returned 0x20 [0140.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE", dwFileAttributes=0x20) returned 0 [0140.692] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.692] GetLastError () returned 0x5 [0140.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE", dwFileAttributes=0x20) returned 0 [0140.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.692] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DAN", cAlternateFileName="")) returned 1 [0140.692] wcscmp (_String1="AcroPDF.DAN", _String2=".") returned 1 [0140.692] wcscmp (_String1="AcroPDF.DAN", _String2="..") returned 1 [0140.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.693] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.693] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.693] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.DAN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" [0140.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.dan")) returned 0x20 [0140.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN", dwFileAttributes=0x20) returned 0 [0140.693] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.693] GetLastError () returned 0x5 [0140.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN", dwFileAttributes=0x20) returned 0 [0140.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.694] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DEU", cAlternateFileName="")) returned 1 [0140.694] wcscmp (_String1="AcroPDF.DEU", _String2=".") returned 1 [0140.694] wcscmp (_String1="AcroPDF.DEU", _String2="..") returned 1 [0140.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.694] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.694] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.694] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.DEU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" [0140.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.deu")) returned 0x20 [0140.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU", dwFileAttributes=0x20) returned 0 [0140.694] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.694] GetLastError () returned 0x5 [0140.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU", dwFileAttributes=0x20) returned 0 [0140.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.695] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda54fec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xab790, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.dll", cAlternateFileName="")) returned 1 [0140.695] wcscmp (_String1="AcroPDF.dll", _String2=".") returned 1 [0140.695] wcscmp (_String1="AcroPDF.dll", _String2="..") returned 1 [0140.695] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ESP", cAlternateFileName="")) returned 1 [0140.695] wcscmp (_String1="AcroPDF.ESP", _String2=".") returned 1 [0140.695] wcscmp (_String1="AcroPDF.ESP", _String2="..") returned 1 [0140.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.695] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.695] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.695] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.ESP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" [0140.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.esp")) returned 0x20 [0140.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP", dwFileAttributes=0x20) returned 0 [0140.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.714] GetLastError () returned 0x5 [0140.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP", dwFileAttributes=0x20) returned 0 [0140.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.714] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.EUQ", cAlternateFileName="")) returned 1 [0140.714] wcscmp (_String1="AcroPDF.EUQ", _String2=".") returned 1 [0140.714] wcscmp (_String1="AcroPDF.EUQ", _String2="..") returned 1 [0140.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.714] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.714] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.714] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.EUQ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" [0140.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.euq")) returned 0x20 [0140.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ", dwFileAttributes=0x20) returned 0 [0140.715] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.715] GetLastError () returned 0x5 [0140.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ", dwFileAttributes=0x20) returned 0 [0140.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.715] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.FRA", cAlternateFileName="")) returned 1 [0140.715] wcscmp (_String1="AcroPDF.FRA", _String2=".") returned 1 [0140.715] wcscmp (_String1="AcroPDF.FRA", _String2="..") returned 1 [0140.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.715] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.715] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.715] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.FRA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" [0140.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.fra")) returned 0x20 [0140.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA", dwFileAttributes=0x20) returned 0 [0140.716] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.716] GetLastError () returned 0x5 [0140.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA", dwFileAttributes=0x20) returned 0 [0140.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.716] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HRV", cAlternateFileName="")) returned 1 [0140.716] wcscmp (_String1="AcroPDF.HRV", _String2=".") returned 1 [0140.716] wcscmp (_String1="AcroPDF.HRV", _String2="..") returned 1 [0140.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.716] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.716] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.716] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.HRV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" [0140.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hrv")) returned 0x20 [0140.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV", dwFileAttributes=0x20) returned 0 [0140.729] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.729] GetLastError () returned 0x5 [0140.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV", dwFileAttributes=0x20) returned 0 [0140.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.730] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HUN", cAlternateFileName="")) returned 1 [0140.730] wcscmp (_String1="AcroPDF.HUN", _String2=".") returned 1 [0140.730] wcscmp (_String1="AcroPDF.HUN", _String2="..") returned 1 [0140.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.730] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.730] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.730] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.HUN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" [0140.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hun")) returned 0x20 [0140.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN", dwFileAttributes=0x20) returned 0 [0140.730] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.731] GetLastError () returned 0x5 [0140.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN", dwFileAttributes=0x20) returned 0 [0140.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.731] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda529d60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ITA", cAlternateFileName="")) returned 1 [0140.731] wcscmp (_String1="AcroPDF.ITA", _String2=".") returned 1 [0140.731] wcscmp (_String1="AcroPDF.ITA", _String2="..") returned 1 [0140.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.731] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.731] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.731] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.ITA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" [0140.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ita")) returned 0x20 [0140.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA", dwFileAttributes=0x20) returned 0 [0140.732] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.732] GetLastError () returned 0x5 [0140.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA", dwFileAttributes=0x20) returned 0 [0140.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.733] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.JPN", cAlternateFileName="")) returned 1 [0140.733] wcscmp (_String1="AcroPDF.JPN", _String2=".") returned 1 [0140.733] wcscmp (_String1="AcroPDF.JPN", _String2="..") returned 1 [0140.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.733] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.733] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.733] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.JPN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" [0140.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.jpn")) returned 0x20 [0140.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN", dwFileAttributes=0x20) returned 0 [0140.733] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.734] GetLastError () returned 0x5 [0140.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN", dwFileAttributes=0x20) returned 0 [0140.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.734] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.KOR", cAlternateFileName="")) returned 1 [0140.734] wcscmp (_String1="AcroPDF.KOR", _String2=".") returned 1 [0140.734] wcscmp (_String1="AcroPDF.KOR", _String2="..") returned 1 [0140.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.734] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.734] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.734] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.KOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" [0140.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.kor")) returned 0x20 [0140.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR", dwFileAttributes=0x20) returned 0 [0140.753] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.753] GetLastError () returned 0x5 [0140.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR", dwFileAttributes=0x20) returned 0 [0140.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.753] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NLD", cAlternateFileName="")) returned 1 [0140.753] wcscmp (_String1="AcroPDF.NLD", _String2=".") returned 1 [0140.753] wcscmp (_String1="AcroPDF.NLD", _String2="..") returned 1 [0140.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.753] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.753] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.753] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.NLD" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" [0140.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nld")) returned 0x20 [0140.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD", dwFileAttributes=0x20) returned 0 [0140.754] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.754] GetLastError () returned 0x5 [0140.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD", dwFileAttributes=0x20) returned 0 [0140.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.754] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NOR", cAlternateFileName="")) returned 1 [0140.754] wcscmp (_String1="AcroPDF.NOR", _String2=".") returned 1 [0140.754] wcscmp (_String1="AcroPDF.NOR", _String2="..") returned 1 [0140.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.754] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.754] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.755] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.NOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" [0140.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nor")) returned 0x20 [0140.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR", dwFileAttributes=0x20) returned 0 [0140.755] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.755] GetLastError () returned 0x5 [0140.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR", dwFileAttributes=0x20) returned 0 [0140.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.755] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.POL", cAlternateFileName="")) returned 1 [0140.755] wcscmp (_String1="AcroPDF.POL", _String2=".") returned 1 [0140.755] wcscmp (_String1="AcroPDF.POL", _String2="..") returned 1 [0140.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.756] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.756] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.756] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.POL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" [0140.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.pol")) returned 0x20 [0140.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL", dwFileAttributes=0x20) returned 0 [0140.756] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.756] GetLastError () returned 0x5 [0140.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL", dwFileAttributes=0x20) returned 0 [0140.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.756] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda503c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.PTB", cAlternateFileName="")) returned 1 [0140.757] wcscmp (_String1="AcroPDF.PTB", _String2=".") returned 1 [0140.757] wcscmp (_String1="AcroPDF.PTB", _String2="..") returned 1 [0140.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.757] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.757] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.757] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.PTB" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" [0140.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ptb")) returned 0x20 [0140.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB", dwFileAttributes=0x20) returned 0 [0140.757] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.757] GetLastError () returned 0x5 [0140.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB", dwFileAttributes=0x20) returned 0 [0140.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.758] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5c22e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUM", cAlternateFileName="")) returned 1 [0140.758] wcscmp (_String1="AcroPDF.RUM", _String2=".") returned 1 [0140.758] wcscmp (_String1="AcroPDF.RUM", _String2="..") returned 1 [0140.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.758] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.758] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.758] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.RUM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" [0140.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rum")) returned 0x20 [0140.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM", dwFileAttributes=0x20) returned 0 [0140.758] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.759] GetLastError () returned 0x5 [0140.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM", dwFileAttributes=0x20) returned 0 [0140.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.759] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUS", cAlternateFileName="")) returned 1 [0140.759] wcscmp (_String1="AcroPDF.RUS", _String2=".") returned 1 [0140.759] wcscmp (_String1="AcroPDF.RUS", _String2="..") returned 1 [0140.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.759] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.759] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.759] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.RUS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" [0140.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rus")) returned 0x20 [0140.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS", dwFileAttributes=0x20) returned 0 [0140.864] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.864] GetLastError () returned 0x5 [0140.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS", dwFileAttributes=0x20) returned 0 [0140.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.864] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SKY", cAlternateFileName="")) returned 1 [0140.864] wcscmp (_String1="AcroPDF.SKY", _String2=".") returned 1 [0140.864] wcscmp (_String1="AcroPDF.SKY", _String2="..") returned 1 [0140.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.865] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.865] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.865] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.SKY" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" [0140.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sky")) returned 0x20 [0140.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY", dwFileAttributes=0x20) returned 0 [0140.865] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.865] GetLastError () returned 0x5 [0140.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY", dwFileAttributes=0x20) returned 0 [0140.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.866] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SLV", cAlternateFileName="")) returned 1 [0140.866] wcscmp (_String1="AcroPDF.SLV", _String2=".") returned 1 [0140.866] wcscmp (_String1="AcroPDF.SLV", _String2="..") returned 1 [0140.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.866] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.866] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.866] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.SLV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" [0140.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.slv")) returned 0x20 [0140.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV", dwFileAttributes=0x20) returned 0 [0140.867] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.867] GetLastError () returned 0x5 [0140.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV", dwFileAttributes=0x20) returned 0 [0140.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.867] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SUO", cAlternateFileName="")) returned 1 [0140.867] wcscmp (_String1="AcroPDF.SUO", _String2=".") returned 1 [0140.867] wcscmp (_String1="AcroPDF.SUO", _String2="..") returned 1 [0140.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.867] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.867] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.867] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.SUO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" [0140.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.suo")) returned 0x20 [0140.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", dwFileAttributes=0x20) returned 0 [0140.868] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.868] GetLastError () returned 0x5 [0140.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO", dwFileAttributes=0x20) returned 0 [0140.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.868] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4ddaa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SVE", cAlternateFileName="")) returned 1 [0140.868] wcscmp (_String1="AcroPDF.SVE", _String2=".") returned 1 [0140.868] wcscmp (_String1="AcroPDF.SVE", _String2="..") returned 1 [0140.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.869] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.869] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.869] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.SVE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" [0140.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sve")) returned 0x20 [0140.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE", dwFileAttributes=0x20) returned 0 [0140.869] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.869] GetLastError () returned 0x5 [0140.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE", dwFileAttributes=0x20) returned 0 [0140.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.870] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.TUR", cAlternateFileName="")) returned 1 [0140.870] wcscmp (_String1="AcroPDF.TUR", _String2=".") returned 1 [0140.870] wcscmp (_String1="AcroPDF.TUR", _String2="..") returned 1 [0140.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.870] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.870] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.870] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.TUR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" [0140.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.tur")) returned 0x20 [0140.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR", dwFileAttributes=0x20) returned 0 [0140.871] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.872] GetLastError () returned 0x5 [0140.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR", dwFileAttributes=0x20) returned 0 [0140.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.872] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda59c180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.UKR", cAlternateFileName="")) returned 1 [0140.872] wcscmp (_String1="AcroPDF.UKR", _String2=".") returned 1 [0140.872] wcscmp (_String1="AcroPDF.UKR", _String2="..") returned 1 [0140.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bf60 [0140.872] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.872] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.872] wcscat (in: _Dest=0x3f3bf60, _Source="AcroPDF.UKR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" [0140.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ukr")) returned 0x20 [0140.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR", dwFileAttributes=0x20) returned 0 [0140.873] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\acropdf.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.873] GetLastError () returned 0x5 [0140.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR", dwFileAttributes=0x20) returned 0 [0140.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 [0140.874] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CAT", cAlternateFileName="")) returned 1 [0140.874] wcscmp (_String1="PDFShell.CAT", _String2=".") returned 1 [0140.874] wcscmp (_String1="PDFShell.CAT", _String2="..") returned 1 [0140.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0140.874] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0140.874] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0140.874] wcscat (in: _Dest=0x3df1b98, _Source="PDFShell.CAT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" [0140.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cat")) returned 0x20 [0140.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT", dwFileAttributes=0x20) returned 0 [0140.875] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.875] GetLastError () returned 0x5 [0140.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT", dwFileAttributes=0x20) returned 0 [0140.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.876] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHS", cAlternateFileName="")) returned 1 [0140.876] wcscmp (_String1="PDFShell.CHS", _String2=".") returned 1 [0142.128] wcscmp (_String1="PDFShell.CHS", _String2="..") returned 1 [0142.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45a40 [0142.128] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.128] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.128] wcscat (in: _Dest=0x3d45a40, _Source="PDFShell.CHS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" [0142.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684 [0142.424] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHT", cAlternateFileName="")) returned 1 [0142.424] wcscmp (_String1="PDFShell.CHT", _String2=".") returned 1 [0142.424] wcscmp (_String1="PDFShell.CHT", _String2="..") returned 1 [0142.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60120 [0142.424] wcscpy (in: _Dest=0x7a60120, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.424] wcscat (in: _Dest=0x7a60120, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.424] wcscat (in: _Dest=0x7a60120, _Source="PDFShell.CHT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" [0142.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0142.426] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CZE", cAlternateFileName="")) returned 1 [0142.426] wcscmp (_String1="PDFShell.CZE", _String2=".") returned 1 [0142.426] wcscmp (_String1="PDFShell.CZE", _String2="..") returned 1 [0142.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a601b0 [0142.426] wcscpy (in: _Dest=0x7a601b0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.426] wcscat (in: _Dest=0x7a601b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.426] wcscat (in: _Dest=0x7a601b0, _Source="PDFShell.CZE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" [0142.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a601b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34 [0142.427] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DAN", cAlternateFileName="")) returned 1 [0142.429] wcscmp (_String1="PDFShell.DAN", _String2=".") returned 1 [0142.429] wcscmp (_String1="PDFShell.DAN", _String2="..") returned 1 [0142.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60240 [0142.429] wcscpy (in: _Dest=0x7a60240, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.429] wcscat (in: _Dest=0x7a60240, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.429] wcscat (in: _Dest=0x7a60240, _Source="PDFShell.DAN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" [0142.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f0 [0142.435] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DEU", cAlternateFileName="")) returned 1 [0142.435] wcscmp (_String1="PDFShell.DEU", _String2=".") returned 1 [0142.435] wcscmp (_String1="PDFShell.DEU", _String2="..") returned 1 [0142.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a602d0 [0142.435] wcscpy (in: _Dest=0x7a602d0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.435] wcscat (in: _Dest=0x7a602d0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.435] wcscat (in: _Dest=0x7a602d0, _Source="PDFShell.DEU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" [0142.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a602d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2024 [0142.442] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdfshell.dll", cAlternateFileName="")) returned 1 [0142.442] wcscmp (_String1="pdfshell.dll", _String2=".") returned 1 [0142.442] wcscmp (_String1="pdfshell.dll", _String2="..") returned 1 [0142.442] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ESP", cAlternateFileName="")) returned 1 [0142.442] wcscmp (_String1="PDFShell.ESP", _String2=".") returned 1 [0142.442] wcscmp (_String1="PDFShell.ESP", _String2="..") returned 1 [0142.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60360 [0142.442] wcscpy (in: _Dest=0x7a60360, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.442] wcscat (in: _Dest=0x7a60360, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.442] wcscat (in: _Dest=0x7a60360, _Source="PDFShell.ESP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" [0142.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0142.461] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.EUQ", cAlternateFileName="")) returned 1 [0142.461] wcscmp (_String1="PDFShell.EUQ", _String2=".") returned 1 [0142.461] wcscmp (_String1="PDFShell.EUQ", _String2="..") returned 1 [0142.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a603f0 [0142.462] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.462] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.462] wcscat (in: _Dest=0x7a603f0, _Source="PDFShell.EUQ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" [0142.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a603f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd8 [0142.464] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.FRA", cAlternateFileName="")) returned 1 [0142.464] wcscmp (_String1="PDFShell.FRA", _String2=".") returned 1 [0142.464] wcscmp (_String1="PDFShell.FRA", _String2="..") returned 1 [0142.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60480 [0142.465] wcscpy (in: _Dest=0x7a60480, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.465] wcscat (in: _Dest=0x7a60480, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.465] wcscat (in: _Dest=0x7a60480, _Source="PDFShell.FRA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" [0142.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2478 [0142.467] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HRV", cAlternateFileName="")) returned 1 [0142.467] wcscmp (_String1="PDFShell.HRV", _String2=".") returned 1 [0142.467] wcscmp (_String1="PDFShell.HRV", _String2="..") returned 1 [0142.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60510 [0142.467] wcscpy (in: _Dest=0x7a60510, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.467] wcscat (in: _Dest=0x7a60510, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.467] wcscat (in: _Dest=0x7a60510, _Source="PDFShell.HRV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" [0142.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc8 [0142.471] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HUN", cAlternateFileName="")) returned 1 [0142.471] wcscmp (_String1="PDFShell.HUN", _String2=".") returned 1 [0142.471] wcscmp (_String1="PDFShell.HUN", _String2="..") returned 1 [0142.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a605a0 [0142.472] wcscpy (in: _Dest=0x7a605a0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.472] wcscat (in: _Dest=0x7a605a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.472] wcscat (in: _Dest=0x7a605a0, _Source="PDFShell.HUN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" [0142.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a605a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2474 [0142.473] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcded620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ITA", cAlternateFileName="")) returned 1 [0142.473] wcscmp (_String1="PDFShell.ITA", _String2=".") returned 1 [0142.473] wcscmp (_String1="PDFShell.ITA", _String2="..") returned 1 [0142.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60630 [0142.473] wcscpy (in: _Dest=0x7a60630, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.473] wcscat (in: _Dest=0x7a60630, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.473] wcscat (in: _Dest=0x7a60630, _Source="PDFShell.ITA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" [0142.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0142.474] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.JPN", cAlternateFileName="")) returned 1 [0142.474] wcscmp (_String1="PDFShell.JPN", _String2=".") returned 1 [0142.474] wcscmp (_String1="PDFShell.JPN", _String2="..") returned 1 [0142.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a606c0 [0142.475] wcscpy (in: _Dest=0x7a606c0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.475] wcscat (in: _Dest=0x7a606c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.475] wcscat (in: _Dest=0x7a606c0, _Source="PDFShell.JPN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" [0142.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a606c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2470 [0142.476] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.KOR", cAlternateFileName="")) returned 1 [0142.476] wcscmp (_String1="PDFShell.KOR", _String2=".") returned 1 [0142.476] wcscmp (_String1="PDFShell.KOR", _String2="..") returned 1 [0142.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60750 [0142.476] wcscpy (in: _Dest=0x7a60750, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.476] wcscat (in: _Dest=0x7a60750, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.476] wcscat (in: _Dest=0x7a60750, _Source="PDFShell.KOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" [0142.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0142.477] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NLD", cAlternateFileName="")) returned 1 [0142.477] wcscmp (_String1="PDFShell.NLD", _String2=".") returned 1 [0142.477] wcscmp (_String1="PDFShell.NLD", _String2="..") returned 1 [0142.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a607e0 [0142.477] wcscpy (in: _Dest=0x7a607e0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.477] wcscat (in: _Dest=0x7a607e0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.477] wcscat (in: _Dest=0x7a607e0, _Source="PDFShell.NLD" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" [0142.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a607e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x246c [0142.478] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcdc74c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NOR", cAlternateFileName="")) returned 1 [0142.478] wcscmp (_String1="PDFShell.NOR", _String2=".") returned 1 [0142.478] wcscmp (_String1="PDFShell.NOR", _String2="..") returned 1 [0142.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60870 [0142.478] wcscpy (in: _Dest=0x7a60870, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.479] wcscat (in: _Dest=0x7a60870, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.479] wcscat (in: _Dest=0x7a60870, _Source="PDFShell.NOR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" [0142.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0142.480] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.POL", cAlternateFileName="")) returned 1 [0142.480] wcscmp (_String1="PDFShell.POL", _String2=".") returned 1 [0142.480] wcscmp (_String1="PDFShell.POL", _String2="..") returned 1 [0142.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60900 [0142.480] wcscpy (in: _Dest=0x7a60900, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.480] wcscat (in: _Dest=0x7a60900, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.480] wcscat (in: _Dest=0x7a60900, _Source="PDFShell.POL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" [0142.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e4 [0142.481] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcda1360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.PTB", cAlternateFileName="")) returned 1 [0142.481] wcscmp (_String1="PDFShell.PTB", _String2=".") returned 1 [0142.481] wcscmp (_String1="PDFShell.PTB", _String2="..") returned 1 [0142.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60990 [0142.481] wcscpy (in: _Dest=0x7a60990, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.481] wcscat (in: _Dest=0x7a60990, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.481] wcscat (in: _Dest=0x7a60990, _Source="PDFShell.PTB" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" [0142.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2378 [0142.495] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd28a0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUM", cAlternateFileName="")) returned 1 [0142.496] wcscmp (_String1="PDFShell.RUM", _String2=".") returned 1 [0142.496] wcscmp (_String1="PDFShell.RUM", _String2="..") returned 1 [0142.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60a20 [0142.496] wcscpy (in: _Dest=0x7a60a20, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.496] wcscat (in: _Dest=0x7a60a20, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.496] wcscat (in: _Dest=0x7a60a20, _Source="PDFShell.RUM" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" [0142.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0142.497] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUS", cAlternateFileName="")) returned 1 [0142.498] wcscmp (_String1="PDFShell.RUS", _String2=".") returned 1 [0142.498] wcscmp (_String1="PDFShell.RUS", _String2="..") returned 1 [0142.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60ab0 [0142.498] wcscpy (in: _Dest=0x7a60ab0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.498] wcscat (in: _Dest=0x7a60ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.498] wcscat (in: _Dest=0x7a60ab0, _Source="PDFShell.RUS" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" [0142.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0142.505] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SKY", cAlternateFileName="")) returned 1 [0142.505] wcscmp (_String1="PDFShell.SKY", _String2=".") returned 1 [0142.505] wcscmp (_String1="PDFShell.SKY", _String2="..") returned 1 [0142.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60b40 [0142.506] wcscpy (in: _Dest=0x7a60b40, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.506] wcscat (in: _Dest=0x7a60b40, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.506] wcscat (in: _Dest=0x7a60b40, _Source="PDFShell.SKY" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" [0142.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2224 [0142.507] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SLV", cAlternateFileName="")) returned 1 [0142.507] wcscmp (_String1="PDFShell.SLV", _String2=".") returned 1 [0142.507] wcscmp (_String1="PDFShell.SLV", _String2="..") returned 1 [0142.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60bd0 [0142.507] wcscpy (in: _Dest=0x7a60bd0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.507] wcscat (in: _Dest=0x7a60bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.507] wcscat (in: _Dest=0x7a60bd0, _Source="PDFShell.SLV" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" [0142.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2214 [0142.509] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SUO", cAlternateFileName="")) returned 1 [0142.509] wcscmp (_String1="PDFShell.SUO", _String2=".") returned 1 [0142.509] wcscmp (_String1="PDFShell.SUO", _String2="..") returned 1 [0142.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60c60 [0142.509] wcscpy (in: _Dest=0x7a60c60, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.509] wcscat (in: _Dest=0x7a60c60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.509] wcscat (in: _Dest=0x7a60c60, _Source="PDFShell.SUO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" [0142.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0142.510] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SVE", cAlternateFileName="")) returned 1 [0142.510] wcscmp (_String1="PDFShell.SVE", _String2=".") returned 1 [0142.510] wcscmp (_String1="PDFShell.SVE", _String2="..") returned 1 [0142.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60cf0 [0142.511] wcscpy (in: _Dest=0x7a60cf0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0142.511] wcscat (in: _Dest=0x7a60cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0142.511] wcscat (in: _Dest=0x7a60cf0, _Source="PDFShell.SVE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" [0142.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2210 [0144.179] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.TUR", cAlternateFileName="")) returned 1 [0144.179] wcscmp (_String1="PDFShell.TUR", _String2=".") returned 1 [0144.179] wcscmp (_String1="PDFShell.TUR", _String2="..") returned 1 [0144.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45650 [0144.179] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0144.179] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0144.179] wcscat (in: _Dest=0x3d45650, _Source="PDFShell.TUR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" [0157.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0157.627] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 1 [0157.627] wcscmp (_String1="PDFShell.UKR", _String2=".") returned 1 [0157.627] wcscmp (_String1="PDFShell.UKR", _String2="..") returned 1 [0157.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a615f0 [0157.627] wcscpy (in: _Dest=0x7a615f0, _Source="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX" [0157.627] wcscat (in: _Dest=0x7a615f0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\" [0157.627] wcscat (in: _Dest=0x7a615f0, _Source="PDFShell.UKR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR") returned="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" [0157.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a615f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0157.628] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd263f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 0 [0157.628] FindClose (in: hFindFile=0x7a2dec0 | out: hFindFile=0x7a2dec0) returned 1 [0157.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0157.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0157.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e08) returned 1 Thread: id = 753 os_tid = 0x139c [0126.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0126.529] wcscpy (in: _Dest=0x3f3fc68, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" [0126.529] wcscat (in: _Dest=0x3f3fc68, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\" [0126.529] wcscat (in: _Dest=0x3f3fc68, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*" [0126.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0126.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0126.529] wcscmp (_String1=".", _String2=".") returned 0 [0126.529] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9cf49c4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d1ab23, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d1ab23, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.529] wcscmp (_String1="..", _String2=".") returned 1 [0126.529] wcscmp (_String1="..", _String2="..") returned 0 [0126.529] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0126.530] wcscmp (_String1="TTS20", _String2=".") returned 1 [0126.530] wcscmp (_String1="TTS20", _String2="..") returned 1 [0126.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da65f0 [0126.530] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft" [0126.530] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\" [0126.530] wcscat (in: _Dest=0x3da65f0, _Source="TTS20" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" [0129.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da65f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0129.244] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0129.244] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0129.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0129.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0129.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 Thread: id = 754 os_tid = 0x13a0 [0126.707] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vw_ylonl3fam5py\\yg4f3-6jbhnwho2gj8.png")) returned 0x20 [0126.707] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png", dwFileAttributes=0x20) returned 1 [0126.708] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vw_ylonl3fam5py\\yg4f3-6jbhnwho2gj8.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18a8 [0126.708] GetFileSizeEx (in: hFile=0x18a8, lpFileSize=0x63bfabc | out: lpFileSize=0x63bfabc*=17487) returned 1 [0126.708] SetFilePointerEx (in: hFile=0x18a8, liDistanceToMove=0x444b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.708] ReadFile (in: hFile=0x18a8, lpBuffer=0x63bfa98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x63bfaa8, lpOverlapped=0x0 | out: lpBuffer=0x63bfa98*, lpNumberOfBytesRead=0x63bfaa8*=0x4, lpOverlapped=0x0) returned 1 [0126.710] SetFilePointerEx (in: hFile=0x18a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b28 [0126.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0126.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a88 [0126.710] NtQuerySystemTime (in: CurrentTime=0x63bfa30 | out: CurrentTime=0x63bfa30*=132462177060936000) returned 0x0 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x6f76316d [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x18f40560 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x6188354f [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0xfea4ce0 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x38fa580 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x1a10e76 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x679d0e12 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x32272638 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x7c1b092f [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x88b085 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x4c8759ad [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0xbbe6c83 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x468fb69a [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x5c6a2f11 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x7e476aa1 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x70637cee [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x4c50c69f [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x190136f8 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x221fe87 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0xf01e630 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x7de3a859 [0126.710] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x5b947ead [0126.711] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x8e5409b [0126.711] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x28fe0ccb [0126.711] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x572aa70 [0126.711] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x62ee4791 [0126.711] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0xa6a46e2 [0126.711] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x5d0159e5 [0126.711] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x44f561bc [0126.711] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x52453d2 [0126.711] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x1cbbbfe0 [0126.711] RtlRandomEx (in: Seed=0x63bfa28 | out: Seed=0x63bfa28) returned 0x55adc317 [0126.719] SetFilePointerEx (in: hFile=0x18a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.719] ReadFile (in: hFile=0x18a8, lpBuffer=0x7b69fa8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x63bfa30, lpOverlapped=0x0 | out: lpBuffer=0x7b69fa8*, lpNumberOfBytesRead=0x63bfa30*=0x3c00, lpOverlapped=0x0) returned 1 [0126.720] SetFilePointerEx (in: hFile=0x18a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07968 [0126.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x349128 [0126.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b28 [0126.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b28) returned 1 [0126.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b6dbb0 [0126.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b28 [0126.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a88 [0126.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a88) returned 1 [0126.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x349128) returned 1 [0126.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0126.721] WriteFile (in: hFile=0x18a8, lpBuffer=0x7b6dbb0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x63bfa30, lpOverlapped=0x0 | out: lpBuffer=0x7b6dbb0*, lpNumberOfBytesWritten=0x63bfa30*=0x3c00, lpOverlapped=0x0) returned 1 [0130.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6dbb0) returned 1 [0130.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b69fa8) returned 1 [0130.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e08220 [0130.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e537b0) returned 1 [0130.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e55958 [0130.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537b0 [0130.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0130.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52360) returned 1 [0130.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0130.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff00e8) returned 1 [0130.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3041720 [0130.034] SetFilePointerEx (in: hFile=0x18a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.034] WriteFile (in: hFile=0x18a8, lpBuffer=0x3041720*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x63bfab0, lpOverlapped=0x0 | out: lpBuffer=0x3041720*, lpNumberOfBytesWritten=0x63bfab0*=0x11e, lpOverlapped=0x0) returned 1 [0130.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55958) returned 1 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e537b0) returned 1 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b28) returned 1 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ab0) returned 1 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a60) returned 1 [0130.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a38) returned 1 [0130.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66858 [0130.164] wcscpy (in: _Dest=0x3e66858, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png" [0130.164] wcscat (in: _Dest=0x3e66858, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png.68814f") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png.68814f" [0130.164] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png.68814f", NtPathName=0x63bfa28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\YG4f3-6JBhNwHo2Gj8.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011188 [0130.164] NtSetInformationFile (FileHandle=0x18a8, IoStatusBlock=0x63bfa30, FileInformation=0x3011188, Length=0xcc, FileInformationClass=0xa) returned 0x0 [0130.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011188) returned 1 [0130.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a72cb8) returned 1 [0130.444] NtQueryInformationFile (in: FileHandle=0x18a8, IoStatusBlock=0x63bfa00, FileInformation=0x63bfa08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x63bfa00, FileInformation=0x63bfa08) returned 0x0 [0130.444] NtSetInformationFile (FileHandle=0x18a8, IoStatusBlock=0x63bfa00, FileInformation=0x63bfa08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 [0130.446] FlushFileBuffers (hFile=0x18a8) returned 1 [0130.447] CloseHandle (hObject=0x18a8) returned 1 [0130.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053fa8 [0130.449] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\" [0130.449] wcscat (in: _Dest=0x3053fa8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\68814F-Readme.txt" [0130.449] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vw_ylonl3fam5py\\68814f-readme.txt")) returned 0xffffffff [0130.449] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Desktop\\4EZ86Z4HQQd5WK_s1z2\\vw_yloNL3faM5Py\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\desktop\\4ez86z4hqqd5wk_s1z2\\vw_ylonl3fam5py\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16bc [0130.633] WriteFile (in: hFile=0x16bc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x63bfa44, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x63bfa44*=0x8b9, lpOverlapped=0x0) returned 1 [0130.688] CloseHandle (hObject=0x16bc) returned 1 [0130.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 [0130.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 Thread: id = 755 os_tid = 0x13a4 [0126.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x349128 [0126.721] wcscpy (in: _Dest=0x349128, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9" [0126.721] wcscat (in: _Dest=0x349128, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\" [0126.721] wcscat (in: _Dest=0x349128, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\*") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\*" [0126.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0126.721] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb14b990, ftCreationTime.dwHighDateTime=0x1d5e6be, ftLastAccessTime.dwLowDateTime=0x3460d8e0, ftLastAccessTime.dwHighDateTime=0x1d5e1da, ftLastWriteTime.dwLowDateTime=0x3460d8e0, ftLastWriteTime.dwHighDateTime=0x1d5e1da, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0126.722] wcscmp (_String1=".", _String2=".") returned 0 [0126.722] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbb14b990, ftCreationTime.dwHighDateTime=0x1d5e6be, ftLastAccessTime.dwLowDateTime=0x3460d8e0, ftLastAccessTime.dwHighDateTime=0x1d5e1da, ftLastWriteTime.dwLowDateTime=0x3460d8e0, ftLastWriteTime.dwHighDateTime=0x1d5e1da, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.722] wcscmp (_String1="..", _String2=".") returned 1 [0126.722] wcscmp (_String1="..", _String2="..") returned 0 [0126.722] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x113b7b10, ftCreationTime.dwHighDateTime=0x1d5e0de, ftLastAccessTime.dwLowDateTime=0x86b43d40, ftLastAccessTime.dwHighDateTime=0x1d5e657, ftLastWriteTime.dwLowDateTime=0x86b43d40, ftLastWriteTime.dwHighDateTime=0x1d5e657, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MHdQby", cAlternateFileName="")) returned 1 [0126.722] wcscmp (_String1="MHdQby", _String2=".") returned 1 [0126.722] wcscmp (_String1="MHdQby", _String2="..") returned 1 [0126.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a018 [0126.722] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9" [0126.722] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\" [0126.722] wcscat (in: _Dest=0x3e1a018, _Source="MHdQby" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" [0129.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0129.247] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c033f10, ftCreationTime.dwHighDateTime=0x1d5e4ed, ftLastAccessTime.dwLowDateTime=0x10fb73c0, ftLastAccessTime.dwHighDateTime=0x1d5e850, ftLastWriteTime.dwLowDateTime=0x10fb73c0, ftLastWriteTime.dwHighDateTime=0x1d5e850, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="qyFTY4uHWM.wav", cAlternateFileName="QYFTY4~1.WAV")) returned 1 [0129.247] wcscmp (_String1="qyFTY4uHWM.wav", _String2=".") returned 1 [0129.248] wcscmp (_String1="qyFTY4uHWM.wav", _String2="..") returned 1 [0129.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0129.248] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9" [0129.248] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\" [0129.248] wcscat (in: _Dest=0x3d44d50, _Source="qyFTY4uHWM.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\qyFTY4uHWM.wav") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\qyFTY4uHWM.wav" [0129.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0129.250] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c033f10, ftCreationTime.dwHighDateTime=0x1d5e4ed, ftLastAccessTime.dwLowDateTime=0x10fb73c0, ftLastAccessTime.dwHighDateTime=0x1d5e850, ftLastWriteTime.dwLowDateTime=0x10fb73c0, ftLastWriteTime.dwHighDateTime=0x1d5e850, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="qyFTY4uHWM.wav", cAlternateFileName="QYFTY4~1.WAV")) returned 0 [0129.250] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0129.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0129.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x349128) returned 1 [0129.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a231b0) returned 1 Thread: id = 756 os_tid = 0x13a8 [0126.723] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\Ps2J-ThD tiS9f.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\ps2j-thd tis9f.wav")) returned 0x20 [0126.723] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\Ps2J-ThD tiS9f.wav", dwFileAttributes=0x20) returned 1 [0126.723] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\Ps2J-ThD tiS9f.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\ps2j-thd tis9f.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18b0 [0126.723] GetFileSizeEx (in: hFile=0x18b0, lpFileSize=0xa79f944 | out: lpFileSize=0xa79f944*=30923) returned 1 [0126.723] SetFilePointerEx (in: hFile=0x18b0, liDistanceToMove=0x78c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.723] ReadFile (in: hFile=0x18b0, lpBuffer=0xa79f920, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa79f930, lpOverlapped=0x0 | out: lpBuffer=0xa79f920*, lpNumberOfBytesRead=0xa79f930*=0x4, lpOverlapped=0x0) returned 1 [0126.725] SetFilePointerEx (in: hFile=0x18b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0126.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39e8 [0126.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0126.725] NtQuerySystemTime (in: CurrentTime=0xa79f8b8 | out: CurrentTime=0xa79f8b8*=132462177061092000) returned 0x0 [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x599c1a45 [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x7e6758e1 [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x68b13316 [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x4d88feeb [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x1345e7d6 [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x15ac761c [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x59c7e87b [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x60bc01db [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x1fcd57de [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x336cab53 [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x20b2da06 [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x2fb3fffe [0126.725] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x5d9edbc4 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x625bf3e6 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x63761e23 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x1237a4b2 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x7c60b40c [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x9e3d1e0 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x3bb14728 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x266d1621 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x2788c82 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x56eacbb0 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x3592987a [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x1e7bb18f [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x3abf4e11 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x33980ba4 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x7a2f0b5e [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x27cce2e5 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x40da5400 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x1c0182f5 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x7dc6e061 [0126.726] RtlRandomEx (in: Seed=0xa79f8b0 | out: Seed=0xa79f8b0) returned 0x1bdda6b7 [0126.736] SetFilePointerEx (in: hFile=0x18b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.736] ReadFile (in: hFile=0x18b0, lpBuffer=0x7b717b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa79f8b8, lpOverlapped=0x0 | out: lpBuffer=0x7b717b8*, lpNumberOfBytesRead=0xa79f8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0126.737] SetFilePointerEx (in: hFile=0x18b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08538 [0126.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fce0 [0126.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0126.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a10) returned 1 [0126.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b753c0 [0126.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0126.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0126.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0126.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0126.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08538) returned 1 [0126.737] WriteFile (in: hFile=0x18b0, lpBuffer=0x7b753c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa79f8b8, lpOverlapped=0x0 | out: lpBuffer=0x7b753c0*, lpNumberOfBytesWritten=0xa79f8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0130.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b753c0) returned 1 [0130.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b717b8) returned 1 [0130.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x2fc87c8 [0130.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e526f8) returned 1 [0130.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x2fc8688 [0130.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e526f8 [0130.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52658 [0130.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52658) returned 1 [0130.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0130.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff00e8) returned 1 [0130.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3042500 [0130.039] SetFilePointerEx (in: hFile=0x18b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.039] WriteFile (in: hFile=0x18b0, lpBuffer=0x3042500*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xa79f938, lpOverlapped=0x0 | out: lpBuffer=0x3042500*, lpNumberOfBytesWritten=0xa79f938*=0x116, lpOverlapped=0x0) returned 1 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50c60 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a38 [0130.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a38) returned 1 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e85f48 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a38 [0130.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a60 [0130.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a60) returned 1 [0130.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0130.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0130.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3d48848 [0130.166] sprintf (in: _Dest=0x3d48848, _Format="%c%c" | out: _Dest="e9") returned 2 [0130.166] sprintf (in: _Dest=0x3d4884a, _Format="%c%c" | out: _Dest="48") returned 2 [0130.166] sprintf (in: _Dest=0x3d4884c, _Format="%c%c" | out: _Dest="6b") returned 2 [0130.166] sprintf (in: _Dest=0x3d4884e, _Format="%c%c" | out: _Dest="dc") returned 2 [0130.166] sprintf (in: _Dest=0x3d48850, _Format="%c%c" | out: _Dest="83") returned 2 [0130.166] sprintf (in: _Dest=0x3d48852, _Format="%c%c" | out: _Dest="82") returned 2 [0130.166] sprintf (in: _Dest=0x3d48854, _Format="%c%c" | out: _Dest="96") returned 2 [0130.166] sprintf (in: _Dest=0x3d48856, _Format="%c%c" | out: _Dest="40") returned 2 [0130.166] sprintf (in: _Dest=0x3d48858, _Format="%c%c" | out: _Dest="12") returned 2 [0130.166] sprintf (in: _Dest=0x3d4885a, _Format="%c%c" | out: _Dest="9f") returned 2 [0130.166] sprintf (in: _Dest=0x3d4885c, _Format="%c%c" | out: _Dest="2f") returned 2 [0130.166] sprintf (in: _Dest=0x3d4885e, _Format="%c%c" | out: _Dest="5c") returned 2 [0130.166] sprintf (in: _Dest=0x3d48860, _Format="%c%c" | out: _Dest="77") returned 2 [0130.166] sprintf (in: _Dest=0x3d48862, _Format="%c%c" | out: _Dest="e0") returned 2 [0130.166] sprintf (in: _Dest=0x3d48864, _Format="%c%c" | out: _Dest="e8") returned 2 [0130.166] sprintf (in: _Dest=0x3d48866, _Format="%c%c" | out: _Dest="6d") returned 2 [0130.166] sprintf (in: _Dest=0x3d48868, _Format="%c%c" | out: _Dest="de") returned 2 [0130.166] sprintf (in: _Dest=0x3d4886a, _Format="%c%c" | out: _Dest="90") returned 2 [0130.166] sprintf (in: _Dest=0x3d4886c, _Format="%c%c" | out: _Dest="34") returned 2 [0130.166] sprintf (in: _Dest=0x3d4886e, _Format="%c%c" | out: _Dest="23") returned 2 [0130.166] sprintf (in: _Dest=0x3d48870, _Format="%c%c" | out: _Dest="22") returned 2 [0130.166] sprintf (in: _Dest=0x3d48872, _Format="%c%c" | out: _Dest="62") returned 2 [0130.166] sprintf (in: _Dest=0x3d48874, _Format="%c%c" | out: _Dest="ee") returned 2 [0130.166] sprintf (in: _Dest=0x3d48876, _Format="%c%c" | out: _Dest="4e") returned 2 [0130.166] sprintf (in: _Dest=0x3d48878, _Format="%c%c" | out: _Dest="ec") returned 2 [0130.166] sprintf (in: _Dest=0x3d4887a, _Format="%c%c" | out: _Dest="07") returned 2 [0130.166] sprintf (in: _Dest=0x3d4887c, _Format="%c%c" | out: _Dest="96") returned 2 [0130.166] sprintf (in: _Dest=0x3d4887e, _Format="%c%c" | out: _Dest="69") returned 2 [0130.167] sprintf (in: _Dest=0x3d48880, _Format="%c%c" | out: _Dest="62") returned 2 [0130.167] sprintf (in: _Dest=0x3d48882, _Format="%c%c" | out: _Dest="9b") returned 2 [0130.167] sprintf (in: _Dest=0x3d48884, _Format="%c%c" | out: _Dest="2f") returned 2 [0130.167] sprintf (in: _Dest=0x3d48886, _Format="%c%c" | out: _Dest="bd") returned 2 [0130.167] sprintf (in: _Dest=0x3d48888, _Format="%c%c" | out: _Dest="5c") returned 2 [0130.167] sprintf (in: _Dest=0x3d4888a, _Format="%c%c" | out: _Dest="1b") returned 2 [0130.167] sprintf (in: _Dest=0x3d4888c, _Format="%c%c" | out: _Dest="3f") returned 2 [0130.167] sprintf (in: _Dest=0x3d4888e, _Format="%c%c" | out: _Dest="a6") returned 2 [0130.167] RtlInitAnsiString (in: DestinationString=0xa79f8c0, SourceString="e9486bdc83829640129f2f5c77e0e86dde9034232262ee4eec079669629b2fbd5c1b3fa6" | out: DestinationString="e9486bdc83829640129f2f5c77e0e86dde9034232262ee4eec079669629b2fbd5c1b3fa6") [0130.167] RtlAnsiStringToUnicodeString (in: DestinationString=0xa79f8b8, SourceString="e9486bdc83829640129f2f5c77e0e86dde9034232262ee4eec079669629b2fbd5c1b3fa6", AllocateDestinationString=1 | out: DestinationString="e9486bdc83829640129f2f5c77e0e86dde9034232262ee4eec079669629b2fbd5c1b3fa6") returned 0x0 [0130.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4fa0 [0130.167] wcscat (in: _Dest=0x3eb5db8, _Source="e9486bdc8382964012" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\e9486bdc8382964012") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\e9486bdc8382964012" [0130.167] wcscat (in: _Dest=0x3eb5db8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\e9486bdc8382964012.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\e9486bdc8382964012.68814f" [0130.167] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\e9486bdc8382964012.68814f", NtPathName=0xa79f8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\e9486bdc8382964012.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35aa08 [0130.167] NtSetInformationFile (FileHandle=0x18b0, IoStatusBlock=0xa79f8b8, FileInformation=0x35aa08, Length=0xa2, FileInformationClass=0xa) returned 0x0 [0130.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 [0130.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a71950) returned 1 [0130.252] NtQueryInformationFile (in: FileHandle=0x18b0, IoStatusBlock=0xa79f888, FileInformation=0xa79f890, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa79f888, FileInformation=0xa79f890) returned 0x0 [0130.252] NtSetInformationFile (FileHandle=0x18b0, IoStatusBlock=0xa79f888, FileInformation=0xa79f890, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 [0130.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 [0130.325] FlushFileBuffers (hFile=0x18b0) returned 1 [0130.352] CloseHandle (hObject=0x18b0) returned 1 [0130.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3be50 [0130.378] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" [0130.378] wcscat (in: _Dest=0x3f3be50, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\68814F-Readme.txt" [0130.378] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\68814f-readme.txt")) returned 0x20 [0130.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 [0130.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 757 os_tid = 0x13ac [0126.738] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\t-WHUwpUzYF83tRM_qd.m4a" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\t-whuwpuzyf83trm_qd.m4a")) returned 0x20 [0126.738] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\t-WHUwpUzYF83tRM_qd.m4a", dwFileAttributes=0x20) returned 1 [0126.738] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\t-WHUwpUzYF83tRM_qd.m4a" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\t-whuwpuzyf83trm_qd.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18b8 [0126.738] GetFileSizeEx (in: hFile=0x18b8, lpFileSize=0xba8fedc | out: lpFileSize=0xba8fedc*=12535) returned 1 [0126.738] SetFilePointerEx (in: hFile=0x18b8, liDistanceToMove=0x30f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.739] ReadFile (in: hFile=0x18b8, lpBuffer=0xba8feb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xba8fec8, lpOverlapped=0x0 | out: lpBuffer=0xba8feb8*, lpNumberOfBytesRead=0xba8fec8*=0x4, lpOverlapped=0x0) returned 1 [0126.740] SetFilePointerEx (in: hFile=0x18b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0126.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4118 [0126.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0126.740] NtQuerySystemTime (in: CurrentTime=0xba8fe50 | out: CurrentTime=0xba8fe50*=132462177061248000) returned 0x0 [0126.740] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x145254a0 [0126.740] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x2c9c5e8c [0126.740] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x53aeb5fe [0126.740] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x29b0860a [0126.740] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x4cacd435 [0126.740] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x1196930a [0126.740] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x7e4ca86 [0126.740] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0xfd65158 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x22100621 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x6cf9a4dd [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x2600ffc [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x7d0e28f8 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0xb3ef784 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x2102408b [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x271050a7 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x27b975ab [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x2557ffe1 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x4052b83e [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x5ad20415 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x371f4237 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x5fd001ec [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x6bf4acc3 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0xff58e1b [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x20367ebd [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x5c5371d8 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x17779543 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x37d1731b [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x3272f2e1 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x280438e0 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x2091d88a [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x44f86b81 [0126.741] RtlRandomEx (in: Seed=0xba8fe48 | out: Seed=0xba8fe48) returned 0x2dd56fd2 [0126.750] ReadFile (in: hFile=0x18b8, lpBuffer=0x7b78fc8, nNumberOfBytesToRead=0x30f7, lpNumberOfBytesRead=0xba8fe44, lpOverlapped=0x0 | out: lpBuffer=0x7b78fc8*, lpNumberOfBytesRead=0xba8fe44*=0x30f7, lpOverlapped=0x0) returned 1 [0126.751] SetFilePointerEx (in: hFile=0x18b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.751] WriteFile (in: hFile=0x18b8, lpBuffer=0x7b7cbd0*, nNumberOfBytesToWrite=0x30f7, lpNumberOfBytesWritten=0xba8fe48, lpOverlapped=0x0 | out: lpBuffer=0x7b7cbd0*, lpNumberOfBytesWritten=0xba8fe48*=0x30f7, lpOverlapped=0x0) returned 1 [0127.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0127.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0127.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0127.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cbd0) returned 1 [0127.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b78fc8) returned 1 [0127.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0127.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08190) returned 1 [0127.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e08190 [0127.253] SetFilePointerEx (in: hFile=0x18b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.253] WriteFile (in: hFile=0x18b8, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xba8fed0, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0xba8fed0*=0x120, lpOverlapped=0x0) returned 1 [0127.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48be8 [0127.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0127.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0127.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e791a8 [0127.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0127.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0127.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0127.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0127.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48be8) returned 1 [0127.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5d) returned 0x3ee0c00 [0127.744] sprintf (in: _Dest=0x3ee0c00, _Format="%c%c" | out: _Dest="96") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c02, _Format="%c%c" | out: _Dest="4d") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c04, _Format="%c%c" | out: _Dest="06") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c06, _Format="%c%c" | out: _Dest="1b") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c08, _Format="%c%c" | out: _Dest="35") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c0a, _Format="%c%c" | out: _Dest="a7") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c0c, _Format="%c%c" | out: _Dest="b5") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c0e, _Format="%c%c" | out: _Dest="39") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c10, _Format="%c%c" | out: _Dest="03") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c12, _Format="%c%c" | out: _Dest="e7") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c14, _Format="%c%c" | out: _Dest="a6") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c16, _Format="%c%c" | out: _Dest="b5") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c18, _Format="%c%c" | out: _Dest="08") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c1a, _Format="%c%c" | out: _Dest="fb") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c1c, _Format="%c%c" | out: _Dest="28") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c1e, _Format="%c%c" | out: _Dest="b1") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c20, _Format="%c%c" | out: _Dest="40") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c22, _Format="%c%c" | out: _Dest="45") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c24, _Format="%c%c" | out: _Dest="ff") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c26, _Format="%c%c" | out: _Dest="7f") returned 2 [0127.745] sprintf (in: _Dest=0x3ee0c28, _Format="%c%c" | out: _Dest="f8") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c2a, _Format="%c%c" | out: _Dest="ab") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c2c, _Format="%c%c" | out: _Dest="27") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c2e, _Format="%c%c" | out: _Dest="dc") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c30, _Format="%c%c" | out: _Dest="fa") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c32, _Format="%c%c" | out: _Dest="d7") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c34, _Format="%c%c" | out: _Dest="2a") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c36, _Format="%c%c" | out: _Dest="4c") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c38, _Format="%c%c" | out: _Dest="66") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c3a, _Format="%c%c" | out: _Dest="b5") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c3c, _Format="%c%c" | out: _Dest="41") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c3e, _Format="%c%c" | out: _Dest="58") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c40, _Format="%c%c" | out: _Dest="86") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c42, _Format="%c%c" | out: _Dest="c5") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c44, _Format="%c%c" | out: _Dest="11") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c46, _Format="%c%c" | out: _Dest="37") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c48, _Format="%c%c" | out: _Dest="6a") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c4a, _Format="%c%c" | out: _Dest="02") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c4c, _Format="%c%c" | out: _Dest="d6") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c4e, _Format="%c%c" | out: _Dest="ab") returned 2 [0127.746] sprintf (in: _Dest=0x3ee0c50, _Format="%c%c" | out: _Dest="36") returned 2 [0127.747] sprintf (in: _Dest=0x3ee0c52, _Format="%c%c" | out: _Dest="cc") returned 2 [0127.747] sprintf (in: _Dest=0x3ee0c54, _Format="%c%c" | out: _Dest="8e") returned 2 [0127.747] sprintf (in: _Dest=0x3ee0c56, _Format="%c%c" | out: _Dest="b7") returned 2 [0127.747] sprintf (in: _Dest=0x3ee0c58, _Format="%c%c" | out: _Dest="7e") returned 2 [0127.747] sprintf (in: _Dest=0x3ee0c5a, _Format="%c%c" | out: _Dest="06") returned 2 [0127.747] RtlInitAnsiString (in: DestinationString=0xba8fe58, SourceString="964d061b35a7b53903e7a6b508fb28b14045ff7ff8ab27dcfad72a4c66b5415886c511376a02d6ab36cc8eb77e06" | out: DestinationString="964d061b35a7b53903e7a6b508fb28b14045ff7ff8ab27dcfad72a4c66b5415886c511376a02d6ab36cc8eb77e06") [0127.747] RtlAnsiStringToUnicodeString (in: DestinationString=0xba8fe50, SourceString="964d061b35a7b53903e7a6b508fb28b14045ff7ff8ab27dcfad72a4c66b5415886c511376a02d6ab36cc8eb77e06", AllocateDestinationString=1 | out: DestinationString="964d061b35a7b53903e7a6b508fb28b14045ff7ff8ab27dcfad72a4c66b5415886c511376a02d6ab36cc8eb77e06") returned 0x0 [0127.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a1e8 [0127.747] wcscat (in: _Dest=0x3df4aa0, _Source="964d061b35a7b53903e7a6b" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\964d061b35a7b53903e7a6b") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\964d061b35a7b53903e7a6b" [0127.747] wcscat (in: _Dest=0x3df4aa0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\964d061b35a7b53903e7a6b.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\964d061b35a7b53903e7a6b.68814f" [0127.747] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\964d061b35a7b53903e7a6b.68814f", NtPathName=0xba8fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\964d061b35a7b53903e7a6b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7c18 [0127.748] NtSetInformationFile (FileHandle=0x18b8, IoStatusBlock=0xba8fe50, FileInformation=0x2ff7c18, Length=0xac, FileInformationClass=0xa) returned 0x0 [0127.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 [0127.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40900) returned 1 [0127.862] NtQueryInformationFile (in: FileHandle=0x18b8, IoStatusBlock=0xba8fe20, FileInformation=0xba8fe28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xba8fe20, FileInformation=0xba8fe28) returned 0x0 [0127.862] NtSetInformationFile (FileHandle=0x18b8, IoStatusBlock=0xba8fe20, FileInformation=0xba8fe28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0127.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 [0127.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a1e8) returned 1 [0127.943] FlushFileBuffers (hFile=0x18b8) returned 1 [0127.947] CloseHandle (hObject=0x18b8) returned 1 [0127.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb92b8 [0127.963] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" [0127.964] wcscat (in: _Dest=0x3eb92b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\68814F-Readme.txt" [0127.964] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\68814f-readme.txt")) returned 0xffffffff [0127.964] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16dc [0127.976] WriteFile (in: hFile=0x16dc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xba8fe64, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xba8fe64*=0x8b9, lpOverlapped=0x0) returned 1 [0127.993] CloseHandle (hObject=0x16dc) returned 1 [0128.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 [0128.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 758 os_tid = 0x13b0 [0126.751] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\whC6icRkRMapuP0oFQ.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\whc6icrkrmapup0ofq.mp3")) returned 0x20 [0126.751] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\whC6icRkRMapuP0oFQ.mp3", dwFileAttributes=0x20) returned 1 [0126.752] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\whC6icRkRMapuP0oFQ.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\whc6icrkrmapup0ofq.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18bc [0126.752] GetFileSizeEx (in: hFile=0x18bc, lpFileSize=0x632fa0c | out: lpFileSize=0x632fa0c*=13516) returned 1 [0126.752] SetFilePointerEx (in: hFile=0x18bc, liDistanceToMove=0x34c8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.752] ReadFile (in: hFile=0x18bc, lpBuffer=0x632f9e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x632f9f8, lpOverlapped=0x0 | out: lpBuffer=0x632f9e8*, lpNumberOfBytesRead=0x632f9f8*=0x4, lpOverlapped=0x0) returned 1 [0126.754] SetFilePointerEx (in: hFile=0x18bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0126.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0126.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0126.754] NtQuerySystemTime (in: CurrentTime=0x632f980 | out: CurrentTime=0x632f980*=132462177061404000) returned 0x0 [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x69914432 [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x413356da [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x2589961b [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x246c4028 [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x6e457fa2 [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x89d4c00 [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x4c5a06c [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x1d3bb63d [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x205f8f3 [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x268870a8 [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x4a6813ee [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x695c7eea [0126.754] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x4f4c1cf5 [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x5672682a [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x42607ffd [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x7f7357e1 [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x2500fb60 [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x65ee52fe [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x71cd2f75 [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0xa1f0cb8 [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x38331eaf [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x542115de [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x68cbd9fe [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x320f1f9c [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x26bf2082 [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x35b5cabb [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x4f9f089 [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x5b283e45 [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x22200d8 [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x44acdd [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x7b2bd839 [0126.755] RtlRandomEx (in: Seed=0x632f978 | out: Seed=0x632f978) returned 0x6ca5f67e [0126.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0126.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b807d8 [0126.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b843e0 [0126.766] ReadFile (in: hFile=0x18bc, lpBuffer=0x7b807d8, nNumberOfBytesToRead=0x34cc, lpNumberOfBytesRead=0x632f974, lpOverlapped=0x0 | out: lpBuffer=0x7b807d8*, lpNumberOfBytesRead=0x632f974*=0x34cc, lpOverlapped=0x0) returned 1 [0126.767] SetFilePointerEx (in: hFile=0x18bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.767] WriteFile (in: hFile=0x18bc, lpBuffer=0x7b843e0*, nNumberOfBytesToWrite=0x34cc, lpNumberOfBytesWritten=0x632f978, lpOverlapped=0x0 | out: lpBuffer=0x7b843e0*, lpNumberOfBytesWritten=0x632f978*=0x34cc, lpOverlapped=0x0) returned 1 [0127.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0127.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0127.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c20) returned 1 [0127.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b843e0) returned 1 [0127.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b807d8) returned 1 [0127.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fbf0) returned 1 [0127.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0127.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07800 [0127.256] SetFilePointerEx (in: hFile=0x18bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.256] WriteFile (in: hFile=0x18bc, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x632fa00, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0x632fa00*=0x11e, lpOverlapped=0x0) returned 1 [0127.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08190 [0127.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0127.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0127.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0127.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e791a8 [0127.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0127.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0127.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4168) returned 1 [0127.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0127.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08190) returned 1 [0127.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3ee0c00 [0127.750] sprintf (in: _Dest=0x3ee0c00, _Format="%c%c" | out: _Dest="1e") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c02, _Format="%c%c" | out: _Dest="72") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c04, _Format="%c%c" | out: _Dest="05") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c06, _Format="%c%c" | out: _Dest="a3") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c08, _Format="%c%c" | out: _Dest="12") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c0a, _Format="%c%c" | out: _Dest="a2") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c0c, _Format="%c%c" | out: _Dest="eb") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c0e, _Format="%c%c" | out: _Dest="3e") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c10, _Format="%c%c" | out: _Dest="e6") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c12, _Format="%c%c" | out: _Dest="0e") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c14, _Format="%c%c" | out: _Dest="74") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c16, _Format="%c%c" | out: _Dest="b8") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c18, _Format="%c%c" | out: _Dest="82") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c1a, _Format="%c%c" | out: _Dest="35") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c1c, _Format="%c%c" | out: _Dest="41") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c1e, _Format="%c%c" | out: _Dest="16") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c20, _Format="%c%c" | out: _Dest="56") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c22, _Format="%c%c" | out: _Dest="44") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c24, _Format="%c%c" | out: _Dest="d6") returned 2 [0127.751] sprintf (in: _Dest=0x3ee0c26, _Format="%c%c" | out: _Dest="9b") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c28, _Format="%c%c" | out: _Dest="ae") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c2a, _Format="%c%c" | out: _Dest="57") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c2c, _Format="%c%c" | out: _Dest="f9") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c2e, _Format="%c%c" | out: _Dest="c0") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c30, _Format="%c%c" | out: _Dest="fa") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c32, _Format="%c%c" | out: _Dest="6a") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c34, _Format="%c%c" | out: _Dest="7c") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c36, _Format="%c%c" | out: _Dest="a8") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c38, _Format="%c%c" | out: _Dest="bf") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c3a, _Format="%c%c" | out: _Dest="a3") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c3c, _Format="%c%c" | out: _Dest="88") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c3e, _Format="%c%c" | out: _Dest="99") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c40, _Format="%c%c" | out: _Dest="9d") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c42, _Format="%c%c" | out: _Dest="86") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c44, _Format="%c%c" | out: _Dest="0a") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c46, _Format="%c%c" | out: _Dest="65") returned 2 [0127.752] sprintf (in: _Dest=0x3ee0c48, _Format="%c%c" | out: _Dest="89") returned 2 [0127.753] sprintf (in: _Dest=0x3ee0c4a, _Format="%c%c" | out: _Dest="a8") returned 2 [0127.753] sprintf (in: _Dest=0x3ee0c4c, _Format="%c%c" | out: _Dest="1e") returned 2 [0127.753] sprintf (in: _Dest=0x3ee0c4e, _Format="%c%c" | out: _Dest="77") returned 2 [0127.753] sprintf (in: _Dest=0x3ee0c50, _Format="%c%c" | out: _Dest="17") returned 2 [0127.753] sprintf (in: _Dest=0x3ee0c52, _Format="%c%c" | out: _Dest="e9") returned 2 [0127.753] sprintf (in: _Dest=0x3ee0c54, _Format="%c%c" | out: _Dest="d8") returned 2 [0127.753] sprintf (in: _Dest=0x3ee0c56, _Format="%c%c" | out: _Dest="34") returned 2 [0127.753] RtlInitAnsiString (in: DestinationString=0x632f988, SourceString="1e7205a312a2eb3ee60e74b8823541165644d69bae57f9c0fa6a7ca8bfa388999d860a6589a81e7717e9d834" | out: DestinationString="1e7205a312a2eb3ee60e74b8823541165644d69bae57f9c0fa6a7ca8bfa388999d860a6589a81e7717e9d834") [0127.753] RtlAnsiStringToUnicodeString (in: DestinationString=0x632f980, SourceString="1e7205a312a2eb3ee60e74b8823541165644d69bae57f9c0fa6a7ca8bfa388999d860a6589a81e7717e9d834", AllocateDestinationString=1 | out: DestinationString="1e7205a312a2eb3ee60e74b8823541165644d69bae57f9c0fa6a7ca8bfa388999d860a6589a81e7717e9d834") returned 0x0 [0127.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66498 [0127.753] wcscat (in: _Dest=0x3df4dc0, _Source="1e7205a312a2eb3ee60e74" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\1e7205a312a2eb3ee60e74") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\1e7205a312a2eb3ee60e74" [0127.753] wcscat (in: _Dest=0x3df4dc0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\1e7205a312a2eb3ee60e74.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\1e7205a312a2eb3ee60e74.68814f" [0127.753] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\1e7205a312a2eb3ee60e74.68814f", NtPathName=0x632f978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\1e7205a312a2eb3ee60e74.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0127.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6d00 [0127.754] NtSetInformationFile (FileHandle=0x18bc, IoStatusBlock=0x632f980, FileInformation=0x2ff6d00, Length=0xaa, FileInformationClass=0xa) returned 0x0 [0128.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 [0128.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d406d8) returned 1 [0128.021] NtQueryInformationFile (in: FileHandle=0x18bc, IoStatusBlock=0x632f950, FileInformation=0x632f958, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x632f950, FileInformation=0x632f958) returned 0x0 [0128.021] NtSetInformationFile (FileHandle=0x18bc, IoStatusBlock=0x632f950, FileInformation=0x632f958, Length=0x28, FileInformationClass=0x4) returned 0x0 [0128.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4dc0) returned 1 [0128.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66498) returned 1 [0128.036] FlushFileBuffers (hFile=0x18bc) returned 1 [0128.043] CloseHandle (hObject=0x18bc) returned 1 [0128.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9120 [0128.053] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\" [0128.053] wcscat (in: _Dest=0x3eb9120, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\68814F-Readme.txt" [0128.053] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\68814f-readme.txt")) returned 0x20 [0128.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 [0128.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45380) returned 1 Thread: id = 759 os_tid = 0x13b4 [0126.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69bb8 [0126.809] wcscpy (in: _Dest=0x3e69bb8, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0126.809] wcscat (in: _Dest=0x3e69bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0126.809] wcscat (in: _Dest=0x3e69bb8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\*") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\*" [0126.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1340 [0126.809] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\*", lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1bf4f0, ftCreationTime.dwHighDateTime=0x1d5e1d1, ftLastAccessTime.dwLowDateTime=0xd02e2110, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0xd02e2110, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0126.810] wcscmp (_String1=".", _String2=".") returned 0 [0126.810] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c1bf4f0, ftCreationTime.dwHighDateTime=0x1d5e1d1, ftLastAccessTime.dwLowDateTime=0xd02e2110, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0xd02e2110, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.810] wcscmp (_String1="..", _String2=".") returned 1 [0126.810] wcscmp (_String1="..", _String2="..") returned 0 [0126.810] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8df2e90, ftCreationTime.dwHighDateTime=0x1d5dffe, ftLastAccessTime.dwLowDateTime=0xd4d7fdf0, ftLastAccessTime.dwHighDateTime=0x1d5de2c, ftLastWriteTime.dwLowDateTime=0xd4d7fdf0, ftLastWriteTime.dwHighDateTime=0x1d5de2c, nFileSizeHigh=0x0, nFileSizeLow=0xd504, dwReserved0=0x0, dwReserved1=0x0, cFileName="CvCd4p.wav", cAlternateFileName="")) returned 1 [0126.810] wcscmp (_String1="CvCd4p.wav", _String2=".") returned 1 [0126.810] wcscmp (_String1="CvCd4p.wav", _String2="..") returned 1 [0126.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba110 [0126.811] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0126.811] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0126.811] wcscat (in: _Dest=0x3eba110, _Source="CvCd4p.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\CvCd4p.wav") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\CvCd4p.wav" [0136.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0136.493] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a044640, ftCreationTime.dwHighDateTime=0x1d5e420, ftLastAccessTime.dwLowDateTime=0xa7aa79f0, ftLastAccessTime.dwHighDateTime=0x1d5e47d, ftLastWriteTime.dwLowDateTime=0xa7aa79f0, ftLastWriteTime.dwHighDateTime=0x1d5e47d, nFileSizeHigh=0x0, nFileSizeLow=0x1222, dwReserved0=0x0, dwReserved1=0x0, cFileName="dv2ySzQtX8cfol.mp3", cAlternateFileName="DV2YSZ~1.MP3")) returned 1 [0136.494] wcscmp (_String1="dv2ySzQtX8cfol.mp3", _String2=".") returned 1 [0136.494] wcscmp (_String1="dv2ySzQtX8cfol.mp3", _String2="..") returned 1 [0136.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5698 [0136.494] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0136.494] wcscat (in: _Dest=0x3eb5698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0136.494] wcscat (in: _Dest=0x3eb5698, _Source="dv2ySzQtX8cfol.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\dv2ySzQtX8cfol.mp3") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\dv2ySzQtX8cfol.mp3" [0136.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0136.495] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a90e50, ftCreationTime.dwHighDateTime=0x1d5dfc1, ftLastAccessTime.dwLowDateTime=0x8557a7c0, ftLastAccessTime.dwHighDateTime=0x1d5dcc5, ftLastWriteTime.dwLowDateTime=0x8557a7c0, ftLastWriteTime.dwHighDateTime=0x1d5dcc5, nFileSizeHigh=0x0, nFileSizeLow=0xc9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GU7JWzH3RBGS.wav", cAlternateFileName="GU7JWZ~1.WAV")) returned 1 [0136.495] wcscmp (_String1="GU7JWzH3RBGS.wav", _String2=".") returned 1 [0136.495] wcscmp (_String1="GU7JWzH3RBGS.wav", _String2="..") returned 1 [0136.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44570 [0136.495] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0136.495] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0136.495] wcscat (in: _Dest=0x3d44570, _Source="GU7JWzH3RBGS.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\GU7JWzH3RBGS.wav") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\GU7JWzH3RBGS.wav" [0136.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0136.496] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa491fd30, ftCreationTime.dwHighDateTime=0x1d5e2fa, ftLastAccessTime.dwLowDateTime=0xa4cb9370, ftLastAccessTime.dwHighDateTime=0x1d5e13c, ftLastWriteTime.dwLowDateTime=0xa4cb9370, ftLastWriteTime.dwHighDateTime=0x1d5e13c, nFileSizeHigh=0x0, nFileSizeLow=0x568c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hAk0fQJ4EYfQ.mp3", cAlternateFileName="HAK0FQ~1.MP3")) returned 1 [0136.496] wcscmp (_String1="hAk0fQJ4EYfQ.mp3", _String2=".") returned 1 [0136.496] wcscmp (_String1="hAk0fQJ4EYfQ.mp3", _String2="..") returned 1 [0136.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0136.497] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0136.497] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0136.497] wcscat (in: _Dest=0x3d44d50, _Source="hAk0fQJ4EYfQ.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\hAk0fQJ4EYfQ.mp3") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\hAk0fQJ4EYfQ.mp3" [0136.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e5c [0136.502] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af75050, ftCreationTime.dwHighDateTime=0x1d5d981, ftLastAccessTime.dwLowDateTime=0x207b1940, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0x207b1940, ftLastWriteTime.dwHighDateTime=0x1d5e58f, nFileSizeHigh=0x0, nFileSizeLow=0x84ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="HYY4-Se8Hpasf9FZJ.m4a", cAlternateFileName="HYY4-S~1.M4A")) returned 1 [0136.502] wcscmp (_String1="HYY4-Se8Hpasf9FZJ.m4a", _String2=".") returned 1 [0136.502] wcscmp (_String1="HYY4-Se8Hpasf9FZJ.m4a", _String2="..") returned 1 [0136.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb74e0 [0136.502] wcscpy (in: _Dest=0x3eb74e0, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0136.502] wcscat (in: _Dest=0x3eb74e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0136.502] wcscat (in: _Dest=0x3eb74e0, _Source="HYY4-Se8Hpasf9FZJ.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\HYY4-Se8Hpasf9FZJ.m4a") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\HYY4-Se8Hpasf9FZJ.m4a" [0136.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb74e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0136.503] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e5a9b20, ftCreationTime.dwHighDateTime=0x1d5e7bc, ftLastAccessTime.dwLowDateTime=0x458a2530, ftLastAccessTime.dwHighDateTime=0x1d5df65, ftLastWriteTime.dwLowDateTime=0x458a2530, ftLastWriteTime.dwHighDateTime=0x1d5df65, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="IYDfHbvySdv3.wav", cAlternateFileName="IYDFHB~1.WAV")) returned 1 [0136.503] wcscmp (_String1="IYDfHbvySdv3.wav", _String2=".") returned 1 [0136.503] wcscmp (_String1="IYDfHbvySdv3.wav", _String2="..") returned 1 [0136.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44f90 [0136.504] wcscpy (in: _Dest=0x3d44f90, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0136.504] wcscat (in: _Dest=0x3d44f90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0136.504] wcscat (in: _Dest=0x3d44f90, _Source="IYDfHbvySdv3.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\IYDfHbvySdv3.wav") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\IYDfHbvySdv3.wav" [0136.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0136.505] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3b51aef0, ftCreationTime.dwHighDateTime=0x1d5dce8, ftLastAccessTime.dwLowDateTime=0x91bf66d0, ftLastAccessTime.dwHighDateTime=0x1d5da70, ftLastWriteTime.dwLowDateTime=0x91bf66d0, ftLastWriteTime.dwHighDateTime=0x1d5da70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nTHGe4k4sr22t-Iq-Nd", cAlternateFileName="NTHGE4~1")) returned 1 [0136.505] wcscmp (_String1="nTHGe4k4sr22t-Iq-Nd", _String2=".") returned 1 [0136.505] wcscmp (_String1="nTHGe4k4sr22t-Iq-Nd", _String2="..") returned 1 [0136.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7318 [0136.505] wcscpy (in: _Dest=0x3eb7318, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0136.505] wcscat (in: _Dest=0x3eb7318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0136.505] wcscat (in: _Dest=0x3eb7318, _Source="nTHGe4k4sr22t-Iq-Nd" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" [0136.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb7318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0136.506] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb3b7540, ftCreationTime.dwHighDateTime=0x1d5df88, ftLastAccessTime.dwLowDateTime=0x4934df60, ftLastAccessTime.dwHighDateTime=0x1d5e0b2, ftLastWriteTime.dwLowDateTime=0x4934df60, ftLastWriteTime.dwHighDateTime=0x1d5e0b2, nFileSizeHigh=0x0, nFileSizeLow=0x14b0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SJisE5uhfw-Yh-uO.wav", cAlternateFileName="SJISE5~1.WAV")) returned 1 [0136.506] wcscmp (_String1="SJisE5uhfw-Yh-uO.wav", _String2=".") returned 1 [0136.506] wcscmp (_String1="SJisE5uhfw-Yh-uO.wav", _String2="..") returned 1 [0136.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb7578 [0136.506] wcscpy (in: _Dest=0x3eb7578, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0136.506] wcscat (in: _Dest=0x3eb7578, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0136.507] wcscat (in: _Dest=0x3eb7578, _Source="SJisE5uhfw-Yh-uO.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\SJisE5uhfw-Yh-uO.wav") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\SJisE5uhfw-Yh-uO.wav" [0136.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0136.508] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbf1c50, ftCreationTime.dwHighDateTime=0x1d5e22e, ftLastAccessTime.dwLowDateTime=0x47a16f80, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0x47a16f80, ftLastWriteTime.dwHighDateTime=0x1d5e0f1, nFileSizeHigh=0x0, nFileSizeLow=0x7406, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZbgZ-8S.wav", cAlternateFileName="")) returned 1 [0136.508] wcscmp (_String1="ZbgZ-8S.wav", _String2=".") returned 1 [0136.508] wcscmp (_String1="ZbgZ-8S.wav", _String2="..") returned 1 [0136.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba660 [0136.508] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL" [0136.508] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0136.541] wcscat (in: _Dest=0x3eba660, _Source="ZbgZ-8S.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ZbgZ-8S.wav") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ZbgZ-8S.wav" [0136.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0136.543] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbf1c50, ftCreationTime.dwHighDateTime=0x1d5e22e, ftLastAccessTime.dwLowDateTime=0x47a16f80, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0x47a16f80, ftLastWriteTime.dwHighDateTime=0x1d5e0f1, nFileSizeHigh=0x0, nFileSizeLow=0x7406, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZbgZ-8S.wav", cAlternateFileName="")) returned 0 [0136.543] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0136.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1340) returned 1 [0136.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 [0136.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26468) returned 1 Thread: id = 760 os_tid = 0x13b8 [0126.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task.xml")) returned 0x20 [0126.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml", dwFileAttributes=0x20) returned 0 [0126.814] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.814] GetLastError () returned 0x5 [0126.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task.xml", dwFileAttributes=0x20) returned 0 [0126.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 Thread: id = 761 os_tid = 0x13bc [0126.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task64.xml")) returned 0x20 [0126.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml", dwFileAttributes=0x20) returned 0 [0126.819] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files\\common files\\java\\java update\\task64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.819] GetLastError () returned 0x5 [0126.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Java\\Java Update\\task64.xml", dwFileAttributes=0x20) returned 0 [0126.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19998) returned 1 Thread: id = 762 os_tid = 0x13c0 [0126.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf678 [0126.822] wcscpy (in: _Dest=0x3edf678, _Source="C:\\Users\\Default\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities" [0126.822] wcscat (in: _Dest=0x3edf678, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\" [0126.822] wcscat (in: _Dest=0x3edf678, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*" [0126.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb15a8 [0126.822] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db80 [0126.822] wcscmp (_String1=".", _String2=".") returned 0 [0126.823] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.823] wcscmp (_String1="..", _String2=".") returned 1 [0126.823] wcscmp (_String1="..", _String2="..") returned 0 [0126.823] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 1 [0126.823] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2=".") returned 1 [0126.823] wcscmp (_String1="{74A13782-B361-4204-9DAA-0A3D49DA4337}", _String2="..") returned 1 [0126.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b928 [0126.823] wcscpy (in: _Dest=0x35b928, _Source="C:\\Users\\Default\\AppData\\Roaming\\Identities" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities" [0126.823] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\" [0126.823] wcscat (in: _Dest=0x35b928, _Source="{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0129.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35b928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0129.279] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{74A13782-B361-4204-9DAA-0A3D49DA4337}", cAlternateFileName="{74A13~1")) returned 0 [0129.279] FindClose (in: hFindFile=0x7a2db80 | out: hFindFile=0x7a2db80) returned 1 [0129.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb15a8) returned 1 [0129.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf678) returned 1 [0129.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 Thread: id = 763 os_tid = 0x13c4 [0126.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3dba2c8 [0126.824] wcscpy (in: _Dest=0x3dba2c8, _Source="C:\\ProgramData\\Microsoft\\Windows\\AIT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT" [0126.824] wcscat (in: _Dest=0x3dba2c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT\\" [0126.824] wcscat (in: _Dest=0x3dba2c8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*" [0126.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2db8 [0126.824] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0126.825] wcscmp (_String1=".", _String2=".") returned 0 [0126.825] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.825] wcscmp (_String1="..", _String2=".") returned 1 [0126.825] wcscmp (_String1="..", _String2="..") returned 0 [0126.825] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0126.825] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0126.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 [0126.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba2c8) returned 1 [0126.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15278) returned 1 Thread: id = 764 os_tid = 0x13c8 [0126.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f830 [0126.833] wcscpy (in: _Dest=0x3f3f830, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0126.833] wcscat (in: _Dest=0x3f3f830, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\" [0126.833] wcscat (in: _Dest=0x3f3f830, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*" [0126.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2db8 [0126.833] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0126.834] wcscmp (_String1=".", _String2=".") returned 0 [0126.834] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.834] wcscmp (_String1="..", _String2=".") returned 1 [0126.834] wcscmp (_String1="..", _String2="..") returned 0 [0126.834] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0126.834] wcscmp (_String1="en-US", _String2=".") returned 1 [0126.834] wcscmp (_String1="en-US", _String2="..") returned 1 [0126.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19998 [0126.834] wcscpy (in: _Dest=0x3e19998, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" [0126.834] wcscat (in: _Dest=0x3e19998, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\" [0126.834] wcscat (in: _Dest=0x3e19998, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0129.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e19998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0129.281] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0129.281] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0129.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 [0129.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0129.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 Thread: id = 765 os_tid = 0x13cc [0126.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e15278 [0126.835] wcscpy (in: _Dest=0x3e15278, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0126.835] wcscat (in: _Dest=0x3e15278, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0126.835] wcscat (in: _Dest=0x3e15278, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*" [0126.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb10d8 [0126.835] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0129.641] wcscmp (_String1=".", _String2=".") returned 0 [0129.641] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.641] wcscmp (_String1="..", _String2=".") returned 1 [0129.641] wcscmp (_String1="..", _String2="..") returned 0 [0129.641] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbox.bin", cAlternateFileName="")) returned 1 [0129.641] wcscmp (_String1="blackbox.bin", _String2=".") returned 1 [0129.641] wcscmp (_String1="blackbox.bin", _String2="..") returned 1 [0129.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a231b0 [0129.642] wcscpy (in: _Dest=0x7a231b0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0129.642] wcscat (in: _Dest=0x7a231b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0129.642] wcscat (in: _Dest=0x7a231b0, _Source="blackbox.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" [0140.517] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\blackbox.bin")) returned 0x2026 [0140.519] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin", dwFileAttributes=0x20) returned 1 [0144.503] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\blackbox.bin" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\blackbox.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1040 [0144.503] GetFileSizeEx (in: hFile=0x1040, lpFileSize=0x81ffa44 | out: lpFileSize=0x81ffa44*=20) returned 1 [0144.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0144.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0144.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0144.504] NtQuerySystemTime (in: CurrentTime=0x81ff9b8 | out: CurrentTime=0x81ff9b8*=132462177233472000) returned 0x0 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x125e5e29 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x1f2ad9c5 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x4e309d60 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x23681274 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x4706cee8 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x7521c7f2 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x4762a0c6 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x2797b090 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x3f025911 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x2656fc32 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x56930b20 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x175af13f [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x3755959e [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x54ae72d5 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x1e47e9e5 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x1c952eae [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x4d2d017a [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x4d16cb8 [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x21af230c [0144.504] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x2e812aeb [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x166ca223 [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x1919eeae [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x41e12e56 [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x7e9b00f2 [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x2ed66d85 [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x4efcafe5 [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x1918e395 [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x21e4c411 [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x3d0af770 [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x735f68b6 [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x5eeb3508 [0144.505] RtlRandomEx (in: Seed=0x81ff9b0 | out: Seed=0x81ff9b0) returned 0x353a99db [0144.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0144.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fce0 [0144.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0144.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0144.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37e0) returned 1 [0144.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0144.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49a88 [0144.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fce0 [0144.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0144.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0144.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0144.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0144.514] ReadFile (in: hFile=0x1040, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0x14, lpNumberOfBytesRead=0x81ff9ac, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0x81ff9ac*=0x14, lpOverlapped=0x0) returned 1 [0144.516] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.516] WriteFile (in: hFile=0x1040, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x81ff9b0, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x81ff9b0*=0x14, lpOverlapped=0x0) returned 1 [0145.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0145.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0145.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0145.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0145.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0145.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0145.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0145.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37770 [0145.960] SetFilePointerEx (in: hFile=0x1040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.960] WriteFile (in: hFile=0x1040, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x81ffa38, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x81ffa38*=0x10a, lpOverlapped=0x0) returned 1 [0147.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08220 [0147.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0147.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0147.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29d0) returned 1 [0147.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x7a2e9c8 [0147.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0147.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0147.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0147.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0147.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08220) returned 1 [0147.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x7a2dc00 [0147.243] sprintf (in: _Dest=0x7a2dc00, _Format="%c%c" | out: _Dest="9a") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc02, _Format="%c%c" | out: _Dest="fb") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc04, _Format="%c%c" | out: _Dest="e2") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc06, _Format="%c%c" | out: _Dest="b7") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc08, _Format="%c%c" | out: _Dest="40") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc0a, _Format="%c%c" | out: _Dest="32") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc0c, _Format="%c%c" | out: _Dest="32") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc0e, _Format="%c%c" | out: _Dest="07") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc10, _Format="%c%c" | out: _Dest="43") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc12, _Format="%c%c" | out: _Dest="ef") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc14, _Format="%c%c" | out: _Dest="07") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc16, _Format="%c%c" | out: _Dest="78") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc18, _Format="%c%c" | out: _Dest="16") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc1a, _Format="%c%c" | out: _Dest="b5") returned 2 [0147.243] sprintf (in: _Dest=0x7a2dc1c, _Format="%c%c" | out: _Dest="aa") returned 2 [0147.244] sprintf (in: _Dest=0x7a2dc1e, _Format="%c%c" | out: _Dest="45") returned 2 [0147.244] sprintf (in: _Dest=0x7a2dc20, _Format="%c%c" | out: _Dest="20") returned 2 [0147.244] sprintf (in: _Dest=0x7a2dc22, _Format="%c%c" | out: _Dest="2c") returned 2 [0147.244] sprintf (in: _Dest=0x7a2dc24, _Format="%c%c" | out: _Dest="4e") returned 2 [0147.244] sprintf (in: _Dest=0x7a2dc26, _Format="%c%c" | out: _Dest="7f") returned 2 [0147.244] sprintf (in: _Dest=0x7a2dc28, _Format="%c%c" | out: _Dest="83") returned 2 [0147.244] sprintf (in: _Dest=0x7a2dc2a, _Format="%c%c" | out: _Dest="55") returned 2 [0147.244] sprintf (in: _Dest=0x7a2dc2c, _Format="%c%c" | out: _Dest="d6") returned 2 [0147.244] sprintf (in: _Dest=0x7a2dc2e, _Format="%c%c" | out: _Dest="a5") returned 2 [0147.244] RtlInitAnsiString (in: DestinationString=0x81ff9c0, SourceString="9afbe2b74032320743ef077816b5aa45202c4e7f8355d6a5" | out: DestinationString="9afbe2b74032320743ef077816b5aa45202c4e7f8355d6a5") [0147.244] RtlAnsiStringToUnicodeString (in: DestinationString=0x81ff9b8, SourceString="9afbe2b74032320743ef077816b5aa45202c4e7f8355d6a5", AllocateDestinationString=1 | out: DestinationString="9afbe2b74032320743ef077816b5aa45202c4e7f8355d6a5") returned 0x0 [0147.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23bc0 [0147.244] wcscat (in: _Dest=0x3e19298, _Source="9afbe2b74032" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\9afbe2b74032") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\9afbe2b74032" [0147.244] wcscat (in: _Dest=0x3e19298, _Source=".68814f" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\9afbe2b74032.68814f") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\9afbe2b74032.68814f" [0147.244] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\9afbe2b74032.68814f", NtPathName=0x81ff9b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\9afbe2b74032.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d442a0 [0154.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 [0154.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57188) returned 1 [0154.114] NtQueryInformationFile (in: FileHandle=0x1040, IoStatusBlock=0x81ff988, FileInformation=0x81ff990, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x81ff988, FileInformation=0x81ff990) returned 0x0 [0154.115] NtSetInformationFile (FileHandle=0x1040, IoStatusBlock=0x81ff988, FileInformation=0x81ff990, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 [0154.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23bc0) returned 1 [0154.154] FlushFileBuffers (hFile=0x1040) returned 1 [0154.171] CloseHandle (hObject=0x1040) returned 1 [0154.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.200] wcscpy (in: _Dest=0x3f3f308, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0154.200] wcscat (in: _Dest=0x3f3f308, _Source="68814F-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt" [0154.200] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\68814f-readme.txt")) returned 0xffffffff [0154.201] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2110 [0154.219] WriteFile (in: hFile=0x2110, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x81ff9cc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x81ff9cc*=0x8b9, lpOverlapped=0x0) returned 1 [0154.226] CloseHandle (hObject=0x2110) returned 1 [0154.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a231b0) returned 1 [0154.232] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0154.232] wcscmp (_String1="Cache", _String2=".") returned 1 [0154.232] wcscmp (_String1="Cache", _String2="..") returned 1 [0154.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe3b48 [0154.232] wcscpy (in: _Dest=0x2fe3b48, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0154.232] wcscat (in: _Dest=0x2fe3b48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0154.232] wcscat (in: _Dest=0x2fe3b48, _Source="Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache" [0156.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe3b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30 [0156.132] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1221c4f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x1221c4f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x18f04190, ftLastWriteTime.dwHighDateTime=0x1d2fc8b, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="drmstore.hds", cAlternateFileName="")) returned 1 [0156.132] wcscmp (_String1="drmstore.hds", _String2=".") returned 1 [0156.132] wcscmp (_String1="drmstore.hds", _String2="..") returned 1 [0156.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a269a8 [0156.132] wcscpy (in: _Dest=0x7a269a8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0156.132] wcscat (in: _Dest=0x7a269a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0156.132] wcscat (in: _Dest=0x7a269a8, _Source="drmstore.hds" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" [0156.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a269a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0156.133] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.bla", cAlternateFileName="")) returned 1 [0156.133] wcscmp (_String1="v3ks.bla", _String2=".") returned 1 [0156.133] wcscmp (_String1="v3ks.bla", _String2="..") returned 1 [0156.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1e7f8 [0156.133] wcscpy (in: _Dest=0x3e1e7f8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0156.134] wcscat (in: _Dest=0x3e1e7f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0156.134] wcscat (in: _Dest=0x3e1e7f8, _Source="v3ks.bla" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" [0156.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1e7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0156.135] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec", cAlternateFileName="")) returned 1 [0156.135] wcscmp (_String1="v3ks.sec", _String2=".") returned 1 [0156.135] wcscmp (_String1="v3ks.sec", _String2="..") returned 1 [0156.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1f358 [0156.135] wcscpy (in: _Dest=0x3e1f358, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM" [0156.135] wcscat (in: _Dest=0x3e1f358, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0156.135] wcscat (in: _Dest=0x3e1f358, _Source="v3ks.sec" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" [0156.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0156.136] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec", cAlternateFileName="")) returned 0 [0156.136] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0156.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb10d8) returned 1 [0156.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15278) returned 1 [0156.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d489a8) returned 1 Thread: id = 766 os_tid = 0x13d0 [0126.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1e7f8 [0126.837] wcscpy (in: _Dest=0x3e1e7f8, _Source="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer" [0126.837] wcscat (in: _Dest=0x3e1e7f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\" [0126.837] wcscat (in: _Dest=0x3e1e7f8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*" [0126.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0126.837] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0131.005] wcscmp (_String1=".", _String2=".") returned 0 [0131.005] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.005] wcscmp (_String1="..", _String2=".") returned 1 [0131.005] wcscmp (_String1="..", _String2="..") returned 0 [0131.005] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0131.005] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0131.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0131.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e7f8) returned 1 [0131.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b30) returned 1 Thread: id = 767 os_tid = 0x13d4 [0126.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9918 [0126.839] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0126.839] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\" [0126.839] wcscat (in: _Dest=0x3eb9918, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*" [0126.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3c28 [0126.839] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3c28) returned 1 [0126.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 [0126.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9c48) returned 1 Thread: id = 768 os_tid = 0x13d8 [0126.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1f5c8 [0126.841] wcscpy (in: _Dest=0x3e1f5c8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0126.842] wcscat (in: _Dest=0x3e1f5c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0126.842] wcscat (in: _Dest=0x3e1f5c8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*" [0126.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3c28 [0126.842] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0131.777] wcscmp (_String1=".", _String2=".") returned 0 [0131.777] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.777] wcscmp (_String1="..", _String2=".") returned 1 [0131.778] wcscmp (_String1="..", _String2="..") returned 0 [0131.778] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0131.778] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0131.778] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0131.778] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1 [0131.778] wcscmp (_String1="Ringtone 01.wma", _String2=".") returned 1 [0131.778] wcscmp (_String1="Ringtone 01.wma", _String2="..") returned 1 [0131.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46d98 [0131.778] wcscpy (in: _Dest=0x3e46d98, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0131.778] wcscat (in: _Dest=0x3e46d98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0131.778] wcscat (in: _Dest=0x3e46d98, _Source="Ringtone 01.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" [0142.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0142.310] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1 [0142.310] wcscmp (_String1="Ringtone 02.wma", _String2=".") returned 1 [0142.310] wcscmp (_String1="Ringtone 02.wma", _String2="..") returned 1 [0142.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a118 [0142.310] wcscpy (in: _Dest=0x3e1a118, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0142.310] wcscat (in: _Dest=0x3e1a118, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0142.310] wcscat (in: _Dest=0x3e1a118, _Source="Ringtone 02.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" [0142.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0142.312] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1 [0142.312] wcscmp (_String1="Ringtone 03.wma", _String2=".") returned 1 [0142.312] wcscmp (_String1="Ringtone 03.wma", _String2="..") returned 1 [0142.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efb820 [0142.312] wcscpy (in: _Dest=0x3efb820, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0142.312] wcscat (in: _Dest=0x3efb820, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0142.312] wcscat (in: _Dest=0x3efb820, _Source="Ringtone 03.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" [0142.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efb820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0142.313] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1 [0142.313] wcscmp (_String1="Ringtone 04.wma", _String2=".") returned 1 [0142.313] wcscmp (_String1="Ringtone 04.wma", _String2="..") returned 1 [0142.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efba20 [0142.313] wcscpy (in: _Dest=0x3efba20, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0142.313] wcscat (in: _Dest=0x3efba20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0142.313] wcscat (in: _Dest=0x3efba20, _Source="Ringtone 04.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" [0142.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0142.314] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1 [0142.314] wcscmp (_String1="Ringtone 05.wma", _String2=".") returned 1 [0142.315] wcscmp (_String1="Ringtone 05.wma", _String2="..") returned 1 [0142.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efc020 [0142.315] wcscpy (in: _Dest=0x3efc020, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0142.315] wcscat (in: _Dest=0x3efc020, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0142.315] wcscat (in: _Dest=0x3efc020, _Source="Ringtone 05.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" [0142.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efc020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0142.316] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1 [0142.316] wcscmp (_String1="Ringtone 06.wma", _String2=".") returned 1 [0142.316] wcscmp (_String1="Ringtone 06.wma", _String2="..") returned 1 [0142.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efb5a0 [0142.316] wcscpy (in: _Dest=0x3efb5a0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0142.316] wcscat (in: _Dest=0x3efb5a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0142.316] wcscat (in: _Dest=0x3efb5a0, _Source="Ringtone 06.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" [0142.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efb5a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0142.317] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1 [0142.317] wcscmp (_String1="Ringtone 07.wma", _String2=".") returned 1 [0142.317] wcscmp (_String1="Ringtone 07.wma", _String2="..") returned 1 [0142.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efa520 [0142.318] wcscpy (in: _Dest=0x3efa520, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0142.318] wcscat (in: _Dest=0x3efa520, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0142.318] wcscat (in: _Dest=0x3efa520, _Source="Ringtone 07.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" [0142.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efa520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0142.319] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1 [0142.319] wcscmp (_String1="Ringtone 08.wma", _String2=".") returned 1 [0142.319] wcscmp (_String1="Ringtone 08.wma", _String2="..") returned 1 [0142.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efa320 [0142.319] wcscpy (in: _Dest=0x3efa320, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0142.319] wcscat (in: _Dest=0x3efa320, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0142.319] wcscat (in: _Dest=0x3efa320, _Source="Ringtone 08.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" [0142.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efa320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0142.320] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1 [0142.320] wcscmp (_String1="Ringtone 09.wma", _String2=".") returned 1 [0142.320] wcscmp (_String1="Ringtone 09.wma", _String2="..") returned 1 [0142.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efbc20 [0142.320] wcscpy (in: _Dest=0x3efbc20, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0142.320] wcscat (in: _Dest=0x3efbc20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0142.320] wcscat (in: _Dest=0x3efbc20, _Source="Ringtone 09.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" [0142.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efbc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0142.321] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1 [0142.321] wcscmp (_String1="Ringtone 10.wma", _String2=".") returned 1 [0142.321] wcscmp (_String1="Ringtone 10.wma", _String2="..") returned 1 [0142.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efa9a0 [0142.321] wcscpy (in: _Dest=0x3efa9a0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" [0142.321] wcscat (in: _Dest=0x3efa9a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\" [0142.321] wcscat (in: _Dest=0x3efa9a0, _Source="Ringtone 10.wma" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" [0142.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efa9a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0142.322] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 0 [0142.322] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0142.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3c28) returned 1 [0142.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5c8) returned 1 [0142.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3b48) returned 1 Thread: id = 769 os_tid = 0x13dc [0126.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a27220 [0126.842] wcscpy (in: _Dest=0x7a27220, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0126.842] wcscat (in: _Dest=0x7a27220, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0126.843] wcscat (in: _Dest=0x7a27220, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*" [0126.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3708 [0126.843] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0131.009] wcscmp (_String1=".", _String2=".") returned 0 [0131.010] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.010] wcscmp (_String1="..", _String2=".") returned 1 [0131.010] wcscmp (_String1="..", _String2="..") returned 0 [0131.010] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0131.010] wcscmp (_String1="Manifest", _String2=".") returned 1 [0131.010] wcscmp (_String1="Manifest", _String2="..") returned 1 [0131.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0b30 [0131.010] wcscpy (in: _Dest=0x3ee0b30, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0131.010] wcscat (in: _Dest=0x3ee0b30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0131.010] wcscat (in: _Dest=0x3ee0b30, _Source="Manifest" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest" [0136.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1878 [0136.726] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0136.726] wcscmp (_String1="Sessions", _String2=".") returned 1 [0136.726] wcscmp (_String1="Sessions", _String2="..") returned 1 [0136.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0788 [0136.727] wcscpy (in: _Dest=0x3ee0788, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0136.727] wcscat (in: _Dest=0x3ee0788, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0136.727] wcscat (in: _Dest=0x3ee0788, _Source="Sessions" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions" [0136.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0136.728] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0136.728] wcscmp (_String1="Upload", _String2=".") returned 1 [0136.728] wcscmp (_String1="Upload", _String2="..") returned 1 [0136.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7328 [0136.728] wcscpy (in: _Dest=0x2fe7328, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm" [0136.728] wcscat (in: _Dest=0x2fe7328, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\" [0136.728] wcscat (in: _Dest=0x2fe7328, _Source="Upload" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload" [0136.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe7328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0136.729] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0136.730] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0136.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3708) returned 1 [0136.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27220) returned 1 [0136.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d488f8) returned 1 Thread: id = 770 os_tid = 0x13e0 [0126.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1f358 [0126.843] wcscpy (in: _Dest=0x3e1f358, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0126.843] wcscat (in: _Dest=0x3e1f358, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\" [0126.843] wcscat (in: _Dest=0x3e1f358, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*" [0126.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea40a8 [0126.843] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0126.844] wcscmp (_String1=".", _String2=".") returned 0 [0126.844] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.844] wcscmp (_String1="..", _String2=".") returned 1 [0126.844] wcscmp (_String1="..", _String2="..") returned 0 [0126.844] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x112b4ab2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x112b4ab2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1 [0126.844] wcscmp (_String1="Default Programs.lnk", _String2=".") returned 1 [0126.844] wcscmp (_String1="Default Programs.lnk", _String2="..") returned 1 [0126.844] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd42927e2, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd42927e2, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.844] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0126.844] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0126.844] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0126.844] wcscmp (_String1="Programs", _String2=".") returned 1 [0126.844] wcscmp (_String1="Programs", _String2="..") returned 1 [0126.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dba8 [0126.844] wcscpy (in: _Dest=0x3f3dba8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" [0126.845] wcscat (in: _Dest=0x3f3dba8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\" [0126.845] wcscat (in: _Dest=0x3f3dba8, _Source="Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0129.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3dba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0129.286] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0129.286] wcscmp (_String1="Windows Update.lnk", _String2=".") returned 1 [0129.286] wcscmp (_String1="Windows Update.lnk", _String2="..") returned 1 [0129.286] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0129.286] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0129.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea40a8) returned 1 [0129.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 [0129.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 Thread: id = 771 os_tid = 0x13e4 [0126.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e20190 [0126.845] wcscpy (in: _Dest=0x3e20190, _Source="C:\\ProgramData\\Microsoft\\Windows\\Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates" [0126.845] wcscat (in: _Dest=0x3e20190, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\" [0126.845] wcscat (in: _Dest=0x3e20190, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*" [0126.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea34a0 [0126.845] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0129.399] wcscmp (_String1=".", _String2=".") returned 0 [0129.399] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.399] wcscmp (_String1="..", _String2=".") returned 1 [0129.399] wcscmp (_String1="..", _String2="..") returned 0 [0129.399] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0129.399] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0129.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea34a0) returned 1 [0129.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20190) returned 1 [0129.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe14a8) returned 1 Thread: id = 772 os_tid = 0x13e8 [0126.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a271c8 [0126.846] wcscpy (in: _Dest=0x7a271c8, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0126.846] wcscat (in: _Dest=0x7a271c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\" [0126.846] wcscat (in: _Dest=0x7a271c8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\*" [0126.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2fd0 [0126.846] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0131.003] wcscmp (_String1=".", _String2=".") returned 0 [0131.004] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.004] wcscmp (_String1="..", _String2=".") returned 1 [0131.004] wcscmp (_String1="..", _String2="..") returned 0 [0131.004] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0131.004] wcscmp (_String1="ReportArchive", _String2=".") returned 1 [0131.004] wcscmp (_String1="ReportArchive", _String2="..") returned 1 [0131.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26d28 [0131.004] wcscpy (in: _Dest=0x7a26d28, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0131.004] wcscat (in: _Dest=0x7a26d28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\" [0131.004] wcscat (in: _Dest=0x7a26d28, _Source="ReportArchive" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive" [0140.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dba8 [0140.854] wcscpy (in: _Dest=0x3f3dba8, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive" [0140.854] wcscat (in: _Dest=0x3f3dba8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\" [0140.854] wcscat (in: _Dest=0x3f3dba8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*" [0140.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb40f8 [0140.855] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0140.855] wcscmp (_String1=".", _String2=".") returned 0 [0140.855] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.855] wcscmp (_String1="..", _String2=".") returned 1 [0140.855] wcscmp (_String1="..", _String2="..") returned 0 [0140.855] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.855] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0140.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb40f8) returned 1 [0140.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dba8) returned 1 [0140.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26d28) returned 1 [0140.856] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0140.856] wcscmp (_String1="ReportQueue", _String2=".") returned 1 [0140.856] wcscmp (_String1="ReportQueue", _String2="..") returned 1 [0140.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26d28 [0140.856] wcscpy (in: _Dest=0x7a26d28, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER" [0140.856] wcscat (in: _Dest=0x7a26d28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\" [0140.856] wcscat (in: _Dest=0x7a26d28, _Source="ReportQueue" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue" [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26a88 [0140.857] wcscpy (in: _Dest=0x7a26a88, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue" [0140.857] wcscat (in: _Dest=0x7a26a88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\" [0140.857] wcscat (in: _Dest=0x7a26a88, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*" [0140.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb40f8 [0140.857] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0140.857] wcscmp (_String1=".", _String2=".") returned 0 [0140.857] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.857] wcscmp (_String1="..", _String2=".") returned 1 [0140.857] wcscmp (_String1="..", _String2="..") returned 0 [0140.857] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.857] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0140.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb40f8) returned 1 [0140.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a88) returned 1 [0140.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26d28) returned 1 [0140.858] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 0 [0140.858] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0140.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fd0) returned 1 [0140.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a271c8) returned 1 [0140.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dba378) returned 1 Thread: id = 773 os_tid = 0x13ec [0126.847] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url")) returned 0x20 [0131.013] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url", dwFileAttributes=0x20) returned 0 [0131.013] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.013] GetLastError () returned 0x5 [0131.013] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url", dwFileAttributes=0x20) returned 0 [0131.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 774 os_tid = 0x13f0 [0126.850] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url")) returned 0x20 [0131.015] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url", dwFileAttributes=0x20) returned 0 [0131.015] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.015] GetLastError () returned 0x5 [0131.015] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url", dwFileAttributes=0x20) returned 0 [0131.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 775 os_tid = 0x13f4 [0126.851] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url")) returned 0x20 [0129.402] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url", dwFileAttributes=0x20) returned 0 [0129.402] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.402] GetLastError () returned 0x5 [0129.402] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url", dwFileAttributes=0x20) returned 0 [0129.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 776 os_tid = 0x13f8 [0126.851] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url")) returned 0x20 [0131.011] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url", dwFileAttributes=0x20) returned 0 [0131.011] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.011] GetLastError () returned 0x5 [0131.011] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url", dwFileAttributes=0x20) returned 0 [0131.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 777 os_tid = 0x13fc [0126.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf")) returned 0x20 [0126.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF", dwFileAttributes=0x20) returned 0 [0126.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.853] GetLastError () returned 0x5 [0126.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF", dwFileAttributes=0x20) returned 0 [0126.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 778 os_tid = 0x1400 [0126.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf")) returned 0x20 [0126.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF", dwFileAttributes=0x20) returned 0 [0126.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.856] GetLastError () returned 0x5 [0126.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF", dwFileAttributes=0x20) returned 0 [0126.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 779 os_tid = 0x1404 [0126.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf")) returned 0x20 [0126.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF", dwFileAttributes=0x20) returned 0 [0126.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.858] GetLastError () returned 0x5 [0126.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF", dwFileAttributes=0x20) returned 0 [0126.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 780 os_tid = 0x1408 [0126.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf")) returned 0x20 [0126.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF", dwFileAttributes=0x20) returned 0 [0126.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.861] GetLastError () returned 0x5 [0126.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF", dwFileAttributes=0x20) returned 0 [0126.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 781 os_tid = 0x140c [0126.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf")) returned 0x20 [0126.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF", dwFileAttributes=0x20) returned 0 [0126.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.863] GetLastError () returned 0x5 [0126.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF", dwFileAttributes=0x20) returned 0 [0126.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 782 os_tid = 0x1410 [0126.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf")) returned 0x20 [0126.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF", dwFileAttributes=0x20) returned 0 [0126.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.866] GetLastError () returned 0x5 [0126.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF", dwFileAttributes=0x20) returned 0 [0126.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 783 os_tid = 0x1414 [0126.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf")) returned 0x20 [0126.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF", dwFileAttributes=0x20) returned 0 [0126.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.872] GetLastError () returned 0x5 [0126.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF", dwFileAttributes=0x20) returned 0 [0126.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 784 os_tid = 0x1418 [0126.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf")) returned 0x20 [0126.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF", dwFileAttributes=0x20) returned 0 [0126.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.874] GetLastError () returned 0x5 [0126.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF", dwFileAttributes=0x20) returned 0 [0126.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 785 os_tid = 0x141c [0126.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf")) returned 0x20 [0126.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF", dwFileAttributes=0x20) returned 0 [0126.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.876] GetLastError () returned 0x5 [0126.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF", dwFileAttributes=0x20) returned 0 [0126.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 786 os_tid = 0x1420 [0126.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf")) returned 0x20 [0126.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF", dwFileAttributes=0x20) returned 0 [0126.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.878] GetLastError () returned 0x5 [0126.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF", dwFileAttributes=0x20) returned 0 [0126.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 787 os_tid = 0x1424 [0126.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf")) returned 0x20 [0126.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF", dwFileAttributes=0x20) returned 0 [0126.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.880] GetLastError () returned 0x5 [0126.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF", dwFileAttributes=0x20) returned 0 [0126.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 788 os_tid = 0x1428 [0126.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf")) returned 0x20 [0126.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF", dwFileAttributes=0x20) returned 0 [0126.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.883] GetLastError () returned 0x5 [0126.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF", dwFileAttributes=0x20) returned 0 [0126.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 789 os_tid = 0x142c [0126.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf")) returned 0x20 [0126.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF", dwFileAttributes=0x20) returned 0 [0126.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0126.885] GetLastError () returned 0x5 [0126.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF", dwFileAttributes=0x20) returned 0 [0126.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 790 os_tid = 0x1430 [0126.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf")) returned 0x20 [0131.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF", dwFileAttributes=0x20) returned 0 [0131.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.789] GetLastError () returned 0x5 [0131.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF", dwFileAttributes=0x20) returned 0 [0131.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 791 os_tid = 0x1434 [0126.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf")) returned 0x20 [0131.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF", dwFileAttributes=0x20) returned 0 [0131.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.791] GetLastError () returned 0x5 [0131.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF", dwFileAttributes=0x20) returned 0 [0131.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 792 os_tid = 0x1438 [0126.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf")) returned 0x20 [0131.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF", dwFileAttributes=0x20) returned 0 [0131.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.793] GetLastError () returned 0x5 [0131.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF", dwFileAttributes=0x20) returned 0 [0131.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9808) returned 1 Thread: id = 793 os_tid = 0x143c [0126.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf")) returned 0x20 [0131.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF", dwFileAttributes=0x20) returned 0 [0131.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.025] GetLastError () returned 0x5 [0131.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF", dwFileAttributes=0x20) returned 0 [0131.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 794 os_tid = 0x1440 [0129.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf")) returned 0x20 [0131.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF", dwFileAttributes=0x20) returned 0 [0131.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.785] GetLastError () returned 0x5 [0131.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF", dwFileAttributes=0x20) returned 0 [0131.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 795 os_tid = 0x1448 [0129.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4460 [0129.045] wcscpy (in: _Dest=0x3df4460, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0129.045] wcscat (in: _Dest=0x3df4460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\" [0129.045] wcscat (in: _Dest=0x3df4460, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*" [0129.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53fd8 [0129.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0129.045] wcscmp (_String1=".", _String2=".") returned 0 [0129.045] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42dc8ed0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42def030, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.045] wcscmp (_String1="..", _String2=".") returned 1 [0129.045] wcscmp (_String1="..", _String2="..") returned 0 [0129.045] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88301400, ftCreationTime.dwHighDateTime=0x1c9b0f8, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88301400, ftLastWriteTime.dwHighDateTime=0x1c9b0f8, nFileSizeHigh=0x0, nFileSizeLow=0xa2d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0129.046] wcscmp (_String1="msmdsrv.rll", _String2=".") returned 1 [0129.046] wcscmp (_String1="msmdsrv.rll", _String2="..") returned 1 [0129.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bea8 [0129.046] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0129.046] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\" [0129.046] wcscat (in: _Dest=0x35bea8, _Source="msmdsrv.rll" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" [0140.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0x20 [0140.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x20) returned 0 [0140.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.686] GetLastError () returned 0x5 [0140.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll", dwFileAttributes=0x20) returned 0 [0140.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 [0140.687] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4c5b00, ftCreationTime.dwHighDateTime=0x1c8e24f, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a4c5b00, ftLastWriteTime.dwHighDateTime=0x1c8e24f, nFileSizeHigh=0x0, nFileSizeLow=0x3c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0140.687] wcscmp (_String1="msolui100.rll", _String2=".") returned 1 [0140.687] wcscmp (_String1="msolui100.rll", _String2="..") returned 1 [0140.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff62f0 [0140.687] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033" [0140.687] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\" [0140.687] wcscat (in: _Dest=0x2ff62f0, _Source="msolui100.rll" | out: _Dest="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll") returned="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" [0140.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0x20 [0140.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll", dwFileAttributes=0x20) returned 0 [0140.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.687] GetLastError () returned 0x5 [0140.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll", dwFileAttributes=0x20) returned 0 [0140.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 [0140.688] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4c5b00, ftCreationTime.dwHighDateTime=0x1c8e24f, ftLastAccessTime.dwLowDateTime=0x42def030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a4c5b00, ftLastWriteTime.dwHighDateTime=0x1c8e24f, nFileSizeHigh=0x0, nFileSizeLow=0x3c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0140.688] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0140.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53fd8) returned 1 [0140.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4460) returned 1 [0140.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5f80) returned 1 Thread: id = 796 os_tid = 0x144c [0129.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e6e8 [0129.046] wcscpy (in: _Dest=0x3f3e6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0129.046] wcscat (in: _Dest=0x3f3e6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0129.046] wcscat (in: _Dest=0x3f3e6e8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*" [0129.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54710 [0129.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb80ec00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc86c340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc86c340, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7870 [0135.685] wcscmp (_String1=".", _String2=".") returned 0 [0135.685] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb80ec00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc86c340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc86c340, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.685] wcscmp (_String1="..", _String2=".") returned 1 [0135.685] wcscmp (_String1="..", _String2="..") returned 0 [0135.685] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeFanHeitiStd-Bold.otf", cAlternateFileName="ADOBEF~1.OTF")) returned 1 [0135.685] wcscmp (_String1="AdobeFanHeitiStd-Bold.otf", _String2=".") returned 1 [0135.685] wcscmp (_String1="AdobeFanHeitiStd-Bold.otf", _String2="..") returned 1 [0135.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e79d10 [0135.685] wcscpy (in: _Dest=0x3e79d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0135.685] wcscat (in: _Dest=0x3e79d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0135.685] wcscat (in: _Dest=0x3e79d10, _Source="AdobeFanHeitiStd-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" [0136.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e79d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0136.652] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb2e8e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c0638, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeGothicStd-Bold.otf", cAlternateFileName="ADOBEG~1.OTF")) returned 1 [0136.652] wcscmp (_String1="AdobeGothicStd-Bold.otf", _String2=".") returned 1 [0136.652] wcscmp (_String1="AdobeGothicStd-Bold.otf", _String2="..") returned 1 [0136.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4e60 [0136.653] wcscpy (in: _Dest=0x3df4e60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0136.653] wcscat (in: _Dest=0x3df4e60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0136.653] wcscat (in: _Dest=0x3df4e60, _Source="AdobeGothicStd-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" [0136.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0136.654] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbd43c20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbb27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHeitiStd-Regular.otf", cAlternateFileName="ADOBEH~1.OTF")) returned 1 [0136.654] wcscmp (_String1="AdobeHeitiStd-Regular.otf", _String2=".") returned 1 [0136.654] wcscmp (_String1="AdobeHeitiStd-Regular.otf", _String2="..") returned 1 [0136.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e7b750 [0136.654] wcscpy (in: _Dest=0x3e7b750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0136.654] wcscat (in: _Dest=0x3e7b750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0136.654] wcscat (in: _Dest=0x3e7b750, _Source="AdobeHeitiStd-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" [0136.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7b750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0136.656] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc8461e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9b3508, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMingStd-Light.otf", cAlternateFileName="ADOBEM~2.OTF")) returned 1 [0136.656] wcscmp (_String1="AdobeMingStd-Light.otf", _String2=".") returned 1 [0136.656] wcscmp (_String1="AdobeMingStd-Light.otf", _String2="..") returned 1 [0136.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6260 [0136.656] wcscpy (in: _Dest=0x3df6260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0136.656] wcscat (in: _Dest=0x3df6260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0136.656] wcscat (in: _Dest=0x3df6260, _Source="AdobeMingStd-Light.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" [0136.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0136.680] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbae2620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e93f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeMyungjoStd-Medium.otf", cAlternateFileName="ADOBEM~1.OTF")) returned 1 [0136.680] wcscmp (_String1="AdobeMyungjoStd-Medium.otf", _String2=".") returned 1 [0136.680] wcscmp (_String1="AdobeMyungjoStd-Medium.otf", _String2="..") returned 1 [0136.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e7a2f8 [0136.680] wcscpy (in: _Dest=0x3e7a2f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0136.680] wcscat (in: _Dest=0x3e7a2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0136.680] wcscat (in: _Dest=0x3e7a2f8, _Source="AdobeMyungjoStd-Medium.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" [0136.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7a2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0136.682] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbec09e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xedd564, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSongStd-Light.otf", cAlternateFileName="ADOBES~1.OTF")) returned 1 [0136.682] wcscmp (_String1="AdobeSongStd-Light.otf", _String2=".") returned 1 [0136.682] wcscmp (_String1="AdobeSongStd-Light.otf", _String2="..") returned 1 [0136.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6300 [0136.682] wcscpy (in: _Dest=0x3df6300, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0136.682] wcscat (in: _Dest=0x3df6300, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0136.682] wcscat (in: _Dest=0x3df6300, _Source="AdobeSongStd-Light.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" [0136.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0136.697] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb8a7180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozGoPr6N-Medium.otf", cAlternateFileName="KOZGOP~1.OTF")) returned 1 [0136.697] wcscmp (_String1="KozGoPr6N-Medium.otf", _String2=".") returned 1 [0136.697] wcscmp (_String1="KozGoPr6N-Medium.otf", _String2="..") returned 1 [0136.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c6e78 [0136.697] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0136.697] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0136.697] wcscat (in: _Dest=0x2c6e78, _Source="KozGoPr6N-Medium.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" [0136.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0136.699] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 1 [0136.699] wcscmp (_String1="KozMinPr6N-Regular.otf", _String2=".") returned 1 [0136.699] wcscmp (_String1="KozMinPr6N-Regular.otf", _String2="..") returned 1 [0136.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7698 [0136.699] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont" [0136.699] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\" [0136.699] wcscat (in: _Dest=0x2c7698, _Source="KozMinPr6N-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" [0136.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0136.700] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c205c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KozMinPr6N-Regular.otf", cAlternateFileName="KOZMIN~1.OTF")) returned 0 [0136.701] FindClose (in: hFindFile=0x7ad7870 | out: hFindFile=0x7ad7870) returned 1 [0136.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54710) returned 1 [0136.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0136.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a267e8) returned 1 Thread: id = 797 os_tid = 0x1450 [0129.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a237d0 [0129.049] wcscpy (in: _Dest=0x7a237d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0129.049] wcscat (in: _Dest=0x7a237d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0129.049] wcscat (in: _Dest=0x7a237d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\*" [0129.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a527c8 [0129.049] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc7619a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad79f0 [0136.149] wcscmp (_String1=".", _String2=".") returned 0 [0136.149] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc7619a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.621] wcscmp (_String1="..", _String2=".") returned 1 [0141.621] wcscmp (_String1="..", _String2="..") returned 0 [0141.621] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="83pv-RKSJ-H", cAlternateFileName="83PV-R~1")) returned 1 [0141.621] wcscmp (_String1="83pv-RKSJ-H", _String2=".") returned 1 [0141.621] wcscmp (_String1="83pv-RKSJ-H", _String2="..") returned 1 [0141.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d060 [0141.621] wcscpy (in: _Dest=0x3f3d060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0141.622] wcscat (in: _Dest=0x3f3d060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0141.622] wcscat (in: _Dest=0x3f3d060, _Source="83pv-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" [0157.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0157.368] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-H", cAlternateFileName="90MS-R~1")) returned 1 [0157.368] wcscmp (_String1="90ms-RKSJ-H", _String2=".") returned 1 [0157.368] wcscmp (_String1="90ms-RKSJ-H", _String2="..") returned 1 [0157.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8ce0 [0157.368] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.368] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.368] wcscat (in: _Dest=0x3eb8ce0, _Source="90ms-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" [0157.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0157.369] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-UCS2", cAlternateFileName="90MS-R~2")) returned 1 [0157.369] wcscmp (_String1="90ms-RKSJ-UCS2", _String2=".") returned 1 [0157.369] wcscmp (_String1="90ms-RKSJ-UCS2", _String2="..") returned 1 [0157.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0157.369] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.369] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.369] wcscat (in: _Dest=0x3eb8e78, _Source="90ms-RKSJ-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" [0157.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0157.371] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1166, dwReserved0=0x0, dwReserved1=0x0, cFileName="90ms-RKSJ-V", cAlternateFileName="90MS-R~3")) returned 1 [0157.371] wcscmp (_String1="90ms-RKSJ-V", _String2=".") returned 1 [0157.371] wcscmp (_String1="90ms-RKSJ-V", _String2="..") returned 1 [0157.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb93c8 [0157.371] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.371] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.371] wcscat (in: _Dest=0x3eb93c8, _Source="90ms-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" [0157.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0157.372] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-H", cAlternateFileName="90MSP-~1")) returned 1 [0157.372] wcscmp (_String1="90msp-RKSJ-H", _String2=".") returned 1 [0157.372] wcscmp (_String1="90msp-RKSJ-H", _String2="..") returned 1 [0157.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9230 [0157.372] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.372] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.372] wcscat (in: _Dest=0x3eb9230, _Source="90msp-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" [0157.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0157.373] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1154, dwReserved0=0x0, dwReserved1=0x0, cFileName="90msp-RKSJ-V", cAlternateFileName="90MSP-~2")) returned 1 [0157.373] wcscmp (_String1="90msp-RKSJ-V", _String2=".") returned 1 [0157.373] wcscmp (_String1="90msp-RKSJ-V", _String2="..") returned 1 [0157.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba330 [0157.373] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.373] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.373] wcscat (in: _Dest=0x3eba330, _Source="90msp-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" [0157.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0157.374] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x202f, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-H", cAlternateFileName="90PV-R~1")) returned 1 [0157.374] wcscmp (_String1="90pv-RKSJ-H", _String2=".") returned 1 [0157.374] wcscmp (_String1="90pv-RKSJ-H", _String2="..") returned 1 [0157.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9f78 [0157.375] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.375] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.375] wcscat (in: _Dest=0x3eb9f78, _Source="90pv-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" [0157.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0157.375] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2", cAlternateFileName="90PV-R~2")) returned 1 [0157.375] wcscmp (_String1="90pv-RKSJ-UCS2", _String2=".") returned 1 [0157.376] wcscmp (_String1="90pv-RKSJ-UCS2", _String2="..") returned 1 [0157.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0157.376] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.376] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.376] wcscat (in: _Dest=0x3eba220, _Source="90pv-RKSJ-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" [0157.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0157.377] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x190bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="90pv-RKSJ-UCS2C", cAlternateFileName="90PV-R~3")) returned 1 [0157.377] wcscmp (_String1="90pv-RKSJ-UCS2C", _String2=".") returned 1 [0157.377] wcscmp (_String1="90pv-RKSJ-UCS2C", _String2="..") returned 1 [0157.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45770 [0157.377] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.377] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.377] wcscat (in: _Dest=0x3d45770, _Source="90pv-RKSJ-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" [0157.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0157.378] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3de5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-H", cAlternateFileName="ADD-RK~1")) returned 1 [0157.378] wcscmp (_String1="Add-RKSJ-H", _String2=".") returned 1 [0157.378] wcscmp (_String1="Add-RKSJ-H", _String2="..") returned 1 [0157.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46e98 [0157.378] wcscpy (in: _Dest=0x3e46e98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.378] wcscat (in: _Dest=0x3e46e98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.378] wcscat (in: _Dest=0x3e46e98, _Source="Add-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" [0157.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0157.379] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-RKSJ-V", cAlternateFileName="ADD-RK~2")) returned 1 [0157.379] wcscmp (_String1="Add-RKSJ-V", _String2=".") returned 1 [0157.379] wcscmp (_String1="Add-RKSJ-V", _String2="..") returned 1 [0157.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47718 [0157.379] wcscpy (in: _Dest=0x3e47718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.379] wcscat (in: _Dest=0x3e47718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.379] wcscat (in: _Dest=0x3e47718, _Source="Add-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" [0157.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0157.380] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-0", cAlternateFileName="ADFD7E~1")) returned 1 [0157.380] wcscmp (_String1="Adobe-CNS1-0", _String2=".") returned 1 [0157.380] wcscmp (_String1="Adobe-CNS1-0", _String2="..") returned 1 [0157.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba2a8 [0157.380] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.380] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.380] wcscat (in: _Dest=0x3eba2a8, _Source="Adobe-CNS1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" [0157.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0157.382] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x107a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-1", cAlternateFileName="AD1410~1")) returned 1 [0157.382] wcscmp (_String1="Adobe-CNS1-1", _String2=".") returned 1 [0157.382] wcscmp (_String1="Adobe-CNS1-1", _String2="..") returned 1 [0157.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9670 [0157.382] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.382] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.382] wcscat (in: _Dest=0x3eb9670, _Source="Adobe-CNS1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" [0157.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0157.383] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x108f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-2", cAlternateFileName="ADC905~1")) returned 1 [0157.383] wcscmp (_String1="Adobe-CNS1-2", _String2=".") returned 1 [0157.383] wcscmp (_String1="Adobe-CNS1-2", _String2="..") returned 1 [0157.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9890 [0157.383] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.383] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.383] wcscat (in: _Dest=0x3eb9890, _Source="Adobe-CNS1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" [0157.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0157.384] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-3", cAlternateFileName="AD7FF9~1")) returned 1 [0157.384] wcscmp (_String1="Adobe-CNS1-3", _String2=".") returned 1 [0157.384] wcscmp (_String1="Adobe-CNS1-3", _String2="..") returned 1 [0157.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9ef0 [0157.384] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.384] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.384] wcscat (in: _Dest=0x3eb9ef0, _Source="Adobe-CNS1-3" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" [0157.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0157.385] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-4", cAlternateFileName="ADEA01~1")) returned 1 [0157.385] wcscmp (_String1="Adobe-CNS1-4", _String2=".") returned 1 [0157.385] wcscmp (_String1="Adobe-CNS1-4", _String2="..") returned 1 [0157.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9b38 [0157.385] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.385] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.385] wcscat (in: _Dest=0x3eb9b38, _Source="Adobe-CNS1-4" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" [0157.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0157.386] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb80ec00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x110d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-5", cAlternateFileName="AD351C~1")) returned 1 [0157.386] wcscmp (_String1="Adobe-CNS1-5", _String2=".") returned 1 [0157.386] wcscmp (_String1="Adobe-CNS1-5", _String2="..") returned 1 [0157.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3be50 [0157.386] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.386] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.387] wcscat (in: _Dest=0x3f3be50, _Source="Adobe-CNS1-5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" [0157.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0157.387] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-B5pc", cAlternateFileName="ADOBE-~1")) returned 1 [0157.388] wcscmp (_String1="Adobe-CNS1-B5pc", _String2=".") returned 1 [0157.388] wcscmp (_String1="Adobe-CNS1-B5pc", _String2="..") returned 1 [0157.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d451d0 [0157.388] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.388] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.388] wcscat (in: _Dest=0x3d451d0, _Source="Adobe-CNS1-B5pc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" [0157.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d451d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0157.389] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-ETen-B5", cAlternateFileName="ADOBE-~2")) returned 1 [0157.389] wcscmp (_String1="Adobe-CNS1-ETen-B5", _String2=".") returned 1 [0157.389] wcscmp (_String1="Adobe-CNS1-ETen-B5", _String2="..") returned 1 [0157.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d442a0 [0157.389] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.389] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.389] wcscat (in: _Dest=0x3d442a0, _Source="Adobe-CNS1-ETen-B5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" [0157.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0157.390] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-CID", cAlternateFileName="ADOBE-~3")) returned 1 [0157.390] wcscmp (_String1="Adobe-CNS1-H-CID", _String2=".") returned 1 [0157.390] wcscmp (_String1="Adobe-CNS1-H-CID", _String2="..") returned 1 [0157.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44a80 [0157.390] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.390] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.390] wcscat (in: _Dest=0x3d44a80, _Source="Adobe-CNS1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" [0157.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0157.391] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x212a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Host", cAlternateFileName="ADOBE-~4")) returned 1 [0157.391] wcscmp (_String1="Adobe-CNS1-H-Host", _String2=".") returned 1 [0157.391] wcscmp (_String1="Adobe-CNS1-H-Host", _String2="..") returned 1 [0157.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d452f0 [0157.391] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.391] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.391] wcscat (in: _Dest=0x3d452f0, _Source="Adobe-CNS1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" [0157.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0157.392] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-H-Mac", cAlternateFileName="AD9A15~1")) returned 1 [0157.392] wcscmp (_String1="Adobe-CNS1-H-Mac", _String2=".") returned 1 [0157.392] wcscmp (_String1="Adobe-CNS1-H-Mac", _String2="..") returned 1 [0157.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61830 [0157.392] wcscpy (in: _Dest=0x7a61830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.393] wcscat (in: _Dest=0x7a61830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.393] wcscat (in: _Dest=0x7a61830, _Source="Adobe-CNS1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" [0157.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0157.394] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44cc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-CNS1-UCS2", cAlternateFileName="ADD444~1")) returned 1 [0157.394] wcscmp (_String1="Adobe-CNS1-UCS2", _String2=".") returned 1 [0157.394] wcscmp (_String1="Adobe-CNS1-UCS2", _String2="..") returned 1 [0157.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a617a0 [0157.394] wcscpy (in: _Dest=0x7a617a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.394] wcscat (in: _Dest=0x7a617a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.394] wcscat (in: _Dest=0x7a617a0, _Source="Adobe-CNS1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" [0157.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a617a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0157.395] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-0", cAlternateFileName="ADD8F8~1")) returned 1 [0157.395] wcscmp (_String1="Adobe-GB1-0", _String2=".") returned 1 [0157.395] wcscmp (_String1="Adobe-GB1-0", _String2="..") returned 1 [0157.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0157.395] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.395] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.395] wcscat (in: _Dest=0x3f3d748, _Source="Adobe-GB1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" [0157.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0157.396] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-1", cAlternateFileName="AD9B16~1")) returned 1 [0157.396] wcscmp (_String1="Adobe-GB1-1", _String2=".") returned 1 [0157.396] wcscmp (_String1="Adobe-GB1-1", _String2="..") returned 1 [0157.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3bdc8 [0157.396] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.396] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.396] wcscat (in: _Dest=0x3f3bdc8, _Source="Adobe-GB1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" [0157.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0157.397] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-2", cAlternateFileName="AD411B~1")) returned 1 [0157.397] wcscmp (_String1="Adobe-GB1-2", _String2=".") returned 1 [0157.397] wcscmp (_String1="Adobe-GB1-2", _String2="..") returned 1 [0157.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3bd40 [0157.397] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.397] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.398] wcscat (in: _Dest=0x3f3bd40, _Source="Adobe-GB1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" [0157.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1964 [0157.399] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-3", cAlternateFileName="ADF600~1")) returned 1 [0157.399] wcscmp (_String1="Adobe-GB1-3", _String2=".") returned 1 [0157.399] wcscmp (_String1="Adobe-GB1-3", _String2="..") returned 1 [0157.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3cf50 [0157.399] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.399] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.399] wcscat (in: _Dest=0x3f3cf50, _Source="Adobe-GB1-3" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" [0157.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0157.400] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-4", cAlternateFileName="AD1D91~1")) returned 1 [0157.400] wcscmp (_String1="Adobe-GB1-4", _String2=".") returned 1 [0157.400] wcscmp (_String1="Adobe-GB1-4", _String2="..") returned 1 [0157.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3db00 [0157.400] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.400] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.400] wcscat (in: _Dest=0x3f3db00, _Source="Adobe-GB1-4" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" [0157.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0157.401] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7619a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-5", cAlternateFileName="ADC296~1")) returned 1 [0157.401] wcscmp (_String1="Adobe-GB1-5", _String2=".") returned 1 [0157.401] wcscmp (_String1="Adobe-GB1-5", _String2="..") returned 1 [0157.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d4a0 [0157.401] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.401] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.401] wcscat (in: _Dest=0x3f3d4a0, _Source="Adobe-GB1-5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" [0157.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0157.402] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBK-EUC", cAlternateFileName="ADFBCB~1")) returned 1 [0157.402] wcscmp (_String1="Adobe-GB1-GBK-EUC", _String2=".") returned 1 [0157.402] wcscmp (_String1="Adobe-GB1-GBK-EUC", _String2="..") returned 1 [0157.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61710 [0157.402] wcscpy (in: _Dest=0x7a61710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.402] wcscat (in: _Dest=0x7a61710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.402] wcscat (in: _Dest=0x7a61710, _Source="Adobe-GB1-GBK-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" [0157.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0157.403] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-GBpc-EUC", cAlternateFileName="AD2E3A~1")) returned 1 [0157.403] wcscmp (_String1="Adobe-GB1-GBpc-EUC", _String2=".") returned 1 [0157.403] wcscmp (_String1="Adobe-GB1-GBpc-EUC", _String2="..") returned 1 [0157.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61680 [0157.403] wcscpy (in: _Dest=0x7a61680, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.403] wcscat (in: _Dest=0x7a61680, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.404] wcscat (in: _Dest=0x7a61680, _Source="Adobe-GB1-GBpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" [0157.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0157.674] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-CID", cAlternateFileName="AD43DF~1")) returned 1 [0157.674] wcscmp (_String1="Adobe-GB1-H-CID", _String2=".") returned 1 [0157.674] wcscmp (_String1="Adobe-GB1-H-CID", _String2="..") returned 1 [0157.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61b00 [0157.674] wcscpy (in: _Dest=0x7a61b00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0157.674] wcscat (in: _Dest=0x7a61b00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0157.674] wcscat (in: _Dest=0x7a61b00, _Source="Adobe-GB1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" [0161.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0161.402] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x170e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Host", cAlternateFileName="AD3180~1")) returned 1 [0161.403] wcscmp (_String1="Adobe-GB1-H-Host", _String2=".") returned 1 [0161.403] wcscmp (_String1="Adobe-GB1-H-Host", _String2="..") returned 1 [0161.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44a80 [0161.404] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0161.404] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0161.404] wcscat (in: _Dest=0x3d44a80, _Source="Adobe-GB1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" [0167.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0167.427] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-H-Mac", cAlternateFileName="ADAB0B~1")) returned 1 [0167.427] wcscmp (_String1="Adobe-GB1-H-Mac", _String2=".") returned 1 [0167.427] wcscmp (_String1="Adobe-GB1-H-Mac", _String2="..") returned 1 [0167.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45890 [0167.427] wcscpy (in: _Dest=0x3d45890, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.427] wcscat (in: _Dest=0x3d45890, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.427] wcscat (in: _Dest=0x3d45890, _Source="Adobe-GB1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" [0167.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0167.428] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bb8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-GB1-UCS2", cAlternateFileName="AD0115~1")) returned 1 [0167.428] wcscmp (_String1="Adobe-GB1-UCS2", _String2=".") returned 1 [0167.428] wcscmp (_String1="Adobe-GB1-UCS2", _String2="..") returned 1 [0167.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0167.428] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.428] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.428] wcscat (in: _Dest=0x3f3c208, _Source="Adobe-GB1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" [0167.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0167.429] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-0", cAlternateFileName="AD276E~1")) returned 1 [0167.429] wcscmp (_String1="Adobe-Japan1-0", _String2=".") returned 1 [0167.429] wcscmp (_String1="Adobe-Japan1-0", _String2="..") returned 1 [0167.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0167.429] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.429] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.429] wcscat (in: _Dest=0x3f3bdc8, _Source="Adobe-Japan1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" [0167.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0167.430] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-1", cAlternateFileName="AD4DFF~1")) returned 1 [0167.430] wcscmp (_String1="Adobe-Japan1-1", _String2=".") returned 1 [0167.430] wcscmp (_String1="Adobe-Japan1-1", _String2="..") returned 1 [0167.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d390 [0167.431] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.431] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.431] wcscat (in: _Dest=0x3f3d390, _Source="Adobe-Japan1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" [0167.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0167.432] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-2", cAlternateFileName="ADF2F4~1")) returned 1 [0167.432] wcscmp (_String1="Adobe-Japan1-2", _String2=".") returned 1 [0167.432] wcscmp (_String1="Adobe-Japan1-2", _String2="..") returned 1 [0167.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c5c0 [0167.432] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.432] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.432] wcscat (in: _Dest=0x3f3c5c0, _Source="Adobe-Japan1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" [0167.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0167.433] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-3", cAlternateFileName="ADA8E9~1")) returned 1 [0167.433] wcscmp (_String1="Adobe-Japan1-3", _String2=".") returned 1 [0167.433] wcscmp (_String1="Adobe-Japan1-3", _String2="..") returned 1 [0167.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0167.433] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.433] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.433] wcscat (in: _Dest=0x3f3d748, _Source="Adobe-Japan1-3" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" [0167.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0167.434] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-4", cAlternateFileName="ADCE7B~1")) returned 1 [0167.434] wcscmp (_String1="Adobe-Japan1-4", _String2=".") returned 1 [0167.434] wcscmp (_String1="Adobe-Japan1-4", _String2="..") returned 1 [0167.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d6c0 [0167.434] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.434] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.434] wcscat (in: _Dest=0x3f3d6c0, _Source="Adobe-Japan1-4" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" [0167.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0167.436] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-5", cAlternateFileName="AD7470~1")) returned 1 [0167.436] wcscmp (_String1="Adobe-Japan1-5", _String2=".") returned 1 [0167.436] wcscmp (_String1="Adobe-Japan1-5", _String2="..") returned 1 [0167.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0167.436] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.436] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.436] wcscat (in: _Dest=0x3f3c538, _Source="Adobe-Japan1-5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" [0167.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0167.437] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1263, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-6", cAlternateFileName="AD2A65~1")) returned 1 [0167.437] wcscmp (_String1="Adobe-Japan1-6", _String2=".") returned 1 [0167.437] wcscmp (_String1="Adobe-Japan1-6", _String2="..") returned 1 [0167.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c978 [0167.437] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.437] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.437] wcscat (in: _Dest=0x3f3c978, _Source="Adobe-Japan1-6" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" [0167.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0167.438] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90ms-RKSJ", cAlternateFileName="AD02A2~1")) returned 1 [0167.438] wcscmp (_String1="Adobe-Japan1-90ms-RKSJ", _String2=".") returned 1 [0167.438] wcscmp (_String1="Adobe-Japan1-90ms-RKSJ", _String2="..") returned 1 [0167.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb61e0 [0167.438] wcscpy (in: _Dest=0x3eb61e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.438] wcscat (in: _Dest=0x3eb61e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.438] wcscat (in: _Dest=0x3eb61e0, _Source="Adobe-Japan1-90ms-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" [0167.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb61e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0167.439] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-90pv-RKSJ", cAlternateFileName="ADE5F6~1")) returned 1 [0167.439] wcscmp (_String1="Adobe-Japan1-90pv-RKSJ", _String2=".") returned 1 [0167.439] wcscmp (_String1="Adobe-Japan1-90pv-RKSJ", _String2="..") returned 1 [0167.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5990 [0167.440] wcscpy (in: _Dest=0x3eb5990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.440] wcscat (in: _Dest=0x3eb5990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.440] wcscat (in: _Dest=0x3eb5990, _Source="Adobe-Japan1-90pv-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" [0167.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0167.443] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-CID", cAlternateFileName="AD8921~1")) returned 1 [0167.443] wcscmp (_String1="Adobe-Japan1-H-CID", _String2=".") returned 1 [0167.443] wcscmp (_String1="Adobe-Japan1-H-CID", _String2="..") returned 1 [0167.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a607e0 [0167.444] wcscpy (in: _Dest=0x7a607e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.444] wcscat (in: _Dest=0x7a607e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.444] wcscat (in: _Dest=0x7a607e0, _Source="Adobe-Japan1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" [0167.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a607e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0167.445] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9b1b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Host", cAlternateFileName="ADD587~1")) returned 1 [0167.445] wcscmp (_String1="Adobe-Japan1-H-Host", _String2=".") returned 1 [0167.445] wcscmp (_String1="Adobe-Japan1-H-Host", _String2="..") returned 1 [0167.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7448 [0167.445] wcscpy (in: _Dest=0x3eb7448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.445] wcscat (in: _Dest=0x3eb7448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.445] wcscat (in: _Dest=0x3eb7448, _Source="Adobe-Japan1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" [0167.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0167.446] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-H-Mac", cAlternateFileName="ADF41D~1")) returned 1 [0167.446] wcscmp (_String1="Adobe-Japan1-H-Mac", _String2=".") returned 1 [0167.446] wcscmp (_String1="Adobe-Japan1-H-Mac", _String2="..") returned 1 [0167.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61dd0 [0167.446] wcscpy (in: _Dest=0x7a61dd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.446] wcscat (in: _Dest=0x7a61dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.446] wcscat (in: _Dest=0x7a61dd0, _Source="Adobe-Japan1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" [0167.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0167.447] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Japan1-UCS2", cAlternateFileName="AD1CC0~1")) returned 1 [0167.447] wcscmp (_String1="Adobe-Japan1-UCS2", _String2=".") returned 1 [0167.447] wcscmp (_String1="Adobe-Japan1-UCS2", _String2="..") returned 1 [0167.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61f80 [0167.447] wcscpy (in: _Dest=0x7a61f80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.447] wcscat (in: _Dest=0x7a61f80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.447] wcscat (in: _Dest=0x7a61f80, _Source="Adobe-Japan1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" [0167.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0167.448] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-0", cAlternateFileName="AD0C77~1")) returned 1 [0167.448] wcscmp (_String1="Adobe-Korea1-0", _String2=".") returned 1 [0167.448] wcscmp (_String1="Adobe-Korea1-0", _String2="..") returned 1 [0167.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cc20 [0167.448] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.448] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.448] wcscat (in: _Dest=0x3f3cc20, _Source="Adobe-Korea1-0" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" [0167.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0167.450] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-1", cAlternateFileName="ADE5E5~1")) returned 1 [0167.450] wcscmp (_String1="Adobe-Korea1-1", _String2=".") returned 1 [0167.450] wcscmp (_String1="Adobe-Korea1-1", _String2="..") returned 1 [0167.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d968 [0167.450] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.450] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.450] wcscat (in: _Dest=0x3f3d968, _Source="Adobe-Korea1-1" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" [0167.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0167.451] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-2", cAlternateFileName="AD30F0~1")) returned 1 [0167.451] wcscmp (_String1="Adobe-Korea1-2", _String2=".") returned 1 [0167.451] wcscmp (_String1="Adobe-Korea1-2", _String2="..") returned 1 [0167.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d1f8 [0167.451] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.451] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.451] wcscat (in: _Dest=0x3f3d1f8, _Source="Adobe-Korea1-2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" [0167.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0167.452] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x66a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-CID", cAlternateFileName="AD15A3~1")) returned 1 [0167.452] wcscmp (_String1="Adobe-Korea1-H-CID", _String2=".") returned 1 [0167.452] wcscmp (_String1="Adobe-Korea1-H-CID", _String2="..") returned 1 [0167.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a610e0 [0167.453] wcscpy (in: _Dest=0x7a610e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.453] wcscat (in: _Dest=0x7a610e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.453] wcscat (in: _Dest=0x7a610e0, _Source="Adobe-Korea1-H-CID" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" [0167.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a610e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0167.454] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Host", cAlternateFileName="ADCDCC~1")) returned 1 [0167.454] wcscmp (_String1="Adobe-Korea1-H-Host", _String2=".") returned 1 [0167.454] wcscmp (_String1="Adobe-Korea1-H-Host", _String2="..") returned 1 [0167.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5860 [0167.454] wcscpy (in: _Dest=0x3eb5860, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.454] wcscat (in: _Dest=0x3eb5860, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.454] wcscat (in: _Dest=0x3eb5860, _Source="Adobe-Korea1-H-Host" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" [0167.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0167.455] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ca3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-H-Mac", cAlternateFileName="ADF8FD~1")) returned 1 [0167.455] wcscmp (_String1="Adobe-Korea1-H-Mac", _String2=".") returned 1 [0167.455] wcscmp (_String1="Adobe-Korea1-H-Mac", _String2="..") returned 1 [0167.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60120 [0167.455] wcscpy (in: _Dest=0x7a60120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.455] wcscat (in: _Dest=0x7a60120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.455] wcscat (in: _Dest=0x7a60120, _Source="Adobe-Korea1-H-Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" [0167.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0167.456] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCms-UHC", cAlternateFileName="ADF15E~1")) returned 1 [0167.456] wcscmp (_String1="Adobe-Korea1-KSCms-UHC", _String2=".") returned 1 [0167.456] wcscmp (_String1="Adobe-Korea1-KSCms-UHC", _String2="..") returned 1 [0167.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb6900 [0167.456] wcscpy (in: _Dest=0x3eb6900, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.456] wcscat (in: _Dest=0x3eb6900, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.456] wcscat (in: _Dest=0x3eb6900, _Source="Adobe-Korea1-KSCms-UHC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" [0167.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0167.457] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2cf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-KSCpc-EUC", cAlternateFileName="AD662F~1")) returned 1 [0167.458] wcscmp (_String1="Adobe-Korea1-KSCpc-EUC", _String2=".") returned 1 [0167.458] wcscmp (_String1="Adobe-Korea1-KSCpc-EUC", _String2="..") returned 1 [0167.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb7020 [0167.458] wcscpy (in: _Dest=0x3eb7020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.458] wcscat (in: _Dest=0x3eb7020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.458] wcscat (in: _Dest=0x3eb7020, _Source="Adobe-Korea1-KSCpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" [0167.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0167.463] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe-Korea1-UCS2", cAlternateFileName="AD8F7C~1")) returned 1 [0167.463] wcscmp (_String1="Adobe-Korea1-UCS2", _String2=".") returned 1 [0167.463] wcscmp (_String1="Adobe-Korea1-UCS2", _String2="..") returned 1 [0167.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61050 [0167.463] wcscpy (in: _Dest=0x7a61050, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.463] wcscat (in: _Dest=0x7a61050, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.463] wcscat (in: _Dest=0x7a61050, _Source="Adobe-Korea1-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" [0167.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0167.465] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-H", cAlternateFileName="")) returned 1 [0167.465] wcscmp (_String1="B5pc-H", _String2=".") returned 1 [0167.465] wcscmp (_String1="B5pc-H", _String2="..") returned 1 [0167.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0167.465] wcscpy (in: _Dest=0x3f3f218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.465] wcscat (in: _Dest=0x3f3f218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.465] wcscat (in: _Dest=0x3f3f218, _Source="B5pc-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" [0167.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0167.466] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2", cAlternateFileName="B5PC-U~1")) returned 1 [0167.466] wcscmp (_String1="B5pc-UCS2", _String2=".") returned 1 [0167.466] wcscmp (_String1="B5pc-UCS2", _String2="..") returned 1 [0167.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efb320 [0167.466] wcscpy (in: _Dest=0x3efb320, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.466] wcscat (in: _Dest=0x3efb320, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.466] wcscat (in: _Dest=0x3efb320, _Source="B5pc-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" [0167.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efb320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0167.467] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x457be, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-UCS2C", cAlternateFileName="B5PC-U~2")) returned 1 [0167.468] wcscmp (_String1="B5pc-UCS2C", _String2=".") returned 1 [0167.468] wcscmp (_String1="B5pc-UCS2C", _String2="..") returned 1 [0167.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efaca0 [0167.468] wcscpy (in: _Dest=0x3efaca0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.468] wcscat (in: _Dest=0x3efaca0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.468] wcscat (in: _Dest=0x3efaca0, _Source="B5pc-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" [0167.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efaca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0167.469] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb750520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="B5pc-V", cAlternateFileName="")) returned 1 [0167.469] wcscmp (_String1="B5pc-V", _String2=".") returned 1 [0167.469] wcscmp (_String1="B5pc-V", _String2="..") returned 1 [0167.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0167.469] wcscpy (in: _Dest=0x3f3f650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.469] wcscat (in: _Dest=0x3f3f650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.469] wcscat (in: _Dest=0x3f3f650, _Source="B5pc-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" [0167.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0167.934] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3205, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-H", cAlternateFileName="CNS-EU~1")) returned 1 [0167.934] wcscmp (_String1="CNS-EUC-H", _String2=".") returned 1 [0167.934] wcscmp (_String1="CNS-EUC-H", _String2="..") returned 1 [0167.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5af0 [0167.934] wcscpy (in: _Dest=0x3da5af0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0167.935] wcscat (in: _Dest=0x3da5af0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0167.935] wcscat (in: _Dest=0x3da5af0, _Source="CNS-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" [0172.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0172.897] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x363d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNS-EUC-V", cAlternateFileName="CNS-EU~2")) returned 1 [0172.897] wcscmp (_String1="CNS-EUC-V", _String2=".") returned 1 [0172.897] wcscmp (_String1="CNS-EUC-V", _String2="..") returned 1 [0172.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47318 [0172.897] wcscpy (in: _Dest=0x3e47318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.898] wcscat (in: _Dest=0x3e47318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.898] wcscat (in: _Dest=0x3e47318, _Source="CNS-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" [0172.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474 [0172.898] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-H", cAlternateFileName="ETEN-B~1")) returned 1 [0172.917] wcscmp (_String1="ETen-B5-H", _String2=".") returned 1 [0172.917] wcscmp (_String1="ETen-B5-H", _String2="..") returned 1 [0172.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46f18 [0172.917] wcscpy (in: _Dest=0x3e46f18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0172.917] wcscat (in: _Dest=0x3e46f18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0172.917] wcscat (in: _Dest=0x3e46f18, _Source="ETen-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" [0175.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0175.205] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x466cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-UCS2", cAlternateFileName="ETEN-B~2")) returned 1 [0175.205] wcscmp (_String1="ETen-B5-UCS2", _String2=".") returned 1 [0175.205] wcscmp (_String1="ETen-B5-UCS2", _String2="..") returned 1 [0175.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x30633a0 [0175.205] wcscpy (in: _Dest=0x30633a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.205] wcscat (in: _Dest=0x30633a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.205] wcscat (in: _Dest=0x30633a0, _Source="ETen-B5-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" [0175.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30633a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0175.262] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETen-B5-V", cAlternateFileName="ETEN-B~3")) returned 1 [0175.262] wcscmp (_String1="ETen-B5-V", _String2=".") returned 1 [0175.262] wcscmp (_String1="ETen-B5-V", _String2="..") returned 1 [0175.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47b18 [0175.262] wcscpy (in: _Dest=0x3e47b18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.262] wcscat (in: _Dest=0x3e47b18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.262] wcscat (in: _Dest=0x3e47b18, _Source="ETen-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" [0175.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0175.963] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-H", cAlternateFileName="ETENMS~1")) returned 1 [0175.963] wcscmp (_String1="ETenms-B5-H", _String2=".") returned 1 [0175.963] wcscmp (_String1="ETenms-B5-H", _String2="..") returned 1 [0175.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8e78 [0175.963] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.963] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.963] wcscat (in: _Dest=0x3eb8e78, _Source="ETenms-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" [0175.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0175.964] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb776680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc89, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETenms-B5-V", cAlternateFileName="ETENMS~2")) returned 1 [0175.964] wcscmp (_String1="ETenms-B5-V", _String2=".") returned 1 [0175.964] wcscmp (_String1="ETenms-B5-V", _String2="..") returned 1 [0175.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9b38 [0175.965] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.965] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.965] wcscat (in: _Dest=0x3eb9b38, _Source="ETenms-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" [0175.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0175.966] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6017, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-H", cAlternateFileName="ETHK-B~1")) returned 1 [0175.966] wcscmp (_String1="ETHK-B5-H", _String2=".") returned 1 [0175.966] wcscmp (_String1="ETHK-B5-H", _String2="..") returned 1 [0175.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46198 [0175.966] wcscpy (in: _Dest=0x3e46198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.966] wcscat (in: _Dest=0x3e46198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.966] wcscat (in: _Dest=0x3e46198, _Source="ETHK-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" [0175.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0175.967] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETHK-B5-V", cAlternateFileName="ETHK-B~2")) returned 1 [0175.967] wcscmp (_String1="ETHK-B5-V", _String2=".") returned 1 [0175.967] wcscmp (_String1="ETHK-B5-V", _String2="..") returned 1 [0175.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46d98 [0175.967] wcscpy (in: _Dest=0x3e46d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.967] wcscat (in: _Dest=0x3e46d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.967] wcscat (in: _Dest=0x3e46d98, _Source="ETHK-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" [0175.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0175.968] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-H", cAlternateFileName="")) returned 1 [0175.968] wcscmp (_String1="EUC-H", _String2=".") returned 1 [0175.968] wcscmp (_String1="EUC-H", _String2="..") returned 1 [0175.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e1c0 [0175.968] wcscpy (in: _Dest=0x3f3e1c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.968] wcscat (in: _Dest=0x3f3e1c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.968] wcscat (in: _Dest=0x3f3e1c0, _Source="EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" [0175.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0175.969] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUC-V", cAlternateFileName="")) returned 1 [0175.969] wcscmp (_String1="EUC-V", _String2=".") returned 1 [0175.969] wcscmp (_String1="EUC-V", _String2="..") returned 1 [0175.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dfe0 [0175.969] wcscpy (in: _Dest=0x3f3dfe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.969] wcscat (in: _Dest=0x3f3dfe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.970] wcscat (in: _Dest=0x3f3dfe0, _Source="EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" [0175.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dfe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0175.970] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x403c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-H", cAlternateFileName="EXT-RK~1")) returned 1 [0175.971] wcscmp (_String1="Ext-RKSJ-H", _String2=".") returned 1 [0175.971] wcscmp (_String1="Ext-RKSJ-H", _String2="..") returned 1 [0175.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47098 [0175.971] wcscpy (in: _Dest=0x3e47098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.971] wcscat (in: _Dest=0x3e47098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.971] wcscat (in: _Dest=0x3e47098, _Source="Ext-RKSJ-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" [0175.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0175.972] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9d7c80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ext-RKSJ-V", cAlternateFileName="EXT-RK~2")) returned 1 [0175.972] wcscmp (_String1="Ext-RKSJ-V", _String2=".") returned 1 [0175.972] wcscmp (_String1="Ext-RKSJ-V", _String2="..") returned 1 [0175.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46c98 [0175.972] wcscpy (in: _Dest=0x3e46c98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.972] wcscat (in: _Dest=0x3e46c98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.972] wcscat (in: _Dest=0x3e46c98, _Source="Ext-RKSJ-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" [0175.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0175.973] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-H", cAlternateFileName="")) returned 1 [0175.973] wcscmp (_String1="GB-EUC-H", _String2=".") returned 1 [0175.974] wcscmp (_String1="GB-EUC-H", _String2="..") returned 1 [0175.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47a98 [0175.974] wcscpy (in: _Dest=0x3e47a98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.974] wcscat (in: _Dest=0x3e47a98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.974] wcscat (in: _Dest=0x3e47a98, _Source="GB-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" [0175.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0175.975] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB-EUC-V", cAlternateFileName="")) returned 1 [0175.975] wcscmp (_String1="GB-EUC-V", _String2=".") returned 1 [0175.975] wcscmp (_String1="GB-EUC-V", _String2="..") returned 1 [0175.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47c98 [0175.975] wcscpy (in: _Dest=0x3e47c98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.975] wcscat (in: _Dest=0x3e47c98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.975] wcscat (in: _Dest=0x3e47c98, _Source="GB-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" [0175.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0175.976] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15594, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-H", cAlternateFileName="GBK-EU~1")) returned 1 [0175.976] wcscmp (_String1="GBK-EUC-H", _String2=".") returned 1 [0175.976] wcscmp (_String1="GBK-EUC-H", _String2="..") returned 1 [0175.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46f98 [0175.976] wcscpy (in: _Dest=0x3e46f98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.976] wcscat (in: _Dest=0x3e46f98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.976] wcscat (in: _Dest=0x3e46f98, _Source="GBK-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" [0175.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0175.977] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x39050, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-UCS2", cAlternateFileName="GBK-EU~2")) returned 1 [0175.977] wcscmp (_String1="GBK-EUC-UCS2", _String2=".") returned 1 [0175.977] wcscmp (_String1="GBK-EUC-UCS2", _String2="..") returned 1 [0175.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9cd0 [0175.978] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.978] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.978] wcscat (in: _Dest=0x3eb9cd0, _Source="GBK-EUC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" [0175.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0175.979] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK-EUC-V", cAlternateFileName="GBK-EU~3")) returned 1 [0175.979] wcscmp (_String1="GBK-EUC-V", _String2=".") returned 1 [0175.979] wcscmp (_String1="GBK-EUC-V", _String2="..") returned 1 [0175.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47d98 [0175.979] wcscpy (in: _Dest=0x3e47d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.979] wcscat (in: _Dest=0x3e47d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.979] wcscat (in: _Dest=0x3e47d98, _Source="GBK-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" [0175.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0175.980] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17840, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-H", cAlternateFileName="")) returned 1 [0175.981] wcscmp (_String1="GBK2K-H", _String2=".") returned 1 [0175.981] wcscmp (_String1="GBK2K-H", _String2="..") returned 1 [0175.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47418 [0175.981] wcscpy (in: _Dest=0x3e47418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.981] wcscat (in: _Dest=0x3e47418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.981] wcscat (in: _Dest=0x3e47418, _Source="GBK2K-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" [0175.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0175.982] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6ef580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBK2K-V", cAlternateFileName="")) returned 1 [0175.982] wcscmp (_String1="GBK2K-V", _String2=".") returned 1 [0175.982] wcscmp (_String1="GBK2K-V", _String2="..") returned 1 [0175.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e48018 [0175.982] wcscpy (in: _Dest=0x3e48018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.982] wcscat (in: _Dest=0x3e48018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.982] wcscat (in: _Dest=0x3e48018, _Source="GBK2K-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" [0175.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e48018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0175.984] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-H", cAlternateFileName="GBKP-E~1")) returned 1 [0175.984] wcscmp (_String1="GBKp-EUC-H", _String2=".") returned 1 [0175.984] wcscmp (_String1="GBKp-EUC-H", _String2="..") returned 1 [0175.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47718 [0175.984] wcscpy (in: _Dest=0x3e47718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.984] wcscat (in: _Dest=0x3e47718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.984] wcscat (in: _Dest=0x3e47718, _Source="GBKp-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" [0175.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0175.985] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBKp-EUC-V", cAlternateFileName="GBKP-E~2")) returned 1 [0175.985] wcscmp (_String1="GBKp-EUC-V", _String2=".") returned 1 [0175.985] wcscmp (_String1="GBKp-EUC-V", _String2="..") returned 1 [0175.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46e98 [0175.985] wcscpy (in: _Dest=0x3e46e98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.985] wcscat (in: _Dest=0x3e46e98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.985] wcscat (in: _Dest=0x3e46e98, _Source="GBKp-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" [0175.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0175.986] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x125b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-H", cAlternateFileName="GBPC-E~1")) returned 1 [0175.986] wcscmp (_String1="GBpc-EUC-H", _String2=".") returned 1 [0175.986] wcscmp (_String1="GBpc-EUC-H", _String2="..") returned 1 [0175.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47518 [0175.986] wcscpy (in: _Dest=0x3e47518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.986] wcscat (in: _Dest=0x3e47518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.986] wcscat (in: _Dest=0x3e47518, _Source="GBpc-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" [0175.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0175.987] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2", cAlternateFileName="GBPC-E~2")) returned 1 [0175.987] wcscmp (_String1="GBpc-EUC-UCS2", _String2=".") returned 1 [0175.987] wcscmp (_String1="GBpc-EUC-UCS2", _String2="..") returned 1 [0175.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9560 [0175.987] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.987] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.988] wcscat (in: _Dest=0x3eb9560, _Source="GBpc-EUC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" [0175.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0175.988] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24296, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-UCS2C", cAlternateFileName="GBPC-E~3")) returned 1 [0175.988] wcscmp (_String1="GBpc-EUC-UCS2C", _String2=".") returned 1 [0175.989] wcscmp (_String1="GBpc-EUC-UCS2C", _String2="..") returned 1 [0175.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0175.989] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.989] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.989] wcscat (in: _Dest=0x3eb8c58, _Source="GBpc-EUC-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" [0175.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0175.990] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xccf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBpc-EUC-V", cAlternateFileName="GBPC-E~4")) returned 1 [0175.990] wcscmp (_String1="GBpc-EUC-V", _String2=".") returned 1 [0175.990] wcscmp (_String1="GBpc-EUC-V", _String2="..") returned 1 [0175.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47398 [0175.990] wcscpy (in: _Dest=0x3e47398, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.990] wcscat (in: _Dest=0x3e47398, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.990] wcscat (in: _Dest=0x3e47398, _Source="GBpc-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" [0175.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0175.991] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc07a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-H", cAlternateFileName="GBT-EU~1")) returned 1 [0175.991] wcscmp (_String1="GBT-EUC-H", _String2=".") returned 1 [0175.991] wcscmp (_String1="GBT-EUC-H", _String2="..") returned 1 [0175.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46b98 [0175.991] wcscpy (in: _Dest=0x3e46b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.991] wcscat (in: _Dest=0x3e46b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.991] wcscat (in: _Dest=0x3e46b98, _Source="GBT-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" [0175.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0175.992] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xccb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBT-EUC-V", cAlternateFileName="GBT-EU~2")) returned 1 [0175.993] wcscmp (_String1="GBT-EUC-V", _String2=".") returned 1 [0175.993] wcscmp (_String1="GBT-EUC-V", _String2="..") returned 1 [0175.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46518 [0175.993] wcscpy (in: _Dest=0x3e46518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.993] wcscat (in: _Dest=0x3e46518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.993] wcscat (in: _Dest=0x3e46518, _Source="GBT-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" [0175.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0175.994] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="H", cAlternateFileName="")) returned 1 [0175.994] wcscmp (_String1="H", _String2=".") returned 1 [0175.994] wcscmp (_String1="H", _String2="..") returned 1 [0175.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26468 [0175.994] wcscpy (in: _Dest=0x7a26468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.995] wcscat (in: _Dest=0x7a26468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.995] wcscat (in: _Dest=0x7a26468, _Source="H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H" [0175.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0175.996] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5f97, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-H", cAlternateFileName="HKDLA-~1")) returned 1 [0175.996] wcscmp (_String1="HKdla-B5-H", _String2=".") returned 1 [0175.996] wcscmp (_String1="HKdla-B5-H", _String2="..") returned 1 [0175.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47498 [0175.996] wcscpy (in: _Dest=0x3e47498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.996] wcscat (in: _Dest=0x3e47498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.996] wcscat (in: _Dest=0x3e47498, _Source="HKdla-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" [0175.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0175.997] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdla-B5-V", cAlternateFileName="HKDLA-~2")) returned 1 [0175.997] wcscmp (_String1="HKdla-B5-V", _String2=".") returned 1 [0175.997] wcscmp (_String1="HKdla-B5-V", _String2="..") returned 1 [0175.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47a18 [0175.997] wcscpy (in: _Dest=0x3e47a18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.997] wcscat (in: _Dest=0x3e47a18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.997] wcscat (in: _Dest=0x3e47a18, _Source="HKdla-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" [0175.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0175.998] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x55fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-H", cAlternateFileName="HKDLB-~1")) returned 1 [0175.998] wcscmp (_String1="HKdlb-B5-H", _String2=".") returned 1 [0175.998] wcscmp (_String1="HKdlb-B5-H", _String2="..") returned 1 [0175.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47598 [0175.998] wcscpy (in: _Dest=0x3e47598, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0175.998] wcscat (in: _Dest=0x3e47598, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0175.998] wcscat (in: _Dest=0x3e47598, _Source="HKdlb-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" [0175.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0176.000] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKdlb-B5-V", cAlternateFileName="HKDLB-~2")) returned 1 [0176.000] wcscmp (_String1="HKdlb-B5-V", _String2=".") returned 1 [0176.000] wcscmp (_String1="HKdlb-B5-V", _String2="..") returned 1 [0176.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47b98 [0176.000] wcscpy (in: _Dest=0x3e47b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0176.000] wcscat (in: _Dest=0x3e47b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0176.000] wcscat (in: _Dest=0x3e47b98, _Source="HKdlb-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" [0176.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0176.228] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x386a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-H", cAlternateFileName="HKGCCS~1")) returned 1 [0176.228] wcscmp (_String1="HKgccs-B5-H", _String2=".") returned 1 [0176.228] wcscmp (_String1="HKgccs-B5-H", _String2="..") returned 1 [0176.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9bc0 [0176.228] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0176.228] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0176.228] wcscat (in: _Dest=0x3eb9bc0, _Source="HKgccs-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" [0176.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0176.230] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKgccs-B5-V", cAlternateFileName="HKGCCS~2")) returned 1 [0176.230] wcscmp (_String1="HKgccs-B5-V", _String2=".") returned 1 [0176.230] wcscmp (_String1="HKgccs-B5-V", _String2="..") returned 1 [0176.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba550 [0176.230] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0176.230] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0176.230] wcscat (in: _Dest=0x3eba550, _Source="HKgccs-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" [0176.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0176.231] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb79c7e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-H", cAlternateFileName="HKM314~1")) returned 1 [0176.231] wcscmp (_String1="HKm314-B5-H", _String2=".") returned 1 [0176.231] wcscmp (_String1="HKm314-B5-H", _String2="..") returned 1 [0176.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9230 [0176.231] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0176.231] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0176.231] wcscat (in: _Dest=0x3eb9230, _Source="HKm314-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" [0176.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0176.232] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm314-B5-V", cAlternateFileName="HKM314~2")) returned 1 [0176.232] wcscmp (_String1="HKm314-B5-V", _String2=".") returned 1 [0176.232] wcscmp (_String1="HKm314-B5-V", _String2="..") returned 1 [0176.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba2a8 [0176.232] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0176.232] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0176.233] wcscat (in: _Dest=0x3eba2a8, _Source="HKm314-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" [0176.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0176.234] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-H", cAlternateFileName="HKM471~1")) returned 1 [0177.265] wcscmp (_String1="HKm471-B5-H", _String2=".") returned 1 [0177.265] wcscmp (_String1="HKm471-B5-H", _String2="..") returned 1 [0177.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9d58 [0177.265] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.265] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.266] wcscat (in: _Dest=0x3eb9d58, _Source="HKm471-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" [0177.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0177.964] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc21, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKm471-B5-V", cAlternateFileName="HKM471~2")) returned 1 [0177.964] wcscmp (_String1="HKm471-B5-V", _String2=".") returned 1 [0177.964] wcscmp (_String1="HKm471-B5-V", _String2="..") returned 1 [0177.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8b48 [0177.964] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.964] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.964] wcscat (in: _Dest=0x3eb8b48, _Source="HKm471-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" [0177.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0177.965] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x604d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-H", cAlternateFileName="HKSCS-~1")) returned 1 [0177.965] wcscmp (_String1="HKscs-B5-H", _String2=".") returned 1 [0177.965] wcscmp (_String1="HKscs-B5-H", _String2="..") returned 1 [0177.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47518 [0177.966] wcscpy (in: _Dest=0x3e47518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.966] wcscat (in: _Dest=0x3e47518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.966] wcscat (in: _Dest=0x3e47518, _Source="HKscs-B5-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" [0177.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc [0177.967] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKscs-B5-V", cAlternateFileName="HKSCS-~2")) returned 1 [0177.967] wcscmp (_String1="HKscs-B5-V", _String2=".") returned 1 [0177.967] wcscmp (_String1="HKscs-B5-V", _String2="..") returned 1 [0177.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47398 [0177.967] wcscpy (in: _Dest=0x3e47398, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.967] wcscat (in: _Dest=0x3e47398, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.967] wcscat (in: _Dest=0x3e47398, _Source="HKscs-B5-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" [0177.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0177.968] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-H", cAlternateFileName="IDENTI~1")) returned 1 [0177.968] wcscmp (_String1="Identity-H", _String2=".") returned 1 [0177.968] wcscmp (_String1="Identity-H", _String2="..") returned 1 [0177.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47418 [0177.968] wcscpy (in: _Dest=0x3e47418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.968] wcscat (in: _Dest=0x3e47418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.968] wcscat (in: _Dest=0x3e47418, _Source="Identity-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" [0177.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0177.969] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-V", cAlternateFileName="IDENTI~2")) returned 1 [0177.969] wcscmp (_String1="Identity-V", _String2=".") returned 1 [0177.970] wcscmp (_String1="Identity-V", _String2="..") returned 1 [0177.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e48018 [0177.970] wcscpy (in: _Dest=0x3e48018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.970] wcscat (in: _Dest=0x3e48018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.970] wcscat (in: _Dest=0x3e48018, _Source="Identity-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" [0177.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e48018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0177.971] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3047, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSC-EUC-H", cAlternateFileName="KSC-EU~1")) returned 1 [0177.971] wcscmp (_String1="KSC-EUC-H", _String2=".") returned 1 [0177.971] wcscmp (_String1="KSC-EUC-H", _String2="..") returned 1 [0177.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47718 [0177.971] wcscpy (in: _Dest=0x3e47718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.971] wcscat (in: _Dest=0x3e47718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.971] wcscat (in: _Dest=0x3e47718, _Source="KSC-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" [0177.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0177.972] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSC-EUC-V", cAlternateFileName="KSC-EU~2")) returned 1 [0177.972] wcscmp (_String1="KSC-EUC-V", _String2=".") returned 1 [0177.972] wcscmp (_String1="KSC-EUC-V", _String2="..") returned 1 [0177.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46e98 [0177.972] wcscpy (in: _Dest=0x3e46e98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.972] wcscat (in: _Dest=0x3e46e98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.972] wcscat (in: _Dest=0x3e46e98, _Source="KSC-EUC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" [0177.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0177.973] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb54a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4191, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-H", cAlternateFileName="KSCMS-~1")) returned 1 [0177.973] wcscmp (_String1="KSCms-UHC-H", _String2=".") returned 1 [0177.973] wcscmp (_String1="KSCms-UHC-H", _String2="..") returned 1 [0177.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb94d8 [0177.973] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.973] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.973] wcscat (in: _Dest=0x3eb94d8, _Source="KSCms-UHC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" [0177.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0177.974] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-HW-H", cAlternateFileName="KSCMS-~2")) returned 1 [0177.974] wcscmp (_String1="KSCms-UHC-HW-H", _String2=".") returned 1 [0177.974] wcscmp (_String1="KSCms-UHC-HW-H", _String2="..") returned 1 [0177.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba440 [0177.975] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.975] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.975] wcscat (in: _Dest=0x3eba440, _Source="KSCms-UHC-HW-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" [0177.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0177.975] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-HW-V", cAlternateFileName="KSCMS-~3")) returned 1 [0177.975] wcscmp (_String1="KSCms-UHC-HW-V", _String2=".") returned 1 [0177.976] wcscmp (_String1="KSCms-UHC-HW-V", _String2="..") returned 1 [0177.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba660 [0177.976] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.976] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.976] wcscat (in: _Dest=0x3eba660, _Source="KSCms-UHC-HW-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" [0177.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0177.977] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e597, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-UCS2", cAlternateFileName="KSCMS-~4")) returned 1 [0177.977] wcscmp (_String1="KSCms-UHC-UCS2", _String2=".") returned 1 [0177.977] wcscmp (_String1="KSCms-UHC-UCS2", _String2="..") returned 1 [0177.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba110 [0177.977] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.977] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.977] wcscat (in: _Dest=0x3eba110, _Source="KSCms-UHC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" [0177.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0177.978] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCms-UHC-V", cAlternateFileName="KS3FF3~1")) returned 1 [0177.978] wcscmp (_String1="KSCms-UHC-V", _String2=".") returned 1 [0177.978] wcscmp (_String1="KSCms-UHC-V", _String2="..") returned 1 [0177.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9560 [0177.978] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.978] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.978] wcscat (in: _Dest=0x3eb9560, _Source="KSCms-UHC-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" [0177.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0177.979] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x33b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-H", cAlternateFileName="KSCPC-~1")) returned 1 [0177.979] wcscmp (_String1="KSCpc-EUC-H", _String2=".") returned 1 [0177.979] wcscmp (_String1="KSCpc-EUC-H", _String2="..") returned 1 [0177.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8c58 [0177.979] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.979] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.979] wcscat (in: _Dest=0x3eb8c58, _Source="KSCpc-EUC-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" [0177.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x121c [0177.980] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-UCS2", cAlternateFileName="KSCPC-~2")) returned 1 [0177.980] wcscmp (_String1="KSCpc-EUC-UCS2", _String2=".") returned 1 [0177.980] wcscmp (_String1="KSCpc-EUC-UCS2", _String2="..") returned 1 [0177.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0177.980] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.980] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.980] wcscat (in: _Dest=0x3eb9cd0, _Source="KSCpc-EUC-UCS2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" [0177.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0177.981] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb7aba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26499, dwReserved0=0x0, dwReserved1=0x0, cFileName="KSCpc-EUC-UCS2C", cAlternateFileName="KSCPC-~3")) returned 1 [0177.981] wcscmp (_String1="KSCpc-EUC-UCS2C", _String2=".") returned 1 [0177.981] wcscmp (_String1="KSCpc-EUC-UCS2C", _String2="..") returned 1 [0177.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45c80 [0177.981] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.981] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.981] wcscat (in: _Dest=0x3d45c80, _Source="KSCpc-EUC-UCS2C" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" [0177.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228 [0177.982] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25f07, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-90ms-RKSJ", cAlternateFileName="UCS2-9~1")) returned 1 [0177.982] wcscmp (_String1="UCS2-90ms-RKSJ", _String2=".") returned 1 [0177.982] wcscmp (_String1="UCS2-90ms-RKSJ", _String2="..") returned 1 [0177.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9230 [0177.982] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.982] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.982] wcscat (in: _Dest=0x3eb9230, _Source="UCS2-90ms-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" [0177.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0177.983] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24373, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-90pv-RKSJ", cAlternateFileName="UCS2-9~2")) returned 1 [0177.983] wcscmp (_String1="UCS2-90pv-RKSJ", _String2=".") returned 1 [0177.983] wcscmp (_String1="UCS2-90pv-RKSJ", _String2="..") returned 1 [0177.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba2a8 [0177.983] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.983] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.984] wcscat (in: _Dest=0x3eba2a8, _Source="UCS2-90pv-RKSJ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" [0177.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0177.984] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7c2940, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45903, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-B5pc", cAlternateFileName="UCS2-B~1")) returned 1 [0177.984] wcscmp (_String1="UCS2-B5pc", _String2=".") returned 1 [0177.984] wcscmp (_String1="UCS2-B5pc", _String2="..") returned 1 [0177.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47d98 [0177.985] wcscpy (in: _Dest=0x3e47d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.985] wcscat (in: _Dest=0x3e47d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.985] wcscat (in: _Dest=0x3e47d98, _Source="UCS2-B5pc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" [0177.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0177.986] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49113, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-ETen-B5", cAlternateFileName="UCS2-E~1")) returned 1 [0177.986] wcscmp (_String1="UCS2-ETen-B5", _String2=".") returned 1 [0177.986] wcscmp (_String1="UCS2-ETen-B5", _String2="..") returned 1 [0177.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9bc0 [0177.986] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.986] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.986] wcscat (in: _Dest=0x3eb9bc0, _Source="UCS2-ETen-B5" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" [0177.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0177.987] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc7156e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3b87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-GBK-EUC", cAlternateFileName="UCS2-G~1")) returned 1 [0177.987] wcscmp (_String1="UCS2-GBK-EUC", _String2=".") returned 1 [0177.987] wcscmp (_String1="UCS2-GBK-EUC", _String2="..") returned 1 [0177.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba550 [0177.987] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.987] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.987] wcscat (in: _Dest=0x3eba550, _Source="UCS2-GBK-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" [0177.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234 [0177.988] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3022b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-GBpc-EUC", cAlternateFileName="UCS2-G~2")) returned 1 [0177.988] wcscmp (_String1="UCS2-GBpc-EUC", _String2=".") returned 1 [0177.988] wcscmp (_String1="UCS2-GBpc-EUC", _String2="..") returned 1 [0177.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9b38 [0177.988] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.988] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.988] wcscat (in: _Dest=0x3eb9b38, _Source="UCS2-GBpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" [0177.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0177.989] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ff61, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-KSCms-UHC", cAlternateFileName="UCS2-K~2")) returned 1 [0177.989] wcscmp (_String1="UCS2-KSCms-UHC", _String2=".") returned 1 [0177.989] wcscmp (_String1="UCS2-KSCms-UHC", _String2="..") returned 1 [0177.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0177.989] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0177.989] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0177.989] wcscat (in: _Dest=0x3eb8e78, _Source="UCS2-KSCms-UHC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" [0177.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0178.134] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbb2e8e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25737, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCS2-KSCpc-EUC", cAlternateFileName="UCS2-K~1")) returned 1 [0178.134] wcscmp (_String1="UCS2-KSCpc-EUC", _String2=".") returned 1 [0178.134] wcscmp (_String1="UCS2-KSCpc-EUC", _String2="..") returned 1 [0178.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb93c8 [0178.134] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.134] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.134] wcscat (in: _Dest=0x3eb93c8, _Source="UCS2-KSCpc-EUC" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" [0178.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0178.715] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x53d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UCS2-H", cAlternateFileName="UNICNS~2")) returned 1 [0178.715] wcscmp (_String1="UniCNS-UCS2-H", _String2=".") returned 1 [0178.715] wcscmp (_String1="UniCNS-UCS2-H", _String2="..") returned 1 [0178.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68448 [0178.716] wcscpy (in: _Dest=0x7a68448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.716] wcscat (in: _Dest=0x7a68448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.716] wcscat (in: _Dest=0x7a68448, _Source="UniCNS-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" [0178.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0178.717] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UCS2-V", cAlternateFileName="UNICNS~1")) returned 1 [0178.717] wcscmp (_String1="UniCNS-UCS2-V", _String2=".") returned 1 [0178.717] wcscmp (_String1="UniCNS-UCS2-V", _String2="..") returned 1 [0178.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a684d0 [0178.717] wcscpy (in: _Dest=0x7a684d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.717] wcscat (in: _Dest=0x7a684d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.717] wcscat (in: _Dest=0x7a684d0, _Source="UniCNS-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" [0178.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a684d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0178.718] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x425e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UTF16-H", cAlternateFileName="UNICNS~4")) returned 1 [0178.718] wcscmp (_String1="UniCNS-UTF16-H", _String2=".") returned 1 [0178.718] wcscmp (_String1="UniCNS-UTF16-H", _String2="..") returned 1 [0178.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68558 [0178.718] wcscpy (in: _Dest=0x7a68558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.718] wcscat (in: _Dest=0x7a68558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.718] wcscat (in: _Dest=0x7a68558, _Source="UniCNS-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" [0178.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0178.719] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb7e8aa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc33, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniCNS-UTF16-V", cAlternateFileName="UNICNS~3")) returned 1 [0178.719] wcscmp (_String1="UniCNS-UTF16-V", _String2=".") returned 1 [0178.719] wcscmp (_String1="UniCNS-UTF16-V", _String2="..") returned 1 [0178.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a685e0 [0178.719] wcscpy (in: _Dest=0x7a685e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.720] wcscat (in: _Dest=0x7a685e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.720] wcscat (in: _Dest=0x7a685e0, _Source="UniCNS-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" [0178.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a685e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0178.721] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x46805, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UCS2-H", cAlternateFileName="UNIGB-~2")) returned 1 [0178.721] wcscmp (_String1="UniGB-UCS2-H", _String2=".") returned 1 [0178.721] wcscmp (_String1="UniGB-UCS2-H", _String2="..") returned 1 [0178.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68668 [0178.721] wcscpy (in: _Dest=0x7a68668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.721] wcscat (in: _Dest=0x7a68668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.721] wcscat (in: _Dest=0x7a68668, _Source="UniGB-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" [0178.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0178.722] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UCS2-V", cAlternateFileName="UNIGB-~1")) returned 1 [0178.722] wcscmp (_String1="UniGB-UCS2-V", _String2=".") returned 1 [0178.722] wcscmp (_String1="UniGB-UCS2-V", _String2="..") returned 1 [0178.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a686f0 [0178.722] wcscpy (in: _Dest=0x7a686f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.722] wcscat (in: _Dest=0x7a686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.722] wcscat (in: _Dest=0x7a686f0, _Source="UniGB-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" [0178.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0178.723] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3453e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UTF16-H", cAlternateFileName="UNIGB-~4")) returned 1 [0178.723] wcscmp (_String1="UniGB-UTF16-H", _String2=".") returned 1 [0178.723] wcscmp (_String1="UniGB-UTF16-H", _String2="..") returned 1 [0178.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68778 [0178.724] wcscpy (in: _Dest=0x7a68778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.724] wcscat (in: _Dest=0x7a68778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.724] wcscat (in: _Dest=0x7a68778, _Source="UniGB-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" [0178.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0178.725] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc73b840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniGB-UTF16-V", cAlternateFileName="UNIGB-~3")) returned 1 [0178.725] wcscmp (_String1="UniGB-UTF16-V", _String2=".") returned 1 [0178.725] wcscmp (_String1="UniGB-UTF16-V", _String2="..") returned 1 [0178.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68800 [0178.725] wcscpy (in: _Dest=0x7a68800, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.725] wcscat (in: _Dest=0x7a68800, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.725] wcscat (in: _Dest=0x7a68800, _Source="UniGB-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" [0178.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0178.726] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2b580, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-H", cAlternateFileName="UNIJIS~1")) returned 1 [0178.726] wcscmp (_String1="UniJIS-UCS2-H", _String2=".") returned 1 [0178.726] wcscmp (_String1="UniJIS-UCS2-H", _String2="..") returned 1 [0178.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68888 [0178.726] wcscpy (in: _Dest=0x7a68888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0178.727] wcscat (in: _Dest=0x7a68888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0178.727] wcscat (in: _Dest=0x7a68888, _Source="UniJIS-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" [0178.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0178.728] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-HW-H", cAlternateFileName="UNIJIS~2")) returned 1 [0179.689] wcscmp (_String1="UniJIS-UCS2-HW-H", _String2=".") returned 1 [0179.689] wcscmp (_String1="UniJIS-UCS2-HW-H", _String2="..") returned 1 [0179.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d454a0 [0179.689] wcscpy (in: _Dest=0x3d454a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0179.690] wcscat (in: _Dest=0x3d454a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0179.690] wcscat (in: _Dest=0x3d454a0, _Source="UniJIS-UCS2-HW-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" [0180.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d454a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0180.726] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb9fdde0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-HW-V", cAlternateFileName="UNIJIS~3")) returned 1 [0180.726] wcscmp (_String1="UniJIS-UCS2-HW-V", _String2=".") returned 1 [0180.726] wcscmp (_String1="UniJIS-UCS2-HW-V", _String2="..") returned 1 [0180.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d442a0 [0180.726] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.726] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.726] wcscat (in: _Dest=0x3d442a0, _Source="UniJIS-UCS2-HW-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" [0180.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0180.727] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ac5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UCS2-V", cAlternateFileName="UNIJIS~4")) returned 1 [0180.727] wcscmp (_String1="UniJIS-UCS2-V", _String2=".") returned 1 [0180.727] wcscmp (_String1="UniJIS-UCS2-V", _String2="..") returned 1 [0180.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3e1ced8 [0180.727] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.727] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.727] wcscat (in: _Dest=0x3e1ced8, _Source="UniJIS-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" [0180.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0180.728] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x315bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UTF16-H", cAlternateFileName="UN87E6~1")) returned 1 [0180.728] wcscmp (_String1="UniJIS-UTF16-H", _String2=".") returned 1 [0180.728] wcscmp (_String1="UniJIS-UTF16-H", _String2="..") returned 1 [0180.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1b888 [0180.728] wcscpy (in: _Dest=0x3e1b888, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.728] wcscat (in: _Dest=0x3e1b888, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.728] wcscat (in: _Dest=0x3e1b888, _Source="UniJIS-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" [0180.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1b888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0180.729] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba23f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS-UTF16-V", cAlternateFileName="UN275C~1")) returned 1 [0180.729] wcscmp (_String1="UniJIS-UTF16-V", _String2=".") returned 1 [0180.729] wcscmp (_String1="UniJIS-UTF16-V", _String2="..") returned 1 [0180.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1ba20 [0180.730] wcscpy (in: _Dest=0x3e1ba20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.730] wcscat (in: _Dest=0x3e1ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.730] wcscat (in: _Dest=0x3e1ba20, _Source="UniJIS-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" [0180.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0180.731] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x31610, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS2004-UTF16-H", cAlternateFileName="UN288D~1")) returned 1 [0180.731] wcscmp (_String1="UniJIS2004-UTF16-H", _String2=".") returned 1 [0180.731] wcscmp (_String1="UniJIS2004-UTF16-H", _String2="..") returned 1 [0180.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45a40 [0180.731] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.731] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.731] wcscat (in: _Dest=0x3d45a40, _Source="UniJIS2004-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" [0180.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0180.732] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba4a0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniJIS2004-UTF16-V", cAlternateFileName="UNC565~1")) returned 1 [0180.732] wcscmp (_String1="UniJIS2004-UTF16-V", _String2=".") returned 1 [0180.732] wcscmp (_String1="UniJIS2004-UTF16-V", _String2="..") returned 1 [0180.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45920 [0180.732] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.732] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.732] wcscat (in: _Dest=0x3d45920, _Source="UniJIS2004-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" [0180.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0180.733] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2aad3, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UCS2-H", cAlternateFileName="UNIKS-~4")) returned 1 [0180.733] wcscmp (_String1="UniKS-UCS2-H", _String2=".") returned 1 [0180.733] wcscmp (_String1="UniKS-UCS2-H", _String2="..") returned 1 [0180.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68778 [0180.733] wcscpy (in: _Dest=0x7a68778, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.733] wcscat (in: _Dest=0x7a68778, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.733] wcscat (in: _Dest=0x7a68778, _Source="UniKS-UCS2-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" [0180.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0180.734] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UCS2-V", cAlternateFileName="UNIKS-~3")) returned 1 [0180.734] wcscmp (_String1="UniKS-UCS2-V", _String2=".") returned 1 [0180.734] wcscmp (_String1="UniKS-UCS2-V", _String2="..") returned 1 [0180.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a686f0 [0180.734] wcscpy (in: _Dest=0x7a686f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.735] wcscat (in: _Dest=0x7a686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.735] wcscat (in: _Dest=0x7a686f0, _Source="UniKS-UCS2-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" [0180.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0180.735] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2031a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UTF16-H", cAlternateFileName="UNIKS-~2")) returned 1 [0180.735] wcscmp (_String1="UniKS-UTF16-H", _String2=".") returned 1 [0180.735] wcscmp (_String1="UniKS-UTF16-H", _String2="..") returned 1 [0180.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68668 [0180.736] wcscpy (in: _Dest=0x7a68668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.736] wcscat (in: _Dest=0x7a68668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.736] wcscat (in: _Dest=0x7a68668, _Source="UniKS-UTF16-H" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" [0180.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0180.737] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbba0d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniKS-UTF16-V", cAlternateFileName="UNIKS-~1")) returned 1 [0180.737] wcscmp (_String1="UniKS-UTF16-V", _String2=".") returned 1 [0180.737] wcscmp (_String1="UniKS-UTF16-V", _String2="..") returned 1 [0180.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a685e0 [0180.737] wcscpy (in: _Dest=0x7a685e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.737] wcscat (in: _Dest=0x7a685e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.737] wcscat (in: _Dest=0x7a685e0, _Source="UniKS-UTF16-V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" [0180.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a685e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0180.738] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="V", cAlternateFileName="")) returned 1 [0180.738] wcscmp (_String1="V", _String2=".") returned 1 [0180.738] wcscmp (_String1="V", _String2="..") returned 1 [0180.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23a00 [0180.738] wcscpy (in: _Dest=0x7a23a00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap" [0180.738] wcscat (in: _Dest=0x7a23a00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\" [0180.738] wcscat (in: _Dest=0x7a23a00, _Source="V" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V" [0180.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0180.739] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb98b9c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="V", cAlternateFileName="")) returned 0 [0180.739] FindClose (in: hFindFile=0x7ad79f0 | out: hFindFile=0x7ad79f0) returned 1 [0180.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a527c8) returned 1 [0180.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a237d0) returned 1 [0180.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69f38) returned 1 Thread: id = 798 os_tid = 0x1454 [0129.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\enutxt.pdf")) returned 0x20 [0132.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", dwFileAttributes=0x20) returned 0 [0133.297] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\enutxt.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.093] GetLastError () returned 0x5 [0135.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", dwFileAttributes=0x20) returned 0 [0135.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc20) returned 1 Thread: id = 799 os_tid = 0x1458 [0129.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a235a0 [0129.050] wcscpy (in: _Dest=0x7a235a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0129.051] wcscat (in: _Dest=0x7a235a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0129.051] wcscat (in: _Dest=0x7a235a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\*" [0129.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55580 [0129.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78b0 [0135.687] wcscmp (_String1=".", _String2=".") returned 0 [0135.687] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.064] wcscmp (_String1="..", _String2=".") returned 1 [0137.064] wcscmp (_String1="..", _String2="..") returned 0 [0137.064] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Bold.otf", cAlternateFileName="ADOBEA~2.OTF")) returned 1 [0137.064] wcscmp (_String1="AdobeArabic-Bold.otf", _String2=".") returned 1 [0137.064] wcscmp (_String1="AdobeArabic-Bold.otf", _String2="..") returned 1 [0137.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5db8 [0137.064] wcscpy (in: _Dest=0x3eb5db8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0137.064] wcscat (in: _Dest=0x3eb5db8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0137.064] wcscat (in: _Dest=0x3eb5db8, _Source="AdobeArabic-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" [0138.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4 [0138.729] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3d9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-BoldItalic.otf", cAlternateFileName="ADOBEA~3.OTF")) returned 1 [0138.729] wcscmp (_String1="AdobeArabic-BoldItalic.otf", _String2=".") returned 1 [0138.729] wcscmp (_String1="AdobeArabic-BoldItalic.otf", _String2="..") returned 1 [0138.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c6298 [0138.730] wcscpy (in: _Dest=0x2c6298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.730] wcscat (in: _Dest=0x2c6298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.730] wcscat (in: _Dest=0x2c6298, _Source="AdobeArabic-BoldItalic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" [0138.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0138.730] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3dce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Italic.otf", cAlternateFileName="ADOBEA~1.OTF")) returned 1 [0138.730] wcscmp (_String1="AdobeArabic-Italic.otf", _String2=".") returned 1 [0138.730] wcscmp (_String1="AdobeArabic-Italic.otf", _String2="..") returned 1 [0138.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad60b8 [0138.731] wcscpy (in: _Dest=0x7ad60b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.731] wcscat (in: _Dest=0x7ad60b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.731] wcscat (in: _Dest=0x7ad60b8, _Source="AdobeArabic-Italic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" [0138.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad60b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c [0138.732] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeArabic-Regular.otf", cAlternateFileName="ADOBEA~4.OTF")) returned 1 [0138.732] wcscmp (_String1="AdobeArabic-Regular.otf", _String2=".") returned 1 [0138.732] wcscmp (_String1="AdobeArabic-Regular.otf", _String2="..") returned 1 [0138.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c6fb8 [0138.732] wcscpy (in: _Dest=0x2c6fb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.732] wcscat (in: _Dest=0x2c6fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.732] wcscat (in: _Dest=0x2c6fb8, _Source="AdobeArabic-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" [0138.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2140 [0138.733] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10e4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Bold.otf", cAlternateFileName="ADOBEH~4.OTF")) returned 1 [0138.733] wcscmp (_String1="AdobeHebrew-Bold.otf", _String2=".") returned 1 [0138.733] wcscmp (_String1="AdobeHebrew-Bold.otf", _String2="..") returned 1 [0138.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5f88 [0138.733] wcscpy (in: _Dest=0x7ad5f88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.733] wcscat (in: _Dest=0x7ad5f88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.733] wcscat (in: _Dest=0x7ad5f88, _Source="AdobeHebrew-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" [0138.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0138.734] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-BoldItalic.otf", cAlternateFileName="ADOBEH~1.OTF")) returned 1 [0138.734] wcscmp (_String1="AdobeHebrew-BoldItalic.otf", _String2=".") returned 1 [0138.734] wcscmp (_String1="AdobeHebrew-BoldItalic.otf", _String2="..") returned 1 [0138.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7198 [0138.734] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.734] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.734] wcscat (in: _Dest=0x2c7198, _Source="AdobeHebrew-BoldItalic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" [0138.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0138.735] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Italic.otf", cAlternateFileName="ADOBEH~2.OTF")) returned 1 [0138.735] wcscmp (_String1="AdobeHebrew-Italic.otf", _String2=".") returned 1 [0138.736] wcscmp (_String1="AdobeHebrew-Italic.otf", _String2="..") returned 1 [0138.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6448 [0138.736] wcscpy (in: _Dest=0x7ad6448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.736] wcscat (in: _Dest=0x7ad6448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.736] wcscat (in: _Dest=0x7ad6448, _Source="AdobeHebrew-Italic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" [0138.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0138.745] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1cc6ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHebrew-Regular.otf", cAlternateFileName="ADOBEH~3.OTF")) returned 1 [0138.745] wcscmp (_String1="AdobeHebrew-Regular.otf", _String2=".") returned 1 [0138.745] wcscmp (_String1="AdobeHebrew-Regular.otf", _String2="..") returned 1 [0138.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0138.745] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.745] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.745] wcscat (in: _Dest=0x2c75f8, _Source="AdobeHebrew-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" [0138.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0138.746] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePiStd.otf", cAlternateFileName="ADOBEP~1.OTF")) returned 1 [0138.747] wcscmp (_String1="AdobePiStd.otf", _String2=".") returned 1 [0138.747] wcscmp (_String1="AdobePiStd.otf", _String2="..") returned 1 [0138.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0138.747] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.747] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.747] wcscat (in: _Dest=0x3eb9ef0, _Source="AdobePiStd.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" [0138.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0138.748] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Bold.otf", cAlternateFileName="ADOBET~1.OTF")) returned 1 [0138.748] wcscmp (_String1="AdobeThai-Bold.otf", _String2=".") returned 1 [0138.748] wcscmp (_String1="AdobeThai-Bold.otf", _String2="..") returned 1 [0138.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44a80 [0138.748] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.748] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.748] wcscat (in: _Dest=0x3d44a80, _Source="AdobeThai-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" [0138.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0138.749] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x112a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-BoldItalic.otf", cAlternateFileName="ADOBET~3.OTF")) returned 1 [0138.749] wcscmp (_String1="AdobeThai-BoldItalic.otf", _String2=".") returned 1 [0138.749] wcscmp (_String1="AdobeThai-BoldItalic.otf", _String2="..") returned 1 [0138.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7378 [0138.749] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.749] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.749] wcscat (in: _Dest=0x2c7378, _Source="AdobeThai-BoldItalic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" [0138.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0138.750] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Italic.otf", cAlternateFileName="ADOBET~4.OTF")) returned 1 [0138.750] wcscmp (_String1="AdobeThai-Italic.otf", _String2=".") returned 1 [0138.750] wcscmp (_String1="AdobeThai-Italic.otf", _String2="..") returned 1 [0138.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad64e0 [0138.750] wcscpy (in: _Dest=0x7ad64e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.750] wcscat (in: _Dest=0x7ad64e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.750] wcscat (in: _Dest=0x7ad64e0, _Source="AdobeThai-Italic.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" [0138.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad64e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0138.751] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10530, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeThai-Regular.otf", cAlternateFileName="ADOBET~2.OTF")) returned 1 [0138.752] wcscmp (_String1="AdobeThai-Regular.otf", _String2=".") returned 1 [0138.752] wcscmp (_String1="AdobeThai-Regular.otf", _String2="..") returned 1 [0138.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6578 [0138.752] wcscpy (in: _Dest=0x7ad6578, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.752] wcscat (in: _Dest=0x7ad6578, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.752] wcscat (in: _Dest=0x7ad6578, _Source="AdobeThai-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" [0138.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0138.753] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8b9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Bold.otf", cAlternateFileName="COURIE~3.OTF")) returned 1 [0138.753] wcscmp (_String1="CourierStd-Bold.otf", _String2=".") returned 1 [0138.753] wcscmp (_String1="CourierStd-Bold.otf", _String2="..") returned 1 [0138.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6610 [0138.753] wcscpy (in: _Dest=0x7ad6610, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.753] wcscat (in: _Dest=0x7ad6610, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.753] wcscat (in: _Dest=0x7ad6610, _Source="CourierStd-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" [0138.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0138.754] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x90dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-BoldOblique.otf", cAlternateFileName="COURIE~2.OTF")) returned 1 [0138.754] wcscmp (_String1="CourierStd-BoldOblique.otf", _String2=".") returned 1 [0138.754] wcscmp (_String1="CourierStd-BoldOblique.otf", _String2="..") returned 1 [0138.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7738 [0138.754] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.754] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.755] wcscat (in: _Dest=0x2c7738, _Source="CourierStd-BoldOblique.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" [0138.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0138.756] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9238, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Oblique.otf", cAlternateFileName="COURIE~4.OTF")) returned 1 [0138.756] wcscmp (_String1="CourierStd-Oblique.otf", _String2=".") returned 1 [0138.756] wcscmp (_String1="CourierStd-Oblique.otf", _String2="..") returned 1 [0138.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad66a8 [0138.756] wcscpy (in: _Dest=0x7ad66a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.756] wcscat (in: _Dest=0x7ad66a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.756] wcscat (in: _Dest=0x7ad66a8, _Source="CourierStd-Oblique.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" [0138.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad66a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0138.757] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd.otf", cAlternateFileName="COURIE~1.OTF")) returned 1 [0138.757] wcscmp (_String1="CourierStd.otf", _String2=".") returned 1 [0138.757] wcscmp (_String1="CourierStd.otf", _String2="..") returned 1 [0138.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9918 [0138.757] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.757] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.757] wcscat (in: _Dest=0x3eb9918, _Source="CourierStd.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" [0138.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0138.759] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Bold.otf", cAlternateFileName="MINION~4.OTF")) returned 1 [0138.759] wcscmp (_String1="MinionPro-Bold.otf", _String2=".") returned 1 [0138.759] wcscmp (_String1="MinionPro-Bold.otf", _String2="..") returned 1 [0138.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0138.759] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.759] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.759] wcscat (in: _Dest=0x3d44d50, _Source="MinionPro-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" [0138.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0138.760] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43898, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-BoldIt.otf", cAlternateFileName="MINION~3.OTF")) returned 1 [0138.760] wcscmp (_String1="MinionPro-BoldIt.otf", _String2=".") returned 1 [0138.760] wcscmp (_String1="MinionPro-BoldIt.otf", _String2="..") returned 1 [0138.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6740 [0138.760] wcscpy (in: _Dest=0x7ad6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.760] wcscat (in: _Dest=0x7ad6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.760] wcscat (in: _Dest=0x7ad6740, _Source="MinionPro-BoldIt.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" [0138.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0138.761] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x436ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-It.otf", cAlternateFileName="MINION~2.OTF")) returned 1 [0138.761] wcscmp (_String1="MinionPro-It.otf", _String2=".") returned 1 [0138.761] wcscmp (_String1="MinionPro-It.otf", _String2="..") returned 1 [0138.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44ba0 [0138.761] wcscpy (in: _Dest=0x3d44ba0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.762] wcscat (in: _Dest=0x3d44ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.762] wcscat (in: _Dest=0x3d44ba0, _Source="MinionPro-It.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" [0138.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0138.763] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5f98c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38790, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Regular.otf", cAlternateFileName="MINION~1.OTF")) returned 1 [0138.763] wcscmp (_String1="MinionPro-Regular.otf", _String2=".") returned 1 [0138.763] wcscmp (_String1="MinionPro-Regular.otf", _String2="..") returned 1 [0138.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad67d8 [0138.763] wcscpy (in: _Dest=0x7ad67d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.763] wcscat (in: _Dest=0x7ad67d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.763] wcscat (in: _Dest=0x7ad67d8, _Source="MinionPro-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" [0138.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad67d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0138.764] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x175c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Bold.otf", cAlternateFileName="MYRIAD~3.OTF")) returned 1 [0138.764] wcscmp (_String1="MyriadPro-Bold.otf", _String2=".") returned 1 [0138.764] wcscmp (_String1="MyriadPro-Bold.otf", _String2="..") returned 1 [0138.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d455c0 [0138.765] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.765] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.765] wcscat (in: _Dest=0x3d455c0, _Source="MyriadPro-Bold.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" [0138.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0138.766] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1879c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-BoldIt.otf", cAlternateFileName="MYRIAD~2.OTF")) returned 1 [0138.766] wcscmp (_String1="MyriadPro-BoldIt.otf", _String2=".") returned 1 [0138.766] wcscmp (_String1="MyriadPro-BoldIt.otf", _String2="..") returned 1 [0138.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6870 [0138.766] wcscpy (in: _Dest=0x7ad6870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.766] wcscat (in: _Dest=0x7ad6870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.766] wcscat (in: _Dest=0x7ad6870, _Source="MyriadPro-BoldIt.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" [0138.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a8 [0138.767] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5d3760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-It.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0138.767] wcscmp (_String1="MyriadPro-It.otf", _String2=".") returned 1 [0138.767] wcscmp (_String1="MyriadPro-It.otf", _String2="..") returned 1 [0138.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45140 [0138.767] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.767] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.768] wcscat (in: _Dest=0x3d45140, _Source="MyriadPro-It.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" [0138.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ac [0138.769] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb61fa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17098, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Regular.otf", cAlternateFileName="MYRIAD~4.OTF")) returned 1 [0138.769] wcscmp (_String1="MyriadPro-Regular.otf", _String2=".") returned 1 [0138.769] wcscmp (_String1="MyriadPro-Regular.otf", _String2="..") returned 1 [0138.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6908 [0138.769] wcscpy (in: _Dest=0x7ad6908, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.769] wcscat (in: _Dest=0x7ad6908, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.769] wcscat (in: _Dest=0x7ad6908, _Source="MyriadPro-Regular.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" [0138.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0138.770] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb5ad600, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFM", cAlternateFileName="")) returned 1 [0138.770] wcscmp (_String1="PFM", _String2=".") returned 1 [0138.770] wcscmp (_String1="PFM", _String2="..") returned 1 [0138.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d50fa8 [0138.770] wcscpy (in: _Dest=0x3d50fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.770] wcscat (in: _Dest=0x3d50fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.771] wcscat (in: _Dest=0x3d50fa8, _Source="PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0138.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d50fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0138.772] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8791, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFB", cAlternateFileName="")) returned 1 [0138.772] wcscmp (_String1="SY______.PFB", _String2=".") returned 1 [0138.772] wcscmp (_String1="SY______.PFB", _String2="..") returned 1 [0138.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba2a8 [0138.772] wcscpy (in: _Dest=0x3eba2a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0138.772] wcscat (in: _Dest=0x3eba2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0138.772] wcscat (in: _Dest=0x3eba2a8, _Source="SY______.PFB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" [0138.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0139.912] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12735, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZX______.PFB", cAlternateFileName="")) returned 1 [0139.912] wcscmp (_String1="ZX______.PFB", _String2=".") returned 1 [0139.912] wcscmp (_String1="ZX______.PFB", _String2="..") returned 1 [0139.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9808 [0139.912] wcscpy (in: _Dest=0x3eb9808, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0139.912] wcscat (in: _Dest=0x3eb9808, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0139.912] wcscat (in: _Dest=0x3eb9808, _Source="ZX______.PFB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" [0141.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0141.119] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 1 [0141.119] wcscmp (_String1="ZY______.PFB", _String2=".") returned 1 [0141.119] wcscmp (_String1="ZY______.PFB", _String2="..") returned 1 [0141.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d4a0 [0141.120] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font" [0141.120] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\" [0141.120] wcscat (in: _Dest=0x3f3d4a0, _Source="ZY______.PFB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" [0141.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0141.122] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 0 [0142.637] FindClose (in: hFindFile=0x7ad78b0 | out: hFindFile=0x7ad78b0) returned 1 [0144.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55580) returned 1 [0144.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a235a0) returned 1 [0144.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69fa8) returned 1 Thread: id = 800 os_tid = 0x145c [0129.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a818 [0129.051] wcscpy (in: _Dest=0x3e1a818, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0129.051] wcscat (in: _Dest=0x3e1a818, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\" [0129.051] wcscat (in: _Dest=0x3e1a818, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*" [0129.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a550b0 [0129.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdadcad20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d240 [0134.652] wcscmp (_String1=".", _String2=".") returned 0 [0134.653] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdadcad20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.653] wcscmp (_String1="..", _String2=".") returned 1 [0134.653] wcscmp (_String1="..", _String2="..") returned 0 [0134.653] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdadcad20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb4eef20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageNames2", cAlternateFileName="LANGUA~1")) returned 1 [0134.653] wcscmp (_String1="LanguageNames2", _String2=".") returned 1 [0134.653] wcscmp (_String1="LanguageNames2", _String2="..") returned 1 [0134.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb7150 [0134.653] wcscpy (in: _Dest=0x3eb7150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0134.653] wcscat (in: _Dest=0x3eb7150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\" [0134.653] wcscat (in: _Dest=0x3eb7150, _Source="LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0136.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0136.499] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 1 [0136.499] wcscmp (_String1="Providers", _String2=".") returned 1 [0136.499] wcscmp (_String1="Providers", _String2="..") returned 1 [0136.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44f00 [0136.499] wcscpy (in: _Dest=0x3d44f00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics" [0136.499] wcscat (in: _Dest=0x3d44f00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\" [0136.499] wcscat (in: _Dest=0x3d44f00, _Source="Providers" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" [0136.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e64 [0136.500] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 0 [0136.501] FindClose (in: hFindFile=0x7a2d240 | out: hFindFile=0x7a2d240) returned 1 [0136.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a550b0) returned 1 [0136.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a818) returned 1 [0136.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc98) returned 1 Thread: id = 801 os_tid = 0x1460 [0129.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e3a0 [0129.052] wcscpy (in: _Dest=0x3f3e3a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" [0129.052] wcscat (in: _Dest=0x3f3e3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\" [0129.052] wcscat (in: _Dest=0x3f3e3a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*" [0129.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a533d0 [0129.052] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0134.639] wcscmp (_String1=".", _String2=".") returned 0 [0134.639] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.639] wcscmp (_String1="..", _String2=".") returned 1 [0134.639] wcscmp (_String1="..", _String2="..") returned 0 [0134.639] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 1 [0134.639] wcscmp (_String1="SaslPrepProfile_norm_bidi.spp", _String2=".") returned 1 [0134.639] wcscmp (_String1="SaslPrepProfile_norm_bidi.spp", _String2="..") returned 1 [0134.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b7c8 [0134.639] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep" [0134.639] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\" [0134.639] wcscat (in: _Dest=0x35b7c8, _Source="SaslPrepProfile_norm_bidi.spp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" [0142.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2450 [0142.402] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 0 [0142.402] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0142.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a533d0) returned 1 [0142.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0142.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 Thread: id = 802 os_tid = 0x1464 [0129.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19898 [0129.052] wcscpy (in: _Dest=0x3e19898, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" [0129.052] wcscat (in: _Dest=0x3e19898, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\" [0129.052] wcscat (in: _Dest=0x3e19898, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*" [0129.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0129.052] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0134.158] wcscmp (_String1=".", _String2=".") returned 0 [0134.158] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.158] wcscmp (_String1="..", _String2=".") returned 1 [0134.158] wcscmp (_String1="..", _String2="..") returned 0 [0134.158] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 1 [0134.158] wcscmp (_String1="Unicode", _String2=".") returned 1 [0134.158] wcscmp (_String1="Unicode", _String2="..") returned 1 [0134.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3da78 [0134.159] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport" [0134.159] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\" [0134.159] wcscat (in: _Dest=0x3f3da78, _Source="Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0136.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b3c [0136.738] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 0 [0136.738] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0136.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0136.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19898) returned 1 [0136.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 Thread: id = 803 os_tid = 0x1468 [0129.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x7a27958 [0129.053] wcscpy (in: _Dest=0x7a27958, _Source="C:\\ProgramData\\Microsoft\\eHome\\logs" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs") returned="C:\\ProgramData\\Microsoft\\eHome\\logs" [0129.053] wcscat (in: _Dest=0x7a27958, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs\\") returned="C:\\ProgramData\\Microsoft\\eHome\\logs\\" [0129.053] wcscat (in: _Dest=0x7a27958, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\eHome\\logs\\*") returned="C:\\ProgramData\\Microsoft\\eHome\\logs\\*" [0129.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3bd8 [0129.053] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da40 [0129.053] wcscmp (_String1=".", _String2=".") returned 0 [0129.053] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.053] wcscmp (_String1="..", _String2=".") returned 1 [0129.054] wcscmp (_String1="..", _String2="..") returned 0 [0129.054] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0129.054] FindClose (in: hFindFile=0x7a2da40 | out: hFindFile=0x7a2da40) returned 1 [0129.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3bd8) returned 1 [0129.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27958) returned 1 [0129.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de64c8) returned 1 Thread: id = 804 os_tid = 0x146c [0129.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee05e8 [0129.055] wcscpy (in: _Dest=0x3ee05e8, _Source="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0129.056] wcscat (in: _Dest=0x3ee05e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\" [0129.056] wcscat (in: _Dest=0x3ee05e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*" [0129.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3bd8 [0129.056] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d7c0 [0129.662] wcscmp (_String1=".", _String2=".") returned 0 [0129.662] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.663] wcscmp (_String1="..", _String2=".") returned 1 [0129.663] wcscmp (_String1="..", _String2="..") returned 0 [0129.663] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0129.663] wcscmp (_String1="ApplicationViewsRootNode", _String2=".") returned 1 [0129.663] wcscmp (_String1="ApplicationViewsRootNode", _String2="..") returned 1 [0129.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5ee8 [0129.663] wcscpy (in: _Dest=0x3eb5ee8, _Source="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" [0129.663] wcscat (in: _Dest=0x3eb5ee8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\" [0129.663] wcscat (in: _Dest=0x3eb5ee8, _Source="ApplicationViewsRootNode" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0139.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008 [0139.811] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0139.811] FindClose (in: hFindFile=0x7a2d7c0 | out: hFindFile=0x7a2d7c0) returned 1 [0139.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3bd8) returned 1 [0139.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee05e8) returned 1 [0139.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 Thread: id = 805 os_tid = 0x1470 [0129.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2da40 [0129.057] wcscpy (in: _Dest=0x7a2da40, _Source="C:\\ProgramData\\Sun\\Java" | out: _Dest="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java" [0129.057] wcscat (in: _Dest=0x7a2da40, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\") returned="C:\\ProgramData\\Sun\\Java\\" [0129.057] wcscat (in: _Dest=0x7a2da40, _Source="*" | out: _Dest="C:\\ProgramData\\Sun\\Java\\*") returned="C:\\ProgramData\\Sun\\Java\\*" [0129.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3238 [0129.057] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf590 [0129.664] wcscmp (_String1=".", _String2=".") returned 0 [0129.664] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.664] wcscmp (_String1="..", _String2=".") returned 1 [0129.664] wcscmp (_String1="..", _String2="..") returned 0 [0129.664] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0129.664] wcscmp (_String1="Java Update", _String2=".") returned 1 [0129.664] wcscmp (_String1="Java Update", _String2="..") returned 1 [0129.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e84998 [0129.664] wcscpy (in: _Dest=0x3e84998, _Source="C:\\ProgramData\\Sun\\Java" | out: _Dest="C:\\ProgramData\\Sun\\Java") returned="C:\\ProgramData\\Sun\\Java" [0129.664] wcscat (in: _Dest=0x3e84998, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\") returned="C:\\ProgramData\\Sun\\Java\\" [0129.664] wcscat (in: _Dest=0x3e84998, _Source="Java Update" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update" [0139.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e84998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0139.813] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0139.813] FindClose (in: hFindFile=0x3dcf590 | out: hFindFile=0x3dcf590) returned 1 [0139.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3238) returned 1 [0139.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2da40) returned 1 [0139.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79218) returned 1 Thread: id = 806 os_tid = 0x1474 [0129.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44c30 [0129.058] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0129.058] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0129.058] wcscat (in: _Dest=0x3d44c30, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*" [0129.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3970 [0129.058] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0129.059] wcscmp (_String1=".", _String2=".") returned 0 [0129.059] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.059] wcscmp (_String1="..", _String2=".") returned 1 [0129.059] wcscmp (_String1="..", _String2="..") returned 0 [0129.059] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0129.059] wcscmp (_String1="cache.dat", _String2=".") returned 1 [0129.059] wcscmp (_String1="cache.dat", _String2="..") returned 1 [0129.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5ea0 [0129.059] wcscpy (in: _Dest=0x3df5ea0, _Source="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0129.059] wcscat (in: _Dest=0x3df5ea0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0129.059] wcscat (in: _Dest=0x3df5ea0, _Source="cache.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat") returned="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" [0140.713] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat")) returned 0x2020 [0140.727] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x20) returned 0 [0140.727] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.727] GetLastError () returned 0x5 [0140.727] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x2020) returned 0 [0140.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5ea0) returned 1 [0140.727] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0140.727] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0140.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3970) returned 1 [0140.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0140.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 807 os_tid = 0x1478 [0129.060] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat")) returned 0x2020 [0129.060] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x20) returned 0 [0129.060] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.060] GetLastError () returned 0x5 [0129.060] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x2020) returned 0 [0129.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb61e0) returned 1 Thread: id = 808 os_tid = 0x147c [0129.062] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3")) returned 0x20 [0131.384] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", dwFileAttributes=0x20) returned 1 [0131.385] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x171c [0131.385] GetFileSizeEx (in: hFile=0x171c, lpFileSize=0xba0fddc | out: lpFileSize=0xba0fddc*=8414449) returned 1 [0131.385] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x8064ed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.385] ReadFile (in: hFile=0x171c, lpBuffer=0xba0fdb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xba0fdc8, lpOverlapped=0x0 | out: lpBuffer=0xba0fdb8*, lpNumberOfBytesRead=0xba0fdc8*=0x4, lpOverlapped=0x0) returned 1 [0131.417] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0131.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0131.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0131.417] NtQuerySystemTime (in: CurrentTime=0xba0fd50 | out: CurrentTime=0xba0fd50*=132462177107736000) returned 0x0 [0131.417] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x631048b [0131.417] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x14b32167 [0131.417] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x69ddaafd [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x42f907bd [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0xfcd8cda [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x2eb65dac [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x2b637315 [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x117f604a [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x29df1e0a [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x2885c753 [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x6fe2e1b6 [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x390df5c5 [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x3223358d [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x4bf8915b [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x5217e4a1 [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x59950e7f [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x6abbca [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x7c8c6d3b [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x3292101d [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x5bb20cbc [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x585ad5fd [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x638c186d [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x2fbdef9d [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x34baad04 [0131.418] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x21ba43e3 [0131.419] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x68a27bab [0131.419] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x16b9cb40 [0131.419] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0xcf85655 [0131.419] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x7c84ab2 [0131.419] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x52d26abd [0131.419] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x1d0e29d1 [0131.419] RtlRandomEx (in: Seed=0xba0fd48 | out: Seed=0xba0fd48) returned 0x9f12b77 [0131.433] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.433] ReadFile (in: hFile=0x171c, lpBuffer=0x7cbdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba0fd50, lpOverlapped=0x0 | out: lpBuffer=0x7cbdbb0*, lpNumberOfBytesRead=0xba0fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0132.122] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07968 [0132.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0132.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0132.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0132.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caeb90 [0132.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0132.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0132.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0132.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0132.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0132.123] WriteFile (in: hFile=0x171c, lpBuffer=0x7caeb90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba0fd50, lpOverlapped=0x0 | out: lpBuffer=0x7caeb90*, lpNumberOfBytesWritten=0xba0fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0134.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caeb90) returned 1 [0134.620] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x403800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.620] ReadFile (in: hFile=0x171c, lpBuffer=0x7cbdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba0fd50, lpOverlapped=0x0 | out: lpBuffer=0x7cbdbb0*, lpNumberOfBytesRead=0xba0fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0134.760] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x403800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49698 [0134.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e418 [0134.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54098 [0134.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54098) returned 1 [0134.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0134.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54098 [0134.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54250 [0134.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54250) returned 1 [0134.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0134.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49698) returned 1 [0134.761] WriteFile (in: hFile=0x171c, lpBuffer=0x7c9bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba0fd50, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesWritten=0xba0fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0136.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0136.021] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x8028f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.021] ReadFile (in: hFile=0x171c, lpBuffer=0x7cbdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba0fd50, lpOverlapped=0x0 | out: lpBuffer=0x7cbdbb0*, lpNumberOfBytesRead=0xba0fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0136.065] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x8028f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55fd0 [0136.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51728 [0136.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0136.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0136.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0136.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0136.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0136.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e80) returned 1 [0136.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0136.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55fd0) returned 1 [0136.066] WriteFile (in: hFile=0x171c, lpBuffer=0x7c9bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba0fd50, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesWritten=0xba0fd50*=0x3c00, lpOverlapped=0x0) returned 1 [0139.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0139.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee05e8 [0139.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0139.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37710 [0139.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0139.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0139.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0139.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dba8) returned 1 [0139.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84df8) returned 1 [0139.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e0aac0 [0139.969] SetFilePointerEx (in: hFile=0x171c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.969] WriteFile (in: hFile=0x171c, lpBuffer=0x3e0aac0*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0xba0fdd0, lpOverlapped=0x0 | out: lpBuffer=0x3e0aac0*, lpNumberOfBytesWritten=0xba0fdd0*=0x148, lpOverlapped=0x0) returned 1 [0141.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e494a0 [0141.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b978 [0141.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0141.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0141.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e81400 [0141.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0141.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0141.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0141.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0141.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e494a0) returned 1 [0141.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x3e79870 [0141.868] sprintf (in: _Dest=0x3e79870, _Format="%c%c" | out: _Dest="f8") returned 2 [0141.868] sprintf (in: _Dest=0x3e79872, _Format="%c%c" | out: _Dest="09") returned 2 [0141.868] sprintf (in: _Dest=0x3e79874, _Format="%c%c" | out: _Dest="dc") returned 2 [0141.868] sprintf (in: _Dest=0x3e79876, _Format="%c%c" | out: _Dest="50") returned 2 [0141.868] sprintf (in: _Dest=0x3e79878, _Format="%c%c" | out: _Dest="78") returned 2 [0141.868] sprintf (in: _Dest=0x3e7987a, _Format="%c%c" | out: _Dest="b1") returned 2 [0141.868] sprintf (in: _Dest=0x3e7987c, _Format="%c%c" | out: _Dest="dd") returned 2 [0141.868] sprintf (in: _Dest=0x3e7987e, _Format="%c%c" | out: _Dest="81") returned 2 [0141.868] sprintf (in: _Dest=0x3e79880, _Format="%c%c" | out: _Dest="a7") returned 2 [0141.868] sprintf (in: _Dest=0x3e79882, _Format="%c%c" | out: _Dest="b1") returned 2 [0141.868] sprintf (in: _Dest=0x3e79884, _Format="%c%c" | out: _Dest="6e") returned 2 [0141.869] sprintf (in: _Dest=0x3e79886, _Format="%c%c" | out: _Dest="19") returned 2 [0141.869] sprintf (in: _Dest=0x3e79888, _Format="%c%c" | out: _Dest="fc") returned 2 [0141.869] sprintf (in: _Dest=0x3e7988a, _Format="%c%c" | out: _Dest="dd") returned 2 [0141.869] sprintf (in: _Dest=0x3e7988c, _Format="%c%c" | out: _Dest="5a") returned 2 [0141.869] sprintf (in: _Dest=0x3e7988e, _Format="%c%c" | out: _Dest="41") returned 2 [0141.869] sprintf (in: _Dest=0x3e79890, _Format="%c%c" | out: _Dest="be") returned 2 [0141.869] sprintf (in: _Dest=0x3e79892, _Format="%c%c" | out: _Dest="ec") returned 2 [0141.869] sprintf (in: _Dest=0x3e79894, _Format="%c%c" | out: _Dest="b7") returned 2 [0141.869] sprintf (in: _Dest=0x3e79896, _Format="%c%c" | out: _Dest="23") returned 2 [0141.869] sprintf (in: _Dest=0x3e79898, _Format="%c%c" | out: _Dest="e6") returned 2 [0141.869] sprintf (in: _Dest=0x3e7989a, _Format="%c%c" | out: _Dest="64") returned 2 [0141.869] RtlInitAnsiString (in: DestinationString=0xba0fd58, SourceString="f809dc5078b1dd81a7b16e19fcdd5a41beecb723e664" | out: DestinationString="f809dc5078b1dd81a7b16e19fcdd5a41beecb723e664") [0141.869] RtlAnsiStringToUnicodeString (in: DestinationString=0xba0fd50, SourceString="f809dc5078b1dd81a7b16e19fcdd5a41beecb723e664", AllocateDestinationString=1 | out: DestinationString="f809dc5078b1dd81a7b16e19fcdd5a41beecb723e664") returned 0x0 [0141.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee08c0 [0141.869] wcscat (in: _Dest=0x3e3b978, _Source="f809dc5078b" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\f809dc5078b") returned="C:\\Users\\Public\\Music\\Sample Music\\f809dc5078b" [0141.869] wcscat (in: _Dest=0x3e3b978, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\f809dc5078b.68814f") returned="C:\\Users\\Public\\Music\\Sample Music\\f809dc5078b.68814f" [0141.870] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Music\\Sample Music\\f809dc5078b.68814f", NtPathName=0xba0fd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Music\\Sample Music\\f809dc5078b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df30f8 [0141.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 [0141.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebc60) returned 1 [0141.889] NtQueryInformationFile (in: FileHandle=0x171c, IoStatusBlock=0xba0fd20, FileInformation=0xba0fd28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xba0fd20, FileInformation=0xba0fd28) returned 0x0 [0141.890] NtSetInformationFile (FileHandle=0x171c, IoStatusBlock=0xba0fd20, FileInformation=0xba0fd28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0141.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0141.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee08c0) returned 1 [0141.906] FlushFileBuffers (hFile=0x171c) returned 1 [0141.908] CloseHandle (hObject=0x171c) returned 1 [0141.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3b018 [0141.920] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Users\\Public\\Music\\Sample Music\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0141.920] wcscat (in: _Dest=0x3e3b018, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\68814F-Readme.txt") returned="C:\\Users\\Public\\Music\\Sample Music\\68814F-Readme.txt" [0141.920] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\68814F-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\68814f-readme.txt")) returned 0x20 [0141.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0141.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0038) returned 1 Thread: id = 809 os_tid = 0x1480 [0129.064] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3")) returned 0x20 [0129.665] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", dwFileAttributes=0x20) returned 1 [0132.056] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x186c [0132.056] GetFileSizeEx (in: hFile=0x186c, lpFileSize=0x9bbfc3c | out: lpFileSize=0x9bbfc3c*=4113874) returned 1 [0132.057] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x3ec5ce, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.057] ReadFile (in: hFile=0x186c, lpBuffer=0x9bbfc18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9bbfc28, lpOverlapped=0x0 | out: lpBuffer=0x9bbfc18*, lpNumberOfBytesRead=0x9bbfc28*=0x4, lpOverlapped=0x0) returned 1 [0132.060] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0132.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0132.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0132.061] NtQuerySystemTime (in: CurrentTime=0x9bbfbb0 | out: CurrentTime=0x9bbfbb0*=132462177114132000) returned 0x0 [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x4a7d7470 [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x60a65d9a [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x4950496e [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x45b53d21 [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0xe69f9eb [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x5ba1bfe8 [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x153b06b1 [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x5ed0777e [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x650a330b [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x6ea08f3e [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x7d4eeeeb [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x5dd2e537 [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x1f409a4d [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x1941b368 [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x3f99ed0c [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x1ece9222 [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x33028839 [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x767a7997 [0132.061] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x1197593f [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x7a84202 [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x7b545393 [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x24195602 [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x443df6d1 [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x4d127e21 [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x3a7866f1 [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x65b6545d [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x9f7aa89 [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0xcce021a [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x671a3f32 [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x46c76278 [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x71056cbd [0132.062] RtlRandomEx (in: Seed=0x9bbfba8 | out: Seed=0x9bbfba8) returned 0x693d1b98 [0132.077] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.077] ReadFile (in: hFile=0x186c, lpBuffer=0x7c98360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9bbfbb0, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesRead=0x9bbfbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0132.082] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08778 [0132.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e850 [0132.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0132.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305beb0) returned 1 [0132.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0132.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0132.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0132.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0132.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0132.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08778) returned 1 [0132.083] WriteFile (in: hFile=0x186c, lpBuffer=0x7c9bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9bbfbb0, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesWritten=0x9bbfbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0133.236] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x1f6800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.236] ReadFile (in: hFile=0x186c, lpBuffer=0x7c98360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9bbfbb0, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesRead=0x9bbfbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0133.246] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x1f6800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07890 [0133.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0133.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0133.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0133.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0133.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0133.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0133.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0133.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0133.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0133.247] WriteFile (in: hFile=0x186c, lpBuffer=0x7c9bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9bbfbb0, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesWritten=0x9bbfbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0134.659] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x3e89d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.659] ReadFile (in: hFile=0x186c, lpBuffer=0x7c98360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9bbfbb0, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesRead=0x9bbfbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.809] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x3e89d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24a58 [0134.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e418 [0134.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54250 [0134.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54250) returned 1 [0134.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cd07d8 [0134.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54250 [0134.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0134.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0134.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0134.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a58) returned 1 [0134.810] WriteFile (in: hFile=0x186c, lpBuffer=0x7cd07d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9bbfbb0, lpOverlapped=0x0 | out: lpBuffer=0x7cd07d8*, lpNumberOfBytesWritten=0x9bbfbb0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd07d8) returned 1 [0135.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee11b0 [0135.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305beb0) returned 1 [0135.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e84308 [0135.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0135.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0135.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0135.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0135.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258a8) returned 1 [0135.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16c) returned 0x2fee7d8 [0135.071] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.071] WriteFile (in: hFile=0x186c, lpBuffer=0x2fee7d8*, nNumberOfBytesToWrite=0x16c, lpNumberOfBytesWritten=0x9bbfc30, lpOverlapped=0x0 | out: lpBuffer=0x2fee7d8*, lpNumberOfBytesWritten=0x9bbfc30*=0x16c, lpOverlapped=0x0) returned 1 [0135.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a258a8 [0135.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0135.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0135.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0135.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a25620 [0135.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0135.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0135.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1f8) returned 1 [0135.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0135.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258a8) returned 1 [0135.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x75) returned 0x2fcb488 [0135.073] sprintf (in: _Dest=0x2fcb488, _Format="%c%c" | out: _Dest="bb") returned 2 [0135.073] sprintf (in: _Dest=0x2fcb48a, _Format="%c%c" | out: _Dest="cc") returned 2 [0135.073] sprintf (in: _Dest=0x2fcb48c, _Format="%c%c" | out: _Dest="ce") returned 2 [0135.073] sprintf (in: _Dest=0x2fcb48e, _Format="%c%c" | out: _Dest="91") returned 2 [0135.073] sprintf (in: _Dest=0x2fcb490, _Format="%c%c" | out: _Dest="d5") returned 2 [0135.073] sprintf (in: _Dest=0x2fcb492, _Format="%c%c" | out: _Dest="d0") returned 2 [0135.073] sprintf (in: _Dest=0x2fcb494, _Format="%c%c" | out: _Dest="c1") returned 2 [0135.073] sprintf (in: _Dest=0x2fcb496, _Format="%c%c" | out: _Dest="00") returned 2 [0135.073] sprintf (in: _Dest=0x2fcb498, _Format="%c%c" | out: _Dest="8e") returned 2 [0135.073] sprintf (in: _Dest=0x2fcb49a, _Format="%c%c" | out: _Dest="da") returned 2 [0135.073] sprintf (in: _Dest=0x2fcb49c, _Format="%c%c" | out: _Dest="09") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb49e, _Format="%c%c" | out: _Dest="ee") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4a0, _Format="%c%c" | out: _Dest="60") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4a2, _Format="%c%c" | out: _Dest="d6") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4a4, _Format="%c%c" | out: _Dest="79") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4a6, _Format="%c%c" | out: _Dest="80") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4a8, _Format="%c%c" | out: _Dest="d3") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4aa, _Format="%c%c" | out: _Dest="2a") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4ac, _Format="%c%c" | out: _Dest="29") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4ae, _Format="%c%c" | out: _Dest="d8") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4b0, _Format="%c%c" | out: _Dest="20") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4b2, _Format="%c%c" | out: _Dest="dd") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4b4, _Format="%c%c" | out: _Dest="bc") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4b6, _Format="%c%c" | out: _Dest="a9") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4b8, _Format="%c%c" | out: _Dest="dd") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4ba, _Format="%c%c" | out: _Dest="d7") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4bc, _Format="%c%c" | out: _Dest="92") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4be, _Format="%c%c" | out: _Dest="81") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4c0, _Format="%c%c" | out: _Dest="9f") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4c2, _Format="%c%c" | out: _Dest="4e") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4c4, _Format="%c%c" | out: _Dest="1c") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4c6, _Format="%c%c" | out: _Dest="d7") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4c8, _Format="%c%c" | out: _Dest="91") returned 2 [0135.074] sprintf (in: _Dest=0x2fcb4ca, _Format="%c%c" | out: _Dest="3f") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4cc, _Format="%c%c" | out: _Dest="93") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4ce, _Format="%c%c" | out: _Dest="03") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4d0, _Format="%c%c" | out: _Dest="d4") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4d2, _Format="%c%c" | out: _Dest="34") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4d4, _Format="%c%c" | out: _Dest="13") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4d6, _Format="%c%c" | out: _Dest="f6") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4d8, _Format="%c%c" | out: _Dest="37") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4da, _Format="%c%c" | out: _Dest="79") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4dc, _Format="%c%c" | out: _Dest="f5") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4de, _Format="%c%c" | out: _Dest="df") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4e0, _Format="%c%c" | out: _Dest="64") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4e2, _Format="%c%c" | out: _Dest="bb") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4e4, _Format="%c%c" | out: _Dest="60") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4e6, _Format="%c%c" | out: _Dest="08") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4e8, _Format="%c%c" | out: _Dest="3f") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4ea, _Format="%c%c" | out: _Dest="80") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4ec, _Format="%c%c" | out: _Dest="df") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4ee, _Format="%c%c" | out: _Dest="51") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4f0, _Format="%c%c" | out: _Dest="0c") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4f2, _Format="%c%c" | out: _Dest="ca") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4f4, _Format="%c%c" | out: _Dest="a6") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4f6, _Format="%c%c" | out: _Dest="73") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4f8, _Format="%c%c" | out: _Dest="16") returned 2 [0135.075] sprintf (in: _Dest=0x2fcb4fa, _Format="%c%c" | out: _Dest="68") returned 2 [0135.076] RtlInitAnsiString (in: DestinationString=0x9bbfbb8, SourceString="bbccce91d5d0c1008eda09ee60d67980d32a29d820ddbca9ddd792819f4e1cd7913f9303d43413f63779f5df64bb60083f80df510ccaa6731668" | out: DestinationString="bbccce91d5d0c1008eda09ee60d67980d32a29d820ddbca9ddd792819f4e1cd7913f9303d43413f63779f5df64bb60083f80df510ccaa6731668") [0135.076] RtlAnsiStringToUnicodeString (in: DestinationString=0x9bbfbb0, SourceString="bbccce91d5d0c1008eda09ee60d67980d32a29d820ddbca9ddd792819f4e1cd7913f9303d43413f63779f5df64bb60083f80df510ccaa6731668", AllocateDestinationString=1 | out: DestinationString="bbccce91d5d0c1008eda09ee60d67980d32a29d820ddbca9ddd792819f4e1cd7913f9303d43413f63779f5df64bb60083f80df510ccaa6731668") returned 0x0 [0135.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dad750 [0135.076] wcscat (in: _Dest=0x3eb73b0, _Source="bbccce91d5d0c1008eda09ee60d67" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\bbccce91d5d0c1008eda09ee60d67") returned="C:\\Users\\Public\\Music\\Sample Music\\bbccce91d5d0c1008eda09ee60d67" [0135.076] wcscat (in: _Dest=0x3eb73b0, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\bbccce91d5d0c1008eda09ee60d67.68814f") returned="C:\\Users\\Public\\Music\\Sample Music\\bbccce91d5d0c1008eda09ee60d67.68814f" [0135.076] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Music\\Sample Music\\bbccce91d5d0c1008eda09ee60d67.68814f", NtPathName=0x9bbfba8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Music\\Sample Music\\bbccce91d5d0c1008eda09ee60d67.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0135.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c6e8 [0135.076] NtSetInformationFile (FileHandle=0x186c, IoStatusBlock=0x9bbfbb0, FileInformation=0x35c6e8, Length=0xa6, FileInformationClass=0xa) returned 0x0 [0135.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 [0135.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33860) returned 1 [0135.078] NtQueryInformationFile (in: FileHandle=0x186c, IoStatusBlock=0x9bbfb80, FileInformation=0x9bbfb88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9bbfb80, FileInformation=0x9bbfb88) returned 0x0 [0135.078] NtSetInformationFile (FileHandle=0x186c, IoStatusBlock=0x9bbfb80, FileInformation=0x9bbfb88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0135.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb73b0) returned 1 [0135.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad750) returned 1 [0135.080] FlushFileBuffers (hFile=0x186c) returned 1 [0135.677] CloseHandle (hObject=0x186c) returned 1 [0135.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3b018 [0135.678] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Users\\Public\\Music\\Sample Music\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0135.678] wcscat (in: _Dest=0x3e3b018, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\68814F-Readme.txt") returned="C:\\Users\\Public\\Music\\Sample Music\\68814F-Readme.txt" [0135.678] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\68814F-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\68814f-readme.txt")) returned 0xffffffff [0135.678] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\68814F-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x186c [0135.678] WriteFile (in: hFile=0x186c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9bbfbc4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9bbfbc4*=0x8b9, lpOverlapped=0x0) returned 1 [0135.680] CloseHandle (hObject=0x186c) returned 1 [0135.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0135.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 810 os_tid = 0x1484 [0129.065] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3")) returned 0x20 [0131.971] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", dwFileAttributes=0x20) returned 1 [0131.972] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc44 [0131.972] GetFileSizeEx (in: hFile=0xc44, lpFileSize=0x965f8ac | out: lpFileSize=0x965f8ac*=4842585) returned 1 [0131.972] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x49e455, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.972] ReadFile (in: hFile=0xc44, lpBuffer=0x965f888, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x965f898, lpOverlapped=0x0 | out: lpBuffer=0x965f888*, lpNumberOfBytesRead=0x965f898*=0x4, lpOverlapped=0x0) returned 1 [0131.975] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0131.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0131.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0131.975] NtQuerySystemTime (in: CurrentTime=0x965f820 | out: CurrentTime=0x965f820*=132462177113352000) returned 0x0 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x175dedb [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x51ccc826 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x401691b2 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x5579b95b [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x2e483ccb [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x4adfd574 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x74d0dc79 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x304a39d5 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x7f52ab85 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x499cf3ed [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x119c7865 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x396b2ff5 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x420a589a [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x39616270 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x58570e47 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x574f43fc [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x4d0af164 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0xc2ff058 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x1518278b [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x5eb47c35 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x2324892 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x62c36a64 [0131.976] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x5be46120 [0131.977] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x8448854 [0131.977] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x2e0e9c00 [0131.977] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x30e153d [0131.977] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x2ccd0d67 [0131.977] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0xdc6930 [0131.977] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x51c23321 [0131.977] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x5a661d4e [0131.977] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x7c54c22c [0131.977] RtlRandomEx (in: Seed=0x965f818 | out: Seed=0x965f818) returned 0x5c6d37ff [0131.990] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.990] ReadFile (in: hFile=0xc44, lpBuffer=0x7cc53c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x965f820, lpOverlapped=0x0 | out: lpBuffer=0x7cc53c0*, lpNumberOfBytesRead=0x965f820*=0x3c00, lpOverlapped=0x0) returned 1 [0131.993] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a257d0 [0131.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e850 [0131.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0131.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0131.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cc8fc8 [0131.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0131.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0131.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305beb0) returned 1 [0131.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 [0131.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a257d0) returned 1 [0131.994] WriteFile (in: hFile=0xc44, lpBuffer=0x7cc8fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x965f820, lpOverlapped=0x0 | out: lpBuffer=0x7cc8fc8*, lpNumberOfBytesWritten=0x965f820*=0x3c00, lpOverlapped=0x0) returned 1 [0135.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc8fc8) returned 1 [0135.004] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x250800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.004] ReadFile (in: hFile=0xc44, lpBuffer=0x7cc53c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x965f820, lpOverlapped=0x0 | out: lpBuffer=0x7cc53c0*, lpNumberOfBytesRead=0x965f820*=0x3c00, lpOverlapped=0x0) returned 1 [0135.068] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x250800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a258a8 [0135.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0135.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0135.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2e8) returned 1 [0135.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cc8fc8 [0135.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0135.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0135.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0135.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0135.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258a8) returned 1 [0135.069] WriteFile (in: hFile=0xc44, lpBuffer=0x7cc8fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x965f820, lpOverlapped=0x0 | out: lpBuffer=0x7cc8fc8*, lpNumberOfBytesWritten=0x965f820*=0x3c00, lpOverlapped=0x0) returned 1 [0137.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc8fc8) returned 1 [0137.051] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x49a859, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.051] ReadFile (in: hFile=0xc44, lpBuffer=0x7cc53c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x965f820, lpOverlapped=0x0 | out: lpBuffer=0x7cc53c0*, lpNumberOfBytesRead=0x965f820*=0x3c00, lpOverlapped=0x0) returned 1 [0137.054] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x49a859, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e497b8 [0137.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3de00 [0137.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0137.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0137.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cc8fc8 [0137.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0137.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0137.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3538) returned 1 [0137.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0137.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e497b8) returned 1 [0137.055] WriteFile (in: hFile=0xc44, lpBuffer=0x7cc8fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x965f820, lpOverlapped=0x0 | out: lpBuffer=0x7cc8fc8*, lpNumberOfBytesWritten=0x965f820*=0x3c00, lpOverlapped=0x0) returned 1 [0139.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc8fc8) returned 1 [0139.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f220 [0139.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0139.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dabe38 [0139.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0139.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0139.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2e8) returned 1 [0139.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0139.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ae8) returned 1 [0139.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x3e0aac0 [0139.097] SetFilePointerEx (in: hFile=0xc44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.097] WriteFile (in: hFile=0xc44, lpBuffer=0x3e0aac0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x965f8a0, lpOverlapped=0x0 | out: lpBuffer=0x3e0aac0*, lpNumberOfBytesWritten=0x965f8a0*=0x14e, lpOverlapped=0x0) returned 1 [0139.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24ae8 [0139.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0139.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0139.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2e8) returned 1 [0139.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x305c2e8 [0139.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0139.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0139.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0139.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0139.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ae8) returned 1 [0139.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x7a24ae8 [0139.099] sprintf (in: _Dest=0x7a24ae8, _Format="%c%c" | out: _Dest="56") returned 2 [0139.099] sprintf (in: _Dest=0x7a24aea, _Format="%c%c" | out: _Dest="14") returned 2 [0139.099] sprintf (in: _Dest=0x7a24aec, _Format="%c%c" | out: _Dest="94") returned 2 [0139.099] sprintf (in: _Dest=0x7a24aee, _Format="%c%c" | out: _Dest="00") returned 2 [0139.099] sprintf (in: _Dest=0x7a24af0, _Format="%c%c" | out: _Dest="99") returned 2 [0139.099] sprintf (in: _Dest=0x7a24af2, _Format="%c%c" | out: _Dest="83") returned 2 [0139.099] sprintf (in: _Dest=0x7a24af4, _Format="%c%c" | out: _Dest="82") returned 2 [0139.100] sprintf (in: _Dest=0x7a24af6, _Format="%c%c" | out: _Dest="68") returned 2 [0139.100] sprintf (in: _Dest=0x7a24af8, _Format="%c%c" | out: _Dest="9a") returned 2 [0139.100] sprintf (in: _Dest=0x7a24afa, _Format="%c%c" | out: _Dest="e7") returned 2 [0139.100] sprintf (in: _Dest=0x7a24afc, _Format="%c%c" | out: _Dest="e6") returned 2 [0139.100] sprintf (in: _Dest=0x7a24afe, _Format="%c%c" | out: _Dest="08") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b00, _Format="%c%c" | out: _Dest="e5") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b02, _Format="%c%c" | out: _Dest="b0") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b04, _Format="%c%c" | out: _Dest="65") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b06, _Format="%c%c" | out: _Dest="30") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b08, _Format="%c%c" | out: _Dest="30") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b0a, _Format="%c%c" | out: _Dest="a8") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b0c, _Format="%c%c" | out: _Dest="97") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b0e, _Format="%c%c" | out: _Dest="4f") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b10, _Format="%c%c" | out: _Dest="9c") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b12, _Format="%c%c" | out: _Dest="2e") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b14, _Format="%c%c" | out: _Dest="41") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b16, _Format="%c%c" | out: _Dest="2d") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b18, _Format="%c%c" | out: _Dest="5e") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b1a, _Format="%c%c" | out: _Dest="86") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b1c, _Format="%c%c" | out: _Dest="dc") returned 2 [0139.100] sprintf (in: _Dest=0x7a24b1e, _Format="%c%c" | out: _Dest="ec") returned 2 [0139.100] RtlInitAnsiString (in: DestinationString=0x965f828, SourceString="56149400998382689ae7e608e5b0653030a8974f9c2e412d5e86dcec" | out: DestinationString="56149400998382689ae7e608e5b0653030a8974f9c2e412d5e86dcec") [0139.100] RtlAnsiStringToUnicodeString (in: DestinationString=0x965f820, SourceString="56149400998382689ae7e608e5b0653030a8974f9c2e412d5e86dcec", AllocateDestinationString=1 | out: DestinationString="56149400998382689ae7e608e5b0653030a8974f9c2e412d5e86dcec") returned 0x0 [0139.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5f70 [0139.101] wcscat (in: _Dest=0x3da5c70, _Source="56149400998382" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\56149400998382") returned="C:\\Users\\Public\\Music\\Sample Music\\56149400998382" [0139.101] wcscat (in: _Dest=0x3da5c70, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\56149400998382.68814f") returned="C:\\Users\\Public\\Music\\Sample Music\\56149400998382.68814f" [0139.101] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Music\\Sample Music\\56149400998382.68814f", NtPathName=0x965f818, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Music\\Sample Music\\56149400998382.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0139.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45380 [0139.101] NtSetInformationFile (FileHandle=0xc44, IoStatusBlock=0x965f820, FileInformation=0x3d45380, Length=0x88, FileInformationClass=0xa) returned 0x0 [0139.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45380) returned 1 [0139.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00e78) returned 1 [0139.103] NtQueryInformationFile (in: FileHandle=0xc44, IoStatusBlock=0x965f7f0, FileInformation=0x965f7f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x965f7f0, FileInformation=0x965f7f8) returned 0x0 [0139.103] NtSetInformationFile (FileHandle=0xc44, IoStatusBlock=0x965f7f0, FileInformation=0x965f7f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0139.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5c70) returned 1 [0139.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 [0139.105] FlushFileBuffers (hFile=0xc44) returned 1 [0140.118] CloseHandle (hObject=0xc44) returned 1 [0142.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e238 [0142.893] wcscpy (in: _Dest=0x3f3e238, _Source="C:\\Users\\Public\\Music\\Sample Music\\" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\") returned="C:\\Users\\Public\\Music\\Sample Music\\" [0142.893] wcscat (in: _Dest=0x3f3e238, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Music\\Sample Music\\68814F-Readme.txt") returned="C:\\Users\\Public\\Music\\Sample Music\\68814F-Readme.txt" [0142.894] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\68814F-Readme.txt" (normalized: "c:\\users\\public\\music\\sample music\\68814f-readme.txt")) returned 0x20 [0142.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0142.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c28) returned 1 Thread: id = 811 os_tid = 0x1488 [0129.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\accessibility.properties")) returned 0x20 [0131.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties", dwFileAttributes=0x20) returned 0 [0133.294] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\accessibility.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0133.295] GetLastError () returned 0x5 [0133.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\accessibility.properties", dwFileAttributes=0x20) returned 0 [0133.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 Thread: id = 812 os_tid = 0x148c [0129.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\alt-rt.jar")) returned 0x20 [0131.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar", dwFileAttributes=0x20) returned 0 [0132.474] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\alt-rt.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.142] GetLastError () returned 0x5 [0136.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\alt-rt.jar", dwFileAttributes=0x20) returned 0 [0137.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 Thread: id = 813 os_tid = 0x1490 [0129.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a27958 [0129.067] wcscpy (in: _Dest=0x7a27958, _Source="C:\\Program Files\\Java\\jre7\\lib\\applet" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet") returned="C:\\Program Files\\Java\\jre7\\lib\\applet" [0129.067] wcscat (in: _Dest=0x7a27958, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet\\") returned="C:\\Program Files\\Java\\jre7\\lib\\applet\\" [0129.067] wcscat (in: _Dest=0x7a27958, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\applet\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\applet\\*" [0129.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0129.067] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d640 [0134.671] wcscmp (_String1=".", _String2=".") returned 0 [0134.671] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.671] wcscmp (_String1="..", _String2=".") returned 1 [0134.671] wcscmp (_String1="..", _String2="..") returned 0 [0134.671] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x677d1c40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x677d1c40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x677d1c40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.671] FindClose (in: hFindFile=0x7a2d640 | out: hFindFile=0x7a2d640) returned 1 [0134.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0134.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27958) returned 1 [0134.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48690) returned 1 Thread: id = 814 os_tid = 0x1494 [0129.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\calendars.properties")) returned 0x20 [0137.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties", dwFileAttributes=0x20) returned 0 [0137.015] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\calendars.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.015] GetLastError () returned 0x5 [0137.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\calendars.properties", dwFileAttributes=0x20) returned 0 [0137.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23760) returned 1 Thread: id = 815 os_tid = 0x1498 [0129.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\charsets.jar")) returned 0x20 [0134.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar", dwFileAttributes=0x20) returned 0 [0134.671] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\charsets.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.003] GetLastError () returned 0x5 [0137.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\charsets.jar", dwFileAttributes=0x20) returned 0 [0137.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 Thread: id = 816 os_tid = 0x149c [0129.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files\\java\\jre7\\lib\\classlist")) returned 0x20 [0136.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist", dwFileAttributes=0x20) returned 0 [0136.144] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files\\java\\jre7\\lib\\classlist"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.144] GetLastError () returned 0x5 [0136.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\classlist", dwFileAttributes=0x20) returned 0 [0136.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7328) returned 1 Thread: id = 817 os_tid = 0x14a0 [0129.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a27328 [0129.071] wcscpy (in: _Dest=0x7a27328, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0129.071] wcscat (in: _Dest=0x7a27328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0129.071] wcscat (in: _Dest=0x7a27328, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\*" [0129.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0129.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d680 [0134.670] wcscmp (_String1=".", _String2=".") returned 0 [0134.670] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.670] wcscmp (_String1="..", _String2=".") returned 1 [0134.670] wcscmp (_String1="..", _String2="..") returned 0 [0134.670] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0134.670] wcscmp (_String1="CIEXYZ.pf", _String2=".") returned 1 [0134.670] wcscmp (_String1="CIEXYZ.pf", _String2="..") returned 1 [0134.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0928 [0134.670] wcscpy (in: _Dest=0x3ee0928, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0134.670] wcscat (in: _Dest=0x3ee0928, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0134.670] wcscat (in: _Dest=0x3ee0928, _Source="CIEXYZ.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" [0138.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0138.687] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0138.687] wcscmp (_String1="GRAY.pf", _String2=".") returned 1 [0138.687] wcscmp (_String1="GRAY.pf", _String2="..") returned 1 [0138.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7148 [0138.687] wcscpy (in: _Dest=0x2fe7148, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0138.687] wcscat (in: _Dest=0x2fe7148, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0138.687] wcscat (in: _Dest=0x2fe7148, _Source="GRAY.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf" [0138.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe7148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0138.688] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0138.688] wcscmp (_String1="LINEAR_RGB.pf", _String2=".") returned 1 [0138.688] wcscmp (_String1="LINEAR_RGB.pf", _String2="..") returned 1 [0138.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26078 [0138.688] wcscpy (in: _Dest=0x7a26078, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0138.688] wcscat (in: _Dest=0x7a26078, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0138.688] wcscat (in: _Dest=0x7a26078, _Source="LINEAR_RGB.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" [0138.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc [0138.689] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0138.689] wcscmp (_String1="PYCC.pf", _String2=".") returned 1 [0138.689] wcscmp (_String1="PYCC.pf", _String2="..") returned 1 [0138.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6ba8 [0138.689] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0138.689] wcscat (in: _Dest=0x2fe6ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0138.689] wcscat (in: _Dest=0x2fe6ba8, _Source="PYCC.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf" [0138.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0138.690] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0138.691] wcscmp (_String1="sRGB.pf", _String2=".") returned 1 [0138.691] wcscmp (_String1="sRGB.pf", _String2="..") returned 1 [0138.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6a28 [0138.691] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Program Files\\Java\\jre7\\lib\\cmm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm" [0138.691] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\" [0138.691] wcscat (in: _Dest=0x2fe6a28, _Source="sRGB.pf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf") returned="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf" [0138.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0138.692] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6781df00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6781df00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6781df00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0138.692] FindClose (in: hFindFile=0x7a2d680 | out: hFindFile=0x7a2d680) returned 1 [0138.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0138.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27328) returned 1 [0138.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de67e8) returned 1 Thread: id = 818 os_tid = 0x14a4 [0129.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\content-types.properties")) returned 0x20 [0137.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties", dwFileAttributes=0x20) returned 0 [0137.009] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\content-types.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.009] GetLastError () returned 0x5 [0137.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\content-types.properties", dwFileAttributes=0x20) returned 0 [0137.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 Thread: id = 819 os_tid = 0x14a8 [0129.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre7\\lib\\currency.data")) returned 0x20 [0134.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data", dwFileAttributes=0x20) returned 0 [0134.634] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre7\\lib\\currency.data"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.142] GetLastError () returned 0x5 [0136.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\currency.data", dwFileAttributes=0x20) returned 0 [0136.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 Thread: id = 820 os_tid = 0x14ac [0129.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a27900 [0129.074] wcscpy (in: _Dest=0x7a27900, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0129.074] wcscat (in: _Dest=0x7a27900, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0129.074] wcscat (in: _Dest=0x7a27900, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\*" [0129.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0129.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7930 [0135.693] wcscmp (_String1=".", _String2=".") returned 0 [0135.694] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.694] wcscmp (_String1="..", _String2=".") returned 1 [0135.694] wcscmp (_String1="..", _String2="..") returned 0 [0135.694] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x48cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0135.694] wcscmp (_String1="ffjcext.zip", _String2=".") returned 1 [0135.694] wcscmp (_String1="ffjcext.zip", _String2="..") returned 1 [0135.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26a88 [0135.696] wcscpy (in: _Dest=0x7a26a88, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0135.696] wcscat (in: _Dest=0x7a26a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0135.696] wcscat (in: _Dest=0x7a26a88, _Source="ffjcext.zip" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip" [0140.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\ffjcext.zip")) returned 0x20 [0140.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x20) returned 0 [0140.585] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.585] GetLastError () returned 0x5 [0140.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x20) returned 0 [0140.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a88) returned 1 [0140.586] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs", cAlternateFileName="")) returned 1 [0140.586] wcscmp (_String1="jqs", _String2=".") returned 1 [0140.586] wcscmp (_String1="jqs", _String2="..") returned 1 [0140.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c08 [0140.586] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.586] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.586] wcscat (in: _Dest=0x2fe6c08, _Source="jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0140.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe64e8 [0140.586] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0140.586] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\" [0140.586] wcscat (in: _Dest=0x2fe64e8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\*" [0140.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3e90 [0140.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7830 [0140.601] wcscmp (_String1=".", _String2=".") returned 0 [0140.601] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.601] wcscmp (_String1="..", _String2=".") returned 1 [0140.601] wcscmp (_String1="..", _String2="..") returned 0 [0140.601] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.conf", cAlternateFileName="JQS~1.CON")) returned 1 [0140.601] wcscmp (_String1="jqs.conf", _String2=".") returned 1 [0140.601] wcscmp (_String1="jqs.conf", _String2="..") returned 1 [0140.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a393b0 [0140.601] wcscpy (in: _Dest=0x7a393b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0140.601] wcscat (in: _Dest=0x7a393b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\" [0140.601] wcscat (in: _Dest=0x7a393b0, _Source="jqs.conf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" [0140.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf")) returned 0x20 [0140.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf", dwFileAttributes=0x20) returned 0 [0140.602] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.602] GetLastError () returned 0x5 [0140.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf", dwFileAttributes=0x20) returned 0 [0140.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a393b0) returned 1 [0140.602] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 1 [0140.602] wcscmp (_String1="jqsmessages.properties", _String2=".") returned 1 [0140.602] wcscmp (_String1="jqsmessages.properties", _String2="..") returned 1 [0140.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0140.602] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs" [0140.602] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\" [0140.602] wcscat (in: _Dest=0x3df1b98, _Source="jqsmessages.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" [0140.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties")) returned 0x20 [0140.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties", dwFileAttributes=0x20) returned 0 [0140.602] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.603] GetLastError () returned 0x5 [0140.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties", dwFileAttributes=0x20) returned 0 [0140.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0140.603] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 0 [0140.603] FindClose (in: hFindFile=0x7ad7830 | out: hFindFile=0x7ad7830) returned 1 [0140.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3e90) returned 1 [0140.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0140.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0140.603] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0140.603] wcscmp (_String1="messages.properties", _String2=".") returned 1 [0140.604] wcscmp (_String1="messages.properties", _String2="..") returned 1 [0140.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da65f0 [0140.604] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.604] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.604] wcscat (in: _Dest=0x3da65f0, _Source="messages.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties" [0140.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages.properties")) returned 0x20 [0140.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties", dwFileAttributes=0x20) returned 0 [0140.604] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.604] GetLastError () returned 0x5 [0140.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages.properties", dwFileAttributes=0x20) returned 0 [0140.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 [0140.605] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67844060, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0140.605] wcscmp (_String1="messages_de.properties", _String2=".") returned 1 [0140.605] wcscmp (_String1="messages_de.properties", _String2="..") returned 1 [0140.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c180 [0140.605] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.605] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.605] wcscat (in: _Dest=0x3f3c180, _Source="messages_de.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties" [0140.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_de.properties")) returned 0x20 [0140.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x20) returned 0 [0140.628] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.629] GetLastError () returned 0x5 [0140.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x20) returned 0 [0140.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.629] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67844060, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67844060, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67890320, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0140.629] wcscmp (_String1="messages_es.properties", _String2=".") returned 1 [0140.629] wcscmp (_String1="messages_es.properties", _String2="..") returned 1 [0140.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c180 [0140.629] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.629] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.629] wcscat (in: _Dest=0x3f3c180, _Source="messages_es.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties" [0140.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_es.properties")) returned 0x20 [0140.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x20) returned 0 [0140.629] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.630] GetLastError () returned 0x5 [0140.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x20) returned 0 [0140.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.630] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67890320, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67890320, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67890320, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0140.630] wcscmp (_String1="messages_fr.properties", _String2=".") returned 1 [0140.630] wcscmp (_String1="messages_fr.properties", _String2="..") returned 1 [0140.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c180 [0140.630] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.630] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.630] wcscat (in: _Dest=0x3f3c180, _Source="messages_fr.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties" [0140.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_fr.properties")) returned 0x20 [0140.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x20) returned 0 [0140.630] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.631] GetLastError () returned 0x5 [0140.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x20) returned 0 [0140.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.631] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67890320, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67890320, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0140.631] wcscmp (_String1="messages_it.properties", _String2=".") returned 1 [0140.631] wcscmp (_String1="messages_it.properties", _String2="..") returned 1 [0140.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c180 [0140.631] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.631] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.631] wcscat (in: _Dest=0x3f3c180, _Source="messages_it.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties" [0140.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_it.properties")) returned 0x20 [0140.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x20) returned 0 [0140.655] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.655] GetLastError () returned 0x5 [0140.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x20) returned 0 [0140.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.655] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0140.655] wcscmp (_String1="messages_ja.properties", _String2=".") returned 1 [0140.655] wcscmp (_String1="messages_ja.properties", _String2="..") returned 1 [0140.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c180 [0140.655] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.655] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.655] wcscat (in: _Dest=0x3f3c180, _Source="messages_ja.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties" [0140.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ja.properties")) returned 0x20 [0140.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x20) returned 0 [0140.656] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.656] GetLastError () returned 0x5 [0140.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x20) returned 0 [0140.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.656] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1657, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0140.656] wcscmp (_String1="messages_ko.properties", _String2=".") returned 1 [0140.656] wcscmp (_String1="messages_ko.properties", _String2="..") returned 1 [0140.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c180 [0140.656] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.656] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.656] wcscat (in: _Dest=0x3f3c180, _Source="messages_ko.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties" [0140.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ko.properties")) returned 0x20 [0140.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x20) returned 0 [0140.657] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.657] GetLastError () returned 0x5 [0140.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x20) returned 0 [0140.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.657] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0140.657] wcscmp (_String1="messages_pt_BR.properties", _String2=".") returned 1 [0140.657] wcscmp (_String1="messages_pt_BR.properties", _String2="..") returned 1 [0140.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c180 [0140.657] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.658] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.658] wcscat (in: _Dest=0x3f3c180, _Source="messages_pt_BR.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" [0140.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_pt_br.properties")) returned 0x20 [0140.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x20) returned 0 [0140.658] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.658] GetLastError () returned 0x5 [0140.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x20) returned 0 [0140.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.658] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0140.658] wcscmp (_String1="messages_sv.properties", _String2=".") returned 1 [0140.658] wcscmp (_String1="messages_sv.properties", _String2="..") returned 1 [0140.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c180 [0140.659] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.659] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.659] wcscat (in: _Dest=0x3f3c180, _Source="messages_sv.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties" [0140.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_sv.properties")) returned 0x20 [0140.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x20) returned 0 [0140.674] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.674] GetLastError () returned 0x5 [0140.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x20) returned 0 [0140.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.674] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0140.674] wcscmp (_String1="messages_zh_CN.properties", _String2=".") returned 1 [0140.674] wcscmp (_String1="messages_zh_CN.properties", _String2="..") returned 1 [0140.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c180 [0140.674] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.674] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.674] wcscat (in: _Dest=0x3f3c180, _Source="messages_zh_CN.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" [0140.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20 [0140.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x20) returned 0 [0140.675] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.675] GetLastError () returned 0x5 [0140.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x20) returned 0 [0140.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.675] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0140.675] wcscmp (_String1="messages_zh_HK.properties", _String2=".") returned 1 [0140.675] wcscmp (_String1="messages_zh_HK.properties", _String2="..") returned 1 [0140.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c180 [0140.675] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.675] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.675] wcscat (in: _Dest=0x3f3c180, _Source="messages_zh_HK.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" [0140.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20 [0140.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x20) returned 0 [0140.676] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.676] GetLastError () returned 0x5 [0140.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x20) returned 0 [0140.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.676] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0140.676] wcscmp (_String1="messages_zh_TW.properties", _String2=".") returned 1 [0140.676] wcscmp (_String1="messages_zh_TW.properties", _String2="..") returned 1 [0140.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c180 [0140.676] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.676] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.676] wcscat (in: _Dest=0x3f3c180, _Source="messages_zh_TW.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" [0140.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20 [0140.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x20) returned 0 [0140.677] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.677] GetLastError () returned 0x5 [0140.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x20) returned 0 [0140.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0140.677] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0140.677] wcscmp (_String1="splash.gif", _String2=".") returned 1 [0140.677] wcscmp (_String1="splash.gif", _String2="..") returned 1 [0140.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a22ff0 [0140.677] wcscpy (in: _Dest=0x7a22ff0, _Source="C:\\Program Files\\Java\\jre7\\lib\\deploy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy" [0140.678] wcscat (in: _Dest=0x7a22ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\" [0140.678] wcscat (in: _Dest=0x7a22ff0, _Source="splash.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif" [0140.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\splash.gif")) returned 0x20 [0140.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif", dwFileAttributes=0x20) returned 0 [0140.678] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.678] GetLastError () returned 0x5 [0140.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy\\splash.gif", dwFileAttributes=0x20) returned 0 [0140.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 [0140.678] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 0 [0140.678] FindClose (in: hFindFile=0x7ad7930 | out: hFindFile=0x7ad7930) returned 1 [0140.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0140.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27900) returned 1 [0140.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48c68) returned 1 Thread: id = 821 os_tid = 0x14b0 [0129.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy.jar")) returned 0x20 [0134.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar", dwFileAttributes=0x20) returned 0 [0134.667] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\deploy.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.141] GetLastError () returned 0x5 [0136.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\deploy.jar", dwFileAttributes=0x20) returned 0 [0136.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe72c8) returned 1 Thread: id = 822 os_tid = 0x14b4 [0129.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a27a08 [0129.076] wcscpy (in: _Dest=0x7a27a08, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0129.076] wcscat (in: _Dest=0x7a27a08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0129.077] wcscat (in: _Dest=0x7a27a08, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\*" [0129.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59308 [0129.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78f0 [0135.692] wcscmp (_String1=".", _String2=".") returned 0 [0135.692] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c1ebc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c1ebc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.693] wcscmp (_String1="..", _String2=".") returned 1 [0135.693] wcscmp (_String1="..", _String2="..") returned 0 [0135.693] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678dc5e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x678dc5e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x678dc5e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x148e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge.jar", cAlternateFileName="ACCESS~2.JAR")) returned 1 [0135.693] wcscmp (_String1="access-bridge.jar", _String2=".") returned 1 [0135.693] wcscmp (_String1="access-bridge.jar", _String2="..") returned 1 [0135.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b018 [0135.693] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0135.693] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0135.693] wcscat (in: _Dest=0x3e3b018, _Source="access-bridge.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar" [0140.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\access-bridge.jar")) returned 0x20 [0140.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar", dwFileAttributes=0x20) returned 0 [0140.527] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\access-bridge.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.527] GetLastError () returned 0x5 [0140.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\access-bridge.jar", dwFileAttributes=0x20) returned 0 [0140.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0140.527] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0140.527] wcscmp (_String1="dnsns.jar", _String2=".") returned 1 [0140.527] wcscmp (_String1="dnsns.jar", _String2="..") returned 1 [0140.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edffd0 [0140.528] wcscpy (in: _Dest=0x3edffd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0140.528] wcscat (in: _Dest=0x3edffd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0140.528] wcscat (in: _Dest=0x3edffd0, _Source="dnsns.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar" [0140.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\dnsns.jar")) returned 0x20 [0140.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar", dwFileAttributes=0x20) returned 0 [0140.528] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.528] GetLastError () returned 0x5 [0140.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\dnsns.jar", dwFileAttributes=0x20) returned 0 [0140.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edffd0) returned 1 [0140.528] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xaa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0140.528] wcscmp (_String1="jaccess.jar", _String2=".") returned 1 [0140.528] wcscmp (_String1="jaccess.jar", _String2="..") returned 1 [0140.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edffd0 [0140.529] wcscpy (in: _Dest=0x3edffd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0140.529] wcscat (in: _Dest=0x3edffd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0140.529] wcscat (in: _Dest=0x3edffd0, _Source="jaccess.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar" [0140.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\jaccess.jar")) returned 0x20 [0140.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar", dwFileAttributes=0x20) returned 0 [0140.529] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.529] GetLastError () returned 0x5 [0140.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\jaccess.jar", dwFileAttributes=0x20) returned 0 [0140.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edffd0) returned 1 [0140.530] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6994b1a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6994b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69997460, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf790d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0140.530] wcscmp (_String1="localedata.jar", _String2=".") returned 1 [0140.530] wcscmp (_String1="localedata.jar", _String2="..") returned 1 [0140.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a22ff0 [0140.530] wcscpy (in: _Dest=0x7a22ff0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0140.530] wcscat (in: _Dest=0x7a22ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0140.530] wcscat (in: _Dest=0x7a22ff0, _Source="localedata.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar" [0140.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\localedata.jar")) returned 0x20 [0140.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar", dwFileAttributes=0x20) returned 0 [0140.530] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.530] GetLastError () returned 0x5 [0140.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\localedata.jar", dwFileAttributes=0x20) returned 0 [0140.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 [0140.531] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x33d, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0140.531] wcscmp (_String1="meta-index", _String2=".") returned 1 [0140.531] wcscmp (_String1="meta-index", _String2="..") returned 1 [0140.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edffd0 [0140.531] wcscpy (in: _Dest=0x3edffd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0140.531] wcscat (in: _Dest=0x3edffd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0140.531] wcscat (in: _Dest=0x3edffd0, _Source="meta-index" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index" [0140.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\meta-index")) returned 0x20 [0140.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index", dwFileAttributes=0x20) returned 0 [0140.587] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.587] GetLastError () returned 0x5 [0140.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\meta-index", dwFileAttributes=0x20) returned 0 [0140.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edffd0) returned 1 [0140.587] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3e45, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0140.587] wcscmp (_String1="sunec.jar", _String2=".") returned 1 [0140.587] wcscmp (_String1="sunec.jar", _String2="..") returned 1 [0140.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edffd0 [0140.588] wcscpy (in: _Dest=0x3edffd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0140.588] wcscat (in: _Dest=0x3edffd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0140.588] wcscat (in: _Dest=0x3edffd0, _Source="sunec.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar" [0140.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunec.jar")) returned 0x20 [0140.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar", dwFileAttributes=0x20) returned 0 [0140.588] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.588] GetLastError () returned 0x5 [0140.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunec.jar", dwFileAttributes=0x20) returned 0 [0140.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edffd0) returned 1 [0140.588] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3057d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0140.588] wcscmp (_String1="sunjce_provider.jar", _String2=".") returned 1 [0140.589] wcscmp (_String1="sunjce_provider.jar", _String2="..") returned 1 [0140.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dba8 [0140.589] wcscpy (in: _Dest=0x3f3dba8, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0140.589] wcscat (in: _Dest=0x3f3dba8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0140.589] wcscat (in: _Dest=0x3f3dba8, _Source="sunjce_provider.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" [0140.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunjce_provider.jar")) returned 0x20 [0140.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x20) returned 0 [0140.589] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.589] GetLastError () returned 0x5 [0140.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x20) returned 0 [0140.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dba8) returned 1 [0140.589] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679288a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679288a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679288a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0140.589] wcscmp (_String1="sunmscapi.jar", _String2=".") returned 1 [0140.589] wcscmp (_String1="sunmscapi.jar", _String2="..") returned 1 [0140.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26a88 [0140.590] wcscpy (in: _Dest=0x7a26a88, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0140.590] wcscat (in: _Dest=0x7a26a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0140.590] wcscat (in: _Dest=0x7a26a88, _Source="sunmscapi.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar" [0140.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunmscapi.jar")) returned 0x20 [0140.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x20) returned 0 [0140.590] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.590] GetLastError () returned 0x5 [0140.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x20) returned 0 [0140.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a88) returned 1 [0140.590] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x39fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0140.590] wcscmp (_String1="sunpkcs11.jar", _String2=".") returned 1 [0140.590] wcscmp (_String1="sunpkcs11.jar", _String2="..") returned 1 [0140.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26a88 [0140.591] wcscpy (in: _Dest=0x7a26a88, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0140.591] wcscat (in: _Dest=0x7a26a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0140.591] wcscat (in: _Dest=0x7a26a88, _Source="sunpkcs11.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" [0140.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunpkcs11.jar")) returned 0x20 [0140.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x20) returned 0 [0140.591] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.591] GetLastError () returned 0x5 [0140.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x20) returned 0 [0140.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a88) returned 1 [0140.591] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0140.591] wcscmp (_String1="zipfs.jar", _String2=".") returned 1 [0140.591] wcscmp (_String1="zipfs.jar", _String2="..") returned 1 [0140.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edffd0 [0140.591] wcscpy (in: _Dest=0x3edffd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\ext" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext") returned="C:\\Program Files\\Java\\jre7\\lib\\ext" [0140.592] wcscat (in: _Dest=0x3edffd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\" [0140.592] wcscat (in: _Dest=0x3edffd0, _Source="zipfs.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar" [0140.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\zipfs.jar")) returned 0x20 [0140.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar", dwFileAttributes=0x20) returned 0 [0140.592] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.592] GetLastError () returned 0x5 [0140.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\ext\\zipfs.jar", dwFileAttributes=0x20) returned 0 [0140.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edffd0) returned 1 [0140.592] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0140.592] FindClose (in: hFindFile=0x7ad78f0 | out: hFindFile=0x7ad78f0) returned 1 [0140.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59308) returned 1 [0140.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27a08) returned 1 [0140.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6428) returned 1 Thread: id = 823 os_tid = 0x14b8 [0129.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\flavormap.properties")) returned 0x20 [0134.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties", dwFileAttributes=0x20) returned 0 [0134.634] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\flavormap.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.038] GetLastError () returned 0x5 [0136.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\flavormap.properties", dwFileAttributes=0x20) returned 0 [0136.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23140) returned 1 Thread: id = 824 os_tid = 0x14bc [0129.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.bfc")) returned 0x20 [0136.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc", dwFileAttributes=0x20) returned 0 [0136.040] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.004] GetLastError () returned 0x5 [0137.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.bfc", dwFileAttributes=0x20) returned 0 [0137.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f220) returned 1 Thread: id = 825 os_tid = 0x14c0 [0129.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.properties.src")) returned 0x20 [0137.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src", dwFileAttributes=0x20) returned 0 [0137.012] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre7\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.012] GetLastError () returned 0x5 [0137.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fontconfig.properties.src", dwFileAttributes=0x20) returned 0 [0137.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6170) returned 1 Thread: id = 826 os_tid = 0x14c4 [0129.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a279b0 [0129.081] wcscpy (in: _Dest=0x7a279b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0129.081] wcscat (in: _Dest=0x7a279b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0129.081] wcscat (in: _Dest=0x7a279b0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\*" [0129.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58e38 [0129.082] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7970 [0135.818] wcscmp (_String1=".", _String2=".") returned 0 [0135.818] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.818] wcscmp (_String1="..", _String2=".") returned 1 [0135.818] wcscmp (_String1="..", _String2="..") returned 0 [0135.818] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0135.818] wcscmp (_String1="LucidaBrightDemiBold.ttf", _String2=".") returned 1 [0135.818] wcscmp (_String1="LucidaBrightDemiBold.ttf", _String2="..") returned 1 [0135.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8e78 [0135.818] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0135.818] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0135.819] wcscat (in: _Dest=0x3eb8e78, _Source="LucidaBrightDemiBold.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" [0140.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20 [0140.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0140.621] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.622] GetLastError () returned 0x5 [0140.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0140.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 [0140.622] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0140.622] wcscmp (_String1="LucidaBrightDemiItalic.ttf", _String2=".") returned 1 [0140.622] wcscmp (_String1="LucidaBrightDemiItalic.ttf", _String2="..") returned 1 [0140.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8e78 [0140.622] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0140.622] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0140.622] wcscat (in: _Dest=0x3eb8e78, _Source="LucidaBrightDemiItalic.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" [0140.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20 [0140.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x20) returned 0 [0140.624] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.624] GetLastError () returned 0x5 [0140.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x20) returned 0 [0140.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 [0140.624] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0140.624] wcscmp (_String1="LucidaBrightItalic.ttf", _String2=".") returned 1 [0140.625] wcscmp (_String1="LucidaBrightItalic.ttf", _String2="..") returned 1 [0140.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da65f0 [0140.625] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0140.625] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0140.625] wcscat (in: _Dest=0x3da65f0, _Source="LucidaBrightItalic.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" [0140.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20 [0140.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x20) returned 0 [0140.646] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.646] GetLastError () returned 0x5 [0140.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x20) returned 0 [0140.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 [0140.646] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0140.646] wcscmp (_String1="LucidaBrightRegular.ttf", _String2=".") returned 1 [0140.646] wcscmp (_String1="LucidaBrightRegular.ttf", _String2="..") returned 1 [0140.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d4a0 [0140.646] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0140.646] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0140.646] wcscat (in: _Dest=0x3f3d4a0, _Source="LucidaBrightRegular.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" [0140.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20 [0140.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x20) returned 0 [0140.647] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.647] GetLastError () returned 0x5 [0140.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x20) returned 0 [0140.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 [0140.647] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0140.647] wcscmp (_String1="LucidaSansDemiBold.ttf", _String2=".") returned 1 [0140.647] wcscmp (_String1="LucidaSansDemiBold.ttf", _String2="..") returned 1 [0140.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da65f0 [0140.647] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0140.647] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0140.647] wcscat (in: _Dest=0x3da65f0, _Source="LucidaSansDemiBold.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" [0140.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20 [0140.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0140.648] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.648] GetLastError () returned 0x5 [0140.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x20) returned 0 [0140.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 [0140.648] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6794ea00, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6794ea00, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6794ea00, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0140.648] wcscmp (_String1="LucidaSansRegular.ttf", _String2=".") returned 1 [0140.648] wcscmp (_String1="LucidaSansRegular.ttf", _String2="..") returned 1 [0140.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da65f0 [0140.648] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0140.648] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0140.648] wcscat (in: _Dest=0x3da65f0, _Source="LucidaSansRegular.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" [0140.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20 [0140.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x20) returned 0 [0140.649] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.649] GetLastError () returned 0x5 [0140.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x20) returned 0 [0140.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 [0140.649] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0140.649] wcscmp (_String1="LucidaTypewriterBold.ttf", _String2=".") returned 1 [0140.649] wcscmp (_String1="LucidaTypewriterBold.ttf", _String2="..") returned 1 [0140.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d4a0 [0140.649] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0140.649] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0140.650] wcscat (in: _Dest=0x3f3d4a0, _Source="LucidaTypewriterBold.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" [0140.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20 [0140.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x20) returned 0 [0140.650] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.650] GetLastError () returned 0x5 [0140.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x20) returned 0 [0140.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 [0140.650] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0140.650] wcscmp (_String1="LucidaTypewriterRegular.ttf", _String2=".") returned 1 [0140.650] wcscmp (_String1="LucidaTypewriterRegular.ttf", _String2="..") returned 1 [0140.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df30f8 [0140.650] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\fonts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts" [0140.651] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\" [0140.651] wcscat (in: _Dest=0x3df30f8, _Source="LucidaTypewriterRegular.ttf" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" [0140.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20 [0140.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x20) returned 0 [0140.651] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.651] GetLastError () returned 0x5 [0140.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x20) returned 0 [0140.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 [0140.651] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0140.651] FindClose (in: hFindFile=0x7ad7970 | out: hFindFile=0x7ad7970) returned 1 [0140.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58e38) returned 1 [0140.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a279b0) returned 1 [0140.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d487f0) returned 1 Thread: id = 827 os_tid = 0x14c8 [0129.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x7a27a60 [0129.083] wcscpy (in: _Dest=0x7a27a60, _Source="C:\\Program Files\\Java\\jre7\\lib\\i386" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386") returned="C:\\Program Files\\Java\\jre7\\lib\\i386" [0129.083] wcscat (in: _Dest=0x7a27a60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\" [0129.083] wcscat (in: _Dest=0x7a27a60, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\*" [0129.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1f48 [0129.083] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0134.663] wcscmp (_String1=".", _String2=".") returned 0 [0134.663] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.663] wcscmp (_String1="..", _String2=".") returned 1 [0134.663] wcscmp (_String1="..", _String2="..") returned 0 [0134.663] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0134.663] wcscmp (_String1="jvm.cfg", _String2=".") returned 1 [0134.663] wcscmp (_String1="jvm.cfg", _String2="..") returned 1 [0134.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe67e8 [0134.663] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\i386" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386") returned="C:\\Program Files\\Java\\jre7\\lib\\i386" [0134.663] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\" [0134.663] wcscat (in: _Dest=0x2fe67e8, _Source="jvm.cfg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg") returned="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg" [0138.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0138.685] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0138.685] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0138.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1f48) returned 1 [0138.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27a60) returned 1 [0138.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de65b8) returned 1 Thread: id = 828 os_tid = 0x14cc [0129.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a27ab8 [0129.084] wcscpy (in: _Dest=0x7a27ab8, _Source="C:\\Program Files\\Java\\jre7\\lib\\images" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images") returned="C:\\Program Files\\Java\\jre7\\lib\\images" [0129.085] wcscat (in: _Dest=0x7a27ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\" [0129.085] wcscat (in: _Dest=0x7a27ab8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\*" [0129.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0c08 [0129.085] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0134.662] wcscmp (_String1=".", _String2=".") returned 0 [0134.662] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.662] wcscmp (_String1="..", _String2=".") returned 1 [0134.662] wcscmp (_String1="..", _String2="..") returned 0 [0134.662] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0134.662] wcscmp (_String1="cursors", _String2=".") returned 1 [0134.662] wcscmp (_String1="cursors", _String2="..") returned 1 [0134.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0a60 [0134.662] wcscpy (in: _Dest=0x3ee0a60, _Source="C:\\Program Files\\Java\\jre7\\lib\\images" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images") returned="C:\\Program Files\\Java\\jre7\\lib\\images" [0134.663] wcscat (in: _Dest=0x3ee0a60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\" [0134.663] wcscat (in: _Dest=0x3ee0a60, _Source="cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0138.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0138.683] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0138.683] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0138.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0c08) returned 1 [0138.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27ab8) returned 1 [0138.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d488a0) returned 1 Thread: id = 829 os_tid = 0x14d0 [0129.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\javafx.properties")) returned 0x20 [0137.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties", dwFileAttributes=0x20) returned 0 [0137.014] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\javafx.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.014] GetLastError () returned 0x5 [0137.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javafx.properties", dwFileAttributes=0x20) returned 0 [0137.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 Thread: id = 830 os_tid = 0x14d4 [0129.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\javaws.jar")) returned 0x20 [0134.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar", dwFileAttributes=0x20) returned 0 [0134.662] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\javaws.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.139] GetLastError () returned 0x5 [0136.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\javaws.jar", dwFileAttributes=0x20) returned 0 [0136.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7388) returned 1 Thread: id = 831 os_tid = 0x14d8 [0129.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jce.jar")) returned 0x20 [0129.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar", dwFileAttributes=0x20) returned 0 [0129.672] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jce.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.672] GetLastError () returned 0x5 [0129.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jce.jar", dwFileAttributes=0x20) returned 0 [0129.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48848) returned 1 Thread: id = 832 os_tid = 0x14dc [0129.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a27b10 [0129.090] wcscpy (in: _Dest=0x7a27b10, _Source="C:\\Program Files\\Java\\jre7\\lib\\jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0129.090] wcscat (in: _Dest=0x7a27b10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\" [0129.090] wcscat (in: _Dest=0x7a27b10, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\*" [0129.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5e48 [0129.090] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf9d0 [0129.674] wcscmp (_String1=".", _String2=".") returned 0 [0129.674] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.674] wcscmp (_String1="..", _String2=".") returned 1 [0129.674] wcscmp (_String1="..", _String2="..") returned 0 [0129.674] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x488e, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0129.674] wcscmp (_String1="default.jfc", _String2=".") returned 1 [0129.674] wcscmp (_String1="default.jfc", _String2="..") returned 1 [0129.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e20190 [0129.674] wcscpy (in: _Dest=0x3e20190, _Source="C:\\Program Files\\Java\\jre7\\lib\\jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0129.674] wcscat (in: _Dest=0x3e20190, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\" [0129.675] wcscat (in: _Dest=0x3e20190, _Source="default.jfc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc" [0132.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e20190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0132.330] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679c0e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0132.330] wcscmp (_String1="profile.jfc", _String2=".") returned 1 [0132.330] wcscmp (_String1="profile.jfc", _String2="..") returned 1 [0132.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edf9b8 [0132.331] wcscpy (in: _Dest=0x3edf9b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\jfr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr" [0132.331] wcscat (in: _Dest=0x3edf9b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\" [0132.331] wcscat (in: _Dest=0x3edf9b8, _Source="profile.jfc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc") returned="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc" [0132.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0132.332] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x679c0e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x679c0e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x679c0e20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4863, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0132.332] FindClose (in: hFindFile=0x3dcf9d0 | out: hFindFile=0x3dcf9d0) returned 1 [0132.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e48) returned 1 [0132.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27b10) returned 1 [0132.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6388) returned 1 Thread: id = 833 os_tid = 0x14e0 [0129.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr.jar")) returned 0x20 [0137.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar", dwFileAttributes=0x20) returned 0 [0137.011] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.011] GetLastError () returned 0x5 [0137.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr.jar", dwFileAttributes=0x20) returned 0 [0137.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27118) returned 1 Thread: id = 834 os_tid = 0x14e8 [0129.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a22ff0 [0129.678] wcscpy (in: _Dest=0x7a22ff0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" [0129.678] wcscat (in: _Dest=0x7a22ff0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\" [0129.678] wcscat (in: _Dest=0x7a22ff0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\*" [0129.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea34a0 [0129.678] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0129.681] wcscmp (_String1=".", _String2=".") returned 0 [0129.681] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.681] wcscmp (_String1="..", _String2=".") returned 1 [0129.681] wcscmp (_String1="..", _String2="..") returned 0 [0129.681] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0129.681] wcscmp (_String1="10.0", _String2=".") returned 1 [0129.681] wcscmp (_String1="10.0", _String2="..") returned 1 [0129.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23ae0 [0129.681] wcscpy (in: _Dest=0x7a23ae0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat" [0129.681] wcscat (in: _Dest=0x7a23ae0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\" [0129.681] wcscat (in: _Dest=0x7a23ae0, _Source="10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0133.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1404 [0133.122] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0133.122] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0133.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea34a0) returned 1 [0133.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 [0133.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 Thread: id = 835 os_tid = 0x14ec [0129.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0129.682] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" [0129.682] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\" [0129.682] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\*" [0129.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea40a8 [0129.682] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa90 [0131.998] wcscmp (_String1=".", _String2=".") returned 0 [0131.998] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.999] wcscmp (_String1="..", _String2=".") returned 1 [0131.999] wcscmp (_String1="..", _String2="..") returned 0 [0131.999] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0131.999] wcscmp (_String1="AssetCache", _String2=".") returned 1 [0131.999] wcscmp (_String1="AssetCache", _String2="..") returned 1 [0131.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d7d0 [0131.999] wcscpy (in: _Dest=0x3f3d7d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player" [0131.999] wcscat (in: _Dest=0x3f3d7d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\" [0131.999] wcscat (in: _Dest=0x3f3d7d0, _Source="AssetCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" [0140.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0140.395] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 0 [0140.395] FindClose (in: hFindFile=0x3dcfa90 | out: hFindFile=0x3dcfa90) returned 1 [0140.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea40a8) returned 1 [0140.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a236f0) returned 1 Thread: id = 836 os_tid = 0x14f0 [0129.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23b50 [0129.683] wcscpy (in: _Dest=0x7a23b50, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights" [0129.683] wcscat (in: _Dest=0x7a23b50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\" [0129.683] wcscat (in: _Dest=0x7a23b50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\*" [0129.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4578 [0129.683] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfc10 [0132.086] wcscmp (_String1=".", _String2=".") returned 0 [0132.086] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.086] wcscmp (_String1="..", _String2=".") returned 1 [0132.086] wcscmp (_String1="..", _String2="..") returned 0 [0132.087] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.087] FindClose (in: hFindFile=0x3dcfc10 | out: hFindFile=0x3dcfc10) returned 1 [0132.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4578) returned 1 [0132.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23b50) returned 1 [0132.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23990) returned 1 Thread: id = 837 os_tid = 0x14f4 [0129.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e760 [0129.685] wcscpy (in: _Dest=0x3f3e760, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" [0129.685] wcscat (in: _Dest=0x3f3e760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\" [0129.685] wcscat (in: _Dest=0x3f3e760, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\*" [0129.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0129.685] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0131.409] wcscmp (_String1=".", _String2=".") returned 0 [0131.409] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.409] wcscmp (_String1="..", _String2=".") returned 1 [0131.409] wcscmp (_String1="..", _String2="..") returned 0 [0131.409] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0131.409] wcscmp (_String1="Dictionaries", _String2=".") returned 1 [0131.409] wcscmp (_String1="Dictionaries", _String2="..") returned 1 [0131.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9098 [0131.410] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics" [0131.410] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\" [0131.410] wcscat (in: _Dest=0x3eb9098, _Source="Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" [0132.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0132.415] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0132.416] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0132.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0132.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0132.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a70) returned 1 Thread: id = 838 os_tid = 0x14f8 [0129.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e508 [0129.686] wcscpy (in: _Dest=0x3f3e508, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2" [0129.686] wcscat (in: _Dest=0x3f3e508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\" [0129.686] wcscat (in: _Dest=0x3f3e508, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\*" [0129.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0129.686] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfc10 [0132.083] wcscmp (_String1=".", _String2=".") returned 0 [0132.083] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.083] wcscmp (_String1="..", _String2=".") returned 1 [0132.083] wcscmp (_String1="..", _String2="..") returned 0 [0132.083] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.084] FindClose (in: hFindFile=0x3dcfc10 | out: hFindFile=0x3dcfc10) returned 1 [0132.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0132.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0132.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 Thread: id = 839 os_tid = 0x14fc [0129.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23bc0 [0129.686] wcscpy (in: _Dest=0x7a23bc0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" [0129.686] wcscat (in: _Dest=0x7a23bc0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\" [0129.686] wcscat (in: _Dest=0x7a23bc0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*" [0129.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0129.686] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfbd0 [0129.687] wcscmp (_String1=".", _String2=".") returned 0 [0129.687] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.687] wcscmp (_String1="..", _String2=".") returned 1 [0129.687] wcscmp (_String1="..", _String2="..") returned 0 [0129.687] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0129.687] wcscmp (_String1="en-US", _String2=".") returned 1 [0129.687] wcscmp (_String1="en-US", _String2="..") returned 1 [0129.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e0d0 [0129.687] wcscpy (in: _Dest=0x3f3e0d0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" [0129.687] wcscat (in: _Dest=0x3f3e0d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\" [0129.687] wcscat (in: _Dest=0x3f3e0d0, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0132.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0132.335] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0132.335] FindClose (in: hFindFile=0x3dcfbd0 | out: hFindFile=0x3dcfbd0) returned 1 [0132.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0132.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23bc0) returned 1 [0132.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d888) returned 1 Thread: id = 840 os_tid = 0x1500 [0129.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc3d08 [0129.688] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0129.688] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\" [0129.688] wcscat (in: _Dest=0x3dc3d08, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" [0129.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0129.688] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf810 [0129.688] wcscmp (_String1=".", _String2=".") returned 0 [0129.688] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.688] wcscmp (_String1="..", _String2=".") returned 1 [0129.688] wcscmp (_String1="..", _String2="..") returned 0 [0129.689] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0129.689] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0129.689] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0129.689] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0129.689] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0129.689] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0129.690] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0129.690] FindClose (in: hFindFile=0x3dcf810 | out: hFindFile=0x3dcf810) returned 1 [0129.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0129.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 [0129.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 Thread: id = 841 os_tid = 0x1504 [0129.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6180 [0129.692] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0129.692] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0129.692] wcscat (in: _Dest=0x2ff6180, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*" [0129.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0129.692] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0131.209] wcscmp (_String1=".", _String2=".") returned 0 [0131.209] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.209] wcscmp (_String1="..", _String2=".") returned 1 [0131.209] wcscmp (_String1="..", _String2="..") returned 0 [0131.209] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa825f5e7, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa825f5e7, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7b99dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0131.209] wcscmp (_String1="background.png", _String2=".") returned 1 [0131.209] wcscmp (_String1="background.png", _String2="..") returned 1 [0131.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85150 [0131.210] wcscpy (in: _Dest=0x3d85150, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0131.210] wcscat (in: _Dest=0x3d85150, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0131.210] wcscat (in: _Dest=0x3d85150, _Source="background.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" [0138.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0138.642] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dad96bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1dad96bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1dad96bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0138.642] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0138.642] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0138.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85cb0 [0138.642] wcscpy (in: _Dest=0x3d85cb0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0138.642] wcscat (in: _Dest=0x3d85cb0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0138.642] wcscat (in: _Dest=0x3d85cb0, _Source="behavior.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" [0138.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0138.644] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8285746, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8285746, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7dfb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0138.644] wcscmp (_String1="device.png", _String2=".") returned 1 [0138.644] wcscmp (_String1="device.png", _String2="..") returned 1 [0138.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e38e60 [0138.644] wcscpy (in: _Dest=0x3e38e60, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0138.644] wcscat (in: _Dest=0x3e38e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0138.644] wcscat (in: _Dest=0x3e38e60, _Source="device.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" [0138.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0138.645] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82ab8a5, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82ab8a5, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0138.645] wcscmp (_String1="overlay.png", _String2=".") returned 1 [0138.645] wcscmp (_String1="overlay.png", _String2="..") returned 1 [0138.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e3a378 [0138.646] wcscpy (in: _Dest=0x3e3a378, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0138.646] wcscat (in: _Dest=0x3e3a378, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0138.646] wcscat (in: _Dest=0x3e3a378, _Source="overlay.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" [0138.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0138.647] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0138.647] wcscmp (_String1="superbar.png", _String2=".") returned 1 [0138.647] wcscmp (_String1="superbar.png", _String2="..") returned 1 [0138.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85970 [0138.647] wcscpy (in: _Dest=0x3d85970, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0138.647] wcscat (in: _Dest=0x3d85970, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0138.647] wcscat (in: _Dest=0x3d85970, _Source="superbar.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" [0138.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0138.648] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0138.649] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0138.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0138.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 [0138.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c0b8) returned 1 Thread: id = 842 os_tid = 0x1508 [0129.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7880 [0129.695] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0129.695] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0129.695] wcscat (in: _Dest=0x2ff7880, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*" [0129.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef54a8 [0129.695] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf810 [0129.695] wcscmp (_String1=".", _String2=".") returned 0 [0129.695] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.696] wcscmp (_String1="..", _String2=".") returned 1 [0129.696] wcscmp (_String1="..", _String2="..") returned 0 [0129.696] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a06b8bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2a06b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0129.696] wcscmp (_String1="background.png", _String2=".") returned 1 [0129.696] wcscmp (_String1="background.png", _String2="..") returned 1 [0129.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036d70 [0129.696] wcscpy (in: _Dest=0x3036d70, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0129.696] wcscat (in: _Dest=0x3036d70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0129.696] wcscat (in: _Dest=0x3036d70, _Source="background.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" [0132.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3036d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0132.337] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64cf1c24, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64cf1c24, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0132.337] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0132.337] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0132.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85080 [0132.337] wcscpy (in: _Dest=0x3d85080, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0132.337] wcscat (in: _Dest=0x3d85080, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0132.337] wcscat (in: _Dest=0x3d85080, _Source="behavior.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" [0132.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0132.339] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0132.339] wcscmp (_String1="watermark.png", _String2=".") returned 1 [0132.339] wcscmp (_String1="watermark.png", _String2="..") returned 1 [0132.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d84ee0 [0132.339] wcscpy (in: _Dest=0x3d84ee0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0132.339] wcscat (in: _Dest=0x3d84ee0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0132.339] wcscat (in: _Dest=0x3d84ee0, _Source="watermark.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" [0132.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0132.340] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0132.341] FindClose (in: hFindFile=0x3dcf810 | out: hFindFile=0x3dcf810) returned 1 [0132.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54a8) returned 1 [0132.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 [0132.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 843 os_tid = 0x150c [0129.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml")) returned 0x20 [0131.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0131.211] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.211] GetLastError () returned 0x5 [0131.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0131.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66258) returned 1 Thread: id = 844 os_tid = 0x1510 [0129.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml")) returned 0x20 [0131.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0131.215] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.215] GetLastError () returned 0x5 [0131.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0131.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 845 os_tid = 0x1514 [0129.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19098 [0129.698] wcscpy (in: _Dest=0x3e19098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0129.698] wcscat (in: _Dest=0x3e19098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0129.698] wcscat (in: _Dest=0x3e19098, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*" [0129.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef43d0 [0129.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0132.476] wcscmp (_String1=".", _String2=".") returned 0 [0132.476] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.476] wcscmp (_String1="..", _String2=".") returned 1 [0132.476] wcscmp (_String1="..", _String2="..") returned 0 [0132.476] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3R.SAM", cAlternateFileName="")) returned 1 [0132.476] wcscmp (_String1="ACT3R.SAM", _String2=".") returned 1 [0132.476] wcscmp (_String1="ACT3R.SAM", _String2="..") returned 1 [0132.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df30f8 [0132.476] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0132.477] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0132.477] wcscat (in: _Dest=0x3df30f8, _Source="ACT3R.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" [0139.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df30f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0139.673] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1 [0139.673] wcscmp (_String1="DELIMR.FAE", _String2=".") returned 1 [0139.673] wcscmp (_String1="DELIMR.FAE", _String2="..") returned 1 [0139.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45410 [0139.673] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.673] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.673] wcscat (in: _Dest=0x3d45410, _Source="DELIMR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" [0139.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0139.674] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x8b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1 [0139.674] wcscmp (_String1="LOCALDV.DLL", _String2=".") returned 1 [0139.675] wcscmp (_String1="LOCALDV.DLL", _String2="..") returned 1 [0139.675] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCR.SAM", cAlternateFileName="")) returned 1 [0139.675] wcscmp (_String1="ODBCR.SAM", _String2=".") returned 1 [0139.675] wcscmp (_String1="ODBCR.SAM", _String2="..") returned 1 [0139.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45380 [0139.675] wcscpy (in: _Dest=0x3d45380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.675] wcscat (in: _Dest=0x3d45380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.675] wcscat (in: _Dest=0x3d45380, _Source="ODBCR.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" [0139.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280 [0139.676] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1 [0139.676] wcscmp (_String1="OLADDR.FAE", _String2=".") returned 1 [0139.676] wcscmp (_String1="OLADDR.FAE", _String2="..") returned 1 [0139.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d459b0 [0139.676] wcscpy (in: _Dest=0x3d459b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.676] wcscat (in: _Dest=0x3d459b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.676] wcscat (in: _Dest=0x3d459b0, _Source="OLADDR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" [0139.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d459b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0139.677] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1 [0139.677] wcscmp (_String1="OLAPPTR.FAE", _String2=".") returned 1 [0139.677] wcscmp (_String1="OLAPPTR.FAE", _String2="..") returned 1 [0139.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44690 [0139.677] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.677] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.677] wcscat (in: _Dest=0x3d44690, _Source="OLAPPTR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" [0139.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2288 [0139.678] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1 [0139.678] wcscmp (_String1="OLJRNLR.FAE", _String2=".") returned 1 [0139.679] wcscmp (_String1="OLJRNLR.FAE", _String2="..") returned 1 [0139.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45920 [0139.679] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.679] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.679] wcscat (in: _Dest=0x3d45920, _Source="OLJRNLR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" [0139.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0139.680] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1 [0139.680] wcscmp (_String1="OLMAILR.FAE", _String2=".") returned 1 [0139.680] wcscmp (_String1="OLMAILR.FAE", _String2="..") returned 1 [0139.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45260 [0139.680] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.680] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.680] wcscat (in: _Dest=0x3d45260, _Source="OLMAILR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" [0139.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2290 [0139.681] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x25b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1 [0139.681] wcscmp (_String1="OLNOTER.FAE", _String2=".") returned 1 [0139.681] wcscmp (_String1="OLNOTER.FAE", _String2="..") returned 1 [0139.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45530 [0139.681] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.681] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.681] wcscat (in: _Dest=0x3d45530, _Source="OLNOTER.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" [0139.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2294 [0139.682] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1 [0139.682] wcscmp (_String1="OLR.SAM", _String2=".") returned 1 [0139.682] wcscmp (_String1="OLR.SAM", _String2="..") returned 1 [0139.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb99a0 [0139.682] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.682] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.682] wcscat (in: _Dest=0x3eb99a0, _Source="OLR.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" [0139.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0139.683] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x29b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1 [0139.683] wcscmp (_String1="OLTASKR.FAE", _String2=".") returned 1 [0139.683] wcscmp (_String1="OLTASKR.FAE", _String2="..") returned 1 [0139.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d443c0 [0139.684] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.684] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.684] wcscat (in: _Dest=0x3d443c0, _Source="OLTASKR.FAE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" [0139.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d443c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x229c [0139.685] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x31a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97R.SAM", cAlternateFileName="")) returned 1 [0139.685] wcscmp (_String1="ORG97R.SAM", _String2=".") returned 1 [0139.685] wcscmp (_String1="ORG97R.SAM", _String2="..") returned 1 [0139.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45a40 [0139.685] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.685] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.685] wcscat (in: _Dest=0x3d45a40, _Source="ORG97R.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" [0139.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a0 [0139.686] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48e56b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PABR.SAM", cAlternateFileName="")) returned 1 [0139.686] wcscmp (_String1="PABR.SAM", _String2=".") returned 1 [0139.686] wcscmp (_String1="PABR.SAM", _String2="..") returned 1 [0139.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45ad0 [0139.686] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033" [0139.686] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\" [0139.686] wcscat (in: _Dest=0x3d45ad0, _Source="PABR.SAM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM") returned="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" [0139.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0139.687] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1 [0139.688] wcscmp (_String1="TRANSMRR.DLL", _String2=".") returned 1 [0139.688] wcscmp (_String1="TRANSMRR.DLL", _String2="..") returned 1 [0139.688] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d69ea00, ftCreationTime.dwHighDateTime=0x1cab82d, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d69ea00, ftLastWriteTime.dwHighDateTime=0x1cab82d, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0 [0139.688] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0139.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0139.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19098) returned 1 [0139.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3efc0) returned 1 Thread: id = 846 os_tid = 0x1518 [0129.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam")) returned 0x20 [0132.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM", dwFileAttributes=0x20) returned 0 [0132.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.091] GetLastError () returned 0x5 [0132.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM", dwFileAttributes=0x20) returned 0 [0132.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19598) returned 1 Thread: id = 847 os_tid = 0x151c [0129.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae")) returned 0x20 [0132.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE", dwFileAttributes=0x20) returned 0 [0132.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.094] GetLastError () returned 0x5 [0132.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE", dwFileAttributes=0x20) returned 0 [0132.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bfe8) returned 1 Thread: id = 848 os_tid = 0x1520 [0129.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae")) returned 0x20 [0132.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE", dwFileAttributes=0x20) returned 0 [0132.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.096] GetLastError () returned 0x5 [0132.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE", dwFileAttributes=0x20) returned 0 [0132.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 849 os_tid = 0x1524 [0129.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam")) returned 0x20 [0132.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM", dwFileAttributes=0x20) returned 0 [0132.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.099] GetLastError () returned 0x5 [0132.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM", dwFileAttributes=0x20) returned 0 [0132.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 850 os_tid = 0x1528 [0129.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam")) returned 0x20 [0132.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM", dwFileAttributes=0x20) returned 0 [0132.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.102] GetLastError () returned 0x5 [0132.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM", dwFileAttributes=0x20) returned 0 [0132.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19198) returned 1 Thread: id = 851 os_tid = 0x152c [0129.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam")) returned 0x20 [0132.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM", dwFileAttributes=0x20) returned 0 [0132.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.104] GetLastError () returned 0x5 [0132.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM", dwFileAttributes=0x20) returned 0 [0132.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b98) returned 1 Thread: id = 852 os_tid = 0x1530 [0129.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae")) returned 0x20 [0132.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE", dwFileAttributes=0x20) returned 0 [0132.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.107] GetLastError () returned 0x5 [0132.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE", dwFileAttributes=0x20) returned 0 [0132.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 853 os_tid = 0x1534 [0129.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae")) returned 0x20 [0132.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE", dwFileAttributes=0x20) returned 0 [0132.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.110] GetLastError () returned 0x5 [0132.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE", dwFileAttributes=0x20) returned 0 [0132.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 854 os_tid = 0x1538 [0129.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae")) returned 0x20 [0132.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE", dwFileAttributes=0x20) returned 0 [0132.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.112] GetLastError () returned 0x5 [0132.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE", dwFileAttributes=0x20) returned 0 [0132.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 855 os_tid = 0x153c [0129.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae")) returned 0x20 [0132.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE", dwFileAttributes=0x20) returned 0 [0132.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.115] GetLastError () returned 0x5 [0132.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE", dwFileAttributes=0x20) returned 0 [0132.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 856 os_tid = 0x1540 [0129.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae")) returned 0x20 [0132.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE", dwFileAttributes=0x20) returned 0 [0132.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.117] GetLastError () returned 0x5 [0132.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE", dwFileAttributes=0x20) returned 0 [0132.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d858) returned 1 Thread: id = 857 os_tid = 0x1544 [0129.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae")) returned 0x20 [0132.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE", dwFileAttributes=0x20) returned 0 [0132.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.120] GetLastError () returned 0x5 [0132.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE", dwFileAttributes=0x20) returned 0 [0132.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d8e0) returned 1 Thread: id = 858 os_tid = 0x1548 [0129.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam")) returned 0x20 [0131.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM", dwFileAttributes=0x20) returned 0 [0131.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.414] GetLastError () returned 0x5 [0131.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM", dwFileAttributes=0x20) returned 0 [0131.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 859 os_tid = 0x154c [0129.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam")) returned 0x20 [0132.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM", dwFileAttributes=0x20) returned 0 [0132.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.089] GetLastError () returned 0x5 [0132.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM", dwFileAttributes=0x20) returned 0 [0132.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19d18) returned 1 Thread: id = 860 os_tid = 0x1550 [0129.721] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url")) returned 0x20 [0131.223] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url", dwFileAttributes=0x20) returned 0 [0131.223] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.223] GetLastError () returned 0x5 [0131.223] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url", dwFileAttributes=0x20) returned 0 [0131.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 Thread: id = 861 os_tid = 0x1554 [0129.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe14a8 [0129.722] wcscpy (in: _Dest=0x2fe14a8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" [0129.722] wcscat (in: _Dest=0x2fe14a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0129.722] wcscat (in: _Dest=0x2fe14a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\*" [0129.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3f00 [0129.722] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\*", lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x497212a0, ftCreationTime.dwHighDateTime=0x1d5e0b6, ftLastAccessTime.dwLowDateTime=0x15396b20, ftLastAccessTime.dwHighDateTime=0x1d5e3e8, ftLastWriteTime.dwLowDateTime=0x15396b20, ftLastWriteTime.dwHighDateTime=0x1d5e3e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf650 [0129.723] wcscmp (_String1=".", _String2=".") returned 0 [0129.723] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x497212a0, ftCreationTime.dwHighDateTime=0x1d5e0b6, ftLastAccessTime.dwLowDateTime=0x15396b20, ftLastAccessTime.dwHighDateTime=0x1d5e3e8, ftLastWriteTime.dwLowDateTime=0x15396b20, ftLastWriteTime.dwHighDateTime=0x1d5e3e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.723] wcscmp (_String1="..", _String2=".") returned 1 [0129.723] wcscmp (_String1="..", _String2="..") returned 0 [0129.723] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff22a270, ftCreationTime.dwHighDateTime=0x1d5d93d, ftLastAccessTime.dwLowDateTime=0xcd6d8250, ftLastAccessTime.dwHighDateTime=0x1d5d91e, ftLastWriteTime.dwLowDateTime=0xcd6d8250, ftLastWriteTime.dwHighDateTime=0x1d5d91e, nFileSizeHigh=0x0, nFileSizeLow=0x18bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="8TwXMCsLO.avi", cAlternateFileName="8TWXMC~1.AVI")) returned 1 [0129.723] wcscmp (_String1="8TwXMCsLO.avi", _String2=".") returned 1 [0129.723] wcscmp (_String1="8TwXMCsLO.avi", _String2="..") returned 1 [0129.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e148 [0129.723] wcscpy (in: _Dest=0x3f3e148, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" [0129.723] wcscat (in: _Dest=0x3f3e148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0129.723] wcscat (in: _Dest=0x3f3e148, _Source="8TwXMCsLO.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\8TwXMCsLO.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\8TwXMCsLO.avi" [0133.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0133.125] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca3bae50, ftCreationTime.dwHighDateTime=0x1d5e4da, ftLastAccessTime.dwLowDateTime=0xdb3c04d0, ftLastAccessTime.dwHighDateTime=0x1d5e655, ftLastWriteTime.dwLowDateTime=0xdb3c04d0, ftLastWriteTime.dwHighDateTime=0x1d5e655, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bg9 5_Jc5swwp7gG", cAlternateFileName="BG95_J~1")) returned 1 [0133.125] wcscmp (_String1="Bg9 5_Jc5swwp7gG", _String2=".") returned 1 [0133.125] wcscmp (_String1="Bg9 5_Jc5swwp7gG", _String2="..") returned 1 [0133.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0133.125] wcscpy (in: _Dest=0x3e3bae0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" [0133.125] wcscat (in: _Dest=0x3e3bae0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0133.125] wcscat (in: _Dest=0x3e3bae0, _Source="Bg9 5_Jc5swwp7gG" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG" [0133.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3bae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0133.127] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d68ee0, ftCreationTime.dwHighDateTime=0x1d5ded2, ftLastAccessTime.dwLowDateTime=0x2a14b1d0, ftLastAccessTime.dwHighDateTime=0x1d5e627, ftLastWriteTime.dwLowDateTime=0x2a14b1d0, ftLastWriteTime.dwHighDateTime=0x1d5e627, nFileSizeHigh=0x0, nFileSizeLow=0xb6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="f7Ts2m1ro.mp4", cAlternateFileName="F7TS2M~1.MP4")) returned 1 [0133.127] wcscmp (_String1="f7Ts2m1ro.mp4", _String2=".") returned 1 [0133.127] wcscmp (_String1="f7Ts2m1ro.mp4", _String2="..") returned 1 [0133.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3def0 [0133.127] wcscpy (in: _Dest=0x3f3def0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" [0133.127] wcscat (in: _Dest=0x3f3def0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0133.127] wcscat (in: _Dest=0x3f3def0, _Source="f7Ts2m1ro.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\f7Ts2m1ro.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\f7Ts2m1ro.mp4" [0133.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3def0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0133.129] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788e080, ftCreationTime.dwHighDateTime=0x1d5df7b, ftLastAccessTime.dwLowDateTime=0xf55e3e70, ftLastAccessTime.dwHighDateTime=0x1d5db18, ftLastWriteTime.dwLowDateTime=0xf55e3e70, ftLastWriteTime.dwHighDateTime=0x1d5db18, nFileSizeHigh=0x0, nFileSizeLow=0xca7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mw2zVRBiuTyI bwB3h.swf", cAlternateFileName="MW2ZVR~1.SWF")) returned 1 [0133.129] wcscmp (_String1="Mw2zVRBiuTyI bwB3h.swf", _String2=".") returned 1 [0133.129] wcscmp (_String1="Mw2zVRBiuTyI bwB3h.swf", _String2="..") returned 1 [0133.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb91a8 [0133.129] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" [0133.129] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0133.129] wcscat (in: _Dest=0x3eb91a8, _Source="Mw2zVRBiuTyI bwB3h.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Mw2zVRBiuTyI bwB3h.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Mw2zVRBiuTyI bwB3h.swf" [0133.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0133.130] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce2aa220, ftCreationTime.dwHighDateTime=0x1d5e4e2, ftLastAccessTime.dwLowDateTime=0xf7399390, ftLastAccessTime.dwHighDateTime=0x1d5e1ba, ftLastWriteTime.dwLowDateTime=0xf7399390, ftLastWriteTime.dwHighDateTime=0x1d5e1ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NIJqOm_Lj-UMW5", cAlternateFileName="NIJQOM~1")) returned 1 [0133.130] wcscmp (_String1="NIJqOm_Lj-UMW5", _String2=".") returned 1 [0133.131] wcscmp (_String1="NIJqOm_Lj-UMW5", _String2="..") returned 1 [0133.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3dfe0 [0133.131] wcscpy (in: _Dest=0x3f3dfe0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" [0133.131] wcscat (in: _Dest=0x3f3dfe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0133.131] wcscat (in: _Dest=0x3f3dfe0, _Source="NIJqOm_Lj-UMW5" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" [0133.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3dfe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0133.132] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294441b0, ftCreationTime.dwHighDateTime=0x1d5de40, ftLastAccessTime.dwLowDateTime=0x1fec37a0, ftLastAccessTime.dwHighDateTime=0x1d5e069, ftLastWriteTime.dwLowDateTime=0x1fec37a0, ftLastWriteTime.dwHighDateTime=0x1d5e069, nFileSizeHigh=0x0, nFileSizeLow=0x1152f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rqhwXE6Et2texpSEwc.avi", cAlternateFileName="RQHWXE~1.AVI")) returned 1 [0133.132] wcscmp (_String1="rqhwXE6Et2texpSEwc.avi", _String2=".") returned 1 [0133.132] wcscmp (_String1="rqhwXE6Et2texpSEwc.avi", _String2="..") returned 1 [0133.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8f88 [0133.132] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_" [0133.132] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0133.132] wcscat (in: _Dest=0x3eb8f88, _Source="rqhwXE6Et2texpSEwc.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\rqhwXE6Et2texpSEwc.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\rqhwXE6Et2texpSEwc.avi" [0133.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0133.134] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294441b0, ftCreationTime.dwHighDateTime=0x1d5de40, ftLastAccessTime.dwLowDateTime=0x1fec37a0, ftLastAccessTime.dwHighDateTime=0x1d5e069, ftLastWriteTime.dwLowDateTime=0x1fec37a0, ftLastWriteTime.dwHighDateTime=0x1d5e069, nFileSizeHigh=0x0, nFileSizeLow=0x1152f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rqhwXE6Et2texpSEwc.avi", cAlternateFileName="RQHWXE~1.AVI")) returned 0 [0133.134] FindClose (in: hFindFile=0x3dcf650 | out: hFindFile=0x3dcf650) returned 1 [0133.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f00) returned 1 [0133.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe14a8) returned 1 [0133.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6adc8) returned 1 Thread: id = 862 os_tid = 0x1558 [0129.724] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\C-R9.flv" (normalized: "c:\\users\\eebsym5\\videos\\c-r9.flv")) returned 0x20 [0129.724] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\C-R9.flv", dwFileAttributes=0x20) returned 1 [0129.724] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\C-R9.flv" (normalized: "c:\\users\\eebsym5\\videos\\c-r9.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19c0 [0129.724] GetFileSizeEx (in: hFile=0x19c0, lpFileSize=0xafaff14 | out: lpFileSize=0xafaff14*=45531) returned 1 [0129.724] SetFilePointerEx (in: hFile=0x19c0, liDistanceToMove=0xb1d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.725] ReadFile (in: hFile=0x19c0, lpBuffer=0xafafef0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xafaff00, lpOverlapped=0x0 | out: lpBuffer=0xafafef0*, lpNumberOfBytesRead=0xafaff00*=0x4, lpOverlapped=0x0) returned 1 [0129.727] SetFilePointerEx (in: hFile=0x19c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0129.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0129.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0129.727] NtQuerySystemTime (in: CurrentTime=0xafafe88 | out: CurrentTime=0xafafe88*=132462177091200000) returned 0x0 [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x323c1fc1 [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x4c94058 [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x7fc8436a [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x4fe97aeb [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x3ae6e5d5 [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x68db0aa1 [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x4ac69d63 [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x79cd1271 [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x2521c347 [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x632a0f64 [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x479c5345 [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x770224df [0129.727] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x53b738ab [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x532100ba [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x4f18c1 [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x3c5afe74 [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x3559d32 [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x43faf23f [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x2ef90fd8 [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x38271bf0 [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x2a6698db [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x6a529c2d [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x67563799 [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x44f772b6 [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x1517e3a4 [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x79863bd2 [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x75bfda7d [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x7bedf68d [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x133eeb3f [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0xa49e8b5 [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x1c425acf [0129.728] RtlRandomEx (in: Seed=0xafafe80 | out: Seed=0xafafe80) returned 0x3eb423e [0129.740] SetFilePointerEx (in: hFile=0x19c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.740] ReadFile (in: hFile=0x19c0, lpBuffer=0x7cccbd0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xafafe88, lpOverlapped=0x0 | out: lpBuffer=0x7cccbd0*, lpNumberOfBytesRead=0xafafe88*=0x3c00, lpOverlapped=0x0) returned 1 [0129.740] SetFilePointerEx (in: hFile=0x19c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08538 [0129.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e418 [0129.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0129.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0129.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cd07d8 [0129.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0129.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0129.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0129.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0129.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08538) returned 1 [0129.742] WriteFile (in: hFile=0x19c0, lpBuffer=0x7cd07d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xafafe88, lpOverlapped=0x0 | out: lpBuffer=0x7cd07d8*, lpNumberOfBytesWritten=0xafafe88*=0x3c00, lpOverlapped=0x0) returned 1 [0130.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd07d8) returned 1 [0130.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccbd0) returned 1 [0130.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x305cb30 [0130.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb58) returned 1 [0130.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x305cb58 [0130.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0130.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0130.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0130.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0130.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0130.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7ad5858 [0130.100] SetFilePointerEx (in: hFile=0x19c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.100] WriteFile (in: hFile=0x19c0, lpBuffer=0x7ad5858*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xafaff08, lpOverlapped=0x0 | out: lpBuffer=0x7ad5858*, lpNumberOfBytesWritten=0xafaff08*=0x102, lpOverlapped=0x0) returned 1 [0130.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56840 [0130.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0130.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31c8 [0130.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31c8) returned 1 [0130.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e57e28 [0130.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31c8 [0130.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0130.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0130.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0130.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 [0130.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x3e86ba8 [0130.213] sprintf (in: _Dest=0x3e86ba8, _Format="%c%c" | out: _Dest="09") returned 2 [0130.213] sprintf (in: _Dest=0x3e86baa, _Format="%c%c" | out: _Dest="c0") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bac, _Format="%c%c" | out: _Dest="98") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bae, _Format="%c%c" | out: _Dest="13") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bb0, _Format="%c%c" | out: _Dest="80") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bb2, _Format="%c%c" | out: _Dest="20") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bb4, _Format="%c%c" | out: _Dest="b0") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bb6, _Format="%c%c" | out: _Dest="3a") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bb8, _Format="%c%c" | out: _Dest="26") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bba, _Format="%c%c" | out: _Dest="2e") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bbc, _Format="%c%c" | out: _Dest="25") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bbe, _Format="%c%c" | out: _Dest="a7") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bc0, _Format="%c%c" | out: _Dest="1f") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bc2, _Format="%c%c" | out: _Dest="05") returned 2 [0130.213] sprintf (in: _Dest=0x3e86bc4, _Format="%c%c" | out: _Dest="e8") returned 2 [0130.214] sprintf (in: _Dest=0x3e86bc6, _Format="%c%c" | out: _Dest="82") returned 2 [0130.214] RtlInitAnsiString (in: DestinationString=0xafafe90, SourceString="09c098138020b03a262e25a71f05e882" | out: DestinationString="09c098138020b03a262e25a71f05e882") [0130.214] RtlAnsiStringToUnicodeString (in: DestinationString=0xafafe88, SourceString="09c098138020b03a262e25a71f05e882", AllocateDestinationString=1 | out: DestinationString="09c098138020b03a262e25a71f05e882") returned 0x0 [0130.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84308 [0130.214] wcscat (in: _Dest=0x3d48848, _Source="09c09813" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\09c09813") returned="C:\\Users\\EEBsYm5\\Videos\\09c09813" [0130.214] wcscat (in: _Dest=0x3d48848, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\09c09813.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\09c09813.68814f" [0130.214] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\09c09813.68814f", NtPathName=0xafafe80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\09c09813.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23e60 [0130.214] NtSetInformationFile (FileHandle=0x19c0, IoStatusBlock=0xafafe88, FileInformation=0x7a23e60, Length=0x66, FileInformationClass=0xa) returned 0x0 [0130.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23e60) returned 1 [0130.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3fd60) returned 1 [0130.322] NtQueryInformationFile (in: FileHandle=0x19c0, IoStatusBlock=0xafafe58, FileInformation=0xafafe60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xafafe58, FileInformation=0xafafe60) returned 0x0 [0130.322] NtSetInformationFile (FileHandle=0x19c0, IoStatusBlock=0xafafe58, FileInformation=0xafafe60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48848) returned 1 [0130.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84308) returned 1 [0130.371] FlushFileBuffers (hFile=0x19c0) returned 1 [0130.375] CloseHandle (hObject=0x19c0) returned 1 [0130.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6788 [0130.390] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0130.390] wcscat (in: _Dest=0x2fe6788, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt" [0130.390] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\68814f-readme.txt")) returned 0xffffffff [0130.391] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c0 [0130.395] WriteFile (in: hFile=0x16c0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xafafe9c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xafafe9c*=0x8b9, lpOverlapped=0x0) returned 1 [0130.403] CloseHandle (hObject=0x16c0) returned 1 [0130.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 [0130.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6158) returned 1 Thread: id = 863 os_tid = 0x155c [0129.743] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\FUlAOJyb9C9h903.mp4" (normalized: "c:\\users\\eebsym5\\videos\\fulaojyb9c9h903.mp4")) returned 0x20 [0129.743] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\FUlAOJyb9C9h903.mp4", dwFileAttributes=0x20) returned 1 [0129.743] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\FUlAOJyb9C9h903.mp4" (normalized: "c:\\users\\eebsym5\\videos\\fulaojyb9c9h903.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19c4 [0129.743] GetFileSizeEx (in: hFile=0x19c4, lpFileSize=0xb0afc64 | out: lpFileSize=0xb0afc64*=12180) returned 1 [0129.744] SetFilePointerEx (in: hFile=0x19c4, liDistanceToMove=0x2f90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.744] ReadFile (in: hFile=0x19c4, lpBuffer=0xb0afc40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb0afc50, lpOverlapped=0x0 | out: lpBuffer=0xb0afc40*, lpNumberOfBytesRead=0xb0afc50*=0x4, lpOverlapped=0x0) returned 1 [0129.746] SetFilePointerEx (in: hFile=0x19c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0129.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbb8 [0129.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0129.746] NtQuerySystemTime (in: CurrentTime=0xb0afbd8 | out: CurrentTime=0xb0afbd8*=132462177091356000) returned 0x0 [0129.746] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0xea1bc9a [0129.746] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x278b5c34 [0129.746] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x5d7977a1 [0129.746] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x2b6f2121 [0129.746] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x73503859 [0129.746] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x1f502a27 [0129.746] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x3f6481e7 [0129.746] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x645c0971 [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x6a0099d [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x534613b1 [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x7ba673b3 [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0xaeedd7d [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x5829a1 [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x21333062 [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0xf3fa620 [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x718755c3 [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x51f969ba [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x597e8d57 [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x58a892a [0129.747] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x4c8e44a2 [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x28e6865a [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x7b8a916a [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x2d293d37 [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x2c2787e5 [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x640ee1c5 [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x178119ac [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x4abca44c [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x66d8e1a1 [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x4dbb6cac [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x7676a081 [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x21d96805 [0129.748] RtlRandomEx (in: Seed=0xb0afbd0 | out: Seed=0xb0afbd0) returned 0x3b2ee222 [0129.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0129.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cbdbb0 [0129.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cc17b8 [0129.763] ReadFile (in: hFile=0x19c4, lpBuffer=0x7cbdbb0, nNumberOfBytesToRead=0x2f94, lpNumberOfBytesRead=0xb0afbcc, lpOverlapped=0x0 | out: lpBuffer=0x7cbdbb0*, lpNumberOfBytesRead=0xb0afbcc*=0x2f94, lpOverlapped=0x0) returned 1 [0129.763] SetFilePointerEx (in: hFile=0x19c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.763] WriteFile (in: hFile=0x19c4, lpBuffer=0x7cc17b8*, nNumberOfBytesToWrite=0x2f94, lpNumberOfBytesWritten=0xb0afbd0, lpOverlapped=0x0 | out: lpBuffer=0x7cc17b8*, lpNumberOfBytesWritten=0xb0afbd0*=0x2f94, lpOverlapped=0x0) returned 1 [0130.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0130.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0130.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0130.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc17b8) returned 1 [0130.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdbb0) returned 1 [0130.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0130.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0130.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2de80 [0130.102] SetFilePointerEx (in: hFile=0x19c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.102] WriteFile (in: hFile=0x19c4, lpBuffer=0x3d56180*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xb0afc58, lpOverlapped=0x0 | out: lpBuffer=0x3d56180*, lpNumberOfBytesWritten=0xb0afc58*=0x118, lpOverlapped=0x0) returned 1 [0130.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56840 [0130.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0130.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0130.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0130.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86ba8 [0130.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0130.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0130.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc08) returned 1 [0130.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0130.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 [0130.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4d) returned 0x3d48798 [0130.216] sprintf (in: _Dest=0x3d48798, _Format="%c%c" | out: _Dest="5c") returned 2 [0130.216] sprintf (in: _Dest=0x3d4879a, _Format="%c%c" | out: _Dest="43") returned 2 [0130.216] sprintf (in: _Dest=0x3d4879c, _Format="%c%c" | out: _Dest="34") returned 2 [0130.216] sprintf (in: _Dest=0x3d4879e, _Format="%c%c" | out: _Dest="9f") returned 2 [0130.216] sprintf (in: _Dest=0x3d487a0, _Format="%c%c" | out: _Dest="06") returned 2 [0130.216] sprintf (in: _Dest=0x3d487a2, _Format="%c%c" | out: _Dest="6f") returned 2 [0130.216] sprintf (in: _Dest=0x3d487a4, _Format="%c%c" | out: _Dest="e5") returned 2 [0130.216] sprintf (in: _Dest=0x3d487a6, _Format="%c%c" | out: _Dest="cf") returned 2 [0130.216] sprintf (in: _Dest=0x3d487a8, _Format="%c%c" | out: _Dest="7f") returned 2 [0130.216] sprintf (in: _Dest=0x3d487aa, _Format="%c%c" | out: _Dest="2d") returned 2 [0130.216] sprintf (in: _Dest=0x3d487ac, _Format="%c%c" | out: _Dest="c4") returned 2 [0130.216] sprintf (in: _Dest=0x3d487ae, _Format="%c%c" | out: _Dest="e4") returned 2 [0130.216] sprintf (in: _Dest=0x3d487b0, _Format="%c%c" | out: _Dest="4a") returned 2 [0130.216] sprintf (in: _Dest=0x3d487b2, _Format="%c%c" | out: _Dest="91") returned 2 [0130.216] sprintf (in: _Dest=0x3d487b4, _Format="%c%c" | out: _Dest="41") returned 2 [0130.216] sprintf (in: _Dest=0x3d487b6, _Format="%c%c" | out: _Dest="10") returned 2 [0130.216] sprintf (in: _Dest=0x3d487b8, _Format="%c%c" | out: _Dest="0e") returned 2 [0130.216] sprintf (in: _Dest=0x3d487ba, _Format="%c%c" | out: _Dest="e4") returned 2 [0130.216] sprintf (in: _Dest=0x3d487bc, _Format="%c%c" | out: _Dest="a7") returned 2 [0130.217] sprintf (in: _Dest=0x3d487be, _Format="%c%c" | out: _Dest="c7") returned 2 [0130.217] sprintf (in: _Dest=0x3d487c0, _Format="%c%c" | out: _Dest="ef") returned 2 [0130.217] sprintf (in: _Dest=0x3d487c2, _Format="%c%c" | out: _Dest="bb") returned 2 [0130.217] sprintf (in: _Dest=0x3d487c4, _Format="%c%c" | out: _Dest="4a") returned 2 [0130.217] sprintf (in: _Dest=0x3d487c6, _Format="%c%c" | out: _Dest="7a") returned 2 [0130.217] sprintf (in: _Dest=0x3d487c8, _Format="%c%c" | out: _Dest="8c") returned 2 [0130.217] sprintf (in: _Dest=0x3d487ca, _Format="%c%c" | out: _Dest="7d") returned 2 [0130.217] sprintf (in: _Dest=0x3d487cc, _Format="%c%c" | out: _Dest="1f") returned 2 [0130.217] sprintf (in: _Dest=0x3d487ce, _Format="%c%c" | out: _Dest="4a") returned 2 [0130.217] sprintf (in: _Dest=0x3d487d0, _Format="%c%c" | out: _Dest="4c") returned 2 [0130.217] sprintf (in: _Dest=0x3d487d2, _Format="%c%c" | out: _Dest="a8") returned 2 [0130.217] sprintf (in: _Dest=0x3d487d4, _Format="%c%c" | out: _Dest="ff") returned 2 [0130.217] sprintf (in: _Dest=0x3d487d6, _Format="%c%c" | out: _Dest="ba") returned 2 [0130.217] sprintf (in: _Dest=0x3d487d8, _Format="%c%c" | out: _Dest="2c") returned 2 [0130.217] sprintf (in: _Dest=0x3d487da, _Format="%c%c" | out: _Dest="d9") returned 2 [0130.217] sprintf (in: _Dest=0x3d487dc, _Format="%c%c" | out: _Dest="77") returned 2 [0130.217] sprintf (in: _Dest=0x3d487de, _Format="%c%c" | out: _Dest="0d") returned 2 [0130.217] sprintf (in: _Dest=0x3d487e0, _Format="%c%c" | out: _Dest="91") returned 2 [0130.217] sprintf (in: _Dest=0x3d487e2, _Format="%c%c" | out: _Dest="e9") returned 2 [0130.217] RtlInitAnsiString (in: DestinationString=0xb0afbe0, SourceString="5c43349f066fe5cf7f2dc4e44a9141100ee4a7c7efbb4a7a8c7d1f4a4ca8ffba2cd9770d91e9" | out: DestinationString="5c43349f066fe5cf7f2dc4e44a9141100ee4a7c7efbb4a7a8c7d1f4a4ca8ffba2cd9770d91e9") [0130.217] RtlAnsiStringToUnicodeString (in: DestinationString=0xb0afbd8, SourceString="5c43349f066fe5cf7f2dc4e44a9141100ee4a7c7efbb4a7a8c7d1f4a4ca8ffba2cd9770d91e9", AllocateDestinationString=1 | out: DestinationString="5c43349f066fe5cf7f2dc4e44a9141100ee4a7c7efbb4a7a8c7d1f4a4ca8ffba2cd9770d91e9") returned 0x0 [0130.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3052fe8 [0130.217] wcscat (in: _Dest=0x7a23f40, _Source="5c43349f066fe5cf7f2" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\5c43349f066fe5cf7f2") returned="C:\\Users\\EEBsYm5\\Videos\\5c43349f066fe5cf7f2" [0130.217] wcscat (in: _Dest=0x7a23f40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\5c43349f066fe5cf7f2.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\5c43349f066fe5cf7f2.68814f" [0130.217] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\5c43349f066fe5cf7f2.68814f", NtPathName=0xb0afbd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\5c43349f066fe5cf7f2.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c290 [0130.217] NtSetInformationFile (FileHandle=0x19c4, IoStatusBlock=0xb0afbd8, FileInformation=0x3f3c290, Length=0x7c, FileInformationClass=0xa) returned 0x0 [0130.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 [0130.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40c78) returned 1 [0130.540] NtQueryInformationFile (in: FileHandle=0x19c4, IoStatusBlock=0xb0afba8, FileInformation=0xb0afbb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb0afba8, FileInformation=0xb0afbb0) returned 0x0 [0130.540] NtSetInformationFile (FileHandle=0x19c4, IoStatusBlock=0xb0afba8, FileInformation=0xb0afbb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23f40) returned 1 [0130.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052fe8) returned 1 [0130.542] FlushFileBuffers (hFile=0x19c4) returned 1 [0130.709] CloseHandle (hObject=0x19c4) returned 1 [0130.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6f08 [0130.710] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0130.710] wcscat (in: _Dest=0x2fe6f08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt" [0130.710] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\68814f-readme.txt")) returned 0x20 [0130.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 [0130.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 Thread: id = 864 os_tid = 0x1560 [0129.764] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\H_tw3aZJK7h33TLqGM_F.flv" (normalized: "c:\\users\\eebsym5\\videos\\h_tw3azjk7h33tlqgm_f.flv")) returned 0x20 [0129.764] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\H_tw3aZJK7h33TLqGM_F.flv", dwFileAttributes=0x20) returned 1 [0129.764] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\H_tw3aZJK7h33TLqGM_F.flv" (normalized: "c:\\users\\eebsym5\\videos\\h_tw3azjk7h33tlqgm_f.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19c8 [0129.764] GetFileSizeEx (in: hFile=0x19c8, lpFileSize=0x9fdfb1c | out: lpFileSize=0x9fdfb1c*=10455) returned 1 [0129.764] SetFilePointerEx (in: hFile=0x19c8, liDistanceToMove=0x28d3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.764] ReadFile (in: hFile=0x19c8, lpBuffer=0x9fdfaf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9fdfb08, lpOverlapped=0x0 | out: lpBuffer=0x9fdfaf8*, lpNumberOfBytesRead=0x9fdfb08*=0x4, lpOverlapped=0x0) returned 1 [0129.766] SetFilePointerEx (in: hFile=0x19c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0129.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0129.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb18 [0129.767] NtQuerySystemTime (in: CurrentTime=0x9fdfa90 | out: CurrentTime=0x9fdfa90*=132462177091512000) returned 0x0 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x67e19974 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x450b3a8d [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x61358e70 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x29d97993 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0xc60b630 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x58ec31a8 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x2f488fe7 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x4e4bdd1c [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x7078d3e4 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x38b5ed58 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x47bf7fe [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x2ce32668 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x6146c6ab [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0xfbe78f0 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x1da613c1 [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x108dadfd [0129.767] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x73eabf3e [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x2c1f7610 [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x4c7f66ec [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x184ada6a [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x773de271 [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x4187282e [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0xeb57368 [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x4d6a0eaa [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x64e17050 [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x78a0bced [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x513e476d [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x6d1113e3 [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x5650564b [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x794c4a37 [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x6f94b3c0 [0129.768] RtlRandomEx (in: Seed=0x9fdfa88 | out: Seed=0x9fdfa88) returned 0x22940940 [0129.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0129.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb63a0 [0129.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb9fa8 [0129.782] ReadFile (in: hFile=0x19c8, lpBuffer=0x7cb63a0, nNumberOfBytesToRead=0x28d7, lpNumberOfBytesRead=0x9fdfa84, lpOverlapped=0x0 | out: lpBuffer=0x7cb63a0*, lpNumberOfBytesRead=0x9fdfa84*=0x28d7, lpOverlapped=0x0) returned 1 [0129.782] SetFilePointerEx (in: hFile=0x19c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.782] WriteFile (in: hFile=0x19c8, lpBuffer=0x7cb9fa8*, nNumberOfBytesToWrite=0x28d7, lpNumberOfBytesWritten=0x9fdfa88, lpOverlapped=0x0 | out: lpBuffer=0x7cb9fa8*, lpNumberOfBytesWritten=0x9fdfa88*=0x28d7, lpOverlapped=0x0) returned 1 [0130.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0130.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0130.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0130.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa8) returned 1 [0130.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63a0) returned 1 [0130.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0130.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84db0) returned 1 [0130.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e84db0 [0130.104] SetFilePointerEx (in: hFile=0x19c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.104] WriteFile (in: hFile=0x19c8, lpBuffer=0x3ec9cd0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x9fdfb10, lpOverlapped=0x0 | out: lpBuffer=0x3ec9cd0*, lpNumberOfBytesWritten=0x9fdfb10*=0x122, lpOverlapped=0x0) returned 1 [0130.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56840 [0130.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0130.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb40 [0130.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb40) returned 1 [0130.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3013f88 [0130.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb40 [0130.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0130.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0130.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0130.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56840) returned 1 [0130.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a26008 [0130.221] sprintf (in: _Dest=0x7a26008, _Format="%c%c" | out: _Dest="12") returned 2 [0130.221] sprintf (in: _Dest=0x7a2600a, _Format="%c%c" | out: _Dest="2a") returned 2 [0130.221] sprintf (in: _Dest=0x7a2600c, _Format="%c%c" | out: _Dest="ed") returned 2 [0130.221] sprintf (in: _Dest=0x7a2600e, _Format="%c%c" | out: _Dest="86") returned 2 [0130.221] sprintf (in: _Dest=0x7a26010, _Format="%c%c" | out: _Dest="a2") returned 2 [0130.221] sprintf (in: _Dest=0x7a26012, _Format="%c%c" | out: _Dest="2b") returned 2 [0130.221] sprintf (in: _Dest=0x7a26014, _Format="%c%c" | out: _Dest="77") returned 2 [0130.221] sprintf (in: _Dest=0x7a26016, _Format="%c%c" | out: _Dest="49") returned 2 [0130.221] sprintf (in: _Dest=0x7a26018, _Format="%c%c" | out: _Dest="83") returned 2 [0130.221] sprintf (in: _Dest=0x7a2601a, _Format="%c%c" | out: _Dest="22") returned 2 [0130.221] sprintf (in: _Dest=0x7a2601c, _Format="%c%c" | out: _Dest="11") returned 2 [0130.221] sprintf (in: _Dest=0x7a2601e, _Format="%c%c" | out: _Dest="29") returned 2 [0130.221] sprintf (in: _Dest=0x7a26020, _Format="%c%c" | out: _Dest="1b") returned 2 [0130.221] sprintf (in: _Dest=0x7a26022, _Format="%c%c" | out: _Dest="0c") returned 2 [0130.221] sprintf (in: _Dest=0x7a26024, _Format="%c%c" | out: _Dest="7b") returned 2 [0130.221] sprintf (in: _Dest=0x7a26026, _Format="%c%c" | out: _Dest="6d") returned 2 [0130.221] sprintf (in: _Dest=0x7a26028, _Format="%c%c" | out: _Dest="95") returned 2 [0130.221] sprintf (in: _Dest=0x7a2602a, _Format="%c%c" | out: _Dest="8b") returned 2 [0130.221] sprintf (in: _Dest=0x7a2602c, _Format="%c%c" | out: _Dest="5a") returned 2 [0130.221] sprintf (in: _Dest=0x7a2602e, _Format="%c%c" | out: _Dest="56") returned 2 [0130.221] sprintf (in: _Dest=0x7a26030, _Format="%c%c" | out: _Dest="52") returned 2 [0130.221] sprintf (in: _Dest=0x7a26032, _Format="%c%c" | out: _Dest="a9") returned 2 [0130.222] sprintf (in: _Dest=0x7a26034, _Format="%c%c" | out: _Dest="02") returned 2 [0130.222] sprintf (in: _Dest=0x7a26036, _Format="%c%c" | out: _Dest="b1") returned 2 [0130.222] sprintf (in: _Dest=0x7a26038, _Format="%c%c" | out: _Dest="2d") returned 2 [0130.222] sprintf (in: _Dest=0x7a2603a, _Format="%c%c" | out: _Dest="82") returned 2 [0130.222] sprintf (in: _Dest=0x7a2603c, _Format="%c%c" | out: _Dest="3c") returned 2 [0130.222] sprintf (in: _Dest=0x7a2603e, _Format="%c%c" | out: _Dest="e4") returned 2 [0130.222] sprintf (in: _Dest=0x7a26040, _Format="%c%c" | out: _Dest="49") returned 2 [0130.222] sprintf (in: _Dest=0x7a26042, _Format="%c%c" | out: _Dest="81") returned 2 [0130.222] sprintf (in: _Dest=0x7a26044, _Format="%c%c" | out: _Dest="46") returned 2 [0130.222] sprintf (in: _Dest=0x7a26046, _Format="%c%c" | out: _Dest="48") returned 2 [0130.222] sprintf (in: _Dest=0x7a26048, _Format="%c%c" | out: _Dest="1e") returned 2 [0130.222] sprintf (in: _Dest=0x7a2604a, _Format="%c%c" | out: _Dest="86") returned 2 [0130.222] sprintf (in: _Dest=0x7a2604c, _Format="%c%c" | out: _Dest="c2") returned 2 [0130.222] sprintf (in: _Dest=0x7a2604e, _Format="%c%c" | out: _Dest="f2") returned 2 [0130.222] sprintf (in: _Dest=0x7a26050, _Format="%c%c" | out: _Dest="a3") returned 2 [0130.222] sprintf (in: _Dest=0x7a26052, _Format="%c%c" | out: _Dest="ca") returned 2 [0130.222] sprintf (in: _Dest=0x7a26054, _Format="%c%c" | out: _Dest="ec") returned 2 [0130.222] sprintf (in: _Dest=0x7a26056, _Format="%c%c" | out: _Dest="0f") returned 2 [0130.222] sprintf (in: _Dest=0x7a26058, _Format="%c%c" | out: _Dest="80") returned 2 [0130.222] sprintf (in: _Dest=0x7a2605a, _Format="%c%c" | out: _Dest="c7") returned 2 [0130.222] sprintf (in: _Dest=0x7a2605c, _Format="%c%c" | out: _Dest="99") returned 2 [0130.222] sprintf (in: _Dest=0x7a2605e, _Format="%c%c" | out: _Dest="24") returned 2 [0130.222] sprintf (in: _Dest=0x7a26060, _Format="%c%c" | out: _Dest="d2") returned 2 [0130.222] sprintf (in: _Dest=0x7a26062, _Format="%c%c" | out: _Dest="3f") returned 2 [0130.222] sprintf (in: _Dest=0x7a26064, _Format="%c%c" | out: _Dest="e5") returned 2 [0130.222] sprintf (in: _Dest=0x7a26066, _Format="%c%c" | out: _Dest="01") returned 2 [0130.222] RtlInitAnsiString (in: DestinationString=0x9fdfa98, SourceString="122aed86a22b7749832211291b0c7b6d958b5a5652a902b12d823ce4498146481e86c2f2a3caec0f80c79924d23fe501" | out: DestinationString="122aed86a22b7749832211291b0c7b6d958b5a5652a902b12d823ce4498146481e86c2f2a3caec0f80c79924d23fe501") [0130.222] RtlAnsiStringToUnicodeString (in: DestinationString=0x9fdfa90, SourceString="122aed86a22b7749832211291b0c7b6d958b5a5652a902b12d823ce4498146481e86c2f2a3caec0f80c79924d23fe501", AllocateDestinationString=1 | out: DestinationString="122aed86a22b7749832211291b0c7b6d958b5a5652a902b12d823ce4498146481e86c2f2a3caec0f80c79924d23fe501") returned 0x0 [0130.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85080 [0130.223] wcscat (in: _Dest=0x3f3e7d8, _Source="122aed86a22b774983221129" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\122aed86a22b774983221129") returned="C:\\Users\\EEBsYm5\\Videos\\122aed86a22b774983221129" [0130.223] wcscat (in: _Dest=0x3f3e7d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\122aed86a22b774983221129.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\122aed86a22b774983221129.68814f" [0130.223] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\122aed86a22b774983221129.68814f", NtPathName=0x9fdfa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\122aed86a22b774983221129.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d447b0 [0130.223] NtSetInformationFile (FileHandle=0x19c8, IoStatusBlock=0x9fdfa90, FileInformation=0x3d447b0, Length=0x86, FileInformationClass=0xa) returned 0x0 [0130.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 [0130.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a71da0) returned 1 [0130.535] NtQueryInformationFile (in: FileHandle=0x19c8, IoStatusBlock=0x9fdfa60, FileInformation=0x9fdfa68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9fdfa60, FileInformation=0x9fdfa68) returned 0x0 [0130.535] NtSetInformationFile (FileHandle=0x19c8, IoStatusBlock=0x9fdfa60, FileInformation=0x9fdfa68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0130.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85080) returned 1 [0130.539] FlushFileBuffers (hFile=0x19c8) returned 1 [0130.631] CloseHandle (hObject=0x19c8) returned 1 [0130.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6a28 [0130.670] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0130.670] wcscat (in: _Dest=0x2fe6a28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt" [0130.670] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\68814f-readme.txt")) returned 0x20 [0130.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0130.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 Thread: id = 865 os_tid = 0x1564 [0129.786] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\wfgZDs.flv" (normalized: "c:\\users\\eebsym5\\videos\\wfgzds.flv")) returned 0x20 [0129.786] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\wfgZDs.flv", dwFileAttributes=0x20) returned 1 [0129.787] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\wfgZDs.flv" (normalized: "c:\\users\\eebsym5\\videos\\wfgzds.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19cc [0129.787] GetFileSizeEx (in: hFile=0x19cc, lpFileSize=0xadffa14 | out: lpFileSize=0xadffa14*=65940) returned 1 [0129.787] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x10190, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.787] ReadFile (in: hFile=0x19cc, lpBuffer=0xadff9f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xadffa00, lpOverlapped=0x0 | out: lpBuffer=0xadff9f0*, lpNumberOfBytesRead=0xadffa00*=0x4, lpOverlapped=0x0) returned 1 [0129.789] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0129.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb18 [0129.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0129.789] NtQuerySystemTime (in: CurrentTime=0xadff988 | out: CurrentTime=0xadff988*=132462177091824000) returned 0x0 [0129.789] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x12a664ce [0129.789] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x66833021 [0129.789] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x6e59ee71 [0129.789] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x38338416 [0129.789] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x6ba1bf23 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x2535e1d0 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x7c17ee61 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x1666d759 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0xb8291e3 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x78b6e683 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x43c20e4b [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x351a0f99 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x6d865181 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0xa7accab [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x2d078271 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x690f555 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x435bb953 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x367007a6 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x8d25ba1 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0xea08167 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x4939b3bf [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x436b0c82 [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x3354f8c [0129.790] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x3dcc8038 [0129.791] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x35c4f036 [0129.791] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x7dd88d93 [0129.791] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x1c9069e6 [0129.791] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x587750b1 [0129.791] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x323ca7d [0129.791] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x5d23c621 [0129.791] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x1438a55d [0129.791] RtlRandomEx (in: Seed=0xadff980 | out: Seed=0xadff980) returned 0x304ce945 [0129.803] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.803] ReadFile (in: hFile=0x19cc, lpBuffer=0x7caeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xadff988, lpOverlapped=0x0 | out: lpBuffer=0x7caeb90*, lpNumberOfBytesRead=0xadff988*=0x3c00, lpOverlapped=0x0) returned 1 [0129.804] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851a0 [0129.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0129.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0129.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0129.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb2798 [0129.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0129.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0129.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba28) returned 1 [0129.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0129.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851a0) returned 1 [0129.805] WriteFile (in: hFile=0x19cc, lpBuffer=0x7cb2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xadff988, lpOverlapped=0x0 | out: lpBuffer=0x7cb2798*, lpNumberOfBytesWritten=0xadff988*=0x3c00, lpOverlapped=0x0) returned 1 [0130.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2798) returned 1 [0130.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caeb90) returned 1 [0130.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86c08 [0130.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0130.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86c38 [0130.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0130.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0130.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0130.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0130.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0130.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7ad5970 [0130.107] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.107] WriteFile (in: hFile=0x19cc, lpBuffer=0x7ad5970*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xadffa08, lpOverlapped=0x0 | out: lpBuffer=0x7ad5970*, lpNumberOfBytesWritten=0xadffa08*=0x106, lpOverlapped=0x0) returned 1 [0130.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84db0 [0130.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e8c8 [0130.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0130.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0130.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e0e8 [0130.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0130.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0130.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0130.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e8c8) returned 1 [0130.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84db0) returned 1 [0130.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3013f88 [0130.226] sprintf (in: _Dest=0x3013f88, _Format="%c%c" | out: _Dest="a2") returned 2 [0130.226] sprintf (in: _Dest=0x3013f8a, _Format="%c%c" | out: _Dest="04") returned 2 [0130.226] sprintf (in: _Dest=0x3013f8c, _Format="%c%c" | out: _Dest="ab") returned 2 [0130.226] sprintf (in: _Dest=0x3013f8e, _Format="%c%c" | out: _Dest="82") returned 2 [0130.226] sprintf (in: _Dest=0x3013f90, _Format="%c%c" | out: _Dest="ef") returned 2 [0130.226] sprintf (in: _Dest=0x3013f92, _Format="%c%c" | out: _Dest="b9") returned 2 [0130.226] sprintf (in: _Dest=0x3013f94, _Format="%c%c" | out: _Dest="67") returned 2 [0130.226] sprintf (in: _Dest=0x3013f96, _Format="%c%c" | out: _Dest="02") returned 2 [0130.226] sprintf (in: _Dest=0x3013f98, _Format="%c%c" | out: _Dest="44") returned 2 [0130.226] sprintf (in: _Dest=0x3013f9a, _Format="%c%c" | out: _Dest="50") returned 2 [0130.226] sprintf (in: _Dest=0x3013f9c, _Format="%c%c" | out: _Dest="e7") returned 2 [0130.226] sprintf (in: _Dest=0x3013f9e, _Format="%c%c" | out: _Dest="5a") returned 2 [0130.226] sprintf (in: _Dest=0x3013fa0, _Format="%c%c" | out: _Dest="b6") returned 2 [0130.226] sprintf (in: _Dest=0x3013fa2, _Format="%c%c" | out: _Dest="2f") returned 2 [0130.226] sprintf (in: _Dest=0x3013fa4, _Format="%c%c" | out: _Dest="94") returned 2 [0130.226] sprintf (in: _Dest=0x3013fa6, _Format="%c%c" | out: _Dest="97") returned 2 [0130.226] sprintf (in: _Dest=0x3013fa8, _Format="%c%c" | out: _Dest="3c") returned 2 [0130.227] sprintf (in: _Dest=0x3013faa, _Format="%c%c" | out: _Dest="00") returned 2 [0130.227] sprintf (in: _Dest=0x3013fac, _Format="%c%c" | out: _Dest="da") returned 2 [0130.227] sprintf (in: _Dest=0x3013fae, _Format="%c%c" | out: _Dest="43") returned 2 [0130.227] RtlInitAnsiString (in: DestinationString=0xadff990, SourceString="a204ab82efb967024450e75ab62f94973c00da43" | out: DestinationString="a204ab82efb967024450e75ab62f94973c00da43") [0130.227] RtlAnsiStringToUnicodeString (in: DestinationString=0xadff988, SourceString="a204ab82efb967024450e75ab62f94973c00da43", AllocateDestinationString=1 | out: DestinationString="a204ab82efb967024450e75ab62f94973c00da43") returned 0x0 [0130.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6ae8 [0130.227] wcscat (in: _Dest=0x2fe7208, _Source="a204ab82ef" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\a204ab82ef") returned="C:\\Users\\EEBsYm5\\Videos\\a204ab82ef" [0130.227] wcscat (in: _Dest=0x2fe7208, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\a204ab82ef.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\a204ab82ef.68814f" [0130.227] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\a204ab82ef.68814f", NtPathName=0xadff980, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\a204ab82ef.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e8c8 [0130.227] NtSetInformationFile (FileHandle=0x19cc, IoStatusBlock=0xadff988, FileInformation=0x3f3e8c8, Length=0x6a, FileInformationClass=0xa) returned 0x0 [0130.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e8c8) returned 1 [0130.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a73780) returned 1 [0130.536] NtQueryInformationFile (in: FileHandle=0x19cc, IoStatusBlock=0xadff958, FileInformation=0xadff960, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xadff958, FileInformation=0xadff960) returned 0x0 [0130.536] NtSetInformationFile (FileHandle=0x19cc, IoStatusBlock=0xadff958, FileInformation=0xadff960, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7208) returned 1 [0130.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 [0130.538] FlushFileBuffers (hFile=0x19cc) returned 1 [0130.631] CloseHandle (hObject=0x19cc) returned 1 [0130.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6a28 [0130.668] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\EEBsYm5\\Videos\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\") returned="C:\\Users\\EEBsYm5\\Videos\\" [0130.668] wcscat (in: _Dest=0x2fe6a28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt" [0130.668] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\68814f-readme.txt")) returned 0x20 [0130.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0130.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de64c8) returned 1 Thread: id = 866 os_tid = 0x1568 [0129.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1f358 [0129.805] wcscpy (in: _Dest=0x3e1f358, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0129.805] wcscat (in: _Dest=0x3e1f358, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0129.806] wcscat (in: _Dest=0x3e1f358, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\*" [0129.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4b08 [0129.806] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0131.239] wcscmp (_String1=".", _String2=".") returned 0 [0131.239] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.239] wcscmp (_String1="..", _String2=".") returned 1 [0131.239] wcscmp (_String1="..", _String2="..") returned 0 [0131.239] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0131.239] wcscmp (_String1="AU", _String2=".") returned 1 [0131.239] wcscmp (_String1="AU", _String2="..") returned 1 [0131.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee11b0 [0131.239] wcscpy (in: _Dest=0x3ee11b0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0131.239] wcscat (in: _Dest=0x3ee11b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0131.239] wcscat (in: _Dest=0x3ee11b0, _Source="AU" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU" [0134.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee11b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0134.534] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80dd3c10, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0134.534] wcscmp (_String1="Deployment", _String2=".") returned 1 [0134.534] wcscmp (_String1="Deployment", _String2="..") returned 1 [0134.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fec0 [0134.534] wcscpy (in: _Dest=0x3f3fec0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0134.534] wcscat (in: _Dest=0x3f3fec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0134.534] wcscat (in: _Dest=0x3f3fec0, _Source="Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0134.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3fec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0134.535] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0134.535] wcscmp (_String1="jre1.7.0_45", _String2=".") returned 1 [0134.535] wcscmp (_String1="jre1.7.0_45", _String2="..") returned 1 [0134.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f470 [0134.535] wcscpy (in: _Dest=0x3f3f470, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java" [0134.535] wcscat (in: _Dest=0x3f3f470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\" [0134.535] wcscat (in: _Dest=0x3f3f470, _Source="jre1.7.0_45" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" [0134.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0134.536] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0 [0134.536] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0134.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b08) returned 1 [0134.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 [0134.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 867 os_tid = 0x156c [0129.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif")) returned 0x20 [0131.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF", dwFileAttributes=0x20) returned 0 [0131.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.241] GetLastError () returned 0x5 [0131.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF", dwFileAttributes=0x20) returned 0 [0131.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 868 os_tid = 0x1570 [0129.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm")) returned 0x20 [0131.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM", dwFileAttributes=0x20) returned 0 [0131.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.244] GetLastError () returned 0x5 [0131.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM", dwFileAttributes=0x20) returned 0 [0131.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d9f0) returned 1 Thread: id = 869 os_tid = 0x1574 [0129.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin")) returned 0x20 [0129.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin", dwFileAttributes=0x20) returned 0 [0129.809] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.809] GetLastError () returned 0x5 [0129.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin", dwFileAttributes=0x20) returned 0 [0129.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6310) returned 1 Thread: id = 870 os_tid = 0x1578 [0129.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\dexshare.spi")) returned 0x20 [0132.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi", dwFileAttributes=0x20) returned 0 [0133.293] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\dexshare.spi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.650] GetLastError () returned 0x5 [0134.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi", dwFileAttributes=0x20) returned 0 [0134.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 871 os_tid = 0x157c [0129.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\services.cfg")) returned 0x20 [0134.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg", dwFileAttributes=0x20) returned 0 [0134.154] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\services\\services.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.154] GetLastError () returned 0x5 [0134.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg", dwFileAttributes=0x20) returned 0 [0134.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 872 os_tid = 0x1580 [0129.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu")) returned 0x20 [0131.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", dwFileAttributes=0x20) returned 0 [0132.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.087] GetLastError () returned 0x5 [0135.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU", dwFileAttributes=0x20) returned 0 [0135.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f90) returned 1 Thread: id = 873 os_tid = 0x1584 [0129.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde")) returned 0x20 [0129.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", dwFileAttributes=0x20) returned 0 [0129.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0129.884] GetLastError () returned 0x5 [0129.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE", dwFileAttributes=0x20) returned 0 [0129.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 874 os_tid = 0x1588 [0129.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde")) returned 0x20 [0135.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", dwFileAttributes=0x20) returned 0 [0135.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.089] GetLastError () returned 0x5 [0135.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE", dwFileAttributes=0x20) returned 0 [0135.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d456e0) returned 1 Thread: id = 875 os_tid = 0x158c [0129.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde")) returned 0x20 [0134.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", dwFileAttributes=0x20) returned 0 [0134.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.156] GetLastError () returned 0x5 [0134.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE", dwFileAttributes=0x20) returned 0 [0134.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44330) returned 1 Thread: id = 876 os_tid = 0x1590 [0129.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu")) returned 0x20 [0135.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", dwFileAttributes=0x20) returned 0 [0135.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.091] GetLastError () returned 0x5 [0135.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU", dwFileAttributes=0x20) returned 0 [0135.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d440f0) returned 1 Thread: id = 877 os_tid = 0x1594 [0129.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda")) returned 0x20 [0134.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", dwFileAttributes=0x20) returned 0 [0134.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.651] GetLastError () returned 0x5 [0134.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA", dwFileAttributes=0x20) returned 0 [0134.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 878 os_tid = 0x1598 [0129.897] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\AuwypP HJgMbd x7.odp" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\auwypp hjgmbd x7.odp")) returned 0x20 [0129.898] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\AuwypP HJgMbd x7.odp", dwFileAttributes=0x20) returned 1 [0129.899] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\AuwypP HJgMbd x7.odp" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\auwypp hjgmbd x7.odp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19d0 [0129.899] GetFileSizeEx (in: hFile=0x19d0, lpFileSize=0x950fcb4 | out: lpFileSize=0x950fcb4*=85646) returned 1 [0129.899] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x14e8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.899] ReadFile (in: hFile=0x19d0, lpBuffer=0x950fc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x950fca0, lpOverlapped=0x0 | out: lpBuffer=0x950fc90*, lpNumberOfBytesRead=0x950fca0*=0x4, lpOverlapped=0x0) returned 1 [0129.901] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0129.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0129.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0129.902] NtQuerySystemTime (in: CurrentTime=0x950fc28 | out: CurrentTime=0x950fc28*=132462177092916000) returned 0x0 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x464067eb [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x1dff2c55 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x54d53034 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x4d28cd85 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x26c60b5c [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x537bd92e [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x6234baf6 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x6d3a048a [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x3d6dc3b8 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x674d8852 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x5f36001d [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x32068621 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x5b600f5c [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x1ff061f5 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x3675ac68 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x5ac67b6d [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x59f15c4b [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x7e69c136 [0129.902] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x494eb464 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x69838a19 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x9cebfc9 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x29d1cc17 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x1e0b520d [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x57d170ab [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x3dad3bc2 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x79828c64 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x34c806f1 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x2cec11c0 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x5dd106a2 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x5ba22761 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x46cda308 [0129.903] RtlRandomEx (in: Seed=0x950fc20 | out: Seed=0x950fc20) returned 0x653dcbc [0129.915] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.915] ReadFile (in: hFile=0x19d0, lpBuffer=0x7ca7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x950fc28, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesRead=0x950fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0129.915] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3032110 [0129.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0129.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0129.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba28) returned 1 [0129.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caaf88 [0129.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0129.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0129.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0129.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0129.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3032110) returned 1 [0129.917] WriteFile (in: hFile=0x19d0, lpBuffer=0x7caaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x950fc28, lpOverlapped=0x0 | out: lpBuffer=0x7caaf88*, lpNumberOfBytesWritten=0x950fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0130.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf88) returned 1 [0130.112] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.112] ReadFile (in: hFile=0x19d0, lpBuffer=0x7ca7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x950fc28, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesRead=0x950fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0130.112] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85a58 [0130.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0130.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0130.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0130.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caaf88 [0130.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0130.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e536e8 [0130.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e536e8) returned 1 [0130.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0130.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0130.113] WriteFile (in: hFile=0x19d0, lpBuffer=0x7caaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x950fc28, lpOverlapped=0x0 | out: lpBuffer=0x7caaf88*, lpNumberOfBytesWritten=0x950fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0130.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf88) returned 1 [0130.117] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x1128e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.117] ReadFile (in: hFile=0x19d0, lpBuffer=0x7ca7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x950fc28, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesRead=0x950fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0130.117] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x1128e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85a58 [0130.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0130.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0130.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53648) returned 1 [0130.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caaf88 [0130.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0130.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0130.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535f8) returned 1 [0130.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0130.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0130.118] WriteFile (in: hFile=0x19d0, lpBuffer=0x7caaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x950fc28, lpOverlapped=0x0 | out: lpBuffer=0x7caaf88*, lpNumberOfBytesWritten=0x950fc28*=0x3c00, lpOverlapped=0x0) returned 1 [0130.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf88) returned 1 [0130.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47108 [0130.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba28) returned 1 [0130.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x2fc8e48 [0130.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0130.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0130.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0130.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0130.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0130.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15a) returned 0x3dcde38 [0130.125] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.125] WriteFile (in: hFile=0x19d0, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x950fca8, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x950fca8*=0x15a, lpOverlapped=0x0) returned 1 [0130.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84db0 [0130.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e940 [0130.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7f8 [0130.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7f8) returned 1 [0130.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c08 [0130.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7f8 [0130.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b8e8 [0130.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b8e8) returned 1 [0130.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0130.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84db0) returned 1 [0130.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6788 [0130.235] sprintf (in: _Dest=0x2fe6788, _Format="%c%c" | out: _Dest="35") returned 2 [0130.235] sprintf (in: _Dest=0x2fe678a, _Format="%c%c" | out: _Dest="f8") returned 2 [0130.235] sprintf (in: _Dest=0x2fe678c, _Format="%c%c" | out: _Dest="a9") returned 2 [0130.235] sprintf (in: _Dest=0x2fe678e, _Format="%c%c" | out: _Dest="17") returned 2 [0130.235] sprintf (in: _Dest=0x2fe6790, _Format="%c%c" | out: _Dest="d5") returned 2 [0130.235] sprintf (in: _Dest=0x2fe6792, _Format="%c%c" | out: _Dest="e6") returned 2 [0130.235] sprintf (in: _Dest=0x2fe6794, _Format="%c%c" | out: _Dest="26") returned 2 [0130.235] sprintf (in: _Dest=0x2fe6796, _Format="%c%c" | out: _Dest="d7") returned 2 [0130.235] sprintf (in: _Dest=0x2fe6798, _Format="%c%c" | out: _Dest="af") returned 2 [0130.235] sprintf (in: _Dest=0x2fe679a, _Format="%c%c" | out: _Dest="30") returned 2 [0130.235] sprintf (in: _Dest=0x2fe679c, _Format="%c%c" | out: _Dest="ea") returned 2 [0130.235] sprintf (in: _Dest=0x2fe679e, _Format="%c%c" | out: _Dest="c9") returned 2 [0130.235] sprintf (in: _Dest=0x2fe67a0, _Format="%c%c" | out: _Dest="fa") returned 2 [0130.235] sprintf (in: _Dest=0x2fe67a2, _Format="%c%c" | out: _Dest="40") returned 2 [0130.235] sprintf (in: _Dest=0x2fe67a4, _Format="%c%c" | out: _Dest="3f") returned 2 [0130.235] sprintf (in: _Dest=0x2fe67a6, _Format="%c%c" | out: _Dest="bc") returned 2 [0130.235] sprintf (in: _Dest=0x2fe67a8, _Format="%c%c" | out: _Dest="f7") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67aa, _Format="%c%c" | out: _Dest="a8") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67ac, _Format="%c%c" | out: _Dest="c0") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67ae, _Format="%c%c" | out: _Dest="39") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67b0, _Format="%c%c" | out: _Dest="47") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67b2, _Format="%c%c" | out: _Dest="ae") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67b4, _Format="%c%c" | out: _Dest="e6") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67b6, _Format="%c%c" | out: _Dest="e0") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67b8, _Format="%c%c" | out: _Dest="36") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67ba, _Format="%c%c" | out: _Dest="00") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67bc, _Format="%c%c" | out: _Dest="90") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67be, _Format="%c%c" | out: _Dest="19") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67c0, _Format="%c%c" | out: _Dest="5c") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67c2, _Format="%c%c" | out: _Dest="2f") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67c4, _Format="%c%c" | out: _Dest="39") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67c6, _Format="%c%c" | out: _Dest="c6") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67c8, _Format="%c%c" | out: _Dest="ee") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67ca, _Format="%c%c" | out: _Dest="57") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67cc, _Format="%c%c" | out: _Dest="ba") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67ce, _Format="%c%c" | out: _Dest="a7") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67d0, _Format="%c%c" | out: _Dest="93") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67d2, _Format="%c%c" | out: _Dest="0b") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67d4, _Format="%c%c" | out: _Dest="41") returned 2 [0130.236] sprintf (in: _Dest=0x2fe67d6, _Format="%c%c" | out: _Dest="37") returned 2 [0130.236] RtlInitAnsiString (in: DestinationString=0x950fc30, SourceString="35f8a917d5e626d7af30eac9fa403fbcf7a8c03947aee6e0360090195c2f39c6ee57baa7930b4137" | out: DestinationString="35f8a917d5e626d7af30eac9fa403fbcf7a8c03947aee6e0360090195c2f39c6ee57baa7930b4137") [0130.236] RtlAnsiStringToUnicodeString (in: DestinationString=0x950fc28, SourceString="35f8a917d5e626d7af30eac9fa403fbcf7a8c03947aee6e0360090195c2f39c6ee57baa7930b4137", AllocateDestinationString=1 | out: DestinationString="35f8a917d5e626d7af30eac9fa403fbcf7a8c03947aee6e0360090195c2f39c6ee57baa7930b4137") returned 0x0 [0130.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35af88 [0130.237] wcscat (in: _Dest=0x3053870, _Source="35f8a917d5e626d7af30" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\35f8a917d5e626d7af30") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\35f8a917d5e626d7af30" [0130.237] wcscat (in: _Dest=0x3053870, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\35f8a917d5e626d7af30.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\35f8a917d5e626d7af30.68814f" [0130.237] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\35f8a917d5e626d7af30.68814f", NtPathName=0x950fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\35f8a917d5e626d7af30.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66558 [0130.237] NtSetInformationFile (FileHandle=0x19d0, IoStatusBlock=0x950fc28, FileInformation=0x3e66558, Length=0xb2, FileInformationClass=0xa) returned 0x0 [0130.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 [0130.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ff88) returned 1 [0130.544] NtQueryInformationFile (in: FileHandle=0x19d0, IoStatusBlock=0x950fbf8, FileInformation=0x950fc00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x950fbf8, FileInformation=0x950fc00) returned 0x0 [0130.544] NtSetInformationFile (FileHandle=0x19d0, IoStatusBlock=0x950fbf8, FileInformation=0x950fc00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053870) returned 1 [0130.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 [0130.546] FlushFileBuffers (hFile=0x19d0) returned 1 [0130.711] CloseHandle (hObject=0x19d0) returned 1 [0130.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb60b0 [0130.713] wcscpy (in: _Dest=0x3eb60b0, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0130.713] wcscat (in: _Dest=0x3eb60b0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" [0130.713] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\68814f-readme.txt")) returned 0x20 [0130.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 [0130.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5e50) returned 1 Thread: id = 879 os_tid = 0x159c [0129.917] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\Bb2FqnIGSXrVjU6Pu.ppt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\bb2fqnigsxrvju6pu.ppt")) returned 0x20 [0129.917] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\Bb2FqnIGSXrVjU6Pu.ppt", dwFileAttributes=0x20) returned 1 [0129.918] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\Bb2FqnIGSXrVjU6Pu.ppt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\bb2fqnigsxrvju6pu.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19d4 [0129.918] GetFileSizeEx (in: hFile=0x19d4, lpFileSize=0x414f804 | out: lpFileSize=0x414f804*=26155) returned 1 [0129.918] SetFilePointerEx (in: hFile=0x19d4, liDistanceToMove=0x6627, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.918] ReadFile (in: hFile=0x19d4, lpBuffer=0x414f7e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x414f7f0, lpOverlapped=0x0 | out: lpBuffer=0x414f7e0*, lpNumberOfBytesRead=0x414f7f0*=0x4, lpOverlapped=0x0) returned 1 [0129.920] SetFilePointerEx (in: hFile=0x19d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0129.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0129.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0129.920] NtQuerySystemTime (in: CurrentTime=0x414f778 | out: CurrentTime=0x414f778*=132462177093072000) returned 0x0 [0129.920] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x25937553 [0129.920] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x34fbc226 [0129.920] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x7254c45d [0129.920] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x5cce14a1 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x13af865e [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x733811d2 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x1bddff8d [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x435d9bbc [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x649b7ee1 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x5609c3f7 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x19ba9539 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x4f7683a0 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x1eb6af65 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x6a4d47b0 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x13218c5f [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x454f889 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x2ba8b6a1 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x5578d3cb [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x6703ba61 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x524f1c01 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x6d759664 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x477bc2f9 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x6602a5e1 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x49507f31 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x33488ad1 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x28bee307 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0xf78b134 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x76b3cd00 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x29f0ca74 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x204cd1f3 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x3af333d2 [0129.921] RtlRandomEx (in: Seed=0x414f770 | out: Seed=0x414f770) returned 0x7d811b71 [0129.932] SetFilePointerEx (in: hFile=0x19d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.932] ReadFile (in: hFile=0x19d4, lpBuffer=0x7c9fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x414f778, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesRead=0x414f778*=0x3c00, lpOverlapped=0x0) returned 1 [0129.932] SetFilePointerEx (in: hFile=0x19d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30314b0 [0129.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0129.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0129.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b988) returned 1 [0129.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca3778 [0129.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0129.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0129.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0129.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0129.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30314b0) returned 1 [0129.934] WriteFile (in: hFile=0x19d4, lpBuffer=0x7ca3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x414f778, lpOverlapped=0x0 | out: lpBuffer=0x7ca3778*, lpNumberOfBytesWritten=0x414f778*=0x3c00, lpOverlapped=0x0) returned 1 [0130.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca3778) returned 1 [0130.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0130.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d0c0 [0130.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e536e8) returned 1 [0130.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d540 [0130.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e536e8 [0130.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0130.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53648) returned 1 [0130.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0130.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a58) returned 1 [0130.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55718 [0130.116] SetFilePointerEx (in: hFile=0x19d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.116] WriteFile (in: hFile=0x19d4, lpBuffer=0x3d55718*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x414f7f8, lpOverlapped=0x0 | out: lpBuffer=0x3d55718*, lpNumberOfBytesWritten=0x414f7f8*=0x11c, lpOverlapped=0x0) returned 1 [0130.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84db0 [0130.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e940 [0130.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0130.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0130.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3013f88 [0130.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0130.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0130.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0130.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0130.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84db0) returned 1 [0130.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6788 [0130.230] sprintf (in: _Dest=0x2fe6788, _Format="%c%c" | out: _Dest="4f") returned 2 [0130.230] sprintf (in: _Dest=0x2fe678a, _Format="%c%c" | out: _Dest="4b") returned 2 [0130.230] sprintf (in: _Dest=0x2fe678c, _Format="%c%c" | out: _Dest="ad") returned 2 [0130.230] sprintf (in: _Dest=0x2fe678e, _Format="%c%c" | out: _Dest="e0") returned 2 [0130.230] sprintf (in: _Dest=0x2fe6790, _Format="%c%c" | out: _Dest="39") returned 2 [0130.230] sprintf (in: _Dest=0x2fe6792, _Format="%c%c" | out: _Dest="d0") returned 2 [0130.230] sprintf (in: _Dest=0x2fe6794, _Format="%c%c" | out: _Dest="d1") returned 2 [0130.230] sprintf (in: _Dest=0x2fe6796, _Format="%c%c" | out: _Dest="37") returned 2 [0130.230] sprintf (in: _Dest=0x2fe6798, _Format="%c%c" | out: _Dest="a4") returned 2 [0130.230] sprintf (in: _Dest=0x2fe679a, _Format="%c%c" | out: _Dest="cf") returned 2 [0130.230] sprintf (in: _Dest=0x2fe679c, _Format="%c%c" | out: _Dest="73") returned 2 [0130.230] sprintf (in: _Dest=0x2fe679e, _Format="%c%c" | out: _Dest="02") returned 2 [0130.230] sprintf (in: _Dest=0x2fe67a0, _Format="%c%c" | out: _Dest="ec") returned 2 [0130.230] sprintf (in: _Dest=0x2fe67a2, _Format="%c%c" | out: _Dest="61") returned 2 [0130.230] sprintf (in: _Dest=0x2fe67a4, _Format="%c%c" | out: _Dest="62") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67a6, _Format="%c%c" | out: _Dest="e3") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67a8, _Format="%c%c" | out: _Dest="3a") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67aa, _Format="%c%c" | out: _Dest="15") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67ac, _Format="%c%c" | out: _Dest="ce") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67ae, _Format="%c%c" | out: _Dest="a4") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67b0, _Format="%c%c" | out: _Dest="ce") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67b2, _Format="%c%c" | out: _Dest="4f") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67b4, _Format="%c%c" | out: _Dest="84") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67b6, _Format="%c%c" | out: _Dest="46") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67b8, _Format="%c%c" | out: _Dest="bf") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67ba, _Format="%c%c" | out: _Dest="0a") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67bc, _Format="%c%c" | out: _Dest="2f") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67be, _Format="%c%c" | out: _Dest="f8") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67c0, _Format="%c%c" | out: _Dest="91") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67c2, _Format="%c%c" | out: _Dest="24") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67c4, _Format="%c%c" | out: _Dest="0c") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67c6, _Format="%c%c" | out: _Dest="c2") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67c8, _Format="%c%c" | out: _Dest="c2") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67ca, _Format="%c%c" | out: _Dest="8d") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67cc, _Format="%c%c" | out: _Dest="35") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67ce, _Format="%c%c" | out: _Dest="6f") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67d0, _Format="%c%c" | out: _Dest="f1") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67d2, _Format="%c%c" | out: _Dest="37") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67d4, _Format="%c%c" | out: _Dest="da") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67d6, _Format="%c%c" | out: _Dest="b8") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67d8, _Format="%c%c" | out: _Dest="84") returned 2 [0130.231] sprintf (in: _Dest=0x2fe67da, _Format="%c%c" | out: _Dest="6b") returned 2 [0130.231] RtlInitAnsiString (in: DestinationString=0x414f780, SourceString="4f4bade039d0d137a4cf7302ec6162e33a15cea4ce4f8446bf0a2ff891240cc2c28d356ff137dab8846b" | out: DestinationString="4f4bade039d0d137a4cf7302ec6162e33a15cea4ce4f8446bf0a2ff891240cc2c28d356ff137dab8846b") [0130.231] RtlAnsiStringToUnicodeString (in: DestinationString=0x414f778, SourceString="4f4bade039d0d137a4cf7302ec6162e33a15cea4ce4f8446bf0a2ff891240cc2c28d356ff137dab8846b", AllocateDestinationString=1 | out: DestinationString="4f4bade039d0d137a4cf7302ec6162e33a15cea4ce4f8446bf0a2ff891240cc2c28d356ff137dab8846b") returned 0x0 [0130.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7430 [0130.232] wcscat (in: _Dest=0x3053fa8, _Source="4f4bade039d0d137a4cf7" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\4f4bade039d0d137a4cf7") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\4f4bade039d0d137a4cf7" [0130.232] wcscat (in: _Dest=0x3053fa8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\4f4bade039d0d137a4cf7.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\4f4bade039d0d137a4cf7.68814f" [0130.232] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\4f4bade039d0d137a4cf7.68814f", NtPathName=0x414f770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\4f4bade039d0d137a4cf7.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0130.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e663d8 [0130.232] NtSetInformationFile (FileHandle=0x19d4, IoStatusBlock=0x414f778, FileInformation=0x3e663d8, Length=0xb4, FileInformationClass=0xa) returned 0x0 [0130.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e663d8) returned 1 [0130.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a72640) returned 1 [0130.317] NtQueryInformationFile (in: FileHandle=0x19d4, IoStatusBlock=0x414f748, FileInformation=0x414f750, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x414f748, FileInformation=0x414f750) returned 0x0 [0130.317] NtSetInformationFile (FileHandle=0x19d4, IoStatusBlock=0x414f748, FileInformation=0x414f750, Length=0x28, FileInformationClass=0x4) returned 0x0 [0130.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 [0130.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0130.365] FlushFileBuffers (hFile=0x19d4) returned 1 [0130.369] CloseHandle (hObject=0x19d4) returned 1 [0130.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5db8 [0130.389] wcscpy (in: _Dest=0x3eb5db8, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0130.389] wcscat (in: _Dest=0x3eb5db8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" [0130.389] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\68814f-readme.txt")) returned 0xffffffff [0130.389] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c0 [0130.394] WriteFile (in: hFile=0x19c0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x414f78c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x414f78c*=0x8b9, lpOverlapped=0x0) returned 1 [0130.401] CloseHandle (hObject=0x19c0) returned 1 [0130.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 [0130.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb61e0) returned 1 Thread: id = 880 os_tid = 0x15a0 [0129.934] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\fiiQeUY_FSsPPoFf7.ppt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\fiiqeuy_fssppoff7.ppt")) returned 0x20 [0129.935] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\fiiQeUY_FSsPPoFf7.ppt", dwFileAttributes=0x20) returned 1 [0129.935] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\fiiQeUY_FSsPPoFf7.ppt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\fiiqeuy_fssppoff7.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19d8 [0129.935] GetFileSizeEx (in: hFile=0x19d8, lpFileSize=0x9a8ff24 | out: lpFileSize=0x9a8ff24*=61061) returned 1 [0129.935] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0xee81, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.935] ReadFile (in: hFile=0x19d8, lpBuffer=0x9a8ff00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a8ff10, lpOverlapped=0x0 | out: lpBuffer=0x9a8ff00*, lpNumberOfBytesRead=0x9a8ff10*=0x4, lpOverlapped=0x0) returned 1 [0129.937] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0129.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0129.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b848 [0129.938] NtQuerySystemTime (in: CurrentTime=0x9a8fe98 | out: CurrentTime=0x9a8fe98*=132462177093228000) returned 0x0 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x59ada7b3 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x67cfb501 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x74d220aa [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0xe1a7a8b [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x65c9b29d [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x952a71b [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x464c5910 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x327ce28d [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x79ee8df4 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x63343ad5 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x9029c10 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x40843bb5 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x5d4e9ee1 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x98b5844 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x37cb94f7 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x42ff88a7 [0129.938] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x43500488 [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x4a6e55d4 [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x2d347e6e [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x6d1099c0 [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x4c6d828b [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x59831c0b [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x214aba7c [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x64e63d0a [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0xe993ae5 [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x11fe9b45 [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x53c71a91 [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x702a71da [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x14c03f36 [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x5b4c75e1 [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0x42791e96 [0129.939] RtlRandomEx (in: Seed=0x9a8fe90 | out: Seed=0x9a8fe90) returned 0xc266db [0129.954] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.955] ReadFile (in: hFile=0x19d8, lpBuffer=0x7a804c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9a8fe98, lpOverlapped=0x0 | out: lpBuffer=0x7a804c8*, lpNumberOfBytesRead=0x9a8fe98*=0x3c00, lpOverlapped=0x0) returned 1 [0129.955] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0129.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48b58 [0129.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0129.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0129.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0129.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a840d0 [0129.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0130.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0130.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0130.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0130.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b58) returned 1 [0130.801] WriteFile (in: hFile=0x19d8, lpBuffer=0x7a840d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9a8fe98, lpOverlapped=0x0 | out: lpBuffer=0x7a840d0*, lpNumberOfBytesWritten=0x9a8fe98*=0x3c00, lpOverlapped=0x0) returned 1 [0131.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a840d0) returned 1 [0131.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a804c8) returned 1 [0131.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d3c0 [0131.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0131.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2de80 [0131.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0131.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0131.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ea8) returned 1 [0131.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0131.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08070) returned 1 [0131.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d54cb0 [0131.442] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.442] WriteFile (in: hFile=0x19d8, lpBuffer=0x3d54cb0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x9a8ff18, lpOverlapped=0x0 | out: lpBuffer=0x3d54cb0*, lpNumberOfBytesWritten=0x9a8ff18*=0x11c, lpOverlapped=0x0) returned 1 [0132.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25350 [0132.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0132.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0132.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0132.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e15f68 [0132.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0132.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0132.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0132.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0132.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6ba8 [0132.571] sprintf (in: _Dest=0x2fe6ba8, _Format="%c%c" | out: _Dest="0a") returned 2 [0132.571] sprintf (in: _Dest=0x2fe6baa, _Format="%c%c" | out: _Dest="70") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bac, _Format="%c%c" | out: _Dest="9c") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bae, _Format="%c%c" | out: _Dest="3b") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bb0, _Format="%c%c" | out: _Dest="c9") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bb2, _Format="%c%c" | out: _Dest="d6") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bb4, _Format="%c%c" | out: _Dest="14") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bb6, _Format="%c%c" | out: _Dest="50") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bb8, _Format="%c%c" | out: _Dest="28") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bba, _Format="%c%c" | out: _Dest="f7") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bbc, _Format="%c%c" | out: _Dest="8d") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bbe, _Format="%c%c" | out: _Dest="e5") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bc0, _Format="%c%c" | out: _Dest="26") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bc2, _Format="%c%c" | out: _Dest="1b") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bc4, _Format="%c%c" | out: _Dest="3a") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bc6, _Format="%c%c" | out: _Dest="cf") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bc8, _Format="%c%c" | out: _Dest="ef") returned 2 [0132.572] sprintf (in: _Dest=0x2fe6bca, _Format="%c%c" | out: _Dest="4a") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bcc, _Format="%c%c" | out: _Dest="f1") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bce, _Format="%c%c" | out: _Dest="70") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bd0, _Format="%c%c" | out: _Dest="9d") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bd2, _Format="%c%c" | out: _Dest="68") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bd4, _Format="%c%c" | out: _Dest="22") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bd6, _Format="%c%c" | out: _Dest="8c") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bd8, _Format="%c%c" | out: _Dest="bd") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bda, _Format="%c%c" | out: _Dest="05") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bdc, _Format="%c%c" | out: _Dest="c3") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bde, _Format="%c%c" | out: _Dest="fe") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6be0, _Format="%c%c" | out: _Dest="47") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6be2, _Format="%c%c" | out: _Dest="30") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6be4, _Format="%c%c" | out: _Dest="2c") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6be6, _Format="%c%c" | out: _Dest="4e") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6be8, _Format="%c%c" | out: _Dest="82") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bea, _Format="%c%c" | out: _Dest="ee") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bec, _Format="%c%c" | out: _Dest="3e") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bee, _Format="%c%c" | out: _Dest="fe") returned 2 [0132.573] sprintf (in: _Dest=0x2fe6bf0, _Format="%c%c" | out: _Dest="9a") returned 2 [0132.574] sprintf (in: _Dest=0x2fe6bf2, _Format="%c%c" | out: _Dest="1e") returned 2 [0132.574] sprintf (in: _Dest=0x2fe6bf4, _Format="%c%c" | out: _Dest="fd") returned 2 [0132.574] sprintf (in: _Dest=0x2fe6bf6, _Format="%c%c" | out: _Dest="4d") returned 2 [0132.574] sprintf (in: _Dest=0x2fe6bf8, _Format="%c%c" | out: _Dest="d0") returned 2 [0132.574] sprintf (in: _Dest=0x2fe6bfa, _Format="%c%c" | out: _Dest="c4") returned 2 [0132.574] RtlInitAnsiString (in: DestinationString=0x9a8fea0, SourceString="0a709c3bc9d6145028f78de5261b3acfef4af1709d68228cbd05c3fe47302c4e82ee3efe9a1efd4dd0c4" | out: DestinationString="0a709c3bc9d6145028f78de5261b3acfef4af1709d68228cbd05c3fe47302c4e82ee3efe9a1efd4dd0c4") [0132.574] RtlAnsiStringToUnicodeString (in: DestinationString=0x9a8fe98, SourceString="0a709c3bc9d6145028f78de5261b3acfef4af1709d68228cbd05c3fe47302c4e82ee3efe9a1efd4dd0c4", AllocateDestinationString=1 | out: DestinationString="0a709c3bc9d6145028f78de5261b3acfef4af1709d68228cbd05c3fe47302c4e82ee3efe9a1efd4dd0c4") returned 0x0 [0132.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7880 [0132.574] wcscat (in: _Dest=0x325320, _Source="0a709c3bc9d6145028f78" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\0a709c3bc9d6145028f78") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\0a709c3bc9d6145028f78" [0132.574] wcscat (in: _Dest=0x325320, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\0a709c3bc9d6145028f78.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\0a709c3bc9d6145028f78.68814f" [0132.574] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\0a709c3bc9d6145028f78.68814f", NtPathName=0x9a8fe90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\0a709c3bc9d6145028f78.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66198 [0132.575] NtSetInformationFile (FileHandle=0x19d8, IoStatusBlock=0x9a8fe98, FileInformation=0x3e66198, Length=0xb4, FileInformationClass=0xa) returned 0x0 [0132.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0132.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a32fc0) returned 1 [0132.634] NtQueryInformationFile (in: FileHandle=0x19d8, IoStatusBlock=0x9a8fe68, FileInformation=0x9a8fe70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9a8fe68, FileInformation=0x9a8fe70) returned 0x0 [0132.634] NtSetInformationFile (FileHandle=0x19d8, IoStatusBlock=0x9a8fe68, FileInformation=0x9a8fe70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x325320) returned 1 [0132.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 [0132.654] FlushFileBuffers (hFile=0x19d8) returned 1 [0135.195] CloseHandle (hObject=0x19d8) returned 1 [0135.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7448 [0135.200] wcscpy (in: _Dest=0x3eb7448, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0135.200] wcscat (in: _Dest=0x3eb7448, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" [0135.200] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\68814f-readme.txt")) returned 0x20 [0135.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7448) returned 1 [0135.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb67d0) returned 1 Thread: id = 881 os_tid = 0x15a4 [0130.803] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\kjpUZbzH8dC.pps" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\kjpuzbzh8dc.pps")) returned 0x20 [0130.804] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\kjpUZbzH8dC.pps", dwFileAttributes=0x20) returned 1 [0130.804] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\kjpUZbzH8dC.pps" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\kjpuzbzh8dc.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd0 [0130.804] GetFileSizeEx (in: hFile=0xcd0, lpFileSize=0xd12f8f4 | out: lpFileSize=0xd12f8f4*=30877) returned 1 [0130.804] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x7899, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.804] ReadFile (in: hFile=0xcd0, lpBuffer=0xd12f8d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd12f8e0, lpOverlapped=0x0 | out: lpBuffer=0xd12f8d0*, lpNumberOfBytesRead=0xd12f8e0*=0x4, lpOverlapped=0x0) returned 1 [0130.806] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0130.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0130.806] NtQuerySystemTime (in: CurrentTime=0xd12f868 | out: CurrentTime=0xd12f868*=132462177101808000) returned 0x0 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x22d5c24d [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x51ebae00 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x3a51ec66 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x136cf55d [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x768a5d79 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x555798da [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x76b8a52c [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x3010dedf [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x1c002186 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x3c1914e7 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x33a4a508 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x30816565 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x2704629b [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x2f04507a [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x3c6a7246 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x75b81cff [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x15e68de1 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x69aabe78 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x3eebb977 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x329e8fa7 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0xd5082b [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x70d9e5fe [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x1b59f5c2 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0xd11c396 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x6db1b473 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x41b110d8 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x7fda454 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x1d93755e [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x2997eb78 [0130.807] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x16e6dea3 [0130.808] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x7d04b7e1 [0130.808] RtlRandomEx (in: Seed=0xd12f860 | out: Seed=0xd12f860) returned 0x54cc99be [0130.817] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.817] ReadFile (in: hFile=0xcd0, lpBuffer=0x7ca7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd12f868, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesRead=0xd12f868*=0x3c00, lpOverlapped=0x0) returned 1 [0130.818] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48c30 [0130.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0130.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0130.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0130.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caaf88 [0130.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0130.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0130.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3290) returned 1 [0130.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0130.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48c30) returned 1 [0130.819] WriteFile (in: hFile=0xcd0, lpBuffer=0x7caaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd12f868, lpOverlapped=0x0 | out: lpBuffer=0x7caaf88*, lpNumberOfBytesWritten=0xd12f868*=0x3c00, lpOverlapped=0x0) returned 1 [0131.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf88) returned 1 [0131.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca7380) returned 1 [0131.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3dac0a0 [0131.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ea8) returned 1 [0131.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3013ff8 [0131.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0131.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0131.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0131.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0131.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08070) returned 1 [0131.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec828 [0131.444] SetFilePointerEx (in: hFile=0xcd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.444] WriteFile (in: hFile=0xcd0, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xd12f8e8, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xd12f8e8*=0x110, lpOverlapped=0x0) returned 1 [0132.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25350 [0132.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0132.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0132.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b618) returned 1 [0132.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x305b618 [0132.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0132.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0132.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0132.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0132.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x7a25350 [0132.577] sprintf (in: _Dest=0x7a25350, _Format="%c%c" | out: _Dest="2b") returned 2 [0132.577] sprintf (in: _Dest=0x7a25352, _Format="%c%c" | out: _Dest="9e") returned 2 [0132.578] sprintf (in: _Dest=0x7a25354, _Format="%c%c" | out: _Dest="86") returned 2 [0132.578] sprintf (in: _Dest=0x7a25356, _Format="%c%c" | out: _Dest="28") returned 2 [0132.578] sprintf (in: _Dest=0x7a25358, _Format="%c%c" | out: _Dest="b0") returned 2 [0132.578] sprintf (in: _Dest=0x7a2535a, _Format="%c%c" | out: _Dest="af") returned 2 [0132.578] sprintf (in: _Dest=0x7a2535c, _Format="%c%c" | out: _Dest="62") returned 2 [0132.578] sprintf (in: _Dest=0x7a2535e, _Format="%c%c" | out: _Dest="f0") returned 2 [0132.578] sprintf (in: _Dest=0x7a25360, _Format="%c%c" | out: _Dest="7c") returned 2 [0132.578] sprintf (in: _Dest=0x7a25362, _Format="%c%c" | out: _Dest="b7") returned 2 [0132.578] sprintf (in: _Dest=0x7a25364, _Format="%c%c" | out: _Dest="b1") returned 2 [0132.578] sprintf (in: _Dest=0x7a25366, _Format="%c%c" | out: _Dest="8a") returned 2 [0132.578] sprintf (in: _Dest=0x7a25368, _Format="%c%c" | out: _Dest="8e") returned 2 [0132.578] sprintf (in: _Dest=0x7a2536a, _Format="%c%c" | out: _Dest="37") returned 2 [0132.578] sprintf (in: _Dest=0x7a2536c, _Format="%c%c" | out: _Dest="f9") returned 2 [0132.578] sprintf (in: _Dest=0x7a2536e, _Format="%c%c" | out: _Dest="be") returned 2 [0132.578] sprintf (in: _Dest=0x7a25370, _Format="%c%c" | out: _Dest="b4") returned 2 [0132.578] sprintf (in: _Dest=0x7a25372, _Format="%c%c" | out: _Dest="06") returned 2 [0132.578] sprintf (in: _Dest=0x7a25374, _Format="%c%c" | out: _Dest="98") returned 2 [0132.578] sprintf (in: _Dest=0x7a25376, _Format="%c%c" | out: _Dest="35") returned 2 [0132.579] sprintf (in: _Dest=0x7a25378, _Format="%c%c" | out: _Dest="20") returned 2 [0132.579] sprintf (in: _Dest=0x7a2537a, _Format="%c%c" | out: _Dest="16") returned 2 [0132.579] sprintf (in: _Dest=0x7a2537c, _Format="%c%c" | out: _Dest="2b") returned 2 [0132.579] sprintf (in: _Dest=0x7a2537e, _Format="%c%c" | out: _Dest="e8") returned 2 [0132.579] sprintf (in: _Dest=0x7a25380, _Format="%c%c" | out: _Dest="52") returned 2 [0132.579] sprintf (in: _Dest=0x7a25382, _Format="%c%c" | out: _Dest="45") returned 2 [0132.579] sprintf (in: _Dest=0x7a25384, _Format="%c%c" | out: _Dest="1e") returned 2 [0132.579] sprintf (in: _Dest=0x7a25386, _Format="%c%c" | out: _Dest="ac") returned 2 [0132.579] sprintf (in: _Dest=0x7a25388, _Format="%c%c" | out: _Dest="34") returned 2 [0132.579] sprintf (in: _Dest=0x7a2538a, _Format="%c%c" | out: _Dest="ce") returned 2 [0132.579] RtlInitAnsiString (in: DestinationString=0xd12f870, SourceString="2b9e8628b0af62f07cb7b18a8e37f9beb406983520162be852451eac34ce" | out: DestinationString="2b9e8628b0af62f07cb7b18a8e37f9beb406983520162be852451eac34ce") [0132.579] RtlAnsiStringToUnicodeString (in: DestinationString=0xd12f868, SourceString="2b9e8628b0af62f07cb7b18a8e37f9beb406983520162be852451eac34ce", AllocateDestinationString=1 | out: DestinationString="2b9e8628b0af62f07cb7b18a8e37f9beb406983520162be852451eac34ce") returned 0x0 [0132.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3be50 [0132.579] wcscat (in: _Dest=0x3df5220, _Source="2b9e8628b0af62f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\2b9e8628b0af62f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\2b9e8628b0af62f" [0132.579] wcscat (in: _Dest=0x3df5220, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\2b9e8628b0af62f.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\2b9e8628b0af62f.68814f" [0132.579] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\2b9e8628b0af62f.68814f", NtPathName=0xd12f860, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\2b9e8628b0af62f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b928 [0132.580] NtSetInformationFile (FileHandle=0xcd0, IoStatusBlock=0xd12f868, FileInformation=0x35b928, Length=0xa8, FileInformationClass=0xa) returned 0x0 [0132.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 [0132.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33a88) returned 1 [0132.684] NtQueryInformationFile (in: FileHandle=0xcd0, IoStatusBlock=0xd12f838, FileInformation=0xd12f840, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd12f838, FileInformation=0xd12f840) returned 0x0 [0132.684] NtSetInformationFile (FileHandle=0xcd0, IoStatusBlock=0xd12f838, FileInformation=0xd12f840, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 [0132.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 [0132.686] FlushFileBuffers (hFile=0xcd0) returned 1 [0135.593] CloseHandle (hObject=0xcd0) returned 1 [0135.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6f88 [0135.597] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0135.597] wcscat (in: _Dest=0x3eb6f88, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" [0135.597] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\68814f-readme.txt")) returned 0x20 [0135.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 [0135.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d454a0) returned 1 Thread: id = 882 os_tid = 0x15a8 [0130.833] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\QJUW TFKNDy.pptx" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\qjuw tfkndy.pptx")) returned 0x20 [0130.833] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\QJUW TFKNDy.pptx", dwFileAttributes=0x20) returned 1 [0130.834] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\QJUW TFKNDy.pptx" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\qjuw tfkndy.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19d0 [0130.834] GetFileSizeEx (in: hFile=0x19d0, lpFileSize=0xc5af88c | out: lpFileSize=0xc5af88c*=51457) returned 1 [0130.834] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0xc8fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.834] ReadFile (in: hFile=0x19d0, lpBuffer=0xc5af868, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc5af878, lpOverlapped=0x0 | out: lpBuffer=0xc5af868*, lpNumberOfBytesRead=0xc5af878*=0x4, lpOverlapped=0x0) returned 1 [0130.836] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0130.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0130.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0130.837] NtQuerySystemTime (in: CurrentTime=0xc5af800 | out: CurrentTime=0xc5af800*=132462177102120000) returned 0x0 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x10add3d8 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x737c1164 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x72098990 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x5b774ea1 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x1d03fe60 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x618cd08a [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x1831cf9a [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x19b40f05 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0xd9e5a6a [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x11f12a [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x447fc2a0 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x5e888c94 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x66efb540 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x24460845 [0130.837] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x4b68f801 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x592c0fa9 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x220c20e8 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x290607b0 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x760a3129 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x49e0feb9 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x7939dba7 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x73136ae4 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x75ca05ee [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0xd5822d4 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x2256bf37 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x46133346 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x4c5d0901 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x5e4dbf49 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x31745374 [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x463c877d [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x130109b [0130.838] RtlRandomEx (in: Seed=0xc5af7f8 | out: Seed=0xc5af7f8) returned 0x6cee3825 [0130.850] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.850] ReadFile (in: hFile=0x19d0, lpBuffer=0x7c9fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc5af800, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesRead=0xc5af800*=0x3c00, lpOverlapped=0x0) returned 1 [0130.851] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48cc0 [0130.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0130.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0130.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3290) returned 1 [0130.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca3778 [0130.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0130.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0130.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3538) returned 1 [0130.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0130.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48cc0) returned 1 [0130.852] WriteFile (in: hFile=0x19d0, lpBuffer=0x7ca3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc5af800, lpOverlapped=0x0 | out: lpBuffer=0x7ca3778*, lpNumberOfBytesWritten=0xc5af800*=0x3c00, lpOverlapped=0x0) returned 1 [0131.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca3778) returned 1 [0131.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0131.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3013f88 [0131.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0131.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3014030 [0131.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0131.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2908 [0131.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2908) returned 1 [0131.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0131.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08070) returned 1 [0131.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55150 [0131.446] SetFilePointerEx (in: hFile=0x19d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.447] WriteFile (in: hFile=0x19d0, lpBuffer=0x3d55150*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xc5af880, lpOverlapped=0x0 | out: lpBuffer=0x3d55150*, lpNumberOfBytesWritten=0xc5af880*=0x112, lpOverlapped=0x0) returned 1 [0132.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25350 [0132.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0132.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31c8 [0132.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31c8) returned 1 [0132.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31c8 [0132.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0132.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0132.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3330) returned 1 [0132.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0132.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e590f8 [0132.582] sprintf (in: _Dest=0x3e590f8, _Format="%c%c" | out: _Dest="78") returned 2 [0132.582] sprintf (in: _Dest=0x3e590fa, _Format="%c%c" | out: _Dest="46") returned 2 [0132.582] sprintf (in: _Dest=0x3e590fc, _Format="%c%c" | out: _Dest="5a") returned 2 [0132.582] sprintf (in: _Dest=0x3e590fe, _Format="%c%c" | out: _Dest="99") returned 2 [0132.582] sprintf (in: _Dest=0x3e59100, _Format="%c%c" | out: _Dest="b7") returned 2 [0132.582] sprintf (in: _Dest=0x3e59102, _Format="%c%c" | out: _Dest="9a") returned 2 [0132.582] sprintf (in: _Dest=0x3e59104, _Format="%c%c" | out: _Dest="50") returned 2 [0132.582] sprintf (in: _Dest=0x3e59106, _Format="%c%c" | out: _Dest="2e") returned 2 [0132.582] sprintf (in: _Dest=0x3e59108, _Format="%c%c" | out: _Dest="80") returned 2 [0132.582] sprintf (in: _Dest=0x3e5910a, _Format="%c%c" | out: _Dest="0e") returned 2 [0132.582] sprintf (in: _Dest=0x3e5910c, _Format="%c%c" | out: _Dest="28") returned 2 [0132.582] sprintf (in: _Dest=0x3e5910e, _Format="%c%c" | out: _Dest="fa") returned 2 [0132.582] sprintf (in: _Dest=0x3e59110, _Format="%c%c" | out: _Dest="13") returned 2 [0132.582] sprintf (in: _Dest=0x3e59112, _Format="%c%c" | out: _Dest="5c") returned 2 [0132.582] sprintf (in: _Dest=0x3e59114, _Format="%c%c" | out: _Dest="9b") returned 2 [0132.582] sprintf (in: _Dest=0x3e59116, _Format="%c%c" | out: _Dest="84") returned 2 [0132.582] sprintf (in: _Dest=0x3e59118, _Format="%c%c" | out: _Dest="fd") returned 2 [0132.583] sprintf (in: _Dest=0x3e5911a, _Format="%c%c" | out: _Dest="08") returned 2 [0132.583] sprintf (in: _Dest=0x3e5911c, _Format="%c%c" | out: _Dest="ae") returned 2 [0132.583] sprintf (in: _Dest=0x3e5911e, _Format="%c%c" | out: _Dest="38") returned 2 [0132.583] sprintf (in: _Dest=0x3e59120, _Format="%c%c" | out: _Dest="a5") returned 2 [0132.583] sprintf (in: _Dest=0x3e59122, _Format="%c%c" | out: _Dest="d1") returned 2 [0132.583] sprintf (in: _Dest=0x3e59124, _Format="%c%c" | out: _Dest="e2") returned 2 [0132.583] sprintf (in: _Dest=0x3e59126, _Format="%c%c" | out: _Dest="d3") returned 2 [0132.583] sprintf (in: _Dest=0x3e59128, _Format="%c%c" | out: _Dest="1d") returned 2 [0132.583] sprintf (in: _Dest=0x3e5912a, _Format="%c%c" | out: _Dest="d8") returned 2 [0132.583] sprintf (in: _Dest=0x3e5912c, _Format="%c%c" | out: _Dest="17") returned 2 [0132.583] sprintf (in: _Dest=0x3e5912e, _Format="%c%c" | out: _Dest="28") returned 2 [0132.583] sprintf (in: _Dest=0x3e59130, _Format="%c%c" | out: _Dest="78") returned 2 [0132.583] sprintf (in: _Dest=0x3e59132, _Format="%c%c" | out: _Dest="e9") returned 2 [0132.583] sprintf (in: _Dest=0x3e59134, _Format="%c%c" | out: _Dest="f3") returned 2 [0132.583] sprintf (in: _Dest=0x3e59136, _Format="%c%c" | out: _Dest="4d") returned 2 [0132.583] RtlInitAnsiString (in: DestinationString=0xc5af808, SourceString="78465a99b79a502e800e28fa135c9b84fd08ae38a5d1e2d31dd8172878e9f34d" | out: DestinationString="78465a99b79a502e800e28fa135c9b84fd08ae38a5d1e2d31dd8172878e9f34d") [0132.583] RtlAnsiStringToUnicodeString (in: DestinationString=0xc5af800, SourceString="78465a99b79a502e800e28fa135c9b84fd08ae38a5d1e2d31dd8172878e9f34d", AllocateDestinationString=1 | out: DestinationString="78465a99b79a502e800e28fa135c9b84fd08ae38a5d1e2d31dd8172878e9f34d") returned 0x0 [0132.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0132.584] wcscat (in: _Dest=0x3df4d20, _Source="78465a99b79a502e" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\78465a99b79a502e") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\78465a99b79a502e" [0132.584] wcscat (in: _Dest=0x3df4d20, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\78465a99b79a502e.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\78465a99b79a502e.68814f" [0132.584] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\78465a99b79a502e.68814f", NtPathName=0xc5af7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\78465a99b79a502e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6db8 [0132.584] NtSetInformationFile (FileHandle=0x19d0, IoStatusBlock=0xc5af800, FileInformation=0x2ff6db8, Length=0xaa, FileInformationClass=0xa) returned 0x0 [0132.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 [0132.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33410) returned 1 [0132.689] NtQueryInformationFile (in: FileHandle=0x19d0, IoStatusBlock=0xc5af7d0, FileInformation=0xc5af7d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc5af7d0, FileInformation=0xc5af7d8) returned 0x0 [0132.689] NtSetInformationFile (FileHandle=0x19d0, IoStatusBlock=0xc5af7d0, FileInformation=0xc5af7d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 [0132.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 [0132.691] FlushFileBuffers (hFile=0x19d0) returned 1 [0135.599] CloseHandle (hObject=0x19d0) returned 1 [0135.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6f88 [0135.601] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\" [0135.601] wcscat (in: _Dest=0x3eb6f88, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" [0135.601] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\DmeEBdWZu35ue8\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\dmeebdwzu35ue8\\68814f-readme.txt")) returned 0x20 [0135.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 [0135.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45380) returned 1 Thread: id = 883 os_tid = 0x15ac [0130.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5e50 [0130.854] wcscpy (in: _Dest=0x3eb5e50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0130.854] wcscat (in: _Dest=0x3eb5e50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0130.854] wcscat (in: _Dest=0x3eb5e50, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*" [0130.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5240 [0130.854] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d980 [0131.454] wcscmp (_String1=".", _String2=".") returned 0 [0131.454] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.454] wcscmp (_String1="..", _String2=".") returned 1 [0131.454] wcscmp (_String1="..", _String2="..") returned 0 [0131.454] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd61c1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0131.454] wcscmp (_String1="CAT", _String2=".") returned 1 [0131.455] wcscmp (_String1="CAT", _String2="..") returned 1 [0131.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5d60 [0131.455] wcscpy (in: _Dest=0x3df5d60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0131.455] wcscat (in: _Dest=0x3df5d60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0131.455] wcscat (in: _Dest=0x3df5d60, _Source="CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0140.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5fe0 [0140.993] wcscpy (in: _Dest=0x3df5fe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0140.993] wcscat (in: _Dest=0x3df5fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0140.994] wcscat (in: _Dest=0x3df5fe0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*" [0140.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb4360 [0140.994] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd61c1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0141.032] wcscmp (_String1=".", _String2=".") returned 0 [0141.032] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd61c1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd668480, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.032] wcscmp (_String1="..", _String2=".") returned 1 [0141.032] wcscmp (_String1="..", _String2="..") returned 0 [0141.032] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0141.032] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0141.032] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0141.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff62f0 [0141.032] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0141.032] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0141.032] wcscat (in: _Dest=0x2ff62f0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" [0141.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf")) returned 0x20 [0141.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0141.033] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.033] GetLastError () returned 0x5 [0141.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0141.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 [0141.033] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd642320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0141.033] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0141.033] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0141.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b878 [0141.033] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0141.033] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0141.033] wcscat (in: _Dest=0x35b878, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" [0141.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf")) returned 0x20 [0141.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0141.073] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.073] GetLastError () returned 0x5 [0141.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0141.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 [0141.073] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd668480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0141.073] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0141.073] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0141.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff62f0 [0141.073] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0141.073] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0141.073] wcscat (in: _Dest=0x2ff62f0, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" [0146.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8 [0146.957] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0146.957] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0146.957] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0146.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6968 [0146.957] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0146.957] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0146.957] wcscat (in: _Dest=0x2ff6968, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" [0146.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0146.959] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0146.959] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0146.959] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0146.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6180 [0146.960] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0146.960] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0146.960] wcscat (in: _Dest=0x2ff6180, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" [0146.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0146.962] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0146.962] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0146.962] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0146.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40510 [0146.963] wcscpy (in: _Dest=0x3d40510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT" [0146.963] wcscat (in: _Dest=0x3d40510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\" [0146.963] wcscat (in: _Dest=0x3d40510, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" [0146.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x239c [0146.964] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3eb4360 | out: lpFindFileData=0x3eb4360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0146.965] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0146.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb4360) returned 1 [0146.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 [0146.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5d60) returned 1 [0146.968] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6c9420, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0146.968] wcscmp (_String1="CHS", _String2=".") returned 1 [0146.968] wcscmp (_String1="CHS", _String2="..") returned 1 [0146.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5d60 [0146.969] wcscpy (in: _Dest=0x3df5d60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0146.969] wcscat (in: _Dest=0x3df5d60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0146.969] wcscat (in: _Dest=0x3df5d60, _Source="CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0146.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df5d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0146.971] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc089a60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0146.971] wcscmp (_String1="CHT", _String2=".") returned 1 [0146.971] wcscmp (_String1="CHT", _String2="..") returned 1 [0146.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5fe0 [0146.971] wcscpy (in: _Dest=0x3df5fe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0146.971] wcscat (in: _Dest=0x3df5fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0146.971] wcscat (in: _Dest=0x3df5fe0, _Source="CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0146.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df5fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2398 [0146.973] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfdc800, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0146.974] wcscmp (_String1="CZE", _String2=".") returned 1 [0146.974] wcscmp (_String1="CZE", _String2="..") returned 1 [0146.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4aa0 [0146.974] wcscpy (in: _Dest=0x3df4aa0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0146.974] wcscat (in: _Dest=0x3df4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0146.974] wcscat (in: _Dest=0x3df4aa0, _Source="CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0146.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0146.977] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc089a60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0146.977] wcscmp (_String1="DAN", _String2=".") returned 1 [0146.977] wcscmp (_String1="DAN", _String2="..") returned 1 [0146.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df6260 [0146.977] wcscpy (in: _Dest=0x3df6260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0146.977] wcscat (in: _Dest=0x3df6260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0146.977] wcscat (in: _Dest=0x3df6260, _Source="DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0146.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df6260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0146.979] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0146.979] wcscmp (_String1="DEU", _String2=".") returned 1 [0146.979] wcscmp (_String1="DEU", _String2="..") returned 1 [0146.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df54a0 [0146.979] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0146.979] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0146.979] wcscat (in: _Dest=0x3df54a0, _Source="DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0146.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df54a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238c [0146.982] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbff14e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0146.982] wcscmp (_String1="ENU", _String2=".") returned 1 [0146.982] wcscmp (_String1="ENU", _String2="..") returned 1 [0146.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df59a0 [0146.982] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0146.982] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0146.982] wcscat (in: _Dest=0x3df59a0, _Source="ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0146.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df59a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2388 [0146.984] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0afbc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0146.984] wcscmp (_String1="ESP", _String2=".") returned 1 [0146.984] wcscmp (_String1="ESP", _String2="..") returned 1 [0146.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4be0 [0146.984] wcscpy (in: _Dest=0x3df4be0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0146.984] wcscat (in: _Dest=0x3df4be0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0146.985] wcscat (in: _Dest=0x3df4be0, _Source="ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0146.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df4be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0146.987] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd406e80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0146.987] wcscmp (_String1="EUQ", _String2=".") returned 1 [0146.987] wcscmp (_String1="EUQ", _String2="..") returned 1 [0146.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5ea0 [0146.987] wcscpy (in: _Dest=0x3df5ea0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0146.987] wcscat (in: _Dest=0x3df5ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0146.987] wcscat (in: _Dest=0x3df5ea0, _Source="EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0146.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df5ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0146.989] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf7f0c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfa5220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0146.989] wcscmp (_String1="FRA", _String2=".") returned 1 [0146.989] wcscmp (_String1="FRA", _String2="..") returned 1 [0146.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4460 [0146.989] wcscpy (in: _Dest=0x3df4460, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0146.990] wcscat (in: _Dest=0x3df4460, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0146.990] wcscat (in: _Dest=0x3df4460, _Source="FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0146.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df4460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c8 [0147.703] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfb66a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0147.703] wcscmp (_String1="HRV", _String2=".") returned 1 [0147.703] wcscmp (_String1="HRV", _String2="..") returned 1 [0147.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a629f0 [0147.703] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.703] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.703] wcscat (in: _Dest=0x7a629f0, _Source="HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0147.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c4 [0147.705] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf90540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfb66a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0147.705] wcscmp (_String1="HUN", _String2=".") returned 1 [0147.705] wcscmp (_String1="HUN", _String2="..") returned 1 [0147.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62a90 [0147.705] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.705] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.705] wcscat (in: _Dest=0x7a62a90, _Source="HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0147.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a4 [0147.706] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbff14e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0147.706] wcscmp (_String1="ITA", _String2=".") returned 1 [0147.707] wcscmp (_String1="ITA", _String2="..") returned 1 [0147.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62b30 [0147.707] wcscpy (in: _Dest=0x7a62b30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.707] wcscat (in: _Dest=0x7a62b30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.707] wcscat (in: _Dest=0x7a62b30, _Source="ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0147.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x229c [0147.708] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc03d7a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0147.708] wcscmp (_String1="JPN", _String2=".") returned 1 [0147.708] wcscmp (_String1="JPN", _String2="..") returned 1 [0147.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62bd0 [0147.708] wcscpy (in: _Dest=0x7a62bd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.708] wcscat (in: _Dest=0x7a62bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.708] wcscat (in: _Dest=0x7a62bd0, _Source="JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0147.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2298 [0147.710] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc03d7a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0147.710] wcscmp (_String1="KOR", _String2=".") returned 1 [0147.710] wcscmp (_String1="KOR", _String2="..") returned 1 [0147.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62c70 [0147.711] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.711] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.711] wcscat (in: _Dest=0x7a62c70, _Source="KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0147.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2294 [0147.712] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfa5220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0147.712] wcscmp (_String1="NLD", _String2=".") returned 1 [0147.712] wcscmp (_String1="NLD", _String2="..") returned 1 [0147.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62d10 [0147.712] wcscpy (in: _Dest=0x7a62d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.712] wcscat (in: _Dest=0x7a62d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.712] wcscat (in: _Dest=0x7a62d10, _Source="NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0147.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2290 [0147.713] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0147.713] wcscmp (_String1="NOR", _String2=".") returned 1 [0147.713] wcscmp (_String1="NOR", _String2="..") returned 1 [0147.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62db0 [0147.714] wcscpy (in: _Dest=0x7a62db0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.714] wcscat (in: _Dest=0x7a62db0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.714] wcscat (in: _Dest=0x7a62db0, _Source="NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0147.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0147.715] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf6a3e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf90540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0147.715] wcscmp (_String1="POL", _String2=".") returned 1 [0147.715] wcscmp (_String1="POL", _String2="..") returned 1 [0147.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62e50 [0147.715] wcscpy (in: _Dest=0x7a62e50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.715] wcscat (in: _Dest=0x7a62e50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.715] wcscat (in: _Dest=0x7a62e50, _Source="POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0147.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2288 [0147.716] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0d5d20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc194400, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0147.716] wcscmp (_String1="PTB", _String2=".") returned 1 [0147.717] wcscmp (_String1="PTB", _String2="..") returned 1 [0147.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62ef0 [0147.717] wcscpy (in: _Dest=0x7a62ef0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.717] wcscat (in: _Dest=0x7a62ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.717] wcscat (in: _Dest=0x7a62ef0, _Source="PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0147.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0147.718] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf44280, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf6a3e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0147.718] wcscmp (_String1="RUM", _String2=".") returned 1 [0147.719] wcscmp (_String1="RUM", _String2="..") returned 1 [0147.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62f90 [0147.719] wcscpy (in: _Dest=0x7a62f90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.719] wcscat (in: _Dest=0x7a62f90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.719] wcscat (in: _Dest=0x7a62f90, _Source="RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0147.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278 [0147.721] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf44280, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0147.721] wcscmp (_String1="RUS", _String2=".") returned 1 [0147.721] wcscmp (_String1="RUS", _String2="..") returned 1 [0147.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63030 [0147.721] wcscpy (in: _Dest=0x7a63030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.721] wcscat (in: _Dest=0x7a63030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.721] wcscat (in: _Dest=0x7a63030, _Source="RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0147.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a63030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274 [0147.723] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0147.723] wcscmp (_String1="SKY", _String2=".") returned 1 [0147.723] wcscmp (_String1="SKY", _String2="..") returned 1 [0147.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a630d0 [0147.723] wcscpy (in: _Dest=0x7a630d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.723] wcscat (in: _Dest=0x7a630d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.723] wcscat (in: _Dest=0x7a630d0, _Source="SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0147.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a630d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2270 [0147.724] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcef7fc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0147.724] wcscmp (_String1="SLV", _String2=".") returned 1 [0147.724] wcscmp (_String1="SLV", _String2="..") returned 1 [0147.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63170 [0147.725] wcscpy (in: _Dest=0x7a63170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.725] wcscat (in: _Dest=0x7a63170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.725] wcscat (in: _Dest=0x7a63170, _Source="SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0147.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a63170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x226c [0147.726] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0147.726] wcscmp (_String1="SUO", _String2=".") returned 1 [0147.726] wcscmp (_String1="SUO", _String2="..") returned 1 [0147.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63210 [0147.726] wcscpy (in: _Dest=0x7a63210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.726] wcscat (in: _Dest=0x7a63210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.726] wcscat (in: _Dest=0x7a63210, _Source="SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0147.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a63210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0147.736] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0147.736] wcscmp (_String1="SVE", _String2=".") returned 1 [0147.736] wcscmp (_String1="SVE", _String2="..") returned 1 [0147.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a632b0 [0147.736] wcscpy (in: _Dest=0x7a632b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.736] wcscat (in: _Dest=0x7a632b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.736] wcscat (in: _Dest=0x7a632b0, _Source="SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0147.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a632b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d1c [0147.738] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdced1e60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcef7fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0147.738] wcscmp (_String1="TUR", _String2=".") returned 1 [0147.738] wcscmp (_String1="TUR", _String2="..") returned 1 [0147.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63350 [0147.738] wcscpy (in: _Dest=0x7a63350, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.738] wcscat (in: _Dest=0x7a63350, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.738] wcscat (in: _Dest=0x7a63350, _Source="TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0147.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a63350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254 [0147.740] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdceabd00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdced1e60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0147.740] wcscmp (_String1="UKR", _String2=".") returned 1 [0147.740] wcscmp (_String1="UKR", _String2="..") returned 1 [0147.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a633f0 [0147.740] wcscpy (in: _Dest=0x7a633f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.740] wcscat (in: _Dest=0x7a633f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.740] wcscat (in: _Dest=0x7a633f0, _Source="UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0147.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a633f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0147.742] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbee6b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 1 [0147.742] wcscmp (_String1="Words.pdf", _String2=".") returned 1 [0147.742] wcscmp (_String1="Words.pdf", _String2="..") returned 1 [0147.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053288 [0147.742] wcscpy (in: _Dest=0x3053288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps" [0147.742] wcscat (in: _Dest=0x3053288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\" [0147.742] wcscat (in: _Dest=0x3053288, _Source="Words.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" [0147.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0147.744] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbee6b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 0 [0147.744] FindClose (in: hFindFile=0x7a2d980 | out: hFindFile=0x7a2d980) returned 1 [0147.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5240) returned 1 [0147.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5e50) returned 1 [0147.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 884 os_tid = 0x15b0 [0130.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26628 [0130.858] wcscpy (in: _Dest=0x7a26628, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" [0130.858] wcscat (in: _Dest=0x7a26628, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\" [0130.858] wcscat (in: _Dest=0x7a26628, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*" [0130.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0130.858] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db80 [0130.859] wcscmp (_String1=".", _String2=".") returned 0 [0130.859] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.859] wcscmp (_String1="..", _String2=".") returned 1 [0130.859] wcscmp (_String1="..", _String2="..") returned 0 [0130.859] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.859] FindClose (in: hFindFile=0x7a2db80 | out: hFindFile=0x7a2db80) returned 1 [0130.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0130.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 [0130.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0a60) returned 1 Thread: id = 885 os_tid = 0x15b4 [0130.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0a60 [0130.861] wcscpy (in: _Dest=0x3ee0a60, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0130.861] wcscat (in: _Dest=0x3ee0a60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\" [0130.861] wcscat (in: _Dest=0x3ee0a60, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*" [0130.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0130.862] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0131.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0a60) returned 1 [0131.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee12e8) returned 1 Thread: id = 886 os_tid = 0x15b8 [0130.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6d00 [0130.865] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0130.865] wcscat (in: _Dest=0x2ff6d00, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0130.865] wcscat (in: _Dest=0x2ff6d00, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*" [0130.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5710 [0130.865] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*", lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8b08 [0131.458] wcscmp (_String1=".", _String2=".") returned 0 [0131.458] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.458] wcscmp (_String1="..", _String2=".") returned 1 [0131.458] wcscmp (_String1="..", _String2="..") returned 0 [0131.458] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0131.458] wcscmp (_String1="x86", _String2=".") returned 1 [0131.458] wcscmp (_String1="x86", _String2="..") returned 1 [0131.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66258 [0131.459] wcscpy (in: _Dest=0x3e66258, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0131.459] wcscat (in: _Dest=0x3e66258, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0131.459] wcscat (in: _Dest=0x3e66258, _Source="x86" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0136.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e66258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08 [0136.754] FindNextFileW (in: hFindFile=0x2fc8b08, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0136.754] FindClose (in: hFindFile=0x2fc8b08 | out: hFindFile=0x2fc8b08) returned 1 [0136.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5710) returned 1 [0136.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 [0136.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 887 os_tid = 0x15bc [0130.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0130.867] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0130.867] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0130.867] wcscat (in: _Dest=0x2ff6b90, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*" [0130.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2db8 [0130.867] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*", lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db80 [0130.867] wcscmp (_String1=".", _String2=".") returned 0 [0130.867] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.867] wcscmp (_String1="..", _String2=".") returned 1 [0130.868] wcscmp (_String1="..", _String2="..") returned 0 [0130.868] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0130.868] wcscmp (_String1="x86", _String2=".") returned 1 [0130.868] wcscmp (_String1="x86", _String2="..") returned 1 [0130.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65c58 [0130.868] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0130.868] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0130.868] wcscat (in: _Dest=0x3e65c58, _Source="x86" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0139.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e65c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0139.616] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0139.616] FindClose (in: hFindFile=0x7a2db80 | out: hFindFile=0x7a2db80) returned 1 [0139.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 [0139.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0139.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6ad8) returned 1 Thread: id = 888 os_tid = 0x15c0 [0130.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c6e8 [0130.869] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0130.869] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0130.869] wcscat (in: _Dest=0x35c6e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*" [0130.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb15a8 [0130.869] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8e48 [0131.459] wcscmp (_String1=".", _String2=".") returned 0 [0131.459] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.459] wcscmp (_String1="..", _String2=".") returned 1 [0131.459] wcscmp (_String1="..", _String2="..") returned 0 [0131.459] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.460] wcscmp (_String1="en-US", _String2=".") returned 1 [0131.460] wcscmp (_String1="en-US", _String2="..") returned 1 [0131.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7e40 [0131.460] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0131.460] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0131.460] wcscat (in: _Dest=0x2ff7e40, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0134.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0134.538] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0134.538] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0134.538] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0134.539] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0134.539] wcscmp (_String1="netfol.ico", _String2=".") returned 1 [0134.539] wcscmp (_String1="netfol.ico", _String2="..") returned 1 [0134.539] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647e2d64, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647e2d64, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0134.539] wcscmp (_String1="pictures.ico", _String2=".") returned 1 [0134.539] wcscmp (_String1="pictures.ico", _String2="..") returned 1 [0134.539] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0134.539] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0134.539] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0134.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a1e8 [0134.539] wcscpy (in: _Dest=0x3e3a1e8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0134.539] wcscat (in: _Dest=0x3e3a1e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0134.539] wcscat (in: _Dest=0x3e3a1e8, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" [0134.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30 [0134.540] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0134.540] wcscmp (_String1="ringtones.ico", _String2=".") returned 1 [0134.540] wcscmp (_String1="ringtones.ico", _String2="..") returned 1 [0134.540] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0134.540] wcscmp (_String1="settings.ico", _String2=".") returned 1 [0134.540] wcscmp (_String1="settings.ico", _String2="..") returned 1 [0134.540] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6482f024, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6482f024, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0134.540] wcscmp (_String1="sync.ico", _String2=".") returned 1 [0134.540] wcscmp (_String1="sync.ico", _String2="..") returned 1 [0134.540] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1137e43c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1137e43c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0134.540] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0134.540] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0134.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66558 [0134.540] wcscpy (in: _Dest=0x3e66558, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0134.540] wcscat (in: _Dest=0x3e66558, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0134.540] wcscat (in: _Dest=0x3e66558, _Source="tasks.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" [0134.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0134.541] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0134.541] wcscmp (_String1="wmp.ico", _String2=".") returned 1 [0134.541] wcscmp (_String1="wmp.ico", _String2="..") returned 1 [0134.541] FindNextFileW (in: hFindFile=0x2fc8e48, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0134.541] FindClose (in: hFindFile=0x2fc8e48 | out: hFindFile=0x2fc8e48) returned 1 [0134.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb15a8) returned 1 [0134.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 [0134.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 889 os_tid = 0x15c4 [0130.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bdf8 [0130.872] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0130.872] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0130.872] wcscat (in: _Dest=0x35bdf8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*" [0130.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb4830 [0130.873] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8dc8 [0131.460] wcscmp (_String1=".", _String2=".") returned 0 [0131.460] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.461] wcscmp (_String1="..", _String2=".") returned 1 [0131.461] wcscmp (_String1="..", _String2="..") returned 0 [0131.461] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0131.461] wcscmp (_String1="en-US", _String2=".") returned 1 [0131.461] wcscmp (_String1="en-US", _String2="..") returned 1 [0131.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6460 [0131.461] wcscpy (in: _Dest=0x2ff6460, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0131.461] wcscat (in: _Dest=0x2ff6460, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0131.461] wcscat (in: _Dest=0x2ff6460, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0136.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff6460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0136.756] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0136.756] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0136.756] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0136.756] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8343e21, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8343e21, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0136.756] wcscmp (_String1="print_pref.ico", _String2=".") returned 1 [0136.756] wcscmp (_String1="print_pref.ico", _String2="..") returned 1 [0136.757] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8369f80, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8369f80, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0136.757] wcscmp (_String1="print_property.ico", _String2=".") returned 1 [0136.757] wcscmp (_String1="print_property.ico", _String2="..") returned 1 [0136.757] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0136.757] wcscmp (_String1="print_queue.ico", _String2=".") returned 1 [0136.757] wcscmp (_String1="print_queue.ico", _String2="..") returned 1 [0136.757] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0136.757] wcscmp (_String1="scan_.ico", _String2=".") returned 1 [0136.757] wcscmp (_String1="scan_.ico", _String2="..") returned 1 [0136.757] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0136.757] wcscmp (_String1="scan_property.ico", _String2=".") returned 1 [0136.757] wcscmp (_String1="scan_property.ico", _String2="..") returned 1 [0136.757] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83dc39d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83dc39d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0136.757] wcscmp (_String1="scan_settings.ico", _String2=".") returned 1 [0136.757] wcscmp (_String1="scan_settings.ico", _String2="..") returned 1 [0136.757] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0136.757] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0136.757] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0136.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65dd8 [0136.757] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0136.757] wcscat (in: _Dest=0x3e65dd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0136.757] wcscat (in: _Dest=0x3e65dd8, _Source="tasks.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" [0136.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0136.759] FindNextFileW (in: hFindFile=0x2fc8dc8, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0136.759] FindClose (in: hFindFile=0x2fc8dc8 | out: hFindFile=0x2fc8dc8) returned 1 [0136.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb4830) returned 1 [0136.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 [0136.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c2c8) returned 1 Thread: id = 890 os_tid = 0x15c8 [0130.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7c18 [0130.876] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0130.876] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0130.876] wcscat (in: _Dest=0x2ff7c18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*" [0130.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0130.876] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8d88 [0131.611] wcscmp (_String1=".", _String2=".") returned 0 [0131.611] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x590038b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59323590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.611] wcscmp (_String1="..", _String2=".") returned 1 [0131.611] wcscmp (_String1="..", _String2="..") returned 0 [0131.611] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x8b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="AboutBox.zip", cAlternateFileName="")) returned 1 [0131.611] wcscmp (_String1="AboutBox.zip", _String2=".") returned 1 [0131.611] wcscmp (_String1="AboutBox.zip", _String2="..") returned 1 [0131.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d84e10 [0131.612] wcscpy (in: _Dest=0x3d84e10, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0131.612] wcscat (in: _Dest=0x3d84e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0131.612] wcscat (in: _Dest=0x3d84e10, _Source="AboutBox.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" [0138.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0138.656] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfig.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1 [0138.656] wcscmp (_String1="AppConfig.zip", _String2=".") returned 1 [0138.656] wcscmp (_String1="AppConfig.zip", _String2="..") returned 1 [0138.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d84ee0 [0138.657] wcscpy (in: _Dest=0x3d84ee0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.657] wcscat (in: _Dest=0x3d84ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.657] wcscat (in: _Dest=0x3d84ee0, _Source="AppConfig.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" [0138.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0138.658] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigInternal.zip", cAlternateFileName="APPCON~2.ZIP")) returned 1 [0138.658] wcscmp (_String1="AppConfigInternal.zip", _String2=".") returned 1 [0138.658] wcscmp (_String1="AppConfigInternal.zip", _String2="..") returned 1 [0138.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8c68 [0138.658] wcscpy (in: _Dest=0x2c8c68, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.658] wcscat (in: _Dest=0x2c8c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.658] wcscat (in: _Dest=0x2c8c68, _Source="AppConfigInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" [0138.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0138.659] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x492, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfo.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1 [0138.659] wcscmp (_String1="AssemblyInfo.zip", _String2=".") returned 1 [0138.659] wcscmp (_String1="AssemblyInfo.zip", _String2="..") returned 1 [0138.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e67490 [0138.659] wcscpy (in: _Dest=0x3e67490, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.659] wcscat (in: _Dest=0x3e67490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.659] wcscat (in: _Dest=0x3e67490, _Source="AssemblyInfo.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" [0138.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0138.660] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~2.ZIP")) returned 1 [0138.660] wcscmp (_String1="AssemblyInfoInternal.zip", _String2=".") returned 1 [0138.660] wcscmp (_String1="AssemblyInfoInternal.zip", _String2="..") returned 1 [0138.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc3d08 [0138.660] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.660] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.660] wcscat (in: _Dest=0x3dc3d08, _Source="AssemblyInfoInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" [0138.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8 [0138.661] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0138.661] wcscmp (_String1="Class.zip", _String2=".") returned 1 [0138.661] wcscmp (_String1="Class.zip", _String2="..") returned 1 [0138.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e3a120 [0138.661] wcscpy (in: _Dest=0x3e3a120, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.661] wcscat (in: _Dest=0x3e3a120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.661] wcscat (in: _Dest=0x3e3a120, _Source="Class.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" [0138.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20bc [0138.662] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeFile.zip", cAlternateFileName="")) returned 1 [0138.662] wcscmp (_String1="CodeFile.zip", _String2=".") returned 1 [0138.662] wcscmp (_String1="CodeFile.zip", _String2="..") returned 1 [0138.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85080 [0138.662] wcscpy (in: _Dest=0x3d85080, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.662] wcscat (in: _Dest=0x3d85080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.662] wcscat (in: _Dest=0x3d85080, _Source="CodeFile.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" [0138.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0138.663] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5909be30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataSet.zip", cAlternateFileName="")) returned 1 [0138.663] wcscmp (_String1="DataSet.zip", _String2=".") returned 1 [0138.663] wcscmp (_String1="DataSet.zip", _String2="..") returned 1 [0138.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d852f0 [0138.664] wcscpy (in: _Dest=0x3d852f0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.664] wcscat (in: _Dest=0x3d852f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.664] wcscat (in: _Dest=0x3d852f0, _Source="DataSet.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" [0138.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d852f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4 [0138.665] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1 [0138.665] wcscmp (_String1="EmptyDatabase.zip", _String2=".") returned 1 [0138.665] wcscmp (_String1="EmptyDatabase.zip", _String2="..") returned 1 [0138.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68570 [0138.665] wcscpy (in: _Dest=0x3e68570, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.665] wcscat (in: _Dest=0x3e68570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.665] wcscat (in: _Dest=0x3e68570, _Source="EmptyDatabase.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" [0138.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0138.666] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x585, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0138.666] wcscmp (_String1="Form.zip", _String2=".") returned 1 [0138.666] wcscmp (_String1="Form.zip", _String2="..") returned 1 [0138.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40830 [0138.666] wcscpy (in: _Dest=0x3d40830, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.666] wcscat (in: _Dest=0x3d40830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.666] wcscat (in: _Dest=0x3d40830, _Source="Form.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" [0138.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20cc [0138.667] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interface.zip", cAlternateFileName="INTERF~1.ZIP")) returned 1 [0138.667] wcscmp (_String1="Interface.zip", _String2=".") returned 1 [0138.667] wcscmp (_String1="Interface.zip", _String2="..") returned 1 [0138.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d853c0 [0138.667] wcscpy (in: _Dest=0x3d853c0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.667] wcscat (in: _Dest=0x3d853c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.667] wcscat (in: _Dest=0x3d853c0, _Source="Interface.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" [0138.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d853c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0138.668] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591343b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x3719, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1 [0138.668] wcscmp (_String1="MDIParent.zip", _String2=".") returned 1 [0138.668] wcscmp (_String1="MDIParent.zip", _String2="..") returned 1 [0138.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d85220 [0138.668] wcscpy (in: _Dest=0x3d85220, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.668] wcscat (in: _Dest=0x3d85220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.668] wcscat (in: _Dest=0x3d85220, _Source="MDIParent.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" [0138.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0138.669] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource.zip", cAlternateFileName="")) returned 1 [0138.669] wcscmp (_String1="Resource.zip", _String2=".") returned 1 [0138.669] wcscmp (_String1="Resource.zip", _String2="..") returned 1 [0138.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d84fb0 [0138.669] wcscpy (in: _Dest=0x3d84fb0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.669] wcscat (in: _Dest=0x3d84fb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.669] wcscat (in: _Dest=0x3d84fb0, _Source="Resource.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" [0138.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0138.670] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1 [0138.670] wcscmp (_String1="ResourceInternal.zip", _String2=".") returned 1 [0138.670] wcscmp (_String1="ResourceInternal.zip", _String2="..") returned 1 [0138.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8aa8 [0138.670] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.670] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.670] wcscat (in: _Dest=0x2c8aa8, _Source="ResourceInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" [0138.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0138.671] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.zip", cAlternateFileName="")) returned 1 [0138.672] wcscmp (_String1="Settings.zip", _String2=".") returned 1 [0138.672] wcscmp (_String1="Settings.zip", _String2="..") returned 1 [0138.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d858a0 [0138.672] wcscpy (in: _Dest=0x3d858a0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.672] wcscat (in: _Dest=0x3d858a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.672] wcscat (in: _Dest=0x3d858a0, _Source="Settings.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" [0138.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d858a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0138.673] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1 [0138.673] wcscmp (_String1="SettingsInternal.zip", _String2=".") returned 1 [0138.673] wcscmp (_String1="SettingsInternal.zip", _String2="..") returned 1 [0138.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8648 [0138.673] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.673] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.673] wcscat (in: _Dest=0x2c8648, _Source="SettingsInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" [0138.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0138.674] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextFile.zip", cAlternateFileName="")) returned 1 [0138.674] wcscmp (_String1="TextFile.zip", _String2=".") returned 1 [0138.674] wcscmp (_String1="TextFile.zip", _String2="..") returned 1 [0138.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85b10 [0138.674] wcscpy (in: _Dest=0x3d85b10, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.674] wcscat (in: _Dest=0x3d85b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.674] wcscat (in: _Dest=0x3d85b10, _Source="TextFile.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" [0138.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0138.675] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1 [0138.675] wcscmp (_String1="UserControl.zip", _String2=".") returned 1 [0138.675] wcscmp (_String1="UserControl.zip", _String2="..") returned 1 [0138.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68498 [0138.676] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.676] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.676] wcscat (in: _Dest=0x3e68498, _Source="UserControl.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" [0138.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0138.677] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592d72d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizer.zip", cAlternateFileName="VISUAL~1.ZIP")) returned 1 [0138.677] wcscmp (_String1="Visualizer.zip", _String2=".") returned 1 [0138.677] wcscmp (_String1="Visualizer.zip", _String2="..") returned 1 [0138.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68648 [0138.677] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.677] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.677] wcscat (in: _Dest=0x3e68648, _Source="Visualizer.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" [0138.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0138.678] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 1 [0138.678] wcscmp (_String1="XmlFile.zip", _String2=".") returned 1 [0138.678] wcscmp (_String1="XmlFile.zip", _String2="..") returned 1 [0138.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85d80 [0138.678] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033" [0138.678] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\" [0138.678] wcscat (in: _Dest=0x3d85d80, _Source="XmlFile.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" [0138.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0138.679] FindNextFileW (in: hFindFile=0x2fc8d88, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59323590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 0 [0138.679] FindClose (in: hFindFile=0x2fc8d88 | out: hFindFile=0x2fc8d88) returned 1 [0138.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0138.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 [0138.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7208) returned 1 Thread: id = 891 os_tid = 0x15cc [0130.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a378 [0130.880] wcscpy (in: _Dest=0x3e3a378, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0130.880] wcscat (in: _Dest=0x3e3a378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0130.881] wcscat (in: _Dest=0x3e3a378, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*" [0130.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0130.881] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc87c8 [0131.612] wcscmp (_String1=".", _String2=".") returned 0 [0131.613] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5904fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x592b1170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.613] wcscmp (_String1="..", _String2=".") returned 1 [0131.613] wcscmp (_String1="..", _String2="..") returned 0 [0131.613] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1 [0131.613] wcscmp (_String1="AppConfigurationInternal.zip", _String2=".") returned 1 [0131.613] wcscmp (_String1="AppConfigurationInternal.zip", _String2="..") returned 1 [0131.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x327410 [0131.613] wcscpy (in: _Dest=0x327410, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0131.613] wcscat (in: _Dest=0x327410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0131.613] wcscat (in: _Dest=0x327410, _Source="AppConfigurationInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" [0134.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x327410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0134.545] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5904fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1 [0134.545] wcscmp (_String1="AssemblyInfoInternal.zip", _String2=".") returned 1 [0134.545] wcscmp (_String1="AssemblyInfoInternal.zip", _String2="..") returned 1 [0134.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ddf4c8 [0134.545] wcscpy (in: _Dest=0x3ddf4c8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.545] wcscat (in: _Dest=0x3ddf4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.545] wcscat (in: _Dest=0x3ddf4c8, _Source="AssemblyInfoInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" [0134.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ddf4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0134.546] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x59075cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0134.546] wcscmp (_String1="Class.zip", _String2=".") returned 1 [0134.546] wcscmp (_String1="Class.zip", _String2="..") returned 1 [0134.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x30115c0 [0134.546] wcscpy (in: _Dest=0x30115c0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.546] wcscat (in: _Dest=0x30115c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.546] wcscat (in: _Dest=0x30115c0, _Source="Class.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" [0134.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30115c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0134.547] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5909be30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1 [0134.547] wcscmp (_String1="Dataset.zip", _String2=".") returned 1 [0134.547] wcscmp (_String1="Dataset.zip", _String2="..") returned 1 [0134.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3012bb0 [0134.547] wcscpy (in: _Dest=0x3012bb0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.548] wcscat (in: _Dest=0x3012bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.548] wcscat (in: _Dest=0x3012bb0, _Source="Dataset.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" [0134.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3012bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0134.549] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5909be30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1 [0134.549] wcscmp (_String1="Dialog.zip", _String2=".") returned 1 [0134.549] wcscmp (_String1="Dialog.zip", _String2="..") returned 1 [0134.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011188 [0134.549] wcscpy (in: _Dest=0x3011188, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.549] wcscat (in: _Dest=0x3011188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.549] wcscat (in: _Dest=0x3011188, _Source="Dialog.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" [0134.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3011188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0134.550] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1 [0134.550] wcscmp (_String1="EmptyDatabase.zip", _String2=".") returned 1 [0134.550] wcscmp (_String1="EmptyDatabase.zip", _String2="..") returned 1 [0134.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x2ff1f88 [0134.550] wcscpy (in: _Dest=0x2ff1f88, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.550] wcscat (in: _Dest=0x2ff1f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.550] wcscat (in: _Dest=0x2ff1f88, _Source="EmptyDatabase.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" [0134.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff1f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0134.551] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1 [0134.551] wcscmp (_String1="Explorer.zip", _String2=".") returned 1 [0134.551] wcscmp (_String1="Explorer.zip", _String2="..") returned 1 [0134.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e67568 [0134.551] wcscpy (in: _Dest=0x3e67568, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.552] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.552] wcscat (in: _Dest=0x3e67568, _Source="Explorer.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" [0134.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0134.553] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0134.553] wcscmp (_String1="Form.zip", _String2=".") returned 1 [0134.553] wcscmp (_String1="Form.zip", _String2="..") returned 1 [0134.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d85cb0 [0134.553] wcscpy (in: _Dest=0x3d85cb0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.553] wcscat (in: _Dest=0x3d85cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.553] wcscat (in: _Dest=0x3d85cb0, _Source="Form.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" [0134.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0134.554] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5910e250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="LOGINF~1.ZIP")) returned 1 [0134.554] wcscmp (_String1="LoginForm.zip", _String2=".") returned 1 [0134.554] wcscmp (_String1="LoginForm.zip", _String2="..") returned 1 [0134.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8648 [0134.554] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.554] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.554] wcscat (in: _Dest=0x2c8648, _Source="LoginForm.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" [0134.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0134.555] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591343b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1 [0134.555] wcscmp (_String1="MDIParent.zip", _String2=".") returned 1 [0134.555] wcscmp (_String1="MDIParent.zip", _String2="..") returned 1 [0134.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8aa8 [0134.555] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.556] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.556] wcscat (in: _Dest=0x2c8aa8, _Source="MDIParent.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" [0134.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0134.557] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x5915a510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1 [0134.557] wcscmp (_String1="Module.zip", _String2=".") returned 1 [0134.557] wcscmp (_String1="Module.zip", _String2="..") returned 1 [0134.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e67490 [0134.557] wcscpy (in: _Dest=0x3e67490, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.557] wcscat (in: _Dest=0x3e67490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.557] wcscat (in: _Dest=0x3e67490, _Source="Module.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" [0134.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0134.558] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1 [0134.558] wcscmp (_String1="ResourceInternal.zip", _String2=".") returned 1 [0134.558] wcscmp (_String1="ResourceInternal.zip", _String2="..") returned 1 [0134.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3df0 [0134.558] wcscpy (in: _Dest=0x3dc3df0, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.558] wcscat (in: _Dest=0x3dc3df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.559] wcscat (in: _Dest=0x3dc3df0, _Source="ResourceInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" [0134.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60 [0134.560] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1 [0134.560] wcscmp (_String1="SettingsInternal.zip", _String2=".") returned 1 [0134.560] wcscmp (_String1="SettingsInternal.zip", _String2="..") returned 1 [0134.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3d08 [0134.560] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.560] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.560] wcscat (in: _Dest=0x3dc3d08, _Source="SettingsInternal.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" [0134.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0134.561] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x591cc930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="SPLASH~1.ZIP")) returned 1 [0134.561] wcscmp (_String1="SplashScreen.zip", _String2=".") returned 1 [0134.561] wcscmp (_String1="SplashScreen.zip", _String2="..") returned 1 [0134.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8488 [0134.561] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.561] wcscat (in: _Dest=0x2c8488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.561] wcscat (in: _Dest=0x2c8488, _Source="SplashScreen.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" [0134.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0134.562] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1 [0134.562] wcscmp (_String1="Text.zip", _String2=".") returned 1 [0134.562] wcscmp (_String1="Text.zip", _String2="..") returned 1 [0134.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d85970 [0134.562] wcscpy (in: _Dest=0x3d85970, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.562] wcscat (in: _Dest=0x3d85970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.562] wcscat (in: _Dest=0x3d85970, _Source="Text.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" [0134.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0134.563] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1 [0134.563] wcscmp (_String1="UserControl.zip", _String2=".") returned 1 [0134.564] wcscmp (_String1="UserControl.zip", _String2="..") returned 1 [0134.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8c68 [0134.564] wcscpy (in: _Dest=0x2c8c68, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033" [0134.564] wcscat (in: _Dest=0x2c8c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\" [0134.564] wcscat (in: _Dest=0x2c8c68, _Source="UserControl.zip" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" [0134.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0134.565] FindNextFileW (in: hFindFile=0x2fc87c8, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2184f900, ftCreationTime.dwHighDateTime=0x1c9e4a1, ftLastAccessTime.dwLowDateTime=0x592b1170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2184f900, ftLastWriteTime.dwHighDateTime=0x1c9e4a1, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 0 [0134.565] FindClose (in: hFindFile=0x2fc87c8 | out: hFindFile=0x2fc87c8) returned 1 [0134.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0134.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a378) returned 1 [0134.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 Thread: id = 892 os_tid = 0x15d0 [0130.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba220 [0130.885] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" [0130.885] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\" [0130.885] wcscat (in: _Dest=0x3eba220, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*" [0130.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0130.885] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0130.886] wcscmp (_String1=".", _String2=".") returned 0 [0130.886] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.886] wcscmp (_String1="..", _String2=".") returned 1 [0130.886] wcscmp (_String1="..", _String2="..") returned 0 [0130.886] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f00bc1a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f00bc1a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0130.886] wcscmp (_String1="en-US", _String2=".") returned 1 [0130.886] wcscmp (_String1="en-US", _String2="..") returned 1 [0130.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44450 [0130.886] wcscpy (in: _Dest=0x3d44450, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20" [0130.886] wcscat (in: _Dest=0x3d44450, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\" [0130.886] wcscat (in: _Dest=0x3d44450, _Source="en-US" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" [0132.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0132.343] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7523740, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7523740, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f416c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0132.343] wcscmp (_String1="MSTTSCommon.dll", _String2=".") returned 1 [0132.343] wcscmp (_String1="MSTTSCommon.dll", _String2="..") returned 1 [0132.343] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b630d6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b630d6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f4f9d60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSDecWrp.dll", cAlternateFileName="")) returned 1 [0132.343] wcscmp (_String1="MSTTSDecWrp.dll", _String2=".") returned 1 [0132.343] wcscmp (_String1="MSTTSDecWrp.dll", _String2="..") returned 1 [0132.343] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80be232, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf80be232, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f6c4d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0132.344] wcscmp (_String1="MSTTSEngine.dll", _String2=".") returned 1 [0132.344] wcscmp (_String1="MSTTSEngine.dll", _String2="..") returned 1 [0132.344] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0132.344] wcscmp (_String1="MSTTSLoc.dll", _String2=".") returned 1 [0132.344] wcscmp (_String1="MSTTSLoc.dll", _String2="..") returned 1 [0132.344] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0132.344] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0132.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0132.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 [0132.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 Thread: id = 893 os_tid = 0x15d4 [0130.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da66f0 [0130.887] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" [0130.887] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" [0130.887] wcscat (in: _Dest=0x3da66f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\*") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\*" [0130.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d590a0 [0130.887] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\*", lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x113b7b10, ftCreationTime.dwHighDateTime=0x1d5e0de, ftLastAccessTime.dwLowDateTime=0x86b43d40, ftLastAccessTime.dwHighDateTime=0x1d5e657, ftLastWriteTime.dwLowDateTime=0x86b43d40, ftLastWriteTime.dwHighDateTime=0x1d5e657, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0130.887] wcscmp (_String1=".", _String2=".") returned 0 [0130.888] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x113b7b10, ftCreationTime.dwHighDateTime=0x1d5e0de, ftLastAccessTime.dwLowDateTime=0x86b43d40, ftLastAccessTime.dwHighDateTime=0x1d5e657, ftLastWriteTime.dwLowDateTime=0x86b43d40, ftLastWriteTime.dwHighDateTime=0x1d5e657, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.888] wcscmp (_String1="..", _String2=".") returned 1 [0130.888] wcscmp (_String1="..", _String2="..") returned 0 [0130.888] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712a03a0, ftCreationTime.dwHighDateTime=0x1d5e3f1, ftLastAccessTime.dwLowDateTime=0x3a972ad0, ftLastAccessTime.dwHighDateTime=0x1d5df54, ftLastWriteTime.dwLowDateTime=0x3a972ad0, ftLastWriteTime.dwHighDateTime=0x1d5df54, nFileSizeHigh=0x0, nFileSizeLow=0x9f77, dwReserved0=0x0, dwReserved1=0x0, cFileName="bHXRD.m4a", cAlternateFileName="")) returned 1 [0130.888] wcscmp (_String1="bHXRD.m4a", _String2=".") returned 1 [0130.888] wcscmp (_String1="bHXRD.m4a", _String2="..") returned 1 [0130.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d459b0 [0130.888] wcscpy (in: _Dest=0x3d459b0, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" [0130.888] wcscat (in: _Dest=0x3d459b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" [0130.888] wcscat (in: _Dest=0x3d459b0, _Source="bHXRD.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\bHXRD.m4a") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\bHXRD.m4a" [0132.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d459b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0132.346] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc91d070, ftCreationTime.dwHighDateTime=0x1d5e39a, ftLastAccessTime.dwLowDateTime=0xf0dea7a0, ftLastAccessTime.dwHighDateTime=0x1d5df27, ftLastWriteTime.dwLowDateTime=0xf0dea7a0, ftLastWriteTime.dwHighDateTime=0x1d5df27, nFileSizeHigh=0x0, nFileSizeLow=0x18299, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfvLKuE8ajEliIrq.wav", cAlternateFileName="CFVLKU~1.WAV")) returned 1 [0132.346] wcscmp (_String1="cfvLKuE8ajEliIrq.wav", _String2=".") returned 1 [0132.347] wcscmp (_String1="cfvLKuE8ajEliIrq.wav", _String2="..") returned 1 [0132.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053bb8 [0132.347] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" [0132.347] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" [0132.347] wcscat (in: _Dest=0x3053bb8, _Source="cfvLKuE8ajEliIrq.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\cfvLKuE8ajEliIrq.wav") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\cfvLKuE8ajEliIrq.wav" [0132.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0132.348] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93253c80, ftCreationTime.dwHighDateTime=0x1d5e4f1, ftLastAccessTime.dwLowDateTime=0x7072f030, ftLastAccessTime.dwHighDateTime=0x1d5dcc0, ftLastWriteTime.dwLowDateTime=0x7072f030, ftLastWriteTime.dwHighDateTime=0x1d5dcc0, nFileSizeHigh=0x0, nFileSizeLow=0x318b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ginz5CbvANRbk-zDKg9.wav", cAlternateFileName="GINZ5C~1.WAV")) returned 1 [0132.348] wcscmp (_String1="ginz5CbvANRbk-zDKg9.wav", _String2=".") returned 1 [0132.348] wcscmp (_String1="ginz5CbvANRbk-zDKg9.wav", _String2="..") returned 1 [0132.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c428 [0132.348] wcscpy (in: _Dest=0x35c428, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" [0132.348] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" [0132.348] wcscat (in: _Dest=0x35c428, _Source="ginz5CbvANRbk-zDKg9.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\ginz5CbvANRbk-zDKg9.wav") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\ginz5CbvANRbk-zDKg9.wav" [0132.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0132.350] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3afeb8e0, ftCreationTime.dwHighDateTime=0x1d5e47b, ftLastAccessTime.dwLowDateTime=0x3a30b4a0, ftLastAccessTime.dwHighDateTime=0x1d5de53, ftLastWriteTime.dwLowDateTime=0x3a30b4a0, ftLastWriteTime.dwHighDateTime=0x1d5de53, nFileSizeHigh=0x0, nFileSizeLow=0x10316, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zyxjdg-dwZnfP.mp3", cAlternateFileName="ZYXJDG~1.MP3")) returned 1 [0132.350] wcscmp (_String1="Zyxjdg-dwZnfP.mp3", _String2=".") returned 1 [0132.350] wcscmp (_String1="Zyxjdg-dwZnfP.mp3", _String2="..") returned 1 [0132.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5540 [0132.350] wcscpy (in: _Dest=0x3df5540, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby" [0132.350] wcscat (in: _Dest=0x3df5540, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" [0132.350] wcscat (in: _Dest=0x3df5540, _Source="Zyxjdg-dwZnfP.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\Zyxjdg-dwZnfP.mp3") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\Zyxjdg-dwZnfP.mp3" [0132.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0132.352] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3afeb8e0, ftCreationTime.dwHighDateTime=0x1d5e47b, ftLastAccessTime.dwLowDateTime=0x3a30b4a0, ftLastAccessTime.dwHighDateTime=0x1d5de53, ftLastWriteTime.dwLowDateTime=0x3a30b4a0, ftLastWriteTime.dwHighDateTime=0x1d5de53, nFileSizeHigh=0x0, nFileSizeLow=0x10316, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zyxjdg-dwZnfP.mp3", cAlternateFileName="ZYXJDG~1.MP3")) returned 0 [0132.352] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0132.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d590a0) returned 1 [0132.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0132.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 894 os_tid = 0x15d8 [0130.889] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\qyFTY4uHWM.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\qyfty4uhwm.wav")) returned 0x20 [0130.889] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\qyFTY4uHWM.wav", dwFileAttributes=0x20) returned 1 [0130.889] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\qyFTY4uHWM.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\qyfty4uhwm.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19cc [0130.889] GetFileSizeEx (in: hFile=0x19cc, lpFileSize=0xd6cfe7c | out: lpFileSize=0xd6cfe7c*=40309) returned 1 [0130.889] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x9d71, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.889] ReadFile (in: hFile=0x19cc, lpBuffer=0xd6cfe58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd6cfe68, lpOverlapped=0x0 | out: lpBuffer=0xd6cfe58*, lpNumberOfBytesRead=0xd6cfe68*=0x4, lpOverlapped=0x0) returned 1 [0130.892] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0130.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3268 [0130.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32b8 [0130.892] NtQuerySystemTime (in: CurrentTime=0xd6cfdf0 | out: CurrentTime=0xd6cfdf0*=132462177102744000) returned 0x0 [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x22361fc [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x5766c03d [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x14c049f3 [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x40586766 [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x26480c [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x722fab6b [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x3d6165c5 [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x49ef82ca [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x17e666a5 [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x438cf7e4 [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x1b25af6f [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x79c8ba8e [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x1df1360a [0130.893] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x1ed0540f [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x1351714e [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x3c42fd91 [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x47616a00 [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x7fe0c310 [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x592e112b [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x4c9b823f [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x4c9ba854 [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x149fb5e5 [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x76f41fdb [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x5d7f13e3 [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x3156f166 [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x58303fdc [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x7301e843 [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x59bfec21 [0130.894] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x5041c63e [0130.895] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x1ddb0dc9 [0130.895] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x1983d9ee [0130.895] RtlRandomEx (in: Seed=0xd6cfde8 | out: Seed=0xd6cfde8) returned 0x5e6c652c [0130.910] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.910] ReadFile (in: hFile=0x19cc, lpBuffer=0x7caeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd6cfdf0, lpOverlapped=0x0 | out: lpBuffer=0x7caeb90*, lpNumberOfBytesRead=0xd6cfdf0*=0x3c00, lpOverlapped=0x0) returned 1 [0130.910] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0130.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e858f0 [0130.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0130.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0130.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3240) returned 1 [0130.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb2798 [0130.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0130.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32b8 [0130.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32b8) returned 1 [0130.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0130.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e858f0) returned 1 [0130.911] WriteFile (in: hFile=0x19cc, lpBuffer=0x7cb2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd6cfdf0, lpOverlapped=0x0 | out: lpBuffer=0x7cb2798*, lpNumberOfBytesWritten=0xd6cfdf0*=0x3c00, lpOverlapped=0x0) returned 1 [0131.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2798) returned 1 [0131.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caeb90) returned 1 [0131.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3013690 [0131.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0131.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e15ef8 [0131.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0131.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0131.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0131.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0131.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08100) returned 1 [0131.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3deca58 [0131.615] SetFilePointerEx (in: hFile=0x19cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0131.615] WriteFile (in: hFile=0x19cc, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xd6cfe70, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xd6cfe70*=0x10e, lpOverlapped=0x0) returned 1 [0132.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25350 [0132.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x348f48 [0132.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0132.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31a0) returned 1 [0132.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec31a0 [0132.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0132.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0132.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0132.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0132.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x7a25350 [0132.593] sprintf (in: _Dest=0x7a25350, _Format="%c%c" | out: _Dest="dd") returned 2 [0132.593] sprintf (in: _Dest=0x7a25352, _Format="%c%c" | out: _Dest="63") returned 2 [0132.593] sprintf (in: _Dest=0x7a25354, _Format="%c%c" | out: _Dest="87") returned 2 [0132.593] sprintf (in: _Dest=0x7a25356, _Format="%c%c" | out: _Dest="09") returned 2 [0132.593] sprintf (in: _Dest=0x7a25358, _Format="%c%c" | out: _Dest="d7") returned 2 [0132.594] sprintf (in: _Dest=0x7a2535a, _Format="%c%c" | out: _Dest="0e") returned 2 [0132.594] sprintf (in: _Dest=0x7a2535c, _Format="%c%c" | out: _Dest="80") returned 2 [0132.594] sprintf (in: _Dest=0x7a2535e, _Format="%c%c" | out: _Dest="ee") returned 2 [0132.594] sprintf (in: _Dest=0x7a25360, _Format="%c%c" | out: _Dest="1e") returned 2 [0132.594] sprintf (in: _Dest=0x7a25362, _Format="%c%c" | out: _Dest="3d") returned 2 [0132.594] sprintf (in: _Dest=0x7a25364, _Format="%c%c" | out: _Dest="b8") returned 2 [0132.594] sprintf (in: _Dest=0x7a25366, _Format="%c%c" | out: _Dest="0e") returned 2 [0132.594] sprintf (in: _Dest=0x7a25368, _Format="%c%c" | out: _Dest="b9") returned 2 [0132.594] sprintf (in: _Dest=0x7a2536a, _Format="%c%c" | out: _Dest="d7") returned 2 [0132.594] sprintf (in: _Dest=0x7a2536c, _Format="%c%c" | out: _Dest="3d") returned 2 [0132.594] sprintf (in: _Dest=0x7a2536e, _Format="%c%c" | out: _Dest="f4") returned 2 [0132.594] sprintf (in: _Dest=0x7a25370, _Format="%c%c" | out: _Dest="f5") returned 2 [0132.594] sprintf (in: _Dest=0x7a25372, _Format="%c%c" | out: _Dest="a9") returned 2 [0132.594] sprintf (in: _Dest=0x7a25374, _Format="%c%c" | out: _Dest="d6") returned 2 [0132.594] sprintf (in: _Dest=0x7a25376, _Format="%c%c" | out: _Dest="ad") returned 2 [0132.594] sprintf (in: _Dest=0x7a25378, _Format="%c%c" | out: _Dest="d5") returned 2 [0132.594] sprintf (in: _Dest=0x7a2537a, _Format="%c%c" | out: _Dest="5e") returned 2 [0132.594] sprintf (in: _Dest=0x7a2537c, _Format="%c%c" | out: _Dest="a9") returned 2 [0132.594] sprintf (in: _Dest=0x7a2537e, _Format="%c%c" | out: _Dest="dd") returned 2 [0132.594] sprintf (in: _Dest=0x7a25380, _Format="%c%c" | out: _Dest="e8") returned 2 [0132.594] sprintf (in: _Dest=0x7a25382, _Format="%c%c" | out: _Dest="d3") returned 2 [0132.594] sprintf (in: _Dest=0x7a25384, _Format="%c%c" | out: _Dest="9b") returned 2 [0132.595] sprintf (in: _Dest=0x7a25386, _Format="%c%c" | out: _Dest="6c") returned 2 [0132.595] RtlInitAnsiString (in: DestinationString=0xd6cfdf8, SourceString="dd638709d70e80ee1e3db80eb9d73df4f5a9d6add55ea9dde8d39b6c" | out: DestinationString="dd638709d70e80ee1e3db80eb9d73df4f5a9d6add55ea9dde8d39b6c") [0132.595] RtlAnsiStringToUnicodeString (in: DestinationString=0xd6cfdf0, SourceString="dd638709d70e80ee1e3db80eb9d73df4f5a9d6add55ea9dde8d39b6c", AllocateDestinationString=1 | out: DestinationString="dd638709d70e80ee1e3db80eb9d73df4f5a9d6add55ea9dde8d39b6c") returned 0x0 [0132.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19018 [0132.595] wcscat (in: _Dest=0x3df6120, _Source="dd638709d70e80" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\dd638709d70e80") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\dd638709d70e80" [0132.595] wcscat (in: _Dest=0x3df6120, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\dd638709d70e80.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\dd638709d70e80.68814f" [0132.595] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\dd638709d70e80.68814f", NtPathName=0xd6cfde8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\dd638709d70e80.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c588 [0132.595] NtSetInformationFile (FileHandle=0x19cc, IoStatusBlock=0xd6cfdf0, FileInformation=0x35c588, Length=0xa8, FileInformationClass=0xa) returned 0x0 [0132.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 [0132.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33cb0) returned 1 [0132.627] NtQueryInformationFile (in: FileHandle=0x19cc, IoStatusBlock=0xd6cfdc0, FileInformation=0xd6cfdc8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd6cfdc0, FileInformation=0xd6cfdc8) returned 0x0 [0132.627] NtSetInformationFile (FileHandle=0x19cc, IoStatusBlock=0xd6cfdc0, FileInformation=0xd6cfdc8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6120) returned 1 [0132.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19018) returned 1 [0132.645] FlushFileBuffers (hFile=0x19cc) returned 1 [0135.193] CloseHandle (hObject=0x19cc) returned 1 [0135.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6f88 [0135.194] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\" [0135.194] wcscat (in: _Dest=0x3eb6f88, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\68814F-Readme.txt" [0135.194] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\68814f-readme.txt")) returned 0xffffffff [0135.194] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcb4 [0135.580] WriteFile (in: hFile=0xcb4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd6cfe04, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd6cfe04*=0x8b9, lpOverlapped=0x0) returned 1 [0135.583] CloseHandle (hObject=0xcb4) returned 1 [0135.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 [0135.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 Thread: id = 895 os_tid = 0x15dc [0130.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7d88 [0130.914] wcscpy (in: _Dest=0x2ff7d88, _Source="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0130.914] wcscat (in: _Dest=0x2ff7d88, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\" [0130.914] wcscat (in: _Dest=0x2ff7d88, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*") returned="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*" [0130.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d5a178 [0130.914] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*", lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0130.914] wcscmp (_String1=".", _String2=".") returned 0 [0130.914] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.914] wcscmp (_String1="..", _String2=".") returned 1 [0130.915] wcscmp (_String1="..", _String2="..") returned 0 [0130.915] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6bd02b0, ftCreationTime.dwHighDateTime=0x1d2da0d, ftLastAccessTime.dwLowDateTime=0x6bd02b0, ftLastAccessTime.dwHighDateTime=0x1d2da0d, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.915] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0130.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a178) returned 1 [0130.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7d88) returned 1 [0130.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 Thread: id = 896 os_tid = 0x15e0 [0130.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb99a0 [0130.917] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0130.917] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0130.917] wcscat (in: _Dest=0x3eb99a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*" [0130.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d5a178 [0130.917] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0130.917] wcscmp (_String1=".", _String2=".") returned 0 [0130.917] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.918] wcscmp (_String1="..", _String2=".") returned 1 [0130.918] wcscmp (_String1="..", _String2="..") returned 0 [0130.918] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0130.918] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2=".") returned 1 [0130.918] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2="..") returned 1 [0130.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ddf1f8 [0130.918] wcscpy (in: _Dest=0x3ddf1f8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0130.918] wcscat (in: _Dest=0x3ddf1f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0130.918] wcscat (in: _Dest=0x3ddf1f8, _Source="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" [0139.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ddf1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024 [0139.618] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0139.618] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2=".") returned 1 [0139.618] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2="..") returned 1 [0139.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3dde3e8 [0139.618] wcscpy (in: _Dest=0x3dde3e8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0139.618] wcscat (in: _Dest=0x3dde3e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0139.618] wcscat (in: _Dest=0x3dde3e8, _Source="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" [0139.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dde3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2214 [0139.619] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0139.619] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0139.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a178) returned 1 [0139.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 [0139.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19998) returned 1 Thread: id = 897 os_tid = 0x15e4 [0130.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e238 [0130.919] wcscpy (in: _Dest=0x3f3e238, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0130.919] wcscat (in: _Dest=0x3f3e238, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0130.919] wcscat (in: _Dest=0x3f3e238, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*" [0130.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0130.919] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0130.919] wcscmp (_String1=".", _String2=".") returned 0 [0130.919] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.920] wcscmp (_String1="..", _String2=".") returned 1 [0130.920] wcscmp (_String1="..", _String2="..") returned 0 [0130.920] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0130.920] wcscmp (_String1="Accessories", _String2=".") returned 1 [0130.920] wcscmp (_String1="Accessories", _String2="..") returned 1 [0130.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d447b0 [0130.920] wcscpy (in: _Dest=0x3d447b0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0130.920] wcscat (in: _Dest=0x3d447b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0130.920] wcscat (in: _Dest=0x3d447b0, _Source="Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0139.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d447b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0139.815] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0139.815] wcscmp (_String1="Administrative Tools", _String2=".") returned 1 [0139.815] wcscmp (_String1="Administrative Tools", _String2="..") returned 1 [0139.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df59a0 [0139.815] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0139.815] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0139.815] wcscat (in: _Dest=0x3df59a0, _Source="Administrative Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0139.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df59a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0139.816] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f02380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1f02380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1f02380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0139.816] wcscmp (_String1="Adobe Reader X.lnk", _String2=".") returned 1 [0139.816] wcscmp (_String1="Adobe Reader X.lnk", _String2="..") returned 1 [0139.816] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3b1d58, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0139.816] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0139.816] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0139.816] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0139.816] wcscmp (_String1="Games", _String2=".") returned 1 [0139.816] wcscmp (_String1="Games", _String2="..") returned 1 [0139.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19598 [0139.816] wcscpy (in: _Dest=0x3e19598, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0139.816] wcscat (in: _Dest=0x3e19598, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0139.816] wcscat (in: _Dest=0x3e19598, _Source="Games" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0139.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e19598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0139.817] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21b3df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21b3df0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21b3df0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0139.817] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1 [0139.818] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1 [0139.818] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0139.818] wcscmp (_String1="Java", _String2=".") returned 1 [0139.818] wcscmp (_String1="Java", _String2="..") returned 1 [0139.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46c98 [0139.818] wcscpy (in: _Dest=0x3e46c98, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0139.818] wcscat (in: _Dest=0x3e46c98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0139.818] wcscat (in: _Dest=0x3e46c98, _Source="Java" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0139.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e46c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0139.819] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0139.819] wcscmp (_String1="Maintenance", _String2=".") returned 1 [0139.819] wcscmp (_String1="Maintenance", _String2="..") returned 1 [0139.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45c80 [0139.819] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0139.819] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0139.819] wcscat (in: _Dest=0x3d45c80, _Source="Maintenance" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0139.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d45c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0139.820] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7b8cc0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed7b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="MEDIAC~1.LNK")) returned 1 [0139.820] wcscmp (_String1="Media Center.lnk", _String2=".") returned 1 [0139.820] wcscmp (_String1="Media Center.lnk", _String2="..") returned 1 [0139.821] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0139.821] wcscmp (_String1="Microsoft Office", _String2=".") returned 1 [0139.821] wcscmp (_String1="Microsoft Office", _String2="..") returned 1 [0139.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad57d0 [0139.821] wcscpy (in: _Dest=0x7ad57d0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0139.821] wcscat (in: _Dest=0x7ad57d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0139.821] wcscat (in: _Dest=0x7ad57d0, _Source="Microsoft Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0139.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad57d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2378 [0139.822] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77031ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x77057c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x77057c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0139.822] wcscmp (_String1="Mozilla Firefox.lnk", _String2=".") returned 1 [0139.822] wcscmp (_String1="Mozilla Firefox.lnk", _String2="..") returned 1 [0139.822] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="SHAREP~1")) returned 1 [0139.822] wcscmp (_String1="SharePoint", _String2=".") returned 1 [0139.822] wcscmp (_String1="SharePoint", _String2="..") returned 1 [0139.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0139.822] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0139.822] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0139.822] wcscat (in: _Dest=0x3eb9cd0, _Source="SharePoint" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0139.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0139.824] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4ae24a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e4ae24a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e4d43aa, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0139.824] wcscmp (_String1="Sidebar.lnk", _String2=".") returned 1 [0139.824] wcscmp (_String1="Sidebar.lnk", _String2="..") returned 1 [0139.824] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0139.824] wcscmp (_String1="Startup", _String2=".") returned 1 [0139.824] wcscmp (_String1="Startup", _String2="..") returned 1 [0139.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb94d8 [0139.824] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0139.824] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0139.824] wcscat (in: _Dest=0x3eb94d8, _Source="Startup" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0139.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0139.825] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0139.825] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0139.825] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0139.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba4c8 [0139.826] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" [0139.826] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\" [0139.826] wcscat (in: _Dest=0x3eba4c8, _Source="Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0139.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0139.827] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecb6c98, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ecb6c98, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ecb6c98, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x548, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0139.827] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2=".") returned 1 [0139.827] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2="..") returned 1 [0139.827] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea595d60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea595d60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5bbec0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0139.827] wcscmp (_String1="Windows DVD Maker.lnk", _String2=".") returned 1 [0139.827] wcscmp (_String1="Windows DVD Maker.lnk", _String2="..") returned 1 [0139.827] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b74de96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b74de96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b74de96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0139.827] wcscmp (_String1="Windows Fax and Scan.lnk", _String2=".") returned 1 [0139.827] wcscmp (_String1="Windows Fax and Scan.lnk", _String2="..") returned 1 [0139.827] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1172b3fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1172b3fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x27a4769c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0139.827] wcscmp (_String1="Windows Media Player.lnk", _String2=".") returned 1 [0139.827] wcscmp (_String1="Windows Media Player.lnk", _String2="..") returned 1 [0139.827] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 1 [0139.827] wcscmp (_String1="XPS Viewer.lnk", _String2=".") returned 1 [0139.827] wcscmp (_String1="XPS Viewer.lnk", _String2="..") returned 1 [0139.827] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 0 [0139.827] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0139.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0139.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0139.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dba8) returned 1 Thread: id = 898 os_tid = 0x15e8 [0130.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc")) returned 0x20 [0132.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC", dwFileAttributes=0x20) returned 0 [0132.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.481] GetLastError () returned 0x5 [0132.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC", dwFileAttributes=0x20) returned 0 [0132.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c0f8) returned 1 Thread: id = 899 os_tid = 0x15ec [0130.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl")) returned 0x20 [0132.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL", dwFileAttributes=0x20) returned 0 [0132.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.514] GetLastError () returned 0x5 [0132.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL", dwFileAttributes=0x20) returned 0 [0132.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 Thread: id = 900 os_tid = 0x15f0 [0130.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl")) returned 0x20 [0132.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL", dwFileAttributes=0x20) returned 0 [0132.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.494] GetLastError () returned 0x5 [0132.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL", dwFileAttributes=0x20) returned 0 [0132.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 901 os_tid = 0x15f4 [0130.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd")) returned 0x20 [0132.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD", dwFileAttributes=0x20) returned 0 [0132.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.497] GetLastError () returned 0x5 [0132.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD", dwFileAttributes=0x20) returned 0 [0132.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a418) returned 1 Thread: id = 902 os_tid = 0x15f8 [0130.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm")) returned 0x20 [0132.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM", dwFileAttributes=0x20) returned 0 [0132.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.499] GetLastError () returned 0x5 [0132.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM", dwFileAttributes=0x20) returned 0 [0132.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19018) returned 1 Thread: id = 903 os_tid = 0x15fc [0130.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9340 [0130.924] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" [0130.924] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\" [0130.924] wcscat (in: _Dest=0x3eb9340, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*" [0130.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0130.925] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63d049b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63d049b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0132.500] wcscmp (_String1=".", _String2=".") returned 0 [0132.501] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63d049b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63d049b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.501] wcscmp (_String1="..", _String2=".") returned 1 [0132.501] wcscmp (_String1="..", _String2="..") returned 0 [0132.501] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a63800, ftCreationTime.dwHighDateTime=0x1c8c027, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0a63800, ftLastWriteTime.dwHighDateTime=0x1c8c027, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1 [0132.501] wcscmp (_String1="BIBFORM.XML", _String2=".") returned 1 [0132.501] wcscmp (_String1="BIBFORM.XML", _String2="..") returned 1 [0132.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df54a0 [0132.501] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography" [0132.501] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\" [0132.501] wcscat (in: _Dest=0x3df54a0, _Source="BIBFORM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" [0136.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df54a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0136.777] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a63800, ftCreationTime.dwHighDateTime=0x1c8c027, ftLastAccessTime.dwLowDateTime=0x63d049b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0a63800, ftLastWriteTime.dwHighDateTime=0x1c8c027, nFileSizeHigh=0x0, nFileSizeLow=0x165e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 0 [0136.777] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0136.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0136.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 [0136.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 904 os_tid = 0x1600 [0130.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl")) returned 0x20 [0132.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL", dwFileAttributes=0x20) returned 0 [0132.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.488] GetLastError () returned 0x5 [0132.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL", dwFileAttributes=0x20) returned 0 [0132.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18f18) returned 1 Thread: id = 905 os_tid = 0x1604 [0130.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css")) returned 0x20 [0132.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS", dwFileAttributes=0x20) returned 0 [0132.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.502] GetLastError () returned 0x5 [0132.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS", dwFileAttributes=0x20) returned 0 [0132.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x349128) returned 1 Thread: id = 906 os_tid = 0x1608 [0130.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd")) returned 0x20 [0132.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD", dwFileAttributes=0x20) returned 0 [0132.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.504] GetLastError () returned 0x5 [0132.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD", dwFileAttributes=0x20) returned 0 [0132.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 907 os_tid = 0x160c [0130.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css")) returned 0x20 [0132.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS", dwFileAttributes=0x20) returned 0 [0132.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.506] GetLastError () returned 0x5 [0132.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS", dwFileAttributes=0x20) returned 0 [0132.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19318) returned 1 Thread: id = 908 os_tid = 0x1610 [0130.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn")) returned 0x20 [0132.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn", dwFileAttributes=0x20) returned 0 [0132.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.490] GetLastError () returned 0x5 [0132.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn", dwFileAttributes=0x20) returned 0 [0132.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 Thread: id = 909 os_tid = 0x1614 [0130.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn")) returned 0x20 [0132.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn", dwFileAttributes=0x20) returned 0 [0132.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.508] GetLastError () returned 0x5 [0132.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn", dwFileAttributes=0x20) returned 0 [0132.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 Thread: id = 910 os_tid = 0x1618 [0130.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml")) returned 0x20 [0132.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML", dwFileAttributes=0x20) returned 0 [0132.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.510] GetLastError () returned 0x5 [0132.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML", dwFileAttributes=0x20) returned 0 [0132.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 911 os_tid = 0x161c [0130.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb93c8 [0130.928] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0130.928] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\" [0130.928] wcscat (in: _Dest=0x3eb93c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*" [0130.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53638 [0130.929] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a4570, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf650 [0133.298] wcscmp (_String1=".", _String2=".") returned 0 [0133.298] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a4570, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.298] wcscmp (_String1="..", _String2=".") returned 1 [0133.298] wcscmp (_String1="..", _String2="..") returned 0 [0133.298] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbc8200, ftCreationTime.dwHighDateTime=0x1c02713, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dbc8200, ftLastWriteTime.dwHighDateTime=0x1c02713, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="_CONNE~1.ODC")) returned 1 [0133.299] wcscmp (_String1="+Connect to New Data Source.odc", _String2=".") returned -1 [0133.299] wcscmp (_String1="+Connect to New Data Source.odc", _String2="..") returned -1 [0133.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a2b0 [0133.299] wcscpy (in: _Dest=0x3e3a2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0133.299] wcscat (in: _Dest=0x3e3a2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\" [0133.299] wcscat (in: _Dest=0x3e3a2b0, _Source="+Connect to New Data Source.odc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" [0136.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0136.732] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b5a2800, ftCreationTime.dwHighDateTime=0x1c02713, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b5a2800, ftLastWriteTime.dwHighDateTime=0x1c02713, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="_NEWSQ~1.ODC")) returned 1 [0136.732] wcscmp (_String1="+NewSQLServerConnection.odc", _String2=".") returned -1 [0136.732] wcscmp (_String1="+NewSQLServerConnection.odc", _String2="..") returned -1 [0136.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65b98 [0136.732] wcscpy (in: _Dest=0x3e65b98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices" [0136.732] wcscat (in: _Dest=0x3e65b98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\" [0136.732] wcscat (in: _Dest=0x3e65b98, _Source="+NewSQLServerConnection.odc" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" [0136.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0136.734] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed46a800, ftCreationTime.dwHighDateTime=0x1bff7e7, ftLastAccessTime.dwLowDateTime=0x352a4570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed46a800, ftLastWriteTime.dwHighDateTime=0x1bff7e7, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1 [0136.734] wcscmp (_String1="DESKTOP.INI", _String2=".") returned 1 [0136.734] wcscmp (_String1="DESKTOP.INI", _String2="..") returned 1 [0136.734] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a607800, ftCreationTime.dwHighDateTime=0x1bff884, ftLastAccessTime.dwLowDateTime=0x3533caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a607800, ftLastWriteTime.dwHighDateTime=0x1bff884, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1 [0136.734] wcscmp (_String1="FOLDER.ICO", _String2=".") returned 1 [0136.734] wcscmp (_String1="FOLDER.ICO", _String2="..") returned 1 [0136.734] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a607800, ftCreationTime.dwHighDateTime=0x1bff884, ftLastAccessTime.dwLowDateTime=0x3533caf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a607800, ftLastWriteTime.dwHighDateTime=0x1bff884, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 0 [0136.734] FindClose (in: hFindFile=0x3dcf650 | out: hFindFile=0x3dcf650) returned 1 [0136.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53638) returned 1 [0136.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 [0136.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 912 os_tid = 0x1620 [0130.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl")) returned 0x20 [0132.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL", dwFileAttributes=0x20) returned 0 [0132.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.486] GetLastError () returned 0x5 [0132.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL", dwFileAttributes=0x20) returned 0 [0132.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19418) returned 1 Thread: id = 913 os_tid = 0x1624 [0130.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb")) returned 0x20 [0132.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB", dwFileAttributes=0x20) returned 0 [0132.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.512] GetLastError () returned 0x5 [0132.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB", dwFileAttributes=0x20) returned 0 [0132.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 914 os_tid = 0x1628 [0131.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl")) returned 0x20 [0132.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL", dwFileAttributes=0x20) returned 0 [0132.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.492] GetLastError () returned 0x5 [0132.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL", dwFileAttributes=0x20) returned 0 [0132.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19498) returned 1 Thread: id = 915 os_tid = 0x1630 [0131.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml")) returned 0x20 [0131.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML", dwFileAttributes=0x20) returned 0 [0131.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.619] GetLastError () returned 0x5 [0131.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML", dwFileAttributes=0x20) returned 0 [0131.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355680) returned 1 Thread: id = 916 os_tid = 0x1634 [0131.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e07a40 [0131.621] wcscpy (in: _Dest=0x3e07a40, _Source="C:\\ProgramData\\Adobe\\Acrobat" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat" [0131.621] wcscat (in: _Dest=0x3e07a40, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\" [0131.622] wcscat (in: _Dest=0x3e07a40, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\*" [0131.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0131.622] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fc8688 [0131.622] wcscmp (_String1=".", _String2=".") returned 0 [0131.622] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.622] wcscmp (_String1="..", _String2=".") returned 1 [0131.622] wcscmp (_String1="..", _String2="..") returned 0 [0131.623] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0131.623] wcscmp (_String1="10.0", _String2=".") returned 1 [0131.623] wcscmp (_String1="10.0", _String2="..") returned 1 [0131.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e84c68 [0131.623] wcscpy (in: _Dest=0x3e84c68, _Source="C:\\ProgramData\\Adobe\\Acrobat" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat") returned="C:\\ProgramData\\Adobe\\Acrobat" [0131.623] wcscat (in: _Dest=0x3e84c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\" [0131.623] wcscat (in: _Dest=0x3e84c68, _Source="10.0" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0" [0136.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e84c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0136.763] FindNextFileW (in: hFindFile=0x2fc8688, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0136.763] FindClose (in: hFindFile=0x2fc8688 | out: hFindFile=0x2fc8688) returned 1 [0136.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0136.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a40) returned 1 [0136.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ce0) returned 1 Thread: id = 917 os_tid = 0x1638 [0131.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\search.api")) returned 0x20 [0131.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api", dwFileAttributes=0x20) returned 0 [0131.625] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.625] GetLastError () returned 0x5 [0131.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api", dwFileAttributes=0x20) returned 0 [0131.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 918 os_tid = 0x163c [0131.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api")) returned 0x20 [0131.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api", dwFileAttributes=0x20) returned 0 [0131.628] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.628] GetLastError () returned 0x5 [0131.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api", dwFileAttributes=0x20) returned 0 [0131.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 919 os_tid = 0x1640 [0131.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api")) returned 0x20 [0131.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api", dwFileAttributes=0x20) returned 0 [0131.632] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.632] GetLastError () returned 0x5 [0131.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api", dwFileAttributes=0x20) returned 0 [0131.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 920 os_tid = 0x1644 [0131.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api")) returned 0x20 [0131.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api", dwFileAttributes=0x20) returned 0 [0131.635] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.635] GetLastError () returned 0x5 [0131.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api", dwFileAttributes=0x20) returned 0 [0131.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 921 os_tid = 0x1648 [0131.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api")) returned 0x20 [0131.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api", dwFileAttributes=0x20) returned 0 [0131.638] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0131.638] GetLastError () returned 0x5 [0131.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api", dwFileAttributes=0x20) returned 0 [0131.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9c48) returned 1 Thread: id = 922 os_tid = 0x164c [0131.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat")) returned 0x20 [0132.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0132.516] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.516] GetLastError () returned 0x5 [0132.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0132.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 923 os_tid = 0x1650 [0131.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs")) returned 0x20 [0132.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0132.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.518] GetLastError () returned 0x5 [0132.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0132.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 924 os_tid = 0x1654 [0131.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht")) returned 0x20 [0132.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0132.519] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.520] GetLastError () returned 0x5 [0132.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0132.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 925 os_tid = 0x1658 [0131.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze")) returned 0x20 [0132.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0132.521] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.521] GetLastError () returned 0x5 [0132.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0132.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 926 os_tid = 0x165c [0131.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan")) returned 0x20 [0132.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0132.523] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.523] GetLastError () returned 0x5 [0132.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0132.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 927 os_tid = 0x1660 [0131.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu")) returned 0x20 [0132.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0132.524] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.525] GetLastError () returned 0x5 [0132.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0132.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 928 os_tid = 0x1664 [0131.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp")) returned 0x20 [0132.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0132.526] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.527] GetLastError () returned 0x5 [0132.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0132.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 929 os_tid = 0x1668 [0131.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq")) returned 0x20 [0132.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0132.528] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.529] GetLastError () returned 0x5 [0132.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0132.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9de0) returned 1 Thread: id = 930 os_tid = 0x166c [0131.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra")) returned 0x20 [0132.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0132.531] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.531] GetLastError () returned 0x5 [0132.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0132.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 931 os_tid = 0x1670 [0131.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv")) returned 0x20 [0132.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0132.533] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.533] GetLastError () returned 0x5 [0132.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0132.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c318) returned 1 Thread: id = 932 os_tid = 0x1674 [0131.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun")) returned 0x20 [0132.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0132.535] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.535] GetLastError () returned 0x5 [0132.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0132.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 933 os_tid = 0x1678 [0131.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita")) returned 0x20 [0132.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0132.537] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.537] GetLastError () returned 0x5 [0132.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0132.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 934 os_tid = 0x167c [0131.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn")) returned 0x20 [0132.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0132.538] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.539] GetLastError () returned 0x5 [0132.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0132.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 935 os_tid = 0x1680 [0131.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor")) returned 0x20 [0132.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0132.540] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.541] GetLastError () returned 0x5 [0132.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0132.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 936 os_tid = 0x1684 [0131.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld")) returned 0x20 [0132.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0132.542] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.543] GetLastError () returned 0x5 [0132.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0132.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 937 os_tid = 0x1688 [0131.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor")) returned 0x20 [0132.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0132.544] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.545] GetLastError () returned 0x5 [0132.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0132.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 938 os_tid = 0x168c [0131.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol")) returned 0x20 [0132.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0132.546] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.547] GetLastError () returned 0x5 [0132.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0132.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 939 os_tid = 0x1690 [0131.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb")) returned 0x20 [0132.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0132.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.145] GetLastError () returned 0x5 [0132.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0132.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c428) returned 1 Thread: id = 940 os_tid = 0x1694 [0131.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum")) returned 0x20 [0132.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0132.147] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.148] GetLastError () returned 0x5 [0132.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0132.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c4b0) returned 1 Thread: id = 941 os_tid = 0x1698 [0132.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus")) returned 0x20 [0132.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0132.150] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.150] GetLastError () returned 0x5 [0132.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0132.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 943 os_tid = 0x16a4 [0132.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6848 [0132.152] wcscpy (in: _Dest=0x2fe6848, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" [0132.152] wcscat (in: _Dest=0x2fe6848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" [0132.152] wcscat (in: _Dest=0x2fe6848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\*") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\*" [0132.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4578 [0132.153] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\*", lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x278d11c0, ftCreationTime.dwHighDateTime=0x1d5e1e3, ftLastAccessTime.dwLowDateTime=0xb6354170, ftLastAccessTime.dwHighDateTime=0x1d5dff6, ftLastWriteTime.dwLowDateTime=0xb6354170, ftLastWriteTime.dwHighDateTime=0x1d5dff6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfc10 [0132.153] wcscmp (_String1=".", _String2=".") returned 0 [0132.153] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x278d11c0, ftCreationTime.dwHighDateTime=0x1d5e1e3, ftLastAccessTime.dwLowDateTime=0xb6354170, ftLastAccessTime.dwHighDateTime=0x1d5dff6, ftLastWriteTime.dwLowDateTime=0xb6354170, ftLastWriteTime.dwHighDateTime=0x1d5dff6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.153] wcscmp (_String1="..", _String2=".") returned 1 [0132.153] wcscmp (_String1="..", _String2="..") returned 0 [0132.153] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fbb0e80, ftCreationTime.dwHighDateTime=0x1d5de45, ftLastAccessTime.dwLowDateTime=0x41d85c80, ftLastAccessTime.dwHighDateTime=0x1d5ded0, ftLastWriteTime.dwLowDateTime=0x41d85c80, ftLastWriteTime.dwHighDateTime=0x1d5ded0, nFileSizeHigh=0x0, nFileSizeLow=0x651f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3EsGlqaDaZEp.rtf", cAlternateFileName="3ESGLQ~1.RTF")) returned 1 [0132.153] wcscmp (_String1="3EsGlqaDaZEp.rtf", _String2=".") returned 1 [0132.153] wcscmp (_String1="3EsGlqaDaZEp.rtf", _String2="..") returned 1 [0132.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19b98 [0132.153] wcscpy (in: _Dest=0x3e19b98, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" [0132.153] wcscat (in: _Dest=0x3e19b98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" [0132.153] wcscat (in: _Dest=0x3e19b98, _Source="3EsGlqaDaZEp.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\3EsGlqaDaZEp.rtf") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\3EsGlqaDaZEp.rtf" [0138.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba4 [0138.593] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81fc3be0, ftCreationTime.dwHighDateTime=0x1d5e7f6, ftLastAccessTime.dwLowDateTime=0x4bd4e540, ftLastAccessTime.dwHighDateTime=0x1d5e76e, ftLastWriteTime.dwLowDateTime=0x4bd4e540, ftLastWriteTime.dwHighDateTime=0x1d5e76e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqAvPCQRj2QkFRhQkI6N", cAlternateFileName="SQAVPC~1")) returned 1 [0138.593] wcscmp (_String1="sqAvPCQRj2QkFRhQkI6N", _String2=".") returned 1 [0138.593] wcscmp (_String1="sqAvPCQRj2QkFRhQkI6N", _String2="..") returned 1 [0138.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb91a8 [0138.593] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" [0138.593] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" [0138.593] wcscat (in: _Dest=0x3eb91a8, _Source="sqAvPCQRj2QkFRhQkI6N" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" [0138.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2028 [0138.594] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf77d11d0, ftCreationTime.dwHighDateTime=0x1d5e0e1, ftLastAccessTime.dwLowDateTime=0x5fa4f680, ftLastAccessTime.dwHighDateTime=0x1d5e789, ftLastWriteTime.dwLowDateTime=0x5fa4f680, ftLastWriteTime.dwHighDateTime=0x1d5e789, nFileSizeHigh=0x0, nFileSizeLow=0x173d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Td4UFAgSrWZx.pps", cAlternateFileName="TD4UFA~1.PPS")) returned 1 [0138.594] wcscmp (_String1="Td4UFAgSrWZx.pps", _String2=".") returned 1 [0138.594] wcscmp (_String1="Td4UFAgSrWZx.pps", _String2="..") returned 1 [0138.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5ef0 [0138.594] wcscpy (in: _Dest=0x3da5ef0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" [0138.594] wcscat (in: _Dest=0x3da5ef0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" [0138.594] wcscat (in: _Dest=0x3da5ef0, _Source="Td4UFAgSrWZx.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Td4UFAgSrWZx.pps") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Td4UFAgSrWZx.pps" [0138.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0138.595] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ef29290, ftCreationTime.dwHighDateTime=0x1d5dbcd, ftLastAccessTime.dwLowDateTime=0xd5e3e0f0, ftLastAccessTime.dwHighDateTime=0x1d5de32, ftLastWriteTime.dwLowDateTime=0xd5e3e0f0, ftLastWriteTime.dwHighDateTime=0x1d5de32, nFileSizeHigh=0x0, nFileSizeLow=0x6a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y M8.doc", cAlternateFileName="YM8~1.DOC")) returned 1 [0138.595] wcscmp (_String1="Y M8.doc", _String2=".") returned 1 [0138.595] wcscmp (_String1="Y M8.doc", _String2="..") returned 1 [0138.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26c48 [0138.595] wcscpy (in: _Dest=0x7a26c48, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X" [0138.595] wcscat (in: _Dest=0x7a26c48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" [0138.595] wcscat (in: _Dest=0x7a26c48, _Source="Y M8.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc" [0138.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0138.596] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ef29290, ftCreationTime.dwHighDateTime=0x1d5dbcd, ftLastAccessTime.dwLowDateTime=0xd5e3e0f0, ftLastAccessTime.dwHighDateTime=0x1d5de32, ftLastWriteTime.dwLowDateTime=0xd5e3e0f0, ftLastWriteTime.dwHighDateTime=0x1d5de32, nFileSizeHigh=0x0, nFileSizeLow=0x6a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y M8.doc", cAlternateFileName="YM8~1.DOC")) returned 0 [0138.596] FindClose (in: hFindFile=0x3dcfc10 | out: hFindFile=0x3dcfc10) returned 1 [0138.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4578) returned 1 [0138.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 [0138.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a9a8) returned 1 Thread: id = 944 os_tid = 0x16a8 [0132.154] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\ELeS3Q.pps" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\eles3q.pps")) returned 0x20 [0132.154] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\ELeS3Q.pps", dwFileAttributes=0x20) returned 1 [0132.155] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\ELeS3Q.pps" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\eles3q.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a4c [0132.155] GetFileSizeEx (in: hFile=0x1a4c, lpFileSize=0x88efa84 | out: lpFileSize=0x88efa84*=59988) returned 1 [0132.155] SetFilePointerEx (in: hFile=0x1a4c, liDistanceToMove=0xea50, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.155] ReadFile (in: hFile=0x1a4c, lpBuffer=0x88efa60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x88efa70, lpOverlapped=0x0 | out: lpBuffer=0x88efa60*, lpNumberOfBytesRead=0x88efa70*=0x4, lpOverlapped=0x0) returned 1 [0132.158] SetFilePointerEx (in: hFile=0x1a4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0132.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0132.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.158] NtQuerySystemTime (in: CurrentTime=0x88ef9f8 | out: CurrentTime=0x88ef9f8*=132462177115224000) returned 0x0 [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x39f8bdfc [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x7e62090d [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x2a7ab7f [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x67d5314e [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x469f416a [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x3ebc7261 [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x49028179 [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x31fb4a88 [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x6b2e69da [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x3d689568 [0132.158] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x204ea4ef [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x4bbbb821 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x6139bbd9 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x3fd48d07 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0xdc34dbf [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x30f38e97 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x53774f5d [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x78bdcbca [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x7c669783 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x736fc110 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x6a90ba4c [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x52f6d90f [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x69d26bba [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x46a436a8 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x76d4e90b [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x74407b93 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x6f0fe387 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x3ac2cab1 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x3e597fe6 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x54121f5c [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x60e89ee7 [0132.159] RtlRandomEx (in: Seed=0x88ef9f0 | out: Seed=0x88ef9f0) returned 0x1da88d25 [0132.172] SetFilePointerEx (in: hFile=0x1a4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.172] ReadFile (in: hFile=0x1a4c, lpBuffer=0x7cb2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x88ef9f8, lpOverlapped=0x0 | out: lpBuffer=0x7cb2798*, lpNumberOfBytesRead=0x88ef9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0132.172] SetFilePointerEx (in: hFile=0x1a4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24c50 [0132.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0132.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0132.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0132.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9fb70 [0132.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0132.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0132.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0132.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24c50) returned 1 [0132.173] WriteFile (in: hFile=0x1a4c, lpBuffer=0x7c9fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x88ef9f8, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesWritten=0x88ef9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0132.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0132.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2798) returned 1 [0132.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e869c8 [0132.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3308) returned 1 [0132.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e869f8 [0132.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0132.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0132.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0132.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0132.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3deca58 [0132.601] SetFilePointerEx (in: hFile=0x1a4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.601] WriteFile (in: hFile=0x1a4c, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x88efa78, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x88efa78*=0x106, lpOverlapped=0x0) returned 1 [0132.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0132.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51458 [0132.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0132.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ac8) returned 1 [0132.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x7a2e0e8 [0132.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0132.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0132.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0132.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0132.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0132.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3e15b40 [0132.629] sprintf (in: _Dest=0x3e15b40, _Format="%c%c" | out: _Dest="e0") returned 2 [0132.629] sprintf (in: _Dest=0x3e15b42, _Format="%c%c" | out: _Dest="a3") returned 2 [0132.629] sprintf (in: _Dest=0x3e15b44, _Format="%c%c" | out: _Dest="c8") returned 2 [0132.629] sprintf (in: _Dest=0x3e15b46, _Format="%c%c" | out: _Dest="0d") returned 2 [0132.629] sprintf (in: _Dest=0x3e15b48, _Format="%c%c" | out: _Dest="a1") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b4a, _Format="%c%c" | out: _Dest="e9") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b4c, _Format="%c%c" | out: _Dest="ec") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b4e, _Format="%c%c" | out: _Dest="08") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b50, _Format="%c%c" | out: _Dest="97") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b52, _Format="%c%c" | out: _Dest="19") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b54, _Format="%c%c" | out: _Dest="a9") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b56, _Format="%c%c" | out: _Dest="c4") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b58, _Format="%c%c" | out: _Dest="e2") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b5a, _Format="%c%c" | out: _Dest="a9") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b5c, _Format="%c%c" | out: _Dest="4a") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b5e, _Format="%c%c" | out: _Dest="62") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b60, _Format="%c%c" | out: _Dest="47") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b62, _Format="%c%c" | out: _Dest="77") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b64, _Format="%c%c" | out: _Dest="15") returned 2 [0132.630] sprintf (in: _Dest=0x3e15b66, _Format="%c%c" | out: _Dest="ba") returned 2 [0132.630] RtlInitAnsiString (in: DestinationString=0x88efa00, SourceString="e0a3c80da1e9ec089719a9c4e2a94a62477715ba" | out: DestinationString="e0a3c80da1e9ec089719a9c4e2a94a62477715ba") [0132.630] RtlAnsiStringToUnicodeString (in: DestinationString=0x88ef9f8, SourceString="e0a3c80da1e9ec089719a9c4e2a94a62477715ba", AllocateDestinationString=1 | out: DestinationString="e0a3c80da1e9ec089719a9c4e2a94a62477715ba") returned 0x0 [0132.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6788 [0132.631] wcscat (in: _Dest=0x7a23bc0, _Source="e0a3c80da1" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\e0a3c80da1") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\e0a3c80da1" [0132.631] wcscat (in: _Dest=0x7a23bc0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\e0a3c80da1.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\e0a3c80da1.68814f" [0132.631] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\e0a3c80da1.68814f", NtPathName=0x88ef9f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\e0a3c80da1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3db00 [0132.631] NtSetInformationFile (FileHandle=0x1a4c, IoStatusBlock=0x88ef9f8, FileInformation=0x3f3db00, Length=0x7e, FileInformationClass=0xa) returned 0x0 [0132.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 [0132.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33cb0) returned 1 [0132.676] NtQueryInformationFile (in: FileHandle=0x1a4c, IoStatusBlock=0x88ef9c8, FileInformation=0x88ef9d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x88ef9c8, FileInformation=0x88ef9d0) returned 0x0 [0132.676] NtSetInformationFile (FileHandle=0x1a4c, IoStatusBlock=0x88ef9c8, FileInformation=0x88ef9d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23bc0) returned 1 [0132.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 [0132.678] FlushFileBuffers (hFile=0x1a4c) returned 1 [0135.221] CloseHandle (hObject=0x1a4c) returned 1 [0135.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f4e8 [0135.222] wcscpy (in: _Dest=0x3f3f4e8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" [0135.223] wcscat (in: _Dest=0x3f3f4e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\68814F-Readme.txt" [0135.223] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\68814f-readme.txt")) returned 0xffffffff [0135.223] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4c [0135.223] WriteFile (in: hFile=0x1a4c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x88efa0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x88efa0c*=0x8b9, lpOverlapped=0x0) returned 1 [0135.226] CloseHandle (hObject=0x1a4c) returned 1 [0135.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0135.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee12e8) returned 1 Thread: id = 945 os_tid = 0x16ac [0132.174] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\fkkofu 4ew4.doc")) returned 0x20 [0132.174] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc", dwFileAttributes=0x20) returned 1 [0132.174] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\fkkofu 4ew4.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a50 [0132.174] GetFileSizeEx (in: hFile=0x1a50, lpFileSize=0x3f7f7ec | out: lpFileSize=0x3f7f7ec*=42808) returned 1 [0132.174] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0xa734, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.175] ReadFile (in: hFile=0x1a50, lpBuffer=0x3f7f7c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3f7f7d8, lpOverlapped=0x0 | out: lpBuffer=0x3f7f7c8*, lpNumberOfBytesRead=0x3f7f7d8*=0x4, lpOverlapped=0x0) returned 1 [0132.177] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0132.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0132.177] NtQuerySystemTime (in: CurrentTime=0x3f7f760 | out: CurrentTime=0x3f7f760*=132462177115380000) returned 0x0 [0132.177] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x672be1d8 [0132.177] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x4c655d66 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x7f49e36c [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x444d25b [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x6ddab53d [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x36196f00 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x368a9bcd [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x78308084 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x7d70f751 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x6cac337a [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x7ed007cc [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x876f23f [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x7c9adab4 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x1d73d979 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x1b81933e [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x2a3dc36e [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x2a410b52 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x344d6ae2 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0xf346ca1 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x155f735a [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x27a42113 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x1915fd43 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x24a11992 [0132.178] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x5c3510be [0132.179] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0xa6575c4 [0132.179] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x47c2142 [0132.179] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0xcd819bd [0132.179] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x6e505c6f [0132.179] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x16f524be [0132.179] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x1759a9f2 [0132.179] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x33fcd107 [0132.179] RtlRandomEx (in: Seed=0x3f7f758 | out: Seed=0x3f7f758) returned 0x43883b61 [0132.193] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.193] ReadFile (in: hFile=0x1a50, lpBuffer=0x7ca3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x3f7f760, lpOverlapped=0x0 | out: lpBuffer=0x7ca3778*, lpNumberOfBytesRead=0x3f7f760*=0x3c00, lpOverlapped=0x0) returned 1 [0132.193] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24818 [0132.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0132.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0132.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca7380 [0132.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0132.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0132.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0132.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24818) returned 1 [0132.194] WriteFile (in: hFile=0x1a50, lpBuffer=0x7ca7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x3f7f760, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesWritten=0x3f7f760*=0x3c00, lpOverlapped=0x0) returned 1 [0132.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca7380) returned 1 [0132.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca3778) returned 1 [0132.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3013690 [0132.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0132.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3013f88 [0132.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0132.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3268 [0132.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3268) returned 1 [0132.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0132.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0132.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec828 [0132.605] SetFilePointerEx (in: hFile=0x1a50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.605] WriteFile (in: hFile=0x1a50, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3f7f7e0, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x3f7f7e0*=0x110, lpOverlapped=0x0) returned 1 [0132.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0132.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3013f88) returned 1 [0132.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0132.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3013690) returned 1 [0132.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0132.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0132.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0132.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0132.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19318 [0132.633] wcscpy (in: _Dest=0x3e19318, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc" [0132.634] wcscat (in: _Dest=0x3e19318, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc.68814f" [0132.634] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc.68814f", NtPathName=0x3f7f758, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\FkkoFu 4Ew4.doc.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0132.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df19e8 [0132.634] NtSetInformationFile (FileHandle=0x1a50, IoStatusBlock=0x3f7f760, FileInformation=0x3df19e8, Length=0x88, FileInformationClass=0xa) returned 0x0 [0132.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df19e8) returned 1 [0132.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33638) returned 1 [0132.679] NtQueryInformationFile (in: FileHandle=0x1a50, IoStatusBlock=0x3f7f730, FileInformation=0x3f7f738, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x3f7f730, FileInformation=0x3f7f738) returned 0x0 [0132.679] NtSetInformationFile (FileHandle=0x1a50, IoStatusBlock=0x3f7f730, FileInformation=0x3f7f738, Length=0x28, FileInformationClass=0x4) returned 0x0 [0132.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19318) returned 1 [0132.681] FlushFileBuffers (hFile=0x1a50) returned 1 [0135.227] CloseHandle (hObject=0x1a50) returned 1 [0135.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f4e8 [0135.229] wcscpy (in: _Dest=0x3f3f4e8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\" [0135.229] wcscat (in: _Dest=0x3f3f4e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\68814F-Readme.txt" [0135.229] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\68814f-readme.txt")) returned 0x20 [0135.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0135.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 Thread: id = 946 os_tid = 0x16b0 [0132.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee1010 [0132.196] wcscpy (in: _Dest=0x3ee1010, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" [0132.196] wcscat (in: _Dest=0x3ee1010, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" [0132.196] wcscat (in: _Dest=0x3ee1010, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\*") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\*" [0132.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0132.196] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd700420, ftCreationTime.dwHighDateTime=0x1d5e6e4, ftLastAccessTime.dwLowDateTime=0x3c900f0, ftLastAccessTime.dwHighDateTime=0x1d5e36e, ftLastWriteTime.dwLowDateTime=0x3c900f0, ftLastWriteTime.dwHighDateTime=0x1d5e36e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad70b0 [0132.196] wcscmp (_String1=".", _String2=".") returned 0 [0132.196] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd700420, ftCreationTime.dwHighDateTime=0x1d5e6e4, ftLastAccessTime.dwLowDateTime=0x3c900f0, ftLastAccessTime.dwHighDateTime=0x1d5e36e, ftLastWriteTime.dwLowDateTime=0x3c900f0, ftLastWriteTime.dwHighDateTime=0x1d5e36e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.197] wcscmp (_String1="..", _String2=".") returned 1 [0132.197] wcscmp (_String1="..", _String2="..") returned 0 [0132.197] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc34208b0, ftCreationTime.dwHighDateTime=0x1d5e147, ftLastAccessTime.dwLowDateTime=0xc3f6f420, ftLastAccessTime.dwHighDateTime=0x1d5e2e4, ftLastWriteTime.dwLowDateTime=0xc3f6f420, ftLastWriteTime.dwHighDateTime=0x1d5e2e4, nFileSizeHigh=0x0, nFileSizeLow=0x5e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="8JC4.pps", cAlternateFileName="")) returned 1 [0132.197] wcscmp (_String1="8JC4.pps", _String2=".") returned 1 [0132.197] wcscmp (_String1="8JC4.pps", _String2="..") returned 1 [0132.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23990 [0132.197] wcscpy (in: _Dest=0x7a23990, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" [0132.197] wcscat (in: _Dest=0x7a23990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" [0132.197] wcscat (in: _Dest=0x7a23990, _Source="8JC4.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\8JC4.pps") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\8JC4.pps" [0140.497] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\8JC4.pps" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\8jc4.pps")) returned 0x20 [0140.497] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\8JC4.pps", dwFileAttributes=0x20) returned 1 [0140.498] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\8JC4.pps" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\8jc4.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x24d4 [0140.498] GetFileSizeEx (in: hFile=0x24d4, lpFileSize=0x878fd4c | out: lpFileSize=0x878fd4c*=24084) returned 1 [0140.498] SetFilePointerEx (in: hFile=0x24d4, liDistanceToMove=0x5e10, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.498] ReadFile (in: hFile=0x24d4, lpBuffer=0x878fd28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x878fd38, lpOverlapped=0x0 | out: lpBuffer=0x878fd28*, lpNumberOfBytesRead=0x878fd38*=0x4, lpOverlapped=0x0) returned 1 [0140.500] SetFilePointerEx (in: hFile=0x24d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0140.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0140.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0140.500] NtQuerySystemTime (in: CurrentTime=0x878fcc0 | out: CurrentTime=0x878fcc0*=132462177197436000) returned 0x0 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x6e2c7370 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x4f58be48 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x236f94a2 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x10852c12 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x4e304e0a [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x61b16b3f [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x4e945dc0 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x31f6ea82 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x3806183d [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x8307c4b [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x3a24380 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x2d226093 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x22ea3722 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x49a88d8 [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x1b9b215f [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x7056407d [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x74a18b8f [0140.500] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x5513dbf0 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x77073f72 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x143222e9 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x252b1678 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x6b0a3e91 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x3e9740c3 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x4006ee08 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x2d5f5ccb [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x79479982 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x6bc29ea8 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x1246c645 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x55f70674 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x4c76bc92 [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x5d5d52fc [0140.501] RtlRandomEx (in: Seed=0x878fcb8 | out: Seed=0x878fcb8) returned 0x67d3f1b [0140.509] SetFilePointerEx (in: hFile=0x24d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.509] ReadFile (in: hFile=0x24d4, lpBuffer=0x7aa2110, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x878fcc0, lpOverlapped=0x0 | out: lpBuffer=0x7aa2110*, lpNumberOfBytesRead=0x878fcc0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.509] SetFilePointerEx (in: hFile=0x24d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a251a0 [0140.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0140.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0140.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0140.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa5d18 [0140.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0140.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0140.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0140.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0140.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a251a0) returned 1 [0140.510] WriteFile (in: hFile=0x24d4, lpBuffer=0x7aa5d18*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x878fcc0, lpOverlapped=0x0 | out: lpBuffer=0x7aa5d18*, lpNumberOfBytesWritten=0x878fcc0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa5d18) returned 1 [0142.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa2110) returned 1 [0142.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3edb530 [0142.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede118) returned 1 [0142.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ede118 [0142.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd538 [0142.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbaf8 [0142.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbaf8) returned 1 [0142.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0142.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0142.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3deca58 [0142.909] SetFilePointerEx (in: hFile=0x24d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.909] WriteFile (in: hFile=0x24d4, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x878fd40, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x878fd40*=0x102, lpOverlapped=0x0) returned 1 [0143.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85158 [0143.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0143.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0143.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9850 [0143.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0143.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0143.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0143.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0143.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a376e0 [0143.007] sprintf (in: _Dest=0x7a376e0, _Format="%c%c" | out: _Dest="ed") returned 2 [0143.008] sprintf (in: _Dest=0x7a376e2, _Format="%c%c" | out: _Dest="8d") returned 2 [0143.008] sprintf (in: _Dest=0x7a376e4, _Format="%c%c" | out: _Dest="79") returned 2 [0143.008] sprintf (in: _Dest=0x7a376e6, _Format="%c%c" | out: _Dest="42") returned 2 [0143.008] sprintf (in: _Dest=0x7a376e8, _Format="%c%c" | out: _Dest="45") returned 2 [0143.008] sprintf (in: _Dest=0x7a376ea, _Format="%c%c" | out: _Dest="ef") returned 2 [0143.008] sprintf (in: _Dest=0x7a376ec, _Format="%c%c" | out: _Dest="17") returned 2 [0143.008] sprintf (in: _Dest=0x7a376ee, _Format="%c%c" | out: _Dest="5e") returned 2 [0143.008] sprintf (in: _Dest=0x7a376f0, _Format="%c%c" | out: _Dest="3e") returned 2 [0143.008] sprintf (in: _Dest=0x7a376f2, _Format="%c%c" | out: _Dest="dd") returned 2 [0143.008] sprintf (in: _Dest=0x7a376f4, _Format="%c%c" | out: _Dest="37") returned 2 [0143.008] sprintf (in: _Dest=0x7a376f6, _Format="%c%c" | out: _Dest="b6") returned 2 [0143.008] sprintf (in: _Dest=0x7a376f8, _Format="%c%c" | out: _Dest="dd") returned 2 [0143.008] sprintf (in: _Dest=0x7a376fa, _Format="%c%c" | out: _Dest="10") returned 2 [0143.008] sprintf (in: _Dest=0x7a376fc, _Format="%c%c" | out: _Dest="67") returned 2 [0143.008] sprintf (in: _Dest=0x7a376fe, _Format="%c%c" | out: _Dest="9c") returned 2 [0143.008] RtlInitAnsiString (in: DestinationString=0x878fcc8, SourceString="ed8d794245ef175e3edd37b6dd10679c" | out: DestinationString="ed8d794245ef175e3edd37b6dd10679c") [0143.008] RtlAnsiStringToUnicodeString (in: DestinationString=0x878fcc0, SourceString="ed8d794245ef175e3edd37b6dd10679c", AllocateDestinationString=1 | out: DestinationString="ed8d794245ef175e3edd37b6dd10679c") returned 0x0 [0143.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84088 [0143.009] wcscat (in: _Dest=0x3da5bf0, _Source="ed8d7942" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\ed8d7942") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\ed8d7942" [0143.009] wcscat (in: _Dest=0x3da5bf0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\ed8d7942.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\ed8d7942.68814f" [0143.009] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\ed8d7942.68814f", NtPathName=0x878fcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\ed8d7942.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64848 [0143.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64848) returned 1 [0143.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03320) returned 1 [0143.102] NtQueryInformationFile (in: FileHandle=0x24d4, IoStatusBlock=0x878fc90, FileInformation=0x878fc98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x878fc90, FileInformation=0x878fc98) returned 0x0 [0143.102] NtSetInformationFile (FileHandle=0x24d4, IoStatusBlock=0x878fc90, FileInformation=0x878fc98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0143.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5bf0) returned 1 [0143.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84088) returned 1 [0143.115] FlushFileBuffers (hFile=0x24d4) returned 1 [0143.329] CloseHandle (hObject=0x24d4) returned 1 [0143.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8bd0 [0143.982] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" [0143.982] wcscat (in: _Dest=0x3eb8bd0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\68814F-Readme.txt" [0143.982] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\68814f-readme.txt")) returned 0xffffffff [0143.982] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cb8 [0144.015] WriteFile (in: hFile=0x1cb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x878fcd4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x878fcd4*=0x8b9, lpOverlapped=0x0) returned 1 [0144.017] CloseHandle (hObject=0x1cb8) returned 1 [0144.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 [0144.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23990) returned 1 [0144.018] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8c7e0, ftCreationTime.dwHighDateTime=0x1d5e559, ftLastAccessTime.dwLowDateTime=0x2450d990, ftLastAccessTime.dwHighDateTime=0x1d5d97f, ftLastWriteTime.dwLowDateTime=0x2450d990, ftLastWriteTime.dwHighDateTime=0x1d5d97f, nFileSizeHigh=0x0, nFileSizeLow=0xdb12, dwReserved0=0x0, dwReserved1=0x0, cFileName="fP545Iwtch75TC9A.csv", cAlternateFileName="FP545I~1.CSV")) returned 1 [0144.018] wcscmp (_String1="fP545Iwtch75TC9A.csv", _String2=".") returned 1 [0144.018] wcscmp (_String1="fP545Iwtch75TC9A.csv", _String2="..") returned 1 [0144.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8bd0 [0144.019] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" [0144.019] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" [0144.019] wcscat (in: _Dest=0x3eb8bd0, _Source="fP545Iwtch75TC9A.csv" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\fP545Iwtch75TC9A.csv") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\fP545Iwtch75TC9A.csv" [0144.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0144.023] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96f59a10, ftCreationTime.dwHighDateTime=0x1d5ddcd, ftLastAccessTime.dwLowDateTime=0x6f911b20, ftLastAccessTime.dwHighDateTime=0x1d5e615, ftLastWriteTime.dwLowDateTime=0x6f911b20, ftLastWriteTime.dwHighDateTime=0x1d5e615, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kpKU", cAlternateFileName="")) returned 1 [0144.023] wcscmp (_String1="kpKU", _String2=".") returned 1 [0144.023] wcscmp (_String1="kpKU", _String2="..") returned 1 [0144.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d9c0 [0144.023] wcscpy (in: _Dest=0x3e1d9c0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" [0144.023] wcscat (in: _Dest=0x3e1d9c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" [0144.023] wcscat (in: _Dest=0x3e1d9c0, _Source="kpKU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU" [0144.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1d9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44 [0144.025] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8a5e350, ftCreationTime.dwHighDateTime=0x1d5e7f9, ftLastAccessTime.dwLowDateTime=0xfd024740, ftLastAccessTime.dwHighDateTime=0x1d5daad, ftLastWriteTime.dwLowDateTime=0xfd024740, ftLastWriteTime.dwHighDateTime=0x1d5daad, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PuWvV7ZY5.xlsx", cAlternateFileName="PUWVV7~1.XLS")) returned 1 [0144.025] wcscmp (_String1="PuWvV7ZY5.xlsx", _String2=".") returned 1 [0144.025] wcscmp (_String1="PuWvV7ZY5.xlsx", _String2="..") returned 1 [0144.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a398 [0144.026] wcscpy (in: _Dest=0x3e1a398, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k" [0144.026] wcscat (in: _Dest=0x3e1a398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" [0144.026] wcscat (in: _Dest=0x3e1a398, _Source="PuWvV7ZY5.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\PuWvV7ZY5.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\PuWvV7ZY5.xlsx" [0144.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f70 [0144.027] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8a5e350, ftCreationTime.dwHighDateTime=0x1d5e7f9, ftLastAccessTime.dwLowDateTime=0xfd024740, ftLastAccessTime.dwHighDateTime=0x1d5daad, ftLastWriteTime.dwLowDateTime=0xfd024740, ftLastWriteTime.dwHighDateTime=0x1d5daad, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PuWvV7ZY5.xlsx", cAlternateFileName="PUWVV7~1.XLS")) returned 0 [0144.027] FindClose (in: hFindFile=0x7ad70b0 | out: hFindFile=0x7ad70b0) returned 1 [0144.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0144.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1010) returned 1 [0144.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 Thread: id = 947 os_tid = 0x16b4 [0132.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23b50 [0132.198] wcscpy (in: _Dest=0x7a23b50, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC" [0132.198] wcscat (in: _Dest=0x7a23b50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\" [0132.198] wcscat (in: _Dest=0x7a23b50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\*") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\*" [0132.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0132.198] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e06490, ftCreationTime.dwHighDateTime=0x1d5d915, ftLastAccessTime.dwLowDateTime=0x86b079a0, ftLastAccessTime.dwHighDateTime=0x1d5e1aa, ftLastWriteTime.dwLowDateTime=0x86b079a0, ftLastWriteTime.dwHighDateTime=0x1d5e1aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad70f0 [0132.199] wcscmp (_String1=".", _String2=".") returned 0 [0132.199] FindNextFileW (in: hFindFile=0x7ad70f0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e06490, ftCreationTime.dwHighDateTime=0x1d5d915, ftLastAccessTime.dwLowDateTime=0x86b079a0, ftLastAccessTime.dwHighDateTime=0x1d5e1aa, ftLastWriteTime.dwLowDateTime=0x86b079a0, ftLastWriteTime.dwHighDateTime=0x1d5e1aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.199] wcscmp (_String1="..", _String2=".") returned 1 [0132.199] wcscmp (_String1="..", _String2="..") returned 0 [0132.199] FindNextFileW (in: hFindFile=0x7ad70f0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x946e7e20, ftCreationTime.dwHighDateTime=0x1d5dc19, ftLastAccessTime.dwLowDateTime=0xb1c70360, ftLastAccessTime.dwHighDateTime=0x1d5e1ce, ftLastWriteTime.dwLowDateTime=0xb1c70360, ftLastWriteTime.dwHighDateTime=0x1d5e1ce, nFileSizeHigh=0x0, nFileSizeLow=0x86b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ysSSNRq6ok.pps", cAlternateFileName="YSSSNR~1.PPS")) returned 1 [0132.199] wcscmp (_String1="ysSSNRq6ok.pps", _String2=".") returned 1 [0132.199] wcscmp (_String1="ysSSNRq6ok.pps", _String2="..") returned 1 [0132.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c538 [0132.199] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC" [0132.199] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\" [0132.199] wcscat (in: _Dest=0x3f3c538, _Source="ysSSNRq6ok.pps" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\ysSSNRq6ok.pps") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\ysSSNRq6ok.pps" [0133.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0133.089] FindNextFileW (in: hFindFile=0x7ad70f0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x946e7e20, ftCreationTime.dwHighDateTime=0x1d5dc19, ftLastAccessTime.dwLowDateTime=0xb1c70360, ftLastAccessTime.dwHighDateTime=0x1d5e1ce, ftLastWriteTime.dwLowDateTime=0xb1c70360, ftLastWriteTime.dwHighDateTime=0x1d5e1ce, nFileSizeHigh=0x0, nFileSizeLow=0x86b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ysSSNRq6ok.pps", cAlternateFileName="YSSSNR~1.PPS")) returned 0 [0133.089] FindClose (in: hFindFile=0x7ad70f0 | out: hFindFile=0x7ad70f0) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23b50) returned 1 [0133.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a268c8) returned 1 Thread: id = 948 os_tid = 0x16b8 [0132.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7208 [0132.200] wcscpy (in: _Dest=0x2fe7208, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" [0132.200] wcscat (in: _Dest=0x2fe7208, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0132.200] wcscat (in: _Dest=0x2fe7208, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\*") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\*" [0132.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0132.200] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65cc53f0, ftCreationTime.dwHighDateTime=0x1d5dd66, ftLastAccessTime.dwLowDateTime=0x3c4f2790, ftLastAccessTime.dwHighDateTime=0x1d5e3d4, ftLastWriteTime.dwLowDateTime=0x3c4f2790, ftLastWriteTime.dwHighDateTime=0x1d5e3d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7130 [0132.201] wcscmp (_String1=".", _String2=".") returned 0 [0132.201] FindNextFileW (in: hFindFile=0x7ad7130, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65cc53f0, ftCreationTime.dwHighDateTime=0x1d5dd66, ftLastAccessTime.dwLowDateTime=0x3c4f2790, ftLastAccessTime.dwHighDateTime=0x1d5e3d4, ftLastWriteTime.dwLowDateTime=0x3c4f2790, ftLastWriteTime.dwHighDateTime=0x1d5e3d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.201] wcscmp (_String1="..", _String2=".") returned 1 [0132.201] wcscmp (_String1="..", _String2="..") returned 0 [0132.201] FindNextFileW (in: hFindFile=0x7ad7130, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48eefc60, ftCreationTime.dwHighDateTime=0x1d5d915, ftLastAccessTime.dwLowDateTime=0x9eeb4d60, ftLastAccessTime.dwHighDateTime=0x1d5dc46, ftLastWriteTime.dwLowDateTime=0x9eeb4d60, ftLastWriteTime.dwHighDateTime=0x1d5dc46, nFileSizeHigh=0x0, nFileSizeLow=0x36a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="aVwmuMpoc2vJ1L.ppt", cAlternateFileName="AVWMUM~1.PPT")) returned 1 [0132.201] wcscmp (_String1="aVwmuMpoc2vJ1L.ppt", _String2=".") returned 1 [0132.201] wcscmp (_String1="aVwmuMpoc2vJ1L.ppt", _String2="..") returned 1 [0132.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19198 [0132.201] wcscpy (in: _Dest=0x3e19198, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" [0132.201] wcscat (in: _Dest=0x3e19198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0132.201] wcscat (in: _Dest=0x3e19198, _Source="aVwmuMpoc2vJ1L.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aVwmuMpoc2vJ1L.ppt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aVwmuMpoc2vJ1L.ppt" [0133.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0133.091] FindNextFileW (in: hFindFile=0x7ad7130, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea065f0, ftCreationTime.dwHighDateTime=0x1d5d895, ftLastAccessTime.dwLowDateTime=0xb305a200, ftLastAccessTime.dwHighDateTime=0x1d5e76d, ftLastWriteTime.dwLowDateTime=0xb305a200, ftLastWriteTime.dwHighDateTime=0x1d5e76d, nFileSizeHigh=0x0, nFileSizeLow=0x9e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="emC5e7.xlsx", cAlternateFileName="EMC5E7~1.XLS")) returned 1 [0133.091] wcscmp (_String1="emC5e7.xlsx", _String2=".") returned 1 [0133.091] wcscmp (_String1="emC5e7.xlsx", _String2="..") returned 1 [0133.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b6a8 [0133.091] wcscpy (in: _Dest=0x3e3b6a8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" [0133.092] wcscat (in: _Dest=0x3e3b6a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0133.092] wcscat (in: _Dest=0x3e3b6a8, _Source="emC5e7.xlsx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\emC5e7.xlsx") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\emC5e7.xlsx" [0133.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3b6a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c08 [0133.093] FindNextFileW (in: hFindFile=0x7ad7130, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d297290, ftCreationTime.dwHighDateTime=0x1d5d981, ftLastAccessTime.dwLowDateTime=0xba54ed80, ftLastAccessTime.dwHighDateTime=0x1d5dbb1, ftLastWriteTime.dwLowDateTime=0xba54ed80, ftLastWriteTime.dwHighDateTime=0x1d5dbb1, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="etocV4DAsHU9VlupM1AV.xls", cAlternateFileName="ETOCV4~1.XLS")) returned 1 [0133.093] wcscmp (_String1="etocV4DAsHU9VlupM1AV.xls", _String2=".") returned 1 [0133.093] wcscmp (_String1="etocV4DAsHU9VlupM1AV.xls", _String2="..") returned 1 [0133.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d451d0 [0133.093] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" [0133.093] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0133.093] wcscat (in: _Dest=0x3d451d0, _Source="etocV4DAsHU9VlupM1AV.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\etocV4DAsHU9VlupM1AV.xls") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\etocV4DAsHU9VlupM1AV.xls" [0133.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d451d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c0c [0133.094] FindNextFileW (in: hFindFile=0x7ad7130, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8863bc70, ftCreationTime.dwHighDateTime=0x1d5e3ae, ftLastAccessTime.dwLowDateTime=0x8a06e860, ftLastAccessTime.dwHighDateTime=0x1d5d92a, ftLastWriteTime.dwLowDateTime=0x8a06e860, ftLastWriteTime.dwHighDateTime=0x1d5d92a, nFileSizeHigh=0x0, nFileSizeLow=0x1121b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LKQCn8aoz.ods", cAlternateFileName="LKQCN8~1.ODS")) returned 1 [0133.094] wcscmp (_String1="LKQCn8aoz.ods", _String2=".") returned 1 [0133.094] wcscmp (_String1="LKQCn8aoz.ods", _String2="..") returned 1 [0133.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3e3b978 [0133.095] wcscpy (in: _Dest=0x3e3b978, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" [0133.095] wcscat (in: _Dest=0x3e3b978, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0133.095] wcscat (in: _Dest=0x3e3b978, _Source="LKQCn8aoz.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\LKQCn8aoz.ods") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\LKQCn8aoz.ods" [0133.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3b978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0133.096] FindNextFileW (in: hFindFile=0x7ad7130, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e68550, ftCreationTime.dwHighDateTime=0x1d5d90b, ftLastAccessTime.dwLowDateTime=0x6d4f8760, ftLastAccessTime.dwHighDateTime=0x1d5dc84, ftLastWriteTime.dwLowDateTime=0x6d4f8760, ftLastWriteTime.dwHighDateTime=0x1d5dc84, nFileSizeHigh=0x0, nFileSizeLow=0x10fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="z9gZ.rtf", cAlternateFileName="")) returned 1 [0133.096] wcscmp (_String1="z9gZ.rtf", _String2=".") returned 1 [0133.096] wcscmp (_String1="z9gZ.rtf", _String2="..") returned 1 [0133.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a268c8 [0133.096] wcscpy (in: _Dest=0x7a268c8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c" [0133.096] wcscat (in: _Dest=0x7a268c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0133.097] wcscat (in: _Dest=0x7a268c8, _Source="z9gZ.rtf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\z9gZ.rtf") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\z9gZ.rtf" [0133.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a268c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c14 [0133.098] FindNextFileW (in: hFindFile=0x7ad7130, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e68550, ftCreationTime.dwHighDateTime=0x1d5d90b, ftLastAccessTime.dwLowDateTime=0x6d4f8760, ftLastAccessTime.dwHighDateTime=0x1d5dc84, ftLastWriteTime.dwLowDateTime=0x6d4f8760, ftLastWriteTime.dwHighDateTime=0x1d5dc84, nFileSizeHigh=0x0, nFileSizeLow=0x10fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="z9gZ.rtf", cAlternateFileName="")) returned 0 [0133.099] FindClose (in: hFindFile=0x7ad7130 | out: hFindFile=0x7ad7130) returned 1 [0133.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0133.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7208) returned 1 [0133.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 Thread: id = 949 os_tid = 0x16bc [0132.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb57c8 [0132.202] wcscpy (in: _Dest=0x3eb57c8, _Source="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger" [0132.202] wcscat (in: _Dest=0x3eb57c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\" [0132.202] wcscat (in: _Dest=0x3eb57c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*") returned="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*" [0132.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0132.203] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7170 [0132.203] wcscmp (_String1=".", _String2=".") returned 0 [0132.203] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.203] wcscmp (_String1="..", _String2=".") returned 1 [0132.203] wcscmp (_String1="..", _String2="..") returned 0 [0132.203] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762fa830, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762fa830, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762fa830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.204] FindClose (in: hFindFile=0x7ad7170 | out: hFindFile=0x7ad7170) returned 1 [0132.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0132.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb57c8) returned 1 [0132.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 950 os_tid = 0x16c0 [0132.206] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url")) returned 0x20 [0132.212] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url", dwFileAttributes=0x20) returned 0 [0132.217] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.228] GetLastError () returned 0x5 [0132.228] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url", dwFileAttributes=0x20) returned 0 [0132.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 Thread: id = 951 os_tid = 0x16c4 [0132.236] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url")) returned 0x20 [0134.789] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url", dwFileAttributes=0x20) returned 0 [0134.789] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.789] GetLastError () returned 0x5 [0134.789] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url", dwFileAttributes=0x20) returned 0 [0134.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 Thread: id = 952 os_tid = 0x16c8 [0132.240] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url")) returned 0x20 [0135.095] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url", dwFileAttributes=0x20) returned 0 [0135.096] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.096] GetLastError () returned 0x5 [0135.096] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url", dwFileAttributes=0x20) returned 0 [0135.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 Thread: id = 953 os_tid = 0x16cc [0132.242] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url")) returned 0x20 [0133.300] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url", dwFileAttributes=0x20) returned 0 [0133.301] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.094] GetLastError () returned 0x5 [0135.094] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url", dwFileAttributes=0x20) returned 0 [0135.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 Thread: id = 954 os_tid = 0x16d0 [0132.242] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url")) returned 0x20 [0134.654] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url", dwFileAttributes=0x20) returned 0 [0134.654] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.654] GetLastError () returned 0x5 [0134.654] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url", dwFileAttributes=0x20) returned 0 [0134.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0a60) returned 1 Thread: id = 955 os_tid = 0x16d4 [0132.243] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url")) returned 0x20 [0135.097] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url", dwFileAttributes=0x20) returned 0 [0135.097] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.097] GetLastError () returned 0x5 [0135.097] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url", dwFileAttributes=0x20) returned 0 [0135.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 Thread: id = 956 os_tid = 0x16d8 [0132.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19598 [0132.244] wcscpy (in: _Dest=0x3e19598, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0132.244] wcscat (in: _Dest=0x3e19598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0132.245] wcscat (in: _Dest=0x3e19598, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*" [0132.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0132.245] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4f9290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0138.885] wcscmp (_String1=".", _String2=".") returned 0 [0138.885] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4f9290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.885] wcscmp (_String1="..", _String2=".") returned 1 [0138.885] wcscmp (_String1="..", _String2="..") returned 0 [0138.885] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d1d500, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c356370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61d1d500, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0xfd04e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets.accdt", cAlternateFileName="ASSETS~1.ACC")) returned 1 [0138.885] wcscmp (_String1="Assets.accdt", _String2=".") returned 1 [0138.885] wcscmp (_String1="Assets.accdt", _String2="..") returned 1 [0138.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad69a0 [0138.885] wcscpy (in: _Dest=0x7ad69a0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0138.886] wcscat (in: _Dest=0x7ad69a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0138.886] wcscat (in: _Dest=0x7ad69a0, _Source="Assets.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" [0139.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad69a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0139.786] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8463ee00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c37c4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8463ee00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1af3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Charitable Contributions.accdt", cAlternateFileName="CHARIT~1.ACC")) returned 1 [0139.786] wcscmp (_String1="Charitable Contributions.accdt", _String2=".") returned 1 [0139.787] wcscmp (_String1="Charitable Contributions.accdt", _String2="..") returned 1 [0139.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6460 [0139.787] wcscpy (in: _Dest=0x2ff6460, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.787] wcscat (in: _Dest=0x2ff6460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.787] wcscat (in: _Dest=0x2ff6460, _Source="Charitable Contributions.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" [0139.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2330 [0139.788] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3628000, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3628000, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0xd45ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1 [0139.788] wcscmp (_String1="Contacts.accdt", _String2=".") returned 1 [0139.788] wcscmp (_String1="Contacts.accdt", _String2="..") returned 1 [0139.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6318 [0139.788] wcscpy (in: _Dest=0x7ad6318, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.788] wcscat (in: _Dest=0x7ad6318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.788] wcscat (in: _Dest=0x7ad6318, _Source="Contacts.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" [0139.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0139.789] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c3a2630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c3c8790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataType", cAlternateFileName="")) returned 1 [0139.789] wcscmp (_String1="DataType", _String2=".") returned 1 [0139.790] wcscmp (_String1="DataType", _String2="..") returned 1 [0139.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45b60 [0139.790] wcscpy (in: _Dest=0x3d45b60, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.790] wcscat (in: _Dest=0x3d45b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.790] wcscat (in: _Dest=0x3d45b60, _Source="DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0139.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d45b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0139.791] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e22b00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91e22b00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x2f2af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events.accdt", cAlternateFileName="EVENTS~1.ACC")) returned 1 [0139.791] wcscmp (_String1="Events.accdt", _String2=".") returned 1 [0139.791] wcscmp (_String1="Events.accdt", _String2="..") returned 1 [0139.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5c90 [0139.791] wcscpy (in: _Dest=0x7ad5c90, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.791] wcscat (in: _Dest=0x7ad5c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.791] wcscat (in: _Dest=0x7ad5c90, _Source="Events.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" [0139.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0139.792] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7414c600, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c3ee8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7414c600, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x7490b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faculty.accdt", cAlternateFileName="FACULT~1.ACC")) returned 1 [0139.793] wcscmp (_String1="Faculty.accdt", _String2=".") returned 1 [0139.793] wcscmp (_String1="Faculty.accdt", _String2="..") returned 1 [0139.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad61e8 [0139.793] wcscpy (in: _Dest=0x7ad61e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.793] wcscat (in: _Dest=0x7ad61e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.793] wcscat (in: _Dest=0x7ad61e8, _Source="Faculty.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" [0139.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad61e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0139.794] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecd8b00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3ee8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbecd8b00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x80f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1 [0139.794] wcscmp (_String1="Issues.accdt", _String2=".") returned 1 [0139.794] wcscmp (_String1="Issues.accdt", _String2="..") returned 1 [0139.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5a30 [0139.794] wcscpy (in: _Dest=0x7ad5a30, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.794] wcscat (in: _Dest=0x7ad5a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.794] wcscat (in: _Dest=0x7ad5a30, _Source="Issues.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" [0139.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2344 [0139.795] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b0fe00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c414a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90b0fe00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x10e5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marketing Projects.accdt", cAlternateFileName="MARKET~1.ACC")) returned 1 [0139.795] wcscmp (_String1="Marketing Projects.accdt", _String2=".") returned 1 [0139.796] wcscmp (_String1="Marketing Projects.accdt", _String2="..") returned 1 [0139.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b718 [0139.796] wcscpy (in: _Dest=0x35b718, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.796] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.796] wcscat (in: _Dest=0x35b718, _Source="Marketing Projects.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" [0139.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2348 [0139.797] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b486700, ftCreationTime.dwHighDateTime=0x1c6eaed, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b486700, ftLastWriteTime.dwHighDateTime=0x1c6eaed, nFileSizeHigh=0x0, nFileSizeLow=0x1f5a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="Northwind.accdt", cAlternateFileName="NORTHW~1.ACC")) returned 1 [0139.797] wcscmp (_String1="Northwind.accdt", _String2=".") returned 1 [0139.797] wcscmp (_String1="Northwind.accdt", _String2="..") returned 1 [0139.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6150 [0139.797] wcscpy (in: _Dest=0x7ad6150, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.797] wcscat (in: _Dest=0x7ad6150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.797] wcscat (in: _Dest=0x7ad6150, _Source="Northwind.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" [0139.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0139.798] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c460d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4acfd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1 [0139.798] wcscmp (_String1="Part", _String2=".") returned 1 [0139.798] wcscmp (_String1="Part", _String2="..") returned 1 [0139.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8b48 [0139.798] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.798] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.798] wcscat (in: _Dest=0x3eb8b48, _Source="Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0139.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0139.799] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9af000, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4d3130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc9af000, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x15cc78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Projects.accdt", cAlternateFileName="PROJEC~1.ACC")) returned 1 [0139.799] wcscmp (_String1="Projects.accdt", _String2=".") returned 1 [0139.800] wcscmp (_String1="Projects.accdt", _String2="..") returned 1 [0139.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad5900 [0139.800] wcscpy (in: _Dest=0x7ad5900, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.800] wcscat (in: _Dest=0x7ad5900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.800] wcscat (in: _Dest=0x7ad5900, _Source="Projects.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" [0139.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0139.801] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b486700, ftCreationTime.dwHighDateTime=0x1c6eaed, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b486700, ftLastWriteTime.dwHighDateTime=0x1c6eaed, nFileSizeHigh=0x0, nFileSizeLow=0xf8196, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sales Pipeline.accdt", cAlternateFileName="SALESP~1.ACC")) returned 1 [0139.801] wcscmp (_String1="Sales Pipeline.accdt", _String2=".") returned 1 [0139.801] wcscmp (_String1="Sales Pipeline.accdt", _String2="..") returned 1 [0139.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053288 [0139.801] wcscpy (in: _Dest=0x3053288, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.801] wcscat (in: _Dest=0x3053288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.802] wcscat (in: _Dest=0x3053288, _Source="Sales Pipeline.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" [0139.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2358 [0139.803] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9e2e00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c4f9290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d9e2e00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x7d017, dwReserved0=0x0, dwReserved1=0x0, cFileName="Students.accdt", cAlternateFileName="STUDEN~1.ACC")) returned 1 [0139.803] wcscmp (_String1="Students.accdt", _String2=".") returned 1 [0139.803] wcscmp (_String1="Students.accdt", _String2="..") returned 1 [0139.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6280 [0139.803] wcscpy (in: _Dest=0x7ad6280, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.803] wcscat (in: _Dest=0x7ad6280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.803] wcscat (in: _Dest=0x7ad6280, _Source="Students.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" [0139.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x235c [0139.805] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8262e200, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c51f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8262e200, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x84e69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1 [0139.805] wcscmp (_String1="Tasks.accdt", _String2=".") returned 1 [0139.805] wcscmp (_String1="Tasks.accdt", _String2="..") returned 1 [0139.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45bf0 [0139.805] wcscpy (in: _Dest=0x3d45bf0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.805] wcscat (in: _Dest=0x3d45bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.805] wcscat (in: _Dest=0x3d45bf0, _Source="Tasks.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" [0139.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0139.806] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 1 [0139.806] wcscmp (_String1="WSS", _String2=".") returned 1 [0139.806] wcscmp (_String1="WSS", _String2="..") returned 1 [0139.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47918 [0139.806] wcscpy (in: _Dest=0x3e47918, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access" [0139.806] wcscat (in: _Dest=0x3e47918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\" [0139.806] wcscat (in: _Dest=0x3e47918, _Source="WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0139.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0139.807] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS", cAlternateFileName="")) returned 0 [0139.807] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0139.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0139.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19598) returned 1 [0139.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb78) returned 1 Thread: id = 957 os_tid = 0x16dc [0132.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx")) returned 0x20 [0137.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx", dwFileAttributes=0x20) returned 0 [0137.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.056] GetLastError () returned 0x5 [0137.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx", dwFileAttributes=0x20) returned 0 [0137.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb61e0) returned 1 Thread: id = 958 os_tid = 0x16e0 [0132.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx")) returned 0x20 [0137.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0137.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.058] GetLastError () returned 0x5 [0137.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0137.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df48c0) returned 1 Thread: id = 959 os_tid = 0x16e4 [0132.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx")) returned 0x20 [0137.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx", dwFileAttributes=0x20) returned 0 [0137.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.060] GetLastError () returned 0x5 [0137.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx", dwFileAttributes=0x20) returned 0 [0137.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 Thread: id = 960 os_tid = 0x16e8 [0132.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx")) returned 0x20 [0137.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx", dwFileAttributes=0x20) returned 0 [0137.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.061] GetLastError () returned 0x5 [0137.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx", dwFileAttributes=0x20) returned 0 [0137.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 Thread: id = 961 os_tid = 0x16ec [0132.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt")) returned 0x20 [0136.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT", dwFileAttributes=0x20) returned 0 [0136.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.147] GetLastError () returned 0x5 [0136.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT", dwFileAttributes=0x20) returned 0 [0136.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 Thread: id = 962 os_tid = 0x16f0 [0132.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt")) returned 0x20 [0137.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT", dwFileAttributes=0x20) returned 0 [0137.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.024] GetLastError () returned 0x5 [0137.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT", dwFileAttributes=0x20) returned 0 [0137.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ef0) returned 1 Thread: id = 963 os_tid = 0x16f4 [0132.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt")) returned 0x20 [0137.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT", dwFileAttributes=0x20) returned 0 [0137.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.035] GetLastError () returned 0x5 [0137.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT", dwFileAttributes=0x20) returned 0 [0137.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47918) returned 1 Thread: id = 964 os_tid = 0x16f8 [0132.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt")) returned 0x20 [0137.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT", dwFileAttributes=0x20) returned 0 [0137.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.033] GetLastError () returned 0x5 [0137.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT", dwFileAttributes=0x20) returned 0 [0137.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c98) returned 1 Thread: id = 965 os_tid = 0x16fc [0132.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt")) returned 0x20 [0137.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT", dwFileAttributes=0x20) returned 0 [0137.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.031] GetLastError () returned 0x5 [0137.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT", dwFileAttributes=0x20) returned 0 [0137.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46518) returned 1 Thread: id = 966 os_tid = 0x1700 [0132.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt")) returned 0x20 [0137.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT", dwFileAttributes=0x20) returned 0 [0137.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.022] GetLastError () returned 0x5 [0137.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT", dwFileAttributes=0x20) returned 0 [0137.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46198) returned 1 Thread: id = 967 os_tid = 0x1704 [0132.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt")) returned 0x20 [0137.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT", dwFileAttributes=0x20) returned 0 [0137.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.020] GetLastError () returned 0x5 [0137.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT", dwFileAttributes=0x20) returned 0 [0137.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46e98) returned 1 Thread: id = 968 os_tid = 0x1708 [0132.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt")) returned 0x20 [0137.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT", dwFileAttributes=0x20) returned 0 [0137.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.030] GetLastError () returned 0x5 [0137.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT", dwFileAttributes=0x20) returned 0 [0137.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47718) returned 1 Thread: id = 969 os_tid = 0x170c [0132.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt")) returned 0x20 [0137.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT", dwFileAttributes=0x20) returned 0 [0137.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.026] GetLastError () returned 0x5 [0137.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT", dwFileAttributes=0x20) returned 0 [0137.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47098) returned 1 Thread: id = 970 os_tid = 0x1710 [0132.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt")) returned 0x20 [0137.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT", dwFileAttributes=0x20) returned 0 [0137.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.049] GetLastError () returned 0x5 [0137.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT", dwFileAttributes=0x20) returned 0 [0137.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f18) returned 1 Thread: id = 971 os_tid = 0x1714 [0132.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx")) returned 0x20 [0137.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx", dwFileAttributes=0x20) returned 0 [0137.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.018] GetLastError () returned 0x5 [0137.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx", dwFileAttributes=0x20) returned 0 [0137.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 Thread: id = 972 os_tid = 0x1718 [0132.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx")) returned 0x20 [0136.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0136.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.856] GetLastError () returned 0x5 [0136.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0136.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5c20) returned 1 Thread: id = 973 os_tid = 0x171c [0132.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx")) returned 0x20 [0137.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0137.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.039] GetLastError () returned 0x5 [0137.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0137.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 Thread: id = 974 os_tid = 0x1720 [0132.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx")) returned 0x20 [0134.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx", dwFileAttributes=0x20) returned 0 [0134.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.017] GetLastError () returned 0x5 [0137.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx", dwFileAttributes=0x20) returned 0 [0137.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6900) returned 1 Thread: id = 975 os_tid = 0x1724 [0132.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx")) returned 0x20 [0137.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx", dwFileAttributes=0x20) returned 0 [0137.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.052] GetLastError () returned 0x5 [0137.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx", dwFileAttributes=0x20) returned 0 [0137.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6310) returned 1 Thread: id = 977 os_tid = 0x1730 [0132.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x7a27b10 [0132.710] wcscpy (in: _Dest=0x7a27b10, _Source="C:\\ProgramData\\Microsoft\\DRM\\Server" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server") returned="C:\\ProgramData\\Microsoft\\DRM\\Server" [0132.710] wcscat (in: _Dest=0x7a27b10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server\\") returned="C:\\ProgramData\\Microsoft\\DRM\\Server\\" [0132.710] wcscat (in: _Dest=0x7a27b10, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server\\*") returned="C:\\ProgramData\\Microsoft\\DRM\\Server\\*" [0132.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0132.710] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0132.711] wcscmp (_String1=".", _String2=".") returned 0 [0132.711] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.711] wcscmp (_String1="..", _String2=".") returned 1 [0132.711] wcscmp (_String1="..", _String2="..") returned 0 [0132.711] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.711] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0132.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0132.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27b10) returned 1 [0132.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5d48) returned 1 Thread: id = 978 os_tid = 0x1734 [0132.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4d20 [0132.719] wcscpy (in: _Dest=0x3df4d20, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" [0132.719] wcscat (in: _Dest=0x3df4d20, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\" [0132.719] wcscat (in: _Dest=0x3df4d20, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*" [0132.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0132.719] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b80 [0132.722] wcscmp (_String1=".", _String2=".") returned 0 [0132.722] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.722] wcscmp (_String1="..", _String2=".") returned 1 [0132.722] wcscmp (_String1="..", _String2="..") returned 0 [0132.722] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e3185a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21ca9ab, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21ca9ab, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0132.722] wcscmp (_String1="FrameworkList.xml", _String2=".") returned 1 [0132.722] wcscmp (_String1="FrameworkList.xml", _String2="..") returned 1 [0132.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66198 [0132.722] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" [0132.722] wcscat (in: _Dest=0x3e66198, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\" [0132.722] wcscat (in: _Dest=0x3e66198, _Source="FrameworkList.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" [0136.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b40 [0136.780] FindNextFileW (in: hFindFile=0x3066b80, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e3185a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe21ca9ab, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe21ca9ab, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0 [0136.780] FindClose (in: hFindFile=0x3066b80 | out: hFindFile=0x3066b80) returned 1 [0136.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0136.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 [0136.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 Thread: id = 979 os_tid = 0x1738 [0132.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5220 [0132.723] wcscpy (in: _Dest=0x3df5220, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" [0132.723] wcscat (in: _Dest=0x3df5220, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\" [0132.723] wcscat (in: _Dest=0x3df5220, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*" [0132.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3560 [0132.723] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067000 [0132.723] wcscmp (_String1=".", _String2=".") returned 0 [0132.723] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4f7701f, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5e3185a, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5e3185a, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.723] wcscmp (_String1="..", _String2=".") returned 1 [0132.723] wcscmp (_String1="..", _String2="..") returned 0 [0132.724] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0132.724] wcscmp (_String1="Client.xml", _String2=".") returned 1 [0132.724] wcscmp (_String1="Client.xml", _String2="..") returned 1 [0132.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6db8 [0132.724] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList" [0132.724] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\" [0132.724] wcscat (in: _Dest=0x2ff6db8, _Source="Client.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" [0136.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b48 [0136.786] FindNextFileW (in: hFindFile=0x3067000, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0136.786] FindClose (in: hFindFile=0x3067000 | out: hFindFile=0x3067000) returned 1 [0136.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3560) returned 1 [0136.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 [0136.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 Thread: id = 980 os_tid = 0x173c [0132.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 0x20 [0134.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", dwFileAttributes=0x20) returned 0 [0134.117] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.117] GetLastError () returned 0x5 [0134.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", dwFileAttributes=0x20) returned 0 [0134.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 Thread: id = 981 os_tid = 0x1740 [0132.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3067140 [0132.726] wcscpy (in: _Dest=0x3067140, _Source="C:\\Users\\All Users\\Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe" [0132.726] wcscat (in: _Dest=0x3067140, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\") returned="C:\\Users\\All Users\\Adobe\\" [0132.726] wcscat (in: _Dest=0x3067140, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\*") returned="C:\\Users\\All Users\\Adobe\\*" [0132.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef54a8 [0132.726] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f80 [0132.727] wcscmp (_String1=".", _String2=".") returned 0 [0132.727] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.727] wcscmp (_String1="..", _String2=".") returned 1 [0132.727] wcscmp (_String1="..", _String2="..") returned 0 [0132.727] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0132.727] wcscmp (_String1="Acrobat", _String2=".") returned 1 [0132.727] wcscmp (_String1="Acrobat", _String2="..") returned 1 [0132.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5d48 [0132.727] wcscpy (in: _Dest=0x3de5d48, _Source="C:\\Users\\All Users\\Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe" [0132.727] wcscat (in: _Dest=0x3de5d48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\") returned="C:\\Users\\All Users\\Adobe\\" [0132.727] wcscat (in: _Dest=0x3de5d48, _Source="Acrobat" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat" [0136.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de5d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0136.788] FindNextFileW (in: hFindFile=0x3066f80, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 0 [0136.788] FindClose (in: hFindFile=0x3066f80 | out: hFindFile=0x3066f80) returned 1 [0136.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54a8) returned 1 [0136.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3067140) returned 1 [0136.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd0010) returned 1 Thread: id = 982 os_tid = 0x1744 [0132.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x7a27b10 [0132.728] wcscpy (in: _Dest=0x7a27b10, _Source="C:\\Users\\All Users\\Application Data" | out: _Dest="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data" [0132.728] wcscat (in: _Dest=0x7a27b10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Application Data\\") returned="C:\\Users\\All Users\\Application Data\\" [0132.728] wcscat (in: _Dest=0x7a27b10, _Source="*" | out: _Dest="C:\\Users\\All Users\\Application Data\\*") returned="C:\\Users\\All Users\\Application Data\\*" [0132.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0132.728] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0132.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27b10) returned 1 [0132.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e842b8) returned 1 Thread: id = 983 os_tid = 0x1748 [0132.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a25548 [0132.730] wcscpy (in: _Dest=0x7a25548, _Source="C:\\Users\\All Users\\Desktop" | out: _Dest="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop" [0132.730] wcscat (in: _Dest=0x7a25548, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Desktop\\") returned="C:\\Users\\All Users\\Desktop\\" [0132.730] wcscat (in: _Dest=0x7a25548, _Source="*" | out: _Dest="C:\\Users\\All Users\\Desktop\\*") returned="C:\\Users\\All Users\\Desktop\\*" [0132.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0132.731] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0132.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25548) returned 1 [0132.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcf950) returned 1 Thread: id = 984 os_tid = 0x174c [0132.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x7a25548 [0132.732] wcscpy (in: _Dest=0x7a25548, _Source="C:\\Users\\All Users\\Documents" | out: _Dest="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents" [0132.732] wcscat (in: _Dest=0x7a25548, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Documents\\") returned="C:\\Users\\All Users\\Documents\\" [0132.732] wcscat (in: _Dest=0x7a25548, _Source="*" | out: _Dest="C:\\Users\\All Users\\Documents\\*") returned="C:\\Users\\All Users\\Documents\\*" [0132.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0132.733] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0132.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25548) returned 1 [0132.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 Thread: id = 985 os_tid = 0x1750 [0132.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x7a25548 [0132.735] wcscpy (in: _Dest=0x7a25548, _Source="C:\\Users\\All Users\\Favorites" | out: _Dest="C:\\Users\\All Users\\Favorites") returned="C:\\Users\\All Users\\Favorites" [0132.735] wcscat (in: _Dest=0x7a25548, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Favorites\\") returned="C:\\Users\\All Users\\Favorites\\" [0132.735] wcscat (in: _Dest=0x7a25548, _Source="*" | out: _Dest="C:\\Users\\All Users\\Favorites\\*") returned="C:\\Users\\All Users\\Favorites\\*" [0132.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0132.735] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0132.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25548) returned 1 [0132.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 Thread: id = 986 os_tid = 0x1754 [0132.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x7a25548 [0132.737] wcscpy (in: _Dest=0x7a25548, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0132.737] wcscat (in: _Dest=0x7a25548, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0132.737] wcscat (in: _Dest=0x7a25548, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\*") returned="C:\\Users\\All Users\\Microsoft\\*" [0132.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0132.737] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf950 [0132.738] wcscmp (_String1=".", _String2=".") returned 0 [0132.738] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf9e4b61b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.738] wcscmp (_String1="..", _String2=".") returned 1 [0132.738] wcscmp (_String1="..", _String2="..") returned 0 [0132.738] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0132.738] wcscmp (_String1="Assistance", _String2=".") returned 1 [0132.738] wcscmp (_String1="Assistance", _String2="..") returned 1 [0132.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a27b10 [0132.738] wcscpy (in: _Dest=0x7a27b10, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0132.738] wcscat (in: _Dest=0x7a27b10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0132.738] wcscat (in: _Dest=0x7a27b10, _Source="Assistance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance" [0136.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a27b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0136.790] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0136.790] wcscmp (_String1="Crypto", _String2=".") returned 1 [0136.790] wcscmp (_String1="Crypto", _String2="..") returned 1 [0136.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de5c08 [0136.791] wcscpy (in: _Dest=0x3de5c08, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.791] wcscat (in: _Dest=0x3de5c08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.791] wcscat (in: _Dest=0x3de5c08, _Source="Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0136.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de5c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0136.792] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0136.792] wcscmp (_String1="Device Stage", _String2=".") returned 1 [0136.792] wcscmp (_String1="Device Stage", _String2="..") returned 1 [0136.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe72c8 [0136.792] wcscpy (in: _Dest=0x2fe72c8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.792] wcscat (in: _Dest=0x2fe72c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.792] wcscat (in: _Dest=0x2fe72c8, _Source="Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0136.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe72c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0136.793] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0136.793] wcscmp (_String1="DeviceSync", _String2=".") returned 1 [0136.793] wcscmp (_String1="DeviceSync", _String2="..") returned 1 [0136.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3d488f8 [0136.793] wcscpy (in: _Dest=0x3d488f8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.793] wcscat (in: _Dest=0x3d488f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.794] wcscat (in: _Dest=0x3d488f8, _Source="DeviceSync" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync" [0136.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d488f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0136.795] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0136.795] wcscmp (_String1="DRM", _String2=".") returned 1 [0136.795] wcscmp (_String1="DRM", _String2="..") returned 1 [0136.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6108 [0136.795] wcscpy (in: _Dest=0x3de6108, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.795] wcscat (in: _Dest=0x3de6108, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.795] wcscat (in: _Dest=0x3de6108, _Source="DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM" [0136.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0136.796] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0136.796] wcscmp (_String1="eHome", _String2=".") returned 1 [0136.796] wcscmp (_String1="eHome", _String2="..") returned 1 [0136.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de61f8 [0136.797] wcscpy (in: _Dest=0x3de61f8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.797] wcscat (in: _Dest=0x3de61f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.797] wcscat (in: _Dest=0x3de61f8, _Source="eHome" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome" [0136.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de61f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0136.798] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0136.798] wcscmp (_String1="Event Viewer", _String2=".") returned 1 [0136.798] wcscmp (_String1="Event Viewer", _String2="..") returned 1 [0136.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7388 [0136.798] wcscpy (in: _Dest=0x2fe7388, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.798] wcscat (in: _Dest=0x2fe7388, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.798] wcscat (in: _Dest=0x2fe7388, _Source="Event Viewer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer" [0136.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe7388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0136.800] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTML Help", cAlternateFileName="HTMLHE~1")) returned 1 [0136.800] wcscmp (_String1="HTML Help", _String2=".") returned 1 [0136.800] wcscmp (_String1="HTML Help", _String2="..") returned 1 [0136.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3e14bf0 [0136.800] wcscpy (in: _Dest=0x3e14bf0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.800] wcscat (in: _Dest=0x3e14bf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.800] wcscat (in: _Dest=0x3e14bf0, _Source="HTML Help" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help") returned="C:\\Users\\All Users\\Microsoft\\HTML Help" [0136.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f64 [0136.801] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0136.801] wcscmp (_String1="IdentityCRL", _String2=".") returned 1 [0136.801] wcscmp (_String1="IdentityCRL", _String2="..") returned 1 [0136.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe69c8 [0136.801] wcscpy (in: _Dest=0x2fe69c8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.801] wcscat (in: _Dest=0x2fe69c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.801] wcscat (in: _Dest=0x2fe69c8, _Source="IdentityCRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL" [0136.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe69c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68 [0136.803] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x263aa572, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x263aa572, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x263aa572, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0136.803] wcscmp (_String1="Media Player", _String2=".") returned 1 [0136.803] wcscmp (_String1="Media Player", _String2="..") returned 1 [0136.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6cc8 [0136.803] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.803] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.803] wcscat (in: _Dest=0x2fe6cc8, _Source="Media Player" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Media Player") returned="C:\\Users\\All Users\\Microsoft\\Media Player" [0136.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 [0136.803] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0136.803] wcscmp (_String1="MF", _String2=".") returned 1 [0136.803] wcscmp (_String1="MF", _String2="..") returned 1 [0136.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25350 [0136.803] wcscpy (in: _Dest=0x7a25350, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.803] wcscat (in: _Dest=0x7a25350, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.804] wcscat (in: _Dest=0x7a25350, _Source="MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0136.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a25350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0136.805] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0136.805] wcscmp (_String1="MSDN", _String2=".") returned 1 [0136.805] wcscmp (_String1="MSDN", _String2="..") returned 1 [0136.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3de6388 [0136.805] wcscpy (in: _Dest=0x3de6388, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.805] wcscat (in: _Dest=0x3de6388, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.805] wcscat (in: _Dest=0x3de6388, _Source="MSDN" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN" [0136.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f70 [0136.807] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0136.807] wcscmp (_String1="NetFramework", _String2=".") returned 1 [0136.807] wcscmp (_String1="NetFramework", _String2="..") returned 1 [0136.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6cc8 [0136.807] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.807] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.807] wcscat (in: _Dest=0x2fe6cc8, _Source="NetFramework" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework" [0136.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0136.809] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0136.809] wcscmp (_String1="Network", _String2=".") returned 1 [0136.809] wcscmp (_String1="Network", _String2="..") returned 1 [0136.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e15380 [0136.809] wcscpy (in: _Dest=0x3e15380, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.809] wcscat (in: _Dest=0x3e15380, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.809] wcscat (in: _Dest=0x3e15380, _Source="Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0136.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e15380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0136.810] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0136.810] wcscmp (_String1="OFFICE", _String2=".") returned 1 [0136.810] wcscmp (_String1="OFFICE", _String2="..") returned 1 [0136.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6018 [0136.810] wcscpy (in: _Dest=0x3de6018, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.810] wcscat (in: _Dest=0x3de6018, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.810] wcscat (in: _Dest=0x3de6018, _Source="OFFICE" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE" [0136.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0136.812] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0136.812] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2=".") returned 1 [0136.812] wcscmp (_String1="OfficeSoftwareProtectionPlatform", _String2="..") returned 1 [0136.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9230 [0136.812] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.812] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.812] wcscat (in: _Dest=0x3eb9230, _Source="OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0136.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0136.813] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0136.813] wcscmp (_String1="RAC", _String2=".") returned 1 [0136.813] wcscmp (_String1="RAC", _String2="..") returned 1 [0136.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de6248 [0136.814] wcscpy (in: _Dest=0x3de6248, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.814] wcscat (in: _Dest=0x3de6248, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.814] wcscat (in: _Dest=0x3de6248, _Source="RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0136.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0136.815] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0136.815] wcscmp (_String1="Search", _String2=".") returned 1 [0136.815] wcscmp (_String1="Search", _String2="..") returned 1 [0136.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3de6298 [0136.815] wcscpy (in: _Dest=0x3de6298, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.815] wcscat (in: _Dest=0x3de6298, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.815] wcscat (in: _Dest=0x3de6298, _Source="Search" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search" [0136.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0136.817] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0136.817] wcscmp (_String1="User Account Pictures", _String2=".") returned 1 [0136.817] wcscmp (_String1="User Account Pictures", _String2="..") returned 1 [0136.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23300 [0136.817] wcscpy (in: _Dest=0x7a23300, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.817] wcscat (in: _Dest=0x7a23300, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.817] wcscat (in: _Dest=0x7a23300, _Source="User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0136.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c [0136.819] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0136.819] wcscmp (_String1="Vault", _String2=".") returned 1 [0136.819] wcscmp (_String1="Vault", _String2="..") returned 1 [0136.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de64c8 [0136.819] wcscpy (in: _Dest=0x3de64c8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.819] wcscat (in: _Dest=0x3de64c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.819] wcscat (in: _Dest=0x3de64c8, _Source="Vault" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault") returned="C:\\Users\\All Users\\Microsoft\\Vault" [0136.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de64c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0136.820] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0136.821] wcscmp (_String1="VISIO", _String2=".") returned 1 [0136.821] wcscmp (_String1="VISIO", _String2="..") returned 1 [0136.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3de6158 [0136.821] wcscpy (in: _Dest=0x3de6158, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.821] wcscat (in: _Dest=0x3de6158, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.821] wcscat (in: _Dest=0x3de6158, _Source="VISIO" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO") returned="C:\\Users\\All Users\\Microsoft\\VISIO" [0136.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0136.822] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0136.822] wcscmp (_String1="Windows", _String2=".") returned 1 [0136.822] wcscmp (_String1="Windows", _String2="..") returned 1 [0136.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3e14568 [0136.822] wcscpy (in: _Dest=0x3e14568, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.822] wcscat (in: _Dest=0x3e14568, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.822] wcscat (in: _Dest=0x3e14568, _Source="Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0136.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0136.824] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e927dd, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe2b79540, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xe2b79540, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0136.824] wcscmp (_String1="Windows Defender", _String2=".") returned 1 [0136.824] wcscmp (_String1="Windows Defender", _String2="..") returned 1 [0136.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edffd0 [0136.824] wcscpy (in: _Dest=0x3edffd0, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.824] wcscat (in: _Dest=0x3edffd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.824] wcscat (in: _Dest=0x3edffd0, _Source="Windows Defender" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows Defender") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender" [0136.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edffd0) returned 1 [0136.824] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0136.824] wcscmp (_String1="Windows NT", _String2=".") returned 1 [0136.824] wcscmp (_String1="Windows NT", _String2="..") returned 1 [0136.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3e14ae8 [0136.824] wcscpy (in: _Dest=0x3e14ae8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.824] wcscat (in: _Dest=0x3e14ae8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.824] wcscat (in: _Dest=0x3e14ae8, _Source="Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0136.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0136.826] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0136.826] wcscmp (_String1="WwanSvc", _String2=".") returned 1 [0136.826] wcscmp (_String1="WwanSvc", _String2="..") returned 1 [0136.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x303d540 [0136.826] wcscpy (in: _Dest=0x303d540, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft" [0136.826] wcscat (in: _Dest=0x303d540, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\" [0136.826] wcscat (in: _Dest=0x303d540, _Source="WwanSvc" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc" [0136.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x303d540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0138.773] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0138.773] FindClose (in: hFindFile=0x3dcf950 | out: hFindFile=0x3dcf950) returned 1 [0138.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0138.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25548) returned 1 [0138.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07ad0) returned 1 Thread: id = 987 os_tid = 0x1758 [0132.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e842b8 [0132.739] wcscpy (in: _Dest=0x3e842b8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0132.739] wcscat (in: _Dest=0x3e842b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0132.739] wcscat (in: _Dest=0x3e842b8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\*") returned="C:\\Users\\All Users\\Microsoft Help\\*" [0132.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5e48 [0132.739] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf810 [0132.739] wcscmp (_String1=".", _String2=".") returned 0 [0132.739] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3514d910, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xf20e9ad0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf20e9ad0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.739] wcscmp (_String1="..", _String2=".") returned 1 [0132.739] wcscmp (_String1="..", _String2="..") returned 0 [0132.740] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa5d70f10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xa5d70f10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0132.740] wcscmp (_String1="Hx.hxn", _String2=".") returned 1 [0132.740] wcscmp (_String1="Hx.hxn", _String2="..") returned 1 [0132.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6788 [0132.740] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0132.740] wcscat (in: _Dest=0x2fe6788, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0132.740] wcscat (in: _Dest=0x2fe6788, _Source="Hx.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" [0148.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d0 [0148.948] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1659930, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_K.HxW", cAlternateFileName="HX_103~1.HXW")) returned 1 [0148.948] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2=".") returned 1 [0148.948] wcscmp (_String1="Hx_1033_MKWD_K.HxW", _String2="..") returned 1 [0148.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd88 [0148.948] wcscpy (in: _Dest=0x3f3dd88, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.948] wcscat (in: _Dest=0x3f3dd88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.948] wcscat (in: _Dest=0x3f3dd88, _Source="Hx_1033_MKWD_K.HxW" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW" [0148.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0148.950] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1ed4790, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x35ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MKWD_NamedURL.HxW", cAlternateFileName="HX_103~2.HXW")) returned 1 [0148.950] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2=".") returned 1 [0148.950] wcscmp (_String1="Hx_1033_MKWD_NamedURL.HxW", _String2="..") returned 1 [0148.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47a98 [0148.950] wcscpy (in: _Dest=0x3e47a98, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.950] wcscat (in: _Dest=0x3e47a98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.950] wcscat (in: _Dest=0x3e47a98, _Source="Hx_1033_MKWD_NamedURL.HxW" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" [0148.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0148.952] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf0fcdcb0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x2766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MTOC_Hx.HxH", cAlternateFileName="HX_103~1.HXH")) returned 1 [0148.952] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2=".") returned 1 [0148.952] wcscmp (_String1="Hx_1033_MTOC_Hx.HxH", _String2="..") returned 1 [0148.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3dfe0 [0148.952] wcscpy (in: _Dest=0x3f3dfe0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.952] wcscat (in: _Dest=0x3f3dfe0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.952] wcscat (in: _Dest=0x3f3dfe0, _Source="Hx_1033_MTOC_Hx.HxH" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" [0148.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dfe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1894 [0148.954] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe343ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe343ca50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x25a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.HxD", cAlternateFileName="HX_103~1.HXD")) returned 1 [0148.954] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2=".") returned 1 [0148.954] wcscmp (_String1="Hx_1033_MValidator.HxD", _String2="..") returned 1 [0148.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47d98 [0148.954] wcscpy (in: _Dest=0x3e47d98, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.954] wcscat (in: _Dest=0x3e47d98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.954] wcscat (in: _Dest=0x3e47d98, _Source="Hx_1033_MValidator.HxD" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD" [0148.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0148.956] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe1739e30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe1739e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf209d810, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx_1033_MValidator.Lck", cAlternateFileName="HX_103~1.LCK")) returned 1 [0148.956] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2=".") returned 1 [0148.956] wcscmp (_String1="Hx_1033_MValidator.Lck", _String2="..") returned 1 [0148.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47318 [0148.956] wcscpy (in: _Dest=0x3e47318, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.956] wcscat (in: _Dest=0x3e47318, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.956] wcscat (in: _Dest=0x3e47318, _Source="Hx_1033_MValidator.Lck" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck") returned="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck" [0148.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc [0148.958] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43513230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43513230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0148.958] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2=".") returned 1 [0148.958] wcscmp (_String1="MS.EXCEL.14.1033.hxn", _String2="..") returned 1 [0148.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3de00 [0148.958] wcscpy (in: _Dest=0x3f3de00, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.958] wcscat (in: _Dest=0x3f3de00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.958] wcscat (in: _Dest=0x3f3de00, _Source="MS.EXCEL.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" [0148.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0148.960] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x43539390, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x43539390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4355f4f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0148.960] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2=".") returned 1 [0148.960] wcscmp (_String1="MS.EXCEL.DEV.14.1033.hxn", _String2="..") returned 1 [0148.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47418 [0148.960] wcscpy (in: _Dest=0x3e47418, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.960] wcscat (in: _Dest=0x3e47418, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.960] wcscat (in: _Dest=0x3e47418, _Source="MS.EXCEL.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" [0148.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0148.961] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0148.961] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2=".") returned 1 [0148.961] wcscmp (_String1="MS.GRAPH.14.1033.hxn", _String2="..") returned 1 [0148.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e238 [0148.962] wcscpy (in: _Dest=0x3f3e238, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.962] wcscat (in: _Dest=0x3f3e238, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.962] wcscat (in: _Dest=0x3f3e238, _Source="MS.GRAPH.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" [0148.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0148.963] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x46aa2130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x46aa2130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46bd2c30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0148.963] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2=".") returned 1 [0148.963] wcscmp (_String1="MS.GROOVE.14.1033.hxn", _String2="..") returned 1 [0148.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0148.963] wcscpy (in: _Dest=0x3f3e0d0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.963] wcscat (in: _Dest=0x3f3e0d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.963] wcscat (in: _Dest=0x3f3e0d0, _Source="MS.GROOVE.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" [0148.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0148.965] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0148.965] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2=".") returned 1 [0148.965] wcscmp (_String1="MS.INFOPATH.14.1033.hxn", _String2="..") returned 1 [0148.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46e98 [0148.965] wcscpy (in: _Dest=0x3e46e98, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.965] wcscat (in: _Dest=0x3e46e98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.965] wcscat (in: _Dest=0x3e46e98, _Source="MS.INFOPATH.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" [0148.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0148.967] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x59962f50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x59962f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e70e70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0148.967] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2=".") returned 1 [0148.967] wcscmp (_String1="MS.INFOPATHEDITOR.14.1033.hxn", _String2="..") returned 1 [0148.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0148.967] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.967] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.967] wcscat (in: _Dest=0x3eba220, _Source="MS.INFOPATHEDITOR.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" [0148.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0148.969] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0148.969] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2=".") returned 1 [0148.969] wcscmp (_String1="MS.MSACCESS.14.1033.hxn", _String2="..") returned 1 [0148.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47718 [0148.969] wcscpy (in: _Dest=0x3e47718, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.969] wcscat (in: _Dest=0x3e47718, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.969] wcscat (in: _Dest=0x3e47718, _Source="MS.MSACCESS.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" [0148.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x778 [0148.971] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x5c70e5d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c70e5d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c7f2e10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0148.971] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2=".") returned 1 [0148.971] wcscmp (_String1="MS.MSACCESS.DEV.14.1033.hxn", _String2="..") returned 1 [0148.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9670 [0148.971] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.971] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.971] wcscat (in: _Dest=0x3eb9670, _Source="MS.MSACCESS.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" [0148.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034 [0148.973] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3639a230, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3639a230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0148.973] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2=".") returned 1 [0148.973] wcscmp (_String1="MS.MSOUC.14.1033.hxn", _String2="..") returned 1 [0148.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e760 [0148.973] wcscpy (in: _Dest=0x3f3e760, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.973] wcscat (in: _Dest=0x3f3e760, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.973] wcscat (in: _Dest=0x3f3e760, _Source="MS.MSOUC.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" [0148.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2038 [0148.975] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0148.975] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2=".") returned 1 [0148.975] wcscmp (_String1="MS.MSPUB.14.1033.hxn", _String2="..") returned 1 [0148.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dd10 [0148.975] wcscpy (in: _Dest=0x3f3dd10, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.975] wcscat (in: _Dest=0x3f3dd10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.975] wcscat (in: _Dest=0x3f3dd10, _Source="MS.MSPUB.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" [0148.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0148.977] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x6242c410, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x6242c410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6249e830, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0148.977] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2=".") returned 1 [0148.977] wcscmp (_String1="MS.MSPUB.DEV.14.1033.hxn", _String2="..") returned 1 [0148.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46198 [0148.978] wcscpy (in: _Dest=0x3e46198, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.978] wcscat (in: _Dest=0x3e46198, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.978] wcscat (in: _Dest=0x3e46198, _Source="MS.MSPUB.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" [0148.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2044 [0148.982] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35f6fbb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35f6fbb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a72170, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0148.982] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2=".") returned 1 [0148.982] wcscmp (_String1="MS.MSTORE.14.1033.hxn", _String2="..") returned 1 [0148.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0148.982] wcscpy (in: _Dest=0x3f3e328, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.982] wcscat (in: _Dest=0x3f3e328, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.982] wcscat (in: _Dest=0x3f3e328, _Source="MS.MSTORE.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" [0148.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2048 [0148.983] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x362dbb50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x362dbb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0148.983] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2=".") returned 1 [0148.983] wcscmp (_String1="MS.OIS.14.1033.hxn", _String2="..") returned 1 [0148.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e6e8 [0148.983] wcscpy (in: _Dest=0x3f3e6e8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.984] wcscat (in: _Dest=0x3f3e6e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.984] wcscat (in: _Dest=0x3f3e6e8, _Source="MS.OIS.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" [0148.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0148.985] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x555fe070, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x555fe070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5564a330, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0148.985] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2=".") returned 1 [0148.985] wcscmp (_String1="MS.ONENOTE.14.1033.hxn", _String2="..") returned 1 [0148.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47098 [0148.985] wcscpy (in: _Dest=0x3e47098, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0148.986] wcscat (in: _Dest=0x3e47098, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0148.986] wcscat (in: _Dest=0x3e47098, _Source="MS.ONENOTE.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" [0148.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2050 [0150.078] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0150.078] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2=".") returned 1 [0150.078] wcscmp (_String1="MS.OUTLOOK.14.1033.hxn", _String2="..") returned 1 [0150.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3efb520 [0150.078] wcscpy (in: _Dest=0x3efb520, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0150.078] wcscat (in: _Dest=0x3efb520, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0150.078] wcscat (in: _Dest=0x3efb520, _Source="MS.OUTLOOK.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" [0151.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3efb520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b7c [0151.196] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x491506b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x491506b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x495ed150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0151.196] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2=".") returned 1 [0151.197] wcscmp (_String1="MS.OUTLOOK.DEV.14.1033.hxn", _String2="..") returned 1 [0151.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8b48 [0151.197] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0151.197] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0151.197] wcscat (in: _Dest=0x3eb8b48, _Source="MS.OUTLOOK.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" [0164.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0164.944] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e281710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0164.944] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2=".") returned 1 [0164.944] wcscmp (_String1="MS.POWERPNT.14.1033.hxn", _String2="..") returned 1 [0164.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da63f0 [0164.944] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.945] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.945] wcscat (in: _Dest=0x3da63f0, _Source="MS.POWERPNT.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" [0164.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da63f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0164.946] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x3e0de7f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3e0de7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ec06f10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0164.946] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2=".") returned 1 [0164.946] wcscmp (_String1="MS.POWERPNT.DEV.14.1033.hxn", _String2="..") returned 1 [0164.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d748 [0164.947] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.947] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.947] wcscat (in: _Dest=0x3f3d748, _Source="MS.POWERPNT.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" [0164.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0164.949] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x36327e10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x36327e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a982d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0164.949] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2=".") returned 1 [0164.949] wcscmp (_String1="MS.SETLANG.14.1033.hxn", _String2="..") returned 1 [0164.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da4af0 [0164.949] wcscpy (in: _Dest=0x3da4af0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.949] wcscat (in: _Dest=0x3da4af0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.949] wcscat (in: _Dest=0x3da4af0, _Source="MS.SETLANG.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" [0164.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da4af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0164.951] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa723f470, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa723f470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa75852b0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0164.951] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2=".") returned 1 [0164.951] wcscmp (_String1="MS.VISIO.14.1033.hxn", _String2="..") returned 1 [0164.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3fa10 [0164.951] wcscpy (in: _Dest=0x3f3fa10, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.951] wcscat (in: _Dest=0x3f3fa10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.951] wcscat (in: _Dest=0x3f3fa10, _Source="MS.VISIO.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" [0164.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fa10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0164.953] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa780ca10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0164.953] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2=".") returned 1 [0164.953] wcscmp (_String1="MS.VISIO.DEV.14.1033.hxn", _String2="..") returned 1 [0164.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5b70 [0164.953] wcscpy (in: _Dest=0x3da5b70, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.953] wcscat (in: _Dest=0x3da5b70, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.953] wcscat (in: _Dest=0x3da5b70, _Source="MS.VISIO.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" [0164.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0164.955] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa79fbbf0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0164.955] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2=".") returned 1 [0164.955] wcscmp (_String1="MS.VISIO.SHAPESHEET.14.1033.hxn", _String2="..") returned 1 [0164.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60fc0 [0164.955] wcscpy (in: _Dest=0x7a60fc0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.955] wcscat (in: _Dest=0x7a60fc0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.955] wcscat (in: _Dest=0x7a60fc0, _Source="MS.VISIO.SHAPESHEET.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" [0164.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0164.956] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa728b730, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa728b730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa7a21d50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0164.957] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2=".") returned 1 [0164.957] wcscmp (_String1="MS.VISIO_PRM.14.1033.hxn", _String2="..") returned 1 [0164.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da65f0 [0164.957] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.957] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.957] wcscat (in: _Dest=0x3da65f0, _Source="MS.VISIO_PRM.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" [0164.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da65f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0164.958] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xa72655d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa72655d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa77281d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0164.958] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2=".") returned 1 [0164.958] wcscmp (_String1="MS.VISIO_STD.14.1033.hxn", _String2="..") returned 1 [0164.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da64f0 [0164.958] wcscpy (in: _Dest=0x3da64f0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.959] wcscat (in: _Dest=0x3da64f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.959] wcscat (in: _Dest=0x3da64f0, _Source="MS.VISIO_STD.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" [0164.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da64f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0164.960] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99cf35d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0164.960] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2=".") returned 1 [0164.960] wcscmp (_String1="MS.WINPROJ.14.1033.hxn", _String2="..") returned 1 [0164.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5d70 [0164.960] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.960] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.960] wcscat (in: _Dest=0x3da5d70, _Source="MS.WINPROJ.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" [0164.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0164.961] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x99c34ef0, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0x99c34ef0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x99d3f890, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0164.961] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2=".") returned 1 [0164.961] wcscmp (_String1="MS.WINPROJ.DEV.14.1033.hxn", _String2="..") returned 1 [0164.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d6c0 [0164.961] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.961] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.961] wcscat (in: _Dest=0x3f3d6c0, _Source="MS.WINPROJ.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" [0164.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0164.963] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x649ec510, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0164.963] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2=".") returned 1 [0164.963] wcscmp (_String1="MS.WINWORD.14.1033.hxn", _String2="..") returned 1 [0164.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da66f0 [0164.963] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.963] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.963] wcscat (in: _Dest=0x3da66f0, _Source="MS.WINWORD.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" [0164.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da66f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0164.965] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x641c75b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x641c75b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64a12670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0164.965] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2=".") returned 1 [0164.965] wcscmp (_String1="MS.WINWORD.DEV.14.1033.hxn", _String2="..") returned 1 [0164.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3bed8 [0164.965] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.965] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.965] wcscat (in: _Dest=0x3f3bed8, _Source="MS.WINWORD.DEV.14.1033.hxn" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" [0164.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0164.966] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0164.966] wcscmp (_String1="nslist.hxl", _String2=".") returned 1 [0164.966] wcscmp (_String1="nslist.hxl", _String2="..") returned 1 [0164.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0b30 [0164.966] wcscpy (in: _Dest=0x3ee0b30, _Source="C:\\Users\\All Users\\Microsoft Help" | out: _Dest="C:\\Users\\All Users\\Microsoft Help") returned="C:\\Users\\All Users\\Microsoft Help" [0164.966] wcscat (in: _Dest=0x3ee0b30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\") returned="C:\\Users\\All Users\\Microsoft Help\\" [0164.966] wcscat (in: _Dest=0x3ee0b30, _Source="nslist.hxl" | out: _Dest="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl") returned="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" [0164.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0164.969] FindNextFileW (in: hFindFile=0x3dcf810, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x35b1f3d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x35b1f3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xec43a230, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x21d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0164.969] FindClose (in: hFindFile=0x3dcf810 | out: hFindFile=0x3dcf810) returned 1 [0164.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e48) returned 1 [0164.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e842b8) returned 1 [0164.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e849e8) returned 1 Thread: id = 988 os_tid = 0x175c [0132.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcfbd0 [0132.741] wcscpy (in: _Dest=0x3dcfbd0, _Source="C:\\Users\\All Users\\Oracle" | out: _Dest="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle" [0132.741] wcscat (in: _Dest=0x3dcfbd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Oracle\\") returned="C:\\Users\\All Users\\Oracle\\" [0132.741] wcscat (in: _Dest=0x3dcfbd0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Oracle\\*") returned="C:\\Users\\All Users\\Oracle\\*" [0132.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5be0 [0132.741] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf9d0 [0132.741] wcscmp (_String1=".", _String2=".") returned 0 [0132.741] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.741] wcscmp (_String1="..", _String2=".") returned 1 [0132.741] wcscmp (_String1="..", _String2="..") returned 0 [0132.741] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6ceda0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6ceda0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0132.742] FindClose (in: hFindFile=0x3dcf9d0 | out: hFindFile=0x3dcf9d0) returned 1 [0132.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5be0) returned 1 [0132.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcfbd0) returned 1 [0132.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7170) returned 1 Thread: id = 989 os_tid = 0x1760 [0132.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e840d8 [0132.744] wcscpy (in: _Dest=0x3e840d8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0132.744] wcscat (in: _Dest=0x3e840d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0132.744] wcscat (in: _Dest=0x3e840d8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\*") returned="C:\\Users\\All Users\\Package Cache\\*" [0132.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5be0 [0132.744] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7170 [0132.744] wcscmp (_String1=".", _String2=".") returned 0 [0132.744] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x685f4b50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0xfe409700, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe409700, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.744] wcscmp (_String1="..", _String2=".") returned 1 [0132.744] wcscmp (_String1="..", _String2="..") returned 0 [0132.745] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="564F02E6419B9858949B0CD5A65E2C8C0944DD88", cAlternateFileName="564F02~1")) returned 1 [0132.745] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2=".") returned 1 [0132.745] wcscmp (_String1="564F02E6419B9858949B0CD5A65E2C8C0944DD88", _String2="..") returned 1 [0132.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df6120 [0132.745] wcscpy (in: _Dest=0x3df6120, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0132.745] wcscat (in: _Dest=0x3df6120, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0132.745] wcscat (in: _Dest=0x3df6120, _Source="564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0143.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df6120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc0 [0143.926] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D4036846864773E3D647F421DFE7F6CA536E307B", cAlternateFileName="D40368~1")) returned 1 [0144.095] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2=".") returned 1 [0144.095] wcscmp (_String1="D4036846864773E3D647F421DFE7F6CA536E307B", _String2="..") returned 1 [0144.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4fa0 [0144.095] wcscpy (in: _Dest=0x3df4fa0, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.095] wcscat (in: _Dest=0x3df4fa0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.095] wcscat (in: _Dest=0x3df4fa0, _Source="D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0144.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df4fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4 [0144.096] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0144.096] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2=".") returned 1 [0144.096] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2="..") returned 1 [0144.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c168 [0144.097] wcscpy (in: _Dest=0x35c168, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.097] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.097] wcscat (in: _Dest=0x35c168, _Source="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0144.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50 [0144.098] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0144.098] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2=".") returned 1 [0144.098] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2="..") returned 1 [0144.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64a10 [0144.098] wcscpy (in: _Dest=0x7a64a10, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.098] wcscat (in: _Dest=0x7a64a10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.098] wcscat (in: _Dest=0x7a64a10, _Source="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0144.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a64a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b64 [0144.099] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0144.099] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2=".") returned 1 [0144.099] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2="..") returned 1 [0144.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b9d8 [0144.099] wcscpy (in: _Dest=0x35b9d8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.099] wcscat (in: _Dest=0x35b9d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.099] wcscat (in: _Dest=0x35b9d8, _Source="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0144.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35b9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8 [0144.100] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0144.100] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2=".") returned 1 [0144.101] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2="..") returned 1 [0144.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b7c8 [0144.101] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.101] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.101] wcscat (in: _Dest=0x35b7c8, _Source="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0144.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c [0144.102] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0144.102] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2=".") returned 1 [0144.102] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2="..") returned 1 [0144.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c6e8 [0144.102] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.102] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.102] wcscat (in: _Dest=0x35c6e8, _Source="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0144.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d4 [0144.103] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0144.103] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2=".") returned 1 [0144.103] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2="..") returned 1 [0144.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bdf8 [0144.103] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.103] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.103] wcscat (in: _Dest=0x35bdf8, _Source="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0144.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0144.104] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0144.104] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2=".") returned 1 [0144.104] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2="..") returned 1 [0144.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64978 [0144.104] wcscpy (in: _Dest=0x7a64978, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.104] wcscat (in: _Dest=0x7a64978, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.105] wcscat (in: _Dest=0x7a64978, _Source="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0144.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a64978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40 [0144.105] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0144.106] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2=".") returned 1 [0144.106] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2="..") returned 1 [0144.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a648e0 [0144.106] wcscpy (in: _Dest=0x7a648e0, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.106] wcscat (in: _Dest=0x7a648e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.106] wcscat (in: _Dest=0x7a648e0, _Source="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0144.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a648e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0144.107] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0144.107] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2=".") returned 1 [0144.107] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2="..") returned 1 [0144.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c378 [0144.107] wcscpy (in: _Dest=0x35c378, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache" [0144.107] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\" [0144.107] wcscat (in: _Dest=0x35c378, _Source="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0144.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0144.108] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0144.108] FindClose (in: hFindFile=0x7ad7170 | out: hFindFile=0x7ad7170) returned 1 [0144.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5be0) returned 1 [0144.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e840d8) returned 1 [0144.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84128) returned 1 Thread: id = 990 os_tid = 0x1764 [0132.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a255d8 [0132.746] wcscpy (in: _Dest=0x7a255d8, _Source="C:\\Users\\All Users\\Start Menu" | out: _Dest="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu" [0132.746] wcscat (in: _Dest=0x7a255d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Start Menu\\") returned="C:\\Users\\All Users\\Start Menu\\" [0132.746] wcscat (in: _Dest=0x7a255d8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Start Menu\\*") returned="C:\\Users\\All Users\\Start Menu\\*" [0132.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0132.746] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0132.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a255d8) returned 1 [0132.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08778) returned 1 Thread: id = 991 os_tid = 0x1768 [0132.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7ad71b0 [0132.748] wcscpy (in: _Dest=0x7ad71b0, _Source="C:\\Users\\All Users\\Sun" | out: _Dest="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun" [0132.748] wcscat (in: _Dest=0x7ad71b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\") returned="C:\\Users\\All Users\\Sun\\" [0132.748] wcscat (in: _Dest=0x7ad71b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Sun\\*") returned="C:\\Users\\All Users\\Sun\\*" [0132.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0132.748] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad71f0 [0132.748] wcscmp (_String1=".", _String2=".") returned 0 [0132.748] FindNextFileW (in: hFindFile=0x7ad71f0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.748] wcscmp (_String1="..", _String2=".") returned 1 [0132.749] wcscmp (_String1="..", _String2="..") returned 0 [0132.749] FindNextFileW (in: hFindFile=0x7ad71f0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0132.749] wcscmp (_String1="Java", _String2=".") returned 1 [0132.749] wcscmp (_String1="Java", _String2="..") returned 1 [0132.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad7230 [0132.749] wcscpy (in: _Dest=0x7ad7230, _Source="C:\\Users\\All Users\\Sun" | out: _Dest="C:\\Users\\All Users\\Sun") returned="C:\\Users\\All Users\\Sun" [0132.749] wcscat (in: _Dest=0x7ad7230, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\") returned="C:\\Users\\All Users\\Sun\\" [0132.749] wcscat (in: _Dest=0x7ad7230, _Source="Java" | out: _Dest="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java" [0134.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad7230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0134.569] FindNextFileW (in: hFindFile=0x7ad71f0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0134.569] FindClose (in: hFindFile=0x7ad71f0 | out: hFindFile=0x7ad71f0) returned 1 [0134.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0134.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad71b0) returned 1 [0134.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b9058) returned 1 Thread: id = 992 os_tid = 0x176c [0132.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x7a25aa0 [0132.750] wcscpy (in: _Dest=0x7a25aa0, _Source="C:\\Users\\All Users\\Templates" | out: _Dest="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates" [0132.750] wcscat (in: _Dest=0x7a25aa0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Templates\\") returned="C:\\Users\\All Users\\Templates\\" [0132.750] wcscat (in: _Dest=0x7a25aa0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Templates\\*") returned="C:\\Users\\All Users\\Templates\\*" [0132.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef26f0 [0132.750] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef26f0) returned 1 [0132.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25aa0) returned 1 [0132.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07fe0) returned 1 Thread: id = 993 os_tid = 0x1770 [0132.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\default.jfc")) returned 0x20 [0136.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc", dwFileAttributes=0x20) returned 0 [0136.854] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.854] GetLastError () returned 0x5 [0136.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\default.jfc", dwFileAttributes=0x20) returned 0 [0136.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20190) returned 1 Thread: id = 994 os_tid = 0x1774 [0132.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\profile.jfc")) returned 0x20 [0137.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc", dwFileAttributes=0x20) returned 0 [0137.006] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre7\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.006] GetLastError () returned 0x5 [0137.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfr\\profile.jfc", dwFileAttributes=0x20) returned 0 [0137.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf9b8) returned 1 Thread: id = 995 os_tid = 0x1778 [0132.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e760 [0132.753] wcscpy (in: _Dest=0x3f3e760, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0132.753] wcscat (in: _Dest=0x3f3e760, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0132.753] wcscat (in: _Dest=0x3f3e760, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*" [0132.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef26f0 [0132.753] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0134.119] wcscmp (_String1=".", _String2=".") returned 0 [0134.119] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.119] wcscmp (_String1="..", _String2=".") returned 1 [0134.119] wcscmp (_String1="..", _String2="..") returned 0 [0134.119] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88d2693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf115ef62, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xe45606ca, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0134.120] wcscmp (_String1="Help_CValidator.H1D", _String2=".") returned 1 [0134.120] wcscmp (_String1="Help_CValidator.H1D", _String2="..") returned 1 [0134.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5fe0 [0134.120] wcscpy (in: _Dest=0x3df5fe0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0134.120] wcscat (in: _Dest=0x3df5fe0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0134.120] wcscat (in: _Dest=0x3df5fe0, _Source="Help_CValidator.H1D" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" [0140.889] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d")) returned 0x2026 [0140.903] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x20) returned 0 [0140.903] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.903] GetLastError () returned 0x5 [0140.903] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x2026) returned 0 [0140.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 [0140.904] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf774b282, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc098760, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0140.904] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2=".") returned 1 [0140.904] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2="..") returned 1 [0140.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5fe0 [0140.904] wcscpy (in: _Dest=0x3df5fe0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0140.904] wcscat (in: _Dest=0x3df5fe0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0140.904] wcscat (in: _Dest=0x3df5fe0, _Source="Help_MKWD_AssetId.H1W" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" [0140.904] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w")) returned 0x2026 [0140.904] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x20) returned 0 [0140.904] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.904] GetLastError () returned 0x5 [0140.904] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x2026) returned 0 [0140.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 [0140.905] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf7961352, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc1ef3c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0140.905] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2=".") returned 1 [0140.905] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2="..") returned 1 [0140.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5fe0 [0140.905] wcscpy (in: _Dest=0x3df5fe0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0140.905] wcscat (in: _Dest=0x3df5fe0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0140.905] wcscat (in: _Dest=0x3df5fe0, _Source="Help_MKWD_BestBet.H1W" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" [0140.905] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w")) returned 0x2026 [0140.937] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x20) returned 0 [0140.937] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.937] GetLastError () returned 0x5 [0140.938] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x2026) returned 0 [0140.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 [0140.938] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x79f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0140.938] wcscmp (_String1="Help_MTOC_help.H1H", _String2=".") returned 1 [0140.938] wcscmp (_String1="Help_MTOC_help.H1H", _String2="..") returned 1 [0140.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6c00 [0140.938] wcscpy (in: _Dest=0x7ad6c00, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0140.938] wcscat (in: _Dest=0x7ad6c00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0140.938] wcscat (in: _Dest=0x7ad6c00, _Source="Help_MTOC_help.H1H" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" [0140.939] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h")) returned 0x2026 [0140.939] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x20) returned 0 [0140.939] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.939] GetLastError () returned 0x5 [0140.939] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x2026) returned 0 [0140.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c00) returned 1 [0140.940] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8baf9110, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0140.940] wcscmp (_String1="Help_MValidator.H1D", _String2=".") returned 1 [0140.940] wcscmp (_String1="Help_MValidator.H1D", _String2="..") returned 1 [0140.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5fe0 [0140.940] wcscpy (in: _Dest=0x3df5fe0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0140.940] wcscat (in: _Dest=0x3df5fe0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0140.940] wcscat (in: _Dest=0x3df5fe0, _Source="Help_MValidator.H1D" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" [0140.940] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d")) returned 0x2026 [0140.940] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x20) returned 0 [0140.941] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.941] GetLastError () returned 0x5 [0140.941] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x2026) returned 0 [0140.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 [0140.941] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0140.942] wcscmp (_String1="Help_MValidator.Lck", _String2=".") returned 1 [0140.942] wcscmp (_String1="Help_MValidator.Lck", _String2="..") returned 1 [0140.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5fe0 [0140.942] wcscpy (in: _Dest=0x3df5fe0, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0140.942] wcscat (in: _Dest=0x3df5fe0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0140.942] wcscat (in: _Dest=0x3df5fe0, _Source="Help_MValidator.Lck" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" [0140.942] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck")) returned 0x2026 [0140.943] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0140.943] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.943] GetLastError () returned 0x5 [0140.943] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x2026) returned 0 [0140.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 [0140.944] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0140.944] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2=".") returned 1 [0140.944] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2="..") returned 1 [0140.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d85b10 [0140.944] wcscpy (in: _Dest=0x3d85b10, _Source="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0140.944] wcscat (in: _Dest=0x3d85b10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0140.944] wcscat (in: _Dest=0x3d85b10, _Source="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" | out: _Dest="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" [0140.944] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q")) returned 0x2026 [0140.945] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x20) returned 0 [0140.945] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.945] GetLastError () returned 0x5 [0140.945] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x2026) returned 0 [0140.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85b10) returned 1 [0140.946] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0140.946] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0140.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef26f0) returned 1 [0140.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0140.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 Thread: id = 996 os_tid = 0x177c [0132.757] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20 [0135.084] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0135.084] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.084] GetLastError () returned 0x5 [0135.084] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0135.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036d70) returned 1 Thread: id = 997 os_tid = 0x1780 [0132.758] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0x20 [0135.081] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0135.081] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.082] GetLastError () returned 0x5 [0135.082] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0135.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85080) returned 1 Thread: id = 998 os_tid = 0x1784 [0132.759] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20 [0135.688] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0135.688] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.688] GetLastError () returned 0x5 [0135.688] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0135.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ee0) returned 1 Thread: id = 999 os_tid = 0x1788 [0132.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df19e8 [0132.759] wcscpy (in: _Dest=0x3df19e8, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" [0132.759] wcscat (in: _Dest=0x3df19e8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\" [0132.759] wcscat (in: _Dest=0x3df19e8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*" [0132.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2bc0 [0132.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f00bc1a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f00bc1a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7270 [0132.760] wcscmp (_String1=".", _String2=".") returned 0 [0132.760] FindNextFileW (in: hFindFile=0x7ad7270, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f00bc1a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7f00bc1a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.760] wcscmp (_String1="..", _String2=".") returned 1 [0132.760] wcscmp (_String1="..", _String2="..") returned 0 [0132.760] FindNextFileW (in: hFindFile=0x7ad7270, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0132.760] wcscmp (_String1="enu-dsk", _String2=".") returned 1 [0132.760] wcscmp (_String1="enu-dsk", _String2="..") returned 1 [0132.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5f40 [0132.760] wcscpy (in: _Dest=0x3df5f40, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US" [0132.760] wcscat (in: _Dest=0x3df5f40, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\" [0132.762] wcscat (in: _Dest=0x3df5f40, _Source="enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0134.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df5f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b60 [0134.571] FindNextFileW (in: hFindFile=0x7ad7270, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b89235, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b89235, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0134.571] wcscmp (_String1="MSTTSFrontendENU.dll", _String2=".") returned 1 [0134.571] wcscmp (_String1="MSTTSFrontendENU.dll", _String2="..") returned 1 [0134.571] FindNextFileW (in: hFindFile=0x7ad7270, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e78632, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34e78632, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x289c1100, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0134.571] wcscmp (_String1="MSTTSLoc.dll.mui", _String2=".") returned 1 [0134.571] wcscmp (_String1="MSTTSLoc.dll.mui", _String2="..") returned 1 [0134.571] FindNextFileW (in: hFindFile=0x7ad7270, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e78632, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x34e78632, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x289c1100, ftLastWriteTime.dwHighDateTime=0x1ca0428, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0134.571] FindClose (in: hFindFile=0x7ad7270 | out: hFindFile=0x7ad7270) returned 1 [0134.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2bc0) returned 1 [0134.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df19e8) returned 1 [0134.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44450) returned 1 Thread: id = 1000 os_tid = 0x178c [0132.762] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\bHXRD.m4a" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\bhxrd.m4a")) returned 0x20 [0132.762] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\bHXRD.m4a", dwFileAttributes=0x20) returned 1 [0132.763] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\bHXRD.m4a" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\bhxrd.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b6c [0132.763] GetFileSizeEx (in: hFile=0x1b6c, lpFileSize=0xa7df8ec | out: lpFileSize=0xa7df8ec*=40823) returned 1 [0132.763] SetFilePointerEx (in: hFile=0x1b6c, liDistanceToMove=0x9f73, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.763] ReadFile (in: hFile=0x1b6c, lpBuffer=0xa7df8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa7df8d8, lpOverlapped=0x0 | out: lpBuffer=0xa7df8c8*, lpNumberOfBytesRead=0xa7df8d8*=0x4, lpOverlapped=0x0) returned 1 [0132.765] SetFilePointerEx (in: hFile=0x1b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0132.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1a8 [0132.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0132.766] NtQuerySystemTime (in: CurrentTime=0xa7df860 | out: CurrentTime=0xa7df860*=132462177121308000) returned 0x0 [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x3d1c9f0a [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x1d62ac3c [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x31b25729 [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x4c960220 [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x219c6b2e [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x2aa4bcaa [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x6a261325 [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x57400d1a [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x69e037f [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x6c82a403 [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x20e739c9 [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x4a0863fc [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x62246c93 [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x3d2c0ee1 [0132.766] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x64f55c1a [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x101bfbf1 [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x63c4584a [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x6687cf2a [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0xcc535a7 [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x3c74310a [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x6945e3b1 [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x3f9f493 [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0xedff91f [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x25079ced [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x24d2b9cd [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x76d33fa [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x66fda1af [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x4083f6cf [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x12e2c211 [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x25264f1a [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x5344fb97 [0132.767] RtlRandomEx (in: Seed=0xa7df858 | out: Seed=0xa7df858) returned 0x6a4c8e03 [0132.779] SetFilePointerEx (in: hFile=0x1b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.779] ReadFile (in: hFile=0x1b6c, lpBuffer=0x7a804c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa7df860, lpOverlapped=0x0 | out: lpBuffer=0x7a804c8*, lpNumberOfBytesRead=0xa7df860*=0x3c00, lpOverlapped=0x0) returned 1 [0132.779] SetFilePointerEx (in: hFile=0x1b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25a10 [0132.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0132.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0132.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0132.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a840d0 [0132.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0132.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0132.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1f8) returned 1 [0132.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0132.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25a10) returned 1 [0132.780] WriteFile (in: hFile=0x1b6c, lpBuffer=0x7a840d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa7df860, lpOverlapped=0x0 | out: lpBuffer=0x7a840d0*, lpNumberOfBytesWritten=0xa7df860*=0x3c00, lpOverlapped=0x0) returned 1 [0134.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a840d0) returned 1 [0134.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a804c8) returned 1 [0134.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0134.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54228) returned 1 [0134.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54228 [0134.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54160 [0134.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0134.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84fa8) returned 1 [0134.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3debf68 [0134.941] SetFilePointerEx (in: hFile=0x1b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.941] WriteFile (in: hFile=0x1b6c, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xa7df8e0, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0xa7df8e0*=0x104, lpOverlapped=0x0) returned 1 [0134.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a258a8 [0134.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0134.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0134.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b618) returned 1 [0134.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e80ec0 [0134.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0134.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0134.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0134.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0134.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258a8) returned 1 [0134.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x25) returned 0x7a37650 [0134.969] sprintf (in: _Dest=0x7a37650, _Format="%c%c" | out: _Dest="f9") returned 2 [0134.969] sprintf (in: _Dest=0x7a37652, _Format="%c%c" | out: _Dest="94") returned 2 [0134.969] sprintf (in: _Dest=0x7a37654, _Format="%c%c" | out: _Dest="87") returned 2 [0134.969] sprintf (in: _Dest=0x7a37656, _Format="%c%c" | out: _Dest="bd") returned 2 [0134.969] sprintf (in: _Dest=0x7a37658, _Format="%c%c" | out: _Dest="cd") returned 2 [0134.969] sprintf (in: _Dest=0x7a3765a, _Format="%c%c" | out: _Dest="10") returned 2 [0134.970] sprintf (in: _Dest=0x7a3765c, _Format="%c%c" | out: _Dest="c1") returned 2 [0134.970] sprintf (in: _Dest=0x7a3765e, _Format="%c%c" | out: _Dest="4d") returned 2 [0134.970] sprintf (in: _Dest=0x7a37660, _Format="%c%c" | out: _Dest="aa") returned 2 [0134.970] sprintf (in: _Dest=0x7a37662, _Format="%c%c" | out: _Dest="20") returned 2 [0134.970] sprintf (in: _Dest=0x7a37664, _Format="%c%c" | out: _Dest="14") returned 2 [0134.970] sprintf (in: _Dest=0x7a37666, _Format="%c%c" | out: _Dest="bd") returned 2 [0134.970] sprintf (in: _Dest=0x7a37668, _Format="%c%c" | out: _Dest="5c") returned 2 [0134.970] sprintf (in: _Dest=0x7a3766a, _Format="%c%c" | out: _Dest="74") returned 2 [0134.970] sprintf (in: _Dest=0x7a3766c, _Format="%c%c" | out: _Dest="3f") returned 2 [0134.970] sprintf (in: _Dest=0x7a3766e, _Format="%c%c" | out: _Dest="29") returned 2 [0134.970] sprintf (in: _Dest=0x7a37670, _Format="%c%c" | out: _Dest="a8") returned 2 [0134.970] sprintf (in: _Dest=0x7a37672, _Format="%c%c" | out: _Dest="87") returned 2 [0134.970] RtlInitAnsiString (in: DestinationString=0xa7df868, SourceString="f99487bdcd10c14daa2014bd5c743f29a887" | out: DestinationString="f99487bdcd10c14daa2014bd5c743f29a887") [0134.970] RtlAnsiStringToUnicodeString (in: DestinationString=0xa7df860, SourceString="f99487bdcd10c14daa2014bd5c743f29a887", AllocateDestinationString=1 | out: DestinationString="f99487bdcd10c14daa2014bd5c743f29a887") returned 0x0 [0134.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a278a8 [0134.970] wcscat (in: _Dest=0x3df4aa0, _Source="f99487bdc" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\f99487bdc") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\f99487bdc" [0134.970] wcscat (in: _Dest=0x3df4aa0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\f99487bdc.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\f99487bdc.68814f" [0134.970] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\f99487bdc.68814f", NtPathName=0xa7df858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\f99487bdc.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7880 [0134.970] NtSetInformationFile (FileHandle=0x1b6c, IoStatusBlock=0xa7df860, FileInformation=0x2ff7880, Length=0xac, FileInformationClass=0xa) returned 0x0 [0134.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 [0134.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a32d98) returned 1 [0134.988] NtQueryInformationFile (in: FileHandle=0x1b6c, IoStatusBlock=0xa7df830, FileInformation=0xa7df838, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa7df830, FileInformation=0xa7df838) returned 0x0 [0134.988] NtSetInformationFile (FileHandle=0x1b6c, IoStatusBlock=0xa7df830, FileInformation=0xa7df838, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 [0134.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a278a8) returned 1 [0134.991] FlushFileBuffers (hFile=0x1b6c) returned 1 [0135.517] CloseHandle (hObject=0x1b6c) returned 1 [0135.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e7b750 [0135.664] wcscpy (in: _Dest=0x3e7b750, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" [0135.664] wcscat (in: _Dest=0x3e7b750, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt" [0135.664] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\68814f-readme.txt")) returned 0x20 [0135.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7b750) returned 1 [0135.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d459b0) returned 1 Thread: id = 1001 os_tid = 0x1790 [0132.782] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\cfvLKuE8ajEliIrq.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\cfvlkue8ajeliirq.wav")) returned 0x20 [0132.782] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\cfvLKuE8ajEliIrq.wav", dwFileAttributes=0x20) returned 1 [0132.782] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\cfvLKuE8ajEliIrq.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\cfvlkue8ajeliirq.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b70 [0132.783] GetFileSizeEx (in: hFile=0x1b70, lpFileSize=0x907faac | out: lpFileSize=0x907faac*=98969) returned 1 [0132.783] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x18295, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.783] ReadFile (in: hFile=0x1b70, lpBuffer=0x907fa88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x907fa98, lpOverlapped=0x0 | out: lpBuffer=0x907fa88*, lpNumberOfBytesRead=0x907fa98*=0x4, lpOverlapped=0x0) returned 1 [0132.785] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0132.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0132.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.785] NtQuerySystemTime (in: CurrentTime=0x907fa20 | out: CurrentTime=0x907fa20*=132462177121464000) returned 0x0 [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x7fd74063 [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x5f2bcd39 [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x3e41dd23 [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x1d9874f [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x3a1830fc [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x5727aaa5 [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x55d7ba26 [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0xe4284ae [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x26bdfcf3 [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x3a8929ba [0132.785] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x5b45c4e6 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x76bc8e60 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x34a186b8 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x636ae128 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x7d380048 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x2a3bfbd6 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x528e7bd8 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x7e62ca73 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x3c668d68 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x3073332c [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0xc96f66b [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x58394d3e [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x4c4e21c5 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x7637f39a [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x6bc2d95a [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x27c2ae6 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x5e0848cf [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x3389e79f [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x604db68e [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x762b5b9e [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x4ec63699 [0132.786] RtlRandomEx (in: Seed=0x907fa18 | out: Seed=0x907fa18) returned 0x35ab11e0 [0132.797] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.797] ReadFile (in: hFile=0x1b70, lpBuffer=0x7a78cb8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x907fa20, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesRead=0x907fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0132.798] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a259c8 [0132.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0132.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0132.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1f8) returned 1 [0132.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a7c8c0 [0132.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0132.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0132.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0132.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a259c8) returned 1 [0132.799] WriteFile (in: hFile=0x1b70, lpBuffer=0x7a7c8c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x907fa20, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesWritten=0x907fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0134.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a7c8c0) returned 1 [0134.943] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.943] ReadFile (in: hFile=0x1b70, lpBuffer=0x7a78cb8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x907fa20, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesRead=0x907fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0134.943] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84fa8 [0134.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0134.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0134.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0134.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a7c8c0 [0134.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0134.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52cc0 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52cc0) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0134.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84fa8) returned 1 [0134.944] WriteFile (in: hFile=0x1b70, lpBuffer=0x7a7c8c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x907fa20, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesWritten=0x907fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0134.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a7c8c0) returned 1 [0134.948] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x14699, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.948] ReadFile (in: hFile=0x1b70, lpBuffer=0x7a78cb8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x907fa20, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesRead=0x907fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0134.948] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x14699, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25788 [0134.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0134.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0134.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e525b8) returned 1 [0134.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a7c8c0 [0134.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0134.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36f0 [0134.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36f0) returned 1 [0134.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0134.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25788) returned 1 [0134.949] WriteFile (in: hFile=0x1b70, lpBuffer=0x7a7c8c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x907fa20, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesWritten=0x907fa20*=0x3c00, lpOverlapped=0x0) returned 1 [0134.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a7c8c0) returned 1 [0134.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee11b0 [0134.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1f8) returned 1 [0134.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad78b0 [0134.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0134.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0134.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0134.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0134.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25788) returned 1 [0134.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15a) returned 0x3dcdfa0 [0134.952] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.953] WriteFile (in: hFile=0x1b70, lpBuffer=0x3dcdfa0*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x907faa0, lpOverlapped=0x0 | out: lpBuffer=0x3dcdfa0*, lpNumberOfBytesWritten=0x907faa0*=0x15a, lpOverlapped=0x0) returned 1 [0134.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a258a8 [0134.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0134.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0134.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0134.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37650 [0134.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0134.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0134.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0134.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0134.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258a8) returned 1 [0134.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6968 [0134.976] sprintf (in: _Dest=0x2fe6968, _Format="%c%c" | out: _Dest="45") returned 2 [0134.976] sprintf (in: _Dest=0x2fe696a, _Format="%c%c" | out: _Dest="e2") returned 2 [0134.976] sprintf (in: _Dest=0x2fe696c, _Format="%c%c" | out: _Dest="08") returned 2 [0134.976] sprintf (in: _Dest=0x2fe696e, _Format="%c%c" | out: _Dest="dc") returned 2 [0134.976] sprintf (in: _Dest=0x2fe6970, _Format="%c%c" | out: _Dest="cf") returned 2 [0134.976] sprintf (in: _Dest=0x2fe6972, _Format="%c%c" | out: _Dest="5b") returned 2 [0134.976] sprintf (in: _Dest=0x2fe6974, _Format="%c%c" | out: _Dest="67") returned 2 [0134.976] sprintf (in: _Dest=0x2fe6976, _Format="%c%c" | out: _Dest="26") returned 2 [0134.976] sprintf (in: _Dest=0x2fe6978, _Format="%c%c" | out: _Dest="dc") returned 2 [0134.976] sprintf (in: _Dest=0x2fe697a, _Format="%c%c" | out: _Dest="65") returned 2 [0134.976] sprintf (in: _Dest=0x2fe697c, _Format="%c%c" | out: _Dest="ea") returned 2 [0134.976] sprintf (in: _Dest=0x2fe697e, _Format="%c%c" | out: _Dest="21") returned 2 [0134.977] sprintf (in: _Dest=0x2fe6980, _Format="%c%c" | out: _Dest="b7") returned 2 [0134.977] sprintf (in: _Dest=0x2fe6982, _Format="%c%c" | out: _Dest="86") returned 2 [0134.977] sprintf (in: _Dest=0x2fe6984, _Format="%c%c" | out: _Dest="14") returned 2 [0134.977] sprintf (in: _Dest=0x2fe6986, _Format="%c%c" | out: _Dest="03") returned 2 [0134.977] sprintf (in: _Dest=0x2fe6988, _Format="%c%c" | out: _Dest="a8") returned 2 [0134.977] sprintf (in: _Dest=0x2fe698a, _Format="%c%c" | out: _Dest="bb") returned 2 [0134.977] sprintf (in: _Dest=0x2fe698c, _Format="%c%c" | out: _Dest="83") returned 2 [0134.977] sprintf (in: _Dest=0x2fe698e, _Format="%c%c" | out: _Dest="22") returned 2 [0134.977] sprintf (in: _Dest=0x2fe6990, _Format="%c%c" | out: _Dest="be") returned 2 [0134.977] sprintf (in: _Dest=0x2fe6992, _Format="%c%c" | out: _Dest="15") returned 2 [0134.977] sprintf (in: _Dest=0x2fe6994, _Format="%c%c" | out: _Dest="5f") returned 2 [0134.977] sprintf (in: _Dest=0x2fe6996, _Format="%c%c" | out: _Dest="0f") returned 2 [0134.977] sprintf (in: _Dest=0x2fe6998, _Format="%c%c" | out: _Dest="0b") returned 2 [0134.977] sprintf (in: _Dest=0x2fe699a, _Format="%c%c" | out: _Dest="75") returned 2 [0134.977] sprintf (in: _Dest=0x2fe699c, _Format="%c%c" | out: _Dest="12") returned 2 [0134.977] sprintf (in: _Dest=0x2fe699e, _Format="%c%c" | out: _Dest="8b") returned 2 [0134.977] sprintf (in: _Dest=0x2fe69a0, _Format="%c%c" | out: _Dest="6f") returned 2 [0134.977] sprintf (in: _Dest=0x2fe69a2, _Format="%c%c" | out: _Dest="6a") returned 2 [0134.977] sprintf (in: _Dest=0x2fe69a4, _Format="%c%c" | out: _Dest="9b") returned 2 [0134.977] sprintf (in: _Dest=0x2fe69a6, _Format="%c%c" | out: _Dest="e1") returned 2 [0134.977] sprintf (in: _Dest=0x2fe69a8, _Format="%c%c" | out: _Dest="4a") returned 2 [0134.977] sprintf (in: _Dest=0x2fe69aa, _Format="%c%c" | out: _Dest="f8") returned 2 [0134.977] sprintf (in: _Dest=0x2fe69ac, _Format="%c%c" | out: _Dest="ae") returned 2 [0134.977] sprintf (in: _Dest=0x2fe69ae, _Format="%c%c" | out: _Dest="1e") returned 2 [0134.977] sprintf (in: _Dest=0x2fe69b0, _Format="%c%c" | out: _Dest="99") returned 2 [0134.978] sprintf (in: _Dest=0x2fe69b2, _Format="%c%c" | out: _Dest="57") returned 2 [0134.978] sprintf (in: _Dest=0x2fe69b4, _Format="%c%c" | out: _Dest="3a") returned 2 [0134.978] sprintf (in: _Dest=0x2fe69b6, _Format="%c%c" | out: _Dest="2c") returned 2 [0134.978] RtlInitAnsiString (in: DestinationString=0x907fa28, SourceString="45e208dccf5b6726dc65ea21b7861403a8bb8322be155f0f0b75128b6f6a9be14af8ae1e99573a2c" | out: DestinationString="45e208dccf5b6726dc65ea21b7861403a8bb8322be155f0f0b75128b6f6a9be14af8ae1e99573a2c") [0134.978] RtlAnsiStringToUnicodeString (in: DestinationString=0x907fa20, SourceString="45e208dccf5b6726dc65ea21b7861403a8bb8322be155f0f0b75128b6f6a9be14af8ae1e99573a2c", AllocateDestinationString=1 | out: DestinationString="45e208dccf5b6726dc65ea21b7861403a8bb8322be155f0f0b75128b6f6a9be14af8ae1e99573a2c") returned 0x0 [0134.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35af88 [0134.978] wcscat (in: _Dest=0x2ff7430, _Source="45e208dccf5b6726dc65" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\45e208dccf5b6726dc65") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\45e208dccf5b6726dc65" [0134.978] wcscat (in: _Dest=0x2ff7430, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\45e208dccf5b6726dc65.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\45e208dccf5b6726dc65.68814f" [0134.978] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\45e208dccf5b6726dc65.68814f", NtPathName=0x907fa18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\45e208dccf5b6726dc65.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d852f0 [0134.978] NtSetInformationFile (FileHandle=0x1b70, IoStatusBlock=0x907fa20, FileInformation=0x3d852f0, Length=0xc2, FileInformationClass=0xa) returned 0x0 [0134.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852f0) returned 1 [0134.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a33860) returned 1 [0134.992] NtQueryInformationFile (in: FileHandle=0x1b70, IoStatusBlock=0x907f9f0, FileInformation=0x907f9f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x907f9f0, FileInformation=0x907f9f8) returned 0x0 [0134.992] NtSetInformationFile (FileHandle=0x1b70, IoStatusBlock=0x907f9f0, FileInformation=0x907f9f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0134.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 [0134.993] FlushFileBuffers (hFile=0x1b70) returned 1 [0135.519] CloseHandle (hObject=0x1b70) returned 1 [0135.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e7a640 [0135.521] wcscpy (in: _Dest=0x3e7a640, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" [0135.521] wcscat (in: _Dest=0x3e7a640, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt" [0135.521] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\68814f-readme.txt")) returned 0x20 [0135.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7a640) returned 1 [0135.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 1002 os_tid = 0x1794 [0132.806] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\ginz5CbvANRbk-zDKg9.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\ginz5cbvanrbk-zdkg9.wav")) returned 0x20 [0132.806] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\ginz5CbvANRbk-zDKg9.wav", dwFileAttributes=0x20) returned 1 [0132.807] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\ginz5CbvANRbk-zDKg9.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\ginz5cbvanrbk-zdkg9.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b74 [0132.807] GetFileSizeEx (in: hFile=0x1b74, lpFileSize=0x623fccc | out: lpFileSize=0x623fccc*=12683) returned 1 [0132.807] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x3187, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.807] ReadFile (in: hFile=0x1b74, lpBuffer=0x623fca8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x623fcb8, lpOverlapped=0x0 | out: lpBuffer=0x623fca8*, lpNumberOfBytesRead=0x623fcb8*=0x4, lpOverlapped=0x0) returned 1 [0132.809] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0132.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0132.810] NtQuerySystemTime (in: CurrentTime=0x623fc40 | out: CurrentTime=0x623fc40*=132462177121620000) returned 0x0 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x7be0d307 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x42a31486 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x556c4a12 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x40278e31 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x44df0161 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x44c8f018 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x385d1c37 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x3cd65d61 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x4a736ec1 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0xe4fe30a [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0xd7b1a7f [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x3e20518c [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x5fb134a [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x7fba440b [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x2c0e5a8f [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x20df6e8d [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x4a312934 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x71cafc34 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x566248cf [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x24f8747a [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x2697fbe8 [0132.810] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x43b31421 [0132.811] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x692eef54 [0132.811] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x3eea1e85 [0132.811] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x72d54e3 [0132.811] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x500d0237 [0132.811] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x27be232b [0132.811] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x674ccdf8 [0132.811] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x1f5e7345 [0132.811] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x5da2a04d [0132.811] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x28691026 [0132.811] RtlRandomEx (in: Seed=0x623fc38 | out: Seed=0x623fc38) returned 0x5c16ca56 [0132.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0132.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a8b8e0 [0132.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a87cd8 [0132.823] ReadFile (in: hFile=0x1b74, lpBuffer=0x7a8b8e0, nNumberOfBytesToRead=0x318b, lpNumberOfBytesRead=0x623fc34, lpOverlapped=0x0 | out: lpBuffer=0x7a8b8e0*, lpNumberOfBytesRead=0x623fc34*=0x318b, lpOverlapped=0x0) returned 1 [0132.824] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.824] WriteFile (in: hFile=0x1b74, lpBuffer=0x7a87cd8*, nNumberOfBytesToWrite=0x318b, lpNumberOfBytesWritten=0x623fc38, lpOverlapped=0x0 | out: lpBuffer=0x7a87cd8*, lpNumberOfBytesWritten=0x623fc38*=0x318b, lpOverlapped=0x0) returned 1 [0134.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52cc0 [0134.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0134.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0134.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a87cd8) returned 1 [0134.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8b8e0) returned 1 [0134.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0134.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258a8) returned 1 [0134.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x7a258a8 [0134.947] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.947] WriteFile (in: hFile=0x1b74, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x623fcc0, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0x623fcc0*=0x120, lpOverlapped=0x0) returned 1 [0134.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25788 [0134.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0134.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0134.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0134.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x7a38620 [0134.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0134.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0134.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0134.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0134.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25788) returned 1 [0134.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5d) returned 0x3ee1148 [0134.964] sprintf (in: _Dest=0x3ee1148, _Format="%c%c" | out: _Dest="24") returned 2 [0134.964] sprintf (in: _Dest=0x3ee114a, _Format="%c%c" | out: _Dest="dc") returned 2 [0134.964] sprintf (in: _Dest=0x3ee114c, _Format="%c%c" | out: _Dest="fe") returned 2 [0134.964] sprintf (in: _Dest=0x3ee114e, _Format="%c%c" | out: _Dest="20") returned 2 [0134.964] sprintf (in: _Dest=0x3ee1150, _Format="%c%c" | out: _Dest="61") returned 2 [0134.964] sprintf (in: _Dest=0x3ee1152, _Format="%c%c" | out: _Dest="73") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1154, _Format="%c%c" | out: _Dest="3b") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1156, _Format="%c%c" | out: _Dest="98") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1158, _Format="%c%c" | out: _Dest="24") returned 2 [0134.965] sprintf (in: _Dest=0x3ee115a, _Format="%c%c" | out: _Dest="a8") returned 2 [0134.965] sprintf (in: _Dest=0x3ee115c, _Format="%c%c" | out: _Dest="6b") returned 2 [0134.965] sprintf (in: _Dest=0x3ee115e, _Format="%c%c" | out: _Dest="f6") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1160, _Format="%c%c" | out: _Dest="ea") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1162, _Format="%c%c" | out: _Dest="b7") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1164, _Format="%c%c" | out: _Dest="71") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1166, _Format="%c%c" | out: _Dest="dd") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1168, _Format="%c%c" | out: _Dest="f2") returned 2 [0134.965] sprintf (in: _Dest=0x3ee116a, _Format="%c%c" | out: _Dest="ff") returned 2 [0134.965] sprintf (in: _Dest=0x3ee116c, _Format="%c%c" | out: _Dest="a5") returned 2 [0134.965] sprintf (in: _Dest=0x3ee116e, _Format="%c%c" | out: _Dest="6c") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1170, _Format="%c%c" | out: _Dest="a8") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1172, _Format="%c%c" | out: _Dest="a6") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1174, _Format="%c%c" | out: _Dest="83") returned 2 [0134.965] sprintf (in: _Dest=0x3ee1176, _Format="%c%c" | out: _Dest="db") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1178, _Format="%c%c" | out: _Dest="50") returned 2 [0134.966] sprintf (in: _Dest=0x3ee117a, _Format="%c%c" | out: _Dest="99") returned 2 [0134.966] sprintf (in: _Dest=0x3ee117c, _Format="%c%c" | out: _Dest="a4") returned 2 [0134.966] sprintf (in: _Dest=0x3ee117e, _Format="%c%c" | out: _Dest="8f") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1180, _Format="%c%c" | out: _Dest="4b") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1182, _Format="%c%c" | out: _Dest="42") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1184, _Format="%c%c" | out: _Dest="a5") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1186, _Format="%c%c" | out: _Dest="04") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1188, _Format="%c%c" | out: _Dest="77") returned 2 [0134.966] sprintf (in: _Dest=0x3ee118a, _Format="%c%c" | out: _Dest="c4") returned 2 [0134.966] sprintf (in: _Dest=0x3ee118c, _Format="%c%c" | out: _Dest="15") returned 2 [0134.966] sprintf (in: _Dest=0x3ee118e, _Format="%c%c" | out: _Dest="5a") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1190, _Format="%c%c" | out: _Dest="55") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1192, _Format="%c%c" | out: _Dest="91") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1194, _Format="%c%c" | out: _Dest="64") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1196, _Format="%c%c" | out: _Dest="62") returned 2 [0134.966] sprintf (in: _Dest=0x3ee1198, _Format="%c%c" | out: _Dest="be") returned 2 [0134.966] sprintf (in: _Dest=0x3ee119a, _Format="%c%c" | out: _Dest="a4") returned 2 [0134.966] sprintf (in: _Dest=0x3ee119c, _Format="%c%c" | out: _Dest="49") returned 2 [0134.966] sprintf (in: _Dest=0x3ee119e, _Format="%c%c" | out: _Dest="a6") returned 2 [0134.966] sprintf (in: _Dest=0x3ee11a0, _Format="%c%c" | out: _Dest="3b") returned 2 [0134.966] sprintf (in: _Dest=0x3ee11a2, _Format="%c%c" | out: _Dest="d3") returned 2 [0134.966] RtlInitAnsiString (in: DestinationString=0x623fc48, SourceString="24dcfe2061733b9824a86bf6eab771ddf2ffa56ca8a683db5099a48f4b42a50477c4155a55916462bea449a63bd3" | out: DestinationString="24dcfe2061733b9824a86bf6eab771ddf2ffa56ca8a683db5099a48f4b42a50477c4155a55916462bea449a63bd3") [0134.966] RtlAnsiStringToUnicodeString (in: DestinationString=0x623fc40, SourceString="24dcfe2061733b9824a86bf6eab771ddf2ffa56ca8a683db5099a48f4b42a50477c4155a55916462bea449a63bd3", AllocateDestinationString=1 | out: DestinationString="24dcfe2061733b9824a86bf6eab771ddf2ffa56ca8a683db5099a48f4b42a50477c4155a55916462bea449a63bd3") returned 0x0 [0134.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e38e60 [0134.967] wcscat (in: _Dest=0x3e65dd8, _Source="24dcfe2061733b9824a86bf" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\24dcfe2061733b9824a86bf") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\24dcfe2061733b9824a86bf" [0134.967] wcscat (in: _Dest=0x3e65dd8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\24dcfe2061733b9824a86bf.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\24dcfe2061733b9824a86bf.68814f" [0134.967] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\24dcfe2061733b9824a86bf.68814f", NtPathName=0x623fc38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\24dcfe2061733b9824a86bf.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d853c0 [0134.967] NtSetInformationFile (FileHandle=0x1b74, IoStatusBlock=0x623fc40, FileInformation=0x3d853c0, Length=0xc8, FileInformationClass=0xa) returned 0x0 [0134.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d853c0) returned 1 [0134.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a308f0) returned 1 [0134.985] NtQueryInformationFile (in: FileHandle=0x1b74, IoStatusBlock=0x623fc10, FileInformation=0x623fc18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x623fc10, FileInformation=0x623fc18) returned 0x0 [0134.985] NtSetInformationFile (FileHandle=0x1b74, IoStatusBlock=0x623fc10, FileInformation=0x623fc18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 [0134.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38e60) returned 1 [0134.987] FlushFileBuffers (hFile=0x1b74) returned 1 [0135.514] CloseHandle (hObject=0x1b74) returned 1 [0135.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e7b750 [0135.516] wcscpy (in: _Dest=0x3e7b750, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" [0135.516] wcscat (in: _Dest=0x3e7b750, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt" [0135.516] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\68814f-readme.txt")) returned 0xffffffff [0135.517] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ca4 [0135.659] WriteFile (in: hFile=0x1ca4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x623fc54, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x623fc54*=0x8b9, lpOverlapped=0x0) returned 1 [0135.661] CloseHandle (hObject=0x1ca4) returned 1 [0135.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7b750) returned 1 [0135.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 1003 os_tid = 0x1798 [0132.824] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\Zyxjdg-dwZnfP.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\zyxjdg-dwznfp.mp3")) returned 0x20 [0132.824] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\Zyxjdg-dwZnfP.mp3", dwFileAttributes=0x20) returned 1 [0132.825] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\Zyxjdg-dwZnfP.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\zyxjdg-dwznfp.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcb4 [0132.825] GetFileSizeEx (in: hFile=0xcb4, lpFileSize=0x982fa4c | out: lpFileSize=0x982fa4c*=66326) returned 1 [0132.825] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x10312, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.825] ReadFile (in: hFile=0xcb4, lpBuffer=0x982fa28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x982fa38, lpOverlapped=0x0 | out: lpBuffer=0x982fa28*, lpNumberOfBytesRead=0x982fa38*=0x4, lpOverlapped=0x0) returned 1 [0132.827] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0132.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0132.828] NtQuerySystemTime (in: CurrentTime=0x982f9c0 | out: CurrentTime=0x982f9c0*=132462177121932000) returned 0x0 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x5ffc70c8 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x6d16e129 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x44ddb7fa [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x32e6f3e9 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x41809750 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x6a9ed4dd [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x38ed6ee9 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x488b1a11 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x39cd5b10 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x5f15d7da [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x19705d60 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x2dd78bc [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x19feaadf [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x1689edc8 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x3a993ca9 [0132.828] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x1389da61 [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x1d0dc39c [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x5900a67c [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x1ef901e2 [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x663d608f [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x6168acb9 [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x634e6fea [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x50379f69 [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x289cdd12 [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x62abc7a1 [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x6a79247d [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x44d37fb [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x37b6eeb [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x6576f714 [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x12d98d59 [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x1c0d0450 [0132.829] RtlRandomEx (in: Seed=0x982f9b8 | out: Seed=0x982f9b8) returned 0x50888e4e [0132.839] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.839] ReadFile (in: hFile=0xcb4, lpBuffer=0x7a8f4e8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x982f9c0, lpOverlapped=0x0 | out: lpBuffer=0x7a8f4e8*, lpNumberOfBytesRead=0x982f9c0*=0x3c00, lpOverlapped=0x0) returned 1 [0132.839] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0132.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a253e0 [0132.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e508 [0132.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0132.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a930f0 [0132.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0132.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0132.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0132.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e508) returned 1 [0132.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a253e0) returned 1 [0132.840] WriteFile (in: hFile=0xcb4, lpBuffer=0x7a930f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x982f9c0, lpOverlapped=0x0 | out: lpBuffer=0x7a930f0*, lpNumberOfBytesWritten=0x982f9c0*=0x3c00, lpOverlapped=0x0) returned 1 [0134.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a930f0) returned 1 [0134.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8f4e8) returned 1 [0134.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x7a38578 [0134.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36f0) returned 1 [0134.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x7a385e8 [0134.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36f0 [0134.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0134.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0134.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0134.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25788) returned 1 [0134.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d55278 [0134.951] SetFilePointerEx (in: hFile=0xcb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.951] WriteFile (in: hFile=0xcb4, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x982fa40, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0x982fa40*=0x114, lpOverlapped=0x0) returned 1 [0134.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a258a8 [0134.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0134.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0134.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0134.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37650 [0134.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0134.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0134.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0134.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0134.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258a8) returned 1 [0134.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e84218 [0134.972] sprintf (in: _Dest=0x3e84218, _Format="%c%c" | out: _Dest="e6") returned 2 [0134.972] sprintf (in: _Dest=0x3e8421a, _Format="%c%c" | out: _Dest="23") returned 2 [0134.973] sprintf (in: _Dest=0x3e8421c, _Format="%c%c" | out: _Dest="7b") returned 2 [0134.973] sprintf (in: _Dest=0x3e8421e, _Format="%c%c" | out: _Dest="1e") returned 2 [0134.973] sprintf (in: _Dest=0x3e84220, _Format="%c%c" | out: _Dest="59") returned 2 [0134.973] sprintf (in: _Dest=0x3e84222, _Format="%c%c" | out: _Dest="bf") returned 2 [0134.973] sprintf (in: _Dest=0x3e84224, _Format="%c%c" | out: _Dest="4e") returned 2 [0134.973] sprintf (in: _Dest=0x3e84226, _Format="%c%c" | out: _Dest="32") returned 2 [0134.973] sprintf (in: _Dest=0x3e84228, _Format="%c%c" | out: _Dest="75") returned 2 [0134.973] sprintf (in: _Dest=0x3e8422a, _Format="%c%c" | out: _Dest="47") returned 2 [0134.973] sprintf (in: _Dest=0x3e8422c, _Format="%c%c" | out: _Dest="02") returned 2 [0134.973] sprintf (in: _Dest=0x3e8422e, _Format="%c%c" | out: _Dest="56") returned 2 [0134.973] sprintf (in: _Dest=0x3e84230, _Format="%c%c" | out: _Dest="e0") returned 2 [0134.973] sprintf (in: _Dest=0x3e84232, _Format="%c%c" | out: _Dest="8a") returned 2 [0134.973] sprintf (in: _Dest=0x3e84234, _Format="%c%c" | out: _Dest="40") returned 2 [0134.973] sprintf (in: _Dest=0x3e84236, _Format="%c%c" | out: _Dest="2a") returned 2 [0134.973] sprintf (in: _Dest=0x3e84238, _Format="%c%c" | out: _Dest="dd") returned 2 [0134.973] sprintf (in: _Dest=0x3e8423a, _Format="%c%c" | out: _Dest="9b") returned 2 [0134.973] sprintf (in: _Dest=0x3e8423c, _Format="%c%c" | out: _Dest="05") returned 2 [0134.973] sprintf (in: _Dest=0x3e8423e, _Format="%c%c" | out: _Dest="a0") returned 2 [0134.973] sprintf (in: _Dest=0x3e84240, _Format="%c%c" | out: _Dest="a8") returned 2 [0134.973] sprintf (in: _Dest=0x3e84242, _Format="%c%c" | out: _Dest="b3") returned 2 [0134.973] sprintf (in: _Dest=0x3e84244, _Format="%c%c" | out: _Dest="62") returned 2 [0134.973] sprintf (in: _Dest=0x3e84246, _Format="%c%c" | out: _Dest="1e") returned 2 [0134.973] sprintf (in: _Dest=0x3e84248, _Format="%c%c" | out: _Dest="b0") returned 2 [0134.973] sprintf (in: _Dest=0x3e8424a, _Format="%c%c" | out: _Dest="71") returned 2 [0134.974] sprintf (in: _Dest=0x3e8424c, _Format="%c%c" | out: _Dest="5c") returned 2 [0134.974] sprintf (in: _Dest=0x3e8424e, _Format="%c%c" | out: _Dest="69") returned 2 [0134.974] sprintf (in: _Dest=0x3e84250, _Format="%c%c" | out: _Dest="bd") returned 2 [0134.974] sprintf (in: _Dest=0x3e84252, _Format="%c%c" | out: _Dest="73") returned 2 [0134.974] sprintf (in: _Dest=0x3e84254, _Format="%c%c" | out: _Dest="80") returned 2 [0134.974] sprintf (in: _Dest=0x3e84256, _Format="%c%c" | out: _Dest="14") returned 2 [0134.974] sprintf (in: _Dest=0x3e84258, _Format="%c%c" | out: _Dest="b4") returned 2 [0134.974] sprintf (in: _Dest=0x3e8425a, _Format="%c%c" | out: _Dest="78") returned 2 [0134.974] RtlInitAnsiString (in: DestinationString=0x982f9c8, SourceString="e6237b1e59bf4e3275470256e08a402add9b05a0a8b3621eb0715c69bd738014b478" | out: DestinationString="e6237b1e59bf4e3275470256e08a402add9b05a0a8b3621eb0715c69bd738014b478") [0134.974] RtlAnsiStringToUnicodeString (in: DestinationString=0x982f9c0, SourceString="e6237b1e59bf4e3275470256e08a402add9b05a0a8b3621eb0715c69bd738014b478", AllocateDestinationString=1 | out: DestinationString="e6237b1e59bf4e3275470256e08a402add9b05a0a8b3621eb0715c69bd738014b478") returned 0x0 [0134.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb73b0 [0134.974] wcscat (in: _Dest=0x35c6e8, _Source="e6237b1e59bf4e327" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\e6237b1e59bf4e327") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\e6237b1e59bf4e327" [0134.974] wcscat (in: _Dest=0x35c6e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\e6237b1e59bf4e327.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\e6237b1e59bf4e327.68814f" [0134.974] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\e6237b1e59bf4e327.68814f", NtPathName=0x982f9b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\e6237b1e59bf4e327.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0134.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a378 [0134.974] NtSetInformationFile (FileHandle=0xcb4, IoStatusBlock=0x982f9c0, FileInformation=0x3e3a378, Length=0xbc, FileInformationClass=0xa) returned 0x0 [0134.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a378) returned 1 [0134.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a322d0) returned 1 [0134.989] NtQueryInformationFile (in: FileHandle=0xcb4, IoStatusBlock=0x982f990, FileInformation=0x982f998, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x982f990, FileInformation=0x982f998) returned 0x0 [0134.989] NtSetInformationFile (FileHandle=0xcb4, IoStatusBlock=0x982f990, FileInformation=0x982f998, Length=0x28, FileInformationClass=0x4) returned 0x0 [0134.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 [0134.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb73b0) returned 1 [0134.995] FlushFileBuffers (hFile=0xcb4) returned 1 [0135.521] CloseHandle (hObject=0xcb4) returned 1 [0135.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e79d10 [0135.522] wcscpy (in: _Dest=0x3e79d10, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\" [0135.522] wcscat (in: _Dest=0x3e79d10, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt" [0135.522] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\kXe l9\\MHdQby\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\kxe l9\\mhdqby\\68814f-readme.txt")) returned 0x20 [0135.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79d10) returned 1 [0135.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5540) returned 1 Thread: id = 1004 os_tid = 0x179c [0132.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl")) returned 0x20 [0132.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0132.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.842] GetLastError () returned 0x5 [0132.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0132.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bb58) returned 1 Thread: id = 1005 os_tid = 0x17a0 [0132.843] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mxId4_L3NmN8nSOye_t-.pps" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\mxid4_l3nmn8nsoye_t-.pps")) returned 0x2020 [0132.844] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mxId4_L3NmN8nSOye_t-.pps", dwFileAttributes=0x20) returned 1 [0142.840] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\mxId4_L3NmN8nSOye_t-.pps" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\mxid4_l3nmn8nsoye_t-.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e48 [0142.840] GetFileSizeEx (in: hFile=0x1e48, lpFileSize=0xa70fb8c | out: lpFileSize=0xa70fb8c*=71781) returned 1 [0142.840] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x11861, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.841] ReadFile (in: hFile=0x1e48, lpBuffer=0xa70fb68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa70fb78, lpOverlapped=0x0 | out: lpBuffer=0xa70fb68*, lpNumberOfBytesRead=0xa70fb78*=0x4, lpOverlapped=0x0) returned 1 [0142.842] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddec0 [0142.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb940 [0142.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0142.842] NtQuerySystemTime (in: CurrentTime=0xa70fb00 | out: CurrentTime=0xa70fb00*=132462177217404000) returned 0x0 [0142.842] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x3904ab2f [0142.842] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x53c85e32 [0142.842] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x740d4577 [0142.842] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x44dc2816 [0142.842] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x5976051b [0142.842] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x7c085319 [0142.842] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x7e67e2c6 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x5d5eba65 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x57111d55 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x8809b2d [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x31a9246c [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x6a10619b [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x571b4c82 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x2a77b9ba [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x6f56e49c [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x2fd82ded [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x1b9884a2 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x7331e0e [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x34c91258 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x69081645 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x66f51698 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x561280e0 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x20723d98 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x535dc612 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x6d1f88f9 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x47697f47 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0xad922cf [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x2ab9f2d5 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x394f0aa [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x69f95a85 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x149c6687 [0142.843] RtlRandomEx (in: Seed=0xa70faf8 | out: Seed=0xa70faf8) returned 0x21b7025 [0142.851] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.851] ReadFile (in: hFile=0x1e48, lpBuffer=0x7b8bf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa70fb00, lpOverlapped=0x0 | out: lpBuffer=0x7b8bf68*, lpNumberOfBytesRead=0xa70fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0142.852] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85350 [0142.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0142.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddec0 [0142.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddec0) returned 1 [0142.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b8fb70 [0142.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddec0 [0142.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0142.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb800) returned 1 [0142.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0142.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85350) returned 1 [0142.853] WriteFile (in: hFile=0x1e48, lpBuffer=0x7b8fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa70fb00, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesWritten=0xa70fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0142.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0142.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0142.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e85500 [0142.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfc8) returned 1 [0142.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e85350 [0142.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0142.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0142.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0142.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0142.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0142.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9a60 [0142.994] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.994] WriteFile (in: hFile=0x1e48, lpBuffer=0x3ec9a60*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xa70fb80, lpOverlapped=0x0 | out: lpBuffer=0x3ec9a60*, lpNumberOfBytesWritten=0xa70fb80*=0x122, lpOverlapped=0x0) returned 1 [0143.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e853e0 [0143.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0143.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb558 [0143.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb558) returned 1 [0143.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e798a8 [0143.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb558 [0143.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb300 [0143.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb300) returned 1 [0143.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0143.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0143.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a26f58 [0143.089] sprintf (in: _Dest=0x7a26f58, _Format="%c%c" | out: _Dest="bc") returned 2 [0143.089] sprintf (in: _Dest=0x7a26f5a, _Format="%c%c" | out: _Dest="bf") returned 2 [0143.089] sprintf (in: _Dest=0x7a26f5c, _Format="%c%c" | out: _Dest="2e") returned 2 [0143.089] sprintf (in: _Dest=0x7a26f5e, _Format="%c%c" | out: _Dest="30") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f60, _Format="%c%c" | out: _Dest="5b") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f62, _Format="%c%c" | out: _Dest="61") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f64, _Format="%c%c" | out: _Dest="f6") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f66, _Format="%c%c" | out: _Dest="2b") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f68, _Format="%c%c" | out: _Dest="29") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f6a, _Format="%c%c" | out: _Dest="bd") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f6c, _Format="%c%c" | out: _Dest="04") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f6e, _Format="%c%c" | out: _Dest="c8") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f70, _Format="%c%c" | out: _Dest="13") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f72, _Format="%c%c" | out: _Dest="ce") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f74, _Format="%c%c" | out: _Dest="56") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f76, _Format="%c%c" | out: _Dest="11") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f78, _Format="%c%c" | out: _Dest="a2") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f7a, _Format="%c%c" | out: _Dest="17") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f7c, _Format="%c%c" | out: _Dest="24") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f7e, _Format="%c%c" | out: _Dest="a4") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f80, _Format="%c%c" | out: _Dest="d6") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f82, _Format="%c%c" | out: _Dest="a0") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f84, _Format="%c%c" | out: _Dest="83") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f86, _Format="%c%c" | out: _Dest="07") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f88, _Format="%c%c" | out: _Dest="97") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f8a, _Format="%c%c" | out: _Dest="f8") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f8c, _Format="%c%c" | out: _Dest="4a") returned 2 [0143.090] sprintf (in: _Dest=0x7a26f8e, _Format="%c%c" | out: _Dest="31") returned 2 [0143.091] sprintf (in: _Dest=0x7a26f90, _Format="%c%c" | out: _Dest="3f") returned 2 [0143.091] sprintf (in: _Dest=0x7a26f92, _Format="%c%c" | out: _Dest="28") returned 2 [0143.091] sprintf (in: _Dest=0x7a26f94, _Format="%c%c" | out: _Dest="c8") returned 2 [0143.091] sprintf (in: _Dest=0x7a26f96, _Format="%c%c" | out: _Dest="e9") returned 2 [0143.091] sprintf (in: _Dest=0x7a26f98, _Format="%c%c" | out: _Dest="eb") returned 2 [0143.091] sprintf (in: _Dest=0x7a26f9a, _Format="%c%c" | out: _Dest="51") returned 2 [0143.091] sprintf (in: _Dest=0x7a26f9c, _Format="%c%c" | out: _Dest="82") returned 2 [0143.091] sprintf (in: _Dest=0x7a26f9e, _Format="%c%c" | out: _Dest="b6") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fa0, _Format="%c%c" | out: _Dest="1b") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fa2, _Format="%c%c" | out: _Dest="05") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fa4, _Format="%c%c" | out: _Dest="75") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fa6, _Format="%c%c" | out: _Dest="50") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fa8, _Format="%c%c" | out: _Dest="ab") returned 2 [0143.091] sprintf (in: _Dest=0x7a26faa, _Format="%c%c" | out: _Dest="0a") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fac, _Format="%c%c" | out: _Dest="f1") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fae, _Format="%c%c" | out: _Dest="4f") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fb0, _Format="%c%c" | out: _Dest="3a") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fb2, _Format="%c%c" | out: _Dest="6b") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fb4, _Format="%c%c" | out: _Dest="f9") returned 2 [0143.091] sprintf (in: _Dest=0x7a26fb6, _Format="%c%c" | out: _Dest="1f") returned 2 [0143.091] RtlInitAnsiString (in: DestinationString=0xa70fb08, SourceString="bcbf2e305b61f62b29bd04c813ce5611a21724a4d6a0830797f84a313f28c8e9eb5182b61b057550ab0af14f3a6bf91f" | out: DestinationString="bcbf2e305b61f62b29bd04c813ce5611a21724a4d6a0830797f84a313f28c8e9eb5182b61b057550ab0af14f3a6bf91f") [0143.091] RtlAnsiStringToUnicodeString (in: DestinationString=0xa70fb00, SourceString="bcbf2e305b61f62b29bd04c813ce5611a21724a4d6a0830797f84a313f28c8e9eb5182b61b057550ab0af14f3a6bf91f", AllocateDestinationString=1 | out: DestinationString="bcbf2e305b61f62b29bd04c813ce5611a21724a4d6a0830797f84a313f28c8e9eb5182b61b057550ab0af14f3a6bf91f") returned 0x0 [0143.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85b10 [0143.092] wcscat (in: _Dest=0x7a610e0, _Source="bcbf2e305b61f62b29bd04c8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bcbf2e305b61f62b29bd04c8") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bcbf2e305b61f62b29bd04c8" [0143.092] wcscat (in: _Dest=0x7a610e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bcbf2e305b61f62b29bd04c8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bcbf2e305b61f62b29bd04c8.68814f" [0143.092] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\bcbf2e305b61f62b29bd04c8.68814f", NtPathName=0xa70faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\bcbf2e305b61f62b29bd04c8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a621d0 [0143.185] FlushFileBuffers (hFile=0x1e48) returned 1 [0143.332] CloseHandle (hObject=0x1e48) returned 1 [0144.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26d98 [0144.002] wcscpy (in: _Dest=0x7a26d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0144.002] wcscat (in: _Dest=0x7a26d98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0144.002] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0144.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26d98) returned 1 [0144.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 Thread: id = 1006 os_tid = 0x17a4 [0132.844] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\nvvuwxkvm9s.bmp")) returned 0x2020 [0132.844] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp", dwFileAttributes=0x20) returned 1 [0139.061] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\nvvuwxkvm9s.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21c4 [0139.061] GetFileSizeEx (in: hFile=0x21c4, lpFileSize=0x9dffbf4 | out: lpFileSize=0x9dffbf4*=56586) returned 1 [0139.062] SetFilePointerEx (in: hFile=0x21c4, liDistanceToMove=0xdd06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.062] ReadFile (in: hFile=0x21c4, lpBuffer=0x9dffbd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9dffbe0, lpOverlapped=0x0 | out: lpBuffer=0x9dffbd0*, lpNumberOfBytesRead=0x9dffbe0*=0x4, lpOverlapped=0x0) returned 1 [0139.063] SetFilePointerEx (in: hFile=0x21c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533c8 [0139.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53530 [0139.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0139.063] NtQuerySystemTime (in: CurrentTime=0x9dffb68 | out: CurrentTime=0x9dffb68*=132462177183084000) returned 0x0 [0139.063] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x3b1d8c0b [0139.063] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x5eceb8b7 [0139.063] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x48985219 [0139.063] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x489d03d3 [0139.063] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x1c4abed2 [0139.063] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x7ae4c5e0 [0139.063] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x1e6b081f [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x27f7dc28 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x66b8dbbf [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x69d4686b [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x1336ac96 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x4af564e6 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x654a39f7 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x6f03850f [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x1690999e [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x7a4daaae [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x32f4a96f [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x8d09829 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x6df8eec9 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x25cd2881 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x14b5e2c3 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x7d6b81f [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x49d58c53 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x627fd195 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x1f622bc [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x7d4c01ac [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x4e51cb71 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x6e818b5f [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x37c333f2 [0139.064] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x61554ce0 [0139.065] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x25f8ed1b [0139.065] RtlRandomEx (in: Seed=0x9dffb60 | out: Seed=0x9dffb60) returned 0x736f0a72 [0139.078] SetFilePointerEx (in: hFile=0x21c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.078] ReadFile (in: hFile=0x21c4, lpBuffer=0x7a87cd8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9dffb68, lpOverlapped=0x0 | out: lpBuffer=0x7a87cd8*, lpNumberOfBytesRead=0x9dffb68*=0x3c00, lpOverlapped=0x0) returned 1 [0139.078] SetFilePointerEx (in: hFile=0x21c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24ae8 [0139.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0139.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533c8 [0139.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533c8) returned 1 [0139.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a8b8e0 [0139.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533c8 [0139.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0139.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53648) returned 1 [0139.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0139.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ae8) returned 1 [0139.080] WriteFile (in: hFile=0x21c4, lpBuffer=0x7a8b8e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9dffb68, lpOverlapped=0x0 | out: lpBuffer=0x7a8b8e0*, lpNumberOfBytesWritten=0x9dffb68*=0x3c00, lpOverlapped=0x0) returned 1 [0140.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8b8e0) returned 1 [0140.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a87cd8) returned 1 [0140.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79218 [0140.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0140.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0140.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0140.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0140.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c78) returned 1 [0140.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0140.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24668) returned 1 [0140.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3debf68 [0140.089] SetFilePointerEx (in: hFile=0x21c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.089] WriteFile (in: hFile=0x21c4, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x9dffbe8, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0x9dffbe8*=0x110, lpOverlapped=0x0) returned 1 [0141.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debf68) returned 1 [0141.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0141.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0141.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79218) returned 1 [0141.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533c8) returned 1 [0141.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53530) returned 1 [0141.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52568) returned 1 [0141.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52b58) returned 1 [0141.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0141.882] wcscpy (in: _Dest=0x3e3bae0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp" [0141.882] wcscat (in: _Dest=0x3e3bae0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp.68814f" [0141.882] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp.68814f", NtPathName=0x9dffb60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\nVvUwxkVm9S.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df1c28 [0141.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1c28) returned 1 [0141.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a499c0) returned 1 [0141.901] NtQueryInformationFile (in: FileHandle=0x21c4, IoStatusBlock=0x9dffb38, FileInformation=0x9dffb40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9dffb38, FileInformation=0x9dffb40) returned 0x0 [0141.901] NtSetInformationFile (FileHandle=0x21c4, IoStatusBlock=0x9dffb38, FileInformation=0x9dffb40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0141.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0141.914] FlushFileBuffers (hFile=0x21c4) returned 1 [0141.921] CloseHandle (hObject=0x21c4) returned 1 [0141.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a261c8 [0141.928] wcscpy (in: _Dest=0x7a261c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0141.928] wcscat (in: _Dest=0x7a261c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0141.928] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0141.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a261c8) returned 1 [0141.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a263f8) returned 1 Thread: id = 1007 os_tid = 0x17a8 [0132.845] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NZajeYu2.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\nzajeyu2.mp3")) returned 0x2020 [0132.845] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NZajeYu2.mp3", dwFileAttributes=0x20) returned 1 [0139.082] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\NZajeYu2.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\nzajeyu2.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21c8 [0139.083] GetFileSizeEx (in: hFile=0x21c8, lpFileSize=0x858fbb4 | out: lpFileSize=0x858fbb4*=29009) returned 1 [0139.083] SetFilePointerEx (in: hFile=0x21c8, liDistanceToMove=0x714d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.083] ReadFile (in: hFile=0x21c8, lpBuffer=0x858fb90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x858fba0, lpOverlapped=0x0 | out: lpBuffer=0x858fb90*, lpNumberOfBytesRead=0x858fba0*=0x4, lpOverlapped=0x0) returned 1 [0139.085] SetFilePointerEx (in: hFile=0x21c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0139.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e528b0 [0139.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53800 [0139.085] NtQuerySystemTime (in: CurrentTime=0x858fb28 | out: CurrentTime=0x858fb28*=132462177183396000) returned 0x0 [0139.085] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x684a7ef6 [0139.085] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0xdb1bbda [0139.085] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0xb360e0b [0139.085] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x3ff02d22 [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x7b656090 [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x1fc1c6b [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x4a73fb70 [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x6177341e [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x3c4b9dec [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x54e91258 [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x5e93b7d1 [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x280097f6 [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x144658b8 [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x217e6fd5 [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x682d3acf [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x52df3592 [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x10743438 [0139.086] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x69d532a4 [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x7477773b [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x70d42c73 [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x2ca0b539 [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x9a8305 [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x5dac05c9 [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x30a7e19a [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x599d1304 [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0xf10a82f [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x5dc79b4b [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x2f4c67b2 [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x6385965d [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x419e7dbb [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0xdd0268 [0139.087] RtlRandomEx (in: Seed=0x858fb20 | out: Seed=0x858fb20) returned 0x2331ee42 [0139.111] SetFilePointerEx (in: hFile=0x21c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.111] ReadFile (in: hFile=0x21c8, lpBuffer=0x7cc53c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x858fb28, lpOverlapped=0x0 | out: lpBuffer=0x7cc53c0*, lpNumberOfBytesRead=0x858fb28*=0x3c00, lpOverlapped=0x0) returned 1 [0139.111] SetFilePointerEx (in: hFile=0x21c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24ae8 [0139.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0139.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0139.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53648) returned 1 [0139.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cc8fc8 [0139.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0139.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53800 [0139.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53800) returned 1 [0139.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0139.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ae8) returned 1 [0139.112] WriteFile (in: hFile=0x21c8, lpBuffer=0x7cc8fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x858fb28, lpOverlapped=0x0 | out: lpBuffer=0x7cc8fc8*, lpNumberOfBytesWritten=0x858fb28*=0x3c00, lpOverlapped=0x0) returned 1 [0142.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc8fc8) returned 1 [0142.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc53c0) returned 1 [0142.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a377a0 [0142.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0142.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37710 [0142.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0142.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0142.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0142.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0142.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3a10) returned 1 [0142.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec828 [0142.007] SetFilePointerEx (in: hFile=0x21c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.007] WriteFile (in: hFile=0x21c8, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x858fba8, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x858fba8*=0x10a, lpOverlapped=0x0) returned 1 [0142.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0142.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0142.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0142.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0142.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8398 [0142.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0142.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0142.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0142.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0142.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x3e73db0 [0142.986] sprintf (in: _Dest=0x3e73db0, _Format="%c%c" | out: _Dest="22") returned 2 [0142.987] sprintf (in: _Dest=0x3e73db2, _Format="%c%c" | out: _Dest="aa") returned 2 [0142.987] sprintf (in: _Dest=0x3e73db4, _Format="%c%c" | out: _Dest="86") returned 2 [0142.987] sprintf (in: _Dest=0x3e73db6, _Format="%c%c" | out: _Dest="81") returned 2 [0142.987] sprintf (in: _Dest=0x3e73db8, _Format="%c%c" | out: _Dest="63") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dba, _Format="%c%c" | out: _Dest="16") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dbc, _Format="%c%c" | out: _Dest="4b") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dbe, _Format="%c%c" | out: _Dest="78") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dc0, _Format="%c%c" | out: _Dest="99") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dc2, _Format="%c%c" | out: _Dest="34") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dc4, _Format="%c%c" | out: _Dest="fe") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dc6, _Format="%c%c" | out: _Dest="89") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dc8, _Format="%c%c" | out: _Dest="7f") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dca, _Format="%c%c" | out: _Dest="da") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dcc, _Format="%c%c" | out: _Dest="35") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dce, _Format="%c%c" | out: _Dest="63") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dd0, _Format="%c%c" | out: _Dest="f1") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dd2, _Format="%c%c" | out: _Dest="b7") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dd4, _Format="%c%c" | out: _Dest="59") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dd6, _Format="%c%c" | out: _Dest="9e") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dd8, _Format="%c%c" | out: _Dest="f0") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dda, _Format="%c%c" | out: _Dest="ee") returned 2 [0142.987] sprintf (in: _Dest=0x3e73ddc, _Format="%c%c" | out: _Dest="2c") returned 2 [0142.987] sprintf (in: _Dest=0x3e73dde, _Format="%c%c" | out: _Dest="9e") returned 2 [0142.988] RtlInitAnsiString (in: DestinationString=0x858fb30, SourceString="22aa868163164b789934fe897fda3563f1b7599ef0ee2c9e" | out: DestinationString="22aa868163164b789934fe897fda3563f1b7599ef0ee2c9e") [0142.988] RtlAnsiStringToUnicodeString (in: DestinationString=0x858fb28, SourceString="22aa868163164b789934fe897fda3563f1b7599ef0ee2c9e", AllocateDestinationString=1 | out: DestinationString="22aa868163164b789934fe897fda3563f1b7599ef0ee2c9e") returned 0x0 [0142.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a38540 [0142.988] wcscat (in: _Dest=0x3f3e328, _Source="22aa86816316" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\22aa86816316") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\22aa86816316" [0142.988] wcscat (in: _Dest=0x3f3e328, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\22aa86816316.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\22aa86816316.68814f" [0142.988] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\22aa86816316.68814f", NtPathName=0x858fb20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\22aa86816316.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0142.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d7d0 [0143.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 [0143.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e012c8) returned 1 [0143.132] NtQueryInformationFile (in: FileHandle=0x21c8, IoStatusBlock=0x858faf8, FileInformation=0x858fb00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x858faf8, FileInformation=0x858fb00) returned 0x0 [0143.133] NtSetInformationFile (FileHandle=0x21c8, IoStatusBlock=0x858faf8, FileInformation=0x858fb00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0143.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0143.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38540) returned 1 [0143.135] FlushFileBuffers (hFile=0x21c8) returned 1 [0143.330] CloseHandle (hObject=0x21c8) returned 1 [0143.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23450 [0143.967] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.967] wcscat (in: _Dest=0x7a23450, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.967] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 [0143.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee09f8) returned 1 Thread: id = 1008 os_tid = 0x17ac [0132.845] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\or2asx-5z d8by.png")) returned 0x2020 [0132.845] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png", dwFileAttributes=0x20) returned 1 [0142.639] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\or2asx-5z d8by.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dc0 [0142.639] GetFileSizeEx (in: hFile=0x1dc0, lpFileSize=0xa05f89c | out: lpFileSize=0xa05f89c*=9194) returned 1 [0142.639] SetFilePointerEx (in: hFile=0x1dc0, liDistanceToMove=0x23e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.639] ReadFile (in: hFile=0x1dc0, lpBuffer=0xa05f878, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa05f888, lpOverlapped=0x0 | out: lpBuffer=0xa05f878*, lpNumberOfBytesRead=0xa05f888*=0x4, lpOverlapped=0x0) returned 1 [0142.640] SetFilePointerEx (in: hFile=0x1dc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd9e8 [0142.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd970 [0142.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd920 [0142.641] NtQuerySystemTime (in: CurrentTime=0xa05f810 | out: CurrentTime=0xa05f810*=132462177215376000) returned 0x0 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x4a92aa87 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x6845978a [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x18de88e6 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x1c74a61f [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x1d8cb5ea [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x583f82a0 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x93cacf [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x43d48ba [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x677a8ee0 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x2ce19226 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x13088b1d [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x79a54752 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x40d552a1 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x73aa658c [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x1aa9295e [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x33a07ab1 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x29a7d9b3 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x6f7029fe [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x7b24ff08 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x724337ac [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x1a18b6fb [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x5b0ee2d1 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x28d55bf0 [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x5d900f6e [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x7d17ff5a [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x69d96ade [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x40af6c1f [0142.641] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x6953e6f1 [0142.642] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x759bbd35 [0142.642] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x384d5bc1 [0142.642] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x30e06720 [0142.642] RtlRandomEx (in: Seed=0xa05f808 | out: Seed=0xa05f808) returned 0x14e07e8f [0142.649] ReadFile (in: hFile=0x1dc0, lpBuffer=0x7cc53c0, nNumberOfBytesToRead=0x23ea, lpNumberOfBytesRead=0xa05f804, lpOverlapped=0x0 | out: lpBuffer=0x7cc53c0*, lpNumberOfBytesRead=0xa05f804*=0x23ea, lpOverlapped=0x0) returned 1 [0142.650] SetFilePointerEx (in: hFile=0x1dc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.650] WriteFile (in: hFile=0x1dc0, lpBuffer=0x7cc8fc8*, nNumberOfBytesToWrite=0x23ea, lpNumberOfBytesWritten=0xa05f808, lpOverlapped=0x0 | out: lpBuffer=0x7cc8fc8*, lpNumberOfBytesWritten=0xa05f808*=0x23ea, lpOverlapped=0x0) returned 1 [0142.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0142.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0142.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0142.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc8fc8) returned 1 [0142.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc53c0) returned 1 [0142.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0142.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ae8) returned 1 [0142.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e74130 [0142.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0142.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e73470 [0142.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0142.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0142.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0142.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0142.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ae8) returned 1 [0142.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55968 [0142.929] SetFilePointerEx (in: hFile=0x1dc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.929] WriteFile (in: hFile=0x1dc0, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xa05f890, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xa05f890*=0x116, lpOverlapped=0x0) returned 1 [0143.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 [0143.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73470) returned 1 [0143.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0143.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e74130) returned 1 [0143.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37e0) returned 1 [0143.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd970) returned 1 [0143.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd8d0) returned 1 [0143.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd858) returned 1 [0143.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5ef0 [0143.023] wcscpy (in: _Dest=0x3da5ef0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png" [0143.023] wcscat (in: _Dest=0x3da5ef0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png.68814f" [0143.023] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png.68814f", NtPathName=0xa05f808, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Or2asX-5Z d8by.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64978 [0143.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64978) returned 1 [0143.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a57848) returned 1 [0143.138] NtQueryInformationFile (in: FileHandle=0x1dc0, IoStatusBlock=0xa05f7e0, FileInformation=0xa05f7e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa05f7e0, FileInformation=0xa05f7e8) returned 0x0 [0143.138] NtSetInformationFile (FileHandle=0x1dc0, IoStatusBlock=0xa05f7e0, FileInformation=0xa05f7e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0143.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ef0) returned 1 [0143.139] FlushFileBuffers (hFile=0x1dc0) returned 1 [0143.331] CloseHandle (hObject=0x1dc0) returned 1 [0143.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26008 [0143.989] wcscpy (in: _Dest=0x7a26008, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.989] wcscat (in: _Dest=0x7a26008, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.989] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26008) returned 1 [0143.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26698) returned 1 Thread: id = 1009 os_tid = 0x17b0 [0132.846] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\pW7uGXwc1Wcv5Ubl.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\pw7ugxwc1wcv5ubl.mp3")) returned 0x2020 [0132.846] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\pW7uGXwc1Wcv5Ubl.mp3", dwFileAttributes=0x20) returned 1 [0142.650] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\pW7uGXwc1Wcv5Ubl.mp3" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\pw7ugxwc1wcv5ubl.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ba4 [0142.650] GetFileSizeEx (in: hFile=0x1ba4, lpFileSize=0xa8df92c | out: lpFileSize=0xa8df92c*=47161) returned 1 [0142.650] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0xb835, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.650] ReadFile (in: hFile=0x1ba4, lpBuffer=0xa8df908, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa8df918, lpOverlapped=0x0 | out: lpBuffer=0xa8df908*, lpNumberOfBytesRead=0xa8df918*=0x4, lpOverlapped=0x0) returned 1 [0142.652] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd9e8 [0142.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd920 [0142.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd7e0 [0142.652] NtQuerySystemTime (in: CurrentTime=0xa8df8a0 | out: CurrentTime=0xa8df8a0*=132462177215376000) returned 0x0 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x104648b8 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x2c82ee7a [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x41c16d59 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0xeb67c19 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0xdfc9864 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x17b2e87a [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x7e8a1b82 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x7cf72d4e [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x3f98e908 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x3ce33787 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x386f8af1 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x33a07ab1 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x3ed71566 [0142.652] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x2e086023 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x4d7cfc85 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x282c5b6c [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x33b0e2af [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x2887481c [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x3e8cd960 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x6b94ae18 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x3b3293a2 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x65bc8a9c [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x50486146 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x26cad5c4 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x56719e57 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x3b0cb1f9 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x16b139f3 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x4eae0808 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x74799ea [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x20ff88de [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x122f9d14 [0142.653] RtlRandomEx (in: Seed=0xa8df898 | out: Seed=0xa8df898) returned 0x6dcb93f9 [0142.662] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.662] ReadFile (in: hFile=0x1ba4, lpBuffer=0x7cbdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa8df8a0, lpOverlapped=0x0 | out: lpBuffer=0x7cbdbb0*, lpNumberOfBytesRead=0xa8df8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.662] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85038 [0142.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0142.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd9e8 [0142.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd9e8) returned 1 [0142.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0142.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd9e8 [0142.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd7e0 [0142.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd7e0) returned 1 [0142.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0142.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.663] WriteFile (in: hFile=0x1ba4, lpBuffer=0x7c9bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa8df8a0, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesWritten=0xa8df8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0142.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdbb0) returned 1 [0142.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73830 [0142.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0142.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e736b0 [0142.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0142.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0142.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0142.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0142.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ae8) returned 1 [0142.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55278 [0142.932] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.933] WriteFile (in: hFile=0x1ba4, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xa8df920, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0xa8df920*=0x11a, lpOverlapped=0x0) returned 1 [0143.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85158 [0143.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd858 [0143.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd858) returned 1 [0143.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0143.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd858 [0143.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd8d0 [0143.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd8d0) returned 1 [0143.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0143.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe14a8 [0143.025] sprintf (in: _Dest=0x2fe14a8, _Format="%c%c" | out: _Dest="fd") returned 2 [0143.025] sprintf (in: _Dest=0x2fe14aa, _Format="%c%c" | out: _Dest="03") returned 2 [0143.025] sprintf (in: _Dest=0x2fe14ac, _Format="%c%c" | out: _Dest="ed") returned 2 [0143.025] sprintf (in: _Dest=0x2fe14ae, _Format="%c%c" | out: _Dest="1f") returned 2 [0143.025] sprintf (in: _Dest=0x2fe14b0, _Format="%c%c" | out: _Dest="ff") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14b2, _Format="%c%c" | out: _Dest="3b") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14b4, _Format="%c%c" | out: _Dest="09") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14b6, _Format="%c%c" | out: _Dest="06") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14b8, _Format="%c%c" | out: _Dest="32") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14ba, _Format="%c%c" | out: _Dest="9f") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14bc, _Format="%c%c" | out: _Dest="e8") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14be, _Format="%c%c" | out: _Dest="a7") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14c0, _Format="%c%c" | out: _Dest="51") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14c2, _Format="%c%c" | out: _Dest="dd") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14c4, _Format="%c%c" | out: _Dest="f6") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14c6, _Format="%c%c" | out: _Dest="9f") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14c8, _Format="%c%c" | out: _Dest="c4") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14ca, _Format="%c%c" | out: _Dest="e1") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14cc, _Format="%c%c" | out: _Dest="87") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14ce, _Format="%c%c" | out: _Dest="73") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14d0, _Format="%c%c" | out: _Dest="56") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14d2, _Format="%c%c" | out: _Dest="6c") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14d4, _Format="%c%c" | out: _Dest="5d") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14d6, _Format="%c%c" | out: _Dest="9e") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14d8, _Format="%c%c" | out: _Dest="25") returned 2 [0143.026] sprintf (in: _Dest=0x2fe14da, _Format="%c%c" | out: _Dest="09") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14dc, _Format="%c%c" | out: _Dest="8d") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14de, _Format="%c%c" | out: _Dest="98") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14e0, _Format="%c%c" | out: _Dest="79") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14e2, _Format="%c%c" | out: _Dest="ea") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14e4, _Format="%c%c" | out: _Dest="37") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14e6, _Format="%c%c" | out: _Dest="48") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14e8, _Format="%c%c" | out: _Dest="12") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14ea, _Format="%c%c" | out: _Dest="aa") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14ec, _Format="%c%c" | out: _Dest="20") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14ee, _Format="%c%c" | out: _Dest="b8") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14f0, _Format="%c%c" | out: _Dest="39") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14f2, _Format="%c%c" | out: _Dest="d1") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14f4, _Format="%c%c" | out: _Dest="50") returned 2 [0143.027] sprintf (in: _Dest=0x2fe14f6, _Format="%c%c" | out: _Dest="d2") returned 2 [0143.027] RtlInitAnsiString (in: DestinationString=0xa8df8a8, SourceString="fd03ed1fff3b0906329fe8a751ddf69fc4e18773566c5d9e25098d9879ea374812aa20b839d150d2" | out: DestinationString="fd03ed1fff3b0906329fe8a751ddf69fc4e18773566c5d9e25098d9879ea374812aa20b839d150d2") [0143.027] RtlAnsiStringToUnicodeString (in: DestinationString=0xa8df8a0, SourceString="fd03ed1fff3b0906329fe8a751ddf69fc4e18773566c5d9e25098d9879ea374812aa20b839d150d2", AllocateDestinationString=1 | out: DestinationString="fd03ed1fff3b0906329fe8a751ddf69fc4e18773566c5d9e25098d9879ea374812aa20b839d150d2") returned 0x0 [0143.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c378 [0143.027] wcscat (in: _Dest=0x3f3bdc8, _Source="fd03ed1fff3b0906329f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd03ed1fff3b0906329f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd03ed1fff3b0906329f" [0143.028] wcscat (in: _Dest=0x3f3bdc8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd03ed1fff3b0906329f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd03ed1fff3b0906329f.68814f" [0143.028] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd03ed1fff3b0906329f.68814f", NtPathName=0xa8df898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\fd03ed1fff3b0906329f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64a10 [0143.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64a10) returned 1 [0143.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a58538) returned 1 [0143.142] NtQueryInformationFile (in: FileHandle=0x1ba4, IoStatusBlock=0xa8df870, FileInformation=0xa8df878, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa8df870, FileInformation=0xa8df878) returned 0x0 [0143.143] NtSetInformationFile (FileHandle=0x1ba4, IoStatusBlock=0xa8df870, FileInformation=0xa8df878, Length=0x28, FileInformationClass=0x4) returned 0x0 [0143.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 [0143.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 [0143.144] FlushFileBuffers (hFile=0x1ba4) returned 1 [0143.331] CloseHandle (hObject=0x1ba4) returned 1 [0143.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26698 [0143.991] wcscpy (in: _Dest=0x7a26698, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.991] wcscat (in: _Dest=0x7a26698, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.991] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26698) returned 1 [0143.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 Thread: id = 1010 os_tid = 0x17b4 [0132.846] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TTAjqLttKGE1.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ttajqlttkge1.avi")) returned 0x2020 [0132.847] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TTAjqLttKGE1.avi", dwFileAttributes=0x20) returned 1 [0142.663] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\TTAjqLttKGE1.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ttajqlttkge1.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f84 [0142.664] GetFileSizeEx (in: hFile=0x1f84, lpFileSize=0xa01f8ec | out: lpFileSize=0xa01f8ec*=24281) returned 1 [0142.664] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x5ed5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.664] ReadFile (in: hFile=0x1f84, lpBuffer=0xa01f8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa01f8d8, lpOverlapped=0x0 | out: lpBuffer=0xa01f8c8*, lpNumberOfBytesRead=0xa01f8d8*=0x4, lpOverlapped=0x0) returned 1 [0142.665] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd7e0 [0142.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd768 [0142.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb698 [0142.666] NtQuerySystemTime (in: CurrentTime=0xa01f860 | out: CurrentTime=0xa01f860*=132462177215532000) returned 0x0 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x20ff88de [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x7b72f251 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x76db6810 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0xf569b6 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x73f9d2b [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x28d55bf0 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x4b88d077 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x7c439118 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0xe9b65ad [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x69799b2a [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0xc94a08c [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x56719e57 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x3a0da72d [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x7a23e924 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x60149e93 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x53953567 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x591b7c39 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x83719b3 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x1f6effe0 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x45bcf7f6 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x50ecd8f8 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x4e8c0df7 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x7cf72d4e [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x77c36f28 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x2492ae93 [0142.666] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x4e6fa131 [0142.667] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x369ed036 [0142.667] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x42bd7151 [0142.667] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x49f294d0 [0142.667] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x664f21b2 [0142.667] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x2e086023 [0142.667] RtlRandomEx (in: Seed=0xa01f858 | out: Seed=0xa01f858) returned 0x6c20312c [0142.674] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.674] ReadFile (in: hFile=0x1f84, lpBuffer=0x7cccbd0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa01f860, lpOverlapped=0x0 | out: lpBuffer=0x7cccbd0*, lpNumberOfBytesRead=0xa01f860*=0x3c00, lpOverlapped=0x0) returned 1 [0142.675] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85038 [0142.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0142.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd7e0 [0142.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd7e0) returned 1 [0142.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caaf88 [0142.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd7e0 [0142.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb698 [0142.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb698) returned 1 [0142.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0142.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.675] WriteFile (in: hFile=0x1f84, lpBuffer=0x7caaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa01f860, lpOverlapped=0x0 | out: lpBuffer=0x7caaf88*, lpNumberOfBytesWritten=0xa01f860*=0x3c00, lpOverlapped=0x0) returned 1 [0142.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf88) returned 1 [0142.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccbd0) returned 1 [0142.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79950 [0142.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0142.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79218 [0142.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0142.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0142.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0142.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0142.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ae8) returned 1 [0142.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55bb8 [0142.936] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.936] WriteFile (in: hFile=0x1f84, lpBuffer=0x3d55bb8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xa01f8e0, lpOverlapped=0x0 | out: lpBuffer=0x3d55bb8*, lpNumberOfBytesWritten=0xa01f8e0*=0x112, lpOverlapped=0x0) returned 1 [0143.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56330 [0143.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0143.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd920 [0143.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd920) returned 1 [0143.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd920 [0143.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd9e8 [0143.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd858 [0143.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd858) returned 1 [0143.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0143.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56330) returned 1 [0143.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e841c8 [0143.031] sprintf (in: _Dest=0x3e841c8, _Format="%c%c" | out: _Dest="8b") returned 2 [0143.031] sprintf (in: _Dest=0x3e841ca, _Format="%c%c" | out: _Dest="9e") returned 2 [0143.031] sprintf (in: _Dest=0x3e841cc, _Format="%c%c" | out: _Dest="9d") returned 2 [0143.031] sprintf (in: _Dest=0x3e841ce, _Format="%c%c" | out: _Dest="6c") returned 2 [0143.031] sprintf (in: _Dest=0x3e841d0, _Format="%c%c" | out: _Dest="11") returned 2 [0143.031] sprintf (in: _Dest=0x3e841d2, _Format="%c%c" | out: _Dest="8e") returned 2 [0143.031] sprintf (in: _Dest=0x3e841d4, _Format="%c%c" | out: _Dest="69") returned 2 [0143.031] sprintf (in: _Dest=0x3e841d6, _Format="%c%c" | out: _Dest="b6") returned 2 [0143.031] sprintf (in: _Dest=0x3e841d8, _Format="%c%c" | out: _Dest="0e") returned 2 [0143.031] sprintf (in: _Dest=0x3e841da, _Format="%c%c" | out: _Dest="49") returned 2 [0143.031] sprintf (in: _Dest=0x3e841dc, _Format="%c%c" | out: _Dest="17") returned 2 [0143.031] sprintf (in: _Dest=0x3e841de, _Format="%c%c" | out: _Dest="c1") returned 2 [0143.031] sprintf (in: _Dest=0x3e841e0, _Format="%c%c" | out: _Dest="d5") returned 2 [0143.031] sprintf (in: _Dest=0x3e841e2, _Format="%c%c" | out: _Dest="8a") returned 2 [0143.031] sprintf (in: _Dest=0x3e841e4, _Format="%c%c" | out: _Dest="b7") returned 2 [0143.031] sprintf (in: _Dest=0x3e841e6, _Format="%c%c" | out: _Dest="7c") returned 2 [0143.031] sprintf (in: _Dest=0x3e841e8, _Format="%c%c" | out: _Dest="90") returned 2 [0143.032] sprintf (in: _Dest=0x3e841ea, _Format="%c%c" | out: _Dest="63") returned 2 [0143.032] sprintf (in: _Dest=0x3e841ec, _Format="%c%c" | out: _Dest="07") returned 2 [0143.032] sprintf (in: _Dest=0x3e841ee, _Format="%c%c" | out: _Dest="b7") returned 2 [0143.032] sprintf (in: _Dest=0x3e841f0, _Format="%c%c" | out: _Dest="fa") returned 2 [0143.032] sprintf (in: _Dest=0x3e841f2, _Format="%c%c" | out: _Dest="63") returned 2 [0143.032] sprintf (in: _Dest=0x3e841f4, _Format="%c%c" | out: _Dest="15") returned 2 [0143.032] sprintf (in: _Dest=0x3e841f6, _Format="%c%c" | out: _Dest="1a") returned 2 [0143.032] sprintf (in: _Dest=0x3e841f8, _Format="%c%c" | out: _Dest="fe") returned 2 [0143.032] sprintf (in: _Dest=0x3e841fa, _Format="%c%c" | out: _Dest="f7") returned 2 [0143.032] sprintf (in: _Dest=0x3e841fc, _Format="%c%c" | out: _Dest="a5") returned 2 [0143.032] sprintf (in: _Dest=0x3e841fe, _Format="%c%c" | out: _Dest="f4") returned 2 [0143.032] sprintf (in: _Dest=0x3e84200, _Format="%c%c" | out: _Dest="ea") returned 2 [0143.032] sprintf (in: _Dest=0x3e84202, _Format="%c%c" | out: _Dest="ee") returned 2 [0143.032] sprintf (in: _Dest=0x3e84204, _Format="%c%c" | out: _Dest="9a") returned 2 [0143.032] sprintf (in: _Dest=0x3e84206, _Format="%c%c" | out: _Dest="7a") returned 2 [0143.032] RtlInitAnsiString (in: DestinationString=0xa01f868, SourceString="8b9e9d6c118e69b60e4917c1d58ab77c906307b7fa63151afef7a5f4eaee9a7a" | out: DestinationString="8b9e9d6c118e69b60e4917c1d58ab77c906307b7fa63151afef7a5f4eaee9a7a") [0143.032] RtlAnsiStringToUnicodeString (in: DestinationString=0xa01f860, SourceString="8b9e9d6c118e69b60e4917c1d58ab77c906307b7fa63151afef7a5f4eaee9a7a", AllocateDestinationString=1 | out: DestinationString="8b9e9d6c118e69b60e4917c1d58ab77c906307b7fa63151afef7a5f4eaee9a7a") returned 0x0 [0143.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60e10 [0143.033] wcscat (in: _Dest=0x3da63f0, _Source="8b9e9d6c118e69b6" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8b9e9d6c118e69b6") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8b9e9d6c118e69b6" [0143.033] wcscat (in: _Dest=0x3da63f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8b9e9d6c118e69b6.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8b9e9d6c118e69b6.68814f" [0143.033] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\8b9e9d6c118e69b6.68814f", NtPathName=0xa01f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\8b9e9d6c118e69b6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d459b0 [0143.170] FlushFileBuffers (hFile=0x1f84) returned 1 [0143.332] CloseHandle (hObject=0x1f84) returned 1 [0143.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26698 [0143.993] wcscpy (in: _Dest=0x7a26698, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.993] wcscat (in: _Dest=0x7a26698, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.993] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26698) returned 1 [0143.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 Thread: id = 1011 os_tid = 0x17b8 [0132.847] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ulr9gblcwe.png")) returned 0x2020 [0132.847] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png", dwFileAttributes=0x20) returned 1 [0142.676] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ulr9gblcwe.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f7c [0142.677] GetFileSizeEx (in: hFile=0x1f7c, lpFileSize=0x8f2f934 | out: lpFileSize=0x8f2f934*=10466) returned 1 [0142.677] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x28de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.677] ReadFile (in: hFile=0x1f7c, lpBuffer=0x8f2f910, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8f2f920, lpOverlapped=0x0 | out: lpBuffer=0x8f2f910*, lpNumberOfBytesRead=0x8f2f920*=0x4, lpOverlapped=0x0) returned 1 [0142.678] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb698 [0142.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb828 [0142.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb418 [0142.678] NtQuerySystemTime (in: CurrentTime=0x8f2f8a8 | out: CurrentTime=0x8f2f8a8*=132462177215688000) returned 0x0 [0142.678] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0xf793761 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x66fa04a0 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x1358b3cb [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x14422ee3 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x2b49c14f [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x79d4e4c8 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x6ebe90f7 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x487c2c09 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x52db2226 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x7d3a5fd [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x5d9b5a8 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x5dad693e [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0xf1ef808 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x393dd648 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x58053f03 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x4b88d077 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x5814a9e0 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x4a83b294 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x5c1f97ac [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x37247ffe [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x79a6eeab [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x7c439118 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x470ecf72 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x6fddb79c [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x252c5171 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x17eafdf9 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x65c6d1d1 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x4fa19181 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x14422ee3 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x456ee9f5 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x40dfe1d4 [0142.679] RtlRandomEx (in: Seed=0x8f2f8a0 | out: Seed=0x8f2f8a0) returned 0x25a8d076 [0142.688] ReadFile (in: hFile=0x1f7c, lpBuffer=0x7cc17b8, nNumberOfBytesToRead=0x28e2, lpNumberOfBytesRead=0x8f2f89c, lpOverlapped=0x0 | out: lpBuffer=0x7cc17b8*, lpNumberOfBytesRead=0x8f2f89c*=0x28e2, lpOverlapped=0x0) returned 1 [0142.688] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.688] WriteFile (in: hFile=0x1f7c, lpBuffer=0x7c143e0*, nNumberOfBytesToWrite=0x28e2, lpNumberOfBytesWritten=0x8f2f8a0, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesWritten=0x8f2f8a0*=0x28e2, lpOverlapped=0x0) returned 1 [0142.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0142.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0142.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0142.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0142.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc17b8) returned 1 [0142.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0142.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79288 [0142.939] SetFilePointerEx (in: hFile=0x1f7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.939] WriteFile (in: hFile=0x1f7c, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x8f2f928, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x8f2f928*=0x10e, lpOverlapped=0x0) returned 1 [0143.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0143.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0143.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0143.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79288) returned 1 [0143.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0143.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb828) returned 1 [0143.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede140) returned 1 [0143.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede0f0) returned 1 [0143.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dd10 [0143.038] wcscpy (in: _Dest=0x3f3dd10, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png" [0143.038] wcscat (in: _Dest=0x3f3dd10, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png.68814f" [0143.039] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png.68814f", NtPathName=0x8f2f8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ulr9gbLcwE.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60ea0 [0143.159] FlushFileBuffers (hFile=0x1f7c) returned 1 [0143.330] CloseHandle (hObject=0x1f7c) returned 1 [0143.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23450 [0143.969] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.969] wcscat (in: _Dest=0x7a23450, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.969] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 [0143.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf2d0) returned 1 Thread: id = 1012 os_tid = 0x17bc [0132.848] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\uZNZacDeTv9aahHHvDr.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\uznzacdetv9aahhhvdr.avi")) returned 0x2020 [0132.848] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\uZNZacDeTv9aahHHvDr.avi", dwFileAttributes=0x20) returned 1 [0142.692] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\uZNZacDeTv9aahHHvDr.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\uznzacdetv9aahhhvdr.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f70 [0142.692] GetFileSizeEx (in: hFile=0x1f70, lpFileSize=0x9ebf944 | out: lpFileSize=0x9ebf944*=85857) returned 1 [0142.692] SetFilePointerEx (in: hFile=0x1f70, liDistanceToMove=0x14f5d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.692] ReadFile (in: hFile=0x1f70, lpBuffer=0x9ebf920, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9ebf930, lpOverlapped=0x0 | out: lpBuffer=0x9ebf920*, lpNumberOfBytesRead=0x9ebf930*=0x4, lpOverlapped=0x0) returned 1 [0142.694] SetFilePointerEx (in: hFile=0x1f70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb698 [0142.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb418 [0142.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede000 [0142.694] NtQuerySystemTime (in: CurrentTime=0x9ebf8b8 | out: CurrentTime=0x9ebf8b8*=132462177215844000) returned 0x0 [0142.694] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x2a43221a [0142.694] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x57e9d120 [0142.694] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x4a3201ff [0142.694] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x750000e8 [0142.694] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x1e338c80 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x55bf6e06 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x517a243e [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x5eb75f4a [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x3b3293a2 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x1e95e342 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x1b93bd35 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x1358b3cb [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x80ffbd9 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x571b4c82 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x57c3e09f [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x6c02dd99 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x23c35b7b [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x788a434b [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x53de4f14 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x57bef860 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x5d573ce5 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x36c12813 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x7d25e59 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x71003068 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x74d0682f [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x6ee04a80 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x7fee327 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x43693d47 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x6eedfd4f [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x3961f3f5 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x14e0dca3 [0142.695] RtlRandomEx (in: Seed=0x9ebf8b0 | out: Seed=0x9ebf8b0) returned 0x426bac75 [0142.704] SetFilePointerEx (in: hFile=0x1f70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.704] ReadFile (in: hFile=0x1f70, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9ebf8b8, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0x9ebf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.704] SetFilePointerEx (in: hFile=0x1f70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e853e0 [0142.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0142.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb698 [0142.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb698) returned 1 [0142.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0142.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb698 [0142.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede000 [0142.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede000) returned 1 [0142.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0142.705] WriteFile (in: hFile=0x1f70, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9ebf8b8, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x9ebf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0142.942] SetFilePointerEx (in: hFile=0x1f70, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.942] ReadFile (in: hFile=0x1f70, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9ebf8b8, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0x9ebf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.943] SetFilePointerEx (in: hFile=0x1f70, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85038 [0142.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0142.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0142.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0142.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0142.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0142.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0142.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0142.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0142.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.944] WriteFile (in: hFile=0x1f70, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9ebf8b8, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x9ebf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0142.950] SetFilePointerEx (in: hFile=0x1f70, liDistanceToMove=0x11361, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.950] ReadFile (in: hFile=0x1f70, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9ebf8b8, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0x9ebf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.951] SetFilePointerEx (in: hFile=0x1f70, liDistanceToMove=0x11361, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85038 [0142.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0142.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0142.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0142.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0142.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0142.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0142.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0142.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0142.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.952] WriteFile (in: hFile=0x1f70, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9ebf8b8, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x9ebf8b8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0142.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1da28 [0142.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb698) returned 1 [0142.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e85ae8 [0142.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb698 [0142.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0142.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0142.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x160) returned 0x3dce108 [0142.960] SetFilePointerEx (in: hFile=0x1f70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.960] WriteFile (in: hFile=0x1f70, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x9ebf938, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x9ebf938*=0x160, lpOverlapped=0x0) returned 1 [0143.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56330 [0143.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0143.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edda10 [0143.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edda10) returned 1 [0143.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79288 [0143.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edda10 [0143.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddbc8 [0143.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddbc8) returned 1 [0143.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0143.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56330) returned 1 [0143.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5d) returned 0x3e1f358 [0143.046] sprintf (in: _Dest=0x3e1f358, _Format="%c%c" | out: _Dest="7c") returned 2 [0143.046] sprintf (in: _Dest=0x3e1f35a, _Format="%c%c" | out: _Dest="a4") returned 2 [0143.046] sprintf (in: _Dest=0x3e1f35c, _Format="%c%c" | out: _Dest="ec") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f35e, _Format="%c%c" | out: _Dest="dd") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f360, _Format="%c%c" | out: _Dest="f4") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f362, _Format="%c%c" | out: _Dest="05") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f364, _Format="%c%c" | out: _Dest="c6") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f366, _Format="%c%c" | out: _Dest="1a") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f368, _Format="%c%c" | out: _Dest="7a") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f36a, _Format="%c%c" | out: _Dest="75") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f36c, _Format="%c%c" | out: _Dest="dd") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f36e, _Format="%c%c" | out: _Dest="5c") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f370, _Format="%c%c" | out: _Dest="b0") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f372, _Format="%c%c" | out: _Dest="5d") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f374, _Format="%c%c" | out: _Dest="08") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f376, _Format="%c%c" | out: _Dest="50") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f378, _Format="%c%c" | out: _Dest="ed") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f37a, _Format="%c%c" | out: _Dest="d7") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f37c, _Format="%c%c" | out: _Dest="60") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f37e, _Format="%c%c" | out: _Dest="3e") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f380, _Format="%c%c" | out: _Dest="f7") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f382, _Format="%c%c" | out: _Dest="7f") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f384, _Format="%c%c" | out: _Dest="f8") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f386, _Format="%c%c" | out: _Dest="90") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f388, _Format="%c%c" | out: _Dest="b9") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f38a, _Format="%c%c" | out: _Dest="30") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f38c, _Format="%c%c" | out: _Dest="18") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f38e, _Format="%c%c" | out: _Dest="79") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f390, _Format="%c%c" | out: _Dest="1e") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f392, _Format="%c%c" | out: _Dest="10") returned 2 [0143.047] sprintf (in: _Dest=0x3e1f394, _Format="%c%c" | out: _Dest="0c") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f396, _Format="%c%c" | out: _Dest="5b") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f398, _Format="%c%c" | out: _Dest="71") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f39a, _Format="%c%c" | out: _Dest="c3") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f39c, _Format="%c%c" | out: _Dest="a7") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f39e, _Format="%c%c" | out: _Dest="47") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f3a0, _Format="%c%c" | out: _Dest="99") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f3a2, _Format="%c%c" | out: _Dest="31") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f3a4, _Format="%c%c" | out: _Dest="5e") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f3a6, _Format="%c%c" | out: _Dest="8f") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f3a8, _Format="%c%c" | out: _Dest="19") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f3aa, _Format="%c%c" | out: _Dest="63") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f3ac, _Format="%c%c" | out: _Dest="2d") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f3ae, _Format="%c%c" | out: _Dest="72") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f3b0, _Format="%c%c" | out: _Dest="57") returned 2 [0143.048] sprintf (in: _Dest=0x3e1f3b2, _Format="%c%c" | out: _Dest="51") returned 2 [0143.048] RtlInitAnsiString (in: DestinationString=0x9ebf8c0, SourceString="7ca4ecddf405c61a7a75dd5cb05d0850edd7603ef77ff890b93018791e100c5b71c3a74799315e8f19632d725751" | out: DestinationString="7ca4ecddf405c61a7a75dd5cb05d0850edd7603ef77ff890b93018791e100c5b71c3a74799315e8f19632d725751") [0143.048] RtlAnsiStringToUnicodeString (in: DestinationString=0x9ebf8b8, SourceString="7ca4ecddf405c61a7a75dd5cb05d0850edd7603ef77ff890b93018791e100c5b71c3a74799315e8f19632d725751", AllocateDestinationString=1 | out: DestinationString="7ca4ecddf405c61a7a75dd5cb05d0850edd7603ef77ff890b93018791e100c5b71c3a74799315e8f19632d725751") returned 0x0 [0143.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d40830 [0143.048] wcscat (in: _Dest=0x3f3bd40, _Source="7ca4ecddf405c61a7a75dd5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\7ca4ecddf405c61a7a75dd5") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\7ca4ecddf405c61a7a75dd5" [0143.048] wcscat (in: _Dest=0x3f3bd40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\7ca4ecddf405c61a7a75dd5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\7ca4ecddf405c61a7a75dd5.68814f" [0143.048] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\7ca4ecddf405c61a7a75dd5.68814f", NtPathName=0x9ebf8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\7ca4ecddf405c61a7a75dd5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62130 [0143.163] FlushFileBuffers (hFile=0x1f70) returned 1 [0143.331] CloseHandle (hObject=0x1f70) returned 1 [0143.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23450 [0143.975] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.975] wcscat (in: _Dest=0x7a23450, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.975] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 [0143.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 1013 os_tid = 0x17c0 [0132.849] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\wojjxgs.jpg")) returned 0x2020 [0132.849] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg", dwFileAttributes=0x20) returned 1 [0142.715] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\wojjxgs.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f44 [0142.715] GetFileSizeEx (in: hFile=0x1f44, lpFileSize=0xafdfb4c | out: lpFileSize=0xafdfb4c*=89393) returned 1 [0142.715] SetFilePointerEx (in: hFile=0x1f44, liDistanceToMove=0x15d2d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.715] ReadFile (in: hFile=0x1f44, lpBuffer=0xafdfb28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xafdfb38, lpOverlapped=0x0 | out: lpBuffer=0xafdfb28*, lpNumberOfBytesRead=0xafdfb38*=0x4, lpOverlapped=0x0) returned 1 [0142.717] SetFilePointerEx (in: hFile=0x1f44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede000 [0142.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde98 [0142.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde20 [0142.717] NtQuerySystemTime (in: CurrentTime=0xafdfac0 | out: CurrentTime=0xafdfac0*=132462177216156000) returned 0x0 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x3699ce56 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x697a1aef [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x2c97990c [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x4eae0808 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x218468d2 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x3061575b [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x17d761a5 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x39f00699 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x454806c6 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x74799ea [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x395e7b0a [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x6744e717 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x647446d [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x35b3a3d1 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0xefd3019 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x20ef85ce [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x20c057b9 [0142.717] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x37bfd0f9 [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x64146f99 [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x2a43221a [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x2d74ef4e [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x674a8b73 [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x6941b15e [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x60601ebf [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x67cc6af2 [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x60149e93 [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x4fb75f25 [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x9755d6e [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x2aeb397 [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x5eb75f4a [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x7c26aa46 [0142.718] RtlRandomEx (in: Seed=0xafdfab8 | out: Seed=0xafdfab8) returned 0x4329d804 [0142.727] SetFilePointerEx (in: hFile=0x1f44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.727] ReadFile (in: hFile=0x1f44, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xafdfac0, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0xafdfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.727] SetFilePointerEx (in: hFile=0x1f44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e853e0 [0142.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0142.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede000 [0142.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede000) returned 1 [0142.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0142.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede000 [0142.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde20 [0142.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edde20) returned 1 [0142.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0142.728] WriteFile (in: hFile=0x1f44, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xafdfac0, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xafdfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0142.948] SetFilePointerEx (in: hFile=0x1f44, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.948] ReadFile (in: hFile=0x1f44, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xafdfac0, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0xafdfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.948] SetFilePointerEx (in: hFile=0x1f44, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85038 [0142.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0142.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0142.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0142.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0142.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0142.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0142.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0142.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0142.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.949] WriteFile (in: hFile=0x1f44, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xafdfac0, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xafdfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0142.957] SetFilePointerEx (in: hFile=0x1f44, liDistanceToMove=0x12131, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.957] ReadFile (in: hFile=0x1f44, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xafdfac0, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0xafdfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.957] SetFilePointerEx (in: hFile=0x1f44, liDistanceToMove=0x12131, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e853e0 [0142.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0142.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0142.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0142.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0142.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0142.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0142.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0142.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0142.958] WriteFile (in: hFile=0x1f44, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xafdfac0, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xafdfac0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0142.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d958 [0142.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede000) returned 1 [0142.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37830 [0142.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede000 [0142.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0142.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0142.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e0aac0 [0142.965] SetFilePointerEx (in: hFile=0x1f44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.965] WriteFile (in: hFile=0x1f44, lpBuffer=0x3e0aac0*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0xafdfb40, lpOverlapped=0x0 | out: lpBuffer=0x3e0aac0*, lpNumberOfBytesWritten=0xafdfb40*=0x148, lpOverlapped=0x0) returned 1 [0143.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0aac0) returned 1 [0143.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37830) returned 1 [0143.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede000) returned 1 [0143.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a376b0) returned 1 [0143.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d958) returned 1 [0143.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edde98) returned 1 [0143.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddda8) returned 1 [0143.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddd30) returned 1 [0143.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a393b0 [0143.079] wcscpy (in: _Dest=0x7a393b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg" [0143.079] wcscat (in: _Dest=0x7a393b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg.68814f" [0143.079] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg.68814f", NtPathName=0xafdfab8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\WOJjXGS.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cc20 [0143.166] FlushFileBuffers (hFile=0x1f44) returned 1 [0143.331] CloseHandle (hObject=0x1f44) returned 1 [0143.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23450 [0143.977] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.977] wcscat (in: _Dest=0x7a23450, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.977] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 [0143.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1218) returned 1 Thread: id = 1014 os_tid = 0x17c4 [0132.849] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\X1Rp.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\x1rp.flv")) returned 0x2020 [0132.850] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\X1Rp.flv", dwFileAttributes=0x20) returned 1 [0142.737] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\X1Rp.flv" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\x1rp.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f40 [0142.737] GetFileSizeEx (in: hFile=0x1f40, lpFileSize=0x8e5fe9c | out: lpFileSize=0x8e5fe9c*=9901) returned 1 [0142.737] SetFilePointerEx (in: hFile=0x1f40, liDistanceToMove=0x26a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.737] ReadFile (in: hFile=0x1f40, lpBuffer=0x8e5fe78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e5fe88, lpOverlapped=0x0 | out: lpBuffer=0x8e5fe78*, lpNumberOfBytesRead=0x8e5fe88*=0x4, lpOverlapped=0x0) returned 1 [0142.739] SetFilePointerEx (in: hFile=0x1f40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde20 [0142.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddcb8 [0142.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc40 [0142.739] NtQuerySystemTime (in: CurrentTime=0x8e5fe10 | out: CurrentTime=0x8e5fe10*=132462177216312000) returned 0x0 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x487bdbcb [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0xec47fad [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x69ce995a [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x67cc6af2 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x1927db57 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x43693d47 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x5266acb1 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x651b4f1e [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x226916bc [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x7936e4cf [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x3e8cd960 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x1a5e7050 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x7aaf39c2 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x579e689b [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x43ecb15a [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x77c36f28 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x5d9c4177 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x3102b102 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x704c486a [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0xda3e72e [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x7c5f0b70 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x4a83b294 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x47008c47 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x75a74c35 [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x7fb0e97f [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x394e705a [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x7813cfab [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x1be789fb [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x4d4054fc [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x3cc2319f [0142.740] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x70140704 [0142.741] RtlRandomEx (in: Seed=0x8e5fe08 | out: Seed=0x8e5fe08) returned 0x769026f3 [0142.751] ReadFile (in: hFile=0x1f40, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x26ad, lpNumberOfBytesRead=0x8e5fe04, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0x8e5fe04*=0x26ad, lpOverlapped=0x0) returned 1 [0142.751] SetFilePointerEx (in: hFile=0x1f40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.751] WriteFile (in: hFile=0x1f40, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x26ad, lpNumberOfBytesWritten=0x8e5fe08, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0x8e5fe08*=0x26ad, lpOverlapped=0x0) returned 1 [0142.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0142.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0142.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0142.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0142.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0142.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0142.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec5540 [0142.956] SetFilePointerEx (in: hFile=0x1f40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.956] WriteFile (in: hFile=0x1f40, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x8e5fe90, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x8e5fe90*=0x102, lpOverlapped=0x0) returned 1 [0143.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56330 [0143.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0143.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede0f0 [0143.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede0f0) returned 1 [0143.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9850 [0143.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede0f0 [0143.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede140 [0143.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede140) returned 1 [0143.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0143.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56330) returned 1 [0143.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a37620 [0143.043] sprintf (in: _Dest=0x7a37620, _Format="%c%c" | out: _Dest="51") returned 2 [0143.043] sprintf (in: _Dest=0x7a37622, _Format="%c%c" | out: _Dest="37") returned 2 [0143.043] sprintf (in: _Dest=0x7a37624, _Format="%c%c" | out: _Dest="64") returned 2 [0143.043] sprintf (in: _Dest=0x7a37626, _Format="%c%c" | out: _Dest="49") returned 2 [0143.043] sprintf (in: _Dest=0x7a37628, _Format="%c%c" | out: _Dest="d5") returned 2 [0143.043] sprintf (in: _Dest=0x7a3762a, _Format="%c%c" | out: _Dest="4a") returned 2 [0143.043] sprintf (in: _Dest=0x7a3762c, _Format="%c%c" | out: _Dest="01") returned 2 [0143.043] sprintf (in: _Dest=0x7a3762e, _Format="%c%c" | out: _Dest="19") returned 2 [0143.043] sprintf (in: _Dest=0x7a37630, _Format="%c%c" | out: _Dest="dd") returned 2 [0143.043] sprintf (in: _Dest=0x7a37632, _Format="%c%c" | out: _Dest="5b") returned 2 [0143.043] sprintf (in: _Dest=0x7a37634, _Format="%c%c" | out: _Dest="43") returned 2 [0143.043] sprintf (in: _Dest=0x7a37636, _Format="%c%c" | out: _Dest="65") returned 2 [0143.043] sprintf (in: _Dest=0x7a37638, _Format="%c%c" | out: _Dest="d1") returned 2 [0143.043] sprintf (in: _Dest=0x7a3763a, _Format="%c%c" | out: _Dest="3c") returned 2 [0143.044] sprintf (in: _Dest=0x7a3763c, _Format="%c%c" | out: _Dest="53") returned 2 [0143.044] sprintf (in: _Dest=0x7a3763e, _Format="%c%c" | out: _Dest="d1") returned 2 [0143.044] RtlInitAnsiString (in: DestinationString=0x8e5fe18, SourceString="51376449d54a0119dd5b4365d13c53d1" | out: DestinationString="51376449d54a0119dd5b4365d13c53d1") [0143.044] RtlAnsiStringToUnicodeString (in: DestinationString=0x8e5fe10, SourceString="51376449d54a0119dd5b4365d13c53d1", AllocateDestinationString=1 | out: DestinationString="51376449d54a0119dd5b4365d13c53d1") returned 0x0 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e83f48 [0143.044] wcscat (in: _Dest=0x3e69c28, _Source="51376449" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\51376449") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\51376449" [0143.044] wcscat (in: _Dest=0x3e69c28, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\51376449.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\51376449.68814f" [0143.044] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\51376449.68814f", NtPathName=0x8e5fe08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\51376449.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da66f0 [0143.161] FlushFileBuffers (hFile=0x1f40) returned 1 [0143.330] CloseHandle (hObject=0x1f40) returned 1 [0143.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23450 [0143.971] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.971] wcscat (in: _Dest=0x7a23450, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.971] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 [0143.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 Thread: id = 1015 os_tid = 0x17c8 [0132.850] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\xX5sdZJvrq.pptx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\xx5sdzjvrq.pptx")) returned 0x2020 [0132.850] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\xX5sdZJvrq.pptx", dwFileAttributes=0x20) returned 1 [0142.752] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\xX5sdZJvrq.pptx" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\xx5sdzjvrq.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cb8 [0142.752] GetFileSizeEx (in: hFile=0x1cb8, lpFileSize=0x834fd44 | out: lpFileSize=0x834fd44*=25496) returned 1 [0142.752] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x6394, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.752] ReadFile (in: hFile=0x1cb8, lpBuffer=0x834fd20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x834fd30, lpOverlapped=0x0 | out: lpBuffer=0x834fd20*, lpNumberOfBytesRead=0x834fd30*=0x4, lpOverlapped=0x0) returned 1 [0142.753] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde20 [0142.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc40 [0142.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd998 [0142.754] NtQuerySystemTime (in: CurrentTime=0x834fcb8 | out: CurrentTime=0x834fcb8*=132462177216468000) returned 0x0 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x122a6841 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0xe3d4859 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x1038bf7d [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x1be96034 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x33443026 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x51319282 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x456b93af [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x31bee67f [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x56dca4d1 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x476a27f0 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x489114da [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x518f4b77 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x625a9070 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x7a27045a [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x45ffef63 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x11bd5d89 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x19618719 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x56481c94 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x6c02dd99 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x7dabf66d [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x6dafb968 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x3d27c017 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x4ca42fa5 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x7a8930d9 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x6f409d5b [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x14012ac4 [0142.754] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x5a215772 [0142.755] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0xd00ca43 [0142.755] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x1927db57 [0142.755] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x30c4c14e [0142.755] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x7870e3c5 [0142.755] RtlRandomEx (in: Seed=0x834fcb0 | out: Seed=0x834fcb0) returned 0x22c3b4db [0142.763] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.763] ReadFile (in: hFile=0x1cb8, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x834fcb8, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0x834fcb8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.763] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85350 [0142.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0142.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde20 [0142.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edde20) returned 1 [0142.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0142.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde20 [0142.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd998 [0142.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd998) returned 1 [0142.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0142.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85350) returned 1 [0142.780] WriteFile (in: hFile=0x1cb8, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x834fcb8, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0x834fcb8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0142.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0142.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79870 [0142.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0142.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79100 [0142.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0142.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0142.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0142.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x300da60 [0142.963] SetFilePointerEx (in: hFile=0x1cb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.963] WriteFile (in: hFile=0x1cb8, lpBuffer=0x300da60*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x834fd38, lpOverlapped=0x0 | out: lpBuffer=0x300da60*, lpNumberOfBytesWritten=0x834fd38*=0x110, lpOverlapped=0x0) returned 1 [0143.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e853e0 [0143.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0143.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddf10 [0143.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddf10) returned 1 [0143.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3eddf10 [0143.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddf88 [0143.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb418 [0143.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb418) returned 1 [0143.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0143.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0143.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x3e853e0 [0143.074] sprintf (in: _Dest=0x3e853e0, _Format="%c%c" | out: _Dest="43") returned 2 [0143.074] sprintf (in: _Dest=0x3e853e2, _Format="%c%c" | out: _Dest="d9") returned 2 [0143.074] sprintf (in: _Dest=0x3e853e4, _Format="%c%c" | out: _Dest="ff") returned 2 [0143.074] sprintf (in: _Dest=0x3e853e6, _Format="%c%c" | out: _Dest="19") returned 2 [0143.074] sprintf (in: _Dest=0x3e853e8, _Format="%c%c" | out: _Dest="03") returned 2 [0143.074] sprintf (in: _Dest=0x3e853ea, _Format="%c%c" | out: _Dest="d7") returned 2 [0143.075] sprintf (in: _Dest=0x3e853ec, _Format="%c%c" | out: _Dest="12") returned 2 [0143.075] sprintf (in: _Dest=0x3e853ee, _Format="%c%c" | out: _Dest="cb") returned 2 [0143.075] sprintf (in: _Dest=0x3e853f0, _Format="%c%c" | out: _Dest="6c") returned 2 [0143.075] sprintf (in: _Dest=0x3e853f2, _Format="%c%c" | out: _Dest="ef") returned 2 [0143.075] sprintf (in: _Dest=0x3e853f4, _Format="%c%c" | out: _Dest="5a") returned 2 [0143.075] sprintf (in: _Dest=0x3e853f6, _Format="%c%c" | out: _Dest="49") returned 2 [0143.075] sprintf (in: _Dest=0x3e853f8, _Format="%c%c" | out: _Dest="92") returned 2 [0143.075] sprintf (in: _Dest=0x3e853fa, _Format="%c%c" | out: _Dest="a1") returned 2 [0143.075] sprintf (in: _Dest=0x3e853fc, _Format="%c%c" | out: _Dest="0f") returned 2 [0143.075] sprintf (in: _Dest=0x3e853fe, _Format="%c%c" | out: _Dest="d5") returned 2 [0143.075] sprintf (in: _Dest=0x3e85400, _Format="%c%c" | out: _Dest="47") returned 2 [0143.075] sprintf (in: _Dest=0x3e85402, _Format="%c%c" | out: _Dest="b9") returned 2 [0143.075] sprintf (in: _Dest=0x3e85404, _Format="%c%c" | out: _Dest="15") returned 2 [0143.075] sprintf (in: _Dest=0x3e85406, _Format="%c%c" | out: _Dest="4b") returned 2 [0143.075] sprintf (in: _Dest=0x3e85408, _Format="%c%c" | out: _Dest="0c") returned 2 [0143.076] sprintf (in: _Dest=0x3e8540a, _Format="%c%c" | out: _Dest="c2") returned 2 [0143.076] sprintf (in: _Dest=0x3e8540c, _Format="%c%c" | out: _Dest="b5") returned 2 [0143.076] sprintf (in: _Dest=0x3e8540e, _Format="%c%c" | out: _Dest="e1") returned 2 [0143.076] sprintf (in: _Dest=0x3e85410, _Format="%c%c" | out: _Dest="87") returned 2 [0143.076] sprintf (in: _Dest=0x3e85412, _Format="%c%c" | out: _Dest="77") returned 2 [0143.076] sprintf (in: _Dest=0x3e85414, _Format="%c%c" | out: _Dest="e1") returned 2 [0143.076] sprintf (in: _Dest=0x3e85416, _Format="%c%c" | out: _Dest="43") returned 2 [0143.076] sprintf (in: _Dest=0x3e85418, _Format="%c%c" | out: _Dest="e0") returned 2 [0143.076] sprintf (in: _Dest=0x3e8541a, _Format="%c%c" | out: _Dest="bc") returned 2 [0143.076] RtlInitAnsiString (in: DestinationString=0x834fcc0, SourceString="43d9ff1903d712cb6cef5a4992a10fd547b9154b0cc2b5e18777e143e0bc" | out: DestinationString="43d9ff1903d712cb6cef5a4992a10fd547b9154b0cc2b5e18777e143e0bc") [0143.076] RtlAnsiStringToUnicodeString (in: DestinationString=0x834fcb8, SourceString="43d9ff1903d712cb6cef5a4992a10fd547b9154b0cc2b5e18777e143e0bc", AllocateDestinationString=1 | out: DestinationString="43d9ff1903d712cb6cef5a4992a10fd547b9154b0cc2b5e18777e143e0bc") returned 0x0 [0143.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3cf50 [0143.076] wcscat (in: _Dest=0x3f3e760, _Source="43d9ff1903d712c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\43d9ff1903d712c") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\43d9ff1903d712c" [0143.077] wcscat (in: _Dest=0x3f3e760, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\43d9ff1903d712c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\43d9ff1903d712c.68814f" [0143.077] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\43d9ff1903d712c.68814f", NtPathName=0x834fcb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\43d9ff1903d712c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60f30 [0143.167] FlushFileBuffers (hFile=0x1cb8) returned 1 [0143.331] CloseHandle (hObject=0x1cb8) returned 1 [0143.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23450 [0143.980] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.980] wcscat (in: _Dest=0x7a23450, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.980] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 [0143.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26008) returned 1 Thread: id = 1016 os_tid = 0x17cc [0132.851] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ycbt5ilwpyb.png")) returned 0x2020 [0132.851] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png", dwFileAttributes=0x20) returned 1 [0142.780] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ycbt5ilwpyb.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f2c [0142.781] GetFileSizeEx (in: hFile=0x1f2c, lpFileSize=0x8bdfd94 | out: lpFileSize=0x8bdfd94*=78568) returned 1 [0142.781] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0x132e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.781] ReadFile (in: hFile=0x1f2c, lpBuffer=0x8bdfd70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8bdfd80, lpOverlapped=0x0 | out: lpBuffer=0x8bdfd70*, lpNumberOfBytesRead=0x8bdfd80*=0x4, lpOverlapped=0x0) returned 1 [0142.782] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd998 [0142.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd790 [0142.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd588 [0142.783] NtQuerySystemTime (in: CurrentTime=0x8bdfd08 | out: CurrentTime=0x8bdfd08*=132462177216780000) returned 0x0 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x15f1c70c [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x1ef513c5 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x2f255d07 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x77907a8f [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x27767928 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x609f7ef7 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x71f15aff [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0xa8f8c2a [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x292f7db0 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x15a1d7d6 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x5f86297e [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x79c2df84 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0xd9a2469 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x2f289743 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x61b18862 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x5958e627 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x66fb7b55 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x53f7cd86 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x7de8662e [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x395b8766 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x21456e41 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x255c1a20 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x1e6f9d6c [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x4dc72c41 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x55748385 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x156a1ae7 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x3061575b [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x1eab904c [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x1aa2e840 [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x488e769a [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x41b0023b [0142.783] RtlRandomEx (in: Seed=0x8bdfd00 | out: Seed=0x8bdfd00) returned 0x4b7564f5 [0142.792] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.792] ReadFile (in: hFile=0x1f2c, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8bdfd08, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x8bdfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0142.792] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85350 [0142.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0142.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd998 [0142.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd998) returned 1 [0142.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0142.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd998 [0142.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd588 [0142.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd588) returned 1 [0142.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0142.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85350) returned 1 [0142.793] WriteFile (in: hFile=0x1f2c, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8bdfd08, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0x8bdfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0142.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0142.968] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.968] ReadFile (in: hFile=0x1f2c, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8bdfd08, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x8bdfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0142.968] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85038 [0142.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0142.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0142.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0142.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0142.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0142.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0142.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0142.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.970] WriteFile (in: hFile=0x1f2c, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8bdfd08, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0x8bdfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0142.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0142.974] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0xf6e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.974] ReadFile (in: hFile=0x1f2c, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8bdfd08, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x8bdfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0142.974] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0xf6e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85038 [0142.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0142.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0142.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0142.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0142.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0142.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0142.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0142.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.975] WriteFile (in: hFile=0x1f2c, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8bdfd08, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0x8bdfd08*=0x3c00, lpOverlapped=0x0) returned 1 [0142.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0142.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e20190 [0142.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd998) returned 1 [0142.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79720 [0142.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd998 [0142.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0142.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0142.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x150) returned 0x3e0b2d0 [0142.981] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.981] WriteFile (in: hFile=0x1f2c, lpBuffer=0x3e0b2d0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x8bdfd88, lpOverlapped=0x0 | out: lpBuffer=0x3e0b2d0*, lpNumberOfBytesWritten=0x8bdfd88*=0x150, lpOverlapped=0x0) returned 1 [0143.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b2d0) returned 1 [0143.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0143.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd998) returned 1 [0143.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0143.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20190) returned 1 [0143.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd790) returned 1 [0143.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb300) returned 1 [0143.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb558) returned 1 [0143.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0143.087] wcscpy (in: _Dest=0x3f3e238, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png" [0143.087] wcscat (in: _Dest=0x3f3e238, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png.68814f" [0143.088] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png.68814f", NtPathName=0x8bdfd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\YcBT5ILWPYB.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61050 [0143.182] FlushFileBuffers (hFile=0x1f2c) returned 1 [0143.332] CloseHandle (hObject=0x1f2c) returned 1 [0144.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26628 [0144.000] wcscpy (in: _Dest=0x7a26628, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0144.000] wcscat (in: _Dest=0x7a26628, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0144.000] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0144.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 [0144.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26d98) returned 1 Thread: id = 1017 os_tid = 0x17d0 [0132.851] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YlixU3KMaw.ots" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ylixu3kmaw.ots")) returned 0x2020 [0132.851] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YlixU3KMaw.ots", dwFileAttributes=0x20) returned 1 [0142.793] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\YlixU3KMaw.ots" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ylixu3kmaw.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f08 [0142.793] GetFileSizeEx (in: hFile=0x1f08, lpFileSize=0x92afc9c | out: lpFileSize=0x92afc9c*=46981) returned 1 [0142.793] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0xb781, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.793] ReadFile (in: hFile=0x1f08, lpBuffer=0x92afc78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x92afc88, lpOverlapped=0x0 | out: lpBuffer=0x92afc78*, lpNumberOfBytesRead=0x92afc88*=0x4, lpOverlapped=0x0) returned 1 [0142.795] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd588 [0142.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb6c0 [0142.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba58 [0142.795] NtQuerySystemTime (in: CurrentTime=0x92afc10 | out: CurrentTime=0x92afc10*=132462177216936000) returned 0x0 [0142.795] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x3ad01213 [0142.795] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x4e7b3be1 [0142.795] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x121d54f4 [0142.795] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x1281c6d2 [0142.795] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x1abd946a [0142.795] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0xa79be86 [0142.795] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x6c3fa5f2 [0142.795] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x343ac2b4 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x760333b7 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0xe7150b4 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x6c759e22 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x7a950cbb [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x7a9ed2b4 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x1095f8ae [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x56bde3e0 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x2ad891e3 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x208bab40 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x1a18b6fb [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x1e97816c [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x37f7ab0f [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x42bd7151 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x17045bf7 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x4fa03fa2 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x66bb8654 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x1f96955c [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x6202575 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x9b84c1a [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x3fc45172 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x29dd429d [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x775b5907 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x5c26ee27 [0142.796] RtlRandomEx (in: Seed=0x92afc08 | out: Seed=0x92afc08) returned 0x2be3ecbc [0142.805] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.805] ReadFile (in: hFile=0x1f08, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x92afc10, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0x92afc10*=0x3c00, lpOverlapped=0x0) returned 1 [0142.805] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85350 [0142.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0142.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd588 [0142.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd588) returned 1 [0142.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0142.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd588 [0142.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba58 [0142.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edba58) returned 1 [0142.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0142.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85350) returned 1 [0142.806] WriteFile (in: hFile=0x1f08, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x92afc10, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x92afc10*=0x3c00, lpOverlapped=0x0) returned 1 [0142.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0142.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0142.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e78f78 [0142.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0142.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79790 [0142.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0142.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0142.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0142.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x300dfd8 [0142.973] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.973] WriteFile (in: hFile=0x1f08, lpBuffer=0x300dfd8*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x92afc90, lpOverlapped=0x0 | out: lpBuffer=0x300dfd8*, lpNumberOfBytesWritten=0x92afc90*=0x10e, lpOverlapped=0x0) returned 1 [0143.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e853e0 [0143.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0143.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddd30 [0143.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddd30) returned 1 [0143.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3eddd30 [0143.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddda8 [0143.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde98 [0143.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edde98) returned 1 [0143.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0143.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0143.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x3e853e0 [0143.081] sprintf (in: _Dest=0x3e853e0, _Format="%c%c" | out: _Dest="44") returned 2 [0143.081] sprintf (in: _Dest=0x3e853e2, _Format="%c%c" | out: _Dest="1c") returned 2 [0143.081] sprintf (in: _Dest=0x3e853e4, _Format="%c%c" | out: _Dest="ae") returned 2 [0143.081] sprintf (in: _Dest=0x3e853e6, _Format="%c%c" | out: _Dest="63") returned 2 [0143.081] sprintf (in: _Dest=0x3e853e8, _Format="%c%c" | out: _Dest="a6") returned 2 [0143.081] sprintf (in: _Dest=0x3e853ea, _Format="%c%c" | out: _Dest="3a") returned 2 [0143.081] sprintf (in: _Dest=0x3e853ec, _Format="%c%c" | out: _Dest="74") returned 2 [0143.081] sprintf (in: _Dest=0x3e853ee, _Format="%c%c" | out: _Dest="6c") returned 2 [0143.081] sprintf (in: _Dest=0x3e853f0, _Format="%c%c" | out: _Dest="d1") returned 2 [0143.081] sprintf (in: _Dest=0x3e853f2, _Format="%c%c" | out: _Dest="a5") returned 2 [0143.081] sprintf (in: _Dest=0x3e853f4, _Format="%c%c" | out: _Dest="63") returned 2 [0143.082] sprintf (in: _Dest=0x3e853f6, _Format="%c%c" | out: _Dest="d3") returned 2 [0143.082] sprintf (in: _Dest=0x3e853f8, _Format="%c%c" | out: _Dest="fa") returned 2 [0143.082] sprintf (in: _Dest=0x3e853fa, _Format="%c%c" | out: _Dest="15") returned 2 [0143.082] sprintf (in: _Dest=0x3e853fc, _Format="%c%c" | out: _Dest="c5") returned 2 [0143.082] sprintf (in: _Dest=0x3e853fe, _Format="%c%c" | out: _Dest="0c") returned 2 [0143.082] sprintf (in: _Dest=0x3e85400, _Format="%c%c" | out: _Dest="f5") returned 2 [0143.082] sprintf (in: _Dest=0x3e85402, _Format="%c%c" | out: _Dest="17") returned 2 [0143.082] sprintf (in: _Dest=0x3e85404, _Format="%c%c" | out: _Dest="0d") returned 2 [0143.082] sprintf (in: _Dest=0x3e85406, _Format="%c%c" | out: _Dest="b3") returned 2 [0143.082] sprintf (in: _Dest=0x3e85408, _Format="%c%c" | out: _Dest="77") returned 2 [0143.082] sprintf (in: _Dest=0x3e8540a, _Format="%c%c" | out: _Dest="3e") returned 2 [0143.082] sprintf (in: _Dest=0x3e8540c, _Format="%c%c" | out: _Dest="0e") returned 2 [0143.082] sprintf (in: _Dest=0x3e8540e, _Format="%c%c" | out: _Dest="2c") returned 2 [0143.082] sprintf (in: _Dest=0x3e85410, _Format="%c%c" | out: _Dest="a8") returned 2 [0143.082] sprintf (in: _Dest=0x3e85412, _Format="%c%c" | out: _Dest="68") returned 2 [0143.083] sprintf (in: _Dest=0x3e85414, _Format="%c%c" | out: _Dest="5b") returned 2 [0143.083] sprintf (in: _Dest=0x3e85416, _Format="%c%c" | out: _Dest="29") returned 2 [0143.083] RtlInitAnsiString (in: DestinationString=0x92afc18, SourceString="441cae63a63a746cd1a563d3fa15c50cf5170db3773e0e2ca8685b29" | out: DestinationString="441cae63a63a746cd1a563d3fa15c50cf5170db3773e0e2ca8685b29") [0143.083] RtlAnsiStringToUnicodeString (in: DestinationString=0x92afc10, SourceString="441cae63a63a746cd1a563d3fa15c50cf5170db3773e0e2ca8685b29", AllocateDestinationString=1 | out: DestinationString="441cae63a63a746cd1a563d3fa15c50cf5170db3773e0e2ca8685b29") returned 0x0 [0143.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6770 [0143.083] wcscat (in: _Dest=0x3f3e0d0, _Source="441cae63a63a74" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\441cae63a63a74") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\441cae63a63a74" [0143.083] wcscat (in: _Dest=0x3f3e0d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\441cae63a63a74.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\441cae63a63a74.68814f" [0143.083] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\441cae63a63a74.68814f", NtPathName=0x92afc08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\441cae63a63a74.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60fc0 [0143.174] FlushFileBuffers (hFile=0x1f08) returned 1 [0143.332] CloseHandle (hObject=0x1f08) returned 1 [0143.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26628 [0143.996] wcscpy (in: _Dest=0x7a26628, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.996] wcscat (in: _Dest=0x7a26628, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.996] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 [0143.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0ac8) returned 1 Thread: id = 1018 os_tid = 0x17d4 [0132.852] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ze9h4j0.bmp")) returned 0x2020 [0132.852] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp", dwFileAttributes=0x20) returned 1 [0142.807] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\ze9h4j0.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1de4 [0142.807] GetFileSizeEx (in: hFile=0x1de4, lpFileSize=0xa95fc04 | out: lpFileSize=0xa95fc04*=62498) returned 1 [0142.807] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0xf41e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.807] ReadFile (in: hFile=0x1de4, lpBuffer=0xa95fbe0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa95fbf0, lpOverlapped=0x0 | out: lpBuffer=0xa95fbe0*, lpNumberOfBytesRead=0xa95fbf0*=0x4, lpOverlapped=0x0) returned 1 [0142.808] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba58 [0142.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb580 [0142.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbd28 [0142.809] NtQuerySystemTime (in: CurrentTime=0xa95fb78 | out: CurrentTime=0xa95fb78*=132462177216936000) returned 0x0 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0xf9cb206 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x576946e0 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x5122a479 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x121a1957 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x48546c57 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x65fba8e5 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x347718e5 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x29a9097d [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x45a02268 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x54340f9 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0xb297060 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x6e3c3459 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x14834e3a [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x70292098 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x28852e2e [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x46d08dcd [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x43245b7 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x6e3c3459 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x213db859 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x7b55c9e6 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x7cc5bdc7 [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x24a421de [0142.809] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x31a9246c [0142.810] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x7680b00 [0142.810] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x5a121d29 [0142.810] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0xf46ac5c [0142.810] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x35772fd8 [0142.810] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x7eececc3 [0142.810] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x70292098 [0142.810] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x3a2a37a3 [0142.810] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x33c65cd5 [0142.810] RtlRandomEx (in: Seed=0xa95fb70 | out: Seed=0xa95fb70) returned 0x740d4577 [0142.819] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.819] ReadFile (in: hFile=0x1de4, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa95fb78, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0xa95fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0142.820] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85350 [0142.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0142.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba58 [0142.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edba58) returned 1 [0142.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0142.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba58 [0142.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbd28 [0142.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbd28) returned 1 [0142.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0142.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85350) returned 1 [0142.820] WriteFile (in: hFile=0x1de4, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa95fb78, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0xa95fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0142.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0142.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0142.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37860 [0142.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0142.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37890 [0142.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0142.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0142.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0142.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0142.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300e668 [0142.979] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.979] WriteFile (in: hFile=0x1de4, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xa95fbf8, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0xa95fbf8*=0x108, lpOverlapped=0x0) returned 1 [0143.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0143.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37890) returned 1 [0143.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0143.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37860) returned 1 [0143.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edba58) returned 1 [0143.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb580) returned 1 [0143.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddbf0) returned 1 [0143.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddf38) returned 1 [0143.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a39420 [0143.085] wcscpy (in: _Dest=0x7a39420, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp" [0143.085] wcscat (in: _Dest=0x7a39420, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp.68814f" [0143.085] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp.68814f", NtPathName=0xa95fb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Ze9H4j0.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d1f8 [0143.179] FlushFileBuffers (hFile=0x1de4) returned 1 [0143.332] CloseHandle (hObject=0x1de4) returned 1 [0143.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26628 [0143.998] wcscpy (in: _Dest=0x7a26628, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0143.998] wcscat (in: _Dest=0x7a26628, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0143.998] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0143.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 [0143.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf4d8) returned 1 Thread: id = 1019 os_tid = 0x17d8 [0132.852] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Zeqt0 q7CNEAosBiQXf7.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\zeqt0 q7cneaosbiqxf7.avi")) returned 0x2020 [0132.852] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Zeqt0 q7CNEAosBiQXf7.avi", dwFileAttributes=0x20) returned 1 [0142.826] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Zeqt0 q7CNEAosBiQXf7.avi" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\zeqt0 q7cneaosbiqxf7.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e4c [0142.826] GetFileSizeEx (in: hFile=0x1e4c, lpFileSize=0x8e9fa5c | out: lpFileSize=0x8e9fa5c*=52845) returned 1 [0142.826] SetFilePointerEx (in: hFile=0x1e4c, liDistanceToMove=0xce69, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.826] ReadFile (in: hFile=0x1e4c, lpBuffer=0x8e9fa38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e9fa48, lpOverlapped=0x0 | out: lpBuffer=0x8e9fa38*, lpNumberOfBytesRead=0x8e9fa48*=0x4, lpOverlapped=0x0) returned 1 [0142.828] SetFilePointerEx (in: hFile=0x1e4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbd28 [0142.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edddd0 [0142.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddec0 [0142.828] NtQuerySystemTime (in: CurrentTime=0x8e9f9d0 | out: CurrentTime=0x8e9f9d0*=132462177217248000) returned 0x0 [0142.828] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x45c51eba [0142.828] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x5fadf00e [0142.828] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x60cbefbd [0142.828] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x4569735c [0142.828] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x72329dff [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x510aa5ee [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x9973c18 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x5560750 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x23dbac09 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x26a2c082 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x46d08dcd [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x23c35b7b [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0xf46ac5c [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x39ab7aee [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x66bb8654 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x43709a56 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x4958ac65 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x57111d55 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x7a8de71c [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x6ab05af1 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x69a93777 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x4299b0bc [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x647c6905 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x6b036558 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x6205bfba [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x1b434e48 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0xc77a25b [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x7dcec05d [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x57c338a7 [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x3d9ea28c [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x1aee09dc [0142.829] RtlRandomEx (in: Seed=0x8e9f9c8 | out: Seed=0x8e9f9c8) returned 0x3a2a37a3 [0142.837] SetFilePointerEx (in: hFile=0x1e4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.838] ReadFile (in: hFile=0x1e4c, lpBuffer=0x7a7c8c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8e9f9d0, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesRead=0x8e9f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.838] SetFilePointerEx (in: hFile=0x1e4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85350 [0142.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0142.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbd28 [0142.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbd28) returned 1 [0142.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b88360 [0142.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbd28 [0142.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddec0 [0142.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddec0) returned 1 [0142.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0142.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85350) returned 1 [0142.839] WriteFile (in: hFile=0x1e4c, lpBuffer=0x7b88360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8e9f9d0, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesWritten=0x8e9f9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0142.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a7c8c0) returned 1 [0142.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e85038 [0142.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0142.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e84e40 [0142.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0142.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0142.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0142.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0142.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9cd0 [0142.984] SetFilePointerEx (in: hFile=0x1e4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.984] WriteFile (in: hFile=0x1e4c, lpBuffer=0x3ec9cd0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x8e9fa50, lpOverlapped=0x0 | out: lpBuffer=0x3ec9cd0*, lpNumberOfBytesWritten=0x8e9fa50*=0x122, lpOverlapped=0x0) returned 1 [0143.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0143.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0143.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb1e8 [0143.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb1e8) returned 1 [0143.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e798a8 [0143.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb1e8 [0143.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb8a0 [0143.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8a0) returned 1 [0143.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0143.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0143.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a26f58 [0143.094] sprintf (in: _Dest=0x7a26f58, _Format="%c%c" | out: _Dest="28") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f5a, _Format="%c%c" | out: _Dest="83") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f5c, _Format="%c%c" | out: _Dest="da") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f5e, _Format="%c%c" | out: _Dest="26") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f60, _Format="%c%c" | out: _Dest="2b") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f62, _Format="%c%c" | out: _Dest="bb") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f64, _Format="%c%c" | out: _Dest="3f") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f66, _Format="%c%c" | out: _Dest="ff") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f68, _Format="%c%c" | out: _Dest="90") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f6a, _Format="%c%c" | out: _Dest="da") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f6c, _Format="%c%c" | out: _Dest="5f") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f6e, _Format="%c%c" | out: _Dest="f1") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f70, _Format="%c%c" | out: _Dest="fc") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f72, _Format="%c%c" | out: _Dest="8d") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f74, _Format="%c%c" | out: _Dest="57") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f76, _Format="%c%c" | out: _Dest="e2") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f78, _Format="%c%c" | out: _Dest="cb") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f7a, _Format="%c%c" | out: _Dest="48") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f7c, _Format="%c%c" | out: _Dest="ca") returned 2 [0143.094] sprintf (in: _Dest=0x7a26f7e, _Format="%c%c" | out: _Dest="ff") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f80, _Format="%c%c" | out: _Dest="a5") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f82, _Format="%c%c" | out: _Dest="2b") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f84, _Format="%c%c" | out: _Dest="a2") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f86, _Format="%c%c" | out: _Dest="d3") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f88, _Format="%c%c" | out: _Dest="1b") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f8a, _Format="%c%c" | out: _Dest="47") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f8c, _Format="%c%c" | out: _Dest="9d") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f8e, _Format="%c%c" | out: _Dest="ca") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f90, _Format="%c%c" | out: _Dest="4d") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f92, _Format="%c%c" | out: _Dest="cd") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f94, _Format="%c%c" | out: _Dest="3f") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f96, _Format="%c%c" | out: _Dest="29") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f98, _Format="%c%c" | out: _Dest="62") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f9a, _Format="%c%c" | out: _Dest="dc") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f9c, _Format="%c%c" | out: _Dest="0b") returned 2 [0143.095] sprintf (in: _Dest=0x7a26f9e, _Format="%c%c" | out: _Dest="cf") returned 2 [0143.095] sprintf (in: _Dest=0x7a26fa0, _Format="%c%c" | out: _Dest="4d") returned 2 [0143.095] sprintf (in: _Dest=0x7a26fa2, _Format="%c%c" | out: _Dest="6d") returned 2 [0143.095] sprintf (in: _Dest=0x7a26fa4, _Format="%c%c" | out: _Dest="bc") returned 2 [0143.095] sprintf (in: _Dest=0x7a26fa6, _Format="%c%c" | out: _Dest="84") returned 2 [0143.096] sprintf (in: _Dest=0x7a26fa8, _Format="%c%c" | out: _Dest="20") returned 2 [0143.096] sprintf (in: _Dest=0x7a26faa, _Format="%c%c" | out: _Dest="ee") returned 2 [0143.096] sprintf (in: _Dest=0x7a26fac, _Format="%c%c" | out: _Dest="e7") returned 2 [0143.096] sprintf (in: _Dest=0x7a26fae, _Format="%c%c" | out: _Dest="1d") returned 2 [0143.096] sprintf (in: _Dest=0x7a26fb0, _Format="%c%c" | out: _Dest="c8") returned 2 [0143.096] sprintf (in: _Dest=0x7a26fb2, _Format="%c%c" | out: _Dest="9e") returned 2 [0143.096] sprintf (in: _Dest=0x7a26fb4, _Format="%c%c" | out: _Dest="c0") returned 2 [0143.096] sprintf (in: _Dest=0x7a26fb6, _Format="%c%c" | out: _Dest="44") returned 2 [0143.096] RtlInitAnsiString (in: DestinationString=0x8e9f9d8, SourceString="2883da262bbb3fff90da5ff1fc8d57e2cb48caffa52ba2d31b479dca4dcd3f2962dc0bcf4d6dbc8420eee71dc89ec044" | out: DestinationString="2883da262bbb3fff90da5ff1fc8d57e2cb48caffa52ba2d31b479dca4dcd3f2962dc0bcf4d6dbc8420eee71dc89ec044") [0143.096] RtlAnsiStringToUnicodeString (in: DestinationString=0x8e9f9d0, SourceString="2883da262bbb3fff90da5ff1fc8d57e2cb48caffa52ba2d31b479dca4dcd3f2962dc0bcf4d6dbc8420eee71dc89ec044", AllocateDestinationString=1 | out: DestinationString="2883da262bbb3fff90da5ff1fc8d57e2cb48caffa52ba2d31b479dca4dcd3f2962dc0bcf4d6dbc8420eee71dc89ec044") returned 0x0 [0143.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d84fb0 [0143.096] wcscat (in: _Dest=0x7a61170, _Source="2883da262bbb3fff90da5ff1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2883da262bbb3fff90da5ff1") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2883da262bbb3fff90da5ff1" [0143.096] wcscat (in: _Dest=0x7a61170, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2883da262bbb3fff90da5ff1.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2883da262bbb3fff90da5ff1.68814f" [0143.096] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\2883da262bbb3fff90da5ff1.68814f", NtPathName=0x8e9f9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\2883da262bbb3fff90da5ff1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62270 [0143.188] FlushFileBuffers (hFile=0x1e4c) returned 1 [0143.333] CloseHandle (hObject=0x1e4c) returned 1 [0144.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26d98 [0144.004] wcscpy (in: _Dest=0x7a26d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\" [0144.004] wcscat (in: _Dest=0x7a26d98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" [0144.004] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\68814f-readme.txt")) returned 0x2020 [0144.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26d98) returned 1 [0144.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a398) returned 1 Thread: id = 1020 os_tid = 0x17dc [0132.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc")) returned 0x20 [0132.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", dwFileAttributes=0x20) returned 0 [0132.854] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.854] GetLastError () returned 0x5 [0132.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", dwFileAttributes=0x20) returned 0 [0132.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4e60) returned 1 Thread: id = 1021 os_tid = 0x17e0 [0132.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df1c28 [0132.985] wcscpy (in: _Dest=0x3df1c28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0132.985] wcscat (in: _Dest=0x3df1c28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0132.985] wcscat (in: _Dest=0x3df1c28, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*" [0132.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0132.986] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0134.226] wcscmp (_String1=".", _String2=".") returned 0 [0134.226] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1425f20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.226] wcscmp (_String1="..", _String2=".") returned 1 [0134.226] wcscmp (_String1="..", _String2="..") returned 0 [0134.226] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePDF417.pmp", cAlternateFileName="ADOBEP~1.PMP")) returned 1 [0134.227] wcscmp (_String1="AdobePDF417.pmp", _String2=".") returned 1 [0134.227] wcscmp (_String1="AdobePDF417.pmp", _String2="..") returned 1 [0134.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053288 [0134.227] wcscpy (in: _Dest=0x3053288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0134.227] wcscat (in: _Dest=0x3053288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0134.227] wcscat (in: _Dest=0x3053288, _Source="AdobePDF417.pmp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" [0136.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0136.740] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMatrix.pmp", cAlternateFileName="DATAMA~1.PMP")) returned 1 [0136.740] wcscmp (_String1="DataMatrix.pmp", _String2=".") returned 1 [0136.740] wcscmp (_String1="DataMatrix.pmp", _String2="..") returned 1 [0136.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e7b600 [0136.741] wcscpy (in: _Dest=0x3e7b600, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0136.741] wcscat (in: _Dest=0x3e7b600, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0136.741] wcscat (in: _Dest=0x3e7b600, _Source="DataMatrix.pmp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" [0136.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7b600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0136.742] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 1 [0136.743] wcscmp (_String1="QRCode.pmp", _String2=".") returned 1 [0136.743] wcscmp (_String1="QRCode.pmp", _String2="..") returned 1 [0136.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c6298 [0136.743] wcscpy (in: _Dest=0x2c6298, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP" [0136.743] wcscat (in: _Dest=0x2c6298, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\" [0136.743] wcscat (in: _Dest=0x2c6298, _Source="QRCode.pmp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" [0136.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0136.744] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 0 [0136.744] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0136.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0136.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1c28) returned 1 [0136.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 1022 os_tid = 0x17e4 [0132.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ddf4c8 [0132.987] wcscpy (in: _Dest=0x3ddf4c8, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0132.987] wcscat (in: _Dest=0x3ddf4c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\" [0132.987] wcscat (in: _Dest=0x3ddf4c8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" [0132.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0132.987] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0132.988] wcscmp (_String1=".", _String2=".") returned 0 [0132.988] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.988] wcscmp (_String1="..", _String2=".") returned 1 [0132.988] wcscmp (_String1="..", _String2="..") returned 0 [0132.988] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe34600, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1fe34600, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1fe34600, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0132.988] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0132.988] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0132.988] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0132.988] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0132.988] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0132.988] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0132.988] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0132.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0132.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf4c8) returned 1 [0132.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3df0) returned 1 Thread: id = 1023 os_tid = 0x17e8 [0132.990] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp")) returned 0x20 [0132.990] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0132.990] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0132.991] GetLastError () returned 0x5 [0132.991] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0132.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 Thread: id = 1024 os_tid = 0x17ec [0132.993] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp")) returned 0x20 [0134.754] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0134.754] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.755] GetLastError () returned 0x5 [0134.755] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0134.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053528) returned 1 Thread: id = 1025 os_tid = 0x17f0 [0132.994] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp")) returned 0x20 [0134.756] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0134.756] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.757] GetLastError () returned 0x5 [0134.757] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0134.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 Thread: id = 1026 os_tid = 0x17f4 [0132.995] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp")) returned 0x20 [0134.758] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0134.758] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.761] GetLastError () returned 0x5 [0134.762] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0134.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053870) returned 1 Thread: id = 1027 os_tid = 0x17f8 [0132.996] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp")) returned 0x20 [0134.763] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0134.763] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.763] GetLastError () returned 0x5 [0134.763] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0134.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052fe8) returned 1 Thread: id = 1028 os_tid = 0x17fc [0132.997] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp")) returned 0x20 [0134.764] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0134.764] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.764] GetLastError () returned 0x5 [0134.764] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0134.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053138) returned 1 Thread: id = 1029 os_tid = 0x7ac [0132.998] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp")) returned 0x20 [0134.765] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0134.765] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.765] GetLastError () returned 0x5 [0134.765] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0134.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053b10) returned 1 Thread: id = 1030 os_tid = 0xc14 [0132.999] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp")) returned 0x20 [0134.767] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0134.767] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.767] GetLastError () returned 0x5 [0134.767] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0134.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3054050) returned 1 Thread: id = 1031 os_tid = 0xc10 [0132.999] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp")) returned 0x20 [0134.768] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0134.769] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.769] GetLastError () returned 0x5 [0134.769] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0134.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 1032 os_tid = 0xf64 [0133.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3df2d08 [0133.001] wcscpy (in: _Dest=0x3df2d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" [0133.001] wcscat (in: _Dest=0x3df2d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\" [0133.001] wcscat (in: _Dest=0x3df2d08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*" [0133.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0133.001] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0133.001] wcscmp (_String1=".", _String2=".") returned 0 [0133.001] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.001] wcscmp (_String1="..", _String2=".") returned 1 [0133.001] wcscmp (_String1="..", _String2="..") returned 0 [0133.001] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.002] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0133.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0133.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 [0133.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 1033 os_tid = 0x74c [0133.004] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp")) returned 0x20 [0134.770] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0134.770] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.770] GetLastError () returned 0x5 [0134.770] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0134.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052f40) returned 1 Thread: id = 1034 os_tid = 0xb00 [0133.004] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp")) returned 0x20 [0134.772] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0134.772] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.772] GetLastError () returned 0x5 [0134.772] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0134.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053678) returned 1 Thread: id = 1035 os_tid = 0x1804 [0133.006] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp")) returned 0x20 [0134.774] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0134.774] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.774] GetLastError () returned 0x5 [0134.774] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0134.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053d08) returned 1 Thread: id = 1036 os_tid = 0x1808 [0133.006] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp")) returned 0x20 [0134.775] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0134.775] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.776] GetLastError () returned 0x5 [0134.776] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0134.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 Thread: id = 1037 os_tid = 0x180c [0133.007] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp")) returned 0x20 [0134.777] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0134.777] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.778] GetLastError () returned 0x5 [0134.778] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0134.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 Thread: id = 1038 os_tid = 0x1810 [0133.008] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp")) returned 0x20 [0134.779] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0134.779] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.779] GetLastError () returned 0x5 [0134.779] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0134.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 Thread: id = 1039 os_tid = 0x1814 [0133.009] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp")) returned 0x20 [0134.781] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0134.781] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.781] GetLastError () returned 0x5 [0134.781] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0134.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052df0) returned 1 Thread: id = 1040 os_tid = 0x1818 [0133.010] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp")) returned 0x20 [0134.782] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0134.782] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.783] GetLastError () returned 0x5 [0134.783] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0134.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7a640) returned 1 Thread: id = 1041 os_tid = 0x181c [0133.011] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp")) returned 0x20 [0134.784] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0134.784] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.784] GetLastError () returned 0x5 [0134.784] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0134.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7b750) returned 1 Thread: id = 1042 os_tid = 0x1820 [0133.012] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp")) returned 0x20 [0134.232] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0134.232] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.232] GetLastError () returned 0x5 [0134.232] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0134.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7a2f8) returned 1 Thread: id = 1043 os_tid = 0x1824 [0133.013] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp")) returned 0x20 [0134.234] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0134.234] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.234] GetLastError () returned 0x5 [0134.234] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0134.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79d10) returned 1 Thread: id = 1044 os_tid = 0x1828 [0134.241] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp")) returned 0x20 [0134.241] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0134.241] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.241] GetLastError () returned 0x5 [0134.241] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0134.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7acd0) returned 1 Thread: id = 1052 os_tid = 0x1830 [0134.246] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg")) returned 0x20 [0135.697] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", dwFileAttributes=0x20) returned 1 [0135.697] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b44 [0135.697] GetFileSizeEx (in: hFile=0x1b44, lpFileSize=0x630fe8c | out: lpFileSize=0x630fe8c*=879394) returned 1 [0135.697] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0xd6b1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.697] ReadFile (in: hFile=0x1b44, lpBuffer=0x630fe68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x630fe78, lpOverlapped=0x0 | out: lpBuffer=0x630fe68*, lpNumberOfBytesRead=0x630fe78*=0x4, lpOverlapped=0x0) returned 1 [0135.704] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0135.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0135.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54250 [0135.704] NtQuerySystemTime (in: CurrentTime=0x630fe00 | out: CurrentTime=0x630fe00*=132462177149856000) returned 0x0 [0135.704] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x504bcac6 [0135.704] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x1b986afe [0135.704] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x7a14d652 [0135.704] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x49442388 [0135.704] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x13554b79 [0135.704] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x92f4832 [0135.704] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x34a2e0a1 [0135.704] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0xb530320 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x6b7d4add [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x74dd5459 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x572d6780 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x114b6945 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x42bf3afd [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x540a6d72 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0xa92c4c0 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x576cd385 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x25e32435 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x18ce3078 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x681ec5c7 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x57ba48b2 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x10a1b1f9 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x4196d883 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x318c30ed [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x70dbe6d3 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x2019b44c [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x4d42ebea [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x51435358 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x6b87d882 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x4f727b61 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x30e20036 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x6ce76db9 [0135.705] RtlRandomEx (in: Seed=0x630fdf8 | out: Seed=0x630fdf8) returned 0x672995de [0135.718] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.718] ReadFile (in: hFile=0x1b44, lpBuffer=0x7cd07d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x630fe00, lpOverlapped=0x0 | out: lpBuffer=0x7cd07d8*, lpNumberOfBytesRead=0x630fe00*=0x3c00, lpOverlapped=0x0) returned 1 [0135.736] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25740 [0135.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0135.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0135.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0135.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caaf88 [0135.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0135.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36f0 [0135.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36f0) returned 1 [0135.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0135.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25740) returned 1 [0135.737] WriteFile (in: hFile=0x1b44, lpBuffer=0x7caaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x630fe00, lpOverlapped=0x0 | out: lpBuffer=0x7caaf88*, lpNumberOfBytesWritten=0x630fe00*=0x3c00, lpOverlapped=0x0) returned 1 [0136.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf88) returned 1 [0136.844] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x6cc00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.844] ReadFile (in: hFile=0x1b44, lpBuffer=0x7cd07d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x630fe00, lpOverlapped=0x0 | out: lpBuffer=0x7cd07d8*, lpNumberOfBytesRead=0x630fe00*=0x3c00, lpOverlapped=0x0) returned 1 [0137.095] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x6cc00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e566d8 [0137.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3de00 [0137.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0137.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0137.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cd43e0 [0137.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0137.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0137.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3060) returned 1 [0137.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0137.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e566d8) returned 1 [0137.096] WriteFile (in: hFile=0x1b44, lpBuffer=0x7cd43e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x630fe00, lpOverlapped=0x0 | out: lpBuffer=0x7cd43e0*, lpNumberOfBytesWritten=0x630fe00*=0x3c00, lpOverlapped=0x0) returned 1 [0142.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd43e0) returned 1 [0142.531] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0xd2f22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.531] ReadFile (in: hFile=0x1b44, lpBuffer=0x7cd07d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x630fe00, lpOverlapped=0x0 | out: lpBuffer=0x7cd07d8*, lpNumberOfBytesRead=0x630fe00*=0x3c00, lpOverlapped=0x0) returned 1 [0142.532] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0xd2f22, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24a10 [0142.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0142.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd628 [0142.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd628) returned 1 [0142.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cd43e0 [0142.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd628 [0142.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddad8 [0142.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddad8) returned 1 [0142.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0142.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a10) returned 1 [0142.533] WriteFile (in: hFile=0x1b44, lpBuffer=0x7cd43e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x630fe00, lpOverlapped=0x0 | out: lpBuffer=0x7cd43e0*, lpNumberOfBytesWritten=0x630fe00*=0x3c00, lpOverlapped=0x0) returned 1 [0146.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd43e0) returned 1 [0146.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f5c8 [0146.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0146.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79218 [0146.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0146.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0146.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0146.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f68) returned 1 [0146.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dce108 [0146.209] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.209] WriteFile (in: hFile=0x1b44, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x630fe80, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x630fe80*=0x154, lpOverlapped=0x0) returned 1 [0147.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce108) returned 1 [0147.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79218) returned 1 [0147.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0147.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0147.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5c8) returned 1 [0147.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0147.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e525b8) returned 1 [0147.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0147.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d442a0 [0147.010] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" [0147.010] wcscat (in: _Dest=0x3d442a0, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.68814f") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.68814f" [0147.010] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.68814f", NtPathName=0x630fdf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053a68 [0147.015] FlushFileBuffers (hFile=0x1b44) returned 1 [0147.071] CloseHandle (hObject=0x1b44) returned 1 [0147.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47a98 [0147.078] wcscpy (in: _Dest=0x3e47a98, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0147.078] wcscat (in: _Dest=0x3e47a98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" [0147.078] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\68814f-readme.txt")) returned 0x20 [0147.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a98) returned 1 [0147.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a918) returned 1 Thread: id = 1053 os_tid = 0x1834 [0134.249] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg")) returned 0x20 [0135.700] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", dwFileAttributes=0x20) returned 1 [0135.700] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x186c [0135.700] GetFileSizeEx (in: hFile=0x186c, lpFileSize=0x796fdf4 | out: lpFileSize=0x796fdf4*=845941) returned 1 [0135.700] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0xce871, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.701] ReadFile (in: hFile=0x186c, lpBuffer=0x796fdd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x796fde0, lpOverlapped=0x0 | out: lpBuffer=0x796fdd0*, lpNumberOfBytesRead=0x796fde0*=0x4, lpOverlapped=0x0) returned 1 [0135.720] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0135.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54250 [0135.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36f0 [0135.720] NtQuerySystemTime (in: CurrentTime=0x796fd68 | out: CurrentTime=0x796fd68*=132462177150012000) returned 0x0 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x641c9e41 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x934f26 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x48b298e7 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x1a04780 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x7ede8cdb [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x2098910 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x71b6e9b3 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x613ba037 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x123911e [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x5d3b27ed [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x1e1e2567 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x66214672 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x356df06d [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x6f107c41 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x4c8c8c21 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x183a549f [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x75fcdf23 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x56077404 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x1854f151 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x5a37ea6d [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x7937bb30 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x4e995924 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x76f24e61 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x2d0968f9 [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x3c153b0b [0135.721] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x41e91e17 [0135.722] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x62baf8c3 [0135.722] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x54522285 [0135.722] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x19cce249 [0135.722] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x2a9f9e34 [0135.722] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x5c5ad319 [0135.722] RtlRandomEx (in: Seed=0x796fd60 | out: Seed=0x796fd60) returned 0x5808fb2e [0135.733] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.733] ReadFile (in: hFile=0x186c, lpBuffer=0x7c9fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x796fd68, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesRead=0x796fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0135.741] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25740 [0135.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0135.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36f0 [0135.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36f0) returned 1 [0135.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca7380 [0135.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36f0 [0135.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b60 [0135.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b60) returned 1 [0135.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0135.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25740) returned 1 [0135.742] WriteFile (in: hFile=0x186c, lpBuffer=0x7ca7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x796fd68, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesWritten=0x796fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0138.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca7380) returned 1 [0138.881] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x69000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.881] ReadFile (in: hFile=0x186c, lpBuffer=0x7c9fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x796fd68, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesRead=0x796fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0138.883] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x69000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095bd0 [0138.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0138.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0138.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0138.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca7380 [0138.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0138.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0138.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9928) returned 1 [0138.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0138.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095bd0) returned 1 [0138.884] WriteFile (in: hFile=0x186c, lpBuffer=0x7ca7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x796fd68, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesWritten=0x796fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0142.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca7380) returned 1 [0142.526] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0xcac75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.526] ReadFile (in: hFile=0x186c, lpBuffer=0x7c9fb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x796fd68, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesRead=0x796fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0142.527] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0xcac75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24a10 [0142.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0142.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb210 [0142.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb210) returned 1 [0142.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca7380 [0142.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb210 [0142.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd600 [0142.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd600) returned 1 [0142.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0142.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a10) returned 1 [0142.528] WriteFile (in: hFile=0x186c, lpBuffer=0x7ca7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x796fd68, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesWritten=0x796fd68*=0x3c00, lpOverlapped=0x0) returned 1 [0145.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca7380) returned 1 [0145.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b98 [0145.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36f0) returned 1 [0145.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37890 [0145.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36f0 [0145.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0145.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a48) returned 1 [0145.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0145.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07b18) returned 1 [0145.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x146) returned 0x3e0aac0 [0145.356] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.356] WriteFile (in: hFile=0x186c, lpBuffer=0x3e0aac0*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x796fde8, lpOverlapped=0x0 | out: lpBuffer=0x3e0aac0*, lpNumberOfBytesWritten=0x796fde8*=0x146, lpOverlapped=0x0) returned 1 [0147.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0aac0) returned 1 [0147.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37890) returned 1 [0147.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36f0) returned 1 [0147.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37860) returned 1 [0147.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 [0147.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54250) returned 1 [0147.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0147.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29d0) returned 1 [0147.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19298 [0147.236] wcscpy (in: _Dest=0x3e19298, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" [0147.236] wcscat (in: _Dest=0x3e19298, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.68814f") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.68814f" [0147.236] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.68814f", NtPathName=0x796fd60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb70b8 [0147.240] FlushFileBuffers (hFile=0x186c) returned 1 [0148.819] CloseHandle (hObject=0x186c) returned 1 [0149.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5cf0 [0149.530] wcscpy (in: _Dest=0x3da5cf0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0149.530] wcscat (in: _Dest=0x3da5cf0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" [0149.530] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\68814f-readme.txt")) returned 0x20 [0149.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5cf0) returned 1 [0149.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a70) returned 1 Thread: id = 1054 os_tid = 0x1838 [0134.250] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg")) returned 0x20 [0135.747] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", dwFileAttributes=0x20) returned 1 [0135.747] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd8 [0135.747] GetFileSizeEx (in: hFile=0xcd8, lpFileSize=0x5dffef4 | out: lpFileSize=0x5dffef4*=595284) returned 1 [0135.747] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x91550, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.747] ReadFile (in: hFile=0xcd8, lpBuffer=0x5dffed0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5dffee0, lpOverlapped=0x0 | out: lpBuffer=0x5dffed0*, lpNumberOfBytesRead=0x5dffee0*=0x4, lpOverlapped=0x0) returned 1 [0135.751] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b60 [0135.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0135.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0135.751] NtQuerySystemTime (in: CurrentTime=0x5dffe68 | out: CurrentTime=0x5dffe68*=132462177150324000) returned 0x0 [0135.751] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x27bfaee1 [0135.751] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x7072c690 [0135.751] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x1e8b1da1 [0135.751] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x5d328918 [0135.751] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x16c5432f [0135.751] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x5071475d [0135.751] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x5b86310c [0135.751] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0xae69614 [0135.751] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x2f98169e [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x6b5deb12 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x4c8c346a [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x636d282c [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x4bd5f567 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x4206c45f [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x16c75d54 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x28df08ec [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x616026bd [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x22f67ce1 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x73f58747 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x2ec4b6d4 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x792099ff [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x8a83072 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x57504997 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x661a6453 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x3225fc77 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x554d2641 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x616ed9e5 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x2de1122 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x29d31d75 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x22dd53f2 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0xd756b8 [0135.752] RtlRandomEx (in: Seed=0x5dffe60 | out: Seed=0x5dffe60) returned 0x51883cdf [0135.763] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.763] ReadFile (in: hFile=0xcd8, lpBuffer=0x7cb2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5dffe68, lpOverlapped=0x0 | out: lpBuffer=0x7cb2798*, lpNumberOfBytesRead=0x5dffe68*=0x3c00, lpOverlapped=0x0) returned 1 [0135.766] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25740 [0135.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0135.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b60 [0135.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b60) returned 1 [0135.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb9fa8 [0135.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b60 [0135.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0135.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0135.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0135.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25740) returned 1 [0135.767] WriteFile (in: hFile=0xcd8, lpBuffer=0x7cb9fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5dffe68, lpOverlapped=0x0 | out: lpBuffer=0x7cb9fa8*, lpNumberOfBytesWritten=0x5dffe68*=0x3c00, lpOverlapped=0x0) returned 1 [0136.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa8) returned 1 [0136.832] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.832] ReadFile (in: hFile=0xcd8, lpBuffer=0x7cb2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5dffe68, lpOverlapped=0x0 | out: lpBuffer=0x7cb2798*, lpNumberOfBytesRead=0x5dffe68*=0x3c00, lpOverlapped=0x0) returned 1 [0136.834] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25ce0 [0136.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f5d8 [0136.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb260 [0136.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb260) returned 1 [0136.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb9fa8 [0136.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb260 [0136.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbe18 [0136.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe18) returned 1 [0136.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0136.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ce0) returned 1 [0136.835] WriteFile (in: hFile=0xcd8, lpBuffer=0x7cb9fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5dffe68, lpOverlapped=0x0 | out: lpBuffer=0x7cb9fa8*, lpNumberOfBytesWritten=0x5dffe68*=0x3c00, lpOverlapped=0x0) returned 1 [0139.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa8) returned 1 [0139.923] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x8d954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.923] ReadFile (in: hFile=0xcd8, lpBuffer=0x7cb2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5dffe68, lpOverlapped=0x0 | out: lpBuffer=0x7cb2798*, lpNumberOfBytesRead=0x5dffe68*=0x3c00, lpOverlapped=0x0) returned 1 [0139.949] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x8d954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84df8 [0139.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dba8 [0139.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0139.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0139.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb9fa8 [0139.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0139.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6788 [0139.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6788) returned 1 [0139.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dba8) returned 1 [0139.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84df8) returned 1 [0139.950] WriteFile (in: hFile=0xcd8, lpBuffer=0x7cb9fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5dffe68, lpOverlapped=0x0 | out: lpBuffer=0x7cb9fa8*, lpNumberOfBytesWritten=0x5dffe68*=0x3c00, lpOverlapped=0x0) returned 1 [0144.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa8) returned 1 [0144.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee11b0 [0144.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0144.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb260) returned 1 [0144.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b60) returned 1 [0144.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2798) returned 1 [0144.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e798a8 [0144.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49698 [0144.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f0b0 [0144.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b60 [0144.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b60) returned 1 [0144.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79720 [0144.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b60 [0144.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0144.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0144.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 [0144.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49698) returned 1 [0144.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x3e0b2d0 [0144.234] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.234] WriteFile (in: hFile=0xcd8, lpBuffer=0x3e0b2d0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x5dffee8, lpOverlapped=0x0 | out: lpBuffer=0x3e0b2d0*, lpNumberOfBytesWritten=0x5dffee8*=0x14e, lpOverlapped=0x0) returned 1 [0145.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b2d0) returned 1 [0145.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0145.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b60) returned 1 [0145.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0145.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee11b0) returned 1 [0145.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c50) returned 1 [0145.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4bb8) returned 1 [0145.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0145.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3db00 [0145.321] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" [0145.321] wcscat (in: _Dest=0x3f3db00, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.68814f") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.68814f" [0145.321] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.68814f", NtPathName=0x5dffe60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a623b0 [0145.328] FlushFileBuffers (hFile=0xcd8) returned 1 [0147.054] CloseHandle (hObject=0xcd8) returned 1 [0147.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47a98 [0147.063] wcscpy (in: _Dest=0x3e47a98, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0147.063] wcscat (in: _Dest=0x3e47a98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" [0147.064] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\68814f-readme.txt")) returned 0xffffffff [0147.064] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcd8 [0147.064] WriteFile (in: hFile=0xcd8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5dffe7c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x5dffe7c*=0x8b9, lpOverlapped=0x0) returned 1 [0147.067] CloseHandle (hObject=0xcd8) returned 1 [0147.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a98) returned 1 [0147.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 Thread: id = 1055 os_tid = 0x183c [0134.251] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg")) returned 0x20 [0135.769] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", dwFileAttributes=0x20) returned 1 [0135.770] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc0c [0135.770] GetFileSizeEx (in: hFile=0xc0c, lpFileSize=0x849fb8c | out: lpFileSize=0x849fb8c*=775702) returned 1 [0135.770] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0xbd612, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.770] ReadFile (in: hFile=0xc0c, lpBuffer=0x849fb68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x849fb78, lpOverlapped=0x0 | out: lpBuffer=0x849fb68*, lpNumberOfBytesRead=0x849fb78*=0x4, lpOverlapped=0x0) returned 1 [0135.775] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0135.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0135.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0135.776] NtQuerySystemTime (in: CurrentTime=0x849fb00 | out: CurrentTime=0x849fb00*=132462177150636000) returned 0x0 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x11aa4a69 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x6b8a8dd6 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x38bac625 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x51a90bb1 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x30f768c2 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x1e6044e1 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x75a46f17 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x20515f26 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x7a06acd8 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0xea03827 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x17ee0994 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x7bb52bc4 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x624a41e9 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x347807e1 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0xce42b89 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x1f1238eb [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x2af4be7b [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x10dd4322 [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x3bc9725a [0135.776] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x66fc7065 [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x53100db6 [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x362b24d5 [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0xf76ca8e [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x264c51bd [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x4e8dd9f0 [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x3a3cfcd5 [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x1d25f782 [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x63713f7b [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x5628b0c [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x105e3cd4 [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0xaab37ed [0135.777] RtlRandomEx (in: Seed=0x849faf8 | out: Seed=0x849faf8) returned 0x3ff61118 [0135.787] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.787] ReadFile (in: hFile=0xc0c, lpBuffer=0x7ca3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x849fb00, lpOverlapped=0x0 | out: lpBuffer=0x7ca3778*, lpNumberOfBytesRead=0x849fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0135.790] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25740 [0135.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0135.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0135.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0135.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a750b0 [0135.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0135.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0135.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0135.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0135.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25740) returned 1 [0135.792] WriteFile (in: hFile=0xc0c, lpBuffer=0x7a750b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x849fb00, lpOverlapped=0x0 | out: lpBuffer=0x7a750b0*, lpNumberOfBytesWritten=0x849fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0138.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a750b0) returned 1 [0138.887] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.887] ReadFile (in: hFile=0xc0c, lpBuffer=0x7ca3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x849fb00, lpOverlapped=0x0 | out: lpBuffer=0x7ca3778*, lpNumberOfBytesRead=0x849fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0138.924] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25278 [0138.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0138.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0138.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0138.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a750b0 [0138.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0138.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538a0 [0138.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538a0) returned 1 [0138.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0138.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25278) returned 1 [0138.925] WriteFile (in: hFile=0xc0c, lpBuffer=0x7a750b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x849fb00, lpOverlapped=0x0 | out: lpBuffer=0x7a750b0*, lpNumberOfBytesWritten=0x849fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0142.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a750b0) returned 1 [0142.529] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0xb9a16, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.529] ReadFile (in: hFile=0xc0c, lpBuffer=0x7ca3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x849fb00, lpOverlapped=0x0 | out: lpBuffer=0x7ca3778*, lpNumberOfBytesRead=0x849fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0142.530] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0xb9a16, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24a10 [0142.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0142.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd600 [0142.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd600) returned 1 [0142.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a750b0 [0142.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd600 [0142.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd628 [0142.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd628) returned 1 [0142.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0142.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a10) returned 1 [0142.531] WriteFile (in: hFile=0xc0c, lpBuffer=0x7a750b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x849fb00, lpOverlapped=0x0 | out: lpBuffer=0x7a750b0*, lpNumberOfBytesWritten=0x849fb00*=0x3c00, lpOverlapped=0x0) returned 1 [0146.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a750b0) returned 1 [0146.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e20190 [0146.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0146.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37650 [0146.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0146.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0146.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3060) returned 1 [0146.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f68) returned 1 [0146.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e0ac18 [0146.207] SetFilePointerEx (in: hFile=0xc0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.207] WriteFile (in: hFile=0xc0c, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x849fb80, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0x849fb80*=0x14c, lpOverlapped=0x0) returned 1 [0147.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0147.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37650) returned 1 [0147.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0147.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37620) returned 1 [0147.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20190) returned 1 [0147.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0147.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0147.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35d8) returned 1 [0147.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3da78 [0147.002] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" [0147.002] wcscat (in: _Dest=0x3f3da78, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.68814f") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.68814f" [0147.002] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.68814f", NtPathName=0x849faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62130 [0147.007] FlushFileBuffers (hFile=0xc0c) returned 1 [0147.070] CloseHandle (hObject=0xc0c) returned 1 [0147.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47a98 [0147.076] wcscpy (in: _Dest=0x3e47a98, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0147.076] wcscat (in: _Dest=0x3e47a98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" [0147.076] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\68814f-readme.txt")) returned 0x20 [0147.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a98) returned 1 [0147.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 Thread: id = 1056 os_tid = 0x1840 [0134.255] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg")) returned 0x20 [0135.773] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", dwFileAttributes=0x20) returned 1 [0135.773] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ca4 [0135.773] GetFileSizeEx (in: hFile=0x1ca4, lpFileSize=0x634f87c | out: lpFileSize=0x634f87c*=780831) returned 1 [0135.773] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0xbea1b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.773] ReadFile (in: hFile=0x1ca4, lpBuffer=0x634f858, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x634f868, lpOverlapped=0x0 | out: lpBuffer=0x634f858*, lpNumberOfBytesRead=0x634f868*=0x4, lpOverlapped=0x0) returned 1 [0135.796] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0135.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0135.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0135.796] NtQuerySystemTime (in: CurrentTime=0x634f7f0 | out: CurrentTime=0x634f7f0*=132462177150792000) returned 0x0 [0135.796] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x3a474f13 [0135.796] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0xad8f5cc [0135.796] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x2811840d [0135.796] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x651c8d3f [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x6b7fcba7 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x37a8313a [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x4b6faad9 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x47e79dab [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x65fb6fd8 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x2742a5b6 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x6d3b3f0d [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x6b44d99d [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x421d2d46 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x7711294b [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x31b84815 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x6a88edee [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x18ede50b [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x3ddf50c7 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x61b2ddd6 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x4e007cf9 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x629d849d [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x577e44d4 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x503a7cad [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x3efbd184 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x10ecacac [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x66c29c63 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x4b97649c [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x736da6fd [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x59358029 [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x5a59205d [0135.797] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x34384f3d [0135.798] RtlRandomEx (in: Seed=0x634f7e8 | out: Seed=0x634f7e8) returned 0x55569e3b [0135.810] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.811] ReadFile (in: hFile=0x1ca4, lpBuffer=0x7a78cb8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x634f7f0, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesRead=0x634f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0135.813] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25740 [0135.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0135.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0135.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0135.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a7c8c0 [0135.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0135.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0135.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34c0) returned 1 [0135.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0135.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25740) returned 1 [0135.814] WriteFile (in: hFile=0x1ca4, lpBuffer=0x7a7c8c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x634f7f0, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesWritten=0x634f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a7c8c0) returned 1 [0136.836] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.836] ReadFile (in: hFile=0x1ca4, lpBuffer=0x7a78cb8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x634f7f0, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesRead=0x634f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0136.983] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be2e0 [0136.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0136.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54200 [0136.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54200) returned 1 [0136.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb63a0 [0136.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54200 [0136.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53490 [0136.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53490) returned 1 [0136.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0136.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be2e0) returned 1 [0136.984] WriteFile (in: hFile=0x1ca4, lpBuffer=0x7cb63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x634f7f0, lpOverlapped=0x0 | out: lpBuffer=0x7cb63a0*, lpNumberOfBytesWritten=0x634f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0139.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63a0) returned 1 [0139.969] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0xbae1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.969] ReadFile (in: hFile=0x1ca4, lpBuffer=0x7a78cb8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x634f7f0, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesRead=0x634f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0139.992] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0xbae1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095b88 [0139.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0139.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0139.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0139.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb63a0 [0139.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0139.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0139.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0139.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0139.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095b88) returned 1 [0139.993] WriteFile (in: hFile=0x1ca4, lpBuffer=0x7cb63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x634f7f0, lpOverlapped=0x0 | out: lpBuffer=0x7cb63a0*, lpNumberOfBytesWritten=0x634f7f0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63a0) returned 1 [0144.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b98 [0144.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0144.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54200) returned 1 [0144.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0144.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a78cb8) returned 1 [0144.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0144.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49698 [0144.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f0b0 [0144.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0144.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0144.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0144.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0144.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0144.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0144.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 [0144.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49698) returned 1 [0144.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e0aac0 [0144.237] SetFilePointerEx (in: hFile=0x1ca4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.237] WriteFile (in: hFile=0x1ca4, lpBuffer=0x3e0aac0*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x634f870, lpOverlapped=0x0 | out: lpBuffer=0x3e0aac0*, lpNumberOfBytesWritten=0x634f870*=0x144, lpOverlapped=0x0) returned 1 [0145.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0aac0) returned 1 [0145.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3808) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0145.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3588) returned 1 [0145.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a298 [0145.330] wcscpy (in: _Dest=0x3e1a298, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" [0145.330] wcscat (in: _Dest=0x3e1a298, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.68814f") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.68814f" [0145.330] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.68814f", NtPathName=0x634f7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6c00 [0145.334] FlushFileBuffers (hFile=0x1ca4) returned 1 [0147.068] CloseHandle (hObject=0x1ca4) returned 1 [0147.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a918 [0147.087] wcscpy (in: _Dest=0x3e1a918, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0147.087] wcscat (in: _Dest=0x3e1a918, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" [0147.087] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\68814f-readme.txt")) returned 0x20 [0147.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a918) returned 1 [0147.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23bc0) returned 1 Thread: id = 1057 os_tid = 0x1844 [0134.257] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg")) returned 0x20 [0135.794] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", dwFileAttributes=0x20) returned 1 [0135.794] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc54 [0135.795] GetFileSizeEx (in: hFile=0xc54, lpFileSize=0x627f984 | out: lpFileSize=0x627f984*=561276) returned 1 [0135.795] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x89078, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.795] ReadFile (in: hFile=0xc54, lpBuffer=0x627f960, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x627f970, lpOverlapped=0x0 | out: lpBuffer=0x627f960*, lpNumberOfBytesRead=0x627f970*=0x4, lpOverlapped=0x0) returned 1 [0135.875] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0135.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0135.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0135.876] NtQuerySystemTime (in: CurrentTime=0x627f8f8 | out: CurrentTime=0x627f8f8*=132462177151572000) returned 0x0 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0xb5f4e1 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x10aee43 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x43236fbf [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x36b261a1 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x22903496 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x62f33089 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x182a1606 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x40049909 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x6f13a8b7 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x54a17c3f [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x78d97261 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x1543e3d1 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x72ed3903 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x1c28dd4a [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x5b545ca3 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0xd15e627 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x3b8af90f [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x1cb3cd61 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x7b5b8eed [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x1d097ee1 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x2ba64745 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x5be33b8e [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x1741579f [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x78138b16 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x8241b4f [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x7d0e7538 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x6f189308 [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x647d7de [0135.876] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x538ff308 [0135.877] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x4f5bdba9 [0135.877] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x3cbeb76a [0135.877] RtlRandomEx (in: Seed=0x627f8f0 | out: Seed=0x627f8f0) returned 0x124b4473 [0135.888] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.888] ReadFile (in: hFile=0xc54, lpBuffer=0x7a8f4e8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x627f8f8, lpOverlapped=0x0 | out: lpBuffer=0x7a8f4e8*, lpNumberOfBytesRead=0x627f8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.891] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25470 [0135.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dc20 [0135.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0135.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0135.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a930f0 [0135.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0135.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0135.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0135.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc20) returned 1 [0135.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25470) returned 1 [0135.892] WriteFile (in: hFile=0xc54, lpBuffer=0x7a930f0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x627f8f8, lpOverlapped=0x0 | out: lpBuffer=0x7a930f0*, lpNumberOfBytesWritten=0x627f8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a930f0) returned 1 [0137.407] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x47400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.407] ReadFile (in: hFile=0xc54, lpBuffer=0x7a8f4e8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x627f8f8, lpOverlapped=0x0 | out: lpBuffer=0x7a8f4e8*, lpNumberOfBytesRead=0x627f8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.462] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x47400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0137.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0137.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0137.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0137.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9e508 [0137.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0137.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0137.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0137.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.463] WriteFile (in: hFile=0xc54, lpBuffer=0x7a9e508*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x627f8f8, lpOverlapped=0x0 | out: lpBuffer=0x7a9e508*, lpNumberOfBytesWritten=0x627f8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9e508) returned 1 [0142.533] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x8547c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.533] ReadFile (in: hFile=0xc54, lpBuffer=0x7a8f4e8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x627f8f8, lpOverlapped=0x0 | out: lpBuffer=0x7a8f4e8*, lpNumberOfBytesRead=0x627f8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0142.534] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x8547c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24a10 [0142.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0142.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddad8 [0142.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddad8) returned 1 [0142.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9e508 [0142.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddad8 [0142.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb3f0 [0142.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb3f0) returned 1 [0142.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0142.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a10) returned 1 [0142.535] WriteFile (in: hFile=0xc54, lpBuffer=0x7a9e508*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x627f8f8, lpOverlapped=0x0 | out: lpBuffer=0x7a9e508*, lpNumberOfBytesWritten=0x627f8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9e508) returned 1 [0146.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d958 [0146.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0146.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e797c8 [0146.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0146.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0146.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0146.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f68) returned 1 [0146.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x3e0a560 [0146.211] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.211] WriteFile (in: hFile=0xc54, lpBuffer=0x3e0a560*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x627f978, lpOverlapped=0x0 | out: lpBuffer=0x3e0a560*, lpNumberOfBytesWritten=0x627f978*=0x14e, lpOverlapped=0x0) returned 1 [0147.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0a560) returned 1 [0147.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e797c8) returned 1 [0147.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0147.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798e0) returned 1 [0147.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d958) returned 1 [0147.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0147.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0147.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3600) returned 1 [0147.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb99a0 [0147.229] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" [0147.229] wcscat (in: _Dest=0x3eb99a0, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.68814f") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.68814f" [0147.229] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.68814f", NtPathName=0x627f8f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0147.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62450 [0147.233] FlushFileBuffers (hFile=0xc54) returned 1 [0147.975] CloseHandle (hObject=0xc54) returned 1 [0149.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47718 [0149.418] wcscpy (in: _Dest=0x3e47718, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0149.418] wcscat (in: _Dest=0x3e47718, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" [0149.418] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\68814f-readme.txt")) returned 0x20 [0149.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47718) returned 1 [0149.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 Thread: id = 1058 os_tid = 0x1848 [0134.258] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg")) returned 0x20 [0134.788] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", dwFileAttributes=0x20) returned 1 [0137.586] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1db0 [0137.586] GetFileSizeEx (in: hFile=0x1db0, lpFileSize=0x414fbfc | out: lpFileSize=0x414fbfc*=777835) returned 1 [0137.586] SetFilePointerEx (in: hFile=0x1db0, liDistanceToMove=0xbde67, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.586] ReadFile (in: hFile=0x1db0, lpBuffer=0x414fbd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x414fbe8, lpOverlapped=0x0 | out: lpBuffer=0x414fbd8*, lpNumberOfBytesRead=0x414fbe8*=0x4, lpOverlapped=0x0) returned 1 [0137.621] SetFilePointerEx (in: hFile=0x1db0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0137.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0137.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0137.621] NtQuerySystemTime (in: CurrentTime=0x414fb70 | out: CurrentTime=0x414fb70*=132462177168888000) returned 0x0 [0137.621] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x3ae10a67 [0137.621] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x216278ac [0137.621] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x6c9a6233 [0137.621] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x7e25322b [0137.621] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x26a1af77 [0137.621] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x5ea5dbe6 [0137.621] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x48852f5 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x17d848f3 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x57661122 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x63fe1147 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x49ac7301 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x1a0f4d77 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x65841093 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x4ce5c30b [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x62f28adf [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x4263f7a4 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x33fc0018 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x275fc25d [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x67e959fd [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x4c25d1b [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x72c959ed [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x5ad2cb53 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0xafae06f [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x21981fd9 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x4f5e567b [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x4cec4cde [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x3786cec4 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x5b114db6 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x4d0d3de7 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x1e275aa4 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x376b95b0 [0137.622] RtlRandomEx (in: Seed=0x414fb68 | out: Seed=0x414fb68) returned 0x625f187f [0137.633] SetFilePointerEx (in: hFile=0x1db0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.633] ReadFile (in: hFile=0x1db0, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x414fb70, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0x414fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0137.651] SetFilePointerEx (in: hFile=0x1db0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25f68 [0137.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51278 [0137.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0137.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0137.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0137.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0137.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0137.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0137.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0137.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25f68) returned 1 [0137.652] WriteFile (in: hFile=0x1db0, lpBuffer=0x7bf9fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x414fb70, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesWritten=0x414fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0139.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0139.961] SetFilePointerEx (in: hFile=0x1db0, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.961] ReadFile (in: hFile=0x1db0, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x414fb70, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0x414fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0139.964] SetFilePointerEx (in: hFile=0x1db0, liDistanceToMove=0x61800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84df8 [0139.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dba8 [0139.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6788 [0139.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6788) returned 1 [0139.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0139.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6788 [0139.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0139.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0139.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dba8) returned 1 [0139.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84df8) returned 1 [0139.965] WriteFile (in: hFile=0x1db0, lpBuffer=0x7bf9fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x414fb70, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesWritten=0x414fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0144.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0144.245] SetFilePointerEx (in: hFile=0x1db0, liDistanceToMove=0xba26b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.245] ReadFile (in: hFile=0x1db0, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x414fb70, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0x414fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0144.292] SetFilePointerEx (in: hFile=0x1db0, liDistanceToMove=0xba26b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49698 [0144.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f0b0 [0144.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0144.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0144.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0144.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0144.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0144.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0144.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 [0144.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49698) returned 1 [0144.295] WriteFile (in: hFile=0x1db0, lpBuffer=0x7bf9fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x414fb70, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesWritten=0x414fb70*=0x3c00, lpOverlapped=0x0) returned 1 [0145.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0145.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b98 [0145.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0145.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37890 [0145.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0145.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6788 [0145.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6788) returned 1 [0145.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0145.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07b18) returned 1 [0145.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e0aac0 [0145.347] SetFilePointerEx (in: hFile=0x1db0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.347] WriteFile (in: hFile=0x1db0, lpBuffer=0x3e0aac0*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x414fbf0, lpOverlapped=0x0 | out: lpBuffer=0x3e0aac0*, lpNumberOfBytesWritten=0x414fbf0*=0x14a, lpOverlapped=0x0) returned 1 [0145.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0aac0) returned 1 [0145.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37890) returned 1 [0145.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0145.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37860) returned 1 [0145.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 [0145.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0145.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0145.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a48) returned 1 [0145.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3db00 [0145.350] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" [0145.350] wcscat (in: _Dest=0x3f3db00, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.68814f") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.68814f" [0145.350] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.68814f", NtPathName=0x414fb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6c00 [0145.353] FlushFileBuffers (hFile=0x1db0) returned 1 [0147.070] CloseHandle (hObject=0x1db0) returned 1 [0147.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a918 [0147.086] wcscpy (in: _Dest=0x3e1a918, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0147.086] wcscat (in: _Dest=0x3e1a918, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" [0147.086] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\68814f-readme.txt")) returned 0x20 [0147.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a918) returned 1 [0147.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 Thread: id = 1059 os_tid = 0x184c [0134.259] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg")) returned 0x20 [0134.788] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", dwFileAttributes=0x20) returned 1 [0134.793] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1de0 [0134.793] GetFileSizeEx (in: hFile=0x1de0, lpFileSize=0x94afcd4 | out: lpFileSize=0x94afcd4*=620888) returned 1 [0134.793] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x97954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.793] ReadFile (in: hFile=0x1de0, lpBuffer=0x94afcb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94afcc0, lpOverlapped=0x0 | out: lpBuffer=0x94afcb0*, lpNumberOfBytesRead=0x94afcc0*=0x4, lpOverlapped=0x0) returned 1 [0134.796] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54250 [0134.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0134.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0134.796] NtQuerySystemTime (in: CurrentTime=0x94afc48 | out: CurrentTime=0x94afc48*=132462177141276000) returned 0x0 [0134.796] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x3db10c26 [0134.796] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x6997b4ae [0134.796] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x77f38950 [0134.796] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x7fe8df91 [0134.796] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x298d250f [0134.796] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x446bb80a [0134.796] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x4c62cb5f [0134.796] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x115884de [0134.796] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x17f4f020 [0134.796] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x61e15e81 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x2532c9e [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x5151c4f5 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x5e3d6e4 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x7a7a14d0 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x54e6e333 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x3485b3ec [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x4196614f [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x1feca75f [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x1e5348f [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x5626dca7 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x64e97fb9 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x3a64ce39 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x2e889f32 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x669f9a47 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x72725c06 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x1fd7635b [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x1e245045 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0xc6e016 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x78c89982 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x415c3b11 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0xeda8200 [0134.797] RtlRandomEx (in: Seed=0x94afc40 | out: Seed=0x94afc40) returned 0x67b638c1 [0134.807] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.807] ReadFile (in: hFile=0x1de0, lpBuffer=0x7caeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94afc48, lpOverlapped=0x0 | out: lpBuffer=0x7caeb90*, lpNumberOfBytesRead=0x94afc48*=0x3c00, lpOverlapped=0x0) returned 1 [0134.997] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a258a8 [0134.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0134.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0134.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0134.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb63a0 [0134.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0134.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0134.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2e8) returned 1 [0134.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0134.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258a8) returned 1 [0134.998] WriteFile (in: hFile=0x1de0, lpBuffer=0x7cb63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94afc48, lpOverlapped=0x0 | out: lpBuffer=0x7cb63a0*, lpNumberOfBytesWritten=0x94afc48*=0x3c00, lpOverlapped=0x0) returned 1 [0136.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63a0) returned 1 [0136.846] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x4ec00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.846] ReadFile (in: hFile=0x1de0, lpBuffer=0x7caeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94afc48, lpOverlapped=0x0 | out: lpBuffer=0x7caeb90*, lpNumberOfBytesRead=0x94afc48*=0x3c00, lpOverlapped=0x0) returned 1 [0137.097] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x4ec00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e566d8 [0137.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3de00 [0137.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0137.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3060) returned 1 [0137.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c98360 [0137.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0137.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0137.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0137.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0137.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e566d8) returned 1 [0137.098] WriteFile (in: hFile=0x1de0, lpBuffer=0x7c98360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94afc48, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesWritten=0x94afc48*=0x3c00, lpOverlapped=0x0) returned 1 [0142.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c98360) returned 1 [0142.559] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x93d58, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.559] ReadFile (in: hFile=0x1de0, lpBuffer=0x7caeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x94afc48, lpOverlapped=0x0 | out: lpBuffer=0x7caeb90*, lpNumberOfBytesRead=0x94afc48*=0x3c00, lpOverlapped=0x0) returned 1 [0142.560] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x93d58, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24a10 [0142.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0142.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb3f0 [0142.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb3f0) returned 1 [0142.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c98360 [0142.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb3f0 [0142.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd948 [0142.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd948) returned 1 [0142.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0142.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a10) returned 1 [0142.562] WriteFile (in: hFile=0x1de0, lpBuffer=0x7c98360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x94afc48, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesWritten=0x94afc48*=0x3c00, lpOverlapped=0x0) returned 1 [0146.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c98360) returned 1 [0146.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1e0a8 [0146.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0146.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37830 [0146.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0146.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0146.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfc8) returned 1 [0146.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24f68) returned 1 [0146.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x146) returned 0x3e0b2d0 [0146.205] SetFilePointerEx (in: hFile=0x1de0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.205] WriteFile (in: hFile=0x1de0, lpBuffer=0x3e0b2d0*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x94afcc8, lpOverlapped=0x0 | out: lpBuffer=0x3e0b2d0*, lpNumberOfBytesWritten=0x94afcc8*=0x146, lpOverlapped=0x0) returned 1 [0146.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b2d0) returned 1 [0146.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37830) returned 1 [0146.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0146.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37800) returned 1 [0146.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e0a8) returned 1 [0146.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e541d8) returned 1 [0146.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54138) returned 1 [0146.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54188) returned 1 [0146.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47a98 [0146.994] wcscpy (in: _Dest=0x3e47a98, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" [0146.994] wcscat (in: _Dest=0x3e47a98, _Source=".68814f" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.68814f") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.68814f" [0146.994] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.68814f", NtPathName=0x94afc40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad50b0 [0146.999] FlushFileBuffers (hFile=0x1de0) returned 1 [0147.070] CloseHandle (hObject=0x1de0) returned 1 [0147.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47a98 [0147.075] wcscpy (in: _Dest=0x3e47a98, _Source="C:\\Users\\Public\\Pictures\\Sample Pictures\\" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\" [0147.075] wcscat (in: _Dest=0x3e47a98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt") returned="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" [0147.075] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\68814F-Readme.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\68814f-readme.txt")) returned 0x20 [0147.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a98) returned 1 [0147.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23920) returned 1 Thread: id = 1060 os_tid = 0x1850 [0134.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf")) returned 0x20 [0136.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", dwFileAttributes=0x20) returned 0 [0136.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.110] GetLastError () returned 0x5 [0136.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF", dwFileAttributes=0x20) returned 0 [0136.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 1061 os_tid = 0x1854 [0134.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml")) returned 0x20 [0136.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML", dwFileAttributes=0x20) returned 0 [0136.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.167] GetLastError () returned 0x5 [0136.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML", dwFileAttributes=0x20) returned 0 [0136.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 1062 os_tid = 0x1858 [0134.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf")) returned 0x20 [0136.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF", dwFileAttributes=0x20) returned 0 [0136.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.163] GetLastError () returned 0x5 [0136.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF", dwFileAttributes=0x20) returned 0 [0136.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19318) returned 1 Thread: id = 1063 os_tid = 0x185c [0134.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf")) returned 0x20 [0136.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF", dwFileAttributes=0x20) returned 0 [0136.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.165] GetLastError () returned 0x5 [0136.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF", dwFileAttributes=0x20) returned 0 [0136.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a498) returned 1 Thread: id = 1064 os_tid = 0x1860 [0134.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf")) returned 0x20 [0136.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF", dwFileAttributes=0x20) returned 0 [0136.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.159] GetLastError () returned 0x5 [0136.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF", dwFileAttributes=0x20) returned 0 [0136.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 1065 os_tid = 0x1864 [0134.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf")) returned 0x20 [0136.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF", dwFileAttributes=0x20) returned 0 [0136.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.161] GetLastError () returned 0x5 [0136.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF", dwFileAttributes=0x20) returned 0 [0136.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 1066 os_tid = 0x1868 [0134.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6e70 [0134.274] wcscpy (in: _Dest=0x2ff6e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}" [0134.274] wcscat (in: _Dest=0x2ff6e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\" [0134.274] wcscat (in: _Dest=0x2ff6e70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*" [0134.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3f00 [0134.274] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Identities\\{74A13782-B361-4204-9DAA-0A3D49DA4337}\\*", lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0134.275] wcscmp (_String1=".", _String2=".") returned 0 [0134.275] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.275] wcscmp (_String1="..", _String2=".") returned 1 [0134.275] wcscmp (_String1="..", _String2="..") returned 0 [0134.276] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e728d0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x8e728d0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x21947569, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.276] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0134.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f00) returned 1 [0134.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 [0134.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 1067 os_tid = 0x186c [0134.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx")) returned 0x20 [0137.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx", dwFileAttributes=0x20) returned 0 [0137.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.069] GetLastError () returned 0x5 [0137.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx", dwFileAttributes=0x20) returned 0 [0137.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 1068 os_tid = 0x1870 [0134.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx")) returned 0x20 [0137.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx", dwFileAttributes=0x20) returned 0 [0137.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.074] GetLastError () returned 0x5 [0137.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx", dwFileAttributes=0x20) returned 0 [0137.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb57c8) returned 1 Thread: id = 1069 os_tid = 0x1874 [0134.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx")) returned 0x20 [0137.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx", dwFileAttributes=0x20) returned 0 [0137.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.076] GetLastError () returned 0x5 [0137.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx", dwFileAttributes=0x20) returned 0 [0137.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 Thread: id = 1070 os_tid = 0x1878 [0134.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx")) returned 0x20 [0137.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx", dwFileAttributes=0x20) returned 0 [0137.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.078] GetLastError () returned 0x5 [0137.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx", dwFileAttributes=0x20) returned 0 [0137.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5a28) returned 1 Thread: id = 1071 os_tid = 0x187c [0134.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx")) returned 0x20 [0137.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx", dwFileAttributes=0x20) returned 0 [0137.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.080] GetLastError () returned 0x5 [0137.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx", dwFileAttributes=0x20) returned 0 [0137.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1838) returned 1 Thread: id = 1072 os_tid = 0x1880 [0134.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx")) returned 0x20 [0137.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx", dwFileAttributes=0x20) returned 0 [0137.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.081] GetLastError () returned 0x5 [0137.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx", dwFileAttributes=0x20) returned 0 [0137.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df25b8) returned 1 Thread: id = 1073 os_tid = 0x1884 [0134.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx")) returned 0x20 [0137.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx", dwFileAttributes=0x20) returned 0 [0137.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.083] GetLastError () returned 0x5 [0137.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx", dwFileAttributes=0x20) returned 0 [0137.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2648) returned 1 Thread: id = 1074 os_tid = 0x1888 [0134.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44330 [0134.285] wcscpy (in: _Dest=0x3d44330, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0134.285] wcscat (in: _Dest=0x3d44330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0134.285] wcscat (in: _Dest=0x3d44330, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*" [0134.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3f00 [0134.285] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f53a50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c63d30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff90 [0138.891] wcscmp (_String1=".", _String2=".") returned 0 [0138.891] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f53a50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c63d30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.031] wcscmp (_String1="..", _String2=".") returned 1 [0140.031] wcscmp (_String1="..", _String2="..") returned 0 [0140.031] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ad9900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5ad9900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1 [0140.031] wcscmp (_String1="Adjacency.xml", _String2=".") returned 1 [0140.031] wcscmp (_String1="Adjacency.xml", _String2="..") returned 1 [0140.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053a68 [0140.032] wcscpy (in: _Dest=0x3053a68, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0140.032] wcscat (in: _Dest=0x3053a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0140.032] wcscat (in: _Dest=0x3053a68, _Source="Adjacency.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" [0146.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1894 [0146.128] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9412000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9412000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0146.129] wcscmp (_String1="Angles.xml", _String2=".") returned 1 [0146.129] wcscmp (_String1="Angles.xml", _String2="..") returned 1 [0146.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x325320 [0146.129] wcscpy (in: _Dest=0x325320, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.129] wcscat (in: _Dest=0x325320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.129] wcscat (in: _Dest=0x325320, _Source="Angles.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" [0146.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x325320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0146.130] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564f8900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x564f8900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0146.131] wcscmp (_String1="Apex.xml", _String2=".") returned 1 [0146.131] wcscmp (_String1="Apex.xml", _String2="..") returned 1 [0146.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5b80 [0146.131] wcscpy (in: _Dest=0x3df5b80, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.131] wcscat (in: _Dest=0x3df5b80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.131] wcscat (in: _Dest=0x3df5b80, _Source="Apex.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" [0146.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8 [0146.133] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x944cad00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x944cad00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1 [0146.133] wcscmp (_String1="Apothecary.xml", _String2=".") returned 1 [0146.133] wcscmp (_String1="Apothecary.xml", _String2="..") returned 1 [0146.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66610 [0146.133] wcscpy (in: _Dest=0x7a66610, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.133] wcscat (in: _Dest=0x7a66610, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.133] wcscat (in: _Dest=0x7a66610, _Source="Apothecary.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" [0146.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0146.135] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e31000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59e31000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0146.135] wcscmp (_String1="Aspect.xml", _String2=".") returned 1 [0146.135] wcscmp (_String1="Aspect.xml", _String2="..") returned 1 [0146.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3251d0 [0146.135] wcscpy (in: _Dest=0x3251d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.135] wcscat (in: _Dest=0x3251d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.135] wcscat (in: _Dest=0x3251d0, _Source="Aspect.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" [0146.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3251d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0146.138] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e03400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97e03400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0146.138] wcscmp (_String1="Austin.xml", _String2=".") returned 1 [0146.138] wcscmp (_String1="Austin.xml", _String2="..") returned 1 [0146.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x326580 [0146.138] wcscpy (in: _Dest=0x326580, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.138] wcscat (in: _Dest=0x326580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.138] wcscat (in: _Dest=0x326580, _Source="Austin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" [0146.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x326580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0146.140] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd4a700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f53a50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbcd4a700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1 [0146.140] wcscmp (_String1="Black Tie.xml", _String2=".") returned 1 [0146.140] wcscmp (_String1="Black Tie.xml", _String2="..") returned 1 [0146.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x326430 [0146.140] wcscpy (in: _Dest=0x326430, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.140] wcscat (in: _Dest=0x326430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.140] wcscat (in: _Dest=0x326430, _Source="Black Tie.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" [0146.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x326430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0146.142] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d769700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d769700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0146.142] wcscmp (_String1="Civic.xml", _String2=".") returned 1 [0146.142] wcscmp (_String1="Civic.xml", _String2="..") returned 1 [0146.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4dc0 [0146.142] wcscpy (in: _Dest=0x3df4dc0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.142] wcscat (in: _Dest=0x3df4dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.142] wcscat (in: _Dest=0x3df4dc0, _Source="Civic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" [0146.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0146.144] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b73bb00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b73bb00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0146.144] wcscmp (_String1="Clarity.xml", _String2=".") returned 1 [0146.144] wcscmp (_String1="Clarity.xml", _String2="..") returned 1 [0146.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f0f8 [0146.144] wcscpy (in: _Dest=0x7a5f0f8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.144] wcscat (in: _Dest=0x7a5f0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.144] wcscat (in: _Dest=0x7a5f0f8, _Source="Clarity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" [0146.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0146.146] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0682e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0682e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1 [0146.146] wcscmp (_String1="Composite.xml", _String2=".") returned 1 [0146.146] wcscmp (_String1="Composite.xml", _String2="..") returned 1 [0146.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f1a0 [0146.146] wcscpy (in: _Dest=0x7a5f1a0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.146] wcscat (in: _Dest=0x7a5f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.147] wcscat (in: _Dest=0x7a5f1a0, _Source="Composite.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" [0146.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0146.148] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610a1e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x610a1e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1 [0146.148] wcscmp (_String1="Concourse.xml", _String2=".") returned 1 [0146.148] wcscmp (_String1="Concourse.xml", _String2="..") returned 1 [0146.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f248 [0146.149] wcscpy (in: _Dest=0x7a5f248, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.149] wcscat (in: _Dest=0x7a5f248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.149] wcscat (in: _Dest=0x7a5f248, _Source="Concourse.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" [0146.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0146.151] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fbb500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3fbb500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0146.151] wcscmp (_String1="Couture.xml", _String2=".") returned 1 [0146.151] wcscmp (_String1="Couture.xml", _String2="..") returned 1 [0146.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f2f0 [0146.151] wcscpy (in: _Dest=0x7a5f2f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.151] wcscat (in: _Dest=0x7a5f2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.151] wcscat (in: _Dest=0x7a5f2f0, _Source="Couture.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" [0146.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0146.152] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c06900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8c06900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1 [0146.152] wcscmp (_String1="Elemental.xml", _String2=".") returned 1 [0146.152] wcscmp (_String1="Elemental.xml", _String2="..") returned 1 [0146.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f398 [0146.153] wcscpy (in: _Dest=0x7a5f398, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.153] wcscat (in: _Dest=0x7a5f398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.153] wcscat (in: _Dest=0x7a5f398, _Source="Elemental.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" [0146.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0146.154] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c7800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x636c7800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0146.154] wcscmp (_String1="Equity.xml", _String2=".") returned 1 [0146.154] wcscmp (_String1="Equity.xml", _String2="..") returned 1 [0146.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f440 [0146.154] wcscpy (in: _Dest=0x7a5f440, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.154] wcscat (in: _Dest=0x7a5f440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.154] wcscat (in: _Dest=0x7a5f440, _Source="Equity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" [0146.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c [0146.156] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd61500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9dd61500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1 [0146.156] wcscmp (_String1="Essential.xml", _String2=".") returned 1 [0146.156] wcscmp (_String1="Essential.xml", _String2="..") returned 1 [0146.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f4e8 [0146.156] wcscpy (in: _Dest=0x7a5f4e8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.156] wcscat (in: _Dest=0x7a5f4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.156] wcscat (in: _Dest=0x7a5f4e8, _Source="Essential.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" [0146.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0146.158] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc53f000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc53f000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1 [0146.158] wcscmp (_String1="Executive.xml", _String2=".") returned 1 [0146.158] wcscmp (_String1="Executive.xml", _String2="..") returned 1 [0146.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f590 [0146.158] wcscpy (in: _Dest=0x7a5f590, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.158] wcscat (in: _Dest=0x7a5f590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.159] wcscat (in: _Dest=0x7a5f590, _Source="Executive.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" [0146.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14 [0146.160] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a938600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a938600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0146.160] wcscmp (_String1="Flow.xml", _String2=".") returned 1 [0146.160] wcscmp (_String1="Flow.xml", _String2="..") returned 1 [0146.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6080 [0146.160] wcscpy (in: _Dest=0x3df6080, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.161] wcscat (in: _Dest=0x3df6080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.161] wcscat (in: _Dest=0x3df6080, _Source="Flow.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" [0146.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc5c [0146.162] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ffff00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x66ffff00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0146.162] wcscmp (_String1="Foundry.xml", _String2=".") returned 1 [0146.162] wcscmp (_String1="Foundry.xml", _String2="..") returned 1 [0146.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f638 [0146.162] wcscpy (in: _Dest=0x7a5f638, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.162] wcscat (in: _Dest=0x7a5f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.162] wcscat (in: _Dest=0x7a5f638, _Source="Foundry.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" [0146.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40 [0146.196] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e662000, ftCreationTime.dwHighDateTime=0x1c6baf0, ftLastAccessTime.dwLowDateTime=0x76f79bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e662000, ftLastWriteTime.dwHighDateTime=0x1c6baf0, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="GRAYSC~1.XML")) returned 1 [0146.196] wcscmp (_String1="Grayscale.xml", _String2=".") returned 1 [0146.196] wcscmp (_String1="Grayscale.xml", _String2="..") returned 1 [0146.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f6e0 [0146.196] wcscpy (in: _Dest=0x7a5f6e0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.196] wcscat (in: _Dest=0x7a5f6e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.196] wcscat (in: _Dest=0x7a5f6e0, _Source="Grayscale.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" [0146.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0146.992] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1699c00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa1699c00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0146.992] wcscmp (_String1="Grid.xml", _String2=".") returned 1 [0146.992] wcscmp (_String1="Grid.xml", _String2="..") returned 1 [0146.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62310 [0146.992] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0146.992] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0146.992] wcscat (in: _Dest=0x7a62310, _Source="Grid.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" [0151.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c [0151.494] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd2300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4fd2300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1 [0151.494] wcscmp (_String1="Hardcover.xml", _String2=".") returned 1 [0151.494] wcscmp (_String1="Hardcover.xml", _String2="..") returned 1 [0151.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f638 [0151.495] wcscpy (in: _Dest=0x7a5f638, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.495] wcscat (in: _Dest=0x7a5f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.495] wcscat (in: _Dest=0x7a5f638, _Source="Hardcover.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" [0151.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0 [0151.496] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe77700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfe77700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0151.496] wcscmp (_String1="Horizon.xml", _String2=".") returned 1 [0151.496] wcscmp (_String1="Horizon.xml", _String2="..") returned 1 [0151.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e480 [0151.496] wcscpy (in: _Dest=0x7a5e480, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.496] wcscat (in: _Dest=0x7a5e480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.496] wcscat (in: _Dest=0x7a5e480, _Source="Horizon.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" [0151.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e64 [0151.497] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf5e000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6cf5e000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0151.497] wcscmp (_String1="Median.xml", _String2=".") returned 1 [0151.497] wcscmp (_String1="Median.xml", _String2="..") returned 1 [0151.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f6e0 [0151.497] wcscpy (in: _Dest=0x7a5f6e0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.497] wcscat (in: _Dest=0x7a5f6e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.497] wcscat (in: _Dest=0x7a5f6e0, _Source="Median.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" [0151.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8 [0151.498] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70896700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x70896700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0151.498] wcscmp (_String1="Metro.xml", _String2=".") returned 1 [0151.498] wcscmp (_String1="Metro.xml", _String2="..") returned 1 [0151.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a621d0 [0151.498] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.498] wcscat (in: _Dest=0x7a621d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.498] wcscat (in: _Dest=0x7a621d0, _Source="Metro.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" [0151.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a621d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c [0151.504] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x741cee00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x741cee00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0151.504] wcscmp (_String1="Module.xml", _String2=".") returned 1 [0151.504] wcscmp (_String1="Module.xml", _String2="..") returned 1 [0151.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f590 [0151.504] wcscpy (in: _Dest=0x7a5f590, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.504] wcscat (in: _Dest=0x7a5f590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.504] wcscat (in: _Dest=0x7a5f590, _Source="Module.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" [0151.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c54 [0151.506] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd249d100, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd249d100, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1 [0151.506] wcscmp (_String1="Newsprint.xml", _String2=".") returned 1 [0151.506] wcscmp (_String1="Newsprint.xml", _String2="..") returned 1 [0151.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f440 [0151.506] wcscpy (in: _Dest=0x7a5f440, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.506] wcscat (in: _Dest=0x7a5f440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.506] wcscat (in: _Dest=0x7a5f440, _Source="Newsprint.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" [0151.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c3c [0151.507] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b07500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b07500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0151.507] wcscmp (_String1="Opulent.xml", _String2=".") returned 1 [0151.507] wcscmp (_String1="Opulent.xml", _String2="..") returned 1 [0151.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f050 [0151.507] wcscpy (in: _Dest=0x7a5f050, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.507] wcscat (in: _Dest=0x7a5f050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.507] wcscat (in: _Dest=0x7a5f050, _Source="Opulent.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" [0151.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c34 [0151.508] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a12cf00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7a12cf00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0151.508] wcscmp (_String1="Oriel.xml", _String2=".") returned 1 [0151.508] wcscmp (_String1="Oriel.xml", _String2="..") returned 1 [0151.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63df0 [0151.508] wcscpy (in: _Dest=0x7a63df0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.508] wcscat (in: _Dest=0x7a63df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.508] wcscat (in: _Dest=0x7a63df0, _Source="Oriel.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" [0151.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bbc [0151.509] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da65600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7da65600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0151.510] wcscmp (_String1="Origin.xml", _String2=".") returned 1 [0151.510] wcscmp (_String1="Origin.xml", _String2="..") returned 1 [0151.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e3d8 [0151.510] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.510] wcscat (in: _Dest=0x7a5e3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.510] wcscat (in: _Dest=0x7a5e3d8, _Source="Origin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" [0151.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb8 [0151.511] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8139dd00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8139dd00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0151.511] wcscmp (_String1="Paper.xml", _String2=".") returned 1 [0151.511] wcscmp (_String1="Paper.xml", _String2="..") returned 1 [0151.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63530 [0151.511] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.511] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.511] wcscat (in: _Dest=0x7a63530, _Source="Paper.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" [0151.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb4 [0151.512] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75f7d00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa75f7d00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1 [0151.512] wcscmp (_String1="Perspective.xml", _String2=".") returned 1 [0151.512] wcscmp (_String1="Perspective.xml", _String2="..") returned 1 [0151.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b7c8 [0151.512] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.512] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.512] wcscat (in: _Dest=0x35b7c8, _Source="Perspective.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" [0151.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bb0 [0151.514] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaf30400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaf30400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0151.514] wcscmp (_String1="Pushpin.xml", _String2=".") returned 1 [0151.514] wcscmp (_String1="Pushpin.xml", _String2="..") returned 1 [0151.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e528 [0151.514] wcscpy (in: _Dest=0x7a5e528, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.514] wcscat (in: _Dest=0x7a5e528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.514] wcscat (in: _Dest=0x7a5e528, _Source="Pushpin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" [0151.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bac [0151.515] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5dd5800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5dd5800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0151.515] wcscmp (_String1="Slipstream.xml", _String2=".") returned 1 [0151.516] wcscmp (_String1="Slipstream.xml", _String2="..") returned 1 [0151.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b9d8 [0151.516] wcscpy (in: _Dest=0x35b9d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.516] wcscat (in: _Dest=0x35b9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.516] wcscat (in: _Dest=0x35b9d8, _Source="Slipstream.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" [0151.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc8 [0151.517] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x839c3700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x839c3700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0151.518] wcscmp (_String1="Solstice.xml", _String2=".") returned 1 [0151.518] wcscmp (_String1="Solstice.xml", _String2="..") returned 1 [0151.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e678 [0151.518] wcscpy (in: _Dest=0x7a5e678, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.518] wcscat (in: _Dest=0x7a5e678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.518] wcscat (in: _Dest=0x7a5e678, _Source="Solstice.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" [0151.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba8 [0151.520] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x872fbe00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x872fbe00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0151.520] wcscmp (_String1="Technic.xml", _String2=".") returned 1 [0151.520] wcscmp (_String1="Technic.xml", _String2="..") returned 1 [0151.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e720 [0151.520] wcscpy (in: _Dest=0x7a5e720, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.520] wcscat (in: _Dest=0x7a5e720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.520] wcscat (in: _Dest=0x7a5e720, _Source="Technic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" [0151.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724 [0151.522] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafb7b800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafb7b800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0151.522] wcscmp (_String1="Thatch.xml", _String2=".") returned 1 [0151.522] wcscmp (_String1="Thatch.xml", _String2="..") returned 1 [0151.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e7c8 [0151.523] wcscpy (in: _Dest=0x7a5e7c8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.523] wcscat (in: _Dest=0x7a5e7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.523] wcscat (in: _Dest=0x7a5e7c8, _Source="Thatch.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" [0151.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8 [0151.524] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac34500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ac34500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0151.524] wcscmp (_String1="Trek.xml", _String2=".") returned 1 [0151.524] wcscmp (_String1="Trek.xml", _String2="..") returned 1 [0151.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a626d0 [0151.524] wcscpy (in: _Dest=0x7a626d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.524] wcscat (in: _Dest=0x7a626d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.525] wcscat (in: _Dest=0x7a626d0, _Source="Trek.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" [0151.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a626d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280 [0151.526] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e56cc00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e56cc00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0151.526] wcscmp (_String1="Urban.xml", _String2=".") returned 1 [0151.526] wcscmp (_String1="Urban.xml", _String2="..") returned 1 [0151.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63fd0 [0151.526] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.526] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.526] wcscat (in: _Dest=0x7a63fd0, _Source="Urban.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" [0151.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0151.528] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b92600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90b92600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0151.528] wcscmp (_String1="Verve.xml", _String2=".") returned 1 [0151.528] wcscmp (_String1="Verve.xml", _String2="..") returned 1 [0151.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62950 [0151.529] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.529] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.529] wcscat (in: _Dest=0x7a62950, _Source="Verve.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" [0151.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0151.530] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21a1200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb21a1200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0151.530] wcscmp (_String1="Waveform.xml", _String2=".") returned 1 [0151.530] wcscmp (_String1="Waveform.xml", _String2="..") returned 1 [0151.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e870 [0151.531] wcscpy (in: _Dest=0x7a5e870, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors" [0151.531] wcscat (in: _Dest=0x7a5e870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\" [0151.531] wcscat (in: _Dest=0x7a5e870, _Source="Waveform.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" [0151.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0151.532] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21a1200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x86c63d30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb21a1200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0151.533] FindClose (in: hFindFile=0x3dcff90 | out: hFindFile=0x3dcff90) returned 1 [0151.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f00) returned 1 [0151.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44330) returned 1 [0151.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45020) returned 1 Thread: id = 1075 os_tid = 0x188c [0134.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6ef0 [0134.286] wcscpy (in: _Dest=0x3eb6ef0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0134.286] wcscat (in: _Dest=0x3eb6ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0134.286] wcscat (in: _Dest=0x3eb6ef0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*" [0134.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2220 [0134.286] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf650 [0138.890] wcscmp (_String1=".", _String2=".") returned 0 [0138.890] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9db1e10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.622] wcscmp (_String1="..", _String2=".") returned 1 [0141.622] wcscmp (_String1="..", _String2="..") returned 0 [0141.622] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5492d100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94788d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5492d100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="ADJACE~1.EFT")) returned 1 [0141.622] wcscmp (_String1="Adjacency.eftx", _String2=".") returned 1 [0141.622] wcscmp (_String1="Adjacency.eftx", _String2="..") returned 1 [0141.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b5b8 [0141.623] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0141.623] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0141.623] wcscat (in: _Dest=0x35b5b8, _Source="Adjacency.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" [0164.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0164.995] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f52b00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe949ea30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56f52b00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="ANGLES~1.EFT")) returned 1 [0164.995] wcscmp (_String1="Angles.eftx", _String2=".") returned 1 [0164.995] wcscmp (_String1="Angles.eftx", _String2="..") returned 1 [0164.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053bb8 [0164.996] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0164.996] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0164.996] wcscat (in: _Dest=0x3053bb8, _Source="Angles.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" [0164.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0164.997] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a13a00, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe949ea30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf1a13a00, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="APEX~1.EFT")) returned 1 [0164.997] wcscmp (_String1="Apex.eftx", _String2=".") returned 1 [0164.998] wcscmp (_String1="Apex.eftx", _String2="..") returned 1 [0164.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053fa8 [0164.998] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0164.998] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0164.998] wcscat (in: _Dest=0x3053fa8, _Source="Apex.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" [0164.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0164.999] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3200b800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3200b800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="APOTHE~1.EFT")) returned 1 [0164.999] wcscmp (_String1="Apothecary.eftx", _String2=".") returned 1 [0164.999] wcscmp (_String1="Apothecary.eftx", _String2="..") returned 1 [0164.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a666c0 [0165.000] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.000] wcscat (in: _Dest=0x7a666c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.000] wcscat (in: _Dest=0x7a666c0, _Source="Apothecary.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" [0165.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a666c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0165.001] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf534c100, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe94c4b90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf534c100, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="ASPECT~1.EFT")) returned 1 [0165.001] wcscmp (_String1="Aspect.eftx", _String2=".") returned 1 [0165.001] wcscmp (_String1="Aspect.eftx", _String2="..") returned 1 [0165.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053c60 [0165.001] wcscpy (in: _Dest=0x3053c60, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.001] wcscat (in: _Dest=0x3053c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.001] wcscat (in: _Dest=0x3053c60, _Source="Aspect.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" [0165.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0165.003] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34631200, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94eacf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34631200, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="AUSTIN~1.EFT")) returned 1 [0165.003] wcscmp (_String1="Austin.eftx", _String2=".") returned 1 [0165.003] wcscmp (_String1="Austin.eftx", _String2="..") returned 1 [0165.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053480 [0165.003] wcscpy (in: _Dest=0x3053480, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.003] wcscat (in: _Dest=0x3053480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.003] wcscat (in: _Dest=0x3053480, _Source="Austin.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" [0165.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0165.004] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb9df00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe94eacf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5bb9df00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="BLACKT~1.EFT")) returned 1 [0165.004] wcscmp (_String1="Black Tie.eftx", _String2=".") returned 1 [0165.004] wcscmp (_String1="Black Tie.eftx", _String2="..") returned 1 [0165.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66980 [0165.004] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.004] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.004] wcscat (in: _Dest=0x7a66980, _Source="Black Tie.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" [0165.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0165.005] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8c84800, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9510e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8c84800, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="CIVIC~1.EFT")) returned 1 [0165.006] wcscmp (_String1="Civic.eftx", _String2=".") returned 1 [0165.006] wcscmp (_String1="Civic.eftx", _String2="..") returned 1 [0165.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053288 [0165.006] wcscpy (in: _Dest=0x3053288, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.006] wcscat (in: _Dest=0x3053288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.006] wcscat (in: _Dest=0x3053288, _Source="Civic.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" [0165.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0165.007] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f69900, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9536fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37f69900, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="CLARIT~1.EFT")) returned 1 [0165.007] wcscmp (_String1="Clarity.eftx", _String2=".") returned 1 [0165.007] wcscmp (_String1="Clarity.eftx", _String2="..") returned 1 [0165.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053918 [0165.007] wcscpy (in: _Dest=0x3053918, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.007] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.007] wcscat (in: _Dest=0x3053918, _Source="Clarity.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" [0165.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b8 [0165.008] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4d6600, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe955d110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5f4d6600, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="COMPOS~1.EFT")) returned 1 [0165.008] wcscmp (_String1="Composite.eftx", _String2=".") returned 1 [0165.008] wcscmp (_String1="Composite.eftx", _String2="..") returned 1 [0165.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66820 [0165.009] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.009] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.009] wcscat (in: _Dest=0x7a66820, _Source="Composite.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" [0165.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0165.010] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb2aa200, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe9583270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfb2aa200, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="CONCOU~1.EFT")) returned 1 [0165.010] wcscmp (_String1="Concourse.eftx", _String2=".") returned 1 [0165.011] wcscmp (_String1="Concourse.eftx", _String2="..") returned 1 [0165.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66770 [0165.011] wcscpy (in: _Dest=0x7a66770, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.011] wcscat (in: _Dest=0x7a66770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.011] wcscat (in: _Dest=0x7a66770, _Source="Concourse.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" [0165.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b0 [0165.012] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64121a00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe95cf530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64121a00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="COUTUR~1.EFT")) returned 1 [0165.012] wcscmp (_String1="Couture.eftx", _String2=".") returned 1 [0165.012] wcscmp (_String1="Couture.eftx", _String2="..") returned 1 [0165.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053870 [0165.012] wcscpy (in: _Dest=0x3053870, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.012] wcscat (in: _Dest=0x3053870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.012] wcscat (in: _Dest=0x3053870, _Source="Couture.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" [0165.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0165.013] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6ce00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe961b7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68d6ce00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="ELEMEN~1.EFT")) returned 1 [0165.013] wcscmp (_String1="Elemental.eftx", _String2=".") returned 1 [0165.013] wcscmp (_String1="Elemental.eftx", _String2="..") returned 1 [0165.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66400 [0165.013] wcscpy (in: _Dest=0x7a66400, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.013] wcscat (in: _Dest=0x7a66400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.014] wcscat (in: _Dest=0x7a66400, _Source="Elemental.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" [0165.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0165.015] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfebe2900, ftCreationTime.dwHighDateTime=0x1cbdf3f, ftLastAccessTime.dwLowDateTime=0xe961b7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfebe2900, ftLastWriteTime.dwHighDateTime=0x1cbdf3f, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="EQUITY~1.EFT")) returned 1 [0165.015] wcscmp (_String1="Equity.eftx", _String2=".") returned 1 [0165.015] wcscmp (_String1="Equity.eftx", _String2="..") returned 1 [0165.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053528 [0165.015] wcscpy (in: _Dest=0x3053528, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.015] wcscat (in: _Dest=0x3053528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.015] wcscat (in: _Dest=0x3053528, _Source="Equity.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" [0165.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0165.016] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8a2000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3b8a2000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="ESSENT~1.EFT")) returned 1 [0165.016] wcscmp (_String1="Essential.eftx", _String2=".") returned 1 [0165.016] wcscmp (_String1="Essential.eftx", _String2="..") returned 1 [0165.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a664b0 [0165.016] wcscpy (in: _Dest=0x7a664b0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.017] wcscat (in: _Dest=0x7a664b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.017] wcscat (in: _Dest=0x7a664b0, _Source="Essential.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" [0165.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a664b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0165.018] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b392800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9641950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b392800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="EXECUT~1.EFT")) returned 1 [0165.018] wcscmp (_String1="Executive.eftx", _String2=".") returned 1 [0165.018] wcscmp (_String1="Executive.eftx", _String2="..") returned 1 [0165.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66350 [0165.018] wcscpy (in: _Dest=0x7a66350, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.018] wcscat (in: _Dest=0x7a66350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.018] wcscat (in: _Dest=0x7a66350, _Source="Executive.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" [0165.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0165.019] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e53700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9667ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e53700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="FLOW~1.EFT")) returned 1 [0165.019] wcscmp (_String1="Flow.eftx", _String2=".") returned 1 [0165.019] wcscmp (_String1="Flow.eftx", _String2="..") returned 1 [0165.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053b10 [0165.019] wcscpy (in: _Dest=0x3053b10, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.019] wcscat (in: _Dest=0x3053b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.019] wcscat (in: _Dest=0x3053b10, _Source="Flow.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" [0165.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0165.020] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251b000, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe968dc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x251b000, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="FOUNDR~1.EFT")) returned 1 [0165.020] wcscmp (_String1="Foundry.eftx", _String2=".") returned 1 [0165.020] wcscmp (_String1="Foundry.eftx", _String2="..") returned 1 [0165.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053138 [0165.020] wcscpy (in: _Dest=0x3053138, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.020] wcscat (in: _Dest=0x3053138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.020] wcscat (in: _Dest=0x3053138, _Source="Foundry.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" [0165.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0165.021] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f1da700, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe968dc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f1da700, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="GRID~1.EFT")) returned 1 [0165.021] wcscmp (_String1="Grid.eftx", _String2=".") returned 1 [0165.021] wcscmp (_String1="Grid.eftx", _String2="..") returned 1 [0165.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053678 [0165.022] wcscpy (in: _Dest=0x3053678, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.022] wcscat (in: _Dest=0x3053678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.022] wcscat (in: _Dest=0x3053678, _Source="Grid.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" [0165.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0165.023] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b12e00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96b3d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x42b12e00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="HARDCO~1.EFT")) returned 1 [0165.023] wcscmp (_String1="Hardcover.eftx", _String2=".") returned 1 [0165.023] wcscmp (_String1="Hardcover.eftx", _String2="..") returned 1 [0165.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a662a0 [0165.023] wcscpy (in: _Dest=0x7a662a0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.023] wcscat (in: _Dest=0x7a662a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.023] wcscat (in: _Dest=0x7a662a0, _Source="Hardcover.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" [0165.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a662a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0165.024] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eccaf00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6eccaf00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="HORIZO~1.EFT")) returned 1 [0165.024] wcscmp (_String1="Horizon.eftx", _String2=".") returned 1 [0165.024] wcscmp (_String1="Horizon.eftx", _String2="..") returned 1 [0165.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053e58 [0165.024] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.024] wcscat (in: _Dest=0x3053e58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.024] wcscat (in: _Dest=0x3053e58, _Source="Horizon.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" [0165.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0165.026] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x978be00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe96d9ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x978be00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="MEDIAN~1.EFT")) returned 1 [0165.026] wcscmp (_String1="Median.eftx", _String2=".") returned 1 [0165.026] wcscmp (_String1="Median.eftx", _String2="..") returned 1 [0165.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053d08 [0165.026] wcscpy (in: _Dest=0x3053d08, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.026] wcscat (in: _Dest=0x3053d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.026] wcscat (in: _Dest=0x3053d08, _Source="Median.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" [0165.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0165.027] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb1800, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9700030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbdb1800, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="METRO~1.EFT")) returned 1 [0165.027] wcscmp (_String1="Metro.eftx", _String2=".") returned 1 [0165.027] wcscmp (_String1="Metro.eftx", _String2="..") returned 1 [0165.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3052df0 [0165.027] wcscpy (in: _Dest=0x3052df0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.027] wcscat (in: _Dest=0x3052df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.027] wcscat (in: _Dest=0x3052df0, _Source="Metro.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" [0165.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0165.029] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e9f00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9726190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf6e9f00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="MODULE~1.EFT")) returned 1 [0165.029] wcscmp (_String1="Module.eftx", _String2=".") returned 1 [0165.029] wcscmp (_String1="Module.eftx", _String2="..") returned 1 [0165.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053720 [0165.029] wcscpy (in: _Dest=0x3053720, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.029] wcscat (in: _Dest=0x3053720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.029] wcscat (in: _Dest=0x3053720, _Source="Module.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" [0165.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0165.030] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73916300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe974c2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73916300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="NEWSPR~1.EFT")) returned 1 [0165.030] wcscmp (_String1="Newsprint.eftx", _String2=".") returned 1 [0165.030] wcscmp (_String1="Newsprint.eftx", _String2="..") returned 1 [0165.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a661f0 [0165.031] wcscpy (in: _Dest=0x7a661f0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.031] wcscat (in: _Dest=0x7a661f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.031] wcscat (in: _Dest=0x7a661f0, _Source="Newsprint.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" [0165.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a661f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0165.032] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13022600, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe974c2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13022600, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="OPULEN~1.EFT")) returned 1 [0165.032] wcscmp (_String1="Opulent.eftx", _String2=".") returned 1 [0165.032] wcscmp (_String1="Opulent.eftx", _String2="..") returned 1 [0165.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053a68 [0165.032] wcscpy (in: _Dest=0x3053a68, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.032] wcscat (in: _Dest=0x3053a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.032] wcscat (in: _Dest=0x3053a68, _Source="Opulent.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" [0165.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0165.598] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1695ad00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1695ad00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="ORIEL~1.EFT")) returned 1 [0165.598] wcscmp (_String1="Oriel.eftx", _String2=".") returned 1 [0165.598] wcscmp (_String1="Oriel.eftx", _String2="..") returned 1 [0165.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053bb8 [0165.598] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0165.598] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0165.598] wcscat (in: _Dest=0x3053bb8, _Source="Oriel.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" [0166.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0166.606] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a293400, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9772450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1a293400, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="ORIGIN~1.EFT")) returned 1 [0166.606] wcscmp (_String1="Origin.eftx", _String2=".") returned 1 [0166.606] wcscmp (_String1="Origin.eftx", _String2="..") returned 1 [0166.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0166.606] wcscpy (in: _Dest=0x30539c0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0166.607] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0166.607] wcscat (in: _Dest=0x30539c0, _Source="Origin.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" [0166.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30539c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0166.608] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbcbb00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1dbcbb00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="PAPER~1.EFT")) returned 1 [0166.609] wcscmp (_String1="Paper.eftx", _String2=".") returned 1 [0166.609] wcscmp (_String1="Paper.eftx", _String2="..") returned 1 [0166.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e3d8 [0166.609] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0166.609] wcscat (in: _Dest=0x7a5e3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0166.609] wcscat (in: _Dest=0x7a5e3d8, _Source="Paper.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" [0166.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0166.610] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4644b500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97985b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4644b500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="PERSPE~1.EFT")) returned 1 [0166.610] wcscmp (_String1="Perspective.eftx", _String2=".") returned 1 [0166.610] wcscmp (_String1="Perspective.eftx", _String2="..") returned 1 [0166.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66b90 [0166.611] wcscpy (in: _Dest=0x7a66b90, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0166.611] wcscat (in: _Dest=0x7a66b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0166.611] wcscat (in: _Dest=0x7a66b90, _Source="Perspective.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" [0166.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0166.612] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d83c00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97be710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49d83c00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="PUSHPI~1.EFT")) returned 1 [0166.612] wcscmp (_String1="Pushpin.eftx", _String2=".") returned 1 [0166.612] wcscmp (_String1="Pushpin.eftx", _String2="..") returned 1 [0166.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e528 [0166.612] wcscpy (in: _Dest=0x7a5e528, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0166.612] wcscat (in: _Dest=0x7a5e528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0166.612] wcscat (in: _Dest=0x7a5e528, _Source="Pushpin.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" [0166.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0166.614] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f3bd00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe97e4870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x75f3bd00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="SLIPST~1.EFT")) returned 1 [0166.614] wcscmp (_String1="Slipstream.eftx", _String2=".") returned 1 [0166.614] wcscmp (_String1="Slipstream.eftx", _String2="..") returned 1 [0166.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66c40 [0166.614] wcscpy (in: _Dest=0x7a66c40, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0166.614] wcscat (in: _Dest=0x7a66c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0166.614] wcscat (in: _Dest=0x7a66c40, _Source="Slipstream.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" [0166.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0166.616] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x201f1500, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x201f1500, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="SOLSTI~1.EFT")) returned 1 [0167.281] wcscmp (_String1="Solstice.eftx", _String2=".") returned 1 [0167.281] wcscmp (_String1="Solstice.eftx", _String2="..") returned 1 [0167.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b718 [0167.281] wcscpy (in: _Dest=0x35b718, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0167.281] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0167.281] wcscat (in: _Dest=0x35b718, _Source="Solstice.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" [0171.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0171.674] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b29c00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe980a9d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23b29c00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="TECHNI~1.EFT")) returned 1 [0171.674] wcscmp (_String1="Technic.eftx", _String2=".") returned 1 [0171.674] wcscmp (_String1="Technic.eftx", _String2="..") returned 1 [0171.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e7c8 [0171.675] wcscpy (in: _Dest=0x7a5e7c8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0171.675] wcscat (in: _Dest=0x7a5e7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0171.675] wcscat (in: _Dest=0x7a5e7c8, _Source="Technic.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" [0171.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0171.676] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6bc300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9830b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d6bc300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="THATCH~1.EFT")) returned 1 [0171.676] wcscmp (_String1="Thatch.eftx", _String2=".") returned 1 [0171.676] wcscmp (_String1="Thatch.eftx", _String2="..") returned 1 [0171.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f440 [0171.677] wcscpy (in: _Dest=0x7a5f440, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0171.677] wcscat (in: _Dest=0x7a5f440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0171.677] wcscat (in: _Dest=0x7a5f440, _Source="Thatch.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" [0171.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0171.678] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27462300, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9830b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x27462300, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="TREK~1.EFT")) returned 1 [0171.678] wcscmp (_String1="Trek.eftx", _String2=".") returned 1 [0171.678] wcscmp (_String1="Trek.eftx", _String2="..") returned 1 [0171.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e720 [0171.678] wcscpy (in: _Dest=0x7a5e720, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0171.678] wcscat (in: _Dest=0x7a5e720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0171.678] wcscat (in: _Dest=0x7a5e720, _Source="Trek.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" [0171.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0171.679] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ad9aa00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9a1fd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2ad9aa00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="URBAN~1.EFT")) returned 1 [0171.679] wcscmp (_String1="Urban.eftx", _String2=".") returned 1 [0171.679] wcscmp (_String1="Urban.eftx", _String2="..") returned 1 [0171.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e3d8 [0171.679] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0171.679] wcscat (in: _Dest=0x7a5e3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0171.679] wcscat (in: _Dest=0x7a5e3d8, _Source="Urban.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" [0171.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0171.680] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6d3100, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9d8bcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e6d3100, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="VERVE~1.EFT")) returned 1 [0171.680] wcscmp (_String1="Verve.eftx", _String2=".") returned 1 [0171.680] wcscmp (_String1="Verve.eftx", _String2="..") returned 1 [0171.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e528 [0171.681] wcscpy (in: _Dest=0x7a5e528, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0171.681] wcscat (in: _Dest=0x7a5e528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0171.681] wcscat (in: _Dest=0x7a5e528, _Source="Verve.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" [0171.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0171.682] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ff4a00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x50ff4a00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 1 [0171.682] wcscmp (_String1="Waveform.eftx", _String2=".") returned 1 [0171.682] wcscmp (_String1="Waveform.eftx", _String2="..") returned 1 [0171.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66b90 [0171.682] wcscpy (in: _Dest=0x7a66b90, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects" [0171.682] wcscat (in: _Dest=0x7a66b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\" [0171.682] wcscat (in: _Dest=0x7a66b90, _Source="Waveform.eftx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" [0171.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0171.683] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ff4a00, ftCreationTime.dwHighDateTime=0x1cbdf40, ftLastAccessTime.dwLowDateTime=0xe9db1e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x50ff4a00, ftLastWriteTime.dwHighDateTime=0x1cbdf40, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 0 [0171.683] FindClose (in: hFindFile=0x3dcf650 | out: hFindFile=0x3dcf650) returned 1 [0171.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2220) returned 1 [0171.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6ef0) returned 1 [0171.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44060) returned 1 Thread: id = 1076 os_tid = 0x1890 [0134.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45890 [0134.286] wcscpy (in: _Dest=0x3d45890, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0134.286] wcscat (in: _Dest=0x3d45890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0134.286] wcscat (in: _Dest=0x3d45890, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*" [0134.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2958 [0134.287] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d4fb90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x883e5670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d480 [0137.090] wcscmp (_String1=".", _String2=".") returned 0 [0137.090] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d4fb90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x883e5670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.032] wcscmp (_String1="..", _String2=".") returned 1 [0140.032] wcscmp (_String1="..", _String2="..") returned 0 [0140.032] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6dec600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6dec600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1 [0140.032] wcscmp (_String1="Adjacency.xml", _String2=".") returned 1 [0140.032] wcscmp (_String1="Adjacency.xml", _String2="..") returned 1 [0140.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053918 [0140.032] wcscpy (in: _Dest=0x3053918, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0140.032] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0140.032] wcscat (in: _Dest=0x3053918, _Source="Adjacency.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" [0141.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b94 [0141.123] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9412000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9412000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0141.123] wcscmp (_String1="Angles.xml", _String2=".") returned 1 [0141.123] wcscmp (_String1="Angles.xml", _String2="..") returned 1 [0141.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5f40 [0141.123] wcscpy (in: _Dest=0x3df5f40, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.123] wcscat (in: _Dest=0x3df5f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.123] wcscat (in: _Dest=0x3df5f40, _Source="Angles.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" [0141.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0141.124] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5780b600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5780b600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0141.124] wcscmp (_String1="Apex.xml", _String2=".") returned 1 [0141.124] wcscmp (_String1="Apex.xml", _String2="..") returned 1 [0141.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5b80 [0141.124] wcscpy (in: _Dest=0x3df5b80, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.124] wcscat (in: _Dest=0x3df5b80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.124] wcscat (in: _Dest=0x3df5b80, _Source="Apex.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" [0141.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0141.125] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957dda00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x957dda00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1 [0141.125] wcscmp (_String1="Apothecary.xml", _String2=".") returned 1 [0141.125] wcscmp (_String1="Apothecary.xml", _String2="..") returned 1 [0141.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x30539c0 [0141.125] wcscpy (in: _Dest=0x30539c0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.125] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.126] wcscat (in: _Dest=0x30539c0, _Source="Apothecary.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" [0141.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30539c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0141.127] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b143d00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b143d00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0141.127] wcscmp (_String1="Aspect.xml", _String2=".") returned 1 [0141.127] wcscmp (_String1="Aspect.xml", _String2="..") returned 1 [0141.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5ea0 [0141.127] wcscpy (in: _Dest=0x3df5ea0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.127] wcscat (in: _Dest=0x3df5ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.127] wcscat (in: _Dest=0x3df5ea0, _Source="Aspect.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" [0141.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0141.128] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e03400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97e03400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0141.128] wcscmp (_String1="Austin.xml", _String2=".") returned 1 [0141.128] wcscmp (_String1="Austin.xml", _String2="..") returned 1 [0141.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4460 [0141.128] wcscpy (in: _Dest=0x3df4460, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.128] wcscat (in: _Dest=0x3df4460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.128] wcscat (in: _Dest=0x3df4460, _Source="Austin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" [0141.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0141.132] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd4a700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbcd4a700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1 [0141.132] wcscmp (_String1="Black Tie.xml", _String2=".") returned 1 [0141.132] wcscmp (_String1="Black Tie.xml", _String2="..") returned 1 [0141.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053c60 [0141.133] wcscpy (in: _Dest=0x3053c60, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.133] wcscat (in: _Dest=0x3053c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.133] wcscat (in: _Dest=0x3053c60, _Source="Black Tie.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" [0141.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0141.154] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d769700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5d769700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0141.154] wcscmp (_String1="Civic.xml", _String2=".") returned 1 [0141.154] wcscmp (_String1="Civic.xml", _String2="..") returned 1 [0141.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4be0 [0141.154] wcscpy (in: _Dest=0x3df4be0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.154] wcscat (in: _Dest=0x3df4be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.154] wcscat (in: _Dest=0x3df4be0, _Source="Civic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" [0141.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0141.166] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b73bb00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b73bb00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0141.166] wcscmp (_String1="Clarity.xml", _String2=".") returned 1 [0141.166] wcscmp (_String1="Clarity.xml", _String2="..") returned 1 [0141.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053b10 [0141.166] wcscpy (in: _Dest=0x3053b10, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.166] wcscat (in: _Dest=0x3053b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.166] wcscat (in: _Dest=0x3053b10, _Source="Clarity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" [0141.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e0 [0141.168] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0682e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0682e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1 [0141.168] wcscmp (_String1="Composite.xml", _String2=".") returned 1 [0141.168] wcscmp (_String1="Composite.xml", _String2="..") returned 1 [0141.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053138 [0141.168] wcscpy (in: _Dest=0x3053138, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.168] wcscat (in: _Dest=0x3053138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.168] wcscat (in: _Dest=0x3053138, _Source="Composite.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" [0141.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280 [0141.170] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x610a1e00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x610a1e00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1 [0141.170] wcscmp (_String1="Concourse.xml", _String2=".") returned 1 [0141.170] wcscmp (_String1="Concourse.xml", _String2="..") returned 1 [0141.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3052fe8 [0141.170] wcscpy (in: _Dest=0x3052fe8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.170] wcscat (in: _Dest=0x3052fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.170] wcscat (in: _Dest=0x3052fe8, _Source="Concourse.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" [0141.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0141.171] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52ce200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc52ce200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0141.171] wcscmp (_String1="Couture.xml", _String2=".") returned 1 [0141.171] wcscmp (_String1="Couture.xml", _String2="..") returned 1 [0141.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053870 [0141.171] wcscpy (in: _Dest=0x3053870, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.171] wcscat (in: _Dest=0x3053870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.171] wcscat (in: _Dest=0x3053870, _Source="Couture.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" [0141.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0141.172] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9f19600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc9f19600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1 [0141.172] wcscmp (_String1="Elemental.xml", _String2=".") returned 1 [0141.173] wcscmp (_String1="Elemental.xml", _String2="..") returned 1 [0141.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053fa8 [0141.173] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.173] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.173] wcscat (in: _Dest=0x3053fa8, _Source="Elemental.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" [0141.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0141.174] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x649da500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x649da500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0141.174] wcscmp (_String1="Equity.xml", _String2=".") returned 1 [0141.174] wcscmp (_String1="Equity.xml", _String2="..") returned 1 [0141.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df59a0 [0141.174] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.174] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.174] wcscat (in: _Dest=0x3df59a0, _Source="Equity.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" [0141.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df59a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc [0141.175] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f074200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f074200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1 [0141.175] wcscmp (_String1="Essential.xml", _String2=".") returned 1 [0141.175] wcscmp (_String1="Essential.xml", _String2="..") returned 1 [0141.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053528 [0141.176] wcscpy (in: _Dest=0x3053528, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.176] wcscat (in: _Dest=0x3053528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.176] wcscat (in: _Dest=0x3053528, _Source="Essential.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" [0141.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0141.177] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc53f000, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d4fb90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc53f000, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1 [0141.177] wcscmp (_String1="Executive.xml", _String2=".") returned 1 [0141.177] wcscmp (_String1="Executive.xml", _String2="..") returned 1 [0141.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30531e0 [0141.177] wcscpy (in: _Dest=0x30531e0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.177] wcscat (in: _Dest=0x30531e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.177] wcscat (in: _Dest=0x30531e0, _Source="Executive.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" [0141.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30531e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0141.178] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a938600, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6a938600, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0141.178] wcscmp (_String1="Flow.xml", _String2=".") returned 1 [0141.178] wcscmp (_String1="Flow.xml", _String2="..") returned 1 [0141.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df54a0 [0141.178] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.178] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.178] wcscat (in: _Dest=0x3df54a0, _Source="Flow.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" [0141.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df54a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0141.179] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68312c00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68312c00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0141.179] wcscmp (_String1="Foundry.xml", _String2=".") returned 1 [0141.179] wcscmp (_String1="Foundry.xml", _String2="..") returned 1 [0141.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x326580 [0141.179] wcscpy (in: _Dest=0x326580, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.179] wcscat (in: _Dest=0x326580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.179] wcscat (in: _Dest=0x326580, _Source="Foundry.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" [0141.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x326580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130 [0141.180] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29ac900, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa29ac900, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0141.180] wcscmp (_String1="Grid.xml", _String2=".") returned 1 [0141.180] wcscmp (_String1="Grid.xml", _String2="..") returned 1 [0141.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df6260 [0141.180] wcscpy (in: _Dest=0x3df6260, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.181] wcscat (in: _Dest=0x3df6260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.181] wcscat (in: _Dest=0x3df6260, _Source="Grid.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" [0141.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0141.182] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd2300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4fd2300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1 [0141.182] wcscmp (_String1="Hardcover.xml", _String2=".") returned 1 [0141.182] wcscmp (_String1="Hardcover.xml", _String2="..") returned 1 [0141.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3251d0 [0141.182] wcscpy (in: _Dest=0x3251d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.182] wcscat (in: _Dest=0x3251d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.182] wcscat (in: _Dest=0x3251d0, _Source="Hardcover.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" [0141.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3251d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c [0141.183] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe77700, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcfe77700, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0141.183] wcscmp (_String1="Horizon.xml", _String2=".") returned 1 [0141.183] wcscmp (_String1="Horizon.xml", _String2="..") returned 1 [0141.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x325320 [0141.183] wcscpy (in: _Dest=0x325320, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.183] wcscat (in: _Dest=0x325320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.183] wcscat (in: _Dest=0x325320, _Source="Horizon.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" [0141.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x325320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0141.184] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e270d00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6e270d00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0141.184] wcscmp (_String1="Median.xml", _String2=".") returned 1 [0141.184] wcscmp (_String1="Median.xml", _String2="..") returned 1 [0141.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4e60 [0141.184] wcscpy (in: _Dest=0x3df4e60, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.184] wcscat (in: _Dest=0x3df4e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.184] wcscat (in: _Dest=0x3df4e60, _Source="Median.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" [0141.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0141.185] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ba9400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71ba9400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0141.185] wcscmp (_String1="Metro.xml", _String2=".") returned 1 [0141.185] wcscmp (_String1="Metro.xml", _String2="..") returned 1 [0141.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6080 [0141.186] wcscpy (in: _Dest=0x3df6080, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.186] wcscat (in: _Dest=0x3df6080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.186] wcscat (in: _Dest=0x3df6080, _Source="Metro.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" [0141.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0141.187] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x741cee00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x741cee00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0141.187] wcscmp (_String1="Module.xml", _String2=".") returned 1 [0141.187] wcscmp (_String1="Module.xml", _String2="..") returned 1 [0141.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4dc0 [0141.187] wcscpy (in: _Dest=0x3df4dc0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.187] wcscat (in: _Dest=0x3df4dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.187] wcscat (in: _Dest=0x3df4dc0, _Source="Module.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" [0141.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124 [0141.196] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37afe00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd37afe00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1 [0141.196] wcscmp (_String1="Newsprint.xml", _String2=".") returned 1 [0141.196] wcscmp (_String1="Newsprint.xml", _String2="..") returned 1 [0141.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x326430 [0141.196] wcscpy (in: _Dest=0x326430, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.196] wcscat (in: _Dest=0x326430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.196] wcscat (in: _Dest=0x326430, _Source="Newsprint.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" [0141.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x326430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0141.197] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851bed00, ftCreationTime.dwHighDateTime=0x1c9b889, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851bed00, ftLastWriteTime.dwHighDateTime=0x1c9b889, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0141.197] wcscmp (_String1="Office 2.xml", _String2=".") returned 1 [0141.197] wcscmp (_String1="Office 2.xml", _String2="..") returned 1 [0141.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e7a640 [0141.197] wcscpy (in: _Dest=0x3e7a640, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.197] wcscat (in: _Dest=0x3e7a640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.198] wcscat (in: _Dest=0x3e7a640, _Source="Office 2.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" [0141.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7a640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0141.199] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851bed00, ftCreationTime.dwHighDateTime=0x1c9b889, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851bed00, ftLastWriteTime.dwHighDateTime=0x1c9b889, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="OFFICE~3.XML")) returned 1 [0141.199] wcscmp (_String1="Office Classic 2.xml", _String2=".") returned 1 [0141.199] wcscmp (_String1="Office Classic 2.xml", _String2="..") returned 1 [0141.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7c18 [0141.199] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.199] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.199] wcscat (in: _Dest=0x2ff7c18, _Source="Office Classic 2.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" [0141.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0141.200] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851bed00, ftCreationTime.dwHighDateTime=0x1c9b889, ftLastAccessTime.dwLowDateTime=0x883bf510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851bed00, ftLastWriteTime.dwHighDateTime=0x1c9b889, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0141.200] wcscmp (_String1="Office Classic.xml", _String2=".") returned 1 [0141.200] wcscmp (_String1="Office Classic.xml", _String2="..") returned 1 [0141.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b878 [0141.200] wcscpy (in: _Dest=0x35b878, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0141.200] wcscat (in: _Dest=0x35b878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0141.200] wcscat (in: _Dest=0x35b878, _Source="Office Classic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" [0141.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c [0142.516] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b07500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77b07500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0142.516] wcscmp (_String1="Opulent.xml", _String2=".") returned 1 [0142.516] wcscmp (_String1="Opulent.xml", _String2="..") returned 1 [0142.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e288 [0142.517] wcscpy (in: _Dest=0x7a5e288, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0142.517] wcscat (in: _Dest=0x7a5e288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0142.517] wcscat (in: _Dest=0x7a5e288, _Source="Opulent.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" [0159.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0159.110] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b43fc00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b43fc00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0159.110] wcscmp (_String1="Oriel.xml", _String2=".") returned 1 [0159.110] wcscmp (_String1="Oriel.xml", _String2="..") returned 1 [0159.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a621d0 [0159.110] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.110] wcscat (in: _Dest=0x7a621d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.110] wcscat (in: _Dest=0x7a621d0, _Source="Oriel.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" [0159.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a621d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0159.111] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed78300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7ed78300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0159.111] wcscmp (_String1="Origin.xml", _String2=".") returned 1 [0159.111] wcscmp (_String1="Origin.xml", _String2="..") returned 1 [0159.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63df0 [0159.112] wcscpy (in: _Dest=0x7a63df0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.112] wcscat (in: _Dest=0x7a63df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.112] wcscat (in: _Dest=0x7a63df0, _Source="Origin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" [0159.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0159.113] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8139dd00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8139dd00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0159.113] wcscmp (_String1="Paper.xml", _String2=".") returned 1 [0159.113] wcscmp (_String1="Paper.xml", _String2="..") returned 1 [0159.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63530 [0159.113] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.113] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.113] wcscat (in: _Dest=0x7a63530, _Source="Paper.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" [0159.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0159.114] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa890aa00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa890aa00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1 [0159.114] wcscmp (_String1="Perspective.xml", _String2=".") returned 1 [0159.114] wcscmp (_String1="Perspective.xml", _String2="..") returned 1 [0159.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66820 [0159.114] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.114] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.114] wcscat (in: _Dest=0x7a66820, _Source="Perspective.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" [0159.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0159.115] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac243100, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac243100, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0159.115] wcscmp (_String1="Pushpin.xml", _String2=".") returned 1 [0159.115] wcscmp (_String1="Pushpin.xml", _String2="..") returned 1 [0159.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053330 [0159.116] wcscpy (in: _Dest=0x3053330, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.116] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.116] wcscat (in: _Dest=0x3053330, _Source="Pushpin.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" [0159.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0159.117] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd70e8500, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd70e8500, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0159.117] wcscmp (_String1="Slipstream.xml", _String2=".") returned 1 [0159.117] wcscmp (_String1="Slipstream.xml", _String2="..") returned 1 [0159.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3052fe8 [0159.117] wcscpy (in: _Dest=0x3052fe8, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.117] wcscat (in: _Dest=0x3052fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.117] wcscat (in: _Dest=0x3052fe8, _Source="Slipstream.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" [0159.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0159.118] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84cd6400, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84cd6400, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0159.118] wcscmp (_String1="Solstice.xml", _String2=".") returned 1 [0159.118] wcscmp (_String1="Solstice.xml", _String2="..") returned 1 [0159.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053c60 [0159.118] wcscpy (in: _Dest=0x3053c60, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.118] wcscat (in: _Dest=0x3053c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.118] wcscat (in: _Dest=0x3053c60, _Source="Solstice.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" [0159.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0159.119] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8860eb00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8860eb00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0159.119] wcscmp (_String1="Technic.xml", _String2=".") returned 1 [0159.119] wcscmp (_String1="Technic.xml", _String2="..") returned 1 [0159.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3052f40 [0159.119] wcscpy (in: _Dest=0x3052f40, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.119] wcscat (in: _Dest=0x3052f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.119] wcscat (in: _Dest=0x3052f40, _Source="Technic.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" [0159.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0159.120] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafb7b800, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xafb7b800, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0159.121] wcscmp (_String1="Thatch.xml", _String2=".") returned 1 [0159.121] wcscmp (_String1="Thatch.xml", _String2="..") returned 1 [0159.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a626d0 [0159.121] wcscpy (in: _Dest=0x7a626d0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.121] wcscat (in: _Dest=0x7a626d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.121] wcscat (in: _Dest=0x7a626d0, _Source="Thatch.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" [0159.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a626d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0159.122] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf47200, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8bf47200, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0159.122] wcscmp (_String1="Trek.xml", _String2=".") returned 1 [0159.122] wcscmp (_String1="Trek.xml", _String2="..") returned 1 [0159.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63fd0 [0159.122] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.122] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.122] wcscat (in: _Dest=0x7a63fd0, _Source="Trek.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" [0159.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0159.123] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e56cc00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e56cc00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0159.123] wcscmp (_String1="Urban.xml", _String2=".") returned 1 [0159.123] wcscmp (_String1="Urban.xml", _String2="..") returned 1 [0159.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62950 [0159.123] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.123] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.123] wcscat (in: _Dest=0x7a62950, _Source="Urban.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" [0159.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0159.125] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ea5300, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x91ea5300, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0159.125] wcscmp (_String1="Verve.xml", _String2=".") returned 1 [0159.125] wcscmp (_String1="Verve.xml", _String2="..") returned 1 [0159.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62130 [0159.125] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.125] wcscat (in: _Dest=0x7a62130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.125] wcscat (in: _Dest=0x7a62130, _Source="Verve.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" [0159.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0159.126] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34b3f00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb34b3f00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0159.126] wcscmp (_String1="Waveform.xml", _String2=".") returned 1 [0159.126] wcscmp (_String1="Waveform.xml", _String2="..") returned 1 [0159.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053f00 [0159.126] wcscpy (in: _Dest=0x3053f00, _Source="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts" [0159.126] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\" [0159.126] wcscat (in: _Dest=0x3053f00, _Source="Waveform.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml") returned="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" [0159.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0159.128] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34b3f00, ftCreationTime.dwHighDateTime=0x1cac247, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb34b3f00, ftLastWriteTime.dwHighDateTime=0x1cac247, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0159.128] FindClose (in: hFindFile=0x7a2d480 | out: hFindFile=0x7a2d480) returned 1 [0159.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2958) returned 1 [0159.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45890) returned 1 [0159.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 Thread: id = 1077 os_tid = 0x1894 [0134.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx")) returned 0x20 [0136.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx", dwFileAttributes=0x20) returned 0 [0136.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.171] GetLastError () returned 0x5 [0136.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx", dwFileAttributes=0x20) returned 0 [0136.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 1078 os_tid = 0x1898 [0134.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx")) returned 0x20 [0137.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx", dwFileAttributes=0x20) returned 0 [0137.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.088] GetLastError () returned 0x5 [0137.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx", dwFileAttributes=0x20) returned 0 [0137.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 1079 os_tid = 0x189c [0134.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx")) returned 0x20 [0137.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx", dwFileAttributes=0x20) returned 0 [0137.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.087] GetLastError () returned 0x5 [0137.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx", dwFileAttributes=0x20) returned 0 [0137.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 1080 os_tid = 0x18a0 [0134.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx")) returned 0x20 [0137.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx", dwFileAttributes=0x20) returned 0 [0137.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.085] GetLastError () returned 0x5 [0137.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx", dwFileAttributes=0x20) returned 0 [0137.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 1081 os_tid = 0x18a4 [0134.288] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\ysSSNRq6ok.pps" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\k1effx06kg7atc\\ysssnrq6ok.pps")) returned 0x20 [0134.288] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\ysSSNRq6ok.pps", dwFileAttributes=0x20) returned 1 [0134.289] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\ysSSNRq6ok.pps" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\k1effx06kg7atc\\ysssnrq6ok.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cd8 [0134.289] GetFileSizeEx (in: hFile=0x1cd8, lpFileSize=0xb06f974 | out: lpFileSize=0xb06f974*=34488) returned 1 [0134.289] SetFilePointerEx (in: hFile=0x1cd8, liDistanceToMove=0x86b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.289] ReadFile (in: hFile=0x1cd8, lpBuffer=0xb06f950, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb06f960, lpOverlapped=0x0 | out: lpBuffer=0xb06f950*, lpNumberOfBytesRead=0xb06f960*=0x4, lpOverlapped=0x0) returned 1 [0134.290] SetFilePointerEx (in: hFile=0x1cd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0134.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0134.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca738 [0134.291] NtQuerySystemTime (in: CurrentTime=0xb06f8e8 | out: CurrentTime=0xb06f8e8*=132462177136128000) returned 0x0 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0xa140cc7 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x5d3f0e95 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x25f59b9c [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x4d5ec2b8 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x3c5ee7c [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x78977790 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x76b2695a [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x7112a4a9 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x693bba86 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x4685b96a [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x5aacec3e [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x48701171 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x7c40622 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x2d459fa1 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x6b1ac7fb [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x69f352e6 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0xb186625 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x7da1cc87 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x452c97c4 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x4ea24074 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x3aabed5c [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x507d7a3c [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x2631eaf9 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x24aad856 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x6f314c79 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x9294433 [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x9bc4a6c [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x74082d1f [0134.291] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x4be60c92 [0134.292] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x2634ad9c [0134.292] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0xde51eb7 [0134.292] RtlRandomEx (in: Seed=0xb06f8e0 | out: Seed=0xb06f8e0) returned 0x61725ae5 [0134.301] SetFilePointerEx (in: hFile=0x1cd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.301] ReadFile (in: hFile=0x1cd8, lpBuffer=0x7cc17b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb06f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7cc17b8*, lpNumberOfBytesRead=0xb06f8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0134.301] SetFilePointerEx (in: hFile=0x1cd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0134.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3a10 [0134.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0134.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0134.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0134.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cccbd0 [0134.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0134.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca738 [0134.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca738) returned 1 [0134.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0134.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3a10) returned 1 [0134.302] WriteFile (in: hFile=0x1cd8, lpBuffer=0x7cccbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb06f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7cccbd0*, lpNumberOfBytesWritten=0xb06f8e8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccbd0) returned 1 [0135.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc17b8) returned 1 [0135.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x7a385b0 [0135.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0135.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x7a385e8 [0135.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0135.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0135.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0135.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc20) returned 1 [0135.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25470) returned 1 [0135.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3debf68 [0135.894] SetFilePointerEx (in: hFile=0x1cd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.894] WriteFile (in: hFile=0x1cd8, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xb06f968, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0xb06f968*=0x10e, lpOverlapped=0x0) returned 1 [0137.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bddd0 [0137.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0137.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0137.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0137.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec2b88 [0137.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0137.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0137.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0137.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0137.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x30bddd0 [0137.958] sprintf (in: _Dest=0x30bddd0, _Format="%c%c" | out: _Dest="69") returned 2 [0137.959] sprintf (in: _Dest=0x30bddd2, _Format="%c%c" | out: _Dest="0d") returned 2 [0137.959] sprintf (in: _Dest=0x30bddd4, _Format="%c%c" | out: _Dest="97") returned 2 [0137.959] sprintf (in: _Dest=0x30bddd6, _Format="%c%c" | out: _Dest="f0") returned 2 [0137.959] sprintf (in: _Dest=0x30bddd8, _Format="%c%c" | out: _Dest="e1") returned 2 [0137.959] sprintf (in: _Dest=0x30bddda, _Format="%c%c" | out: _Dest="ad") returned 2 [0137.959] sprintf (in: _Dest=0x30bdddc, _Format="%c%c" | out: _Dest="20") returned 2 [0137.959] sprintf (in: _Dest=0x30bddde, _Format="%c%c" | out: _Dest="29") returned 2 [0137.959] sprintf (in: _Dest=0x30bdde0, _Format="%c%c" | out: _Dest="19") returned 2 [0137.959] sprintf (in: _Dest=0x30bdde2, _Format="%c%c" | out: _Dest="3f") returned 2 [0137.959] sprintf (in: _Dest=0x30bdde4, _Format="%c%c" | out: _Dest="d8") returned 2 [0137.959] sprintf (in: _Dest=0x30bdde6, _Format="%c%c" | out: _Dest="10") returned 2 [0137.959] sprintf (in: _Dest=0x30bdde8, _Format="%c%c" | out: _Dest="40") returned 2 [0137.959] sprintf (in: _Dest=0x30bddea, _Format="%c%c" | out: _Dest="64") returned 2 [0137.959] sprintf (in: _Dest=0x30bddec, _Format="%c%c" | out: _Dest="e2") returned 2 [0137.959] sprintf (in: _Dest=0x30bddee, _Format="%c%c" | out: _Dest="06") returned 2 [0137.959] sprintf (in: _Dest=0x30bddf0, _Format="%c%c" | out: _Dest="58") returned 2 [0137.959] sprintf (in: _Dest=0x30bddf2, _Format="%c%c" | out: _Dest="2f") returned 2 [0137.959] sprintf (in: _Dest=0x30bddf4, _Format="%c%c" | out: _Dest="71") returned 2 [0137.959] sprintf (in: _Dest=0x30bddf6, _Format="%c%c" | out: _Dest="cb") returned 2 [0137.959] sprintf (in: _Dest=0x30bddf8, _Format="%c%c" | out: _Dest="29") returned 2 [0137.959] sprintf (in: _Dest=0x30bddfa, _Format="%c%c" | out: _Dest="6d") returned 2 [0137.959] sprintf (in: _Dest=0x30bddfc, _Format="%c%c" | out: _Dest="cc") returned 2 [0137.959] sprintf (in: _Dest=0x30bddfe, _Format="%c%c" | out: _Dest="ca") returned 2 [0137.959] sprintf (in: _Dest=0x30bde00, _Format="%c%c" | out: _Dest="18") returned 2 [0137.960] sprintf (in: _Dest=0x30bde02, _Format="%c%c" | out: _Dest="4c") returned 2 [0137.960] sprintf (in: _Dest=0x30bde04, _Format="%c%c" | out: _Dest="2e") returned 2 [0137.960] sprintf (in: _Dest=0x30bde06, _Format="%c%c" | out: _Dest="0a") returned 2 [0137.960] RtlInitAnsiString (in: DestinationString=0xb06f8f0, SourceString="690d97f0e1ad2029193fd8104064e206582f71cb296dccca184c2e0a" | out: DestinationString="690d97f0e1ad2029193fd8104064e206582f71cb296dccca184c2e0a") [0137.960] RtlAnsiStringToUnicodeString (in: DestinationString=0xb06f8e8, SourceString="690d97f0e1ad2029193fd8104064e206582f71cb296dccca184c2e0a", AllocateDestinationString=1 | out: DestinationString="690d97f0e1ad2029193fd8104064e206582f71cb296dccca184c2e0a") returned 0x0 [0137.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47718 [0137.960] wcscat (in: _Dest=0x7ad5f88, _Source="690d97f0e1ad20" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\690d97f0e1ad20") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\690d97f0e1ad20" [0137.960] wcscat (in: _Dest=0x7ad5f88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\690d97f0e1ad20.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\690d97f0e1ad20.68814f" [0137.960] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\690d97f0e1ad20.68814f", NtPathName=0xb06f8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\690d97f0e1ad20.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0137.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bdf8 [0137.960] NtSetInformationFile (FileHandle=0x1cd8, IoStatusBlock=0xb06f8e8, FileInformation=0x35bdf8, Length=0xa4, FileInformationClass=0xa) returned 0x0 [0138.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 [0138.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7d5c0) returned 1 [0138.146] NtQueryInformationFile (in: FileHandle=0x1cd8, IoStatusBlock=0xb06f8b8, FileInformation=0xb06f8c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb06f8b8, FileInformation=0xb06f8c0) returned 0x0 [0138.146] NtSetInformationFile (FileHandle=0x1cd8, IoStatusBlock=0xb06f8b8, FileInformation=0xb06f8c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5f88) returned 1 [0138.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47718) returned 1 [0138.210] FlushFileBuffers (hFile=0x1cd8) returned 1 [0138.213] CloseHandle (hObject=0x1cd8) returned 1 [0138.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44960 [0138.234] wcscpy (in: _Dest=0x3d44960, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\" [0138.235] wcscat (in: _Dest=0x3d44960, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\68814F-Readme.txt" [0138.235] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\k1effx06kg7atc\\68814f-readme.txt")) returned 0xffffffff [0138.235] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\K1EfFx06Kg7AtC\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\k1effx06kg7atc\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ba0 [0138.308] WriteFile (in: hFile=0x1ba0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb06f8fc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb06f8fc*=0x8b9, lpOverlapped=0x0) returned 1 [0138.449] CloseHandle (hObject=0x1ba0) returned 1 [0138.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44960) returned 1 [0138.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 1082 os_tid = 0x18a8 [0134.325] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aVwmuMpoc2vJ1L.ppt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\avwmumpoc2vj1l.ppt")) returned 0x20 [0134.344] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aVwmuMpoc2vJ1L.ppt", dwFileAttributes=0x20) returned 1 [0135.823] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aVwmuMpoc2vJ1L.ppt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\avwmumpoc2vj1l.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cdc [0135.823] GetFileSizeEx (in: hFile=0x1cdc, lpFileSize=0x46dfa04 | out: lpFileSize=0x46dfa04*=13992) returned 1 [0135.823] SetFilePointerEx (in: hFile=0x1cdc, liDistanceToMove=0x36a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.823] ReadFile (in: hFile=0x1cdc, lpBuffer=0x46df9e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x46df9f0, lpOverlapped=0x0 | out: lpBuffer=0x46df9e0*, lpNumberOfBytesRead=0x46df9f0*=0x4, lpOverlapped=0x0) returned 1 [0135.825] SetFilePointerEx (in: hFile=0x1cdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0135.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0135.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0135.825] NtQuerySystemTime (in: CurrentTime=0x46df978 | out: CurrentTime=0x46df978*=132462177151104000) returned 0x0 [0135.825] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x69a5c1c5 [0135.825] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x2c2f53d [0135.825] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x560363f0 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x413eaed6 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x389e2fe5 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x29cebbd8 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x97196e1 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x6649f0c1 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0xf5fbb02 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x309e22d6 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x37450075 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x640d44cd [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x69481ded [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x2ced513b [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x4db2940c [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x6783d888 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x145a184c [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x7594b942 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x17444db4 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x2f5aecc1 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x1d3457a1 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x62dd87d3 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x1ad1b8b5 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x11dc4d33 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x5aabbdcc [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0xdbdc468 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0xfb74d79 [0135.826] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x1239925e [0135.827] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x6bee759f [0135.827] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x6d761434 [0135.827] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x20f29158 [0135.827] RtlRandomEx (in: Seed=0x46df970 | out: Seed=0x46df970) returned 0x2834a25f [0135.840] ReadFile (in: hFile=0x1cdc, lpBuffer=0x7a804c8, nNumberOfBytesToRead=0x36a8, lpNumberOfBytesRead=0x46df96c, lpOverlapped=0x0 | out: lpBuffer=0x7a804c8*, lpNumberOfBytesRead=0x46df96c*=0x36a8, lpOverlapped=0x0) returned 1 [0135.840] SetFilePointerEx (in: hFile=0x1cdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.840] WriteFile (in: hFile=0x1cdc, lpBuffer=0x7a840d0*, nNumberOfBytesToWrite=0x36a8, lpNumberOfBytesWritten=0x46df970, lpOverlapped=0x0 | out: lpBuffer=0x7a840d0*, lpNumberOfBytesWritten=0x46df970*=0x36a8, lpOverlapped=0x0) returned 1 [0136.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53620 [0136.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535a8 [0136.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535a8) returned 1 [0136.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a840d0) returned 1 [0136.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a804c8) returned 1 [0136.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0136.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25740) returned 1 [0136.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7ad7a30 [0136.176] SetFilePointerEx (in: hFile=0x1cdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.176] WriteFile (in: hFile=0x1cdc, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x46df9f8, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0x46df9f8*=0x116, lpOverlapped=0x0) returned 1 [0141.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b41a8 [0141.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0141.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0141.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0141.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a377a0 [0141.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0141.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0141.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0141.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0141.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41a8) returned 1 [0141.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x7a39738 [0141.995] sprintf (in: _Dest=0x7a39738, _Format="%c%c" | out: _Dest="73") returned 2 [0141.995] sprintf (in: _Dest=0x7a3973a, _Format="%c%c" | out: _Dest="1a") returned 2 [0141.995] sprintf (in: _Dest=0x7a3973c, _Format="%c%c" | out: _Dest="da") returned 2 [0141.995] sprintf (in: _Dest=0x7a3973e, _Format="%c%c" | out: _Dest="20") returned 2 [0141.995] sprintf (in: _Dest=0x7a39740, _Format="%c%c" | out: _Dest="89") returned 2 [0141.995] sprintf (in: _Dest=0x7a39742, _Format="%c%c" | out: _Dest="a1") returned 2 [0141.996] sprintf (in: _Dest=0x7a39744, _Format="%c%c" | out: _Dest="3f") returned 2 [0141.996] sprintf (in: _Dest=0x7a39746, _Format="%c%c" | out: _Dest="33") returned 2 [0141.996] sprintf (in: _Dest=0x7a39748, _Format="%c%c" | out: _Dest="96") returned 2 [0141.996] sprintf (in: _Dest=0x7a3974a, _Format="%c%c" | out: _Dest="0f") returned 2 [0141.996] sprintf (in: _Dest=0x7a3974c, _Format="%c%c" | out: _Dest="3b") returned 2 [0141.996] sprintf (in: _Dest=0x7a3974e, _Format="%c%c" | out: _Dest="1a") returned 2 [0141.996] sprintf (in: _Dest=0x7a39750, _Format="%c%c" | out: _Dest="6b") returned 2 [0141.996] sprintf (in: _Dest=0x7a39752, _Format="%c%c" | out: _Dest="b5") returned 2 [0141.996] sprintf (in: _Dest=0x7a39754, _Format="%c%c" | out: _Dest="47") returned 2 [0141.996] sprintf (in: _Dest=0x7a39756, _Format="%c%c" | out: _Dest="48") returned 2 [0141.996] sprintf (in: _Dest=0x7a39758, _Format="%c%c" | out: _Dest="77") returned 2 [0141.996] sprintf (in: _Dest=0x7a3975a, _Format="%c%c" | out: _Dest="56") returned 2 [0141.996] sprintf (in: _Dest=0x7a3975c, _Format="%c%c" | out: _Dest="2f") returned 2 [0141.996] sprintf (in: _Dest=0x7a3975e, _Format="%c%c" | out: _Dest="8b") returned 2 [0141.996] sprintf (in: _Dest=0x7a39760, _Format="%c%c" | out: _Dest="7f") returned 2 [0141.996] sprintf (in: _Dest=0x7a39762, _Format="%c%c" | out: _Dest="52") returned 2 [0141.996] sprintf (in: _Dest=0x7a39764, _Format="%c%c" | out: _Dest="ce") returned 2 [0141.996] sprintf (in: _Dest=0x7a39766, _Format="%c%c" | out: _Dest="05") returned 2 [0141.996] sprintf (in: _Dest=0x7a39768, _Format="%c%c" | out: _Dest="79") returned 2 [0141.996] sprintf (in: _Dest=0x7a3976a, _Format="%c%c" | out: _Dest="ad") returned 2 [0141.996] sprintf (in: _Dest=0x7a3976c, _Format="%c%c" | out: _Dest="02") returned 2 [0141.996] sprintf (in: _Dest=0x7a3976e, _Format="%c%c" | out: _Dest="cb") returned 2 [0141.997] sprintf (in: _Dest=0x7a39770, _Format="%c%c" | out: _Dest="63") returned 2 [0141.997] sprintf (in: _Dest=0x7a39772, _Format="%c%c" | out: _Dest="5a") returned 2 [0141.997] sprintf (in: _Dest=0x7a39774, _Format="%c%c" | out: _Dest="0a") returned 2 [0141.997] sprintf (in: _Dest=0x7a39776, _Format="%c%c" | out: _Dest="9e") returned 2 [0141.997] sprintf (in: _Dest=0x7a39778, _Format="%c%c" | out: _Dest="27") returned 2 [0141.997] sprintf (in: _Dest=0x7a3977a, _Format="%c%c" | out: _Dest="ee") returned 2 [0141.997] sprintf (in: _Dest=0x7a3977c, _Format="%c%c" | out: _Dest="45") returned 2 [0141.997] sprintf (in: _Dest=0x7a3977e, _Format="%c%c" | out: _Dest="2c") returned 2 [0141.997] RtlInitAnsiString (in: DestinationString=0x46df980, SourceString="731ada2089a13f33960f3b1a6bb5474877562f8b7f52ce0579ad02cb635a0a9e27ee452c" | out: DestinationString="731ada2089a13f33960f3b1a6bb5474877562f8b7f52ce0579ad02cb635a0a9e27ee452c") [0141.997] RtlAnsiStringToUnicodeString (in: DestinationString=0x46df978, SourceString="731ada2089a13f33960f3b1a6bb5474877562f8b7f52ce0579ad02cb635a0a9e27ee452c", AllocateDestinationString=1 | out: DestinationString="731ada2089a13f33960f3b1a6bb5474877562f8b7f52ce0579ad02cb635a0a9e27ee452c") returned 0x0 [0141.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5c20 [0141.997] wcscat (in: _Dest=0x3d451d0, _Source="731ada2089a13f3396" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\731ada2089a13f3396") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\731ada2089a13f3396" [0141.997] wcscat (in: _Dest=0x3d451d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\731ada2089a13f3396.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\731ada2089a13f3396.68814f" [0141.997] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\731ada2089a13f3396.68814f", NtPathName=0x46df970, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\731ada2089a13f3396.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053480 [0142.002] FlushFileBuffers (hFile=0x1cdc) returned 1 [0142.003] CloseHandle (hObject=0x1cdc) returned 1 [0142.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19b98 [0142.004] wcscpy (in: _Dest=0x3e19b98, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0142.004] wcscat (in: _Dest=0x3e19b98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" [0142.005] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\68814f-readme.txt")) returned 0x20 [0142.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b98) returned 1 [0142.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19198) returned 1 Thread: id = 1083 os_tid = 0x18ac [0134.351] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\emC5e7.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\emc5e7.xlsx")) returned 0x20 [0134.351] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\emC5e7.xlsx", dwFileAttributes=0x20) returned 1 [0135.842] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\emC5e7.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\emc5e7.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ce4 [0135.843] GetFileSizeEx (in: hFile=0x1ce4, lpFileSize=0xae1ff34 | out: lpFileSize=0xae1ff34*=40584) returned 1 [0135.843] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x9e84, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.843] ReadFile (in: hFile=0x1ce4, lpBuffer=0xae1ff10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xae1ff20, lpOverlapped=0x0 | out: lpBuffer=0xae1ff10*, lpNumberOfBytesRead=0xae1ff20*=0x4, lpOverlapped=0x0) returned 1 [0135.845] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0135.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0135.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0135.845] NtQuerySystemTime (in: CurrentTime=0xae1fea8 | out: CurrentTime=0xae1fea8*=132462177151260000) returned 0x0 [0135.845] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x19d27f5 [0135.845] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0xc4d5266 [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0xd8de2d5 [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x520708c [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x368e75f8 [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x7822c8b7 [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x34fbc1c2 [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x205fec02 [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x4782244c [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x78bc0d03 [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x366c4ef5 [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0xb2cc0b [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x24297748 [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x3941679b [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x10908cdf [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x3f73637 [0135.846] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x3bcf2129 [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x3a703015 [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x273d466c [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x39c3944a [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x5d67d692 [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x162c89a8 [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x71d7310c [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0xa05cfbb [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x595fb8d9 [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x36b52fab [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x368049f0 [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x5dc11814 [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x1e0a9361 [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x6341a2ed [0135.847] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x25f44f9 [0135.848] RtlRandomEx (in: Seed=0xae1fea0 | out: Seed=0xae1fea0) returned 0x1f244e77 [0135.861] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.862] ReadFile (in: hFile=0x1ce4, lpBuffer=0x7a87cd8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xae1fea8, lpOverlapped=0x0 | out: lpBuffer=0x7a87cd8*, lpNumberOfBytesRead=0xae1fea8*=0x3c00, lpOverlapped=0x0) returned 1 [0135.862] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25470 [0135.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dc20 [0135.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0135.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33a8) returned 1 [0135.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a8b8e0 [0135.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0135.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0135.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0135.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc20) returned 1 [0135.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25470) returned 1 [0135.863] WriteFile (in: hFile=0x1ce4, lpBuffer=0x7a8b8e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xae1fea8, lpOverlapped=0x0 | out: lpBuffer=0x7a8b8e0*, lpNumberOfBytesWritten=0xae1fea8*=0x3c00, lpOverlapped=0x0) returned 1 [0139.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8b8e0) returned 1 [0139.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a87cd8) returned 1 [0139.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37800 [0139.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538a0) returned 1 [0139.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37770 [0139.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538a0 [0139.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e542c8 [0139.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e542c8) returned 1 [0139.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0139.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24350) returned 1 [0139.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec940 [0139.021] SetFilePointerEx (in: hFile=0x1ce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.021] WriteFile (in: hFile=0x1ce4, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xae1ff28, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xae1ff28*=0x108, lpOverlapped=0x0) returned 1 [0143.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85158 [0143.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbe18 [0143.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe18) returned 1 [0143.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8398 [0143.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbe18 [0143.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4e8 [0143.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd4e8) returned 1 [0143.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0143.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x3e798a8 [0143.189] sprintf (in: _Dest=0x3e798a8, _Format="%c%c" | out: _Dest="aa") returned 2 [0143.189] sprintf (in: _Dest=0x3e798aa, _Format="%c%c" | out: _Dest="fc") returned 2 [0143.189] sprintf (in: _Dest=0x3e798ac, _Format="%c%c" | out: _Dest="33") returned 2 [0143.189] sprintf (in: _Dest=0x3e798ae, _Format="%c%c" | out: _Dest="0d") returned 2 [0143.189] sprintf (in: _Dest=0x3e798b0, _Format="%c%c" | out: _Dest="7b") returned 2 [0143.189] sprintf (in: _Dest=0x3e798b2, _Format="%c%c" | out: _Dest="d9") returned 2 [0143.189] sprintf (in: _Dest=0x3e798b4, _Format="%c%c" | out: _Dest="dc") returned 2 [0143.189] sprintf (in: _Dest=0x3e798b6, _Format="%c%c" | out: _Dest="30") returned 2 [0143.189] sprintf (in: _Dest=0x3e798b8, _Format="%c%c" | out: _Dest="a4") returned 2 [0143.189] sprintf (in: _Dest=0x3e798ba, _Format="%c%c" | out: _Dest="e8") returned 2 [0143.189] sprintf (in: _Dest=0x3e798bc, _Format="%c%c" | out: _Dest="74") returned 2 [0143.189] sprintf (in: _Dest=0x3e798be, _Format="%c%c" | out: _Dest="0d") returned 2 [0143.189] sprintf (in: _Dest=0x3e798c0, _Format="%c%c" | out: _Dest="b7") returned 2 [0143.189] sprintf (in: _Dest=0x3e798c2, _Format="%c%c" | out: _Dest="b9") returned 2 [0143.189] sprintf (in: _Dest=0x3e798c4, _Format="%c%c" | out: _Dest="0d") returned 2 [0143.189] sprintf (in: _Dest=0x3e798c6, _Format="%c%c" | out: _Dest="b1") returned 2 [0143.189] sprintf (in: _Dest=0x3e798c8, _Format="%c%c" | out: _Dest="2a") returned 2 [0143.189] sprintf (in: _Dest=0x3e798ca, _Format="%c%c" | out: _Dest="e9") returned 2 [0143.189] sprintf (in: _Dest=0x3e798cc, _Format="%c%c" | out: _Dest="e6") returned 2 [0143.189] sprintf (in: _Dest=0x3e798ce, _Format="%c%c" | out: _Dest="5c") returned 2 [0143.190] sprintf (in: _Dest=0x3e798d0, _Format="%c%c" | out: _Dest="6c") returned 2 [0143.190] sprintf (in: _Dest=0x3e798d2, _Format="%c%c" | out: _Dest="b3") returned 2 [0143.190] RtlInitAnsiString (in: DestinationString=0xae1feb0, SourceString="aafc330d7bd9dc30a4e8740db7b90db12ae9e65c6cb3" | out: DestinationString="aafc330d7bd9dc30a4e8740db7b90db12ae9e65c6cb3") [0143.190] RtlAnsiStringToUnicodeString (in: DestinationString=0xae1fea8, SourceString="aafc330d7bd9dc30a4e8740db7b90db12ae9e65c6cb3", AllocateDestinationString=1 | out: DestinationString="aafc330d7bd9dc30a4e8740db7b90db12ae9e65c6cb3") returned 0x0 [0143.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e20190 [0143.190] wcscat (in: _Dest=0x3da6770, _Source="aafc330d7bd" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aafc330d7bd") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aafc330d7bd" [0143.190] wcscat (in: _Dest=0x3da6770, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aafc330d7bd.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aafc330d7bd.68814f" [0143.190] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aafc330d7bd.68814f", NtPathName=0xae1fea0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\aafc330d7bd.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64a10 [0143.193] FlushFileBuffers (hFile=0x1ce4) returned 1 [0143.333] CloseHandle (hObject=0x1ce4) returned 1 [0144.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a218 [0144.734] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0144.734] wcscat (in: _Dest=0x3e1a218, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" [0144.734] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\68814f-readme.txt")) returned 0x20 [0144.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 [0144.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 Thread: id = 1084 os_tid = 0x18b0 [0134.357] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\etocV4DAsHU9VlupM1AV.xls" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\etocv4dashu9vlupm1av.xls")) returned 0x20 [0134.358] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\etocV4DAsHU9VlupM1AV.xls", dwFileAttributes=0x20) returned 1 [0138.864] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\etocV4DAsHU9VlupM1AV.xls" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\etocv4dashu9vlupm1av.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ce8 [0138.864] GetFileSizeEx (in: hFile=0x1ce8, lpFileSize=0x97cfc3c | out: lpFileSize=0x97cfc3c*=4813) returned 1 [0138.865] SetFilePointerEx (in: hFile=0x1ce8, liDistanceToMove=0x12c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.865] ReadFile (in: hFile=0x1ce8, lpBuffer=0x97cfc18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x97cfc28, lpOverlapped=0x0 | out: lpBuffer=0x97cfc18*, lpNumberOfBytesRead=0x97cfc28*=0x4, lpOverlapped=0x0) returned 1 [0138.866] SetFilePointerEx (in: hFile=0x1ce8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0138.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f90 [0138.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0138.867] NtQuerySystemTime (in: CurrentTime=0x97cfbb0 | out: CurrentTime=0x97cfbb0*=132462177181212000) returned 0x0 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x2c4e3b74 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x64e062f0 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x4a4c0969 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x76f3d3f0 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x3f45e4fa [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0xa4fa5de [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x95d136d [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x4b62388d [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x289f94f0 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x32132567 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0xaf23c08 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x22db18d3 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x50b86cd2 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x742e373 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0xb881f5b [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x1847b345 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x42eab898 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x4e99860b [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x6bd8bd80 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x4659ae70 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x60ed8872 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x30a08fd5 [0138.867] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x7ce6eee0 [0138.868] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0xf4fbed4 [0138.868] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x3abee78d [0138.868] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x2ff55072 [0138.868] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x5cb18e8b [0138.868] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x18893d68 [0138.868] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x623143af [0138.868] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x38979912 [0138.868] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0xabf8ecf [0138.868] RtlRandomEx (in: Seed=0x97cfba8 | out: Seed=0x97cfba8) returned 0x26f2f5bb [0138.878] ReadFile (in: hFile=0x1ce8, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x12cd, lpNumberOfBytesRead=0x97cfba4, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0x97cfba4*=0x12cd, lpOverlapped=0x0) returned 1 [0138.878] SetFilePointerEx (in: hFile=0x1ce8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.878] WriteFile (in: hFile=0x1ce8, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x12cd, lpNumberOfBytesWritten=0x97cfba8, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0x97cfba8*=0x12cd, lpOverlapped=0x0) returned 1 [0140.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0140.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0140.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0140.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0140.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0140.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0140.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095b40) returned 1 [0140.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3095b40 [0140.029] SetFilePointerEx (in: hFile=0x1ce8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.030] WriteFile (in: hFile=0x1ce8, lpBuffer=0x3ec9cd0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x97cfc30, lpOverlapped=0x0 | out: lpBuffer=0x3ec9cd0*, lpNumberOfBytesWritten=0x97cfc30*=0x122, lpOverlapped=0x0) returned 1 [0141.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e494a0 [0141.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0141.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0141.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0141.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79870 [0141.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0141.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0141.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0141.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0141.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e494a0) returned 1 [0141.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a261c8 [0141.877] sprintf (in: _Dest=0x7a261c8, _Format="%c%c" | out: _Dest="24") returned 2 [0141.877] sprintf (in: _Dest=0x7a261ca, _Format="%c%c" | out: _Dest="f6") returned 2 [0141.877] sprintf (in: _Dest=0x7a261cc, _Format="%c%c" | out: _Dest="8b") returned 2 [0141.877] sprintf (in: _Dest=0x7a261ce, _Format="%c%c" | out: _Dest="82") returned 2 [0141.877] sprintf (in: _Dest=0x7a261d0, _Format="%c%c" | out: _Dest="61") returned 2 [0141.877] sprintf (in: _Dest=0x7a261d2, _Format="%c%c" | out: _Dest="90") returned 2 [0141.877] sprintf (in: _Dest=0x7a261d4, _Format="%c%c" | out: _Dest="c8") returned 2 [0141.877] sprintf (in: _Dest=0x7a261d6, _Format="%c%c" | out: _Dest="8b") returned 2 [0141.877] sprintf (in: _Dest=0x7a261d8, _Format="%c%c" | out: _Dest="09") returned 2 [0141.877] sprintf (in: _Dest=0x7a261da, _Format="%c%c" | out: _Dest="88") returned 2 [0141.877] sprintf (in: _Dest=0x7a261dc, _Format="%c%c" | out: _Dest="a3") returned 2 [0141.877] sprintf (in: _Dest=0x7a261de, _Format="%c%c" | out: _Dest="ba") returned 2 [0141.877] sprintf (in: _Dest=0x7a261e0, _Format="%c%c" | out: _Dest="18") returned 2 [0141.877] sprintf (in: _Dest=0x7a261e2, _Format="%c%c" | out: _Dest="06") returned 2 [0141.877] sprintf (in: _Dest=0x7a261e4, _Format="%c%c" | out: _Dest="ef") returned 2 [0141.877] sprintf (in: _Dest=0x7a261e6, _Format="%c%c" | out: _Dest="ef") returned 2 [0141.878] sprintf (in: _Dest=0x7a261e8, _Format="%c%c" | out: _Dest="81") returned 2 [0141.878] sprintf (in: _Dest=0x7a261ea, _Format="%c%c" | out: _Dest="f1") returned 2 [0141.878] sprintf (in: _Dest=0x7a261ec, _Format="%c%c" | out: _Dest="cc") returned 2 [0141.878] sprintf (in: _Dest=0x7a261ee, _Format="%c%c" | out: _Dest="82") returned 2 [0141.878] sprintf (in: _Dest=0x7a261f0, _Format="%c%c" | out: _Dest="09") returned 2 [0141.878] sprintf (in: _Dest=0x7a261f2, _Format="%c%c" | out: _Dest="fe") returned 2 [0141.878] sprintf (in: _Dest=0x7a261f4, _Format="%c%c" | out: _Dest="fe") returned 2 [0141.878] sprintf (in: _Dest=0x7a261f6, _Format="%c%c" | out: _Dest="14") returned 2 [0141.878] sprintf (in: _Dest=0x7a261f8, _Format="%c%c" | out: _Dest="d0") returned 2 [0141.878] sprintf (in: _Dest=0x7a261fa, _Format="%c%c" | out: _Dest="c7") returned 2 [0141.878] sprintf (in: _Dest=0x7a261fc, _Format="%c%c" | out: _Dest="4a") returned 2 [0141.878] sprintf (in: _Dest=0x7a261fe, _Format="%c%c" | out: _Dest="70") returned 2 [0141.878] sprintf (in: _Dest=0x7a26200, _Format="%c%c" | out: _Dest="55") returned 2 [0141.878] sprintf (in: _Dest=0x7a26202, _Format="%c%c" | out: _Dest="2c") returned 2 [0141.878] sprintf (in: _Dest=0x7a26204, _Format="%c%c" | out: _Dest="cf") returned 2 [0141.878] sprintf (in: _Dest=0x7a26206, _Format="%c%c" | out: _Dest="40") returned 2 [0141.878] sprintf (in: _Dest=0x7a26208, _Format="%c%c" | out: _Dest="07") returned 2 [0141.878] sprintf (in: _Dest=0x7a2620a, _Format="%c%c" | out: _Dest="45") returned 2 [0141.878] sprintf (in: _Dest=0x7a2620c, _Format="%c%c" | out: _Dest="64") returned 2 [0141.878] sprintf (in: _Dest=0x7a2620e, _Format="%c%c" | out: _Dest="4b") returned 2 [0141.879] sprintf (in: _Dest=0x7a26210, _Format="%c%c" | out: _Dest="46") returned 2 [0141.879] sprintf (in: _Dest=0x7a26212, _Format="%c%c" | out: _Dest="80") returned 2 [0141.879] sprintf (in: _Dest=0x7a26214, _Format="%c%c" | out: _Dest="c1") returned 2 [0141.879] sprintf (in: _Dest=0x7a26216, _Format="%c%c" | out: _Dest="65") returned 2 [0141.879] sprintf (in: _Dest=0x7a26218, _Format="%c%c" | out: _Dest="e8") returned 2 [0141.879] sprintf (in: _Dest=0x7a2621a, _Format="%c%c" | out: _Dest="36") returned 2 [0141.879] sprintf (in: _Dest=0x7a2621c, _Format="%c%c" | out: _Dest="fc") returned 2 [0141.879] sprintf (in: _Dest=0x7a2621e, _Format="%c%c" | out: _Dest="23") returned 2 [0141.879] sprintf (in: _Dest=0x7a26220, _Format="%c%c" | out: _Dest="dc") returned 2 [0141.879] sprintf (in: _Dest=0x7a26222, _Format="%c%c" | out: _Dest="0f") returned 2 [0141.879] sprintf (in: _Dest=0x7a26224, _Format="%c%c" | out: _Dest="5f") returned 2 [0141.879] sprintf (in: _Dest=0x7a26226, _Format="%c%c" | out: _Dest="91") returned 2 [0141.879] RtlInitAnsiString (in: DestinationString=0x97cfbb8, SourceString="24f68b826190c88b0988a3ba1806efef81f1cc8209fefe14d0c74a70552ccf400745644b4680c165e836fc23dc0f5f91" | out: DestinationString="24f68b826190c88b0988a3ba1806efef81f1cc8209fefe14d0c74a70552ccf400745644b4680c165e836fc23dc0f5f91") [0141.879] RtlAnsiStringToUnicodeString (in: DestinationString=0x97cfbb0, SourceString="24f68b826190c88b0988a3ba1806efef81f1cc8209fefe14d0c74a70552ccf400745644b4680c165e836fc23dc0f5f91", AllocateDestinationString=1 | out: DestinationString="24f68b826190c88b0988a3ba1806efef81f1cc8209fefe14d0c74a70552ccf400745644b4680c165e836fc23dc0f5f91") returned 0x0 [0141.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d858a0 [0141.880] wcscat (in: _Dest=0x3df4d20, _Source="24f68b826190c88b0988a3ba" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\24f68b826190c88b0988a3ba") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\24f68b826190c88b0988a3ba" [0141.880] wcscat (in: _Dest=0x3df4d20, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\24f68b826190c88b0988a3ba.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\24f68b826190c88b0988a3ba.68814f" [0141.880] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\24f68b826190c88b0988a3ba.68814f", NtPathName=0x97cfba8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\24f68b826190c88b0988a3ba.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b928 [0141.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 [0141.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a49798) returned 1 [0141.896] NtQueryInformationFile (in: FileHandle=0x1ce8, IoStatusBlock=0x97cfb80, FileInformation=0x97cfb88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x97cfb80, FileInformation=0x97cfb88) returned 0x0 [0141.896] NtSetInformationFile (FileHandle=0x1ce8, IoStatusBlock=0x97cfb80, FileInformation=0x97cfb88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0141.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 [0141.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d858a0) returned 1 [0141.911] FlushFileBuffers (hFile=0x1ce8) returned 1 [0141.915] CloseHandle (hObject=0x1ce8) returned 1 [0141.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da63f0 [0141.922] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0141.922] wcscat (in: _Dest=0x3da63f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" [0141.922] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\68814f-readme.txt")) returned 0x20 [0141.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 [0141.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 Thread: id = 1085 os_tid = 0x18b4 [0134.361] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\LKQCn8aoz.ods" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\lkqcn8aoz.ods")) returned 0x20 [0134.361] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\LKQCn8aoz.ods", dwFileAttributes=0x20) returned 1 [0137.363] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\LKQCn8aoz.ods" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\lkqcn8aoz.ods"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cec [0137.363] GetFileSizeEx (in: hFile=0x1cec, lpFileSize=0x9f7f8c4 | out: lpFileSize=0x9f7f8c4*=70171) returned 1 [0137.363] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x11217, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.364] ReadFile (in: hFile=0x1cec, lpBuffer=0x9f7f8a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f7f8b0, lpOverlapped=0x0 | out: lpBuffer=0x9f7f8a0*, lpNumberOfBytesRead=0x9f7f8b0*=0x4, lpOverlapped=0x0) returned 1 [0137.366] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0137.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0137.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0137.367] NtQuerySystemTime (in: CurrentTime=0x9f7f838 | out: CurrentTime=0x9f7f838*=132462177166392000) returned 0x0 [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x612257e4 [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x37f3b525 [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x511ac66b [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x6b51fd7d [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x44401b1f [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x1b1a1b35 [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x62b3920a [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x279319b2 [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x14e18cb1 [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x79543f5e [0137.367] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x3b08d7ce [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x4d0a7354 [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x5a3334eb [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x2f936711 [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x4ecd1223 [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x88e9112 [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x2b9b5a2b [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x6b0a19be [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x7fad3d18 [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x198f6170 [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0xb8dd1ee [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x26339c4a [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x30073d06 [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x41288c9 [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0xf564ec9 [0137.368] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x704206a8 [0137.369] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x3bc683e8 [0137.369] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x78a9a30d [0137.369] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x5d450f75 [0137.369] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x743c2cea [0137.369] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0xef2d227 [0137.369] RtlRandomEx (in: Seed=0x9f7f830 | out: Seed=0x9f7f830) returned 0x73657870 [0137.405] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.405] ReadFile (in: hFile=0x1cec, lpBuffer=0x7caaf88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9f7f838, lpOverlapped=0x0 | out: lpBuffer=0x7caaf88*, lpNumberOfBytesRead=0x9f7f838*=0x3c00, lpOverlapped=0x0) returned 1 [0137.405] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0137.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0137.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0137.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0137.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cc17b8 [0137.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0137.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0137.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0137.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.406] WriteFile (in: hFile=0x1cec, lpBuffer=0x7cc17b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9f7f838, lpOverlapped=0x0 | out: lpBuffer=0x7cc17b8*, lpNumberOfBytesWritten=0x9f7f838*=0x3c00, lpOverlapped=0x0) returned 1 [0137.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc17b8) returned 1 [0137.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf88) returned 1 [0137.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37650 [0137.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ae8) returned 1 [0137.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376b0 [0137.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ae8 [0137.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0137.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0137.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deaf00 [0137.886] SetFilePointerEx (in: hFile=0x1cec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.886] WriteFile (in: hFile=0x1cec, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9f7f8b8, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0x9f7f8b8*=0x10c, lpOverlapped=0x0) returned 1 [0138.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde60 [0138.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38d0 [0138.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38d0) returned 1 [0138.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec38d0 [0138.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0138.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ca0 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ca0) returned 1 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0138.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7af0 [0138.119] sprintf (in: _Dest=0x7ad7af0, _Format="%c%c" | out: _Dest="44") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7af2, _Format="%c%c" | out: _Dest="45") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7af4, _Format="%c%c" | out: _Dest="c3") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7af6, _Format="%c%c" | out: _Dest="4e") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7af8, _Format="%c%c" | out: _Dest="8f") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7afa, _Format="%c%c" | out: _Dest="47") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7afc, _Format="%c%c" | out: _Dest="7a") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7afe, _Format="%c%c" | out: _Dest="18") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7b00, _Format="%c%c" | out: _Dest="b2") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7b02, _Format="%c%c" | out: _Dest="5c") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7b04, _Format="%c%c" | out: _Dest="26") returned 2 [0138.119] sprintf (in: _Dest=0x7ad7b06, _Format="%c%c" | out: _Dest="0e") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b08, _Format="%c%c" | out: _Dest="6c") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b0a, _Format="%c%c" | out: _Dest="c7") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b0c, _Format="%c%c" | out: _Dest="ed") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b0e, _Format="%c%c" | out: _Dest="17") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b10, _Format="%c%c" | out: _Dest="db") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b12, _Format="%c%c" | out: _Dest="4f") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b14, _Format="%c%c" | out: _Dest="f8") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b16, _Format="%c%c" | out: _Dest="7d") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b18, _Format="%c%c" | out: _Dest="d3") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b1a, _Format="%c%c" | out: _Dest="a8") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b1c, _Format="%c%c" | out: _Dest="02") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b1e, _Format="%c%c" | out: _Dest="ac") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b20, _Format="%c%c" | out: _Dest="1e") returned 2 [0138.120] sprintf (in: _Dest=0x7ad7b22, _Format="%c%c" | out: _Dest="5e") returned 2 [0138.120] RtlInitAnsiString (in: DestinationString=0x9f7f840, SourceString="4445c34e8f477a18b25c260e6cc7ed17db4ff87dd3a802ac1e5e" | out: DestinationString="4445c34e8f477a18b25c260e6cc7ed17db4ff87dd3a802ac1e5e") [0138.120] RtlAnsiStringToUnicodeString (in: DestinationString=0x9f7f838, SourceString="4445c34e8f477a18b25c260e6cc7ed17db4ff87dd3a802ac1e5e", AllocateDestinationString=1 | out: DestinationString="4445c34e8f477a18b25c260e6cc7ed17db4ff87dd3a802ac1e5e") returned 0x0 [0138.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51278 [0138.120] wcscat (in: _Dest=0x3eb92b8, _Source="4445c34e8f477" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\4445c34e8f477") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\4445c34e8f477" [0138.120] wcscat (in: _Dest=0x3eb92b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\4445c34e8f477.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\4445c34e8f477.68814f" [0138.120] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\4445c34e8f477.68814f", NtPathName=0x9f7f830, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\4445c34e8f477.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4fa0 [0138.121] NtSetInformationFile (FileHandle=0x1cec, IoStatusBlock=0x9f7f838, FileInformation=0x3df4fa0, Length=0x92, FileInformationClass=0xa) returned 0x0 [0138.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 [0138.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7e088) returned 1 [0138.196] NtQueryInformationFile (in: FileHandle=0x1cec, IoStatusBlock=0x9f7f808, FileInformation=0x9f7f810, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9f7f808, FileInformation=0x9f7f810) returned 0x0 [0138.196] NtSetInformationFile (FileHandle=0x1cec, IoStatusBlock=0x9f7f808, FileInformation=0x9f7f810, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 [0138.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0138.229] FlushFileBuffers (hFile=0x1cec) returned 1 [0138.235] CloseHandle (hObject=0x1cec) returned 1 [0138.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46c98 [0138.263] wcscpy (in: _Dest=0x3e46c98, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0138.263] wcscat (in: _Dest=0x3e46c98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" [0138.263] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\68814f-readme.txt")) returned 0xffffffff [0138.263] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b94 [0138.276] WriteFile (in: hFile=0x1b94, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9f7f84c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9f7f84c*=0x8b9, lpOverlapped=0x0) returned 1 [0138.286] CloseHandle (hObject=0x1b94) returned 1 [0138.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c98) returned 1 [0138.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 Thread: id = 1086 os_tid = 0x18b8 [0134.363] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\z9gZ.rtf" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\z9gz.rtf")) returned 0x20 [0134.363] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\z9gZ.rtf", dwFileAttributes=0x20) returned 1 [0138.320] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\z9gZ.rtf" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\z9gz.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cf0 [0138.321] GetFileSizeEx (in: hFile=0x1cf0, lpFileSize=0xc56fdc4 | out: lpFileSize=0xc56fdc4*=69602) returned 1 [0138.321] SetFilePointerEx (in: hFile=0x1cf0, liDistanceToMove=0x10fde, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.321] ReadFile (in: hFile=0x1cf0, lpBuffer=0xc56fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc56fdb0, lpOverlapped=0x0 | out: lpBuffer=0xc56fda0*, lpNumberOfBytesRead=0xc56fdb0*=0x4, lpOverlapped=0x0) returned 1 [0138.323] SetFilePointerEx (in: hFile=0x1cf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0138.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0138.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0138.323] NtQuerySystemTime (in: CurrentTime=0xc56fd38 | out: CurrentTime=0xc56fd38*=132462177175752000) returned 0x0 [0138.323] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x1a127e72 [0138.323] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x5dd777e4 [0138.323] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x1303433c [0138.323] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x531ce588 [0138.323] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x5344b7a0 [0138.323] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x556ba72c [0138.323] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x79d1ee1 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x1c645b43 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x523656f7 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x7e48b45b [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x78ff52b3 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x18f029d [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x5774a218 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x54674dce [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x1f857fc6 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x69e79794 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x6bc94aca [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x761b6176 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x530858f4 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x259e559a [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x64f5bae3 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x7e4fdb0c [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x383f3b6f [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x6f75ecbc [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x415131d2 [0138.324] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x17079989 [0138.325] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x7d1f7bf7 [0138.325] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x306dcb5c [0138.325] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x2ac31269 [0138.325] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x1d4b6f60 [0138.325] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0xf743313 [0138.325] RtlRandomEx (in: Seed=0xc56fd30 | out: Seed=0xc56fd30) returned 0x55d02f70 [0138.500] SetFilePointerEx (in: hFile=0x1cf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.501] ReadFile (in: hFile=0x1cf0, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc56fd38, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0xc56fd38*=0x3c00, lpOverlapped=0x0) returned 1 [0138.501] SetFilePointerEx (in: hFile=0x1cf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56720 [0138.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e148 [0138.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0138.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0138.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0138.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0138.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0138.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3178) returned 1 [0138.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0138.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56720) returned 1 [0138.502] WriteFile (in: hFile=0x1cf0, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc56fd38, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0xc56fd38*=0x3c00, lpOverlapped=0x0) returned 1 [0139.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0139.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0139.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e538f0 [0139.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53878) returned 1 [0139.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53878 [0139.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540c0 [0139.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54048 [0139.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54048) returned 1 [0139.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0139.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be298) returned 1 [0139.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec828 [0139.139] SetFilePointerEx (in: hFile=0x1cf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.139] WriteFile (in: hFile=0x1cf0, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xc56fdb8, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xc56fdb8*=0x102, lpOverlapped=0x0) returned 1 [0141.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be298 [0141.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0141.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b70 [0141.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b70) returned 1 [0141.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad97d8 [0141.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b70 [0141.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cb0 [0141.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cb0) returned 1 [0141.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0141.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be298) returned 1 [0141.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a377a0 [0141.986] sprintf (in: _Dest=0x7a377a0, _Format="%c%c" | out: _Dest="25") returned 2 [0141.986] sprintf (in: _Dest=0x7a377a2, _Format="%c%c" | out: _Dest="1d") returned 2 [0141.986] sprintf (in: _Dest=0x7a377a4, _Format="%c%c" | out: _Dest="7b") returned 2 [0141.986] sprintf (in: _Dest=0x7a377a6, _Format="%c%c" | out: _Dest="b4") returned 2 [0141.986] sprintf (in: _Dest=0x7a377a8, _Format="%c%c" | out: _Dest="e3") returned 2 [0141.987] sprintf (in: _Dest=0x7a377aa, _Format="%c%c" | out: _Dest="45") returned 2 [0141.987] sprintf (in: _Dest=0x7a377ac, _Format="%c%c" | out: _Dest="db") returned 2 [0141.987] sprintf (in: _Dest=0x7a377ae, _Format="%c%c" | out: _Dest="43") returned 2 [0141.987] sprintf (in: _Dest=0x7a377b0, _Format="%c%c" | out: _Dest="1c") returned 2 [0141.987] sprintf (in: _Dest=0x7a377b2, _Format="%c%c" | out: _Dest="51") returned 2 [0141.987] sprintf (in: _Dest=0x7a377b4, _Format="%c%c" | out: _Dest="13") returned 2 [0141.987] sprintf (in: _Dest=0x7a377b6, _Format="%c%c" | out: _Dest="27") returned 2 [0141.987] sprintf (in: _Dest=0x7a377b8, _Format="%c%c" | out: _Dest="ca") returned 2 [0141.987] sprintf (in: _Dest=0x7a377ba, _Format="%c%c" | out: _Dest="33") returned 2 [0141.987] sprintf (in: _Dest=0x7a377bc, _Format="%c%c" | out: _Dest="ce") returned 2 [0141.987] sprintf (in: _Dest=0x7a377be, _Format="%c%c" | out: _Dest="5f") returned 2 [0141.987] RtlInitAnsiString (in: DestinationString=0xc56fd40, SourceString="251d7bb4e345db431c511327ca33ce5f" | out: DestinationString="251d7bb4e345db431c511327ca33ce5f") [0141.987] RtlAnsiStringToUnicodeString (in: DestinationString=0xc56fd38, SourceString="251d7bb4e345db431c511327ca33ce5f", AllocateDestinationString=1 | out: DestinationString="251d7bb4e345db431c511327ca33ce5f") returned 0x0 [0141.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3de5c08 [0141.987] wcscat (in: _Dest=0x3e19b98, _Source="251d7bb4" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\251d7bb4") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\251d7bb4" [0141.987] wcscat (in: _Dest=0x3e19b98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\251d7bb4.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\251d7bb4.68814f" [0141.987] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\251d7bb4.68814f", NtPathName=0xc56fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\251d7bb4.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d451d0 [0141.991] FlushFileBuffers (hFile=0x1cf0) returned 1 [0141.992] CloseHandle (hObject=0x1cf0) returned 1 [0141.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19b98 [0141.993] wcscpy (in: _Dest=0x3e19b98, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\" [0141.993] wcscat (in: _Dest=0x3e19b98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" [0141.993] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\q3s-6c\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\q3s-6c\\68814f-readme.txt")) returned 0x20 [0141.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b98) returned 1 [0141.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a268c8) returned 1 Thread: id = 1087 os_tid = 0x18bc [0134.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e663d8 [0134.369] wcscpy (in: _Dest=0x3e663d8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0134.369] wcscat (in: _Dest=0x3e663d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0134.369] wcscat (in: _Dest=0x3e663d8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*" [0134.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0134.369] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad77b0 [0134.819] wcscmp (_String1=".", _String2=".") returned 0 [0134.819] FindNextFileW (in: hFindFile=0x7ad77b0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.819] wcscmp (_String1="..", _String2=".") returned 1 [0134.819] wcscmp (_String1="..", _String2="..") returned 0 [0134.819] FindNextFileW (in: hFindFile=0x7ad77b0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0134.819] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0134.819] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0134.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ddf3d8 [0134.820] wcscpy (in: _Dest=0x3ddf3d8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0134.820] wcscat (in: _Dest=0x3ddf3d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0134.820] wcscat (in: _Dest=0x3ddf3d8, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0142.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ddf3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0142.405] FindNextFileW (in: hFindFile=0x7ad77b0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0142.405] FindClose (in: hFindFile=0x7ad77b0 | out: hFindFile=0x7ad77b0) returned 1 [0142.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0142.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e663d8) returned 1 [0142.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65ad8) returned 1 Thread: id = 1088 os_tid = 0x18c0 [0134.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a278a8 [0134.372] wcscpy (in: _Dest=0x7a278a8, _Source="C:\\ProgramData\\Microsoft\\Search\\Data" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data" [0134.372] wcscat (in: _Dest=0x7a278a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\" [0134.372] wcscat (in: _Dest=0x7a278a8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\*") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\*" [0134.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0134.372] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0134.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0134.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a278a8) returned 1 [0134.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6b0e0) returned 1 Thread: id = 1089 os_tid = 0x18c4 [0134.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf")) returned 0x20 [0134.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", dwFileAttributes=0x20) returned 0 [0134.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.376] GetLastError () returned 0x5 [0134.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", dwFileAttributes=0x20) returned 0 [0134.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff1f88) returned 1 Thread: id = 1090 os_tid = 0x18c8 [0134.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3062988 [0134.382] wcscpy (in: _Dest=0x3062988, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0134.382] wcscat (in: _Dest=0x3062988, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0134.382] wcscat (in: _Dest=0x3062988, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\*" [0134.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0134.382] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28ec9960, ftCreationTime.dwHighDateTime=0x1d5e6d3, ftLastAccessTime.dwLowDateTime=0x1c7b9bc0, ftLastAccessTime.dwHighDateTime=0x1d5dba4, ftLastWriteTime.dwLowDateTime=0x1c7b9bc0, ftLastWriteTime.dwHighDateTime=0x1d5dba4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0134.382] wcscmp (_String1=".", _String2=".") returned 0 [0134.382] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28ec9960, ftCreationTime.dwHighDateTime=0x1d5e6d3, ftLastAccessTime.dwLowDateTime=0x1c7b9bc0, ftLastAccessTime.dwHighDateTime=0x1d5dba4, ftLastWriteTime.dwLowDateTime=0x1c7b9bc0, ftLastWriteTime.dwHighDateTime=0x1d5dba4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.382] wcscmp (_String1="..", _String2=".") returned 1 [0134.383] wcscmp (_String1="..", _String2="..") returned 0 [0134.383] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd678890, ftCreationTime.dwHighDateTime=0x1d5da9c, ftLastAccessTime.dwLowDateTime=0xab6a17b0, ftLastAccessTime.dwHighDateTime=0x1d5dea3, ftLastWriteTime.dwLowDateTime=0xab6a17b0, ftLastWriteTime.dwHighDateTime=0x1d5dea3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7oMbhF1Dq", cAlternateFileName="7OMBHF~1")) returned 1 [0134.383] wcscmp (_String1="7oMbhF1Dq", _String2=".") returned 1 [0134.383] wcscmp (_String1="7oMbhF1Dq", _String2="..") returned 1 [0134.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6a30 [0134.383] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0134.383] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0134.383] wcscat (in: _Dest=0x3eb6a30, _Source="7oMbhF1Dq" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" [0140.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6b68 [0140.912] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" [0140.912] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" [0140.912] wcscat (in: _Dest=0x7ad6b68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\*" [0140.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3970 [0140.912] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\*", lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd678890, ftCreationTime.dwHighDateTime=0x1d5da9c, ftLastAccessTime.dwLowDateTime=0xab6a17b0, ftLastAccessTime.dwHighDateTime=0x1d5dea3, ftLastWriteTime.dwLowDateTime=0xab6a17b0, ftLastWriteTime.dwHighDateTime=0x1d5dea3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0140.912] wcscmp (_String1=".", _String2=".") returned 0 [0140.912] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd678890, ftCreationTime.dwHighDateTime=0x1d5da9c, ftLastAccessTime.dwLowDateTime=0xab6a17b0, ftLastAccessTime.dwHighDateTime=0x1d5dea3, ftLastWriteTime.dwLowDateTime=0xab6a17b0, ftLastWriteTime.dwHighDateTime=0x1d5dea3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.913] wcscmp (_String1="..", _String2=".") returned 1 [0140.913] wcscmp (_String1="..", _String2="..") returned 0 [0140.913] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da1ce0, ftCreationTime.dwHighDateTime=0x1d5de8b, ftLastAccessTime.dwLowDateTime=0x1aac4c00, ftLastAccessTime.dwHighDateTime=0x1d5e602, ftLastWriteTime.dwLowDateTime=0x1aac4c00, ftLastWriteTime.dwHighDateTime=0x1d5e602, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7imhL7Vf.jpg", cAlternateFileName="")) returned 1 [0140.913] wcscmp (_String1="7imhL7Vf.jpg", _String2=".") returned 1 [0140.913] wcscmp (_String1="7imhL7Vf.jpg", _String2="..") returned 1 [0140.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bea8 [0140.913] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" [0140.913] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" [0140.913] wcscat (in: _Dest=0x35bea8, _Source="7imhL7Vf.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg" [0140.913] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\7imhl7vf.jpg")) returned 0x20 [0140.913] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg", dwFileAttributes=0x20) returned 1 [0140.914] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\7imhl7vf.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x101c [0140.914] GetFileSizeEx (in: hFile=0x101c, lpFileSize=0x874f94c | out: lpFileSize=0x874f94c*=39111) returned 1 [0140.914] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x98c3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.914] ReadFile (in: hFile=0x101c, lpBuffer=0x874f928, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x874f938, lpOverlapped=0x0 | out: lpBuffer=0x874f928*, lpNumberOfBytesRead=0x874f938*=0x4, lpOverlapped=0x0) returned 1 [0140.915] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4e0 [0140.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd740 [0140.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd560 [0140.916] NtQuerySystemTime (in: CurrentTime=0x874f8c0 | out: CurrentTime=0x874f8c0*=132462177201180000) returned 0x0 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x379928a7 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x273231a0 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x48d79b2b [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x267cedc6 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x5ae928cc [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x83bed9c [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0xb318fdd [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x6984b7ad [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x3ed7102c [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x195d7205 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x1a445290 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0xf924b72 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x51eaf600 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x4cf18919 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x7912d997 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x5938215d [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x3527806b [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x663f6cb3 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x34299036 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x6f07e9a2 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x3ef14d97 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x73c6abc2 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x78f7348e [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x771cd881 [0140.916] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x526f77f9 [0140.917] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x79632720 [0140.917] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x30c32ddc [0140.917] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0xf212b73 [0140.917] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x6250d1ac [0140.917] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x70f00ea6 [0140.917] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x73098f99 [0140.917] RtlRandomEx (in: Seed=0x874f8b8 | out: Seed=0x874f8b8) returned 0x3c80d102 [0140.933] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.933] ReadFile (in: hFile=0x101c, lpBuffer=0x7ab1130, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x874f8c0, lpOverlapped=0x0 | out: lpBuffer=0x7ab1130*, lpNumberOfBytesRead=0x874f8c0*=0x3c00, lpOverlapped=0x0) returned 1 [0140.933] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25db8 [0140.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dba8 [0140.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4e0 [0140.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb4e0) returned 1 [0140.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa9920 [0140.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4e0 [0140.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd560 [0140.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd560) returned 1 [0140.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dba8) returned 1 [0140.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25db8) returned 1 [0140.935] WriteFile (in: hFile=0x101c, lpBuffer=0x7aa9920*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x874f8c0, lpOverlapped=0x0 | out: lpBuffer=0x7aa9920*, lpNumberOfBytesWritten=0x874f8c0*=0x3c00, lpOverlapped=0x0) returned 1 [0142.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa9920) returned 1 [0142.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab1130) returned 1 [0142.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37620 [0142.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbaf8) returned 1 [0142.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37650 [0142.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbaf8 [0142.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb1c0 [0142.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb1c0) returned 1 [0142.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0142.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0142.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3debf68 [0142.915] SetFilePointerEx (in: hFile=0x101c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.915] WriteFile (in: hFile=0x101c, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x874f940, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0x874f940*=0x10a, lpOverlapped=0x0) returned 1 [0143.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debf68) returned 1 [0143.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37650) returned 1 [0143.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbaf8) returned 1 [0143.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37620) returned 1 [0143.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb4e0) returned 1 [0143.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd740) returned 1 [0143.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbb48) returned 1 [0143.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddfb0) returned 1 [0143.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65ad8 [0143.011] wcscpy (in: _Dest=0x3e65ad8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg" [0143.011] wcscat (in: _Dest=0x3e65ad8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg.68814f" [0143.011] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg.68814f", NtPathName=0x874f8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\7imhL7Vf.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e67568 [0143.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 [0143.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e010a0) returned 1 [0143.104] NtQueryInformationFile (in: FileHandle=0x101c, IoStatusBlock=0x874f890, FileInformation=0x874f898, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x874f890, FileInformation=0x874f898) returned 0x0 [0143.104] NtSetInformationFile (FileHandle=0x101c, IoStatusBlock=0x874f890, FileInformation=0x874f898, Length=0x28, FileInformationClass=0x4) returned 0x0 [0143.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65ad8) returned 1 [0143.117] FlushFileBuffers (hFile=0x101c) returned 1 [0143.329] CloseHandle (hObject=0x101c) returned 1 [0143.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65c58 [0143.983] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" [0143.983] wcscat (in: _Dest=0x3e65c58, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt" [0143.983] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\68814f-readme.txt")) returned 0xffffffff [0143.983] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f08 [0144.060] WriteFile (in: hFile=0x1f08, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x874f8d4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x874f8d4*=0x8b9, lpOverlapped=0x0) returned 1 [0144.062] CloseHandle (hObject=0x1f08) returned 1 [0144.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 [0144.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 [0144.062] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c69bab0, ftCreationTime.dwHighDateTime=0x1d5e0f7, ftLastAccessTime.dwLowDateTime=0x4d195010, ftLastAccessTime.dwHighDateTime=0x1d5e0b3, ftLastWriteTime.dwLowDateTime=0x4d195010, ftLastWriteTime.dwHighDateTime=0x1d5e0b3, nFileSizeHigh=0x0, nFileSizeLow=0x1839, dwReserved0=0x0, dwReserved1=0x0, cFileName="BClPCdVQRwR4w.bmp", cAlternateFileName="BCLPCD~1.BMP")) returned 1 [0144.062] wcscmp (_String1="BClPCdVQRwR4w.bmp", _String2=".") returned 1 [0144.062] wcscmp (_String1="BClPCdVQRwR4w.bmp", _String2="..") returned 1 [0144.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6ad8 [0144.062] wcscpy (in: _Dest=0x2ff6ad8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" [0144.062] wcscat (in: _Dest=0x2ff6ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" [0144.062] wcscat (in: _Dest=0x2ff6ad8, _Source="BClPCdVQRwR4w.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp" [0144.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0144.074] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9819db00, ftCreationTime.dwHighDateTime=0x1d5dcaa, ftLastAccessTime.dwLowDateTime=0x3c981d50, ftLastAccessTime.dwHighDateTime=0x1d5e51a, ftLastWriteTime.dwLowDateTime=0x3c981d50, ftLastWriteTime.dwHighDateTime=0x1d5e51a, nFileSizeHigh=0x0, nFileSizeLow=0x183f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="M7RG0JIM9QJyrodetjz.gif", cAlternateFileName="M7RG0J~1.GIF")) returned 1 [0144.074] wcscmp (_String1="M7RG0JIM9QJyrodetjz.gif", _String2=".") returned 1 [0144.076] wcscmp (_String1="M7RG0JIM9QJyrodetjz.gif", _String2="..") returned 1 [0144.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d409c0 [0144.076] wcscpy (in: _Dest=0x3d409c0, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" [0144.076] wcscat (in: _Dest=0x3d409c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" [0144.076] wcscat (in: _Dest=0x3d409c0, _Source="M7RG0JIM9QJyrodetjz.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\M7RG0JIM9QJyrodetjz.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\M7RG0JIM9QJyrodetjz.gif" [0144.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d409c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0144.077] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6976580, ftCreationTime.dwHighDateTime=0x1d5e63a, ftLastAccessTime.dwLowDateTime=0x3102c0b0, ftLastAccessTime.dwHighDateTime=0x1d5e4c2, ftLastWriteTime.dwLowDateTime=0x3102c0b0, ftLastWriteTime.dwHighDateTime=0x1d5e4c2, nFileSizeHigh=0x0, nFileSizeLow=0xa50f, dwReserved0=0x0, dwReserved1=0x0, cFileName="YDlvxy-rmCvSGJHJ5.png", cAlternateFileName="YDLVXY~1.PNG")) returned 1 [0144.078] wcscmp (_String1="YDlvxy-rmCvSGJHJ5.png", _String2=".") returned 1 [0144.078] wcscmp (_String1="YDlvxy-rmCvSGJHJ5.png", _String2="..") returned 1 [0144.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65c58 [0144.078] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq" [0144.078] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" [0144.078] wcscat (in: _Dest=0x3e65c58, _Source="YDlvxy-rmCvSGJHJ5.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png" [0144.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba4 [0144.082] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6976580, ftCreationTime.dwHighDateTime=0x1d5e63a, ftLastAccessTime.dwLowDateTime=0x3102c0b0, ftLastAccessTime.dwHighDateTime=0x1d5e4c2, ftLastWriteTime.dwLowDateTime=0x3102c0b0, ftLastWriteTime.dwHighDateTime=0x1d5e4c2, nFileSizeHigh=0x0, nFileSizeLow=0xa50f, dwReserved0=0x0, dwReserved1=0x0, cFileName="YDlvxy-rmCvSGJHJ5.png", cAlternateFileName="YDLVXY~1.PNG")) returned 0 [0144.082] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0144.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3970) returned 1 [0144.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 [0144.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0144.082] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de3b760, ftCreationTime.dwHighDateTime=0x1d5dd29, ftLastAccessTime.dwLowDateTime=0xf9af1bf0, ftLastAccessTime.dwHighDateTime=0x1d5e853, ftLastWriteTime.dwLowDateTime=0xf9af1bf0, ftLastWriteTime.dwHighDateTime=0x1d5e853, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9G5 QwNPQJ", cAlternateFileName="9G5QWN~1")) returned 1 [0144.082] wcscmp (_String1="9G5 QwNPQJ", _String2=".") returned 1 [0144.082] wcscmp (_String1="9G5 QwNPQJ", _String2="..") returned 1 [0144.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6a30 [0144.083] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0144.083] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0144.083] wcscat (in: _Dest=0x3eb6a30, _Source="9G5 QwNPQJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" [0144.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb6a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e0 [0144.086] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd7acd00, ftCreationTime.dwHighDateTime=0x1d5d87a, ftLastAccessTime.dwLowDateTime=0x574dbf10, ftLastAccessTime.dwHighDateTime=0x1d5e42a, ftLastWriteTime.dwLowDateTime=0x574dbf10, ftLastWriteTime.dwHighDateTime=0x1d5e42a, nFileSizeHigh=0x0, nFileSizeLow=0x18aa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="bOd3aYaCUh5ytm.gif", cAlternateFileName="BOD3AY~1.GIF")) returned 1 [0144.086] wcscmp (_String1="bOd3aYaCUh5ytm.gif", _String2=".") returned 1 [0144.086] wcscmp (_String1="bOd3aYaCUh5ytm.gif", _String2="..") returned 1 [0144.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053918 [0144.086] wcscpy (in: _Dest=0x3053918, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0144.086] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0144.086] wcscat (in: _Dest=0x3053918, _Source="bOd3aYaCUh5ytm.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\bOd3aYaCUh5ytm.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\bOd3aYaCUh5ytm.gif" [0144.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0144.087] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ac6140, ftCreationTime.dwHighDateTime=0x1d5e136, ftLastAccessTime.dwLowDateTime=0x1eec1bc0, ftLastAccessTime.dwHighDateTime=0x1d5e606, ftLastWriteTime.dwLowDateTime=0x1eec1bc0, ftLastWriteTime.dwHighDateTime=0x1d5e606, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIyc J9b6 Lw5TjO.bmp", cAlternateFileName="CIYCJ9~1.BMP")) returned 1 [0144.087] wcscmp (_String1="CIyc J9b6 Lw5TjO.bmp", _String2=".") returned 1 [0144.087] wcscmp (_String1="CIyc J9b6 Lw5TjO.bmp", _String2="..") returned 1 [0144.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35af88 [0144.087] wcscpy (in: _Dest=0x35af88, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0144.087] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0144.087] wcscat (in: _Dest=0x35af88, _Source="CIyc J9b6 Lw5TjO.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp" [0144.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35af88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0144.088] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74daeba0, ftCreationTime.dwHighDateTime=0x1d5d946, ftLastAccessTime.dwLowDateTime=0x52588ed0, ftLastAccessTime.dwHighDateTime=0x1d5e5e3, ftLastWriteTime.dwLowDateTime=0x52588ed0, ftLastWriteTime.dwHighDateTime=0x1d5e5e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="F_vXRNpuzjA5k.gif", cAlternateFileName="F_VXRN~1.GIF")) returned 1 [0144.088] wcscmp (_String1="F_vXRNpuzjA5k.gif", _String2=".") returned 1 [0144.088] wcscmp (_String1="F_vXRNpuzjA5k.gif", _String2="..") returned 1 [0144.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053e58 [0144.088] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0144.089] wcscat (in: _Dest=0x3053e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0144.089] wcscat (in: _Dest=0x3053e58, _Source="F_vXRNpuzjA5k.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\F_vXRNpuzjA5k.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\F_vXRNpuzjA5k.gif" [0144.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0144.090] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x271ee030, ftCreationTime.dwHighDateTime=0x1d5d8db, ftLastAccessTime.dwLowDateTime=0xf2446b80, ftLastAccessTime.dwHighDateTime=0x1d5dbed, ftLastWriteTime.dwLowDateTime=0xf2446b80, ftLastWriteTime.dwHighDateTime=0x1d5dbed, nFileSizeHigh=0x0, nFileSizeLow=0xa1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="JN3 HlCuLb.jpg", cAlternateFileName="JN3HLC~1.JPG")) returned 1 [0144.090] wcscmp (_String1="JN3 HlCuLb.jpg", _String2=".") returned 1 [0144.090] wcscmp (_String1="JN3 HlCuLb.jpg", _String2="..") returned 1 [0144.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df57c0 [0144.090] wcscpy (in: _Dest=0x3df57c0, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0144.090] wcscat (in: _Dest=0x3df57c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0144.090] wcscat (in: _Dest=0x3df57c0, _Source="JN3 HlCuLb.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg" [0144.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df57c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0144.091] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ec2cb80, ftCreationTime.dwHighDateTime=0x1d5e044, ftLastAccessTime.dwLowDateTime=0x8f9b86c0, ftLastAccessTime.dwHighDateTime=0x1d5e3c3, ftLastWriteTime.dwLowDateTime=0x8f9b86c0, ftLastWriteTime.dwHighDateTime=0x1d5e3c3, nFileSizeHigh=0x0, nFileSizeLow=0x6427, dwReserved0=0x0, dwReserved1=0x0, cFileName="M9KUh x6JdU.jpg", cAlternateFileName="M9KUHX~1.JPG")) returned 1 [0144.091] wcscmp (_String1="M9KUh x6JdU.jpg", _String2=".") returned 1 [0144.091] wcscmp (_String1="M9KUh x6JdU.jpg", _String2="..") returned 1 [0144.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5220 [0144.091] wcscpy (in: _Dest=0x3df5220, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0144.091] wcscat (in: _Dest=0x3df5220, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0144.091] wcscat (in: _Dest=0x3df5220, _Source="M9KUh x6JdU.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg" [0144.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0144.092] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3086b380, ftCreationTime.dwHighDateTime=0x1d5e46d, ftLastAccessTime.dwLowDateTime=0xd7e101c0, ftLastAccessTime.dwHighDateTime=0x1d5e31a, ftLastWriteTime.dwLowDateTime=0xd7e101c0, ftLastWriteTime.dwHighDateTime=0x1d5e31a, nFileSizeHigh=0x0, nFileSizeLow=0x125fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="USlrgku_a7L6ypEKaH.gif", cAlternateFileName="USLRGK~1.GIF")) returned 1 [0144.092] wcscmp (_String1="USlrgku_a7L6ypEKaH.gif", _String2=".") returned 1 [0144.092] wcscmp (_String1="USlrgku_a7L6ypEKaH.gif", _String2="..") returned 1 [0144.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bea8 [0144.092] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0144.092] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0144.092] wcscat (in: _Dest=0x35bea8, _Source="USlrgku_a7L6ypEKaH.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\USlrgku_a7L6ypEKaH.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\USlrgku_a7L6ypEKaH.gif" [0144.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0144.093] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3d35d0, ftCreationTime.dwHighDateTime=0x1d5e0d9, ftLastAccessTime.dwLowDateTime=0x7501d470, ftLastAccessTime.dwHighDateTime=0x1d5e703, ftLastWriteTime.dwLowDateTime=0x7501d470, ftLastWriteTime.dwHighDateTime=0x1d5e703, nFileSizeHigh=0x0, nFileSizeLow=0x9ece, dwReserved0=0x0, dwReserved1=0x0, cFileName="xRXY.png", cAlternateFileName="")) returned 1 [0144.093] wcscmp (_String1="xRXY.png", _String2=".") returned 1 [0144.093] wcscmp (_String1="xRXY.png", _String2="..") returned 1 [0144.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb70b8 [0144.093] wcscpy (in: _Dest=0x3eb70b8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw" [0144.093] wcscat (in: _Dest=0x3eb70b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0144.093] wcscat (in: _Dest=0x3eb70b8, _Source="xRXY.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png" [0144.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb70b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c8 [0144.094] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3d35d0, ftCreationTime.dwHighDateTime=0x1d5e0d9, ftLastAccessTime.dwLowDateTime=0x7501d470, ftLastAccessTime.dwHighDateTime=0x1d5e703, ftLastWriteTime.dwLowDateTime=0x7501d470, ftLastWriteTime.dwHighDateTime=0x1d5e703, nFileSizeHigh=0x0, nFileSizeLow=0x9ece, dwReserved0=0x0, dwReserved1=0x0, cFileName="xRXY.png", cAlternateFileName="")) returned 0 [0144.094] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0144.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0144.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062988) returned 1 [0144.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 Thread: id = 1091 os_tid = 0x18cc [0134.395] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\gjbqayskgmsexhid_.jpg")) returned 0x20 [0134.395] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg", dwFileAttributes=0x20) returned 1 [0137.409] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\gjbqayskgmsexhid_.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cf8 [0137.409] GetFileSizeEx (in: hFile=0x1cf8, lpFileSize=0x80efe94 | out: lpFileSize=0x80efe94*=43988) returned 1 [0137.409] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0xabd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.409] ReadFile (in: hFile=0x1cf8, lpBuffer=0x80efe70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x80efe80, lpOverlapped=0x0 | out: lpBuffer=0x80efe70*, lpNumberOfBytesRead=0x80efe80*=0x4, lpOverlapped=0x0) returned 1 [0137.411] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0137.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0137.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0137.412] NtQuerySystemTime (in: CurrentTime=0x80efe08 | out: CurrentTime=0x80efe08*=132462177166704000) returned 0x0 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x2b95d1ae [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x2775226a [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x37312549 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x2d07525d [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x76632613 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0xb6794fc [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x7334c7f1 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x71f9daec [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x32b7860a [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x2c7157d [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x58a71aec [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x273ef633 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x546f9ed9 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x59f2d0ce [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x546e7d68 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x4240189b [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x1fe0e928 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x716dc953 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x591f28cf [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x7103adf6 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x359bf3ff [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x7251d66d [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x54bb0ec6 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x18351529 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x7c4fc78f [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x4a429dd6 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x72e0b9e6 [0137.412] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x1a6f795c [0137.413] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x27a2c08b [0137.413] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x2c4c9510 [0137.413] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0xae6bfc5 [0137.413] RtlRandomEx (in: Seed=0x80efe00 | out: Seed=0x80efe00) returned 0x464c6018 [0137.423] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.423] ReadFile (in: hFile=0x1cf8, lpBuffer=0x7a930f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x80efe08, lpOverlapped=0x0 | out: lpBuffer=0x7a930f0*, lpNumberOfBytesRead=0x80efe08*=0x3c00, lpOverlapped=0x0) returned 1 [0137.423] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0137.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0137.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0137.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0137.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a7c8c0 [0137.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0137.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0137.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0137.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.424] WriteFile (in: hFile=0x1cf8, lpBuffer=0x7a7c8c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x80efe08, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesWritten=0x80efe08*=0x3c00, lpOverlapped=0x0) returned 1 [0137.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a7c8c0) returned 1 [0137.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a930f0) returned 1 [0137.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad7770 [0137.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0137.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad7870 [0137.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0137.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0137.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0137.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d56058 [0137.890] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.890] WriteFile (in: hFile=0x1cf8, lpBuffer=0x3d56058*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x80efe88, lpOverlapped=0x0 | out: lpBuffer=0x3d56058*, lpNumberOfBytesWritten=0x80efe88*=0x11c, lpOverlapped=0x0) returned 1 [0138.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56058) returned 1 [0138.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7870) returned 1 [0138.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0138.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7770) returned 1 [0138.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0138.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0138.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0138.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0138.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6020 [0138.131] wcscpy (in: _Dest=0x7ad6020, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg" [0138.131] wcscat (in: _Dest=0x7ad6020, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg.68814f" [0138.131] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg.68814f", NtPathName=0x80efe00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\GJbqAyskGmsEXhID_.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b928 [0138.131] NtSetInformationFile (FileHandle=0x1cf8, IoStatusBlock=0x80efe08, FileInformation=0x35b928, Length=0xa6, FileInformationClass=0xa) returned 0x0 [0138.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 [0138.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7d398) returned 1 [0138.212] NtQueryInformationFile (in: FileHandle=0x1cf8, IoStatusBlock=0x80efdd8, FileInformation=0x80efde0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x80efdd8, FileInformation=0x80efde0) returned 0x0 [0138.212] NtSetInformationFile (FileHandle=0x1cf8, IoStatusBlock=0x80efdd8, FileInformation=0x80efde0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6020) returned 1 [0138.233] FlushFileBuffers (hFile=0x1cf8) returned 1 [0138.250] CloseHandle (hObject=0x1cf8) returned 1 [0138.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9ef0 [0138.264] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" [0138.264] wcscat (in: _Dest=0x3eb9ef0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\68814F-Readme.txt" [0138.264] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\68814f-readme.txt")) returned 0xffffffff [0138.264] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d14 [0138.279] WriteFile (in: hFile=0x1d14, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x80efe1c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x80efe1c*=0x8b9, lpOverlapped=0x0) returned 1 [0138.289] CloseHandle (hObject=0x1d14) returned 1 [0138.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 [0138.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 Thread: id = 1092 os_tid = 0x18d0 [0134.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e18f18 [0134.414] wcscpy (in: _Dest=0x3e18f18, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP" [0134.414] wcscat (in: _Dest=0x3e18f18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\" [0134.414] wcscat (in: _Dest=0x3e18f18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\*" [0134.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0134.414] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ea30970, ftCreationTime.dwHighDateTime=0x1d5e81d, ftLastAccessTime.dwLowDateTime=0xf83e43d0, ftLastAccessTime.dwHighDateTime=0x1d5d86e, ftLastWriteTime.dwLowDateTime=0xf83e43d0, ftLastWriteTime.dwHighDateTime=0x1d5d86e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0134.415] wcscmp (_String1=".", _String2=".") returned 0 [0134.415] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ea30970, ftCreationTime.dwHighDateTime=0x1d5e81d, ftLastAccessTime.dwLowDateTime=0xf83e43d0, ftLastAccessTime.dwHighDateTime=0x1d5d86e, ftLastWriteTime.dwLowDateTime=0xf83e43d0, ftLastWriteTime.dwHighDateTime=0x1d5d86e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.415] wcscmp (_String1="..", _String2=".") returned 1 [0134.415] wcscmp (_String1="..", _String2="..") returned 0 [0134.415] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473ef130, ftCreationTime.dwHighDateTime=0x1d5dce0, ftLastAccessTime.dwLowDateTime=0xd0636980, ftLastAccessTime.dwHighDateTime=0x1d5dc2e, ftLastWriteTime.dwLowDateTime=0xd0636980, ftLastWriteTime.dwHighDateTime=0x1d5dc2e, nFileSizeHigh=0x0, nFileSizeLow=0x2067, dwReserved0=0x0, dwReserved1=0x0, cFileName="6lFkz6Sv2xXEc3y.png", cAlternateFileName="6LFKZ6~1.PNG")) returned 1 [0134.415] wcscmp (_String1="6lFkz6Sv2xXEc3y.png", _String2=".") returned 1 [0134.415] wcscmp (_String1="6lFkz6Sv2xXEc3y.png", _String2="..") returned 1 [0134.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e7acd0 [0134.415] wcscpy (in: _Dest=0x3e7acd0, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP" [0134.415] wcscat (in: _Dest=0x3e7acd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\" [0134.415] wcscat (in: _Dest=0x3e7acd0, _Source="6lFkz6Sv2xXEc3y.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png" [0140.961] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\lmq8ivmz1qyibp\\6lfkz6sv2xxec3y.png")) returned 0x20 [0140.961] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png", dwFileAttributes=0x20) returned 1 [0140.961] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\lmq8ivmz1qyibp\\6lfkz6sv2xxec3y.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14c8 [0140.961] GetFileSizeEx (in: hFile=0x14c8, lpFileSize=0x95cfc84 | out: lpFileSize=0x95cfc84*=8295) returned 1 [0140.961] SetFilePointerEx (in: hFile=0x14c8, liDistanceToMove=0x2063, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.961] ReadFile (in: hFile=0x14c8, lpBuffer=0x95cfc60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x95cfc70, lpOverlapped=0x0 | out: lpBuffer=0x95cfc60*, lpNumberOfBytesRead=0x95cfc70*=0x4, lpOverlapped=0x0) returned 1 [0140.963] SetFilePointerEx (in: hFile=0x14c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb440 [0140.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd560 [0140.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddd58 [0140.963] NtQuerySystemTime (in: CurrentTime=0x95cfbf8 | out: CurrentTime=0x95cfbf8*=132462177201648000) returned 0x0 [0140.963] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x34dcf022 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x5520e6a4 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x3bdb684a [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x37731e4 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x28b2b09e [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x1db18401 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x6491226e [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x7cacb314 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0xc17175e [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x593e72ff [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x5c46003d [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x13af06e0 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x262bbb0b [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x773af862 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x376dfb66 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x6c1b354b [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x79b8d8a0 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x24b0a0fb [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x619fd794 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x731e53f8 [0140.964] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x471c2470 [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x442d17a [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x34c7db46 [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x2b1b5801 [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x79916838 [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x70421ed2 [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x429f726d [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x51ccd698 [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x86e68f9 [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x49a4f664 [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x405a5f94 [0140.965] RtlRandomEx (in: Seed=0x95cfbf0 | out: Seed=0x95cfbf0) returned 0x157316c1 [0140.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb440) returned 1 [0140.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aad528 [0140.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a804c8 [0140.975] ReadFile (in: hFile=0x14c8, lpBuffer=0x7aad528, nNumberOfBytesToRead=0x2067, lpNumberOfBytesRead=0x95cfbec, lpOverlapped=0x0 | out: lpBuffer=0x7aad528*, lpNumberOfBytesRead=0x95cfbec*=0x2067, lpOverlapped=0x0) returned 1 [0140.975] SetFilePointerEx (in: hFile=0x14c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.976] WriteFile (in: hFile=0x14c8, lpBuffer=0x7a804c8*, nNumberOfBytesToWrite=0x2067, lpNumberOfBytesWritten=0x95cfbf0, lpOverlapped=0x0 | out: lpBuffer=0x7a804c8*, lpNumberOfBytesWritten=0x95cfbf0*=0x2067, lpOverlapped=0x0) returned 1 [0142.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb1c0 [0142.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd5d8 [0142.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd5d8) returned 1 [0142.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a804c8) returned 1 [0142.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aad528) returned 1 [0142.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0142.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84e40) returned 1 [0142.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7ad7fb0 [0142.918] SetFilePointerEx (in: hFile=0x14c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.918] WriteFile (in: hFile=0x14c8, lpBuffer=0x3d55f30*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x95cfc78, lpOverlapped=0x0 | out: lpBuffer=0x3d55f30*, lpNumberOfBytesWritten=0x95cfc78*=0x118, lpOverlapped=0x0) returned 1 [0143.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55f30) returned 1 [0143.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7ff0) returned 1 [0143.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd5d8) returned 1 [0143.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7fb0) returned 1 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb1c0) returned 1 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd560) returned 1 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddb78) returned 1 [0143.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddb28) returned 1 [0143.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6db8 [0143.013] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png" [0143.013] wcscat (in: _Dest=0x2ff6db8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png.68814f" [0143.013] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png.68814f", NtPathName=0x95cfbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\6lFkz6Sv2xXEc3y.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d40a88 [0143.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a88) returned 1 [0143.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e021e0) returned 1 [0143.106] NtQueryInformationFile (in: FileHandle=0x14c8, IoStatusBlock=0x95cfbc8, FileInformation=0x95cfbd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x95cfbc8, FileInformation=0x95cfbd0) returned 0x0 [0143.106] NtSetInformationFile (FileHandle=0x14c8, IoStatusBlock=0x95cfbc8, FileInformation=0x95cfbd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0143.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 [0143.123] FlushFileBuffers (hFile=0x14c8) returned 1 [0143.329] CloseHandle (hObject=0x14c8) returned 1 [0143.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e480 [0143.985] wcscpy (in: _Dest=0x7a5e480, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\" [0143.985] wcscat (in: _Dest=0x7a5e480, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\68814F-Readme.txt" [0143.985] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\lmq8ivmz1qyibp\\68814f-readme.txt")) returned 0xffffffff [0143.985] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\lmq8ivmz1qyibp\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ba4 [0144.063] WriteFile (in: hFile=0x1ba4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x95cfc0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x95cfc0c*=0x8b9, lpOverlapped=0x0) returned 1 [0144.065] CloseHandle (hObject=0x1ba4) returned 1 [0144.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e480) returned 1 [0144.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7acd0) returned 1 [0144.065] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a4b63f0, ftCreationTime.dwHighDateTime=0x1d5d844, ftLastAccessTime.dwLowDateTime=0xe207810, ftLastAccessTime.dwHighDateTime=0x1d5d98e, ftLastWriteTime.dwLowDateTime=0xe207810, ftLastWriteTime.dwHighDateTime=0x1d5d98e, nFileSizeHigh=0x0, nFileSizeLow=0x1a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GsDjd sUWU0UbMd-.gif", cAlternateFileName="GSDJDS~1.GIF")) returned 1 [0144.066] wcscmp (_String1="GsDjd sUWU0UbMd-.gif", _String2=".") returned 1 [0144.066] wcscmp (_String1="GsDjd sUWU0UbMd-.gif", _String2="..") returned 1 [0144.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e7acd0 [0144.066] wcscpy (in: _Dest=0x3e7acd0, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP" [0144.066] wcscat (in: _Dest=0x3e7acd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\" [0144.066] wcscat (in: _Dest=0x3e7acd0, _Source="GsDjd sUWU0UbMd-.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\GsDjd sUWU0UbMd-.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\GsDjd sUWU0UbMd-.gif" [0146.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7acd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0146.085] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x592bacb0, ftCreationTime.dwHighDateTime=0x1d5de1d, ftLastAccessTime.dwLowDateTime=0x9acb5240, ftLastAccessTime.dwHighDateTime=0x1d5e4b4, ftLastWriteTime.dwLowDateTime=0x9acb5240, ftLastWriteTime.dwHighDateTime=0x1d5e4b4, nFileSizeHigh=0x0, nFileSizeLow=0x11f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pl2y.png", cAlternateFileName="")) returned 1 [0146.085] wcscmp (_String1="Pl2y.png", _String2=".") returned 1 [0146.086] wcscmp (_String1="Pl2y.png", _String2="..") returned 1 [0146.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45140 [0146.086] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP" [0146.086] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\" [0146.086] wcscat (in: _Dest=0x3d45140, _Source="Pl2y.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png" [0146.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0146.088] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x592bacb0, ftCreationTime.dwHighDateTime=0x1d5de1d, ftLastAccessTime.dwLowDateTime=0x9acb5240, ftLastAccessTime.dwHighDateTime=0x1d5e4b4, ftLastWriteTime.dwLowDateTime=0x9acb5240, ftLastWriteTime.dwHighDateTime=0x1d5e4b4, nFileSizeHigh=0x0, nFileSizeLow=0x11f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pl2y.png", cAlternateFileName="")) returned 0 [0146.088] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0146.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0146.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18f18) returned 1 [0146.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19d18) returned 1 Thread: id = 1093 os_tid = 0x18d4 [0134.422] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\rdrojurtfoy.bmp")) returned 0x20 [0134.422] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp", dwFileAttributes=0x20) returned 1 [0137.424] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\rdrojurtfoy.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d00 [0137.425] GetFileSizeEx (in: hFile=0x1d00, lpFileSize=0xabffccc | out: lpFileSize=0xabffccc*=96750) returned 1 [0137.425] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x179ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.425] ReadFile (in: hFile=0x1d00, lpBuffer=0xabffca8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xabffcb8, lpOverlapped=0x0 | out: lpBuffer=0xabffca8*, lpNumberOfBytesRead=0xabffcb8*=0x4, lpOverlapped=0x0) returned 1 [0137.427] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0137.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0137.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0137.427] NtQuerySystemTime (in: CurrentTime=0xabffc40 | out: CurrentTime=0xabffc40*=132462177166860000) returned 0x0 [0137.427] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x6b598d3d [0137.427] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x12eeec5a [0137.427] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x20cb186d [0137.427] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x5951d204 [0137.427] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x307bb0b [0137.427] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x4974d8fd [0137.427] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x7074a3e9 [0137.427] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x4c0ab96b [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x47767fdf [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x1f2b5c37 [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x1f95dc70 [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x4248f13 [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x73b4116a [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x422f9aef [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x54f89632 [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x5028ce63 [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x73c2f8d7 [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x763eec09 [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x6857034 [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x53c4d73f [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x46f254df [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x7c6e9b1b [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x55d3dfbf [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x2f5a515c [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x5bcabe5c [0137.428] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x447afb77 [0137.429] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x755513ed [0137.429] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x5d217cc2 [0137.429] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x35300223 [0137.429] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x5bd6bc71 [0137.429] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x5d56c63f [0137.429] RtlRandomEx (in: Seed=0xabffc38 | out: Seed=0xabffc38) returned 0x3e7237be [0137.442] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.443] ReadFile (in: hFile=0x1d00, lpBuffer=0x7a804c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xabffc40, lpOverlapped=0x0 | out: lpBuffer=0x7a804c8*, lpNumberOfBytesRead=0xabffc40*=0x3c00, lpOverlapped=0x0) returned 1 [0137.443] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0137.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0137.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0137.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0137.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a840d0 [0137.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0137.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0137.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ea8) returned 1 [0137.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.444] WriteFile (in: hFile=0x1d00, lpBuffer=0x7a840d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xabffc40, lpOverlapped=0x0 | out: lpBuffer=0x7a840d0*, lpNumberOfBytesWritten=0xabffc40*=0x3c00, lpOverlapped=0x0) returned 1 [0137.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a840d0) returned 1 [0137.900] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.900] ReadFile (in: hFile=0x1d00, lpBuffer=0x7a804c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xabffc40, lpOverlapped=0x0 | out: lpBuffer=0x7a804c8*, lpNumberOfBytesRead=0xabffc40*=0x3c00, lpOverlapped=0x0) returned 1 [0137.900] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde18 [0137.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0137.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0137.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0137.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a840d0 [0137.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0137.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0137.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0137.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.901] WriteFile (in: hFile=0x1d00, lpBuffer=0x7a840d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xabffc40, lpOverlapped=0x0 | out: lpBuffer=0x7a840d0*, lpNumberOfBytesWritten=0xabffc40*=0x3c00, lpOverlapped=0x0) returned 1 [0137.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a840d0) returned 1 [0137.910] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x13dee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.910] ReadFile (in: hFile=0x1d00, lpBuffer=0x7a804c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xabffc40, lpOverlapped=0x0 | out: lpBuffer=0x7a804c8*, lpNumberOfBytesRead=0xabffc40*=0x3c00, lpOverlapped=0x0) returned 1 [0137.910] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x13dee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde18 [0137.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0137.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0137.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0137.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a840d0 [0137.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0137.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0137.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0137.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.911] WriteFile (in: hFile=0x1d00, lpBuffer=0x7a840d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xabffc40, lpOverlapped=0x0 | out: lpBuffer=0x7a840d0*, lpNumberOfBytesWritten=0xabffc40*=0x3c00, lpOverlapped=0x0) returned 1 [0137.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a840d0) returned 1 [0137.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee1078 [0137.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0137.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x7a38620 [0137.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0137.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0137.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0137.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x150) returned 0x3e0ac18 [0137.916] SetFilePointerEx (in: hFile=0x1d00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.916] WriteFile (in: hFile=0x1d00, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0xabffcc0, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0xabffcc0*=0x150, lpOverlapped=0x0) returned 1 [0138.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0138.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38620) returned 1 [0138.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0138.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38578) returned 1 [0138.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 [0138.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0138.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3330) returned 1 [0138.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0138.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44a80 [0138.140] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp" [0138.140] wcscat (in: _Dest=0x3d44a80, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp.68814f" [0138.140] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp.68814f", NtPathName=0xabffc38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\rdrOJURtfOY.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053bb8 [0138.141] NtSetInformationFile (FileHandle=0x1d00, IoStatusBlock=0xabffc40, FileInformation=0x3053bb8, Length=0x9a, FileInformationClass=0xa) returned 0x0 [0138.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 [0138.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7c480) returned 1 [0138.436] NtQueryInformationFile (in: FileHandle=0x1d00, IoStatusBlock=0xabffc10, FileInformation=0xabffc18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xabffc10, FileInformation=0xabffc18) returned 0x0 [0138.436] NtSetInformationFile (FileHandle=0x1d00, IoStatusBlock=0xabffc10, FileInformation=0xabffc18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 [0138.438] FlushFileBuffers (hFile=0x1d00) returned 1 [0138.440] CloseHandle (hObject=0x1d00) returned 1 [0138.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8f88 [0138.443] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" [0138.443] wcscat (in: _Dest=0x3eb8f88, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\68814F-Readme.txt" [0138.443] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\68814f-readme.txt")) returned 0x20 [0138.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 [0138.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19698) returned 1 Thread: id = 1094 os_tid = 0x18d8 [0134.427] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\SIpGpFRYQBnD.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\sipgpfryqbnd.gif")) returned 0x20 [0134.428] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\SIpGpFRYQBnD.gif", dwFileAttributes=0x20) returned 1 [0137.446] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\SIpGpFRYQBnD.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\sipgpfryqbnd.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d04 [0137.446] GetFileSizeEx (in: hFile=0x1d04, lpFileSize=0xc5ef81c | out: lpFileSize=0xc5ef81c*=99298) returned 1 [0137.446] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x183de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.446] ReadFile (in: hFile=0x1d04, lpBuffer=0xc5ef7f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc5ef808, lpOverlapped=0x0 | out: lpBuffer=0xc5ef7f8*, lpNumberOfBytesRead=0xc5ef808*=0x4, lpOverlapped=0x0) returned 1 [0137.448] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0137.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0137.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0137.449] NtQuerySystemTime (in: CurrentTime=0xc5ef790 | out: CurrentTime=0xc5ef790*=132462177167172000) returned 0x0 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x103b2e68 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x74a2dbc1 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x5b197ecf [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x6eb2e972 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0xea13e0a [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x5960d33f [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x403917cc [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x505f028a [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x1475d104 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x28cefe4c [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x3e82922b [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x379aaa39 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x55c8bdef [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x44fd21f8 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x7bfc5362 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x299d64a2 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x6c4b5b6d [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x1d8a0921 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x6fe60f48 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x5d1d83e8 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0xc77aca1 [0137.449] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x5d1b402 [0137.450] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x6d4461d [0137.450] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x337e178c [0137.450] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x1db4e1e1 [0137.450] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x5e61ea6f [0137.450] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x77e2a4e9 [0137.450] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x1bf8145f [0137.450] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x55d61813 [0137.450] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x73ecb966 [0137.450] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x1f7db551 [0137.450] RtlRandomEx (in: Seed=0xc5ef788 | out: Seed=0xc5ef788) returned 0x595af687 [0137.460] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.460] ReadFile (in: hFile=0x1d04, lpBuffer=0x7a96cf8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc5ef790, lpOverlapped=0x0 | out: lpBuffer=0x7a96cf8*, lpNumberOfBytesRead=0xc5ef790*=0x3c00, lpOverlapped=0x0) returned 1 [0137.461] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0137.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0137.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0137.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ea8) returned 1 [0137.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9a900 [0137.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0137.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0137.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0137.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.462] WriteFile (in: hFile=0x1d04, lpBuffer=0x7a9a900*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc5ef790, lpOverlapped=0x0 | out: lpBuffer=0x7a9a900*, lpNumberOfBytesWritten=0xc5ef790*=0x3c00, lpOverlapped=0x0) returned 1 [0137.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9a900) returned 1 [0137.904] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.904] ReadFile (in: hFile=0x1d04, lpBuffer=0x7a96cf8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc5ef790, lpOverlapped=0x0 | out: lpBuffer=0x7a96cf8*, lpNumberOfBytesRead=0xc5ef790*=0x3c00, lpOverlapped=0x0) returned 1 [0137.904] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde18 [0137.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0137.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0137.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0137.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9a900 [0137.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0137.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0137.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0137.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.905] WriteFile (in: hFile=0x1d04, lpBuffer=0x7a9a900*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc5ef790, lpOverlapped=0x0 | out: lpBuffer=0x7a9a900*, lpNumberOfBytesWritten=0xc5ef790*=0x3c00, lpOverlapped=0x0) returned 1 [0137.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9a900) returned 1 [0137.906] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x147e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.906] ReadFile (in: hFile=0x1d04, lpBuffer=0x7a96cf8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc5ef790, lpOverlapped=0x0 | out: lpBuffer=0x7a96cf8*, lpNumberOfBytesRead=0xc5ef790*=0x3c00, lpOverlapped=0x0) returned 1 [0137.906] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x147e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde18 [0137.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0137.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0137.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0137.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9a900 [0137.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0137.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0137.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2980) returned 1 [0137.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.907] WriteFile (in: hFile=0x1d04, lpBuffer=0x7a9a900*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc5ef790, lpOverlapped=0x0 | out: lpBuffer=0x7a9a900*, lpNumberOfBytesWritten=0xc5ef790*=0x3c00, lpOverlapped=0x0) returned 1 [0137.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9a900) returned 1 [0137.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0858 [0137.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ea8) returned 1 [0137.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3dac0a0 [0137.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0137.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0137.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0137.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x152) returned 0x3dce108 [0137.909] SetFilePointerEx (in: hFile=0x1d04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.909] WriteFile (in: hFile=0x1d04, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0xc5ef810, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0xc5ef810*=0x152, lpOverlapped=0x0) returned 1 [0138.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde60 [0138.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0138.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0138.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0138.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0138.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0138.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0138.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0138.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e84538 [0138.135] sprintf (in: _Dest=0x3e84538, _Format="%c%c" | out: _Dest="f5") returned 2 [0138.136] sprintf (in: _Dest=0x3e8453a, _Format="%c%c" | out: _Dest="e9") returned 2 [0138.136] sprintf (in: _Dest=0x3e8453c, _Format="%c%c" | out: _Dest="4e") returned 2 [0138.136] sprintf (in: _Dest=0x3e8453e, _Format="%c%c" | out: _Dest="a9") returned 2 [0138.136] sprintf (in: _Dest=0x3e84540, _Format="%c%c" | out: _Dest="78") returned 2 [0138.136] sprintf (in: _Dest=0x3e84542, _Format="%c%c" | out: _Dest="1d") returned 2 [0138.136] sprintf (in: _Dest=0x3e84544, _Format="%c%c" | out: _Dest="de") returned 2 [0138.136] sprintf (in: _Dest=0x3e84546, _Format="%c%c" | out: _Dest="03") returned 2 [0138.136] sprintf (in: _Dest=0x3e84548, _Format="%c%c" | out: _Dest="01") returned 2 [0138.136] sprintf (in: _Dest=0x3e8454a, _Format="%c%c" | out: _Dest="e5") returned 2 [0138.136] sprintf (in: _Dest=0x3e8454c, _Format="%c%c" | out: _Dest="97") returned 2 [0138.136] sprintf (in: _Dest=0x3e8454e, _Format="%c%c" | out: _Dest="f7") returned 2 [0138.136] sprintf (in: _Dest=0x3e84550, _Format="%c%c" | out: _Dest="6d") returned 2 [0138.136] sprintf (in: _Dest=0x3e84552, _Format="%c%c" | out: _Dest="ef") returned 2 [0138.136] sprintf (in: _Dest=0x3e84554, _Format="%c%c" | out: _Dest="e5") returned 2 [0138.136] sprintf (in: _Dest=0x3e84556, _Format="%c%c" | out: _Dest="c3") returned 2 [0138.136] sprintf (in: _Dest=0x3e84558, _Format="%c%c" | out: _Dest="fe") returned 2 [0138.136] sprintf (in: _Dest=0x3e8455a, _Format="%c%c" | out: _Dest="3e") returned 2 [0138.136] sprintf (in: _Dest=0x3e8455c, _Format="%c%c" | out: _Dest="ba") returned 2 [0138.136] sprintf (in: _Dest=0x3e8455e, _Format="%c%c" | out: _Dest="16") returned 2 [0138.136] sprintf (in: _Dest=0x3e84560, _Format="%c%c" | out: _Dest="95") returned 2 [0138.136] sprintf (in: _Dest=0x3e84562, _Format="%c%c" | out: _Dest="2e") returned 2 [0138.136] sprintf (in: _Dest=0x3e84564, _Format="%c%c" | out: _Dest="ea") returned 2 [0138.137] sprintf (in: _Dest=0x3e84566, _Format="%c%c" | out: _Dest="d3") returned 2 [0138.137] sprintf (in: _Dest=0x3e84568, _Format="%c%c" | out: _Dest="50") returned 2 [0138.137] sprintf (in: _Dest=0x3e8456a, _Format="%c%c" | out: _Dest="3d") returned 2 [0138.137] sprintf (in: _Dest=0x3e8456c, _Format="%c%c" | out: _Dest="fd") returned 2 [0138.137] sprintf (in: _Dest=0x3e8456e, _Format="%c%c" | out: _Dest="f1") returned 2 [0138.137] sprintf (in: _Dest=0x3e84570, _Format="%c%c" | out: _Dest="bd") returned 2 [0138.137] sprintf (in: _Dest=0x3e84572, _Format="%c%c" | out: _Dest="f1") returned 2 [0138.137] sprintf (in: _Dest=0x3e84574, _Format="%c%c" | out: _Dest="5f") returned 2 [0138.137] sprintf (in: _Dest=0x3e84576, _Format="%c%c" | out: _Dest="db") returned 2 [0138.137] RtlInitAnsiString (in: DestinationString=0xc5ef798, SourceString="f5e94ea9781dde0301e597f76defe5c3fe3eba16952eead3503dfdf1bdf15fdb" | out: DestinationString="f5e94ea9781dde0301e597f76defe5c3fe3eba16952eead3503dfdf1bdf15fdb") [0138.137] RtlAnsiStringToUnicodeString (in: DestinationString=0xc5ef790, SourceString="f5e94ea9781dde0301e597f76defe5c3fe3eba16952eead3503dfdf1bdf15fdb", AllocateDestinationString=1 | out: DestinationString="f5e94ea9781dde0301e597f76defe5c3fe3eba16952eead3503dfdf1bdf15fdb") returned 0x0 [0138.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44180 [0138.137] wcscat (in: _Dest=0x3d449f0, _Source="f5e94ea9781dde03" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\f5e94ea9781dde03") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\f5e94ea9781dde03" [0138.137] wcscat (in: _Dest=0x3d449f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\f5e94ea9781dde03.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\f5e94ea9781dde03.68814f" [0138.137] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\f5e94ea9781dde03.68814f", NtPathName=0xc5ef788, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\f5e94ea9781dde03.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053e58 [0138.137] NtSetInformationFile (FileHandle=0x1d04, IoStatusBlock=0xc5ef790, FileInformation=0x3053e58, Length=0x9c, FileInformationClass=0xa) returned 0x0 [0138.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 [0138.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7c8d0) returned 1 [0138.445] NtQueryInformationFile (in: FileHandle=0x1d04, IoStatusBlock=0xc5ef760, FileInformation=0xc5ef768, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc5ef760, FileInformation=0xc5ef768) returned 0x0 [0138.445] NtSetInformationFile (FileHandle=0x1d04, IoStatusBlock=0xc5ef760, FileInformation=0xc5ef768, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449f0) returned 1 [0138.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44180) returned 1 [0138.446] FlushFileBuffers (hFile=0x1d04) returned 1 [0138.470] CloseHandle (hObject=0x1d04) returned 1 [0138.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c538 [0138.473] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\" [0138.473] wcscat (in: _Dest=0x3f3c538, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\68814F-Readme.txt" [0138.473] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\68814f-readme.txt")) returned 0x20 [0138.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 [0138.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 Thread: id = 1095 os_tid = 0x18dc [0134.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fa10 [0134.432] wcscpy (in: _Dest=0x3f3fa10, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0134.432] wcscat (in: _Dest=0x3f3fa10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0134.432] wcscat (in: _Dest=0x3f3fa10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*" [0134.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0134.432] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0134.432] wcscmp (_String1=".", _String2=".") returned 0 [0134.432] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb963630, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.432] wcscmp (_String1="..", _String2=".") returned 1 [0134.432] wcscmp (_String1="..", _String2="..") returned 0 [0134.433] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0134.433] wcscmp (_String1="Collab", _String2=".") returned 1 [0134.433] wcscmp (_String1="Collab", _String2="..") returned 1 [0134.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a418 [0134.433] wcscpy (in: _Dest=0x3e1a418, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0134.433] wcscat (in: _Dest=0x3e1a418, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0134.433] wcscat (in: _Dest=0x3e1a418, _Source="Collab" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" [0136.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1a418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0136.746] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0136.746] wcscmp (_String1="Forms", _String2=".") returned 1 [0136.747] wcscmp (_String1="Forms", _String2="..") returned 1 [0136.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19898 [0136.747] wcscpy (in: _Dest=0x3e19898, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0136.747] wcscat (in: _Dest=0x3e19898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0136.747] wcscat (in: _Dest=0x3e19898, _Source="Forms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" [0136.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e19898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0136.748] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb989790, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1 [0136.748] wcscmp (_String1="JavaScripts", _String2=".") returned 1 [0136.748] wcscmp (_String1="JavaScripts", _String2="..") returned 1 [0136.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba220 [0136.748] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0136.748] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0136.748] wcscat (in: _Dest=0x3eba220, _Source="JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0136.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0136.749] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0136.749] wcscmp (_String1="Security", _String2=".") returned 1 [0136.750] wcscmp (_String1="Security", _String2="..") returned 1 [0136.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9120 [0136.750] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0136.750] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\" [0136.750] wcscat (in: _Dest=0x3eb9120, _Source="Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0136.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0136.751] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0136.751] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0136.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0136.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0136.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ae0) returned 1 Thread: id = 1096 os_tid = 0x18e0 [0134.435] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\8TwXMCsLO.avi" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\8twxmcslo.avi")) returned 0x20 [0134.435] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\8TwXMCsLO.avi", dwFileAttributes=0x20) returned 1 [0137.469] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\8TwXMCsLO.avi" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\8twxmcslo.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d0c [0137.469] GetFileSizeEx (in: hFile=0x1d0c, lpFileSize=0x84df964 | out: lpFileSize=0x84df964*=101364) returned 1 [0137.469] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0x18bf0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.469] ReadFile (in: hFile=0x1d0c, lpBuffer=0x84df940, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x84df950, lpOverlapped=0x0 | out: lpBuffer=0x84df940*, lpNumberOfBytesRead=0x84df950*=0x4, lpOverlapped=0x0) returned 1 [0137.471] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0137.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31c8 [0137.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0137.471] NtQuerySystemTime (in: CurrentTime=0x84df8d8 | out: CurrentTime=0x84df8d8*=132462177167328000) returned 0x0 [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x1d410306 [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x4929400d [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x3f623333 [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x21721e66 [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x79ab020b [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x5856898a [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x1cd90469 [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x4ef383e1 [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x32173c8b [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x113c2cdf [0137.471] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x484222ce [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x31335960 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x75159cae [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x65f9cc7e [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0xc86b551 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x2baf9ceb [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x1bafa737 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x6ddbf62b [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x6c32ed87 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x21d2eca4 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x5a7d7e9f [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x7f3a21b6 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x35b4dcd3 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x646b4c36 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x49ea5403 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0xa63937e [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x2aec8d62 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x1e874010 [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x6c22722c [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x1e8b609a [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x481e724f [0137.472] RtlRandomEx (in: Seed=0x84df8d0 | out: Seed=0x84df8d0) returned 0x2a99929 [0137.482] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.482] ReadFile (in: hFile=0x1d0c, lpBuffer=0x7aa2110, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x84df8d8, lpOverlapped=0x0 | out: lpBuffer=0x7aa2110*, lpNumberOfBytesRead=0x84df8d8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.482] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0137.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0137.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0137.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0137.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa5d18 [0137.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0137.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0137.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38f8) returned 1 [0137.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.483] WriteFile (in: hFile=0x1d0c, lpBuffer=0x7aa5d18*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x84df8d8, lpOverlapped=0x0 | out: lpBuffer=0x7aa5d18*, lpNumberOfBytesWritten=0x84df8d8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa5d18) returned 1 [0137.919] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.919] ReadFile (in: hFile=0x1d0c, lpBuffer=0x7aa2110, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x84df8d8, lpOverlapped=0x0 | out: lpBuffer=0x7aa2110*, lpNumberOfBytesRead=0x84df8d8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.919] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde18 [0137.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0137.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0137.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0137.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa5d18 [0137.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0137.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0137.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0137.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.920] WriteFile (in: hFile=0x1d0c, lpBuffer=0x7aa5d18*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x84df8d8, lpOverlapped=0x0 | out: lpBuffer=0x7aa5d18*, lpNumberOfBytesWritten=0x84df8d8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa5d18) returned 1 [0137.924] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0x14ff4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.924] ReadFile (in: hFile=0x1d0c, lpBuffer=0x7aa2110, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x84df8d8, lpOverlapped=0x0 | out: lpBuffer=0x7aa2110*, lpNumberOfBytesRead=0x84df8d8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.925] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0x14ff4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde18 [0137.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0137.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0137.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0137.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa5d18 [0137.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0137.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0137.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2980) returned 1 [0137.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.926] WriteFile (in: hFile=0x1d0c, lpBuffer=0x7aa5d18*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x84df8d8, lpOverlapped=0x0 | out: lpBuffer=0x7aa5d18*, lpNumberOfBytesWritten=0x84df8d8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa5d18) returned 1 [0137.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee11b0 [0137.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0137.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37740 [0137.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0137.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0137.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0137.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0137.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e0b2d0 [0137.949] SetFilePointerEx (in: hFile=0x1d0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.949] WriteFile (in: hFile=0x1d0c, lpBuffer=0x3e0b2d0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x84df958, lpOverlapped=0x0 | out: lpBuffer=0x3e0b2d0*, lpNumberOfBytesWritten=0x84df958*=0x14c, lpOverlapped=0x0) returned 1 [0138.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde18 [0138.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0138.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3240) returned 1 [0138.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3240 [0138.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3268 [0138.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0138.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0138.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0138.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7af0 [0138.152] sprintf (in: _Dest=0x7ad7af0, _Format="%c%c" | out: _Dest="df") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7af2, _Format="%c%c" | out: _Dest="25") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7af4, _Format="%c%c" | out: _Dest="c1") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7af6, _Format="%c%c" | out: _Dest="c2") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7af8, _Format="%c%c" | out: _Dest="da") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7afa, _Format="%c%c" | out: _Dest="42") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7afc, _Format="%c%c" | out: _Dest="16") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7afe, _Format="%c%c" | out: _Dest="71") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b00, _Format="%c%c" | out: _Dest="41") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b02, _Format="%c%c" | out: _Dest="49") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b04, _Format="%c%c" | out: _Dest="84") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b06, _Format="%c%c" | out: _Dest="86") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b08, _Format="%c%c" | out: _Dest="a7") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b0a, _Format="%c%c" | out: _Dest="d1") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b0c, _Format="%c%c" | out: _Dest="b7") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b0e, _Format="%c%c" | out: _Dest="fa") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b10, _Format="%c%c" | out: _Dest="ab") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b12, _Format="%c%c" | out: _Dest="7a") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b14, _Format="%c%c" | out: _Dest="01") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b16, _Format="%c%c" | out: _Dest="47") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b18, _Format="%c%c" | out: _Dest="a2") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b1a, _Format="%c%c" | out: _Dest="bc") returned 2 [0138.152] sprintf (in: _Dest=0x7ad7b1c, _Format="%c%c" | out: _Dest="7c") returned 2 [0138.153] sprintf (in: _Dest=0x7ad7b1e, _Format="%c%c" | out: _Dest="1e") returned 2 [0138.153] sprintf (in: _Dest=0x7ad7b20, _Format="%c%c" | out: _Dest="e0") returned 2 [0138.153] sprintf (in: _Dest=0x7ad7b22, _Format="%c%c" | out: _Dest="44") returned 2 [0138.153] RtlInitAnsiString (in: DestinationString=0x84df8e0, SourceString="df25c1c2da42167141498486a7d1b7faab7a0147a2bc7c1ee044" | out: DestinationString="df25c1c2da42167141498486a7d1b7faab7a0147a2bc7c1ee044") [0138.153] RtlAnsiStringToUnicodeString (in: DestinationString=0x84df8d8, SourceString="df25c1c2da42167141498486a7d1b7faab7a0147a2bc7c1ee044", AllocateDestinationString=1 | out: DestinationString="df25c1c2da42167141498486a7d1b7faab7a0147a2bc7c1ee044") returned 0x0 [0138.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d50fa8 [0138.153] wcscat (in: _Dest=0x3e47098, _Source="df25c1c2da421" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\df25c1c2da421") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\df25c1c2da421" [0138.153] wcscat (in: _Dest=0x3e47098, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\df25c1c2da421.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\df25c1c2da421.68814f" [0138.153] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\df25c1c2da421.68814f", NtPathName=0x84df8d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\df25c1c2da421.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad61e8 [0138.153] NtSetInformationFile (FileHandle=0x1d0c, IoStatusBlock=0x84df8d8, FileInformation=0x7ad61e8, Length=0x8e, FileInformationClass=0xa) returned 0x0 [0138.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad61e8) returned 1 [0138.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a57620) returned 1 [0138.370] NtQueryInformationFile (in: FileHandle=0x1d0c, IoStatusBlock=0x84df8a8, FileInformation=0x84df8b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x84df8a8, FileInformation=0x84df8b0) returned 0x0 [0138.370] NtSetInformationFile (FileHandle=0x1d0c, IoStatusBlock=0x84df8a8, FileInformation=0x84df8b0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47098) returned 1 [0138.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0138.382] FlushFileBuffers (hFile=0x1d0c) returned 1 [0138.421] CloseHandle (hObject=0x1d0c) returned 1 [0138.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47098 [0138.425] wcscpy (in: _Dest=0x3e47098, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0138.425] wcscat (in: _Dest=0x3e47098, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt" [0138.425] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\68814f-readme.txt")) returned 0x20 [0138.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47098) returned 1 [0138.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 Thread: id = 1097 os_tid = 0x18e4 [0134.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19398 [0134.436] wcscpy (in: _Dest=0x3e19398, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG" [0134.436] wcscat (in: _Dest=0x3e19398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\" [0134.436] wcscat (in: _Dest=0x3e19398, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\*" [0134.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0134.436] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca3bae50, ftCreationTime.dwHighDateTime=0x1d5e4da, ftLastAccessTime.dwLowDateTime=0xdb3c04d0, ftLastAccessTime.dwHighDateTime=0x1d5e655, ftLastWriteTime.dwLowDateTime=0xdb3c04d0, ftLastWriteTime.dwHighDateTime=0x1d5e655, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df40 [0134.436] wcscmp (_String1=".", _String2=".") returned 0 [0134.436] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca3bae50, ftCreationTime.dwHighDateTime=0x1d5e4da, ftLastAccessTime.dwLowDateTime=0xdb3c04d0, ftLastAccessTime.dwHighDateTime=0x1d5e655, ftLastWriteTime.dwLowDateTime=0xdb3c04d0, ftLastWriteTime.dwHighDateTime=0x1d5e655, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.437] wcscmp (_String1="..", _String2=".") returned 1 [0134.437] wcscmp (_String1="..", _String2="..") returned 0 [0134.437] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60ebbf00, ftCreationTime.dwHighDateTime=0x1d5dbaf, ftLastAccessTime.dwLowDateTime=0x6b53e650, ftLastAccessTime.dwHighDateTime=0x1d5d8d2, ftLastWriteTime.dwLowDateTime=0x6b53e650, ftLastWriteTime.dwHighDateTime=0x1d5d8d2, nFileSizeHigh=0x0, nFileSizeLow=0xcb42, dwReserved0=0x0, dwReserved1=0x0, cFileName="cDOp5MMtWyu.avi", cAlternateFileName="CDOP5M~1.AVI")) returned 1 [0134.437] wcscmp (_String1="cDOp5MMtWyu.avi", _String2=".") returned 1 [0134.437] wcscmp (_String1="cDOp5MMtWyu.avi", _String2="..") returned 1 [0134.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5990 [0134.437] wcscpy (in: _Dest=0x3eb5990, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG" [0134.437] wcscat (in: _Dest=0x3eb5990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\" [0134.437] wcscat (in: _Dest=0x3eb5990, _Source="cDOp5MMtWyu.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\cDOp5MMtWyu.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\cDOp5MMtWyu.avi" [0138.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0138.652] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3901f0, ftCreationTime.dwHighDateTime=0x1d5da2b, ftLastAccessTime.dwLowDateTime=0x2fa2550, ftLastAccessTime.dwHighDateTime=0x1d5dee6, ftLastWriteTime.dwLowDateTime=0x2fa2550, ftLastWriteTime.dwHighDateTime=0x1d5dee6, nFileSizeHigh=0x0, nFileSizeLow=0x43bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CkMe1y2JxV_Q08CE3.swf", cAlternateFileName="CKME1Y~1.SWF")) returned 1 [0138.652] wcscmp (_String1="CkMe1y2JxV_Q08CE3.swf", _String2=".") returned 1 [0138.652] wcscmp (_String1="CkMe1y2JxV_Q08CE3.swf", _String2="..") returned 1 [0138.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053480 [0138.652] wcscpy (in: _Dest=0x3053480, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG" [0138.652] wcscat (in: _Dest=0x3053480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\" [0138.653] wcscat (in: _Dest=0x3053480, _Source="CkMe1y2JxV_Q08CE3.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\CkMe1y2JxV_Q08CE3.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\CkMe1y2JxV_Q08CE3.swf" [0138.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0138.653] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5ce3380, ftCreationTime.dwHighDateTime=0x1d5e071, ftLastAccessTime.dwLowDateTime=0x6d621eb0, ftLastAccessTime.dwHighDateTime=0x1d5dbb8, ftLastWriteTime.dwLowDateTime=0x6d621eb0, ftLastWriteTime.dwHighDateTime=0x1d5dbb8, nFileSizeHigh=0x0, nFileSizeLow=0xcc28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LE5dsjz.mkv", cAlternateFileName="")) returned 1 [0138.653] wcscmp (_String1="LE5dsjz.mkv", _String2=".") returned 1 [0138.653] wcscmp (_String1="LE5dsjz.mkv", _String2="..") returned 1 [0138.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d449f0 [0138.653] wcscpy (in: _Dest=0x3d449f0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG" [0138.654] wcscat (in: _Dest=0x3d449f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\" [0138.654] wcscat (in: _Dest=0x3d449f0, _Source="LE5dsjz.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\LE5dsjz.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\LE5dsjz.mkv" [0138.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d449f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8 [0138.654] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5ce3380, ftCreationTime.dwHighDateTime=0x1d5e071, ftLastAccessTime.dwLowDateTime=0x6d621eb0, ftLastAccessTime.dwHighDateTime=0x1d5dbb8, ftLastWriteTime.dwLowDateTime=0x6d621eb0, ftLastWriteTime.dwHighDateTime=0x1d5dbb8, nFileSizeHigh=0x0, nFileSizeLow=0xcc28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LE5dsjz.mkv", cAlternateFileName="")) returned 0 [0138.655] FindClose (in: hFindFile=0x7a2df40 | out: hFindFile=0x7a2df40) returned 1 [0138.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0138.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19398) returned 1 [0138.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 Thread: id = 1098 os_tid = 0x18e8 [0134.441] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\f7Ts2m1ro.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\f7ts2m1ro.mp4")) returned 0x20 [0134.441] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\f7Ts2m1ro.mp4", dwFileAttributes=0x20) returned 1 [0137.484] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\f7Ts2m1ro.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\f7ts2m1ro.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d14 [0137.484] GetFileSizeEx (in: hFile=0x1d14, lpFileSize=0xc8cfccc | out: lpFileSize=0xc8cfccc*=46819) returned 1 [0137.484] SetFilePointerEx (in: hFile=0x1d14, liDistanceToMove=0xb6df, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.484] ReadFile (in: hFile=0x1d14, lpBuffer=0xc8cfca8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc8cfcb8, lpOverlapped=0x0 | out: lpBuffer=0xc8cfca8*, lpNumberOfBytesRead=0xc8cfcb8*=0x4, lpOverlapped=0x0) returned 1 [0137.486] SetFilePointerEx (in: hFile=0x1d14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0137.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0137.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0137.486] NtQuerySystemTime (in: CurrentTime=0xc8cfc40 | out: CurrentTime=0xc8cfc40*=132462177167484000) returned 0x0 [0137.486] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x5362f470 [0137.486] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x7a5dbdf6 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x556fb616 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0xccdf10e [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x25f9dc93 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x29fbb44c [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x3045a924 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0xa9e1c1b [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x34a519d4 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0xa2c3032 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x4489cb9e [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x58bc7cb5 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x4688b0ae [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x3d92b028 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x65e3e304 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x7379d76f [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x1ec99000 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x6c79b38b [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x172007ba [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x70de51f0 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x6da6f737 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x69f88422 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0xc4cd3e1 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x771a4449 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0xc6c72e0 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0xf46aa6d [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x50c99130 [0137.487] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x312e411f [0137.488] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x3d3e718d [0137.488] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x4d861783 [0137.488] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x6ff68afa [0137.488] RtlRandomEx (in: Seed=0xc8cfc38 | out: Seed=0xc8cfc38) returned 0x308b0851 [0137.500] SetFilePointerEx (in: hFile=0x1d14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.500] ReadFile (in: hFile=0x1d14, lpBuffer=0x7aa9920, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc8cfc40, lpOverlapped=0x0 | out: lpBuffer=0x7aa9920*, lpNumberOfBytesRead=0xc8cfc40*=0x3c00, lpOverlapped=0x0) returned 1 [0137.501] SetFilePointerEx (in: hFile=0x1d14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0137.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0137.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0137.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38f8) returned 1 [0137.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aad528 [0137.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0137.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0137.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31a0) returned 1 [0137.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.502] WriteFile (in: hFile=0x1d14, lpBuffer=0x7aad528*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc8cfc40, lpOverlapped=0x0 | out: lpBuffer=0x7aad528*, lpNumberOfBytesWritten=0xc8cfc40*=0x3c00, lpOverlapped=0x0) returned 1 [0137.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aad528) returned 1 [0137.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa9920) returned 1 [0137.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0137.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0137.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376e0 [0137.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0137.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0137.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0137.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deca58 [0137.923] SetFilePointerEx (in: hFile=0x1d14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.923] WriteFile (in: hFile=0x1d14, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc8cfcc0, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xc8cfcc0*=0x10c, lpOverlapped=0x0) returned 1 [0138.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde60 [0138.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0138.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0138.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2840 [0138.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0138.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0138.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0138.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0138.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7af0 [0138.142] sprintf (in: _Dest=0x7ad7af0, _Format="%c%c" | out: _Dest="4f") returned 2 [0138.142] sprintf (in: _Dest=0x7ad7af2, _Format="%c%c" | out: _Dest="8a") returned 2 [0138.142] sprintf (in: _Dest=0x7ad7af4, _Format="%c%c" | out: _Dest="1f") returned 2 [0138.142] sprintf (in: _Dest=0x7ad7af6, _Format="%c%c" | out: _Dest="ba") returned 2 [0138.142] sprintf (in: _Dest=0x7ad7af8, _Format="%c%c" | out: _Dest="11") returned 2 [0138.142] sprintf (in: _Dest=0x7ad7afa, _Format="%c%c" | out: _Dest="1a") returned 2 [0138.142] sprintf (in: _Dest=0x7ad7afc, _Format="%c%c" | out: _Dest="a1") returned 2 [0138.142] sprintf (in: _Dest=0x7ad7afe, _Format="%c%c" | out: _Dest="7e") returned 2 [0138.142] sprintf (in: _Dest=0x7ad7b00, _Format="%c%c" | out: _Dest="0a") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b02, _Format="%c%c" | out: _Dest="d0") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b04, _Format="%c%c" | out: _Dest="11") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b06, _Format="%c%c" | out: _Dest="4b") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b08, _Format="%c%c" | out: _Dest="1a") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b0a, _Format="%c%c" | out: _Dest="c9") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b0c, _Format="%c%c" | out: _Dest="91") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b0e, _Format="%c%c" | out: _Dest="a5") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b10, _Format="%c%c" | out: _Dest="d3") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b12, _Format="%c%c" | out: _Dest="07") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b14, _Format="%c%c" | out: _Dest="b3") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b16, _Format="%c%c" | out: _Dest="a8") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b18, _Format="%c%c" | out: _Dest="00") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b1a, _Format="%c%c" | out: _Dest="31") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b1c, _Format="%c%c" | out: _Dest="5f") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b1e, _Format="%c%c" | out: _Dest="36") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b20, _Format="%c%c" | out: _Dest="64") returned 2 [0138.143] sprintf (in: _Dest=0x7ad7b22, _Format="%c%c" | out: _Dest="a0") returned 2 [0138.143] RtlInitAnsiString (in: DestinationString=0xc8cfc48, SourceString="4f8a1fba111aa17e0ad0114b1ac991a5d307b3a800315f3664a0" | out: DestinationString="4f8a1fba111aa17e0ad0114b1ac991a5d307b3a800315f3664a0") [0138.143] RtlAnsiStringToUnicodeString (in: DestinationString=0xc8cfc40, SourceString="4f8a1fba111aa17e0ad0114b1ac991a5d307b3a800315f3664a0", AllocateDestinationString=1 | out: DestinationString="4f8a1fba111aa17e0ad0114b1ac991a5d307b3a800315f3664a0") returned 0x0 [0138.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51200 [0138.143] wcscat (in: _Dest=0x3e46c98, _Source="4f8a1fba111aa" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\4f8a1fba111aa") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\4f8a1fba111aa" [0138.143] wcscat (in: _Dest=0x3e46c98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\4f8a1fba111aa.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\4f8a1fba111aa.68814f" [0138.143] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\4f8a1fba111aa.68814f", NtPathName=0xc8cfc38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\4f8a1fba111aa.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad60b8 [0138.144] NtSetInformationFile (FileHandle=0x1d14, IoStatusBlock=0xc8cfc40, FileInformation=0x7ad60b8, Length=0x8e, FileInformationClass=0xa) returned 0x0 [0138.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad60b8) returned 1 [0138.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7e928) returned 1 [0138.228] NtQueryInformationFile (in: FileHandle=0x1d14, IoStatusBlock=0xc8cfc10, FileInformation=0xc8cfc18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc8cfc10, FileInformation=0xc8cfc18) returned 0x0 [0138.228] NtSetInformationFile (FileHandle=0x1d14, IoStatusBlock=0xc8cfc10, FileInformation=0xc8cfc18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c98) returned 1 [0138.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0138.249] FlushFileBuffers (hFile=0x1d14) returned 1 [0138.253] CloseHandle (hObject=0x1d14) returned 1 [0138.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47918 [0138.266] wcscpy (in: _Dest=0x3e47918, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0138.266] wcscat (in: _Dest=0x3e47918, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt" [0138.267] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\68814f-readme.txt")) returned 0xffffffff [0138.267] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ba0 [0138.282] WriteFile (in: hFile=0x1ba0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc8cfc54, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc8cfc54*=0x8b9, lpOverlapped=0x0) returned 1 [0138.293] CloseHandle (hObject=0x1ba0) returned 1 [0138.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47918) returned 1 [0138.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 Thread: id = 1099 os_tid = 0x18ec [0134.445] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Mw2zVRBiuTyI bwB3h.swf" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\mw2zvrbiutyi bwb3h.swf")) returned 0x20 [0134.445] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Mw2zVRBiuTyI bwB3h.swf", dwFileAttributes=0x20) returned 1 [0137.509] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Mw2zVRBiuTyI bwB3h.swf" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\mw2zvrbiutyi bwb3h.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d18 [0137.510] GetFileSizeEx (in: hFile=0x1d18, lpFileSize=0xc84fd84 | out: lpFileSize=0xc84fd84*=51837) returned 1 [0137.510] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0xca79, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.510] ReadFile (in: hFile=0x1d18, lpBuffer=0xc84fd60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc84fd70, lpOverlapped=0x0 | out: lpBuffer=0xc84fd60*, lpNumberOfBytesRead=0xc84fd70*=0x4, lpOverlapped=0x0) returned 1 [0137.512] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0137.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0137.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0137.512] NtQuerySystemTime (in: CurrentTime=0xc84fcf8 | out: CurrentTime=0xc84fcf8*=132462177167796000) returned 0x0 [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x4c642ed4 [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x394878e6 [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x4e0a1a2 [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x4a0740fa [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x1f931a87 [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x7354989b [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x78e77f8f [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0xba170e1 [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x597755fc [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x539f77fc [0137.512] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0xbcc49a1 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x4c4482de [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x3e8a6fb4 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x23b815eb [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x2f6080c [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x592af96 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x262db0cf [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x73a53a12 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x55320213 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x67f846a2 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x577194ce [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x28664731 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x11b35283 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x210db30b [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x271383a7 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x6f774181 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x20f4b4d1 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x4ab36eeb [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x5c4a8095 [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x36e02e6e [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x78bdb05d [0137.513] RtlRandomEx (in: Seed=0xc84fcf0 | out: Seed=0xc84fcf0) returned 0x2cc374bc [0137.551] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.551] ReadFile (in: hFile=0x1d18, lpBuffer=0x7ab1130, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc84fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7ab1130*, lpNumberOfBytesRead=0xc84fcf8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.552] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0137.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0137.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0137.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31a0) returned 1 [0137.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cccbd0 [0137.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0137.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0137.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4438) returned 1 [0137.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.553] WriteFile (in: hFile=0x1d18, lpBuffer=0x7cccbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc84fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7cccbd0*, lpNumberOfBytesWritten=0xc84fcf8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccbd0) returned 1 [0137.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab1130) returned 1 [0137.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30bde18 [0137.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2980) returned 1 [0137.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30bdd88 [0137.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0137.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0137.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0137.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0137.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d54810 [0137.941] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.941] WriteFile (in: hFile=0x1d18, lpBuffer=0x3d54810*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xc84fd78, lpOverlapped=0x0 | out: lpBuffer=0x3d54810*, lpNumberOfBytesWritten=0xc84fd78*=0x11e, lpOverlapped=0x0) returned 1 [0138.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde60 [0138.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0138.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0138.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x7a38578 [0138.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0138.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0138.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0138.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0138.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3ee1078 [0138.147] sprintf (in: _Dest=0x3ee1078, _Format="%c%c" | out: _Dest="3e") returned 2 [0138.147] sprintf (in: _Dest=0x3ee107a, _Format="%c%c" | out: _Dest="2a") returned 2 [0138.147] sprintf (in: _Dest=0x3ee107c, _Format="%c%c" | out: _Dest="35") returned 2 [0138.147] sprintf (in: _Dest=0x3ee107e, _Format="%c%c" | out: _Dest="8f") returned 2 [0138.148] sprintf (in: _Dest=0x3ee1080, _Format="%c%c" | out: _Dest="63") returned 2 [0138.148] sprintf (in: _Dest=0x3ee1082, _Format="%c%c" | out: _Dest="f4") returned 2 [0138.148] sprintf (in: _Dest=0x3ee1084, _Format="%c%c" | out: _Dest="93") returned 2 [0138.148] sprintf (in: _Dest=0x3ee1086, _Format="%c%c" | out: _Dest="27") returned 2 [0138.148] sprintf (in: _Dest=0x3ee1088, _Format="%c%c" | out: _Dest="11") returned 2 [0138.148] sprintf (in: _Dest=0x3ee108a, _Format="%c%c" | out: _Dest="5b") returned 2 [0138.148] sprintf (in: _Dest=0x3ee108c, _Format="%c%c" | out: _Dest="87") returned 2 [0138.148] sprintf (in: _Dest=0x3ee108e, _Format="%c%c" | out: _Dest="0b") returned 2 [0138.148] sprintf (in: _Dest=0x3ee1090, _Format="%c%c" | out: _Dest="74") returned 2 [0138.148] sprintf (in: _Dest=0x3ee1092, _Format="%c%c" | out: _Dest="21") returned 2 [0138.148] sprintf (in: _Dest=0x3ee1094, _Format="%c%c" | out: _Dest="69") returned 2 [0138.148] sprintf (in: _Dest=0x3ee1096, _Format="%c%c" | out: _Dest="41") returned 2 [0138.148] sprintf (in: _Dest=0x3ee1098, _Format="%c%c" | out: _Dest="c6") returned 2 [0138.148] sprintf (in: _Dest=0x3ee109a, _Format="%c%c" | out: _Dest="a6") returned 2 [0138.148] sprintf (in: _Dest=0x3ee109c, _Format="%c%c" | out: _Dest="18") returned 2 [0138.148] sprintf (in: _Dest=0x3ee109e, _Format="%c%c" | out: _Dest="8c") returned 2 [0138.148] sprintf (in: _Dest=0x3ee10a0, _Format="%c%c" | out: _Dest="1c") returned 2 [0138.148] sprintf (in: _Dest=0x3ee10a2, _Format="%c%c" | out: _Dest="9c") returned 2 [0138.148] sprintf (in: _Dest=0x3ee10a4, _Format="%c%c" | out: _Dest="81") returned 2 [0138.148] sprintf (in: _Dest=0x3ee10a6, _Format="%c%c" | out: _Dest="94") returned 2 [0138.148] sprintf (in: _Dest=0x3ee10a8, _Format="%c%c" | out: _Dest="55") returned 2 [0138.148] sprintf (in: _Dest=0x3ee10aa, _Format="%c%c" | out: _Dest="00") returned 2 [0138.148] sprintf (in: _Dest=0x3ee10ac, _Format="%c%c" | out: _Dest="5c") returned 2 [0138.148] sprintf (in: _Dest=0x3ee10ae, _Format="%c%c" | out: _Dest="fa") returned 2 [0138.148] sprintf (in: _Dest=0x3ee10b0, _Format="%c%c" | out: _Dest="a9") returned 2 [0138.148] sprintf (in: _Dest=0x3ee10b2, _Format="%c%c" | out: _Dest="75") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10b4, _Format="%c%c" | out: _Dest="0d") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10b6, _Format="%c%c" | out: _Dest="74") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10b8, _Format="%c%c" | out: _Dest="d5") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10ba, _Format="%c%c" | out: _Dest="45") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10bc, _Format="%c%c" | out: _Dest="08") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10be, _Format="%c%c" | out: _Dest="fa") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10c0, _Format="%c%c" | out: _Dest="69") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10c2, _Format="%c%c" | out: _Dest="85") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10c4, _Format="%c%c" | out: _Dest="e4") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10c6, _Format="%c%c" | out: _Dest="8f") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10c8, _Format="%c%c" | out: _Dest="30") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10ca, _Format="%c%c" | out: _Dest="67") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10cc, _Format="%c%c" | out: _Dest="70") returned 2 [0138.149] sprintf (in: _Dest=0x3ee10ce, _Format="%c%c" | out: _Dest="81") returned 2 [0138.149] RtlInitAnsiString (in: DestinationString=0xc84fd00, SourceString="3e2a358f63f49327115b870b74216941c6a6188c1c9c819455005cfaa9750d74d54508fa6985e48f30677081" | out: DestinationString="3e2a358f63f49327115b870b74216941c6a6188c1c9c819455005cfaa9750d74d54508fa6985e48f30677081") [0138.149] RtlAnsiStringToUnicodeString (in: DestinationString=0xc84fcf8, SourceString="3e2a358f63f49327115b870b74216941c6a6188c1c9c819455005cfaa9750d74d54508fa6985e48f30677081", AllocateDestinationString=1 | out: DestinationString="3e2a358f63f49327115b870b74216941c6a6188c1c9c819455005cfaa9750d74d54508fa6985e48f30677081") returned 0x0 [0138.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66618 [0138.149] wcscat (in: _Dest=0x7ad6150, _Source="3e2a358f63f49327115b87" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\3e2a358f63f49327115b87") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\3e2a358f63f49327115b87" [0138.149] wcscat (in: _Dest=0x7ad6150, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\3e2a358f63f49327115b87.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\3e2a358f63f49327115b87.68814f" [0138.149] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\3e2a358f63f49327115b87.68814f", NtPathName=0xc84fcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\3e2a358f63f49327115b87.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3052df0 [0138.149] NtSetInformationFile (FileHandle=0x1d18, IoStatusBlock=0xc84fcf8, FileInformation=0x3052df0, Length=0xa0, FileInformationClass=0xa) returned 0x0 [0138.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052df0) returned 1 [0138.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7d5c0) returned 1 [0138.368] NtQueryInformationFile (in: FileHandle=0x1d18, IoStatusBlock=0xc84fcc8, FileInformation=0xc84fcd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc84fcc8, FileInformation=0xc84fcd0) returned 0x0 [0138.369] NtSetInformationFile (FileHandle=0x1d18, IoStatusBlock=0xc84fcc8, FileInformation=0xc84fcd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6150) returned 1 [0138.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66618) returned 1 [0138.372] FlushFileBuffers (hFile=0x1d18) returned 1 [0138.377] CloseHandle (hObject=0x1d18) returned 1 [0138.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19418 [0138.379] wcscpy (in: _Dest=0x3e19418, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0138.379] wcscat (in: _Dest=0x3e19418, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt" [0138.379] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\68814f-readme.txt")) returned 0x20 [0138.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19418) returned 1 [0138.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 1100 os_tid = 0x18f0 [0134.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0134.452] wcscpy (in: _Dest=0x3f3fb00, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" [0134.452] wcscat (in: _Dest=0x3f3fb00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" [0134.452] wcscat (in: _Dest=0x3f3fb00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\*" [0134.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0134.452] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce2aa220, ftCreationTime.dwHighDateTime=0x1d5e4e2, ftLastAccessTime.dwLowDateTime=0xf7399390, ftLastAccessTime.dwHighDateTime=0x1d5e1ba, ftLastWriteTime.dwLowDateTime=0xf7399390, ftLastWriteTime.dwHighDateTime=0x1d5e1ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd80 [0134.452] wcscmp (_String1=".", _String2=".") returned 0 [0134.452] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce2aa220, ftCreationTime.dwHighDateTime=0x1d5e4e2, ftLastAccessTime.dwLowDateTime=0xf7399390, ftLastAccessTime.dwHighDateTime=0x1d5e1ba, ftLastWriteTime.dwLowDateTime=0xf7399390, ftLastWriteTime.dwHighDateTime=0x1d5e1ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.452] wcscmp (_String1="..", _String2=".") returned 1 [0134.452] wcscmp (_String1="..", _String2="..") returned 0 [0134.452] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9b5210, ftCreationTime.dwHighDateTime=0x1d5e167, ftLastAccessTime.dwLowDateTime=0x8042cdc0, ftLastAccessTime.dwHighDateTime=0x1d5e1f0, ftLastWriteTime.dwLowDateTime=0x8042cdc0, ftLastWriteTime.dwHighDateTime=0x1d5e1f0, nFileSizeHigh=0x0, nFileSizeLow=0x866c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hqfDS.flv", cAlternateFileName="")) returned 1 [0134.452] wcscmp (_String1="hqfDS.flv", _String2=".") returned 1 [0134.453] wcscmp (_String1="hqfDS.flv", _String2="..") returned 1 [0134.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30633a0 [0134.453] wcscpy (in: _Dest=0x30633a0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" [0134.453] wcscat (in: _Dest=0x30633a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" [0134.453] wcscat (in: _Dest=0x30633a0, _Source="hqfDS.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\hqfDS.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\hqfDS.flv" [0140.978] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\hqfDS.flv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\hqfds.flv")) returned 0x20 [0140.978] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\hqfDS.flv", dwFileAttributes=0x20) returned 1 [0140.979] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\hqfDS.flv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\hqfds.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b64 [0140.979] GetFileSizeEx (in: hFile=0x1b64, lpFileSize=0xc9bfd0c | out: lpFileSize=0xc9bfd0c*=34412) returned 1 [0140.979] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x8668, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.979] ReadFile (in: hFile=0x1b64, lpBuffer=0xc9bfce8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc9bfcf8, lpOverlapped=0x0 | out: lpBuffer=0xc9bfce8*, lpNumberOfBytesRead=0xc9bfcf8*=0x4, lpOverlapped=0x0) returned 1 [0140.980] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb440 [0140.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddd58 [0140.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddad8 [0140.981] NtQuerySystemTime (in: CurrentTime=0xc9bfc80 | out: CurrentTime=0xc9bfc80*=132462177201804000) returned 0x0 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x546ddf80 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x66cf2be0 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x248bc0af [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x1ff8c6a1 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x6b7ee0e0 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x752e48f7 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x7d86f2bc [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x6c97427c [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x8283aca [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x73355d80 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x74b35d55 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x38a6f459 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x1651419e [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x4082086d [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x1f823e7a [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x60d716b3 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x711be5a6 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x56a2e67d [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x2cb5dcde [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x5b0a837e [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x361cf2f5 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x6c50d7e4 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x1232b128 [0140.981] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x52c49be5 [0140.982] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x50c9f410 [0140.982] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0xd363e5f [0140.982] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x7746159b [0140.982] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x330224b7 [0140.982] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x2e2d099e [0140.982] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x3f90afa7 [0140.982] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x334d452f [0140.982] RtlRandomEx (in: Seed=0xc9bfc78 | out: Seed=0xc9bfc78) returned 0x4b636fb9 [0140.991] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.991] ReadFile (in: hFile=0x1b64, lpBuffer=0x7a840d0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc9bfc80, lpOverlapped=0x0 | out: lpBuffer=0x7a840d0*, lpNumberOfBytesRead=0xc9bfc80*=0x3c00, lpOverlapped=0x0) returned 1 [0140.992] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0140.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0140.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb440 [0140.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb440) returned 1 [0140.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a96cf8 [0140.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb440 [0140.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddad8 [0140.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddad8) returned 1 [0140.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0140.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0140.993] WriteFile (in: hFile=0x1b64, lpBuffer=0x7a96cf8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc9bfc80, lpOverlapped=0x0 | out: lpBuffer=0x7a96cf8*, lpNumberOfBytesWritten=0xc9bfc80*=0x3c00, lpOverlapped=0x0) returned 1 [0142.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a96cf8) returned 1 [0142.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a840d0) returned 1 [0142.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede028 [0142.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd6f0) returned 1 [0142.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd6f0 [0142.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede078 [0142.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0142.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0142.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0142.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84e40) returned 1 [0142.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3dec710 [0142.921] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.921] WriteFile (in: hFile=0x1b64, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xc9bfd00, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xc9bfd00*=0x104, lpOverlapped=0x0) returned 1 [0143.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85158 [0143.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddb28 [0143.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddb28) returned 1 [0143.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3eb8398 [0143.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddb28 [0143.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddb78 [0143.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddb78) returned 1 [0143.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0143.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x25) returned 0x7a37620 [0143.016] sprintf (in: _Dest=0x7a37620, _Format="%c%c" | out: _Dest="ec") returned 2 [0143.016] sprintf (in: _Dest=0x7a37622, _Format="%c%c" | out: _Dest="23") returned 2 [0143.016] sprintf (in: _Dest=0x7a37624, _Format="%c%c" | out: _Dest="fa") returned 2 [0143.016] sprintf (in: _Dest=0x7a37626, _Format="%c%c" | out: _Dest="3a") returned 2 [0143.016] sprintf (in: _Dest=0x7a37628, _Format="%c%c" | out: _Dest="1a") returned 2 [0143.016] sprintf (in: _Dest=0x7a3762a, _Format="%c%c" | out: _Dest="cb") returned 2 [0143.016] sprintf (in: _Dest=0x7a3762c, _Format="%c%c" | out: _Dest="0e") returned 2 [0143.016] sprintf (in: _Dest=0x7a3762e, _Format="%c%c" | out: _Dest="24") returned 2 [0143.017] sprintf (in: _Dest=0x7a37630, _Format="%c%c" | out: _Dest="13") returned 2 [0143.017] sprintf (in: _Dest=0x7a37632, _Format="%c%c" | out: _Dest="2c") returned 2 [0143.017] sprintf (in: _Dest=0x7a37634, _Format="%c%c" | out: _Dest="98") returned 2 [0143.017] sprintf (in: _Dest=0x7a37636, _Format="%c%c" | out: _Dest="2a") returned 2 [0143.017] sprintf (in: _Dest=0x7a37638, _Format="%c%c" | out: _Dest="4e") returned 2 [0143.017] sprintf (in: _Dest=0x7a3763a, _Format="%c%c" | out: _Dest="fd") returned 2 [0143.017] sprintf (in: _Dest=0x7a3763c, _Format="%c%c" | out: _Dest="df") returned 2 [0143.017] sprintf (in: _Dest=0x7a3763e, _Format="%c%c" | out: _Dest="56") returned 2 [0143.017] sprintf (in: _Dest=0x7a37640, _Format="%c%c" | out: _Dest="03") returned 2 [0143.017] sprintf (in: _Dest=0x7a37642, _Format="%c%c" | out: _Dest="b6") returned 2 [0143.017] RtlInitAnsiString (in: DestinationString=0xc9bfc88, SourceString="ec23fa3a1acb0e24132c982a4efddf5603b6" | out: DestinationString="ec23fa3a1acb0e24132c982a4efddf5603b6") [0143.017] RtlAnsiStringToUnicodeString (in: DestinationString=0xc9bfc80, SourceString="ec23fa3a1acb0e24132c982a4efddf5603b6", AllocateDestinationString=1 | out: DestinationString="ec23fa3a1acb0e24132c982a4efddf5603b6") returned 0x0 [0143.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a271c8 [0143.017] wcscat (in: _Dest=0x7a648e0, _Source="ec23fa3a1" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\ec23fa3a1") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\ec23fa3a1" [0143.017] wcscat (in: _Dest=0x7a648e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\ec23fa3a1.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\ec23fa3a1.68814f" [0143.017] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\ec23fa3a1.68814f", NtPathName=0xc9bfc78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\ec23fa3a1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c008 [0143.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 [0143.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a580e8) returned 1 [0143.109] NtQueryInformationFile (in: FileHandle=0x1b64, IoStatusBlock=0xc9bfc50, FileInformation=0xc9bfc58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc9bfc50, FileInformation=0xc9bfc58) returned 0x0 [0143.109] NtSetInformationFile (FileHandle=0x1b64, IoStatusBlock=0xc9bfc50, FileInformation=0xc9bfc58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0143.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a648e0) returned 1 [0143.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a271c8) returned 1 [0143.126] FlushFileBuffers (hFile=0x1b64) returned 1 [0143.329] CloseHandle (hObject=0x1b64) returned 1 [0143.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df57c0 [0143.986] wcscpy (in: _Dest=0x3df57c0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" [0143.986] wcscat (in: _Dest=0x3df57c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt" [0143.986] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\68814f-readme.txt")) returned 0xffffffff [0143.986] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ba4 [0144.066] WriteFile (in: hFile=0x1ba4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc9bfc94, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc9bfc94*=0x8b9, lpOverlapped=0x0) returned 1 [0144.068] CloseHandle (hObject=0x1ba4) returned 1 [0144.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 [0144.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30633a0) returned 1 [0144.068] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0877bc0, ftCreationTime.dwHighDateTime=0x1d5e659, ftLastAccessTime.dwLowDateTime=0xa0770480, ftLastAccessTime.dwHighDateTime=0x1d5dae8, ftLastWriteTime.dwLowDateTime=0xa0770480, ftLastWriteTime.dwHighDateTime=0x1d5dae8, nFileSizeHigh=0x0, nFileSizeLow=0x5dab, dwReserved0=0x0, dwReserved1=0x0, cFileName="iVyqM22Egv05SaUWSS27.mp4", cAlternateFileName="IVYQM2~1.MP4")) returned 1 [0144.069] wcscmp (_String1="iVyqM22Egv05SaUWSS27.mp4", _String2=".") returned 1 [0144.069] wcscmp (_String1="iVyqM22Egv05SaUWSS27.mp4", _String2="..") returned 1 [0144.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e480 [0144.069] wcscpy (in: _Dest=0x7a5e480, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" [0144.069] wcscat (in: _Dest=0x7a5e480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" [0144.069] wcscat (in: _Dest=0x7a5e480, _Source="iVyqM22Egv05SaUWSS27.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\iVyqM22Egv05SaUWSS27.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\iVyqM22Egv05SaUWSS27.mp4" [0147.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0147.729] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28984e0, ftCreationTime.dwHighDateTime=0x1d5dd67, ftLastAccessTime.dwLowDateTime=0xcc6b5b50, ftLastAccessTime.dwHighDateTime=0x1d5e816, ftLastWriteTime.dwLowDateTime=0xcc6b5b50, ftLastWriteTime.dwHighDateTime=0x1d5e816, nFileSizeHigh=0x0, nFileSizeLow=0x6efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="jOE.flv", cAlternateFileName="")) returned 1 [0147.729] wcscmp (_String1="jOE.flv", _String2=".") returned 1 [0147.729] wcscmp (_String1="jOE.flv", _String2="..") returned 1 [0147.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9120 [0147.729] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" [0147.729] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" [0147.729] wcscat (in: _Dest=0x3eb9120, _Source="jOE.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\jOE.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\jOE.flv" [0147.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260 [0147.730] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d6f100, ftCreationTime.dwHighDateTime=0x1d5db10, ftLastAccessTime.dwLowDateTime=0xa7c63000, ftLastAccessTime.dwHighDateTime=0x1d5e1a3, ftLastWriteTime.dwLowDateTime=0xa7c63000, ftLastWriteTime.dwHighDateTime=0x1d5e1a3, nFileSizeHigh=0x0, nFileSizeLow=0x20b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="KjjwmgzemOJ.avi", cAlternateFileName="KJJWMG~1.AVI")) returned 1 [0147.730] wcscmp (_String1="KjjwmgzemOJ.avi", _String2=".") returned 1 [0147.731] wcscmp (_String1="KjjwmgzemOJ.avi", _String2="..") returned 1 [0147.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a645e8 [0147.731] wcscpy (in: _Dest=0x7a645e8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" [0147.731] wcscat (in: _Dest=0x7a645e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" [0147.731] wcscat (in: _Dest=0x7a645e8, _Source="KjjwmgzemOJ.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\KjjwmgzemOJ.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\KjjwmgzemOJ.avi" [0147.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a645e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0147.732] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec53b8c0, ftCreationTime.dwHighDateTime=0x1d5df5d, ftLastAccessTime.dwLowDateTime=0x21044bd0, ftLastAccessTime.dwHighDateTime=0x1d5e813, ftLastWriteTime.dwLowDateTime=0x21044bd0, ftLastWriteTime.dwHighDateTime=0x1d5e813, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yS5ChHZYrDyBo", cAlternateFileName="YS5CHH~1")) returned 1 [0147.732] wcscmp (_String1="yS5ChHZYrDyBo", _String2=".") returned 1 [0147.732] wcscmp (_String1="yS5ChHZYrDyBo", _String2="..") returned 1 [0147.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44570 [0147.732] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5" [0147.732] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" [0147.733] wcscat (in: _Dest=0x3d44570, _Source="yS5ChHZYrDyBo" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" [0147.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0147.734] FindNextFileW (in: hFindFile=0x7a2dd80, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec53b8c0, ftCreationTime.dwHighDateTime=0x1d5df5d, ftLastAccessTime.dwLowDateTime=0x21044bd0, ftLastAccessTime.dwHighDateTime=0x1d5e813, ftLastWriteTime.dwLowDateTime=0x21044bd0, ftLastWriteTime.dwHighDateTime=0x1d5e813, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yS5ChHZYrDyBo", cAlternateFileName="YS5CHH~1")) returned 0 [0147.734] FindClose (in: hFindFile=0x7a2dd80 | out: hFindFile=0x7a2dd80) returned 1 [0147.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0147.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0147.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 Thread: id = 1101 os_tid = 0x18f4 [0134.454] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\rqhwXE6Et2texpSEwc.avi" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\rqhwxe6et2texpsewc.avi")) returned 0x20 [0134.454] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\rqhwXE6Et2texpSEwc.avi", dwFileAttributes=0x20) returned 1 [0137.568] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\rqhwXE6Et2texpSEwc.avi" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\rqhwxe6et2texpsewc.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d20 [0137.568] GetFileSizeEx (in: hFile=0x1d20, lpFileSize=0xc1cf834 | out: lpFileSize=0xc1cf834*=70959) returned 1 [0137.568] SetFilePointerEx (in: hFile=0x1d20, liDistanceToMove=0x1152b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.568] ReadFile (in: hFile=0x1d20, lpBuffer=0xc1cf810, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc1cf820, lpOverlapped=0x0 | out: lpBuffer=0xc1cf810*, lpNumberOfBytesRead=0xc1cf820*=0x4, lpOverlapped=0x0) returned 1 [0137.570] SetFilePointerEx (in: hFile=0x1d20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0137.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0137.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0137.571] NtQuerySystemTime (in: CurrentTime=0xc1cf7a8 | out: CurrentTime=0xc1cf7a8*=132462177168420000) returned 0x0 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x540d0add [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x383b101 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0xde9a0e6 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x7864d198 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x2b33616d [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x6ab5a8c7 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x20aa3a20 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x6e8d33dd [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x6e4efce3 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x557c3533 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x2ba2d270 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x542832c [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x6593f89c [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x24a8c0c1 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x27bda62 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x7124e97c [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0xabf6b8f [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x74b2a3ba [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x47a82241 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x5ea47089 [0137.571] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x2daf4eee [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0xe9aa219 [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x3f1bc588 [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x3a3a25a7 [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x43f599e5 [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x6081c484 [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x40bd8db1 [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x40b980f0 [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0xa63b6fd [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x1026d476 [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0x16396a0b [0137.572] RtlRandomEx (in: Seed=0xc1cf7a0 | out: Seed=0xc1cf7a0) returned 0xc925883 [0137.582] SetFilePointerEx (in: hFile=0x1d20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.582] ReadFile (in: hFile=0x1d20, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc1cf7a8, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0xc1cf7a8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.582] SetFilePointerEx (in: hFile=0x1d20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0137.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0137.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0137.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4438) returned 1 [0137.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0137.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0137.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0137.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0137.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.583] WriteFile (in: hFile=0x1d20, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc1cf7a8, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0xc1cf7a8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0137.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0137.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30bddd0 [0137.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54278) returned 1 [0137.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30be0a0 [0137.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54278 [0137.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54110 [0137.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54110) returned 1 [0137.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdd40) returned 1 [0137.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d54dd8 [0137.962] SetFilePointerEx (in: hFile=0x1d20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.962] WriteFile (in: hFile=0x1d20, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xc1cf828, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0xc1cf828*=0x11e, lpOverlapped=0x0) returned 1 [0138.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde18 [0138.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0138.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3218) returned 1 [0138.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x7a38578 [0138.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0138.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0138.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3290) returned 1 [0138.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0138.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3ee11b0 [0138.155] sprintf (in: _Dest=0x3ee11b0, _Format="%c%c" | out: _Dest="9a") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11b2, _Format="%c%c" | out: _Dest="47") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11b4, _Format="%c%c" | out: _Dest="21") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11b6, _Format="%c%c" | out: _Dest="3e") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11b8, _Format="%c%c" | out: _Dest="d5") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11ba, _Format="%c%c" | out: _Dest="9b") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11bc, _Format="%c%c" | out: _Dest="74") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11be, _Format="%c%c" | out: _Dest="da") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11c0, _Format="%c%c" | out: _Dest="69") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11c2, _Format="%c%c" | out: _Dest="15") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11c4, _Format="%c%c" | out: _Dest="39") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11c6, _Format="%c%c" | out: _Dest="b9") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11c8, _Format="%c%c" | out: _Dest="bf") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11ca, _Format="%c%c" | out: _Dest="a4") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11cc, _Format="%c%c" | out: _Dest="0a") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11ce, _Format="%c%c" | out: _Dest="fc") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11d0, _Format="%c%c" | out: _Dest="c4") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11d2, _Format="%c%c" | out: _Dest="46") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11d4, _Format="%c%c" | out: _Dest="25") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11d6, _Format="%c%c" | out: _Dest="0a") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11d8, _Format="%c%c" | out: _Dest="5c") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11da, _Format="%c%c" | out: _Dest="ee") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11dc, _Format="%c%c" | out: _Dest="5f") returned 2 [0138.155] sprintf (in: _Dest=0x3ee11de, _Format="%c%c" | out: _Dest="46") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11e0, _Format="%c%c" | out: _Dest="76") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11e2, _Format="%c%c" | out: _Dest="9f") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11e4, _Format="%c%c" | out: _Dest="51") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11e6, _Format="%c%c" | out: _Dest="98") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11e8, _Format="%c%c" | out: _Dest="75") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11ea, _Format="%c%c" | out: _Dest="5a") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11ec, _Format="%c%c" | out: _Dest="b8") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11ee, _Format="%c%c" | out: _Dest="ef") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11f0, _Format="%c%c" | out: _Dest="bf") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11f2, _Format="%c%c" | out: _Dest="a4") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11f4, _Format="%c%c" | out: _Dest="28") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11f6, _Format="%c%c" | out: _Dest="9a") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11f8, _Format="%c%c" | out: _Dest="dd") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11fa, _Format="%c%c" | out: _Dest="4f") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11fc, _Format="%c%c" | out: _Dest="59") returned 2 [0138.156] sprintf (in: _Dest=0x3ee11fe, _Format="%c%c" | out: _Dest="17") returned 2 [0138.156] sprintf (in: _Dest=0x3ee1200, _Format="%c%c" | out: _Dest="ab") returned 2 [0138.156] sprintf (in: _Dest=0x3ee1202, _Format="%c%c" | out: _Dest="46") returned 2 [0138.156] sprintf (in: _Dest=0x3ee1204, _Format="%c%c" | out: _Dest="da") returned 2 [0138.156] sprintf (in: _Dest=0x3ee1206, _Format="%c%c" | out: _Dest="b4") returned 2 [0138.156] RtlInitAnsiString (in: DestinationString=0xc1cf7b0, SourceString="9a47213ed59b74da691539b9bfa40afcc446250a5cee5f46769f5198755ab8efbfa4289add4f5917ab46dab4" | out: DestinationString="9a47213ed59b74da691539b9bfa40afcc446250a5cee5f46769f5198755ab8efbfa4289add4f5917ab46dab4") [0138.156] RtlAnsiStringToUnicodeString (in: DestinationString=0xc1cf7a8, SourceString="9a47213ed59b74da691539b9bfa40afcc446250a5cee5f46769f5198755ab8efbfa4289add4f5917ab46dab4", AllocateDestinationString=1 | out: DestinationString="9a47213ed59b74da691539b9bfa40afcc446250a5cee5f46769f5198755ab8efbfa4289add4f5917ab46dab4") returned 0x0 [0138.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65d18 [0138.157] wcscat (in: _Dest=0x7ad6280, _Source="9a47213ed59b74da691539" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\9a47213ed59b74da691539") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\9a47213ed59b74da691539" [0138.157] wcscat (in: _Dest=0x7ad6280, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\9a47213ed59b74da691539.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\9a47213ed59b74da691539.68814f" [0138.157] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\9a47213ed59b74da691539.68814f", NtPathName=0xc1cf7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\9a47213ed59b74da691539.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053f00 [0138.157] NtSetInformationFile (FileHandle=0x1d20, IoStatusBlock=0xc1cf7a8, FileInformation=0x3053f00, Length=0xa0, FileInformationClass=0xa) returned 0x0 [0138.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 [0138.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a59ac8) returned 1 [0138.374] NtQueryInformationFile (in: FileHandle=0x1d20, IoStatusBlock=0xc1cf778, FileInformation=0xc1cf780, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc1cf778, FileInformation=0xc1cf780) returned 0x0 [0138.375] NtSetInformationFile (FileHandle=0x1d20, IoStatusBlock=0xc1cf778, FileInformation=0xc1cf780, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 [0138.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0138.376] FlushFileBuffers (hFile=0x1d20) returned 1 [0138.384] CloseHandle (hObject=0x1d20) returned 1 [0138.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47098 [0138.420] wcscpy (in: _Dest=0x3e47098, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\" [0138.420] wcscat (in: _Dest=0x3e47098, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt" [0138.420] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\68814f-readme.txt")) returned 0x20 [0138.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47098) returned 1 [0138.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 1102 os_tid = 0x18f8 [0134.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efa9a0 [0134.454] wcscpy (in: _Dest=0x3efa9a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0134.454] wcscat (in: _Dest=0x3efa9a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\" [0134.455] wcscat (in: _Dest=0x3efa9a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*" [0134.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0134.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0136.928] wcscmp (_String1=".", _String2=".") returned 0 [0136.928] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6b4740, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd6b4740, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.928] wcscmp (_String1="..", _String2=".") returned 1 [0136.928] wcscmp (_String1="..", _String2="..") returned 0 [0136.928] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.928] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.928] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5440 [0136.928] wcscpy (in: _Dest=0x7ad5440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0136.928] wcscat (in: _Dest=0x7ad5440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\" [0136.929] wcscat (in: _Dest=0x7ad5440, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" [0138.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb4 [0138.703] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0138.703] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0138.703] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0138.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cce8 [0138.703] wcscpy (in: _Dest=0x32cce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT" [0138.703] wcscat (in: _Dest=0x32cce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\" [0138.703] wcscat (in: _Dest=0x32cce8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" [0138.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0138.704] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6b4740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11581, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0138.704] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0138.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0138.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa9a0) returned 1 [0138.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 Thread: id = 1103 os_tid = 0x18fc [0134.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efb3a0 [0134.486] wcscpy (in: _Dest=0x3efb3a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0134.486] wcscat (in: _Dest=0x3efb3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\" [0134.486] wcscat (in: _Dest=0x3efb3a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*" [0134.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0134.486] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb65ec0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0136.929] wcscmp (_String1=".", _String2=".") returned 0 [0136.929] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb65ec0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.929] wcscmp (_String1="..", _String2=".") returned 1 [0136.929] wcscmp (_String1="..", _String2="..") returned 0 [0136.929] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.929] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.929] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad54d8 [0136.929] wcscpy (in: _Dest=0x7ad54d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0136.929] wcscat (in: _Dest=0x7ad54d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\" [0136.929] wcscat (in: _Dest=0x7ad54d8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" [0151.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad54d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0151.128] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0151.128] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0151.128] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0151.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6740 [0151.128] wcscpy (in: _Dest=0x7ad6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS" [0151.128] wcscat (in: _Dest=0x7ad6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\" [0151.128] wcscat (in: _Dest=0x7ad6740, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" [0151.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c60 [0151.129] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0151.129] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0151.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0151.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb3a0) returned 1 [0151.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47898) returned 1 Thread: id = 1104 os_tid = 0x1900 [0134.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efbc20 [0134.489] wcscpy (in: _Dest=0x3efbc20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0134.489] wcscat (in: _Dest=0x3efbc20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\" [0134.489] wcscat (in: _Dest=0x3efbc20, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*" [0134.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d590a0 [0134.489] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb3fd60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0136.930] wcscmp (_String1=".", _String2=".") returned 0 [0136.930] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb3fd60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb65ec0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.930] wcscmp (_String1="..", _String2=".") returned 1 [0136.930] wcscmp (_String1="..", _String2="..") returned 0 [0136.930] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x561b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.930] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.930] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5570 [0136.930] wcscpy (in: _Dest=0x7ad5570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0136.930] wcscat (in: _Dest=0x7ad5570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\" [0136.930] wcscat (in: _Dest=0x7ad5570, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" [0138.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0138.706] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0138.706] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0138.706] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0138.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5148 [0138.707] wcscpy (in: _Dest=0x7ad5148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT" [0138.707] wcscat (in: _Dest=0x7ad5148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\" [0138.707] wcscat (in: _Dest=0x7ad5148, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" [0138.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c [0138.708] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb65ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0138.708] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0138.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d590a0) returned 1 [0138.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efbc20) returned 1 [0138.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a18) returned 1 Thread: id = 1105 os_tid = 0x1904 [0134.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efb5a0 [0134.493] wcscpy (in: _Dest=0x3efb5a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0134.493] wcscat (in: _Dest=0x3efb5a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\" [0134.493] wcscat (in: _Dest=0x3efb5a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*" [0134.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0134.493] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0136.931] wcscmp (_String1=".", _String2=".") returned 0 [0136.931] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.931] wcscmp (_String1="..", _String2=".") returned 1 [0136.931] wcscmp (_String1="..", _String2="..") returned 0 [0136.931] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16057, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.931] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.931] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5608 [0136.931] wcscpy (in: _Dest=0x7ad5608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0136.931] wcscat (in: _Dest=0x7ad5608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\" [0136.931] wcscat (in: _Dest=0x7ad5608, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" [0140.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8 [0140.406] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0140.406] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0140.406] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0140.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb6bf8 [0140.406] wcscpy (in: _Dest=0x3eb6bf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE" [0140.406] wcscat (in: _Dest=0x3eb6bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\" [0140.406] wcscat (in: _Dest=0x3eb6bf8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" [0140.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2474 [0140.407] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0140.407] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0140.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0140.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb5a0) returned 1 [0140.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47218) returned 1 Thread: id = 1106 os_tid = 0x1908 [0134.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efa5a0 [0134.495] wcscpy (in: _Dest=0x3efa5a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0134.495] wcscat (in: _Dest=0x3efa5a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\" [0134.495] wcscat (in: _Dest=0x3efa5a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*" [0134.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59570 [0134.495] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb19c00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb19c00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0136.924] wcscmp (_String1=".", _String2=".") returned 0 [0136.924] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcb19c00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcb19c00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.924] wcscmp (_String1="..", _String2=".") returned 1 [0136.924] wcscmp (_String1="..", _String2="..") returned 0 [0136.924] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x106ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.924] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.924] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5278 [0136.924] wcscpy (in: _Dest=0x7ad5278, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0136.924] wcscat (in: _Dest=0x7ad5278, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\" [0136.924] wcscat (in: _Dest=0x7ad5278, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" [0146.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0146.752] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0146.753] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0146.753] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0146.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64680 [0146.753] wcscpy (in: _Dest=0x7a64680, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN" [0146.753] wcscat (in: _Dest=0x7a64680, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\" [0146.753] wcscat (in: _Dest=0x7a64680, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" [0146.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0146.754] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb19c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0146.754] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0146.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59570) returned 1 [0146.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa5a0) returned 1 [0146.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47d98) returned 1 Thread: id = 1107 os_tid = 0x190c [0134.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efb7a0 [0134.503] wcscpy (in: _Dest=0x3efb7a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0134.503] wcscat (in: _Dest=0x3efb7a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\" [0134.503] wcscat (in: _Dest=0x3efb7a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*" [0134.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59f10 [0134.503] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0136.931] wcscmp (_String1=".", _String2=".") returned 0 [0136.931] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.931] wcscmp (_String1="..", _String2=".") returned 1 [0136.931] wcscmp (_String1="..", _String2="..") returned 0 [0136.931] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x106d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.932] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.932] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad56a0 [0136.932] wcscpy (in: _Dest=0x7ad56a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0136.932] wcscat (in: _Dest=0x7ad56a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\" [0136.932] wcscat (in: _Dest=0x7ad56a0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" [0138.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad56a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0138.710] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0138.710] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0138.710] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0138.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6020 [0138.710] wcscpy (in: _Dest=0x7ad6020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU" [0138.710] wcscat (in: _Dest=0x7ad6020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\" [0138.710] wcscat (in: _Dest=0x7ad6020, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" [0138.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0138.711] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0138.711] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0138.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59f10) returned 1 [0138.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb7a0) returned 1 [0138.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f98) returned 1 Thread: id = 1108 os_tid = 0x1910 [0134.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efa520 [0134.507] wcscpy (in: _Dest=0x3efa520, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0134.507] wcscat (in: _Dest=0x3efa520, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\" [0134.507] wcscat (in: _Dest=0x3efa520, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*" [0134.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55318 [0134.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0136.927] wcscmp (_String1=".", _String2=".") returned 0 [0136.927] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce13780, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.927] wcscmp (_String1="..", _String2=".") returned 1 [0136.927] wcscmp (_String1="..", _String2="..") returned 0 [0136.927] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.927] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.927] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad53a8 [0136.928] wcscpy (in: _Dest=0x7ad53a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0136.928] wcscat (in: _Dest=0x7ad53a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\" [0136.928] wcscat (in: _Dest=0x7ad53a8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" [0140.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad53a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8 [0140.403] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0140.403] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0140.403] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0140.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb7448 [0140.403] wcscpy (in: _Dest=0x3eb7448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU" [0140.403] wcscat (in: _Dest=0x3eb7448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\" [0140.403] wcscat (in: _Dest=0x3eb7448, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" [0140.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2470 [0140.404] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce13780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0140.404] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0140.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55318) returned 1 [0140.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa520) returned 1 [0140.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47698) returned 1 Thread: id = 1109 os_tid = 0x1914 [0134.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efbf20 [0134.512] wcscpy (in: _Dest=0x3efbf20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0134.512] wcscat (in: _Dest=0x3efbf20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\" [0134.512] wcscat (in: _Dest=0x3efbf20, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*" [0134.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a538a0 [0134.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0136.932] wcscmp (_String1=".", _String2=".") returned 0 [0136.932] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.932] wcscmp (_String1="..", _String2=".") returned 1 [0136.932] wcscmp (_String1="..", _String2="..") returned 0 [0136.932] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x109db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.932] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.932] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5738 [0136.932] wcscpy (in: _Dest=0x7ad5738, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0136.932] wcscat (in: _Dest=0x7ad5738, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\" [0136.932] wcscat (in: _Dest=0x7ad5738, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" [0146.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2014 [0146.759] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0146.759] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0146.759] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0146.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a645e8 [0146.759] wcscpy (in: _Dest=0x7a645e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP" [0146.759] wcscat (in: _Dest=0x7a645e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\" [0146.759] wcscat (in: _Dest=0x7a645e8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" [0146.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a645e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0146.761] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0146.761] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0146.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a538a0) returned 1 [0146.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efbf20) returned 1 [0146.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a98) returned 1 Thread: id = 1110 os_tid = 0x1918 [0134.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efbba0 [0134.513] wcscpy (in: _Dest=0x3efbba0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ" [0134.513] wcscat (in: _Dest=0x3efbba0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\" [0134.513] wcscat (in: _Dest=0x3efbba0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*" [0134.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52f00 [0134.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0136.926] wcscmp (_String1=".", _String2=".") returned 0 [0136.926] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.926] wcscmp (_String1="..", _String2=".") returned 1 [0136.926] wcscmp (_String1="..", _String2="..") returned 0 [0136.926] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0136.926] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0136.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52f00) returned 1 [0136.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efbba0) returned 1 [0136.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47418) returned 1 Thread: id = 1111 os_tid = 0x191c [0134.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efb120 [0134.514] wcscpy (in: _Dest=0x3efb120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0134.514] wcscat (in: _Dest=0x3efb120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\" [0134.514] wcscat (in: _Dest=0x3efb120, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*" [0134.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2418 [0134.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d8c0 [0136.933] wcscmp (_String1=".", _String2=".") returned 0 [0136.933] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.933] wcscmp (_String1="..", _String2=".") returned 1 [0136.933] wcscmp (_String1="..", _String2="..") returned 0 [0136.933] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.933] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.933] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad57d0 [0136.933] wcscpy (in: _Dest=0x7ad57d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0136.933] wcscat (in: _Dest=0x7ad57d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\" [0136.933] wcscat (in: _Dest=0x7ad57d0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" [0138.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad57d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0138.714] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0138.714] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0138.714] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0138.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6280 [0138.714] wcscpy (in: _Dest=0x7ad6280, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA" [0138.714] wcscat (in: _Dest=0x7ad6280, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\" [0138.714] wcscat (in: _Dest=0x7ad6280, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" [0138.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124 [0138.715] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0138.715] FindClose (in: hFindFile=0x7a2d8c0 | out: hFindFile=0x7a2d8c0) returned 1 [0138.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2418) returned 1 [0138.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb120) returned 1 [0138.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47518) returned 1 Thread: id = 1112 os_tid = 0x1920 [0134.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efaca0 [0134.514] wcscpy (in: _Dest=0x3efaca0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0134.514] wcscat (in: _Dest=0x3efaca0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\" [0134.514] wcscat (in: _Dest=0x3efaca0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*" [0134.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3020 [0134.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0136.925] wcscmp (_String1=".", _String2=".") returned 0 [0136.925] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.925] wcscmp (_String1="..", _String2=".") returned 1 [0136.925] wcscmp (_String1="..", _String2="..") returned 0 [0136.925] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x43b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.925] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.925] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5310 [0136.925] wcscpy (in: _Dest=0x7ad5310, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0136.925] wcscat (in: _Dest=0x7ad5310, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\" [0136.925] wcscat (in: _Dest=0x7ad5310, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" [0138.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0138.700] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0138.700] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0138.700] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0138.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cb20 [0138.700] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV" [0138.700] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\" [0138.700] wcscat (in: _Dest=0x32cb20, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" [0138.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0138.701] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0138.701] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0138.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3020) returned 1 [0138.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efaca0) returned 1 [0138.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c18) returned 1 Thread: id = 1113 os_tid = 0x1924 [0134.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efc020 [0134.515] wcscpy (in: _Dest=0x3efc020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0134.515] wcscat (in: _Dest=0x3efc020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\" [0134.515] wcscat (in: _Dest=0x3efc020, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*" [0134.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0134.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0136.934] wcscmp (_String1=".", _String2=".") returned 0 [0136.934] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.934] wcscmp (_String1="..", _String2=".") returned 1 [0136.934] wcscmp (_String1="..", _String2="..") returned 0 [0136.934] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.934] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.934] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5868 [0136.934] wcscpy (in: _Dest=0x7ad5868, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0136.934] wcscat (in: _Dest=0x7ad5868, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\" [0136.934] wcscat (in: _Dest=0x7ad5868, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" [0140.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc8 [0140.446] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0140.446] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0140.446] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0140.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb74e0 [0140.446] wcscpy (in: _Dest=0x3eb74e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN" [0140.446] wcscat (in: _Dest=0x3eb74e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\" [0140.446] wcscat (in: _Dest=0x3eb74e0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" [0140.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb74e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2478 [0140.447] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0140.447] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0140.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0140.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efc020) returned 1 [0140.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47998) returned 1 Thread: id = 1114 os_tid = 0x1928 [0134.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efab20 [0134.516] wcscpy (in: _Dest=0x3efab20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0134.516] wcscat (in: _Dest=0x3efab20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\" [0134.516] wcscat (in: _Dest=0x3efab20, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*" [0134.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea34a0 [0134.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d240 [0136.934] wcscmp (_String1=".", _String2=".") returned 0 [0136.934] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.935] wcscmp (_String1="..", _String2=".") returned 1 [0136.935] wcscmp (_String1="..", _String2="..") returned 0 [0136.935] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10913, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.935] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.935] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5900 [0136.935] wcscpy (in: _Dest=0x7ad5900, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0136.935] wcscat (in: _Dest=0x7ad5900, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\" [0136.935] wcscat (in: _Dest=0x7ad5900, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" [0138.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0138.717] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0138.717] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0138.717] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0138.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6150 [0138.717] wcscpy (in: _Dest=0x7ad6150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA" [0138.717] wcscat (in: _Dest=0x7ad6150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\" [0138.717] wcscat (in: _Dest=0x7ad6150, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" [0138.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0138.718] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0138.718] FindClose (in: hFindFile=0x7a2d240 | out: hFindFile=0x7a2d240) returned 1 [0138.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea34a0) returned 1 [0138.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efab20) returned 1 [0138.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47398) returned 1 Thread: id = 1115 os_tid = 0x192c [0134.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efb320 [0134.519] wcscpy (in: _Dest=0x3efb320, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0134.519] wcscat (in: _Dest=0x3efb320, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\" [0134.519] wcscat (in: _Dest=0x3efb320, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*" [0134.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0134.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0136.935] wcscmp (_String1=".", _String2=".") returned 0 [0136.935] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.935] wcscmp (_String1="..", _String2=".") returned 1 [0136.935] wcscmp (_String1="..", _String2="..") returned 0 [0136.936] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5944, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.936] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.936] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5998 [0136.936] wcscpy (in: _Dest=0x7ad5998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0136.936] wcscat (in: _Dest=0x7ad5998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\" [0136.936] wcscat (in: _Dest=0x7ad5998, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" [0153.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f0 [0153.907] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0153.907] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0153.907] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0153.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a657b8 [0153.907] wcscpy (in: _Dest=0x7a657b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN" [0153.907] wcscat (in: _Dest=0x7a657b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\" [0153.907] wcscat (in: _Dest=0x7a657b8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" [0153.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a657b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b48 [0153.909] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0153.909] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0153.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0153.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb320) returned 1 [0153.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48018) returned 1 Thread: id = 1116 os_tid = 0x1930 [0134.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efb520 [0134.519] wcscpy (in: _Dest=0x3efb520, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0134.519] wcscat (in: _Dest=0x3efb520, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\" [0134.519] wcscat (in: _Dest=0x3efb520, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*" [0134.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0134.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0136.936] wcscmp (_String1=".", _String2=".") returned 0 [0136.936] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.936] wcscmp (_String1="..", _String2=".") returned 1 [0136.936] wcscmp (_String1="..", _String2="..") returned 0 [0136.936] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x592a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.936] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.936] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5a30 [0136.937] wcscpy (in: _Dest=0x7ad5a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0136.937] wcscat (in: _Dest=0x7ad5a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\" [0136.937] wcscat (in: _Dest=0x7ad5a30, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" [0138.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0138.720] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0138.720] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0138.720] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0138.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad61e8 [0138.720] wcscpy (in: _Dest=0x7ad61e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR" [0138.720] wcscat (in: _Dest=0x7ad61e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\" [0138.720] wcscat (in: _Dest=0x7ad61e8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" [0138.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad61e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c [0138.721] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0138.721] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0138.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0138.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb520) returned 1 [0138.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46b98) returned 1 Thread: id = 1117 os_tid = 0x1934 [0134.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efba20 [0134.524] wcscpy (in: _Dest=0x3efba20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0134.524] wcscat (in: _Dest=0x3efba20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\" [0134.524] wcscat (in: _Dest=0x3efba20, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*" [0134.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0134.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0136.937] wcscmp (_String1=".", _String2=".") returned 0 [0136.937] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce5fa40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.937] wcscmp (_String1="..", _String2=".") returned 1 [0136.937] wcscmp (_String1="..", _String2="..") returned 0 [0136.937] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10929, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.937] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.937] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5ac8 [0136.937] wcscpy (in: _Dest=0x7ad5ac8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0136.937] wcscat (in: _Dest=0x7ad5ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\" [0136.937] wcscat (in: _Dest=0x7ad5ac8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" [0140.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd8 [0140.449] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0140.449] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0140.450] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0140.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb7578 [0140.450] wcscpy (in: _Dest=0x3eb7578, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD" [0140.450] wcscat (in: _Dest=0x3eb7578, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\" [0140.450] wcscat (in: _Dest=0x3eb7578, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" [0140.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x247c [0140.451] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce5fa40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0140.451] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0140.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0140.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efba20) returned 1 [0140.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47d18) returned 1 Thread: id = 1118 os_tid = 0x1938 [0134.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efb820 [0134.527] wcscpy (in: _Dest=0x3efb820, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0134.527] wcscat (in: _Dest=0x3efb820, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\" [0134.527] wcscat (in: _Dest=0x3efb820, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*" [0134.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0134.527] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d540 [0136.938] wcscmp (_String1=".", _String2=".") returned 0 [0136.938] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce5fa40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.938] wcscmp (_String1="..", _String2=".") returned 1 [0136.938] wcscmp (_String1="..", _String2="..") returned 0 [0136.938] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10956, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.938] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.938] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5b60 [0136.938] wcscpy (in: _Dest=0x7ad5b60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0136.938] wcscat (in: _Dest=0x7ad5b60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\" [0136.938] wcscat (in: _Dest=0x7ad5b60, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" [0138.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0138.723] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0138.723] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0138.723] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0138.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad63b0 [0138.723] wcscpy (in: _Dest=0x7ad63b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR" [0138.723] wcscat (in: _Dest=0x7ad63b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\" [0138.723] wcscat (in: _Dest=0x7ad63b0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" [0138.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad63b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130 [0138.724] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0138.724] FindClose (in: hFindFile=0x7a2d540 | out: hFindFile=0x7a2d540) returned 1 [0138.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0138.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb820) returned 1 [0138.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47b98) returned 1 Thread: id = 1119 os_tid = 0x193c [0134.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efaa20 [0134.528] wcscpy (in: _Dest=0x3efaa20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0134.528] wcscat (in: _Dest=0x3efaa20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\" [0134.528] wcscat (in: _Dest=0x3efaa20, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*" [0134.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0134.528] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d640 [0136.939] wcscmp (_String1=".", _String2=".") returned 0 [0136.939] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd17f720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.939] wcscmp (_String1="..", _String2=".") returned 1 [0136.939] wcscmp (_String1="..", _String2="..") returned 0 [0136.939] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.939] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.939] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5bf8 [0136.939] wcscpy (in: _Dest=0x7ad5bf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0136.939] wcscat (in: _Dest=0x7ad5bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\" [0136.939] wcscat (in: _Dest=0x7ad5bf8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" [0146.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0146.764] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0146.764] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0146.764] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0146.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64550 [0146.764] wcscpy (in: _Dest=0x7a64550, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL" [0146.764] wcscat (in: _Dest=0x7a64550, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\" [0146.764] wcscat (in: _Dest=0x7a64550, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" [0146.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0146.766] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0146.767] FindClose (in: hFindFile=0x7a2d640 | out: hFindFile=0x7a2d640) returned 1 [0146.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0146.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efaa20) returned 1 [0146.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c98) returned 1 Thread: id = 1120 os_tid = 0x1940 [0134.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da5f70 [0134.528] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0134.529] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\" [0134.529] wcscat (in: _Dest=0x3da5f70, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*" [0134.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0134.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0136.939] wcscmp (_String1=".", _String2=".") returned 0 [0136.939] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce398e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.939] wcscmp (_String1="..", _String2=".") returned 1 [0136.940] wcscmp (_String1="..", _String2="..") returned 0 [0136.940] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.940] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.940] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5c90 [0136.940] wcscpy (in: _Dest=0x7ad5c90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0136.940] wcscat (in: _Dest=0x7ad5c90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\" [0136.940] wcscat (in: _Dest=0x7ad5c90, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" [0138.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0138.726] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0138.726] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0138.726] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0138.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6318 [0138.726] wcscpy (in: _Dest=0x7ad6318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB" [0138.726] wcscat (in: _Dest=0x7ad6318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\" [0138.726] wcscat (in: _Dest=0x7ad6318, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" [0138.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0138.727] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0138.727] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0138.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0138.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 [0138.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47598) returned 1 Thread: id = 1121 os_tid = 0x1944 [0134.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da66f0 [0134.532] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0134.532] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\" [0134.532] wcscat (in: _Dest=0x3da66f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*" [0134.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0134.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d400 [0136.923] wcscmp (_String1=".", _String2=".") returned 0 [0136.923] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd17f720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.923] wcscmp (_String1="..", _String2=".") returned 1 [0136.923] wcscmp (_String1="..", _String2="..") returned 0 [0136.923] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5891, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.923] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.923] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad51e0 [0136.923] wcscpy (in: _Dest=0x7ad51e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0136.924] wcscat (in: _Dest=0x7ad51e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\" [0136.924] wcscat (in: _Dest=0x7ad51e0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" [0140.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad51e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4 [0140.400] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0140.400] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0140.400] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0140.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb6f88 [0140.400] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM" [0140.400] wcscat (in: _Dest=0x3eb6f88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\" [0140.400] wcscat (in: _Dest=0x3eb6f88, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" [0140.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x246c [0140.401] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd17f720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0140.401] FindClose (in: hFindFile=0x7a2d400 | out: hFindFile=0x7a2d400) returned 1 [0140.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0140.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0140.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47198) returned 1 Thread: id = 1122 os_tid = 0x1948 [0134.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efb020 [0134.824] wcscpy (in: _Dest=0x3efb020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0134.824] wcscat (in: _Dest=0x3efb020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\" [0134.824] wcscat (in: _Dest=0x3efb020, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*" [0134.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0134.824] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7770 [0136.117] wcscmp (_String1=".", _String2=".") returned 0 [0136.117] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.117] wcscmp (_String1="..", _String2=".") returned 1 [0136.117] wcscmp (_String1="..", _String2="..") returned 0 [0136.117] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e071, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0136.117] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0136.117] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0136.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6bf8 [0136.118] wcscpy (in: _Dest=0x3eb6bf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0136.118] wcscat (in: _Dest=0x3eb6bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\" [0136.118] wcscat (in: _Dest=0x3eb6bf8, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" [0136.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38 [0136.769] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0136.769] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0136.769] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0136.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5148 [0136.769] wcscpy (in: _Dest=0x7ad5148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS" [0136.769] wcscat (in: _Dest=0x7ad5148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\" [0136.769] wcscat (in: _Dest=0x7ad5148, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" [0136.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0136.770] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0136.770] FindClose (in: hFindFile=0x7ad7770 | out: hFindFile=0x7ad7770) returned 1 [0136.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0136.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb020) returned 1 [0136.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47b18) returned 1 Thread: id = 1123 os_tid = 0x194c [0134.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee1148 [0134.827] wcscpy (in: _Dest=0x3ee1148, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU" [0134.827] wcscat (in: _Dest=0x3ee1148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\" [0134.827] wcscat (in: _Dest=0x3ee1148, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\*" [0134.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0134.827] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad77f0 [0134.828] wcscmp (_String1=".", _String2=".") returned 0 [0134.828] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.828] wcscmp (_String1="..", _String2=".") returned 1 [0134.828] wcscmp (_String1="..", _String2="..") returned 0 [0134.828] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1 [0134.828] wcscmp (_String1="au.cab", _String2=".") returned 1 [0134.828] wcscmp (_String1="au.cab", _String2="..") returned 1 [0134.828] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1 [0134.828] wcscmp (_String1="au.msi", _String2=".") returned 1 [0134.828] wcscmp (_String1="au.msi", _String2="..") returned 1 [0134.828] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6cfe4a40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6cfe4a40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6cfe4a40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0 [0134.828] FindClose (in: hFindFile=0x7ad77f0 | out: hFindFile=0x7ad77f0) returned 1 [0134.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0134.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1148) returned 1 [0134.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee11b0) returned 1 Thread: id = 1124 os_tid = 0x1950 [0134.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e418 [0134.832] wcscpy (in: _Dest=0x3f3e418, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0134.832] wcscat (in: _Dest=0x3f3e418, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0134.832] wcscat (in: _Dest=0x3f3e418, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*" [0134.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0134.833] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80dd3c10, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad79b0 [0135.928] wcscmp (_String1=".", _String2=".") returned 0 [0135.928] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80dd3c10, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.928] wcscmp (_String1="..", _String2=".") returned 1 [0135.928] wcscmp (_String1="..", _String2="..") returned 0 [0135.928] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80dd3c10, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80dd3c10, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0135.928] wcscmp (_String1="deployment.properties", _String2=".") returned 1 [0135.928] wcscmp (_String1="deployment.properties", _String2="..") returned 1 [0135.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5540 [0135.928] wcscpy (in: _Dest=0x3df5540, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0135.928] wcscat (in: _Dest=0x3df5540, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0135.928] wcscat (in: _Dest=0x3df5540, _Source="deployment.properties" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" [0140.621] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties")) returned 0x2020 [0140.645] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", dwFileAttributes=0x20) returned 1 [0144.517] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x24dc [0144.517] GetFileSizeEx (in: hFile=0x24dc, lpFileSize=0xbdbf9f4 | out: lpFileSize=0xbdbf9f4*=707) returned 1 [0144.517] SetFilePointerEx (in: hFile=0x24dc, liDistanceToMove=0x2bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.518] ReadFile (in: hFile=0x24dc, lpBuffer=0xbdbf9d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbdbf9e0, lpOverlapped=0x0 | out: lpBuffer=0xbdbf9d0*, lpNumberOfBytesRead=0xbdbf9e0*=0x4, lpOverlapped=0x0) returned 1 [0144.679] SetFilePointerEx (in: hFile=0x24dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0144.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0144.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0144.680] NtQuerySystemTime (in: CurrentTime=0xbdbf968 | out: CurrentTime=0xbdbf968*=132462177235032000) returned 0x0 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x46d7ebb9 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x2456cf3d [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x34f6acd3 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x29bb258 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x5612cc7 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x6ce61627 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x66cdce9 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x3ec1136c [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x6d568e2c [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x2428ca36 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x4ee018a0 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x500f6098 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x211bcfb3 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x3aeafb37 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x6e7cae6a [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x1adb4481 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x13e9fffa [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0xbbbecbe [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x665653f0 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x5101568f [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x7b7b07d3 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x29465ad3 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x7a8de71c [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x22fdbb9 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x49fa8e0f [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x665ed6b1 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x72679a23 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0xebdf6f1 [0144.680] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x77cea297 [0144.681] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x46d4b097 [0144.681] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x3d967173 [0144.681] RtlRandomEx (in: Seed=0xbdbf960 | out: Seed=0xbdbf960) returned 0x6a41d84 [0144.690] ReadFile (in: hFile=0x24dc, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0xbdbf95c, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0xbdbf95c*=0x2c3, lpOverlapped=0x0) returned 1 [0144.690] SetFilePointerEx (in: hFile=0x24dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.690] WriteFile (in: hFile=0x24dc, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x2c3, lpNumberOfBytesWritten=0xbdbf960, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0xbdbf960*=0x2c3, lpOverlapped=0x0) returned 1 [0144.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0144.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0144.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25a10) returned 1 [0144.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad78b0 [0144.696] SetFilePointerEx (in: hFile=0x24dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.696] WriteFile (in: hFile=0x24dc, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xbdbf9e8, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xbdbf9e8*=0x11c, lpOverlapped=0x0) returned 1 [0144.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25a10 [0144.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0144.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0144.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e78f78 [0144.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0144.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0144.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0144.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25a10) returned 1 [0144.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6f68 [0144.698] sprintf (in: _Dest=0x2fe6f68, _Format="%c%c" | out: _Dest="f4") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f6a, _Format="%c%c" | out: _Dest="6c") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f6c, _Format="%c%c" | out: _Dest="e2") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f6e, _Format="%c%c" | out: _Dest="f3") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f70, _Format="%c%c" | out: _Dest="9e") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f72, _Format="%c%c" | out: _Dest="29") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f74, _Format="%c%c" | out: _Dest="bd") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f76, _Format="%c%c" | out: _Dest="38") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f78, _Format="%c%c" | out: _Dest="74") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f7a, _Format="%c%c" | out: _Dest="25") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f7c, _Format="%c%c" | out: _Dest="0a") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f7e, _Format="%c%c" | out: _Dest="6c") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f80, _Format="%c%c" | out: _Dest="d7") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f82, _Format="%c%c" | out: _Dest="c8") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f84, _Format="%c%c" | out: _Dest="b7") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f86, _Format="%c%c" | out: _Dest="16") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f88, _Format="%c%c" | out: _Dest="87") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f8a, _Format="%c%c" | out: _Dest="f9") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f8c, _Format="%c%c" | out: _Dest="76") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f8e, _Format="%c%c" | out: _Dest="01") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f90, _Format="%c%c" | out: _Dest="f8") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f92, _Format="%c%c" | out: _Dest="ee") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f94, _Format="%c%c" | out: _Dest="32") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f96, _Format="%c%c" | out: _Dest="b2") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f98, _Format="%c%c" | out: _Dest="53") returned 2 [0144.698] sprintf (in: _Dest=0x2fe6f9a, _Format="%c%c" | out: _Dest="12") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6f9c, _Format="%c%c" | out: _Dest="63") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6f9e, _Format="%c%c" | out: _Dest="d0") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fa0, _Format="%c%c" | out: _Dest="92") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fa2, _Format="%c%c" | out: _Dest="84") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fa4, _Format="%c%c" | out: _Dest="4e") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fa6, _Format="%c%c" | out: _Dest="44") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fa8, _Format="%c%c" | out: _Dest="98") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6faa, _Format="%c%c" | out: _Dest="47") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fac, _Format="%c%c" | out: _Dest="45") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fae, _Format="%c%c" | out: _Dest="19") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fb0, _Format="%c%c" | out: _Dest="51") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fb2, _Format="%c%c" | out: _Dest="48") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fb4, _Format="%c%c" | out: _Dest="00") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fb6, _Format="%c%c" | out: _Dest="9e") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fb8, _Format="%c%c" | out: _Dest="23") returned 2 [0144.699] sprintf (in: _Dest=0x2fe6fba, _Format="%c%c" | out: _Dest="a7") returned 2 [0144.699] RtlInitAnsiString (in: DestinationString=0xbdbf970, SourceString="f46ce2f39e29bd3874250a6cd7c8b71687f97601f8ee32b2531263d092844e44984745195148009e23a7" | out: DestinationString="f46ce2f39e29bd3874250a6cd7c8b71687f97601f8ee32b2531263d092844e44984745195148009e23a7") [0144.699] RtlAnsiStringToUnicodeString (in: DestinationString=0xbdbf968, SourceString="f46ce2f39e29bd3874250a6cd7c8b71687f97601f8ee32b2531263d092844e44984745195148009e23a7", AllocateDestinationString=1 | out: DestinationString="f46ce2f39e29bd3874250a6cd7c8b71687f97601f8ee32b2531263d092844e44984745195148009e23a7") returned 0x0 [0144.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6b90 [0144.700] wcscat (in: _Dest=0x7a666c0, _Source="f46ce2f39e29bd3874250" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\f46ce2f39e29bd3874250") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\f46ce2f39e29bd3874250" [0144.700] wcscat (in: _Dest=0x7a666c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\f46ce2f39e29bd3874250.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\f46ce2f39e29bd3874250.68814f" [0144.700] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\f46ce2f39e29bd3874250.68814f", NtPathName=0xbdbf960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\f46ce2f39e29bd3874250.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d40830 [0144.703] FlushFileBuffers (hFile=0x24dc) returned 1 [0147.088] CloseHandle (hObject=0x24dc) returned 1 [0147.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62130 [0147.089] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0147.090] wcscat (in: _Dest=0x7a62130, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\68814F-Readme.txt" [0147.090] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\68814f-readme.txt")) returned 0xffffffff [0147.090] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c9c [0149.285] WriteFile (in: hFile=0x1c9c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbdbf97c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbdbf97c*=0x8b9, lpOverlapped=0x0) returned 1 [0150.264] CloseHandle (hObject=0x1c9c) returned 1 [0154.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 [0154.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5540) returned 1 [0154.806] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d87950, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0154.806] wcscmp (_String1="security", _String2=".") returned 1 [0154.806] wcscmp (_String1="security", _String2="..") returned 1 [0154.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c758 [0154.806] wcscpy (in: _Dest=0x3f3c758, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0154.806] wcscat (in: _Dest=0x3f3c758, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0154.806] wcscat (in: _Dest=0x3f3c758, _Source="security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0156.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3c758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0156.218] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0156.218] wcscmp (_String1="tmp", _String2=".") returned 1 [0156.218] wcscmp (_String1="tmp", _String2="..") returned 1 [0156.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46d98 [0156.218] wcscpy (in: _Dest=0x3e46d98, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment" [0156.219] wcscat (in: _Dest=0x3e46d98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\" [0156.219] wcscat (in: _Dest=0x3e46d98, _Source="tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" [0156.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e46d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0156.220] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0 [0156.220] FindClose (in: hFindFile=0x7ad79b0 | out: hFindFile=0x7ad79b0) returned 1 [0156.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0156.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0156.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 Thread: id = 1125 os_tid = 0x1954 [0134.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3efa720 [0134.842] wcscpy (in: _Dest=0x3efa720, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" [0134.842] wcscat (in: _Dest=0x3efa720, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\" [0134.842] wcscat (in: _Dest=0x3efa720, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*" [0134.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc810 [0134.843] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad79f0 [0136.120] wcscmp (_String1=".", _String2=".") returned 0 [0136.120] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.120] wcscmp (_String1="..", _String2=".") returned 1 [0136.120] wcscmp (_String1="..", _String2="..") returned 0 [0136.120] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58231e20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x58231e20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0136.120] wcscmp (_String1="Data1.cab", _String2=".") returned 1 [0136.120] wcscmp (_String1="Data1.cab", _String2="..") returned 1 [0136.120] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5833c7c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1 [0136.120] wcscmp (_String1="jre1.7.0_45.msi", _String2=".") returned 1 [0136.120] wcscmp (_String1="jre1.7.0_45.msi", _String2="..") returned 1 [0136.120] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5833c7c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x5833c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x5833c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0 [0136.120] FindClose (in: hFindFile=0x7ad79f0 | out: hFindFile=0x7ad79f0) returned 1 [0136.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc810) returned 1 [0136.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa720) returned 1 [0136.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 Thread: id = 1126 os_tid = 0x1958 [0134.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65b98 [0134.843] wcscpy (in: _Dest=0x3e65b98, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0134.843] wcscat (in: _Dest=0x3e65b98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0134.843] wcscat (in: _Dest=0x3e65b98, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*" [0134.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bca78 [0134.843] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad77f0 [0134.846] wcscmp (_String1=".", _String2=".") returned 0 [0134.846] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.846] wcscmp (_String1="..", _String2=".") returned 1 [0134.846] wcscmp (_String1="..", _String2="..") returned 0 [0134.846] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0134.846] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0134.846] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0134.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e682e8 [0134.846] wcscpy (in: _Dest=0x3e682e8, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0134.846] wcscat (in: _Dest=0x3e682e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0134.846] wcscat (in: _Dest=0x3e682e8, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" [0136.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e682e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0136.546] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0136.546] FindClose (in: hFindFile=0x7ad77f0 | out: hFindFile=0x7ad77f0) returned 1 [0136.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0136.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b98) returned 1 [0136.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 1127 os_tid = 0x195c [0134.847] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0x20 [0142.101] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0142.101] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.102] GetLastError () returned 0x5 [0142.102] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0142.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a1e8) returned 1 Thread: id = 1128 os_tid = 0x1960 [0134.848] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0x20 [0140.090] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0140.090] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.197] GetLastError () returned 0x5 [0143.197] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0143.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 Thread: id = 1129 os_tid = 0x1964 [0134.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip")) returned 0x20 [0134.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", dwFileAttributes=0x20) returned 0 [0134.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0134.851] GetLastError () returned 0x5 [0134.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", dwFileAttributes=0x20) returned 0 [0134.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x327410) returned 1 Thread: id = 1130 os_tid = 0x1968 [0134.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip")) returned 0x20 [0136.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0136.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.177] GetLastError () returned 0x5 [0136.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0136.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf4c8) returned 1 Thread: id = 1131 os_tid = 0x196c [0134.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip")) returned 0x20 [0136.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0136.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.942] GetLastError () returned 0x5 [0136.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0136.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30115c0) returned 1 Thread: id = 1132 os_tid = 0x1970 [0134.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip")) returned 0x20 [0136.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", dwFileAttributes=0x20) returned 0 [0136.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.944] GetLastError () returned 0x5 [0136.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", dwFileAttributes=0x20) returned 0 [0136.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012bb0) returned 1 Thread: id = 1133 os_tid = 0x1974 [0134.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip")) returned 0x20 [0136.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", dwFileAttributes=0x20) returned 0 [0136.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.947] GetLastError () returned 0x5 [0136.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", dwFileAttributes=0x20) returned 0 [0136.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011188) returned 1 Thread: id = 1134 os_tid = 0x1978 [0134.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip")) returned 0x20 [0136.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0136.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.948] GetLastError () returned 0x5 [0136.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0136.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff1f88) returned 1 Thread: id = 1135 os_tid = 0x197c [0134.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip")) returned 0x20 [0136.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", dwFileAttributes=0x20) returned 0 [0136.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.950] GetLastError () returned 0x5 [0136.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", dwFileAttributes=0x20) returned 0 [0136.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 Thread: id = 1136 os_tid = 0x1980 [0134.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip")) returned 0x20 [0136.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0136.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.951] GetLastError () returned 0x5 [0136.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0136.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85cb0) returned 1 Thread: id = 1137 os_tid = 0x1984 [0134.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip")) returned 0x20 [0136.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", dwFileAttributes=0x20) returned 0 [0136.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.960] GetLastError () returned 0x5 [0136.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", dwFileAttributes=0x20) returned 0 [0136.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 1138 os_tid = 0x1988 [0134.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip")) returned 0x20 [0136.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0136.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.969] GetLastError () returned 0x5 [0136.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0136.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 Thread: id = 1139 os_tid = 0x198c [0134.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip")) returned 0x20 [0136.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", dwFileAttributes=0x20) returned 0 [0136.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.970] GetLastError () returned 0x5 [0136.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", dwFileAttributes=0x20) returned 0 [0136.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67490) returned 1 Thread: id = 1140 os_tid = 0x1990 [0134.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip")) returned 0x20 [0136.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0136.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.972] GetLastError () returned 0x5 [0136.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0136.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3df0) returned 1 Thread: id = 1141 os_tid = 0x1994 [0134.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip")) returned 0x20 [0136.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0136.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.973] GetLastError () returned 0x5 [0136.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0136.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 1142 os_tid = 0x1998 [0134.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip")) returned 0x20 [0136.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", dwFileAttributes=0x20) returned 0 [0136.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.125] GetLastError () returned 0x5 [0136.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", dwFileAttributes=0x20) returned 0 [0136.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 Thread: id = 1143 os_tid = 0x199c [0134.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip")) returned 0x20 [0136.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", dwFileAttributes=0x20) returned 0 [0136.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.940] GetLastError () returned 0x5 [0136.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", dwFileAttributes=0x20) returned 0 [0136.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85970) returned 1 Thread: id = 1144 os_tid = 0x19a0 [0134.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip")) returned 0x20 [0136.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0136.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.975] GetLastError () returned 0x5 [0136.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0136.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8c68) returned 1 Thread: id = 1145 os_tid = 0x19a4 [0134.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x30be178 [0134.872] wcscpy (in: _Dest=0x30be178, _Source="C:\\Users\\All Users\\Sun\\Java" | out: _Dest="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java" [0134.872] wcscat (in: _Dest=0x30be178, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\") returned="C:\\Users\\All Users\\Sun\\Java\\" [0134.872] wcscat (in: _Dest=0x30be178, _Source="*" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\*") returned="C:\\Users\\All Users\\Sun\\Java\\*" [0134.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0134.872] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7830 [0134.873] wcscmp (_String1=".", _String2=".") returned 0 [0134.873] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.873] wcscmp (_String1="..", _String2=".") returned 1 [0134.873] wcscmp (_String1="..", _String2="..") returned 0 [0134.873] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0134.873] wcscmp (_String1="Java Update", _String2=".") returned 1 [0134.873] wcscmp (_String1="Java Update", _String2="..") returned 1 [0134.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a275e8 [0134.873] wcscpy (in: _Dest=0x7a275e8, _Source="C:\\Users\\All Users\\Sun\\Java" | out: _Dest="C:\\Users\\All Users\\Sun\\Java") returned="C:\\Users\\All Users\\Sun\\Java" [0134.873] wcscat (in: _Dest=0x7a275e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\") returned="C:\\Users\\All Users\\Sun\\Java\\" [0134.873] wcscat (in: _Dest=0x7a275e8, _Source="Java Update" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update" [0136.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a275e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0136.549] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0136.549] FindClose (in: hFindFile=0x7ad7830 | out: hFindFile=0x7ad7830) returned 1 [0136.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0136.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be178) returned 1 [0136.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7230) returned 1 Thread: id = 1146 os_tid = 0x19a8 [0134.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5b80 [0134.874] wcscpy (in: _Dest=0x3df5b80, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0134.874] wcscat (in: _Dest=0x3df5b80, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0134.874] wcscat (in: _Dest=0x3df5b80, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*" [0134.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcf48 [0134.874] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0135.996] wcscmp (_String1=".", _String2=".") returned 0 [0135.996] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9d1ab23, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9d40c82, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9d40c82, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.996] wcscmp (_String1="..", _String2=".") returned 1 [0135.996] wcscmp (_String1="..", _String2="..") returned 0 [0135.996] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb848fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x7bb848fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x7bb848fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.APL", cAlternateFileName="")) returned 1 [0135.996] wcscmp (_String1="M1033DSK.APL", _String2=".") returned 1 [0135.996] wcscmp (_String1="M1033DSK.APL", _String2="..") returned 1 [0135.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0135.996] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0135.996] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0135.996] wcscat (in: _Dest=0x2ff7430, _Source="M1033DSK.APL" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" [0141.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl")) returned 0x20 [0141.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL", dwFileAttributes=0x20) returned 0 [0141.030] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.030] GetLastError () returned 0x5 [0141.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL", dwFileAttributes=0x20) returned 0 [0141.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0141.031] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7650f9d, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7650f9d, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7bc1ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x764f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CRT", cAlternateFileName="")) returned 1 [0141.031] wcscmp (_String1="M1033DSK.CRT", _String2=".") returned 1 [0141.031] wcscmp (_String1="M1033DSK.CRT", _String2="..") returned 1 [0141.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0141.031] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0141.031] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0141.031] wcscat (in: _Dest=0x2ff7430, _Source="M1033DSK.CRT" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" [0141.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt")) returned 0x20 [0141.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", dwFileAttributes=0x20) returned 0 [0141.071] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.071] GetLastError () returned 0x5 [0141.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT", dwFileAttributes=0x20) returned 0 [0141.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0141.071] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77357d7, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc77357d7, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c84ff3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c6aed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CSD", cAlternateFileName="")) returned 1 [0141.071] wcscmp (_String1="M1033DSK.CSD", _String2=".") returned 1 [0141.071] wcscmp (_String1="M1033DSK.CSD", _String2="..") returned 1 [0141.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0141.071] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0141.071] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0141.071] wcscat (in: _Dest=0x2ff7430, _Source="M1033DSK.CSD" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" [0141.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0141.074] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9b2cc, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7d9b2cc, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c93477c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2059c, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.IDX", cAlternateFileName="")) returned 1 [0141.074] wcscmp (_String1="M1033DSK.IDX", _String2=".") returned 1 [0141.074] wcscmp (_String1="M1033DSK.IDX", _String2="..") returned 1 [0141.074] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e0d6e9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7e0d6e9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7da2a43c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe3770, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.LTS", cAlternateFileName="")) returned 1 [0141.074] wcscmp (_String1="M1033DSK.LTS", _String2=".") returned 1 [0141.074] wcscmp (_String1="M1033DSK.LTS", _String2="..") returned 1 [0141.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6ad8 [0141.074] wcscpy (in: _Dest=0x2ff6ad8, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0141.074] wcscat (in: _Dest=0x2ff6ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0141.074] wcscat (in: _Dest=0x2ff6ad8, _Source="M1033DSK.LTS" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" [0141.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0141.075] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8a49f, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7f8a49f, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dc3f77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2515b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.TTS", cAlternateFileName="")) returned 1 [0141.075] wcscmp (_String1="M1033DSK.TTS", _String2=".") returned 1 [0141.075] wcscmp (_String1="M1033DSK.TTS", _String2="..") returned 1 [0141.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0141.075] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0141.075] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0141.075] wcscat (in: _Dest=0x2ff6b90, _Source="M1033DSK.TTS" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" [0141.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0141.076] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc812d3b4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc812d3b4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dcfde5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UDT", cAlternateFileName="")) returned 1 [0141.076] wcscmp (_String1="M1033DSK.UDT", _String2=".") returned 1 [0141.076] wcscmp (_String1="M1033DSK.UDT", _String2="..") returned 1 [0141.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7378 [0141.076] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0141.076] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0141.076] wcscat (in: _Dest=0x2ff7378, _Source="M1033DSK.UDT" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" [0141.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0141.077] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8153513, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc8153513, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7df1319c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x308e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UNT", cAlternateFileName="")) returned 1 [0141.077] wcscmp (_String1="M1033DSK.UNT", _String2=".") returned 1 [0141.077] wcscmp (_String1="M1033DSK.UNT", _String2="..") returned 1 [0141.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6740 [0141.078] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0141.078] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0141.078] wcscat (in: _Dest=0x2ff6740, _Source="M1033DSK.UNT" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" [0141.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0141.079] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 1 [0141.079] wcscmp (_String1="M1033DSK.WIH", _String2=".") returned 1 [0141.079] wcscmp (_String1="M1033DSK.WIH", _String2="..") returned 1 [0141.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7208 [0141.079] wcscpy (in: _Dest=0x2ff7208, _Source="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk" [0141.079] wcscat (in: _Dest=0x2ff7208, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\" [0141.079] wcscat (in: _Dest=0x2ff7208, _Source="M1033DSK.WIH" | out: _Dest="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH") returned="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" [0141.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0141.080] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 0 [0141.080] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0141.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf48) returned 1 [0141.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5b80) returned 1 [0141.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 Thread: id = 1147 os_tid = 0x19ac [0134.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc")) returned 0x20 [0136.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc", dwFileAttributes=0x20) returned 0 [0136.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.978] GetLastError () returned 0x5 [0136.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc", dwFileAttributes=0x20) returned 0 [0136.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5e70) returned 1 Thread: id = 1148 os_tid = 0x19b0 [0134.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efa320 [0134.878] wcscpy (in: _Dest=0x3efa320, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" [0134.878] wcscat (in: _Dest=0x3efa320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\" [0134.878] wcscat (in: _Dest=0x3efa320, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*" [0134.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0134.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0136.831] wcscmp (_String1=".", _String2=".") returned 0 [0136.831] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.831] wcscmp (_String1="..", _String2=".") returned 1 [0136.831] wcscmp (_String1="..", _String2="..") returned 0 [0136.831] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0136.831] wcscmp (_String1="1033", _String2=".") returned 1 [0136.831] wcscmp (_String1="1033", _String2="..") returned 1 [0136.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9340 [0136.831] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts" [0136.831] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\" [0136.831] wcscat (in: _Dest=0x3eb9340, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" [0140.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0140.397] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0140.397] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0140.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0140.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa320) returned 1 [0140.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 Thread: id = 1149 os_tid = 0x19b4 [0134.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat")) returned 0x20 [0136.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT", dwFileAttributes=0x20) returned 0 [0136.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.980] GetLastError () returned 0x5 [0136.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT", dwFileAttributes=0x20) returned 0 [0136.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 Thread: id = 1150 os_tid = 0x19b8 [0134.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat")) returned 0x20 [0136.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT", dwFileAttributes=0x20) returned 0 [0136.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.981] GetLastError () returned 0x5 [0136.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT", dwFileAttributes=0x20) returned 0 [0136.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 Thread: id = 1151 os_tid = 0x19bc [0134.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng")) returned 0x20 [0136.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG", dwFileAttributes=0x20) returned 0 [0136.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.996] GetLastError () returned 0x5 [0136.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG", dwFileAttributes=0x20) returned 0 [0136.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 Thread: id = 1152 os_tid = 0x19c0 [0134.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add")) returned 0x20 [0136.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD", dwFileAttributes=0x20) returned 0 [0136.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.985] GetLastError () returned 0x5 [0136.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD", dwFileAttributes=0x20) returned 0 [0136.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 Thread: id = 1153 os_tid = 0x19c4 [0134.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest")) returned 0x20 [0136.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest", dwFileAttributes=0x20) returned 0 [0136.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.998] GetLastError () returned 0x5 [0136.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest", dwFileAttributes=0x20) returned 0 [0136.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 1154 os_tid = 0x19c8 [0134.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml")) returned 0x20 [0136.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML", dwFileAttributes=0x20) returned 0 [0136.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.987] GetLastError () returned 0x5 [0136.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML", dwFileAttributes=0x20) returned 0 [0136.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 Thread: id = 1155 os_tid = 0x19cc [0134.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml")) returned 0x20 [0137.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML", dwFileAttributes=0x20) returned 0 [0137.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.000] GetLastError () returned 0x5 [0137.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML", dwFileAttributes=0x20) returned 0 [0137.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 Thread: id = 1156 os_tid = 0x19d0 [0134.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23d10 [0134.885] wcscpy (in: _Dest=0x7a23d10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" [0134.885] wcscat (in: _Dest=0x7a23d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\" [0134.885] wcscat (in: _Dest=0x7a23d10, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*" [0134.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef48a0 [0134.885] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ba9270, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0136.988] wcscmp (_String1=".", _String2=".") returned 0 [0136.988] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48ba9270, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.988] wcscmp (_String1="..", _String2=".") returned 1 [0136.988] wcscmp (_String1="..", _String2="..") returned 0 [0136.988] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0136.988] wcscmp (_String1="1033", _String2=".") returned 1 [0136.988] wcscmp (_String1="1033", _String2="..") returned 1 [0136.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f560 [0136.988] wcscpy (in: _Dest=0x3f3f560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS" [0136.988] wcscat (in: _Dest=0x3f3f560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\" [0136.988] wcscat (in: _Dest=0x3f3f560, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0140.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0140.453] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0140.453] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0140.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a0) returned 1 [0140.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d10) returned 1 [0140.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 Thread: id = 1157 os_tid = 0x19d4 [0134.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng")) returned 0x20 [0137.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG", dwFileAttributes=0x20) returned 0 [0137.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.002] GetLastError () returned 0x5 [0137.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG", dwFileAttributes=0x20) returned 0 [0137.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f920) returned 1 Thread: id = 1158 os_tid = 0x19d8 [0134.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest")) returned 0x20 [0136.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest", dwFileAttributes=0x20) returned 0 [0136.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.137] GetLastError () returned 0x5 [0136.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest", dwFileAttributes=0x20) returned 0 [0136.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062a10) returned 1 Thread: id = 1159 os_tid = 0x19dc [0134.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23ca0 [0134.887] wcscpy (in: _Dest=0x7a23ca0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0134.887] wcscat (in: _Dest=0x7a23ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0134.887] wcscat (in: _Dest=0x7a23ca0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*" [0134.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2bc0 [0134.887] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x824623b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfc10 [0138.880] wcscmp (_String1=".", _String2=".") returned 0 [0138.880] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x824623b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.880] wcscmp (_String1="..", _String2=".") returned 1 [0138.880] wcscmp (_String1="..", _String2="..") returned 0 [0138.880] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0138.880] wcscmp (_String1="Certificates", _String2=".") returned 1 [0138.880] wcscmp (_String1="Certificates", _String2="..") returned 1 [0138.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c538 [0138.880] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0138.880] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0138.880] wcscat (in: _Dest=0x3f3c538, _Source="Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0153.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0153.911] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77038290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1 [0153.911] wcscmp (_String1="Sounds", _String2=".") returned 1 [0153.911] wcscmp (_String1="Sounds", _String2="..") returned 1 [0153.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e48018 [0153.911] wcscpy (in: _Dest=0x3e48018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.911] wcscat (in: _Dest=0x3e48018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.911] wcscat (in: _Dest=0x3e48018, _Source="Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0153.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e48018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0153.912] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770aa6b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolBMPs", cAlternateFileName="")) returned 1 [0153.912] wcscmp (_String1="ToolBMPs", _String2=".") returned 1 [0153.913] wcscmp (_String1="ToolBMPs", _String2="..") returned 1 [0153.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47b18 [0153.913] wcscpy (in: _Dest=0x3e47b18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.913] wcscat (in: _Dest=0x3e47b18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.913] wcscat (in: _Dest=0x3e47b18, _Source="ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0153.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0153.920] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76451490, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolData", cAlternateFileName="")) returned 1 [0153.920] wcscmp (_String1="ToolData", _String2=".") returned 1 [0153.920] wcscmp (_String1="ToolData", _String2="..") returned 1 [0153.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46c98 [0153.920] wcscpy (in: _Dest=0x3e46c98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.920] wcscat (in: _Dest=0x3e46c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.920] wcscat (in: _Dest=0x3e46c98, _Source="ToolData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" [0153.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e46c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c [0153.922] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1 [0153.922] wcscmp (_String1="ToolIcons", _String2=".") returned 1 [0153.922] wcscmp (_String1="ToolIcons", _String2="..") returned 1 [0153.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47918 [0153.922] wcscpy (in: _Dest=0x3e47918, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.922] wcscat (in: _Dest=0x3e47918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.922] wcscat (in: _Dest=0x3e47918, _Source="ToolIcons" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" [0153.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54 [0153.923] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="XMLFIL~1")) returned 1 [0153.923] wcscmp (_String1="XML Files", _String2=".") returned 1 [0153.923] wcscmp (_String1="XML Files", _String2="..") returned 1 [0153.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47898 [0153.923] wcscpy (in: _Dest=0x3e47898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove" [0153.923] wcscat (in: _Dest=0x3e47898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\" [0153.923] wcscat (in: _Dest=0x3e47898, _Source="XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0153.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0153.925] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="XMLFIL~1")) returned 0 [0153.925] FindClose (in: hFindFile=0x3dcfc10 | out: hFindFile=0x3dcfc10) returned 1 [0153.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2bc0) returned 1 [0153.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ca0) returned 1 [0153.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23f40) returned 1 Thread: id = 1160 os_tid = 0x19e0 [0134.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4190 [0134.887] wcscpy (in: _Dest=0x3dc4190, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0134.887] wcscat (in: _Dest=0x3dc4190, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\" [0134.888] wcscat (in: _Dest=0x3dc4190, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*" [0134.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0134.888] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad79b0 [0135.907] wcscmp (_String1=".", _String2=".") returned 0 [0135.907] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.907] wcscmp (_String1="..", _String2=".") returned 1 [0135.907] wcscmp (_String1="..", _String2="..") returned 0 [0135.907] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66936b00, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x66936b00, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x66936b00, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0135.907] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0135.907] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0135.907] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0135.908] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0135.908] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0135.908] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0135.908] FindClose (in: hFindFile=0x7ad79b0 | out: hFindFile=0x7ad79b0) returned 1 [0135.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0135.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 [0135.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 Thread: id = 1161 os_tid = 0x19e4 [0134.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add")) returned 0x20 [0136.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD", dwFileAttributes=0x20) returned 0 [0136.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.991] GetLastError () returned 0x5 [0136.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD", dwFileAttributes=0x20) returned 0 [0136.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 Thread: id = 1162 os_tid = 0x19e8 [0134.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0134.893] wcscpy (in: _Dest=0x3f3e328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0134.893] wcscat (in: _Dest=0x3f3e328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0134.894] wcscat (in: _Dest=0x3f3e328, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*" [0134.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4b08 [0134.894] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8922da70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf950 [0138.883] wcscmp (_String1=".", _String2=".") returned 0 [0138.883] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8922da70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.884] wcscmp (_String1="..", _String2=".") returned 1 [0138.884] wcscmp (_String1="..", _String2="..") returned 0 [0138.884] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x896f0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x896f0670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServices", cAlternateFileName="INFOPA~2")) returned 1 [0138.885] wcscmp (_String1="InfoPathOMFormServices", _String2=".") returned 1 [0138.885] wcscmp (_String1="InfoPathOMFormServices", _String2="..") returned 1 [0138.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053d08 [0138.885] wcscpy (in: _Dest=0x3053d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0138.885] wcscat (in: _Dest=0x3053d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0138.885] wcscat (in: _Dest=0x3053d08, _Source="InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0142.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14 [0142.335] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89253bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMV12", cAlternateFileName="INFOPA~1")) returned 1 [0142.335] wcscmp (_String1="InfoPathOMV12", _String2=".") returned 1 [0142.336] wcscmp (_String1="InfoPathOMV12", _String2="..") returned 1 [0142.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d442a0 [0142.336] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0142.336] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0142.336] wcscat (in: _Dest=0x3d442a0, _Source="InfoPathOMV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" [0142.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0142.337] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xe770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0142.337] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0142.337] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0142.337] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0142.337] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0142.337] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0142.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b928 [0142.337] wcscpy (in: _Dest=0x35b928, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM" [0142.337] wcscat (in: _Dest=0x35b928, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\" [0142.337] wcscat (in: _Dest=0x35b928, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" [0142.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0142.338] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8922da70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0142.338] FindClose (in: hFindFile=0x3dcf950 | out: hFindFile=0x3dcf950) returned 1 [0142.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b08) returned 1 [0142.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0142.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fbf0) returned 1 Thread: id = 1163 os_tid = 0x19ec [0135.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss")) returned 0x20 [0136.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss", dwFileAttributes=0x20) returned 0 [0136.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.977] GetLastError () returned 0x5 [0136.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss", dwFileAttributes=0x20) returned 0 [0136.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb71e8) returned 1 Thread: id = 1175 os_tid = 0x19f0 [0135.917] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn")) returned 0x2022 [0135.917] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x20) returned 0 [0135.917] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.917] GetLastError () returned 0x5 [0135.917] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x2022) returned 0 [0135.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a798) returned 1 Thread: id = 1176 os_tid = 0x19f4 [0135.919] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_k.hxw")) returned 0x2022 [0135.919] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x20) returned 0 [0135.920] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_k.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0135.920] GetLastError () returned 0x5 [0135.920] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x2022) returned 0 [0135.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23b50) returned 1 Thread: id = 1177 os_tid = 0x19f8 [0135.922] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_namedurl.hxw")) returned 0x2022 [0141.722] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x20) returned 0 [0141.722] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mkwd_namedurl.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.722] GetLastError () returned 0x5 [0141.722] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x2022) returned 0 [0141.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 Thread: id = 1178 os_tid = 0x19fc [0135.923] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mtoc_hx.hxh")) returned 0x2022 [0140.117] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x20) returned 0 [0140.117] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mtoc_hx.hxh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.696] GetLastError () returned 0x5 [0141.696] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x2022) returned 0 [0141.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ed0) returned 1 Thread: id = 1179 os_tid = 0x1a00 [0135.923] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.hxd")) returned 0x2022 [0141.720] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x20) returned 0 [0141.720] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.hxd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.720] GetLastError () returned 0x5 [0141.720] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x2022) returned 0 [0141.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 Thread: id = 1180 os_tid = 0x1a04 [0135.924] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.lck")) returned 0x2022 [0141.718] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0141.718] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\programdata\\microsoft help\\hx_1033_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.718] GetLastError () returned 0x5 [0141.718] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x2022) returned 0 [0141.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30153a0) returned 1 Thread: id = 1181 os_tid = 0x1a08 [0135.924] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn")) returned 0x2022 [0141.723] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.723] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.724] GetLastError () returned 0x5 [0141.724] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d80) returned 1 Thread: id = 1182 os_tid = 0x1a0c [0135.924] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn")) returned 0x2022 [0141.725] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.725] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.725] GetLastError () returned 0x5 [0141.725] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 Thread: id = 1183 os_tid = 0x1a10 [0135.925] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn")) returned 0x2022 [0141.716] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.716] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.716] GetLastError () returned 0x5 [0141.716] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23c30) returned 1 Thread: id = 1184 os_tid = 0x1a14 [0135.925] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn")) returned 0x2022 [0141.714] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.714] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.714] GetLastError () returned 0x5 [0141.714] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a00) returned 1 Thread: id = 1185 os_tid = 0x1a18 [0135.927] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn")) returned 0x2022 [0141.727] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.727] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.727] GetLastError () returned 0x5 [0141.727] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 Thread: id = 1186 os_tid = 0x1a1c [0135.929] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn")) returned 0x2022 [0141.712] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.712] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.713] GetLastError () returned 0x5 [0141.713] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3093960) returned 1 Thread: id = 1187 os_tid = 0x1a20 [0135.929] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn")) returned 0x2022 [0141.711] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.711] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.711] GetLastError () returned 0x5 [0141.711] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x349128) returned 1 Thread: id = 1188 os_tid = 0x1a24 [0135.930] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn")) returned 0x2022 [0141.709] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.709] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.709] GetLastError () returned 0x5 [0141.709] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3093d60) returned 1 Thread: id = 1189 os_tid = 0x1a28 [0135.931] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn")) returned 0x2022 [0141.730] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.730] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.730] GetLastError () returned 0x5 [0141.730] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23df0) returned 1 Thread: id = 1190 os_tid = 0x1a2c [0135.931] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn")) returned 0x2022 [0141.732] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.732] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.732] GetLastError () returned 0x5 [0141.732] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23e60) returned 1 Thread: id = 1191 os_tid = 0x1a30 [0135.933] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn")) returned 0x2022 [0141.733] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.733] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.733] GetLastError () returned 0x5 [0141.733] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 Thread: id = 1192 os_tid = 0x1a34 [0135.934] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn")) returned 0x2022 [0141.707] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.707] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.708] GetLastError () returned 0x5 [0141.708] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23220) returned 1 Thread: id = 1193 os_tid = 0x1a38 [0135.934] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn")) returned 0x2022 [0141.735] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.735] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.735] GetLastError () returned 0x5 [0141.735] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26238) returned 1 Thread: id = 1194 os_tid = 0x1a3c [0135.935] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn")) returned 0x2022 [0141.705] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.706] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.706] GetLastError () returned 0x5 [0141.706] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 Thread: id = 1195 os_tid = 0x1a40 [0135.935] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn")) returned 0x2022 [0137.293] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0137.294] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.294] GetLastError () returned 0x5 [0137.294] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0137.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 Thread: id = 1196 os_tid = 0x1a44 [0135.936] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn")) returned 0x2022 [0141.738] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.738] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.738] GetLastError () returned 0x5 [0141.738] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fc9808) returned 1 Thread: id = 1197 os_tid = 0x1a48 [0136.179] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn")) returned 0x2022 [0141.704] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.704] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.704] GetLastError () returned 0x5 [0141.704] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 Thread: id = 1199 os_tid = 0x1a50 [0136.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d")) returned 0x20 [0138.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d", dwFileAttributes=0x20) returned 0 [0138.918] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.918] GetLastError () returned 0x5 [0138.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d", dwFileAttributes=0x20) returned 0 [0138.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5c70) returned 1 Thread: id = 1200 os_tid = 0x1a54 [0136.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d")) returned 0x20 [0139.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d", dwFileAttributes=0x20) returned 0 [0139.045] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.045] GetLastError () returned 0x5 [0139.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d", dwFileAttributes=0x20) returned 0 [0139.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 1201 os_tid = 0x1a58 [0136.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d")) returned 0x20 [0139.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d", dwFileAttributes=0x20) returned 0 [0139.046] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.046] GetLastError () returned 0x5 [0139.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d", dwFileAttributes=0x20) returned 0 [0139.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 1202 os_tid = 0x1a5c [0136.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d")) returned 0x20 [0139.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d", dwFileAttributes=0x20) returned 0 [0139.047] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.047] GetLastError () returned 0x5 [0139.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d", dwFileAttributes=0x20) returned 0 [0139.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 1203 os_tid = 0x1a60 [0136.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d")) returned 0x20 [0139.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d", dwFileAttributes=0x20) returned 0 [0139.048] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.049] GetLastError () returned 0x5 [0139.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d", dwFileAttributes=0x20) returned 0 [0139.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 1204 os_tid = 0x1a64 [0136.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a498 [0136.188] wcscpy (in: _Dest=0x3e1a498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" [0136.188] wcscat (in: _Dest=0x3e1a498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\" [0136.188] wcscat (in: _Dest=0x3e1a498, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*" [0136.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc810 [0136.188] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac01ca0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac01ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0137.283] wcscmp (_String1=".", _String2=".") returned 0 [0137.283] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac01ca0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdac01ca0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.283] wcscmp (_String1="..", _String2=".") returned 1 [0137.283] wcscmp (_String1="..", _String2="..") returned 0 [0137.283] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0137.283] wcscmp (_String1="MyriadCAD.otf", _String2=".") returned 1 [0137.283] wcscmp (_String1="MyriadCAD.otf", _String2="..") returned 1 [0137.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb60b0 [0137.283] wcscpy (in: _Dest=0x3eb60b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc" [0137.283] wcscat (in: _Dest=0x3eb60b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\" [0137.283] wcscat (in: _Dest=0x3eb60b0, _Source="MyriadCAD.otf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" [0140.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb60b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2024 [0140.463] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdac01ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 0 [0140.463] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0140.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc810) returned 1 [0140.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a498) returned 1 [0140.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5af0) returned 1 Thread: id = 1205 os_tid = 0x1a68 [0136.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d")) returned 0x20 [0139.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d", dwFileAttributes=0x20) returned 0 [0139.043] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.043] GetLastError () returned 0x5 [0139.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d", dwFileAttributes=0x20) returned 0 [0139.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 1206 os_tid = 0x1a6c [0136.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d")) returned 0x20 [0139.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d", dwFileAttributes=0x20) returned 0 [0139.050] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.050] GetLastError () returned 0x5 [0139.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d", dwFileAttributes=0x20) returned 0 [0139.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d459b0) returned 1 Thread: id = 1207 os_tid = 0x1a70 [0136.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst")) returned 0x21 [0136.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", dwFileAttributes=0x20) returned 0 [0136.191] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.191] GetLastError () returned 0x5 [0136.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", dwFileAttributes=0x21) returned 0 [0136.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a120) returned 1 Thread: id = 1208 os_tid = 0x1a74 [0136.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst")) returned 0x21 [0136.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", dwFileAttributes=0x20) returned 0 [0136.196] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.196] GetLastError () returned 0x5 [0136.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", dwFileAttributes=0x21) returned 0 [0136.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a378) returned 1 Thread: id = 1209 os_tid = 0x1a78 [0136.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst")) returned 0x21 [0136.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", dwFileAttributes=0x20) returned 0 [0136.199] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.199] GetLastError () returned 0x5 [0136.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", dwFileAttributes=0x21) returned 0 [0136.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38e60) returned 1 Thread: id = 1210 os_tid = 0x1a7c [0136.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst")) returned 0x21 [0136.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", dwFileAttributes=0x20) returned 0 [0136.201] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0136.201] GetLastError () returned 0x5 [0136.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", dwFileAttributes=0x21) returned 0 [0136.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a440) returned 1 Thread: id = 1211 os_tid = 0x1a80 [0136.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst")) returned 0x21 [0138.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", dwFileAttributes=0x20) returned 0 [0138.920] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.920] GetLastError () returned 0x5 [0138.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", dwFileAttributes=0x21) returned 0 [0138.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a508) returned 1 Thread: id = 1212 os_tid = 0x1a84 [0136.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst")) returned 0x21 [0138.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", dwFileAttributes=0x20) returned 0 [0138.921] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.921] GetLastError () returned 0x5 [0138.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", dwFileAttributes=0x21) returned 0 [0138.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a5d0) returned 1 Thread: id = 1213 os_tid = 0x1a88 [0136.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst")) returned 0x21 [0138.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", dwFileAttributes=0x20) returned 0 [0138.922] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.922] GetLastError () returned 0x5 [0138.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", dwFileAttributes=0x21) returned 0 [0138.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a698) returned 1 Thread: id = 1214 os_tid = 0x1a8c [0136.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst")) returned 0x21 [0138.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", dwFileAttributes=0x20) returned 0 [0138.923] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.925] GetLastError () returned 0x5 [0138.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", dwFileAttributes=0x21) returned 0 [0138.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a760) returned 1 Thread: id = 1215 os_tid = 0x1a90 [0136.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst")) returned 0x21 [0138.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", dwFileAttributes=0x20) returned 0 [0138.927] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.927] GetLastError () returned 0x5 [0138.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", dwFileAttributes=0x21) returned 0 [0138.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a828) returned 1 Thread: id = 1216 os_tid = 0x1a94 [0136.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst")) returned 0x21 [0138.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", dwFileAttributes=0x20) returned 0 [0138.928] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.928] GetLastError () returned 0x5 [0138.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", dwFileAttributes=0x21) returned 0 [0138.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a8f0) returned 1 Thread: id = 1217 os_tid = 0x1a98 [0136.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst")) returned 0x21 [0138.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", dwFileAttributes=0x20) returned 0 [0138.929] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.929] GetLastError () returned 0x5 [0138.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", dwFileAttributes=0x21) returned 0 [0138.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a9b8) returned 1 Thread: id = 1218 os_tid = 0x1a9c [0136.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst")) returned 0x21 [0138.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", dwFileAttributes=0x20) returned 0 [0138.930] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.930] GetLastError () returned 0x5 [0138.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", dwFileAttributes=0x21) returned 0 [0138.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3aa80) returned 1 Thread: id = 1219 os_tid = 0x1aa0 [0136.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst")) returned 0x21 [0138.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", dwFileAttributes=0x20) returned 0 [0138.931] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.931] GetLastError () returned 0x5 [0138.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", dwFileAttributes=0x21) returned 0 [0138.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ab48) returned 1 Thread: id = 1220 os_tid = 0x1aa4 [0136.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst")) returned 0x21 [0138.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", dwFileAttributes=0x20) returned 0 [0138.933] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.933] GetLastError () returned 0x5 [0138.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", dwFileAttributes=0x21) returned 0 [0138.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 Thread: id = 1221 os_tid = 0x1aa8 [0136.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst")) returned 0x21 [0138.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", dwFileAttributes=0x20) returned 0 [0138.934] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.934] GetLastError () returned 0x5 [0138.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", dwFileAttributes=0x21) returned 0 [0138.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40128) returned 1 Thread: id = 1222 os_tid = 0x1aac [0136.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst")) returned 0x21 [0138.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", dwFileAttributes=0x20) returned 0 [0138.936] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.936] GetLastError () returned 0x5 [0138.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", dwFileAttributes=0x21) returned 0 [0138.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d401f0) returned 1 Thread: id = 1223 os_tid = 0x1ab0 [0136.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst")) returned 0x21 [0138.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", dwFileAttributes=0x20) returned 0 [0138.940] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.940] GetLastError () returned 0x5 [0138.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", dwFileAttributes=0x21) returned 0 [0138.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402b8) returned 1 Thread: id = 1224 os_tid = 0x1ab4 [0136.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst")) returned 0x21 [0138.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", dwFileAttributes=0x20) returned 0 [0138.942] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.942] GetLastError () returned 0x5 [0138.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", dwFileAttributes=0x21) returned 0 [0138.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40380) returned 1 Thread: id = 1225 os_tid = 0x1ab8 [0136.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst")) returned 0x21 [0138.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", dwFileAttributes=0x20) returned 0 [0138.943] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.943] GetLastError () returned 0x5 [0138.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", dwFileAttributes=0x21) returned 0 [0138.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40448) returned 1 Thread: id = 1226 os_tid = 0x1abc [0136.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst")) returned 0x21 [0138.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", dwFileAttributes=0x20) returned 0 [0138.951] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.951] GetLastError () returned 0x5 [0138.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", dwFileAttributes=0x21) returned 0 [0138.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40510) returned 1 Thread: id = 1227 os_tid = 0x1ac0 [0136.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst")) returned 0x21 [0138.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", dwFileAttributes=0x20) returned 0 [0138.952] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.953] GetLastError () returned 0x5 [0138.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", dwFileAttributes=0x21) returned 0 [0138.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d405d8) returned 1 Thread: id = 1228 os_tid = 0x1ac4 [0136.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst")) returned 0x21 [0138.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", dwFileAttributes=0x20) returned 0 [0138.954] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.954] GetLastError () returned 0x5 [0138.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", dwFileAttributes=0x21) returned 0 [0138.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d406a0) returned 1 Thread: id = 1229 os_tid = 0x1ac8 [0136.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst")) returned 0x21 [0137.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", dwFileAttributes=0x20) returned 0 [0137.118] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.118] GetLastError () returned 0x5 [0137.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", dwFileAttributes=0x21) returned 0 [0137.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40768) returned 1 Thread: id = 1230 os_tid = 0x1acc [0136.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst")) returned 0x21 [0137.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", dwFileAttributes=0x20) returned 0 [0137.120] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.121] GetLastError () returned 0x5 [0137.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", dwFileAttributes=0x21) returned 0 [0137.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40830) returned 1 Thread: id = 1231 os_tid = 0x1ad0 [0137.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst")) returned 0x21 [0137.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", dwFileAttributes=0x20) returned 0 [0137.127] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.127] GetLastError () returned 0x5 [0137.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", dwFileAttributes=0x21) returned 0 [0137.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d408f8) returned 1 Thread: id = 1232 os_tid = 0x1ad4 [0137.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23760 [0137.129] wcscpy (in: _Dest=0x7a23760, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" [0137.129] wcscat (in: _Dest=0x7a23760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\" [0137.129] wcscat (in: _Dest=0x7a23760, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\*" [0137.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52f00 [0137.129] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0137.130] wcscmp (_String1=".", _String2=".") returned 0 [0137.130] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.130] wcscmp (_String1="..", _String2=".") returned 1 [0137.130] wcscmp (_String1="..", _String2="..") returned 0 [0137.130] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0137.130] wcscmp (_String1="10.0", _String2=".") returned 1 [0137.130] wcscmp (_String1="10.0", _String2="..") returned 1 [0137.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3de00 [0137.130] wcscpy (in: _Dest=0x3f3de00, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat" [0137.130] wcscat (in: _Dest=0x3f3de00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\" [0137.130] wcscat (in: _Dest=0x3f3de00, _Source="10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0140.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3de00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0140.455] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0140.455] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0140.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52f00) returned 1 [0140.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23760) returned 1 [0140.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee07f0) returned 1 Thread: id = 1233 os_tid = 0x1ad8 [0137.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e580 [0137.139] wcscpy (in: _Dest=0x3f3e580, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" [0137.139] wcscat (in: _Dest=0x3f3e580, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\" [0137.139] wcscat (in: _Dest=0x3f3e580, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\*" [0137.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0137.139] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc80 [0138.956] wcscmp (_String1=".", _String2=".") returned 0 [0138.956] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a12dd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a12dd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.956] wcscmp (_String1="..", _String2=".") returned 1 [0138.956] wcscmp (_String1="..", _String2="..") returned 0 [0138.956] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0138.956] wcscmp (_String1="Dictionaries", _String2=".") returned 1 [0138.956] wcscmp (_String1="Dictionaries", _String2="..") returned 1 [0138.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44840 [0138.956] wcscpy (in: _Dest=0x3d44840, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics" [0138.956] wcscat (in: _Dest=0x3d44840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\" [0138.956] wcscat (in: _Dest=0x3d44840, _Source="Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" [0157.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0157.625] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0157.625] FindClose (in: hFindFile=0x7a2dc80 | out: hFindFile=0x7a2dc80) returned 1 [0157.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0157.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0157.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23140) returned 1 Thread: id = 1234 os_tid = 0x1adc [0137.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a234c0 [0137.147] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Users\\Default\\AppData\\Local\\Application Data" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data") returned="C:\\Users\\Default\\AppData\\Local\\Application Data" [0137.148] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data\\") returned="C:\\Users\\Default\\AppData\\Local\\Application Data\\" [0137.148] wcscat (in: _Dest=0x7a234c0, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\Application Data\\*") returned="C:\\Users\\Default\\AppData\\Local\\Application Data\\*" [0137.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0137.148] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0137.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 [0137.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0990) returned 1 Thread: id = 1235 os_tid = 0x1ae0 [0137.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe66c8 [0137.172] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Users\\Default\\AppData\\Local\\History" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History") returned="C:\\Users\\Default\\AppData\\Local\\History" [0137.172] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History\\") returned="C:\\Users\\Default\\AppData\\Local\\History\\" [0137.172] wcscat (in: _Dest=0x2fe66c8, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\Local\\History\\*") returned="C:\\Users\\Default\\AppData\\Local\\History\\*" [0137.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0137.172] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0137.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0137.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14ca0) returned 1 Thread: id = 1236 os_tid = 0x1ae4 [0137.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d444e0 [0137.181] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0137.181] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0137.181] wcscat (in: _Dest=0x3d444e0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*" [0137.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0137.181] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0138.957] wcscmp (_String1=".", _String2=".") returned 0 [0138.957] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b519f30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923879d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.957] wcscmp (_String1="..", _String2=".") returned 1 [0138.957] wcscmp (_String1="..", _String2="..") returned 0 [0138.957] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4394d00, ftCreationTime.dwHighDateTime=0x1bd9aee, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4394d00, ftLastWriteTime.dwHighDateTime=0x1bd9aee, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0138.957] wcscmp (_String1="J0143743.GIF", _String2=".") returned 1 [0138.957] wcscmp (_String1="J0143743.GIF", _String2="..") returned 1 [0138.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053720 [0138.957] wcscpy (in: _Dest=0x3053720, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0138.957] wcscat (in: _Dest=0x3053720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0138.957] wcscat (in: _Dest=0x3053720, _Source="J0143743.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" [0145.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0145.263] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a221400, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a221400, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0145.263] wcscmp (_String1="J0143744.GIF", _String2=".") returned 1 [0145.263] wcscmp (_String1="J0143744.GIF", _String2="..") returned 1 [0145.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e7a2f8 [0145.263] wcscpy (in: _Dest=0x3e7a2f8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.263] wcscat (in: _Dest=0x3e7a2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.264] wcscat (in: _Dest=0x3e7a2f8, _Source="J0143744.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" [0145.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7a2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0145.265] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41492200, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41492200, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0145.265] wcscmp (_String1="J0143745.GIF", _String2=".") returned 1 [0145.265] wcscmp (_String1="J0143745.GIF", _String2="..") returned 1 [0145.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e3d8 [0145.265] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.265] wcscat (in: _Dest=0x7a5e3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.265] wcscat (in: _Dest=0x7a5e3d8, _Source="J0143745.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" [0145.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0145.267] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd56600, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd56600, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0145.267] wcscmp (_String1="J0143746.GIF", _String2=".") returned 1 [0145.267] wcscmp (_String1="J0143746.GIF", _String2="..") returned 1 [0145.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e5d0 [0145.267] wcscpy (in: _Dest=0x7a5e5d0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.267] wcscat (in: _Dest=0x7a5e5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.267] wcscat (in: _Dest=0x7a5e5d0, _Source="J0143746.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" [0145.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c [0145.268] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a00db00, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a00db00, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0145.268] wcscmp (_String1="J0143748.GIF", _String2=".") returned 1 [0145.268] wcscmp (_String1="J0143748.GIF", _String2="..") returned 1 [0145.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e528 [0145.269] wcscpy (in: _Dest=0x7a5e528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.269] wcscat (in: _Dest=0x7a5e528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.269] wcscat (in: _Dest=0x7a5e528, _Source="J0143748.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" [0145.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88 [0145.271] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342c3300, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x342c3300, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0145.271] wcscmp (_String1="J0143749.GIF", _String2=".") returned 1 [0145.271] wcscmp (_String1="J0143749.GIF", _String2="..") returned 1 [0145.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e678 [0145.271] wcscpy (in: _Dest=0x7a5e678, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.271] wcscat (in: _Dest=0x7a5e678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.271] wcscat (in: _Dest=0x7a5e678, _Source="J0143749.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" [0145.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84 [0145.272] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56be4c00, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56be4c00, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0145.272] wcscmp (_String1="J0143750.GIF", _String2=".") returned 1 [0145.272] wcscmp (_String1="J0143750.GIF", _String2="..") returned 1 [0145.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e720 [0145.273] wcscpy (in: _Dest=0x7a5e720, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.273] wcscat (in: _Dest=0x7a5e720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.273] wcscat (in: _Dest=0x7a5e720, _Source="J0143750.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" [0145.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80 [0145.274] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e661100, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e661100, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0145.274] wcscmp (_String1="J0143752.GIF", _String2=".") returned 1 [0145.275] wcscmp (_String1="J0143752.GIF", _String2="..") returned 1 [0145.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e7c8 [0145.275] wcscpy (in: _Dest=0x7a5e7c8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.275] wcscat (in: _Dest=0x7a5e7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.275] wcscat (in: _Dest=0x7a5e7c8, _Source="J0143752.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" [0145.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c [0145.289] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c337600, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x8ba7ef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c337600, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0145.290] wcscmp (_String1="J0143753.GIF", _String2=".") returned 1 [0145.290] wcscmp (_String1="J0143753.GIF", _String2="..") returned 1 [0145.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e870 [0145.290] wcscpy (in: _Dest=0x7a5e870, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.290] wcscat (in: _Dest=0x7a5e870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.290] wcscat (in: _Dest=0x7a5e870, _Source="J0143753.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" [0145.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4 [0145.293] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9127e900, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b519f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9127e900, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0145.293] wcscmp (_String1="J0143754.GIF", _String2=".") returned 1 [0145.293] wcscmp (_String1="J0143754.GIF", _String2="..") returned 1 [0145.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e918 [0145.293] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.293] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.293] wcscat (in: _Dest=0x7a5e918, _Source="J0143754.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" [0145.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78 [0145.295] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de55a00, ftCreationTime.dwHighDateTime=0x1bd9b76, ftLastAccessTime.dwLowDateTime=0x7b540090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5de55a00, ftLastWriteTime.dwHighDateTime=0x1bd9b76, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0145.295] wcscmp (_String1="J0143758.GIF", _String2=".") returned 1 [0145.295] wcscmp (_String1="J0143758.GIF", _String2="..") returned 1 [0145.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e9c0 [0145.295] wcscpy (in: _Dest=0x7a5e9c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.295] wcscat (in: _Dest=0x7a5e9c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.295] wcscat (in: _Dest=0x7a5e9c0, _Source="J0143758.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" [0145.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec [0145.297] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0145.297] wcscmp (_String1="WB00516L.GIF", _String2=".") returned 1 [0145.297] wcscmp (_String1="WB00516L.GIF", _String2="..") returned 1 [0145.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5ea68 [0145.297] wcscpy (in: _Dest=0x7a5ea68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.297] wcscat (in: _Dest=0x7a5ea68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.297] wcscat (in: _Dest=0x7a5ea68, _Source="WB00516L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" [0145.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5ea68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c0 [0145.298] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0145.298] wcscmp (_String1="WB00531L.GIF", _String2=".") returned 1 [0145.298] wcscmp (_String1="WB00531L.GIF", _String2="..") returned 1 [0145.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5eb10 [0145.298] wcscpy (in: _Dest=0x7a5eb10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.298] wcscat (in: _Dest=0x7a5eb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.298] wcscat (in: _Dest=0x7a5eb10, _Source="WB00531L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" [0145.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5eb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74 [0145.300] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0145.300] wcscmp (_String1="WB00673L.GIF", _String2=".") returned 1 [0145.300] wcscmp (_String1="WB00673L.GIF", _String2="..") returned 1 [0145.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5ebb8 [0145.300] wcscpy (in: _Dest=0x7a5ebb8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.300] wcscat (in: _Dest=0x7a5ebb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.300] wcscat (in: _Dest=0x7a5ebb8, _Source="WB00673L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" [0145.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5ebb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70 [0145.301] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0145.301] wcscmp (_String1="WB00703L.GIF", _String2=".") returned 1 [0145.302] wcscmp (_String1="WB00703L.GIF", _String2="..") returned 1 [0145.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5ec60 [0145.302] wcscpy (in: _Dest=0x7a5ec60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.302] wcscat (in: _Dest=0x7a5ec60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.302] wcscat (in: _Dest=0x7a5ec60, _Source="WB00703L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" [0145.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5ec60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68 [0145.303] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852a6f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0145.303] wcscmp (_String1="WB00760L.GIF", _String2=".") returned 1 [0145.303] wcscmp (_String1="WB00760L.GIF", _String2="..") returned 1 [0145.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5ed08 [0145.303] wcscpy (in: _Dest=0x7a5ed08, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.303] wcscat (in: _Dest=0x7a5ed08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.303] wcscat (in: _Dest=0x7a5ed08, _Source="WB00760L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" [0145.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5ed08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4 [0145.305] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0145.305] wcscmp (_String1="WB00780L.GIF", _String2=".") returned 1 [0145.305] wcscmp (_String1="WB00780L.GIF", _String2="..") returned 1 [0145.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5edb0 [0145.305] wcscpy (in: _Dest=0x7a5edb0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.305] wcscat (in: _Dest=0x7a5edb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.305] wcscat (in: _Dest=0x7a5edb0, _Source="WB00780L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" [0145.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5edb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e5c [0145.306] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x92361870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0145.306] wcscmp (_String1="WB01741L.GIF", _String2=".") returned 1 [0145.306] wcscmp (_String1="WB01741L.GIF", _String2="..") returned 1 [0145.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5ee58 [0145.307] wcscpy (in: _Dest=0x7a5ee58, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.307] wcscat (in: _Dest=0x7a5ee58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.307] wcscat (in: _Dest=0x7a5ee58, _Source="WB01741L.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" [0145.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5ee58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0145.309] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0145.309] wcscmp (_String1="WB02039_.GIF", _String2=".") returned 1 [0145.309] wcscmp (_String1="WB02039_.GIF", _String2="..") returned 1 [0145.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5ef00 [0145.310] wcscpy (in: _Dest=0x7a5ef00, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.310] wcscat (in: _Dest=0x7a5ef00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.310] wcscat (in: _Dest=0x7a5ef00, _Source="WB02039_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" [0145.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5ef00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0145.311] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0145.311] wcscmp (_String1="WB02055_.GIF", _String2=".") returned 1 [0145.311] wcscmp (_String1="WB02055_.GIF", _String2="..") returned 1 [0145.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5efa8 [0145.311] wcscpy (in: _Dest=0x7a5efa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.311] wcscat (in: _Dest=0x7a5efa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.311] wcscat (in: _Dest=0x7a5efa8, _Source="WB02055_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" [0145.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5efa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0145.313] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0145.313] wcscmp (_String1="WB02073_.GIF", _String2=".") returned 1 [0145.313] wcscmp (_String1="WB02073_.GIF", _String2="..") returned 1 [0145.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f050 [0145.313] wcscpy (in: _Dest=0x7a5f050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0145.313] wcscat (in: _Dest=0x7a5f050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0145.313] wcscat (in: _Dest=0x7a5f050, _Source="WB02073_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" [0145.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0146.201] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0146.202] wcscmp (_String1="WB02074_.GIF", _String2=".") returned 1 [0146.202] wcscmp (_String1="WB02074_.GIF", _String2="..") returned 1 [0146.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f788 [0146.202] wcscpy (in: _Dest=0x7a5f788, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0146.202] wcscat (in: _Dest=0x7a5f788, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0146.202] wcscat (in: _Dest=0x7a5f788, _Source="WB02074_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" [0151.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0151.105] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0151.105] wcscmp (_String1="WB02077_.GIF", _String2=".") returned 1 [0151.105] wcscmp (_String1="WB02077_.GIF", _String2="..") returned 1 [0151.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053720 [0151.106] wcscpy (in: _Dest=0x3053720, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.106] wcscat (in: _Dest=0x3053720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.106] wcscat (in: _Dest=0x3053720, _Source="WB02077_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" [0151.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0151.107] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0151.107] wcscmp (_String1="WB02082_.GIF", _String2=".") returned 1 [0151.107] wcscmp (_String1="WB02082_.GIF", _String2="..") returned 1 [0151.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053a68 [0151.108] wcscpy (in: _Dest=0x3053a68, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.108] wcscat (in: _Dest=0x3053a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.108] wcscat (in: _Dest=0x3053a68, _Source="WB02082_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" [0151.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0151.109] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0151.109] wcscmp (_String1="WB02085_.GIF", _String2=".") returned 1 [0151.109] wcscmp (_String1="WB02085_.GIF", _String2="..") returned 1 [0151.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3054050 [0151.109] wcscpy (in: _Dest=0x3054050, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.109] wcscat (in: _Dest=0x3054050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.109] wcscat (in: _Dest=0x3054050, _Source="WB02085_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" [0151.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3054050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0151.111] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0151.111] wcscmp (_String1="WB02097_.GIF", _String2=".") returned 1 [0151.111] wcscmp (_String1="WB02097_.GIF", _String2="..") returned 1 [0151.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x30531e0 [0151.111] wcscpy (in: _Dest=0x30531e0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.111] wcscat (in: _Dest=0x30531e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.111] wcscat (in: _Dest=0x30531e0, _Source="WB02097_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" [0151.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30531e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0151.113] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0151.113] wcscmp (_String1="WB02106_.GIF", _String2=".") returned 1 [0151.113] wcscmp (_String1="WB02106_.GIF", _String2="..") returned 1 [0151.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053528 [0151.113] wcscpy (in: _Dest=0x3053528, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.113] wcscat (in: _Dest=0x3053528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.113] wcscat (in: _Dest=0x3053528, _Source="WB02106_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" [0151.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0151.114] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0151.114] wcscmp (_String1="WB02116_.GIF", _String2=".") returned 1 [0151.114] wcscmp (_String1="WB02116_.GIF", _String2="..") returned 1 [0151.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053fa8 [0151.115] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.115] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.115] wcscat (in: _Dest=0x3053fa8, _Source="WB02116_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" [0151.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0151.116] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0151.116] wcscmp (_String1="WB02134_.GIF", _String2=".") returned 1 [0151.116] wcscmp (_String1="WB02134_.GIF", _String2="..") returned 1 [0151.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053870 [0151.116] wcscpy (in: _Dest=0x3053870, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.116] wcscat (in: _Dest=0x3053870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.116] wcscat (in: _Dest=0x3053870, _Source="WB02134_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" [0151.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0151.118] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0151.118] wcscmp (_String1="WB02187_.GIF", _String2=".") returned 1 [0151.118] wcscmp (_String1="WB02187_.GIF", _String2="..") returned 1 [0151.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3052fe8 [0151.118] wcscpy (in: _Dest=0x3052fe8, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.118] wcscat (in: _Dest=0x3052fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.118] wcscat (in: _Dest=0x3052fe8, _Source="WB02187_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" [0151.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0151.119] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0151.119] wcscmp (_String1="WB02198_.GIF", _String2=".") returned 1 [0151.120] wcscmp (_String1="WB02198_.GIF", _String2="..") returned 1 [0151.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053138 [0151.120] wcscpy (in: _Dest=0x3053138, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.120] wcscat (in: _Dest=0x3053138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.120] wcscat (in: _Dest=0x3053138, _Source="WB02198_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" [0151.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0151.121] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0151.121] wcscmp (_String1="WB02201_.GIF", _String2=".") returned 1 [0151.121] wcscmp (_String1="WB02201_.GIF", _String2="..") returned 1 [0151.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053b10 [0151.121] wcscpy (in: _Dest=0x3053b10, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.121] wcscat (in: _Dest=0x3053b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.121] wcscat (in: _Dest=0x3053b10, _Source="WB02201_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" [0151.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0151.123] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x923879d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0151.123] wcscmp (_String1="WB02214_.GIF", _String2=".") returned 1 [0151.123] wcscmp (_String1="WB02214_.GIF", _String2="..") returned 1 [0151.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053c60 [0151.123] wcscpy (in: _Dest=0x3053c60, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.123] wcscat (in: _Dest=0x3053c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.123] wcscat (in: _Dest=0x3053c60, _Source="WB02214_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" [0151.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0151.124] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0151.124] wcscmp (_String1="WB02218_.GIF", _String2=".") returned 1 [0151.124] wcscmp (_String1="WB02218_.GIF", _String2="..") returned 1 [0151.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x30539c0 [0151.125] wcscpy (in: _Dest=0x30539c0, _Source="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds" [0151.125] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\" [0151.125] wcscat (in: _Dest=0x30539c0, _Source="WB02218_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF") returned="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" [0151.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30539c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0151.126] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0 [0151.126] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0151.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0151.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 [0151.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 1237 os_tid = 0x1ae8 [0137.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx")) returned 0x20 [0140.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx", dwFileAttributes=0x20) returned 0 [0140.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.033] GetLastError () returned 0x5 [0140.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx", dwFileAttributes=0x20) returned 0 [0140.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 1238 os_tid = 0x1aec [0137.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx")) returned 0x20 [0140.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0140.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.079] GetLastError () returned 0x5 [0140.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0140.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 Thread: id = 1239 os_tid = 0x1af0 [0137.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx")) returned 0x20 [0140.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0140.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.080] GetLastError () returned 0x5 [0140.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0140.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4dc0) returned 1 Thread: id = 1240 os_tid = 0x1af4 [0137.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx")) returned 0x20 [0140.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx", dwFileAttributes=0x20) returned 0 [0140.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.082] GetLastError () returned 0x5 [0140.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx", dwFileAttributes=0x20) returned 0 [0140.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 Thread: id = 1241 os_tid = 0x1af8 [0137.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx")) returned 0x20 [0140.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx", dwFileAttributes=0x20) returned 0 [0140.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.083] GetLastError () returned 0x5 [0140.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx", dwFileAttributes=0x20) returned 0 [0140.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19318) returned 1 Thread: id = 1242 os_tid = 0x1afc [0137.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx")) returned 0x20 [0140.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx", dwFileAttributes=0x20) returned 0 [0140.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.084] GetLastError () returned 0x5 [0140.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx", dwFileAttributes=0x20) returned 0 [0140.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df61c0) returned 1 Thread: id = 1243 os_tid = 0x1b00 [0137.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx")) returned 0x20 [0140.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0140.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.085] GetLastError () returned 0x5 [0140.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0140.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb67d0) returned 1 Thread: id = 1244 os_tid = 0x1b04 [0137.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx")) returned 0x20 [0140.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0140.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.087] GetLastError () returned 0x5 [0140.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0140.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7a640) returned 1 Thread: id = 1245 os_tid = 0x1b08 [0137.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx")) returned 0x20 [0139.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx", dwFileAttributes=0x20) returned 0 [0139.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.060] GetLastError () returned 0x5 [0139.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx", dwFileAttributes=0x20) returned 0 [0139.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45380) returned 1 Thread: id = 1246 os_tid = 0x1b0c [0137.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx")) returned 0x20 [0140.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0140.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.078] GetLastError () returned 0x5 [0140.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0140.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7448) returned 1 Thread: id = 1247 os_tid = 0x1b10 [0137.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0990 [0137.192] wcscpy (in: _Dest=0x3ee0990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" [0137.192] wcscat (in: _Dest=0x3ee0990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\" [0137.192] wcscat (in: _Dest=0x3ee0990, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\*" [0137.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53638 [0137.192] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0137.192] wcscmp (_String1=".", _String2=".") returned 0 [0137.193] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a38f30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a38f30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.193] wcscmp (_String1="..", _String2=".") returned 1 [0137.193] wcscmp (_String1="..", _String2="..") returned 0 [0137.193] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0137.193] wcscmp (_String1="10.0", _String2=".") returned 1 [0137.193] wcscmp (_String1="10.0", _String2="..") returned 1 [0137.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a234c0 [0137.193] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat" [0137.193] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\" [0137.193] wcscat (in: _Dest=0x7a234c0, _Source="10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0140.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a234c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2014 [0140.457] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0140.457] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0140.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53638) returned 1 [0140.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0990) returned 1 [0140.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0fa8) returned 1 Thread: id = 1248 os_tid = 0x1b14 [0137.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edffd0 [0137.201] wcscpy (in: _Dest=0x3edffd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0137.201] wcscat (in: _Dest=0x3edffd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0137.201] wcscat (in: _Dest=0x3edffd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\*" [0137.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54710 [0137.201] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0137.202] wcscmp (_String1=".", _String2=".") returned 0 [0137.202] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd685b1d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.202] wcscmp (_String1="..", _String2=".") returned 1 [0137.202] wcscmp (_String1="..", _String2="..") returned 0 [0137.202] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd685b1d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd685b1d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd6965b70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0137.202] wcscmp (_String1="ACECache11.lst", _String2=".") returned 1 [0137.202] wcscmp (_String1="ACECache11.lst", _String2="..") returned 1 [0137.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e46f18 [0137.202] wcscpy (in: _Dest=0x3e46f18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0137.202] wcscat (in: _Dest=0x3e46f18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0137.202] wcscat (in: _Dest=0x3e46f18, _Source="ACECache11.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" [0140.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x201c [0140.459] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0140.459] wcscmp (_String1="Profiles", _String2=".") returned 1 [0140.459] wcscmp (_String1="Profiles", _String2="..") returned 1 [0140.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23760 [0140.459] wcscpy (in: _Dest=0x7a23760, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color" [0140.459] wcscat (in: _Dest=0x7a23760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0140.459] wcscat (in: _Dest=0x7a23760, _Source="Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0140.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0140.460] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0140.460] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0140.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54710) returned 1 [0140.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edffd0) returned 1 [0140.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 Thread: id = 1249 os_tid = 0x1b18 [0137.208] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url")) returned 0x20 [0140.065] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url", dwFileAttributes=0x20) returned 0 [0140.065] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.065] GetLastError () returned 0x5 [0140.065] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url", dwFileAttributes=0x20) returned 0 [0140.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 Thread: id = 1250 os_tid = 0x1b1c [0137.211] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url")) returned 0x20 [0140.091] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", dwFileAttributes=0x20) returned 0 [0140.091] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.092] GetLastError () returned 0x5 [0140.092] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", dwFileAttributes=0x20) returned 0 [0140.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6080) returned 1 Thread: id = 1251 os_tid = 0x1b20 [0137.212] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url")) returned 0x20 [0140.096] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url", dwFileAttributes=0x20) returned 0 [0140.096] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.096] GetLastError () returned 0x5 [0140.096] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url", dwFileAttributes=0x20) returned 0 [0140.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d440f0) returned 1 Thread: id = 1252 os_tid = 0x1b24 [0137.213] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url")) returned 0x20 [0139.113] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url", dwFileAttributes=0x20) returned 0 [0139.114] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.114] GetLastError () returned 0x5 [0139.114] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url", dwFileAttributes=0x20) returned 0 [0139.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 1253 os_tid = 0x1b28 [0137.214] GetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url")) returned 0x20 [0140.090] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url", dwFileAttributes=0x20) returned 0 [0140.090] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.090] GetLastError () returned 0x5 [0140.090] SetFileAttributesW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url", dwFileAttributes=0x20) returned 0 [0140.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448d0) returned 1 Thread: id = 1254 os_tid = 0x1b2c [0137.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json")) returned 0x20 [0139.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0139.033] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.033] GetLastError () returned 0x5 [0139.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0139.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39310) returned 1 Thread: id = 1255 os_tid = 0x1b30 [0137.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z")) returned 0x20 [0137.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", dwFileAttributes=0x20) returned 0 [0137.215] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.216] GetLastError () returned 0x5 [0137.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z", dwFileAttributes=0x20) returned 0 [0137.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 Thread: id = 1256 os_tid = 0x1b34 [0137.217] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\u0e_xfok\\f-v_s.doc")) returned 0x20 [0137.217] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc", dwFileAttributes=0x20) returned 1 [0137.588] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\u0e_xfok\\f-v_s.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ba0 [0137.589] GetFileSizeEx (in: hFile=0x1ba0, lpFileSize=0xb36fe5c | out: lpFileSize=0xb36fe5c*=14776) returned 1 [0137.589] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x39b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.589] ReadFile (in: hFile=0x1ba0, lpBuffer=0xb36fe38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb36fe48, lpOverlapped=0x0 | out: lpBuffer=0xb36fe38*, lpNumberOfBytesRead=0xb36fe48*=0x4, lpOverlapped=0x0) returned 1 [0137.591] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0137.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0137.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0137.591] NtQuerySystemTime (in: CurrentTime=0xb36fdd0 | out: CurrentTime=0xb36fdd0*=132462177168576000) returned 0x0 [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x48e49c3e [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x20273291 [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x3b445534 [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x6fe758a3 [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x7aca9b17 [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x4b707c9f [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x3852e0dd [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x3e65b8a1 [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x48c1d3f5 [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x3cba9bda [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x4bde3adc [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x4b7d6e25 [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x40e205dc [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x7fb907a4 [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x469db498 [0137.591] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x75de90d2 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x762d9727 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x355e937 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x73333800 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x5847fe0c [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x6c1e0198 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x243cbc00 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x57ec26f5 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x229919f0 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x241e4d46 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x51311b9 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x319c03d1 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x2a5fdc41 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x50133ae1 [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x24c0680a [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x3407e97f [0137.592] RtlRandomEx (in: Seed=0xb36fdc8 | out: Seed=0xb36fdc8) returned 0x6ac7345f [0137.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0137.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0137.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0137.603] ReadFile (in: hFile=0x1ba0, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x39b8, lpNumberOfBytesRead=0xb36fdc4, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0xb36fdc4*=0x39b8, lpOverlapped=0x0) returned 1 [0137.603] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.604] WriteFile (in: hFile=0x1ba0, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x39b8, lpNumberOfBytesWritten=0xb36fdc8, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0xb36fdc8*=0x39b8, lpOverlapped=0x0) returned 1 [0137.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54110 [0137.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533a0 [0137.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533a0) returned 1 [0137.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0137.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0137.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533a0 [0137.969] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.969] WriteFile (in: hFile=0x1ba0, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xb36fe50, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0xb36fe50*=0x104, lpOverlapped=0x0) returned 1 [0138.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debf68) returned 1 [0138.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e532d8) returned 1 [0138.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52f90) returned 1 [0138.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533a0) returned 1 [0138.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54110) returned 1 [0138.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4168) returned 1 [0138.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0138.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0138.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9ef0 [0138.160] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc" [0138.160] wcscat (in: _Dest=0x3eb9ef0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc.68814f" [0138.160] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc.68814f", NtPathName=0xb36fdc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\f-v_S.doc.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6318 [0138.160] NtSetInformationFile (FileHandle=0x1ba0, IoStatusBlock=0xb36fdd0, FileInformation=0x7ad6318, Length=0x90, FileInformationClass=0xa) returned 0x0 [0138.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6318) returned 1 [0138.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a580e8) returned 1 [0138.231] NtQueryInformationFile (in: FileHandle=0x1ba0, IoStatusBlock=0xb36fda0, FileInformation=0xb36fda8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb36fda0, FileInformation=0xb36fda8) returned 0x0 [0138.231] NtSetInformationFile (FileHandle=0x1ba0, IoStatusBlock=0xb36fda0, FileInformation=0xb36fda8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 [0138.259] FlushFileBuffers (hFile=0x1ba0) returned 1 [0138.261] CloseHandle (hObject=0x1ba0) returned 1 [0138.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb92b8 [0138.271] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\" [0138.271] wcscat (in: _Dest=0x3eb92b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\68814F-Readme.txt" [0138.271] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\u0e_xfok\\68814f-readme.txt")) returned 0xffffffff [0138.271] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\u0e_xfok\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b94 [0138.287] WriteFile (in: hFile=0x1b94, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb36fde4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb36fde4*=0x8b9, lpOverlapped=0x0) returned 1 [0138.298] CloseHandle (hObject=0x1b94) returned 1 [0138.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 [0138.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e069e0) returned 1 Thread: id = 1257 os_tid = 0x1b38 [0137.219] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\hNC8.ppt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\u0e_xfok\\hnc8.ppt")) returned 0x20 [0137.219] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\hNC8.ppt", dwFileAttributes=0x20) returned 1 [0137.604] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\hNC8.ppt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\u0e_xfok\\hnc8.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b9c [0137.604] GetFileSizeEx (in: hFile=0x1b9c, lpFileSize=0xb13f774 | out: lpFileSize=0xb13f774*=86654) returned 1 [0137.604] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x1527a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.604] ReadFile (in: hFile=0x1b9c, lpBuffer=0xb13f750, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb13f760, lpOverlapped=0x0 | out: lpBuffer=0xb13f750*, lpNumberOfBytesRead=0xb13f760*=0x4, lpOverlapped=0x0) returned 1 [0137.606] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0137.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0137.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0137.606] NtQuerySystemTime (in: CurrentTime=0xb13f6e8 | out: CurrentTime=0xb13f6e8*=132462177168732000) returned 0x0 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x51dfe9a7 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x79999951 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x5a03893b [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x3e451812 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x40a0be00 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x3a5c37f4 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x7dfe5106 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x7d1caaa5 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x18bf67fc [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x5fbf74ac [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x693809e7 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x51d3ca58 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x19850cc6 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x2ea60ff0 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x2e4fae9e [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x1db5c68c [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0xa7583a1 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x30cb5ef5 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x5165427d [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x5fed035d [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x72ac0948 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x5f2604bb [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x20cc3363 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x4f70476 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x2152c6ab [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x18c888eb [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x3659d0ef [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x2bc05991 [0137.607] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x234dc27d [0137.608] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x4155c32c [0137.608] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x46e152ee [0137.608] RtlRandomEx (in: Seed=0xb13f6e0 | out: Seed=0xb13f6e0) returned 0x6a78af0a [0137.619] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.619] ReadFile (in: hFile=0x1b9c, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb13f6e8, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xb13f6e8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.620] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25f68 [0137.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51278 [0137.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0137.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0137.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0137.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0137.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0137.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ac8) returned 1 [0137.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0137.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25f68) returned 1 [0137.620] WriteFile (in: hFile=0x1b9c, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb13f6e8, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0xb13f6e8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0137.985] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.985] ReadFile (in: hFile=0x1b9c, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb13f6e8, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xb13f6e8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.985] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0137.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0137.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53580 [0137.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53580) returned 1 [0137.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0137.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53580 [0137.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537b0 [0137.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e537b0) returned 1 [0137.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.986] WriteFile (in: hFile=0x1b9c, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb13f6e8, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0xb13f6e8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0138.012] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x1167e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.012] ReadFile (in: hFile=0x1b9c, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb13f6e8, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xb13f6e8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.012] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x1167e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25398 [0138.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06ad0 [0138.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52658 [0138.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52658) returned 1 [0138.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0138.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52658 [0138.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52518 [0138.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52518) returned 1 [0138.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0138.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0138.014] WriteFile (in: hFile=0x1b9c, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb13f6e8, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0xb13f6e8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0138.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee1148 [0138.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0138.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec6080 [0138.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0138.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0138.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0138.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0138.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0138.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0aac0 [0138.064] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.064] WriteFile (in: hFile=0x1b9c, lpBuffer=0x3e0aac0*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0xb13f768, lpOverlapped=0x0 | out: lpBuffer=0x3e0aac0*, lpNumberOfBytesWritten=0xb13f768*=0x142, lpOverlapped=0x0) returned 1 [0138.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bddd0 [0138.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0138.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0138.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad9748 [0138.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0138.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0138.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0138.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0138.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a37770 [0138.166] sprintf (in: _Dest=0x7a37770, _Format="%c%c" | out: _Dest="62") returned 2 [0138.166] sprintf (in: _Dest=0x7a37772, _Format="%c%c" | out: _Dest="20") returned 2 [0138.166] sprintf (in: _Dest=0x7a37774, _Format="%c%c" | out: _Dest="85") returned 2 [0138.166] sprintf (in: _Dest=0x7a37776, _Format="%c%c" | out: _Dest="36") returned 2 [0138.166] sprintf (in: _Dest=0x7a37778, _Format="%c%c" | out: _Dest="71") returned 2 [0138.166] sprintf (in: _Dest=0x7a3777a, _Format="%c%c" | out: _Dest="7b") returned 2 [0138.166] sprintf (in: _Dest=0x7a3777c, _Format="%c%c" | out: _Dest="ae") returned 2 [0138.166] sprintf (in: _Dest=0x7a3777e, _Format="%c%c" | out: _Dest="87") returned 2 [0138.166] sprintf (in: _Dest=0x7a37780, _Format="%c%c" | out: _Dest="d8") returned 2 [0138.166] sprintf (in: _Dest=0x7a37782, _Format="%c%c" | out: _Dest="0f") returned 2 [0138.166] sprintf (in: _Dest=0x7a37784, _Format="%c%c" | out: _Dest="a2") returned 2 [0138.166] sprintf (in: _Dest=0x7a37786, _Format="%c%c" | out: _Dest="c3") returned 2 [0138.166] sprintf (in: _Dest=0x7a37788, _Format="%c%c" | out: _Dest="22") returned 2 [0138.166] sprintf (in: _Dest=0x7a3778a, _Format="%c%c" | out: _Dest="fc") returned 2 [0138.166] sprintf (in: _Dest=0x7a3778c, _Format="%c%c" | out: _Dest="95") returned 2 [0138.166] sprintf (in: _Dest=0x7a3778e, _Format="%c%c" | out: _Dest="e1") returned 2 [0138.166] RtlInitAnsiString (in: DestinationString=0xb13f6f0, SourceString="62208536717bae87d80fa2c322fc95e1" | out: DestinationString="62208536717bae87d80fa2c322fc95e1") [0138.166] RtlAnsiStringToUnicodeString (in: DestinationString=0xb13f6e8, SourceString="62208536717bae87d80fa2c322fc95e1", AllocateDestinationString=1 | out: DestinationString="62208536717bae87d80fa2c322fc95e1") returned 0x0 [0138.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84178 [0138.167] wcscat (in: _Dest=0x3e46198, _Source="62208536" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\62208536") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\62208536" [0138.167] wcscat (in: _Dest=0x3e46198, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\62208536.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\62208536.68814f" [0138.167] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\62208536.68814f", NtPathName=0xb13f6e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\62208536.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad63b0 [0138.167] NtSetInformationFile (FileHandle=0x1b9c, IoStatusBlock=0xb13f6e8, FileInformation=0x7ad63b0, Length=0x8e, FileInformationClass=0xa) returned 0x0 [0138.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad63b0) returned 1 [0138.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a564e0) returned 1 [0138.351] NtQueryInformationFile (in: FileHandle=0x1b9c, IoStatusBlock=0xb13f6b8, FileInformation=0xb13f6c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb13f6b8, FileInformation=0xb13f6c0) returned 0x0 [0138.351] NtSetInformationFile (FileHandle=0x1b9c, IoStatusBlock=0xb13f6b8, FileInformation=0xb13f6c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46198) returned 1 [0138.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84178) returned 1 [0138.355] FlushFileBuffers (hFile=0x1b9c) returned 1 [0138.358] CloseHandle (hObject=0x1b9c) returned 1 [0138.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba110 [0138.361] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\" [0138.361] wcscat (in: _Dest=0x3eba110, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\68814F-Readme.txt" [0138.361] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\u0e_xfok\\68814f-readme.txt")) returned 0x20 [0138.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 [0138.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 Thread: id = 1258 os_tid = 0x1b3c [0137.220] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\nYKyr_VCw.ots" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\u0e_xfok\\nykyr_vcw.ots")) returned 0x20 [0137.220] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\nYKyr_VCw.ots", dwFileAttributes=0x20) returned 1 [0137.635] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\nYKyr_VCw.ots" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\u0e_xfok\\nykyr_vcw.ots"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b98 [0137.636] GetFileSizeEx (in: hFile=0x1b98, lpFileSize=0xb70f924 | out: lpFileSize=0xb70f924*=37523) returned 1 [0137.636] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x928f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.636] ReadFile (in: hFile=0x1b98, lpBuffer=0xb70f900, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb70f910, lpOverlapped=0x0 | out: lpBuffer=0xb70f900*, lpNumberOfBytesRead=0xb70f910*=0x4, lpOverlapped=0x0) returned 1 [0137.638] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0137.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0137.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0137.638] NtQuerySystemTime (in: CurrentTime=0xb70f898 | out: CurrentTime=0xb70f898*=132462177169044000) returned 0x0 [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x24c786de [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x1426a81b [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x3af7c732 [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x447f3592 [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x1511a57b [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x3a125a2a [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x2d6ca7c [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x4cc676f0 [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x73bac7be [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x51d590ca [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x232d1889 [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x4fd762a [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x46d5d512 [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x2735646a [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x2e6a2a89 [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x4636f23a [0137.638] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x21bbc43e [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0xccd5e21 [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0xca5434a [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x52cadeaa [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x42aee523 [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x7528b2aa [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x3e4191fa [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x438f19ec [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x11cd357 [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x534aa4df [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x1d2db3e1 [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x474584ba [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x46bffbf0 [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x33eb25e0 [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0x5a93fe37 [0137.639] RtlRandomEx (in: Seed=0xb70f890 | out: Seed=0xb70f890) returned 0xa1fd221 [0137.649] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.649] ReadFile (in: hFile=0x1b98, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb70f898, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xb70f898*=0x3c00, lpOverlapped=0x0) returned 1 [0137.649] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25f68 [0137.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51278 [0137.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0137.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ac8) returned 1 [0137.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0137.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0137.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0137.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0137.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0137.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25f68) returned 1 [0137.650] WriteFile (in: hFile=0x1b98, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb70f898, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xb70f898*=0x3c00, lpOverlapped=0x0) returned 1 [0137.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0137.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0137.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37770 [0137.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e537b0) returned 1 [0137.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a377a0 [0137.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537b0 [0137.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52658 [0137.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52658) returned 1 [0137.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0137.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0137.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec828 [0137.999] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.999] WriteFile (in: hFile=0x1b98, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb70f918, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xb70f918*=0x10c, lpOverlapped=0x0) returned 1 [0138.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bddd0 [0138.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0138.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0138.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec29f8 [0138.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0138.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0138.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4168) returned 1 [0138.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0138.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7af0 [0138.162] sprintf (in: _Dest=0x7ad7af0, _Format="%c%c" | out: _Dest="63") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7af2, _Format="%c%c" | out: _Dest="71") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7af4, _Format="%c%c" | out: _Dest="00") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7af6, _Format="%c%c" | out: _Dest="ee") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7af8, _Format="%c%c" | out: _Dest="31") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7afa, _Format="%c%c" | out: _Dest="3e") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7afc, _Format="%c%c" | out: _Dest="39") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7afe, _Format="%c%c" | out: _Dest="e8") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7b00, _Format="%c%c" | out: _Dest="5c") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7b02, _Format="%c%c" | out: _Dest="02") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7b04, _Format="%c%c" | out: _Dest="10") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7b06, _Format="%c%c" | out: _Dest="2f") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7b08, _Format="%c%c" | out: _Dest="02") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7b0a, _Format="%c%c" | out: _Dest="89") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7b0c, _Format="%c%c" | out: _Dest="f2") returned 2 [0138.162] sprintf (in: _Dest=0x7ad7b0e, _Format="%c%c" | out: _Dest="3c") returned 2 [0138.163] sprintf (in: _Dest=0x7ad7b10, _Format="%c%c" | out: _Dest="42") returned 2 [0138.163] sprintf (in: _Dest=0x7ad7b12, _Format="%c%c" | out: _Dest="db") returned 2 [0138.163] sprintf (in: _Dest=0x7ad7b14, _Format="%c%c" | out: _Dest="77") returned 2 [0138.163] sprintf (in: _Dest=0x7ad7b16, _Format="%c%c" | out: _Dest="e8") returned 2 [0138.163] sprintf (in: _Dest=0x7ad7b18, _Format="%c%c" | out: _Dest="15") returned 2 [0138.163] sprintf (in: _Dest=0x7ad7b1a, _Format="%c%c" | out: _Dest="e3") returned 2 [0138.163] sprintf (in: _Dest=0x7ad7b1c, _Format="%c%c" | out: _Dest="f8") returned 2 [0138.163] sprintf (in: _Dest=0x7ad7b1e, _Format="%c%c" | out: _Dest="30") returned 2 [0138.163] sprintf (in: _Dest=0x7ad7b20, _Format="%c%c" | out: _Dest="69") returned 2 [0138.163] sprintf (in: _Dest=0x7ad7b22, _Format="%c%c" | out: _Dest="d6") returned 2 [0138.163] RtlInitAnsiString (in: DestinationString=0xb70f8a0, SourceString="637100ee313e39e85c02102f0289f23c42db77e815e3f83069d6" | out: DestinationString="637100ee313e39e85c02102f0289f23c42db77e815e3f83069d6") [0138.163] RtlAnsiStringToUnicodeString (in: DestinationString=0xb70f898, SourceString="637100ee313e39e85c02102f0289f23c42db77e815e3f83069d6", AllocateDestinationString=1 | out: DestinationString="637100ee313e39e85c02102f0289f23c42db77e815e3f83069d6") returned 0x0 [0138.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51728 [0138.163] wcscat (in: _Dest=0x3d455c0, _Source="637100ee313e3" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\637100ee313e3") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\637100ee313e3" [0138.163] wcscat (in: _Dest=0x3d455c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\637100ee313e3.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\637100ee313e3.68814f" [0138.163] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\637100ee313e3.68814f", NtPathName=0xb70f890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\637100ee313e3.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5c20 [0138.164] NtSetInformationFile (FileHandle=0x1b98, IoStatusBlock=0xb70f898, FileInformation=0x3df5c20, Length=0x98, FileInformationClass=0xa) returned 0x0 [0138.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5c20) returned 1 [0138.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a58310) returned 1 [0138.350] NtQueryInformationFile (in: FileHandle=0x1b98, IoStatusBlock=0xb70f868, FileInformation=0xb70f870, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb70f868, FileInformation=0xb70f870) returned 0x0 [0138.350] NtSetInformationFile (FileHandle=0x1b98, IoStatusBlock=0xb70f868, FileInformation=0xb70f870, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 [0138.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0138.357] FlushFileBuffers (hFile=0x1b98) returned 1 [0138.364] CloseHandle (hObject=0x1b98) returned 1 [0138.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba110 [0138.367] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\" [0138.367] wcscat (in: _Dest=0x3eba110, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\68814F-Readme.txt" [0138.367] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\-n9-KuY\\u0e_Xfok\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\-n9-kuy\\u0e_xfok\\68814f-readme.txt")) returned 0x20 [0138.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 [0138.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19418) returned 1 Thread: id = 1259 os_tid = 0x1b40 [0137.220] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\CvCd4p.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\cvcd4p.wav")) returned 0x20 [0137.220] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\CvCd4p.wav", dwFileAttributes=0x20) returned 1 [0137.652] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\CvCd4p.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\cvcd4p.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b94 [0137.653] GetFileSizeEx (in: hFile=0x1b94, lpFileSize=0x961fc04 | out: lpFileSize=0x961fc04*=54532) returned 1 [0137.653] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0xd500, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.653] ReadFile (in: hFile=0x1b94, lpBuffer=0x961fbe0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x961fbf0, lpOverlapped=0x0 | out: lpBuffer=0x961fbe0*, lpNumberOfBytesRead=0x961fbf0*=0x4, lpOverlapped=0x0) returned 1 [0137.655] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0137.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0137.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0137.655] NtQuerySystemTime (in: CurrentTime=0x961fb78 | out: CurrentTime=0x961fb78*=132462177169200000) returned 0x0 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x31a462c9 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x3c24590b [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x63f1d0b9 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x7d444221 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x49c4d813 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0xda63de2 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x6568a466 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x6f5a0d5d [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x1e00b680 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x15f83471 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x4282afe [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x1d66aec1 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x6d080417 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x1022f7a6 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x2f0e3b76 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x4fc9b470 [0137.655] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x9f4f961 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x43bcbe70 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x63f32abf [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x44b62fad [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x76ba1ee1 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x4e226337 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0xaa05c61 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x5d25181e [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x7b486285 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x38bb2da0 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x1a0ba2d9 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x1a442513 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x73c05f21 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x45ee44bc [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x58701614 [0137.656] RtlRandomEx (in: Seed=0x961fb70 | out: Seed=0x961fb70) returned 0x687b7e1a [0137.667] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.668] ReadFile (in: hFile=0x1b94, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x961fb78, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x961fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0137.668] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25f68 [0137.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51278 [0137.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0137.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0137.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0137.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0137.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0137.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0137.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0137.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25f68) returned 1 [0137.669] WriteFile (in: hFile=0x1b94, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x961fb78, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0x961fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0138.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0138.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0138.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a377d0 [0138.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0138.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37800 [0138.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0138.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0138.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0138.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0138.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0138.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec940 [0138.068] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.068] WriteFile (in: hFile=0x1b94, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x961fbf8, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x961fbf8*=0x106, lpOverlapped=0x0) returned 1 [0138.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bddd0 [0138.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0138.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec49d8) returned 1 [0138.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80e60 [0138.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0138.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0138.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3308) returned 1 [0138.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0138.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x7a38578 [0138.169] sprintf (in: _Dest=0x7a38578, _Format="%c%c" | out: _Dest="41") returned 2 [0138.169] sprintf (in: _Dest=0x7a3857a, _Format="%c%c" | out: _Dest="76") returned 2 [0138.169] sprintf (in: _Dest=0x7a3857c, _Format="%c%c" | out: _Dest="81") returned 2 [0138.169] sprintf (in: _Dest=0x7a3857e, _Format="%c%c" | out: _Dest="1b") returned 2 [0138.169] sprintf (in: _Dest=0x7a38580, _Format="%c%c" | out: _Dest="01") returned 2 [0138.169] sprintf (in: _Dest=0x7a38582, _Format="%c%c" | out: _Dest="58") returned 2 [0138.169] sprintf (in: _Dest=0x7a38584, _Format="%c%c" | out: _Dest="e0") returned 2 [0138.169] sprintf (in: _Dest=0x7a38586, _Format="%c%c" | out: _Dest="42") returned 2 [0138.169] sprintf (in: _Dest=0x7a38588, _Format="%c%c" | out: _Dest="88") returned 2 [0138.170] sprintf (in: _Dest=0x7a3858a, _Format="%c%c" | out: _Dest="03") returned 2 [0138.170] sprintf (in: _Dest=0x7a3858c, _Format="%c%c" | out: _Dest="da") returned 2 [0138.170] sprintf (in: _Dest=0x7a3858e, _Format="%c%c" | out: _Dest="ed") returned 2 [0138.170] sprintf (in: _Dest=0x7a38590, _Format="%c%c" | out: _Dest="2e") returned 2 [0138.170] sprintf (in: _Dest=0x7a38592, _Format="%c%c" | out: _Dest="01") returned 2 [0138.170] sprintf (in: _Dest=0x7a38594, _Format="%c%c" | out: _Dest="43") returned 2 [0138.170] sprintf (in: _Dest=0x7a38596, _Format="%c%c" | out: _Dest="3b") returned 2 [0138.170] sprintf (in: _Dest=0x7a38598, _Format="%c%c" | out: _Dest="e5") returned 2 [0138.170] sprintf (in: _Dest=0x7a3859a, _Format="%c%c" | out: _Dest="2d") returned 2 [0138.170] sprintf (in: _Dest=0x7a3859c, _Format="%c%c" | out: _Dest="c6") returned 2 [0138.170] sprintf (in: _Dest=0x7a3859e, _Format="%c%c" | out: _Dest="67") returned 2 [0138.170] RtlInitAnsiString (in: DestinationString=0x961fb80, SourceString="4176811b0158e0428803daed2e01433be52dc667" | out: DestinationString="4176811b0158e0428803daed2e01433be52dc667") [0138.170] RtlAnsiStringToUnicodeString (in: DestinationString=0x961fb78, SourceString="4176811b0158e0428803daed2e01433be52dc667", AllocateDestinationString=1 | out: DestinationString="4176811b0158e0428803daed2e01433be52dc667") returned 0x0 [0138.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe68a8 [0138.170] wcscat (in: _Dest=0x3d443c0, _Source="4176811b01" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\4176811b01") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\4176811b01" [0138.170] wcscat (in: _Dest=0x3d443c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\4176811b01.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\4176811b01.68814f" [0138.170] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\4176811b01.68814f", NtPathName=0x961fb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\4176811b01.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053480 [0138.170] NtSetInformationFile (FileHandle=0x1b94, IoStatusBlock=0x961fb78, FileInformation=0x3053480, Length=0x9e, FileInformationClass=0xa) returned 0x0 [0138.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 [0138.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a56708) returned 1 [0138.261] NtQueryInformationFile (in: FileHandle=0x1b94, IoStatusBlock=0x961fb48, FileInformation=0x961fb50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x961fb48, FileInformation=0x961fb50) returned 0x0 [0138.261] NtSetInformationFile (FileHandle=0x1b94, IoStatusBlock=0x961fb48, FileInformation=0x961fb50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 [0138.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 [0138.268] FlushFileBuffers (hFile=0x1b94) returned 1 [0138.272] CloseHandle (hObject=0x1b94) returned 1 [0138.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6020 [0138.283] wcscpy (in: _Dest=0x7ad6020, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0138.283] wcscat (in: _Dest=0x7ad6020, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" [0138.284] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\68814f-readme.txt")) returned 0xffffffff [0138.284] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ba0 [0138.294] WriteFile (in: hFile=0x1ba0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x961fb8c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x961fb8c*=0x8b9, lpOverlapped=0x0) returned 1 [0138.304] CloseHandle (hObject=0x1ba0) returned 1 [0138.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6020) returned 1 [0138.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 1260 os_tid = 0x1b44 [0137.221] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\dv2ySzQtX8cfol.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\dv2yszqtx8cfol.mp3")) returned 0x20 [0137.221] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\dv2ySzQtX8cfol.mp3", dwFileAttributes=0x20) returned 1 [0137.670] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\dv2ySzQtX8cfol.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\dv2yszqtx8cfol.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b90 [0137.670] GetFileSizeEx (in: hFile=0x1b90, lpFileSize=0x904f94c | out: lpFileSize=0x904f94c*=4642) returned 1 [0137.670] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x121e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.670] ReadFile (in: hFile=0x1b90, lpBuffer=0x904f928, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x904f938, lpOverlapped=0x0 | out: lpBuffer=0x904f928*, lpNumberOfBytesRead=0x904f938*=0x4, lpOverlapped=0x0) returned 1 [0137.672] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0137.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0137.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0137.672] NtQuerySystemTime (in: CurrentTime=0x904f8c0 | out: CurrentTime=0x904f8c0*=132462177169356000) returned 0x0 [0137.672] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x68048da [0137.672] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x2710d9b [0137.672] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x7380e1cd [0137.672] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x155046c8 [0137.672] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x5a41ca85 [0137.672] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x294ab319 [0137.672] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x2dbc57c4 [0137.672] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x6c41723c [0137.672] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x2a675e79 [0137.672] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0xc060cc8 [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x66d991ae [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x4f53aa90 [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x188b2b6b [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x3c89021b [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x42d66d7e [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x63d14fd8 [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x30ffd171 [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x352cf9e7 [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x100c1c2b [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x15482ddb [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x29918ea9 [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x331805cf [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x5c2d447d [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x4571bcf5 [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x14117c41 [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x17153c2e [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x4750e6ad [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0xbf72261 [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x26e9d3e1 [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x41e65f3a [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0xecc65b [0137.673] RtlRandomEx (in: Seed=0x904f8b8 | out: Seed=0x904f8b8) returned 0x3e5dd9d5 [0137.683] ReadFile (in: hFile=0x1b90, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x1222, lpNumberOfBytesRead=0x904f8b4, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0x904f8b4*=0x1222, lpOverlapped=0x0) returned 1 [0137.683] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.683] WriteFile (in: hFile=0x1b90, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x1222, lpNumberOfBytesWritten=0x904f8b8, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x904f8b8*=0x1222, lpOverlapped=0x0) returned 1 [0138.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0138.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0138.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0138.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0138.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0138.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0138.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25f68) returned 1 [0138.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7ad7230 [0138.078] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.079] WriteFile (in: hFile=0x1b90, lpBuffer=0x3d55e08*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x904f940, lpOverlapped=0x0 | out: lpBuffer=0x3d55e08*, lpNumberOfBytesWritten=0x904f940*=0x116, lpOverlapped=0x0) returned 1 [0138.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bddd0 [0138.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0138.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0138.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a377d0 [0138.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0138.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0138.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0138.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0138.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3e14ca0 [0138.175] sprintf (in: _Dest=0x3e14ca0, _Format="%c%c" | out: _Dest="bf") returned 2 [0138.175] sprintf (in: _Dest=0x3e14ca2, _Format="%c%c" | out: _Dest="e3") returned 2 [0138.175] sprintf (in: _Dest=0x3e14ca4, _Format="%c%c" | out: _Dest="0a") returned 2 [0138.175] sprintf (in: _Dest=0x3e14ca6, _Format="%c%c" | out: _Dest="83") returned 2 [0138.176] sprintf (in: _Dest=0x3e14ca8, _Format="%c%c" | out: _Dest="0c") returned 2 [0138.176] sprintf (in: _Dest=0x3e14caa, _Format="%c%c" | out: _Dest="f1") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cac, _Format="%c%c" | out: _Dest="f1") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cae, _Format="%c%c" | out: _Dest="de") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cb0, _Format="%c%c" | out: _Dest="fc") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cb2, _Format="%c%c" | out: _Dest="16") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cb4, _Format="%c%c" | out: _Dest="ee") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cb6, _Format="%c%c" | out: _Dest="e3") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cb8, _Format="%c%c" | out: _Dest="98") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cba, _Format="%c%c" | out: _Dest="ce") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cbc, _Format="%c%c" | out: _Dest="a3") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cbe, _Format="%c%c" | out: _Dest="28") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cc0, _Format="%c%c" | out: _Dest="1e") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cc2, _Format="%c%c" | out: _Dest="e3") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cc4, _Format="%c%c" | out: _Dest="a5") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cc6, _Format="%c%c" | out: _Dest="03") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cc8, _Format="%c%c" | out: _Dest="ac") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cca, _Format="%c%c" | out: _Dest="fe") returned 2 [0138.176] sprintf (in: _Dest=0x3e14ccc, _Format="%c%c" | out: _Dest="b6") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cce, _Format="%c%c" | out: _Dest="0d") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cd0, _Format="%c%c" | out: _Dest="2e") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cd2, _Format="%c%c" | out: _Dest="cd") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cd4, _Format="%c%c" | out: _Dest="18") returned 2 [0138.176] sprintf (in: _Dest=0x3e14cd6, _Format="%c%c" | out: _Dest="81") returned 2 [0138.177] sprintf (in: _Dest=0x3e14cd8, _Format="%c%c" | out: _Dest="4e") returned 2 [0138.177] sprintf (in: _Dest=0x3e14cda, _Format="%c%c" | out: _Dest="fd") returned 2 [0138.177] sprintf (in: _Dest=0x3e14cdc, _Format="%c%c" | out: _Dest="2b") returned 2 [0138.177] sprintf (in: _Dest=0x3e14cde, _Format="%c%c" | out: _Dest="59") returned 2 [0138.177] sprintf (in: _Dest=0x3e14ce0, _Format="%c%c" | out: _Dest="01") returned 2 [0138.177] sprintf (in: _Dest=0x3e14ce2, _Format="%c%c" | out: _Dest="54") returned 2 [0138.177] sprintf (in: _Dest=0x3e14ce4, _Format="%c%c" | out: _Dest="5e") returned 2 [0138.177] sprintf (in: _Dest=0x3e14ce6, _Format="%c%c" | out: _Dest="de") returned 2 [0138.177] RtlInitAnsiString (in: DestinationString=0x904f8c8, SourceString="bfe30a830cf1f1defc16eee398cea3281ee3a503acfeb60d2ecd18814efd2b5901545ede" | out: DestinationString="bfe30a830cf1f1defc16eee398cea3281ee3a503acfeb60d2ecd18814efd2b5901545ede") [0138.177] RtlAnsiStringToUnicodeString (in: DestinationString=0x904f8c0, SourceString="bfe30a830cf1f1defc16eee398cea3281ee3a503acfeb60d2ecd18814efd2b5901545ede", AllocateDestinationString=1 | out: DestinationString="bfe30a830cf1f1defc16eee398cea3281ee3a503acfeb60d2ecd18814efd2b5901545ede") returned 0x0 [0138.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5220 [0138.177] wcscat (in: _Dest=0x3df57c0, _Source="bfe30a830cf1f1defc" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\bfe30a830cf1f1defc") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\bfe30a830cf1f1defc" [0138.177] wcscat (in: _Dest=0x3df57c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\bfe30a830cf1f1defc.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\bfe30a830cf1f1defc.68814f" [0138.177] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\bfe30a830cf1f1defc.68814f", NtPathName=0x904f8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\bfe30a830cf1f1defc.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7ef8 [0138.177] NtSetInformationFile (FileHandle=0x1b90, IoStatusBlock=0x904f8c0, FileInformation=0x2ff7ef8, Length=0xae, FileInformationClass=0xa) returned 0x0 [0138.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 [0138.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a57848) returned 1 [0138.451] NtQueryInformationFile (in: FileHandle=0x1b90, IoStatusBlock=0x904f890, FileInformation=0x904f898, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x904f890, FileInformation=0x904f898) returned 0x0 [0138.451] NtSetInformationFile (FileHandle=0x1b90, IoStatusBlock=0x904f890, FileInformation=0x904f898, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 [0138.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 [0138.453] FlushFileBuffers (hFile=0x1b90) returned 1 [0138.475] CloseHandle (hObject=0x1b90) returned 1 [0138.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6020 [0138.475] wcscpy (in: _Dest=0x7ad6020, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0138.476] wcscat (in: _Dest=0x7ad6020, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" [0138.476] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\68814f-readme.txt")) returned 0x20 [0138.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6020) returned 1 [0138.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 Thread: id = 1261 os_tid = 0x1b48 [0137.221] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\GU7JWzH3RBGS.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\gu7jwzh3rbgs.wav")) returned 0x20 [0137.221] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\GU7JWzH3RBGS.wav", dwFileAttributes=0x20) returned 1 [0137.684] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\GU7JWzH3RBGS.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\gu7jwzh3rbgs.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b8c [0137.684] GetFileSizeEx (in: hFile=0x1b8c, lpFileSize=0xb01fee4 | out: lpFileSize=0xb01fee4*=51696) returned 1 [0137.684] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0xc9ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.684] ReadFile (in: hFile=0x1b8c, lpBuffer=0xb01fec0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb01fed0, lpOverlapped=0x0 | out: lpBuffer=0xb01fec0*, lpNumberOfBytesRead=0xb01fed0*=0x4, lpOverlapped=0x0) returned 1 [0137.686] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0137.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0137.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0137.686] NtQuerySystemTime (in: CurrentTime=0xb01fe58 | out: CurrentTime=0xb01fe58*=132462177169512000) returned 0x0 [0137.686] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x5b9884bd [0137.686] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x50b7ff39 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x44b3c179 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x523f9f2a [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x19505db [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x17cc7952 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x71262231 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0xf0c1a88 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x3e87f534 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x173b23fe [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x2ecb490d [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x4164328b [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x3c5177c [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x5faba6d5 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x1a70c213 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x4afcc501 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x5cb6d55f [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x13c3f7dc [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x5b14b676 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x2324afba [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x1146f946 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x382de25a [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x5cddf457 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x73644d9a [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x748c4fce [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x3e3ef04a [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x2d498fe [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x6dd7ad09 [0137.687] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x31f98740 [0137.688] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x6bf923a5 [0137.688] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x423aa305 [0137.688] RtlRandomEx (in: Seed=0xb01fe50 | out: Seed=0xb01fe50) returned 0x5b2a821 [0137.699] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.699] ReadFile (in: hFile=0x1b8c, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb01fe58, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0xb01fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0137.700] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde60 [0137.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0137.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0137.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0137.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0137.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0137.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0137.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a78) returned 1 [0137.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0137.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0137.701] WriteFile (in: hFile=0x1b8c, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb01fe58, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0xb01fe58*=0x3c00, lpOverlapped=0x0) returned 1 [0138.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0138.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0138.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x7a385b0 [0138.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x7a385e8 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0138.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0138.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0138.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25f68) returned 1 [0138.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55ce0 [0138.082] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.082] WriteFile (in: hFile=0x1b8c, lpBuffer=0x3d55ce0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xb01fed8, lpOverlapped=0x0 | out: lpBuffer=0x3d55ce0*, lpNumberOfBytesWritten=0xb01fed8*=0x112, lpOverlapped=0x0) returned 1 [0138.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bddd0 [0138.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0138.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0138.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0138.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0138.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0138.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0138.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0138.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e84538 [0138.179] sprintf (in: _Dest=0x3e84538, _Format="%c%c" | out: _Dest="e4") returned 2 [0138.179] sprintf (in: _Dest=0x3e8453a, _Format="%c%c" | out: _Dest="4e") returned 2 [0138.179] sprintf (in: _Dest=0x3e8453c, _Format="%c%c" | out: _Dest="91") returned 2 [0138.179] sprintf (in: _Dest=0x3e8453e, _Format="%c%c" | out: _Dest="08") returned 2 [0138.179] sprintf (in: _Dest=0x3e84540, _Format="%c%c" | out: _Dest="12") returned 2 [0138.179] sprintf (in: _Dest=0x3e84542, _Format="%c%c" | out: _Dest="21") returned 2 [0138.179] sprintf (in: _Dest=0x3e84544, _Format="%c%c" | out: _Dest="e8") returned 2 [0138.179] sprintf (in: _Dest=0x3e84546, _Format="%c%c" | out: _Dest="4b") returned 2 [0138.179] sprintf (in: _Dest=0x3e84548, _Format="%c%c" | out: _Dest="68") returned 2 [0138.179] sprintf (in: _Dest=0x3e8454a, _Format="%c%c" | out: _Dest="a0") returned 2 [0138.179] sprintf (in: _Dest=0x3e8454c, _Format="%c%c" | out: _Dest="07") returned 2 [0138.179] sprintf (in: _Dest=0x3e8454e, _Format="%c%c" | out: _Dest="03") returned 2 [0138.179] sprintf (in: _Dest=0x3e84550, _Format="%c%c" | out: _Dest="8d") returned 2 [0138.179] sprintf (in: _Dest=0x3e84552, _Format="%c%c" | out: _Dest="48") returned 2 [0138.179] sprintf (in: _Dest=0x3e84554, _Format="%c%c" | out: _Dest="da") returned 2 [0138.179] sprintf (in: _Dest=0x3e84556, _Format="%c%c" | out: _Dest="cc") returned 2 [0138.179] sprintf (in: _Dest=0x3e84558, _Format="%c%c" | out: _Dest="1b") returned 2 [0138.179] sprintf (in: _Dest=0x3e8455a, _Format="%c%c" | out: _Dest="6a") returned 2 [0138.179] sprintf (in: _Dest=0x3e8455c, _Format="%c%c" | out: _Dest="a2") returned 2 [0138.179] sprintf (in: _Dest=0x3e8455e, _Format="%c%c" | out: _Dest="3f") returned 2 [0138.180] sprintf (in: _Dest=0x3e84560, _Format="%c%c" | out: _Dest="82") returned 2 [0138.180] sprintf (in: _Dest=0x3e84562, _Format="%c%c" | out: _Dest="78") returned 2 [0138.180] sprintf (in: _Dest=0x3e84564, _Format="%c%c" | out: _Dest="ba") returned 2 [0138.180] sprintf (in: _Dest=0x3e84566, _Format="%c%c" | out: _Dest="64") returned 2 [0138.180] sprintf (in: _Dest=0x3e84568, _Format="%c%c" | out: _Dest="03") returned 2 [0138.180] sprintf (in: _Dest=0x3e8456a, _Format="%c%c" | out: _Dest="0e") returned 2 [0138.180] sprintf (in: _Dest=0x3e8456c, _Format="%c%c" | out: _Dest="4f") returned 2 [0138.180] sprintf (in: _Dest=0x3e8456e, _Format="%c%c" | out: _Dest="d5") returned 2 [0138.180] sprintf (in: _Dest=0x3e84570, _Format="%c%c" | out: _Dest="0e") returned 2 [0138.180] sprintf (in: _Dest=0x3e84572, _Format="%c%c" | out: _Dest="a0") returned 2 [0138.180] sprintf (in: _Dest=0x3e84574, _Format="%c%c" | out: _Dest="64") returned 2 [0138.180] sprintf (in: _Dest=0x3e84576, _Format="%c%c" | out: _Dest="ff") returned 2 [0138.180] RtlInitAnsiString (in: DestinationString=0xb01fe60, SourceString="e44e91081221e84b68a007038d48dacc1b6aa23f8278ba64030e4fd50ea064ff" | out: DestinationString="e44e91081221e84b68a007038d48dacc1b6aa23f8278ba64030e4fd50ea064ff") [0138.180] RtlAnsiStringToUnicodeString (in: DestinationString=0xb01fe58, SourceString="e44e91081221e84b68a007038d48dacc1b6aa23f8278ba64030e4fd50ea064ff", AllocateDestinationString=1 | out: DestinationString="e44e91081221e84b68a007038d48dacc1b6aa23f8278ba64030e4fd50ea064ff") returned 0x0 [0138.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d452f0 [0138.180] wcscat (in: _Dest=0x3df59a0, _Source="e44e91081221e84b" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\e44e91081221e84b") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\e44e91081221e84b" [0138.180] wcscat (in: _Dest=0x3df59a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\e44e91081221e84b.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\e44e91081221e84b.68814f" [0138.180] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\e44e91081221e84b.68814f", NtPathName=0xb01fe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\e44e91081221e84b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6d00 [0138.180] NtSetInformationFile (FileHandle=0x1b8c, IoStatusBlock=0xb01fe58, FileInformation=0x2ff6d00, Length=0xaa, FileInformationClass=0xa) returned 0x0 [0138.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 [0138.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a57a70) returned 1 [0138.466] NtQueryInformationFile (in: FileHandle=0x1b8c, IoStatusBlock=0xb01fe28, FileInformation=0xb01fe30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb01fe28, FileInformation=0xb01fe30) returned 0x0 [0138.466] NtSetInformationFile (FileHandle=0x1b8c, IoStatusBlock=0xb01fe28, FileInformation=0xb01fe30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 [0138.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0138.467] FlushFileBuffers (hFile=0x1b8c) returned 1 [0138.481] CloseHandle (hObject=0x1b8c) returned 1 [0138.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7578 [0138.485] wcscpy (in: _Dest=0x3eb7578, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0138.485] wcscat (in: _Dest=0x3eb7578, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" [0138.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\68814f-readme.txt")) returned 0x20 [0138.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7578) returned 1 [0138.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 1262 os_tid = 0x1b4c [0137.222] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\hAk0fQJ4EYfQ.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\hak0fqj4eyfq.mp3")) returned 0x20 [0137.222] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\hAk0fQJ4EYfQ.mp3", dwFileAttributes=0x20) returned 1 [0137.701] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\hAk0fQJ4EYfQ.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\hak0fqj4eyfq.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b88 [0137.702] GetFileSizeEx (in: hFile=0x1b88, lpFileSize=0xb89f97c | out: lpFileSize=0xb89f97c*=22156) returned 1 [0137.702] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x5688, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.702] ReadFile (in: hFile=0x1b88, lpBuffer=0xb89f958, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb89f968, lpOverlapped=0x0 | out: lpBuffer=0xb89f958*, lpNumberOfBytesRead=0xb89f968*=0x4, lpOverlapped=0x0) returned 1 [0137.704] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0137.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4370 [0137.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0137.704] NtQuerySystemTime (in: CurrentTime=0xb89f8f0 | out: CurrentTime=0xb89f8f0*=132462177169668000) returned 0x0 [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x62f86b4e [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x7a6e6bbc [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x76945b9d [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x6365f77c [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x6720f248 [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x2f1dcc94 [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x2fe79d55 [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x2b2e8c7e [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x8e94d0a [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x72f4eeda [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x49c33970 [0137.704] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x428ab008 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x4fb3e344 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x5dd380bf [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x79cb588 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x57e08960 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x99f47e1 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x547f53d8 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x548a57bf [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x7e0c2f1c [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x643c6c7a [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x6b95e49c [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x751252ab [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x5a26b77 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x2ab31bbc [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0xa4aaae1 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x33c94854 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0xaaf1e58 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x59337fb1 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x66e83c62 [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x2ad3958b [0137.705] RtlRandomEx (in: Seed=0xb89f8e8 | out: Seed=0xb89f8e8) returned 0x48a1a960 [0137.759] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.759] ReadFile (in: hFile=0x1b88, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb89f8f0, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0xb89f8f0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.759] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde60 [0137.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0137.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0137.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a78) returned 1 [0137.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b48360 [0137.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0137.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0137.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3920) returned 1 [0137.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0137.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0137.761] WriteFile (in: hFile=0x1b88, lpBuffer=0x7b48360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb89f8f0, lpOverlapped=0x0 | out: lpBuffer=0x7b48360*, lpNumberOfBytesWritten=0xb89f8f0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b48360) returned 1 [0138.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0138.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x7a38658 [0138.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0138.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x7a38690 [0138.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0138.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0138.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c78) returned 1 [0138.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0138.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25f68) returned 1 [0138.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55bb8 [0138.106] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.107] WriteFile (in: hFile=0x1b88, lpBuffer=0x3d55bb8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xb89f970, lpOverlapped=0x0 | out: lpBuffer=0x3d55bb8*, lpNumberOfBytesWritten=0xb89f970*=0x112, lpOverlapped=0x0) returned 1 [0138.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bddd0 [0138.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3948 [0138.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3948) returned 1 [0138.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3948 [0138.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0138.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0138.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a00) returned 1 [0138.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0138.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e84538 [0138.185] sprintf (in: _Dest=0x3e84538, _Format="%c%c" | out: _Dest="ff") returned 2 [0138.185] sprintf (in: _Dest=0x3e8453a, _Format="%c%c" | out: _Dest="81") returned 2 [0138.185] sprintf (in: _Dest=0x3e8453c, _Format="%c%c" | out: _Dest="be") returned 2 [0138.185] sprintf (in: _Dest=0x3e8453e, _Format="%c%c" | out: _Dest="bf") returned 2 [0138.185] sprintf (in: _Dest=0x3e84540, _Format="%c%c" | out: _Dest="5d") returned 2 [0138.185] sprintf (in: _Dest=0x3e84542, _Format="%c%c" | out: _Dest="e3") returned 2 [0138.185] sprintf (in: _Dest=0x3e84544, _Format="%c%c" | out: _Dest="97") returned 2 [0138.186] sprintf (in: _Dest=0x3e84546, _Format="%c%c" | out: _Dest="dc") returned 2 [0138.186] sprintf (in: _Dest=0x3e84548, _Format="%c%c" | out: _Dest="aa") returned 2 [0138.186] sprintf (in: _Dest=0x3e8454a, _Format="%c%c" | out: _Dest="bf") returned 2 [0138.186] sprintf (in: _Dest=0x3e8454c, _Format="%c%c" | out: _Dest="2e") returned 2 [0138.186] sprintf (in: _Dest=0x3e8454e, _Format="%c%c" | out: _Dest="c6") returned 2 [0138.186] sprintf (in: _Dest=0x3e84550, _Format="%c%c" | out: _Dest="fc") returned 2 [0138.186] sprintf (in: _Dest=0x3e84552, _Format="%c%c" | out: _Dest="50") returned 2 [0138.186] sprintf (in: _Dest=0x3e84554, _Format="%c%c" | out: _Dest="18") returned 2 [0138.186] sprintf (in: _Dest=0x3e84556, _Format="%c%c" | out: _Dest="48") returned 2 [0138.186] sprintf (in: _Dest=0x3e84558, _Format="%c%c" | out: _Dest="26") returned 2 [0138.186] sprintf (in: _Dest=0x3e8455a, _Format="%c%c" | out: _Dest="c9") returned 2 [0138.186] sprintf (in: _Dest=0x3e8455c, _Format="%c%c" | out: _Dest="07") returned 2 [0138.186] sprintf (in: _Dest=0x3e8455e, _Format="%c%c" | out: _Dest="b2") returned 2 [0138.186] sprintf (in: _Dest=0x3e84560, _Format="%c%c" | out: _Dest="c7") returned 2 [0138.186] sprintf (in: _Dest=0x3e84562, _Format="%c%c" | out: _Dest="22") returned 2 [0138.186] sprintf (in: _Dest=0x3e84564, _Format="%c%c" | out: _Dest="59") returned 2 [0138.186] sprintf (in: _Dest=0x3e84566, _Format="%c%c" | out: _Dest="5e") returned 2 [0138.186] sprintf (in: _Dest=0x3e84568, _Format="%c%c" | out: _Dest="24") returned 2 [0138.186] sprintf (in: _Dest=0x3e8456a, _Format="%c%c" | out: _Dest="7b") returned 2 [0138.186] sprintf (in: _Dest=0x3e8456c, _Format="%c%c" | out: _Dest="b9") returned 2 [0138.186] sprintf (in: _Dest=0x3e8456e, _Format="%c%c" | out: _Dest="5d") returned 2 [0138.186] sprintf (in: _Dest=0x3e84570, _Format="%c%c" | out: _Dest="79") returned 2 [0138.187] sprintf (in: _Dest=0x3e84572, _Format="%c%c" | out: _Dest="88") returned 2 [0138.187] sprintf (in: _Dest=0x3e84574, _Format="%c%c" | out: _Dest="7b") returned 2 [0138.187] sprintf (in: _Dest=0x3e84576, _Format="%c%c" | out: _Dest="5a") returned 2 [0138.187] RtlInitAnsiString (in: DestinationString=0xb89f8f8, SourceString="ff81bebf5de397dcaabf2ec6fc50184826c907b2c722595e247bb95d79887b5a" | out: DestinationString="ff81bebf5de397dcaabf2ec6fc50184826c907b2c722595e247bb95d79887b5a") [0138.187] RtlAnsiStringToUnicodeString (in: DestinationString=0xb89f8f0, SourceString="ff81bebf5de397dcaabf2ec6fc50184826c907b2c722595e247bb95d79887b5a", AllocateDestinationString=1 | out: DestinationString="ff81bebf5de397dcaabf2ec6fc50184826c907b2c722595e247bb95d79887b5a") returned 0x0 [0138.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44ba0 [0138.187] wcscat (in: _Dest=0x3df4d20, _Source="ff81bebf5de397dc" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ff81bebf5de397dc") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ff81bebf5de397dc" [0138.187] wcscat (in: _Dest=0x3df4d20, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ff81bebf5de397dc.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ff81bebf5de397dc.68814f" [0138.187] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ff81bebf5de397dc.68814f", NtPathName=0xb89f8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ff81bebf5de397dc.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7e40 [0138.187] NtSetInformationFile (FileHandle=0x1b88, IoStatusBlock=0xb89f8f0, FileInformation=0x2ff7e40, Length=0xaa, FileInformationClass=0xa) returned 0x0 [0138.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 [0138.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a58538) returned 1 [0138.428] NtQueryInformationFile (in: FileHandle=0x1b88, IoStatusBlock=0xb89f8c0, FileInformation=0xb89f8c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb89f8c0, FileInformation=0xb89f8c8) returned 0x0 [0138.428] NtSetInformationFile (FileHandle=0x1b88, IoStatusBlock=0xb89f8c0, FileInformation=0xb89f8c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 [0138.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 [0138.430] FlushFileBuffers (hFile=0x1b88) returned 1 [0138.431] CloseHandle (hObject=0x1b88) returned 1 [0138.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6280 [0138.433] wcscpy (in: _Dest=0x7ad6280, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0138.433] wcscat (in: _Dest=0x7ad6280, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" [0138.433] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\68814f-readme.txt")) returned 0x20 [0138.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 [0138.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 Thread: id = 1263 os_tid = 0x1b50 [0137.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df48c0 [0137.223] wcscpy (in: _Dest=0x3df48c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0137.223] wcscat (in: _Dest=0x3df48c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0137.223] wcscat (in: _Dest=0x3df48c0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*" [0137.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a550b0 [0137.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdadcad20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb4eef20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0141.666] wcscmp (_String1=".", _String2=".") returned 0 [0141.666] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdadcad20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb4eef20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.053] wcscmp (_String1="..", _String2=".") returned 1 [0147.053] wcscmp (_String1="..", _String2="..") returned 0 [0147.053] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar.txt", cAlternateFileName="DICAC9~1.TXT")) returned 1 [0147.053] wcscmp (_String1="DisplayLanguageNames.ar.txt", _String2=".") returned 1 [0147.053] wcscmp (_String1="DisplayLanguageNames.ar.txt", _String2="..") returned 1 [0147.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d84fb0 [0147.053] wcscpy (in: _Dest=0x3d84fb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0147.053] wcscat (in: _Dest=0x3d84fb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0147.053] wcscat (in: _Dest=0x3d84fb0, _Source="DisplayLanguageNames.ar.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" [0152.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8 [0152.970] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_AE.txt", cAlternateFileName="DI3495~1.TXT")) returned 1 [0152.970] wcscmp (_String1="DisplayLanguageNames.ar_AE.txt", _String2=".") returned 1 [0152.970] wcscmp (_String1="DisplayLanguageNames.ar_AE.txt", _String2="..") returned 1 [0152.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68570 [0152.970] wcscpy (in: _Dest=0x3e68570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.970] wcscat (in: _Dest=0x3e68570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.970] wcscat (in: _Dest=0x3e68570, _Source="DisplayLanguageNames.ar_AE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" [0152.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc5c [0152.972] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_BH.txt", cAlternateFileName="DI7F79~1.TXT")) returned 1 [0152.972] wcscmp (_String1="DisplayLanguageNames.ar_BH.txt", _String2=".") returned 1 [0152.972] wcscmp (_String1="DisplayLanguageNames.ar_BH.txt", _String2="..") returned 1 [0152.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e682e8 [0152.972] wcscpy (in: _Dest=0x3e682e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.972] wcscat (in: _Dest=0x3e682e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.972] wcscat (in: _Dest=0x3e682e8, _Source="DisplayLanguageNames.ar_BH.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" [0152.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e682e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14 [0152.974] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_DZ.txt", cAlternateFileName="DIF61A~1.TXT")) returned 1 [0152.974] wcscmp (_String1="DisplayLanguageNames.ar_DZ.txt", _String2=".") returned 1 [0152.974] wcscmp (_String1="DisplayLanguageNames.ar_DZ.txt", _String2="..") returned 1 [0152.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e67490 [0152.974] wcscpy (in: _Dest=0x3e67490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.974] wcscat (in: _Dest=0x3e67490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.974] wcscat (in: _Dest=0x3e67490, _Source="DisplayLanguageNames.ar_DZ.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" [0152.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84 [0152.975] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_EG.txt", cAlternateFileName="DIC7FA~1.TXT")) returned 1 [0152.976] wcscmp (_String1="DisplayLanguageNames.ar_EG.txt", _String2=".") returned 1 [0152.976] wcscmp (_String1="DisplayLanguageNames.ar_EG.txt", _String2="..") returned 1 [0152.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e687f8 [0152.976] wcscpy (in: _Dest=0x3e687f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.976] wcscat (in: _Dest=0x3e687f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.976] wcscat (in: _Dest=0x3e687f8, _Source="DisplayLanguageNames.ar_EG.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" [0152.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c [0152.978] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_IN.txt", cAlternateFileName="DI4FA4~1.TXT")) returned 1 [0152.978] wcscmp (_String1="DisplayLanguageNames.ar_IN.txt", _String2=".") returned 1 [0152.978] wcscmp (_String1="DisplayLanguageNames.ar_IN.txt", _String2="..") returned 1 [0152.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e678c8 [0152.978] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.978] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.978] wcscat (in: _Dest=0x3e678c8, _Source="DisplayLanguageNames.ar_IN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" [0152.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10 [0152.980] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_IQ.txt", cAlternateFileName="DI3F41~1.TXT")) returned 1 [0152.980] wcscmp (_String1="DisplayLanguageNames.ar_IQ.txt", _String2=".") returned 1 [0152.980] wcscmp (_String1="DisplayLanguageNames.ar_IQ.txt", _String2="..") returned 1 [0152.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e688d0 [0152.980] wcscpy (in: _Dest=0x3e688d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.980] wcscat (in: _Dest=0x3e688d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.980] wcscat (in: _Dest=0x3e688d0, _Source="DisplayLanguageNames.ar_IQ.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" [0152.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e688d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98 [0152.982] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_JO.txt", cAlternateFileName="DI0622~1.TXT")) returned 1 [0152.982] wcscmp (_String1="DisplayLanguageNames.ar_JO.txt", _String2=".") returned 1 [0152.982] wcscmp (_String1="DisplayLanguageNames.ar_JO.txt", _String2="..") returned 1 [0152.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e689a8 [0152.982] wcscpy (in: _Dest=0x3e689a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.982] wcscat (in: _Dest=0x3e689a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.982] wcscat (in: _Dest=0x3e689a8, _Source="DisplayLanguageNames.ar_JO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" [0152.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e689a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60 [0152.984] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_KW.txt", cAlternateFileName="DIF6C4~1.TXT")) returned 1 [0152.984] wcscmp (_String1="DisplayLanguageNames.ar_KW.txt", _String2=".") returned 1 [0152.984] wcscmp (_String1="DisplayLanguageNames.ar_KW.txt", _String2="..") returned 1 [0152.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68a80 [0152.984] wcscpy (in: _Dest=0x3e68a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.984] wcscat (in: _Dest=0x3e68a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.984] wcscat (in: _Dest=0x3e68a80, _Source="DisplayLanguageNames.ar_KW.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" [0152.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4 [0152.986] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_LB.txt", cAlternateFileName="DI621E~1.TXT")) returned 1 [0152.986] wcscmp (_String1="DisplayLanguageNames.ar_LB.txt", _String2=".") returned 1 [0152.986] wcscmp (_String1="DisplayLanguageNames.ar_LB.txt", _String2="..") returned 1 [0152.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68b58 [0152.986] wcscpy (in: _Dest=0x3e68b58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.986] wcscat (in: _Dest=0x3e68b58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.986] wcscat (in: _Dest=0x3e68b58, _Source="DisplayLanguageNames.ar_LB.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" [0152.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0 [0152.987] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_LY.txt", cAlternateFileName="DID7B2~1.TXT")) returned 1 [0152.987] wcscmp (_String1="DisplayLanguageNames.ar_LY.txt", _String2=".") returned 1 [0152.988] wcscmp (_String1="DisplayLanguageNames.ar_LY.txt", _String2="..") returned 1 [0152.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68c30 [0152.988] wcscpy (in: _Dest=0x3e68c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.988] wcscat (in: _Dest=0x3e68c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.988] wcscat (in: _Dest=0x3e68c30, _Source="DisplayLanguageNames.ar_LY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" [0152.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc [0152.989] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_MA.txt", cAlternateFileName="DIEC69~1.TXT")) returned 1 [0152.989] wcscmp (_String1="DisplayLanguageNames.ar_MA.txt", _String2=".") returned 1 [0152.989] wcscmp (_String1="DisplayLanguageNames.ar_MA.txt", _String2="..") returned 1 [0152.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68d08 [0152.990] wcscpy (in: _Dest=0x3e68d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.990] wcscat (in: _Dest=0x3e68d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.990] wcscat (in: _Dest=0x3e68d08, _Source="DisplayLanguageNames.ar_MA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" [0152.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4 [0152.991] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4c8dc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_OM.txt", cAlternateFileName="DIC553~1.TXT")) returned 1 [0152.991] wcscmp (_String1="DisplayLanguageNames.ar_OM.txt", _String2=".") returned 1 [0152.991] wcscmp (_String1="DisplayLanguageNames.ar_OM.txt", _String2="..") returned 1 [0152.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68de0 [0152.991] wcscpy (in: _Dest=0x3e68de0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.991] wcscat (in: _Dest=0x3e68de0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.991] wcscat (in: _Dest=0x3e68de0, _Source="DisplayLanguageNames.ar_OM.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" [0152.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8 [0152.993] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_QA.txt", cAlternateFileName="DI2F38~1.TXT")) returned 1 [0152.993] wcscmp (_String1="DisplayLanguageNames.ar_QA.txt", _String2=".") returned 1 [0152.993] wcscmp (_String1="DisplayLanguageNames.ar_QA.txt", _String2="..") returned 1 [0152.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68eb8 [0152.993] wcscpy (in: _Dest=0x3e68eb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.993] wcscat (in: _Dest=0x3e68eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.993] wcscat (in: _Dest=0x3e68eb8, _Source="DisplayLanguageNames.ar_QA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" [0152.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0 [0152.995] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SA.txt", cAlternateFileName="DI48AF~1.TXT")) returned 1 [0152.995] wcscmp (_String1="DisplayLanguageNames.ar_SA.txt", _String2=".") returned 1 [0152.995] wcscmp (_String1="DisplayLanguageNames.ar_SA.txt", _String2="..") returned 1 [0152.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37540 [0152.995] wcscpy (in: _Dest=0x3e37540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.995] wcscat (in: _Dest=0x3e37540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.995] wcscat (in: _Dest=0x3e37540, _Source="DisplayLanguageNames.ar_SA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" [0152.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78 [0152.996] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SD.txt", cAlternateFileName="DIC7AF~1.TXT")) returned 1 [0152.996] wcscmp (_String1="DisplayLanguageNames.ar_SD.txt", _String2=".") returned 1 [0152.997] wcscmp (_String1="DisplayLanguageNames.ar_SD.txt", _String2="..") returned 1 [0152.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37cd8 [0152.997] wcscpy (in: _Dest=0x3e37cd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.997] wcscat (in: _Dest=0x3e37cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.997] wcscat (in: _Dest=0x3e37cd8, _Source="DisplayLanguageNames.ar_SD.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" [0152.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8 [0152.998] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_SY.txt", cAlternateFileName="DID7BE~1.TXT")) returned 1 [0152.998] wcscmp (_String1="DisplayLanguageNames.ar_SY.txt", _String2=".") returned 1 [0152.998] wcscmp (_String1="DisplayLanguageNames.ar_SY.txt", _String2="..") returned 1 [0152.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e38110 [0152.998] wcscpy (in: _Dest=0x3e38110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0152.998] wcscat (in: _Dest=0x3e38110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0152.998] wcscat (in: _Dest=0x3e38110, _Source="DisplayLanguageNames.ar_SY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" [0152.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0 [0153.000] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_TN.txt", cAlternateFileName="DI7175~1.TXT")) returned 1 [0153.000] wcscmp (_String1="DisplayLanguageNames.ar_TN.txt", _String2=".") returned 1 [0153.000] wcscmp (_String1="DisplayLanguageNames.ar_TN.txt", _String2="..") returned 1 [0153.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e382c0 [0153.000] wcscpy (in: _Dest=0x3e382c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0153.000] wcscat (in: _Dest=0x3e382c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0153.000] wcscat (in: _Dest=0x3e382c0, _Source="DisplayLanguageNames.ar_TN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" [0153.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e382c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0 [0153.002] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ar_YE.txt", cAlternateFileName="DIE8B6~1.TXT")) returned 1 [0153.002] wcscmp (_String1="DisplayLanguageNames.ar_YE.txt", _String2=".") returned 1 [0153.002] wcscmp (_String1="DisplayLanguageNames.ar_YE.txt", _String2="..") returned 1 [0153.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37030 [0153.002] wcscpy (in: _Dest=0x3e37030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0153.002] wcscat (in: _Dest=0x3e37030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0153.002] wcscat (in: _Dest=0x3e37030, _Source="DisplayLanguageNames.ar_YE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" [0153.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c [0153.003] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.bg.txt", cAlternateFileName="DI8E5A~1.TXT")) returned 1 [0153.003] wcscmp (_String1="DisplayLanguageNames.bg.txt", _String2=".") returned 1 [0153.003] wcscmp (_String1="DisplayLanguageNames.bg.txt", _String2="..") returned 1 [0153.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3036210 [0153.004] wcscpy (in: _Dest=0x3036210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0153.004] wcscat (in: _Dest=0x3036210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0153.004] wcscat (in: _Dest=0x3036210, _Source="DisplayLanguageNames.bg.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" [0153.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3036210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc [0153.434] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.bg_BG.txt", cAlternateFileName="DIC784~1.TXT")) returned 1 [0153.434] wcscmp (_String1="DisplayLanguageNames.bg_BG.txt", _String2=".") returned 1 [0153.434] wcscmp (_String1="DisplayLanguageNames.bg_BG.txt", _String2="..") returned 1 [0153.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0153.435] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0153.435] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0153.435] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.bg_BG.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" [0164.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt")) returned 0x20 [0164.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", dwFileAttributes=0x20) returned 0 [0164.609] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.609] GetLastError () returned 0x5 [0164.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", dwFileAttributes=0x20) returned 0 [0164.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0164.610] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca.txt", cAlternateFileName="DIFBE9~1.TXT")) returned 1 [0164.610] wcscmp (_String1="DisplayLanguageNames.ca.txt", _String2=".") returned 1 [0164.610] wcscmp (_String1="DisplayLanguageNames.ca.txt", _String2="..") returned 1 [0164.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85d80 [0164.610] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.610] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.610] wcscat (in: _Dest=0x3d85d80, _Source="DisplayLanguageNames.ca.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" [0164.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt")) returned 0x20 [0164.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", dwFileAttributes=0x20) returned 0 [0164.644] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.644] GetLastError () returned 0x5 [0164.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", dwFileAttributes=0x20) returned 0 [0164.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 [0164.645] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca_ES.txt", cAlternateFileName="DI0E62~1.TXT")) returned 1 [0164.645] wcscmp (_String1="DisplayLanguageNames.ca_ES.txt", _String2=".") returned 1 [0164.645] wcscmp (_String1="DisplayLanguageNames.ca_ES.txt", _String2="..") returned 1 [0164.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0164.645] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.645] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.645] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.ca_ES.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" [0164.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt")) returned 0x20 [0164.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", dwFileAttributes=0x20) returned 0 [0164.646] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.646] GetLastError () returned 0x5 [0164.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", dwFileAttributes=0x20) returned 0 [0164.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0164.646] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ca_ES_PREEURO.txt", cAlternateFileName="DIFFE0~1.TXT")) returned 1 [0164.646] wcscmp (_String1="DisplayLanguageNames.ca_ES_PREEURO.txt", _String2=".") returned 1 [0164.646] wcscmp (_String1="DisplayLanguageNames.ca_ES_PREEURO.txt", _String2="..") returned 1 [0164.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3ed8 [0164.647] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.647] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.647] wcscat (in: _Dest=0x3dc3ed8, _Source="DisplayLanguageNames.ca_ES_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" [0164.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt")) returned 0x20 [0164.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0164.647] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.647] GetLastError () returned 0x5 [0164.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0164.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 [0164.648] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x74c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.cs.txt", cAlternateFileName="DI5C2E~1.TXT")) returned 1 [0164.648] wcscmp (_String1="DisplayLanguageNames.cs.txt", _String2=".") returned 1 [0164.648] wcscmp (_String1="DisplayLanguageNames.cs.txt", _String2="..") returned 1 [0164.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85d80 [0164.648] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.648] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.648] wcscat (in: _Dest=0x3d85d80, _Source="DisplayLanguageNames.cs.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" [0164.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt")) returned 0x20 [0164.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", dwFileAttributes=0x20) returned 0 [0164.684] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.685] GetLastError () returned 0x5 [0164.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", dwFileAttributes=0x20) returned 0 [0164.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 [0164.685] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x74c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.cs_CZ.txt", cAlternateFileName="DICA81~1.TXT")) returned 1 [0164.695] wcscmp (_String1="DisplayLanguageNames.cs_CZ.txt", _String2=".") returned 1 [0164.695] wcscmp (_String1="DisplayLanguageNames.cs_CZ.txt", _String2="..") returned 1 [0164.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0164.695] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.695] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.695] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.cs_CZ.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" [0164.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt")) returned 0x20 [0164.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", dwFileAttributes=0x20) returned 0 [0164.696] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.696] GetLastError () returned 0x5 [0164.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", dwFileAttributes=0x20) returned 0 [0164.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0164.697] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.da.txt", cAlternateFileName="DI3825~1.TXT")) returned 1 [0164.697] wcscmp (_String1="DisplayLanguageNames.da.txt", _String2=".") returned 1 [0164.697] wcscmp (_String1="DisplayLanguageNames.da.txt", _String2="..") returned 1 [0164.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85d80 [0164.697] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.697] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.698] wcscat (in: _Dest=0x3d85d80, _Source="DisplayLanguageNames.da.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" [0164.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt")) returned 0x20 [0164.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", dwFileAttributes=0x20) returned 0 [0164.698] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.698] GetLastError () returned 0x5 [0164.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", dwFileAttributes=0x20) returned 0 [0164.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 [0164.699] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.da_DK.txt", cAlternateFileName="DID241~1.TXT")) returned 1 [0164.699] wcscmp (_String1="DisplayLanguageNames.da_DK.txt", _String2=".") returned 1 [0164.699] wcscmp (_String1="DisplayLanguageNames.da_DK.txt", _String2="..") returned 1 [0164.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0164.699] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.699] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.699] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.da_DK.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" [0164.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt")) returned 0x20 [0164.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", dwFileAttributes=0x20) returned 0 [0164.700] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.700] GetLastError () returned 0x5 [0164.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", dwFileAttributes=0x20) returned 0 [0164.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0164.700] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x72d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_CH.txt", cAlternateFileName="DI26AE~1.TXT")) returned 1 [0164.700] wcscmp (_String1="DisplayLanguageNames.de_CH.txt", _String2=".") returned 1 [0164.700] wcscmp (_String1="DisplayLanguageNames.de_CH.txt", _String2="..") returned 1 [0164.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0164.700] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.700] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.701] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.de_CH.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" [0164.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt")) returned 0x20 [0164.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", dwFileAttributes=0x20) returned 0 [0164.701] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.701] GetLastError () returned 0x5 [0164.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", dwFileAttributes=0x20) returned 0 [0164.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0164.702] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7328, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_DE.txt", cAlternateFileName="DID4A5~1.TXT")) returned 1 [0164.702] wcscmp (_String1="DisplayLanguageNames.de_DE.txt", _String2=".") returned 1 [0164.702] wcscmp (_String1="DisplayLanguageNames.de_DE.txt", _String2="..") returned 1 [0164.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0164.702] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.702] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.702] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.de_DE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" [0164.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt")) returned 0x20 [0164.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", dwFileAttributes=0x20) returned 0 [0164.717] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.717] GetLastError () returned 0x5 [0164.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", dwFileAttributes=0x20) returned 0 [0164.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0164.718] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7326, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.de_DE_PREEURO.txt", cAlternateFileName="DI06A0~1.TXT")) returned 1 [0164.718] wcscmp (_String1="DisplayLanguageNames.de_DE_PREEURO.txt", _String2=".") returned 1 [0164.718] wcscmp (_String1="DisplayLanguageNames.de_DE_PREEURO.txt", _String2="..") returned 1 [0164.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3ed8 [0164.718] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.718] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.718] wcscat (in: _Dest=0x3dc3ed8, _Source="DisplayLanguageNames.de_DE_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" [0164.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt")) returned 0x20 [0164.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0164.719] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.719] GetLastError () returned 0x5 [0164.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0164.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 [0164.719] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el.txt", cAlternateFileName="DI372F~1.TXT")) returned 1 [0164.719] wcscmp (_String1="DisplayLanguageNames.el.txt", _String2=".") returned 1 [0164.719] wcscmp (_String1="DisplayLanguageNames.el.txt", _String2="..") returned 1 [0164.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85d80 [0164.720] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.720] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.720] wcscat (in: _Dest=0x3d85d80, _Source="DisplayLanguageNames.el.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" [0164.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt")) returned 0x20 [0164.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", dwFileAttributes=0x20) returned 0 [0164.736] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.737] GetLastError () returned 0x5 [0164.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", dwFileAttributes=0x20) returned 0 [0164.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 [0164.737] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el_GR.txt", cAlternateFileName="DI5702~1.TXT")) returned 1 [0164.737] wcscmp (_String1="DisplayLanguageNames.el_GR.txt", _String2=".") returned 1 [0164.737] wcscmp (_String1="DisplayLanguageNames.el_GR.txt", _String2="..") returned 1 [0164.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0164.737] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.737] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.737] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.el_GR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" [0164.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt")) returned 0x20 [0164.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", dwFileAttributes=0x20) returned 0 [0164.751] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.751] GetLastError () returned 0x5 [0164.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", dwFileAttributes=0x20) returned 0 [0164.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0164.751] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.el_GR_PREEURO.txt", cAlternateFileName="DI8CEE~1.TXT")) returned 1 [0164.752] wcscmp (_String1="DisplayLanguageNames.el_GR_PREEURO.txt", _String2=".") returned 1 [0164.752] wcscmp (_String1="DisplayLanguageNames.el_GR_PREEURO.txt", _String2="..") returned 1 [0164.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3ed8 [0164.752] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.752] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.752] wcscat (in: _Dest=0x3dc3ed8, _Source="DisplayLanguageNames.el_GR_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" [0164.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt")) returned 0x20 [0164.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0164.752] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.753] GetLastError () returned 0x5 [0164.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0164.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 [0164.753] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_CA.txt", cAlternateFileName="DI579A~1.TXT")) returned 1 [0164.753] wcscmp (_String1="DisplayLanguageNames.en_CA.txt", _String2=".") returned 1 [0164.753] wcscmp (_String1="DisplayLanguageNames.en_CA.txt", _String2="..") returned 1 [0164.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0164.753] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.753] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.753] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.en_CA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" [0164.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt")) returned 0x20 [0164.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", dwFileAttributes=0x20) returned 0 [0164.754] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.754] GetLastError () returned 0x5 [0164.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", dwFileAttributes=0x20) returned 0 [0164.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0164.754] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB.txt", cAlternateFileName="DICF87~1.TXT")) returned 1 [0164.754] wcscmp (_String1="DisplayLanguageNames.en_GB.txt", _String2=".") returned 1 [0164.754] wcscmp (_String1="DisplayLanguageNames.en_GB.txt", _String2="..") returned 1 [0164.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0164.754] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.754] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.754] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.en_GB.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" [0164.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt")) returned 0x20 [0164.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", dwFileAttributes=0x20) returned 0 [0164.761] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.761] GetLastError () returned 0x5 [0164.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", dwFileAttributes=0x20) returned 0 [0164.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0164.761] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB_EURO.txt", cAlternateFileName="DIB168~1.TXT")) returned 1 [0164.761] wcscmp (_String1="DisplayLanguageNames.en_GB_EURO.txt", _String2=".") returned 1 [0164.761] wcscmp (_String1="DisplayLanguageNames.en_GB_EURO.txt", _String2="..") returned 1 [0164.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8aa8 [0164.761] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.762] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.762] wcscat (in: _Dest=0x2c8aa8, _Source="DisplayLanguageNames.en_GB_EURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" [0164.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt")) returned 0x20 [0164.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", dwFileAttributes=0x20) returned 0 [0164.762] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.762] GetLastError () returned 0x5 [0164.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", dwFileAttributes=0x20) returned 0 [0164.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 [0164.763] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US.txt", cAlternateFileName="DI0A37~1.TXT")) returned 1 [0164.763] wcscmp (_String1="DisplayLanguageNames.en_US.txt", _String2=".") returned 1 [0164.763] wcscmp (_String1="DisplayLanguageNames.en_US.txt", _String2="..") returned 1 [0164.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0164.763] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.763] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.763] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.en_US.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" [0164.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt")) returned 0x20 [0164.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", dwFileAttributes=0x20) returned 0 [0164.764] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.764] GetLastError () returned 0x5 [0164.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", dwFileAttributes=0x20) returned 0 [0164.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0164.764] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaed56c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US_POSIX.txt", cAlternateFileName="DIA6FD~1.TXT")) returned 1 [0164.764] wcscmp (_String1="DisplayLanguageNames.en_US_POSIX.txt", _String2=".") returned 1 [0164.764] wcscmp (_String1="DisplayLanguageNames.en_US_POSIX.txt", _String2="..") returned 1 [0164.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8aa8 [0164.764] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.764] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.764] wcscat (in: _Dest=0x2c8aa8, _Source="DisplayLanguageNames.en_US_POSIX.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" [0164.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt")) returned 0x20 [0164.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", dwFileAttributes=0x20) returned 0 [0164.765] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.765] GetLastError () returned 0x5 [0164.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", dwFileAttributes=0x20) returned 0 [0164.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 [0164.766] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es.txt", cAlternateFileName="DIA363~1.TXT")) returned 1 [0164.766] wcscmp (_String1="DisplayLanguageNames.es.txt", _String2=".") returned 1 [0164.766] wcscmp (_String1="DisplayLanguageNames.es.txt", _String2="..") returned 1 [0164.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85d80 [0164.766] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0164.766] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0164.766] wcscat (in: _Dest=0x3d85d80, _Source="DisplayLanguageNames.es.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" [0164.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt")) returned 0x20 [0165.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", dwFileAttributes=0x20) returned 0 [0165.204] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.206] GetLastError () returned 0x5 [0165.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", dwFileAttributes=0x20) returned 0 [0165.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 [0165.231] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_AR.txt", cAlternateFileName="DID78F~1.TXT")) returned 1 [0165.231] wcscmp (_String1="DisplayLanguageNames.es_AR.txt", _String2=".") returned 1 [0165.231] wcscmp (_String1="DisplayLanguageNames.es_AR.txt", _String2="..") returned 1 [0165.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0165.231] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0165.232] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0165.232] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.es_AR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" [0166.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e381e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0166.716] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_BO.txt", cAlternateFileName="DIA31D~1.TXT")) returned 1 [0166.716] wcscmp (_String1="DisplayLanguageNames.es_BO.txt", _String2=".") returned 1 [0166.717] wcscmp (_String1="DisplayLanguageNames.es_BO.txt", _String2="..") returned 1 [0166.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37cd8 [0166.717] wcscpy (in: _Dest=0x3e37cd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.717] wcscat (in: _Dest=0x3e37cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.717] wcscat (in: _Dest=0x3e37cd8, _Source="DisplayLanguageNames.es_BO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" [0166.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c [0166.718] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CL.txt", cAlternateFileName="DI9065~1.TXT")) returned 1 [0166.719] wcscmp (_String1="DisplayLanguageNames.es_CL.txt", _String2=".") returned 1 [0166.719] wcscmp (_String1="DisplayLanguageNames.es_CL.txt", _String2="..") returned 1 [0166.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37540 [0166.719] wcscpy (in: _Dest=0x3e37540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.719] wcscat (in: _Dest=0x3e37540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.719] wcscat (in: _Dest=0x3e37540, _Source="DisplayLanguageNames.es_CL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" [0166.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0166.721] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CO.txt", cAlternateFileName="DIF0AE~1.TXT")) returned 1 [0166.721] wcscmp (_String1="DisplayLanguageNames.es_CO.txt", _String2=".") returned 1 [0166.721] wcscmp (_String1="DisplayLanguageNames.es_CO.txt", _String2="..") returned 1 [0166.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e38110 [0166.721] wcscpy (in: _Dest=0x3e38110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.721] wcscat (in: _Dest=0x3e38110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.721] wcscat (in: _Dest=0x3e38110, _Source="DisplayLanguageNames.es_CO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" [0166.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0166.723] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_CR.txt", cAlternateFileName="DI0002~1.TXT")) returned 1 [0166.723] wcscmp (_String1="DisplayLanguageNames.es_CR.txt", _String2=".") returned 1 [0166.723] wcscmp (_String1="DisplayLanguageNames.es_CR.txt", _String2="..") returned 1 [0166.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37030 [0166.723] wcscpy (in: _Dest=0x3e37030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.723] wcscat (in: _Dest=0x3e37030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.723] wcscat (in: _Dest=0x3e37030, _Source="DisplayLanguageNames.es_CR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" [0166.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0166.725] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_DO.txt", cAlternateFileName="DI1A09~1.TXT")) returned 1 [0166.726] wcscmp (_String1="DisplayLanguageNames.es_DO.txt", _String2=".") returned 1 [0166.726] wcscmp (_String1="DisplayLanguageNames.es_DO.txt", _String2="..") returned 1 [0166.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e382c0 [0166.726] wcscpy (in: _Dest=0x3e382c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.726] wcscat (in: _Dest=0x3e382c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.726] wcscat (in: _Dest=0x3e382c0, _Source="DisplayLanguageNames.es_DO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" [0166.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e382c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0166.728] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_EC.txt", cAlternateFileName="DIE9E6~1.TXT")) returned 1 [0166.728] wcscmp (_String1="DisplayLanguageNames.es_EC.txt", _String2=".") returned 1 [0166.728] wcscmp (_String1="DisplayLanguageNames.es_EC.txt", _String2="..") returned 1 [0166.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e38a58 [0166.728] wcscpy (in: _Dest=0x3e38a58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.728] wcscat (in: _Dest=0x3e38a58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.728] wcscat (in: _Dest=0x3e38a58, _Source="DisplayLanguageNames.es_EC.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" [0166.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0166.730] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_ES.txt", cAlternateFileName="DI408C~1.TXT")) returned 1 [0166.730] wcscmp (_String1="DisplayLanguageNames.es_ES.txt", _String2=".") returned 1 [0166.730] wcscmp (_String1="DisplayLanguageNames.es_ES.txt", _String2="..") returned 1 [0166.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68648 [0166.731] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.731] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.731] wcscat (in: _Dest=0x3e68648, _Source="DisplayLanguageNames.es_ES.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" [0166.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0166.733] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_ES_PREEURO.txt", cAlternateFileName="DI260B~1.TXT")) returned 1 [0166.733] wcscmp (_String1="DisplayLanguageNames.es_ES_PREEURO.txt", _String2=".") returned 1 [0166.733] wcscmp (_String1="DisplayLanguageNames.es_ES_PREEURO.txt", _String2="..") returned 1 [0166.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3ed8 [0166.733] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.733] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.733] wcscat (in: _Dest=0x3dc3ed8, _Source="DisplayLanguageNames.es_ES_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" [0166.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0166.734] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_GT.txt", cAlternateFileName="DID1E0~1.TXT")) returned 1 [0166.735] wcscmp (_String1="DisplayLanguageNames.es_GT.txt", _String2=".") returned 1 [0166.735] wcscmp (_String1="DisplayLanguageNames.es_GT.txt", _String2="..") returned 1 [0166.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68498 [0166.735] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.735] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.735] wcscat (in: _Dest=0x3e68498, _Source="DisplayLanguageNames.es_GT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" [0166.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0166.737] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_HN.txt", cAlternateFileName="DI2D6E~1.TXT")) returned 1 [0166.743] wcscmp (_String1="DisplayLanguageNames.es_HN.txt", _String2=".") returned 1 [0166.743] wcscmp (_String1="DisplayLanguageNames.es_HN.txt", _String2="..") returned 1 [0166.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e67568 [0166.743] wcscpy (in: _Dest=0x3e67568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.743] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.743] wcscat (in: _Dest=0x3e67568, _Source="DisplayLanguageNames.es_HN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" [0166.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0166.745] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_MX.txt", cAlternateFileName="DI31D9~1.TXT")) returned 1 [0166.745] wcscmp (_String1="DisplayLanguageNames.es_MX.txt", _String2=".") returned 1 [0166.745] wcscmp (_String1="DisplayLanguageNames.es_MX.txt", _String2="..") returned 1 [0166.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68de0 [0166.745] wcscpy (in: _Dest=0x3e68de0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.745] wcscat (in: _Dest=0x3e68de0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.745] wcscat (in: _Dest=0x3e68de0, _Source="DisplayLanguageNames.es_MX.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" [0166.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0166.747] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ecc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_NI.txt", cAlternateFileName="DI4326~1.TXT")) returned 1 [0166.747] wcscmp (_String1="DisplayLanguageNames.es_NI.txt", _String2=".") returned 1 [0166.747] wcscmp (_String1="DisplayLanguageNames.es_NI.txt", _String2="..") returned 1 [0166.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68d08 [0166.747] wcscpy (in: _Dest=0x3e68d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.747] wcscat (in: _Dest=0x3e68d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.747] wcscat (in: _Dest=0x3e68d08, _Source="DisplayLanguageNames.es_NI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" [0166.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1414 [0166.749] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae89400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PA.txt", cAlternateFileName="DI714F~1.TXT")) returned 1 [0166.749] wcscmp (_String1="DisplayLanguageNames.es_PA.txt", _String2=".") returned 1 [0166.749] wcscmp (_String1="DisplayLanguageNames.es_PA.txt", _String2="..") returned 1 [0166.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68c30 [0166.749] wcscpy (in: _Dest=0x3e68c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.749] wcscat (in: _Dest=0x3e68c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.749] wcscat (in: _Dest=0x3e68c30, _Source="DisplayLanguageNames.es_PA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" [0166.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418 [0166.750] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PE.txt", cAlternateFileName="DIE843~1.TXT")) returned 1 [0166.751] wcscmp (_String1="DisplayLanguageNames.es_PE.txt", _String2=".") returned 1 [0166.751] wcscmp (_String1="DisplayLanguageNames.es_PE.txt", _String2="..") returned 1 [0166.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68b58 [0166.751] wcscpy (in: _Dest=0x3e68b58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.751] wcscat (in: _Dest=0x3e68b58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.751] wcscat (in: _Dest=0x3e68b58, _Source="DisplayLanguageNames.es_PE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" [0166.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0166.752] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PR.txt", cAlternateFileName="DID39C~1.TXT")) returned 1 [0166.753] wcscmp (_String1="DisplayLanguageNames.es_PR.txt", _String2=".") returned 1 [0166.753] wcscmp (_String1="DisplayLanguageNames.es_PR.txt", _String2="..") returned 1 [0166.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68a80 [0166.753] wcscpy (in: _Dest=0x3e68a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.753] wcscat (in: _Dest=0x3e68a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.753] wcscat (in: _Dest=0x3e68a80, _Source="DisplayLanguageNames.es_PR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" [0166.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0166.754] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_PY.txt", cAlternateFileName="DI61E0~1.TXT")) returned 1 [0166.755] wcscmp (_String1="DisplayLanguageNames.es_PY.txt", _String2=".") returned 1 [0166.755] wcscmp (_String1="DisplayLanguageNames.es_PY.txt", _String2="..") returned 1 [0166.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e689a8 [0166.755] wcscpy (in: _Dest=0x3e689a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.755] wcscat (in: _Dest=0x3e689a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.755] wcscat (in: _Dest=0x3e689a8, _Source="DisplayLanguageNames.es_PY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" [0166.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e689a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0166.756] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_SV.txt", cAlternateFileName="DIBEBA~1.TXT")) returned 1 [0166.756] wcscmp (_String1="DisplayLanguageNames.es_SV.txt", _String2=".") returned 1 [0166.757] wcscmp (_String1="DisplayLanguageNames.es_SV.txt", _String2="..") returned 1 [0166.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e688d0 [0166.757] wcscpy (in: _Dest=0x3e688d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.757] wcscat (in: _Dest=0x3e688d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.757] wcscat (in: _Dest=0x3e688d0, _Source="DisplayLanguageNames.es_SV.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" [0166.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e688d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0166.758] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_US.txt", cAlternateFileName="DI5822~1.TXT")) returned 1 [0166.758] wcscmp (_String1="DisplayLanguageNames.es_US.txt", _String2=".") returned 1 [0166.759] wcscmp (_String1="DisplayLanguageNames.es_US.txt", _String2="..") returned 1 [0166.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e678c8 [0166.759] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0166.759] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0166.759] wcscat (in: _Dest=0x3e678c8, _Source="DisplayLanguageNames.es_US.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" [0166.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0167.264] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_UY.txt", cAlternateFileName="DIC7CE~1.TXT")) returned 1 [0167.264] wcscmp (_String1="DisplayLanguageNames.es_UY.txt", _String2=".") returned 1 [0167.264] wcscmp (_String1="DisplayLanguageNames.es_UY.txt", _String2="..") returned 1 [0167.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37cd8 [0167.264] wcscpy (in: _Dest=0x3e37cd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.264] wcscat (in: _Dest=0x3e37cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.264] wcscat (in: _Dest=0x3e37cd8, _Source="DisplayLanguageNames.es_UY.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" [0167.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0167.739] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es_VE.txt", cAlternateFileName="DIACC3~1.TXT")) returned 1 [0167.739] wcscmp (_String1="DisplayLanguageNames.es_VE.txt", _String2=".") returned 1 [0167.739] wcscmp (_String1="DisplayLanguageNames.es_VE.txt", _String2="..") returned 1 [0167.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68a80 [0167.739] wcscpy (in: _Dest=0x3e68a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.739] wcscat (in: _Dest=0x3e68a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.739] wcscat (in: _Dest=0x3e68a80, _Source="DisplayLanguageNames.es_VE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" [0167.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0167.740] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaeaf560, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.es__TRADITIONAL.txt", cAlternateFileName="DI8400~1.TXT")) returned 1 [0167.740] wcscmp (_String1="DisplayLanguageNames.es__TRADITIONAL.txt", _String2=".") returned 1 [0167.740] wcscmp (_String1="DisplayLanguageNames.es__TRADITIONAL.txt", _String2="..") returned 1 [0167.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3ed8 [0167.740] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.740] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.740] wcscat (in: _Dest=0x3dc3ed8, _Source="DisplayLanguageNames.es__TRADITIONAL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" [0167.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0167.741] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.et.txt", cAlternateFileName="DIED82~1.TXT")) returned 1 [0167.741] wcscmp (_String1="DisplayLanguageNames.et.txt", _String2=".") returned 1 [0167.741] wcscmp (_String1="DisplayLanguageNames.et.txt", _String2="..") returned 1 [0167.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85700 [0167.742] wcscpy (in: _Dest=0x3d85700, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.742] wcscat (in: _Dest=0x3d85700, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.742] wcscat (in: _Dest=0x3d85700, _Source="DisplayLanguageNames.et.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" [0167.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0167.743] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.et_EE.txt", cAlternateFileName="DI9AE7~1.TXT")) returned 1 [0167.743] wcscmp (_String1="DisplayLanguageNames.et_EE.txt", _String2=".") returned 1 [0167.743] wcscmp (_String1="DisplayLanguageNames.et_EE.txt", _String2="..") returned 1 [0167.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68b58 [0167.743] wcscpy (in: _Dest=0x3e68b58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.743] wcscat (in: _Dest=0x3e68b58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.743] wcscat (in: _Dest=0x3e68b58, _Source="DisplayLanguageNames.et_EE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" [0167.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0167.744] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi.txt", cAlternateFileName="DIC325~1.TXT")) returned 1 [0167.744] wcscmp (_String1="DisplayLanguageNames.fi.txt", _String2=".") returned 1 [0167.744] wcscmp (_String1="DisplayLanguageNames.fi.txt", _String2="..") returned 1 [0167.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85d80 [0167.745] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.745] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.745] wcscat (in: _Dest=0x3d85d80, _Source="DisplayLanguageNames.fi.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" [0167.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0167.746] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi_FI.txt", cAlternateFileName="DI7250~1.TXT")) returned 1 [0167.746] wcscmp (_String1="DisplayLanguageNames.fi_FI.txt", _String2=".") returned 1 [0167.746] wcscmp (_String1="DisplayLanguageNames.fi_FI.txt", _String2="..") returned 1 [0167.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68c30 [0167.746] wcscpy (in: _Dest=0x3e68c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.746] wcscat (in: _Dest=0x3e68c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.746] wcscat (in: _Dest=0x3e68c30, _Source="DisplayLanguageNames.fi_FI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" [0167.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0167.747] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae632a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fi_FI_PREEURO.txt", cAlternateFileName="DI4571~1.TXT")) returned 1 [0167.747] wcscmp (_String1="DisplayLanguageNames.fi_FI_PREEURO.txt", _String2=".") returned 1 [0167.747] wcscmp (_String1="DisplayLanguageNames.fi_FI_PREEURO.txt", _String2="..") returned 1 [0167.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3d08 [0167.748] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.748] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.748] wcscat (in: _Dest=0x3dc3d08, _Source="DisplayLanguageNames.fi_FI_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" [0167.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0167.749] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_CA.txt", cAlternateFileName="DI603C~1.TXT")) returned 1 [0167.749] wcscmp (_String1="DisplayLanguageNames.fr_CA.txt", _String2=".") returned 1 [0167.749] wcscmp (_String1="DisplayLanguageNames.fr_CA.txt", _String2="..") returned 1 [0167.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68d08 [0167.749] wcscpy (in: _Dest=0x3e68d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.749] wcscat (in: _Dest=0x3e68d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.749] wcscat (in: _Dest=0x3e68d08, _Source="DisplayLanguageNames.fr_CA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" [0167.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0167.750] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_FR.txt", cAlternateFileName="DIC6EF~1.TXT")) returned 1 [0167.750] wcscmp (_String1="DisplayLanguageNames.fr_FR.txt", _String2=".") returned 1 [0167.750] wcscmp (_String1="DisplayLanguageNames.fr_FR.txt", _String2="..") returned 1 [0167.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68de0 [0167.750] wcscpy (in: _Dest=0x3e68de0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.750] wcscat (in: _Dest=0x3e68de0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.750] wcscat (in: _Dest=0x3e68de0, _Source="DisplayLanguageNames.fr_FR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" [0167.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0167.752] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.fr_FR_PREEURO.txt", cAlternateFileName="DIFF6A~1.TXT")) returned 1 [0167.752] wcscmp (_String1="DisplayLanguageNames.fr_FR_PREEURO.txt", _String2=".") returned 1 [0167.752] wcscmp (_String1="DisplayLanguageNames.fr_FR_PREEURO.txt", _String2="..") returned 1 [0167.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4190 [0167.752] wcscpy (in: _Dest=0x3dc4190, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.752] wcscat (in: _Dest=0x3dc4190, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.752] wcscat (in: _Dest=0x3dc4190, _Source="DisplayLanguageNames.fr_FR_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" [0167.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0167.753] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x67c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.he.txt", cAlternateFileName="DI503B~1.TXT")) returned 1 [0167.753] wcscmp (_String1="DisplayLanguageNames.he.txt", _String2=".") returned 1 [0167.753] wcscmp (_String1="DisplayLanguageNames.he.txt", _String2="..") returned 1 [0167.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d84e10 [0167.754] wcscpy (in: _Dest=0x3d84e10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.754] wcscat (in: _Dest=0x3d84e10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.754] wcscat (in: _Dest=0x3d84e10, _Source="DisplayLanguageNames.he.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" [0167.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e4 [0167.755] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x67c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.he_IL.txt", cAlternateFileName="DI97E6~1.TXT")) returned 1 [0167.755] wcscmp (_String1="DisplayLanguageNames.he_IL.txt", _String2=".") returned 1 [0167.755] wcscmp (_String1="DisplayLanguageNames.he_IL.txt", _String2="..") returned 1 [0167.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e67568 [0167.755] wcscpy (in: _Dest=0x3e67568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.755] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.755] wcscat (in: _Dest=0x3e67568, _Source="DisplayLanguageNames.he_IL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" [0167.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0167.757] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hr.txt", cAlternateFileName="DI4B74~1.TXT")) returned 1 [0167.757] wcscmp (_String1="DisplayLanguageNames.hr.txt", _String2=".") returned 1 [0167.757] wcscmp (_String1="DisplayLanguageNames.hr.txt", _String2="..") returned 1 [0167.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85220 [0167.757] wcscpy (in: _Dest=0x3d85220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.757] wcscat (in: _Dest=0x3d85220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.757] wcscat (in: _Dest=0x3d85220, _Source="DisplayLanguageNames.hr.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" [0167.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0167.758] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb47cb00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hr_HR.txt", cAlternateFileName="DI0D1D~1.TXT")) returned 1 [0167.758] wcscmp (_String1="DisplayLanguageNames.hr_HR.txt", _String2=".") returned 1 [0167.758] wcscmp (_String1="DisplayLanguageNames.hr_HR.txt", _String2="..") returned 1 [0167.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68498 [0167.758] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.759] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.759] wcscat (in: _Dest=0x3e68498, _Source="DisplayLanguageNames.hr_HR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" [0167.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0167.760] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hu.txt", cAlternateFileName="DIB428~1.TXT")) returned 1 [0167.760] wcscmp (_String1="DisplayLanguageNames.hu.txt", _String2=".") returned 1 [0167.760] wcscmp (_String1="DisplayLanguageNames.hu.txt", _String2="..") returned 1 [0167.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d858a0 [0167.760] wcscpy (in: _Dest=0x3d858a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.760] wcscat (in: _Dest=0x3d858a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.760] wcscat (in: _Dest=0x3d858a0, _Source="DisplayLanguageNames.hu.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" [0167.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d858a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0167.761] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.hu_HU.txt", cAlternateFileName="DI4400~1.TXT")) returned 1 [0167.766] wcscmp (_String1="DisplayLanguageNames.hu_HU.txt", _String2=".") returned 1 [0167.766] wcscmp (_String1="DisplayLanguageNames.hu_HU.txt", _String2="..") returned 1 [0167.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68648 [0167.766] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0167.766] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0167.766] wcscat (in: _Dest=0x3e68648, _Source="DisplayLanguageNames.hu_HU.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" [0171.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0171.696] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it.txt", cAlternateFileName="DIABB3~1.TXT")) returned 1 [0171.696] wcscmp (_String1="DisplayLanguageNames.it.txt", _String2=".") returned 1 [0171.696] wcscmp (_String1="DisplayLanguageNames.it.txt", _String2="..") returned 1 [0171.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85220 [0171.696] wcscpy (in: _Dest=0x3d85220, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.696] wcscat (in: _Dest=0x3d85220, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.696] wcscat (in: _Dest=0x3d85220, _Source="DisplayLanguageNames.it.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" [0171.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0171.697] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_CH.txt", cAlternateFileName="DIFC7F~1.TXT")) returned 1 [0171.697] wcscmp (_String1="DisplayLanguageNames.it_CH.txt", _String2=".") returned 1 [0171.697] wcscmp (_String1="DisplayLanguageNames.it_CH.txt", _String2="..") returned 1 [0171.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e67568 [0171.697] wcscpy (in: _Dest=0x3e67568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.697] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.697] wcscat (in: _Dest=0x3e67568, _Source="DisplayLanguageNames.it_CH.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" [0171.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0171.698] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_IT.txt", cAlternateFileName="DI5DFF~1.TXT")) returned 1 [0171.699] wcscmp (_String1="DisplayLanguageNames.it_IT.txt", _String2=".") returned 1 [0171.699] wcscmp (_String1="DisplayLanguageNames.it_IT.txt", _String2="..") returned 1 [0171.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68d08 [0171.699] wcscpy (in: _Dest=0x3e68d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.699] wcscat (in: _Dest=0x3e68d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.699] wcscat (in: _Dest=0x3e68d08, _Source="DisplayLanguageNames.it_IT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" [0171.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0171.700] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae3d140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.it_IT_PREEURO.txt", cAlternateFileName="DI988F~1.TXT")) returned 1 [0171.700] wcscmp (_String1="DisplayLanguageNames.it_IT_PREEURO.txt", _String2=".") returned 1 [0171.700] wcscmp (_String1="DisplayLanguageNames.it_IT_PREEURO.txt", _String2="..") returned 1 [0171.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4190 [0171.700] wcscpy (in: _Dest=0x3dc4190, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.700] wcscat (in: _Dest=0x3dc4190, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.700] wcscat (in: _Dest=0x3dc4190, _Source="DisplayLanguageNames.it_IT_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" [0171.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0171.701] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja.txt", cAlternateFileName="DI0CF7~1.TXT")) returned 1 [0171.701] wcscmp (_String1="DisplayLanguageNames.ja.txt", _String2=".") returned 1 [0171.701] wcscmp (_String1="DisplayLanguageNames.ja.txt", _String2="..") returned 1 [0171.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d84e10 [0171.702] wcscpy (in: _Dest=0x3d84e10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.702] wcscat (in: _Dest=0x3d84e10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.702] wcscat (in: _Dest=0x3d84e10, _Source="DisplayLanguageNames.ja.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" [0171.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0171.703] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja_JP.txt", cAlternateFileName="DI3A02~1.TXT")) returned 1 [0171.703] wcscmp (_String1="DisplayLanguageNames.ja_JP.txt", _String2=".") returned 1 [0171.703] wcscmp (_String1="DisplayLanguageNames.ja_JP.txt", _String2="..") returned 1 [0171.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68c30 [0171.703] wcscpy (in: _Dest=0x3e68c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.703] wcscat (in: _Dest=0x3e68c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.703] wcscat (in: _Dest=0x3e68c30, _Source="DisplayLanguageNames.ja_JP.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" [0171.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0171.704] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6594, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", cAlternateFileName="DI1663~1.TXT")) returned 1 [0171.704] wcscmp (_String1="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", _String2=".") returned 1 [0171.704] wcscmp (_String1="DisplayLanguageNames.ja_JP_TRADITIONAL.txt", _String2="..") returned 1 [0171.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3daff88 [0171.705] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.705] wcscat (in: _Dest=0x3daff88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.705] wcscat (in: _Dest=0x3daff88, _Source="DisplayLanguageNames.ja_JP_TRADITIONAL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" [0171.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3daff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0171.706] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x626a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ko.txt", cAlternateFileName="DI1265~1.TXT")) returned 1 [0171.706] wcscmp (_String1="DisplayLanguageNames.ko.txt", _String2=".") returned 1 [0171.706] wcscmp (_String1="DisplayLanguageNames.ko.txt", _String2="..") returned 1 [0171.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85d80 [0171.706] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.706] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.706] wcscat (in: _Dest=0x3d85d80, _Source="DisplayLanguageNames.ko.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" [0171.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0171.725] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x626a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ko_KR.txt", cAlternateFileName="DI9E0C~1.TXT")) returned 1 [0171.725] wcscmp (_String1="DisplayLanguageNames.ko_KR.txt", _String2=".") returned 1 [0171.726] wcscmp (_String1="DisplayLanguageNames.ko_KR.txt", _String2="..") returned 1 [0171.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68de0 [0171.726] wcscpy (in: _Dest=0x3e68de0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.726] wcscat (in: _Dest=0x3e68de0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.726] wcscat (in: _Dest=0x3e68de0, _Source="DisplayLanguageNames.ko_KR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" [0171.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0171.728] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lt.txt", cAlternateFileName="DIA1C2~1.TXT")) returned 1 [0171.728] wcscmp (_String1="DisplayLanguageNames.lt.txt", _String2=".") returned 1 [0171.728] wcscmp (_String1="DisplayLanguageNames.lt.txt", _String2="..") returned 1 [0171.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d858a0 [0171.728] wcscpy (in: _Dest=0x3d858a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.728] wcscat (in: _Dest=0x3d858a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.729] wcscat (in: _Dest=0x3d858a0, _Source="DisplayLanguageNames.lt.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" [0171.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d858a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0171.730] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lt_LT.txt", cAlternateFileName="DI6CC8~1.TXT")) returned 1 [0171.731] wcscmp (_String1="DisplayLanguageNames.lt_LT.txt", _String2=".") returned 1 [0171.731] wcscmp (_String1="DisplayLanguageNames.lt_LT.txt", _String2="..") returned 1 [0171.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68b58 [0171.731] wcscpy (in: _Dest=0x3e68b58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.731] wcscat (in: _Dest=0x3e68b58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.731] wcscat (in: _Dest=0x3e68b58, _Source="DisplayLanguageNames.lt_LT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" [0171.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0171.733] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4569a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lv.txt", cAlternateFileName="DI4C2B~1.TXT")) returned 1 [0171.733] wcscmp (_String1="DisplayLanguageNames.lv.txt", _String2=".") returned 1 [0171.733] wcscmp (_String1="DisplayLanguageNames.lv.txt", _String2="..") returned 1 [0171.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85700 [0171.733] wcscpy (in: _Dest=0x3d85700, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.733] wcscat (in: _Dest=0x3d85700, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.733] wcscat (in: _Dest=0x3d85700, _Source="DisplayLanguageNames.lv.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" [0171.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0171.735] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.lv_LV.txt", cAlternateFileName="DI7CF0~1.TXT")) returned 1 [0171.735] wcscmp (_String1="DisplayLanguageNames.lv_LV.txt", _String2=".") returned 1 [0171.735] wcscmp (_String1="DisplayLanguageNames.lv_LV.txt", _String2="..") returned 1 [0171.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68a80 [0171.735] wcscpy (in: _Dest=0x3e68a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.735] wcscat (in: _Dest=0x3e68a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.735] wcscat (in: _Dest=0x3e68a80, _Source="DisplayLanguageNames.lv_LV.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" [0171.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0171.737] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nb.txt", cAlternateFileName="DI74F4~1.TXT")) returned 1 [0171.737] wcscmp (_String1="DisplayLanguageNames.nb.txt", _String2=".") returned 1 [0171.737] wcscmp (_String1="DisplayLanguageNames.nb.txt", _String2="..") returned 1 [0171.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85080 [0171.737] wcscpy (in: _Dest=0x3d85080, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.737] wcscat (in: _Dest=0x3d85080, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.737] wcscat (in: _Dest=0x3d85080, _Source="DisplayLanguageNames.nb.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" [0171.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0171.738] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nb_NO.txt", cAlternateFileName="DI7EFB~1.TXT")) returned 1 [0171.738] wcscmp (_String1="DisplayLanguageNames.nb_NO.txt", _String2=".") returned 1 [0171.738] wcscmp (_String1="DisplayLanguageNames.nb_NO.txt", _String2="..") returned 1 [0171.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e678c8 [0171.738] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.739] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.739] wcscat (in: _Dest=0x3e678c8, _Source="DisplayLanguageNames.nb_NO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" [0171.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0171.740] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl.txt", cAlternateFileName="DIDFDB~1.TXT")) returned 1 [0171.740] wcscmp (_String1="DisplayLanguageNames.nl.txt", _String2=".") returned 1 [0171.740] wcscmp (_String1="DisplayLanguageNames.nl.txt", _String2="..") returned 1 [0171.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d852f0 [0171.740] wcscpy (in: _Dest=0x3d852f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.740] wcscat (in: _Dest=0x3d852f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.740] wcscat (in: _Dest=0x3d852f0, _Source="DisplayLanguageNames.nl.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" [0171.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d852f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0171.741] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_BE.txt", cAlternateFileName="DI6018~1.TXT")) returned 1 [0171.741] wcscmp (_String1="DisplayLanguageNames.nl_BE.txt", _String2=".") returned 1 [0171.741] wcscmp (_String1="DisplayLanguageNames.nl_BE.txt", _String2="..") returned 1 [0171.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e688d0 [0171.741] wcscpy (in: _Dest=0x3e688d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.741] wcscat (in: _Dest=0x3e688d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.741] wcscat (in: _Dest=0x3e688d0, _Source="DisplayLanguageNames.nl_BE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" [0171.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e688d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0171.742] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_BE_PREEURO.txt", cAlternateFileName="DIB2C6~1.TXT")) returned 1 [0171.742] wcscmp (_String1="DisplayLanguageNames.nl_BE_PREEURO.txt", _String2=".") returned 1 [0171.742] wcscmp (_String1="DisplayLanguageNames.nl_BE_PREEURO.txt", _String2="..") returned 1 [0171.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3d08 [0171.743] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.743] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.743] wcscat (in: _Dest=0x3dc3d08, _Source="DisplayLanguageNames.nl_BE_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" [0171.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0171.744] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_NL.txt", cAlternateFileName="DI742E~1.TXT")) returned 1 [0171.744] wcscmp (_String1="DisplayLanguageNames.nl_NL.txt", _String2=".") returned 1 [0171.744] wcscmp (_String1="DisplayLanguageNames.nl_NL.txt", _String2="..") returned 1 [0171.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e689a8 [0171.744] wcscpy (in: _Dest=0x3e689a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.744] wcscat (in: _Dest=0x3e689a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.744] wcscat (in: _Dest=0x3e689a8, _Source="DisplayLanguageNames.nl_NL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" [0171.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e689a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0171.745] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdae16fe0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nl_NL_PREEURO.txt", cAlternateFileName="DI3524~1.TXT")) returned 1 [0171.745] wcscmp (_String1="DisplayLanguageNames.nl_NL_PREEURO.txt", _String2=".") returned 1 [0171.745] wcscmp (_String1="DisplayLanguageNames.nl_NL_PREEURO.txt", _String2="..") returned 1 [0171.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3ed8 [0171.745] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.745] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.745] wcscat (in: _Dest=0x3dc3ed8, _Source="DisplayLanguageNames.nl_NL_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" [0171.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0171.746] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4a2c60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.nn_NO.txt", cAlternateFileName="DIF7B3~1.TXT")) returned 1 [0171.746] wcscmp (_String1="DisplayLanguageNames.nn_NO.txt", _String2=".") returned 1 [0171.746] wcscmp (_String1="DisplayLanguageNames.nn_NO.txt", _String2="..") returned 1 [0171.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e687f8 [0171.747] wcscpy (in: _Dest=0x3e687f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.747] wcscat (in: _Dest=0x3e687f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.747] wcscat (in: _Dest=0x3e687f8, _Source="DisplayLanguageNames.nn_NO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" [0171.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0171.748] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pl.txt", cAlternateFileName="DI69EF~1.TXT")) returned 1 [0171.748] wcscmp (_String1="DisplayLanguageNames.pl.txt", _String2=".") returned 1 [0171.748] wcscmp (_String1="DisplayLanguageNames.pl.txt", _String2="..") returned 1 [0171.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d853c0 [0171.748] wcscpy (in: _Dest=0x3d853c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.748] wcscat (in: _Dest=0x3d853c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.748] wcscat (in: _Dest=0x3d853c0, _Source="DisplayLanguageNames.pl.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" [0171.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d853c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0171.749] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pl_PL.txt", cAlternateFileName="DI4ABE~1.TXT")) returned 1 [0171.749] wcscmp (_String1="DisplayLanguageNames.pl_PL.txt", _String2=".") returned 1 [0171.749] wcscmp (_String1="DisplayLanguageNames.pl_PL.txt", _String2="..") returned 1 [0171.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e67490 [0171.749] wcscpy (in: _Dest=0x3e67490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0171.749] wcscat (in: _Dest=0x3e67490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0171.749] wcscat (in: _Dest=0x3e67490, _Source="DisplayLanguageNames.pl_PL.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" [0171.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0172.134] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_BR.txt", cAlternateFileName="DIC9A4~1.TXT")) returned 1 [0172.134] wcscmp (_String1="DisplayLanguageNames.pt_BR.txt", _String2=".") returned 1 [0172.134] wcscmp (_String1="DisplayLanguageNames.pt_BR.txt", _String2="..") returned 1 [0172.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e67568 [0172.134] wcscpy (in: _Dest=0x3e67568, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0172.134] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0172.134] wcscat (in: _Dest=0x3e67568, _Source="DisplayLanguageNames.pt_BR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" [0172.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0172.633] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_PT.txt", cAlternateFileName="DI7FB1~1.TXT")) returned 1 [0174.044] wcscmp (_String1="DisplayLanguageNames.pt_PT.txt", _String2=".") returned 1 [0174.044] wcscmp (_String1="DisplayLanguageNames.pt_PT.txt", _String2="..") returned 1 [0174.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68648 [0174.045] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.045] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.045] wcscat (in: _Dest=0x3e68648, _Source="DisplayLanguageNames.pt_PT.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" [0174.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0174.410] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.pt_PT_PREEURO.txt", cAlternateFileName="DIB661~1.TXT")) returned 1 [0174.410] wcscmp (_String1="DisplayLanguageNames.pt_PT_PREEURO.txt", _String2=".") returned 1 [0174.410] wcscmp (_String1="DisplayLanguageNames.pt_PT_PREEURO.txt", _String2="..") returned 1 [0174.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4448 [0174.410] wcscpy (in: _Dest=0x3dc4448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.411] wcscat (in: _Dest=0x3dc4448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.411] wcscat (in: _Dest=0x3dc4448, _Source="DisplayLanguageNames.pt_PT_PREEURO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" [0174.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0174.412] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ro.txt", cAlternateFileName="DI0257~1.TXT")) returned 1 [0174.412] wcscmp (_String1="DisplayLanguageNames.ro.txt", _String2=".") returned 1 [0174.412] wcscmp (_String1="DisplayLanguageNames.ro.txt", _String2="..") returned 1 [0174.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85700 [0174.412] wcscpy (in: _Dest=0x3d85700, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.412] wcscat (in: _Dest=0x3d85700, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.412] wcscat (in: _Dest=0x3d85700, _Source="DisplayLanguageNames.ro.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" [0174.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0174.413] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ro_RO.txt", cAlternateFileName="DIC031~1.TXT")) returned 1 [0174.413] wcscmp (_String1="DisplayLanguageNames.ro_RO.txt", _String2=".") returned 1 [0174.413] wcscmp (_String1="DisplayLanguageNames.ro_RO.txt", _String2="..") returned 1 [0174.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68570 [0174.414] wcscpy (in: _Dest=0x3e68570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.414] wcscat (in: _Dest=0x3e68570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.414] wcscat (in: _Dest=0x3e68570, _Source="DisplayLanguageNames.ro_RO.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" [0174.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0174.415] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7498, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru.txt", cAlternateFileName="DIBDC2~1.TXT")) returned 1 [0174.415] wcscmp (_String1="DisplayLanguageNames.ru.txt", _String2=".") returned 1 [0174.415] wcscmp (_String1="DisplayLanguageNames.ru.txt", _String2="..") returned 1 [0174.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85cb0 [0174.415] wcscpy (in: _Dest=0x3d85cb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.415] wcscat (in: _Dest=0x3d85cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.415] wcscat (in: _Dest=0x3d85cb0, _Source="DisplayLanguageNames.ru.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" [0174.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0174.416] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7498, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru_RU.txt", cAlternateFileName="DI759A~1.TXT")) returned 1 [0174.416] wcscmp (_String1="DisplayLanguageNames.ru_RU.txt", _String2=".") returned 1 [0174.416] wcscmp (_String1="DisplayLanguageNames.ru_RU.txt", _String2="..") returned 1 [0174.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37cd8 [0174.417] wcscpy (in: _Dest=0x3e37cd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.417] wcscat (in: _Dest=0x3e37cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.417] wcscat (in: _Dest=0x3e37cd8, _Source="DisplayLanguageNames.ru_RU.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" [0174.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0174.418] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb430840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.ru_UA.txt", cAlternateFileName="DI0840~1.TXT")) returned 1 [0174.418] wcscmp (_String1="DisplayLanguageNames.ru_UA.txt", _String2=".") returned 1 [0174.418] wcscmp (_String1="DisplayLanguageNames.ru_UA.txt", _String2="..") returned 1 [0174.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e38a58 [0174.418] wcscpy (in: _Dest=0x3e38a58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.418] wcscat (in: _Dest=0x3e38a58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.418] wcscat (in: _Dest=0x3e38a58, _Source="DisplayLanguageNames.ru_UA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" [0174.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0174.419] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sk.txt", cAlternateFileName="DIDD84~1.TXT")) returned 1 [0174.419] wcscmp (_String1="DisplayLanguageNames.sk.txt", _String2=".") returned 1 [0174.419] wcscmp (_String1="DisplayLanguageNames.sk.txt", _String2="..") returned 1 [0174.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85e50 [0174.419] wcscpy (in: _Dest=0x3d85e50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.419] wcscat (in: _Dest=0x3d85e50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.419] wcscat (in: _Dest=0x3d85e50, _Source="DisplayLanguageNames.sk.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" [0174.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0174.421] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sk_SK.txt", cAlternateFileName="DI9804~1.TXT")) returned 1 [0174.421] wcscmp (_String1="DisplayLanguageNames.sk_SK.txt", _String2=".") returned 1 [0174.421] wcscmp (_String1="DisplayLanguageNames.sk_SK.txt", _String2="..") returned 1 [0174.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e382c0 [0174.421] wcscpy (in: _Dest=0x3e382c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.421] wcscat (in: _Dest=0x3e382c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.421] wcscat (in: _Dest=0x3e382c0, _Source="DisplayLanguageNames.sk_SK.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" [0174.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e382c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0174.422] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sl.txt", cAlternateFileName="DIF8FC~1.TXT")) returned 1 [0174.422] wcscmp (_String1="DisplayLanguageNames.sl.txt", _String2=".") returned 1 [0174.422] wcscmp (_String1="DisplayLanguageNames.sl.txt", _String2="..") returned 1 [0174.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85f20 [0174.423] wcscpy (in: _Dest=0x3d85f20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.423] wcscat (in: _Dest=0x3d85f20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.423] wcscat (in: _Dest=0x3d85f20, _Source="DisplayLanguageNames.sl.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" [0174.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0174.424] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sl_SI.txt", cAlternateFileName="DI9B2F~1.TXT")) returned 1 [0174.424] wcscmp (_String1="DisplayLanguageNames.sl_SI.txt", _String2=".") returned 1 [0174.424] wcscmp (_String1="DisplayLanguageNames.sl_SI.txt", _String2="..") returned 1 [0174.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37030 [0174.424] wcscpy (in: _Dest=0x3e37030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.424] wcscat (in: _Dest=0x3e37030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.424] wcscat (in: _Dest=0x3e37030, _Source="DisplayLanguageNames.sl_SI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" [0174.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0174.425] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x715c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv.txt", cAlternateFileName="DIF2A9~1.TXT")) returned 1 [0174.425] wcscmp (_String1="DisplayLanguageNames.sv.txt", _String2=".") returned 1 [0174.425] wcscmp (_String1="DisplayLanguageNames.sv.txt", _String2="..") returned 1 [0174.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85ff0 [0174.426] wcscpy (in: _Dest=0x3d85ff0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.426] wcscat (in: _Dest=0x3d85ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.426] wcscat (in: _Dest=0x3d85ff0, _Source="DisplayLanguageNames.sv.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" [0174.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0174.427] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7144, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv_FI.txt", cAlternateFileName="DIE445~1.TXT")) returned 1 [0174.427] wcscmp (_String1="DisplayLanguageNames.sv_FI.txt", _String2=".") returned 1 [0174.427] wcscmp (_String1="DisplayLanguageNames.sv_FI.txt", _String2="..") returned 1 [0174.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e38110 [0174.427] wcscpy (in: _Dest=0x3e38110, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.427] wcscat (in: _Dest=0x3e38110, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.427] wcscat (in: _Dest=0x3e38110, _Source="DisplayLanguageNames.sv_FI.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" [0174.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0174.428] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x715c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.sv_SE.txt", cAlternateFileName="DISPLA~4.TXT")) returned 1 [0174.428] wcscmp (_String1="DisplayLanguageNames.sv_SE.txt", _String2=".") returned 1 [0174.428] wcscmp (_String1="DisplayLanguageNames.sv_SE.txt", _String2="..") returned 1 [0174.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37540 [0174.428] wcscpy (in: _Dest=0x3e37540, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.428] wcscat (in: _Dest=0x3e37540, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.429] wcscat (in: _Dest=0x3e37540, _Source="DisplayLanguageNames.sv_SE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" [0174.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0174.430] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.tr.txt", cAlternateFileName="DIA3CE~1.TXT")) returned 1 [0174.430] wcscmp (_String1="DisplayLanguageNames.tr.txt", _String2=".") returned 1 [0174.430] wcscmp (_String1="DisplayLanguageNames.tr.txt", _String2="..") returned 1 [0174.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d860c0 [0174.430] wcscpy (in: _Dest=0x3d860c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.430] wcscat (in: _Dest=0x3d860c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.430] wcscat (in: _Dest=0x3d860c0, _Source="DisplayLanguageNames.tr.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" [0174.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d860c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0174.431] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.tr_TR.txt", cAlternateFileName="DIF209~1.TXT")) returned 1 [0174.431] wcscmp (_String1="DisplayLanguageNames.tr_TR.txt", _String2=".") returned 1 [0174.431] wcscmp (_String1="DisplayLanguageNames.tr_TR.txt", _String2="..") returned 1 [0174.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0174.432] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.432] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.432] wcscat (in: _Dest=0x3e381e8, _Source="DisplayLanguageNames.tr_TR.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" [0174.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e381e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0174.433] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x724e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.uk.txt", cAlternateFileName="DI4480~1.TXT")) returned 1 [0174.433] wcscmp (_String1="DisplayLanguageNames.uk.txt", _String2=".") returned 1 [0174.433] wcscmp (_String1="DisplayLanguageNames.uk.txt", _String2="..") returned 1 [0174.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d86190 [0174.433] wcscpy (in: _Dest=0x3d86190, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.433] wcscat (in: _Dest=0x3d86190, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.433] wcscat (in: _Dest=0x3d86190, _Source="DisplayLanguageNames.uk.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" [0174.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0174.435] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x724e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.uk_UA.txt", cAlternateFileName="DICC10~1.TXT")) returned 1 [0174.435] wcscmp (_String1="DisplayLanguageNames.uk_UA.txt", _String2=".") returned 1 [0174.435] wcscmp (_String1="DisplayLanguageNames.uk_UA.txt", _String2="..") returned 1 [0174.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e16b40 [0174.435] wcscpy (in: _Dest=0x3e16b40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.435] wcscat (in: _Dest=0x3e16b40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.435] wcscat (in: _Dest=0x3e16b40, _Source="DisplayLanguageNames.uk_UA.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" [0174.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e16b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0174.436] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6068, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_CN.txt", cAlternateFileName="DISPLA~3.TXT")) returned 1 [0174.436] wcscmp (_String1="DisplayLanguageNames.zh_CN.txt", _String2=".") returned 1 [0174.436] wcscmp (_String1="DisplayLanguageNames.zh_CN.txt", _String2="..") returned 1 [0174.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e16c18 [0174.436] wcscpy (in: _Dest=0x3e16c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.436] wcscat (in: _Dest=0x3e16c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.436] wcscat (in: _Dest=0x3e16c18, _Source="DisplayLanguageNames.zh_CN.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" [0174.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e16c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0174.438] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x605a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW.txt", cAlternateFileName="DISPLA~1.TXT")) returned 1 [0174.438] wcscmp (_String1="DisplayLanguageNames.zh_TW.txt", _String2=".") returned 1 [0174.438] wcscmp (_String1="DisplayLanguageNames.zh_TW.txt", _String2="..") returned 1 [0174.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e18130 [0174.438] wcscpy (in: _Dest=0x3e18130, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.438] wcscat (in: _Dest=0x3e18130, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.438] wcscat (in: _Dest=0x3e18130, _Source="DisplayLanguageNames.zh_TW.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" [0174.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e18130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0174.440] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x608c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW_STROKE.txt", cAlternateFileName="DISPLA~2.TXT")) returned 1 [0174.440] wcscmp (_String1="DisplayLanguageNames.zh_TW_STROKE.txt", _String2=".") returned 1 [0174.440] wcscmp (_String1="DisplayLanguageNames.zh_TW_STROKE.txt", _String2="..") returned 1 [0174.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4aa0 [0174.440] wcscpy (in: _Dest=0x3dc4aa0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2" [0174.440] wcscat (in: _Dest=0x3dc4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\" [0174.440] wcscat (in: _Dest=0x3dc4aa0, _Source="DisplayLanguageNames.zh_TW_STROKE.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" [0174.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0174.441] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadf0e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x608c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.zh_TW_STROKE.txt", cAlternateFileName="DISPLA~2.TXT")) returned 0 [0174.441] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0174.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a550b0) returned 1 [0174.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df48c0) returned 1 [0174.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7150) returned 1 Thread: id = 1264 os_tid = 0x1b54 [0137.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45800 [0137.224] wcscpy (in: _Dest=0x3d45800, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" [0137.224] wcscat (in: _Dest=0x3d45800, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\" [0137.224] wcscat (in: _Dest=0x3d45800, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*" [0137.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0137.224] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d8c0 [0139.115] wcscmp (_String1=".", _String2=".") returned 0 [0139.115] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.115] wcscmp (_String1="..", _String2=".") returned 1 [0139.115] wcscmp (_String1="..", _String2="..") returned 0 [0139.115] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 1 [0139.115] wcscmp (_String1="Proximity", _String2=".") returned 1 [0139.115] wcscmp (_String1="Proximity", _String2="..") returned 1 [0139.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c70f8 [0139.115] wcscpy (in: _Dest=0x2c70f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers" [0139.115] wcscat (in: _Dest=0x2c70f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\" [0139.115] wcscat (in: _Dest=0x2c70f8, _Source="Proximity" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" [0148.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c70f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb4 [0148.939] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 0 [0148.939] FindClose (in: hFindFile=0x7a2d8c0 | out: hFindFile=0x7a2d8c0) returned 1 [0148.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0148.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45800) returned 1 [0148.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f00) returned 1 Thread: id = 1265 os_tid = 0x1b58 [0137.225] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\HYY4-Se8Hpasf9FZJ.m4a" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\hyy4-se8hpasf9fzj.m4a")) returned 0x20 [0137.225] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\HYY4-Se8Hpasf9FZJ.m4a", dwFileAttributes=0x20) returned 1 [0137.762] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\HYY4-Se8Hpasf9FZJ.m4a" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\hyy4-se8hpasf9fzj.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b84 [0137.762] GetFileSizeEx (in: hFile=0x1b84, lpFileSize=0x79cfb3c | out: lpFileSize=0x79cfb3c*=33963) returned 1 [0137.762] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x84a7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.762] ReadFile (in: hFile=0x1b84, lpBuffer=0x79cfb18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x79cfb28, lpOverlapped=0x0 | out: lpBuffer=0x79cfb18*, lpNumberOfBytesRead=0x79cfb28*=0x4, lpOverlapped=0x0) returned 1 [0137.764] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0137.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0137.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0137.764] NtQuerySystemTime (in: CurrentTime=0x79cfab0 | out: CurrentTime=0x79cfab0*=132462177170292000) returned 0x0 [0137.764] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x9746f21 [0137.764] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x4c1e0c32 [0137.764] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x113fa306 [0137.764] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x4bb5b3c [0137.764] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x1fddbf53 [0137.764] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x2bab0f2a [0137.764] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x4af022df [0137.764] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x9b6d2c [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x66660fb3 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x54b31d7e [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x886a042 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x7f680c85 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x6831ba97 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x1762981d [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x219006a6 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x1b7c0e95 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x5bd8e9d4 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x2a5573dd [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0xa88743a [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x603b5ad6 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x7c747d3c [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x450cd6f7 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x3fafdd92 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x7f17128d [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x64401546 [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x4d12eed [0137.765] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x5f98950e [0137.766] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x4b1efbc7 [0137.766] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x5b05b1 [0137.766] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x309284ee [0137.766] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x361ccdce [0137.766] RtlRandomEx (in: Seed=0x79cfaa8 | out: Seed=0x79cfaa8) returned 0x7f786ae4 [0137.776] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.776] ReadFile (in: hFile=0x1b84, lpBuffer=0x7b4bf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x79cfab0, lpOverlapped=0x0 | out: lpBuffer=0x7b4bf68*, lpNumberOfBytesRead=0x79cfab0*=0x3c00, lpOverlapped=0x0) returned 1 [0137.776] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde60 [0137.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0137.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0137.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3920) returned 1 [0137.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b4fb70 [0137.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0137.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0137.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3178) returned 1 [0137.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0137.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0137.777] WriteFile (in: hFile=0x1b84, lpBuffer=0x7b4fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x79cfab0, lpOverlapped=0x0 | out: lpBuffer=0x7b4fb70*, lpNumberOfBytesWritten=0x79cfab0*=0x3c00, lpOverlapped=0x0) returned 1 [0138.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b4fb70) returned 1 [0138.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b4bf68) returned 1 [0138.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad77f0 [0138.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c78) returned 1 [0138.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad7ab0 [0138.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0138.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ca0 [0138.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ca0) returned 1 [0138.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0138.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25f68) returned 1 [0138.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55a90 [0138.110] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.110] WriteFile (in: hFile=0x1b84, lpBuffer=0x3d55a90*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x79cfb30, lpOverlapped=0x0 | out: lpBuffer=0x3d55a90*, lpNumberOfBytesWritten=0x79cfb30*=0x11c, lpOverlapped=0x0) returned 1 [0138.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bddd0 [0138.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0138.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0138.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x7a38658 [0138.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0138.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0138.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0138.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0138.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6f68 [0138.189] sprintf (in: _Dest=0x2fe6f68, _Format="%c%c" | out: _Dest="65") returned 2 [0138.189] sprintf (in: _Dest=0x2fe6f6a, _Format="%c%c" | out: _Dest="31") returned 2 [0138.189] sprintf (in: _Dest=0x2fe6f6c, _Format="%c%c" | out: _Dest="6c") returned 2 [0138.189] sprintf (in: _Dest=0x2fe6f6e, _Format="%c%c" | out: _Dest="dc") returned 2 [0138.189] sprintf (in: _Dest=0x2fe6f70, _Format="%c%c" | out: _Dest="dc") returned 2 [0138.189] sprintf (in: _Dest=0x2fe6f72, _Format="%c%c" | out: _Dest="f2") returned 2 [0138.189] sprintf (in: _Dest=0x2fe6f74, _Format="%c%c" | out: _Dest="0f") returned 2 [0138.189] sprintf (in: _Dest=0x2fe6f76, _Format="%c%c" | out: _Dest="1a") returned 2 [0138.189] sprintf (in: _Dest=0x2fe6f78, _Format="%c%c" | out: _Dest="8e") returned 2 [0138.189] sprintf (in: _Dest=0x2fe6f7a, _Format="%c%c" | out: _Dest="31") returned 2 [0138.189] sprintf (in: _Dest=0x2fe6f7c, _Format="%c%c" | out: _Dest="97") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f7e, _Format="%c%c" | out: _Dest="d6") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f80, _Format="%c%c" | out: _Dest="25") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f82, _Format="%c%c" | out: _Dest="e7") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f84, _Format="%c%c" | out: _Dest="09") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f86, _Format="%c%c" | out: _Dest="19") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f88, _Format="%c%c" | out: _Dest="6f") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f8a, _Format="%c%c" | out: _Dest="fb") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f8c, _Format="%c%c" | out: _Dest="4d") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f8e, _Format="%c%c" | out: _Dest="89") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f90, _Format="%c%c" | out: _Dest="de") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f92, _Format="%c%c" | out: _Dest="ab") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f94, _Format="%c%c" | out: _Dest="f5") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f96, _Format="%c%c" | out: _Dest="46") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f98, _Format="%c%c" | out: _Dest="b7") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f9a, _Format="%c%c" | out: _Dest="dd") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f9c, _Format="%c%c" | out: _Dest="d5") returned 2 [0138.190] sprintf (in: _Dest=0x2fe6f9e, _Format="%c%c" | out: _Dest="e1") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fa0, _Format="%c%c" | out: _Dest="30") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fa2, _Format="%c%c" | out: _Dest="1e") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fa4, _Format="%c%c" | out: _Dest="37") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fa6, _Format="%c%c" | out: _Dest="e9") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fa8, _Format="%c%c" | out: _Dest="6f") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6faa, _Format="%c%c" | out: _Dest="34") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fac, _Format="%c%c" | out: _Dest="9d") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fae, _Format="%c%c" | out: _Dest="b2") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fb0, _Format="%c%c" | out: _Dest="5e") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fb2, _Format="%c%c" | out: _Dest="14") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fb4, _Format="%c%c" | out: _Dest="cf") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fb6, _Format="%c%c" | out: _Dest="8e") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fb8, _Format="%c%c" | out: _Dest="41") returned 2 [0138.191] sprintf (in: _Dest=0x2fe6fba, _Format="%c%c" | out: _Dest="7f") returned 2 [0138.191] RtlInitAnsiString (in: DestinationString=0x79cfab8, SourceString="65316cdcdcf20f1a8e3197d625e709196ffb4d89deabf546b7ddd5e1301e37e96f349db25e14cf8e417f" | out: DestinationString="65316cdcdcf20f1a8e3197d625e709196ffb4d89deabf546b7ddd5e1301e37e96f349db25e14cf8e417f") [0138.191] RtlAnsiStringToUnicodeString (in: DestinationString=0x79cfab0, SourceString="65316cdcdcf20f1a8e3197d625e709196ffb4d89deabf546b7ddd5e1301e37e96f349db25e14cf8e417f", AllocateDestinationString=1 | out: DestinationString="65316cdcdcf20f1a8e3197d625e709196ffb4d89deabf546b7ddd5e1301e37e96f349db25e14cf8e417f") returned 0x0 [0138.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6e70 [0138.192] wcscat (in: _Dest=0x3053720, _Source="65316cdcdcf20f1a8e319" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\65316cdcdcf20f1a8e319") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\65316cdcdcf20f1a8e319" [0138.192] wcscat (in: _Dest=0x3053720, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\65316cdcdcf20f1a8e319.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\65316cdcdcf20f1a8e319.68814f" [0138.192] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\65316cdcdcf20f1a8e319.68814f", NtPathName=0x79cfaa8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\65316cdcdcf20f1a8e319.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66858 [0138.192] NtSetInformationFile (FileHandle=0x1b84, IoStatusBlock=0x79cfab0, FileInformation=0x3e66858, Length=0xb4, FileInformationClass=0xa) returned 0x0 [0138.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 [0138.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a58760) returned 1 [0138.454] NtQueryInformationFile (in: FileHandle=0x1b84, IoStatusBlock=0x79cfa80, FileInformation=0x79cfa88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x79cfa80, FileInformation=0x79cfa88) returned 0x0 [0138.454] NtSetInformationFile (FileHandle=0x1b84, IoStatusBlock=0x79cfa80, FileInformation=0x79cfa88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 [0138.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 [0138.456] FlushFileBuffers (hFile=0x1b84) returned 1 [0138.489] CloseHandle (hObject=0x1b84) returned 1 [0138.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7578 [0138.490] wcscpy (in: _Dest=0x3eb7578, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0138.490] wcscat (in: _Dest=0x3eb7578, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" [0138.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\68814f-readme.txt")) returned 0x20 [0138.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7578) returned 1 [0138.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb74e0) returned 1 Thread: id = 1266 os_tid = 0x1b5c [0137.228] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\IYDfHbvySdv3.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\iydfhbvysdv3.wav")) returned 0x20 [0137.229] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\IYDfHbvySdv3.wav", dwFileAttributes=0x20) returned 1 [0137.824] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\IYDfHbvySdv3.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\iydfhbvysdv3.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b80 [0137.824] GetFileSizeEx (in: hFile=0x1b80, lpFileSize=0x9b5f8a4 | out: lpFileSize=0x9b5f8a4*=13342) returned 1 [0137.824] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x341a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.824] ReadFile (in: hFile=0x1b80, lpBuffer=0x9b5f880, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b5f890, lpOverlapped=0x0 | out: lpBuffer=0x9b5f880*, lpNumberOfBytesRead=0x9b5f890*=0x4, lpOverlapped=0x0) returned 1 [0137.826] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0137.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fc0 [0137.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0137.827] NtQuerySystemTime (in: CurrentTime=0x9b5f818 | out: CurrentTime=0x9b5f818*=132462177170760000) returned 0x0 [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x76b5a44a [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x1c389249 [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x60f01f49 [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x3197abeb [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x5fdda34 [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0xe0345cb [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x5045f5d9 [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0xb4bbf61 [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x81da921 [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x1f63bc27 [0137.827] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x34434b1e [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x6619c075 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x76ba4ab [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x775ca9d7 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x2255c42f [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x684f972e [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x5230777b [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x188575f4 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0xcc61568 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x51327204 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x652da0e1 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x5d8a9615 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x2518e25c [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x7b5e0ed9 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0xe45d44a [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x1060b1c8 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x737e80c9 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x655a04f0 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x771ae80f [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x43d851d9 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x34ac8af0 [0137.828] RtlRandomEx (in: Seed=0x9b5f810 | out: Seed=0x9b5f810) returned 0x68390ad5 [0137.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3178) returned 1 [0137.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b53778 [0137.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b57380 [0137.837] ReadFile (in: hFile=0x1b80, lpBuffer=0x7b53778, nNumberOfBytesToRead=0x341e, lpNumberOfBytesRead=0x9b5f80c, lpOverlapped=0x0 | out: lpBuffer=0x7b53778*, lpNumberOfBytesRead=0x9b5f80c*=0x341e, lpOverlapped=0x0) returned 1 [0137.838] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.838] WriteFile (in: hFile=0x1b80, lpBuffer=0x7b57380*, nNumberOfBytesToWrite=0x341e, lpNumberOfBytesWritten=0x9b5f810, lpOverlapped=0x0 | out: lpBuffer=0x7b57380*, lpNumberOfBytesWritten=0x9b5f810*=0x341e, lpOverlapped=0x0) returned 1 [0138.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0138.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a88 [0138.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a88) returned 1 [0138.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b57380) returned 1 [0138.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b53778) returned 1 [0138.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0138.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x7a386c8 [0138.116] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.116] WriteFile (in: hFile=0x1b80, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x9b5f898, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0x9b5f898*=0x112, lpOverlapped=0x0) returned 1 [0138.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bddd0 [0138.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0138.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4140) returned 1 [0138.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0138.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0138.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0138.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec46e0) returned 1 [0138.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0138.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e84538 [0138.199] sprintf (in: _Dest=0x3e84538, _Format="%c%c" | out: _Dest="1d") returned 2 [0138.199] sprintf (in: _Dest=0x3e8453a, _Format="%c%c" | out: _Dest="32") returned 2 [0138.199] sprintf (in: _Dest=0x3e8453c, _Format="%c%c" | out: _Dest="85") returned 2 [0138.199] sprintf (in: _Dest=0x3e8453e, _Format="%c%c" | out: _Dest="21") returned 2 [0138.199] sprintf (in: _Dest=0x3e84540, _Format="%c%c" | out: _Dest="bc") returned 2 [0138.199] sprintf (in: _Dest=0x3e84542, _Format="%c%c" | out: _Dest="45") returned 2 [0138.199] sprintf (in: _Dest=0x3e84544, _Format="%c%c" | out: _Dest="d1") returned 2 [0138.199] sprintf (in: _Dest=0x3e84546, _Format="%c%c" | out: _Dest="83") returned 2 [0138.199] sprintf (in: _Dest=0x3e84548, _Format="%c%c" | out: _Dest="63") returned 2 [0138.199] sprintf (in: _Dest=0x3e8454a, _Format="%c%c" | out: _Dest="17") returned 2 [0138.199] sprintf (in: _Dest=0x3e8454c, _Format="%c%c" | out: _Dest="10") returned 2 [0138.199] sprintf (in: _Dest=0x3e8454e, _Format="%c%c" | out: _Dest="b3") returned 2 [0138.199] sprintf (in: _Dest=0x3e84550, _Format="%c%c" | out: _Dest="c7") returned 2 [0138.199] sprintf (in: _Dest=0x3e84552, _Format="%c%c" | out: _Dest="f9") returned 2 [0138.199] sprintf (in: _Dest=0x3e84554, _Format="%c%c" | out: _Dest="c8") returned 2 [0138.199] sprintf (in: _Dest=0x3e84556, _Format="%c%c" | out: _Dest="c2") returned 2 [0138.199] sprintf (in: _Dest=0x3e84558, _Format="%c%c" | out: _Dest="ab") returned 2 [0138.200] sprintf (in: _Dest=0x3e8455a, _Format="%c%c" | out: _Dest="dd") returned 2 [0138.200] sprintf (in: _Dest=0x3e8455c, _Format="%c%c" | out: _Dest="9a") returned 2 [0138.200] sprintf (in: _Dest=0x3e8455e, _Format="%c%c" | out: _Dest="82") returned 2 [0138.200] sprintf (in: _Dest=0x3e84560, _Format="%c%c" | out: _Dest="8a") returned 2 [0138.200] sprintf (in: _Dest=0x3e84562, _Format="%c%c" | out: _Dest="1c") returned 2 [0138.200] sprintf (in: _Dest=0x3e84564, _Format="%c%c" | out: _Dest="38") returned 2 [0138.200] sprintf (in: _Dest=0x3e84566, _Format="%c%c" | out: _Dest="6c") returned 2 [0138.200] sprintf (in: _Dest=0x3e84568, _Format="%c%c" | out: _Dest="99") returned 2 [0138.200] sprintf (in: _Dest=0x3e8456a, _Format="%c%c" | out: _Dest="c2") returned 2 [0138.200] sprintf (in: _Dest=0x3e8456c, _Format="%c%c" | out: _Dest="e6") returned 2 [0138.200] sprintf (in: _Dest=0x3e8456e, _Format="%c%c" | out: _Dest="e7") returned 2 [0138.200] sprintf (in: _Dest=0x3e84570, _Format="%c%c" | out: _Dest="4c") returned 2 [0138.200] sprintf (in: _Dest=0x3e84572, _Format="%c%c" | out: _Dest="02") returned 2 [0138.200] sprintf (in: _Dest=0x3e84574, _Format="%c%c" | out: _Dest="1f") returned 2 [0138.200] sprintf (in: _Dest=0x3e84576, _Format="%c%c" | out: _Dest="b9") returned 2 [0138.200] RtlInitAnsiString (in: DestinationString=0x9b5f820, SourceString="1d328521bc45d183631710b3c7f9c8c2abdd9a828a1c386c99c2e6e74c021fb9" | out: DestinationString="1d328521bc45d183631710b3c7f9c8c2abdd9a828a1c386c99c2e6e74c021fb9") [0138.200] RtlAnsiStringToUnicodeString (in: DestinationString=0x9b5f818, SourceString="1d328521bc45d183631710b3c7f9c8c2abdd9a828a1c386c99c2e6e74c021fb9", AllocateDestinationString=1 | out: DestinationString="1d328521bc45d183631710b3c7f9c8c2abdd9a828a1c386c99c2e6e74c021fb9") returned 0x0 [0138.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45650 [0138.201] wcscat (in: _Dest=0x3df4fa0, _Source="1d328521bc45d183" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\1d328521bc45d183") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\1d328521bc45d183" [0138.201] wcscat (in: _Dest=0x3df4fa0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\1d328521bc45d183.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\1d328521bc45d183.68814f" [0138.201] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\1d328521bc45d183.68814f", NtPathName=0x9b5f810, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\1d328521bc45d183.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7880 [0138.201] NtSetInformationFile (FileHandle=0x1b80, IoStatusBlock=0x9b5f818, FileInformation=0x2ff7880, Length=0xaa, FileInformationClass=0xa) returned 0x0 [0138.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 [0138.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7e088) returned 1 [0138.457] NtQueryInformationFile (in: FileHandle=0x1b80, IoStatusBlock=0x9b5f7e8, FileInformation=0x9b5f7f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9b5f7e8, FileInformation=0x9b5f7f0) returned 0x0 [0138.457] NtSetInformationFile (FileHandle=0x1b80, IoStatusBlock=0x9b5f7e8, FileInformation=0x9b5f7f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 [0138.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 [0138.463] FlushFileBuffers (hFile=0x1b80) returned 1 [0138.477] CloseHandle (hObject=0x1b80) returned 1 [0138.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5698 [0138.478] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0138.478] wcscat (in: _Dest=0x3eb5698, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" [0138.478] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\68814f-readme.txt")) returned 0x20 [0138.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 [0138.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f90) returned 1 Thread: id = 1267 os_tid = 0x1b60 [0137.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5a28 [0137.229] wcscpy (in: _Dest=0x3eb5a28, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" [0137.229] wcscat (in: _Dest=0x3eb5a28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0137.229] wcscat (in: _Dest=0x3eb5a28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\*") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\*" [0137.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55cb8 [0137.229] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\*", lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3b51aef0, ftCreationTime.dwHighDateTime=0x1d5dce8, ftLastAccessTime.dwLowDateTime=0x91bf66d0, ftLastAccessTime.dwHighDateTime=0x1d5da70, ftLastWriteTime.dwLowDateTime=0x91bf66d0, ftLastWriteTime.dwHighDateTime=0x1d5da70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0137.230] wcscmp (_String1=".", _String2=".") returned 0 [0137.230] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3b51aef0, ftCreationTime.dwHighDateTime=0x1d5dce8, ftLastAccessTime.dwLowDateTime=0x91bf66d0, ftLastAccessTime.dwHighDateTime=0x1d5da70, ftLastWriteTime.dwLowDateTime=0x91bf66d0, ftLastWriteTime.dwHighDateTime=0x1d5da70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.230] wcscmp (_String1="..", _String2=".") returned 1 [0137.230] wcscmp (_String1="..", _String2="..") returned 0 [0137.230] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cb3ac0, ftCreationTime.dwHighDateTime=0x1d5e7a1, ftLastAccessTime.dwLowDateTime=0xc89b5690, ftLastAccessTime.dwHighDateTime=0x1d5da2b, ftLastWriteTime.dwLowDateTime=0xc89b5690, ftLastWriteTime.dwHighDateTime=0x1d5da2b, nFileSizeHigh=0x0, nFileSizeLow=0x2a45, dwReserved0=0x0, dwReserved1=0x0, cFileName="e8QRk nKoJh8vyWNATkg.wav", cAlternateFileName="E8QRKN~1.WAV")) returned 1 [0137.230] wcscmp (_String1="e8QRk nKoJh8vyWNATkg.wav", _String2=".") returned 1 [0137.230] wcscmp (_String1="e8QRk nKoJh8vyWNATkg.wav", _String2="..") returned 1 [0137.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d408f8 [0137.230] wcscpy (in: _Dest=0x3d408f8, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" [0137.230] wcscat (in: _Dest=0x3d408f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0137.230] wcscat (in: _Dest=0x3d408f8, _Source="e8QRk nKoJh8vyWNATkg.wav" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e8QRk nKoJh8vyWNATkg.wav") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e8QRk nKoJh8vyWNATkg.wav" [0151.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d408f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d0 [0151.132] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf529b0, ftCreationTime.dwHighDateTime=0x1d5e08b, ftLastAccessTime.dwLowDateTime=0x799b6dc0, ftLastAccessTime.dwHighDateTime=0x1d5e898, ftLastWriteTime.dwLowDateTime=0x799b6dc0, ftLastWriteTime.dwHighDateTime=0x1d5e898, nFileSizeHigh=0x0, nFileSizeLow=0xf863, dwReserved0=0x0, dwReserved1=0x0, cFileName="H5UeJsqg7s156.mp3", cAlternateFileName="H5UEJS~1.MP3")) returned 1 [0151.133] wcscmp (_String1="H5UeJsqg7s156.mp3", _String2=".") returned 1 [0151.133] wcscmp (_String1="H5UeJsqg7s156.mp3", _String2="..") returned 1 [0151.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6ad8 [0151.133] wcscpy (in: _Dest=0x2ff6ad8, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" [0151.133] wcscat (in: _Dest=0x2ff6ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0151.133] wcscat (in: _Dest=0x2ff6ad8, _Source="H5UeJsqg7s156.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\H5UeJsqg7s156.mp3") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\H5UeJsqg7s156.mp3" [0151.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24cc [0151.134] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6854d0, ftCreationTime.dwHighDateTime=0x1d5e49d, ftLastAccessTime.dwLowDateTime=0xf2133d70, ftLastAccessTime.dwHighDateTime=0x1d5e571, ftLastWriteTime.dwLowDateTime=0xf2133d70, ftLastWriteTime.dwHighDateTime=0x1d5e571, nFileSizeHigh=0x0, nFileSizeLow=0x1675, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q4rBw.mp3", cAlternateFileName="")) returned 1 [0151.134] wcscmp (_String1="Q4rBw.mp3", _String2=".") returned 1 [0151.134] wcscmp (_String1="Q4rBw.mp3", _String2="..") returned 1 [0151.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f8d8 [0151.134] wcscpy (in: _Dest=0x7a5f8d8, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" [0151.134] wcscat (in: _Dest=0x7a5f8d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0151.134] wcscat (in: _Dest=0x7a5f8d8, _Source="Q4rBw.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\Q4rBw.mp3") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\Q4rBw.mp3" [0151.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c8 [0151.145] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f203b0, ftCreationTime.dwHighDateTime=0x1d5dcd1, ftLastAccessTime.dwLowDateTime=0x1ad55350, ftLastAccessTime.dwHighDateTime=0x1d5dda8, ftLastWriteTime.dwLowDateTime=0x1ad55350, ftLastWriteTime.dwHighDateTime=0x1d5dda8, nFileSizeHigh=0x0, nFileSizeLow=0x15777, dwReserved0=0x0, dwReserved1=0x0, cFileName="vq8sfX.m4a", cAlternateFileName="")) returned 1 [0151.145] wcscmp (_String1="vq8sfX.m4a", _String2=".") returned 1 [0151.145] wcscmp (_String1="vq8sfX.m4a", _String2="..") returned 1 [0151.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bdf8 [0151.146] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" [0151.146] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0151.146] wcscat (in: _Dest=0x35bdf8, _Source="vq8sfX.m4a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\vq8sfX.m4a") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\vq8sfX.m4a" [0151.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c4 [0151.147] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfa8b30, ftCreationTime.dwHighDateTime=0x1d5df08, ftLastAccessTime.dwLowDateTime=0x70b7bed0, ftLastAccessTime.dwHighDateTime=0x1d5dc67, ftLastWriteTime.dwLowDateTime=0x70b7bed0, ftLastWriteTime.dwHighDateTime=0x1d5dc67, nFileSizeHigh=0x0, nFileSizeLow=0x15993, dwReserved0=0x0, dwReserved1=0x0, cFileName="xGtO0I5CJmhkX7.mp3", cAlternateFileName="XGTO0I~1.MP3")) returned 1 [0151.147] wcscmp (_String1="xGtO0I5CJmhkX7.mp3", _String2=".") returned 1 [0151.147] wcscmp (_String1="xGtO0I5CJmhkX7.mp3", _String2="..") returned 1 [0151.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66198 [0151.148] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd" [0151.148] wcscat (in: _Dest=0x3e66198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0151.148] wcscat (in: _Dest=0x3e66198, _Source="xGtO0I5CJmhkX7.mp3" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\xGtO0I5CJmhkX7.mp3") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\xGtO0I5CJmhkX7.mp3" [0151.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c0 [0151.149] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfa8b30, ftCreationTime.dwHighDateTime=0x1d5df08, ftLastAccessTime.dwLowDateTime=0x70b7bed0, ftLastAccessTime.dwHighDateTime=0x1d5dc67, ftLastWriteTime.dwLowDateTime=0x70b7bed0, ftLastWriteTime.dwHighDateTime=0x1d5dc67, nFileSizeHigh=0x0, nFileSizeLow=0x15993, dwReserved0=0x0, dwReserved1=0x0, cFileName="xGtO0I5CJmhkX7.mp3", cAlternateFileName="XGTO0I~1.MP3")) returned 0 [0151.149] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0151.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55cb8) returned 1 [0151.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5a28) returned 1 [0151.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7318) returned 1 Thread: id = 1268 os_tid = 0x1b64 [0137.231] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\SJisE5uhfw-Yh-uO.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\sjise5uhfw-yh-uo.wav")) returned 0x20 [0137.231] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\SJisE5uhfw-Yh-uO.wav", dwFileAttributes=0x20) returned 1 [0137.838] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\SJisE5uhfw-Yh-uO.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\sjise5uhfw-yh-uo.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b78 [0137.839] GetFileSizeEx (in: hFile=0x1b78, lpFileSize=0xb4ff984 | out: lpFileSize=0xb4ff984*=84748) returned 1 [0137.839] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x14b08, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.839] ReadFile (in: hFile=0x1b78, lpBuffer=0xb4ff960, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb4ff970, lpOverlapped=0x0 | out: lpBuffer=0xb4ff960*, lpNumberOfBytesRead=0xb4ff970*=0x4, lpOverlapped=0x0) returned 1 [0137.841] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0137.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0137.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0137.841] NtQuerySystemTime (in: CurrentTime=0xb4ff8f8 | out: CurrentTime=0xb4ff8f8*=132462177170916000) returned 0x0 [0137.841] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x49868955 [0137.841] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x2b30a590 [0137.841] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x62caafe3 [0137.841] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x6689ff76 [0137.841] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x72459dc2 [0137.841] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x7f2d061 [0137.841] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x23df8813 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x5c794f61 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x70ed58f0 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0xdbfa1c0 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x36e8527 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x9499661 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x37d24bbb [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x6c6494d9 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x7aa75e7e [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x52ccf1f0 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x2be94fc [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x5573c78 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0xb67ecdc [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x282e07b9 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x1a947165 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x5d11406b [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x797041ae [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x363302fc [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x6dea1b70 [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x1e6298da [0137.842] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x3bd39caa [0137.843] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x7a486e68 [0137.843] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x4267d3ae [0137.843] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x9ca20a1 [0137.843] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x4a62d799 [0137.843] RtlRandomEx (in: Seed=0xb4ff8f0 | out: Seed=0xb4ff8f0) returned 0x78e6fe47 [0137.852] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.852] ReadFile (in: hFile=0x1b78, lpBuffer=0x7b5af88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb4ff8f8, lpOverlapped=0x0 | out: lpBuffer=0x7b5af88*, lpNumberOfBytesRead=0xb4ff8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0137.853] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde18 [0137.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0137.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0137.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3178) returned 1 [0137.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5eb90 [0137.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0137.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0137.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0137.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0137.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde18) returned 1 [0137.854] WriteFile (in: hFile=0x1b78, lpBuffer=0x7b5eb90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb4ff8f8, lpOverlapped=0x0 | out: lpBuffer=0x7b5eb90*, lpNumberOfBytesWritten=0xb4ff8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5eb90) returned 1 [0138.124] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.124] ReadFile (in: hFile=0x1b78, lpBuffer=0x7b5af88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb4ff8f8, lpOverlapped=0x0 | out: lpBuffer=0x7b5af88*, lpNumberOfBytesRead=0xb4ff8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.124] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde60 [0138.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec66e8 [0138.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec66e8) returned 1 [0138.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5eb90 [0138.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec66e8 [0138.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0138.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0138.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0138.125] WriteFile (in: hFile=0x1b78, lpBuffer=0x7b5eb90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb4ff8f8, lpOverlapped=0x0 | out: lpBuffer=0x7b5eb90*, lpNumberOfBytesWritten=0xb4ff8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5eb90) returned 1 [0138.132] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x10f0c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.132] ReadFile (in: hFile=0x1b78, lpBuffer=0x7b5af88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb4ff8f8, lpOverlapped=0x0 | out: lpBuffer=0x7b5af88*, lpNumberOfBytesRead=0xb4ff8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.132] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x10f0c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bde60 [0138.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0138.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0138.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5eb90 [0138.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0138.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0138.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0138.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0138.133] WriteFile (in: hFile=0x1b78, lpBuffer=0x7b5eb90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb4ff8f8, lpOverlapped=0x0 | out: lpBuffer=0x7b5eb90*, lpNumberOfBytesWritten=0xb4ff8f8*=0x3c00, lpOverlapped=0x0) returned 1 [0138.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5eb90) returned 1 [0138.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0858 [0138.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3178) returned 1 [0138.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad7870 [0138.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3178 [0138.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec66e8 [0138.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec66e8) returned 1 [0138.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bde60) returned 1 [0138.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15a) returned 0x3dce108 [0138.138] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.138] WriteFile (in: hFile=0x1b78, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0xb4ff978, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0xb4ff978*=0x15a, lpOverlapped=0x0) returned 1 [0138.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bddd0 [0138.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0138.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0138.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0138.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a377d0 [0138.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0138.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0138.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0138.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0138.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0138.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6f68 [0138.204] sprintf (in: _Dest=0x2fe6f68, _Format="%c%c" | out: _Dest="af") returned 2 [0138.204] sprintf (in: _Dest=0x2fe6f6a, _Format="%c%c" | out: _Dest="bb") returned 2 [0138.204] sprintf (in: _Dest=0x2fe6f6c, _Format="%c%c" | out: _Dest="61") returned 2 [0138.204] sprintf (in: _Dest=0x2fe6f6e, _Format="%c%c" | out: _Dest="b3") returned 2 [0138.204] sprintf (in: _Dest=0x2fe6f70, _Format="%c%c" | out: _Dest="0b") returned 2 [0138.204] sprintf (in: _Dest=0x2fe6f72, _Format="%c%c" | out: _Dest="fc") returned 2 [0138.204] sprintf (in: _Dest=0x2fe6f74, _Format="%c%c" | out: _Dest="bb") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f76, _Format="%c%c" | out: _Dest="b8") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f78, _Format="%c%c" | out: _Dest="6e") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f7a, _Format="%c%c" | out: _Dest="bf") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f7c, _Format="%c%c" | out: _Dest="f0") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f7e, _Format="%c%c" | out: _Dest="f8") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f80, _Format="%c%c" | out: _Dest="ca") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f82, _Format="%c%c" | out: _Dest="7a") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f84, _Format="%c%c" | out: _Dest="fc") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f86, _Format="%c%c" | out: _Dest="03") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f88, _Format="%c%c" | out: _Dest="6d") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f8a, _Format="%c%c" | out: _Dest="8e") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f8c, _Format="%c%c" | out: _Dest="4d") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f8e, _Format="%c%c" | out: _Dest="2c") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f90, _Format="%c%c" | out: _Dest="4e") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f92, _Format="%c%c" | out: _Dest="2b") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f94, _Format="%c%c" | out: _Dest="37") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f96, _Format="%c%c" | out: _Dest="c7") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f98, _Format="%c%c" | out: _Dest="c8") returned 2 [0138.205] sprintf (in: _Dest=0x2fe6f9a, _Format="%c%c" | out: _Dest="3a") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6f9c, _Format="%c%c" | out: _Dest="64") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6f9e, _Format="%c%c" | out: _Dest="e1") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fa0, _Format="%c%c" | out: _Dest="9e") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fa2, _Format="%c%c" | out: _Dest="77") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fa4, _Format="%c%c" | out: _Dest="25") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fa6, _Format="%c%c" | out: _Dest="6b") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fa8, _Format="%c%c" | out: _Dest="6f") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6faa, _Format="%c%c" | out: _Dest="a0") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fac, _Format="%c%c" | out: _Dest="36") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fae, _Format="%c%c" | out: _Dest="45") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fb0, _Format="%c%c" | out: _Dest="5e") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fb2, _Format="%c%c" | out: _Dest="7b") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fb4, _Format="%c%c" | out: _Dest="ae") returned 2 [0138.206] sprintf (in: _Dest=0x2fe6fb6, _Format="%c%c" | out: _Dest="a9") returned 2 [0138.206] RtlInitAnsiString (in: DestinationString=0xb4ff900, SourceString="afbb61b30bfcbbb86ebff0f8ca7afc036d8e4d2c4e2b37c7c83a64e19e77256b6fa036455e7baea9" | out: DestinationString="afbb61b30bfcbbb86ebff0f8ca7afc036d8e4d2c4e2b37c7c83a64e19e77256b6fa036455e7baea9") [0138.206] RtlAnsiStringToUnicodeString (in: DestinationString=0xb4ff8f8, SourceString="afbb61b30bfcbbb86ebff0f8ca7afc036d8e4d2c4e2b37c7c83a64e19e77256b6fa036455e7baea9", AllocateDestinationString=1 | out: DestinationString="afbb61b30bfcbbb86ebff0f8ca7afc036d8e4d2c4e2b37c7c83a64e19e77256b6fa036455e7baea9") returned 0x0 [0138.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c428 [0138.207] wcscat (in: _Dest=0x3053d08, _Source="afbb61b30bfcbbb86ebf" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\afbb61b30bfcbbb86ebf") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\afbb61b30bfcbbb86ebf" [0138.207] wcscat (in: _Dest=0x3053d08, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\afbb61b30bfcbbb86ebf.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\afbb61b30bfcbbb86ebf.68814f" [0138.207] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\afbb61b30bfcbbb86ebf.68814f", NtPathName=0xb4ff8f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\afbb61b30bfcbbb86ebf.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66918 [0138.207] NtSetInformationFile (FileHandle=0x1b78, IoStatusBlock=0xb4ff8f8, FileInformation=0x3e66918, Length=0xb2, FileInformationClass=0xa) returned 0x0 [0138.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66918) returned 1 [0138.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e800e0) returned 1 [0138.464] NtQueryInformationFile (in: FileHandle=0x1b78, IoStatusBlock=0xb4ff8c8, FileInformation=0xb4ff8d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb4ff8c8, FileInformation=0xb4ff8d0) returned 0x0 [0138.464] NtSetInformationFile (FileHandle=0x1b78, IoStatusBlock=0xb4ff8c8, FileInformation=0xb4ff8d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053d08) returned 1 [0138.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 [0138.465] FlushFileBuffers (hFile=0x1b78) returned 1 [0138.479] CloseHandle (hObject=0x1b78) returned 1 [0138.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5698 [0138.480] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0138.480] wcscat (in: _Dest=0x3eb5698, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" [0138.480] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\68814f-readme.txt")) returned 0x20 [0138.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 [0138.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7578) returned 1 Thread: id = 1269 os_tid = 0x1b68 [0137.232] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ZbgZ-8S.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\zbgz-8s.wav")) returned 0x20 [0137.232] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ZbgZ-8S.wav", dwFileAttributes=0x20) returned 1 [0137.876] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\ZbgZ-8S.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\zbgz-8s.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xca0 [0137.876] GetFileSizeEx (in: hFile=0xca0, lpFileSize=0xbbefcec | out: lpFileSize=0xbbefcec*=29702) returned 1 [0137.876] SetFilePointerEx (in: hFile=0xca0, liDistanceToMove=0x7402, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.876] ReadFile (in: hFile=0xca0, lpBuffer=0xbbefcc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbbefcd8, lpOverlapped=0x0 | out: lpBuffer=0xbbefcc8*, lpNumberOfBytesRead=0xbbefcd8*=0x4, lpOverlapped=0x0) returned 1 [0137.878] SetFilePointerEx (in: hFile=0xca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0137.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0137.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0137.879] NtQuerySystemTime (in: CurrentTime=0xbbefc60 | out: CurrentTime=0xbbefc60*=132462177171228000) returned 0x0 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x2627dd35 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x23090d21 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x405b69e [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x611af191 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x67f71470 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x14798b5f [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x74c97830 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x10211c1c [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x4c8846a5 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x2f9d2b39 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0xb519842 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x4efc21e3 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x2c80e117 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x3faef6a5 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x153f2a82 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x6688bb1e [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x1114df9e [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x2d96fcd8 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x70b22aff [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0xc9840e9 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x58d36cf0 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x5ef02c1f [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x19702d71 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x77d06691 [0137.879] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0xdb7574d [0137.880] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x89e3361 [0137.880] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x273a727f [0137.880] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x5f715fee [0137.880] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x15b2a701 [0137.880] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x2b5c6538 [0137.880] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x5c0a8192 [0137.880] RtlRandomEx (in: Seed=0xbbefc58 | out: Seed=0xbbefc58) returned 0x1378f9c6 [0138.318] SetFilePointerEx (in: hFile=0xca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.318] ReadFile (in: hFile=0xca0, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbbefc60, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0xbbefc60*=0x3c00, lpOverlapped=0x0) returned 1 [0138.319] SetFilePointerEx (in: hFile=0xca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a23ff0 [0138.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e069e0 [0138.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0138.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0138.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0138.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0138.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0138.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0138.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e069e0) returned 1 [0138.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0138.320] WriteFile (in: hFile=0xca0, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbbefc60, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0xbbefc60*=0x3c00, lpOverlapped=0x0) returned 1 [0138.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0138.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0138.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a377d0 [0138.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0138.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37800 [0138.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0138.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0138.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0138.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e069e0) returned 1 [0138.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0138.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec940 [0138.334] SetFilePointerEx (in: hFile=0xca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.334] WriteFile (in: hFile=0xca0, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xbbefce0, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xbbefce0*=0x108, lpOverlapped=0x0) returned 1 [0138.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a23ff0 [0138.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e069e0 [0138.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0138.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0138.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a344b0 [0138.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0138.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fc0 [0138.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fc0) returned 1 [0138.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e069e0) returned 1 [0138.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0138.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x7a386c8 [0138.341] sprintf (in: _Dest=0x7a386c8, _Format="%c%c" | out: _Dest="85") returned 2 [0138.341] sprintf (in: _Dest=0x7a386ca, _Format="%c%c" | out: _Dest="e1") returned 2 [0138.341] sprintf (in: _Dest=0x7a386cc, _Format="%c%c" | out: _Dest="4a") returned 2 [0138.341] sprintf (in: _Dest=0x7a386ce, _Format="%c%c" | out: _Dest="0d") returned 2 [0138.341] sprintf (in: _Dest=0x7a386d0, _Format="%c%c" | out: _Dest="b9") returned 2 [0138.341] sprintf (in: _Dest=0x7a386d2, _Format="%c%c" | out: _Dest="c6") returned 2 [0138.341] sprintf (in: _Dest=0x7a386d4, _Format="%c%c" | out: _Dest="37") returned 2 [0138.341] sprintf (in: _Dest=0x7a386d6, _Format="%c%c" | out: _Dest="06") returned 2 [0138.341] sprintf (in: _Dest=0x7a386d8, _Format="%c%c" | out: _Dest="d0") returned 2 [0138.341] sprintf (in: _Dest=0x7a386da, _Format="%c%c" | out: _Dest="38") returned 2 [0138.341] sprintf (in: _Dest=0x7a386dc, _Format="%c%c" | out: _Dest="3a") returned 2 [0138.341] sprintf (in: _Dest=0x7a386de, _Format="%c%c" | out: _Dest="c6") returned 2 [0138.341] sprintf (in: _Dest=0x7a386e0, _Format="%c%c" | out: _Dest="c1") returned 2 [0138.341] sprintf (in: _Dest=0x7a386e2, _Format="%c%c" | out: _Dest="3a") returned 2 [0138.341] sprintf (in: _Dest=0x7a386e4, _Format="%c%c" | out: _Dest="ff") returned 2 [0138.341] sprintf (in: _Dest=0x7a386e6, _Format="%c%c" | out: _Dest="22") returned 2 [0138.341] sprintf (in: _Dest=0x7a386e8, _Format="%c%c" | out: _Dest="bc") returned 2 [0138.341] sprintf (in: _Dest=0x7a386ea, _Format="%c%c" | out: _Dest="f3") returned 2 [0138.341] sprintf (in: _Dest=0x7a386ec, _Format="%c%c" | out: _Dest="0d") returned 2 [0138.341] sprintf (in: _Dest=0x7a386ee, _Format="%c%c" | out: _Dest="a2") returned 2 [0138.342] sprintf (in: _Dest=0x7a386f0, _Format="%c%c" | out: _Dest="15") returned 2 [0138.342] sprintf (in: _Dest=0x7a386f2, _Format="%c%c" | out: _Dest="c1") returned 2 [0138.342] RtlInitAnsiString (in: DestinationString=0xbbefc68, SourceString="85e14a0db9c63706d0383ac6c13aff22bcf30da215c1" | out: DestinationString="85e14a0db9c63706d0383ac6c13aff22bcf30da215c1") [0138.342] RtlAnsiStringToUnicodeString (in: DestinationString=0xbbefc60, SourceString="85e14a0db9c63706d0383ac6c13aff22bcf30da215c1", AllocateDestinationString=1 | out: DestinationString="85e14a0db9c63706d0383ac6c13aff22bcf30da215c1") returned 0x0 [0138.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee1148 [0138.342] wcscat (in: _Dest=0x7ad6020, _Source="85e14a0db9c" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\85e14a0db9c") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\85e14a0db9c" [0138.342] wcscat (in: _Dest=0x7ad6020, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\85e14a0db9c.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\85e14a0db9c.68814f" [0138.342] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\85e14a0db9c.68814f", NtPathName=0xbbefc58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\85e14a0db9c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0138.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053480 [0138.342] NtSetInformationFile (FileHandle=0xca0, IoStatusBlock=0xbbefc60, FileInformation=0x3053480, Length=0xa0, FileInformationClass=0xa) returned 0x0 [0138.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 [0138.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a580e8) returned 1 [0138.468] NtQueryInformationFile (in: FileHandle=0xca0, IoStatusBlock=0xbbefc30, FileInformation=0xbbefc38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbbefc30, FileInformation=0xbbefc38) returned 0x0 [0138.468] NtSetInformationFile (FileHandle=0xca0, IoStatusBlock=0xbbefc30, FileInformation=0xbbefc38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0138.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6020) returned 1 [0138.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1148) returned 1 [0138.470] FlushFileBuffers (hFile=0xca0) returned 1 [0138.486] CloseHandle (hObject=0xca0) returned 1 [0138.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7578 [0138.488] wcscpy (in: _Dest=0x3eb7578, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\" [0138.488] wcscat (in: _Dest=0x3eb7578, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" [0138.488] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\68814f-readme.txt")) returned 0x20 [0138.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7578) returned 1 [0138.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 1270 os_tid = 0x1b6c [0137.233] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0x20 [0139.037] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0139.037] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.037] GetLastError () returned 0x5 [0139.037] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0139.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682e8) returned 1 Thread: id = 1271 os_tid = 0x1b70 [0137.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe66c8 [0137.234] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Users\\All Users\\Sun\\Java\\Java Update" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update" [0137.234] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\" [0137.234] wcscat (in: _Dest=0x2fe66c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*" [0137.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55a50 [0137.234] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0139.039] wcscmp (_String1=".", _String2=".") returned 0 [0139.039] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.039] wcscmp (_String1="..", _String2=".") returned 1 [0139.039] wcscmp (_String1="..", _String2="..") returned 0 [0139.039] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0139.039] wcscmp (_String1="jaureglist.xml", _String2=".") returned 1 [0139.039] wcscmp (_String1="jaureglist.xml", _String2="..") returned 1 [0139.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e7d8 [0139.039] wcscpy (in: _Dest=0x3f3e7d8, _Source="C:\\Users\\All Users\\Sun\\Java\\Java Update" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update" [0139.040] wcscat (in: _Dest=0x3f3e7d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\" [0139.040] wcscat (in: _Dest=0x3f3e7d8, _Source="jaureglist.xml" | out: _Dest="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml") returned="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" [0142.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0142.341] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0 [0142.341] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0142.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55a50) returned 1 [0142.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 [0142.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a275e8) returned 1 Thread: id = 1272 os_tid = 0x1b74 [0137.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0858 [0137.235] wcscpy (in: _Dest=0x3ee0858, _Source="C:\\ProgramData\\Microsoft\\Network\\Connections" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections" [0137.235] wcscat (in: _Dest=0x3ee0858, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\" [0137.235] wcscat (in: _Dest=0x3ee0858, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\*") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\*" [0137.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0137.235] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0137.236] wcscmp (_String1=".", _String2=".") returned 0 [0137.236] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.236] wcscmp (_String1="..", _String2=".") returned 1 [0137.236] wcscmp (_String1="..", _String2="..") returned 0 [0137.236] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0137.236] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0137.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0137.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0858) returned 1 [0137.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0c68) returned 1 Thread: id = 1273 os_tid = 0x1b78 [0137.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0c68 [0137.239] wcscpy (in: _Dest=0x3ee0c68, _Source="C:\\ProgramData\\Microsoft\\Network\\Downloader" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader" [0137.239] wcscat (in: _Dest=0x3ee0c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\" [0137.239] wcscat (in: _Dest=0x3ee0c68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*" [0137.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0137.239] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0c68) returned 1 [0137.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 Thread: id = 1274 os_tid = 0x1b7c [0137.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky")) returned 0x20 [0137.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0137.244] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.244] GetLastError () returned 0x5 [0137.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0137.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 1275 os_tid = 0x1b80 [0137.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv")) returned 0x20 [0137.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0137.246] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0137.247] GetLastError () returned 0x5 [0137.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0137.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 1276 os_tid = 0x1b84 [0137.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo")) returned 0x20 [0140.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0140.067] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.067] GetLastError () returned 0x5 [0140.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0140.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 1277 os_tid = 0x1b88 [0137.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve")) returned 0x20 [0140.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0140.098] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.099] GetLastError () returned 0x5 [0140.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0140.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 1278 os_tid = 0x1b8c [0137.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur")) returned 0x20 [0139.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0139.116] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.116] GetLastError () returned 0x5 [0139.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0139.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 1279 os_tid = 0x1b90 [0137.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr")) returned 0x20 [0140.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0140.097] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.097] GetLastError () returned 0x5 [0140.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0140.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 1280 os_tid = 0x1b94 [0137.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 0x20 [0140.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x20) returned 0 [0140.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.068] GetLastError () returned 0x5 [0140.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x20) returned 0 [0140.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 1281 os_tid = 0x1b98 [0137.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 0x20 [0140.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x20) returned 0 [0140.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.125] GetLastError () returned 0x5 [0140.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x20) returned 0 [0140.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 1282 os_tid = 0x1b9c [0137.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 0x20 [0140.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x20) returned 0 [0140.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.126] GetLastError () returned 0x5 [0140.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x20) returned 0 [0140.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 1283 os_tid = 0x1ba0 [0137.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 0x20 [0140.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x20) returned 0 [0140.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.127] GetLastError () returned 0x5 [0140.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x20) returned 0 [0140.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 1284 os_tid = 0x1ba4 [0137.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 0x20 [0140.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x20) returned 0 [0140.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.129] GetLastError () returned 0x5 [0140.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x20) returned 0 [0140.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 1285 os_tid = 0x1ba8 [0137.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 0x20 [0140.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x20) returned 0 [0140.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.130] GetLastError () returned 0x5 [0140.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x20) returned 0 [0140.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 1286 os_tid = 0x1bac [0137.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 0x20 [0140.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x20) returned 0 [0140.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.138] GetLastError () returned 0x5 [0140.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x20) returned 0 [0140.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 1287 os_tid = 0x1bb0 [0137.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 0x20 [0140.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x20) returned 0 [0140.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.131] GetLastError () returned 0x5 [0140.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x20) returned 0 [0140.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 1288 os_tid = 0x1bb4 [0137.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 0x20 [0140.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x20) returned 0 [0140.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.140] GetLastError () returned 0x5 [0140.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x20) returned 0 [0140.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 1289 os_tid = 0x1bb8 [0137.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 0x20 [0139.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x20) returned 0 [0139.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.327] GetLastError () returned 0x5 [0139.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x20) returned 0 [0139.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 1290 os_tid = 0x1bbc [0137.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 0x20 [0140.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x20) returned 0 [0140.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.133] GetLastError () returned 0x5 [0140.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x20) returned 0 [0140.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 1291 os_tid = 0x1bc0 [0137.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 0x20 [0140.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x20) returned 0 [0140.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.134] GetLastError () returned 0x5 [0140.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x20) returned 0 [0140.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 1292 os_tid = 0x1bc4 [0137.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 0x20 [0140.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x20) returned 0 [0140.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.123] GetLastError () returned 0x5 [0140.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x20) returned 0 [0140.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 1293 os_tid = 0x1bc8 [0137.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 0x20 [0140.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x20) returned 0 [0140.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.135] GetLastError () returned 0x5 [0140.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x20) returned 0 [0140.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 1294 os_tid = 0x1bcc [0137.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 0x20 [0140.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x20) returned 0 [0140.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.137] GetLastError () returned 0x5 [0140.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x20) returned 0 [0140.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 1295 os_tid = 0x1bd0 [0137.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf")) returned 0x20 [0140.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0140.070] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.070] GetLastError () returned 0x5 [0140.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0140.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79d10) returned 1 Thread: id = 1296 os_tid = 0x1bd4 [0137.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf")) returned 0x20 [0140.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0140.101] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.101] GetLastError () returned 0x5 [0140.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0140.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4e60) returned 1 Thread: id = 1297 os_tid = 0x1bd8 [0137.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf")) returned 0x20 [0140.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf", dwFileAttributes=0x20) returned 0 [0140.102] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.102] GetLastError () returned 0x5 [0140.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf", dwFileAttributes=0x20) returned 0 [0140.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7b750) returned 1 Thread: id = 1298 os_tid = 0x1bdc [0137.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf")) returned 0x20 [0140.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf", dwFileAttributes=0x20) returned 0 [0140.104] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.104] GetLastError () returned 0x5 [0140.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf", dwFileAttributes=0x20) returned 0 [0140.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6260) returned 1 Thread: id = 1299 os_tid = 0x1be0 [0137.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf")) returned 0x20 [0140.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf", dwFileAttributes=0x20) returned 0 [0140.105] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.105] GetLastError () returned 0x5 [0140.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf", dwFileAttributes=0x20) returned 0 [0140.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7a2f8) returned 1 Thread: id = 1300 os_tid = 0x1be4 [0137.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf")) returned 0x20 [0140.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf", dwFileAttributes=0x20) returned 0 [0140.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.106] GetLastError () returned 0x5 [0140.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf", dwFileAttributes=0x20) returned 0 [0140.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6300) returned 1 Thread: id = 1301 os_tid = 0x1be8 [0137.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf")) returned 0x20 [0139.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf", dwFileAttributes=0x20) returned 0 [0139.119] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.119] GetLastError () returned 0x5 [0139.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf", dwFileAttributes=0x20) returned 0 [0139.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 Thread: id = 1302 os_tid = 0x1bec [0137.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf")) returned 0x20 [0140.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf", dwFileAttributes=0x20) returned 0 [0140.100] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.100] GetLastError () returned 0x5 [0140.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf", dwFileAttributes=0x20) returned 0 [0140.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 1303 os_tid = 0x1bf0 [0137.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44450 [0137.270] wcscpy (in: _Dest=0x3d44450, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0137.271] wcscat (in: _Dest=0x3d44450, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0137.271] wcscat (in: _Dest=0x3d44450, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*" [0137.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0137.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda4917e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d540 [0139.042] wcscmp (_String1=".", _String2=".") returned 0 [0139.043] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd90a1fa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda4917e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.088] wcscmp (_String1="..", _String2=".") returned 1 [0140.088] wcscmp (_String1="..", _String2="..") returned 0 [0140.088] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1 [0140.088] wcscmp (_String1="Flash.CAT", _String2=".") returned 1 [0140.088] wcscmp (_String1="Flash.CAT", _String2="..") returned 1 [0140.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df61c0 [0140.088] wcscpy (in: _Dest=0x3df61c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0140.088] wcscat (in: _Dest=0x3df61c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0140.088] wcscat (in: _Dest=0x3df61c0, _Source="Flash.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" [0147.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df61c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2400 [0147.755] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1 [0147.755] wcscmp (_String1="Flash.CHS", _String2=".") returned 1 [0147.755] wcscmp (_String1="Flash.CHS", _String2="..") returned 1 [0147.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63490 [0147.755] wcscpy (in: _Dest=0x7a63490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.755] wcscat (in: _Dest=0x7a63490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.756] wcscat (in: _Dest=0x7a63490, _Source="Flash.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" [0147.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0147.758] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1 [0147.758] wcscmp (_String1="Flash.CHT", _String2=".") returned 1 [0147.758] wcscmp (_String1="Flash.CHT", _String2="..") returned 1 [0147.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63530 [0147.758] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.758] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.758] wcscat (in: _Dest=0x7a63530, _Source="Flash.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" [0147.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238 [0147.760] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1 [0147.760] wcscmp (_String1="Flash.DAN", _String2=".") returned 1 [0147.760] wcscmp (_String1="Flash.DAN", _String2="..") returned 1 [0147.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a635d0 [0147.760] wcscpy (in: _Dest=0x7a635d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.760] wcscat (in: _Dest=0x7a635d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.760] wcscat (in: _Dest=0x7a635d0, _Source="Flash.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" [0147.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a635d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234 [0147.768] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1 [0147.768] wcscmp (_String1="Flash.DEU", _String2=".") returned 1 [0147.768] wcscmp (_String1="Flash.DEU", _String2="..") returned 1 [0147.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63670 [0147.768] wcscpy (in: _Dest=0x7a63670, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.769] wcscat (in: _Dest=0x7a63670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.769] wcscat (in: _Dest=0x7a63670, _Source="Flash.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" [0147.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230 [0147.770] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1 [0147.770] wcscmp (_String1="Flash.ESP", _String2=".") returned 1 [0147.770] wcscmp (_String1="Flash.ESP", _String2="..") returned 1 [0147.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63710 [0147.770] wcscpy (in: _Dest=0x7a63710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.770] wcscat (in: _Dest=0x7a63710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.770] wcscat (in: _Dest=0x7a63710, _Source="Flash.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" [0147.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x222c [0147.772] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1 [0147.772] wcscmp (_String1="Flash.EUQ", _String2=".") returned 1 [0147.772] wcscmp (_String1="Flash.EUQ", _String2="..") returned 1 [0147.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a637b0 [0147.772] wcscpy (in: _Dest=0x7a637b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.772] wcscat (in: _Dest=0x7a637b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.772] wcscat (in: _Dest=0x7a637b0, _Source="Flash.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" [0147.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a637b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228 [0147.774] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1 [0147.774] wcscmp (_String1="Flash.FRA", _String2=".") returned 1 [0147.774] wcscmp (_String1="Flash.FRA", _String2="..") returned 1 [0147.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63850 [0147.774] wcscpy (in: _Dest=0x7a63850, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.774] wcscat (in: _Dest=0x7a63850, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.774] wcscat (in: _Dest=0x7a63850, _Source="Flash.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" [0147.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2220 [0147.775] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1 [0147.775] wcscmp (_String1="Flash.ITA", _String2=".") returned 1 [0147.776] wcscmp (_String1="Flash.ITA", _String2="..") returned 1 [0147.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a638f0 [0147.776] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.776] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.776] wcscat (in: _Dest=0x7a638f0, _Source="Flash.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" [0147.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a638f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x221c [0147.777] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1 [0147.777] wcscmp (_String1="Flash.JPN", _String2=".") returned 1 [0147.778] wcscmp (_String1="Flash.JPN", _String2="..") returned 1 [0147.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63990 [0147.778] wcscpy (in: _Dest=0x7a63990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.778] wcscat (in: _Dest=0x7a63990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.778] wcscat (in: _Dest=0x7a63990, _Source="Flash.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" [0147.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2218 [0147.779] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1 [0147.779] wcscmp (_String1="Flash.KOR", _String2=".") returned 1 [0147.779] wcscmp (_String1="Flash.KOR", _String2="..") returned 1 [0147.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63a30 [0147.780] wcscpy (in: _Dest=0x7a63a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.780] wcscat (in: _Dest=0x7a63a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.780] wcscat (in: _Dest=0x7a63a30, _Source="Flash.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" [0147.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0 [0147.782] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda27c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0147.782] wcscmp (_String1="Flash.mpp", _String2=".") returned 1 [0147.782] wcscmp (_String1="Flash.mpp", _String2="..") returned 1 [0147.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63ad0 [0147.782] wcscpy (in: _Dest=0x7a63ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.782] wcscat (in: _Dest=0x7a63ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.782] wcscat (in: _Dest=0x7a63ad0, _Source="Flash.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" [0147.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0 [0147.784] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1 [0147.784] wcscmp (_String1="Flash.NLD", _String2=".") returned 1 [0147.784] wcscmp (_String1="Flash.NLD", _String2="..") returned 1 [0147.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63b70 [0147.784] wcscpy (in: _Dest=0x7a63b70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.784] wcscat (in: _Dest=0x7a63b70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.784] wcscat (in: _Dest=0x7a63b70, _Source="Flash.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" [0147.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2200 [0147.785] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1 [0147.785] wcscmp (_String1="Flash.NOR", _String2=".") returned 1 [0147.785] wcscmp (_String1="Flash.NOR", _String2="..") returned 1 [0147.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63c10 [0147.786] wcscpy (in: _Dest=0x7a63c10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.786] wcscat (in: _Dest=0x7a63c10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.786] wcscat (in: _Dest=0x7a63c10, _Source="Flash.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" [0147.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8 [0147.793] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1 [0147.793] wcscmp (_String1="Flash.PTB", _String2=".") returned 1 [0147.793] wcscmp (_String1="Flash.PTB", _String2="..") returned 1 [0147.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63cb0 [0147.793] wcscpy (in: _Dest=0x7a63cb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.794] wcscat (in: _Dest=0x7a63cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.794] wcscat (in: _Dest=0x7a63cb0, _Source="Flash.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" [0147.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0 [0147.795] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1 [0147.795] wcscmp (_String1="Flash.SUO", _String2=".") returned 1 [0147.795] wcscmp (_String1="Flash.SUO", _String2="..") returned 1 [0147.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63d50 [0147.796] wcscpy (in: _Dest=0x7a63d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.796] wcscat (in: _Dest=0x7a63d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.796] wcscat (in: _Dest=0x7a63d50, _Source="Flash.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" [0147.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ac [0147.797] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1 [0147.797] wcscmp (_String1="Flash.SVE", _String2=".") returned 1 [0147.797] wcscmp (_String1="Flash.SVE", _String2="..") returned 1 [0147.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63df0 [0147.798] wcscpy (in: _Dest=0x7a63df0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.798] wcscat (in: _Dest=0x7a63df0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.798] wcscat (in: _Dest=0x7a63df0, _Source="Flash.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" [0147.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a8 [0147.829] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1 [0147.829] wcscmp (_String1="Mcimpp.CAT", _String2=".") returned 1 [0147.829] wcscmp (_String1="Mcimpp.CAT", _String2="..") returned 1 [0147.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053a68 [0147.829] wcscpy (in: _Dest=0x3053a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.829] wcscat (in: _Dest=0x3053a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.829] wcscat (in: _Dest=0x3053a68, _Source="Mcimpp.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" [0147.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0147.830] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1 [0147.830] wcscmp (_String1="MCIMPP.CHS", _String2=".") returned 1 [0147.830] wcscmp (_String1="MCIMPP.CHS", _String2="..") returned 1 [0147.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3054050 [0147.830] wcscpy (in: _Dest=0x3054050, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.830] wcscat (in: _Dest=0x3054050, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.830] wcscat (in: _Dest=0x3054050, _Source="MCIMPP.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" [0147.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3054050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0147.831] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9cd5060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1 [0147.831] wcscmp (_String1="MCIMPP.CHT", _String2=".") returned 1 [0147.831] wcscmp (_String1="MCIMPP.CHT", _String2="..") returned 1 [0147.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3052df0 [0147.831] wcscpy (in: _Dest=0x3052df0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0147.831] wcscat (in: _Dest=0x3052df0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0147.831] wcscat (in: _Dest=0x3052df0, _Source="MCIMPP.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" [0147.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148 [0148.453] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1 [0148.453] wcscmp (_String1="Mcimpp.DAN", _String2=".") returned 1 [0148.453] wcscmp (_String1="Mcimpp.DAN", _String2="..") returned 1 [0148.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e138 [0148.453] wcscpy (in: _Dest=0x7a5e138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0148.453] wcscat (in: _Dest=0x7a5e138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0148.453] wcscat (in: _Dest=0x7a5e138, _Source="Mcimpp.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" [0151.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8 [0151.468] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1 [0151.468] wcscmp (_String1="Mcimpp.DEU", _String2=".") returned 1 [0151.468] wcscmp (_String1="Mcimpp.DEU", _String2="..") returned 1 [0151.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x30531e0 [0151.469] wcscpy (in: _Dest=0x30531e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.469] wcscat (in: _Dest=0x30531e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.469] wcscat (in: _Dest=0x30531e0, _Source="Mcimpp.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" [0151.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30531e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x233c [0151.471] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1 [0151.471] wcscmp (_String1="Mcimpp.ESP", _String2=".") returned 1 [0151.471] wcscmp (_String1="Mcimpp.ESP", _String2="..") returned 1 [0151.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3054050 [0151.471] wcscpy (in: _Dest=0x3054050, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.471] wcscat (in: _Dest=0x3054050, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.471] wcscat (in: _Dest=0x3054050, _Source="Mcimpp.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" [0151.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3054050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2334 [0151.473] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1 [0151.473] wcscmp (_String1="Mcimpp.EUQ", _String2=".") returned 1 [0151.473] wcscmp (_String1="Mcimpp.EUQ", _String2="..") returned 1 [0151.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053a68 [0151.473] wcscpy (in: _Dest=0x3053a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.473] wcscat (in: _Dest=0x3053a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.473] wcscat (in: _Dest=0x3053a68, _Source="Mcimpp.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" [0151.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2330 [0151.475] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1 [0151.475] wcscmp (_String1="Mcimpp.FRA", _String2=".") returned 1 [0151.475] wcscmp (_String1="Mcimpp.FRA", _String2="..") returned 1 [0151.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053720 [0151.475] wcscpy (in: _Dest=0x3053720, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.475] wcscat (in: _Dest=0x3053720, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.475] wcscat (in: _Dest=0x3053720, _Source="Mcimpp.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" [0151.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec [0151.476] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1 [0151.476] wcscmp (_String1="Mcimpp.ITA", _String2=".") returned 1 [0151.477] wcscmp (_String1="Mcimpp.ITA", _String2="..") returned 1 [0151.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3052df0 [0151.477] wcscpy (in: _Dest=0x3052df0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.477] wcscat (in: _Dest=0x3052df0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.477] wcscat (in: _Dest=0x3052df0, _Source="Mcimpp.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" [0151.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x230c [0151.478] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1 [0151.478] wcscmp (_String1="Mcimpp.JPN", _String2=".") returned 1 [0151.478] wcscmp (_String1="Mcimpp.JPN", _String2="..") returned 1 [0151.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f788 [0151.478] wcscpy (in: _Dest=0x7a5f788, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.479] wcscat (in: _Dest=0x7a5f788, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.479] wcscat (in: _Dest=0x7a5f788, _Source="Mcimpp.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" [0151.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2308 [0151.480] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1 [0151.480] wcscmp (_String1="Mcimpp.KOR", _String2=".") returned 1 [0151.480] wcscmp (_String1="Mcimpp.KOR", _String2="..") returned 1 [0151.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e1e0 [0151.480] wcscpy (in: _Dest=0x7a5e1e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.481] wcscat (in: _Dest=0x7a5e1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.481] wcscat (in: _Dest=0x7a5e1e0, _Source="Mcimpp.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" [0151.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4 [0151.482] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9e05b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0151.482] wcscmp (_String1="MCIMPP.mpp", _String2=".") returned 1 [0151.482] wcscmp (_String1="MCIMPP.mpp", _String2="..") returned 1 [0151.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f2f0 [0151.483] wcscpy (in: _Dest=0x7a5f2f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.483] wcscat (in: _Dest=0x7a5f2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.483] wcscat (in: _Dest=0x7a5f2f0, _Source="MCIMPP.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" [0151.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2070 [0151.484] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1 [0151.484] wcscmp (_String1="Mcimpp.NLD", _String2=".") returned 1 [0151.484] wcscmp (_String1="Mcimpp.NLD", _String2="..") returned 1 [0151.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f248 [0151.484] wcscpy (in: _Dest=0x7a5f248, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.484] wcscat (in: _Dest=0x7a5f248, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.485] wcscat (in: _Dest=0x7a5f248, _Source="Mcimpp.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" [0151.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c [0151.486] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1 [0151.486] wcscmp (_String1="Mcimpp.NOR", _String2=".") returned 1 [0151.486] wcscmp (_String1="Mcimpp.NOR", _String2="..") returned 1 [0151.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f4e8 [0151.486] wcscpy (in: _Dest=0x7a5f4e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.486] wcscat (in: _Dest=0x7a5f4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.486] wcscat (in: _Dest=0x7a5f4e8, _Source="Mcimpp.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" [0151.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98 [0151.488] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1 [0151.488] wcscmp (_String1="MCIMPP.PTB", _String2=".") returned 1 [0151.488] wcscmp (_String1="MCIMPP.PTB", _String2="..") returned 1 [0151.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f398 [0151.488] wcscpy (in: _Dest=0x7a5f398, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.488] wcscat (in: _Dest=0x7a5f398, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.488] wcscat (in: _Dest=0x7a5f398, _Source="MCIMPP.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" [0151.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58 [0151.490] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1 [0151.490] wcscmp (_String1="Mcimpp.SUO", _String2=".") returned 1 [0151.490] wcscmp (_String1="Mcimpp.SUO", _String2="..") returned 1 [0151.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f1a0 [0151.490] wcscpy (in: _Dest=0x7a5f1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.490] wcscat (in: _Dest=0x7a5f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.490] wcscat (in: _Dest=0x7a5f1a0, _Source="Mcimpp.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" [0151.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28 [0151.491] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1 [0151.492] wcscmp (_String1="MCIMPP.SVE", _String2=".") returned 1 [0151.492] wcscmp (_String1="MCIMPP.SVE", _String2="..") returned 1 [0151.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f0f8 [0151.492] wcscpy (in: _Dest=0x7a5f0f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.492] wcscat (in: _Dest=0x7a5f0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.492] wcscat (in: _Dest=0x7a5f0f8, _Source="MCIMPP.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" [0151.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b3c [0151.493] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="QUICKT~1.CAT")) returned 1 [0151.761] wcscmp (_String1="QuickTime.CAT", _String2=".") returned 1 [0151.762] wcscmp (_String1="QuickTime.CAT", _String2="..") returned 1 [0151.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0151.762] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0151.762] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0151.762] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" [0164.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat")) returned 0x20 [0164.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT", dwFileAttributes=0x20) returned 0 [0164.416] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.416] GetLastError () returned 0x5 [0164.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT", dwFileAttributes=0x20) returned 0 [0164.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.417] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="QUICKT~1.CHS")) returned 1 [0164.417] wcscmp (_String1="QuickTime.CHS", _String2=".") returned 1 [0164.417] wcscmp (_String1="QuickTime.CHS", _String2="..") returned 1 [0164.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.417] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.417] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.417] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" [0164.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs")) returned 0x20 [0164.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS", dwFileAttributes=0x20) returned 0 [0164.418] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.418] GetLastError () returned 0x5 [0164.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS", dwFileAttributes=0x20) returned 0 [0164.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.418] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9cd5060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="QUICKT~1.CHT")) returned 1 [0164.419] wcscmp (_String1="QuickTime.CHT", _String2=".") returned 1 [0164.419] wcscmp (_String1="QuickTime.CHT", _String2="..") returned 1 [0164.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.419] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.419] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.419] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" [0164.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht")) returned 0x20 [0164.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT", dwFileAttributes=0x20) returned 0 [0164.419] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.420] GetLastError () returned 0x5 [0164.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT", dwFileAttributes=0x20) returned 0 [0164.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.420] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="QUICKT~1.DAN")) returned 1 [0164.420] wcscmp (_String1="QuickTime.DAN", _String2=".") returned 1 [0164.420] wcscmp (_String1="QuickTime.DAN", _String2="..") returned 1 [0164.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.420] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.420] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.420] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" [0164.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan")) returned 0x20 [0164.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN", dwFileAttributes=0x20) returned 0 [0164.421] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.421] GetLastError () returned 0x5 [0164.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN", dwFileAttributes=0x20) returned 0 [0164.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.421] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="QUICKT~1.DEU")) returned 1 [0164.421] wcscmp (_String1="QuickTime.DEU", _String2=".") returned 1 [0164.421] wcscmp (_String1="QuickTime.DEU", _String2="..") returned 1 [0164.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.422] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.422] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.422] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" [0164.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu")) returned 0x20 [0164.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU", dwFileAttributes=0x20) returned 0 [0164.422] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.422] GetLastError () returned 0x5 [0164.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU", dwFileAttributes=0x20) returned 0 [0164.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.423] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="QUICKT~1.ESP")) returned 1 [0164.423] wcscmp (_String1="QuickTime.ESP", _String2=".") returned 1 [0164.423] wcscmp (_String1="QuickTime.ESP", _String2="..") returned 1 [0164.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.423] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.423] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.423] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" [0164.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp")) returned 0x20 [0164.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP", dwFileAttributes=0x20) returned 0 [0164.424] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.424] GetLastError () returned 0x5 [0164.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP", dwFileAttributes=0x20) returned 0 [0164.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.424] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="QUICKT~1.EUQ")) returned 1 [0164.424] wcscmp (_String1="QuickTime.EUQ", _String2=".") returned 1 [0164.424] wcscmp (_String1="QuickTime.EUQ", _String2="..") returned 1 [0164.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.425] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.425] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.425] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" [0164.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq")) returned 0x20 [0164.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ", dwFileAttributes=0x20) returned 0 [0164.426] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.426] GetLastError () returned 0x5 [0164.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ", dwFileAttributes=0x20) returned 0 [0164.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.426] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="QUICKT~1.FRA")) returned 1 [0164.426] wcscmp (_String1="QuickTime.FRA", _String2=".") returned 1 [0164.426] wcscmp (_String1="QuickTime.FRA", _String2="..") returned 1 [0164.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.427] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.427] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.427] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" [0164.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra")) returned 0x20 [0164.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA", dwFileAttributes=0x20) returned 0 [0164.428] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.428] GetLastError () returned 0x5 [0164.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA", dwFileAttributes=0x20) returned 0 [0164.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.428] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="QUICKT~1.ITA")) returned 1 [0164.428] wcscmp (_String1="QuickTime.ITA", _String2=".") returned 1 [0164.428] wcscmp (_String1="QuickTime.ITA", _String2="..") returned 1 [0164.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.428] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.428] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.428] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" [0164.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita")) returned 0x20 [0164.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA", dwFileAttributes=0x20) returned 0 [0164.429] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.429] GetLastError () returned 0x5 [0164.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA", dwFileAttributes=0x20) returned 0 [0164.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.430] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="QUICKT~1.JPN")) returned 1 [0164.430] wcscmp (_String1="QuickTime.JPN", _String2=".") returned 1 [0164.430] wcscmp (_String1="QuickTime.JPN", _String2="..") returned 1 [0164.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.430] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.430] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.430] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" [0164.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn")) returned 0x20 [0164.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN", dwFileAttributes=0x20) returned 0 [0164.431] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.431] GetLastError () returned 0x5 [0164.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN", dwFileAttributes=0x20) returned 0 [0164.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.431] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="QUICKT~1.KOR")) returned 1 [0164.431] wcscmp (_String1="QuickTime.KOR", _String2=".") returned 1 [0164.431] wcscmp (_String1="QuickTime.KOR", _String2="..") returned 1 [0164.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.431] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.431] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.431] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" [0164.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor")) returned 0x20 [0164.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR", dwFileAttributes=0x20) returned 0 [0164.433] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.433] GetLastError () returned 0x5 [0164.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR", dwFileAttributes=0x20) returned 0 [0164.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.433] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9ddfa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1 [0164.433] wcscmp (_String1="QuickTime.mpp", _String2=".") returned 1 [0164.434] wcscmp (_String1="QuickTime.mpp", _String2="..") returned 1 [0164.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.434] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.434] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.434] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" [0164.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp")) returned 0x20 [0164.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", dwFileAttributes=0x20) returned 0 [0164.434] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.434] GetLastError () returned 0x5 [0164.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp", dwFileAttributes=0x20) returned 0 [0164.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.435] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="QUICKT~1.NLD")) returned 1 [0164.435] wcscmp (_String1="QuickTime.NLD", _String2=".") returned 1 [0164.435] wcscmp (_String1="QuickTime.NLD", _String2="..") returned 1 [0164.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.435] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.435] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.435] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" [0164.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld")) returned 0x20 [0164.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD", dwFileAttributes=0x20) returned 0 [0164.435] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.436] GetLastError () returned 0x5 [0164.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD", dwFileAttributes=0x20) returned 0 [0164.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.436] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="QUICKT~1.NOR")) returned 1 [0164.436] wcscmp (_String1="QuickTime.NOR", _String2=".") returned 1 [0164.436] wcscmp (_String1="QuickTime.NOR", _String2="..") returned 1 [0164.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.436] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.436] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.436] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" [0164.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor")) returned 0x20 [0164.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR", dwFileAttributes=0x20) returned 0 [0164.437] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.437] GetLastError () returned 0x5 [0164.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR", dwFileAttributes=0x20) returned 0 [0164.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.438] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="QUICKT~1.PTB")) returned 1 [0164.438] wcscmp (_String1="QuickTime.PTB", _String2=".") returned 1 [0164.438] wcscmp (_String1="QuickTime.PTB", _String2="..") returned 1 [0164.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.438] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.438] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.438] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" [0164.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb")) returned 0x20 [0164.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB", dwFileAttributes=0x20) returned 0 [0164.439] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.439] GetLastError () returned 0x5 [0164.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB", dwFileAttributes=0x20) returned 0 [0164.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.440] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="QUICKT~1.SUO")) returned 1 [0164.440] wcscmp (_String1="QuickTime.SUO", _String2=".") returned 1 [0164.440] wcscmp (_String1="QuickTime.SUO", _String2="..") returned 1 [0164.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.440] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.440] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.440] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" [0164.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo")) returned 0x20 [0164.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", dwFileAttributes=0x20) returned 0 [0164.441] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.441] GetLastError () returned 0x5 [0164.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO", dwFileAttributes=0x20) returned 0 [0164.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.442] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="QUICKT~1.SVE")) returned 1 [0164.442] wcscmp (_String1="QuickTime.SVE", _String2=".") returned 1 [0164.442] wcscmp (_String1="QuickTime.SVE", _String2="..") returned 1 [0164.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0164.442] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.442] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.442] wcscat (in: _Dest=0x7a5e918, _Source="QuickTime.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" [0164.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve")) returned 0x20 [0164.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE", dwFileAttributes=0x20) returned 0 [0164.443] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.443] GetLastError () returned 0x5 [0164.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE", dwFileAttributes=0x20) returned 0 [0164.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0164.443] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="WINDOW~1.CAT")) returned 1 [0164.444] wcscmp (_String1="WindowsMedia.CAT", _String2=".") returned 1 [0164.444] wcscmp (_String1="WindowsMedia.CAT", _String2="..") returned 1 [0164.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.444] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.444] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.444] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.CAT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" [0164.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat")) returned 0x20 [0164.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT", dwFileAttributes=0x20) returned 0 [0164.444] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.445] GetLastError () returned 0x5 [0164.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT", dwFileAttributes=0x20) returned 0 [0164.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.445] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="WINDOW~1.CHS")) returned 1 [0164.445] wcscmp (_String1="WindowsMedia.CHS", _String2=".") returned 1 [0164.445] wcscmp (_String1="WindowsMedia.CHS", _String2="..") returned 1 [0164.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.445] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.445] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.445] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" [0164.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs")) returned 0x20 [0164.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS", dwFileAttributes=0x20) returned 0 [0164.446] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.446] GetLastError () returned 0x5 [0164.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS", dwFileAttributes=0x20) returned 0 [0164.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.446] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9cd5060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="WINDOW~1.CHT")) returned 1 [0164.446] wcscmp (_String1="WindowsMedia.CHT", _String2=".") returned 1 [0164.446] wcscmp (_String1="WindowsMedia.CHT", _String2="..") returned 1 [0164.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.447] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.447] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.447] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" [0164.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht")) returned 0x20 [0164.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT", dwFileAttributes=0x20) returned 0 [0164.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.448] GetLastError () returned 0x5 [0164.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT", dwFileAttributes=0x20) returned 0 [0164.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.448] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="WINDOW~1.DAN")) returned 1 [0164.448] wcscmp (_String1="WindowsMedia.DAN", _String2=".") returned 1 [0164.448] wcscmp (_String1="WindowsMedia.DAN", _String2="..") returned 1 [0164.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.448] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.448] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.448] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" [0164.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan")) returned 0x20 [0164.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN", dwFileAttributes=0x20) returned 0 [0164.449] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.449] GetLastError () returned 0x5 [0164.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN", dwFileAttributes=0x20) returned 0 [0164.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.449] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda314a20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="WINDOW~1.DEU")) returned 1 [0164.450] wcscmp (_String1="WindowsMedia.DEU", _String2=".") returned 1 [0164.450] wcscmp (_String1="WindowsMedia.DEU", _String2="..") returned 1 [0164.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.450] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.450] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.450] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" [0164.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu")) returned 0x20 [0164.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU", dwFileAttributes=0x20) returned 0 [0164.450] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.451] GetLastError () returned 0x5 [0164.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU", dwFileAttributes=0x20) returned 0 [0164.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.451] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a73a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="WINDOW~1.ESP")) returned 1 [0164.451] wcscmp (_String1="WindowsMedia.ESP", _String2=".") returned 1 [0164.451] wcscmp (_String1="WindowsMedia.ESP", _String2="..") returned 1 [0164.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.451] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.451] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.451] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" [0164.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp")) returned 0x20 [0164.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP", dwFileAttributes=0x20) returned 0 [0164.452] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.453] GetLastError () returned 0x5 [0164.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP", dwFileAttributes=0x20) returned 0 [0164.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.453] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda4917e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="WINDOW~1.EUQ")) returned 1 [0164.453] wcscmp (_String1="WindowsMedia.EUQ", _String2=".") returned 1 [0164.453] wcscmp (_String1="WindowsMedia.EUQ", _String2="..") returned 1 [0164.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.453] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.453] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.453] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" [0164.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq")) returned 0x20 [0164.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ", dwFileAttributes=0x20) returned 0 [0164.454] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.454] GetLastError () returned 0x5 [0164.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ", dwFileAttributes=0x20) returned 0 [0164.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.454] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="WINDOW~1.FRA")) returned 1 [0164.454] wcscmp (_String1="WindowsMedia.FRA", _String2=".") returned 1 [0164.454] wcscmp (_String1="WindowsMedia.FRA", _String2="..") returned 1 [0164.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.455] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.455] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.455] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" [0164.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra")) returned 0x20 [0164.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA", dwFileAttributes=0x20) returned 0 [0164.455] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.456] GetLastError () returned 0x5 [0164.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA", dwFileAttributes=0x20) returned 0 [0164.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.456] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="WINDOW~1.ITA")) returned 1 [0164.456] wcscmp (_String1="WindowsMedia.ITA", _String2=".") returned 1 [0164.456] wcscmp (_String1="WindowsMedia.ITA", _String2="..") returned 1 [0164.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.456] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.456] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.456] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" [0164.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita")) returned 0x20 [0164.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA", dwFileAttributes=0x20) returned 0 [0164.457] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.457] GetLastError () returned 0x5 [0164.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA", dwFileAttributes=0x20) returned 0 [0164.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.457] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="WINDOW~1.JPN")) returned 1 [0164.457] wcscmp (_String1="WindowsMedia.JPN", _String2=".") returned 1 [0164.457] wcscmp (_String1="WindowsMedia.JPN", _String2="..") returned 1 [0164.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.457] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.457] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.457] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" [0164.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn")) returned 0x20 [0164.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN", dwFileAttributes=0x20) returned 0 [0164.458] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.458] GetLastError () returned 0x5 [0164.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN", dwFileAttributes=0x20) returned 0 [0164.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.458] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9abfd20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="WINDOW~1.KOR")) returned 1 [0164.459] wcscmp (_String1="WindowsMedia.KOR", _String2=".") returned 1 [0164.459] wcscmp (_String1="WindowsMedia.KOR", _String2="..") returned 1 [0164.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.459] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.459] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.459] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" [0164.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor")) returned 0x20 [0164.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR", dwFileAttributes=0x20) returned 0 [0164.459] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.460] GetLastError () returned 0x5 [0164.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR", dwFileAttributes=0x20) returned 0 [0164.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.460] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9e05b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1 [0164.460] wcscmp (_String1="WindowsMedia.mpp", _String2=".") returned 1 [0164.460] wcscmp (_String1="WindowsMedia.mpp", _String2="..") returned 1 [0164.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.460] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.460] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.460] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.mpp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" [0164.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp")) returned 0x20 [0164.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp", dwFileAttributes=0x20) returned 0 [0164.461] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.461] GetLastError () returned 0x5 [0164.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp", dwFileAttributes=0x20) returned 0 [0164.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0164.462] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd991ce00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="WINDOW~1.NLD")) returned 1 [0164.462] wcscmp (_String1="WindowsMedia.NLD", _String2=".") returned 1 [0164.462] wcscmp (_String1="WindowsMedia.NLD", _String2="..") returned 1 [0164.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0164.462] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0164.462] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0164.462] wcscat (in: _Dest=0x7a66560, _Source="WindowsMedia.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" [0164.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld")) returned 0x20 [0164.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD", dwFileAttributes=0x20) returned 0 [0164.463] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.463] GetLastError () returned 0x5 [0164.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD", dwFileAttributes=0x20) returned 0 [0164.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0165.228] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="WINDOW~1.NOR")) returned 1 [0165.228] wcscmp (_String1="WindowsMedia.NOR", _String2=".") returned 1 [0165.229] wcscmp (_String1="WindowsMedia.NOR", _String2="..") returned 1 [0165.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66090 [0165.229] wcscpy (in: _Dest=0x7a66090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0165.229] wcscat (in: _Dest=0x7a66090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0165.229] wcscat (in: _Dest=0x7a66090, _Source="WindowsMedia.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" [0171.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0171.390] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="WINDOW~1.PTB")) returned 1 [0171.390] wcscmp (_String1="WindowsMedia.PTB", _String2=".") returned 1 [0171.390] wcscmp (_String1="WindowsMedia.PTB", _String2="..") returned 1 [0171.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66350 [0171.390] wcscpy (in: _Dest=0x7a66350, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0171.390] wcscat (in: _Dest=0x7a66350, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0171.390] wcscat (in: _Dest=0x7a66350, _Source="WindowsMedia.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" [0171.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0171.391] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98f6ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="WINDOW~1.SUO")) returned 1 [0171.391] wcscmp (_String1="WindowsMedia.SUO", _String2=".") returned 1 [0171.391] wcscmp (_String1="WindowsMedia.SUO", _String2="..") returned 1 [0171.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a662a0 [0171.391] wcscpy (in: _Dest=0x7a662a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0171.391] wcscat (in: _Dest=0x7a662a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0171.392] wcscat (in: _Dest=0x7a662a0, _Source="WindowsMedia.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" [0171.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a662a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0171.393] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 1 [0171.393] wcscmp (_String1="WindowsMedia.SVE", _String2=".") returned 1 [0171.393] wcscmp (_String1="WindowsMedia.SVE", _String2="..") returned 1 [0171.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66b90 [0171.393] wcscpy (in: _Dest=0x7a66b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP" [0171.393] wcscat (in: _Dest=0x7a66b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\" [0171.393] wcscat (in: _Dest=0x7a66b90, _Source="WindowsMedia.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" [0171.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0171.394] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 0 [0171.394] FindClose (in: hFindFile=0x7a2d540 | out: hFindFile=0x7a2d540) returned 1 [0171.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0171.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44450) returned 1 [0171.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44b10) returned 1 Thread: id = 1304 os_tid = 0x1bf4 [0137.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb57c8 [0137.275] wcscpy (in: _Dest=0x3eb57c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0137.275] wcscat (in: _Dest=0x3eb57c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0137.276] wcscat (in: _Dest=0x3eb57c8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*" [0137.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef54a8 [0137.276] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da40 [0140.071] wcscmp (_String1=".", _String2=".") returned 0 [0140.071] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.071] wcscmp (_String1="..", _String2=".") returned 1 [0140.071] wcscmp (_String1="..", _String2="..") returned 0 [0140.071] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1 [0140.071] wcscmp (_String1="Flash.CZE", _String2=".") returned 1 [0140.071] wcscmp (_String1="Flash.CZE", _String2="..") returned 1 [0140.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e79d10 [0140.071] wcscpy (in: _Dest=0x3e79d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0140.071] wcscat (in: _Dest=0x3e79d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0140.071] wcscat (in: _Dest=0x3e79d10, _Source="Flash.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" [0167.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e79d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0167.773] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1 [0167.773] wcscmp (_String1="Mcimpp.CZE", _String2=".") returned 1 [0167.773] wcscmp (_String1="Mcimpp.CZE", _String2="..") returned 1 [0167.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c588 [0167.773] wcscpy (in: _Dest=0x35c588, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0167.773] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0167.773] wcscat (in: _Dest=0x35c588, _Source="Mcimpp.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" [0167.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0167.774] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="QUICKT~1.CZE")) returned 1 [0167.774] wcscmp (_String1="QuickTime.CZE", _String2=".") returned 1 [0167.774] wcscmp (_String1="QuickTime.CZE", _String2="..") returned 1 [0167.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0167.774] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0167.774] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0167.774] wcscat (in: _Dest=0x35c378, _Source="QuickTime.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" [0167.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0167.775] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 1 [0167.775] wcscmp (_String1="WindowsMedia.CZE", _String2=".") returned 1 [0167.776] wcscmp (_String1="WindowsMedia.CZE", _String2="..") returned 1 [0167.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf238 [0167.776] wcscpy (in: _Dest=0x3eaf238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE" [0167.776] wcscat (in: _Dest=0x3eaf238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\" [0167.776] wcscat (in: _Dest=0x3eaf238, _Source="WindowsMedia.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" [0167.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0167.777] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 0 [0167.777] FindClose (in: hFindFile=0x7a2da40 | out: hFindFile=0x7a2da40) returned 1 [0167.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54a8) returned 1 [0167.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb57c8) returned 1 [0167.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 1305 os_tid = 0x1bf8 [0137.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5d20 [0137.277] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0137.277] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0137.277] wcscat (in: _Dest=0x3eb5d20, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*" [0137.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3560 [0137.277] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0140.072] wcscmp (_String1=".", _String2=".") returned 0 [0140.072] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda46b680, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.072] wcscmp (_String1="..", _String2=".") returned 1 [0140.072] wcscmp (_String1="..", _String2="..") returned 0 [0140.072] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1 [0140.072] wcscmp (_String1="Flash.HRV", _String2=".") returned 1 [0140.072] wcscmp (_String1="Flash.HRV", _String2="..") returned 1 [0140.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e7b600 [0140.072] wcscpy (in: _Dest=0x3e7b600, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0140.072] wcscat (in: _Dest=0x3e7b600, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0140.072] wcscat (in: _Dest=0x3e7b600, _Source="Flash.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" [0158.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7b600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0158.678] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1 [0158.678] wcscmp (_String1="MCIMPP.HRV", _String2=".") returned 1 [0158.678] wcscmp (_String1="MCIMPP.HRV", _String2="..") returned 1 [0158.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a666c0 [0158.678] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0158.678] wcscat (in: _Dest=0x7a666c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0158.678] wcscat (in: _Dest=0x7a666c0, _Source="MCIMPP.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" [0158.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a666c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0158.679] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="QUICKT~1.HRV")) returned 1 [0158.679] wcscmp (_String1="QuickTime.HRV", _String2=".") returned 1 [0158.679] wcscmp (_String1="QuickTime.HRV", _String2="..") returned 1 [0158.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66560 [0158.680] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0158.680] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0158.680] wcscat (in: _Dest=0x7a66560, _Source="QuickTime.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" [0158.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0158.681] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 1 [0158.681] wcscmp (_String1="WindowsMedia.HRV", _String2=".") returned 1 [0158.681] wcscmp (_String1="WindowsMedia.HRV", _String2="..") returned 1 [0158.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0158.681] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV" [0158.681] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\" [0158.681] wcscat (in: _Dest=0x2ff6b90, _Source="WindowsMedia.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" [0158.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0158.682] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 0 [0158.683] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0158.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3560) returned 1 [0158.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0158.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 1306 os_tid = 0x1bfc [0137.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb61e0 [0137.278] wcscpy (in: _Dest=0x3eb61e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0137.278] wcscat (in: _Dest=0x3eb61e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0137.279] wcscat (in: _Dest=0x3eb61e0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*" [0137.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0137.279] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0140.073] wcscmp (_String1=".", _String2=".") returned 0 [0140.073] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda445520, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.073] wcscmp (_String1="..", _String2=".") returned 1 [0140.073] wcscmp (_String1="..", _String2="..") returned 0 [0140.073] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1 [0140.073] wcscmp (_String1="Flash.HUN", _String2=".") returned 1 [0140.073] wcscmp (_String1="Flash.HUN", _String2="..") returned 1 [0140.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053f00 [0140.073] wcscpy (in: _Dest=0x3053f00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0140.073] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0140.073] wcscat (in: _Dest=0x3053f00, _Source="Flash.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" [0147.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0147.746] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1 [0147.746] wcscmp (_String1="Mcimpp.HUN", _String2=".") returned 1 [0147.746] wcscmp (_String1="Mcimpp.HUN", _String2="..") returned 1 [0147.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bdf8 [0147.747] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0147.747] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0147.747] wcscat (in: _Dest=0x35bdf8, _Source="Mcimpp.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" [0147.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0147.748] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="QUICKT~1.HUN")) returned 1 [0147.748] wcscmp (_String1="QuickTime.HUN", _String2=".") returned 1 [0147.748] wcscmp (_String1="QuickTime.HUN", _String2="..") returned 1 [0147.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bbe8 [0147.748] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0147.748] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0147.748] wcscat (in: _Dest=0x35bbe8, _Source="QuickTime.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" [0147.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0147.749] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 1 [0147.749] wcscmp (_String1="WindowsMedia.HUN", _String2=".") returned 1 [0147.749] wcscmp (_String1="WindowsMedia.HUN", _String2="..") returned 1 [0147.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7938 [0147.749] wcscpy (in: _Dest=0x2ff7938, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN" [0147.749] wcscat (in: _Dest=0x2ff7938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\" [0147.749] wcscat (in: _Dest=0x2ff7938, _Source="WindowsMedia.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" [0147.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0147.752] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 0 [0147.752] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0147.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0147.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb61e0) returned 1 [0147.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 1307 os_tid = 0x1c00 [0137.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb6310 [0137.280] wcscpy (in: _Dest=0x3eb6310, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0137.280] wcscat (in: _Dest=0x3eb6310, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0137.280] wcscat (in: _Dest=0x3eb6310, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*" [0137.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0137.281] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d7c0 [0140.073] wcscmp (_String1=".", _String2=".") returned 0 [0140.073] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda445520, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.073] wcscmp (_String1="..", _String2=".") returned 1 [0140.074] wcscmp (_String1="..", _String2="..") returned 0 [0140.074] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1 [0140.074] wcscmp (_String1="Flash.POL", _String2=".") returned 1 [0140.074] wcscmp (_String1="Flash.POL", _String2="..") returned 1 [0140.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3052df0 [0140.074] wcscpy (in: _Dest=0x3052df0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0140.074] wcscat (in: _Dest=0x3052df0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0140.074] wcscat (in: _Dest=0x3052df0, _Source="Flash.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" [0144.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b5c [0144.110] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1 [0144.110] wcscmp (_String1="Mcimpp.POL", _String2=".") returned 1 [0144.110] wcscmp (_String1="Mcimpp.POL", _String2="..") returned 1 [0144.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bbe8 [0144.111] wcscpy (in: _Dest=0x35bbe8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0144.111] wcscat (in: _Dest=0x35bbe8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0144.111] wcscat (in: _Dest=0x35bbe8, _Source="Mcimpp.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" [0144.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0144.112] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="QUICKT~1.POL")) returned 1 [0144.112] wcscmp (_String1="QuickTime.POL", _String2=".") returned 1 [0144.112] wcscmp (_String1="QuickTime.POL", _String2="..") returned 1 [0144.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c008 [0144.112] wcscpy (in: _Dest=0x35c008, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0144.112] wcscat (in: _Dest=0x35c008, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0144.112] wcscat (in: _Dest=0x35c008, _Source="QuickTime.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" [0144.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0144.113] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 1 [0144.113] wcscmp (_String1="WindowsMedia.POL", _String2=".") returned 1 [0144.113] wcscmp (_String1="WindowsMedia.POL", _String2="..") returned 1 [0144.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7208 [0144.113] wcscpy (in: _Dest=0x2ff7208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL" [0144.113] wcscat (in: _Dest=0x2ff7208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\" [0144.113] wcscat (in: _Dest=0x2ff7208, _Source="WindowsMedia.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" [0144.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0144.114] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda445520, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 0 [0144.114] FindClose (in: hFindFile=0x7a2d7c0 | out: hFindFile=0x7a2d7c0) returned 1 [0144.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0144.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6310) returned 1 [0144.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 1308 os_tid = 0x1c04 [0137.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb6900 [0137.287] wcscpy (in: _Dest=0x3eb6900, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0137.287] wcscat (in: _Dest=0x3eb6900, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0137.287] wcscat (in: _Dest=0x3eb6900, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*" [0137.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5710 [0137.287] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0140.074] wcscmp (_String1=".", _String2=".") returned 0 [0140.074] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda41f3c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.074] wcscmp (_String1="..", _String2=".") returned 1 [0140.074] wcscmp (_String1="..", _String2="..") returned 0 [0140.074] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1 [0140.074] wcscmp (_String1="Flash.RUM", _String2=".") returned 1 [0140.074] wcscmp (_String1="Flash.RUM", _String2="..") returned 1 [0140.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053678 [0140.075] wcscpy (in: _Dest=0x3053678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0140.075] wcscat (in: _Dest=0x3053678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0140.075] wcscat (in: _Dest=0x3053678, _Source="Flash.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" [0157.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0157.358] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1 [0157.358] wcscmp (_String1="MCIMPP.RUM", _String2=".") returned 1 [0157.358] wcscmp (_String1="MCIMPP.RUM", _String2="..") returned 1 [0157.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66980 [0157.358] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0157.359] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0157.359] wcscat (in: _Dest=0x7a66980, _Source="MCIMPP.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" [0157.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0157.360] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="QUICKT~1.RUM")) returned 1 [0157.360] wcscmp (_String1="QuickTime.RUM", _String2=".") returned 1 [0157.360] wcscmp (_String1="QuickTime.RUM", _String2="..") returned 1 [0157.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66560 [0157.360] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0157.360] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0157.360] wcscat (in: _Dest=0x7a66560, _Source="QuickTime.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" [0157.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0157.364] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 1 [0157.364] wcscmp (_String1="WindowsMedia.RUM", _String2=".") returned 1 [0157.364] wcscmp (_String1="WindowsMedia.RUM", _String2="..") returned 1 [0157.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf7f8 [0157.364] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM" [0157.364] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\" [0157.364] wcscat (in: _Dest=0x3eaf7f8, _Source="WindowsMedia.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" [0157.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998 [0157.365] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 0 [0157.366] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0157.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5710) returned 1 [0157.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6900) returned 1 [0157.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 1309 os_tid = 0x1c08 [0137.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb71e8 [0137.288] wcscpy (in: _Dest=0x3eb71e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0137.288] wcscat (in: _Dest=0x3eb71e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0137.295] wcscat (in: _Dest=0x3eb71e8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*" [0137.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3c98 [0137.295] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0140.075] wcscmp (_String1=".", _String2=".") returned 0 [0140.075] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda41f3c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.075] wcscmp (_String1="..", _String2=".") returned 1 [0140.075] wcscmp (_String1="..", _String2="..") returned 0 [0140.075] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1 [0140.075] wcscmp (_String1="Flash.RUS", _String2=".") returned 1 [0140.075] wcscmp (_String1="Flash.RUS", _String2="..") returned 1 [0140.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3052f40 [0140.075] wcscpy (in: _Dest=0x3052f40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0140.075] wcscat (in: _Dest=0x3052f40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0140.075] wcscat (in: _Dest=0x3052f40, _Source="Flash.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" [0154.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0154.681] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1 [0154.681] wcscmp (_String1="MCIMPP.RUS", _String2=".") returned 1 [0154.681] wcscmp (_String1="MCIMPP.RUS", _String2="..") returned 1 [0154.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66770 [0154.682] wcscpy (in: _Dest=0x7a66770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0154.682] wcscat (in: _Dest=0x7a66770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0154.682] wcscat (in: _Dest=0x7a66770, _Source="MCIMPP.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" [0154.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0154.683] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="QUICKT~1.RUS")) returned 1 [0154.683] wcscmp (_String1="QuickTime.RUS", _String2=".") returned 1 [0154.684] wcscmp (_String1="QuickTime.RUS", _String2="..") returned 1 [0154.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66820 [0154.684] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0154.684] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0154.684] wcscat (in: _Dest=0x7a66820, _Source="QuickTime.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" [0154.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0154.685] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 1 [0154.685] wcscmp (_String1="WindowsMedia.RUS", _String2=".") returned 1 [0154.685] wcscmp (_String1="WindowsMedia.RUS", _String2="..") returned 1 [0154.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7938 [0154.686] wcscpy (in: _Dest=0x2ff7938, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS" [0154.686] wcscat (in: _Dest=0x2ff7938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\" [0154.686] wcscat (in: _Dest=0x2ff7938, _Source="WindowsMedia.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" [0154.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0154.687] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda41f3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 0 [0154.687] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0154.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c98) returned 1 [0154.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb71e8) returned 1 [0154.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 1310 os_tid = 0x1c0c [0137.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5d28 [0137.297] wcscpy (in: _Dest=0x7ad5d28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0137.297] wcscat (in: _Dest=0x7ad5d28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0137.297] wcscat (in: _Dest=0x7ad5d28, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*" [0137.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0137.297] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0140.076] wcscmp (_String1=".", _String2=".") returned 0 [0140.076] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3f9260, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.076] wcscmp (_String1="..", _String2=".") returned 1 [0140.076] wcscmp (_String1="..", _String2="..") returned 0 [0140.076] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1 [0140.076] wcscmp (_String1="Flash.SKY", _String2=".") returned 1 [0140.076] wcscmp (_String1="Flash.SKY", _String2="..") returned 1 [0140.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053330 [0140.076] wcscpy (in: _Dest=0x3053330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0140.076] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0140.076] wcscat (in: _Dest=0x3053330, _Source="Flash.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" [0158.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0158.690] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1 [0158.690] wcscmp (_String1="Mcimpp.SKY", _String2=".") returned 1 [0158.690] wcscmp (_String1="Mcimpp.SKY", _String2="..") returned 1 [0158.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66980 [0158.691] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0158.691] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0158.691] wcscat (in: _Dest=0x7a66980, _Source="Mcimpp.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" [0158.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0158.692] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="QUICKT~1.SKY")) returned 1 [0158.692] wcscmp (_String1="QuickTime.SKY", _String2=".") returned 1 [0158.692] wcscmp (_String1="QuickTime.SKY", _String2="..") returned 1 [0158.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66820 [0158.692] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0158.692] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0158.692] wcscat (in: _Dest=0x7a66820, _Source="QuickTime.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" [0158.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0158.693] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 1 [0158.693] wcscmp (_String1="WindowsMedia.SKY", _String2=".") returned 1 [0158.693] wcscmp (_String1="WindowsMedia.SKY", _String2="..") returned 1 [0158.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0158.694] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY" [0158.694] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\" [0158.694] wcscat (in: _Dest=0x2ff7430, _Source="WindowsMedia.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" [0158.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0158.695] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 0 [0158.695] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0158.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0158.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5d28) returned 1 [0158.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 1311 os_tid = 0x1c10 [0137.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5dc0 [0137.298] wcscpy (in: _Dest=0x7ad5dc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0137.298] wcscat (in: _Dest=0x7ad5dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0137.298] wcscat (in: _Dest=0x7ad5dc0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*" [0137.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb4830 [0137.298] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db80 [0140.077] wcscmp (_String1=".", _String2=".") returned 0 [0140.077] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3f9260, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.077] wcscmp (_String1="..", _String2=".") returned 1 [0140.077] wcscmp (_String1="..", _String2="..") returned 0 [0140.077] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SLV", cAlternateFileName="")) returned 1 [0140.077] wcscmp (_String1="Flash.SLV", _String2=".") returned 1 [0140.077] wcscmp (_String1="Flash.SLV", _String2="..") returned 1 [0140.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3054050 [0140.077] wcscpy (in: _Dest=0x3054050, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0140.077] wcscat (in: _Dest=0x3054050, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0140.077] wcscat (in: _Dest=0x3054050, _Source="Flash.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" [0144.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3054050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2404 [0144.116] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SLV", cAlternateFileName="")) returned 1 [0144.117] wcscmp (_String1="MCIMPP.SLV", _String2=".") returned 1 [0144.117] wcscmp (_String1="MCIMPP.SLV", _String2="..") returned 1 [0144.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35aa08 [0144.117] wcscpy (in: _Dest=0x35aa08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0144.117] wcscat (in: _Dest=0x35aa08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0144.117] wcscat (in: _Dest=0x35aa08, _Source="MCIMPP.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" [0144.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35aa08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0144.118] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SLV", cAlternateFileName="QUICKT~1.SLV")) returned 1 [0144.118] wcscmp (_String1="QuickTime.SLV", _String2=".") returned 1 [0144.118] wcscmp (_String1="QuickTime.SLV", _String2="..") returned 1 [0144.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bc98 [0144.118] wcscpy (in: _Dest=0x35bc98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0144.118] wcscat (in: _Dest=0x35bc98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0144.118] wcscat (in: _Dest=0x35bc98, _Source="QuickTime.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" [0144.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0144.119] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 1 [0144.119] wcscmp (_String1="WindowsMedia.SLV", _String2=".") returned 1 [0144.119] wcscmp (_String1="WindowsMedia.SLV", _String2="..") returned 1 [0144.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6740 [0144.119] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV" [0144.119] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\" [0144.119] wcscat (in: _Dest=0x2ff6740, _Source="WindowsMedia.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" [0144.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0144.120] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3f9260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 0 [0144.120] FindClose (in: hFindFile=0x7a2db80 | out: hFindFile=0x7a2db80) returned 1 [0144.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb4830) returned 1 [0144.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5dc0) returned 1 [0144.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 1312 os_tid = 0x1c14 [0137.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5e58 [0137.300] wcscpy (in: _Dest=0x7ad5e58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0137.300] wcscat (in: _Dest=0x7ad5e58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0137.300] wcscat (in: _Dest=0x7ad5e58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*" [0137.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0137.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0139.054] wcscmp (_String1=".", _String2=".") returned 0 [0139.055] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3d3100, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.055] wcscmp (_String1="..", _String2=".") returned 1 [0139.055] wcscmp (_String1="..", _String2="..") returned 0 [0139.055] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.TUR", cAlternateFileName="")) returned 1 [0139.055] wcscmp (_String1="Flash.TUR", _String2=".") returned 1 [0139.055] wcscmp (_String1="Flash.TUR", _String2="..") returned 1 [0139.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053e58 [0139.055] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0139.055] wcscat (in: _Dest=0x3053e58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0139.055] wcscat (in: _Dest=0x3053e58, _Source="Flash.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" [0142.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2020 [0142.343] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.TUR", cAlternateFileName="")) returned 1 [0142.343] wcscmp (_String1="MCIMPP.TUR", _String2=".") returned 1 [0142.343] wcscmp (_String1="MCIMPP.TUR", _String2="..") returned 1 [0142.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bdf8 [0142.343] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0142.343] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0142.343] wcscat (in: _Dest=0x35bdf8, _Source="MCIMPP.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" [0142.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0142.344] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.TUR", cAlternateFileName="QUICKT~1.TUR")) returned 1 [0142.344] wcscmp (_String1="QuickTime.TUR", _String2=".") returned 1 [0142.344] wcscmp (_String1="QuickTime.TUR", _String2="..") returned 1 [0142.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c6e8 [0142.344] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0142.344] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0142.344] wcscat (in: _Dest=0x35c6e8, _Source="QuickTime.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" [0142.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0142.345] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 1 [0142.345] wcscmp (_String1="WindowsMedia.TUR", _String2=".") returned 1 [0142.345] wcscmp (_String1="WindowsMedia.TUR", _String2="..") returned 1 [0142.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6ad8 [0142.345] wcscpy (in: _Dest=0x2ff6ad8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR" [0142.346] wcscat (in: _Dest=0x2ff6ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\" [0142.346] wcscat (in: _Dest=0x2ff6ad8, _Source="WindowsMedia.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" [0142.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0142.347] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 0 [0142.347] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0142.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0142.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5e58) returned 1 [0142.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 1313 os_tid = 0x1c18 [0137.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5ef0 [0137.303] wcscpy (in: _Dest=0x7ad5ef0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0137.303] wcscat (in: _Dest=0x7ad5ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0137.303] wcscat (in: _Dest=0x7ad5ef0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*" [0137.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1a78 [0137.303] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d240 [0139.056] wcscmp (_String1=".", _String2=".") returned 0 [0139.056] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xda3d3100, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.056] wcscmp (_String1="..", _String2=".") returned 1 [0139.056] wcscmp (_String1="..", _String2="..") returned 0 [0139.056] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.UKR", cAlternateFileName="")) returned 1 [0139.056] wcscmp (_String1="Flash.UKR", _String2=".") returned 1 [0139.056] wcscmp (_String1="Flash.UKR", _String2="..") returned 1 [0139.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053bb8 [0139.056] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0139.056] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0139.056] wcscat (in: _Dest=0x3053bb8, _Source="Flash.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" [0146.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0146.940] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.UKR", cAlternateFileName="")) returned 1 [0146.940] wcscmp (_String1="MCIMPP.UKR", _String2=".") returned 1 [0146.940] wcscmp (_String1="MCIMPP.UKR", _String2="..") returned 1 [0146.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bdf8 [0146.940] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0146.940] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0146.940] wcscat (in: _Dest=0x35bdf8, _Source="MCIMPP.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" [0146.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0146.943] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.UKR", cAlternateFileName="QUICKT~1.UKR")) returned 1 [0146.943] wcscmp (_String1="QuickTime.UKR", _String2=".") returned 1 [0146.944] wcscmp (_String1="QuickTime.UKR", _String2="..") returned 1 [0146.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0146.944] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0146.944] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0146.944] wcscat (in: _Dest=0x35c378, _Source="QuickTime.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" [0146.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ac [0146.946] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 1 [0146.946] wcscmp (_String1="WindowsMedia.UKR", _String2=".") returned 1 [0146.946] wcscmp (_String1="WindowsMedia.UKR", _String2="..") returned 1 [0146.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6d00 [0146.947] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR" [0146.947] wcscat (in: _Dest=0x2ff6d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\" [0146.947] wcscat (in: _Dest=0x2ff6d00, _Source="WindowsMedia.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" [0146.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0146.948] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3d3100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 0 [0146.948] FindClose (in: hFindFile=0x7a2d240 | out: hFindFile=0x7a2d240) returned 1 [0146.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a78) returned 1 [0146.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5ef0) returned 1 [0146.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad50b0) returned 1 Thread: id = 1314 os_tid = 0x1c1c [0137.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0c68 [0137.305] wcscpy (in: _Dest=0x3ee0c68, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest" [0137.305] wcscat (in: _Dest=0x3ee0c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\" [0137.305] wcscat (in: _Dest=0x3ee0c68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*" [0137.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1340 [0137.305] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d440 [0140.114] wcscmp (_String1=".", _String2=".") returned 0 [0140.114] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.114] wcscmp (_String1="..", _String2=".") returned 1 [0140.114] wcscmp (_String1="..", _String2="..") returned 0 [0140.114] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.115] FindClose (in: hFindFile=0x7a2d440 | out: hFindFile=0x7a2d440) returned 1 [0140.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1340) returned 1 [0140.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0c68) returned 1 [0140.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b30) returned 1 Thread: id = 1315 os_tid = 0x1c20 [0138.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee1148 [0138.504] wcscpy (in: _Dest=0x3ee1148, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions" [0138.504] wcscat (in: _Dest=0x3ee1148, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\" [0138.504] wcscat (in: _Dest=0x3ee1148, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*" [0138.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0138.504] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0139.140] wcscmp (_String1=".", _String2=".") returned 0 [0139.140] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.140] wcscmp (_String1="..", _String2=".") returned 1 [0139.140] wcscmp (_String1="..", _String2="..") returned 0 [0139.140] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.141] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0139.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0139.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1148) returned 1 [0139.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0788) returned 1 Thread: id = 1316 os_tid = 0x1c24 [0138.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0858 [0138.505] wcscpy (in: _Dest=0x3ee0858, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload" [0138.505] wcscat (in: _Dest=0x3ee0858, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\" [0138.505] wcscat (in: _Dest=0x3ee0858, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*" [0138.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb15a8 [0138.506] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0139.142] wcscmp (_String1=".", _String2=".") returned 0 [0139.142] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.142] wcscmp (_String1="..", _String2=".") returned 1 [0139.142] wcscmp (_String1="..", _String2="..") returned 0 [0139.142] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.142] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0139.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb15a8) returned 1 [0139.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0858) returned 1 [0139.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7328) returned 1 Thread: id = 1317 os_tid = 0x1c28 [0138.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc")) returned 0x20 [0138.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc", dwFileAttributes=0x20) returned 0 [0138.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.509] GetLastError () returned 0x5 [0138.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc", dwFileAttributes=0x20) returned 0 [0138.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a2b0) returned 1 Thread: id = 1318 os_tid = 0x1c2c [0138.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc")) returned 0x20 [0138.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc", dwFileAttributes=0x20) returned 0 [0138.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.511] GetLastError () returned 0x5 [0138.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc", dwFileAttributes=0x20) returned 0 [0138.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b98) returned 1 Thread: id = 1319 os_tid = 0x1c30 [0138.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44570 [0138.512] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0138.512] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\" [0138.512] wcscat (in: _Dest=0x3d44570, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*" [0138.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0138.512] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7770 [0138.513] wcscmp (_String1=".", _String2=".") returned 0 [0138.513] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1c7ac20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.513] wcscmp (_String1="..", _String2=".") returned 1 [0138.513] wcscmp (_String1="..", _String2="..") returned 0 [0138.513] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1c7ac20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e1db40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICU", cAlternateFileName="")) returned 1 [0138.513] wcscmp (_String1="ICU", _String2=".") returned 1 [0138.513] wcscmp (_String1="ICU", _String2="..") returned 1 [0138.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44f90 [0138.513] wcscpy (in: _Dest=0x3d44f90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0138.513] wcscat (in: _Dest=0x3d44f90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\" [0138.513] wcscat (in: _Dest=0x3d44f90, _Source="ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0146.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0146.770] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 1 [0146.770] wcscmp (_String1="Mappings", _String2=".") returned 1 [0146.770] wcscmp (_String1="Mappings", _String2="..") returned 1 [0146.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4e60 [0146.770] wcscpy (in: _Dest=0x3df4e60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode" [0146.770] wcscat (in: _Dest=0x3df4e60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\" [0146.770] wcscat (in: _Dest=0x3df4e60, _Source="Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0146.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df4e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0146.772] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 0 [0146.772] FindClose (in: hFindFile=0x7ad7770 | out: hFindFile=0x7ad7770) returned 1 [0146.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0146.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 [0146.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 1320 os_tid = 0x1c34 [0138.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp")) returned 0x20 [0138.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp", dwFileAttributes=0x20) returned 0 [0138.514] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.514] GetLastError () returned 0x5 [0138.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp", dwFileAttributes=0x20) returned 0 [0138.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 Thread: id = 1321 os_tid = 0x1c38 [0138.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp")) returned 0x20 [0138.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp", dwFileAttributes=0x20) returned 0 [0138.516] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.516] GetLastError () returned 0x5 [0138.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp", dwFileAttributes=0x20) returned 0 [0138.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7b600) returned 1 Thread: id = 1322 os_tid = 0x1c3c [0138.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp")) returned 0x20 [0138.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp", dwFileAttributes=0x20) returned 0 [0138.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.518] GetLastError () returned 0x5 [0138.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp", dwFileAttributes=0x20) returned 0 [0138.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6298) returned 1 Thread: id = 1323 os_tid = 0x1c40 [0138.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba660 [0138.519] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" [0138.519] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\" [0138.519] wcscat (in: _Dest=0x3eba660, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*" [0138.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0138.519] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7870 [0138.519] wcscmp (_String1=".", _String2=".") returned 0 [0138.519] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.520] wcscmp (_String1="..", _String2=".") returned 1 [0138.520] wcscmp (_String1="..", _String2="..") returned 0 [0138.520] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfe77d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdfe77d30, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xdfe77d30, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.520] FindClose (in: hFindFile=0x7ad7870 | out: hFindFile=0x7ad7870) returned 1 [0138.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0138.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 [0138.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a418) returned 1 Thread: id = 1324 os_tid = 0x1c44 [0138.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a418 [0138.521] wcscpy (in: _Dest=0x3e1a418, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" [0138.521] wcscat (in: _Dest=0x3e1a418, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\" [0138.521] wcscat (in: _Dest=0x3e1a418, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*" [0138.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0138.521] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7870 [0138.521] wcscmp (_String1=".", _String2=".") returned 0 [0138.521] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.522] wcscmp (_String1="..", _String2=".") returned 1 [0138.522] wcscmp (_String1="..", _String2="..") returned 0 [0138.522] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe16ddeb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe16ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe16ddeb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.522] FindClose (in: hFindFile=0x7ad7870 | out: hFindFile=0x7ad7870) returned 1 [0138.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0138.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a418) returned 1 [0138.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19898) returned 1 Thread: id = 1325 os_tid = 0x1c48 [0138.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d452f0 [0138.523] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0138.523] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0138.523] wcscat (in: _Dest=0x3d452f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*" [0138.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0138.523] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb989790, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0139.145] wcscmp (_String1=".", _String2=".") returned 0 [0139.145] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb989790, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.145] wcscmp (_String1="..", _String2=".") returned 1 [0139.145] wcscmp (_String1="..", _String2="..") returned 0 [0139.145] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb963630, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb963630, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x924964c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1 [0139.145] wcscmp (_String1="glob.js", _String2=".") returned 1 [0139.145] wcscmp (_String1="glob.js", _String2="..") returned 1 [0139.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb7020 [0139.145] wcscpy (in: _Dest=0x3eb7020, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0139.145] wcscat (in: _Dest=0x3eb7020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0139.145] wcscat (in: _Dest=0x3eb7020, _Source="glob.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" [0148.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc [0148.942] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb989790, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x924964c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1 [0148.943] wcscmp (_String1="glob.settings.js", _String2=".") returned 1 [0148.943] wcscmp (_String1="glob.settings.js", _String2="..") returned 1 [0148.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c6e8 [0148.943] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0148.943] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0148.943] wcscat (in: _Dest=0x35c6e8, _Source="glob.settings.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" [0148.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18dc [0148.945] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb989790, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb989790, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x924964c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 0 [0148.945] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0148.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0148.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0148.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 1326 os_tid = 0x1c4c [0138.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba660 [0138.531] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0138.531] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0138.531] wcscat (in: _Dest=0x3eba660, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*" [0138.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0138.531] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0139.146] wcscmp (_String1=".", _String2=".") returned 0 [0139.146] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4aa3d30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe50712d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.146] wcscmp (_String1="..", _String2=".") returned 1 [0139.146] wcscmp (_String1="..", _String2="..") returned 0 [0139.146] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe50712d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe50712d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5097430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0139.146] wcscmp (_String1="addressbook.acrodata", _String2=".") returned 1 [0139.146] wcscmp (_String1="addressbook.acrodata", _String2="..") returned 1 [0139.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c0b8 [0139.146] wcscpy (in: _Dest=0x35c0b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0139.146] wcscat (in: _Dest=0x35c0b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0139.146] wcscat (in: _Dest=0x35c0b8, _Source="addressbook.acrodata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" [0142.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0142.349] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0142.349] wcscmp (_String1="CRLCache", _String2=".") returned 1 [0142.349] wcscmp (_String1="CRLCache", _String2="..") returned 1 [0142.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0142.349] wcscpy (in: _Dest=0x32b820, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0142.349] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0142.349] wcscat (in: _Dest=0x32b820, _Source="CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0142.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20cc [0142.350] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0142.350] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0142.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0142.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 [0142.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 1327 os_tid = 0x1c50 [0138.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e65b98 [0138.532] wcscpy (in: _Dest=0x3e65b98, _Source="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0138.533] wcscat (in: _Dest=0x3e65b98, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\" [0138.533] wcscat (in: _Dest=0x3e65b98, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*") returned="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*" [0138.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0138.533] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7870 [0138.533] wcscmp (_String1=".", _String2=".") returned 0 [0138.533] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.533] wcscmp (_String1="..", _String2=".") returned 1 [0138.533] wcscmp (_String1="..", _String2="..") returned 0 [0138.533] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0138.533] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0138.533] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0138.533] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0138.533] FindClose (in: hFindFile=0x7ad7870 | out: hFindFile=0x7ad7870) returned 1 [0138.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0138.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b98) returned 1 [0138.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66258) returned 1 Thread: id = 1328 os_tid = 0x1c54 [0138.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66258 [0138.535] wcscpy (in: _Dest=0x3e66258, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0138.535] wcscat (in: _Dest=0x3e66258, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0138.535] wcscat (in: _Dest=0x3e66258, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*" [0138.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0138.535] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7870 [0138.537] wcscmp (_String1=".", _String2=".") returned 0 [0138.537] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.537] wcscmp (_String1="..", _String2=".") returned 1 [0138.537] wcscmp (_String1="..", _String2="..") returned 0 [0138.537] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0138.537] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0138.537] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0138.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e67568 [0138.537] wcscpy (in: _Dest=0x3e67568, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0138.537] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0138.537] wcscat (in: _Dest=0x3e67568, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" [0139.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e0 [0139.749] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0139.749] FindClose (in: hFindFile=0x7ad7870 | out: hFindFile=0x7ad7870) returned 1 [0139.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0139.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66258) returned 1 [0139.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6460) returned 1 Thread: id = 1329 os_tid = 0x1c58 [0138.538] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0x20 [0139.147] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0139.147] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.147] GetLastError () returned 0x5 [0139.147] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0139.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 Thread: id = 1330 os_tid = 0x1c5c [0138.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e84178 [0138.538] wcscpy (in: _Dest=0x3e84178, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0" [0138.538] wcscat (in: _Dest=0x3e84178, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\" [0138.538] wcscat (in: _Dest=0x3e84178, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*" [0138.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0138.539] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad77f0 [0138.539] wcscmp (_String1=".", _String2=".") returned 0 [0138.539] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.539] wcscmp (_String1="..", _String2=".") returned 1 [0138.539] wcscmp (_String1="..", _String2="..") returned 0 [0138.539] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0138.539] wcscmp (_String1="Replicate", _String2=".") returned 1 [0138.539] wcscmp (_String1="Replicate", _String2="..") returned 1 [0138.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe68a8 [0138.539] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0" [0138.539] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\" [0138.539] wcscat (in: _Dest=0x2fe68a8, _Source="Replicate" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" [0139.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe68a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0139.751] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0139.751] FindClose (in: hFindFile=0x7ad77f0 | out: hFindFile=0x7ad77f0) returned 1 [0139.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0139.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84178) returned 1 [0139.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84c68) returned 1 Thread: id = 1331 os_tid = 0x1c60 [0138.540] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn")) returned 0x2022 [0138.540] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0138.540] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.540] GetLastError () returned 0x5 [0138.540] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0138.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 Thread: id = 1332 os_tid = 0x1c64 [0138.542] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn")) returned 0x2022 [0138.542] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0138.542] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.542] GetLastError () returned 0x5 [0138.542] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0138.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 Thread: id = 1333 os_tid = 0x1c68 [0138.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf")) returned 0x20 [0138.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0138.543] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.544] GetLastError () returned 0x5 [0138.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0138.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6bf8) returned 1 Thread: id = 1334 os_tid = 0x1c6c [0138.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf")) returned 0x20 [0138.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0138.545] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.545] GetLastError () returned 0x5 [0138.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0138.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5148) returned 1 Thread: id = 1335 os_tid = 0x1c70 [0138.546] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn")) returned 0x2022 [0141.736] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.737] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.737] GetLastError () returned 0x5 [0141.737] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ae0) returned 1 Thread: id = 1336 os_tid = 0x1c74 [0138.549] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn")) returned 0x2022 [0139.151] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0139.152] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.702] GetLastError () returned 0x5 [0141.702] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 Thread: id = 1337 os_tid = 0x1c78 [0138.550] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn")) returned 0x2022 [0141.697] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.697] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.697] GetLastError () returned 0x5 [0141.697] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 1338 os_tid = 0x1c7c [0138.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml")) returned 0x20 [0139.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML", dwFileAttributes=0x20) returned 0 [0139.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.152] GetLastError () returned 0x5 [0139.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML", dwFileAttributes=0x20) returned 0 [0139.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 Thread: id = 1339 os_tid = 0x1c80 [0138.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 0x20 [0138.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0138.551] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.551] GetLastError () returned 0x5 [0138.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 0 [0138.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 Thread: id = 1340 os_tid = 0x1c84 [0138.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml")) returned 0x20 [0138.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0138.553] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0138.553] GetLastError () returned 0x5 [0138.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", dwFileAttributes=0x20) returned 0 [0138.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 Thread: id = 1341 os_tid = 0x1c88 [0138.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e84538 [0138.554] wcscpy (in: _Dest=0x3e84538, _Source="C:\\Users\\All Users\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat" [0138.554] wcscat (in: _Dest=0x3e84538, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\" [0138.554] wcscat (in: _Dest=0x3e84538, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\*" [0138.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0138.554] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7ab0 [0138.554] wcscmp (_String1=".", _String2=".") returned 0 [0138.554] FindNextFileW (in: hFindFile=0x7ad7ab0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.555] wcscmp (_String1="..", _String2=".") returned 1 [0138.555] wcscmp (_String1="..", _String2="..") returned 0 [0138.555] FindNextFileW (in: hFindFile=0x7ad7ab0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0138.555] wcscmp (_String1="10.0", _String2=".") returned 1 [0138.555] wcscmp (_String1="10.0", _String2="..") returned 1 [0138.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14ca0 [0138.555] wcscpy (in: _Dest=0x3e14ca0, _Source="C:\\Users\\All Users\\Adobe\\Acrobat" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat") returned="C:\\Users\\All Users\\Adobe\\Acrobat" [0138.555] wcscat (in: _Dest=0x3e14ca0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\" [0138.555] wcscat (in: _Dest=0x3e14ca0, _Source="10.0" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" [0139.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0139.754] FindNextFileW (in: hFindFile=0x7ad7ab0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0139.754] FindClose (in: hFindFile=0x7ad7ab0 | out: hFindFile=0x7ad7ab0) returned 1 [0139.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0139.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84538) returned 1 [0139.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5d48) returned 1 Thread: id = 1342 os_tid = 0x1c8c [0138.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6f68 [0138.555] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\All Users\\Microsoft\\Assistance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance" [0138.555] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\" [0138.555] wcscat (in: _Dest=0x2fe6f68, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\*" [0138.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bca78 [0138.555] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7230 [0138.556] wcscmp (_String1=".", _String2=".") returned 0 [0138.556] FindNextFileW (in: hFindFile=0x7ad7230, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.556] wcscmp (_String1="..", _String2=".") returned 1 [0138.556] wcscmp (_String1="..", _String2="..") returned 0 [0138.556] FindNextFileW (in: hFindFile=0x7ad7230, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0138.556] wcscmp (_String1="Client", _String2=".") returned 1 [0138.556] wcscmp (_String1="Client", _String2="..") returned 1 [0138.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee11b0 [0138.556] wcscpy (in: _Dest=0x3ee11b0, _Source="C:\\Users\\All Users\\Microsoft\\Assistance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance") returned="C:\\Users\\All Users\\Microsoft\\Assistance" [0138.556] wcscat (in: _Dest=0x3ee11b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\" [0138.556] wcscat (in: _Dest=0x3ee11b0, _Source="Client" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" [0139.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee11b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0139.755] FindNextFileW (in: hFindFile=0x7ad7230, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0139.756] FindClose (in: hFindFile=0x7ad7230 | out: hFindFile=0x7ad7230) returned 1 [0139.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0139.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0139.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27b10) returned 1 Thread: id = 1343 os_tid = 0x1c90 [0138.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x7a27118 [0138.556] wcscpy (in: _Dest=0x7a27118, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0138.556] wcscat (in: _Dest=0x7a27118, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0138.556] wcscat (in: _Dest=0x7a27118, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\*" [0138.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3708 [0138.556] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7830 [0138.557] wcscmp (_String1=".", _String2=".") returned 0 [0138.557] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.557] wcscmp (_String1="..", _String2=".") returned 1 [0138.557] wcscmp (_String1="..", _String2="..") returned 0 [0138.557] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0138.557] wcscmp (_String1="DSS", _String2=".") returned 1 [0138.557] wcscmp (_String1="DSS", _String2="..") returned 1 [0138.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a394d0 [0138.557] wcscpy (in: _Dest=0x7a394d0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0138.557] wcscat (in: _Dest=0x7a394d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0138.557] wcscat (in: _Dest=0x7a394d0, _Source="DSS" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" [0139.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a394d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0139.757] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0139.757] wcscmp (_String1="Keys", _String2=".") returned 1 [0139.757] wcscmp (_String1="Keys", _String2="..") returned 1 [0139.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6f68 [0139.758] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0139.758] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0139.758] wcscat (in: _Dest=0x2fe6f68, _Source="Keys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" [0139.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0139.759] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0139.759] wcscmp (_String1="RSA", _String2=".") returned 1 [0139.759] wcscmp (_String1="RSA", _String2="..") returned 1 [0139.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a27b10 [0139.759] wcscpy (in: _Dest=0x7a27b10, _Source="C:\\Users\\All Users\\Microsoft\\Crypto" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto") returned="C:\\Users\\All Users\\Microsoft\\Crypto" [0139.759] wcscat (in: _Dest=0x7a27b10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\" [0139.759] wcscat (in: _Dest=0x7a27b10, _Source="RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0139.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a27b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0139.760] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0139.760] FindClose (in: hFindFile=0x7ad7830 | out: hFindFile=0x7ad7830) returned 1 [0139.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3708) returned 1 [0139.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27118) returned 1 [0139.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de5c08) returned 1 Thread: id = 1344 os_tid = 0x1c94 [0138.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7028 [0138.557] wcscpy (in: _Dest=0x2fe7028, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0138.557] wcscat (in: _Dest=0x2fe7028, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\" [0138.557] wcscat (in: _Dest=0x2fe7028, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\*" [0138.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4a48 [0138.558] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7af0 [0138.558] wcscmp (_String1=".", _String2=".") returned 0 [0138.558] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.558] wcscmp (_String1="..", _String2=".") returned 1 [0138.558] wcscmp (_String1="..", _String2="..") returned 0 [0138.558] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0138.558] wcscmp (_String1="Device", _String2=".") returned 1 [0138.558] wcscmp (_String1="Device", _String2="..") returned 1 [0138.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26158 [0138.558] wcscpy (in: _Dest=0x7a26158, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0138.558] wcscat (in: _Dest=0x7a26158, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\" [0138.558] wcscat (in: _Dest=0x7a26158, _Source="Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0157.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a26158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0157.622] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0157.622] wcscmp (_String1="Task", _String2=".") returned 1 [0157.622] wcscmp (_String1="Task", _String2="..") returned 1 [0157.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0f40 [0157.622] wcscpy (in: _Dest=0x3ee0f40, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage") returned="C:\\Users\\All Users\\Microsoft\\Device Stage" [0157.622] wcscat (in: _Dest=0x3ee0f40, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\" [0157.622] wcscat (in: _Dest=0x3ee0f40, _Source="Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0157.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0157.623] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ea4a48 | out: lpFindFileData=0x3ea4a48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0157.623] FindClose (in: hFindFile=0x7ad7af0 | out: hFindFile=0x7ad7af0) returned 1 [0157.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4a48) returned 1 [0157.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7028) returned 1 [0157.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe72c8) returned 1 Thread: id = 1345 os_tid = 0x1c98 [0138.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe70e8 [0138.558] wcscpy (in: _Dest=0x2fe70e8, _Source="C:\\Users\\All Users\\Microsoft\\DeviceSync" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync" [0138.558] wcscat (in: _Dest=0x2fe70e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync\\") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync\\" [0138.559] wcscat (in: _Dest=0x2fe70e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*") returned="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*" [0138.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0138.559] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b30 [0138.559] wcscmp (_String1=".", _String2=".") returned 0 [0138.559] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.559] wcscmp (_String1="..", _String2=".") returned 1 [0138.559] wcscmp (_String1="..", _String2="..") returned 0 [0138.559] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8a6f8efe, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.559] FindClose (in: hFindFile=0x7ad7b30 | out: hFindFile=0x7ad7b30) returned 1 [0138.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0138.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe70e8) returned 1 [0138.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d488f8) returned 1 Thread: id = 1346 os_tid = 0x1c9c [0138.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e84308 [0138.560] wcscpy (in: _Dest=0x3e84308, _Source="C:\\Users\\All Users\\Microsoft\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM" [0138.560] wcscat (in: _Dest=0x3e84308, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\DRM\\" [0138.560] wcscat (in: _Dest=0x3e84308, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\*") returned="C:\\Users\\All Users\\Microsoft\\DRM\\*" [0138.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0138.561] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b30 [0138.561] wcscmp (_String1=".", _String2=".") returned 0 [0138.561] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.561] wcscmp (_String1="..", _String2=".") returned 1 [0138.561] wcscmp (_String1="..", _String2="..") returned 0 [0138.561] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0138.561] wcscmp (_String1="Server", _String2=".") returned 1 [0138.561] wcscmp (_String1="Server", _String2="..") returned 1 [0138.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x3d488f8 [0138.561] wcscpy (in: _Dest=0x3d488f8, _Source="C:\\Users\\All Users\\Microsoft\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM") returned="C:\\Users\\All Users\\Microsoft\\DRM" [0138.561] wcscat (in: _Dest=0x3d488f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\DRM\\" [0138.561] wcscat (in: _Dest=0x3d488f8, _Source="Server" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server" [0146.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d488f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0146.775] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0146.775] FindClose (in: hFindFile=0x7ad7b30 | out: hFindFile=0x7ad7b30) returned 1 [0146.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0146.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84308) returned 1 [0146.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6108) returned 1 Thread: id = 1347 os_tid = 0x1ca0 [0138.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a39528 [0138.562] wcscpy (in: _Dest=0x7a39528, _Source="C:\\Users\\All Users\\Microsoft\\eHome" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome" [0138.562] wcscat (in: _Dest=0x7a39528, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\") returned="C:\\Users\\All Users\\Microsoft\\eHome\\" [0138.562] wcscat (in: _Dest=0x7a39528, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\*") returned="C:\\Users\\All Users\\Microsoft\\eHome\\*" [0138.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59a40 [0138.562] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b70 [0138.562] wcscmp (_String1=".", _String2=".") returned 0 [0138.562] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.562] wcscmp (_String1="..", _String2=".") returned 1 [0138.562] wcscmp (_String1="..", _String2="..") returned 0 [0138.562] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0138.562] wcscmp (_String1="logs", _String2=".") returned 1 [0138.562] wcscmp (_String1="logs", _String2="..") returned 1 [0138.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a39580 [0138.563] wcscpy (in: _Dest=0x7a39580, _Source="C:\\Users\\All Users\\Microsoft\\eHome" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome") returned="C:\\Users\\All Users\\Microsoft\\eHome" [0138.563] wcscat (in: _Dest=0x7a39580, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\") returned="C:\\Users\\All Users\\Microsoft\\eHome\\" [0138.563] wcscat (in: _Dest=0x7a39580, _Source="logs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs" [0139.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a39580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0139.762] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0139.762] FindClose (in: hFindFile=0x7ad7b70 | out: hFindFile=0x7ad7b70) returned 1 [0139.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59a40) returned 1 [0139.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39528) returned 1 [0139.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de61f8) returned 1 Thread: id = 1348 os_tid = 0x1ca4 [0138.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe70e8 [0138.563] wcscpy (in: _Dest=0x2fe70e8, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer" [0138.563] wcscat (in: _Dest=0x2fe70e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\" [0138.563] wcscat (in: _Dest=0x2fe70e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*" [0138.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a4d0 [0138.563] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bb0 [0138.563] wcscmp (_String1=".", _String2=".") returned 0 [0138.564] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa944edd0, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0x9e928940, ftLastAccessTime.dwHighDateTime=0x1d3ab2a, ftLastWriteTime.dwLowDateTime=0x9e928940, ftLastWriteTime.dwHighDateTime=0x1d3ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.564] wcscmp (_String1="..", _String2=".") returned 1 [0138.564] wcscmp (_String1="..", _String2="..") returned 0 [0138.564] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0138.564] wcscmp (_String1="Views", _String2=".") returned 1 [0138.564] wcscmp (_String1="Views", _String2="..") returned 1 [0138.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee1078 [0138.564] wcscpy (in: _Dest=0x3ee1078, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer" [0138.564] wcscat (in: _Dest=0x3ee1078, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\" [0138.564] wcscat (in: _Dest=0x3ee1078, _Source="Views" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" [0139.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0139.764] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0139.764] FindClose (in: hFindFile=0x7ad7bb0 | out: hFindFile=0x7ad7bb0) returned 1 [0139.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a4d0) returned 1 [0139.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe70e8) returned 1 [0139.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7388) returned 1 Thread: id = 1349 os_tid = 0x1ca8 [0138.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe5e88 [0138.564] wcscpy (in: _Dest=0x2fe5e88, _Source="C:\\Users\\All Users\\Microsoft\\HTML Help" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help") returned="C:\\Users\\All Users\\Microsoft\\HTML Help" [0138.564] wcscat (in: _Dest=0x2fe5e88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help\\") returned="C:\\Users\\All Users\\Microsoft\\HTML Help\\" [0138.564] wcscat (in: _Dest=0x2fe5e88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\HTML Help\\*") returned="C:\\Users\\All Users\\Microsoft\\HTML Help\\*" [0138.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a738 [0138.564] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\HTML Help\\*", lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bf0 [0138.565] wcscmp (_String1=".", _String2=".") returned 0 [0138.565] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.565] wcscmp (_String1="..", _String2=".") returned 1 [0138.565] wcscmp (_String1="..", _String2="..") returned 0 [0138.565] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e243bd0, ftCreationTime.dwHighDateTime=0x1d3022b, ftLastAccessTime.dwLowDateTime=0x6e243bd0, ftLastAccessTime.dwHighDateTime=0x1d3022b, ftLastWriteTime.dwLowDateTime=0x6e243bd0, ftLastWriteTime.dwHighDateTime=0x1d3022b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.565] FindClose (in: hFindFile=0x7ad7bf0 | out: hFindFile=0x7ad7bf0) returned 1 [0138.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a738) returned 1 [0138.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5e88) returned 1 [0138.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14bf0) returned 1 Thread: id = 1350 os_tid = 0x1cac [0138.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe5e88 [0138.566] wcscpy (in: _Dest=0x2fe5e88, _Source="C:\\Users\\All Users\\Microsoft\\IdentityCRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL" [0138.566] wcscat (in: _Dest=0x2fe5e88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\" [0138.566] wcscat (in: _Dest=0x2fe5e88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*" [0138.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a738 [0138.566] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bf0 [0138.567] wcscmp (_String1=".", _String2=".") returned 0 [0138.567] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f09cf6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.567] wcscmp (_String1="..", _String2=".") returned 1 [0138.567] wcscmp (_String1="..", _String2="..") returned 0 [0138.567] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x9fd2229c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0138.567] wcscmp (_String1="ppcrlconfig.dll", _String2=".") returned 1 [0138.567] wcscmp (_String1="ppcrlconfig.dll", _String2="..") returned 1 [0138.567] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0138.567] wcscmp (_String1="ppcrlui.dll", _String2=".") returned 1 [0138.567] wcscmp (_String1="ppcrlui.dll", _String2="..") returned 1 [0138.567] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a4265f, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x88a4265f, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xa02a357c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0138.567] FindClose (in: hFindFile=0x7ad7bf0 | out: hFindFile=0x7ad7bf0) returned 1 [0138.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a738) returned 1 [0138.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5e88) returned 1 [0138.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe69c8) returned 1 Thread: id = 1351 os_tid = 0x1cb0 [0138.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x44) returned 0x3e844e8 [0138.568] wcscpy (in: _Dest=0x3e844e8, _Source="C:\\Users\\All Users\\Microsoft\\MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0138.568] wcscat (in: _Dest=0x3e844e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\") returned="C:\\Users\\All Users\\Microsoft\\MF\\" [0138.568] wcscat (in: _Dest=0x3e844e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\*") returned="C:\\Users\\All Users\\Microsoft\\MF\\*" [0138.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a738 [0138.569] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bf0 [0138.569] wcscmp (_String1=".", _String2=".") returned 0 [0138.569] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.569] wcscmp (_String1="..", _String2=".") returned 1 [0138.569] wcscmp (_String1="..", _String2="..") returned 0 [0138.569] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0138.569] wcscmp (_String1="Active.GRL", _String2=".") returned 1 [0138.569] wcscmp (_String1="Active.GRL", _String2="..") returned 1 [0138.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe69c8 [0138.569] wcscpy (in: _Dest=0x2fe69c8, _Source="C:\\Users\\All Users\\Microsoft\\MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0138.569] wcscat (in: _Dest=0x2fe69c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\") returned="C:\\Users\\All Users\\Microsoft\\MF\\" [0138.569] wcscat (in: _Dest=0x2fe69c8, _Source="Active.GRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL") returned="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" [0139.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe69c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0139.765] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0139.766] wcscmp (_String1="Pending.GRL", _String2=".") returned 1 [0139.766] wcscmp (_String1="Pending.GRL", _String2="..") returned 1 [0139.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7388 [0139.766] wcscpy (in: _Dest=0x2fe7388, _Source="C:\\Users\\All Users\\Microsoft\\MF" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF") returned="C:\\Users\\All Users\\Microsoft\\MF" [0139.766] wcscat (in: _Dest=0x2fe7388, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\") returned="C:\\Users\\All Users\\Microsoft\\MF\\" [0139.766] wcscat (in: _Dest=0x2fe7388, _Source="Pending.GRL" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL") returned="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" [0139.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe7388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0139.767] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0139.767] FindClose (in: hFindFile=0x7ad7bf0 | out: hFindFile=0x7ad7bf0) returned 1 [0139.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a738) returned 1 [0139.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e844e8) returned 1 [0139.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 Thread: id = 1352 os_tid = 0x1cb4 [0138.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e83f48 [0138.570] wcscpy (in: _Dest=0x3e83f48, _Source="C:\\Users\\All Users\\Microsoft\\MSDN" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN" [0138.570] wcscat (in: _Dest=0x3e83f48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\" [0138.570] wcscat (in: _Dest=0x3e83f48, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\*") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\*" [0138.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a9a0 [0138.570] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7c30 [0138.570] wcscmp (_String1=".", _String2=".") returned 0 [0138.570] FindNextFileW (in: hFindFile=0x7ad7c30, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.570] wcscmp (_String1="..", _String2=".") returned 1 [0138.570] wcscmp (_String1="..", _String2="..") returned 0 [0138.570] FindNextFileW (in: hFindFile=0x7ad7c30, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0138.570] wcscmp (_String1="8.0", _String2=".") returned 1 [0138.570] wcscmp (_String1="8.0", _String2="..") returned 1 [0138.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3e14bf0 [0138.570] wcscpy (in: _Dest=0x3e14bf0, _Source="C:\\Users\\All Users\\Microsoft\\MSDN" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN") returned="C:\\Users\\All Users\\Microsoft\\MSDN" [0138.570] wcscat (in: _Dest=0x3e14bf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\" [0138.571] wcscat (in: _Dest=0x3e14bf0, _Source="8.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" [0142.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e14bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0142.326] FindNextFileW (in: hFindFile=0x7ad7c30, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0142.326] FindClose (in: hFindFile=0x7ad7c30 | out: hFindFile=0x7ad7c30) returned 1 [0142.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a9a0) returned 1 [0142.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e83f48) returned 1 [0142.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6388) returned 1 Thread: id = 1353 os_tid = 0x1cb8 [0138.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe5e88 [0138.571] wcscpy (in: _Dest=0x2fe5e88, _Source="C:\\Users\\All Users\\Microsoft\\NetFramework" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework" [0138.571] wcscat (in: _Dest=0x2fe5e88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\" [0138.571] wcscat (in: _Dest=0x2fe5e88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\*") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\*" [0138.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ac08 [0138.571] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7c70 [0138.571] wcscmp (_String1=".", _String2=".") returned 0 [0138.571] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.571] wcscmp (_String1="..", _String2=".") returned 1 [0138.571] wcscmp (_String1="..", _String2="..") returned 0 [0138.571] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0138.571] wcscmp (_String1="BreadcrumbStore", _String2=".") returned 1 [0138.571] wcscmp (_String1="BreadcrumbStore", _String2="..") returned 1 [0138.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3da63f0 [0138.572] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Users\\All Users\\Microsoft\\NetFramework" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework") returned="C:\\Users\\All Users\\Microsoft\\NetFramework" [0138.572] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\" [0138.572] wcscat (in: _Dest=0x3da63f0, _Source="BreadcrumbStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" [0139.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3da63f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c [0139.769] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8c9a4d20, ftCreationTime.dwHighDateTime=0x1d2f5a1, ftLastAccessTime.dwLowDateTime=0x8c9a4d20, ftLastAccessTime.dwHighDateTime=0x1d2f5a1, ftLastWriteTime.dwLowDateTime=0x8c9a4d20, ftLastWriteTime.dwHighDateTime=0x1d2f5a1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0139.769] FindClose (in: hFindFile=0x7ad7c70 | out: hFindFile=0x7ad7c70) returned 1 [0139.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ac08) returned 1 [0139.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5e88) returned 1 [0139.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 Thread: id = 1354 os_tid = 0x1cbc [0138.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a395d8 [0138.572] wcscpy (in: _Dest=0x7a395d8, _Source="C:\\Users\\All Users\\Microsoft\\Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0138.572] wcscat (in: _Dest=0x7a395d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\" [0138.572] wcscat (in: _Dest=0x7a395d8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\*") returned="C:\\Users\\All Users\\Microsoft\\Network\\*" [0138.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ae70 [0138.572] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cb0 [0138.572] wcscmp (_String1=".", _String2=".") returned 0 [0138.572] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f2fe55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.572] wcscmp (_String1="..", _String2=".") returned 1 [0138.572] wcscmp (_String1="..", _String2="..") returned 0 [0138.572] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0138.573] wcscmp (_String1="Connections", _String2=".") returned 1 [0138.573] wcscmp (_String1="Connections", _String2="..") returned 1 [0138.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a267e8 [0138.573] wcscpy (in: _Dest=0x7a267e8, _Source="C:\\Users\\All Users\\Microsoft\\Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0138.573] wcscat (in: _Dest=0x7a267e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\" [0138.573] wcscat (in: _Dest=0x7a267e8, _Source="Connections" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections" [0139.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a267e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0139.771] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0139.771] wcscmp (_String1="Downloader", _String2=".") returned 1 [0139.771] wcscmp (_String1="Downloader", _String2="..") returned 1 [0139.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee00a0 [0139.771] wcscpy (in: _Dest=0x3ee00a0, _Source="C:\\Users\\All Users\\Microsoft\\Network" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network") returned="C:\\Users\\All Users\\Microsoft\\Network" [0139.771] wcscat (in: _Dest=0x3ee00a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\" [0139.771] wcscat (in: _Dest=0x3ee00a0, _Source="Downloader" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" [0139.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee00a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0139.772] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x5ca238d5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x5ca238d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0139.772] FindClose (in: hFindFile=0x7ad7cb0 | out: hFindFile=0x7ad7cb0) returned 1 [0139.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ae70) returned 1 [0139.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a395d8) returned 1 [0139.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e15380) returned 1 Thread: id = 1355 os_tid = 0x1cc0 [0138.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x7a39630 [0138.573] wcscpy (in: _Dest=0x7a39630, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE" [0138.573] wcscat (in: _Dest=0x7a39630, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\" [0138.573] wcscat (in: _Dest=0x7a39630, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\*" [0138.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b0d8 [0138.573] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cf0 [0138.574] wcscmp (_String1=".", _String2=".") returned 0 [0138.574] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.574] wcscmp (_String1="..", _String2=".") returned 1 [0138.574] wcscmp (_String1="..", _String2="..") returned 0 [0138.574] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe546bd00, ftCreationTime.dwHighDateTime=0x1ca0563, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe546bd00, ftLastWriteTime.dwHighDateTime=0x1ca0563, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0138.574] wcscmp (_String1="AssetLibrary.ico", _String2=".") returned 1 [0138.574] wcscmp (_String1="AssetLibrary.ico", _String2="..") returned 1 [0138.574] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4123ca00, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4123ca00, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0138.574] wcscmp (_String1="DocumentRepository.ico", _String2=".") returned 1 [0138.574] wcscmp (_String1="DocumentRepository.ico", _String2="..") returned 1 [0138.574] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc130b800, ftCreationTime.dwHighDateTime=0x1c9fb2f, ftLastAccessTime.dwLowDateTime=0x80c947b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc130b800, ftLastWriteTime.dwHighDateTime=0x1c9fb2f, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0138.574] wcscmp (_String1="MySharePoints.ico", _String2=".") returned 1 [0138.574] wcscmp (_String1="MySharePoints.ico", _String2="..") returned 1 [0138.574] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e61fd00, ftCreationTime.dwHighDateTime=0x1c62807, ftLastAccessTime.dwLowDateTime=0x8dd9b390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e61fd00, ftLastWriteTime.dwHighDateTime=0x1c62807, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0138.574] wcscmp (_String1="MySite.ico", _String2=".") returned 1 [0138.574] wcscmp (_String1="MySite.ico", _String2="..") returned 1 [0138.574] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87792900, ftCreationTime.dwHighDateTime=0x1c638ad, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87792900, ftLastWriteTime.dwHighDateTime=0x1c638ad, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0138.574] wcscmp (_String1="SharePointPortalSite.ico", _String2=".") returned 1 [0138.574] wcscmp (_String1="SharePointPortalSite.ico", _String2="..") returned 1 [0138.574] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42a91900, ftCreationTime.dwHighDateTime=0x1c6276b, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42a91900, ftLastWriteTime.dwHighDateTime=0x1c6276b, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0138.574] wcscmp (_String1="SharePointTeamSite.ico", _String2=".") returned 1 [0138.574] wcscmp (_String1="SharePointTeamSite.ico", _String2="..") returned 1 [0138.574] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0138.574] wcscmp (_String1="UICaptions", _String2=".") returned 1 [0138.574] wcscmp (_String1="UICaptions", _String2="..") returned 1 [0138.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edf9b8 [0138.574] wcscpy (in: _Dest=0x3edf9b8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE") returned="C:\\Users\\All Users\\Microsoft\\OFFICE" [0138.575] wcscat (in: _Dest=0x3edf9b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\" [0138.575] wcscat (in: _Dest=0x3edf9b8, _Source="UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0142.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20 [0142.329] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0 [0142.329] FindClose (in: hFindFile=0x7ad7cf0 | out: hFindFile=0x7ad7cf0) returned 1 [0142.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b0d8) returned 1 [0142.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39630) returned 1 [0142.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6018) returned 1 Thread: id = 1356 os_tid = 0x1cc4 [0138.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8f88 [0138.575] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0138.575] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0138.575] wcscat (in: _Dest=0x3eb8f88, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*" [0138.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b340 [0138.575] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7d30 [0138.575] wcscmp (_String1=".", _String2=".") returned 0 [0138.575] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xe2eb5c50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2eb5c50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.575] wcscmp (_String1="..", _String2=".") returned 1 [0138.575] wcscmp (_String1="..", _String2="..") returned 0 [0138.575] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0138.575] wcscmp (_String1="Cache", _String2=".") returned 1 [0138.576] wcscmp (_String1="Cache", _String2="..") returned 1 [0138.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45650 [0138.576] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0138.576] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0138.576] wcscat (in: _Dest=0x3d45650, _Source="Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0139.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0139.774] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0139.774] wcscmp (_String1="tokens.dat", _String2=".") returned 1 [0139.774] wcscmp (_String1="tokens.dat", _String2="..") returned 1 [0139.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df54a0 [0139.774] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform" [0139.774] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\" [0139.774] wcscat (in: _Dest=0x3df54a0, _Source="tokens.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0139.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df54a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0139.775] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96de1d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc8b77990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2e1d6d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x483c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0139.775] FindClose (in: hFindFile=0x7ad7d30 | out: hFindFile=0x7ad7d30) returned 1 [0139.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b340) returned 1 [0139.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 [0139.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 1357 os_tid = 0x1cc8 [0138.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e84088 [0138.576] wcscpy (in: _Dest=0x3e84088, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0138.576] wcscat (in: _Dest=0x3e84088, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0138.576] wcscat (in: _Dest=0x3e84088, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\*" [0138.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b5a8 [0138.576] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7d70 [0138.576] wcscmp (_String1=".", _String2=".") returned 0 [0138.576] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9f55fb4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.576] wcscmp (_String1="..", _String2=".") returned 1 [0138.576] wcscmp (_String1="..", _String2="..") returned 0 [0138.577] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0138.577] wcscmp (_String1="Outbound", _String2=".") returned 1 [0138.577] wcscmp (_String1="Outbound", _String2="..") returned 1 [0138.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6fc8 [0138.577] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0138.577] wcscat (in: _Dest=0x2fe6fc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0138.577] wcscat (in: _Dest=0x2fe6fc8, _Source="Outbound" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" [0142.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0142.331] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0142.331] wcscmp (_String1="PublishedData", _String2=".") returned 1 [0142.331] wcscmp (_String1="PublishedData", _String2="..") returned 1 [0142.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1f5c8 [0142.331] wcscpy (in: _Dest=0x3e1f5c8, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0142.331] wcscat (in: _Dest=0x3e1f5c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0142.331] wcscat (in: _Dest=0x3e1f5c8, _Source="PublishedData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" [0142.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1f5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0142.332] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0142.332] wcscmp (_String1="StateData", _String2=".") returned 1 [0142.332] wcscmp (_String1="StateData", _String2="..") returned 1 [0142.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe3b48 [0142.332] wcscpy (in: _Dest=0x2fe3b48, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0142.332] wcscat (in: _Dest=0x2fe3b48, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0142.332] wcscat (in: _Dest=0x2fe3b48, _Source="StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0142.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe3b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0142.333] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc5767280, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc5767280, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.333] wcscmp (_String1="Temp", _String2=".") returned 1 [0142.333] wcscmp (_String1="Temp", _String2="..") returned 1 [0142.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x7a39630 [0142.334] wcscpy (in: _Dest=0x7a39630, _Source="C:\\Users\\All Users\\Microsoft\\RAC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC") returned="C:\\Users\\All Users\\Microsoft\\RAC" [0142.334] wcscat (in: _Dest=0x7a39630, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\" [0142.334] wcscat (in: _Dest=0x7a39630, _Source="Temp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Temp") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Temp" [0142.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39630) returned 1 [0142.334] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc5767280, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc5767280, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0142.334] FindClose (in: hFindFile=0x7ad7d70 | out: hFindFile=0x7ad7d70) returned 1 [0142.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b5a8) returned 1 [0142.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84088) returned 1 [0142.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6248) returned 1 Thread: id = 1358 os_tid = 0x1ccc [0138.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x7a39688 [0138.577] wcscpy (in: _Dest=0x7a39688, _Source="C:\\Users\\All Users\\Microsoft\\Search" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search" [0138.577] wcscat (in: _Dest=0x7a39688, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\") returned="C:\\Users\\All Users\\Microsoft\\Search\\" [0138.577] wcscat (in: _Dest=0x7a39688, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\*") returned="C:\\Users\\All Users\\Microsoft\\Search\\*" [0138.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b810 [0138.577] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0138.578] wcscmp (_String1=".", _String2=".") returned 0 [0138.578] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x85ab7b0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x85ab7b0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.578] wcscmp (_String1="..", _String2=".") returned 1 [0138.578] wcscmp (_String1="..", _String2="..") returned 0 [0138.578] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0138.578] wcscmp (_String1="Data", _String2=".") returned 1 [0138.578] wcscmp (_String1="Data", _String2="..") returned 1 [0138.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe64e8 [0138.578] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Users\\All Users\\Microsoft\\Search" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search") returned="C:\\Users\\All Users\\Microsoft\\Search" [0138.578] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\") returned="C:\\Users\\All Users\\Microsoft\\Search\\" [0138.578] wcscat (in: _Dest=0x2fe64e8, _Source="Data" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data" [0139.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe64e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b94 [0139.777] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab7b0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x861dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x861dbd0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0139.778] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0139.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b810) returned 1 [0139.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39688) returned 1 [0139.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6298) returned 1 Thread: id = 1359 os_tid = 0x1cd0 [0138.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa10 [0138.579] wcscpy (in: _Dest=0x3f3fa10, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0138.579] wcscat (in: _Dest=0x3f3fa10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0138.579] wcscat (in: _Dest=0x3f3fa10, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*" [0138.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ba78 [0138.579] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7df0 [0138.579] wcscmp (_String1=".", _String2=".") returned 0 [0138.579] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.579] wcscmp (_String1="..", _String2=".") returned 1 [0138.579] wcscmp (_String1="..", _String2="..") returned 0 [0138.579] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0138.579] wcscmp (_String1="Default Pictures", _String2=".") returned 1 [0138.580] wcscmp (_String1="Default Pictures", _String2="..") returned 1 [0138.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44960 [0138.580] wcscpy (in: _Dest=0x3d44960, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0138.580] wcscat (in: _Dest=0x3d44960, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0138.580] wcscat (in: _Dest=0x3d44960, _Source="Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0139.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0139.780] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9250c90, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x9250c90, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x9250c90, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEBsYm5.dat", cAlternateFileName="")) returned 1 [0139.780] wcscmp (_String1="EEBsYm5.dat", _String2=".") returned 1 [0139.780] wcscmp (_String1="EEBsYm5.dat", _String2="..") returned 1 [0139.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9230 [0139.780] wcscpy (in: _Dest=0x3eb9230, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0139.780] wcscat (in: _Dest=0x3eb9230, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0139.780] wcscat (in: _Dest=0x3eb9230, _Source="EEBsYm5.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat" [0139.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0139.781] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0139.781] wcscmp (_String1="guest.bmp", _String2=".") returned 1 [0139.781] wcscmp (_String1="guest.bmp", _String2="..") returned 1 [0139.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8f88 [0139.782] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0139.782] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0139.782] wcscat (in: _Dest=0x3eb8f88, _Source="guest.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" [0139.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0139.783] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0139.783] wcscmp (_String1="user.bmp", _String2=".") returned 1 [0139.783] wcscmp (_String1="user.bmp", _String2="..") returned 1 [0139.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19098 [0139.783] wcscpy (in: _Dest=0x3e19098, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures" [0139.783] wcscat (in: _Dest=0x3e19098, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\" [0139.783] wcscat (in: _Dest=0x3e19098, _Source="user.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" [0139.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0139.784] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5119f42, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1d7a1c3, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1d7a1c3, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0139.784] FindClose (in: hFindFile=0x7ad7df0 | out: hFindFile=0x7ad7df0) returned 1 [0139.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ba78) returned 1 [0139.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0139.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23300) returned 1 Thread: id = 1360 os_tid = 0x1cd4 [0138.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a396e0 [0138.580] wcscpy (in: _Dest=0x7a396e0, _Source="C:\\Users\\All Users\\Microsoft\\Vault" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault") returned="C:\\Users\\All Users\\Microsoft\\Vault" [0138.580] wcscat (in: _Dest=0x7a396e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault\\") returned="C:\\Users\\All Users\\Microsoft\\Vault\\" [0138.580] wcscat (in: _Dest=0x7a396e0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Vault\\*") returned="C:\\Users\\All Users\\Microsoft\\Vault\\*" [0138.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bce0 [0138.581] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e30 [0138.581] wcscmp (_String1=".", _String2=".") returned 0 [0138.581] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.581] wcscmp (_String1="..", _String2=".") returned 1 [0138.581] wcscmp (_String1="..", _String2="..") returned 0 [0138.581] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f55fb4, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x7ae5fbe5, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.581] FindClose (in: hFindFile=0x7ad7e30 | out: hFindFile=0x7ad7e30) returned 1 [0138.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bce0) returned 1 [0138.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a396e0) returned 1 [0138.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de64c8) returned 1 Thread: id = 1361 os_tid = 0x1cd8 [0138.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a396e0 [0138.584] wcscpy (in: _Dest=0x7a396e0, _Source="C:\\Users\\All Users\\Microsoft\\VISIO" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO") returned="C:\\Users\\All Users\\Microsoft\\VISIO" [0138.584] wcscat (in: _Dest=0x7a396e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO\\") returned="C:\\Users\\All Users\\Microsoft\\VISIO\\" [0138.584] wcscat (in: _Dest=0x7a396e0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\VISIO\\*") returned="C:\\Users\\All Users\\Microsoft\\VISIO\\*" [0138.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bce0 [0138.584] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e30 [0138.585] wcscmp (_String1=".", _String2=".") returned 0 [0138.585] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.585] wcscmp (_String1="..", _String2=".") returned 1 [0138.585] wcscmp (_String1="..", _String2="..") returned 0 [0138.585] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcdee1d0, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xbcdee1d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcdee1d0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.585] FindClose (in: hFindFile=0x7ad7e30 | out: hFindFile=0x7ad7e30) returned 1 [0138.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bce0) returned 1 [0138.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a396e0) returned 1 [0138.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6158) returned 1 Thread: id = 1362 os_tid = 0x1cdc [0138.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a396e0 [0138.586] wcscpy (in: _Dest=0x7a396e0, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0138.586] wcscat (in: _Dest=0x7a396e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0138.586] wcscat (in: _Dest=0x7a396e0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\*" [0138.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bce0 [0138.586] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\*", lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e30 [0138.587] wcscmp (_String1=".", _String2=".") returned 0 [0138.587] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f55fb4, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.587] wcscmp (_String1="..", _String2=".") returned 1 [0138.587] wcscmp (_String1="..", _String2="..") returned 0 [0138.587] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0138.587] wcscmp (_String1="AIT", _String2=".") returned 1 [0138.587] wcscmp (_String1="AIT", _String2="..") returned 1 [0138.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6968 [0138.587] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0138.587] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0138.587] wcscat (in: _Dest=0x2fe6968, _Source="AIT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" [0146.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0146.779] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b470439, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xd800ce10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd800ce10, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0146.779] wcscmp (_String1="Caches", _String2=".") returned 1 [0146.779] wcscmp (_String1="Caches", _String2="..") returned 1 [0146.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d28 [0146.779] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0146.779] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0146.780] wcscat (in: _Dest=0x2fe6d28, _Source="Caches" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Caches") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches" [0146.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 [0146.780] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0146.780] wcscmp (_String1="DeviceMetadataStore", _String2=".") returned 1 [0146.780] wcscmp (_String1="DeviceMetadataStore", _String2="..") returned 1 [0146.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47c98 [0146.780] wcscpy (in: _Dest=0x3e47c98, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0146.780] wcscat (in: _Dest=0x3e47c98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0146.780] wcscat (in: _Dest=0x3e47c98, _Source="DeviceMetadataStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" [0146.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e47c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0146.782] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0146.782] wcscmp (_String1="DRM", _String2=".") returned 1 [0146.782] wcscmp (_String1="DRM", _String2="..") returned 1 [0146.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6d28 [0146.783] wcscpy (in: _Dest=0x2fe6d28, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0146.783] wcscat (in: _Dest=0x2fe6d28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0146.783] wcscat (in: _Dest=0x2fe6d28, _Source="DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0146.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ec [0146.785] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0146.785] wcscmp (_String1="GameExplorer", _String2=".") returned 1 [0146.785] wcscmp (_String1="GameExplorer", _String2="..") returned 1 [0146.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a234c0 [0146.785] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0146.785] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0146.785] wcscat (in: _Dest=0x7a234c0, _Source="GameExplorer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" [0146.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a234c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0146.787] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7202b9f0, ftLastAccessTime.dwHighDateTime=0x1d30232, ftLastWriteTime.dwLowDateTime=0x7202b9f0, ftLastWriteTime.dwHighDateTime=0x1d30232, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0146.787] wcscmp (_String1="Power Efficiency Diagnostics", _String2=".") returned 1 [0146.788] wcscmp (_String1="Power Efficiency Diagnostics", _String2="..") returned 1 [0146.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44570 [0146.788] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0146.788] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0146.788] wcscat (in: _Dest=0x3d44570, _Source="Power Efficiency Diagnostics" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0146.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0146.790] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0146.790] wcscmp (_String1="Ringtones", _String2=".") returned 1 [0146.790] wcscmp (_String1="Ringtones", _String2="..") returned 1 [0146.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e20400 [0146.790] wcscpy (in: _Dest=0x3e20400, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0146.790] wcscat (in: _Dest=0x3e20400, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0146.790] wcscat (in: _Dest=0x3e20400, _Source="Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0146.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e20400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23dc [0146.792] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0146.792] wcscmp (_String1="Sqm", _String2=".") returned 1 [0146.792] wcscmp (_String1="Sqm", _String2="..") returned 1 [0146.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6f68 [0146.792] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0146.792] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0146.792] wcscat (in: _Dest=0x2fe6f68, _Source="Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0146.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0146.794] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0146.794] wcscmp (_String1="Start Menu", _String2=".") returned 1 [0146.794] wcscmp (_String1="Start Menu", _String2="..") returned 1 [0146.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1e7f8 [0146.794] wcscpy (in: _Dest=0x3e1e7f8, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0146.794] wcscat (in: _Dest=0x3e1e7f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0146.794] wcscat (in: _Dest=0x3e1e7f8, _Source="Start Menu" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" [0146.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1e7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d4 [0146.801] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0146.801] wcscmp (_String1="Templates", _String2=".") returned 1 [0146.801] wcscmp (_String1="Templates", _String2="..") returned 1 [0146.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1ea68 [0146.802] wcscpy (in: _Dest=0x3e1ea68, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0146.802] wcscat (in: _Dest=0x3e1ea68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0146.802] wcscat (in: _Dest=0x3e1ea68, _Source="Templates" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" [0146.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1ea68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0146.811] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0146.811] wcscmp (_String1="WER", _String2=".") returned 1 [0146.811] wcscmp (_String1="WER", _String2="..") returned 1 [0146.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6908 [0146.811] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\All Users\\Microsoft\\Windows" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows") returned="C:\\Users\\All Users\\Microsoft\\Windows" [0146.811] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\" [0146.811] wcscat (in: _Dest=0x2fe6908, _Source="WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0146.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20 [0146.835] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0146.835] FindClose (in: hFindFile=0x7ad7e30 | out: hFindFile=0x7ad7e30) returned 1 [0146.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bce0) returned 1 [0146.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a396e0) returned 1 [0146.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14568) returned 1 Thread: id = 1363 os_tid = 0x1ce0 [0138.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7208 [0138.591] wcscpy (in: _Dest=0x2fe7208, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0138.591] wcscat (in: _Dest=0x2fe7208, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\" [0138.591] wcscat (in: _Dest=0x2fe7208, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\*" [0138.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bf48 [0138.591] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*", lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0138.591] wcscmp (_String1=".", _String2=".") returned 0 [0138.591] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.591] wcscmp (_String1="..", _String2=".") returned 1 [0138.591] wcscmp (_String1="..", _String2="..") returned 0 [0138.591] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0138.592] wcscmp (_String1="MSFax", _String2=".") returned 1 [0138.592] wcscmp (_String1="MSFax", _String2="..") returned 1 [0138.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0b98 [0138.592] wcscpy (in: _Dest=0x3ee0b98, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0138.592] wcscat (in: _Dest=0x3ee0b98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\" [0138.592] wcscat (in: _Dest=0x3ee0b98, _Source="MSFax" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" [0139.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc [0139.605] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0139.606] wcscmp (_String1="MSScan", _String2=".") returned 1 [0139.606] wcscmp (_String1="MSScan", _String2="..") returned 1 [0139.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0928 [0139.606] wcscpy (in: _Dest=0x3ee0928, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT") returned="C:\\Users\\All Users\\Microsoft\\Windows NT" [0139.606] wcscat (in: _Dest=0x3ee0928, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\" [0139.606] wcscat (in: _Dest=0x3ee0928, _Source="MSScan" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" [0139.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2200 [0139.607] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0139.607] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0139.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bf48) returned 1 [0139.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7208) returned 1 [0139.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14ae8) returned 1 Thread: id = 1364 os_tid = 0x1ce4 [0139.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a27590 [0139.157] wcscpy (in: _Dest=0x7a27590, _Source="C:\\Users\\All Users\\Microsoft\\WwanSvc" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc" [0139.157] wcscat (in: _Dest=0x7a27590, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\" [0139.157] wcscat (in: _Dest=0x7a27590, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*" [0139.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0139.157] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0139.158] wcscmp (_String1=".", _String2=".") returned 0 [0139.158] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.158] wcscmp (_String1="..", _String2=".") returned 1 [0139.158] wcscmp (_String1="..", _String2="..") returned 0 [0139.158] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0139.158] wcscmp (_String1="Profiles", _String2=".") returned 1 [0139.158] wcscmp (_String1="Profiles", _String2="..") returned 1 [0139.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0858 [0139.158] wcscpy (in: _Dest=0x3ee0858, _Source="C:\\Users\\All Users\\Microsoft\\WwanSvc" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc" [0139.158] wcscat (in: _Dest=0x3ee0858, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\" [0139.158] wcscat (in: _Dest=0x3ee0858, _Source="Profiles" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" [0159.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0159.108] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0159.108] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0159.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0159.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27590) returned 1 [0159.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303d540) returned 1 Thread: id = 1367 os_tid = 0x1cf0 [0139.158] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\3EsGlqaDaZEp.rtf" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\3esglqadazep.rtf")) returned 0x20 [0139.159] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\3EsGlqaDaZEp.rtf", dwFileAttributes=0x20) returned 1 [0139.159] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\3EsGlqaDaZEp.rtf" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\3esglqadazep.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21d8 [0139.159] GetFileSizeEx (in: hFile=0x21d8, lpFileSize=0x792fcec | out: lpFileSize=0x792fcec*=25887) returned 1 [0139.159] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x651b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.159] ReadFile (in: hFile=0x21d8, lpBuffer=0x792fcc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x792fcd8, lpOverlapped=0x0 | out: lpBuffer=0x792fcc8*, lpNumberOfBytesRead=0x792fcd8*=0x4, lpOverlapped=0x0) returned 1 [0139.161] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53eb8 [0139.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e40 [0139.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53dc8 [0139.161] NtQuerySystemTime (in: CurrentTime=0x792fc60 | out: CurrentTime=0x792fc60*=132462177184176000) returned 0x0 [0139.161] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x5cb341bb [0139.161] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x201baea5 [0139.161] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x53121b05 [0139.161] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x399be9c9 [0139.161] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x7075d473 [0139.161] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x6c6d346e [0139.161] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x91bdc58 [0139.161] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x458a11d4 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x7100c472 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x3afc830 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x5443cb2c [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x1819c2c3 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x1c7275b9 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x7522c969 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x64058de4 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x313fb6d [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x62db2894 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x25280a3a [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x5bea15f2 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x17b70f9e [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x746c11 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x26845edf [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x48771d58 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x4f8a562 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x357f88da [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x4ab15410 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x6ac2acb4 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x1fa6bd75 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x61f090f2 [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x1942c0db [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x779c05ad [0139.162] RtlRandomEx (in: Seed=0x792fc58 | out: Seed=0x792fc58) returned 0x29c54589 [0139.171] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.171] ReadFile (in: hFile=0x21d8, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x792fc60, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0x792fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0139.171] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdbd8 [0139.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0139.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53eb8 [0139.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53eb8) returned 1 [0139.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0139.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53eb8 [0139.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53dc8 [0139.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53dc8) returned 1 [0139.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0139.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdbd8) returned 1 [0139.172] WriteFile (in: hFile=0x21d8, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x792fc60, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0x792fc60*=0x3c00, lpOverlapped=0x0) returned 1 [0141.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0141.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0141.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79950 [0141.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53288) returned 1 [0141.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79288 [0141.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53288 [0141.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53968 [0141.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53968) returned 1 [0141.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0141.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be058) returned 1 [0141.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55968 [0141.970] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.971] WriteFile (in: hFile=0x21d8, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x792fce0, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0x792fce0*=0x112, lpOverlapped=0x0) returned 1 [0141.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be058 [0141.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0141.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53968 [0141.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53968) returned 1 [0141.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53968 [0141.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53990 [0141.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537b0 [0141.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e537b0) returned 1 [0141.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0141.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be058) returned 1 [0141.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3de6428 [0141.973] sprintf (in: _Dest=0x3de6428, _Format="%c%c" | out: _Dest="4a") returned 2 [0141.973] sprintf (in: _Dest=0x3de642a, _Format="%c%c" | out: _Dest="04") returned 2 [0141.973] sprintf (in: _Dest=0x3de642c, _Format="%c%c" | out: _Dest="0b") returned 2 [0141.973] sprintf (in: _Dest=0x3de642e, _Format="%c%c" | out: _Dest="bc") returned 2 [0141.973] sprintf (in: _Dest=0x3de6430, _Format="%c%c" | out: _Dest="a5") returned 2 [0141.973] sprintf (in: _Dest=0x3de6432, _Format="%c%c" | out: _Dest="d1") returned 2 [0141.973] sprintf (in: _Dest=0x3de6434, _Format="%c%c" | out: _Dest="9f") returned 2 [0141.973] sprintf (in: _Dest=0x3de6436, _Format="%c%c" | out: _Dest="f4") returned 2 [0141.973] sprintf (in: _Dest=0x3de6438, _Format="%c%c" | out: _Dest="ac") returned 2 [0141.973] sprintf (in: _Dest=0x3de643a, _Format="%c%c" | out: _Dest="74") returned 2 [0141.973] sprintf (in: _Dest=0x3de643c, _Format="%c%c" | out: _Dest="f6") returned 2 [0141.973] sprintf (in: _Dest=0x3de643e, _Format="%c%c" | out: _Dest="c8") returned 2 [0141.973] sprintf (in: _Dest=0x3de6440, _Format="%c%c" | out: _Dest="06") returned 2 [0141.973] sprintf (in: _Dest=0x3de6442, _Format="%c%c" | out: _Dest="b4") returned 2 [0141.974] sprintf (in: _Dest=0x3de6444, _Format="%c%c" | out: _Dest="6d") returned 2 [0141.974] sprintf (in: _Dest=0x3de6446, _Format="%c%c" | out: _Dest="4a") returned 2 [0141.975] sprintf (in: _Dest=0x3de6448, _Format="%c%c" | out: _Dest="4a") returned 2 [0141.975] sprintf (in: _Dest=0x3de644a, _Format="%c%c" | out: _Dest="2b") returned 2 [0141.975] sprintf (in: _Dest=0x3de644c, _Format="%c%c" | out: _Dest="b5") returned 2 [0141.975] sprintf (in: _Dest=0x3de644e, _Format="%c%c" | out: _Dest="8a") returned 2 [0141.975] sprintf (in: _Dest=0x3de6450, _Format="%c%c" | out: _Dest="62") returned 2 [0141.975] sprintf (in: _Dest=0x3de6452, _Format="%c%c" | out: _Dest="9f") returned 2 [0141.975] sprintf (in: _Dest=0x3de6454, _Format="%c%c" | out: _Dest="09") returned 2 [0141.975] sprintf (in: _Dest=0x3de6456, _Format="%c%c" | out: _Dest="82") returned 2 [0141.975] sprintf (in: _Dest=0x3de6458, _Format="%c%c" | out: _Dest="7d") returned 2 [0141.975] sprintf (in: _Dest=0x3de645a, _Format="%c%c" | out: _Dest="69") returned 2 [0141.975] sprintf (in: _Dest=0x3de645c, _Format="%c%c" | out: _Dest="a9") returned 2 [0141.975] sprintf (in: _Dest=0x3de645e, _Format="%c%c" | out: _Dest="b3") returned 2 [0141.975] sprintf (in: _Dest=0x3de6460, _Format="%c%c" | out: _Dest="fa") returned 2 [0141.975] sprintf (in: _Dest=0x3de6462, _Format="%c%c" | out: _Dest="62") returned 2 [0141.975] sprintf (in: _Dest=0x3de6464, _Format="%c%c" | out: _Dest="07") returned 2 [0141.975] sprintf (in: _Dest=0x3de6466, _Format="%c%c" | out: _Dest="3a") returned 2 [0141.975] RtlInitAnsiString (in: DestinationString=0x792fc68, SourceString="4a040bbca5d19ff4ac74f6c806b46d4a4a2bb58a629f09827d69a9b3fa62073a" | out: DestinationString="4a040bbca5d19ff4ac74f6c806b46d4a4a2bb58a629f09827d69a9b3fa62073a") [0141.975] RtlAnsiStringToUnicodeString (in: DestinationString=0x792fc60, SourceString="4a040bbca5d19ff4ac74f6c806b46d4a4a2bb58a629f09827d69a9b3fa62073a", AllocateDestinationString=1 | out: DestinationString="4a040bbca5d19ff4ac74f6c806b46d4a4a2bb58a629f09827d69a9b3fa62073a") returned 0x0 [0141.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d451d0 [0141.976] wcscat (in: _Dest=0x3eba330, _Source="4a040bbca5d19ff4" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\4a040bbca5d19ff4") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\4a040bbca5d19ff4" [0141.976] wcscat (in: _Dest=0x3eba330, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\4a040bbca5d19ff4.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\4a040bbca5d19ff4.68814f" [0141.976] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\4a040bbca5d19ff4.68814f", NtPathName=0x792fc58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\4a040bbca5d19ff4.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4d20 [0141.979] FlushFileBuffers (hFile=0x21d8) returned 1 [0141.980] CloseHandle (hObject=0x21d8) returned 1 [0141.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5ef0 [0141.981] wcscpy (in: _Dest=0x3da5ef0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" [0141.981] wcscat (in: _Dest=0x3da5ef0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\68814F-Readme.txt" [0141.981] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\68814f-readme.txt")) returned 0x20 [0141.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ef0) returned 1 [0141.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b98) returned 1 Thread: id = 1368 os_tid = 0x1cf4 [0139.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9670 [0139.174] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" [0139.174] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0139.174] wcscat (in: _Dest=0x3eb9670, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\*") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\*" [0139.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0139.174] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81fc3be0, ftCreationTime.dwHighDateTime=0x1d5e7f6, ftLastAccessTime.dwLowDateTime=0x4bd4e540, ftLastAccessTime.dwHighDateTime=0x1d5e76e, ftLastWriteTime.dwLowDateTime=0x4bd4e540, ftLastWriteTime.dwHighDateTime=0x1d5e76e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0139.175] wcscmp (_String1=".", _String2=".") returned 0 [0139.175] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81fc3be0, ftCreationTime.dwHighDateTime=0x1d5e7f6, ftLastAccessTime.dwLowDateTime=0x4bd4e540, ftLastAccessTime.dwHighDateTime=0x1d5e76e, ftLastWriteTime.dwLowDateTime=0x4bd4e540, ftLastWriteTime.dwHighDateTime=0x1d5e76e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.175] wcscmp (_String1="..", _String2=".") returned 1 [0139.175] wcscmp (_String1="..", _String2="..") returned 0 [0139.175] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96d8590, ftCreationTime.dwHighDateTime=0x1d5e12e, ftLastAccessTime.dwLowDateTime=0xc6561b30, ftLastAccessTime.dwHighDateTime=0x1d5e323, ftLastWriteTime.dwLowDateTime=0xc6561b30, ftLastWriteTime.dwHighDateTime=0x1d5e323, nFileSizeHigh=0x0, nFileSizeLow=0x2027, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKvnev.pdf", cAlternateFileName="")) returned 1 [0139.175] wcscmp (_String1="GKvnev.pdf", _String2=".") returned 1 [0139.175] wcscmp (_String1="GKvnev.pdf", _String2="..") returned 1 [0139.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb70b8 [0139.175] wcscpy (in: _Dest=0x3eb70b8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" [0139.175] wcscat (in: _Dest=0x3eb70b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0139.175] wcscat (in: _Dest=0x3eb70b8, _Source="GKvnev.pdf" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\GKvnev.pdf") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\GKvnev.pdf" [0142.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb70b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0142.352] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2f2bf0, ftCreationTime.dwHighDateTime=0x1d5d9e2, ftLastAccessTime.dwLowDateTime=0xda83aa40, ftLastAccessTime.dwHighDateTime=0x1d5d8c0, ftLastWriteTime.dwLowDateTime=0xda83aa40, ftLastWriteTime.dwHighDateTime=0x1d5d8c0, nFileSizeHigh=0x0, nFileSizeLow=0x774d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IK-7fLMmqpI8QCph6.ppt", cAlternateFileName="IK-7FL~1.PPT")) returned 1 [0142.352] wcscmp (_String1="IK-7fLMmqpI8QCph6.ppt", _String2=".") returned 1 [0142.352] wcscmp (_String1="IK-7fLMmqpI8QCph6.ppt", _String2="..") returned 1 [0142.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35af88 [0142.352] wcscpy (in: _Dest=0x35af88, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" [0142.352] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0142.352] wcscat (in: _Dest=0x35af88, _Source="IK-7fLMmqpI8QCph6.ppt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\IK-7fLMmqpI8QCph6.ppt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\IK-7fLMmqpI8QCph6.ppt" [0142.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35af88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0142.353] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3977c90, ftCreationTime.dwHighDateTime=0x1d5db98, ftLastAccessTime.dwLowDateTime=0x585f3a40, ftLastAccessTime.dwHighDateTime=0x1d5e3d6, ftLastWriteTime.dwLowDateTime=0x585f3a40, ftLastWriteTime.dwHighDateTime=0x1d5e3d6, nFileSizeHigh=0x0, nFileSizeLow=0x8593, dwReserved0=0x0, dwReserved1=0x0, cFileName="na-aA9.xls", cAlternateFileName="")) returned 1 [0142.353] wcscmp (_String1="na-aA9.xls", _String2=".") returned 1 [0142.353] wcscmp (_String1="na-aA9.xls", _String2="..") returned 1 [0142.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c660 [0142.353] wcscpy (in: _Dest=0x32c660, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" [0142.353] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0142.353] wcscat (in: _Dest=0x32c660, _Source="na-aA9.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\na-aA9.xls") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\na-aA9.xls" [0142.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4 [0142.354] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb142ad10, ftCreationTime.dwHighDateTime=0x1d5e15e, ftLastAccessTime.dwLowDateTime=0x67688d30, ftLastAccessTime.dwHighDateTime=0x1d5e83a, ftLastWriteTime.dwLowDateTime=0x67688d30, ftLastWriteTime.dwHighDateTime=0x1d5e83a, nFileSizeHigh=0x0, nFileSizeLow=0x15fb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tc9ZwIyBMaGY3VTeJ.docx", cAlternateFileName="TC9ZWI~1.DOC")) returned 1 [0142.354] wcscmp (_String1="Tc9ZwIyBMaGY3VTeJ.docx", _String2=".") returned 1 [0142.354] wcscmp (_String1="Tc9ZwIyBMaGY3VTeJ.docx", _String2="..") returned 1 [0142.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c168 [0142.354] wcscpy (in: _Dest=0x35c168, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" [0142.354] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0142.354] wcscat (in: _Dest=0x35c168, _Source="Tc9ZwIyBMaGY3VTeJ.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx" [0142.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0142.355] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3c0980, ftCreationTime.dwHighDateTime=0x1d5d978, ftLastAccessTime.dwLowDateTime=0xaad13870, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0xaad13870, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0xb553, dwReserved0=0x0, dwReserved1=0x0, cFileName="WtORBnNqjUu.pptx", cAlternateFileName="WTORBN~1.PPT")) returned 1 [0142.355] wcscmp (_String1="WtORBnNqjUu.pptx", _String2=".") returned 1 [0142.355] wcscmp (_String1="WtORBnNqjUu.pptx", _String2="..") returned 1 [0142.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053918 [0142.355] wcscpy (in: _Dest=0x3053918, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" [0142.355] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0142.355] wcscat (in: _Dest=0x3053918, _Source="WtORBnNqjUu.pptx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\WtORBnNqjUu.pptx") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\WtORBnNqjUu.pptx" [0142.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20bc [0142.356] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1bea30, ftCreationTime.dwHighDateTime=0x1d5e15b, ftLastAccessTime.dwLowDateTime=0x3d67d210, ftLastAccessTime.dwHighDateTime=0x1d5e88b, ftLastWriteTime.dwLowDateTime=0x3d67d210, ftLastWriteTime.dwHighDateTime=0x1d5e88b, nFileSizeHigh=0x0, nFileSizeLow=0x75a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZArD2CMmuuhrpZ4CSZ.odp", cAlternateFileName="ZARD2C~1.ODP")) returned 1 [0142.357] wcscmp (_String1="ZArD2CMmuuhrpZ4CSZ.odp", _String2=".") returned 1 [0142.357] wcscmp (_String1="ZArD2CMmuuhrpZ4CSZ.odp", _String2="..") returned 1 [0142.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b9d8 [0142.357] wcscpy (in: _Dest=0x35b9d8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N" [0142.357] wcscat (in: _Dest=0x35b9d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0142.357] wcscat (in: _Dest=0x35b9d8, _Source="ZArD2CMmuuhrpZ4CSZ.odp" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ZArD2CMmuuhrpZ4CSZ.odp") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ZArD2CMmuuhrpZ4CSZ.odp" [0142.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8 [0142.358] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1bea30, ftCreationTime.dwHighDateTime=0x1d5e15b, ftLastAccessTime.dwLowDateTime=0x3d67d210, ftLastAccessTime.dwHighDateTime=0x1d5e88b, ftLastWriteTime.dwLowDateTime=0x3d67d210, ftLastWriteTime.dwHighDateTime=0x1d5e88b, nFileSizeHigh=0x0, nFileSizeLow=0x75a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZArD2CMmuuhrpZ4CSZ.odp", cAlternateFileName="ZARD2C~1.ODP")) returned 0 [0142.358] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0142.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0142.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 [0142.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 1369 os_tid = 0x1cf8 [0139.178] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Td4UFAgSrWZx.pps" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\td4ufagsrwzx.pps")) returned 0x20 [0139.178] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Td4UFAgSrWZx.pps", dwFileAttributes=0x20) returned 1 [0139.179] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Td4UFAgSrWZx.pps" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\td4ufagsrwzx.pps"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21e0 [0139.179] GetFileSizeEx (in: hFile=0x21e0, lpFileSize=0x63bf7cc | out: lpFileSize=0x63bf7cc*=5949) returned 1 [0139.179] SetFilePointerEx (in: hFile=0x21e0, liDistanceToMove=0x1739, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.179] ReadFile (in: hFile=0x21e0, lpBuffer=0x63bf7a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x63bf7b8, lpOverlapped=0x0 | out: lpBuffer=0x63bf7a8*, lpNumberOfBytesRead=0x63bf7b8*=0x4, lpOverlapped=0x0) returned 1 [0139.180] SetFilePointerEx (in: hFile=0x21e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a80 [0139.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53990 [0139.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53940 [0139.181] NtQuerySystemTime (in: CurrentTime=0x63bf740 | out: CurrentTime=0x63bf740*=132462177184332000) returned 0x0 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x6cb84e03 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0xdf22fb0 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x60524ff8 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x5addfaea [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x7f83432a [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x46a75657 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x6bc10b4b [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x3683e238 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x1358c981 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x438dd651 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x1d6a94b0 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x7d07230c [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x42688be9 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x1d5f6046 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x54044867 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x793492f2 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x6fd28f31 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x2bfd3cbb [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x354e6778 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x3069ca04 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x5b367821 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x23c1d4af [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x98a74b3 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x34500b5e [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x72e70d94 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x632f47aa [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x3ae43306 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x7e3fb1c6 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x59cc9a07 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x31f16198 [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x3fcf317a [0139.181] RtlRandomEx (in: Seed=0x63bf738 | out: Seed=0x63bf738) returned 0x5cc9817f [0139.190] ReadFile (in: hFile=0x21e0, lpBuffer=0x7c08fc8, nNumberOfBytesToRead=0x173d, lpNumberOfBytesRead=0x63bf734, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesRead=0x63bf734*=0x173d, lpOverlapped=0x0) returned 1 [0139.191] SetFilePointerEx (in: hFile=0x21e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.191] WriteFile (in: hFile=0x21e0, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0x173d, lpNumberOfBytesWritten=0x63bf738, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0x63bf738*=0x173d, lpOverlapped=0x0) returned 1 [0141.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537b0 [0141.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53300 [0141.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53300) returned 1 [0141.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0141.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0141.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0141.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd518) returned 1 [0141.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79950 [0141.956] SetFilePointerEx (in: hFile=0x21e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.957] WriteFile (in: hFile=0x21e0, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x63bf7c0, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0x63bf7c0*=0x112, lpOverlapped=0x0) returned 1 [0141.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bd518 [0141.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0141.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0141.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52360) returned 1 [0141.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0141.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53788 [0141.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0141.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535f8) returned 1 [0141.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0141.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd518) returned 1 [0141.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3de6428 [0141.960] sprintf (in: _Dest=0x3de6428, _Format="%c%c" | out: _Dest="1c") returned 2 [0141.960] sprintf (in: _Dest=0x3de642a, _Format="%c%c" | out: _Dest="96") returned 2 [0141.960] sprintf (in: _Dest=0x3de642c, _Format="%c%c" | out: _Dest="fd") returned 2 [0141.960] sprintf (in: _Dest=0x3de642e, _Format="%c%c" | out: _Dest="f8") returned 2 [0141.960] sprintf (in: _Dest=0x3de6430, _Format="%c%c" | out: _Dest="3d") returned 2 [0141.960] sprintf (in: _Dest=0x3de6432, _Format="%c%c" | out: _Dest="d2") returned 2 [0141.960] sprintf (in: _Dest=0x3de6434, _Format="%c%c" | out: _Dest="e6") returned 2 [0141.960] sprintf (in: _Dest=0x3de6436, _Format="%c%c" | out: _Dest="9b") returned 2 [0141.960] sprintf (in: _Dest=0x3de6438, _Format="%c%c" | out: _Dest="8d") returned 2 [0141.960] sprintf (in: _Dest=0x3de643a, _Format="%c%c" | out: _Dest="82") returned 2 [0141.960] sprintf (in: _Dest=0x3de643c, _Format="%c%c" | out: _Dest="7b") returned 2 [0141.960] sprintf (in: _Dest=0x3de643e, _Format="%c%c" | out: _Dest="1f") returned 2 [0141.960] sprintf (in: _Dest=0x3de6440, _Format="%c%c" | out: _Dest="af") returned 2 [0141.960] sprintf (in: _Dest=0x3de6442, _Format="%c%c" | out: _Dest="ab") returned 2 [0141.960] sprintf (in: _Dest=0x3de6444, _Format="%c%c" | out: _Dest="f1") returned 2 [0141.960] sprintf (in: _Dest=0x3de6446, _Format="%c%c" | out: _Dest="30") returned 2 [0141.960] sprintf (in: _Dest=0x3de6448, _Format="%c%c" | out: _Dest="82") returned 2 [0141.960] sprintf (in: _Dest=0x3de644a, _Format="%c%c" | out: _Dest="51") returned 2 [0141.960] sprintf (in: _Dest=0x3de644c, _Format="%c%c" | out: _Dest="ab") returned 2 [0141.960] sprintf (in: _Dest=0x3de644e, _Format="%c%c" | out: _Dest="0b") returned 2 [0141.960] sprintf (in: _Dest=0x3de6450, _Format="%c%c" | out: _Dest="6e") returned 2 [0141.960] sprintf (in: _Dest=0x3de6452, _Format="%c%c" | out: _Dest="b5") returned 2 [0141.961] sprintf (in: _Dest=0x3de6454, _Format="%c%c" | out: _Dest="c7") returned 2 [0141.961] sprintf (in: _Dest=0x3de6456, _Format="%c%c" | out: _Dest="46") returned 2 [0141.961] sprintf (in: _Dest=0x3de6458, _Format="%c%c" | out: _Dest="71") returned 2 [0141.961] sprintf (in: _Dest=0x3de645a, _Format="%c%c" | out: _Dest="15") returned 2 [0141.961] sprintf (in: _Dest=0x3de645c, _Format="%c%c" | out: _Dest="0b") returned 2 [0141.961] sprintf (in: _Dest=0x3de645e, _Format="%c%c" | out: _Dest="6d") returned 2 [0141.961] sprintf (in: _Dest=0x3de6460, _Format="%c%c" | out: _Dest="59") returned 2 [0141.961] sprintf (in: _Dest=0x3de6462, _Format="%c%c" | out: _Dest="78") returned 2 [0141.961] sprintf (in: _Dest=0x3de6464, _Format="%c%c" | out: _Dest="d9") returned 2 [0141.961] sprintf (in: _Dest=0x3de6466, _Format="%c%c" | out: _Dest="27") returned 2 [0141.961] RtlInitAnsiString (in: DestinationString=0x63bf748, SourceString="1c96fdf83dd2e69b8d827b1fafabf1308251ab0b6eb5c74671150b6d5978d927" | out: DestinationString="1c96fdf83dd2e69b8d827b1fafabf1308251ab0b6eb5c74671150b6d5978d927") [0141.961] RtlAnsiStringToUnicodeString (in: DestinationString=0x63bf740, SourceString="1c96fdf83dd2e69b8d827b1fafabf1308251ab0b6eb5c74671150b6d5978d927", AllocateDestinationString=1 | out: DestinationString="1c96fdf83dd2e69b8d827b1fafabf1308251ab0b6eb5c74671150b6d5978d927") returned 0x0 [0141.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44c30 [0141.961] wcscat (in: _Dest=0x3eba330, _Source="1c96fdf83dd2e69b" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\1c96fdf83dd2e69b") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\1c96fdf83dd2e69b" [0141.961] wcscat (in: _Dest=0x3eba330, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\1c96fdf83dd2e69b.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\1c96fdf83dd2e69b.68814f" [0141.961] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\1c96fdf83dd2e69b.68814f", NtPathName=0x63bf738, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\1c96fdf83dd2e69b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4d20 [0141.965] FlushFileBuffers (hFile=0x21e0) returned 1 [0141.966] CloseHandle (hObject=0x21e0) returned 1 [0141.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da63f0 [0141.967] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" [0141.967] wcscat (in: _Dest=0x3da63f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\68814F-Readme.txt" [0141.967] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\68814f-readme.txt")) returned 0x20 [0141.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 [0141.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ef0) returned 1 Thread: id = 1370 os_tid = 0x1cfc [0139.191] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\y m8.doc")) returned 0x20 [0139.191] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc", dwFileAttributes=0x20) returned 1 [0139.192] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\y m8.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21e4 [0139.192] GetFileSizeEx (in: hFile=0x21e4, lpFileSize=0x783fc04 | out: lpFileSize=0x783fc04*=27150) returned 1 [0139.192] SetFilePointerEx (in: hFile=0x21e4, liDistanceToMove=0x6a0a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.192] ReadFile (in: hFile=0x21e4, lpBuffer=0x783fbe0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x783fbf0, lpOverlapped=0x0 | out: lpBuffer=0x783fbe0*, lpNumberOfBytesRead=0x783fbf0*=0x4, lpOverlapped=0x0) returned 1 [0139.194] SetFilePointerEx (in: hFile=0x21e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a80 [0139.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53940 [0139.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538c8 [0139.194] NtQuerySystemTime (in: CurrentTime=0x783fb78 | out: CurrentTime=0x783fb78*=132462177184488000) returned 0x0 [0139.194] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x13bd31b9 [0139.194] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x133bb6a0 [0139.194] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x9887baa [0139.194] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0xc97254e [0139.194] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x525f3320 [0139.194] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x6fb6aa15 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x57d453d1 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x29084d0f [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x798dffe0 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x65830703 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x275121e1 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0xf07cc60 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x57a7479f [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x5bf4694f [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x7f15fd15 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x407cb94c [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x217d89af [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x679fef89 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x55127b69 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x6732ebce [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x7d102b88 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x4646ad85 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x6dd3c512 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x130dc2d1 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0xf02702d [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x3e6b6b39 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x31719250 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x5deada2 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x2969be90 [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x3279d4bd [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x56fda [0139.195] RtlRandomEx (in: Seed=0x783fb70 | out: Seed=0x783fb70) returned 0x266b2e66 [0139.206] SetFilePointerEx (in: hFile=0x21e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.207] ReadFile (in: hFile=0x21e4, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x783fb78, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0x783fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0139.207] SetFilePointerEx (in: hFile=0x21e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07f50 [0139.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e148 [0139.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a80 [0139.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a80) returned 1 [0139.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0139.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a80 [0139.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538c8 [0139.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538c8) returned 1 [0139.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0139.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f50) returned 1 [0139.208] WriteFile (in: hFile=0x21e4, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x783fb78, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0x783fb78*=0x3c00, lpOverlapped=0x0) returned 1 [0141.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0141.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0141.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec4ca8 [0141.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0141.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec42f8 [0141.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0141.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0141.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0141.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0141.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e494a0) returned 1 [0141.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3deca58 [0141.861] SetFilePointerEx (in: hFile=0x21e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.861] WriteFile (in: hFile=0x21e4, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x783fbf8, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x783fbf8*=0x102, lpOverlapped=0x0) returned 1 [0141.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0141.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0141.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0141.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0141.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a80) returned 1 [0141.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53940) returned 1 [0141.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53378) returned 1 [0141.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53828) returned 1 [0141.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0141.886] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc" [0141.886] wcscat (in: _Dest=0x3e3b018, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc.68814f" [0141.886] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc.68814f", NtPathName=0x783fb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\Y M8.doc.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df2d08 [0141.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 [0141.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a49be8) returned 1 [0141.903] NtQueryInformationFile (in: FileHandle=0x21e4, IoStatusBlock=0x783fb48, FileInformation=0x783fb50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x783fb48, FileInformation=0x783fb50) returned 0x0 [0141.903] NtSetInformationFile (FileHandle=0x21e4, IoStatusBlock=0x783fb48, FileInformation=0x783fb50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0141.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0141.917] FlushFileBuffers (hFile=0x21e4) returned 1 [0141.924] CloseHandle (hObject=0x21e4) returned 1 [0141.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da63f0 [0141.930] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\" [0141.930] wcscat (in: _Dest=0x3da63f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\68814F-Readme.txt" [0141.930] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\68814f-readme.txt")) returned 0xffffffff [0141.930] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21e4 [0141.931] WriteFile (in: hFile=0x21e4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x783fb8c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x783fb8c*=0x8b9, lpOverlapped=0x0) returned 1 [0141.933] CloseHandle (hObject=0x21e4) returned 1 [0141.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 [0141.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26c48) returned 1 Thread: id = 1371 os_tid = 0x1d00 [0139.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65dd8 [0139.214] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0139.214] wcscat (in: _Dest=0x3e65dd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0139.214] wcscat (in: _Dest=0x3e65dd8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*" [0139.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0139.215] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0139.215] wcscmp (_String1=".", _String2=".") returned 0 [0139.215] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.215] wcscmp (_String1="..", _String2=".") returned 1 [0139.215] wcscmp (_String1="..", _String2="..") returned 0 [0139.215] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0139.215] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0139.215] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0139.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc3df0 [0139.215] wcscpy (in: _Dest=0x3dc3df0, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0139.215] wcscat (in: _Dest=0x3dc3df0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0139.215] wcscat (in: _Dest=0x3dc3df0, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0146.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dc3df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0146.953] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0146.953] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0146.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0146.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 [0146.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 1372 os_tid = 0x1d04 [0139.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfxrt.jar")) returned 0x20 [0141.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar", dwFileAttributes=0x20) returned 0 [0141.759] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jfxrt.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.759] GetLastError () returned 0x5 [0141.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jfxrt.jar", dwFileAttributes=0x20) returned 0 [0141.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 Thread: id = 1373 os_tid = 0x1d08 [0139.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jsse.jar")) returned 0x20 [0141.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar", dwFileAttributes=0x20) returned 0 [0141.761] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\jsse.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.761] GetLastError () returned 0x5 [0141.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jsse.jar", dwFileAttributes=0x20) returned 0 [0141.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e6a9a8) returned 1 Thread: id = 1374 os_tid = 0x1d0c [0139.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre7\\lib\\jvm.hprof.txt")) returned 0x20 [0141.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt", dwFileAttributes=0x20) returned 0 [0141.762] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre7\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.763] GetLastError () returned 0x5 [0141.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\jvm.hprof.txt", dwFileAttributes=0x20) returned 0 [0141.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0108) returned 1 Thread: id = 1375 os_tid = 0x1d10 [0139.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\logging.properties")) returned 0x20 [0141.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties", dwFileAttributes=0x20) returned 0 [0141.764] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\logging.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.764] GetLastError () returned 0x5 [0141.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\logging.properties", dwFileAttributes=0x20) returned 0 [0141.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26468) returned 1 Thread: id = 1376 os_tid = 0x1d14 [0139.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7328 [0139.229] wcscpy (in: _Dest=0x2fe7328, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0139.229] wcscat (in: _Dest=0x2fe7328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0139.229] wcscat (in: _Dest=0x2fe7328, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\*" [0139.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0139.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0142.613] wcscmp (_String1=".", _String2=".") returned 0 [0142.613] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67fb4520, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.613] wcscmp (_String1="..", _String2=".") returned 1 [0142.613] wcscmp (_String1="..", _String2="..") returned 0 [0142.613] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fda680, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67fda680, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67fda680, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0142.613] wcscmp (_String1="jmxremote.access", _String2=".") returned 1 [0142.613] wcscmp (_String1="jmxremote.access", _String2="..") returned 1 [0142.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5b70 [0142.613] wcscpy (in: _Dest=0x3da5b70, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0142.613] wcscat (in: _Dest=0x3da5b70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0142.613] wcscat (in: _Dest=0x3da5b70, _Source="jmxremote.access" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access" [0163.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0163.070] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x680007e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x680007e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x680007e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0163.070] wcscmp (_String1="jmxremote.password.template", _String2=".") returned 1 [0163.070] wcscmp (_String1="jmxremote.password.template", _String2="..") returned 1 [0163.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb64d8 [0163.070] wcscpy (in: _Dest=0x3eb64d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0163.070] wcscat (in: _Dest=0x3eb64d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0163.070] wcscat (in: _Dest=0x3eb64d8, _Source="jmxremote.password.template" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template" [0163.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb64d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0163.071] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x680007e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x680007e0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x680007e0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3711, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0163.071] wcscmp (_String1="management.properties", _String2=".") returned 1 [0163.071] wcscmp (_String1="management.properties", _String2="..") returned 1 [0163.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0163.071] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0163.072] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0163.072] wcscat (in: _Dest=0x3f3bdc8, _Source="management.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties" [0163.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0163.074] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0163.074] wcscmp (_String1="snmp.acl.template", _String2=".") returned 1 [0163.074] wcscmp (_String1="snmp.acl.template", _String2="..") returned 1 [0163.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a318 [0163.075] wcscpy (in: _Dest=0x3e1a318, _Source="C:\\Program Files\\Java\\jre7\\lib\\management" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management") returned="C:\\Program Files\\Java\\jre7\\lib\\management" [0163.075] wcscat (in: _Dest=0x3e1a318, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\" [0163.075] wcscat (in: _Dest=0x3e1a318, _Source="snmp.acl.template" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template") returned="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template" [0163.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0163.127] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68026940, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68026940, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68026940, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0163.127] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0163.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0163.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7328) returned 1 [0163.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6848) returned 1 Thread: id = 1377 os_tid = 0x1d18 [0139.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\management-agent.jar")) returned 0x20 [0141.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar", dwFileAttributes=0x20) returned 0 [0141.817] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\management-agent.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.817] GetLastError () returned 0x5 [0141.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management-agent.jar", dwFileAttributes=0x20) returned 0 [0141.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26af8) returned 1 Thread: id = 1378 os_tid = 0x1d1c [0139.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\meta-index")) returned 0x20 [0141.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index", dwFileAttributes=0x20) returned 0 [0141.668] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre7\\lib\\meta-index"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.668] GetLastError () returned 0x5 [0141.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\meta-index", dwFileAttributes=0x20) returned 0 [0141.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe63c8) returned 1 Thread: id = 1379 os_tid = 0x1d20 [0139.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\net.properties")) returned 0x20 [0141.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties", dwFileAttributes=0x20) returned 0 [0141.757] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\net.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.757] GetLastError () returned 0x5 [0141.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\net.properties", dwFileAttributes=0x20) returned 0 [0141.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0e08) returned 1 Thread: id = 1380 os_tid = 0x1d24 [0139.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\plugin.jar")) returned 0x20 [0141.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar", dwFileAttributes=0x20) returned 0 [0141.819] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\plugin.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.819] GetLastError () returned 0x5 [0141.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\plugin.jar", dwFileAttributes=0x20) returned 0 [0141.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe14a8) returned 1 Thread: id = 1381 os_tid = 0x1d28 [0139.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre7\\lib\\psfont.properties.ja")) returned 0x20 [0141.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja", dwFileAttributes=0x20) returned 0 [0141.821] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre7\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.821] GetLastError () returned 0x5 [0141.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfont.properties.ja", dwFileAttributes=0x20) returned 0 [0141.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26bd8) returned 1 Thread: id = 1382 os_tid = 0x1d2c [0139.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\psfontj2d.properties")) returned 0x20 [0141.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties", dwFileAttributes=0x20) returned 0 [0141.823] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.823] GetLastError () returned 0x5 [0141.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\psfontj2d.properties", dwFileAttributes=0x20) returned 0 [0141.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a261c8) returned 1 Thread: id = 1383 os_tid = 0x1d30 [0139.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\resources.jar")) returned 0x20 [0141.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar", dwFileAttributes=0x20) returned 0 [0141.833] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\resources.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.833] GetLastError () returned 0x5 [0141.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\resources.jar", dwFileAttributes=0x20) returned 0 [0141.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee08c0) returned 1 Thread: id = 1384 os_tid = 0x1d34 [0139.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\rt.jar")) returned 0x20 [0141.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar", dwFileAttributes=0x20) returned 0 [0141.837] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\rt.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.837] GetLastError () returned 0x5 [0141.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\rt.jar", dwFileAttributes=0x20) returned 0 [0141.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39738) returned 1 Thread: id = 1385 os_tid = 0x1d38 [0139.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7088 [0139.233] wcscpy (in: _Dest=0x2fe7088, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0139.233] wcscat (in: _Dest=0x2fe7088, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0139.233] wcscat (in: _Dest=0x2fe7088, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\*" [0139.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0139.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681312e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0142.614] wcscmp (_String1=".", _String2=".") returned 0 [0142.614] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681312e0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.614] wcscmp (_String1="..", _String2=".") returned 1 [0142.614] wcscmp (_String1="..", _String2="..") returned 0 [0142.614] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0142.614] wcscmp (_String1="blacklist", _String2=".") returned 1 [0142.614] wcscmp (_String1="blacklist", _String2="..") returned 1 [0142.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a22ff0 [0142.614] wcscpy (in: _Dest=0x7a22ff0, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0142.614] wcscat (in: _Dest=0x7a22ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0142.614] wcscat (in: _Dest=0x7a22ff0, _Source="blacklist" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist" [0162.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a22ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0162.002] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1429a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0162.003] wcscmp (_String1="cacerts", _String2=".") returned 1 [0162.003] wcscmp (_String1="cacerts", _String2="..") returned 1 [0162.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f150 [0162.003] wcscpy (in: _Dest=0x3e1f150, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0162.003] wcscat (in: _Dest=0x3e1f150, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0162.003] wcscat (in: _Dest=0x3e1f150, _Source="cacerts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts" [0162.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc [0162.004] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0162.004] wcscmp (_String1="java.policy", _String2=".") returned 1 [0162.004] wcscmp (_String1="java.policy", _String2="..") returned 1 [0162.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26628 [0162.004] wcscpy (in: _Dest=0x7a26628, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0162.004] wcscat (in: _Dest=0x7a26628, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0162.004] wcscat (in: _Dest=0x7a26628, _Source="java.policy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy" [0162.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0162.005] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0162.005] wcscmp (_String1="java.security", _String2=".") returned 1 [0162.005] wcscmp (_String1="java.security", _String2="..") returned 1 [0162.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e3a0 [0162.005] wcscpy (in: _Dest=0x3f3e3a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0162.005] wcscat (in: _Dest=0x3f3e3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0162.005] wcscat (in: _Dest=0x3f3e3a0, _Source="java.security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security" [0162.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0162.006] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.policy", cAlternateFileName="JAVAFX~1.POL")) returned 1 [0162.006] wcscmp (_String1="javafx.policy", _String2=".") returned 1 [0162.006] wcscmp (_String1="javafx.policy", _String2="..") returned 1 [0162.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3015418 [0162.006] wcscpy (in: _Dest=0x3015418, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0162.007] wcscat (in: _Dest=0x3015418, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0162.007] wcscat (in: _Dest=0x3015418, _Source="javafx.policy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy" [0162.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3015418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0162.007] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0162.007] wcscmp (_String1="javaws.policy", _String2=".") returned 1 [0162.008] wcscmp (_String1="javaws.policy", _String2="..") returned 1 [0162.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x30151c0 [0162.008] wcscpy (in: _Dest=0x30151c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0162.008] wcscat (in: _Dest=0x30151c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0162.008] wcscat (in: _Dest=0x30151c0, _Source="javaws.policy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy" [0162.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30151c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0162.009] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0162.009] wcscmp (_String1="local_policy.jar", _String2=".") returned 1 [0162.009] wcscmp (_String1="local_policy.jar", _String2="..") returned 1 [0162.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a298 [0162.009] wcscpy (in: _Dest=0x3e1a298, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0162.009] wcscat (in: _Dest=0x3e1a298, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0162.009] wcscat (in: _Dest=0x3e1a298, _Source="local_policy.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar" [0162.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0162.010] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0162.010] wcscmp (_String1="trusted.libraries", _String2=".") returned 1 [0162.010] wcscmp (_String1="trusted.libraries", _String2="..") returned 1 [0162.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a318 [0162.010] wcscpy (in: _Dest=0x3e1a318, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0162.010] wcscat (in: _Dest=0x3e1a318, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0162.010] wcscat (in: _Dest=0x3e1a318, _Source="trusted.libraries" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries" [0162.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0162.011] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0162.011] wcscmp (_String1="US_export_policy.jar", _String2=".") returned 1 [0162.011] wcscmp (_String1="US_export_policy.jar", _String2="..") returned 1 [0162.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3bdc8 [0162.011] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\security" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security") returned="C:\\Program Files\\Java\\jre7\\lib\\security" [0162.011] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\" [0162.011] wcscat (in: _Dest=0x3f3bdc8, _Source="US_export_policy.jar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar") returned="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar" [0162.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0162.013] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0162.013] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0162.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0162.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7088) returned 1 [0162.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39790) returned 1 Thread: id = 1386 os_tid = 0x1d3c [0139.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\sound.properties")) returned 0x20 [0141.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties", dwFileAttributes=0x20) returned 0 [0141.839] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\sound.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.839] GetLastError () returned 0x5 [0141.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\sound.properties", dwFileAttributes=0x20) returned 0 [0141.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee06b8) returned 1 Thread: id = 1387 os_tid = 0x1d40 [0139.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre7\\lib\\tzmappings")) returned 0x20 [0140.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings", dwFileAttributes=0x20) returned 0 [0140.221] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre7\\lib\\tzmappings"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.221] GetLastError () returned 0x5 [0140.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\tzmappings", dwFileAttributes=0x20) returned 0 [0140.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 Thread: id = 1388 os_tid = 0x1d44 [0139.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x3e84218 [0139.234] wcscpy (in: _Dest=0x3e84218, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0139.234] wcscat (in: _Dest=0x3e84218, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0139.234] wcscat (in: _Dest=0x3e84218, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\*" [0139.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c1b0 [0139.234] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0142.612] wcscmp (_String1=".", _String2=".") returned 0 [0142.612] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.612] wcscmp (_String1="..", _String2=".") returned 1 [0142.612] wcscmp (_String1="..", _String2="..") returned 0 [0142.612] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Africa", cAlternateFileName="")) returned 1 [0142.612] wcscmp (_String1="Africa", _String2=".") returned 1 [0142.612] wcscmp (_String1="Africa", _String2="..") returned 1 [0142.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe66c8 [0142.613] wcscpy (in: _Dest=0x2fe66c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0142.613] wcscat (in: _Dest=0x2fe66c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0142.613] wcscat (in: _Dest=0x2fe66c8, _Source="Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0150.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe66c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0150.556] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="America", cAlternateFileName="")) returned 1 [0150.556] wcscmp (_String1="America", _String2=".") returned 1 [0150.556] wcscmp (_String1="America", _String2="..") returned 1 [0150.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6f68 [0150.556] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.556] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.556] wcscat (in: _Dest=0x2fe6f68, _Source="America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0150.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0150.557] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antarctica", cAlternateFileName="ANTARC~1")) returned 1 [0150.557] wcscmp (_String1="Antarctica", _String2=".") returned 1 [0150.557] wcscmp (_String1="Antarctica", _String2="..") returned 1 [0150.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1f5c8 [0150.557] wcscpy (in: _Dest=0x3e1f5c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.557] wcscat (in: _Dest=0x3e1f5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.557] wcscat (in: _Dest=0x3e1f5c8, _Source="Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0150.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1f5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0150.558] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asia", cAlternateFileName="")) returned 1 [0150.558] wcscmp (_String1="Asia", _String2=".") returned 1 [0150.559] wcscmp (_String1="Asia", _String2="..") returned 1 [0150.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x3d488f8 [0150.559] wcscpy (in: _Dest=0x3d488f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.559] wcscat (in: _Dest=0x3d488f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.559] wcscat (in: _Dest=0x3d488f8, _Source="Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0150.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d488f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0150.560] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atlantic", cAlternateFileName="")) returned 1 [0150.560] wcscmp (_String1="Atlantic", _String2=".") returned 1 [0150.560] wcscmp (_String1="Atlantic", _String2="..") returned 1 [0150.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1508 [0150.560] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.560] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.560] wcscat (in: _Dest=0x2fe1508, _Source="Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0150.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe1508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0150.561] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Australia", cAlternateFileName="AUSTRA~1")) returned 1 [0150.561] wcscmp (_String1="Australia", _String2=".") returned 1 [0150.561] wcscmp (_String1="Australia", _String2="..") returned 1 [0150.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6788 [0150.561] wcscpy (in: _Dest=0x2fe6788, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.561] wcscat (in: _Dest=0x2fe6788, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.561] wcscat (in: _Dest=0x2fe6788, _Source="Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0150.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0150.562] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CET", cAlternateFileName="")) returned 1 [0150.562] wcscmp (_String1="CET", _String2=".") returned 1 [0150.562] wcscmp (_String1="CET", _String2="..") returned 1 [0150.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48a58 [0150.562] wcscpy (in: _Dest=0x3d48a58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.562] wcscat (in: _Dest=0x3d48a58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.562] wcscat (in: _Dest=0x3d48a58, _Source="CET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET" [0150.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d48a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4 [0150.563] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0150.563] wcscmp (_String1="CST6CDT", _String2=".") returned 1 [0150.563] wcscmp (_String1="CST6CDT", _String2="..") returned 1 [0150.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe3b48 [0150.563] wcscpy (in: _Dest=0x2fe3b48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.563] wcscat (in: _Dest=0x2fe3b48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.563] wcscat (in: _Dest=0x2fe3b48, _Source="CST6CDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT" [0150.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe3b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c4 [0150.564] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="EET", cAlternateFileName="")) returned 1 [0150.564] wcscmp (_String1="EET", _String2=".") returned 1 [0150.564] wcscmp (_String1="EET", _String2="..") returned 1 [0150.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48ab0 [0150.565] wcscpy (in: _Dest=0x3d48ab0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.565] wcscat (in: _Dest=0x3d48ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.565] wcscat (in: _Dest=0x3d48ab0, _Source="EET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET" [0150.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d48ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c [0150.566] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST", cAlternateFileName="")) returned 1 [0150.566] wcscmp (_String1="EST", _String2=".") returned 1 [0150.566] wcscmp (_String1="EST", _String2="..") returned 1 [0150.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48c68 [0150.566] wcscpy (in: _Dest=0x3d48c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.566] wcscat (in: _Dest=0x3d48c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.566] wcscat (in: _Dest=0x3d48c68, _Source="EST" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST" [0150.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d48c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4 [0150.567] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0150.567] wcscmp (_String1="EST5EDT", _String2=".") returned 1 [0150.567] wcscmp (_String1="EST5EDT", _String2="..") returned 1 [0150.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7268 [0150.567] wcscpy (in: _Dest=0x2fe7268, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.567] wcscat (in: _Dest=0x2fe7268, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.567] wcscat (in: _Dest=0x2fe7268, _Source="EST5EDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT" [0150.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe7268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120 [0150.568] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Etc", cAlternateFileName="")) returned 1 [0150.568] wcscmp (_String1="Etc", _String2=".") returned 1 [0150.568] wcscmp (_String1="Etc", _String2="..") returned 1 [0150.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d487f0 [0150.568] wcscpy (in: _Dest=0x3d487f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.568] wcscat (in: _Dest=0x3d487f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.568] wcscat (in: _Dest=0x3d487f0, _Source="Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0150.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d487f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc [0150.569] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Europe", cAlternateFileName="")) returned 1 [0150.569] wcscmp (_String1="Europe", _String2=".") returned 1 [0150.569] wcscmp (_String1="Europe", _String2="..") returned 1 [0150.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6a88 [0150.569] wcscpy (in: _Dest=0x2fe6a88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.569] wcscat (in: _Dest=0x2fe6a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.569] wcscat (in: _Dest=0x2fe6a88, _Source="Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0150.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124 [0150.570] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0150.570] wcscmp (_String1="GMT", _String2=".") returned 1 [0150.571] wcscmp (_String1="GMT", _String2="..") returned 1 [0150.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48690 [0150.571] wcscpy (in: _Dest=0x3d48690, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.571] wcscat (in: _Dest=0x3d48690, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.571] wcscat (in: _Dest=0x3d48690, _Source="GMT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT" [0150.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d48690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4 [0150.573] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST", cAlternateFileName="")) returned 1 [0150.573] wcscmp (_String1="HST", _String2=".") returned 1 [0150.573] wcscmp (_String1="HST", _String2="..") returned 1 [0150.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48d18 [0150.573] wcscpy (in: _Dest=0x3d48d18, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.573] wcscat (in: _Dest=0x3d48d18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.573] wcscat (in: _Dest=0x3d48d18, _Source="HST" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST" [0150.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d48d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128 [0150.574] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indian", cAlternateFileName="")) returned 1 [0150.574] wcscmp (_String1="Indian", _String2=".") returned 1 [0150.574] wcscmp (_String1="Indian", _String2="..") returned 1 [0150.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6e48 [0150.574] wcscpy (in: _Dest=0x2fe6e48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.574] wcscat (in: _Dest=0x2fe6e48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.574] wcscat (in: _Dest=0x2fe6e48, _Source="Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0150.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0150.575] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MET", cAlternateFileName="")) returned 1 [0150.575] wcscmp (_String1="MET", _String2=".") returned 1 [0150.576] wcscmp (_String1="MET", _String2="..") returned 1 [0150.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d486e8 [0150.576] wcscpy (in: _Dest=0x3d486e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.576] wcscat (in: _Dest=0x3d486e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.576] wcscat (in: _Dest=0x3d486e8, _Source="MET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET" [0150.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d486e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c [0150.577] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST", cAlternateFileName="")) returned 1 [0150.577] wcscmp (_String1="MST", _String2=".") returned 1 [0150.577] wcscmp (_String1="MST", _String2="..") returned 1 [0150.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d488a0 [0150.577] wcscpy (in: _Dest=0x3d488a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.577] wcscat (in: _Dest=0x3d488a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.577] wcscat (in: _Dest=0x3d488a0, _Source="MST" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST" [0150.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d488a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4 [0150.578] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0150.578] wcscmp (_String1="MST7MDT", _String2=".") returned 1 [0150.578] wcscmp (_String1="MST7MDT", _String2="..") returned 1 [0150.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6f08 [0150.578] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.578] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.578] wcscat (in: _Dest=0x2fe6f08, _Source="MST7MDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT" [0150.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130 [0150.579] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pacific", cAlternateFileName="")) returned 1 [0150.579] wcscmp (_String1="Pacific", _String2=".") returned 1 [0150.579] wcscmp (_String1="Pacific", _String2="..") returned 1 [0150.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6ae8 [0150.579] wcscpy (in: _Dest=0x2fe6ae8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.579] wcscat (in: _Dest=0x2fe6ae8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.580] wcscat (in: _Dest=0x2fe6ae8, _Source="Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0150.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe6ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0150.581] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0150.581] wcscmp (_String1="PST8PDT", _String2=".") returned 1 [0150.581] wcscmp (_String1="PST8PDT", _String2="..") returned 1 [0150.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6fc8 [0150.581] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.581] wcscat (in: _Dest=0x2fe6fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.581] wcscat (in: _Dest=0x2fe6fc8, _Source="PST8PDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT" [0150.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134 [0150.588] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemV", cAlternateFileName="")) returned 1 [0150.588] wcscmp (_String1="SystemV", _String2=".") returned 1 [0150.588] wcscmp (_String1="SystemV", _String2="..") returned 1 [0150.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1328 [0150.588] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.588] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.588] wcscat (in: _Dest=0x2fe1328, _Source="SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0150.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0150.589] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WET", cAlternateFileName="")) returned 1 [0150.589] wcscmp (_String1="WET", _String2=".") returned 1 [0150.589] wcscmp (_String1="WET", _String2="..") returned 1 [0150.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x3d48d70 [0150.590] wcscpy (in: _Dest=0x3d48d70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.590] wcscat (in: _Dest=0x3d48d70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.590] wcscat (in: _Dest=0x3d48d70, _Source="WET" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET" [0150.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d48d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc [0150.591] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="ZONEIN~1")) returned 1 [0150.591] wcscmp (_String1="ZoneInfoMappings", _String2=".") returned 1 [0150.591] wcscmp (_String1="ZoneInfoMappings", _String2="..") returned 1 [0150.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23a70 [0150.591] wcscpy (in: _Dest=0x7a23a70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi" [0150.591] wcscat (in: _Dest=0x7a23a70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\" [0150.591] wcscat (in: _Dest=0x7a23a70, _Source="ZoneInfoMappings" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" [0150.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8 [0150.592] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoneInfoMappings", cAlternateFileName="ZONEIN~1")) returned 0 [0150.592] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0150.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c1b0) returned 1 [0150.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84218) returned 1 [0150.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6158) returned 1 Thread: id = 1389 os_tid = 0x1d48 [0139.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx")) returned 0x20 [0139.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx", dwFileAttributes=0x20) returned 0 [0139.236] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.236] GetLastError () returned 0x5 [0139.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx", dwFileAttributes=0x20) returned 0 [0139.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 1390 os_tid = 0x1d4c [0139.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx")) returned 0x20 [0139.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx", dwFileAttributes=0x20) returned 0 [0139.238] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.239] GetLastError () returned 0x5 [0139.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx", dwFileAttributes=0x20) returned 0 [0139.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 Thread: id = 1391 os_tid = 0x1d50 [0139.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json")) returned 0x20 [0139.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0139.240] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.241] GetLastError () returned 0x5 [0139.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json", dwFileAttributes=0x20) returned 0 [0139.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a2b0) returned 1 Thread: id = 1392 os_tid = 0x1d54 [0139.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx")) returned 0x20 [0139.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx", dwFileAttributes=0x20) returned 0 [0139.242] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.242] GetLastError () returned 0x5 [0139.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx", dwFileAttributes=0x20) returned 0 [0139.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 Thread: id = 1393 os_tid = 0x1d58 [0139.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx")) returned 0x20 [0139.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx", dwFileAttributes=0x20) returned 0 [0139.244] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.244] GetLastError () returned 0x5 [0139.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx", dwFileAttributes=0x20) returned 0 [0139.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 1394 os_tid = 0x1d5c [0139.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3da5f70 [0139.246] wcscpy (in: _Dest=0x3da5f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" [0139.246] wcscat (in: _Dest=0x3da5f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\" [0139.246] wcscat (in: _Dest=0x3da5f70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\*" [0139.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c418 [0139.246] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d440 [0140.144] wcscmp (_String1=".", _String2=".") returned 0 [0140.144] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x58449620, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x58449620, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.144] wcscmp (_String1="..", _String2=".") returned 1 [0140.144] wcscmp (_String1="..", _String2="..") returned 0 [0140.144] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0140.144] wcscmp (_String1="macromedia.com", _String2=".") returned 1 [0140.144] wcscmp (_String1="macromedia.com", _String2="..") returned 1 [0140.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb67d0 [0140.144] wcscpy (in: _Dest=0x3eb67d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player" [0140.145] wcscat (in: _Dest=0x3eb67d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\" [0140.145] wcscat (in: _Dest=0x3eb67d0, _Source="macromedia.com" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0168.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb67d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0168.393] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0168.393] FindClose (in: hFindFile=0x7a2d440 | out: hFindFile=0x7a2d440) returned 1 [0168.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c418) returned 1 [0168.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 [0168.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da61f0) returned 1 Thread: id = 1395 os_tid = 0x1d60 [0139.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3db1398 [0139.247] wcscpy (in: _Dest=0x3db1398, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" [0139.247] wcscat (in: _Dest=0x3db1398, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\" [0139.247] wcscat (in: _Dest=0x3db1398, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" [0139.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c680 [0139.247] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d680 [0139.247] wcscmp (_String1=".", _String2=".") returned 0 [0139.247] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.247] wcscmp (_String1="..", _String2=".") returned 1 [0139.248] wcscmp (_String1="..", _String2="..") returned 0 [0139.248] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0139.248] FindClose (in: hFindFile=0x7a2d680 | out: hFindFile=0x7a2d680) returned 1 [0139.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c680) returned 1 [0139.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1398) returned 1 [0139.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d958) returned 1 Thread: id = 1396 os_tid = 0x1d64 [0139.261] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\eebsym5\\documents\\my shapes\\favorites.vss")) returned 0x20 [0140.119] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss", dwFileAttributes=0x20) returned 1 [0142.285] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\eebsym5\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc44 [0142.286] GetFileSizeEx (in: hFile=0xc44, lpFileSize=0x985fd9c | out: lpFileSize=0x985fd9c*=0) returned 1 [0142.286] FlushFileBuffers (hFile=0xc44) returned 1 [0143.325] CloseHandle (hObject=0xc44) returned 1 [0143.333] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\Favorites.vss", dwFileAttributes=0x20) returned 1 [0143.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23290) returned 1 Thread: id = 1397 os_tid = 0x1d68 [0139.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d958 [0139.270] wcscpy (in: _Dest=0x3e1d958, _Source="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private" [0139.270] wcscat (in: _Dest=0x3e1d958, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\" [0139.270] wcscat (in: _Dest=0x3e1d958, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\*") returned="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\*" [0139.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c680 [0139.270] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7930 [0142.124] wcscmp (_String1=".", _String2=".") returned 0 [0142.124] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.124] wcscmp (_String1="..", _String2=".") returned 1 [0142.124] wcscmp (_String1="..", _String2="..") returned 0 [0142.124] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0142.124] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0142.124] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0142.124] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x3beea730, ftCreationTime.dwHighDateTime=0x1d30236, ftLastAccessTime.dwLowDateTime=0x3beea730, ftLastAccessTime.dwHighDateTime=0x1d30236, ftLastWriteTime.dwLowDateTime=0x3beea730, ftLastWriteTime.dwHighDateTime=0x1d30236, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0142.125] FindClose (in: hFindFile=0x7ad7930 | out: hFindFile=0x7ad7930) returned 1 [0142.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c680) returned 1 [0142.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d958) returned 1 [0142.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1da28) returned 1 Thread: id = 1398 os_tid = 0x1d6c [0139.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css")) returned 0x20 [0139.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS", dwFileAttributes=0x20) returned 0 [0139.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.272] GetLastError () returned 0x5 [0139.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS", dwFileAttributes=0x20) returned 0 [0139.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4af0) returned 1 Thread: id = 1399 os_tid = 0x1d70 [0139.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta")) returned 0x20 [0140.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta", dwFileAttributes=0x20) returned 0 [0140.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.120] GetLastError () returned 0x5 [0140.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta", dwFileAttributes=0x20) returned 0 [0140.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 1400 os_tid = 0x1d74 [0139.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta")) returned 0x20 [0140.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta", dwFileAttributes=0x20) returned 0 [0140.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.121] GetLastError () returned 0x5 [0140.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta", dwFileAttributes=0x20) returned 0 [0140.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44180) returned 1 Thread: id = 1401 os_tid = 0x1d78 [0139.278] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20 [0139.280] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0139.280] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.280] GetLastError () returned 0x5 [0139.280] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0139.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85150) returned 1 Thread: id = 1402 os_tid = 0x1d7c [0139.282] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0x20 [0139.282] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0139.282] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.282] GetLastError () returned 0x5 [0139.283] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0139.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85cb0) returned 1 Thread: id = 1403 os_tid = 0x1d80 [0139.285] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20 [0139.285] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0139.285] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.286] GetLastError () returned 0x5 [0139.286] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0139.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38e60) returned 1 Thread: id = 1404 os_tid = 0x1d84 [0139.287] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20 [0139.287] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0139.287] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.288] GetLastError () returned 0x5 [0139.288] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0139.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a378) returned 1 Thread: id = 1405 os_tid = 0x1d88 [0139.295] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20 [0139.295] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0139.295] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.295] GetLastError () returned 0x5 [0139.295] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0139.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85970) returned 1 Thread: id = 1406 os_tid = 0x1d8c [0139.297] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\cDOp5MMtWyu.avi" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\bg9 5_jc5swwp7gg\\cdop5mmtwyu.avi")) returned 0x20 [0139.297] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\cDOp5MMtWyu.avi", dwFileAttributes=0x20) returned 1 [0139.298] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\cDOp5MMtWyu.avi" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\bg9 5_jc5swwp7gg\\cdop5mmtwyu.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21ec [0139.298] GetFileSizeEx (in: hFile=0x21ec, lpFileSize=0xa59f7d4 | out: lpFileSize=0xa59f7d4*=52034) returned 1 [0139.298] SetFilePointerEx (in: hFile=0x21ec, liDistanceToMove=0xcb3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.298] ReadFile (in: hFile=0x21ec, lpBuffer=0xa59f7b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa59f7c0, lpOverlapped=0x0 | out: lpBuffer=0xa59f7b0*, lpNumberOfBytesRead=0xa59f7c0*=0x4, lpOverlapped=0x0) returned 1 [0139.300] SetFilePointerEx (in: hFile=0x21ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534e0 [0139.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53670 [0139.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53788 [0139.300] NtQuerySystemTime (in: CurrentTime=0xa59f748 | out: CurrentTime=0xa59f748*=132462177185424000) returned 0x0 [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x3e0db825 [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x3a366046 [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x16291de5 [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x7a8f1460 [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x603b61d [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x4f999d8d [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x787c1967 [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x1cb280bf [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x786212a0 [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x1d15ceb2 [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x4f4b7977 [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x11f36075 [0139.300] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x7463675 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x3c77f63a [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x67b6b1bd [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x6ad40005 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x2c29121 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x5c7559f [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x2cd1dd27 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x3a610545 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x4338f836 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x64a216f9 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x31c0a4a6 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x17fbfa95 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x2c1b0384 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x2d29a34c [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x563cf689 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x1ee3514c [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x6cb1755a [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x490278d5 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x2bbcdf35 [0139.305] RtlRandomEx (in: Seed=0xa59f740 | out: Seed=0xa59f740) returned 0x579326ac [0139.314] SetFilePointerEx (in: hFile=0x21ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.314] ReadFile (in: hFile=0x21ec, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa59f748, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xa59f748*=0x3c00, lpOverlapped=0x0) returned 1 [0139.314] SetFilePointerEx (in: hFile=0x21ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0139.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e148 [0139.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534e0 [0139.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e534e0) returned 1 [0139.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0139.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534e0 [0139.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53788 [0139.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53788) returned 1 [0139.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0139.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0139.315] WriteFile (in: hFile=0x21ec, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa59f748, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0xa59f748*=0x3c00, lpOverlapped=0x0) returned 1 [0141.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0141.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0141.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79950 [0141.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0141.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79288 [0141.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0141.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0141.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0141.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0141.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e494a0) returned 1 [0141.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3deaf00 [0141.865] SetFilePointerEx (in: hFile=0x21ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.865] WriteFile (in: hFile=0x21ec, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xa59f7c8, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xa59f7c8*=0x110, lpOverlapped=0x0) returned 1 [0141.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095b40 [0141.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0141.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53828 [0141.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53828) returned 1 [0141.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53828 [0141.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53378 [0141.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53940 [0141.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53940) returned 1 [0141.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0141.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095b40) returned 1 [0141.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x3095b40 [0141.891] sprintf (in: _Dest=0x3095b40, _Format="%c%c" | out: _Dest="99") returned 2 [0141.891] sprintf (in: _Dest=0x3095b42, _Format="%c%c" | out: _Dest="46") returned 2 [0141.892] sprintf (in: _Dest=0x3095b44, _Format="%c%c" | out: _Dest="10") returned 2 [0141.892] sprintf (in: _Dest=0x3095b46, _Format="%c%c" | out: _Dest="59") returned 2 [0141.892] sprintf (in: _Dest=0x3095b48, _Format="%c%c" | out: _Dest="1f") returned 2 [0141.892] sprintf (in: _Dest=0x3095b4a, _Format="%c%c" | out: _Dest="f8") returned 2 [0141.892] sprintf (in: _Dest=0x3095b4c, _Format="%c%c" | out: _Dest="37") returned 2 [0141.892] sprintf (in: _Dest=0x3095b4e, _Format="%c%c" | out: _Dest="86") returned 2 [0141.892] sprintf (in: _Dest=0x3095b50, _Format="%c%c" | out: _Dest="84") returned 2 [0141.892] sprintf (in: _Dest=0x3095b52, _Format="%c%c" | out: _Dest="98") returned 2 [0141.892] sprintf (in: _Dest=0x3095b54, _Format="%c%c" | out: _Dest="1b") returned 2 [0141.892] sprintf (in: _Dest=0x3095b56, _Format="%c%c" | out: _Dest="10") returned 2 [0141.892] sprintf (in: _Dest=0x3095b58, _Format="%c%c" | out: _Dest="17") returned 2 [0141.892] sprintf (in: _Dest=0x3095b5a, _Format="%c%c" | out: _Dest="d7") returned 2 [0141.892] sprintf (in: _Dest=0x3095b5c, _Format="%c%c" | out: _Dest="d9") returned 2 [0141.892] sprintf (in: _Dest=0x3095b5e, _Format="%c%c" | out: _Dest="40") returned 2 [0141.892] sprintf (in: _Dest=0x3095b60, _Format="%c%c" | out: _Dest="c5") returned 2 [0141.892] sprintf (in: _Dest=0x3095b62, _Format="%c%c" | out: _Dest="82") returned 2 [0141.893] sprintf (in: _Dest=0x3095b64, _Format="%c%c" | out: _Dest="15") returned 2 [0141.893] sprintf (in: _Dest=0x3095b66, _Format="%c%c" | out: _Dest="cf") returned 2 [0141.893] sprintf (in: _Dest=0x3095b68, _Format="%c%c" | out: _Dest="71") returned 2 [0141.893] sprintf (in: _Dest=0x3095b6a, _Format="%c%c" | out: _Dest="2c") returned 2 [0141.893] sprintf (in: _Dest=0x3095b6c, _Format="%c%c" | out: _Dest="b4") returned 2 [0141.893] sprintf (in: _Dest=0x3095b6e, _Format="%c%c" | out: _Dest="e2") returned 2 [0141.893] sprintf (in: _Dest=0x3095b70, _Format="%c%c" | out: _Dest="93") returned 2 [0141.893] sprintf (in: _Dest=0x3095b72, _Format="%c%c" | out: _Dest="4b") returned 2 [0141.893] sprintf (in: _Dest=0x3095b74, _Format="%c%c" | out: _Dest="28") returned 2 [0141.893] sprintf (in: _Dest=0x3095b76, _Format="%c%c" | out: _Dest="82") returned 2 [0141.893] sprintf (in: _Dest=0x3095b78, _Format="%c%c" | out: _Dest="22") returned 2 [0141.893] sprintf (in: _Dest=0x3095b7a, _Format="%c%c" | out: _Dest="09") returned 2 [0141.893] RtlInitAnsiString (in: DestinationString=0xa59f750, SourceString="994610591ff8378684981b1017d7d940c58215cf712cb4e2934b28822209" | out: DestinationString="994610591ff8378684981b1017d7d940c58215cf712cb4e2934b28822209") [0141.893] RtlAnsiStringToUnicodeString (in: DestinationString=0xa59f748, SourceString="994610591ff8378684981b1017d7d940c58215cf712cb4e2934b28822209", AllocateDestinationString=1 | out: DestinationString="994610591ff8378684981b1017d7d940c58215cf712cb4e2934b28822209") returned 0x0 [0141.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba330 [0141.893] wcscat (in: _Dest=0x7a5e090, _Source="994610591ff8378" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\994610591ff8378") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\994610591ff8378" [0141.893] wcscat (in: _Dest=0x7a5e090, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\994610591ff8378.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\994610591ff8378.68814f" [0141.893] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\994610591ff8378.68814f", NtPathName=0xa59f740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\994610591ff8378.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65c58 [0141.938] FlushFileBuffers (hFile=0x21ec) returned 1 [0141.942] CloseHandle (hObject=0x21ec) returned 1 [0141.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4d20 [0141.944] wcscpy (in: _Dest=0x3df4d20, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\" [0141.944] wcscat (in: _Dest=0x3df4d20, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\68814F-Readme.txt" [0141.944] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\bg9 5_jc5swwp7gg\\68814f-readme.txt")) returned 0xffffffff [0141.944] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\bg9 5_jc5swwp7gg\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21ec [0141.944] WriteFile (in: hFile=0x21ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa59f75c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa59f75c*=0x8b9, lpOverlapped=0x0) returned 1 [0141.947] CloseHandle (hObject=0x21ec) returned 1 [0141.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 [0141.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5990) returned 1 Thread: id = 1407 os_tid = 0x1d90 [0139.316] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\CkMe1y2JxV_Q08CE3.swf" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\bg9 5_jc5swwp7gg\\ckme1y2jxv_q08ce3.swf")) returned 0x20 [0139.316] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\CkMe1y2JxV_Q08CE3.swf", dwFileAttributes=0x20) returned 1 [0139.316] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\CkMe1y2JxV_Q08CE3.swf" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\bg9 5_jc5swwp7gg\\ckme1y2jxv_q08ce3.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21f0 [0139.316] GetFileSizeEx (in: hFile=0x21f0, lpFileSize=0x451feb4 | out: lpFileSize=0x451feb4*=17341) returned 1 [0139.316] SetFilePointerEx (in: hFile=0x21f0, liDistanceToMove=0x43b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.316] ReadFile (in: hFile=0x21f0, lpBuffer=0x451fe90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x451fea0, lpOverlapped=0x0 | out: lpBuffer=0x451fe90*, lpNumberOfBytesRead=0x451fea0*=0x4, lpOverlapped=0x0) returned 1 [0139.318] SetFilePointerEx (in: hFile=0x21f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53788 [0139.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0139.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e532b0 [0139.318] NtQuerySystemTime (in: CurrentTime=0x451fe28 | out: CurrentTime=0x451fe28*=132462177185736000) returned 0x0 [0139.318] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x162b8d65 [0139.318] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x72f438df [0139.318] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x53128465 [0139.318] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x60c7ec57 [0139.318] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x780c6120 [0139.318] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x37060ee7 [0139.318] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x32624aff [0139.318] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0xf17a712 [0139.318] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x6f4b3ad3 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x71d41c97 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x57b7dcaf [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x274eab32 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0xc09da08 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x17c98d0 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x251c22c5 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x5459e182 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x653d4123 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x1dda88cf [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x3da3ec63 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x7516b9ce [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x1b59d4f0 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x29b55a7c [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x7b83f9f0 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x3f881699 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0xf1950a [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x42bede55 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x4466ef37 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x2278c5b [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x3d7ab3b8 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x2a7960c5 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x46665626 [0139.319] RtlRandomEx (in: Seed=0x451fe20 | out: Seed=0x451fe20) returned 0x54f1c406 [0139.333] SetFilePointerEx (in: hFile=0x21f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.333] ReadFile (in: hFile=0x21f0, lpBuffer=0x7bf63a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x451fe28, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesRead=0x451fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0139.333] SetFilePointerEx (in: hFile=0x21f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0139.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55c28 [0139.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e148 [0139.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53788 [0139.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53788) returned 1 [0139.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0139.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53788 [0139.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e532b0 [0139.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e532b0) returned 1 [0139.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0139.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55c28) returned 1 [0139.334] WriteFile (in: hFile=0x21f0, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x451fe28, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0x451fe28*=0x3c00, lpOverlapped=0x0) returned 1 [0141.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0141.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0141.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066f00 [0141.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0141.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3066ac0 [0141.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0141.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0141.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0141.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0141.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e494a0) returned 1 [0141.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55968 [0141.873] SetFilePointerEx (in: hFile=0x21f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0141.873] WriteFile (in: hFile=0x21f0, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x451fea8, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0x451fea8*=0x11c, lpOverlapped=0x0) returned 1 [0141.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3095b40 [0141.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0141.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0141.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535f8) returned 1 [0141.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79950 [0141.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0141.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54160 [0141.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54160) returned 1 [0141.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0141.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095b40) returned 1 [0141.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe14a8 [0141.897] sprintf (in: _Dest=0x2fe14a8, _Format="%c%c" | out: _Dest="f6") returned 2 [0141.897] sprintf (in: _Dest=0x2fe14aa, _Format="%c%c" | out: _Dest="12") returned 2 [0141.897] sprintf (in: _Dest=0x2fe14ac, _Format="%c%c" | out: _Dest="e0") returned 2 [0141.897] sprintf (in: _Dest=0x2fe14ae, _Format="%c%c" | out: _Dest="96") returned 2 [0141.897] sprintf (in: _Dest=0x2fe14b0, _Format="%c%c" | out: _Dest="b7") returned 2 [0141.897] sprintf (in: _Dest=0x2fe14b2, _Format="%c%c" | out: _Dest="2b") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14b4, _Format="%c%c" | out: _Dest="30") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14b6, _Format="%c%c" | out: _Dest="1b") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14b8, _Format="%c%c" | out: _Dest="f9") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14ba, _Format="%c%c" | out: _Dest="a1") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14bc, _Format="%c%c" | out: _Dest="11") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14be, _Format="%c%c" | out: _Dest="f8") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14c0, _Format="%c%c" | out: _Dest="67") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14c2, _Format="%c%c" | out: _Dest="7d") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14c4, _Format="%c%c" | out: _Dest="87") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14c6, _Format="%c%c" | out: _Dest="51") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14c8, _Format="%c%c" | out: _Dest="68") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14ca, _Format="%c%c" | out: _Dest="08") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14cc, _Format="%c%c" | out: _Dest="72") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14ce, _Format="%c%c" | out: _Dest="68") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14d0, _Format="%c%c" | out: _Dest="1e") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14d2, _Format="%c%c" | out: _Dest="34") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14d4, _Format="%c%c" | out: _Dest="67") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14d6, _Format="%c%c" | out: _Dest="ca") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14d8, _Format="%c%c" | out: _Dest="f7") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14da, _Format="%c%c" | out: _Dest="57") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14dc, _Format="%c%c" | out: _Dest="06") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14de, _Format="%c%c" | out: _Dest="ff") returned 2 [0141.898] sprintf (in: _Dest=0x2fe14e0, _Format="%c%c" | out: _Dest="c2") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14e2, _Format="%c%c" | out: _Dest="6f") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14e4, _Format="%c%c" | out: _Dest="05") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14e6, _Format="%c%c" | out: _Dest="ca") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14e8, _Format="%c%c" | out: _Dest="ca") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14ea, _Format="%c%c" | out: _Dest="0c") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14ec, _Format="%c%c" | out: _Dest="d5") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14ee, _Format="%c%c" | out: _Dest="2b") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14f0, _Format="%c%c" | out: _Dest="52") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14f2, _Format="%c%c" | out: _Dest="5e") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14f4, _Format="%c%c" | out: _Dest="32") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14f6, _Format="%c%c" | out: _Dest="4c") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14f8, _Format="%c%c" | out: _Dest="32") returned 2 [0141.899] sprintf (in: _Dest=0x2fe14fa, _Format="%c%c" | out: _Dest="6b") returned 2 [0141.899] RtlInitAnsiString (in: DestinationString=0x451fe30, SourceString="f612e096b72b301bf9a111f8677d8751680872681e3467caf75706ffc26f05caca0cd52b525e324c326b" | out: DestinationString="f612e096b72b301bf9a111f8677d8751680872681e3467caf75706ffc26f05caca0cd52b525e324c326b") [0141.899] RtlAnsiStringToUnicodeString (in: DestinationString=0x451fe28, SourceString="f612e096b72b301bf9a111f8677d8751680872681e3467caf75706ffc26f05caca0cd52b525e324c326b", AllocateDestinationString=1 | out: DestinationString="f612e096b72b301bf9a111f8677d8751680872681e3467caf75706ffc26f05caca0cd52b525e324c326b") returned 0x0 [0141.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6db8 [0141.899] wcscat (in: _Dest=0x2ff6180, _Source="f612e096b72b301bf9a11" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\f612e096b72b301bf9a11") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\f612e096b72b301bf9a11" [0141.899] wcscat (in: _Dest=0x2ff6180, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\f612e096b72b301bf9a11.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\f612e096b72b301bf9a11.68814f" [0141.899] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\f612e096b72b301bf9a11.68814f", NtPathName=0x451fe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\f612e096b72b301bf9a11.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0141.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d40768 [0141.941] FlushFileBuffers (hFile=0x21f0) returned 1 [0141.951] CloseHandle (hObject=0x21f0) returned 1 [0141.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4d20 [0141.953] wcscpy (in: _Dest=0x3df4d20, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\" [0141.953] wcscat (in: _Dest=0x3df4d20, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\68814F-Readme.txt" [0141.953] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\bg9 5_jc5swwp7gg\\68814f-readme.txt")) returned 0x20 [0141.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 [0141.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 Thread: id = 1408 os_tid = 0x1d94 [0139.341] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\LE5dsjz.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\bg9 5_jc5swwp7gg\\le5dsjz.mkv")) returned 0x20 [0139.342] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\LE5dsjz.mkv", dwFileAttributes=0x20) returned 1 [0140.347] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\LE5dsjz.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\bg9 5_jc5swwp7gg\\le5dsjz.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21f4 [0140.347] GetFileSizeEx (in: hFile=0x21f4, lpFileSize=0xa1ffdbc | out: lpFileSize=0xa1ffdbc*=52264) returned 1 [0140.347] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0xcc24, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.347] ReadFile (in: hFile=0x21f4, lpBuffer=0xa1ffd98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa1ffda8, lpOverlapped=0x0 | out: lpBuffer=0xa1ffd98*, lpNumberOfBytesRead=0xa1ffda8*=0x4, lpOverlapped=0x0) returned 1 [0140.348] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0140.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0140.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0140.349] NtQuerySystemTime (in: CurrentTime=0xa1ffd30 | out: CurrentTime=0xa1ffd30*=132462177196032000) returned 0x0 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x412256d7 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x7ca38298 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x7173a101 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x4b3747d2 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x45fe8bee [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x4b35256 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x62e245cc [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x60664f78 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x48952a43 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x6acf5c2 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x700374c [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x7260fbee [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x76fb3c32 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x26605b26 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x14ab158b [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x11ae2494 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x6d007fa0 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x5c07ec0f [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x21867548 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x91ab073 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x3de3f2d0 [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x24125a6a [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x19ef76ea [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x141a28fe [0140.349] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x4d399712 [0140.350] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x740401f2 [0140.350] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x6faaf1ab [0140.350] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x1b86d2df [0140.350] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x67de1843 [0140.350] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0xbf87bfb [0140.350] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x66a26131 [0140.350] RtlRandomEx (in: Seed=0xa1ffd28 | out: Seed=0xa1ffd28) returned 0x3e78827e [0140.360] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.361] ReadFile (in: hFile=0x21f4, lpBuffer=0x7a87cd8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa1ffd30, lpOverlapped=0x0 | out: lpBuffer=0x7a87cd8*, lpNumberOfBytesRead=0xa1ffd30*=0x3c00, lpOverlapped=0x0) returned 1 [0140.361] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0140.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be130 [0140.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51200 [0140.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0140.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4820) returned 1 [0140.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a8b8e0 [0140.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0140.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0140.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0140.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0140.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0140.362] WriteFile (in: hFile=0x21f4, lpBuffer=0x7a8b8e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa1ffd30, lpOverlapped=0x0 | out: lpBuffer=0x7a8b8e0*, lpNumberOfBytesWritten=0xa1ffd30*=0x3c00, lpOverlapped=0x0) returned 1 [0142.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8b8e0) returned 1 [0142.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a87cd8) returned 1 [0142.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a376e0 [0142.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb670 [0142.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb670) returned 1 [0142.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37740 [0142.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb670 [0142.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb530 [0142.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb530) returned 1 [0142.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0142.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0142.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3deaf00 [0142.907] SetFilePointerEx (in: hFile=0x21f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.907] WriteFile (in: hFile=0x21f4, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xa1ffdb0, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xa1ffdb0*=0x108, lpOverlapped=0x0) returned 1 [0143.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85158 [0143.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0143.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0143.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8398 [0143.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0143.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0143.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0143.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0143.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x3e798e0 [0143.002] sprintf (in: _Dest=0x3e798e0, _Format="%c%c" | out: _Dest="5f") returned 2 [0143.002] sprintf (in: _Dest=0x3e798e2, _Format="%c%c" | out: _Dest="a3") returned 2 [0143.002] sprintf (in: _Dest=0x3e798e4, _Format="%c%c" | out: _Dest="7e") returned 2 [0143.002] sprintf (in: _Dest=0x3e798e6, _Format="%c%c" | out: _Dest="cf") returned 2 [0143.002] sprintf (in: _Dest=0x3e798e8, _Format="%c%c" | out: _Dest="e6") returned 2 [0143.003] sprintf (in: _Dest=0x3e798ea, _Format="%c%c" | out: _Dest="27") returned 2 [0143.003] sprintf (in: _Dest=0x3e798ec, _Format="%c%c" | out: _Dest="9b") returned 2 [0143.003] sprintf (in: _Dest=0x3e798ee, _Format="%c%c" | out: _Dest="51") returned 2 [0143.003] sprintf (in: _Dest=0x3e798f0, _Format="%c%c" | out: _Dest="c8") returned 2 [0143.003] sprintf (in: _Dest=0x3e798f2, _Format="%c%c" | out: _Dest="da") returned 2 [0143.003] sprintf (in: _Dest=0x3e798f4, _Format="%c%c" | out: _Dest="1f") returned 2 [0143.003] sprintf (in: _Dest=0x3e798f6, _Format="%c%c" | out: _Dest="44") returned 2 [0143.003] sprintf (in: _Dest=0x3e798f8, _Format="%c%c" | out: _Dest="4e") returned 2 [0143.003] sprintf (in: _Dest=0x3e798fa, _Format="%c%c" | out: _Dest="b4") returned 2 [0143.003] sprintf (in: _Dest=0x3e798fc, _Format="%c%c" | out: _Dest="a0") returned 2 [0143.003] sprintf (in: _Dest=0x3e798fe, _Format="%c%c" | out: _Dest="a0") returned 2 [0143.003] sprintf (in: _Dest=0x3e79900, _Format="%c%c" | out: _Dest="bb") returned 2 [0143.003] sprintf (in: _Dest=0x3e79902, _Format="%c%c" | out: _Dest="c5") returned 2 [0143.003] sprintf (in: _Dest=0x3e79904, _Format="%c%c" | out: _Dest="29") returned 2 [0143.003] sprintf (in: _Dest=0x3e79906, _Format="%c%c" | out: _Dest="fc") returned 2 [0143.003] sprintf (in: _Dest=0x3e79908, _Format="%c%c" | out: _Dest="fc") returned 2 [0143.003] sprintf (in: _Dest=0x3e7990a, _Format="%c%c" | out: _Dest="1f") returned 2 [0143.003] RtlInitAnsiString (in: DestinationString=0xa1ffd38, SourceString="5fa37ecfe6279b51c8da1f444eb4a0a0bbc529fcfc1f" | out: DestinationString="5fa37ecfe6279b51c8da1f444eb4a0a0bbc529fcfc1f") [0143.003] RtlAnsiStringToUnicodeString (in: DestinationString=0xa1ffd30, SourceString="5fa37ecfe6279b51c8da1f444eb4a0a0bbc529fcfc1f", AllocateDestinationString=1 | out: DestinationString="5fa37ecfe6279b51c8da1f444eb4a0a0bbc529fcfc1f") returned 0x0 [0143.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1d9c0 [0143.004] wcscat (in: _Dest=0x3df4aa0, _Source="5fa37ecfe62" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\5fa37ecfe62") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\5fa37ecfe62" [0143.004] wcscat (in: _Dest=0x3df4aa0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\5fa37ecfe62.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\5fa37ecfe62.68814f" [0143.004] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\5fa37ecfe62.68814f", NtPathName=0xa1ffd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\5fa37ecfe62.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7430 [0143.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0143.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03770) returned 1 [0143.100] NtQueryInformationFile (in: FileHandle=0x21f4, IoStatusBlock=0xa1ffd00, FileInformation=0xa1ffd08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa1ffd00, FileInformation=0xa1ffd08) returned 0x0 [0143.100] NtSetInformationFile (FileHandle=0x21f4, IoStatusBlock=0xa1ffd00, FileInformation=0xa1ffd08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0143.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 [0143.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 [0143.112] FlushFileBuffers (hFile=0x21f4) returned 1 [0143.326] CloseHandle (hObject=0x21f4) returned 1 [0143.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df57c0 [0143.327] wcscpy (in: _Dest=0x3df57c0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\" [0143.327] wcscat (in: _Dest=0x3df57c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\68814F-Readme.txt" [0143.327] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\Bg9 5_Jc5swwp7gG\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\bg9 5_jc5swwp7gg\\68814f-readme.txt")) returned 0x20 [0143.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 [0143.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449f0) returned 1 Thread: id = 1409 os_tid = 0x1d98 [0139.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip")) returned 0x20 [0139.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", dwFileAttributes=0x20) returned 0 [0139.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.344] GetLastError () returned 0x5 [0139.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", dwFileAttributes=0x20) returned 0 [0139.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 Thread: id = 1410 os_tid = 0x1d9c [0139.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip")) returned 0x20 [0139.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", dwFileAttributes=0x20) returned 0 [0139.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.346] GetLastError () returned 0x5 [0139.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", dwFileAttributes=0x20) returned 0 [0139.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ee0) returned 1 Thread: id = 1411 os_tid = 0x1da0 [0139.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip")) returned 0x20 [0139.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", dwFileAttributes=0x20) returned 0 [0139.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.347] GetLastError () returned 0x5 [0139.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", dwFileAttributes=0x20) returned 0 [0139.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8c68) returned 1 Thread: id = 1412 os_tid = 0x1da4 [0139.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip")) returned 0x20 [0139.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", dwFileAttributes=0x20) returned 0 [0139.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.349] GetLastError () returned 0x5 [0139.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", dwFileAttributes=0x20) returned 0 [0139.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67490) returned 1 Thread: id = 1413 os_tid = 0x1da8 [0139.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip")) returned 0x20 [0139.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0139.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.350] GetLastError () returned 0x5 [0139.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", dwFileAttributes=0x20) returned 0 [0139.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 1414 os_tid = 0x1dac [0139.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip")) returned 0x20 [0139.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0139.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.352] GetLastError () returned 0x5 [0139.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", dwFileAttributes=0x20) returned 0 [0139.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a120) returned 1 Thread: id = 1415 os_tid = 0x1db0 [0139.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip")) returned 0x20 [0139.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", dwFileAttributes=0x20) returned 0 [0139.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.354] GetLastError () returned 0x5 [0139.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", dwFileAttributes=0x20) returned 0 [0139.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85080) returned 1 Thread: id = 1416 os_tid = 0x1db4 [0139.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip")) returned 0x20 [0139.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", dwFileAttributes=0x20) returned 0 [0139.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.355] GetLastError () returned 0x5 [0139.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", dwFileAttributes=0x20) returned 0 [0139.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852f0) returned 1 Thread: id = 1417 os_tid = 0x1db8 [0139.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip")) returned 0x20 [0139.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0139.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.369] GetLastError () returned 0x5 [0139.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", dwFileAttributes=0x20) returned 0 [0139.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68570) returned 1 Thread: id = 1418 os_tid = 0x1dbc [0139.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip")) returned 0x20 [0139.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0139.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.371] GetLastError () returned 0x5 [0139.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", dwFileAttributes=0x20) returned 0 [0139.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40830) returned 1 Thread: id = 1419 os_tid = 0x1dc0 [0139.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip")) returned 0x20 [0139.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", dwFileAttributes=0x20) returned 0 [0139.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.373] GetLastError () returned 0x5 [0139.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", dwFileAttributes=0x20) returned 0 [0139.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d853c0) returned 1 Thread: id = 1420 os_tid = 0x1dc4 [0139.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip")) returned 0x20 [0139.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0139.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.379] GetLastError () returned 0x5 [0139.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", dwFileAttributes=0x20) returned 0 [0139.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85220) returned 1 Thread: id = 1421 os_tid = 0x1dc8 [0139.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip")) returned 0x20 [0139.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", dwFileAttributes=0x20) returned 0 [0139.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.385] GetLastError () returned 0x5 [0139.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", dwFileAttributes=0x20) returned 0 [0139.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84fb0) returned 1 Thread: id = 1422 os_tid = 0x1dcc [0139.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip")) returned 0x20 [0139.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0139.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.393] GetLastError () returned 0x5 [0139.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", dwFileAttributes=0x20) returned 0 [0139.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 Thread: id = 1423 os_tid = 0x1dd0 [0139.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip")) returned 0x20 [0139.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", dwFileAttributes=0x20) returned 0 [0139.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.411] GetLastError () returned 0x5 [0139.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", dwFileAttributes=0x20) returned 0 [0139.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d858a0) returned 1 Thread: id = 1424 os_tid = 0x1dd4 [0139.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip")) returned 0x20 [0139.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0139.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.415] GetLastError () returned 0x5 [0139.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", dwFileAttributes=0x20) returned 0 [0139.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 1425 os_tid = 0x1dd8 [0139.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip")) returned 0x20 [0139.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", dwFileAttributes=0x20) returned 0 [0139.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.417] GetLastError () returned 0x5 [0139.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", dwFileAttributes=0x20) returned 0 [0139.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85b10) returned 1 Thread: id = 1426 os_tid = 0x1ddc [0139.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip")) returned 0x20 [0139.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0139.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.419] GetLastError () returned 0x5 [0139.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", dwFileAttributes=0x20) returned 0 [0139.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 1427 os_tid = 0x1de0 [0139.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip")) returned 0x20 [0139.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", dwFileAttributes=0x20) returned 0 [0139.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.427] GetLastError () returned 0x5 [0139.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", dwFileAttributes=0x20) returned 0 [0139.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 Thread: id = 1428 os_tid = 0x1de4 [0139.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip")) returned 0x20 [0139.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", dwFileAttributes=0x20) returned 0 [0139.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.442] GetLastError () returned 0x5 [0139.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", dwFileAttributes=0x20) returned 0 [0139.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 Thread: id = 1429 os_tid = 0x1de8 [0139.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f220 [0139.450] wcscpy (in: _Dest=0x3e1f220, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0139.450] wcscat (in: _Dest=0x3e1f220, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0139.450] wcscat (in: _Dest=0x3e1f220, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\*" [0139.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c8e8 [0139.450] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d680 [0140.145] wcscmp (_String1=".", _String2=".") returned 0 [0140.145] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.145] wcscmp (_String1="..", _String2=".") returned 1 [0140.145] wcscmp (_String1="..", _String2="..") returned 0 [0140.145] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0140.145] wcscmp (_String1="cursors.properties", _String2=".") returned 1 [0140.145] wcscmp (_String1="cursors.properties", _String2="..") returned 1 [0140.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44180 [0140.146] wcscpy (in: _Dest=0x3d44180, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0140.146] wcscat (in: _Dest=0x3d44180, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0140.146] wcscat (in: _Dest=0x3d44180, _Source="cursors.properties" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" [0167.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0167.779] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0167.779] wcscmp (_String1="invalid32x32.gif", _String2=".") returned 1 [0167.779] wcscmp (_String1="invalid32x32.gif", _String2="..") returned 1 [0167.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3062c30 [0167.779] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0167.779] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0167.779] wcscat (in: _Dest=0x3062c30, _Source="invalid32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" [0167.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0167.780] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0167.780] wcscmp (_String1="win32_CopyDrop32x32.gif", _String2=".") returned 1 [0167.780] wcscmp (_String1="win32_CopyDrop32x32.gif", _String2="..") returned 1 [0167.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0167.780] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0167.781] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0167.781] wcscat (in: _Dest=0x32cc50, _Source="win32_CopyDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" [0167.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0167.782] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0167.782] wcscmp (_String1="win32_CopyNoDrop32x32.gif", _String2=".") returned 1 [0167.782] wcscmp (_String1="win32_CopyNoDrop32x32.gif", _String2="..") returned 1 [0167.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d538 [0167.782] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0167.782] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0167.782] wcscat (in: _Dest=0x32d538, _Source="win32_CopyNoDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" [0167.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0167.783] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67974b60, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x67974b60, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x67974b60, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0167.783] wcscmp (_String1="win32_LinkDrop32x32.gif", _String2=".") returned 1 [0167.783] wcscmp (_String1="win32_LinkDrop32x32.gif", _String2="..") returned 1 [0167.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0167.783] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0167.783] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0167.783] wcscat (in: _Dest=0x32d408, _Source="win32_LinkDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" [0167.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0167.784] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0167.784] wcscmp (_String1="win32_LinkNoDrop32x32.gif", _String2=".") returned 1 [0167.784] wcscmp (_String1="win32_LinkNoDrop32x32.gif", _String2="..") returned 1 [0167.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d700 [0167.784] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0167.784] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0167.784] wcscat (in: _Dest=0x32d700, _Source="win32_LinkNoDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" [0167.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0167.785] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0167.785] wcscmp (_String1="win32_MoveDrop32x32.gif", _String2=".") returned 1 [0167.785] wcscmp (_String1="win32_MoveDrop32x32.gif", _String2="..") returned 1 [0167.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c660 [0167.786] wcscpy (in: _Dest=0x32c660, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0167.786] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0167.786] wcscat (in: _Dest=0x32c660, _Source="win32_MoveDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" [0167.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0167.787] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0167.787] wcscmp (_String1="win32_MoveNoDrop32x32.gif", _String2=".") returned 1 [0167.787] wcscmp (_String1="win32_MoveNoDrop32x32.gif", _String2="..") returned 1 [0167.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d5d0 [0167.787] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors" [0167.787] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\" [0167.787] wcscat (in: _Dest=0x32d5d0, _Source="win32_MoveNoDrop32x32.gif" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" [0167.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0167.788] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6799acc0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6799acc0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6799acc0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0167.788] FindClose (in: hFindFile=0x7a2d680 | out: hFindFile=0x7a2d680) returned 1 [0167.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c8e8) returned 1 [0167.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f220) returned 1 [0167.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0a60) returned 1 Thread: id = 1430 os_tid = 0x1dec [0139.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files\\java\\jre7\\lib\\i386\\jvm.cfg")) returned 0x20 [0139.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg", dwFileAttributes=0x20) returned 0 [0139.470] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files\\java\\jre7\\lib\\i386\\jvm.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.470] GetLastError () returned 0x5 [0139.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\i386\\jvm.cfg", dwFileAttributes=0x20) returned 0 [0139.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 1431 os_tid = 0x1df0 [0139.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\ciexyz.pf")) returned 0x20 [0139.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x20) returned 0 [0139.478] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.478] GetLastError () returned 0x5 [0139.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x20) returned 0 [0139.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0928) returned 1 Thread: id = 1432 os_tid = 0x1df4 [0139.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\gray.pf")) returned 0x20 [0141.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x20) returned 0 [0141.670] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.670] GetLastError () returned 0x5 [0141.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x20) returned 0 [0141.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7148) returned 1 Thread: id = 1433 os_tid = 0x1df8 [0139.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\linear_rgb.pf")) returned 0x20 [0141.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x20) returned 0 [0141.678] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.678] GetLastError () returned 0x5 [0141.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x20) returned 0 [0141.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26078) returned 1 Thread: id = 1434 os_tid = 0x1dfc [0139.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\pycc.pf")) returned 0x20 [0140.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x20) returned 0 [0140.147] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.147] GetLastError () returned 0x5 [0140.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x20) returned 0 [0140.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 Thread: id = 1435 os_tid = 0x1e00 [0139.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\srgb.pf")) returned 0x20 [0140.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x20) returned 0 [0140.149] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre7\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.149] GetLastError () returned 0x5 [0140.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x20) returned 0 [0140.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 Thread: id = 1436 os_tid = 0x1e04 [0139.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst")) returned 0x21 [0139.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", dwFileAttributes=0x20) returned 0 [0139.489] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.489] GetLastError () returned 0x5 [0139.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", dwFileAttributes=0x21) returned 0 [0139.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a440) returned 1 Thread: id = 1437 os_tid = 0x1e08 [0139.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst")) returned 0x21 [0139.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", dwFileAttributes=0x20) returned 0 [0139.491] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.492] GetLastError () returned 0x5 [0139.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", dwFileAttributes=0x21) returned 0 [0139.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40768) returned 1 Thread: id = 1438 os_tid = 0x1e0c [0139.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini")) returned 0x21 [0143.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", dwFileAttributes=0x20) returned 0 [0143.195] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.196] GetLastError () returned 0x5 [0143.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", dwFileAttributes=0x21) returned 0 [0143.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409c0) returned 1 Thread: id = 1439 os_tid = 0x1e10 [0139.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini")) returned 0x21 [0142.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", dwFileAttributes=0x20) returned 0 [0142.887] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.887] GetLastError () returned 0x5 [0142.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", dwFileAttributes=0x21) returned 0 [0142.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a88) returned 1 Thread: id = 1440 os_tid = 0x1e14 [0139.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf")) returned 0x20 [0139.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.495] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.495] GetLastError () returned 0x5 [0139.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5310) returned 1 Thread: id = 1441 os_tid = 0x1e18 [0139.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf")) returned 0x20 [0139.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.496] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.496] GetLastError () returned 0x5 [0139.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 1442 os_tid = 0x1e1c [0139.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf")) returned 0x20 [0139.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.505] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.505] GetLastError () returned 0x5 [0139.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5440) returned 1 Thread: id = 1443 os_tid = 0x1e20 [0139.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf")) returned 0x20 [0139.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.513] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.513] GetLastError () returned 0x5 [0139.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cce8) returned 1 Thread: id = 1444 os_tid = 0x1e24 [0139.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf")) returned 0x20 [0139.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.515] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.515] GetLastError () returned 0x5 [0139.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5570) returned 1 Thread: id = 1445 os_tid = 0x1e28 [0139.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf")) returned 0x20 [0139.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.517] GetLastError () returned 0x5 [0139.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5148) returned 1 Thread: id = 1446 os_tid = 0x1e2c [0139.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf")) returned 0x20 [0139.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.518] GetLastError () returned 0x5 [0139.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad56a0) returned 1 Thread: id = 1447 os_tid = 0x1e30 [0139.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf")) returned 0x20 [0139.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.520] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.520] GetLastError () returned 0x5 [0139.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6020) returned 1 Thread: id = 1448 os_tid = 0x1e34 [0139.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf")) returned 0x20 [0139.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.521] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.521] GetLastError () returned 0x5 [0139.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad57d0) returned 1 Thread: id = 1449 os_tid = 0x1e38 [0139.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf")) returned 0x20 [0139.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.523] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.523] GetLastError () returned 0x5 [0139.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 Thread: id = 1450 os_tid = 0x1e3c [0139.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf")) returned 0x20 [0139.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.524] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.525] GetLastError () returned 0x5 [0139.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5900) returned 1 Thread: id = 1451 os_tid = 0x1e40 [0139.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf")) returned 0x20 [0139.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.526] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.526] GetLastError () returned 0x5 [0139.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6150) returned 1 Thread: id = 1452 os_tid = 0x1e44 [0139.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf")) returned 0x20 [0139.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.528] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.528] GetLastError () returned 0x5 [0139.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5a30) returned 1 Thread: id = 1453 os_tid = 0x1e48 [0139.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf")) returned 0x20 [0139.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.529] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.530] GetLastError () returned 0x5 [0139.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad61e8) returned 1 Thread: id = 1454 os_tid = 0x1e4c [0139.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf")) returned 0x20 [0140.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0140.151] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.151] GetLastError () returned 0x5 [0140.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0140.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5b60) returned 1 Thread: id = 1455 os_tid = 0x1e50 [0139.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf")) returned 0x20 [0140.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0140.152] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.152] GetLastError () returned 0x5 [0140.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0140.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad63b0) returned 1 Thread: id = 1456 os_tid = 0x1e54 [0139.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf")) returned 0x20 [0139.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.553] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.554] GetLastError () returned 0x5 [0139.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0139.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5c90) returned 1 Thread: id = 1457 os_tid = 0x1e58 [0139.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf")) returned 0x20 [0139.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.555] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0139.555] GetLastError () returned 0x5 [0139.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0139.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6318) returned 1 Thread: id = 1458 os_tid = 0x1e5c [0139.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf")) returned 0x20 [0145.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.648] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.648] GetLastError () returned 0x5 [0145.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 Thread: id = 1459 os_tid = 0x1e60 [0139.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf")) returned 0x20 [0145.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0145.618] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.618] GetLastError () returned 0x5 [0145.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0145.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6298) returned 1 Thread: id = 1460 os_tid = 0x1e64 [0139.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf")) returned 0x20 [0145.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf", dwFileAttributes=0x20) returned 0 [0145.620] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.620] GetLastError () returned 0x5 [0145.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf", dwFileAttributes=0x20) returned 0 [0145.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad60b8) returned 1 Thread: id = 1461 os_tid = 0x1e68 [0139.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf")) returned 0x20 [0145.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf", dwFileAttributes=0x20) returned 0 [0145.622] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.622] GetLastError () returned 0x5 [0145.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf", dwFileAttributes=0x20) returned 0 [0145.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6fb8) returned 1 Thread: id = 1462 os_tid = 0x1e6c [0139.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf")) returned 0x20 [0145.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.624] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.624] GetLastError () returned 0x5 [0145.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5f88) returned 1 Thread: id = 1463 os_tid = 0x1e70 [0139.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf")) returned 0x20 [0145.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0145.643] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.644] GetLastError () returned 0x5 [0145.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0145.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 1464 os_tid = 0x1e74 [0139.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf")) returned 0x20 [0145.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf", dwFileAttributes=0x20) returned 0 [0145.626] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.626] GetLastError () returned 0x5 [0145.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf", dwFileAttributes=0x20) returned 0 [0145.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6448) returned 1 Thread: id = 1465 os_tid = 0x1e78 [0139.571] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn")) returned 0x2022 [0141.740] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.740] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.740] GetLastError () returned 0x5 [0141.740] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 Thread: id = 1466 os_tid = 0x1e7c [0139.571] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn")) returned 0x2022 [0141.741] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.741] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.742] GetLastError () returned 0x5 [0141.742] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 Thread: id = 1467 os_tid = 0x1e80 [0139.571] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn")) returned 0x2022 [0141.743] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.743] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.743] GetLastError () returned 0x5 [0141.743] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 Thread: id = 1468 os_tid = 0x1e84 [0139.571] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn")) returned 0x2022 [0141.746] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.746] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.747] GetLastError () returned 0x5 [0141.747] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47598) returned 1 Thread: id = 1469 os_tid = 0x1e88 [0139.572] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn")) returned 0x2022 [0140.182] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0140.182] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.182] GetLastError () returned 0x5 [0140.182] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0140.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bb58) returned 1 Thread: id = 1470 os_tid = 0x1e8c [0139.572] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn")) returned 0x2022 [0141.693] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0141.694] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.694] GetLastError () returned 0x5 [0141.694] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0141.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47b98) returned 1 Thread: id = 1471 os_tid = 0x1e90 [0139.572] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl")) returned 0x2022 [0141.745] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x20) returned 0 [0141.745] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.745] GetLastError () returned 0x5 [0141.745] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x2022) returned 0 [0141.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 1472 os_tid = 0x1e94 [0139.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf")) returned 0x20 [0145.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf", dwFileAttributes=0x20) returned 0 [0145.628] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.628] GetLastError () returned 0x5 [0145.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf", dwFileAttributes=0x20) returned 0 [0145.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 1473 os_tid = 0x1e98 [0139.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf")) returned 0x20 [0145.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf", dwFileAttributes=0x20) returned 0 [0145.630] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.631] GetLastError () returned 0x5 [0145.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf", dwFileAttributes=0x20) returned 0 [0145.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 1474 os_tid = 0x1e9c [0139.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf")) returned 0x20 [0145.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.633] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.633] GetLastError () returned 0x5 [0145.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 1475 os_tid = 0x1ea0 [0139.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf")) returned 0x20 [0145.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0145.641] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.641] GetLastError () returned 0x5 [0145.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf", dwFileAttributes=0x20) returned 0 [0145.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 1476 os_tid = 0x1ea4 [0139.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf")) returned 0x20 [0145.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf", dwFileAttributes=0x20) returned 0 [0145.656] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.656] GetLastError () returned 0x5 [0145.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf", dwFileAttributes=0x20) returned 0 [0145.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad64e0) returned 1 Thread: id = 1477 os_tid = 0x1ea8 [0139.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf")) returned 0x20 [0145.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf", dwFileAttributes=0x20) returned 0 [0145.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.499] GetLastError () returned 0x5 [0145.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf", dwFileAttributes=0x20) returned 0 [0145.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6578) returned 1 Thread: id = 1478 os_tid = 0x1eac [0139.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf")) returned 0x20 [0145.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.589] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.590] GetLastError () returned 0x5 [0145.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6610) returned 1 Thread: id = 1479 os_tid = 0x1eb0 [0139.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf")) returned 0x20 [0145.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf", dwFileAttributes=0x20) returned 0 [0145.592] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.592] GetLastError () returned 0x5 [0145.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf", dwFileAttributes=0x20) returned 0 [0145.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 1480 os_tid = 0x1eb4 [0139.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf")) returned 0x20 [0145.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf", dwFileAttributes=0x20) returned 0 [0145.595] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.595] GetLastError () returned 0x5 [0145.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf", dwFileAttributes=0x20) returned 0 [0145.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad66a8) returned 1 Thread: id = 1481 os_tid = 0x1eb8 [0139.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd.otf")) returned 0x20 [0145.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf", dwFileAttributes=0x20) returned 0 [0145.597] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\courierstd.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.597] GetLastError () returned 0x5 [0145.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf", dwFileAttributes=0x20) returned 0 [0145.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 1482 os_tid = 0x1ebc [0139.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf")) returned 0x20 [0145.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.599] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.599] GetLastError () returned 0x5 [0145.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 Thread: id = 1483 os_tid = 0x1ec0 [0139.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf")) returned 0x20 [0145.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0145.601] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.602] GetLastError () returned 0x5 [0145.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0145.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6740) returned 1 Thread: id = 1484 os_tid = 0x1ec4 [0139.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf")) returned 0x20 [0145.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf", dwFileAttributes=0x20) returned 0 [0145.604] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.605] GetLastError () returned 0x5 [0145.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf", dwFileAttributes=0x20) returned 0 [0145.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 Thread: id = 1485 os_tid = 0x1ec8 [0139.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf")) returned 0x20 [0145.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0145.607] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.607] GetLastError () returned 0x5 [0145.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0145.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad67d8) returned 1 Thread: id = 1486 os_tid = 0x1ecc [0139.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf")) returned 0x20 [0145.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.610] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.610] GetLastError () returned 0x5 [0145.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf", dwFileAttributes=0x20) returned 0 [0145.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 1487 os_tid = 0x1ed0 [0139.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf")) returned 0x20 [0145.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0145.612] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.612] GetLastError () returned 0x5 [0145.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf", dwFileAttributes=0x20) returned 0 [0145.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6870) returned 1 Thread: id = 1488 os_tid = 0x1ed4 [0139.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf")) returned 0x20 [0145.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf", dwFileAttributes=0x20) returned 0 [0145.614] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.614] GetLastError () returned 0x5 [0145.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf", dwFileAttributes=0x20) returned 0 [0145.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 Thread: id = 1489 os_tid = 0x1ed8 [0139.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf")) returned 0x20 [0145.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0145.616] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.616] GetLastError () returned 0x5 [0145.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf", dwFileAttributes=0x20) returned 0 [0145.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6908) returned 1 Thread: id = 1490 os_tid = 0x1edc [0139.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e148 [0139.604] wcscpy (in: _Dest=0x3f3e148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0139.604] wcscat (in: _Dest=0x3f3e148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0139.604] wcscat (in: _Dest=0x3f3e148, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*" [0139.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3cb50 [0139.604] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb5ad600, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74170 [0145.588] wcscmp (_String1=".", _String2=".") returned 0 [0145.588] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb5874a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb5ad600, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.588] wcscmp (_String1="..", _String2=".") returned 1 [0145.588] wcscmp (_String1="..", _String2="..") returned 0 [0145.588] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFM", cAlternateFileName="")) returned 1 [0145.588] wcscmp (_String1="SY______.PFM", _String2=".") returned 1 [0145.588] wcscmp (_String1="SY______.PFM", _String2="..") returned 1 [0145.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45e30 [0145.589] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0145.589] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0145.589] wcscat (in: _Dest=0x3d45e30, _Source="SY______.PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" [0149.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38 [0149.854] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="zx______.pfm", cAlternateFileName="")) returned 1 [0149.854] wcscmp (_String1="zx______.pfm", _String2=".") returned 1 [0149.854] wcscmp (_String1="zx______.pfm", _String2="..") returned 1 [0149.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45ec0 [0149.854] wcscpy (in: _Dest=0x3d45ec0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0149.854] wcscat (in: _Dest=0x3d45ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0149.855] wcscat (in: _Dest=0x3d45ec0, _Source="zx______.pfm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" [0149.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1710 [0149.856] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 1 [0149.856] wcscmp (_String1="zy______.pfm", _String2=".") returned 1 [0149.856] wcscmp (_String1="zy______.pfm", _String2="..") returned 1 [0149.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d452f0 [0149.856] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM" [0149.857] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\" [0149.857] wcscat (in: _Dest=0x3d452f0, _Source="zy______.pfm" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" [0149.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0149.859] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5ad600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 0 [0149.859] FindClose (in: hFindFile=0x3e74170 | out: hFindFile=0x3e74170) returned 1 [0149.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3cb50) returned 1 [0149.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0149.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 Thread: id = 1491 os_tid = 0x1ee0 [0140.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\sy______.pfb")) returned 0x20 [0145.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB", dwFileAttributes=0x20) returned 0 [0145.646] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\sy______.pfb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.646] GetLastError () returned 0x5 [0145.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB", dwFileAttributes=0x20) returned 0 [0145.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 1492 os_tid = 0x1ef0 [0140.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b30 [0140.157] wcscpy (in: _Dest=0x3ee0b30, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax" [0140.157] wcscat (in: _Dest=0x3ee0b30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\" [0140.157] wcscat (in: _Dest=0x3ee0b30, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*" [0140.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1340 [0140.158] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1340) returned 1 [0140.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b30) returned 1 [0140.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 Thread: id = 1493 os_tid = 0x1ef4 [0140.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a384d0 [0140.159] wcscpy (in: _Dest=0x7a384d0, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" [0140.159] wcscat (in: _Dest=0x7a384d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\" [0140.159] wcscat (in: _Dest=0x7a384d0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*" [0140.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1340 [0140.159] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0140.160] wcscmp (_String1=".", _String2=".") returned 0 [0140.160] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5119f42, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5119f42, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.160] wcscmp (_String1="..", _String2=".") returned 1 [0140.160] wcscmp (_String1="..", _String2="..") returned 0 [0140.160] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0140.160] wcscmp (_String1="WelcomeScan.jpg", _String2=".") returned 1 [0140.160] wcscmp (_String1="WelcomeScan.jpg", _String2="..") returned 1 [0140.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3db00 [0140.160] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan" [0140.160] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\" [0140.160] wcscat (in: _Dest=0x3f3db00, _Source="WelcomeScan.jpg" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg") returned="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" [0144.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2414 [0144.122] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4375095c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x4375095c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x4375095c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0144.122] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0144.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1340) returned 1 [0144.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a384d0) returned 1 [0144.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0928) returned 1 Thread: id = 1494 os_tid = 0x1ef8 [0140.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51278 [0140.160] wcscpy (in: _Dest=0x3d51278, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" [0140.160] wcscat (in: _Dest=0x3d51278, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\" [0140.160] wcscat (in: _Dest=0x3d51278, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*" [0140.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2b50 [0140.161] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf950 [0142.604] wcscmp (_String1=".", _String2=".") returned 0 [0142.604] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354dfa10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x354dfa10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.604] wcscmp (_String1="..", _String2=".") returned 1 [0142.604] wcscmp (_String1="..", _String2="..") returned 0 [0142.604] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83ee400, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa83ee400, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 1 [0142.604] wcscmp (_String1="OFFICE10.MML", _String2=".") returned 1 [0142.604] wcscmp (_String1="OFFICE10.MML", _String2="..") returned 1 [0142.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60d80 [0142.605] wcscpy (in: _Dest=0x7a60d80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033" [0142.605] wcscat (in: _Dest=0x7a60d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\" [0142.605] wcscat (in: _Dest=0x7a60d80, _Source="OFFICE10.MML" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" [0162.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0163.067] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83ee400, ftCreationTime.dwHighDateTime=0x1c07b83, ftLastAccessTime.dwLowDateTime=0x354dfa10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa83ee400, ftLastWriteTime.dwHighDateTime=0x1c07b83, nFileSizeHigh=0x0, nFileSizeLow=0x4c438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE10.MML", cAlternateFileName="")) returned 0 [0163.068] FindClose (in: hFindFile=0x3dcf950 | out: hFindFile=0x3dcf950) returned 1 [0163.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2b50) returned 1 [0163.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0163.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d514d0) returned 1 Thread: id = 1495 os_tid = 0x1efc [0140.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19318 [0140.161] wcscpy (in: _Dest=0x3e19318, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0140.161] wcscat (in: _Dest=0x3e19318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0140.161] wcscat (in: _Dest=0x3e19318, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*" [0140.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1ce0 [0140.162] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76b293d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd799b30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7d30 [0144.479] wcscmp (_String1=".", _String2=".") returned 0 [0144.479] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76b293d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd799b30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.496] wcscmp (_String1="..", _String2=".") returned 1 [0145.496] wcscmp (_String1="..", _String2="..") returned 0 [0145.496] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x39a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTOSHAP.DLL", cAlternateFileName="")) returned 1 [0145.496] wcscmp (_String1="AUTOSHAP.DLL", _String2=".") returned 1 [0145.496] wcscmp (_String1="AUTOSHAP.DLL", _String2="..") returned 1 [0145.496] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf689c300, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf689c300, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18180_.WMF", cAlternateFileName="")) returned 1 [0145.496] wcscmp (_String1="BD18180_.WMF", _String2=".") returned 1 [0145.496] wcscmp (_String1="BD18180_.WMF", _String2="..") returned 1 [0145.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad5148 [0145.496] wcscpy (in: _Dest=0x7ad5148, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0145.496] wcscat (in: _Dest=0x7ad5148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0145.497] wcscat (in: _Dest=0x7ad5148, _Source="BD18180_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" [0150.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0150.624] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5382f600, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5382f600, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18181_.WMF", cAlternateFileName="")) returned 1 [0150.624] wcscmp (_String1="BD18181_.WMF", _String2=".") returned 1 [0150.624] wcscmp (_String1="BD18181_.WMF", _String2="..") returned 1 [0150.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64550 [0150.624] wcscpy (in: _Dest=0x7a64550, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.624] wcscat (in: _Dest=0x7a64550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.624] wcscat (in: _Dest=0x7a64550, _Source="BD18181_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" [0150.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0150.625] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3602e000, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3602e000, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18182_.WMF", cAlternateFileName="")) returned 1 [0150.625] wcscmp (_String1="BD18182_.WMF", _String2=".") returned 1 [0150.625] wcscmp (_String1="BD18182_.WMF", _String2="..") returned 1 [0150.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a645e8 [0150.626] wcscpy (in: _Dest=0x7a645e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.626] wcscat (in: _Dest=0x7a645e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.626] wcscat (in: _Dest=0x7a645e8, _Source="BD18182_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" [0150.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a645e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0150.627] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76625e00, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76625e00, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0xd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18184_.WMF", cAlternateFileName="")) returned 1 [0150.627] wcscmp (_String1="BD18184_.WMF", _String2=".") returned 1 [0150.627] wcscmp (_String1="BD18184_.WMF", _String2="..") returned 1 [0150.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64680 [0150.628] wcscpy (in: _Dest=0x7a64680, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.628] wcscat (in: _Dest=0x7a64680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.628] wcscat (in: _Dest=0x7a64680, _Source="BD18184_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" [0150.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0150.629] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbb5900, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6dbb5900, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18185_.WMF", cAlternateFileName="")) returned 1 [0150.629] wcscmp (_String1="BD18185_.WMF", _String2=".") returned 1 [0150.629] wcscmp (_String1="BD18185_.WMF", _String2="..") returned 1 [0150.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64718 [0150.629] wcscpy (in: _Dest=0x7a64718, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.629] wcscat (in: _Dest=0x7a64718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.629] wcscat (in: _Dest=0x7a64718, _Source="BD18185_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" [0150.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0150.631] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a40b100, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7a40b100, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x758, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18187_.WMF", cAlternateFileName="")) returned 1 [0150.631] wcscmp (_String1="BD18187_.WMF", _String2=".") returned 1 [0150.631] wcscmp (_String1="BD18187_.WMF", _String2="..") returned 1 [0150.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a648e0 [0150.631] wcscpy (in: _Dest=0x7a648e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.631] wcscat (in: _Dest=0x7a648e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.631] wcscat (in: _Dest=0x7a648e0, _Source="BD18187_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" [0150.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a648e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0150.633] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fe3f00, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19fe3f00, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18189_.WMF", cAlternateFileName="")) returned 1 [0150.633] wcscmp (_String1="BD18189_.WMF", _String2=".") returned 1 [0150.633] wcscmp (_String1="BD18189_.WMF", _String2="..") returned 1 [0150.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64978 [0150.633] wcscpy (in: _Dest=0x7a64978, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.633] wcscat (in: _Dest=0x7a64978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.634] wcscat (in: _Dest=0x7a64978, _Source="BD18189_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" [0150.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0150.635] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9e7700, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f9e7700, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18190_.WMF", cAlternateFileName="")) returned 1 [0150.635] wcscmp (_String1="BD18190_.WMF", _String2=".") returned 1 [0150.635] wcscmp (_String1="BD18190_.WMF", _String2="..") returned 1 [0150.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a644b8 [0150.635] wcscpy (in: _Dest=0x7a644b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.635] wcscat (in: _Dest=0x7a644b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.635] wcscat (in: _Dest=0x7a644b8, _Source="BD18190_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" [0150.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a644b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694 [0150.637] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac521300, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd642ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xac521300, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0xc9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18191_.WMF", cAlternateFileName="")) returned 1 [0150.637] wcscmp (_String1="BD18191_.WMF", _String2=".") returned 1 [0150.637] wcscmp (_String1="BD18191_.WMF", _String2="..") returned 1 [0150.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64420 [0150.637] wcscpy (in: _Dest=0x7a64420, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.637] wcscat (in: _Dest=0x7a64420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.637] wcscat (in: _Dest=0x7a64420, _Source="BD18191_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" [0150.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0150.639] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b780a00, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b780a00, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18192_.WMF", cAlternateFileName="")) returned 1 [0150.639] wcscmp (_String1="BD18192_.WMF", _String2=".") returned 1 [0150.639] wcscmp (_String1="BD18192_.WMF", _String2="..") returned 1 [0150.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64388 [0150.639] wcscpy (in: _Dest=0x7a64388, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.639] wcscat (in: _Dest=0x7a64388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.639] wcscat (in: _Dest=0x7a64388, _Source="BD18192_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" [0150.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0150.641] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b1e800, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65b1e800, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18193_.WMF", cAlternateFileName="")) returned 1 [0150.641] wcscmp (_String1="BD18193_.WMF", _String2=".") returned 1 [0150.641] wcscmp (_String1="BD18193_.WMF", _String2="..") returned 1 [0150.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a642f0 [0150.641] wcscpy (in: _Dest=0x7a642f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.641] wcscat (in: _Dest=0x7a642f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.641] wcscat (in: _Dest=0x7a642f0, _Source="BD18193_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" [0150.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a642f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0150.643] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf181800, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbf181800, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18194_.WMF", cAlternateFileName="")) returned 1 [0150.643] wcscmp (_String1="BD18194_.WMF", _String2=".") returned 1 [0150.643] wcscmp (_String1="BD18194_.WMF", _String2="..") returned 1 [0150.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64258 [0150.643] wcscpy (in: _Dest=0x7a64258, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.643] wcscat (in: _Dest=0x7a64258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.643] wcscat (in: _Dest=0x7a64258, _Source="BD18194_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" [0150.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0150.645] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89752e00, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x89752e00, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18196_.WMF", cAlternateFileName="")) returned 1 [0150.645] wcscmp (_String1="BD18196_.WMF", _String2=".") returned 1 [0150.645] wcscmp (_String1="BD18196_.WMF", _String2="..") returned 1 [0150.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a641c0 [0150.645] wcscpy (in: _Dest=0x7a641c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.645] wcscat (in: _Dest=0x7a641c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.645] wcscat (in: _Dest=0x7a641c0, _Source="BD18196_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" [0150.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a641c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0150.647] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a800, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10a800, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18197_.WMF", cAlternateFileName="")) returned 1 [0150.647] wcscmp (_String1="BD18197_.WMF", _String2=".") returned 1 [0150.647] wcscmp (_String1="BD18197_.WMF", _String2="..") returned 1 [0150.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64128 [0150.648] wcscpy (in: _Dest=0x7a64128, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.648] wcscat (in: _Dest=0x7a64128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.648] wcscat (in: _Dest=0x7a64128, _Source="BD18197_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" [0150.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0150.649] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a800, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10a800, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x5c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18198_.WMF", cAlternateFileName="")) returned 1 [0150.649] wcscmp (_String1="BD18198_.WMF", _String2=".") returned 1 [0150.649] wcscmp (_String1="BD18198_.WMF", _String2="..") returned 1 [0150.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64090 [0150.650] wcscpy (in: _Dest=0x7a64090, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.650] wcscat (in: _Dest=0x7a64090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.650] wcscat (in: _Dest=0x7a64090, _Source="BD18198_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" [0150.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0150.652] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50ff800, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd669030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc50ff800, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18199_.WMF", cAlternateFileName="")) returned 1 [0150.652] wcscmp (_String1="BD18199_.WMF", _String2=".") returned 1 [0150.652] wcscmp (_String1="BD18199_.WMF", _String2="..") returned 1 [0150.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64848 [0150.652] wcscpy (in: _Dest=0x7a64848, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.652] wcscat (in: _Dest=0x7a64848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.652] wcscat (in: _Dest=0x7a64848, _Source="BD18199_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" [0150.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0150.653] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92650000, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x92650000, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18200_.WMF", cAlternateFileName="")) returned 1 [0150.653] wcscmp (_String1="BD18200_.WMF", _String2=".") returned 1 [0150.653] wcscmp (_String1="BD18200_.WMF", _String2="..") returned 1 [0150.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64aa8 [0150.654] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.654] wcscat (in: _Dest=0x7a64aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.654] wcscat (in: _Dest=0x7a64aa8, _Source="BD18200_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" [0150.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0150.655] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f8a400, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68f8a400, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18201_.WMF", cAlternateFileName="")) returned 1 [0150.655] wcscmp (_String1="BD18201_.WMF", _String2=".") returned 1 [0150.655] wcscmp (_String1="BD18201_.WMF", _String2="..") returned 1 [0150.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64b40 [0150.655] wcscpy (in: _Dest=0x7a64b40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.656] wcscat (in: _Dest=0x7a64b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.656] wcscat (in: _Dest=0x7a64b40, _Source="BD18201_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" [0150.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0150.657] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a800, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10a800, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18202_.WMF", cAlternateFileName="")) returned 1 [0150.657] wcscmp (_String1="BD18202_.WMF", _String2=".") returned 1 [0150.657] wcscmp (_String1="BD18202_.WMF", _String2="..") returned 1 [0150.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64bd8 [0150.657] wcscpy (in: _Dest=0x7a64bd8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.657] wcscat (in: _Dest=0x7a64bd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.657] wcscat (in: _Dest=0x7a64bd8, _Source="BD18202_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" [0150.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0150.659] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd48d4200, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd48d4200, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18203_.WMF", cAlternateFileName="")) returned 1 [0150.659] wcscmp (_String1="BD18203_.WMF", _String2=".") returned 1 [0150.659] wcscmp (_String1="BD18203_.WMF", _String2="..") returned 1 [0150.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64c70 [0150.659] wcscpy (in: _Dest=0x7a64c70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0150.659] wcscat (in: _Dest=0x7a64c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0150.659] wcscat (in: _Dest=0x7a64c70, _Source="BD18203_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" [0150.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0151.197] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d101a00, ftCreationTime.dwHighDateTime=0x1bddd17, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d101a00, ftLastWriteTime.dwHighDateTime=0x1bddd17, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18204_.WMF", cAlternateFileName="")) returned 1 [0151.197] wcscmp (_String1="BD18204_.WMF", _String2=".") returned 1 [0151.197] wcscmp (_String1="BD18204_.WMF", _String2="..") returned 1 [0151.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6018 [0151.197] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0151.197] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0151.198] wcscat (in: _Dest=0x3eb6018, _Source="BD18204_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" [0153.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ffc [0153.929] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed97f200, ftCreationTime.dwHighDateTime=0x1bdcf85, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xed97f200, ftLastWriteTime.dwHighDateTime=0x1bdcf85, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18205_.WMF", cAlternateFileName="")) returned 1 [0153.929] wcscmp (_String1="BD18205_.WMF", _String2=".") returned 1 [0153.929] wcscmp (_String1="BD18205_.WMF", _String2="..") returned 1 [0153.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a65720 [0153.929] wcscpy (in: _Dest=0x7a65720, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.929] wcscat (in: _Dest=0x7a65720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.929] wcscat (in: _Dest=0x7a65720, _Source="BD18205_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" [0153.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60 [0153.930] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe30a8600, ftCreationTime.dwHighDateTime=0x1bddd03, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe30a8600, ftLastWriteTime.dwHighDateTime=0x1bddd03, nFileSizeHigh=0x0, nFileSizeLow=0x8da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18206_.WMF", cAlternateFileName="")) returned 1 [0153.930] wcscmp (_String1="BD18206_.WMF", _String2=".") returned 1 [0153.930] wcscmp (_String1="BD18206_.WMF", _String2="..") returned 1 [0153.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a65688 [0153.930] wcscpy (in: _Dest=0x7a65688, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.930] wcscat (in: _Dest=0x7a65688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.930] wcscat (in: _Dest=0x7a65688, _Source="BD18206_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" [0153.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48 [0153.931] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4936e00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd68f190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4936e00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18207_.WMF", cAlternateFileName="")) returned 1 [0153.931] wcscmp (_String1="BD18207_.WMF", _String2=".") returned 1 [0153.932] wcscmp (_String1="BD18207_.WMF", _String2="..") returned 1 [0153.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a655f0 [0153.932] wcscpy (in: _Dest=0x7a655f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.932] wcscat (in: _Dest=0x7a655f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.932] wcscat (in: _Dest=0x7a655f0, _Source="BD18207_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" [0153.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a655f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68 [0153.933] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a62100, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4a62100, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x1b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18208_.WMF", cAlternateFileName="")) returned 1 [0153.933] wcscmp (_String1="BD18208_.WMF", _String2=".") returned 1 [0153.933] wcscmp (_String1="BD18208_.WMF", _String2="..") returned 1 [0153.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a65558 [0153.933] wcscpy (in: _Dest=0x7a65558, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.933] wcscat (in: _Dest=0x7a65558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.933] wcscat (in: _Dest=0x7a65558, _Source="BD18208_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" [0153.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c [0153.935] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b951600, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b951600, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xc6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18209_.WMF", cAlternateFileName="")) returned 1 [0153.935] wcscmp (_String1="BD18209_.WMF", _String2=".") returned 1 [0153.935] wcscmp (_String1="BD18209_.WMF", _String2="..") returned 1 [0153.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a654c0 [0153.935] wcscpy (in: _Dest=0x7a654c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.935] wcscat (in: _Dest=0x7a654c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.935] wcscat (in: _Dest=0x7a654c0, _Source="BD18209_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" [0153.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a654c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74 [0153.936] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9c1f00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd9c1f00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0xc4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18210_.WMF", cAlternateFileName="")) returned 1 [0153.936] wcscmp (_String1="BD18210_.WMF", _String2=".") returned 1 [0153.936] wcscmp (_String1="BD18210_.WMF", _String2="..") returned 1 [0153.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a65428 [0153.936] wcscpy (in: _Dest=0x7a65428, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.936] wcscat (in: _Dest=0x7a65428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.936] wcscat (in: _Dest=0x7a65428, _Source="BD18210_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" [0153.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78 [0153.938] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9e7700, ftCreationTime.dwHighDateTime=0x1bdfeb1, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7f9e7700, ftLastWriteTime.dwHighDateTime=0x1bdfeb1, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18211_.WMF", cAlternateFileName="")) returned 1 [0153.938] wcscmp (_String1="BD18211_.WMF", _String2=".") returned 1 [0153.938] wcscmp (_String1="BD18211_.WMF", _String2="..") returned 1 [0153.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a65390 [0153.938] wcscpy (in: _Dest=0x7a65390, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.938] wcscat (in: _Dest=0x7a65390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.938] wcscat (in: _Dest=0x7a65390, _Source="BD18211_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" [0153.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80 [0153.940] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac8fc00, ftCreationTime.dwHighDateTime=0x1bddd0b, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ac8fc00, ftLastWriteTime.dwHighDateTime=0x1bddd0b, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18212_.WMF", cAlternateFileName="")) returned 1 [0153.940] wcscmp (_String1="BD18212_.WMF", _String2=".") returned 1 [0153.940] wcscmp (_String1="BD18212_.WMF", _String2="..") returned 1 [0153.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a652f8 [0153.940] wcscpy (in: _Dest=0x7a652f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.940] wcscat (in: _Dest=0x7a652f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.940] wcscat (in: _Dest=0x7a652f8, _Source="BD18212_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" [0153.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a652f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0153.942] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab6db100, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab6db100, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x704, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18213_.WMF", cAlternateFileName="")) returned 1 [0153.942] wcscmp (_String1="BD18213_.WMF", _String2=".") returned 1 [0153.942] wcscmp (_String1="BD18213_.WMF", _String2="..") returned 1 [0153.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a65260 [0153.942] wcscpy (in: _Dest=0x7a65260, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.942] wcscat (in: _Dest=0x7a65260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.942] wcscat (in: _Dest=0x7a65260, _Source="BD18213_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" [0153.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90 [0153.944] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1425900, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd6b52f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1425900, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18214_.WMF", cAlternateFileName="")) returned 1 [0153.944] wcscmp (_String1="BD18214_.WMF", _String2=".") returned 1 [0153.944] wcscmp (_String1="BD18214_.WMF", _String2="..") returned 1 [0153.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a651c8 [0153.944] wcscpy (in: _Dest=0x7a651c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.945] wcscat (in: _Dest=0x7a651c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.945] wcscat (in: _Dest=0x7a651c8, _Source="BD18214_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" [0153.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a651c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94 [0153.947] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0961000, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc0961000, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18215_.WMF", cAlternateFileName="")) returned 1 [0153.947] wcscmp (_String1="BD18215_.WMF", _String2=".") returned 1 [0153.947] wcscmp (_String1="BD18215_.WMF", _String2="..") returned 1 [0153.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a65130 [0153.947] wcscpy (in: _Dest=0x7a65130, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.947] wcscat (in: _Dest=0x7a65130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.947] wcscat (in: _Dest=0x7a65130, _Source="BD18215_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" [0153.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c [0153.949] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1e01c00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd1e01c00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0x726, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18216_.WMF", cAlternateFileName="")) returned 1 [0153.955] wcscmp (_String1="BD18216_.WMF", _String2=".") returned 1 [0153.955] wcscmp (_String1="BD18216_.WMF", _String2="..") returned 1 [0153.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a65000 [0153.955] wcscpy (in: _Dest=0x7a65000, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0153.955] wcscat (in: _Dest=0x7a65000, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0153.955] wcscat (in: _Dest=0x7a65000, _Source="BD18216_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" [0156.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0156.865] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1321fd00, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1321fd00, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x1552, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18217_.WMF", cAlternateFileName="")) returned 1 [0156.865] wcscmp (_String1="BD18217_.WMF", _String2=".") returned 1 [0156.865] wcscmp (_String1="BD18217_.WMF", _String2="..") returned 1 [0156.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6bf8 [0156.865] wcscpy (in: _Dest=0x3eb6bf8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.866] wcscat (in: _Dest=0x3eb6bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.866] wcscat (in: _Dest=0x3eb6bf8, _Source="BD18217_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" [0156.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0156.867] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2503a000, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2503a000, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x1212, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18218_.WMF", cAlternateFileName="")) returned 1 [0156.867] wcscmp (_String1="BD18218_.WMF", _String2=".") returned 1 [0156.867] wcscmp (_String1="BD18218_.WMF", _String2="..") returned 1 [0156.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5db8 [0156.867] wcscpy (in: _Dest=0x3eb5db8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.867] wcscat (in: _Dest=0x3eb5db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.867] wcscat (in: _Dest=0x3eb5db8, _Source="BD18218_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" [0156.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0156.869] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4595600, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4595600, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x1136, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18219_.WMF", cAlternateFileName="")) returned 1 [0156.869] wcscmp (_String1="BD18219_.WMF", _String2=".") returned 1 [0156.869] wcscmp (_String1="BD18219_.WMF", _String2="..") returned 1 [0156.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6018 [0156.869] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.869] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.869] wcscat (in: _Dest=0x3eb6018, _Source="BD18219_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" [0156.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f0 [0156.870] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfe2d500, ftCreationTime.dwHighDateTime=0x1bddd09, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbfe2d500, ftLastWriteTime.dwHighDateTime=0x1bddd09, nFileSizeHigh=0x0, nFileSizeLow=0x213c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18220_.WMF", cAlternateFileName="")) returned 1 [0156.871] wcscmp (_String1="BD18220_.WMF", _String2=".") returned 1 [0156.871] wcscmp (_String1="BD18220_.WMF", _String2="..") returned 1 [0156.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6310 [0156.871] wcscpy (in: _Dest=0x3eb6310, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.871] wcscat (in: _Dest=0x3eb6310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.871] wcscat (in: _Dest=0x3eb6310, _Source="BD18220_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" [0156.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0156.872] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35694a00, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd6db450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35694a00, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x72c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18221_.WMF", cAlternateFileName="")) returned 1 [0156.872] wcscmp (_String1="BD18221_.WMF", _String2=".") returned 1 [0156.872] wcscmp (_String1="BD18221_.WMF", _String2="..") returned 1 [0156.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6f88 [0156.872] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.872] wcscat (in: _Dest=0x3eb6f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.872] wcscat (in: _Dest=0x3eb6f88, _Source="BD18221_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" [0156.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0156.873] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ade7400, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ade7400, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18222_.WMF", cAlternateFileName="")) returned 1 [0156.873] wcscmp (_String1="BD18222_.WMF", _String2=".") returned 1 [0156.874] wcscmp (_String1="BD18222_.WMF", _String2="..") returned 1 [0156.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5f80 [0156.874] wcscpy (in: _Dest=0x3eb5f80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.874] wcscat (in: _Dest=0x3eb5f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.874] wcscat (in: _Dest=0x3eb5f80, _Source="BD18222_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" [0156.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1400 [0156.875] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf419a100, ftCreationTime.dwHighDateTime=0x1bddbf6, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf419a100, ftLastWriteTime.dwHighDateTime=0x1bddbf6, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18223_.WMF", cAlternateFileName="")) returned 1 [0156.875] wcscmp (_String1="BD18223_.WMF", _String2=".") returned 1 [0156.875] wcscmp (_String1="BD18223_.WMF", _String2="..") returned 1 [0156.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5698 [0156.875] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.875] wcscat (in: _Dest=0x3eb5698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.875] wcscat (in: _Dest=0x3eb5698, _Source="BD18223_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" [0156.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13fc [0156.880] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea7e600, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3ea7e600, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18224_.WMF", cAlternateFileName="")) returned 1 [0156.880] wcscmp (_String1="BD18224_.WMF", _String2=".") returned 1 [0156.880] wcscmp (_String1="BD18224_.WMF", _String2="..") returned 1 [0156.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb70b8 [0156.881] wcscpy (in: _Dest=0x3eb70b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.881] wcscat (in: _Dest=0x3eb70b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.881] wcscat (in: _Dest=0x3eb70b8, _Source="BD18224_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" [0156.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb70b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0156.882] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb88c9f00, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb88c9f00, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18225_.WMF", cAlternateFileName="")) returned 1 [0156.882] wcscmp (_String1="BD18225_.WMF", _String2=".") returned 1 [0156.882] wcscmp (_String1="BD18225_.WMF", _String2="..") returned 1 [0156.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5e50 [0156.883] wcscpy (in: _Dest=0x3eb5e50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.883] wcscat (in: _Dest=0x3eb5e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.883] wcscat (in: _Dest=0x3eb5e50, _Source="BD18225_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" [0156.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8 [0156.884] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe245c600, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe245c600, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18226_.WMF", cAlternateFileName="")) returned 1 [0156.884] wcscmp (_String1="BD18226_.WMF", _String2=".") returned 1 [0156.884] wcscmp (_String1="BD18226_.WMF", _String2="..") returned 1 [0156.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5990 [0156.884] wcscpy (in: _Dest=0x3eb5990, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.884] wcscat (in: _Dest=0x3eb5990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.884] wcscat (in: _Dest=0x3eb5990, _Source="BD18226_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" [0156.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04 [0156.885] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1919dd00, ftCreationTime.dwHighDateTime=0x1bdcf84, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1919dd00, ftLastWriteTime.dwHighDateTime=0x1bdcf84, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18227_.WMF", cAlternateFileName="")) returned 1 [0156.885] wcscmp (_String1="BD18227_.WMF", _String2=".") returned 1 [0156.885] wcscmp (_String1="BD18227_.WMF", _String2="..") returned 1 [0156.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb64d8 [0156.886] wcscpy (in: _Dest=0x3eb64d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.886] wcscat (in: _Dest=0x3eb64d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.886] wcscat (in: _Dest=0x3eb64d8, _Source="BD18227_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" [0156.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb64d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0156.887] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0685000, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa0685000, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x884, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18228_.WMF", cAlternateFileName="")) returned 1 [0156.887] wcscmp (_String1="BD18228_.WMF", _String2=".") returned 1 [0156.887] wcscmp (_String1="BD18228_.WMF", _String2="..") returned 1 [0156.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5ee8 [0156.887] wcscpy (in: _Dest=0x3eb5ee8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.887] wcscat (in: _Dest=0x3eb5ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.887] wcscat (in: _Dest=0x3eb5ee8, _Source="BD18228_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" [0156.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0156.888] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93a9200, ftCreationTime.dwHighDateTime=0x1bdfeb0, ftLastAccessTime.dwLowDateTime=0xbd7015b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc93a9200, ftLastWriteTime.dwHighDateTime=0x1bdfeb0, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18229_.WMF", cAlternateFileName="")) returned 1 [0156.889] wcscmp (_String1="BD18229_.WMF", _String2=".") returned 1 [0156.889] wcscmp (_String1="BD18229_.WMF", _String2="..") returned 1 [0156.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb71e8 [0156.889] wcscpy (in: _Dest=0x3eb71e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.889] wcscat (in: _Dest=0x3eb71e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.889] wcscat (in: _Dest=0x3eb71e8, _Source="BD18229_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" [0156.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb71e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0156.890] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8461b000, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8461b000, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x724, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18230_.WMF", cAlternateFileName="")) returned 1 [0156.890] wcscmp (_String1="BD18230_.WMF", _String2=".") returned 1 [0156.890] wcscmp (_String1="BD18230_.WMF", _String2="..") returned 1 [0156.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5bf0 [0156.890] wcscpy (in: _Dest=0x3eb5bf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.890] wcscat (in: _Dest=0x3eb5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.890] wcscat (in: _Dest=0x3eb5bf0, _Source="BD18230_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" [0156.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0156.892] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa22f1500, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa22f1500, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18231_.WMF", cAlternateFileName="")) returned 1 [0156.892] wcscmp (_String1="BD18231_.WMF", _String2=".") returned 1 [0156.892] wcscmp (_String1="BD18231_.WMF", _String2="..") returned 1 [0156.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64258 [0156.892] wcscpy (in: _Dest=0x7a64258, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.892] wcscat (in: _Dest=0x7a64258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.892] wcscat (in: _Dest=0x7a64258, _Source="BD18231_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" [0156.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140c [0156.893] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc98b200, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc98b200, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18232_.WMF", cAlternateFileName="")) returned 1 [0156.893] wcscmp (_String1="BD18232_.WMF", _String2=".") returned 1 [0156.893] wcscmp (_String1="BD18232_.WMF", _String2="..") returned 1 [0156.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a641c0 [0156.894] wcscpy (in: _Dest=0x7a641c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.894] wcscat (in: _Dest=0x7a641c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.894] wcscat (in: _Dest=0x7a641c0, _Source="BD18232_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" [0156.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a641c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408 [0156.895] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefab8200, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xefab8200, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18233_.WMF", cAlternateFileName="")) returned 1 [0156.895] wcscmp (_String1="BD18233_.WMF", _String2=".") returned 1 [0156.895] wcscmp (_String1="BD18233_.WMF", _String2="..") returned 1 [0156.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64128 [0156.895] wcscpy (in: _Dest=0x7a64128, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.895] wcscat (in: _Dest=0x7a64128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.895] wcscat (in: _Dest=0x7a64128, _Source="BD18233_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" [0156.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0156.896] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef7f00, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3ef7f00, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x754, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18234_.WMF", cAlternateFileName="")) returned 1 [0156.896] wcscmp (_String1="BD18234_.WMF", _String2=".") returned 1 [0156.896] wcscmp (_String1="BD18234_.WMF", _String2="..") returned 1 [0156.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64090 [0156.896] wcscpy (in: _Dest=0x7a64090, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.897] wcscat (in: _Dest=0x7a64090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.897] wcscat (in: _Dest=0x7a64090, _Source="BD18234_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" [0156.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0156.937] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5a8a00, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f5a8a00, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18235_.WMF", cAlternateFileName="")) returned 1 [0156.938] wcscmp (_String1="BD18235_.WMF", _String2=".") returned 1 [0156.938] wcscmp (_String1="BD18235_.WMF", _String2="..") returned 1 [0156.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64aa8 [0156.938] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.938] wcscat (in: _Dest=0x7a64aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.938] wcscat (in: _Dest=0x7a64aa8, _Source="BD18235_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" [0156.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0156.939] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34cfb400, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd727710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34cfb400, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x6d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18236_.WMF", cAlternateFileName="")) returned 1 [0156.939] wcscmp (_String1="BD18236_.WMF", _String2=".") returned 1 [0156.939] wcscmp (_String1="BD18236_.WMF", _String2="..") returned 1 [0156.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64848 [0156.939] wcscpy (in: _Dest=0x7a64848, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.939] wcscat (in: _Dest=0x7a64848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.939] wcscat (in: _Dest=0x7a64848, _Source="BD18236_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" [0156.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0156.941] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecb4d00, ftCreationTime.dwHighDateTime=0x1bdcf80, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbecb4d00, ftLastWriteTime.dwHighDateTime=0x1bdcf80, nFileSizeHigh=0x0, nFileSizeLow=0x5fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18237_.WMF", cAlternateFileName="")) returned 1 [0156.941] wcscmp (_String1="BD18237_.WMF", _String2=".") returned 1 [0156.941] wcscmp (_String1="BD18237_.WMF", _String2="..") returned 1 [0156.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64b40 [0156.941] wcscpy (in: _Dest=0x7a64b40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.941] wcscat (in: _Dest=0x7a64b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.941] wcscat (in: _Dest=0x7a64b40, _Source="BD18237_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" [0156.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0156.942] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a44de00, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4a44de00, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18238_.WMF", cAlternateFileName="")) returned 1 [0156.942] wcscmp (_String1="BD18238_.WMF", _String2=".") returned 1 [0156.943] wcscmp (_String1="BD18238_.WMF", _String2="..") returned 1 [0156.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64f68 [0156.943] wcscpy (in: _Dest=0x7a64f68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.943] wcscat (in: _Dest=0x7a64f68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.943] wcscat (in: _Dest=0x7a64f68, _Source="BD18238_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" [0156.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0156.944] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3d4900, ftCreationTime.dwHighDateTime=0x1bddd0f, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6e3d4900, ftLastWriteTime.dwHighDateTime=0x1bddd0f, nFileSizeHigh=0x0, nFileSizeLow=0x93c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18239_.WMF", cAlternateFileName="")) returned 1 [0156.944] wcscmp (_String1="BD18239_.WMF", _String2=".") returned 1 [0156.944] wcscmp (_String1="BD18239_.WMF", _String2="..") returned 1 [0156.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a65098 [0156.944] wcscpy (in: _Dest=0x7a65098, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0156.945] wcscat (in: _Dest=0x7a65098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0156.945] wcscat (in: _Dest=0x7a65098, _Source="BD18239_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" [0156.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0157.404] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37653400, ftCreationTime.dwHighDateTime=0x1bddd0b, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37653400, ftLastWriteTime.dwHighDateTime=0x1bddd0b, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18241_.WMF", cAlternateFileName="")) returned 1 [0157.404] wcscmp (_String1="BD18241_.WMF", _String2=".") returned 1 [0157.405] wcscmp (_String1="BD18241_.WMF", _String2="..") returned 1 [0157.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0157.405] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0157.405] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0157.405] wcscat (in: _Dest=0x32d700, _Source="BD18241_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" [0164.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf")) returned 0x20 [0164.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF", dwFileAttributes=0x20) returned 0 [0164.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.559] GetLastError () returned 0x5 [0164.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF", dwFileAttributes=0x20) returned 0 [0164.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.559] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff779600, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xff779600, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18242_.WMF", cAlternateFileName="")) returned 1 [0164.559] wcscmp (_String1="BD18242_.WMF", _String2=".") returned 1 [0164.559] wcscmp (_String1="BD18242_.WMF", _String2="..") returned 1 [0164.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.560] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.560] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.560] wcscat (in: _Dest=0x32d700, _Source="BD18242_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" [0164.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf")) returned 0x20 [0164.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF", dwFileAttributes=0x20) returned 0 [0164.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.560] GetLastError () returned 0x5 [0164.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF", dwFileAttributes=0x20) returned 0 [0164.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.561] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ecc000, ftCreationTime.dwHighDateTime=0x1bdcf82, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x14ecc000, ftLastWriteTime.dwHighDateTime=0x1bdcf82, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18243_.WMF", cAlternateFileName="")) returned 1 [0164.561] wcscmp (_String1="BD18243_.WMF", _String2=".") returned 1 [0164.561] wcscmp (_String1="BD18243_.WMF", _String2="..") returned 1 [0164.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.561] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.561] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.561] wcscat (in: _Dest=0x32d700, _Source="BD18243_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" [0164.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf")) returned 0x20 [0164.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF", dwFileAttributes=0x20) returned 0 [0164.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.562] GetLastError () returned 0x5 [0164.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF", dwFileAttributes=0x20) returned 0 [0164.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.562] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb249f300, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb249f300, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18244_.WMF", cAlternateFileName="")) returned 1 [0164.562] wcscmp (_String1="BD18244_.WMF", _String2=".") returned 1 [0164.562] wcscmp (_String1="BD18244_.WMF", _String2="..") returned 1 [0164.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.562] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.562] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.562] wcscat (in: _Dest=0x32d700, _Source="BD18244_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" [0164.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf")) returned 0x20 [0164.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF", dwFileAttributes=0x20) returned 0 [0164.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.567] GetLastError () returned 0x5 [0164.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF", dwFileAttributes=0x20) returned 0 [0164.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.567] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55cc300, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd74d870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc55cc300, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18245_.WMF", cAlternateFileName="")) returned 1 [0164.567] wcscmp (_String1="BD18245_.WMF", _String2=".") returned 1 [0164.567] wcscmp (_String1="BD18245_.WMF", _String2="..") returned 1 [0164.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.567] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.567] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.568] wcscat (in: _Dest=0x32d700, _Source="BD18245_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" [0164.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf")) returned 0x20 [0164.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF", dwFileAttributes=0x20) returned 0 [0164.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.568] GetLastError () returned 0x5 [0164.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF", dwFileAttributes=0x20) returned 0 [0164.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.569] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6184cb00, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6184cb00, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18246_.WMF", cAlternateFileName="")) returned 1 [0164.569] wcscmp (_String1="BD18246_.WMF", _String2=".") returned 1 [0164.569] wcscmp (_String1="BD18246_.WMF", _String2="..") returned 1 [0164.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.569] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.569] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.569] wcscat (in: _Dest=0x32d700, _Source="BD18246_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" [0164.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf")) returned 0x20 [0164.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF", dwFileAttributes=0x20) returned 0 [0164.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.570] GetLastError () returned 0x5 [0164.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF", dwFileAttributes=0x20) returned 0 [0164.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.570] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f585c00, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4f585c00, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18247_.WMF", cAlternateFileName="")) returned 1 [0164.570] wcscmp (_String1="BD18247_.WMF", _String2=".") returned 1 [0164.570] wcscmp (_String1="BD18247_.WMF", _String2="..") returned 1 [0164.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.571] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.571] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.571] wcscat (in: _Dest=0x32d700, _Source="BD18247_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" [0164.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf")) returned 0x20 [0164.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF", dwFileAttributes=0x20) returned 0 [0164.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.571] GetLastError () returned 0x5 [0164.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF", dwFileAttributes=0x20) returned 0 [0164.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.572] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x626b2c00, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x626b2c00, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18248_.WMF", cAlternateFileName="")) returned 1 [0164.572] wcscmp (_String1="BD18248_.WMF", _String2=".") returned 1 [0164.572] wcscmp (_String1="BD18248_.WMF", _String2="..") returned 1 [0164.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.572] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.572] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.572] wcscat (in: _Dest=0x32d700, _Source="BD18248_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" [0164.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf")) returned 0x20 [0164.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF", dwFileAttributes=0x20) returned 0 [0164.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.603] GetLastError () returned 0x5 [0164.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF", dwFileAttributes=0x20) returned 0 [0164.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.603] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0642300, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0642300, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18249_.WMF", cAlternateFileName="")) returned 1 [0164.603] wcscmp (_String1="BD18249_.WMF", _String2=".") returned 1 [0164.603] wcscmp (_String1="BD18249_.WMF", _String2="..") returned 1 [0164.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.604] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.604] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.604] wcscat (in: _Dest=0x32d700, _Source="BD18249_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" [0164.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf")) returned 0x20 [0164.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF", dwFileAttributes=0x20) returned 0 [0164.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.604] GetLastError () returned 0x5 [0164.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF", dwFileAttributes=0x20) returned 0 [0164.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.605] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744ccf00, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x744ccf00, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18250_.WMF", cAlternateFileName="")) returned 1 [0164.605] wcscmp (_String1="BD18250_.WMF", _String2=".") returned 1 [0164.605] wcscmp (_String1="BD18250_.WMF", _String2="..") returned 1 [0164.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.605] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.605] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.605] wcscat (in: _Dest=0x32d700, _Source="BD18250_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" [0164.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf")) returned 0x20 [0164.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF", dwFileAttributes=0x20) returned 0 [0164.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.606] GetLastError () returned 0x5 [0164.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF", dwFileAttributes=0x20) returned 0 [0164.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.606] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84fd4500, ftCreationTime.dwHighDateTime=0x1bdcf86, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x84fd4500, ftLastWriteTime.dwHighDateTime=0x1bdcf86, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18251_.WMF", cAlternateFileName="")) returned 1 [0164.606] wcscmp (_String1="BD18251_.WMF", _String2=".") returned 1 [0164.606] wcscmp (_String1="BD18251_.WMF", _String2="..") returned 1 [0164.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.606] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.606] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.606] wcscat (in: _Dest=0x32d700, _Source="BD18251_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" [0164.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf")) returned 0x20 [0164.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF", dwFileAttributes=0x20) returned 0 [0164.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.607] GetLastError () returned 0x5 [0164.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF", dwFileAttributes=0x20) returned 0 [0164.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.607] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e210300, ftCreationTime.dwHighDateTime=0x1bdcf83, ftLastAccessTime.dwLowDateTime=0xbd7739d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7e210300, ftLastWriteTime.dwHighDateTime=0x1bdcf83, nFileSizeHigh=0x0, nFileSizeLow=0x756, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18252_.WMF", cAlternateFileName="")) returned 1 [0164.607] wcscmp (_String1="BD18252_.WMF", _String2=".") returned 1 [0164.608] wcscmp (_String1="BD18252_.WMF", _String2="..") returned 1 [0164.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.608] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.608] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.608] wcscat (in: _Dest=0x32d700, _Source="BD18252_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" [0164.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf")) returned 0x20 [0164.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF", dwFileAttributes=0x20) returned 0 [0164.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.629] GetLastError () returned 0x5 [0164.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF", dwFileAttributes=0x20) returned 0 [0164.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.629] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0b51b00, ftCreationTime.dwHighDateTime=0x1bdcf87, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa0b51b00, ftLastWriteTime.dwHighDateTime=0x1bdcf87, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18253_.WMF", cAlternateFileName="")) returned 1 [0164.629] wcscmp (_String1="BD18253_.WMF", _String2=".") returned 1 [0164.629] wcscmp (_String1="BD18253_.WMF", _String2="..") returned 1 [0164.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.629] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.629] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.630] wcscat (in: _Dest=0x32d700, _Source="BD18253_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" [0164.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf")) returned 0x20 [0164.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF", dwFileAttributes=0x20) returned 0 [0164.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.630] GetLastError () returned 0x5 [0164.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF", dwFileAttributes=0x20) returned 0 [0164.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.631] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ff2100, ftCreationTime.dwHighDateTime=0x1bddd0f, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb0ff2100, ftLastWriteTime.dwHighDateTime=0x1bddd0f, nFileSizeHigh=0x0, nFileSizeLow=0x796, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18254_.WMF", cAlternateFileName="")) returned 1 [0164.631] wcscmp (_String1="BD18254_.WMF", _String2=".") returned 1 [0164.631] wcscmp (_String1="BD18254_.WMF", _String2="..") returned 1 [0164.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.631] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.631] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.631] wcscat (in: _Dest=0x32d700, _Source="BD18254_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" [0164.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf")) returned 0x20 [0164.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF", dwFileAttributes=0x20) returned 0 [0164.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.632] GetLastError () returned 0x5 [0164.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF", dwFileAttributes=0x20) returned 0 [0164.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.632] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb339900, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb339900, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18255_.WMF", cAlternateFileName="")) returned 1 [0164.632] wcscmp (_String1="BD18255_.WMF", _String2=".") returned 1 [0164.632] wcscmp (_String1="BD18255_.WMF", _String2="..") returned 1 [0164.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.632] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.633] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.633] wcscat (in: _Dest=0x32d700, _Source="BD18255_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" [0164.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf")) returned 0x20 [0164.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF", dwFileAttributes=0x20) returned 0 [0164.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.663] GetLastError () returned 0x5 [0164.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF", dwFileAttributes=0x20) returned 0 [0164.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.664] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd6f700, ftCreationTime.dwHighDateTime=0x1bdcf81, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cd6f700, ftLastWriteTime.dwHighDateTime=0x1bdcf81, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18256_.WMF", cAlternateFileName="")) returned 1 [0164.664] wcscmp (_String1="BD18256_.WMF", _String2=".") returned 1 [0164.664] wcscmp (_String1="BD18256_.WMF", _String2="..") returned 1 [0164.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.664] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.664] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.664] wcscat (in: _Dest=0x32d700, _Source="BD18256_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" [0164.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf")) returned 0x20 [0164.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF", dwFileAttributes=0x20) returned 0 [0164.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.689] GetLastError () returned 0x5 [0164.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF", dwFileAttributes=0x20) returned 0 [0164.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.689] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d700900, ftCreationTime.dwHighDateTime=0x1bdfeb0, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d700900, ftLastWriteTime.dwHighDateTime=0x1bdfeb0, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 1 [0164.689] wcscmp (_String1="BD18257_.WMF", _String2=".") returned 1 [0164.689] wcscmp (_String1="BD18257_.WMF", _String2="..") returned 1 [0164.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d700 [0164.689] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP" [0164.689] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\" [0164.689] wcscat (in: _Dest=0x32d700, _Source="BD18257_.WMF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" [0164.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf")) returned 0x20 [0164.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF", dwFileAttributes=0x20) returned 0 [0164.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.690] GetLastError () returned 0x5 [0164.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF", dwFileAttributes=0x20) returned 0 [0164.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 [0164.690] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d700900, ftCreationTime.dwHighDateTime=0x1bdfeb0, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d700900, ftLastWriteTime.dwHighDateTime=0x1bdfeb0, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD18257_.WMF", cAlternateFileName="")) returned 0 [0164.690] FindClose (in: hFindFile=0x7ad7d30 | out: hFindFile=0x7ad7d30) returned 1 [0164.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1ce0) returned 1 [0164.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19318) returned 1 [0164.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4af0) returned 1 Thread: id = 1496 os_tid = 0x1f00 [0140.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3efa220 [0140.162] wcscpy (in: _Dest=0x3efa220, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0140.162] wcscat (in: _Dest=0x3efa220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0140.162] wcscat (in: _Dest=0x3efa220, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*" [0140.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2db8 [0140.163] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e740b0 [0145.497] wcscmp (_String1=".", _String2=".") returned 0 [0145.497] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.241] wcscmp (_String1="..", _String2=".") returned 1 [0146.241] wcscmp (_String1="..", _String2="..") returned 0 [0146.241] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e616400, ftCreationTime.dwHighDateTime=0x1bd5e49, ftLastAccessTime.dwLowDateTime=0xbd3231f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e616400, ftLastWriteTime.dwHighDateTime=0x1bd5e49, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10253_.GIF", cAlternateFileName="")) returned 1 [0146.241] wcscmp (_String1="BD10253_.GIF", _String2=".") returned 1 [0146.241] wcscmp (_String1="BD10253_.GIF", _String2="..") returned 1 [0146.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ca88 [0146.241] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0146.241] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0146.241] wcscat (in: _Dest=0x32ca88, _Source="BD10253_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" [0150.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf80 [0150.041] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3211400, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd3231f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3211400, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10254_.GIF", cAlternateFileName="")) returned 1 [0150.042] wcscmp (_String1="BD10254_.GIF", _String2=".") returned 1 [0150.042] wcscmp (_String1="BD10254_.GIF", _String2="..") returned 1 [0150.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5738 [0150.042] wcscpy (in: _Dest=0x7ad5738, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.042] wcscat (in: _Dest=0x7ad5738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.042] wcscat (in: _Dest=0x7ad5738, _Source="BD10254_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" [0150.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00 [0150.043] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4524100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4524100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10255_.GIF", cAlternateFileName="")) returned 1 [0150.043] wcscmp (_String1="BD10255_.GIF", _String2=".") returned 1 [0150.043] wcscmp (_String1="BD10255_.GIF", _String2="..") returned 1 [0150.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5278 [0150.043] wcscpy (in: _Dest=0x7ad5278, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.043] wcscat (in: _Dest=0x7ad5278, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.043] wcscat (in: _Dest=0x7ad5278, _Source="BD10255_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" [0150.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04 [0150.045] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76406b00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76406b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10263_.GIF", cAlternateFileName="")) returned 1 [0150.045] wcscmp (_String1="BD10263_.GIF", _String2=".") returned 1 [0150.045] wcscmp (_String1="BD10263_.GIF", _String2="..") returned 1 [0150.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad53a8 [0150.045] wcscpy (in: _Dest=0x7ad53a8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.045] wcscat (in: _Dest=0x7ad53a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.045] wcscat (in: _Dest=0x7ad53a8, _Source="BD10263_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" [0150.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad53a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0150.046] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76406b00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76406b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10264_.GIF", cAlternateFileName="")) returned 1 [0150.046] wcscmp (_String1="BD10264_.GIF", _String2=".") returned 1 [0150.046] wcscmp (_String1="BD10264_.GIF", _String2="..") returned 1 [0150.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6318 [0150.047] wcscpy (in: _Dest=0x7ad6318, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.047] wcscat (in: _Dest=0x7ad6318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.047] wcscat (in: _Dest=0x7ad6318, _Source="BD10264_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" [0150.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c [0150.048] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76406b00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76406b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10265_.GIF", cAlternateFileName="")) returned 1 [0150.048] wcscmp (_String1="BD10265_.GIF", _String2=".") returned 1 [0150.048] wcscmp (_String1="BD10265_.GIF", _String2="..") returned 1 [0150.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad69a0 [0150.048] wcscpy (in: _Dest=0x7ad69a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.048] wcscat (in: _Dest=0x7ad69a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.048] wcscat (in: _Dest=0x7ad69a0, _Source="BD10265_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" [0150.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad69a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10 [0150.050] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77719800, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77719800, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10266_.GIF", cAlternateFileName="")) returned 1 [0150.050] wcscmp (_String1="BD10266_.GIF", _String2=".") returned 1 [0150.050] wcscmp (_String1="BD10266_.GIF", _String2="..") returned 1 [0150.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5a30 [0150.050] wcscpy (in: _Dest=0x7ad5a30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.050] wcscat (in: _Dest=0x7ad5a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.050] wcscat (in: _Dest=0x7ad5a30, _Source="BD10266_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" [0150.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x243c [0150.052] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77719800, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77719800, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x137, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10267_.GIF", cAlternateFileName="")) returned 1 [0150.052] wcscmp (_String1="BD10267_.GIF", _String2=".") returned 1 [0150.052] wcscmp (_String1="BD10267_.GIF", _String2="..") returned 1 [0150.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad61e8 [0150.052] wcscpy (in: _Dest=0x7ad61e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.052] wcscat (in: _Dest=0x7ad61e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.052] wcscat (in: _Dest=0x7ad61e8, _Source="BD10267_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" [0150.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad61e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2434 [0150.053] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77719800, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77719800, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10268_.GIF", cAlternateFileName="")) returned 1 [0150.053] wcscmp (_String1="BD10268_.GIF", _String2=".") returned 1 [0150.053] wcscmp (_String1="BD10268_.GIF", _String2="..") returned 1 [0150.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6280 [0150.053] wcscpy (in: _Dest=0x7ad6280, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.053] wcscat (in: _Dest=0x7ad6280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.053] wcscat (in: _Dest=0x7ad6280, _Source="BD10268_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" [0150.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0150.055] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59a4e00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59a4e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10297_.GIF", cAlternateFileName="")) returned 1 [0150.055] wcscmp (_String1="BD10297_.GIF", _String2=".") returned 1 [0150.055] wcscmp (_String1="BD10297_.GIF", _String2="..") returned 1 [0150.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5900 [0150.055] wcscpy (in: _Dest=0x7ad5900, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.055] wcscat (in: _Dest=0x7ad5900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.055] wcscat (in: _Dest=0x7ad5900, _Source="BD10297_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" [0150.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2430 [0150.057] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59a4e00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59a4e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10298_.GIF", cAlternateFileName="")) returned 1 [0150.057] wcscmp (_String1="BD10298_.GIF", _String2=".") returned 1 [0150.057] wcscmp (_String1="BD10298_.GIF", _String2="..") returned 1 [0150.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6150 [0150.057] wcscpy (in: _Dest=0x7ad6150, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.057] wcscat (in: _Dest=0x7ad6150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.057] wcscat (in: _Dest=0x7ad6150, _Source="BD10298_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" [0150.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x242c [0150.059] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb7b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cb7b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10299_.GIF", cAlternateFileName="")) returned 1 [0150.059] wcscmp (_String1="BD10299_.GIF", _String2=".") returned 1 [0150.059] wcscmp (_String1="BD10299_.GIF", _String2="..") returned 1 [0150.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5c90 [0150.059] wcscpy (in: _Dest=0x7ad5c90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.059] wcscat (in: _Dest=0x7ad5c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.059] wcscat (in: _Dest=0x7ad5c90, _Source="BD10299_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" [0150.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2414 [0150.060] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb7b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cb7b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10300_.GIF", cAlternateFileName="")) returned 1 [0150.060] wcscmp (_String1="BD10300_.GIF", _String2=".") returned 1 [0150.060] wcscmp (_String1="BD10300_.GIF", _String2="..") returned 1 [0150.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad50b0 [0150.060] wcscpy (in: _Dest=0x7ad50b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.060] wcscat (in: _Dest=0x7ad50b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.060] wcscat (in: _Dest=0x7ad50b0, _Source="BD10300_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" [0150.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c [0150.062] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cb7b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6cb7b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10301_.GIF", cAlternateFileName="")) returned 1 [0150.062] wcscmp (_String1="BD10301_.GIF", _String2=".") returned 1 [0150.062] wcscmp (_String1="BD10301_.GIF", _String2="..") returned 1 [0150.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5ef0 [0150.062] wcscpy (in: _Dest=0x7ad5ef0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.062] wcscat (in: _Dest=0x7ad5ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.062] wcscat (in: _Dest=0x7ad5ef0, _Source="BD10301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" [0150.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20 [0150.064] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fca800, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7fca800, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10302_.GIF", cAlternateFileName="")) returned 1 [0150.064] wcscmp (_String1="BD10302_.GIF", _String2=".") returned 1 [0150.064] wcscmp (_String1="BD10302_.GIF", _String2="..") returned 1 [0150.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6ad0 [0150.064] wcscpy (in: _Dest=0x7ad6ad0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.064] wcscat (in: _Dest=0x7ad6ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.064] wcscat (in: _Dest=0x7ad6ad0, _Source="BD10302_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" [0150.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24 [0150.065] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5836e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5836e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10335_.GIF", cAlternateFileName="")) returned 1 [0150.065] wcscmp (_String1="BD10335_.GIF", _String2=".") returned 1 [0150.065] wcscmp (_String1="BD10335_.GIF", _String2="..") returned 1 [0150.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5f88 [0150.066] wcscpy (in: _Dest=0x7ad5f88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.066] wcscat (in: _Dest=0x7ad5f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.066] wcscat (in: _Dest=0x7ad5f88, _Source="BD10335_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" [0150.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2404 [0150.067] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5836e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5836e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10336_.GIF", cAlternateFileName="")) returned 1 [0150.067] wcscmp (_String1="BD10336_.GIF", _String2=".") returned 1 [0150.067] wcscmp (_String1="BD10336_.GIF", _String2="..") returned 1 [0150.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad60b8 [0150.067] wcscpy (in: _Dest=0x7ad60b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.067] wcscat (in: _Dest=0x7ad60b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.067] wcscat (in: _Dest=0x7ad60b8, _Source="BD10336_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" [0150.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad60b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28 [0150.069] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5836e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5836e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10337_.GIF", cAlternateFileName="")) returned 1 [0150.069] wcscmp (_String1="BD10337_.GIF", _String2=".") returned 1 [0150.069] wcscmp (_String1="BD10337_.GIF", _String2="..") returned 1 [0150.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6908 [0150.069] wcscpy (in: _Dest=0x7ad6908, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.069] wcscat (in: _Dest=0x7ad6908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.069] wcscat (in: _Dest=0x7ad6908, _Source="BD10337_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" [0150.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c [0150.071] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d20da00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d20da00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14513_.GIF", cAlternateFileName="")) returned 1 [0150.071] wcscmp (_String1="BD14513_.GIF", _String2=".") returned 1 [0150.071] wcscmp (_String1="BD14513_.GIF", _String2="..") returned 1 [0150.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6870 [0150.071] wcscpy (in: _Dest=0x7ad6870, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.071] wcscat (in: _Dest=0x7ad6870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.071] wcscat (in: _Dest=0x7ad6870, _Source="BD14513_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" [0150.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30 [0150.073] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e520700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e520700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14514_.GIF", cAlternateFileName="")) returned 1 [0150.073] wcscmp (_String1="BD14514_.GIF", _String2=".") returned 1 [0150.073] wcscmp (_String1="BD14514_.GIF", _String2="..") returned 1 [0150.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad67d8 [0150.073] wcscpy (in: _Dest=0x7ad67d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.073] wcscat (in: _Dest=0x7ad67d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.073] wcscat (in: _Dest=0x7ad67d8, _Source="BD14514_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" [0150.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad67d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b5c [0150.075] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e520700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e520700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14515_.GIF", cAlternateFileName="")) returned 1 [0150.075] wcscmp (_String1="BD14515_.GIF", _String2=".") returned 1 [0150.075] wcscmp (_String1="BD14515_.GIF", _String2="..") returned 1 [0150.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6740 [0150.075] wcscpy (in: _Dest=0x7ad6740, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.076] wcscat (in: _Dest=0x7ad6740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.076] wcscat (in: _Dest=0x7ad6740, _Source="BD14515_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" [0150.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4 [0150.660] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658ff500, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x658ff500, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14528_.GIF", cAlternateFileName="")) returned 1 [0150.660] wcscmp (_String1="BD14528_.GIF", _String2=".") returned 1 [0150.660] wcscmp (_String1="BD14528_.GIF", _String2="..") returned 1 [0150.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64d08 [0150.660] wcscpy (in: _Dest=0x7a64d08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0150.660] wcscat (in: _Dest=0x7a64d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0150.661] wcscat (in: _Dest=0x7a64d08, _Source="BD14528_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" [0153.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x157c [0153.317] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c12200, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x66c12200, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14529_.GIF", cAlternateFileName="")) returned 1 [0153.317] wcscmp (_String1="BD14529_.GIF", _String2=".") returned 1 [0153.317] wcscmp (_String1="BD14529_.GIF", _String2="..") returned 1 [0153.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5ee8 [0153.317] wcscpy (in: _Dest=0x3eb5ee8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.317] wcscat (in: _Dest=0x3eb5ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.318] wcscat (in: _Dest=0x3eb5ee8, _Source="BD14529_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" [0153.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ec [0153.319] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66c12200, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x66c12200, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14530_.GIF", cAlternateFileName="")) returned 1 [0153.319] wcscmp (_String1="BD14530_.GIF", _String2=".") returned 1 [0153.319] wcscmp (_String1="BD14530_.GIF", _String2="..") returned 1 [0153.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb64d8 [0153.319] wcscpy (in: _Dest=0x3eb64d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.319] wcscat (in: _Dest=0x3eb64d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.320] wcscat (in: _Dest=0x3eb64d8, _Source="BD14530_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" [0153.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb64d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90 [0153.321] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f24f00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67f24f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14531_.GIF", cAlternateFileName="")) returned 1 [0153.321] wcscmp (_String1="BD14531_.GIF", _String2=".") returned 1 [0153.321] wcscmp (_String1="BD14531_.GIF", _String2="..") returned 1 [0153.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5990 [0153.322] wcscpy (in: _Dest=0x3eb5990, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.322] wcscat (in: _Dest=0x3eb5990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.322] wcscat (in: _Dest=0x3eb5990, _Source="BD14531_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" [0153.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94 [0153.323] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f24f00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67f24f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14532_.GIF", cAlternateFileName="")) returned 1 [0153.323] wcscmp (_String1="BD14532_.GIF", _String2=".") returned 1 [0153.323] wcscmp (_String1="BD14532_.GIF", _String2="..") returned 1 [0153.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5e50 [0153.324] wcscpy (in: _Dest=0x3eb5e50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.324] wcscat (in: _Dest=0x3eb5e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.324] wcscat (in: _Dest=0x3eb5e50, _Source="BD14532_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" [0153.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0153.326] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f24f00, ftCreationTime.dwHighDateTime=0x1bd8ff3, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67f24f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff3, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14533_.GIF", cAlternateFileName="")) returned 1 [0153.326] wcscmp (_String1="BD14533_.GIF", _String2=".") returned 1 [0153.326] wcscmp (_String1="BD14533_.GIF", _String2="..") returned 1 [0153.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb70b8 [0153.326] wcscpy (in: _Dest=0x3eb70b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.326] wcscat (in: _Dest=0x3eb70b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.326] wcscat (in: _Dest=0x3eb70b8, _Source="BD14533_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" [0153.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb70b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0153.328] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b05100, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x53b05100, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14565_.GIF", cAlternateFileName="")) returned 1 [0153.328] wcscmp (_String1="BD14565_.GIF", _String2=".") returned 1 [0153.328] wcscmp (_String1="BD14565_.GIF", _String2="..") returned 1 [0153.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5698 [0153.328] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.328] wcscat (in: _Dest=0x3eb5698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.328] wcscat (in: _Dest=0x3eb5698, _Source="BD14565_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" [0153.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0153.330] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13e86a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13e86a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14578_.GIF", cAlternateFileName="")) returned 1 [0153.330] wcscmp (_String1="BD14578_.GIF", _String2=".") returned 1 [0153.330] wcscmp (_String1="BD14578_.GIF", _String2="..") returned 1 [0153.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5f80 [0153.330] wcscpy (in: _Dest=0x3eb5f80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.330] wcscat (in: _Dest=0x3eb5f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.330] wcscat (in: _Dest=0x3eb5f80, _Source="BD14578_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" [0153.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0153.332] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13e86a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13e86a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14579_.GIF", cAlternateFileName="")) returned 1 [0153.332] wcscmp (_String1="BD14579_.GIF", _String2=".") returned 1 [0153.332] wcscmp (_String1="BD14579_.GIF", _String2="..") returned 1 [0153.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6f88 [0153.332] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.332] wcscat (in: _Dest=0x3eb6f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.332] wcscat (in: _Dest=0x3eb6f88, _Source="BD14579_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" [0153.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0153.334] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15199700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15199700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14580_.GIF", cAlternateFileName="")) returned 1 [0153.334] wcscmp (_String1="BD14580_.GIF", _String2=".") returned 1 [0153.334] wcscmp (_String1="BD14580_.GIF", _String2="..") returned 1 [0153.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7448 [0153.334] wcscpy (in: _Dest=0x3eb7448, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.334] wcscat (in: _Dest=0x3eb7448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.334] wcscat (in: _Dest=0x3eb7448, _Source="BD14580_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" [0153.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0153.336] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15199700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15199700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14581_.GIF", cAlternateFileName="")) returned 1 [0153.336] wcscmp (_String1="BD14581_.GIF", _String2=".") returned 1 [0153.336] wcscmp (_String1="BD14581_.GIF", _String2="..") returned 1 [0153.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5bf0 [0153.336] wcscpy (in: _Dest=0x3eb5bf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.336] wcscat (in: _Dest=0x3eb5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.336] wcscat (in: _Dest=0x3eb5bf0, _Source="BD14581_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" [0153.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0153.338] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15199700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15199700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14582_.GIF", cAlternateFileName="")) returned 1 [0153.338] wcscmp (_String1="BD14582_.GIF", _String2=".") returned 1 [0153.338] wcscmp (_String1="BD14582_.GIF", _String2="..") returned 1 [0153.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5db8 [0153.338] wcscpy (in: _Dest=0x3eb5db8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.338] wcscat (in: _Dest=0x3eb5db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.338] wcscat (in: _Dest=0x3eb5db8, _Source="BD14582_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" [0153.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0153.339] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164ac400, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x164ac400, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14583_.GIF", cAlternateFileName="")) returned 1 [0153.870] wcscmp (_String1="BD14583_.GIF", _String2=".") returned 1 [0153.870] wcscmp (_String1="BD14583_.GIF", _String2="..") returned 1 [0153.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb60b0 [0153.870] wcscpy (in: _Dest=0x3eb60b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0153.870] wcscat (in: _Dest=0x3eb60b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0153.871] wcscat (in: _Dest=0x3eb60b0, _Source="BD14583_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" [0165.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif")) returned 0x20 [0165.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF", dwFileAttributes=0x20) returned 0 [0165.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.215] GetLastError () returned 0x5 [0165.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF", dwFileAttributes=0x20) returned 0 [0165.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 [0165.216] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49da1e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49da1e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14654_.GIF", cAlternateFileName="")) returned 1 [0165.216] wcscmp (_String1="BD14654_.GIF", _String2=".") returned 1 [0165.216] wcscmp (_String1="BD14654_.GIF", _String2="..") returned 1 [0165.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb60b0 [0165.216] wcscpy (in: _Dest=0x3eb60b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0165.216] wcscat (in: _Dest=0x3eb60b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0165.216] wcscat (in: _Dest=0x3eb60b0, _Source="BD14654_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" [0166.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb60b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0166.233] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49da1e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x49da1e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14655_.GIF", cAlternateFileName="")) returned 1 [0166.233] wcscmp (_String1="BD14655_.GIF", _String2=".") returned 1 [0166.233] wcscmp (_String1="BD14655_.GIF", _String2="..") returned 1 [0166.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65428 [0166.233] wcscpy (in: _Dest=0x7a65428, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.233] wcscat (in: _Dest=0x7a65428, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.234] wcscat (in: _Dest=0x7a65428, _Source="BD14655_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" [0166.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0166.234] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b4b00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b0b4b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14656_.GIF", cAlternateFileName="")) returned 1 [0166.234] wcscmp (_String1="BD14656_.GIF", _String2=".") returned 1 [0166.235] wcscmp (_String1="BD14656_.GIF", _String2="..") returned 1 [0166.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65260 [0166.235] wcscpy (in: _Dest=0x7a65260, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.235] wcscat (in: _Dest=0x7a65260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.235] wcscat (in: _Dest=0x7a65260, _Source="BD14656_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" [0166.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0166.236] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59596700, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59596700, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14691_.GIF", cAlternateFileName="")) returned 1 [0166.236] wcscmp (_String1="BD14691_.GIF", _String2=".") returned 1 [0166.236] wcscmp (_String1="BD14691_.GIF", _String2="..") returned 1 [0166.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65390 [0166.236] wcscpy (in: _Dest=0x7a65390, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.236] wcscat (in: _Dest=0x7a65390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.236] wcscat (in: _Dest=0x7a65390, _Source="BD14691_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" [0166.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0166.237] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59596700, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59596700, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14692_.GIF", cAlternateFileName="")) returned 1 [0166.237] wcscmp (_String1="BD14692_.GIF", _String2=".") returned 1 [0166.237] wcscmp (_String1="BD14692_.GIF", _String2="..") returned 1 [0166.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64b40 [0166.237] wcscpy (in: _Dest=0x7a64b40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.237] wcscat (in: _Dest=0x7a64b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.237] wcscat (in: _Dest=0x7a64b40, _Source="BD14692_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" [0166.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0166.238] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8a9400, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd453cf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5a8a9400, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14693_.GIF", cAlternateFileName="")) returned 1 [0166.238] wcscmp (_String1="BD14693_.GIF", _String2=".") returned 1 [0166.238] wcscmp (_String1="BD14693_.GIF", _String2="..") returned 1 [0166.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64f68 [0166.238] wcscpy (in: _Dest=0x7a64f68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.238] wcscat (in: _Dest=0x7a64f68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.238] wcscat (in: _Dest=0x7a64f68, _Source="BD14693_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" [0166.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0166.239] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e16100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81e16100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14752_.GIF", cAlternateFileName="")) returned 1 [0166.239] wcscmp (_String1="BD14752_.GIF", _String2=".") returned 1 [0166.239] wcscmp (_String1="BD14752_.GIF", _String2="..") returned 1 [0166.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a654c0 [0166.239] wcscpy (in: _Dest=0x7a654c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.239] wcscat (in: _Dest=0x7a654c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.239] wcscat (in: _Dest=0x7a654c0, _Source="BD14752_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" [0166.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a654c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04 [0166.240] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e16100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81e16100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14753_.GIF", cAlternateFileName="")) returned 1 [0166.240] wcscmp (_String1="BD14753_.GIF", _String2=".") returned 1 [0166.240] wcscmp (_String1="BD14753_.GIF", _String2="..") returned 1 [0166.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a655f0 [0166.241] wcscpy (in: _Dest=0x7a655f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.241] wcscat (in: _Dest=0x7a655f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.241] wcscat (in: _Dest=0x7a655f0, _Source="BD14753_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" [0166.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a655f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0166.242] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e16100, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x81e16100, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14754_.GIF", cAlternateFileName="")) returned 1 [0166.242] wcscmp (_String1="BD14754_.GIF", _String2=".") returned 1 [0166.242] wcscmp (_String1="BD14754_.GIF", _String2="..") returned 1 [0166.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64258 [0166.242] wcscpy (in: _Dest=0x7a64258, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.242] wcscat (in: _Dest=0x7a64258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.242] wcscat (in: _Dest=0x7a64258, _Source="BD14754_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" [0166.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0166.243] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc507d700, ftCreationTime.dwHighDateTime=0x1bd4fa7, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc507d700, ftLastWriteTime.dwHighDateTime=0x1bd4fa7, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14755_.GIF", cAlternateFileName="")) returned 1 [0166.243] wcscmp (_String1="BD14755_.GIF", _String2=".") returned 1 [0166.243] wcscmp (_String1="BD14755_.GIF", _String2="..") returned 1 [0166.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a641c0 [0166.243] wcscpy (in: _Dest=0x7a641c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.243] wcscat (in: _Dest=0x7a641c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.243] wcscat (in: _Dest=0x7a641c0, _Source="BD14755_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" [0166.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a641c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0166.244] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83128e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x83128e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14756_.GIF", cAlternateFileName="")) returned 1 [0166.244] wcscmp (_String1="BD14756_.GIF", _String2=".") returned 1 [0166.244] wcscmp (_String1="BD14756_.GIF", _String2="..") returned 1 [0166.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64128 [0166.244] wcscpy (in: _Dest=0x7a64128, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.245] wcscat (in: _Dest=0x7a64128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.245] wcscat (in: _Dest=0x7a64128, _Source="BD14756_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" [0166.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0166.245] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83128e00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x83128e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14757_.GIF", cAlternateFileName="")) returned 1 [0166.246] wcscmp (_String1="BD14757_.GIF", _String2=".") returned 1 [0166.246] wcscmp (_String1="BD14757_.GIF", _String2="..") returned 1 [0166.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64090 [0166.246] wcscpy (in: _Dest=0x7a64090, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.246] wcscat (in: _Dest=0x7a64090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.246] wcscat (in: _Dest=0x7a64090, _Source="BD14757_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" [0166.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc [0166.247] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902f7d00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x902f7d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14790_.GIF", cAlternateFileName="")) returned 1 [0166.247] wcscmp (_String1="BD14790_.GIF", _String2=".") returned 1 [0166.247] wcscmp (_String1="BD14790_.GIF", _String2="..") returned 1 [0166.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65000 [0166.247] wcscpy (in: _Dest=0x7a65000, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.247] wcscat (in: _Dest=0x7a65000, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.247] wcscat (in: _Dest=0x7a65000, _Source="BD14790_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" [0166.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0166.248] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902f7d00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x902f7d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14791_.GIF", cAlternateFileName="")) returned 1 [0166.248] wcscmp (_String1="BD14791_.GIF", _String2=".") returned 1 [0166.248] wcscmp (_String1="BD14791_.GIF", _String2="..") returned 1 [0166.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64848 [0166.248] wcscpy (in: _Dest=0x7a64848, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.248] wcscat (in: _Dest=0x7a64848, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.248] wcscat (in: _Dest=0x7a64848, _Source="BD14791_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" [0166.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0166.249] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902f7d00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x902f7d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14792_.GIF", cAlternateFileName="")) returned 1 [0166.249] wcscmp (_String1="BD14792_.GIF", _String2=".") returned 1 [0166.249] wcscmp (_String1="BD14792_.GIF", _String2="..") returned 1 [0166.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65130 [0166.250] wcscpy (in: _Dest=0x7a65130, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.250] wcscat (in: _Dest=0x7a65130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.250] wcscat (in: _Dest=0x7a65130, _Source="BD14792_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" [0166.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0166.251] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9160aa00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9160aa00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14793_.GIF", cAlternateFileName="")) returned 1 [0166.251] wcscmp (_String1="BD14793_.GIF", _String2=".") returned 1 [0166.251] wcscmp (_String1="BD14793_.GIF", _String2="..") returned 1 [0166.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65098 [0166.251] wcscpy (in: _Dest=0x7a65098, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.251] wcscat (in: _Dest=0x7a65098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.251] wcscat (in: _Dest=0x7a65098, _Source="BD14793_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" [0166.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0166.252] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9160aa00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9160aa00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14794_.GIF", cAlternateFileName="")) returned 1 [0166.252] wcscmp (_String1="BD14794_.GIF", _String2=".") returned 1 [0166.252] wcscmp (_String1="BD14794_.GIF", _String2="..") returned 1 [0166.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a652f8 [0166.252] wcscpy (in: _Dest=0x7a652f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.252] wcscat (in: _Dest=0x7a652f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.252] wcscat (in: _Dest=0x7a652f8, _Source="BD14794_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" [0166.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a652f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0166.254] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9160aa00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9160aa00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14795_.GIF", cAlternateFileName="")) returned 1 [0166.254] wcscmp (_String1="BD14795_.GIF", _String2=".") returned 1 [0166.254] wcscmp (_String1="BD14795_.GIF", _String2="..") returned 1 [0166.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65558 [0166.254] wcscpy (in: _Dest=0x7a65558, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.254] wcscat (in: _Dest=0x7a65558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.254] wcscat (in: _Dest=0x7a65558, _Source="BD14795_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" [0166.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0166.255] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e7d9900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e7d9900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14828_.GIF", cAlternateFileName="")) returned 1 [0166.255] wcscmp (_String1="BD14828_.GIF", _String2=".") returned 1 [0166.255] wcscmp (_String1="BD14828_.GIF", _String2="..") returned 1 [0166.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a651c8 [0166.255] wcscpy (in: _Dest=0x7a651c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.255] wcscat (in: _Dest=0x7a651c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.255] wcscat (in: _Dest=0x7a651c8, _Source="BD14828_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" [0166.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a651c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0166.258] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e7d9900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e7d9900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14829_.GIF", cAlternateFileName="")) returned 1 [0166.258] wcscmp (_String1="BD14829_.GIF", _String2=".") returned 1 [0166.258] wcscmp (_String1="BD14829_.GIF", _String2="..") returned 1 [0166.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64e38 [0166.258] wcscpy (in: _Dest=0x7a64e38, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.258] wcscat (in: _Dest=0x7a64e38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.258] wcscat (in: _Dest=0x7a64e38, _Source="BD14829_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" [0166.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64e38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0166.259] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14830_.GIF", cAlternateFileName="")) returned 1 [0166.260] wcscmp (_String1="BD14830_.GIF", _String2=".") returned 1 [0166.260] wcscmp (_String1="BD14830_.GIF", _String2="..") returned 1 [0166.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65980 [0166.260] wcscpy (in: _Dest=0x7a65980, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.260] wcscat (in: _Dest=0x7a65980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.260] wcscat (in: _Dest=0x7a65980, _Source="BD14830_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" [0166.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0166.261] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14831_.GIF", cAlternateFileName="")) returned 1 [0166.261] wcscmp (_String1="BD14831_.GIF", _String2=".") returned 1 [0166.261] wcscmp (_String1="BD14831_.GIF", _String2="..") returned 1 [0166.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64ed0 [0166.261] wcscpy (in: _Dest=0x7a64ed0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.261] wcscat (in: _Dest=0x7a64ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.261] wcscat (in: _Dest=0x7a64ed0, _Source="BD14831_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" [0166.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0166.262] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14832_.GIF", cAlternateFileName="")) returned 1 [0166.262] wcscmp (_String1="BD14832_.GIF", _String2=".") returned 1 [0166.262] wcscmp (_String1="BD14832_.GIF", _String2="..") returned 1 [0166.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a658e8 [0166.262] wcscpy (in: _Dest=0x7a658e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.262] wcscat (in: _Dest=0x7a658e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.262] wcscat (in: _Dest=0x7a658e8, _Source="BD14832_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" [0166.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a658e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0166.263] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faec600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9faec600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14833_.GIF", cAlternateFileName="")) returned 1 [0166.263] wcscmp (_String1="BD14833_.GIF", _String2=".") returned 1 [0166.263] wcscmp (_String1="BD14833_.GIF", _String2="..") returned 1 [0166.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64da0 [0166.264] wcscpy (in: _Dest=0x7a64da0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.264] wcscat (in: _Dest=0x7a64da0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.264] wcscat (in: _Dest=0x7a64da0, _Source="BD14833_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" [0166.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0166.265] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaccbb500, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaccbb500, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14866_.GIF", cAlternateFileName="")) returned 1 [0166.265] wcscmp (_String1="BD14866_.GIF", _String2=".") returned 1 [0166.265] wcscmp (_String1="BD14866_.GIF", _String2="..") returned 1 [0166.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a642f0 [0166.265] wcscpy (in: _Dest=0x7a642f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.265] wcscat (in: _Dest=0x7a642f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.265] wcscat (in: _Dest=0x7a642f0, _Source="BD14866_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" [0166.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a642f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0166.266] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfce200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xadfce200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14867_.GIF", cAlternateFileName="")) returned 1 [0166.266] wcscmp (_String1="BD14867_.GIF", _String2=".") returned 1 [0166.266] wcscmp (_String1="BD14867_.GIF", _String2="..") returned 1 [0166.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64d08 [0166.267] wcscpy (in: _Dest=0x7a64d08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.267] wcscat (in: _Dest=0x7a64d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.267] wcscat (in: _Dest=0x7a64d08, _Source="BD14867_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" [0166.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0166.268] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfce200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xadfce200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14868_.GIF", cAlternateFileName="")) returned 1 [0166.268] wcscmp (_String1="BD14868_.GIF", _String2=".") returned 1 [0166.268] wcscmp (_String1="BD14868_.GIF", _String2="..") returned 1 [0166.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65688 [0166.268] wcscpy (in: _Dest=0x7a65688, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.268] wcscat (in: _Dest=0x7a65688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.268] wcscat (in: _Dest=0x7a65688, _Source="BD14868_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" [0166.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0166.269] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfce200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xadfce200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14869_.GIF", cAlternateFileName="")) returned 1 [0166.269] wcscmp (_String1="BD14869_.GIF", _String2=".") returned 1 [0166.269] wcscmp (_String1="BD14869_.GIF", _String2="..") returned 1 [0166.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65720 [0166.270] wcscpy (in: _Dest=0x7a65720, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.270] wcscat (in: _Dest=0x7a65720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.270] wcscat (in: _Dest=0x7a65720, _Source="BD14869_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" [0166.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0166.271] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2e0f00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaf2e0f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14870_.GIF", cAlternateFileName="")) returned 1 [0166.271] wcscmp (_String1="BD14870_.GIF", _String2=".") returned 1 [0166.271] wcscmp (_String1="BD14870_.GIF", _String2="..") returned 1 [0166.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a657b8 [0166.271] wcscpy (in: _Dest=0x7a657b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.271] wcscat (in: _Dest=0x7a657b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.271] wcscat (in: _Dest=0x7a657b8, _Source="BD14870_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" [0166.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a657b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0166.272] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2e0f00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaf2e0f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14871_.GIF", cAlternateFileName="")) returned 1 [0166.272] wcscmp (_String1="BD14871_.GIF", _String2=".") returned 1 [0166.272] wcscmp (_String1="BD14871_.GIF", _String2="..") returned 1 [0166.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a644b8 [0166.273] wcscpy (in: _Dest=0x7a644b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.273] wcscat (in: _Dest=0x7a644b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.273] wcscat (in: _Dest=0x7a644b8, _Source="BD14871_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" [0166.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a644b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0166.677] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16f3000, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16f3000, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14980_.GIF", cAlternateFileName="")) returned 1 [0166.677] wcscmp (_String1="BD14980_.GIF", _String2=".") returned 1 [0166.677] wcscmp (_String1="BD14980_.GIF", _String2="..") returned 1 [0166.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64aa8 [0166.677] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.677] wcscat (in: _Dest=0x7a64aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.677] wcscat (in: _Dest=0x7a64aa8, _Source="BD14980_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" [0166.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0166.679] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a05d00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2a05d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14981_.GIF", cAlternateFileName="")) returned 1 [0166.680] wcscmp (_String1="BD14981_.GIF", _String2=".") returned 1 [0166.680] wcscmp (_String1="BD14981_.GIF", _String2="..") returned 1 [0166.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a645e8 [0166.680] wcscpy (in: _Dest=0x7a645e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.680] wcscat (in: _Dest=0x7a645e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.680] wcscat (in: _Dest=0x7a645e8, _Source="BD14981_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" [0166.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a645e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0166.681] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aa26700, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5aa26700, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14982_.GIF", cAlternateFileName="")) returned 1 [0166.681] wcscmp (_String1="BD14982_.GIF", _String2=".") returned 1 [0166.681] wcscmp (_String1="BD14982_.GIF", _String2="..") returned 1 [0166.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64550 [0166.682] wcscpy (in: _Dest=0x7a64550, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0166.682] wcscat (in: _Dest=0x7a64550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0166.682] wcscat (in: _Dest=0x7a64550, _Source="BD14982_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" [0166.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0166.693] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59713a00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59713a00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14983_.GIF", cAlternateFileName="")) returned 1 [0167.480] wcscmp (_String1="BD14983_.GIF", _String2=".") returned 1 [0167.480] wcscmp (_String1="BD14983_.GIF", _String2="..") returned 1 [0167.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7578 [0167.481] wcscpy (in: _Dest=0x3eb7578, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.481] wcscat (in: _Dest=0x3eb7578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.481] wcscat (in: _Dest=0x3eb7578, _Source="BD14983_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" [0167.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0167.898] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58400d00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58400d00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14984_.GIF", cAlternateFileName="")) returned 1 [0167.898] wcscmp (_String1="BD14984_.GIF", _String2=".") returned 1 [0167.898] wcscmp (_String1="BD14984_.GIF", _String2="..") returned 1 [0167.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0167.898] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.898] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.898] wcscat (in: _Dest=0x32b820, _Source="BD14984_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" [0167.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0167.899] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x570ee000, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x570ee000, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14985_.GIF", cAlternateFileName="")) returned 1 [0167.899] wcscmp (_String1="BD14985_.GIF", _String2=".") returned 1 [0167.899] wcscmp (_String1="BD14985_.GIF", _String2="..") returned 1 [0167.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d240 [0167.899] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.899] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.900] wcscat (in: _Dest=0x32d240, _Source="BD14985_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" [0167.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0167.901] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5a2000, ftCreationTime.dwHighDateTime=0x1bd5f25, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xec5a2000, ftLastWriteTime.dwHighDateTime=0x1bd5f25, nFileSizeHigh=0x0, nFileSizeLow=0x40f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15018_.GIF", cAlternateFileName="")) returned 1 [0167.901] wcscmp (_String1="BD15018_.GIF", _String2=".") returned 1 [0167.901] wcscmp (_String1="BD15018_.GIF", _String2="..") returned 1 [0167.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cce8 [0167.901] wcscpy (in: _Dest=0x32cce8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.901] wcscat (in: _Dest=0x32cce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.901] wcscat (in: _Dest=0x32cce8, _Source="BD15018_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" [0167.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0167.902] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ee7900, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10ee7900, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15019_.GIF", cAlternateFileName="")) returned 1 [0167.902] wcscmp (_String1="BD15019_.GIF", _String2=".") returned 1 [0167.902] wcscmp (_String1="BD15019_.GIF", _String2="..") returned 1 [0167.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cb20 [0167.902] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.902] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.902] wcscat (in: _Dest=0x32cb20, _Source="BD15019_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" [0167.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0167.904] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1911bc00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1911bc00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15020_.GIF", cAlternateFileName="")) returned 1 [0167.904] wcscmp (_String1="BD15020_.GIF", _String2=".") returned 1 [0167.904] wcscmp (_String1="BD15020_.GIF", _String2="..") returned 1 [0167.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64a10 [0167.904] wcscpy (in: _Dest=0x7a64a10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.904] wcscat (in: _Dest=0x7a64a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.904] wcscat (in: _Dest=0x7a64a10, _Source="BD15020_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" [0167.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0167.905] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17e08f00, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17e08f00, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15021_.GIF", cAlternateFileName="")) returned 1 [0167.905] wcscmp (_String1="BD15021_.GIF", _String2=".") returned 1 [0167.905] wcscmp (_String1="BD15021_.GIF", _String2="..") returned 1 [0167.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64c70 [0167.906] wcscpy (in: _Dest=0x7a64c70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.906] wcscat (in: _Dest=0x7a64c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.906] wcscat (in: _Dest=0x7a64c70, _Source="BD15021_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" [0167.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0167.907] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16af6200, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16af6200, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15022_.GIF", cAlternateFileName="")) returned 1 [0167.907] wcscmp (_String1="BD15022_.GIF", _String2=".") returned 1 [0167.907] wcscmp (_String1="BD15022_.GIF", _String2="..") returned 1 [0167.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64bd8 [0167.907] wcscpy (in: _Dest=0x7a64bd8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.907] wcscat (in: _Dest=0x7a64bd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.907] wcscat (in: _Dest=0x7a64bd8, _Source="BD15022_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" [0167.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0167.908] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157e3500, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x157e3500, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15023_.GIF", cAlternateFileName="")) returned 1 [0167.908] wcscmp (_String1="BD15023_.GIF", _String2=".") returned 1 [0167.908] wcscmp (_String1="BD15023_.GIF", _String2="..") returned 1 [0167.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65a18 [0167.908] wcscpy (in: _Dest=0x7a65a18, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.908] wcscat (in: _Dest=0x7a65a18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.908] wcscat (in: _Dest=0x7a65a18, _Source="BD15023_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" [0167.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0167.910] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b285700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b285700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15056_.GIF", cAlternateFileName="")) returned 1 [0167.910] wcscmp (_String1="BD15056_.GIF", _String2=".") returned 1 [0167.910] wcscmp (_String1="BD15056_.GIF", _String2="..") returned 1 [0167.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65ab0 [0167.910] wcscpy (in: _Dest=0x7a65ab0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.910] wcscat (in: _Dest=0x7a65ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.910] wcscat (in: _Dest=0x7a65ab0, _Source="BD15056_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" [0167.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0167.911] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b285700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b285700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15057_.GIF", cAlternateFileName="")) returned 1 [0167.911] wcscmp (_String1="BD15057_.GIF", _String2=".") returned 1 [0167.911] wcscmp (_String1="BD15057_.GIF", _String2="..") returned 1 [0167.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65b48 [0167.911] wcscpy (in: _Dest=0x7a65b48, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.911] wcscat (in: _Dest=0x7a65b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.911] wcscat (in: _Dest=0x7a65b48, _Source="BD15057_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" [0167.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0167.912] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c598400, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2c598400, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15058_.GIF", cAlternateFileName="")) returned 1 [0167.912] wcscmp (_String1="BD15058_.GIF", _String2=".") returned 1 [0167.912] wcscmp (_String1="BD15058_.GIF", _String2="..") returned 1 [0167.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65be0 [0167.913] wcscpy (in: _Dest=0x7a65be0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.913] wcscat (in: _Dest=0x7a65be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.913] wcscat (in: _Dest=0x7a65be0, _Source="BD15058_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" [0167.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0167.914] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d09b00, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc6d09b00, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15059_.GIF", cAlternateFileName="")) returned 1 [0167.914] wcscmp (_String1="BD15059_.GIF", _String2=".") returned 1 [0167.914] wcscmp (_String1="BD15059_.GIF", _String2="..") returned 1 [0167.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65c78 [0167.914] wcscpy (in: _Dest=0x7a65c78, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.914] wcscat (in: _Dest=0x7a65c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.914] wcscat (in: _Dest=0x7a65c78, _Source="BD15059_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" [0167.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0167.915] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59f6e00, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc59f6e00, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15060_.GIF", cAlternateFileName="")) returned 1 [0167.915] wcscmp (_String1="BD15060_.GIF", _String2=".") returned 1 [0167.915] wcscmp (_String1="BD15060_.GIF", _String2="..") returned 1 [0167.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65d10 [0167.915] wcscpy (in: _Dest=0x7a65d10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.915] wcscat (in: _Dest=0x7a65d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.915] wcscat (in: _Dest=0x7a65d10, _Source="BD15060_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" [0167.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0167.916] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46e4100, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc46e4100, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15061_.GIF", cAlternateFileName="")) returned 1 [0167.916] wcscmp (_String1="BD15061_.GIF", _String2=".") returned 1 [0167.916] wcscmp (_String1="BD15061_.GIF", _String2="..") returned 1 [0167.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65da8 [0167.916] wcscpy (in: _Dest=0x7a65da8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.916] wcscat (in: _Dest=0x7a65da8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.916] wcscat (in: _Dest=0x7a65da8, _Source="BD15061_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" [0167.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0167.917] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e17e00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54e17e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15132_.GIF", cAlternateFileName="")) returned 1 [0167.917] wcscmp (_String1="BD15132_.GIF", _String2=".") returned 1 [0167.917] wcscmp (_String1="BD15132_.GIF", _String2="..") returned 1 [0167.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65e40 [0167.918] wcscpy (in: _Dest=0x7a65e40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.918] wcscat (in: _Dest=0x7a65e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.918] wcscat (in: _Dest=0x7a65e40, _Source="BD15132_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" [0167.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0167.919] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5612ab00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5612ab00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15133_.GIF", cAlternateFileName="")) returned 1 [0167.919] wcscmp (_String1="BD15133_.GIF", _String2=".") returned 1 [0167.919] wcscmp (_String1="BD15133_.GIF", _String2="..") returned 1 [0167.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65ed8 [0167.919] wcscpy (in: _Dest=0x7a65ed8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.919] wcscat (in: _Dest=0x7a65ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.919] wcscat (in: _Dest=0x7a65ed8, _Source="BD15133_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" [0167.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0167.920] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5612ab00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5612ab00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15134_.GIF", cAlternateFileName="")) returned 1 [0167.920] wcscmp (_String1="BD15134_.GIF", _String2=".") returned 1 [0167.920] wcscmp (_String1="BD15134_.GIF", _String2="..") returned 1 [0167.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65f70 [0167.920] wcscpy (in: _Dest=0x7a65f70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.920] wcscat (in: _Dest=0x7a65f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.920] wcscat (in: _Dest=0x7a65f70, _Source="BD15134_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" [0167.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0167.921] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5612ab00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5612ab00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15135_.GIF", cAlternateFileName="")) returned 1 [0167.921] wcscmp (_String1="BD15135_.GIF", _String2=".") returned 1 [0167.921] wcscmp (_String1="BD15135_.GIF", _String2="..") returned 1 [0167.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6280 [0167.921] wcscpy (in: _Dest=0x7ad6280, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.922] wcscat (in: _Dest=0x7ad6280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.922] wcscat (in: _Dest=0x7ad6280, _Source="BD15135_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" [0167.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0167.923] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5743d800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5743d800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15136_.GIF", cAlternateFileName="")) returned 1 [0167.923] wcscmp (_String1="BD15136_.GIF", _String2=".") returned 1 [0167.923] wcscmp (_String1="BD15136_.GIF", _String2="..") returned 1 [0167.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad63b0 [0167.923] wcscpy (in: _Dest=0x7ad63b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.923] wcscat (in: _Dest=0x7ad63b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.923] wcscat (in: _Dest=0x7ad63b0, _Source="BD15136_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" [0167.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad63b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0167.924] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f9a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x632f9a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15168_.GIF", cAlternateFileName="")) returned 1 [0167.925] wcscmp (_String1="BD15168_.GIF", _String2=".") returned 1 [0167.925] wcscmp (_String1="BD15168_.GIF", _String2="..") returned 1 [0167.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5148 [0167.925] wcscpy (in: _Dest=0x7ad5148, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.925] wcscat (in: _Dest=0x7ad5148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.925] wcscat (in: _Dest=0x7ad5148, _Source="BD15168_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" [0167.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c [0167.926] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f9a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x632f9a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15169_.GIF", cAlternateFileName="")) returned 1 [0167.926] wcscmp (_String1="BD15169_.GIF", _String2=".") returned 1 [0167.927] wcscmp (_String1="BD15169_.GIF", _String2="..") returned 1 [0167.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6c00 [0167.927] wcscpy (in: _Dest=0x7ad6c00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.927] wcscat (in: _Dest=0x7ad6c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.927] wcscat (in: _Dest=0x7ad6c00, _Source="BD15169_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" [0167.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0167.928] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6460c700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6460c700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15170_.GIF", cAlternateFileName="")) returned 1 [0167.928] wcscmp (_String1="BD15170_.GIF", _String2=".") returned 1 [0167.928] wcscmp (_String1="BD15170_.GIF", _String2="..") returned 1 [0167.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad54d8 [0167.928] wcscpy (in: _Dest=0x7ad54d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.929] wcscat (in: _Dest=0x7ad54d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.929] wcscat (in: _Dest=0x7ad54d8, _Source="BD15170_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" [0167.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad54d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0167.930] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b8900, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3b8900, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15171_.GIF", cAlternateFileName="")) returned 1 [0167.930] wcscmp (_String1="BD15171_.GIF", _String2=".") returned 1 [0167.930] wcscmp (_String1="BD15171_.GIF", _String2="..") returned 1 [0167.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad51e0 [0167.930] wcscpy (in: _Dest=0x7ad51e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.930] wcscat (in: _Dest=0x7ad51e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.930] wcscat (in: _Dest=0x7ad51e0, _Source="BD15171_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" [0167.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad51e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0167.931] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6460c700, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6460c700, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15172_.GIF", cAlternateFileName="")) returned 1 [0167.931] wcscmp (_String1="BD15172_.GIF", _String2=".") returned 1 [0167.931] wcscmp (_String1="BD15172_.GIF", _String2="..") returned 1 [0167.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5310 [0167.931] wcscpy (in: _Dest=0x7ad5310, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.931] wcscat (in: _Dest=0x7ad5310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.932] wcscat (in: _Dest=0x7ad5310, _Source="BD15172_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" [0167.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0167.933] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd92f00, ftCreationTime.dwHighDateTime=0x1bd4fa5, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd92f00, ftLastWriteTime.dwHighDateTime=0x1bd4fa5, nFileSizeHigh=0x0, nFileSizeLow=0x8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15173_.GIF", cAlternateFileName="")) returned 1 [0167.933] wcscmp (_String1="BD15173_.GIF", _String2=".") returned 1 [0167.933] wcscmp (_String1="BD15173_.GIF", _String2="..") returned 1 [0167.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6d30 [0167.933] wcscpy (in: _Dest=0x7ad6d30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0167.933] wcscat (in: _Dest=0x7ad6d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0167.933] wcscat (in: _Dest=0x7ad6d30, _Source="BD15173_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" [0167.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0168.434] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907c4800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x907c4800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15272_.GIF", cAlternateFileName="")) returned 1 [0168.434] wcscmp (_String1="BD15272_.GIF", _String2=".") returned 1 [0168.434] wcscmp (_String1="BD15272_.GIF", _String2="..") returned 1 [0168.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6f90 [0168.434] wcscpy (in: _Dest=0x7ad6f90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0168.434] wcscat (in: _Dest=0x7ad6f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0168.434] wcscat (in: _Dest=0x7ad6f90, _Source="BD15272_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" [0172.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0172.653] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ad7500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x91ad7500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15273_.GIF", cAlternateFileName="")) returned 1 [0172.653] wcscmp (_String1="BD15273_.GIF", _String2=".") returned 1 [0172.653] wcscmp (_String1="BD15273_.GIF", _String2="..") returned 1 [0172.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad57d0 [0172.653] wcscpy (in: _Dest=0x7ad57d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0172.653] wcscat (in: _Dest=0x7ad57d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0172.653] wcscat (in: _Dest=0x7ad57d0, _Source="BD15273_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" [0172.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad57d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0172.654] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ecd8500, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ecd8500, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15274_.GIF", cAlternateFileName="")) returned 1 [0172.655] wcscmp (_String1="BD15274_.GIF", _String2=".") returned 1 [0172.655] wcscmp (_String1="BD15274_.GIF", _String2="..") returned 1 [0172.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6c00 [0172.655] wcscpy (in: _Dest=0x7ad6c00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0172.655] wcscat (in: _Dest=0x7ad6c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0172.655] wcscat (in: _Dest=0x7ad6c00, _Source="BD15274_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" [0172.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0172.656] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6b2b00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5c6b2b00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15275_.GIF", cAlternateFileName="")) returned 1 [0172.656] wcscmp (_String1="BD15275_.GIF", _String2=".") returned 1 [0172.656] wcscmp (_String1="BD15275_.GIF", _String2="..") returned 1 [0172.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5148 [0172.656] wcscpy (in: _Dest=0x7ad5148, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0172.656] wcscat (in: _Dest=0x7ad5148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0172.656] wcscat (in: _Dest=0x7ad5148, _Source="BD15275_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" [0172.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0172.657] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58d7a400, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58d7a400, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15276_.GIF", cAlternateFileName="")) returned 1 [0172.657] wcscmp (_String1="BD15276_.GIF", _String2=".") returned 1 [0172.657] wcscmp (_String1="BD15276_.GIF", _String2="..") returned 1 [0172.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad63b0 [0172.657] wcscpy (in: _Dest=0x7ad63b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0172.657] wcscat (in: _Dest=0x7ad63b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0172.657] wcscat (in: _Dest=0x7ad63b0, _Source="BD15276_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" [0172.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad63b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0172.658] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57a67700, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x57a67700, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15277_.GIF", cAlternateFileName="")) returned 1 [0172.659] wcscmp (_String1="BD15277_.GIF", _String2=".") returned 1 [0172.659] wcscmp (_String1="BD15277_.GIF", _String2="..") returned 1 [0172.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6280 [0172.659] wcscpy (in: _Dest=0x7ad6280, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0172.659] wcscat (in: _Dest=0x7ad6280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0172.659] wcscat (in: _Dest=0x7ad6280, _Source="BD15277_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" [0172.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0172.660] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd76def00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd76def00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21294_.GIF", cAlternateFileName="")) returned 1 [0172.660] wcscmp (_String1="BD21294_.GIF", _String2=".") returned 1 [0172.660] wcscmp (_String1="BD21294_.GIF", _String2="..") returned 1 [0172.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6d30 [0172.660] wcscpy (in: _Dest=0x7ad6d30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0172.660] wcscat (in: _Dest=0x7ad6d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0172.660] wcscat (in: _Dest=0x7ad6d30, _Source="BD21294_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" [0172.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0172.661] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd89f1c00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd799b30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd89f1c00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21295_.GIF", cAlternateFileName="")) returned 1 [0172.661] wcscmp (_String1="BD21295_.GIF", _String2=".") returned 1 [0172.661] wcscmp (_String1="BD21295_.GIF", _String2="..") returned 1 [0172.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5310 [0172.661] wcscpy (in: _Dest=0x7ad5310, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0172.661] wcscat (in: _Dest=0x7ad5310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0172.661] wcscat (in: _Dest=0x7ad5310, _Source="BD21295_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" [0172.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0172.662] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb017600, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdb017600, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21296_.GIF", cAlternateFileName="")) returned 1 [0174.115] wcscmp (_String1="BD21296_.GIF", _String2=".") returned 1 [0174.115] wcscmp (_String1="BD21296_.GIF", _String2="..") returned 1 [0174.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6908 [0174.115] wcscpy (in: _Dest=0x7ad6908, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0174.115] wcscat (in: _Dest=0x7ad6908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0174.115] wcscat (in: _Dest=0x7ad6908, _Source="BD21296_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" [0175.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0175.825] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9d04900, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9d04900, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21297_.GIF", cAlternateFileName="")) returned 1 [0175.825] wcscmp (_String1="BD21297_.GIF", _String2=".") returned 1 [0175.825] wcscmp (_String1="BD21297_.GIF", _String2="..") returned 1 [0175.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb67d0 [0175.825] wcscpy (in: _Dest=0x3eb67d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.825] wcscat (in: _Dest=0x3eb67d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.825] wcscat (in: _Dest=0x3eb67d0, _Source="BD21297_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" [0175.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb67d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0175.827] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc62a00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfc62a00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21298_.GIF", cAlternateFileName="")) returned 1 [0175.827] wcscmp (_String1="BD21298_.GIF", _String2=".") returned 1 [0175.827] wcscmp (_String1="BD21298_.GIF", _String2="..") returned 1 [0175.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6ef0 [0175.827] wcscpy (in: _Dest=0x3eb6ef0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.827] wcscat (in: _Dest=0x3eb6ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.827] wcscat (in: _Dest=0x3eb6ef0, _Source="BD21298_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" [0175.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0175.829] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde94fd00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde94fd00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21299_.GIF", cAlternateFileName="")) returned 1 [0175.829] wcscmp (_String1="BD21299_.GIF", _String2=".") returned 1 [0175.829] wcscmp (_String1="BD21299_.GIF", _String2="..") returned 1 [0175.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7280 [0175.829] wcscpy (in: _Dest=0x3eb7280, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.829] wcscat (in: _Dest=0x3eb7280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.829] wcscat (in: _Dest=0x3eb7280, _Source="BD21299_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" [0175.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0175.830] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd63d000, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdd63d000, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21300_.GIF", cAlternateFileName="")) returned 1 [0175.830] wcscmp (_String1="BD21300_.GIF", _String2=".") returned 1 [0175.830] wcscmp (_String1="BD21300_.GIF", _String2="..") returned 1 [0175.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5860 [0175.830] wcscpy (in: _Dest=0x3eb5860, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.830] wcscat (in: _Dest=0x3eb5860, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.831] wcscat (in: _Dest=0x3eb5860, _Source="BD21300_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" [0175.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0175.832] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ed3800, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe6ed3800, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21301_.GIF", cAlternateFileName="")) returned 1 [0175.832] wcscmp (_String1="BD21301_.GIF", _String2=".") returned 1 [0175.832] wcscmp (_String1="BD21301_.GIF", _String2="..") returned 1 [0175.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb61e0 [0175.832] wcscpy (in: _Dest=0x3eb61e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.832] wcscat (in: _Dest=0x3eb61e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.832] wcscat (in: _Dest=0x3eb61e0, _Source="BD21301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" [0175.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb61e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0175.834] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5bc0b00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7bfc90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe5bc0b00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21302_.GIF", cAlternateFileName="")) returned 1 [0175.834] wcscmp (_String1="BD21302_.GIF", _String2=".") returned 1 [0175.834] wcscmp (_String1="BD21302_.GIF", _String2="..") returned 1 [0175.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5990 [0175.834] wcscpy (in: _Dest=0x3eb5990, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.834] wcscat (in: _Dest=0x3eb5990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.834] wcscat (in: _Dest=0x3eb5990, _Source="BD21302_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" [0175.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0175.836] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2288400, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2288400, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21304_.GIF", cAlternateFileName="")) returned 1 [0175.836] wcscmp (_String1="BD21304_.GIF", _String2=".") returned 1 [0175.836] wcscmp (_String1="BD21304_.GIF", _String2="..") returned 1 [0175.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7448 [0175.836] wcscpy (in: _Dest=0x3eb7448, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.836] wcscat (in: _Dest=0x3eb7448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.836] wcscat (in: _Dest=0x3eb7448, _Source="BD21304_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" [0175.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0175.837] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f75700, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe0f75700, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21306_.GIF", cAlternateFileName="")) returned 1 [0175.837] wcscmp (_String1="BD21306_.GIF", _String2=".") returned 1 [0175.838] wcscmp (_String1="BD21306_.GIF", _String2="..") returned 1 [0175.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7578 [0175.838] wcscpy (in: _Dest=0x3eb7578, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.838] wcscat (in: _Dest=0x3eb7578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.838] wcscat (in: _Dest=0x3eb7578, _Source="BD21306_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" [0175.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0175.839] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63cc200, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd63cc200, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21308_.GIF", cAlternateFileName="")) returned 1 [0175.839] wcscmp (_String1="BD21308_.GIF", _String2=".") returned 1 [0175.839] wcscmp (_String1="BD21308_.GIF", _String2="..") returned 1 [0175.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb60b0 [0175.839] wcscpy (in: _Dest=0x3eb60b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.839] wcscat (in: _Dest=0x3eb60b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.839] wcscat (in: _Dest=0x3eb60b0, _Source="BD21308_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" [0175.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb60b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0175.840] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3da6800, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd3da6800, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21310_.GIF", cAlternateFileName="")) returned 1 [0175.840] wcscmp (_String1="BD21310_.GIF", _String2=".") returned 1 [0175.840] wcscmp (_String1="BD21310_.GIF", _String2="..") returned 1 [0175.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7020 [0175.840] wcscpy (in: _Dest=0x3eb7020, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.840] wcscat (in: _Dest=0x3eb7020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.840] wcscat (in: _Dest=0x3eb7020, _Source="BD21310_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" [0175.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c [0175.841] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1780e00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd1780e00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21312_.GIF", cAlternateFileName="")) returned 1 [0175.841] wcscmp (_String1="BD21312_.GIF", _String2=".") returned 1 [0175.841] wcscmp (_String1="BD21312_.GIF", _String2="..") returned 1 [0175.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6bf8 [0175.842] wcscpy (in: _Dest=0x3eb6bf8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.842] wcscat (in: _Dest=0x3eb6bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.842] wcscat (in: _Dest=0x3eb6bf8, _Source="BD21312_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" [0175.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0175.843] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde48700, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcde48700, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x45, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21314_.GIF", cAlternateFileName="")) returned 1 [0175.843] wcscmp (_String1="BD21314_.GIF", _String2=".") returned 1 [0175.843] wcscmp (_String1="BD21314_.GIF", _String2="..") returned 1 [0175.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6018 [0175.843] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.843] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.843] wcscat (in: _Dest=0x3eb6018, _Source="BD21314_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" [0175.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0175.844] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91fd300, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc91fd300, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21316_.GIF", cAlternateFileName="")) returned 1 [0175.844] wcscmp (_String1="BD21316_.GIF", _String2=".") returned 1 [0175.844] wcscmp (_String1="BD21316_.GIF", _String2="..") returned 1 [0175.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb57c8 [0175.844] wcscpy (in: _Dest=0x3eb57c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.844] wcscat (in: _Dest=0x3eb57c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.844] wcscat (in: _Dest=0x3eb57c8, _Source="BD21316_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" [0175.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb57c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0175.845] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f8c500, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1f8c500, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21327_.GIF", cAlternateFileName="")) returned 1 [0175.845] wcscmp (_String1="BD21327_.GIF", _String2=".") returned 1 [0175.845] wcscmp (_String1="BD21327_.GIF", _String2="..") returned 1 [0175.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb74e0 [0175.846] wcscpy (in: _Dest=0x3eb74e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.846] wcscat (in: _Dest=0x3eb74e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.846] wcscat (in: _Dest=0x3eb74e0, _Source="BD21327_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" [0175.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb74e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0175.847] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe653e00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe653e00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21329_.GIF", cAlternateFileName="")) returned 1 [0175.847] wcscmp (_String1="BD21329_.GIF", _String2=".") returned 1 [0175.847] wcscmp (_String1="BD21329_.GIF", _String2="..") returned 1 [0175.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7318 [0175.847] wcscpy (in: _Dest=0x3eb7318, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.847] wcscat (in: _Dest=0x3eb7318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.847] wcscat (in: _Dest=0x3eb7318, _Source="BD21329_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" [0175.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0175.848] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad1b700, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbad1b700, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21331_.GIF", cAlternateFileName="")) returned 1 [0175.848] wcscmp (_String1="BD21331_.GIF", _String2=".") returned 1 [0175.848] wcscmp (_String1="BD21331_.GIF", _String2="..") returned 1 [0175.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5a28 [0175.848] wcscpy (in: _Dest=0x3eb5a28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.848] wcscat (in: _Dest=0x3eb5a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.848] wcscat (in: _Dest=0x3eb5a28, _Source="BD21331_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" [0175.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0175.849] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60d0300, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb60d0300, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21333_.GIF", cAlternateFileName="")) returned 1 [0175.849] wcscmp (_String1="BD21333_.GIF", _String2=".") returned 1 [0175.850] wcscmp (_String1="BD21333_.GIF", _String2="..") returned 1 [0175.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6310 [0175.850] wcscpy (in: _Dest=0x3eb6310, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.850] wcscat (in: _Dest=0x3eb6310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.850] wcscat (in: _Dest=0x3eb6310, _Source="BD21333_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" [0175.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0175.851] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2797c00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2797c00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21335_.GIF", cAlternateFileName="")) returned 1 [0175.851] wcscmp (_String1="BD21335_.GIF", _String2=".") returned 1 [0175.851] wcscmp (_String1="BD21335_.GIF", _String2="..") returned 1 [0175.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5e50 [0175.851] wcscpy (in: _Dest=0x3eb5e50, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.851] wcscat (in: _Dest=0x3eb5e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.851] wcscat (in: _Dest=0x3eb5e50, _Source="BD21335_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" [0175.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0175.852] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1484f00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1484f00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21337_.GIF", cAlternateFileName="")) returned 1 [0175.852] wcscmp (_String1="BD21337_.GIF", _String2=".") returned 1 [0175.852] wcscmp (_String1="BD21337_.GIF", _String2="..") returned 1 [0175.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb70b8 [0175.852] wcscpy (in: _Dest=0x3eb70b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.852] wcscat (in: _Dest=0x3eb70b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.852] wcscat (in: _Dest=0x3eb70b8, _Source="BD21337_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" [0175.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb70b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16fc [0175.853] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaee5f500, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaee5f500, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21339_.GIF", cAlternateFileName="")) returned 1 [0175.853] wcscmp (_String1="BD21339_.GIF", _String2=".") returned 1 [0175.853] wcscmp (_String1="BD21339_.GIF", _String2="..") returned 1 [0175.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5698 [0175.853] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.853] wcscat (in: _Dest=0x3eb5698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.854] wcscat (in: _Dest=0x3eb5698, _Source="BD21339_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" [0175.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0175.854] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22368600, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22368600, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21342_.GIF", cAlternateFileName="")) returned 1 [0175.854] wcscmp (_String1="BD21342_.GIF", _String2=".") returned 1 [0175.855] wcscmp (_String1="BD21342_.GIF", _String2="..") returned 1 [0175.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5f80 [0175.855] wcscpy (in: _Dest=0x3eb5f80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.855] wcscat (in: _Dest=0x3eb5f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.855] wcscat (in: _Dest=0x3eb5f80, _Source="BD21342_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" [0175.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0175.861] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22368600, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22368600, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21343_.GIF", cAlternateFileName="")) returned 1 [0175.861] wcscmp (_String1="BD21343_.GIF", _String2=".") returned 1 [0175.861] wcscmp (_String1="BD21343_.GIF", _String2="..") returned 1 [0175.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6f88 [0175.862] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.862] wcscat (in: _Dest=0x3eb6f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.862] wcscat (in: _Dest=0x3eb6f88, _Source="BD21343_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" [0175.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0175.863] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2367b300, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2367b300, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21344_.GIF", cAlternateFileName="")) returned 1 [0175.863] wcscmp (_String1="BD21344_.GIF", _String2=".") returned 1 [0175.863] wcscmp (_String1="BD21344_.GIF", _String2="..") returned 1 [0175.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5db8 [0175.863] wcscpy (in: _Dest=0x3eb5db8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.863] wcscat (in: _Dest=0x3eb5db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.863] wcscat (in: _Dest=0x3eb5db8, _Source="BD21344_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" [0175.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0175.864] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7355200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7355200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21364_.GIF", cAlternateFileName="")) returned 1 [0175.864] wcscmp (_String1="BD21364_.GIF", _String2=".") returned 1 [0175.864] wcscmp (_String1="BD21364_.GIF", _String2="..") returned 1 [0175.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5bf0 [0175.864] wcscpy (in: _Dest=0x3eb5bf0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.864] wcscat (in: _Dest=0x3eb5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.864] wcscat (in: _Dest=0x3eb5bf0, _Source="BD21364_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" [0175.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0175.865] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7355200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7355200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21365_.GIF", cAlternateFileName="")) returned 1 [0175.865] wcscmp (_String1="BD21365_.GIF", _String2=".") returned 1 [0175.865] wcscmp (_String1="BD21365_.GIF", _String2="..") returned 1 [0175.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb71e8 [0175.865] wcscpy (in: _Dest=0x3eb71e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.865] wcscat (in: _Dest=0x3eb71e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.865] wcscat (in: _Dest=0x3eb71e8, _Source="BD21365_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" [0175.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb71e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0175.866] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7355200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7355200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21366_.GIF", cAlternateFileName="")) returned 1 [0175.866] wcscmp (_String1="BD21366_.GIF", _String2=".") returned 1 [0175.867] wcscmp (_String1="BD21366_.GIF", _String2="..") returned 1 [0175.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5ee8 [0175.867] wcscpy (in: _Dest=0x3eb5ee8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.867] wcscat (in: _Dest=0x3eb5ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.867] wcscat (in: _Dest=0x3eb5ee8, _Source="BD21366_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" [0175.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0175.868] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0b6800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e0b6800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21375_.GIF", cAlternateFileName="")) returned 1 [0175.868] wcscmp (_String1="BD21375_.GIF", _String2=".") returned 1 [0175.868] wcscmp (_String1="BD21375_.GIF", _String2="..") returned 1 [0175.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6a30 [0175.868] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0175.868] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0175.868] wcscat (in: _Dest=0x3eb6a30, _Source="BD21375_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" [0175.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4 [0176.001] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f3c9500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f3c9500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21376_.GIF", cAlternateFileName="")) returned 1 [0176.001] wcscmp (_String1="BD21376_.GIF", _String2=".") returned 1 [0176.001] wcscmp (_String1="BD21376_.GIF", _String2="..") returned 1 [0176.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6ef8 [0176.001] wcscpy (in: _Dest=0x7ad6ef8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0176.001] wcscat (in: _Dest=0x7ad6ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0176.001] wcscat (in: _Dest=0x7ad6ef8, _Source="BD21376_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" [0176.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0176.195] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f3c9500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f3c9500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21377_.GIF", cAlternateFileName="")) returned 1 [0176.195] wcscmp (_String1="BD21377_.GIF", _String2=".") returned 1 [0176.195] wcscmp (_String1="BD21377_.GIF", _String2="..") returned 1 [0176.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad63b0 [0176.195] wcscpy (in: _Dest=0x7ad63b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0176.195] wcscat (in: _Dest=0x7ad63b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0176.196] wcscat (in: _Dest=0x7ad63b0, _Source="BD21377_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" [0176.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad63b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0176.197] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c48f00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47c48f00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21398_.GIF", cAlternateFileName="")) returned 1 [0176.197] wcscmp (_String1="BD21398_.GIF", _String2=".") returned 1 [0176.197] wcscmp (_String1="BD21398_.GIF", _String2="..") returned 1 [0176.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5148 [0176.198] wcscpy (in: _Dest=0x7ad5148, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0176.198] wcscat (in: _Dest=0x7ad5148, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0176.198] wcscat (in: _Dest=0x7ad5148, _Source="BD21398_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" [0176.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0176.199] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48f5bc00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x48f5bc00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21399_.GIF", cAlternateFileName="")) returned 1 [0176.199] wcscmp (_String1="BD21399_.GIF", _String2=".") returned 1 [0176.199] wcscmp (_String1="BD21399_.GIF", _String2="..") returned 1 [0176.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6c00 [0176.199] wcscpy (in: _Dest=0x7ad6c00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0176.200] wcscat (in: _Dest=0x7ad6c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0176.200] wcscat (in: _Dest=0x7ad6c00, _Source="BD21399_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" [0176.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0176.202] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48f5bc00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x48f5bc00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21400_.GIF", cAlternateFileName="")) returned 1 [0176.202] wcscmp (_String1="BD21400_.GIF", _String2=".") returned 1 [0176.202] wcscmp (_String1="BD21400_.GIF", _String2="..") returned 1 [0176.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad57d0 [0176.202] wcscpy (in: _Dest=0x7ad57d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0176.202] wcscat (in: _Dest=0x7ad57d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0176.202] wcscat (in: _Dest=0x7ad57d0, _Source="BD21400_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" [0176.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad57d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0176.205] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ffb9100, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ffb9100, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21421_.GIF", cAlternateFileName="")) returned 1 [0176.205] wcscmp (_String1="BD21421_.GIF", _String2=".") returned 1 [0176.205] wcscmp (_String1="BD21421_.GIF", _String2="..") returned 1 [0176.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6f90 [0176.205] wcscpy (in: _Dest=0x7ad6f90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0176.205] wcscat (in: _Dest=0x7ad6f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0176.205] wcscat (in: _Dest=0x7ad6f90, _Source="BD21421_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" [0176.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0176.207] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ffb9100, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ffb9100, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21422_.GIF", cAlternateFileName="")) returned 1 [0177.159] wcscmp (_String1="BD21422_.GIF", _String2=".") returned 1 [0177.159] wcscmp (_String1="BD21422_.GIF", _String2="..") returned 1 [0177.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5310 [0177.159] wcscpy (in: _Dest=0x7ad5310, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.159] wcscat (in: _Dest=0x7ad5310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.159] wcscat (in: _Dest=0x7ad5310, _Source="BD21422_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" [0177.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0177.160] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12cbe00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa12cbe00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21423_.GIF", cAlternateFileName="")) returned 1 [0177.160] wcscmp (_String1="BD21423_.GIF", _String2=".") returned 1 [0177.160] wcscmp (_String1="BD21423_.GIF", _String2="..") returned 1 [0177.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6e60 [0177.160] wcscpy (in: _Dest=0x7ad6e60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.160] wcscat (in: _Dest=0x7ad6e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.160] wcscat (in: _Dest=0x7ad6e60, _Source="BD21423_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" [0177.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0177.162] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fb3a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26fb3a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21433_.GIF", cAlternateFileName="")) returned 1 [0177.162] wcscmp (_String1="BD21433_.GIF", _String2=".") returned 1 [0177.162] wcscmp (_String1="BD21433_.GIF", _String2="..") returned 1 [0177.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad54d8 [0177.162] wcscpy (in: _Dest=0x7ad54d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.163] wcscat (in: _Dest=0x7ad54d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.163] wcscat (in: _Dest=0x7ad54d8, _Source="BD21433_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" [0177.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad54d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0177.164] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fb3a00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26fb3a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21434_.GIF", cAlternateFileName="")) returned 1 [0177.164] wcscmp (_String1="BD21434_.GIF", _String2=".") returned 1 [0177.164] wcscmp (_String1="BD21434_.GIF", _String2="..") returned 1 [0177.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad51e0 [0177.165] wcscpy (in: _Dest=0x7ad51e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.165] wcscat (in: _Dest=0x7ad51e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.165] wcscat (in: _Dest=0x7ad51e0, _Source="BD21434_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" [0177.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad51e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0177.166] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282c6700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x282c6700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21435_.GIF", cAlternateFileName="")) returned 1 [0177.166] wcscmp (_String1="BD21435_.GIF", _String2=".") returned 1 [0177.166] wcscmp (_String1="BD21435_.GIF", _String2="..") returned 1 [0177.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6a38 [0177.166] wcscpy (in: _Dest=0x7ad6a38, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.166] wcscat (in: _Dest=0x7ad6a38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.166] wcscat (in: _Dest=0x7ad6a38, _Source="BD21435_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" [0177.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0177.168] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeac8d900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeac8d900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21480_.GIF", cAlternateFileName="")) returned 1 [0177.168] wcscmp (_String1="BD21480_.GIF", _String2=".") returned 1 [0177.168] wcscmp (_String1="BD21480_.GIF", _String2="..") returned 1 [0177.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6150 [0177.168] wcscpy (in: _Dest=0x7ad6150, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.168] wcscat (in: _Dest=0x7ad6150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.168] wcscat (in: _Dest=0x7ad6150, _Source="BD21480_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" [0177.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0177.169] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebfa0600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xebfa0600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21481_.GIF", cAlternateFileName="")) returned 1 [0177.170] wcscmp (_String1="BD21481_.GIF", _String2=".") returned 1 [0177.170] wcscmp (_String1="BD21481_.GIF", _String2="..") returned 1 [0177.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6c98 [0177.170] wcscpy (in: _Dest=0x7ad6c98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.170] wcscat (in: _Dest=0x7ad6c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.170] wcscat (in: _Dest=0x7ad6c98, _Source="BD21481_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" [0177.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0177.171] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebfa0600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xebfa0600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21482_.GIF", cAlternateFileName="")) returned 1 [0177.172] wcscmp (_String1="BD21482_.GIF", _String2=".") returned 1 [0177.172] wcscmp (_String1="BD21482_.GIF", _String2="..") returned 1 [0177.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6d30 [0177.172] wcscpy (in: _Dest=0x7ad6d30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.172] wcscat (in: _Dest=0x7ad6d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.172] wcscat (in: _Dest=0x7ad6d30, _Source="BD21482_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" [0177.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0177.173] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25327600, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x25327600, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21503_.GIF", cAlternateFileName="")) returned 1 [0177.173] wcscmp (_String1="BD21503_.GIF", _String2=".") returned 1 [0177.173] wcscmp (_String1="BD21503_.GIF", _String2="..") returned 1 [0177.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6740 [0177.173] wcscpy (in: _Dest=0x7ad6740, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.173] wcscat (in: _Dest=0x7ad6740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.174] wcscat (in: _Dest=0x7ad6740, _Source="BD21503_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" [0177.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0177.175] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2663a300, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2663a300, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21504_.GIF", cAlternateFileName="")) returned 1 [0177.175] wcscmp (_String1="BD21504_.GIF", _String2=".") returned 1 [0177.175] wcscmp (_String1="BD21504_.GIF", _String2="..") returned 1 [0177.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6b68 [0177.175] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.175] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.175] wcscat (in: _Dest=0x7ad6b68, _Source="BD21504_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" [0177.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0177.177] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2663a300, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2663a300, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21505_.GIF", cAlternateFileName="")) returned 1 [0177.177] wcscmp (_String1="BD21505_.GIF", _String2=".") returned 1 [0177.177] wcscmp (_String1="BD21505_.GIF", _String2="..") returned 1 [0177.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5bf8 [0177.177] wcscpy (in: _Dest=0x7ad5bf8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.177] wcscat (in: _Dest=0x7ad5bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.177] wcscat (in: _Dest=0x7ad5bf8, _Source="BD21505_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" [0177.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0177.178] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eeb9d00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4eeb9d00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21518_.GIF", cAlternateFileName="")) returned 1 [0177.178] wcscmp (_String1="BD21518_.GIF", _String2=".") returned 1 [0177.178] wcscmp (_String1="BD21518_.GIF", _String2="..") returned 1 [0177.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5608 [0177.179] wcscpy (in: _Dest=0x7ad5608, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.179] wcscat (in: _Dest=0x7ad5608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.179] wcscat (in: _Dest=0x7ad5608, _Source="BD21518_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" [0177.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0177.484] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501cca00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x501cca00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21519_.GIF", cAlternateFileName="")) returned 1 [0177.484] wcscmp (_String1="BD21519_.GIF", _String2=".") returned 1 [0177.484] wcscmp (_String1="BD21519_.GIF", _String2="..") returned 1 [0177.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad64e0 [0177.484] wcscpy (in: _Dest=0x7ad64e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0177.484] wcscat (in: _Dest=0x7ad64e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0177.484] wcscat (in: _Dest=0x7ad64e0, _Source="BD21519_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" [0178.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad64e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0178.052] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501cca00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x501cca00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21520_.GIF", cAlternateFileName="")) returned 1 [0178.052] wcscmp (_String1="BD21520_.GIF", _String2=".") returned 1 [0178.052] wcscmp (_String1="BD21520_.GIF", _String2="..") returned 1 [0178.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0178.052] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.052] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.052] wcscat (in: _Dest=0x3eb5d20, _Source="BD21520_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" [0178.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0178.053] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c04500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4c04500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21533_.GIF", cAlternateFileName="")) returned 1 [0178.054] wcscmp (_String1="BD21533_.GIF", _String2=".") returned 1 [0178.054] wcscmp (_String1="BD21533_.GIF", _String2="..") returned 1 [0178.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7150 [0178.054] wcscpy (in: _Dest=0x3eb7150, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.054] wcscat (in: _Dest=0x3eb7150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.054] wcscat (in: _Dest=0x3eb7150, _Source="BD21533_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" [0178.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0178.055] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c04500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4c04500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21534_.GIF", cAlternateFileName="")) returned 1 [0178.055] wcscmp (_String1="BD21534_.GIF", _String2=".") returned 1 [0178.055] wcscmp (_String1="BD21534_.GIF", _String2="..") returned 1 [0178.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb64d8 [0178.055] wcscpy (in: _Dest=0x3eb64d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.055] wcscat (in: _Dest=0x3eb64d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.055] wcscat (in: _Dest=0x3eb64d8, _Source="BD21534_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" [0178.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb64d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1224 [0178.056] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c04500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4c04500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21535_.GIF", cAlternateFileName="")) returned 1 [0178.056] wcscmp (_String1="BD21535_.GIF", _String2=".") returned 1 [0178.056] wcscmp (_String1="BD21535_.GIF", _String2="..") returned 1 [0178.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6280 [0178.056] wcscpy (in: _Dest=0x7ad6280, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.056] wcscat (in: _Dest=0x7ad6280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.056] wcscat (in: _Dest=0x7ad6280, _Source="BD21535_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" [0178.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8 [0178.057] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481cb800, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x481cb800, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x37a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BULLETS.DLL", cAlternateFileName="")) returned 1 [0178.057] wcscmp (_String1="BULLETS.DLL", _String2=".") returned 1 [0178.058] wcscmp (_String1="BULLETS.DLL", _String2="..") returned 1 [0178.058] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58283a00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbdf7c410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58283a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115834.GIF", cAlternateFileName="")) returned 1 [0178.058] wcscmp (_String1="J0115834.GIF", _String2=".") returned 1 [0178.058] wcscmp (_String1="J0115834.GIF", _String2="..") returned 1 [0178.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5b60 [0178.058] wcscpy (in: _Dest=0x7ad5b60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.058] wcscat (in: _Dest=0x7ad5b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.058] wcscat (in: _Dest=0x7ad5b60, _Source="J0115834.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" [0178.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0178.059] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59596700, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x59596700, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115835.GIF", cAlternateFileName="")) returned 1 [0178.059] wcscmp (_String1="J0115835.GIF", _String2=".") returned 1 [0178.059] wcscmp (_String1="J0115835.GIF", _String2="..") returned 1 [0178.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5d28 [0178.059] wcscpy (in: _Dest=0x7ad5d28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.059] wcscat (in: _Dest=0x7ad5d28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.059] wcscat (in: _Dest=0x7ad5d28, _Source="J0115835.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" [0178.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0178.060] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8a9400, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5a8a9400, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115836.GIF", cAlternateFileName="")) returned 1 [0178.060] wcscmp (_String1="J0115836.GIF", _String2=".") returned 1 [0178.060] wcscmp (_String1="J0115836.GIF", _String2="..") returned 1 [0178.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5900 [0178.060] wcscpy (in: _Dest=0x7ad5900, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.060] wcscat (in: _Dest=0x7ad5900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.060] wcscat (in: _Dest=0x7ad5900, _Source="J0115836.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" [0178.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0178.061] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb09300, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdeb09300, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115839.GIF", cAlternateFileName="")) returned 1 [0178.061] wcscmp (_String1="J0115839.GIF", _String2=".") returned 1 [0178.061] wcscmp (_String1="J0115839.GIF", _String2="..") returned 1 [0178.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6448 [0178.062] wcscpy (in: _Dest=0x7ad6448, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.062] wcscat (in: _Dest=0x7ad6448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.062] wcscat (in: _Dest=0x7ad6448, _Source="J0115839.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" [0178.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0178.063] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115840.GIF", cAlternateFileName="")) returned 1 [0178.063] wcscmp (_String1="J0115840.GIF", _String2=".") returned 1 [0178.063] wcscmp (_String1="J0115840.GIF", _String2="..") returned 1 [0178.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5c90 [0178.063] wcscpy (in: _Dest=0x7ad5c90, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.063] wcscat (in: _Dest=0x7ad5c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.063] wcscat (in: _Dest=0x7ad5c90, _Source="J0115840.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" [0178.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0178.064] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115841.GIF", cAlternateFileName="")) returned 1 [0178.064] wcscmp (_String1="J0115841.GIF", _String2=".") returned 1 [0178.064] wcscmp (_String1="J0115841.GIF", _String2="..") returned 1 [0178.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5ef0 [0178.064] wcscpy (in: _Dest=0x7ad5ef0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.064] wcscat (in: _Dest=0x7ad5ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.064] wcscat (in: _Dest=0x7ad5ef0, _Source="J0115841.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" [0178.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0178.065] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115842.GIF", cAlternateFileName="")) returned 1 [0178.065] wcscmp (_String1="J0115842.GIF", _String2=".") returned 1 [0178.065] wcscmp (_String1="J0115842.GIF", _String2="..") returned 1 [0178.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6ad0 [0178.065] wcscpy (in: _Dest=0x7ad6ad0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.065] wcscat (in: _Dest=0x7ad6ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.065] wcscat (in: _Dest=0x7ad6ad0, _Source="J0115842.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" [0178.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0178.066] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfe1c000, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfa2570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfe1c000, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115843.GIF", cAlternateFileName="")) returned 1 [0178.103] wcscmp (_String1="J0115843.GIF", _String2=".") returned 1 [0178.103] wcscmp (_String1="J0115843.GIF", _String2="..") returned 1 [0178.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5f88 [0178.104] wcscpy (in: _Dest=0x7ad5f88, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.104] wcscat (in: _Dest=0x7ad5f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.104] wcscat (in: _Dest=0x7ad5f88, _Source="J0115843.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" [0178.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0178.105] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe112ed00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfc86d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe112ed00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115844.GIF", cAlternateFileName="")) returned 1 [0178.105] wcscmp (_String1="J0115844.GIF", _String2=".") returned 1 [0178.105] wcscmp (_String1="J0115844.GIF", _String2="..") returned 1 [0178.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad50b0 [0178.105] wcscpy (in: _Dest=0x7ad50b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.105] wcscat (in: _Dest=0x7ad50b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.105] wcscat (in: _Dest=0x7ad50b0, _Source="J0115844.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" [0178.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0178.106] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfeaf00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfee830, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecfeaf00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115863.GIF", cAlternateFileName="")) returned 1 [0178.106] wcscmp (_String1="J0115863.GIF", _String2=".") returned 1 [0178.106] wcscmp (_String1="J0115863.GIF", _String2="..") returned 1 [0178.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad61e8 [0178.106] wcscpy (in: _Dest=0x7ad61e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.106] wcscat (in: _Dest=0x7ad61e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.106] wcscat (in: _Dest=0x7ad61e8, _Source="J0115863.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" [0178.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad61e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0178.134] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfeaf00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfee830, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecfeaf00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115864.GIF", cAlternateFileName="")) returned 1 [0178.134] wcscmp (_String1="J0115864.GIF", _String2=".") returned 1 [0178.134] wcscmp (_String1="J0115864.GIF", _String2="..") returned 1 [0178.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5a30 [0178.134] wcscpy (in: _Dest=0x7ad5a30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.134] wcscat (in: _Dest=0x7ad5a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.134] wcscat (in: _Dest=0x7ad5a30, _Source="J0115864.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" [0178.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0178.470] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfeaf00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfee830, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecfeaf00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115865.GIF", cAlternateFileName="")) returned 1 [0178.470] wcscmp (_String1="J0115865.GIF", _String2=".") returned 1 [0178.470] wcscmp (_String1="J0115865.GIF", _String2="..") returned 1 [0178.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5278 [0178.470] wcscpy (in: _Dest=0x7ad5278, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.470] wcscat (in: _Dest=0x7ad5278, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.470] wcscat (in: _Dest=0x7ad5278, _Source="J0115865.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" [0178.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0178.472] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115866.GIF", cAlternateFileName="")) returned 1 [0178.472] wcscmp (_String1="J0115866.GIF", _String2=".") returned 1 [0178.472] wcscmp (_String1="J0115866.GIF", _String2="..") returned 1 [0178.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5738 [0178.472] wcscpy (in: _Dest=0x7ad5738, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.472] wcscat (in: _Dest=0x7ad5738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.472] wcscat (in: _Dest=0x7ad5738, _Source="J0115866.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" [0178.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0178.474] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115867.GIF", cAlternateFileName="")) returned 1 [0178.474] wcscmp (_String1="J0115867.GIF", _String2=".") returned 1 [0178.474] wcscmp (_String1="J0115867.GIF", _String2="..") returned 1 [0178.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad67d8 [0178.474] wcscpy (in: _Dest=0x7ad67d8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.474] wcscat (in: _Dest=0x7ad67d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.474] wcscat (in: _Dest=0x7ad67d8, _Source="J0115867.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" [0178.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad67d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0178.475] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115868.GIF", cAlternateFileName="")) returned 1 [0178.475] wcscmp (_String1="J0115868.GIF", _String2=".") returned 1 [0178.475] wcscmp (_String1="J0115868.GIF", _String2="..") returned 1 [0178.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6870 [0178.476] wcscpy (in: _Dest=0x7ad6870, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS" [0178.476] wcscat (in: _Dest=0x7ad6870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\" [0178.476] wcscat (in: _Dest=0x7ad6870, _Source="J0115868.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" [0178.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0178.480] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee2fdc00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee2fdc00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115868.GIF", cAlternateFileName="")) returned 0 [0179.201] FindClose (in: hFindFile=0x3e740b0 | out: hFindFile=0x3e740b0) returned 1 [0179.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 [0179.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa220) returned 1 [0179.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5c70) returned 1 Thread: id = 1497 os_tid = 0x1f04 [0140.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3efb620 [0140.163] wcscpy (in: _Dest=0x3efb620, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0140.163] wcscat (in: _Dest=0x3efb620, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0140.164] wcscat (in: _Dest=0x3efb620, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*" [0140.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb15a8 [0140.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0141.683] wcscmp (_String1=".", _String2=".") returned 0 [0141.683] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76a44b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe014990, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.684] wcscmp (_String1="..", _String2=".") returned 1 [0141.684] wcscmp (_String1="..", _String2="..") returned 0 [0141.684] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30432a00, ftCreationTime.dwHighDateTime=0x1bd5f12, ftLastAccessTime.dwLowDateTime=0xbd3231f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x30432a00, ftLastWriteTime.dwHighDateTime=0x1bd5f12, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10219_.GIF", cAlternateFileName="")) returned 1 [0141.684] wcscmp (_String1="BD10219_.GIF", _String2=".") returned 1 [0141.684] wcscmp (_String1="BD10219_.GIF", _String2="..") returned 1 [0141.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1448 [0141.685] wcscpy (in: _Dest=0x3df1448, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0141.685] wcscat (in: _Dest=0x3df1448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0141.685] wcscat (in: _Dest=0x3df1448, _Source="BD10219_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" [0158.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0158.697] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0ea300, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd349350, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e0ea300, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10256_.GIF", cAlternateFileName="")) returned 1 [0158.697] wcscmp (_String1="BD10256_.GIF", _String2=".") returned 1 [0158.697] wcscmp (_String1="BD10256_.GIF", _String2="..") returned 1 [0158.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61440 [0158.698] wcscpy (in: _Dest=0x7a61440, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.698] wcscat (in: _Dest=0x7a61440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.698] wcscat (in: _Dest=0x7a61440, _Source="BD10256_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" [0158.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0158.699] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337f400, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x337f400, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10289_.GIF", cAlternateFileName="")) returned 1 [0158.699] wcscmp (_String1="BD10289_.GIF", _String2=".") returned 1 [0158.699] wcscmp (_String1="BD10289_.GIF", _String2="..") returned 1 [0158.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60c60 [0158.699] wcscpy (in: _Dest=0x7a60c60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.699] wcscat (in: _Dest=0x7a60c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.699] wcscat (in: _Dest=0x7a60c60, _Source="BD10289_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" [0158.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0158.700] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337f400, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd36f4b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x337f400, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10290_.GIF", cAlternateFileName="")) returned 1 [0158.700] wcscmp (_String1="BD10290_.GIF", _String2=".") returned 1 [0158.700] wcscmp (_String1="BD10290_.GIF", _String2="..") returned 1 [0158.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60900 [0158.700] wcscpy (in: _Dest=0x7a60900, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.700] wcscat (in: _Dest=0x7a60900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.700] wcscat (in: _Dest=0x7a60900, _Source="BD10290_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" [0158.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0158.702] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92dd500, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x92dd500, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10307_.GIF", cAlternateFileName="")) returned 1 [0158.702] wcscmp (_String1="BD10307_.GIF", _String2=".") returned 1 [0158.702] wcscmp (_String1="BD10307_.GIF", _String2="..") returned 1 [0158.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60480 [0158.702] wcscpy (in: _Dest=0x7a60480, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.702] wcscat (in: _Dest=0x7a60480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.702] wcscat (in: _Dest=0x7a60480, _Source="BD10307_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" [0158.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0158.703] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f0200, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd395610, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5f0200, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10308_.GIF", cAlternateFileName="")) returned 1 [0158.703] wcscmp (_String1="BD10308_.GIF", _String2=".") returned 1 [0158.703] wcscmp (_String1="BD10308_.GIF", _String2="..") returned 1 [0158.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60630 [0158.703] wcscpy (in: _Dest=0x7a60630, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.703] wcscat (in: _Dest=0x7a60630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.703] wcscat (in: _Dest=0x7a60630, _Source="BD10308_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" [0158.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0158.704] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfddba900, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfddba900, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10358_.GIF", cAlternateFileName="")) returned 1 [0158.704] wcscmp (_String1="BD10358_.GIF", _String2=".") returned 1 [0158.704] wcscmp (_String1="BD10358_.GIF", _String2="..") returned 1 [0158.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60e10 [0158.704] wcscpy (in: _Dest=0x7a60e10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.704] wcscat (in: _Dest=0x7a60e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.704] wcscat (in: _Dest=0x7a60e10, _Source="BD10358_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" [0158.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0158.705] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e520700, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd3bb770, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e520700, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14516_.GIF", cAlternateFileName="")) returned 1 [0158.705] wcscmp (_String1="BD14516_.GIF", _String2=".") returned 1 [0158.705] wcscmp (_String1="BD14516_.GIF", _String2="..") returned 1 [0158.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60870 [0158.705] wcscpy (in: _Dest=0x7a60870, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.705] wcscat (in: _Dest=0x7a60870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.705] wcscat (in: _Dest=0x7a60870, _Source="BD14516_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" [0158.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0158.706] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0ea300, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3e0ea300, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x617, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14538_.GIF", cAlternateFileName="")) returned 1 [0158.706] wcscmp (_String1="BD14538_.GIF", _String2=".") returned 1 [0158.706] wcscmp (_String1="BD14538_.GIF", _String2="..") returned 1 [0158.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a606c0 [0158.707] wcscpy (in: _Dest=0x7a606c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.707] wcscat (in: _Dest=0x7a606c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.707] wcscat (in: _Dest=0x7a606c0, _Source="BD14538_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" [0158.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a606c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0158.708] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3fd000, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd3e18d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f3fd000, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14539_.GIF", cAlternateFileName="")) returned 1 [0158.708] wcscmp (_String1="BD14539_.GIF", _String2=".") returned 1 [0158.708] wcscmp (_String1="BD14539_.GIF", _String2="..") returned 1 [0158.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60240 [0158.708] wcscpy (in: _Dest=0x7a60240, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.708] wcscat (in: _Dest=0x7a60240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.708] wcscat (in: _Dest=0x7a60240, _Source="BD14539_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" [0158.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0158.709] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19de4b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd407a30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19de4b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14594_.GIF", cAlternateFileName="")) returned 1 [0158.709] wcscmp (_String1="BD14594_.GIF", _String2=".") returned 1 [0158.709] wcscmp (_String1="BD14594_.GIF", _String2="..") returned 1 [0158.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a603f0 [0158.709] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.709] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.709] wcscat (in: _Dest=0x7a603f0, _Source="BD14594_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" [0158.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a603f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0158.710] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19de4b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19de4b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14595_.GIF", cAlternateFileName="")) returned 1 [0158.710] wcscmp (_String1="BD14595_.GIF", _String2=".") returned 1 [0158.711] wcscmp (_String1="BD14595_.GIF", _String2="..") returned 1 [0158.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a605a0 [0158.711] wcscpy (in: _Dest=0x7a605a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.711] wcscat (in: _Dest=0x7a605a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.711] wcscat (in: _Dest=0x7a605a0, _Source="BD14595_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" [0158.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a605a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0158.712] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53638600, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd42db90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x53638600, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14677_.GIF", cAlternateFileName="")) returned 1 [0158.712] wcscmp (_String1="BD14677_.GIF", _String2=".") returned 1 [0158.712] wcscmp (_String1="BD14677_.GIF", _String2="..") returned 1 [0158.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60360 [0158.712] wcscpy (in: _Dest=0x7a60360, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.712] wcscat (in: _Dest=0x7a60360, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.712] wcscat (in: _Dest=0x7a60360, _Source="BD14677_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" [0158.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0158.713] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e2cf00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd453cf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62e2cf00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14710_.GIF", cAlternateFileName="")) returned 1 [0158.713] wcscmp (_String1="BD14710_.GIF", _String2=".") returned 1 [0158.713] wcscmp (_String1="BD14710_.GIF", _String2="..") returned 1 [0158.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a615f0 [0158.713] wcscpy (in: _Dest=0x7a615f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.713] wcscat (in: _Dest=0x7a615f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.713] wcscat (in: _Dest=0x7a615f0, _Source="BD14710_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" [0158.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a615f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0158.714] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62e2cf00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd479e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62e2cf00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0xa97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14711_.GIF", cAlternateFileName="")) returned 1 [0158.714] wcscmp (_String1="BD14711_.GIF", _String2=".") returned 1 [0158.714] wcscmp (_String1="BD14711_.GIF", _String2="..") returned 1 [0158.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a602d0 [0158.715] wcscpy (in: _Dest=0x7a602d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.715] wcscat (in: _Dest=0x7a602d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.715] wcscat (in: _Dest=0x7a602d0, _Source="BD14711_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" [0158.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a602d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0158.718] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87d74200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87d74200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14768_.GIF", cAlternateFileName="")) returned 1 [0158.718] wcscmp (_String1="BD14768_.GIF", _String2=".") returned 1 [0158.718] wcscmp (_String1="BD14768_.GIF", _String2="..") returned 1 [0158.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60750 [0158.718] wcscpy (in: _Dest=0x7a60750, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.718] wcscat (in: _Dest=0x7a60750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.718] wcscat (in: _Dest=0x7a60750, _Source="BD14768_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" [0158.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0158.722] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87d74200, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd49ffb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87d74200, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14769_.GIF", cAlternateFileName="")) returned 1 [0158.722] wcscmp (_String1="BD14769_.GIF", _String2=".") returned 1 [0158.722] wcscmp (_String1="BD14769_.GIF", _String2="..") returned 1 [0158.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60510 [0158.723] wcscpy (in: _Dest=0x7a60510, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.723] wcscat (in: _Dest=0x7a60510, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.723] wcscat (in: _Dest=0x7a60510, _Source="BD14769_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" [0158.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0158.728] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3fd000, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f3fd000, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14800_.GIF", cAlternateFileName="")) returned 1 [0158.728] wcscmp (_String1="BD14800_.GIF", _String2=".") returned 1 [0158.728] wcscmp (_String1="BD14800_.GIF", _String2="..") returned 1 [0158.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60f30 [0158.728] wcscpy (in: _Dest=0x7a60f30, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.728] wcscat (in: _Dest=0x7a60f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.728] wcscat (in: _Dest=0x7a60f30, _Source="BD14800_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" [0158.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0158.733] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3fd000, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd4c6110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f3fd000, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14801_.GIF", cAlternateFileName="")) returned 1 [0158.733] wcscmp (_String1="BD14801_.GIF", _String2=".") returned 1 [0158.733] wcscmp (_String1="BD14801_.GIF", _String2="..") returned 1 [0158.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60ea0 [0158.733] wcscpy (in: _Dest=0x7a60ea0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.733] wcscat (in: _Dest=0x7a60ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.733] wcscat (in: _Dest=0x7a60ea0, _Source="BD14801_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" [0158.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0158.734] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4737a00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4737a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14844_.GIF", cAlternateFileName="")) returned 1 [0158.734] wcscmp (_String1="BD14844_.GIF", _String2=".") returned 1 [0158.734] wcscmp (_String1="BD14844_.GIF", _String2="..") returned 1 [0158.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61050 [0158.734] wcscpy (in: _Dest=0x7a61050, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.734] wcscat (in: _Dest=0x7a61050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.734] wcscat (in: _Dest=0x7a61050, _Source="BD14844_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" [0158.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0158.736] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4737a00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd4ec270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4737a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14845_.GIF", cAlternateFileName="")) returned 1 [0158.736] wcscmp (_String1="BD14845_.GIF", _String2=".") returned 1 [0158.736] wcscmp (_String1="BD14845_.GIF", _String2="..") returned 1 [0158.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a610e0 [0158.736] wcscpy (in: _Dest=0x7a610e0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.736] wcscat (in: _Dest=0x7a610e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.736] wcscat (in: _Dest=0x7a610e0, _Source="BD14845_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" [0158.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a610e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0158.738] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f2c300, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3f2c300, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14882_.GIF", cAlternateFileName="")) returned 1 [0158.738] wcscmp (_String1="BD14882_.GIF", _String2=".") returned 1 [0158.738] wcscmp (_String1="BD14882_.GIF", _String2="..") returned 1 [0158.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60090 [0158.738] wcscpy (in: _Dest=0x7a60090, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.738] wcscat (in: _Dest=0x7a60090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.738] wcscat (in: _Dest=0x7a60090, _Source="BD14882_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" [0158.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0158.739] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f2c300, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd5123d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3f2c300, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14883_.GIF", cAlternateFileName="")) returned 1 [0158.739] wcscmp (_String1="BD14883_.GIF", _String2=".") returned 1 [0158.739] wcscmp (_String1="BD14883_.GIF", _String2="..") returned 1 [0158.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60120 [0158.740] wcscpy (in: _Dest=0x7a60120, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.740] wcscat (in: _Dest=0x7a60120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.740] wcscat (in: _Dest=0x7a60120, _Source="BD14883_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" [0158.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0158.741] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8963e00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd538530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8963e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14996_.GIF", cAlternateFileName="")) returned 1 [0158.741] wcscmp (_String1="BD14996_.GIF", _String2=".") returned 1 [0158.741] wcscmp (_String1="BD14996_.GIF", _String2="..") returned 1 [0158.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61950 [0158.741] wcscpy (in: _Dest=0x7a61950, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0158.741] wcscat (in: _Dest=0x7a61950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0158.741] wcscat (in: _Dest=0x7a61950, _Source="BD14996_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" [0158.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0159.174] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8963e00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd55e690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8963e00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD14997_.GIF", cAlternateFileName="")) returned 1 [0159.174] wcscmp (_String1="BD14997_.GIF", _String2=".") returned 1 [0159.174] wcscmp (_String1="BD14997_.GIF", _String2="..") returned 1 [0159.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45890 [0159.174] wcscpy (in: _Dest=0x3d45890, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0159.174] wcscat (in: _Dest=0x3d45890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0159.174] wcscat (in: _Dest=0x3d45890, _Source="BD14997_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" [0167.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0167.226] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16e45a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16e45a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15034_.GIF", cAlternateFileName="")) returned 1 [0167.226] wcscmp (_String1="BD15034_.GIF", _String2=".") returned 1 [0167.227] wcscmp (_String1="BD15034_.GIF", _String2="..") returned 1 [0167.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d449f0 [0167.227] wcscpy (in: _Dest=0x3d449f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.227] wcscat (in: _Dest=0x3d449f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.227] wcscat (in: _Dest=0x3d449f0, _Source="BD15034_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" [0167.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d449f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454 [0167.228] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16e45a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5847f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16e45a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15035_.GIF", cAlternateFileName="")) returned 1 [0167.228] wcscmp (_String1="BD15035_.GIF", _String2=".") returned 1 [0167.228] wcscmp (_String1="BD15035_.GIF", _String2="..") returned 1 [0167.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45da0 [0167.228] wcscpy (in: _Dest=0x3d45da0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.228] wcscat (in: _Dest=0x3d45da0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.228] wcscat (in: _Dest=0x3d45da0, _Source="BD15035_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" [0167.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0167.229] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x311e3800, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x311e3800, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15072_.GIF", cAlternateFileName="")) returned 1 [0167.230] wcscmp (_String1="BD15072_.GIF", _String2=".") returned 1 [0167.230] wcscmp (_String1="BD15072_.GIF", _String2="..") returned 1 [0167.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45380 [0167.230] wcscpy (in: _Dest=0x3d45380, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.230] wcscat (in: _Dest=0x3d45380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.230] wcscat (in: _Dest=0x3d45380, _Source="BD15072_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" [0167.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x145c [0167.231] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324f6500, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5aa950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x324f6500, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15073_.GIF", cAlternateFileName="")) returned 1 [0167.231] wcscmp (_String1="BD15073_.GIF", _String2=".") returned 1 [0167.231] wcscmp (_String1="BD15073_.GIF", _String2="..") returned 1 [0167.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44330 [0167.231] wcscpy (in: _Dest=0x3d44330, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.231] wcscat (in: _Dest=0x3d44330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.231] wcscat (in: _Dest=0x3d44330, _Source="BD15073_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" [0167.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0167.233] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4070fd00, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4070fd00, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15155_.GIF", cAlternateFileName="")) returned 1 [0167.233] wcscmp (_String1="BD15155_.GIF", _String2=".") returned 1 [0167.233] wcscmp (_String1="BD15155_.GIF", _String2="..") returned 1 [0167.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1448 [0167.234] wcscpy (in: _Dest=0x3df1448, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.234] wcscat (in: _Dest=0x3df1448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.234] wcscat (in: _Dest=0x3df1448, _Source="BD15155_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" [0167.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0167.235] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4070fd00, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd5d0ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4070fd00, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15156_.GIF", cAlternateFileName="")) returned 1 [0167.235] wcscmp (_String1="BD15156_.GIF", _String2=".") returned 1 [0167.235] wcscmp (_String1="BD15156_.GIF", _String2="..") returned 1 [0167.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2eb8 [0167.235] wcscpy (in: _Dest=0x3df2eb8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.235] wcscat (in: _Dest=0x3df2eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.235] wcscat (in: _Dest=0x3df2eb8, _Source="BD15156_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" [0167.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0167.236] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69257b00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x69257b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15184_.GIF", cAlternateFileName="")) returned 1 [0167.236] wcscmp (_String1="BD15184_.GIF", _String2=".") returned 1 [0167.236] wcscmp (_String1="BD15184_.GIF", _String2="..") returned 1 [0167.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1b98 [0167.236] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.236] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.236] wcscat (in: _Dest=0x3df1b98, _Source="BD15184_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" [0167.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0167.237] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69257b00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd5f6c10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x69257b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15185_.GIF", cAlternateFileName="")) returned 1 [0167.237] wcscmp (_String1="BD15185_.GIF", _String2=".") returned 1 [0167.237] wcscmp (_String1="BD15185_.GIF", _String2="..") returned 1 [0167.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1c28 [0167.237] wcscpy (in: _Dest=0x3df1c28, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.237] wcscat (in: _Dest=0x3df1c28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.237] wcscat (in: _Dest=0x3df1c28, _Source="BD15185_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" [0167.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0167.239] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a22a00, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x41a22a00, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15301_.GIF", cAlternateFileName="")) returned 1 [0167.242] wcscmp (_String1="BD15301_.GIF", _String2=".") returned 1 [0167.242] wcscmp (_String1="BD15301_.GIF", _String2="..") returned 1 [0167.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2d08 [0167.243] wcscpy (in: _Dest=0x3df2d08, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.243] wcscat (in: _Dest=0x3df2d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.243] wcscat (in: _Dest=0x3df2d08, _Source="BD15301_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" [0167.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0167.244] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c680a00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd61cd70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9c680a00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD15302_.GIF", cAlternateFileName="")) returned 1 [0167.244] wcscmp (_String1="BD15302_.GIF", _String2=".") returned 1 [0167.244] wcscmp (_String1="BD15302_.GIF", _String2="..") returned 1 [0167.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df30f8 [0167.244] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.244] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.244] wcscat (in: _Dest=0x3df30f8, _Source="BD15302_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" [0167.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df30f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0167.246] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe359b100, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe359b100, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21303_.GIF", cAlternateFileName="")) returned 1 [0167.246] wcscmp (_String1="BD21303_.GIF", _String2=".") returned 1 [0167.246] wcscmp (_String1="BD21303_.GIF", _String2="..") returned 1 [0167.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df18c8 [0167.246] wcscpy (in: _Dest=0x3df18c8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.246] wcscat (in: _Dest=0x3df18c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.246] wcscat (in: _Dest=0x3df18c8, _Source="BD21303_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" [0167.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df18c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0167.247] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8549eb00, ftCreationTime.dwHighDateTime=0x1bd4fb9, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8549eb00, ftLastWriteTime.dwHighDateTime=0x1bd4fb9, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21305_.GIF", cAlternateFileName="")) returned 1 [0167.247] wcscmp (_String1="BD21305_.GIF", _String2=".") returned 1 [0167.247] wcscmp (_String1="BD21305_.GIF", _String2="..") returned 1 [0167.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df19e8 [0167.247] wcscpy (in: _Dest=0x3df19e8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.247] wcscat (in: _Dest=0x3df19e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.247] wcscat (in: _Dest=0x3df19e8, _Source="BD21305_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" [0167.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df19e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0167.249] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744caa00, ftCreationTime.dwHighDateTime=0x1bd4fb8, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x744caa00, ftLastWriteTime.dwHighDateTime=0x1bd4fb8, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21307_.GIF", cAlternateFileName="")) returned 1 [0167.249] wcscmp (_String1="BD21307_.GIF", _String2=".") returned 1 [0167.249] wcscmp (_String1="BD21307_.GIF", _String2="..") returned 1 [0167.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df25b8 [0167.249] wcscpy (in: _Dest=0x3df25b8, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.249] wcscat (in: _Dest=0x3df25b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.249] wcscat (in: _Dest=0x3df25b8, _Source="BD21307_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" [0167.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df25b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0167.250] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb357300, ftCreationTime.dwHighDateTime=0x1bd4fb7, ftLastAccessTime.dwLowDateTime=0xbd7e5df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb357300, ftLastWriteTime.dwHighDateTime=0x1bd4fb7, nFileSizeHigh=0x0, nFileSizeLow=0xd1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21309_.GIF", cAlternateFileName="")) returned 1 [0167.250] wcscmp (_String1="BD21309_.GIF", _String2=".") returned 1 [0167.250] wcscmp (_String1="BD21309_.GIF", _String2="..") returned 1 [0167.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2648 [0167.250] wcscpy (in: _Dest=0x3df2648, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.250] wcscat (in: _Dest=0x3df2648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.250] wcscat (in: _Dest=0x3df2648, _Source="BD21309_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" [0167.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0167.251] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a93b00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2a93b00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21311_.GIF", cAlternateFileName="")) returned 1 [0167.251] wcscmp (_String1="BD21311_.GIF", _String2=".") returned 1 [0167.251] wcscmp (_String1="BD21311_.GIF", _String2="..") returned 1 [0167.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df1838 [0167.252] wcscpy (in: _Dest=0x3df1838, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.252] wcscat (in: _Dest=0x3df1838, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.252] wcscat (in: _Dest=0x3df1838, _Source="BD21311_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" [0167.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0167.253] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd046e100, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd046e100, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21313_.GIF", cAlternateFileName="")) returned 1 [0167.253] wcscmp (_String1="BD21313_.GIF", _String2=".") returned 1 [0167.253] wcscmp (_String1="BD21313_.GIF", _String2="..") returned 1 [0167.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61c20 [0167.253] wcscpy (in: _Dest=0x7a61c20, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.253] wcscat (in: _Dest=0x7a61c20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.253] wcscat (in: _Dest=0x7a61c20, _Source="BD21313_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" [0167.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0167.254] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb822d00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd80bf50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcb822d00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21315_.GIF", cAlternateFileName="")) returned 1 [0167.254] wcscmp (_String1="BD21315_.GIF", _String2=".") returned 1 [0167.254] wcscmp (_String1="BD21315_.GIF", _String2="..") returned 1 [0167.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60990 [0167.254] wcscpy (in: _Dest=0x7a60990, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.254] wcscat (in: _Dest=0x7a60990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.254] wcscat (in: _Dest=0x7a60990, _Source="BD21315_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" [0167.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4 [0167.255] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508b6300, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x508b6300, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21318_.GIF", cAlternateFileName="")) returned 1 [0167.255] wcscmp (_String1="BD21318_.GIF", _String2=".") returned 1 [0167.256] wcscmp (_String1="BD21318_.GIF", _String2="..") returned 1 [0167.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61e60 [0167.256] wcscpy (in: _Dest=0x7a61e60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.256] wcscat (in: _Dest=0x7a61e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.256] wcscat (in: _Dest=0x7a61e60, _Source="BD21318_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" [0167.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0167.257] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c476600, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c476600, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21319_.GIF", cAlternateFileName="")) returned 1 [0167.257] wcscmp (_String1="BD21319_.GIF", _String2=".") returned 1 [0167.257] wcscmp (_String1="BD21319_.GIF", _String2="..") returned 1 [0167.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61d40 [0167.257] wcscpy (in: _Dest=0x7a61d40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.257] wcscat (in: _Dest=0x7a61d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.257] wcscat (in: _Dest=0x7a61d40, _Source="BD21319_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" [0167.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0 [0167.258] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc81d00, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2cc81d00, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x664, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21320_.GIF", cAlternateFileName="")) returned 1 [0167.258] wcscmp (_String1="BD21320_.GIF", _String2=".") returned 1 [0167.258] wcscmp (_String1="BD21320_.GIF", _String2="..") returned 1 [0167.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60c60 [0167.258] wcscpy (in: _Dest=0x7a60c60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.258] wcscat (in: _Dest=0x7a60c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.258] wcscat (in: _Dest=0x7a60c60, _Source="BD21320_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" [0167.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0167.259] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae67a00, ftCreationTime.dwHighDateTime=0x1bd4fbc, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ae67a00, ftLastWriteTime.dwHighDateTime=0x1bd4fbc, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21321_.GIF", cAlternateFileName="")) returned 1 [0167.260] wcscmp (_String1="BD21321_.GIF", _String2=".") returned 1 [0167.260] wcscmp (_String1="BD21321_.GIF", _String2="..") returned 1 [0167.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60b40 [0167.260] wcscpy (in: _Dest=0x7a60b40, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.260] wcscat (in: _Dest=0x7a60b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.260] wcscat (in: _Dest=0x7a60b40, _Source="BD21321_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" [0167.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0167.261] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4911b00, ftCreationTime.dwHighDateTime=0x1bd4fbb, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd4911b00, ftLastWriteTime.dwHighDateTime=0x1bd4fbb, nFileSizeHigh=0x0, nFileSizeLow=0x4d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21322_.GIF", cAlternateFileName="")) returned 1 [0167.261] wcscmp (_String1="BD21322_.GIF", _String2=".") returned 1 [0167.261] wcscmp (_String1="BD21322_.GIF", _String2="..") returned 1 [0167.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a617a0 [0167.261] wcscpy (in: _Dest=0x7a617a0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.261] wcscat (in: _Dest=0x7a617a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.261] wcscat (in: _Dest=0x7a617a0, _Source="BD21322_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" [0167.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a617a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0167.262] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7eea600, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8320b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc7eea600, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21323_.GIF", cAlternateFileName="")) returned 1 [0167.262] wcscmp (_String1="BD21323_.GIF", _String2=".") returned 1 [0167.263] wcscmp (_String1="BD21323_.GIF", _String2="..") returned 1 [0167.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61a70 [0167.263] wcscpy (in: _Dest=0x7a61a70, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.263] wcscat (in: _Dest=0x7a61a70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.263] wcscat (in: _Dest=0x7a61a70, _Source="BD21323_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" [0167.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0167.471] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58c4c00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc58c4c00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21324_.GIF", cAlternateFileName="")) returned 1 [0167.471] wcscmp (_String1="BD21324_.GIF", _String2=".") returned 1 [0167.471] wcscmp (_String1="BD21324_.GIF", _String2="..") returned 1 [0167.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60e10 [0167.471] wcscpy (in: _Dest=0x7a60e10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0167.471] wcscat (in: _Dest=0x7a60e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0167.471] wcscat (in: _Dest=0x7a60e10, _Source="BD21324_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" [0172.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0172.696] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc329f200, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc329f200, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21325_.GIF", cAlternateFileName="")) returned 1 [0172.696] wcscmp (_String1="BD21325_.GIF", _String2=".") returned 1 [0172.696] wcscmp (_String1="BD21325_.GIF", _String2="..") returned 1 [0172.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d451d0 [0172.696] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.696] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.696] wcscat (in: _Dest=0x3d451d0, _Source="BD21325_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" [0172.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d451d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0172.697] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e36400, ftCreationTime.dwHighDateTime=0x1bd4fba, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2e36400, ftLastWriteTime.dwHighDateTime=0x1bd4fba, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21326_.GIF", cAlternateFileName="")) returned 1 [0172.697] wcscmp (_String1="BD21326_.GIF", _String2=".") returned 1 [0172.697] wcscmp (_String1="BD21326_.GIF", _String2="..") returned 1 [0172.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44960 [0172.697] wcscpy (in: _Dest=0x3d44960, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.697] wcscat (in: _Dest=0x3d44960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.698] wcscat (in: _Dest=0x3d44960, _Source="BD21326_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" [0172.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0172.699] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf966b00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbf966b00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21328_.GIF", cAlternateFileName="")) returned 1 [0172.700] wcscmp (_String1="BD21328_.GIF", _String2=".") returned 1 [0172.700] wcscmp (_String1="BD21328_.GIF", _String2="..") returned 1 [0172.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45d10 [0172.700] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.700] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.715] wcscat (in: _Dest=0x3d45d10, _Source="BD21328_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" [0172.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0172.716] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd341100, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd858210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd341100, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21330_.GIF", cAlternateFileName="")) returned 1 [0172.716] wcscmp (_String1="BD21330_.GIF", _String2=".") returned 1 [0172.716] wcscmp (_String1="BD21330_.GIF", _String2="..") returned 1 [0172.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44ba0 [0172.717] wcscpy (in: _Dest=0x3d44ba0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.717] wcscat (in: _Dest=0x3d44ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.717] wcscat (in: _Dest=0x3d44ba0, _Source="BD21330_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" [0172.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0172.718] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a08a00, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb9a08a00, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x1f91, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21332_.GIF", cAlternateFileName="")) returned 1 [0172.718] wcscmp (_String1="BD21332_.GIF", _String2=".") returned 1 [0172.718] wcscmp (_String1="BD21332_.GIF", _String2="..") returned 1 [0172.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44f00 [0172.718] wcscpy (in: _Dest=0x3d44f00, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.718] wcscat (in: _Dest=0x3d44f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.718] wcscat (in: _Dest=0x3d44f00, _Source="BD21332_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" [0172.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0172.719] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3aaa900, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3aaa900, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x888, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21334_.GIF", cAlternateFileName="")) returned 1 [0172.720] wcscmp (_String1="BD21334_.GIF", _String2=".") returned 1 [0172.720] wcscmp (_String1="BD21334_.GIF", _String2="..") returned 1 [0172.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44cc0 [0172.720] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.720] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.720] wcscat (in: _Dest=0x3d44cc0, _Source="BD21334_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" [0172.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0172.721] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a9e00, ftCreationTime.dwHighDateTime=0x1bd4fac, ftLastAccessTime.dwLowDateTime=0xbd87e370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd99a9e00, ftLastWriteTime.dwHighDateTime=0x1bd4fac, nFileSizeHigh=0x0, nFileSizeLow=0xaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21336_.GIF", cAlternateFileName="")) returned 1 [0172.721] wcscmp (_String1="BD21336_.GIF", _String2=".") returned 1 [0172.721] wcscmp (_String1="BD21336_.GIF", _String2="..") returned 1 [0172.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d447b0 [0172.721] wcscpy (in: _Dest=0x3d447b0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.721] wcscat (in: _Dest=0x3d447b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.721] wcscat (in: _Dest=0x3d447b0, _Source="BD21336_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" [0172.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d447b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0172.729] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0172200, ftCreationTime.dwHighDateTime=0x1bd4db4, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb0172200, ftLastWriteTime.dwHighDateTime=0x1bd4db4, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21338_.GIF", cAlternateFileName="")) returned 1 [0172.729] wcscmp (_String1="BD21338_.GIF", _String2=".") returned 1 [0172.729] wcscmp (_String1="BD21338_.GIF", _String2="..") returned 1 [0172.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45b60 [0172.730] wcscpy (in: _Dest=0x3d45b60, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.730] wcscat (in: _Dest=0x3d45b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.730] wcscat (in: _Dest=0x3d45b60, _Source="BD21338_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" [0172.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0172.731] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf885400, ftCreationTime.dwHighDateTime=0x1bd4fa6, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf885400, ftLastWriteTime.dwHighDateTime=0x1bd4fa6, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21340_.GIF", cAlternateFileName="")) returned 1 [0172.731] wcscmp (_String1="BD21340_.GIF", _String2=".") returned 1 [0172.732] wcscmp (_String1="BD21340_.GIF", _String2="..") returned 1 [0172.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44060 [0172.732] wcscpy (in: _Dest=0x3d44060, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.732] wcscat (in: _Dest=0x3d44060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.732] wcscat (in: _Dest=0x3d44060, _Source="BD21340_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" [0172.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0172.733] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdd7600, ftCreationTime.dwHighDateTime=0x1bd93cc, ftLastAccessTime.dwLowDateTime=0xbd8a44d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3cdd7600, ftLastWriteTime.dwHighDateTime=0x1bd93cc, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21348_.GIF", cAlternateFileName="")) returned 1 [0172.733] wcscmp (_String1="BD21348_.GIF", _String2=".") returned 1 [0172.733] wcscmp (_String1="BD21348_.GIF", _String2="..") returned 1 [0172.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d455c0 [0172.733] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.733] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.733] wcscat (in: _Dest=0x3d455c0, _Source="BD21348_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" [0172.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0172.734] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe997ac00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd8ca630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe997ac00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x8e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21370_.GIF", cAlternateFileName="")) returned 1 [0172.734] wcscmp (_String1="BD21370_.GIF", _String2=".") returned 1 [0172.734] wcscmp (_String1="BD21370_.GIF", _String2="..") returned 1 [0172.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45c80 [0172.734] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.735] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.735] wcscat (in: _Dest=0x3d45c80, _Source="BD21370_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" [0172.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0172.736] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d01c00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22d01c00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21390_.GIF", cAlternateFileName="")) returned 1 [0172.736] wcscmp (_String1="BD21390_.GIF", _String2=".") returned 1 [0172.736] wcscmp (_String1="BD21390_.GIF", _String2="..") returned 1 [0172.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44b10 [0172.736] wcscpy (in: _Dest=0x3d44b10, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.736] wcscat (in: _Dest=0x3d44b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.736] wcscat (in: _Dest=0x3d44b10, _Source="BD21390_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" [0172.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0172.737] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c894300, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd8f0790, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4c894300, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21413_.GIF", cAlternateFileName="")) returned 1 [0172.738] wcscmp (_String1="BD21413_.GIF", _String2=".") returned 1 [0172.738] wcscmp (_String1="BD21413_.GIF", _String2="..") returned 1 [0172.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44450 [0172.738] wcscpy (in: _Dest=0x3d44450, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.738] wcscat (in: _Dest=0x3d44450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.738] wcscat (in: _Dest=0x3d44450, _Source="BD21413_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" [0172.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0172.739] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa25deb00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa25deb00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21427_.GIF", cAlternateFileName="")) returned 1 [0172.739] wcscmp (_String1="BD21427_.GIF", _String2=".") returned 1 [0172.739] wcscmp (_String1="BD21427_.GIF", _String2="..") returned 1 [0172.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44570 [0172.739] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.739] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.739] wcscat (in: _Dest=0x3d44570, _Source="BD21427_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" [0172.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0172.740] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf11b00, ftCreationTime.dwHighDateTime=0x1bd8ff5, ftLastAccessTime.dwLowDateTime=0xbd9168f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2cf11b00, ftLastWriteTime.dwHighDateTime=0x1bd8ff5, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21448_.GIF", cAlternateFileName="")) returned 1 [0172.740] wcscmp (_String1="BD21448_.GIF", _String2=".") returned 1 [0172.740] wcscmp (_String1="BD21448_.GIF", _String2="..") returned 1 [0172.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45800 [0172.741] wcscpy (in: _Dest=0x3d45800, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.741] wcscat (in: _Dest=0x3d45800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.741] wcscat (in: _Dest=0x3d45800, _Source="BD21448_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" [0172.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0172.742] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0beba00, ftCreationTime.dwHighDateTime=0x1bd8ff6, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf0beba00, ftLastWriteTime.dwHighDateTime=0x1bd8ff6, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21495_.GIF", cAlternateFileName="")) returned 1 [0172.742] wcscmp (_String1="BD21495_.GIF", _String2=".") returned 1 [0172.742] wcscmp (_String1="BD21495_.GIF", _String2="..") returned 1 [0172.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d448d0 [0172.742] wcscpy (in: _Dest=0x3d448d0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.742] wcscat (in: _Dest=0x3d448d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.742] wcscat (in: _Dest=0x3d448d0, _Source="BD21495_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" [0172.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d448d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0172.743] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28c5fd00, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd93ca50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28c5fd00, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21512_.GIF", cAlternateFileName="")) returned 1 [0172.743] wcscmp (_String1="BD21512_.GIF", _String2=".") returned 1 [0172.743] wcscmp (_String1="BD21512_.GIF", _String2="..") returned 1 [0172.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45890 [0172.743] wcscpy (in: _Dest=0x3d45890, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.743] wcscat (in: _Dest=0x3d45890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.743] wcscat (in: _Dest=0x3d45890, _Source="BD21512_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" [0172.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0172.745] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f2400, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd962bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x527f2400, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x24e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21527_.GIF", cAlternateFileName="")) returned 1 [0172.746] wcscmp (_String1="BD21527_.GIF", _String2=".") returned 1 [0172.746] wcscmp (_String1="BD21527_.GIF", _String2="..") returned 1 [0172.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44a80 [0172.746] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.746] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.746] wcscat (in: _Dest=0x3d44a80, _Source="BD21527_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" [0172.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0172.747] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaab62600, ftCreationTime.dwHighDateTime=0x1bd8ff7, ftLastAccessTime.dwLowDateTime=0xbd988d10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaab62600, ftLastWriteTime.dwHighDateTime=0x1bd8ff7, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD21548_.GIF", cAlternateFileName="")) returned 1 [0172.748] wcscmp (_String1="BD21548_.GIF", _String2=".") returned 1 [0172.748] wcscmp (_String1="BD21548_.GIF", _String2="..") returned 1 [0172.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45530 [0172.748] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.748] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.748] wcscat (in: _Dest=0x3d45530, _Source="BD21548_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" [0172.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0172.749] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe708ce00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfc86d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe708ce00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115855.GIF", cAlternateFileName="")) returned 1 [0172.749] wcscmp (_String1="J0115855.GIF", _String2=".") returned 1 [0172.749] wcscmp (_String1="J0115855.GIF", _String2="..") returned 1 [0172.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44330 [0172.749] wcscpy (in: _Dest=0x3d44330, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.749] wcscat (in: _Dest=0x3d44330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.749] wcscat (in: _Dest=0x3d44330, _Source="J0115855.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" [0172.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0172.750] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe708ce00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbdfc86d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe708ce00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115856.GIF", cAlternateFileName="")) returned 1 [0172.750] wcscmp (_String1="J0115856.GIF", _String2=".") returned 1 [0172.750] wcscmp (_String1="J0115856.GIF", _String2="..") returned 1 [0172.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45380 [0172.751] wcscpy (in: _Dest=0x3d45380, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.751] wcscat (in: _Dest=0x3d45380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.751] wcscat (in: _Dest=0x3d45380, _Source="J0115856.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" [0172.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0172.752] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf556ea00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf556ea00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115875.GIF", cAlternateFileName="")) returned 1 [0172.752] wcscmp (_String1="J0115875.GIF", _String2=".") returned 1 [0172.752] wcscmp (_String1="J0115875.GIF", _String2="..") returned 1 [0172.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45da0 [0172.752] wcscpy (in: _Dest=0x3d45da0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.752] wcscat (in: _Dest=0x3d45da0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.752] wcscat (in: _Dest=0x3d45da0, _Source="J0115875.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" [0172.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0172.753] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf556ea00, ftCreationTime.dwHighDateTime=0x1bd93cb, ftLastAccessTime.dwLowDateTime=0xbe014990, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf556ea00, ftLastWriteTime.dwHighDateTime=0x1bd93cb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0115876.GIF", cAlternateFileName="")) returned 1 [0172.753] wcscmp (_String1="J0115876.GIF", _String2=".") returned 1 [0172.754] wcscmp (_String1="J0115876.GIF", _String2="..") returned 1 [0172.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d449f0 [0172.754] wcscpy (in: _Dest=0x3d449f0, _Source="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES" [0172.754] wcscat (in: _Dest=0x3d449f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\" [0172.754] wcscat (in: _Dest=0x3d449f0, _Source="J0115876.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF") returned="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" [0172.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d449f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0172.755] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x3798, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 1 [0172.755] wcscmp (_String1="LINES.DLL", _String2=".") returned 1 [0172.755] wcscmp (_String1="LINES.DLL", _String2="..") returned 1 [0172.755] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb03f00, ftCreationTime.dwHighDateTime=0x1ca9185, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4bb03f00, ftLastWriteTime.dwHighDateTime=0x1ca9185, nFileSizeHigh=0x0, nFileSizeLow=0x3798, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINES.DLL", cAlternateFileName="")) returned 0 [0172.755] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0172.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb15a8) returned 1 [0172.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb620) returned 1 [0172.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 Thread: id = 1498 os_tid = 0x1f08 [0140.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw")) returned 0x20 [0141.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW", dwFileAttributes=0x20) returned 0 [0141.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.685] GetLastError () returned 0x5 [0141.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW", dwFileAttributes=0x20) returned 0 [0141.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 1499 os_tid = 0x1f0c [0140.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66258 [0140.165] wcscpy (in: _Dest=0x3e66258, _Source="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0140.165] wcscat (in: _Dest=0x3e66258, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\" [0140.165] wcscat (in: _Dest=0x3e66258, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*") returned="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*" [0140.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0140.165] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0140.166] wcscmp (_String1=".", _String2=".") returned 0 [0140.166] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.166] wcscmp (_String1="..", _String2=".") returned 1 [0140.166] wcscmp (_String1="..", _String2="..") returned 0 [0140.166] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0140.166] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0140.166] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0140.166] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0140.166] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0140.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0140.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66258) returned 1 [0140.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 Thread: id = 1500 os_tid = 0x1f10 [0140.167] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms")) returned 0x20 [0141.687] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0141.688] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.688] GetLastError () returned 0x5 [0141.688] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0141.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf1f8) returned 1 Thread: id = 1501 os_tid = 0x1f14 [0140.168] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms")) returned 0x20 [0141.691] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0141.691] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0141.691] GetLastError () returned 0x5 [0141.691] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0141.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dde3e8) returned 1 Thread: id = 1502 os_tid = 0x1f18 [0140.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0b98 [0140.169] wcscpy (in: _Dest=0x3ee0b98, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0140.169] wcscat (in: _Dest=0x3ee0b98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\" [0140.169] wcscat (in: _Dest=0x3ee0b98, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*" [0140.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0140.169] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0140.169] wcscmp (_String1=".", _String2=".") returned 0 [0140.169] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.169] wcscmp (_String1="..", _String2=".") returned 1 [0140.169] wcscmp (_String1="..", _String2="..") returned 0 [0140.169] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0140.169] wcscmp (_String1="1036", _String2=".") returned 1 [0140.169] wcscmp (_String1="1036", _String2="..") returned 1 [0140.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b30 [0140.169] wcscpy (in: _Dest=0x3ee0b30, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0140.169] wcscat (in: _Dest=0x3ee0b30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\" [0140.169] wcscat (in: _Dest=0x3ee0b30, _Source="1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0144.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x241c [0144.125] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0144.125] wcscmp (_String1="3082", _String2=".") returned 1 [0144.125] wcscmp (_String1="3082", _String2="..") returned 1 [0144.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0928 [0144.125] wcscpy (in: _Dest=0x3ee0928, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" [0144.125] wcscat (in: _Dest=0x3ee0928, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\" [0144.125] wcscat (in: _Dest=0x3ee0928, _Source="3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0144.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ee0928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0144.126] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0144.126] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0144.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0144.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 [0144.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6e48) returned 1 Thread: id = 1503 os_tid = 0x1f1c [0140.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat")) returned 0x20 [0142.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0142.609] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.609] GetLastError () returned 0x5 [0142.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT", dwFileAttributes=0x20) returned 0 [0142.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5b70) returned 1 Thread: id = 1504 os_tid = 0x1f20 [0140.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs")) returned 0x20 [0143.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0143.202] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.202] GetLastError () returned 0x5 [0143.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS", dwFileAttributes=0x20) returned 0 [0143.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19998) returned 1 Thread: id = 1505 os_tid = 0x1f24 [0140.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht")) returned 0x20 [0143.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0143.203] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.203] GetLastError () returned 0x5 [0143.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT", dwFileAttributes=0x20) returned 0 [0143.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a198) returned 1 Thread: id = 1506 os_tid = 0x1f28 [0140.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze")) returned 0x20 [0143.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0143.212] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.212] GetLastError () returned 0x5 [0143.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE", dwFileAttributes=0x20) returned 0 [0143.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b18) returned 1 Thread: id = 1507 os_tid = 0x1f2c [0140.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan")) returned 0x20 [0142.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0142.118] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.118] GetLastError () returned 0x5 [0142.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN", dwFileAttributes=0x20) returned 0 [0142.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a118) returned 1 Thread: id = 1508 os_tid = 0x1f30 [0140.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu")) returned 0x20 [0143.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0143.240] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.240] GetLastError () returned 0x5 [0143.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU", dwFileAttributes=0x20) returned 0 [0143.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a098) returned 1 Thread: id = 1509 os_tid = 0x1f34 [0140.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp")) returned 0x20 [0143.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0143.241] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.242] GetLastError () returned 0x5 [0143.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP", dwFileAttributes=0x20) returned 0 [0143.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a298) returned 1 Thread: id = 1510 os_tid = 0x1f38 [0140.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq")) returned 0x20 [0143.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0143.219] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.219] GetLastError () returned 0x5 [0143.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ", dwFileAttributes=0x20) returned 0 [0143.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19398) returned 1 Thread: id = 1511 os_tid = 0x1f3c [0140.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra")) returned 0x20 [0143.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0143.199] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.199] GetLastError () returned 0x5 [0143.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA", dwFileAttributes=0x20) returned 0 [0143.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19898) returned 1 Thread: id = 1512 os_tid = 0x1f40 [0140.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv")) returned 0x20 [0143.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0143.221] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.221] GetLastError () returned 0x5 [0143.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV", dwFileAttributes=0x20) returned 0 [0143.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a418) returned 1 Thread: id = 1513 os_tid = 0x1f44 [0140.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun")) returned 0x20 [0143.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0143.222] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.222] GetLastError () returned 0x5 [0143.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN", dwFileAttributes=0x20) returned 0 [0143.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 Thread: id = 1514 os_tid = 0x1f48 [0140.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita")) returned 0x20 [0143.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0143.213] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.213] GetLastError () returned 0x5 [0143.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA", dwFileAttributes=0x20) returned 0 [0143.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19698) returned 1 Thread: id = 1515 os_tid = 0x1f4c [0140.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn")) returned 0x20 [0143.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0143.215] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.215] GetLastError () returned 0x5 [0143.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN", dwFileAttributes=0x20) returned 0 [0143.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19418) returned 1 Thread: id = 1516 os_tid = 0x1f50 [0140.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor")) returned 0x20 [0143.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0143.223] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.223] GetLastError () returned 0x5 [0143.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR", dwFileAttributes=0x20) returned 0 [0143.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a818) returned 1 Thread: id = 1517 os_tid = 0x1f54 [0140.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld")) returned 0x20 [0143.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0143.216] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.216] GetLastError () returned 0x5 [0143.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD", dwFileAttributes=0x20) returned 0 [0143.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab18) returned 1 Thread: id = 1518 os_tid = 0x1f58 [0140.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor")) returned 0x20 [0143.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0143.225] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.225] GetLastError () returned 0x5 [0143.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR", dwFileAttributes=0x20) returned 0 [0143.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x303290) returned 1 Thread: id = 1519 os_tid = 0x1f5c [0140.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol")) returned 0x20 [0143.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0143.226] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.226] GetLastError () returned 0x5 [0143.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL", dwFileAttributes=0x20) returned 0 [0143.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47498) returned 1 Thread: id = 1520 os_tid = 0x1f60 [0140.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb")) returned 0x20 [0143.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0143.228] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.228] GetLastError () returned 0x5 [0143.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB", dwFileAttributes=0x20) returned 0 [0143.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46518) returned 1 Thread: id = 1521 os_tid = 0x1f64 [0140.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum")) returned 0x20 [0143.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0143.229] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.229] GetLastError () returned 0x5 [0143.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM", dwFileAttributes=0x20) returned 0 [0143.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46b98) returned 1 Thread: id = 1522 os_tid = 0x1f68 [0140.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus")) returned 0x20 [0143.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0143.231] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.231] GetLastError () returned 0x5 [0143.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS", dwFileAttributes=0x20) returned 0 [0143.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47398) returned 1 Thread: id = 1523 os_tid = 0x1f6c [0140.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky")) returned 0x20 [0143.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0143.233] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.233] GetLastError () returned 0x5 [0143.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY", dwFileAttributes=0x20) returned 0 [0143.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47518) returned 1 Thread: id = 1524 os_tid = 0x1f70 [0140.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv")) returned 0x20 [0143.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0143.234] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.234] GetLastError () returned 0x5 [0143.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV", dwFileAttributes=0x20) returned 0 [0143.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f98) returned 1 Thread: id = 1525 os_tid = 0x1f74 [0140.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo")) returned 0x20 [0143.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0143.218] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.218] GetLastError () returned 0x5 [0143.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO", dwFileAttributes=0x20) returned 0 [0143.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a18) returned 1 Thread: id = 1526 os_tid = 0x1f78 [0140.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve")) returned 0x20 [0143.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0143.236] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.236] GetLastError () returned 0x5 [0143.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE", dwFileAttributes=0x20) returned 0 [0143.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c18) returned 1 Thread: id = 1527 os_tid = 0x1f7c [0140.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur")) returned 0x20 [0143.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0143.237] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.237] GetLastError () returned 0x5 [0143.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR", dwFileAttributes=0x20) returned 0 [0143.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47098) returned 1 Thread: id = 1528 os_tid = 0x1f80 [0140.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr")) returned 0x20 [0143.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0143.238] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.238] GetLastError () returned 0x5 [0143.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR", dwFileAttributes=0x20) returned 0 [0143.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46198) returned 1 Thread: id = 1529 os_tid = 0x1f84 [0140.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam")) returned 0x20 [0140.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM", dwFileAttributes=0x20) returned 0 [0140.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.187] GetLastError () returned 0x5 [0140.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM", dwFileAttributes=0x20) returned 0 [0140.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 Thread: id = 1530 os_tid = 0x1f88 [0140.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae")) returned 0x20 [0140.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE", dwFileAttributes=0x20) returned 0 [0140.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.189] GetLastError () returned 0x5 [0140.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE", dwFileAttributes=0x20) returned 0 [0140.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 1531 os_tid = 0x1f8c [0140.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam")) returned 0x20 [0140.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM", dwFileAttributes=0x20) returned 0 [0140.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.190] GetLastError () returned 0x5 [0140.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM", dwFileAttributes=0x20) returned 0 [0140.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45380) returned 1 Thread: id = 1532 os_tid = 0x1f90 [0140.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae")) returned 0x20 [0142.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE", dwFileAttributes=0x20) returned 0 [0142.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.611] GetLastError () returned 0x5 [0142.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE", dwFileAttributes=0x20) returned 0 [0142.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d459b0) returned 1 Thread: id = 1533 os_tid = 0x1f94 [0140.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae")) returned 0x20 [0143.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE", dwFileAttributes=0x20) returned 0 [0143.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.244] GetLastError () returned 0x5 [0143.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE", dwFileAttributes=0x20) returned 0 [0143.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 1534 os_tid = 0x1f98 [0140.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae")) returned 0x20 [0143.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE", dwFileAttributes=0x20) returned 0 [0143.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.251] GetLastError () returned 0x5 [0143.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE", dwFileAttributes=0x20) returned 0 [0143.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 1535 os_tid = 0x1f9c [0140.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae")) returned 0x20 [0143.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE", dwFileAttributes=0x20) returned 0 [0143.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.253] GetLastError () returned 0x5 [0143.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE", dwFileAttributes=0x20) returned 0 [0143.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 Thread: id = 1536 os_tid = 0x1fa0 [0140.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae")) returned 0x20 [0143.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE", dwFileAttributes=0x20) returned 0 [0143.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.254] GetLastError () returned 0x5 [0143.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE", dwFileAttributes=0x20) returned 0 [0143.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 1537 os_tid = 0x1fa4 [0140.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam")) returned 0x20 [0143.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM", dwFileAttributes=0x20) returned 0 [0143.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.255] GetLastError () returned 0x5 [0143.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM", dwFileAttributes=0x20) returned 0 [0143.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 1538 os_tid = 0x1fa8 [0140.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae")) returned 0x20 [0143.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE", dwFileAttributes=0x20) returned 0 [0143.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.257] GetLastError () returned 0x5 [0143.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE", dwFileAttributes=0x20) returned 0 [0143.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 Thread: id = 1539 os_tid = 0x1fac [0140.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam")) returned 0x20 [0142.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM", dwFileAttributes=0x20) returned 0 [0142.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.121] GetLastError () returned 0x5 [0142.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM", dwFileAttributes=0x20) returned 0 [0142.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 1540 os_tid = 0x1fb0 [0140.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam")) returned 0x20 [0143.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM", dwFileAttributes=0x20) returned 0 [0143.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.243] GetLastError () returned 0x5 [0143.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM", dwFileAttributes=0x20) returned 0 [0143.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 Thread: id = 1541 os_tid = 0x1fb4 [0140.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a385b0 [0140.197] wcscpy (in: _Dest=0x7a385b0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" [0140.197] wcscat (in: _Dest=0x7a385b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\" [0140.197] wcscat (in: _Dest=0x7a385b0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*" [0140.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2418 [0140.197] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa90 [0142.615] wcscmp (_String1=".", _String2=".") returned 0 [0142.615] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.615] wcscmp (_String1="..", _String2=".") returned 1 [0142.615] wcscmp (_String1="..", _String2="..") returned 0 [0142.615] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.615] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.615] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad57d0 [0142.615] wcscpy (in: _Dest=0x7ad57d0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES" [0142.615] wcscat (in: _Dest=0x7ad57d0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\" [0142.615] wcscat (in: _Dest=0x7ad57d0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" [0172.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad57d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0172.299] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0172.299] FindClose (in: hFindFile=0x3dcfa90 | out: hFindFile=0x3dcfa90) returned 1 [0172.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2418) returned 1 [0172.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a385b0) returned 1 [0172.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26858) returned 1 Thread: id = 1542 os_tid = 0x1fb8 [0140.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38620 [0140.199] wcscpy (in: _Dest=0x7a38620, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" [0140.199] wcscat (in: _Dest=0x7a38620, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\" [0140.199] wcscat (in: _Dest=0x7a38620, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*" [0140.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3020 [0140.199] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf590 [0142.616] wcscmp (_String1=".", _String2=".") returned 0 [0142.616] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.616] wcscmp (_String1="..", _String2=".") returned 1 [0142.616] wcscmp (_String1="..", _String2="..") returned 0 [0142.616] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.616] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.616] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6e60 [0142.616] wcscpy (in: _Dest=0x7ad6e60, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ" [0142.616] wcscat (in: _Dest=0x7ad6e60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\" [0142.616] wcscat (in: _Dest=0x7ad6e60, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" [0166.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0166.630] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0166.630] FindClose (in: hFindFile=0x3dcf590 | out: hFindFile=0x3dcf590) returned 1 [0166.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3020) returned 1 [0166.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38620) returned 1 [0166.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a265b8) returned 1 Thread: id = 1543 os_tid = 0x1fbc [0140.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38690 [0140.200] wcscpy (in: _Dest=0x7a38690, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" [0140.200] wcscat (in: _Dest=0x7a38690, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\" [0140.200] wcscat (in: _Dest=0x7a38690, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\*" [0140.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1f48 [0140.200] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0142.617] wcscmp (_String1=".", _String2=".") returned 0 [0142.617] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.617] wcscmp (_String1="..", _String2=".") returned 1 [0142.617] wcscmp (_String1="..", _String2="..") returned 0 [0142.617] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.617] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.617] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6ef8 [0142.617] wcscpy (in: _Dest=0x7ad6ef8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK" [0142.617] wcscat (in: _Dest=0x7ad6ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\" [0142.617] wcscat (in: _Dest=0x7ad6ef8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" [0158.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0158.601] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0158.602] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0158.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1f48) returned 1 [0158.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38690) returned 1 [0158.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a264d8) returned 1 Thread: id = 1544 os_tid = 0x1fc0 [0140.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38700 [0140.201] wcscpy (in: _Dest=0x7a38700, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" [0140.201] wcscat (in: _Dest=0x7a38700, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\" [0140.201] wcscat (in: _Dest=0x7a38700, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\*" [0140.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0c08 [0140.201] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf850 [0142.618] wcscmp (_String1=".", _String2=".") returned 0 [0142.618] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.618] wcscmp (_String1="..", _String2=".") returned 1 [0142.618] wcscmp (_String1="..", _String2="..") returned 0 [0142.618] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.618] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.618] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6f90 [0142.618] wcscpy (in: _Dest=0x7ad6f90, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE" [0142.618] wcscat (in: _Dest=0x7ad6f90, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\" [0142.618] wcscat (in: _Dest=0x7ad6f90, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" [0158.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0158.604] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0158.604] FindClose (in: hFindFile=0x3dcf850 | out: hFindFile=0x3dcf850) returned 1 [0158.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0c08) returned 1 [0158.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38700) returned 1 [0158.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e78) returned 1 Thread: id = 1545 os_tid = 0x1fc4 [0140.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38770 [0140.202] wcscpy (in: _Dest=0x7a38770, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" [0140.202] wcscat (in: _Dest=0x7a38770, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\" [0140.202] wcscat (in: _Dest=0x7a38770, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\*" [0140.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0140.202] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb10 [0142.618] wcscmp (_String1=".", _String2=".") returned 0 [0142.618] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.619] wcscmp (_String1="..", _String2=".") returned 1 [0142.619] wcscmp (_String1="..", _String2="..") returned 0 [0142.619] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.619] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.619] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5ee8 [0142.619] wcscpy (in: _Dest=0x3eb5ee8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US" [0142.619] wcscat (in: _Dest=0x3eb5ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\" [0142.619] wcscat (in: _Dest=0x3eb5ee8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" [0152.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40 [0152.964] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0152.964] FindClose (in: hFindFile=0x3dcfb10 | out: hFindFile=0x3dcfb10) returned 1 [0152.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0152.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38770) returned 1 [0152.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 Thread: id = 1546 os_tid = 0x1fc8 [0140.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a387e0 [0140.203] wcscpy (in: _Dest=0x7a387e0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" [0140.203] wcscat (in: _Dest=0x7a387e0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\" [0140.203] wcscat (in: _Dest=0x7a387e0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\*" [0140.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0140.203] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0142.619] wcscmp (_String1=".", _String2=".") returned 0 [0142.619] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.619] wcscmp (_String1="..", _String2=".") returned 1 [0142.619] wcscmp (_String1="..", _String2="..") returned 0 [0142.619] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.620] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.620] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb60b0 [0142.620] wcscpy (in: _Dest=0x3eb60b0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES" [0142.620] wcscat (in: _Dest=0x3eb60b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\" [0142.620] wcscat (in: _Dest=0x3eb60b0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" [0152.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb60b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc [0152.967] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0152.967] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0152.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0152.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a387e0) returned 1 [0152.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 Thread: id = 1547 os_tid = 0x1fcc [0140.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38850 [0140.204] wcscpy (in: _Dest=0x7a38850, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" [0140.204] wcscat (in: _Dest=0x7a38850, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\" [0140.204] wcscat (in: _Dest=0x7a38850, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*" [0140.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ba78 [0140.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf990 [0142.620] wcscmp (_String1=".", _String2=".") returned 0 [0142.620] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.620] wcscmp (_String1="..", _String2=".") returned 1 [0142.620] wcscmp (_String1="..", _String2="..") returned 0 [0142.620] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.620] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.620] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb74e0 [0142.621] wcscpy (in: _Dest=0x3eb74e0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES" [0142.621] wcscat (in: _Dest=0x3eb74e0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\" [0142.621] wcscat (in: _Dest=0x3eb74e0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" [0167.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb74e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0167.425] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0167.425] FindClose (in: hFindFile=0x3dcf990 | out: hFindFile=0x3dcf990) returned 1 [0167.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ba78) returned 1 [0167.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38850) returned 1 [0167.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26548) returned 1 Thread: id = 1548 os_tid = 0x1fd0 [0140.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a388c0 [0140.204] wcscpy (in: _Dest=0x7a388c0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" [0140.205] wcscat (in: _Dest=0x7a388c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\" [0140.205] wcscat (in: _Dest=0x7a388c0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*" [0140.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b810 [0140.205] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf690 [0142.621] wcscmp (_String1=".", _String2=".") returned 0 [0142.621] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.621] wcscmp (_String1="..", _String2=".") returned 1 [0142.621] wcscmp (_String1="..", _String2="..") returned 0 [0142.621] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.621] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.621] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6bf8 [0142.621] wcscpy (in: _Dest=0x3eb6bf8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI" [0142.621] wcscat (in: _Dest=0x3eb6bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\" [0142.622] wcscat (in: _Dest=0x3eb6bf8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" [0156.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0156.117] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0156.117] FindClose (in: hFindFile=0x3dcf690 | out: hFindFile=0x3dcf690) returned 1 [0156.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b810) returned 1 [0156.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a388c0) returned 1 [0156.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a269a8) returned 1 Thread: id = 1549 os_tid = 0x1fd4 [0140.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38930 [0140.205] wcscpy (in: _Dest=0x7a38930, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" [0140.205] wcscat (in: _Dest=0x7a38930, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\" [0140.206] wcscat (in: _Dest=0x7a38930, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*" [0140.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b340 [0140.206] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfbd0 [0142.622] wcscmp (_String1=".", _String2=".") returned 0 [0142.622] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.622] wcscmp (_String1="..", _String2=".") returned 1 [0142.622] wcscmp (_String1="..", _String2="..") returned 0 [0142.622] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.622] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.622] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7448 [0142.622] wcscpy (in: _Dest=0x3eb7448, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR" [0142.622] wcscat (in: _Dest=0x3eb7448, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\" [0142.622] wcscat (in: _Dest=0x3eb7448, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" [0146.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0146.003] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.003] FindClose (in: hFindFile=0x3dcfbd0 | out: hFindFile=0x3dcfbd0) returned 1 [0146.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b340) returned 1 [0146.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38930) returned 1 [0146.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26938) returned 1 Thread: id = 1550 os_tid = 0x1fd8 [0140.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a389a0 [0140.206] wcscpy (in: _Dest=0x7a389a0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" [0140.206] wcscat (in: _Dest=0x7a389a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\" [0140.206] wcscat (in: _Dest=0x7a389a0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*" [0140.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ae70 [0140.207] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf9d0 [0142.623] wcscmp (_String1=".", _String2=".") returned 0 [0142.623] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.623] wcscmp (_String1="..", _String2=".") returned 1 [0142.623] wcscmp (_String1="..", _String2="..") returned 0 [0142.623] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.623] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.623] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6f88 [0142.623] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR" [0142.623] wcscat (in: _Dest=0x3eb6f88, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\" [0142.623] wcscat (in: _Dest=0x3eb6f88, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" [0146.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0146.006] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.007] FindClose (in: hFindFile=0x3dcf9d0 | out: hFindFile=0x3dcf9d0) returned 1 [0146.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ae70) returned 1 [0146.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a389a0) returned 1 [0146.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26708) returned 1 Thread: id = 1551 os_tid = 0x1fdc [0140.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38a10 [0140.207] wcscpy (in: _Dest=0x7a38a10, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" [0140.207] wcscat (in: _Dest=0x7a38a10, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\" [0140.207] wcscat (in: _Dest=0x7a38a10, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*" [0140.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ac08 [0140.208] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf790 [0142.624] wcscmp (_String1=".", _String2=".") returned 0 [0142.624] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.624] wcscmp (_String1="..", _String2=".") returned 1 [0142.624] wcscmp (_String1="..", _String2="..") returned 0 [0142.624] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.624] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.624] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5f80 [0142.624] wcscpy (in: _Dest=0x3eb5f80, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU" [0142.624] wcscat (in: _Dest=0x3eb5f80, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\" [0142.624] wcscat (in: _Dest=0x3eb5f80, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" [0146.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0146.010] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.010] FindClose (in: hFindFile=0x3dcf790 | out: hFindFile=0x3dcf790) returned 1 [0146.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ac08) returned 1 [0146.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38a10) returned 1 [0146.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26778) returned 1 Thread: id = 1552 os_tid = 0x1fe0 [0140.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38a80 [0140.208] wcscpy (in: _Dest=0x7a38a80, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" [0140.208] wcscat (in: _Dest=0x7a38a80, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\" [0140.208] wcscat (in: _Dest=0x7a38a80, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\*" [0140.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a738 [0140.208] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad77b0 [0142.625] wcscmp (_String1=".", _String2=".") returned 0 [0142.625] FindNextFileW (in: hFindFile=0x7ad77b0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.625] wcscmp (_String1="..", _String2=".") returned 1 [0142.625] wcscmp (_String1="..", _String2="..") returned 0 [0142.625] FindNextFileW (in: hFindFile=0x7ad77b0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.625] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.625] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5698 [0142.625] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT" [0142.625] wcscat (in: _Dest=0x3eb5698, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\" [0142.625] wcscat (in: _Dest=0x3eb5698, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" [0146.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060 [0146.014] FindNextFileW (in: hFindFile=0x7ad77b0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.014] FindClose (in: hFindFile=0x7ad77b0 | out: hFindFile=0x7ad77b0) returned 1 [0146.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a738) returned 1 [0146.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38a80) returned 1 [0146.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a18) returned 1 Thread: id = 1553 os_tid = 0x1fe4 [0140.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38af0 [0140.209] wcscpy (in: _Dest=0x7a38af0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" [0140.209] wcscat (in: _Dest=0x7a38af0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\" [0140.209] wcscat (in: _Dest=0x7a38af0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*" [0140.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a4d0 [0140.209] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bb0 [0142.626] wcscmp (_String1=".", _String2=".") returned 0 [0142.626] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.626] wcscmp (_String1="..", _String2=".") returned 1 [0142.626] wcscmp (_String1="..", _String2="..") returned 0 [0142.626] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.626] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.626] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64090 [0142.626] wcscpy (in: _Dest=0x7a64090, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP" [0142.626] wcscat (in: _Dest=0x7a64090, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\" [0142.626] wcscat (in: _Dest=0x7a64090, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" [0146.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x205c [0146.018] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.018] FindClose (in: hFindFile=0x7ad7bb0 | out: hFindFile=0x7ad7bb0) returned 1 [0146.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a4d0) returned 1 [0146.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38af0) returned 1 [0146.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 Thread: id = 1554 os_tid = 0x1fe8 [0140.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38b60 [0140.210] wcscpy (in: _Dest=0x7a38b60, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" [0140.210] wcscat (in: _Dest=0x7a38b60, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\" [0140.210] wcscat (in: _Dest=0x7a38b60, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*" [0140.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bf48 [0140.210] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7d70 [0142.627] wcscmp (_String1=".", _String2=".") returned 0 [0142.627] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.627] wcscmp (_String1="..", _String2=".") returned 1 [0142.627] wcscmp (_String1="..", _String2="..") returned 0 [0142.627] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.627] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.627] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64128 [0142.627] wcscpy (in: _Dest=0x7a64128, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR" [0142.627] wcscat (in: _Dest=0x7a64128, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\" [0142.627] wcscat (in: _Dest=0x7a64128, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" [0146.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0146.022] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.022] FindClose (in: hFindFile=0x7ad7d70 | out: hFindFile=0x7ad7d70) returned 1 [0146.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bf48) returned 1 [0146.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38b60) returned 1 [0146.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69e58) returned 1 Thread: id = 1555 os_tid = 0x1fec [0140.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38bd0 [0140.211] wcscpy (in: _Dest=0x7a38bd0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" [0140.211] wcscat (in: _Dest=0x7a38bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\" [0140.211] wcscat (in: _Dest=0x7a38bd0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*" [0140.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3cdb8 [0140.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cf0 [0142.628] wcscmp (_String1=".", _String2=".") returned 0 [0142.628] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.628] wcscmp (_String1="..", _String2=".") returned 1 [0142.628] wcscmp (_String1="..", _String2="..") returned 0 [0142.628] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.628] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.628] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a641c0 [0142.628] wcscpy (in: _Dest=0x7a641c0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO" [0142.628] wcscat (in: _Dest=0x7a641c0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\" [0142.628] wcscat (in: _Dest=0x7a641c0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" [0146.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a641c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0146.025] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.025] FindClose (in: hFindFile=0x7ad7cf0 | out: hFindFile=0x7ad7cf0) returned 1 [0146.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3cdb8) returned 1 [0146.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38bd0) returned 1 [0146.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ad8) returned 1 Thread: id = 1556 os_tid = 0x1ff0 [0140.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38c40 [0140.212] wcscpy (in: _Dest=0x7a38c40, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" [0140.212] wcscat (in: _Dest=0x7a38c40, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\" [0140.212] wcscat (in: _Dest=0x7a38c40, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*" [0140.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d020 [0140.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7c30 [0142.629] wcscmp (_String1=".", _String2=".") returned 0 [0142.629] FindNextFileW (in: hFindFile=0x7ad7c30, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.629] wcscmp (_String1="..", _String2=".") returned 1 [0142.629] wcscmp (_String1="..", _String2="..") returned 0 [0142.629] FindNextFileW (in: hFindFile=0x7ad7c30, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.629] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.629] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64258 [0142.629] wcscpy (in: _Dest=0x7a64258, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL" [0142.629] wcscat (in: _Dest=0x7a64258, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\" [0142.629] wcscat (in: _Dest=0x7a64258, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" [0146.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2050 [0146.028] FindNextFileW (in: hFindFile=0x7ad7c30, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.028] FindClose (in: hFindFile=0x7ad7c30 | out: hFindFile=0x7ad7c30) returned 1 [0146.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d020) returned 1 [0146.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38c40) returned 1 [0146.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ec8) returned 1 Thread: id = 1557 os_tid = 0x1ff4 [0140.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38cb0 [0140.213] wcscpy (in: _Dest=0x7a38cb0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" [0140.213] wcscat (in: _Dest=0x7a38cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\" [0140.213] wcscat (in: _Dest=0x7a38cb0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*" [0140.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d288 [0140.213] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7970 [0142.629] wcscmp (_String1=".", _String2=".") returned 0 [0142.629] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.630] wcscmp (_String1="..", _String2=".") returned 1 [0142.630] wcscmp (_String1="..", _String2="..") returned 0 [0142.630] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.630] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.630] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a642f0 [0142.630] wcscpy (in: _Dest=0x7a642f0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL" [0142.630] wcscat (in: _Dest=0x7a642f0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\" [0142.630] wcscat (in: _Dest=0x7a642f0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" [0146.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a642f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c [0146.031] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.031] FindClose (in: hFindFile=0x7ad7970 | out: hFindFile=0x7ad7970) returned 1 [0146.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d288) returned 1 [0146.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38cb0) returned 1 [0146.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69de8) returned 1 Thread: id = 1558 os_tid = 0x1ff8 [0140.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38d20 [0140.214] wcscpy (in: _Dest=0x7a38d20, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" [0140.214] wcscat (in: _Dest=0x7a38d20, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\" [0140.214] wcscat (in: _Dest=0x7a38d20, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*" [0140.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d4f0 [0140.214] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7830 [0142.630] wcscmp (_String1=".", _String2=".") returned 0 [0142.630] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.630] wcscmp (_String1="..", _String2=".") returned 1 [0142.630] wcscmp (_String1="..", _String2="..") returned 0 [0142.630] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.630] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.631] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64388 [0142.631] wcscpy (in: _Dest=0x7a64388, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR" [0142.631] wcscat (in: _Dest=0x7a64388, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\" [0142.631] wcscat (in: _Dest=0x7a64388, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" [0146.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2048 [0146.035] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.036] FindClose (in: hFindFile=0x7ad7830 | out: hFindFile=0x7ad7830) returned 1 [0146.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d4f0) returned 1 [0146.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38d20) returned 1 [0146.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b48) returned 1 Thread: id = 1559 os_tid = 0x1ffc [0140.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38d90 [0140.215] wcscpy (in: _Dest=0x7a38d90, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" [0140.215] wcscat (in: _Dest=0x7a38d90, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\" [0140.215] wcscat (in: _Dest=0x7a38d90, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*" [0140.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d758 [0140.215] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7230 [0142.631] wcscmp (_String1=".", _String2=".") returned 0 [0142.631] FindNextFileW (in: hFindFile=0x7ad7230, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.631] wcscmp (_String1="..", _String2=".") returned 1 [0142.631] wcscmp (_String1="..", _String2="..") returned 0 [0142.631] FindNextFileW (in: hFindFile=0x7ad7230, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.631] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.631] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64420 [0142.632] wcscpy (in: _Dest=0x7a64420, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO" [0142.632] wcscat (in: _Dest=0x7a64420, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\" [0142.632] wcscat (in: _Dest=0x7a64420, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" [0146.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2044 [0146.040] FindNextFileW (in: hFindFile=0x7ad7230, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.040] FindClose (in: hFindFile=0x7ad7230 | out: hFindFile=0x7ad7230) returned 1 [0146.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d758) returned 1 [0146.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38d90) returned 1 [0146.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a230d0) returned 1 Thread: id = 1560 os_tid = 0x80c [0140.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38e00 [0140.216] wcscpy (in: _Dest=0x7a38e00, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" [0140.216] wcscat (in: _Dest=0x7a38e00, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\" [0140.216] wcscat (in: _Dest=0x7a38e00, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*" [0140.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d9c0 [0140.216] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7ab0 [0142.632] wcscmp (_String1=".", _String2=".") returned 0 [0142.632] FindNextFileW (in: hFindFile=0x7ad7ab0, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.632] wcscmp (_String1="..", _String2=".") returned 1 [0142.632] wcscmp (_String1="..", _String2="..") returned 0 [0142.632] FindNextFileW (in: hFindFile=0x7ad7ab0, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.632] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.632] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a644b8 [0142.632] wcscpy (in: _Dest=0x7a644b8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU" [0142.632] wcscat (in: _Dest=0x7a644b8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\" [0142.632] wcscat (in: _Dest=0x7a644b8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" [0146.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a644b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c [0146.044] FindNextFileW (in: hFindFile=0x7ad7ab0, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.044] FindClose (in: hFindFile=0x7ad7ab0 | out: hFindFile=0x7ad7ab0) returned 1 [0146.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d9c0) returned 1 [0146.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38e00) returned 1 [0146.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23530) returned 1 Thread: id = 1561 os_tid = 0xff8 [0140.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38e70 [0140.217] wcscpy (in: _Dest=0x7a38e70, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" [0140.217] wcscat (in: _Dest=0x7a38e70, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\" [0140.217] wcscat (in: _Dest=0x7a38e70, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*" [0140.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3dc28 [0140.217] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad77f0 [0142.633] wcscmp (_String1=".", _String2=".") returned 0 [0142.633] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd985e720, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd985e720, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.633] wcscmp (_String1="..", _String2=".") returned 1 [0142.633] wcscmp (_String1="..", _String2="..") returned 0 [0142.633] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.633] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.633] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64550 [0142.633] wcscpy (in: _Dest=0x7a64550, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK" [0142.633] wcscat (in: _Dest=0x7a64550, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\" [0142.633] wcscat (in: _Dest=0x7a64550, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" [0146.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2038 [0146.047] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd985e720, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.048] FindClose (in: hFindFile=0x7ad77f0 | out: hFindFile=0x7ad77f0) returned 1 [0146.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3dc28) returned 1 [0146.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38e70) returned 1 [0146.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23b50) returned 1 Thread: id = 1562 os_tid = 0x64c [0140.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38ee0 [0140.222] wcscpy (in: _Dest=0x7a38ee0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" [0140.222] wcscat (in: _Dest=0x7a38ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\" [0140.223] wcscat (in: _Dest=0x7a38ee0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*" [0140.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3de90 [0140.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7870 [0142.634] wcscmp (_String1=".", _String2=".") returned 0 [0142.634] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.634] wcscmp (_String1="..", _String2=".") returned 1 [0142.634] wcscmp (_String1="..", _String2="..") returned 0 [0142.634] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.634] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.634] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a645e8 [0142.634] wcscpy (in: _Dest=0x7a645e8, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI" [0142.634] wcscat (in: _Dest=0x7a645e8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\" [0142.634] wcscat (in: _Dest=0x7a645e8, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" [0146.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a645e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034 [0146.051] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.051] FindClose (in: hFindFile=0x7ad7870 | out: hFindFile=0x7ad7870) returned 1 [0146.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3de90) returned 1 [0146.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38ee0) returned 1 [0146.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23610) returned 1 Thread: id = 1563 os_tid = 0x2004 [0140.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38f50 [0140.223] wcscpy (in: _Dest=0x7a38f50, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" [0140.223] wcscat (in: _Dest=0x7a38f50, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\" [0140.223] wcscat (in: _Dest=0x7a38f50, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*" [0140.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3e0f8 [0140.224] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0142.635] wcscmp (_String1=".", _String2=".") returned 0 [0142.635] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.635] wcscmp (_String1="..", _String2=".") returned 1 [0142.635] wcscmp (_String1="..", _String2="..") returned 0 [0142.635] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.635] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.635] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64680 [0142.635] wcscpy (in: _Dest=0x7a64680, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE" [0142.635] wcscat (in: _Dest=0x7a64680, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\" [0142.635] wcscat (in: _Dest=0x7a64680, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" [0146.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x778 [0146.055] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.055] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0146.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3e0f8) returned 1 [0146.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38f50) returned 1 [0146.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23680) returned 1 Thread: id = 1564 os_tid = 0x2008 [0140.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a38fc0 [0140.224] wcscpy (in: _Dest=0x7a38fc0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" [0140.224] wcscat (in: _Dest=0x7a38fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\" [0140.224] wcscat (in: _Dest=0x7a38fc0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*" [0140.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3238 [0140.225] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7eb0 [0142.635] wcscmp (_String1=".", _String2=".") returned 0 [0142.635] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.636] wcscmp (_String1="..", _String2=".") returned 1 [0142.636] wcscmp (_String1="..", _String2="..") returned 0 [0142.636] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.636] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.636] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64718 [0142.636] wcscpy (in: _Dest=0x7a64718, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR" [0142.636] wcscat (in: _Dest=0x7a64718, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\" [0142.636] wcscat (in: _Dest=0x7a64718, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" [0146.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030 [0146.059] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.059] FindClose (in: hFindFile=0x7ad7eb0 | out: hFindFile=0x7ad7eb0) returned 1 [0146.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3238) returned 1 [0146.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38fc0) returned 1 [0146.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1398) returned 1 Thread: id = 1565 os_tid = 0x200c [0140.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a39030 [0140.225] wcscpy (in: _Dest=0x7a39030, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" [0140.225] wcscat (in: _Dest=0x7a39030, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\" [0140.225] wcscat (in: _Dest=0x7a39030, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*" [0140.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3bd8 [0140.225] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7ef0 [0142.636] wcscmp (_String1=".", _String2=".") returned 0 [0142.636] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98385c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd98385c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.636] wcscmp (_String1="..", _String2=".") returned 1 [0142.636] wcscmp (_String1="..", _String2="..") returned 0 [0142.637] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0142.637] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0142.637] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0142.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a647b0 [0142.637] wcscpy (in: _Dest=0x7a647b0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA" [0142.637] wcscat (in: _Dest=0x7a647b0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\" [0142.637] wcscat (in: _Dest=0x7a647b0, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" [0146.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a647b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c [0146.063] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98385c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0146.063] FindClose (in: hFindFile=0x7ad7ef0 | out: hFindFile=0x7ad7ef0) returned 1 [0146.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3bd8) returned 1 [0146.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39030) returned 1 [0146.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1408) returned 1 Thread: id = 1566 os_tid = 0x2010 [0140.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a390a0 [0140.226] wcscpy (in: _Dest=0x7a390a0, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" [0140.226] wcscat (in: _Dest=0x7a390a0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\" [0140.226] wcscat (in: _Dest=0x7a390a0, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*" [0140.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3708 [0140.226] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0141.843] wcscmp (_String1=".", _String2=".") returned 0 [0141.843] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd97ec300, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd97ec300, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.843] wcscmp (_String1="..", _String2=".") returned 1 [0141.843] wcscmp (_String1="..", _String2="..") returned 0 [0141.843] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0141.843] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0141.843] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0141.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6c98 [0141.844] wcscpy (in: _Dest=0x7ad6c98, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN" [0141.844] wcscat (in: _Dest=0x7ad6c98, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\" [0141.844] wcscat (in: _Dest=0x7ad6c98, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" [0151.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0151.093] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x3ea3708 | out: lpFindFileData=0x3ea3708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd97ec300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0151.093] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0151.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3708) returned 1 [0151.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a390a0) returned 1 [0151.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db12b8) returned 1 Thread: id = 1567 os_tid = 0x2014 [0140.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a39110 [0140.227] wcscpy (in: _Dest=0x7a39110, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" [0140.227] wcscat (in: _Dest=0x7a39110, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\" [0140.227] wcscat (in: _Dest=0x7a39110, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*" [0140.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea47e0 [0140.227] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0141.844] wcscmp (_String1=".", _String2=".") returned 0 [0141.844] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9812460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd9812460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.844] wcscmp (_String1="..", _String2=".") returned 1 [0141.844] wcscmp (_String1="..", _String2="..") returned 0 [0141.844] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0141.844] wcscmp (_String1="Reader_10.0.helpcfg", _String2=".") returned 1 [0141.844] wcscmp (_String1="Reader_10.0.helpcfg", _String2="..") returned 1 [0141.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6d30 [0141.845] wcscpy (in: _Dest=0x7ad6d30, _Source="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW" [0141.845] wcscat (in: _Dest=0x7ad6d30, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\" [0141.845] wcscat (in: _Dest=0x7ad6d30, _Source="Reader_10.0.helpcfg" | out: _Dest="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg") returned="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" [0151.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0151.097] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x3ea47e0 | out: lpFindFileData=0x3ea47e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9812460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0151.097] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0151.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea47e0) returned 1 [0151.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39110) returned 1 [0151.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db1248) returned 1 Thread: id = 1568 os_tid = 0x2018 [0140.228] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0x20 [0140.228] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0140.228] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.228] GetLastError () returned 0x5 [0140.228] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0140.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 Thread: id = 1569 os_tid = 0x201c [0140.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0c68 [0140.230] wcscpy (in: _Dest=0x3ee0c68, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" [0140.230] wcscat (in: _Dest=0x3ee0c68, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\" [0140.230] wcscat (in: _Dest=0x3ee0c68, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*" [0140.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea34a0 [0140.230] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df40 [0140.230] wcscmp (_String1=".", _String2=".") returned 0 [0140.230] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.230] wcscmp (_String1="..", _String2=".") returned 1 [0140.230] wcscmp (_String1="..", _String2="..") returned 0 [0140.230] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0140.230] wcscmp (_String1="Security", _String2=".") returned 1 [0140.230] wcscmp (_String1="Security", _String2="..") returned 1 [0140.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3bb58 [0140.230] wcscpy (in: _Dest=0x3e3bb58, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" [0140.230] wcscat (in: _Dest=0x3e3bb58, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\" [0140.230] wcscat (in: _Dest=0x3e3bb58, _Source="Security" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0154.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3bb58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0154.690] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ea34a0 | out: lpFindFileData=0x3ea34a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0154.690] FindClose (in: hFindFile=0x7a2df40 | out: hFindFile=0x7a2df40) returned 1 [0154.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea34a0) returned 1 [0154.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0c68) returned 1 [0154.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 Thread: id = 1570 os_tid = 0x2020 [0140.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a395d8 [0140.231] wcscpy (in: _Dest=0x7a395d8, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" [0140.231] wcscat (in: _Dest=0x7a395d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\" [0140.231] wcscat (in: _Dest=0x7a395d8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*" [0140.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4578 [0140.231] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0140.231] wcscmp (_String1=".", _String2=".") returned 0 [0140.231] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.231] wcscmp (_String1="..", _String2=".") returned 1 [0140.231] wcscmp (_String1="..", _String2="..") returned 0 [0140.231] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0140.231] wcscmp (_String1="Replicate", _String2=".") returned 1 [0140.231] wcscmp (_String1="Replicate", _String2="..") returned 1 [0140.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf200 [0140.232] wcscpy (in: _Dest=0x3edf200, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0" [0140.232] wcscat (in: _Dest=0x3edf200, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\" [0140.232] wcscat (in: _Dest=0x3edf200, _Source="Replicate" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" [0144.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3edf200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2420 [0144.128] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0144.128] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0144.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4578) returned 1 [0144.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a395d8) returned 1 [0144.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14ca0) returned 1 Thread: id = 1571 os_tid = 0x2024 [0140.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a39180 [0140.232] wcscpy (in: _Dest=0x7a39180, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" [0140.232] wcscat (in: _Dest=0x7a39180, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\" [0140.232] wcscat (in: _Dest=0x7a39180, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*" [0140.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef43d0 [0140.232] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0140.232] wcscmp (_String1=".", _String2=".") returned 0 [0140.232] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x85f7a2c7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x85f7a2c7, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.233] wcscmp (_String1="..", _String2=".") returned 1 [0140.233] wcscmp (_String1="..", _String2="..") returned 0 [0140.233] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0140.233] wcscmp (_String1="1.0", _String2=".") returned 1 [0140.233] wcscmp (_String1="1.0", _String2="..") returned 1 [0140.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a391f0 [0140.233] wcscpy (in: _Dest=0x7a391f0, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client" [0140.233] wcscat (in: _Dest=0x7a391f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\" [0140.233] wcscat (in: _Dest=0x7a391f0, _Source="1.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" [0144.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a391f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0144.130] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0144.130] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0144.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0144.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39180) returned 1 [0144.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee11b0) returned 1 Thread: id = 1572 os_tid = 0x2028 [0140.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6908 [0140.239] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" [0140.239] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\" [0140.239] wcscat (in: _Dest=0x2fe6908, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*" [0140.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0140.239] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d5c0 [0140.239] wcscmp (_String1=".", _String2=".") returned 0 [0140.239] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e7177a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.239] wcscmp (_String1="..", _String2=".") returned 1 [0140.239] wcscmp (_String1="..", _String2="..") returned 0 [0140.239] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0140.239] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0140.239] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0140.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a39260 [0140.239] wcscpy (in: _Dest=0x7a39260, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS" [0140.240] wcscat (in: _Dest=0x7a39260, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\" [0140.240] wcscat (in: _Dest=0x7a39260, _Source="MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" [0144.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a39260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x242c [0144.132] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0144.132] FindClose (in: hFindFile=0x7a2d5c0 | out: hFindFile=0x7a2d5c0) returned 1 [0144.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0144.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 [0144.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a394d0) returned 1 Thread: id = 1573 os_tid = 0x202c [0140.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6a28 [0140.246] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys" [0140.246] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\" [0140.246] wcscat (in: _Dest=0x2fe6a28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*" [0140.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0140.246] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7df0 [0140.246] wcscmp (_String1=".", _String2=".") returned 0 [0140.246] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.246] wcscmp (_String1="..", _String2=".") returned 1 [0140.246] wcscmp (_String1="..", _String2="..") returned 0 [0140.246] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.246] FindClose (in: hFindFile=0x7ad7df0 | out: hFindFile=0x7ad7df0) returned 1 [0140.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0140.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0140.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 Thread: id = 1574 os_tid = 0x2030 [0140.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6f68 [0140.248] wcscpy (in: _Dest=0x2fe6f68, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0140.248] wcscat (in: _Dest=0x2fe6f68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\" [0140.248] wcscat (in: _Dest=0x2fe6f68, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*" [0140.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0140.248] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7df0 [0140.248] wcscmp (_String1=".", _String2=".") returned 0 [0140.248] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x59ee3290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59ee3290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.248] wcscmp (_String1="..", _String2=".") returned 1 [0140.248] wcscmp (_String1="..", _String2="..") returned 0 [0140.248] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0140.248] wcscmp (_String1="MachineKeys", _String2=".") returned 1 [0140.248] wcscmp (_String1="MachineKeys", _String2="..") returned 1 [0140.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a392d0 [0140.248] wcscpy (in: _Dest=0x7a392d0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0140.249] wcscat (in: _Dest=0x7a392d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\" [0140.249] wcscat (in: _Dest=0x7a392d0, _Source="MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" [0144.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a392d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2430 [0144.134] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0144.134] wcscmp (_String1="S-1-5-18", _String2=".") returned 1 [0144.134] wcscmp (_String1="S-1-5-18", _String2="..") returned 1 [0144.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a39180 [0144.135] wcscpy (in: _Dest=0x7a39180, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA" [0144.135] wcscat (in: _Dest=0x7a39180, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\" [0144.135] wcscat (in: _Dest=0x7a39180, _Source="S-1-5-18" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0144.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a39180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14 [0144.136] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x59ee3290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5a013d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a013d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0144.136] FindClose (in: hFindFile=0x7ad7df0 | out: hFindFile=0x7ad7df0) returned 1 [0144.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0144.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0144.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a27b10) returned 1 Thread: id = 1575 os_tid = 0x2034 [0140.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6a28 [0140.249] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Users\\All Users\\Microsoft\\eHome\\logs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs" [0140.249] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\" [0140.249] wcscat (in: _Dest=0x2fe6a28, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*") returned="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*" [0140.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0140.250] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0140.250] wcscmp (_String1=".", _String2=".") returned 0 [0140.250] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.250] wcscmp (_String1="..", _String2=".") returned 1 [0140.250] wcscmp (_String1="..", _String2="..") returned 0 [0140.250] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xee7f23d2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.250] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0140.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0140.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0140.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39580) returned 1 Thread: id = 1576 os_tid = 0x2038 [0140.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a39340 [0140.251] wcscpy (in: _Dest=0x7a39340, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" [0140.251] wcscat (in: _Dest=0x7a39340, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\" [0140.251] wcscat (in: _Dest=0x7a39340, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*" [0140.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0140.251] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0140.252] wcscmp (_String1=".", _String2=".") returned 0 [0140.252] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.252] wcscmp (_String1="..", _String2=".") returned 1 [0140.252] wcscmp (_String1="..", _String2="..") returned 0 [0140.252] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0140.252] wcscmp (_String1="ApplicationViewsRootNode", _String2=".") returned 1 [0140.252] wcscmp (_String1="ApplicationViewsRootNode", _String2="..") returned 1 [0140.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df6300 [0140.252] wcscpy (in: _Dest=0x3df6300, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views" [0140.252] wcscat (in: _Dest=0x3df6300, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\" [0140.252] wcscat (in: _Dest=0x3df6300, _Source="ApplicationViewsRootNode" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0154.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df6300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0154.694] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0154.694] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0154.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0154.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39340) returned 1 [0154.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 Thread: id = 1577 os_tid = 0x203c [0140.252] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl")) returned 0x20 [0140.253] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0140.253] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.253] GetLastError () returned 0x5 [0140.253] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1 [0140.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe69c8) returned 1 Thread: id = 1578 os_tid = 0x2040 [0140.254] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl")) returned 0x20 [0140.254] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0140.255] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.255] GetLastError () returned 0x5 [0140.255] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL", dwFileAttributes=0x20) returned 1 [0140.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7388) returned 1 Thread: id = 1579 os_tid = 0x2044 [0140.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3efb820 [0140.256] wcscpy (in: _Dest=0x3efb820, _Source="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore" [0140.256] wcscat (in: _Dest=0x3efb820, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\" [0140.256] wcscat (in: _Dest=0x3efb820, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*") returned="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*" [0140.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4638 [0140.256] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4638) returned 1 [0141.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb820) returned 1 [0141.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 Thread: id = 1580 os_tid = 0x2048 [0140.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a393b0 [0140.257] wcscpy (in: _Dest=0x7a393b0, _Source="C:\\Users\\All Users\\Microsoft\\Network\\Connections" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections" [0140.257] wcscat (in: _Dest=0x7a393b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\" [0140.257] wcscat (in: _Dest=0x7a393b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*") returned="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*" [0140.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0140.257] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7d30 [0140.258] wcscmp (_String1=".", _String2=".") returned 0 [0140.258] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.258] wcscmp (_String1="..", _String2=".") returned 1 [0140.258] wcscmp (_String1="..", _String2="..") returned 0 [0140.258] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x63053aed, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.258] FindClose (in: hFindFile=0x7ad7d30 | out: hFindFile=0x7ad7d30) returned 1 [0140.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0140.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a393b0) returned 1 [0140.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a267e8) returned 1 Thread: id = 1581 os_tid = 0x204c [0140.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a267e8 [0140.259] wcscpy (in: _Dest=0x7a267e8, _Source="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader" [0140.259] wcscat (in: _Dest=0x7a267e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\" [0140.259] wcscat (in: _Dest=0x7a267e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*" [0140.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0140.259] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0140.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a267e8) returned 1 [0140.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee00a0) returned 1 Thread: id = 1582 os_tid = 0x2050 [0140.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad63b0 [0140.261] wcscpy (in: _Dest=0x7ad63b0, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0140.261] wcscat (in: _Dest=0x7ad63b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0140.261] wcscat (in: _Dest=0x7ad63b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*" [0140.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0140.261] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7d30 [0140.261] wcscmp (_String1=".", _String2=".") returned 0 [0140.261] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa71f8cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb51b750, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.261] wcscmp (_String1="..", _String2=".") returned 1 [0140.261] wcscmp (_String1="..", _String2="..") returned 0 [0140.261] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0140.261] wcscmp (_String1="cache.dat", _String2=".") returned 1 [0140.261] wcscmp (_String1="cache.dat", _String2="..") returned 1 [0140.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3e7a2f8 [0140.261] wcscpy (in: _Dest=0x3e7a2f8, _Source="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" [0140.261] wcscat (in: _Dest=0x3e7a2f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\" [0140.261] wcscat (in: _Dest=0x3e7a2f8, _Source="cache.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" [0144.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e7a2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2434 [0144.138] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb51b750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xbb51b750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28465200, ftLastWriteTime.dwHighDateTime=0x1d4d606, nFileSizeHigh=0x0, nFileSizeLow=0x49438, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0144.138] FindClose (in: hFindFile=0x7ad7d30 | out: hFindFile=0x7ad7d30) returned 1 [0144.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0144.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad63b0) returned 1 [0144.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 1583 os_tid = 0x2054 [0140.262] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat")) returned 0x2020 [0140.262] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x20) returned 0 [0140.262] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.262] GetLastError () returned 0x5 [0140.262] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", dwFileAttributes=0x2020) returned 0 [0140.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 Thread: id = 1584 os_tid = 0x2058 [0140.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7388 [0140.264] wcscpy (in: _Dest=0x2fe7388, _Source="C:\\Users\\All Users\\Microsoft\\Search\\Data" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data" [0140.264] wcscat (in: _Dest=0x2fe7388, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data\\") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\" [0140.264] wcscat (in: _Dest=0x2fe7388, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*" [0140.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59a40 [0140.264] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59a40) returned 1 [0140.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7388) returned 1 [0140.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 Thread: id = 1585 os_tid = 0x205c [0140.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5b60 [0140.265] wcscpy (in: _Dest=0x7ad5b60, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0140.265] wcscat (in: _Dest=0x7ad5b60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.265] wcscat (in: _Dest=0x7ad5b60, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*" [0140.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59a40 [0140.265] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cb0 [0140.266] wcscmp (_String1=".", _String2=".") returned 0 [0140.266] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe51400a2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe51400a2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.266] wcscmp (_String1="..", _String2=".") returned 1 [0140.266] wcscmp (_String1="..", _String2="..") returned 0 [0140.266] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf171085c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0140.266] wcscmp (_String1="usertile10.bmp", _String2=".") returned 1 [0140.266] wcscmp (_String1="usertile10.bmp", _String2="..") returned 1 [0140.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c428 [0140.266] wcscpy (in: _Dest=0x35c428, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0140.266] wcscat (in: _Dest=0x35c428, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0140.266] wcscat (in: _Dest=0x35c428, _Source="usertile10.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" [0144.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x243c [0144.140] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5270cf0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5270cf0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf17369bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0144.140] wcscmp (_String1="usertile11.bmp", _String2=".") returned 1 [0144.141] wcscmp (_String1="usertile11.bmp", _String2="..") returned 1 [0144.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c638 [0144.141] wcscpy (in: _Dest=0x35c638, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.141] wcscat (in: _Dest=0x35c638, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.141] wcscat (in: _Dest=0x35c638, _Source="usertile11.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" [0144.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10 [0144.142] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52733076, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52733076, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0144.142] wcscmp (_String1="usertile12.bmp", _String2=".") returned 1 [0144.142] wcscmp (_String1="usertile12.bmp", _String2="..") returned 1 [0144.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c3b0 [0144.142] wcscpy (in: _Dest=0x3e3c3b0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.142] wcscat (in: _Dest=0x3e3c3b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.142] wcscat (in: _Dest=0x3e3c3b0, _Source="usertile12.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" [0144.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c [0144.143] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1c4587c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0144.143] wcscmp (_String1="usertile13.bmp", _String2=".") returned 1 [0144.143] wcscmp (_String1="usertile13.bmp", _String2="..") returned 1 [0144.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c670 [0144.143] wcscpy (in: _Dest=0x3e3c670, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.143] wcscat (in: _Dest=0x3e3c670, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.143] wcscat (in: _Dest=0x3e3c670, _Source="usertile13.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" [0144.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08 [0144.144] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527591de, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527591de, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e5abbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0144.144] wcscmp (_String1="usertile14.bmp", _String2=".") returned 1 [0144.145] wcscmp (_String1="usertile14.bmp", _String2="..") returned 1 [0144.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c300 [0144.145] wcscpy (in: _Dest=0x3e3c300, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.145] wcscat (in: _Dest=0x3e3c300, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.145] wcscat (in: _Dest=0x3e3c300, _Source="usertile14.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" [0144.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04 [0144.146] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5277f346, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5277f346, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1e80d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0144.146] wcscmp (_String1="usertile15.bmp", _String2=".") returned 1 [0144.146] wcscmp (_String1="usertile15.bmp", _String2="..") returned 1 [0144.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c1a0 [0144.146] wcscpy (in: _Dest=0x3e3c1a0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.146] wcscat (in: _Dest=0x3e3c1a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.146] wcscat (in: _Dest=0x3e3c1a0, _Source="usertile15.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" [0144.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00 [0144.147] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527a54ae, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527a54ae, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0144.147] wcscmp (_String1="usertile16.bmp", _String2=".") returned 1 [0144.147] wcscmp (_String1="usertile16.bmp", _String2="..") returned 1 [0144.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c460 [0144.147] wcscpy (in: _Dest=0x3e3c460, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.147] wcscat (in: _Dest=0x3e3c460, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.147] wcscat (in: _Dest=0x3e3c460, _Source="usertile16.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" [0144.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc [0144.149] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ea6e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0144.149] wcscmp (_String1="usertile17.bmp", _String2=".") returned 1 [0144.149] wcscmp (_String1="usertile17.bmp", _String2="..") returned 1 [0144.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c510 [0144.149] wcscpy (in: _Dest=0x3e3c510, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.149] wcscat (in: _Dest=0x3e3c510, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.149] wcscat (in: _Dest=0x3e3c510, _Source="usertile17.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" [0144.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8 [0144.150] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527cb616, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527cb616, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1eccfdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0144.150] wcscmp (_String1="usertile18.bmp", _String2=".") returned 1 [0144.150] wcscmp (_String1="usertile18.bmp", _String2="..") returned 1 [0144.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c7d0 [0144.150] wcscpy (in: _Dest=0x3e3c7d0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.150] wcscat (in: _Dest=0x3e3c7d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.150] wcscat (in: _Dest=0x3e3c7d0, _Source="usertile18.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" [0144.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b60 [0144.151] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1ef313c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0144.151] wcscmp (_String1="usertile19.bmp", _String2=".") returned 1 [0144.151] wcscmp (_String1="usertile19.bmp", _String2="..") returned 1 [0144.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c880 [0144.151] wcscpy (in: _Dest=0x3e3c880, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.151] wcscat (in: _Dest=0x3e3c880, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.151] wcscat (in: _Dest=0x3e3c880, _Source="usertile19.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" [0144.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30 [0144.152] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527f177e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x527f177e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0144.152] wcscmp (_String1="usertile20.bmp", _String2=".") returned 1 [0144.152] wcscmp (_String1="usertile20.bmp", _String2="..") returned 1 [0144.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3bf90 [0144.153] wcscpy (in: _Dest=0x3e3bf90, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.153] wcscat (in: _Dest=0x3e3bf90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.153] wcscat (in: _Dest=0x3e3bf90, _Source="usertile20.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" [0144.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3bf90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a5c [0144.154] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528178e6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528178e6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f1929c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0144.154] wcscmp (_String1="usertile21.bmp", _String2=".") returned 1 [0144.154] wcscmp (_String1="usertile21.bmp", _String2="..") returned 1 [0144.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c250 [0144.154] wcscpy (in: _Dest=0x3e3c250, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.154] wcscat (in: _Dest=0x3e3c250, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.154] wcscat (in: _Dest=0x3e3c250, _Source="usertile21.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" [0144.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c14 [0144.155] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5283da4e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5283da4e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f3f3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0144.155] wcscmp (_String1="usertile22.bmp", _String2=".") returned 1 [0144.155] wcscmp (_String1="usertile22.bmp", _String2="..") returned 1 [0144.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c930 [0144.155] wcscpy (in: _Dest=0x3e3c930, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.155] wcscat (in: _Dest=0x3e3c930, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.155] wcscat (in: _Dest=0x3e3c930, _Source="usertile22.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" [0144.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c0c [0144.156] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52863bb6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52863bb6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf1f6555c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0144.156] wcscmp (_String1="usertile23.bmp", _String2=".") returned 1 [0144.156] wcscmp (_String1="usertile23.bmp", _String2="..") returned 1 [0144.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c5c0 [0144.157] wcscpy (in: _Dest=0x3e3c5c0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.157] wcscat (in: _Dest=0x3e3c5c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.157] wcscat (in: _Dest=0x3e3c5c0, _Source="usertile23.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" [0144.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58 [0144.158] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528afe86, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528afe86, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2238f7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0144.159] wcscmp (_String1="usertile24.bmp", _String2=".") returned 1 [0144.159] wcscmp (_String1="usertile24.bmp", _String2="..") returned 1 [0144.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c720 [0144.159] wcscpy (in: _Dest=0x3e3c720, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.159] wcscat (in: _Dest=0x3e3c720, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.159] wcscat (in: _Dest=0x3e3c720, _Source="usertile24.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" [0144.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0 [0144.160] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf225f0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0144.160] wcscmp (_String1="usertile25.bmp", _String2=".") returned 1 [0144.160] wcscmp (_String1="usertile25.bmp", _String2="..") returned 1 [0144.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3c9e0 [0144.160] wcscpy (in: _Dest=0x3e3c9e0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.160] wcscat (in: _Dest=0x3e3c9e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.160] wcscat (in: _Dest=0x3e3c9e0, _Source="usertile25.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" [0144.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3c9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f4 [0144.161] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528d5fee, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x528d5fee, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf228523c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0144.162] wcscmp (_String1="usertile26.bmp", _String2=".") returned 1 [0144.162] wcscmp (_String1="usertile26.bmp", _String2="..") returned 1 [0144.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3ca90 [0144.162] wcscpy (in: _Dest=0x3e3ca90, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.162] wcscat (in: _Dest=0x3e3ca90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.162] wcscat (in: _Dest=0x3e3ca90, _Source="usertile26.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" [0144.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3ca90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e4 [0144.163] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529222be, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529222be, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0144.163] wcscmp (_String1="usertile27.bmp", _String2=".") returned 1 [0144.163] wcscmp (_String1="usertile27.bmp", _String2="..") returned 1 [0144.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3cb40 [0144.163] wcscpy (in: _Dest=0x3e3cb40, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.163] wcscat (in: _Dest=0x3e3cb40, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.163] wcscat (in: _Dest=0x3e3cb40, _Source="usertile27.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" [0144.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3cb40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808 [0144.165] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52948426, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52948426, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22ab39c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0144.165] wcscmp (_String1="usertile28.bmp", _String2=".") returned 1 [0144.165] wcscmp (_String1="usertile28.bmp", _String2="..") returned 1 [0144.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x3e3cbf0 [0144.165] wcscpy (in: _Dest=0x3e3cbf0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.165] wcscat (in: _Dest=0x3e3cbf0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.165] wcscat (in: _Dest=0x3e3cbf0, _Source="usertile28.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" [0144.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3cbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44 [0144.166] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296e58e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x5296e58e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf22d14fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0144.166] wcscmp (_String1="usertile29.bmp", _String2=".") returned 1 [0144.166] wcscmp (_String1="usertile29.bmp", _String2="..") returned 1 [0144.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66090 [0144.167] wcscpy (in: _Dest=0x7a66090, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.167] wcscat (in: _Dest=0x7a66090, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.167] wcscat (in: _Dest=0x7a66090, _Source="usertile29.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" [0144.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc0 [0144.168] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529946f6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529946f6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0144.168] wcscmp (_String1="usertile30.bmp", _String2=".") returned 1 [0144.168] wcscmp (_String1="usertile30.bmp", _String2="..") returned 1 [0144.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66140 [0144.168] wcscpy (in: _Dest=0x7a66140, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.168] wcscat (in: _Dest=0x7a66140, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.168] wcscat (in: _Dest=0x7a66140, _Source="usertile30.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" [0144.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98 [0144.169] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529ba85e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x529ba85e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf234391c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0144.169] wcscmp (_String1="usertile31.bmp", _String2=".") returned 1 [0144.170] wcscmp (_String1="usertile31.bmp", _String2="..") returned 1 [0144.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a661f0 [0144.170] wcscpy (in: _Dest=0x7a661f0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.170] wcscat (in: _Dest=0x7a661f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.170] wcscat (in: _Dest=0x7a661f0, _Source="usertile31.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" [0144.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a661f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8 [0144.171] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a06b2e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a06b2e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0144.171] wcscmp (_String1="usertile32.bmp", _String2=".") returned 1 [0144.171] wcscmp (_String1="usertile32.bmp", _String2="..") returned 1 [0144.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a662a0 [0144.171] wcscpy (in: _Dest=0x7a662a0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.171] wcscat (in: _Dest=0x7a662a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.171] wcscat (in: _Dest=0x7a662a0, _Source="usertile32.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" [0144.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a662a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b94 [0144.172] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a52dfe, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a52dfe, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf238fbdc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0144.172] wcscmp (_String1="usertile33.bmp", _String2=".") returned 1 [0144.172] wcscmp (_String1="usertile33.bmp", _String2="..") returned 1 [0144.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66350 [0144.172] wcscpy (in: _Dest=0x7a66350, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.172] wcscat (in: _Dest=0x7a66350, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.172] wcscat (in: _Dest=0x7a66350, _Source="usertile33.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" [0144.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0 [0144.173] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a78f66, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a78f66, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23b5d3c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0144.173] wcscmp (_String1="usertile34.bmp", _String2=".") returned 1 [0144.173] wcscmp (_String1="usertile34.bmp", _String2="..") returned 1 [0144.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66400 [0144.174] wcscpy (in: _Dest=0x7a66400, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.174] wcscat (in: _Dest=0x7a66400, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.174] wcscat (in: _Dest=0x7a66400, _Source="usertile34.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" [0144.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2380 [0144.175] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a9f0ce, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52a9f0ce, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf23dbe9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0144.175] wcscmp (_String1="usertile35.bmp", _String2=".") returned 1 [0144.175] wcscmp (_String1="usertile35.bmp", _String2="..") returned 1 [0144.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a664b0 [0144.175] wcscpy (in: _Dest=0x7a664b0, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.175] wcscat (in: _Dest=0x7a664b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.175] wcscat (in: _Dest=0x7a664b0, _Source="usertile35.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" [0144.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a664b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2384 [0144.176] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf2401ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0144.176] wcscmp (_String1="usertile36.bmp", _String2=".") returned 1 [0144.176] wcscmp (_String1="usertile36.bmp", _String2="..") returned 1 [0144.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0144.176] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.176] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.177] wcscat (in: _Dest=0x7a66560, _Source="usertile36.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" [0144.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1710 [0144.178] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aeb39e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52aeb39e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf242815c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0144.178] wcscmp (_String1="usertile37.bmp", _String2=".") returned 1 [0144.178] wcscmp (_String1="usertile37.bmp", _String2="..") returned 1 [0144.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66610 [0144.178] wcscpy (in: _Dest=0x7a66610, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0144.178] wcscat (in: _Dest=0x7a66610, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0144.178] wcscat (in: _Dest=0x7a66610, _Source="usertile37.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" [0144.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0145.314] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b3766e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b3766e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf244e2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0145.314] wcscmp (_String1="usertile38.bmp", _String2=".") returned 1 [0145.314] wcscmp (_String1="usertile38.bmp", _String2="..") returned 1 [0145.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0145.314] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0145.314] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0145.314] wcscat (in: _Dest=0x7a66560, _Source="usertile38.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" [0156.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0156.119] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b5d7d6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b5d7d6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf247441c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0156.119] wcscmp (_String1="usertile39.bmp", _String2=".") returned 1 [0156.119] wcscmp (_String1="usertile39.bmp", _String2="..") returned 1 [0156.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bf58 [0156.119] wcscpy (in: _Dest=0x35bf58, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.119] wcscat (in: _Dest=0x35bf58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.119] wcscat (in: _Dest=0x35bf58, _Source="usertile39.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" [0156.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc8 [0156.120] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b8393e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52b8393e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0156.120] wcscmp (_String1="usertile40.bmp", _String2=".") returned 1 [0156.120] wcscmp (_String1="usertile40.bmp", _String2="..") returned 1 [0156.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c168 [0156.121] wcscpy (in: _Dest=0x35c168, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.121] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.121] wcscat (in: _Dest=0x35c168, _Source="usertile40.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" [0156.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc4 [0156.122] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ba9aa6, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52ba9aa6, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf249a57c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0156.122] wcscmp (_String1="usertile41.bmp", _String2=".") returned 1 [0156.122] wcscmp (_String1="usertile41.bmp", _String2="..") returned 1 [0156.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b7c8 [0156.122] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.122] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.122] wcscat (in: _Dest=0x35b7c8, _Source="usertile41.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" [0156.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0156.123] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bcfc0e, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bcfc0e, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf257edbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0156.123] wcscmp (_String1="usertile42.bmp", _String2=".") returned 1 [0156.123] wcscmp (_String1="usertile42.bmp", _String2="..") returned 1 [0156.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b9d8 [0156.123] wcscpy (in: _Dest=0x35b9d8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.123] wcscat (in: _Dest=0x35b9d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.123] wcscat (in: _Dest=0x35b9d8, _Source="usertile42.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" [0156.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0156.124] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52bf5d76, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52bf5d76, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25a4f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0156.124] wcscmp (_String1="usertile43.bmp", _String2=".") returned 1 [0156.125] wcscmp (_String1="usertile43.bmp", _String2="..") returned 1 [0156.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35af88 [0156.125] wcscpy (in: _Dest=0x35af88, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.125] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.125] wcscat (in: _Dest=0x35af88, _Source="usertile43.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" [0156.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35af88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0156.126] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0156.126] wcscmp (_String1="usertile44.bmp", _String2=".") returned 1 [0156.126] wcscmp (_String1="usertile44.bmp", _String2="..") returned 1 [0156.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bdf8 [0156.126] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures" [0156.126] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\" [0156.126] wcscat (in: _Dest=0x35bdf8, _Source="usertile44.bmp" | out: _Dest="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" [0156.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34 [0156.127] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c1bede, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x52c1bede, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0xf25cb07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0156.127] FindClose (in: hFindFile=0x7ad7cb0 | out: hFindFile=0x7ad7cb0) returned 1 [0156.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59a40) returned 1 [0156.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5b60) returned 1 [0156.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44960) returned 1 Thread: id = 1586 os_tid = 0x2060 [0140.267] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\eebsym5.dat")) returned 0x2020 [0140.267] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x20) returned 1 [0144.499] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\eebsym5.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2444 [0144.499] GetFileSizeEx (in: hFile=0x2444, lpFileSize=0xccff87c | out: lpFileSize=0xccff87c*=0) returned 1 [0144.499] FlushFileBuffers (hFile=0x2444) returned 1 [0145.565] CloseHandle (hObject=0x2444) returned 1 [0145.565] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\EEBsYm5.dat", dwFileAttributes=0x2020) returned 1 [0145.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 1587 os_tid = 0x2064 [0140.268] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp")) returned 0x20 [0140.269] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0140.269] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.269] GetLastError () returned 0x5 [0140.269] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 0 [0140.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 1588 os_tid = 0x2068 [0140.271] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp")) returned 0x20 [0140.271] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0140.271] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0140.271] GetLastError () returned 0x5 [0140.271] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 0 [0140.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19098) returned 1 Thread: id = 1589 os_tid = 0x206c [0140.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt")) returned 0x20 [0147.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt", dwFileAttributes=0x20) returned 0 [0147.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.383] GetLastError () returned 0x5 [0147.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt", dwFileAttributes=0x20) returned 0 [0147.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad69a0) returned 1 Thread: id = 1590 os_tid = 0x2070 [0140.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt")) returned 0x20 [0147.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt", dwFileAttributes=0x20) returned 0 [0147.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.384] GetLastError () returned 0x5 [0147.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt", dwFileAttributes=0x20) returned 0 [0147.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6460) returned 1 Thread: id = 1591 os_tid = 0x2074 [0140.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt")) returned 0x20 [0147.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0147.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.386] GetLastError () returned 0x5 [0147.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0147.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6318) returned 1 Thread: id = 1592 os_tid = 0x2078 [0140.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45380 [0140.291] wcscpy (in: _Dest=0x3d45380, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0140.291] wcscat (in: _Dest=0x3d45380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0140.291] wcscat (in: _Dest=0x3d45380, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*" [0140.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d5a178 [0140.291] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c3a2630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c3c8790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e740f0 [0148.015] wcscmp (_String1=".", _String2=".") returned 0 [0148.015] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c3a2630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c3c8790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.015] wcscmp (_String1="..", _String2=".") returned 1 [0148.015] wcscmp (_String1="..", _String2="..") returned 0 [0148.015] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60a0a800, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60a0a800, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Address.accft", cAlternateFileName="ADDRES~1.ACC")) returned 1 [0148.015] wcscmp (_String1="Address.accft", _String2=".") returned 1 [0148.015] wcscmp (_String1="Address.accft", _String2="..") returned 1 [0148.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e090 [0148.015] wcscpy (in: _Dest=0x7a5e090, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0148.015] wcscat (in: _Dest=0x7a5e090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0148.015] wcscat (in: _Dest=0x7a5e090, _Source="Address.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" [0164.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft")) returned 0x20 [0164.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft", dwFileAttributes=0x20) returned 0 [0164.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.574] GetLastError () returned 0x5 [0164.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft", dwFileAttributes=0x20) returned 0 [0164.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0164.574] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71511e00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71511e00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Category.accft", cAlternateFileName="CATEGO~1.ACC")) returned 1 [0164.574] wcscmp (_String1="Category.accft", _String2=".") returned 1 [0164.574] wcscmp (_String1="Category.accft", _String2="..") returned 1 [0164.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e090 [0164.575] wcscpy (in: _Dest=0x7a5e090, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0164.575] wcscat (in: _Dest=0x7a5e090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0164.575] wcscat (in: _Dest=0x7a5e090, _Source="Category.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" [0164.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft")) returned 0x20 [0164.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft", dwFileAttributes=0x20) returned 0 [0164.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.575] GetLastError () returned 0x5 [0164.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft", dwFileAttributes=0x20) returned 0 [0164.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0164.576] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c0bb300, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c0bb300, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1134, dwReserved0=0x0, dwReserved1=0x0, cFileName="Name.accft", cAlternateFileName="NAME~1.ACC")) returned 1 [0164.576] wcscmp (_String1="Name.accft", _String2=".") returned 1 [0164.576] wcscmp (_String1="Name.accft", _String2="..") returned 1 [0164.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68090 [0164.576] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0164.576] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0164.576] wcscat (in: _Dest=0x7a68090, _Source="Name.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" [0164.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft")) returned 0x20 [0164.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft", dwFileAttributes=0x20) returned 0 [0164.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.611] GetLastError () returned 0x5 [0164.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft", dwFileAttributes=0x20) returned 0 [0164.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 [0164.612] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8928a200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3a2630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8928a200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="Payment Type.accft", cAlternateFileName="PAYMEN~1.ACC")) returned 1 [0164.612] wcscmp (_String1="Payment Type.accft", _String2=".") returned 1 [0164.612] wcscmp (_String1="Payment Type.accft", _String2="..") returned 1 [0164.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66820 [0164.612] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0164.612] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0164.612] wcscat (in: _Dest=0x7a66820, _Source="Payment Type.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" [0164.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft")) returned 0x20 [0164.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft", dwFileAttributes=0x20) returned 0 [0164.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.613] GetLastError () returned 0x5 [0164.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft", dwFileAttributes=0x20) returned 0 [0164.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 [0164.613] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180dd00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9180dd00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x10d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phone.accft", cAlternateFileName="PHONE~1.ACC")) returned 1 [0164.613] wcscmp (_String1="Phone.accft", _String2=".") returned 1 [0164.613] wcscmp (_String1="Phone.accft", _String2="..") returned 1 [0164.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e090 [0164.613] wcscpy (in: _Dest=0x7a5e090, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0164.613] wcscat (in: _Dest=0x7a5e090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0164.613] wcscat (in: _Dest=0x7a5e090, _Source="Phone.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" [0164.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft")) returned 0x20 [0164.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft", dwFileAttributes=0x20) returned 0 [0164.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.614] GetLastError () returned 0x5 [0164.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft", dwFileAttributes=0x20) returned 0 [0164.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0164.614] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c3b7200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9c3b7200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x112d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Priority.accft", cAlternateFileName="PRIORI~1.ACC")) returned 1 [0164.614] wcscmp (_String1="Priority.accft", _String2=".") returned 1 [0164.614] wcscmp (_String1="Priority.accft", _String2="..") returned 1 [0164.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e090 [0164.615] wcscpy (in: _Dest=0x7a5e090, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0164.615] wcscat (in: _Dest=0x7a5e090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0164.615] wcscat (in: _Dest=0x7a5e090, _Source="Priority.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" [0164.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft")) returned 0x20 [0164.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft", dwFileAttributes=0x20) returned 0 [0164.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.616] GetLastError () returned 0x5 [0164.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft", dwFileAttributes=0x20) returned 0 [0164.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0164.616] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b09c00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1b09c00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start End Dates.accft", cAlternateFileName="STARTE~1.ACC")) returned 1 [0164.616] wcscmp (_String1="Start End Dates.accft", _String2=".") returned 1 [0164.616] wcscmp (_String1="Start End Dates.accft", _String2="..") returned 1 [0164.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6740 [0164.616] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0164.616] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0164.616] wcscat (in: _Dest=0x2ff6740, _Source="Start End Dates.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" [0164.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft")) returned 0x20 [0164.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft", dwFileAttributes=0x20) returned 0 [0164.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.617] GetLastError () returned 0x5 [0164.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft", dwFileAttributes=0x20) returned 0 [0164.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 [0164.617] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d7aa00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8d7aa00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status.accft", cAlternateFileName="STATUS~1.ACC")) returned 1 [0164.617] wcscmp (_String1="Status.accft", _String2=".") returned 1 [0164.617] wcscmp (_String1="Status.accft", _String2="..") returned 1 [0164.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e090 [0164.617] wcscpy (in: _Dest=0x7a5e090, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0164.618] wcscat (in: _Dest=0x7a5e090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0164.618] wcscat (in: _Dest=0x7a5e090, _Source="Status.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" [0164.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft")) returned 0x20 [0164.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft", dwFileAttributes=0x20) returned 0 [0164.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.619] GetLastError () returned 0x5 [0164.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft", dwFileAttributes=0x20) returned 0 [0164.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0164.619] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbffeb800, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbffeb800, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 1 [0164.619] wcscmp (_String1="Tags.accft", _String2=".") returned 1 [0164.619] wcscmp (_String1="Tags.accft", _String2="..") returned 1 [0164.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68090 [0164.619] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType" [0164.619] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\" [0164.619] wcscat (in: _Dest=0x7a68090, _Source="Tags.accft" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" [0164.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft")) returned 0x20 [0164.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft", dwFileAttributes=0x20) returned 0 [0164.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.620] GetLastError () returned 0x5 [0164.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft", dwFileAttributes=0x20) returned 0 [0164.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 [0164.620] FindNextFileW (in: hFindFile=0x3e740f0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbffeb800, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c3c8790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbffeb800, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x10f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 0 [0164.621] FindClose (in: hFindFile=0x3e740f0 | out: hFindFile=0x3e740f0) returned 1 [0164.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a178) returned 1 [0164.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45380) returned 1 [0164.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45b60) returned 1 Thread: id = 1593 os_tid = 0x207c [0140.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt")) returned 0x20 [0144.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt", dwFileAttributes=0x20) returned 0 [0144.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.376] GetLastError () returned 0x5 [0147.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt", dwFileAttributes=0x20) returned 0 [0147.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5c90) returned 1 Thread: id = 1594 os_tid = 0x2080 [0140.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt")) returned 0x20 [0147.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt", dwFileAttributes=0x20) returned 0 [0147.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.382] GetLastError () returned 0x5 [0147.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt", dwFileAttributes=0x20) returned 0 [0147.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad61e8) returned 1 Thread: id = 1595 os_tid = 0x2084 [0140.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt")) returned 0x20 [0147.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0147.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.383] GetLastError () returned 0x5 [0147.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0147.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5a30) returned 1 Thread: id = 1596 os_tid = 0x2088 [0140.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt")) returned 0x20 [0147.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt", dwFileAttributes=0x20) returned 0 [0147.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.166] GetLastError () returned 0x5 [0147.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt", dwFileAttributes=0x20) returned 0 [0147.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 1597 os_tid = 0x208c [0140.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt")) returned 0x20 [0147.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt", dwFileAttributes=0x20) returned 0 [0147.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.377] GetLastError () returned 0x5 [0147.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt", dwFileAttributes=0x20) returned 0 [0147.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6150) returned 1 Thread: id = 1598 os_tid = 0x2090 [0140.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8f88 [0140.296] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0140.296] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0140.296] wcscat (in: _Dest=0x3eb8f88, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*" [0140.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59f10 [0140.296] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c460d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4acfd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0146.730] wcscmp (_String1=".", _String2=".") returned 0 [0146.730] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c460d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c4acfd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.730] wcscmp (_String1="..", _String2=".") returned 1 [0146.730] wcscmp (_String1="..", _String2="..") returned 0 [0146.730] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64342f00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64342f00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x5fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Right.accdt", cAlternateFileName="1RIGHT~1.ACC")) returned 1 [0146.730] wcscmp (_String1="1 Right.accdt", _String2=".") returned 1 [0146.730] wcscmp (_String1="1 Right.accdt", _String2="..") returned 1 [0146.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5a40 [0146.730] wcscpy (in: _Dest=0x3df5a40, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0146.730] wcscat (in: _Dest=0x3df5a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0146.731] wcscat (in: _Dest=0x3df5a40, _Source="1 Right.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" [0147.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4 [0147.801] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c8c6a00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6c8c6a00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x6005, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Top.accdt", cAlternateFileName="1TOP~1.ACC")) returned 1 [0147.801] wcscmp (_String1="1 Top.accdt", _String2=".") returned 1 [0147.801] wcscmp (_String1="1 Top.accdt", _String2="..") returned 1 [0147.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63e90 [0147.801] wcscpy (in: _Dest=0x7a63e90, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.801] wcscat (in: _Dest=0x7a63e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.801] wcscat (in: _Dest=0x7a63e90, _Source="1 Top.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" [0147.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0 [0147.803] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a95900, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c460d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79a95900, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x6306, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Right.accdt", cAlternateFileName="2RIGHT~1.ACC")) returned 1 [0147.803] wcscmp (_String1="2 Right.accdt", _String2=".") returned 1 [0147.803] wcscmp (_String1="2 Right.accdt", _String2="..") returned 1 [0147.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63f30 [0147.803] wcscpy (in: _Dest=0x7a63f30, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.803] wcscat (in: _Dest=0x7a63f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.803] wcscat (in: _Dest=0x7a63f30, _Source="2 Right.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" [0147.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c [0147.804] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82019400, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82019400, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x63ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Top.accdt", cAlternateFileName="2TOP~1.ACC")) returned 1 [0147.804] wcscmp (_String1="2 Top.accdt", _String2=".") returned 1 [0147.804] wcscmp (_String1="2 Top.accdt", _String2="..") returned 1 [0147.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63fd0 [0147.804] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.804] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.805] wcscat (in: _Dest=0x7a63fd0, _Source="2 Top.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" [0147.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198 [0147.806] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8928a200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8928a200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x4a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.accdt", cAlternateFileName="COMMEN~1.ACC")) returned 1 [0147.806] wcscmp (_String1="Comments.accdt", _String2=".") returned 1 [0147.806] wcscmp (_String1="Comments.accdt", _String2="..") returned 1 [0147.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7198 [0147.806] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.806] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.806] wcscat (in: _Dest=0x2c7198, _Source="Comments.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" [0147.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194 [0147.807] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9776be00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9776be00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x4c444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1 [0147.807] wcscmp (_String1="Contacts.accdt", _String2=".") returned 1 [0147.807] wcscmp (_String1="Contacts.accdt", _String2="..") returned 1 [0147.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7378 [0147.807] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.808] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.808] wcscat (in: _Dest=0x2c7378, _Source="Contacts.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" [0147.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190 [0147.809] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8273400, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c486e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8273400, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x510d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Details.accdt", cAlternateFileName="DETAIL~1.ACC")) returned 1 [0147.809] wcscmp (_String1="Details.accdt", _String2=".") returned 1 [0147.809] wcscmp (_String1="Details.accdt", _String2="..") returned 1 [0147.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c75f8 [0147.809] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.809] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.809] wcscat (in: _Dest=0x2c75f8, _Source="Details.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" [0147.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c [0147.816] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb07f6f00, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb07f6f00, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x53d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.accdt", cAlternateFileName="DIALOG~1.ACC")) returned 1 [0147.816] wcscmp (_String1="Dialog.accdt", _String2=".") returned 1 [0147.816] wcscmp (_String1="Dialog.accdt", _String2="..") returned 1 [0147.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c6fb8 [0147.816] wcscpy (in: _Dest=0x2c6fb8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.816] wcscat (in: _Dest=0x2c6fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.816] wcscat (in: _Dest=0x2c6fb8, _Source="Dialog.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" [0147.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188 [0147.817] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b3100, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc6b3100, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0xc660, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1 [0147.817] wcscmp (_String1="Issues.accdt", _String2=".") returned 1 [0147.817] wcscmp (_String1="Issues.accdt", _String2="..") returned 1 [0147.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c6298 [0147.817] wcscpy (in: _Dest=0x2c6298, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.817] wcscat (in: _Dest=0x2c6298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.817] wcscat (in: _Dest=0x2c6298, _Source="Issues.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" [0147.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0147.819] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc856f300, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc856f300, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x6072, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.accdt", cAlternateFileName="LIST~1.ACC")) returned 1 [0147.819] wcscmp (_String1="List.accdt", _String2=".") returned 1 [0147.819] wcscmp (_String1="List.accdt", _String2="..") returned 1 [0147.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d2d8 [0147.819] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.819] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.819] wcscat (in: _Dest=0x32d2d8, _Source="List.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" [0147.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0147.820] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd573e200, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd573e200, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x50d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media.accdt", cAlternateFileName="MEDIA~1.ACC")) returned 1 [0147.820] wcscmp (_String1="Media.accdt", _String2=".") returned 1 [0147.820] wcscmp (_String1="Media.accdt", _String2="..") returned 1 [0147.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7738 [0147.820] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.820] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.820] wcscat (in: _Dest=0x2c7738, _Source="Media.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" [0147.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0147.821] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02e7700, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe02e7700, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x5465, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msgbox.accdt", cAlternateFileName="MSGBOX~1.ACC")) returned 1 [0147.821] wcscmp (_String1="Msgbox.accdt", _String2=".") returned 1 [0147.821] wcscmp (_String1="Msgbox.accdt", _String2="..") returned 1 [0147.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a68090 [0147.821] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.821] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.821] wcscat (in: _Dest=0x7a68090, _Source="Msgbox.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" [0147.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0147.822] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3414700, ftCreationTime.dwHighDateTime=0x1caa562, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf3414700, ftLastWriteTime.dwHighDateTime=0x1caa562, nFileSizeHigh=0x0, nFileSizeLow=0x60b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tabs.accdt", cAlternateFileName="TABS~1.ACC")) returned 1 [0147.822] wcscmp (_String1="Tabs.accdt", _String2=".") returned 1 [0147.822] wcscmp (_String1="Tabs.accdt", _String2="..") returned 1 [0147.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d668 [0147.822] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.822] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.822] wcscat (in: _Dest=0x32d668, _Source="Tabs.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" [0147.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0147.824] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6541700, ftCreationTime.dwHighDateTime=0x1caa563, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6541700, ftLastWriteTime.dwHighDateTime=0x1caa563, nFileSizeHigh=0x0, nFileSizeLow=0xb315, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1 [0147.824] wcscmp (_String1="Tasks.accdt", _String2=".") returned 1 [0147.824] wcscmp (_String1="Tasks.accdt", _String2="..") returned 1 [0147.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a68130 [0147.824] wcscpy (in: _Dest=0x7a68130, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.824] wcscat (in: _Dest=0x7a68130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.824] wcscat (in: _Dest=0x7a68130, _Source="Tasks.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" [0147.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0147.825] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1966e700, ftCreationTime.dwHighDateTime=0x1caa563, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1966e700, ftLastWriteTime.dwHighDateTime=0x1caa563, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 1 [0147.825] wcscmp (_String1="Users.accdt", _String2=".") returned 1 [0147.825] wcscmp (_String1="Users.accdt", _String2="..") returned 1 [0147.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a681d0 [0147.825] wcscpy (in: _Dest=0x7a681d0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part" [0147.825] wcscat (in: _Dest=0x7a681d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\" [0147.825] wcscat (in: _Dest=0x7a681d0, _Source="Users.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" [0147.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a681d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0147.826] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1966e700, ftCreationTime.dwHighDateTime=0x1caa563, ftLastAccessTime.dwLowDateTime=0x5c4acfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1966e700, ftLastWriteTime.dwHighDateTime=0x1caa563, nFileSizeHigh=0x0, nFileSizeLow=0x8bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 0 [0147.826] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0147.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59f10) returned 1 [0147.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 [0147.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 1599 os_tid = 0x2094 [0140.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt")) returned 0x20 [0147.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt", dwFileAttributes=0x20) returned 0 [0147.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.378] GetLastError () returned 0x5 [0147.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt", dwFileAttributes=0x20) returned 0 [0147.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5900) returned 1 Thread: id = 1600 os_tid = 0x2098 [0140.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt")) returned 0x20 [0147.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt", dwFileAttributes=0x20) returned 0 [0147.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.379] GetLastError () returned 0x5 [0147.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt", dwFileAttributes=0x20) returned 0 [0147.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 Thread: id = 1601 os_tid = 0x209c [0140.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt")) returned 0x20 [0147.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt", dwFileAttributes=0x20) returned 0 [0147.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.381] GetLastError () returned 0x5 [0147.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt", dwFileAttributes=0x20) returned 0 [0147.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 Thread: id = 1602 os_tid = 0x20a0 [0140.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt")) returned 0x20 [0141.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0141.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.659] GetLastError () returned 0x5 [0145.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0146.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45bf0) returned 1 Thread: id = 1603 os_tid = 0x20a4 [0140.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb95e8 [0140.300] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0140.300] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\" [0140.300] wcscat (in: _Dest=0x3eb95e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*" [0140.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d590a0 [0140.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741f0 [0145.659] wcscmp (_String1=".", _String2=".") returned 0 [0145.660] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c30a0b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c30a0b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.660] wcscmp (_String1="..", _String2=".") returned 1 [0145.660] wcscmp (_String1="..", _String2="..") returned 0 [0145.660] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8888200, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c30a0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8888200, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x377c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="107.accdt", cAlternateFileName="107~1.ACC")) returned 1 [0145.660] wcscmp (_String1="107.accdt", _String2=".") returned 1 [0145.660] wcscmp (_String1="107.accdt", _String2="..") returned 1 [0145.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad64e0 [0145.660] wcscpy (in: _Dest=0x7ad64e0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0145.660] wcscat (in: _Dest=0x7ad64e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\" [0145.660] wcscat (in: _Dest=0x7ad64e0, _Source="107.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" [0151.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad64e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38 [0151.542] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c3ce00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c330210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3c3ce00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="1100~1.ACC")) returned 1 [0151.542] wcscmp (_String1="1100.accdt", _String2=".") returned 1 [0151.542] wcscmp (_String1="1100.accdt", _String2="..") returned 1 [0151.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64da0 [0151.542] wcscpy (in: _Dest=0x7a64da0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS" [0151.542] wcscat (in: _Dest=0x7a64da0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\" [0151.542] wcscat (in: _Dest=0x7a64da0, _Source="1100.accdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" [0151.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0151.544] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c3ce00, ftCreationTime.dwHighDateTime=0x1c6d8b0, ftLastAccessTime.dwLowDateTime=0x5c330210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa3c3ce00, ftLastWriteTime.dwHighDateTime=0x1c6d8b0, nFileSizeHigh=0x0, nFileSizeLow=0x3f6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="1100.accdt", cAlternateFileName="1100~1.ACC")) returned 0 [0151.544] FindClose (in: hFindFile=0x3e741f0 | out: hFindFile=0x3e741f0) returned 1 [0151.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d590a0) returned 1 [0151.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 [0151.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47918) returned 1 Thread: id = 1604 os_tid = 0x20a8 [0140.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6b68 [0140.306] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0140.307] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\" [0140.307] wcscat (in: _Dest=0x7ad6b68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*" [0140.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bca78 [0140.307] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7c70 [0140.307] wcscmp (_String1=".", _String2=".") returned 0 [0140.307] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.307] wcscmp (_String1="..", _String2=".") returned 1 [0140.307] wcscmp (_String1="..", _String2="..") returned 0 [0140.307] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.307] FindClose (in: hFindFile=0x7ad7c70 | out: hFindFile=0x7ad7c70) returned 1 [0140.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0140.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 [0140.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5ee8) returned 1 Thread: id = 1605 os_tid = 0x20ac [0140.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4c) returned 0x7a39580 [0140.311] wcscpy (in: _Dest=0x7a39580, _Source="C:\\ProgramData\\Sun\\Java\\Java Update" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update" [0140.311] wcscat (in: _Dest=0x7a39580, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\" [0140.311] wcscat (in: _Dest=0x7a39580, _Source="*" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\*") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\*" [0140.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bca78 [0140.311] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7c70 [0140.311] wcscmp (_String1=".", _String2=".") returned 0 [0140.311] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.312] wcscmp (_String1="..", _String2=".") returned 1 [0140.312] wcscmp (_String1="..", _String2="..") returned 0 [0140.312] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0140.312] wcscmp (_String1="jaureglist.xml", _String2=".") returned 1 [0140.312] wcscmp (_String1="jaureglist.xml", _String2="..") returned 1 [0140.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a267e8 [0140.312] wcscpy (in: _Dest=0x7a267e8, _Source="C:\\ProgramData\\Sun\\Java\\Java Update" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update") returned="C:\\ProgramData\\Sun\\Java\\Java Update" [0140.312] wcscat (in: _Dest=0x7a267e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\" [0140.312] wcscat (in: _Dest=0x7a267e8, _Source="jaureglist.xml" | out: _Dest="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" [0154.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a267e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0154.697] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70634730, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x70634730, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x70634730, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0 [0154.697] FindClose (in: hFindFile=0x7ad7c70 | out: hFindFile=0x7ad7c70) returned 1 [0154.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0154.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39580) returned 1 [0154.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84998) returned 1 Thread: id = 1606 os_tid = 0x20b0 [0140.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45410 [0140.314] wcscpy (in: _Dest=0x3d45410, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0140.314] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0140.314] wcscat (in: _Dest=0x3d45410, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*" [0140.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0140.314] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bf0 [0140.314] wcscmp (_String1=".", _String2=".") returned 0 [0140.315] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.315] wcscmp (_String1="..", _String2=".") returned 1 [0140.315] wcscmp (_String1="..", _String2="..") returned 0 [0140.315] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0140.315] wcscmp (_String1="Accessibility", _String2=".") returned 1 [0140.315] wcscmp (_String1="Accessibility", _String2="..") returned 1 [0140.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e7b750 [0140.315] wcscpy (in: _Dest=0x3e7b750, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0140.315] wcscat (in: _Dest=0x3e7b750, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0140.315] wcscat (in: _Dest=0x3e7b750, _Source="Accessibility" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0154.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e7b750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0154.700] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8b5f96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c8b5f96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c8b5f96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="CALCUL~1.LNK")) returned 1 [0154.700] wcscmp (_String1="Calculator.lnk", _String2=".") returned 1 [0154.700] wcscmp (_String1="Calculator.lnk", _String2="..") returned 1 [0154.700] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9350cc63, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9350cc63, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0154.700] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0154.700] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0154.700] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b19ca14, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b19ca14, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b19ca14, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="DISPLA~1.LNK")) returned 1 [0154.700] wcscmp (_String1="displayswitch.lnk", _String2=".") returned 1 [0154.700] wcscmp (_String1="displayswitch.lnk", _String2="..") returned 1 [0154.700] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea56fc00, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea56fc00, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea56fc00, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="MATHIN~1.LNK")) returned 1 [0154.700] wcscmp (_String1="Math Input Panel.lnk", _String2=".") returned 1 [0154.700] wcscmp (_String1="Math Input Panel.lnk", _String2="..") returned 1 [0154.700] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9479f40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe9479f40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe9479f40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="MOBILI~1.LNK")) returned 1 [0154.701] wcscmp (_String1="Mobility Center.lnk", _String2=".") returned 1 [0154.701] wcscmp (_String1="Mobility Center.lnk", _String2="..") returned 1 [0154.701] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a13760, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe6a13760, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe6a398c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="NETWOR~1.LNK")) returned 1 [0154.701] wcscmp (_String1="NetworkProjection.lnk", _String2=".") returned 1 [0154.701] wcscmp (_String1="NetworkProjection.lnk", _String2="..") returned 1 [0154.701] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f821656, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6f821656, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6f821656, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0154.701] wcscmp (_String1="Paint.lnk", _String2=".") returned 1 [0154.701] wcscmp (_String1="Paint.lnk", _String2="..") returned 1 [0154.701] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6c09bc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5f6c09bc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5f6c09bc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0154.701] wcscmp (_String1="Remote Desktop Connection.lnk", _String2=".") returned 1 [0154.701] wcscmp (_String1="Remote Desktop Connection.lnk", _String2="..") returned 1 [0154.701] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e2020, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5e2020, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="SNIPPI~1.LNK")) returned 1 [0154.701] wcscmp (_String1="Snipping Tool.lnk", _String2=".") returned 1 [0154.701] wcscmp (_String1="Snipping Tool.lnk", _String2="..") returned 1 [0154.701] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e52066a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e52066a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e52066a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="SOUNDR~1.LNK")) returned 1 [0154.701] wcscmp (_String1="Sound Recorder.lnk", _String2=".") returned 1 [0154.701] wcscmp (_String1="Sound Recorder.lnk", _String2="..") returned 1 [0154.701] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea4fd7e0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea4fd7e0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea4fd7e0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="STICKY~1.LNK")) returned 1 [0154.701] wcscmp (_String1="Sticky Notes.lnk", _String2=".") returned 1 [0154.702] wcscmp (_String1="Sticky Notes.lnk", _String2="..") returned 1 [0154.702] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae14945, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ae14945, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ae14945, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="SYNCCE~1.LNK")) returned 1 [0154.702] wcscmp (_String1="Sync Center.lnk", _String2=".") returned 1 [0154.702] wcscmp (_String1="Sync Center.lnk", _String2="..") returned 1 [0154.702] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0154.702] wcscmp (_String1="System Tools", _String2=".") returned 1 [0154.702] wcscmp (_String1="System Tools", _String2="..") returned 1 [0154.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f4e8 [0154.702] wcscpy (in: _Dest=0x7a5f4e8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0154.702] wcscat (in: _Dest=0x7a5f4e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0154.702] wcscat (in: _Dest=0x7a5f4e8, _Source="System Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0154.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5f4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0154.704] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0154.704] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0154.704] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0154.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4fa0 [0154.704] wcscpy (in: _Dest=0x3df4fa0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0154.704] wcscat (in: _Dest=0x3df4fa0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0154.704] wcscat (in: _Dest=0x3df4fa0, _Source="Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0154.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df4fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0154.705] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec6a9d8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ec6a9d8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ec6a9d8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="WELCOM~1.LNK")) returned 1 [0154.705] wcscmp (_String1="Welcome Center.lnk", _String2=".") returned 1 [0154.705] wcscmp (_String1="Welcome Center.lnk", _String2="..") returned 1 [0154.705] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0154.705] wcscmp (_String1="Windows PowerShell", _String2=".") returned 1 [0154.705] wcscmp (_String1="Windows PowerShell", _String2="..") returned 1 [0154.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a668d0 [0154.705] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0154.705] wcscat (in: _Dest=0x7a668d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0154.705] wcscat (in: _Dest=0x7a668d0, _Source="Windows PowerShell" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0154.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a668d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0154.706] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0154.707] wcscmp (_String1="Wordpad.lnk", _String2=".") returned 1 [0154.707] wcscmp (_String1="Wordpad.lnk", _String2="..") returned 1 [0154.707] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0154.707] FindClose (in: hFindFile=0x7ad7bf0 | out: hFindFile=0x7ad7bf0) returned 1 [0154.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0154.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 [0154.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 Thread: id = 1607 os_tid = 0x20b4 [0140.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df54a0 [0140.315] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0140.315] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\" [0140.315] wcscat (in: _Dest=0x3df54a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*" [0140.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0140.316] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bb0 [0140.316] wcscmp (_String1=".", _String2=".") returned 0 [0140.316] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.316] wcscmp (_String1="..", _String2=".") returned 1 [0140.316] wcscmp (_String1="..", _String2="..") returned 0 [0140.316] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11bc7ea2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11bc7ea2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x11bc7ea2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="COMPON~1.LNK")) returned 1 [0140.316] wcscmp (_String1="Component Services.lnk", _String2=".") returned 1 [0140.316] wcscmp (_String1="Component Services.lnk", _String2="..") returned 1 [0140.316] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ecb7b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a3ecb7b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a412cdb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="COMPUT~1.LNK")) returned 1 [0140.316] wcscmp (_String1="Computer Management.lnk", _String2=".") returned 1 [0140.316] wcscmp (_String1="Computer Management.lnk", _String2="..") returned 1 [0140.316] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffd732, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5dffd732, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5dffd732, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="DATASO~1.LNK")) returned 1 [0140.316] wcscmp (_String1="Data Sources (ODBC).lnk", _String2=".") returned 1 [0140.316] wcscmp (_String1="Data Sources (ODBC).lnk", _String2="..") returned 1 [0140.316] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5571e536, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5571e536, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0140.316] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0140.316] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0140.316] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6de18586, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6de18586, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6de18586, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="EVENTV~1.LNK")) returned 1 [0140.316] wcscmp (_String1="Event Viewer.lnk", _String2=".") returned 1 [0140.316] wcscmp (_String1="Event Viewer.lnk", _String2="..") returned 1 [0140.316] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a77ec81, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a77ec81, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a77ec81, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="ISCSII~1.LNK")) returned 1 [0140.316] wcscmp (_String1="iSCSI Initiator.lnk", _String2=".") returned 1 [0140.316] wcscmp (_String1="iSCSI Initiator.lnk", _String2="..") returned 1 [0140.316] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556f83d6, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x556f83d6, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x556f83d6, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="MEMORY~1.LNK")) returned 1 [0140.317] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2=".") returned 1 [0140.317] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2="..") returned 1 [0140.317] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d227738, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d227738, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d227738, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="PERFOR~1.LNK")) returned 1 [0140.317] wcscmp (_String1="Performance Monitor.lnk", _String2=".") returned 1 [0140.317] wcscmp (_String1="Performance Monitor.lnk", _String2="..") returned 1 [0140.317] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a63280, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe4a63280, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe4a63280, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="PRINTM~1.LNK")) returned 1 [0140.317] wcscmp (_String1="Print Management.lnk", _String2=".") returned 1 [0140.317] wcscmp (_String1="Print Management.lnk", _String2="..") returned 1 [0140.317] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed792b60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed792b60, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="SECURI~1.LNK")) returned 1 [0140.317] wcscmp (_String1="Security Configuration Management.lnk", _String2=".") returned 1 [0140.317] wcscmp (_String1="Security Configuration Management.lnk", _String2="..") returned 1 [0140.317] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645e65ce, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x645e65ce, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6460c72e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0140.317] wcscmp (_String1="services.lnk", _String2=".") returned 1 [0140.317] wcscmp (_String1="services.lnk", _String2="..") returned 1 [0140.317] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5590d719, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5590d719, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5593387a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0140.317] wcscmp (_String1="System Configuration.lnk", _String2=".") returned 1 [0140.317] wcscmp (_String1="System Configuration.lnk", _String2="..") returned 1 [0140.317] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6defcdc8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6defcdc8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6defcdc8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0140.317] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0140.317] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0140.317] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x614cdfb3, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x614cdfb3, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x615b27f5, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0140.318] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2=".") returned 1 [0140.318] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2="..") returned 1 [0140.318] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0140.318] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2=".") returned 1 [0140.318] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2="..") returned 1 [0140.318] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0140.318] FindClose (in: hFindFile=0x7ad7bb0 | out: hFindFile=0x7ad7bb0) returned 1 [0140.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0140.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 [0140.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 Thread: id = 1608 os_tid = 0x20b8 [0140.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba110 [0140.321] wcscpy (in: _Dest=0x3eba110, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0140.321] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\" [0140.321] wcscat (in: _Dest=0x3eba110, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*" [0140.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0140.321] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bb0 [0140.321] wcscmp (_String1=".", _String2=".") returned 0 [0140.321] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.321] wcscmp (_String1="..", _String2=".") returned 1 [0140.322] wcscmp (_String1="..", _String2="..") returned 0 [0140.322] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x8ecb8f72, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x8ecb8f72, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0140.322] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0140.322] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0140.322] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 1 [0140.322] wcscmp (_String1="GameExplorer.lnk", _String2=".") returned 1 [0140.322] wcscmp (_String1="GameExplorer.lnk", _String2="..") returned 1 [0140.322] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 0 [0140.322] FindClose (in: hFindFile=0x7ad7bb0 | out: hFindFile=0x7ad7bb0) returned 1 [0140.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0140.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 [0140.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19598) returned 1 Thread: id = 1609 os_tid = 0x20bc [0140.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19598 [0140.323] wcscpy (in: _Dest=0x3e19598, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0140.323] wcscat (in: _Dest=0x3e19598, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\" [0140.323] wcscat (in: _Dest=0x3e19598, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*" [0140.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0140.324] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bb0 [0140.325] wcscmp (_String1=".", _String2=".") returned 0 [0140.325] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.325] wcscmp (_String1="..", _String2=".") returned 1 [0140.325] wcscmp (_String1="..", _String2="..") returned 0 [0140.325] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0140.325] wcscmp (_String1="About Java.lnk", _String2=".") returned 1 [0140.325] wcscmp (_String1="About Java.lnk", _String2="..") returned 1 [0140.325] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0140.325] wcscmp (_String1="Check For Updates.lnk", _String2=".") returned 1 [0140.325] wcscmp (_String1="Check For Updates.lnk", _String2="..") returned 1 [0140.326] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6ae80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c6ae80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x78d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0140.326] wcscmp (_String1="Configure Java.lnk", _String2=".") returned 1 [0140.326] wcscmp (_String1="Configure Java.lnk", _String2="..") returned 1 [0140.326] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="GETHEL~1.LNK")) returned 1 [0140.326] wcscmp (_String1="Get Help.lnk", _String2=".") returned 1 [0140.326] wcscmp (_String1="Get Help.lnk", _String2="..") returned 1 [0140.326] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 1 [0140.326] wcscmp (_String1="Visit Java.com.lnk", _String2=".") returned 1 [0140.326] wcscmp (_String1="Visit Java.com.lnk", _String2="..") returned 1 [0140.326] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 0 [0140.326] FindClose (in: hFindFile=0x7ad7bb0 | out: hFindFile=0x7ad7bb0) returned 1 [0140.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0140.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19598) returned 1 [0140.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c98) returned 1 Thread: id = 1610 os_tid = 0x20c0 [0140.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d440f0 [0140.329] wcscpy (in: _Dest=0x3d440f0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0140.329] wcscat (in: _Dest=0x3d440f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\" [0140.329] wcscat (in: _Dest=0x3d440f0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*" [0140.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0140.329] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bb0 [0140.329] wcscmp (_String1=".", _String2=".") returned 0 [0140.329] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.329] wcscmp (_String1="..", _String2=".") returned 1 [0140.329] wcscmp (_String1="..", _String2="..") returned 0 [0140.329] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd17c1c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7dd17c1c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7dd17c1c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="BACKUP~1.LNK")) returned 1 [0140.330] wcscmp (_String1="Backup and Restore Center.lnk", _String2=".") returned 1 [0140.330] wcscmp (_String1="Backup and Restore Center.lnk", _String2="..") returned 1 [0140.330] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f211e22, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="CREATE~1.LNK")) returned 1 [0140.330] wcscmp (_String1="Create Recovery Disc.lnk", _String2=".") returned 1 [0140.330] wcscmp (_String1="Create Recovery Disc.lnk", _String2="..") returned 1 [0140.330] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x935a51df, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x935a51df, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0140.330] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0140.330] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0140.330] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0140.330] wcscmp (_String1="Remote Assistance.lnk", _String2=".") returned 1 [0140.330] wcscmp (_String1="Remote Assistance.lnk", _String2="..") returned 1 [0140.330] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 0 [0140.330] FindClose (in: hFindFile=0x7ad7bb0 | out: hFindFile=0x7ad7bb0) returned 1 [0140.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0140.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d440f0) returned 1 [0140.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 Thread: id = 1611 os_tid = 0x20c4 [0140.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5ee8 [0140.332] wcscpy (in: _Dest=0x3eb5ee8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0140.332] wcscat (in: _Dest=0x3eb5ee8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0140.332] wcscat (in: _Dest=0x3eb5ee8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*" [0140.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0140.332] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bb0 [0140.332] wcscmp (_String1=".", _String2=".") returned 0 [0140.332] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.332] wcscmp (_String1="..", _String2=".") returned 1 [0140.332] wcscmp (_String1="..", _String2="..") returned 0 [0140.332] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0140.332] wcscmp (_String1="Microsoft Access 2010.lnk", _String2=".") returned 1 [0140.332] wcscmp (_String1="Microsoft Access 2010.lnk", _String2="..") returned 1 [0140.332] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0140.332] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2=".") returned 1 [0140.332] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2="..") returned 1 [0140.333] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97214fd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="MIA4FF~1.LNK")) returned 1 [0140.333] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2=".") returned 1 [0140.333] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2="..") returned 1 [0140.333] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8dc50b0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8dc50b0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0140.333] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2=".") returned 1 [0140.333] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2="..") returned 1 [0140.333] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="MICROS~1")) returned 1 [0140.333] wcscmp (_String1="Microsoft Office 2010 Tools", _String2=".") returned 1 [0140.333] wcscmp (_String1="Microsoft Office 2010 Tools", _String2="..") returned 1 [0140.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85d80 [0140.333] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0140.333] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0140.333] wcscat (in: _Dest=0x3d85d80, _Source="Microsoft Office 2010 Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0142.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d85d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f64 [0142.398] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="MI807F~1.LNK")) returned 1 [0142.398] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2=".") returned 1 [0142.399] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2="..") returned 1 [0142.399] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="MI4465~1.LNK")) returned 1 [0142.399] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2=".") returned 1 [0142.399] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2="..") returned 1 [0142.399] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="MIAF79~1.LNK")) returned 1 [0142.399] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2=".") returned 1 [0142.399] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2="..") returned 1 [0142.399] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8fa36d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8fa36d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xb77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="MI6860~1.LNK")) returned 1 [0142.399] wcscmp (_String1="Microsoft Project 2010.lnk", _String2=".") returned 1 [0142.399] wcscmp (_String1="Microsoft Project 2010.lnk", _String2="..") returned 1 [0142.399] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="MI260D~1.LNK")) returned 1 [0142.399] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2=".") returned 1 [0142.399] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2="..") returned 1 [0142.399] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0142.399] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0142.399] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0142.399] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22bb190, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="MI7E65~1.LNK")) returned 1 [0142.399] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2=".") returned 1 [0142.399] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2="..") returned 1 [0142.399] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 1 [0142.399] wcscmp (_String1="Microsoft Word 2010.lnk", _String2=".") returned 1 [0142.399] wcscmp (_String1="Microsoft Word 2010.lnk", _String2="..") returned 1 [0142.399] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 0 [0142.400] FindClose (in: hFindFile=0x7ad7bb0 | out: hFindFile=0x7ad7bb0) returned 1 [0142.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0142.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5ee8) returned 1 [0142.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad57d0) returned 1 Thread: id = 1612 os_tid = 0x20c8 [0140.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45c80 [0140.334] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0140.334] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\" [0140.334] wcscat (in: _Dest=0x3d45c80, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*" [0140.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0140.334] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b70 [0140.335] wcscmp (_String1=".", _String2=".") returned 0 [0140.335] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.336] wcscmp (_String1="..", _String2=".") returned 1 [0140.336] wcscmp (_String1="..", _String2="..") returned 0 [0140.336] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0140.336] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0140.336] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0140.336] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 0 [0140.336] FindClose (in: hFindFile=0x7ad7b70 | out: hFindFile=0x7ad7b70) returned 1 [0140.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0140.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 [0140.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 1613 os_tid = 0x20cc [0140.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9cd0 [0140.339] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0140.339] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\" [0140.339] wcscat (in: _Dest=0x3eb9cd0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*" [0140.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0140.339] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b70 [0140.339] wcscmp (_String1=".", _String2=".") returned 0 [0140.339] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.339] wcscmp (_String1="..", _String2=".") returned 1 [0140.339] wcscmp (_String1="..", _String2="..") returned 0 [0140.339] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0140.340] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0140.340] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0140.340] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0140.340] FindClose (in: hFindFile=0x7ad7b70 | out: hFindFile=0x7ad7b70) returned 1 [0140.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0140.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 [0140.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 1614 os_tid = 0x20d0 [0140.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45c80 [0140.341] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0140.341] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\" [0140.342] wcscat (in: _Dest=0x3d45c80, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*" [0140.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0140.342] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b70 [0140.342] wcscmp (_String1=".", _String2=".") returned 0 [0140.342] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.342] wcscmp (_String1="..", _String2=".") returned 1 [0140.342] wcscmp (_String1="..", _String2="..") returned 0 [0140.342] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.342] FindClose (in: hFindFile=0x7ad7b70 | out: hFindFile=0x7ad7b70) returned 1 [0140.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0140.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 [0140.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 1615 os_tid = 0x20d4 [0140.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif")) returned 0x20 [0142.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif", dwFileAttributes=0x20) returned 0 [0142.857] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.857] GetLastError () returned 0x5 [0142.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif", dwFileAttributes=0x20) returned 0 [0142.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 1616 os_tid = 0x20d8 [0140.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\bl.gif")) returned 0x20 [0143.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif", dwFileAttributes=0x20) returned 0 [0143.276] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.276] GetLastError () returned 0x5 [0143.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif", dwFileAttributes=0x20) returned 0 [0143.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47718) returned 1 Thread: id = 1617 os_tid = 0x20dc [0140.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\br.gif")) returned 0x20 [0143.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif", dwFileAttributes=0x20) returned 0 [0143.279] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.279] GetLastError () returned 0x5 [0143.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif", dwFileAttributes=0x20) returned 0 [0143.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46e98) returned 1 Thread: id = 1618 os_tid = 0x20e0 [0140.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif")) returned 0x20 [0143.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif", dwFileAttributes=0x20) returned 0 [0143.280] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.280] GetLastError () returned 0x5 [0143.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif", dwFileAttributes=0x20) returned 0 [0143.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 Thread: id = 1619 os_tid = 0x20e4 [0140.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif")) returned 0x20 [0143.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif", dwFileAttributes=0x20) returned 0 [0143.281] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.282] GetLastError () returned 0x5 [0143.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif", dwFileAttributes=0x20) returned 0 [0143.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6020) returned 1 Thread: id = 1620 os_tid = 0x20e8 [0140.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif")) returned 0x20 [0143.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif", dwFileAttributes=0x20) returned 0 [0143.283] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.283] GetLastError () returned 0x5 [0143.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif", dwFileAttributes=0x20) returned 0 [0143.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 1621 os_tid = 0x20ec [0140.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif")) returned 0x20 [0143.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif", dwFileAttributes=0x20) returned 0 [0143.286] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.286] GetLastError () returned 0x5 [0143.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif", dwFileAttributes=0x20) returned 0 [0143.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad56a0) returned 1 Thread: id = 1622 os_tid = 0x20f0 [0140.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif")) returned 0x20 [0143.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif", dwFileAttributes=0x20) returned 0 [0143.287] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.288] GetLastError () returned 0x5 [0143.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif", dwFileAttributes=0x20) returned 0 [0143.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 Thread: id = 1623 os_tid = 0x20f4 [0140.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif")) returned 0x20 [0143.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif", dwFileAttributes=0x20) returned 0 [0143.289] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.289] GetLastError () returned 0x5 [0143.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif", dwFileAttributes=0x20) returned 0 [0143.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45da0) returned 1 Thread: id = 1624 os_tid = 0x20f8 [0140.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif")) returned 0x20 [0143.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif", dwFileAttributes=0x20) returned 0 [0143.290] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.290] GetLastError () returned 0x5 [0143.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif", dwFileAttributes=0x20) returned 0 [0143.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5148) returned 1 Thread: id = 1625 os_tid = 0x20fc [0140.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif")) returned 0x20 [0143.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", dwFileAttributes=0x20) returned 0 [0143.292] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.292] GetLastError () returned 0x5 [0143.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif", dwFileAttributes=0x20) returned 0 [0143.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5570) returned 1 Thread: id = 1626 os_tid = 0x2100 [0140.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif")) returned 0x20 [0143.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", dwFileAttributes=0x20) returned 0 [0143.293] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.293] GetLastError () returned 0x5 [0143.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif", dwFileAttributes=0x20) returned 0 [0143.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 Thread: id = 1627 os_tid = 0x2104 [0140.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif")) returned 0x20 [0143.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", dwFileAttributes=0x20) returned 0 [0143.295] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.295] GetLastError () returned 0x5 [0143.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif", dwFileAttributes=0x20) returned 0 [0143.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5440) returned 1 Thread: id = 1628 os_tid = 0x2108 [0140.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\info.gif")) returned 0x20 [0143.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", dwFileAttributes=0x20) returned 0 [0143.296] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.296] GetLastError () returned 0x5 [0143.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif", dwFileAttributes=0x20) returned 0 [0143.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47418) returned 1 Thread: id = 1629 os_tid = 0x210c [0140.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\main.css")) returned 0x20 [0143.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", dwFileAttributes=0x20) returned 0 [0143.298] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\main.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.298] GetLastError () returned 0x5 [0143.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", dwFileAttributes=0x20) returned 0 [0143.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47b18) returned 1 Thread: id = 1630 os_tid = 0x2110 [0140.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif")) returned 0x20 [0143.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", dwFileAttributes=0x20) returned 0 [0143.299] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.299] GetLastError () returned 0x5 [0143.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif", dwFileAttributes=0x20) returned 0 [0143.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 Thread: id = 1631 os_tid = 0x2114 [0140.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif")) returned 0x20 [0143.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", dwFileAttributes=0x20) returned 0 [0143.301] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.301] GetLastError () returned 0x5 [0143.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif", dwFileAttributes=0x20) returned 0 [0143.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47318) returned 1 Thread: id = 1632 os_tid = 0x2118 [0140.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif")) returned 0x20 [0143.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", dwFileAttributes=0x20) returned 0 [0143.302] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.302] GetLastError () returned 0x5 [0143.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif", dwFileAttributes=0x20) returned 0 [0143.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 1633 os_tid = 0x211c [0140.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif")) returned 0x20 [0143.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", dwFileAttributes=0x20) returned 0 [0143.304] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.304] GetLastError () returned 0x5 [0143.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif", dwFileAttributes=0x20) returned 0 [0143.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5310) returned 1 Thread: id = 1634 os_tid = 0x2120 [0140.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif")) returned 0x20 [0143.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", dwFileAttributes=0x20) returned 0 [0143.305] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.305] GetLastError () returned 0x5 [0143.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif", dwFileAttributes=0x20) returned 0 [0143.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 Thread: id = 1635 os_tid = 0x2124 [0140.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif")) returned 0x20 [0143.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", dwFileAttributes=0x20) returned 0 [0143.307] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.307] GetLastError () returned 0x5 [0143.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif", dwFileAttributes=0x20) returned 0 [0143.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 Thread: id = 1636 os_tid = 0x2128 [0140.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif")) returned 0x20 [0143.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", dwFileAttributes=0x20) returned 0 [0143.310] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.310] GetLastError () returned 0x5 [0143.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif", dwFileAttributes=0x20) returned 0 [0143.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6ad0) returned 1 Thread: id = 1637 os_tid = 0x212c [0140.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif")) returned 0x20 [0143.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", dwFileAttributes=0x20) returned 0 [0143.311] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.311] GetLastError () returned 0x5 [0143.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif", dwFileAttributes=0x20) returned 0 [0143.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2648) returned 1 Thread: id = 1638 os_tid = 0x2130 [0140.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif")) returned 0x20 [0143.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", dwFileAttributes=0x20) returned 0 [0143.313] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.313] GetLastError () returned 0x5 [0143.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif", dwFileAttributes=0x20) returned 0 [0143.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 Thread: id = 1639 os_tid = 0x2134 [0140.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif")) returned 0x20 [0142.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", dwFileAttributes=0x20) returned 0 [0142.132] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.132] GetLastError () returned 0x5 [0142.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif", dwFileAttributes=0x20) returned 0 [0142.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df25b8) returned 1 Thread: id = 1640 os_tid = 0x2138 [0140.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\rss.gif")) returned 0x20 [0143.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", dwFileAttributes=0x20) returned 0 [0143.271] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.272] GetLastError () returned 0x5 [0143.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif", dwFileAttributes=0x20) returned 0 [0143.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa2a0) returned 1 Thread: id = 1641 os_tid = 0x213c [0140.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif")) returned 0x20 [0143.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", dwFileAttributes=0x20) returned 0 [0143.277] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.277] GetLastError () returned 0x5 [0143.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif", dwFileAttributes=0x20) returned 0 [0143.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1838) returned 1 Thread: id = 1642 os_tid = 0x2140 [0142.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif")) returned 0x20 [0143.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", dwFileAttributes=0x20) returned 0 [0143.308] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.308] GetLastError () returned 0x5 [0143.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif", dwFileAttributes=0x20) returned 0 [0143.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 1643 os_tid = 0x2144 [0142.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19198 [0142.014] wcscpy (in: _Dest=0x3e19198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0142.014] wcscat (in: _Dest=0x3e19198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\" [0142.014] wcscat (in: _Dest=0x3e19198, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*" [0142.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4638 [0142.014] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7a30 [0142.015] wcscmp (_String1=".", _String2=".") returned 0 [0142.015] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.016] wcscmp (_String1="..", _String2=".") returned 1 [0142.016] wcscmp (_String1="..", _String2="..") returned 0 [0142.016] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x161fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0142.016] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0142.016] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0142.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5990 [0142.016] wcscpy (in: _Dest=0x3eb5990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0142.016] wcscat (in: _Dest=0x3eb5990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\" [0142.016] wcscat (in: _Dest=0x3eb5990, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" [0146.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0146.732] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0146.732] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0146.732] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0146.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64718 [0146.733] wcscpy (in: _Dest=0x7a64718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY" [0146.733] wcscat (in: _Dest=0x7a64718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\" [0146.733] wcscat (in: _Dest=0x7a64718, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" [0146.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b6c [0146.734] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0146.734] FindClose (in: hFindFile=0x7ad7a30 | out: hFindFile=0x7ad7a30) returned 1 [0146.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4638) returned 1 [0146.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19198) returned 1 [0146.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fcaa88) returned 1 Thread: id = 1644 os_tid = 0x2148 [0142.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19b98 [0142.016] wcscpy (in: _Dest=0x3e19b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0142.017] wcscat (in: _Dest=0x3e19b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\" [0142.017] wcscat (in: _Dest=0x3e19b98, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*" [0142.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef26f0 [0142.017] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78b0 [0144.709] wcscmp (_String1=".", _String2=".") returned 0 [0144.709] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1595c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1595c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.709] wcscmp (_String1="..", _String2=".") returned 1 [0144.709] wcscmp (_String1="..", _String2="..") returned 0 [0144.709] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6133, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0144.709] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0144.710] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0144.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad63b0 [0144.710] wcscpy (in: _Dest=0x7ad63b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0144.710] wcscat (in: _Dest=0x7ad63b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\" [0144.710] wcscat (in: _Dest=0x7ad63b0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" [0152.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad63b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c [0152.910] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0152.910] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0152.910] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0152.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64ed0 [0152.910] wcscpy (in: _Dest=0x7a64ed0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV" [0152.911] wcscat (in: _Dest=0x7a64ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\" [0152.911] wcscat (in: _Dest=0x7a64ed0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" [0152.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc [0152.912] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0152.912] FindClose (in: hFindFile=0x7ad78b0 | out: hFindFile=0x7ad78b0) returned 1 [0152.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef26f0) returned 1 [0152.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b98) returned 1 [0152.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c98) returned 1 Thread: id = 1645 os_tid = 0x214c [0142.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a718 [0142.019] wcscpy (in: _Dest=0x3e1a718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0142.019] wcscat (in: _Dest=0x3e1a718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\" [0142.019] wcscat (in: _Dest=0x3e1a718, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*" [0142.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef48a0 [0142.019] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74070 [0145.385] wcscmp (_String1=".", _String2=".") returned 0 [0145.385] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce13780, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce398e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.385] wcscmp (_String1="..", _String2=".") returned 1 [0145.385] wcscmp (_String1="..", _String2="..") returned 0 [0145.385] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x107e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0145.385] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0145.385] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0145.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5570 [0145.385] wcscpy (in: _Dest=0x7ad5570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0145.385] wcscat (in: _Dest=0x7ad5570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\" [0145.385] wcscat (in: _Dest=0x7ad5570, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" [0149.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8 [0149.849] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0149.849] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0149.849] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0149.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5e58 [0149.849] wcscpy (in: _Dest=0x7ad5e58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO" [0149.849] wcscat (in: _Dest=0x7ad5e58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\" [0149.849] wcscat (in: _Dest=0x7ad5e58, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" [0149.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc [0149.851] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce398e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0149.851] FindClose (in: hFindFile=0x3e74070 | out: hFindFile=0x3e74070) returned 1 [0149.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a0) returned 1 [0149.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a718) returned 1 [0149.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb520) returned 1 Thread: id = 1646 os_tid = 0x2150 [0142.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a498 [0142.020] wcscpy (in: _Dest=0x3e1a498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0142.020] wcscat (in: _Dest=0x3e1a498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\" [0142.020] wcscat (in: _Dest=0x3e1a498, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*" [0142.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcf48 [0142.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce85ba0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74030 [0145.383] wcscmp (_String1=".", _String2=".") returned 0 [0145.383] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdce85ba0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdce85ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.383] wcscmp (_String1="..", _String2=".") returned 1 [0145.383] wcscmp (_String1="..", _String2="..") returned 0 [0145.383] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12696, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0145.383] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0145.383] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0145.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6b68 [0145.384] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0145.384] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\" [0145.384] wcscat (in: _Dest=0x7ad6b68, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" [0153.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58 [0153.278] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0153.278] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0153.278] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0153.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb60b0 [0153.279] wcscpy (in: _Dest=0x3eb60b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE" [0153.279] wcscat (in: _Dest=0x3eb60b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\" [0153.279] wcscat (in: _Dest=0x3eb60b0, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" [0153.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb60b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50 [0153.280] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdce85ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0153.280] FindClose (in: hFindFile=0x3e74030 | out: hFindFile=0x3e74030) returned 1 [0153.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf48) returned 1 [0153.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a498) returned 1 [0153.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efab20) returned 1 Thread: id = 1647 os_tid = 0x2154 [0142.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19598 [0142.021] wcscpy (in: _Dest=0x3e19598, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0142.021] wcscat (in: _Dest=0x3e19598, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\" [0142.021] wcscat (in: _Dest=0x3e19598, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*" [0142.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc810 [0142.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73fb0 [0145.370] wcscmp (_String1=".", _String2=".") returned 0 [0145.370] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.370] wcscmp (_String1="..", _String2=".") returned 1 [0145.370] wcscmp (_String1="..", _String2="..") returned 0 [0145.370] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1595c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x49db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0145.370] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0145.371] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0145.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6c00 [0145.371] wcscpy (in: _Dest=0x7ad6c00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0145.371] wcscat (in: _Dest=0x7ad6c00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\" [0145.371] wcscat (in: _Dest=0x7ad6c00, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" [0151.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2010 [0151.536] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0151.536] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0151.536] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0151.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64a10 [0151.536] wcscpy (in: _Dest=0x7a64a10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR" [0151.536] wcscat (in: _Dest=0x7a64a10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\" [0151.536] wcscat (in: _Dest=0x7a64a10, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" [0151.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2020 [0151.538] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0151.538] FindClose (in: hFindFile=0x3e73fb0 | out: hFindFile=0x3e73fb0) returned 1 [0151.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc810) returned 1 [0151.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19598) returned 1 [0151.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb120) returned 1 Thread: id = 1648 os_tid = 0x2158 [0142.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19098 [0142.022] wcscpy (in: _Dest=0x3e19098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0142.022] wcscat (in: _Dest=0x3e19098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\" [0142.022] wcscat (in: _Dest=0x3e19098, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*" [0142.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0142.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73ff0 [0145.371] wcscmp (_String1=".", _String2=".") returned 0 [0145.371] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd133460, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd133460, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.382] wcscmp (_String1="..", _String2=".") returned 1 [0145.382] wcscmp (_String1="..", _String2="..") returned 0 [0145.382] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x197f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0145.382] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1 [0145.382] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1 [0145.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5dc0 [0145.382] wcscpy (in: _Dest=0x7ad5dc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0145.382] wcscat (in: _Dest=0x7ad5dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\" [0145.382] wcscat (in: _Dest=0x7ad5dc0, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" [0149.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e0 [0149.843] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0149.843] wcscmp (_String1="DefaultID.pdf", _String2=".") returned 1 [0149.843] wcscmp (_String1="DefaultID.pdf", _String2="..") returned 1 [0149.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5ac8 [0149.843] wcscpy (in: _Dest=0x7ad5ac8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR" [0149.843] wcscat (in: _Dest=0x7ad5ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\" [0149.843] wcscat (in: _Dest=0x7ad5ac8, _Source="DefaultID.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" [0149.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18 [0149.845] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd133460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0149.845] FindClose (in: hFindFile=0x3e73ff0 | out: hFindFile=0x3e73ff0) returned 1 [0149.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0149.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19098) returned 1 [0149.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb7a0) returned 1 Thread: id = 1649 os_tid = 0x215c [0142.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d451d0 [0142.022] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" [0142.022] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\" [0142.023] wcscat (in: _Dest=0x3d451d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*" [0142.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0142.023] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7f30 [0142.882] wcscmp (_String1=".", _String2=".") returned 0 [0142.883] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.883] wcscmp (_String1="..", _String2=".") returned 1 [0142.883] wcscmp (_String1="..", _String2="..") returned 0 [0142.883] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a5f090, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd5a5f090, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd5a5f090, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.883] FindClose (in: hFindFile=0x7ad7f30 | out: hFindFile=0x7ad7f30) returned 1 [0142.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0142.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 [0142.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 Thread: id = 1650 os_tid = 0x2160 [0142.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44c30 [0142.025] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" [0142.025] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\" [0142.025] wcscat (in: _Dest=0x3d44c30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*" [0142.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0142.025] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7a70 [0142.026] wcscmp (_String1=".", _String2=".") returned 0 [0142.026] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.026] wcscmp (_String1="..", _String2=".") returned 1 [0142.026] wcscmp (_String1="..", _String2="..") returned 0 [0142.026] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0142.026] wcscmp (_String1="14", _String2=".") returned 1 [0142.026] wcscmp (_String1="14", _String2="..") returned 1 [0142.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45c80 [0142.026] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033" [0142.026] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\" [0142.026] wcscat (in: _Dest=0x3d45c80, _Source="14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" [0152.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d45c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88 [0152.884] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0152.884] FindClose (in: hFindFile=0x7ad7a70 | out: hFindFile=0x7ad7a70) returned 1 [0152.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0152.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0152.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 1651 os_tid = 0x2164 [0142.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf")) returned 0x20 [0142.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0142.027] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.027] GetLastError () returned 0x5 [0142.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0142.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad51e0) returned 1 Thread: id = 1652 os_tid = 0x2168 [0142.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf")) returned 0x20 [0142.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0142.031] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.031] GetLastError () returned 0x5 [0142.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0142.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 Thread: id = 1653 os_tid = 0x216c [0142.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf")) returned 0x20 [0142.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0142.033] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.033] GetLastError () returned 0x5 [0142.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0142.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad53a8) returned 1 Thread: id = 1654 os_tid = 0x2170 [0142.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf")) returned 0x20 [0142.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0142.035] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.035] GetLastError () returned 0x5 [0142.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0142.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7448) returned 1 Thread: id = 1655 os_tid = 0x2174 [0142.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf")) returned 0x20 [0142.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0142.037] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.037] GetLastError () returned 0x5 [0142.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0142.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5608) returned 1 Thread: id = 1656 os_tid = 0x2178 [0142.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf")) returned 0x20 [0142.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0142.042] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.042] GetLastError () returned 0x5 [0142.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0142.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6bf8) returned 1 Thread: id = 1657 os_tid = 0x2180 [0142.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf")) returned 0x20 [0142.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0142.044] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.044] GetLastError () returned 0x5 [0142.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0142.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5868) returned 1 Thread: id = 1658 os_tid = 0x2184 [0142.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf")) returned 0x20 [0142.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0142.047] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.047] GetLastError () returned 0x5 [0142.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0142.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb74e0) returned 1 Thread: id = 1659 os_tid = 0x2188 [0142.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf")) returned 0x20 [0142.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0142.049] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.049] GetLastError () returned 0x5 [0142.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0142.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5ac8) returned 1 Thread: id = 1660 os_tid = 0x218c [0142.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf")) returned 0x20 [0142.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0142.052] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.052] GetLastError () returned 0x5 [0142.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0142.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7578) returned 1 Thread: id = 1661 os_tid = 0x2190 [0142.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0142.054] wcscpy (in: _Dest=0x3f3def0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0142.054] wcscat (in: _Dest=0x3f3def0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0142.054] wcscat (in: _Dest=0x3f3def0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*" [0142.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0142.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7f30 [0142.888] wcscmp (_String1=".", _String2=".") returned 0 [0142.888] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x48ba9270, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x48f3b370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.498] wcscmp (_String1="..", _String2=".") returned 1 [0144.498] wcscmp (_String1="..", _String2="..") returned 0 [0144.498] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc2300, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacc2300, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1 [0144.498] wcscmp (_String1="ACTIVITL.ICO", _String2=".") returned 1 [0144.498] wcscmp (_String1="ACTIVITL.ICO", _String2="..") returned 1 [0144.498] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ba9270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1 [0144.498] wcscmp (_String1="ACTIVITS.ICO", _String2=".") returned 1 [0144.498] wcscmp (_String1="ACTIVITS.ICO", _String2="..") returned 1 [0144.498] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1 [0144.498] wcscmp (_String1="ACTIVITY.CFG", _String2=".") returned 1 [0144.498] wcscmp (_String1="ACTIVITY.CFG", _String2="..") returned 1 [0144.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45f50 [0144.499] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0144.499] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0144.499] wcscat (in: _Dest=0x3d45f50, _Source="ACTIVITY.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" [0150.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8 [0150.520] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1 [0150.520] wcscmp (_String1="APPT.CFG", _String2=".") returned 1 [0150.520] wcscmp (_String1="APPT.CFG", _String2="..") returned 1 [0150.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba770 [0150.521] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.521] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.521] wcscat (in: _Dest=0x3eba770, _Source="APPT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" [0150.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x205c [0150.522] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1 [0150.522] wcscmp (_String1="APPTL.ICO", _String2=".") returned 1 [0150.522] wcscmp (_String1="APPTL.ICO", _String2="..") returned 1 [0150.522] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1 [0150.522] wcscmp (_String1="APPTS.ICO", _String2=".") returned 1 [0150.522] wcscmp (_String1="APPTS.ICO", _String2="..") returned 1 [0150.522] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1 [0150.522] wcscmp (_String1="CNFNOT.CFG", _String2=".") returned 1 [0150.522] wcscmp (_String1="CNFNOT.CFG", _String2="..") returned 1 [0150.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d452f0 [0150.522] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.522] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.523] wcscat (in: _Dest=0x3d452f0, _Source="CNFNOT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" [0150.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc [0150.524] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3b400, ftCreationTime.dwHighDateTime=0x1c6889c, ftLastAccessTime.dwLowDateTime=0x48bcf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81c3b400, ftLastWriteTime.dwHighDateTime=0x1c6889c, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1 [0150.524] wcscmp (_String1="CNFNOT.ICO", _String2=".") returned 1 [0150.524] wcscmp (_String1="CNFNOT.ICO", _String2="..") returned 1 [0150.524] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1 [0150.524] wcscmp (_String1="CNFRES.CFG", _String2=".") returned 1 [0150.524] wcscmp (_String1="CNFRES.CFG", _String2="..") returned 1 [0150.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45ec0 [0150.524] wcscpy (in: _Dest=0x3d45ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.524] wcscat (in: _Dest=0x3d45ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.525] wcscat (in: _Dest=0x3d45ec0, _Source="CNFRES.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" [0150.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2450 [0150.526] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1 [0150.526] wcscmp (_String1="CONFLICT.ICO", _String2=".") returned 1 [0150.526] wcscmp (_String1="CONFLICT.ICO", _String2="..") returned 1 [0150.526] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda112200, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda112200, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1 [0150.526] wcscmp (_String1="CONTACT.CFG", _String2=".") returned 1 [0150.526] wcscmp (_String1="CONTACT.CFG", _String2="..") returned 1 [0150.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45e30 [0150.526] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.526] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.526] wcscat (in: _Dest=0x3d45e30, _Source="CONTACT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" [0150.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f64 [0150.527] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1 [0150.527] wcscmp (_String1="CONTACTL.ICO", _String2=".") returned 1 [0150.527] wcscmp (_String1="CONTACTL.ICO", _String2="..") returned 1 [0150.527] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1 [0150.527] wcscmp (_String1="CONTACTS.ICO", _String2=".") returned 1 [0150.527] wcscmp (_String1="CONTACTS.ICO", _String2="..") returned 1 [0150.527] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48bf5530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1 [0150.527] wcscmp (_String1="DISTLIST.CFG", _String2=".") returned 1 [0150.527] wcscmp (_String1="DISTLIST.CFG", _String2="..") returned 1 [0150.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0150.528] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.528] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.528] wcscat (in: _Dest=0x3d44d50, _Source="DISTLIST.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" [0150.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8 [0150.529] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1 [0150.529] wcscmp (_String1="DISTLSTL.ICO", _String2=".") returned 1 [0150.529] wcscmp (_String1="DISTLSTL.ICO", _String2="..") returned 1 [0150.529] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1 [0150.529] wcscmp (_String1="DISTLSTS.ICO", _String2=".") returned 1 [0150.529] wcscmp (_String1="DISTLSTS.ICO", _String2="..") returned 1 [0150.529] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb424f00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb424f00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1 [0150.529] wcscmp (_String1="DOC.CFG", _String2=".") returned 1 [0150.529] wcscmp (_String1="DOC.CFG", _String2="..") returned 1 [0150.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba440 [0150.529] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.529] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.529] wcscat (in: _Dest=0x3eba440, _Source="DOC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" [0150.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20bc [0150.530] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1 [0150.530] wcscmp (_String1="DOCL.ICO", _String2=".") returned 1 [0150.530] wcscmp (_String1="DOCL.ICO", _String2="..") returned 1 [0150.530] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1 [0150.530] wcscmp (_String1="DOCS.ICO", _String2=".") returned 1 [0150.530] wcscmp (_String1="DOCS.ICO", _String2="..") returned 1 [0150.530] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc737c00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdc737c00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1 [0150.530] wcscmp (_String1="EXITEM.CFG", _String2=".") returned 1 [0150.530] wcscmp (_String1="EXITEM.CFG", _String2="..") returned 1 [0150.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45da0 [0150.530] wcscpy (in: _Dest=0x3d45da0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.530] wcscat (in: _Dest=0x3d45da0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.531] wcscat (in: _Dest=0x3d45da0, _Source="EXITEM.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" [0150.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0 [0150.532] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1 [0150.532] wcscmp (_String1="EXITEML.ICO", _String2=".") returned 1 [0150.532] wcscmp (_String1="EXITEML.ICO", _String2="..") returned 1 [0150.532] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1 [0150.532] wcscmp (_String1="EXITEMS.ICO", _String2=".") returned 1 [0150.532] wcscmp (_String1="EXITEMS.ICO", _String2="..") returned 1 [0150.532] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ce7900, ftCreationTime.dwHighDateTime=0x1c45223, ftLastAccessTime.dwLowDateTime=0x48c1b690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90ce7900, ftLastWriteTime.dwHighDateTime=0x1c45223, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1 [0150.532] wcscmp (_String1="INFOMAIL.CFG", _String2=".") returned 1 [0150.532] wcscmp (_String1="INFOMAIL.CFG", _String2="..") returned 1 [0150.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45d10 [0150.532] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.532] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.532] wcscat (in: _Dest=0x3d45d10, _Source="INFOMAIL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" [0150.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4 [0150.533] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1244b900, ftCreationTime.dwHighDateTime=0x1c6bc7f, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1244b900, ftLastWriteTime.dwHighDateTime=0x1c6bc7f, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1 [0150.533] wcscmp (_String1="INFOML.ICO", _String2=".") returned 1 [0150.533] wcscmp (_String1="INFOML.ICO", _String2="..") returned 1 [0150.533] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b87500, ftCreationTime.dwHighDateTime=0x1c6bc7f, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46b87500, ftLastWriteTime.dwHighDateTime=0x1c6bc7f, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1 [0150.533] wcscmp (_String1="INFOMS.ICO", _String2=".") returned 1 [0150.533] wcscmp (_String1="INFOMS.ICO", _String2="..") returned 1 [0150.533] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda4a900, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdda4a900, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1 [0150.533] wcscmp (_String1="IPM.CFG", _String2=".") returned 1 [0150.533] wcscmp (_String1="IPM.CFG", _String2="..") returned 1 [0150.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba6e8 [0150.534] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.534] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.534] wcscat (in: _Dest=0x3eba6e8, _Source="IPM.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" [0150.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8 [0150.535] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1 [0150.535] wcscmp (_String1="IPML.ICO", _String2=".") returned 1 [0150.535] wcscmp (_String1="IPML.ICO", _String2="..") returned 1 [0150.535] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c417f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1 [0150.535] wcscmp (_String1="IPMS.ICO", _String2=".") returned 1 [0150.535] wcscmp (_String1="IPMS.ICO", _String2="..") returned 1 [0150.535] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c3bfd00, ftCreationTime.dwHighDateTime=0x1c67fa8, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c3bfd00, ftLastWriteTime.dwHighDateTime=0x1c67fa8, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1 [0150.535] wcscmp (_String1="MMSL.ICO", _String2=".") returned 1 [0150.535] wcscmp (_String1="MMSL.ICO", _String2="..") returned 1 [0150.535] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d33cc00, ftCreationTime.dwHighDateTime=0x1c68600, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d33cc00, ftLastWriteTime.dwHighDateTime=0x1c68600, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1 [0150.535] wcscmp (_String1="MMSS.ICO", _String2=".") returned 1 [0150.535] wcscmp (_String1="MMSS.ICO", _String2="..") returned 1 [0150.535] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded5d600, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded5d600, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1 [0150.535] wcscmp (_String1="NOTE.CFG", _String2=".") returned 1 [0150.535] wcscmp (_String1="NOTE.CFG", _String2="..") returned 1 [0150.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb94d8 [0150.535] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.535] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.535] wcscat (in: _Dest=0x3eb94d8, _Source="NOTE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" [0150.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4 [0150.536] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48c8dab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1 [0150.536] wcscmp (_String1="NOTEL.ICO", _String2=".") returned 1 [0150.536] wcscmp (_String1="NOTEL.ICO", _String2="..") returned 1 [0150.536] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48cb3c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1 [0150.536] wcscmp (_String1="NOTES.ICO", _String2=".") returned 1 [0150.536] wcscmp (_String1="NOTES.ICO", _String2="..") returned 1 [0150.536] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9620200, ftCreationTime.dwHighDateTime=0x1c9d9cf, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9620200, ftLastWriteTime.dwHighDateTime=0x1c9d9cf, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1 [0150.536] wcscmp (_String1="OMSMMS.CFG", _String2=".") returned 1 [0150.536] wcscmp (_String1="OMSMMS.CFG", _String2="..") returned 1 [0150.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d443c0 [0150.537] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.537] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.537] wcscat (in: _Dest=0x3d443c0, _Source="OMSMMS.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" [0150.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d443c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0 [0150.538] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc74d200, ftCreationTime.dwHighDateTime=0x1c9d9cf, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc74d200, ftLastWriteTime.dwHighDateTime=0x1c9d9cf, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1 [0150.541] wcscmp (_String1="OMSSMS.CFG", _String2=".") returned 1 [0150.541] wcscmp (_String1="OMSSMS.CFG", _String2="..") returned 1 [0150.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45260 [0150.542] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0150.542] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0150.542] wcscat (in: _Dest=0x3d45260, _Source="OMSSMS.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" [0152.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4 [0152.940] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1 [0152.940] wcscmp (_String1="OOFL.ICO", _String2=".") returned 1 [0152.940] wcscmp (_String1="OOFL.ICO", _String2="..") returned 1 [0152.940] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1 [0152.940] wcscmp (_String1="OOFS.ICO", _String2=".") returned 1 [0152.941] wcscmp (_String1="OOFS.ICO", _String2="..") returned 1 [0152.941] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99b8600, ftCreationTime.dwHighDateTime=0x1c944fe, ftLastAccessTime.dwLowDateTime=0x48cd9d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd99b8600, ftLastWriteTime.dwHighDateTime=0x1c944fe, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1 [0152.941] wcscmp (_String1="OOFTMPL.CFG", _String2=".") returned 1 [0152.941] wcscmp (_String1="OOFTMPL.CFG", _String2="..") returned 1 [0152.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44c30 [0152.941] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.941] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.941] wcscat (in: _Dest=0x3d44c30, _Source="OOFTMPL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" [0152.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e4 [0152.943] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1383000, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1383000, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1 [0152.943] wcscmp (_String1="POST.CFG", _String2=".") returned 1 [0152.943] wcscmp (_String1="POST.CFG", _String2="..") returned 1 [0152.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d6c0 [0152.943] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.943] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.943] wcscat (in: _Dest=0x3f3d6c0, _Source="POST.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" [0152.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1894 [0152.945] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1383000, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1383000, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1 [0152.945] wcscmp (_String1="POSTIT.CFG", _String2=".") returned 1 [0152.945] wcscmp (_String1="POSTIT.CFG", _String2="..") returned 1 [0152.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45ad0 [0152.945] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.945] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.945] wcscat (in: _Dest=0x3d45ad0, _Source="POSTIT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" [0152.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58 [0152.947] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1 [0152.947] wcscmp (_String1="POSTITL.ICO", _String2=".") returned 1 [0152.947] wcscmp (_String1="POSTITL.ICO", _String2="..") returned 1 [0152.947] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1 [0152.947] wcscmp (_String1="POSTITS.ICO", _String2=".") returned 1 [0152.947] wcscmp (_String1="POSTITS.ICO", _String2="..") returned 1 [0152.947] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1 [0152.947] wcscmp (_String1="POSTL.ICO", _String2=".") returned 1 [0152.947] wcscmp (_String1="POSTL.ICO", _String2="..") returned 1 [0152.947] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1 [0152.947] wcscmp (_String1="POSTS.ICO", _String2=".") returned 1 [0152.947] wcscmp (_String1="POSTS.ICO", _String2="..") returned 1 [0152.947] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48e7cc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1 [0152.947] wcscmp (_String1="RCLRPT.CFG", _String2=".") returned 1 [0152.947] wcscmp (_String1="RCLRPT.CFG", _String2="..") returned 1 [0152.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44330 [0152.948] wcscpy (in: _Dest=0x3d44330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.948] wcscat (in: _Dest=0x3d44330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.948] wcscat (in: _Dest=0x3d44330, _Source="RCLRPT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" [0152.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c [0152.949] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1 [0152.949] wcscmp (_String1="REC.CFG", _String2=".") returned 1 [0152.949] wcscmp (_String1="REC.CFG", _String2="..") returned 1 [0152.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cdb8 [0152.949] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.949] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.949] wcscat (in: _Dest=0x3f3cdb8, _Source="REC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" [0152.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d0 [0152.951] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1 [0152.951] wcscmp (_String1="RECL.ICO", _String2=".") returned 1 [0152.951] wcscmp (_String1="RECL.ICO", _String2="..") returned 1 [0152.951] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1 [0152.951] wcscmp (_String1="RECS.ICO", _String2=".") returned 1 [0152.951] wcscmp (_String1="RECS.ICO", _String2="..") returned 1 [0152.951] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1 [0152.951] wcscmp (_String1="REMOTE.CFG", _String2=".") returned 1 [0152.951] wcscmp (_String1="REMOTE.CFG", _String2="..") returned 1 [0152.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45a40 [0152.951] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.951] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.952] wcscat (in: _Dest=0x3d45a40, _Source="REMOTE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" [0152.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0152.953] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1 [0152.953] wcscmp (_String1="REMOTEL.ICO", _String2=".") returned 1 [0152.953] wcscmp (_String1="REMOTEL.ICO", _String2="..") returned 1 [0152.953] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1 [0152.953] wcscmp (_String1="REMOTES.ICO", _String2=".") returned 1 [0152.953] wcscmp (_String1="REMOTES.ICO", _String2="..") returned 1 [0152.953] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1 [0152.953] wcscmp (_String1="REPLTMPL.CFG", _String2=".") returned 1 [0152.954] wcscmp (_String1="REPLTMPL.CFG", _String2="..") returned 1 [0152.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60a20 [0152.954] wcscpy (in: _Dest=0x7a60a20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.954] wcscat (in: _Dest=0x7a60a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.954] wcscat (in: _Dest=0x7a60a20, _Source="REPLTMPL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" [0152.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0152.955] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2695d00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe2695d00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1 [0152.955] wcscmp (_String1="REPORT.CFG", _String2=".") returned 1 [0152.955] wcscmp (_String1="REPORT.CFG", _String2="..") returned 1 [0152.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60ab0 [0152.956] wcscpy (in: _Dest=0x7a60ab0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.956] wcscat (in: _Dest=0x7a60ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.956] wcscat (in: _Dest=0x7a60ab0, _Source="REPORT.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" [0152.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b6c [0152.957] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1 [0152.957] wcscmp (_String1="REPORTL.ICO", _String2=".") returned 1 [0152.957] wcscmp (_String1="REPORTL.ICO", _String2="..") returned 1 [0152.957] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1 [0152.957] wcscmp (_String1="REPORTS.ICO", _String2=".") returned 1 [0152.958] wcscmp (_String1="REPORTS.ICO", _String2="..") returned 1 [0152.958] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe39a8a00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe39a8a00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1 [0152.958] wcscmp (_String1="RESEND.CFG", _String2=".") returned 1 [0152.958] wcscmp (_String1="RESEND.CFG", _String2="..") returned 1 [0152.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60b40 [0152.958] wcscpy (in: _Dest=0x7a60b40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.958] wcscat (in: _Dest=0x7a60b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.958] wcscat (in: _Dest=0x7a60b40, _Source="RESEND.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" [0152.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b74 [0152.959] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1 [0152.959] wcscmp (_String1="RESENDL.ICO", _String2=".") returned 1 [0152.959] wcscmp (_String1="RESENDL.ICO", _String2="..") returned 1 [0152.960] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1 [0152.960] wcscmp (_String1="RESENDS.ICO", _String2=".") returned 1 [0152.960] wcscmp (_String1="RESENDS.ICO", _String2="..") returned 1 [0152.960] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a45400, ftCreationTime.dwHighDateTime=0x1c616cc, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb6a45400, ftLastWriteTime.dwHighDateTime=0x1c616cc, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1 [0152.960] wcscmp (_String1="RSSITEM.CFG", _String2=".") returned 1 [0152.960] wcscmp (_String1="RSSITEM.CFG", _String2="..") returned 1 [0152.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a601b0 [0152.960] wcscpy (in: _Dest=0x7a601b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0152.960] wcscat (in: _Dest=0x7a601b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0152.960] wcscat (in: _Dest=0x7a601b0, _Source="RSSITEM.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" [0152.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a601b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c [0152.961] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd404d500, ftCreationTime.dwHighDateTime=0x1c6889c, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd404d500, ftLastWriteTime.dwHighDateTime=0x1c6889c, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1 [0152.961] wcscmp (_String1="RSSITEML.ICO", _String2=".") returned 1 [0152.961] wcscmp (_String1="RSSITEML.ICO", _String2="..") returned 1 [0152.961] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b6b900, ftCreationTime.dwHighDateTime=0x1c6889c, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5b6b900, ftLastWriteTime.dwHighDateTime=0x1c6889c, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1 [0152.962] wcscmp (_String1="RSSITEMS.ICO", _String2=".") returned 1 [0152.962] wcscmp (_String1="RSSITEMS.ICO", _String2="..") returned 1 [0152.962] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ea2df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1 [0152.962] wcscmp (_String1="SCDCNCLL.ICO", _String2=".") returned 1 [0152.962] wcscmp (_String1="SCDCNCLL.ICO", _String2="..") returned 1 [0152.962] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1 [0152.962] wcscmp (_String1="SCDCNCLS.ICO", _String2=".") returned 1 [0152.962] wcscmp (_String1="SCDCNCLS.ICO", _String2="..") returned 1 [0152.962] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1 [0152.962] wcscmp (_String1="SCDREQL.ICO", _String2=".") returned 1 [0152.962] wcscmp (_String1="SCDREQL.ICO", _String2="..") returned 1 [0152.962] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1 [0152.962] wcscmp (_String1="SCDREQS.ICO", _String2=".") returned 1 [0152.962] wcscmp (_String1="SCDREQS.ICO", _String2="..") returned 1 [0152.962] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1 [0152.962] wcscmp (_String1="SCDRESNL.ICO", _String2=".") returned 1 [0152.962] wcscmp (_String1="SCDRESNL.ICO", _String2="..") returned 1 [0152.962] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1 [0152.962] wcscmp (_String1="SCDRESNS.ICO", _String2=".") returned 1 [0152.962] wcscmp (_String1="SCDRESNS.ICO", _String2="..") returned 1 [0152.962] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1 [0152.962] wcscmp (_String1="SCDRESPL.ICO", _String2=".") returned 1 [0152.962] wcscmp (_String1="SCDRESPL.ICO", _String2="..") returned 1 [0152.962] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1 [0153.998] wcscmp (_String1="SCDRESPS.ICO", _String2=".") returned 1 [0153.998] wcscmp (_String1="SCDRESPS.ICO", _String2="..") returned 1 [0153.998] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1 [0153.998] wcscmp (_String1="SCDRESTL.ICO", _String2=".") returned 1 [0153.998] wcscmp (_String1="SCDRESTL.ICO", _String2="..") returned 1 [0153.998] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1 [0153.998] wcscmp (_String1="SCDRESTS.ICO", _String2=".") returned 1 [0153.998] wcscmp (_String1="SCDRESTS.ICO", _String2="..") returned 1 [0153.998] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe39a8a00, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe39a8a00, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1 [0153.998] wcscmp (_String1="SCHDCNCL.CFG", _String2=".") returned 1 [0153.998] wcscmp (_String1="SCHDCNCL.CFG", _String2="..") returned 1 [0153.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61560 [0153.999] wcscpy (in: _Dest=0x7a61560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0153.999] wcscat (in: _Dest=0x7a61560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0153.999] wcscat (in: _Dest=0x7a61560, _Source="SCHDCNCL.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" [0156.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0156.137] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fdf200, ftCreationTime.dwHighDateTime=0x1bfc516, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x40fdf200, ftLastWriteTime.dwHighDateTime=0x1bfc516, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1 [0156.138] wcscmp (_String1="SCHDREQ.CFG", _String2=".") returned 1 [0156.138] wcscmp (_String1="SCHDREQ.CFG", _String2="..") returned 1 [0156.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44960 [0156.138] wcscpy (in: _Dest=0x3d44960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.138] wcscat (in: _Dest=0x3d44960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.138] wcscat (in: _Dest=0x3d44960, _Source="SCHDREQ.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" [0156.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0156.139] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cbb700, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4cbb700, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1 [0156.139] wcscmp (_String1="SCHDRESN.CFG", _String2=".") returned 1 [0156.139] wcscmp (_String1="SCHDRESN.CFG", _String2="..") returned 1 [0156.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d455c0 [0156.139] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.139] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.140] wcscat (in: _Dest=0x3d455c0, _Source="SCHDRESN.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" [0156.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0156.141] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cbb700, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4cbb700, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1 [0156.141] wcscmp (_String1="SCHDRESP.CFG", _String2=".") returned 1 [0156.141] wcscmp (_String1="SCHDRESP.CFG", _String2="..") returned 1 [0156.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44f00 [0156.141] wcscpy (in: _Dest=0x3d44f00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.141] wcscat (in: _Dest=0x3d44f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.141] wcscat (in: _Dest=0x3d44f00, _Source="SCHDRESP.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" [0156.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0156.143] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cbb700, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48ec8f50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4cbb700, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1 [0156.143] wcscmp (_String1="SCHDREST.CFG", _String2=".") returned 1 [0156.143] wcscmp (_String1="SCHDREST.CFG", _String2="..") returned 1 [0156.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45800 [0156.143] wcscpy (in: _Dest=0x3d45800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.143] wcscat (in: _Dest=0x3d45800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.143] wcscat (in: _Dest=0x3d45800, _Source="SCHDREST.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" [0156.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0156.145] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fef800, ftCreationTime.dwHighDateTime=0x1c2b0e3, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x19fef800, ftLastWriteTime.dwHighDateTime=0x1c2b0e3, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1 [0156.145] wcscmp (_String1="SECREC.CFG", _String2=".") returned 1 [0156.145] wcscmp (_String1="SECREC.CFG", _String2="..") returned 1 [0156.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44ba0 [0156.145] wcscpy (in: _Dest=0x3d44ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.145] wcscat (in: _Dest=0x3d44ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.145] wcscat (in: _Dest=0x3d44ba0, _Source="SECREC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" [0156.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0156.146] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1 [0156.146] wcscmp (_String1="SECRECL.ICO", _String2=".") returned 1 [0156.146] wcscmp (_String1="SECRECL.ICO", _String2="..") returned 1 [0156.147] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1 [0156.147] wcscmp (_String1="SECRECS.ICO", _String2=".") returned 1 [0156.147] wcscmp (_String1="SECRECS.ICO", _String2="..") returned 1 [0156.147] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1 [0156.147] wcscmp (_String1="SECURE.CFG", _String2=".") returned 1 [0156.147] wcscmp (_String1="SECURE.CFG", _String2="..") returned 1 [0156.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45920 [0156.147] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.147] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.147] wcscat (in: _Dest=0x3d45920, _Source="SECURE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" [0156.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0156.148] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1 [0156.148] wcscmp (_String1="SECURL.ICO", _String2=".") returned 1 [0156.148] wcscmp (_String1="SECURL.ICO", _String2="..") returned 1 [0156.148] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1 [0156.148] wcscmp (_String1="SECURS.ICO", _String2=".") returned 1 [0156.148] wcscmp (_String1="SECURS.ICO", _String2="..") returned 1 [0156.148] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ae7300, ftCreationTime.dwHighDateTime=0x1c616cc, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0ae7300, ftLastWriteTime.dwHighDateTime=0x1c616cc, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1 [0156.148] wcscmp (_String1="SHARING.CFG", _String2=".") returned 1 [0156.149] wcscmp (_String1="SHARING.CFG", _String2="..") returned 1 [0156.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44cc0 [0156.149] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.149] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.149] wcscat (in: _Dest=0x3d44cc0, _Source="SHARING.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" [0156.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0156.150] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1 [0156.150] wcscmp (_String1="SIGN.CFG", _String2=".") returned 1 [0156.150] wcscmp (_String1="SIGN.CFG", _String2="..") returned 1 [0156.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3062988 [0156.150] wcscpy (in: _Dest=0x3062988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.150] wcscat (in: _Dest=0x3062988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.150] wcscat (in: _Dest=0x3062988, _Source="SIGN.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" [0156.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0156.151] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1 [0156.151] wcscmp (_String1="SIGNL.ICO", _String2=".") returned 1 [0156.151] wcscmp (_String1="SIGNL.ICO", _String2="..") returned 1 [0156.151] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1 [0156.151] wcscmp (_String1="SIGNS.ICO", _String2=".") returned 1 [0156.151] wcscmp (_String1="SIGNS.ICO", _String2="..") returned 1 [0156.152] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1 [0156.152] wcscmp (_String1="SMIMEE.CFG", _String2=".") returned 1 [0156.152] wcscmp (_String1="SMIMEE.CFG", _String2="..") returned 1 [0156.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d440f0 [0156.152] wcscpy (in: _Dest=0x3d440f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.152] wcscat (in: _Dest=0x3d440f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.152] wcscat (in: _Dest=0x3d440f0, _Source="SMIMEE.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" [0156.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d440f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0156.153] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1 [0156.153] wcscmp (_String1="SMIMES.CFG", _String2=".") returned 1 [0156.153] wcscmp (_String1="SMIMES.CFG", _String2="..") returned 1 [0156.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45140 [0156.153] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.153] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.154] wcscat (in: _Dest=0x3d45140, _Source="SMIMES.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" [0156.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0156.155] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52ded00, ftCreationTime.dwHighDateTime=0x1c6674a, ftLastAccessTime.dwLowDateTime=0x48eef0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc52ded00, ftLastWriteTime.dwHighDateTime=0x1c6674a, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1 [0156.155] wcscmp (_String1="SMSL.ICO", _String2=".") returned 1 [0156.155] wcscmp (_String1="SMSL.ICO", _String2="..") returned 1 [0156.155] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41480a00, ftCreationTime.dwHighDateTime=0x1c68600, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x41480a00, ftLastWriteTime.dwHighDateTime=0x1c68600, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1 [0156.155] wcscmp (_String1="SMSS.ICO", _String2=".") returned 1 [0156.155] wcscmp (_String1="SMSS.ICO", _String2="..") returned 1 [0156.155] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1 [0156.155] wcscmp (_String1="TASK.CFG", _String2=".") returned 1 [0156.155] wcscmp (_String1="TASK.CFG", _String2="..") returned 1 [0156.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x30633a0 [0156.155] wcscpy (in: _Dest=0x30633a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.155] wcscat (in: _Dest=0x30633a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.155] wcscat (in: _Dest=0x30633a0, _Source="TASK.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" [0156.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30633a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0156.157] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1 [0156.157] wcscmp (_String1="TASKACC.CFG", _String2=".") returned 1 [0156.157] wcscmp (_String1="TASKACC.CFG", _String2="..") returned 1 [0156.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61320 [0156.157] wcscpy (in: _Dest=0x7a61320, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.157] wcscat (in: _Dest=0x7a61320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.157] wcscat (in: _Dest=0x7a61320, _Source="TASKACC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" [0156.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0156.158] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1 [0156.158] wcscmp (_String1="TASKACCL.ICO", _String2=".") returned 1 [0156.158] wcscmp (_String1="TASKACCL.ICO", _String2="..") returned 1 [0156.158] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1 [0156.158] wcscmp (_String1="TASKACCS.ICO", _String2=".") returned 1 [0156.158] wcscmp (_String1="TASKACCS.ICO", _String2="..") returned 1 [0156.158] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1 [0156.158] wcscmp (_String1="TASKDEC.CFG", _String2=".") returned 1 [0156.158] wcscmp (_String1="TASKDEC.CFG", _String2="..") returned 1 [0156.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61290 [0156.159] wcscpy (in: _Dest=0x7a61290, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.159] wcscat (in: _Dest=0x7a61290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.159] wcscat (in: _Dest=0x7a61290, _Source="TASKDEC.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" [0156.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0156.160] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1 [0156.160] wcscmp (_String1="TASKDECL.ICO", _String2=".") returned 1 [0156.160] wcscmp (_String1="TASKDECL.ICO", _String2="..") returned 1 [0156.160] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1 [0156.161] wcscmp (_String1="TASKDECS.ICO", _String2=".") returned 1 [0156.161] wcscmp (_String1="TASKDECS.ICO", _String2="..") returned 1 [0156.161] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1 [0156.161] wcscmp (_String1="TASKL.ICO", _String2=".") returned 1 [0156.161] wcscmp (_String1="TASKL.ICO", _String2="..") returned 1 [0156.161] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fce400, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe5fce400, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQ.CFG", cAlternateFileName="")) returned 1 [0156.161] wcscmp (_String1="TASKREQ.CFG", _String2=".") returned 1 [0156.161] wcscmp (_String1="TASKREQ.CFG", _String2="..") returned 1 [0156.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61200 [0156.161] wcscpy (in: _Dest=0x7a61200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.161] wcscat (in: _Dest=0x7a61200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.161] wcscat (in: _Dest=0x7a61200, _Source="TASKREQ.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" [0156.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0156.162] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f15210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQL.ICO", cAlternateFileName="")) returned 1 [0156.162] wcscmp (_String1="TASKREQL.ICO", _String2=".") returned 1 [0156.162] wcscmp (_String1="TASKREQL.ICO", _String2="..") returned 1 [0156.163] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQS.ICO", cAlternateFileName="")) returned 1 [0156.163] wcscmp (_String1="TASKREQS.ICO", _String2=".") returned 1 [0156.163] wcscmp (_String1="TASKREQS.ICO", _String2="..") returned 1 [0156.163] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd5000, ftCreationTime.dwHighDateTime=0x1c50fa8, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd5000, ftLastWriteTime.dwHighDateTime=0x1c50fa8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKS.ICO", cAlternateFileName="")) returned 1 [0156.163] wcscmp (_String1="TASKS.ICO", _String2=".") returned 1 [0156.163] wcscmp (_String1="TASKS.ICO", _String2="..") returned 1 [0156.163] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe72e1100, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe72e1100, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 1 [0156.946] wcscmp (_String1="TASKUPD.CFG", _String2=".") returned 1 [0156.946] wcscmp (_String1="TASKUPD.CFG", _String2="..") returned 1 [0156.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d449f0 [0156.947] wcscpy (in: _Dest=0x3d449f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033" [0156.947] wcscat (in: _Dest=0x3d449f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\" [0156.947] wcscat (in: _Dest=0x3d449f0, _Source="TASKUPD.CFG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG") returned="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" [0166.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d449f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0166.741] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe72e1100, ftCreationTime.dwHighDateTime=0x1bdcc39, ftLastAccessTime.dwLowDateTime=0x48f3b370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe72e1100, ftLastWriteTime.dwHighDateTime=0x1bdcc39, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 0 [0166.741] FindClose (in: hFindFile=0x7ad7f30 | out: hFindFile=0x7ad7f30) returned 1 [0166.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0166.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0166.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 Thread: id = 1662 os_tid = 0x2194 [0142.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dd88 [0142.057] wcscpy (in: _Dest=0x3f3dd88, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0142.057] wcscat (in: _Dest=0x3f3dd88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0142.057] wcscat (in: _Dest=0x3f3dd88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*" [0142.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0142.058] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7f70 [0142.890] wcscmp (_String1=".", _String2=".") returned 0 [0142.890] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x7f327de0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x7f327de0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.890] wcscmp (_String1="..", _String2=".") returned 1 [0142.890] wcscmp (_String1="..", _String2="..") returned 0 [0142.890] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47d0310, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe47d0310, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x887094a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0142.890] wcscmp (_String1="rdrmessage.zip", _String2=".") returned 1 [0142.890] wcscmp (_String1="rdrmessage.zip", _String2="..") returned 1 [0142.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d451d0 [0142.890] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0142.890] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0142.890] wcscat (in: _Dest=0x3d451d0, _Source="rdrmessage.zip" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" [0146.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d451d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2028 [0146.067] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7b19f10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd7b19f10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x7f2b59c0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0146.067] wcscmp (_String1="ReaderMessages", _String2=".") returned 1 [0146.067] wcscmp (_String1="ReaderMessages", _String2="..") returned 1 [0146.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44a80 [0146.067] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0146.067] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0146.067] wcscat (in: _Dest=0x3d44a80, _Source="ReaderMessages" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" [0146.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28 [0146.069] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0146.069] wcscmp (_String1="Search", _String2=".") returned 1 [0146.069] wcscmp (_String1="Search", _String2="..") returned 1 [0146.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a098 [0146.070] wcscpy (in: _Dest=0x3e1a098, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" [0146.070] wcscat (in: _Dest=0x3e1a098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0146.070] wcscat (in: _Dest=0x3e1a098, _Source="Search" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" [0146.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1a098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0146.072] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0146.072] FindClose (in: hFindFile=0x7ad7f70 | out: hFindFile=0x7ad7f70) returned 1 [0146.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0146.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0146.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 Thread: id = 1663 os_tid = 0x2198 [0142.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a268c8 [0142.061] wcscpy (in: _Dest=0x7a268c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0142.061] wcscat (in: _Dest=0x7a268c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0142.061] wcscat (in: _Dest=0x7a268c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*" [0142.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53b08 [0142.061] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78f0 [0142.063] wcscmp (_String1=".", _String2=".") returned 0 [0142.064] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a38f30, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92a177a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92a177a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.064] wcscmp (_String1="..", _String2=".") returned 1 [0142.064] wcscmp (_String1="..", _String2="..") returned 0 [0142.064] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x85d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0142.064] wcscmp (_String1="AdobeCMapFnt10.lst", _String2=".") returned 1 [0142.064] wcscmp (_String1="AdobeCMapFnt10.lst", _String2="..") returned 1 [0142.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7578 [0142.064] wcscpy (in: _Dest=0x3eb7578, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0142.064] wcscat (in: _Dest=0x3eb7578, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0142.064] wcscat (in: _Dest=0x3eb7578, _Source="AdobeCMapFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" [0146.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc [0146.738] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0146.738] wcscmp (_String1="AdobeSysFnt10.lst", _String2=".") returned 1 [0146.738] wcscmp (_String1="AdobeSysFnt10.lst", _String2="..") returned 1 [0146.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d449f0 [0146.738] wcscpy (in: _Dest=0x3d449f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0146.738] wcscat (in: _Dest=0x3d449f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0146.738] wcscat (in: _Dest=0x3d449f0, _Source="AdobeSysFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" [0146.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d449f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b70 [0146.740] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xebdb3e10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0146.740] wcscmp (_String1="Cache", _String2=".") returned 1 [0146.741] wcscmp (_String1="Cache", _String2="..") returned 1 [0146.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0146.741] wcscpy (in: _Dest=0x3f3e7d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0146.741] wcscat (in: _Dest=0x3f3e7d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0146.741] wcscat (in: _Dest=0x3f3e7d8, _Source="Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" [0146.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0146.743] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdcf4e950, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdcf4e950, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x929a5380, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0146.743] wcscmp (_String1="SharedDataEvents", _String2=".") returned 1 [0146.743] wcscmp (_String1="SharedDataEvents", _String2="..") returned 1 [0146.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d455c0 [0146.743] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0146.743] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0146.743] wcscat (in: _Dest=0x3d455c0, _Source="SharedDataEvents" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" [0146.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c [0146.745] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb83f430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdb83f430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x86034dc0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x12dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0146.745] wcscmp (_String1="UserCache.bin", _String2=".") returned 1 [0146.745] wcscmp (_String1="UserCache.bin", _String2="..") returned 1 [0146.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3e1bd50 [0146.745] wcscpy (in: _Dest=0x3e1bd50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0" [0146.745] wcscat (in: _Dest=0x3e1bd50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0146.745] wcscat (in: _Dest=0x3e1bd50, _Source="UserCache.bin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" [0146.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0 [0146.746] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb83f430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xdb83f430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x86034dc0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x12dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0146.747] FindClose (in: hFindFile=0x7ad78f0 | out: hFindFile=0x7ad78f0) returned 1 [0146.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53b08) returned 1 [0146.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a268c8) returned 1 [0146.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 Thread: id = 1664 os_tid = 0x219c [0142.065] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\acecache11.lst")) returned 0x2020 [0142.065] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", dwFileAttributes=0x20) returned 1 [0144.392] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f30 [0144.393] GetFileSizeEx (in: hFile=0x1f30, lpFileSize=0x9e7f9cc | out: lpFileSize=0x9e7f9cc*=1154) returned 1 [0144.393] SetFilePointerEx (in: hFile=0x1f30, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.393] ReadFile (in: hFile=0x1f30, lpBuffer=0x9e7f9a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9e7f9b8, lpOverlapped=0x0 | out: lpBuffer=0x9e7f9a8*, lpNumberOfBytesRead=0x9e7f9b8*=0x4, lpOverlapped=0x0) returned 1 [0144.397] SetFilePointerEx (in: hFile=0x1f30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0144.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0144.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0144.397] NtQuerySystemTime (in: CurrentTime=0x9e7f940 | out: CurrentTime=0x9e7f940*=132462177232380000) returned 0x0 [0144.397] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x5de4180b [0144.397] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x4dee18d5 [0144.397] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x57139560 [0144.397] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x21a85f81 [0144.397] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x29b749c0 [0144.397] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x6a66b53f [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x3427fc96 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x7e8d1449 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x4de2443a [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x1eee7d33 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x7a2dbe38 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x42dbe050 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x48e91b7d [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x6e0575bd [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x5b7a55dd [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x6bad1bfc [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x365579f5 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x54f691 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x57d270f6 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x61733a5 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x27d9f5c5 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x533b3229 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x6bdee9fa [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x66c32676 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x3219e732 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x4e8a6720 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x6370f333 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x2185cc47 [0144.398] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x139d6acf [0144.399] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x55303d30 [0144.399] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0x7004afff [0144.399] RtlRandomEx (in: Seed=0x9e7f938 | out: Seed=0x9e7f938) returned 0xf1957f3 [0144.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0144.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f0b0 [0144.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0144.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 [0144.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0144.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0144.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49698 [0144.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f0b0 [0144.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0144.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0144.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0144.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0144.464] ReadFile (in: hFile=0x1f30, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x482, lpNumberOfBytesRead=0x9e7f934, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x9e7f934*=0x482, lpOverlapped=0x0) returned 1 [0144.464] SetFilePointerEx (in: hFile=0x1f30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.400] WriteFile (in: hFile=0x1f30, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x482, lpNumberOfBytesWritten=0x9e7f938, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0x9e7f938*=0x482, lpOverlapped=0x0) returned 1 [0147.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0147.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0147.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0147.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0147.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0147.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 [0147.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49698) returned 1 [0147.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e798e0 [0147.833] SetFilePointerEx (in: hFile=0x1f30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.833] WriteFile (in: hFile=0x1f30, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x9e7f9c0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x9e7f9c0*=0x10e, lpOverlapped=0x0) returned 1 [0148.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24080 [0148.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0148.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0148.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3e52a68 [0148.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0148.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538c8 [0148.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538c8) returned 1 [0148.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24080) returned 1 [0148.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x7a24080 [0148.847] sprintf (in: _Dest=0x7a24080, _Format="%c%c" | out: _Dest="6c") returned 2 [0148.847] sprintf (in: _Dest=0x7a24082, _Format="%c%c" | out: _Dest="f9") returned 2 [0148.847] sprintf (in: _Dest=0x7a24084, _Format="%c%c" | out: _Dest="bd") returned 2 [0148.847] sprintf (in: _Dest=0x7a24086, _Format="%c%c" | out: _Dest="32") returned 2 [0148.847] sprintf (in: _Dest=0x7a24088, _Format="%c%c" | out: _Dest="d1") returned 2 [0148.868] sprintf (in: _Dest=0x7a2408a, _Format="%c%c" | out: _Dest="fa") returned 2 [0148.868] sprintf (in: _Dest=0x7a2408c, _Format="%c%c" | out: _Dest="7f") returned 2 [0148.868] sprintf (in: _Dest=0x7a2408e, _Format="%c%c" | out: _Dest="b1") returned 2 [0148.868] sprintf (in: _Dest=0x7a24090, _Format="%c%c" | out: _Dest="ee") returned 2 [0148.868] sprintf (in: _Dest=0x7a24092, _Format="%c%c" | out: _Dest="6b") returned 2 [0148.868] sprintf (in: _Dest=0x7a24094, _Format="%c%c" | out: _Dest="14") returned 2 [0148.868] sprintf (in: _Dest=0x7a24096, _Format="%c%c" | out: _Dest="52") returned 2 [0148.868] sprintf (in: _Dest=0x7a24098, _Format="%c%c" | out: _Dest="16") returned 2 [0148.868] sprintf (in: _Dest=0x7a2409a, _Format="%c%c" | out: _Dest="16") returned 2 [0148.869] sprintf (in: _Dest=0x7a2409c, _Format="%c%c" | out: _Dest="95") returned 2 [0148.869] sprintf (in: _Dest=0x7a2409e, _Format="%c%c" | out: _Dest="2e") returned 2 [0148.869] sprintf (in: _Dest=0x7a240a0, _Format="%c%c" | out: _Dest="a7") returned 2 [0148.869] sprintf (in: _Dest=0x7a240a2, _Format="%c%c" | out: _Dest="6f") returned 2 [0148.869] sprintf (in: _Dest=0x7a240a4, _Format="%c%c" | out: _Dest="da") returned 2 [0148.869] sprintf (in: _Dest=0x7a240a6, _Format="%c%c" | out: _Dest="c1") returned 2 [0148.869] sprintf (in: _Dest=0x7a240a8, _Format="%c%c" | out: _Dest="ea") returned 2 [0148.869] sprintf (in: _Dest=0x7a240aa, _Format="%c%c" | out: _Dest="12") returned 2 [0148.869] sprintf (in: _Dest=0x7a240ac, _Format="%c%c" | out: _Dest="1f") returned 2 [0148.869] sprintf (in: _Dest=0x7a240ae, _Format="%c%c" | out: _Dest="5d") returned 2 [0148.869] sprintf (in: _Dest=0x7a240b0, _Format="%c%c" | out: _Dest="65") returned 2 [0148.869] sprintf (in: _Dest=0x7a240b2, _Format="%c%c" | out: _Dest="12") returned 2 [0148.869] sprintf (in: _Dest=0x7a240b4, _Format="%c%c" | out: _Dest="30") returned 2 [0148.869] sprintf (in: _Dest=0x7a240b6, _Format="%c%c" | out: _Dest="c6") returned 2 [0148.869] RtlInitAnsiString (in: DestinationString=0x9e7f948, SourceString="6cf9bd32d1fa7fb1ee6b14521616952ea76fdac1ea121f5d651230c6" | out: DestinationString="6cf9bd32d1fa7fb1ee6b14521616952ea76fdac1ea121f5d651230c6") [0148.869] RtlAnsiStringToUnicodeString (in: DestinationString=0x9e7f940, SourceString="6cf9bd32d1fa7fb1ee6b14521616952ea76fdac1ea121f5d651230c6", AllocateDestinationString=1 | out: DestinationString="6cf9bd32d1fa7fb1ee6b14521616952ea76fdac1ea121f5d651230c6") returned 0x0 [0148.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5cf0 [0148.870] RtlFreeAnsiString (AnsiString="6") [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24080) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e541d8) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e797c8) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798e0) returned 1 [0148.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0148.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0148.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0148.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0148.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df18c8 [0148.871] wcscat (in: _Dest=0x3df18c8, _Source="6cf9bd32d1fa7f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\6cf9bd32d1fa7f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\6cf9bd32d1fa7f" [0148.871] wcscat (in: _Dest=0x3df18c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\6cf9bd32d1fa7f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\6cf9bd32d1fa7f.68814f" [0148.871] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\6cf9bd32d1fa7f.68814f", NtPathName=0x9e7f938, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\6cf9bd32d1fa7f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0148.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63f30 [0149.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63f30) returned 1 [0149.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea7010) returned 1 [0149.479] NtQueryInformationFile (in: FileHandle=0x1f30, IoStatusBlock=0x9e7f910, FileInformation=0x9e7f918, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9e7f910, FileInformation=0x9e7f918) returned 0x0 [0149.479] NtSetInformationFile (FileHandle=0x1f30, IoStatusBlock=0x9e7f910, FileInformation=0x9e7f918, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df18c8) returned 1 [0149.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5cf0) returned 1 [0149.520] FlushFileBuffers (hFile=0x1f30) returned 1 [0149.525] CloseHandle (hObject=0x1f30) returned 1 [0149.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9670 [0149.550] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\" [0149.550] wcscat (in: _Dest=0x3eb9670, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\68814F-Readme.txt" [0149.550] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\68814f-readme.txt")) returned 0xffffffff [0149.550] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d08 [0149.562] WriteFile (in: hFile=0x1d08, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9e7f954, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9e7f954*=0x8b9, lpOverlapped=0x0) returned 1 [0149.572] CloseHandle (hObject=0x1d08) returned 1 [0149.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 [0149.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f18) returned 1 Thread: id = 1665 os_tid = 0x21a0 [0142.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3dba8 [0142.066] wcscpy (in: _Dest=0x3f3dba8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0142.066] wcscat (in: _Dest=0x3f3dba8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0142.066] wcscat (in: _Dest=0x3f3dba8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\*" [0142.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53fd8 [0142.066] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73830 [0143.194] wcscmp (_String1=".", _String2=".") returned 0 [0143.194] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd6704570, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.195] wcscmp (_String1="..", _String2=".") returned 1 [0143.195] wcscmp (_String1="..", _String2="..") returned 0 [0143.195] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd6835070, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0143.195] wcscmp (_String1="wscRGB.icc", _String2=".") returned 1 [0143.195] wcscmp (_String1="wscRGB.icc", _String2="..") returned 1 [0143.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d1f8 [0143.195] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0143.195] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0143.195] wcscat (in: _Dest=0x3f3d1f8, _Source="wscRGB.icc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" [0149.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2444 [0149.997] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd685b1d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0149.997] wcscmp (_String1="wsRGB.icc", _String2=".") returned 1 [0149.997] wcscmp (_String1="wsRGB.icc", _String2="..") returned 1 [0149.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9120 [0149.998] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles" [0149.998] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0149.998] wcscat (in: _Dest=0x3eb9120, _Source="wsRGB.icc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" [0149.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100 [0150.001] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd685b1d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xd693fa10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xd693fa10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0150.001] FindClose (in: hFindFile=0x3e73830 | out: hFindFile=0x3e73830) returned 1 [0150.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53fd8) returned 1 [0150.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dba8) returned 1 [0150.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23760) returned 1 Thread: id = 1666 os_tid = 0x21a4 [0142.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf")) returned 0x20 [0142.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", dwFileAttributes=0x20) returned 0 [0142.067] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.068] GetLastError () returned 0x5 [0142.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", dwFileAttributes=0x20) returned 0 [0142.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 Thread: id = 1667 os_tid = 0x21a8 [0142.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 0x20 [0142.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x20) returned 0 [0142.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.070] GetLastError () returned 0x5 [0142.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x20) returned 0 [0142.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 1668 os_tid = 0x21ac [0142.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 0x20 [0148.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x20) returned 0 [0148.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.018] GetLastError () returned 0x5 [0148.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x20) returned 0 [0148.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 1669 os_tid = 0x21b0 [0142.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 0x20 [0148.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x20) returned 0 [0148.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.022] GetLastError () returned 0x5 [0148.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x20) returned 0 [0148.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 1670 os_tid = 0x21b4 [0142.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 0x20 [0146.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x20) returned 0 [0146.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.016] GetLastError () returned 0x5 [0148.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x20) returned 0 [0148.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 1671 os_tid = 0x21b8 [0142.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf")) returned 0x20 [0147.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x20) returned 0 [0147.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.398] GetLastError () returned 0x5 [0147.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x20) returned 0 [0147.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 1672 os_tid = 0x21bc [0142.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 0x20 [0148.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x20) returned 0 [0148.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.046] GetLastError () returned 0x5 [0148.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x20) returned 0 [0148.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 1673 os_tid = 0x21c0 [0142.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 0x20 [0148.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x20) returned 0 [0148.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.054] GetLastError () returned 0x5 [0148.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x20) returned 0 [0148.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 1674 os_tid = 0x21c4 [0142.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf")) returned 0x20 [0148.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x20) returned 0 [0148.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.044] GetLastError () returned 0x5 [0148.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x20) returned 0 [0148.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 1675 os_tid = 0x21c8 [0142.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf")) returned 0x20 [0148.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x20) returned 0 [0148.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.042] GetLastError () returned 0x5 [0148.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x20) returned 0 [0148.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 1676 os_tid = 0x21cc [0142.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 0x20 [0148.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x20) returned 0 [0148.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.052] GetLastError () returned 0x5 [0148.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x20) returned 0 [0148.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 1677 os_tid = 0x21d0 [0142.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf")) returned 0x20 [0148.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x20) returned 0 [0148.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.050] GetLastError () returned 0x5 [0148.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x20) returned 0 [0148.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 1678 os_tid = 0x21d4 [0142.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf")) returned 0x20 [0148.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x20) returned 0 [0148.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.040] GetLastError () returned 0x5 [0148.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x20) returned 0 [0148.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 1679 os_tid = 0x21d8 [0142.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf")) returned 0x20 [0148.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x20) returned 0 [0148.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.038] GetLastError () returned 0x5 [0148.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x20) returned 0 [0148.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 1680 os_tid = 0x21dc [0142.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf")) returned 0x20 [0148.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x20) returned 0 [0148.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.035] GetLastError () returned 0x5 [0148.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x20) returned 0 [0148.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 1681 os_tid = 0x21e0 [0142.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf")) returned 0x20 [0148.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x20) returned 0 [0148.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.033] GetLastError () returned 0x5 [0148.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x20) returned 0 [0148.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 1682 os_tid = 0x21e4 [0142.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf")) returned 0x20 [0148.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x20) returned 0 [0148.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.031] GetLastError () returned 0x5 [0148.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x20) returned 0 [0148.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 1683 os_tid = 0x21e8 [0142.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf")) returned 0x20 [0148.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x20) returned 0 [0148.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.029] GetLastError () returned 0x5 [0148.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x20) returned 0 [0148.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 1684 os_tid = 0x21ec [0142.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf")) returned 0x20 [0148.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x20) returned 0 [0148.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.027] GetLastError () returned 0x5 [0148.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x20) returned 0 [0148.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 1685 os_tid = 0x21f0 [0142.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf")) returned 0x20 [0148.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x20) returned 0 [0148.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.025] GetLastError () returned 0x5 [0148.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x20) returned 0 [0148.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 1686 os_tid = 0x21f4 [0142.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf")) returned 0x20 [0148.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x20) returned 0 [0148.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.020] GetLastError () returned 0x5 [0148.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x20) returned 0 [0148.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 1687 os_tid = 0x21f8 [0142.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf")) returned 0x20 [0148.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x20) returned 0 [0148.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.048] GetLastError () returned 0x5 [0148.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x20) returned 0 [0148.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 1688 os_tid = 0x21fc [0142.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd")) returned 0x20 [0142.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD", dwFileAttributes=0x20) returned 0 [0142.182] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.183] GetLastError () returned 0x5 [0142.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD", dwFileAttributes=0x20) returned 0 [0142.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 Thread: id = 1689 os_tid = 0x2200 [0142.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts")) returned 0x20 [0142.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS", dwFileAttributes=0x20) returned 0 [0142.189] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.189] GetLastError () returned 0x5 [0142.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS", dwFileAttributes=0x20) returned 0 [0142.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6ad8) returned 1 Thread: id = 1690 os_tid = 0x2204 [0142.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts")) returned 0x20 [0144.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS", dwFileAttributes=0x20) returned 0 [0144.569] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.569] GetLastError () returned 0x5 [0144.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS", dwFileAttributes=0x20) returned 0 [0144.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 1691 os_tid = 0x2208 [0142.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt")) returned 0x20 [0144.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT", dwFileAttributes=0x20) returned 0 [0144.571] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.571] GetLastError () returned 0x5 [0144.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT", dwFileAttributes=0x20) returned 0 [0144.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 1692 os_tid = 0x220c [0142.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt")) returned 0x20 [0143.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT", dwFileAttributes=0x20) returned 0 [0143.320] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.320] GetLastError () returned 0x5 [0143.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT", dwFileAttributes=0x20) returned 0 [0143.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 1693 os_tid = 0x2210 [0142.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih")) returned 0x20 [0143.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH", dwFileAttributes=0x20) returned 0 [0143.322] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.322] GetLastError () returned 0x5 [0143.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH", dwFileAttributes=0x20) returned 0 [0143.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7208) returned 1 Thread: id = 1694 os_tid = 0x2214 [0142.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl")) returned 0x20 [0142.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl", dwFileAttributes=0x20) returned 0 [0142.203] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.203] GetLastError () returned 0x5 [0142.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl", dwFileAttributes=0x20) returned 0 [0142.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 1695 os_tid = 0x2218 [0142.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl")) returned 0x20 [0145.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL", dwFileAttributes=0x20) returned 0 [0145.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.758] GetLastError () returned 0x5 [0145.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL", dwFileAttributes=0x20) returned 0 [0145.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5a40) returned 1 Thread: id = 1696 os_tid = 0x221c [0142.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl")) returned 0x20 [0144.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL", dwFileAttributes=0x20) returned 0 [0144.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.729] GetLastError () returned 0x5 [0144.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL", dwFileAttributes=0x20) returned 0 [0144.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c00) returned 1 Thread: id = 1697 os_tid = 0x2224 [0142.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3be50 [0142.237] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0142.237] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0142.237] wcscat (in: _Dest=0x3f3be50, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*" [0142.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c680 [0142.237] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73730 [0145.753] wcscmp (_String1=".", _String2=".") returned 0 [0145.753] FindNextFileW (in: hFindFile=0x3e73730, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.753] wcscmp (_String1="..", _String2=".") returned 1 [0145.753] wcscmp (_String1="..", _String2="..") returned 0 [0145.753] FindNextFileW (in: hFindFile=0x3e73730, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHOR.XSL", cAlternateFileName="")) returned 1 [0145.753] wcscmp (_String1="AUTHOR.XSL", _String2=".") returned 1 [0145.753] wcscmp (_String1="AUTHOR.XSL", _String2="..") returned 1 [0145.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6448 [0145.753] wcscpy (in: _Dest=0x7ad6448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0145.754] wcscat (in: _Dest=0x7ad6448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0145.754] wcscat (in: _Dest=0x7ad6448, _Source="AUTHOR.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" [0154.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0154.674] FindNextFileW (in: hFindFile=0x3e73730, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAG.XSL", cAlternateFileName="")) returned 1 [0154.674] wcscmp (_String1="TAG.XSL", _String2=".") returned 1 [0154.674] wcscmp (_String1="TAG.XSL", _String2="..") returned 1 [0154.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0154.674] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0154.674] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0154.674] wcscat (in: _Dest=0x3eb6a30, _Source="TAG.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" [0154.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0154.675] FindNextFileW (in: hFindFile=0x3e73730, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE.XSL", cAlternateFileName="")) returned 1 [0154.675] wcscmp (_String1="TITLE.XSL", _String2=".") returned 1 [0154.675] wcscmp (_String1="TITLE.XSL", _String2="..") returned 1 [0154.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6018 [0154.675] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0154.675] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0154.675] wcscat (in: _Dest=0x3eb6018, _Source="TITLE.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" [0154.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0154.677] FindNextFileW (in: hFindFile=0x3e73730, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 1 [0154.677] wcscmp (_String1="YEAR.XSL", _String2=".") returned 1 [0154.677] wcscmp (_String1="YEAR.XSL", _String2="..") returned 1 [0154.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5db8 [0154.677] wcscpy (in: _Dest=0x3eb5db8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort" [0154.677] wcscat (in: _Dest=0x3eb5db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\" [0154.677] wcscat (in: _Dest=0x3eb5db8, _Source="YEAR.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" [0154.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0154.678] FindNextFileW (in: hFindFile=0x3e73730, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d19700, ftCreationTime.dwHighDateTime=0x1c6a8d2, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94d19700, ftLastWriteTime.dwHighDateTime=0x1c6a8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 0 [0154.678] FindClose (in: hFindFile=0x3e73730 | out: hFindFile=0x3e73730) returned 1 [0154.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c680) returned 1 [0154.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 [0154.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 1698 os_tid = 0x2228 [0142.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bc30 [0142.259] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0142.259] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0142.259] wcscat (in: _Dest=0x3f3bc30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*" [0142.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54710 [0142.259] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d340 [0146.304] wcscmp (_String1=".", _String2=".") returned 0 [0146.304] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766fed50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d331350, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.304] wcscmp (_String1="..", _String2=".") returned 1 [0146.304] wcscmp (_String1="..", _String2="..") returned 0 [0146.304] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81d3cd00, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x766fed50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81d3cd00, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x5cd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="APA.XSL", cAlternateFileName="")) returned 1 [0146.304] wcscmp (_String1="APA.XSL", _String2=".") returned 1 [0146.304] wcscmp (_String1="APA.XSL", _String2="..") returned 1 [0146.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d078 [0146.305] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0146.305] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0146.305] wcscat (in: _Dest=0x32d078, _Source="APA.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" [0166.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0166.274] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9db1000, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb9db1000, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x5282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0166.274] wcscmp (_String1="CHICAGO.XSL", _String2=".") returned 1 [0166.274] wcscmp (_String1="CHICAGO.XSL", _String2="..") returned 1 [0166.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a637b0 [0166.274] wcscpy (in: _Dest=0x7a637b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0166.275] wcscat (in: _Dest=0x7a637b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0166.275] wcscat (in: _Dest=0x7a637b0, _Source="CHICAGO.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" [0166.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a637b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0166.276] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb12ae00, ftCreationTime.dwHighDateTime=0x1c9306a, ftLastAccessTime.dwLowDateTime=0x88646c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb12ae00, ftLastWriteTime.dwHighDateTime=0x1c9306a, nFileSizeHigh=0x0, nFileSizeLow=0x40188, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0166.276] wcscmp (_String1="GB.XSL", _String2=".") returned 1 [0166.276] wcscmp (_String1="GB.XSL", _String2="..") returned 1 [0166.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64388 [0166.276] wcscpy (in: _Dest=0x7a64388, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0166.276] wcscat (in: _Dest=0x7a64388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0166.276] wcscat (in: _Dest=0x7a64388, _Source="GB.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" [0166.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0166.279] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79820300, ftCreationTime.dwHighDateTime=0x1c9306a, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79820300, ftLastWriteTime.dwHighDateTime=0x1c9306a, nFileSizeHigh=0x0, nFileSizeLow=0x3cd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0166.279] wcscmp (_String1="GostName.XSL", _String2=".") returned 1 [0166.279] wcscmp (_String1="GostName.XSL", _String2="..") returned 1 [0166.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a629f0 [0166.279] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0166.279] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0166.279] wcscat (in: _Dest=0x7a629f0, _Source="GostName.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" [0166.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0166.280] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17c19900, ftCreationTime.dwHighDateTime=0x1c9306a, ftLastAccessTime.dwLowDateTime=0x88751610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17c19900, ftLastWriteTime.dwHighDateTime=0x1c9306a, nFileSizeHigh=0x0, nFileSizeLow=0x3b9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0166.281] wcscmp (_String1="GostTitle.XSL", _String2=".") returned 1 [0166.281] wcscmp (_String1="GostTitle.XSL", _String2="..") returned 1 [0166.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63fd0 [0166.281] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0166.281] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0166.281] wcscat (in: _Dest=0x7a63fd0, _Source="GostTitle.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" [0166.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0166.282] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910cbc00, ftCreationTime.dwHighDateTime=0x1c93069, ftLastAccessTime.dwLowDateTime=0x8b8dbff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x910cbc00, ftLastWriteTime.dwHighDateTime=0x1c93069, nFileSizeHigh=0x0, nFileSizeLow=0x4033d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0166.282] wcscmp (_String1="ISO690.XSL", _String2=".") returned 1 [0166.282] wcscmp (_String1="ISO690.XSL", _String2="..") returned 1 [0166.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a626d0 [0166.282] wcscpy (in: _Dest=0x7a626d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0166.282] wcscat (in: _Dest=0x7a626d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0166.282] wcscat (in: _Dest=0x7a626d0, _Source="ISO690.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" [0166.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a626d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0166.283] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fcd0900, ftCreationTime.dwHighDateTime=0x1c93069, ftLastAccessTime.dwLowDateTime=0x7b39d170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1fcd0900, ftLastWriteTime.dwHighDateTime=0x1c93069, nFileSizeHigh=0x0, nFileSizeLow=0x3ee6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0166.283] wcscmp (_String1="ISO690Nmerical.XSL", _String2=".") returned 1 [0166.283] wcscmp (_String1="ISO690Nmerical.XSL", _String2="..") returned 1 [0166.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66140 [0166.285] wcscpy (in: _Dest=0x7a66140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0166.285] wcscat (in: _Dest=0x7a66140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0166.285] wcscat (in: _Dest=0x7a66140, _Source="ISO690Nmerical.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" [0166.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0166.286] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3647800, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3647800, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x49051, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLA.XSL", cAlternateFileName="")) returned 1 [0166.286] wcscmp (_String1="MLA.XSL", _String2=".") returned 1 [0166.286] wcscmp (_String1="MLA.XSL", _String2="..") returned 1 [0166.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64420 [0166.286] wcscpy (in: _Dest=0x7a64420, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0166.287] wcscat (in: _Dest=0x7a64420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0166.287] wcscat (in: _Dest=0x7a64420, _Source="MLA.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" [0166.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0166.288] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eb1100, ftCreationTime.dwHighDateTime=0x1c6daa0, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4eb1100, ftLastWriteTime.dwHighDateTime=0x1c6daa0, nFileSizeHigh=0x0, nFileSizeLow=0x3bd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0166.288] wcscmp (_String1="SIST02.XSL", _String2=".") returned 1 [0166.288] wcscmp (_String1="SIST02.XSL", _String2="..") returned 1 [0166.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62c70 [0166.288] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0166.288] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0166.288] wcscat (in: _Dest=0x7a62c70, _Source="SIST02.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" [0166.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0166.289] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8b8600, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca8b8600, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0166.289] wcscmp (_String1="TURABIAN.XSL", _String2=".") returned 1 [0166.289] wcscmp (_String1="TURABIAN.XSL", _String2="..") returned 1 [0166.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63530 [0166.289] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style" [0166.289] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\" [0166.290] wcscat (in: _Dest=0x7a63530, _Source="TURABIAN.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" [0166.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0166.290] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca8b8600, ftCreationTime.dwHighDateTime=0x1ca5cc3, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca8b8600, ftLastWriteTime.dwHighDateTime=0x1ca5cc3, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0166.290] FindClose (in: hFindFile=0x7a2d340 | out: hFindFile=0x7a2d340) returned 1 [0166.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54710) returned 1 [0166.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 [0166.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 1699 os_tid = 0x222c [0142.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zx______.pfb")) returned 0x20 [0145.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB", dwFileAttributes=0x20) returned 0 [0145.653] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zx______.pfb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.654] GetLastError () returned 0x5 [0145.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB", dwFileAttributes=0x20) returned 0 [0145.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9808) returned 1 Thread: id = 1700 os_tid = 0x2230 [0142.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zy______.pfb")) returned 0x20 [0145.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB", dwFileAttributes=0x20) returned 0 [0145.651] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\zy______.pfb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.651] GetLastError () returned 0x5 [0145.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB", dwFileAttributes=0x20) returned 0 [0145.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 1701 os_tid = 0x2234 [0142.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml")) returned 0x20 [0142.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0142.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0142.279] GetLastError () returned 0x5 [0142.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0142.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 1702 os_tid = 0x2238 [0142.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml")) returned 0x20 [0144.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", dwFileAttributes=0x20) returned 0 [0144.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0144.731] GetLastError () returned 0x5 [0144.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", dwFileAttributes=0x20) returned 0 [0144.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 Thread: id = 1703 os_tid = 0x223c [0142.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml")) returned 0x20 [0145.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", dwFileAttributes=0x20) returned 0 [0145.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.564] GetLastError () returned 0x5 [0145.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", dwFileAttributes=0x20) returned 0 [0145.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5b80) returned 1 Thread: id = 1704 os_tid = 0x2240 [0142.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml")) returned 0x20 [0145.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0145.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.507] GetLastError () returned 0x5 [0145.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0145.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 Thread: id = 1705 os_tid = 0x2244 [0142.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml")) returned 0x20 [0145.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0145.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.516] GetLastError () returned 0x5 [0145.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0145.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5ea0) returned 1 Thread: id = 1706 os_tid = 0x2248 [0142.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml")) returned 0x20 [0145.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", dwFileAttributes=0x20) returned 0 [0145.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.509] GetLastError () returned 0x5 [0145.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", dwFileAttributes=0x20) returned 0 [0145.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4460) returned 1 Thread: id = 1707 os_tid = 0x224c [0142.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml")) returned 0x20 [0145.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0145.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.512] GetLastError () returned 0x5 [0145.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0145.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053c60) returned 1 Thread: id = 1708 os_tid = 0x2250 [0142.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml")) returned 0x20 [0145.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", dwFileAttributes=0x20) returned 0 [0145.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.518] GetLastError () returned 0x5 [0145.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", dwFileAttributes=0x20) returned 0 [0145.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4be0) returned 1 Thread: id = 1709 os_tid = 0x2254 [0142.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml")) returned 0x20 [0145.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0145.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.519] GetLastError () returned 0x5 [0145.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0145.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053b10) returned 1 Thread: id = 1710 os_tid = 0x2258 [0142.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml")) returned 0x20 [0145.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", dwFileAttributes=0x20) returned 0 [0145.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.522] GetLastError () returned 0x5 [0145.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", dwFileAttributes=0x20) returned 0 [0145.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053138) returned 1 Thread: id = 1711 os_tid = 0x225c [0142.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml")) returned 0x20 [0145.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0145.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.524] GetLastError () returned 0x5 [0145.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0145.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052fe8) returned 1 Thread: id = 1712 os_tid = 0x2260 [0142.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml")) returned 0x20 [0145.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", dwFileAttributes=0x20) returned 0 [0145.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.526] GetLastError () returned 0x5 [0145.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", dwFileAttributes=0x20) returned 0 [0145.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053870) returned 1 Thread: id = 1713 os_tid = 0x2264 [0142.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml")) returned 0x20 [0145.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0145.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.528] GetLastError () returned 0x5 [0145.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0145.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 Thread: id = 1714 os_tid = 0x2268 [0142.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml")) returned 0x20 [0145.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", dwFileAttributes=0x20) returned 0 [0145.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.531] GetLastError () returned 0x5 [0145.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", dwFileAttributes=0x20) returned 0 [0145.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 Thread: id = 1715 os_tid = 0x226c [0142.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml")) returned 0x20 [0145.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", dwFileAttributes=0x20) returned 0 [0145.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.533] GetLastError () returned 0x5 [0145.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", dwFileAttributes=0x20) returned 0 [0145.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053528) returned 1 Thread: id = 1716 os_tid = 0x2270 [0142.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml")) returned 0x20 [0145.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", dwFileAttributes=0x20) returned 0 [0145.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.536] GetLastError () returned 0x5 [0145.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", dwFileAttributes=0x20) returned 0 [0145.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 Thread: id = 1717 os_tid = 0x2274 [0142.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml")) returned 0x20 [0145.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", dwFileAttributes=0x20) returned 0 [0145.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.538] GetLastError () returned 0x5 [0145.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", dwFileAttributes=0x20) returned 0 [0145.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 Thread: id = 1718 os_tid = 0x2278 [0142.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml")) returned 0x20 [0145.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0145.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.540] GetLastError () returned 0x5 [0145.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0145.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x326580) returned 1 Thread: id = 1719 os_tid = 0x227c [0142.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml")) returned 0x20 [0145.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", dwFileAttributes=0x20) returned 0 [0145.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.543] GetLastError () returned 0x5 [0145.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", dwFileAttributes=0x20) returned 0 [0145.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6260) returned 1 Thread: id = 1720 os_tid = 0x2280 [0142.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml")) returned 0x20 [0145.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0145.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.545] GetLastError () returned 0x5 [0145.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0145.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3251d0) returned 1 Thread: id = 1721 os_tid = 0x2284 [0142.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml")) returned 0x20 [0145.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0145.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.548] GetLastError () returned 0x5 [0145.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0145.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x325320) returned 1 Thread: id = 1722 os_tid = 0x2288 [0142.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml")) returned 0x20 [0145.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", dwFileAttributes=0x20) returned 0 [0145.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.550] GetLastError () returned 0x5 [0145.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", dwFileAttributes=0x20) returned 0 [0145.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4e60) returned 1 Thread: id = 1723 os_tid = 0x228c [0142.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml")) returned 0x20 [0145.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", dwFileAttributes=0x20) returned 0 [0145.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.558] GetLastError () returned 0x5 [0145.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", dwFileAttributes=0x20) returned 0 [0145.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6080) returned 1 Thread: id = 1724 os_tid = 0x2290 [0142.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml")) returned 0x20 [0145.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", dwFileAttributes=0x20) returned 0 [0145.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.560] GetLastError () returned 0x5 [0145.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", dwFileAttributes=0x20) returned 0 [0145.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4dc0) returned 1 Thread: id = 1725 os_tid = 0x2294 [0142.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml")) returned 0x20 [0145.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0145.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.502] GetLastError () returned 0x5 [0145.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0145.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x326430) returned 1 Thread: id = 1726 os_tid = 0x2298 [0142.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml")) returned 0x20 [0145.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", dwFileAttributes=0x20) returned 0 [0145.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.505] GetLastError () returned 0x5 [0145.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", dwFileAttributes=0x20) returned 0 [0145.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7a640) returned 1 Thread: id = 1727 os_tid = 0x229c [0142.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml")) returned 0x20 [0145.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", dwFileAttributes=0x20) returned 0 [0145.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.562] GetLastError () returned 0x5 [0145.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", dwFileAttributes=0x20) returned 0 [0145.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 Thread: id = 1728 os_tid = 0x22a0 [0143.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml")) returned 0x20 [0145.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", dwFileAttributes=0x20) returned 0 [0145.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.514] GetLastError () returned 0x5 [0145.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", dwFileAttributes=0x20) returned 0 [0145.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b878) returned 1 Thread: id = 1729 os_tid = 0x22b0 [0143.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.348] wcscpy (in: _Dest=0x3f3e3a0, _Source="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" [0143.348] wcscat (in: _Dest=0x3f3e3a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\" [0143.349] wcscat (in: _Dest=0x3f3e3a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*" [0143.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0143.349] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0143.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 Thread: id = 1730 os_tid = 0x22b4 [0143.350] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma")) returned 0x20 [0147.252] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0147.253] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.253] GetLastError () returned 0x5 [0147.253] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0147.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46d98) returned 1 Thread: id = 1731 os_tid = 0x22b8 [0143.358] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma")) returned 0x20 [0147.254] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0147.254] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.254] GetLastError () returned 0x5 [0147.254] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0147.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a118) returned 1 Thread: id = 1732 os_tid = 0x22bc [0143.364] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma")) returned 0x20 [0147.255] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0147.255] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.255] GetLastError () returned 0x5 [0147.255] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0147.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb820) returned 1 Thread: id = 1733 os_tid = 0x22c0 [0143.365] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma")) returned 0x20 [0147.256] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0147.256] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.256] GetLastError () returned 0x5 [0147.257] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0147.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efba20) returned 1 Thread: id = 1734 os_tid = 0x22c4 [0143.366] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma")) returned 0x20 [0147.257] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0147.257] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.258] GetLastError () returned 0x5 [0147.258] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0147.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efc020) returned 1 Thread: id = 1735 os_tid = 0x22c8 [0143.367] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma")) returned 0x20 [0147.258] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0147.259] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.259] GetLastError () returned 0x5 [0147.259] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0147.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb5a0) returned 1 Thread: id = 1736 os_tid = 0x22cc [0143.367] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma")) returned 0x20 [0147.259] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0147.260] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.260] GetLastError () returned 0x5 [0147.260] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0147.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa520) returned 1 Thread: id = 1737 os_tid = 0x22d0 [0143.368] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma")) returned 0x20 [0146.400] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0146.400] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.400] GetLastError () returned 0x5 [0146.400] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0146.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa320) returned 1 Thread: id = 1738 os_tid = 0x22d4 [0143.369] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma")) returned 0x20 [0144.709] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0144.709] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.402] GetLastError () returned 0x5 [0146.402] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0146.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efbc20) returned 1 Thread: id = 1739 os_tid = 0x22d8 [0143.376] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma")) returned 0x20 [0147.251] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0147.251] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.251] GetLastError () returned 0x5 [0147.251] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0147.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa9a0) returned 1 Thread: id = 1740 os_tid = 0x22dc [0143.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a271c8 [0143.381] wcscpy (in: _Dest=0x7a271c8, _Source="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0" [0143.381] wcscat (in: _Dest=0x7a271c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\" [0143.381] wcscat (in: _Dest=0x7a271c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*") returned="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*" [0143.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0143.382] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e736b0 [0143.382] wcscmp (_String1=".", _String2=".") returned 0 [0143.383] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.383] wcscmp (_String1="..", _String2=".") returned 1 [0143.383] wcscmp (_String1="..", _String2="..") returned 0 [0143.383] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76346af0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76346af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76346af0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.383] FindClose (in: hFindFile=0x3e736b0 | out: hFindFile=0x3e736b0) returned 1 [0143.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0143.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a271c8) returned 1 [0143.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e14bf0) returned 1 Thread: id = 1741 os_tid = 0x22e0 [0143.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23290 [0143.386] wcscpy (in: _Dest=0x7a23290, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0143.386] wcscat (in: _Dest=0x7a23290, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\" [0143.386] wcscat (in: _Dest=0x7a23290, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*" [0143.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0143.386] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e736b0 [0143.387] wcscmp (_String1=".", _String2=".") returned 0 [0143.387] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x352ca6d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.387] wcscmp (_String1="..", _String2=".") returned 1 [0143.387] wcscmp (_String1="..", _String2="..") returned 0 [0143.387] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0143.387] wcscmp (_String1="1036", _String2=".") returned 1 [0143.387] wcscmp (_String1="1036", _String2="..") returned 1 [0143.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23300 [0143.387] wcscpy (in: _Dest=0x7a23300, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0143.387] wcscat (in: _Dest=0x7a23300, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\" [0143.387] wcscat (in: _Dest=0x7a23300, _Source="1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0151.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640 [0151.547] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0151.547] wcscmp (_String1="3082", _String2=".") returned 1 [0151.547] wcscmp (_String1="3082", _String2="..") returned 1 [0151.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69fa8 [0151.548] wcscpy (in: _Dest=0x3e69fa8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions" [0151.548] wcscat (in: _Dest=0x3e69fa8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\" [0151.548] wcscat (in: _Dest=0x3e69fa8, _Source="3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0151.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e69fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0151.549] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0151.549] FindClose (in: hFindFile=0x3e736b0 | out: hFindFile=0x3e736b0) returned 1 [0151.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0151.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23290) returned 1 [0151.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf9b8) returned 1 Thread: id = 1742 os_tid = 0x22e4 [0143.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe14a8 [0143.390] wcscpy (in: _Dest=0x2fe14a8, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound" [0143.390] wcscat (in: _Dest=0x2fe14a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\" [0143.390] wcscat (in: _Dest=0x2fe14a8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*" [0143.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0143.390] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74130 [0143.391] wcscmp (_String1=".", _String2=".") returned 0 [0143.391] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.391] wcscmp (_String1="..", _String2=".") returned 1 [0143.391] wcscmp (_String1="..", _String2="..") returned 0 [0143.391] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f2fe55, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89995398, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.391] FindClose (in: hFindFile=0x3e74130 | out: hFindFile=0x3e74130) returned 1 [0143.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0143.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe14a8) returned 1 [0143.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 Thread: id = 1743 os_tid = 0x22e8 [0143.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a236f0 [0143.393] wcscpy (in: _Dest=0x7a236f0, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" [0143.393] wcscat (in: _Dest=0x7a236f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\" [0143.393] wcscat (in: _Dest=0x7a236f0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*" [0143.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0143.394] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74130 [0143.394] wcscmp (_String1=".", _String2=".") returned 0 [0143.394] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.394] wcscmp (_String1="..", _String2=".") returned 1 [0143.394] wcscmp (_String1="..", _String2="..") returned 0 [0143.394] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xea5ea0e0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0143.394] wcscmp (_String1="RacWmiDatabase.sdf", _String2=".") returned 1 [0143.394] wcscmp (_String1="RacWmiDatabase.sdf", _String2="..") returned 1 [0143.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d449f0 [0143.394] wcscpy (in: _Dest=0x3d449f0, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData" [0143.394] wcscat (in: _Dest=0x3d449f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\" [0143.394] wcscat (in: _Dest=0x3d449f0, _Source="RacWmiDatabase.sdf" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0146.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d449f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0 [0146.078] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5425160, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xea5ea0e0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0 [0146.078] FindClose (in: hFindFile=0x3e74130 | out: hFindFile=0x3e74130) returned 1 [0146.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0146.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a236f0) returned 1 [0146.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5c8) returned 1 Thread: id = 1744 os_tid = 0x22ec [0143.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e20190 [0143.395] wcscpy (in: _Dest=0x3e20190, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0143.395] wcscat (in: _Dest=0x3e20190, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\" [0143.395] wcscat (in: _Dest=0x3e20190, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*" [0143.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a533d0 [0143.395] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73470 [0143.395] wcscmp (_String1=".", _String2=".") returned 0 [0143.395] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9f2fe55, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc55ea4c0, ftLastAccessTime.dwHighDateTime=0x1d699a5, ftLastWriteTime.dwLowDateTime=0xc55ea4c0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.396] wcscmp (_String1="..", _String2=".") returned 1 [0143.396] wcscmp (_String1="..", _String2="..") returned 0 [0143.396] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5093060, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5093060, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xea042ca0, ftLastWriteTime.dwHighDateTime=0x1d699a5, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0143.396] wcscmp (_String1="RacDatabase.sdf", _String2=".") returned 1 [0143.396] wcscmp (_String1="RacDatabase.sdf", _String2="..") returned 1 [0143.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47318 [0143.396] wcscpy (in: _Dest=0x3e47318, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0143.396] wcscat (in: _Dest=0x3e47318, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\" [0143.396] wcscat (in: _Dest=0x3e47318, _Source="RacDatabase.sdf" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" [0146.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4 [0146.082] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0146.082] wcscmp (_String1="RacMetaData.dat", _String2=".") returned 1 [0146.082] wcscmp (_String1="RacMetaData.dat", _String2="..") returned 1 [0146.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19398 [0146.082] wcscpy (in: _Dest=0x3e19398, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData" [0146.082] wcscat (in: _Dest=0x3e19398, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\" [0146.082] wcscat (in: _Dest=0x3e19398, _Source="RacMetaData.dat" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" [0146.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c [0146.098] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5020c40, ftCreationTime.dwHighDateTime=0x1d2da14, ftLastAccessTime.dwLowDateTime=0xd5020c40, ftLastAccessTime.dwHighDateTime=0x1d2da14, ftLastWriteTime.dwLowDateTime=0xf444e7a0, ftLastWriteTime.dwHighDateTime=0x1d4d605, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 0 [0146.098] FindClose (in: hFindFile=0x3e73470 | out: hFindFile=0x3e73470) returned 1 [0146.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a533d0) returned 1 [0146.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20190) returned 1 [0146.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3b48) returned 1 Thread: id = 1745 os_tid = 0x22f0 [0143.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e330 [0143.397] wcscpy (in: _Dest=0x7a5e330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0143.397] wcscat (in: _Dest=0x7a5e330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\" [0143.397] wcscat (in: _Dest=0x7a5e330, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*" [0143.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55a50 [0143.397] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x896f0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x896f0670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0146.306] wcscmp (_String1=".", _String2=".") returned 0 [0146.306] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x896f0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x896f0670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.306] wcscmp (_String1="..", _String2=".") returned 1 [0146.306] wcscmp (_String1="..", _String2="..") returned 0 [0146.307] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a8325f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServicesV12", cAlternateFileName="INFOPA~1")) returned 1 [0146.307] wcscmp (_String1="InfoPathOMFormServicesV12", _String2=".") returned 1 [0146.307] wcscmp (_String1="InfoPathOMFormServicesV12", _String2="..") returned 1 [0146.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e67568 [0146.307] wcscpy (in: _Dest=0x3e67568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0146.307] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\" [0146.307] wcscat (in: _Dest=0x3e67568, _Source="InfoPathOMFormServicesV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" [0152.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e67568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0152.879] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xb770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0152.879] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0152.879] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0152.879] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0152.879] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0152.879] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0152.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8648 [0152.879] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices" [0152.879] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\" [0152.879] wcscat (in: _Dest=0x2c8648, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" [0152.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0152.881] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0152.881] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0152.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55a50) returned 1 [0152.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e330) returned 1 [0152.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053d08) returned 1 Thread: id = 1746 os_tid = 0x22f4 [0143.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6ad0 [0143.402] wcscpy (in: _Dest=0x7ad6ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" [0143.403] wcscat (in: _Dest=0x7ad6ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\" [0143.403] wcscat (in: _Dest=0x7ad6ad0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*" [0143.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53638 [0143.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89253bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad70b0 [0144.739] wcscmp (_String1=".", _String2=".") returned 0 [0144.739] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89253bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.739] wcscmp (_String1="..", _String2=".") returned 1 [0144.739] wcscmp (_String1="..", _String2="..") returned 0 [0144.739] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x89253bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xd770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0144.739] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0144.739] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0144.739] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0144.739] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0144.739] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0144.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85d80 [0144.739] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12" [0144.739] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\" [0144.739] wcscat (in: _Dest=0x3d85d80, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" [0146.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0146.810] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7a508ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0146.810] FindClose (in: hFindFile=0x7ad70b0 | out: hFindFile=0x7ad70b0) returned 1 [0146.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53638) returned 1 [0146.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6ad0) returned 1 [0146.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 1747 os_tid = 0x22f8 [0143.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml")) returned 0x20 [0145.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0145.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.764] GetLastError () returned 0x5 [0145.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0145.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b928) returned 1 Thread: id = 1748 os_tid = 0x22fc [0143.406] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml")) returned 0x2020 [0143.406] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x20) returned 0 [0143.406] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.407] GetLastError () returned 0x5 [0143.407] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x2020) returned 0 [0143.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 Thread: id = 1749 os_tid = 0x2300 [0143.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur")) returned 0x20 [0143.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR", dwFileAttributes=0x20) returned 0 [0143.413] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.413] GetLastError () returned 0x5 [0143.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR", dwFileAttributes=0x20) returned 0 [0143.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 Thread: id = 1750 os_tid = 0x2304 [0143.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur")) returned 0x20 [0143.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR", dwFileAttributes=0x20) returned 0 [0143.416] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.417] GetLastError () returned 0x5 [0143.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR", dwFileAttributes=0x20) returned 0 [0143.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 Thread: id = 1751 os_tid = 0x2308 [0143.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur")) returned 0x20 [0143.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR", dwFileAttributes=0x20) returned 0 [0143.418] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.419] GetLastError () returned 0x5 [0143.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR", dwFileAttributes=0x20) returned 0 [0143.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 1752 os_tid = 0x230c [0143.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur")) returned 0x20 [0143.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR", dwFileAttributes=0x20) returned 0 [0143.420] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.420] GetLastError () returned 0x5 [0143.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR", dwFileAttributes=0x20) returned 0 [0143.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6ad8) returned 1 Thread: id = 1753 os_tid = 0x2310 [0143.422] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata")) returned 0x2020 [0144.711] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata", dwFileAttributes=0x20) returned 1 [0145.708] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d08 [0145.709] GetFileSizeEx (in: hFile=0x1d08, lpFileSize=0x938fd04 | out: lpFileSize=0x938fd04*=5399) returned 1 [0145.709] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x1513, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.709] ReadFile (in: hFile=0x1d08, lpBuffer=0x938fce0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x938fcf0, lpOverlapped=0x0 | out: lpBuffer=0x938fce0*, lpNumberOfBytesRead=0x938fcf0*=0x4, lpOverlapped=0x0) returned 1 [0145.713] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0145.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0145.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0145.713] NtQuerySystemTime (in: CurrentTime=0x938fc78 | out: CurrentTime=0x938fc78*=132462177245172000) returned 0x0 [0145.713] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x45e4215a [0145.713] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x45505734 [0145.713] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0xa7bced2 [0145.713] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x714e727a [0145.713] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0xaf3b2fc [0145.713] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x31803664 [0145.713] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x2cc58586 [0145.713] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x79c15785 [0145.713] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x390f843f [0145.713] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x415183e0 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x6748e782 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x4ff09c66 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0xed073b9 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x60bc78ce [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x355fa3a7 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x7870f3cc [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x4825e0dd [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x7662918d [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x207d4de [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x3add6a0a [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x407b4820 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x72452c53 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x3d354b22 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x3fd27a45 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x12f1761 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0xbb8402b [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x6e1edd20 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x6f253bc0 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x1b9c858b [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x4662c3f1 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x3a3939 [0145.714] RtlRandomEx (in: Seed=0x938fc70 | out: Seed=0x938fc70) returned 0x2b6def4d [0145.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0145.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9fb70 [0145.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca7380 [0145.729] ReadFile (in: hFile=0x1d08, lpBuffer=0x7c9fb70, nNumberOfBytesToRead=0x1517, lpNumberOfBytesRead=0x938fc6c, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesRead=0x938fc6c*=0x1517, lpOverlapped=0x0) returned 1 [0145.735] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.735] WriteFile (in: hFile=0x1d08, lpBuffer=0x7ca7380*, nNumberOfBytesToWrite=0x1517, lpNumberOfBytesWritten=0x938fc70, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesWritten=0x938fc70*=0x1517, lpOverlapped=0x0) returned 1 [0147.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0147.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0147.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0147.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca7380) returned 1 [0147.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0147.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0147.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25860) returned 1 [0147.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d180 [0147.835] SetFilePointerEx (in: hFile=0x1d08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.835] WriteFile (in: hFile=0x1d08, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x938fcf8, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0x938fcf8*=0x11a, lpOverlapped=0x0) returned 1 [0149.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e857d0 [0149.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0149.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0149.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53058) returned 1 [0149.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86848 [0149.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0149.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0149.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0149.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0149.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e857d0) returned 1 [0149.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6788 [0149.467] sprintf (in: _Dest=0x2fe6788, _Format="%c%c" | out: _Dest="34") returned 2 [0149.467] sprintf (in: _Dest=0x2fe678a, _Format="%c%c" | out: _Dest="77") returned 2 [0149.467] sprintf (in: _Dest=0x2fe678c, _Format="%c%c" | out: _Dest="54") returned 2 [0149.467] sprintf (in: _Dest=0x2fe678e, _Format="%c%c" | out: _Dest="76") returned 2 [0149.467] sprintf (in: _Dest=0x2fe6790, _Format="%c%c" | out: _Dest="1e") returned 2 [0149.467] sprintf (in: _Dest=0x2fe6792, _Format="%c%c" | out: _Dest="29") returned 2 [0149.467] sprintf (in: _Dest=0x2fe6794, _Format="%c%c" | out: _Dest="dc") returned 2 [0149.467] sprintf (in: _Dest=0x2fe6796, _Format="%c%c" | out: _Dest="b4") returned 2 [0149.467] sprintf (in: _Dest=0x2fe6798, _Format="%c%c" | out: _Dest="70") returned 2 [0149.467] sprintf (in: _Dest=0x2fe679a, _Format="%c%c" | out: _Dest="14") returned 2 [0149.467] sprintf (in: _Dest=0x2fe679c, _Format="%c%c" | out: _Dest="8e") returned 2 [0149.467] sprintf (in: _Dest=0x2fe679e, _Format="%c%c" | out: _Dest="2f") returned 2 [0149.467] sprintf (in: _Dest=0x2fe67a0, _Format="%c%c" | out: _Dest="61") returned 2 [0149.467] sprintf (in: _Dest=0x2fe67a2, _Format="%c%c" | out: _Dest="80") returned 2 [0149.467] sprintf (in: _Dest=0x2fe67a4, _Format="%c%c" | out: _Dest="db") returned 2 [0149.467] sprintf (in: _Dest=0x2fe67a6, _Format="%c%c" | out: _Dest="f9") returned 2 [0149.467] sprintf (in: _Dest=0x2fe67a8, _Format="%c%c" | out: _Dest="0d") returned 2 [0149.467] sprintf (in: _Dest=0x2fe67aa, _Format="%c%c" | out: _Dest="36") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67ac, _Format="%c%c" | out: _Dest="f0") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67ae, _Format="%c%c" | out: _Dest="4a") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67b0, _Format="%c%c" | out: _Dest="c0") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67b2, _Format="%c%c" | out: _Dest="b1") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67b4, _Format="%c%c" | out: _Dest="26") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67b6, _Format="%c%c" | out: _Dest="ca") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67b8, _Format="%c%c" | out: _Dest="3e") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67ba, _Format="%c%c" | out: _Dest="7b") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67bc, _Format="%c%c" | out: _Dest="d3") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67be, _Format="%c%c" | out: _Dest="5b") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67c0, _Format="%c%c" | out: _Dest="12") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67c2, _Format="%c%c" | out: _Dest="f4") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67c4, _Format="%c%c" | out: _Dest="0a") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67c6, _Format="%c%c" | out: _Dest="99") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67c8, _Format="%c%c" | out: _Dest="2b") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67ca, _Format="%c%c" | out: _Dest="c4") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67cc, _Format="%c%c" | out: _Dest="8b") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67ce, _Format="%c%c" | out: _Dest="c0") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67d0, _Format="%c%c" | out: _Dest="8f") returned 2 [0149.468] sprintf (in: _Dest=0x2fe67d2, _Format="%c%c" | out: _Dest="c1") returned 2 [0149.469] sprintf (in: _Dest=0x2fe67d4, _Format="%c%c" | out: _Dest="e7") returned 2 [0149.469] sprintf (in: _Dest=0x2fe67d6, _Format="%c%c" | out: _Dest="4d") returned 2 [0149.469] RtlInitAnsiString (in: DestinationString=0x938fc80, SourceString="347754761e29dcb470148e2f6180dbf90d36f04ac0b126ca3e7bd35b12f40a992bc48bc08fc1e74d" | out: DestinationString="347754761e29dcb470148e2f6180dbf90d36f04ac0b126ca3e7bd35b12f40a992bc48bc08fc1e74d") [0149.469] RtlAnsiStringToUnicodeString (in: DestinationString=0x938fc78, SourceString="347754761e29dcb470148e2f6180dbf90d36f04ac0b126ca3e7bd35b12f40a992bc48bc08fc1e74d", AllocateDestinationString=1 | out: DestinationString="347754761e29dcb470148e2f6180dbf90d36f04ac0b126ca3e7bd35b12f40a992bc48bc08fc1e74d") returned 0x0 [0149.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66400 [0149.469] RtlFreeAnsiString (AnsiString="3") [0149.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 [0149.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0149.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53058) returned 1 [0149.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0149.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d880) returned 1 [0149.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0149.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d180) returned 1 [0149.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0149.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3808) returned 1 [0149.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0149.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0149.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66558 [0149.470] wcscat (in: _Dest=0x3e66558, _Source="347754761e29dcb47014" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\347754761e29dcb47014") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\347754761e29dcb47014" [0149.470] wcscat (in: _Dest=0x3e66558, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\347754761e29dcb47014.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\347754761e29dcb47014.68814f" [0149.470] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\347754761e29dcb47014.68814f", NtPathName=0x938fc70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\347754761e29dcb47014.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d853c0 [0149.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d853c0) returned 1 [0149.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a41968) returned 1 [0149.516] NtQueryInformationFile (in: FileHandle=0x1d08, IoStatusBlock=0x938fc48, FileInformation=0x938fc50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x938fc48, FileInformation=0x938fc50) returned 0x0 [0149.516] NtSetInformationFile (FileHandle=0x1d08, IoStatusBlock=0x938fc48, FileInformation=0x938fc50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 [0149.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66400) returned 1 [0149.534] FlushFileBuffers (hFile=0x1d08) returned 1 [0149.548] CloseHandle (hObject=0x1d08) returned 1 [0149.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f590 [0149.559] wcscpy (in: _Dest=0x7a5f590, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\" [0149.559] wcscat (in: _Dest=0x7a5f590, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\68814F-Readme.txt" [0149.559] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\68814f-readme.txt")) returned 0xffffffff [0149.559] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f30 [0149.567] WriteFile (in: hFile=0x1f30, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x938fc8c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x938fc8c*=0x8b9, lpOverlapped=0x0) returned 1 [0149.576] CloseHandle (hObject=0x1f30) returned 1 [0149.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f590) returned 1 [0149.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c0b8) returned 1 Thread: id = 1754 os_tid = 0x2314 [0143.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5310 [0143.433] wcscpy (in: _Dest=0x7ad5310, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0143.433] wcscat (in: _Dest=0x7ad5310, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0143.433] wcscat (in: _Dest=0x7ad5310, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*" [0143.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52f00 [0143.433] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7df0 [0144.712] wcscmp (_String1=".", _String2=".") returned 0 [0144.712] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac9e90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4c6cdb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.712] wcscmp (_String1="..", _String2=".") returned 1 [0144.712] wcscmp (_String1="..", _String2="..") returned 0 [0144.712] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c6cdb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x88e79960, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1 [0144.712] wcscmp (_String1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", _String2=".") returned 1 [0144.712] wcscmp (_String1="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", _String2="..") returned 1 [0144.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3ddf1f8 [0144.712] wcscpy (in: _Dest=0x3ddf1f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0144.712] wcscat (in: _Dest=0x3ddf1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0144.712] wcscat (in: _Dest=0x3ddf1f8, _Source="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" [0151.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ddf1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234c [0151.450] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c6cdb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x88e79960, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1 [0151.450] wcscmp (_String1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", _String2=".") returned 1 [0151.450] wcscmp (_String1="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", _String2="..") returned 1 [0151.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3dde3e8 [0151.450] wcscpy (in: _Dest=0x3dde3e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0151.450] wcscat (in: _Dest=0x3dde3e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0151.450] wcscat (in: _Dest=0x3dde3e8, _Source="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" [0151.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dde3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2348 [0151.452] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c6cdb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4c6cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x88e79960, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 0 [0151.452] FindClose (in: hFindFile=0x7ad7df0 | out: hFindFile=0x7ad7df0) returned 1 [0151.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52f00) returned 1 [0151.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5310) returned 1 [0151.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 1755 os_tid = 0x2318 [0143.440] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\GKvnev.pdf" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\gkvnev.pdf")) returned 0x20 [0143.440] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\GKvnev.pdf", dwFileAttributes=0x20) returned 1 [0143.440] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\GKvnev.pdf" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\gkvnev.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e48 [0143.441] GetFileSizeEx (in: hFile=0x1e48, lpFileSize=0x84dfc2c | out: lpFileSize=0x84dfc2c*=8231) returned 1 [0143.441] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x2023, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.441] ReadFile (in: hFile=0x1e48, lpBuffer=0x84dfc08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x84dfc18, lpOverlapped=0x0 | out: lpBuffer=0x84dfc08*, lpNumberOfBytesRead=0x84dfc18*=0x4, lpOverlapped=0x0) returned 1 [0143.442] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0143.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0143.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0143.443] NtQuerySystemTime (in: CurrentTime=0x84dfba0 | out: CurrentTime=0x84dfba0*=132462177223332000) returned 0x0 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x15447eb0 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x117a0601 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x6fafb277 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x1313b836 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x3a58828d [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x69081645 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x652e10f8 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0xe4d7edc [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x42c46905 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x43245b7 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x3f8713cf [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x3f1b9f69 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x51319282 [0143.443] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x40e14549 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x549288f7 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x442e5e99 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x58be40bd [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x6616406e [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x37161902 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x4fb65460 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x369ed036 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x638654b0 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x421525ae [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x2f0df9a8 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x2a1d0bd8 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x71aabc09 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x5a121d29 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x66a5f9f7 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x1d1bb504 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x2f5f753f [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x6420efb6 [0143.444] RtlRandomEx (in: Seed=0x84dfb98 | out: Seed=0x84dfb98) returned 0x75af24e9 [0143.459] ReadFile (in: hFile=0x1e48, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x2027, lpNumberOfBytesRead=0x84dfb94, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x84dfb94*=0x2027, lpOverlapped=0x0) returned 1 [0143.459] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.459] WriteFile (in: hFile=0x1e48, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x2027, lpNumberOfBytesWritten=0x84dfb98, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0x84dfb98*=0x2027, lpOverlapped=0x0) returned 1 [0143.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0143.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0143.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0143.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0143.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0143.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e563c0) returned 1 [0143.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37800 [0143.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e563c0 [0143.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0143.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0143.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37770 [0143.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0143.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0143.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0143.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e563c0) returned 1 [0143.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec940 [0143.891] SetFilePointerEx (in: hFile=0x1e48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.891] WriteFile (in: hFile=0x1e48, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x84dfc20, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x84dfc20*=0x106, lpOverlapped=0x0) returned 1 [0143.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d9e0 [0143.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0143.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0143.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81e80 [0143.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0143.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0143.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0143.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9e0) returned 1 [0143.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3e78f78 [0143.930] sprintf (in: _Dest=0x3e78f78, _Format="%c%c" | out: _Dest="c3") returned 2 [0143.930] sprintf (in: _Dest=0x3e78f7a, _Format="%c%c" | out: _Dest="fa") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f7c, _Format="%c%c" | out: _Dest="aa") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f7e, _Format="%c%c" | out: _Dest="76") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f80, _Format="%c%c" | out: _Dest="98") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f82, _Format="%c%c" | out: _Dest="4b") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f84, _Format="%c%c" | out: _Dest="73") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f86, _Format="%c%c" | out: _Dest="28") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f88, _Format="%c%c" | out: _Dest="a5") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f8a, _Format="%c%c" | out: _Dest="87") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f8c, _Format="%c%c" | out: _Dest="15") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f8e, _Format="%c%c" | out: _Dest="89") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f90, _Format="%c%c" | out: _Dest="55") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f92, _Format="%c%c" | out: _Dest="36") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f94, _Format="%c%c" | out: _Dest="fd") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f96, _Format="%c%c" | out: _Dest="a9") returned 2 [0143.931] sprintf (in: _Dest=0x3e78f98, _Format="%c%c" | out: _Dest="92") returned 2 [0143.932] sprintf (in: _Dest=0x3e78f9a, _Format="%c%c" | out: _Dest="e9") returned 2 [0143.932] sprintf (in: _Dest=0x3e78f9c, _Format="%c%c" | out: _Dest="9c") returned 2 [0143.932] sprintf (in: _Dest=0x3e78f9e, _Format="%c%c" | out: _Dest="fb") returned 2 [0143.932] RtlInitAnsiString (in: DestinationString=0x84dfba8, SourceString="c3faaa76984b7328a58715895536fda992e99cfb" | out: DestinationString="c3faaa76984b7328a58715895536fda992e99cfb") [0143.932] RtlAnsiStringToUnicodeString (in: DestinationString=0x84dfba0, SourceString="c3faaa76984b7328a58715895536fda992e99cfb", AllocateDestinationString=1 | out: DestinationString="c3faaa76984b7328a58715895536fda992e99cfb") returned 0x0 [0143.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe14a8 [0143.932] RtlFreeAnsiString (AnsiString="c") [0143.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 [0143.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81e80) returned 1 [0143.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0143.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0143.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37770) returned 1 [0143.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0143.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37800) returned 1 [0143.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0143.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0143.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0143.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0143.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053e58 [0143.933] wcscat (in: _Dest=0x3053e58, _Source="c3faaa7698" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\c3faaa7698") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\c3faaa7698" [0143.933] wcscat (in: _Dest=0x3053e58, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\c3faaa7698.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\c3faaa7698.68814f" [0143.933] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\c3faaa7698.68814f", NtPathName=0x84dfb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\c3faaa7698.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66558 [0143.933] NtSetInformationFile (FileHandle=0x1e48, IoStatusBlock=0x84dfba0, FileInformation=0x3e66558, Length=0xb4, FileInformationClass=0xa) returned 0x0 [0144.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 [0144.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e900d0) returned 1 [0144.029] NtQueryInformationFile (in: FileHandle=0x1e48, IoStatusBlock=0x84dfb70, FileInformation=0x84dfb78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x84dfb70, FileInformation=0x84dfb78) returned 0x0 [0144.029] NtSetInformationFile (FileHandle=0x1e48, IoStatusBlock=0x84dfb70, FileInformation=0x84dfb78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0144.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 [0144.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe14a8) returned 1 [0144.031] FlushFileBuffers (hFile=0x1e48) returned 1 [0144.032] CloseHandle (hObject=0x1e48) returned 1 [0144.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053e58 [0144.033] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0144.033] wcscat (in: _Dest=0x3053e58, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" [0144.033] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\68814f-readme.txt")) returned 0xffffffff [0144.033] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f08 [0144.043] WriteFile (in: hFile=0x1f08, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x84dfbb4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x84dfbb4*=0x8b9, lpOverlapped=0x0) returned 1 [0144.045] CloseHandle (hObject=0x1f08) returned 1 [0144.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 [0144.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb70b8) returned 1 Thread: id = 1756 os_tid = 0x231c [0143.463] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\IK-7fLMmqpI8QCph6.ppt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\ik-7flmmqpi8qcph6.ppt")) returned 0x20 [0143.463] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\IK-7fLMmqpI8QCph6.ppt", dwFileAttributes=0x20) returned 1 [0143.463] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\IK-7fLMmqpI8QCph6.ppt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\ik-7flmmqpi8qcph6.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f2c [0143.463] GetFileSizeEx (in: hFile=0x1f2c, lpFileSize=0x8cdfc0c | out: lpFileSize=0x8cdfc0c*=30541) returned 1 [0143.464] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0x7749, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.464] ReadFile (in: hFile=0x1f2c, lpBuffer=0x8cdfbe8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8cdfbf8, lpOverlapped=0x0 | out: lpBuffer=0x8cdfbe8*, lpNumberOfBytesRead=0x8cdfbf8*=0x4, lpOverlapped=0x0) returned 1 [0143.466] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0143.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0143.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0143.466] NtQuerySystemTime (in: CurrentTime=0x8cdfb80 | out: CurrentTime=0x8cdfb80*=132462177223644000) returned 0x0 [0143.466] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x49dcb58c [0143.466] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x4b906f36 [0143.466] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x2dfd6c82 [0143.466] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x1c1353ae [0143.466] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x347718e5 [0143.466] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x8e0b56 [0143.466] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x24f52884 [0143.466] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x2a8db1a0 [0143.466] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x4aafbe4c [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x1fec712 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x1cb20dc6 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x5c16007f [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x423f05b1 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x57efda67 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x6b348bf8 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x544e1f9b [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x7f999ac2 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x20827a28 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x6205bfba [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x1d6e6edb [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x2ac45a70 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x3c7e7721 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x62a8bb78 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0xbd8a5a1 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x58f94c4 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x66d0327c [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x425153bb [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x65f64ef0 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x47b5ec40 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x75873241 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x69a93777 [0143.467] RtlRandomEx (in: Seed=0x8cdfb78 | out: Seed=0x8cdfb78) returned 0x60d52f0a [0143.479] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.479] ReadFile (in: hFile=0x1f2c, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8cdfb80, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0x8cdfb80*=0x3c00, lpOverlapped=0x0) returned 1 [0143.480] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85740 [0143.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0143.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0143.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0143.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0143.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0143.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0143.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85740) returned 1 [0143.481] WriteFile (in: hFile=0x1f2c, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8cdfb80, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0x8cdfb80*=0x3c00, lpOverlapped=0x0) returned 1 [0143.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0143.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0143.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e73f70 [0143.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e563c0 [0143.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0143.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0143.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3e73db0 [0143.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0143.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0143.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0143.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e563c0) returned 1 [0143.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55bb8 [0143.903] SetFilePointerEx (in: hFile=0x1f2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.903] WriteFile (in: hFile=0x1f2c, lpBuffer=0x3d55bb8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x8cdfc00, lpOverlapped=0x0 | out: lpBuffer=0x3d55bb8*, lpNumberOfBytesWritten=0x8cdfc00*=0x11c, lpOverlapped=0x0) returned 1 [0143.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5db48 [0143.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0143.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0143.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e78f78 [0143.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0143.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0143.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0143.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5db48) returned 1 [0143.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6fc8 [0143.938] sprintf (in: _Dest=0x2fe6fc8, _Format="%c%c" | out: _Dest="ff") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fca, _Format="%c%c" | out: _Dest="04") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fcc, _Format="%c%c" | out: _Dest="08") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fce, _Format="%c%c" | out: _Dest="54") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fd0, _Format="%c%c" | out: _Dest="ff") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fd2, _Format="%c%c" | out: _Dest="53") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fd4, _Format="%c%c" | out: _Dest="90") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fd6, _Format="%c%c" | out: _Dest="e5") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fd8, _Format="%c%c" | out: _Dest="90") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fda, _Format="%c%c" | out: _Dest="31") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fdc, _Format="%c%c" | out: _Dest="d5") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fde, _Format="%c%c" | out: _Dest="ed") returned 2 [0143.938] sprintf (in: _Dest=0x2fe6fe0, _Format="%c%c" | out: _Dest="18") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6fe2, _Format="%c%c" | out: _Dest="03") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6fe4, _Format="%c%c" | out: _Dest="5c") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6fe6, _Format="%c%c" | out: _Dest="f1") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6fe8, _Format="%c%c" | out: _Dest="d5") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6fea, _Format="%c%c" | out: _Dest="f6") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6fec, _Format="%c%c" | out: _Dest="d3") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6fee, _Format="%c%c" | out: _Dest="23") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6ff0, _Format="%c%c" | out: _Dest="01") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6ff2, _Format="%c%c" | out: _Dest="f4") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6ff4, _Format="%c%c" | out: _Dest="4a") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6ff6, _Format="%c%c" | out: _Dest="14") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6ff8, _Format="%c%c" | out: _Dest="f2") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6ffa, _Format="%c%c" | out: _Dest="a8") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6ffc, _Format="%c%c" | out: _Dest="73") returned 2 [0143.939] sprintf (in: _Dest=0x2fe6ffe, _Format="%c%c" | out: _Dest="48") returned 2 [0143.939] sprintf (in: _Dest=0x2fe7000, _Format="%c%c" | out: _Dest="56") returned 2 [0143.939] sprintf (in: _Dest=0x2fe7002, _Format="%c%c" | out: _Dest="1c") returned 2 [0143.939] sprintf (in: _Dest=0x2fe7004, _Format="%c%c" | out: _Dest="63") returned 2 [0143.939] sprintf (in: _Dest=0x2fe7006, _Format="%c%c" | out: _Dest="ae") returned 2 [0143.939] sprintf (in: _Dest=0x2fe7008, _Format="%c%c" | out: _Dest="e5") returned 2 [0143.939] sprintf (in: _Dest=0x2fe700a, _Format="%c%c" | out: _Dest="5e") returned 2 [0143.939] sprintf (in: _Dest=0x2fe700c, _Format="%c%c" | out: _Dest="df") returned 2 [0143.939] sprintf (in: _Dest=0x2fe700e, _Format="%c%c" | out: _Dest="85") returned 2 [0143.939] sprintf (in: _Dest=0x2fe7010, _Format="%c%c" | out: _Dest="98") returned 2 [0143.939] sprintf (in: _Dest=0x2fe7012, _Format="%c%c" | out: _Dest="0c") returned 2 [0143.939] sprintf (in: _Dest=0x2fe7014, _Format="%c%c" | out: _Dest="b0") returned 2 [0143.939] sprintf (in: _Dest=0x2fe7016, _Format="%c%c" | out: _Dest="dd") returned 2 [0143.939] sprintf (in: _Dest=0x2fe7018, _Format="%c%c" | out: _Dest="a4") returned 2 [0143.939] sprintf (in: _Dest=0x2fe701a, _Format="%c%c" | out: _Dest="e4") returned 2 [0143.939] RtlInitAnsiString (in: DestinationString=0x8cdfb88, SourceString="ff040854ff5390e59031d5ed18035cf1d5f6d32301f44a14f2a87348561c63aee55edf85980cb0dda4e4" | out: DestinationString="ff040854ff5390e59031d5ed18035cf1d5f6d32301f44a14f2a87348561c63aee55edf85980cb0dda4e4") [0143.939] RtlAnsiStringToUnicodeString (in: DestinationString=0x8cdfb80, SourceString="ff040854ff5390e59031d5ed18035cf1d5f6d32301f44a14f2a87348561c63aee55edf85980cb0dda4e4", AllocateDestinationString=1 | out: DestinationString="ff040854ff5390e59031d5ed18035cf1d5f6d32301f44a14f2a87348561c63aee55edf85980cb0dda4e4") returned 0x0 [0143.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7208 [0143.940] RtlFreeAnsiString (AnsiString="f") [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55bb8) returned 1 [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73db0) returned 1 [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73f70) returned 1 [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0143.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0143.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65ad8 [0143.940] wcscat (in: _Dest=0x3e65ad8, _Source="ff040854ff5390e59031d" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ff040854ff5390e59031d") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ff040854ff5390e59031d" [0143.941] wcscat (in: _Dest=0x3e65ad8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ff040854ff5390e59031d.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ff040854ff5390e59031d.68814f" [0143.941] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ff040854ff5390e59031d.68814f", NtPathName=0x8cdfb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ff040854ff5390e59031d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e67568 [0143.941] NtSetInformationFile (FileHandle=0x1f2c, IoStatusBlock=0x8cdfb80, FileInformation=0x3e67568, Length=0xca, FileInformationClass=0xa) returned 0x0 [0144.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 [0144.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8f1b8) returned 1 [0144.050] NtQueryInformationFile (in: FileHandle=0x1f2c, IoStatusBlock=0x8cdfb50, FileInformation=0x8cdfb58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8cdfb50, FileInformation=0x8cdfb58) returned 0x0 [0144.050] NtSetInformationFile (FileHandle=0x1f2c, IoStatusBlock=0x8cdfb50, FileInformation=0x8cdfb58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0144.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65ad8) returned 1 [0144.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7208) returned 1 [0144.051] FlushFileBuffers (hFile=0x1f2c) returned 1 [0144.073] CloseHandle (hObject=0x1f2c) returned 1 [0144.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e3d8 [0144.075] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0144.075] wcscat (in: _Dest=0x7a5e3d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" [0144.075] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\68814f-readme.txt")) returned 0x20 [0144.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 [0144.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 Thread: id = 1757 os_tid = 0x2320 [0143.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\na-aA9.xls" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\na-aa9.xls")) returned 0x20 [0143.492] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\na-aA9.xls", dwFileAttributes=0x20) returned 1 [0143.493] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\na-aA9.xls" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\na-aa9.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1de4 [0143.493] GetFileSizeEx (in: hFile=0x1de4, lpFileSize=0x9cdf78c | out: lpFileSize=0x9cdf78c*=34195) returned 1 [0143.493] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x858f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.493] ReadFile (in: hFile=0x1de4, lpBuffer=0x9cdf768, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9cdf778, lpOverlapped=0x0 | out: lpBuffer=0x9cdf768*, lpNumberOfBytesRead=0x9cdf778*=0x4, lpOverlapped=0x0) returned 1 [0143.495] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0143.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0143.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0143.496] NtQuerySystemTime (in: CurrentTime=0x9cdf700 | out: CurrentTime=0x9cdf700*=132462177223800000) returned 0x0 [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x583f82a0 [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0xc587761 [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x56930b20 [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x135759fc [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x2ab9f2d5 [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x59d7a491 [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x52bc502a [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x5fbae150 [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x62c2ce45 [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x18b6906e [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x21b7025 [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x14092b79 [0143.496] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x310471ed [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x32e004fd [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x5560750 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x23dbac09 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x551478e6 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x1b9884a2 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x544603f9 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x39af6751 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x2ec25cc4 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x21c79af0 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x57919948 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x60cbefbd [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x50b951c [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0xc2ea1e4 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x54240bf [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x5b9b0952 [0143.497] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x293a47a4 [0143.498] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x289d0bf5 [0143.498] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x7037d0ab [0143.498] RtlRandomEx (in: Seed=0x9cdf6f8 | out: Seed=0x9cdf6f8) returned 0x3fa49e61 [0143.512] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.512] ReadFile (in: hFile=0x1de4, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9cdf700, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0x9cdf700*=0x3c00, lpOverlapped=0x0) returned 1 [0143.512] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0143.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0143.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0143.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0143.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0143.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0143.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0143.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0143.514] WriteFile (in: hFile=0x1de4, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9cdf700, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x9cdf700*=0x3c00, lpOverlapped=0x0) returned 1 [0143.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0143.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0143.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37860 [0143.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e563c0 [0143.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0143.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0143.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37890 [0143.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0143.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0143.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0143.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e563c0) returned 1 [0143.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec4e0 [0143.907] SetFilePointerEx (in: hFile=0x1de4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.907] WriteFile (in: hFile=0x1de4, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x9cdf780, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x9cdf780*=0x106, lpOverlapped=0x0) returned 1 [0143.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5db48 [0143.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0143.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0143.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81e80 [0143.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0143.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0143.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0143.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5db48) returned 1 [0143.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3e78f78 [0143.942] sprintf (in: _Dest=0x3e78f78, _Format="%c%c" | out: _Dest="56") returned 2 [0143.942] sprintf (in: _Dest=0x3e78f7a, _Format="%c%c" | out: _Dest="e8") returned 2 [0143.942] sprintf (in: _Dest=0x3e78f7c, _Format="%c%c" | out: _Dest="be") returned 2 [0143.942] sprintf (in: _Dest=0x3e78f7e, _Format="%c%c" | out: _Dest="cf") returned 2 [0143.942] sprintf (in: _Dest=0x3e78f80, _Format="%c%c" | out: _Dest="40") returned 2 [0143.942] sprintf (in: _Dest=0x3e78f82, _Format="%c%c" | out: _Dest="54") returned 2 [0143.942] sprintf (in: _Dest=0x3e78f84, _Format="%c%c" | out: _Dest="ea") returned 2 [0143.942] sprintf (in: _Dest=0x3e78f86, _Format="%c%c" | out: _Dest="06") returned 2 [0143.942] sprintf (in: _Dest=0x3e78f88, _Format="%c%c" | out: _Dest="7c") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f8a, _Format="%c%c" | out: _Dest="da") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f8c, _Format="%c%c" | out: _Dest="64") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f8e, _Format="%c%c" | out: _Dest="06") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f90, _Format="%c%c" | out: _Dest="08") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f92, _Format="%c%c" | out: _Dest="83") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f94, _Format="%c%c" | out: _Dest="73") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f96, _Format="%c%c" | out: _Dest="f7") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f98, _Format="%c%c" | out: _Dest="d4") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f9a, _Format="%c%c" | out: _Dest="d8") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f9c, _Format="%c%c" | out: _Dest="e2") returned 2 [0143.943] sprintf (in: _Dest=0x3e78f9e, _Format="%c%c" | out: _Dest="d4") returned 2 [0143.943] RtlInitAnsiString (in: DestinationString=0x9cdf708, SourceString="56e8becf4054ea067cda6406088373f7d4d8e2d4" | out: DestinationString="56e8becf4054ea067cda6406088373f7d4d8e2d4") [0143.943] RtlAnsiStringToUnicodeString (in: DestinationString=0x9cdf700, SourceString="56e8becf4054ea067cda6406088373f7d4d8e2d4", AllocateDestinationString=1 | out: DestinationString="56e8becf4054ea067cda6406088373f7d4d8e2d4") returned 0x0 [0143.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe1508 [0143.943] RtlFreeAnsiString (AnsiString="5") [0143.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 [0143.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81e80) returned 1 [0143.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0143.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0143.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37890) returned 1 [0143.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0143.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37860) returned 1 [0143.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0143.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0143.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0143.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0143.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e3d8 [0143.944] wcscat (in: _Dest=0x7a5e3d8, _Source="56e8becf40" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\56e8becf40") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\56e8becf40" [0143.944] wcscat (in: _Dest=0x7a5e3d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\56e8becf40.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\56e8becf40.68814f" [0143.944] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\56e8becf40.68814f", NtPathName=0x9cdf6f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\56e8becf40.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e663d8 [0143.944] NtSetInformationFile (FileHandle=0x1de4, IoStatusBlock=0x9cdf700, FileInformation=0x3e663d8, Length=0xb4, FileInformationClass=0xa) returned 0x0 [0144.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e663d8) returned 1 [0144.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8ef90) returned 1 [0144.054] NtQueryInformationFile (in: FileHandle=0x1de4, IoStatusBlock=0x9cdf6d0, FileInformation=0x9cdf6d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9cdf6d0, FileInformation=0x9cdf6d8) returned 0x0 [0144.054] NtSetInformationFile (FileHandle=0x1de4, IoStatusBlock=0x9cdf6d0, FileInformation=0x9cdf6d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0144.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 [0144.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 [0144.055] FlushFileBuffers (hFile=0x1de4) returned 1 [0144.079] CloseHandle (hObject=0x1de4) returned 1 [0144.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e3d8 [0144.080] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0144.080] wcscat (in: _Dest=0x7a5e3d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" [0144.080] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\68814f-readme.txt")) returned 0x20 [0144.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 [0144.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 1758 os_tid = 0x2324 [0143.520] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\tc9zwiybmagy3vtej.docx")) returned 0x20 [0143.520] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx", dwFileAttributes=0x20) returned 1 [0143.520] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\tc9zwiybmagy3vtej.docx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f08 [0143.520] GetFileSizeEx (in: hFile=0x1f08, lpFileSize=0x800fd34 | out: lpFileSize=0x800fd34*=90037) returned 1 [0143.520] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x15fb1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.521] ReadFile (in: hFile=0x1f08, lpBuffer=0x800fd10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x800fd20, lpOverlapped=0x0 | out: lpBuffer=0x800fd10*, lpNumberOfBytesRead=0x800fd20*=0x4, lpOverlapped=0x0) returned 1 [0143.522] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0143.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0143.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0143.523] NtQuerySystemTime (in: CurrentTime=0x800fca8 | out: CurrentTime=0x800fca8*=132462177224112000) returned 0x0 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x94eef9 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x4f60a2e0 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x61851a8c [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x1a149290 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x573e6e20 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x121a1957 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x41210ca7 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x66a3c4a6 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x25a57356 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x65cc8865 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x11426ce7 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x6fdb11b4 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x3ee90846 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x16c250a8 [0143.523] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x455c72fd [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x418c6472 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x2baa5d00 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x20ee620 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x7d0799c5 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x5ed43228 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x743e4478 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x563d59a0 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0xcf53465 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x5a5de3b2 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x2cc95a66 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x46474b69 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x673f6c9 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x782b442f [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x1ff37c23 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x6f6b2055 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x2b6435b7 [0143.524] RtlRandomEx (in: Seed=0x800fca0 | out: Seed=0x800fca0) returned 0x6c10e0bc [0143.535] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.535] ReadFile (in: hFile=0x1f08, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x800fca8, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x800fca8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.535] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85308 [0143.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0143.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0143.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0143.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0143.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0143.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0143.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85308) returned 1 [0143.537] WriteFile (in: hFile=0x1f08, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x800fca8, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0x800fca8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0143.910] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.910] ReadFile (in: hFile=0x1f08, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x800fca8, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x800fca8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.910] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e563c0 [0143.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0143.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0143.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0143.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0143.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0143.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0143.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e563c0) returned 1 [0143.911] WriteFile (in: hFile=0x1f08, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x800fca8, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0x800fca8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0143.918] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x123b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.918] ReadFile (in: hFile=0x1f08, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x800fca8, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x800fca8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.918] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x123b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e563c0 [0143.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0143.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0143.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0143.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0143.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0143.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0143.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e563c0) returned 1 [0143.919] WriteFile (in: hFile=0x1f08, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x800fca8, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0x800fca8*=0x3c00, lpOverlapped=0x0) returned 1 [0143.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0143.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d9c0 [0143.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0143.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0143.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0143.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0143.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5d9e0 [0143.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5db48 [0143.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0143.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0143.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5e250 [0143.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0143.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0143.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0143.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5db48) returned 1 [0143.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15e) returned 0x3dce108 [0143.936] SetFilePointerEx (in: hFile=0x1f08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.936] WriteFile (in: hFile=0x1f08, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x800fd28, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x800fd28*=0x15e, lpOverlapped=0x0) returned 1 [0144.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce108) returned 1 [0144.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e250) returned 1 [0144.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0144.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9e0) returned 1 [0144.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 [0144.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37e0) returned 1 [0144.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0144.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0144.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e65b98 [0144.014] wcscpy (in: _Dest=0x3e65b98, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx" [0144.014] wcscat (in: _Dest=0x3e65b98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx.68814f" [0144.014] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx.68814f", NtPathName=0x800fca0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\Tc9ZwIyBMaGY3VTeJ.docx.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68648 [0144.014] NtSetInformationFile (FileHandle=0x1f08, IoStatusBlock=0x800fca8, FileInformation=0x3e68648, Length=0xcc, FileInformationClass=0xa) returned 0x0 [0144.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 [0144.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a56090) returned 1 [0144.035] NtQueryInformationFile (in: FileHandle=0x1f08, IoStatusBlock=0x800fc78, FileInformation=0x800fc80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x800fc78, FileInformation=0x800fc80) returned 0x0 [0144.035] NtSetInformationFile (FileHandle=0x1f08, IoStatusBlock=0x800fc78, FileInformation=0x800fc80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0144.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b98) returned 1 [0144.040] FlushFileBuffers (hFile=0x1f08) returned 1 [0144.041] CloseHandle (hObject=0x1f08) returned 1 [0144.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e5d0 [0144.042] wcscpy (in: _Dest=0x7a5e5d0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0144.042] wcscat (in: _Dest=0x7a5e5d0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" [0144.042] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\68814f-readme.txt")) returned 0x20 [0144.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e5d0) returned 1 [0144.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 1759 os_tid = 0x2328 [0143.544] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\WtORBnNqjUu.pptx" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\wtorbnnqjuu.pptx")) returned 0x20 [0143.545] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\WtORBnNqjUu.pptx", dwFileAttributes=0x20) returned 1 [0143.545] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\WtORBnNqjUu.pptx" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\wtorbnnqjuu.pptx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f84 [0143.545] GetFileSizeEx (in: hFile=0x1f84, lpFileSize=0x9dffdec | out: lpFileSize=0x9dffdec*=46419) returned 1 [0143.545] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0xb54f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.545] ReadFile (in: hFile=0x1f84, lpBuffer=0x9dffdc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9dffdd8, lpOverlapped=0x0 | out: lpBuffer=0x9dffdc8*, lpNumberOfBytesRead=0x9dffdd8*=0x4, lpOverlapped=0x0) returned 1 [0143.547] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0143.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0143.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0143.548] NtQuerySystemTime (in: CurrentTime=0x9dffd60 | out: CurrentTime=0x9dffd60*=132462177224424000) returned 0x0 [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x49018cdf [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x439db86a [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x3cbb8d34 [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x48f7f8c [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x4299b0bc [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x49545783 [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x209827e [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x3c2d3784 [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x6dd407fc [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x32d0a3d7 [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x68c89fc2 [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x7a44bf78 [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x44d21873 [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x6d547a9e [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x22ccc513 [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x25d678d6 [0143.548] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x19e6f636 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x29e8ac08 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x29fd68c5 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x4f35ca20 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x6e37c978 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x33347e1d [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x11d5bc89 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x5af3d183 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x1dea368d [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x4c74147 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x100eca59 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x135759fc [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x1f7fe9f0 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x362df53f [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x72367c32 [0143.549] RtlRandomEx (in: Seed=0x9dffd58 | out: Seed=0x9dffd58) returned 0x7d82b783 [0143.561] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.562] ReadFile (in: hFile=0x1f84, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9dffd60, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0x9dffd60*=0x3c00, lpOverlapped=0x0) returned 1 [0143.562] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85ce0 [0143.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0143.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0143.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0143.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0143.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0143.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0143.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ce0) returned 1 [0143.563] WriteFile (in: hFile=0x1f84, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9dffd60, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0x9dffd60*=0x3c00, lpOverlapped=0x0) returned 1 [0143.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0143.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0143.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e798a8 [0143.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e563c0 [0143.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0143.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0143.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79720 [0143.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0143.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0143.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0143.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e563c0) returned 1 [0143.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55278 [0143.917] SetFilePointerEx (in: hFile=0x1f84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.917] WriteFile (in: hFile=0x1f84, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x9dffde0, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0x9dffde0*=0x112, lpOverlapped=0x0) returned 1 [0143.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5db48 [0143.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0143.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0143.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0143.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0143.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0143.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0143.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5db48) returned 1 [0143.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e83f48 [0143.962] sprintf (in: _Dest=0x3e83f48, _Format="%c%c" | out: _Dest="ab") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f4a, _Format="%c%c" | out: _Dest="11") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f4c, _Format="%c%c" | out: _Dest="2d") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f4e, _Format="%c%c" | out: _Dest="bd") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f50, _Format="%c%c" | out: _Dest="8b") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f52, _Format="%c%c" | out: _Dest="dc") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f54, _Format="%c%c" | out: _Dest="2c") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f56, _Format="%c%c" | out: _Dest="70") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f58, _Format="%c%c" | out: _Dest="86") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f5a, _Format="%c%c" | out: _Dest="84") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f5c, _Format="%c%c" | out: _Dest="f8") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f5e, _Format="%c%c" | out: _Dest="06") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f60, _Format="%c%c" | out: _Dest="41") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f62, _Format="%c%c" | out: _Dest="92") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f64, _Format="%c%c" | out: _Dest="ef") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f66, _Format="%c%c" | out: _Dest="8a") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f68, _Format="%c%c" | out: _Dest="51") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f6a, _Format="%c%c" | out: _Dest="fc") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f6c, _Format="%c%c" | out: _Dest="f5") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f6e, _Format="%c%c" | out: _Dest="26") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f70, _Format="%c%c" | out: _Dest="b5") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f72, _Format="%c%c" | out: _Dest="e3") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f74, _Format="%c%c" | out: _Dest="34") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f76, _Format="%c%c" | out: _Dest="51") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f78, _Format="%c%c" | out: _Dest="52") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f7a, _Format="%c%c" | out: _Dest="56") returned 2 [0143.963] sprintf (in: _Dest=0x3e83f7c, _Format="%c%c" | out: _Dest="f7") returned 2 [0143.964] sprintf (in: _Dest=0x3e83f7e, _Format="%c%c" | out: _Dest="c3") returned 2 [0143.964] sprintf (in: _Dest=0x3e83f80, _Format="%c%c" | out: _Dest="91") returned 2 [0143.964] sprintf (in: _Dest=0x3e83f82, _Format="%c%c" | out: _Dest="0e") returned 2 [0143.964] sprintf (in: _Dest=0x3e83f84, _Format="%c%c" | out: _Dest="2a") returned 2 [0143.964] sprintf (in: _Dest=0x3e83f86, _Format="%c%c" | out: _Dest="b4") returned 2 [0143.964] RtlInitAnsiString (in: DestinationString=0x9dffd68, SourceString="ab112dbd8bdc2c708684f8064192ef8a51fcf526b5e334515256f7c3910e2ab4" | out: DestinationString="ab112dbd8bdc2c708684f8064192ef8a51fcf526b5e334515256f7c3910e2ab4") [0143.964] RtlAnsiStringToUnicodeString (in: DestinationString=0x9dffd60, SourceString="ab112dbd8bdc2c708684f8064192ef8a51fcf526b5e334515256f7c3910e2ab4", AllocateDestinationString=1 | out: DestinationString="ab112dbd8bdc2c708684f8064192ef8a51fcf526b5e334515256f7c3910e2ab4") returned 0x0 [0143.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45ec0 [0143.964] RtlFreeAnsiString (AnsiString="a") [0143.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e83f48) returned 1 [0143.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0143.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0143.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0143.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0143.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0143.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0143.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0143.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0143.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0143.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0143.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6ad8 [0143.965] wcscat (in: _Dest=0x2ff6ad8, _Source="ab112dbd8bdc2c70" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ab112dbd8bdc2c70") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ab112dbd8bdc2c70" [0143.965] wcscat (in: _Dest=0x2ff6ad8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ab112dbd8bdc2c70.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ab112dbd8bdc2c70.68814f" [0143.965] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ab112dbd8bdc2c70.68814f", NtPathName=0x9dffd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ab112dbd8bdc2c70.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0143.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d409c0 [0143.965] NtSetInformationFile (FileHandle=0x1f84, IoStatusBlock=0x9dffd60, FileInformation=0x3d409c0, Length=0xc0, FileInformationClass=0xa) returned 0x0 [0144.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409c0) returned 1 [0144.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8f830) returned 1 [0144.057] NtQueryInformationFile (in: FileHandle=0x1f84, IoStatusBlock=0x9dffd30, FileInformation=0x9dffd38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9dffd30, FileInformation=0x9dffd38) returned 0x0 [0144.057] NtSetInformationFile (FileHandle=0x1f84, IoStatusBlock=0x9dffd30, FileInformation=0x9dffd38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0144.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6ad8) returned 1 [0144.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 [0144.059] FlushFileBuffers (hFile=0x1f84) returned 1 [0144.084] CloseHandle (hObject=0x1f84) returned 1 [0144.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e3d8 [0144.084] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0144.085] wcscat (in: _Dest=0x7a5e3d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" [0144.085] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\68814f-readme.txt")) returned 0x20 [0144.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 [0144.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 1760 os_tid = 0x232c [0143.574] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ZArD2CMmuuhrpZ4CSZ.odp" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\zard2cmmuuhrpz4csz.odp")) returned 0x20 [0143.574] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ZArD2CMmuuhrpZ4CSZ.odp", dwFileAttributes=0x20) returned 1 [0143.575] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\ZArD2CMmuuhrpZ4CSZ.odp" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\zard2cmmuuhrpz4csz.odp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ba4 [0143.575] GetFileSizeEx (in: hFile=0x1ba4, lpFileSize=0x9b8fcfc | out: lpFileSize=0x9b8fcfc*=30118) returned 1 [0143.575] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x75a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.575] ReadFile (in: hFile=0x1ba4, lpBuffer=0x9b8fcd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b8fce8, lpOverlapped=0x0 | out: lpBuffer=0x9b8fcd8*, lpNumberOfBytesRead=0x9b8fce8*=0x4, lpOverlapped=0x0) returned 1 [0143.577] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0143.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0143.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0143.577] NtQuerySystemTime (in: CurrentTime=0x9b8fc70 | out: CurrentTime=0x9b8fc70*=132462177224580000) returned 0x0 [0143.577] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x53040a1c [0143.577] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x4bf95b65 [0143.577] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x56eb80b2 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x4013d544 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x7eececc3 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x24b89dba [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x2dc2aff4 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x4fa03fa2 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x3fc45172 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x353f4fbd [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x515972dc [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x59704705 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x252f83cb [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x3c3fff46 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x2de907eb [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x658829d5 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x5c6d0ebb [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x1282a18d [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0xf1c2f19 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x6a538c20 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x75356339 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x1d1bb504 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x79a7a3c0 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x1ecead02 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x649de24f [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x1fab9fc6 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x4e5f8e60 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0xdcf8d99 [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x5577d59b [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x36d368ef [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x2298c10c [0143.578] RtlRandomEx (in: Seed=0x9b8fc68 | out: Seed=0x9b8fc68) returned 0x5a9903f7 [0143.589] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.589] ReadFile (in: hFile=0x1ba4, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9b8fc70, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0x9b8fc70*=0x3c00, lpOverlapped=0x0) returned 1 [0143.590] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85788 [0143.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0143.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0143.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0143.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0143.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0143.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0143.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0143.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0143.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85788) returned 1 [0143.591] WriteFile (in: hFile=0x1ba4, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9b8fc70, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x9b8fc70*=0x3c00, lpOverlapped=0x0) returned 1 [0143.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0143.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0143.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e563c0 [0143.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5d9e0 [0143.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0143.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0143.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0143.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e5da28 [0143.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0143.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0143.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0143.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0143.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5d9e0) returned 1 [0143.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d55968 [0143.922] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.922] WriteFile (in: hFile=0x1ba4, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x9b8fcf0, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0x9b8fcf0*=0x11e, lpOverlapped=0x0) returned 1 [0144.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84db0 [0144.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f0b0 [0144.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0144.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0144.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e798a8 [0144.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0144.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0144.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0144.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 [0144.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84db0) returned 1 [0144.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3edf4d8 [0144.009] sprintf (in: _Dest=0x3edf4d8, _Format="%c%c" | out: _Dest="25") returned 2 [0144.009] sprintf (in: _Dest=0x3edf4da, _Format="%c%c" | out: _Dest="9c") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4dc, _Format="%c%c" | out: _Dest="c4") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4de, _Format="%c%c" | out: _Dest="f9") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4e0, _Format="%c%c" | out: _Dest="5a") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4e2, _Format="%c%c" | out: _Dest="1e") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4e4, _Format="%c%c" | out: _Dest="1b") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4e6, _Format="%c%c" | out: _Dest="a8") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4e8, _Format="%c%c" | out: _Dest="17") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4ea, _Format="%c%c" | out: _Dest="3c") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4ec, _Format="%c%c" | out: _Dest="58") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4ee, _Format="%c%c" | out: _Dest="81") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4f0, _Format="%c%c" | out: _Dest="00") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4f2, _Format="%c%c" | out: _Dest="87") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4f4, _Format="%c%c" | out: _Dest="9a") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4f6, _Format="%c%c" | out: _Dest="65") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4f8, _Format="%c%c" | out: _Dest="f6") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4fa, _Format="%c%c" | out: _Dest="29") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4fc, _Format="%c%c" | out: _Dest="45") returned 2 [0144.010] sprintf (in: _Dest=0x3edf4fe, _Format="%c%c" | out: _Dest="b9") returned 2 [0144.010] sprintf (in: _Dest=0x3edf500, _Format="%c%c" | out: _Dest="b6") returned 2 [0144.010] sprintf (in: _Dest=0x3edf502, _Format="%c%c" | out: _Dest="4d") returned 2 [0144.010] sprintf (in: _Dest=0x3edf504, _Format="%c%c" | out: _Dest="40") returned 2 [0144.010] sprintf (in: _Dest=0x3edf506, _Format="%c%c" | out: _Dest="28") returned 2 [0144.010] sprintf (in: _Dest=0x3edf508, _Format="%c%c" | out: _Dest="99") returned 2 [0144.010] sprintf (in: _Dest=0x3edf50a, _Format="%c%c" | out: _Dest="61") returned 2 [0144.010] sprintf (in: _Dest=0x3edf50c, _Format="%c%c" | out: _Dest="ea") returned 2 [0144.010] sprintf (in: _Dest=0x3edf50e, _Format="%c%c" | out: _Dest="60") returned 2 [0144.010] sprintf (in: _Dest=0x3edf510, _Format="%c%c" | out: _Dest="8a") returned 2 [0144.011] sprintf (in: _Dest=0x3edf512, _Format="%c%c" | out: _Dest="35") returned 2 [0144.011] sprintf (in: _Dest=0x3edf514, _Format="%c%c" | out: _Dest="fc") returned 2 [0144.011] sprintf (in: _Dest=0x3edf516, _Format="%c%c" | out: _Dest="46") returned 2 [0144.011] sprintf (in: _Dest=0x3edf518, _Format="%c%c" | out: _Dest="6f") returned 2 [0144.011] sprintf (in: _Dest=0x3edf51a, _Format="%c%c" | out: _Dest="2a") returned 2 [0144.011] sprintf (in: _Dest=0x3edf51c, _Format="%c%c" | out: _Dest="9e") returned 2 [0144.011] sprintf (in: _Dest=0x3edf51e, _Format="%c%c" | out: _Dest="e9") returned 2 [0144.011] sprintf (in: _Dest=0x3edf520, _Format="%c%c" | out: _Dest="38") returned 2 [0144.011] sprintf (in: _Dest=0x3edf522, _Format="%c%c" | out: _Dest="0a") returned 2 [0144.011] sprintf (in: _Dest=0x3edf524, _Format="%c%c" | out: _Dest="bd") returned 2 [0144.011] sprintf (in: _Dest=0x3edf526, _Format="%c%c" | out: _Dest="2f") returned 2 [0144.011] sprintf (in: _Dest=0x3edf528, _Format="%c%c" | out: _Dest="96") returned 2 [0144.011] sprintf (in: _Dest=0x3edf52a, _Format="%c%c" | out: _Dest="c3") returned 2 [0144.011] sprintf (in: _Dest=0x3edf52c, _Format="%c%c" | out: _Dest="c2") returned 2 [0144.011] sprintf (in: _Dest=0x3edf52e, _Format="%c%c" | out: _Dest="be") returned 2 [0144.011] RtlInitAnsiString (in: DestinationString=0x9b8fc78, SourceString="259cc4f95a1e1ba8173c588100879a65f62945b9b64d40289961ea608a35fc466f2a9ee9380abd2f96c3c2be" | out: DestinationString="259cc4f95a1e1ba8173c588100879a65f62945b9b64d40289961ea608a35fc466f2a9ee9380abd2f96c3c2be") [0144.011] RtlAnsiStringToUnicodeString (in: DestinationString=0x9b8fc70, SourceString="259cc4f95a1e1ba8173c588100879a65f62945b9b64d40289961ea608a35fc466f2a9ee9380abd2f96c3c2be", AllocateDestinationString=1 | out: DestinationString="259cc4f95a1e1ba8173c588100879a65f62945b9b64d40289961ea608a35fc466f2a9ee9380abd2f96c3c2be") returned 0x0 [0144.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66198 [0144.011] RtlFreeAnsiString (AnsiString="2") [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf4d8) returned 1 [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5da28) returned 1 [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e563c0) returned 1 [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0144.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4820) returned 1 [0144.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66258 [0144.012] wcscat (in: _Dest=0x3e66258, _Source="259cc4f95a1e1ba8173c58" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\259cc4f95a1e1ba8173c58") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\259cc4f95a1e1ba8173c58" [0144.012] wcscat (in: _Dest=0x3e66258, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\259cc4f95a1e1ba8173c58.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\259cc4f95a1e1ba8173c58.68814f" [0144.013] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\259cc4f95a1e1ba8173c58.68814f", NtPathName=0x9b8fc68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\259cc4f95a1e1ba8173c58.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0144.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68498 [0144.013] NtSetInformationFile (FileHandle=0x1ba4, IoStatusBlock=0x9b8fc70, FileInformation=0x3e68498, Length=0xcc, FileInformationClass=0xa) returned 0x0 [0144.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0144.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a56fa8) returned 1 [0144.034] NtQueryInformationFile (in: FileHandle=0x1ba4, IoStatusBlock=0x9b8fc40, FileInformation=0x9b8fc48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9b8fc40, FileInformation=0x9b8fc48) returned 0x0 [0144.034] NtSetInformationFile (FileHandle=0x1ba4, IoStatusBlock=0x9b8fc40, FileInformation=0x9b8fc48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0144.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66258) returned 1 [0144.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0144.036] FlushFileBuffers (hFile=0x1ba4) returned 1 [0144.037] CloseHandle (hObject=0x1ba4) returned 1 [0144.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e528 [0144.038] wcscpy (in: _Dest=0x7a5e528, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\" [0144.038] wcscat (in: _Dest=0x7a5e528, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" [0144.038] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\0b72X\\sqAvPCQRj2QkFRhQkI6N\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\0b72x\\sqavpcqrj2qkfrhqki6n\\68814f-readme.txt")) returned 0x20 [0144.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e528) returned 1 [0144.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b9d8) returned 1 Thread: id = 1761 os_tid = 0x2330 [0143.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx")) returned 0x20 [0148.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.061] GetLastError () returned 0x5 [0148.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5860) returned 1 Thread: id = 1762 os_tid = 0x2334 [0143.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx")) returned 0x20 [0145.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx", dwFileAttributes=0x20) returned 0 [0145.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.055] GetLastError () returned 0x5 [0148.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx", dwFileAttributes=0x20) returned 0 [0148.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d440f0) returned 1 Thread: id = 1763 os_tid = 0x2338 [0143.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx")) returned 0x20 [0148.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx", dwFileAttributes=0x20) returned 0 [0148.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.094] GetLastError () returned 0x5 [0148.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx", dwFileAttributes=0x20) returned 0 [0148.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448d0) returned 1 Thread: id = 1764 os_tid = 0x233c [0143.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx")) returned 0x20 [0148.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx", dwFileAttributes=0x20) returned 0 [0148.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.092] GetLastError () returned 0x5 [0148.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx", dwFileAttributes=0x20) returned 0 [0148.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 1765 os_tid = 0x2340 [0143.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx")) returned 0x20 [0148.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0148.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.086] GetLastError () returned 0x5 [0148.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0148.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5c20) returned 1 Thread: id = 1766 os_tid = 0x2344 [0143.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx")) returned 0x20 [0148.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx", dwFileAttributes=0x20) returned 0 [0148.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.084] GetLastError () returned 0x5 [0148.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx", dwFileAttributes=0x20) returned 0 [0148.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cce8) returned 1 Thread: id = 1767 os_tid = 0x2348 [0143.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx")) returned 0x20 [0148.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx", dwFileAttributes=0x20) returned 0 [0148.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.082] GetLastError () returned 0x5 [0148.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx", dwFileAttributes=0x20) returned 0 [0148.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 1768 os_tid = 0x234c [0143.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx")) returned 0x20 [0148.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx", dwFileAttributes=0x20) returned 0 [0148.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.080] GetLastError () returned 0x5 [0148.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx", dwFileAttributes=0x20) returned 0 [0148.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5e58) returned 1 Thread: id = 1769 os_tid = 0x2350 [0143.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx")) returned 0x20 [0148.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0148.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.078] GetLastError () returned 0x5 [0148.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx", dwFileAttributes=0x20) returned 0 [0148.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 Thread: id = 1770 os_tid = 0x2354 [0143.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx")) returned 0x20 [0148.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0148.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.076] GetLastError () returned 0x5 [0148.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx", dwFileAttributes=0x20) returned 0 [0148.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 1771 os_tid = 0x2358 [0143.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx")) returned 0x20 [0148.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx", dwFileAttributes=0x20) returned 0 [0148.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.074] GetLastError () returned 0x5 [0148.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx", dwFileAttributes=0x20) returned 0 [0148.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5ac8) returned 1 Thread: id = 1772 os_tid = 0x235c [0143.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx")) returned 0x20 [0148.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx", dwFileAttributes=0x20) returned 0 [0148.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.071] GetLastError () returned 0x5 [0148.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx", dwFileAttributes=0x20) returned 0 [0148.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5868) returned 1 Thread: id = 1773 os_tid = 0x2360 [0143.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx")) returned 0x20 [0148.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx", dwFileAttributes=0x20) returned 0 [0148.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.059] GetLastError () returned 0x5 [0148.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx", dwFileAttributes=0x20) returned 0 [0148.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 Thread: id = 1774 os_tid = 0x2364 [0143.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e3a0 [0143.612] wcscpy (in: _Dest=0x3f3e3a0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0143.612] wcscat (in: _Dest=0x3f3e3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0143.612] wcscat (in: _Dest=0x3f3e3a0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*" [0143.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55318 [0143.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f8c110, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0148.556] wcscmp (_String1=".", _String2=".") returned 0 [0148.556] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f8c110, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.556] wcscmp (_String1="..", _String2=".") returned 1 [0148.556] wcscmp (_String1="..", _String2="..") returned 0 [0148.556] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f8c110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="EquityFax.Dotx", cAlternateFileName="EQUITY~1.DOT")) returned 1 [0148.556] wcscmp (_String1="EquityFax.Dotx", _String2=".") returned 1 [0148.556] wcscmp (_String1="EquityFax.Dotx", _String2="..") returned 1 [0148.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df30f8 [0148.556] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0148.556] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0148.557] wcscat (in: _Dest=0x3df30f8, _Source="EquityFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" [0150.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df30f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0150.540] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x19972, dwReserved0=0x0, dwReserved1=0x0, cFileName="MedianFax.Dotx", cAlternateFileName="MEDIAN~1.DOT")) returned 1 [0150.540] wcscmp (_String1="MedianFax.Dotx", _String2=".") returned 1 [0150.540] wcscmp (_String1="MedianFax.Dotx", _String2="..") returned 1 [0150.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45530 [0150.540] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0150.540] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0150.540] wcscat (in: _Dest=0x3d45530, _Source="MedianFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" [0150.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8 [0150.542] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x1bbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrielFax.Dotx", cAlternateFileName="ORIELF~1.DOT")) returned 1 [0150.542] wcscmp (_String1="OrielFax.Dotx", _String2=".") returned 1 [0150.542] wcscmp (_String1="OrielFax.Dotx", _String2="..") returned 1 [0150.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45920 [0150.542] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0150.542] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0150.542] wcscat (in: _Dest=0x3d45920, _Source="OrielFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" [0150.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2020 [0150.544] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64070950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x16d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginFax.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1 [0150.544] wcscmp (_String1="OriginFax.Dotx", _String2=".") returned 1 [0150.544] wcscmp (_String1="OriginFax.Dotx", _String2="..") returned 1 [0150.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44690 [0150.544] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0150.544] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0150.544] wcscat (in: _Dest=0x3d44690, _Source="OriginFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" [0150.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004 [0150.545] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="URBANF~1.DOT")) returned 1 [0150.545] wcscmp (_String1="UrbanFax.Dotx", _String2=".") returned 1 [0150.545] wcscmp (_String1="UrbanFax.Dotx", _String2="..") returned 1 [0150.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45ad0 [0150.545] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX" [0150.545] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\" [0150.545] wcscat (in: _Dest=0x3d45ad0, _Source="UrbanFax.Dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" [0150.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc [0150.546] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4918b00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe4918b00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x13901, dwReserved0=0x0, dwReserved1=0x0, cFileName="UrbanFax.Dotx", cAlternateFileName="URBANF~1.DOT")) returned 0 [0150.546] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0150.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55318) returned 1 [0150.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0150.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fbf0) returned 1 Thread: id = 1775 os_tid = 0x2368 [0143.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx")) returned 0x20 [0148.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx", dwFileAttributes=0x20) returned 0 [0148.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.057] GetLastError () returned 0x5 [0148.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx", dwFileAttributes=0x20) returned 0 [0148.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 1776 os_tid = 0x236c [0143.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx")) returned 0x20 [0147.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx", dwFileAttributes=0x20) returned 0 [0147.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.976] GetLastError () returned 0x5 [0147.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx", dwFileAttributes=0x20) returned 0 [0147.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 Thread: id = 1777 os_tid = 0x2370 [0143.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx")) returned 0x20 [0148.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx", dwFileAttributes=0x20) returned 0 [0148.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.069] GetLastError () returned 0x5 [0148.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx", dwFileAttributes=0x20) returned 0 [0148.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5608) returned 1 Thread: id = 1778 os_tid = 0x2374 [0143.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx")) returned 0x20 [0148.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.068] GetLastError () returned 0x5 [0148.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df25b8) returned 1 Thread: id = 1779 os_tid = 0x2378 [0143.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx")) returned 0x20 [0147.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0147.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.406] GetLastError () returned 0x5 [0147.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0147.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad53a8) returned 1 Thread: id = 1780 os_tid = 0x237c [0143.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx")) returned 0x20 [0148.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.116] GetLastError () returned 0x5 [0148.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad51e0) returned 1 Thread: id = 1781 os_tid = 0x2380 [0143.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx")) returned 0x20 [0148.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx", dwFileAttributes=0x20) returned 0 [0148.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.113] GetLastError () returned 0x5 [0148.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx", dwFileAttributes=0x20) returned 0 [0148.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 Thread: id = 1782 os_tid = 0x2384 [0143.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx")) returned 0x20 [0148.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx", dwFileAttributes=0x20) returned 0 [0148.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.111] GetLastError () returned 0x5 [0148.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx", dwFileAttributes=0x20) returned 0 [0148.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1c28) returned 1 Thread: id = 1783 os_tid = 0x2388 [0143.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx")) returned 0x20 [0148.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx", dwFileAttributes=0x20) returned 0 [0148.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.066] GetLastError () returned 0x5 [0148.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx", dwFileAttributes=0x20) returned 0 [0148.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 Thread: id = 1784 os_tid = 0x238c [0143.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e47b18 [0143.643] wcscpy (in: _Dest=0x3e47b18, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" [0143.643] wcscat (in: _Dest=0x3e47b18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\" [0143.643] wcscat (in: _Dest=0x3e47b18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*" [0143.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a544a8 [0143.643] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x553507b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x553507b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73f30 [0148.065] wcscmp (_String1=".", _String2=".") returned 0 [0148.065] FindNextFileW (in: hFindFile=0x3e73f30, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x553507b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x553507b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.065] wcscmp (_String1="..", _String2=".") returned 1 [0148.065] wcscmp (_String1="..", _String2="..") returned 0 [0148.066] FindNextFileW (in: hFindFile=0x3e73f30, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0148.066] wcscmp (_String1="14", _String2=".") returned 1 [0148.066] wcscmp (_String1="14", _String2="..") returned 1 [0148.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a298 [0148.066] wcscpy (in: _Dest=0x3e1a298, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE" [0148.066] wcscat (in: _Dest=0x3e1a298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\" [0148.066] wcscat (in: _Dest=0x3e1a298, _Source="14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0153.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1a298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c [0153.898] FindNextFileW (in: hFindFile=0x3e73f30, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0153.898] FindClose (in: hFindFile=0x3e73f30 | out: hFindFile=0x3e73f30) returned 1 [0153.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a544a8) returned 1 [0153.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47b18) returned 1 [0153.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efaca0) returned 1 Thread: id = 1785 os_tid = 0x2390 [0143.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx")) returned 0x20 [0148.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.109] GetLastError () returned 0x5 [0148.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 Thread: id = 1786 os_tid = 0x2394 [0143.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx")) returned 0x20 [0148.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0148.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.106] GetLastError () returned 0x5 [0148.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0148.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df18c8) returned 1 Thread: id = 1787 os_tid = 0x2398 [0143.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx")) returned 0x20 [0148.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.103] GetLastError () returned 0x5 [0148.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6dc8) returned 1 Thread: id = 1788 os_tid = 0x239c [0143.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx")) returned 0x20 [0148.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx", dwFileAttributes=0x20) returned 0 [0148.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.101] GetLastError () returned 0x5 [0148.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx", dwFileAttributes=0x20) returned 0 [0148.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df19e8) returned 1 Thread: id = 1789 os_tid = 0x23a0 [0143.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx")) returned 0x20 [0148.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx", dwFileAttributes=0x20) returned 0 [0148.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.098] GetLastError () returned 0x5 [0148.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx", dwFileAttributes=0x20) returned 0 [0148.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x355680) returned 1 Thread: id = 1790 os_tid = 0x23a4 [0143.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx")) returned 0x20 [0148.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.096] GetLastError () returned 0x5 [0148.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx", dwFileAttributes=0x20) returned 0 [0148.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60090) returned 1 Thread: id = 1791 os_tid = 0x23a8 [0143.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d84fb0 [0143.662] wcscpy (in: _Dest=0x3d84fb0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0143.662] wcscat (in: _Dest=0x3d84fb0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\" [0143.662] wcscat (in: _Dest=0x3d84fb0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*" [0143.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0143.663] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73f70 [0143.665] wcscmp (_String1=".", _String2=".") returned 0 [0143.665] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.665] wcscmp (_String1="..", _String2=".") returned 1 [0143.665] wcscmp (_String1="..", _String2="..") returned 0 [0143.665] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="DIGITA~1.LNK")) returned 1 [0143.665] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2=".") returned 1 [0143.665] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2="..") returned 1 [0143.665] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc226eed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc226eed0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0143.665] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2=".") returned 1 [0143.665] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2="..") returned 1 [0143.665] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xabf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0143.665] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2=".") returned 1 [0143.665] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2="..") returned 1 [0143.665] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0143.665] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2=".") returned 1 [0143.665] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2="..") returned 1 [0143.666] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971568f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0143.666] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2=".") returned 1 [0143.666] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2="..") returned 1 [0143.666] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 1 [0143.666] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2=".") returned 1 [0143.666] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2="..") returned 1 [0143.666] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 0 [0143.666] FindClose (in: hFindFile=0x3e73f70 | out: hFindFile=0x3e73f70) returned 1 [0143.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0143.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84fb0) returned 1 [0143.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 Thread: id = 1792 os_tid = 0x23ac [0143.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp")) returned 0x20 [0143.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", dwFileAttributes=0x20) returned 0 [0143.676] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0143.676] GetLastError () returned 0x5 [0143.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", dwFileAttributes=0x20) returned 0 [0143.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 1793 os_tid = 0x23b0 [0143.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3dde3e8 [0143.683] wcscpy (in: _Dest=0x3dde3e8, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0143.684] wcscat (in: _Dest=0x3dde3e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\" [0143.684] wcscat (in: _Dest=0x3dde3e8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*" [0143.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0143.684] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7170 [0144.725] wcscmp (_String1=".", _String2=".") returned 0 [0144.725] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.725] wcscmp (_String1="..", _String2=".") returned 1 [0144.725] wcscmp (_String1="..", _String2="..") returned 0 [0144.725] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f5c500, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x68f5c500, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x68f5c500, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0144.725] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0144.725] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0144.725] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0144.725] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0144.725] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0144.725] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0144.725] FindClose (in: hFindFile=0x7ad7170 | out: hFindFile=0x7ad7170) returned 1 [0144.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0144.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dde3e8) returned 1 [0144.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf3d8) returned 1 Thread: id = 1794 os_tid = 0x23b4 [0143.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif")) returned 0x20 [0145.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", dwFileAttributes=0x20) returned 0 [0145.751] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.118] GetLastError () returned 0x5 [0148.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif", dwFileAttributes=0x20) returned 0 [0148.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 1795 os_tid = 0x23b8 [0143.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif")) returned 0x20 [0148.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", dwFileAttributes=0x20) returned 0 [0148.126] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.126] GetLastError () returned 0x5 [0148.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif", dwFileAttributes=0x20) returned 0 [0148.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 1796 os_tid = 0x23bc [0143.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif")) returned 0x20 [0147.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", dwFileAttributes=0x20) returned 0 [0147.978] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.978] GetLastError () returned 0x5 [0147.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif", dwFileAttributes=0x20) returned 0 [0147.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62090) returned 1 Thread: id = 1797 os_tid = 0x23c0 [0143.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tl.gif")) returned 0x20 [0148.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", dwFileAttributes=0x20) returned 0 [0148.120] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.120] GetLastError () returned 0x5 [0148.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif", dwFileAttributes=0x20) returned 0 [0148.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efbba0) returned 1 Thread: id = 1798 os_tid = 0x23c4 [0143.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tr.gif")) returned 0x20 [0148.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", dwFileAttributes=0x20) returned 0 [0148.124] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.125] GetLastError () returned 0x5 [0148.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif", dwFileAttributes=0x20) returned 0 [0148.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb020) returned 1 Thread: id = 1799 os_tid = 0x23c8 [0143.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\trash.gif")) returned 0x20 [0148.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", dwFileAttributes=0x20) returned 0 [0148.122] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.122] GetLastError () returned 0x5 [0148.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif", dwFileAttributes=0x20) returned 0 [0148.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efa720) returned 1 Thread: id = 1800 os_tid = 0x23cc [0143.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif")) returned 0x20 [0148.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0148.133] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.133] GetLastError () returned 0x5 [0148.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0148.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 1801 os_tid = 0x23d0 [0143.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif")) returned 0x20 [0148.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0148.135] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.135] GetLastError () returned 0x5 [0148.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0148.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e138) returned 1 Thread: id = 1802 os_tid = 0x23d4 [0143.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif")) returned 0x20 [0148.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0148.137] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.137] GetLastError () returned 0x5 [0148.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", dwFileAttributes=0x20) returned 0 [0148.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c218) returned 1 Thread: id = 1803 os_tid = 0x23d8 [0143.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif")) returned 0x20 [0147.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0147.409] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.409] GetLastError () returned 0x5 [0147.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif", dwFileAttributes=0x20) returned 0 [0147.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e1e0) returned 1 Thread: id = 1804 os_tid = 0x23dc [0143.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\warning.gif")) returned 0x20 [0148.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", dwFileAttributes=0x20) returned 0 [0148.131] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.131] GetLastError () returned 0x5 [0148.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif", dwFileAttributes=0x20) returned 0 [0148.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 1805 os_tid = 0x23e0 [0143.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.chs")) returned 0x20 [0148.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS", dwFileAttributes=0x20) returned 0 [0148.555] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.309] GetLastError () returned 0x5 [0151.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS", dwFileAttributes=0x20) returned 0 [0151.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 1806 os_tid = 0x23e4 [0143.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cht")) returned 0x20 [0147.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT", dwFileAttributes=0x20) returned 0 [0147.250] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.013] GetLastError () returned 0x5 [0148.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT", dwFileAttributes=0x20) returned 0 [0148.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60120) returned 1 Thread: id = 1807 os_tid = 0x23e8 [0143.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cze")) returned 0x20 [0150.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE", dwFileAttributes=0x20) returned 0 [0150.779] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.659] GetLastError () returned 0x5 [0152.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE", dwFileAttributes=0x20) returned 0 [0152.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a601b0) returned 1 Thread: id = 1808 os_tid = 0x23ec [0143.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.dan")) returned 0x20 [0150.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN", dwFileAttributes=0x20) returned 0 [0150.779] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.657] GetLastError () returned 0x5 [0152.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN", dwFileAttributes=0x20) returned 0 [0152.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60240) returned 1 Thread: id = 1809 os_tid = 0x23f0 [0143.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.deu")) returned 0x20 [0150.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU", dwFileAttributes=0x20) returned 0 [0150.778] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.656] GetLastError () returned 0x5 [0152.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU", dwFileAttributes=0x20) returned 0 [0152.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a602d0) returned 1 Thread: id = 1810 os_tid = 0x23f4 [0143.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.esp")) returned 0x20 [0150.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP", dwFileAttributes=0x20) returned 0 [0150.775] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.645] GetLastError () returned 0x5 [0152.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP", dwFileAttributes=0x20) returned 0 [0152.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60360) returned 1 Thread: id = 1811 os_tid = 0x23f8 [0143.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.euq")) returned 0x20 [0150.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ", dwFileAttributes=0x20) returned 0 [0150.778] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.655] GetLastError () returned 0x5 [0152.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ", dwFileAttributes=0x20) returned 0 [0152.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 Thread: id = 1812 os_tid = 0x23fc [0143.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.fra")) returned 0x20 [0150.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA", dwFileAttributes=0x20) returned 0 [0150.775] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.631] GetLastError () returned 0x5 [0152.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA", dwFileAttributes=0x20) returned 0 [0152.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60480) returned 1 Thread: id = 1813 os_tid = 0x2400 [0143.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv")) returned 0x20 [0150.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV", dwFileAttributes=0x20) returned 0 [0150.778] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.653] GetLastError () returned 0x5 [0152.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV", dwFileAttributes=0x20) returned 0 [0152.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60510) returned 1 Thread: id = 1814 os_tid = 0x2404 [0143.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hun")) returned 0x20 [0150.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN", dwFileAttributes=0x20) returned 0 [0150.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.652] GetLastError () returned 0x5 [0152.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN", dwFileAttributes=0x20) returned 0 [0152.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a605a0) returned 1 Thread: id = 1815 os_tid = 0x2408 [0143.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ita")) returned 0x20 [0150.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA", dwFileAttributes=0x20) returned 0 [0150.775] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.428] GetLastError () returned 0x5 [0152.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA", dwFileAttributes=0x20) returned 0 [0152.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60630) returned 1 Thread: id = 1816 os_tid = 0x240c [0143.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn")) returned 0x20 [0150.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN", dwFileAttributes=0x20) returned 0 [0150.774] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.772] GetLastError () returned 0x5 [0151.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN", dwFileAttributes=0x20) returned 0 [0151.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a606c0) returned 1 Thread: id = 1817 os_tid = 0x2410 [0143.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.kor")) returned 0x20 [0150.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR", dwFileAttributes=0x20) returned 0 [0150.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.650] GetLastError () returned 0x5 [0152.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR", dwFileAttributes=0x20) returned 0 [0152.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 Thread: id = 1818 os_tid = 0x2414 [0143.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nld")) returned 0x20 [0150.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD", dwFileAttributes=0x20) returned 0 [0150.776] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.649] GetLastError () returned 0x5 [0152.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD", dwFileAttributes=0x20) returned 0 [0152.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a607e0) returned 1 Thread: id = 1819 os_tid = 0x2418 [0143.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nor")) returned 0x20 [0150.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR", dwFileAttributes=0x20) returned 0 [0150.776] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.648] GetLastError () returned 0x5 [0152.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR", dwFileAttributes=0x20) returned 0 [0152.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60870) returned 1 Thread: id = 1820 os_tid = 0x241c [0143.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.pol")) returned 0x20 [0150.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL", dwFileAttributes=0x20) returned 0 [0150.143] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.666] GetLastError () returned 0x5 [0152.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL", dwFileAttributes=0x20) returned 0 [0152.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60900) returned 1 Thread: id = 1821 os_tid = 0x2420 [0143.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb")) returned 0x20 [0150.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB", dwFileAttributes=0x20) returned 0 [0150.776] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.646] GetLastError () returned 0x5 [0152.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB", dwFileAttributes=0x20) returned 0 [0152.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60990) returned 1 Thread: id = 1822 os_tid = 0x2424 [0143.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rum")) returned 0x20 [0150.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM", dwFileAttributes=0x20) returned 0 [0150.780] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.664] GetLastError () returned 0x5 [0152.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM", dwFileAttributes=0x20) returned 0 [0152.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60a20) returned 1 Thread: id = 1823 os_tid = 0x2428 [0143.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rus")) returned 0x20 [0150.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS", dwFileAttributes=0x20) returned 0 [0150.780] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.663] GetLastError () returned 0x5 [0152.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS", dwFileAttributes=0x20) returned 0 [0152.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60ab0) returned 1 Thread: id = 1824 os_tid = 0x242c [0143.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sky")) returned 0x20 [0150.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY", dwFileAttributes=0x20) returned 0 [0150.780] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.661] GetLastError () returned 0x5 [0152.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY", dwFileAttributes=0x20) returned 0 [0152.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60b40) returned 1 Thread: id = 1825 os_tid = 0x2430 [0143.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.slv")) returned 0x20 [0153.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV", dwFileAttributes=0x20) returned 0 [0153.045] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.046] GetLastError () returned 0x5 [0153.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV", dwFileAttributes=0x20) returned 0 [0153.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60bd0) returned 1 Thread: id = 1826 os_tid = 0x2434 [0143.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.suo")) returned 0x20 [0153.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO", dwFileAttributes=0x20) returned 0 [0153.097] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.097] GetLastError () returned 0x5 [0153.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO", dwFileAttributes=0x20) returned 0 [0153.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60c60) returned 1 Thread: id = 1827 os_tid = 0x2438 [0144.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sve")) returned 0x20 [0151.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE", dwFileAttributes=0x20) returned 0 [0151.311] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.469] GetLastError () returned 0x5 [0153.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE", dwFileAttributes=0x20) returned 0 [0153.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60cf0) returned 1 Thread: id = 1828 os_tid = 0x244c [0144.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df5f40 [0144.737] wcscpy (in: _Dest=0x3df5f40, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0144.737] wcscat (in: _Dest=0x3df5f40, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0144.737] wcscat (in: _Dest=0x3df5f40, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*" [0144.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0144.737] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7170 [0144.737] wcscmp (_String1=".", _String2=".") returned 0 [0144.737] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe58bf1a0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.737] wcscmp (_String1="..", _String2=".") returned 1 [0144.738] wcscmp (_String1="..", _String2="..") returned 0 [0144.738] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0144.738] wcscmp (_String1="packages", _String2=".") returned 1 [0144.738] wcscmp (_String1="packages", _String2="..") returned 1 [0144.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a666c0 [0144.738] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88" [0144.738] wcscat (in: _Dest=0x7a666c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\" [0144.738] wcscat (in: _Dest=0x7a666c0, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0152.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a666c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c [0152.914] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0152.915] FindClose (in: hFindFile=0x7ad7170 | out: hFindFile=0x7ad7170) returned 1 [0152.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0152.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 [0152.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6120) returned 1 Thread: id = 1829 os_tid = 0x2450 [0144.744] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\fP545Iwtch75TC9A.csv" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\fp545iwtch75tc9a.csv")) returned 0x20 [0144.744] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\fP545Iwtch75TC9A.csv", dwFileAttributes=0x20) returned 1 [0144.745] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\fP545Iwtch75TC9A.csv" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\fp545iwtch75tc9a.csv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f1c [0144.745] GetFileSizeEx (in: hFile=0x1f1c, lpFileSize=0x451fe34 | out: lpFileSize=0x451fe34*=56082) returned 1 [0144.745] SetFilePointerEx (in: hFile=0x1f1c, liDistanceToMove=0xdb0e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.745] ReadFile (in: hFile=0x1f1c, lpBuffer=0x451fe10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x451fe20, lpOverlapped=0x0 | out: lpBuffer=0x451fe10*, lpNumberOfBytesRead=0x451fe20*=0x4, lpOverlapped=0x0) returned 1 [0144.747] SetFilePointerEx (in: hFile=0x1f1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0144.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0144.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0144.748] NtQuerySystemTime (in: CurrentTime=0x451fda8 | out: CurrentTime=0x451fda8*=132462177235812000) returned 0x0 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0xd152125 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0xdb25e5a [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x1f0e25d8 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x277fdde7 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x361b015d [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x1df3bb2a [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x3be3dba6 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x672a8942 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x72874537 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x111cd03e [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x4de7e9aa [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x18938c4c [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x13789115 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x5fe32b14 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x567ac378 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x2ccf187c [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x5d8d48d5 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x510d7593 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x222948ad [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x460138e0 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x198c002d [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x1660613e [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x6732e2db [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x2e181522 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x17271b81 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x424e8359 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x2c03ebfa [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x779a4591 [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x4fea009c [0144.748] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x3d91dc13 [0144.749] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x484fa095 [0144.749] RtlRandomEx (in: Seed=0x451fda0 | out: Seed=0x451fda0) returned 0x4721157a [0144.757] SetFilePointerEx (in: hFile=0x1f1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.757] ReadFile (in: hFile=0x1f1c, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x451fda8, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0x451fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.757] SetFilePointerEx (in: hFile=0x1f1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5e250 [0144.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b6a8 [0144.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0144.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0144.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0144.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0144.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0144.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0144.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0144.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e250) returned 1 [0144.758] WriteFile (in: hFile=0x1f1c, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x451fda8, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x451fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0144.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0144.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad8030 [0144.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0144.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad7fb0 [0144.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0144.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0144.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0144.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0144.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e250) returned 1 [0144.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55968 [0144.762] SetFilePointerEx (in: hFile=0x1f1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.762] WriteFile (in: hFile=0x1f1c, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x451fe28, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0x451fe28*=0x11a, lpOverlapped=0x0) returned 1 [0145.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56330 [0145.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b978 [0145.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0145.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0145.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37800 [0145.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0145.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0145.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0145.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0145.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56330) returned 1 [0145.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6f68 [0145.772] sprintf (in: _Dest=0x2fe6f68, _Format="%c%c" | out: _Dest="7e") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f6a, _Format="%c%c" | out: _Dest="8b") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f6c, _Format="%c%c" | out: _Dest="03") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f6e, _Format="%c%c" | out: _Dest="89") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f70, _Format="%c%c" | out: _Dest="21") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f72, _Format="%c%c" | out: _Dest="32") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f74, _Format="%c%c" | out: _Dest="35") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f76, _Format="%c%c" | out: _Dest="4b") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f78, _Format="%c%c" | out: _Dest="0c") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f7a, _Format="%c%c" | out: _Dest="bd") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f7c, _Format="%c%c" | out: _Dest="b3") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f7e, _Format="%c%c" | out: _Dest="d1") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f80, _Format="%c%c" | out: _Dest="6f") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f82, _Format="%c%c" | out: _Dest="84") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f84, _Format="%c%c" | out: _Dest="1e") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f86, _Format="%c%c" | out: _Dest="43") returned 2 [0145.772] sprintf (in: _Dest=0x2fe6f88, _Format="%c%c" | out: _Dest="8b") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f8a, _Format="%c%c" | out: _Dest="8f") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f8c, _Format="%c%c" | out: _Dest="a2") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f8e, _Format="%c%c" | out: _Dest="21") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f90, _Format="%c%c" | out: _Dest="bc") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f92, _Format="%c%c" | out: _Dest="2e") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f94, _Format="%c%c" | out: _Dest="6f") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f96, _Format="%c%c" | out: _Dest="f0") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f98, _Format="%c%c" | out: _Dest="dc") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f9a, _Format="%c%c" | out: _Dest="ad") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f9c, _Format="%c%c" | out: _Dest="0a") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6f9e, _Format="%c%c" | out: _Dest="2d") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6fa0, _Format="%c%c" | out: _Dest="21") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6fa2, _Format="%c%c" | out: _Dest="dc") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6fa4, _Format="%c%c" | out: _Dest="97") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6fa6, _Format="%c%c" | out: _Dest="54") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6fa8, _Format="%c%c" | out: _Dest="59") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6faa, _Format="%c%c" | out: _Dest="90") returned 2 [0145.773] sprintf (in: _Dest=0x2fe6fac, _Format="%c%c" | out: _Dest="d8") returned 2 [0145.774] sprintf (in: _Dest=0x2fe6fae, _Format="%c%c" | out: _Dest="a9") returned 2 [0145.774] sprintf (in: _Dest=0x2fe6fb0, _Format="%c%c" | out: _Dest="0c") returned 2 [0145.774] sprintf (in: _Dest=0x2fe6fb2, _Format="%c%c" | out: _Dest="cf") returned 2 [0145.774] sprintf (in: _Dest=0x2fe6fb4, _Format="%c%c" | out: _Dest="16") returned 2 [0145.774] sprintf (in: _Dest=0x2fe6fb6, _Format="%c%c" | out: _Dest="02") returned 2 [0145.774] RtlInitAnsiString (in: DestinationString=0x451fdb0, SourceString="7e8b03892132354b0cbdb3d16f841e438b8fa221bc2e6ff0dcad0a2d21dc97545990d8a90ccf1602" | out: DestinationString="7e8b03892132354b0cbdb3d16f841e438b8fa221bc2e6ff0dcad0a2d21dc97545990d8a90ccf1602") [0145.774] RtlAnsiStringToUnicodeString (in: DestinationString=0x451fda8, SourceString="7e8b03892132354b0cbdb3d16f841e438b8fa221bc2e6ff0dcad0a2d21dc97545990d8a90ccf1602", AllocateDestinationString=1 | out: DestinationString="7e8b03892132354b0cbdb3d16f841e438b8fa221bc2e6ff0dcad0a2d21dc97545990d8a90ccf1602") returned 0x0 [0145.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35b878 [0145.774] wcscat (in: _Dest=0x7ad5f88, _Source="7e8b03892132354b0cbd" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\7e8b03892132354b0cbd") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\7e8b03892132354b0cbd" [0145.775] wcscat (in: _Dest=0x7ad5f88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\7e8b03892132354b0cbd.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\7e8b03892132354b0cbd.68814f" [0145.775] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\7e8b03892132354b0cbd.68814f", NtPathName=0x451fda0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\7e8b03892132354b0cbd.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0145.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b928 [0145.779] FlushFileBuffers (hFile=0x1f1c) returned 1 [0147.070] CloseHandle (hObject=0x1f1c) returned 1 [0147.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3da78 [0147.085] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" [0147.085] wcscat (in: _Dest=0x3f3da78, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\68814F-Readme.txt" [0147.085] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\68814f-readme.txt")) returned 0x20 [0147.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 [0147.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 1830 os_tid = 0x2454 [0144.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69fa8 [0144.763] wcscpy (in: _Dest=0x3e69fa8, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU" [0144.763] wcscat (in: _Dest=0x3e69fa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\" [0144.763] wcscat (in: _Dest=0x3e69fa8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\*") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\*" [0144.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55580 [0144.763] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\*", lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96f59a10, ftCreationTime.dwHighDateTime=0x1d5ddcd, ftLastAccessTime.dwLowDateTime=0x6f911b20, ftLastAccessTime.dwHighDateTime=0x1d5e615, ftLastWriteTime.dwLowDateTime=0x6f911b20, ftLastWriteTime.dwHighDateTime=0x1d5e615, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7ff0 [0144.764] wcscmp (_String1=".", _String2=".") returned 0 [0144.764] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96f59a10, ftCreationTime.dwHighDateTime=0x1d5ddcd, ftLastAccessTime.dwLowDateTime=0x6f911b20, ftLastAccessTime.dwHighDateTime=0x1d5e615, ftLastWriteTime.dwLowDateTime=0x6f911b20, ftLastWriteTime.dwHighDateTime=0x1d5e615, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.764] wcscmp (_String1="..", _String2=".") returned 1 [0144.764] wcscmp (_String1="..", _String2="..") returned 0 [0144.764] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef2ad50, ftCreationTime.dwHighDateTime=0x1d5e7ed, ftLastAccessTime.dwLowDateTime=0xe5c697e0, ftLastAccessTime.dwHighDateTime=0x1d5defc, ftLastWriteTime.dwLowDateTime=0xe5c697e0, ftLastWriteTime.dwHighDateTime=0x1d5defc, nFileSizeHigh=0x0, nFileSizeLow=0x86c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPz1vUxb.xls", cAlternateFileName="")) returned 1 [0144.764] wcscmp (_String1="FPz1vUxb.xls", _String2=".") returned 1 [0144.764] wcscmp (_String1="FPz1vUxb.xls", _String2="..") returned 1 [0144.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3062988 [0144.764] wcscpy (in: _Dest=0x3062988, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU" [0144.764] wcscat (in: _Dest=0x3062988, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\" [0144.764] wcscat (in: _Dest=0x3062988, _Source="FPz1vUxb.xls" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\FPz1vUxb.xls") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\FPz1vUxb.xls" [0151.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24 [0151.456] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f23af50, ftCreationTime.dwHighDateTime=0x1d5dbba, ftLastAccessTime.dwLowDateTime=0x14bb390, ftLastAccessTime.dwHighDateTime=0x1d5e42c, ftLastWriteTime.dwLowDateTime=0x14bb390, ftLastWriteTime.dwHighDateTime=0x1d5e42c, nFileSizeHigh=0x0, nFileSizeLow=0x6eb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="QGoRkJTHFTPOhZkX.ods", cAlternateFileName="QGORKJ~1.ODS")) returned 1 [0151.456] wcscmp (_String1="QGoRkJTHFTPOhZkX.ods", _String2=".") returned 1 [0151.456] wcscmp (_String1="QGoRkJTHFTPOhZkX.ods", _String2="..") returned 1 [0151.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32b820 [0151.456] wcscpy (in: _Dest=0x32b820, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU" [0151.456] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\" [0151.456] wcscat (in: _Dest=0x32b820, _Source="QGoRkJTHFTPOhZkX.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\QGoRkJTHFTPOhZkX.ods") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\QGoRkJTHFTPOhZkX.ods" [0151.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2344 [0151.457] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a3f82e0, ftCreationTime.dwHighDateTime=0x1d5de94, ftLastAccessTime.dwLowDateTime=0x3c733ad0, ftLastAccessTime.dwHighDateTime=0x1d5e457, ftLastWriteTime.dwLowDateTime=0x3c733ad0, ftLastWriteTime.dwHighDateTime=0x1d5e457, nFileSizeHigh=0x0, nFileSizeLow=0xaca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="_vp0V1CDOBUos24W.ods", cAlternateFileName="_VP0V1~1.ODS")) returned 1 [0151.457] wcscmp (_String1="_vp0V1CDOBUos24W.ods", _String2=".") returned 1 [0151.457] wcscmp (_String1="_vp0V1CDOBUos24W.ods", _String2="..") returned 1 [0151.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ca88 [0151.457] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU" [0151.457] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\" [0151.457] wcscat (in: _Dest=0x32ca88, _Source="_vp0V1CDOBUos24W.ods" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\_vp0V1CDOBUos24W.ods") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\_vp0V1CDOBUos24W.ods" [0151.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2340 [0151.459] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a3f82e0, ftCreationTime.dwHighDateTime=0x1d5de94, ftLastAccessTime.dwLowDateTime=0x3c733ad0, ftLastAccessTime.dwHighDateTime=0x1d5e457, ftLastWriteTime.dwLowDateTime=0x3c733ad0, ftLastWriteTime.dwHighDateTime=0x1d5e457, nFileSizeHigh=0x0, nFileSizeLow=0xaca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="_vp0V1CDOBUos24W.ods", cAlternateFileName="_VP0V1~1.ODS")) returned 0 [0151.459] FindClose (in: hFindFile=0x7ad7ff0 | out: hFindFile=0x7ad7ff0) returned 1 [0151.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55580) returned 1 [0151.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69fa8) returned 1 [0151.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 Thread: id = 1831 os_tid = 0x2458 [0144.765] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\PuWvV7ZY5.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\puwvv7zy5.xlsx")) returned 0x20 [0144.765] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\PuWvV7ZY5.xlsx", dwFileAttributes=0x20) returned 1 [0144.765] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\PuWvV7ZY5.xlsx" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\puwvv7zy5.xlsx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f18 [0144.766] GetFileSizeEx (in: hFile=0x1f18, lpFileSize=0x82ef9ac | out: lpFileSize=0x82ef9ac*=84712) returned 1 [0144.766] SetFilePointerEx (in: hFile=0x1f18, liDistanceToMove=0x14ae4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.766] ReadFile (in: hFile=0x1f18, lpBuffer=0x82ef988, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x82ef998, lpOverlapped=0x0 | out: lpBuffer=0x82ef988*, lpNumberOfBytesRead=0x82ef998*=0x4, lpOverlapped=0x0) returned 1 [0144.768] SetFilePointerEx (in: hFile=0x1f18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0144.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0144.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0144.768] NtQuerySystemTime (in: CurrentTime=0x82ef920 | out: CurrentTime=0x82ef920*=132462177235968000) returned 0x0 [0144.768] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x220586ca [0144.768] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x7088de23 [0144.768] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x5b828a3e [0144.768] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x7d47fcf8 [0144.768] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x62123769 [0144.768] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x499623f5 [0144.768] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x1022d146 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x56ab567 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x7e31a3dd [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x58a28cc1 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x53764526 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x5ef5c57f [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x5f2bc35f [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x60fea97a [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x5934867a [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x5e2abdae [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x6b162b54 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x1c67222d [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x72b2eff7 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x27087a8c [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x603a73c8 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x4c08b78 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x41c8b67b [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x6c9a8ca3 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x23412ecc [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x286c8d25 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x55ccc33b [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x4227bfa0 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x29fd0205 [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x185736a [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0xa2e9ebf [0144.769] RtlRandomEx (in: Seed=0x82ef918 | out: Seed=0x82ef918) returned 0x764e2844 [0144.780] SetFilePointerEx (in: hFile=0x1f18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.780] ReadFile (in: hFile=0x1f18, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x82ef920, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0x82ef920*=0x3c00, lpOverlapped=0x0) returned 1 [0144.781] SetFilePointerEx (in: hFile=0x1f18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5db48 [0144.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b6a8 [0144.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0144.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0144.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0144.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0144.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0144.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0144.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0144.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5db48) returned 1 [0144.782] WriteFile (in: hFile=0x1f18, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x82ef920, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x82ef920*=0x3c00, lpOverlapped=0x0) returned 1 [0145.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0145.783] SetFilePointerEx (in: hFile=0x1f18, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.783] ReadFile (in: hFile=0x1f18, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x82ef920, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0x82ef920*=0x3c00, lpOverlapped=0x0) returned 1 [0145.784] SetFilePointerEx (in: hFile=0x1f18, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56330 [0145.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b978 [0145.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0145.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0145.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0145.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0145.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0145.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0145.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0145.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56330) returned 1 [0145.785] WriteFile (in: hFile=0x1f18, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x82ef920, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x82ef920*=0x3c00, lpOverlapped=0x0) returned 1 [0146.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0146.307] SetFilePointerEx (in: hFile=0x1f18, liDistanceToMove=0x10ee8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.307] ReadFile (in: hFile=0x1f18, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x82ef920, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0x82ef920*=0x3c00, lpOverlapped=0x0) returned 1 [0146.308] SetFilePointerEx (in: hFile=0x1f18, liDistanceToMove=0x10ee8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be400 [0146.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3de00 [0146.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0146.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0146.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0146.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0146.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0146.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0146.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be400) returned 1 [0146.309] WriteFile (in: hFile=0x1f18, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x82ef920, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x82ef920*=0x3c00, lpOverlapped=0x0) returned 1 [0147.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0147.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f5c8 [0147.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0147.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79218 [0147.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0147.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0147.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0147.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0147.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07e30) returned 1 [0147.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x3e0ac18 [0147.175] SetFilePointerEx (in: hFile=0x1f18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.176] WriteFile (in: hFile=0x1f18, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x82ef9a0, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0x82ef9a0*=0x14e, lpOverlapped=0x0) returned 1 [0149.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07e30 [0149.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0149.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0149.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0149.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec6710 [0149.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0149.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0149.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0149.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0149.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07e30) returned 1 [0149.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x3e07e30 [0149.413] sprintf (in: _Dest=0x3e07e30, _Format="%c%c" | out: _Dest="19") returned 2 [0149.413] sprintf (in: _Dest=0x3e07e32, _Format="%c%c" | out: _Dest="02") returned 2 [0149.413] sprintf (in: _Dest=0x3e07e34, _Format="%c%c" | out: _Dest="14") returned 2 [0149.413] sprintf (in: _Dest=0x3e07e36, _Format="%c%c" | out: _Dest="75") returned 2 [0149.413] sprintf (in: _Dest=0x3e07e38, _Format="%c%c" | out: _Dest="42") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e3a, _Format="%c%c" | out: _Dest="fb") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e3c, _Format="%c%c" | out: _Dest="ea") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e3e, _Format="%c%c" | out: _Dest="20") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e40, _Format="%c%c" | out: _Dest="21") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e42, _Format="%c%c" | out: _Dest="3c") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e44, _Format="%c%c" | out: _Dest="df") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e46, _Format="%c%c" | out: _Dest="44") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e48, _Format="%c%c" | out: _Dest="81") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e4a, _Format="%c%c" | out: _Dest="75") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e4c, _Format="%c%c" | out: _Dest="4c") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e4e, _Format="%c%c" | out: _Dest="15") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e50, _Format="%c%c" | out: _Dest="2a") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e52, _Format="%c%c" | out: _Dest="6c") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e54, _Format="%c%c" | out: _Dest="5c") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e56, _Format="%c%c" | out: _Dest="8c") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e58, _Format="%c%c" | out: _Dest="55") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e5a, _Format="%c%c" | out: _Dest="9f") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e5c, _Format="%c%c" | out: _Dest="16") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e5e, _Format="%c%c" | out: _Dest="bc") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e60, _Format="%c%c" | out: _Dest="2e") returned 2 [0149.414] sprintf (in: _Dest=0x3e07e62, _Format="%c%c" | out: _Dest="f7") returned 2 [0149.415] sprintf (in: _Dest=0x3e07e64, _Format="%c%c" | out: _Dest="3d") returned 2 [0149.415] sprintf (in: _Dest=0x3e07e66, _Format="%c%c" | out: _Dest="f4") returned 2 [0149.415] RtlInitAnsiString (in: DestinationString=0x82ef928, SourceString="1902147542fbea20213cdf4481754c152a6c5c8c559f16bc2ef73df4" | out: DestinationString="1902147542fbea20213cdf4481754c152a6c5c8c559f16bc2ef73df4") [0149.415] RtlAnsiStringToUnicodeString (in: DestinationString=0x82ef920, SourceString="1902147542fbea20213cdf4481754c152a6c5c8c559f16bc2ef73df4", AllocateDestinationString=1 | out: DestinationString="1902147542fbea20213cdf4481754c152a6c5c8c559f16bc2ef73df4") returned 0x0 [0149.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e46e98 [0149.415] RtlFreeAnsiString (AnsiString="1") [0149.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07e30) returned 1 [0149.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0149.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0149.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0149.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79218) returned 1 [0149.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0149.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0149.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5c8) returned 1 [0149.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0149.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0149.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0149.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2d08 [0149.416] wcscat (in: _Dest=0x3df2d08, _Source="1902147542fbea" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\1902147542fbea") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\1902147542fbea" [0149.416] wcscat (in: _Dest=0x3df2d08, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\1902147542fbea.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\1902147542fbea.68814f" [0149.416] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\1902147542fbea.68814f", NtPathName=0x82ef918, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\1902147542fbea.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68130 [0149.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68130) returned 1 [0149.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04010) returned 1 [0149.477] NtQueryInformationFile (in: FileHandle=0x1f18, IoStatusBlock=0x82ef8f0, FileInformation=0x82ef8f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x82ef8f0, FileInformation=0x82ef8f8) returned 0x0 [0149.477] NtSetInformationFile (FileHandle=0x1f18, IoStatusBlock=0x82ef8f0, FileInformation=0x82ef8f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 [0149.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46e98) returned 1 [0149.517] FlushFileBuffers (hFile=0x1f18) returned 1 [0149.521] CloseHandle (hObject=0x1f18) returned 1 [0149.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9670 [0149.546] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\" [0149.547] wcscat (in: _Dest=0x3eb9670, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\68814F-Readme.txt" [0149.547] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\68814f-readme.txt")) returned 0x20 [0149.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 [0149.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a398) returned 1 Thread: id = 1832 os_tid = 0x245c [0144.787] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\bclpcdvqrwr4w.bmp")) returned 0x20 [0144.787] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp", dwFileAttributes=0x20) returned 1 [0144.787] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\bclpcdvqrwr4w.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19e8 [0144.788] GetFileSizeEx (in: hFile=0x19e8, lpFileSize=0x227fb9c | out: lpFileSize=0x227fb9c*=6201) returned 1 [0144.788] SetFilePointerEx (in: hFile=0x19e8, liDistanceToMove=0x1835, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.788] ReadFile (in: hFile=0x19e8, lpBuffer=0x227fb78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x227fb88, lpOverlapped=0x0 | out: lpBuffer=0x227fb78*, lpNumberOfBytesRead=0x227fb88*=0x4, lpOverlapped=0x0) returned 1 [0144.790] SetFilePointerEx (in: hFile=0x19e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0144.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0144.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0144.790] NtQuerySystemTime (in: CurrentTime=0x227fb10 | out: CurrentTime=0x227fb10*=132462177236124000) returned 0x0 [0144.790] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x4969dd6b [0144.790] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x15fc82e1 [0144.790] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x739a035a [0144.790] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x618bf4c0 [0144.790] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x4a225352 [0144.790] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x6ef4935c [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x69fc4021 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x242e4d88 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x7b10b1cd [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x32acb7e4 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x243692ba [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x6878e56f [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x723ba19e [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x693e495 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x3b3bbc40 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x532d50a0 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x2497a2c1 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x5c37c3fa [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x15363ae4 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x3e6c0c4f [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x308e6a7e [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x7d92fad1 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x21577255 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x2a6c928f [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x3b0c918 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x7a3d6c89 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x1483ab28 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x2330ac2d [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x2a763153 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x5bd298d0 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x32842e19 [0144.791] RtlRandomEx (in: Seed=0x227fb08 | out: Seed=0x227fb08) returned 0x4c1144a [0144.802] ReadFile (in: hFile=0x19e8, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0x1839, lpNumberOfBytesRead=0x227fb04, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0x227fb04*=0x1839, lpOverlapped=0x0) returned 1 [0144.802] SetFilePointerEx (in: hFile=0x19e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.802] WriteFile (in: hFile=0x19e8, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x1839, lpNumberOfBytesWritten=0x227fb08, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0x227fb08*=0x1839, lpOverlapped=0x0) returned 1 [0145.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0145.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0145.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0145.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0145.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0145.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0145.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e838) returned 1 [0145.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e798a8 [0145.787] SetFilePointerEx (in: hFile=0x19e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.787] WriteFile (in: hFile=0x19e8, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x227fb90, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0x227fb90*=0x114, lpOverlapped=0x0) returned 1 [0149.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 [0149.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0149.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0149.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0149.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0149.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0149.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0149.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0149.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40060 [0149.396] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp" [0149.396] wcscat (in: _Dest=0x3d40060, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp.68814f" [0149.396] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp.68814f", NtPathName=0x227fb08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\BClPCdVQRwR4w.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8648 [0149.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 [0149.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02630) returned 1 [0149.671] NtQueryInformationFile (in: FileHandle=0x19e8, IoStatusBlock=0x227fae0, FileInformation=0x227fae8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x227fae0, FileInformation=0x227fae8) returned 0x0 [0149.671] NtSetInformationFile (FileHandle=0x19e8, IoStatusBlock=0x227fae0, FileInformation=0x227fae8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0149.673] FlushFileBuffers (hFile=0x19e8) returned 1 [0149.690] CloseHandle (hObject=0x19e8) returned 1 [0149.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65dd8 [0149.719] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" [0149.719] wcscat (in: _Dest=0x3e65dd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt" [0149.719] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\68814f-readme.txt")) returned 0x20 [0149.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 [0149.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6ad8) returned 1 Thread: id = 1833 os_tid = 0x2460 [0144.805] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\M7RG0JIM9QJyrodetjz.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\m7rg0jim9qjyrodetjz.gif")) returned 0x20 [0144.805] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\M7RG0JIM9QJyrodetjz.gif", dwFileAttributes=0x20) returned 1 [0144.805] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\M7RG0JIM9QJyrodetjz.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\m7rg0jim9qjyrodetjz.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f14 [0144.806] GetFileSizeEx (in: hFile=0x1f14, lpFileSize=0x853fa84 | out: lpFileSize=0x853fa84*=99319) returned 1 [0144.806] SetFilePointerEx (in: hFile=0x1f14, liDistanceToMove=0x183f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.806] ReadFile (in: hFile=0x1f14, lpBuffer=0x853fa60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x853fa70, lpOverlapped=0x0 | out: lpBuffer=0x853fa60*, lpNumberOfBytesRead=0x853fa70*=0x4, lpOverlapped=0x0) returned 1 [0144.808] SetFilePointerEx (in: hFile=0x1f14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0144.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0144.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0144.808] NtQuerySystemTime (in: CurrentTime=0x853f9f8 | out: CurrentTime=0x853f9f8*=132462177236436000) returned 0x0 [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x49cb3bf0 [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x3f6f300e [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x60dba4bc [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x5f4010ae [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x40ff192c [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x3a4e8b23 [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x3c5867a0 [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x40e14549 [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x28d755aa [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x4b681cdb [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x6cad3062 [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x35bd6295 [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x166827f7 [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x539f2f43 [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x4206f84e [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x7ce8b34d [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x1360d9fa [0144.808] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x32cda33c [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x26d05478 [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x29971052 [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x501981b4 [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x721e1eb1 [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x5f0fe192 [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x65f4f73f [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x60482c96 [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x5df3318 [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x74be8c2e [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x145302c4 [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x7429aeaa [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x5b5872c7 [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0xbf9896 [0144.809] RtlRandomEx (in: Seed=0x853f9f0 | out: Seed=0x853f9f0) returned 0x1ab81a54 [0144.817] SetFilePointerEx (in: hFile=0x1f14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.817] ReadFile (in: hFile=0x1f14, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x853f9f8, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x853f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.817] SetFilePointerEx (in: hFile=0x1f14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25428 [0144.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0144.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0144.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0144.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0144.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0144.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0144.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0144.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0144.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25428) returned 1 [0144.818] WriteFile (in: hFile=0x1f14, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x853f9f8, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0x853f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0145.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0145.789] SetFilePointerEx (in: hFile=0x1f14, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.789] ReadFile (in: hFile=0x1f14, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x853f9f8, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x853f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0145.789] SetFilePointerEx (in: hFile=0x1f14, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5e838 [0145.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b6a8 [0145.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0145.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0145.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0145.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0145.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0145.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0145.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0145.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e838) returned 1 [0145.791] WriteFile (in: hFile=0x1f14, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x853f9f8, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0x853f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0146.310] SetFilePointerEx (in: hFile=0x1f14, liDistanceToMove=0x147f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.310] ReadFile (in: hFile=0x1f14, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x853f9f8, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x853f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0146.311] SetFilePointerEx (in: hFile=0x1f14, liDistanceToMove=0x147f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be400 [0146.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3de00 [0146.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0146.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0146.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0146.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0146.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0146.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3060) returned 1 [0146.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be400) returned 1 [0146.312] WriteFile (in: hFile=0x1f14, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x853f9f8, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0x853f9f8*=0x3c00, lpOverlapped=0x0) returned 1 [0147.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0147.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e20190 [0147.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0147.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e08268 [0147.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0147.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0147.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0147.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0147.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08100) returned 1 [0147.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x160) returned 0x3dce108 [0147.178] SetFilePointerEx (in: hFile=0x1f14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.178] WriteFile (in: hFile=0x1f14, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x853fa78, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x853fa78*=0x160, lpOverlapped=0x0) returned 1 [0149.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07c80 [0149.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0149.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0149.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0149.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e798a8 [0149.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0149.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0149.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0149.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0149.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c80) returned 1 [0149.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5d) returned 0x3e1e0a8 [0149.407] sprintf (in: _Dest=0x3e1e0a8, _Format="%c%c" | out: _Dest="3b") returned 2 [0149.407] sprintf (in: _Dest=0x3e1e0aa, _Format="%c%c" | out: _Dest="03") returned 2 [0149.407] sprintf (in: _Dest=0x3e1e0ac, _Format="%c%c" | out: _Dest="20") returned 2 [0149.407] sprintf (in: _Dest=0x3e1e0ae, _Format="%c%c" | out: _Dest="6f") returned 2 [0149.407] sprintf (in: _Dest=0x3e1e0b0, _Format="%c%c" | out: _Dest="f8") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0b2, _Format="%c%c" | out: _Dest="23") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0b4, _Format="%c%c" | out: _Dest="af") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0b6, _Format="%c%c" | out: _Dest="ba") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0b8, _Format="%c%c" | out: _Dest="a2") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0ba, _Format="%c%c" | out: _Dest="b6") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0bc, _Format="%c%c" | out: _Dest="89") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0be, _Format="%c%c" | out: _Dest="49") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0c0, _Format="%c%c" | out: _Dest="dc") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0c2, _Format="%c%c" | out: _Dest="43") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0c4, _Format="%c%c" | out: _Dest="11") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0c6, _Format="%c%c" | out: _Dest="e0") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0c8, _Format="%c%c" | out: _Dest="24") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0ca, _Format="%c%c" | out: _Dest="20") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0cc, _Format="%c%c" | out: _Dest="2c") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0ce, _Format="%c%c" | out: _Dest="9b") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0d0, _Format="%c%c" | out: _Dest="2c") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0d2, _Format="%c%c" | out: _Dest="fb") returned 2 [0149.408] sprintf (in: _Dest=0x3e1e0d4, _Format="%c%c" | out: _Dest="c1") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0d6, _Format="%c%c" | out: _Dest="3c") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0d8, _Format="%c%c" | out: _Dest="b8") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0da, _Format="%c%c" | out: _Dest="b1") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0dc, _Format="%c%c" | out: _Dest="1e") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0de, _Format="%c%c" | out: _Dest="46") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0e0, _Format="%c%c" | out: _Dest="bb") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0e2, _Format="%c%c" | out: _Dest="d6") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0e4, _Format="%c%c" | out: _Dest="86") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0e6, _Format="%c%c" | out: _Dest="ef") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0e8, _Format="%c%c" | out: _Dest="f1") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0ea, _Format="%c%c" | out: _Dest="cd") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0ec, _Format="%c%c" | out: _Dest="7b") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0ee, _Format="%c%c" | out: _Dest="9a") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0f0, _Format="%c%c" | out: _Dest="bd") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0f2, _Format="%c%c" | out: _Dest="88") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0f4, _Format="%c%c" | out: _Dest="31") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0f6, _Format="%c%c" | out: _Dest="a5") returned 2 [0149.409] sprintf (in: _Dest=0x3e1e0f8, _Format="%c%c" | out: _Dest="ea") returned 2 [0149.410] sprintf (in: _Dest=0x3e1e0fa, _Format="%c%c" | out: _Dest="2b") returned 2 [0149.410] sprintf (in: _Dest=0x3e1e0fc, _Format="%c%c" | out: _Dest="0a") returned 2 [0149.410] sprintf (in: _Dest=0x3e1e0fe, _Format="%c%c" | out: _Dest="f0") returned 2 [0149.410] sprintf (in: _Dest=0x3e1e100, _Format="%c%c" | out: _Dest="23") returned 2 [0149.410] sprintf (in: _Dest=0x3e1e102, _Format="%c%c" | out: _Dest="09") returned 2 [0149.410] RtlInitAnsiString (in: DestinationString=0x853fa00, SourceString="3b03206ff823afbaa2b68949dc4311e024202c9b2cfbc13cb8b11e46bbd686eff1cd7b9abd8831a5ea2b0af02309" | out: DestinationString="3b03206ff823afbaa2b68949dc4311e024202c9b2cfbc13cb8b11e46bbd686eff1cd7b9abd8831a5ea2b0af02309") [0149.410] RtlAnsiStringToUnicodeString (in: DestinationString=0x853f9f8, SourceString="3b03206ff823afbaa2b68949dc4311e024202c9b2cfbc13cb8b11e46bbd686eff1cd7b9abd8831a5ea2b0af02309", AllocateDestinationString=1 | out: DestinationString="3b03206ff823afbaa2b68949dc4311e024202c9b2cfbc13cb8b11e46bbd686eff1cd7b9abd8831a5ea2b0af02309") returned 0x0 [0149.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d40c18 [0149.410] RtlFreeAnsiString (AnsiString="3") [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e0a8) returned 1 [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce108) returned 1 [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08268) returned 1 [0149.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0149.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07e30) returned 1 [0149.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20190) returned 1 [0149.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0149.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0149.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0149.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68570 [0149.411] wcscat (in: _Dest=0x3e68570, _Source="3b03206ff823afbaa2b6894" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\3b03206ff823afbaa2b6894") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\3b03206ff823afbaa2b6894" [0149.411] wcscat (in: _Dest=0x3e68570, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\3b03206ff823afbaa2b6894.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\3b03206ff823afbaa2b6894.68814f" [0149.411] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\3b03206ff823afbaa2b6894.68814f", NtPathName=0x853f9f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\3b03206ff823afbaa2b6894.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3ed8 [0149.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 [0149.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04460) returned 1 [0149.644] NtQueryInformationFile (in: FileHandle=0x1f14, IoStatusBlock=0x853f9c8, FileInformation=0x853f9d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x853f9c8, FileInformation=0x853f9d0) returned 0x0 [0149.644] NtSetInformationFile (FileHandle=0x1f14, IoStatusBlock=0x853f9c8, FileInformation=0x853f9d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68570) returned 1 [0149.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c18) returned 1 [0149.646] FlushFileBuffers (hFile=0x1f14) returned 1 [0149.674] CloseHandle (hObject=0x1f14) returned 1 [0149.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65dd8 [0149.676] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" [0149.676] wcscat (in: _Dest=0x3e65dd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt" [0149.676] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\68814f-readme.txt")) returned 0x20 [0149.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 [0149.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409c0) returned 1 Thread: id = 1834 os_tid = 0x2464 [0144.847] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\ydlvxy-rmcvsgjhj5.png")) returned 0x20 [0144.848] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png", dwFileAttributes=0x20) returned 1 [0144.848] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\ydlvxy-rmcvsgjhj5.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f10 [0144.848] GetFileSizeEx (in: hFile=0x1f10, lpFileSize=0x858f874 | out: lpFileSize=0x858f874*=42255) returned 1 [0144.848] SetFilePointerEx (in: hFile=0x1f10, liDistanceToMove=0xa50b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.849] ReadFile (in: hFile=0x1f10, lpBuffer=0x858f850, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x858f860, lpOverlapped=0x0 | out: lpBuffer=0x858f850*, lpNumberOfBytesRead=0x858f860*=0x4, lpOverlapped=0x0) returned 1 [0144.851] SetFilePointerEx (in: hFile=0x1f10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0144.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0144.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0144.851] NtQuerySystemTime (in: CurrentTime=0x858f7e8 | out: CurrentTime=0x858f7e8*=132462177236748000) returned 0x0 [0144.851] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x73339eb9 [0144.851] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x1508d2d5 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x6d392964 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x54c69d47 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x6844b9fa [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x2d9bda60 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x34bd58f8 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x4eec4308 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x70e13546 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x5a1c9c51 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x5511b7bf [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x3b087e8 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x41296f5b [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x3ced8123 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x7978d4ed [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x2bbe8665 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x1229cdf9 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x7219082d [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x5d221c3e [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x5d6015fe [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x13c7edb9 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0xf9a78ec [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x6453a8f2 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x3f810ed3 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0xefe9bfa [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x6b5e4147 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x1faaec3e [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x4fb5c8d9 [0144.852] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x6c6e87c6 [0144.853] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x102a40c8 [0144.853] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x20dbf9ca [0144.853] RtlRandomEx (in: Seed=0x858f7e0 | out: Seed=0x858f7e0) returned 0x727d21d5 [0144.864] SetFilePointerEx (in: hFile=0x1f10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.864] ReadFile (in: hFile=0x1f10, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x858f7e8, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0x858f7e8*=0x3c00, lpOverlapped=0x0) returned 1 [0144.864] SetFilePointerEx (in: hFile=0x1f10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25c08 [0144.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0144.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0144.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0144.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0144.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0144.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0144.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0144.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0144.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25c08) returned 1 [0144.865] WriteFile (in: hFile=0x1f10, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x858f7e8, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0x858f7e8*=0x3c00, lpOverlapped=0x0) returned 1 [0145.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0145.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0145.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad8030 [0145.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0145.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7ad7fb0 [0145.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0145.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0145.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0145.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0145.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e838) returned 1 [0145.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55278 [0145.793] SetFilePointerEx (in: hFile=0x1f10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.793] WriteFile (in: hFile=0x1f10, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x858f868, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0x858f868*=0x11c, lpOverlapped=0x0) returned 1 [0149.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0149.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7fb0) returned 1 [0149.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0149.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad8030) returned 1 [0149.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0149.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0149.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0149.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0149.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85700 [0149.394] wcscpy (in: _Dest=0x3d85700, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png" [0149.394] wcscat (in: _Dest=0x3d85700, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png.68814f" [0149.394] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png.68814f", NtPathName=0x858f7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\YDlvxy-rmCvSGJHJ5.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3d08 [0149.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 [0149.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01b68) returned 1 [0149.648] NtQueryInformationFile (in: FileHandle=0x1f10, IoStatusBlock=0x858f7b8, FileInformation=0x858f7c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x858f7b8, FileInformation=0x858f7c0) returned 0x0 [0149.648] NtSetInformationFile (FileHandle=0x1f10, IoStatusBlock=0x858f7b8, FileInformation=0x858f7c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 [0149.650] FlushFileBuffers (hFile=0x1f10) returned 1 [0149.721] CloseHandle (hObject=0x1f10) returned 1 [0149.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65dd8 [0149.722] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\" [0149.722] wcscat (in: _Dest=0x3e65dd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt" [0149.722] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7oMbhF1Dq\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\7ombhf1dq\\68814f-readme.txt")) returned 0x20 [0149.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 [0149.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 Thread: id = 1835 os_tid = 0x2468 [0144.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4aa0 [0144.868] wcscpy (in: _Dest=0x3df4aa0, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" [0144.868] wcscat (in: _Dest=0x3df4aa0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0144.868] wcscat (in: _Dest=0x3df4aa0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\*") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\*" [0144.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0144.868] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de3b760, ftCreationTime.dwHighDateTime=0x1d5dd29, ftLastAccessTime.dwLowDateTime=0xf9af1bf0, ftLastAccessTime.dwHighDateTime=0x1d5e853, ftLastWriteTime.dwLowDateTime=0xf9af1bf0, ftLastWriteTime.dwHighDateTime=0x1d5e853, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73f70 [0144.868] wcscmp (_String1=".", _String2=".") returned 0 [0144.868] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de3b760, ftCreationTime.dwHighDateTime=0x1d5dd29, ftLastAccessTime.dwLowDateTime=0xf9af1bf0, ftLastAccessTime.dwHighDateTime=0x1d5e853, ftLastWriteTime.dwLowDateTime=0xf9af1bf0, ftLastWriteTime.dwHighDateTime=0x1d5e853, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.868] wcscmp (_String1="..", _String2=".") returned 1 [0144.868] wcscmp (_String1="..", _String2="..") returned 0 [0144.868] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2902a9c0, ftCreationTime.dwHighDateTime=0x1d5dc5c, ftLastAccessTime.dwLowDateTime=0x172e4cf0, ftLastAccessTime.dwHighDateTime=0x1d5e6bf, ftLastWriteTime.dwLowDateTime=0x172e4cf0, ftLastWriteTime.dwHighDateTime=0x1d5e6bf, nFileSizeHigh=0x0, nFileSizeLow=0x56ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="-iFMa- 4Dy_4V9IXo5hJ.bmp", cAlternateFileName="-IFMA-~1.BMP")) returned 1 [0144.868] wcscmp (_String1="-iFMa- 4Dy_4V9IXo5hJ.bmp", _String2=".") returned -1 [0144.868] wcscmp (_String1="-iFMa- 4Dy_4V9IXo5hJ.bmp", _String2="..") returned -1 [0144.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d40830 [0144.869] wcscpy (in: _Dest=0x3d40830, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" [0144.869] wcscat (in: _Dest=0x3d40830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0144.869] wcscat (in: _Dest=0x3d40830, _Source="-iFMa- 4Dy_4V9IXo5hJ.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp" [0146.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0146.839] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0fe2400, ftCreationTime.dwHighDateTime=0x1d5df08, ftLastAccessTime.dwLowDateTime=0x3a5dd570, ftLastAccessTime.dwHighDateTime=0x1d5dd5e, ftLastWriteTime.dwLowDateTime=0x3a5dd570, ftLastWriteTime.dwHighDateTime=0x1d5dd5e, nFileSizeHigh=0x0, nFileSizeLow=0x49be, dwReserved0=0x0, dwReserved1=0x0, cFileName="6LH7NeuDR.bmp", cAlternateFileName="6LH7NE~1.BMP")) returned 1 [0146.839] wcscmp (_String1="6LH7NeuDR.bmp", _String2=".") returned 1 [0146.839] wcscmp (_String1="6LH7NeuDR.bmp", _String2="..") returned 1 [0146.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7208 [0146.839] wcscpy (in: _Dest=0x2ff7208, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" [0146.839] wcscat (in: _Dest=0x2ff7208, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0146.839] wcscat (in: _Dest=0x2ff7208, _Source="6LH7NeuDR.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp" [0146.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c8 [0146.840] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa50090, ftCreationTime.dwHighDateTime=0x1d5e539, ftLastAccessTime.dwLowDateTime=0xba7cbcc0, ftLastAccessTime.dwHighDateTime=0x1d5e665, ftLastWriteTime.dwLowDateTime=0xba7cbcc0, ftLastWriteTime.dwHighDateTime=0x1d5e665, nFileSizeHigh=0x0, nFileSizeLow=0x13025, dwReserved0=0x0, dwReserved1=0x0, cFileName="6Ovy-seAJ8j.gif", cAlternateFileName="6OVY-S~1.GIF")) returned 1 [0146.840] wcscmp (_String1="6Ovy-seAJ8j.gif", _String2=".") returned 1 [0146.840] wcscmp (_String1="6Ovy-seAJ8j.gif", _String2="..") returned 1 [0146.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7c18 [0146.841] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" [0146.841] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0146.841] wcscat (in: _Dest=0x2ff7c18, _Source="6Ovy-seAJ8j.gif" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6Ovy-seAJ8j.gif") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6Ovy-seAJ8j.gif" [0146.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c4 [0146.842] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd9e930, ftCreationTime.dwHighDateTime=0x1d5dd1f, ftLastAccessTime.dwLowDateTime=0x2b98a3b0, ftLastAccessTime.dwHighDateTime=0x1d5e08a, ftLastWriteTime.dwLowDateTime=0x2b98a3b0, ftLastWriteTime.dwHighDateTime=0x1d5e08a, nFileSizeHigh=0x0, nFileSizeLow=0x4408, dwReserved0=0x0, dwReserved1=0x0, cFileName="jhNdTpyIYv3i8A97f.bmp", cAlternateFileName="JHNDTP~1.BMP")) returned 1 [0146.842] wcscmp (_String1="jhNdTpyIYv3i8A97f.bmp", _String2=".") returned 1 [0146.842] wcscmp (_String1="jhNdTpyIYv3i8A97f.bmp", _String2="..") returned 1 [0146.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d405d8 [0146.842] wcscpy (in: _Dest=0x3d405d8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" [0146.842] wcscat (in: _Dest=0x3d405d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0146.842] wcscat (in: _Dest=0x3d405d8, _Source="jhNdTpyIYv3i8A97f.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp" [0146.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d405d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c0 [0146.845] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe307ed50, ftCreationTime.dwHighDateTime=0x1d5e0ce, ftLastAccessTime.dwLowDateTime=0xc8fac6f0, ftLastAccessTime.dwHighDateTime=0x1d5e1c6, ftLastWriteTime.dwLowDateTime=0xc8fac6f0, ftLastWriteTime.dwHighDateTime=0x1d5e1c6, nFileSizeHigh=0x0, nFileSizeLow=0x163bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JnfVD.png", cAlternateFileName="")) returned 1 [0146.845] wcscmp (_String1="JnfVD.png", _String2=".") returned 1 [0146.845] wcscmp (_String1="JnfVD.png", _String2="..") returned 1 [0146.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bf58 [0146.845] wcscpy (in: _Dest=0x35bf58, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" [0146.845] wcscat (in: _Dest=0x35bf58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0146.845] wcscat (in: _Dest=0x35bf58, _Source="JnfVD.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png" [0146.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bf58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23bc [0146.850] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e25faf0, ftCreationTime.dwHighDateTime=0x1d5ded9, ftLastAccessTime.dwLowDateTime=0x203ddea0, ftLastAccessTime.dwHighDateTime=0x1d5e58e, ftLastWriteTime.dwLowDateTime=0x203ddea0, ftLastWriteTime.dwHighDateTime=0x1d5e58e, nFileSizeHigh=0x0, nFileSizeLow=0x5182, dwReserved0=0x0, dwReserved1=0x0, cFileName="nU_kkdtS0.bmp", cAlternateFileName="NU_KKD~1.BMP")) returned 1 [0146.850] wcscmp (_String1="nU_kkdtS0.bmp", _String2=".") returned 1 [0146.850] wcscmp (_String1="nU_kkdtS0.bmp", _String2="..") returned 1 [0146.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7880 [0146.851] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" [0146.851] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0146.851] wcscat (in: _Dest=0x2ff7880, _Source="nU_kkdtS0.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp" [0146.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b8 [0146.876] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16efbbf0, ftCreationTime.dwHighDateTime=0x1d5e40f, ftLastAccessTime.dwLowDateTime=0x392ee000, ftLastAccessTime.dwHighDateTime=0x1d5db69, ftLastWriteTime.dwLowDateTime=0x392ee000, ftLastWriteTime.dwHighDateTime=0x1d5db69, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-_krm5.png", cAlternateFileName="")) returned 1 [0146.876] wcscmp (_String1="_-_krm5.png", _String2=".") returned 1 [0146.876] wcscmp (_String1="_-_krm5.png", _String2="..") returned 1 [0146.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35aa08 [0146.876] wcscpy (in: _Dest=0x35aa08, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ" [0146.876] wcscat (in: _Dest=0x35aa08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0146.876] wcscat (in: _Dest=0x35aa08, _Source="_-_krm5.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png" [0146.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35aa08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0146.878] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16efbbf0, ftCreationTime.dwHighDateTime=0x1d5e40f, ftLastAccessTime.dwLowDateTime=0x392ee000, ftLastAccessTime.dwHighDateTime=0x1d5db69, ftLastWriteTime.dwLowDateTime=0x392ee000, ftLastWriteTime.dwHighDateTime=0x1d5db69, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-_krm5.png", cAlternateFileName="")) returned 0 [0146.878] FindClose (in: hFindFile=0x3e73f70 | out: hFindFile=0x3e73f70) returned 1 [0146.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0146.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 [0146.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 Thread: id = 1836 os_tid = 0x246c [0144.869] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\bOd3aYaCUh5ytm.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\bod3ayacuh5ytm.gif")) returned 0x20 [0144.869] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\bOd3aYaCUh5ytm.gif", dwFileAttributes=0x20) returned 1 [0144.870] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\bOd3aYaCUh5ytm.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\bod3ayacuh5ytm.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ee4 [0144.870] GetFileSizeEx (in: hFile=0x1ee4, lpFileSize=0x3bef924 | out: lpFileSize=0x3bef924*=101025) returned 1 [0144.870] SetFilePointerEx (in: hFile=0x1ee4, liDistanceToMove=0x18a9d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.870] ReadFile (in: hFile=0x1ee4, lpBuffer=0x3bef900, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3bef910, lpOverlapped=0x0 | out: lpBuffer=0x3bef900*, lpNumberOfBytesRead=0x3bef910*=0x4, lpOverlapped=0x0) returned 1 [0144.873] SetFilePointerEx (in: hFile=0x1ee4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0144.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0144.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0144.873] NtQuerySystemTime (in: CurrentTime=0x3bef898 | out: CurrentTime=0x3bef898*=132462177237060000) returned 0x0 [0144.873] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x76fb656b [0144.873] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x2962a736 [0144.873] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x5d0771b1 [0144.873] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x58d37f48 [0144.873] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x627b86f2 [0144.873] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x3350af7d [0144.873] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x2a566534 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x6acaefa8 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x5395a8f7 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x623e3efa [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x7fac7d25 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0xa37bc72 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x7dd4dcbb [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x7135cad9 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x164e6813 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x6fc489e6 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x3a42b12a [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x75810708 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x743ecbee [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x5eb0c51a [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x2900ae7a [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x2877929f [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x455a0f4e [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x5f74b58b [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x56c7b95c [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x48b8d654 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x8b9b325 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x62f16728 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0xa08f0ba [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x29ccc061 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x667a3745 [0144.874] RtlRandomEx (in: Seed=0x3bef890 | out: Seed=0x3bef890) returned 0x563148fa [0144.883] SetFilePointerEx (in: hFile=0x1ee4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.883] ReadFile (in: hFile=0x1ee4, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x3bef898, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0x3bef898*=0x3c00, lpOverlapped=0x0) returned 1 [0144.883] SetFilePointerEx (in: hFile=0x1ee4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25980 [0144.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0144.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0144.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0144.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a78cb8 [0144.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0144.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0144.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0144.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0144.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25980) returned 1 [0144.884] WriteFile (in: hFile=0x1ee4, lpBuffer=0x7a78cb8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x3bef898, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesWritten=0x3bef898*=0x3c00, lpOverlapped=0x0) returned 1 [0145.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a78cb8) returned 1 [0145.795] SetFilePointerEx (in: hFile=0x1ee4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.795] ReadFile (in: hFile=0x1ee4, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x3bef898, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0x3bef898*=0x3c00, lpOverlapped=0x0) returned 1 [0145.795] SetFilePointerEx (in: hFile=0x1ee4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5e838 [0145.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b6a8 [0145.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0145.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0145.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a78cb8 [0145.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0145.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0145.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0145.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0145.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e838) returned 1 [0145.796] WriteFile (in: hFile=0x1ee4, lpBuffer=0x7a78cb8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x3bef898, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesWritten=0x3bef898*=0x3c00, lpOverlapped=0x0) returned 1 [0146.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a78cb8) returned 1 [0146.313] SetFilePointerEx (in: hFile=0x1ee4, liDistanceToMove=0x14ea1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.313] ReadFile (in: hFile=0x1ee4, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x3bef898, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0x3bef898*=0x3c00, lpOverlapped=0x0) returned 1 [0146.313] SetFilePointerEx (in: hFile=0x1ee4, liDistanceToMove=0x14ea1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be400 [0146.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3de00 [0146.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0146.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3060) returned 1 [0146.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a78cb8 [0146.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0146.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0146.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33a8) returned 1 [0146.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be400) returned 1 [0146.314] WriteFile (in: hFile=0x1ee4, lpBuffer=0x7a78cb8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x3bef898, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesWritten=0x3bef898*=0x3c00, lpOverlapped=0x0) returned 1 [0147.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a78cb8) returned 1 [0147.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1e0a8 [0147.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0147.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2d840 [0147.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0147.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0147.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0147.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0147.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08100) returned 1 [0147.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dcde38 [0147.180] SetFilePointerEx (in: hFile=0x1ee4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.180] WriteFile (in: hFile=0x1ee4, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x3bef918, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0x3bef918*=0x156, lpOverlapped=0x0) returned 1 [0149.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07c80 [0149.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0149.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0149.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0149.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0149.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0149.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0149.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0149.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0149.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c80) returned 1 [0149.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3d488f8 [0149.401] sprintf (in: _Dest=0x3d488f8, _Format="%c%c" | out: _Dest="95") returned 2 [0149.401] sprintf (in: _Dest=0x3d488fa, _Format="%c%c" | out: _Dest="8d") returned 2 [0149.401] sprintf (in: _Dest=0x3d488fc, _Format="%c%c" | out: _Dest="9a") returned 2 [0149.401] sprintf (in: _Dest=0x3d488fe, _Format="%c%c" | out: _Dest="bf") returned 2 [0149.401] sprintf (in: _Dest=0x3d48900, _Format="%c%c" | out: _Dest="ae") returned 2 [0149.401] sprintf (in: _Dest=0x3d48902, _Format="%c%c" | out: _Dest="62") returned 2 [0149.401] sprintf (in: _Dest=0x3d48904, _Format="%c%c" | out: _Dest="64") returned 2 [0149.402] sprintf (in: _Dest=0x3d48906, _Format="%c%c" | out: _Dest="db") returned 2 [0149.402] sprintf (in: _Dest=0x3d48908, _Format="%c%c" | out: _Dest="f0") returned 2 [0149.402] sprintf (in: _Dest=0x3d4890a, _Format="%c%c" | out: _Dest="6e") returned 2 [0149.402] sprintf (in: _Dest=0x3d4890c, _Format="%c%c" | out: _Dest="d7") returned 2 [0149.402] sprintf (in: _Dest=0x3d4890e, _Format="%c%c" | out: _Dest="f3") returned 2 [0149.402] sprintf (in: _Dest=0x3d48910, _Format="%c%c" | out: _Dest="dd") returned 2 [0149.402] sprintf (in: _Dest=0x3d48912, _Format="%c%c" | out: _Dest="55") returned 2 [0149.402] sprintf (in: _Dest=0x3d48914, _Format="%c%c" | out: _Dest="a2") returned 2 [0149.402] sprintf (in: _Dest=0x3d48916, _Format="%c%c" | out: _Dest="7d") returned 2 [0149.402] sprintf (in: _Dest=0x3d48918, _Format="%c%c" | out: _Dest="d5") returned 2 [0149.402] sprintf (in: _Dest=0x3d4891a, _Format="%c%c" | out: _Dest="08") returned 2 [0149.402] sprintf (in: _Dest=0x3d4891c, _Format="%c%c" | out: _Dest="d6") returned 2 [0149.402] sprintf (in: _Dest=0x3d4891e, _Format="%c%c" | out: _Dest="9f") returned 2 [0149.402] sprintf (in: _Dest=0x3d48920, _Format="%c%c" | out: _Dest="32") returned 2 [0149.402] sprintf (in: _Dest=0x3d48922, _Format="%c%c" | out: _Dest="f8") returned 2 [0149.402] sprintf (in: _Dest=0x3d48924, _Format="%c%c" | out: _Dest="56") returned 2 [0149.402] sprintf (in: _Dest=0x3d48926, _Format="%c%c" | out: _Dest="80") returned 2 [0149.402] sprintf (in: _Dest=0x3d48928, _Format="%c%c" | out: _Dest="fc") returned 2 [0149.402] sprintf (in: _Dest=0x3d4892a, _Format="%c%c" | out: _Dest="21") returned 2 [0149.403] sprintf (in: _Dest=0x3d4892c, _Format="%c%c" | out: _Dest="04") returned 2 [0149.403] sprintf (in: _Dest=0x3d4892e, _Format="%c%c" | out: _Dest="b9") returned 2 [0149.403] sprintf (in: _Dest=0x3d48930, _Format="%c%c" | out: _Dest="d4") returned 2 [0149.403] sprintf (in: _Dest=0x3d48932, _Format="%c%c" | out: _Dest="b3") returned 2 [0149.403] sprintf (in: _Dest=0x3d48934, _Format="%c%c" | out: _Dest="c1") returned 2 [0149.403] sprintf (in: _Dest=0x3d48936, _Format="%c%c" | out: _Dest="57") returned 2 [0149.403] sprintf (in: _Dest=0x3d48938, _Format="%c%c" | out: _Dest="60") returned 2 [0149.403] sprintf (in: _Dest=0x3d4893a, _Format="%c%c" | out: _Dest="3f") returned 2 [0149.403] sprintf (in: _Dest=0x3d4893c, _Format="%c%c" | out: _Dest="10") returned 2 [0149.403] sprintf (in: _Dest=0x3d4893e, _Format="%c%c" | out: _Dest="4f") returned 2 [0149.403] RtlInitAnsiString (in: DestinationString=0x3bef8a0, SourceString="958d9abfae6264dbf06ed7f3dd55a27dd508d69f32f85680fc2104b9d4b3c157603f104f" | out: DestinationString="958d9abfae6264dbf06ed7f3dd55a27dd508d69f32f85680fc2104b9d4b3c157603f104f") [0149.403] RtlAnsiStringToUnicodeString (in: DestinationString=0x3bef898, SourceString="958d9abfae6264dbf06ed7f3dd55a27dd508d69f32f85680fc2104b9d4b3c157603f104f", AllocateDestinationString=1 | out: DestinationString="958d9abfae6264dbf06ed7f3dd55a27dd508d69f32f85680fc2104b9d4b3c157603f104f") returned 0x0 [0149.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a681d0 [0149.403] RtlFreeAnsiString (AnsiString="9") [0149.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d488f8) returned 1 [0149.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0149.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0149.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d840) returned 1 [0149.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0149.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2df80) returned 1 [0149.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e0a8) returned 1 [0149.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0149.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0149.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0149.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0149.405] wcscat (in: _Dest=0x2ff63a8, _Source="958d9abfae6264dbf0" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\958d9abfae6264dbf0") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\958d9abfae6264dbf0" [0149.405] wcscat (in: _Dest=0x2ff63a8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\958d9abfae6264dbf0.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\958d9abfae6264dbf0.68814f" [0149.405] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\958d9abfae6264dbf0.68814f", NtPathName=0x3bef890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\958d9abfae6264dbf0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85220 [0149.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85220) returned 1 [0149.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01fb8) returned 1 [0149.612] NtQueryInformationFile (in: FileHandle=0x1ee4, IoStatusBlock=0x3bef868, FileInformation=0x3bef870, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x3bef868, FileInformation=0x3bef870) returned 0x0 [0149.613] NtSetInformationFile (FileHandle=0x1ee4, IoStatusBlock=0x3bef868, FileInformation=0x3bef870, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 [0149.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681d0) returned 1 [0149.617] FlushFileBuffers (hFile=0x1ee4) returned 1 [0149.621] CloseHandle (hObject=0x1ee4) returned 1 [0149.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e480 [0149.622] wcscpy (in: _Dest=0x7a5e480, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0149.622] wcscat (in: _Dest=0x7a5e480, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" [0149.622] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\68814f-readme.txt")) returned 0x20 [0149.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e480) returned 1 [0149.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 1837 os_tid = 0x2470 [0144.886] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\ciyc j9b6 lw5tjo.bmp")) returned 0x20 [0144.886] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp", dwFileAttributes=0x20) returned 1 [0144.886] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\ciyc j9b6 lw5tjo.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ee0 [0144.886] GetFileSizeEx (in: hFile=0x1ee0, lpFileSize=0x878f95c | out: lpFileSize=0x878f95c*=96256) returned 1 [0144.886] SetFilePointerEx (in: hFile=0x1ee0, liDistanceToMove=0x177fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.887] ReadFile (in: hFile=0x1ee0, lpBuffer=0x878f938, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x878f948, lpOverlapped=0x0 | out: lpBuffer=0x878f938*, lpNumberOfBytesRead=0x878f948*=0x4, lpOverlapped=0x0) returned 1 [0144.888] SetFilePointerEx (in: hFile=0x1ee0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0144.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0144.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0144.888] NtQuerySystemTime (in: CurrentTime=0x878f8d0 | out: CurrentTime=0x878f8d0*=132462177237216000) returned 0x0 [0144.888] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x44dfd6d [0144.888] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x179f9222 [0144.888] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x579223e2 [0144.888] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x1682f2ac [0144.888] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x3c0b227 [0144.888] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x162c6095 [0144.888] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x2f792e5b [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x67b96829 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x45fb6363 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x54f56ee1 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x4a9a2477 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x5ef18da5 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x3dad8385 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x9a0346c [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x73ee2030 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x17103df2 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x2252ee9 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0xf0b3bd4 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x37a36448 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x172f117b [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x49b27b59 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x370f62e5 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x3aecdd2a [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x67ae5e10 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x3ef8be1f [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x1d6e6edb [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x77731b9e [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x7f57a680 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x6116c36d [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x29d4b58d [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x5e34e110 [0144.889] RtlRandomEx (in: Seed=0x878f8c8 | out: Seed=0x878f8c8) returned 0x757a0144 [0144.898] SetFilePointerEx (in: hFile=0x1ee0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.898] ReadFile (in: hFile=0x1ee0, lpBuffer=0x7a7c8c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x878f8d0, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesRead=0x878f8d0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.899] SetFilePointerEx (in: hFile=0x1ee0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25668 [0144.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0144.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0144.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0144.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9a900 [0144.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0144.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0144.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3308) returned 1 [0144.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0144.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25668) returned 1 [0144.900] WriteFile (in: hFile=0x1ee0, lpBuffer=0x7a9a900*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x878f8d0, lpOverlapped=0x0 | out: lpBuffer=0x7a9a900*, lpNumberOfBytesWritten=0x878f8d0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9a900) returned 1 [0145.798] SetFilePointerEx (in: hFile=0x1ee0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.798] ReadFile (in: hFile=0x1ee0, lpBuffer=0x7a7c8c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x878f8d0, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesRead=0x878f8d0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.798] SetFilePointerEx (in: hFile=0x1ee0, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e5e838 [0145.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b6a8 [0145.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0145.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0145.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9a900 [0145.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0145.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4bb8 [0145.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4bb8) returned 1 [0145.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0145.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e838) returned 1 [0145.799] WriteFile (in: hFile=0x1ee0, lpBuffer=0x7a9a900*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x878f8d0, lpOverlapped=0x0 | out: lpBuffer=0x7a9a900*, lpNumberOfBytesWritten=0x878f8d0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9a900) returned 1 [0146.316] SetFilePointerEx (in: hFile=0x1ee0, liDistanceToMove=0x13c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.316] ReadFile (in: hFile=0x1ee0, lpBuffer=0x7a7c8c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x878f8d0, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesRead=0x878f8d0*=0x3c00, lpOverlapped=0x0) returned 1 [0146.316] SetFilePointerEx (in: hFile=0x1ee0, liDistanceToMove=0x13c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be400 [0146.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3de00 [0146.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0146.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33a8) returned 1 [0146.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9a900 [0146.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33a8 [0146.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0146.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0146.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be400) returned 1 [0146.317] WriteFile (in: hFile=0x1ee0, lpBuffer=0x7a9a900*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x878f8d0, lpOverlapped=0x0 | out: lpBuffer=0x7a9a900*, lpNumberOfBytesWritten=0x878f8d0*=0x3c00, lpOverlapped=0x0) returned 1 [0147.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9a900) returned 1 [0147.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1ec08 [0147.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0147.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d640 [0147.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0147.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0147.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0147.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0147.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08100) returned 1 [0147.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15a) returned 0x3dcd460 [0147.182] SetFilePointerEx (in: hFile=0x1ee0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.182] WriteFile (in: hFile=0x1ee0, lpBuffer=0x3dcd460*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0x878f950, lpOverlapped=0x0 | out: lpBuffer=0x3dcd460*, lpNumberOfBytesWritten=0x878f950*=0x15a, lpOverlapped=0x0) returned 1 [0149.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcd460) returned 1 [0149.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d640) returned 1 [0149.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0149.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d240) returned 1 [0149.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec08) returned 1 [0149.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec49d8) returned 1 [0149.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0149.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0149.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7938 [0149.399] wcscpy (in: _Dest=0x2ff7938, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp" [0149.399] wcscat (in: _Dest=0x2ff7938, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp.68814f" [0149.399] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp.68814f", NtPathName=0x878f8c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\CIyc J9b6 Lw5TjO.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d858a0 [0149.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d858a0) returned 1 [0149.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00e78) returned 1 [0149.610] NtQueryInformationFile (in: FileHandle=0x1ee0, IoStatusBlock=0x878f8a0, FileInformation=0x878f8a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x878f8a0, FileInformation=0x878f8a8) returned 0x0 [0149.610] NtSetInformationFile (FileHandle=0x1ee0, IoStatusBlock=0x878f8a0, FileInformation=0x878f8a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7938) returned 1 [0149.620] FlushFileBuffers (hFile=0x1ee0) returned 1 [0149.628] CloseHandle (hObject=0x1ee0) returned 1 [0149.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053918 [0149.629] wcscpy (in: _Dest=0x3053918, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0149.629] wcscat (in: _Dest=0x3053918, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" [0149.629] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\68814f-readme.txt")) returned 0x20 [0149.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 [0149.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 Thread: id = 1838 os_tid = 0x2474 [0144.902] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\F_vXRNpuzjA5k.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\f_vxrnpuzja5k.gif")) returned 0x20 [0144.902] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\F_vXRNpuzjA5k.gif", dwFileAttributes=0x20) returned 1 [0144.903] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\F_vXRNpuzjA5k.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\f_vxrnpuzja5k.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1edc [0144.903] GetFileSizeEx (in: hFile=0x1edc, lpFileSize=0x897f91c | out: lpFileSize=0x897f91c*=20429) returned 1 [0144.903] SetFilePointerEx (in: hFile=0x1edc, liDistanceToMove=0x4fc9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.903] ReadFile (in: hFile=0x1edc, lpBuffer=0x897f8f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x897f908, lpOverlapped=0x0 | out: lpBuffer=0x897f8f8*, lpNumberOfBytesRead=0x897f908*=0x4, lpOverlapped=0x0) returned 1 [0144.906] SetFilePointerEx (in: hFile=0x1edc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0144.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0144.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0144.906] NtQuerySystemTime (in: CurrentTime=0x897f890 | out: CurrentTime=0x897f890*=132462177237372000) returned 0x0 [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x19e80e97 [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x1bf148bf [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x74899f2f [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x67b55f1c [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x1165f62d [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x51fb16ac [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x41fce6e0 [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x6d8a8584 [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x57b979d3 [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x6a05997 [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x79e1d741 [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x3c737905 [0144.906] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x36896c24 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x2c66420c [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x1007bd03 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x41a73560 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x1b0eac08 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x908e252 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x4ae7e14b [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x4143823 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x4e52ce65 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x18f7e730 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x6f3e73da [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x2aeebf3e [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x38450589 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x60cf5ae5 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x67237f29 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0xc35db64 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x6e8a845d [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x3c683db7 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0xc437d63 [0144.907] RtlRandomEx (in: Seed=0x897f888 | out: Seed=0x897f888) returned 0x394065ef [0144.916] SetFilePointerEx (in: hFile=0x1edc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.916] ReadFile (in: hFile=0x1edc, lpBuffer=0x7a930f0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x897f890, lpOverlapped=0x0 | out: lpBuffer=0x7a930f0*, lpNumberOfBytesRead=0x897f890*=0x3c00, lpOverlapped=0x0) returned 1 [0144.917] SetFilePointerEx (in: hFile=0x1edc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a253e0 [0144.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0144.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0144.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3308) returned 1 [0144.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a840d0 [0144.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0144.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0144.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0144.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0144.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a253e0) returned 1 [0144.918] WriteFile (in: hFile=0x1edc, lpBuffer=0x7a840d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x897f890, lpOverlapped=0x0 | out: lpBuffer=0x7a840d0*, lpNumberOfBytesWritten=0x897f890*=0x3c00, lpOverlapped=0x0) returned 1 [0145.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a840d0) returned 1 [0145.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a930f0) returned 1 [0145.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78f78 [0145.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4bb8) returned 1 [0145.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79790 [0145.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4bb8 [0145.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0145.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c50) returned 1 [0145.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0145.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e838) returned 1 [0145.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d55bb8 [0145.801] SetFilePointerEx (in: hFile=0x1edc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.801] WriteFile (in: hFile=0x1edc, lpBuffer=0x3d55bb8*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x897f910, lpOverlapped=0x0 | out: lpBuffer=0x3d55bb8*, lpNumberOfBytesWritten=0x897f910*=0x114, lpOverlapped=0x0) returned 1 [0149.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85398 [0149.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30153a0 [0149.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0149.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0149.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86878 [0149.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0149.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0149.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3240) returned 1 [0149.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30153a0) returned 1 [0149.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0149.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e84498 [0149.246] sprintf (in: _Dest=0x3e84498, _Format="%c%c" | out: _Dest="7b") returned 2 [0149.246] sprintf (in: _Dest=0x3e8449a, _Format="%c%c" | out: _Dest="94") returned 2 [0149.246] sprintf (in: _Dest=0x3e8449c, _Format="%c%c" | out: _Dest="62") returned 2 [0149.246] sprintf (in: _Dest=0x3e8449e, _Format="%c%c" | out: _Dest="b9") returned 2 [0149.246] sprintf (in: _Dest=0x3e844a0, _Format="%c%c" | out: _Dest="ad") returned 2 [0149.247] sprintf (in: _Dest=0x3e844a2, _Format="%c%c" | out: _Dest="87") returned 2 [0149.247] sprintf (in: _Dest=0x3e844a4, _Format="%c%c" | out: _Dest="0e") returned 2 [0149.247] sprintf (in: _Dest=0x3e844a6, _Format="%c%c" | out: _Dest="28") returned 2 [0149.247] sprintf (in: _Dest=0x3e844a8, _Format="%c%c" | out: _Dest="22") returned 2 [0149.247] sprintf (in: _Dest=0x3e844aa, _Format="%c%c" | out: _Dest="3a") returned 2 [0149.247] sprintf (in: _Dest=0x3e844ac, _Format="%c%c" | out: _Dest="0f") returned 2 [0149.247] sprintf (in: _Dest=0x3e844ae, _Format="%c%c" | out: _Dest="60") returned 2 [0149.247] sprintf (in: _Dest=0x3e844b0, _Format="%c%c" | out: _Dest="00") returned 2 [0149.247] sprintf (in: _Dest=0x3e844b2, _Format="%c%c" | out: _Dest="63") returned 2 [0149.247] sprintf (in: _Dest=0x3e844b4, _Format="%c%c" | out: _Dest="83") returned 2 [0149.247] sprintf (in: _Dest=0x3e844b6, _Format="%c%c" | out: _Dest="df") returned 2 [0149.247] sprintf (in: _Dest=0x3e844b8, _Format="%c%c" | out: _Dest="3c") returned 2 [0149.247] sprintf (in: _Dest=0x3e844ba, _Format="%c%c" | out: _Dest="fa") returned 2 [0149.247] sprintf (in: _Dest=0x3e844bc, _Format="%c%c" | out: _Dest="dd") returned 2 [0149.247] sprintf (in: _Dest=0x3e844be, _Format="%c%c" | out: _Dest="06") returned 2 [0149.247] sprintf (in: _Dest=0x3e844c0, _Format="%c%c" | out: _Dest="45") returned 2 [0149.247] sprintf (in: _Dest=0x3e844c2, _Format="%c%c" | out: _Dest="df") returned 2 [0149.247] sprintf (in: _Dest=0x3e844c4, _Format="%c%c" | out: _Dest="3c") returned 2 [0149.247] sprintf (in: _Dest=0x3e844c6, _Format="%c%c" | out: _Dest="f2") returned 2 [0149.247] sprintf (in: _Dest=0x3e844c8, _Format="%c%c" | out: _Dest="fa") returned 2 [0149.247] sprintf (in: _Dest=0x3e844ca, _Format="%c%c" | out: _Dest="ac") returned 2 [0149.247] sprintf (in: _Dest=0x3e844cc, _Format="%c%c" | out: _Dest="5f") returned 2 [0149.247] sprintf (in: _Dest=0x3e844ce, _Format="%c%c" | out: _Dest="b4") returned 2 [0149.247] sprintf (in: _Dest=0x3e844d0, _Format="%c%c" | out: _Dest="d0") returned 2 [0149.248] sprintf (in: _Dest=0x3e844d2, _Format="%c%c" | out: _Dest="53") returned 2 [0149.248] sprintf (in: _Dest=0x3e844d4, _Format="%c%c" | out: _Dest="54") returned 2 [0149.248] sprintf (in: _Dest=0x3e844d6, _Format="%c%c" | out: _Dest="38") returned 2 [0149.248] sprintf (in: _Dest=0x3e844d8, _Format="%c%c" | out: _Dest="0a") returned 2 [0149.248] sprintf (in: _Dest=0x3e844da, _Format="%c%c" | out: _Dest="ef") returned 2 [0149.248] RtlInitAnsiString (in: DestinationString=0x897f898, SourceString="7b9462b9ad870e28223a0f60006383df3cfadd0645df3cf2faac5fb4d05354380aef" | out: DestinationString="7b9462b9ad870e28223a0f60006383df3cfadd0645df3cf2faac5fb4d05354380aef") [0149.248] RtlAnsiStringToUnicodeString (in: DestinationString=0x897f890, SourceString="7b9462b9ad870e28223a0f60006383df3cfadd0645df3cf2faac5fb4d05354380aef", AllocateDestinationString=1 | out: DestinationString="7b9462b9ad870e28223a0f60006383df3cfadd0645df3cf2faac5fb4d05354380aef") returned 0x0 [0149.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5ac8 [0149.248] RtlFreeAnsiString (AnsiString="7") [0149.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84498) returned 1 [0149.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0149.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55bb8) returned 1 [0149.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79790) returned 1 [0149.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4bb8) returned 1 [0149.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 [0149.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3308) returned 1 [0149.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0149.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0149.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7430 [0149.249] wcscat (in: _Dest=0x2ff7430, _Source="7b9462b9ad870e282" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7b9462b9ad870e282") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7b9462b9ad870e282" [0149.249] wcscat (in: _Dest=0x2ff7430, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7b9462b9ad870e282.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7b9462b9ad870e282.68814f" [0149.249] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7b9462b9ad870e282.68814f", NtPathName=0x897f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\7b9462b9ad870e282.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d40510 [0149.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40510) returned 1 [0149.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a42880) returned 1 [0149.651] NtQueryInformationFile (in: FileHandle=0x1edc, IoStatusBlock=0x897f860, FileInformation=0x897f868, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x897f860, FileInformation=0x897f868) returned 0x0 [0149.651] NtSetInformationFile (FileHandle=0x1edc, IoStatusBlock=0x897f860, FileInformation=0x897f868, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0149.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5ac8) returned 1 [0149.653] FlushFileBuffers (hFile=0x1edc) returned 1 [0149.724] CloseHandle (hObject=0x1edc) returned 1 [0149.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f638 [0149.725] wcscpy (in: _Dest=0x7a5f638, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0149.725] wcscat (in: _Dest=0x7a5f638, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" [0149.725] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\68814f-readme.txt")) returned 0x20 [0149.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f638) returned 1 [0149.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 Thread: id = 1839 os_tid = 0x2478 [0144.927] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\jn3 hlculb.jpg")) returned 0x20 [0144.927] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg", dwFileAttributes=0x20) returned 1 [0144.927] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\jn3 hlculb.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ed8 [0144.927] GetFileSizeEx (in: hFile=0x1ed8, lpFileSize=0x61ff84c | out: lpFileSize=0x61ff84c*=41418) returned 1 [0144.927] SetFilePointerEx (in: hFile=0x1ed8, liDistanceToMove=0xa1c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.928] ReadFile (in: hFile=0x1ed8, lpBuffer=0x61ff828, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x61ff838, lpOverlapped=0x0 | out: lpBuffer=0x61ff828*, lpNumberOfBytesRead=0x61ff838*=0x4, lpOverlapped=0x0) returned 1 [0144.929] SetFilePointerEx (in: hFile=0x1ed8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0144.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0144.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0144.930] NtQuerySystemTime (in: CurrentTime=0x61ff7c0 | out: CurrentTime=0x61ff7c0*=132462177237528000) returned 0x0 [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x5ece216 [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x3d6be8eb [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x155eafa0 [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x4b5f12ae [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x282a9ca5 [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x4d54e743 [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x4c429c6c [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0xd7b361f [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0xd563194 [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x2565fd33 [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x40a620e0 [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x3bb22873 [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x4d0dbb62 [0144.930] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x4328d420 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x40fbd260 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x734c2baf [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x4c6202ab [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x3240b757 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x4be5f5e6 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x2e699f35 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x3191bd33 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x3c92ce03 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x999ed49 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x39ae627b [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x5a368581 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x39026580 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x662c7d77 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x6e609841 [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x60f4a91f [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0xb4a83a [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x7754ed7a [0144.931] RtlRandomEx (in: Seed=0x61ff7b8 | out: Seed=0x61ff7b8) returned 0x76a4a2cf [0144.941] SetFilePointerEx (in: hFile=0x1ed8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.941] ReadFile (in: hFile=0x1ed8, lpBuffer=0x7a96cf8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x61ff7c0, lpOverlapped=0x0 | out: lpBuffer=0x7a96cf8*, lpNumberOfBytesRead=0x61ff7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.942] SetFilePointerEx (in: hFile=0x1ed8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25818 [0144.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0144.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0144.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0144.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aad528 [0144.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0144.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0144.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ac8) returned 1 [0144.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0144.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25818) returned 1 [0144.943] WriteFile (in: hFile=0x1ed8, lpBuffer=0x7aad528*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x61ff7c0, lpOverlapped=0x0 | out: lpBuffer=0x7aad528*, lpNumberOfBytesWritten=0x61ff7c0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aad528) returned 1 [0145.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a96cf8) returned 1 [0145.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79870 [0145.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c50) returned 1 [0145.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79100 [0145.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0145.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b60 [0145.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b60) returned 1 [0145.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0145.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e838) returned 1 [0145.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3dec4e0 [0145.805] SetFilePointerEx (in: hFile=0x1ed8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.805] WriteFile (in: hFile=0x1ed8, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x61ff840, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x61ff840*=0x10e, lpOverlapped=0x0) returned 1 [0149.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0149.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79100) returned 1 [0149.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c50) returned 1 [0149.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79870) returned 1 [0149.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0149.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0149.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0149.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0149.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a668d0 [0149.392] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg" [0149.392] wcscat (in: _Dest=0x7a668d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg.68814f" [0149.392] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg.68814f", NtPathName=0x61ff7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\JN3 HlCuLb.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d40128 [0149.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40128) returned 1 [0149.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea78b0) returned 1 [0149.662] NtQueryInformationFile (in: FileHandle=0x1ed8, IoStatusBlock=0x61ff790, FileInformation=0x61ff798, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x61ff790, FileInformation=0x61ff798) returned 0x0 [0149.662] NtSetInformationFile (FileHandle=0x1ed8, IoStatusBlock=0x61ff790, FileInformation=0x61ff798, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 [0149.665] FlushFileBuffers (hFile=0x1ed8) returned 1 [0149.684] CloseHandle (hObject=0x1ed8) returned 1 [0149.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f638 [0149.685] wcscpy (in: _Dest=0x7a5f638, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0149.685] wcscat (in: _Dest=0x7a5f638, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" [0149.685] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\68814f-readme.txt")) returned 0x20 [0149.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f638) returned 1 [0149.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 Thread: id = 1840 os_tid = 0x247c [0144.952] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\m9kuh x6jdu.jpg")) returned 0x20 [0144.952] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg", dwFileAttributes=0x20) returned 1 [0144.952] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\m9kuh x6jdu.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ed4 [0144.953] GetFileSizeEx (in: hFile=0x1ed4, lpFileSize=0x44cfa5c | out: lpFileSize=0x44cfa5c*=25639) returned 1 [0144.953] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0x6423, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.953] ReadFile (in: hFile=0x1ed4, lpBuffer=0x44cfa38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x44cfa48, lpOverlapped=0x0 | out: lpBuffer=0x44cfa38*, lpNumberOfBytesRead=0x44cfa48*=0x4, lpOverlapped=0x0) returned 1 [0144.955] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0144.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0144.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0144.955] NtQuerySystemTime (in: CurrentTime=0x44cf9d0 | out: CurrentTime=0x44cf9d0*=132462177237840000) returned 0x0 [0144.955] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x5241a01f [0144.955] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x617d3880 [0144.955] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x7d5b687a [0144.955] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x3cdfb891 [0144.955] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x35a6102d [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x18b2c984 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x17c6b1e9 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x7c263407 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x15377a14 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x6c674e9b [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x297abd57 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x15f5a766 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x7c963d70 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x39869396 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0xbd64ab2 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x30886f8b [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x4fc2cb5 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x3762bd8a [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x32bf813a [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x1f7a1e5a [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x38af1142 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x50e22372 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x20eb0ba2 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x20cd3c96 [0144.956] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x172db1f7 [0144.957] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x375b05ee [0144.957] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x32adf853 [0144.957] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x52b81cc8 [0144.957] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x672a8305 [0144.957] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0xff0835a [0144.957] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x42470f4a [0144.957] RtlRandomEx (in: Seed=0x44cf9c8 | out: Seed=0x44cf9c8) returned 0x80edb5b [0144.969] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.969] ReadFile (in: hFile=0x1ed4, lpBuffer=0x7a804c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x44cf9d0, lpOverlapped=0x0 | out: lpBuffer=0x7a804c8*, lpNumberOfBytesRead=0x44cf9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0144.969] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a257d0 [0144.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0144.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0144.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ac8) returned 1 [0144.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab1130 [0144.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0144.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0144.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e30) returned 1 [0144.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0144.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a257d0) returned 1 [0144.970] WriteFile (in: hFile=0x1ed4, lpBuffer=0x7ab1130*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x44cf9d0, lpOverlapped=0x0 | out: lpBuffer=0x7ab1130*, lpNumberOfBytesWritten=0x44cf9d0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab1130) returned 1 [0145.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a804c8) returned 1 [0145.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79288 [0145.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0145.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79950 [0145.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0145.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0145.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0145.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0145.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c80) returned 1 [0145.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec940 [0145.932] SetFilePointerEx (in: hFile=0x1ed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.932] WriteFile (in: hFile=0x1ed4, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x44cfa50, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x44cfa50*=0x110, lpOverlapped=0x0) returned 1 [0149.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0149.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79950) returned 1 [0149.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0149.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79288) returned 1 [0149.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ac8) returned 1 [0149.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4168) returned 1 [0149.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3010) returned 1 [0149.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bb0) returned 1 [0149.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66980 [0149.390] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg" [0149.390] wcscat (in: _Dest=0x7a66980, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg.68814f" [0149.390] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg.68814f", NtPathName=0x44cf9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\M9KUh x6JdU.jpg.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d401f0 [0149.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d401f0) returned 1 [0149.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea7ad8) returned 1 [0149.659] NtQueryInformationFile (in: FileHandle=0x1ed4, IoStatusBlock=0x44cf9a0, FileInformation=0x44cf9a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x44cf9a0, FileInformation=0x44cf9a8) returned 0x0 [0149.659] NtSetInformationFile (FileHandle=0x1ed4, IoStatusBlock=0x44cf9a0, FileInformation=0x44cf9a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 [0149.661] FlushFileBuffers (hFile=0x1ed4) returned 1 [0149.681] CloseHandle (hObject=0x1ed4) returned 1 [0149.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f638 [0149.682] wcscpy (in: _Dest=0x7a5f638, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0149.683] wcscat (in: _Dest=0x7a5f638, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" [0149.683] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\68814f-readme.txt")) returned 0x20 [0149.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f638) returned 1 [0149.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 Thread: id = 1841 os_tid = 0x2480 [0144.973] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\USlrgku_a7L6ypEKaH.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\uslrgku_a7l6ypekah.gif")) returned 0x20 [0144.973] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\USlrgku_a7L6ypEKaH.gif", dwFileAttributes=0x20) returned 1 [0144.974] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\USlrgku_a7L6ypEKaH.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\uslrgku_a7l6ypekah.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ed0 [0144.974] GetFileSizeEx (in: hFile=0x1ed0, lpFileSize=0x7f0f9ac | out: lpFileSize=0x7f0f9ac*=75262) returned 1 [0144.974] SetFilePointerEx (in: hFile=0x1ed0, liDistanceToMove=0x125fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.974] ReadFile (in: hFile=0x1ed0, lpBuffer=0x7f0f988, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f0f998, lpOverlapped=0x0 | out: lpBuffer=0x7f0f988*, lpNumberOfBytesRead=0x7f0f998*=0x4, lpOverlapped=0x0) returned 1 [0144.976] SetFilePointerEx (in: hFile=0x1ed0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0144.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0144.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0144.976] NtQuerySystemTime (in: CurrentTime=0x7f0f920 | out: CurrentTime=0x7f0f920*=132462177237996000) returned 0x0 [0144.976] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x2f61cc34 [0144.976] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x3f86dbc7 [0144.976] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x597aafc8 [0144.976] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x402596a0 [0144.976] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x3eb64620 [0144.976] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x63e70958 [0144.976] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x47c0df45 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x42529860 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x3ffabde0 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x504ecf9a [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x4f28991c [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x2196a59 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x285e1324 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x72b4c1fa [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x36940d4d [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x71e56d74 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x87bf320 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x6547bdb3 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x5a7566e4 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x77c9392 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x8ecf4e5 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x8848bbd [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x3a5f91e4 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x2daef922 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x40d0f9a0 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x2b6c05a5 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x7451affa [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x436dd478 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x17792f1c [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x5700ec86 [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0xb259c1a [0144.977] RtlRandomEx (in: Seed=0x7f0f918 | out: Seed=0x7f0f918) returned 0x2b1fa415 [0144.987] SetFilePointerEx (in: hFile=0x1ed0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.987] ReadFile (in: hFile=0x1ed0, lpBuffer=0x7aa9920, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7f0f920, lpOverlapped=0x0 | out: lpBuffer=0x7aa9920*, lpNumberOfBytesRead=0x7f0f920*=0x3c00, lpOverlapped=0x0) returned 1 [0144.988] SetFilePointerEx (in: hFile=0x1ed0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a256f8 [0144.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0144.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0144.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e30) returned 1 [0144.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa2110 [0144.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0144.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0144.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3218) returned 1 [0144.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0144.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a256f8) returned 1 [0144.989] WriteFile (in: hFile=0x1ed0, lpBuffer=0x7aa2110*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7f0f920, lpOverlapped=0x0 | out: lpBuffer=0x7aa2110*, lpNumberOfBytesWritten=0x7f0f920*=0x3c00, lpOverlapped=0x0) returned 1 [0145.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa2110) returned 1 [0145.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa9920) returned 1 [0145.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07c80 [0145.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0145.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07a40 [0145.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0145.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0145.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d68) returned 1 [0145.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0145.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07b18) returned 1 [0145.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d55e08 [0145.934] SetFilePointerEx (in: hFile=0x1ed0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.934] WriteFile (in: hFile=0x1ed0, lpBuffer=0x3d55e08*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x7f0f9a0, lpOverlapped=0x0 | out: lpBuffer=0x3d55e08*, lpNumberOfBytesWritten=0x7f0f9a0*=0x11e, lpOverlapped=0x0) returned 1 [0149.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24938 [0149.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0149.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0149.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0149.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78f78 [0149.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0149.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0149.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3308) returned 1 [0149.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0149.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24938) returned 1 [0149.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3d47038 [0149.385] sprintf (in: _Dest=0x3d47038, _Format="%c%c" | out: _Dest="0a") returned 2 [0149.385] sprintf (in: _Dest=0x3d4703a, _Format="%c%c" | out: _Dest="d9") returned 2 [0149.385] sprintf (in: _Dest=0x3d4703c, _Format="%c%c" | out: _Dest="f1") returned 2 [0149.385] sprintf (in: _Dest=0x3d4703e, _Format="%c%c" | out: _Dest="fd") returned 2 [0149.385] sprintf (in: _Dest=0x3d47040, _Format="%c%c" | out: _Dest="ac") returned 2 [0149.385] sprintf (in: _Dest=0x3d47042, _Format="%c%c" | out: _Dest="c9") returned 2 [0149.385] sprintf (in: _Dest=0x3d47044, _Format="%c%c" | out: _Dest="dc") returned 2 [0149.385] sprintf (in: _Dest=0x3d47046, _Format="%c%c" | out: _Dest="e0") returned 2 [0149.385] sprintf (in: _Dest=0x3d47048, _Format="%c%c" | out: _Dest="92") returned 2 [0149.385] sprintf (in: _Dest=0x3d4704a, _Format="%c%c" | out: _Dest="c5") returned 2 [0149.385] sprintf (in: _Dest=0x3d4704c, _Format="%c%c" | out: _Dest="81") returned 2 [0149.385] sprintf (in: _Dest=0x3d4704e, _Format="%c%c" | out: _Dest="53") returned 2 [0149.385] sprintf (in: _Dest=0x3d47050, _Format="%c%c" | out: _Dest="15") returned 2 [0149.385] sprintf (in: _Dest=0x3d47052, _Format="%c%c" | out: _Dest="06") returned 2 [0149.385] sprintf (in: _Dest=0x3d47054, _Format="%c%c" | out: _Dest="f0") returned 2 [0149.385] sprintf (in: _Dest=0x3d47056, _Format="%c%c" | out: _Dest="7a") returned 2 [0149.385] sprintf (in: _Dest=0x3d47058, _Format="%c%c" | out: _Dest="e7") returned 2 [0149.385] sprintf (in: _Dest=0x3d4705a, _Format="%c%c" | out: _Dest="49") returned 2 [0149.386] sprintf (in: _Dest=0x3d4705c, _Format="%c%c" | out: _Dest="7b") returned 2 [0149.386] sprintf (in: _Dest=0x3d4705e, _Format="%c%c" | out: _Dest="07") returned 2 [0149.386] sprintf (in: _Dest=0x3d47060, _Format="%c%c" | out: _Dest="c2") returned 2 [0149.386] sprintf (in: _Dest=0x3d47062, _Format="%c%c" | out: _Dest="57") returned 2 [0149.386] sprintf (in: _Dest=0x3d47064, _Format="%c%c" | out: _Dest="f4") returned 2 [0149.386] sprintf (in: _Dest=0x3d47066, _Format="%c%c" | out: _Dest="38") returned 2 [0149.386] sprintf (in: _Dest=0x3d47068, _Format="%c%c" | out: _Dest="1d") returned 2 [0149.386] sprintf (in: _Dest=0x3d4706a, _Format="%c%c" | out: _Dest="f4") returned 2 [0149.386] sprintf (in: _Dest=0x3d4706c, _Format="%c%c" | out: _Dest="58") returned 2 [0149.386] sprintf (in: _Dest=0x3d4706e, _Format="%c%c" | out: _Dest="02") returned 2 [0149.386] sprintf (in: _Dest=0x3d47070, _Format="%c%c" | out: _Dest="ab") returned 2 [0149.386] sprintf (in: _Dest=0x3d47072, _Format="%c%c" | out: _Dest="03") returned 2 [0149.386] sprintf (in: _Dest=0x3d47074, _Format="%c%c" | out: _Dest="53") returned 2 [0149.386] sprintf (in: _Dest=0x3d47076, _Format="%c%c" | out: _Dest="51") returned 2 [0149.386] sprintf (in: _Dest=0x3d47078, _Format="%c%c" | out: _Dest="3f") returned 2 [0149.386] sprintf (in: _Dest=0x3d4707a, _Format="%c%c" | out: _Dest="93") returned 2 [0149.386] sprintf (in: _Dest=0x3d4707c, _Format="%c%c" | out: _Dest="a5") returned 2 [0149.386] sprintf (in: _Dest=0x3d4707e, _Format="%c%c" | out: _Dest="fb") returned 2 [0149.386] sprintf (in: _Dest=0x3d47080, _Format="%c%c" | out: _Dest="95") returned 2 [0149.386] sprintf (in: _Dest=0x3d47082, _Format="%c%c" | out: _Dest="01") returned 2 [0149.386] sprintf (in: _Dest=0x3d47084, _Format="%c%c" | out: _Dest="33") returned 2 [0149.387] sprintf (in: _Dest=0x3d47086, _Format="%c%c" | out: _Dest="bf") returned 2 [0149.387] sprintf (in: _Dest=0x3d47088, _Format="%c%c" | out: _Dest="c3") returned 2 [0149.387] sprintf (in: _Dest=0x3d4708a, _Format="%c%c" | out: _Dest="34") returned 2 [0149.387] sprintf (in: _Dest=0x3d4708c, _Format="%c%c" | out: _Dest="2a") returned 2 [0149.387] sprintf (in: _Dest=0x3d4708e, _Format="%c%c" | out: _Dest="09") returned 2 [0149.387] RtlInitAnsiString (in: DestinationString=0x7f0f928, SourceString="0ad9f1fdacc9dce092c581531506f07ae7497b07c257f4381df45802ab0353513f93a5fb950133bfc3342a09" | out: DestinationString="0ad9f1fdacc9dce092c581531506f07ae7497b07c257f4381df45802ab0353513f93a5fb950133bfc3342a09") [0149.387] RtlAnsiStringToUnicodeString (in: DestinationString=0x7f0f920, SourceString="0ad9f1fdacc9dce092c581531506f07ae7497b07c257f4381df45802ab0353513f93a5fb950133bfc3342a09", AllocateDestinationString=1 | out: DestinationString="0ad9f1fdacc9dce092c581531506f07ae7497b07c257f4381df45802ab0353513f93a5fb950133bfc3342a09") returned 0x0 [0149.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65dd8 [0149.387] RtlFreeAnsiString (AnsiString="0") [0149.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47038) returned 1 [0149.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78f78) returned 1 [0149.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0149.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55e08) returned 1 [0149.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a40) returned 1 [0149.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0149.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c80) returned 1 [0149.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e30) returned 1 [0149.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4438) returned 1 [0149.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3290) returned 1 [0149.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31c8) returned 1 [0149.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66318 [0149.388] wcscat (in: _Dest=0x3e66318, _Source="0ad9f1fdacc9dce092c581" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\0ad9f1fdacc9dce092c581") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\0ad9f1fdacc9dce092c581" [0149.388] wcscat (in: _Dest=0x3e66318, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\0ad9f1fdacc9dce092c581.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\0ad9f1fdacc9dce092c581.68814f" [0149.388] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\0ad9f1fdacc9dce092c581.68814f", NtPathName=0x7f0f918, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\0ad9f1fdacc9dce092c581.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68648 [0149.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 [0149.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea9290) returned 1 [0149.655] NtQueryInformationFile (in: FileHandle=0x1ed0, IoStatusBlock=0x7f0f8f0, FileInformation=0x7f0f8f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7f0f8f0, FileInformation=0x7f0f8f8) returned 0x0 [0149.655] NtSetInformationFile (FileHandle=0x1ed0, IoStatusBlock=0x7f0f8f0, FileInformation=0x7f0f8f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 [0149.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 [0149.657] FlushFileBuffers (hFile=0x1ed0) returned 1 [0149.726] CloseHandle (hObject=0x1ed0) returned 1 [0149.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053e58 [0149.728] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0149.728] wcscat (in: _Dest=0x3053e58, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" [0149.729] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\68814f-readme.txt")) returned 0x20 [0149.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 [0149.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 Thread: id = 1842 os_tid = 0x2484 [0144.991] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\xrxy.png")) returned 0x20 [0144.991] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png", dwFileAttributes=0x20) returned 1 [0144.991] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\xrxy.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ecc [0144.991] GetFileSizeEx (in: hFile=0x1ecc, lpFileSize=0x84efe4c | out: lpFileSize=0x84efe4c*=40654) returned 1 [0144.991] SetFilePointerEx (in: hFile=0x1ecc, liDistanceToMove=0x9eca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.992] ReadFile (in: hFile=0x1ecc, lpBuffer=0x84efe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x84efe38, lpOverlapped=0x0 | out: lpBuffer=0x84efe28*, lpNumberOfBytesRead=0x84efe38*=0x4, lpOverlapped=0x0) returned 1 [0144.993] SetFilePointerEx (in: hFile=0x1ecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0144.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0144.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3268 [0144.994] NtQuerySystemTime (in: CurrentTime=0x84efdc0 | out: CurrentTime=0x84efdc0*=132462177238152000) returned 0x0 [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x19c09cfb [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x64a4ed65 [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x6be33e6 [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x54c03b9b [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0xb314117 [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x3d96563f [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x7722e1dd [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0xc42477a [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x5f56c7a8 [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x7dbb25e4 [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x11cdd755 [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x5ec97c62 [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x6d56302f [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x3fcfe520 [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x3e91be60 [0144.994] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x6afe4bd1 [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x1d9c89ff [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0xe1c0262 [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x2dba2920 [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x316b9b9c [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x54077d5e [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x2d11c3c9 [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x27b03fa1 [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x42a68eb6 [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x793d9f7e [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x4b0aa4fd [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0xd0b23df [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x47e3ebb0 [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x77c67643 [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x3e27a83 [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x1bc36dcb [0144.995] RtlRandomEx (in: Seed=0x84efdb8 | out: Seed=0x84efdb8) returned 0x434b74fe [0145.005] SetFilePointerEx (in: hFile=0x1ecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.005] ReadFile (in: hFile=0x1ecc, lpBuffer=0x7aa5d18, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x84efdc0, lpOverlapped=0x0 | out: lpBuffer=0x7aa5d18*, lpNumberOfBytesRead=0x84efdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.005] SetFilePointerEx (in: hFile=0x1ecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25ed8 [0145.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b018 [0145.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0145.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3218) returned 1 [0145.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a87cd8 [0145.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0145.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3268 [0145.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3268) returned 1 [0145.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0145.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ed8) returned 1 [0145.006] WriteFile (in: hFile=0x1ecc, lpBuffer=0x7a87cd8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x84efdc0, lpOverlapped=0x0 | out: lpBuffer=0x7a87cd8*, lpNumberOfBytesWritten=0x84efdc0*=0x3c00, lpOverlapped=0x0) returned 1 [0145.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a87cd8) returned 1 [0145.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa5d18) returned 1 [0145.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec2d68 [0145.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0145.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec4690 [0145.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0145.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0145.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f98) returned 1 [0145.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0145.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07b18) returned 1 [0145.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec5f8 [0145.936] SetFilePointerEx (in: hFile=0x1ecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.936] WriteFile (in: hFile=0x1ecc, lpBuffer=0x3dec5f8*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x84efe40, lpOverlapped=0x0 | out: lpBuffer=0x3dec5f8*, lpNumberOfBytesWritten=0x84efe40*=0x102, lpOverlapped=0x0) returned 1 [0146.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec5f8) returned 1 [0146.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0146.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ea8) returned 1 [0146.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d68) returned 1 [0146.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3218) returned 1 [0146.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0146.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3240) returned 1 [0146.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0146.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62310 [0146.930] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png" [0146.930] wcscat (in: _Dest=0x7a62310, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png.68814f" [0146.930] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png.68814f", NtPathName=0x84efdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\xRXY.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6d00 [0146.934] FlushFileBuffers (hFile=0x1ecc) returned 1 [0147.070] CloseHandle (hObject=0x1ecc) returned 1 [0147.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3e7acd0 [0147.079] wcscpy (in: _Dest=0x3e7acd0, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\" [0147.079] wcscat (in: _Dest=0x3e7acd0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" [0147.079] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\68814f-readme.txt")) returned 0xffffffff [0147.079] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b44 [0147.080] WriteFile (in: hFile=0x1b44, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x84efdd4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x84efdd4*=0x8b9, lpOverlapped=0x0) returned 1 [0147.083] CloseHandle (hObject=0x1b44) returned 1 [0147.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7acd0) returned 1 [0147.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb70b8) returned 1 Thread: id = 1843 os_tid = 0x2488 [0145.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62270 [0145.008] wcscpy (in: _Dest=0x7a62270, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0145.009] wcscat (in: _Dest=0x7a62270, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0145.009] wcscat (in: _Dest=0x7a62270, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*" [0145.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52c98 [0145.009] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\*", lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73db0 [0145.009] wcscmp (_String1=".", _String2=".") returned 0 [0145.009] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be597f0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.009] wcscmp (_String1="..", _String2=".") returned 1 [0145.010] wcscmp (_String1="..", _String2="..") returned 0 [0145.010] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.010] wcscmp (_String1="packages", _String2=".") returned 1 [0145.010] wcscmp (_String1="packages", _String2="..") returned 1 [0145.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66770 [0145.010] wcscpy (in: _Dest=0x7a66770, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B" [0145.010] wcscat (in: _Dest=0x7a66770, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\" [0145.010] wcscat (in: _Dest=0x7a66770, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0152.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a66770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0 [0152.917] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0152.917] FindClose (in: hFindFile=0x3e73db0 | out: hFindFile=0x3e73db0) returned 1 [0152.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52c98) returned 1 [0152.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62270) returned 1 [0152.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 Thread: id = 1844 os_tid = 0x248c [0145.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6b90 [0145.011] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0145.011] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0145.011] wcscat (in: _Dest=0x2ff6b90, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" [0145.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a557e8 [0145.011] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73df0 [0145.011] wcscmp (_String1=".", _String2=".") returned 0 [0145.011] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec04c50, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.012] wcscmp (_String1="..", _String2=".") returned 1 [0145.012] wcscmp (_String1="..", _String2="..") returned 0 [0145.012] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.012] wcscmp (_String1="packages", _String2=".") returned 1 [0145.012] wcscmp (_String1="packages", _String2="..") returned 1 [0145.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e663d8 [0145.012] wcscpy (in: _Dest=0x3e663d8, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" [0145.012] wcscat (in: _Dest=0x3e663d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\" [0145.012] wcscat (in: _Dest=0x3e663d8, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0152.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e663d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8 [0152.937] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0152.937] FindClose (in: hFindFile=0x3e73df0 | out: hFindFile=0x3e73df0) returned 1 [0152.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a557e8) returned 1 [0152.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0152.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 1845 os_tid = 0x2490 [0145.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a621d0 [0145.012] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0145.013] wcscat (in: _Dest=0x7a621d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0145.013] wcscat (in: _Dest=0x7a621d0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" [0145.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0145.013] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73d30 [0145.013] wcscmp (_String1=".", _String2=".") returned 0 [0145.013] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6861acb0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.013] wcscmp (_String1="..", _String2=".") returned 1 [0145.013] wcscmp (_String1="..", _String2="..") returned 0 [0145.013] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xcae8da20, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0145.013] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0145.013] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0145.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66820 [0145.014] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" [0145.014] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\" [0145.014] wcscat (in: _Dest=0x7a66820, _Source="state.rsm" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0151.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4 [0151.461] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0151.461] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0151.461] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0151.461] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6861acb0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x6861acb0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x4e71d7d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0151.461] FindClose (in: hFindFile=0x3e73d30 | out: hFindFile=0x3e73d30) returned 1 [0151.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0151.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 [0151.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64a10) returned 1 Thread: id = 1846 os_tid = 0x2494 [0145.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7378 [0145.014] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0145.014] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0145.014] wcscat (in: _Dest=0x2ff7378, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*" [0145.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0145.015] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73cb0 [0145.015] wcscmp (_String1=".", _String2=".") returned 0 [0145.015] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.015] wcscmp (_String1="..", _String2=".") returned 1 [0145.015] wcscmp (_String1="..", _String2="..") returned 0 [0145.015] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.015] wcscmp (_String1="packages", _String2=".") returned 1 [0145.015] wcscmp (_String1="packages", _String2="..") returned 1 [0145.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d40a88 [0145.015] wcscpy (in: _Dest=0x3d40a88, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" [0145.015] wcscat (in: _Dest=0x3d40a88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\" [0145.015] wcscat (in: _Dest=0x3d40a88, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0151.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d40a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0 [0151.464] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0151.464] FindClose (in: hFindFile=0x3e73cb0 | out: hFindFile=0x3e73cb0) returned 1 [0151.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0151.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 [0151.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b9d8) returned 1 Thread: id = 1847 os_tid = 0x2498 [0145.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6db8 [0145.016] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0145.017] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0145.017] wcscat (in: _Dest=0x2ff6db8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*" [0145.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0145.017] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73370 [0145.017] wcscmp (_String1=".", _String2=".") returned 0 [0145.017] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.017] wcscmp (_String1="..", _String2=".") returned 1 [0145.017] wcscmp (_String1="..", _String2="..") returned 0 [0145.017] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.017] wcscmp (_String1="packages", _String2=".") returned 1 [0145.017] wcscmp (_String1="packages", _String2="..") returned 1 [0145.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d40768 [0145.017] wcscpy (in: _Dest=0x3d40768, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" [0145.017] wcscat (in: _Dest=0x3d40768, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\" [0145.017] wcscat (in: _Dest=0x3d40768, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0151.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d40768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc [0151.466] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0151.466] FindClose (in: hFindFile=0x3e73370 | out: hFindFile=0x3e73370) returned 1 [0151.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0151.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 [0151.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 1848 os_tid = 0x249c [0145.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7430 [0145.018] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0145.018] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0145.018] wcscat (in: _Dest=0x2ff7430, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" [0145.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0145.018] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73430 [0145.019] wcscmp (_String1=".", _String2=".") returned 0 [0145.019] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.019] wcscmp (_String1="..", _String2=".") returned 1 [0145.019] wcscmp (_String1="..", _String2="..") returned 0 [0145.019] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.019] wcscmp (_String1="packages", _String2=".") returned 1 [0145.019] wcscmp (_String1="packages", _String2="..") returned 1 [0145.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65ad8 [0145.019] wcscpy (in: _Dest=0x3e65ad8, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" [0145.019] wcscat (in: _Dest=0x3e65ad8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\" [0145.019] wcscat (in: _Dest=0x3e65ad8, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0148.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e65ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x186c [0148.935] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0148.935] FindClose (in: hFindFile=0x3e73430 | out: hFindFile=0x3e73430) returned 1 [0148.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0148.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0148.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 1849 os_tid = 0x24a0 [0145.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6180 [0145.028] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0145.028] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0145.028] wcscat (in: _Dest=0x2ff6180, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*" [0145.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0145.028] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e734b0 [0145.028] wcscmp (_String1=".", _String2=".") returned 0 [0145.028] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68725650, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.028] wcscmp (_String1="..", _String2=".") returned 1 [0145.028] wcscmp (_String1="..", _String2="..") returned 0 [0145.029] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.029] wcscmp (_String1="packages", _String2=".") returned 1 [0145.029] wcscmp (_String1="packages", _String2="..") returned 1 [0145.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65b98 [0145.029] wcscpy (in: _Dest=0x3e65b98, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" [0145.029] wcscat (in: _Dest=0x3e65b98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\" [0145.029] wcscat (in: _Dest=0x3e65b98, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0146.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e65b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1878 [0146.881] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0146.882] FindClose (in: hFindFile=0x3e734b0 | out: hFindFile=0x3e734b0) returned 1 [0146.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0146.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 [0146.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 Thread: id = 1850 os_tid = 0x24a4 [0145.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62130 [0145.051] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0145.051] wcscat (in: _Dest=0x7a62130, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0145.051] wcscat (in: _Dest=0x7a62130, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*" [0145.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0145.051] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73e30 [0145.052] wcscmp (_String1=".", _String2=".") returned 0 [0145.052] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7eb20410, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.052] wcscmp (_String1="..", _String2=".") returned 1 [0145.052] wcscmp (_String1="..", _String2="..") returned 0 [0145.052] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb20410, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eb20410, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0xd7101e80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0145.052] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0145.052] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0145.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a668d0 [0145.052] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" [0145.052] wcscat (in: _Dest=0x7a668d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\" [0145.052] wcscat (in: _Dest=0x7a668d0, _Source="state.rsm" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0146.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a668d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0 [0146.885] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0146.885] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1 [0146.885] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1 [0146.885] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafa2b0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7eafa2b0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x6bffa390, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0146.885] FindClose (in: hFindFile=0x3e73e30 | out: hFindFile=0x3e73e30) returned 1 [0146.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0146.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 [0146.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64978) returned 1 Thread: id = 1851 os_tid = 0x24a8 [0145.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62310 [0145.084] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0145.084] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0145.084] wcscat (in: _Dest=0x7a62310, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*" [0145.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0145.084] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73e70 [0145.085] wcscmp (_String1=".", _String2=".") returned 0 [0145.085] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5364020, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.085] wcscmp (_String1="..", _String2=".") returned 1 [0145.085] wcscmp (_String1="..", _String2="..") returned 0 [0145.085] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xfe644ba0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x2fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0145.085] wcscmp (_String1="state.rsm", _String2=".") returned 1 [0145.085] wcscmp (_String1="state.rsm", _String2="..") returned 1 [0145.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66980 [0145.086] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" [0145.086] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\" [0145.086] wcscat (in: _Dest=0x7a66980, _Source="state.rsm" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0146.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0146.889] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0146.889] wcscmp (_String1="VC_redist.x86.exe", _String2=".") returned 1 [0146.889] wcscmp (_String1="VC_redist.x86.exe", _String2="..") returned 1 [0146.889] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5364020, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5364020, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xde44a9a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0146.889] FindClose (in: hFindFile=0x3e73e70 | out: hFindFile=0x3e73e70) returned 1 [0146.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0146.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 [0146.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a648e0) returned 1 Thread: id = 1852 os_tid = 0x24ac [0145.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6d00 [0145.122] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0145.122] wcscat (in: _Dest=0x2ff6d00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0145.122] wcscat (in: _Dest=0x2ff6d00, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*" [0145.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0145.123] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0145.123] wcscmp (_String1=".", _String2=".") returned 0 [0145.123] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.123] wcscmp (_String1="..", _String2=".") returned 1 [0145.123] wcscmp (_String1="..", _String2="..") returned 0 [0145.124] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.124] wcscmp (_String1="packages", _String2=".") returned 1 [0145.124] wcscmp (_String1="packages", _String2="..") returned 1 [0145.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66198 [0145.124] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" [0145.124] wcscat (in: _Dest=0x3e66198, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\" [0145.124] wcscat (in: _Dest=0x3e66198, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0146.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e66198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0146.892] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0146.892] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0146.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0146.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 [0146.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 1853 os_tid = 0x24b0 [0145.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol")) returned 0x20 [0146.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL", dwFileAttributes=0x20) returned 0 [0146.387] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.388] GetLastError () returned 0x5 [0146.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL", dwFileAttributes=0x20) returned 0 [0146.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052df0) returned 1 Thread: id = 1854 os_tid = 0x24b4 [0145.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol")) returned 0x20 [0146.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL", dwFileAttributes=0x20) returned 0 [0146.390] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.390] GetLastError () returned 0x5 [0146.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL", dwFileAttributes=0x20) returned 0 [0146.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 1855 os_tid = 0x24b8 [0145.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol")) returned 0x20 [0145.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL", dwFileAttributes=0x20) returned 0 [0145.939] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.939] GetLastError () returned 0x5 [0145.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL", dwFileAttributes=0x20) returned 0 [0145.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c008) returned 1 Thread: id = 1856 os_tid = 0x24bc [0145.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol")) returned 0x20 [0145.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL", dwFileAttributes=0x20) returned 0 [0145.942] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.942] GetLastError () returned 0x5 [0145.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL", dwFileAttributes=0x20) returned 0 [0145.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7208) returned 1 Thread: id = 1857 os_tid = 0x24c0 [0145.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv")) returned 0x20 [0146.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV", dwFileAttributes=0x20) returned 0 [0146.391] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.392] GetLastError () returned 0x5 [0146.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV", dwFileAttributes=0x20) returned 0 [0146.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3054050) returned 1 Thread: id = 1858 os_tid = 0x24c4 [0145.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv")) returned 0x20 [0146.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV", dwFileAttributes=0x20) returned 0 [0146.393] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.393] GetLastError () returned 0x5 [0146.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV", dwFileAttributes=0x20) returned 0 [0146.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 Thread: id = 1859 os_tid = 0x24c8 [0145.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv")) returned 0x20 [0145.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV", dwFileAttributes=0x20) returned 0 [0145.946] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.949] GetLastError () returned 0x5 [0145.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV", dwFileAttributes=0x20) returned 0 [0145.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bc98) returned 1 Thread: id = 1860 os_tid = 0x24cc [0145.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv")) returned 0x20 [0145.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV", dwFileAttributes=0x20) returned 0 [0145.951] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.951] GetLastError () returned 0x5 [0145.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV", dwFileAttributes=0x20) returned 0 [0145.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 1861 os_tid = 0x24d0 [0145.144] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20 [0145.145] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0145.145] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.145] GetLastError () returned 0x5 [0145.145] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0145.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 1862 os_tid = 0x24d4 [0145.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69c28 [0145.147] wcscpy (in: _Dest=0x3e69c28, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0145.147] wcscat (in: _Dest=0x3e69c28, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0145.147] wcscat (in: _Dest=0x3e69c28, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*" [0145.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0145.147] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0145.953] wcscmp (_String1=".", _String2=".") returned 0 [0145.954] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.226] wcscmp (_String1="..", _String2=".") returned 1 [0147.226] wcscmp (_String1="..", _String2="..") returned 0 [0147.226] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0147.226] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0147.226] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0147.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0147.226] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0147.226] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0147.226] wcscat (in: _Dest=0x3eb6a30, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" [0153.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c [0153.953] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0153.953] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0153.953] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0153.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a65098 [0153.953] wcscpy (in: _Dest=0x7a65098, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.953] wcscat (in: _Dest=0x7a65098, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.953] wcscat (in: _Dest=0x7a65098, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" [0153.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058 [0153.955] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0153.955] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0153.955] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0153.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64f68 [0153.955] wcscpy (in: _Dest=0x7a64f68, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.955] wcscat (in: _Dest=0x7a64f68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.955] wcscat (in: _Dest=0x7a64f68, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" [0153.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074 [0153.957] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0153.957] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0153.957] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0153.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60480 [0153.957] wcscpy (in: _Dest=0x7a60480, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.957] wcscat (in: _Dest=0x7a60480, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.957] wcscat (in: _Dest=0x7a60480, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" [0153.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078 [0153.959] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0153.959] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0153.959] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0153.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64b40 [0153.959] wcscpy (in: _Dest=0x7a64b40, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.959] wcscat (in: _Dest=0x7a64b40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.959] wcscat (in: _Dest=0x7a64b40, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" [0153.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c [0153.960] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99450400, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99450400, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0153.960] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0153.960] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0153.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60630 [0153.960] wcscpy (in: _Dest=0x7a60630, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.960] wcscat (in: _Dest=0x7a60630, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.960] wcscat (in: _Dest=0x7a60630, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" [0153.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0153.962] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x3546d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0153.962] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0153.962] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0153.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64aa8 [0153.962] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.962] wcscat (in: _Dest=0x7a64aa8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.962] wcscat (in: _Dest=0x7a64aa8, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" [0153.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0153.964] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4f0a000, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4f0a000, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0153.964] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0153.964] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0153.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a606c0 [0153.964] wcscpy (in: _Dest=0x7a606c0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.964] wcscat (in: _Dest=0x7a606c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.964] wcscat (in: _Dest=0x7a606c0, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" [0153.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a606c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0153.966] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0153.967] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0153.967] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0153.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60fc0 [0153.967] wcscpy (in: _Dest=0x7a60fc0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.967] wcscat (in: _Dest=0x7a60fc0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.967] wcscat (in: _Dest=0x7a60fc0, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" [0153.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0153.968] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0153.968] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0153.969] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0153.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60e10 [0153.969] wcscpy (in: _Dest=0x7a60e10, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.969] wcscat (in: _Dest=0x7a60e10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.969] wcscat (in: _Dest=0x7a60e10, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" [0153.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0153.971] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0153.971] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0153.971] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0153.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64848 [0153.971] wcscpy (in: _Dest=0x7a64848, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.971] wcscat (in: _Dest=0x7a64848, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.971] wcscat (in: _Dest=0x7a64848, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" [0153.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0153.972] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0153.972] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0153.973] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0153.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64090 [0153.973] wcscpy (in: _Dest=0x7a64090, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.973] wcscat (in: _Dest=0x7a64090, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.973] wcscat (in: _Dest=0x7a64090, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" [0153.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0153.974] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0153.974] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0153.974] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0153.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60f30 [0153.974] wcscpy (in: _Dest=0x7a60f30, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.974] wcscat (in: _Dest=0x7a60f30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.974] wcscat (in: _Dest=0x7a60f30, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" [0153.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0153.975] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0153.975] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0153.975] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0153.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60ea0 [0153.976] wcscpy (in: _Dest=0x7a60ea0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.976] wcscat (in: _Dest=0x7a60ea0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.976] wcscat (in: _Dest=0x7a60ea0, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" [0153.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0153.977] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0153.977] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0153.977] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0153.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61200 [0153.977] wcscpy (in: _Dest=0x7a61200, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.977] wcscat (in: _Dest=0x7a61200, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.977] wcscat (in: _Dest=0x7a61200, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" [0153.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0153.978] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0153.978] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0153.978] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0153.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64128 [0153.978] wcscpy (in: _Dest=0x7a64128, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.978] wcscat (in: _Dest=0x7a64128, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.978] wcscat (in: _Dest=0x7a64128, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" [0153.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0153.980] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46e8c500, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46e8c500, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0153.980] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0153.980] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0153.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a641c0 [0153.980] wcscpy (in: _Dest=0x7a641c0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.980] wcscat (in: _Dest=0x7a641c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.980] wcscat (in: _Dest=0x7a641c0, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" [0153.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a641c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0153.981] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82d25900, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82d25900, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0153.981] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0153.981] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0153.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64258 [0153.982] wcscpy (in: _Dest=0x7a64258, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.982] wcscat (in: _Dest=0x7a64258, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.982] wcscat (in: _Dest=0x7a64258, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" [0153.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0153.983] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cef700, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77cef700, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0153.983] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0153.983] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0153.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61290 [0153.983] wcscpy (in: _Dest=0x7a61290, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.983] wcscat (in: _Dest=0x7a61290, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.983] wcscat (in: _Dest=0x7a61290, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" [0153.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0153.984] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0153.984] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0153.984] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0153.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61320 [0153.984] wcscpy (in: _Dest=0x7a61320, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.984] wcscat (in: _Dest=0x7a61320, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.985] wcscat (in: _Dest=0x7a61320, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" [0153.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0153.986] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf11c1900, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf11c1900, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0153.986] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0153.986] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0153.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a642f0 [0153.986] wcscpy (in: _Dest=0x7a642f0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.986] wcscat (in: _Dest=0x7a642f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.986] wcscat (in: _Dest=0x7a642f0, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" [0153.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a642f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0153.987] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0153.987] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0153.987] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0153.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a613b0 [0153.987] wcscpy (in: _Dest=0x7a613b0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.987] wcscat (in: _Dest=0x7a613b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.987] wcscat (in: _Dest=0x7a613b0, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" [0153.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a613b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0153.988] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0153.988] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0153.988] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0153.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61440 [0153.989] wcscpy (in: _Dest=0x7a61440, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0153.989] wcscat (in: _Dest=0x7a61440, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0153.989] wcscat (in: _Dest=0x7a61440, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" [0153.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0154.780] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0154.780] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0154.780] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0154.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61b90 [0154.781] wcscpy (in: _Dest=0x7a61b90, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0154.781] wcscat (in: _Dest=0x7a61b90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0154.781] wcscat (in: _Dest=0x7a61b90, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" [0164.634] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll")) returned 0x2020 [0164.634] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0164.634] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.634] GetLastError () returned 0x5 [0164.635] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0164.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b90) returned 1 [0164.635] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0164.635] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0164.635] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0164.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c660 [0164.635] wcscpy (in: _Dest=0x32c660, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0164.635] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0164.635] wcscat (in: _Dest=0x32c660, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" [0164.636] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll")) returned 0x2020 [0164.636] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0164.636] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.636] GetLastError () returned 0x5 [0164.636] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0164.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 [0164.637] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356f4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0164.637] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0164.637] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0164.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c660 [0164.637] wcscpy (in: _Dest=0x32c660, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0164.637] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0164.637] wcscat (in: _Dest=0x32c660, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" [0164.637] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll")) returned 0x2020 [0164.637] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0164.638] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.638] GetLastError () returned 0x5 [0164.638] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0164.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 [0164.638] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0164.638] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0164.638] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0164.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c660 [0164.638] wcscpy (in: _Dest=0x32c660, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" [0164.638] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0164.639] wcscat (in: _Dest=0x32c660, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" [0164.639] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll")) returned 0x2020 [0164.639] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0164.639] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.639] GetLastError () returned 0x5 [0164.639] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0164.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 [0164.640] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0164.640] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0164.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0164.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c28) returned 1 [0164.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b30) returned 1 Thread: id = 1863 os_tid = 0x24d8 [0145.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26d98 [0145.151] wcscpy (in: _Dest=0x7a26d98, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0145.151] wcscat (in: _Dest=0x7a26d98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0145.151] wcscat (in: _Dest=0x7a26d98, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*" [0145.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1340 [0145.152] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d5c0 [0146.396] wcscmp (_String1=".", _String2=".") returned 0 [0146.396] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.974] wcscmp (_String1="..", _String2=".") returned 1 [0147.974] wcscmp (_String1="..", _String2="..") returned 0 [0147.974] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0147.974] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0147.974] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0147.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c660 [0147.975] wcscpy (in: _Dest=0x32c660, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0147.975] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0147.975] wcscat (in: _Dest=0x32c660, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" [0162.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0162.689] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0162.689] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0162.689] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0162.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6018 [0162.689] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.689] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.689] wcscat (in: _Dest=0x3eb6018, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" [0162.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0162.691] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0162.691] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0162.691] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0162.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb64d8 [0162.691] wcscpy (in: _Dest=0x3eb64d8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.691] wcscat (in: _Dest=0x3eb64d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.691] wcscat (in: _Dest=0x3eb64d8, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" [0162.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb64d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0162.692] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0162.692] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0162.693] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0162.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a601b0 [0162.693] wcscpy (in: _Dest=0x7a601b0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.693] wcscat (in: _Dest=0x7a601b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.693] wcscat (in: _Dest=0x7a601b0, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" [0162.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a601b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150 [0162.694] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0162.694] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0162.694] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0162.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5990 [0162.694] wcscpy (in: _Dest=0x3eb5990, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.694] wcscat (in: _Dest=0x3eb5990, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.694] wcscat (in: _Dest=0x3eb5990, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" [0162.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0162.696] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0162.696] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0162.696] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0162.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61050 [0162.696] wcscpy (in: _Dest=0x7a61050, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.696] wcscat (in: _Dest=0x7a61050, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.696] wcscat (in: _Dest=0x7a61050, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" [0162.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0162.697] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0162.697] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0162.697] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0162.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5e50 [0162.698] wcscpy (in: _Dest=0x3eb5e50, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.698] wcscat (in: _Dest=0x3eb5e50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.698] wcscat (in: _Dest=0x3eb5e50, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" [0162.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0162.699] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdc99200, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdc99200, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0162.699] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0162.699] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0162.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60e10 [0162.699] wcscpy (in: _Dest=0x7a60e10, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.699] wcscat (in: _Dest=0x7a60e10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.699] wcscat (in: _Dest=0x7a60e10, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" [0162.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0162.701] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0162.701] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0162.701] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0162.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60630 [0162.701] wcscpy (in: _Dest=0x7a60630, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.701] wcscat (in: _Dest=0x7a60630, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.701] wcscat (in: _Dest=0x7a60630, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" [0162.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148 [0162.702] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0162.702] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0162.702] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0162.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60090 [0162.702] wcscpy (in: _Dest=0x7a60090, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.703] wcscat (in: _Dest=0x7a60090, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.703] wcscat (in: _Dest=0x7a60090, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" [0162.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0162.704] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0162.704] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0162.704] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0162.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb70b8 [0162.704] wcscpy (in: _Dest=0x3eb70b8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.704] wcscat (in: _Dest=0x3eb70b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.704] wcscat (in: _Dest=0x3eb70b8, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" [0162.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb70b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0162.705] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0162.705] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0162.705] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0162.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5698 [0162.706] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.706] wcscat (in: _Dest=0x3eb5698, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.706] wcscat (in: _Dest=0x3eb5698, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" [0162.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0162.707] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0162.707] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0162.707] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0162.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a610e0 [0162.707] wcscpy (in: _Dest=0x7a610e0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.707] wcscat (in: _Dest=0x7a610e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.707] wcscat (in: _Dest=0x7a610e0, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" [0162.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a610e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0162.708] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0162.708] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0162.708] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0162.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60ea0 [0162.709] wcscpy (in: _Dest=0x7a60ea0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.709] wcscat (in: _Dest=0x7a60ea0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.709] wcscat (in: _Dest=0x7a60ea0, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" [0162.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0162.713] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0162.713] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0162.713] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0162.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60120 [0162.713] wcscpy (in: _Dest=0x7a60120, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.713] wcscat (in: _Dest=0x7a60120, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.713] wcscat (in: _Dest=0x7a60120, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" [0162.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0162.714] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0162.714] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0162.714] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0162.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5f80 [0162.714] wcscpy (in: _Dest=0x3eb5f80, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.714] wcscat (in: _Dest=0x3eb5f80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.715] wcscat (in: _Dest=0x3eb5f80, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" [0162.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0162.716] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0162.716] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0162.716] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0162.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6f88 [0162.717] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.717] wcscat (in: _Dest=0x3eb6f88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.717] wcscat (in: _Dest=0x3eb6f88, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" [0162.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0162.718] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81a12c00, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81a12c00, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0162.718] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0162.719] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0162.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6310 [0162.719] wcscpy (in: _Dest=0x3eb6310, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.719] wcscat (in: _Dest=0x3eb6310, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.719] wcscat (in: _Dest=0x3eb6310, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" [0162.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0162.720] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x874e4000, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x874e4000, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0162.720] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0162.720] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0162.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61440 [0162.720] wcscpy (in: _Dest=0x7a61440, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.720] wcscat (in: _Dest=0x7a61440, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.720] wcscat (in: _Dest=0x7a61440, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" [0162.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0162.722] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0162.722] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0162.722] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0162.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61ef0 [0162.722] wcscpy (in: _Dest=0x7a61ef0, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.722] wcscat (in: _Dest=0x7a61ef0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.722] wcscat (in: _Dest=0x7a61ef0, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" [0162.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0162.723] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe792b100, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe792b100, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0162.723] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0162.723] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0162.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5db8 [0162.723] wcscpy (in: _Dest=0x3eb5db8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.723] wcscat (in: _Dest=0x3eb5db8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.724] wcscat (in: _Dest=0x3eb5db8, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" [0162.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0162.725] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x35682930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0162.725] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0162.725] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0162.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61f80 [0162.725] wcscpy (in: _Dest=0x7a61f80, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.725] wcscat (in: _Dest=0x7a61f80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.725] wcscat (in: _Dest=0x7a61f80, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" [0162.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0162.726] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0162.726] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0162.726] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0162.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df1448 [0162.727] wcscpy (in: _Dest=0x3df1448, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.727] wcscat (in: _Dest=0x3df1448, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.727] wcscat (in: _Dest=0x3df1448, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" [0162.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0162.728] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0162.728] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0162.728] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0162.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2eb8 [0162.728] wcscpy (in: _Dest=0x3df2eb8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.728] wcscat (in: _Dest=0x3df2eb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.728] wcscat (in: _Dest=0x3df2eb8, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" [0162.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0162.730] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a568800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a568800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0162.730] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0162.730] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0162.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6bf8 [0162.730] wcscpy (in: _Dest=0x3eb6bf8, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.730] wcscat (in: _Dest=0x3eb6bf8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.730] wcscat (in: _Dest=0x3eb6bf8, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" [0162.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0162.937] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b87b500, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b87b500, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0162.937] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0162.937] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0162.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7448 [0162.937] wcscpy (in: _Dest=0x3eb7448, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0162.937] wcscat (in: _Dest=0x3eb7448, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0162.937] wcscat (in: _Dest=0x3eb7448, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" [0166.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0166.625] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0166.625] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0166.625] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0166.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d408 [0166.625] wcscpy (in: _Dest=0x32d408, _Source="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" [0166.625] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0166.625] wcscat (in: _Dest=0x32d408, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll") returned="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" [0166.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0166.627] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0166.627] FindClose (in: hFindFile=0x7a2d5c0 | out: hFindFile=0x7a2d5c0) returned 1 [0166.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1340) returned 1 [0166.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26d98) returned 1 [0166.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0928) returned 1 Thread: id = 1864 os_tid = 0x24dc [0145.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26628 [0145.153] wcscpy (in: _Dest=0x7a26628, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" [0145.153] wcscat (in: _Dest=0x7a26628, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\" [0145.153] wcscat (in: _Dest=0x7a26628, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*" [0145.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb4830 [0145.153] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73ef0 [0145.153] wcscmp (_String1=".", _String2=".") returned 0 [0145.153] FindNextFileW (in: hFindFile=0x3e73ef0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.154] wcscmp (_String1="..", _String2=".") returned 1 [0145.154] wcscmp (_String1="..", _String2="..") returned 0 [0145.154] FindNextFileW (in: hFindFile=0x3e73ef0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0145.154] wcscmp (_String1="Security", _String2=".") returned 1 [0145.154] wcscmp (_String1="Security", _String2="..") returned 1 [0145.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a218 [0145.154] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate" [0145.154] wcscat (in: _Dest=0x3e1a218, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\" [0145.154] wcscat (in: _Dest=0x3e1a218, _Source="Security" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0146.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1a218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0146.895] FindNextFileW (in: hFindFile=0x3e73ef0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0146.895] FindClose (in: hFindFile=0x3e73ef0 | out: hFindFile=0x3e73ef0) returned 1 [0146.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb4830) returned 1 [0146.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 [0146.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf200) returned 1 Thread: id = 1865 os_tid = 0x24e0 [0145.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b018 [0145.160] wcscpy (in: _Dest=0x3e3b018, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" [0145.161] wcscat (in: _Dest=0x3e3b018, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\" [0145.161] wcscat (in: _Dest=0x3e3b018, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*" [0145.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0145.161] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73f30 [0145.161] wcscmp (_String1=".", _String2=".") returned 0 [0145.161] FindNextFileW (in: hFindFile=0x3e73f30, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a2c7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xebaa5b52, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x88d007db, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.161] wcscmp (_String1="..", _String2=".") returned 1 [0145.161] wcscmp (_String1="..", _String2="..") returned 0 [0145.161] FindNextFileW (in: hFindFile=0x3e73f30, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0145.162] wcscmp (_String1="en-US", _String2=".") returned 1 [0145.162] wcscmp (_String1="en-US", _String2="..") returned 1 [0145.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a018 [0145.162] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0" [0145.162] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\" [0145.162] wcscat (in: _Dest=0x3e1a018, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0146.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0146.936] FindNextFileW (in: hFindFile=0x3e73f30, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0146.936] FindClose (in: hFindFile=0x3e73f30 | out: hFindFile=0x3e73f30) returned 1 [0146.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0146.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0146.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a391f0) returned 1 Thread: id = 1866 os_tid = 0x24e4 [0145.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3bae0 [0145.162] wcscpy (in: _Dest=0x3e3bae0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys" [0145.163] wcscat (in: _Dest=0x3e3bae0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\" [0145.163] wcscat (in: _Dest=0x3e3bae0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" [0145.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3c28 [0145.163] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73fb0 [0145.163] wcscmp (_String1=".", _String2=".") returned 0 [0145.163] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.163] wcscmp (_String1="..", _String2=".") returned 1 [0145.163] wcscmp (_String1="..", _String2="..") returned 0 [0145.163] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.163] FindClose (in: hFindFile=0x3e73fb0 | out: hFindFile=0x3e73fb0) returned 1 [0145.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3c28) returned 1 [0145.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0145.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39260) returned 1 Thread: id = 1867 os_tid = 0x24e8 [0145.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3e3bae0 [0145.165] wcscpy (in: _Dest=0x3e3bae0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys" [0145.165] wcscat (in: _Dest=0x3e3bae0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\" [0145.165] wcscat (in: _Dest=0x3e3bae0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*" [0145.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3c28 [0145.166] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73fb0 [0145.166] wcscmp (_String1=".", _String2=".") returned 0 [0145.166] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.166] wcscmp (_String1="..", _String2=".") returned 1 [0145.166] wcscmp (_String1="..", _String2="..") returned 0 [0145.166] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e7177a, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e7177a, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6cd9442c, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.167] FindClose (in: hFindFile=0x3e73fb0 | out: hFindFile=0x3e73fb0) returned 1 [0145.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3c28) returned 1 [0145.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0145.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a392d0) returned 1 Thread: id = 1868 os_tid = 0x24ec [0145.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a392d0 [0145.168] wcscpy (in: _Dest=0x7a392d0, _Source="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18" [0145.168] wcscat (in: _Dest=0x7a392d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\" [0145.169] wcscat (in: _Dest=0x7a392d0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*" [0145.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3c28 [0145.169] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3c28) returned 1 [0145.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a392d0) returned 1 [0145.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39180) returned 1 Thread: id = 1869 os_tid = 0x24f0 [0145.171] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat")) returned 0x2020 [0145.171] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x20) returned 0 [0145.171] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.172] GetLastError () returned 0x5 [0145.172] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", dwFileAttributes=0x2020) returned 0 [0145.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7a2f8) returned 1 Thread: id = 1870 os_tid = 0x24f4 [0145.173] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp")) returned 0x20 [0145.174] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0145.174] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.174] GetLastError () returned 0x5 [0145.174] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", dwFileAttributes=0x20) returned 0 [0145.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c428) returned 1 Thread: id = 1871 os_tid = 0x24f8 [0145.176] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp")) returned 0x20 [0145.176] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0145.176] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.176] GetLastError () returned 0x5 [0145.176] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp", dwFileAttributes=0x20) returned 0 [0145.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c638) returned 1 Thread: id = 1872 os_tid = 0x24fc [0145.178] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp")) returned 0x20 [0145.178] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0145.178] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.178] GetLastError () returned 0x5 [0145.178] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp", dwFileAttributes=0x20) returned 0 [0145.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c3b0) returned 1 Thread: id = 1873 os_tid = 0x2500 [0145.180] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp")) returned 0x20 [0145.180] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0145.180] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.181] GetLastError () returned 0x5 [0145.181] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp", dwFileAttributes=0x20) returned 0 [0145.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c670) returned 1 Thread: id = 1874 os_tid = 0x2504 [0145.183] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp")) returned 0x20 [0145.183] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0145.183] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.183] GetLastError () returned 0x5 [0145.183] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp", dwFileAttributes=0x20) returned 0 [0145.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c300) returned 1 Thread: id = 1875 os_tid = 0x2508 [0145.185] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp")) returned 0x20 [0145.185] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0145.185] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.186] GetLastError () returned 0x5 [0145.186] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp", dwFileAttributes=0x20) returned 0 [0145.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c1a0) returned 1 Thread: id = 1876 os_tid = 0x250c [0145.188] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp")) returned 0x20 [0145.188] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0145.188] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.188] GetLastError () returned 0x5 [0145.188] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp", dwFileAttributes=0x20) returned 0 [0145.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c460) returned 1 Thread: id = 1877 os_tid = 0x2510 [0145.190] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp")) returned 0x20 [0145.190] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0145.190] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.190] GetLastError () returned 0x5 [0145.190] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp", dwFileAttributes=0x20) returned 0 [0145.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c510) returned 1 Thread: id = 1878 os_tid = 0x2514 [0145.192] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp")) returned 0x20 [0145.192] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0145.192] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.193] GetLastError () returned 0x5 [0145.193] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp", dwFileAttributes=0x20) returned 0 [0145.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c7d0) returned 1 Thread: id = 1879 os_tid = 0x2518 [0145.194] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp")) returned 0x20 [0145.195] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0145.195] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.195] GetLastError () returned 0x5 [0145.195] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp", dwFileAttributes=0x20) returned 0 [0145.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c880) returned 1 Thread: id = 1880 os_tid = 0x251c [0145.196] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp")) returned 0x20 [0145.197] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0145.197] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.197] GetLastError () returned 0x5 [0145.197] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp", dwFileAttributes=0x20) returned 0 [0145.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bf90) returned 1 Thread: id = 1881 os_tid = 0x2520 [0145.199] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp")) returned 0x20 [0145.199] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0145.199] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.199] GetLastError () returned 0x5 [0145.199] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp", dwFileAttributes=0x20) returned 0 [0145.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c250) returned 1 Thread: id = 1882 os_tid = 0x2524 [0145.201] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp")) returned 0x20 [0145.201] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0145.201] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.201] GetLastError () returned 0x5 [0145.201] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp", dwFileAttributes=0x20) returned 0 [0145.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c930) returned 1 Thread: id = 1883 os_tid = 0x2528 [0145.203] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp")) returned 0x20 [0145.203] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0145.204] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.204] GetLastError () returned 0x5 [0145.204] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp", dwFileAttributes=0x20) returned 0 [0145.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c5c0) returned 1 Thread: id = 1884 os_tid = 0x252c [0145.206] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp")) returned 0x20 [0145.206] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0145.206] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.206] GetLastError () returned 0x5 [0145.207] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp", dwFileAttributes=0x20) returned 0 [0145.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c720) returned 1 Thread: id = 1885 os_tid = 0x2530 [0145.208] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp")) returned 0x20 [0145.209] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0145.209] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.209] GetLastError () returned 0x5 [0145.209] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp", dwFileAttributes=0x20) returned 0 [0145.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3c9e0) returned 1 Thread: id = 1886 os_tid = 0x2534 [0145.211] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp")) returned 0x20 [0145.211] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0145.211] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.212] GetLastError () returned 0x5 [0145.212] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp", dwFileAttributes=0x20) returned 0 [0145.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ca90) returned 1 Thread: id = 1887 os_tid = 0x2538 [0145.214] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp")) returned 0x20 [0145.214] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0145.214] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.214] GetLastError () returned 0x5 [0145.215] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp", dwFileAttributes=0x20) returned 0 [0145.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cb40) returned 1 Thread: id = 1888 os_tid = 0x253c [0145.216] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp")) returned 0x20 [0145.217] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0145.217] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.217] GetLastError () returned 0x5 [0145.217] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp", dwFileAttributes=0x20) returned 0 [0145.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3cbf0) returned 1 Thread: id = 1889 os_tid = 0x2540 [0145.219] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp")) returned 0x20 [0145.219] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0145.219] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.220] GetLastError () returned 0x5 [0145.220] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp", dwFileAttributes=0x20) returned 0 [0145.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66090) returned 1 Thread: id = 1890 os_tid = 0x2544 [0145.222] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp")) returned 0x20 [0145.222] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0145.222] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.222] GetLastError () returned 0x5 [0145.222] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp", dwFileAttributes=0x20) returned 0 [0145.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66140) returned 1 Thread: id = 1891 os_tid = 0x2548 [0145.225] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp")) returned 0x20 [0145.225] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0145.225] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.225] GetLastError () returned 0x5 [0145.225] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp", dwFileAttributes=0x20) returned 0 [0145.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a661f0) returned 1 Thread: id = 1892 os_tid = 0x254c [0145.227] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp")) returned 0x20 [0145.228] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0145.228] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.228] GetLastError () returned 0x5 [0145.228] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp", dwFileAttributes=0x20) returned 0 [0145.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a662a0) returned 1 Thread: id = 1893 os_tid = 0x2550 [0145.248] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp")) returned 0x20 [0145.249] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0145.249] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.249] GetLastError () returned 0x5 [0145.249] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp", dwFileAttributes=0x20) returned 0 [0145.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66350) returned 1 Thread: id = 1894 os_tid = 0x2554 [0145.255] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp")) returned 0x20 [0145.255] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0145.256] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.256] GetLastError () returned 0x5 [0145.256] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp", dwFileAttributes=0x20) returned 0 [0145.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66400) returned 1 Thread: id = 1895 os_tid = 0x2558 [0145.258] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp")) returned 0x20 [0145.258] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0145.258] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.258] GetLastError () returned 0x5 [0145.258] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp", dwFileAttributes=0x20) returned 0 [0145.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a664b0) returned 1 Thread: id = 1896 os_tid = 0x255c [0145.260] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp")) returned 0x20 [0145.260] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0145.260] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.261] GetLastError () returned 0x5 [0145.261] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp", dwFileAttributes=0x20) returned 0 [0145.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 Thread: id = 1897 os_tid = 0x2560 [0145.965] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp")) returned 0x20 [0145.966] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0145.966] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0145.966] GetLastError () returned 0x5 [0145.966] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp", dwFileAttributes=0x20) returned 0 [0145.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66610) returned 1 Thread: id = 1898 os_tid = 0x257c [0145.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif")) returned 0x20 [0148.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", dwFileAttributes=0x20) returned 0 [0148.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.552] GetLastError () returned 0x5 [0148.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", dwFileAttributes=0x20) returned 0 [0148.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 Thread: id = 1899 os_tid = 0x2580 [0145.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif")) returned 0x20 [0148.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", dwFileAttributes=0x20) returned 0 [0148.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.782] GetLastError () returned 0x5 [0148.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", dwFileAttributes=0x20) returned 0 [0148.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7a2f8) returned 1 Thread: id = 1900 os_tid = 0x2584 [0145.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif")) returned 0x20 [0148.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", dwFileAttributes=0x20) returned 0 [0148.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.816] GetLastError () returned 0x5 [0148.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", dwFileAttributes=0x20) returned 0 [0148.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 Thread: id = 1901 os_tid = 0x2588 [0145.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif")) returned 0x20 [0148.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", dwFileAttributes=0x20) returned 0 [0148.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.350] GetLastError () returned 0x5 [0148.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", dwFileAttributes=0x20) returned 0 [0148.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e5d0) returned 1 Thread: id = 1902 os_tid = 0x258c [0145.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif")) returned 0x20 [0148.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", dwFileAttributes=0x20) returned 0 [0148.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.814] GetLastError () returned 0x5 [0148.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", dwFileAttributes=0x20) returned 0 [0148.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e528) returned 1 Thread: id = 1903 os_tid = 0x2590 [0145.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif")) returned 0x20 [0148.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", dwFileAttributes=0x20) returned 0 [0148.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.812] GetLastError () returned 0x5 [0148.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", dwFileAttributes=0x20) returned 0 [0148.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e678) returned 1 Thread: id = 1904 os_tid = 0x2594 [0145.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif")) returned 0x20 [0148.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", dwFileAttributes=0x20) returned 0 [0148.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.811] GetLastError () returned 0x5 [0148.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", dwFileAttributes=0x20) returned 0 [0148.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e720) returned 1 Thread: id = 1905 os_tid = 0x2598 [0145.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif")) returned 0x20 [0148.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", dwFileAttributes=0x20) returned 0 [0148.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.809] GetLastError () returned 0x5 [0148.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", dwFileAttributes=0x20) returned 0 [0148.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e7c8) returned 1 Thread: id = 1906 os_tid = 0x259c [0145.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif")) returned 0x20 [0148.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", dwFileAttributes=0x20) returned 0 [0148.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.808] GetLastError () returned 0x5 [0148.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", dwFileAttributes=0x20) returned 0 [0148.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e870) returned 1 Thread: id = 1907 os_tid = 0x25a0 [0145.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif")) returned 0x20 [0148.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", dwFileAttributes=0x20) returned 0 [0148.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.806] GetLastError () returned 0x5 [0148.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", dwFileAttributes=0x20) returned 0 [0148.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 Thread: id = 1908 os_tid = 0x25a4 [0145.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif")) returned 0x20 [0148.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", dwFileAttributes=0x20) returned 0 [0148.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.804] GetLastError () returned 0x5 [0148.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", dwFileAttributes=0x20) returned 0 [0148.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e9c0) returned 1 Thread: id = 1909 os_tid = 0x25a8 [0145.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif")) returned 0x20 [0148.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", dwFileAttributes=0x20) returned 0 [0148.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.802] GetLastError () returned 0x5 [0148.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", dwFileAttributes=0x20) returned 0 [0148.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ea68) returned 1 Thread: id = 1910 os_tid = 0x25ac [0145.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif")) returned 0x20 [0148.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", dwFileAttributes=0x20) returned 0 [0148.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.799] GetLastError () returned 0x5 [0148.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", dwFileAttributes=0x20) returned 0 [0148.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5eb10) returned 1 Thread: id = 1911 os_tid = 0x25b0 [0145.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif")) returned 0x20 [0148.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", dwFileAttributes=0x20) returned 0 [0148.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.797] GetLastError () returned 0x5 [0148.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", dwFileAttributes=0x20) returned 0 [0148.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ebb8) returned 1 Thread: id = 1912 os_tid = 0x25b4 [0145.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif")) returned 0x20 [0148.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", dwFileAttributes=0x20) returned 0 [0148.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.795] GetLastError () returned 0x5 [0148.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", dwFileAttributes=0x20) returned 0 [0148.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ec60) returned 1 Thread: id = 1913 os_tid = 0x25b8 [0145.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif")) returned 0x20 [0148.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", dwFileAttributes=0x20) returned 0 [0148.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.792] GetLastError () returned 0x5 [0148.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", dwFileAttributes=0x20) returned 0 [0148.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ed08) returned 1 Thread: id = 1914 os_tid = 0x25bc [0145.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif")) returned 0x20 [0148.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", dwFileAttributes=0x20) returned 0 [0148.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.790] GetLastError () returned 0x5 [0148.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", dwFileAttributes=0x20) returned 0 [0148.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5edb0) returned 1 Thread: id = 1915 os_tid = 0x25c0 [0145.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif")) returned 0x20 [0148.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", dwFileAttributes=0x20) returned 0 [0148.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.788] GetLastError () returned 0x5 [0148.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", dwFileAttributes=0x20) returned 0 [0148.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ee58) returned 1 Thread: id = 1916 os_tid = 0x25c4 [0146.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif")) returned 0x20 [0148.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", dwFileAttributes=0x20) returned 0 [0148.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.786] GetLastError () returned 0x5 [0148.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", dwFileAttributes=0x20) returned 0 [0148.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ef00) returned 1 Thread: id = 1917 os_tid = 0x25c8 [0146.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif")) returned 0x20 [0148.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", dwFileAttributes=0x20) returned 0 [0148.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.784] GetLastError () returned 0x5 [0148.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", dwFileAttributes=0x20) returned 0 [0148.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5efa8) returned 1 Thread: id = 1918 os_tid = 0x25cc [0146.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif")) returned 0x20 [0148.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", dwFileAttributes=0x20) returned 0 [0148.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.817] GetLastError () returned 0x5 [0148.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", dwFileAttributes=0x20) returned 0 [0148.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f050) returned 1 Thread: id = 1919 os_tid = 0x25d8 [0146.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg")) returned 0x20 [0146.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.435] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.435] GetLastError () returned 0x5 [0146.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7448) returned 1 Thread: id = 1920 os_tid = 0x25dc [0146.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg")) returned 0x20 [0146.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.441] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.441] GetLastError () returned 0x5 [0146.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 Thread: id = 1921 os_tid = 0x25e0 [0146.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg")) returned 0x20 [0146.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.454] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.454] GetLastError () returned 0x5 [0146.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5f80) returned 1 Thread: id = 1922 os_tid = 0x25e4 [0146.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg")) returned 0x20 [0146.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.464] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.464] GetLastError () returned 0x5 [0146.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 Thread: id = 1923 os_tid = 0x25e8 [0146.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg")) returned 0x20 [0146.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.470] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.471] GetLastError () returned 0x5 [0146.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64090) returned 1 Thread: id = 1924 os_tid = 0x25ec [0146.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg")) returned 0x20 [0146.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.473] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.473] GetLastError () returned 0x5 [0146.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64128) returned 1 Thread: id = 1925 os_tid = 0x25f0 [0146.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg")) returned 0x20 [0146.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.475] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.476] GetLastError () returned 0x5 [0146.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a641c0) returned 1 Thread: id = 1926 os_tid = 0x25f4 [0146.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg")) returned 0x20 [0146.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.482] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.482] GetLastError () returned 0x5 [0146.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64258) returned 1 Thread: id = 1927 os_tid = 0x25f8 [0146.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg")) returned 0x20 [0146.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.485] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.485] GetLastError () returned 0x5 [0146.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a642f0) returned 1 Thread: id = 1928 os_tid = 0x25fc [0146.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg")) returned 0x20 [0146.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.487] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.487] GetLastError () returned 0x5 [0146.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64388) returned 1 Thread: id = 1929 os_tid = 0x2600 [0146.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg")) returned 0x20 [0146.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.490] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.490] GetLastError () returned 0x5 [0146.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64420) returned 1 Thread: id = 1930 os_tid = 0x2604 [0146.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg")) returned 0x20 [0146.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.493] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.493] GetLastError () returned 0x5 [0146.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a644b8) returned 1 Thread: id = 1931 os_tid = 0x2608 [0146.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg")) returned 0x20 [0146.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.506] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.506] GetLastError () returned 0x5 [0146.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64550) returned 1 Thread: id = 1932 os_tid = 0x260c [0146.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg")) returned 0x20 [0146.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.514] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.514] GetLastError () returned 0x5 [0146.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a645e8) returned 1 Thread: id = 1933 os_tid = 0x2610 [0146.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg")) returned 0x20 [0146.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.516] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.517] GetLastError () returned 0x5 [0146.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64680) returned 1 Thread: id = 1934 os_tid = 0x2614 [0146.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg")) returned 0x20 [0146.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.532] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.532] GetLastError () returned 0x5 [0146.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64718) returned 1 Thread: id = 1935 os_tid = 0x2618 [0146.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg")) returned 0x20 [0146.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.556] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.556] GetLastError () returned 0x5 [0146.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0146.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a647b0) returned 1 Thread: id = 1936 os_tid = 0x261c [0146.558] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip")) returned 0x2020 [0146.560] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", dwFileAttributes=0x20) returned 1 [0150.234] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2110 [0150.234] GetFileSizeEx (in: hFile=0x2110, lpFileSize=0xa33fbd4 | out: lpFileSize=0xa33fbd4*=42495) returned 1 [0150.235] SetFilePointerEx (in: hFile=0x2110, liDistanceToMove=0xa5fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.235] ReadFile (in: hFile=0x2110, lpBuffer=0xa33fbb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa33fbc0, lpOverlapped=0x0 | out: lpBuffer=0xa33fbb0*, lpNumberOfBytesRead=0xa33fbc0*=0x4, lpOverlapped=0x0) returned 1 [0150.239] SetFilePointerEx (in: hFile=0x2110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0150.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0150.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0150.240] NtQuerySystemTime (in: CurrentTime=0xa33fb48 | out: CurrentTime=0xa33fb48*=132462177290256000) returned 0x0 [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x73bb7a38 [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x46ff460 [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x69429506 [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x3844a09e [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x63f57438 [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x24949e98 [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x12295592 [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x499929a3 [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x69901dc9 [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x10d2475b [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x39baf04d [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x7c2eeda [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x56c3219a [0150.240] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x2c429f53 [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x6e678300 [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x3b5403c6 [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x59df4c65 [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x1804ce6e [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x901eae [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x774ae61f [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x4ddf2206 [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x7008e27f [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x181e4535 [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x4f5a5fdd [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x67d6c0d5 [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x370e0f79 [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x2471d4fd [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x4ef68bbf [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x7e91aa0 [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x13dde793 [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x1e0b1f0f [0150.241] RtlRandomEx (in: Seed=0xa33fb40 | out: Seed=0xa33fb40) returned 0x44b0c0cc [0150.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0150.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0150.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0150.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0150.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0150.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0150.255] SetFilePointerEx (in: hFile=0x2110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.255] ReadFile (in: hFile=0x2110, lpBuffer=0x7bf63a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa33fb48, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesRead=0xa33fb48*=0x3c00, lpOverlapped=0x0) returned 1 [0150.256] SetFilePointerEx (in: hFile=0x2110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24620 [0150.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0150.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0150.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c98360 [0150.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0150.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0150.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0150.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0150.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24620) returned 1 [0150.257] WriteFile (in: hFile=0x2110, lpBuffer=0x7c98360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa33fb48, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesWritten=0xa33fb48*=0x3c00, lpOverlapped=0x0) returned 1 [0154.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c98360) returned 1 [0154.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0154.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e798a8 [0154.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49a88 [0154.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0154.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e539e0 [0154.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e539e0) returned 1 [0154.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79720 [0154.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e539e0 [0154.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a30 [0154.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a30) returned 1 [0154.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0154.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0154.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x300d948 [0154.122] SetFilePointerEx (in: hFile=0x2110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.122] WriteFile (in: hFile=0x2110, lpBuffer=0x300d948*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xa33fbc8, lpOverlapped=0x0 | out: lpBuffer=0x300d948*, lpNumberOfBytesWritten=0xa33fbc8*=0x10e, lpOverlapped=0x0) returned 1 [0154.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0154.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0154.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5afd8 [0154.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0154.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0154.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0154.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x3e85500 [0154.163] sprintf (in: _Dest=0x3e85500, _Format="%c%c" | out: _Dest="54") returned 2 [0154.163] sprintf (in: _Dest=0x3e85502, _Format="%c%c" | out: _Dest="9b") returned 2 [0154.163] sprintf (in: _Dest=0x3e85504, _Format="%c%c" | out: _Dest="70") returned 2 [0154.163] sprintf (in: _Dest=0x3e85506, _Format="%c%c" | out: _Dest="23") returned 2 [0154.163] sprintf (in: _Dest=0x3e85508, _Format="%c%c" | out: _Dest="a2") returned 2 [0154.163] sprintf (in: _Dest=0x3e8550a, _Format="%c%c" | out: _Dest="b2") returned 2 [0154.163] sprintf (in: _Dest=0x3e8550c, _Format="%c%c" | out: _Dest="df") returned 2 [0154.163] sprintf (in: _Dest=0x3e8550e, _Format="%c%c" | out: _Dest="30") returned 2 [0154.163] sprintf (in: _Dest=0x3e85510, _Format="%c%c" | out: _Dest="16") returned 2 [0154.163] sprintf (in: _Dest=0x3e85512, _Format="%c%c" | out: _Dest="f9") returned 2 [0154.163] sprintf (in: _Dest=0x3e85514, _Format="%c%c" | out: _Dest="7d") returned 2 [0154.163] sprintf (in: _Dest=0x3e85516, _Format="%c%c" | out: _Dest="78") returned 2 [0154.163] sprintf (in: _Dest=0x3e85518, _Format="%c%c" | out: _Dest="5e") returned 2 [0154.163] sprintf (in: _Dest=0x3e8551a, _Format="%c%c" | out: _Dest="b5") returned 2 [0154.163] sprintf (in: _Dest=0x3e8551c, _Format="%c%c" | out: _Dest="94") returned 2 [0154.163] sprintf (in: _Dest=0x3e8551e, _Format="%c%c" | out: _Dest="8d") returned 2 [0154.164] sprintf (in: _Dest=0x3e85520, _Format="%c%c" | out: _Dest="6b") returned 2 [0154.164] sprintf (in: _Dest=0x3e85522, _Format="%c%c" | out: _Dest="54") returned 2 [0154.164] sprintf (in: _Dest=0x3e85524, _Format="%c%c" | out: _Dest="e3") returned 2 [0154.164] sprintf (in: _Dest=0x3e85526, _Format="%c%c" | out: _Dest="ff") returned 2 [0154.164] sprintf (in: _Dest=0x3e85528, _Format="%c%c" | out: _Dest="ce") returned 2 [0154.164] sprintf (in: _Dest=0x3e8552a, _Format="%c%c" | out: _Dest="09") returned 2 [0154.164] sprintf (in: _Dest=0x3e8552c, _Format="%c%c" | out: _Dest="c1") returned 2 [0154.164] sprintf (in: _Dest=0x3e8552e, _Format="%c%c" | out: _Dest="9b") returned 2 [0154.164] sprintf (in: _Dest=0x3e85530, _Format="%c%c" | out: _Dest="b4") returned 2 [0154.164] sprintf (in: _Dest=0x3e85532, _Format="%c%c" | out: _Dest="9d") returned 2 [0154.164] sprintf (in: _Dest=0x3e85534, _Format="%c%c" | out: _Dest="1a") returned 2 [0154.164] sprintf (in: _Dest=0x3e85536, _Format="%c%c" | out: _Dest="fe") returned 2 [0154.164] RtlInitAnsiString (in: DestinationString=0xa33fb50, SourceString="549b7023a2b2df3016f97d785eb5948d6b54e3ffce09c19bb49d1afe" | out: DestinationString="549b7023a2b2df3016f97d785eb5948d6b54e3ffce09c19bb49d1afe") [0154.164] RtlAnsiStringToUnicodeString (in: DestinationString=0xa33fb48, SourceString="549b7023a2b2df3016f97d785eb5948d6b54e3ffce09c19bb49d1afe", AllocateDestinationString=1 | out: DestinationString="549b7023a2b2df3016f97d785eb5948d6b54e3ffce09c19bb49d1afe") returned 0x0 [0154.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a498 [0154.164] RtlFreeAnsiString (AnsiString="5") [0154.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0154.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300d948) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e539e0) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0154.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b80) returned 1 [0154.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4460 [0154.165] wcscat (in: _Dest=0x3df4460, _Source="549b7023a2b2df" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\549b7023a2b2df") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\549b7023a2b2df" [0154.165] wcscat (in: _Dest=0x3df4460, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\549b7023a2b2df.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\549b7023a2b2df.68814f" [0154.165] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\549b7023a2b2df.68814f", NtPathName=0xa33fb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\549b7023a2b2df.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf0c8 [0154.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf0c8) returned 1 [0154.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57188) returned 1 [0154.189] NtQueryInformationFile (in: FileHandle=0x2110, IoStatusBlock=0xa33fb18, FileInformation=0xa33fb20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa33fb18, FileInformation=0xa33fb20) returned 0x0 [0154.189] NtSetInformationFile (FileHandle=0x2110, IoStatusBlock=0xa33fb18, FileInformation=0xa33fb20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4460) returned 1 [0154.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a498) returned 1 [0154.213] FlushFileBuffers (hFile=0x2110) returned 1 [0154.216] CloseHandle (hObject=0x2110) returned 1 [0154.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64388 [0154.220] wcscpy (in: _Dest=0x7a64388, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0154.221] wcscat (in: _Dest=0x7a64388, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" [0154.221] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\68814f-readme.txt")) returned 0xffffffff [0154.221] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1728 [0154.232] WriteFile (in: hFile=0x1728, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa33fb5c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa33fb5c*=0x8b9, lpOverlapped=0x0) returned 1 [0154.239] CloseHandle (hObject=0x1728) returned 1 [0154.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64388) returned 1 [0154.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 Thread: id = 1937 os_tid = 0x2620 [0146.569] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages")) returned 0x2020 [0146.570] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages", dwFileAttributes=0x20) returned 1 [0150.155] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ca0 [0150.155] GetFileSizeEx (in: hFile=0x1ca0, lpFileSize=0xa8df8cc | out: lpFileSize=0xa8df8cc*=8192) returned 1 [0150.155] SetFilePointerEx (in: hFile=0x1ca0, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.155] ReadFile (in: hFile=0x1ca0, lpBuffer=0xa8df8a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa8df8b8, lpOverlapped=0x0 | out: lpBuffer=0xa8df8a8*, lpNumberOfBytesRead=0xa8df8b8*=0x4, lpOverlapped=0x0) returned 1 [0150.159] SetFilePointerEx (in: hFile=0x1ca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0150.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2b0 [0150.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0150.159] NtQuerySystemTime (in: CurrentTime=0xa8df840 | out: CurrentTime=0xa8df840*=132462177289476000) returned 0x0 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x1c1abe59 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x3fe7e2fc [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x63b829f3 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x82b116e [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x617b4b8d [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x6a7c48a5 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x51049cfc [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x1db14d87 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x706f6794 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x13c5a014 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x34badf58 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x66ada63c [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x66154770 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x816b199 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x6fb406d9 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x4323a7bb [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x3818d88 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x30ccc081 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x477e3494 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x70fcb2da [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x3ef83bac [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x554d539d [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0xb204da7 [0150.160] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x2eb81b92 [0150.161] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x3666d835 [0150.161] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x37ba8a04 [0150.161] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x17bed1d7 [0150.161] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x5db53098 [0150.161] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x79204d51 [0150.161] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x7c5050f1 [0150.161] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x71cd39d [0150.161] RtlRandomEx (in: Seed=0xa8df838 | out: Seed=0xa8df838) returned 0x1cbbd185 [0150.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0150.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0150.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0150.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0150.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0150.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85980 [0150.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0150.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0150.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0150.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0150.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0150.173] ReadFile (in: hFile=0x1ca0, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0xa8df834, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0xa8df834*=0x2000, lpOverlapped=0x0) returned 1 [0150.175] SetFilePointerEx (in: hFile=0x1ca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.175] WriteFile (in: hFile=0x1ca0, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0xa8df838, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0xa8df838*=0x2000, lpOverlapped=0x0) returned 1 [0154.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0154.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0154.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0154.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0154.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0154.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85980) returned 1 [0154.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac3b0 [0154.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85980 [0154.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0154.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0154.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3dac3e8 [0154.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0154.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0154.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0154.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85980) returned 1 [0154.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3dec940 [0154.274] SetFilePointerEx (in: hFile=0x1ca0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.274] WriteFile (in: hFile=0x1ca0, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xa8df8c0, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xa8df8c0*=0x10e, lpOverlapped=0x0) returned 1 [0154.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85980 [0154.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0154.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0154.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5ad80 [0154.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0154.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0154.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0154.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85980) returned 1 [0154.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x3e85980 [0154.292] sprintf (in: _Dest=0x3e85980, _Format="%c%c" | out: _Dest="f8") returned 2 [0154.292] sprintf (in: _Dest=0x3e85982, _Format="%c%c" | out: _Dest="55") returned 2 [0154.292] sprintf (in: _Dest=0x3e85984, _Format="%c%c" | out: _Dest="bd") returned 2 [0154.292] sprintf (in: _Dest=0x3e85986, _Format="%c%c" | out: _Dest="a7") returned 2 [0154.292] sprintf (in: _Dest=0x3e85988, _Format="%c%c" | out: _Dest="78") returned 2 [0154.292] sprintf (in: _Dest=0x3e8598a, _Format="%c%c" | out: _Dest="be") returned 2 [0154.292] sprintf (in: _Dest=0x3e8598c, _Format="%c%c" | out: _Dest="1b") returned 2 [0154.292] sprintf (in: _Dest=0x3e8598e, _Format="%c%c" | out: _Dest="42") returned 2 [0154.292] sprintf (in: _Dest=0x3e85990, _Format="%c%c" | out: _Dest="1f") returned 2 [0154.293] sprintf (in: _Dest=0x3e85992, _Format="%c%c" | out: _Dest="6e") returned 2 [0154.293] sprintf (in: _Dest=0x3e85994, _Format="%c%c" | out: _Dest="5d") returned 2 [0154.293] sprintf (in: _Dest=0x3e85996, _Format="%c%c" | out: _Dest="6f") returned 2 [0154.293] sprintf (in: _Dest=0x3e85998, _Format="%c%c" | out: _Dest="54") returned 2 [0154.293] sprintf (in: _Dest=0x3e8599a, _Format="%c%c" | out: _Dest="df") returned 2 [0154.293] sprintf (in: _Dest=0x3e8599c, _Format="%c%c" | out: _Dest="5a") returned 2 [0154.293] sprintf (in: _Dest=0x3e8599e, _Format="%c%c" | out: _Dest="24") returned 2 [0154.293] sprintf (in: _Dest=0x3e859a0, _Format="%c%c" | out: _Dest="73") returned 2 [0154.293] sprintf (in: _Dest=0x3e859a2, _Format="%c%c" | out: _Dest="bb") returned 2 [0154.293] sprintf (in: _Dest=0x3e859a4, _Format="%c%c" | out: _Dest="8b") returned 2 [0154.293] sprintf (in: _Dest=0x3e859a6, _Format="%c%c" | out: _Dest="a8") returned 2 [0154.293] sprintf (in: _Dest=0x3e859a8, _Format="%c%c" | out: _Dest="6a") returned 2 [0154.293] sprintf (in: _Dest=0x3e859aa, _Format="%c%c" | out: _Dest="69") returned 2 [0154.293] sprintf (in: _Dest=0x3e859ac, _Format="%c%c" | out: _Dest="77") returned 2 [0154.293] sprintf (in: _Dest=0x3e859ae, _Format="%c%c" | out: _Dest="b1") returned 2 [0154.293] sprintf (in: _Dest=0x3e859b0, _Format="%c%c" | out: _Dest="69") returned 2 [0154.293] sprintf (in: _Dest=0x3e859b2, _Format="%c%c" | out: _Dest="97") returned 2 [0154.293] sprintf (in: _Dest=0x3e859b4, _Format="%c%c" | out: _Dest="c7") returned 2 [0154.293] sprintf (in: _Dest=0x3e859b6, _Format="%c%c" | out: _Dest="57") returned 2 [0154.293] RtlInitAnsiString (in: DestinationString=0xa8df848, SourceString="f855bda778be1b421f6e5d6f54df5a2473bb8ba86a6977b16997c757" | out: DestinationString="f855bda778be1b421f6e5d6f54df5a2473bb8ba86a6977b16997c757") [0154.293] RtlAnsiStringToUnicodeString (in: DestinationString=0xa8df840, SourceString="f855bda778be1b421f6e5d6f54df5a2473bb8ba86a6977b16997c757", AllocateDestinationString=1 | out: DestinationString="f855bda778be1b421f6e5d6f54df5a2473bb8ba86a6977b16997c757") returned 0x0 [0154.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19298 [0154.293] RtlFreeAnsiString (AnsiString="f") [0154.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85980) returned 1 [0154.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0154.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0154.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0154.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3e8) returned 1 [0154.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0154.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0154.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0154.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0154.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0154.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0154.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5f40 [0154.294] wcscat (in: _Dest=0x3df5f40, _Source="f855bda778be1b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\f855bda778be1b") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\f855bda778be1b" [0154.294] wcscat (in: _Dest=0x3df5f40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\f855bda778be1b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\f855bda778be1b.68814f" [0154.294] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\f855bda778be1b.68814f", NtPathName=0xa8df838, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\f855bda778be1b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf5d0 [0154.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf5d0) returned 1 [0154.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f368f0) returned 1 [0154.296] NtQueryInformationFile (in: FileHandle=0x1ca0, IoStatusBlock=0xa8df810, FileInformation=0xa8df818, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa8df810, FileInformation=0xa8df818) returned 0x0 [0154.296] NtSetInformationFile (FileHandle=0x1ca0, IoStatusBlock=0xa8df810, FileInformation=0xa8df818, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 [0154.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 [0154.297] FlushFileBuffers (hFile=0x1ca0) returned 1 [0154.306] CloseHandle (hObject=0x1ca0) returned 1 [0154.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a644b8 [0154.306] wcscpy (in: _Dest=0x7a644b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\" [0154.307] wcscat (in: _Dest=0x7a644b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" [0154.307] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\adobe\\acrobat\\10.0\\68814f-readme.txt")) returned 0x2020 [0154.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a644b8) returned 1 [0154.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 1938 os_tid = 0x2624 [0146.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1bdd8 [0146.571] wcscpy (in: _Dest=0x3e1bdd8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" [0146.571] wcscat (in: _Dest=0x3e1bdd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\" [0146.571] wcscat (in: _Dest=0x3e1bdd8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*" [0146.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4d70 [0146.571] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0147.367] wcscmp (_String1=".", _String2=".") returned 0 [0147.367] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.367] wcscmp (_String1="..", _String2=".") returned 1 [0147.367] wcscmp (_String1="..", _String2="..") returned 0 [0147.367] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d8fc90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d8fc90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d8fc90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.367] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0147.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d70) returned 1 [0147.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bdd8) returned 1 [0147.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a098) returned 1 Thread: id = 1939 os_tid = 0x2628 [0146.585] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0146.585] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0146.586] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.586] GetLastError () returned 0x20 [0146.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x3ea6720 [0146.587] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0146.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea6720) returned 1 [0146.587] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x3e577c8, Size=0x18) returned 0x7a348b0 [0146.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45bf0 [0146.587] wcscpy (in: _Dest=0x3d45bf0, _Source="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" | out: _Dest="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0146.587] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x2020) returned 1 [0146.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449f0) returned 1 Thread: id = 1940 os_tid = 0x262c [0146.595] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf")) returned 0x2020 [0146.596] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x20) returned 0 [0146.596] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.596] GetLastError () returned 0x5 [0146.596] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", dwFileAttributes=0x2020) returned 0 [0146.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47318) returned 1 Thread: id = 1941 os_tid = 0x2630 [0146.598] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat")) returned 0x2020 [0146.599] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x20) returned 0 [0146.599] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.599] GetLastError () returned 0x5 [0146.599] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat", dwFileAttributes=0x2020) returned 0 [0146.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19398) returned 1 Thread: id = 1942 os_tid = 0x2634 [0146.602] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\GsDjd sUWU0UbMd-.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\lmq8ivmz1qyibp\\gsdjd suwu0ubmd-.gif")) returned 0x20 [0146.602] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\GsDjd sUWU0UbMd-.gif", dwFileAttributes=0x20) returned 1 [0146.602] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\GsDjd sUWU0UbMd-.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\lmq8ivmz1qyibp\\gsdjd suwu0ubmd-.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c94 [0146.603] GetFileSizeEx (in: hFile=0x1c94, lpFileSize=0xaacf94c | out: lpFileSize=0xaacf94c*=6686) returned 1 [0146.603] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x1a1a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.603] ReadFile (in: hFile=0x1c94, lpBuffer=0xaacf928, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaacf938, lpOverlapped=0x0 | out: lpBuffer=0xaacf928*, lpNumberOfBytesRead=0xaacf938*=0x4, lpOverlapped=0x0) returned 1 [0146.606] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38d0 [0146.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ae8 [0146.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0146.606] NtQuerySystemTime (in: CurrentTime=0xaacf8c0 | out: CurrentTime=0xaacf8c0*=132462177254064000) returned 0x0 [0146.606] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x5c6e8b07 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x14022979 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x2ebd88a0 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x3847cb60 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x27e0eef2 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x58d62533 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x4d92354f [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x2356f92e [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x2b70ebed [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x55ee4535 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x3fe17d61 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x3cc411cd [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x3bc37e3 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x66ae2c78 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x6df2512c [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x74704cdf [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x7d2dc8ed [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x7067d858 [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x5f9c10ef [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x5136fb5b [0146.607] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0xd0e38c8 [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x5bc903b [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x88bf03 [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x33366e1 [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x6aa311d1 [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x3074f61a [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x1c074d1f [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x25cdf211 [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x674f8ac7 [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x150001b2 [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x6f071968 [0146.608] RtlRandomEx (in: Seed=0xaacf8b8 | out: Seed=0xaacf8b8) returned 0x1f8c1e29 [0146.623] ReadFile (in: hFile=0x1c94, lpBuffer=0x7a8f4e8, nNumberOfBytesToRead=0x1a1e, lpNumberOfBytesRead=0xaacf8b4, lpOverlapped=0x0 | out: lpBuffer=0x7a8f4e8*, lpNumberOfBytesRead=0xaacf8b4*=0x1a1e, lpOverlapped=0x0) returned 1 [0146.623] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.623] WriteFile (in: hFile=0x1c94, lpBuffer=0x7a9e508*, nNumberOfBytesToWrite=0x1a1e, lpNumberOfBytesWritten=0xaacf8b8, lpOverlapped=0x0 | out: lpBuffer=0x7a9e508*, lpNumberOfBytesWritten=0xaacf8b8*=0x1a1e, lpOverlapped=0x0) returned 1 [0146.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0146.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0146.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0146.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9e508) returned 1 [0146.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8f4e8) returned 1 [0146.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55b50) returned 1 [0146.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73ef0 [0146.904] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.905] WriteFile (in: hFile=0x1c94, lpBuffer=0x3d55ce0*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xaacf940, lpOverlapped=0x0 | out: lpBuffer=0x3d55ce0*, lpNumberOfBytesWritten=0xaacf940*=0x11a, lpOverlapped=0x0) returned 1 [0146.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55b50 [0146.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3de00 [0146.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0146.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c30) returned 1 [0146.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37740 [0146.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0146.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3858 [0146.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3858) returned 1 [0146.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55b50) returned 1 [0146.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6e48 [0146.912] sprintf (in: _Dest=0x2fe6e48, _Format="%c%c" | out: _Dest="ed") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e4a, _Format="%c%c" | out: _Dest="88") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e4c, _Format="%c%c" | out: _Dest="f4") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e4e, _Format="%c%c" | out: _Dest="22") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e50, _Format="%c%c" | out: _Dest="39") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e52, _Format="%c%c" | out: _Dest="c8") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e54, _Format="%c%c" | out: _Dest="38") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e56, _Format="%c%c" | out: _Dest="7f") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e58, _Format="%c%c" | out: _Dest="63") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e5a, _Format="%c%c" | out: _Dest="16") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e5c, _Format="%c%c" | out: _Dest="72") returned 2 [0146.912] sprintf (in: _Dest=0x2fe6e5e, _Format="%c%c" | out: _Dest="c5") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e60, _Format="%c%c" | out: _Dest="74") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e62, _Format="%c%c" | out: _Dest="9d") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e64, _Format="%c%c" | out: _Dest="02") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e66, _Format="%c%c" | out: _Dest="98") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e68, _Format="%c%c" | out: _Dest="56") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e6a, _Format="%c%c" | out: _Dest="54") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e6c, _Format="%c%c" | out: _Dest="f9") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e6e, _Format="%c%c" | out: _Dest="c5") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e70, _Format="%c%c" | out: _Dest="da") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e72, _Format="%c%c" | out: _Dest="03") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e74, _Format="%c%c" | out: _Dest="26") returned 2 [0146.913] sprintf (in: _Dest=0x2fe6e76, _Format="%c%c" | out: _Dest="12") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e78, _Format="%c%c" | out: _Dest="ba") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e7a, _Format="%c%c" | out: _Dest="51") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e7c, _Format="%c%c" | out: _Dest="d2") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e7e, _Format="%c%c" | out: _Dest="82") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e80, _Format="%c%c" | out: _Dest="fa") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e82, _Format="%c%c" | out: _Dest="1c") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e84, _Format="%c%c" | out: _Dest="a4") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e86, _Format="%c%c" | out: _Dest="5a") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e88, _Format="%c%c" | out: _Dest="81") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e8a, _Format="%c%c" | out: _Dest="40") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e8c, _Format="%c%c" | out: _Dest="0f") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e8e, _Format="%c%c" | out: _Dest="d2") returned 2 [0146.914] sprintf (in: _Dest=0x2fe6e90, _Format="%c%c" | out: _Dest="b6") returned 2 [0146.915] sprintf (in: _Dest=0x2fe6e92, _Format="%c%c" | out: _Dest="15") returned 2 [0146.915] sprintf (in: _Dest=0x2fe6e94, _Format="%c%c" | out: _Dest="e3") returned 2 [0146.915] sprintf (in: _Dest=0x2fe6e96, _Format="%c%c" | out: _Dest="13") returned 2 [0146.915] RtlInitAnsiString (in: DestinationString=0xaacf8c8, SourceString="ed88f42239c8387f631672c5749d02985654f9c5da032612ba51d282fa1ca45a81400fd2b615e313" | out: DestinationString="ed88f42239c8387f631672c5749d02985654f9c5da032612ba51d282fa1ca45a81400fd2b615e313") [0146.915] RtlAnsiStringToUnicodeString (in: DestinationString=0xaacf8c0, SourceString="ed88f42239c8387f631672c5749d02985654f9c5da032612ba51d282fa1ca45a81400fd2b615e313", AllocateDestinationString=1 | out: DestinationString="ed88f42239c8387f631672c5749d02985654f9c5da032612ba51d282fa1ca45a81400fd2b615e313") returned 0x0 [0146.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bdf8 [0146.915] wcscat (in: _Dest=0x2ff6d00, _Source="ed88f42239c8387f6316" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\ed88f42239c8387f6316") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\ed88f42239c8387f6316" [0146.915] wcscat (in: _Dest=0x2ff6d00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\ed88f42239c8387f6316.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\ed88f42239c8387f6316.68814f" [0146.915] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\ed88f42239c8387f6316.68814f", NtPathName=0xaacf8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\ed88f42239c8387f6316.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d84fb0 [0146.920] FlushFileBuffers (hFile=0x1c94) returned 1 [0147.055] CloseHandle (hObject=0x1c94) returned 1 [0147.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053a68 [0147.056] wcscpy (in: _Dest=0x3053a68, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\" [0147.056] wcscat (in: _Dest=0x3053a68, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\68814F-Readme.txt" [0147.056] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\lmq8ivmz1qyibp\\68814f-readme.txt")) returned 0x20 [0147.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 [0147.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7acd0) returned 1 Thread: id = 1943 os_tid = 0x2638 [0146.624] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\lmq8ivmz1qyibp\\pl2y.png")) returned 0x20 [0146.625] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png", dwFileAttributes=0x20) returned 1 [0146.625] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\lmq8ivmz1qyibp\\pl2y.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cac [0146.625] GetFileSizeEx (in: hFile=0x1cac, lpFileSize=0xa07f804 | out: lpFileSize=0xa07f804*=73533) returned 1 [0146.625] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x11f39, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.625] ReadFile (in: hFile=0x1cac, lpBuffer=0xa07f7e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa07f7f0, lpOverlapped=0x0 | out: lpBuffer=0xa07f7e0*, lpNumberOfBytesRead=0xa07f7f0*=0x4, lpOverlapped=0x0) returned 1 [0146.628] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38d0 [0146.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0146.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0146.629] NtQuerySystemTime (in: CurrentTime=0xa07f778 | out: CurrentTime=0xa07f778*=132462177254220000) returned 0x0 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x26aec0c2 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x5049f6ee [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x6537e076 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x418f9be9 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x52bc8152 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x299d9542 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x361e37b [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x3693b095 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x770170f3 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x24908c2 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x40f16221 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x71f96d59 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x173c7f33 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x5ea5fb [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0xb06bee6 [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x639807af [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x21e60e9d [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x39afa1fd [0146.629] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x2b2aec21 [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0xf3385c0 [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x7c764f71 [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x2ea03cfe [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x56dd621f [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x71bd1315 [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x2f92a71e [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x646f1989 [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x2252de2d [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x5acca2fc [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x38bbb5e1 [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x3293e318 [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x3f467dfe [0146.630] RtlRandomEx (in: Seed=0xa07f770 | out: Seed=0xa07f770) returned 0x66f0ec5 [0146.658] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.659] ReadFile (in: hFile=0x1cac, lpBuffer=0x7a750b0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa07f778, lpOverlapped=0x0 | out: lpBuffer=0x7a750b0*, lpNumberOfBytesRead=0xa07f778*=0x3c00, lpOverlapped=0x0) returned 1 [0146.659] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f40 [0146.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd88 [0146.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38d0 [0146.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38d0) returned 1 [0146.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa5d18 [0146.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38d0 [0146.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0146.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0146.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0146.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f40) returned 1 [0146.660] WriteFile (in: hFile=0x1cac, lpBuffer=0x7aa5d18*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa07f778, lpOverlapped=0x0 | out: lpBuffer=0x7aa5d18*, lpNumberOfBytesWritten=0xa07f778*=0x3c00, lpOverlapped=0x0) returned 1 [0146.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa5d18) returned 1 [0146.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a750b0) returned 1 [0146.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec37b8 [0146.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0146.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec3f38 [0146.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0146.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0146.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c30) returned 1 [0146.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0146.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55b50) returned 1 [0146.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3deca58 [0146.907] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0146.907] WriteFile (in: hFile=0x1cac, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xa07f7f8, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xa07f7f8*=0x102, lpOverlapped=0x0) returned 1 [0146.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0146.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0146.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2980) returned 1 [0146.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0146.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38d0) returned 1 [0146.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0146.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3998) returned 1 [0146.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30d8) returned 1 [0146.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62310 [0146.922] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png" [0146.922] wcscat (in: _Dest=0x7a62310, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png.68814f" [0146.922] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png.68814f", NtPathName=0xa07f770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\Pl2y.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0146.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6d00 [0146.927] FlushFileBuffers (hFile=0x1cac) returned 1 [0147.057] CloseHandle (hObject=0x1cac) returned 1 [0147.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3e7acd0 [0147.058] wcscpy (in: _Dest=0x3e7acd0, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\" [0147.058] wcscat (in: _Dest=0x3e7acd0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\68814F-Readme.txt" [0147.058] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\LMQ8IvMz1qyiBP\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\lmq8ivmz1qyibp\\68814f-readme.txt")) returned 0x20 [0147.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7acd0) returned 1 [0147.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 Thread: id = 1944 os_tid = 0x263c [0146.661] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live gallery.url")) returned 0x20 [0147.987] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url", dwFileAttributes=0x20) returned 1 [0149.117] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc54 [0149.117] GetFileSizeEx (in: hFile=0xc54, lpFileSize=0x961f854 | out: lpFileSize=0x961f854*=133) returned 1 [0149.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0149.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0149.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0149.118] NtQuerySystemTime (in: CurrentTime=0x961f7c8 | out: CurrentTime=0x961f7c8*=132462177279180000) returned 0x0 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x2e92afe0 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x101b3a8b [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x568e6e33 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x1c9c565e [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x19264fe0 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x7958541d [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x5e276a01 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x46f2344b [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x35c7876 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x4dacf600 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x11d8ece7 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x601c92d6 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x7557dcbf [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x162ad99b [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x3bcbaec [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x14d95213 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x41f8b87e [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x8e3f7e2 [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x448551ee [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x72dff85e [0149.118] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x17a4b120 [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x3c82afe1 [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x3c4ca7fa [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x6a2ac666 [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x15d4b5de [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x14330ada [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x5fe3f5bc [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x5e231e20 [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x434ded36 [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x7fd26101 [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x4ee75cc0 [0149.119] RtlRandomEx (in: Seed=0x961f7c0 | out: Seed=0x961f7c0) returned 0x429c3027 [0149.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0149.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0149.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0149.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0149.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0149.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0149.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e850c8 [0149.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0149.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0149.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0149.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0149.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c98360 [0149.132] ReadFile (in: hFile=0xc54, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0x961f7bc, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0x961f7bc*=0x85, lpOverlapped=0x0) returned 1 [0149.135] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.135] WriteFile (in: hFile=0xc54, lpBuffer=0x7c98360*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x961f7c0, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesWritten=0x961f7c0*=0x85, lpOverlapped=0x0) returned 1 [0149.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0149.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0149.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0149.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c98360) returned 1 [0149.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0149.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0149.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e850c8) returned 1 [0149.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e850c8 [0149.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85398 [0149.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0149.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0149.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0149.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e852c0 [0149.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0149.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0149.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0149.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0149.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0149.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9cd0 [0149.435] SetFilePointerEx (in: hFile=0xc54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.435] WriteFile (in: hFile=0xc54, lpBuffer=0x3ec9cd0*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x961f848, lpOverlapped=0x0 | out: lpBuffer=0x3ec9cd0*, lpNumberOfBytesWritten=0x961f848*=0x122, lpOverlapped=0x0) returned 1 [0149.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85398 [0149.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0149.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0149.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0149.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e798a8 [0149.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0149.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0149.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0149.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0149.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0149.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a236f0 [0149.489] sprintf (in: _Dest=0x7a236f0, _Format="%c%c" | out: _Dest="44") returned 2 [0149.489] sprintf (in: _Dest=0x7a236f2, _Format="%c%c" | out: _Dest="d3") returned 2 [0149.489] sprintf (in: _Dest=0x7a236f4, _Format="%c%c" | out: _Dest="18") returned 2 [0149.489] sprintf (in: _Dest=0x7a236f6, _Format="%c%c" | out: _Dest="01") returned 2 [0149.489] sprintf (in: _Dest=0x7a236f8, _Format="%c%c" | out: _Dest="0f") returned 2 [0149.489] sprintf (in: _Dest=0x7a236fa, _Format="%c%c" | out: _Dest="bf") returned 2 [0149.489] sprintf (in: _Dest=0x7a236fc, _Format="%c%c" | out: _Dest="fa") returned 2 [0149.489] sprintf (in: _Dest=0x7a236fe, _Format="%c%c" | out: _Dest="67") returned 2 [0149.489] sprintf (in: _Dest=0x7a23700, _Format="%c%c" | out: _Dest="99") returned 2 [0149.489] sprintf (in: _Dest=0x7a23702, _Format="%c%c" | out: _Dest="f6") returned 2 [0149.489] sprintf (in: _Dest=0x7a23704, _Format="%c%c" | out: _Dest="01") returned 2 [0149.489] sprintf (in: _Dest=0x7a23706, _Format="%c%c" | out: _Dest="fb") returned 2 [0149.489] sprintf (in: _Dest=0x7a23708, _Format="%c%c" | out: _Dest="4a") returned 2 [0149.489] sprintf (in: _Dest=0x7a2370a, _Format="%c%c" | out: _Dest="b4") returned 2 [0149.489] sprintf (in: _Dest=0x7a2370c, _Format="%c%c" | out: _Dest="48") returned 2 [0149.489] sprintf (in: _Dest=0x7a2370e, _Format="%c%c" | out: _Dest="90") returned 2 [0149.490] sprintf (in: _Dest=0x7a23710, _Format="%c%c" | out: _Dest="d0") returned 2 [0149.490] sprintf (in: _Dest=0x7a23712, _Format="%c%c" | out: _Dest="d2") returned 2 [0149.490] sprintf (in: _Dest=0x7a23714, _Format="%c%c" | out: _Dest="89") returned 2 [0149.490] sprintf (in: _Dest=0x7a23716, _Format="%c%c" | out: _Dest="b4") returned 2 [0149.490] sprintf (in: _Dest=0x7a23718, _Format="%c%c" | out: _Dest="90") returned 2 [0149.490] sprintf (in: _Dest=0x7a2371a, _Format="%c%c" | out: _Dest="25") returned 2 [0149.490] sprintf (in: _Dest=0x7a2371c, _Format="%c%c" | out: _Dest="d8") returned 2 [0149.490] sprintf (in: _Dest=0x7a2371e, _Format="%c%c" | out: _Dest="f8") returned 2 [0149.490] sprintf (in: _Dest=0x7a23720, _Format="%c%c" | out: _Dest="b1") returned 2 [0149.490] sprintf (in: _Dest=0x7a23722, _Format="%c%c" | out: _Dest="bb") returned 2 [0149.490] sprintf (in: _Dest=0x7a23724, _Format="%c%c" | out: _Dest="61") returned 2 [0149.490] sprintf (in: _Dest=0x7a23726, _Format="%c%c" | out: _Dest="f2") returned 2 [0149.490] sprintf (in: _Dest=0x7a23728, _Format="%c%c" | out: _Dest="80") returned 2 [0149.490] sprintf (in: _Dest=0x7a2372a, _Format="%c%c" | out: _Dest="1b") returned 2 [0149.490] sprintf (in: _Dest=0x7a2372c, _Format="%c%c" | out: _Dest="1d") returned 2 [0149.490] sprintf (in: _Dest=0x7a2372e, _Format="%c%c" | out: _Dest="56") returned 2 [0149.490] sprintf (in: _Dest=0x7a23730, _Format="%c%c" | out: _Dest="aa") returned 2 [0149.490] sprintf (in: _Dest=0x7a23732, _Format="%c%c" | out: _Dest="d5") returned 2 [0149.490] sprintf (in: _Dest=0x7a23734, _Format="%c%c" | out: _Dest="d8") returned 2 [0149.490] sprintf (in: _Dest=0x7a23736, _Format="%c%c" | out: _Dest="73") returned 2 [0149.491] sprintf (in: _Dest=0x7a23738, _Format="%c%c" | out: _Dest="46") returned 2 [0149.491] sprintf (in: _Dest=0x7a2373a, _Format="%c%c" | out: _Dest="aa") returned 2 [0149.491] sprintf (in: _Dest=0x7a2373c, _Format="%c%c" | out: _Dest="83") returned 2 [0149.491] sprintf (in: _Dest=0x7a2373e, _Format="%c%c" | out: _Dest="04") returned 2 [0149.491] sprintf (in: _Dest=0x7a23740, _Format="%c%c" | out: _Dest="85") returned 2 [0149.491] sprintf (in: _Dest=0x7a23742, _Format="%c%c" | out: _Dest="59") returned 2 [0149.491] sprintf (in: _Dest=0x7a23744, _Format="%c%c" | out: _Dest="f2") returned 2 [0149.491] sprintf (in: _Dest=0x7a23746, _Format="%c%c" | out: _Dest="60") returned 2 [0149.491] sprintf (in: _Dest=0x7a23748, _Format="%c%c" | out: _Dest="93") returned 2 [0149.491] sprintf (in: _Dest=0x7a2374a, _Format="%c%c" | out: _Dest="bf") returned 2 [0149.491] sprintf (in: _Dest=0x7a2374c, _Format="%c%c" | out: _Dest="88") returned 2 [0149.491] sprintf (in: _Dest=0x7a2374e, _Format="%c%c" | out: _Dest="8a") returned 2 [0149.491] RtlInitAnsiString (in: DestinationString=0x961f7d0, SourceString="44d318010fbffa6799f601fb4ab44890d0d289b49025d8f8b1bb61f2801b1d56aad5d87346aa83048559f26093bf888a" | out: DestinationString="44d318010fbffa6799f601fb4ab44890d0d289b49025d8f8b1bb61f2801b1d56aad5d87346aa83048559f26093bf888a") [0149.491] RtlAnsiStringToUnicodeString (in: DestinationString=0x961f7c8, SourceString="44d318010fbffa6799f601fb4ab44890d0d289b49025d8f8b1bb61f2801b1d56aad5d87346aa83048559f26093bf888a", AllocateDestinationString=1 | out: DestinationString="44d318010fbffa6799f601fb4ab44890d0d289b49025d8f8b1bb61f2801b1d56aad5d87346aa83048559f26093bf888a") returned 0x0 [0149.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d84e10 [0149.491] RtlFreeAnsiString (AnsiString="4") [0149.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a236f0) returned 1 [0149.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0149.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0149.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9cd0) returned 1 [0149.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e852c0) returned 1 [0149.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b38) returned 1 [0149.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e850c8) returned 1 [0149.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0149.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0149.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0149.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0149.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d668 [0149.492] wcscat (in: _Dest=0x32d668, _Source="44d318010fbffa6799f601fb" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\44d318010fbffa6799f601fb") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\44d318010fbffa6799f601fb" [0149.492] wcscat (in: _Dest=0x32d668, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\44d318010fbffa6799f601fb.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\44d318010fbffa6799f601fb.68814f" [0149.492] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\44d318010fbffa6799f601fb.68814f", NtPathName=0x961f7c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\44d318010fbffa6799f601fb.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a664b0 [0149.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a664b0) returned 1 [0149.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04010) returned 1 [0149.637] NtQueryInformationFile (in: FileHandle=0xc54, IoStatusBlock=0x961f798, FileInformation=0x961f7a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x961f798, FileInformation=0x961f7a0) returned 0x0 [0149.637] NtSetInformationFile (FileHandle=0xc54, IoStatusBlock=0x961f798, FileInformation=0x961f7a0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 [0149.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 [0149.639] FlushFileBuffers (hFile=0xc54) returned 1 [0149.687] CloseHandle (hObject=0xc54) returned 1 [0149.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46f18 [0149.688] wcscpy (in: _Dest=0x3e46f18, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0149.688] wcscat (in: _Dest=0x3e46f18, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt" [0149.688] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\68814f-readme.txt")) returned 0x20 [0149.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f18) returned 1 [0149.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 Thread: id = 1945 os_tid = 0x2640 [0146.663] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live mail.url")) returned 0x20 [0147.369] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url", dwFileAttributes=0x20) returned 1 [0149.226] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b44 [0149.226] GetFileSizeEx (in: hFile=0x1b44, lpFileSize=0xa62fd4c | out: lpFileSize=0xa62fd4c*=133) returned 1 [0149.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0149.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0149.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0149.227] NtQuerySystemTime (in: CurrentTime=0xa62fcc0 | out: CurrentTime=0xa62fcc0*=132462177280272000) returned 0x0 [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x4d61d300 [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x129f4aa0 [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x2e4ca09d [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x6135344 [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x1980c98 [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x3fae69c0 [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x3020d103 [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x168bd885 [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x4d105efb [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x4ce1dfb2 [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x22effbac [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x6ba5422e [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x51447c7b [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x3e54b726 [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x6ff95e4a [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x694f411d [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x3cbadb2b [0149.227] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x3d27c744 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x34ef0369 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x4fa97c04 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x701219a [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x78bdd3c5 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x4154dd00 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x47af31b7 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x4b97e8c6 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x2e0a06e7 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x2011948c [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x4483fe74 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x10982602 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x18d09e60 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x8fe0c89 [0149.228] RtlRandomEx (in: Seed=0xa62fcb8 | out: Seed=0xa62fcb8) returned 0x31ce22ba [0149.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4668 [0149.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0149.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3218 [0149.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0149.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3240) returned 1 [0149.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0149.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e857d0 [0149.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0149.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0149.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0149.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb9fa8 [0149.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cbdbb0 [0149.242] ReadFile (in: hFile=0x1b44, lpBuffer=0x7cb9fa8, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xa62fcb4, lpOverlapped=0x0 | out: lpBuffer=0x7cb9fa8*, lpNumberOfBytesRead=0xa62fcb4*=0x85, lpOverlapped=0x0) returned 1 [0149.245] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.245] WriteFile (in: hFile=0x1b44, lpBuffer=0x7cbdbb0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xa62fcb8, lpOverlapped=0x0 | out: lpBuffer=0x7cbdbb0*, lpNumberOfBytesWritten=0xa62fcb8*=0x85, lpOverlapped=0x0) returned 1 [0149.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53be8 [0149.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d60 [0149.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52d60) returned 1 [0149.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdbb0) returned 1 [0149.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa8) returned 1 [0149.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0149.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e857d0) returned 1 [0149.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2df80 [0149.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e857d0 [0149.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0149.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d60 [0149.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52d60) returned 1 [0149.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d840 [0149.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d60 [0149.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0149.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53058) returned 1 [0149.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0149.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e857d0) returned 1 [0149.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55968 [0149.464] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.464] WriteFile (in: hFile=0x1b44, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xa62fd40, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xa62fd40*=0x11c, lpOverlapped=0x0) returned 1 [0149.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e850c8 [0149.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0149.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0149.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0149.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79368 [0149.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0149.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0149.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0149.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0149.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e850c8) returned 1 [0149.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6788 [0149.508] sprintf (in: _Dest=0x2fe6788, _Format="%c%c" | out: _Dest="dc") returned 2 [0149.508] sprintf (in: _Dest=0x2fe678a, _Format="%c%c" | out: _Dest="6a") returned 2 [0149.508] sprintf (in: _Dest=0x2fe678c, _Format="%c%c" | out: _Dest="64") returned 2 [0149.508] sprintf (in: _Dest=0x2fe678e, _Format="%c%c" | out: _Dest="1a") returned 2 [0149.508] sprintf (in: _Dest=0x2fe6790, _Format="%c%c" | out: _Dest="73") returned 2 [0149.508] sprintf (in: _Dest=0x2fe6792, _Format="%c%c" | out: _Dest="3c") returned 2 [0149.508] sprintf (in: _Dest=0x2fe6794, _Format="%c%c" | out: _Dest="5b") returned 2 [0149.509] sprintf (in: _Dest=0x2fe6796, _Format="%c%c" | out: _Dest="48") returned 2 [0149.509] sprintf (in: _Dest=0x2fe6798, _Format="%c%c" | out: _Dest="47") returned 2 [0149.509] sprintf (in: _Dest=0x2fe679a, _Format="%c%c" | out: _Dest="21") returned 2 [0149.509] sprintf (in: _Dest=0x2fe679c, _Format="%c%c" | out: _Dest="56") returned 2 [0149.509] sprintf (in: _Dest=0x2fe679e, _Format="%c%c" | out: _Dest="16") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67a0, _Format="%c%c" | out: _Dest="5a") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67a2, _Format="%c%c" | out: _Dest="09") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67a4, _Format="%c%c" | out: _Dest="f0") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67a6, _Format="%c%c" | out: _Dest="97") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67a8, _Format="%c%c" | out: _Dest="99") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67aa, _Format="%c%c" | out: _Dest="e4") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67ac, _Format="%c%c" | out: _Dest="93") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67ae, _Format="%c%c" | out: _Dest="46") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67b0, _Format="%c%c" | out: _Dest="4f") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67b2, _Format="%c%c" | out: _Dest="d7") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67b4, _Format="%c%c" | out: _Dest="25") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67b6, _Format="%c%c" | out: _Dest="62") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67b8, _Format="%c%c" | out: _Dest="9d") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67ba, _Format="%c%c" | out: _Dest="5d") returned 2 [0149.509] sprintf (in: _Dest=0x2fe67bc, _Format="%c%c" | out: _Dest="84") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67be, _Format="%c%c" | out: _Dest="4d") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67c0, _Format="%c%c" | out: _Dest="69") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67c2, _Format="%c%c" | out: _Dest="53") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67c4, _Format="%c%c" | out: _Dest="62") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67c6, _Format="%c%c" | out: _Dest="e6") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67c8, _Format="%c%c" | out: _Dest="2f") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67ca, _Format="%c%c" | out: _Dest="10") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67cc, _Format="%c%c" | out: _Dest="00") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67ce, _Format="%c%c" | out: _Dest="c9") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67d0, _Format="%c%c" | out: _Dest="03") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67d2, _Format="%c%c" | out: _Dest="77") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67d4, _Format="%c%c" | out: _Dest="6d") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67d6, _Format="%c%c" | out: _Dest="50") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67d8, _Format="%c%c" | out: _Dest="ef") returned 2 [0149.510] sprintf (in: _Dest=0x2fe67da, _Format="%c%c" | out: _Dest="79") returned 2 [0149.510] RtlInitAnsiString (in: DestinationString=0xa62fcc8, SourceString="dc6a641a733c5b48472156165a09f09799e493464fd725629d5d844d695362e62f1000c903776d50ef79" | out: DestinationString="dc6a641a733c5b48472156165a09f09799e493464fd725629d5d844d695362e62f1000c903776d50ef79") [0149.510] RtlAnsiStringToUnicodeString (in: DestinationString=0xa62fcc0, SourceString="dc6a641a733c5b48472156165a09f09799e493464fd725629d5d844d695362e62f1000c903776d50ef79", AllocateDestinationString=1 | out: DestinationString="dc6a641a733c5b48472156165a09f09799e493464fd725629d5d844d695362e62f1000c903776d50ef79") returned 0x0 [0149.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7710 [0149.511] RtlFreeAnsiString (AnsiString="d") [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d840) returned 1 [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52d60) returned 1 [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2df80) returned 1 [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53be8) returned 1 [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4668) returned 1 [0149.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3218) returned 1 [0149.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cce8 [0149.511] wcscat (in: _Dest=0x32cce8, _Source="dc6a641a733c5b4847215" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\dc6a641a733c5b4847215") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\dc6a641a733c5b4847215" [0149.511] wcscat (in: _Dest=0x32cce8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\dc6a641a733c5b4847215.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\dc6a641a733c5b4847215.68814f" [0149.512] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\dc6a641a733c5b4847215.68814f", NtPathName=0xa62fcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\dc6a641a733c5b4847215.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f590 [0149.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f590) returned 1 [0149.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e010a0) returned 1 [0149.556] NtQueryInformationFile (in: FileHandle=0x1b44, IoStatusBlock=0xa62fc90, FileInformation=0xa62fc98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa62fc90, FileInformation=0xa62fc98) returned 0x0 [0149.556] NtSetInformationFile (FileHandle=0x1b44, IoStatusBlock=0xa62fc90, FileInformation=0xa62fc98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cce8) returned 1 [0149.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7710) returned 1 [0149.565] FlushFileBuffers (hFile=0x1b44) returned 1 [0149.573] CloseHandle (hObject=0x1b44) returned 1 [0149.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46f18 [0149.584] wcscpy (in: _Dest=0x3e46f18, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0149.584] wcscat (in: _Dest=0x3e46f18, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt" [0149.585] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\68814f-readme.txt")) returned 0x20 [0149.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f18) returned 1 [0149.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 1946 os_tid = 0x2644 [0146.664] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live spaces.url")) returned 0x20 [0147.925] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url", dwFileAttributes=0x20) returned 1 [0148.619] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd4c [0148.619] GetFileSizeEx (in: hFile=0xd4c, lpFileSize=0xa95f964 | out: lpFileSize=0xa95f964*=133) returned 1 [0148.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0148.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e539b8 [0148.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c88 [0148.619] NtQuerySystemTime (in: CurrentTime=0xa95f8d8 | out: CurrentTime=0xa95f8d8*=132462177274188000) returned 0x0 [0148.619] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x71fde0a6 [0148.619] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x41d47374 [0148.619] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x4ba84af8 [0148.619] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x6e4b34fa [0148.619] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x431e011d [0148.619] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x7152f0cb [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x74ba3a94 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x40aba8dd [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x36f5598d [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x2ebee7f4 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x65ef7f95 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x32b6edc [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x13b20696 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x4d7ed37a [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x66bb1d8e [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x55d540d2 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x596425ad [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x26415747 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x2d00fc24 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x374a3465 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x67985268 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x5e15e1fb [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x70303413 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x62761c10 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x42485ed3 [0148.620] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x444d1e09 [0148.621] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x3b4e6200 [0148.621] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x5e6a3332 [0148.621] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x3f02c95b [0148.621] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x3477c75a [0148.621] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x2c1d5c74 [0148.621] RtlRandomEx (in: Seed=0xa95f8d0 | out: Seed=0xa95f8d0) returned 0x5059ab5a [0148.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a30 [0148.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fd58 [0148.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e539e0 [0148.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fd58) returned 1 [0148.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c88) returned 1 [0148.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53440) returned 1 [0148.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49a88 [0148.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fd58 [0148.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0148.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53440) returned 1 [0148.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c143e0 [0148.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0148.636] ReadFile (in: hFile=0xd4c, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x85, lpNumberOfBytesRead=0xa95f8cc, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0xa95f8cc*=0x85, lpOverlapped=0x0) returned 1 [0148.641] SetFilePointerEx (in: hFile=0xd4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.641] WriteFile (in: hFile=0xd4c, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0xa95f8d0, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0xa95f8d0*=0x85, lpOverlapped=0x0) returned 1 [0150.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0150.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0150.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29d0) returned 1 [0150.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0150.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0150.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fd58) returned 1 [0150.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0150.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e49a88 [0150.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49530 [0150.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fd58 [0150.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0150.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29d0) returned 1 [0150.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e494a0 [0150.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0150.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0150.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0150.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fd58) returned 1 [0150.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49530) returned 1 [0150.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55968 [0150.818] SetFilePointerEx (in: hFile=0xd4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.818] WriteFile (in: hFile=0xd4c, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xa95f958, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xa95f958*=0x120, lpOverlapped=0x0) returned 1 [0154.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e854b8 [0154.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0154.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0154.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0154.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e798a8 [0154.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0154.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0154.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0154.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0154.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e854b8) returned 1 [0154.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5d) returned 0x3d47720 [0154.117] sprintf (in: _Dest=0x3d47720, _Format="%c%c" | out: _Dest="cd") returned 2 [0154.117] sprintf (in: _Dest=0x3d47722, _Format="%c%c" | out: _Dest="4e") returned 2 [0154.117] sprintf (in: _Dest=0x3d47724, _Format="%c%c" | out: _Dest="ad") returned 2 [0154.117] sprintf (in: _Dest=0x3d47726, _Format="%c%c" | out: _Dest="d9") returned 2 [0154.117] sprintf (in: _Dest=0x3d47728, _Format="%c%c" | out: _Dest="ec") returned 2 [0154.117] sprintf (in: _Dest=0x3d4772a, _Format="%c%c" | out: _Dest="b5") returned 2 [0154.117] sprintf (in: _Dest=0x3d4772c, _Format="%c%c" | out: _Dest="6a") returned 2 [0154.117] sprintf (in: _Dest=0x3d4772e, _Format="%c%c" | out: _Dest="9d") returned 2 [0154.117] sprintf (in: _Dest=0x3d47730, _Format="%c%c" | out: _Dest="1e") returned 2 [0154.117] sprintf (in: _Dest=0x3d47732, _Format="%c%c" | out: _Dest="f2") returned 2 [0154.117] sprintf (in: _Dest=0x3d47734, _Format="%c%c" | out: _Dest="13") returned 2 [0154.117] sprintf (in: _Dest=0x3d47736, _Format="%c%c" | out: _Dest="98") returned 2 [0154.117] sprintf (in: _Dest=0x3d47738, _Format="%c%c" | out: _Dest="9c") returned 2 [0154.117] sprintf (in: _Dest=0x3d4773a, _Format="%c%c" | out: _Dest="cb") returned 2 [0154.117] sprintf (in: _Dest=0x3d4773c, _Format="%c%c" | out: _Dest="ad") returned 2 [0154.117] sprintf (in: _Dest=0x3d4773e, _Format="%c%c" | out: _Dest="5e") returned 2 [0154.117] sprintf (in: _Dest=0x3d47740, _Format="%c%c" | out: _Dest="12") returned 2 [0154.117] sprintf (in: _Dest=0x3d47742, _Format="%c%c" | out: _Dest="32") returned 2 [0154.117] sprintf (in: _Dest=0x3d47744, _Format="%c%c" | out: _Dest="5c") returned 2 [0154.117] sprintf (in: _Dest=0x3d47746, _Format="%c%c" | out: _Dest="13") returned 2 [0154.117] sprintf (in: _Dest=0x3d47748, _Format="%c%c" | out: _Dest="4b") returned 2 [0154.117] sprintf (in: _Dest=0x3d4774a, _Format="%c%c" | out: _Dest="19") returned 2 [0154.117] sprintf (in: _Dest=0x3d4774c, _Format="%c%c" | out: _Dest="2f") returned 2 [0154.117] sprintf (in: _Dest=0x3d4774e, _Format="%c%c" | out: _Dest="a1") returned 2 [0154.117] sprintf (in: _Dest=0x3d47750, _Format="%c%c" | out: _Dest="a0") returned 2 [0154.117] sprintf (in: _Dest=0x3d47752, _Format="%c%c" | out: _Dest="a7") returned 2 [0154.118] sprintf (in: _Dest=0x3d47754, _Format="%c%c" | out: _Dest="16") returned 2 [0154.118] sprintf (in: _Dest=0x3d47756, _Format="%c%c" | out: _Dest="58") returned 2 [0154.118] sprintf (in: _Dest=0x3d47758, _Format="%c%c" | out: _Dest="4b") returned 2 [0154.118] sprintf (in: _Dest=0x3d4775a, _Format="%c%c" | out: _Dest="9c") returned 2 [0154.118] sprintf (in: _Dest=0x3d4775c, _Format="%c%c" | out: _Dest="7a") returned 2 [0154.118] sprintf (in: _Dest=0x3d4775e, _Format="%c%c" | out: _Dest="21") returned 2 [0154.118] sprintf (in: _Dest=0x3d47760, _Format="%c%c" | out: _Dest="3f") returned 2 [0154.118] sprintf (in: _Dest=0x3d47762, _Format="%c%c" | out: _Dest="30") returned 2 [0154.118] sprintf (in: _Dest=0x3d47764, _Format="%c%c" | out: _Dest="bd") returned 2 [0154.118] sprintf (in: _Dest=0x3d47766, _Format="%c%c" | out: _Dest="5c") returned 2 [0154.118] sprintf (in: _Dest=0x3d47768, _Format="%c%c" | out: _Dest="54") returned 2 [0154.118] sprintf (in: _Dest=0x3d4776a, _Format="%c%c" | out: _Dest="67") returned 2 [0154.118] sprintf (in: _Dest=0x3d4776c, _Format="%c%c" | out: _Dest="41") returned 2 [0154.118] sprintf (in: _Dest=0x3d4776e, _Format="%c%c" | out: _Dest="bc") returned 2 [0154.118] sprintf (in: _Dest=0x3d47770, _Format="%c%c" | out: _Dest="f1") returned 2 [0154.118] sprintf (in: _Dest=0x3d47772, _Format="%c%c" | out: _Dest="e1") returned 2 [0154.118] sprintf (in: _Dest=0x3d47774, _Format="%c%c" | out: _Dest="ae") returned 2 [0154.118] sprintf (in: _Dest=0x3d47776, _Format="%c%c" | out: _Dest="a7") returned 2 [0154.118] sprintf (in: _Dest=0x3d47778, _Format="%c%c" | out: _Dest="a3") returned 2 [0154.118] sprintf (in: _Dest=0x3d4777a, _Format="%c%c" | out: _Dest="c6") returned 2 [0154.118] RtlInitAnsiString (in: DestinationString=0xa95f8e0, SourceString="cd4eadd9ecb56a9d1ef213989ccbad5e12325c134b192fa1a0a716584b9c7a213f30bd5c546741bcf1e1aea7a3c6" | out: DestinationString="cd4eadd9ecb56a9d1ef213989ccbad5e12325c134b192fa1a0a716584b9c7a213f30bd5c546741bcf1e1aea7a3c6") [0154.118] RtlAnsiStringToUnicodeString (in: DestinationString=0xa95f8d8, SourceString="cd4eadd9ecb56a9d1ef213989ccbad5e12325c134b192fa1a0a716584b9c7a213f30bd5c546741bcf1e1aea7a3c6", AllocateDestinationString=1 | out: DestinationString="cd4eadd9ecb56a9d1ef213989ccbad5e12325c134b192fa1a0a716584b9c7a213f30bd5c546741bcf1e1aea7a3c6") returned 0x0 [0154.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d40b50 [0154.119] RtlFreeAnsiString (AnsiString="c") [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47720) returned 1 [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e494a0) returned 1 [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29d0) returned 1 [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e539b8) returned 1 [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a30) returned 1 [0154.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e539e0) returned 1 [0154.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64388 [0154.119] wcscat (in: _Dest=0x7a64388, _Source="cd4eadd9ecb56a9d1ef2139" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\cd4eadd9ecb56a9d1ef2139") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\cd4eadd9ecb56a9d1ef2139" [0154.119] wcscat (in: _Dest=0x7a64388, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\cd4eadd9ecb56a9d1ef2139.68814f") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\cd4eadd9ecb56a9d1ef2139.68814f" [0154.119] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\cd4eadd9ecb56a9d1ef2139.68814f", NtPathName=0xa95f8d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\cd4eadd9ecb56a9d1ef2139.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c378 [0154.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 [0154.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57188) returned 1 [0154.153] NtQueryInformationFile (in: FileHandle=0xd4c, IoStatusBlock=0xa95f8a8, FileInformation=0xa95f8b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa95f8a8, FileInformation=0xa95f8b0) returned 0x0 [0154.153] NtSetInformationFile (FileHandle=0xd4c, IoStatusBlock=0xa95f8a8, FileInformation=0xa95f8b0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64388) returned 1 [0154.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b50) returned 1 [0154.179] FlushFileBuffers (hFile=0xd4c) returned 1 [0154.184] CloseHandle (hObject=0xd4c) returned 1 [0154.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19298 [0154.210] wcscpy (in: _Dest=0x3e19298, _Source="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\" [0154.210] wcscat (in: _Dest=0x3e19298, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt" [0154.210] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Favorites\\Windows Live\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\favorites\\windows live\\68814f-readme.txt")) returned 0x20 [0154.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 [0154.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 1947 os_tid = 0x2648 [0146.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a647b0 [0146.688] wcscpy (in: _Dest=0x7a647b0, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" [0146.689] wcscat (in: _Dest=0x7a647b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\" [0146.689] wcscat (in: _Dest=0x7a647b0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\*" [0146.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0146.689] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0147.370] wcscmp (_String1=".", _String2=".") returned 0 [0147.370] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.370] wcscmp (_String1="..", _String2=".") returned 1 [0147.370] wcscmp (_String1="..", _String2="..") returned 0 [0147.370] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0147.370] wcscmp (_String1="1033", _String2=".") returned 1 [0147.370] wcscmp (_String1="1033", _String2="..") returned 1 [0147.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62450 [0147.370] wcscpy (in: _Dest=0x7a62450, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources" [0147.370] wcscat (in: _Dest=0x7a62450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\" [0147.370] wcscat (in: _Dest=0x7a62450, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" [0172.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0172.304] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0172.304] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0172.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0172.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a647b0) returned 1 [0172.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 1948 os_tid = 0x264c [0146.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1f358 [0146.696] wcscpy (in: _Dest=0x3e1f358, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" [0146.696] wcscat (in: _Dest=0x3e1f358, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\" [0146.696] wcscat (in: _Dest=0x3e1f358, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\*" [0146.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0146.696] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0149.009] wcscmp (_String1=".", _String2=".") returned 0 [0149.009] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe2ffc1f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe2ffc1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.009] wcscmp (_String1="..", _String2=".") returned 1 [0149.009] wcscmp (_String1="..", _String2="..") returned 0 [0149.010] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0149.010] wcscmp (_String1="User Data", _String2=".") returned 1 [0149.010] wcscmp (_String1="User Data", _String2="..") returned 1 [0149.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e670 [0149.010] wcscpy (in: _Dest=0x3f3e670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome" [0149.010] wcscat (in: _Dest=0x3f3e670, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\" [0149.010] wcscat (in: _Dest=0x3f3e670, _Source="User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0156.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0156.097] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0156.097] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0156.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0156.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 [0156.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf7b0) returned 1 Thread: id = 1949 os_tid = 0x2650 [0146.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd88 [0146.698] wcscpy (in: _Dest=0x3f3dd88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports" [0146.698] wcscat (in: _Dest=0x3f3dd88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\" [0146.698] wcscat (in: _Dest=0x3f3dd88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\*" [0146.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef43d0 [0146.698] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa50 [0148.903] wcscmp (_String1=".", _String2=".") returned 0 [0148.903] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.903] wcscmp (_String1="..", _String2=".") returned 1 [0148.903] wcscmp (_String1="..", _String2="..") returned 0 [0148.903] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xced08d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xced08d40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xced08d40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.903] FindClose (in: hFindFile=0x3dcfa50 | out: hFindFile=0x3dcfa50) returned 1 [0148.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0148.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0148.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a236f0) returned 1 Thread: id = 1950 os_tid = 0x2654 [0146.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json")) returned 0x20 [0146.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json", dwFileAttributes=0x20) returned 0 [0146.699] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.699] GetLastError () returned 0x5 [0146.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json", dwFileAttributes=0x20) returned 0 [0146.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bf58) returned 1 Thread: id = 1951 os_tid = 0x2658 [0146.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66258 [0146.701] wcscpy (in: _Dest=0x3e66258, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" [0146.701] wcscat (in: _Dest=0x3e66258, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\" [0146.701] wcscat (in: _Dest=0x3e66258, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*" [0146.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0146.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0146.701] wcscmp (_String1=".", _String2=".") returned 0 [0146.701] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe09c0090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe09c0090, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.701] wcscmp (_String1="..", _String2=".") returned 1 [0146.702] wcscmp (_String1="..", _String2="..") returned 0 [0146.702] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x86", cAlternateFileName="")) returned 1 [0146.702] wcscmp (_String1="win_x86", _String2=".") returned 1 [0146.702] wcscmp (_String1="win_x86", _String2="..") returned 1 [0146.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d406a0 [0146.702] wcscpy (in: _Dest=0x3d406a0, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific" [0146.702] wcscat (in: _Dest=0x3d406a0, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\" [0146.702] wcscat (in: _Dest=0x3d406a0, _Source="win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0164.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85d80 [0164.555] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0164.555] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\" [0164.556] wcscat (in: _Dest=0x3d85d80, _Source="*" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\*") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\*" [0164.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52090 [0164.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\*", lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0164.565] wcscmp (_String1=".", _String2=".") returned 0 [0164.565] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.565] wcscmp (_String1="..", _String2=".") returned 1 [0164.565] wcscmp (_String1="..", _String2="..") returned 0 [0164.565] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26edca8f, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x432ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0164.565] wcscmp (_String1="widevinecdm.dll", _String2=".") returned 1 [0164.565] wcscmp (_String1="widevinecdm.dll", _String2="..") returned 1 [0164.565] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0b62fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe0b62fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x26ef2a28, ftLastWriteTime.dwHighDateTime=0x1d2c89a, nFileSizeHigh=0x0, nFileSizeLow=0x665, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0164.565] wcscmp (_String1="widevinecdm.dll.sig", _String2=".") returned 1 [0164.565] wcscmp (_String1="widevinecdm.dll.sig", _String2="..") returned 1 [0164.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3ddf3d8 [0164.565] wcscpy (in: _Dest=0x3ddf3d8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0164.565] wcscat (in: _Dest=0x3ddf3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\" [0164.565] wcscat (in: _Dest=0x3ddf3d8, _Source="widevinecdm.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig" [0164.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig")) returned 0x20 [0164.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig", dwFileAttributes=0x20) returned 0 [0164.596] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.596] GetLastError () returned 0x5 [0164.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdm.dll.sig", dwFileAttributes=0x20) returned 0 [0164.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf3d8) returned 1 [0164.597] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20f5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe20f5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfd413b84, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x35b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0164.597] wcscmp (_String1="widevinecdmadapter.dll", _String2=".") returned 1 [0164.597] wcscmp (_String1="widevinecdmadapter.dll", _String2="..") returned 1 [0164.597] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfd56b0ae, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0164.597] wcscmp (_String1="widevinecdmadapter.dll.sig", _String2=".") returned 1 [0164.597] wcscmp (_String1="widevinecdmadapter.dll.sig", _String2="..") returned 1 [0164.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de76b8 [0164.597] wcscpy (in: _Dest=0x3de76b8, _Source="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86" [0164.597] wcscat (in: _Dest=0x3de76b8, _Source="\\" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\" [0164.597] wcscat (in: _Dest=0x3de76b8, _Source="widevinecdmadapter.dll.sig" | out: _Dest="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig") returned="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig" [0164.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig")) returned 0x20 [0164.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig", dwFileAttributes=0x20) returned 0 [0164.598] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.598] GetLastError () returned 0x5 [0164.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x86\\widevinecdmadapter.dll.sig", dwFileAttributes=0x20) returned 0 [0164.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de76b8) returned 1 [0164.599] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe211b870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xfd56b0ae, ftLastWriteTime.dwHighDateTime=0x1d2c89b, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 0 [0164.599] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0164.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52090) returned 1 [0164.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 [0164.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d406a0) returned 1 [0164.601] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe09c0090, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe211b870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe211b870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x86", cAlternateFileName="")) returned 0 [0164.601] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0164.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0164.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66258) returned 1 [0164.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 1952 os_tid = 0x265c [0146.702] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20 [0146.702] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0146.702] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.703] GetLastError () returned 0x5 [0146.703] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0 [0146.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5cf0) returned 1 Thread: id = 1953 os_tid = 0x2660 [0146.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml")) returned 0x20 [0146.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0146.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0146.711] GetLastError () returned 0x5 [0146.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", dwFileAttributes=0x20) returned 0 [0146.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 Thread: id = 1954 os_tid = 0x2664 [0146.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml")) returned 0x20 [0150.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", dwFileAttributes=0x20) returned 0 [0150.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.079] GetLastError () returned 0x5 [0150.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", dwFileAttributes=0x20) returned 0 [0150.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x325320) returned 1 Thread: id = 1955 os_tid = 0x2668 [0146.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml")) returned 0x20 [0149.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", dwFileAttributes=0x20) returned 0 [0149.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.011] GetLastError () returned 0x5 [0149.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", dwFileAttributes=0x20) returned 0 [0149.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5b80) returned 1 Thread: id = 1956 os_tid = 0x266c [0146.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml")) returned 0x20 [0149.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0149.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.019] GetLastError () returned 0x5 [0149.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", dwFileAttributes=0x20) returned 0 [0149.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66610) returned 1 Thread: id = 1957 os_tid = 0x2670 [0146.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml")) returned 0x20 [0149.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0149.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.021] GetLastError () returned 0x5 [0149.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", dwFileAttributes=0x20) returned 0 [0149.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3251d0) returned 1 Thread: id = 1958 os_tid = 0x2674 [0146.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml")) returned 0x20 [0149.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", dwFileAttributes=0x20) returned 0 [0149.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.023] GetLastError () returned 0x5 [0149.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", dwFileAttributes=0x20) returned 0 [0149.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x326580) returned 1 Thread: id = 1959 os_tid = 0x2678 [0146.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml")) returned 0x20 [0150.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0150.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.093] GetLastError () returned 0x5 [0150.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", dwFileAttributes=0x20) returned 0 [0150.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x326430) returned 1 Thread: id = 1960 os_tid = 0x267c [0146.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml")) returned 0x20 [0150.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", dwFileAttributes=0x20) returned 0 [0150.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.080] GetLastError () returned 0x5 [0150.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", dwFileAttributes=0x20) returned 0 [0150.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4dc0) returned 1 Thread: id = 1961 os_tid = 0x2680 [0146.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml")) returned 0x20 [0150.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0150.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.082] GetLastError () returned 0x5 [0150.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", dwFileAttributes=0x20) returned 0 [0150.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f0f8) returned 1 Thread: id = 1962 os_tid = 0x2684 [0146.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml")) returned 0x20 [0150.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", dwFileAttributes=0x20) returned 0 [0150.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.084] GetLastError () returned 0x5 [0150.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", dwFileAttributes=0x20) returned 0 [0150.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 Thread: id = 1963 os_tid = 0x2688 [0146.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml")) returned 0x20 [0150.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0150.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.096] GetLastError () returned 0x5 [0150.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", dwFileAttributes=0x20) returned 0 [0150.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f248) returned 1 Thread: id = 1964 os_tid = 0x268c [0146.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml")) returned 0x20 [0150.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", dwFileAttributes=0x20) returned 0 [0150.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.098] GetLastError () returned 0x5 [0150.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", dwFileAttributes=0x20) returned 0 [0150.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f2f0) returned 1 Thread: id = 1965 os_tid = 0x2690 [0146.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml")) returned 0x20 [0150.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0150.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.086] GetLastError () returned 0x5 [0150.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", dwFileAttributes=0x20) returned 0 [0150.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f398) returned 1 Thread: id = 1966 os_tid = 0x2694 [0146.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml")) returned 0x20 [0148.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", dwFileAttributes=0x20) returned 0 [0148.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.990] GetLastError () returned 0x5 [0148.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", dwFileAttributes=0x20) returned 0 [0148.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f440) returned 1 Thread: id = 1967 os_tid = 0x2698 [0146.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml")) returned 0x20 [0150.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", dwFileAttributes=0x20) returned 0 [0150.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.089] GetLastError () returned 0x5 [0150.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", dwFileAttributes=0x20) returned 0 [0150.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f4e8) returned 1 Thread: id = 1968 os_tid = 0x269c [0146.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml")) returned 0x20 [0149.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", dwFileAttributes=0x20) returned 0 [0149.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.013] GetLastError () returned 0x5 [0149.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", dwFileAttributes=0x20) returned 0 [0149.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f590) returned 1 Thread: id = 1969 os_tid = 0x26a0 [0146.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml")) returned 0x20 [0150.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", dwFileAttributes=0x20) returned 0 [0150.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.091] GetLastError () returned 0x5 [0150.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", dwFileAttributes=0x20) returned 0 [0150.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6080) returned 1 Thread: id = 1970 os_tid = 0x26a4 [0146.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml")) returned 0x20 [0149.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0149.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.017] GetLastError () returned 0x5 [0149.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", dwFileAttributes=0x20) returned 0 [0149.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f638) returned 1 Thread: id = 1971 os_tid = 0x26a8 [0147.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml")) returned 0x20 [0149.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", dwFileAttributes=0x20) returned 0 [0149.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.015] GetLastError () returned 0x5 [0149.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", dwFileAttributes=0x20) returned 0 [0149.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f6e0) returned 1 Thread: id = 1973 os_tid = 0x26bc [0147.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf")) returned 0x20 [0147.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0147.421] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.422] GetLastError () returned 0x5 [0147.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0147.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5990) returned 1 Thread: id = 1974 os_tid = 0x26c0 [0147.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf")) returned 0x20 [0147.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0147.425] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.425] GetLastError () returned 0x5 [0147.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0147.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64718) returned 1 Thread: id = 1975 os_tid = 0x26c4 [0147.433] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst")) returned 0x2020 [0148.557] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst", dwFileAttributes=0x20) returned 1 [0154.867] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15e8 [0154.868] GetFileSizeEx (in: hFile=0x15e8, lpFileSize=0x8e5fa34 | out: lpFileSize=0x8e5fa34*=34258) returned 1 [0154.868] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x85ce, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.868] ReadFile (in: hFile=0x15e8, lpBuffer=0x8e5fa10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e5fa20, lpOverlapped=0x0 | out: lpBuffer=0x8e5fa10*, lpNumberOfBytesRead=0x8e5fa20*=0x4, lpOverlapped=0x0) returned 1 [0154.871] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0154.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0154.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0154.871] NtQuerySystemTime (in: CurrentTime=0x8e5f9a8 | out: CurrentTime=0x8e5f9a8*=132462177335184000) returned 0x0 [0154.871] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x587062ca [0154.871] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x115358ae [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x4c72607b [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x665e5e5b [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0xa55b875 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x3afb1893 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x35d9387d [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x2207b66 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x6d4cb303 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x1e403926 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x70db1a51 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x6ddd29a6 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x1397c536 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x18ddaf2c [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x6638ed2e [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x1c72ccf8 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x24fc782 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x263f65f9 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x15844f89 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x35a63796 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x4662ce5c [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x53caf0b8 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0xb49e558 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x5128ba5 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x3f8fde35 [0154.872] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x5f7bfb13 [0154.873] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0xacdf1ff [0154.873] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x76e30f36 [0154.873] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x4b18840 [0154.873] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x1e18671b [0154.873] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x909fa8f [0154.873] RtlRandomEx (in: Seed=0x8e5f9a0 | out: Seed=0x8e5f9a0) returned 0x66a6be17 [0154.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0154.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0154.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0154.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0154.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0154.882] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.882] ReadFile (in: hFile=0x15e8, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8e5f9a8, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0x8e5f9a8*=0x3c00, lpOverlapped=0x0) returned 1 [0154.886] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85bc0 [0154.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0154.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0154.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0154.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0154.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0154.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0154.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85bc0) returned 1 [0154.887] WriteFile (in: hFile=0x15e8, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8e5f9a8, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0x8e5f9a8*=0x3c00, lpOverlapped=0x0) returned 1 [0156.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0156.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0156.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7ad7bf0 [0156.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e499b0 [0156.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0156.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0156.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0156.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7ad7c70 [0156.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0156.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0156.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0156.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0156.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e499b0) returned 1 [0156.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55968 [0156.467] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.467] WriteFile (in: hFile=0x15e8, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x8e5fa28, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0x8e5fa28*=0x116, lpOverlapped=0x0) returned 1 [0157.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0157.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0157.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0157.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0157.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a375c0 [0157.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0157.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0157.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0157.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0157.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0157.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3d489a8 [0157.201] sprintf (in: _Dest=0x3d489a8, _Format="%c%c" | out: _Dest="60") returned 2 [0157.201] sprintf (in: _Dest=0x3d489aa, _Format="%c%c" | out: _Dest="3f") returned 2 [0157.201] sprintf (in: _Dest=0x3d489ac, _Format="%c%c" | out: _Dest="3e") returned 2 [0157.201] sprintf (in: _Dest=0x3d489ae, _Format="%c%c" | out: _Dest="b2") returned 2 [0157.201] sprintf (in: _Dest=0x3d489b0, _Format="%c%c" | out: _Dest="3e") returned 2 [0157.201] sprintf (in: _Dest=0x3d489b2, _Format="%c%c" | out: _Dest="b3") returned 2 [0157.201] sprintf (in: _Dest=0x3d489b4, _Format="%c%c" | out: _Dest="5a") returned 2 [0157.201] sprintf (in: _Dest=0x3d489b6, _Format="%c%c" | out: _Dest="73") returned 2 [0157.201] sprintf (in: _Dest=0x3d489b8, _Format="%c%c" | out: _Dest="4b") returned 2 [0157.201] sprintf (in: _Dest=0x3d489ba, _Format="%c%c" | out: _Dest="61") returned 2 [0157.201] sprintf (in: _Dest=0x3d489bc, _Format="%c%c" | out: _Dest="a3") returned 2 [0157.201] sprintf (in: _Dest=0x3d489be, _Format="%c%c" | out: _Dest="d3") returned 2 [0157.202] sprintf (in: _Dest=0x3d489c0, _Format="%c%c" | out: _Dest="44") returned 2 [0157.202] sprintf (in: _Dest=0x3d489c2, _Format="%c%c" | out: _Dest="ad") returned 2 [0157.202] sprintf (in: _Dest=0x3d489c4, _Format="%c%c" | out: _Dest="ea") returned 2 [0157.202] sprintf (in: _Dest=0x3d489c6, _Format="%c%c" | out: _Dest="84") returned 2 [0157.202] sprintf (in: _Dest=0x3d489c8, _Format="%c%c" | out: _Dest="e8") returned 2 [0157.202] sprintf (in: _Dest=0x3d489ca, _Format="%c%c" | out: _Dest="c7") returned 2 [0157.202] sprintf (in: _Dest=0x3d489cc, _Format="%c%c" | out: _Dest="81") returned 2 [0157.202] sprintf (in: _Dest=0x3d489ce, _Format="%c%c" | out: _Dest="56") returned 2 [0157.202] sprintf (in: _Dest=0x3d489d0, _Format="%c%c" | out: _Dest="29") returned 2 [0157.202] sprintf (in: _Dest=0x3d489d2, _Format="%c%c" | out: _Dest="80") returned 2 [0157.202] sprintf (in: _Dest=0x3d489d4, _Format="%c%c" | out: _Dest="b6") returned 2 [0157.202] sprintf (in: _Dest=0x3d489d6, _Format="%c%c" | out: _Dest="0b") returned 2 [0157.202] sprintf (in: _Dest=0x3d489d8, _Format="%c%c" | out: _Dest="e3") returned 2 [0157.202] sprintf (in: _Dest=0x3d489da, _Format="%c%c" | out: _Dest="bb") returned 2 [0157.202] sprintf (in: _Dest=0x3d489dc, _Format="%c%c" | out: _Dest="b8") returned 2 [0157.202] sprintf (in: _Dest=0x3d489de, _Format="%c%c" | out: _Dest="22") returned 2 [0157.202] sprintf (in: _Dest=0x3d489e0, _Format="%c%c" | out: _Dest="5a") returned 2 [0157.202] sprintf (in: _Dest=0x3d489e2, _Format="%c%c" | out: _Dest="91") returned 2 [0157.203] sprintf (in: _Dest=0x3d489e4, _Format="%c%c" | out: _Dest="d2") returned 2 [0157.203] sprintf (in: _Dest=0x3d489e6, _Format="%c%c" | out: _Dest="f5") returned 2 [0157.203] sprintf (in: _Dest=0x3d489e8, _Format="%c%c" | out: _Dest="f2") returned 2 [0157.203] sprintf (in: _Dest=0x3d489ea, _Format="%c%c" | out: _Dest="cb") returned 2 [0157.203] sprintf (in: _Dest=0x3d489ec, _Format="%c%c" | out: _Dest="6b") returned 2 [0157.203] sprintf (in: _Dest=0x3d489ee, _Format="%c%c" | out: _Dest="36") returned 2 [0157.203] RtlInitAnsiString (in: DestinationString=0x8e5f9b0, SourceString="603f3eb23eb35a734b61a3d344adea84e8c781562980b60be3bbb8225a91d2f5f2cb6b36" | out: DestinationString="603f3eb23eb35a734b61a3d344adea84e8c781562980b60be3bbb8225a91d2f5f2cb6b36") [0157.203] RtlAnsiStringToUnicodeString (in: DestinationString=0x8e5f9a8, SourceString="603f3eb23eb35a734b61a3d344adea84e8c781562980b60be3bbb8225a91d2f5f2cb6b36", AllocateDestinationString=1 | out: DestinationString="603f3eb23eb35a734b61a3d344adea84e8c781562980b60be3bbb8225a91d2f5f2cb6b36") returned 0x0 [0157.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62b30 [0157.203] RtlFreeAnsiString (AnsiString="6") [0157.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d489a8) returned 1 [0157.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0157.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0157.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 [0157.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7c70) returned 1 [0157.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0157.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7bf0) returned 1 [0157.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0157.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0157.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0157.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0157.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63350 [0157.204] wcscat (in: _Dest=0x7a63350, _Source="603f3eb23eb35a734b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\603f3eb23eb35a734b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\603f3eb23eb35a734b" [0157.204] wcscat (in: _Dest=0x7a63350, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\603f3eb23eb35a734b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\603f3eb23eb35a734b.68814f" [0157.204] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\603f3eb23eb35a734b.68814f", NtPathName=0x8e5f9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\603f3eb23eb35a734b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0157.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf7f8 [0157.208] FlushFileBuffers (hFile=0x15e8) returned 1 [0157.463] CloseHandle (hObject=0x15e8) returned 1 [0157.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7020 [0157.464] wcscpy (in: _Dest=0x3eb7020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0157.464] wcscat (in: _Dest=0x3eb7020, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" [0157.464] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\68814f-readme.txt")) returned 0x2020 [0157.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7020) returned 1 [0157.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7578) returned 1 Thread: id = 1976 os_tid = 0x26c8 [0147.439] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst")) returned 0x2020 [0148.557] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst", dwFileAttributes=0x20) returned 1 [0154.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2454 [0154.837] GetFileSizeEx (in: hFile=0x2454, lpFileSize=0x8dffcc4 | out: lpFileSize=0x8dffcc4*=138459) returned 1 [0154.837] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x21cd7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.837] ReadFile (in: hFile=0x2454, lpBuffer=0x8dffca0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8dffcb0, lpOverlapped=0x0 | out: lpBuffer=0x8dffca0*, lpNumberOfBytesRead=0x8dffcb0*=0x4, lpOverlapped=0x0) returned 1 [0154.840] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0154.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0154.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0154.840] NtQuerySystemTime (in: CurrentTime=0x8dffc38 | out: CurrentTime=0x8dffc38*=132462177334872000) returned 0x0 [0154.840] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x73c668ef [0154.840] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x5dbbbdc3 [0154.840] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x2bb4a0b5 [0154.840] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x295d6fb4 [0154.840] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x70b07507 [0154.840] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0xc22f42 [0154.840] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x501c7140 [0154.840] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x63199622 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x16e28274 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x97166de [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x36db4c82 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x352f4639 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0xe22382d [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x580af443 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0xcdbf590 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x3f2465ea [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x2b846b43 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0xf70d547 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x354f1b1 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0xcd8adb0 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x40b45d13 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x4c159c85 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x3fabb66a [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x66b99251 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x4b5a1d10 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x6248bfd9 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x128ce542 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x7cb2681e [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x65998903 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x5c4ebce7 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x21f33e09 [0154.841] RtlRandomEx (in: Seed=0x8dffc30 | out: Seed=0x8dffc30) returned 0x5954d416 [0154.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0154.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0154.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0154.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0154.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0154.850] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.850] ReadFile (in: hFile=0x2454, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8dffc38, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0x8dffc38*=0x3c00, lpOverlapped=0x0) returned 1 [0154.851] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85bc0 [0154.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0154.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0154.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0154.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0154.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0154.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0154.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85bc0) returned 1 [0154.852] WriteFile (in: hFile=0x2454, lpBuffer=0x7beeb90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8dffc38, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesWritten=0x8dffc38*=0x3c00, lpOverlapped=0x0) returned 1 [0156.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0156.454] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.454] ReadFile (in: hFile=0x2454, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8dffc38, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0x8dffc38*=0x3c00, lpOverlapped=0x0) returned 1 [0156.455] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e499b0 [0156.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0156.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0156.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0156.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0156.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0156.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0156.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0156.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e499b0) returned 1 [0156.456] WriteFile (in: hFile=0x2454, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8dffc38, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0x8dffc38*=0x3c00, lpOverlapped=0x0) returned 1 [0156.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0156.459] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x1e0db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.459] ReadFile (in: hFile=0x2454, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8dffc38, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0x8dffc38*=0x3c00, lpOverlapped=0x0) returned 1 [0156.459] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x1e0db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e499b0 [0156.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0156.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0156.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0156.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0156.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0156.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0156.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0156.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0156.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e499b0) returned 1 [0156.460] WriteFile (in: hFile=0x2454, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8dffc38, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0x8dffc38*=0x3c00, lpOverlapped=0x0) returned 1 [0156.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0156.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47b98 [0156.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0156.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0156.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0156.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3dac3b0 [0156.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48b58 [0156.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0156.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0156.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0156.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3dabe38 [0156.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0156.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0156.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0156.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b58) returned 1 [0156.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dce108 [0156.463] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.463] WriteFile (in: hFile=0x2454, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x8dffcb8, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x8dffcb8*=0x154, lpOverlapped=0x0) returned 1 [0156.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24308 [0156.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0156.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0156.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec59c8) returned 1 [0156.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a375c0 [0156.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0156.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0156.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0156.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0156.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24308) returned 1 [0156.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e84998 [0156.903] sprintf (in: _Dest=0x3e84998, _Format="%c%c" | out: _Dest="c0") returned 2 [0156.903] sprintf (in: _Dest=0x3e8499a, _Format="%c%c" | out: _Dest="f5") returned 2 [0156.903] sprintf (in: _Dest=0x3e8499c, _Format="%c%c" | out: _Dest="3f") returned 2 [0156.903] sprintf (in: _Dest=0x3e8499e, _Format="%c%c" | out: _Dest="3f") returned 2 [0156.903] sprintf (in: _Dest=0x3e849a0, _Format="%c%c" | out: _Dest="f4") returned 2 [0156.903] sprintf (in: _Dest=0x3e849a2, _Format="%c%c" | out: _Dest="bf") returned 2 [0156.903] sprintf (in: _Dest=0x3e849a4, _Format="%c%c" | out: _Dest="d1") returned 2 [0156.903] sprintf (in: _Dest=0x3e849a6, _Format="%c%c" | out: _Dest="71") returned 2 [0156.903] sprintf (in: _Dest=0x3e849a8, _Format="%c%c" | out: _Dest="b1") returned 2 [0156.903] sprintf (in: _Dest=0x3e849aa, _Format="%c%c" | out: _Dest="5c") returned 2 [0156.903] sprintf (in: _Dest=0x3e849ac, _Format="%c%c" | out: _Dest="86") returned 2 [0156.903] sprintf (in: _Dest=0x3e849ae, _Format="%c%c" | out: _Dest="53") returned 2 [0156.903] sprintf (in: _Dest=0x3e849b0, _Format="%c%c" | out: _Dest="fe") returned 2 [0156.903] sprintf (in: _Dest=0x3e849b2, _Format="%c%c" | out: _Dest="30") returned 2 [0156.903] sprintf (in: _Dest=0x3e849b4, _Format="%c%c" | out: _Dest="88") returned 2 [0156.903] sprintf (in: _Dest=0x3e849b6, _Format="%c%c" | out: _Dest="31") returned 2 [0156.903] sprintf (in: _Dest=0x3e849b8, _Format="%c%c" | out: _Dest="50") returned 2 [0156.903] sprintf (in: _Dest=0x3e849ba, _Format="%c%c" | out: _Dest="5c") returned 2 [0156.903] sprintf (in: _Dest=0x3e849bc, _Format="%c%c" | out: _Dest="a6") returned 2 [0156.903] sprintf (in: _Dest=0x3e849be, _Format="%c%c" | out: _Dest="6d") returned 2 [0156.904] sprintf (in: _Dest=0x3e849c0, _Format="%c%c" | out: _Dest="db") returned 2 [0156.904] sprintf (in: _Dest=0x3e849c2, _Format="%c%c" | out: _Dest="f3") returned 2 [0156.904] sprintf (in: _Dest=0x3e849c4, _Format="%c%c" | out: _Dest="d8") returned 2 [0156.904] sprintf (in: _Dest=0x3e849c6, _Format="%c%c" | out: _Dest="46") returned 2 [0156.904] sprintf (in: _Dest=0x3e849c8, _Format="%c%c" | out: _Dest="e8") returned 2 [0156.904] sprintf (in: _Dest=0x3e849ca, _Format="%c%c" | out: _Dest="4c") returned 2 [0156.904] sprintf (in: _Dest=0x3e849cc, _Format="%c%c" | out: _Dest="b1") returned 2 [0156.904] sprintf (in: _Dest=0x3e849ce, _Format="%c%c" | out: _Dest="bf") returned 2 [0156.904] sprintf (in: _Dest=0x3e849d0, _Format="%c%c" | out: _Dest="be") returned 2 [0156.904] sprintf (in: _Dest=0x3e849d2, _Format="%c%c" | out: _Dest="d5") returned 2 [0156.904] sprintf (in: _Dest=0x3e849d4, _Format="%c%c" | out: _Dest="31") returned 2 [0156.904] sprintf (in: _Dest=0x3e849d6, _Format="%c%c" | out: _Dest="60") returned 2 [0156.904] sprintf (in: _Dest=0x3e849d8, _Format="%c%c" | out: _Dest="cb") returned 2 [0156.904] sprintf (in: _Dest=0x3e849da, _Format="%c%c" | out: _Dest="25") returned 2 [0156.904] RtlInitAnsiString (in: DestinationString=0x8dffc40, SourceString="c0f53f3ff4bfd171b15c8653fe308831505ca66ddbf3d846e84cb1bfbed53160cb25" | out: DestinationString="c0f53f3ff4bfd171b15c8653fe308831505ca66ddbf3d846e84cb1bfbed53160cb25") [0156.904] RtlAnsiStringToUnicodeString (in: DestinationString=0x8dffc38, SourceString="c0f53f3ff4bfd171b15c8653fe308831505ca66ddbf3d846e84cb1bfbed53160cb25", AllocateDestinationString=1 | out: DestinationString="c0f53f3ff4bfd171b15c8653fe308831505ca66ddbf3d846e84cb1bfbed53160cb25") returned 0x0 [0156.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64aa8 [0156.905] RtlFreeAnsiString (AnsiString="c") [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84998) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec59c8) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce108) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dabe38) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47b98) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29d0) returned 1 [0156.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0156.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a635d0 [0156.906] wcscat (in: _Dest=0x7a635d0, _Source="c0f53f3ff4bfd171b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\c0f53f3ff4bfd171b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\c0f53f3ff4bfd171b" [0156.906] wcscat (in: _Dest=0x7a635d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\c0f53f3ff4bfd171b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\c0f53f3ff4bfd171b.68814f" [0156.906] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\c0f53f3ff4bfd171b.68814f", NtPathName=0x8dffc30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\c0f53f3ff4bfd171b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0156.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaec78 [0156.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaec78) returned 1 [0156.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb810) returned 1 [0156.916] NtQueryInformationFile (in: FileHandle=0x2454, IoStatusBlock=0x8dffc08, FileInformation=0x8dffc10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8dffc08, FileInformation=0x8dffc10) returned 0x0 [0156.916] NtSetInformationFile (FileHandle=0x2454, IoStatusBlock=0x8dffc08, FileInformation=0x8dffc10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0156.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a635d0) returned 1 [0156.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 [0156.920] FlushFileBuffers (hFile=0x2454) returned 1 [0156.924] CloseHandle (hObject=0x2454) returned 1 [0156.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64aa8 [0156.925] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0156.926] wcscat (in: _Dest=0x7a64aa8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" [0156.926] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\68814f-readme.txt")) returned 0x2020 [0156.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 [0156.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449f0) returned 1 Thread: id = 1977 os_tid = 0x26cc [0147.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a098 [0147.440] wcscpy (in: _Dest=0x3e1a098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" [0147.440] wcscat (in: _Dest=0x3e1a098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" [0147.441] wcscat (in: _Dest=0x3e1a098, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*" [0147.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4d70 [0147.441] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xebdb3e10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf610 [0148.558] wcscmp (_String1=".", _String2=".") returned 0 [0148.558] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xebdb3e10, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.558] wcscmp (_String1="..", _String2=".") returned 1 [0148.558] wcscmp (_String1="..", _String2="..") returned 0 [0148.558] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xcb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0148.558] wcscmp (_String1="AcroFnt10.lst", _String2=".") returned 1 [0148.558] wcscmp (_String1="AcroFnt10.lst", _String2="..") returned 1 [0148.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6dc8 [0148.558] wcscpy (in: _Dest=0x7ad6dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" [0148.559] wcscat (in: _Dest=0x7ad6dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" [0148.559] wcscat (in: _Dest=0x7ad6dc8, _Source="AcroFnt10.lst" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" [0166.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0166.617] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdb3e10, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xebdb3e10, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0x85747b40, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0xcb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 0 [0166.617] FindClose (in: hFindFile=0x3dcf610 | out: hFindFile=0x3dcf610) returned 1 [0166.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d70) returned 1 [0166.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a098) returned 1 [0166.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 Thread: id = 1978 os_tid = 0x26d0 [0147.447] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents")) returned 0x2020 [0148.140] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents", dwFileAttributes=0x20) returned 1 [0154.807] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ba0 [0154.807] GetFileSizeEx (in: hFile=0x1ba0, lpFileSize=0x63bfcb4 | out: lpFileSize=0x63bfcb4*=5120) returned 1 [0154.807] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x13fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.807] ReadFile (in: hFile=0x1ba0, lpBuffer=0x63bfc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x63bfca0, lpOverlapped=0x0 | out: lpBuffer=0x63bfc90*, lpNumberOfBytesRead=0x63bfca0*=0x4, lpOverlapped=0x0) returned 1 [0154.809] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0154.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0154.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0154.810] NtQuerySystemTime (in: CurrentTime=0x63bfc28 | out: CurrentTime=0x63bfc28*=132462177334560000) returned 0x0 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0xd04f3cf [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x36ba06f2 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x520ec26c [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x120e7e9f [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x67793496 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x2985ee9b [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0xb9c1686 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x420d7952 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x68cca800 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x509b697e [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x77da87b5 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x5ac5c15e [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x51ea13bd [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x3951bb96 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x1a29f04d [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x818878a [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0xf5c70b6 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x1888bba2 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x4069aea8 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x267afe5f [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x5b8ebc03 [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x7a40609e [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x5e0cccfa [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x4370cece [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x2bc4f9d [0154.810] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x25d8b702 [0154.811] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x9ac6565 [0154.811] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x5ecafe66 [0154.811] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x27d3d159 [0154.811] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x6307ec0c [0154.811] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x6412d398 [0154.811] RtlRandomEx (in: Seed=0x63bfc20 | out: Seed=0x63bfc20) returned 0x35db270c [0154.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0154.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0154.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0154.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0154.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a241e8 [0154.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0154.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0154.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0154.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0154.820] ReadFile (in: hFile=0x1ba0, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x1400, lpNumberOfBytesRead=0x63bfc1c, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0x63bfc1c*=0x1400, lpOverlapped=0x0) returned 1 [0154.825] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.825] WriteFile (in: hFile=0x1ba0, lpBuffer=0x7beeb90*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x63bfc20, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesWritten=0x63bfc20*=0x1400, lpOverlapped=0x0) returned 1 [0154.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0154.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0154.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0154.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0154.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0154.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a241e8) returned 1 [0154.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3dac3b0 [0154.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a241e8 [0154.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0154.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0154.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3dac3e8 [0154.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0154.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0154.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0154.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a241e8) returned 1 [0154.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55968 [0154.828] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.828] WriteFile (in: hFile=0x1ba0, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x63bfca8, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0x63bfca8*=0x112, lpOverlapped=0x0) returned 1 [0155.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0155.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0155.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0155.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0155.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0155.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0155.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2b0 [0155.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0155.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0155.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0155.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e84268 [0155.830] sprintf (in: _Dest=0x3e84268, _Format="%c%c" | out: _Dest="7d") returned 2 [0155.830] sprintf (in: _Dest=0x3e8426a, _Format="%c%c" | out: _Dest="5f") returned 2 [0155.830] sprintf (in: _Dest=0x3e8426c, _Format="%c%c" | out: _Dest="16") returned 2 [0155.830] sprintf (in: _Dest=0x3e8426e, _Format="%c%c" | out: _Dest="f2") returned 2 [0155.830] sprintf (in: _Dest=0x3e84270, _Format="%c%c" | out: _Dest="96") returned 2 [0155.830] sprintf (in: _Dest=0x3e84272, _Format="%c%c" | out: _Dest="3b") returned 2 [0155.830] sprintf (in: _Dest=0x3e84274, _Format="%c%c" | out: _Dest="fe") returned 2 [0155.831] sprintf (in: _Dest=0x3e84276, _Format="%c%c" | out: _Dest="8e") returned 2 [0155.831] sprintf (in: _Dest=0x3e84278, _Format="%c%c" | out: _Dest="03") returned 2 [0155.831] sprintf (in: _Dest=0x3e8427a, _Format="%c%c" | out: _Dest="b1") returned 2 [0155.831] sprintf (in: _Dest=0x3e8427c, _Format="%c%c" | out: _Dest="20") returned 2 [0155.831] sprintf (in: _Dest=0x3e8427e, _Format="%c%c" | out: _Dest="8f") returned 2 [0155.831] sprintf (in: _Dest=0x3e84280, _Format="%c%c" | out: _Dest="1c") returned 2 [0155.831] sprintf (in: _Dest=0x3e84282, _Format="%c%c" | out: _Dest="7a") returned 2 [0155.831] sprintf (in: _Dest=0x3e84284, _Format="%c%c" | out: _Dest="c0") returned 2 [0155.831] sprintf (in: _Dest=0x3e84286, _Format="%c%c" | out: _Dest="8d") returned 2 [0155.831] sprintf (in: _Dest=0x3e84288, _Format="%c%c" | out: _Dest="7d") returned 2 [0155.831] sprintf (in: _Dest=0x3e8428a, _Format="%c%c" | out: _Dest="25") returned 2 [0155.831] sprintf (in: _Dest=0x3e8428c, _Format="%c%c" | out: _Dest="af") returned 2 [0155.831] sprintf (in: _Dest=0x3e8428e, _Format="%c%c" | out: _Dest="72") returned 2 [0155.831] sprintf (in: _Dest=0x3e84290, _Format="%c%c" | out: _Dest="52") returned 2 [0155.831] sprintf (in: _Dest=0x3e84292, _Format="%c%c" | out: _Dest="59") returned 2 [0155.831] sprintf (in: _Dest=0x3e84294, _Format="%c%c" | out: _Dest="06") returned 2 [0155.832] sprintf (in: _Dest=0x3e84296, _Format="%c%c" | out: _Dest="3f") returned 2 [0155.832] sprintf (in: _Dest=0x3e84298, _Format="%c%c" | out: _Dest="02") returned 2 [0155.832] sprintf (in: _Dest=0x3e8429a, _Format="%c%c" | out: _Dest="5b") returned 2 [0155.832] sprintf (in: _Dest=0x3e8429c, _Format="%c%c" | out: _Dest="f5") returned 2 [0155.832] sprintf (in: _Dest=0x3e8429e, _Format="%c%c" | out: _Dest="83") returned 2 [0155.832] sprintf (in: _Dest=0x3e842a0, _Format="%c%c" | out: _Dest="fa") returned 2 [0155.832] sprintf (in: _Dest=0x3e842a2, _Format="%c%c" | out: _Dest="74") returned 2 [0155.832] sprintf (in: _Dest=0x3e842a4, _Format="%c%c" | out: _Dest="d9") returned 2 [0155.832] sprintf (in: _Dest=0x3e842a6, _Format="%c%c" | out: _Dest="82") returned 2 [0155.832] RtlInitAnsiString (in: DestinationString=0x63bfc30, SourceString="7d5f16f2963bfe8e03b1208f1c7ac08d7d25af725259063f025bf583fa74d982" | out: DestinationString="7d5f16f2963bfe8e03b1208f1c7ac08d7d25af725259063f025bf583fa74d982") [0155.832] RtlAnsiStringToUnicodeString (in: DestinationString=0x63bfc28, SourceString="7d5f16f2963bfe8e03b1208f1c7ac08d7d25af725259063f025bf583fa74d982", AllocateDestinationString=1 | out: DestinationString="7d5f16f2963bfe8e03b1208f1c7ac08d7d25af725259063f025bf583fa74d982") returned 0x0 [0155.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a602d0 [0155.832] RtlFreeAnsiString (AnsiString="7") [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84268) returned 1 [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3e8) returned 1 [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0155.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0155.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62f90 [0155.834] wcscat (in: _Dest=0x7a62f90, _Source="7d5f16f2963bfe8e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\7d5f16f2963bfe8e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\7d5f16f2963bfe8e" [0155.834] wcscat (in: _Dest=0x7a62f90, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\7d5f16f2963bfe8e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\7d5f16f2963bfe8e.68814f" [0155.834] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\7d5f16f2963bfe8e.68814f", NtPathName=0x63bfc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\7d5f16f2963bfe8e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3eaf010 [0155.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf010) returned 1 [0155.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a50dd8) returned 1 [0155.844] NtQueryInformationFile (in: FileHandle=0x1ba0, IoStatusBlock=0x63bfbf8, FileInformation=0x63bfc00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x63bfbf8, FileInformation=0x63bfc00) returned 0x0 [0155.844] NtSetInformationFile (FileHandle=0x1ba0, IoStatusBlock=0x63bfbf8, FileInformation=0x63bfc00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0155.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f90) returned 1 [0155.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a602d0) returned 1 [0155.848] FlushFileBuffers (hFile=0x1ba0) returned 1 [0155.849] CloseHandle (hObject=0x1ba0) returned 1 [0155.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6310 [0155.854] wcscpy (in: _Dest=0x3eb6310, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0155.854] wcscat (in: _Dest=0x3eb6310, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" [0155.854] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\68814f-readme.txt")) returned 0xffffffff [0155.854] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1dd4 [0155.858] WriteFile (in: hFile=0x1dd4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x63bfc3c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x63bfc3c*=0x8b9, lpOverlapped=0x0) returned 1 [0155.864] CloseHandle (hObject=0x1dd4) returned 1 [0155.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6310) returned 1 [0155.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 1979 os_tid = 0x26d4 [0147.448] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin")) returned 0x2020 [0148.139] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin", dwFileAttributes=0x20) returned 1 [0154.839] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ff0 [0154.852] GetFileSizeEx (in: hFile=0x1ff0, lpFileSize=0x91efa6c | out: lpFileSize=0x91efa6c*=77254) returned 1 [0154.852] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0x12dc2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.852] ReadFile (in: hFile=0x1ff0, lpBuffer=0x91efa48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x91efa58, lpOverlapped=0x0 | out: lpBuffer=0x91efa48*, lpNumberOfBytesRead=0x91efa58*=0x4, lpOverlapped=0x0) returned 1 [0154.855] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0154.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0154.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0154.855] NtQuerySystemTime (in: CurrentTime=0x91ef9e0 | out: CurrentTime=0x91ef9e0*=132462177335028000) returned 0x0 [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x32264dd0 [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x33a9f499 [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x383e7083 [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x5e97bb50 [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x2eb67244 [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x57e01b83 [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x1ff53713 [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x5a416434 [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x683d1380 [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0xf2d8ccd [0154.855] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x7e26001 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x4453348d [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x1e6db0d2 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x7a818553 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x6ecc1957 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x1f5421f5 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x147d782a [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x2c122286 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x5e4ce75b [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x6a2a1cbb [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x4fd4e4a6 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x1552e2c5 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x60a5f8af [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x6a1100c3 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x4d7fb98d [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x70a1210e [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x631b14e6 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x1ce5a31d [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x3217e11d [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x12a424fb [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x71811a92 [0154.856] RtlRandomEx (in: Seed=0x91ef9d8 | out: Seed=0x91ef9d8) returned 0x318c85b1 [0154.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0154.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0154.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0154.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0154.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0154.865] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.865] ReadFile (in: hFile=0x1ff0, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x91ef9e0, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x91ef9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0154.866] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85bc0 [0154.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0154.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0154.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0154.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0154.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0154.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0154.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85bc0) returned 1 [0154.867] WriteFile (in: hFile=0x1ff0, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x91ef9e0, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0x91ef9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0156.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0156.455] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.456] ReadFile (in: hFile=0x1ff0, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x91ef9e0, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x91ef9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0156.461] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e499b0 [0156.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0156.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0156.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0156.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0156.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0156.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0156.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0156.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0156.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e499b0) returned 1 [0156.465] WriteFile (in: hFile=0x1ff0, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x91ef9e0, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0x91ef9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0157.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0157.175] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0xf1c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.178] ReadFile (in: hFile=0x1ff0, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x91ef9e0, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x91ef9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0157.179] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0xf1c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be208 [0157.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0157.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0157.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0157.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0157.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0157.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0157.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0157.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be208) returned 1 [0157.180] WriteFile (in: hFile=0x1ff0, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x91ef9e0, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0x91ef9e0*=0x3c00, lpOverlapped=0x0) returned 1 [0157.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0157.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47b30 [0157.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0157.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37590 [0157.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0157.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0157.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0157.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0157.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be208) returned 1 [0157.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e0ac18 [0157.185] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.185] WriteFile (in: hFile=0x1ff0, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x91efa60, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0x91efa60*=0x14c, lpOverlapped=0x0) returned 1 [0157.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be208 [0157.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0157.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0157.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0157.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0157.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0157.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0157.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0157.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0157.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be208) returned 1 [0157.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d280 [0157.188] sprintf (in: _Dest=0x7a2d280, _Format="%c%c" | out: _Dest="54") returned 2 [0157.188] sprintf (in: _Dest=0x7a2d282, _Format="%c%c" | out: _Dest="2f") returned 2 [0157.188] sprintf (in: _Dest=0x7a2d284, _Format="%c%c" | out: _Dest="b9") returned 2 [0157.188] sprintf (in: _Dest=0x7a2d286, _Format="%c%c" | out: _Dest="ca") returned 2 [0157.188] sprintf (in: _Dest=0x7a2d288, _Format="%c%c" | out: _Dest="c6") returned 2 [0157.188] sprintf (in: _Dest=0x7a2d28a, _Format="%c%c" | out: _Dest="50") returned 2 [0157.188] sprintf (in: _Dest=0x7a2d28c, _Format="%c%c" | out: _Dest="f2") returned 2 [0157.188] sprintf (in: _Dest=0x7a2d28e, _Format="%c%c" | out: _Dest="43") returned 2 [0157.188] sprintf (in: _Dest=0x7a2d290, _Format="%c%c" | out: _Dest="95") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d292, _Format="%c%c" | out: _Dest="31") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d294, _Format="%c%c" | out: _Dest="45") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d296, _Format="%c%c" | out: _Dest="06") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d298, _Format="%c%c" | out: _Dest="56") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d29a, _Format="%c%c" | out: _Dest="55") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d29c, _Format="%c%c" | out: _Dest="d8") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d29e, _Format="%c%c" | out: _Dest="4f") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d2a0, _Format="%c%c" | out: _Dest="93") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d2a2, _Format="%c%c" | out: _Dest="f6") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d2a4, _Format="%c%c" | out: _Dest="88") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d2a6, _Format="%c%c" | out: _Dest="d3") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d2a8, _Format="%c%c" | out: _Dest="e5") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d2aa, _Format="%c%c" | out: _Dest="01") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d2ac, _Format="%c%c" | out: _Dest="79") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d2ae, _Format="%c%c" | out: _Dest="93") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d2b0, _Format="%c%c" | out: _Dest="ca") returned 2 [0157.189] sprintf (in: _Dest=0x7a2d2b2, _Format="%c%c" | out: _Dest="e8") returned 2 [0157.189] RtlInitAnsiString (in: DestinationString=0x91ef9e8, SourceString="542fb9cac650f243953145065655d84f93f688d3e5017993cae8" | out: DestinationString="542fb9cac650f243953145065655d84f93f688d3e5017993cae8") [0157.189] RtlAnsiStringToUnicodeString (in: DestinationString=0x91ef9e0, SourceString="542fb9cac650f243953145065655d84f93f688d3e5017993cae8", AllocateDestinationString=1 | out: DestinationString="542fb9cac650f243953145065655d84f93f688d3e5017993cae8") returned 0x0 [0157.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fec0 [0157.190] RtlFreeAnsiString (AnsiString="5") [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d280) returned 1 [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37590) returned 1 [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47b30) returned 1 [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0157.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0157.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d668 [0157.191] wcscat (in: _Dest=0x32d668, _Source="542fb9cac650f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\542fb9cac650f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\542fb9cac650f" [0157.191] wcscat (in: _Dest=0x32d668, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\542fb9cac650f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\542fb9cac650f.68814f" [0157.191] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\542fb9cac650f.68814f", NtPathName=0x91ef9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\542fb9cac650f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0157.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66980 [0157.195] FlushFileBuffers (hFile=0x1ff0) returned 1 [0157.196] CloseHandle (hObject=0x1ff0) returned 1 [0157.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d668 [0157.197] wcscpy (in: _Dest=0x32d668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\" [0157.197] wcscat (in: _Dest=0x32d668, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" [0157.197] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\68814f-readme.txt")) returned 0x2020 [0157.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 [0157.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bd50) returned 1 Thread: id = 1980 os_tid = 0x26d8 [0147.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf")) returned 0x20 [0147.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0147.450] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.450] GetLastError () returned 0x5 [0147.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0147.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5278) returned 1 Thread: id = 1981 os_tid = 0x26dc [0147.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf")) returned 0x20 [0147.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0147.458] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.458] GetLastError () returned 0x5 [0147.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0147.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64680) returned 1 Thread: id = 1982 os_tid = 0x26e0 [0147.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf")) returned 0x20 [0147.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0147.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.467] GetLastError () returned 0x5 [0147.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0147.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5738) returned 1 Thread: id = 1983 os_tid = 0x26e4 [0147.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf")) returned 0x20 [0147.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0147.474] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.474] GetLastError () returned 0x5 [0147.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0147.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a645e8) returned 1 Thread: id = 1984 os_tid = 0x26e8 [0147.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf")) returned 0x20 [0147.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0147.479] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.479] GetLastError () returned 0x5 [0147.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0147.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5bf8) returned 1 Thread: id = 1985 os_tid = 0x26ec [0147.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf")) returned 0x20 [0147.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0147.493] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.493] GetLastError () returned 0x5 [0147.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0147.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64550) returned 1 Thread: id = 1986 os_tid = 0x26f0 [0147.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64550 [0147.501] wcscpy (in: _Dest=0x7a64550, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0147.501] wcscat (in: _Dest=0x7a64550, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\" [0147.501] wcscat (in: _Dest=0x7a64550, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*" [0147.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4638 [0147.501] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1c7ac20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e1db40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0147.687] wcscmp (_String1=".", _String2=".") returned 0 [0147.687] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1c7ac20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e1db40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.687] wcscmp (_String1="..", _String2=".") returned 1 [0147.687] wcscmp (_String1="..", _String2="..") returned 0 [0147.687] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e1db40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x37c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl_gb18030.cnv", cAlternateFileName="CTL_GB~1.CNV")) returned 1 [0147.687] wcscmp (_String1="ctl_gb18030.cnv", _String2=".") returned 1 [0147.687] wcscmp (_String1="ctl_gb18030.cnv", _String2="..") returned 1 [0147.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0147.687] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0147.687] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\" [0147.687] wcscat (in: _Dest=0x35c378, _Source="ctl_gb18030.cnv" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" [0150.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb4 [0150.596] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 1 [0150.596] wcscmp (_String1="icudt26l.dat", _String2=".") returned 1 [0150.596] wcscmp (_String1="icudt26l.dat", _String2="..") returned 1 [0150.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35aa08 [0150.597] wcscpy (in: _Dest=0x35aa08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU" [0150.597] wcscat (in: _Dest=0x35aa08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\" [0150.597] wcscat (in: _Dest=0x35aa08, _Source="icudt26l.dat" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" [0150.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35aa08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c [0150.598] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 0 [0150.598] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0150.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4638) returned 1 [0150.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64550) returned 1 [0150.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f90) returned 1 Thread: id = 1987 os_tid = 0x26f4 [0147.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a623b0 [0147.502] wcscpy (in: _Dest=0x7a623b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0147.502] wcscat (in: _Dest=0x7a623b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0147.502] wcscat (in: _Dest=0x7a623b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*" [0147.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5be0 [0147.502] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0147.686] wcscmp (_String1=".", _String2=".") returned 0 [0147.686] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1be26a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.686] wcscmp (_String1="..", _String2=".") returned 1 [0147.686] wcscmp (_String1="..", _String2="..") returned 0 [0147.686] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0147.686] wcscmp (_String1="Adobe", _String2=".") returned 1 [0147.686] wcscmp (_String1="Adobe", _String2="..") returned 1 [0147.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053bb8 [0147.686] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0147.686] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0147.686] wcscat (in: _Dest=0x3053bb8, _Source="Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0149.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54 [0149.765] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mac", cAlternateFileName="")) returned 1 [0149.765] wcscmp (_String1="Mac", _String2=".") returned 1 [0149.765] wcscmp (_String1="Mac", _String2="..") returned 1 [0149.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053918 [0149.765] wcscpy (in: _Dest=0x3053918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0149.765] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0149.765] wcscat (in: _Dest=0x3053918, _Source="Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0149.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8 [0149.766] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 1 [0149.766] wcscmp (_String1="win", _String2=".") returned 1 [0149.766] wcscmp (_String1="win", _String2="..") returned 1 [0149.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053480 [0149.767] wcscpy (in: _Dest=0x3053480, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings" [0149.767] wcscat (in: _Dest=0x3053480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\" [0149.767] wcscat (in: _Dest=0x3053480, _Source="win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0149.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4 [0149.768] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 0 [0149.768] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0149.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5be0) returned 1 [0149.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a623b0) returned 1 [0149.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4e60) returned 1 Thread: id = 1988 os_tid = 0x26f8 [0147.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1508 [0147.503] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Users\\All Users\\Microsoft\\DRM\\Server" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server" [0147.503] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\" [0147.503] wcscat (in: _Dest=0x2fe1508, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*") returned="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*" [0147.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0147.503] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0147.504] wcscmp (_String1=".", _String2=".") returned 0 [0147.504] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.504] wcscmp (_String1="..", _String2=".") returned 1 [0147.504] wcscmp (_String1="..", _String2="..") returned 0 [0147.504] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xf9f09cf6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9f09cf6, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6fb1a7ba, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.504] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0147.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0147.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 [0147.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d488f8) returned 1 Thread: id = 1989 os_tid = 0x26fc [0147.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1508 [0147.512] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT" [0147.512] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\" [0147.512] wcscat (in: _Dest=0x2fe1508, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*" [0147.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0147.513] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0147.513] wcscmp (_String1=".", _String2=".") returned 0 [0147.513] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.513] wcscmp (_String1="..", _String2=".") returned 1 [0147.513] wcscmp (_String1="..", _String2="..") returned 0 [0147.513] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xf9fa2272, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fa2272, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x88c7daf0, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.514] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0147.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0147.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 [0147.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 Thread: id = 1990 os_tid = 0x2700 [0147.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a118 [0147.516] wcscpy (in: _Dest=0x3e1a118, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" [0147.516] wcscat (in: _Dest=0x3e1a118, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\" [0147.516] wcscat (in: _Dest=0x3e1a118, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*" [0147.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0147.516] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0147.516] wcscmp (_String1=".", _String2=".") returned 0 [0147.516] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.516] wcscmp (_String1="..", _String2=".") returned 1 [0147.516] wcscmp (_String1="..", _String2="..") returned 0 [0147.516] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0147.517] wcscmp (_String1="en-US", _String2=".") returned 1 [0147.517] wcscmp (_String1="en-US", _String2="..") returned 1 [0147.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba110 [0147.517] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore" [0147.517] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\" [0147.517] wcscat (in: _Dest=0x3eba110, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0165.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0165.556] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0165.556] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0165.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0165.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a118) returned 1 [0165.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c98) returned 1 Thread: id = 1991 os_tid = 0x2704 [0147.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe6968 [0147.518] wcscpy (in: _Dest=0x2fe6968, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0147.518] wcscat (in: _Dest=0x2fe6968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0147.518] wcscat (in: _Dest=0x2fe6968, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*" [0147.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4b08 [0147.519] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1d6af60, ftLastAccessTime.dwHighDateTime=0x1d699a6, ftLastWriteTime.dwLowDateTime=0x1d6af60, ftLastWriteTime.dwHighDateTime=0x1d699a6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73370 [0154.804] wcscmp (_String1=".", _String2=".") returned 0 [0154.804] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1d6af60, ftLastAccessTime.dwHighDateTime=0x1d699a6, ftLastWriteTime.dwLowDateTime=0x1d6af60, ftLastWriteTime.dwHighDateTime=0x1d699a6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.804] wcscmp (_String1="..", _String2=".") returned 1 [0154.804] wcscmp (_String1="..", _String2="..") returned 0 [0154.805] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6af60, ftCreationTime.dwHighDateTime=0x1d699a6, ftLastAccessTime.dwLowDateTime=0x1d6af60, ftLastAccessTime.dwHighDateTime=0x1d699a6, ftLastWriteTime.dwLowDateTime=0x1d910c0, ftLastWriteTime.dwHighDateTime=0x1d699a6, nFileSizeHigh=0x0, nFileSizeLow=0x8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="68814F-Readme.txt", cAlternateFileName="68814F~1.TXT")) returned 1 [0154.805] wcscmp (_String1="68814F-Readme.txt", _String2=".") returned 1 [0154.805] wcscmp (_String1="68814F-Readme.txt", _String2="..") returned 1 [0154.805] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x122b4a70, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9afbe2b74032.68814f", cAlternateFileName="9AFBE2~1.688")) returned 1 [0154.805] wcscmp (_String1="9afbe2b74032.68814f", _String2=".") returned 1 [0154.805] wcscmp (_String1="9afbe2b74032.68814f", _String2="..") returned 1 [0154.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d638 [0154.805] wcscpy (in: _Dest=0x3f3d638, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0154.805] wcscat (in: _Dest=0x3f3d638, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0154.805] wcscat (in: _Dest=0x3f3d638, _Source="9afbe2b74032.68814f" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\9afbe2b74032.68814f") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\9afbe2b74032.68814f" [0158.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0158.545] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0158.545] wcscmp (_String1="Cache", _String2=".") returned 1 [0158.545] wcscmp (_String1="Cache", _String2="..") returned 1 [0158.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47b30 [0158.545] wcscpy (in: _Dest=0x3d47b30, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0158.545] wcscat (in: _Dest=0x3d47b30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0158.545] wcscat (in: _Dest=0x3d47b30, _Source="Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" [0158.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d47b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0158.547] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1221c4f0, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x1221c4f0, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x18f04190, ftLastWriteTime.dwHighDateTime=0x1d2fc8b, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="drmstore.hds", cAlternateFileName="")) returned 1 [0158.547] wcscmp (_String1="drmstore.hds", _String2=".") returned 1 [0158.547] wcscmp (_String1="drmstore.hds", _String2="..") returned 1 [0158.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e328 [0158.547] wcscpy (in: _Dest=0x3f3e328, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0158.547] wcscat (in: _Dest=0x3f3e328, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0158.547] wcscat (in: _Dest=0x3f3e328, _Source="drmstore.hds" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" [0158.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0158.568] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.bla", cAlternateFileName="")) returned 1 [0158.568] wcscmp (_String1="v3ks.bla", _String2=".") returned 1 [0158.568] wcscmp (_String1="v3ks.bla", _String2="..") returned 1 [0158.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26778 [0158.568] wcscpy (in: _Dest=0x7a26778, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0158.568] wcscat (in: _Dest=0x7a26778, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0158.568] wcscat (in: _Dest=0x7a26778, _Source="v3ks.bla" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" [0158.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0158.569] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec", cAlternateFileName="")) returned 1 [0158.569] wcscmp (_String1="v3ks.sec", _String2=".") returned 1 [0158.569] wcscmp (_String1="v3ks.sec", _String2="..") returned 1 [0158.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26708 [0158.569] wcscpy (in: _Dest=0x7a26708, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM" [0158.569] wcscat (in: _Dest=0x7a26708, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\" [0158.570] wcscat (in: _Dest=0x7a26708, _Source="v3ks.sec" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec" [0158.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0158.570] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x122b4a70, ftCreationTime.dwHighDateTime=0x1d2da0e, ftLastAccessTime.dwLowDateTime=0x122b4a70, ftLastAccessTime.dwHighDateTime=0x1d2da0e, ftLastWriteTime.dwLowDateTime=0x1234cff0, ftLastWriteTime.dwHighDateTime=0x1d2da0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3ks.sec", cAlternateFileName="")) returned 0 [0158.571] FindClose (in: hFindFile=0x3e73370 | out: hFindFile=0x3e73370) returned 1 [0158.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b08) returned 1 [0158.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6968) returned 1 [0158.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d28) returned 1 Thread: id = 1992 os_tid = 0x2708 [0147.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23920 [0147.520] wcscpy (in: _Dest=0x7a23920, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer" [0147.520] wcscat (in: _Dest=0x7a23920, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\" [0147.520] wcscat (in: _Dest=0x7a23920, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*" [0147.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1a78 [0147.520] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0147.521] wcscmp (_String1=".", _String2=".") returned 0 [0147.521] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.521] wcscmp (_String1="..", _String2=".") returned 1 [0147.521] wcscmp (_String1="..", _String2="..") returned 0 [0147.521] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69ca2115, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.521] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0147.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a78) returned 1 [0147.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23920) returned 1 [0147.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 Thread: id = 1993 os_tid = 0x270c [0147.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45140 [0147.531] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics" [0147.531] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\" [0147.531] wcscat (in: _Dest=0x3d45140, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*" [0147.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1a78 [0147.531] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a78) returned 1 [0147.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 [0147.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 1994 os_tid = 0x2710 [0147.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a234c0 [0147.535] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0147.535] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0147.535] wcscat (in: _Dest=0x7a234c0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*" [0147.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1a78 [0147.535] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0147.535] wcscmp (_String1=".", _String2=".") returned 0 [0147.535] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe5166202, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe5166202, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.535] wcscmp (_String1="..", _String2=".") returned 1 [0147.535] wcscmp (_String1="..", _String2="..") returned 0 [0147.535] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.535] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0147.535] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0147.535] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1 [0147.536] wcscmp (_String1="Ringtone 01.wma", _String2=".") returned 1 [0147.536] wcscmp (_String1="Ringtone 01.wma", _String2="..") returned 1 [0147.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb99a0 [0147.536] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0147.536] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0147.536] wcscat (in: _Dest=0x3eb99a0, _Source="Ringtone 01.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" [0162.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0162.016] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1 [0162.016] wcscmp (_String1="Ringtone 02.wma", _String2=".") returned 1 [0162.016] wcscmp (_String1="Ringtone 02.wma", _String2="..") returned 1 [0162.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3bd40 [0162.016] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0162.017] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0162.017] wcscat (in: _Dest=0x3f3bd40, _Source="Ringtone 02.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" [0162.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0162.018] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1 [0162.018] wcscmp (_String1="Ringtone 03.wma", _String2=".") returned 1 [0162.018] wcscmp (_String1="Ringtone 03.wma", _String2="..") returned 1 [0162.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cf50 [0162.018] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0162.018] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0162.018] wcscat (in: _Dest=0x3f3cf50, _Source="Ringtone 03.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" [0162.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0162.019] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1 [0162.019] wcscmp (_String1="Ringtone 04.wma", _String2=".") returned 1 [0162.019] wcscmp (_String1="Ringtone 04.wma", _String2="..") returned 1 [0162.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3db00 [0162.019] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0162.019] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0162.019] wcscat (in: _Dest=0x3f3db00, _Source="Ringtone 04.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" [0162.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0162.020] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1 [0162.020] wcscmp (_String1="Ringtone 05.wma", _String2=".") returned 1 [0162.020] wcscmp (_String1="Ringtone 05.wma", _String2="..") returned 1 [0162.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3be50 [0162.020] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0162.020] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0162.020] wcscat (in: _Dest=0x3f3be50, _Source="Ringtone 05.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" [0162.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0162.021] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1 [0162.021] wcscmp (_String1="Ringtone 06.wma", _String2=".") returned 1 [0162.021] wcscmp (_String1="Ringtone 06.wma", _String2="..") returned 1 [0162.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d4a0 [0162.021] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0162.021] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0162.021] wcscat (in: _Dest=0x3f3d4a0, _Source="Ringtone 06.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" [0162.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0162.022] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1 [0162.022] wcscmp (_String1="Ringtone 07.wma", _String2=".") returned 1 [0162.023] wcscmp (_String1="Ringtone 07.wma", _String2="..") returned 1 [0162.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d060 [0162.023] wcscpy (in: _Dest=0x3f3d060, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0162.023] wcscat (in: _Dest=0x3f3d060, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0162.023] wcscat (in: _Dest=0x3f3d060, _Source="Ringtone 07.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" [0162.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0162.024] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1 [0162.024] wcscmp (_String1="Ringtone 08.wma", _String2=".") returned 1 [0162.024] wcscmp (_String1="Ringtone 08.wma", _String2="..") returned 1 [0162.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d1f8 [0162.024] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0162.024] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0162.024] wcscat (in: _Dest=0x3f3d1f8, _Source="Ringtone 08.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" [0162.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0162.025] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1 [0162.025] wcscmp (_String1="Ringtone 09.wma", _String2=".") returned 1 [0162.025] wcscmp (_String1="Ringtone 09.wma", _String2="..") returned 1 [0162.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d968 [0162.025] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0162.025] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0162.025] wcscat (in: _Dest=0x3f3d968, _Source="Ringtone 09.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" [0162.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208 [0162.026] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1 [0162.026] wcscmp (_String1="Ringtone 10.wma", _String2=".") returned 1 [0162.026] wcscmp (_String1="Ringtone 10.wma", _String2="..") returned 1 [0162.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cc20 [0162.026] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones" [0162.026] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\" [0162.026] wcscat (in: _Dest=0x3f3cc20, _Source="Ringtone 10.wma" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" [0162.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0162.027] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 0 [0162.027] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0162.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a78) returned 1 [0162.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 [0162.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20400) returned 1 Thread: id = 1995 os_tid = 0x2714 [0147.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe1508 [0147.536] wcscpy (in: _Dest=0x2fe1508, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0147.536] wcscat (in: _Dest=0x2fe1508, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0147.536] wcscat (in: _Dest=0x2fe1508, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*" [0147.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0147.537] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0147.538] wcscmp (_String1=".", _String2=".") returned 0 [0147.538] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.538] wcscmp (_String1="..", _String2=".") returned 1 [0147.538] wcscmp (_String1="..", _String2="..") returned 0 [0147.538] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0147.538] wcscmp (_String1="Manifest", _String2=".") returned 1 [0147.538] wcscmp (_String1="Manifest", _String2="..") returned 1 [0147.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23920 [0147.538] wcscpy (in: _Dest=0x7a23920, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0147.538] wcscat (in: _Dest=0x7a23920, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0147.538] wcscat (in: _Dest=0x7a23920, _Source="Manifest" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" [0149.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0 [0149.748] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0149.748] wcscmp (_String1="Sessions", _String2=".") returned 1 [0149.748] wcscmp (_String1="Sessions", _String2="..") returned 1 [0149.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23a70 [0149.748] wcscpy (in: _Dest=0x7a23a70, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0149.748] wcscat (in: _Dest=0x7a23a70, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0149.748] wcscat (in: _Dest=0x7a23a70, _Source="Sessions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" [0149.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc [0149.750] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0149.750] wcscmp (_String1="Upload", _String2=".") returned 1 [0149.750] wcscmp (_String1="Upload", _String2="..") returned 1 [0149.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f5c8 [0149.750] wcscpy (in: _Dest=0x3e1f5c8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm" [0149.750] wcscat (in: _Dest=0x3e1f5c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\" [0149.750] wcscat (in: _Dest=0x3e1f5c8, _Source="Upload" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" [0149.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e1f5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10 [0149.752] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0149.753] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0149.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0149.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 [0149.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 Thread: id = 1996 os_tid = 0x2718 [0147.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23610 [0147.541] wcscpy (in: _Dest=0x7a23610, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" [0147.541] wcscat (in: _Dest=0x7a23610, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\" [0147.541] wcscat (in: _Dest=0x7a23610, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*" [0147.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb4830 [0147.541] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db80 [0147.541] wcscmp (_String1=".", _String2=".") returned 0 [0147.541] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x112dac12, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.541] wcscmp (_String1="..", _String2=".") returned 1 [0147.541] wcscmp (_String1="..", _String2="..") returned 0 [0147.541] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x112b4ab2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x112b4ab2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1 [0147.541] wcscmp (_String1="Default Programs.lnk", _String2=".") returned 1 [0147.542] wcscmp (_String1="Default Programs.lnk", _String2="..") returned 1 [0147.542] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd42927e2, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd42927e2, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0x112dac12, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.542] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0147.542] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0147.542] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0147.542] wcscmp (_String1="Programs", _String2=".") returned 1 [0147.542] wcscmp (_String1="Programs", _String2="..") returned 1 [0147.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19398 [0147.542] wcscpy (in: _Dest=0x3e19398, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu" [0147.542] wcscat (in: _Dest=0x3e19398, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\" [0147.542] wcscat (in: _Dest=0x3e19398, _Source="Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e19398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0156.105] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0156.105] wcscmp (_String1="Windows Update.lnk", _String2=".") returned 1 [0156.105] wcscmp (_String1="Windows Update.lnk", _String2="..") returned 1 [0156.105] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd426c681, ftCreationTime.dwHighDateTime=0x1ca043c, ftLastAccessTime.dwLowDateTime=0xd426c681, ftLastAccessTime.dwHighDateTime=0x1ca043c, ftLastWriteTime.dwLowDateTime=0xd426c681, ftLastWriteTime.dwHighDateTime=0x1ca043c, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0156.105] FindClose (in: hFindFile=0x7a2db80 | out: hFindFile=0x7a2db80) returned 1 [0156.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb4830) returned 1 [0156.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23610) returned 1 [0156.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e7f8) returned 1 Thread: id = 1997 os_tid = 0x271c [0147.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23680 [0147.544] wcscpy (in: _Dest=0x7a23680, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates" [0147.544] wcscat (in: _Dest=0x7a23680, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\" [0147.544] wcscat (in: _Dest=0x7a23680, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*" [0147.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3288 [0147.544] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d7c0 [0147.544] wcscmp (_String1=".", _String2=".") returned 0 [0147.544] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.545] wcscmp (_String1="..", _String2=".") returned 1 [0147.545] wcscmp (_String1="..", _String2="..") returned 0 [0147.545] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x69c7bfb6, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.545] FindClose (in: hFindFile=0x7a2d7c0 | out: hFindFile=0x7a2d7c0) returned 1 [0147.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3288) returned 1 [0147.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23680) returned 1 [0147.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ea68) returned 1 Thread: id = 1998 os_tid = 0x2720 [0147.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml")) returned 0x20 [0147.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0147.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.549] GetLastError () returned 0x5 [0147.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0147.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 Thread: id = 1999 os_tid = 0x2724 [0147.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe14a8 [0147.551] wcscpy (in: _Dest=0x2fe14a8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0147.551] wcscat (in: _Dest=0x2fe14a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\" [0147.551] wcscat (in: _Dest=0x2fe14a8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*" [0147.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3288 [0147.551] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d7c0 [0147.552] wcscmp (_String1=".", _String2=".") returned 0 [0147.552] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fee530, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.552] wcscmp (_String1="..", _String2=".") returned 1 [0147.552] wcscmp (_String1="..", _String2="..") returned 0 [0147.552] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0147.552] wcscmp (_String1="ReportArchive", _String2=".") returned 1 [0147.552] wcscmp (_String1="ReportArchive", _String2="..") returned 1 [0147.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e2b0 [0147.552] wcscpy (in: _Dest=0x3f3e2b0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0147.553] wcscat (in: _Dest=0x3f3e2b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\" [0147.553] wcscat (in: _Dest=0x3f3e2b0, _Source="ReportArchive" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" [0156.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca4 [0156.107] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0156.107] wcscmp (_String1="ReportQueue", _String2=".") returned 1 [0156.107] wcscmp (_String1="ReportQueue", _String2="..") returned 1 [0156.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f308 [0156.107] wcscpy (in: _Dest=0x3f3f308, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER" [0156.107] wcscat (in: _Dest=0x3f3f308, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\" [0156.107] wcscat (in: _Dest=0x3f3f308, _Source="ReportQueue" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" [0156.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0156.108] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 0 [0156.109] FindClose (in: hFindFile=0x7a2d7c0 | out: hFindFile=0x7a2d7c0) returned 1 [0156.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3288) returned 1 [0156.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe14a8) returned 1 [0156.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 Thread: id = 2000 os_tid = 0x2728 [0147.556] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\-ifma- 4dy_4v9ixo5hj.bmp")) returned 0x20 [0147.556] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp", dwFileAttributes=0x20) returned 1 [0148.583] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\-ifma- 4dy_4v9ixo5hj.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cac [0148.584] GetFileSizeEx (in: hFile=0x1cac, lpFileSize=0x47afee4 | out: lpFileSize=0x47afee4*=22252) returned 1 [0148.584] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x56e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.584] ReadFile (in: hFile=0x1cac, lpBuffer=0x47afec0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x47afed0, lpOverlapped=0x0 | out: lpBuffer=0x47afec0*, lpNumberOfBytesRead=0x47afed0*=0x4, lpOverlapped=0x0) returned 1 [0148.586] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0148.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0148.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0148.586] NtQuerySystemTime (in: CurrentTime=0x47afe58 | out: CurrentTime=0x47afe58*=132462177273876000) returned 0x0 [0148.586] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x44b1c5de [0148.586] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x322f32ba [0148.586] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x49b07020 [0148.586] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x2e2aba49 [0148.586] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x289e25e [0148.586] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x3b08a88f [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x7f4f7567 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x77ca15a8 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x753f21fd [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x3a52dc92 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x2f85274 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x197c0160 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x68268c09 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x32c7df08 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x40fee69b [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x3e94e9b0 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x42e86d99 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0xa9caea7 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x752bf9e5 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x71a69bf1 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x23bec3af [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x31f93690 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x56821348 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x69d7f98e [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x18bddb9d [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x140baefd [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x69c5992d [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x1b999500 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x6d505a05 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x2b80161e [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x6adaa4a7 [0148.587] RtlRandomEx (in: Seed=0x47afe50 | out: Seed=0x47afe50) returned 0x1dd2f8b5 [0148.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d60 [0148.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fd58 [0148.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53be8 [0148.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fd58) returned 1 [0148.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53440) returned 1 [0148.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0148.616] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.616] ReadFile (in: hFile=0x1cac, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x47afe58, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x47afe58*=0x3c00, lpOverlapped=0x0) returned 1 [0148.616] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49a88 [0148.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fd58 [0148.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0148.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0148.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0148.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0148.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0148.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53440) returned 1 [0148.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fd58) returned 1 [0148.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0148.617] WriteFile (in: hFile=0x1cac, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x47afe58, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0x47afe58*=0x3c00, lpOverlapped=0x0) returned 1 [0149.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0149.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0149.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x7a24590 [0149.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24860 [0149.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30153a0 [0149.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0149.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x7a248f0 [0149.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0149.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0149.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0149.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30153a0) returned 1 [0149.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24860) returned 1 [0149.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9a60 [0149.283] SetFilePointerEx (in: hFile=0x1cac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.283] WriteFile (in: hFile=0x1cac, lpBuffer=0x3ec9a60*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x47afed8, lpOverlapped=0x0 | out: lpBuffer=0x3ec9a60*, lpNumberOfBytesWritten=0x47afed8*=0x122, lpOverlapped=0x0) returned 1 [0149.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 [0149.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a248f0) returned 1 [0149.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0149.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24590) returned 1 [0149.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0149.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53058) returned 1 [0149.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52d60) returned 1 [0149.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53be8) returned 1 [0149.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e682e8 [0149.462] wcscpy (in: _Dest=0x3e682e8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp" [0149.462] wcscat (in: _Dest=0x3e682e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp.68814f" [0149.462] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp.68814f", NtPathName=0x47afe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\-iFMa- 4Dy_4V9IXo5hJ.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3daf9e8 [0149.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf9e8) returned 1 [0149.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a42430) returned 1 [0149.641] NtQueryInformationFile (in: FileHandle=0x1cac, IoStatusBlock=0x47afe28, FileInformation=0x47afe30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x47afe28, FileInformation=0x47afe30) returned 0x0 [0149.641] NtSetInformationFile (FileHandle=0x1cac, IoStatusBlock=0x47afe28, FileInformation=0x47afe30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682e8) returned 1 [0149.643] FlushFileBuffers (hFile=0x1cac) returned 1 [0149.678] CloseHandle (hObject=0x1cac) returned 1 [0149.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65dd8 [0149.679] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0149.679] wcscat (in: _Dest=0x3e65dd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" [0149.679] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\68814f-readme.txt")) returned 0x20 [0149.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 [0149.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40830) returned 1 Thread: id = 2001 os_tid = 0x272c [0147.571] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\6lh7neudr.bmp")) returned 0x20 [0147.571] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp", dwFileAttributes=0x20) returned 1 [0148.642] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\6lh7neudr.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c94 [0148.642] GetFileSizeEx (in: hFile=0x1c94, lpFileSize=0x844f9dc | out: lpFileSize=0x844f9dc*=18878) returned 1 [0148.642] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x49ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.642] ReadFile (in: hFile=0x1c94, lpBuffer=0x844f9b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x844f9c8, lpOverlapped=0x0 | out: lpBuffer=0x844f9b8*, lpNumberOfBytesRead=0x844f9c8*=0x4, lpOverlapped=0x0) returned 1 [0148.649] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0148.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c88 [0148.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0148.650] NtQuerySystemTime (in: CurrentTime=0x844f950 | out: CurrentTime=0x844f950*=132462177274500000) returned 0x0 [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x20909b9a [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x760289de [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x1987915b [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x58a661df [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x7ca78483 [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x31ff0f5e [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x22bfb3d2 [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x719a080c [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x7a1eab02 [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x50df2d57 [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x1dade941 [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x9e2b3ea [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x40fbb804 [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x1d7b8935 [0148.650] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x2ecc1b88 [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x78ae6ea8 [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x190d9ce8 [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x7e2d7c9e [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x368282fa [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x4adc4b8c [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x3a13628d [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x359b866c [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x5371787f [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x79aac8d6 [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x3cb86866 [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x2644db09 [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x11e96cf9 [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x4e0f594e [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x2ad2ca28 [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x51981d79 [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x70fe71a1 [0148.651] RtlRandomEx (in: Seed=0x844f948 | out: Seed=0x844f948) returned 0x6f006082 [0148.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b20 [0148.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b98 [0148.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0148.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53440) returned 1 [0148.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0148.665] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.665] ReadFile (in: hFile=0x1c94, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x844f950, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0x844f950*=0x3c00, lpOverlapped=0x0) returned 1 [0148.666] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d28 [0148.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0148.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53440) returned 1 [0148.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0148.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0148.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0148.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0148.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d28) returned 1 [0148.667] WriteFile (in: hFile=0x1c94, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x844f950, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0x844f950*=0x3c00, lpOverlapped=0x0) returned 1 [0150.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0150.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0150.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0150.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49530 [0150.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fd58 [0150.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0150.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0150.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e868d8 [0150.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0150.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0150.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0150.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fd58) returned 1 [0150.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49530) returned 1 [0150.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec940 [0150.819] SetFilePointerEx (in: hFile=0x1c94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.819] WriteFile (in: hFile=0x1c94, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x844f9d0, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x844f9d0*=0x10c, lpOverlapped=0x0) returned 1 [0154.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0154.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e868d8) returned 1 [0154.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0154.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53440) returned 1 [0154.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c88) returned 1 [0154.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b20) returned 1 [0154.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b98) returned 1 [0154.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66318 [0154.125] wcscpy (in: _Dest=0x3e66318, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp" [0154.125] wcscat (in: _Dest=0x3e66318, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp.68814f" [0154.125] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp.68814f", NtPathName=0x844f948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6LH7NeuDR.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e37030 [0154.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37030) returned 1 [0154.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f364a0) returned 1 [0154.189] NtQueryInformationFile (in: FileHandle=0x1c94, IoStatusBlock=0x844f920, FileInformation=0x844f928, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x844f920, FileInformation=0x844f928) returned 0x0 [0154.190] NtSetInformationFile (FileHandle=0x1c94, IoStatusBlock=0x844f920, FileInformation=0x844f928, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 [0154.216] FlushFileBuffers (hFile=0x1c94) returned 1 [0154.219] CloseHandle (hObject=0x1c94) returned 1 [0154.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66318 [0154.229] wcscpy (in: _Dest=0x3e66318, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0154.229] wcscat (in: _Dest=0x3e66318, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" [0154.229] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\68814f-readme.txt")) returned 0x20 [0154.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 [0154.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7208) returned 1 Thread: id = 2002 os_tid = 0x2730 [0147.575] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6Ovy-seAJ8j.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\6ovy-seaj8j.gif")) returned 0x20 [0147.575] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6Ovy-seAJ8j.gif", dwFileAttributes=0x20) returned 1 [0148.667] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\6Ovy-seAJ8j.gif" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\6ovy-seaj8j.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2324 [0148.668] GetFileSizeEx (in: hFile=0x2324, lpFileSize=0xaf8f7a4 | out: lpFileSize=0xaf8f7a4*=77861) returned 1 [0148.668] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x13021, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.668] ReadFile (in: hFile=0x2324, lpBuffer=0xaf8f780, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaf8f790, lpOverlapped=0x0 | out: lpBuffer=0xaf8f780*, lpNumberOfBytesRead=0xaf8f790*=0x4, lpOverlapped=0x0) returned 1 [0148.671] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0148.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c38 [0148.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0148.671] NtQuerySystemTime (in: CurrentTime=0xaf8f718 | out: CurrentTime=0xaf8f718*=132462177274656000) returned 0x0 [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x2ab5046b [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x60c729cc [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0xe3b6c60 [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x317ce2af [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x680875ba [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x18a5c5a0 [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x23510021 [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x1099c017 [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x6ab27a38 [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x6c885279 [0148.671] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x17d9153f [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x50c94067 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x4f93fb68 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x7f818ea8 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x14693c6d [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x15669d59 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0xf340c92 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x532a393 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x7d01ed23 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x61ef5e4b [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x55307e23 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x13ca79e3 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x2d0b7cbc [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x32553137 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x5b730827 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x7ec8ef7e [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x6cf8c606 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x2c77f50b [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x47461b8a [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x5dbf0e2a [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x4f67dcc0 [0148.672] RtlRandomEx (in: Seed=0xaf8f710 | out: Seed=0xaf8f710) returned 0x20e58cc0 [0148.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0148.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0148.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cd8) returned 1 [0148.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0148.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0148.688] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.688] ReadFile (in: hFile=0x2324, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf8f718, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0xaf8f718*=0x3c00, lpOverlapped=0x0) returned 1 [0148.688] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d28 [0148.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0148.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0148.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0148.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0148.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0148.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cd8) returned 1 [0148.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d28) returned 1 [0148.689] WriteFile (in: hFile=0x2324, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf8f718, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0xaf8f718*=0x3c00, lpOverlapped=0x0) returned 1 [0150.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0150.820] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.820] ReadFile (in: hFile=0x2324, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf8f718, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0xaf8f718*=0x3c00, lpOverlapped=0x0) returned 1 [0150.820] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49530 [0150.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fd58 [0150.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0150.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0150.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0150.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0150.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0150.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0150.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fd58) returned 1 [0150.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49530) returned 1 [0150.821] WriteFile (in: hFile=0x2324, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf8f718, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0xaf8f718*=0x3c00, lpOverlapped=0x0) returned 1 [0151.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0151.298] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0xf425, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.298] ReadFile (in: hFile=0x2324, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf8f718, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0xaf8f718*=0x3c00, lpOverlapped=0x0) returned 1 [0151.662] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0xf425, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24038 [0151.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0151.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0151.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0151.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0151.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0151.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0151.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3588) returned 1 [0151.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0151.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24038) returned 1 [0151.663] WriteFile (in: hFile=0x2324, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf8f718, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0xaf8f718*=0x3c00, lpOverlapped=0x0) returned 1 [0151.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0151.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf9b8 [0151.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0151.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0151.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0151.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0151.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3dac3b0 [0151.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24038 [0151.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0151.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0151.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0151.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3dac3e8 [0151.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0151.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0151.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e534b8) returned 1 [0151.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0151.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24038) returned 1 [0151.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x150) returned 0x3e0ac18 [0151.679] SetFilePointerEx (in: hFile=0x2324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.680] WriteFile (in: hFile=0x2324, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0xaf8f798, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0xaf8f798*=0x150, lpOverlapped=0x0) returned 1 [0154.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49a88 [0154.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0154.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f30 [0154.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f30) returned 1 [0154.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53f30 [0154.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ee0 [0154.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0154.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0154.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0154.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0154.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x3e49a88 [0154.130] sprintf (in: _Dest=0x3e49a88, _Format="%c%c" | out: _Dest="df") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a8a, _Format="%c%c" | out: _Dest="cf") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a8c, _Format="%c%c" | out: _Dest="c6") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a8e, _Format="%c%c" | out: _Dest="a2") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a90, _Format="%c%c" | out: _Dest="f3") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a92, _Format="%c%c" | out: _Dest="13") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a94, _Format="%c%c" | out: _Dest="f2") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a96, _Format="%c%c" | out: _Dest="52") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a98, _Format="%c%c" | out: _Dest="8c") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a9a, _Format="%c%c" | out: _Dest="c0") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a9c, _Format="%c%c" | out: _Dest="1d") returned 2 [0154.130] sprintf (in: _Dest=0x3e49a9e, _Format="%c%c" | out: _Dest="64") returned 2 [0154.130] sprintf (in: _Dest=0x3e49aa0, _Format="%c%c" | out: _Dest="27") returned 2 [0154.130] sprintf (in: _Dest=0x3e49aa2, _Format="%c%c" | out: _Dest="20") returned 2 [0154.130] sprintf (in: _Dest=0x3e49aa4, _Format="%c%c" | out: _Dest="9b") returned 2 [0154.130] sprintf (in: _Dest=0x3e49aa6, _Format="%c%c" | out: _Dest="d2") returned 2 [0154.130] sprintf (in: _Dest=0x3e49aa8, _Format="%c%c" | out: _Dest="7d") returned 2 [0154.130] sprintf (in: _Dest=0x3e49aaa, _Format="%c%c" | out: _Dest="70") returned 2 [0154.130] sprintf (in: _Dest=0x3e49aac, _Format="%c%c" | out: _Dest="31") returned 2 [0154.130] sprintf (in: _Dest=0x3e49aae, _Format="%c%c" | out: _Dest="b5") returned 2 [0154.130] sprintf (in: _Dest=0x3e49ab0, _Format="%c%c" | out: _Dest="29") returned 2 [0154.131] sprintf (in: _Dest=0x3e49ab2, _Format="%c%c" | out: _Dest="66") returned 2 [0154.131] sprintf (in: _Dest=0x3e49ab4, _Format="%c%c" | out: _Dest="19") returned 2 [0154.131] sprintf (in: _Dest=0x3e49ab6, _Format="%c%c" | out: _Dest="94") returned 2 [0154.131] sprintf (in: _Dest=0x3e49ab8, _Format="%c%c" | out: _Dest="9a") returned 2 [0154.131] sprintf (in: _Dest=0x3e49aba, _Format="%c%c" | out: _Dest="d4") returned 2 [0154.131] sprintf (in: _Dest=0x3e49abc, _Format="%c%c" | out: _Dest="8d") returned 2 [0154.131] sprintf (in: _Dest=0x3e49abe, _Format="%c%c" | out: _Dest="f5") returned 2 [0154.131] sprintf (in: _Dest=0x3e49ac0, _Format="%c%c" | out: _Dest="81") returned 2 [0154.131] sprintf (in: _Dest=0x3e49ac2, _Format="%c%c" | out: _Dest="3b") returned 2 [0154.131] RtlInitAnsiString (in: DestinationString=0xaf8f720, SourceString="dfcfc6a2f313f2528cc01d6427209bd27d7031b5296619949ad48df5813b" | out: DestinationString="dfcfc6a2f313f2528cc01d6427209bd27d7031b5296619949ad48df5813b") [0154.131] RtlAnsiStringToUnicodeString (in: DestinationString=0xaf8f718, SourceString="dfcfc6a2f313f2528cc01d6427209bd27d7031b5296619949ad48df5813b", AllocateDestinationString=1 | out: DestinationString="dfcfc6a2f313f2528cc01d6427209bd27d7031b5296619949ad48df5813b") returned 0x0 [0154.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3cec8 [0154.131] RtlFreeAnsiString (AnsiString="d") [0154.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0154.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f30) returned 1 [0154.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ee0) returned 1 [0154.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0154.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3e8) returned 1 [0154.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0154.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0154.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf9b8) returned 1 [0154.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c38) returned 1 [0154.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d28) returned 1 [0154.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d78) returned 1 [0154.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d40c18 [0154.132] wcscat (in: _Dest=0x3d40c18, _Source="dfcfc6a2f313f25" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\dfcfc6a2f313f25") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\dfcfc6a2f313f25" [0154.132] wcscat (in: _Dest=0x3d40c18, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\dfcfc6a2f313f25.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\dfcfc6a2f313f25.68814f" [0154.132] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\dfcfc6a2f313f25.68814f", NtPathName=0xaf8f710, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\dfcfc6a2f313f25.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8c68 [0154.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8c68) returned 1 [0154.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38fc0) returned 1 [0154.282] NtQueryInformationFile (in: FileHandle=0x2324, IoStatusBlock=0xaf8f6e8, FileInformation=0xaf8f6f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaf8f6e8, FileInformation=0xaf8f6f0) returned 0x0 [0154.282] NtSetInformationFile (FileHandle=0x2324, IoStatusBlock=0xaf8f6e8, FileInformation=0xaf8f6f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c18) returned 1 [0154.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 [0154.285] FlushFileBuffers (hFile=0x2324) returned 1 [0154.302] CloseHandle (hObject=0x2324) returned 1 [0154.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66198 [0154.302] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0154.302] wcscat (in: _Dest=0x3e66198, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" [0154.303] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\68814f-readme.txt")) returned 0x20 [0154.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0154.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 Thread: id = 2003 os_tid = 0x2734 [0147.584] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\jhndtpyiyv3i8a97f.bmp")) returned 0x20 [0147.585] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp", dwFileAttributes=0x20) returned 1 [0148.690] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\jhndtpyiyv3i8a97f.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b98 [0148.690] GetFileSizeEx (in: hFile=0x1b98, lpFileSize=0xb8bfd5c | out: lpFileSize=0xb8bfd5c*=17416) returned 1 [0148.690] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x4404, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.690] ReadFile (in: hFile=0x1b98, lpBuffer=0xb8bfd38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb8bfd48, lpOverlapped=0x0 | out: lpBuffer=0xb8bfd38*, lpNumberOfBytesRead=0xb8bfd48*=0x4, lpOverlapped=0x0) returned 1 [0148.716] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0148.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0148.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0148.716] NtQuerySystemTime (in: CurrentTime=0xb8bfcd0 | out: CurrentTime=0xb8bfcd0*=132462177275124000) returned 0x0 [0148.716] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x6d677742 [0148.716] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0xf4dc284 [0148.716] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x7698a1e6 [0148.716] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x4c92c85c [0148.716] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x7f45b037 [0148.716] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x33d24e17 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x4108795c [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x4642ca83 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x2e6fb30b [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x4eb99d10 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x7e68d032 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x689100c2 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x22707f6d [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x14170a15 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0xf1f29b9 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x7be7f9c1 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x32e670bb [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x3eb58724 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x3352da0 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x21136d3 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x547d1bbb [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x5cdb053b [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x2370d246 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x5784fa8c [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x5ffe13d [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x2059de12 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x3547e700 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x2136312b [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x4d7927a5 [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x3c38ae7c [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x2cd35ea [0148.717] RtlRandomEx (in: Seed=0xb8bfcc8 | out: Seed=0xb8bfcc8) returned 0x2286274f [0148.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ee0 [0148.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f30 [0148.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0148.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cd8) returned 1 [0148.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0148.730] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.730] ReadFile (in: hFile=0x1b98, lpBuffer=0x7c08fc8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb8bfcd0, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesRead=0xb8bfcd0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.731] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d28 [0148.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0148.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cd8) returned 1 [0148.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0148.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0148.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0148.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0148.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d28) returned 1 [0148.732] WriteFile (in: hFile=0x1b98, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb8bfcd0, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0xb8bfcd0*=0x3c00, lpOverlapped=0x0) returned 1 [0151.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0151.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0151.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2dcc0 [0151.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24ce0 [0151.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0151.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0151.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0151.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d080 [0151.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0151.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0151.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0151.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0151.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ce0) returned 1 [0151.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d54dd8 [0151.299] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.300] WriteFile (in: hFile=0x1b98, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xb8bfd50, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0xb8bfd50*=0x11c, lpOverlapped=0x0) returned 1 [0154.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0154.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d080) returned 1 [0154.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0154.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2dcc0) returned 1 [0154.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cd8) returned 1 [0154.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0154.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ee0) returned 1 [0154.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f30) returned 1 [0154.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3034e90 [0154.127] wcscpy (in: _Dest=0x3034e90, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp" [0154.127] wcscat (in: _Dest=0x3034e90, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp.68814f" [0154.127] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp.68814f", NtPathName=0xb8bfcc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\jhNdTpyIYv3i8A97f.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc3d08 [0154.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 [0154.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f380a8) returned 1 [0154.277] NtQueryInformationFile (in: FileHandle=0x1b98, IoStatusBlock=0xb8bfca0, FileInformation=0xb8bfca8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb8bfca0, FileInformation=0xb8bfca8) returned 0x0 [0154.277] NtSetInformationFile (FileHandle=0x1b98, IoStatusBlock=0xb8bfca0, FileInformation=0xb8bfca8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3034e90) returned 1 [0154.280] FlushFileBuffers (hFile=0x1b98) returned 1 [0154.298] CloseHandle (hObject=0x1b98) returned 1 [0154.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66198 [0154.300] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0154.300] wcscat (in: _Dest=0x3e66198, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" [0154.300] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\68814f-readme.txt")) returned 0x20 [0154.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0154.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d405d8) returned 1 Thread: id = 2004 os_tid = 0x2738 [0147.590] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\jnfvd.png")) returned 0x20 [0147.590] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png", dwFileAttributes=0x20) returned 1 [0148.733] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\jnfvd.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2314 [0148.733] GetFileSizeEx (in: hFile=0x2314, lpFileSize=0xbcef82c | out: lpFileSize=0xbcef82c*=91067) returned 1 [0148.733] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0x163b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.733] ReadFile (in: hFile=0x2314, lpBuffer=0xbcef808, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbcef818, lpOverlapped=0x0 | out: lpBuffer=0xbcef808*, lpNumberOfBytesRead=0xbcef818*=0x4, lpOverlapped=0x0) returned 1 [0148.736] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0148.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f80 [0148.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ff8 [0148.737] NtQuerySystemTime (in: CurrentTime=0xbcef7a0 | out: CurrentTime=0xbcef7a0*=132462177275280000) returned 0x0 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x51d9787a [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x4a8a339b [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x5380f6f [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x1dc9670d [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x5e3a7255 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x4814bfbe [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x279b9298 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x7f7367c4 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x17fa62a0 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x7ec9841a [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x6f4a5c1f [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x1cc850a2 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x2a308ab9 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x47d22658 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x5962b361 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x44f64a9c [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x3ecfa1e9 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x79ea545b [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x7f1b0b66 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x56e954e4 [0148.737] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x6e4d0f72 [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x44754531 [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x5172f7b3 [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x1187b508 [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x2fdc1a3f [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x7ce4c3b4 [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x12913c31 [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x6d86114c [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0xe855afb [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x3ad76340 [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x3b799ce4 [0148.738] RtlRandomEx (in: Seed=0xbcef798 | out: Seed=0xbcef798) returned 0x3fe8e6c7 [0148.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54250 [0148.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0148.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ff8) returned 1 [0148.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0148.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0148.752] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.752] ReadFile (in: hFile=0x2314, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbcef7a0, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xbcef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.752] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d28 [0148.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0148.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0148.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0148.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0148.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ff8 [0148.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ff8) returned 1 [0148.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d28) returned 1 [0148.753] WriteFile (in: hFile=0x2314, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbcef7a0, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xbcef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0153.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0153.519] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.519] ReadFile (in: hFile=0x2314, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbcef7a0, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xbcef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0153.519] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49338 [0153.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0153.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0153.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0153.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0153.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0153.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35d8 [0153.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35d8) returned 1 [0153.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0153.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49338) returned 1 [0153.520] WriteFile (in: hFile=0x2314, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbcef7a0, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xbcef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0154.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0154.336] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0x127bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.336] ReadFile (in: hFile=0x2314, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbcef7a0, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xbcef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0154.337] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0x127bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55d90 [0154.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0154.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b80) returned 1 [0154.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0154.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0154.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0154.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0154.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55d90) returned 1 [0154.338] WriteFile (in: hFile=0x2314, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbcef7a0, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xbcef7a0*=0x3c00, lpOverlapped=0x0) returned 1 [0154.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0154.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee1078 [0154.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b80) returned 1 [0154.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0154.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0154.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0154.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0154.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a23ff0 [0154.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0154.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52338 [0154.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52338) returned 1 [0154.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52338 [0154.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b98 [0154.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0154.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d28) returned 1 [0154.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0154.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0154.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e0ac18 [0154.920] SetFilePointerEx (in: hFile=0x2314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.920] WriteFile (in: hFile=0x2314, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0xbcef820, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0xbcef820*=0x144, lpOverlapped=0x0) returned 1 [0155.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0155.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52338) returned 1 [0155.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b98) returned 1 [0155.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0155.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 [0155.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f80) returned 1 [0155.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54250) returned 1 [0155.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e525b8) returned 1 [0155.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaec78 [0155.835] wcscpy (in: _Dest=0x3eaec78, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png" [0155.835] wcscat (in: _Dest=0x3eaec78, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png.68814f" [0155.836] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png.68814f", NtPathName=0xbcef798, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\JnfVD.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85700 [0155.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 [0155.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f4c0) returned 1 [0155.845] NtQueryInformationFile (in: FileHandle=0x2314, IoStatusBlock=0xbcef770, FileInformation=0xbcef778, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbcef770, FileInformation=0xbcef778) returned 0x0 [0155.845] NtSetInformationFile (FileHandle=0x2314, IoStatusBlock=0xbcef770, FileInformation=0xbcef778, Length=0x28, FileInformationClass=0x4) returned 0x0 [0155.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaec78) returned 1 [0155.856] FlushFileBuffers (hFile=0x2314) returned 1 [0155.860] CloseHandle (hObject=0x2314) returned 1 [0155.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66858 [0155.868] wcscpy (in: _Dest=0x3e66858, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0155.868] wcscat (in: _Dest=0x3e66858, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" [0155.868] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\68814f-readme.txt")) returned 0x20 [0155.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 [0155.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bf58) returned 1 Thread: id = 2005 os_tid = 0x273c [0147.591] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\nu_kkdts0.bmp")) returned 0x20 [0147.591] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp", dwFileAttributes=0x20) returned 1 [0148.758] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\nu_kkdts0.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b80 [0148.758] GetFileSizeEx (in: hFile=0x1b80, lpFileSize=0xb06fc6c | out: lpFileSize=0xb06fc6c*=20866) returned 1 [0148.758] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x517e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.758] ReadFile (in: hFile=0x1b80, lpBuffer=0xb06fc48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb06fc58, lpOverlapped=0x0 | out: lpBuffer=0xb06fc48*, lpNumberOfBytesRead=0xb06fc58*=0x4, lpOverlapped=0x0) returned 1 [0148.760] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ff8 [0148.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0148.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0148.760] NtQuerySystemTime (in: CurrentTime=0xb06fbe0 | out: CurrentTime=0xb06fbe0*=132462177275592000) returned 0x0 [0148.760] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x656f968a [0148.760] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x73394d89 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x31d7d92 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x5c886632 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x6bcc1296 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0xd199bd4 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x37ea3d0a [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x6e478ae4 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x50651080 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x2668e424 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x437f8777 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x58e4d6b8 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x246b96ad [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x4c9ff536 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x2972142 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x2fc12248 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x16100069 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x3d6fadd2 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x6c408917 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x750e8bc0 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x1f58dd30 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x7c7a299c [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x128bcda3 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x5f90c4f7 [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x12eb811a [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x8b83a6b [0148.761] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x4b6d0b79 [0148.762] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x2a71bd9 [0148.762] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x4cff1c68 [0148.762] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x10193286 [0148.762] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x4085be1a [0148.762] RtlRandomEx (in: Seed=0xb06fbd8 | out: Seed=0xb06fbd8) returned 0x19fc5bd [0148.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0148.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54138 [0148.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0148.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ff8) returned 1 [0148.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0148.775] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.775] ReadFile (in: hFile=0x1b80, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb06fbe0, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0xb06fbe0*=0x3c00, lpOverlapped=0x0) returned 1 [0148.776] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d28 [0148.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0148.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ff8 [0148.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ff8) returned 1 [0148.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0148.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ff8 [0148.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0148.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0148.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0148.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d28) returned 1 [0148.777] WriteFile (in: hFile=0x1b80, lpBuffer=0x7beeb90*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb06fbe0, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesWritten=0xb06fbe0*=0x3c00, lpOverlapped=0x0) returned 1 [0154.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0154.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a241e8 [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33f8 [0154.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33f8) returned 1 [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e868d8 [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33f8 [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0154.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0154.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a241e8) returned 1 [0154.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec940 [0154.790] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.790] WriteFile (in: hFile=0x1b80, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb06fc60, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xb06fc60*=0x10c, lpOverlapped=0x0) returned 1 [0155.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0155.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e868d8) returned 1 [0155.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33f8) returned 1 [0155.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0155.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ff8) returned 1 [0155.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0155.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54188) returned 1 [0155.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54138) returned 1 [0155.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66858 [0155.466] wcscpy (in: _Dest=0x3e66858, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp" [0155.466] wcscat (in: _Dest=0x3e66858, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp.68814f" [0155.466] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp.68814f", NtPathName=0xb06fbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\nU_kkdtS0.bmp.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e37cd8 [0155.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37cd8) returned 1 [0155.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b8b8) returned 1 [0155.477] NtQueryInformationFile (in: FileHandle=0x1b80, IoStatusBlock=0xb06fbb0, FileInformation=0xb06fbb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb06fbb0, FileInformation=0xb06fbb8) returned 0x0 [0155.477] NtSetInformationFile (FileHandle=0x1b80, IoStatusBlock=0xb06fbb0, FileInformation=0xb06fbb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0155.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 [0155.480] FlushFileBuffers (hFile=0x1b80) returned 1 [0155.606] CloseHandle (hObject=0x1b80) returned 1 [0155.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66858 [0155.608] wcscpy (in: _Dest=0x3e66858, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0155.608] wcscat (in: _Dest=0x3e66858, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" [0155.608] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\68814f-readme.txt")) returned 0x20 [0155.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 [0155.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 Thread: id = 2006 os_tid = 0x2740 [0147.591] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\_-_krm5.png")) returned 0x20 [0147.591] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png", dwFileAttributes=0x20) returned 1 [0149.208] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\_-_krm5.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b78 [0149.208] GetFileSizeEx (in: hFile=0x1b78, lpFileSize=0xb95ff0c | out: lpFileSize=0xb95ff0c*=7176) returned 1 [0149.208] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x1c04, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.208] ReadFile (in: hFile=0x1b78, lpBuffer=0xb95fee8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb95fef8, lpOverlapped=0x0 | out: lpBuffer=0xb95fee8*, lpNumberOfBytesRead=0xb95fef8*=0x4, lpOverlapped=0x0) returned 1 [0149.211] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0149.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35d8 [0149.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0149.211] NtQuerySystemTime (in: CurrentTime=0xb95fe80 | out: CurrentTime=0xb95fe80*=132462177280116000) returned 0x0 [0149.211] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x2554afcc [0149.211] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x46ea9491 [0149.211] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x515fa91f [0149.211] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0xd32bbae [0149.211] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x192cec40 [0149.211] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x51735377 [0149.211] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x1cc0c1ed [0149.211] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x3f6912ba [0149.211] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x5fd8afba [0149.211] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x70cfbc7e [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x5280f9d5 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x6b3c3660 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x75c42cf4 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x12f4fc20 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x49115300 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x3e59ba8c [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x3423305f [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x600ba366 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x182ab74c [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x5529073b [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x484e6dba [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x4e3e6c56 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x3ec38de7 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x1eb94f81 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x44fa2c33 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x3b108c24 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x379b5abf [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x5cc829b9 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x1f9dd128 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0xd819854 [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x7a9f9a1b [0149.212] RtlRandomEx (in: Seed=0xb95fe78 | out: Seed=0xb95fe78) returned 0x1af9fe98 [0149.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0149.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0149.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0149.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0149.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0149.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0149.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85ce0 [0149.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0149.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0149.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0149.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb2798 [0149.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7cb63a0 [0149.225] ReadFile (in: hFile=0x1b78, lpBuffer=0x7cb2798, nNumberOfBytesToRead=0x1c08, lpNumberOfBytesRead=0xb95fe74, lpOverlapped=0x0 | out: lpBuffer=0x7cb2798*, lpNumberOfBytesRead=0xb95fe74*=0x1c08, lpOverlapped=0x0) returned 1 [0149.226] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.226] WriteFile (in: hFile=0x1b78, lpBuffer=0x7cb63a0*, nNumberOfBytesToWrite=0x1c08, lpNumberOfBytesWritten=0xb95fe78, lpOverlapped=0x0 | out: lpBuffer=0x7cb63a0*, lpNumberOfBytesWritten=0xb95fe78*=0x1c08, lpOverlapped=0x0) returned 1 [0149.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0149.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0149.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0149.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63a0) returned 1 [0149.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2798) returned 1 [0149.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0149.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ce0) returned 1 [0149.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0149.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85ce0 [0149.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0149.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0149.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0149.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e868d8 [0149.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0149.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0149.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0149.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0149.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ce0) returned 1 [0149.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec940 [0149.459] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.459] WriteFile (in: hFile=0x1b78, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xb95ff00, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xb95ff00*=0x108, lpOverlapped=0x0) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e868d8) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35d8) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0149.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0149.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66918 [0149.513] wcscpy (in: _Dest=0x3e66918, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png" [0149.513] wcscat (in: _Dest=0x3e66918, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png.68814f") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png.68814f" [0149.514] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png.68814f", NtPathName=0xb95fe78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\_-_krm5.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e67490 [0149.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67490) returned 1 [0149.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03770) returned 1 [0149.569] NtQueryInformationFile (in: FileHandle=0x1b78, IoStatusBlock=0xb95fe50, FileInformation=0xb95fe58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb95fe50, FileInformation=0xb95fe58) returned 0x0 [0149.569] NtSetInformationFile (FileHandle=0x1b78, IoStatusBlock=0xb95fe50, FileInformation=0xb95fe58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66918) returned 1 [0149.578] FlushFileBuffers (hFile=0x1b78) returned 1 [0149.581] CloseHandle (hObject=0x1b78) returned 1 [0149.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66918 [0149.591] wcscpy (in: _Dest=0x3e66918, _Source="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\" [0149.591] wcscat (in: _Dest=0x3e66918, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" [0149.591] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\68814f-readme.txt")) returned 0xffffffff [0149.591] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Pictures\\wrMMZ2_Y1ukGT0z1\\1wJXxR0YtjSkGApw\\9G5 QwNPQJ\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\pictures\\wrmmz2_y1ukgt0z1\\1wjxxr0ytjskgapw\\9g5 qwnpqj\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f04 [0149.601] WriteFile (in: hFile=0x1f04, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb95fe94, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb95fe94*=0x8b9, lpOverlapped=0x0) returned 1 [0149.607] CloseHandle (hObject=0x1f04) returned 1 [0149.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66918) returned 1 [0149.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 Thread: id = 2007 os_tid = 0x2744 [0147.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d40448 [0147.592] wcscpy (in: _Dest=0x3d40448, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0147.592] wcscat (in: _Dest=0x3d40448, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0147.592] wcscat (in: _Dest=0x3d40448, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*" [0147.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3c28 [0147.592] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0147.593] wcscmp (_String1=".", _String2=".") returned 0 [0147.593] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.593] wcscmp (_String1="..", _String2=".") returned 1 [0147.593] wcscmp (_String1="..", _String2="..") returned 0 [0147.593] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0147.593] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0147.593] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0147.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3ddf3d8 [0147.593] wcscpy (in: _Dest=0x3ddf3d8, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" [0147.593] wcscat (in: _Dest=0x3ddf3d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\" [0147.593] wcscat (in: _Dest=0x3ddf3d8, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0149.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3ddf3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0149.756] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0149.756] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0149.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3c28) returned 1 [0149.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40448) returned 1 [0149.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b98) returned 1 Thread: id = 2008 os_tid = 0x2748 [0147.594] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm")) returned 0x20 [0147.594] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0147.595] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.595] GetLastError () returned 0x5 [0147.595] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 0 [0147.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 Thread: id = 2009 os_tid = 0x274c [0147.600] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm")) returned 0x20 [0147.601] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0147.601] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.601] GetLastError () returned 0x5 [0147.601] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0147.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 Thread: id = 2010 os_tid = 0x2750 [0147.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d40380 [0147.608] wcscpy (in: _Dest=0x3d40380, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0147.608] wcscat (in: _Dest=0x3d40380, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0147.608] wcscat (in: _Dest=0x3d40380, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*" [0147.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1810 [0147.608] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0147.609] wcscmp (_String1=".", _String2=".") returned 0 [0147.609] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec77070, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec77070, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.609] wcscmp (_String1="..", _String2=".") returned 1 [0147.609] wcscmp (_String1="..", _String2="..") returned 0 [0147.609] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0147.609] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0147.609] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0147.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3dde3e8 [0147.609] wcscpy (in: _Dest=0x3dde3e8, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" [0147.609] wcscat (in: _Dest=0x3dde3e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\" [0147.609] wcscat (in: _Dest=0x3dde3e8, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0149.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dde3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8c [0149.758] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0149.758] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0149.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1810) returned 1 [0149.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40380) returned 1 [0149.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 Thread: id = 2011 os_tid = 0x2754 [0147.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19198 [0147.614] wcscpy (in: _Dest=0x3e19198, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0147.614] wcscat (in: _Dest=0x3e19198, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0147.614] wcscat (in: _Dest=0x3e19198, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*" [0147.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb40f8 [0147.614] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0147.615] wcscmp (_String1=".", _String2=".") returned 0 [0147.615] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.615] wcscmp (_String1="..", _String2=".") returned 1 [0147.615] wcscmp (_String1="..", _String2="..") returned 0 [0147.615] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0147.615] wcscmp (_String1="directories.acrodata", _String2=".") returned 1 [0147.615] wcscmp (_String1="directories.acrodata", _String2="..") returned 1 [0147.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e1e0 [0147.615] wcscpy (in: _Dest=0x7a5e1e0, _Source="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0147.615] wcscat (in: _Dest=0x7a5e1e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0147.615] wcscat (in: _Dest=0x7a5e1e0, _Source="directories.acrodata" | out: _Dest="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata") returned="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" [0149.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2304 [0149.761] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0149.761] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0149.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb40f8) returned 1 [0149.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19198) returned 1 [0149.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 Thread: id = 2012 os_tid = 0x2758 [0147.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a618 [0147.616] wcscpy (in: _Dest=0x3e1a618, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0147.616] wcscat (in: _Dest=0x3e1a618, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0147.616] wcscat (in: _Dest=0x3e1a618, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*" [0147.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3e90 [0147.616] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0147.619] wcscmp (_String1=".", _String2=".") returned 0 [0147.619] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88d007db, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdbf1b9a0, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.619] wcscmp (_String1="..", _String2=".") returned 1 [0147.619] wcscmp (_String1="..", _String2="..") returned 0 [0147.619] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88d2693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf115ef62, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xe45606ca, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0147.620] wcscmp (_String1="Help_CValidator.H1D", _String2=".") returned 1 [0147.620] wcscmp (_String1="Help_CValidator.H1D", _String2="..") returned 1 [0147.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f8d8 [0147.620] wcscpy (in: _Dest=0x7a5f8d8, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0147.620] wcscat (in: _Dest=0x7a5f8d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0147.620] wcscat (in: _Dest=0x7a5f8d8, _Source="Help_CValidator.H1D" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" [0149.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2300 [0149.763] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf774b282, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc098760, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0149.763] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2=".") returned 1 [0149.763] wcscmp (_String1="Help_MKWD_AssetId.H1W", _String2="..") returned 1 [0149.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053e58 [0149.763] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0149.763] wcscat (in: _Dest=0x3053e58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0149.764] wcscat (in: _Dest=0x3053e58, _Source="Help_MKWD_AssetId.H1W" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" [0149.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8 [0149.769] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf7961352, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc1ef3c0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0149.769] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2=".") returned 1 [0149.769] wcscmp (_String1="Help_MKWD_BestBet.H1W", _String2="..") returned 1 [0149.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3054050 [0149.770] wcscpy (in: _Dest=0x3054050, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0149.770] wcscat (in: _Dest=0x3054050, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0149.770] wcscat (in: _Dest=0x3054050, _Source="Help_MKWD_BestBet.H1W" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" [0149.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3054050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ec [0149.778] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x79f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0149.779] wcscmp (_String1="Help_MTOC_help.H1H", _String2=".") returned 1 [0149.779] wcscmp (_String1="Help_MTOC_help.H1H", _String2="..") returned 1 [0149.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4be0 [0149.779] wcscpy (in: _Dest=0x3df4be0, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0149.779] wcscat (in: _Dest=0x3df4be0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0149.779] wcscat (in: _Dest=0x3df4be0, _Source="Help_MTOC_help.H1H" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" [0149.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e4 [0149.781] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8baf9110, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0149.781] wcscmp (_String1="Help_MValidator.H1D", _String2=".") returned 1 [0149.781] wcscmp (_String1="Help_MValidator.H1D", _String2="..") returned 1 [0149.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053a68 [0149.781] wcscpy (in: _Dest=0x3053a68, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0149.781] wcscat (in: _Dest=0x3053a68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0149.781] wcscat (in: _Dest=0x3053a68, _Source="Help_MValidator.H1D" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" [0149.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0 [0149.783] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x88e312dd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf79d3a5a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdc2617e0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0149.783] wcscmp (_String1="Help_MValidator.Lck", _String2=".") returned 1 [0149.783] wcscmp (_String1="Help_MValidator.Lck", _String2="..") returned 1 [0149.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053720 [0149.783] wcscpy (in: _Dest=0x3053720, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0149.783] wcscat (in: _Dest=0x3053720, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0149.783] wcscat (in: _Dest=0x3053720, _Source="Help_MValidator.Lck" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" [0149.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4 [0149.785] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0149.785] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2=".") returned 1 [0149.785] wcscmp (_String1="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", _String2="..") returned 1 [0149.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68648 [0149.786] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US" [0149.786] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\" [0149.786] wcscat (in: _Dest=0x3e68648, _Source="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" [0149.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04 [0149.788] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x893401a6, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdaab9d40, ftLastAccessTime.dwHighDateTime=0x1d2f581, ftLastWriteTime.dwLowDateTime=0xdbf1b9a0, ftLastWriteTime.dwHighDateTime=0x1d2f581, nFileSizeHigh=0x0, nFileSizeLow=0xd539b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0149.788] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0149.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3e90) returned 1 [0149.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a618) returned 1 [0149.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 2013 os_tid = 0x275c [0147.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr")) returned 0x20 [0147.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR", dwFileAttributes=0x20) returned 0 [0147.622] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.622] GetLastError () returned 0x5 [0147.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR", dwFileAttributes=0x20) returned 0 [0147.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 2014 os_tid = 0x2760 [0147.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr")) returned 0x20 [0147.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR", dwFileAttributes=0x20) returned 0 [0147.625] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.626] GetLastError () returned 0x5 [0147.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR", dwFileAttributes=0x20) returned 0 [0147.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 Thread: id = 2015 os_tid = 0x2764 [0147.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr")) returned 0x20 [0147.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR", dwFileAttributes=0x20) returned 0 [0147.629] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.629] GetLastError () returned 0x5 [0147.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR", dwFileAttributes=0x20) returned 0 [0147.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 2016 os_tid = 0x2768 [0147.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr")) returned 0x20 [0147.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR", dwFileAttributes=0x20) returned 0 [0147.633] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.633] GetLastError () returned 0x5 [0147.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR", dwFileAttributes=0x20) returned 0 [0147.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 Thread: id = 2017 os_tid = 0x276c [0147.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc3d08 [0147.636] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0147.636] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\" [0147.636] wcscat (in: _Dest=0x3dc3d08, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*" [0147.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bce0 [0147.636] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0147.637] wcscmp (_String1=".", _String2=".") returned 0 [0147.637] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.637] wcscmp (_String1="..", _String2=".") returned 1 [0147.637] wcscmp (_String1="..", _String2="..") returned 0 [0147.637] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d80ec00, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1d80ec00, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1d80ec00, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0147.637] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0147.637] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0147.637] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0147.637] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0147.637] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0147.637] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0147.637] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0147.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bce0) returned 1 [0147.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 [0147.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3df0) returned 1 Thread: id = 2018 os_tid = 0x2770 [0147.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf")) returned 0x20 [0147.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0147.644] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.644] GetLastError () returned 0x5 [0147.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0147.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 Thread: id = 2019 os_tid = 0x2774 [0147.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf")) returned 0x20 [0147.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0147.648] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.648] GetLastError () returned 0x5 [0147.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0147.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 2020 os_tid = 0x2778 [0147.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf")) returned 0x20 [0147.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0147.651] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.651] GetLastError () returned 0x5 [0147.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0147.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 Thread: id = 2021 os_tid = 0x277c [0147.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf")) returned 0x20 [0147.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0147.655] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0147.655] GetLastError () returned 0x5 [0147.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0147.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40510) returned 1 Thread: id = 2022 os_tid = 0x2780 [0147.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a624f0 [0147.657] wcscpy (in: _Dest=0x7a624f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0147.657] wcscat (in: _Dest=0x7a624f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0147.657] wcscat (in: _Dest=0x7a624f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*" [0147.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bce0 [0147.657] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6c9420, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0147.657] wcscmp (_String1=".", _String2=".") returned 0 [0147.658] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6c9420, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.658] wcscmp (_String1="..", _String2=".") returned 1 [0147.658] wcscmp (_String1="..", _String2="..") returned 0 [0147.658] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6c9420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0147.658] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0147.658] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0147.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6180 [0147.658] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0147.658] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0147.658] wcscat (in: _Dest=0x2ff6180, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" [0164.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0164.973] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0164.973] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0164.974] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0164.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a668d0 [0164.974] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0164.974] wcscat (in: _Dest=0x7a668d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0164.974] wcscat (in: _Dest=0x7a668d0, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" [0164.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a668d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0164.975] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc0af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0164.975] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0164.975] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0164.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf7f8 [0164.975] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0164.975] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0164.975] wcscat (in: _Dest=0x3eaf7f8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" [0164.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0164.977] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0164.977] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0164.977] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0164.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a1e8 [0164.977] wcscpy (in: _Dest=0x3e3a1e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS" [0164.977] wcscat (in: _Dest=0x3e3a1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\" [0164.977] wcscat (in: _Dest=0x3e3a1e8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" [0164.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0164.979] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0164.979] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0164.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bce0) returned 1 [0164.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a624f0) returned 1 [0164.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5d60) returned 1 Thread: id = 2023 os_tid = 0x2784 [0147.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62590 [0147.659] wcscpy (in: _Dest=0x7a62590, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0147.659] wcscat (in: _Dest=0x7a62590, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0147.659] wcscat (in: _Dest=0x7a62590, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*" [0147.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3e0f8 [0147.659] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc089a60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d280 [0147.694] wcscmp (_String1=".", _String2=".") returned 0 [0147.694] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc089a60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.694] wcscmp (_String1="..", _String2=".") returned 1 [0147.694] wcscmp (_String1="..", _String2="..") returned 0 [0147.694] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x132cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0147.695] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0147.695] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0147.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff62f0 [0147.695] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0147.695] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0147.695] wcscat (in: _Dest=0x2ff62f0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" [0156.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0156.111] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0156.111] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0156.111] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0156.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35aa08 [0156.111] wcscpy (in: _Dest=0x35aa08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0156.111] wcscat (in: _Dest=0x35aa08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0156.111] wcscat (in: _Dest=0x35aa08, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" [0156.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35aa08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0156.112] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0156.112] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0156.112] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0156.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf460 [0156.112] wcscpy (in: _Dest=0x3eaf460, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0156.112] wcscat (in: _Dest=0x3eaf460, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0156.112] wcscat (in: _Dest=0x3eaf460, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" [0156.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24dc [0156.113] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0156.113] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0156.113] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0156.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d402b8 [0156.114] wcscpy (in: _Dest=0x3d402b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT" [0156.114] wcscat (in: _Dest=0x3d402b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\" [0156.114] wcscat (in: _Dest=0x3d402b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" [0156.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d402b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0156.115] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0156.115] FindClose (in: hFindFile=0x7a2d280 | out: hFindFile=0x7a2d280) returned 1 [0156.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3e0f8) returned 1 [0156.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62590) returned 1 [0156.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 Thread: id = 2024 os_tid = 0x2788 [0147.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62630 [0147.660] wcscpy (in: _Dest=0x7a62630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0147.660] wcscat (in: _Dest=0x7a62630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0147.660] wcscat (in: _Dest=0x7a62630, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*" [0147.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3de90 [0147.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfdc800, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0147.702] wcscmp (_String1=".", _String2=".") returned 0 [0147.702] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfdc800, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.702] wcscmp (_String1="..", _String2=".") returned 1 [0147.702] wcscmp (_String1="..", _String2="..") returned 0 [0147.702] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0147.702] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0147.702] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0147.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7e40 [0147.702] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0147.702] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0147.703] wcscat (in: _Dest=0x2ff7e40, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" [0150.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d4 [0150.608] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0150.609] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0150.609] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0150.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c0b8 [0150.609] wcscpy (in: _Dest=0x35c0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0150.609] wcscat (in: _Dest=0x35c0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0150.609] wcscat (in: _Dest=0x35c0b8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" [0150.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e0 [0150.610] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0150.610] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0150.611] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0150.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6968 [0150.611] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0150.611] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0150.611] wcscat (in: _Dest=0x2ff6968, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" [0150.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2310 [0150.612] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd002960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0150.612] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0150.612] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0150.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6fe0 [0150.613] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0150.613] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0150.613] wcscat (in: _Dest=0x2ff6fe0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" [0150.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0150.614] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c339, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0150.614] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0150.615] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0150.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff79f0 [0150.615] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0150.615] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0150.615] wcscat (in: _Dest=0x2ff79f0, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" [0150.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b88 [0150.616] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0150.616] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0150.616] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0150.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40830 [0150.616] wcscpy (in: _Dest=0x3d40830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE" [0150.616] wcscat (in: _Dest=0x3d40830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\" [0150.616] wcscat (in: _Dest=0x3d40830, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" [0150.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2318 [0150.618] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0150.618] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0150.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3de90) returned 1 [0150.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62630) returned 1 [0150.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 Thread: id = 2025 os_tid = 0x278c [0147.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a626d0 [0147.662] wcscpy (in: _Dest=0x7a626d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0147.662] wcscat (in: _Dest=0x7a626d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0147.662] wcscat (in: _Dest=0x7a626d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*" [0147.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3dc28 [0147.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc089a60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0147.698] wcscmp (_String1=".", _String2=".") returned 0 [0147.698] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc089a60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.698] wcscmp (_String1="..", _String2=".") returned 1 [0147.699] wcscmp (_String1="..", _String2="..") returned 0 [0147.699] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0147.699] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0147.699] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0147.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6d00 [0147.699] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0147.699] wcscat (in: _Dest=0x2ff6d00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0147.699] wcscat (in: _Dest=0x2ff6d00, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" [0150.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22e8 [0150.603] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc089a60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9306, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0150.603] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0150.603] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0150.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6ad8 [0150.603] wcscpy (in: _Dest=0x2ff6ad8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0150.603] wcscat (in: _Dest=0x2ff6ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0150.603] wcscat (in: _Dest=0x2ff6ad8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" [0150.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c [0150.604] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0150.605] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0150.605] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0150.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40380 [0150.605] wcscpy (in: _Dest=0x3d40380, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN" [0150.605] wcscat (in: _Dest=0x3d40380, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\" [0150.605] wcscat (in: _Dest=0x3d40380, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" [0150.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280 [0150.606] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0150.606] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0150.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3dc28) returned 1 [0150.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a626d0) returned 1 [0150.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6260) returned 1 Thread: id = 2026 os_tid = 0x2790 [0147.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62770 [0147.663] wcscpy (in: _Dest=0x7a62770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0147.664] wcscat (in: _Dest=0x7a62770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0147.664] wcscat (in: _Dest=0x7a62770, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*" [0147.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d9c0 [0147.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0147.699] wcscmp (_String1=".", _String2=".") returned 0 [0147.699] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.700] wcscmp (_String1="..", _String2=".") returned 1 [0147.700] wcscmp (_String1="..", _String2="..") returned 0 [0147.700] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0147.700] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0147.700] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0147.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6460 [0147.700] wcscpy (in: _Dest=0x2ff6460, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0147.700] wcscat (in: _Dest=0x2ff6460, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0147.700] wcscat (in: _Dest=0x2ff6460, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" [0161.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0161.396] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0161.396] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0161.396] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0161.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7880 [0161.396] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0161.396] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0161.397] wcscat (in: _Dest=0x2ff7880, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" [0161.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4 [0161.398] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0161.398] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0161.398] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0161.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40830 [0161.398] wcscpy (in: _Dest=0x3d40830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU" [0161.398] wcscat (in: _Dest=0x3d40830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\" [0161.398] wcscat (in: _Dest=0x3d40830, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" [0161.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0161.399] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0161.399] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0161.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d9c0) returned 1 [0161.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62770) returned 1 [0161.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 Thread: id = 2027 os_tid = 0x2794 [0147.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62810 [0147.680] wcscpy (in: _Dest=0x7a62810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0147.680] wcscat (in: _Dest=0x7a62810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0147.680] wcscat (in: _Dest=0x7a62810, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*" [0147.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d758 [0147.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbff14e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0147.700] wcscmp (_String1=".", _String2=".") returned 0 [0147.700] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbff14e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.701] wcscmp (_String1="..", _String2=".") returned 1 [0147.701] wcscmp (_String1="..", _String2="..") returned 0 [0147.701] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0147.701] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0147.701] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0147.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6e70 [0147.701] wcscpy (in: _Dest=0x2ff6e70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0147.701] wcscat (in: _Dest=0x2ff6e70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0147.701] wcscat (in: _Dest=0x2ff6e70, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" [0163.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0163.151] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0163.151] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0163.151] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0163.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7e40 [0163.151] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0163.152] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0163.152] wcscat (in: _Dest=0x2ff7e40, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" [0163.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0163.153] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0163.153] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0163.153] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0163.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d402b8 [0163.153] wcscpy (in: _Dest=0x3d402b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU" [0163.153] wcscat (in: _Dest=0x3d402b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\" [0163.153] wcscat (in: _Dest=0x3d402b8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" [0163.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d402b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0163.154] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0163.154] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0163.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d758) returned 1 [0163.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62810) returned 1 [0163.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 Thread: id = 2028 os_tid = 0x2798 [0147.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a628b0 [0147.682] wcscpy (in: _Dest=0x7a628b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0147.682] wcscat (in: _Dest=0x7a628b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0147.682] wcscat (in: _Dest=0x7a628b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*" [0147.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d4f0 [0147.682] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0afbc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0147.690] wcscmp (_String1=".", _String2=".") returned 0 [0147.690] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0afbc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc0afbc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.690] wcscmp (_String1="..", _String2=".") returned 1 [0147.690] wcscmp (_String1="..", _String2="..") returned 0 [0147.690] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0147.690] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0147.690] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0147.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6968 [0147.690] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0147.690] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0147.690] wcscat (in: _Dest=0x2ff6968, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" [0149.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac [0149.773] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0149.773] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0149.773] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0149.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6ad8 [0149.773] wcscpy (in: _Dest=0x2ff6ad8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0149.773] wcscat (in: _Dest=0x2ff6ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0149.773] wcscat (in: _Dest=0x2ff6ad8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" [0149.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14 [0149.775] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0149.775] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0149.775] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0149.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40380 [0149.775] wcscpy (in: _Dest=0x3d40380, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP" [0149.775] wcscat (in: _Dest=0x3d40380, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\" [0149.775] wcscat (in: _Dest=0x3d40380, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" [0149.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4 [0149.777] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0afbc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0149.777] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0149.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d4f0) returned 1 [0149.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a628b0) returned 1 [0149.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4be0) returned 1 Thread: id = 2029 os_tid = 0x279c [0147.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62950 [0147.684] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0147.684] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0147.684] wcscat (in: _Dest=0x7a62950, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*" [0147.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d288 [0147.684] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd406e80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0147.701] wcscmp (_String1=".", _String2=".") returned 0 [0147.701] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd406e80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd61c1c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.701] wcscmp (_String1="..", _String2=".") returned 1 [0147.701] wcscmp (_String1="..", _String2="..") returned 0 [0147.701] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd453140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0147.701] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0147.701] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0147.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7ef8 [0147.702] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0147.702] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0147.702] wcscat (in: _Dest=0x2ff7ef8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" [0149.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22fc [0149.794] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd453140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0149.794] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0149.794] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0149.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bea8 [0149.794] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0149.794] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0149.794] wcscat (in: _Dest=0x35bea8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" [0149.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f4 [0149.798] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd453140, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0149.798] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0149.798] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0149.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0149.799] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0149.799] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0149.799] wcscat (in: _Dest=0x2ff7430, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" [0149.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b78 [0149.806] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd61c1c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0149.806] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0149.806] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0149.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7938 [0149.806] wcscpy (in: _Dest=0x2ff7938, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0149.806] wcscat (in: _Dest=0x2ff7938, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0149.806] wcscat (in: _Dest=0x2ff7938, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" [0149.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30 [0149.808] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd406e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0149.808] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0149.808] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0149.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff63a8 [0149.809] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0149.809] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0149.809] wcscat (in: _Dest=0x2ff63a8, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" [0149.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b44 [0149.823] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd5f6060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0149.823] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0149.823] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0149.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40448 [0149.823] wcscpy (in: _Dest=0x3d40448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ" [0149.823] wcscat (in: _Dest=0x3d40448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\" [0149.823] wcscat (in: _Dest=0x3d40448, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" [0149.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08 [0149.837] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd5f6060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0149.837] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0149.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d288) returned 1 [0149.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 [0149.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5ea0) returned 1 Thread: id = 2030 os_tid = 0x27a8 Thread: id = 2031 os_tid = 0x27a0 [0148.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7558 [0148.167] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0148.167] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0148.167] wcscat (in: _Dest=0x2c7558, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*" [0148.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59f10 [0148.167] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf7f0c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfa5220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73ef0 [0148.167] wcscmp (_String1=".", _String2=".") returned 0 [0148.167] FindNextFileW (in: hFindFile=0x3e73ef0, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbf7f0c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfa5220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.167] wcscmp (_String1="..", _String2=".") returned 1 [0148.167] wcscmp (_String1="..", _String2="..") returned 0 [0148.168] FindNextFileW (in: hFindFile=0x3e73ef0, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0148.168] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0148.168] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0148.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7d88 [0148.168] wcscpy (in: _Dest=0x2ff7d88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0148.168] wcscat (in: _Dest=0x2ff7d88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0148.168] wcscat (in: _Dest=0x2ff7d88, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" [0153.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2140 [0153.901] FindNextFileW (in: hFindFile=0x3e73ef0, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbf7f0c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0153.901] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0153.901] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0153.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf7f8 [0153.902] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0153.902] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0153.902] wcscat (in: _Dest=0x3eaf7f8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" [0153.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48 [0153.903] FindNextFileW (in: hFindFile=0x3e73ef0, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0153.903] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0153.903] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0153.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40510 [0153.903] wcscpy (in: _Dest=0x3d40510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA" [0153.903] wcscat (in: _Dest=0x3d40510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\" [0153.903] wcscat (in: _Dest=0x3d40510, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" [0153.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b40 [0153.904] FindNextFileW (in: hFindFile=0x3e73ef0, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0153.904] FindClose (in: hFindFile=0x3e73ef0 | out: hFindFile=0x3e73ef0) returned 1 [0153.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59f10) returned 1 [0153.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 [0153.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4460) returned 1 Thread: id = 2032 os_tid = 0x27ac [0148.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c7698 [0148.175] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0148.175] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0148.175] wcscat (in: _Dest=0x2c7698, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*" [0148.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58498 [0148.175] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfb66a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e736b0 [0151.657] wcscmp (_String1=".", _String2=".") returned 0 [0151.657] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcfb66a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfdc800, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.657] wcscmp (_String1="..", _String2=".") returned 1 [0151.657] wcscmp (_String1="..", _String2="..") returned 0 [0151.657] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0151.657] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0151.658] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0151.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7378 [0151.658] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0151.658] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0151.658] wcscat (in: _Dest=0x2ff7378, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" [0156.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0156.171] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfdc800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0156.171] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0156.171] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0156.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0156.171] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0156.171] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0156.171] wcscat (in: _Dest=0x35c378, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" [0156.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0156.172] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0156.172] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0156.172] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0156.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf010 [0156.172] wcscpy (in: _Dest=0x3eaf010, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0156.172] wcscat (in: _Dest=0x3eaf010, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0156.172] wcscat (in: _Dest=0x3eaf010, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" [0156.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc [0156.173] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0156.174] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0156.174] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0156.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf238 [0156.174] wcscpy (in: _Dest=0x3eaf238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0156.174] wcscat (in: _Dest=0x3eaf238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0156.174] wcscat (in: _Dest=0x3eaf238, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" [0156.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0156.175] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0156.175] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0156.175] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0156.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf740 [0156.175] wcscpy (in: _Dest=0x3eaf740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0156.175] wcscat (in: _Dest=0x3eaf740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0156.175] wcscat (in: _Dest=0x3eaf740, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" [0156.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0156.176] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0156.176] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0156.176] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0156.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d401f0 [0156.176] wcscpy (in: _Dest=0x3d401f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV" [0156.177] wcscat (in: _Dest=0x3d401f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\" [0156.177] wcscat (in: _Dest=0x3d401f0, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" [0156.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d401f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0156.178] FindNextFileW (in: hFindFile=0x3e736b0, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0156.178] FindClose (in: hFindFile=0x3e736b0 | out: hFindFile=0x3e736b0) returned 1 [0156.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58498) returned 1 [0156.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 [0156.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 2033 os_tid = 0x27b0 [0148.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2c6e78 [0148.176] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0148.176] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0148.176] wcscat (in: _Dest=0x2c6e78, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*" [0148.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0148.176] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf90540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfb66a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741f0 [0151.665] wcscmp (_String1=".", _String2=".") returned 0 [0151.665] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf90540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcfb66a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.665] wcscmp (_String1="..", _String2=".") returned 1 [0151.665] wcscmp (_String1="..", _String2="..") returned 0 [0151.666] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0151.666] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0151.666] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0151.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6db8 [0151.666] wcscpy (in: _Dest=0x2ff6db8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0151.666] wcscat (in: _Dest=0x2ff6db8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0151.666] wcscat (in: _Dest=0x2ff6db8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" [0153.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c [0153.362] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0153.362] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0153.362] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0153.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35aa08 [0153.365] wcscpy (in: _Dest=0x35aa08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0153.365] wcscat (in: _Dest=0x35aa08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0153.365] wcscat (in: _Dest=0x35aa08, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" [0153.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35aa08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240 [0153.367] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0153.367] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0153.367] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0153.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0153.367] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0153.367] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0153.367] wcscat (in: _Dest=0x2ff7430, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" [0153.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244 [0153.369] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9083, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0153.370] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0153.370] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0153.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaec78 [0153.370] wcscpy (in: _Dest=0x3eaec78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0153.370] wcscat (in: _Dest=0x3eaec78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0153.370] wcscat (in: _Dest=0x3eaec78, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" [0153.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaec78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248 [0153.372] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0153.372] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0153.372] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0153.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eae998 [0153.373] wcscpy (in: _Dest=0x3eae998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0153.373] wcscat (in: _Dest=0x3eae998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0153.373] wcscat (in: _Dest=0x3eae998, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" [0153.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eae998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4 [0153.374] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0153.374] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0153.375] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0153.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40128 [0153.375] wcscpy (in: _Dest=0x3d40128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN" [0153.375] wcscat (in: _Dest=0x3d40128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\" [0153.375] wcscat (in: _Dest=0x3d40128, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" [0153.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c [0153.376] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcfb66a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0153.377] FindClose (in: hFindFile=0x3e741f0 | out: hFindFile=0x3e741f0) returned 1 [0153.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0153.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 [0153.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 2034 os_tid = 0x27b4 [0148.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68270 [0148.178] wcscpy (in: _Dest=0x7a68270, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0148.178] wcscat (in: _Dest=0x7a68270, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0148.178] wcscat (in: _Dest=0x7a68270, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*" [0148.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59570 [0148.178] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbff14e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0150.871] wcscmp (_String1=".", _String2=".") returned 0 [0150.871] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfcb380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbff14e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.871] wcscmp (_String1="..", _String2=".") returned 1 [0150.871] wcscmp (_String1="..", _String2="..") returned 0 [0150.871] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xca88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0150.871] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0150.871] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0150.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7cd0 [0150.871] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0150.871] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0150.871] wcscat (in: _Dest=0x2ff7cd0, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" [0154.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0154.719] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0154.719] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0154.719] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0154.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7c18 [0154.719] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0154.719] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0154.719] wcscat (in: _Dest=0x2ff7c18, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" [0154.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0154.720] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0154.720] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0154.720] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0154.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d405d8 [0154.720] wcscpy (in: _Dest=0x3d405d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA" [0154.720] wcscat (in: _Dest=0x3d405d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\" [0154.720] wcscat (in: _Dest=0x3d405d8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" [0154.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d405d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0154.721] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbff14e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0154.721] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0154.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59570) returned 1 [0154.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68270) returned 1 [0154.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62b30) returned 1 Thread: id = 2035 os_tid = 0x27b8 [0148.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68310 [0148.191] wcscpy (in: _Dest=0x7a68310, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0148.191] wcscat (in: _Dest=0x7a68310, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0148.191] wcscat (in: _Dest=0x7a68310, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*" [0148.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58bd0 [0148.192] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc03d7a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0150.870] wcscmp (_String1=".", _String2=".") returned 0 [0150.870] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc03d7a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.870] wcscmp (_String1="..", _String2=".") returned 1 [0150.870] wcscmp (_String1="..", _String2="..") returned 0 [0150.870] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0150.870] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0150.870] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0150.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7aa8 [0150.870] wcscpy (in: _Dest=0x2ff7aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0150.870] wcscat (in: _Dest=0x2ff7aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0150.870] wcscat (in: _Dest=0x2ff7aa8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" [0158.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0158.230] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xffc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0158.230] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0158.230] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0158.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0158.231] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0158.231] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0158.231] wcscat (in: _Dest=0x35c378, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" [0158.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0158.233] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa447, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0158.233] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0158.233] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0158.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf238 [0158.233] wcscpy (in: _Dest=0x3eaf238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0158.233] wcscat (in: _Dest=0x3eaf238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0158.233] wcscat (in: _Dest=0x3eaf238, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" [0158.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0158.235] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0158.235] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0158.236] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0158.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d405d8 [0158.236] wcscpy (in: _Dest=0x3d405d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN" [0158.236] wcscat (in: _Dest=0x3d405d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\" [0158.236] wcscat (in: _Dest=0x3d405d8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" [0158.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d405d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0158.238] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0158.238] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0158.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58bd0) returned 1 [0158.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68310) returned 1 [0158.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62bd0) returned 1 Thread: id = 2036 os_tid = 0x27bc [0148.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a683b0 [0148.204] wcscpy (in: _Dest=0x7a683b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0148.204] wcscat (in: _Dest=0x7a683b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0148.204] wcscat (in: _Dest=0x7a683b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*" [0148.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0148.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc03d7a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0150.869] wcscmp (_String1=".", _String2=".") returned 0 [0150.869] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc03d7a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.869] wcscmp (_String1="..", _String2=".") returned 1 [0150.869] wcscmp (_String1="..", _String2="..") returned 0 [0150.869] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0150.869] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0150.869] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0150.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff74e8 [0150.870] wcscpy (in: _Dest=0x2ff74e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0150.870] wcscat (in: _Dest=0x2ff74e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0150.870] wcscat (in: _Dest=0x2ff74e8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" [0156.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff74e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0156.164] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc03d7a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xeac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0156.164] wcscmp (_String1="Hanko.pdf", _String2=".") returned 1 [0156.164] wcscmp (_String1="Hanko.pdf", _String2="..") returned 1 [0156.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35bea8 [0156.164] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0156.165] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0156.165] wcscat (in: _Dest=0x35bea8, _Source="Hanko.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" [0156.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0156.166] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd074, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0156.166] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0156.166] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0156.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaec78 [0156.166] wcscpy (in: _Dest=0x3eaec78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0156.166] wcscat (in: _Dest=0x3eaec78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0156.166] wcscat (in: _Dest=0x3eaec78, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" [0156.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaec78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0156.167] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0156.167] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0156.167] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0156.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d408f8 [0156.167] wcscpy (in: _Dest=0x3d408f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR" [0156.167] wcscat (in: _Dest=0x3d408f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\" [0156.168] wcscat (in: _Dest=0x3d408f8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" [0156.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d408f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0156.168] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0156.169] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0156.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0156.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a683b0) returned 1 [0156.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 2037 os_tid = 0x27c0 [0148.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68450 [0148.211] wcscpy (in: _Dest=0x7a68450, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0148.211] wcscat (in: _Dest=0x7a68450, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0148.211] wcscat (in: _Dest=0x7a68450, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*" [0148.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59308 [0148.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfa5220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0150.868] wcscmp (_String1=".", _String2=".") returned 0 [0150.868] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbfa5220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdbfcb380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.868] wcscmp (_String1="..", _String2=".") returned 1 [0150.868] wcscmp (_String1="..", _String2="..") returned 0 [0150.868] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xff3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0150.868] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0150.868] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0150.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7b60 [0150.869] wcscpy (in: _Dest=0x2ff7b60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0150.869] wcscat (in: _Dest=0x2ff7b60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0150.869] wcscat (in: _Dest=0x2ff7b60, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" [0154.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0154.714] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfcb380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9542, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0154.714] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0154.714] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0154.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6ad8 [0154.714] wcscpy (in: _Dest=0x2ff6ad8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0154.714] wcscat (in: _Dest=0x2ff6ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0154.714] wcscat (in: _Dest=0x2ff6ad8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" [0154.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0154.715] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0154.715] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0154.715] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0154.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40510 [0154.715] wcscpy (in: _Dest=0x3d40510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD" [0154.715] wcscat (in: _Dest=0x3d40510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\" [0154.715] wcscat (in: _Dest=0x3d40510, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" [0154.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0154.716] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbfa5220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0154.717] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0154.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59308) returned 1 [0154.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68450) returned 1 [0154.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62d10) returned 1 Thread: id = 2038 os_tid = 0x27c4 [0148.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a684f0 [0148.218] wcscpy (in: _Dest=0x7a684f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0148.218] wcscat (in: _Dest=0x7a684f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0148.218] wcscat (in: _Dest=0x7a684f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*" [0148.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0148.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0150.867] wcscmp (_String1=".", _String2=".") returned 0 [0150.867] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc063900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc063900, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.867] wcscmp (_String1="..", _String2=".") returned 1 [0150.867] wcscmp (_String1="..", _String2="..") returned 0 [0150.867] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0150.868] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0150.868] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0150.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6518 [0150.868] wcscpy (in: _Dest=0x2ff6518, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0150.868] wcscat (in: _Dest=0x2ff6518, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0150.868] wcscat (in: _Dest=0x2ff6518, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" [0166.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0166.580] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0166.580] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0166.580] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0166.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6fe0 [0166.580] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0166.580] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0166.580] wcscat (in: _Dest=0x2ff6fe0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" [0166.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0166.582] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0166.582] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0166.582] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0166.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a1e8 [0166.582] wcscpy (in: _Dest=0x3e3a1e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR" [0166.582] wcscat (in: _Dest=0x3e3a1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\" [0166.582] wcscat (in: _Dest=0x3e3a1e8, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" [0166.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0166.584] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc063900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0166.584] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0166.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0166.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a684f0) returned 1 [0166.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62db0) returned 1 Thread: id = 2039 os_tid = 0x27c8 [0148.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68590 [0148.219] wcscpy (in: _Dest=0x7a68590, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0148.219] wcscat (in: _Dest=0x7a68590, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0148.219] wcscat (in: _Dest=0x7a68590, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*" [0148.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58e38 [0148.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf6a3e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf90540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74070 [0151.671] wcscmp (_String1=".", _String2=".") returned 0 [0151.671] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf6a3e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf90540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.671] wcscmp (_String1="..", _String2=".") returned 1 [0151.671] wcscmp (_String1="..", _String2="..") returned 0 [0151.671] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x907a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0151.671] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0151.671] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0151.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaeb08 [0151.671] wcscpy (in: _Dest=0x3eaeb08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0151.671] wcscat (in: _Dest=0x3eaeb08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0151.672] wcscat (in: _Dest=0x3eaeb08, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" [0161.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaeb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0161.624] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0161.624] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0161.624] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0161.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66560 [0161.624] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0161.624] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0161.624] wcscat (in: _Dest=0x7a66560, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" [0161.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0161.626] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0161.626] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0161.626] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0161.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7880 [0161.626] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0161.626] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0161.626] wcscat (in: _Dest=0x2ff7880, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" [0161.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0161.628] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0161.628] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0161.628] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0161.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6460 [0161.628] wcscpy (in: _Dest=0x2ff6460, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0161.628] wcscat (in: _Dest=0x2ff6460, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0161.628] wcscat (in: _Dest=0x2ff6460, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" [0161.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0161.630] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf90540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0161.630] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0161.630] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0161.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7e40 [0161.630] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0161.630] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0161.630] wcscat (in: _Dest=0x2ff7e40, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" [0161.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0161.631] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0161.631] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0161.631] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0161.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40830 [0161.631] wcscpy (in: _Dest=0x3d40830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL" [0161.631] wcscat (in: _Dest=0x3d40830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\" [0161.631] wcscat (in: _Dest=0x3d40830, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" [0161.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0161.633] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0161.633] FindClose (in: hFindFile=0x3e74070 | out: hFindFile=0x3e74070) returned 1 [0161.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58e38) returned 1 [0161.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68590) returned 1 [0161.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62e50) returned 1 Thread: id = 2040 os_tid = 0x27cc [0148.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68630 [0148.220] wcscpy (in: _Dest=0x7a68630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0148.220] wcscat (in: _Dest=0x7a68630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0148.220] wcscat (in: _Dest=0x7a68630, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*" [0148.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d020 [0148.220] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0d5d20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc194400, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0150.864] wcscmp (_String1=".", _String2=".") returned 0 [0150.864] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc0d5d20, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc194400, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.864] wcscmp (_String1="..", _String2=".") returned 1 [0150.864] wcscmp (_String1="..", _String2="..") returned 0 [0150.864] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc0d5d20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0150.864] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0150.864] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0150.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7150 [0150.864] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0150.864] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0150.864] wcscat (in: _Dest=0x2ff7150, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" [0168.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0168.303] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0168.303] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0168.303] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0168.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf238 [0168.304] wcscpy (in: _Dest=0x3eaf238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0168.304] wcscat (in: _Dest=0x3eaf238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0168.304] wcscat (in: _Dest=0x3eaf238, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" [0168.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0168.305] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0168.305] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0168.305] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0168.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a120 [0168.305] wcscpy (in: _Dest=0x3e3a120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB" [0168.305] wcscat (in: _Dest=0x3e3a120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\" [0168.305] wcscat (in: _Dest=0x3e3a120, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" [0168.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0168.306] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc194400, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0168.306] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0168.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d020) returned 1 [0168.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68630) returned 1 [0168.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62ef0) returned 1 Thread: id = 2041 os_tid = 0x27d0 [0148.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a686d0 [0148.221] wcscpy (in: _Dest=0x7a686d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0148.221] wcscat (in: _Dest=0x7a686d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0148.221] wcscat (in: _Dest=0x7a686d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*" [0148.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3cdb8 [0148.221] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf44280, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf6a3e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74170 [0151.670] wcscmp (_String1=".", _String2=".") returned 0 [0151.670] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf44280, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf6a3e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.670] wcscmp (_String1="..", _String2=".") returned 1 [0151.670] wcscmp (_String1="..", _String2="..") returned 0 [0151.670] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0151.670] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0151.670] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0151.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf238 [0151.671] wcscpy (in: _Dest=0x3eaf238, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0151.671] wcscat (in: _Dest=0x3eaf238, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0151.671] wcscat (in: _Dest=0x3eaf238, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" [0153.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df4 [0153.384] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0153.384] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0153.384] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0153.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c168 [0153.384] wcscpy (in: _Dest=0x35c168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0153.384] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0153.384] wcscat (in: _Dest=0x35c168, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" [0153.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2428 [0153.386] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0153.386] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0153.386] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0153.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf010 [0153.386] wcscpy (in: _Dest=0x3eaf010, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0153.386] wcscat (in: _Dest=0x3eaf010, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0153.386] wcscat (in: _Dest=0x3eaf010, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" [0153.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2420 [0153.388] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe736, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0153.388] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0153.388] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0153.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf460 [0153.388] wcscpy (in: _Dest=0x3eaf460, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0153.388] wcscat (in: _Dest=0x3eaf460, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0153.388] wcscat (in: _Dest=0x3eaf460, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" [0153.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c [0153.389] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf6a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0153.389] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0153.389] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0153.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf740 [0153.389] wcscpy (in: _Dest=0x3eaf740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0153.389] wcscat (in: _Dest=0x3eaf740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0153.389] wcscat (in: _Dest=0x3eaf740, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" [0153.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260 [0153.390] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0153.390] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0153.390] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0153.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d401f0 [0153.391] wcscpy (in: _Dest=0x3d401f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM" [0153.391] wcscat (in: _Dest=0x3d401f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\" [0153.391] wcscat (in: _Dest=0x3d401f0, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" [0153.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d401f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264 [0153.392] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0153.392] FindClose (in: hFindFile=0x3e74170 | out: hFindFile=0x3e74170) returned 1 [0153.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3cdb8) returned 1 [0153.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a686d0) returned 1 [0153.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f90) returned 1 Thread: id = 2042 os_tid = 0x27d4 [0148.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68770 [0148.222] wcscpy (in: _Dest=0x7a68770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0148.222] wcscat (in: _Dest=0x7a68770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0148.222] wcscat (in: _Dest=0x7a68770, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*" [0148.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bf48 [0148.222] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf44280, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73830 [0151.669] wcscmp (_String1=".", _String2=".") returned 0 [0151.669] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf44280, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.669] wcscmp (_String1="..", _String2=".") returned 1 [0151.669] wcscmp (_String1="..", _String2="..") returned 0 [0151.670] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xeac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0151.670] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0151.670] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0151.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaede8 [0151.670] wcscpy (in: _Dest=0x3eaede8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0151.670] wcscat (in: _Dest=0x3eaede8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0151.670] wcscat (in: _Dest=0x3eaede8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" [0159.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0159.419] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0159.419] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0159.420] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0159.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66980 [0159.420] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0159.420] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0159.420] wcscat (in: _Dest=0x7a66980, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" [0159.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0159.421] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0159.421] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0159.421] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0159.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0159.421] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0159.421] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0159.421] wcscat (in: _Dest=0x2ff7430, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" [0159.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0159.422] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0159.422] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0159.422] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0159.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0159.422] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0159.422] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0159.422] wcscat (in: _Dest=0x2ff6b90, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" [0159.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0159.423] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0159.423] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0159.423] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0159.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7880 [0159.423] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0159.423] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0159.423] wcscat (in: _Dest=0x2ff7880, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" [0159.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c [0159.424] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0159.425] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0159.425] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0159.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40830 [0159.425] wcscpy (in: _Dest=0x3d40830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS" [0159.425] wcscat (in: _Dest=0x3d40830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\" [0159.425] wcscat (in: _Dest=0x3d40830, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" [0159.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0159.426] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf44280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0159.426] FindClose (in: hFindFile=0x3e73830 | out: hFindFile=0x3e73830) returned 1 [0159.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bf48) returned 1 [0159.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68770) returned 1 [0159.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63030) returned 1 Thread: id = 2043 os_tid = 0x27d8 [0148.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68810 [0148.223] wcscpy (in: _Dest=0x7a68810, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0148.223] wcscat (in: _Dest=0x7a68810, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0148.223] wcscat (in: _Dest=0x7a68810, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*" [0148.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a4d0 [0148.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73d30 [0151.668] wcscmp (_String1=".", _String2=".") returned 0 [0151.669] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcf1e120, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.669] wcscmp (_String1="..", _String2=".") returned 1 [0151.669] wcscmp (_String1="..", _String2="..") returned 0 [0151.669] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0151.669] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0151.669] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0151.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf180 [0151.669] wcscpy (in: _Dest=0x3eaf180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0151.669] wcscat (in: _Dest=0x3eaf180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0151.669] wcscat (in: _Dest=0x3eaf180, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" [0168.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0168.308] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0168.308] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0168.308] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0168.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0168.308] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0168.308] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0168.308] wcscat (in: _Dest=0x35c378, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" [0168.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0168.309] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0168.309] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0168.309] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0168.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf7f8 [0168.309] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0168.309] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0168.309] wcscat (in: _Dest=0x3eaf7f8, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" [0168.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0168.310] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0168.310] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0168.311] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0168.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf2f0 [0168.311] wcscpy (in: _Dest=0x3eaf2f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0168.311] wcscat (in: _Dest=0x3eaf2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0168.311] wcscat (in: _Dest=0x3eaf2f0, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" [0168.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0168.312] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0168.312] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0168.312] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0168.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf010 [0168.312] wcscpy (in: _Dest=0x3eaf010, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0168.312] wcscat (in: _Dest=0x3eaf010, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0168.312] wcscat (in: _Dest=0x3eaf010, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" [0168.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0168.313] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0168.313] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0168.313] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0168.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3ab48 [0168.313] wcscpy (in: _Dest=0x3e3ab48, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY" [0168.313] wcscat (in: _Dest=0x3e3ab48, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\" [0168.313] wcscat (in: _Dest=0x3e3ab48, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" [0168.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3ab48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0168.314] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0168.315] FindClose (in: hFindFile=0x3e73d30 | out: hFindFile=0x3e73d30) returned 1 [0168.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a4d0) returned 1 [0168.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68810) returned 1 [0168.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a630d0) returned 1 Thread: id = 2044 os_tid = 0x27dc [0148.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a688b0 [0148.224] wcscpy (in: _Dest=0x7a688b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0148.224] wcscat (in: _Dest=0x7a688b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0148.224] wcscat (in: _Dest=0x7a688b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*" [0148.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a738 [0148.224] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcef7fc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73cb0 [0151.668] wcscmp (_String1=".", _String2=".") returned 0 [0151.668] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdcef7fc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcf1e120, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.668] wcscmp (_String1="..", _String2=".") returned 1 [0151.668] wcscmp (_String1="..", _String2="..") returned 0 [0151.668] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0151.668] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0151.668] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0151.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eafad8 [0151.668] wcscpy (in: _Dest=0x3eafad8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0151.668] wcscat (in: _Dest=0x3eafad8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0151.668] wcscat (in: _Dest=0x3eafad8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" [0158.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eafad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0158.242] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcf1e120, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0158.242] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0158.242] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0158.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c6e8 [0158.243] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0158.243] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0158.243] wcscat (in: _Dest=0x35c6e8, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" [0158.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0158.244] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0158.244] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0158.244] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0158.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf460 [0158.245] wcscpy (in: _Dest=0x3eaf460, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0158.245] wcscat (in: _Dest=0x3eaf460, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0158.245] wcscat (in: _Dest=0x3eaf460, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" [0158.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0158.247] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0158.247] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0158.247] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0158.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaec78 [0158.247] wcscpy (in: _Dest=0x3eaec78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0158.247] wcscat (in: _Dest=0x3eaec78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0158.247] wcscat (in: _Dest=0x3eaec78, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" [0158.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaec78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0158.248] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0158.248] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0158.248] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0158.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf5d0 [0158.249] wcscpy (in: _Dest=0x3eaf5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0158.249] wcscat (in: _Dest=0x3eaf5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0158.249] wcscat (in: _Dest=0x3eaf5d0, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" [0158.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0158.250] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0158.250] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0158.250] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0158.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40ce0 [0158.250] wcscpy (in: _Dest=0x3d40ce0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV" [0158.250] wcscat (in: _Dest=0x3d40ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\" [0158.250] wcscat (in: _Dest=0x3d40ce0, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" [0158.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0158.251] FindNextFileW (in: hFindFile=0x3e73cb0, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0158.252] FindClose (in: hFindFile=0x3e73cb0 | out: hFindFile=0x3e73cb0) returned 1 [0158.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a738) returned 1 [0158.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a688b0) returned 1 [0158.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63170) returned 1 Thread: id = 2045 os_tid = 0x27e0 [0148.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68950 [0148.232] wcscpy (in: _Dest=0x7a68950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0148.232] wcscat (in: _Dest=0x7a68950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0148.232] wcscat (in: _Dest=0x7a68950, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*" [0148.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ac08 [0148.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0150.872] wcscmp (_String1=".", _String2=".") returned 0 [0150.872] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb66bce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb66bce0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.872] wcscmp (_String1="..", _String2=".") returned 1 [0150.872] wcscmp (_String1="..", _String2="..") returned 0 [0150.872] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0150.872] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0150.872] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0150.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6f28 [0150.872] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0150.872] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0150.872] wcscat (in: _Dest=0x2ff6f28, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" [0172.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0172.628] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0172.629] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0172.629] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0172.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf180 [0172.629] wcscpy (in: _Dest=0x3eaf180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0172.629] wcscat (in: _Dest=0x3eaf180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0172.629] wcscat (in: _Dest=0x3eaf180, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" [0172.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0172.630] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0172.630] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0172.630] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0172.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57820 [0172.630] wcscpy (in: _Dest=0x3d57820, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO" [0172.630] wcscat (in: _Dest=0x3d57820, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\" [0172.630] wcscat (in: _Dest=0x3d57820, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" [0172.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0172.631] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0172.631] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0172.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ac08) returned 1 [0172.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68950) returned 1 [0172.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63210) returned 1 Thread: id = 2046 os_tid = 0x27e4 [0148.239] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\iVyqM22Egv05SaUWSS27.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ivyqm22egv05sauwss27.mp4")) returned 0x20 [0148.240] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\iVyqM22Egv05SaUWSS27.mp4", dwFileAttributes=0x20) returned 1 [0149.136] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\iVyqM22Egv05SaUWSS27.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ivyqm22egv05sauwss27.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22f4 [0149.136] GetFileSizeEx (in: hFile=0x22f4, lpFileSize=0x5cdfc54 | out: lpFileSize=0x5cdfc54*=23979) returned 1 [0149.136] SetFilePointerEx (in: hFile=0x22f4, liDistanceToMove=0x5da7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.136] ReadFile (in: hFile=0x22f4, lpBuffer=0x5cdfc30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5cdfc40, lpOverlapped=0x0 | out: lpBuffer=0x5cdfc30*, lpNumberOfBytesRead=0x5cdfc40*=0x4, lpOverlapped=0x0) returned 1 [0149.139] SetFilePointerEx (in: hFile=0x22f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0149.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0149.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0149.139] NtQuerySystemTime (in: CurrentTime=0x5cdfbc8 | out: CurrentTime=0x5cdfbc8*=132462177279336000) returned 0x0 [0149.139] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x6c7030b7 [0149.139] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x7a725d15 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x543c21c2 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x126ecd86 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x50400a81 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x3ddfecea [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x3c2568f7 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x6ba6b128 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x630be43c [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x2429dbc7 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x20775e80 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x24663ca0 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x2472256a [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x3ebf5783 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x6187e176 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x6e88e9a8 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x56f868ad [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x5ff891de [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x40f1c1bc [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x9d6b3b9 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x6ff72424 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x13cb37e0 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x1bb61201 [0149.140] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x29449d87 [0149.141] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x36702584 [0149.141] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x5b7f42a6 [0149.141] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x46e74aef [0149.141] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x3a36bf51 [0149.141] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x50092900 [0149.141] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x7662b024 [0149.141] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x47ed2b7f [0149.141] RtlRandomEx (in: Seed=0x5cdfbc0 | out: Seed=0x5cdfbc0) returned 0x455e9e5d [0149.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0149.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015490 [0149.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0149.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 [0149.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0149.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0149.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0149.155] SetFilePointerEx (in: hFile=0x22f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.155] ReadFile (in: hFile=0x22f4, lpBuffer=0x7c9bf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x5cdfbc8, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesRead=0x5cdfbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.156] SetFilePointerEx (in: hFile=0x22f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0149.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015490 [0149.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0149.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0149.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9fb70 [0149.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0149.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0149.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0149.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 [0149.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0149.157] WriteFile (in: hFile=0x22f4, lpBuffer=0x7c9fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x5cdfbc8, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesWritten=0x5cdfbc8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0149.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0149.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e85398 [0149.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85ae8 [0149.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0149.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0149.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0149.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e85b78 [0149.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0149.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0149.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0149.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0149.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ae8) returned 1 [0149.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9b98 [0149.438] SetFilePointerEx (in: hFile=0x22f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.438] WriteFile (in: hFile=0x22f4, lpBuffer=0x3ec9b98*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x5cdfc48, lpOverlapped=0x0 | out: lpBuffer=0x3ec9b98*, lpNumberOfBytesWritten=0x5cdfc48*=0x122, lpOverlapped=0x0) returned 1 [0149.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e857d0 [0149.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0149.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0149.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0149.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e798a8 [0149.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0149.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0149.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0149.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0149.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e857d0) returned 1 [0149.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a236f0 [0149.484] sprintf (in: _Dest=0x7a236f0, _Format="%c%c" | out: _Dest="5c") returned 2 [0149.484] sprintf (in: _Dest=0x7a236f2, _Format="%c%c" | out: _Dest="f6") returned 2 [0149.484] sprintf (in: _Dest=0x7a236f4, _Format="%c%c" | out: _Dest="c6") returned 2 [0149.484] sprintf (in: _Dest=0x7a236f6, _Format="%c%c" | out: _Dest="72") returned 2 [0149.484] sprintf (in: _Dest=0x7a236f8, _Format="%c%c" | out: _Dest="30") returned 2 [0149.484] sprintf (in: _Dest=0x7a236fa, _Format="%c%c" | out: _Dest="1e") returned 2 [0149.484] sprintf (in: _Dest=0x7a236fc, _Format="%c%c" | out: _Dest="34") returned 2 [0149.484] sprintf (in: _Dest=0x7a236fe, _Format="%c%c" | out: _Dest="3c") returned 2 [0149.484] sprintf (in: _Dest=0x7a23700, _Format="%c%c" | out: _Dest="40") returned 2 [0149.484] sprintf (in: _Dest=0x7a23702, _Format="%c%c" | out: _Dest="80") returned 2 [0149.484] sprintf (in: _Dest=0x7a23704, _Format="%c%c" | out: _Dest="19") returned 2 [0149.484] sprintf (in: _Dest=0x7a23706, _Format="%c%c" | out: _Dest="b7") returned 2 [0149.484] sprintf (in: _Dest=0x7a23708, _Format="%c%c" | out: _Dest="d6") returned 2 [0149.484] sprintf (in: _Dest=0x7a2370a, _Format="%c%c" | out: _Dest="1b") returned 2 [0149.484] sprintf (in: _Dest=0x7a2370c, _Format="%c%c" | out: _Dest="e8") returned 2 [0149.484] sprintf (in: _Dest=0x7a2370e, _Format="%c%c" | out: _Dest="1f") returned 2 [0149.484] sprintf (in: _Dest=0x7a23710, _Format="%c%c" | out: _Dest="fe") returned 2 [0149.484] sprintf (in: _Dest=0x7a23712, _Format="%c%c" | out: _Dest="1f") returned 2 [0149.484] sprintf (in: _Dest=0x7a23714, _Format="%c%c" | out: _Dest="de") returned 2 [0149.485] sprintf (in: _Dest=0x7a23716, _Format="%c%c" | out: _Dest="29") returned 2 [0149.485] sprintf (in: _Dest=0x7a23718, _Format="%c%c" | out: _Dest="d4") returned 2 [0149.485] sprintf (in: _Dest=0x7a2371a, _Format="%c%c" | out: _Dest="10") returned 2 [0149.485] sprintf (in: _Dest=0x7a2371c, _Format="%c%c" | out: _Dest="3e") returned 2 [0149.485] sprintf (in: _Dest=0x7a2371e, _Format="%c%c" | out: _Dest="a2") returned 2 [0149.485] sprintf (in: _Dest=0x7a23720, _Format="%c%c" | out: _Dest="de") returned 2 [0149.485] sprintf (in: _Dest=0x7a23722, _Format="%c%c" | out: _Dest="4c") returned 2 [0149.485] sprintf (in: _Dest=0x7a23724, _Format="%c%c" | out: _Dest="3b") returned 2 [0149.485] sprintf (in: _Dest=0x7a23726, _Format="%c%c" | out: _Dest="bb") returned 2 [0149.485] sprintf (in: _Dest=0x7a23728, _Format="%c%c" | out: _Dest="3a") returned 2 [0149.485] sprintf (in: _Dest=0x7a2372a, _Format="%c%c" | out: _Dest="d0") returned 2 [0149.485] sprintf (in: _Dest=0x7a2372c, _Format="%c%c" | out: _Dest="b3") returned 2 [0149.485] sprintf (in: _Dest=0x7a2372e, _Format="%c%c" | out: _Dest="1a") returned 2 [0149.485] sprintf (in: _Dest=0x7a23730, _Format="%c%c" | out: _Dest="f0") returned 2 [0149.485] sprintf (in: _Dest=0x7a23732, _Format="%c%c" | out: _Dest="e0") returned 2 [0149.485] sprintf (in: _Dest=0x7a23734, _Format="%c%c" | out: _Dest="80") returned 2 [0149.485] sprintf (in: _Dest=0x7a23736, _Format="%c%c" | out: _Dest="fb") returned 2 [0149.485] sprintf (in: _Dest=0x7a23738, _Format="%c%c" | out: _Dest="29") returned 2 [0149.485] sprintf (in: _Dest=0x7a2373a, _Format="%c%c" | out: _Dest="7d") returned 2 [0149.485] sprintf (in: _Dest=0x7a2373c, _Format="%c%c" | out: _Dest="1c") returned 2 [0149.486] sprintf (in: _Dest=0x7a2373e, _Format="%c%c" | out: _Dest="a9") returned 2 [0149.486] sprintf (in: _Dest=0x7a23740, _Format="%c%c" | out: _Dest="27") returned 2 [0149.486] sprintf (in: _Dest=0x7a23742, _Format="%c%c" | out: _Dest="d9") returned 2 [0149.486] sprintf (in: _Dest=0x7a23744, _Format="%c%c" | out: _Dest="c2") returned 2 [0149.486] sprintf (in: _Dest=0x7a23746, _Format="%c%c" | out: _Dest="93") returned 2 [0149.486] sprintf (in: _Dest=0x7a23748, _Format="%c%c" | out: _Dest="02") returned 2 [0149.486] sprintf (in: _Dest=0x7a2374a, _Format="%c%c" | out: _Dest="fc") returned 2 [0149.486] sprintf (in: _Dest=0x7a2374c, _Format="%c%c" | out: _Dest="8c") returned 2 [0149.486] sprintf (in: _Dest=0x7a2374e, _Format="%c%c" | out: _Dest="27") returned 2 [0149.486] RtlInitAnsiString (in: DestinationString=0x5cdfbd0, SourceString="5cf6c672301e343c408019b7d61be81ffe1fde29d4103ea2de4c3bbb3ad0b31af0e080fb297d1ca927d9c29302fc8c27" | out: DestinationString="5cf6c672301e343c408019b7d61be81ffe1fde29d4103ea2de4c3bbb3ad0b31af0e080fb297d1ca927d9c29302fc8c27") [0149.486] RtlAnsiStringToUnicodeString (in: DestinationString=0x5cdfbc8, SourceString="5cf6c672301e343c408019b7d61be81ffe1fde29d4103ea2de4c3bbb3ad0b31af0e080fb297d1ca927d9c29302fc8c27", AllocateDestinationString=1 | out: DestinationString="5cf6c672301e343c408019b7d61be81ffe1fde29d4103ea2de4c3bbb3ad0b31af0e080fb297d1ca927d9c29302fc8c27") returned 0x0 [0149.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85080 [0149.486] RtlFreeAnsiString (AnsiString="5") [0149.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a236f0) returned 1 [0149.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e798a8) returned 1 [0149.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0149.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9b98) returned 1 [0149.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b78) returned 1 [0149.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0149.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0149.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0149.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0149.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0149.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0149.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6fe0 [0149.487] wcscat (in: _Dest=0x2ff6fe0, _Source="5cf6c672301e343c408019b7" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\5cf6c672301e343c408019b7") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\5cf6c672301e343c408019b7" [0149.487] wcscat (in: _Dest=0x2ff6fe0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\5cf6c672301e343c408019b7.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\5cf6c672301e343c408019b7.68814f" [0149.487] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\5cf6c672301e343c408019b7.68814f", NtPathName=0x5cdfbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\5cf6c672301e343c408019b7.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d852f0 [0149.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852f0) returned 1 [0149.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea7010) returned 1 [0149.580] NtQueryInformationFile (in: FileHandle=0x22f4, IoStatusBlock=0x5cdfb98, FileInformation=0x5cdfba0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5cdfb98, FileInformation=0x5cdfba0) returned 0x0 [0149.580] NtSetInformationFile (FileHandle=0x22f4, IoStatusBlock=0x5cdfb98, FileInformation=0x5cdfba0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 [0149.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85080) returned 1 [0149.589] FlushFileBuffers (hFile=0x22f4) returned 1 [0149.592] CloseHandle (hObject=0x22f4) returned 1 [0149.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63f30 [0149.599] wcscpy (in: _Dest=0x7a63f30, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" [0149.599] wcscat (in: _Dest=0x7a63f30, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt" [0149.599] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\68814f-readme.txt")) returned 0x20 [0149.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63f30) returned 1 [0149.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e480) returned 1 Thread: id = 2047 os_tid = 0x27e8 [0148.253] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\jOE.flv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\joe.flv")) returned 0x20 [0148.253] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\jOE.flv", dwFileAttributes=0x20) returned 1 [0149.158] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\jOE.flv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\joe.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17b4 [0149.158] GetFileSizeEx (in: hFile=0x17b4, lpFileSize=0x790fa64 | out: lpFileSize=0x790fa64*=28413) returned 1 [0149.158] SetFilePointerEx (in: hFile=0x17b4, liDistanceToMove=0x6ef9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.158] ReadFile (in: hFile=0x17b4, lpBuffer=0x790fa40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x790fa50, lpOverlapped=0x0 | out: lpBuffer=0x790fa40*, lpNumberOfBytesRead=0x790fa50*=0x4, lpOverlapped=0x0) returned 1 [0149.161] SetFilePointerEx (in: hFile=0x17b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0149.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0149.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0149.161] NtQuerySystemTime (in: CurrentTime=0x790f9d8 | out: CurrentTime=0x790f9d8*=132462177279648000) returned 0x0 [0149.161] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x2d0f9d2b [0149.161] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x17139e4e [0149.161] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x61cc90cf [0149.161] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x1ad862a [0149.161] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x78f04676 [0149.161] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x764f20b4 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x2efe1a [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x6e571d7d [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x7d121005 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x7c10eb20 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x2f67b8a1 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x6a83c2ac [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x4bc0725f [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0xe364734 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x2b927162 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x665836a6 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x4dcc2809 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x770b3624 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x7fd0322e [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x5b0ce0e6 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x2ebb83d [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x13a05f20 [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x6fcf10bf [0149.162] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0xc69be74 [0149.163] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x613a8ba4 [0149.163] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x566b8b80 [0149.163] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x3f2e828a [0149.163] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x7ca06bf6 [0149.163] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0xebad207 [0149.163] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x16614a47 [0149.163] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x110d500b [0149.163] RtlRandomEx (in: Seed=0x790f9d0 | out: Seed=0x790f9d0) returned 0x6e615878 [0149.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0149.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015490 [0149.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0149.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 [0149.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0149.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0149.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca3778 [0149.187] SetFilePointerEx (in: hFile=0x17b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.187] ReadFile (in: hFile=0x17b4, lpBuffer=0x7ca3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x790f9d8, lpOverlapped=0x0 | out: lpBuffer=0x7ca3778*, lpNumberOfBytesRead=0x790f9d8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.187] SetFilePointerEx (in: hFile=0x17b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0149.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015490 [0149.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0149.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0149.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca7380 [0149.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0149.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0149.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0149.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 [0149.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0149.189] WriteFile (in: hFile=0x17b4, lpBuffer=0x7ca7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x790f9d8, lpOverlapped=0x0 | out: lpBuffer=0x7ca7380*, lpNumberOfBytesWritten=0x790f9d8*=0x3c00, lpOverlapped=0x0) returned 1 [0149.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca7380) returned 1 [0149.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca3778) returned 1 [0149.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec6698 [0149.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85ae8 [0149.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3014e78 [0149.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0149.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0149.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec5ef0 [0149.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0149.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0149.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0149.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0149.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ae8) returned 1 [0149.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f9a00 [0149.442] SetFilePointerEx (in: hFile=0x17b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.442] WriteFile (in: hFile=0x17b4, lpBuffer=0x2f9a00*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x790fa58, lpOverlapped=0x0 | out: lpBuffer=0x2f9a00*, lpNumberOfBytesWritten=0x790fa58*=0x100, lpOverlapped=0x0) returned 1 [0149.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e850c8 [0149.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0149.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0149.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0149.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x7ad93e8 [0149.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0149.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0149.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0149.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0149.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e850c8) returned 1 [0149.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3ec2d40 [0149.498] sprintf (in: _Dest=0x3ec2d40, _Format="%c%c" | out: _Dest="0c") returned 2 [0149.498] sprintf (in: _Dest=0x3ec2d42, _Format="%c%c" | out: _Dest="60") returned 2 [0149.498] sprintf (in: _Dest=0x3ec2d44, _Format="%c%c" | out: _Dest="b5") returned 2 [0149.498] sprintf (in: _Dest=0x3ec2d46, _Format="%c%c" | out: _Dest="2a") returned 2 [0149.498] sprintf (in: _Dest=0x3ec2d48, _Format="%c%c" | out: _Dest="53") returned 2 [0149.498] sprintf (in: _Dest=0x3ec2d4a, _Format="%c%c" | out: _Dest="23") returned 2 [0149.498] sprintf (in: _Dest=0x3ec2d4c, _Format="%c%c" | out: _Dest="f0") returned 2 [0149.498] sprintf (in: _Dest=0x3ec2d4e, _Format="%c%c" | out: _Dest="c2") returned 2 [0149.498] sprintf (in: _Dest=0x3ec2d50, _Format="%c%c" | out: _Dest="c3") returned 2 [0149.498] sprintf (in: _Dest=0x3ec2d52, _Format="%c%c" | out: _Dest="9c") returned 2 [0149.498] sprintf (in: _Dest=0x3ec2d54, _Format="%c%c" | out: _Dest="46") returned 2 [0149.499] sprintf (in: _Dest=0x3ec2d56, _Format="%c%c" | out: _Dest="dc") returned 2 [0149.499] sprintf (in: _Dest=0x3ec2d58, _Format="%c%c" | out: _Dest="d1") returned 2 [0149.499] sprintf (in: _Dest=0x3ec2d5a, _Format="%c%c" | out: _Dest="86") returned 2 [0149.499] RtlInitAnsiString (in: DestinationString=0x790f9e0, SourceString="0c60b52a5323f0c2c39c46dcd186" | out: DestinationString="0c60b52a5323f0c2c39c46dcd186") [0149.499] RtlAnsiStringToUnicodeString (in: DestinationString=0x790f9d8, SourceString="0c60b52a5323f0c2c39c46dcd186", AllocateDestinationString=1 | out: DestinationString="0c60b52a5323f0c2c39c46dcd186") returned 0x0 [0149.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e852c0 [0149.499] RtlFreeAnsiString (AnsiString="0") [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad93e8) returned 1 [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f9a00) returned 1 [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0149.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0149.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d240 [0149.500] wcscat (in: _Dest=0x32d240, _Source="0c60b52" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\0c60b52") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\0c60b52" [0149.500] wcscat (in: _Dest=0x32d240, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\0c60b52.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\0c60b52.68814f" [0149.500] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\0c60b52.68814f", NtPathName=0x790f9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\0c60b52.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f638 [0149.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f638) returned 1 [0149.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02ed0) returned 1 [0149.632] NtQueryInformationFile (in: FileHandle=0x17b4, IoStatusBlock=0x790f9a8, FileInformation=0x790f9b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x790f9a8, FileInformation=0x790f9b0) returned 0x0 [0149.632] NtSetInformationFile (FileHandle=0x17b4, IoStatusBlock=0x790f9a8, FileInformation=0x790f9b0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 [0149.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e852c0) returned 1 [0149.635] FlushFileBuffers (hFile=0x17b4) returned 1 [0149.666] CloseHandle (hObject=0x17b4) returned 1 [0149.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a681d0 [0149.667] wcscpy (in: _Dest=0x7a681d0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" [0149.667] wcscat (in: _Dest=0x7a681d0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt" [0149.667] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\68814f-readme.txt")) returned 0x20 [0149.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681d0) returned 1 [0149.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 2048 os_tid = 0x27ec [0148.265] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\KjjwmgzemOJ.avi" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\kjjwmgzemoj.avi")) returned 0x20 [0148.266] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\KjjwmgzemOJ.avi", dwFileAttributes=0x20) returned 1 [0149.189] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\KjjwmgzemOJ.avi" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\kjjwmgzemoj.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f04 [0149.189] GetFileSizeEx (in: hFile=0x1f04, lpFileSize=0x62ffc84 | out: lpFileSize=0x62ffc84*=8372) returned 1 [0149.189] SetFilePointerEx (in: hFile=0x1f04, liDistanceToMove=0x20b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.190] ReadFile (in: hFile=0x1f04, lpBuffer=0x62ffc60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x62ffc70, lpOverlapped=0x0 | out: lpBuffer=0x62ffc60*, lpNumberOfBytesRead=0x62ffc70*=0x4, lpOverlapped=0x0) returned 1 [0149.191] SetFilePointerEx (in: hFile=0x1f04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0149.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0149.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35d8 [0149.192] NtQuerySystemTime (in: CurrentTime=0x62ffbf8 | out: CurrentTime=0x62ffbf8*=132462177279960000) returned 0x0 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x8963ebc [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x36ac647d [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x76dd3b43 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x3dfdacaa [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x34d45eee [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x7f9c61ac [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x62c41879 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x7e0f1cab [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x79ed10b4 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x5b36821e [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x6fff05f4 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x59b1f364 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x63765c16 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x34358c55 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x1164bed8 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x2f51a1cd [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x54e6f2b7 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x15818356 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x322b8a4b [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x15df28d6 [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x12647fcc [0149.192] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x3cb8c9b4 [0149.193] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x3075661b [0149.193] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x5d6e8af5 [0149.193] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x40e40c33 [0149.193] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x34c9c2a7 [0149.193] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x3b01d113 [0149.193] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x370fb10e [0149.193] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x1ca15c2e [0149.193] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x524e1527 [0149.193] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x18253b60 [0149.193] RtlRandomEx (in: Seed=0x62ffbf0 | out: Seed=0x62ffbf0) returned 0x19182f8b [0149.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0149.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015490 [0149.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0149.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 [0149.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35d8) returned 1 [0149.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0149.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0149.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015490 [0149.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0149.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0149.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caaf88 [0149.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7caeb90 [0149.206] ReadFile (in: hFile=0x1f04, lpBuffer=0x7caaf88, nNumberOfBytesToRead=0x20b4, lpNumberOfBytesRead=0x62ffbec, lpOverlapped=0x0 | out: lpBuffer=0x7caaf88*, lpNumberOfBytesRead=0x62ffbec*=0x20b4, lpOverlapped=0x0) returned 1 [0149.207] SetFilePointerEx (in: hFile=0x1f04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.207] WriteFile (in: hFile=0x1f04, lpBuffer=0x7caeb90*, nNumberOfBytesToWrite=0x20b4, lpNumberOfBytesWritten=0x62ffbf0, lpOverlapped=0x0 | out: lpBuffer=0x7caeb90*, lpNumberOfBytesWritten=0x62ffbf0*=0x20b4, lpOverlapped=0x0) returned 1 [0149.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0149.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0149.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0149.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caeb90) returned 1 [0149.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf88) returned 1 [0149.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 [0149.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0149.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0149.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0149.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015490 [0149.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0149.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0149.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79218 [0149.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0149.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0149.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0149.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 [0149.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0149.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec4e0 [0149.452] SetFilePointerEx (in: hFile=0x1f04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0149.452] WriteFile (in: hFile=0x1f04, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x62ffc78, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x62ffc78*=0x110, lpOverlapped=0x0) returned 1 [0149.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e850c8 [0149.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0149.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0149.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0149.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec2c28 [0149.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0149.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0149.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0149.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0149.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e850c8) returned 1 [0149.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x3e850c8 [0149.501] sprintf (in: _Dest=0x3e850c8, _Format="%c%c" | out: _Dest="35") returned 2 [0149.502] sprintf (in: _Dest=0x3e850ca, _Format="%c%c" | out: _Dest="42") returned 2 [0149.502] sprintf (in: _Dest=0x3e850cc, _Format="%c%c" | out: _Dest="26") returned 2 [0149.502] sprintf (in: _Dest=0x3e850ce, _Format="%c%c" | out: _Dest="50") returned 2 [0149.502] sprintf (in: _Dest=0x3e850d0, _Format="%c%c" | out: _Dest="15") returned 2 [0149.502] sprintf (in: _Dest=0x3e850d2, _Format="%c%c" | out: _Dest="39") returned 2 [0149.502] sprintf (in: _Dest=0x3e850d4, _Format="%c%c" | out: _Dest="15") returned 2 [0149.502] sprintf (in: _Dest=0x3e850d6, _Format="%c%c" | out: _Dest="78") returned 2 [0149.502] sprintf (in: _Dest=0x3e850d8, _Format="%c%c" | out: _Dest="b6") returned 2 [0149.502] sprintf (in: _Dest=0x3e850da, _Format="%c%c" | out: _Dest="0f") returned 2 [0149.502] sprintf (in: _Dest=0x3e850dc, _Format="%c%c" | out: _Dest="5c") returned 2 [0149.502] sprintf (in: _Dest=0x3e850de, _Format="%c%c" | out: _Dest="dd") returned 2 [0149.502] sprintf (in: _Dest=0x3e850e0, _Format="%c%c" | out: _Dest="ef") returned 2 [0149.502] sprintf (in: _Dest=0x3e850e2, _Format="%c%c" | out: _Dest="3f") returned 2 [0149.502] sprintf (in: _Dest=0x3e850e4, _Format="%c%c" | out: _Dest="69") returned 2 [0149.502] sprintf (in: _Dest=0x3e850e6, _Format="%c%c" | out: _Dest="33") returned 2 [0149.502] sprintf (in: _Dest=0x3e850e8, _Format="%c%c" | out: _Dest="cf") returned 2 [0149.502] sprintf (in: _Dest=0x3e850ea, _Format="%c%c" | out: _Dest="d8") returned 2 [0149.502] sprintf (in: _Dest=0x3e850ec, _Format="%c%c" | out: _Dest="c6") returned 2 [0149.502] sprintf (in: _Dest=0x3e850ee, _Format="%c%c" | out: _Dest="99") returned 2 [0149.502] sprintf (in: _Dest=0x3e850f0, _Format="%c%c" | out: _Dest="ae") returned 2 [0149.502] sprintf (in: _Dest=0x3e850f2, _Format="%c%c" | out: _Dest="e4") returned 2 [0149.502] sprintf (in: _Dest=0x3e850f4, _Format="%c%c" | out: _Dest="b7") returned 2 [0149.503] sprintf (in: _Dest=0x3e850f6, _Format="%c%c" | out: _Dest="3e") returned 2 [0149.503] sprintf (in: _Dest=0x3e850f8, _Format="%c%c" | out: _Dest="b7") returned 2 [0149.503] sprintf (in: _Dest=0x3e850fa, _Format="%c%c" | out: _Dest="b9") returned 2 [0149.503] sprintf (in: _Dest=0x3e850fc, _Format="%c%c" | out: _Dest="db") returned 2 [0149.503] sprintf (in: _Dest=0x3e850fe, _Format="%c%c" | out: _Dest="c2") returned 2 [0149.503] sprintf (in: _Dest=0x3e85100, _Format="%c%c" | out: _Dest="19") returned 2 [0149.503] sprintf (in: _Dest=0x3e85102, _Format="%c%c" | out: _Dest="a7") returned 2 [0149.503] RtlInitAnsiString (in: DestinationString=0x62ffc00, SourceString="3542265015391578b60f5cddef3f6933cfd8c699aee4b73eb7b9dbc219a7" | out: DestinationString="3542265015391578b60f5cddef3f6933cfd8c699aee4b73eb7b9dbc219a7") [0149.503] RtlAnsiStringToUnicodeString (in: DestinationString=0x62ffbf8, SourceString="3542265015391578b60f5cddef3f6933cfd8c699aee4b73eb7b9dbc219a7", AllocateDestinationString=1 | out: DestinationString="3542265015391578b60f5cddef3f6933cfd8c699aee4b73eb7b9dbc219a7") returned 0x0 [0149.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba220 [0149.503] RtlFreeAnsiString (AnsiString="3") [0149.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e850c8) returned 1 [0149.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0149.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0149.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0149.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79218) returned 1 [0149.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0149.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0149.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0149.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0149.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0149.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0149.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f6e0 [0149.504] wcscat (in: _Dest=0x7a5f6e0, _Source="354226501539157" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\354226501539157") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\354226501539157" [0149.504] wcscat (in: _Dest=0x7a5f6e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\354226501539157.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\354226501539157.68814f" [0149.504] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\354226501539157.68814f", NtPathName=0x62ffbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\354226501539157.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0149.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff79f0 [0149.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 [0149.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e021e0) returned 1 [0149.582] NtQueryInformationFile (in: FileHandle=0x1f04, IoStatusBlock=0x62ffbc8, FileInformation=0x62ffbd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x62ffbc8, FileInformation=0x62ffbd0) returned 0x0 [0149.582] NtSetInformationFile (FileHandle=0x1f04, IoStatusBlock=0x62ffbc8, FileInformation=0x62ffbd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0149.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f6e0) returned 1 [0149.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 [0149.594] FlushFileBuffers (hFile=0x1f04) returned 1 [0149.596] CloseHandle (hObject=0x1f04) returned 1 [0149.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63f30 [0149.602] wcscpy (in: _Dest=0x7a63f30, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\" [0149.602] wcscat (in: _Dest=0x7a63f30, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt" [0149.602] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\68814f-readme.txt")) returned 0x20 [0149.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63f30) returned 1 [0149.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a645e8) returned 1 Thread: id = 2049 os_tid = 0x27f0 [0148.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad51e0 [0148.273] wcscpy (in: _Dest=0x7ad51e0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" [0148.273] wcscat (in: _Dest=0x7ad51e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" [0148.273] wcscat (in: _Dest=0x7ad51e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\*" [0148.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ae70 [0148.273] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\*", lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec53b8c0, ftCreationTime.dwHighDateTime=0x1d5df5d, ftLastAccessTime.dwLowDateTime=0x21044bd0, ftLastAccessTime.dwHighDateTime=0x1d5e813, ftLastWriteTime.dwLowDateTime=0x21044bd0, ftLastWriteTime.dwHighDateTime=0x1d5e813, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0148.274] wcscmp (_String1=".", _String2=".") returned 0 [0148.274] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec53b8c0, ftCreationTime.dwHighDateTime=0x1d5df5d, ftLastAccessTime.dwLowDateTime=0x21044bd0, ftLastAccessTime.dwHighDateTime=0x1d5e813, ftLastWriteTime.dwLowDateTime=0x21044bd0, ftLastWriteTime.dwHighDateTime=0x1d5e813, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.274] wcscmp (_String1="..", _String2=".") returned 1 [0148.274] wcscmp (_String1="..", _String2="..") returned 0 [0148.274] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2eefa2d0, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0xf229490, ftLastAccessTime.dwHighDateTime=0x1d5d877, ftLastWriteTime.dwLowDateTime=0xf229490, ftLastWriteTime.dwHighDateTime=0x1d5d877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUxnLWvnq87VKLk", cAlternateFileName="BUXNLW~1")) returned 1 [0148.274] wcscmp (_String1="BUxnLWvnq87VKLk", _String2=".") returned 1 [0148.274] wcscmp (_String1="BUxnLWvnq87VKLk", _String2="..") returned 1 [0148.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c588 [0148.274] wcscpy (in: _Dest=0x35c588, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" [0148.274] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" [0148.274] wcscat (in: _Dest=0x35c588, _Source="BUxnLWvnq87VKLk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk" [0165.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf238 [0165.217] wcscpy (in: _Dest=0x3eaf238, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk" [0165.217] wcscat (in: _Dest=0x3eaf238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\" [0165.217] wcscat (in: _Dest=0x3eaf238, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\*" [0165.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0165.217] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2eefa2d0, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0xf229490, ftLastAccessTime.dwHighDateTime=0x1d5d877, ftLastWriteTime.dwLowDateTime=0xf229490, ftLastWriteTime.dwHighDateTime=0x1d5d877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0165.217] wcscmp (_String1=".", _String2=".") returned 0 [0165.217] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2eefa2d0, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0xf229490, ftLastAccessTime.dwHighDateTime=0x1d5d877, ftLastWriteTime.dwLowDateTime=0xf229490, ftLastWriteTime.dwHighDateTime=0x1d5d877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.217] wcscmp (_String1="..", _String2=".") returned 1 [0165.217] wcscmp (_String1="..", _String2="..") returned 0 [0165.217] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf820650, ftCreationTime.dwHighDateTime=0x1d5e2c2, ftLastAccessTime.dwLowDateTime=0xc788de60, ftLastAccessTime.dwHighDateTime=0x1d5e7cf, ftLastWriteTime.dwLowDateTime=0xc788de60, ftLastWriteTime.dwHighDateTime=0x1d5e7cf, nFileSizeHigh=0x0, nFileSizeLow=0xbddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="aze2gi9ozGCpU9SHjh1.mp4", cAlternateFileName="AZE2GI~1.MP4")) returned 1 [0165.218] wcscmp (_String1="aze2gi9ozGCpU9SHjh1.mp4", _String2=".") returned 1 [0165.218] wcscmp (_String1="aze2gi9ozGCpU9SHjh1.mp4", _String2="..") returned 1 [0165.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8648 [0165.218] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk" [0165.218] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\" [0165.218] wcscat (in: _Dest=0x2c8648, _Source="aze2gi9ozGCpU9SHjh1.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\aze2gi9ozGCpU9SHjh1.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\aze2gi9ozGCpU9SHjh1.mp4" [0166.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0166.694] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764651f0, ftCreationTime.dwHighDateTime=0x1d5dbf8, ftLastAccessTime.dwLowDateTime=0x67186130, ftLastAccessTime.dwHighDateTime=0x1d5e3e3, ftLastWriteTime.dwLowDateTime=0x67186130, ftLastWriteTime.dwHighDateTime=0x1d5e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rKl4yD", cAlternateFileName="")) returned 1 [0166.694] wcscmp (_String1="rKl4yD", _String2=".") returned 1 [0166.694] wcscmp (_String1="rKl4yD", _String2="..") returned 1 [0166.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e663d8 [0166.695] wcscpy (in: _Dest=0x3e663d8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk" [0166.695] wcscat (in: _Dest=0x3e663d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\" [0166.695] wcscat (in: _Dest=0x3e663d8, _Source="rKl4yD" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD" [0166.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e663d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0166.698] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0b38c40, ftCreationTime.dwHighDateTime=0x1d5e865, ftLastAccessTime.dwLowDateTime=0x119d3b10, ftLastAccessTime.dwHighDateTime=0x1d5dd65, ftLastWriteTime.dwLowDateTime=0x119d3b10, ftLastWriteTime.dwHighDateTime=0x1d5dd65, nFileSizeHigh=0x0, nFileSizeLow=0x17ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="XG045FT-WiPZq0cn.flv", cAlternateFileName="XG045F~1.FLV")) returned 1 [0166.698] wcscmp (_String1="XG045FT-WiPZq0cn.flv", _String2=".") returned 1 [0166.698] wcscmp (_String1="XG045FT-WiPZq0cn.flv", _String2="..") returned 1 [0166.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8aa8 [0166.698] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk" [0166.698] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\" [0166.698] wcscat (in: _Dest=0x2c8aa8, _Source="XG045FT-WiPZq0cn.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\XG045FT-WiPZq0cn.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\XG045FT-WiPZq0cn.flv" [0166.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860 [0166.699] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0b38c40, ftCreationTime.dwHighDateTime=0x1d5e865, ftLastAccessTime.dwLowDateTime=0x119d3b10, ftLastAccessTime.dwHighDateTime=0x1d5dd65, ftLastWriteTime.dwLowDateTime=0x119d3b10, ftLastWriteTime.dwHighDateTime=0x1d5dd65, nFileSizeHigh=0x0, nFileSizeLow=0x17ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="XG045FT-WiPZq0cn.flv", cAlternateFileName="XG045F~1.FLV")) returned 0 [0166.700] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0166.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0166.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf238) returned 1 [0166.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 [0166.700] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e8ea740, ftCreationTime.dwHighDateTime=0x1d5dedf, ftLastAccessTime.dwLowDateTime=0x7b5ac040, ftLastAccessTime.dwHighDateTime=0x1d5def0, ftLastWriteTime.dwLowDateTime=0x7b5ac040, ftLastWriteTime.dwHighDateTime=0x1d5def0, nFileSizeHigh=0x0, nFileSizeLow=0x3b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="h5ZBSYXq-R.mp4", cAlternateFileName="H5ZBSY~1.MP4")) returned 1 [0166.700] wcscmp (_String1="h5ZBSYXq-R.mp4", _String2=".") returned 1 [0166.700] wcscmp (_String1="h5ZBSYXq-R.mp4", _String2="..") returned 1 [0166.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c588 [0166.701] wcscpy (in: _Dest=0x35c588, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" [0166.701] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" [0166.701] wcscat (in: _Dest=0x35c588, _Source="h5ZBSYXq-R.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\h5ZBSYXq-R.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\h5ZBSYXq-R.mp4" [0166.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150 [0166.702] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3105e270, ftCreationTime.dwHighDateTime=0x1d5e2a8, ftLastAccessTime.dwLowDateTime=0xbe18d540, ftLastAccessTime.dwHighDateTime=0x1d5e894, ftLastWriteTime.dwLowDateTime=0xbe18d540, ftLastWriteTime.dwHighDateTime=0x1d5e894, nFileSizeHigh=0x0, nFileSizeLow=0xc884, dwReserved0=0x0, dwReserved1=0x0, cFileName="k18 Wob.flv", cAlternateFileName="K18WOB~1.FLV")) returned 1 [0166.702] wcscmp (_String1="k18 Wob.flv", _String2=".") returned 1 [0166.702] wcscmp (_String1="k18 Wob.flv", _String2="..") returned 1 [0166.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e720 [0166.702] wcscpy (in: _Dest=0x7a5e720, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" [0166.702] wcscat (in: _Dest=0x7a5e720, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" [0166.702] wcscat (in: _Dest=0x7a5e720, _Source="k18 Wob.flv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\k18 Wob.flv") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\k18 Wob.flv" [0166.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0166.704] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157f8690, ftCreationTime.dwHighDateTime=0x1d5e3c1, ftLastAccessTime.dwLowDateTime=0xc6cbdf40, ftLastAccessTime.dwHighDateTime=0x1d5dc03, ftLastWriteTime.dwLowDateTime=0xc6cbdf40, ftLastWriteTime.dwHighDateTime=0x1d5dc03, nFileSizeHigh=0x0, nFileSizeLow=0xd233, dwReserved0=0x0, dwReserved1=0x0, cFileName="r-aq8EbyADESdMciV.mp4", cAlternateFileName="R-AQ8E~1.MP4")) returned 1 [0166.704] wcscmp (_String1="r-aq8EbyADESdMciV.mp4", _String2=".") returned 1 [0166.704] wcscmp (_String1="r-aq8EbyADESdMciV.mp4", _String2="..") returned 1 [0166.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66258 [0166.704] wcscpy (in: _Dest=0x3e66258, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" [0166.704] wcscat (in: _Dest=0x3e66258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" [0166.705] wcscat (in: _Dest=0x3e66258, _Source="r-aq8EbyADESdMciV.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\r-aq8EbyADESdMciV.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\r-aq8EbyADESdMciV.mp4" [0166.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0166.710] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x230aba80, ftCreationTime.dwHighDateTime=0x1d5e4ef, ftLastAccessTime.dwLowDateTime=0xc1425b0, ftLastAccessTime.dwHighDateTime=0x1d5e3f4, ftLastWriteTime.dwLowDateTime=0xc1425b0, ftLastWriteTime.dwHighDateTime=0x1d5e3f4, nFileSizeHigh=0x0, nFileSizeLow=0x15ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="smU44meu-NkY8Se.avi", cAlternateFileName="SMU44M~1.AVI")) returned 1 [0166.711] wcscmp (_String1="smU44meu-NkY8Se.avi", _String2=".") returned 1 [0166.711] wcscmp (_String1="smU44meu-NkY8Se.avi", _String2="..") returned 1 [0166.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf238 [0166.711] wcscpy (in: _Dest=0x3eaf238, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo" [0166.711] wcscat (in: _Dest=0x3eaf238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" [0166.711] wcscat (in: _Dest=0x3eaf238, _Source="smU44meu-NkY8Se.avi" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\smU44meu-NkY8Se.avi") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\smU44meu-NkY8Se.avi" [0166.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0166.712] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x230aba80, ftCreationTime.dwHighDateTime=0x1d5e4ef, ftLastAccessTime.dwLowDateTime=0xc1425b0, ftLastAccessTime.dwHighDateTime=0x1d5e3f4, ftLastWriteTime.dwLowDateTime=0xc1425b0, ftLastWriteTime.dwHighDateTime=0x1d5e3f4, nFileSizeHigh=0x0, nFileSizeLow=0x15ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="smU44meu-NkY8Se.avi", cAlternateFileName="SMU44M~1.AVI")) returned 0 [0166.713] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0166.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ae70) returned 1 [0166.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad51e0) returned 1 [0166.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 2050 os_tid = 0x27f4 [0148.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a689f0 [0148.275] wcscpy (in: _Dest=0x7a689f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0148.275] wcscat (in: _Dest=0x7a689f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0148.275] wcscat (in: _Dest=0x7a689f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*" [0148.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b340 [0148.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0150.849] wcscmp (_String1=".", _String2=".") returned 0 [0150.850] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc017640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc017640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.850] wcscmp (_String1="..", _String2=".") returned 1 [0150.850] wcscmp (_String1="..", _String2="..") returned 0 [0150.850] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0150.850] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0150.850] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0150.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7710 [0150.850] wcscpy (in: _Dest=0x2ff7710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0150.850] wcscat (in: _Dest=0x2ff7710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0150.850] wcscat (in: _Dest=0x2ff7710, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" [0154.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0154.709] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0154.709] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0154.709] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0154.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7d88 [0154.709] wcscpy (in: _Dest=0x2ff7d88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0154.709] wcscat (in: _Dest=0x2ff7d88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0154.709] wcscat (in: _Dest=0x2ff7d88, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" [0154.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0154.710] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0154.710] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0154.710] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0154.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40060 [0154.710] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE" [0154.710] wcscat (in: _Dest=0x3d40060, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\" [0154.710] wcscat (in: _Dest=0x3d40060, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" [0154.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0154.711] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc017640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0154.711] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0154.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b340) returned 1 [0154.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a689f0) returned 1 [0154.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a632b0) returned 1 Thread: id = 2051 os_tid = 0x27f8 [0148.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68a90 [0148.276] wcscpy (in: _Dest=0x7a68a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0148.276] wcscat (in: _Dest=0x7a68a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0148.276] wcscat (in: _Dest=0x7a68a90, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*" [0148.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b5a8 [0148.276] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdced1e60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcef7fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73370 [0151.667] wcscmp (_String1=".", _String2=".") returned 0 [0151.667] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdced1e60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdcef7fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.667] wcscmp (_String1="..", _String2=".") returned 1 [0151.667] wcscmp (_String1="..", _String2="..") returned 0 [0151.667] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0151.667] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0151.667] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0151.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0151.667] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0151.667] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0151.667] wcscat (in: _Dest=0x2ff63a8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" [0154.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0154.728] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0154.728] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0154.728] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0154.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66980 [0154.728] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0154.728] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0154.728] wcscat (in: _Dest=0x7a66980, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" [0154.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0154.729] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0154.730] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0154.730] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0154.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7208 [0154.730] wcscpy (in: _Dest=0x2ff7208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0154.730] wcscat (in: _Dest=0x2ff7208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0154.730] wcscat (in: _Dest=0x2ff7208, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" [0154.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0154.731] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0154.731] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0154.731] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0154.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf7f8 [0154.731] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0154.731] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0154.731] wcscat (in: _Dest=0x3eaf7f8, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" [0154.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8 [0154.732] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcef7fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0154.732] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0154.732] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0154.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf5d0 [0154.732] wcscpy (in: _Dest=0x3eaf5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0154.732] wcscat (in: _Dest=0x3eaf5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0154.732] wcscat (in: _Dest=0x3eaf5d0, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" [0154.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0154.734] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0154.734] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0154.734] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0154.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40ce0 [0154.734] wcscpy (in: _Dest=0x3d40ce0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR" [0154.734] wcscat (in: _Dest=0x3d40ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\" [0154.734] wcscat (in: _Dest=0x3d40ce0, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" [0154.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0154.739] FindNextFileW (in: hFindFile=0x3e73370, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0154.739] FindClose (in: hFindFile=0x3e73370 | out: hFindFile=0x3e73370) returned 1 [0154.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b5a8) returned 1 [0154.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68a90) returned 1 [0154.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63350) returned 1 Thread: id = 2052 os_tid = 0x27fc [0148.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a68b30 [0148.276] wcscpy (in: _Dest=0x7a68b30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0148.276] wcscat (in: _Dest=0x7a68b30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0148.276] wcscat (in: _Dest=0x7a68b30, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*" [0148.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b0d8 [0148.276] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdceabd00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdced1e60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73fb0 [0151.666] wcscmp (_String1=".", _String2=".") returned 0 [0151.666] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdceabd00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdced1e60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.666] wcscmp (_String1="..", _String2=".") returned 1 [0151.666] wcscmp (_String1="..", _String2="..") returned 0 [0151.666] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0151.666] wcscmp (_String1="Dynamic.pdf", _String2=".") returned 1 [0151.666] wcscmp (_String1="Dynamic.pdf", _String2="..") returned 1 [0151.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7ef8 [0151.667] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0151.667] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0151.667] wcscat (in: _Dest=0x2ff7ef8, _Source="Dynamic.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" [0166.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0166.588] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0166.589] wcscmp (_String1="Faces.pdf", _String2=".") returned 1 [0166.589] wcscmp (_String1="Faces.pdf", _String2="..") returned 1 [0166.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66ae0 [0166.589] wcscpy (in: _Dest=0x7a66ae0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0166.589] wcscat (in: _Dest=0x7a66ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0166.589] wcscat (in: _Dest=0x7a66ae0, _Source="Faces.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" [0166.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98 [0166.593] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0166.593] wcscmp (_String1="Pointers.pdf", _String2=".") returned 1 [0166.593] wcscmp (_String1="Pointers.pdf", _String2="..") returned 1 [0166.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7cd0 [0166.594] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0166.594] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0166.594] wcscat (in: _Dest=0x2ff7cd0, _Source="Pointers.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" [0166.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0 [0166.595] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0166.595] wcscmp (_String1="SignHere.pdf", _String2=".") returned 1 [0166.595] wcscmp (_String1="SignHere.pdf", _String2="..") returned 1 [0166.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0166.596] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0166.596] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0166.596] wcscat (in: _Dest=0x2ff6b90, _Source="SignHere.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" [0166.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0166.597] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdced1e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0166.597] wcscmp (_String1="Standard.pdf", _String2=".") returned 1 [0166.597] wcscmp (_String1="Standard.pdf", _String2="..") returned 1 [0166.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0166.597] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0166.597] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0166.598] wcscat (in: _Dest=0x2ff7430, _Source="Standard.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" [0166.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0166.599] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0166.599] wcscmp (_String1="StandardBusiness.pdf", _String2=".") returned 1 [0166.599] wcscmp (_String1="StandardBusiness.pdf", _String2="..") returned 1 [0166.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a120 [0166.599] wcscpy (in: _Dest=0x3e3a120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR" [0166.600] wcscat (in: _Dest=0x3e3a120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\" [0166.600] wcscat (in: _Dest=0x3e3a120, _Source="StandardBusiness.pdf" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" [0166.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0166.601] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdceabd00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0166.602] FindClose (in: hFindFile=0x3e73fb0 | out: hFindFile=0x3e73fb0) returned 1 [0166.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b0d8) returned 1 [0166.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68b30) returned 1 [0166.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a633f0) returned 1 Thread: id = 2053 os_tid = 0xe0c [0148.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf")) returned 0x20 [0150.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", dwFileAttributes=0x20) returned 0 [0150.266] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.266] GetLastError () returned 0x5 [0150.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", dwFileAttributes=0x20) returned 0 [0150.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 Thread: id = 2054 os_tid = 0xc50 [0148.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun")) returned 0x20 [0148.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN", dwFileAttributes=0x20) returned 0 [0148.285] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.285] GetLastError () returned 0x5 [0148.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN", dwFileAttributes=0x20) returned 0 [0148.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 Thread: id = 2055 os_tid = 0xb24 [0148.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun")) returned 0x20 [0148.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN", dwFileAttributes=0x20) returned 0 [0148.304] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.304] GetLastError () returned 0x5 [0148.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN", dwFileAttributes=0x20) returned 0 [0148.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 Thread: id = 2056 os_tid = 0xb20 [0148.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun")) returned 0x20 [0148.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN", dwFileAttributes=0x20) returned 0 [0148.312] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.313] GetLastError () returned 0x5 [0148.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN", dwFileAttributes=0x20) returned 0 [0148.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bbe8) returned 1 Thread: id = 2057 os_tid = 0xb48 [0148.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun")) returned 0x20 [0148.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN", dwFileAttributes=0x20) returned 0 [0148.317] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.317] GetLastError () returned 0x5 [0148.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN", dwFileAttributes=0x20) returned 0 [0148.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7938) returned 1 Thread: id = 2058 os_tid = 0x710 [0148.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat")) returned 0x20 [0150.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT", dwFileAttributes=0x20) returned 0 [0150.197] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.594] GetLastError () returned 0x5 [0151.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT", dwFileAttributes=0x20) returned 0 [0151.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df61c0) returned 1 Thread: id = 2059 os_tid = 0xb7c [0148.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs")) returned 0x20 [0150.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS", dwFileAttributes=0x20) returned 0 [0150.197] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.839] GetLastError () returned 0x5 [0150.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS", dwFileAttributes=0x20) returned 0 [0150.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63490) returned 1 Thread: id = 2060 os_tid = 0xbd8 [0148.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht")) returned 0x20 [0151.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT", dwFileAttributes=0x20) returned 0 [0151.199] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.199] GetLastError () returned 0x5 [0151.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT", dwFileAttributes=0x20) returned 0 [0151.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 2061 os_tid = 0xb68 [0148.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan")) returned 0x20 [0151.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN", dwFileAttributes=0x20) returned 0 [0151.622] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.622] GetLastError () returned 0x5 [0151.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN", dwFileAttributes=0x20) returned 0 [0151.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a635d0) returned 1 Thread: id = 2062 os_tid = 0xdcc [0148.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu")) returned 0x20 [0151.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU", dwFileAttributes=0x20) returned 0 [0151.620] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.620] GetLastError () returned 0x5 [0151.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU", dwFileAttributes=0x20) returned 0 [0151.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63670) returned 1 Thread: id = 2063 os_tid = 0xb50 [0148.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp")) returned 0x20 [0151.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP", dwFileAttributes=0x20) returned 0 [0151.618] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.618] GetLastError () returned 0x5 [0151.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP", dwFileAttributes=0x20) returned 0 [0151.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63710) returned 1 Thread: id = 2064 os_tid = 0xb40 [0148.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq")) returned 0x20 [0151.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ", dwFileAttributes=0x20) returned 0 [0151.617] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.617] GetLastError () returned 0x5 [0151.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ", dwFileAttributes=0x20) returned 0 [0151.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a637b0) returned 1 Thread: id = 2065 os_tid = 0xdac [0148.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra")) returned 0x20 [0151.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA", dwFileAttributes=0x20) returned 0 [0151.615] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.615] GetLastError () returned 0x5 [0151.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA", dwFileAttributes=0x20) returned 0 [0151.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63850) returned 1 Thread: id = 2066 os_tid = 0xb1c [0148.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita")) returned 0x20 [0151.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA", dwFileAttributes=0x20) returned 0 [0151.613] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.613] GetLastError () returned 0x5 [0151.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA", dwFileAttributes=0x20) returned 0 [0151.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 Thread: id = 2067 os_tid = 0xda8 [0148.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn")) returned 0x20 [0151.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN", dwFileAttributes=0x20) returned 0 [0151.611] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.611] GetLastError () returned 0x5 [0151.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN", dwFileAttributes=0x20) returned 0 [0151.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63990) returned 1 Thread: id = 2068 os_tid = 0xdb0 [0148.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor")) returned 0x20 [0151.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR", dwFileAttributes=0x20) returned 0 [0151.609] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.609] GetLastError () returned 0x5 [0151.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR", dwFileAttributes=0x20) returned 0 [0151.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63a30) returned 1 Thread: id = 2069 os_tid = 0xdbc [0148.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp")) returned 0x20 [0151.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", dwFileAttributes=0x20) returned 0 [0151.607] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.607] GetLastError () returned 0x5 [0151.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp", dwFileAttributes=0x20) returned 0 [0151.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63ad0) returned 1 Thread: id = 2070 os_tid = 0xdc4 [0148.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld")) returned 0x20 [0151.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD", dwFileAttributes=0x20) returned 0 [0151.605] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.605] GetLastError () returned 0x5 [0151.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD", dwFileAttributes=0x20) returned 0 [0151.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63b70) returned 1 Thread: id = 2071 os_tid = 0xdc8 [0148.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor")) returned 0x20 [0151.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR", dwFileAttributes=0x20) returned 0 [0151.603] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.603] GetLastError () returned 0x5 [0151.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR", dwFileAttributes=0x20) returned 0 [0151.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63c10) returned 1 Thread: id = 2072 os_tid = 0xdc0 [0148.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb")) returned 0x20 [0151.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB", dwFileAttributes=0x20) returned 0 [0151.597] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.598] GetLastError () returned 0x5 [0151.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB", dwFileAttributes=0x20) returned 0 [0151.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63cb0) returned 1 Thread: id = 2073 os_tid = 0xda4 [0148.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo")) returned 0x20 [0151.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", dwFileAttributes=0x20) returned 0 [0151.596] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.596] GetLastError () returned 0x5 [0151.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO", dwFileAttributes=0x20) returned 0 [0151.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63d50) returned 1 Thread: id = 2074 os_tid = 0xd9c [0148.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve")) returned 0x20 [0151.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE", dwFileAttributes=0x20) returned 0 [0151.305] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.305] GetLastError () returned 0x5 [0151.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE", dwFileAttributes=0x20) returned 0 [0151.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63df0) returned 1 Thread: id = 2075 os_tid = 0xdd4 [0148.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt")) returned 0x20 [0148.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt", dwFileAttributes=0x20) returned 0 [0148.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.396] GetLastError () returned 0x5 [0148.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt", dwFileAttributes=0x20) returned 0 [0148.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5a40) returned 1 Thread: id = 2076 os_tid = 0x99c [0148.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt")) returned 0x20 [0148.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt", dwFileAttributes=0x20) returned 0 [0148.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.397] GetLastError () returned 0x5 [0148.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt", dwFileAttributes=0x20) returned 0 [0148.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63e90) returned 1 Thread: id = 2077 os_tid = 0xa90 [0148.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt")) returned 0x20 [0148.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt", dwFileAttributes=0x20) returned 0 [0148.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.399] GetLastError () returned 0x5 [0148.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt", dwFileAttributes=0x20) returned 0 [0148.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63f30) returned 1 Thread: id = 2078 os_tid = 0xc68 [0148.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt")) returned 0x20 [0150.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt", dwFileAttributes=0x20) returned 0 [0150.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.176] GetLastError () returned 0x5 [0150.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt", dwFileAttributes=0x20) returned 0 [0150.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 2079 os_tid = 0x474 [0148.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt")) returned 0x20 [0150.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt", dwFileAttributes=0x20) returned 0 [0150.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.178] GetLastError () returned 0x5 [0150.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt", dwFileAttributes=0x20) returned 0 [0150.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 2080 os_tid = 0x528 [0148.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt")) returned 0x20 [0150.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0150.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.180] GetLastError () returned 0x5 [0150.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt", dwFileAttributes=0x20) returned 0 [0150.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 2081 os_tid = 0x9cc [0148.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt")) returned 0x20 [0150.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt", dwFileAttributes=0x20) returned 0 [0150.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.182] GetLastError () returned 0x5 [0150.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt", dwFileAttributes=0x20) returned 0 [0150.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 2082 os_tid = 0x9dc [0148.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt")) returned 0x20 [0150.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt", dwFileAttributes=0x20) returned 0 [0150.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.183] GetLastError () returned 0x5 [0150.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt", dwFileAttributes=0x20) returned 0 [0150.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6fb8) returned 1 Thread: id = 2083 os_tid = 0x9ec [0148.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt")) returned 0x20 [0150.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0150.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.185] GetLastError () returned 0x5 [0150.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt", dwFileAttributes=0x20) returned 0 [0150.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6298) returned 1 Thread: id = 2084 os_tid = 0x140 [0148.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt")) returned 0x20 [0150.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt", dwFileAttributes=0x20) returned 0 [0150.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.187] GetLastError () returned 0x5 [0150.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt", dwFileAttributes=0x20) returned 0 [0150.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 2085 os_tid = 0xa0c [0148.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt")) returned 0x20 [0150.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt", dwFileAttributes=0x20) returned 0 [0150.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.188] GetLastError () returned 0x5 [0150.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt", dwFileAttributes=0x20) returned 0 [0150.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 2086 os_tid = 0xa1c [0148.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt")) returned 0x20 [0150.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt", dwFileAttributes=0x20) returned 0 [0150.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.190] GetLastError () returned 0x5 [0150.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt", dwFileAttributes=0x20) returned 0 [0150.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 Thread: id = 2087 os_tid = 0xa2c [0148.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt")) returned 0x20 [0149.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt", dwFileAttributes=0x20) returned 0 [0149.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.271] GetLastError () returned 0x5 [0149.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt", dwFileAttributes=0x20) returned 0 [0149.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 2088 os_tid = 0xa3c [0148.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt")) returned 0x20 [0149.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0149.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.274] GetLastError () returned 0x5 [0149.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt", dwFileAttributes=0x20) returned 0 [0149.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68130) returned 1 Thread: id = 2089 os_tid = 0xa4c [0148.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt")) returned 0x20 [0149.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt", dwFileAttributes=0x20) returned 0 [0149.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.272] GetLastError () returned 0x5 [0149.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt", dwFileAttributes=0x20) returned 0 [0149.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681d0) returned 1 Thread: id = 2090 os_tid = 0x484 [0148.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat")) returned 0x20 [0148.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT", dwFileAttributes=0x20) returned 0 [0148.823] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.823] GetLastError () returned 0x5 [0148.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT", dwFileAttributes=0x20) returned 0 [0148.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 Thread: id = 2091 os_tid = 0xa6c [0148.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs")) returned 0x20 [0148.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS", dwFileAttributes=0x20) returned 0 [0148.825] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.825] GetLastError () returned 0x5 [0148.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS", dwFileAttributes=0x20) returned 0 [0148.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3054050) returned 1 Thread: id = 2092 os_tid = 0x5d0 [0148.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht")) returned 0x20 [0151.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT", dwFileAttributes=0x20) returned 0 [0151.303] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.303] GetLastError () returned 0x5 [0151.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT", dwFileAttributes=0x20) returned 0 [0151.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052df0) returned 1 Thread: id = 2093 os_tid = 0xa94 [0148.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx")) returned 0x20 [0148.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0148.881] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.881] GetLastError () returned 0x5 [0148.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0148.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 Thread: id = 2094 os_tid = 0xa88 [0148.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx")) returned 0x20 [0149.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0149.291] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.291] GetLastError () returned 0x5 [0149.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0149.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e5d0) returned 1 Thread: id = 2095 os_tid = 0xa84 [0148.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat")) returned 0x20 [0148.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT", dwFileAttributes=0x20) returned 0 [0148.895] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0148.895] GetLastError () returned 0x5 [0148.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT", dwFileAttributes=0x20) returned 0 [0148.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 Thread: id = 2096 os_tid = 0xa98 [0148.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat")) returned 0x20 [0149.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT", dwFileAttributes=0x20) returned 0 [0149.296] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.296] GetLastError () returned 0x5 [0149.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT", dwFileAttributes=0x20) returned 0 [0149.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 Thread: id = 2097 os_tid = 0xa80 [0148.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat")) returned 0x20 [0149.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT", dwFileAttributes=0x20) returned 0 [0149.294] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.294] GetLastError () returned 0x5 [0149.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT", dwFileAttributes=0x20) returned 0 [0149.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1c28) returned 1 Thread: id = 2098 os_tid = 0x6f0 [0148.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5af0 [0148.902] wcscpy (in: _Dest=0x3da5af0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0148.902] wcscat (in: _Dest=0x3da5af0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0148.902] wcscat (in: _Dest=0x3da5af0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*" [0148.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb28e8 [0148.902] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74130 [0151.677] wcscmp (_String1=".", _String2=".") returned 0 [0151.677] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.677] wcscmp (_String1="..", _String2=".") returned 1 [0151.677] wcscmp (_String1="..", _String2="..") returned 0 [0151.677] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CZE", cAlternateFileName="ACCESS~1.CZE")) returned 1 [0151.677] wcscmp (_String1="accessibility.CZE", _String2=".") returned 1 [0151.677] wcscmp (_String1="accessibility.CZE", _String2="..") returned 1 [0151.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63a30 [0151.678] wcscpy (in: _Dest=0x7a63a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0151.678] wcscat (in: _Dest=0x7a63a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0151.678] wcscat (in: _Dest=0x7a63a30, _Source="accessibility.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" [0167.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0167.799] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CZE", cAlternateFileName="")) returned 1 [0167.800] wcscmp (_String1="Acroform.CZE", _String2=".") returned 1 [0167.800] wcscmp (_String1="Acroform.CZE", _String2="..") returned 1 [0167.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a606c0 [0167.800] wcscpy (in: _Dest=0x7a606c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.800] wcscat (in: _Dest=0x7a606c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.800] wcscat (in: _Dest=0x7a606c0, _Source="Acroform.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" [0167.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a606c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0167.801] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CZE", cAlternateFileName="ADOBEC~1.CZE")) returned 1 [0167.801] wcscmp (_String1="AdobeCollabSync.CZE", _String2=".") returned 1 [0167.801] wcscmp (_String1="AdobeCollabSync.CZE", _String2="..") returned 1 [0167.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63990 [0167.801] wcscpy (in: _Dest=0x7a63990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.801] wcscat (in: _Dest=0x7a63990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.801] wcscat (in: _Dest=0x7a63990, _Source="AdobeCollabSync.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" [0167.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234 [0167.802] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CZE", cAlternateFileName="")) returned 1 [0167.802] wcscmp (_String1="Annots.CZE", _String2=".") returned 1 [0167.802] wcscmp (_String1="Annots.CZE", _String2="..") returned 1 [0167.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61170 [0167.802] wcscpy (in: _Dest=0x7a61170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.802] wcscat (in: _Dest=0x7a61170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.802] wcscat (in: _Dest=0x7a61170, _Source="Annots.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" [0167.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0167.803] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CZE", cAlternateFileName="BRDLAN~1.CZE")) returned 1 [0167.803] wcscmp (_String1="BRdlang32.CZE", _String2=".") returned 1 [0167.803] wcscmp (_String1="BRdlang32.CZE", _String2="..") returned 1 [0167.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d668 [0167.803] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.803] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.803] wcscat (in: _Dest=0x32d668, _Source="BRdlang32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" [0167.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0167.804] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CZE", cAlternateFileName="")) returned 1 [0167.804] wcscmp (_String1="Checkers.CZE", _String2=".") returned 1 [0167.804] wcscmp (_String1="Checkers.CZE", _String2="..") returned 1 [0167.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a614d0 [0167.804] wcscpy (in: _Dest=0x7a614d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.805] wcscat (in: _Dest=0x7a614d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.805] wcscat (in: _Dest=0x7a614d0, _Source="Checkers.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" [0167.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a614d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0167.805] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CZE", cAlternateFileName="")) returned 1 [0167.806] wcscmp (_String1="DigSig.CZE", _String2=".") returned 1 [0167.806] wcscmp (_String1="DigSig.CZE", _String2="..") returned 1 [0167.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60ea0 [0167.806] wcscpy (in: _Dest=0x7a60ea0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.806] wcscat (in: _Dest=0x7a60ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.806] wcscat (in: _Dest=0x7a60ea0, _Source="DigSig.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" [0167.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0167.807] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CZE", cAlternateFileName="")) returned 1 [0167.807] wcscmp (_String1="DVA.CZE", _String2=".") returned 1 [0167.807] wcscmp (_String1="DVA.CZE", _String2="..") returned 1 [0167.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c3a0 [0167.807] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.807] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.807] wcscat (in: _Dest=0x3f3c3a0, _Source="DVA.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" [0167.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228 [0167.808] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CZE", cAlternateFileName="")) returned 1 [0167.808] wcscmp (_String1="eBook.CZE", _String2=".") returned 1 [0167.808] wcscmp (_String1="eBook.CZE", _String2="..") returned 1 [0167.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61440 [0167.808] wcscpy (in: _Dest=0x7a61440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.808] wcscat (in: _Dest=0x7a61440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.808] wcscat (in: _Dest=0x7a61440, _Source="eBook.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" [0167.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0167.809] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CZE", cAlternateFileName="")) returned 1 [0167.809] wcscmp (_String1="EScript.CZE", _String2=".") returned 1 [0167.809] wcscmp (_String1="EScript.CZE", _String2="..") returned 1 [0167.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60f30 [0167.809] wcscpy (in: _Dest=0x7a60f30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.809] wcscat (in: _Dest=0x7a60f30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.809] wcscat (in: _Dest=0x7a60f30, _Source="EScript.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" [0167.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x121c [0167.810] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CZE", cAlternateFileName="")) returned 1 [0167.810] wcscmp (_String1="IA32.CZE", _String2=".") returned 1 [0167.810] wcscmp (_String1="IA32.CZE", _String2="..") returned 1 [0167.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0167.810] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.810] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.810] wcscat (in: _Dest=0x3f3d280, _Source="IA32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" [0167.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0167.811] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa5ed80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CZE", cAlternateFileName="MAKEAC~1.CZE")) returned 1 [0167.811] wcscmp (_String1="makeaccessible.CZE", _String2=".") returned 1 [0167.811] wcscmp (_String1="makeaccessible.CZE", _String2="..") returned 1 [0167.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62130 [0167.811] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.811] wcscat (in: _Dest=0x7a62130, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.811] wcscat (in: _Dest=0x7a62130, _Source="makeaccessible.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" [0167.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0167.812] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CZE", cAlternateFileName="MULTIM~1.CZE")) returned 1 [0167.812] wcscmp (_String1="Multimedia.CZE", _String2=".") returned 1 [0167.812] wcscmp (_String1="Multimedia.CZE", _String2="..") returned 1 [0167.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d2d8 [0167.812] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.813] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.813] wcscat (in: _Dest=0x32d2d8, _Source="Multimedia.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" [0167.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0167.813] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CZE", cAlternateFileName="")) returned 1 [0167.813] wcscmp (_String1="pddom.CZE", _String2=".") returned 1 [0167.813] wcscmp (_String1="pddom.CZE", _String2="..") returned 1 [0167.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60750 [0167.814] wcscpy (in: _Dest=0x7a60750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.814] wcscat (in: _Dest=0x7a60750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.814] wcscat (in: _Dest=0x7a60750, _Source="pddom.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" [0167.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0167.814] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CZE", cAlternateFileName="")) returned 1 [0167.814] wcscmp (_String1="PPKLite.CZE", _String2=".") returned 1 [0167.814] wcscmp (_String1="PPKLite.CZE", _String2="..") returned 1 [0167.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a602d0 [0167.815] wcscpy (in: _Dest=0x7a602d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.815] wcscat (in: _Dest=0x7a602d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.815] wcscat (in: _Dest=0x7a602d0, _Source="PPKLite.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" [0167.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a602d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0167.816] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd0e71a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CZE", cAlternateFileName="")) returned 1 [0167.816] wcscmp (_String1="RdLang32.CZE", _String2=".") returned 1 [0167.816] wcscmp (_String1="RdLang32.CZE", _String2="..") returned 1 [0167.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61950 [0167.816] wcscpy (in: _Dest=0x7a61950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.816] wcscat (in: _Dest=0x7a61950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.816] wcscat (in: _Dest=0x7a61950, _Source="RdLang32.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" [0167.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0167.817] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CZE", cAlternateFileName="READOU~1.CZE")) returned 1 [0167.817] wcscmp (_String1="ReadOutLoud.CZE", _String2=".") returned 1 [0167.817] wcscmp (_String1="ReadOutLoud.CZE", _String2="..") returned 1 [0167.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32ca88 [0167.817] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.817] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.817] wcscat (in: _Dest=0x32ca88, _Source="ReadOutLoud.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" [0167.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0167.818] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CZE", cAlternateFileName="")) returned 1 [0167.818] wcscmp (_String1="reflow.CZE", _String2=".") returned 1 [0167.818] wcscmp (_String1="reflow.CZE", _String2="..") returned 1 [0167.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a605a0 [0167.818] wcscpy (in: _Dest=0x7a605a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.818] wcscat (in: _Dest=0x7a605a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.818] wcscat (in: _Dest=0x7a605a0, _Source="reflow.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" [0167.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a605a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0167.819] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CZE", cAlternateFileName="SAVEAS~1.CZE")) returned 1 [0167.819] wcscmp (_String1="SaveAsRTF.CZE", _String2=".") returned 1 [0167.819] wcscmp (_String1="SaveAsRTF.CZE", _String2="..") returned 1 [0167.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ceb0 [0167.820] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.820] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.820] wcscat (in: _Dest=0x32ceb0, _Source="SaveAsRTF.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" [0167.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0167.821] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CZE", cAlternateFileName="")) returned 1 [0167.821] wcscmp (_String1="Search.CZE", _String2=".") returned 1 [0167.821] wcscmp (_String1="Search.CZE", _String2="..") returned 1 [0167.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60240 [0167.821] wcscpy (in: _Dest=0x7a60240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.821] wcscat (in: _Dest=0x7a60240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.821] wcscat (in: _Dest=0x7a60240, _Source="Search.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" [0167.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0167.823] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CZE", cAlternateFileName="")) returned 1 [0167.823] wcscmp (_String1="SendMail.CZE", _String2=".") returned 1 [0167.823] wcscmp (_String1="SendMail.CZE", _String2="..") returned 1 [0167.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a615f0 [0167.823] wcscpy (in: _Dest=0x7a615f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.823] wcscat (in: _Dest=0x7a615f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.823] wcscat (in: _Dest=0x7a615f0, _Source="SendMail.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" [0167.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a615f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc [0167.824] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0167.824] wcscmp (_String1="Services", _String2=".") returned 1 [0167.824] wcscmp (_String1="Services", _String2="..") returned 1 [0167.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c070 [0167.825] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.825] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.825] wcscat (in: _Dest=0x3f3c070, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0167.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0167.826] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CZE", cAlternateFileName="")) returned 1 [0167.826] wcscmp (_String1="Spelling.CZE", _String2=".") returned 1 [0167.826] wcscmp (_String1="Spelling.CZE", _String2="..") returned 1 [0167.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60480 [0167.826] wcscpy (in: _Dest=0x7a60480, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.826] wcscat (in: _Dest=0x7a60480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.826] wcscat (in: _Dest=0x7a60480, _Source="Spelling.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" [0167.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0167.827] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CZE", cAlternateFileName="")) returned 1 [0167.827] wcscmp (_String1="updater.CZE", _String2=".") returned 1 [0167.827] wcscmp (_String1="updater.CZE", _String2="..") returned 1 [0167.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60870 [0167.827] wcscpy (in: _Dest=0x7a60870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.827] wcscat (in: _Dest=0x7a60870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.827] wcscat (in: _Dest=0x7a60870, _Source="updater.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" [0167.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0167.829] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 1 [0167.829] wcscmp (_String1="WebLink.CZE", _String2=".") returned 1 [0167.829] wcscmp (_String1="WebLink.CZE", _String2="..") returned 1 [0167.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60510 [0167.829] wcscpy (in: _Dest=0x7a60510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ" [0167.829] wcscat (in: _Dest=0x7a60510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\" [0167.829] wcscat (in: _Dest=0x7a60510, _Source="WebLink.CZE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" [0167.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0167.830] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a19620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 0 [0167.830] FindClose (in: hFindFile=0x3e74130 | out: hFindFile=0x3e74130) returned 1 [0167.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb28e8) returned 1 [0167.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5af0) returned 1 [0167.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51020) returned 1 Thread: id = 2099 os_tid = 0x244 [0148.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da64f0 [0148.906] wcscpy (in: _Dest=0x3da64f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0148.906] wcscat (in: _Dest=0x3da64f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0148.906] wcscat (in: _Dest=0x3da64f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*" [0148.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef43d0 [0148.906] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9cfb1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741b0 [0151.680] wcscmp (_String1=".", _String2=".") returned 0 [0151.680] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9cfb1c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.680] wcscmp (_String1="..", _String2=".") returned 1 [0151.681] wcscmp (_String1="..", _String2="..") returned 0 [0151.681] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DAN", cAlternateFileName="ACCESS~1.DAN")) returned 1 [0151.681] wcscmp (_String1="accessibility.DAN", _String2=".") returned 1 [0151.681] wcscmp (_String1="accessibility.DAN", _String2="..") returned 1 [0151.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63ad0 [0151.681] wcscpy (in: _Dest=0x7a63ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0151.681] wcscat (in: _Dest=0x7a63ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0151.681] wcscat (in: _Dest=0x7a63ad0, _Source="accessibility.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" [0159.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0159.430] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DAN", cAlternateFileName="")) returned 1 [0159.430] wcscmp (_String1="Acroform.DAN", _String2=".") returned 1 [0159.430] wcscmp (_String1="Acroform.DAN", _String2="..") returned 1 [0159.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44210 [0159.430] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.430] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.430] wcscat (in: _Dest=0x3d44210, _Source="Acroform.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" [0159.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0159.432] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DAN", cAlternateFileName="ADOBEC~1.DAN")) returned 1 [0159.432] wcscmp (_String1="AdobeCollabSync.DAN", _String2=".") returned 1 [0159.432] wcscmp (_String1="AdobeCollabSync.DAN", _String2="..") returned 1 [0159.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63030 [0159.432] wcscpy (in: _Dest=0x7a63030, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.432] wcscat (in: _Dest=0x7a63030, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.432] wcscat (in: _Dest=0x7a63030, _Source="AdobeCollabSync.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" [0159.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860 [0159.434] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DAN", cAlternateFileName="")) returned 1 [0159.434] wcscmp (_String1="Annots.DAN", _String2=".") returned 1 [0159.434] wcscmp (_String1="Annots.DAN", _String2="..") returned 1 [0159.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45650 [0159.434] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.434] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.434] wcscat (in: _Dest=0x3d45650, _Source="Annots.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" [0159.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0159.435] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DAN", cAlternateFileName="BRDLAN~1.DAN")) returned 1 [0159.435] wcscmp (_String1="BRdlang32.DAN", _String2=".") returned 1 [0159.435] wcscmp (_String1="BRdlang32.DAN", _String2="..") returned 1 [0159.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad63b0 [0159.436] wcscpy (in: _Dest=0x7ad63b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.436] wcscat (in: _Dest=0x7ad63b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.436] wcscat (in: _Dest=0x7ad63b0, _Source="BRdlang32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" [0159.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad63b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0159.437] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DAN", cAlternateFileName="")) returned 1 [0159.437] wcscmp (_String1="Checkers.DAN", _String2=".") returned 1 [0159.437] wcscmp (_String1="Checkers.DAN", _String2="..") returned 1 [0159.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45c80 [0159.437] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.437] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.437] wcscat (in: _Dest=0x3d45c80, _Source="Checkers.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" [0159.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0159.438] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DAN", cAlternateFileName="")) returned 1 [0159.438] wcscmp (_String1="DigSig.DAN", _String2=".") returned 1 [0159.438] wcscmp (_String1="DigSig.DAN", _String2="..") returned 1 [0159.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d451d0 [0159.438] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.438] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.438] wcscat (in: _Dest=0x3d451d0, _Source="DigSig.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" [0159.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d451d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0159.439] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DAN", cAlternateFileName="")) returned 1 [0159.440] wcscmp (_String1="DVA.DAN", _String2=".") returned 1 [0159.440] wcscmp (_String1="DVA.DAN", _String2="..") returned 1 [0159.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c978 [0159.440] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.440] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.440] wcscat (in: _Dest=0x3f3c978, _Source="DVA.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" [0159.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0159.441] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DAN", cAlternateFileName="")) returned 1 [0159.441] wcscmp (_String1="eBook.DAN", _String2=".") returned 1 [0159.441] wcscmp (_String1="eBook.DAN", _String2="..") returned 1 [0159.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45020 [0159.441] wcscpy (in: _Dest=0x3d45020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.441] wcscat (in: _Dest=0x3d45020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.441] wcscat (in: _Dest=0x3d45020, _Source="eBook.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" [0159.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0159.442] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.DAN", cAlternateFileName="")) returned 1 [0159.442] wcscmp (_String1="EScript.DAN", _String2=".") returned 1 [0159.442] wcscmp (_String1="EScript.DAN", _String2="..") returned 1 [0159.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d444e0 [0159.442] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.442] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.442] wcscat (in: _Dest=0x3d444e0, _Source="EScript.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" [0159.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0159.443] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DAN", cAlternateFileName="")) returned 1 [0159.443] wcscmp (_String1="IA32.DAN", _String2=".") returned 1 [0159.443] wcscmp (_String1="IA32.DAN", _String2="..") returned 1 [0159.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c070 [0159.444] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.444] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.444] wcscat (in: _Dest=0x3f3c070, _Source="IA32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" [0159.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0159.445] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DAN", cAlternateFileName="MAKEAC~1.DAN")) returned 1 [0159.445] wcscmp (_String1="makeaccessible.DAN", _String2=".") returned 1 [0159.445] wcscmp (_String1="makeaccessible.DAN", _String2="..") returned 1 [0159.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a621d0 [0159.445] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.445] wcscat (in: _Dest=0x7a621d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.445] wcscat (in: _Dest=0x7a621d0, _Source="makeaccessible.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" [0159.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a621d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0159.446] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9ddfa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DAN", cAlternateFileName="MULTIM~1.DAN")) returned 1 [0159.446] wcscmp (_String1="Multimedia.DAN", _String2=".") returned 1 [0159.446] wcscmp (_String1="Multimedia.DAN", _String2="..") returned 1 [0159.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5148 [0159.446] wcscpy (in: _Dest=0x7ad5148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.446] wcscat (in: _Dest=0x7ad5148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.446] wcscat (in: _Dest=0x7ad5148, _Source="Multimedia.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" [0159.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0159.447] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DAN", cAlternateFileName="")) returned 1 [0159.447] wcscmp (_String1="pddom.DAN", _String2=".") returned 1 [0159.447] wcscmp (_String1="pddom.DAN", _String2="..") returned 1 [0159.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d459b0 [0159.447] wcscpy (in: _Dest=0x3d459b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.447] wcscat (in: _Dest=0x3d459b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.447] wcscat (in: _Dest=0x3d459b0, _Source="pddom.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" [0159.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d459b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0159.448] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DAN", cAlternateFileName="")) returned 1 [0159.448] wcscmp (_String1="PPKLITE.DAN", _String2=".") returned 1 [0159.448] wcscmp (_String1="PPKLITE.DAN", _String2="..") returned 1 [0159.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44f90 [0159.448] wcscpy (in: _Dest=0x3d44f90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.448] wcscat (in: _Dest=0x3d44f90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.449] wcscat (in: _Dest=0x3d44f90, _Source="PPKLITE.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" [0159.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0159.449] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb72a3c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DAN", cAlternateFileName="")) returned 1 [0159.449] wcscmp (_String1="RdLang32.DAN", _String2=".") returned 1 [0159.450] wcscmp (_String1="RdLang32.DAN", _String2="..") returned 1 [0159.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45530 [0159.450] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.450] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.450] wcscat (in: _Dest=0x3d45530, _Source="RdLang32.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" [0159.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0159.451] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DAN", cAlternateFileName="READOU~1.DAN")) returned 1 [0159.451] wcscmp (_String1="ReadOutLoud.DAN", _String2=".") returned 1 [0159.451] wcscmp (_String1="ReadOutLoud.DAN", _String2="..") returned 1 [0159.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6c00 [0159.451] wcscpy (in: _Dest=0x7ad6c00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.451] wcscat (in: _Dest=0x7ad6c00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.451] wcscat (in: _Dest=0x7ad6c00, _Source="ReadOutLoud.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" [0159.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0159.452] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DAN", cAlternateFileName="")) returned 1 [0159.452] wcscmp (_String1="reflow.DAN", _String2=".") returned 1 [0159.452] wcscmp (_String1="reflow.DAN", _String2="..") returned 1 [0159.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44690 [0159.452] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.452] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.452] wcscat (in: _Dest=0x3d44690, _Source="reflow.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" [0159.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0159.453] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DAN", cAlternateFileName="SAVEAS~1.DAN")) returned 1 [0159.453] wcscmp (_String1="SaveAsRTF.DAN", _String2=".") returned 1 [0159.453] wcscmp (_String1="SaveAsRTF.DAN", _String2="..") returned 1 [0159.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad54d8 [0159.453] wcscpy (in: _Dest=0x7ad54d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.453] wcscat (in: _Dest=0x7ad54d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.453] wcscat (in: _Dest=0x7ad54d8, _Source="SaveAsRTF.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" [0159.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad54d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0159.455] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DAN", cAlternateFileName="")) returned 1 [0159.455] wcscmp (_String1="Search.DAN", _String2=".") returned 1 [0159.455] wcscmp (_String1="Search.DAN", _String2="..") returned 1 [0159.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45410 [0159.455] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.455] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.455] wcscat (in: _Dest=0x3d45410, _Source="Search.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" [0159.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0159.457] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.DAN", cAlternateFileName="")) returned 1 [0159.457] wcscmp (_String1="SendMail.DAN", _String2=".") returned 1 [0159.458] wcscmp (_String1="SendMail.DAN", _String2="..") returned 1 [0159.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d447b0 [0159.458] wcscpy (in: _Dest=0x3d447b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.458] wcscat (in: _Dest=0x3d447b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.458] wcscat (in: _Dest=0x3d447b0, _Source="SendMail.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" [0159.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d447b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0159.459] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0159.459] wcscmp (_String1="Services", _String2=".") returned 1 [0159.459] wcscmp (_String1="Services", _String2="..") returned 1 [0159.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c7e0 [0159.459] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.460] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.460] wcscat (in: _Dest=0x3f3c7e0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0159.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0159.461] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DAN", cAlternateFileName="")) returned 1 [0159.461] wcscmp (_String1="Spelling.DAN", _String2=".") returned 1 [0159.461] wcscmp (_String1="Spelling.DAN", _String2="..") returned 1 [0159.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a613b0 [0159.461] wcscpy (in: _Dest=0x7a613b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.461] wcscat (in: _Dest=0x7a613b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.461] wcscat (in: _Dest=0x7a613b0, _Source="Spelling.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" [0159.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a613b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0159.462] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DAN", cAlternateFileName="")) returned 1 [0159.462] wcscmp (_String1="updater.DAN", _String2=".") returned 1 [0159.462] wcscmp (_String1="updater.DAN", _String2="..") returned 1 [0159.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61680 [0159.462] wcscpy (in: _Dest=0x7a61680, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.462] wcscat (in: _Dest=0x7a61680, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.462] wcscat (in: _Dest=0x7a61680, _Source="updater.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" [0159.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0159.463] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 1 [0159.463] wcscmp (_String1="Weblink.DAN", _String2=".") returned 1 [0159.463] wcscmp (_String1="Weblink.DAN", _String2="..") returned 1 [0159.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a619e0 [0159.463] wcscpy (in: _Dest=0x7a619e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK" [0159.463] wcscat (in: _Dest=0x7a619e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\" [0159.463] wcscat (in: _Dest=0x7a619e0, _Source="Weblink.DAN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" [0159.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a619e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0159.465] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11eaa80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 0 [0159.465] FindClose (in: hFindFile=0x3e741b0 | out: hFindFile=0x3e741b0) returned 1 [0159.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0159.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da64f0) returned 1 [0159.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 Thread: id = 2100 os_tid = 0x4d0 [0148.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5d70 [0148.907] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0148.907] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0148.907] wcscat (in: _Dest=0x3da5d70, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*" [0148.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0148.907] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73430 [0151.673] wcscmp (_String1=".", _String2=".") returned 0 [0151.673] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.673] wcscmp (_String1="..", _String2=".") returned 1 [0151.673] wcscmp (_String1="..", _String2="..") returned 0 [0151.673] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DEU", cAlternateFileName="ACCESS~1.DEU")) returned 1 [0151.673] wcscmp (_String1="accessibility.DEU", _String2=".") returned 1 [0151.673] wcscmp (_String1="accessibility.DEU", _String2="..") returned 1 [0151.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63670 [0151.673] wcscpy (in: _Dest=0x7a63670, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0151.673] wcscat (in: _Dest=0x7a63670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0151.673] wcscat (in: _Dest=0x7a63670, _Source="accessibility.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" [0154.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0154.744] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DEU", cAlternateFileName="")) returned 1 [0154.744] wcscmp (_String1="Acroform.DEU", _String2=".") returned 1 [0154.745] wcscmp (_String1="Acroform.DEU", _String2="..") returned 1 [0154.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44a80 [0154.745] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.745] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.745] wcscat (in: _Dest=0x3d44a80, _Source="Acroform.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" [0154.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0154.746] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DEU", cAlternateFileName="ADOBEC~1.DEU")) returned 1 [0154.746] wcscmp (_String1="AdobeCollabSync.DEU", _String2=".") returned 1 [0154.746] wcscmp (_String1="AdobeCollabSync.DEU", _String2="..") returned 1 [0154.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63350 [0154.747] wcscpy (in: _Dest=0x7a63350, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.747] wcscat (in: _Dest=0x7a63350, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.747] wcscat (in: _Dest=0x7a63350, _Source="AdobeCollabSync.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" [0154.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0154.748] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f63320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DEU", cAlternateFileName="")) returned 1 [0154.748] wcscmp (_String1="Annots.DEU", _String2=".") returned 1 [0154.748] wcscmp (_String1="Annots.DEU", _String2="..") returned 1 [0154.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d442a0 [0154.748] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.748] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.749] wcscat (in: _Dest=0x3d442a0, _Source="Annots.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" [0154.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0154.750] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DEU", cAlternateFileName="BRDLAN~1.DEU")) returned 1 [0154.750] wcscmp (_String1="BRdlang32.DEU", _String2=".") returned 1 [0154.750] wcscmp (_String1="BRdlang32.DEU", _String2="..") returned 1 [0154.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ceb0 [0154.750] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.750] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.750] wcscat (in: _Dest=0x32ceb0, _Source="BRdlang32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" [0154.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0154.751] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DEU", cAlternateFileName="")) returned 1 [0154.751] wcscmp (_String1="Checkers.DEU", _String2=".") returned 1 [0154.751] wcscmp (_String1="Checkers.DEU", _String2="..") returned 1 [0154.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d451d0 [0154.751] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.751] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.751] wcscat (in: _Dest=0x3d451d0, _Source="Checkers.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" [0154.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d451d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0154.752] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DEU", cAlternateFileName="")) returned 1 [0154.752] wcscmp (_String1="DigSig.DEU", _String2=".") returned 1 [0154.753] wcscmp (_String1="DigSig.DEU", _String2="..") returned 1 [0154.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a615f0 [0154.753] wcscpy (in: _Dest=0x7a615f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.753] wcscat (in: _Dest=0x7a615f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.753] wcscat (in: _Dest=0x7a615f0, _Source="DigSig.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" [0154.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a615f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0154.754] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DEU", cAlternateFileName="")) returned 1 [0154.754] wcscmp (_String1="DVA.DEU", _String2=".") returned 1 [0154.754] wcscmp (_String1="DVA.DEU", _String2="..") returned 1 [0154.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d748 [0154.754] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.754] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.754] wcscat (in: _Dest=0x3f3d748, _Source="DVA.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" [0154.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0154.755] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DEU", cAlternateFileName="")) returned 1 [0154.755] wcscmp (_String1="eBook.DEU", _String2=".") returned 1 [0154.756] wcscmp (_String1="eBook.DEU", _String2="..") returned 1 [0154.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61680 [0154.756] wcscpy (in: _Dest=0x7a61680, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.756] wcscat (in: _Dest=0x7a61680, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.756] wcscat (in: _Dest=0x7a61680, _Source="eBook.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" [0154.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ac [0154.757] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Escript.deu", cAlternateFileName="")) returned 1 [0154.757] wcscmp (_String1="Escript.deu", _String2=".") returned 1 [0154.757] wcscmp (_String1="Escript.deu", _String2="..") returned 1 [0154.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61710 [0154.757] wcscpy (in: _Dest=0x7a61710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.757] wcscat (in: _Dest=0x7a61710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.758] wcscat (in: _Dest=0x7a61710, _Source="Escript.deu" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" [0154.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b0 [0154.759] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DEU", cAlternateFileName="")) returned 1 [0154.759] wcscmp (_String1="IA32.DEU", _String2=".") returned 1 [0154.759] wcscmp (_String1="IA32.DEU", _String2="..") returned 1 [0154.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3be50 [0154.760] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.760] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.760] wcscat (in: _Dest=0x3f3be50, _Source="IA32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" [0154.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98 [0154.761] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DEU", cAlternateFileName="MAKEAC~1.DEU")) returned 1 [0154.761] wcscmp (_String1="makeaccessible.DEU", _String2=".") returned 1 [0154.761] wcscmp (_String1="makeaccessible.DEU", _String2="..") returned 1 [0154.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62b30 [0154.761] wcscpy (in: _Dest=0x7a62b30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.761] wcscat (in: _Dest=0x7a62b30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.762] wcscat (in: _Dest=0x7a62b30, _Source="makeaccessible.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" [0154.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c [0154.763] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2c8760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DEU", cAlternateFileName="MULTIM~1.DEU")) returned 1 [0154.763] wcscmp (_String1="Multimedia.DEU", _String2=".") returned 1 [0154.763] wcscmp (_String1="Multimedia.DEU", _String2="..") returned 1 [0154.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ca88 [0154.763] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.763] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.763] wcscat (in: _Dest=0x32ca88, _Source="Multimedia.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" [0154.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4 [0154.765] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DEU", cAlternateFileName="")) returned 1 [0154.765] wcscmp (_String1="pddom.DEU", _String2=".") returned 1 [0154.765] wcscmp (_String1="pddom.DEU", _String2="..") returned 1 [0154.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a617a0 [0154.765] wcscpy (in: _Dest=0x7a617a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.766] wcscat (in: _Dest=0x7a617a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.766] wcscat (in: _Dest=0x7a617a0, _Source="pddom.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" [0154.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a617a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8 [0154.767] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x88400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DEU", cAlternateFileName="")) returned 1 [0154.767] wcscmp (_String1="PPKLITE.DEU", _String2=".") returned 1 [0154.767] wcscmp (_String1="PPKLITE.DEU", _String2="..") returned 1 [0154.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61830 [0154.768] wcscpy (in: _Dest=0x7a61830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.768] wcscat (in: _Dest=0x7a61830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.768] wcscat (in: _Dest=0x7a61830, _Source="PPKLITE.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" [0154.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0154.769] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb645b80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DEU", cAlternateFileName="")) returned 1 [0154.769] wcscmp (_String1="RdLang32.DEU", _String2=".") returned 1 [0154.769] wcscmp (_String1="RdLang32.DEU", _String2="..") returned 1 [0154.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a618c0 [0154.769] wcscpy (in: _Dest=0x7a618c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.769] wcscat (in: _Dest=0x7a618c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.769] wcscat (in: _Dest=0x7a618c0, _Source="RdLang32.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" [0154.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a618c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0 [0154.770] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DEU", cAlternateFileName="READOU~1.DEU")) returned 1 [0154.770] wcscmp (_String1="ReadOutLoud.DEU", _String2=".") returned 1 [0154.770] wcscmp (_String1="ReadOutLoud.DEU", _String2="..") returned 1 [0154.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d2d8 [0154.771] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.771] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.771] wcscat (in: _Dest=0x32d2d8, _Source="ReadOutLoud.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" [0154.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1878 [0154.772] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DEU", cAlternateFileName="")) returned 1 [0154.772] wcscmp (_String1="reflow.DEU", _String2=".") returned 1 [0154.772] wcscmp (_String1="reflow.DEU", _String2="..") returned 1 [0154.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61950 [0154.772] wcscpy (in: _Dest=0x7a61950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.772] wcscat (in: _Dest=0x7a61950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.772] wcscat (in: _Dest=0x7a61950, _Source="reflow.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" [0154.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0154.773] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DEU", cAlternateFileName="SAVEAS~1.DEU")) returned 1 [0154.774] wcscmp (_String1="SaveAsRTF.DEU", _String2=".") returned 1 [0154.774] wcscmp (_String1="SaveAsRTF.DEU", _String2="..") returned 1 [0154.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d668 [0154.774] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.774] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.774] wcscat (in: _Dest=0x32d668, _Source="SaveAsRTF.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" [0154.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0154.775] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DEU", cAlternateFileName="")) returned 1 [0154.775] wcscmp (_String1="Search.DEU", _String2=".") returned 1 [0154.775] wcscmp (_String1="Search.DEU", _String2="..") returned 1 [0154.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a619e0 [0154.775] wcscpy (in: _Dest=0x7a619e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.775] wcscat (in: _Dest=0x7a619e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.775] wcscat (in: _Dest=0x7a619e0, _Source="Search.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" [0154.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a619e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0154.776] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10b9f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.deu", cAlternateFileName="")) returned 1 [0154.776] wcscmp (_String1="SendMail.deu", _String2=".") returned 1 [0154.777] wcscmp (_String1="SendMail.deu", _String2="..") returned 1 [0154.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61a70 [0154.777] wcscpy (in: _Dest=0x7a61a70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.777] wcscat (in: _Dest=0x7a61a70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.777] wcscat (in: _Dest=0x7a61a70, _Source="SendMail.deu" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" [0154.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0154.778] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0154.778] wcscmp (_String1="Services", _String2=".") returned 1 [0154.778] wcscmp (_String1="Services", _String2="..") returned 1 [0154.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c978 [0154.778] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.778] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.778] wcscat (in: _Dest=0x3f3c978, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0154.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0154.779] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DEU", cAlternateFileName="")) returned 1 [0154.779] wcscmp (_String1="Spelling.DEU", _String2=".") returned 1 [0154.779] wcscmp (_String1="Spelling.DEU", _String2="..") returned 1 [0154.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61b00 [0154.779] wcscpy (in: _Dest=0x7a61b00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0154.779] wcscat (in: _Dest=0x7a61b00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0154.779] wcscat (in: _Dest=0x7a61b00, _Source="Spelling.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" [0154.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0155.458] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DEU", cAlternateFileName="")) returned 1 [0155.458] wcscmp (_String1="updater.DEU", _String2=".") returned 1 [0155.458] wcscmp (_String1="updater.DEU", _String2="..") returned 1 [0155.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a613b0 [0155.458] wcscpy (in: _Dest=0x7a613b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0155.458] wcscat (in: _Dest=0x7a613b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0155.458] wcscat (in: _Dest=0x7a613b0, _Source="updater.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" [0159.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a613b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0159.131] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 1 [0159.131] wcscmp (_String1="Weblink.DEU", _String2=".") returned 1 [0159.131] wcscmp (_String1="Weblink.DEU", _String2="..") returned 1 [0159.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44210 [0159.132] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE" [0159.132] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\" [0159.132] wcscat (in: _Dest=0x3d44210, _Source="Weblink.DEU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" [0159.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0159.133] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 0 [0159.133] FindClose (in: hFindFile=0x3e73430 | out: hFindFile=0x3e73430) returned 1 [0159.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0159.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 [0159.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 Thread: id = 2101 os_tid = 0x480 [0148.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6770 [0148.908] wcscpy (in: _Dest=0x3da6770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0148.908] wcscat (in: _Dest=0x3da6770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0148.908] wcscat (in: _Dest=0x3da6770, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*" [0148.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5240 [0148.908] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73470 [0151.676] wcscmp (_String1=".", _String2=".") returned 0 [0151.676] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.676] wcscmp (_String1="..", _String2=".") returned 1 [0151.677] wcscmp (_String1="..", _String2="..") returned 0 [0151.677] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ESP", cAlternateFileName="ACCESS~1.ESP")) returned 1 [0151.677] wcscmp (_String1="accessibility.ESP", _String2=".") returned 1 [0151.677] wcscmp (_String1="accessibility.ESP", _String2="..") returned 1 [0151.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63990 [0151.677] wcscpy (in: _Dest=0x7a63990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0151.677] wcscat (in: _Dest=0x7a63990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0151.677] wcscat (in: _Dest=0x7a63990, _Source="accessibility.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" [0166.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0166.294] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ESP", cAlternateFileName="")) returned 1 [0166.294] wcscmp (_String1="Acroform.ESP", _String2=".") returned 1 [0166.294] wcscmp (_String1="Acroform.ESP", _String2="..") returned 1 [0166.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45020 [0166.294] wcscpy (in: _Dest=0x3d45020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.294] wcscat (in: _Dest=0x3d45020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.294] wcscat (in: _Dest=0x3d45020, _Source="Acroform.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" [0166.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0166.296] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ESP", cAlternateFileName="ADOBEC~1.ESP")) returned 1 [0166.296] wcscmp (_String1="AdobeCollabSync.ESP", _String2=".") returned 1 [0166.296] wcscmp (_String1="AdobeCollabSync.ESP", _String2="..") returned 1 [0166.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62a90 [0166.296] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.296] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.296] wcscat (in: _Dest=0x7a62a90, _Source="AdobeCollabSync.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" [0166.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0166.298] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ESP", cAlternateFileName="")) returned 1 [0166.298] wcscmp (_String1="Annots.ESP", _String2=".") returned 1 [0166.298] wcscmp (_String1="Annots.ESP", _String2="..") returned 1 [0166.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d459b0 [0166.298] wcscpy (in: _Dest=0x3d459b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.298] wcscat (in: _Dest=0x3d459b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.298] wcscat (in: _Dest=0x3d459b0, _Source="Annots.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" [0166.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d459b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0166.299] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ESP", cAlternateFileName="BRDLAN~1.ESP")) returned 1 [0166.299] wcscmp (_String1="BRdlang32.ESP", _String2=".") returned 1 [0166.299] wcscmp (_String1="BRdlang32.ESP", _String2="..") returned 1 [0166.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64978 [0166.299] wcscpy (in: _Dest=0x7a64978, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.299] wcscat (in: _Dest=0x7a64978, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.299] wcscat (in: _Dest=0x7a64978, _Source="BRdlang32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" [0166.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04 [0166.301] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ESP", cAlternateFileName="")) returned 1 [0166.301] wcscmp (_String1="Checkers.ESP", _String2=".") returned 1 [0166.301] wcscmp (_String1="Checkers.ESP", _String2="..") returned 1 [0166.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45ec0 [0166.301] wcscpy (in: _Dest=0x3d45ec0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.301] wcscat (in: _Dest=0x3d45ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.301] wcscat (in: _Dest=0x3d45ec0, _Source="Checkers.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" [0166.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0166.303] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ESP", cAlternateFileName="")) returned 1 [0166.303] wcscmp (_String1="DigSig.ESP", _String2=".") returned 1 [0166.303] wcscmp (_String1="DigSig.ESP", _String2="..") returned 1 [0166.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45410 [0166.303] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.303] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.303] wcscat (in: _Dest=0x3d45410, _Source="DigSig.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" [0166.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0166.305] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ESP", cAlternateFileName="")) returned 1 [0166.305] wcscmp (_String1="DVA.ESP", _String2=".") returned 1 [0166.305] wcscmp (_String1="DVA.ESP", _String2="..") returned 1 [0166.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c180 [0166.305] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.305] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.305] wcscat (in: _Dest=0x3f3c180, _Source="DVA.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" [0166.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0166.307] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ESP", cAlternateFileName="")) returned 1 [0166.307] wcscmp (_String1="eBook.ESP", _String2=".") returned 1 [0166.307] wcscmp (_String1="eBook.ESP", _String2="..") returned 1 [0166.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45650 [0166.307] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.307] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.307] wcscat (in: _Dest=0x3d45650, _Source="eBook.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" [0166.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0166.309] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ESP", cAlternateFileName="")) returned 1 [0166.309] wcscmp (_String1="EScript.ESP", _String2=".") returned 1 [0166.309] wcscmp (_String1="EScript.ESP", _String2="..") returned 1 [0166.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45c80 [0166.309] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.309] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.309] wcscat (in: _Dest=0x3d45c80, _Source="EScript.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" [0166.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0166.310] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ESP", cAlternateFileName="")) returned 1 [0166.310] wcscmp (_String1="IA32.ESP", _String2=".") returned 1 [0166.311] wcscmp (_String1="IA32.ESP", _String2="..") returned 1 [0166.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bc30 [0166.311] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.311] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.311] wcscat (in: _Dest=0x3f3bc30, _Source="IA32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" [0166.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0166.312] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ESP", cAlternateFileName="MAKEAC~1.ESP")) returned 1 [0166.312] wcscmp (_String1="makeaccessible.ESP", _String2=".") returned 1 [0166.312] wcscmp (_String1="makeaccessible.ESP", _String2="..") returned 1 [0166.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63df0 [0166.312] wcscpy (in: _Dest=0x7a63df0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.312] wcscat (in: _Dest=0x7a63df0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.312] wcscat (in: _Dest=0x7a63df0, _Source="makeaccessible.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" [0166.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0166.314] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ESP", cAlternateFileName="MULTIM~1.ESP")) returned 1 [0166.314] wcscmp (_String1="Multimedia.ESP", _String2=".") returned 1 [0166.314] wcscmp (_String1="Multimedia.ESP", _String2="..") returned 1 [0166.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a648e0 [0166.314] wcscpy (in: _Dest=0x7a648e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.314] wcscat (in: _Dest=0x7a648e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.314] wcscat (in: _Dest=0x7a648e0, _Source="Multimedia.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" [0166.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a648e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0166.315] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ESP", cAlternateFileName="")) returned 1 [0166.315] wcscmp (_String1="pddom.ESP", _String2=".") returned 1 [0166.316] wcscmp (_String1="pddom.ESP", _String2="..") returned 1 [0166.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d444e0 [0166.316] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.316] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.316] wcscat (in: _Dest=0x3d444e0, _Source="pddom.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" [0166.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0166.317] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x83c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ESP", cAlternateFileName="")) returned 1 [0166.317] wcscmp (_String1="PPKLITE.ESP", _String2=".") returned 1 [0166.317] wcscmp (_String1="PPKLITE.ESP", _String2="..") returned 1 [0166.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44f90 [0166.317] wcscpy (in: _Dest=0x3d44f90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.317] wcscat (in: _Dest=0x3d44f90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.318] wcscat (in: _Dest=0x3d44f90, _Source="PPKLITE.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" [0166.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0166.319] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb6b7fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x156a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ESP", cAlternateFileName="")) returned 1 [0166.319] wcscmp (_String1="RdLang32.ESP", _String2=".") returned 1 [0166.319] wcscmp (_String1="RdLang32.ESP", _String2="..") returned 1 [0166.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45920 [0166.319] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.319] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.319] wcscat (in: _Dest=0x3d45920, _Source="RdLang32.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" [0166.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4 [0166.321] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ESP", cAlternateFileName="READOU~1.ESP")) returned 1 [0166.321] wcscmp (_String1="ReadOutLoud.ESP", _String2=".") returned 1 [0166.321] wcscmp (_String1="ReadOutLoud.ESP", _String2="..") returned 1 [0166.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64718 [0166.321] wcscpy (in: _Dest=0x7a64718, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.321] wcscat (in: _Dest=0x7a64718, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.321] wcscat (in: _Dest=0x7a64718, _Source="ReadOutLoud.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" [0166.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc [0166.322] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ESP", cAlternateFileName="")) returned 1 [0166.323] wcscmp (_String1="reflow.ESP", _String2=".") returned 1 [0166.323] wcscmp (_String1="reflow.ESP", _String2="..") returned 1 [0166.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45a40 [0166.323] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.323] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.323] wcscat (in: _Dest=0x3d45a40, _Source="reflow.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" [0166.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0166.324] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ESP", cAlternateFileName="SAVEAS~1.ESP")) returned 1 [0166.324] wcscmp (_String1="SaveAsRTF.ESP", _String2=".") returned 1 [0166.324] wcscmp (_String1="SaveAsRTF.ESP", _String2="..") returned 1 [0166.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64680 [0166.324] wcscpy (in: _Dest=0x7a64680, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.324] wcscat (in: _Dest=0x7a64680, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.324] wcscat (in: _Dest=0x7a64680, _Source="SaveAsRTF.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" [0166.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0166.326] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ESP", cAlternateFileName="")) returned 1 [0166.326] wcscmp (_String1="Search.ESP", _String2=".") returned 1 [0166.326] wcscmp (_String1="Search.ESP", _String2="..") returned 1 [0166.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d448d0 [0166.326] wcscpy (in: _Dest=0x3d448d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.326] wcscat (in: _Dest=0x3d448d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.326] wcscat (in: _Dest=0x3d448d0, _Source="Search.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" [0166.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d448d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4 [0166.327] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ESP", cAlternateFileName="")) returned 1 [0166.327] wcscmp (_String1="SendMail.ESP", _String2=".") returned 1 [0166.328] wcscmp (_String1="SendMail.ESP", _String2="..") returned 1 [0166.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44600 [0166.328] wcscpy (in: _Dest=0x3d44600, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.328] wcscat (in: _Dest=0x3d44600, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.328] wcscat (in: _Dest=0x3d44600, _Source="SendMail.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" [0166.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0166.329] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd700a00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0166.329] wcscmp (_String1="Services", _String2=".") returned 1 [0166.329] wcscmp (_String1="Services", _String2="..") returned 1 [0166.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d7d0 [0166.330] wcscpy (in: _Dest=0x3f3d7d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.330] wcscat (in: _Dest=0x3f3d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.330] wcscat (in: _Dest=0x3f3d7d0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0166.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0166.331] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ESP", cAlternateFileName="")) returned 1 [0166.331] wcscmp (_String1="Spelling.ESP", _String2=".") returned 1 [0166.331] wcscmp (_String1="Spelling.ESP", _String2="..") returned 1 [0166.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44720 [0166.332] wcscpy (in: _Dest=0x3d44720, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.332] wcscat (in: _Dest=0x3d44720, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.332] wcscat (in: _Dest=0x3d44720, _Source="Spelling.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" [0166.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0166.760] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ESP", cAlternateFileName="")) returned 1 [0166.760] wcscmp (_String1="updater.ESP", _String2=".") returned 1 [0166.760] wcscmp (_String1="updater.ESP", _String2="..") returned 1 [0166.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44570 [0166.761] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0166.761] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0166.761] wcscat (in: _Dest=0x3d44570, _Source="updater.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" [0170.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0170.848] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 1 [0170.848] wcscmp (_String1="Weblink.ESP", _String2=".") returned 1 [0170.848] wcscmp (_String1="Weblink.ESP", _String2="..") returned 1 [0170.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61b00 [0170.848] wcscpy (in: _Dest=0x7a61b00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES" [0170.848] wcscat (in: _Dest=0x7a61b00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\" [0170.848] wcscat (in: _Dest=0x7a61b00, _Source="Weblink.ESP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" [0170.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0170.849] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe11c4920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 0 [0170.849] FindClose (in: hFindFile=0x3e73470 | out: hFindFile=0x3e73470) returned 1 [0170.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5240) returned 1 [0170.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 [0170.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 Thread: id = 2102 os_tid = 0x7bc [0148.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da63f0 [0148.909] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0148.909] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0148.909] wcscat (in: _Dest=0x3da63f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*" [0148.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a9a0 [0148.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73f70 [0151.676] wcscmp (_String1=".", _String2=".") returned 0 [0151.676] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda46b680, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1bbc540, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.676] wcscmp (_String1="..", _String2=".") returned 1 [0151.676] wcscmp (_String1="..", _String2="..") returned 0 [0151.676] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.EUQ", cAlternateFileName="ACCESS~1.EUQ")) returned 1 [0151.676] wcscmp (_String1="accessibility.EUQ", _String2=".") returned 1 [0151.676] wcscmp (_String1="accessibility.EUQ", _String2="..") returned 1 [0151.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a638f0 [0151.676] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0151.676] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0151.676] wcscat (in: _Dest=0x7a638f0, _Source="accessibility.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" [0158.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a638f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0158.256] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x66c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.EUQ", cAlternateFileName="")) returned 1 [0158.256] wcscmp (_String1="Acroform.EUQ", _String2=".") returned 1 [0158.256] wcscmp (_String1="Acroform.EUQ", _String2="..") returned 1 [0158.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a615f0 [0158.256] wcscpy (in: _Dest=0x7a615f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.256] wcscat (in: _Dest=0x7a615f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.256] wcscat (in: _Dest=0x7a615f0, _Source="Acroform.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" [0158.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a615f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0158.258] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.EUQ", cAlternateFileName="ADOBEC~1.EUQ")) returned 1 [0158.258] wcscmp (_String1="AdobeCollabSync.EUQ", _String2=".") returned 1 [0158.258] wcscmp (_String1="AdobeCollabSync.EUQ", _String2="..") returned 1 [0158.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63170 [0158.258] wcscpy (in: _Dest=0x7a63170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.258] wcscat (in: _Dest=0x7a63170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.258] wcscat (in: _Dest=0x7a63170, _Source="AdobeCollabSync.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" [0158.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0158.259] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.EUQ", cAlternateFileName="")) returned 1 [0158.259] wcscmp (_String1="Annots.EUQ", _String2=".") returned 1 [0158.259] wcscmp (_String1="Annots.EUQ", _String2="..") returned 1 [0158.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a606c0 [0158.259] wcscpy (in: _Dest=0x7a606c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.259] wcscat (in: _Dest=0x7a606c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.259] wcscat (in: _Dest=0x7a606c0, _Source="Annots.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" [0158.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a606c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0158.261] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd831500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.EUQ", cAlternateFileName="BRDLAN~1.EUQ")) returned 1 [0158.261] wcscmp (_String1="BRdlang32.EUQ", _String2=".") returned 1 [0158.261] wcscmp (_String1="BRdlang32.EUQ", _String2="..") returned 1 [0158.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6448 [0158.261] wcscpy (in: _Dest=0x7ad6448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.261] wcscat (in: _Dest=0x7ad6448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.261] wcscat (in: _Dest=0x7ad6448, _Source="BRdlang32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" [0158.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0158.262] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.EUQ", cAlternateFileName="")) returned 1 [0158.262] wcscmp (_String1="Checkers.EUQ", _String2=".") returned 1 [0158.262] wcscmp (_String1="Checkers.EUQ", _String2="..") returned 1 [0158.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60240 [0158.262] wcscpy (in: _Dest=0x7a60240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.262] wcscat (in: _Dest=0x7a60240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.263] wcscat (in: _Dest=0x7a60240, _Source="Checkers.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" [0158.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0158.264] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.EUQ", cAlternateFileName="")) returned 1 [0158.264] wcscmp (_String1="DigSig.EUQ", _String2=".") returned 1 [0158.264] wcscmp (_String1="DigSig.EUQ", _String2="..") returned 1 [0158.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a603f0 [0158.264] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.264] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.264] wcscat (in: _Dest=0x7a603f0, _Source="DigSig.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" [0158.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a603f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0158.265] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.EUQ", cAlternateFileName="")) returned 1 [0158.265] wcscmp (_String1="DVA.EUQ", _String2=".") returned 1 [0158.265] wcscmp (_String1="DVA.EUQ", _String2="..") returned 1 [0158.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36ead8 [0158.265] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.266] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.266] wcscat (in: _Dest=0x36ead8, _Source="DVA.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" [0158.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0158.267] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.EUQ", cAlternateFileName="")) returned 1 [0158.267] wcscmp (_String1="eBook.EUQ", _String2=".") returned 1 [0158.267] wcscmp (_String1="eBook.EUQ", _String2="..") returned 1 [0158.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a605a0 [0158.267] wcscpy (in: _Dest=0x7a605a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.267] wcscat (in: _Dest=0x7a605a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.267] wcscat (in: _Dest=0x7a605a0, _Source="eBook.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" [0158.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a605a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0158.268] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b70280, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.EUQ", cAlternateFileName="")) returned 1 [0158.268] wcscmp (_String1="EScript.EUQ", _String2=".") returned 1 [0158.268] wcscmp (_String1="EScript.EUQ", _String2="..") returned 1 [0158.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60870 [0158.268] wcscpy (in: _Dest=0x7a60870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.268] wcscat (in: _Dest=0x7a60870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.268] wcscat (in: _Dest=0x7a60870, _Source="EScript.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" [0158.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0158.270] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.EUQ", cAlternateFileName="")) returned 1 [0158.270] wcscmp (_String1="IA32.EUQ", _String2=".") returned 1 [0158.270] wcscmp (_String1="IA32.EUQ", _String2="..") returned 1 [0158.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e500 [0158.270] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.270] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.270] wcscat (in: _Dest=0x36e500, _Source="IA32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" [0158.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0158.275] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.EUQ", cAlternateFileName="MAKEAC~1.EUQ")) returned 1 [0158.275] wcscmp (_String1="makeaccessible.EUQ", _String2=".") returned 1 [0158.275] wcscmp (_String1="makeaccessible.EUQ", _String2="..") returned 1 [0158.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62bd0 [0158.276] wcscpy (in: _Dest=0x7a62bd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.276] wcscat (in: _Dest=0x7a62bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.276] wcscat (in: _Dest=0x7a62bd0, _Source="makeaccessible.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" [0158.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0158.277] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda46b680, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.EUQ", cAlternateFileName="MULTIM~1.EUQ")) returned 1 [0158.277] wcscmp (_String1="Multimedia.EUQ", _String2=".") returned 1 [0158.277] wcscmp (_String1="Multimedia.EUQ", _String2="..") returned 1 [0158.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad5c90 [0158.277] wcscpy (in: _Dest=0x7ad5c90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.277] wcscat (in: _Dest=0x7ad5c90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.277] wcscat (in: _Dest=0x7ad5c90, _Source="Multimedia.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" [0158.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0158.279] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.EUQ", cAlternateFileName="")) returned 1 [0158.279] wcscmp (_String1="pddom.EUQ", _String2=".") returned 1 [0158.279] wcscmp (_String1="pddom.EUQ", _String2="..") returned 1 [0158.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60360 [0158.279] wcscpy (in: _Dest=0x7a60360, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.279] wcscat (in: _Dest=0x7a60360, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.279] wcscat (in: _Dest=0x7a60360, _Source="pddom.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" [0158.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0158.281] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.EUQ", cAlternateFileName="")) returned 1 [0158.281] wcscmp (_String1="PPKLite.EUQ", _String2=".") returned 1 [0158.281] wcscmp (_String1="PPKLite.EUQ", _String2="..") returned 1 [0158.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a602d0 [0158.281] wcscpy (in: _Dest=0x7a602d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.281] wcscat (in: _Dest=0x7a602d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.281] wcscat (in: _Dest=0x7a602d0, _Source="PPKLite.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" [0158.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a602d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0158.282] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd68e5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.EUQ", cAlternateFileName="")) returned 1 [0158.282] wcscmp (_String1="RdLang32.EUQ", _String2=".") returned 1 [0158.282] wcscmp (_String1="RdLang32.EUQ", _String2="..") returned 1 [0158.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60750 [0158.282] wcscpy (in: _Dest=0x7a60750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.283] wcscat (in: _Dest=0x7a60750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.283] wcscat (in: _Dest=0x7a60750, _Source="RdLang32.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" [0158.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0158.284] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.EUQ", cAlternateFileName="READOU~1.EUQ")) returned 1 [0158.284] wcscmp (_String1="ReadOutLoud.EUQ", _String2=".") returned 1 [0158.284] wcscmp (_String1="ReadOutLoud.EUQ", _String2="..") returned 1 [0158.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6150 [0158.284] wcscpy (in: _Dest=0x7ad6150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.284] wcscat (in: _Dest=0x7ad6150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.284] wcscat (in: _Dest=0x7ad6150, _Source="ReadOutLoud.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" [0158.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0158.285] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaf7300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.EUQ", cAlternateFileName="")) returned 1 [0158.285] wcscmp (_String1="reflow.EUQ", _String2=".") returned 1 [0158.286] wcscmp (_String1="reflow.EUQ", _String2="..") returned 1 [0158.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60480 [0158.286] wcscpy (in: _Dest=0x7a60480, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.286] wcscat (in: _Dest=0x7a60480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.286] wcscat (in: _Dest=0x7a60480, _Source="reflow.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" [0158.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0158.287] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.EUQ", cAlternateFileName="SAVEAS~1.EUQ")) returned 1 [0158.288] wcscmp (_String1="SaveAsRTF.EUQ", _String2=".") returned 1 [0158.289] wcscmp (_String1="SaveAsRTF.EUQ", _String2="..") returned 1 [0158.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5900 [0158.290] wcscpy (in: _Dest=0x7ad5900, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.290] wcscat (in: _Dest=0x7ad5900, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.290] wcscat (in: _Dest=0x7ad5900, _Source="SaveAsRTF.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" [0158.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0158.291] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.EUQ", cAlternateFileName="")) returned 1 [0158.291] wcscmp (_String1="Search.EUQ", _String2=".") returned 1 [0158.291] wcscmp (_String1="Search.EUQ", _String2="..") returned 1 [0158.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60630 [0158.292] wcscpy (in: _Dest=0x7a60630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.292] wcscat (in: _Dest=0x7a60630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.292] wcscat (in: _Dest=0x7a60630, _Source="Search.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" [0158.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0158.293] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.EUQ", cAlternateFileName="")) returned 1 [0158.293] wcscmp (_String1="SendMail.EUQ", _String2=".") returned 1 [0158.293] wcscmp (_String1="SendMail.EUQ", _String2="..") returned 1 [0158.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60e10 [0158.294] wcscpy (in: _Dest=0x7a60e10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.294] wcscat (in: _Dest=0x7a60e10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.294] wcscat (in: _Dest=0x7a60e10, _Source="SendMail.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" [0158.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0158.295] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0158.295] wcscmp (_String1="Services", _String2=".") returned 1 [0158.295] wcscmp (_String1="Services", _String2="..") returned 1 [0158.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e478 [0158.296] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.296] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.296] wcscat (in: _Dest=0x36e478, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0158.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0158.421] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb4eef20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.EUQ", cAlternateFileName="")) returned 1 [0158.421] wcscmp (_String1="Spelling.EUQ", _String2=".") returned 1 [0158.421] wcscmp (_String1="Spelling.EUQ", _String2="..") returned 1 [0158.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60fc0 [0158.421] wcscpy (in: _Dest=0x7a60fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0158.421] wcscat (in: _Dest=0x7a60fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0158.422] wcscat (in: _Dest=0x7a60fc0, _Source="Spelling.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" [0164.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq")) returned 0x20 [0164.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ", dwFileAttributes=0x20) returned 0 [0164.705] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.706] GetLastError () returned 0x5 [0164.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ", dwFileAttributes=0x20) returned 0 [0164.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60fc0) returned 1 [0164.706] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.EUQ", cAlternateFileName="")) returned 1 [0164.706] wcscmp (_String1="updater.EUQ", _String2=".") returned 1 [0164.706] wcscmp (_String1="updater.EUQ", _String2="..") returned 1 [0164.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60fc0 [0164.706] wcscpy (in: _Dest=0x7a60fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0164.706] wcscat (in: _Dest=0x7a60fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0164.706] wcscat (in: _Dest=0x7a60fc0, _Source="updater.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" [0164.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq")) returned 0x20 [0164.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ", dwFileAttributes=0x20) returned 0 [0164.707] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.707] GetLastError () returned 0x5 [0164.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ", dwFileAttributes=0x20) returned 0 [0164.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60fc0) returned 1 [0164.707] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 1 [0164.707] wcscmp (_String1="WebLink.EUQ", _String2=".") returned 1 [0164.707] wcscmp (_String1="WebLink.EUQ", _String2="..") returned 1 [0164.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60fc0 [0164.708] wcscpy (in: _Dest=0x7a60fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES" [0164.708] wcscat (in: _Dest=0x7a60fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\" [0164.708] wcscat (in: _Dest=0x7a60fc0, _Source="WebLink.EUQ" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" [0164.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq")) returned 0x20 [0164.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ", dwFileAttributes=0x20) returned 0 [0164.708] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.708] GetLastError () returned 0x5 [0164.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ", dwFileAttributes=0x20) returned 0 [0164.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60fc0) returned 1 [0164.709] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b963e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 0 [0164.709] FindClose (in: hFindFile=0x3e73f70 | out: hFindFile=0x3e73f70) returned 1 [0164.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a9a0) returned 1 [0164.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 [0164.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 Thread: id = 2103 os_tid = 0x6e4 [0148.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da66f0 [0148.909] wcscpy (in: _Dest=0x3da66f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0148.909] wcscat (in: _Dest=0x3da66f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0148.909] wcscat (in: _Dest=0x3da66f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*" [0148.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0148.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e734b0 [0151.675] wcscmp (_String1=".", _String2=".") returned 0 [0151.675] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2a2600, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.675] wcscmp (_String1="..", _String2=".") returned 1 [0151.675] wcscmp (_String1="..", _String2="..") returned 0 [0151.675] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SUO", cAlternateFileName="ACCESS~1.SUO")) returned 1 [0151.675] wcscmp (_String1="accessibility.SUO", _String2=".") returned 1 [0151.675] wcscmp (_String1="accessibility.SUO", _String2="..") returned 1 [0151.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63850 [0151.675] wcscpy (in: _Dest=0x7a63850, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0151.675] wcscat (in: _Dest=0x7a63850, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0151.675] wcscat (in: _Dest=0x7a63850, _Source="accessibility.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" [0153.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90 [0153.399] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SUO", cAlternateFileName="")) returned 1 [0153.399] wcscmp (_String1="Acroform.SUO", _String2=".") returned 1 [0153.399] wcscmp (_String1="Acroform.SUO", _String2="..") returned 1 [0153.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60bd0 [0153.399] wcscpy (in: _Dest=0x7a60bd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.399] wcscat (in: _Dest=0x7a60bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.399] wcscat (in: _Dest=0x7a60bd0, _Source="Acroform.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" [0153.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34 [0153.400] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SUO", cAlternateFileName="ADOBEC~1.SUO")) returned 1 [0153.401] wcscmp (_String1="AdobeCollabSync.SUO", _String2=".") returned 1 [0153.401] wcscmp (_String1="AdobeCollabSync.SUO", _String2="..") returned 1 [0153.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62f90 [0153.401] wcscpy (in: _Dest=0x7a62f90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.401] wcscat (in: _Dest=0x7a62f90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.401] wcscat (in: _Dest=0x7a62f90, _Source="AdobeCollabSync.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" [0153.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38 [0153.402] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x77800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SUO", cAlternateFileName="")) returned 1 [0153.402] wcscmp (_String1="Annots.SUO", _String2=".") returned 1 [0153.402] wcscmp (_String1="Annots.SUO", _String2="..") returned 1 [0153.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60240 [0153.403] wcscpy (in: _Dest=0x7a60240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.403] wcscat (in: _Dest=0x7a60240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.403] wcscat (in: _Dest=0x7a60240, _Source="Annots.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" [0153.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40 [0153.405] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SUO", cAlternateFileName="BRDLAN~1.SUO")) returned 1 [0153.405] wcscmp (_String1="BRdlang32.SUO", _String2=".") returned 1 [0153.405] wcscmp (_String1="BRdlang32.SUO", _String2="..") returned 1 [0153.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6310 [0153.405] wcscpy (in: _Dest=0x3eb6310, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.405] wcscat (in: _Dest=0x3eb6310, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.405] wcscat (in: _Dest=0x3eb6310, _Source="BRdlang32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" [0153.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4 [0153.407] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SUO", cAlternateFileName="")) returned 1 [0153.407] wcscmp (_String1="Checkers.SUO", _String2=".") returned 1 [0153.407] wcscmp (_String1="Checkers.SUO", _String2="..") returned 1 [0153.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a602d0 [0153.407] wcscpy (in: _Dest=0x7a602d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.407] wcscat (in: _Dest=0x7a602d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.407] wcscat (in: _Dest=0x7a602d0, _Source="Checkers.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" [0153.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a602d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d4 [0153.408] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SUO", cAlternateFileName="")) returned 1 [0153.408] wcscmp (_String1="DigSig.SUO", _String2=".") returned 1 [0153.409] wcscmp (_String1="DigSig.SUO", _String2="..") returned 1 [0153.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a603f0 [0153.409] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.409] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.409] wcscat (in: _Dest=0x7a603f0, _Source="DigSig.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" [0153.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a603f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c8 [0153.410] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SUO", cAlternateFileName="")) returned 1 [0153.410] wcscmp (_String1="DVA.SUO", _String2=".") returned 1 [0153.410] wcscmp (_String1="DVA.SUO", _String2="..") returned 1 [0153.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3bd40 [0153.411] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.411] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.411] wcscat (in: _Dest=0x3f3bd40, _Source="DVA.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" [0153.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c [0153.412] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SUO", cAlternateFileName="")) returned 1 [0153.412] wcscmp (_String1="eBook.SUO", _String2=".") returned 1 [0153.413] wcscmp (_String1="eBook.SUO", _String2="..") returned 1 [0153.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60510 [0153.413] wcscpy (in: _Dest=0x7a60510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.413] wcscat (in: _Dest=0x7a60510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.413] wcscat (in: _Dest=0x7a60510, _Source="eBook.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" [0153.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40 [0153.414] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SUO", cAlternateFileName="")) returned 1 [0153.414] wcscmp (_String1="EScript.SUO", _String2=".") returned 1 [0153.414] wcscmp (_String1="EScript.SUO", _String2="..") returned 1 [0153.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a605a0 [0153.415] wcscpy (in: _Dest=0x7a605a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.415] wcscat (in: _Dest=0x7a605a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.415] wcscat (in: _Dest=0x7a605a0, _Source="EScript.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" [0153.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a605a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54 [0153.416] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SUO", cAlternateFileName="")) returned 1 [0153.416] wcscmp (_String1="IA32.SUO", _String2=".") returned 1 [0153.416] wcscmp (_String1="IA32.SUO", _String2="..") returned 1 [0153.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0153.417] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.417] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.417] wcscat (in: _Dest=0x3f3bdc8, _Source="IA32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" [0153.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48 [0153.419] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SUO", cAlternateFileName="MAKEAC~1.SUO")) returned 1 [0153.419] wcscmp (_String1="makeaccessible.SUO", _String2=".") returned 1 [0153.419] wcscmp (_String1="makeaccessible.SUO", _String2="..") returned 1 [0153.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62a90 [0153.419] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.419] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.419] wcscat (in: _Dest=0x7a62a90, _Source="makeaccessible.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" [0153.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c8 [0153.421] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2a2600, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SUO", cAlternateFileName="MULTIM~1.SUO")) returned 1 [0153.421] wcscmp (_String1="Multimedia.SUO", _String2=".") returned 1 [0153.421] wcscmp (_String1="Multimedia.SUO", _String2="..") returned 1 [0153.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64ed0 [0153.421] wcscpy (in: _Dest=0x7a64ed0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.421] wcscat (in: _Dest=0x7a64ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.421] wcscat (in: _Dest=0x7a64ed0, _Source="Multimedia.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" [0153.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4 [0153.423] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6809c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SUO", cAlternateFileName="")) returned 1 [0153.423] wcscmp (_String1="pddom.SUO", _String2=".") returned 1 [0153.423] wcscmp (_String1="pddom.SUO", _String2="..") returned 1 [0153.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60750 [0153.423] wcscpy (in: _Dest=0x7a60750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.423] wcscat (in: _Dest=0x7a60750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.423] wcscat (in: _Dest=0x7a60750, _Source="pddom.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" [0153.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84 [0153.424] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SUO", cAlternateFileName="")) returned 1 [0153.424] wcscmp (_String1="PPKLITE.SUO", _String2=".") returned 1 [0153.424] wcscmp (_String1="PPKLITE.SUO", _String2="..") returned 1 [0153.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a607e0 [0153.425] wcscpy (in: _Dest=0x7a607e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.425] wcscat (in: _Dest=0x7a607e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.425] wcscat (in: _Dest=0x7a607e0, _Source="PPKLITE.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" [0153.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a607e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e0 [0153.426] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc67d160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SUO", cAlternateFileName="")) returned 1 [0153.426] wcscmp (_String1="RdLang32.SUO", _String2=".") returned 1 [0153.426] wcscmp (_String1="RdLang32.SUO", _String2="..") returned 1 [0153.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60870 [0153.426] wcscpy (in: _Dest=0x7a60870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.426] wcscat (in: _Dest=0x7a60870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.426] wcscat (in: _Dest=0x7a60870, _Source="RdLang32.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" [0153.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba4 [0153.428] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SUO", cAlternateFileName="READOU~1.SUO")) returned 1 [0153.428] wcscmp (_String1="ReadOutLoud.SUO", _String2=".") returned 1 [0153.428] wcscmp (_String1="ReadOutLoud.SUO", _String2="..") returned 1 [0153.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a65980 [0153.428] wcscpy (in: _Dest=0x7a65980, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.428] wcscat (in: _Dest=0x7a65980, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.428] wcscat (in: _Dest=0x7a65980, _Source="ReadOutLoud.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" [0153.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c [0153.430] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SUO", cAlternateFileName="")) returned 1 [0153.430] wcscmp (_String1="reflow.SUO", _String2=".") returned 1 [0153.430] wcscmp (_String1="reflow.SUO", _String2="..") returned 1 [0153.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60990 [0153.430] wcscpy (in: _Dest=0x7a60990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.430] wcscat (in: _Dest=0x7a60990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.430] wcscat (in: _Dest=0x7a60990, _Source="reflow.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" [0153.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08 [0153.432] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SUO", cAlternateFileName="SAVEAS~1.SUO")) returned 1 [0153.432] wcscmp (_String1="SaveAsRTF.SUO", _String2=".") returned 1 [0153.432] wcscmp (_String1="SaveAsRTF.SUO", _String2="..") returned 1 [0153.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a658e8 [0153.432] wcscpy (in: _Dest=0x7a658e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.432] wcscat (in: _Dest=0x7a658e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.432] wcscat (in: _Dest=0x7a658e8, _Source="SaveAsRTF.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" [0153.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a658e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f70 [0153.433] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SUO", cAlternateFileName="")) returned 1 [0153.433] wcscmp (_String1="Search.SUO", _String2=".") returned 1 [0153.433] wcscmp (_String1="Search.SUO", _String2="..") returned 1 [0153.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60360 [0153.433] wcscpy (in: _Dest=0x7a60360, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.433] wcscat (in: _Dest=0x7a60360, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.433] wcscat (in: _Dest=0x7a60360, _Source="Search.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" [0153.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8 [0153.990] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe106dcc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SUO", cAlternateFileName="")) returned 1 [0153.990] wcscmp (_String1="SendMail.SUO", _String2=".") returned 1 [0153.990] wcscmp (_String1="SendMail.SUO", _String2="..") returned 1 [0153.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a614d0 [0153.990] wcscpy (in: _Dest=0x7a614d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0153.990] wcscat (in: _Dest=0x7a614d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0153.990] wcscat (in: _Dest=0x7a614d0, _Source="SendMail.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" [0158.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a614d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0158.667] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0158.667] wcscmp (_String1="Services", _String2=".") returned 1 [0158.667] wcscmp (_String1="Services", _String2="..") returned 1 [0158.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062c30 [0158.667] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0158.667] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0158.667] wcscat (in: _Dest=0x3062c30, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0158.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0158.669] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SUO", cAlternateFileName="")) returned 1 [0158.669] wcscmp (_String1="Spelling.SUO", _String2=".") returned 1 [0158.669] wcscmp (_String1="Spelling.SUO", _String2="..") returned 1 [0158.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45c80 [0158.669] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0158.669] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0158.669] wcscat (in: _Dest=0x3d45c80, _Source="Spelling.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" [0158.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0158.670] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SUO", cAlternateFileName="")) returned 1 [0158.670] wcscmp (_String1="updater.SUO", _String2=".") returned 1 [0158.670] wcscmp (_String1="updater.SUO", _String2="..") returned 1 [0158.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45650 [0158.671] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0158.671] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0158.671] wcscat (in: _Dest=0x3d45650, _Source="updater.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" [0158.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0158.672] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 1 [0158.672] wcscmp (_String1="Weblink.SUO", _String2=".") returned 1 [0158.672] wcscmp (_String1="Weblink.SUO", _String2="..") returned 1 [0158.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45da0 [0158.672] wcscpy (in: _Dest=0x3d45da0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI" [0158.672] wcscat (in: _Dest=0x3d45da0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\" [0158.672] wcscat (in: _Dest=0x3d45da0, _Source="Weblink.SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" [0158.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0158.673] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1047b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 0 [0158.674] FindClose (in: hFindFile=0x3e734b0 | out: hFindFile=0x3e734b0) returned 1 [0158.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0158.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 [0158.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 Thread: id = 2104 os_tid = 0x20c [0148.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5ef0 [0148.910] wcscpy (in: _Dest=0x3da5ef0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0148.910] wcscat (in: _Dest=0x3da5ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0148.910] wcscat (in: _Dest=0x3da5ef0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*" [0148.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0148.910] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0151.681] wcscmp (_String1=".", _String2=".") returned 0 [0151.681] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.681] wcscmp (_String1="..", _String2=".") returned 1 [0151.681] wcscmp (_String1="..", _String2="..") returned 0 [0151.681] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.FRA", cAlternateFileName="ACCESS~1.FRA")) returned 1 [0151.681] wcscmp (_String1="accessibility.FRA", _String2=".") returned 1 [0151.681] wcscmp (_String1="accessibility.FRA", _String2="..") returned 1 [0151.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63b70 [0151.681] wcscpy (in: _Dest=0x7a63b70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0151.681] wcscat (in: _Dest=0x7a63b70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0151.681] wcscat (in: _Dest=0x7a63b70, _Source="accessibility.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" [0168.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0168.319] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.FRA", cAlternateFileName="")) returned 1 [0168.319] wcscmp (_String1="Acroform.FRA", _String2=".") returned 1 [0168.319] wcscmp (_String1="Acroform.FRA", _String2="..") returned 1 [0168.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45f50 [0168.319] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.319] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.319] wcscat (in: _Dest=0x3d45f50, _Source="Acroform.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" [0168.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0168.320] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.FRA", cAlternateFileName="ADOBEC~1.FRA")) returned 1 [0168.320] wcscmp (_String1="AdobeCollabSync.FRA", _String2=".") returned 1 [0168.320] wcscmp (_String1="AdobeCollabSync.FRA", _String2="..") returned 1 [0168.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a630d0 [0168.320] wcscpy (in: _Dest=0x7a630d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.320] wcscat (in: _Dest=0x7a630d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.320] wcscat (in: _Dest=0x7a630d0, _Source="AdobeCollabSync.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" [0168.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a630d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0168.321] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1093e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.FRA", cAlternateFileName="")) returned 1 [0168.321] wcscmp (_String1="Annots.FRA", _String2=".") returned 1 [0168.321] wcscmp (_String1="Annots.FRA", _String2="..") returned 1 [0168.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45ad0 [0168.321] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.321] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.321] wcscat (in: _Dest=0x3d45ad0, _Source="Annots.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" [0168.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0168.322] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.FRA", cAlternateFileName="BRDLAN~1.FRA")) returned 1 [0168.322] wcscmp (_String1="BRdlang32.FRA", _String2=".") returned 1 [0168.322] wcscmp (_String1="BRdlang32.FRA", _String2="..") returned 1 [0168.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6dc8 [0168.322] wcscpy (in: _Dest=0x7ad6dc8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.322] wcscat (in: _Dest=0x7ad6dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.322] wcscat (in: _Dest=0x7ad6dc8, _Source="BRdlang32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" [0168.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0168.324] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.FRA", cAlternateFileName="")) returned 1 [0168.324] wcscmp (_String1="Checkers.FRA", _String2=".") returned 1 [0168.324] wcscmp (_String1="Checkers.FRA", _String2="..") returned 1 [0168.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44600 [0168.324] wcscpy (in: _Dest=0x3d44600, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.324] wcscat (in: _Dest=0x3d44600, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.324] wcscat (in: _Dest=0x3d44600, _Source="Checkers.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" [0168.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0168.325] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.FRA", cAlternateFileName="")) returned 1 [0168.325] wcscmp (_String1="DigSig.FRA", _String2=".") returned 1 [0168.325] wcscmp (_String1="DigSig.FRA", _String2="..") returned 1 [0168.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45020 [0168.325] wcscpy (in: _Dest=0x3d45020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.325] wcscat (in: _Dest=0x3d45020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.325] wcscat (in: _Dest=0x3d45020, _Source="DigSig.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" [0168.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0168.326] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.FRA", cAlternateFileName="")) returned 1 [0168.326] wcscmp (_String1="DVA.FRA", _String2=".") returned 1 [0168.326] wcscmp (_String1="DVA.FRA", _String2="..") returned 1 [0168.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3062c30 [0168.326] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.327] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.327] wcscat (in: _Dest=0x3062c30, _Source="DVA.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" [0168.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0168.328] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.FRA", cAlternateFileName="")) returned 1 [0168.328] wcscmp (_String1="eBook.FRA", _String2=".") returned 1 [0168.328] wcscmp (_String1="eBook.FRA", _String2="..") returned 1 [0168.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d459b0 [0168.328] wcscpy (in: _Dest=0x3d459b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.328] wcscat (in: _Dest=0x3d459b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.328] wcscat (in: _Dest=0x3d459b0, _Source="eBook.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" [0168.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d459b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0168.329] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.fra", cAlternateFileName="")) returned 1 [0168.329] wcscmp (_String1="EScript.fra", _String2=".") returned 1 [0168.329] wcscmp (_String1="EScript.fra", _String2="..") returned 1 [0168.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45ec0 [0168.329] wcscpy (in: _Dest=0x3d45ec0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.329] wcscat (in: _Dest=0x3d45ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.329] wcscat (in: _Dest=0x3d45ec0, _Source="EScript.fra" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" [0168.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0168.330] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.FRA", cAlternateFileName="")) returned 1 [0168.330] wcscmp (_String1="IA32.FRA", _String2=".") returned 1 [0168.330] wcscmp (_String1="IA32.FRA", _String2="..") returned 1 [0168.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062988 [0168.330] wcscpy (in: _Dest=0x3062988, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.330] wcscat (in: _Dest=0x3062988, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.330] wcscat (in: _Dest=0x3062988, _Source="IA32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" [0168.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0168.333] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.FRA", cAlternateFileName="MAKEAC~1.FRA")) returned 1 [0168.333] wcscmp (_String1="makeaccessible.FRA", _String2=".") returned 1 [0168.333] wcscmp (_String1="makeaccessible.FRA", _String2="..") returned 1 [0168.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62ef0 [0168.333] wcscpy (in: _Dest=0x7a62ef0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.333] wcscat (in: _Dest=0x7a62ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.333] wcscat (in: _Dest=0x7a62ef0, _Source="makeaccessible.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" [0168.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0168.334] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.FRA", cAlternateFileName="MULTIM~1.FRA")) returned 1 [0168.334] wcscmp (_String1="Multimedia.FRA", _String2=".") returned 1 [0168.334] wcscmp (_String1="Multimedia.FRA", _String2="..") returned 1 [0168.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6c98 [0168.334] wcscpy (in: _Dest=0x7ad6c98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.334] wcscat (in: _Dest=0x7ad6c98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.334] wcscat (in: _Dest=0x7ad6c98, _Source="Multimedia.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" [0168.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0168.336] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.FRA", cAlternateFileName="")) returned 1 [0168.336] wcscmp (_String1="pddom.FRA", _String2=".") returned 1 [0168.336] wcscmp (_String1="pddom.FRA", _String2="..") returned 1 [0168.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45410 [0168.336] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.336] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.336] wcscat (in: _Dest=0x3d45410, _Source="pddom.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" [0168.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0168.337] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x88000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.FRA", cAlternateFileName="")) returned 1 [0168.337] wcscmp (_String1="PPKLITE.FRA", _String2=".") returned 1 [0168.337] wcscmp (_String1="PPKLITE.FRA", _String2="..") returned 1 [0168.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45650 [0168.337] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.337] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.337] wcscat (in: _Dest=0x3d45650, _Source="PPKLITE.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" [0168.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0168.338] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb691e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.FRA", cAlternateFileName="")) returned 1 [0168.338] wcscmp (_String1="RdLang32.FRA", _String2=".") returned 1 [0168.338] wcscmp (_String1="RdLang32.FRA", _String2="..") returned 1 [0168.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d444e0 [0168.339] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.339] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.339] wcscat (in: _Dest=0x3d444e0, _Source="RdLang32.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" [0168.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0168.348] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.FRA", cAlternateFileName="READOU~1.FRA")) returned 1 [0168.348] wcscmp (_String1="ReadOutLoud.FRA", _String2=".") returned 1 [0168.348] wcscmp (_String1="ReadOutLoud.FRA", _String2="..") returned 1 [0168.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6908 [0168.348] wcscpy (in: _Dest=0x7ad6908, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.348] wcscat (in: _Dest=0x7ad6908, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.348] wcscat (in: _Dest=0x7ad6908, _Source="ReadOutLoud.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" [0168.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0168.350] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.FRA", cAlternateFileName="")) returned 1 [0168.350] wcscmp (_String1="reflow.FRA", _String2=".") returned 1 [0168.350] wcscmp (_String1="reflow.FRA", _String2="..") returned 1 [0168.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44f90 [0168.350] wcscpy (in: _Dest=0x3d44f90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.350] wcscat (in: _Dest=0x3d44f90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.350] wcscat (in: _Dest=0x3d44f90, _Source="reflow.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" [0168.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0168.351] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.FRA", cAlternateFileName="SAVEAS~1.FRA")) returned 1 [0168.351] wcscmp (_String1="SaveAsRTF.FRA", _String2=".") returned 1 [0168.351] wcscmp (_String1="SaveAsRTF.FRA", _String2="..") returned 1 [0168.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad60b8 [0168.352] wcscpy (in: _Dest=0x7ad60b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.352] wcscat (in: _Dest=0x7ad60b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.352] wcscat (in: _Dest=0x7ad60b8, _Source="SaveAsRTF.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" [0168.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad60b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c [0168.353] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.FRA", cAlternateFileName="")) returned 1 [0168.353] wcscmp (_String1="Search.FRA", _String2=".") returned 1 [0168.353] wcscmp (_String1="Search.FRA", _String2="..") returned 1 [0168.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45920 [0168.353] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.353] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.353] wcscat (in: _Dest=0x3d45920, _Source="Search.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" [0168.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0168.355] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe138d9a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.fra", cAlternateFileName="")) returned 1 [0168.355] wcscmp (_String1="SendMail.fra", _String2=".") returned 1 [0168.355] wcscmp (_String1="SendMail.fra", _String2="..") returned 1 [0168.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45a40 [0168.355] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.355] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.355] wcscat (in: _Dest=0x3d45a40, _Source="SendMail.fra" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" [0168.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0168.356] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0168.356] wcscmp (_String1="Services", _String2=".") returned 1 [0168.356] wcscmp (_String1="Services", _String2="..") returned 1 [0168.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x30633a0 [0168.356] wcscpy (in: _Dest=0x30633a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.356] wcscat (in: _Dest=0x30633a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.356] wcscat (in: _Dest=0x30633a0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0168.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30633a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0168.358] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.FRA", cAlternateFileName="")) returned 1 [0168.358] wcscmp (_String1="Spelling.FRA", _String2=".") returned 1 [0168.358] wcscmp (_String1="Spelling.FRA", _String2="..") returned 1 [0168.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44720 [0168.358] wcscpy (in: _Dest=0x3d44720, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.358] wcscat (in: _Dest=0x3d44720, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.358] wcscat (in: _Dest=0x3d44720, _Source="Spelling.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" [0168.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0168.359] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.FRA", cAlternateFileName="")) returned 1 [0168.359] wcscmp (_String1="updater.FRA", _String2=".") returned 1 [0168.359] wcscmp (_String1="updater.FRA", _String2="..") returned 1 [0168.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44840 [0168.359] wcscpy (in: _Dest=0x3d44840, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.359] wcscat (in: _Dest=0x3d44840, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.359] wcscat (in: _Dest=0x3d44840, _Source="updater.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" [0168.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0168.361] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 1 [0168.361] wcscmp (_String1="Weblink.FRA", _String2=".") returned 1 [0168.361] wcscmp (_String1="Weblink.FRA", _String2="..") returned 1 [0168.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61cb0 [0168.361] wcscpy (in: _Dest=0x7a61cb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR" [0168.361] wcscat (in: _Dest=0x7a61cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\" [0168.361] wcscat (in: _Dest=0x7a61cb0, _Source="Weblink.FRA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" [0168.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0168.363] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.FRA", cAlternateFileName="")) returned 0 [0168.363] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0168.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0168.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ef0) returned 1 [0168.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 Thread: id = 2105 os_tid = 0x410 [0148.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5bf0 [0148.911] wcscpy (in: _Dest=0x3da5bf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0148.911] wcscat (in: _Dest=0x3da5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0148.911] wcscat (in: _Dest=0x3da5bf0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*" [0148.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0148.911] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73e30 [0151.674] wcscmp (_String1=".", _String2=".") returned 0 [0151.674] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1b23fc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.674] wcscmp (_String1="..", _String2=".") returned 1 [0151.674] wcscmp (_String1="..", _String2="..") returned 0 [0151.674] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.HRV", cAlternateFileName="ACCESS~1.HRV")) returned 1 [0151.674] wcscmp (_String1="Accessibility.HRV", _String2=".") returned 1 [0151.674] wcscmp (_String1="Accessibility.HRV", _String2="..") returned 1 [0151.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a637b0 [0151.675] wcscpy (in: _Dest=0x7a637b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0151.675] wcscat (in: _Dest=0x7a637b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0151.675] wcscat (in: _Dest=0x7a637b0, _Source="Accessibility.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" [0165.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a637b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0165.978] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HRV", cAlternateFileName="")) returned 1 [0165.978] wcscmp (_String1="Acroform.HRV", _String2=".") returned 1 [0165.978] wcscmp (_String1="Acroform.HRV", _String2="..") returned 1 [0165.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d447b0 [0165.978] wcscpy (in: _Dest=0x3d447b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0165.978] wcscat (in: _Dest=0x3d447b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0165.978] wcscat (in: _Dest=0x3d447b0, _Source="Acroform.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" [0165.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d447b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0165.979] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HRV", cAlternateFileName="ADOBEC~1.HRV")) returned 1 [0165.979] wcscmp (_String1="AdobeCollabSync.HRV", _String2=".") returned 1 [0165.980] wcscmp (_String1="AdobeCollabSync.HRV", _String2="..") returned 1 [0165.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63c10 [0165.980] wcscpy (in: _Dest=0x7a63c10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0165.980] wcscat (in: _Dest=0x7a63c10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0165.980] wcscat (in: _Dest=0x7a63c10, _Source="AdobeCollabSync.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" [0165.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0165.998] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HRV", cAlternateFileName="")) returned 1 [0165.998] wcscmp (_String1="Annots.HRV", _String2=".") returned 1 [0165.998] wcscmp (_String1="Annots.HRV", _String2="..") returned 1 [0165.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d440f0 [0165.998] wcscpy (in: _Dest=0x3d440f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0165.998] wcscat (in: _Dest=0x3d440f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0165.998] wcscat (in: _Dest=0x3d440f0, _Source="Annots.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" [0165.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d440f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0166.000] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HRV", cAlternateFileName="BRDLAN~1.HRV")) returned 1 [0166.000] wcscmp (_String1="BRdlang32.HRV", _String2=".") returned 1 [0166.000] wcscmp (_String1="BRdlang32.HRV", _String2="..") returned 1 [0166.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6150 [0166.000] wcscpy (in: _Dest=0x7ad6150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.000] wcscat (in: _Dest=0x7ad6150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.000] wcscat (in: _Dest=0x7ad6150, _Source="BRdlang32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" [0166.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0166.001] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HRV", cAlternateFileName="")) returned 1 [0166.001] wcscmp (_String1="Checkers.HRV", _String2=".") returned 1 [0166.002] wcscmp (_String1="Checkers.HRV", _String2="..") returned 1 [0166.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45140 [0166.002] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.002] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.002] wcscat (in: _Dest=0x3d45140, _Source="Checkers.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" [0166.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0166.003] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HRV", cAlternateFileName="")) returned 1 [0166.003] wcscmp (_String1="DigSig.HRV", _String2=".") returned 1 [0166.003] wcscmp (_String1="DigSig.HRV", _String2="..") returned 1 [0166.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44cc0 [0166.003] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.003] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.004] wcscat (in: _Dest=0x3d44cc0, _Source="DigSig.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" [0166.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0166.005] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HRV", cAlternateFileName="")) returned 1 [0166.005] wcscmp (_String1="DVA.HRV", _String2=".") returned 1 [0166.005] wcscmp (_String1="DVA.HRV", _String2="..") returned 1 [0166.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8e78 [0166.006] wcscpy (in: _Dest=0x3eb8e78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.006] wcscat (in: _Dest=0x3eb8e78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.006] wcscat (in: _Dest=0x3eb8e78, _Source="DVA.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" [0166.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0166.007] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HRV", cAlternateFileName="")) returned 1 [0166.007] wcscmp (_String1="eBook.HRV", _String2=".") returned 1 [0166.007] wcscmp (_String1="eBook.HRV", _String2="..") returned 1 [0166.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d455c0 [0166.007] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.007] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.008] wcscat (in: _Dest=0x3d455c0, _Source="eBook.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" [0166.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0166.009] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HRV", cAlternateFileName="")) returned 1 [0166.009] wcscmp (_String1="EScript.HRV", _String2=".") returned 1 [0166.009] wcscmp (_String1="EScript.HRV", _String2="..") returned 1 [0166.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44f00 [0166.009] wcscpy (in: _Dest=0x3d44f00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.009] wcscat (in: _Dest=0x3d44f00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.009] wcscat (in: _Dest=0x3d44f00, _Source="EScript.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" [0166.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0166.011] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a3f780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HRV", cAlternateFileName="")) returned 1 [0166.011] wcscmp (_String1="IA32.HRV", _String2=".") returned 1 [0166.011] wcscmp (_String1="IA32.HRV", _String2="..") returned 1 [0166.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb93c8 [0166.011] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.011] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.011] wcscat (in: _Dest=0x3eb93c8, _Source="IA32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" [0166.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c [0166.012] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa5ed80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.HRV", cAlternateFileName="MAKEAC~1.HRV")) returned 1 [0166.012] wcscmp (_String1="MakeAccessible.HRV", _String2=".") returned 1 [0166.012] wcscmp (_String1="MakeAccessible.HRV", _String2="..") returned 1 [0166.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62e50 [0166.012] wcscpy (in: _Dest=0x7a62e50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.013] wcscat (in: _Dest=0x7a62e50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.013] wcscat (in: _Dest=0x7a62e50, _Source="MakeAccessible.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" [0166.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004 [0166.014] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HRV", cAlternateFileName="MULTIM~1.HRV")) returned 1 [0166.014] wcscmp (_String1="Multimedia.HRV", _String2=".") returned 1 [0166.014] wcscmp (_String1="Multimedia.HRV", _String2="..") returned 1 [0166.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6a38 [0166.014] wcscpy (in: _Dest=0x7ad6a38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.014] wcscat (in: _Dest=0x7ad6a38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.014] wcscat (in: _Dest=0x7ad6a38, _Source="Multimedia.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" [0166.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0166.016] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.HRV", cAlternateFileName="")) returned 1 [0166.016] wcscmp (_String1="PDDom.HRV", _String2=".") returned 1 [0166.016] wcscmp (_String1="PDDom.HRV", _String2="..") returned 1 [0166.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45800 [0166.016] wcscpy (in: _Dest=0x3d45800, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.016] wcscat (in: _Dest=0x3d45800, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.016] wcscat (in: _Dest=0x3d45800, _Source="PDDom.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" [0166.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0166.017] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.HRV", cAlternateFileName="")) returned 1 [0166.017] wcscmp (_String1="PPKLITE.HRV", _String2=".") returned 1 [0166.018] wcscmp (_String1="PPKLITE.HRV", _String2="..") returned 1 [0166.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44ba0 [0166.018] wcscpy (in: _Dest=0x3d44ba0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.018] wcscat (in: _Dest=0x3d44ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.018] wcscat (in: _Dest=0x3d44ba0, _Source="PPKLITE.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" [0166.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40 [0166.019] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd10d300, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HRV", cAlternateFileName="")) returned 1 [0166.019] wcscmp (_String1="RdLang32.HRV", _String2=".") returned 1 [0166.020] wcscmp (_String1="RdLang32.HRV", _String2="..") returned 1 [0166.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44960 [0166.020] wcscpy (in: _Dest=0x3d44960, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.020] wcscat (in: _Dest=0x3d44960, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.020] wcscat (in: _Dest=0x3d44960, _Source="RdLang32.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" [0166.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0166.021] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HRV", cAlternateFileName="READOU~1.HRV")) returned 1 [0166.021] wcscmp (_String1="ReadOutLoud.HRV", _String2=".") returned 1 [0166.021] wcscmp (_String1="ReadOutLoud.HRV", _String2="..") returned 1 [0166.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6b68 [0166.022] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.022] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.022] wcscat (in: _Dest=0x7ad6b68, _Source="ReadOutLoud.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" [0166.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0166.023] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.HRV", cAlternateFileName="")) returned 1 [0166.023] wcscmp (_String1="Reflow.HRV", _String2=".") returned 1 [0166.023] wcscmp (_String1="Reflow.HRV", _String2="..") returned 1 [0166.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45d10 [0166.024] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.024] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.024] wcscat (in: _Dest=0x3d45d10, _Source="Reflow.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" [0166.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0166.030] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HRV", cAlternateFileName="SAVEAS~1.HRV")) returned 1 [0166.030] wcscmp (_String1="SaveAsRTF.HRV", _String2=".") returned 1 [0166.030] wcscmp (_String1="SaveAsRTF.HRV", _String2="..") returned 1 [0166.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6740 [0166.031] wcscpy (in: _Dest=0x7ad6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.031] wcscat (in: _Dest=0x7ad6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.031] wcscat (in: _Dest=0x7ad6740, _Source="SaveAsRTF.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" [0166.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0166.032] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HRV", cAlternateFileName="")) returned 1 [0166.032] wcscmp (_String1="Search.HRV", _String2=".") returned 1 [0166.032] wcscmp (_String1="Search.HRV", _String2="..") returned 1 [0166.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60900 [0166.032] wcscpy (in: _Dest=0x7a60900, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.032] wcscat (in: _Dest=0x7a60900, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.032] wcscat (in: _Dest=0x7a60900, _Source="Search.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" [0166.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0166.033] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HRV", cAlternateFileName="")) returned 1 [0166.033] wcscmp (_String1="SendMail.HRV", _String2=".") returned 1 [0166.034] wcscmp (_String1="SendMail.HRV", _String2="..") returned 1 [0166.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61b90 [0166.034] wcscpy (in: _Dest=0x7a61b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.034] wcscat (in: _Dest=0x7a61b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.034] wcscat (in: _Dest=0x7a61b90, _Source="SendMail.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" [0166.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0166.035] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0166.035] wcscmp (_String1="Services", _String2=".") returned 1 [0166.035] wcscmp (_String1="Services", _String2="..") returned 1 [0166.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0166.035] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.035] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.035] wcscat (in: _Dest=0x3eb9b38, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0166.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0166.036] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HRV", cAlternateFileName="")) returned 1 [0166.036] wcscmp (_String1="Spelling.HRV", _String2=".") returned 1 [0166.036] wcscmp (_String1="Spelling.HRV", _String2="..") returned 1 [0166.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61710 [0166.037] wcscpy (in: _Dest=0x7a61710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.037] wcscat (in: _Dest=0x7a61710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.037] wcscat (in: _Dest=0x7a61710, _Source="Spelling.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" [0166.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0166.333] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.HRV", cAlternateFileName="")) returned 1 [0166.333] wcscmp (_String1="Updater.HRV", _String2=".") returned 1 [0166.333] wcscmp (_String1="Updater.HRV", _String2="..") returned 1 [0166.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45b60 [0166.333] wcscpy (in: _Dest=0x3d45b60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.333] wcscat (in: _Dest=0x3d45b60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.333] wcscat (in: _Dest=0x3d45b60, _Source="Updater.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" [0166.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0166.674] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 1 [0166.674] wcscmp (_String1="Weblink.HRV", _String2=".") returned 1 [0166.674] wcscmp (_String1="Weblink.HRV", _String2="..") returned 1 [0166.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d442a0 [0166.675] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR" [0166.675] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\" [0166.675] wcscat (in: _Dest=0x3d442a0, _Source="Weblink.HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" [0166.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0166.676] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.HRV", cAlternateFileName="")) returned 0 [0167.342] FindClose (in: hFindFile=0x3e73e30 | out: hFindFile=0x3e73e30) returned 1 [0169.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0169.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5bf0) returned 1 [0169.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 Thread: id = 2106 os_tid = 0xb0c [0148.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da65f0 [0148.911] wcscpy (in: _Dest=0x3da65f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0148.911] wcscat (in: _Dest=0x3da65f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0148.911] wcscat (in: _Dest=0x3da65f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*" [0148.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0148.912] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0151.682] wcscmp (_String1=".", _String2=".") returned 0 [0151.682] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda3acfa0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.682] wcscmp (_String1="..", _String2=".") returned 1 [0151.682] wcscmp (_String1="..", _String2="..") returned 0 [0151.682] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.HUN", cAlternateFileName="ACCESS~1.HUN")) returned 1 [0151.682] wcscmp (_String1="accessibility.HUN", _String2=".") returned 1 [0151.682] wcscmp (_String1="accessibility.HUN", _String2="..") returned 1 [0151.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63c10 [0151.682] wcscpy (in: _Dest=0x7a63c10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0151.682] wcscat (in: _Dest=0x7a63c10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0151.682] wcscat (in: _Dest=0x7a63c10, _Source="accessibility.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" [0161.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0161.637] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x68600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.HUN", cAlternateFileName="")) returned 1 [0161.638] wcscmp (_String1="Acroform.HUN", _String2=".") returned 1 [0161.638] wcscmp (_String1="Acroform.HUN", _String2="..") returned 1 [0161.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61b00 [0161.638] wcscpy (in: _Dest=0x7a61b00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.638] wcscat (in: _Dest=0x7a61b00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.638] wcscat (in: _Dest=0x7a61b00, _Source="Acroform.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" [0161.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0161.639] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.HUN", cAlternateFileName="ADOBEC~1.HUN")) returned 1 [0161.639] wcscmp (_String1="AdobeCollabSync.HUN", _String2=".") returned 1 [0161.639] wcscmp (_String1="AdobeCollabSync.HUN", _String2="..") returned 1 [0161.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62e50 [0161.639] wcscpy (in: _Dest=0x7a62e50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.639] wcscat (in: _Dest=0x7a62e50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.639] wcscat (in: _Dest=0x7a62e50, _Source="AdobeCollabSync.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" [0161.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0161.641] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1b23fc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.HUN", cAlternateFileName="")) returned 1 [0161.641] wcscmp (_String1="Annots.HUN", _String2=".") returned 1 [0161.641] wcscmp (_String1="Annots.HUN", _String2="..") returned 1 [0161.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60c60 [0161.641] wcscpy (in: _Dest=0x7a60c60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.641] wcscat (in: _Dest=0x7a60c60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.641] wcscat (in: _Dest=0x7a60c60, _Source="Annots.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" [0161.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0161.642] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.HUN", cAlternateFileName="BRDLAN~1.HUN")) returned 1 [0161.642] wcscmp (_String1="BRdlang32.HUN", _String2=".") returned 1 [0161.642] wcscmp (_String1="BRdlang32.HUN", _String2="..") returned 1 [0161.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6150 [0161.642] wcscpy (in: _Dest=0x7ad6150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.642] wcscat (in: _Dest=0x7ad6150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.643] wcscat (in: _Dest=0x7ad6150, _Source="BRdlang32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" [0161.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0161.644] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.HUN", cAlternateFileName="")) returned 1 [0161.644] wcscmp (_String1="Checkers.HUN", _String2=".") returned 1 [0161.644] wcscmp (_String1="Checkers.HUN", _String2="..") returned 1 [0161.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60b40 [0161.644] wcscpy (in: _Dest=0x7a60b40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.644] wcscat (in: _Dest=0x7a60b40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.644] wcscat (in: _Dest=0x7a60b40, _Source="Checkers.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" [0161.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0161.645] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.HUN", cAlternateFileName="")) returned 1 [0161.645] wcscmp (_String1="DigSig.HUN", _String2=".") returned 1 [0161.645] wcscmp (_String1="DigSig.HUN", _String2="..") returned 1 [0161.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61830 [0161.645] wcscpy (in: _Dest=0x7a61830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.645] wcscat (in: _Dest=0x7a61830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.645] wcscat (in: _Dest=0x7a61830, _Source="DigSig.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" [0161.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0161.646] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19a7200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.HUN", cAlternateFileName="")) returned 1 [0161.647] wcscmp (_String1="DVA.HUN", _String2=".") returned 1 [0161.647] wcscmp (_String1="DVA.HUN", _String2="..") returned 1 [0161.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9450 [0161.647] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.647] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.647] wcscat (in: _Dest=0x3eb9450, _Source="DVA.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" [0161.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0161.648] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.HUN", cAlternateFileName="")) returned 1 [0161.648] wcscmp (_String1="eBook.HUN", _String2=".") returned 1 [0161.648] wcscmp (_String1="eBook.HUN", _String2="..") returned 1 [0161.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a617a0 [0161.648] wcscpy (in: _Dest=0x7a617a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.648] wcscat (in: _Dest=0x7a617a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.648] wcscat (in: _Dest=0x7a617a0, _Source="eBook.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" [0161.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a617a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0161.649] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.HUN", cAlternateFileName="")) returned 1 [0161.649] wcscmp (_String1="EScript.HUN", _String2=".") returned 1 [0161.649] wcscmp (_String1="EScript.HUN", _String2="..") returned 1 [0161.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61710 [0161.649] wcscpy (in: _Dest=0x7a61710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.649] wcscat (in: _Dest=0x7a61710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.649] wcscat (in: _Dest=0x7a61710, _Source="EScript.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" [0161.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0161.651] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.HUN", cAlternateFileName="")) returned 1 [0161.651] wcscmp (_String1="IA32.HUN", _String2=".") returned 1 [0161.651] wcscmp (_String1="IA32.HUN", _String2="..") returned 1 [0161.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba4c8 [0161.651] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.651] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.651] wcscat (in: _Dest=0x3eba4c8, _Source="IA32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" [0161.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0161.652] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda86fba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.HUN", cAlternateFileName="MAKEAC~1.HUN")) returned 1 [0161.652] wcscmp (_String1="makeaccessible.HUN", _String2=".") returned 1 [0161.652] wcscmp (_String1="makeaccessible.HUN", _String2="..") returned 1 [0161.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63ad0 [0161.652] wcscpy (in: _Dest=0x7a63ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.652] wcscat (in: _Dest=0x7a63ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.652] wcscat (in: _Dest=0x7a63ad0, _Source="makeaccessible.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" [0161.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c [0161.653] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda3acfa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.HUN", cAlternateFileName="MULTIM~1.HUN")) returned 1 [0161.654] wcscmp (_String1="Multimedia.HUN", _String2=".") returned 1 [0161.654] wcscmp (_String1="Multimedia.HUN", _String2="..") returned 1 [0161.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6a38 [0161.654] wcscpy (in: _Dest=0x7ad6a38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.654] wcscat (in: _Dest=0x7ad6a38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.654] wcscat (in: _Dest=0x7ad6a38, _Source="Multimedia.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" [0161.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0161.655] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.HUN", cAlternateFileName="")) returned 1 [0161.655] wcscmp (_String1="pddom.HUN", _String2=".") returned 1 [0161.655] wcscmp (_String1="pddom.HUN", _String2="..") returned 1 [0161.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61a70 [0161.655] wcscpy (in: _Dest=0x7a61a70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.655] wcscat (in: _Dest=0x7a61a70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.655] wcscat (in: _Dest=0x7a61a70, _Source="pddom.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" [0161.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0161.657] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.HUN", cAlternateFileName="")) returned 1 [0161.657] wcscmp (_String1="PPKLite.HUN", _String2=".") returned 1 [0161.657] wcscmp (_String1="PPKLite.HUN", _String2="..") returned 1 [0161.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60990 [0161.657] wcscpy (in: _Dest=0x7a60990, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.657] wcscat (in: _Dest=0x7a60990, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.657] wcscat (in: _Dest=0x7a60990, _Source="PPKLite.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" [0161.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0161.658] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd0c1040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x151a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.HUN", cAlternateFileName="")) returned 1 [0161.658] wcscmp (_String1="RdLang32.HUN", _String2=".") returned 1 [0161.658] wcscmp (_String1="RdLang32.HUN", _String2="..") returned 1 [0161.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a607e0 [0161.658] wcscpy (in: _Dest=0x7a607e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.658] wcscat (in: _Dest=0x7a607e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.658] wcscat (in: _Dest=0x7a607e0, _Source="RdLang32.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" [0161.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a607e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0161.660] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.HUN", cAlternateFileName="READOU~1.HUN")) returned 1 [0161.660] wcscmp (_String1="ReadOutLoud.HUN", _String2=".") returned 1 [0161.660] wcscmp (_String1="ReadOutLoud.HUN", _String2="..") returned 1 [0161.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6b68 [0161.660] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.660] wcscat (in: _Dest=0x7ad6b68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.660] wcscat (in: _Dest=0x7ad6b68, _Source="ReadOutLoud.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" [0161.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0161.661] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.HUN", cAlternateFileName="")) returned 1 [0161.661] wcscmp (_String1="reflow.HUN", _String2=".") returned 1 [0161.661] wcscmp (_String1="reflow.HUN", _String2="..") returned 1 [0161.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a618c0 [0161.662] wcscpy (in: _Dest=0x7a618c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.662] wcscat (in: _Dest=0x7a618c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.662] wcscat (in: _Dest=0x7a618c0, _Source="reflow.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" [0161.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a618c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0161.663] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.HUN", cAlternateFileName="SAVEAS~1.HUN")) returned 1 [0161.663] wcscmp (_String1="SaveAsRTF.HUN", _String2=".") returned 1 [0161.663] wcscmp (_String1="SaveAsRTF.HUN", _String2="..") returned 1 [0161.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6740 [0161.663] wcscpy (in: _Dest=0x7ad6740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.663] wcscat (in: _Dest=0x7ad6740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.664] wcscat (in: _Dest=0x7ad6740, _Source="SaveAsRTF.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" [0161.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0161.665] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.HUN", cAlternateFileName="")) returned 1 [0161.665] wcscmp (_String1="Search.HUN", _String2=".") returned 1 [0161.665] wcscmp (_String1="Search.HUN", _String2="..") returned 1 [0161.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61c20 [0161.665] wcscpy (in: _Dest=0x7a61c20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.665] wcscat (in: _Dest=0x7a61c20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.665] wcscat (in: _Dest=0x7a61c20, _Source="Search.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" [0161.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0161.666] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19cd360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.HUN", cAlternateFileName="")) returned 1 [0161.666] wcscmp (_String1="SendMail.HUN", _String2=".") returned 1 [0161.666] wcscmp (_String1="SendMail.HUN", _String2="..") returned 1 [0161.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61cb0 [0161.666] wcscpy (in: _Dest=0x7a61cb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.667] wcscat (in: _Dest=0x7a61cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.667] wcscat (in: _Dest=0x7a61cb0, _Source="SendMail.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" [0161.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0161.668] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0161.668] wcscmp (_String1="Services", _String2=".") returned 1 [0161.668] wcscmp (_String1="Services", _String2="..") returned 1 [0161.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9b38 [0161.668] wcscpy (in: _Dest=0x3eb9b38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.668] wcscat (in: _Dest=0x3eb9b38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.668] wcscat (in: _Dest=0x3eb9b38, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0161.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0161.670] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.HUN", cAlternateFileName="")) returned 1 [0161.670] wcscmp (_String1="Spelling.HUN", _String2=".") returned 1 [0161.670] wcscmp (_String1="Spelling.HUN", _String2="..") returned 1 [0161.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61d40 [0161.670] wcscpy (in: _Dest=0x7a61d40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.670] wcscat (in: _Dest=0x7a61d40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.670] wcscat (in: _Dest=0x7a61d40, _Source="Spelling.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" [0161.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0161.672] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.HUN", cAlternateFileName="")) returned 1 [0161.672] wcscmp (_String1="updater.HUN", _String2=".") returned 1 [0161.672] wcscmp (_String1="updater.HUN", _String2="..") returned 1 [0161.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61dd0 [0161.672] wcscpy (in: _Dest=0x7a61dd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.672] wcscat (in: _Dest=0x7a61dd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.672] wcscat (in: _Dest=0x7a61dd0, _Source="updater.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" [0161.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0161.673] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 1 [0161.674] wcscmp (_String1="WebLink.HUN", _String2=".") returned 1 [0161.674] wcscmp (_String1="WebLink.HUN", _String2="..") returned 1 [0161.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61e60 [0161.674] wcscpy (in: _Dest=0x7a61e60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU" [0161.674] wcscat (in: _Dest=0x7a61e60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\" [0161.674] wcscat (in: _Dest=0x7a61e60, _Source="WebLink.HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" [0161.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0162.124] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19f34c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.HUN", cAlternateFileName="")) returned 0 [0162.533] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0163.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0163.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 [0163.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 Thread: id = 2107 os_tid = 0xb14 [0148.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da6170 [0148.912] wcscpy (in: _Dest=0x3da6170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0148.912] wcscat (in: _Dest=0x3da6170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0148.912] wcscat (in: _Dest=0x3da6170, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*" [0148.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0148.912] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0151.683] wcscmp (_String1=".", _String2=".") returned 0 [0151.683] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd98d0b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.683] wcscmp (_String1="..", _String2=".") returned 1 [0151.683] wcscmp (_String1="..", _String2="..") returned 0 [0151.683] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ITA", cAlternateFileName="ACCESS~1.ITA")) returned 1 [0151.683] wcscmp (_String1="accessibility.ITA", _String2=".") returned 1 [0151.683] wcscmp (_String1="accessibility.ITA", _String2="..") returned 1 [0151.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63cb0 [0151.683] wcscpy (in: _Dest=0x7a63cb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0151.683] wcscat (in: _Dest=0x7a63cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0151.683] wcscat (in: _Dest=0x7a63cb0, _Source="accessibility.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" [0172.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0172.219] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f63320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ITA", cAlternateFileName="")) returned 1 [0172.219] wcscmp (_String1="Acroform.ITA", _String2=".") returned 1 [0172.219] wcscmp (_String1="Acroform.ITA", _String2="..") returned 1 [0172.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60a20 [0172.219] wcscpy (in: _Dest=0x7a60a20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.219] wcscat (in: _Dest=0x7a60a20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.219] wcscat (in: _Dest=0x7a60a20, _Source="Acroform.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" [0172.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0172.220] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ITA", cAlternateFileName="ADOBEC~1.ITA")) returned 1 [0172.220] wcscmp (_String1="AdobeCollabSync.ITA", _String2=".") returned 1 [0172.220] wcscmp (_String1="AdobeCollabSync.ITA", _String2="..") returned 1 [0172.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63530 [0172.220] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.220] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.220] wcscat (in: _Dest=0x7a63530, _Source="AdobeCollabSync.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" [0172.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0172.221] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ITA", cAlternateFileName="")) returned 1 [0172.221] wcscmp (_String1="Annots.ITA", _String2=".") returned 1 [0172.221] wcscmp (_String1="Annots.ITA", _String2="..") returned 1 [0172.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60bd0 [0172.221] wcscpy (in: _Dest=0x7a60bd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.221] wcscat (in: _Dest=0x7a60bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.221] wcscat (in: _Dest=0x7a60bd0, _Source="Annots.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" [0172.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0172.223] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ITA", cAlternateFileName="BRDLAN~1.ITA")) returned 1 [0172.223] wcscmp (_String1="BRdlang32.ITA", _String2=".") returned 1 [0172.223] wcscmp (_String1="BRdlang32.ITA", _String2="..") returned 1 [0172.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6150 [0172.223] wcscpy (in: _Dest=0x7ad6150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.223] wcscat (in: _Dest=0x7ad6150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.223] wcscat (in: _Dest=0x7ad6150, _Source="BRdlang32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" [0172.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0172.224] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ITA", cAlternateFileName="")) returned 1 [0172.224] wcscmp (_String1="Checkers.ITA", _String2=".") returned 1 [0172.224] wcscmp (_String1="Checkers.ITA", _String2="..") returned 1 [0172.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61b90 [0172.224] wcscpy (in: _Dest=0x7a61b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.224] wcscat (in: _Dest=0x7a61b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.224] wcscat (in: _Dest=0x7a61b90, _Source="Checkers.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" [0172.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0172.225] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ITA", cAlternateFileName="")) returned 1 [0172.225] wcscmp (_String1="DigSig.ITA", _String2=".") returned 1 [0172.225] wcscmp (_String1="DigSig.ITA", _String2="..") returned 1 [0172.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60900 [0172.225] wcscpy (in: _Dest=0x7a60900, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.225] wcscat (in: _Dest=0x7a60900, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.225] wcscat (in: _Dest=0x7a60900, _Source="DigSig.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" [0172.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0172.227] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ITA", cAlternateFileName="")) returned 1 [0172.227] wcscmp (_String1="DVA.ITA", _String2=".") returned 1 [0172.227] wcscmp (_String1="DVA.ITA", _String2="..") returned 1 [0172.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d638 [0172.227] wcscpy (in: _Dest=0x3f3d638, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.227] wcscat (in: _Dest=0x3f3d638, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.227] wcscat (in: _Dest=0x3f3d638, _Source="DVA.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" [0172.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0172.228] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ITA", cAlternateFileName="")) returned 1 [0172.228] wcscmp (_String1="eBook.ITA", _String2=".") returned 1 [0172.228] wcscmp (_String1="eBook.ITA", _String2="..") returned 1 [0172.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61710 [0172.228] wcscpy (in: _Dest=0x7a61710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.228] wcscat (in: _Dest=0x7a61710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.228] wcscat (in: _Dest=0x7a61710, _Source="eBook.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" [0172.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0172.229] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ITA", cAlternateFileName="")) returned 1 [0172.229] wcscmp (_String1="EScript.ITA", _String2=".") returned 1 [0172.229] wcscmp (_String1="EScript.ITA", _String2="..") returned 1 [0172.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60630 [0172.230] wcscpy (in: _Dest=0x7a60630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.230] wcscat (in: _Dest=0x7a60630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.230] wcscat (in: _Dest=0x7a60630, _Source="EScript.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" [0172.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0172.231] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ITA", cAlternateFileName="")) returned 1 [0172.231] wcscmp (_String1="IA32.ITA", _String2=".") returned 1 [0172.231] wcscmp (_String1="IA32.ITA", _String2="..") returned 1 [0172.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cf50 [0172.231] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.231] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.231] wcscat (in: _Dest=0x3f3cf50, _Source="IA32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" [0172.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0172.232] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ITA", cAlternateFileName="MAKEAC~1.ITA")) returned 1 [0172.232] wcscmp (_String1="makeaccessible.ITA", _String2=".") returned 1 [0172.232] wcscmp (_String1="makeaccessible.ITA", _String2="..") returned 1 [0172.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63fd0 [0172.232] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.232] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.232] wcscat (in: _Dest=0x7a63fd0, _Source="makeaccessible.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" [0172.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0172.234] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd98d0b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ITA", cAlternateFileName="MULTIM~1.ITA")) returned 1 [0172.234] wcscmp (_String1="Multimedia.ITA", _String2=".") returned 1 [0172.234] wcscmp (_String1="Multimedia.ITA", _String2="..") returned 1 [0172.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6a38 [0172.234] wcscpy (in: _Dest=0x7ad6a38, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.234] wcscat (in: _Dest=0x7ad6a38, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.234] wcscat (in: _Dest=0x7ad6a38, _Source="Multimedia.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" [0172.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0172.235] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ITA", cAlternateFileName="")) returned 1 [0172.235] wcscmp (_String1="pddom.ITA", _String2=".") returned 1 [0172.235] wcscmp (_String1="pddom.ITA", _String2="..") returned 1 [0172.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a603f0 [0172.235] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.235] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.235] wcscat (in: _Dest=0x7a603f0, _Source="pddom.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" [0172.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a603f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0172.236] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0faf5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ITA", cAlternateFileName="")) returned 1 [0172.236] wcscmp (_String1="PPKLITE.ITA", _String2=".") returned 1 [0172.236] wcscmp (_String1="PPKLITE.ITA", _String2="..") returned 1 [0172.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61b00 [0172.236] wcscpy (in: _Dest=0x7a61b00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.237] wcscat (in: _Dest=0x7a61b00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.237] wcscat (in: _Dest=0x7a61b00, _Source="PPKLITE.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" [0172.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0172.237] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb61fa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x157000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ITA", cAlternateFileName="")) returned 1 [0172.238] wcscmp (_String1="RdLang32.ITA", _String2=".") returned 1 [0172.238] wcscmp (_String1="RdLang32.ITA", _String2="..") returned 1 [0172.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60ab0 [0172.238] wcscpy (in: _Dest=0x7a60ab0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.238] wcscat (in: _Dest=0x7a60ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.238] wcscat (in: _Dest=0x7a60ab0, _Source="RdLang32.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" [0172.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0172.239] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ITA", cAlternateFileName="READOU~1.ITA")) returned 1 [0172.239] wcscmp (_String1="ReadOutLoud.ITA", _String2=".") returned 1 [0172.239] wcscmp (_String1="ReadOutLoud.ITA", _String2="..") returned 1 [0172.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad51e0 [0172.239] wcscpy (in: _Dest=0x7ad51e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.239] wcscat (in: _Dest=0x7ad51e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.239] wcscat (in: _Dest=0x7ad51e0, _Source="ReadOutLoud.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" [0172.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad51e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0172.240] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ITA", cAlternateFileName="")) returned 1 [0172.240] wcscmp (_String1="reflow.ITA", _String2=".") returned 1 [0172.240] wcscmp (_String1="reflow.ITA", _String2="..") returned 1 [0172.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61200 [0172.240] wcscpy (in: _Dest=0x7a61200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.240] wcscat (in: _Dest=0x7a61200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.240] wcscat (in: _Dest=0x7a61200, _Source="reflow.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" [0172.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0172.241] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ITA", cAlternateFileName="SAVEAS~1.ITA")) returned 1 [0172.241] wcscmp (_String1="SaveAsRTF.ITA", _String2=".") returned 1 [0172.241] wcscmp (_String1="SaveAsRTF.ITA", _String2="..") returned 1 [0172.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad54d8 [0172.241] wcscpy (in: _Dest=0x7ad54d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.241] wcscat (in: _Dest=0x7ad54d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.242] wcscat (in: _Dest=0x7ad54d8, _Source="SaveAsRTF.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" [0172.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad54d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0172.243] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0faf5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ITA", cAlternateFileName="")) returned 1 [0172.243] wcscmp (_String1="Search.ITA", _String2=".") returned 1 [0172.243] wcscmp (_String1="Search.ITA", _String2="..") returned 1 [0172.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60090 [0172.243] wcscpy (in: _Dest=0x7a60090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.243] wcscat (in: _Dest=0x7a60090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.243] wcscat (in: _Dest=0x7a60090, _Source="Search.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" [0172.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1964 [0172.245] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0faf5e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ITA", cAlternateFileName="")) returned 1 [0172.245] wcscmp (_String1="SendMail.ITA", _String2=".") returned 1 [0172.245] wcscmp (_String1="SendMail.ITA", _String2="..") returned 1 [0172.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60870 [0172.245] wcscpy (in: _Dest=0x7a60870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.245] wcscat (in: _Dest=0x7a60870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.245] wcscat (in: _Dest=0x7a60870, _Source="SendMail.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" [0172.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0172.246] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0172.246] wcscmp (_String1="Services", _String2=".") returned 1 [0172.246] wcscmp (_String1="Services", _String2="..") returned 1 [0172.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3db00 [0172.246] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.247] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.247] wcscat (in: _Dest=0x3f3db00, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0172.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0172.248] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ITA", cAlternateFileName="")) returned 1 [0172.248] wcscmp (_String1="Spelling.ITA", _String2=".") returned 1 [0172.248] wcscmp (_String1="Spelling.ITA", _String2="..") returned 1 [0172.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a615f0 [0172.248] wcscpy (in: _Dest=0x7a615f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.248] wcscat (in: _Dest=0x7a615f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.248] wcscat (in: _Dest=0x7a615f0, _Source="Spelling.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" [0172.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a615f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0172.249] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ITA", cAlternateFileName="")) returned 1 [0172.249] wcscmp (_String1="updater.ITA", _String2=".") returned 1 [0172.249] wcscmp (_String1="updater.ITA", _String2="..") returned 1 [0172.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60240 [0172.249] wcscpy (in: _Dest=0x7a60240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.249] wcscat (in: _Dest=0x7a60240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.249] wcscat (in: _Dest=0x7a60240, _Source="updater.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" [0172.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0172.250] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 1 [0172.250] wcscmp (_String1="Weblink.ITA", _String2=".") returned 1 [0172.250] wcscmp (_String1="Weblink.ITA", _String2="..") returned 1 [0172.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a605a0 [0172.250] wcscpy (in: _Dest=0x7a605a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT" [0172.251] wcscat (in: _Dest=0x7a605a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\" [0172.251] wcscat (in: _Dest=0x7a605a0, _Source="Weblink.ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" [0172.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a605a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0172.252] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0f89480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ITA", cAlternateFileName="")) returned 0 [0172.252] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0172.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0172.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6170) returned 1 [0172.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 Thread: id = 2108 os_tid = 0xb28 [0148.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5e70 [0148.913] wcscpy (in: _Dest=0x3da5e70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0148.913] wcscat (in: _Dest=0x3da5e70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0148.913] wcscat (in: _Dest=0x3da5e70, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*" [0148.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0148.913] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0151.683] wcscmp (_String1=".", _String2=".") returned 0 [0151.683] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15308c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.684] wcscmp (_String1="..", _String2=".") returned 1 [0151.684] wcscmp (_String1="..", _String2="..") returned 0 [0151.684] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.JPN", cAlternateFileName="ACCESS~1.JPN")) returned 1 [0151.684] wcscmp (_String1="accessibility.JPN", _String2=".") returned 1 [0151.684] wcscmp (_String1="accessibility.JPN", _String2="..") returned 1 [0151.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63d50 [0151.684] wcscpy (in: _Dest=0x7a63d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0151.684] wcscat (in: _Dest=0x7a63d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0151.684] wcscat (in: _Dest=0x7a63d50, _Source="accessibility.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" [0163.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn")) returned 0x20 [0163.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN", dwFileAttributes=0x20) returned 0 [0163.916] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.916] GetLastError () returned 0x5 [0163.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN", dwFileAttributes=0x20) returned 0 [0163.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63d50) returned 1 [0163.916] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.JPN", cAlternateFileName="")) returned 1 [0163.916] wcscmp (_String1="Acroform.JPN", _String2=".") returned 1 [0163.917] wcscmp (_String1="Acroform.JPN", _String2="..") returned 1 [0163.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45e30 [0163.917] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0163.917] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0163.917] wcscat (in: _Dest=0x3d45e30, _Source="Acroform.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" [0163.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn")) returned 0x20 [0163.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN", dwFileAttributes=0x20) returned 0 [0163.929] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.929] GetLastError () returned 0x5 [0163.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN", dwFileAttributes=0x20) returned 0 [0163.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 [0163.930] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd406e80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.JPN", cAlternateFileName="ADOBEC~1.JPN")) returned 1 [0163.930] wcscmp (_String1="AdobeCollabSync.JPN", _String2=".") returned 1 [0163.930] wcscmp (_String1="AdobeCollabSync.JPN", _String2="..") returned 1 [0163.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62590 [0163.930] wcscpy (in: _Dest=0x7a62590, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0163.930] wcscat (in: _Dest=0x7a62590, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0163.930] wcscat (in: _Dest=0x7a62590, _Source="AdobeCollabSync.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" [0163.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn")) returned 0x20 [0163.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN", dwFileAttributes=0x20) returned 0 [0163.931] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.931] GetLastError () returned 0x5 [0163.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN", dwFileAttributes=0x20) returned 0 [0163.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62590) returned 1 [0163.931] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1367840, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x56c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.JPN", cAlternateFileName="")) returned 1 [0163.931] wcscmp (_String1="Annots.JPN", _String2=".") returned 1 [0163.931] wcscmp (_String1="Annots.JPN", _String2="..") returned 1 [0163.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45e30 [0163.931] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0163.931] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0163.931] wcscat (in: _Dest=0x3d45e30, _Source="Annots.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" [0163.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn")) returned 0x20 [0163.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN", dwFileAttributes=0x20) returned 0 [0163.962] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.962] GetLastError () returned 0x5 [0163.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN", dwFileAttributes=0x20) returned 0 [0163.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 [0163.962] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.JPN", cAlternateFileName="BRDLAN~1.JPN")) returned 1 [0163.963] wcscmp (_String1="BRdlang32.JPN", _String2=".") returned 1 [0163.963] wcscmp (_String1="BRdlang32.JPN", _String2="..") returned 1 [0163.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0163.963] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0163.963] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0163.963] wcscat (in: _Dest=0x3eb6a30, _Source="BRdlang32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" [0163.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn")) returned 0x20 [0163.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN", dwFileAttributes=0x20) returned 0 [0163.987] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.987] GetLastError () returned 0x5 [0163.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN", dwFileAttributes=0x20) returned 0 [0163.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0163.987] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.JPN", cAlternateFileName="")) returned 1 [0163.987] wcscmp (_String1="Checkers.JPN", _String2=".") returned 1 [0163.987] wcscmp (_String1="Checkers.JPN", _String2="..") returned 1 [0163.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0163.987] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0163.987] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0163.987] wcscat (in: _Dest=0x3d44d50, _Source="Checkers.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" [0163.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn")) returned 0x20 [0164.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN", dwFileAttributes=0x20) returned 0 [0164.009] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.009] GetLastError () returned 0x5 [0164.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN", dwFileAttributes=0x20) returned 0 [0164.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.009] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.JPN", cAlternateFileName="")) returned 1 [0164.009] wcscmp (_String1="DigSig.JPN", _String2=".") returned 1 [0164.009] wcscmp (_String1="DigSig.JPN", _String2="..") returned 1 [0164.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.009] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.009] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.009] wcscat (in: _Dest=0x3d44d50, _Source="DigSig.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" [0164.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn")) returned 0x20 [0164.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN", dwFileAttributes=0x20) returned 0 [0164.010] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.010] GetLastError () returned 0x5 [0164.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN", dwFileAttributes=0x20) returned 0 [0164.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.011] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.JPN", cAlternateFileName="")) returned 1 [0164.011] wcscmp (_String1="DVA.JPN", _String2=".") returned 1 [0164.011] wcscmp (_String1="DVA.JPN", _String2="..") returned 1 [0164.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8c58 [0164.011] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.011] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.011] wcscat (in: _Dest=0x3eb8c58, _Source="DVA.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" [0164.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn")) returned 0x20 [0164.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN", dwFileAttributes=0x20) returned 0 [0164.012] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.012] GetLastError () returned 0x5 [0164.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN", dwFileAttributes=0x20) returned 0 [0164.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 [0164.012] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.JPN", cAlternateFileName="")) returned 1 [0164.012] wcscmp (_String1="eBook.JPN", _String2=".") returned 1 [0164.012] wcscmp (_String1="eBook.JPN", _String2="..") returned 1 [0164.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0164.013] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.013] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.013] wcscat (in: _Dest=0x3d44d50, _Source="eBook.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" [0164.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn")) returned 0x20 [0164.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN", dwFileAttributes=0x20) returned 0 [0164.013] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.013] GetLastError () returned 0x5 [0164.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN", dwFileAttributes=0x20) returned 0 [0164.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.014] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.JPN", cAlternateFileName="")) returned 1 [0164.014] wcscmp (_String1="EScript.JPN", _String2=".") returned 1 [0164.014] wcscmp (_String1="EScript.JPN", _String2="..") returned 1 [0164.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0164.014] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.014] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.014] wcscat (in: _Dest=0x3d44d50, _Source="EScript.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" [0164.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn")) returned 0x20 [0164.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN", dwFileAttributes=0x20) returned 0 [0164.024] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.024] GetLastError () returned 0x5 [0164.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN", dwFileAttributes=0x20) returned 0 [0164.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.024] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.JPN", cAlternateFileName="")) returned 1 [0164.025] wcscmp (_String1="IA32.JPN", _String2=".") returned 1 [0164.025] wcscmp (_String1="IA32.JPN", _String2="..") returned 1 [0164.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0164.025] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.025] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.025] wcscat (in: _Dest=0x3f3cb10, _Source="IA32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" [0164.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn")) returned 0x20 [0164.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN", dwFileAttributes=0x20) returned 0 [0164.025] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.026] GetLastError () returned 0x5 [0164.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN", dwFileAttributes=0x20) returned 0 [0164.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 [0164.026] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.JPN", cAlternateFileName="MAKEAC~1.JPN")) returned 1 [0164.026] wcscmp (_String1="makeaccessible.JPN", _String2=".") returned 1 [0164.026] wcscmp (_String1="makeaccessible.JPN", _String2="..") returned 1 [0164.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62630 [0164.026] wcscpy (in: _Dest=0x7a62630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.026] wcscat (in: _Dest=0x7a62630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.026] wcscat (in: _Dest=0x7a62630, _Source="makeaccessible.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" [0164.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn")) returned 0x20 [0164.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN", dwFileAttributes=0x20) returned 0 [0164.027] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.027] GetLastError () returned 0x5 [0164.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN", dwFileAttributes=0x20) returned 0 [0164.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62630) returned 1 [0164.027] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.JPN", cAlternateFileName="MULTIM~1.JPN")) returned 1 [0164.027] wcscmp (_String1="Multimedia.JPN", _String2=".") returned 1 [0164.027] wcscmp (_String1="Multimedia.JPN", _String2="..") returned 1 [0164.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0164.027] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.027] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.027] wcscat (in: _Dest=0x3eb5d20, _Source="Multimedia.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" [0164.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn")) returned 0x20 [0164.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN", dwFileAttributes=0x20) returned 0 [0164.028] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.028] GetLastError () returned 0x5 [0164.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN", dwFileAttributes=0x20) returned 0 [0164.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.028] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.JPN", cAlternateFileName="")) returned 1 [0164.029] wcscmp (_String1="pddom.JPN", _String2=".") returned 1 [0164.029] wcscmp (_String1="pddom.JPN", _String2="..") returned 1 [0164.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0164.029] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.029] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.029] wcscat (in: _Dest=0x3d44d50, _Source="pddom.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" [0164.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn")) returned 0x20 [0164.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN", dwFileAttributes=0x20) returned 0 [0164.029] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.030] GetLastError () returned 0x5 [0164.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN", dwFileAttributes=0x20) returned 0 [0164.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.030] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0ffb8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.JPN", cAlternateFileName="")) returned 1 [0164.030] wcscmp (_String1="PPKLite.JPN", _String2=".") returned 1 [0164.030] wcscmp (_String1="PPKLite.JPN", _String2="..") returned 1 [0164.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0164.030] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.030] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.030] wcscat (in: _Dest=0x3d44d50, _Source="PPKLite.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" [0164.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn")) returned 0x20 [0164.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN", dwFileAttributes=0x20) returned 0 [0164.031] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.031] GetLastError () returned 0x5 [0164.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN", dwFileAttributes=0x20) returned 0 [0164.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.031] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb6b7fa0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.JPN", cAlternateFileName="")) returned 1 [0164.031] wcscmp (_String1="RdLang32.JPN", _String2=".") returned 1 [0164.031] wcscmp (_String1="RdLang32.JPN", _String2="..") returned 1 [0164.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.031] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.031] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.032] wcscat (in: _Dest=0x3d44d50, _Source="RdLang32.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" [0164.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn")) returned 0x20 [0164.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN", dwFileAttributes=0x20) returned 0 [0164.032] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.032] GetLastError () returned 0x5 [0164.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN", dwFileAttributes=0x20) returned 0 [0164.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.033] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15308c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.JPN", cAlternateFileName="READOU~1.JPN")) returned 1 [0164.033] wcscmp (_String1="ReadOutLoud.JPN", _String2=".") returned 1 [0164.033] wcscmp (_String1="ReadOutLoud.JPN", _String2="..") returned 1 [0164.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5d20 [0164.033] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.033] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.033] wcscat (in: _Dest=0x3eb5d20, _Source="ReadOutLoud.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" [0164.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn")) returned 0x20 [0164.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN", dwFileAttributes=0x20) returned 0 [0164.034] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.034] GetLastError () returned 0x5 [0164.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN", dwFileAttributes=0x20) returned 0 [0164.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.034] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.JPN", cAlternateFileName="")) returned 1 [0164.034] wcscmp (_String1="reflow.JPN", _String2=".") returned 1 [0164.034] wcscmp (_String1="reflow.JPN", _String2="..") returned 1 [0164.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.034] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.034] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.034] wcscat (in: _Dest=0x3d44d50, _Source="reflow.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" [0164.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn")) returned 0x20 [0164.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN", dwFileAttributes=0x20) returned 0 [0164.035] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.035] GetLastError () returned 0x5 [0164.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN", dwFileAttributes=0x20) returned 0 [0164.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.035] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.JPN", cAlternateFileName="SAVEAS~1.JPN")) returned 1 [0164.035] wcscmp (_String1="SaveAsRTF.JPN", _String2=".") returned 1 [0164.035] wcscmp (_String1="SaveAsRTF.JPN", _String2="..") returned 1 [0164.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.036] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.036] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.036] wcscat (in: _Dest=0x3eb5d20, _Source="SaveAsRTF.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" [0164.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn")) returned 0x20 [0164.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN", dwFileAttributes=0x20) returned 0 [0164.063] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.064] GetLastError () returned 0x5 [0164.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN", dwFileAttributes=0x20) returned 0 [0164.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.064] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.JPN", cAlternateFileName="")) returned 1 [0164.064] wcscmp (_String1="Search.JPN", _String2=".") returned 1 [0164.064] wcscmp (_String1="Search.JPN", _String2="..") returned 1 [0164.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44210 [0164.065] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.065] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.065] wcscat (in: _Dest=0x3d44210, _Source="Search.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" [0164.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn")) returned 0x20 [0164.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN", dwFileAttributes=0x20) returned 0 [0164.066] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.066] GetLastError () returned 0x5 [0164.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN", dwFileAttributes=0x20) returned 0 [0164.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0164.066] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1021a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.JPN", cAlternateFileName="")) returned 1 [0164.066] wcscmp (_String1="SendMail.JPN", _String2=".") returned 1 [0164.066] wcscmp (_String1="SendMail.JPN", _String2="..") returned 1 [0164.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44210 [0164.067] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.067] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.067] wcscat (in: _Dest=0x3d44210, _Source="SendMail.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" [0164.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn")) returned 0x20 [0164.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN", dwFileAttributes=0x20) returned 0 [0164.068] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.068] GetLastError () returned 0x5 [0164.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN", dwFileAttributes=0x20) returned 0 [0164.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0164.068] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.068] wcscmp (_String1="Services", _String2=".") returned 1 [0164.068] wcscmp (_String1="Services", _String2="..") returned 1 [0164.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3ca00 [0164.069] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0164.069] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0164.069] wcscat (in: _Dest=0x3f3ca00, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0164.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44210 [0164.069] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0164.069] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\" [0164.069] wcscat (in: _Dest=0x3d44210, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*" [0164.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0164.069] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0165.128] wcscmp (_String1=".", _String2=".") returned 0 [0165.128] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.129] wcscmp (_String1="..", _String2=".") returned 1 [0165.129] wcscmp (_String1="..", _String2="..") returned 0 [0165.129] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.129] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.129] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053f00 [0165.129] wcscpy (in: _Dest=0x3053f00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0165.129] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\" [0165.129] wcscat (in: _Dest=0x3053f00, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" [0172.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0172.634] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.634] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.634] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053720 [0172.634] wcscpy (in: _Dest=0x3053720, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services" [0172.634] wcscat (in: _Dest=0x3053720, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\" [0172.634] wcscat (in: _Dest=0x3053720, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" [0172.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0172.635] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.635] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0172.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0172.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0172.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 [0172.636] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.JPN", cAlternateFileName="")) returned 1 [0172.636] wcscmp (_String1="Spelling.JPN", _String2=".") returned 1 [0172.636] wcscmp (_String1="Spelling.JPN", _String2="..") returned 1 [0172.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44210 [0172.636] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0172.636] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0172.636] wcscat (in: _Dest=0x3d44210, _Source="Spelling.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" [0172.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0172.637] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.JPN", cAlternateFileName="")) returned 1 [0172.637] wcscmp (_String1="updater.JPN", _String2=".") returned 1 [0172.637] wcscmp (_String1="updater.JPN", _String2="..") returned 1 [0172.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45e30 [0172.638] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0172.638] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0172.638] wcscat (in: _Dest=0x3d45e30, _Source="updater.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" [0172.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0172.638] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.JPN", cAlternateFileName="")) returned 1 [0172.639] wcscmp (_String1="Weblink.JPN", _String2=".") returned 1 [0172.639] wcscmp (_String1="Weblink.JPN", _String2="..") returned 1 [0172.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45140 [0172.639] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP" [0172.639] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\" [0172.639] wcscat (in: _Dest=0x3d45140, _Source="Weblink.JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" [0172.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0172.640] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe0fd5740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.JPN", cAlternateFileName="")) returned 0 [0172.640] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0172.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0172.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5e70) returned 1 [0172.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 Thread: id = 2109 os_tid = 0xb54 [0148.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5a70 [0148.914] wcscpy (in: _Dest=0x3da5a70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0148.914] wcscat (in: _Dest=0x3da5a70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0148.914] wcscat (in: _Dest=0x3da5a70, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*" [0148.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0148.914] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a4d900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0151.684] wcscmp (_String1=".", _String2=".") returned 0 [0151.684] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a4d900, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.685] wcscmp (_String1="..", _String2=".") returned 1 [0151.685] wcscmp (_String1="..", _String2="..") returned 0 [0151.685] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda65a860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.KOR", cAlternateFileName="ACCESS~1.KOR")) returned 1 [0151.685] wcscmp (_String1="accessibility.KOR", _String2=".") returned 1 [0151.685] wcscmp (_String1="accessibility.KOR", _String2="..") returned 1 [0151.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62090 [0151.685] wcscpy (in: _Dest=0x7a62090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0151.685] wcscat (in: _Dest=0x7a62090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0151.685] wcscat (in: _Dest=0x7a62090, _Source="accessibility.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" [0164.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor")) returned 0x20 [0164.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR", dwFileAttributes=0x20) returned 0 [0164.349] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.349] GetLastError () returned 0x5 [0164.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR", dwFileAttributes=0x20) returned 0 [0164.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62090) returned 1 [0164.349] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.KOR", cAlternateFileName="")) returned 1 [0164.350] wcscmp (_String1="Acroform.KOR", _String2=".") returned 1 [0164.350] wcscmp (_String1="Acroform.KOR", _String2="..") returned 1 [0164.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45f50 [0164.350] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.350] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.350] wcscat (in: _Dest=0x3d45f50, _Source="Acroform.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" [0164.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor")) returned 0x20 [0164.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR", dwFileAttributes=0x20) returned 0 [0164.350] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.351] GetLastError () returned 0x5 [0164.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR", dwFileAttributes=0x20) returned 0 [0164.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 [0164.351] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.KOR", cAlternateFileName="ADOBEC~1.KOR")) returned 1 [0164.351] wcscmp (_String1="AdobeCollabSync.KOR", _String2=".") returned 1 [0164.351] wcscmp (_String1="AdobeCollabSync.KOR", _String2="..") returned 1 [0164.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62090 [0164.351] wcscpy (in: _Dest=0x7a62090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.351] wcscat (in: _Dest=0x7a62090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.351] wcscat (in: _Dest=0x7a62090, _Source="AdobeCollabSync.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" [0164.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor")) returned 0x20 [0164.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR", dwFileAttributes=0x20) returned 0 [0164.352] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.352] GetLastError () returned 0x5 [0164.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR", dwFileAttributes=0x20) returned 0 [0164.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62090) returned 1 [0164.352] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x56c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.KOR", cAlternateFileName="")) returned 1 [0164.352] wcscmp (_String1="Annots.KOR", _String2=".") returned 1 [0164.352] wcscmp (_String1="Annots.KOR", _String2="..") returned 1 [0164.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45f50 [0164.353] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.353] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.353] wcscat (in: _Dest=0x3d45f50, _Source="Annots.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" [0164.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor")) returned 0x20 [0164.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR", dwFileAttributes=0x20) returned 0 [0164.353] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.353] GetLastError () returned 0x5 [0164.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR", dwFileAttributes=0x20) returned 0 [0164.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 [0164.354] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.KOR", cAlternateFileName="BRDLAN~1.KOR")) returned 1 [0164.354] wcscmp (_String1="BRdlang32.KOR", _String2=".") returned 1 [0164.354] wcscmp (_String1="BRdlang32.KOR", _String2="..") returned 1 [0164.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.354] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.354] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.354] wcscat (in: _Dest=0x3eb5d20, _Source="BRdlang32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" [0164.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor")) returned 0x20 [0164.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR", dwFileAttributes=0x20) returned 0 [0164.355] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.355] GetLastError () returned 0x5 [0164.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR", dwFileAttributes=0x20) returned 0 [0164.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.355] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.KOR", cAlternateFileName="")) returned 1 [0164.355] wcscmp (_String1="Checkers.KOR", _String2=".") returned 1 [0164.355] wcscmp (_String1="Checkers.KOR", _String2="..") returned 1 [0164.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45f50 [0164.356] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.356] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.356] wcscat (in: _Dest=0x3d45f50, _Source="Checkers.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" [0164.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor")) returned 0x20 [0164.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR", dwFileAttributes=0x20) returned 0 [0164.389] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.389] GetLastError () returned 0x5 [0164.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR", dwFileAttributes=0x20) returned 0 [0164.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 [0164.390] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.KOR", cAlternateFileName="")) returned 1 [0164.390] wcscmp (_String1="DigSig.KOR", _String2=".") returned 1 [0164.390] wcscmp (_String1="DigSig.KOR", _String2="..") returned 1 [0164.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45f50 [0164.390] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.390] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.390] wcscat (in: _Dest=0x3d45f50, _Source="DigSig.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" [0164.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor")) returned 0x20 [0164.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR", dwFileAttributes=0x20) returned 0 [0164.391] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.391] GetLastError () returned 0x5 [0164.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR", dwFileAttributes=0x20) returned 0 [0164.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 [0164.391] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.KOR", cAlternateFileName="")) returned 1 [0164.391] wcscmp (_String1="DVA.KOR", _String2=".") returned 1 [0164.392] wcscmp (_String1="DVA.KOR", _String2="..") returned 1 [0164.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cb10 [0164.392] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.392] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.392] wcscat (in: _Dest=0x3f3cb10, _Source="DVA.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" [0164.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor")) returned 0x20 [0164.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR", dwFileAttributes=0x20) returned 0 [0164.393] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.393] GetLastError () returned 0x5 [0164.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR", dwFileAttributes=0x20) returned 0 [0164.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 [0164.393] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.KOR", cAlternateFileName="")) returned 1 [0164.393] wcscmp (_String1="eBook.KOR", _String2=".") returned 1 [0164.393] wcscmp (_String1="eBook.KOR", _String2="..") returned 1 [0164.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45f50 [0164.393] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.393] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.394] wcscat (in: _Dest=0x3d45f50, _Source="eBook.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" [0164.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor")) returned 0x20 [0164.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR", dwFileAttributes=0x20) returned 0 [0164.394] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.394] GetLastError () returned 0x5 [0164.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR", dwFileAttributes=0x20) returned 0 [0164.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 [0164.395] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.KOR", cAlternateFileName="")) returned 1 [0164.395] wcscmp (_String1="EScript.KOR", _String2=".") returned 1 [0164.395] wcscmp (_String1="EScript.KOR", _String2="..") returned 1 [0164.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45f50 [0164.395] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.395] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.395] wcscat (in: _Dest=0x3d45f50, _Source="EScript.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" [0164.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor")) returned 0x20 [0164.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR", dwFileAttributes=0x20) returned 0 [0164.396] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.396] GetLastError () returned 0x5 [0164.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR", dwFileAttributes=0x20) returned 0 [0164.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 [0164.397] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.KOR", cAlternateFileName="")) returned 1 [0164.397] wcscmp (_String1="IA32.KOR", _String2=".") returned 1 [0164.397] wcscmp (_String1="IA32.KOR", _String2="..") returned 1 [0164.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0164.397] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.397] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.397] wcscat (in: _Dest=0x3f3cb10, _Source="IA32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" [0164.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor")) returned 0x20 [0164.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR", dwFileAttributes=0x20) returned 0 [0164.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.467] GetLastError () returned 0x5 [0164.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR", dwFileAttributes=0x20) returned 0 [0164.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 [0164.467] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.KOR", cAlternateFileName="MAKEAC~1.KOR")) returned 1 [0164.467] wcscmp (_String1="makeaccessible.KOR", _String2=".") returned 1 [0164.467] wcscmp (_String1="makeaccessible.KOR", _String2="..") returned 1 [0164.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a68090 [0164.467] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.468] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.468] wcscat (in: _Dest=0x7a68090, _Source="makeaccessible.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" [0164.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor")) returned 0x20 [0164.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR", dwFileAttributes=0x20) returned 0 [0164.468] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.468] GetLastError () returned 0x5 [0164.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR", dwFileAttributes=0x20) returned 0 [0164.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 [0164.469] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9a4d900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.KOR", cAlternateFileName="MULTIM~1.KOR")) returned 1 [0164.469] wcscmp (_String1="Multimedia.KOR", _String2=".") returned 1 [0164.469] wcscmp (_String1="Multimedia.KOR", _String2="..") returned 1 [0164.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64aa8 [0164.469] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.469] wcscat (in: _Dest=0x7a64aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.469] wcscat (in: _Dest=0x7a64aa8, _Source="Multimedia.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" [0164.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor")) returned 0x20 [0164.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR", dwFileAttributes=0x20) returned 0 [0164.470] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.470] GetLastError () returned 0x5 [0164.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR", dwFileAttributes=0x20) returned 0 [0164.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 [0164.470] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.KOR", cAlternateFileName="")) returned 1 [0164.470] wcscmp (_String1="pddom.KOR", _String2=".") returned 1 [0164.470] wcscmp (_String1="pddom.KOR", _String2="..") returned 1 [0164.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0164.471] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.471] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.471] wcscat (in: _Dest=0x3d44d50, _Source="pddom.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" [0164.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor")) returned 0x20 [0164.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR", dwFileAttributes=0x20) returned 0 [0164.471] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.472] GetLastError () returned 0x5 [0164.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR", dwFileAttributes=0x20) returned 0 [0164.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.472] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.KOR", cAlternateFileName="")) returned 1 [0164.472] wcscmp (_String1="PPKLITE.KOR", _String2=".") returned 1 [0164.472] wcscmp (_String1="PPKLITE.KOR", _String2="..") returned 1 [0164.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0164.472] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.472] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.472] wcscat (in: _Dest=0x3d44d50, _Source="PPKLITE.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" [0164.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor")) returned 0x20 [0164.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR", dwFileAttributes=0x20) returned 0 [0164.473] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.473] GetLastError () returned 0x5 [0164.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR", dwFileAttributes=0x20) returned 0 [0164.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.474] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdba70200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.KOR", cAlternateFileName="")) returned 1 [0164.474] wcscmp (_String1="RdLang32.KOR", _String2=".") returned 1 [0164.474] wcscmp (_String1="RdLang32.KOR", _String2="..") returned 1 [0164.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.474] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.474] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.474] wcscat (in: _Dest=0x3d44d50, _Source="RdLang32.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" [0164.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor")) returned 0x20 [0164.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR", dwFileAttributes=0x20) returned 0 [0164.475] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.475] GetLastError () returned 0x5 [0164.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR", dwFileAttributes=0x20) returned 0 [0164.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.475] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.KOR", cAlternateFileName="READOU~1.KOR")) returned 1 [0164.475] wcscmp (_String1="ReadOutLoud.KOR", _String2=".") returned 1 [0164.476] wcscmp (_String1="ReadOutLoud.KOR", _String2="..") returned 1 [0164.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64aa8 [0164.476] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.476] wcscat (in: _Dest=0x7a64aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.476] wcscat (in: _Dest=0x7a64aa8, _Source="ReadOutLoud.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" [0164.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor")) returned 0x20 [0164.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR", dwFileAttributes=0x20) returned 0 [0164.476] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.477] GetLastError () returned 0x5 [0164.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR", dwFileAttributes=0x20) returned 0 [0164.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 [0164.477] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.KOR", cAlternateFileName="")) returned 1 [0164.477] wcscmp (_String1="reflow.KOR", _String2=".") returned 1 [0164.477] wcscmp (_String1="reflow.KOR", _String2="..") returned 1 [0164.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.477] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.477] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.477] wcscat (in: _Dest=0x3d44d50, _Source="reflow.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" [0164.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor")) returned 0x20 [0164.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR", dwFileAttributes=0x20) returned 0 [0164.478] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.478] GetLastError () returned 0x5 [0164.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR", dwFileAttributes=0x20) returned 0 [0164.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.479] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.KOR", cAlternateFileName="SAVEAS~1.KOR")) returned 1 [0164.479] wcscmp (_String1="SaveAsRTF.KOR", _String2=".") returned 1 [0164.479] wcscmp (_String1="SaveAsRTF.KOR", _String2="..") returned 1 [0164.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64aa8 [0164.479] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.479] wcscat (in: _Dest=0x7a64aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.479] wcscat (in: _Dest=0x7a64aa8, _Source="SaveAsRTF.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" [0164.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor")) returned 0x20 [0164.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR", dwFileAttributes=0x20) returned 0 [0164.480] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.480] GetLastError () returned 0x5 [0164.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR", dwFileAttributes=0x20) returned 0 [0164.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 [0164.481] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.KOR", cAlternateFileName="")) returned 1 [0164.481] wcscmp (_String1="Search.KOR", _String2=".") returned 1 [0164.481] wcscmp (_String1="Search.KOR", _String2="..") returned 1 [0164.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.481] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.481] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.481] wcscat (in: _Dest=0x3d44d50, _Source="Search.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" [0164.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor")) returned 0x20 [0164.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR", dwFileAttributes=0x20) returned 0 [0164.481] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.481] GetLastError () returned 0x5 [0164.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR", dwFileAttributes=0x20) returned 0 [0164.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.482] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.KOR", cAlternateFileName="")) returned 1 [0164.482] wcscmp (_String1="SendMail.KOR", _String2=".") returned 1 [0164.482] wcscmp (_String1="SendMail.KOR", _String2="..") returned 1 [0164.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.482] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.482] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.482] wcscat (in: _Dest=0x3d44d50, _Source="SendMail.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" [0164.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor")) returned 0x20 [0164.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR", dwFileAttributes=0x20) returned 0 [0164.483] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.483] GetLastError () returned 0x5 [0164.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR", dwFileAttributes=0x20) returned 0 [0164.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.483] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.483] wcscmp (_String1="Services", _String2=".") returned 1 [0164.483] wcscmp (_String1="Services", _String2="..") returned 1 [0164.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cb10 [0164.483] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0164.483] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0164.483] wcscat (in: _Dest=0x3f3cb10, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0164.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.484] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0164.484] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\" [0164.484] wcscat (in: _Dest=0x3d44d50, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*" [0164.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0164.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0165.172] wcscmp (_String1=".", _String2=".") returned 0 [0165.173] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.173] wcscmp (_String1="..", _String2=".") returned 1 [0165.173] wcscmp (_String1="..", _String2="..") returned 0 [0165.173] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.173] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.173] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e5d0 [0165.173] wcscpy (in: _Dest=0x7a5e5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0165.173] wcscat (in: _Dest=0x7a5e5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\" [0165.173] wcscat (in: _Dest=0x7a5e5d0, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" [0172.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec [0172.966] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.966] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.966] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x30539c0 [0172.966] wcscpy (in: _Dest=0x30539c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services" [0172.966] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\" [0172.966] wcscat (in: _Dest=0x30539c0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" [0172.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30539c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0172.967] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.967] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0172.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0172.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0172.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 [0172.968] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.KOR", cAlternateFileName="")) returned 1 [0172.968] wcscmp (_String1="Spelling.KOR", _String2=".") returned 1 [0172.968] wcscmp (_String1="Spelling.KOR", _String2="..") returned 1 [0172.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0172.968] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0172.968] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0172.968] wcscat (in: _Dest=0x3d44d50, _Source="Spelling.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" [0172.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0172.969] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.KOR", cAlternateFileName="")) returned 1 [0172.969] wcscmp (_String1="updater.KOR", _String2=".") returned 1 [0172.969] wcscmp (_String1="updater.KOR", _String2="..") returned 1 [0172.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61830 [0172.969] wcscpy (in: _Dest=0x7a61830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0172.969] wcscat (in: _Dest=0x7a61830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0172.969] wcscat (in: _Dest=0x7a61830, _Source="updater.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" [0172.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0172.970] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.KOR", cAlternateFileName="")) returned 1 [0172.970] wcscmp (_String1="Weblink.KOR", _String2=".") returned 1 [0172.970] wcscmp (_String1="Weblink.KOR", _String2="..") returned 1 [0172.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61440 [0172.971] wcscpy (in: _Dest=0x7a61440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR" [0172.971] wcscat (in: _Dest=0x7a61440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\" [0172.971] wcscat (in: _Dest=0x7a61440, _Source="Weblink.KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" [0172.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0172.972] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1106240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.KOR", cAlternateFileName="")) returned 0 [0172.972] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0172.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0172.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5a70) returned 1 [0172.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 Thread: id = 2110 os_tid = 0x308 [0148.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da4c70 [0148.921] wcscpy (in: _Dest=0x3da4c70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0148.921] wcscat (in: _Dest=0x3da4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0148.921] wcscat (in: _Dest=0x3da4c70, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*" [0148.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0148.921] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0151.685] wcscmp (_String1=".", _String2=".") returned 0 [0151.685] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.685] wcscmp (_String1="..", _String2=".") returned 1 [0151.686] wcscmp (_String1="..", _String2="..") returned 0 [0151.686] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.NOR", cAlternateFileName="ACCESS~1.NOR")) returned 1 [0151.686] wcscmp (_String1="accessibility.NOR", _String2=".") returned 1 [0151.686] wcscmp (_String1="accessibility.NOR", _String2="..") returned 1 [0151.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a68090 [0151.686] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0151.686] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0151.686] wcscat (in: _Dest=0x7a68090, _Source="accessibility.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" [0164.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor")) returned 0x20 [0164.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR", dwFileAttributes=0x20) returned 0 [0164.378] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.378] GetLastError () returned 0x5 [0164.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR", dwFileAttributes=0x20) returned 0 [0164.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 [0164.378] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x61e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.NOR", cAlternateFileName="")) returned 1 [0164.378] wcscmp (_String1="Acroform.NOR", _String2=".") returned 1 [0164.378] wcscmp (_String1="Acroform.NOR", _String2="..") returned 1 [0164.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45d10 [0164.379] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.379] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.379] wcscat (in: _Dest=0x3d45d10, _Source="Acroform.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" [0164.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor")) returned 0x20 [0164.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR", dwFileAttributes=0x20) returned 0 [0164.379] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.380] GetLastError () returned 0x5 [0164.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR", dwFileAttributes=0x20) returned 0 [0164.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 [0164.380] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.NOR", cAlternateFileName="ADOBEC~1.NOR")) returned 1 [0164.380] wcscmp (_String1="AdobeCollabSync.NOR", _String2=".") returned 1 [0164.380] wcscmp (_String1="AdobeCollabSync.NOR", _String2="..") returned 1 [0164.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a68090 [0164.380] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.381] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.381] wcscat (in: _Dest=0x7a68090, _Source="AdobeCollabSync.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" [0164.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor")) returned 0x20 [0164.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR", dwFileAttributes=0x20) returned 0 [0164.381] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.382] GetLastError () returned 0x5 [0164.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR", dwFileAttributes=0x20) returned 0 [0164.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 [0164.382] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x75c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.NOR", cAlternateFileName="")) returned 1 [0164.382] wcscmp (_String1="Annots.NOR", _String2=".") returned 1 [0164.382] wcscmp (_String1="Annots.NOR", _String2="..") returned 1 [0164.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45d10 [0164.382] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.382] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.383] wcscat (in: _Dest=0x3d45d10, _Source="Annots.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" [0164.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor")) returned 0x20 [0164.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR", dwFileAttributes=0x20) returned 0 [0164.383] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.384] GetLastError () returned 0x5 [0164.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR", dwFileAttributes=0x20) returned 0 [0164.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 [0164.384] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.NOR", cAlternateFileName="BRDLAN~1.NOR")) returned 1 [0164.384] wcscmp (_String1="BRdlang32.NOR", _String2=".") returned 1 [0164.384] wcscmp (_String1="BRdlang32.NOR", _String2="..") returned 1 [0164.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.385] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.385] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.385] wcscat (in: _Dest=0x3eb5d20, _Source="BRdlang32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" [0164.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor")) returned 0x20 [0164.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR", dwFileAttributes=0x20) returned 0 [0164.386] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.386] GetLastError () returned 0x5 [0164.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR", dwFileAttributes=0x20) returned 0 [0164.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.387] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.NOR", cAlternateFileName="")) returned 1 [0164.387] wcscmp (_String1="Checkers.NOR", _String2=".") returned 1 [0164.387] wcscmp (_String1="Checkers.NOR", _String2="..") returned 1 [0164.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45d10 [0164.387] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.387] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.387] wcscat (in: _Dest=0x3d45d10, _Source="Checkers.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" [0164.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor")) returned 0x20 [0164.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR", dwFileAttributes=0x20) returned 0 [0164.465] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.465] GetLastError () returned 0x5 [0164.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR", dwFileAttributes=0x20) returned 0 [0164.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 [0164.465] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.NOR", cAlternateFileName="")) returned 1 [0164.465] wcscmp (_String1="DigSig.NOR", _String2=".") returned 1 [0164.465] wcscmp (_String1="DigSig.NOR", _String2="..") returned 1 [0164.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45d10 [0164.465] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.465] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.465] wcscat (in: _Dest=0x3d45d10, _Source="DigSig.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" [0164.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor")) returned 0x20 [0164.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR", dwFileAttributes=0x20) returned 0 [0164.506] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.506] GetLastError () returned 0x5 [0164.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR", dwFileAttributes=0x20) returned 0 [0164.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 [0164.506] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.NOR", cAlternateFileName="")) returned 1 [0164.507] wcscmp (_String1="DVA.NOR", _String2=".") returned 1 [0164.507] wcscmp (_String1="DVA.NOR", _String2="..") returned 1 [0164.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3bed8 [0164.507] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.507] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.507] wcscat (in: _Dest=0x3f3bed8, _Source="DVA.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" [0164.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor")) returned 0x20 [0164.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR", dwFileAttributes=0x20) returned 0 [0164.508] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.508] GetLastError () returned 0x5 [0164.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR", dwFileAttributes=0x20) returned 0 [0164.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 [0164.509] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.NOR", cAlternateFileName="")) returned 1 [0164.509] wcscmp (_String1="eBook.NOR", _String2=".") returned 1 [0164.509] wcscmp (_String1="eBook.NOR", _String2="..") returned 1 [0164.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45d10 [0164.509] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.509] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.509] wcscat (in: _Dest=0x3d45d10, _Source="eBook.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" [0164.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor")) returned 0x20 [0164.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR", dwFileAttributes=0x20) returned 0 [0164.510] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.510] GetLastError () returned 0x5 [0164.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR", dwFileAttributes=0x20) returned 0 [0164.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 [0164.511] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.NOR", cAlternateFileName="")) returned 1 [0164.511] wcscmp (_String1="EScript.NOR", _String2=".") returned 1 [0164.511] wcscmp (_String1="EScript.NOR", _String2="..") returned 1 [0164.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45d10 [0164.511] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.511] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.511] wcscat (in: _Dest=0x3d45d10, _Source="EScript.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" [0164.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor")) returned 0x20 [0164.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR", dwFileAttributes=0x20) returned 0 [0164.512] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.513] GetLastError () returned 0x5 [0164.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR", dwFileAttributes=0x20) returned 0 [0164.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 [0164.513] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.NOR", cAlternateFileName="")) returned 1 [0164.513] wcscmp (_String1="IA32.NOR", _String2=".") returned 1 [0164.513] wcscmp (_String1="IA32.NOR", _String2="..") returned 1 [0164.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bed8 [0164.513] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.513] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.513] wcscat (in: _Dest=0x3f3bed8, _Source="IA32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" [0164.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor")) returned 0x20 [0164.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR", dwFileAttributes=0x20) returned 0 [0164.514] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.514] GetLastError () returned 0x5 [0164.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR", dwFileAttributes=0x20) returned 0 [0164.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 [0164.515] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.NOR", cAlternateFileName="MAKEAC~1.NOR")) returned 1 [0164.515] wcscmp (_String1="makeaccessible.NOR", _String2=".") returned 1 [0164.515] wcscmp (_String1="makeaccessible.NOR", _String2="..") returned 1 [0164.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a68090 [0164.515] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.515] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.515] wcscat (in: _Dest=0x7a68090, _Source="makeaccessible.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" [0164.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor")) returned 0x20 [0164.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR", dwFileAttributes=0x20) returned 0 [0164.516] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.516] GetLastError () returned 0x5 [0164.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR", dwFileAttributes=0x20) returned 0 [0164.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 [0164.517] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2c8760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.NOR", cAlternateFileName="MULTIM~1.NOR")) returned 1 [0164.517] wcscmp (_String1="Multimedia.NOR", _String2=".") returned 1 [0164.517] wcscmp (_String1="Multimedia.NOR", _String2="..") returned 1 [0164.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6a30 [0164.517] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.517] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.517] wcscat (in: _Dest=0x3eb6a30, _Source="Multimedia.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" [0164.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor")) returned 0x20 [0164.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR", dwFileAttributes=0x20) returned 0 [0164.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.518] GetLastError () returned 0x5 [0164.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR", dwFileAttributes=0x20) returned 0 [0164.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0164.518] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.NOR", cAlternateFileName="")) returned 1 [0164.520] wcscmp (_String1="pddom.NOR", _String2=".") returned 1 [0164.520] wcscmp (_String1="pddom.NOR", _String2="..") returned 1 [0164.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45d10 [0164.520] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.520] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.520] wcscat (in: _Dest=0x3d45d10, _Source="pddom.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" [0164.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor")) returned 0x20 [0164.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR", dwFileAttributes=0x20) returned 0 [0164.521] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.521] GetLastError () returned 0x5 [0164.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR", dwFileAttributes=0x20) returned 0 [0164.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 [0164.522] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.NOR", cAlternateFileName="")) returned 1 [0164.522] wcscmp (_String1="PPKLITE.NOR", _String2=".") returned 1 [0164.522] wcscmp (_String1="PPKLITE.NOR", _String2="..") returned 1 [0164.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45d10 [0164.522] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.522] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.522] wcscat (in: _Dest=0x3d45d10, _Source="PPKLITE.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" [0164.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor")) returned 0x20 [0164.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR", dwFileAttributes=0x20) returned 0 [0164.523] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.523] GetLastError () returned 0x5 [0164.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR", dwFileAttributes=0x20) returned 0 [0164.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 [0164.524] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdbbc6e60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x140400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.NOR", cAlternateFileName="")) returned 1 [0164.524] wcscmp (_String1="RdLang32.NOR", _String2=".") returned 1 [0164.524] wcscmp (_String1="RdLang32.NOR", _String2="..") returned 1 [0164.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45d10 [0164.524] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0164.524] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0164.524] wcscat (in: _Dest=0x3d45d10, _Source="RdLang32.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" [0164.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor")) returned 0x20 [0164.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR", dwFileAttributes=0x20) returned 0 [0164.525] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.176] GetLastError () returned 0x5 [0165.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR", dwFileAttributes=0x20) returned 0 [0165.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 [0165.230] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.NOR", cAlternateFileName="READOU~1.NOR")) returned 1 [0165.230] wcscmp (_String1="ReadOutLoud.NOR", _String2=".") returned 1 [0165.231] wcscmp (_String1="ReadOutLoud.NOR", _String2="..") returned 1 [0165.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6bf8 [0165.231] wcscpy (in: _Dest=0x3eb6bf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0165.231] wcscat (in: _Dest=0x3eb6bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0165.231] wcscat (in: _Dest=0x3eb6bf8, _Source="ReadOutLoud.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" [0168.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4 [0168.375] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.NOR", cAlternateFileName="")) returned 1 [0168.375] wcscmp (_String1="reflow.NOR", _String2=".") returned 1 [0168.375] wcscmp (_String1="reflow.NOR", _String2="..") returned 1 [0168.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61320 [0168.376] wcscpy (in: _Dest=0x7a61320, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0168.376] wcscat (in: _Dest=0x7a61320, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0168.376] wcscat (in: _Dest=0x7a61320, _Source="reflow.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" [0168.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0168.377] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.NOR", cAlternateFileName="SAVEAS~1.NOR")) returned 1 [0168.377] wcscmp (_String1="SaveAsRTF.NOR", _String2=".") returned 1 [0168.377] wcscmp (_String1="SaveAsRTF.NOR", _String2="..") returned 1 [0168.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6ef8 [0168.377] wcscpy (in: _Dest=0x7ad6ef8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0168.377] wcscat (in: _Dest=0x7ad6ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0168.377] wcscat (in: _Dest=0x7ad6ef8, _Source="SaveAsRTF.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" [0168.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0168.378] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.NOR", cAlternateFileName="")) returned 1 [0168.378] wcscmp (_String1="Search.NOR", _String2=".") returned 1 [0168.378] wcscmp (_String1="Search.NOR", _String2="..") returned 1 [0168.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61290 [0168.378] wcscpy (in: _Dest=0x7a61290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0168.378] wcscat (in: _Dest=0x7a61290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0168.378] wcscat (in: _Dest=0x7a61290, _Source="Search.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" [0168.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0168.380] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.NOR", cAlternateFileName="")) returned 1 [0168.380] wcscmp (_String1="SendMail.NOR", _String2=".") returned 1 [0168.380] wcscmp (_String1="SendMail.NOR", _String2="..") returned 1 [0168.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61560 [0168.380] wcscpy (in: _Dest=0x7a61560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0168.380] wcscat (in: _Dest=0x7a61560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0168.380] wcscat (in: _Dest=0x7a61560, _Source="SendMail.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" [0168.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0168.381] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0168.381] wcscmp (_String1="Services", _String2=".") returned 1 [0168.381] wcscmp (_String1="Services", _String2="..") returned 1 [0168.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3061f70 [0168.381] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0168.381] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0168.381] wcscat (in: _Dest=0x3061f70, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0168.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0168.386] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.NOR", cAlternateFileName="")) returned 1 [0168.386] wcscmp (_String1="Spelling.NOR", _String2=".") returned 1 [0168.386] wcscmp (_String1="Spelling.NOR", _String2="..") returned 1 [0168.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60a20 [0168.386] wcscpy (in: _Dest=0x7a60a20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0168.386] wcscat (in: _Dest=0x7a60a20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0168.386] wcscat (in: _Dest=0x7a60a20, _Source="Spelling.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" [0168.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0168.387] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.NOR", cAlternateFileName="")) returned 1 [0168.387] wcscmp (_String1="updater.NOR", _String2=".") returned 1 [0168.387] wcscmp (_String1="updater.NOR", _String2="..") returned 1 [0168.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61200 [0168.387] wcscpy (in: _Dest=0x7a61200, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0168.387] wcscat (in: _Dest=0x7a61200, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0168.387] wcscat (in: _Dest=0x7a61200, _Source="updater.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" [0168.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0168.388] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NOR", cAlternateFileName="")) returned 1 [0168.388] wcscmp (_String1="Weblink.NOR", _String2=".") returned 1 [0168.388] wcscmp (_String1="Weblink.NOR", _String2="..") returned 1 [0168.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60ab0 [0168.388] wcscpy (in: _Dest=0x7a60ab0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO" [0168.388] wcscat (in: _Dest=0x7a60ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\" [0168.388] wcscat (in: _Dest=0x7a60ab0, _Source="Weblink.NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" [0168.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0168.389] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NOR", cAlternateFileName="")) returned 0 [0168.389] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0168.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0168.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 [0168.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f038) returned 1 Thread: id = 2111 os_tid = 0xb44 [0148.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da60f0 [0148.928] wcscpy (in: _Dest=0x3da60f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0148.928] wcscat (in: _Dest=0x3da60f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0148.928] wcscat (in: _Dest=0x3da60f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*" [0148.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2fd0 [0148.928] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda33ab80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73e70 [0151.673] wcscmp (_String1=".", _String2=".") returned 0 [0151.673] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda33ab80, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe14721e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.673] wcscmp (_String1="..", _String2=".") returned 1 [0151.673] wcscmp (_String1="..", _String2="..") returned 0 [0151.673] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.NLD", cAlternateFileName="ACCESS~1.NLD")) returned 1 [0151.674] wcscmp (_String1="accessibility.NLD", _String2=".") returned 1 [0151.674] wcscmp (_String1="accessibility.NLD", _String2="..") returned 1 [0151.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63710 [0151.674] wcscpy (in: _Dest=0x7a63710, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0151.674] wcscat (in: _Dest=0x7a63710, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0151.674] wcscat (in: _Dest=0x7a63710, _Source="accessibility.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" [0163.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0163.902] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.NLD", cAlternateFileName="")) returned 1 [0163.902] wcscmp (_String1="Acroform.NLD", _String2=".") returned 1 [0163.902] wcscmp (_String1="Acroform.NLD", _String2="..") returned 1 [0163.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d444e0 [0163.902] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.902] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.902] wcscat (in: _Dest=0x3d444e0, _Source="Acroform.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" [0163.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0163.903] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc92aa20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.NLD", cAlternateFileName="ADOBEC~1.NLD")) returned 1 [0163.903] wcscmp (_String1="AdobeCollabSync.NLD", _String2=".") returned 1 [0163.903] wcscmp (_String1="AdobeCollabSync.NLD", _String2="..") returned 1 [0163.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62310 [0163.904] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.904] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.904] wcscat (in: _Dest=0x7a62310, _Source="AdobeCollabSync.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" [0163.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0163.905] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe10e00e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.NLD", cAlternateFileName="")) returned 1 [0163.905] wcscmp (_String1="Annots.NLD", _String2=".") returned 1 [0163.905] wcscmp (_String1="Annots.NLD", _String2="..") returned 1 [0163.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45c80 [0163.905] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.905] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.905] wcscat (in: _Dest=0x3d45c80, _Source="Annots.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" [0163.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0163.907] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.NLD", cAlternateFileName="BRDLAN~1.NLD")) returned 1 [0163.907] wcscmp (_String1="BRdlang32.NLD", _String2=".") returned 1 [0163.907] wcscmp (_String1="BRdlang32.NLD", _String2="..") returned 1 [0163.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64848 [0163.907] wcscpy (in: _Dest=0x7a64848, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.907] wcscat (in: _Dest=0x7a64848, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.907] wcscat (in: _Dest=0x7a64848, _Source="BRdlang32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" [0163.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0163.908] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe125cea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.NLD", cAlternateFileName="")) returned 1 [0163.908] wcscmp (_String1="Checkers.NLD", _String2=".") returned 1 [0163.908] wcscmp (_String1="Checkers.NLD", _String2="..") returned 1 [0163.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45650 [0163.908] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.908] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.908] wcscat (in: _Dest=0x3d45650, _Source="Checkers.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" [0163.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0163.910] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x21400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.NLD", cAlternateFileName="")) returned 1 [0163.910] wcscmp (_String1="DigSig.NLD", _String2=".") returned 1 [0163.910] wcscmp (_String1="DigSig.NLD", _String2="..") returned 1 [0163.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45e30 [0163.910] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.910] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.910] wcscat (in: _Dest=0x3d45e30, _Source="DigSig.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" [0163.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld")) returned 0x20 [0163.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD", dwFileAttributes=0x20) returned 0 [0163.913] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.913] GetLastError () returned 0x5 [0163.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD", dwFileAttributes=0x20) returned 0 [0163.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 [0163.913] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.NLD", cAlternateFileName="")) returned 1 [0163.913] wcscmp (_String1="DVA.NLD", _String2=".") returned 1 [0163.913] wcscmp (_String1="DVA.NLD", _String2="..") returned 1 [0163.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9560 [0163.913] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.914] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.914] wcscat (in: _Dest=0x3eb9560, _Source="DVA.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" [0163.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld")) returned 0x20 [0163.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD", dwFileAttributes=0x20) returned 0 [0163.918] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.918] GetLastError () returned 0x5 [0163.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD", dwFileAttributes=0x20) returned 0 [0163.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 [0163.919] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.NLD", cAlternateFileName="")) returned 1 [0163.919] wcscmp (_String1="eBook.NLD", _String2=".") returned 1 [0163.919] wcscmp (_String1="eBook.NLD", _String2="..") returned 1 [0163.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44210 [0163.919] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.919] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.919] wcscat (in: _Dest=0x3d44210, _Source="eBook.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" [0163.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld")) returned 0x20 [0163.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD", dwFileAttributes=0x20) returned 0 [0163.920] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.920] GetLastError () returned 0x5 [0163.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD", dwFileAttributes=0x20) returned 0 [0163.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0163.920] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.NLD", cAlternateFileName="")) returned 1 [0163.920] wcscmp (_String1="EScript.NLD", _String2=".") returned 1 [0163.920] wcscmp (_String1="EScript.NLD", _String2="..") returned 1 [0163.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44210 [0163.920] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.920] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.920] wcscat (in: _Dest=0x3d44210, _Source="EScript.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" [0163.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld")) returned 0x20 [0163.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD", dwFileAttributes=0x20) returned 0 [0163.921] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.921] GetLastError () returned 0x5 [0163.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD", dwFileAttributes=0x20) returned 0 [0163.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0163.922] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.NLD", cAlternateFileName="")) returned 1 [0163.922] wcscmp (_String1="IA32.NLD", _String2=".") returned 1 [0163.922] wcscmp (_String1="IA32.NLD", _String2="..") returned 1 [0163.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0163.922] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.922] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.922] wcscat (in: _Dest=0x3eb9560, _Source="IA32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" [0163.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld")) returned 0x20 [0163.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD", dwFileAttributes=0x20) returned 0 [0163.933] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.933] GetLastError () returned 0x5 [0163.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD", dwFileAttributes=0x20) returned 0 [0163.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 [0163.933] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.NLD", cAlternateFileName="MAKEAC~1.NLD")) returned 1 [0163.933] wcscmp (_String1="makeaccessible.NLD", _String2=".") returned 1 [0163.933] wcscmp (_String1="makeaccessible.NLD", _String2="..") returned 1 [0163.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62590 [0163.933] wcscpy (in: _Dest=0x7a62590, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.934] wcscat (in: _Dest=0x7a62590, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.934] wcscat (in: _Dest=0x7a62590, _Source="makeaccessible.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" [0163.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld")) returned 0x20 [0163.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD", dwFileAttributes=0x20) returned 0 [0163.964] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.965] GetLastError () returned 0x5 [0163.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD", dwFileAttributes=0x20) returned 0 [0163.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62590) returned 1 [0163.965] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda33ab80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.NLD", cAlternateFileName="MULTIM~1.NLD")) returned 1 [0163.965] wcscmp (_String1="Multimedia.NLD", _String2=".") returned 1 [0163.965] wcscmp (_String1="Multimedia.NLD", _String2="..") returned 1 [0163.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0163.965] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.965] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.965] wcscat (in: _Dest=0x3eb5d20, _Source="Multimedia.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" [0163.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld")) returned 0x20 [0163.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD", dwFileAttributes=0x20) returned 0 [0163.966] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.966] GetLastError () returned 0x5 [0163.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD", dwFileAttributes=0x20) returned 0 [0163.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0163.966] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.NLD", cAlternateFileName="")) returned 1 [0163.966] wcscmp (_String1="pddom.NLD", _String2=".") returned 1 [0163.966] wcscmp (_String1="pddom.NLD", _String2="..") returned 1 [0163.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45e30 [0163.966] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.966] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.967] wcscat (in: _Dest=0x3d45e30, _Source="pddom.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" [0163.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld")) returned 0x20 [0163.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD", dwFileAttributes=0x20) returned 0 [0163.989] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.989] GetLastError () returned 0x5 [0163.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD", dwFileAttributes=0x20) returned 0 [0163.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 [0163.989] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x84200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.NLD", cAlternateFileName="")) returned 1 [0163.989] wcscmp (_String1="PPKLITE.NLD", _String2=".") returned 1 [0163.990] wcscmp (_String1="PPKLITE.NLD", _String2="..") returned 1 [0163.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45e30 [0163.990] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.990] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.990] wcscat (in: _Dest=0x3d45e30, _Source="PPKLITE.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" [0163.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld")) returned 0x20 [0163.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD", dwFileAttributes=0x20) returned 0 [0163.990] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.990] GetLastError () returned 0x5 [0163.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD", dwFileAttributes=0x20) returned 0 [0163.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 [0163.991] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb66bce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x155c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.NLD", cAlternateFileName="")) returned 1 [0163.991] wcscmp (_String1="RdLang32.NLD", _String2=".") returned 1 [0163.991] wcscmp (_String1="RdLang32.NLD", _String2="..") returned 1 [0163.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45e30 [0163.991] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.991] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.991] wcscat (in: _Dest=0x3d45e30, _Source="RdLang32.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" [0163.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld")) returned 0x20 [0163.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD", dwFileAttributes=0x20) returned 0 [0163.992] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.992] GetLastError () returned 0x5 [0163.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD", dwFileAttributes=0x20) returned 0 [0163.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 [0163.992] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe14721e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.NLD", cAlternateFileName="READOU~1.NLD")) returned 1 [0163.992] wcscmp (_String1="ReadOutLoud.NLD", _String2=".") returned 1 [0163.993] wcscmp (_String1="ReadOutLoud.NLD", _String2="..") returned 1 [0163.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6a30 [0163.993] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.993] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.993] wcscat (in: _Dest=0x3eb6a30, _Source="ReadOutLoud.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" [0163.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld")) returned 0x20 [0163.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD", dwFileAttributes=0x20) returned 0 [0163.993] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.994] GetLastError () returned 0x5 [0163.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD", dwFileAttributes=0x20) returned 0 [0163.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0163.994] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.NLD", cAlternateFileName="")) returned 1 [0163.994] wcscmp (_String1="reflow.NLD", _String2=".") returned 1 [0163.994] wcscmp (_String1="reflow.NLD", _String2="..") returned 1 [0163.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45e30 [0163.994] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.994] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.994] wcscat (in: _Dest=0x3d45e30, _Source="reflow.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" [0163.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld")) returned 0x20 [0163.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD", dwFileAttributes=0x20) returned 0 [0163.995] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.995] GetLastError () returned 0x5 [0163.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD", dwFileAttributes=0x20) returned 0 [0163.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 [0163.996] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.NLD", cAlternateFileName="SAVEAS~1.NLD")) returned 1 [0163.996] wcscmp (_String1="SaveAsRTF.NLD", _String2=".") returned 1 [0163.996] wcscmp (_String1="SaveAsRTF.NLD", _String2="..") returned 1 [0163.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0163.996] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.996] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.996] wcscat (in: _Dest=0x3eb6a30, _Source="SaveAsRTF.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" [0163.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld")) returned 0x20 [0163.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD", dwFileAttributes=0x20) returned 0 [0163.997] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.997] GetLastError () returned 0x5 [0163.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD", dwFileAttributes=0x20) returned 0 [0163.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0163.997] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.NLD", cAlternateFileName="")) returned 1 [0163.997] wcscmp (_String1="Search.NLD", _String2=".") returned 1 [0163.997] wcscmp (_String1="Search.NLD", _String2="..") returned 1 [0163.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45e30 [0163.997] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.997] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.997] wcscat (in: _Dest=0x3d45e30, _Source="Search.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" [0163.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld")) returned 0x20 [0163.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD", dwFileAttributes=0x20) returned 0 [0163.998] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.998] GetLastError () returned 0x5 [0163.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD", dwFileAttributes=0x20) returned 0 [0163.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 [0163.998] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1236d40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.NLD", cAlternateFileName="")) returned 1 [0163.999] wcscmp (_String1="SendMail.NLD", _String2=".") returned 1 [0163.999] wcscmp (_String1="SendMail.NLD", _String2="..") returned 1 [0163.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45e30 [0163.999] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0163.999] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0163.999] wcscat (in: _Dest=0x3d45e30, _Source="SendMail.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" [0163.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld")) returned 0x20 [0163.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD", dwFileAttributes=0x20) returned 0 [0163.999] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.000] GetLastError () returned 0x5 [0164.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD", dwFileAttributes=0x20) returned 0 [0164.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 [0164.000] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.000] wcscmp (_String1="Services", _String2=".") returned 1 [0164.000] wcscmp (_String1="Services", _String2="..") returned 1 [0164.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0164.000] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0164.000] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0164.000] wcscat (in: _Dest=0x3eb9560, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0164.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45e30 [0164.001] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0164.001] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\" [0164.001] wcscat (in: _Dest=0x3d45e30, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*" [0164.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0164.001] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0164.001] wcscmp (_String1=".", _String2=".") returned 0 [0164.002] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.002] wcscmp (_String1="..", _String2=".") returned 1 [0164.002] wcscmp (_String1="..", _String2="..") returned 0 [0164.002] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x924e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0164.002] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0164.002] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0164.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053f00 [0164.002] wcscpy (in: _Dest=0x3053f00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0164.002] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\" [0164.002] wcscat (in: _Dest=0x3053f00, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" [0164.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx")) returned 0x20 [0164.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0164.003] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.003] GetLastError () returned 0x5 [0164.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0164.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 [0164.004] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0164.004] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0164.004] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0164.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053f00 [0164.004] wcscpy (in: _Dest=0x3053f00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services" [0164.004] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\" [0164.004] wcscat (in: _Dest=0x3053f00, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" [0164.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx")) returned 0x20 [0165.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0165.127] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.127] GetLastError () returned 0x5 [0165.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0165.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 [0165.224] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0165.225] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0165.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0165.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 [0165.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 [0165.225] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.NLD", cAlternateFileName="")) returned 1 [0165.225] wcscmp (_String1="Spelling.NLD", _String2=".") returned 1 [0165.226] wcscmp (_String1="Spelling.NLD", _String2="..") returned 1 [0165.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45e30 [0165.226] wcscpy (in: _Dest=0x3d45e30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0165.226] wcscat (in: _Dest=0x3d45e30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0165.226] wcscat (in: _Dest=0x3d45e30, _Source="Spelling.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" [0171.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0171.687] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.NLD", cAlternateFileName="")) returned 1 [0171.688] wcscmp (_String1="updater.NLD", _String2=".") returned 1 [0171.688] wcscmp (_String1="updater.NLD", _String2="..") returned 1 [0171.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60bd0 [0171.688] wcscpy (in: _Dest=0x7a60bd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0171.688] wcscat (in: _Dest=0x7a60bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0171.688] wcscat (in: _Dest=0x7a60bd0, _Source="updater.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" [0171.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0171.689] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NLD", cAlternateFileName="")) returned 1 [0171.689] wcscmp (_String1="Weblink.NLD", _String2=".") returned 1 [0171.689] wcscmp (_String1="Weblink.NLD", _String2="..") returned 1 [0171.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60a20 [0171.689] wcscpy (in: _Dest=0x7a60a20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL" [0171.689] wcscat (in: _Dest=0x7a60a20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\" [0171.689] wcscat (in: _Dest=0x7a60a20, _Source="Weblink.NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" [0171.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0171.690] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3ea2fd0 | out: lpFindFileData=0x3ea2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1210be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.NLD", cAlternateFileName="")) returned 0 [0171.690] FindClose (in: hFindFile=0x3e73e70 | out: hFindFile=0x3e73e70) returned 1 [0171.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2fd0) returned 1 [0171.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da60f0) returned 1 [0171.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 Thread: id = 2112 os_tid = 0xb38 [0148.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e46d98 [0148.933] wcscpy (in: _Dest=0x3e46d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0148.933] wcscat (in: _Dest=0x3e46d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0148.933] wcscat (in: _Dest=0x3e46d98, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*" [0148.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3e40 [0148.933] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73ff0 [0151.672] wcscmp (_String1=".", _String2=".") returned 0 [0151.672] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.672] wcscmp (_String1="..", _String2=".") returned 1 [0151.672] wcscmp (_String1="..", _String2="..") returned 0 [0151.672] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.POL", cAlternateFileName="ACCESS~1.POL")) returned 1 [0151.672] wcscmp (_String1="accessibility.POL", _String2=".") returned 1 [0151.672] wcscmp (_String1="accessibility.POL", _String2="..") returned 1 [0151.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a635d0 [0151.672] wcscpy (in: _Dest=0x7a635d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0151.672] wcscat (in: _Dest=0x7a635d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0151.672] wcscat (in: _Dest=0x7a635d0, _Source="accessibility.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" [0156.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a635d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0156.182] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.POL", cAlternateFileName="")) returned 1 [0156.182] wcscmp (_String1="Acroform.POL", _String2=".") returned 1 [0156.182] wcscmp (_String1="Acroform.POL", _String2="..") returned 1 [0156.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60ea0 [0156.182] wcscpy (in: _Dest=0x7a60ea0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.182] wcscat (in: _Dest=0x7a60ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.182] wcscat (in: _Dest=0x7a60ea0, _Source="Acroform.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" [0156.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0156.183] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.POL", cAlternateFileName="ADOBEC~1.POL")) returned 1 [0156.183] wcscmp (_String1="AdobeCollabSync.POL", _String2=".") returned 1 [0156.183] wcscmp (_String1="AdobeCollabSync.POL", _String2="..") returned 1 [0156.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a629f0 [0156.183] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.183] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.183] wcscat (in: _Dest=0x7a629f0, _Source="AdobeCollabSync.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" [0156.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0156.184] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.POL", cAlternateFileName="")) returned 1 [0156.184] wcscmp (_String1="Annots.POL", _String2=".") returned 1 [0156.184] wcscmp (_String1="Annots.POL", _String2="..") returned 1 [0156.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60f30 [0156.184] wcscpy (in: _Dest=0x7a60f30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.185] wcscat (in: _Dest=0x7a60f30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.185] wcscat (in: _Dest=0x7a60f30, _Source="Annots.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" [0156.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0156.186] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.POL", cAlternateFileName="BRDLAN~1.POL")) returned 1 [0156.186] wcscmp (_String1="BRdlang32.POL", _String2=".") returned 1 [0156.186] wcscmp (_String1="BRdlang32.POL", _String2="..") returned 1 [0156.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad5b60 [0156.186] wcscpy (in: _Dest=0x7ad5b60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.186] wcscat (in: _Dest=0x7ad5b60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.186] wcscat (in: _Dest=0x7ad5b60, _Source="BRdlang32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" [0156.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0156.187] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.POL", cAlternateFileName="")) returned 1 [0156.187] wcscmp (_String1="Checkers.POL", _String2=".") returned 1 [0156.187] wcscmp (_String1="Checkers.POL", _String2="..") returned 1 [0156.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60e10 [0156.187] wcscpy (in: _Dest=0x7a60e10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.187] wcscat (in: _Dest=0x7a60e10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.187] wcscat (in: _Dest=0x7a60e10, _Source="Checkers.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" [0156.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0156.188] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.POL", cAlternateFileName="")) returned 1 [0156.189] wcscmp (_String1="DigSig.POL", _String2=".") returned 1 [0156.189] wcscmp (_String1="DigSig.POL", _String2="..") returned 1 [0156.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60fc0 [0156.189] wcscpy (in: _Dest=0x7a60fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.189] wcscat (in: _Dest=0x7a60fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.189] wcscat (in: _Dest=0x7a60fc0, _Source="DigSig.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" [0156.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0156.190] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.POL", cAlternateFileName="")) returned 1 [0156.190] wcscmp (_String1="DVA.POL", _String2=".") returned 1 [0156.190] wcscmp (_String1="DVA.POL", _String2="..") returned 1 [0156.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3063428 [0156.190] wcscpy (in: _Dest=0x3063428, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.190] wcscat (in: _Dest=0x3063428, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.190] wcscat (in: _Dest=0x3063428, _Source="DVA.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" [0156.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3063428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0156.191] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.POL", cAlternateFileName="")) returned 1 [0156.191] wcscmp (_String1="eBook.POL", _String2=".") returned 1 [0156.191] wcscmp (_String1="eBook.POL", _String2="..") returned 1 [0156.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a606c0 [0156.192] wcscpy (in: _Dest=0x7a606c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.192] wcscat (in: _Dest=0x7a606c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.192] wcscat (in: _Dest=0x7a606c0, _Source="eBook.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" [0156.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a606c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0156.193] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe195af40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.POL", cAlternateFileName="")) returned 1 [0156.193] wcscmp (_String1="EScript.POL", _String2=".") returned 1 [0156.193] wcscmp (_String1="EScript.POL", _String2="..") returned 1 [0156.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60630 [0156.193] wcscpy (in: _Dest=0x7a60630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.193] wcscat (in: _Dest=0x7a60630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.193] wcscat (in: _Dest=0x7a60630, _Source="EScript.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" [0156.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0156.194] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.POL", cAlternateFileName="")) returned 1 [0156.194] wcscmp (_String1="IA32.POL", _String2=".") returned 1 [0156.194] wcscmp (_String1="IA32.POL", _String2="..") returned 1 [0156.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3061f70 [0156.195] wcscpy (in: _Dest=0x3061f70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.195] wcscat (in: _Dest=0x3061f70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.195] wcscat (in: _Dest=0x3061f70, _Source="IA32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" [0156.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3061f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0156.196] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda86fba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.POL", cAlternateFileName="MAKEAC~1.POL")) returned 1 [0156.196] wcscmp (_String1="makeaccessible.POL", _String2=".") returned 1 [0156.196] wcscmp (_String1="makeaccessible.POL", _String2="..") returned 1 [0156.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62c70 [0156.196] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.196] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.196] wcscat (in: _Dest=0x7a62c70, _Source="makeaccessible.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" [0156.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0156.197] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.POL", cAlternateFileName="MULTIM~1.POL")) returned 1 [0156.197] wcscmp (_String1="Multimedia.POL", _String2=".") returned 1 [0156.197] wcscmp (_String1="Multimedia.POL", _String2="..") returned 1 [0156.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad64e0 [0156.197] wcscpy (in: _Dest=0x7ad64e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.197] wcscat (in: _Dest=0x7ad64e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.198] wcscat (in: _Dest=0x7ad64e0, _Source="Multimedia.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" [0156.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad64e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0156.198] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.POL", cAlternateFileName="")) returned 1 [0156.198] wcscmp (_String1="pddom.POL", _String2=".") returned 1 [0156.198] wcscmp (_String1="pddom.POL", _String2="..") returned 1 [0156.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60480 [0156.199] wcscpy (in: _Dest=0x7a60480, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.199] wcscat (in: _Dest=0x7a60480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.199] wcscat (in: _Dest=0x7a60480, _Source="pddom.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" [0156.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0156.200] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.POL", cAlternateFileName="")) returned 1 [0156.200] wcscmp (_String1="PPKLite.POL", _String2=".") returned 1 [0156.200] wcscmp (_String1="PPKLite.POL", _String2="..") returned 1 [0156.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60750 [0156.200] wcscpy (in: _Dest=0x7a60750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.200] wcscat (in: _Dest=0x7a60750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.200] wcscat (in: _Dest=0x7a60750, _Source="PPKLite.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" [0156.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0156.201] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd0c1040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.POL", cAlternateFileName="")) returned 1 [0156.201] wcscmp (_String1="RdLang32.POL", _String2=".") returned 1 [0156.201] wcscmp (_String1="RdLang32.POL", _String2="..") returned 1 [0156.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a602d0 [0156.201] wcscpy (in: _Dest=0x7a602d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.201] wcscat (in: _Dest=0x7a602d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.201] wcscat (in: _Dest=0x7a602d0, _Source="RdLang32.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" [0156.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a602d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0156.202] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.POL", cAlternateFileName="READOU~1.POL")) returned 1 [0156.202] wcscmp (_String1="ReadOutLoud.POL", _String2=".") returned 1 [0156.202] wcscmp (_String1="ReadOutLoud.POL", _String2="..") returned 1 [0156.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad5608 [0156.202] wcscpy (in: _Dest=0x7ad5608, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.202] wcscat (in: _Dest=0x7ad5608, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.202] wcscat (in: _Dest=0x7ad5608, _Source="ReadOutLoud.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" [0156.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0156.203] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdab1d460, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.POL", cAlternateFileName="")) returned 1 [0156.203] wcscmp (_String1="reflow.POL", _String2=".") returned 1 [0156.203] wcscmp (_String1="reflow.POL", _String2="..") returned 1 [0156.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60510 [0156.204] wcscpy (in: _Dest=0x7a60510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.204] wcscat (in: _Dest=0x7a60510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.204] wcscat (in: _Dest=0x7a60510, _Source="reflow.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" [0156.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0156.205] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.POL", cAlternateFileName="SAVEAS~1.POL")) returned 1 [0156.205] wcscmp (_String1="SaveAsRTF.POL", _String2=".") returned 1 [0156.205] wcscmp (_String1="SaveAsRTF.POL", _String2="..") returned 1 [0156.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6448 [0156.205] wcscpy (in: _Dest=0x7ad6448, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.205] wcscat (in: _Dest=0x7ad6448, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.205] wcscat (in: _Dest=0x7ad6448, _Source="SaveAsRTF.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" [0156.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0156.206] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.POL", cAlternateFileName="")) returned 1 [0156.206] wcscmp (_String1="Search.POL", _String2=".") returned 1 [0156.206] wcscmp (_String1="Search.POL", _String2="..") returned 1 [0156.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60360 [0156.206] wcscpy (in: _Dest=0x7a60360, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.206] wcscat (in: _Dest=0x7a60360, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.206] wcscat (in: _Dest=0x7a60360, _Source="Search.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" [0156.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4 [0156.207] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.POL", cAlternateFileName="")) returned 1 [0156.207] wcscmp (_String1="SendMail.POL", _String2=".") returned 1 [0156.207] wcscmp (_String1="SendMail.POL", _String2="..") returned 1 [0156.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60870 [0156.207] wcscpy (in: _Dest=0x7a60870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.207] wcscat (in: _Dest=0x7a60870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.207] wcscat (in: _Dest=0x7a60870, _Source="SendMail.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" [0156.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0156.208] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0156.208] wcscmp (_String1="Services", _String2=".") returned 1 [0156.209] wcscmp (_String1="Services", _String2="..") returned 1 [0156.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062c30 [0156.209] wcscpy (in: _Dest=0x3062c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.209] wcscat (in: _Dest=0x3062c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.209] wcscat (in: _Dest=0x3062c30, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0156.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3062c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0156.210] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.POL", cAlternateFileName="")) returned 1 [0156.210] wcscmp (_String1="Spelling.POL", _String2=".") returned 1 [0156.210] wcscmp (_String1="Spelling.POL", _String2="..") returned 1 [0156.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a605a0 [0156.210] wcscpy (in: _Dest=0x7a605a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.210] wcscat (in: _Dest=0x7a605a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.210] wcscat (in: _Dest=0x7a605a0, _Source="Spelling.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" [0156.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a605a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0156.211] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.POL", cAlternateFileName="")) returned 1 [0156.211] wcscmp (_String1="updater.POL", _String2=".") returned 1 [0156.211] wcscmp (_String1="updater.POL", _String2="..") returned 1 [0156.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a603f0 [0156.211] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.211] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.211] wcscat (in: _Dest=0x7a603f0, _Source="updater.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" [0156.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a603f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0156.213] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.POL", cAlternateFileName="")) returned 1 [0156.213] wcscmp (_String1="WebLink.POL", _String2=".") returned 1 [0156.213] wcscmp (_String1="WebLink.POL", _String2="..") returned 1 [0156.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60240 [0156.213] wcscpy (in: _Dest=0x7a60240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL" [0156.213] wcscat (in: _Dest=0x7a60240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\" [0156.213] wcscat (in: _Dest=0x7a60240, _Source="WebLink.POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" [0156.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0156.214] FindNextFileW (in: hFindFile=0x3e73ff0, lpFindFileData=0x3ea3e40 | out: lpFindFileData=0x3ea3e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe19810a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.POL", cAlternateFileName="")) returned 0 [0156.214] FindClose (in: hFindFile=0x3e73ff0 | out: hFindFile=0x3e73ff0) returned 1 [0156.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3e40) returned 1 [0156.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46d98) returned 1 [0156.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 Thread: id = 2113 os_tid = 0xb34 [0149.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47c18 [0149.299] wcscpy (in: _Dest=0x3e47c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0149.299] wcscat (in: _Dest=0x3e47c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0149.299] wcscat (in: _Dest=0x3e47c18, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*" [0149.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0149.299] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0150.366] wcscmp (_String1=".", _String2=".") returned 0 [0150.366] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2ee8c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.367] wcscmp (_String1="..", _String2=".") returned 1 [0150.367] wcscmp (_String1="..", _String2="..") returned 0 [0150.367] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.PTB", cAlternateFileName="ACCESS~1.PTB")) returned 1 [0150.367] wcscmp (_String1="accessibility.PTB", _String2=".") returned 1 [0150.367] wcscmp (_String1="accessibility.PTB", _String2="..") returned 1 [0150.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4be0 [0150.367] wcscpy (in: _Dest=0x3df4be0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0150.367] wcscat (in: _Dest=0x3df4be0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0150.367] wcscat (in: _Dest=0x3df4be0, _Source="accessibility.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" [0151.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24bc [0151.153] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1283000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x69400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.PTB", cAlternateFileName="")) returned 1 [0151.153] wcscmp (_String1="Acroform.PTB", _String2=".") returned 1 [0151.154] wcscmp (_String1="Acroform.PTB", _String2="..") returned 1 [0151.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d444e0 [0151.154] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.154] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.154] wcscat (in: _Dest=0x3d444e0, _Source="Acroform.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" [0151.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b8 [0151.155] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.PTB", cAlternateFileName="ADOBEC~1.PTB")) returned 1 [0151.155] wcscmp (_String1="AdobeCollabSync.PTB", _String2=".") returned 1 [0151.155] wcscmp (_String1="AdobeCollabSync.PTB", _String2="..") returned 1 [0151.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63490 [0151.155] wcscpy (in: _Dest=0x7a63490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.155] wcscat (in: _Dest=0x7a63490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.155] wcscat (in: _Dest=0x7a63490, _Source="AdobeCollabSync.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" [0151.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b4 [0151.156] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x79e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.PTB", cAlternateFileName="")) returned 1 [0151.156] wcscmp (_String1="Annots.PTB", _String2=".") returned 1 [0151.156] wcscmp (_String1="Annots.PTB", _String2="..") returned 1 [0151.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44690 [0151.156] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.156] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.156] wcscat (in: _Dest=0x3d44690, _Source="Annots.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" [0151.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24b0 [0151.157] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.PTB", cAlternateFileName="BRDLAN~1.PTB")) returned 1 [0151.157] wcscmp (_String1="BRdlang32.PTB", _String2=".") returned 1 [0151.158] wcscmp (_String1="BRdlang32.PTB", _String2="..") returned 1 [0151.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7318 [0151.158] wcscpy (in: _Dest=0x3eb7318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.158] wcscat (in: _Dest=0x3eb7318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.158] wcscat (in: _Dest=0x3eb7318, _Source="BRdlang32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" [0151.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24ac [0151.159] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.PTB", cAlternateFileName="")) returned 1 [0151.159] wcscmp (_String1="Checkers.PTB", _String2=".") returned 1 [0151.159] wcscmp (_String1="Checkers.PTB", _String2="..") returned 1 [0151.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45920 [0151.159] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.159] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.159] wcscat (in: _Dest=0x3d45920, _Source="Checkers.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" [0151.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a8 [0151.160] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.PTB", cAlternateFileName="")) returned 1 [0151.160] wcscmp (_String1="DigSig.PTB", _String2=".") returned 1 [0151.160] wcscmp (_String1="DigSig.PTB", _String2="..") returned 1 [0151.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45530 [0151.160] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.160] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.160] wcscat (in: _Dest=0x3d45530, _Source="DigSig.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" [0151.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a4 [0151.166] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12cf2c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.PTB", cAlternateFileName="")) returned 1 [0151.166] wcscmp (_String1="DVA.PTB", _String2=".") returned 1 [0151.166] wcscmp (_String1="DVA.PTB", _String2="..") returned 1 [0151.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8c58 [0151.166] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.166] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.166] wcscat (in: _Dest=0x3eb8c58, _Source="DVA.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" [0151.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24a0 [0151.167] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1425f20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.PTB", cAlternateFileName="")) returned 1 [0151.168] wcscmp (_String1="eBook.PTB", _String2=".") returned 1 [0151.168] wcscmp (_String1="eBook.PTB", _String2="..") returned 1 [0151.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44f90 [0151.168] wcscpy (in: _Dest=0x3d44f90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.168] wcscat (in: _Dest=0x3d44f90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.168] wcscat (in: _Dest=0x3d44f90, _Source="eBook.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" [0151.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x249c [0151.169] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.PTB", cAlternateFileName="")) returned 1 [0151.169] wcscmp (_String1="EScript.PTB", _String2=".") returned 1 [0151.169] wcscmp (_String1="EScript.PTB", _String2="..") returned 1 [0151.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d459b0 [0151.169] wcscpy (in: _Dest=0x3d459b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.169] wcscat (in: _Dest=0x3d459b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.169] wcscat (in: _Dest=0x3d459b0, _Source="EScript.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" [0151.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d459b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2498 [0151.170] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.PTB", cAlternateFileName="")) returned 1 [0151.170] wcscmp (_String1="IA32.PTB", _String2=".") returned 1 [0151.170] wcscmp (_String1="IA32.PTB", _String2="..") returned 1 [0151.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba4c8 [0151.170] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.170] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.170] wcscat (in: _Dest=0x3eba4c8, _Source="IA32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" [0151.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2494 [0151.171] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda73f0a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.PTB", cAlternateFileName="MAKEAC~1.PTB")) returned 1 [0151.171] wcscmp (_String1="makeaccessible.PTB", _String2=".") returned 1 [0151.172] wcscmp (_String1="makeaccessible.PTB", _String2="..") returned 1 [0151.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62630 [0151.172] wcscpy (in: _Dest=0x7a62630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.172] wcscat (in: _Dest=0x7a62630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.172] wcscat (in: _Dest=0x7a62630, _Source="makeaccessible.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" [0151.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2490 [0151.173] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2ee8c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.PTB", cAlternateFileName="MULTIM~1.PTB")) returned 1 [0151.173] wcscmp (_String1="Multimedia.PTB", _String2=".") returned 1 [0151.173] wcscmp (_String1="Multimedia.PTB", _String2="..") returned 1 [0151.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5a28 [0151.173] wcscpy (in: _Dest=0x3eb5a28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.173] wcscat (in: _Dest=0x3eb5a28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.173] wcscat (in: _Dest=0x3eb5a28, _Source="Multimedia.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" [0151.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248c [0151.174] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.PTB", cAlternateFileName="")) returned 1 [0151.174] wcscmp (_String1="pddom.PTB", _String2=".") returned 1 [0151.174] wcscmp (_String1="pddom.PTB", _String2="..") returned 1 [0151.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45770 [0151.174] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.174] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.174] wcscat (in: _Dest=0x3d45770, _Source="pddom.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" [0151.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2488 [0151.176] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.PTB", cAlternateFileName="")) returned 1 [0151.176] wcscmp (_String1="PPKLITE.PTB", _String2=".") returned 1 [0151.176] wcscmp (_String1="PPKLITE.PTB", _String2="..") returned 1 [0151.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60090 [0151.176] wcscpy (in: _Dest=0x7a60090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.176] wcscat (in: _Dest=0x7a60090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.176] wcscat (in: _Dest=0x7a60090, _Source="PPKLITE.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" [0151.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2484 [0151.183] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb6de100, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x150600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.PTB", cAlternateFileName="")) returned 1 [0151.183] wcscmp (_String1="RdLang32.PTB", _String2=".") returned 1 [0151.183] wcscmp (_String1="RdLang32.PTB", _String2="..") returned 1 [0151.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60120 [0151.183] wcscpy (in: _Dest=0x7a60120, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.183] wcscat (in: _Dest=0x7a60120, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.183] wcscat (in: _Dest=0x7a60120, _Source="RdLang32.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" [0151.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2480 [0151.184] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.PTB", cAlternateFileName="READOU~1.PTB")) returned 1 [0151.184] wcscmp (_String1="ReadOutLoud.PTB", _String2=".") returned 1 [0151.184] wcscmp (_String1="ReadOutLoud.PTB", _String2="..") returned 1 [0151.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5860 [0151.184] wcscpy (in: _Dest=0x3eb5860, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.185] wcscat (in: _Dest=0x3eb5860, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.185] wcscat (in: _Dest=0x3eb5860, _Source="ReadOutLoud.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" [0151.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x201c [0151.186] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6f2de0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.PTB", cAlternateFileName="")) returned 1 [0151.186] wcscmp (_String1="reflow.PTB", _String2=".") returned 1 [0151.186] wcscmp (_String1="reflow.PTB", _String2="..") returned 1 [0151.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61170 [0151.186] wcscpy (in: _Dest=0x7a61170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.186] wcscat (in: _Dest=0x7a61170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.186] wcscat (in: _Dest=0x7a61170, _Source="reflow.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" [0151.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2468 [0151.187] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda78b360, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.PTB", cAlternateFileName="SAVEAS~1.PTB")) returned 1 [0151.187] wcscmp (_String1="SaveAsRTF.PTB", _String2=".") returned 1 [0151.187] wcscmp (_String1="SaveAsRTF.PTB", _String2="..") returned 1 [0151.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb61e0 [0151.187] wcscpy (in: _Dest=0x3eb61e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.187] wcscat (in: _Dest=0x3eb61e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.187] wcscat (in: _Dest=0x3eb61e0, _Source="SaveAsRTF.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" [0151.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb61e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x245c [0151.190] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.PTB", cAlternateFileName="")) returned 1 [0151.190] wcscmp (_String1="Search.PTB", _String2=".") returned 1 [0151.190] wcscmp (_String1="Search.PTB", _String2="..") returned 1 [0151.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a610e0 [0151.190] wcscpy (in: _Dest=0x7a610e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.190] wcscat (in: _Dest=0x7a610e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.190] wcscat (in: _Dest=0x7a610e0, _Source="Search.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" [0151.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a610e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x235c [0151.191] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.PTB", cAlternateFileName="")) returned 1 [0151.191] wcscmp (_String1="SendMail.PTB", _String2=".") returned 1 [0151.191] wcscmp (_String1="SendMail.PTB", _String2="..") returned 1 [0151.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61050 [0151.192] wcscpy (in: _Dest=0x7a61050, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.192] wcscat (in: _Dest=0x7a61050, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.192] wcscat (in: _Dest=0x7a61050, _Source="SendMail.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" [0151.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2358 [0151.193] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0151.194] wcscmp (_String1="Services", _String2=".") returned 1 [0151.194] wcscmp (_String1="Services", _String2="..") returned 1 [0151.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9cd0 [0151.194] wcscpy (in: _Dest=0x3eb9cd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.194] wcscat (in: _Dest=0x3eb9cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.194] wcscat (in: _Dest=0x3eb9cd0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0151.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2354 [0151.593] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.PTB", cAlternateFileName="")) returned 1 [0151.593] wcscmp (_String1="Spelling.PTB", _String2=".") returned 1 [0151.593] wcscmp (_String1="Spelling.PTB", _String2="..") returned 1 [0151.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45020 [0151.594] wcscpy (in: _Dest=0x3d45020, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0151.594] wcscat (in: _Dest=0x3d45020, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0151.594] wcscat (in: _Dest=0x3d45020, _Source="Spelling.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" [0154.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74 [0154.723] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.PTB", cAlternateFileName="")) returned 1 [0154.724] wcscmp (_String1="updater.PTB", _String2=".") returned 1 [0154.724] wcscmp (_String1="updater.PTB", _String2="..") returned 1 [0154.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d447b0 [0154.724] wcscpy (in: _Dest=0x3d447b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0154.724] wcscat (in: _Dest=0x3d447b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0154.724] wcscat (in: _Dest=0x3d447b0, _Source="updater.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" [0154.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d447b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x239c [0154.725] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.PTB", cAlternateFileName="")) returned 1 [0154.725] wcscmp (_String1="Weblink.PTB", _String2=".") returned 1 [0154.725] wcscmp (_String1="Weblink.PTB", _String2="..") returned 1 [0154.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45410 [0154.725] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR" [0154.725] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\" [0154.725] wcscat (in: _Dest=0x3d45410, _Source="Weblink.PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" [0154.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a0 [0154.726] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12a9160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.PTB", cAlternateFileName="")) returned 0 [0154.726] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0157.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0157.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c18) returned 1 [0157.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 Thread: id = 2114 os_tid = 0xb30 [0149.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d402b8 [0149.307] wcscpy (in: _Dest=0x3d402b8, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0149.307] wcscat (in: _Dest=0x3d402b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0149.307] wcscat (in: _Dest=0x3d402b8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" [0149.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0149.307] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d8c0 [0149.308] wcscmp (_String1=".", _String2=".") returned 0 [0149.308] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ca6930, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ca6930, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.308] wcscmp (_String1="..", _String2=".") returned 1 [0149.308] wcscmp (_String1="..", _String2="..") returned 0 [0149.308] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0149.308] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0149.308] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0149.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3daf178 [0149.308] wcscpy (in: _Dest=0x3daf178, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" [0149.308] wcscat (in: _Dest=0x3daf178, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\" [0149.308] wcscat (in: _Dest=0x3daf178, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0156.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3daf178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0156.100] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0156.100] FindClose (in: hFindFile=0x7a2d8c0 | out: hFindFile=0x7a2d8c0) returned 1 [0156.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0156.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402b8) returned 1 [0156.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65ad8) returned 1 Thread: id = 2115 os_tid = 0xb2c [0149.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e5d0 [0149.309] wcscpy (in: _Dest=0x7a5e5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" [0149.309] wcscat (in: _Dest=0x7a5e5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\" [0149.309] wcscat (in: _Dest=0x7a5e5d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*" [0149.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3bd8 [0149.309] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d980 [0149.310] wcscmp (_String1=".", _String2=".") returned 0 [0149.310] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xd907be40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xd907be40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.310] wcscmp (_String1="..", _String2=".") returned 1 [0149.310] wcscmp (_String1="..", _String2="..") returned 0 [0149.310] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb40a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 1 [0149.310] wcscmp (_String1="11.00", _String2=".") returned 1 [0149.310] wcscmp (_String1="11.00", _String2="..") returned 1 [0149.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66610 [0149.310] wcscpy (in: _Dest=0x7a66610, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity" [0149.310] wcscat (in: _Dest=0x7a66610, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\" [0149.310] wcscat (in: _Dest=0x7a66610, _Source="11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0156.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a66610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060 [0156.102] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x3ea3bd8 | out: lpFindFileData=0x3ea3bd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb40a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 0 [0156.103] FindClose (in: hFindFile=0x7a2d980 | out: hFindFile=0x7a2d980) returned 1 [0156.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3bd8) returned 1 [0156.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e5d0) returned 1 [0156.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c70f8) returned 1 Thread: id = 2116 os_tid = 0xb84 [0149.311] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js")) returned 0x2020 [0149.311] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", dwFileAttributes=0x20) returned 1 [0154.835] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b84 [0154.835] GetFileSizeEx (in: hFile=0x1b84, lpFileSize=0x927fc3c | out: lpFileSize=0x927fc3c*=0) returned 1 [0154.835] FlushFileBuffers (hFile=0x1b84) returned 1 [0155.606] CloseHandle (hObject=0x1b84) returned 1 [0155.610] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", dwFileAttributes=0x2020) returned 1 [0157.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7020) returned 1 Thread: id = 2117 os_tid = 0xb88 [0149.311] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js")) returned 0x2020 [0149.312] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", dwFileAttributes=0x20) returned 1 [0154.870] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fd0 [0154.887] GetFileSizeEx (in: hFile=0x1fd0, lpFileSize=0x8a8f80c | out: lpFileSize=0x8a8f80c*=10) returned 1 [0154.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0154.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0154.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0154.888] NtQuerySystemTime (in: CurrentTime=0x8a8f780 | out: CurrentTime=0x8a8f780*=132462177335340000) returned 0x0 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x6a17aea0 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0xbeddad1 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x44349c60 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x6e09b6cc [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x72153fb0 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x344d00fa [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x45f90788 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0xd9856cd [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x369740e4 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x578a6a03 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x14b6e24 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x15a6db34 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x26e0a1f7 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x4f38536 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x2dd3384 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x3093c63f [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x69368f14 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x49864778 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x548ef949 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x58448b81 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x49485860 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x551294dc [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x317540e8 [0154.888] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x4daa6ed [0154.889] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x775f4580 [0154.889] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x5c2d42a6 [0154.889] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x1b4d1cb3 [0154.889] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x1908f49e [0154.889] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x1493fb2a [0154.889] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x40c22069 [0154.889] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x6c6207fe [0154.889] RtlRandomEx (in: Seed=0x8a8f778 | out: Seed=0x8a8f778) returned 0x3d5ecca4 [0154.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0154.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0154.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0154.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0154.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85bc0 [0154.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0154.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0154.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0154.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0154.899] ReadFile (in: hFile=0x1fd0, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0xa, lpNumberOfBytesRead=0x8a8f774, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0x8a8f774*=0xa, lpOverlapped=0x0) returned 1 [0154.902] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.902] WriteFile (in: hFile=0x1fd0, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x8a8f778, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0x8a8f778*=0xa, lpOverlapped=0x0) returned 1 [0156.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0156.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0156.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0156.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0156.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0156.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0156.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85bc0) returned 1 [0156.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3dac618 [0156.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85bc0 [0156.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0156.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0156.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0156.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3dac500 [0156.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0156.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0156.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec59c8) returned 1 [0156.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0156.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85bc0) returned 1 [0156.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d54dd8 [0156.469] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.469] WriteFile (in: hFile=0x1fd0, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x8a8f800, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0x8a8f800*=0x112, lpOverlapped=0x0) returned 1 [0156.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24308 [0156.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0156.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0156.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0156.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0156.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0156.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0156.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0156.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0156.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24308) returned 1 [0156.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e84998 [0156.911] sprintf (in: _Dest=0x3e84998, _Format="%c%c" | out: _Dest="37") returned 2 [0156.911] sprintf (in: _Dest=0x3e8499a, _Format="%c%c" | out: _Dest="43") returned 2 [0156.911] sprintf (in: _Dest=0x3e8499c, _Format="%c%c" | out: _Dest="2c") returned 2 [0156.911] sprintf (in: _Dest=0x3e8499e, _Format="%c%c" | out: _Dest="ad") returned 2 [0156.911] sprintf (in: _Dest=0x3e849a0, _Format="%c%c" | out: _Dest="7b") returned 2 [0156.911] sprintf (in: _Dest=0x3e849a2, _Format="%c%c" | out: _Dest="e4") returned 2 [0156.911] sprintf (in: _Dest=0x3e849a4, _Format="%c%c" | out: _Dest="9e") returned 2 [0156.911] sprintf (in: _Dest=0x3e849a6, _Format="%c%c" | out: _Dest="9b") returned 2 [0156.911] sprintf (in: _Dest=0x3e849a8, _Format="%c%c" | out: _Dest="f9") returned 2 [0156.911] sprintf (in: _Dest=0x3e849aa, _Format="%c%c" | out: _Dest="c9") returned 2 [0156.911] sprintf (in: _Dest=0x3e849ac, _Format="%c%c" | out: _Dest="3c") returned 2 [0156.911] sprintf (in: _Dest=0x3e849ae, _Format="%c%c" | out: _Dest="e6") returned 2 [0156.911] sprintf (in: _Dest=0x3e849b0, _Format="%c%c" | out: _Dest="37") returned 2 [0156.911] sprintf (in: _Dest=0x3e849b2, _Format="%c%c" | out: _Dest="ef") returned 2 [0156.911] sprintf (in: _Dest=0x3e849b4, _Format="%c%c" | out: _Dest="2f") returned 2 [0156.911] sprintf (in: _Dest=0x3e849b6, _Format="%c%c" | out: _Dest="9c") returned 2 [0156.911] sprintf (in: _Dest=0x3e849b8, _Format="%c%c" | out: _Dest="fb") returned 2 [0156.911] sprintf (in: _Dest=0x3e849ba, _Format="%c%c" | out: _Dest="04") returned 2 [0156.911] sprintf (in: _Dest=0x3e849bc, _Format="%c%c" | out: _Dest="84") returned 2 [0156.911] sprintf (in: _Dest=0x3e849be, _Format="%c%c" | out: _Dest="58") returned 2 [0156.911] sprintf (in: _Dest=0x3e849c0, _Format="%c%c" | out: _Dest="1c") returned 2 [0156.911] sprintf (in: _Dest=0x3e849c2, _Format="%c%c" | out: _Dest="91") returned 2 [0156.911] sprintf (in: _Dest=0x3e849c4, _Format="%c%c" | out: _Dest="27") returned 2 [0156.911] sprintf (in: _Dest=0x3e849c6, _Format="%c%c" | out: _Dest="75") returned 2 [0156.911] sprintf (in: _Dest=0x3e849c8, _Format="%c%c" | out: _Dest="8e") returned 2 [0156.911] sprintf (in: _Dest=0x3e849ca, _Format="%c%c" | out: _Dest="f1") returned 2 [0156.911] sprintf (in: _Dest=0x3e849cc, _Format="%c%c" | out: _Dest="d8") returned 2 [0156.912] sprintf (in: _Dest=0x3e849ce, _Format="%c%c" | out: _Dest="77") returned 2 [0156.912] sprintf (in: _Dest=0x3e849d0, _Format="%c%c" | out: _Dest="f7") returned 2 [0156.912] sprintf (in: _Dest=0x3e849d2, _Format="%c%c" | out: _Dest="8c") returned 2 [0156.912] sprintf (in: _Dest=0x3e849d4, _Format="%c%c" | out: _Dest="c4") returned 2 [0156.912] sprintf (in: _Dest=0x3e849d6, _Format="%c%c" | out: _Dest="73") returned 2 [0156.912] RtlInitAnsiString (in: DestinationString=0x8a8f788, SourceString="37432cad7be49e9bf9c93ce637ef2f9cfb0484581c9127758ef1d877f78cc473" | out: DestinationString="37432cad7be49e9bf9c93ce637ef2f9cfb0484581c9127758ef1d877f78cc473") [0156.912] RtlAnsiStringToUnicodeString (in: DestinationString=0x8a8f780, SourceString="37432cad7be49e9bf9c93ce637ef2f9cfb0484581c9127758ef1d877f78cc473", AllocateDestinationString=1 | out: DestinationString="37432cad7be49e9bf9c93ce637ef2f9cfb0484581c9127758ef1d877f78cc473") returned 0x0 [0156.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a607e0 [0156.912] RtlFreeAnsiString (AnsiString="3") [0156.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84998) returned 1 [0156.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0156.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29d0) returned 1 [0156.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0156.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac500) returned 1 [0156.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0156.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac618) returned 1 [0156.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0156.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0156.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0156.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0156.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf460 [0156.913] wcscat (in: _Dest=0x3eaf460, _Source="37432cad7be49e9b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\37432cad7be49e9b") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\37432cad7be49e9b" [0156.913] wcscat (in: _Dest=0x3eaf460, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\37432cad7be49e9b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\37432cad7be49e9b.68814f" [0156.913] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\37432cad7be49e9b.68814f", NtPathName=0x8a8f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\37432cad7be49e9b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0156.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85700 [0156.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 [0156.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a74470) returned 1 [0156.918] NtQueryInformationFile (in: FileHandle=0x1fd0, IoStatusBlock=0x8a8f750, FileInformation=0x8a8f758, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8a8f750, FileInformation=0x8a8f758) returned 0x0 [0156.918] NtSetInformationFile (FileHandle=0x1fd0, IoStatusBlock=0x8a8f750, FileInformation=0x8a8f758, Length=0x28, FileInformationClass=0x4) returned 0x0 [0156.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf460) returned 1 [0156.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a607e0) returned 1 [0156.923] FlushFileBuffers (hFile=0x1fd0) returned 1 [0156.928] CloseHandle (hObject=0x1fd0) returned 1 [0156.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bea8 [0156.929] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\" [0156.929] wcscat (in: _Dest=0x35bea8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\68814F-Readme.txt" [0156.929] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\68814f-readme.txt")) returned 0xffffffff [0156.929] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fd0 [0156.932] WriteFile (in: hFile=0x1fd0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8a8f794, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8a8f794*=0x8b9, lpOverlapped=0x0) returned 1 [0156.934] CloseHandle (hObject=0x1fd0) returned 1 [0156.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 [0156.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 2118 os_tid = 0xb98 [0149.312] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn")) returned 0x2022 [0149.312] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x20) returned 0 [0149.313] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.313] GetLastError () returned 0x5 [0149.313] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn", dwFileAttributes=0x2022) returned 0 [0149.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 Thread: id = 2119 os_tid = 0xba4 [0149.326] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_k.hxw")) returned 0x2022 [0149.327] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x20) returned 0 [0149.327] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_k.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.327] GetLastError () returned 0x5 [0149.327] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_K.HxW", dwFileAttributes=0x2022) returned 0 [0149.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 Thread: id = 2120 os_tid = 0xb90 [0149.329] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_namedurl.hxw")) returned 0x2022 [0149.329] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x20) returned 0 [0149.329] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mkwd_namedurl.hxw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.329] GetLastError () returned 0x5 [0149.329] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MKWD_NamedURL.HxW", dwFileAttributes=0x2022) returned 0 [0149.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a98) returned 1 Thread: id = 2121 os_tid = 0xb9c [0149.331] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mtoc_hx.hxh")) returned 0x2022 [0149.332] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x20) returned 0 [0149.332] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mtoc_hx.hxh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.332] GetLastError () returned 0x5 [0149.332] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MTOC_Hx.HxH", dwFileAttributes=0x2022) returned 0 [0149.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 Thread: id = 2122 os_tid = 0xb94 [0149.344] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.hxd")) returned 0x2022 [0149.344] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x20) returned 0 [0149.344] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.hxd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.345] GetLastError () returned 0x5 [0149.345] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.HxD", dwFileAttributes=0x2022) returned 0 [0149.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47d98) returned 1 Thread: id = 2123 os_tid = 0xbcc [0149.350] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.lck")) returned 0x2022 [0149.350] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0149.351] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft help\\hx_1033_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.351] GetLastError () returned 0x5 [0149.351] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx_1033_MValidator.Lck", dwFileAttributes=0x2022) returned 0 [0149.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47318) returned 1 Thread: id = 2124 os_tid = 0xbf0 [0149.353] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn")) returned 0x2022 [0149.353] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.353] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.354] GetLastError () returned 0x5 [0149.354] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 Thread: id = 2125 os_tid = 0x370 [0149.355] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn")) returned 0x2022 [0149.356] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.356] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.356] GetLastError () returned 0x5 [0149.356] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47418) returned 1 Thread: id = 2126 os_tid = 0xbf4 [0149.358] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn")) returned 0x2022 [0149.358] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.358] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.359] GetLastError () returned 0x5 [0149.359] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 Thread: id = 2127 os_tid = 0x444 [0149.360] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn")) returned 0x2022 [0149.361] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.361] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.361] GetLastError () returned 0x5 [0149.361] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 Thread: id = 2128 os_tid = 0xbe4 [0149.363] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn")) returned 0x2022 [0149.364] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.364] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.364] GetLastError () returned 0x5 [0149.364] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46e98) returned 1 Thread: id = 2129 os_tid = 0xbec [0149.366] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn")) returned 0x2022 [0149.366] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.367] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.367] GetLastError () returned 0x5 [0149.367] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 2130 os_tid = 0xbb8 [0149.369] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn")) returned 0x2022 [0149.369] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.369] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.370] GetLastError () returned 0x5 [0149.370] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47718) returned 1 Thread: id = 2131 os_tid = 0xbb4 [0149.372] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn")) returned 0x2022 [0149.372] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.372] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.373] GetLastError () returned 0x5 [0149.373] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 2132 os_tid = 0x524 [0149.381] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn")) returned 0x2022 [0149.731] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.731] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.731] GetLastError () returned 0x5 [0149.731] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 Thread: id = 2133 os_tid = 0xc08 [0149.736] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn")) returned 0x2022 [0149.736] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.736] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.737] GetLastError () returned 0x5 [0149.737] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 Thread: id = 2134 os_tid = 0x6c0 [0149.739] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn")) returned 0x2022 [0149.739] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.739] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.739] GetLastError () returned 0x5 [0149.739] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46198) returned 1 Thread: id = 2135 os_tid = 0x5ec [0149.741] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn")) returned 0x2022 [0149.741] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.741] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.742] GetLastError () returned 0x5 [0149.742] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 Thread: id = 2136 os_tid = 0x668 [0149.744] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn")) returned 0x2022 [0149.744] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0149.744] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0149.744] GetLastError () returned 0x5 [0149.744] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0149.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 Thread: id = 2137 os_tid = 0x714 [0150.274] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn")) returned 0x2022 [0150.275] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0150.275] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.275] GetLastError () returned 0x5 [0150.275] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0150.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47098) returned 1 Thread: id = 2138 os_tid = 0x508 [0150.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69d08 [0150.277] wcscpy (in: _Dest=0x3e69d08, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest" [0150.277] wcscat (in: _Dest=0x3e69d08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\" [0150.277] wcscat (in: _Dest=0x3e69d08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*" [0150.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2d68 [0150.278] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0150.278] wcscmp (_String1=".", _String2=".") returned 0 [0150.278] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.278] wcscmp (_String1="..", _String2=".") returned 1 [0150.278] wcscmp (_String1="..", _String2="..") returned 0 [0150.278] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0150.278] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0150.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0150.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d08) returned 1 [0150.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23920) returned 1 Thread: id = 2139 os_tid = 0x520 [0150.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23920 [0150.294] wcscpy (in: _Dest=0x7a23920, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions" [0150.294] wcscat (in: _Dest=0x7a23920, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\" [0150.294] wcscat (in: _Dest=0x7a23920, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*" [0150.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2d68 [0150.294] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0150.295] wcscmp (_String1=".", _String2=".") returned 0 [0150.295] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.295] wcscmp (_String1="..", _String2=".") returned 1 [0150.295] wcscmp (_String1="..", _String2="..") returned 0 [0150.295] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0150.295] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0150.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0150.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23920) returned 1 [0150.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a70) returned 1 Thread: id = 2140 os_tid = 0x6b0 [0150.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23a70 [0150.300] wcscpy (in: _Dest=0x7a23a70, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload" [0150.300] wcscat (in: _Dest=0x7a23a70, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\" [0150.300] wcscat (in: _Dest=0x7a23a70, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*" [0150.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2d68 [0150.300] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0150.301] wcscmp (_String1=".", _String2=".") returned 0 [0150.301] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.301] wcscmp (_String1="..", _String2=".") returned 1 [0150.301] wcscmp (_String1="..", _String2="..") returned 0 [0150.301] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde180920, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xde180920, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xde180920, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0150.301] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0150.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0150.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a70) returned 1 [0150.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5c8) returned 1 Thread: id = 2141 os_tid = 0xc20 [0150.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3daf9e8 [0150.303] wcscpy (in: _Dest=0x3daf9e8, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" [0150.303] wcscat (in: _Dest=0x3daf9e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\" [0150.303] wcscat (in: _Dest=0x3daf9e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*" [0150.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2d68 [0150.303] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0150.303] wcscmp (_String1=".", _String2=".") returned 0 [0150.303] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68c807d0, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68c807d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68c807d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.303] wcscmp (_String1="..", _String2=".") returned 1 [0150.303] wcscmp (_String1="..", _String2="..") returned 0 [0150.303] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d80ec00, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1d80ec00, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1d80ec00, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0150.303] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0150.303] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0150.303] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0150.304] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0150.304] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0150.304] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0150.304] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0150.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0150.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf9e8) returned 1 [0150.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf3d8) returned 1 Thread: id = 2142 os_tid = 0xc28 [0150.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadb30 [0150.305] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" [0150.305] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\" [0150.305] wcscat (in: _Dest=0x3dadb30, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*" [0150.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2d68 [0150.305] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0150.306] wcscmp (_String1=".", _String2=".") returned 0 [0150.306] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec77070, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec9d1d0, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec9d1d0, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.306] wcscmp (_String1="..", _String2=".") returned 1 [0150.306] wcscmp (_String1="..", _String2="..") returned 0 [0150.306] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8639f00, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe8639f00, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe8639f00, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0150.306] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0150.306] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0150.306] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0150.306] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0150.306] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0150.306] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d01800, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe4d01800, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe4d01800, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0150.306] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0150.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0150.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 [0150.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dde3e8) returned 1 Thread: id = 2143 os_tid = 0xc24 [0150.308] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata")) returned 0x2020 [0150.308] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x20) returned 0 [0150.308] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.308] GetLastError () returned 0x5 [0150.308] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x2020) returned 0 [0150.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e1e0) returned 1 Thread: id = 2144 os_tid = 0xc1c [0150.309] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d")) returned 0x2026 [0150.311] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x20) returned 0 [0150.311] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.311] GetLastError () returned 0x5 [0150.311] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", dwFileAttributes=0x2026) returned 0 [0150.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f8d8) returned 1 Thread: id = 2145 os_tid = 0xbd4 [0150.313] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w")) returned 0x2026 [0150.313] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x20) returned 0 [0150.313] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.313] GetLastError () returned 0x5 [0150.313] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", dwFileAttributes=0x2026) returned 0 [0150.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 Thread: id = 2146 os_tid = 0xc2c [0150.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35af88 [0150.315] wcscpy (in: _Dest=0x35af88, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0150.315] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0150.315] wcscat (in: _Dest=0x35af88, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*" [0150.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea2d68 [0150.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741f0 [0153.467] wcscmp (_String1=".", _String2=".") returned 0 [0153.467] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1e69e00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.467] wcscmp (_String1="..", _String2=".") returned 1 [0153.467] wcscmp (_String1="..", _String2="..") returned 0 [0153.467] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5f76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HKSCS.txt", cAlternateFileName="")) returned 1 [0153.467] wcscmp (_String1="HKSCS.txt", _String2=".") returned 1 [0153.467] wcscmp (_String1="HKSCS.txt", _String2="..") returned 1 [0153.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65dd8 [0153.467] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0153.467] wcscat (in: _Dest=0x3e65dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0153.467] wcscat (in: _Dest=0x3e65dd8, _Source="HKSCS.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" [0155.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0155.409] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Japanese83pv.txt", cAlternateFileName="JAPANE~1.TXT")) returned 1 [0155.409] wcscmp (_String1="Japanese83pv.txt", _String2=".") returned 1 [0155.409] wcscmp (_String1="Japanese83pv.txt", _String2="..") returned 1 [0155.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d405d8 [0155.410] wcscpy (in: _Dest=0x3d405d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0155.410] wcscat (in: _Dest=0x3d405d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0155.410] wcscat (in: _Dest=0x3d405d8, _Source="Japanese83pv.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" [0155.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d405d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0155.411] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e69e00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x19ea7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JISX0208.txt", cAlternateFileName="")) returned 1 [0155.411] wcscmp (_String1="JISX0208.txt", _String2=".") returned 1 [0155.411] wcscmp (_String1="JISX0208.txt", _String2="..") returned 1 [0155.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66198 [0155.411] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0155.411] wcscat (in: _Dest=0x3e66198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0155.411] wcscat (in: _Dest=0x3e66198, _Source="JISX0208.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" [0155.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0155.412] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1e43ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x29ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JISX0213.txt", cAlternateFileName="")) returned 1 [0155.412] wcscmp (_String1="JISX0213.txt", _String2=".") returned 1 [0155.412] wcscmp (_String1="JISX0213.txt", _String2="..") returned 1 [0155.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66318 [0155.412] wcscpy (in: _Dest=0x3e66318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0155.412] wcscat (in: _Dest=0x3e66318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0155.412] wcscat (in: _Dest=0x3e66318, _Source="JISX0213.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" [0155.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0155.413] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x288d, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbol.txt", cAlternateFileName="")) returned 1 [0155.413] wcscmp (_String1="symbol.txt", _String2=".") returned 1 [0155.413] wcscmp (_String1="symbol.txt", _String2="..") returned 1 [0155.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66918 [0155.413] wcscpy (in: _Dest=0x3e66918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0155.413] wcscat (in: _Dest=0x3e66918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0155.413] wcscat (in: _Dest=0x3e66918, _Source="symbol.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" [0155.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0155.414] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 1 [0155.414] wcscmp (_String1="zdingbat.txt", _String2=".") returned 1 [0155.415] wcscmp (_String1="zdingbat.txt", _String2="..") returned 1 [0155.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66558 [0155.415] wcscpy (in: _Dest=0x3e66558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe" [0155.415] wcscat (in: _Dest=0x3e66558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\" [0155.415] wcscat (in: _Dest=0x3e66558, _Source="zdingbat.txt" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" [0155.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0155.416] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ea2d68 | out: lpFindFileData=0x3ea2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 0 [0155.416] FindClose (in: hFindFile=0x3e741f0 | out: hFindFile=0x3e741f0) returned 1 [0155.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0155.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 [0155.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 2147 os_tid = 0xbd0 [0150.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053e58 [0150.315] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0150.315] wcscat (in: _Dest=0x3053e58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0150.316] wcscat (in: _Dest=0x3053e58, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*" [0150.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3238 [0150.316] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73db0 [0153.523] wcscmp (_String1=".", _String2=".") returned 0 [0153.523] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1be26a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ced040, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.523] wcscmp (_String1="..", _String2=".") returned 1 [0153.523] wcscmp (_String1="..", _String2="..") returned 0 [0153.523] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ced040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARABIC.TXT", cAlternateFileName="")) returned 1 [0153.523] wcscmp (_String1="ARABIC.TXT", _String2=".") returned 1 [0153.523] wcscmp (_String1="ARABIC.TXT", _String2="..") returned 1 [0153.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf2f0 [0153.523] wcscpy (in: _Dest=0x3eaf2f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0153.523] wcscat (in: _Dest=0x3eaf2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0153.523] wcscat (in: _Dest=0x3eaf2f0, _Source="ARABIC.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" [0158.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0158.573] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0158.573] wcscmp (_String1="CENTEURO.TXT", _String2=".") returned 1 [0158.573] wcscmp (_String1="CENTEURO.TXT", _String2="..") returned 1 [0158.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66318 [0158.573] wcscpy (in: _Dest=0x3e66318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.573] wcscat (in: _Dest=0x3e66318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.573] wcscat (in: _Dest=0x3e66318, _Source="CENTEURO.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" [0158.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0158.574] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x31aa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINSIMP.TXT", cAlternateFileName="")) returned 1 [0158.574] wcscmp (_String1="CHINSIMP.TXT", _String2=".") returned 1 [0158.574] wcscmp (_String1="CHINSIMP.TXT", _String2="..") returned 1 [0158.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66198 [0158.574] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.574] wcscat (in: _Dest=0x3e66198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.574] wcscat (in: _Dest=0x3e66198, _Source="CHINSIMP.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" [0158.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0158.575] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x520b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINTRAD.TXT", cAlternateFileName="")) returned 1 [0158.575] wcscmp (_String1="CHINTRAD.TXT", _String2=".") returned 1 [0158.575] wcscmp (_String1="CHINTRAD.TXT", _String2="..") returned 1 [0158.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66558 [0158.576] wcscpy (in: _Dest=0x3e66558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.576] wcscat (in: _Dest=0x3e66558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.576] wcscat (in: _Dest=0x3e66558, _Source="CHINTRAD.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" [0158.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0158.577] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0158.577] wcscmp (_String1="CORPCHAR.TXT", _String2=".") returned 1 [0158.577] wcscmp (_String1="CORPCHAR.TXT", _String2="..") returned 1 [0158.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66918 [0158.577] wcscpy (in: _Dest=0x3e66918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.577] wcscat (in: _Dest=0x3e66918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.577] wcscat (in: _Dest=0x3e66918, _Source="CORPCHAR.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" [0158.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0158.578] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x34f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0158.578] wcscmp (_String1="CROATIAN.TXT", _String2=".") returned 1 [0158.578] wcscmp (_String1="CROATIAN.TXT", _String2="..") returned 1 [0158.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65dd8 [0158.578] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.578] wcscat (in: _Dest=0x3e65dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.578] wcscat (in: _Dest=0x3e65dd8, _Source="CROATIAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" [0158.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0158.579] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3478, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0158.579] wcscmp (_String1="CYRILLIC.TXT", _String2=".") returned 1 [0158.579] wcscmp (_String1="CYRILLIC.TXT", _String2="..") returned 1 [0158.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66858 [0158.579] wcscpy (in: _Dest=0x3e66858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.579] wcscat (in: _Dest=0x3e66858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.579] wcscat (in: _Dest=0x3e66858, _Source="CYRILLIC.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" [0158.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0158.580] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6145, dwReserved0=0x0, dwReserved1=0x0, cFileName="FARSI.TXT", cAlternateFileName="")) returned 1 [0158.580] wcscmp (_String1="FARSI.TXT", _String2=".") returned 1 [0158.580] wcscmp (_String1="FARSI.TXT", _String2="..") returned 1 [0158.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7aa8 [0158.581] wcscpy (in: _Dest=0x2ff7aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.581] wcscat (in: _Dest=0x2ff7aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.581] wcscat (in: _Dest=0x2ff7aa8, _Source="FARSI.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" [0158.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0158.582] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x342b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0158.582] wcscmp (_String1="GREEK.TXT", _String2=".") returned 1 [0158.582] wcscmp (_String1="GREEK.TXT", _String2="..") returned 1 [0158.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7378 [0158.582] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.582] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.583] wcscat (in: _Dest=0x2ff7378, _Source="GREEK.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" [0158.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0158.583] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEBREW.TXT", cAlternateFileName="")) returned 1 [0158.584] wcscmp (_String1="HEBREW.TXT", _String2=".") returned 1 [0158.584] wcscmp (_String1="HEBREW.TXT", _String2="..") returned 1 [0158.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7208 [0158.584] wcscpy (in: _Dest=0x2ff7208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.584] wcscat (in: _Dest=0x2ff7208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.584] wcscat (in: _Dest=0x2ff7208, _Source="HEBREW.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" [0158.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0158.585] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0158.585] wcscmp (_String1="ICELAND.TXT", _String2=".") returned 1 [0158.585] wcscmp (_String1="ICELAND.TXT", _String2="..") returned 1 [0158.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65d18 [0158.585] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.585] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.585] wcscat (in: _Dest=0x3e65d18, _Source="ICELAND.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" [0158.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0158.586] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x320dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAPANESE.TXT", cAlternateFileName="")) returned 1 [0158.586] wcscmp (_String1="JAPANESE.TXT", _String2=".") returned 1 [0158.586] wcscmp (_String1="JAPANESE.TXT", _String2="..") returned 1 [0158.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66618 [0158.586] wcscpy (in: _Dest=0x3e66618, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.586] wcscat (in: _Dest=0x3e66618, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.586] wcscat (in: _Dest=0x3e66618, _Source="JAPANESE.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" [0158.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0158.588] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x591cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOREAN.TXT", cAlternateFileName="")) returned 1 [0158.588] wcscmp (_String1="KOREAN.TXT", _String2=".") returned 1 [0158.588] wcscmp (_String1="KOREAN.TXT", _String2="..") returned 1 [0158.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7e40 [0158.588] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.588] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.588] wcscat (in: _Dest=0x2ff7e40, _Source="KOREAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" [0158.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0158.589] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c54ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3857, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0158.589] wcscmp (_String1="ROMAN.TXT", _String2=".") returned 1 [0158.589] wcscmp (_String1="ROMAN.TXT", _String2="..") returned 1 [0158.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff74e8 [0158.589] wcscpy (in: _Dest=0x2ff74e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.589] wcscat (in: _Dest=0x2ff74e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.589] wcscat (in: _Dest=0x2ff74e8, _Source="ROMAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" [0158.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff74e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0158.590] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x39c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0158.591] wcscmp (_String1="ROMANIAN.TXT", _String2=".") returned 1 [0158.591] wcscmp (_String1="ROMANIAN.TXT", _String2="..") returned 1 [0158.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66798 [0158.591] wcscpy (in: _Dest=0x3e66798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.591] wcscat (in: _Dest=0x3e66798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.591] wcscat (in: _Dest=0x3e66798, _Source="ROMANIAN.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" [0158.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0158.592] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0158.592] wcscmp (_String1="SYMBOL.TXT", _String2=".") returned 1 [0158.592] wcscmp (_String1="SYMBOL.TXT", _String2="..") returned 1 [0158.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff62f0 [0158.592] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.592] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.592] wcscat (in: _Dest=0x2ff62f0, _Source="SYMBOL.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" [0158.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c [0158.593] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THAI.TXT", cAlternateFileName="")) returned 1 [0158.593] wcscmp (_String1="THAI.TXT", _String2=".") returned 1 [0158.593] wcscmp (_String1="THAI.TXT", _String2="..") returned 1 [0158.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff63a8 [0158.594] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.594] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.594] wcscat (in: _Dest=0x2ff63a8, _Source="THAI.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" [0158.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0158.595] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3219, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0158.595] wcscmp (_String1="TURKISH.TXT", _String2=".") returned 1 [0158.595] wcscmp (_String1="TURKISH.TXT", _String2="..") returned 1 [0158.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66a98 [0158.595] wcscpy (in: _Dest=0x3e66a98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.595] wcscat (in: _Dest=0x3e66a98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.595] wcscat (in: _Dest=0x3e66a98, _Source="TURKISH.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" [0158.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0158.596] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0158.596] wcscmp (_String1="UKRAINE.TXT", _String2=".") returned 1 [0158.596] wcscmp (_String1="UKRAINE.TXT", _String2="..") returned 1 [0158.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66498 [0158.596] wcscpy (in: _Dest=0x3e66498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac" [0158.596] wcscat (in: _Dest=0x3e66498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\" [0158.596] wcscat (in: _Dest=0x3e66498, _Source="UKRAINE.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" [0158.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0158.597] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3ea3238 | out: lpFindFileData=0x3ea3238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c7ac20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 0 [0158.598] FindClose (in: hFindFile=0x3e73db0 | out: hFindFile=0x3e73db0) returned 1 [0158.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3238) returned 1 [0158.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 [0158.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 2148 os_tid = 0xad4 [0150.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053288 [0150.316] wcscpy (in: _Dest=0x3053288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0150.316] wcscat (in: _Dest=0x3053288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0150.316] wcscat (in: _Dest=0x3053288, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*" [0150.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4578 [0150.316] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74030 [0153.468] wcscmp (_String1=".", _String2=".") returned 0 [0153.468] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1bbc540, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1d131a0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.468] wcscmp (_String1="..", _String2=".") returned 1 [0153.468] wcscmp (_String1="..", _String2="..") returned 0 [0153.468] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2664, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0153.468] wcscmp (_String1="CP1250.TXT", _String2=".") returned 1 [0153.468] wcscmp (_String1="CP1250.TXT", _String2="..") returned 1 [0153.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaef58 [0153.468] wcscpy (in: _Dest=0x3eaef58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0153.468] wcscat (in: _Dest=0x3eaef58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0153.468] wcscat (in: _Dest=0x3eaef58, _Source="CP1250.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" [0161.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaef58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0161.980] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0161.980] wcscmp (_String1="CP1251.TXT", _String2=".") returned 1 [0161.980] wcscmp (_String1="CP1251.TXT", _String2="..") returned 1 [0161.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7e40 [0161.980] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.980] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.980] wcscat (in: _Dest=0x2ff7e40, _Source="CP1251.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" [0161.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0161.982] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0161.982] wcscmp (_String1="CP1252.TXT", _String2=".") returned 1 [0161.982] wcscmp (_String1="CP1252.TXT", _String2="..") returned 1 [0161.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6460 [0161.982] wcscpy (in: _Dest=0x2ff6460, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.982] wcscat (in: _Dest=0x2ff6460, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.982] wcscat (in: _Dest=0x2ff6460, _Source="CP1252.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" [0161.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0161.983] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2414, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0161.983] wcscmp (_String1="CP1253.TXT", _String2=".") returned 1 [0161.984] wcscmp (_String1="CP1253.TXT", _String2="..") returned 1 [0161.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7880 [0161.984] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.984] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.984] wcscat (in: _Dest=0x2ff7880, _Source="CP1253.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" [0161.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0161.985] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0161.985] wcscmp (_String1="CP1254.TXT", _String2=".") returned 1 [0161.985] wcscmp (_String1="CP1254.TXT", _String2="..") returned 1 [0161.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff79f0 [0161.985] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.985] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.985] wcscat (in: _Dest=0x2ff79f0, _Source="CP1254.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" [0161.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0161.986] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x219a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1255.TXT", cAlternateFileName="")) returned 1 [0161.986] wcscmp (_String1="CP1255.TXT", _String2=".") returned 1 [0161.986] wcscmp (_String1="CP1255.TXT", _String2="..") returned 1 [0161.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff74e8 [0161.986] wcscpy (in: _Dest=0x2ff74e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.986] wcscat (in: _Dest=0x2ff74e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.986] wcscat (in: _Dest=0x2ff74e8, _Source="CP1255.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" [0161.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff74e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0161.988] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1d131a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x22fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1256.TXT", cAlternateFileName="")) returned 1 [0161.988] wcscmp (_String1="CP1256.TXT", _String2=".") returned 1 [0161.988] wcscmp (_String1="CP1256.TXT", _String2="..") returned 1 [0161.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff62f0 [0161.988] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.988] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.988] wcscat (in: _Dest=0x2ff62f0, _Source="CP1256.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" [0161.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0161.989] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1be26a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x252c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0161.989] wcscmp (_String1="CP1257.TXT", _String2=".") returned 1 [0161.989] wcscmp (_String1="CP1257.TXT", _String2="..") returned 1 [0161.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff63a8 [0161.989] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.989] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.989] wcscat (in: _Dest=0x2ff63a8, _Source="CP1257.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" [0161.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0161.991] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1bbc540, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0161.991] wcscmp (_String1="CP1258.TXT", _String2=".") returned 1 [0161.991] wcscmp (_String1="CP1258.TXT", _String2="..") returned 1 [0161.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6b90 [0161.991] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.991] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.991] wcscat (in: _Dest=0x2ff6b90, _Source="CP1258.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" [0161.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0161.992] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ca0d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2221, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP874.TXT", cAlternateFileName="")) returned 1 [0161.992] wcscmp (_String1="CP874.TXT", _String2=".") returned 1 [0161.992] wcscmp (_String1="CP874.TXT", _String2="..") returned 1 [0161.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0161.992] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.992] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.992] wcscat (in: _Dest=0x2ff7430, _Source="CP874.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" [0161.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0161.993] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c08800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP932.TXT", cAlternateFileName="")) returned 1 [0161.993] wcscmp (_String1="CP932.TXT", _String2=".") returned 1 [0161.994] wcscmp (_String1="CP932.TXT", _String2="..") returned 1 [0161.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7aa8 [0161.994] wcscpy (in: _Dest=0x2ff7aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.994] wcscat (in: _Dest=0x2ff7aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.994] wcscat (in: _Dest=0x2ff7aa8, _Source="CP932.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" [0161.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0161.995] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c08800, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xccee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP936.TXT", cAlternateFileName="")) returned 1 [0161.995] wcscmp (_String1="CP936.TXT", _String2=".") returned 1 [0161.995] wcscmp (_String1="CP936.TXT", _String2="..") returned 1 [0161.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7378 [0161.995] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.995] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.995] wcscat (in: _Dest=0x2ff7378, _Source="CP936.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" [0161.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0161.996] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP949.TXT", cAlternateFileName="")) returned 1 [0161.996] wcscmp (_String1="CP949.TXT", _String2=".") returned 1 [0161.996] wcscmp (_String1="CP949.TXT", _String2="..") returned 1 [0161.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7208 [0161.996] wcscpy (in: _Dest=0x2ff7208, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.996] wcscat (in: _Dest=0x2ff7208, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.996] wcscat (in: _Dest=0x2ff7208, _Source="CP949.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" [0161.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0161.997] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 1 [0161.997] wcscmp (_String1="CP950.TXT", _String2=".") returned 1 [0161.998] wcscmp (_String1="CP950.TXT", _String2="..") returned 1 [0161.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7c18 [0161.998] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win" [0161.998] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\" [0161.998] wcscat (in: _Dest=0x2ff7c18, _Source="CP950.TXT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" [0161.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0161.999] FindNextFileW (in: hFindFile=0x3e74030, lpFindFileData=0x3ea4578 | out: lpFindFileData=0x3ea4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1c2e960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 0 [0161.999] FindClose (in: hFindFile=0x3e74030 | out: hFindFile=0x3e74030) returned 1 [0162.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4578) returned 1 [0162.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 [0162.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 Thread: id = 2149 os_tid = 0xad0 [0150.317] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w")) returned 0x2026 [0150.317] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x20) returned 0 [0150.317] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.317] GetLastError () returned 0x5 [0150.317] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", dwFileAttributes=0x2026) returned 0 [0150.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3054050) returned 1 Thread: id = 2150 os_tid = 0xacc [0150.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf")) returned 0x20 [0150.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0150.319] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.319] GetLastError () returned 0x5 [0150.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0150.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 2151 os_tid = 0xac8 [0150.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf")) returned 0x20 [0150.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0150.321] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.321] GetLastError () returned 0x5 [0150.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0150.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6ad8) returned 1 Thread: id = 2152 os_tid = 0xb78 [0150.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf")) returned 0x20 [0150.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0150.323] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.324] GetLastError () returned 0x5 [0150.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0150.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40380) returned 1 Thread: id = 2153 os_tid = 0xc54 [0150.332] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h")) returned 0x2026 [0150.332] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x20) returned 0 [0150.332] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.332] GetLastError () returned 0x5 [0150.333] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", dwFileAttributes=0x2026) returned 0 [0150.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4be0) returned 1 Thread: id = 2154 os_tid = 0xb74 [0150.349] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d")) returned 0x2026 [0150.349] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x20) returned 0 [0150.349] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.350] GetLastError () returned 0x5 [0150.350] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", dwFileAttributes=0x2026) returned 0 [0150.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 Thread: id = 2155 os_tid = 0xb64 [0150.352] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck")) returned 0x2026 [0150.352] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x20) returned 0 [0150.352] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.352] GetLastError () returned 0x5 [0150.352] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", dwFileAttributes=0x2026) returned 0 [0150.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 Thread: id = 2156 os_tid = 0xb6c [0150.354] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q")) returned 0x2026 [0150.354] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x20) returned 0 [0150.354] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.354] GetLastError () returned 0x5 [0150.354] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", dwFileAttributes=0x2026) returned 0 [0150.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 Thread: id = 2157 os_tid = 0xb70 [0150.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf")) returned 0x20 [0151.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0151.318] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.318] GetLastError () returned 0x5 [0151.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0151.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 2158 os_tid = 0xb60 [0150.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf")) returned 0x20 [0152.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0152.669] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.669] GetLastError () returned 0x5 [0152.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0152.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 Thread: id = 2159 os_tid = 0xb5c [0150.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf")) returned 0x20 [0152.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0152.671] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.671] GetLastError () returned 0x5 [0152.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0152.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 Thread: id = 2160 os_tid = 0x4bc [0150.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf")) returned 0x20 [0152.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0152.673] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.673] GetLastError () returned 0x5 [0152.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0152.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7938) returned 1 Thread: id = 2161 os_tid = 0xac4 [0150.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf")) returned 0x20 [0151.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0151.313] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.313] GetLastError () returned 0x5 [0151.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0151.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 2162 os_tid = 0xa9c [0150.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf")) returned 0x20 [0152.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0152.667] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.667] GetLastError () returned 0x5 [0152.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0152.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40448) returned 1 Thread: id = 2163 os_tid = 0x5d4 [0150.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf")) returned 0x20 [0150.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0150.368] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.368] GetLastError () returned 0x5 [0150.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0150.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5dc0) returned 1 Thread: id = 2164 os_tid = 0xb0 [0150.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf")) returned 0x20 [0150.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0150.370] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.370] GetLastError () returned 0x5 [0150.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0150.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5ac8) returned 1 Thread: id = 2165 os_tid = 0x1c4 [0150.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf")) returned 0x20 [0150.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0150.372] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.372] GetLastError () returned 0x5 [0150.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0150.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5570) returned 1 Thread: id = 2166 os_tid = 0x7fc [0150.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf")) returned 0x20 [0150.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0150.373] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.373] GetLastError () returned 0x5 [0150.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0150.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5e58) returned 1 Thread: id = 2167 os_tid = 0xc5c [0150.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm")) returned 0x20 [0150.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM", dwFileAttributes=0x20) returned 0 [0150.375] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.375] GetLastError () returned 0x5 [0150.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM", dwFileAttributes=0x20) returned 0 [0150.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 Thread: id = 2168 os_tid = 0xdb4 [0150.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm")) returned 0x20 [0150.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm", dwFileAttributes=0x20) returned 0 [0150.383] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.384] GetLastError () returned 0x5 [0150.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm", dwFileAttributes=0x20) returned 0 [0150.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 Thread: id = 2169 os_tid = 0xdb8 [0150.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm")) returned 0x20 [0150.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm", dwFileAttributes=0x20) returned 0 [0150.386] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.386] GetLastError () returned 0x5 [0150.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm", dwFileAttributes=0x20) returned 0 [0150.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 2170 os_tid = 0xbdc [0150.387] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc")) returned 0x2020 [0150.387] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", dwFileAttributes=0x20) returned 1 [0155.996] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1874 [0155.997] GetFileSizeEx (in: hFile=0x1874, lpFileSize=0x85bfd4c | out: lpFileSize=0x85bfd4c*=66208) returned 1 [0155.997] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x1029c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.997] ReadFile (in: hFile=0x1874, lpBuffer=0x85bfd28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x85bfd38, lpOverlapped=0x0 | out: lpBuffer=0x85bfd28*, lpNumberOfBytesRead=0x85bfd38*=0x4, lpOverlapped=0x0) returned 1 [0155.999] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0155.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54250 [0156.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f80 [0156.000] NtQuerySystemTime (in: CurrentTime=0x85bfcc0 | out: CurrentTime=0x85bfcc0*=132462177346104000) returned 0x0 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x46731208 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x4f3ad301 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x3af65420 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x7fed964f [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x6ed0f01 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x1945e95d [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x3d84fbd4 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x5a2c4ef9 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x3f5364e4 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x14abacb8 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x2675958e [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x5606c426 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x36c0941f [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x7840cf2f [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x53a71941 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x190d906b [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x2013f804 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x5948a643 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0xbe8bb2a [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x7cacb4fc [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x445c5441 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x794e871c [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x150d311e [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x31821328 [0156.000] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x34d24f3e [0156.001] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x29a2d6ce [0156.001] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x2d75d188 [0156.001] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x276b779 [0156.001] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x7a449618 [0156.001] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x7ff271a9 [0156.001] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x3f983c98 [0156.001] RtlRandomEx (in: Seed=0x85bfcb8 | out: Seed=0x85bfcb8) returned 0x7b09ac94 [0156.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0156.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0156.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b98 [0156.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0156.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f80) returned 1 [0156.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e525b8) returned 1 [0156.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0156.026] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.026] ReadFile (in: hFile=0x1874, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x85bfcc0, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0x85bfcc0*=0x3c00, lpOverlapped=0x0) returned 1 [0156.028] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25b78 [0156.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0156.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0156.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e525b8) returned 1 [0156.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0156.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0156.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f80 [0156.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f80) returned 1 [0156.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0156.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25b78) returned 1 [0156.029] WriteFile (in: hFile=0x1874, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x85bfcc0, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x85bfcc0*=0x3c00, lpOverlapped=0x0) returned 1 [0157.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0157.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0157.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37590 [0157.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0157.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37560 [0157.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0157.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0157.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0157.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0157.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0157.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec4e0 [0157.468] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.468] WriteFile (in: hFile=0x1874, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x85bfd40, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x85bfd40*=0x106, lpOverlapped=0x0) returned 1 [0158.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e497b8 [0158.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0158.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0158.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0158.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e80ee0 [0158.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0158.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0158.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0158.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0158.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e497b8) returned 1 [0158.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3dac618 [0158.125] sprintf (in: _Dest=0x3dac618, _Format="%c%c" | out: _Dest="19") returned 2 [0158.125] sprintf (in: _Dest=0x3dac61a, _Format="%c%c" | out: _Dest="80") returned 2 [0158.125] sprintf (in: _Dest=0x3dac61c, _Format="%c%c" | out: _Dest="f1") returned 2 [0158.125] sprintf (in: _Dest=0x3dac61e, _Format="%c%c" | out: _Dest="ab") returned 2 [0158.125] sprintf (in: _Dest=0x3dac620, _Format="%c%c" | out: _Dest="3c") returned 2 [0158.125] sprintf (in: _Dest=0x3dac622, _Format="%c%c" | out: _Dest="1d") returned 2 [0158.126] sprintf (in: _Dest=0x3dac624, _Format="%c%c" | out: _Dest="b4") returned 2 [0158.126] sprintf (in: _Dest=0x3dac626, _Format="%c%c" | out: _Dest="e5") returned 2 [0158.126] sprintf (in: _Dest=0x3dac628, _Format="%c%c" | out: _Dest="5d") returned 2 [0158.126] sprintf (in: _Dest=0x3dac62a, _Format="%c%c" | out: _Dest="d3") returned 2 [0158.126] sprintf (in: _Dest=0x3dac62c, _Format="%c%c" | out: _Dest="a2") returned 2 [0158.126] sprintf (in: _Dest=0x3dac62e, _Format="%c%c" | out: _Dest="0f") returned 2 [0158.126] sprintf (in: _Dest=0x3dac630, _Format="%c%c" | out: _Dest="a4") returned 2 [0158.126] sprintf (in: _Dest=0x3dac632, _Format="%c%c" | out: _Dest="d8") returned 2 [0158.126] sprintf (in: _Dest=0x3dac634, _Format="%c%c" | out: _Dest="b6") returned 2 [0158.126] sprintf (in: _Dest=0x3dac636, _Format="%c%c" | out: _Dest="51") returned 2 [0158.126] sprintf (in: _Dest=0x3dac638, _Format="%c%c" | out: _Dest="79") returned 2 [0158.126] sprintf (in: _Dest=0x3dac63a, _Format="%c%c" | out: _Dest="13") returned 2 [0158.126] sprintf (in: _Dest=0x3dac63c, _Format="%c%c" | out: _Dest="eb") returned 2 [0158.126] sprintf (in: _Dest=0x3dac63e, _Format="%c%c" | out: _Dest="98") returned 2 [0158.126] RtlInitAnsiString (in: DestinationString=0x85bfcc8, SourceString="1980f1ab3c1db4e55dd3a20fa4d8b6517913eb98" | out: DestinationString="1980f1ab3c1db4e55dd3a20fa4d8b6517913eb98") [0158.126] RtlAnsiStringToUnicodeString (in: DestinationString=0x85bfcc0, SourceString="1980f1ab3c1db4e55dd3a20fa4d8b6517913eb98", AllocateDestinationString=1 | out: DestinationString="1980f1ab3c1db4e55dd3a20fa4d8b6517913eb98") returned 0x0 [0158.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe65a8 [0158.127] wcscat (in: _Dest=0x7ad50b0, _Source="1980f1ab3c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\1980f1ab3c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\1980f1ab3c" [0158.127] wcscat (in: _Dest=0x7ad50b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\1980f1ab3c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\1980f1ab3c.68814f" [0158.127] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\1980f1ab3c.68814f", NtPathName=0x85bfcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\1980f1ab3c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c378 [0158.341] FlushFileBuffers (hFile=0x1874) returned 1 [0158.779] CloseHandle (hObject=0x1874) returned 1 [0159.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6b68 [0159.184] wcscpy (in: _Dest=0x7ad6b68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0159.184] wcscat (in: _Dest=0x7ad6b68, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\68814F-Readme.txt" [0159.184] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\68814f-readme.txt")) returned 0x2020 [0159.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 [0159.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 2171 os_tid = 0x7f8 [0150.449] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc")) returned 0x2020 [0150.449] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", dwFileAttributes=0x20) returned 1 [0156.031] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x700 [0156.031] GetFileSizeEx (in: hFile=0x700, lpFileSize=0x88bfb34 | out: lpFileSize=0x88bfb34*=2676) returned 1 [0156.031] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0xa70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.031] ReadFile (in: hFile=0x700, lpBuffer=0x88bfb10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x88bfb20, lpOverlapped=0x0 | out: lpBuffer=0x88bfb10*, lpNumberOfBytesRead=0x88bfb20*=0x4, lpOverlapped=0x0) returned 1 [0156.057] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f80 [0156.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52338 [0156.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0156.057] NtQuerySystemTime (in: CurrentTime=0x88bfaa8 | out: CurrentTime=0x88bfaa8*=132462177346728000) returned 0x0 [0156.057] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0xb716e65 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x3bdb45fa [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x8f6890f [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x5aae157b [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x62e49fdc [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x176e2516 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x168ce810 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x55414e01 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x6570b549 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x2bfb0427 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x34cddf92 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0xe1e9c4c [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x4fff5279 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x5eaa5cb4 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x215bb13b [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x2ca64ad3 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x48d109fe [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x5951dd4a [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x137ae7eb [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x2f559c33 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x56a71228 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x29485efd [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x4b529b43 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x6859b4ff [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x6e46780e [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0xbecc23e [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x2c8bda00 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x2b4f9ba2 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x5295ee28 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x37a2d6a6 [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x74bbd0b [0156.058] RtlRandomEx (in: Seed=0x88bfaa0 | out: Seed=0x88bfaa0) returned 0x4bfdfe43 [0156.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0156.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0156.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0156.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0156.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0156.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f80) returned 1 [0156.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25ce0 [0156.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0156.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f80 [0156.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f80) returned 1 [0156.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0156.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0156.067] ReadFile (in: hFile=0x700, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0xa74, lpNumberOfBytesRead=0x88bfa9c, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0x88bfa9c*=0xa74, lpOverlapped=0x0) returned 1 [0156.067] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.067] WriteFile (in: hFile=0x700, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0xa74, lpNumberOfBytesWritten=0x88bfaa0, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0x88bfaa0*=0xa74, lpOverlapped=0x0) returned 1 [0157.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0157.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0157.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0157.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0157.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0157.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0157.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ce0) returned 1 [0157.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0157.811] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.811] WriteFile (in: hFile=0x700, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x88bfb28, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x88bfb28*=0x104, lpOverlapped=0x0) returned 1 [0158.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25ae8 [0158.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50fa8 [0158.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0158.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0158.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e82100 [0158.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0158.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0158.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0158.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0158.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ae8) returned 1 [0158.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x25) returned 0x7a37560 [0158.749] sprintf (in: _Dest=0x7a37560, _Format="%c%c" | out: _Dest="37") returned 2 [0158.749] sprintf (in: _Dest=0x7a37562, _Format="%c%c" | out: _Dest="5a") returned 2 [0158.749] sprintf (in: _Dest=0x7a37564, _Format="%c%c" | out: _Dest="29") returned 2 [0158.749] sprintf (in: _Dest=0x7a37566, _Format="%c%c" | out: _Dest="81") returned 2 [0158.749] sprintf (in: _Dest=0x7a37568, _Format="%c%c" | out: _Dest="b3") returned 2 [0158.749] sprintf (in: _Dest=0x7a3756a, _Format="%c%c" | out: _Dest="12") returned 2 [0158.749] sprintf (in: _Dest=0x7a3756c, _Format="%c%c" | out: _Dest="f9") returned 2 [0158.749] sprintf (in: _Dest=0x7a3756e, _Format="%c%c" | out: _Dest="f1") returned 2 [0158.749] sprintf (in: _Dest=0x7a37570, _Format="%c%c" | out: _Dest="db") returned 2 [0158.749] sprintf (in: _Dest=0x7a37572, _Format="%c%c" | out: _Dest="3f") returned 2 [0158.749] sprintf (in: _Dest=0x7a37574, _Format="%c%c" | out: _Dest="2e") returned 2 [0158.749] sprintf (in: _Dest=0x7a37576, _Format="%c%c" | out: _Dest="bc") returned 2 [0158.749] sprintf (in: _Dest=0x7a37578, _Format="%c%c" | out: _Dest="d7") returned 2 [0158.749] sprintf (in: _Dest=0x7a3757a, _Format="%c%c" | out: _Dest="c8") returned 2 [0158.749] sprintf (in: _Dest=0x7a3757c, _Format="%c%c" | out: _Dest="85") returned 2 [0158.749] sprintf (in: _Dest=0x7a3757e, _Format="%c%c" | out: _Dest="8c") returned 2 [0158.749] sprintf (in: _Dest=0x7a37580, _Format="%c%c" | out: _Dest="11") returned 2 [0158.750] sprintf (in: _Dest=0x7a37582, _Format="%c%c" | out: _Dest="b7") returned 2 [0158.750] RtlInitAnsiString (in: DestinationString=0x88bfab0, SourceString="375a2981b312f9f1db3f2ebcd7c8858c11b7" | out: DestinationString="375a2981b312f9f1db3f2ebcd7c8858c11b7") [0158.750] RtlAnsiStringToUnicodeString (in: DestinationString=0x88bfaa8, SourceString="375a2981b312f9f1db3f2ebcd7c8858c11b7", AllocateDestinationString=1 | out: DestinationString="375a2981b312f9f1db3f2ebcd7c8858c11b7") returned 0x0 [0158.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d489a8 [0158.750] wcscat (in: _Dest=0x32d5d0, _Source="375a2981b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\375a2981b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\375a2981b" [0158.750] wcscat (in: _Dest=0x32d5d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\375a2981b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\375a2981b.68814f" [0158.750] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\375a2981b.68814f", NtPathName=0x88bfaa0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\375a2981b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053fa8 [0158.753] FlushFileBuffers (hFile=0x700) returned 1 [0158.780] CloseHandle (hObject=0x700) returned 1 [0158.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32d5d0 [0158.781] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\" [0158.781] wcscat (in: _Dest=0x32d5d0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\68814F-Readme.txt" [0158.781] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\68814f-readme.txt")) returned 0xffffffff [0158.781] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Color\\Profiles\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\color\\profiles\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x700 [0158.784] WriteFile (in: hFile=0x700, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x88bfabc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x88bfabc*=0x8b9, lpOverlapped=0x0) returned 1 [0158.786] CloseHandle (hObject=0x700) returned 1 [0158.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 [0158.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 2172 os_tid = 0x6a4 [0150.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx")) returned 0x20 [0150.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0150.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.450] GetLastError () returned 0x5 [0150.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0150.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5440) returned 1 Thread: id = 2173 os_tid = 0x224 [0150.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx")) returned 0x20 [0150.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0150.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.457] GetLastError () returned 0x5 [0150.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0150.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5868) returned 1 Thread: id = 2174 os_tid = 0x78c [0150.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx")) returned 0x20 [0155.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx", dwFileAttributes=0x20) returned 0 [0155.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.596] GetLastError () returned 0x5 [0155.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx", dwFileAttributes=0x20) returned 0 [0155.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f00) returned 1 Thread: id = 2175 os_tid = 0x390 [0150.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx")) returned 0x20 [0155.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx", dwFileAttributes=0x20) returned 0 [0155.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.594] GetLastError () returned 0x5 [0155.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx", dwFileAttributes=0x20) returned 0 [0155.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45800) returned 1 Thread: id = 2176 os_tid = 0x380 [0150.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx")) returned 0x20 [0155.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx", dwFileAttributes=0x20) returned 0 [0155.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.592] GetLastError () returned 0x5 [0155.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx", dwFileAttributes=0x20) returned 0 [0155.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5ea0) returned 1 Thread: id = 2177 os_tid = 0x3a0 [0150.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx")) returned 0x20 [0155.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx", dwFileAttributes=0x20) returned 0 [0155.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.590] GetLastError () returned 0x5 [0155.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx", dwFileAttributes=0x20) returned 0 [0155.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 2178 os_tid = 0x684 [0150.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx")) returned 0x20 [0155.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx", dwFileAttributes=0x20) returned 0 [0155.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.588] GetLastError () returned 0x5 [0155.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx", dwFileAttributes=0x20) returned 0 [0155.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4e60) returned 1 Thread: id = 2179 os_tid = 0x3f0 [0150.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx")) returned 0x20 [0155.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX", dwFileAttributes=0x20) returned 0 [0155.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.586] GetLastError () returned 0x5 [0155.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX", dwFileAttributes=0x20) returned 0 [0155.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 2180 os_tid = 0x414 [0150.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx")) returned 0x20 [0155.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx", dwFileAttributes=0x20) returned 0 [0155.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.584] GetLastError () returned 0x5 [0155.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx", dwFileAttributes=0x20) returned 0 [0155.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 2181 os_tid = 0x328 [0150.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx")) returned 0x20 [0153.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx", dwFileAttributes=0x20) returned 0 [0154.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.340] GetLastError () returned 0x5 [0154.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx", dwFileAttributes=0x20) returned 0 [0154.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448d0) returned 1 Thread: id = 2182 os_tid = 0x48c [0150.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx")) returned 0x20 [0154.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX", dwFileAttributes=0x20) returned 0 [0154.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.834] GetLastError () returned 0x5 [0154.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX", dwFileAttributes=0x20) returned 0 [0154.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 2183 os_tid = 0x6b8 [0150.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx")) returned 0x20 [0151.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx", dwFileAttributes=0x20) returned 0 [0153.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.580] GetLastError () returned 0x5 [0155.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx", dwFileAttributes=0x20) returned 0 [0155.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 2184 os_tid = 0x7d4 [0150.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx")) returned 0x20 [0155.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx", dwFileAttributes=0x20) returned 0 [0155.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.604] GetLastError () returned 0x5 [0155.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx", dwFileAttributes=0x20) returned 0 [0155.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 2185 os_tid = 0x40c [0150.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx")) returned 0x20 [0154.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx", dwFileAttributes=0x20) returned 0 [0154.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.926] GetLastError () returned 0x5 [0154.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx", dwFileAttributes=0x20) returned 0 [0154.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 Thread: id = 2186 os_tid = 0x730 [0150.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx")) returned 0x20 [0154.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0154.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.924] GetLastError () returned 0x5 [0154.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx", dwFileAttributes=0x20) returned 0 [0154.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d440f0) returned 1 Thread: id = 2187 os_tid = 0x808 [0150.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx")) returned 0x20 [0154.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0154.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.923] GetLastError () returned 0x5 [0154.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx", dwFileAttributes=0x20) returned 0 [0154.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5608) returned 1 Thread: id = 2188 os_tid = 0x818 [0150.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx")) returned 0x20 [0155.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0155.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.602] GetLastError () returned 0x5 [0155.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx", dwFileAttributes=0x20) returned 0 [0155.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5bf8) returned 1 Thread: id = 2189 os_tid = 0x828 [0150.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx")) returned 0x20 [0154.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx", dwFileAttributes=0x20) returned 0 [0154.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.921] GetLastError () returned 0x5 [0154.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx", dwFileAttributes=0x20) returned 0 [0154.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 Thread: id = 2190 os_tid = 0x848 [0150.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx")) returned 0x20 [0154.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx", dwFileAttributes=0x20) returned 0 [0155.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.577] GetLastError () returned 0x5 [0155.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx", dwFileAttributes=0x20) returned 0 [0155.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 Thread: id = 2191 os_tid = 0x858 [0150.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx")) returned 0x20 [0154.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx", dwFileAttributes=0x20) returned 0 [0154.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.934] GetLastError () returned 0x5 [0154.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx", dwFileAttributes=0x20) returned 0 [0154.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 Thread: id = 2192 os_tid = 0x868 [0150.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif")) returned 0x20 [0151.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", dwFileAttributes=0x20) returned 0 [0151.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.325] GetLastError () returned 0x5 [0151.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF", dwFileAttributes=0x20) returned 0 [0151.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 2193 os_tid = 0x878 [0150.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif")) returned 0x20 [0151.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF", dwFileAttributes=0x20) returned 0 [0151.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.327] GetLastError () returned 0x5 [0151.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF", dwFileAttributes=0x20) returned 0 [0151.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5738) returned 1 Thread: id = 2194 os_tid = 0x888 [0150.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif")) returned 0x20 [0151.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF", dwFileAttributes=0x20) returned 0 [0151.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.329] GetLastError () returned 0x5 [0151.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF", dwFileAttributes=0x20) returned 0 [0151.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5278) returned 1 Thread: id = 2195 os_tid = 0x898 [0150.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif")) returned 0x20 [0151.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF", dwFileAttributes=0x20) returned 0 [0151.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.331] GetLastError () returned 0x5 [0151.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF", dwFileAttributes=0x20) returned 0 [0151.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad53a8) returned 1 Thread: id = 2196 os_tid = 0x8a8 [0150.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif")) returned 0x20 [0151.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF", dwFileAttributes=0x20) returned 0 [0151.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.333] GetLastError () returned 0x5 [0151.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF", dwFileAttributes=0x20) returned 0 [0151.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6318) returned 1 Thread: id = 2197 os_tid = 0x8b8 [0150.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif")) returned 0x20 [0151.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF", dwFileAttributes=0x20) returned 0 [0151.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.335] GetLastError () returned 0x5 [0151.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF", dwFileAttributes=0x20) returned 0 [0151.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad69a0) returned 1 Thread: id = 2198 os_tid = 0x8c8 [0150.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif")) returned 0x20 [0151.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF", dwFileAttributes=0x20) returned 0 [0151.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.337] GetLastError () returned 0x5 [0151.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF", dwFileAttributes=0x20) returned 0 [0151.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5a30) returned 1 Thread: id = 2199 os_tid = 0x8d8 [0150.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif")) returned 0x20 [0151.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF", dwFileAttributes=0x20) returned 0 [0151.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.339] GetLastError () returned 0x5 [0151.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF", dwFileAttributes=0x20) returned 0 [0151.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad61e8) returned 1 Thread: id = 2200 os_tid = 0x8f8 [0150.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif")) returned 0x20 [0151.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF", dwFileAttributes=0x20) returned 0 [0151.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.341] GetLastError () returned 0x5 [0151.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF", dwFileAttributes=0x20) returned 0 [0151.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 Thread: id = 2201 os_tid = 0x908 [0150.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif")) returned 0x20 [0151.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF", dwFileAttributes=0x20) returned 0 [0151.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.342] GetLastError () returned 0x5 [0151.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF", dwFileAttributes=0x20) returned 0 [0151.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5900) returned 1 Thread: id = 2202 os_tid = 0x918 [0150.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif")) returned 0x20 [0151.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF", dwFileAttributes=0x20) returned 0 [0151.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.344] GetLastError () returned 0x5 [0151.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF", dwFileAttributes=0x20) returned 0 [0151.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6150) returned 1 Thread: id = 2203 os_tid = 0x928 [0150.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif")) returned 0x20 [0151.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF", dwFileAttributes=0x20) returned 0 [0151.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.346] GetLastError () returned 0x5 [0151.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF", dwFileAttributes=0x20) returned 0 [0151.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5c90) returned 1 Thread: id = 2204 os_tid = 0x938 [0150.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif")) returned 0x20 [0151.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF", dwFileAttributes=0x20) returned 0 [0151.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.348] GetLastError () returned 0x5 [0151.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF", dwFileAttributes=0x20) returned 0 [0151.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad50b0) returned 1 Thread: id = 2205 os_tid = 0x948 [0150.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif")) returned 0x20 [0151.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF", dwFileAttributes=0x20) returned 0 [0151.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.350] GetLastError () returned 0x5 [0151.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF", dwFileAttributes=0x20) returned 0 [0151.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5ef0) returned 1 Thread: id = 2206 os_tid = 0x958 [0150.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif")) returned 0x20 [0151.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF", dwFileAttributes=0x20) returned 0 [0151.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.352] GetLastError () returned 0x5 [0151.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF", dwFileAttributes=0x20) returned 0 [0151.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6ad0) returned 1 Thread: id = 2207 os_tid = 0x968 [0150.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif")) returned 0x20 [0151.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF", dwFileAttributes=0x20) returned 0 [0151.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.354] GetLastError () returned 0x5 [0151.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF", dwFileAttributes=0x20) returned 0 [0151.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5f88) returned 1 Thread: id = 2208 os_tid = 0x978 [0150.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif")) returned 0x20 [0151.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF", dwFileAttributes=0x20) returned 0 [0151.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.356] GetLastError () returned 0x5 [0151.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF", dwFileAttributes=0x20) returned 0 [0151.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad60b8) returned 1 Thread: id = 2209 os_tid = 0x988 [0150.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif")) returned 0x20 [0151.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF", dwFileAttributes=0x20) returned 0 [0151.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.358] GetLastError () returned 0x5 [0151.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF", dwFileAttributes=0x20) returned 0 [0151.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6908) returned 1 Thread: id = 2210 os_tid = 0x998 [0150.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif")) returned 0x20 [0150.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF", dwFileAttributes=0x20) returned 0 [0150.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.988] GetLastError () returned 0x5 [0150.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF", dwFileAttributes=0x20) returned 0 [0150.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6870) returned 1 Thread: id = 2211 os_tid = 0x9a8 [0150.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif")) returned 0x20 [0150.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF", dwFileAttributes=0x20) returned 0 [0150.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.990] GetLastError () returned 0x5 [0150.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF", dwFileAttributes=0x20) returned 0 [0150.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad67d8) returned 1 Thread: id = 2212 os_tid = 0x9b8 [0150.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif")) returned 0x20 [0150.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF", dwFileAttributes=0x20) returned 0 [0150.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0150.995] GetLastError () returned 0x5 [0150.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF", dwFileAttributes=0x20) returned 0 [0150.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6740) returned 1 Thread: id = 2219 os_tid = 0x9c8 [0150.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg")) returned 0x20 [0157.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG", dwFileAttributes=0x20) returned 0 [0157.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.191] GetLastError () returned 0x5 [0159.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG", dwFileAttributes=0x20) returned 0 [0159.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 Thread: id = 2220 os_tid = 0x9d8 [0150.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg")) returned 0x20 [0157.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG", dwFileAttributes=0x20) returned 0 [0157.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.191] GetLastError () returned 0x5 [0159.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG", dwFileAttributes=0x20) returned 0 [0159.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 2221 os_tid = 0x9e8 [0151.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg")) returned 0x20 [0155.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG", dwFileAttributes=0x20) returned 0 [0155.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.947] GetLastError () returned 0x5 [0156.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG", dwFileAttributes=0x20) returned 0 [0156.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 2222 os_tid = 0xa08 [0151.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg")) returned 0x20 [0162.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG", dwFileAttributes=0x20) returned 0 [0162.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.792] GetLastError () returned 0x5 [0163.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG", dwFileAttributes=0x20) returned 0 [0163.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 Thread: id = 2223 os_tid = 0xa18 [0151.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg")) returned 0x20 [0162.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG", dwFileAttributes=0x20) returned 0 [0162.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.261] GetLastError () returned 0x5 [0163.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG", dwFileAttributes=0x20) returned 0 [0163.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 Thread: id = 2224 os_tid = 0xa28 [0151.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg")) returned 0x20 [0161.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG", dwFileAttributes=0x20) returned 0 [0161.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.829] GetLastError () returned 0x5 [0162.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG", dwFileAttributes=0x20) returned 0 [0162.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 Thread: id = 2225 os_tid = 0xa38 [0151.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg")) returned 0x20 [0161.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG", dwFileAttributes=0x20) returned 0 [0161.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.516] GetLastError () returned 0x5 [0162.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG", dwFileAttributes=0x20) returned 0 [0162.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 2226 os_tid = 0xa48 [0151.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg")) returned 0x20 [0156.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG", dwFileAttributes=0x20) returned 0 [0156.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.858] GetLastError () returned 0x5 [0157.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG", dwFileAttributes=0x20) returned 0 [0157.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45da0) returned 1 Thread: id = 2227 os_tid = 0xa58 [0151.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg")) returned 0x20 [0157.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG", dwFileAttributes=0x20) returned 0 [0157.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.192] GetLastError () returned 0x5 [0159.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG", dwFileAttributes=0x20) returned 0 [0159.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 Thread: id = 2228 os_tid = 0xa68 [0151.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg")) returned 0x20 [0161.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG", dwFileAttributes=0x20) returned 0 [0161.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.514] GetLastError () returned 0x5 [0162.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG", dwFileAttributes=0x20) returned 0 [0162.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 2229 os_tid = 0xa78 [0151.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg")) returned 0x20 [0157.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG", dwFileAttributes=0x20) returned 0 [0157.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.191] GetLastError () returned 0x5 [0159.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG", dwFileAttributes=0x20) returned 0 [0159.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 2230 os_tid = 0xa7c [0151.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg")) returned 0x20 [0157.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG", dwFileAttributes=0x20) returned 0 [0157.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.498] GetLastError () returned 0x5 [0161.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG", dwFileAttributes=0x20) returned 0 [0161.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 Thread: id = 2231 os_tid = 0xa8c [0151.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx")) returned 0x20 [0151.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx", dwFileAttributes=0x20) returned 0 [0151.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.010] GetLastError () returned 0x5 [0151.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx", dwFileAttributes=0x20) returned 0 [0151.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 Thread: id = 2232 os_tid = 0xb18 [0151.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx")) returned 0x20 [0151.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx", dwFileAttributes=0x20) returned 0 [0151.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.012] GetLastError () returned 0x5 [0151.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx", dwFileAttributes=0x20) returned 0 [0151.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 2233 os_tid = 0x51c [0151.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx")) returned 0x20 [0151.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx", dwFileAttributes=0x20) returned 0 [0151.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.014] GetLastError () returned 0x5 [0151.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx", dwFileAttributes=0x20) returned 0 [0151.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 2234 os_tid = 0xd6c [0151.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx")) returned 0x20 [0151.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx", dwFileAttributes=0x20) returned 0 [0151.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.017] GetLastError () returned 0x5 [0151.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx", dwFileAttributes=0x20) returned 0 [0151.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 2235 os_tid = 0xda0 [0151.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx")) returned 0x20 [0151.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx", dwFileAttributes=0x20) returned 0 [0151.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.693] GetLastError () returned 0x5 [0151.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx", dwFileAttributes=0x20) returned 0 [0151.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 Thread: id = 2236 os_tid = 0xd98 [0151.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7148 [0151.019] wcscpy (in: _Dest=0x2fe7148, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0151.019] wcscat (in: _Dest=0x2fe7148, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0151.019] wcscat (in: _Dest=0x2fe7148, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\*" [0151.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3de90 [0151.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73df0 [0153.477] wcscmp (_String1=".", _String2=".") returned 0 [0153.477] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.902] wcscmp (_String1="..", _String2=".") returned 1 [0154.902] wcscmp (_String1="..", _String2="..") returned 0 [0154.902] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Abidjan", cAlternateFileName="")) returned 1 [0154.902] wcscmp (_String1="Abidjan", _String2=".") returned 1 [0154.903] wcscmp (_String1="Abidjan", _String2="..") returned 1 [0154.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a39340 [0154.903] wcscpy (in: _Dest=0x7a39340, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0154.903] wcscat (in: _Dest=0x7a39340, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0154.903] wcscat (in: _Dest=0x7a39340, _Source="Abidjan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" [0159.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a39340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0159.469] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accra", cAlternateFileName="")) returned 1 [0159.469] wcscmp (_String1="Accra", _String2=".") returned 1 [0159.469] wcscmp (_String1="Accra", _String2="..") returned 1 [0159.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47c00 [0159.469] wcscpy (in: _Dest=0x3d47c00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.469] wcscat (in: _Dest=0x3d47c00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.469] wcscat (in: _Dest=0x3d47c00, _Source="Accra" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra" [0159.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0159.470] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Addis_Ababa", cAlternateFileName="ADDIS_~1")) returned 1 [0159.470] wcscmp (_String1="Addis_Ababa", _String2=".") returned 1 [0159.470] wcscmp (_String1="Addis_Ababa", _String2="..") returned 1 [0159.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d513e0 [0159.470] wcscpy (in: _Dest=0x3d513e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.470] wcscat (in: _Dest=0x3d513e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.470] wcscat (in: _Dest=0x3d513e0, _Source="Addis_Ababa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" [0159.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d513e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0159.475] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Algiers", cAlternateFileName="")) returned 1 [0159.475] wcscmp (_String1="Algiers", _String2=".") returned 1 [0159.475] wcscmp (_String1="Algiers", _String2="..") returned 1 [0159.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26a18 [0159.475] wcscpy (in: _Dest=0x7a26a18, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.475] wcscat (in: _Dest=0x7a26a18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.475] wcscat (in: _Dest=0x7a26a18, _Source="Algiers" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers" [0159.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0159.476] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asmara", cAlternateFileName="")) returned 1 [0159.476] wcscmp (_String1="Asmara", _String2=".") returned 1 [0159.476] wcscmp (_String1="Asmara", _String2="..") returned 1 [0159.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47fa8 [0159.476] wcscpy (in: _Dest=0x3d47fa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.476] wcscat (in: _Dest=0x3d47fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.476] wcscat (in: _Dest=0x3d47fa8, _Source="Asmara" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara" [0159.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0159.477] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bamako", cAlternateFileName="")) returned 1 [0159.477] wcscmp (_String1="Bamako", _String2=".") returned 1 [0159.478] wcscmp (_String1="Bamako", _String2="..") returned 1 [0159.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d477f0 [0159.478] wcscpy (in: _Dest=0x3d477f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.478] wcscat (in: _Dest=0x3d477f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.478] wcscat (in: _Dest=0x3d477f0, _Source="Bamako" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako" [0159.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d477f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0159.479] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangui", cAlternateFileName="")) returned 1 [0159.479] wcscmp (_String1="Bangui", _String2=".") returned 1 [0159.479] wcscmp (_String1="Bangui", _String2="..") returned 1 [0159.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47b30 [0159.479] wcscpy (in: _Dest=0x3d47b30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.479] wcscat (in: _Dest=0x3d47b30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.479] wcscat (in: _Dest=0x3d47b30, _Source="Bangui" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui" [0159.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0159.480] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Banjul", cAlternateFileName="")) returned 1 [0159.480] wcscmp (_String1="Banjul", _String2=".") returned 1 [0159.480] wcscmp (_String1="Banjul", _String2="..") returned 1 [0159.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47a60 [0159.480] wcscpy (in: _Dest=0x3d47a60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.480] wcscat (in: _Dest=0x3d47a60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.480] wcscat (in: _Dest=0x3d47a60, _Source="Banjul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul" [0159.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0 [0159.481] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bissau", cAlternateFileName="")) returned 1 [0159.481] wcscmp (_String1="Bissau", _String2=".") returned 1 [0159.481] wcscmp (_String1="Bissau", _String2="..") returned 1 [0159.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d479f8 [0159.482] wcscpy (in: _Dest=0x3d479f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.482] wcscat (in: _Dest=0x3d479f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.482] wcscat (in: _Dest=0x3d479f8, _Source="Bissau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau" [0159.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d479f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98 [0159.483] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blantyre", cAlternateFileName="")) returned 1 [0159.483] wcscmp (_String1="Blantyre", _String2=".") returned 1 [0159.483] wcscmp (_String1="Blantyre", _String2="..") returned 1 [0159.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26778 [0159.483] wcscpy (in: _Dest=0x7a26778, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.483] wcscat (in: _Dest=0x7a26778, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.483] wcscat (in: _Dest=0x7a26778, _Source="Blantyre" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" [0159.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0159.484] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brazzaville", cAlternateFileName="BRAZZA~1")) returned 1 [0159.485] wcscmp (_String1="Brazzaville", _String2=".") returned 1 [0159.485] wcscmp (_String1="Brazzaville", _String2="..") returned 1 [0159.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d517a0 [0159.485] wcscpy (in: _Dest=0x3d517a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.485] wcscat (in: _Dest=0x3d517a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.485] wcscat (in: _Dest=0x3d517a0, _Source="Brazzaville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" [0159.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d517a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0159.486] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bujumbura", cAlternateFileName="BUJUMB~1")) returned 1 [0159.486] wcscmp (_String1="Bujumbura", _String2=".") returned 1 [0159.486] wcscmp (_String1="Bujumbura", _String2="..") returned 1 [0159.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a267e8 [0159.486] wcscpy (in: _Dest=0x7a267e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.486] wcscat (in: _Dest=0x7a267e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.486] wcscat (in: _Dest=0x7a267e8, _Source="Bujumbura" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" [0159.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a267e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0159.487] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cairo", cAlternateFileName="")) returned 1 [0159.487] wcscmp (_String1="Cairo", _String2=".") returned 1 [0159.487] wcscmp (_String1="Cairo", _String2="..") returned 1 [0159.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47990 [0159.487] wcscpy (in: _Dest=0x3d47990, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.487] wcscat (in: _Dest=0x3d47990, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.487] wcscat (in: _Dest=0x3d47990, _Source="Cairo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo" [0159.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0159.488] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casablanca", cAlternateFileName="CASABL~1")) returned 1 [0159.488] wcscmp (_String1="Casablanca", _String2=".") returned 1 [0159.488] wcscmp (_String1="Casablanca", _String2="..") returned 1 [0159.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a264d8 [0159.488] wcscpy (in: _Dest=0x7a264d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.488] wcscat (in: _Dest=0x7a264d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.488] wcscat (in: _Dest=0x7a264d8, _Source="Casablanca" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" [0159.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a264d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474 [0159.490] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68157440, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68157440, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68157440, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ceuta", cAlternateFileName="")) returned 1 [0159.490] wcscmp (_String1="Ceuta", _String2=".") returned 1 [0159.490] wcscmp (_String1="Ceuta", _String2="..") returned 1 [0159.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47d38 [0159.490] wcscpy (in: _Dest=0x3d47d38, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.490] wcscat (in: _Dest=0x3d47d38, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.490] wcscat (in: _Dest=0x3d47d38, _Source="Ceuta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" [0159.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0159.491] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Conakry", cAlternateFileName="")) returned 1 [0159.491] wcscmp (_String1="Conakry", _String2=".") returned 1 [0159.491] wcscmp (_String1="Conakry", _String2="..") returned 1 [0159.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26938 [0159.491] wcscpy (in: _Dest=0x7a26938, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.491] wcscat (in: _Dest=0x7a26938, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.491] wcscat (in: _Dest=0x7a26938, _Source="Conakry" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry" [0159.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0159.492] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dakar", cAlternateFileName="")) returned 1 [0159.492] wcscmp (_String1="Dakar", _String2=".") returned 1 [0159.492] wcscmp (_String1="Dakar", _String2="..") returned 1 [0159.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47cd0 [0159.492] wcscpy (in: _Dest=0x3d47cd0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.492] wcscat (in: _Dest=0x3d47cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.492] wcscat (in: _Dest=0x3d47cd0, _Source="Dakar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar" [0159.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0159.493] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dar_es_Salaam", cAlternateFileName="DAR_ES~1")) returned 1 [0159.494] wcscmp (_String1="Dar_es_Salaam", _String2=".") returned 1 [0159.494] wcscmp (_String1="Dar_es_Salaam", _String2="..") returned 1 [0159.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d50fa8 [0159.494] wcscpy (in: _Dest=0x3d50fa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.494] wcscat (in: _Dest=0x3d50fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.494] wcscat (in: _Dest=0x3d50fa8, _Source="Dar_es_Salaam" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" [0159.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d50fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0159.495] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Djibouti", cAlternateFileName="")) returned 1 [0159.495] wcscmp (_String1="Djibouti", _String2=".") returned 1 [0159.495] wcscmp (_String1="Djibouti", _String2="..") returned 1 [0159.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26698 [0159.495] wcscpy (in: _Dest=0x7a26698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.495] wcscat (in: _Dest=0x7a26698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.495] wcscat (in: _Dest=0x7a26698, _Source="Djibouti" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" [0159.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0159.497] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Douala", cAlternateFileName="")) returned 1 [0159.497] wcscmp (_String1="Douala", _String2=".") returned 1 [0159.497] wcscmp (_String1="Douala", _String2="..") returned 1 [0159.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47928 [0159.497] wcscpy (in: _Dest=0x3d47928, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.497] wcscat (in: _Dest=0x3d47928, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.497] wcscat (in: _Dest=0x3d47928, _Source="Douala" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala" [0159.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0159.498] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Aaiun", cAlternateFileName="")) returned 1 [0159.498] wcscmp (_String1="El_Aaiun", _String2=".") returned 1 [0159.498] wcscmp (_String1="El_Aaiun", _String2="..") returned 1 [0159.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26008 [0159.498] wcscpy (in: _Dest=0x7a26008, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.498] wcscat (in: _Dest=0x7a26008, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.498] wcscat (in: _Dest=0x7a26008, _Source="El_Aaiun" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" [0159.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0159.500] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Freetown", cAlternateFileName="")) returned 1 [0159.500] wcscmp (_String1="Freetown", _String2=".") returned 1 [0159.500] wcscmp (_String1="Freetown", _String2="..") returned 1 [0159.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26f58 [0159.500] wcscpy (in: _Dest=0x7a26f58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.500] wcscat (in: _Dest=0x7a26f58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.500] wcscat (in: _Dest=0x7a26f58, _Source="Freetown" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown" [0159.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0159.501] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaborone", cAlternateFileName="")) returned 1 [0159.501] wcscmp (_String1="Gaborone", _String2=".") returned 1 [0159.501] wcscmp (_String1="Gaborone", _String2="..") returned 1 [0159.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26c48 [0159.501] wcscpy (in: _Dest=0x7a26c48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.501] wcscat (in: _Dest=0x7a26c48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.501] wcscat (in: _Dest=0x7a26c48, _Source="Gaborone" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" [0159.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0159.502] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harare", cAlternateFileName="")) returned 1 [0159.502] wcscmp (_String1="Harare", _String2=".") returned 1 [0159.502] wcscmp (_String1="Harare", _String2="..") returned 1 [0159.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47170 [0159.503] wcscpy (in: _Dest=0x3d47170, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.503] wcscat (in: _Dest=0x3d47170, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.503] wcscat (in: _Dest=0x3d47170, _Source="Harare" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare" [0159.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0159.504] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johannesburg", cAlternateFileName="JOHANN~1")) returned 1 [0159.504] wcscmp (_String1="Johannesburg", _String2=".") returned 1 [0159.504] wcscmp (_String1="Johannesburg", _String2="..") returned 1 [0159.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3d51200 [0159.504] wcscpy (in: _Dest=0x3d51200, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.504] wcscat (in: _Dest=0x3d51200, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.504] wcscat (in: _Dest=0x3d51200, _Source="Johannesburg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" [0159.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d51200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0159.505] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juba", cAlternateFileName="")) returned 1 [0159.505] wcscmp (_String1="Juba", _String2=".") returned 1 [0159.505] wcscmp (_String1="Juba", _String2="..") returned 1 [0159.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d46950 [0159.505] wcscpy (in: _Dest=0x3d46950, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.505] wcscat (in: _Dest=0x3d46950, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.505] wcscat (in: _Dest=0x3d46950, _Source="Juba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba" [0159.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d46950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0159.507] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kampala", cAlternateFileName="")) returned 1 [0159.507] wcscmp (_String1="Kampala", _String2=".") returned 1 [0159.507] wcscmp (_String1="Kampala", _String2="..") returned 1 [0159.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a263f8 [0159.507] wcscpy (in: _Dest=0x7a263f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.507] wcscat (in: _Dest=0x7a263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.507] wcscat (in: _Dest=0x7a263f8, _Source="Kampala" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala" [0159.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0159.508] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khartoum", cAlternateFileName="")) returned 1 [0159.508] wcscmp (_String1="Khartoum", _String2=".") returned 1 [0159.508] wcscmp (_String1="Khartoum", _String2="..") returned 1 [0159.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a261c8 [0159.508] wcscpy (in: _Dest=0x7a261c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0159.508] wcscat (in: _Dest=0x7a261c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0159.508] wcscat (in: _Dest=0x7a261c8, _Source="Khartoum" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" [0159.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a261c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0161.440] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kigali", cAlternateFileName="")) returned 1 [0161.440] wcscmp (_String1="Kigali", _String2=".") returned 1 [0161.441] wcscmp (_String1="Kigali", _String2="..") returned 1 [0161.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47c00 [0161.441] wcscpy (in: _Dest=0x3d47c00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0161.441] wcscat (in: _Dest=0x3d47c00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0161.441] wcscat (in: _Dest=0x3d47c00, _Source="Kigali" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali" [0169.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0169.611] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kinshasa", cAlternateFileName="")) returned 1 [0169.611] wcscmp (_String1="Kinshasa", _String2=".") returned 1 [0169.611] wcscmp (_String1="Kinshasa", _String2="..") returned 1 [0169.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26698 [0169.614] wcscpy (in: _Dest=0x7a26698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.614] wcscat (in: _Dest=0x7a26698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.614] wcscat (in: _Dest=0x7a26698, _Source="Kinshasa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" [0169.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0169.615] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lagos", cAlternateFileName="")) returned 1 [0169.615] wcscmp (_String1="Lagos", _String2=".") returned 1 [0169.615] wcscmp (_String1="Lagos", _String2="..") returned 1 [0169.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1f220 [0169.615] wcscpy (in: _Dest=0x3e1f220, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.615] wcscat (in: _Dest=0x3e1f220, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.615] wcscat (in: _Dest=0x3e1f220, _Source="Lagos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos" [0169.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0169.617] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libreville", cAlternateFileName="LIBREV~1")) returned 1 [0169.617] wcscmp (_String1="Libreville", _String2=".") returned 1 [0169.617] wcscmp (_String1="Libreville", _String2="..") returned 1 [0169.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26f58 [0169.617] wcscpy (in: _Dest=0x7a26f58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.617] wcscat (in: _Dest=0x7a26f58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.617] wcscat (in: _Dest=0x7a26f58, _Source="Libreville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville" [0169.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0169.618] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lome", cAlternateFileName="")) returned 1 [0169.618] wcscmp (_String1="Lome", _String2=".") returned 1 [0169.618] wcscmp (_String1="Lome", _String2="..") returned 1 [0169.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1d8f0 [0169.618] wcscpy (in: _Dest=0x3e1d8f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.618] wcscat (in: _Dest=0x3e1d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.618] wcscat (in: _Dest=0x3e1d8f0, _Source="Lome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome" [0169.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0169.620] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817d5a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6817d5a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6817d5a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luanda", cAlternateFileName="")) returned 1 [0169.620] wcscmp (_String1="Luanda", _String2=".") returned 1 [0169.620] wcscmp (_String1="Luanda", _String2="..") returned 1 [0169.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d9c0 [0169.620] wcscpy (in: _Dest=0x3e1d9c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.620] wcscat (in: _Dest=0x3e1d9c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.620] wcscat (in: _Dest=0x3e1d9c0, _Source="Luanda" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda" [0169.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0169.621] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lubumbashi", cAlternateFileName="LUBUMB~1")) returned 1 [0169.621] wcscmp (_String1="Lubumbashi", _String2=".") returned 1 [0169.621] wcscmp (_String1="Lubumbashi", _String2="..") returned 1 [0169.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26e78 [0169.621] wcscpy (in: _Dest=0x7a26e78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.621] wcscat (in: _Dest=0x7a26e78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.621] wcscat (in: _Dest=0x7a26e78, _Source="Lubumbashi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" [0169.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0169.623] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lusaka", cAlternateFileName="")) returned 1 [0169.623] wcscmp (_String1="Lusaka", _String2=".") returned 1 [0169.623] wcscmp (_String1="Lusaka", _String2="..") returned 1 [0169.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1da28 [0169.623] wcscpy (in: _Dest=0x3e1da28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.623] wcscat (in: _Dest=0x3e1da28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.623] wcscat (in: _Dest=0x3e1da28, _Source="Lusaka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" [0169.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1da28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0169.624] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malabo", cAlternateFileName="")) returned 1 [0169.624] wcscmp (_String1="Malabo", _String2=".") returned 1 [0169.624] wcscmp (_String1="Malabo", _String2="..") returned 1 [0169.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f150 [0169.625] wcscpy (in: _Dest=0x3e1f150, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.625] wcscat (in: _Dest=0x3e1f150, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.625] wcscat (in: _Dest=0x3e1f150, _Source="Malabo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo" [0169.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0169.626] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maputo", cAlternateFileName="")) returned 1 [0169.626] wcscmp (_String1="Maputo", _String2=".") returned 1 [0169.626] wcscmp (_String1="Maputo", _String2="..") returned 1 [0169.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1e7f8 [0169.627] wcscpy (in: _Dest=0x3e1e7f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.627] wcscat (in: _Dest=0x3e1e7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.627] wcscat (in: _Dest=0x3e1e7f8, _Source="Maputo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo" [0169.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1e7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0169.628] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maseru", cAlternateFileName="")) returned 1 [0169.628] wcscmp (_String1="Maseru", _String2=".") returned 1 [0169.628] wcscmp (_String1="Maseru", _String2="..") returned 1 [0169.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d958 [0169.628] wcscpy (in: _Dest=0x3e1d958, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.628] wcscat (in: _Dest=0x3e1d958, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.628] wcscat (in: _Dest=0x3e1d958, _Source="Maseru" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru" [0169.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0169.629] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mbabane", cAlternateFileName="")) returned 1 [0169.630] wcscmp (_String1="Mbabane", _String2=".") returned 1 [0169.630] wcscmp (_String1="Mbabane", _String2="..") returned 1 [0169.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26318 [0169.630] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.630] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.630] wcscat (in: _Dest=0x7a26318, _Source="Mbabane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" [0169.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0169.631] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mogadishu", cAlternateFileName="MOGADI~1")) returned 1 [0169.631] wcscmp (_String1="Mogadishu", _String2=".") returned 1 [0169.631] wcscmp (_String1="Mogadishu", _String2="..") returned 1 [0169.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26548 [0169.631] wcscpy (in: _Dest=0x7a26548, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.631] wcscat (in: _Dest=0x7a26548, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.631] wcscat (in: _Dest=0x7a26548, _Source="Mogadishu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" [0169.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0169.632] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monrovia", cAlternateFileName="")) returned 1 [0169.633] wcscmp (_String1="Monrovia", _String2=".") returned 1 [0169.633] wcscmp (_String1="Monrovia", _String2="..") returned 1 [0169.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26c48 [0169.633] wcscpy (in: _Dest=0x7a26c48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.633] wcscat (in: _Dest=0x7a26c48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.633] wcscat (in: _Dest=0x7a26c48, _Source="Monrovia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" [0169.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0169.634] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nairobi", cAlternateFileName="")) returned 1 [0169.634] wcscmp (_String1="Nairobi", _String2=".") returned 1 [0169.634] wcscmp (_String1="Nairobi", _String2="..") returned 1 [0169.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26938 [0169.634] wcscpy (in: _Dest=0x7a26938, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.634] wcscat (in: _Dest=0x7a26938, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.634] wcscat (in: _Dest=0x7a26938, _Source="Nairobi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" [0169.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0169.636] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ndjamena", cAlternateFileName="")) returned 1 [0169.636] wcscmp (_String1="Ndjamena", _String2=".") returned 1 [0169.636] wcscmp (_String1="Ndjamena", _String2="..") returned 1 [0169.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26778 [0169.636] wcscpy (in: _Dest=0x7a26778, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.636] wcscat (in: _Dest=0x7a26778, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.636] wcscat (in: _Dest=0x7a26778, _Source="Ndjamena" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" [0169.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0169.637] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niamey", cAlternateFileName="")) returned 1 [0169.637] wcscmp (_String1="Niamey", _String2=".") returned 1 [0169.637] wcscmp (_String1="Niamey", _String2="..") returned 1 [0169.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1e0a8 [0169.637] wcscpy (in: _Dest=0x3e1e0a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.637] wcscat (in: _Dest=0x3e1e0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.637] wcscat (in: _Dest=0x3e1e0a8, _Source="Niamey" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey" [0169.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1e0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0169.639] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nouakchott", cAlternateFileName="NOUAKC~1")) returned 1 [0169.639] wcscmp (_String1="Nouakchott", _String2=".") returned 1 [0169.639] wcscmp (_String1="Nouakchott", _String2="..") returned 1 [0169.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26628 [0169.639] wcscpy (in: _Dest=0x7a26628, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.639] wcscat (in: _Dest=0x7a26628, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.639] wcscat (in: _Dest=0x7a26628, _Source="Nouakchott" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" [0169.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0169.640] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ouagadougou", cAlternateFileName="OUAGAD~1")) returned 1 [0169.640] wcscmp (_String1="Ouagadougou", _String2=".") returned 1 [0169.640] wcscmp (_String1="Ouagadougou", _String2="..") returned 1 [0169.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f6c8 [0169.640] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.640] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.640] wcscat (in: _Dest=0x3f3f6c8, _Source="Ouagadougou" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" [0169.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f6c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0169.642] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto-Novo", cAlternateFileName="PORTO-~1")) returned 1 [0169.642] wcscmp (_String1="Porto-Novo", _String2=".") returned 1 [0169.642] wcscmp (_String1="Porto-Novo", _String2="..") returned 1 [0169.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a261c8 [0169.642] wcscpy (in: _Dest=0x7a261c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.642] wcscat (in: _Dest=0x7a261c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.642] wcscat (in: _Dest=0x7a261c8, _Source="Porto-Novo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" [0169.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a261c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0169.643] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Tome", cAlternateFileName="")) returned 1 [0169.643] wcscmp (_String1="Sao_Tome", _String2=".") returned 1 [0169.643] wcscmp (_String1="Sao_Tome", _String2="..") returned 1 [0169.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a264d8 [0169.643] wcscpy (in: _Dest=0x7a264d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.643] wcscat (in: _Dest=0x7a264d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.643] wcscat (in: _Dest=0x7a264d8, _Source="Sao_Tome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" [0169.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a264d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0169.644] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tripoli", cAlternateFileName="")) returned 1 [0169.644] wcscmp (_String1="Tripoli", _String2=".") returned 1 [0169.645] wcscmp (_String1="Tripoli", _String2="..") returned 1 [0169.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a267e8 [0169.645] wcscpy (in: _Dest=0x7a267e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.645] wcscat (in: _Dest=0x7a267e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.645] wcscat (in: _Dest=0x7a267e8, _Source="Tripoli" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" [0169.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a267e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0169.646] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tunis", cAlternateFileName="")) returned 1 [0169.646] wcscmp (_String1="Tunis", _String2=".") returned 1 [0169.646] wcscmp (_String1="Tunis", _String2="..") returned 1 [0169.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1f358 [0169.646] wcscpy (in: _Dest=0x3e1f358, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0169.646] wcscat (in: _Dest=0x3e1f358, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0169.646] wcscat (in: _Dest=0x3e1f358, _Source="Tunis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis" [0169.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0170.427] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 1 [0170.427] wcscmp (_String1="Windhoek", _String2=".") returned 1 [0170.427] wcscmp (_String1="Windhoek", _String2="..") returned 1 [0170.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26af8 [0170.427] wcscpy (in: _Dest=0x7a26af8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa" [0170.427] wcscat (in: _Dest=0x7a26af8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\" [0170.427] wcscat (in: _Dest=0x7a26af8, _Source="Windhoek" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" [0171.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0171.382] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windhoek", cAlternateFileName="")) returned 0 [0171.582] FindClose (in: hFindFile=0x3e73df0 | out: hFindFile=0x3e73df0) returned 1 [0171.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3de90) returned 1 [0171.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7148) returned 1 [0171.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe66c8) returned 1 Thread: id = 2237 os_tid = 0x448 [0151.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe63c8 [0151.023] wcscpy (in: _Dest=0x2fe63c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0151.023] wcscat (in: _Dest=0x2fe63c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0151.023] wcscat (in: _Dest=0x2fe63c8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\*" [0151.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3dc28 [0151.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0154.468] wcscmp (_String1=".", _String2=".") returned 0 [0154.468] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.941] wcscmp (_String1="..", _String2=".") returned 1 [0155.941] wcscmp (_String1="..", _String2="..") returned 0 [0155.941] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adak", cAlternateFileName="")) returned 1 [0155.941] wcscmp (_String1="Adak", _String2=".") returned 1 [0155.941] wcscmp (_String1="Adak", _String2="..") returned 1 [0155.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee1078 [0155.941] wcscpy (in: _Dest=0x3ee1078, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0155.941] wcscat (in: _Dest=0x3ee1078, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0155.941] wcscat (in: _Dest=0x3ee1078, _Source="Adak" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak" [0159.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0159.135] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anchorage", cAlternateFileName="ANCHOR~1")) returned 1 [0159.135] wcscmp (_String1="Anchorage", _String2=".") returned 1 [0159.135] wcscmp (_String1="Anchorage", _String2="..") returned 1 [0159.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23300 [0159.135] wcscpy (in: _Dest=0x7a23300, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.135] wcscat (in: _Dest=0x7a23300, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.136] wcscat (in: _Dest=0x7a23300, _Source="Anchorage" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage" [0159.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x145c [0159.137] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anguilla", cAlternateFileName="")) returned 1 [0159.137] wcscmp (_String1="Anguilla", _String2=".") returned 1 [0159.137] wcscmp (_String1="Anguilla", _String2="..") returned 1 [0159.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23610 [0159.137] wcscpy (in: _Dest=0x7a23610, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.137] wcscat (in: _Dest=0x7a23610, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.137] wcscat (in: _Dest=0x7a23610, _Source="Anguilla" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla" [0159.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0159.138] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antigua", cAlternateFileName="")) returned 1 [0159.138] wcscmp (_String1="Antigua", _String2=".") returned 1 [0159.138] wcscmp (_String1="Antigua", _String2="..") returned 1 [0159.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a233e0 [0159.138] wcscpy (in: _Dest=0x7a233e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.138] wcscat (in: _Dest=0x7a233e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.139] wcscat (in: _Dest=0x7a233e0, _Source="Antigua" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua" [0159.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a233e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454 [0159.140] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Araguaina", cAlternateFileName="ARAGUA~1")) returned 1 [0159.140] wcscmp (_String1="Araguaina", _String2=".") returned 1 [0159.140] wcscmp (_String1="Araguaina", _String2="..") returned 1 [0159.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23140 [0159.140] wcscpy (in: _Dest=0x7a23140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.140] wcscat (in: _Dest=0x7a23140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.140] wcscat (in: _Dest=0x7a23140, _Source="Araguaina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina" [0159.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0159.141] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Argentina", cAlternateFileName="ARGENT~1")) returned 1 [0159.142] wcscmp (_String1="Argentina", _String2=".") returned 1 [0159.142] wcscmp (_String1="Argentina", _String2="..") returned 1 [0159.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23370 [0159.142] wcscpy (in: _Dest=0x7a23370, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.142] wcscat (in: _Dest=0x7a23370, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.142] wcscat (in: _Dest=0x7a23370, _Source="Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0159.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0159.143] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aruba", cAlternateFileName="")) returned 1 [0159.143] wcscmp (_String1="Aruba", _String2=".") returned 1 [0159.143] wcscmp (_String1="Aruba", _String2="..") returned 1 [0159.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47b30 [0159.143] wcscpy (in: _Dest=0x3d47b30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.143] wcscat (in: _Dest=0x3d47b30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.143] wcscat (in: _Dest=0x3d47b30, _Source="Aruba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba" [0159.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0159.144] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Asuncion", cAlternateFileName="")) returned 1 [0159.144] wcscmp (_String1="Asuncion", _String2=".") returned 1 [0159.144] wcscmp (_String1="Asuncion", _String2="..") returned 1 [0159.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23450 [0159.145] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.145] wcscat (in: _Dest=0x7a23450, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.145] wcscat (in: _Dest=0x7a23450, _Source="Asuncion" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion" [0159.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1444 [0159.146] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Atikokan", cAlternateFileName="")) returned 1 [0159.146] wcscmp (_String1="Atikokan", _String2=".") returned 1 [0159.146] wcscmp (_String1="Atikokan", _String2="..") returned 1 [0159.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23ae0 [0159.146] wcscpy (in: _Dest=0x7a23ae0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.146] wcscat (in: _Dest=0x7a23ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.146] wcscat (in: _Dest=0x7a23ae0, _Source="Atikokan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan" [0159.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440 [0159.147] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x229, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia", cAlternateFileName="")) returned 1 [0159.147] wcscmp (_String1="Bahia", _String2=".") returned 1 [0159.147] wcscmp (_String1="Bahia", _String2="..") returned 1 [0159.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d477f0 [0159.147] wcscpy (in: _Dest=0x3d477f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.147] wcscat (in: _Dest=0x3d477f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.147] wcscat (in: _Dest=0x3d477f0, _Source="Bahia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia" [0159.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d477f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0159.148] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahia_Banderas", cAlternateFileName="BAHIA_~1")) returned 1 [0159.148] wcscmp (_String1="Bahia_Banderas", _String2=".") returned 1 [0159.148] wcscmp (_String1="Bahia_Banderas", _String2="..") returned 1 [0159.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3da5d70 [0159.148] wcscpy (in: _Dest=0x3da5d70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.148] wcscat (in: _Dest=0x3da5d70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.149] wcscat (in: _Dest=0x3da5d70, _Source="Bahia_Banderas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" [0159.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3da5d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0159.150] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Barbados", cAlternateFileName="")) returned 1 [0159.150] wcscmp (_String1="Barbados", _String2=".") returned 1 [0159.150] wcscmp (_String1="Barbados", _String2="..") returned 1 [0159.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23e60 [0159.150] wcscpy (in: _Dest=0x7a23e60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.150] wcscat (in: _Dest=0x7a23e60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.150] wcscat (in: _Dest=0x7a23e60, _Source="Barbados" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados" [0159.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0159.151] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belem", cAlternateFileName="")) returned 1 [0159.151] wcscmp (_String1="Belem", _String2=".") returned 1 [0159.151] wcscmp (_String1="Belem", _String2="..") returned 1 [0159.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47fa8 [0159.151] wcscpy (in: _Dest=0x3d47fa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.151] wcscat (in: _Dest=0x3d47fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.151] wcscat (in: _Dest=0x3d47fa8, _Source="Belem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem" [0159.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0159.152] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belize", cAlternateFileName="")) returned 1 [0159.152] wcscmp (_String1="Belize", _String2=".") returned 1 [0159.152] wcscmp (_String1="Belize", _String2="..") returned 1 [0159.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23df0 [0159.152] wcscpy (in: _Dest=0x7a23df0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.152] wcscat (in: _Dest=0x7a23df0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.152] wcscat (in: _Dest=0x7a23df0, _Source="Belize" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize" [0159.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0159.153] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blanc-Sablon", cAlternateFileName="BLANC-~1")) returned 1 [0159.153] wcscmp (_String1="Blanc-Sablon", _String2=".") returned 1 [0159.153] wcscmp (_String1="Blanc-Sablon", _String2="..") returned 1 [0159.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d51200 [0159.154] wcscpy (in: _Dest=0x3d51200, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.154] wcscat (in: _Dest=0x3d51200, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.154] wcscat (in: _Dest=0x3d51200, _Source="Blanc-Sablon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" [0159.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d51200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0159.155] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boa_Vista", cAlternateFileName="BOA_VI~1")) returned 1 [0159.155] wcscmp (_String1="Boa_Vista", _String2=".") returned 1 [0159.155] wcscmp (_String1="Boa_Vista", _String2="..") returned 1 [0159.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23d80 [0159.155] wcscpy (in: _Dest=0x7a23d80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.155] wcscat (in: _Dest=0x7a23d80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.155] wcscat (in: _Dest=0x7a23d80, _Source="Boa_Vista" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" [0159.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0159.156] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bogota", cAlternateFileName="")) returned 1 [0159.156] wcscmp (_String1="Bogota", _String2=".") returned 1 [0159.156] wcscmp (_String1="Bogota", _String2="..") returned 1 [0159.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23c30 [0159.156] wcscpy (in: _Dest=0x7a23c30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.156] wcscat (in: _Dest=0x7a23c30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.156] wcscat (in: _Dest=0x7a23c30, _Source="Bogota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota" [0159.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0159.157] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boise", cAlternateFileName="")) returned 1 [0159.157] wcscmp (_String1="Boise", _String2=".") returned 1 [0159.157] wcscmp (_String1="Boise", _String2="..") returned 1 [0159.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47c00 [0159.158] wcscpy (in: _Dest=0x3d47c00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.158] wcscat (in: _Dest=0x3d47c00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.158] wcscat (in: _Dest=0x3d47c00, _Source="Boise" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise" [0159.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0159.159] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cambridge_Bay", cAlternateFileName="CAMBRI~1")) returned 1 [0159.159] wcscmp (_String1="Cambridge_Bay", _String2=".") returned 1 [0159.159] wcscmp (_String1="Cambridge_Bay", _String2="..") returned 1 [0159.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50fa8 [0159.159] wcscpy (in: _Dest=0x3d50fa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.159] wcscat (in: _Dest=0x3d50fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.159] wcscat (in: _Dest=0x3d50fa8, _Source="Cambridge_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" [0159.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d50fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0159.161] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campo_Grande", cAlternateFileName="CAMPO_~1")) returned 1 [0159.161] wcscmp (_String1="Campo_Grande", _String2=".") returned 1 [0159.161] wcscmp (_String1="Campo_Grande", _String2="..") returned 1 [0159.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3d517a0 [0159.161] wcscpy (in: _Dest=0x3d517a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.161] wcscat (in: _Dest=0x3d517a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.161] wcscat (in: _Dest=0x3d517a0, _Source="Campo_Grande" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" [0159.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d517a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0159.162] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cancun", cAlternateFileName="")) returned 1 [0159.162] wcscmp (_String1="Cancun", _String2=".") returned 1 [0159.162] wcscmp (_String1="Cancun", _String2="..") returned 1 [0159.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23a00 [0159.162] wcscpy (in: _Dest=0x7a23a00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.162] wcscat (in: _Dest=0x7a23a00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.162] wcscat (in: _Dest=0x7a23a00, _Source="Cancun" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun" [0159.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418 [0159.163] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caracas", cAlternateFileName="")) returned 1 [0159.163] wcscmp (_String1="Caracas", _String2=".") returned 1 [0159.163] wcscmp (_String1="Caracas", _String2="..") returned 1 [0159.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23220 [0159.163] wcscpy (in: _Dest=0x7a23220, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.163] wcscat (in: _Dest=0x7a23220, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.163] wcscat (in: _Dest=0x7a23220, _Source="Caracas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas" [0159.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1414 [0159.164] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayenne", cAlternateFileName="")) returned 1 [0159.164] wcscmp (_String1="Cayenne", _String2=".") returned 1 [0159.165] wcscmp (_String1="Cayenne", _String2="..") returned 1 [0159.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23ed0 [0159.165] wcscpy (in: _Dest=0x7a23ed0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.165] wcscat (in: _Dest=0x7a23ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.165] wcscat (in: _Dest=0x7a23ed0, _Source="Cayenne" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne" [0159.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0159.166] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cayman", cAlternateFileName="")) returned 1 [0159.166] wcscmp (_String1="Cayman", _String2=".") returned 1 [0159.166] wcscmp (_String1="Cayman", _String2="..") returned 1 [0159.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23d10 [0159.166] wcscpy (in: _Dest=0x7a23d10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.166] wcscat (in: _Dest=0x7a23d10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.166] wcscat (in: _Dest=0x7a23d10, _Source="Cayman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman" [0159.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0159.167] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chicago", cAlternateFileName="")) returned 1 [0159.167] wcscmp (_String1="Chicago", _String2=".") returned 1 [0159.167] wcscmp (_String1="Chicago", _String2="..") returned 1 [0159.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26778 [0159.168] wcscpy (in: _Dest=0x7a26778, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.168] wcscat (in: _Dest=0x7a26778, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.168] wcscat (in: _Dest=0x7a26778, _Source="Chicago" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago" [0159.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0159.169] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chihuahua", cAlternateFileName="CHIHUA~1")) returned 1 [0159.169] wcscmp (_String1="Chihuahua", _String2=".") returned 1 [0159.169] wcscmp (_String1="Chihuahua", _String2="..") returned 1 [0159.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26a18 [0159.169] wcscpy (in: _Dest=0x7a26a18, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.169] wcscat (in: _Dest=0x7a26a18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.169] wcscat (in: _Dest=0x7a26a18, _Source="Chihuahua" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua" [0159.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0159.171] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Costa_Rica", cAlternateFileName="COSTA_~1")) returned 1 [0159.171] wcscmp (_String1="Costa_Rica", _String2=".") returned 1 [0159.171] wcscmp (_String1="Costa_Rica", _String2="..") returned 1 [0159.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e3a0 [0159.171] wcscpy (in: _Dest=0x3f3e3a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.171] wcscat (in: _Dest=0x3f3e3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.171] wcscat (in: _Dest=0x3f3e3a0, _Source="Costa_Rica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" [0159.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0159.172] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Creston", cAlternateFileName="")) returned 1 [0159.172] wcscmp (_String1="Creston", _String2=".") returned 1 [0159.172] wcscmp (_String1="Creston", _String2="..") returned 1 [0159.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26cb8 [0159.172] wcscpy (in: _Dest=0x7a26cb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.172] wcscat (in: _Dest=0x7a26cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.173] wcscat (in: _Dest=0x7a26cb8, _Source="Creston" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston" [0159.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0159.509] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cuiaba", cAlternateFileName="")) returned 1 [0159.510] wcscmp (_String1="Cuiaba", _String2=".") returned 1 [0159.510] wcscmp (_String1="Cuiaba", _String2="..") returned 1 [0159.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26bd8 [0159.510] wcscpy (in: _Dest=0x7a26bd8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0159.510] wcscat (in: _Dest=0x7a26bd8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0159.510] wcscat (in: _Dest=0x7a26bd8, _Source="Cuiaba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba" [0170.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0170.359] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Curacao", cAlternateFileName="")) returned 1 [0170.359] wcscmp (_String1="Curacao", _String2=".") returned 1 [0170.359] wcscmp (_String1="Curacao", _String2="..") returned 1 [0170.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26698 [0170.359] wcscpy (in: _Dest=0x7a26698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0170.359] wcscat (in: _Dest=0x7a26698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0170.359] wcscat (in: _Dest=0x7a26698, _Source="Curacao" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao" [0170.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0170.360] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="Danmarkshavn", cAlternateFileName="DANMAR~1")) returned 1 [0170.360] wcscmp (_String1="Danmarkshavn", _String2=".") returned 1 [0170.360] wcscmp (_String1="Danmarkshavn", _String2="..") returned 1 [0170.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f218 [0170.361] wcscpy (in: _Dest=0x3f3f218, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0170.361] wcscat (in: _Dest=0x3f3f218, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0170.361] wcscat (in: _Dest=0x3f3f218, _Source="Danmarkshavn" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" [0170.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0170.362] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson", cAlternateFileName="")) returned 1 [0170.362] wcscmp (_String1="Dawson", _String2=".") returned 1 [0170.362] wcscmp (_String1="Dawson", _String2="..") returned 1 [0170.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26ee8 [0170.362] wcscpy (in: _Dest=0x7a26ee8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0170.362] wcscat (in: _Dest=0x7a26ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0170.362] wcscat (in: _Dest=0x7a26ee8, _Source="Dawson" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson" [0170.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0170.364] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dawson_Creek", cAlternateFileName="DAWSON~1")) returned 1 [0170.364] wcscmp (_String1="Dawson_Creek", _String2=".") returned 1 [0170.364] wcscmp (_String1="Dawson_Creek", _String2="..") returned 1 [0170.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f650 [0170.364] wcscpy (in: _Dest=0x3f3f650, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0170.364] wcscat (in: _Dest=0x3f3f650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0170.364] wcscat (in: _Dest=0x3f3f650, _Source="Dawson_Creek" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" [0170.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0170.366] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="Denver", cAlternateFileName="")) returned 1 [0170.366] wcscmp (_String1="Denver", _String2=".") returned 1 [0170.366] wcscmp (_String1="Denver", _String2="..") returned 1 [0170.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26078 [0170.366] wcscpy (in: _Dest=0x7a26078, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0170.366] wcscat (in: _Dest=0x7a26078, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0170.366] wcscat (in: _Dest=0x7a26078, _Source="Denver" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver" [0170.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0170.367] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Detroit", cAlternateFileName="")) returned 1 [0170.368] wcscmp (_String1="Detroit", _String2=".") returned 1 [0170.368] wcscmp (_String1="Detroit", _String2="..") returned 1 [0170.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26238 [0170.368] wcscpy (in: _Dest=0x7a26238, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0170.368] wcscat (in: _Dest=0x7a26238, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0170.368] wcscat (in: _Dest=0x7a26238, _Source="Detroit" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit" [0170.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0170.369] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dominica", cAlternateFileName="")) returned 1 [0170.374] wcscmp (_String1="Dominica", _String2=".") returned 1 [0170.374] wcscmp (_String1="Dominica", _String2="..") returned 1 [0170.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26468 [0170.375] wcscpy (in: _Dest=0x7a26468, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0170.375] wcscat (in: _Dest=0x7a26468, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0170.375] wcscat (in: _Dest=0x7a26468, _Source="Dominica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica" [0172.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0172.988] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edmonton", cAlternateFileName="")) returned 1 [0172.988] wcscmp (_String1="Edmonton", _String2=".") returned 1 [0172.988] wcscmp (_String1="Edmonton", _String2="..") returned 1 [0172.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23ae0 [0172.988] wcscpy (in: _Dest=0x7a23ae0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.988] wcscat (in: _Dest=0x7a23ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.988] wcscat (in: _Dest=0x7a23ae0, _Source="Edmonton" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton" [0172.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0172.989] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eirunepe", cAlternateFileName="")) returned 1 [0172.989] wcscmp (_String1="Eirunepe", _String2=".") returned 1 [0172.989] wcscmp (_String1="Eirunepe", _String2="..") returned 1 [0172.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23140 [0172.990] wcscpy (in: _Dest=0x7a23140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.990] wcscat (in: _Dest=0x7a23140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.990] wcscat (in: _Dest=0x7a23140, _Source="Eirunepe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe" [0172.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0172.991] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="El_Salvador", cAlternateFileName="EL_SAL~1")) returned 1 [0172.991] wcscmp (_String1="El_Salvador", _String2=".") returned 1 [0172.991] wcscmp (_String1="El_Salvador", _String2="..") returned 1 [0172.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f470 [0172.991] wcscpy (in: _Dest=0x3f3f470, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.991] wcscat (in: _Dest=0x3f3f470, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.991] wcscat (in: _Dest=0x3f3f470, _Source="El_Salvador" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador" [0172.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0172.992] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fortaleza", cAlternateFileName="FORTAL~1")) returned 1 [0172.993] wcscmp (_String1="Fortaleza", _String2=".") returned 1 [0172.993] wcscmp (_String1="Fortaleza", _String2="..") returned 1 [0172.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a233e0 [0172.993] wcscpy (in: _Dest=0x7a233e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0172.993] wcscat (in: _Dest=0x7a233e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0172.993] wcscat (in: _Dest=0x7a233e0, _Source="Fortaleza" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza" [0172.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a233e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0173.000] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glace_Bay", cAlternateFileName="GLACE_~1")) returned 1 [0173.000] wcscmp (_String1="Glace_Bay", _String2=".") returned 1 [0173.001] wcscmp (_String1="Glace_Bay", _String2="..") returned 1 [0173.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a231b0 [0173.001] wcscpy (in: _Dest=0x7a231b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.001] wcscat (in: _Dest=0x7a231b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.001] wcscat (in: _Dest=0x7a231b0, _Source="Glace_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" [0173.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a231b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0173.002] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Godthab", cAlternateFileName="")) returned 1 [0173.002] wcscmp (_String1="Godthab", _String2=".") returned 1 [0173.002] wcscmp (_String1="Godthab", _String2="..") returned 1 [0173.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a234c0 [0173.002] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.002] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.002] wcscat (in: _Dest=0x7a234c0, _Source="Godthab" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab" [0173.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a234c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0173.004] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Goose_Bay", cAlternateFileName="GOOSE_~1")) returned 1 [0173.004] wcscmp (_String1="Goose_Bay", _String2=".") returned 1 [0173.004] wcscmp (_String1="Goose_Bay", _String2="..") returned 1 [0173.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23220 [0173.004] wcscpy (in: _Dest=0x7a23220, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.004] wcscat (in: _Dest=0x7a23220, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.004] wcscat (in: _Dest=0x7a23220, _Source="Goose_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" [0173.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0173.005] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grand_Turk", cAlternateFileName="GRAND_~1")) returned 1 [0173.005] wcscmp (_String1="Grand_Turk", _String2=".") returned 1 [0173.005] wcscmp (_String1="Grand_Turk", _String2="..") returned 1 [0173.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fce0 [0173.006] wcscpy (in: _Dest=0x3f3fce0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.006] wcscat (in: _Dest=0x3f3fce0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.006] wcscat (in: _Dest=0x3f3fce0, _Source="Grand_Turk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" [0173.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0173.007] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grenada", cAlternateFileName="")) returned 1 [0173.007] wcscmp (_String1="Grenada", _String2=".") returned 1 [0173.007] wcscmp (_String1="Grenada", _String2="..") returned 1 [0173.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23e60 [0173.007] wcscpy (in: _Dest=0x7a23e60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.007] wcscat (in: _Dest=0x7a23e60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.007] wcscat (in: _Dest=0x7a23e60, _Source="Grenada" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada" [0173.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0173.008] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadeloupe", cAlternateFileName="GUADEL~1")) returned 1 [0173.008] wcscmp (_String1="Guadeloupe", _String2=".") returned 1 [0173.008] wcscmp (_String1="Guadeloupe", _String2="..") returned 1 [0173.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fb00 [0173.009] wcscpy (in: _Dest=0x3f3fb00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.009] wcscat (in: _Dest=0x3f3fb00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.009] wcscat (in: _Dest=0x3f3fb00, _Source="Guadeloupe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" [0173.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0173.011] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guatemala", cAlternateFileName="GUATEM~1")) returned 1 [0173.011] wcscmp (_String1="Guatemala", _String2=".") returned 1 [0173.011] wcscmp (_String1="Guatemala", _String2="..") returned 1 [0173.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23450 [0173.011] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.011] wcscat (in: _Dest=0x7a23450, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.011] wcscat (in: _Dest=0x7a23450, _Source="Guatemala" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala" [0173.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0173.026] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guayaquil", cAlternateFileName="GUAYAQ~1")) returned 1 [0173.026] wcscmp (_String1="Guayaquil", _String2=".") returned 1 [0173.026] wcscmp (_String1="Guayaquil", _String2="..") returned 1 [0173.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23ed0 [0173.027] wcscpy (in: _Dest=0x7a23ed0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.027] wcscat (in: _Dest=0x7a23ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.027] wcscat (in: _Dest=0x7a23ed0, _Source="Guayaquil" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil" [0173.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0173.028] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guyana", cAlternateFileName="")) returned 1 [0173.028] wcscmp (_String1="Guyana", _String2=".") returned 1 [0173.028] wcscmp (_String1="Guyana", _String2="..") returned 1 [0173.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23c30 [0173.028] wcscpy (in: _Dest=0x7a23c30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.028] wcscat (in: _Dest=0x7a23c30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.028] wcscat (in: _Dest=0x7a23c30, _Source="Guyana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana" [0173.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0173.030] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="Halifax", cAlternateFileName="")) returned 1 [0173.030] wcscmp (_String1="Halifax", _String2=".") returned 1 [0173.030] wcscmp (_String1="Halifax", _String2="..") returned 1 [0173.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23d80 [0173.030] wcscpy (in: _Dest=0x7a23d80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.030] wcscat (in: _Dest=0x7a23d80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.030] wcscat (in: _Dest=0x7a23d80, _Source="Halifax" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax" [0173.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0173.031] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Havana", cAlternateFileName="")) returned 1 [0173.031] wcscmp (_String1="Havana", _String2=".") returned 1 [0173.032] wcscmp (_String1="Havana", _String2="..") returned 1 [0173.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23d10 [0173.032] wcscpy (in: _Dest=0x7a23d10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.032] wcscat (in: _Dest=0x7a23d10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.032] wcscat (in: _Dest=0x7a23d10, _Source="Havana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana" [0173.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0173.033] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hermosillo", cAlternateFileName="HERMOS~1")) returned 1 [0173.033] wcscmp (_String1="Hermosillo", _String2=".") returned 1 [0173.033] wcscmp (_String1="Hermosillo", _String2="..") returned 1 [0173.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f6c8 [0173.033] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.033] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.033] wcscat (in: _Dest=0x3f3f6c8, _Source="Hermosillo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo" [0173.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f6c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0173.035] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indiana", cAlternateFileName="")) returned 1 [0173.035] wcscmp (_String1="Indiana", _String2=".") returned 1 [0173.035] wcscmp (_String1="Indiana", _String2="..") returned 1 [0173.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23610 [0173.035] wcscpy (in: _Dest=0x7a23610, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.035] wcscat (in: _Dest=0x7a23610, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.035] wcscat (in: _Dest=0x7a23610, _Source="Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0173.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a23610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0173.036] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inuvik", cAlternateFileName="")) returned 1 [0173.036] wcscmp (_String1="Inuvik", _String2=".") returned 1 [0173.036] wcscmp (_String1="Inuvik", _String2="..") returned 1 [0173.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a22ff0 [0173.036] wcscpy (in: _Dest=0x7a22ff0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.036] wcscat (in: _Dest=0x7a22ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.036] wcscat (in: _Dest=0x7a22ff0, _Source="Inuvik" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik" [0173.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a22ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0173.037] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="Iqaluit", cAlternateFileName="")) returned 1 [0173.037] wcscmp (_String1="Iqaluit", _String2=".") returned 1 [0173.037] wcscmp (_String1="Iqaluit", _String2="..") returned 1 [0173.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23300 [0173.038] wcscpy (in: _Dest=0x7a23300, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.038] wcscat (in: _Dest=0x7a23300, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.038] wcscat (in: _Dest=0x7a23300, _Source="Iqaluit" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit" [0173.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c [0173.039] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jamaica", cAlternateFileName="")) returned 1 [0173.039] wcscmp (_String1="Jamaica", _String2=".") returned 1 [0173.039] wcscmp (_String1="Jamaica", _String2="..") returned 1 [0173.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23290 [0173.039] wcscpy (in: _Dest=0x7a23290, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.039] wcscat (in: _Dest=0x7a23290, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.039] wcscat (in: _Dest=0x7a23290, _Source="Jamaica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica" [0173.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0173.040] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Juneau", cAlternateFileName="")) returned 1 [0173.040] wcscmp (_String1="Juneau", _String2=".") returned 1 [0173.040] wcscmp (_String1="Juneau", _String2="..") returned 1 [0173.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a235a0 [0173.040] wcscpy (in: _Dest=0x7a235a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.040] wcscat (in: _Dest=0x7a235a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.040] wcscat (in: _Dest=0x7a235a0, _Source="Juneau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau" [0173.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a235a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0173.042] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kentucky", cAlternateFileName="")) returned 1 [0173.042] wcscmp (_String1="Kentucky", _String2=".") returned 1 [0173.042] wcscmp (_String1="Kentucky", _String2="..") returned 1 [0173.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a230d0 [0173.042] wcscpy (in: _Dest=0x7a230d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.042] wcscat (in: _Dest=0x7a230d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.042] wcscat (in: _Dest=0x7a230d0, _Source="Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0173.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a230d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0173.043] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="La_Paz", cAlternateFileName="")) returned 1 [0173.043] wcscmp (_String1="La_Paz", _String2=".") returned 1 [0173.043] wcscmp (_String1="La_Paz", _String2="..") returned 1 [0173.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23680 [0173.043] wcscpy (in: _Dest=0x7a23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.043] wcscat (in: _Dest=0x7a23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.043] wcscat (in: _Dest=0x7a23680, _Source="La_Paz" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz" [0173.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0173.907] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lima", cAlternateFileName="")) returned 1 [0173.907] wcscmp (_String1="Lima", _String2=".") returned 1 [0173.907] wcscmp (_String1="Lima", _String2="..") returned 1 [0173.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1f358 [0173.907] wcscpy (in: _Dest=0x3e1f358, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0173.907] wcscat (in: _Dest=0x3e1f358, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0173.907] wcscat (in: _Dest=0x3e1f358, _Source="Lima" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima" [0174.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0174.407] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Los_Angeles", cAlternateFileName="LOS_AN~1")) returned 1 [0174.407] wcscmp (_String1="Los_Angeles", _String2=".") returned 1 [0174.407] wcscmp (_String1="Los_Angeles", _String2="..") returned 1 [0174.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f5d8 [0174.408] wcscpy (in: _Dest=0x3f3f5d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0174.408] wcscat (in: _Dest=0x3f3f5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0174.408] wcscat (in: _Dest=0x3f3f5d8, _Source="Los_Angeles" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" [0174.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0174.443] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maceio", cAlternateFileName="")) returned 1 [0174.443] wcscmp (_String1="Maceio", _String2=".") returned 1 [0174.443] wcscmp (_String1="Maceio", _String2="..") returned 1 [0174.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23220 [0174.443] wcscpy (in: _Dest=0x7a23220, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0174.444] wcscat (in: _Dest=0x7a23220, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0174.444] wcscat (in: _Dest=0x7a23220, _Source="Maceio" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio" [0174.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0174.445] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Managua", cAlternateFileName="")) returned 1 [0174.445] wcscmp (_String1="Managua", _String2=".") returned 1 [0174.445] wcscmp (_String1="Managua", _String2="..") returned 1 [0174.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a234c0 [0174.445] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0174.445] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0174.445] wcscat (in: _Dest=0x7a234c0, _Source="Managua" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua" [0174.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a234c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0174.447] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manaus", cAlternateFileName="")) returned 1 [0174.447] wcscmp (_String1="Manaus", _String2=".") returned 1 [0174.447] wcscmp (_String1="Manaus", _String2="..") returned 1 [0174.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a231b0 [0174.447] wcscpy (in: _Dest=0x7a231b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0174.447] wcscat (in: _Dest=0x7a231b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0174.447] wcscat (in: _Dest=0x7a231b0, _Source="Manaus" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus" [0174.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a231b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0174.449] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Martinique", cAlternateFileName="MARTIN~1")) returned 1 [0174.449] wcscmp (_String1="Martinique", _String2=".") returned 1 [0174.449] wcscmp (_String1="Martinique", _String2="..") returned 1 [0174.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f7b8 [0174.449] wcscpy (in: _Dest=0x3f3f7b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0174.449] wcscat (in: _Dest=0x3f3f7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0174.449] wcscat (in: _Dest=0x3f3f7b8, _Source="Martinique" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique" [0174.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0174.451] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Matamoros", cAlternateFileName="MATAMO~1")) returned 1 [0174.451] wcscmp (_String1="Matamoros", _String2=".") returned 1 [0174.451] wcscmp (_String1="Matamoros", _String2="..") returned 1 [0174.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a233e0 [0174.451] wcscpy (in: _Dest=0x7a233e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0174.451] wcscat (in: _Dest=0x7a233e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0174.451] wcscat (in: _Dest=0x7a233e0, _Source="Matamoros" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros" [0174.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a233e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0174.475] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mazatlan", cAlternateFileName="")) returned 1 [0174.475] wcscmp (_String1="Mazatlan", _String2=".") returned 1 [0174.475] wcscmp (_String1="Mazatlan", _String2="..") returned 1 [0174.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23140 [0174.475] wcscpy (in: _Dest=0x7a23140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0174.475] wcscat (in: _Dest=0x7a23140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0174.475] wcscat (in: _Dest=0x7a23140, _Source="Mazatlan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan" [0175.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0175.657] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Menominee", cAlternateFileName="MENOMI~1")) returned 1 [0175.657] wcscmp (_String1="Menominee", _String2=".") returned 1 [0175.657] wcscmp (_String1="Menominee", _String2="..") returned 1 [0175.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23df0 [0175.657] wcscpy (in: _Dest=0x7a23df0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0175.658] wcscat (in: _Dest=0x7a23df0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0175.658] wcscat (in: _Dest=0x7a23df0, _Source="Menominee" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee" [0175.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0175.659] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Merida", cAlternateFileName="")) returned 1 [0175.659] wcscmp (_String1="Merida", _String2=".") returned 1 [0175.659] wcscmp (_String1="Merida", _String2="..") returned 1 [0175.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23a70 [0175.659] wcscpy (in: _Dest=0x7a23a70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0175.659] wcscat (in: _Dest=0x7a23a70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0175.659] wcscat (in: _Dest=0x7a23a70, _Source="Merida" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida" [0175.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0175.661] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metlakatla", cAlternateFileName="METLAK~1")) returned 1 [0175.661] wcscmp (_String1="Metlakatla", _String2=".") returned 1 [0175.661] wcscmp (_String1="Metlakatla", _String2="..") returned 1 [0175.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd88 [0175.661] wcscpy (in: _Dest=0x3f3dd88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0175.661] wcscat (in: _Dest=0x3f3dd88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0175.661] wcscat (in: _Dest=0x3f3dd88, _Source="Metlakatla" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla" [0175.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0175.663] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mexico_City", cAlternateFileName="MEXICO~1")) returned 1 [0175.663] wcscmp (_String1="Mexico_City", _String2=".") returned 1 [0175.663] wcscmp (_String1="Mexico_City", _String2="..") returned 1 [0175.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e760 [0175.663] wcscpy (in: _Dest=0x3f3e760, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0175.663] wcscat (in: _Dest=0x3f3e760, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0175.663] wcscat (in: _Dest=0x3f3e760, _Source="Mexico_City" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City" [0175.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0175.665] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Miquelon", cAlternateFileName="")) returned 1 [0178.781] wcscmp (_String1="Miquelon", _String2=".") returned 1 [0178.781] wcscmp (_String1="Miquelon", _String2="..") returned 1 [0178.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a234c0 [0178.781] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.781] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.781] wcscat (in: _Dest=0x7a234c0, _Source="Miquelon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon" [0178.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a234c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0178.782] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Moncton", cAlternateFileName="")) returned 1 [0178.783] wcscmp (_String1="Moncton", _String2=".") returned 1 [0178.783] wcscmp (_String1="Moncton", _String2="..") returned 1 [0178.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23450 [0178.783] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.783] wcscat (in: _Dest=0x7a23450, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.783] wcscat (in: _Dest=0x7a23450, _Source="Moncton" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton" [0178.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0178.784] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monterrey", cAlternateFileName="MONTER~1")) returned 1 [0178.784] wcscmp (_String1="Monterrey", _String2=".") returned 1 [0178.784] wcscmp (_String1="Monterrey", _String2="..") returned 1 [0178.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a235a0 [0178.784] wcscpy (in: _Dest=0x7a235a0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.784] wcscat (in: _Dest=0x7a235a0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.784] wcscat (in: _Dest=0x7a235a0, _Source="Monterrey" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey" [0178.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a235a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec [0178.786] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montevideo", cAlternateFileName="MONTEV~1")) returned 1 [0178.786] wcscmp (_String1="Montevideo", _String2=".") returned 1 [0178.786] wcscmp (_String1="Montevideo", _String2="..") returned 1 [0178.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e238 [0178.786] wcscpy (in: _Dest=0x3f3e238, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.786] wcscat (in: _Dest=0x3f3e238, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.786] wcscat (in: _Dest=0x3f3e238, _Source="Montevideo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo" [0178.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0178.787] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montreal", cAlternateFileName="")) returned 1 [0178.787] wcscmp (_String1="Montreal", _String2=".") returned 1 [0178.787] wcscmp (_String1="Montreal", _String2="..") returned 1 [0178.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23680 [0178.787] wcscpy (in: _Dest=0x7a23680, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.787] wcscat (in: _Dest=0x7a23680, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.787] wcscat (in: _Dest=0x7a23680, _Source="Montreal" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal" [0178.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0178.788] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Montserrat", cAlternateFileName="MONTSE~1")) returned 1 [0178.788] wcscmp (_String1="Montserrat", _String2=".") returned 1 [0178.788] wcscmp (_String1="Montserrat", _String2="..") returned 1 [0178.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e0d0 [0178.789] wcscpy (in: _Dest=0x3f3e0d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.789] wcscat (in: _Dest=0x3f3e0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.789] wcscat (in: _Dest=0x3f3e0d0, _Source="Montserrat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat" [0178.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0178.790] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nassau", cAlternateFileName="")) returned 1 [0178.790] wcscmp (_String1="Nassau", _String2=".") returned 1 [0178.790] wcscmp (_String1="Nassau", _String2="..") returned 1 [0178.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23c30 [0178.790] wcscpy (in: _Dest=0x7a23c30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.790] wcscat (in: _Dest=0x7a23c30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.790] wcscat (in: _Dest=0x7a23c30, _Source="Nassau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau" [0178.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0178.791] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_York", cAlternateFileName="")) returned 1 [0178.791] wcscmp (_String1="New_York", _String2=".") returned 1 [0178.791] wcscmp (_String1="New_York", _String2="..") returned 1 [0178.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23d10 [0178.791] wcscpy (in: _Dest=0x7a23d10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.791] wcscat (in: _Dest=0x7a23d10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.791] wcscat (in: _Dest=0x7a23d10, _Source="New_York" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York" [0178.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0178.792] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nipigon", cAlternateFileName="")) returned 1 [0178.792] wcscmp (_String1="Nipigon", _String2=".") returned 1 [0178.792] wcscmp (_String1="Nipigon", _String2="..") returned 1 [0178.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23610 [0178.793] wcscpy (in: _Dest=0x7a23610, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.793] wcscat (in: _Dest=0x7a23610, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.793] wcscat (in: _Dest=0x7a23610, _Source="Nipigon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon" [0178.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0178.794] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nome", cAlternateFileName="")) returned 1 [0178.794] wcscmp (_String1="Nome", _String2=".") returned 1 [0178.794] wcscmp (_String1="Nome", _String2="..") returned 1 [0178.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1d958 [0178.794] wcscpy (in: _Dest=0x3e1d958, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.794] wcscat (in: _Dest=0x3e1d958, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.794] wcscat (in: _Dest=0x3e1d958, _Source="Nome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome" [0178.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0178.795] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noronha", cAlternateFileName="")) returned 1 [0178.795] wcscmp (_String1="Noronha", _String2=".") returned 1 [0178.795] wcscmp (_String1="Noronha", _String2="..") returned 1 [0178.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23d80 [0178.795] wcscpy (in: _Dest=0x7a23d80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.796] wcscat (in: _Dest=0x7a23d80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.796] wcscat (in: _Dest=0x7a23d80, _Source="Noronha" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha" [0178.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0178.797] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="North_Dakota", cAlternateFileName="NORTH_~1")) returned 1 [0178.797] wcscmp (_String1="North_Dakota", _String2=".") returned 1 [0178.797] wcscmp (_String1="North_Dakota", _String2="..") returned 1 [0178.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e940 [0178.797] wcscpy (in: _Dest=0x3f3e940, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.797] wcscat (in: _Dest=0x3f3e940, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.797] wcscat (in: _Dest=0x3f3e940, _Source="North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0178.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0178.799] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ojinaga", cAlternateFileName="")) returned 1 [0178.799] wcscmp (_String1="Ojinaga", _String2=".") returned 1 [0178.799] wcscmp (_String1="Ojinaga", _String2="..") returned 1 [0178.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a230d0 [0178.799] wcscpy (in: _Dest=0x7a230d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.799] wcscat (in: _Dest=0x7a230d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.799] wcscat (in: _Dest=0x7a230d0, _Source="Ojinaga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga" [0178.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a230d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0178.800] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panama", cAlternateFileName="")) returned 1 [0178.800] wcscmp (_String1="Panama", _String2=".") returned 1 [0178.800] wcscmp (_String1="Panama", _String2="..") returned 1 [0178.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23ed0 [0178.800] wcscpy (in: _Dest=0x7a23ed0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.800] wcscat (in: _Dest=0x7a23ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.800] wcscat (in: _Dest=0x7a23ed0, _Source="Panama" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama" [0178.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0178.801] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pangnirtung", cAlternateFileName="PANGNI~1")) returned 1 [0178.801] wcscmp (_String1="Pangnirtung", _String2=".") returned 1 [0178.801] wcscmp (_String1="Pangnirtung", _String2="..") returned 1 [0178.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3dfe0 [0178.801] wcscpy (in: _Dest=0x3f3dfe0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.801] wcscat (in: _Dest=0x3f3dfe0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.801] wcscat (in: _Dest=0x3f3dfe0, _Source="Pangnirtung" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" [0178.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dfe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0178.802] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paramaribo", cAlternateFileName="PARAMA~1")) returned 1 [0178.802] wcscmp (_String1="Paramaribo", _String2=".") returned 1 [0178.802] wcscmp (_String1="Paramaribo", _String2="..") returned 1 [0178.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e490 [0178.803] wcscpy (in: _Dest=0x3f3e490, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.803] wcscat (in: _Dest=0x3f3e490, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.803] wcscat (in: _Dest=0x3f3e490, _Source="Paramaribo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo" [0178.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0178.808] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phoenix", cAlternateFileName="")) returned 1 [0178.808] wcscmp (_String1="Phoenix", _String2=".") returned 1 [0178.808] wcscmp (_String1="Phoenix", _String2="..") returned 1 [0178.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23370 [0178.808] wcscpy (in: _Dest=0x7a23370, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.808] wcscat (in: _Dest=0x7a23370, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.808] wcscat (in: _Dest=0x7a23370, _Source="Phoenix" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix" [0178.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0178.809] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port-au-Prince", cAlternateFileName="PORT-A~1")) returned 1 [0178.809] wcscmp (_String1="Port-au-Prince", _String2=".") returned 1 [0178.809] wcscmp (_String1="Port-au-Prince", _String2="..") returned 1 [0178.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a698 [0178.809] wcscpy (in: _Dest=0x3e1a698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.809] wcscat (in: _Dest=0x3e1a698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.809] wcscat (in: _Dest=0x3e1a698, _Source="Port-au-Prince" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" [0178.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0178.810] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Porto_Velho", cAlternateFileName="PORTO_~1")) returned 1 [0178.810] wcscmp (_String1="Porto_Velho", _String2=".") returned 1 [0178.810] wcscmp (_String1="Porto_Velho", _String2="..") returned 1 [0178.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e1c0 [0178.811] wcscpy (in: _Dest=0x3f3e1c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.811] wcscat (in: _Dest=0x3f3e1c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.811] wcscat (in: _Dest=0x3f3e1c0, _Source="Porto_Velho" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" [0178.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0178.812] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port_of_Spain", cAlternateFileName="PORT_O~1")) returned 1 [0178.812] wcscmp (_String1="Port_of_Spain", _String2=".") returned 1 [0178.812] wcscmp (_String1="Port_of_Spain", _String2="..") returned 1 [0178.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0178.812] wcscpy (in: _Dest=0x3f3def0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.812] wcscat (in: _Dest=0x3f3def0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.812] wcscat (in: _Dest=0x3f3def0, _Source="Port_of_Spain" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" [0178.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3def0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0178.911] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Puerto_Rico", cAlternateFileName="PUERTO~1")) returned 1 [0178.911] wcscmp (_String1="Puerto_Rico", _String2=".") returned 1 [0178.911] wcscmp (_String1="Puerto_Rico", _String2="..") returned 1 [0178.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e760 [0178.911] wcscpy (in: _Dest=0x3f3e760, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.911] wcscat (in: _Dest=0x3f3e760, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.911] wcscat (in: _Dest=0x3f3e760, _Source="Puerto_Rico" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" [0178.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0178.912] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rainy_River", cAlternateFileName="RAINY_~1")) returned 1 [0178.912] wcscmp (_String1="Rainy_River", _String2=".") returned 1 [0178.912] wcscmp (_String1="Rainy_River", _String2="..") returned 1 [0178.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3dd88 [0178.912] wcscpy (in: _Dest=0x3f3dd88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.912] wcscat (in: _Dest=0x3f3dd88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.912] wcscat (in: _Dest=0x3f3dd88, _Source="Rainy_River" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River" [0178.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0178.913] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rankin_Inlet", cAlternateFileName="RANKIN~1")) returned 1 [0178.913] wcscmp (_String1="Rankin_Inlet", _String2=".") returned 1 [0178.913] wcscmp (_String1="Rankin_Inlet", _String2="..") returned 1 [0178.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e7d8 [0178.913] wcscpy (in: _Dest=0x3f3e7d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.913] wcscat (in: _Dest=0x3f3e7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.914] wcscat (in: _Dest=0x3f3e7d8, _Source="Rankin_Inlet" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" [0178.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0178.914] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x179, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recife", cAlternateFileName="")) returned 1 [0178.914] wcscmp (_String1="Recife", _String2=".") returned 1 [0178.914] wcscmp (_String1="Recife", _String2="..") returned 1 [0178.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23450 [0178.915] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.915] wcscat (in: _Dest=0x7a23450, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.915] wcscat (in: _Dest=0x7a23450, _Source="Recife" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife" [0178.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0178.915] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Regina", cAlternateFileName="")) returned 1 [0178.915] wcscmp (_String1="Regina", _String2=".") returned 1 [0178.915] wcscmp (_String1="Regina", _String2="..") returned 1 [0178.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a234c0 [0178.916] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.916] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.916] wcscat (in: _Dest=0x7a234c0, _Source="Regina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina" [0178.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a234c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0178.916] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resolute", cAlternateFileName="")) returned 1 [0178.916] wcscmp (_String1="Resolute", _String2=".") returned 1 [0178.917] wcscmp (_String1="Resolute", _String2="..") returned 1 [0178.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23140 [0178.917] wcscpy (in: _Dest=0x7a23140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.917] wcscat (in: _Dest=0x7a23140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.917] wcscat (in: _Dest=0x7a23140, _Source="Resolute" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute" [0178.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0178.918] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rio_Branco", cAlternateFileName="RIO_BR~1")) returned 1 [0178.918] wcscmp (_String1="Rio_Branco", _String2=".") returned 1 [0178.918] wcscmp (_String1="Rio_Branco", _String2="..") returned 1 [0178.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e2b0 [0178.918] wcscpy (in: _Dest=0x3f3e2b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.918] wcscat (in: _Dest=0x3f3e2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.918] wcscat (in: _Dest=0x3f3e2b0, _Source="Rio_Branco" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" [0178.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0178.919] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santarem", cAlternateFileName="")) returned 1 [0178.919] wcscmp (_String1="Santarem", _String2=".") returned 1 [0178.919] wcscmp (_String1="Santarem", _String2="..") returned 1 [0178.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23a70 [0178.919] wcscpy (in: _Dest=0x7a23a70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.919] wcscat (in: _Dest=0x7a23a70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.919] wcscat (in: _Dest=0x7a23a70, _Source="Santarem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem" [0178.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0178.920] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santa_Isabel", cAlternateFileName="SANTA_~1")) returned 1 [0178.920] wcscmp (_String1="Santa_Isabel", _String2=".") returned 1 [0178.920] wcscmp (_String1="Santa_Isabel", _String2="..") returned 1 [0178.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e418 [0178.920] wcscpy (in: _Dest=0x3f3e418, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.920] wcscat (in: _Dest=0x3f3e418, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.920] wcscat (in: _Dest=0x3f3e418, _Source="Santa_Isabel" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" [0178.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0178.921] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santiago", cAlternateFileName="")) returned 1 [0178.921] wcscmp (_String1="Santiago", _String2=".") returned 1 [0178.921] wcscmp (_String1="Santiago", _String2="..") returned 1 [0178.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23df0 [0178.921] wcscpy (in: _Dest=0x7a23df0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.921] wcscat (in: _Dest=0x7a23df0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.921] wcscat (in: _Dest=0x7a23df0, _Source="Santiago" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago" [0178.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c [0178.922] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Santo_Domingo", cAlternateFileName="SANTO_~1")) returned 1 [0178.922] wcscmp (_String1="Santo_Domingo", _String2=".") returned 1 [0178.922] wcscmp (_String1="Santo_Domingo", _String2="..") returned 1 [0178.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0178.922] wcscpy (in: _Dest=0x3f3e6e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.922] wcscat (in: _Dest=0x3f3e6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.922] wcscat (in: _Dest=0x3f3e6e8, _Source="Santo_Domingo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" [0178.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0178.923] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sao_Paulo", cAlternateFileName="SAO_PA~1")) returned 1 [0178.923] wcscmp (_String1="Sao_Paulo", _String2=".") returned 1 [0178.923] wcscmp (_String1="Sao_Paulo", _String2="..") returned 1 [0178.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a233e0 [0178.923] wcscpy (in: _Dest=0x7a233e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.923] wcscat (in: _Dest=0x7a233e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.923] wcscat (in: _Dest=0x7a233e0, _Source="Sao_Paulo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" [0178.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a233e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0178.924] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scoresbysund", cAlternateFileName="SCORES~1")) returned 1 [0178.924] wcscmp (_String1="Scoresbysund", _String2=".") returned 1 [0178.924] wcscmp (_String1="Scoresbysund", _String2="..") returned 1 [0178.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dd10 [0178.924] wcscpy (in: _Dest=0x3f3dd10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.924] wcscat (in: _Dest=0x3f3dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.925] wcscat (in: _Dest=0x3f3dd10, _Source="Scoresbysund" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" [0178.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0178.925] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sitka", cAlternateFileName="")) returned 1 [0178.926] wcscmp (_String1="Sitka", _String2=".") returned 1 [0178.926] wcscmp (_String1="Sitka", _String2="..") returned 1 [0178.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f358 [0178.926] wcscpy (in: _Dest=0x3e1f358, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.926] wcscat (in: _Dest=0x3e1f358, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.926] wcscat (in: _Dest=0x3e1f358, _Source="Sitka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka" [0178.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0178.927] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Johns", cAlternateFileName="")) returned 1 [0178.927] wcscmp (_String1="St_Johns", _String2=".") returned 1 [0178.927] wcscmp (_String1="St_Johns", _String2="..") returned 1 [0178.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a231b0 [0178.927] wcscpy (in: _Dest=0x7a231b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0178.927] wcscat (in: _Dest=0x7a231b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0178.927] wcscat (in: _Dest=0x7a231b0, _Source="St_Johns" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns" [0178.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a231b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0178.928] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Kitts", cAlternateFileName="")) returned 1 [0180.320] wcscmp (_String1="St_Kitts", _String2=".") returned 1 [0180.320] wcscmp (_String1="St_Kitts", _String2="..") returned 1 [0180.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23220 [0180.320] wcscpy (in: _Dest=0x7a23220, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.320] wcscat (in: _Dest=0x7a23220, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.321] wcscat (in: _Dest=0x7a23220, _Source="St_Kitts" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts" [0180.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0180.758] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Lucia", cAlternateFileName="")) returned 1 [0180.758] wcscmp (_String1="St_Lucia", _String2=".") returned 1 [0180.758] wcscmp (_String1="St_Lucia", _String2="..") returned 1 [0180.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69f38 [0180.758] wcscpy (in: _Dest=0x3e69f38, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.758] wcscat (in: _Dest=0x3e69f38, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.758] wcscat (in: _Dest=0x3e69f38, _Source="St_Lucia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia" [0180.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0180.759] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Thomas", cAlternateFileName="ST_THO~1")) returned 1 [0180.759] wcscmp (_String1="St_Thomas", _String2=".") returned 1 [0180.759] wcscmp (_String1="St_Thomas", _String2="..") returned 1 [0180.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69fa8 [0180.759] wcscpy (in: _Dest=0x3e69fa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.759] wcscat (in: _Dest=0x3e69fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.759] wcscat (in: _Dest=0x3e69fa8, _Source="St_Thomas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas" [0180.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0180.760] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Vincent", cAlternateFileName="ST_VIN~1")) returned 1 [0180.760] wcscmp (_String1="St_Vincent", _String2=".") returned 1 [0180.760] wcscmp (_String1="St_Vincent", _String2="..") returned 1 [0180.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f8a8 [0180.760] wcscpy (in: _Dest=0x3f3f8a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.760] wcscat (in: _Dest=0x3f3f8a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.761] wcscat (in: _Dest=0x3f3f8a8, _Source="St_Vincent" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent" [0180.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0180.761] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6823bc80, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swift_Current", cAlternateFileName="SWIFT_~1")) returned 1 [0180.761] wcscmp (_String1="Swift_Current", _String2=".") returned 1 [0180.762] wcscmp (_String1="Swift_Current", _String2="..") returned 1 [0180.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fce0 [0180.762] wcscpy (in: _Dest=0x3f3fce0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.762] wcscat (in: _Dest=0x3f3fce0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.762] wcscat (in: _Dest=0x3f3fce0, _Source="Swift_Current" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current" [0180.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0180.763] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6823bc80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6823bc80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tegucigalpa", cAlternateFileName="TEGUCI~1")) returned 1 [0180.763] wcscmp (_String1="Tegucigalpa", _String2=".") returned 1 [0180.763] wcscmp (_String1="Tegucigalpa", _String2="..") returned 1 [0180.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fec0 [0180.763] wcscpy (in: _Dest=0x3f3fec0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.763] wcscat (in: _Dest=0x3f3fec0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.763] wcscat (in: _Dest=0x3f3fec0, _Source="Tegucigalpa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" [0180.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3fec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0180.764] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thule", cAlternateFileName="")) returned 1 [0180.764] wcscmp (_String1="Thule", _String2=".") returned 1 [0180.764] wcscmp (_String1="Thule", _String2="..") returned 1 [0180.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1ec08 [0180.764] wcscpy (in: _Dest=0x3e1ec08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.764] wcscat (in: _Dest=0x3e1ec08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.764] wcscat (in: _Dest=0x3e1ec08, _Source="Thule" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule" [0180.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ec08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0180.765] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thunder_Bay", cAlternateFileName="THUNDE~1")) returned 1 [0180.766] wcscmp (_String1="Thunder_Bay", _String2=".") returned 1 [0180.766] wcscmp (_String1="Thunder_Bay", _String2="..") returned 1 [0180.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f7b8 [0180.766] wcscpy (in: _Dest=0x3f3f7b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.766] wcscat (in: _Dest=0x3f3f7b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.766] wcscat (in: _Dest=0x3f3f7b8, _Source="Thunder_Bay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" [0180.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0180.767] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tijuana", cAlternateFileName="")) returned 1 [0180.767] wcscmp (_String1="Tijuana", _String2=".") returned 1 [0180.767] wcscmp (_String1="Tijuana", _String2="..") returned 1 [0180.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69c28 [0180.767] wcscpy (in: _Dest=0x3e69c28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.767] wcscat (in: _Dest=0x3e69c28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.767] wcscat (in: _Dest=0x3e69c28, _Source="Tijuana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana" [0180.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0180.768] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="Toronto", cAlternateFileName="")) returned 1 [0180.768] wcscmp (_String1="Toronto", _String2=".") returned 1 [0180.768] wcscmp (_String1="Toronto", _String2="..") returned 1 [0180.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69d08 [0180.768] wcscpy (in: _Dest=0x3e69d08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.769] wcscat (in: _Dest=0x3e69d08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.769] wcscat (in: _Dest=0x3e69d08, _Source="Toronto" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto" [0180.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0180.770] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tortola", cAlternateFileName="")) returned 1 [0180.770] wcscmp (_String1="Tortola", _String2=".") returned 1 [0180.770] wcscmp (_String1="Tortola", _String2="..") returned 1 [0180.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69b48 [0180.770] wcscpy (in: _Dest=0x3e69b48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.770] wcscat (in: _Dest=0x3e69b48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.770] wcscat (in: _Dest=0x3e69b48, _Source="Tortola" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola" [0180.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0180.771] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vancouver", cAlternateFileName="VANCOU~1")) returned 1 [0180.771] wcscmp (_String1="Vancouver", _String2=".") returned 1 [0180.771] wcscmp (_String1="Vancouver", _String2="..") returned 1 [0180.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69de8 [0180.771] wcscpy (in: _Dest=0x3e69de8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.771] wcscat (in: _Dest=0x3e69de8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.771] wcscat (in: _Dest=0x3e69de8, _Source="Vancouver" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver" [0180.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0180.772] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whitehorse", cAlternateFileName="WHITEH~1")) returned 1 [0180.772] wcscmp (_String1="Whitehorse", _String2=".") returned 1 [0180.772] wcscmp (_String1="Whitehorse", _String2="..") returned 1 [0180.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f5d8 [0180.772] wcscpy (in: _Dest=0x3f3f5d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.772] wcscat (in: _Dest=0x3f3f5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.772] wcscat (in: _Dest=0x3f3f5d8, _Source="Whitehorse" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse" [0180.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0180.773] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winnipeg", cAlternateFileName="")) returned 1 [0180.774] wcscmp (_String1="Winnipeg", _String2=".") returned 1 [0180.774] wcscmp (_String1="Winnipeg", _String2="..") returned 1 [0180.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69ec8 [0180.774] wcscpy (in: _Dest=0x3e69ec8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.774] wcscat (in: _Dest=0x3e69ec8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.774] wcscat (in: _Dest=0x3e69ec8, _Source="Winnipeg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg" [0180.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69ec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0180.775] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yakutat", cAlternateFileName="")) returned 1 [0180.775] wcscmp (_String1="Yakutat", _String2=".") returned 1 [0180.775] wcscmp (_String1="Yakutat", _String2="..") returned 1 [0180.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69d78 [0180.775] wcscpy (in: _Dest=0x3e69d78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.775] wcscat (in: _Dest=0x3e69d78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.775] wcscat (in: _Dest=0x3e69d78, _Source="Yakutat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat" [0180.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0180.776] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellowknife", cAlternateFileName="YELLOW~1")) returned 1 [0180.776] wcscmp (_String1="Yellowknife", _String2=".") returned 1 [0180.776] wcscmp (_String1="Yellowknife", _String2="..") returned 1 [0180.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f3f8 [0180.776] wcscpy (in: _Dest=0x3f3f3f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America" [0180.777] wcscat (in: _Dest=0x3f3f3f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\" [0180.777] wcscat (in: _Dest=0x3f3f3f8, _Source="Yellowknife" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife" [0180.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f3f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0180.777] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellowknife", cAlternateFileName="YELLOW~1")) returned 0 [0180.941] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0183.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3dc28) returned 1 [0183.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe63c8) returned 1 [0183.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 Thread: id = 2238 os_tid = 0x500 [0151.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e20190 [0151.024] wcscpy (in: _Dest=0x3e20190, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0151.024] wcscat (in: _Dest=0x3e20190, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0151.024] wcscat (in: _Dest=0x3e20190, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\*" [0151.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c1b0 [0151.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0153.701] wcscmp (_String1=".", _String2=".") returned 0 [0153.701] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.701] wcscmp (_String1="..", _String2=".") returned 1 [0153.701] wcscmp (_String1="..", _String2="..") returned 0 [0153.701] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casey", cAlternateFileName="")) returned 1 [0153.701] wcscmp (_String1="Casey", _String2=".") returned 1 [0153.701] wcscmp (_String1="Casey", _String2="..") returned 1 [0153.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26318 [0153.702] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0153.702] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0153.702] wcscat (in: _Dest=0x7a26318, _Source="Casey" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" [0164.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\casey")) returned 0x20 [0164.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey", dwFileAttributes=0x20) returned 0 [0164.882] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\casey"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.882] GetLastError () returned 0x5 [0164.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Casey", dwFileAttributes=0x20) returned 0 [0164.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 [0164.883] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Davis", cAlternateFileName="")) returned 1 [0164.883] wcscmp (_String1="Davis", _String2=".") returned 1 [0164.883] wcscmp (_String1="Davis", _String2="..") returned 1 [0164.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26318 [0164.883] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0164.883] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0164.883] wcscat (in: _Dest=0x7a26318, _Source="Davis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" [0164.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\davis")) returned 0x20 [0164.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis", dwFileAttributes=0x20) returned 0 [0164.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\davis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.883] GetLastError () returned 0x5 [0164.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Davis", dwFileAttributes=0x20) returned 0 [0164.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 [0164.884] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="DumontDUrville", cAlternateFileName="DUMONT~1")) returned 1 [0164.884] wcscmp (_String1="DumontDUrville", _String2=".") returned 1 [0164.884] wcscmp (_String1="DumontDUrville", _String2="..") returned 1 [0164.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3da63f0 [0164.884] wcscpy (in: _Dest=0x3da63f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0164.884] wcscat (in: _Dest=0x3da63f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0164.884] wcscat (in: _Dest=0x3da63f0, _Source="DumontDUrville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" [0164.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville")) returned 0x20 [0164.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville", dwFileAttributes=0x20) returned 0 [0164.910] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.910] GetLastError () returned 0x5 [0164.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville", dwFileAttributes=0x20) returned 0 [0164.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 [0164.910] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macquarie", cAlternateFileName="MACQUA~1")) returned 1 [0164.910] wcscmp (_String1="Macquarie", _String2=".") returned 1 [0164.910] wcscmp (_String1="Macquarie", _String2="..") returned 1 [0164.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f6c8 [0164.910] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0164.910] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0164.910] wcscat (in: _Dest=0x3f3f6c8, _Source="Macquarie" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" [0164.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\macquarie")) returned 0x20 [0164.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie", dwFileAttributes=0x20) returned 0 [0164.911] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\macquarie"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.911] GetLastError () returned 0x5 [0164.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie", dwFileAttributes=0x20) returned 0 [0164.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0164.911] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mawson", cAlternateFileName="")) returned 1 [0164.911] wcscmp (_String1="Mawson", _String2=".") returned 1 [0164.911] wcscmp (_String1="Mawson", _String2="..") returned 1 [0164.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26318 [0164.912] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0164.912] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0164.912] wcscat (in: _Dest=0x7a26318, _Source="Mawson" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" [0164.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mawson")) returned 0x20 [0164.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson", dwFileAttributes=0x20) returned 0 [0164.912] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mawson"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.912] GetLastError () returned 0x5 [0164.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson", dwFileAttributes=0x20) returned 0 [0164.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 [0164.913] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68261de0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68261de0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68261de0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="McMurdo", cAlternateFileName="")) returned 1 [0164.913] wcscmp (_String1="McMurdo", _String2=".") returned 1 [0164.913] wcscmp (_String1="McMurdo", _String2="..") returned 1 [0164.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f6c8 [0164.913] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0164.913] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0164.913] wcscat (in: _Dest=0x3f3f6c8, _Source="McMurdo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" [0164.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo")) returned 0x20 [0164.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo", dwFileAttributes=0x20) returned 0 [0164.913] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.913] GetLastError () returned 0x5 [0164.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo", dwFileAttributes=0x20) returned 0 [0164.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0164.914] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Palmer", cAlternateFileName="")) returned 1 [0164.914] wcscmp (_String1="Palmer", _String2=".") returned 1 [0164.914] wcscmp (_String1="Palmer", _String2="..") returned 1 [0164.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26318 [0164.914] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0164.914] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0164.914] wcscat (in: _Dest=0x7a26318, _Source="Palmer" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" [0164.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\palmer")) returned 0x20 [0164.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer", dwFileAttributes=0x20) returned 0 [0164.933] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\palmer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.933] GetLastError () returned 0x5 [0164.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer", dwFileAttributes=0x20) returned 0 [0164.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 [0165.209] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rothera", cAlternateFileName="")) returned 1 [0165.209] wcscmp (_String1="Rothera", _String2=".") returned 1 [0165.209] wcscmp (_String1="Rothera", _String2="..") returned 1 [0165.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f6c8 [0165.209] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0165.209] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0165.210] wcscat (in: _Dest=0x3f3f6c8, _Source="Rothera" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" [0169.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f6c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0169.302] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Syowa", cAlternateFileName="")) returned 1 [0169.302] wcscmp (_String1="Syowa", _String2=".") returned 1 [0169.302] wcscmp (_String1="Syowa", _String2="..") returned 1 [0169.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69bb8 [0169.302] wcscpy (in: _Dest=0x3e69bb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.302] wcscat (in: _Dest=0x3e69bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.302] wcscat (in: _Dest=0x3e69bb8, _Source="Syowa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" [0169.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0169.304] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vostok", cAlternateFileName="")) returned 1 [0169.304] wcscmp (_String1="Vostok", _String2=".") returned 1 [0169.304] wcscmp (_String1="Vostok", _String2="..") returned 1 [0169.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26698 [0169.305] wcscpy (in: _Dest=0x7a26698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica" [0169.305] wcscat (in: _Dest=0x7a26698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\" [0169.305] wcscat (in: _Dest=0x7a26698, _Source="Vostok" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" [0169.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0169.306] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vostok", cAlternateFileName="")) returned 0 [0169.307] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0169.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c1b0) returned 1 [0169.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20190) returned 1 [0169.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5c8) returned 1 Thread: id = 2239 os_tid = 0xddc [0151.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6c08 [0151.025] wcscpy (in: _Dest=0x2fe6c08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0151.025] wcscat (in: _Dest=0x2fe6c08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0151.025] wcscat (in: _Dest=0x2fe6c08, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\*" [0151.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3cb50 [0151.025] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0153.702] wcscmp (_String1=".", _String2=".") returned 0 [0153.702] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.122] wcscmp (_String1="..", _String2=".") returned 1 [0155.123] wcscmp (_String1="..", _String2="..") returned 0 [0155.123] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aden", cAlternateFileName="")) returned 1 [0155.123] wcscmp (_String1="Aden", _String2=".") returned 1 [0155.123] wcscmp (_String1="Aden", _String2="..") returned 1 [0155.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe68a8 [0155.123] wcscpy (in: _Dest=0x2fe68a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0155.123] wcscat (in: _Dest=0x2fe68a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0155.123] wcscat (in: _Dest=0x2fe68a8, _Source="Aden" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden" [0156.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe68a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0156.222] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Almaty", cAlternateFileName="")) returned 1 [0156.222] wcscmp (_String1="Almaty", _String2=".") returned 1 [0156.222] wcscmp (_String1="Almaty", _String2="..") returned 1 [0156.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1d9c0 [0156.222] wcscpy (in: _Dest=0x3e1d9c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.222] wcscat (in: _Dest=0x3e1d9c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.222] wcscat (in: _Dest=0x3e1d9c0, _Source="Almaty" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty" [0156.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30 [0156.223] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Amman", cAlternateFileName="")) returned 1 [0156.223] wcscmp (_String1="Amman", _String2=".") returned 1 [0156.223] wcscmp (_String1="Amman", _String2="..") returned 1 [0156.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1da28 [0156.223] wcscpy (in: _Dest=0x3e1da28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.223] wcscat (in: _Dest=0x3e1da28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.223] wcscat (in: _Dest=0x3e1da28, _Source="Amman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman" [0156.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1da28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0156.224] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Anadyr", cAlternateFileName="")) returned 1 [0156.224] wcscmp (_String1="Anadyr", _String2=".") returned 1 [0156.224] wcscmp (_String1="Anadyr", _String2="..") returned 1 [0156.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1ea68 [0156.224] wcscpy (in: _Dest=0x3e1ea68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.225] wcscat (in: _Dest=0x3e1ea68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.225] wcscat (in: _Dest=0x3e1ea68, _Source="Anadyr" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" [0156.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ea68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0156.226] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aqtau", cAlternateFileName="")) returned 1 [0156.226] wcscmp (_String1="Aqtau", _String2=".") returned 1 [0156.226] wcscmp (_String1="Aqtau", _String2="..") returned 1 [0156.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1d958 [0156.226] wcscpy (in: _Dest=0x3e1d958, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.226] wcscat (in: _Dest=0x3e1d958, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.226] wcscat (in: _Dest=0x3e1d958, _Source="Aqtau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" [0156.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0156.227] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aqtobe", cAlternateFileName="")) returned 1 [0156.227] wcscmp (_String1="Aqtobe", _String2=".") returned 1 [0156.227] wcscmp (_String1="Aqtobe", _String2="..") returned 1 [0156.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1d8f0 [0156.228] wcscpy (in: _Dest=0x3e1d8f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.228] wcscat (in: _Dest=0x3e1d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.228] wcscat (in: _Dest=0x3e1d8f0, _Source="Aqtobe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" [0156.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0156.229] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ashgabat", cAlternateFileName="")) returned 1 [0156.229] wcscmp (_String1="Ashgabat", _String2=".") returned 1 [0156.229] wcscmp (_String1="Ashgabat", _String2="..") returned 1 [0156.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f150 [0156.229] wcscpy (in: _Dest=0x3e1f150, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.229] wcscat (in: _Dest=0x3e1f150, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.229] wcscat (in: _Dest=0x3e1f150, _Source="Ashgabat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" [0156.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0156.230] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Baghdad", cAlternateFileName="")) returned 1 [0156.230] wcscmp (_String1="Baghdad", _String2=".") returned 1 [0156.230] wcscmp (_String1="Baghdad", _String2="..") returned 1 [0156.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47720 [0156.230] wcscpy (in: _Dest=0x3d47720, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.230] wcscat (in: _Dest=0x3d47720, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.230] wcscat (in: _Dest=0x3d47720, _Source="Baghdad" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" [0156.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0156.231] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bahrain", cAlternateFileName="")) returned 1 [0156.231] wcscmp (_String1="Bahrain", _String2=".") returned 1 [0156.231] wcscmp (_String1="Bahrain", _String2="..") returned 1 [0156.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d46a88 [0156.232] wcscpy (in: _Dest=0x3d46a88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.232] wcscat (in: _Dest=0x3d46a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.232] wcscat (in: _Dest=0x3d46a88, _Source="Bahrain" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" [0156.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d46a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0156.233] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Baku", cAlternateFileName="")) returned 1 [0156.233] wcscmp (_String1="Baku", _String2=".") returned 1 [0156.233] wcscmp (_String1="Baku", _String2="..") returned 1 [0156.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6908 [0156.233] wcscpy (in: _Dest=0x2fe6908, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.233] wcscat (in: _Dest=0x2fe6908, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.233] wcscat (in: _Dest=0x2fe6908, _Source="Baku" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku" [0156.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0156.234] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bangkok", cAlternateFileName="")) returned 1 [0156.234] wcscmp (_String1="Bangkok", _String2=".") returned 1 [0156.234] wcscmp (_String1="Bangkok", _String2="..") returned 1 [0156.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d472a8 [0156.234] wcscpy (in: _Dest=0x3d472a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.234] wcscat (in: _Dest=0x3d472a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.234] wcscat (in: _Dest=0x3d472a8, _Source="Bangkok" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" [0156.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d472a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0156.235] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beirut", cAlternateFileName="")) returned 1 [0156.235] wcscmp (_String1="Beirut", _String2=".") returned 1 [0156.235] wcscmp (_String1="Beirut", _String2="..") returned 1 [0156.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d47c68 [0156.236] wcscpy (in: _Dest=0x3d47c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.236] wcscat (in: _Dest=0x3d47c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.236] wcscat (in: _Dest=0x3d47c68, _Source="Beirut" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut" [0156.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0156.237] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bishkek", cAlternateFileName="")) returned 1 [0156.237] wcscmp (_String1="Bishkek", _String2=".") returned 1 [0156.237] wcscmp (_String1="Bishkek", _String2="..") returned 1 [0156.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47da0 [0156.237] wcscpy (in: _Dest=0x3d47da0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.237] wcscat (in: _Dest=0x3d47da0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.237] wcscat (in: _Dest=0x3d47da0, _Source="Bishkek" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" [0156.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0156.238] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brunei", cAlternateFileName="")) returned 1 [0156.238] wcscmp (_String1="Brunei", _String2=".") returned 1 [0156.238] wcscmp (_String1="Brunei", _String2="..") returned 1 [0156.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d47e08 [0156.238] wcscpy (in: _Dest=0x3d47e08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.238] wcscat (in: _Dest=0x3d47e08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.238] wcscat (in: _Dest=0x3d47e08, _Source="Brunei" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei" [0156.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0156.239] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Choibalsan", cAlternateFileName="CHOIBA~1")) returned 1 [0156.239] wcscmp (_String1="Choibalsan", _String2=".") returned 1 [0156.239] wcscmp (_String1="Choibalsan", _String2="..") returned 1 [0156.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a260e8 [0156.239] wcscpy (in: _Dest=0x7a260e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.239] wcscat (in: _Dest=0x7a260e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.239] wcscat (in: _Dest=0x7a260e8, _Source="Choibalsan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" [0156.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a260e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0156.241] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chongqing", cAlternateFileName="CHONGQ~1")) returned 1 [0156.241] wcscmp (_String1="Chongqing", _String2=".") returned 1 [0156.241] wcscmp (_String1="Chongqing", _String2="..") returned 1 [0156.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a267e8 [0156.241] wcscpy (in: _Dest=0x7a267e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.241] wcscat (in: _Dest=0x7a267e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.241] wcscat (in: _Dest=0x7a267e8, _Source="Chongqing" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" [0156.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a267e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0156.242] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Colombo", cAlternateFileName="")) returned 1 [0156.242] wcscmp (_String1="Colombo", _String2=".") returned 1 [0156.242] wcscmp (_String1="Colombo", _String2="..") returned 1 [0156.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47e70 [0156.242] wcscpy (in: _Dest=0x3d47e70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.242] wcscat (in: _Dest=0x3d47e70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.242] wcscat (in: _Dest=0x3d47e70, _Source="Colombo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo" [0156.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0156.243] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Damascus", cAlternateFileName="")) returned 1 [0156.243] wcscmp (_String1="Damascus", _String2=".") returned 1 [0156.243] wcscmp (_String1="Damascus", _String2="..") returned 1 [0156.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47ed8 [0156.243] wcscpy (in: _Dest=0x3d47ed8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.243] wcscat (in: _Dest=0x3d47ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.243] wcscat (in: _Dest=0x3d47ed8, _Source="Damascus" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus" [0156.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0156.244] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dhaka", cAlternateFileName="")) returned 1 [0156.244] wcscmp (_String1="Dhaka", _String2=".") returned 1 [0156.244] wcscmp (_String1="Dhaka", _String2="..") returned 1 [0156.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47f40 [0156.245] wcscpy (in: _Dest=0x3d47f40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.245] wcscat (in: _Dest=0x3d47f40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.245] wcscat (in: _Dest=0x3d47f40, _Source="Dhaka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" [0156.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0156.246] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dili", cAlternateFileName="")) returned 1 [0156.246] wcscmp (_String1="Dili", _String2=".") returned 1 [0156.246] wcscmp (_String1="Dili", _String2="..") returned 1 [0156.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe14a8 [0156.246] wcscpy (in: _Dest=0x2fe14a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.246] wcscat (in: _Dest=0x2fe14a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.246] wcscat (in: _Dest=0x2fe14a8, _Source="Dili" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili" [0156.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe14a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0156.247] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dubai", cAlternateFileName="")) returned 1 [0156.247] wcscmp (_String1="Dubai", _String2=".") returned 1 [0156.247] wcscmp (_String1="Dubai", _String2="..") returned 1 [0156.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47858 [0156.247] wcscpy (in: _Dest=0x3d47858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.247] wcscat (in: _Dest=0x3d47858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.247] wcscat (in: _Dest=0x3d47858, _Source="Dubai" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai" [0156.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0156.248] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dushanbe", cAlternateFileName="")) returned 1 [0156.248] wcscmp (_String1="Dushanbe", _String2=".") returned 1 [0156.248] wcscmp (_String1="Dushanbe", _String2="..") returned 1 [0156.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47310 [0156.248] wcscpy (in: _Dest=0x3d47310, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.249] wcscat (in: _Dest=0x3d47310, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.249] wcscat (in: _Dest=0x3d47310, _Source="Dushanbe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" [0156.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0156.249] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gaza", cAlternateFileName="")) returned 1 [0156.250] wcscmp (_String1="Gaza", _String2=".") returned 1 [0156.250] wcscmp (_String1="Gaza", _String2="..") returned 1 [0156.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f08 [0156.250] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.250] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.250] wcscat (in: _Dest=0x2fe6f08, _Source="Gaza" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza" [0156.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0156.251] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Harbin", cAlternateFileName="")) returned 1 [0156.251] wcscmp (_String1="Harbin", _String2=".") returned 1 [0156.251] wcscmp (_String1="Harbin", _String2="..") returned 1 [0156.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d471d8 [0156.251] wcscpy (in: _Dest=0x3d471d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.251] wcscat (in: _Dest=0x3d471d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.251] wcscat (in: _Dest=0x3d471d8, _Source="Harbin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin" [0156.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d471d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0156.253] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hebron", cAlternateFileName="")) returned 1 [0156.253] wcscmp (_String1="Hebron", _String2=".") returned 1 [0156.253] wcscmp (_String1="Hebron", _String2="..") returned 1 [0156.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d47240 [0156.253] wcscpy (in: _Dest=0x3d47240, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.253] wcscat (in: _Dest=0x3d47240, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.253] wcscat (in: _Dest=0x3d47240, _Source="Hebron" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron" [0156.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0156.254] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hong_Kong", cAlternateFileName="HONG_K~1")) returned 1 [0156.254] wcscmp (_String1="Hong_Kong", _String2=".") returned 1 [0156.254] wcscmp (_String1="Hong_Kong", _String2="..") returned 1 [0156.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26628 [0156.254] wcscpy (in: _Dest=0x7a26628, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.254] wcscat (in: _Dest=0x7a26628, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.254] wcscat (in: _Dest=0x7a26628, _Source="Hong_Kong" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" [0156.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0156.255] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hovd", cAlternateFileName="")) returned 1 [0156.255] wcscmp (_String1="Hovd", _String2=".") returned 1 [0156.255] wcscmp (_String1="Hovd", _String2="..") returned 1 [0156.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6fc8 [0156.255] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.255] wcscat (in: _Dest=0x2fe6fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.255] wcscat (in: _Dest=0x2fe6fc8, _Source="Hovd" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd" [0156.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0156.256] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ho_Chi_Minh", cAlternateFileName="HO_CHI~1")) returned 1 [0156.256] wcscmp (_String1="Ho_Chi_Minh", _String2=".") returned 1 [0156.256] wcscmp (_String1="Ho_Chi_Minh", _String2="..") returned 1 [0156.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a268c8 [0156.257] wcscpy (in: _Dest=0x7a268c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.257] wcscat (in: _Dest=0x7a268c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.257] wcscat (in: _Dest=0x7a268c8, _Source="Ho_Chi_Minh" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" [0156.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a268c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0156.258] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Irkutsk", cAlternateFileName="")) returned 1 [0156.258] wcscmp (_String1="Irkutsk", _String2=".") returned 1 [0156.258] wcscmp (_String1="Irkutsk", _String2="..") returned 1 [0156.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47378 [0156.258] wcscpy (in: _Dest=0x3d47378, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.258] wcscat (in: _Dest=0x3d47378, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.258] wcscat (in: _Dest=0x3d47378, _Source="Irkutsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" [0156.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0156.260] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68287f40, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jakarta", cAlternateFileName="")) returned 1 [0156.260] wcscmp (_String1="Jakarta", _String2=".") returned 1 [0156.260] wcscmp (_String1="Jakarta", _String2="..") returned 1 [0156.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d478c0 [0156.260] wcscpy (in: _Dest=0x3d478c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.260] wcscat (in: _Dest=0x3d478c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.260] wcscat (in: _Dest=0x3d478c0, _Source="Jakarta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" [0156.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d478c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704 [0156.946] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68287f40, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68287f40, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jayapura", cAlternateFileName="")) returned 1 [0156.946] wcscmp (_String1="Jayapura", _String2=".") returned 1 [0156.946] wcscmp (_String1="Jayapura", _String2="..") returned 1 [0156.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47b98 [0156.946] wcscpy (in: _Dest=0x3d47b98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0156.946] wcscat (in: _Dest=0x3d47b98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0156.946] wcscat (in: _Dest=0x3d47b98, _Source="Jayapura" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" [0164.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0164.986] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jerusalem", cAlternateFileName="JERUSA~1")) returned 1 [0164.986] wcscmp (_String1="Jerusalem", _String2=".") returned 1 [0164.986] wcscmp (_String1="Jerusalem", _String2="..") returned 1 [0164.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26318 [0164.986] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0164.986] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0164.986] wcscat (in: _Dest=0x7a26318, _Source="Jerusalem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" [0164.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0164.987] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kabul", cAlternateFileName="")) returned 1 [0164.987] wcscmp (_String1="Kabul", _String2=".") returned 1 [0164.987] wcscmp (_String1="Kabul", _String2="..") returned 1 [0164.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee0b98 [0164.987] wcscpy (in: _Dest=0x3ee0b98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0164.987] wcscat (in: _Dest=0x3ee0b98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0164.988] wcscat (in: _Dest=0x3ee0b98, _Source="Kabul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul" [0164.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0164.989] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kamchatka", cAlternateFileName="KAMCHA~1")) returned 1 [0164.989] wcscmp (_String1="Kamchatka", _String2=".") returned 1 [0164.989] wcscmp (_String1="Kamchatka", _String2="..") returned 1 [0164.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26b68 [0164.989] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0164.989] wcscat (in: _Dest=0x7a26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0164.989] wcscat (in: _Dest=0x7a26b68, _Source="Kamchatka" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" [0164.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0164.990] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Karachi", cAlternateFileName="")) returned 1 [0164.990] wcscmp (_String1="Karachi", _String2=".") returned 1 [0164.990] wcscmp (_String1="Karachi", _String2="..") returned 1 [0164.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee1078 [0164.990] wcscpy (in: _Dest=0x3ee1078, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0164.990] wcscat (in: _Dest=0x3ee1078, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0164.990] wcscat (in: _Dest=0x3ee1078, _Source="Karachi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi" [0164.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0164.991] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kashgar", cAlternateFileName="")) returned 1 [0164.991] wcscmp (_String1="Kashgar", _String2=".") returned 1 [0164.991] wcscmp (_String1="Kashgar", _String2="..") returned 1 [0164.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0858 [0164.992] wcscpy (in: _Dest=0x3ee0858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0164.992] wcscat (in: _Dest=0x3ee0858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0164.992] wcscat (in: _Dest=0x3ee0858, _Source="Kashgar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" [0164.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0164.993] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kathmandu", cAlternateFileName="KATHMA~1")) returned 1 [0164.997] wcscmp (_String1="Kathmandu", _String2=".") returned 1 [0164.997] wcscmp (_String1="Kathmandu", _String2="..") returned 1 [0164.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a269a8 [0164.997] wcscpy (in: _Dest=0x7a269a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0164.997] wcscat (in: _Dest=0x7a269a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0164.997] wcscat (in: _Dest=0x7a269a8, _Source="Kathmandu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" [0168.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a269a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0168.395] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x259, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khandyga", cAlternateFileName="")) returned 1 [0168.395] wcscmp (_String1="Khandyga", _String2=".") returned 1 [0168.395] wcscmp (_String1="Khandyga", _String2="..") returned 1 [0168.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0a60 [0168.395] wcscpy (in: _Dest=0x3ee0a60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.395] wcscat (in: _Dest=0x3ee0a60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.395] wcscat (in: _Dest=0x3ee0a60, _Source="Khandyga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" [0168.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0168.396] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kolkata", cAlternateFileName="")) returned 1 [0168.396] wcscmp (_String1="Kolkata", _String2=".") returned 1 [0168.396] wcscmp (_String1="Kolkata", _String2="..") returned 1 [0168.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0928 [0168.396] wcscpy (in: _Dest=0x3ee0928, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.396] wcscat (in: _Dest=0x3ee0928, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.396] wcscat (in: _Dest=0x3ee0928, _Source="Kolkata" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" [0168.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0168.398] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Krasnoyarsk", cAlternateFileName="KRASNO~1")) returned 1 [0168.398] wcscmp (_String1="Krasnoyarsk", _String2=".") returned 1 [0168.398] wcscmp (_String1="Krasnoyarsk", _String2="..") returned 1 [0168.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69fa8 [0168.398] wcscpy (in: _Dest=0x3e69fa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.398] wcscat (in: _Dest=0x3e69fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.398] wcscat (in: _Dest=0x3e69fa8, _Source="Krasnoyarsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" [0168.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0168.399] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuala_Lumpur", cAlternateFileName="KUALA_~1")) returned 1 [0168.399] wcscmp (_String1="Kuala_Lumpur", _String2=".") returned 1 [0168.399] wcscmp (_String1="Kuala_Lumpur", _String2="..") returned 1 [0168.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69c28 [0168.399] wcscpy (in: _Dest=0x3e69c28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.399] wcscat (in: _Dest=0x3e69c28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.399] wcscat (in: _Dest=0x3e69c28, _Source="Kuala_Lumpur" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" [0168.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474 [0168.405] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuching", cAlternateFileName="")) returned 1 [0168.405] wcscmp (_String1="Kuching", _String2=".") returned 1 [0168.405] wcscmp (_String1="Kuching", _String2="..") returned 1 [0168.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0b30 [0168.405] wcscpy (in: _Dest=0x3ee0b30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.405] wcscat (in: _Dest=0x3ee0b30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.405] wcscat (in: _Dest=0x3ee0b30, _Source="Kuching" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching" [0168.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0168.406] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kuwait", cAlternateFileName="")) returned 1 [0168.407] wcscmp (_String1="Kuwait", _String2=".") returned 1 [0168.407] wcscmp (_String1="Kuwait", _String2="..") returned 1 [0168.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0c68 [0168.407] wcscpy (in: _Dest=0x3ee0c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.407] wcscat (in: _Dest=0x3ee0c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.407] wcscat (in: _Dest=0x3ee0c68, _Source="Kuwait" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" [0168.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0168.408] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macau", cAlternateFileName="")) returned 1 [0168.408] wcscmp (_String1="Macau", _String2=".") returned 1 [0168.408] wcscmp (_String1="Macau", _String2="..") returned 1 [0168.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf200 [0168.408] wcscpy (in: _Dest=0x3edf200, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.408] wcscat (in: _Dest=0x3edf200, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.408] wcscat (in: _Dest=0x3edf200, _Source="Macau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau" [0168.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0168.409] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magadan", cAlternateFileName="")) returned 1 [0168.409] wcscmp (_String1="Magadan", _String2=".") returned 1 [0168.409] wcscmp (_String1="Magadan", _String2="..") returned 1 [0168.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee1010 [0168.409] wcscpy (in: _Dest=0x3ee1010, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.409] wcscat (in: _Dest=0x3ee1010, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.409] wcscat (in: _Dest=0x3ee1010, _Source="Magadan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan" [0168.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee1010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0168.411] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Makassar", cAlternateFileName="")) returned 1 [0168.411] wcscmp (_String1="Makassar", _String2=".") returned 1 [0168.411] wcscmp (_String1="Makassar", _String2="..") returned 1 [0168.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee11b0 [0168.411] wcscpy (in: _Dest=0x3ee11b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.411] wcscat (in: _Dest=0x3ee11b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.411] wcscat (in: _Dest=0x3ee11b0, _Source="Makassar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar" [0168.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee11b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0168.412] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manila", cAlternateFileName="")) returned 1 [0168.412] wcscmp (_String1="Manila", _String2=".") returned 1 [0168.412] wcscmp (_String1="Manila", _String2="..") returned 1 [0168.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0ac8 [0168.412] wcscpy (in: _Dest=0x3ee0ac8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.412] wcscat (in: _Dest=0x3ee0ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.412] wcscat (in: _Dest=0x3ee0ac8, _Source="Manila" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila" [0168.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0168.414] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Muscat", cAlternateFileName="")) returned 1 [0168.414] wcscmp (_String1="Muscat", _String2=".") returned 1 [0168.414] wcscmp (_String1="Muscat", _String2="..") returned 1 [0168.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3edf4d8 [0168.414] wcscpy (in: _Dest=0x3edf4d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.414] wcscat (in: _Dest=0x3edf4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.414] wcscat (in: _Dest=0x3edf4d8, _Source="Muscat" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat" [0168.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0168.415] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nicosia", cAlternateFileName="")) returned 1 [0168.415] wcscmp (_String1="Nicosia", _String2=".") returned 1 [0168.415] wcscmp (_String1="Nicosia", _String2="..") returned 1 [0168.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee1218 [0168.416] wcscpy (in: _Dest=0x3ee1218, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.416] wcscat (in: _Dest=0x3ee1218, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.416] wcscat (in: _Dest=0x3ee1218, _Source="Nicosia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" [0168.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee1218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0168.417] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Novokuznetsk", cAlternateFileName="NOVOKU~1")) returned 1 [0168.417] wcscmp (_String1="Novokuznetsk", _String2=".") returned 1 [0168.417] wcscmp (_String1="Novokuznetsk", _String2="..") returned 1 [0168.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x3e69d08 [0168.417] wcscpy (in: _Dest=0x3e69d08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.417] wcscat (in: _Dest=0x3e69d08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.417] wcscat (in: _Dest=0x3e69d08, _Source="Novokuznetsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" [0168.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0168.418] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Novosibirsk", cAlternateFileName="NOVOSI~1")) returned 1 [0168.418] wcscmp (_String1="Novosibirsk", _String2=".") returned 1 [0168.418] wcscmp (_String1="Novosibirsk", _String2="..") returned 1 [0168.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69b48 [0168.418] wcscpy (in: _Dest=0x3e69b48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.418] wcscat (in: _Dest=0x3e69b48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.418] wcscat (in: _Dest=0x3e69b48, _Source="Novosibirsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" [0168.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4 [0168.420] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Omsk", cAlternateFileName="")) returned 1 [0168.420] wcscmp (_String1="Omsk", _String2=".") returned 1 [0168.420] wcscmp (_String1="Omsk", _String2="..") returned 1 [0168.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe1328 [0168.420] wcscpy (in: _Dest=0x2fe1328, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.420] wcscat (in: _Dest=0x2fe1328, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.420] wcscat (in: _Dest=0x2fe1328, _Source="Omsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk" [0168.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe1328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0168.421] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oral", cAlternateFileName="")) returned 1 [0168.421] wcscmp (_String1="Oral", _String2=".") returned 1 [0168.421] wcscmp (_String1="Oral", _String2="..") returned 1 [0168.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a28 [0168.421] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.421] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.421] wcscat (in: _Dest=0x2fe6a28, _Source="Oral" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral" [0168.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0168.423] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phnom_Penh", cAlternateFileName="PHNOM_~1")) returned 1 [0168.423] wcscmp (_String1="Phnom_Penh", _String2=".") returned 1 [0168.423] wcscmp (_String1="Phnom_Penh", _String2="..") returned 1 [0168.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x3e69de8 [0168.423] wcscpy (in: _Dest=0x3e69de8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.423] wcscat (in: _Dest=0x3e69de8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.423] wcscat (in: _Dest=0x3e69de8, _Source="Phnom_Penh" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" [0168.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0168.424] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pontianak", cAlternateFileName="PONTIA~1")) returned 1 [0168.424] wcscmp (_String1="Pontianak", _String2=".") returned 1 [0168.424] wcscmp (_String1="Pontianak", _String2="..") returned 1 [0168.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69ec8 [0168.424] wcscpy (in: _Dest=0x3e69ec8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.424] wcscat (in: _Dest=0x3e69ec8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.424] wcscat (in: _Dest=0x3e69ec8, _Source="Pontianak" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" [0168.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69ec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0168.429] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pyongyang", cAlternateFileName="PYONGY~1")) returned 1 [0168.429] wcscmp (_String1="Pyongyang", _String2=".") returned 1 [0168.429] wcscmp (_String1="Pyongyang", _String2="..") returned 1 [0168.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69ad8 [0168.429] wcscpy (in: _Dest=0x3e69ad8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.429] wcscat (in: _Dest=0x3e69ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.429] wcscat (in: _Dest=0x3e69ad8, _Source="Pyongyang" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" [0168.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0168.430] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qatar", cAlternateFileName="")) returned 1 [0168.430] wcscmp (_String1="Qatar", _String2=".") returned 1 [0168.430] wcscmp (_String1="Qatar", _String2="..") returned 1 [0168.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf2d0 [0168.430] wcscpy (in: _Dest=0x3edf2d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.430] wcscat (in: _Dest=0x3edf2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.430] wcscat (in: _Dest=0x3edf2d0, _Source="Qatar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar" [0168.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0168.432] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qyzylorda", cAlternateFileName="QYZYLO~1")) returned 1 [0168.432] wcscmp (_String1="Qyzylorda", _String2=".") returned 1 [0168.432] wcscmp (_String1="Qyzylorda", _String2="..") returned 1 [0168.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69e58 [0168.432] wcscpy (in: _Dest=0x3e69e58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.432] wcscat (in: _Dest=0x3e69e58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.432] wcscat (in: _Dest=0x3e69e58, _Source="Qyzylorda" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" [0168.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0168.433] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rangoon", cAlternateFileName="")) returned 1 [0168.433] wcscmp (_String1="Rangoon", _String2=".") returned 1 [0168.433] wcscmp (_String1="Rangoon", _String2="..") returned 1 [0168.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee09f8 [0168.433] wcscpy (in: _Dest=0x3ee09f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0168.433] wcscat (in: _Dest=0x3ee09f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0168.433] wcscat (in: _Dest=0x3ee09f8, _Source="Rangoon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" [0168.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee09f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0169.348] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh", cAlternateFileName="")) returned 1 [0169.348] wcscmp (_String1="Riyadh", _String2=".") returned 1 [0169.348] wcscmp (_String1="Riyadh", _String2="..") returned 1 [0169.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1f5c8 [0169.348] wcscpy (in: _Dest=0x3e1f5c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0169.348] wcscat (in: _Dest=0x3e1f5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0169.348] wcscat (in: _Dest=0x3e1f5c8, _Source="Riyadh" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" [0172.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0172.759] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x12d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh87", cAlternateFileName="")) returned 1 [0172.759] wcscmp (_String1="Riyadh87", _String2=".") returned 1 [0172.759] wcscmp (_String1="Riyadh87", _String2="..") returned 1 [0172.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee1078 [0172.759] wcscpy (in: _Dest=0x3ee1078, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.759] wcscat (in: _Dest=0x3ee1078, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.759] wcscat (in: _Dest=0x3ee1078, _Source="Riyadh87" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" [0172.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0172.760] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x127d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh88", cAlternateFileName="")) returned 1 [0172.760] wcscmp (_String1="Riyadh88", _String2=".") returned 1 [0172.761] wcscmp (_String1="Riyadh88", _String2="..") returned 1 [0172.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf9b8 [0172.761] wcscpy (in: _Dest=0x3edf9b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.761] wcscat (in: _Dest=0x3edf9b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.761] wcscat (in: _Dest=0x3edf9b8, _Source="Riyadh88" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" [0172.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0172.762] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x129d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riyadh89", cAlternateFileName="")) returned 1 [0172.762] wcscmp (_String1="Riyadh89", _String2=".") returned 1 [0172.762] wcscmp (_String1="Riyadh89", _String2="..") returned 1 [0172.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b98 [0172.762] wcscpy (in: _Dest=0x3ee0b98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.762] wcscat (in: _Dest=0x3ee0b98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.762] wcscat (in: _Dest=0x3ee0b98, _Source="Riyadh89" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" [0172.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0172.763] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sakhalin", cAlternateFileName="")) returned 1 [0172.763] wcscmp (_String1="Sakhalin", _String2=".") returned 1 [0172.763] wcscmp (_String1="Sakhalin", _String2="..") returned 1 [0172.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0f40 [0172.763] wcscpy (in: _Dest=0x3ee0f40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.763] wcscat (in: _Dest=0x3ee0f40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.763] wcscat (in: _Dest=0x3ee0f40, _Source="Sakhalin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" [0172.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0172.764] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Samarkand", cAlternateFileName="SAMARK~1")) returned 1 [0172.764] wcscmp (_String1="Samarkand", _String2=".") returned 1 [0172.765] wcscmp (_String1="Samarkand", _String2="..") returned 1 [0172.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69ad8 [0172.765] wcscpy (in: _Dest=0x3e69ad8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.765] wcscat (in: _Dest=0x3e69ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.765] wcscat (in: _Dest=0x3e69ad8, _Source="Samarkand" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" [0172.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0172.766] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682ae0a0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682ae0a0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682ae0a0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seoul", cAlternateFileName="")) returned 1 [0172.766] wcscmp (_String1="Seoul", _String2=".") returned 1 [0172.766] wcscmp (_String1="Seoul", _String2="..") returned 1 [0172.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3ee08c0 [0172.766] wcscpy (in: _Dest=0x3ee08c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.766] wcscat (in: _Dest=0x3ee08c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.766] wcscat (in: _Dest=0x3ee08c0, _Source="Seoul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul" [0172.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee08c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0172.767] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shanghai", cAlternateFileName="")) returned 1 [0172.767] wcscmp (_String1="Shanghai", _String2=".") returned 1 [0172.767] wcscmp (_String1="Shanghai", _String2="..") returned 1 [0172.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf4d8 [0172.767] wcscpy (in: _Dest=0x3edf4d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.767] wcscat (in: _Dest=0x3edf4d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.767] wcscat (in: _Dest=0x3edf4d8, _Source="Shanghai" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" [0172.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0172.768] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Singapore", cAlternateFileName="SINGAP~1")) returned 1 [0172.769] wcscmp (_String1="Singapore", _String2=".") returned 1 [0172.769] wcscmp (_String1="Singapore", _String2="..") returned 1 [0172.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69d78 [0172.769] wcscpy (in: _Dest=0x3e69d78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.769] wcscat (in: _Dest=0x3e69d78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.769] wcscat (in: _Dest=0x3e69d78, _Source="Singapore" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore" [0172.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0172.770] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Taipei", cAlternateFileName="")) returned 1 [0172.770] wcscmp (_String1="Taipei", _String2=".") returned 1 [0172.770] wcscmp (_String1="Taipei", _String2="..") returned 1 [0172.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0858 [0172.770] wcscpy (in: _Dest=0x3ee0858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.770] wcscat (in: _Dest=0x3ee0858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.770] wcscat (in: _Dest=0x3ee0858, _Source="Taipei" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei" [0172.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0172.771] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tashkent", cAlternateFileName="")) returned 1 [0172.771] wcscmp (_String1="Tashkent", _String2=".") returned 1 [0172.771] wcscmp (_String1="Tashkent", _String2="..") returned 1 [0172.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf2d0 [0172.771] wcscpy (in: _Dest=0x3edf2d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.771] wcscat (in: _Dest=0x3edf2d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.771] wcscat (in: _Dest=0x3edf2d0, _Source="Tashkent" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" [0172.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0172.772] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tbilisi", cAlternateFileName="")) returned 1 [0172.772] wcscmp (_String1="Tbilisi", _String2=".") returned 1 [0172.772] wcscmp (_String1="Tbilisi", _String2="..") returned 1 [0172.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0ac8 [0172.772] wcscpy (in: _Dest=0x3ee0ac8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.773] wcscat (in: _Dest=0x3ee0ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.773] wcscat (in: _Dest=0x3ee0ac8, _Source="Tbilisi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" [0172.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0172.774] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tehran", cAlternateFileName="")) returned 1 [0172.774] wcscmp (_String1="Tehran", _String2=".") returned 1 [0172.774] wcscmp (_String1="Tehran", _String2="..") returned 1 [0172.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee11b0 [0172.774] wcscpy (in: _Dest=0x3ee11b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.774] wcscat (in: _Dest=0x3ee11b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.774] wcscat (in: _Dest=0x3ee11b0, _Source="Tehran" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran" [0172.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee11b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0172.775] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thimphu", cAlternateFileName="")) returned 1 [0172.775] wcscmp (_String1="Thimphu", _String2=".") returned 1 [0172.775] wcscmp (_String1="Thimphu", _String2="..") returned 1 [0172.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee1010 [0172.775] wcscpy (in: _Dest=0x3ee1010, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.775] wcscat (in: _Dest=0x3ee1010, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.775] wcscat (in: _Dest=0x3ee1010, _Source="Thimphu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" [0172.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee1010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0172.776] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tokyo", cAlternateFileName="")) returned 1 [0172.777] wcscmp (_String1="Tokyo", _String2=".") returned 1 [0172.777] wcscmp (_String1="Tokyo", _String2="..") returned 1 [0172.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf200 [0172.777] wcscpy (in: _Dest=0x3edf200, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.777] wcscat (in: _Dest=0x3edf200, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.777] wcscat (in: _Dest=0x3edf200, _Source="Tokyo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" [0172.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0172.778] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ulaanbaatar", cAlternateFileName="ULAANB~1")) returned 1 [0172.778] wcscmp (_String1="Ulaanbaatar", _String2=".") returned 1 [0172.778] wcscmp (_String1="Ulaanbaatar", _String2="..") returned 1 [0172.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69ec8 [0172.778] wcscpy (in: _Dest=0x3e69ec8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.778] wcscat (in: _Dest=0x3e69ec8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.778] wcscat (in: _Dest=0x3e69ec8, _Source="Ulaanbaatar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" [0172.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69ec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0172.780] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urumqi", cAlternateFileName="")) returned 1 [0172.780] wcscmp (_String1="Urumqi", _String2=".") returned 1 [0172.780] wcscmp (_String1="Urumqi", _String2="..") returned 1 [0172.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3ee0c68 [0172.780] wcscpy (in: _Dest=0x3ee0c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.780] wcscat (in: _Dest=0x3ee0c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.780] wcscat (in: _Dest=0x3ee0c68, _Source="Urumqi" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" [0172.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0172.781] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ust-Nera", cAlternateFileName="")) returned 1 [0172.781] wcscmp (_String1="Ust-Nera", _String2=".") returned 1 [0172.781] wcscmp (_String1="Ust-Nera", _String2="..") returned 1 [0172.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b30 [0172.781] wcscpy (in: _Dest=0x3ee0b30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.781] wcscat (in: _Dest=0x3ee0b30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.781] wcscat (in: _Dest=0x3ee0b30, _Source="Ust-Nera" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" [0172.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0172.782] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vientiane", cAlternateFileName="VIENTI~1")) returned 1 [0172.782] wcscmp (_String1="Vientiane", _String2=".") returned 1 [0172.782] wcscmp (_String1="Vientiane", _String2="..") returned 1 [0172.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69de8 [0172.782] wcscpy (in: _Dest=0x3e69de8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.782] wcscat (in: _Dest=0x3e69de8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.783] wcscat (in: _Dest=0x3e69de8, _Source="Vientiane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" [0172.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0172.783] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vladivostok", cAlternateFileName="VLADIV~1")) returned 1 [0172.783] wcscmp (_String1="Vladivostok", _String2=".") returned 1 [0172.784] wcscmp (_String1="Vladivostok", _String2="..") returned 1 [0172.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69c28 [0172.784] wcscpy (in: _Dest=0x3e69c28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.784] wcscat (in: _Dest=0x3e69c28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.784] wcscat (in: _Dest=0x3e69c28, _Source="Vladivostok" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" [0172.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0172.785] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yakutsk", cAlternateFileName="")) returned 1 [0172.785] wcscmp (_String1="Yakutsk", _String2=".") returned 1 [0172.785] wcscmp (_String1="Yakutsk", _String2="..") returned 1 [0172.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0928 [0172.785] wcscpy (in: _Dest=0x3ee0928, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.785] wcscat (in: _Dest=0x3ee0928, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.785] wcscat (in: _Dest=0x3ee0928, _Source="Yakutsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" [0172.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0172.786] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yekaterinburg", cAlternateFileName="YEKATE~1")) returned 1 [0172.786] wcscmp (_String1="Yekaterinburg", _String2=".") returned 1 [0172.786] wcscmp (_String1="Yekaterinburg", _String2="..") returned 1 [0172.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e1c0 [0172.786] wcscpy (in: _Dest=0x3f3e1c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.786] wcscat (in: _Dest=0x3f3e1c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.786] wcscat (in: _Dest=0x3f3e1c0, _Source="Yekaterinburg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" [0172.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0172.787] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yerevan", cAlternateFileName="")) returned 1 [0172.787] wcscmp (_String1="Yerevan", _String2=".") returned 1 [0172.787] wcscmp (_String1="Yerevan", _String2="..") returned 1 [0172.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0a60 [0172.787] wcscpy (in: _Dest=0x3ee0a60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia" [0172.787] wcscat (in: _Dest=0x3ee0a60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\" [0172.787] wcscat (in: _Dest=0x3ee0a60, _Source="Yerevan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" [0172.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0172.788] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yerevan", cAlternateFileName="")) returned 0 [0172.789] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0172.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3cb50) returned 1 [0172.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c08) returned 1 [0172.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d488f8) returned 1 Thread: id = 2240 os_tid = 0xe1c [0151.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1e0a8 [0151.026] wcscpy (in: _Dest=0x3e1e0a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0151.026] wcscat (in: _Dest=0x3e1e0a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0151.026] wcscat (in: _Dest=0x3e1e0a8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\*" [0151.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d288 [0151.026] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0153.703] wcscmp (_String1=".", _String2=".") returned 0 [0153.703] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.703] wcscmp (_String1="..", _String2=".") returned 1 [0153.703] wcscmp (_String1="..", _String2="..") returned 0 [0153.703] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Azores", cAlternateFileName="")) returned 1 [0153.703] wcscmp (_String1="Azores", _String2=".") returned 1 [0153.703] wcscmp (_String1="Azores", _String2="..") returned 1 [0153.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26b68 [0153.703] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0153.703] wcscat (in: _Dest=0x7a26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0153.703] wcscat (in: _Dest=0x7a26b68, _Source="Azores" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" [0164.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\azores")) returned 0x20 [0164.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores", dwFileAttributes=0x20) returned 0 [0164.903] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\azores"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.903] GetLastError () returned 0x5 [0164.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Azores", dwFileAttributes=0x20) returned 0 [0164.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 [0164.903] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bermuda", cAlternateFileName="")) returned 1 [0164.903] wcscmp (_String1="Bermuda", _String2=".") returned 1 [0164.903] wcscmp (_String1="Bermuda", _String2="..") returned 1 [0164.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26b68 [0164.904] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0164.904] wcscat (in: _Dest=0x7a26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0164.904] wcscat (in: _Dest=0x7a26b68, _Source="Bermuda" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" [0164.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\bermuda")) returned 0x20 [0164.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda", dwFileAttributes=0x20) returned 0 [0164.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\bermuda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.904] GetLastError () returned 0x5 [0164.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda", dwFileAttributes=0x20) returned 0 [0164.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 [0164.905] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="Canary", cAlternateFileName="")) returned 1 [0164.905] wcscmp (_String1="Canary", _String2=".") returned 1 [0164.905] wcscmp (_String1="Canary", _String2="..") returned 1 [0164.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26b68 [0164.905] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0164.905] wcscat (in: _Dest=0x7a26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0164.905] wcscat (in: _Dest=0x7a26b68, _Source="Canary" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" [0164.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\canary")) returned 0x20 [0164.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary", dwFileAttributes=0x20) returned 0 [0164.906] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\canary"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.906] GetLastError () returned 0x5 [0164.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Canary", dwFileAttributes=0x20) returned 0 [0164.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 [0164.907] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cape_Verde", cAlternateFileName="CAPE_V~1")) returned 1 [0164.907] wcscmp (_String1="Cape_Verde", _String2=".") returned 1 [0164.907] wcscmp (_String1="Cape_Verde", _String2="..") returned 1 [0164.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f6c8 [0164.907] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0164.907] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0164.907] wcscat (in: _Dest=0x3f3f6c8, _Source="Cape_Verde" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" [0164.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\cape_verde")) returned 0x20 [0164.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde", dwFileAttributes=0x20) returned 0 [0164.908] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\cape_verde"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.908] GetLastError () returned 0x5 [0164.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde", dwFileAttributes=0x20) returned 0 [0164.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0164.908] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faroe", cAlternateFileName="")) returned 1 [0164.908] wcscmp (_String1="Faroe", _String2=".") returned 1 [0164.908] wcscmp (_String1="Faroe", _String2="..") returned 1 [0164.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26b68 [0164.908] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0164.908] wcscat (in: _Dest=0x7a26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0164.908] wcscat (in: _Dest=0x7a26b68, _Source="Faroe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" [0164.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\faroe")) returned 0x20 [0164.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe", dwFileAttributes=0x20) returned 0 [0164.932] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\faroe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.932] GetLastError () returned 0x5 [0164.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe", dwFileAttributes=0x20) returned 0 [0164.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 [0165.208] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Madeira", cAlternateFileName="")) returned 1 [0165.208] wcscmp (_String1="Madeira", _String2=".") returned 1 [0165.208] wcscmp (_String1="Madeira", _String2="..") returned 1 [0165.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26e78 [0165.208] wcscpy (in: _Dest=0x7a26e78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0165.208] wcscat (in: _Dest=0x7a26e78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0165.209] wcscat (in: _Dest=0x7a26e78, _Source="Madeira" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" [0166.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0166.225] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reykjavik", cAlternateFileName="REYKJA~1")) returned 1 [0166.225] wcscmp (_String1="Reykjavik", _String2=".") returned 1 [0166.225] wcscmp (_String1="Reykjavik", _String2="..") returned 1 [0166.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015058 [0166.225] wcscpy (in: _Dest=0x3015058, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0166.225] wcscat (in: _Dest=0x3015058, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0166.225] wcscat (in: _Dest=0x3015058, _Source="Reykjavik" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" [0166.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3015058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0166.226] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="South_Georgia", cAlternateFileName="SOUTH_~1")) returned 1 [0166.226] wcscmp (_String1="South_Georgia", _String2=".") returned 1 [0166.227] wcscmp (_String1="South_Georgia", _String2="..") returned 1 [0166.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a218 [0166.227] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0166.227] wcscat (in: _Dest=0x3e1a218, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0166.227] wcscat (in: _Dest=0x3e1a218, _Source="South_Georgia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" [0166.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0166.228] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stanley", cAlternateFileName="")) returned 1 [0166.228] wcscmp (_String1="Stanley", _String2=".") returned 1 [0166.228] wcscmp (_String1="Stanley", _String2="..") returned 1 [0166.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26b68 [0166.228] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0166.228] wcscat (in: _Dest=0x7a26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0166.228] wcscat (in: _Dest=0x7a26b68, _Source="Stanley" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" [0166.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0166.229] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Helena", cAlternateFileName="ST_HEL~1")) returned 1 [0166.229] wcscmp (_String1="St_Helena", _String2=".") returned 1 [0166.229] wcscmp (_String1="St_Helena", _String2="..") returned 1 [0166.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015418 [0166.229] wcscpy (in: _Dest=0x3015418, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic" [0166.229] wcscat (in: _Dest=0x3015418, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\" [0166.229] wcscat (in: _Dest=0x3015418, _Source="St_Helena" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" [0166.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3015418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0166.230] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="St_Helena", cAlternateFileName="ST_HEL~1")) returned 0 [0166.230] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0166.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d288) returned 1 [0166.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e0a8) returned 1 [0166.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1508) returned 1 Thread: id = 2241 os_tid = 0xe20 [0151.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1ec08 [0151.029] wcscpy (in: _Dest=0x3e1ec08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0151.029] wcscat (in: _Dest=0x3e1ec08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0151.029] wcscat (in: _Dest=0x3e1ec08, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\*" [0151.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d4f0 [0151.030] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0153.704] wcscmp (_String1=".", _String2=".") returned 0 [0153.704] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.704] wcscmp (_String1="..", _String2=".") returned 1 [0153.704] wcscmp (_String1="..", _String2="..") returned 0 [0153.704] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adelaide", cAlternateFileName="")) returned 1 [0153.704] wcscmp (_String1="Adelaide", _String2=".") returned 1 [0153.704] wcscmp (_String1="Adelaide", _String2="..") returned 1 [0153.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa10 [0153.704] wcscpy (in: _Dest=0x3f3fa10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0153.704] wcscat (in: _Dest=0x3f3fa10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0153.704] wcscat (in: _Dest=0x3f3fa10, _Source="Adelaide" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" [0164.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\adelaide")) returned 0x20 [0164.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide", dwFileAttributes=0x20) returned 0 [0164.916] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\adelaide"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.916] GetLastError () returned 0x5 [0164.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Adelaide", dwFileAttributes=0x20) returned 0 [0164.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0164.916] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brisbane", cAlternateFileName="")) returned 1 [0164.916] wcscmp (_String1="Brisbane", _String2=".") returned 1 [0164.917] wcscmp (_String1="Brisbane", _String2="..") returned 1 [0164.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa10 [0164.917] wcscpy (in: _Dest=0x3f3fa10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0164.917] wcscat (in: _Dest=0x3f3fa10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0164.917] wcscat (in: _Dest=0x3f3fa10, _Source="Brisbane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" [0164.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\brisbane")) returned 0x20 [0164.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane", dwFileAttributes=0x20) returned 0 [0164.936] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\brisbane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.936] GetLastError () returned 0x5 [0164.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Brisbane", dwFileAttributes=0x20) returned 0 [0164.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0165.211] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Broken_Hill", cAlternateFileName="BROKEN~1")) returned 1 [0165.211] wcscmp (_String1="Broken_Hill", _String2=".") returned 1 [0165.211] wcscmp (_String1="Broken_Hill", _String2="..") returned 1 [0165.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f8a8 [0165.211] wcscpy (in: _Dest=0x3f3f8a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0165.211] wcscat (in: _Dest=0x3f3f8a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0165.211] wcscat (in: _Dest=0x3f3f8a8, _Source="Broken_Hill" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" [0172.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0172.875] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currie", cAlternateFileName="")) returned 1 [0172.875] wcscmp (_String1="Currie", _String2=".") returned 1 [0172.875] wcscmp (_String1="Currie", _String2="..") returned 1 [0172.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x3e69bb8 [0172.875] wcscpy (in: _Dest=0x3e69bb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0172.876] wcscat (in: _Dest=0x3e69bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0172.876] wcscat (in: _Dest=0x3e69bb8, _Source="Currie" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie" [0172.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e69bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0172.877] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Darwin", cAlternateFileName="")) returned 1 [0172.877] wcscmp (_String1="Darwin", _String2=".") returned 1 [0172.877] wcscmp (_String1="Darwin", _String2="..") returned 1 [0172.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23060 [0172.877] wcscpy (in: _Dest=0x7a23060, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0172.877] wcscat (in: _Dest=0x7a23060, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0172.877] wcscat (in: _Dest=0x7a23060, _Source="Darwin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin" [0172.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0172.878] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682d4200, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eucla", cAlternateFileName="")) returned 1 [0172.878] wcscmp (_String1="Eucla", _String2=".") returned 1 [0172.878] wcscmp (_String1="Eucla", _String2="..") returned 1 [0172.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23a70 [0172.878] wcscpy (in: _Dest=0x7a23a70, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0172.879] wcscat (in: _Dest=0x7a23a70, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0172.879] wcscat (in: _Dest=0x7a23a70, _Source="Eucla" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla" [0172.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0172.880] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682d4200, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682d4200, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hobart", cAlternateFileName="")) returned 1 [0172.880] wcscmp (_String1="Hobart", _String2=".") returned 1 [0172.880] wcscmp (_String1="Hobart", _String2="..") returned 1 [0172.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23370 [0172.880] wcscpy (in: _Dest=0x7a23370, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0172.880] wcscat (in: _Dest=0x7a23370, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0172.880] wcscat (in: _Dest=0x7a23370, _Source="Hobart" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart" [0172.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0172.881] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lindeman", cAlternateFileName="")) returned 1 [0172.881] wcscmp (_String1="Lindeman", _String2=".") returned 1 [0172.881] wcscmp (_String1="Lindeman", _String2="..") returned 1 [0172.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e0d0 [0172.881] wcscpy (in: _Dest=0x3f3e0d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0172.881] wcscat (in: _Dest=0x3f3e0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0172.881] wcscat (in: _Dest=0x3f3e0d0, _Source="Lindeman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" [0172.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0172.883] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lord_Howe", cAlternateFileName="LORD_H~1")) returned 1 [0172.883] wcscmp (_String1="Lord_Howe", _String2=".") returned 1 [0172.883] wcscmp (_String1="Lord_Howe", _String2="..") returned 1 [0172.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e760 [0172.883] wcscpy (in: _Dest=0x3f3e760, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0172.883] wcscat (in: _Dest=0x3f3e760, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0172.883] wcscat (in: _Dest=0x3f3e760, _Source="Lord_Howe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" [0172.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0172.884] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Melbourne", cAlternateFileName="MELBOU~1")) returned 1 [0172.884] wcscmp (_String1="Melbourne", _String2=".") returned 1 [0172.884] wcscmp (_String1="Melbourne", _String2="..") returned 1 [0172.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3dd88 [0172.884] wcscpy (in: _Dest=0x3f3dd88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0172.884] wcscat (in: _Dest=0x3f3dd88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0172.884] wcscat (in: _Dest=0x3f3dd88, _Source="Melbourne" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" [0172.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0172.885] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perth", cAlternateFileName="")) returned 1 [0172.885] wcscmp (_String1="Perth", _String2=".") returned 1 [0172.885] wcscmp (_String1="Perth", _String2="..") returned 1 [0172.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23a00 [0172.885] wcscpy (in: _Dest=0x7a23a00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0172.886] wcscat (in: _Dest=0x7a23a00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0172.886] wcscat (in: _Dest=0x7a23a00, _Source="Perth" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth" [0172.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0172.890] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sydney", cAlternateFileName="")) returned 1 [0172.890] wcscmp (_String1="Sydney", _String2=".") returned 1 [0172.890] wcscmp (_String1="Sydney", _String2="..") returned 1 [0172.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23df0 [0172.890] wcscpy (in: _Dest=0x7a23df0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia" [0172.890] wcscat (in: _Dest=0x7a23df0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\" [0172.890] wcscat (in: _Dest=0x7a23df0, _Source="Sydney" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney" [0172.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0172.894] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sydney", cAlternateFileName="")) returned 0 [0172.894] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0172.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d4f0) returned 1 [0172.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec08) returned 1 [0172.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6788) returned 1 Thread: id = 2242 os_tid = 0xe34 [0151.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cet")) returned 0x20 [0153.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET", dwFileAttributes=0x20) returned 0 [0153.130] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.130] GetLastError () returned 0x5 [0153.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CET", dwFileAttributes=0x20) returned 0 [0153.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48a58) returned 1 Thread: id = 2243 os_tid = 0xe30 [0151.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cst6cdt")) returned 0x20 [0153.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT", dwFileAttributes=0x20) returned 0 [0153.132] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\cst6cdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.133] GetLastError () returned 0x5 [0153.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\CST6CDT", dwFileAttributes=0x20) returned 0 [0153.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3b48) returned 1 Thread: id = 2244 os_tid = 0xe2c [0151.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\eet")) returned 0x20 [0153.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET", dwFileAttributes=0x20) returned 0 [0153.134] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\eet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.135] GetLastError () returned 0x5 [0153.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EET", dwFileAttributes=0x20) returned 0 [0153.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48ab0) returned 1 Thread: id = 2245 os_tid = 0xe24 [0151.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est")) returned 0x20 [0153.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST", dwFileAttributes=0x20) returned 0 [0153.137] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.137] GetLastError () returned 0x5 [0153.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST", dwFileAttributes=0x20) returned 0 [0153.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48c68) returned 1 Thread: id = 2246 os_tid = 0xe18 [0151.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est5edt")) returned 0x20 [0153.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT", dwFileAttributes=0x20) returned 0 [0153.139] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\est5edt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.139] GetLastError () returned 0x5 [0153.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\EST5EDT", dwFileAttributes=0x20) returned 0 [0153.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7268) returned 1 Thread: id = 2247 os_tid = 0xe38 [0151.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a396e0 [0151.032] wcscpy (in: _Dest=0x7a396e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0151.032] wcscat (in: _Dest=0x7a396e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0151.032] wcscat (in: _Dest=0x7a396e0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\*" [0151.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea3970 [0151.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0153.705] wcscmp (_String1=".", _String2=".") returned 0 [0153.705] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.705] wcscmp (_String1="..", _String2=".") returned 1 [0153.705] wcscmp (_String1="..", _String2="..") returned 0 [0153.705] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT", cAlternateFileName="")) returned 1 [0153.705] wcscmp (_String1="GMT", _String2=".") returned 1 [0153.705] wcscmp (_String1="GMT", _String2="..") returned 1 [0153.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6fc8 [0153.705] wcscpy (in: _Dest=0x2fe6fc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0153.705] wcscat (in: _Dest=0x2fe6fc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0153.705] wcscat (in: _Dest=0x2fe6fc8, _Source="GMT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT" [0155.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0155.420] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+1", cAlternateFileName="GMT_1~1")) returned 1 [0155.420] wcscmp (_String1="GMT+1", _String2=".") returned 1 [0155.420] wcscmp (_String1="GMT+1", _String2="..") returned 1 [0155.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f08 [0155.420] wcscpy (in: _Dest=0x2fe6f08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.420] wcscat (in: _Dest=0x2fe6f08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.420] wcscat (in: _Dest=0x2fe6f08, _Source="GMT+1" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" [0155.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0155.422] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+10", cAlternateFileName="GMT_10~1")) returned 1 [0155.422] wcscmp (_String1="GMT+10", _String2=".") returned 1 [0155.422] wcscmp (_String1="GMT+10", _String2="..") returned 1 [0155.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47720 [0155.422] wcscpy (in: _Dest=0x3d47720, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.422] wcscat (in: _Dest=0x3d47720, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.422] wcscat (in: _Dest=0x3d47720, _Source="GMT+10" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" [0155.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0155.423] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+11", cAlternateFileName="GMT_11~1")) returned 1 [0155.423] wcscmp (_String1="GMT+11", _String2=".") returned 1 [0155.423] wcscmp (_String1="GMT+11", _String2="..") returned 1 [0155.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47fa8 [0155.423] wcscpy (in: _Dest=0x3d47fa8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.423] wcscat (in: _Dest=0x3d47fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.423] wcscat (in: _Dest=0x3d47fa8, _Source="GMT+11" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" [0155.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0155.424] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+12", cAlternateFileName="GMT_12~1")) returned 1 [0155.425] wcscmp (_String1="GMT+12", _String2=".") returned 1 [0155.425] wcscmp (_String1="GMT+12", _String2="..") returned 1 [0155.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d477f0 [0155.425] wcscpy (in: _Dest=0x3d477f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.425] wcscat (in: _Dest=0x3d477f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.425] wcscat (in: _Dest=0x3d477f0, _Source="GMT+12" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" [0155.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d477f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0155.426] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+2", cAlternateFileName="GMT_2~1")) returned 1 [0155.426] wcscmp (_String1="GMT+2", _String2=".") returned 1 [0155.426] wcscmp (_String1="GMT+2", _String2="..") returned 1 [0155.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ba8 [0155.426] wcscpy (in: _Dest=0x2fe6ba8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.426] wcscat (in: _Dest=0x2fe6ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.426] wcscat (in: _Dest=0x2fe6ba8, _Source="GMT+2" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" [0155.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0155.427] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+3", cAlternateFileName="GMT_3~1")) returned 1 [0155.427] wcscmp (_String1="GMT+3", _String2=".") returned 1 [0155.427] wcscmp (_String1="GMT+3", _String2="..") returned 1 [0155.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe5e88 [0155.427] wcscpy (in: _Dest=0x2fe5e88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.427] wcscat (in: _Dest=0x2fe5e88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.427] wcscat (in: _Dest=0x2fe5e88, _Source="GMT+3" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" [0155.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe5e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0155.428] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+4", cAlternateFileName="GMT_4~1")) returned 1 [0155.428] wcscmp (_String1="GMT+4", _String2=".") returned 1 [0155.428] wcscmp (_String1="GMT+4", _String2="..") returned 1 [0155.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6cc8 [0155.428] wcscpy (in: _Dest=0x2fe6cc8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.428] wcscat (in: _Dest=0x2fe6cc8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.428] wcscat (in: _Dest=0x2fe6cc8, _Source="GMT+4" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" [0155.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0155.429] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+5", cAlternateFileName="GMT_5~1")) returned 1 [0155.429] wcscmp (_String1="GMT+5", _String2=".") returned 1 [0155.429] wcscmp (_String1="GMT+5", _String2="..") returned 1 [0155.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6668 [0155.429] wcscpy (in: _Dest=0x2fe6668, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.429] wcscat (in: _Dest=0x2fe6668, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.429] wcscat (in: _Dest=0x2fe6668, _Source="GMT+5" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" [0155.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1404 [0155.430] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+6", cAlternateFileName="GMT_6~1")) returned 1 [0155.430] wcscmp (_String1="GMT+6", _String2=".") returned 1 [0155.430] wcscmp (_String1="GMT+6", _String2="..") returned 1 [0155.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe70e8 [0155.431] wcscpy (in: _Dest=0x2fe70e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.431] wcscat (in: _Dest=0x2fe70e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.431] wcscat (in: _Dest=0x2fe70e8, _Source="GMT+6" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" [0155.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe70e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0155.432] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+7", cAlternateFileName="GMT_7~1")) returned 1 [0155.432] wcscmp (_String1="GMT+7", _String2=".") returned 1 [0155.432] wcscmp (_String1="GMT+7", _String2="..") returned 1 [0155.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7208 [0155.432] wcscpy (in: _Dest=0x2fe7208, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.432] wcscat (in: _Dest=0x2fe7208, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.432] wcscat (in: _Dest=0x2fe7208, _Source="GMT+7" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" [0155.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0155.433] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+8", cAlternateFileName="GMT_8~1")) returned 1 [0155.433] wcscmp (_String1="GMT+8", _String2=".") returned 1 [0155.433] wcscmp (_String1="GMT+8", _String2="..") returned 1 [0155.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe67e8 [0155.433] wcscpy (in: _Dest=0x2fe67e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.433] wcscat (in: _Dest=0x2fe67e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.433] wcscat (in: _Dest=0x2fe67e8, _Source="GMT+8" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" [0155.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe67e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c18 [0155.434] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT+9", cAlternateFileName="GMT_9~1")) returned 1 [0155.434] wcscmp (_String1="GMT+9", _String2=".") returned 1 [0155.434] wcscmp (_String1="GMT+9", _String2="..") returned 1 [0155.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6ea8 [0155.434] wcscpy (in: _Dest=0x2fe6ea8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.434] wcscat (in: _Dest=0x2fe6ea8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.435] wcscat (in: _Dest=0x2fe6ea8, _Source="GMT+9" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" [0155.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e4 [0155.435] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-1", cAlternateFileName="")) returned 1 [0155.435] wcscmp (_String1="GMT-1", _String2=".") returned 1 [0155.435] wcscmp (_String1="GMT-1", _String2="..") returned 1 [0155.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6d88 [0155.436] wcscpy (in: _Dest=0x2fe6d88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.436] wcscat (in: _Dest=0x2fe6d88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.436] wcscat (in: _Dest=0x2fe6d88, _Source="GMT-1" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" [0155.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218 [0155.437] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-10", cAlternateFileName="")) returned 1 [0155.437] wcscmp (_String1="GMT-10", _String2=".") returned 1 [0155.437] wcscmp (_String1="GMT-10", _String2="..") returned 1 [0155.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47990 [0155.437] wcscpy (in: _Dest=0x3d47990, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.437] wcscat (in: _Dest=0x3d47990, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.437] wcscat (in: _Dest=0x3d47990, _Source="GMT-10" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" [0155.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c10 [0155.438] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-11", cAlternateFileName="")) returned 1 [0155.438] wcscmp (_String1="GMT-11", _String2=".") returned 1 [0155.438] wcscmp (_String1="GMT-11", _String2="..") returned 1 [0155.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d479f8 [0155.438] wcscpy (in: _Dest=0x3d479f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.438] wcscat (in: _Dest=0x3d479f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.438] wcscat (in: _Dest=0x3d479f8, _Source="GMT-11" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" [0155.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d479f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0155.439] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-12", cAlternateFileName="")) returned 1 [0155.439] wcscmp (_String1="GMT-12", _String2=".") returned 1 [0155.439] wcscmp (_String1="GMT-12", _String2="..") returned 1 [0155.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47a60 [0155.439] wcscpy (in: _Dest=0x3d47a60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.439] wcscat (in: _Dest=0x3d47a60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.439] wcscat (in: _Dest=0x3d47a60, _Source="GMT-12" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" [0155.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0155.440] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-13", cAlternateFileName="")) returned 1 [0155.440] wcscmp (_String1="GMT-13", _String2=".") returned 1 [0155.440] wcscmp (_String1="GMT-13", _String2="..") returned 1 [0155.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47ac8 [0155.441] wcscpy (in: _Dest=0x3d47ac8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.441] wcscat (in: _Dest=0x3d47ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.441] wcscat (in: _Dest=0x3d47ac8, _Source="GMT-13" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" [0155.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c00 [0155.441] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-14", cAlternateFileName="")) returned 1 [0155.442] wcscmp (_String1="GMT-14", _String2=".") returned 1 [0155.442] wcscmp (_String1="GMT-14", _String2="..") returned 1 [0155.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47c00 [0155.442] wcscpy (in: _Dest=0x3d47c00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.442] wcscat (in: _Dest=0x3d47c00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.442] wcscat (in: _Dest=0x3d47c00, _Source="GMT-14" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" [0155.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0155.443] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-2", cAlternateFileName="")) returned 1 [0155.443] wcscmp (_String1="GMT-2", _String2=".") returned 1 [0155.443] wcscmp (_String1="GMT-2", _String2="..") returned 1 [0155.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe2c48 [0155.443] wcscpy (in: _Dest=0x2fe2c48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.443] wcscat (in: _Dest=0x2fe2c48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.443] wcscat (in: _Dest=0x2fe2c48, _Source="GMT-2" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" [0155.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe2c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0155.444] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-3", cAlternateFileName="")) returned 1 [0155.444] wcscmp (_String1="GMT-3", _String2=".") returned 1 [0155.444] wcscmp (_String1="GMT-3", _String2="..") returned 1 [0155.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe65a8 [0155.444] wcscpy (in: _Dest=0x2fe65a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.444] wcscat (in: _Dest=0x2fe65a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.444] wcscat (in: _Dest=0x2fe65a8, _Source="GMT-3" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" [0155.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe65a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be8 [0155.445] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-4", cAlternateFileName="")) returned 1 [0155.445] wcscmp (_String1="GMT-4", _String2=".") returned 1 [0155.445] wcscmp (_String1="GMT-4", _String2="..") returned 1 [0155.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe5948 [0155.445] wcscpy (in: _Dest=0x2fe5948, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.445] wcscat (in: _Dest=0x2fe5948, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.445] wcscat (in: _Dest=0x2fe5948, _Source="GMT-4" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" [0155.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe5948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0155.446] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-5", cAlternateFileName="")) returned 1 [0155.446] wcscmp (_String1="GMT-5", _String2=".") returned 1 [0155.446] wcscmp (_String1="GMT-5", _String2="..") returned 1 [0155.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6488 [0155.446] wcscpy (in: _Dest=0x2fe6488, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.446] wcscat (in: _Dest=0x2fe6488, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.446] wcscat (in: _Dest=0x2fe6488, _Source="GMT-5" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" [0155.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0155.448] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-6", cAlternateFileName="")) returned 1 [0155.448] wcscmp (_String1="GMT-6", _String2=".") returned 1 [0155.448] wcscmp (_String1="GMT-6", _String2="..") returned 1 [0155.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6b48 [0155.448] wcscpy (in: _Dest=0x2fe6b48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.448] wcscat (in: _Dest=0x2fe6b48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.448] wcscat (in: _Dest=0x2fe6b48, _Source="GMT-6" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" [0155.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe6b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0155.449] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x682fa360, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-7", cAlternateFileName="")) returned 1 [0155.450] wcscmp (_String1="GMT-7", _String2=".") returned 1 [0155.450] wcscmp (_String1="GMT-7", _String2="..") returned 1 [0155.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe73e8 [0155.450] wcscpy (in: _Dest=0x2fe73e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.450] wcscat (in: _Dest=0x2fe73e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.450] wcscat (in: _Dest=0x2fe73e8, _Source="GMT-7" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" [0155.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe73e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0155.451] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x682fa360, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x682fa360, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-8", cAlternateFileName="")) returned 1 [0155.451] wcscmp (_String1="GMT-8", _String2=".") returned 1 [0155.451] wcscmp (_String1="GMT-8", _String2="..") returned 1 [0155.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe7448 [0155.451] wcscpy (in: _Dest=0x2fe7448, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.452] wcscat (in: _Dest=0x2fe7448, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.452] wcscat (in: _Dest=0x2fe7448, _Source="GMT-8" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" [0155.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0155.453] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMT-9", cAlternateFileName="")) returned 1 [0155.453] wcscmp (_String1="GMT-9", _String2=".") returned 1 [0155.453] wcscmp (_String1="GMT-9", _String2="..") returned 1 [0155.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe74a8 [0155.453] wcscpy (in: _Dest=0x2fe74a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.453] wcscat (in: _Dest=0x2fe74a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.453] wcscat (in: _Dest=0x2fe74a8, _Source="GMT-9" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" [0155.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe74a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718 [0155.455] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCT", cAlternateFileName="")) returned 1 [0155.455] wcscmp (_String1="UCT", _String2=".") returned 1 [0155.455] wcscmp (_String1="UCT", _String2="..") returned 1 [0155.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7508 [0155.455] wcscpy (in: _Dest=0x2fe7508, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.455] wcscat (in: _Dest=0x2fe7508, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.455] wcscat (in: _Dest=0x2fe7508, _Source="UCT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT" [0155.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe7508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1610 [0155.456] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTC", cAlternateFileName="")) returned 1 [0155.456] wcscmp (_String1="UTC", _String2=".") returned 1 [0155.456] wcscmp (_String1="UTC", _String2="..") returned 1 [0155.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe7568 [0155.457] wcscpy (in: _Dest=0x2fe7568, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc" [0155.457] wcscat (in: _Dest=0x2fe7568, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\" [0155.457] wcscat (in: _Dest=0x2fe7568, _Source="UTC" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC" [0155.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2fe7568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0156.261] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3ea3970 | out: lpFindFileData=0x3ea3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTC", cAlternateFileName="")) returned 0 [0157.220] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0157.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3970) returned 1 [0157.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a396e0) returned 1 [0157.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d487f0) returned 1 Thread: id = 2248 os_tid = 0xe10 [0151.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe64e8 [0151.043] wcscpy (in: _Dest=0x2fe64e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0151.043] wcscat (in: _Dest=0x2fe64e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0151.043] wcscat (in: _Dest=0x2fe64e8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\*" [0151.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea4310 [0151.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0153.699] wcscmp (_String1=".", _String2=".") returned 0 [0153.699] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.442] wcscmp (_String1="..", _String2=".") returned 1 [0154.442] wcscmp (_String1="..", _String2="..") returned 0 [0154.442] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="Amsterdam", cAlternateFileName="AMSTER~1")) returned 1 [0154.442] wcscmp (_String1="Amsterdam", _String2=".") returned 1 [0154.442] wcscmp (_String1="Amsterdam", _String2="..") returned 1 [0154.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a231b0 [0154.442] wcscpy (in: _Dest=0x7a231b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0154.442] wcscat (in: _Dest=0x7a231b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0154.442] wcscat (in: _Dest=0x7a231b0, _Source="Amsterdam" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" [0162.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a231b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0162.035] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Andorra", cAlternateFileName="")) returned 1 [0162.035] wcscmp (_String1="Andorra", _String2=".") returned 1 [0162.035] wcscmp (_String1="Andorra", _String2="..") returned 1 [0162.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26158 [0162.035] wcscpy (in: _Dest=0x7a26158, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.035] wcscat (in: _Dest=0x7a26158, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.035] wcscat (in: _Dest=0x7a26158, _Source="Andorra" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra" [0162.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0162.036] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Athens", cAlternateFileName="")) returned 1 [0162.036] wcscmp (_String1="Athens", _String2=".") returned 1 [0162.037] wcscmp (_String1="Athens", _String2="..") returned 1 [0162.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e20400 [0162.037] wcscpy (in: _Dest=0x3e20400, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.037] wcscat (in: _Dest=0x3e20400, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.037] wcscat (in: _Dest=0x3e20400, _Source="Athens" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens" [0162.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e20400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0162.038] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Belgrade", cAlternateFileName="")) returned 1 [0162.038] wcscmp (_String1="Belgrade", _String2=".") returned 1 [0162.038] wcscmp (_String1="Belgrade", _String2="..") returned 1 [0162.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26e08 [0162.038] wcscpy (in: _Dest=0x7a26e08, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.038] wcscat (in: _Dest=0x7a26e08, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.038] wcscat (in: _Dest=0x7a26e08, _Source="Belgrade" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" [0162.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0162.039] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berlin", cAlternateFileName="")) returned 1 [0162.039] wcscmp (_String1="Berlin", _String2=".") returned 1 [0162.039] wcscmp (_String1="Berlin", _String2="..") returned 1 [0162.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1ea68 [0162.039] wcscpy (in: _Dest=0x3e1ea68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.039] wcscat (in: _Dest=0x3e1ea68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.039] wcscat (in: _Dest=0x3e1ea68, _Source="Berlin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin" [0162.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ea68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0162.040] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Brussels", cAlternateFileName="")) returned 1 [0162.040] wcscmp (_String1="Brussels", _String2=".") returned 1 [0162.040] wcscmp (_String1="Brussels", _String2="..") returned 1 [0162.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a268c8 [0162.040] wcscpy (in: _Dest=0x7a268c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.040] wcscat (in: _Dest=0x7a268c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.040] wcscat (in: _Dest=0x7a268c8, _Source="Brussels" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels" [0162.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a268c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0162.042] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bucharest", cAlternateFileName="BUCHAR~1")) returned 1 [0162.042] wcscmp (_String1="Bucharest", _String2=".") returned 1 [0162.042] wcscmp (_String1="Bucharest", _String2="..") returned 1 [0162.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a263f8 [0162.042] wcscpy (in: _Dest=0x7a263f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.042] wcscat (in: _Dest=0x7a263f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.042] wcscat (in: _Dest=0x7a263f8, _Source="Bucharest" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" [0162.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a263f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0162.043] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Budapest", cAlternateFileName="")) returned 1 [0162.043] wcscmp (_String1="Budapest", _String2=".") returned 1 [0162.043] wcscmp (_String1="Budapest", _String2="..") returned 1 [0162.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a260e8 [0162.043] wcscpy (in: _Dest=0x7a260e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.043] wcscat (in: _Dest=0x7a260e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.043] wcscat (in: _Dest=0x7a260e8, _Source="Budapest" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest" [0162.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a260e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0162.044] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chisinau", cAlternateFileName="")) returned 1 [0162.044] wcscmp (_String1="Chisinau", _String2=".") returned 1 [0162.044] wcscmp (_String1="Chisinau", _String2="..") returned 1 [0162.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26cb8 [0162.044] wcscpy (in: _Dest=0x7a26cb8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.044] wcscat (in: _Dest=0x7a26cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.044] wcscat (in: _Dest=0x7a26cb8, _Source="Chisinau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" [0162.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0162.045] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Copenhagen", cAlternateFileName="COPENH~1")) returned 1 [0162.045] wcscmp (_String1="Copenhagen", _String2=".") returned 1 [0162.045] wcscmp (_String1="Copenhagen", _String2="..") returned 1 [0162.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26af8 [0162.045] wcscpy (in: _Dest=0x7a26af8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.045] wcscat (in: _Dest=0x7a26af8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.045] wcscat (in: _Dest=0x7a26af8, _Source="Copenhagen" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" [0162.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0162.046] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dublin", cAlternateFileName="")) returned 1 [0162.046] wcscmp (_String1="Dublin", _String2=".") returned 1 [0162.046] wcscmp (_String1="Dublin", _String2="..") returned 1 [0162.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d958 [0162.047] wcscpy (in: _Dest=0x3e1d958, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.047] wcscat (in: _Dest=0x3e1d958, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.047] wcscat (in: _Dest=0x3e1d958, _Source="Dublin" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin" [0162.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40 [0162.048] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gibraltar", cAlternateFileName="GIBRAL~1")) returned 1 [0162.048] wcscmp (_String1="Gibraltar", _String2=".") returned 1 [0162.048] wcscmp (_String1="Gibraltar", _String2="..") returned 1 [0162.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26468 [0162.048] wcscpy (in: _Dest=0x7a26468, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.048] wcscat (in: _Dest=0x7a26468, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.048] wcscat (in: _Dest=0x7a26468, _Source="Gibraltar" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" [0162.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0162.049] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Helsinki", cAlternateFileName="")) returned 1 [0162.049] wcscmp (_String1="Helsinki", _String2=".") returned 1 [0162.049] wcscmp (_String1="Helsinki", _String2="..") returned 1 [0162.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26238 [0162.049] wcscpy (in: _Dest=0x7a26238, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.049] wcscat (in: _Dest=0x7a26238, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.049] wcscat (in: _Dest=0x7a26238, _Source="Helsinki" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" [0162.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0162.050] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Istanbul", cAlternateFileName="")) returned 1 [0162.050] wcscmp (_String1="Istanbul", _String2=".") returned 1 [0162.050] wcscmp (_String1="Istanbul", _String2="..") returned 1 [0162.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26078 [0162.050] wcscpy (in: _Dest=0x7a26078, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.051] wcscat (in: _Dest=0x7a26078, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.051] wcscat (in: _Dest=0x7a26078, _Source="Istanbul" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" [0162.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004 [0162.052] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kaliningrad", cAlternateFileName="KALINI~1")) returned 1 [0162.052] wcscmp (_String1="Kaliningrad", _String2=".") returned 1 [0162.052] wcscmp (_String1="Kaliningrad", _String2="..") returned 1 [0162.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015058 [0162.052] wcscpy (in: _Dest=0x3015058, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.052] wcscat (in: _Dest=0x3015058, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.052] wcscat (in: _Dest=0x3015058, _Source="Kaliningrad" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" [0162.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3015058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c [0162.053] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kiev", cAlternateFileName="")) returned 1 [0162.053] wcscmp (_String1="Kiev", _String2=".") returned 1 [0162.053] wcscmp (_String1="Kiev", _String2="..") returned 1 [0162.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1d8f0 [0162.053] wcscpy (in: _Dest=0x3e1d8f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.053] wcscat (in: _Dest=0x3e1d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.053] wcscat (in: _Dest=0x3e1d8f0, _Source="Kiev" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev" [0162.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0162.054] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisbon", cAlternateFileName="")) returned 1 [0162.054] wcscmp (_String1="Lisbon", _String2=".") returned 1 [0162.054] wcscmp (_String1="Lisbon", _String2="..") returned 1 [0162.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1e7f8 [0162.054] wcscpy (in: _Dest=0x3e1e7f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.054] wcscat (in: _Dest=0x3e1e7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.054] wcscat (in: _Dest=0x3e1e7f8, _Source="Lisbon" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" [0162.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1e7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0162.055] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="London", cAlternateFileName="")) returned 1 [0162.055] wcscmp (_String1="London", _String2=".") returned 1 [0162.055] wcscmp (_String1="London", _String2="..") returned 1 [0162.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f358 [0162.056] wcscpy (in: _Dest=0x3e1f358, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.056] wcscat (in: _Dest=0x3e1f358, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.056] wcscat (in: _Dest=0x3e1f358, _Source="London" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London" [0162.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0162.057] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luxembourg", cAlternateFileName="LUXEMB~1")) returned 1 [0162.057] wcscmp (_String1="Luxembourg", _String2=".") returned 1 [0162.057] wcscmp (_String1="Luxembourg", _String2="..") returned 1 [0162.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26ee8 [0162.057] wcscpy (in: _Dest=0x7a26ee8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.057] wcscat (in: _Dest=0x7a26ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.057] wcscat (in: _Dest=0x7a26ee8, _Source="Luxembourg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" [0162.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0162.058] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Madrid", cAlternateFileName="")) returned 1 [0162.058] wcscmp (_String1="Madrid", _String2=".") returned 1 [0162.058] wcscmp (_String1="Madrid", _String2="..") returned 1 [0162.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1da28 [0162.058] wcscpy (in: _Dest=0x3e1da28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.058] wcscat (in: _Dest=0x3e1da28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.058] wcscat (in: _Dest=0x3e1da28, _Source="Madrid" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid" [0162.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1da28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0162.059] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Malta", cAlternateFileName="")) returned 1 [0162.059] wcscmp (_String1="Malta", _String2=".") returned 1 [0162.059] wcscmp (_String1="Malta", _String2="..") returned 1 [0162.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1d9c0 [0162.059] wcscpy (in: _Dest=0x3e1d9c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.059] wcscat (in: _Dest=0x3e1d9c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.059] wcscat (in: _Dest=0x3e1d9c0, _Source="Malta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta" [0162.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0162.060] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x25d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Minsk", cAlternateFileName="")) returned 1 [0162.060] wcscmp (_String1="Minsk", _String2=".") returned 1 [0162.060] wcscmp (_String1="Minsk", _String2="..") returned 1 [0162.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47720 [0162.061] wcscpy (in: _Dest=0x3d47720, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.061] wcscat (in: _Dest=0x3d47720, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.061] wcscat (in: _Dest=0x3d47720, _Source="Minsk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk" [0162.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0162.062] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x628, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monaco", cAlternateFileName="")) returned 1 [0162.062] wcscmp (_String1="Monaco", _String2=".") returned 1 [0162.062] wcscmp (_String1="Monaco", _String2="..") returned 1 [0162.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d46a88 [0162.062] wcscpy (in: _Dest=0x3d46a88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.062] wcscat (in: _Dest=0x3d46a88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.062] wcscat (in: _Dest=0x3d46a88, _Source="Monaco" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco" [0162.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d46a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0162.113] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Moscow", cAlternateFileName="")) returned 1 [0162.113] wcscmp (_String1="Moscow", _String2=".") returned 1 [0162.114] wcscmp (_String1="Moscow", _String2="..") returned 1 [0162.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d472a8 [0162.114] wcscpy (in: _Dest=0x3d472a8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.114] wcscat (in: _Dest=0x3d472a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.114] wcscat (in: _Dest=0x3d472a8, _Source="Moscow" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow" [0162.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d472a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0162.115] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oslo", cAlternateFileName="")) returned 1 [0162.115] wcscmp (_String1="Oslo", _String2=".") returned 1 [0162.115] wcscmp (_String1="Oslo", _String2="..") returned 1 [0162.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d47c68 [0162.115] wcscpy (in: _Dest=0x3d47c68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.115] wcscat (in: _Dest=0x3d47c68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.115] wcscat (in: _Dest=0x3d47c68, _Source="Oslo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo" [0162.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0162.116] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paris", cAlternateFileName="")) returned 1 [0162.116] wcscmp (_String1="Paris", _String2=".") returned 1 [0162.116] wcscmp (_String1="Paris", _String2="..") returned 1 [0162.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47378 [0162.116] wcscpy (in: _Dest=0x3d47378, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.116] wcscat (in: _Dest=0x3d47378, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.116] wcscat (in: _Dest=0x3d47378, _Source="Paris" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris" [0162.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0162.118] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prague", cAlternateFileName="")) returned 1 [0162.118] wcscmp (_String1="Prague", _String2=".") returned 1 [0162.118] wcscmp (_String1="Prague", _String2="..") returned 1 [0162.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47240 [0162.118] wcscpy (in: _Dest=0x3d47240, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.118] wcscat (in: _Dest=0x3d47240, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.118] wcscat (in: _Dest=0x3d47240, _Source="Prague" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague" [0162.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0162.119] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riga", cAlternateFileName="")) returned 1 [0162.119] wcscmp (_String1="Riga", _String2=".") returned 1 [0162.119] wcscmp (_String1="Riga", _String2="..") returned 1 [0162.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d471d8 [0162.119] wcscpy (in: _Dest=0x3d471d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.119] wcscat (in: _Dest=0x3d471d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.119] wcscat (in: _Dest=0x3d471d8, _Source="Riga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga" [0162.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d471d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0162.121] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rome", cAlternateFileName="")) returned 1 [0162.121] wcscmp (_String1="Rome", _String2=".") returned 1 [0162.121] wcscmp (_String1="Rome", _String2="..") returned 1 [0162.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3d47310 [0162.121] wcscpy (in: _Dest=0x3d47310, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.121] wcscat (in: _Dest=0x3d47310, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.121] wcscat (in: _Dest=0x3d47310, _Source="Rome" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome" [0162.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0162.122] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="Samara", cAlternateFileName="")) returned 1 [0162.122] wcscmp (_String1="Samara", _String2=".") returned 1 [0162.122] wcscmp (_String1="Samara", _String2="..") returned 1 [0162.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47858 [0162.122] wcscpy (in: _Dest=0x3d47858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.122] wcscat (in: _Dest=0x3d47858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.123] wcscat (in: _Dest=0x3d47858, _Source="Samara" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara" [0162.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d47858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0162.652] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simferopol", cAlternateFileName="SIMFER~1")) returned 1 [0162.653] wcscmp (_String1="Simferopol", _String2=".") returned 1 [0162.653] wcscmp (_String1="Simferopol", _String2="..") returned 1 [0162.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26628 [0162.653] wcscpy (in: _Dest=0x7a26628, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.653] wcscat (in: _Dest=0x7a26628, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.653] wcscat (in: _Dest=0x7a26628, _Source="Simferopol" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" [0162.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0162.655] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sofia", cAlternateFileName="")) returned 1 [0162.655] wcscmp (_String1="Sofia", _String2=".") returned 1 [0162.655] wcscmp (_String1="Sofia", _String2="..") returned 1 [0162.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1f150 [0162.655] wcscpy (in: _Dest=0x3e1f150, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.655] wcscat (in: _Dest=0x3e1f150, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.655] wcscat (in: _Dest=0x3e1f150, _Source="Sofia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia" [0162.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0162.656] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stockholm", cAlternateFileName="STOCKH~1")) returned 1 [0162.656] wcscmp (_String1="Stockholm", _String2=".") returned 1 [0162.656] wcscmp (_String1="Stockholm", _String2="..") returned 1 [0162.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26778 [0162.657] wcscpy (in: _Dest=0x7a26778, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.657] wcscat (in: _Dest=0x7a26778, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.657] wcscat (in: _Dest=0x7a26778, _Source="Stockholm" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" [0162.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0162.658] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tallinn", cAlternateFileName="")) returned 1 [0162.658] wcscmp (_String1="Tallinn", _String2=".") returned 1 [0162.658] wcscmp (_String1="Tallinn", _String2="..") returned 1 [0162.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26938 [0162.658] wcscpy (in: _Dest=0x7a26938, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.658] wcscat (in: _Dest=0x7a26938, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.658] wcscat (in: _Dest=0x7a26938, _Source="Tallinn" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" [0162.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0162.659] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tirane", cAlternateFileName="")) returned 1 [0162.660] wcscmp (_String1="Tirane", _String2=".") returned 1 [0162.660] wcscmp (_String1="Tirane", _String2="..") returned 1 [0162.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d9c0 [0162.660] wcscpy (in: _Dest=0x3e1d9c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.660] wcscat (in: _Dest=0x3e1d9c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.660] wcscat (in: _Dest=0x3e1d9c0, _Source="Tirane" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane" [0162.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0162.661] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uzhgorod", cAlternateFileName="")) returned 1 [0162.661] wcscmp (_String1="Uzhgorod", _String2=".") returned 1 [0162.661] wcscmp (_String1="Uzhgorod", _String2="..") returned 1 [0162.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26698 [0162.661] wcscpy (in: _Dest=0x7a26698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.661] wcscat (in: _Dest=0x7a26698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.661] wcscat (in: _Dest=0x7a26698, _Source="Uzhgorod" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" [0162.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0162.663] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vaduz", cAlternateFileName="")) returned 1 [0162.663] wcscmp (_String1="Vaduz", _String2=".") returned 1 [0162.663] wcscmp (_String1="Vaduz", _String2="..") returned 1 [0162.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1da28 [0162.663] wcscpy (in: _Dest=0x3e1da28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.663] wcscat (in: _Dest=0x3e1da28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.663] wcscat (in: _Dest=0x3e1da28, _Source="Vaduz" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" [0162.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1da28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0162.664] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683204c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x683204c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x683204c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vienna", cAlternateFileName="")) returned 1 [0162.664] wcscmp (_String1="Vienna", _String2=".") returned 1 [0162.664] wcscmp (_String1="Vienna", _String2="..") returned 1 [0162.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f358 [0162.664] wcscpy (in: _Dest=0x3e1f358, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.664] wcscat (in: _Dest=0x3e1f358, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.665] wcscat (in: _Dest=0x3e1f358, _Source="Vienna" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna" [0162.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0162.666] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vilnius", cAlternateFileName="")) returned 1 [0162.666] wcscmp (_String1="Vilnius", _String2=".") returned 1 [0162.666] wcscmp (_String1="Vilnius", _String2="..") returned 1 [0162.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26008 [0162.666] wcscpy (in: _Dest=0x7a26008, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.666] wcscat (in: _Dest=0x7a26008, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.666] wcscat (in: _Dest=0x7a26008, _Source="Vilnius" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" [0162.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0162.668] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Volgograd", cAlternateFileName="VOLGOG~1")) returned 1 [0162.668] wcscmp (_String1="Volgograd", _String2=".") returned 1 [0162.668] wcscmp (_String1="Volgograd", _String2="..") returned 1 [0162.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26f58 [0162.668] wcscpy (in: _Dest=0x7a26f58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.668] wcscat (in: _Dest=0x7a26f58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.668] wcscat (in: _Dest=0x7a26f58, _Source="Volgograd" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" [0162.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0162.671] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Warsaw", cAlternateFileName="")) returned 1 [0162.671] wcscmp (_String1="Warsaw", _String2=".") returned 1 [0162.671] wcscmp (_String1="Warsaw", _String2="..") returned 1 [0162.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1e7f8 [0162.671] wcscpy (in: _Dest=0x3e1e7f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.671] wcscat (in: _Dest=0x3e1e7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.671] wcscat (in: _Dest=0x3e1e7f8, _Source="Warsaw" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" [0162.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1e7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0162.673] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zaporozhye", cAlternateFileName="ZAPORO~1")) returned 1 [0162.673] wcscmp (_String1="Zaporozhye", _String2=".") returned 1 [0162.673] wcscmp (_String1="Zaporozhye", _String2="..") returned 1 [0162.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a26c48 [0162.673] wcscpy (in: _Dest=0x7a26c48, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.673] wcscat (in: _Dest=0x7a26c48, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.673] wcscat (in: _Dest=0x7a26c48, _Source="Zaporozhye" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" [0162.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0162.674] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zurich", cAlternateFileName="")) returned 1 [0162.674] wcscmp (_String1="Zurich", _String2=".") returned 1 [0162.674] wcscmp (_String1="Zurich", _String2="..") returned 1 [0162.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d8f0 [0162.675] wcscpy (in: _Dest=0x3e1d8f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe" [0162.675] wcscat (in: _Dest=0x3e1d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\" [0162.675] wcscat (in: _Dest=0x3e1d8f0, _Source="Zurich" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich" [0162.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0162.676] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ea4310 | out: lpFindFileData=0x3ea4310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zurich", cAlternateFileName="")) returned 0 [0162.677] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0162.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4310) returned 1 [0162.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe64e8) returned 1 [0162.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 Thread: id = 2249 os_tid = 0xe8c [0151.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\gmt")) returned 0x20 [0153.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT", dwFileAttributes=0x20) returned 0 [0153.145] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\gmt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.145] GetLastError () returned 0x5 [0153.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\GMT", dwFileAttributes=0x20) returned 0 [0153.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48690) returned 1 Thread: id = 2250 os_tid = 0xe04 [0151.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\hst")) returned 0x20 [0153.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST", dwFileAttributes=0x20) returned 0 [0153.147] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\hst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.147] GetLastError () returned 0x5 [0153.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\HST", dwFileAttributes=0x20) returned 0 [0153.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48d18) returned 1 Thread: id = 2251 os_tid = 0xdec [0151.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x56) returned 0x2fe7388 [0151.047] wcscpy (in: _Dest=0x2fe7388, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0151.047] wcscat (in: _Dest=0x2fe7388, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0151.047] wcscat (in: _Dest=0x2fe7388, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\*" [0151.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ea40a8 [0151.047] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d400 [0153.705] wcscmp (_String1=".", _String2=".") returned 0 [0153.705] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.706] wcscmp (_String1="..", _String2=".") returned 1 [0153.706] wcscmp (_String1="..", _String2="..") returned 0 [0153.706] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Antananarivo", cAlternateFileName="ANTANA~1")) returned 1 [0153.706] wcscmp (_String1="Antananarivo", _String2=".") returned 1 [0153.706] wcscmp (_String1="Antananarivo", _String2="..") returned 1 [0153.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fa88 [0153.706] wcscpy (in: _Dest=0x3f3fa88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0153.706] wcscat (in: _Dest=0x3f3fa88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0153.706] wcscat (in: _Dest=0x3f3fa88, _Source="Antananarivo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" [0165.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\antananarivo")) returned 0x20 [0165.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo", dwFileAttributes=0x20) returned 0 [0165.212] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\antananarivo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.212] GetLastError () returned 0x5 [0165.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo", dwFileAttributes=0x20) returned 0 [0165.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0165.212] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chagos", cAlternateFileName="")) returned 1 [0165.213] wcscmp (_String1="Chagos", _String2=".") returned 1 [0165.213] wcscmp (_String1="Chagos", _String2="..") returned 1 [0165.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf9b8 [0165.213] wcscpy (in: _Dest=0x3edf9b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0165.213] wcscat (in: _Dest=0x3edf9b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0165.213] wcscat (in: _Dest=0x3edf9b8, _Source="Chagos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos" [0166.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0166.523] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Christmas", cAlternateFileName="CHRIST~1")) returned 1 [0166.523] wcscmp (_String1="Christmas", _String2=".") returned 1 [0166.524] wcscmp (_String1="Christmas", _String2="..") returned 1 [0166.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26b68 [0166.524] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0166.524] wcscat (in: _Dest=0x7a26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0166.524] wcscat (in: _Dest=0x7a26b68, _Source="Christmas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas" [0166.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4 [0166.525] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cocos", cAlternateFileName="")) returned 1 [0166.525] wcscmp (_String1="Cocos", _String2=".") returned 1 [0166.525] wcscmp (_String1="Cocos", _String2="..") returned 1 [0166.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1da28 [0166.525] wcscpy (in: _Dest=0x3e1da28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0166.525] wcscat (in: _Dest=0x3e1da28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0166.525] wcscat (in: _Dest=0x3e1da28, _Source="Cocos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos" [0166.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1da28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0166.527] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comoro", cAlternateFileName="")) returned 1 [0166.527] wcscmp (_String1="Comoro", _String2=".") returned 1 [0166.527] wcscmp (_String1="Comoro", _String2="..") returned 1 [0166.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d8f0 [0166.527] wcscpy (in: _Dest=0x3e1d8f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0166.527] wcscat (in: _Dest=0x3e1d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0166.527] wcscat (in: _Dest=0x3e1d8f0, _Source="Comoro" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro" [0166.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0166.528] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kerguelen", cAlternateFileName="KERGUE~1")) returned 1 [0166.529] wcscmp (_String1="Kerguelen", _String2=".") returned 1 [0166.529] wcscmp (_String1="Kerguelen", _String2="..") returned 1 [0166.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26e78 [0166.529] wcscpy (in: _Dest=0x7a26e78, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0166.529] wcscat (in: _Dest=0x7a26e78, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0166.529] wcscat (in: _Dest=0x7a26e78, _Source="Kerguelen" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" [0166.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb8 [0166.530] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mahe", cAlternateFileName="")) returned 1 [0166.530] wcscmp (_String1="Mahe", _String2=".") returned 1 [0166.530] wcscmp (_String1="Mahe", _String2="..") returned 1 [0166.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5c) returned 0x3e1d9c0 [0166.531] wcscpy (in: _Dest=0x3e1d9c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0166.531] wcscat (in: _Dest=0x3e1d9c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0166.531] wcscat (in: _Dest=0x3e1d9c0, _Source="Mahe" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe" [0166.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0166.532] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maldives", cAlternateFileName="")) returned 1 [0166.532] wcscmp (_String1="Maldives", _String2=".") returned 1 [0166.532] wcscmp (_String1="Maldives", _String2="..") returned 1 [0166.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26f58 [0166.532] wcscpy (in: _Dest=0x7a26f58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0166.532] wcscat (in: _Dest=0x7a26f58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0166.532] wcscat (in: _Dest=0x7a26f58, _Source="Maldives" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives" [0166.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0166.536] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mauritius", cAlternateFileName="MAURIT~1")) returned 1 [0166.537] wcscmp (_String1="Mauritius", _String2=".") returned 1 [0166.537] wcscmp (_String1="Mauritius", _String2="..") returned 1 [0166.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26008 [0166.537] wcscpy (in: _Dest=0x7a26008, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0166.537] wcscat (in: _Dest=0x7a26008, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0166.537] wcscat (in: _Dest=0x7a26008, _Source="Mauritius" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" [0166.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0166.538] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mayotte", cAlternateFileName="")) returned 1 [0166.538] wcscmp (_String1="Mayotte", _String2=".") returned 1 [0166.538] wcscmp (_String1="Mayotte", _String2="..") returned 1 [0166.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26708 [0166.538] wcscpy (in: _Dest=0x7a26708, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0166.538] wcscat (in: _Dest=0x7a26708, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0166.538] wcscat (in: _Dest=0x7a26708, _Source="Mayotte" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" [0166.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0166.540] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 1 [0166.540] wcscmp (_String1="Reunion", _String2=".") returned 1 [0166.540] wcscmp (_String1="Reunion", _String2="..") returned 1 [0166.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26318 [0166.540] wcscpy (in: _Dest=0x7a26318, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian" [0166.540] wcscat (in: _Dest=0x7a26318, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\" [0166.540] wcscat (in: _Dest=0x7a26318, _Source="Reunion" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion" [0166.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0166.541] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ea40a8 | out: lpFindFileData=0x3ea40a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reunion", cAlternateFileName="")) returned 0 [0166.542] FindClose (in: hFindFile=0x7a2d400 | out: hFindFile=0x7a2d400) returned 1 [0166.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea40a8) returned 1 [0166.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7388) returned 1 [0166.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6e48) returned 1 Thread: id = 2252 os_tid = 0xdf0 [0151.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\met")) returned 0x20 [0153.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET", dwFileAttributes=0x20) returned 0 [0153.152] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\met"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.152] GetLastError () returned 0x5 [0153.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MET", dwFileAttributes=0x20) returned 0 [0153.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d486e8) returned 1 Thread: id = 2253 os_tid = 0xe90 [0151.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst")) returned 0x20 [0153.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST", dwFileAttributes=0x20) returned 0 [0153.109] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.110] GetLastError () returned 0x5 [0153.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST", dwFileAttributes=0x20) returned 0 [0153.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d488a0) returned 1 Thread: id = 2254 os_tid = 0xdf4 [0151.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst7mdt")) returned 0x20 [0153.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT", dwFileAttributes=0x20) returned 0 [0153.111] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\mst7mdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.112] GetLastError () returned 0x5 [0153.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\MST7MDT", dwFileAttributes=0x20) returned 0 [0153.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 Thread: id = 2255 os_tid = 0xdf8 [0151.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe69c8 [0151.049] wcscpy (in: _Dest=0x2fe69c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0151.049] wcscat (in: _Dest=0x2fe69c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0151.049] wcscat (in: _Dest=0x2fe69c8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\*" [0151.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55318 [0151.049] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0153.700] wcscmp (_String1=".", _String2=".") returned 0 [0153.700] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.443] wcscmp (_String1="..", _String2=".") returned 1 [0154.443] wcscmp (_String1="..", _String2="..") returned 0 [0154.443] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apia", cAlternateFileName="")) returned 1 [0154.443] wcscmp (_String1="Apia", _String2=".") returned 1 [0154.443] wcscmp (_String1="Apia", _String2="..") returned 1 [0154.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0b98 [0154.443] wcscpy (in: _Dest=0x3ee0b98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0154.443] wcscat (in: _Dest=0x3ee0b98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0154.443] wcscat (in: _Dest=0x3ee0b98, _Source="Apia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia" [0163.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0163.160] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="Auckland", cAlternateFileName="")) returned 1 [0163.160] wcscmp (_String1="Auckland", _String2=".") returned 1 [0163.160] wcscmp (_String1="Auckland", _String2="..") returned 1 [0163.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23840 [0163.160] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.160] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.160] wcscat (in: _Dest=0x7a23840, _Source="Auckland" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" [0163.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0163.161] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chatham", cAlternateFileName="")) returned 1 [0163.161] wcscmp (_String1="Chatham", _String2=".") returned 1 [0163.161] wcscmp (_String1="Chatham", _String2="..") returned 1 [0163.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a22ff0 [0163.161] wcscpy (in: _Dest=0x7a22ff0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.161] wcscat (in: _Dest=0x7a22ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.161] wcscat (in: _Dest=0x7a22ff0, _Source="Chatham" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" [0163.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a22ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0163.162] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chuuk", cAlternateFileName="")) returned 1 [0163.162] wcscmp (_String1="Chuuk", _String2=".") returned 1 [0163.162] wcscmp (_String1="Chuuk", _String2="..") returned 1 [0163.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d958 [0163.162] wcscpy (in: _Dest=0x3e1d958, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.162] wcscat (in: _Dest=0x3e1d958, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.162] wcscat (in: _Dest=0x3e1d958, _Source="Chuuk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" [0163.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0163.163] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Easter", cAlternateFileName="")) returned 1 [0163.163] wcscmp (_String1="Easter", _String2=".") returned 1 [0163.163] wcscmp (_String1="Easter", _String2="..") returned 1 [0163.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a231b0 [0163.164] wcscpy (in: _Dest=0x7a231b0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.164] wcscat (in: _Dest=0x7a231b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.164] wcscat (in: _Dest=0x7a231b0, _Source="Easter" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter" [0163.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a231b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0163.165] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Efate", cAlternateFileName="")) returned 1 [0163.165] wcscmp (_String1="Efate", _String2=".") returned 1 [0163.165] wcscmp (_String1="Efate", _String2="..") returned 1 [0163.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1e7f8 [0163.165] wcscpy (in: _Dest=0x3e1e7f8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.165] wcscat (in: _Dest=0x3e1e7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.165] wcscat (in: _Dest=0x3e1e7f8, _Source="Efate" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate" [0163.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1e7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc [0163.166] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Enderbury", cAlternateFileName="ENDERB~1")) returned 1 [0163.166] wcscmp (_String1="Enderbury", _String2=".") returned 1 [0163.166] wcscmp (_String1="Enderbury", _String2="..") returned 1 [0163.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a234c0 [0163.166] wcscpy (in: _Dest=0x7a234c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.166] wcscat (in: _Dest=0x7a234c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.166] wcscat (in: _Dest=0x7a234c0, _Source="Enderbury" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" [0163.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a234c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0163.167] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fakaofo", cAlternateFileName="")) returned 1 [0163.167] wcscmp (_String1="Fakaofo", _String2=".") returned 1 [0163.167] wcscmp (_String1="Fakaofo", _String2="..") returned 1 [0163.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23d10 [0163.167] wcscpy (in: _Dest=0x7a23d10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.167] wcscat (in: _Dest=0x7a23d10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.167] wcscat (in: _Dest=0x7a23d10, _Source="Fakaofo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" [0163.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0163.169] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fiji", cAlternateFileName="")) returned 1 [0163.169] wcscmp (_String1="Fiji", _String2=".") returned 1 [0163.169] wcscmp (_String1="Fiji", _String2="..") returned 1 [0163.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1f358 [0163.169] wcscpy (in: _Dest=0x3e1f358, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.169] wcscat (in: _Dest=0x3e1f358, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.169] wcscat (in: _Dest=0x3e1f358, _Source="Fiji" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" [0163.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0163.170] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Funafuti", cAlternateFileName="")) returned 1 [0163.170] wcscmp (_String1="Funafuti", _String2=".") returned 1 [0163.170] wcscmp (_String1="Funafuti", _String2="..") returned 1 [0163.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23ed0 [0163.170] wcscpy (in: _Dest=0x7a23ed0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.170] wcscat (in: _Dest=0x7a23ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.170] wcscat (in: _Dest=0x7a23ed0, _Source="Funafuti" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" [0163.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0163.171] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Galapagos", cAlternateFileName="GALAPA~1")) returned 1 [0163.171] wcscmp (_String1="Galapagos", _String2=".") returned 1 [0163.171] wcscmp (_String1="Galapagos", _String2="..") returned 1 [0163.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23220 [0163.171] wcscpy (in: _Dest=0x7a23220, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.171] wcscat (in: _Dest=0x7a23220, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.171] wcscat (in: _Dest=0x7a23220, _Source="Galapagos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" [0163.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0163.172] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gambier", cAlternateFileName="")) returned 1 [0163.172] wcscmp (_String1="Gambier", _String2=".") returned 1 [0163.172] wcscmp (_String1="Gambier", _String2="..") returned 1 [0163.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a23a00 [0163.173] wcscpy (in: _Dest=0x7a23a00, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.173] wcscat (in: _Dest=0x7a23a00, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.173] wcscat (in: _Dest=0x7a23a00, _Source="Gambier" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" [0163.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0163.174] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guadalcanal", cAlternateFileName="GUADAL~1")) returned 1 [0163.174] wcscmp (_String1="Guadalcanal", _String2=".") returned 1 [0163.174] wcscmp (_String1="Guadalcanal", _String2="..") returned 1 [0163.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f218 [0163.174] wcscpy (in: _Dest=0x3f3f218, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.174] wcscat (in: _Dest=0x3f3f218, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.174] wcscat (in: _Dest=0x3f3f218, _Source="Guadalcanal" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" [0163.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0163.175] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Guam", cAlternateFileName="")) returned 1 [0163.175] wcscmp (_String1="Guam", _String2=".") returned 1 [0163.175] wcscmp (_String1="Guam", _String2="..") returned 1 [0163.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1da28 [0163.175] wcscpy (in: _Dest=0x3e1da28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.175] wcscat (in: _Dest=0x3e1da28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.175] wcscat (in: _Dest=0x3e1da28, _Source="Guam" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam" [0163.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1da28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0163.176] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Honolulu", cAlternateFileName="")) returned 1 [0163.176] wcscmp (_String1="Honolulu", _String2=".") returned 1 [0163.176] wcscmp (_String1="Honolulu", _String2="..") returned 1 [0163.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23c30 [0163.176] wcscpy (in: _Dest=0x7a23c30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.176] wcscat (in: _Dest=0x7a23c30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.176] wcscat (in: _Dest=0x7a23c30, _Source="Honolulu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" [0163.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0163.177] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Johnston", cAlternateFileName="")) returned 1 [0163.177] wcscmp (_String1="Johnston", _String2=".") returned 1 [0163.177] wcscmp (_String1="Johnston", _String2="..") returned 1 [0163.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23d80 [0163.177] wcscpy (in: _Dest=0x7a23d80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.177] wcscat (in: _Dest=0x7a23d80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.178] wcscat (in: _Dest=0x7a23d80, _Source="Johnston" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" [0163.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0163.178] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kiritimati", cAlternateFileName="KIRITI~1")) returned 1 [0163.178] wcscmp (_String1="Kiritimati", _String2=".") returned 1 [0163.178] wcscmp (_String1="Kiritimati", _String2="..") returned 1 [0163.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f650 [0163.179] wcscpy (in: _Dest=0x3f3f650, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.179] wcscat (in: _Dest=0x3f3f650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.179] wcscat (in: _Dest=0x3f3f650, _Source="Kiritimati" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" [0163.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x121c [0163.180] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kosrae", cAlternateFileName="")) returned 1 [0163.180] wcscmp (_String1="Kosrae", _String2=".") returned 1 [0163.180] wcscmp (_String1="Kosrae", _String2="..") returned 1 [0163.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23df0 [0163.180] wcscpy (in: _Dest=0x7a23df0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.180] wcscat (in: _Dest=0x7a23df0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.180] wcscat (in: _Dest=0x7a23df0, _Source="Kosrae" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" [0163.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0163.181] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kwajalein", cAlternateFileName="KWAJAL~1")) returned 1 [0163.181] wcscmp (_String1="Kwajalein", _String2=".") returned 1 [0163.181] wcscmp (_String1="Kwajalein", _String2="..") returned 1 [0163.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23e60 [0163.181] wcscpy (in: _Dest=0x7a23e60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.181] wcscat (in: _Dest=0x7a23e60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.181] wcscat (in: _Dest=0x7a23e60, _Source="Kwajalein" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" [0163.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228 [0163.182] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68346620, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68346620, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68346620, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Majuro", cAlternateFileName="")) returned 1 [0163.182] wcscmp (_String1="Majuro", _String2=".") returned 1 [0163.182] wcscmp (_String1="Majuro", _String2="..") returned 1 [0163.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23ae0 [0163.182] wcscpy (in: _Dest=0x7a23ae0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.182] wcscat (in: _Dest=0x7a23ae0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.183] wcscat (in: _Dest=0x7a23ae0, _Source="Majuro" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" [0163.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0163.184] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marquesas", cAlternateFileName="MARQUE~1")) returned 1 [0163.184] wcscmp (_String1="Marquesas", _String2=".") returned 1 [0163.184] wcscmp (_String1="Marquesas", _String2="..") returned 1 [0163.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23450 [0163.184] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.184] wcscat (in: _Dest=0x7a23450, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.184] wcscat (in: _Dest=0x7a23450, _Source="Marquesas" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" [0163.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0163.185] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Midway", cAlternateFileName="")) returned 1 [0163.185] wcscmp (_String1="Midway", _String2=".") returned 1 [0163.185] wcscmp (_String1="Midway", _String2="..") returned 1 [0163.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23140 [0163.185] wcscpy (in: _Dest=0x7a23140, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.185] wcscat (in: _Dest=0x7a23140, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.185] wcscat (in: _Dest=0x7a23140, _Source="Midway" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway" [0163.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0163.186] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nauru", cAlternateFileName="")) returned 1 [0163.186] wcscmp (_String1="Nauru", _String2=".") returned 1 [0163.186] wcscmp (_String1="Nauru", _String2="..") returned 1 [0163.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d8f0 [0163.187] wcscpy (in: _Dest=0x3e1d8f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.187] wcscat (in: _Dest=0x3e1d8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.187] wcscat (in: _Dest=0x3e1d8f0, _Source="Nauru" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" [0163.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0163.188] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Niue", cAlternateFileName="")) returned 1 [0163.188] wcscmp (_String1="Niue", _String2=".") returned 1 [0163.188] wcscmp (_String1="Niue", _String2="..") returned 1 [0163.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1d9c0 [0163.188] wcscpy (in: _Dest=0x3e1d9c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.188] wcscat (in: _Dest=0x3e1d9c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.188] wcscat (in: _Dest=0x3e1d9c0, _Source="Niue" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue" [0163.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1d9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234 [0163.189] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Norfolk", cAlternateFileName="")) returned 1 [0163.189] wcscmp (_String1="Norfolk", _String2=".") returned 1 [0163.189] wcscmp (_String1="Norfolk", _String2="..") returned 1 [0163.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a233e0 [0163.189] wcscpy (in: _Dest=0x7a233e0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.189] wcscat (in: _Dest=0x7a233e0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.189] wcscat (in: _Dest=0x7a233e0, _Source="Norfolk" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" [0163.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a233e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0163.190] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noumea", cAlternateFileName="")) returned 1 [0163.191] wcscmp (_String1="Noumea", _String2=".") returned 1 [0163.191] wcscmp (_String1="Noumea", _String2="..") returned 1 [0163.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23610 [0163.191] wcscpy (in: _Dest=0x7a23610, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.191] wcscat (in: _Dest=0x7a23610, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.191] wcscat (in: _Dest=0x7a23610, _Source="Noumea" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" [0163.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0163.192] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pago_Pago", cAlternateFileName="PAGO_P~1")) returned 1 [0163.192] wcscmp (_String1="Pago_Pago", _String2=".") returned 1 [0163.192] wcscmp (_String1="Pago_Pago", _String2="..") returned 1 [0163.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23300 [0163.192] wcscpy (in: _Dest=0x7a23300, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.192] wcscat (in: _Dest=0x7a23300, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.192] wcscat (in: _Dest=0x7a23300, _Source="Pago_Pago" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" [0163.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0163.194] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Palau", cAlternateFileName="")) returned 1 [0163.194] wcscmp (_String1="Palau", _String2=".") returned 1 [0163.194] wcscmp (_String1="Palau", _String2="..") returned 1 [0163.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f150 [0163.194] wcscpy (in: _Dest=0x3e1f150, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.194] wcscat (in: _Dest=0x3e1f150, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.194] wcscat (in: _Dest=0x3e1f150, _Source="Palau" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau" [0163.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1224 [0163.195] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitcairn", cAlternateFileName="")) returned 1 [0163.195] wcscmp (_String1="Pitcairn", _String2=".") returned 1 [0163.195] wcscmp (_String1="Pitcairn", _String2="..") returned 1 [0163.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26f58 [0163.195] wcscpy (in: _Dest=0x7a26f58, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.195] wcscat (in: _Dest=0x7a26f58, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.195] wcscat (in: _Dest=0x7a26f58, _Source="Pitcairn" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" [0163.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0163.196] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pohnpei", cAlternateFileName="")) returned 1 [0163.196] wcscmp (_String1="Pohnpei", _String2=".") returned 1 [0163.196] wcscmp (_String1="Pohnpei", _String2="..") returned 1 [0163.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26008 [0163.196] wcscpy (in: _Dest=0x7a26008, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.196] wcscat (in: _Dest=0x7a26008, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.196] wcscat (in: _Dest=0x7a26008, _Source="Pohnpei" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" [0163.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0163.197] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Port_Moresby", cAlternateFileName="PORT_M~1")) returned 1 [0163.197] wcscmp (_String1="Port_Moresby", _String2=".") returned 1 [0163.198] wcscmp (_String1="Port_Moresby", _String2="..") returned 1 [0163.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f308 [0163.198] wcscpy (in: _Dest=0x3f3f308, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.198] wcscat (in: _Dest=0x3f3f308, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.198] wcscat (in: _Dest=0x3f3f308, _Source="Port_Moresby" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" [0163.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3f308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0163.411] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rarotonga", cAlternateFileName="RAROTO~1")) returned 1 [0163.412] wcscmp (_String1="Rarotonga", _String2=".") returned 1 [0163.412] wcscmp (_String1="Rarotonga", _String2="..") returned 1 [0163.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23840 [0163.412] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0163.412] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0163.412] wcscat (in: _Dest=0x7a23840, _Source="Rarotonga" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" [0164.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\rarotonga")) returned 0x20 [0166.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga", dwFileAttributes=0x20) returned 0 [0166.382] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\rarotonga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.382] GetLastError () returned 0x5 [0166.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga", dwFileAttributes=0x20) returned 0 [0166.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 [0166.382] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saipan", cAlternateFileName="")) returned 1 [0166.383] wcscmp (_String1="Saipan", _String2=".") returned 1 [0166.383] wcscmp (_String1="Saipan", _String2="..") returned 1 [0166.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23840 [0166.383] wcscpy (in: _Dest=0x7a23840, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0166.383] wcscat (in: _Dest=0x7a23840, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0166.383] wcscat (in: _Dest=0x7a23840, _Source="Saipan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" [0173.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0173.798] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tahiti", cAlternateFileName="")) returned 1 [0173.798] wcscmp (_String1="Tahiti", _String2=".") returned 1 [0173.798] wcscmp (_String1="Tahiti", _String2="..") returned 1 [0173.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a230d0 [0173.798] wcscpy (in: _Dest=0x7a230d0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0173.798] wcscat (in: _Dest=0x7a230d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0173.798] wcscat (in: _Dest=0x7a230d0, _Source="Tahiti" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" [0173.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a230d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0173.799] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tarawa", cAlternateFileName="")) returned 1 [0173.799] wcscmp (_String1="Tarawa", _String2=".") returned 1 [0173.799] wcscmp (_String1="Tarawa", _String2="..") returned 1 [0173.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23d80 [0173.799] wcscpy (in: _Dest=0x7a23d80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0173.799] wcscat (in: _Dest=0x7a23d80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0173.800] wcscat (in: _Dest=0x7a23d80, _Source="Tarawa" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" [0173.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0173.801] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tongatapu", cAlternateFileName="TONGAT~1")) returned 1 [0173.801] wcscmp (_String1="Tongatapu", _String2=".") returned 1 [0173.801] wcscmp (_String1="Tongatapu", _String2="..") returned 1 [0173.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23c30 [0173.801] wcscpy (in: _Dest=0x7a23c30, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0173.801] wcscat (in: _Dest=0x7a23c30, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0173.801] wcscat (in: _Dest=0x7a23c30, _Source="Tongatapu" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" [0173.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0173.806] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wake", cAlternateFileName="")) returned 1 [0173.806] wcscmp (_String1="Wake", _String2=".") returned 1 [0173.806] wcscmp (_String1="Wake", _String2="..") returned 1 [0173.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1f5c8 [0173.806] wcscpy (in: _Dest=0x3e1f5c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0173.806] wcscat (in: _Dest=0x3e1f5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0173.806] wcscat (in: _Dest=0x3e1f5c8, _Source="Wake" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake" [0173.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1f5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0173.808] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 1 [0173.808] wcscmp (_String1="Wallis", _String2=".") returned 1 [0173.808] wcscmp (_String1="Wallis", _String2="..") returned 1 [0173.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a23ed0 [0173.808] wcscpy (in: _Dest=0x7a23ed0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific" [0173.808] wcscat (in: _Dest=0x7a23ed0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\" [0173.808] wcscat (in: _Dest=0x7a23ed0, _Source="Wallis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" [0173.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a23ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0173.810] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wallis", cAlternateFileName="")) returned 0 [0173.810] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0173.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55318) returned 1 [0173.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe69c8) returned 1 [0173.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ae8) returned 1 Thread: id = 2256 os_tid = 0xe08 [0151.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pst8pdt")) returned 0x20 [0153.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT", dwFileAttributes=0x20) returned 0 [0153.154] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pst8pdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.155] GetLastError () returned 0x5 [0153.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\PST8PDT", dwFileAttributes=0x20) returned 0 [0153.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 Thread: id = 2257 os_tid = 0xe00 [0151.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6a28 [0151.050] wcscpy (in: _Dest=0x2fe6a28, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0151.050] wcscat (in: _Dest=0x2fe6a28, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0151.050] wcscat (in: _Dest=0x2fe6a28, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\*" [0151.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53fd8 [0151.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7170 [0153.706] wcscmp (_String1=".", _String2=".") returned 0 [0153.706] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.706] wcscmp (_String1="..", _String2=".") returned 1 [0153.706] wcscmp (_String1="..", _String2="..") returned 0 [0153.706] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AST4", cAlternateFileName="")) returned 1 [0153.706] wcscmp (_String1="AST4", _String2=".") returned 1 [0153.707] wcscmp (_String1="AST4", _String2="..") returned 1 [0153.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3d47650 [0153.707] wcscpy (in: _Dest=0x3d47650, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0153.707] wcscat (in: _Dest=0x3d47650, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0153.707] wcscat (in: _Dest=0x3d47650, _Source="AST4" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4" [0165.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4")) returned 0x20 [0165.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4", dwFileAttributes=0x20) returned 0 [0165.214] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.214] GetLastError () returned 0x5 [0165.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4", dwFileAttributes=0x20) returned 0 [0165.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47650) returned 1 [0165.214] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AST4ADT", cAlternateFileName="")) returned 1 [0165.214] wcscmp (_String1="AST4ADT", _String2=".") returned 1 [0165.214] wcscmp (_String1="AST4ADT", _String2="..") returned 1 [0165.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26698 [0165.214] wcscpy (in: _Dest=0x7a26698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0165.214] wcscat (in: _Dest=0x7a26698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0165.215] wcscat (in: _Dest=0x7a26698, _Source="AST4ADT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" [0167.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0167.406] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6", cAlternateFileName="")) returned 1 [0167.406] wcscmp (_String1="CST6", _String2=".") returned 1 [0167.406] wcscmp (_String1="CST6", _String2="..") returned 1 [0167.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0928 [0167.407] wcscpy (in: _Dest=0x3ee0928, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.407] wcscat (in: _Dest=0x3ee0928, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.407] wcscat (in: _Dest=0x3ee0928, _Source="CST6" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6" [0167.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0167.408] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CST6CDT", cAlternateFileName="")) returned 1 [0167.408] wcscmp (_String1="CST6CDT", _String2=".") returned 1 [0167.408] wcscmp (_String1="CST6CDT", _String2="..") returned 1 [0167.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26708 [0167.408] wcscpy (in: _Dest=0x7a26708, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.408] wcscat (in: _Dest=0x7a26708, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.408] wcscat (in: _Dest=0x7a26708, _Source="CST6CDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" [0167.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0167.409] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5", cAlternateFileName="")) returned 1 [0167.409] wcscmp (_String1="EST5", _String2=".") returned 1 [0167.409] wcscmp (_String1="EST5", _String2="..") returned 1 [0167.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3edf9b8 [0167.409] wcscpy (in: _Dest=0x3edf9b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.409] wcscat (in: _Dest=0x3edf9b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.409] wcscat (in: _Dest=0x3edf9b8, _Source="EST5" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5" [0167.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3edf9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0167.410] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EST5EDT", cAlternateFileName="")) returned 1 [0167.410] wcscmp (_String1="EST5EDT", _String2=".") returned 1 [0167.410] wcscmp (_String1="EST5EDT", _String2="..") returned 1 [0167.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26008 [0167.411] wcscpy (in: _Dest=0x7a26008, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.411] wcscat (in: _Dest=0x7a26008, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.411] wcscat (in: _Dest=0x7a26008, _Source="EST5EDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" [0167.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0167.412] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HST10", cAlternateFileName="")) returned 1 [0167.412] wcscmp (_String1="HST10", _String2=".") returned 1 [0167.412] wcscmp (_String1="HST10", _String2="..") returned 1 [0167.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b98 [0167.412] wcscpy (in: _Dest=0x3ee0b98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.412] wcscat (in: _Dest=0x3ee0b98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.412] wcscat (in: _Dest=0x3ee0b98, _Source="HST10" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10" [0167.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0167.413] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7", cAlternateFileName="")) returned 1 [0167.413] wcscmp (_String1="MST7", _String2=".") returned 1 [0167.413] wcscmp (_String1="MST7", _String2="..") returned 1 [0167.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0f40 [0167.413] wcscpy (in: _Dest=0x3ee0f40, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.413] wcscat (in: _Dest=0x3ee0f40, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.413] wcscat (in: _Dest=0x3ee0f40, _Source="MST7" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7" [0167.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0167.414] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MST7MDT", cAlternateFileName="")) returned 1 [0167.414] wcscmp (_String1="MST7MDT", _String2=".") returned 1 [0167.414] wcscmp (_String1="MST7MDT", _String2="..") returned 1 [0167.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26b68 [0167.415] wcscpy (in: _Dest=0x7a26b68, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.415] wcscat (in: _Dest=0x7a26b68, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.415] wcscat (in: _Dest=0x7a26b68, _Source="MST7MDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" [0167.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0167.416] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8", cAlternateFileName="")) returned 1 [0167.416] wcscmp (_String1="PST8", _String2=".") returned 1 [0167.416] wcscmp (_String1="PST8", _String2="..") returned 1 [0167.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee0858 [0167.416] wcscpy (in: _Dest=0x3ee0858, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.416] wcscat (in: _Dest=0x3ee0858, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.416] wcscat (in: _Dest=0x3ee0858, _Source="PST8" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8" [0167.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee0858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0167.417] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PST8PDT", cAlternateFileName="")) returned 1 [0167.417] wcscmp (_String1="PST8PDT", _String2=".") returned 1 [0167.417] wcscmp (_String1="PST8PDT", _String2="..") returned 1 [0167.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a265b8 [0167.417] wcscpy (in: _Dest=0x7a265b8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.418] wcscat (in: _Dest=0x7a265b8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.418] wcscat (in: _Dest=0x7a265b8, _Source="PST8PDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" [0167.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a265b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0167.419] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9", cAlternateFileName="")) returned 1 [0167.419] wcscmp (_String1="YST9", _String2=".") returned 1 [0167.419] wcscmp (_String1="YST9", _String2="..") returned 1 [0167.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3ee1078 [0167.419] wcscpy (in: _Dest=0x3ee1078, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.419] wcscat (in: _Dest=0x3ee1078, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.419] wcscat (in: _Dest=0x3ee1078, _Source="YST9" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9" [0167.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ee1078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0167.420] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9YDT", cAlternateFileName="")) returned 1 [0167.420] wcscmp (_String1="YST9YDT", _String2=".") returned 1 [0167.420] wcscmp (_String1="YST9YDT", _String2="..") returned 1 [0167.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x64) returned 0x7a26d98 [0167.420] wcscpy (in: _Dest=0x7a26d98, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV" [0167.420] wcscat (in: _Dest=0x7a26d98, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\" [0167.420] wcscat (in: _Dest=0x7a26d98, _Source="YST9YDT" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" [0167.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a26d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0167.421] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6836c780, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x6836c780, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x6836c780, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YST9YDT", cAlternateFileName="")) returned 0 [0167.421] FindClose (in: hFindFile=0x7ad7170 | out: hFindFile=0x7ad7170) returned 1 [0167.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53fd8) returned 1 [0167.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 [0167.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 2258 os_tid = 0xde8 [0151.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\wet")) returned 0x20 [0153.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET", dwFileAttributes=0x20) returned 0 [0153.102] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\wet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.102] GetLastError () returned 0x5 [0153.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\WET", dwFileAttributes=0x20) returned 0 [0153.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48d70) returned 1 Thread: id = 2259 os_tid = 0xde4 [0151.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\zoneinfomappings")) returned 0x20 [0153.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings", dwFileAttributes=0x20) returned 0 [0153.104] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\zoneinfomappings"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.105] GetLastError () returned 0x5 [0153.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\ZoneInfoMappings", dwFileAttributes=0x20) returned 0 [0153.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a70) returned 1 Thread: id = 2260 os_tid = 0xeb0 [0151.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv")) returned 0x20 [0151.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv", dwFileAttributes=0x20) returned 0 [0153.475] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.476] GetLastError () returned 0x5 [0153.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv", dwFileAttributes=0x20) returned 0 [0153.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 2261 os_tid = 0xdd0 [0151.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat")) returned 0x20 [0153.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", dwFileAttributes=0x20) returned 0 [0153.059] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.059] GetLastError () returned 0x5 [0153.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", dwFileAttributes=0x20) returned 0 [0153.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 Thread: id = 2262 os_tid = 0xdd8 [0151.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf")) returned 0x20 [0151.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0151.052] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.053] GetLastError () returned 0x5 [0151.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0151.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 Thread: id = 2263 os_tid = 0xecc [0151.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf")) returned 0x20 [0151.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0151.054] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.055] GetLastError () returned 0x5 [0151.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0151.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6ad8) returned 1 Thread: id = 2264 os_tid = 0xed8 [0151.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf")) returned 0x20 [0151.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0151.058] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.059] GetLastError () returned 0x5 [0151.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0151.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40380) returned 1 Thread: id = 2265 os_tid = 0xe88 [0151.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf")) returned 0x20 [0154.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.146] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.952] GetLastError () returned 0x5 [0156.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0156.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 2266 os_tid = 0xee8 [0151.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf")) returned 0x20 [0156.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0156.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.447] GetLastError () returned 0x5 [0156.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0156.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c0b8) returned 1 Thread: id = 2267 os_tid = 0xe84 [0151.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf")) returned 0x20 [0154.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0155.147] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.954] GetLastError () returned 0x5 [0156.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0156.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 2268 os_tid = 0xeac [0151.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf")) returned 0x20 [0156.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0156.290] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.290] GetLastError () returned 0x5 [0156.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0156.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 Thread: id = 2269 os_tid = 0xde0 [0151.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf")) returned 0x20 [0156.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0156.449] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.449] GetLastError () returned 0x5 [0156.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0156.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 2270 os_tid = 0xe78 [0151.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf")) returned 0x20 [0156.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0156.955] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.956] GetLastError () returned 0x5 [0156.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0156.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40830) returned 1 Thread: id = 2271 os_tid = 0xe7c [0151.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf")) returned 0x20 [0153.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF", dwFileAttributes=0x20) returned 0 [0153.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.009] GetLastError () returned 0x5 [0153.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF", dwFileAttributes=0x20) returned 0 [0153.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5148) returned 1 Thread: id = 2272 os_tid = 0xe80 [0151.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf")) returned 0x20 [0153.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF", dwFileAttributes=0x20) returned 0 [0153.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.011] GetLastError () returned 0x5 [0153.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF", dwFileAttributes=0x20) returned 0 [0153.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64550) returned 1 Thread: id = 2273 os_tid = 0xe74 [0151.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf")) returned 0x20 [0153.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF", dwFileAttributes=0x20) returned 0 [0153.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.012] GetLastError () returned 0x5 [0153.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF", dwFileAttributes=0x20) returned 0 [0153.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a645e8) returned 1 Thread: id = 2274 os_tid = 0xe70 [0151.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf")) returned 0x20 [0153.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF", dwFileAttributes=0x20) returned 0 [0153.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.014] GetLastError () returned 0x5 [0153.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF", dwFileAttributes=0x20) returned 0 [0153.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64680) returned 1 Thread: id = 2275 os_tid = 0xeec [0151.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf")) returned 0x20 [0153.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF", dwFileAttributes=0x20) returned 0 [0153.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.016] GetLastError () returned 0x5 [0153.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF", dwFileAttributes=0x20) returned 0 [0153.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64718) returned 1 Thread: id = 2276 os_tid = 0xea8 [0151.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf")) returned 0x20 [0153.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF", dwFileAttributes=0x20) returned 0 [0153.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.017] GetLastError () returned 0x5 [0153.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF", dwFileAttributes=0x20) returned 0 [0153.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a648e0) returned 1 Thread: id = 2277 os_tid = 0xe9c [0151.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf")) returned 0x20 [0153.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF", dwFileAttributes=0x20) returned 0 [0153.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.018] GetLastError () returned 0x5 [0153.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF", dwFileAttributes=0x20) returned 0 [0153.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64978) returned 1 Thread: id = 2278 os_tid = 0xea0 [0151.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf")) returned 0x20 [0153.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF", dwFileAttributes=0x20) returned 0 [0153.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.020] GetLastError () returned 0x5 [0153.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF", dwFileAttributes=0x20) returned 0 [0153.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a644b8) returned 1 Thread: id = 2279 os_tid = 0xea4 [0151.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf")) returned 0x20 [0153.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF", dwFileAttributes=0x20) returned 0 [0153.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.022] GetLastError () returned 0x5 [0153.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF", dwFileAttributes=0x20) returned 0 [0153.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64420) returned 1 Thread: id = 2280 os_tid = 0xe98 [0151.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf")) returned 0x20 [0153.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF", dwFileAttributes=0x20) returned 0 [0153.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.023] GetLastError () returned 0x5 [0153.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF", dwFileAttributes=0x20) returned 0 [0153.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64388) returned 1 Thread: id = 2281 os_tid = 0xe94 [0151.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf")) returned 0x20 [0153.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF", dwFileAttributes=0x20) returned 0 [0153.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.025] GetLastError () returned 0x5 [0153.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF", dwFileAttributes=0x20) returned 0 [0153.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a642f0) returned 1 Thread: id = 2282 os_tid = 0xe50 [0151.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf")) returned 0x20 [0153.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF", dwFileAttributes=0x20) returned 0 [0153.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.026] GetLastError () returned 0x5 [0153.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF", dwFileAttributes=0x20) returned 0 [0153.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64258) returned 1 Thread: id = 2283 os_tid = 0xe4c [0151.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf")) returned 0x20 [0153.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF", dwFileAttributes=0x20) returned 0 [0153.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.028] GetLastError () returned 0x5 [0153.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF", dwFileAttributes=0x20) returned 0 [0153.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a641c0) returned 1 Thread: id = 2284 os_tid = 0xe54 [0151.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf")) returned 0x20 [0153.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF", dwFileAttributes=0x20) returned 0 [0153.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.029] GetLastError () returned 0x5 [0153.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF", dwFileAttributes=0x20) returned 0 [0153.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64128) returned 1 Thread: id = 2285 os_tid = 0xe40 [0151.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf")) returned 0x20 [0153.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF", dwFileAttributes=0x20) returned 0 [0153.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.031] GetLastError () returned 0x5 [0153.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF", dwFileAttributes=0x20) returned 0 [0153.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64090) returned 1 Thread: id = 2286 os_tid = 0xe48 [0151.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf")) returned 0x20 [0153.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF", dwFileAttributes=0x20) returned 0 [0153.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.032] GetLastError () returned 0x5 [0153.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF", dwFileAttributes=0x20) returned 0 [0153.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64848) returned 1 Thread: id = 2287 os_tid = 0xe3c [0151.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf")) returned 0x20 [0153.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF", dwFileAttributes=0x20) returned 0 [0153.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.034] GetLastError () returned 0x5 [0153.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF", dwFileAttributes=0x20) returned 0 [0153.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 Thread: id = 2288 os_tid = 0x150 [0151.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf")) returned 0x20 [0153.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF", dwFileAttributes=0x20) returned 0 [0153.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.036] GetLastError () returned 0x5 [0153.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF", dwFileAttributes=0x20) returned 0 [0153.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64b40) returned 1 Thread: id = 2289 os_tid = 0x11c [0151.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf")) returned 0x20 [0151.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF", dwFileAttributes=0x20) returned 0 [0151.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.756] GetLastError () returned 0x5 [0151.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF", dwFileAttributes=0x20) returned 0 [0151.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64bd8) returned 1 Thread: id = 2290 os_tid = 0xef8 [0151.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf")) returned 0x20 [0151.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF", dwFileAttributes=0x20) returned 0 [0151.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.758] GetLastError () returned 0x5 [0151.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF", dwFileAttributes=0x20) returned 0 [0151.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64c70) returned 1 Thread: id = 2291 os_tid = 0x530 [0151.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg")) returned 0x20 [0151.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0151.392] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.392] GetLastError () returned 0x5 [0151.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0151.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c98) returned 1 Thread: id = 2292 os_tid = 0x608 [0151.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg")) returned 0x20 [0151.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0151.394] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.394] GetLastError () returned 0x5 [0151.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0151.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6d30) returned 1 Thread: id = 2293 os_tid = 0x5c8 [0151.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif")) returned 0x20 [0151.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", dwFileAttributes=0x20) returned 0 [0151.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.396] GetLastError () returned 0x5 [0151.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", dwFileAttributes=0x20) returned 0 [0151.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f788) returned 1 Thread: id = 2294 os_tid = 0xf08 [0151.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif")) returned 0x20 [0151.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", dwFileAttributes=0x20) returned 0 [0151.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.399] GetLastError () returned 0x5 [0151.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", dwFileAttributes=0x20) returned 0 [0151.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 Thread: id = 2295 os_tid = 0xf04 [0151.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif")) returned 0x20 [0151.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", dwFileAttributes=0x20) returned 0 [0151.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.400] GetLastError () returned 0x5 [0151.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", dwFileAttributes=0x20) returned 0 [0151.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 Thread: id = 2296 os_tid = 0xf00 [0151.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif")) returned 0x20 [0151.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", dwFileAttributes=0x20) returned 0 [0151.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.403] GetLastError () returned 0x5 [0151.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", dwFileAttributes=0x20) returned 0 [0151.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3054050) returned 1 Thread: id = 2297 os_tid = 0x7ec [0151.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif")) returned 0x20 [0151.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", dwFileAttributes=0x20) returned 0 [0151.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.405] GetLastError () returned 0x5 [0151.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", dwFileAttributes=0x20) returned 0 [0151.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 Thread: id = 2298 os_tid = 0xef4 [0151.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif")) returned 0x20 [0156.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", dwFileAttributes=0x20) returned 0 [0156.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.485] GetLastError () returned 0x5 [0156.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", dwFileAttributes=0x20) returned 0 [0156.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053528) returned 1 Thread: id = 2299 os_tid = 0xf2c [0151.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif")) returned 0x20 [0153.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", dwFileAttributes=0x20) returned 0 [0154.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.475] GetLastError () returned 0x5 [0156.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", dwFileAttributes=0x20) returned 0 [0156.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 Thread: id = 2300 os_tid = 0xf40 [0151.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif")) returned 0x20 [0156.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", dwFileAttributes=0x20) returned 0 [0156.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.477] GetLastError () returned 0x5 [0156.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", dwFileAttributes=0x20) returned 0 [0156.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053870) returned 1 Thread: id = 2301 os_tid = 0x15c [0151.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif")) returned 0x20 [0156.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", dwFileAttributes=0x20) returned 0 [0156.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.291] GetLastError () returned 0x5 [0156.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", dwFileAttributes=0x20) returned 0 [0156.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052fe8) returned 1 Thread: id = 2302 os_tid = 0x5f4 [0151.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif")) returned 0x20 [0156.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", dwFileAttributes=0x20) returned 0 [0156.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.478] GetLastError () returned 0x5 [0156.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", dwFileAttributes=0x20) returned 0 [0156.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053138) returned 1 Thread: id = 2303 os_tid = 0x778 [0151.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif")) returned 0x20 [0156.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", dwFileAttributes=0x20) returned 0 [0156.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.480] GetLastError () returned 0x5 [0156.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", dwFileAttributes=0x20) returned 0 [0156.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053b10) returned 1 Thread: id = 2304 os_tid = 0x300 [0151.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif")) returned 0x20 [0156.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", dwFileAttributes=0x20) returned 0 [0156.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.092] GetLastError () returned 0x5 [0156.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", dwFileAttributes=0x20) returned 0 [0156.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053c60) returned 1 Thread: id = 2305 os_tid = 0x7c8 [0151.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif")) returned 0x20 [0156.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", dwFileAttributes=0x20) returned 0 [0156.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.481] GetLastError () returned 0x5 [0156.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", dwFileAttributes=0x20) returned 0 [0156.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 Thread: id = 2306 os_tid = 0x14c [0151.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf")) returned 0x20 [0151.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0151.705] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.705] GetLastError () returned 0x5 [0151.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0151.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d8) returned 1 Thread: id = 2307 os_tid = 0x490 [0151.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf")) returned 0x20 [0151.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0151.703] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.703] GetLastError () returned 0x5 [0151.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0151.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6740) returned 1 Thread: id = 2308 os_tid = 0xfb0 [0151.411] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e8QRk nKoJh8vyWNATkg.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\e8qrk nkojh8vywnatkg.wav")) returned 0x20 [0151.411] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e8QRk nKoJh8vyWNATkg.wav", dwFileAttributes=0x20) returned 1 [0153.505] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e8QRk nKoJh8vyWNATkg.wav" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\e8qrk nkojh8vywnatkg.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x24dc [0153.505] GetFileSizeEx (in: hFile=0x24dc, lpFileSize=0xcb4fac4 | out: lpFileSize=0xcb4fac4*=10821) returned 1 [0153.505] SetFilePointerEx (in: hFile=0x24dc, liDistanceToMove=0x2a41, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.505] ReadFile (in: hFile=0x24dc, lpBuffer=0xcb4faa0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcb4fab0, lpOverlapped=0x0 | out: lpBuffer=0xcb4faa0*, lpNumberOfBytesRead=0xcb4fab0*=0x4, lpOverlapped=0x0) returned 1 [0153.506] SetFilePointerEx (in: hFile=0x24dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0153.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0153.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35d8 [0153.507] NtQuerySystemTime (in: CurrentTime=0xcb4fa38 | out: CurrentTime=0xcb4fa38*=132462177322392000) returned 0x0 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x425a4ec0 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x311c3119 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x6d54d30a [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x6d28c6c2 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x55a6763a [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x2d4a2713 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x71a8dcaf [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x7799ca97 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x1f6012c6 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x2dc98301 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x5417bbcf [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x45ea9522 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x6337d0b1 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x7258ad1f [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x5e379aff [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0xcbf3ba [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x35151c84 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x7654c6b6 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x4c18bcb8 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x6f649430 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x7c893cbb [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x55ccca10 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x49d04ffe [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x5fd07e34 [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x4351255c [0153.507] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x454bf5dd [0153.508] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0xba496c8 [0153.508] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x42c3a4a2 [0153.508] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x1db0e1e3 [0153.508] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x305b690 [0153.508] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x7309d1b3 [0153.508] RtlRandomEx (in: Seed=0xcb4fa30 | out: Seed=0xcb4fa30) returned 0x543dadf [0153.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0153.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0153.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0153.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0153.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35d8) returned 1 [0153.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0153.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08460 [0153.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0153.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0153.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0153.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0153.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0153.518] ReadFile (in: hFile=0x24dc, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x2a45, lpNumberOfBytesRead=0xcb4fa2c, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0xcb4fa2c*=0x2a45, lpOverlapped=0x0) returned 1 [0153.518] SetFilePointerEx (in: hFile=0x24dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.518] WriteFile (in: hFile=0x24dc, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x2a45, lpNumberOfBytesWritten=0xcb4fa30, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0xcb4fa30*=0x2a45, lpOverlapped=0x0) returned 1 [0155.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54138 [0155.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0155.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54188) returned 1 [0155.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0155.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0155.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0155.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08460) returned 1 [0155.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e08460 [0155.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdc68 [0155.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0155.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0155.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54188) returned 1 [0155.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x7a25bc0 [0155.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0155.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0155.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0155.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0155.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdc68) returned 1 [0155.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9b98 [0155.483] SetFilePointerEx (in: hFile=0x24dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0155.483] WriteFile (in: hFile=0x24dc, lpBuffer=0x3ec9b98*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xcb4fab8, lpOverlapped=0x0 | out: lpBuffer=0x3ec9b98*, lpNumberOfBytesWritten=0xcb4fab8*=0x122, lpOverlapped=0x0) returned 1 [0155.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdc68 [0155.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0155.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0155.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0155.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79720 [0155.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0155.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ff8 [0155.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ff8) returned 1 [0155.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0155.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdc68) returned 1 [0155.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a267e8 [0155.485] sprintf (in: _Dest=0x7a267e8, _Format="%c%c" | out: _Dest="a4") returned 2 [0155.485] sprintf (in: _Dest=0x7a267ea, _Format="%c%c" | out: _Dest="5f") returned 2 [0155.485] sprintf (in: _Dest=0x7a267ec, _Format="%c%c" | out: _Dest="eb") returned 2 [0155.485] sprintf (in: _Dest=0x7a267ee, _Format="%c%c" | out: _Dest="6f") returned 2 [0155.485] sprintf (in: _Dest=0x7a267f0, _Format="%c%c" | out: _Dest="81") returned 2 [0155.485] sprintf (in: _Dest=0x7a267f2, _Format="%c%c" | out: _Dest="a7") returned 2 [0155.485] sprintf (in: _Dest=0x7a267f4, _Format="%c%c" | out: _Dest="89") returned 2 [0155.485] sprintf (in: _Dest=0x7a267f6, _Format="%c%c" | out: _Dest="47") returned 2 [0155.485] sprintf (in: _Dest=0x7a267f8, _Format="%c%c" | out: _Dest="4c") returned 2 [0155.486] sprintf (in: _Dest=0x7a267fa, _Format="%c%c" | out: _Dest="bf") returned 2 [0155.486] sprintf (in: _Dest=0x7a267fc, _Format="%c%c" | out: _Dest="a7") returned 2 [0155.486] sprintf (in: _Dest=0x7a267fe, _Format="%c%c" | out: _Dest="cf") returned 2 [0155.486] sprintf (in: _Dest=0x7a26800, _Format="%c%c" | out: _Dest="78") returned 2 [0155.486] sprintf (in: _Dest=0x7a26802, _Format="%c%c" | out: _Dest="6c") returned 2 [0155.486] sprintf (in: _Dest=0x7a26804, _Format="%c%c" | out: _Dest="a9") returned 2 [0155.486] sprintf (in: _Dest=0x7a26806, _Format="%c%c" | out: _Dest="3e") returned 2 [0155.486] sprintf (in: _Dest=0x7a26808, _Format="%c%c" | out: _Dest="d4") returned 2 [0155.486] sprintf (in: _Dest=0x7a2680a, _Format="%c%c" | out: _Dest="97") returned 2 [0155.486] sprintf (in: _Dest=0x7a2680c, _Format="%c%c" | out: _Dest="fa") returned 2 [0155.486] sprintf (in: _Dest=0x7a2680e, _Format="%c%c" | out: _Dest="59") returned 2 [0155.486] sprintf (in: _Dest=0x7a26810, _Format="%c%c" | out: _Dest="72") returned 2 [0155.486] sprintf (in: _Dest=0x7a26812, _Format="%c%c" | out: _Dest="ce") returned 2 [0155.486] sprintf (in: _Dest=0x7a26814, _Format="%c%c" | out: _Dest="47") returned 2 [0155.486] sprintf (in: _Dest=0x7a26816, _Format="%c%c" | out: _Dest="08") returned 2 [0155.486] sprintf (in: _Dest=0x7a26818, _Format="%c%c" | out: _Dest="44") returned 2 [0155.486] sprintf (in: _Dest=0x7a2681a, _Format="%c%c" | out: _Dest="c7") returned 2 [0155.486] sprintf (in: _Dest=0x7a2681c, _Format="%c%c" | out: _Dest="19") returned 2 [0155.486] sprintf (in: _Dest=0x7a2681e, _Format="%c%c" | out: _Dest="b8") returned 2 [0155.487] sprintf (in: _Dest=0x7a26820, _Format="%c%c" | out: _Dest="ff") returned 2 [0155.487] sprintf (in: _Dest=0x7a26822, _Format="%c%c" | out: _Dest="59") returned 2 [0155.487] sprintf (in: _Dest=0x7a26824, _Format="%c%c" | out: _Dest="33") returned 2 [0155.487] sprintf (in: _Dest=0x7a26826, _Format="%c%c" | out: _Dest="46") returned 2 [0155.487] sprintf (in: _Dest=0x7a26828, _Format="%c%c" | out: _Dest="ce") returned 2 [0155.487] sprintf (in: _Dest=0x7a2682a, _Format="%c%c" | out: _Dest="9b") returned 2 [0155.487] sprintf (in: _Dest=0x7a2682c, _Format="%c%c" | out: _Dest="f7") returned 2 [0155.487] sprintf (in: _Dest=0x7a2682e, _Format="%c%c" | out: _Dest="28") returned 2 [0155.487] sprintf (in: _Dest=0x7a26830, _Format="%c%c" | out: _Dest="ab") returned 2 [0155.487] sprintf (in: _Dest=0x7a26832, _Format="%c%c" | out: _Dest="66") returned 2 [0155.487] sprintf (in: _Dest=0x7a26834, _Format="%c%c" | out: _Dest="28") returned 2 [0155.487] sprintf (in: _Dest=0x7a26836, _Format="%c%c" | out: _Dest="79") returned 2 [0155.487] sprintf (in: _Dest=0x7a26838, _Format="%c%c" | out: _Dest="e5") returned 2 [0155.487] sprintf (in: _Dest=0x7a2683a, _Format="%c%c" | out: _Dest="a0") returned 2 [0155.487] sprintf (in: _Dest=0x7a2683c, _Format="%c%c" | out: _Dest="51") returned 2 [0155.487] sprintf (in: _Dest=0x7a2683e, _Format="%c%c" | out: _Dest="d8") returned 2 [0155.487] sprintf (in: _Dest=0x7a26840, _Format="%c%c" | out: _Dest="0c") returned 2 [0155.487] sprintf (in: _Dest=0x7a26842, _Format="%c%c" | out: _Dest="b0") returned 2 [0155.487] sprintf (in: _Dest=0x7a26844, _Format="%c%c" | out: _Dest="eb") returned 2 [0155.487] sprintf (in: _Dest=0x7a26846, _Format="%c%c" | out: _Dest="bc") returned 2 [0155.487] RtlInitAnsiString (in: DestinationString=0xcb4fa40, SourceString="a45feb6f81a789474cbfa7cf786ca93ed497fa5972ce470844c719b8ff593346ce9bf728ab662879e5a051d80cb0ebbc" | out: DestinationString="a45feb6f81a789474cbfa7cf786ca93ed497fa5972ce470844c719b8ff593346ce9bf728ab662879e5a051d80cb0ebbc") [0155.487] RtlAnsiStringToUnicodeString (in: DestinationString=0xcb4fa38, SourceString="a45feb6f81a789474cbfa7cf786ca93ed497fa5972ce470844c719b8ff593346ce9bf728ab662879e5a051d80cb0ebbc", AllocateDestinationString=1 | out: DestinationString="a45feb6f81a789474cbfa7cf786ca93ed497fa5972ce470844c719b8ff593346ce9bf728ab662879e5a051d80cb0ebbc") returned 0x0 [0155.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85700 [0155.488] RtlFreeAnsiString (AnsiString="a") [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a267e8) returned 1 [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9b98) returned 1 [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25bc0) returned 1 [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54188) returned 1 [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08460) returned 1 [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54138) returned 1 [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0155.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0155.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37cd8 [0155.488] wcscat (in: _Dest=0x3e37cd8, _Source="a45feb6f81a789474cbfa7cf" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\a45feb6f81a789474cbfa7cf") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\a45feb6f81a789474cbfa7cf" [0155.488] wcscat (in: _Dest=0x3e37cd8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\a45feb6f81a789474cbfa7cf.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\a45feb6f81a789474cbfa7cf.68814f" [0155.488] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\a45feb6f81a789474cbfa7cf.68814f", NtPathName=0xcb4fa30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\a45feb6f81a789474cbfa7cf.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3daf9e8 [0155.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf9e8) returned 1 [0155.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b8b8) returned 1 [0155.499] NtQueryInformationFile (in: FileHandle=0x24dc, IoStatusBlock=0xcb4fa08, FileInformation=0xcb4fa10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcb4fa08, FileInformation=0xcb4fa10) returned 0x0 [0155.499] NtSetInformationFile (FileHandle=0x24dc, IoStatusBlock=0xcb4fa08, FileInformation=0xcb4fa10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0155.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37cd8) returned 1 [0155.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 [0155.501] FlushFileBuffers (hFile=0x24dc) returned 1 [0155.609] CloseHandle (hObject=0x24dc) returned 1 [0155.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66858 [0155.807] wcscpy (in: _Dest=0x3e66858, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0155.807] wcscat (in: _Dest=0x3e66858, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" [0155.807] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\68814f-readme.txt")) returned 0x20 [0155.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 [0155.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d408f8) returned 1 Thread: id = 2309 os_tid = 0x32c [0151.412] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\H5UeJsqg7s156.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\h5uejsqg7s156.mp3")) returned 0x20 [0151.412] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\H5UeJsqg7s156.mp3", dwFileAttributes=0x20) returned 1 [0153.999] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\H5UeJsqg7s156.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\h5uejsqg7s156.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2058 [0153.999] GetFileSizeEx (in: hFile=0x2058, lpFileSize=0xc6dfc0c | out: lpFileSize=0xc6dfc0c*=63587) returned 1 [0154.000] SetFilePointerEx (in: hFile=0x2058, liDistanceToMove=0xf85f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.000] ReadFile (in: hFile=0x2058, lpBuffer=0xc6dfbe8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc6dfbf8, lpOverlapped=0x0 | out: lpBuffer=0xc6dfbe8*, lpNumberOfBytesRead=0xc6dfbf8*=0x4, lpOverlapped=0x0) returned 1 [0154.002] SetFilePointerEx (in: hFile=0x2058, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0154.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0154.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0154.002] NtQuerySystemTime (in: CurrentTime=0xc6dfb80 | out: CurrentTime=0xc6dfb80*=132462177326448000) returned 0x0 [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x3c8e307c [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x47ca4f7d [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x5b345d7f [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x75c3d385 [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x60e8726b [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x5c0c9ee5 [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x929f37e [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x634f1d13 [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x6d7c405f [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x78bf2464 [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x11417d4d [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x4d437906 [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x75ae80db [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x4d560cfb [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x2630d45d [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x54953ea2 [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x7acb4465 [0154.002] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x213a9c15 [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x2cc4cc02 [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x3917fb7d [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x14662323 [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x1d3ca60f [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x78e9fe03 [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x44581a80 [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x4c8bd20d [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x172fc115 [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x601719c8 [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x358652a0 [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x3fb51e7e [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x3e009703 [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x533b1243 [0154.003] RtlRandomEx (in: Seed=0xc6dfb78 | out: Seed=0xc6dfb78) returned 0x2b4afc27 [0154.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0154.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0154.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0154.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0154.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0154.039] SetFilePointerEx (in: hFile=0x2058, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.039] ReadFile (in: hFile=0x2058, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc6dfb80, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0xc6dfb80*=0x3c00, lpOverlapped=0x0) returned 1 [0154.039] SetFilePointerEx (in: hFile=0x2058, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0154.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0154.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0154.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0154.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0154.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0154.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.040] WriteFile (in: hFile=0x2058, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc6dfb80, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0xc6dfb80*=0x3c00, lpOverlapped=0x0) returned 1 [0154.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0154.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0154.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3dac3b0 [0154.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49a88 [0154.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0154.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0154.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d78) returned 1 [0154.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3dac3e8 [0154.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0154.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0154.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d28) returned 1 [0154.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0154.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0154.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d54dd8 [0154.137] SetFilePointerEx (in: hFile=0x2058, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.137] WriteFile (in: hFile=0x2058, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xc6dfc00, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0xc6dfc00*=0x114, lpOverlapped=0x0) returned 1 [0154.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0154.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0154.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86c38 [0154.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0154.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0154.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0154.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e84ad8 [0154.173] sprintf (in: _Dest=0x3e84ad8, _Format="%c%c" | out: _Dest="f4") returned 2 [0154.173] sprintf (in: _Dest=0x3e84ada, _Format="%c%c" | out: _Dest="13") returned 2 [0154.173] sprintf (in: _Dest=0x3e84adc, _Format="%c%c" | out: _Dest="28") returned 2 [0154.173] sprintf (in: _Dest=0x3e84ade, _Format="%c%c" | out: _Dest="4d") returned 2 [0154.173] sprintf (in: _Dest=0x3e84ae0, _Format="%c%c" | out: _Dest="36") returned 2 [0154.173] sprintf (in: _Dest=0x3e84ae2, _Format="%c%c" | out: _Dest="e4") returned 2 [0154.173] sprintf (in: _Dest=0x3e84ae4, _Format="%c%c" | out: _Dest="73") returned 2 [0154.173] sprintf (in: _Dest=0x3e84ae6, _Format="%c%c" | out: _Dest="60") returned 2 [0154.173] sprintf (in: _Dest=0x3e84ae8, _Format="%c%c" | out: _Dest="68") returned 2 [0154.173] sprintf (in: _Dest=0x3e84aea, _Format="%c%c" | out: _Dest="61") returned 2 [0154.174] sprintf (in: _Dest=0x3e84aec, _Format="%c%c" | out: _Dest="4f") returned 2 [0154.174] sprintf (in: _Dest=0x3e84aee, _Format="%c%c" | out: _Dest="ca") returned 2 [0154.174] sprintf (in: _Dest=0x3e84af0, _Format="%c%c" | out: _Dest="43") returned 2 [0154.174] sprintf (in: _Dest=0x3e84af2, _Format="%c%c" | out: _Dest="78") returned 2 [0154.174] sprintf (in: _Dest=0x3e84af4, _Format="%c%c" | out: _Dest="67") returned 2 [0154.174] sprintf (in: _Dest=0x3e84af6, _Format="%c%c" | out: _Dest="28") returned 2 [0154.174] sprintf (in: _Dest=0x3e84af8, _Format="%c%c" | out: _Dest="88") returned 2 [0154.174] sprintf (in: _Dest=0x3e84afa, _Format="%c%c" | out: _Dest="61") returned 2 [0154.174] sprintf (in: _Dest=0x3e84afc, _Format="%c%c" | out: _Dest="fd") returned 2 [0154.174] sprintf (in: _Dest=0x3e84afe, _Format="%c%c" | out: _Dest="4b") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b00, _Format="%c%c" | out: _Dest="7d") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b02, _Format="%c%c" | out: _Dest="ec") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b04, _Format="%c%c" | out: _Dest="ed") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b06, _Format="%c%c" | out: _Dest="c0") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b08, _Format="%c%c" | out: _Dest="c7") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b0a, _Format="%c%c" | out: _Dest="d3") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b0c, _Format="%c%c" | out: _Dest="df") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b0e, _Format="%c%c" | out: _Dest="98") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b10, _Format="%c%c" | out: _Dest="d4") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b12, _Format="%c%c" | out: _Dest="32") returned 2 [0154.174] sprintf (in: _Dest=0x3e84b14, _Format="%c%c" | out: _Dest="f7") returned 2 [0154.175] sprintf (in: _Dest=0x3e84b16, _Format="%c%c" | out: _Dest="6a") returned 2 [0154.175] sprintf (in: _Dest=0x3e84b18, _Format="%c%c" | out: _Dest="26") returned 2 [0154.175] sprintf (in: _Dest=0x3e84b1a, _Format="%c%c" | out: _Dest="ca") returned 2 [0154.175] RtlInitAnsiString (in: DestinationString=0xc6dfb88, SourceString="f413284d36e4736068614fca437867288861fd4b7decedc0c7d3df98d432f76a26ca" | out: DestinationString="f413284d36e4736068614fca437867288861fd4b7decedc0c7d3df98d432f76a26ca") [0154.175] RtlAnsiStringToUnicodeString (in: DestinationString=0xc6dfb80, SourceString="f413284d36e4736068614fca437867288861fd4b7decedc0c7d3df98d432f76a26ca", AllocateDestinationString=1 | out: DestinationString="f413284d36e4736068614fca437867288861fd4b7decedc0c7d3df98d432f76a26ca") returned 0x0 [0154.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a644b8 [0154.175] RtlFreeAnsiString (AnsiString="f") [0154.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84ad8) returned 1 [0154.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0154.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0154.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0154.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3e8) returned 1 [0154.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d78) returned 1 [0154.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0154.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0154.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0154.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0154.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0154.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40ce0 [0154.176] wcscat (in: _Dest=0x3d40ce0, _Source="f413284d36e473606" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\f413284d36e473606") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\f413284d36e473606" [0154.176] wcscat (in: _Dest=0x3d40ce0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\f413284d36e473606.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\f413284d36e473606.68814f" [0154.176] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\f413284d36e473606.68814f", NtPathName=0xc6dfb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\f413284d36e473606.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8488 [0154.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 [0154.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f368f0) returned 1 [0154.286] NtQueryInformationFile (in: FileHandle=0x2058, IoStatusBlock=0xc6dfb50, FileInformation=0xc6dfb58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc6dfb50, FileInformation=0xc6dfb58) returned 0x0 [0154.286] NtSetInformationFile (FileHandle=0x2058, IoStatusBlock=0xc6dfb50, FileInformation=0xc6dfb58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ce0) returned 1 [0154.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a644b8) returned 1 [0154.290] FlushFileBuffers (hFile=0x2058) returned 1 [0154.304] CloseHandle (hObject=0x2058) returned 1 [0154.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66198 [0154.304] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0154.305] wcscat (in: _Dest=0x3e66198, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" [0154.305] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\68814f-readme.txt")) returned 0x20 [0154.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0154.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6ad8) returned 1 Thread: id = 2310 os_tid = 0x3c4 [0151.413] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\Q4rBw.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\q4rbw.mp3")) returned 0x20 [0151.413] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\Q4rBw.mp3", dwFileAttributes=0x20) returned 1 [0154.046] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\Q4rBw.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\q4rbw.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2084 [0154.046] GetFileSizeEx (in: hFile=0x2084, lpFileSize=0xcd0fdec | out: lpFileSize=0xcd0fdec*=5749) returned 1 [0154.046] SetFilePointerEx (in: hFile=0x2084, liDistanceToMove=0x1671, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.046] ReadFile (in: hFile=0x2084, lpBuffer=0xcd0fdc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcd0fdd8, lpOverlapped=0x0 | out: lpBuffer=0xcd0fdc8*, lpNumberOfBytesRead=0xcd0fdd8*=0x4, lpOverlapped=0x0) returned 1 [0154.048] SetFilePointerEx (in: hFile=0x2084, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0154.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0154.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0154.048] NtQuerySystemTime (in: CurrentTime=0xcd0fd60 | out: CurrentTime=0xcd0fd60*=132462177326916000) returned 0x0 [0154.048] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x3597c6e3 [0154.048] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x7f8c237c [0154.048] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x70aa046b [0154.048] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x53220610 [0154.048] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0xe2d8ee4 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x2aed9454 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x59b75297 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x1109710b [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x609ede44 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x6647a2e3 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x4ec266b9 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x6114acc3 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x12ed9ca5 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x43e73da1 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x7e805565 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x55ba1c8a [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x60ffec6c [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x30e72100 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x7b8fbbec [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x72aa2c4a [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x69888c41 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x3d8a9c6e [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x4f774078 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x16516cc9 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x2e6d65b2 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x54afbeb8 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x3bbf57df [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x68bc27aa [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x2e01601e [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x5ea46c46 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x372bf6f5 [0154.049] RtlRandomEx (in: Seed=0xcd0fd58 | out: Seed=0xcd0fd58) returned 0x628bed02 [0154.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0154.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0154.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0154.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0154.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0154.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0154.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0154.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0154.060] ReadFile (in: hFile=0x2084, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x1675, lpNumberOfBytesRead=0xcd0fd54, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0xcd0fd54*=0x1675, lpOverlapped=0x0) returned 1 [0154.060] SetFilePointerEx (in: hFile=0x2084, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.060] WriteFile (in: hFile=0x2084, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x1675, lpNumberOfBytesWritten=0xcd0fd58, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0xcd0fd58*=0x1675, lpOverlapped=0x0) returned 1 [0154.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0154.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c38 [0154.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c38) returned 1 [0154.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0154.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0154.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c38 [0154.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0154.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0154.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0154.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ee0 [0154.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f30 [0154.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f30) returned 1 [0154.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x3dec940 [0154.141] SetFilePointerEx (in: hFile=0x2084, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.141] WriteFile (in: hFile=0x2084, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xcd0fde0, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xcd0fde0*=0x104, lpOverlapped=0x0) returned 1 [0154.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0154.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0154.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x3e81f80 [0154.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0154.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0154.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0154.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x25) returned 0x3e86c38 [0154.185] sprintf (in: _Dest=0x3e86c38, _Format="%c%c" | out: _Dest="3f") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c3a, _Format="%c%c" | out: _Dest="5a") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c3c, _Format="%c%c" | out: _Dest="d6") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c3e, _Format="%c%c" | out: _Dest="99") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c40, _Format="%c%c" | out: _Dest="a2") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c42, _Format="%c%c" | out: _Dest="4f") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c44, _Format="%c%c" | out: _Dest="cf") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c46, _Format="%c%c" | out: _Dest="ea") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c48, _Format="%c%c" | out: _Dest="97") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c4a, _Format="%c%c" | out: _Dest="ba") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c4c, _Format="%c%c" | out: _Dest="f5") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c4e, _Format="%c%c" | out: _Dest="f4") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c50, _Format="%c%c" | out: _Dest="d4") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c52, _Format="%c%c" | out: _Dest="da") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c54, _Format="%c%c" | out: _Dest="e8") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c56, _Format="%c%c" | out: _Dest="ff") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c58, _Format="%c%c" | out: _Dest="12") returned 2 [0154.185] sprintf (in: _Dest=0x3e86c5a, _Format="%c%c" | out: _Dest="61") returned 2 [0154.186] RtlInitAnsiString (in: DestinationString=0xcd0fd68, SourceString="3f5ad699a24fcfea97baf5f4d4dae8ff1261" | out: DestinationString="3f5ad699a24fcfea97baf5f4d4dae8ff1261") [0154.186] RtlAnsiStringToUnicodeString (in: DestinationString=0xcd0fd60, SourceString="3f5ad699a24fcfea97baf5f4d4dae8ff1261", AllocateDestinationString=1 | out: DestinationString="3f5ad699a24fcfea97baf5f4d4dae8ff1261") returned 0x0 [0154.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x3d48690 [0154.186] RtlFreeAnsiString (AnsiString="3") [0154.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0154.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81f80) returned 1 [0154.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0154.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0154.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0154.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ee0) returned 1 [0154.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c38) returned 1 [0154.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d28) returned 1 [0154.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0154.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0154.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0154.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaebc0 [0154.187] wcscat (in: _Dest=0x3eaebc0, _Source="3f5ad699a" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\3f5ad699a") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\3f5ad699a" [0154.187] wcscat (in: _Dest=0x3eaebc0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\3f5ad699a.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\3f5ad699a.68814f" [0154.187] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\3f5ad699a.68814f", NtPathName=0xcd0fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\3f5ad699a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3036d70 [0154.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036d70) returned 1 [0154.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37c58) returned 1 [0154.255] NtQueryInformationFile (in: FileHandle=0x2084, IoStatusBlock=0xcd0fd30, FileInformation=0xcd0fd38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcd0fd30, FileInformation=0xcd0fd38) returned 0x0 [0154.255] NtSetInformationFile (FileHandle=0x2084, IoStatusBlock=0xcd0fd30, FileInformation=0xcd0fd38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaebc0) returned 1 [0154.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48690) returned 1 [0154.258] FlushFileBuffers (hFile=0x2084) returned 1 [0154.263] CloseHandle (hObject=0x2084) returned 1 [0154.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66318 [0154.264] wcscpy (in: _Dest=0x3e66318, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0154.264] wcscat (in: _Dest=0x3e66318, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" [0154.264] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\68814f-readme.txt")) returned 0xffffffff [0154.264] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2084 [0154.265] WriteFile (in: hFile=0x2084, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcd0fd74, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcd0fd74*=0x8b9, lpOverlapped=0x0) returned 1 [0154.267] CloseHandle (hObject=0x2084) returned 1 [0154.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 [0154.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f8d8) returned 1 Thread: id = 2311 os_tid = 0x7e0 [0151.413] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\vq8sfX.m4a" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\vq8sfx.m4a")) returned 0x20 [0151.413] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\vq8sfX.m4a", dwFileAttributes=0x20) returned 1 [0154.061] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\vq8sfX.m4a" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\vq8sfx.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2138 [0154.061] GetFileSizeEx (in: hFile=0x2138, lpFileSize=0xccaf8fc | out: lpFileSize=0xccaf8fc*=87927) returned 1 [0154.061] SetFilePointerEx (in: hFile=0x2138, liDistanceToMove=0x15773, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.061] ReadFile (in: hFile=0x2138, lpBuffer=0xccaf8d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xccaf8e8, lpOverlapped=0x0 | out: lpBuffer=0xccaf8d8*, lpNumberOfBytesRead=0xccaf8e8*=0x4, lpOverlapped=0x0) returned 1 [0154.063] SetFilePointerEx (in: hFile=0x2138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0154.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0154.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0154.063] NtQuerySystemTime (in: CurrentTime=0xccaf870 | out: CurrentTime=0xccaf870*=132462177327072000) returned 0x0 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x5737c6f3 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x3b7bb2bc [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x35c12dc6 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x39bdaa68 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x7cb221ef [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x2440328 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x1a65b76b [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0xce349da [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x6297d064 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x5f5b1db8 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x7bd6c2 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x6d8cd90e [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x63ff59c6 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x6e97e757 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x1d8e89ae [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x29e10645 [0154.063] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x22c535c1 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x25578472 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x656eb043 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0xc048bfb [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x5402113b [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x23f56185 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x383b2059 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x2ac64581 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x24d91a3a [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x4b3eadd3 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x32b34d16 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x7899a190 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x3898d000 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x7b06ec32 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x15d1dfc9 [0154.064] RtlRandomEx (in: Seed=0xccaf868 | out: Seed=0xccaf868) returned 0x488e3a82 [0154.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0154.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0154.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0154.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0154.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0154.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0154.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c143e0 [0154.074] SetFilePointerEx (in: hFile=0x2138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.075] ReadFile (in: hFile=0x2138, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xccaf870, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0xccaf870*=0x3c00, lpOverlapped=0x0) returned 1 [0154.075] SetFilePointerEx (in: hFile=0x2138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e854b8 [0154.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0154.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0154.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0154.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0154.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0154.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0154.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0154.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0154.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e854b8) returned 1 [0154.076] WriteFile (in: hFile=0x2138, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xccaf870, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0xccaf870*=0x3c00, lpOverlapped=0x0) returned 1 [0154.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0154.143] SetFilePointerEx (in: hFile=0x2138, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.143] ReadFile (in: hFile=0x2138, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xccaf870, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0xccaf870*=0x3c00, lpOverlapped=0x0) returned 1 [0154.143] SetFilePointerEx (in: hFile=0x2138, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f30 [0154.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f30) returned 1 [0154.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0154.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f30 [0154.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0154.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0154.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.144] WriteFile (in: hFile=0x2138, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xccaf870, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0xccaf870*=0x3c00, lpOverlapped=0x0) returned 1 [0154.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0154.148] SetFilePointerEx (in: hFile=0x2138, liDistanceToMove=0x11b77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.148] ReadFile (in: hFile=0x2138, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xccaf870, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0xccaf870*=0x3c00, lpOverlapped=0x0) returned 1 [0154.149] SetFilePointerEx (in: hFile=0x2138, liDistanceToMove=0x11b77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0154.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cd8) returned 1 [0154.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0154.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0154.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b98 [0154.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b98) returned 1 [0154.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.150] WriteFile (in: hFile=0x2138, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xccaf870, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0xccaf870*=0x3c00, lpOverlapped=0x0) returned 1 [0154.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0154.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3edf9b8 [0154.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cd8) returned 1 [0154.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f30) returned 1 [0154.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0154.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0154.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e86878 [0154.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0154.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0154.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x3e868d8 [0154.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0154.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0154.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0154.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x146) returned 0x3e0ac18 [0154.161] SetFilePointerEx (in: hFile=0x2138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.161] WriteFile (in: hFile=0x2138, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0xccaf8f0, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0xccaf8f0*=0x146, lpOverlapped=0x0) returned 1 [0154.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0154.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0154.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81f80 [0154.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0154.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0154.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0154.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3dac3b0 [0154.197] sprintf (in: _Dest=0x3dac3b0, _Format="%c%c" | out: _Dest="4a") returned 2 [0154.197] sprintf (in: _Dest=0x3dac3b2, _Format="%c%c" | out: _Dest="48") returned 2 [0154.197] sprintf (in: _Dest=0x3dac3b4, _Format="%c%c" | out: _Dest="70") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3b6, _Format="%c%c" | out: _Dest="38") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3b8, _Format="%c%c" | out: _Dest="a6") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3ba, _Format="%c%c" | out: _Dest="31") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3bc, _Format="%c%c" | out: _Dest="e9") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3be, _Format="%c%c" | out: _Dest="f9") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3c0, _Format="%c%c" | out: _Dest="ac") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3c2, _Format="%c%c" | out: _Dest="0c") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3c4, _Format="%c%c" | out: _Dest="81") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3c6, _Format="%c%c" | out: _Dest="22") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3c8, _Format="%c%c" | out: _Dest="e8") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3ca, _Format="%c%c" | out: _Dest="6a") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3cc, _Format="%c%c" | out: _Dest="df") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3ce, _Format="%c%c" | out: _Dest="ed") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3d0, _Format="%c%c" | out: _Dest="6f") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3d2, _Format="%c%c" | out: _Dest="19") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3d4, _Format="%c%c" | out: _Dest="d5") returned 2 [0154.198] sprintf (in: _Dest=0x3dac3d6, _Format="%c%c" | out: _Dest="63") returned 2 [0154.198] RtlInitAnsiString (in: DestinationString=0xccaf878, SourceString="4a487038a631e9f9ac0c8122e86adfed6f19d563" | out: DestinationString="4a487038a631e9f9ac0c8122e86adfed6f19d563") [0154.198] RtlAnsiStringToUnicodeString (in: DestinationString=0xccaf870, SourceString="4a487038a631e9f9ac0c8122e86adfed6f19d563", AllocateDestinationString=1 | out: DestinationString="4a487038a631e9f9ac0c8122e86adfed6f19d563") returned 0x0 [0154.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6f08 [0154.199] RtlFreeAnsiString (AnsiString="4") [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dac3b0) returned 1 [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e81f80) returned 1 [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e868d8) returned 1 [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf9b8) returned 1 [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0154.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0154.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf5d0 [0154.199] wcscat (in: _Dest=0x3eaf5d0, _Source="4a487038a6" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\4a487038a6") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\4a487038a6" [0154.199] wcscat (in: _Dest=0x3eaf5d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\4a487038a6.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\4a487038a6.68814f" [0154.199] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\4a487038a6.68814f", NtPathName=0xccaf868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\4a487038a6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x30352a0 [0154.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30352a0) returned 1 [0154.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b018) returned 1 [0154.257] NtQueryInformationFile (in: FileHandle=0x2138, IoStatusBlock=0xccaf840, FileInformation=0xccaf848, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xccaf840, FileInformation=0xccaf848) returned 0x0 [0154.257] NtSetInformationFile (FileHandle=0x2138, IoStatusBlock=0xccaf840, FileInformation=0xccaf848, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf5d0) returned 1 [0154.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 [0154.262] FlushFileBuffers (hFile=0x2138) returned 1 [0154.271] CloseHandle (hObject=0x2138) returned 1 [0154.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66198 [0154.272] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0154.272] wcscat (in: _Dest=0x3e66198, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" [0154.272] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\68814f-readme.txt")) returned 0x20 [0154.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0154.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 Thread: id = 2312 os_tid = 0x584 [0151.414] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\xGtO0I5CJmhkX7.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\xgto0i5cjmhkx7.mp3")) returned 0x20 [0151.414] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\xGtO0I5CJmhkX7.mp3", dwFileAttributes=0x20) returned 1 [0154.079] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\xGtO0I5CJmhkX7.mp3" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\xgto0i5cjmhkx7.mp3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2350 [0154.079] GetFileSizeEx (in: hFile=0x2350, lpFileSize=0xcdffc84 | out: lpFileSize=0xcdffc84*=88467) returned 1 [0154.079] SetFilePointerEx (in: hFile=0x2350, liDistanceToMove=0x1598f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.079] ReadFile (in: hFile=0x2350, lpBuffer=0xcdffc60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcdffc70, lpOverlapped=0x0 | out: lpBuffer=0xcdffc60*, lpNumberOfBytesRead=0xcdffc70*=0x4, lpOverlapped=0x0) returned 1 [0154.081] SetFilePointerEx (in: hFile=0x2350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0154.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0154.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0154.081] NtQuerySystemTime (in: CurrentTime=0xcdffbf8 | out: CurrentTime=0xcdffbf8*=132462177327228000) returned 0x0 [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x6acd9921 [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x119a76ab [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x7ff91eb8 [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x76e3382 [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x2c35d2ce [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x7d0d0c9f [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x159c0f4f [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x216eb47c [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x444b5f42 [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x603e7103 [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x5983642e [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x5e2aabbd [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x514d6e83 [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x7700b56d [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x636dffcf [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x397a4d29 [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x1eba2ef [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x7d8b3b62 [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x3ec9ac71 [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x32ee6ebe [0154.081] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x49103a1d [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x3ada55c8 [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x741ed123 [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x42fdadfe [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x46b2c43c [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x653c663 [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x773e439e [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0xf2da391 [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x12ca2360 [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x12a274f9 [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x5b0d77f6 [0154.082] RtlRandomEx (in: Seed=0xcdffbf0 | out: Seed=0xcdffbf0) returned 0x28cf2ed9 [0154.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0154.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0154.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0154.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0154.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0154.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0154.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0154.091] SetFilePointerEx (in: hFile=0x2350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.091] ReadFile (in: hFile=0x2350, lpBuffer=0x7c9bf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcdffbf8, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesRead=0xcdffbf8*=0x3c00, lpOverlapped=0x0) returned 1 [0154.091] SetFilePointerEx (in: hFile=0x2350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e854b8 [0154.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0154.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0154.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0154.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9fb70 [0154.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0154.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0154.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0154.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0154.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e854b8) returned 1 [0154.092] WriteFile (in: hFile=0x2350, lpBuffer=0x7c9fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcdffbf8, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesWritten=0xcdffbf8*=0x3c00, lpOverlapped=0x0) returned 1 [0154.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0154.146] SetFilePointerEx (in: hFile=0x2350, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.146] ReadFile (in: hFile=0x2350, lpBuffer=0x7c9bf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcdffbf8, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesRead=0xcdffbf8*=0x3c00, lpOverlapped=0x0) returned 1 [0154.146] SetFilePointerEx (in: hFile=0x2350, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0154.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0154.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9fb70 [0154.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0154.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0154.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cd8) returned 1 [0154.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.147] WriteFile (in: hFile=0x2350, lpBuffer=0x7c9fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcdffbf8, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesWritten=0xcdffbf8*=0x3c00, lpOverlapped=0x0) returned 1 [0154.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0154.157] SetFilePointerEx (in: hFile=0x2350, liDistanceToMove=0x11d93, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.157] ReadFile (in: hFile=0x2350, lpBuffer=0x7c9bf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xcdffbf8, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesRead=0xcdffbf8*=0x3c00, lpOverlapped=0x0) returned 1 [0154.157] SetFilePointerEx (in: hFile=0x2350, liDistanceToMove=0x11d93, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b20 [0154.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b20) returned 1 [0154.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9fb70 [0154.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b20 [0154.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c88 [0154.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c88) returned 1 [0154.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.158] WriteFile (in: hFile=0x2350, lpBuffer=0x7c9fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xcdffbf8, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesWritten=0xcdffbf8*=0x3c00, lpOverlapped=0x0) returned 1 [0154.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0154.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3ee0b98 [0154.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b20) returned 1 [0154.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0154.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0154.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0154.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2d380 [0154.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0154.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0154.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7ad78b0 [0154.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0154.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0154.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0154.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dcde38 [0154.169] SetFilePointerEx (in: hFile=0x2350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.169] WriteFile (in: hFile=0x2350, lpBuffer=0x3dcde38*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0xcdffc78, lpOverlapped=0x0 | out: lpBuffer=0x3dcde38*, lpNumberOfBytesWritten=0xcdffc78*=0x156, lpOverlapped=0x0) returned 1 [0154.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0154.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0154.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0154.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x3e86878 [0154.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0154.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0154.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0154.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0154.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x3d48d18 [0154.204] sprintf (in: _Dest=0x3d48d18, _Format="%c%c" | out: _Dest="e4") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d1a, _Format="%c%c" | out: _Dest="e6") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d1c, _Format="%c%c" | out: _Dest="c5") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d1e, _Format="%c%c" | out: _Dest="bc") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d20, _Format="%c%c" | out: _Dest="44") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d22, _Format="%c%c" | out: _Dest="82") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d24, _Format="%c%c" | out: _Dest="15") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d26, _Format="%c%c" | out: _Dest="2c") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d28, _Format="%c%c" | out: _Dest="52") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d2a, _Format="%c%c" | out: _Dest="39") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d2c, _Format="%c%c" | out: _Dest="62") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d2e, _Format="%c%c" | out: _Dest="fa") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d30, _Format="%c%c" | out: _Dest="d3") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d32, _Format="%c%c" | out: _Dest="c6") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d34, _Format="%c%c" | out: _Dest="16") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d36, _Format="%c%c" | out: _Dest="f2") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d38, _Format="%c%c" | out: _Dest="a0") returned 2 [0154.204] sprintf (in: _Dest=0x3d48d3a, _Format="%c%c" | out: _Dest="5f") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d3c, _Format="%c%c" | out: _Dest="ce") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d3e, _Format="%c%c" | out: _Dest="0c") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d40, _Format="%c%c" | out: _Dest="2e") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d42, _Format="%c%c" | out: _Dest="1c") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d44, _Format="%c%c" | out: _Dest="f3") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d46, _Format="%c%c" | out: _Dest="6d") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d48, _Format="%c%c" | out: _Dest="44") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d4a, _Format="%c%c" | out: _Dest="ba") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d4c, _Format="%c%c" | out: _Dest="69") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d4e, _Format="%c%c" | out: _Dest="20") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d50, _Format="%c%c" | out: _Dest="6c") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d52, _Format="%c%c" | out: _Dest="7f") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d54, _Format="%c%c" | out: _Dest="97") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d56, _Format="%c%c" | out: _Dest="2c") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d58, _Format="%c%c" | out: _Dest="9b") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d5a, _Format="%c%c" | out: _Dest="18") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d5c, _Format="%c%c" | out: _Dest="7d") returned 2 [0154.205] sprintf (in: _Dest=0x3d48d5e, _Format="%c%c" | out: _Dest="6d") returned 2 [0154.205] RtlInitAnsiString (in: DestinationString=0xcdffc00, SourceString="e4e6c5bc4482152c523962fad3c616f2a05fce0c2e1cf36d44ba69206c7f972c9b187d6d" | out: DestinationString="e4e6c5bc4482152c523962fad3c616f2a05fce0c2e1cf36d44ba69206c7f972c9b187d6d") [0154.205] RtlAnsiStringToUnicodeString (in: DestinationString=0xcdffbf8, SourceString="e4e6c5bc4482152c523962fad3c616f2a05fce0c2e1cf36d44ba69206c7f972c9b187d6d", AllocateDestinationString=1 | out: DestinationString="e4e6c5bc4482152c523962fad3c616f2a05fce0c2e1cf36d44ba69206c7f972c9b187d6d") returned 0x0 [0154.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5f40 [0154.205] RtlFreeAnsiString (AnsiString="e") [0154.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d48d18) returned 1 [0154.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86878) returned 1 [0154.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0154.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0154.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad78b0) returned 1 [0154.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0154.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d380) returned 1 [0154.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 [0154.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0154.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0154.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0154.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d40b50 [0154.206] wcscat (in: _Dest=0x3d40b50, _Source="e4e6c5bc4482152c52" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e4e6c5bc4482152c52") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e4e6c5bc4482152c52" [0154.206] wcscat (in: _Dest=0x3d40b50, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e4e6c5bc4482152c52.68814f") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e4e6c5bc4482152c52.68814f" [0154.206] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e4e6c5bc4482152c52.68814f", NtPathName=0xcdffbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\e4e6c5bc4482152c52.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c88e8 [0154.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c88e8) returned 1 [0154.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ebf2e0) returned 1 [0154.260] NtQueryInformationFile (in: FileHandle=0x2350, IoStatusBlock=0xcdffbc8, FileInformation=0xcdffbd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcdffbc8, FileInformation=0xcdffbd0) returned 0x0 [0154.260] NtSetInformationFile (FileHandle=0x2350, IoStatusBlock=0xcdffbc8, FileInformation=0xcdffbd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b50) returned 1 [0154.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 [0154.261] FlushFileBuffers (hFile=0x2350) returned 1 [0154.268] CloseHandle (hObject=0x2350) returned 1 [0154.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66318 [0154.270] wcscpy (in: _Dest=0x3e66318, _Source="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\" [0154.270] wcscat (in: _Dest=0x3e66318, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" [0154.270] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Music\\tj7HmjcCmKr7R9Oo4Hji\\zygsL\\nTHGe4k4sr22t-Iq-Nd\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\music\\tj7hmjccmkr7r9oo4hji\\zygsl\\nthge4k4sr22t-iq-nd\\68814f-readme.txt")) returned 0x20 [0154.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 [0154.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 Thread: id = 2313 os_tid = 0x774 [0151.415] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn")) returned 0x2022 [0151.415] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0151.415] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.415] GetLastError () returned 0x5 [0151.416] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0151.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb520) returned 1 Thread: id = 2314 os_tid = 0x650 [0151.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb")) returned 0x20 [0151.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB", dwFileAttributes=0x20) returned 0 [0151.418] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0151.418] GetLastError () returned 0x5 [0151.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB", dwFileAttributes=0x20) returned 0 [0151.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4be0) returned 1 Thread: id = 2315 os_tid = 0x644 [0151.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb")) returned 0x20 [0157.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB", dwFileAttributes=0x20) returned 0 [0157.736] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.736] GetLastError () returned 0x5 [0157.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB", dwFileAttributes=0x20) returned 0 [0157.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 2316 os_tid = 0x3ec [0151.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb")) returned 0x20 [0153.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB", dwFileAttributes=0x20) returned 0 [0153.521] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.446] GetLastError () returned 0x5 [0157.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB", dwFileAttributes=0x20) returned 0 [0157.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63490) returned 1 Thread: id = 2317 os_tid = 0xfb8 [0151.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb")) returned 0x20 [0157.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB", dwFileAttributes=0x20) returned 0 [0157.717] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.717] GetLastError () returned 0x5 [0157.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB", dwFileAttributes=0x20) returned 0 [0157.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 2318 os_tid = 0xf68 [0151.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb")) returned 0x20 [0157.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB", dwFileAttributes=0x20) returned 0 [0157.719] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.719] GetLastError () returned 0x5 [0157.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB", dwFileAttributes=0x20) returned 0 [0157.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7318) returned 1 Thread: id = 2319 os_tid = 0xab0 [0151.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb")) returned 0x20 [0154.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB", dwFileAttributes=0x20) returned 0 [0154.936] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.936] GetLastError () returned 0x5 [0154.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB", dwFileAttributes=0x20) returned 0 [0154.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 2320 os_tid = 0x670 [0151.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb")) returned 0x20 [0157.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB", dwFileAttributes=0x20) returned 0 [0157.729] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.729] GetLastError () returned 0x5 [0157.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB", dwFileAttributes=0x20) returned 0 [0157.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 2321 os_tid = 0x7c4 [0151.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb")) returned 0x20 [0157.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB", dwFileAttributes=0x20) returned 0 [0157.730] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.730] GetLastError () returned 0x5 [0157.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB", dwFileAttributes=0x20) returned 0 [0157.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 2322 os_tid = 0x7b0 [0151.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb")) returned 0x20 [0157.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB", dwFileAttributes=0x20) returned 0 [0157.732] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.732] GetLastError () returned 0x5 [0157.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB", dwFileAttributes=0x20) returned 0 [0157.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f90) returned 1 Thread: id = 2323 os_tid = 0xfc8 [0151.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb")) returned 0x20 [0157.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB", dwFileAttributes=0x20) returned 0 [0157.733] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.733] GetLastError () returned 0x5 [0157.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB", dwFileAttributes=0x20) returned 0 [0157.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d459b0) returned 1 Thread: id = 2324 os_tid = 0x728 [0151.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb")) returned 0x20 [0157.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB", dwFileAttributes=0x20) returned 0 [0157.734] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.734] GetLastError () returned 0x5 [0157.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB", dwFileAttributes=0x20) returned 0 [0157.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 2325 os_tid = 0xfcc [0151.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb")) returned 0x20 [0154.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB", dwFileAttributes=0x20) returned 0 [0154.831] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.832] GetLastError () returned 0x5 [0154.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB", dwFileAttributes=0x20) returned 0 [0154.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62630) returned 1 Thread: id = 2326 os_tid = 0x368 [0151.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb")) returned 0x20 [0157.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB", dwFileAttributes=0x20) returned 0 [0157.722] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.722] GetLastError () returned 0x5 [0157.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB", dwFileAttributes=0x20) returned 0 [0157.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5a28) returned 1 Thread: id = 2327 os_tid = 0xfc4 [0151.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb")) returned 0x20 [0156.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB", dwFileAttributes=0x20) returned 0 [0156.452] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.218] GetLastError () returned 0x5 [0157.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB", dwFileAttributes=0x20) returned 0 [0157.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 2328 os_tid = 0xf70 [0151.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb")) returned 0x20 [0157.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB", dwFileAttributes=0x20) returned 0 [0157.713] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.713] GetLastError () returned 0x5 [0157.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB", dwFileAttributes=0x20) returned 0 [0157.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60090) returned 1 Thread: id = 2329 os_tid = 0xf78 [0151.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb")) returned 0x20 [0156.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB", dwFileAttributes=0x20) returned 0 [0156.473] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.711] GetLastError () returned 0x5 [0157.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB", dwFileAttributes=0x20) returned 0 [0157.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60120) returned 1 Thread: id = 2330 os_tid = 0xf84 [0151.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb")) returned 0x20 [0157.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB", dwFileAttributes=0x20) returned 0 [0157.726] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.726] GetLastError () returned 0x5 [0157.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB", dwFileAttributes=0x20) returned 0 [0157.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5860) returned 1 Thread: id = 2331 os_tid = 0xf80 [0151.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb")) returned 0x20 [0157.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB", dwFileAttributes=0x20) returned 0 [0157.472] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.472] GetLastError () returned 0x5 [0157.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB", dwFileAttributes=0x20) returned 0 [0157.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61170) returned 1 Thread: id = 2332 os_tid = 0xf7c [0151.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb")) returned 0x20 [0157.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB", dwFileAttributes=0x20) returned 0 [0157.724] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.724] GetLastError () returned 0x5 [0157.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB", dwFileAttributes=0x20) returned 0 [0157.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb61e0) returned 1 Thread: id = 2333 os_tid = 0x330 [0151.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb")) returned 0x20 [0157.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB", dwFileAttributes=0x20) returned 0 [0157.714] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.714] GetLastError () returned 0x5 [0157.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB", dwFileAttributes=0x20) returned 0 [0157.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a610e0) returned 1 Thread: id = 2334 os_tid = 0xaf0 [0151.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb")) returned 0x20 [0157.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB", dwFileAttributes=0x20) returned 0 [0157.716] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.716] GetLastError () returned 0x5 [0157.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB", dwFileAttributes=0x20) returned 0 [0157.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61050) returned 1 Thread: id = 2335 os_tid = 0xb10 [0152.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60900 [0152.676] wcscpy (in: _Dest=0x7a60900, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0152.676] wcscat (in: _Dest=0x7a60900, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\" [0152.676] wcscat (in: _Dest=0x7a60900, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*" [0152.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0152.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0157.728] wcscmp (_String1=".", _String2=".") returned 0 [0157.728] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.728] wcscmp (_String1="..", _String2=".") returned 1 [0157.728] wcscmp (_String1="..", _String2="..") returned 0 [0157.728] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8fab, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0157.728] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0157.728] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0157.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053678 [0157.728] wcscpy (in: _Dest=0x3053678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0157.728] wcscat (in: _Dest=0x3053678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\" [0157.728] wcscat (in: _Dest=0x3053678, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" [0158.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0158.645] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0158.645] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0158.646] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0158.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053e58 [0158.646] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services" [0158.646] wcscat (in: _Dest=0x3053e58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\" [0158.646] wcscat (in: _Dest=0x3053e58, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" [0158.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0158.647] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0158.647] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0158.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0158.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60900) returned 1 [0158.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 2336 os_tid = 0x188 [0152.677] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl")) returned 0x2020 [0152.677] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", dwFileAttributes=0x20) returned 1 [0154.472] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x718 [0154.472] GetFileSizeEx (in: hFile=0x718, lpFileSize=0x796fd1c | out: lpFileSize=0x796fd1c*=933) returned 1 [0154.472] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x3a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.472] ReadFile (in: hFile=0x718, lpBuffer=0x796fcf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x796fd08, lpOverlapped=0x0 | out: lpBuffer=0x796fcf8*, lpNumberOfBytesRead=0x796fd08*=0x4, lpOverlapped=0x0) returned 1 [0154.475] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0154.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0154.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0154.476] NtQuerySystemTime (in: CurrentTime=0x796fc90 | out: CurrentTime=0x796fc90*=132462177331128000) returned 0x0 [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x60942283 [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x78899168 [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x64f9b4d [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x4e465aef [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x7386350b [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x2766f40f [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x6b8012f5 [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x7bba9000 [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x7891b7ea [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x4aa0a57b [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x5415fbc [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x51e0dea8 [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x3ac2d6b0 [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x780bafc9 [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x4fe4c91a [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x55d54b3d [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x2071958 [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x3781e808 [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x4144147b [0154.476] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x731753af [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x5c4990fb [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x64372d41 [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x3e3057e8 [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x3b9c0d80 [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x672d7202 [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x11b51b4b [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0xe180320 [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x6eca7f8f [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x2099d16b [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x61e9dbe4 [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x3809162b [0154.477] RtlRandomEx (in: Seed=0x796fc88 | out: Seed=0x796fc88) returned 0x7b4b91d5 [0154.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f90 [0154.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa30 [0154.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0154.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48b58 [0154.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0154.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0154.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0154.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0154.489] ReadFile (in: hFile=0x718, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3a5, lpNumberOfBytesRead=0x796fc84, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x796fc84*=0x3a5, lpOverlapped=0x0) returned 1 [0154.489] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.489] WriteFile (in: hFile=0x718, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x3a5, lpNumberOfBytesWritten=0x796fc88, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0x796fc88*=0x3a5, lpOverlapped=0x0) returned 1 [0154.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0154.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0154.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0154.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0154.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b58) returned 1 [0154.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23bc0 [0154.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48b58 [0154.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0154.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23f40 [0154.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0154.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0154.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0154.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b58) returned 1 [0154.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e0ac18 [0154.493] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.493] WriteFile (in: hFile=0x718, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x796fd10, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0x796fd10*=0x14a, lpOverlapped=0x0) returned 1 [0154.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48b58 [0154.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0154.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0154.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f08 [0154.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0154.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0154.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0154.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b58) returned 1 [0154.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb1) returned 0x3e66198 [0154.496] sprintf (in: _Dest=0x3e66198, _Format="%c%c" | out: _Dest="bd") returned 2 [0154.496] sprintf (in: _Dest=0x3e6619a, _Format="%c%c" | out: _Dest="8f") returned 2 [0154.496] sprintf (in: _Dest=0x3e6619c, _Format="%c%c" | out: _Dest="be") returned 2 [0154.496] sprintf (in: _Dest=0x3e6619e, _Format="%c%c" | out: _Dest="56") returned 2 [0154.496] sprintf (in: _Dest=0x3e661a0, _Format="%c%c" | out: _Dest="75") returned 2 [0154.496] sprintf (in: _Dest=0x3e661a2, _Format="%c%c" | out: _Dest="e0") returned 2 [0154.496] sprintf (in: _Dest=0x3e661a4, _Format="%c%c" | out: _Dest="7b") returned 2 [0154.496] sprintf (in: _Dest=0x3e661a6, _Format="%c%c" | out: _Dest="8a") returned 2 [0154.496] sprintf (in: _Dest=0x3e661a8, _Format="%c%c" | out: _Dest="5f") returned 2 [0154.496] sprintf (in: _Dest=0x3e661aa, _Format="%c%c" | out: _Dest="78") returned 2 [0154.496] sprintf (in: _Dest=0x3e661ac, _Format="%c%c" | out: _Dest="90") returned 2 [0154.496] sprintf (in: _Dest=0x3e661ae, _Format="%c%c" | out: _Dest="cd") returned 2 [0154.496] sprintf (in: _Dest=0x3e661b0, _Format="%c%c" | out: _Dest="49") returned 2 [0154.496] sprintf (in: _Dest=0x3e661b2, _Format="%c%c" | out: _Dest="57") returned 2 [0154.496] sprintf (in: _Dest=0x3e661b4, _Format="%c%c" | out: _Dest="13") returned 2 [0154.497] sprintf (in: _Dest=0x3e661b6, _Format="%c%c" | out: _Dest="c1") returned 2 [0154.497] sprintf (in: _Dest=0x3e661b8, _Format="%c%c" | out: _Dest="3c") returned 2 [0154.497] sprintf (in: _Dest=0x3e661ba, _Format="%c%c" | out: _Dest="37") returned 2 [0154.497] sprintf (in: _Dest=0x3e661bc, _Format="%c%c" | out: _Dest="03") returned 2 [0154.497] sprintf (in: _Dest=0x3e661be, _Format="%c%c" | out: _Dest="56") returned 2 [0154.497] sprintf (in: _Dest=0x3e661c0, _Format="%c%c" | out: _Dest="4e") returned 2 [0154.497] sprintf (in: _Dest=0x3e661c2, _Format="%c%c" | out: _Dest="52") returned 2 [0154.497] sprintf (in: _Dest=0x3e661c4, _Format="%c%c" | out: _Dest="21") returned 2 [0154.497] sprintf (in: _Dest=0x3e661c6, _Format="%c%c" | out: _Dest="01") returned 2 [0154.497] sprintf (in: _Dest=0x3e661c8, _Format="%c%c" | out: _Dest="4a") returned 2 [0154.497] sprintf (in: _Dest=0x3e661ca, _Format="%c%c" | out: _Dest="87") returned 2 [0154.497] sprintf (in: _Dest=0x3e661cc, _Format="%c%c" | out: _Dest="89") returned 2 [0154.497] sprintf (in: _Dest=0x3e661ce, _Format="%c%c" | out: _Dest="08") returned 2 [0154.497] sprintf (in: _Dest=0x3e661d0, _Format="%c%c" | out: _Dest="b5") returned 2 [0154.497] sprintf (in: _Dest=0x3e661d2, _Format="%c%c" | out: _Dest="b5") returned 2 [0154.497] sprintf (in: _Dest=0x3e661d4, _Format="%c%c" | out: _Dest="ac") returned 2 [0154.497] sprintf (in: _Dest=0x3e661d6, _Format="%c%c" | out: _Dest="e9") returned 2 [0154.497] sprintf (in: _Dest=0x3e661d8, _Format="%c%c" | out: _Dest="91") returned 2 [0154.497] sprintf (in: _Dest=0x3e661da, _Format="%c%c" | out: _Dest="5a") returned 2 [0154.497] sprintf (in: _Dest=0x3e661dc, _Format="%c%c" | out: _Dest="a9") returned 2 [0154.497] sprintf (in: _Dest=0x3e661de, _Format="%c%c" | out: _Dest="62") returned 2 [0154.497] sprintf (in: _Dest=0x3e661e0, _Format="%c%c" | out: _Dest="f8") returned 2 [0154.497] sprintf (in: _Dest=0x3e661e2, _Format="%c%c" | out: _Dest="aa") returned 2 [0154.497] sprintf (in: _Dest=0x3e661e4, _Format="%c%c" | out: _Dest="07") returned 2 [0154.497] sprintf (in: _Dest=0x3e661e6, _Format="%c%c" | out: _Dest="0f") returned 2 [0154.497] sprintf (in: _Dest=0x3e661e8, _Format="%c%c" | out: _Dest="b0") returned 2 [0154.497] sprintf (in: _Dest=0x3e661ea, _Format="%c%c" | out: _Dest="b3") returned 2 [0154.498] sprintf (in: _Dest=0x3e661ec, _Format="%c%c" | out: _Dest="27") returned 2 [0154.498] sprintf (in: _Dest=0x3e661ee, _Format="%c%c" | out: _Dest="2c") returned 2 [0154.498] sprintf (in: _Dest=0x3e661f0, _Format="%c%c" | out: _Dest="16") returned 2 [0154.498] sprintf (in: _Dest=0x3e661f2, _Format="%c%c" | out: _Dest="38") returned 2 [0154.498] sprintf (in: _Dest=0x3e661f4, _Format="%c%c" | out: _Dest="73") returned 2 [0154.498] sprintf (in: _Dest=0x3e661f6, _Format="%c%c" | out: _Dest="95") returned 2 [0154.498] sprintf (in: _Dest=0x3e661f8, _Format="%c%c" | out: _Dest="8a") returned 2 [0154.498] sprintf (in: _Dest=0x3e661fa, _Format="%c%c" | out: _Dest="b4") returned 2 [0154.498] sprintf (in: _Dest=0x3e661fc, _Format="%c%c" | out: _Dest="b4") returned 2 [0154.498] sprintf (in: _Dest=0x3e661fe, _Format="%c%c" | out: _Dest="23") returned 2 [0154.498] sprintf (in: _Dest=0x3e66200, _Format="%c%c" | out: _Dest="8e") returned 2 [0154.498] sprintf (in: _Dest=0x3e66202, _Format="%c%c" | out: _Dest="58") returned 2 [0154.498] sprintf (in: _Dest=0x3e66204, _Format="%c%c" | out: _Dest="b3") returned 2 [0154.498] sprintf (in: _Dest=0x3e66206, _Format="%c%c" | out: _Dest="75") returned 2 [0154.498] sprintf (in: _Dest=0x3e66208, _Format="%c%c" | out: _Dest="1a") returned 2 [0154.498] sprintf (in: _Dest=0x3e6620a, _Format="%c%c" | out: _Dest="9b") returned 2 [0154.498] sprintf (in: _Dest=0x3e6620c, _Format="%c%c" | out: _Dest="64") returned 2 [0154.498] sprintf (in: _Dest=0x3e6620e, _Format="%c%c" | out: _Dest="65") returned 2 [0154.498] sprintf (in: _Dest=0x3e66210, _Format="%c%c" | out: _Dest="be") returned 2 [0154.498] sprintf (in: _Dest=0x3e66212, _Format="%c%c" | out: _Dest="5d") returned 2 [0154.498] sprintf (in: _Dest=0x3e66214, _Format="%c%c" | out: _Dest="46") returned 2 [0154.498] sprintf (in: _Dest=0x3e66216, _Format="%c%c" | out: _Dest="c6") returned 2 [0154.498] sprintf (in: _Dest=0x3e66218, _Format="%c%c" | out: _Dest="6f") returned 2 [0154.498] sprintf (in: _Dest=0x3e6621a, _Format="%c%c" | out: _Dest="92") returned 2 [0154.499] sprintf (in: _Dest=0x3e6621c, _Format="%c%c" | out: _Dest="3f") returned 2 [0154.499] sprintf (in: _Dest=0x3e6621e, _Format="%c%c" | out: _Dest="74") returned 2 [0154.499] sprintf (in: _Dest=0x3e66220, _Format="%c%c" | out: _Dest="e6") returned 2 [0154.499] sprintf (in: _Dest=0x3e66222, _Format="%c%c" | out: _Dest="44") returned 2 [0154.499] sprintf (in: _Dest=0x3e66224, _Format="%c%c" | out: _Dest="58") returned 2 [0154.499] sprintf (in: _Dest=0x3e66226, _Format="%c%c" | out: _Dest="b3") returned 2 [0154.499] sprintf (in: _Dest=0x3e66228, _Format="%c%c" | out: _Dest="01") returned 2 [0154.499] sprintf (in: _Dest=0x3e6622a, _Format="%c%c" | out: _Dest="e1") returned 2 [0154.499] sprintf (in: _Dest=0x3e6622c, _Format="%c%c" | out: _Dest="26") returned 2 [0154.499] sprintf (in: _Dest=0x3e6622e, _Format="%c%c" | out: _Dest="87") returned 2 [0154.499] sprintf (in: _Dest=0x3e66230, _Format="%c%c" | out: _Dest="f6") returned 2 [0154.499] sprintf (in: _Dest=0x3e66232, _Format="%c%c" | out: _Dest="4c") returned 2 [0154.499] sprintf (in: _Dest=0x3e66234, _Format="%c%c" | out: _Dest="78") returned 2 [0154.499] sprintf (in: _Dest=0x3e66236, _Format="%c%c" | out: _Dest="cb") returned 2 [0154.499] sprintf (in: _Dest=0x3e66238, _Format="%c%c" | out: _Dest="75") returned 2 [0154.499] sprintf (in: _Dest=0x3e6623a, _Format="%c%c" | out: _Dest="56") returned 2 [0154.499] sprintf (in: _Dest=0x3e6623c, _Format="%c%c" | out: _Dest="39") returned 2 [0154.499] sprintf (in: _Dest=0x3e6623e, _Format="%c%c" | out: _Dest="19") returned 2 [0154.499] sprintf (in: _Dest=0x3e66240, _Format="%c%c" | out: _Dest="f7") returned 2 [0154.499] sprintf (in: _Dest=0x3e66242, _Format="%c%c" | out: _Dest="91") returned 2 [0154.499] sprintf (in: _Dest=0x3e66244, _Format="%c%c" | out: _Dest="6a") returned 2 [0154.499] sprintf (in: _Dest=0x3e66246, _Format="%c%c" | out: _Dest="05") returned 2 [0154.499] RtlInitAnsiString (in: DestinationString=0x796fc98, SourceString="bd8fbe5675e07b8a5f7890cd495713c13c3703564e5221014a878908b5b5ace9915aa962f8aa070fb0b3272c163873958ab4b4238e58b3751a9b6465be5d46c66f923f74e64458b301e12687f64c78cb75563919f7916a05" | out: DestinationString="bd8fbe5675e07b8a5f7890cd495713c13c3703564e5221014a878908b5b5ace9915aa962f8aa070fb0b3272c163873958ab4b4238e58b3751a9b6465be5d46c66f923f74e64458b301e12687f64c78cb75563919f7916a05") [0154.499] RtlAnsiStringToUnicodeString (in: DestinationString=0x796fc90, SourceString="bd8fbe5675e07b8a5f7890cd495713c13c3703564e5221014a878908b5b5ace9915aa962f8aa070fb0b3272c163873958ab4b4238e58b3751a9b6465be5d46c66f923f74e64458b301e12687f64c78cb75563919f7916a05", AllocateDestinationString=1 | out: DestinationString="bd8fbe5675e07b8a5f7890cd495713c13c3703564e5221014a878908b5b5ace9915aa962f8aa070fb0b3272c163873958ab4b4238e58b3751a9b6465be5d46c66f923f74e64458b301e12687f64c78cb75563919f7916a05") returned 0x0 [0154.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x2fee950 [0154.500] RtlFreeAnsiString (AnsiString="b") [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23f40) returned 1 [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23bc0) returned 1 [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f90) returned 1 [0154.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0154.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3de76b8 [0154.501] wcscat (in: _Dest=0x3de76b8, _Source="bd8fbe5675e07b8a5f7890cd495713c13c3703564e52" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\bd8fbe5675e07b8a5f7890cd495713c13c3703564e52") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\bd8fbe5675e07b8a5f7890cd495713c13c3703564e52" [0154.501] wcscat (in: _Dest=0x3de76b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\bd8fbe5675e07b8a5f7890cd495713c13c3703564e52.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\bd8fbe5675e07b8a5f7890cd495713c13c3703564e52.68814f" [0154.501] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\bd8fbe5675e07b8a5f7890cd495713c13c3703564e52.68814f", NtPathName=0x796fc88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\bd8fbe5675e07b8a5f7890cd495713c13c3703564e52.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec940 [0154.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0154.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a49e10) returned 1 [0154.503] NtQueryInformationFile (in: FileHandle=0x718, IoStatusBlock=0x796fc60, FileInformation=0x796fc68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x796fc60, FileInformation=0x796fc68) returned 0x0 [0154.503] NtSetInformationFile (FileHandle=0x718, IoStatusBlock=0x796fc60, FileInformation=0x796fc68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de76b8) returned 1 [0154.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fee950) returned 1 [0154.505] FlushFileBuffers (hFile=0x718) returned 1 [0154.506] CloseHandle (hObject=0x718) returned 1 [0154.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66198 [0154.507] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0154.507] wcscat (in: _Dest=0x3e66198, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\68814F-Readme.txt" [0154.507] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\68814f-readme.txt")) returned 0xffffffff [0154.507] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x718 [0154.514] WriteFile (in: hFile=0x718, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x796fca4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x796fca4*=0x8b9, lpOverlapped=0x0) returned 1 [0154.516] CloseHandle (hObject=0x718) returned 1 [0154.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0154.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf1f8) returned 1 Thread: id = 2337 os_tid = 0xfc0 [0152.678] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl")) returned 0x2020 [0152.678] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", dwFileAttributes=0x20) returned 1 [0154.491] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x718 [0154.518] GetFileSizeEx (in: hFile=0x718, lpFileSize=0xa7ffac4 | out: lpFileSize=0xa7ffac4*=37703) returned 1 [0154.518] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x9343, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.518] ReadFile (in: hFile=0x718, lpBuffer=0xa7ffaa0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa7ffab0, lpOverlapped=0x0 | out: lpBuffer=0xa7ffaa0*, lpNumberOfBytesRead=0xa7ffab0*=0x4, lpOverlapped=0x0) returned 1 [0154.520] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa30 [0154.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f90 [0154.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0154.521] NtQuerySystemTime (in: CurrentTime=0xa7ffa38 | out: CurrentTime=0xa7ffa38*=132462177331596000) returned 0x0 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x5ed2c47 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x24b22e29 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x44070151 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0xd820091 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x70feaa7a [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x6b78c0dc [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x2916110b [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x5586990e [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x34548368 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x219c2fb5 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x4731c25a [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x5c0f4643 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x2dcb99ab [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x75ddd787 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x4d381565 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x4d41b7c [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x74ba44ff [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x25cb1e9d [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x112ff6cb [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x35dd533c [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x51cbcb2f [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x4f070cbb [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x35959280 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x26eb82b8 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x4859d7c6 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x2167448b [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x606949c3 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x7495593b [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x3b74ad96 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x787a7fba [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x10fc1761 [0154.521] RtlRandomEx (in: Seed=0xa7ffa30 | out: Seed=0xa7ffa30) returned 0x4211753e [0154.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0154.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0154.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0154.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0154.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0154.529] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.530] ReadFile (in: hFile=0x718, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa7ffa38, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xa7ffa38*=0x3c00, lpOverlapped=0x0) returned 1 [0154.530] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a243e0 [0154.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa30 [0154.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0154.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0154.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa30 [0154.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0154.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0154.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a243e0) returned 1 [0154.531] WriteFile (in: hFile=0x718, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa7ffa38, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0xa7ffa38*=0x3c00, lpOverlapped=0x0) returned 1 [0154.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0154.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0154.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23bc0 [0154.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a243e0 [0154.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0154.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0154.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23f40 [0154.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0154.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0154.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0154.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a243e0) returned 1 [0154.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e0ac18 [0154.535] SetFilePointerEx (in: hFile=0x718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.535] WriteFile (in: hFile=0x718, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0xa7ffab8, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0xa7ffab8*=0x14a, lpOverlapped=0x0) returned 1 [0154.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a243e0 [0154.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0154.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0154.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x58) returned 0x2fe6f08 [0154.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0154.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0154.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0154.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a243e0) returned 1 [0154.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb1) returned 0x3e66198 [0154.537] sprintf (in: _Dest=0x3e66198, _Format="%c%c" | out: _Dest="a0") returned 2 [0154.537] sprintf (in: _Dest=0x3e6619a, _Format="%c%c" | out: _Dest="fb") returned 2 [0154.537] sprintf (in: _Dest=0x3e6619c, _Format="%c%c" | out: _Dest="2f") returned 2 [0154.537] sprintf (in: _Dest=0x3e6619e, _Format="%c%c" | out: _Dest="f1") returned 2 [0154.537] sprintf (in: _Dest=0x3e661a0, _Format="%c%c" | out: _Dest="f8") returned 2 [0154.537] sprintf (in: _Dest=0x3e661a2, _Format="%c%c" | out: _Dest="15") returned 2 [0154.537] sprintf (in: _Dest=0x3e661a4, _Format="%c%c" | out: _Dest="f3") returned 2 [0154.538] sprintf (in: _Dest=0x3e661a6, _Format="%c%c" | out: _Dest="f9") returned 2 [0154.538] sprintf (in: _Dest=0x3e661a8, _Format="%c%c" | out: _Dest="47") returned 2 [0154.538] sprintf (in: _Dest=0x3e661aa, _Format="%c%c" | out: _Dest="3b") returned 2 [0154.538] sprintf (in: _Dest=0x3e661ac, _Format="%c%c" | out: _Dest="f2") returned 2 [0154.538] sprintf (in: _Dest=0x3e661ae, _Format="%c%c" | out: _Dest="f8") returned 2 [0154.538] sprintf (in: _Dest=0x3e661b0, _Format="%c%c" | out: _Dest="19") returned 2 [0154.538] sprintf (in: _Dest=0x3e661b2, _Format="%c%c" | out: _Dest="8c") returned 2 [0154.538] sprintf (in: _Dest=0x3e661b4, _Format="%c%c" | out: _Dest="bc") returned 2 [0154.538] sprintf (in: _Dest=0x3e661b6, _Format="%c%c" | out: _Dest="57") returned 2 [0154.538] sprintf (in: _Dest=0x3e661b8, _Format="%c%c" | out: _Dest="ea") returned 2 [0154.538] sprintf (in: _Dest=0x3e661ba, _Format="%c%c" | out: _Dest="dc") returned 2 [0154.538] sprintf (in: _Dest=0x3e661bc, _Format="%c%c" | out: _Dest="c3") returned 2 [0154.538] sprintf (in: _Dest=0x3e661be, _Format="%c%c" | out: _Dest="0f") returned 2 [0154.538] sprintf (in: _Dest=0x3e661c0, _Format="%c%c" | out: _Dest="1c") returned 2 [0154.538] sprintf (in: _Dest=0x3e661c2, _Format="%c%c" | out: _Dest="e3") returned 2 [0154.538] sprintf (in: _Dest=0x3e661c4, _Format="%c%c" | out: _Dest="1a") returned 2 [0154.538] sprintf (in: _Dest=0x3e661c6, _Format="%c%c" | out: _Dest="75") returned 2 [0154.538] sprintf (in: _Dest=0x3e661c8, _Format="%c%c" | out: _Dest="b9") returned 2 [0154.538] sprintf (in: _Dest=0x3e661ca, _Format="%c%c" | out: _Dest="41") returned 2 [0154.538] sprintf (in: _Dest=0x3e661cc, _Format="%c%c" | out: _Dest="00") returned 2 [0154.538] sprintf (in: _Dest=0x3e661ce, _Format="%c%c" | out: _Dest="83") returned 2 [0154.538] sprintf (in: _Dest=0x3e661d0, _Format="%c%c" | out: _Dest="86") returned 2 [0154.538] sprintf (in: _Dest=0x3e661d2, _Format="%c%c" | out: _Dest="e3") returned 2 [0154.538] sprintf (in: _Dest=0x3e661d4, _Format="%c%c" | out: _Dest="20") returned 2 [0154.538] sprintf (in: _Dest=0x3e661d6, _Format="%c%c" | out: _Dest="e5") returned 2 [0154.538] sprintf (in: _Dest=0x3e661d8, _Format="%c%c" | out: _Dest="de") returned 2 [0154.539] sprintf (in: _Dest=0x3e661da, _Format="%c%c" | out: _Dest="03") returned 2 [0154.539] sprintf (in: _Dest=0x3e661dc, _Format="%c%c" | out: _Dest="e0") returned 2 [0154.539] sprintf (in: _Dest=0x3e661de, _Format="%c%c" | out: _Dest="18") returned 2 [0154.539] sprintf (in: _Dest=0x3e661e0, _Format="%c%c" | out: _Dest="aa") returned 2 [0154.539] sprintf (in: _Dest=0x3e661e2, _Format="%c%c" | out: _Dest="22") returned 2 [0154.539] sprintf (in: _Dest=0x3e661e4, _Format="%c%c" | out: _Dest="27") returned 2 [0154.539] sprintf (in: _Dest=0x3e661e6, _Format="%c%c" | out: _Dest="84") returned 2 [0154.539] sprintf (in: _Dest=0x3e661e8, _Format="%c%c" | out: _Dest="cf") returned 2 [0154.539] sprintf (in: _Dest=0x3e661ea, _Format="%c%c" | out: _Dest="91") returned 2 [0154.539] sprintf (in: _Dest=0x3e661ec, _Format="%c%c" | out: _Dest="59") returned 2 [0154.539] sprintf (in: _Dest=0x3e661ee, _Format="%c%c" | out: _Dest="a5") returned 2 [0154.539] sprintf (in: _Dest=0x3e661f0, _Format="%c%c" | out: _Dest="11") returned 2 [0154.539] sprintf (in: _Dest=0x3e661f2, _Format="%c%c" | out: _Dest="91") returned 2 [0154.539] sprintf (in: _Dest=0x3e661f4, _Format="%c%c" | out: _Dest="d9") returned 2 [0154.539] sprintf (in: _Dest=0x3e661f6, _Format="%c%c" | out: _Dest="94") returned 2 [0154.539] sprintf (in: _Dest=0x3e661f8, _Format="%c%c" | out: _Dest="9e") returned 2 [0154.539] sprintf (in: _Dest=0x3e661fa, _Format="%c%c" | out: _Dest="f3") returned 2 [0154.539] sprintf (in: _Dest=0x3e661fc, _Format="%c%c" | out: _Dest="72") returned 2 [0154.539] sprintf (in: _Dest=0x3e661fe, _Format="%c%c" | out: _Dest="61") returned 2 [0154.539] sprintf (in: _Dest=0x3e66200, _Format="%c%c" | out: _Dest="2a") returned 2 [0154.539] sprintf (in: _Dest=0x3e66202, _Format="%c%c" | out: _Dest="a1") returned 2 [0154.539] sprintf (in: _Dest=0x3e66204, _Format="%c%c" | out: _Dest="e6") returned 2 [0154.539] sprintf (in: _Dest=0x3e66206, _Format="%c%c" | out: _Dest="c7") returned 2 [0154.539] sprintf (in: _Dest=0x3e66208, _Format="%c%c" | out: _Dest="99") returned 2 [0154.539] sprintf (in: _Dest=0x3e6620a, _Format="%c%c" | out: _Dest="4a") returned 2 [0154.539] sprintf (in: _Dest=0x3e6620c, _Format="%c%c" | out: _Dest="ad") returned 2 [0154.540] sprintf (in: _Dest=0x3e6620e, _Format="%c%c" | out: _Dest="cb") returned 2 [0154.540] sprintf (in: _Dest=0x3e66210, _Format="%c%c" | out: _Dest="d2") returned 2 [0154.540] sprintf (in: _Dest=0x3e66212, _Format="%c%c" | out: _Dest="12") returned 2 [0154.540] sprintf (in: _Dest=0x3e66214, _Format="%c%c" | out: _Dest="8b") returned 2 [0154.540] sprintf (in: _Dest=0x3e66216, _Format="%c%c" | out: _Dest="fa") returned 2 [0154.540] sprintf (in: _Dest=0x3e66218, _Format="%c%c" | out: _Dest="ab") returned 2 [0154.540] sprintf (in: _Dest=0x3e6621a, _Format="%c%c" | out: _Dest="d7") returned 2 [0154.540] sprintf (in: _Dest=0x3e6621c, _Format="%c%c" | out: _Dest="73") returned 2 [0154.540] sprintf (in: _Dest=0x3e6621e, _Format="%c%c" | out: _Dest="f7") returned 2 [0154.540] sprintf (in: _Dest=0x3e66220, _Format="%c%c" | out: _Dest="53") returned 2 [0154.540] sprintf (in: _Dest=0x3e66222, _Format="%c%c" | out: _Dest="1e") returned 2 [0154.540] sprintf (in: _Dest=0x3e66224, _Format="%c%c" | out: _Dest="78") returned 2 [0154.540] sprintf (in: _Dest=0x3e66226, _Format="%c%c" | out: _Dest="3a") returned 2 [0154.540] sprintf (in: _Dest=0x3e66228, _Format="%c%c" | out: _Dest="2e") returned 2 [0154.540] sprintf (in: _Dest=0x3e6622a, _Format="%c%c" | out: _Dest="b8") returned 2 [0154.540] sprintf (in: _Dest=0x3e6622c, _Format="%c%c" | out: _Dest="91") returned 2 [0154.540] sprintf (in: _Dest=0x3e6622e, _Format="%c%c" | out: _Dest="61") returned 2 [0154.540] sprintf (in: _Dest=0x3e66230, _Format="%c%c" | out: _Dest="bb") returned 2 [0154.540] sprintf (in: _Dest=0x3e66232, _Format="%c%c" | out: _Dest="83") returned 2 [0154.540] sprintf (in: _Dest=0x3e66234, _Format="%c%c" | out: _Dest="84") returned 2 [0154.540] sprintf (in: _Dest=0x3e66236, _Format="%c%c" | out: _Dest="de") returned 2 [0154.540] sprintf (in: _Dest=0x3e66238, _Format="%c%c" | out: _Dest="4c") returned 2 [0154.541] sprintf (in: _Dest=0x3e6623a, _Format="%c%c" | out: _Dest="fe") returned 2 [0154.541] sprintf (in: _Dest=0x3e6623c, _Format="%c%c" | out: _Dest="bd") returned 2 [0154.541] sprintf (in: _Dest=0x3e6623e, _Format="%c%c" | out: _Dest="be") returned 2 [0154.541] sprintf (in: _Dest=0x3e66240, _Format="%c%c" | out: _Dest="d8") returned 2 [0154.541] sprintf (in: _Dest=0x3e66242, _Format="%c%c" | out: _Dest="df") returned 2 [0154.541] sprintf (in: _Dest=0x3e66244, _Format="%c%c" | out: _Dest="2a") returned 2 [0154.541] sprintf (in: _Dest=0x3e66246, _Format="%c%c" | out: _Dest="0c") returned 2 [0154.541] RtlInitAnsiString (in: DestinationString=0xa7ffa40, SourceString="a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce31a75b941008386e320e5de03e018aa222784cf9159a51191d9949ef372612aa1e6c7994aadcbd2128bfaabd773f7531e783a2eb89161bb8384de4cfebdbed8df2a0c" | out: DestinationString="a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce31a75b941008386e320e5de03e018aa222784cf9159a51191d9949ef372612aa1e6c7994aadcbd2128bfaabd773f7531e783a2eb89161bb8384de4cfebdbed8df2a0c") [0154.541] RtlAnsiStringToUnicodeString (in: DestinationString=0xa7ffa38, SourceString="a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce31a75b941008386e320e5de03e018aa222784cf9159a51191d9949ef372612aa1e6c7994aadcbd2128bfaabd773f7531e783a2eb89161bb8384de4cfebdbed8df2a0c", AllocateDestinationString=1 | out: DestinationString="a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce31a75b941008386e320e5de03e018aa222784cf9159a51191d9949ef372612aa1e6c7994aadcbd2128bfaabd773f7531e783a2eb89161bb8384de4cfebdbed8df2a0c") returned 0x0 [0154.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x2fee080 [0154.541] RtlFreeAnsiString (AnsiString="a") [0154.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0154.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 [0154.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0154.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0154.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23f40) returned 1 [0154.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca7d8) returned 1 [0154.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23bc0) returned 1 [0154.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0154.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f90) returned 1 [0154.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca940) returned 1 [0154.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0154.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3de76b8 [0154.542] wcscat (in: _Dest=0x3de76b8, _Source="a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce3") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce3" [0154.542] wcscat (in: _Dest=0x3de76b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce3.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce3.68814f" [0154.542] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce3.68814f", NtPathName=0xa7ffa30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\a0fb2ff1f815f3f9473bf2f8198cbc57eadcc30f1ce3.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec940 [0154.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 [0154.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a49e10) returned 1 [0154.544] NtQueryInformationFile (in: FileHandle=0x718, IoStatusBlock=0xa7ffa08, FileInformation=0xa7ffa10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa7ffa08, FileInformation=0xa7ffa10) returned 0x0 [0154.544] NtSetInformationFile (FileHandle=0x718, IoStatusBlock=0xa7ffa08, FileInformation=0xa7ffa10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de76b8) returned 1 [0154.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fee080) returned 1 [0154.546] FlushFileBuffers (hFile=0x718) returned 1 [0154.548] CloseHandle (hObject=0x718) returned 1 [0154.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66198 [0154.548] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\" [0154.548] wcscat (in: _Dest=0x3e66198, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\68814F-Readme.txt" [0154.549] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\68814f-readme.txt")) returned 0x2020 [0154.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0154.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dde3e8) returned 1 Thread: id = 2338 os_tid = 0x4f8 [0152.679] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\FPz1vUxb.xls" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\kpku\\fpz1vuxb.xls")) returned 0x20 [0152.679] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\FPz1vUxb.xls", dwFileAttributes=0x20) returned 1 [0154.093] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\FPz1vUxb.xls" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\kpku\\fpz1vuxb.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x700 [0154.093] GetFileSizeEx (in: hFile=0x700, lpFileSize=0xa0dfe2c | out: lpFileSize=0xa0dfe2c*=34505) returned 1 [0154.093] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x86c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.093] ReadFile (in: hFile=0x700, lpBuffer=0xa0dfe08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa0dfe18, lpOverlapped=0x0 | out: lpBuffer=0xa0dfe08*, lpNumberOfBytesRead=0xa0dfe18*=0x4, lpOverlapped=0x0) returned 1 [0154.095] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0154.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0154.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0154.095] NtQuerySystemTime (in: CurrentTime=0xa0dfda0 | out: CurrentTime=0xa0dfda0*=132462177327384000) returned 0x0 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x1d9f3e97 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x7cc0917f [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x7d06c281 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x3e9f4b00 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x419af09a [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x5a584565 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x18ccb9bb [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x3333fcf3 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x140bb02e [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x209f752c [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x19518549 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x1ee8a282 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x5b803793 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x2c40ffff [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x17dac992 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x6d5cee2e [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x134aada0 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x4a29c3de [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x5e000938 [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x434b837f [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x5ca5f7ab [0154.095] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x26bd2df9 [0154.096] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x699d7748 [0154.096] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x55313a85 [0154.096] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x4823c385 [0154.096] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x6485c877 [0154.096] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x1e2b3acf [0154.096] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x4a4acf16 [0154.096] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x27ae281c [0154.096] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x32063ca8 [0154.096] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x529dd37c [0154.096] RtlRandomEx (in: Seed=0xa0dfd98 | out: Seed=0xa0dfd98) returned 0x2765a5e3 [0154.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0154.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0154.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0154.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0154.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0154.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0154.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ca3778 [0154.104] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.105] ReadFile (in: hFile=0x700, lpBuffer=0x7ca3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa0dfda0, lpOverlapped=0x0 | out: lpBuffer=0x7ca3778*, lpNumberOfBytesRead=0xa0dfda0*=0x3c00, lpOverlapped=0x0) returned 1 [0154.308] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55d90 [0154.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0154.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0154.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0154.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0154.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0154.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0154.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55d90) returned 1 [0154.309] WriteFile (in: hFile=0x700, lpBuffer=0x7bf9fa8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa0dfda0, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesWritten=0xa0dfda0*=0x3c00, lpOverlapped=0x0) returned 1 [0154.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0154.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca3778) returned 1 [0154.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86c38 [0154.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a23ff0 [0154.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0154.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0154.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0154.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x3e86848 [0154.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0154.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0154.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0154.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0154.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0154.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x3dec4e0 [0154.908] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.908] WriteFile (in: hFile=0x700, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xa0dfe20, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xa0dfe20*=0x10a, lpOverlapped=0x0) returned 1 [0155.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0155.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0155.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0155.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0155.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x306a9c0 [0155.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0155.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0155.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d78) returned 1 [0155.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0155.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0155.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x3e73f30 [0155.814] sprintf (in: _Dest=0x3e73f30, _Format="%c%c" | out: _Dest="6d") returned 2 [0155.814] sprintf (in: _Dest=0x3e73f32, _Format="%c%c" | out: _Dest="8a") returned 2 [0155.814] sprintf (in: _Dest=0x3e73f34, _Format="%c%c" | out: _Dest="b8") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f36, _Format="%c%c" | out: _Dest="99") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f38, _Format="%c%c" | out: _Dest="1b") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f3a, _Format="%c%c" | out: _Dest="24") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f3c, _Format="%c%c" | out: _Dest="d4") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f3e, _Format="%c%c" | out: _Dest="81") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f40, _Format="%c%c" | out: _Dest="40") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f42, _Format="%c%c" | out: _Dest="38") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f44, _Format="%c%c" | out: _Dest="9c") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f46, _Format="%c%c" | out: _Dest="18") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f48, _Format="%c%c" | out: _Dest="7c") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f4a, _Format="%c%c" | out: _Dest="e9") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f4c, _Format="%c%c" | out: _Dest="4c") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f4e, _Format="%c%c" | out: _Dest="1f") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f50, _Format="%c%c" | out: _Dest="70") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f52, _Format="%c%c" | out: _Dest="0a") returned 2 [0155.815] sprintf (in: _Dest=0x3e73f54, _Format="%c%c" | out: _Dest="78") returned 2 [0155.816] sprintf (in: _Dest=0x3e73f56, _Format="%c%c" | out: _Dest="07") returned 2 [0155.816] sprintf (in: _Dest=0x3e73f58, _Format="%c%c" | out: _Dest="ca") returned 2 [0155.816] sprintf (in: _Dest=0x3e73f5a, _Format="%c%c" | out: _Dest="0c") returned 2 [0155.816] sprintf (in: _Dest=0x3e73f5c, _Format="%c%c" | out: _Dest="a1") returned 2 [0155.816] sprintf (in: _Dest=0x3e73f5e, _Format="%c%c" | out: _Dest="bd") returned 2 [0155.816] RtlInitAnsiString (in: DestinationString=0xa0dfda8, SourceString="6d8ab8991b24d48140389c187ce94c1f700a7807ca0ca1bd" | out: DestinationString="6d8ab8991b24d48140389c187ce94c1f700a7807ca0ca1bd") [0155.816] RtlAnsiStringToUnicodeString (in: DestinationString=0xa0dfda0, SourceString="6d8ab8991b24d48140389c187ce94c1f700a7807ca0ca1bd", AllocateDestinationString=1 | out: DestinationString="6d8ab8991b24d48140389c187ce94c1f700a7807ca0ca1bd") returned 0x0 [0155.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a260e8 [0155.816] RtlFreeAnsiString (AnsiString="6") [0155.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73f30) returned 1 [0155.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x306a9c0) returned 1 [0155.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0155.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0155.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86848) returned 1 [0155.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0155.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0155.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0155.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0155.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0155.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0155.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60750 [0155.818] wcscat (in: _Dest=0x7a60750, _Source="6d8ab8991b24" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\6d8ab8991b24") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\6d8ab8991b24" [0155.818] wcscat (in: _Dest=0x7a60750, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\6d8ab8991b24.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\6d8ab8991b24.68814f" [0155.818] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\6d8ab8991b24.68814f", NtPathName=0xa0dfd98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\6d8ab8991b24.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f590 [0155.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f590) returned 1 [0155.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a51cf0) returned 1 [0155.870] NtQueryInformationFile (in: FileHandle=0x700, IoStatusBlock=0xa0dfd70, FileInformation=0xa0dfd78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa0dfd70, FileInformation=0xa0dfd78) returned 0x0 [0155.871] NtSetInformationFile (FileHandle=0x700, IoStatusBlock=0xa0dfd70, FileInformation=0xa0dfd78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0155.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 [0155.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a260e8) returned 1 [0155.873] FlushFileBuffers (hFile=0x700) returned 1 [0155.877] CloseHandle (hObject=0x700) returned 1 [0155.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60750 [0155.878] wcscpy (in: _Dest=0x7a60750, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\" [0155.878] wcscat (in: _Dest=0x7a60750, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\68814F-Readme.txt" [0155.878] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\kpku\\68814f-readme.txt")) returned 0x20 [0155.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 [0155.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062988) returned 1 Thread: id = 2339 os_tid = 0x3c8 [0152.679] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\QGoRkJTHFTPOhZkX.ods" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\kpku\\qgorkjthftpohzkx.ods")) returned 0x20 [0152.679] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\QGoRkJTHFTPOhZkX.ods", dwFileAttributes=0x20) returned 1 [0154.310] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\QGoRkJTHFTPOhZkX.ods" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\kpku\\qgorkjthftpohzkx.ods"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1874 [0154.310] GetFileSizeEx (in: hFile=0x1874, lpFileSize=0x44cfa1c | out: lpFileSize=0x44cfa1c*=28341) returned 1 [0154.310] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x6eb1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.310] ReadFile (in: hFile=0x1874, lpBuffer=0x44cf9f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x44cfa08, lpOverlapped=0x0 | out: lpBuffer=0x44cf9f8*, lpNumberOfBytesRead=0x44cfa08*=0x4, lpOverlapped=0x0) returned 1 [0154.312] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0154.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2b0 [0154.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0154.313] NtQuerySystemTime (in: CurrentTime=0x44cf990 | out: CurrentTime=0x44cf990*=132462177329568000) returned 0x0 [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x53a4929b [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x60139843 [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x2fa7f430 [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x5cdbe9af [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x26374f07 [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x110b1b3e [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x73517464 [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x4ae725c5 [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x65ffe295 [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0xbd7b97a [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x352acba7 [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x7f0d9aea [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x82580fa [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x31c9c44f [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x50911134 [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0xfbfadbd [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x60f5dd31 [0154.313] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0xd0d7d42 [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x7182703c [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x6c746ac0 [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x28f70ab [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0xe1c0ccd [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x3f0b8eb8 [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x3e602fa6 [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x6866447e [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x609044ed [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x5e1402a1 [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x149538d8 [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x756692d9 [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x7c5495b0 [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x3d0bd83a [0154.314] RtlRandomEx (in: Seed=0x44cf988 | out: Seed=0x44cf988) returned 0x6e3a3a7c [0154.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0154.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0154.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b80) returned 1 [0154.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0154.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0154.332] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.332] ReadFile (in: hFile=0x1874, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x44cf990, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x44cf990*=0x3c00, lpOverlapped=0x0) returned 1 [0154.332] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55d90 [0154.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e07610 [0154.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0154.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0154.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c143e0 [0154.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0154.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0154.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b80) returned 1 [0154.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0154.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55d90) returned 1 [0154.333] WriteFile (in: hFile=0x1874, lpBuffer=0x7c143e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x44cf990, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesWritten=0x44cf990*=0x3c00, lpOverlapped=0x0) returned 1 [0154.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0154.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0154.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73730 [0154.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a23ff0 [0154.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0154.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0154.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0154.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3e73ef0 [0154.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0154.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0154.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0154.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0154.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0154.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d54dd8 [0154.917] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.918] WriteFile (in: hFile=0x1874, lpBuffer=0x3d54dd8*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x44cfa10, lpOverlapped=0x0 | out: lpBuffer=0x3d54dd8*, lpNumberOfBytesWritten=0x44cfa10*=0x11a, lpOverlapped=0x0) returned 1 [0155.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0155.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0155.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0155.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0155.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c38 [0155.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0155.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0155.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0155.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0155.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0155.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe75c8 [0155.821] sprintf (in: _Dest=0x2fe75c8, _Format="%c%c" | out: _Dest="dc") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75ca, _Format="%c%c" | out: _Dest="8d") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75cc, _Format="%c%c" | out: _Dest="cd") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75ce, _Format="%c%c" | out: _Dest="e7") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75d0, _Format="%c%c" | out: _Dest="a6") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75d2, _Format="%c%c" | out: _Dest="9c") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75d4, _Format="%c%c" | out: _Dest="66") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75d6, _Format="%c%c" | out: _Dest="9b") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75d8, _Format="%c%c" | out: _Dest="17") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75da, _Format="%c%c" | out: _Dest="c1") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75dc, _Format="%c%c" | out: _Dest="40") returned 2 [0155.822] sprintf (in: _Dest=0x2fe75de, _Format="%c%c" | out: _Dest="a2") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75e0, _Format="%c%c" | out: _Dest="cd") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75e2, _Format="%c%c" | out: _Dest="7d") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75e4, _Format="%c%c" | out: _Dest="30") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75e6, _Format="%c%c" | out: _Dest="c1") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75e8, _Format="%c%c" | out: _Dest="cc") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75ea, _Format="%c%c" | out: _Dest="46") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75ec, _Format="%c%c" | out: _Dest="11") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75ee, _Format="%c%c" | out: _Dest="be") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75f0, _Format="%c%c" | out: _Dest="35") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75f2, _Format="%c%c" | out: _Dest="e2") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75f4, _Format="%c%c" | out: _Dest="2e") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75f6, _Format="%c%c" | out: _Dest="20") returned 2 [0155.823] sprintf (in: _Dest=0x2fe75f8, _Format="%c%c" | out: _Dest="1c") returned 2 [0155.824] sprintf (in: _Dest=0x2fe75fa, _Format="%c%c" | out: _Dest="9d") returned 2 [0155.824] sprintf (in: _Dest=0x2fe75fc, _Format="%c%c" | out: _Dest="b2") returned 2 [0155.824] sprintf (in: _Dest=0x2fe75fe, _Format="%c%c" | out: _Dest="d5") returned 2 [0155.824] sprintf (in: _Dest=0x2fe7600, _Format="%c%c" | out: _Dest="6f") returned 2 [0155.824] sprintf (in: _Dest=0x2fe7602, _Format="%c%c" | out: _Dest="11") returned 2 [0155.824] sprintf (in: _Dest=0x2fe7604, _Format="%c%c" | out: _Dest="3c") returned 2 [0155.824] sprintf (in: _Dest=0x2fe7606, _Format="%c%c" | out: _Dest="4d") returned 2 [0155.824] sprintf (in: _Dest=0x2fe7608, _Format="%c%c" | out: _Dest="ba") returned 2 [0155.824] sprintf (in: _Dest=0x2fe760a, _Format="%c%c" | out: _Dest="4b") returned 2 [0155.824] sprintf (in: _Dest=0x2fe760c, _Format="%c%c" | out: _Dest="6e") returned 2 [0155.824] sprintf (in: _Dest=0x2fe760e, _Format="%c%c" | out: _Dest="cd") returned 2 [0155.824] sprintf (in: _Dest=0x2fe7610, _Format="%c%c" | out: _Dest="9a") returned 2 [0155.825] sprintf (in: _Dest=0x2fe7612, _Format="%c%c" | out: _Dest="10") returned 2 [0155.825] sprintf (in: _Dest=0x2fe7614, _Format="%c%c" | out: _Dest="bc") returned 2 [0155.825] sprintf (in: _Dest=0x2fe7616, _Format="%c%c" | out: _Dest="69") returned 2 [0155.825] RtlInitAnsiString (in: DestinationString=0x44cf998, SourceString="dc8dcde7a69c669b17c140a2cd7d30c1cc4611be35e22e201c9db2d56f113c4dba4b6ecd9a10bc69" | out: DestinationString="dc8dcde7a69c669b17c140a2cd7d30c1cc4611be35e22e201c9db2d56f113c4dba4b6ecd9a10bc69") [0155.825] RtlAnsiStringToUnicodeString (in: DestinationString=0x44cf990, SourceString="dc8dcde7a69c669b17c140a2cd7d30c1cc4611be35e22e201c9db2d56f113c4dba4b6ecd9a10bc69", AllocateDestinationString=1 | out: DestinationString="dc8dcde7a69c669b17c140a2cd7d30c1cc4611be35e22e201c9db2d56f113c4dba4b6ecd9a10bc69") returned 0x0 [0155.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35aa08 [0155.825] RtlFreeAnsiString (AnsiString="d") [0155.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe75c8) returned 1 [0155.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0155.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0155.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 [0155.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73ef0) returned 1 [0155.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0155.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e73730) returned 1 [0155.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0155.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0155.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0155.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0155.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62a90 [0155.827] wcscat (in: _Dest=0x7a62a90, _Source="dc8dcde7a69c669b17c1" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\dc8dcde7a69c669b17c1") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\dc8dcde7a69c669b17c1" [0155.827] wcscat (in: _Dest=0x7a62a90, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\dc8dcde7a69c669b17c1.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\dc8dcde7a69c669b17c1.68814f" [0155.827] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\dc8dcde7a69c669b17c1.68814f", NtPathName=0x44cf988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\dc8dcde7a69c669b17c1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0155.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf460 [0155.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf460) returned 1 [0155.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4e090) returned 1 [0155.875] NtQueryInformationFile (in: FileHandle=0x1874, IoStatusBlock=0x44cf960, FileInformation=0x44cf968, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x44cf960, FileInformation=0x44cf968) returned 0x0 [0155.875] NtSetInformationFile (FileHandle=0x1874, IoStatusBlock=0x44cf960, FileInformation=0x44cf968, Length=0x28, FileInformationClass=0x4) returned 0x0 [0155.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 [0155.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 [0155.876] FlushFileBuffers (hFile=0x1874) returned 1 [0155.880] CloseHandle (hObject=0x1874) returned 1 [0155.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60750 [0155.881] wcscpy (in: _Dest=0x7a60750, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\" [0155.881] wcscat (in: _Dest=0x7a60750, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\68814F-Readme.txt" [0155.881] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\kpku\\68814f-readme.txt")) returned 0x20 [0155.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 [0155.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 2340 os_tid = 0x3f4 [0152.680] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\_vp0V1CDOBUos24W.ods" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\kpku\\_vp0v1cdobuos24w.ods")) returned 0x20 [0152.680] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\_vp0V1CDOBUos24W.ods", dwFileAttributes=0x20) returned 1 [0153.479] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\_vp0V1CDOBUos24W.ods" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\kpku\\_vp0v1cdobuos24w.ods"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1728 [0153.479] GetFileSizeEx (in: hFile=0x1728, lpFileSize=0xaa5f8e4 | out: lpFileSize=0xaa5f8e4*=44198) returned 1 [0153.479] SetFilePointerEx (in: hFile=0x1728, liDistanceToMove=0xaca2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.479] ReadFile (in: hFile=0x1728, lpBuffer=0xaa5f8c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaa5f8d0, lpOverlapped=0x0 | out: lpBuffer=0xaa5f8c0*, lpNumberOfBytesRead=0xaa5f8d0*=0x4, lpOverlapped=0x0) returned 1 [0153.481] SetFilePointerEx (in: hFile=0x1728, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0153.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0153.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0153.481] NtQuerySystemTime (in: CurrentTime=0xaa5f858 | out: CurrentTime=0xaa5f858*=132462177322236000) returned 0x0 [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x18fb4b25 [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x1bbb12c8 [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x4357200e [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x47d4c9ab [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x342e41b [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x2102e93a [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x6e46599e [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x1a6c1910 [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x8bf5660 [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x5aca24ed [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x2642bac9 [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x1b20a03 [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x10d1874b [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x7a4bafa3 [0153.481] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x7a52f17 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x14e24b74 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x5c8306de [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0xff31613 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x24bfca81 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0xb2cb4a0 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x6288a38d [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x47b6721a [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x61e9d7e [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x4274b9b9 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x3e9cb4b3 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x20a8b630 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x4f4edd9c [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x719c2082 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x6e3d0c83 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0xe671459 [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x186d6bab [0153.482] RtlRandomEx (in: Seed=0xaa5f850 | out: Seed=0xaa5f850) returned 0x3c4ed939 [0153.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0153.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0153.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0153.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0153.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0153.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0153.503] SetFilePointerEx (in: hFile=0x1728, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.503] ReadFile (in: hFile=0x1728, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaa5f858, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xaa5f858*=0x3c00, lpOverlapped=0x0) returned 1 [0153.503] SetFilePointerEx (in: hFile=0x1728, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0153.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08460 [0153.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0153.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0153.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0153.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0153.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0153.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0153.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0153.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0153.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08460) returned 1 [0153.504] WriteFile (in: hFile=0x1728, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaa5f858, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0xaa5f858*=0x3c00, lpOverlapped=0x0) returned 1 [0154.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0154.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0154.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2dcc0 [0154.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b98 [0154.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b98) returned 1 [0154.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d080 [0154.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b98 [0154.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b20 [0154.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b20) returned 1 [0154.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55968 [0154.156] SetFilePointerEx (in: hFile=0x1728, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.156] WriteFile (in: hFile=0x1728, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xaa5f8d8, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xaa5f8d8*=0x11a, lpOverlapped=0x0) returned 1 [0154.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85500 [0154.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0154.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0154.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0154.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c38 [0154.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0154.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0154.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0154.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0154.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0154.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe3b48 [0154.192] sprintf (in: _Dest=0x2fe3b48, _Format="%c%c" | out: _Dest="80") returned 2 [0154.192] sprintf (in: _Dest=0x2fe3b4a, _Format="%c%c" | out: _Dest="25") returned 2 [0154.192] sprintf (in: _Dest=0x2fe3b4c, _Format="%c%c" | out: _Dest="f6") returned 2 [0154.192] sprintf (in: _Dest=0x2fe3b4e, _Format="%c%c" | out: _Dest="22") returned 2 [0154.192] sprintf (in: _Dest=0x2fe3b50, _Format="%c%c" | out: _Dest="c5") returned 2 [0154.192] sprintf (in: _Dest=0x2fe3b52, _Format="%c%c" | out: _Dest="ca") returned 2 [0154.192] sprintf (in: _Dest=0x2fe3b54, _Format="%c%c" | out: _Dest="32") returned 2 [0154.192] sprintf (in: _Dest=0x2fe3b56, _Format="%c%c" | out: _Dest="73") returned 2 [0154.192] sprintf (in: _Dest=0x2fe3b58, _Format="%c%c" | out: _Dest="10") returned 2 [0154.192] sprintf (in: _Dest=0x2fe3b5a, _Format="%c%c" | out: _Dest="a5") returned 2 [0154.192] sprintf (in: _Dest=0x2fe3b5c, _Format="%c%c" | out: _Dest="b9") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b5e, _Format="%c%c" | out: _Dest="19") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b60, _Format="%c%c" | out: _Dest="2f") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b62, _Format="%c%c" | out: _Dest="11") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b64, _Format="%c%c" | out: _Dest="ad") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b66, _Format="%c%c" | out: _Dest="fe") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b68, _Format="%c%c" | out: _Dest="06") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b6a, _Format="%c%c" | out: _Dest="72") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b6c, _Format="%c%c" | out: _Dest="5e") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b6e, _Format="%c%c" | out: _Dest="2b") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b70, _Format="%c%c" | out: _Dest="7b") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b72, _Format="%c%c" | out: _Dest="46") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b74, _Format="%c%c" | out: _Dest="45") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b76, _Format="%c%c" | out: _Dest="63") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b78, _Format="%c%c" | out: _Dest="29") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b7a, _Format="%c%c" | out: _Dest="e4") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b7c, _Format="%c%c" | out: _Dest="1c") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b7e, _Format="%c%c" | out: _Dest="93") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b80, _Format="%c%c" | out: _Dest="00") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b82, _Format="%c%c" | out: _Dest="c9") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b84, _Format="%c%c" | out: _Dest="4b") returned 2 [0154.193] sprintf (in: _Dest=0x2fe3b86, _Format="%c%c" | out: _Dest="49") returned 2 [0154.194] sprintf (in: _Dest=0x2fe3b88, _Format="%c%c" | out: _Dest="cf") returned 2 [0154.194] sprintf (in: _Dest=0x2fe3b8a, _Format="%c%c" | out: _Dest="ed") returned 2 [0154.194] sprintf (in: _Dest=0x2fe3b8c, _Format="%c%c" | out: _Dest="b3") returned 2 [0154.194] sprintf (in: _Dest=0x2fe3b8e, _Format="%c%c" | out: _Dest="82") returned 2 [0154.194] sprintf (in: _Dest=0x2fe3b90, _Format="%c%c" | out: _Dest="38") returned 2 [0154.194] sprintf (in: _Dest=0x2fe3b92, _Format="%c%c" | out: _Dest="7e") returned 2 [0154.194] sprintf (in: _Dest=0x2fe3b94, _Format="%c%c" | out: _Dest="77") returned 2 [0154.194] sprintf (in: _Dest=0x2fe3b96, _Format="%c%c" | out: _Dest="a5") returned 2 [0154.194] RtlInitAnsiString (in: DestinationString=0xaa5f860, SourceString="8025f622c5ca327310a5b9192f11adfe06725e2b7b46456329e41c9300c94b49cfedb382387e77a5" | out: DestinationString="8025f622c5ca327310a5b9192f11adfe06725e2b7b46456329e41c9300c94b49cfedb382387e77a5") [0154.194] RtlAnsiStringToUnicodeString (in: DestinationString=0xaa5f858, SourceString="8025f622c5ca327310a5b9192f11adfe06725e2b7b46456329e41c9300c94b49cfedb382387e77a5", AllocateDestinationString=1 | out: DestinationString="8025f622c5ca327310a5b9192f11adfe06725e2b7b46456329e41c9300c94b49cfedb382387e77a5") returned 0x0 [0154.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bea8 [0154.194] RtlFreeAnsiString (AnsiString="8") [0154.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3b48) returned 1 [0154.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e86c38) returned 1 [0154.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0154.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 [0154.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d080) returned 1 [0154.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b98) returned 1 [0154.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2dcc0) returned 1 [0154.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0154.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0154.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0154.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0154.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x3df4fa0 [0154.195] wcscat (in: _Dest=0x3df4fa0, _Source="8025f622c5ca327310a5" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\8025f622c5ca327310a5") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\8025f622c5ca327310a5" [0154.195] wcscat (in: _Dest=0x3df4fa0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\8025f622c5ca327310a5.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\8025f622c5ca327310a5.68814f" [0154.196] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\8025f622c5ca327310a5.68814f", NtPathName=0xaa5f850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\8025f622c5ca327310a5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0154.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaf0c8 [0154.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf0c8) returned 1 [0154.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f364a0) returned 1 [0154.218] NtQueryInformationFile (in: FileHandle=0x1728, IoStatusBlock=0xaa5f828, FileInformation=0xaa5f830, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaa5f828, FileInformation=0xaa5f830) returned 0x0 [0154.218] NtSetInformationFile (FileHandle=0x1728, IoStatusBlock=0xaa5f828, FileInformation=0xaa5f830, Length=0x28, FileInformationClass=0x4) returned 0x0 [0154.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 [0154.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 [0154.223] FlushFileBuffers (hFile=0x1728) returned 1 [0154.227] CloseHandle (hObject=0x1728) returned 1 [0154.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d442a0 [0154.236] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\" [0154.236] wcscat (in: _Dest=0x3d442a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\68814F-Readme.txt" [0154.236] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\kpku\\68814f-readme.txt")) returned 0xffffffff [0154.236] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\YGvDFL\\j7DPDV-k\\kpKU\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\ygvdfl\\j7dpdv-k\\kpku\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1728 [0154.245] WriteFile (in: hFile=0x1728, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaa5f86c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xaa5f86c*=0x8b9, lpOverlapped=0x0) returned 1 [0154.249] CloseHandle (hObject=0x1728) returned 1 [0154.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 [0154.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 2341 os_tid = 0xbc0 [0152.680] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm")) returned 0x20 [0152.681] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0152.681] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.681] GetLastError () returned 0x5 [0152.681] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 0 [0152.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 Thread: id = 2342 os_tid = 0xba8 [0152.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40448 [0152.683] wcscpy (in: _Dest=0x3d40448, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0152.683] wcscat (in: _Dest=0x3d40448, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0152.683] wcscat (in: _Dest=0x3d40448, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*" [0152.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc810 [0152.683] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0152.684] wcscmp (_String1=".", _String2=".") returned 0 [0152.684] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5872ee0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5872ee0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.684] wcscmp (_String1="..", _String2=".") returned 1 [0152.684] wcscmp (_String1="..", _String2="..") returned 0 [0152.684] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0152.684] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0152.684] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0152.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ddf3d8 [0152.684] wcscpy (in: _Dest=0x3ddf3d8, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" [0152.685] wcscat (in: _Dest=0x3ddf3d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\" [0152.685] wcscat (in: _Dest=0x3ddf3d8, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0164.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3daf178 [0164.501] wcscpy (in: _Dest=0x3daf178, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" [0164.501] wcscat (in: _Dest=0x3daf178, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\" [0164.501] wcscat (in: _Dest=0x3daf178, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*" [0164.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52c98 [0164.501] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78b0 [0164.501] wcscmp (_String1=".", _String2=".") returned 0 [0164.501] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.502] wcscmp (_String1="..", _String2=".") returned 1 [0164.502] wcscmp (_String1="..", _String2="..") returned 0 [0164.502] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66936b00, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x66936b00, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x66936b00, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0164.502] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0164.502] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0164.502] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0164.502] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0164.502] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0164.502] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904c9200, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x904c9200, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x904c9200, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0164.502] FindClose (in: hFindFile=0x7ad78b0 | out: hFindFile=0x7ad78b0) returned 1 [0164.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52c98) returned 1 [0164.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf178) returned 1 [0164.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf3d8) returned 1 [0164.503] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5872ee0, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0164.503] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0164.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc810) returned 1 [0164.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40448) returned 1 [0164.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a88) returned 1 Thread: id = 2343 os_tid = 0xbc8 [0152.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40380 [0152.685] wcscpy (in: _Dest=0x3d40380, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0152.685] wcscat (in: _Dest=0x3d40380, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0152.686] wcscat (in: _Dest=0x3d40380, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*" [0152.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0152.686] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0152.686] wcscmp (_String1=".", _String2=".") returned 0 [0152.686] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5899040, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5899040, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.686] wcscmp (_String1="..", _String2=".") returned 1 [0152.686] wcscmp (_String1="..", _String2="..") returned 0 [0152.686] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0152.686] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1 [0152.687] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1 [0152.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadb30 [0152.687] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" [0152.687] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\" [0152.687] wcscat (in: _Dest=0x3dadb30, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0164.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dad468 [0164.526] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" [0164.526] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\" [0164.526] wcscat (in: _Dest=0x3dad468, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*" [0164.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc810 [0164.526] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0164.527] wcscmp (_String1=".", _String2=".") returned 0 [0164.527] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.527] wcscmp (_String1="..", _String2=".") returned 1 [0164.527] wcscmp (_String1="..", _String2="..") returned 0 [0164.527] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f5c500, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x68f5c500, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x68f5c500, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0164.527] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0164.527] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0164.527] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0164.528] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0164.528] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0164.528] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e01900, ftCreationTime.dwHighDateTime=0x1d28889, ftLastAccessTime.dwLowDateTime=0x93e01900, ftLastAccessTime.dwHighDateTime=0x1d28889, ftLastWriteTime.dwLowDateTime=0x93e01900, ftLastWriteTime.dwHighDateTime=0x1d28889, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0164.528] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0164.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc810) returned 1 [0164.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 [0164.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 [0164.528] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5899040, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe58bf1a0, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe58bf1a0, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0164.528] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0164.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0164.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40380) returned 1 [0164.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40768) returned 1 Thread: id = 2344 os_tid = 0xadc [0152.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan")) returned 0x20 [0152.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN", dwFileAttributes=0x20) returned 0 [0152.688] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.688] GetLastError () returned 0x5 [0152.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN", dwFileAttributes=0x20) returned 0 [0152.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e138) returned 1 Thread: id = 2345 os_tid = 0x570 [0152.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu")) returned 0x20 [0152.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU", dwFileAttributes=0x20) returned 0 [0152.690] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.690] GetLastError () returned 0x5 [0152.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU", dwFileAttributes=0x20) returned 0 [0152.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 Thread: id = 2346 os_tid = 0xbac [0152.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp")) returned 0x20 [0152.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP", dwFileAttributes=0x20) returned 0 [0152.692] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.692] GetLastError () returned 0x5 [0152.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP", dwFileAttributes=0x20) returned 0 [0152.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3054050) returned 1 Thread: id = 2347 os_tid = 0xbc4 [0152.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq")) returned 0x20 [0152.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ", dwFileAttributes=0x20) returned 0 [0152.694] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.694] GetLastError () returned 0x5 [0152.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ", dwFileAttributes=0x20) returned 0 [0152.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 Thread: id = 2348 os_tid = 0x248 [0152.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra")) returned 0x20 [0152.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA", dwFileAttributes=0x20) returned 0 [0152.696] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.696] GetLastError () returned 0x5 [0152.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA", dwFileAttributes=0x20) returned 0 [0152.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 Thread: id = 2349 os_tid = 0x220 [0152.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita")) returned 0x20 [0152.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA", dwFileAttributes=0x20) returned 0 [0152.698] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.698] GetLastError () returned 0x5 [0152.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA", dwFileAttributes=0x20) returned 0 [0152.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052df0) returned 1 Thread: id = 2350 os_tid = 0x564 [0152.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn")) returned 0x20 [0152.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN", dwFileAttributes=0x20) returned 0 [0152.700] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.701] GetLastError () returned 0x5 [0152.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN", dwFileAttributes=0x20) returned 0 [0152.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f788) returned 1 Thread: id = 2351 os_tid = 0x5f8 [0152.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor")) returned 0x20 [0152.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR", dwFileAttributes=0x20) returned 0 [0152.702] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.702] GetLastError () returned 0x5 [0152.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR", dwFileAttributes=0x20) returned 0 [0152.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e1e0) returned 1 Thread: id = 2352 os_tid = 0x640 [0152.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp")) returned 0x20 [0154.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", dwFileAttributes=0x20) returned 0 [0154.455] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.456] GetLastError () returned 0x5 [0154.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp", dwFileAttributes=0x20) returned 0 [0154.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f2f0) returned 1 Thread: id = 2353 os_tid = 0x72c [0152.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld")) returned 0x20 [0154.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD", dwFileAttributes=0x20) returned 0 [0154.459] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.460] GetLastError () returned 0x5 [0154.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD", dwFileAttributes=0x20) returned 0 [0154.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f248) returned 1 Thread: id = 2354 os_tid = 0xbb0 [0152.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor")) returned 0x20 [0154.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR", dwFileAttributes=0x20) returned 0 [0154.461] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.461] GetLastError () returned 0x5 [0154.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR", dwFileAttributes=0x20) returned 0 [0154.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f4e8) returned 1 Thread: id = 2355 os_tid = 0x56c [0152.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb")) returned 0x20 [0153.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB", dwFileAttributes=0x20) returned 0 [0153.774] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.774] GetLastError () returned 0x5 [0153.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB", dwFileAttributes=0x20) returned 0 [0153.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f398) returned 1 Thread: id = 2356 os_tid = 0x2ac [0152.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo")) returned 0x20 [0154.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", dwFileAttributes=0x20) returned 0 [0154.454] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.454] GetLastError () returned 0x5 [0154.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO", dwFileAttributes=0x20) returned 0 [0154.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 Thread: id = 2357 os_tid = 0x518 [0152.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve")) returned 0x20 [0154.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE", dwFileAttributes=0x20) returned 0 [0154.457] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.458] GetLastError () returned 0x5 [0154.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE", dwFileAttributes=0x20) returned 0 [0154.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f0f8) returned 1 Thread: id = 2358 os_tid = 0x6fc [0152.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml")) returned 0x20 [0152.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", dwFileAttributes=0x20) returned 0 [0152.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.764] GetLastError () returned 0x5 [0152.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", dwFileAttributes=0x20) returned 0 [0152.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 Thread: id = 2359 os_tid = 0xf74 [0152.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml")) returned 0x20 [0155.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0155.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.631] GetLastError () returned 0x5 [0155.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", dwFileAttributes=0x20) returned 0 [0155.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f638) returned 1 Thread: id = 2360 os_tid = 0xf6c [0152.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml")) returned 0x20 [0155.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0155.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.611] GetLastError () returned 0x5 [0155.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", dwFileAttributes=0x20) returned 0 [0155.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e480) returned 1 Thread: id = 2361 os_tid = 0x738 [0152.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml")) returned 0x20 [0154.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", dwFileAttributes=0x20) returned 0 [0154.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.905] GetLastError () returned 0x5 [0154.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", dwFileAttributes=0x20) returned 0 [0154.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f6e0) returned 1 Thread: id = 2362 os_tid = 0xb04 [0152.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml")) returned 0x20 [0155.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", dwFileAttributes=0x20) returned 0 [0155.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.638] GetLastError () returned 0x5 [0155.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", dwFileAttributes=0x20) returned 0 [0155.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 Thread: id = 2363 os_tid = 0x59c [0152.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml")) returned 0x20 [0155.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", dwFileAttributes=0x20) returned 0 [0155.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.637] GetLastError () returned 0x5 [0155.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", dwFileAttributes=0x20) returned 0 [0155.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f590) returned 1 Thread: id = 2364 os_tid = 0xcd8 [0152.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml")) returned 0x20 [0155.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0155.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.635] GetLastError () returned 0x5 [0155.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", dwFileAttributes=0x20) returned 0 [0155.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f440) returned 1 Thread: id = 2365 os_tid = 0xcc4 [0152.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml")) returned 0x20 [0155.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0155.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.632] GetLastError () returned 0x5 [0155.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0155.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f050) returned 1 Thread: id = 2366 os_tid = 0xfdc [0152.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml")) returned 0x20 [0155.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0155.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.629] GetLastError () returned 0x5 [0155.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0155.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63df0) returned 1 Thread: id = 2367 os_tid = 0xd10 [0152.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml")) returned 0x20 [0155.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml", dwFileAttributes=0x20) returned 0 [0155.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.628] GetLastError () returned 0x5 [0155.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml", dwFileAttributes=0x20) returned 0 [0155.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 Thread: id = 2368 os_tid = 0x8c4 [0152.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml")) returned 0x20 [0155.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml", dwFileAttributes=0x20) returned 0 [0155.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.626] GetLastError () returned 0x5 [0155.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml", dwFileAttributes=0x20) returned 0 [0155.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 2369 os_tid = 0x914 [0152.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml")) returned 0x20 [0155.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0155.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.625] GetLastError () returned 0x5 [0155.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0155.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 2370 os_tid = 0x67c [0152.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml")) returned 0x20 [0155.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0155.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.623] GetLastError () returned 0x5 [0155.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0155.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e528) returned 1 Thread: id = 2371 os_tid = 0x8c0 [0152.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml")) returned 0x20 [0155.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0155.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.622] GetLastError () returned 0x5 [0155.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0155.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b9d8) returned 1 Thread: id = 2372 os_tid = 0x910 [0152.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml")) returned 0x20 [0155.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0155.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.620] GetLastError () returned 0x5 [0155.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0155.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e678) returned 1 Thread: id = 2373 os_tid = 0xffc [0152.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml")) returned 0x20 [0155.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml", dwFileAttributes=0x20) returned 0 [0155.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.619] GetLastError () returned 0x5 [0155.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml", dwFileAttributes=0x20) returned 0 [0155.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e720) returned 1 Thread: id = 2374 os_tid = 0x81c [0152.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml")) returned 0x20 [0155.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0155.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.617] GetLastError () returned 0x5 [0155.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0155.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e7c8) returned 1 Thread: id = 2375 os_tid = 0x82c [0152.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml")) returned 0x20 [0155.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml", dwFileAttributes=0x20) returned 0 [0155.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.616] GetLastError () returned 0x5 [0155.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml", dwFileAttributes=0x20) returned 0 [0155.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a626d0) returned 1 Thread: id = 2376 os_tid = 0x89c [0152.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml")) returned 0x20 [0155.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml", dwFileAttributes=0x20) returned 0 [0155.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.614] GetLastError () returned 0x5 [0155.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml", dwFileAttributes=0x20) returned 0 [0155.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 2377 os_tid = 0x8ac [0152.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml")) returned 0x20 [0155.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml", dwFileAttributes=0x20) returned 0 [0155.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.613] GetLastError () returned 0x5 [0155.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml", dwFileAttributes=0x20) returned 0 [0155.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 2378 os_tid = 0x8bc [0152.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml")) returned 0x20 [0155.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0155.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.121] GetLastError () returned 0x5 [0155.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0155.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e870) returned 1 Thread: id = 2379 os_tid = 0x84c [0152.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf")) returned 0x20 [0152.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0152.803] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.804] GetLastError () returned 0x5 [0152.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0152.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c00) returned 1 Thread: id = 2380 os_tid = 0x86c [0152.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf")) returned 0x20 [0152.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0152.806] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.806] GetLastError () returned 0x5 [0152.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0152.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64a10) returned 1 Thread: id = 2381 os_tid = 0x88c [0152.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt")) returned 0x20 [0153.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt", dwFileAttributes=0x20) returned 0 [0155.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.598] GetLastError () returned 0x5 [0155.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt", dwFileAttributes=0x20) returned 0 [0155.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad64e0) returned 1 Thread: id = 2382 os_tid = 0x8cc [0152.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt")) returned 0x20 [0153.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt", dwFileAttributes=0x20) returned 0 [0155.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.600] GetLastError () returned 0x5 [0155.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt", dwFileAttributes=0x20) returned 0 [0155.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64da0) returned 1 Thread: id = 2383 os_tid = 0x8dc [0152.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e3a0 [0152.809] wcscpy (in: _Dest=0x3f3e3a0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.809] wcscat (in: _Dest=0x3f3e3a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.809] wcscat (in: _Dest=0x3f3e3a0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*" [0152.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0152.809] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d240 [0152.809] wcscmp (_String1=".", _String2=".") returned 0 [0152.809] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.809] wcscmp (_String1="..", _String2=".") returned 1 [0152.809] wcscmp (_String1="..", _String2="..") returned 0 [0152.809] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0152.810] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0152.810] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0152.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62310 [0152.810] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0152.810] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0152.810] wcscat (in: _Dest=0x7a62310, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" [0159.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0159.045] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0159.045] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0159.045] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0159.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a629f0 [0159.046] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.046] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.046] wcscat (in: _Dest=0x7a629f0, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" [0159.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0159.047] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835df600, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x835df600, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0159.047] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0159.047] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0159.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62c70 [0159.048] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.048] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.048] wcscat (in: _Dest=0x7a62c70, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" [0159.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0159.049] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0159.049] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0159.049] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0159.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad6f90 [0159.049] wcscpy (in: _Dest=0x7ad6f90, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.049] wcscat (in: _Dest=0x7ad6f90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.049] wcscat (in: _Dest=0x7ad6f90, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" [0159.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0159.075] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0159.075] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0159.075] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0159.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63170 [0159.075] wcscpy (in: _Dest=0x7a63170, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.075] wcscat (in: _Dest=0x7a63170, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.075] wcscat (in: _Dest=0x7a63170, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" [0159.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0159.076] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99450400, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99450400, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0159.077] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0159.077] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0159.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6ef8 [0159.077] wcscpy (in: _Dest=0x7ad6ef8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.077] wcscat (in: _Dest=0x7ad6ef8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.077] wcscat (in: _Dest=0x7ad6ef8, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" [0159.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0159.078] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x3546d5f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0159.078] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0159.078] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0159.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a638f0 [0159.078] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.078] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.078] wcscat (in: _Dest=0x7a638f0, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" [0159.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a638f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0159.079] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4f0a000, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4f0a000, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0159.079] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0159.079] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0159.079] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad60b8 [0159.079] wcscpy (in: _Dest=0x7ad60b8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.079] wcscat (in: _Dest=0x7ad60b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.079] wcscat (in: _Dest=0x7ad60b8, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" [0159.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad60b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0159.081] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0159.081] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0159.081] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0159.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6908 [0159.081] wcscpy (in: _Dest=0x7ad6908, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.081] wcscat (in: _Dest=0x7ad6908, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.081] wcscat (in: _Dest=0x7ad6908, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" [0159.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0159.082] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cf4000, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0cf4000, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0159.082] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0159.082] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0159.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6c98 [0159.082] wcscpy (in: _Dest=0x7ad6c98, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.082] wcscat (in: _Dest=0x7ad6c98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.082] wcscat (in: _Dest=0x7ad6c98, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" [0159.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0159.083] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0159.083] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0159.083] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0159.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63490 [0159.083] wcscpy (in: _Dest=0x7a63490, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.083] wcscat (in: _Dest=0x7a63490, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.084] wcscat (in: _Dest=0x7a63490, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" [0159.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0159.085] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0159.085] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0159.085] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0159.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62b30 [0159.085] wcscpy (in: _Dest=0x7a62b30, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.085] wcscat (in: _Dest=0x7a62b30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.085] wcscat (in: _Dest=0x7a62b30, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" [0159.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0159.086] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f11e00, ftCreationTime.dwHighDateTime=0x1caca7d, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f11e00, ftLastWriteTime.dwHighDateTime=0x1caca7d, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0159.086] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0159.086] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0159.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6d30 [0159.086] wcscpy (in: _Dest=0x7ad6d30, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.086] wcscat (in: _Dest=0x7ad6d30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.086] wcscat (in: _Dest=0x7ad6d30, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" [0159.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0159.087] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0159.087] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0159.087] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0159.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad5310 [0159.087] wcscpy (in: _Dest=0x7ad5310, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.087] wcscat (in: _Dest=0x7ad5310, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.087] wcscat (in: _Dest=0x7ad5310, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" [0159.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0159.088] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa217b900, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa217b900, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0159.088] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0159.088] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0159.088] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6740 [0159.089] wcscpy (in: _Dest=0x7ad6740, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.089] wcscat (in: _Dest=0x7ad6740, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.089] wcscat (in: _Dest=0x7ad6740, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" [0159.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0159.090] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4819f200, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4819f200, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0159.090] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0159.090] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0159.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63350 [0159.090] wcscpy (in: _Dest=0x7a63350, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.090] wcscat (in: _Dest=0x7a63350, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.090] wcscat (in: _Dest=0x7a63350, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" [0159.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0159.091] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46e8c500, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46e8c500, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0159.091] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0159.091] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0159.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63670 [0159.091] wcscpy (in: _Dest=0x7a63670, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.091] wcscat (in: _Dest=0x7a63670, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.091] wcscat (in: _Dest=0x7a63670, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" [0159.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0159.092] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82d25900, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82d25900, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0159.092] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0159.092] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0159.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a635d0 [0159.092] wcscpy (in: _Dest=0x7a635d0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.092] wcscat (in: _Dest=0x7a635d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.092] wcscat (in: _Dest=0x7a635d0, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" [0159.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a635d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0159.093] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cef700, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77cef700, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0159.093] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0159.093] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0159.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7ad54d8 [0159.094] wcscpy (in: _Dest=0x7ad54d8, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.094] wcscat (in: _Dest=0x7ad54d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.094] wcscat (in: _Dest=0x7ad54d8, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" [0159.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad54d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0159.095] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0159.095] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0159.095] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0159.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6c00 [0159.095] wcscpy (in: _Dest=0x7ad6c00, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.095] wcscat (in: _Dest=0x7ad6c00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.095] wcscat (in: _Dest=0x7ad6c00, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" [0159.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0159.096] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf11c1900, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf11c1900, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0159.096] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0159.096] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0159.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62590 [0159.096] wcscpy (in: _Dest=0x7a62590, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.096] wcscat (in: _Dest=0x7a62590, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.096] wcscat (in: _Dest=0x7a62590, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" [0159.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0159.097] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0159.097] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0159.097] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0159.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad5148 [0159.097] wcscpy (in: _Dest=0x7ad5148, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.097] wcscat (in: _Dest=0x7ad5148, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.097] wcscat (in: _Dest=0x7ad5148, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" [0159.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0159.098] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0159.098] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0159.098] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0159.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad63b0 [0159.098] wcscpy (in: _Dest=0x7ad63b0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.098] wcscat (in: _Dest=0x7ad63b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.098] wcscat (in: _Dest=0x7ad63b0, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" [0159.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad63b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0159.099] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ada9700, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ada9700, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0159.099] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0159.099] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0159.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6a38 [0159.099] wcscpy (in: _Dest=0x7ad6a38, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.099] wcscat (in: _Dest=0x7ad6a38, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.100] wcscat (in: _Dest=0x7ad6a38, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" [0159.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0159.101] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0159.101] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0159.101] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0159.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62a90 [0159.101] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.101] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.101] wcscat (in: _Dest=0x7a62a90, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" [0159.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0159.102] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35111d00, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356f4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35111d00, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0159.102] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0159.102] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0159.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62f90 [0159.102] wcscpy (in: _Dest=0x7a62f90, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.102] wcscat (in: _Dest=0x7a62f90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.102] wcscat (in: _Dest=0x7a62f90, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" [0159.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0159.103] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0159.103] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0159.103] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0159.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62630 [0159.104] wcscpy (in: _Dest=0x7a62630, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036" [0159.104] wcscat (in: _Dest=0x7a62630, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\" [0159.104] wcscat (in: _Dest=0x7a62630, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" [0159.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0159.105] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde581300, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde581300, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0159.105] FindClose (in: hFindFile=0x7a2d240 | out: hFindFile=0x7a2d240) returned 1 [0159.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0159.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0159.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23300) returned 1 Thread: id = 2384 os_tid = 0x8ec [0152.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e490 [0152.810] wcscpy (in: _Dest=0x3f3e490, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0152.810] wcscat (in: _Dest=0x3f3e490, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0152.810] wcscat (in: _Dest=0x3f3e490, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*" [0152.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0152.810] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d640 [0152.811] wcscmp (_String1=".", _String2=".") returned 0 [0152.811] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x352ca6d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3571aeb0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.811] wcscmp (_String1="..", _String2=".") returned 1 [0152.811] wcscmp (_String1="..", _String2="..") returned 0 [0152.811] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x352ca6d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0152.811] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2=".") returned 1 [0152.811] wcscmp (_String1="ENVELOPR.DLL.trx_dll", _String2="..") returned 1 [0152.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a681d0 [0152.811] wcscpy (in: _Dest=0x7a681d0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0152.811] wcscat (in: _Dest=0x7a681d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0152.811] wcscat (in: _Dest=0x7a681d0, _Source="ENVELOPR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" [0163.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a681d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0163.501] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35362c50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0163.501] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2=".") returned 1 [0163.501] wcscmp (_String1="GRINTL32.DLL.trx_dll", _String2="..") returned 1 [0163.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a621d0 [0163.502] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.502] wcscat (in: _Dest=0x7a621d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.502] wcscat (in: _Dest=0x7a621d0, _Source="GRINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" [0163.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a621d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0163.504] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c36e800, ftCreationTime.dwHighDateTime=0x1cac85c, ftLastAccessTime.dwLowDateTime=0x35388db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c36e800, ftLastWriteTime.dwHighDateTime=0x1cac85c, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0163.504] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2=".") returned 1 [0163.504] wcscmp (_String1="GRINTL32.REST.trx_dll", _String2="..") returned 1 [0163.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62810 [0163.504] wcscpy (in: _Dest=0x7a62810, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.504] wcscat (in: _Dest=0x7a62810, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.504] wcscat (in: _Dest=0x7a62810, _Source="GRINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" [0163.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0163.505] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x353aef10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0163.505] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2=".") returned 1 [0163.505] wcscmp (_String1="MAPIR.DLL.trx_dll", _String2="..") returned 1 [0163.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6018 [0163.505] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.505] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.505] wcscat (in: _Dest=0x3eb6018, _Source="MAPIR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" [0163.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0163.507] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0163.507] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2=".") returned 1 [0163.507] wcscmp (_String1="MOR6INT.REST.trx_dll", _String2="..") returned 1 [0163.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a626d0 [0163.507] wcscpy (in: _Dest=0x7a626d0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.507] wcscat (in: _Dest=0x7a626d0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.507] wcscat (in: _Dest=0x7a626d0, _Source="MOR6INT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" [0163.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a626d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0163.508] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x353d5070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0163.508] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2=".") returned 1 [0163.508] wcscmp (_String1="MSOINTL.DLL.trx_dll", _String2="..") returned 1 [0163.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb5860 [0163.509] wcscpy (in: _Dest=0x3eb5860, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.509] wcscat (in: _Dest=0x3eb5860, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.509] wcscat (in: _Dest=0x3eb5860, _Source="MSOINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" [0163.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0163.510] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a763100, ftCreationTime.dwHighDateTime=0x1caca72, ftLastAccessTime.dwLowDateTime=0x35493750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9a763100, ftLastWriteTime.dwHighDateTime=0x1caca72, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0163.510] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2=".") returned 1 [0163.510] wcscmp (_String1="MSOINTL.REST.trx_dll", _String2="..") returned 1 [0163.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63fd0 [0163.510] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.510] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.510] wcscat (in: _Dest=0x7a63fd0, _Source="MSOINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" [0163.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0163.512] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdc99200, ftCreationTime.dwHighDateTime=0x1cac860, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbdc99200, ftLastWriteTime.dwHighDateTime=0x1cac860, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0163.512] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2=".") returned 1 [0163.512] wcscmp (_String1="OMSINTL.DLL.trx_dll", _String2="..") returned 1 [0163.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb61e0 [0163.512] wcscpy (in: _Dest=0x3eb61e0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.512] wcscat (in: _Dest=0x3eb61e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.512] wcscat (in: _Dest=0x3eb61e0, _Source="OMSINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" [0163.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb61e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0163.513] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x35505b70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0163.513] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2=".") returned 1 [0163.513] wcscmp (_String1="ONINTL.DLL.trx_dll", _String2="..") returned 1 [0163.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5a28 [0163.513] wcscpy (in: _Dest=0x3eb5a28, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.513] wcscat (in: _Dest=0x3eb5a28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.514] wcscat (in: _Dest=0x3eb5a28, _Source="ONINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" [0163.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0163.515] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad3bb900, ftCreationTime.dwHighDateTime=0x1cacfd0, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad3bb900, ftLastWriteTime.dwHighDateTime=0x1cacfd0, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0163.515] wcscmp (_String1="ONINTL.REST.trx_dll", _String2=".") returned 1 [0163.515] wcscmp (_String1="ONINTL.REST.trx_dll", _String2="..") returned 1 [0163.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb7318 [0163.515] wcscpy (in: _Dest=0x3eb7318, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.515] wcscat (in: _Dest=0x3eb7318, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.515] wcscat (in: _Dest=0x3eb7318, _Source="ONINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" [0163.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0163.517] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x3552bcd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0163.517] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2=".") returned 1 [0163.517] wcscmp (_String1="OUTLLIBR.DLL.trx_dll", _String2="..") returned 1 [0163.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62950 [0163.517] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.517] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.517] wcscat (in: _Dest=0x7a62950, _Source="OUTLLIBR.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" [0163.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0163.519] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0163.519] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2=".") returned 1 [0163.519] wcscmp (_String1="OUTLLIBR.REST.trx_dll", _String2="..") returned 1 [0163.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62130 [0163.519] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.519] wcscat (in: _Dest=0x7a62130, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.519] wcscat (in: _Dest=0x7a62130, _Source="OUTLLIBR.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" [0163.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0163.520] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75d28700, ftCreationTime.dwHighDateTime=0x1caca7b, ftLastAccessTime.dwLowDateTime=0x35551e30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x75d28700, ftLastWriteTime.dwHighDateTime=0x1caca7b, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0163.520] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2=".") returned 1 [0163.520] wcscmp (_String1="OUTLWVW.DLL.trx_dll", _String2="..") returned 1 [0163.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb7578 [0163.521] wcscpy (in: _Dest=0x3eb7578, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.521] wcscat (in: _Dest=0x3eb7578, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.521] wcscat (in: _Dest=0x3eb7578, _Source="OUTLWVW.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" [0163.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0163.522] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0163.522] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2=".") returned 1 [0163.522] wcscmp (_String1="PPINTL.DLL.trx_dll", _String2="..") returned 1 [0163.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb7020 [0163.523] wcscpy (in: _Dest=0x3eb7020, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.523] wcscat (in: _Dest=0x3eb7020, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.523] wcscat (in: _Dest=0x3eb7020, _Source="PPINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" [0163.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0163.524] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94faca00, ftCreationTime.dwHighDateTime=0x1cac86b, ftLastAccessTime.dwLowDateTime=0x35577f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94faca00, ftLastWriteTime.dwHighDateTime=0x1cac86b, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0163.524] wcscmp (_String1="PPINTL.REST.trx_dll", _String2=".") returned 1 [0163.524] wcscmp (_String1="PPINTL.REST.trx_dll", _String2="..") returned 1 [0163.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb6900 [0163.524] wcscpy (in: _Dest=0x3eb6900, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.524] wcscat (in: _Dest=0x3eb6900, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.524] wcscat (in: _Dest=0x3eb6900, _Source="PPINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" [0163.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0163.526] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x3559e0f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0163.526] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2=".") returned 1 [0163.526] wcscmp (_String1="PUB6INTL.DLL.trx_dll", _String2="..") returned 1 [0163.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63df0 [0163.526] wcscpy (in: _Dest=0x7a63df0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.526] wcscat (in: _Dest=0x7a63df0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.526] wcscat (in: _Dest=0x7a63df0, _Source="PUB6INTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" [0163.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0163.528] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffaf0400, ftCreationTime.dwHighDateTime=0x1cac871, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xffaf0400, ftLastWriteTime.dwHighDateTime=0x1cac871, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0163.528] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2=".") returned 1 [0163.528] wcscmp (_String1="PUB6INTL.REST.trx_dll", _String2="..") returned 1 [0163.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62a90 [0163.528] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.528] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.528] wcscat (in: _Dest=0x7a62a90, _Source="PUB6INTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" [0163.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0163.529] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81a12c00, ftCreationTime.dwHighDateTime=0x1cac876, ftLastAccessTime.dwLowDateTime=0x355c4250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x81a12c00, ftLastWriteTime.dwHighDateTime=0x1cac876, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0163.529] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2=".") returned 1 [0163.529] wcscmp (_String1="PUBWZINT.REST.trx_dll", _String2="..") returned 1 [0163.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63530 [0163.529] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.529] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.529] wcscat (in: _Dest=0x7a63530, _Source="PUBWZINT.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" [0163.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0163.531] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x874e4000, ftCreationTime.dwHighDateTime=0x1cac87d, ftLastAccessTime.dwLowDateTime=0x355ea3b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x874e4000, ftLastWriteTime.dwHighDateTime=0x1cac87d, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0163.531] wcscmp (_String1="SGRES.DLL.trx_dll", _String2=".") returned 1 [0163.531] wcscmp (_String1="SGRES.DLL.trx_dll", _String2="..") returned 1 [0163.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a64090 [0163.531] wcscpy (in: _Dest=0x7a64090, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.531] wcscat (in: _Dest=0x7a64090, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.531] wcscat (in: _Dest=0x7a64090, _Source="SGRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" [0163.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0163.532] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdedbb400, ftCreationTime.dwHighDateTime=0x1cac85b, ftLastAccessTime.dwLowDateTime=0x35610510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdedbb400, ftLastWriteTime.dwHighDateTime=0x1cac85b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0163.532] wcscmp (_String1="STINTL.DLL.trx_dll", _String2=".") returned 1 [0163.532] wcscmp (_String1="STINTL.DLL.trx_dll", _String2="..") returned 1 [0163.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64128 [0163.533] wcscpy (in: _Dest=0x7a64128, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.533] wcscat (in: _Dest=0x7a64128, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.533] wcscat (in: _Dest=0x7a64128, _Source="STINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" [0163.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0163.534] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe792b100, ftCreationTime.dwHighDateTime=0x1cac880, ftLastAccessTime.dwLowDateTime=0x3565c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe792b100, ftLastWriteTime.dwHighDateTime=0x1cac880, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0163.534] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2=".") returned 1 [0163.534] wcscmp (_String1="VISBRRES.DLL.trx_dll", _String2="..") returned 1 [0163.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62c70 [0163.534] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.534] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.534] wcscat (in: _Dest=0x7a62c70, _Source="VISBRRES.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" [0163.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0163.536] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62a49900, ftCreationTime.dwHighDateTime=0x1cac87a, ftLastAccessTime.dwLowDateTime=0x35682930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62a49900, ftLastWriteTime.dwHighDateTime=0x1cac87a, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0163.536] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2=".") returned 1 [0163.536] wcscmp (_String1="VISINTL.DLL.trx_dll", _String2="..") returned 1 [0163.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a641c0 [0163.536] wcscpy (in: _Dest=0x7a641c0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.536] wcscat (in: _Dest=0x7a641c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.536] wcscat (in: _Dest=0x7a641c0, _Source="VISINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" [0163.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a641c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0163.537] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356a8a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0163.537] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2=".") returned 1 [0163.537] wcscmp (_String1="WWINTL.DLL.trx_dll", _String2="..") returned 1 [0163.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a64258 [0163.537] wcscpy (in: _Dest=0x7a64258, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.538] wcscat (in: _Dest=0x7a64258, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.538] wcscat (in: _Dest=0x7a64258, _Source="WWINTL.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" [0163.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0163.539] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e62400, ftCreationTime.dwHighDateTime=0x1cacd8c, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15e62400, ftLastWriteTime.dwHighDateTime=0x1cacd8c, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0163.539] wcscmp (_String1="WWINTL.REST.trx_dll", _String2=".") returned 1 [0163.539] wcscmp (_String1="WWINTL.REST.trx_dll", _String2="..") returned 1 [0163.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a65000 [0163.539] wcscpy (in: _Dest=0x7a65000, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.539] wcscat (in: _Dest=0x7a65000, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.539] wcscat (in: _Dest=0x7a65000, _Source="WWINTL.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" [0163.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0163.762] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a568800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x356cebf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a568800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0163.762] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2=".") returned 1 [0163.762] wcscmp (_String1="XLINTL32.DLL.trx_dll", _String2="..") returned 1 [0163.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62bd0 [0163.762] wcscpy (in: _Dest=0x7a62bd0, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0163.762] wcscat (in: _Dest=0x7a62bd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0163.763] wcscat (in: _Dest=0x7a62bd0, _Source="XLINTL32.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" [0168.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0168.298] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b87b500, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2b87b500, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0168.298] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2=".") returned 1 [0168.299] wcscmp (_String1="XLINTL32.REST.trx_dll", _String2="..") returned 1 [0168.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63a30 [0168.299] wcscpy (in: _Dest=0x7a63a30, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0168.299] wcscat (in: _Dest=0x7a63a30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0168.299] wcscat (in: _Dest=0x7a63a30, _Source="XLINTL32.REST.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" [0168.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0168.300] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0168.300] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2=".") returned 1 [0168.300] wcscmp (_String1="XLSLICER.DLL.trx_dll", _String2="..") returned 1 [0168.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62a90 [0168.300] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082" [0168.300] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\" [0168.300] wcscat (in: _Dest=0x7a62a90, _Source="XLSLICER.DLL.trx_dll" | out: _Dest="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" [0168.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0168.301] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5ffd800, ftCreationTime.dwHighDateTime=0x1cac885, ftLastAccessTime.dwLowDateTime=0x3571aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5ffd800, ftLastWriteTime.dwHighDateTime=0x1cac885, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0168.301] FindClose (in: hFindFile=0x7a2d640 | out: hFindFile=0x7a2d640) returned 1 [0168.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0168.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 [0168.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69fa8) returned 1 Thread: id = 2385 os_tid = 0x85c [0152.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak")) returned 0x20 [0152.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak", dwFileAttributes=0x20) returned 0 [0152.824] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.824] GetLastError () returned 0x5 [0152.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak", dwFileAttributes=0x20) returned 0 [0152.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb64d8) returned 1 Thread: id = 2386 os_tid = 0xb58 [0152.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak")) returned 0x20 [0152.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak", dwFileAttributes=0x20) returned 0 [0152.833] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.833] GetLastError () returned 0x5 [0152.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak", dwFileAttributes=0x20) returned 0 [0152.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64e38) returned 1 Thread: id = 2387 os_tid = 0xb4c [0152.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak")) returned 0x20 [0152.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak", dwFileAttributes=0x20) returned 0 [0152.835] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0152.835] GetLastError () returned 0x5 [0152.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak", dwFileAttributes=0x20) returned 0 [0152.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64ed0) returned 1 Thread: id = 2388 os_tid = 0x90c [0152.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak")) returned 0x20 [0153.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak", dwFileAttributes=0x20) returned 0 [0153.713] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.713] GetLastError () returned 0x5 [0153.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak", dwFileAttributes=0x20) returned 0 [0153.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64f68) returned 1 Thread: id = 2389 os_tid = 0x91c [0152.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak")) returned 0x20 [0153.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak", dwFileAttributes=0x20) returned 0 [0153.717] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.717] GetLastError () returned 0x5 [0153.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak", dwFileAttributes=0x20) returned 0 [0153.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65000) returned 1 Thread: id = 2390 os_tid = 0x92c [0152.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak")) returned 0x20 [0153.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak", dwFileAttributes=0x20) returned 0 [0153.719] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.719] GetLastError () returned 0x5 [0153.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak", dwFileAttributes=0x20) returned 0 [0153.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65098) returned 1 Thread: id = 2391 os_tid = 0x93c [0152.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak")) returned 0x20 [0153.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak", dwFileAttributes=0x20) returned 0 [0153.720] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.720] GetLastError () returned 0x5 [0153.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak", dwFileAttributes=0x20) returned 0 [0153.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65130) returned 1 Thread: id = 2392 os_tid = 0x94c [0152.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak")) returned 0x20 [0153.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak", dwFileAttributes=0x20) returned 0 [0153.722] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.722] GetLastError () returned 0x5 [0153.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak", dwFileAttributes=0x20) returned 0 [0153.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a651c8) returned 1 Thread: id = 2393 os_tid = 0x95c [0152.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak")) returned 0x20 [0153.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak", dwFileAttributes=0x20) returned 0 [0153.723] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.723] GetLastError () returned 0x5 [0153.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak", dwFileAttributes=0x20) returned 0 [0153.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65260) returned 1 Thread: id = 2394 os_tid = 0x96c [0152.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak")) returned 0x20 [0153.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak", dwFileAttributes=0x20) returned 0 [0153.725] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.725] GetLastError () returned 0x5 [0153.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak", dwFileAttributes=0x20) returned 0 [0153.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a628b0) returned 1 Thread: id = 2395 os_tid = 0x97c [0152.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak")) returned 0x20 [0153.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak", dwFileAttributes=0x20) returned 0 [0153.727] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.727] GetLastError () returned 0x5 [0153.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak", dwFileAttributes=0x20) returned 0 [0153.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a623b0) returned 1 Thread: id = 2396 os_tid = 0x98c [0152.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak")) returned 0x20 [0153.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak", dwFileAttributes=0x20) returned 0 [0153.728] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.728] GetLastError () returned 0x5 [0153.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak", dwFileAttributes=0x20) returned 0 [0153.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63f30) returned 1 Thread: id = 2397 os_tid = 0x9ac [0152.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak")) returned 0x20 [0153.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak", dwFileAttributes=0x20) returned 0 [0153.730] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.730] GetLastError () returned 0x5 [0153.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak", dwFileAttributes=0x20) returned 0 [0153.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a652f8) returned 1 Thread: id = 2398 os_tid = 0x740 [0152.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak")) returned 0x20 [0153.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak", dwFileAttributes=0x20) returned 0 [0153.731] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.732] GetLastError () returned 0x5 [0153.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak", dwFileAttributes=0x20) returned 0 [0153.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65390) returned 1 Thread: id = 2399 os_tid = 0xc8 [0152.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak")) returned 0x20 [0153.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak", dwFileAttributes=0x20) returned 0 [0153.733] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.733] GetLastError () returned 0x5 [0153.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak", dwFileAttributes=0x20) returned 0 [0153.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65428) returned 1 Thread: id = 2400 os_tid = 0x9bc [0152.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak")) returned 0x20 [0153.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak", dwFileAttributes=0x20) returned 0 [0153.735] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.735] GetLastError () returned 0x5 [0153.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak", dwFileAttributes=0x20) returned 0 [0153.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a654c0) returned 1 Thread: id = 2401 os_tid = 0x9fc [0152.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak")) returned 0x20 [0153.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak", dwFileAttributes=0x20) returned 0 [0153.736] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.736] GetLastError () returned 0x5 [0153.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak", dwFileAttributes=0x20) returned 0 [0153.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63e90) returned 1 Thread: id = 2402 os_tid = 0x7b4 [0152.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak")) returned 0x20 [0153.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak", dwFileAttributes=0x20) returned 0 [0153.738] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.739] GetLastError () returned 0x5 [0153.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak", dwFileAttributes=0x20) returned 0 [0153.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65558) returned 1 Thread: id = 2403 os_tid = 0x10c [0152.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak")) returned 0x20 [0153.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak", dwFileAttributes=0x20) returned 0 [0153.741] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.741] GetLastError () returned 0x5 [0153.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak", dwFileAttributes=0x20) returned 0 [0153.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a655f0) returned 1 Thread: id = 2404 os_tid = 0xad8 [0152.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak")) returned 0x20 [0153.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak", dwFileAttributes=0x20) returned 0 [0153.743] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.743] GetLastError () returned 0x5 [0153.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak", dwFileAttributes=0x20) returned 0 [0153.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65688) returned 1 Thread: id = 2405 os_tid = 0x1c0 [0152.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak")) returned 0x20 [0153.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak", dwFileAttributes=0x20) returned 0 [0153.745] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.745] GetLastError () returned 0x5 [0153.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak", dwFileAttributes=0x20) returned 0 [0153.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65720) returned 1 Thread: id = 2406 os_tid = 0x4c0 [0152.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak")) returned 0x20 [0153.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak", dwFileAttributes=0x20) returned 0 [0153.761] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.761] GetLastError () returned 0x5 [0153.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak", dwFileAttributes=0x20) returned 0 [0153.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a657b8) returned 1 Thread: id = 2407 os_tid = 0xb3c [0152.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak")) returned 0x20 [0153.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak", dwFileAttributes=0x20) returned 0 [0153.209] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.209] GetLastError () returned 0x5 [0153.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak", dwFileAttributes=0x20) returned 0 [0153.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65850) returned 1 Thread: id = 2408 os_tid = 0xbfc [0152.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak")) returned 0x20 [0153.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak", dwFileAttributes=0x20) returned 0 [0153.211] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.211] GetLastError () returned 0x5 [0153.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak", dwFileAttributes=0x20) returned 0 [0153.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a658e8) returned 1 Thread: id = 2409 os_tid = 0xbf8 [0153.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak")) returned 0x20 [0153.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak", dwFileAttributes=0x20) returned 0 [0153.212] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.213] GetLastError () returned 0x5 [0153.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak", dwFileAttributes=0x20) returned 0 [0153.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65980) returned 1 Thread: id = 2410 os_tid = 0x1008 [0153.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8aa8 [0153.214] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" [0153.214] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\" [0153.214] wcscat (in: _Dest=0x2c8aa8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*" [0153.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0153.214] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a8325f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0153.216] wcscmp (_String1=".", _String2=".") returned 0 [0153.216] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a508ab0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8a8325f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.216] wcscmp (_String1="..", _String2=".") returned 1 [0153.216] wcscmp (_String1="..", _String2="..") returned 0 [0153.216] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce6f8500, ftCreationTime.dwHighDateTime=0x1cab82b, ftLastAccessTime.dwLowDateTime=0x8a8325f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xce6f8500, ftLastWriteTime.dwHighDateTime=0x1cab82b, nFileSizeHigh=0x0, nFileSizeLow=0xa770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0153.216] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2=".") returned 1 [0153.216] wcscmp (_String1="Microsoft.Office.Infopath.dll", _String2="..") returned 1 [0153.216] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7b377010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0153.216] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2=".") returned 1 [0153.216] wcscmp (_String1="Microsoft.Office.InfoPath.xml", _String2="..") returned 1 [0153.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x300d718 [0153.217] wcscpy (in: _Dest=0x300d718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12" [0153.217] wcscat (in: _Dest=0x300d718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\" [0153.217] wcscat (in: _Dest=0x300d718, _Source="Microsoft.Office.InfoPath.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" [0158.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x300d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0158.660] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225b3900, ftCreationTime.dwHighDateTime=0x1ca5695, ftLastAccessTime.dwLowDateTime=0x7b377010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x225b3900, ftLastWriteTime.dwHighDateTime=0x1ca5695, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0158.661] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0158.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0158.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 [0158.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 Thread: id = 2411 os_tid = 0x100c [0153.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml")) returned 0x20 [0153.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0153.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.218] GetLastError () returned 0x5 [0153.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0153.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 2412 os_tid = 0x1010 [0153.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60c60 [0153.219] wcscpy (in: _Dest=0x7a60c60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" [0153.219] wcscat (in: _Dest=0x7a60c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\" [0153.219] wcscat (in: _Dest=0x7a60c60, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*" [0153.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0153.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb10 [0153.220] wcscmp (_String1=".", _String2=".") returned 0 [0153.220] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f19cf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x63f19cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f19cf0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.220] wcscmp (_String1="..", _String2=".") returned 1 [0153.220] wcscmp (_String1="..", _String2="..") returned 0 [0153.220] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f65fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0153.220] wcscmp (_String1="Built-In Building Blocks.dotx", _String2=".") returned 1 [0153.220] wcscmp (_String1="Built-In Building Blocks.dotx", _String2="..") returned 1 [0153.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d409c0 [0153.220] wcscpy (in: _Dest=0x3d409c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14" [0153.220] wcscat (in: _Dest=0x3d409c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\" [0153.220] wcscat (in: _Dest=0x3d409c0, _Source="Built-In Building Blocks.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" [0158.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d409c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0158.663] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3605e00, ftCreationTime.dwHighDateTime=0x1ca9182, ftLastAccessTime.dwLowDateTime=0x63f65fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe3605e00, ftLastWriteTime.dwHighDateTime=0x1ca9182, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0158.663] FindClose (in: hFindFile=0x3dcfb10 | out: hFindFile=0x3dcfb10) returned 1 [0158.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0158.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60c60) returned 1 [0158.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 Thread: id = 2413 os_tid = 0x1014 [0153.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf")) returned 0x20 [0157.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x20) returned 0 [0157.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.407] GetLastError () returned 0x5 [0157.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x20) returned 0 [0157.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 2414 os_tid = 0x1018 [0153.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf")) returned 0x20 [0156.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x20) returned 0 [0156.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.490] GetLastError () returned 0x5 [0157.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x20) returned 0 [0157.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 2415 os_tid = 0x1024 [0153.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf")) returned 0x20 [0157.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x20) returned 0 [0157.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.406] GetLastError () returned 0x5 [0157.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x20) returned 0 [0157.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 2416 os_tid = 0x1028 [0153.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf")) returned 0x20 [0157.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x20) returned 0 [0157.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.492] GetLastError () returned 0x5 [0157.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x20) returned 0 [0157.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 2417 os_tid = 0x102c [0153.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf")) returned 0x20 [0157.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x20) returned 0 [0157.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.493] GetLastError () returned 0x5 [0157.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x20) returned 0 [0157.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 2418 os_tid = 0x1030 [0153.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf")) returned 0x20 [0157.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x20) returned 0 [0157.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.269] GetLastError () returned 0x5 [0157.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x20) returned 0 [0157.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 2419 os_tid = 0x1034 [0153.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf")) returned 0x20 [0156.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x20) returned 0 [0156.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.951] GetLastError () returned 0x5 [0156.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x20) returned 0 [0156.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 2420 os_tid = 0x1038 [0153.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf")) returned 0x20 [0153.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF", dwFileAttributes=0x20) returned 0 [0153.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.224] GetLastError () returned 0x5 [0153.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF", dwFileAttributes=0x20) returned 0 [0153.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 2421 os_tid = 0x1044 [0153.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf")) returned 0x20 [0153.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF", dwFileAttributes=0x20) returned 0 [0153.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.227] GetLastError () returned 0x5 [0153.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF", dwFileAttributes=0x20) returned 0 [0153.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 2422 os_tid = 0x1048 [0153.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf")) returned 0x20 [0153.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF", dwFileAttributes=0x20) returned 0 [0153.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.229] GetLastError () returned 0x5 [0153.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF", dwFileAttributes=0x20) returned 0 [0153.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 2423 os_tid = 0x104c [0153.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf")) returned 0x20 [0154.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF", dwFileAttributes=0x20) returned 0 [0154.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.447] GetLastError () returned 0x5 [0154.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF", dwFileAttributes=0x20) returned 0 [0154.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 2424 os_tid = 0x1050 [0153.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif")) returned 0x20 [0154.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF", dwFileAttributes=0x20) returned 0 [0154.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.449] GetLastError () returned 0x5 [0154.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF", dwFileAttributes=0x20) returned 0 [0154.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 2425 os_tid = 0x1054 [0153.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf")) returned 0x20 [0154.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF", dwFileAttributes=0x20) returned 0 [0154.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.451] GetLastError () returned 0x5 [0154.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF", dwFileAttributes=0x20) returned 0 [0154.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 2426 os_tid = 0x1058 [0153.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf")) returned 0x20 [0153.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF", dwFileAttributes=0x20) returned 0 [0153.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.767] GetLastError () returned 0x5 [0153.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF", dwFileAttributes=0x20) returned 0 [0153.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 2427 os_tid = 0x105c [0153.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf")) returned 0x20 [0153.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF", dwFileAttributes=0x20) returned 0 [0153.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.770] GetLastError () returned 0x5 [0153.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF", dwFileAttributes=0x20) returned 0 [0153.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 2428 os_tid = 0x1060 [0153.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf")) returned 0x20 [0153.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0153.237] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.237] GetLastError () returned 0x5 [0153.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0153.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad63b0) returned 1 Thread: id = 2429 os_tid = 0x1064 [0153.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf")) returned 0x20 [0153.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0153.239] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.239] GetLastError () returned 0x5 [0153.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0153.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64ed0) returned 1 Thread: id = 2430 os_tid = 0x1068 [0153.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6b90 [0153.241] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0153.241] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0153.241] wcscat (in: _Dest=0x2ff6b90, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*" [0153.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3e90 [0153.241] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\*", lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff90 [0153.242] wcscmp (_String1=".", _String2=".") returned 0 [0153.242] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.242] wcscmp (_String1="..", _String2=".") returned 1 [0153.242] wcscmp (_String1="..", _String2="..") returned 0 [0153.242] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0153.242] wcscmp (_String1="Patch", _String2=".") returned 1 [0153.242] wcscmp (_String1="Patch", _String2="..") returned 1 [0153.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65b98 [0153.242] wcscpy (in: _Dest=0x3e65b98, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages" [0153.242] wcscat (in: _Dest=0x3e65b98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\" [0153.242] wcscat (in: _Dest=0x3e65b98, _Source="Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0158.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e65b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0158.665] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0158.665] FindClose (in: hFindFile=0x3dcff90 | out: hFindFile=0x3dcff90) returned 1 [0158.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3e90) returned 1 [0158.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0158.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 Thread: id = 2431 os_tid = 0x106c [0153.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7938 [0153.243] wcscpy (in: _Dest=0x2ff7938, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0153.243] wcscat (in: _Dest=0x2ff7938, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0153.243] wcscat (in: _Dest=0x2ff7938, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*" [0153.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb40f8 [0153.243] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\*", lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0153.244] wcscmp (_String1=".", _String2=".") returned 0 [0153.244] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.244] wcscmp (_String1="..", _String2=".") returned 1 [0153.244] wcscmp (_String1="..", _String2="..") returned 0 [0153.244] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0153.244] wcscmp (_String1="Patch", _String2=".") returned 1 [0153.244] wcscmp (_String1="Patch", _String2="..") returned 1 [0153.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65c58 [0153.244] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages" [0153.244] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\" [0153.244] wcscat (in: _Dest=0x3e65c58, _Source="Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0154.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e65c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4 [0154.669] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0154.669] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0154.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb40f8) returned 1 [0154.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7938) returned 1 [0154.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66770) returned 1 Thread: id = 2432 os_tid = 0x1070 [0153.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d40060 [0153.245] wcscpy (in: _Dest=0x3d40060, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0153.245] wcscat (in: _Dest=0x3d40060, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0153.245] wcscat (in: _Dest=0x3d40060, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" [0153.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1810 [0153.245] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0153.245] wcscmp (_String1=".", _String2=".") returned 0 [0153.246] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.246] wcscmp (_String1="..", _String2=".") returned 1 [0153.246] wcscmp (_String1="..", _String2="..") returned 0 [0153.246] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0153.246] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1 [0153.246] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1 [0153.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3daf9e8 [0153.246] wcscpy (in: _Dest=0x3daf9e8, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" [0153.246] wcscat (in: _Dest=0x3daf9e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\" [0153.246] wcscat (in: _Dest=0x3daf9e8, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0154.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3daf9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54 [0154.671] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0154.671] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0154.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1810) returned 1 [0154.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 [0154.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e663d8) returned 1 Thread: id = 2433 os_tid = 0x1074 [0153.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg")) returned 0x20 [0161.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG", dwFileAttributes=0x20) returned 0 [0161.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.177] GetLastError () returned 0x5 [0162.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG", dwFileAttributes=0x20) returned 0 [0162.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 Thread: id = 2434 os_tid = 0x1078 [0153.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg")) returned 0x20 [0159.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG", dwFileAttributes=0x20) returned 0 [0159.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.718] GetLastError () returned 0x5 [0161.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG", dwFileAttributes=0x20) returned 0 [0161.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 Thread: id = 2435 os_tid = 0x107c [0153.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg")) returned 0x20 [0159.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG", dwFileAttributes=0x20) returned 0 [0159.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.716] GetLastError () returned 0x5 [0161.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG", dwFileAttributes=0x20) returned 0 [0161.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 2436 os_tid = 0x1080 [0153.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg")) returned 0x20 [0158.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG", dwFileAttributes=0x20) returned 0 [0158.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.446] GetLastError () returned 0x5 [0161.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG", dwFileAttributes=0x20) returned 0 [0161.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 Thread: id = 2437 os_tid = 0x1084 [0153.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg")) returned 0x20 [0158.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG", dwFileAttributes=0x20) returned 0 [0158.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.511] GetLastError () returned 0x5 [0159.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG", dwFileAttributes=0x20) returned 0 [0159.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44330) returned 1 Thread: id = 2438 os_tid = 0x1088 [0153.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg")) returned 0x20 [0158.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG", dwFileAttributes=0x20) returned 0 [0158.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.190] GetLastError () returned 0x5 [0159.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG", dwFileAttributes=0x20) returned 0 [0159.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 2439 os_tid = 0x108c [0153.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg")) returned 0x20 [0163.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG", dwFileAttributes=0x20) returned 0 [0163.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.038] GetLastError () returned 0x5 [0165.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG", dwFileAttributes=0x20) returned 0 [0165.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 2440 os_tid = 0x1090 [0153.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg")) returned 0x20 [0162.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG", dwFileAttributes=0x20) returned 0 [0162.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.202] GetLastError () returned 0x5 [0165.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG", dwFileAttributes=0x20) returned 0 [0165.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60a20) returned 1 Thread: id = 2441 os_tid = 0x1094 [0153.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg")) returned 0x20 [0157.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG", dwFileAttributes=0x20) returned 0 [0157.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.843] GetLastError () returned 0x5 [0158.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG", dwFileAttributes=0x20) returned 0 [0158.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60ab0) returned 1 Thread: id = 2442 os_tid = 0x1098 [0153.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg")) returned 0x20 [0157.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG", dwFileAttributes=0x20) returned 0 [0157.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.448] GetLastError () returned 0x5 [0161.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG", dwFileAttributes=0x20) returned 0 [0161.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60b40) returned 1 Thread: id = 2443 os_tid = 0x109c [0153.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg")) returned 0x20 [0161.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG", dwFileAttributes=0x20) returned 0 [0161.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.515] GetLastError () returned 0x5 [0162.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG", dwFileAttributes=0x20) returned 0 [0162.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a601b0) returned 1 Thread: id = 2444 os_tid = 0x10a0 [0153.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg")) returned 0x20 [0153.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0153.250] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.250] GetLastError () returned 0x5 [0153.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0153.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5ee8) returned 1 Thread: id = 2445 os_tid = 0x10a4 [0153.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg")) returned 0x20 [0153.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0153.253] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.253] GetLastError () returned 0x5 [0153.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0153.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 Thread: id = 2446 os_tid = 0x10a8 [0153.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt")) returned 0x20 [0155.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", dwFileAttributes=0x20) returned 0 [0155.123] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.124] GetLastError () returned 0x5 [0155.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", dwFileAttributes=0x20) returned 0 [0155.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84fb0) returned 1 Thread: id = 2447 os_tid = 0x10ac [0153.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt")) returned 0x20 [0155.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", dwFileAttributes=0x20) returned 0 [0155.125] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.125] GetLastError () returned 0x5 [0155.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", dwFileAttributes=0x20) returned 0 [0155.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68570) returned 1 Thread: id = 2448 os_tid = 0x10b0 [0153.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt")) returned 0x20 [0155.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", dwFileAttributes=0x20) returned 0 [0155.126] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.127] GetLastError () returned 0x5 [0155.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", dwFileAttributes=0x20) returned 0 [0155.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682e8) returned 1 Thread: id = 2449 os_tid = 0x10b4 [0153.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt")) returned 0x20 [0155.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", dwFileAttributes=0x20) returned 0 [0155.128] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.128] GetLastError () returned 0x5 [0155.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", dwFileAttributes=0x20) returned 0 [0155.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67490) returned 1 Thread: id = 2450 os_tid = 0x10b8 [0153.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt")) returned 0x20 [0155.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", dwFileAttributes=0x20) returned 0 [0155.130] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.130] GetLastError () returned 0x5 [0155.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", dwFileAttributes=0x20) returned 0 [0155.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687f8) returned 1 Thread: id = 2451 os_tid = 0x10bc [0153.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt")) returned 0x20 [0155.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", dwFileAttributes=0x20) returned 0 [0155.131] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.131] GetLastError () returned 0x5 [0155.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", dwFileAttributes=0x20) returned 0 [0155.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 2452 os_tid = 0x10c0 [0153.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt")) returned 0x20 [0155.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", dwFileAttributes=0x20) returned 0 [0155.132] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.132] GetLastError () returned 0x5 [0155.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", dwFileAttributes=0x20) returned 0 [0155.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 Thread: id = 2453 os_tid = 0x10cc [0153.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt")) returned 0x20 [0155.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", dwFileAttributes=0x20) returned 0 [0155.134] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.134] GetLastError () returned 0x5 [0155.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", dwFileAttributes=0x20) returned 0 [0155.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689a8) returned 1 Thread: id = 2454 os_tid = 0x10d0 [0153.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt")) returned 0x20 [0155.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", dwFileAttributes=0x20) returned 0 [0155.135] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.135] GetLastError () returned 0x5 [0155.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", dwFileAttributes=0x20) returned 0 [0155.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a80) returned 1 Thread: id = 2455 os_tid = 0x10d4 [0153.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt")) returned 0x20 [0155.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", dwFileAttributes=0x20) returned 0 [0155.136] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.137] GetLastError () returned 0x5 [0155.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", dwFileAttributes=0x20) returned 0 [0155.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b58) returned 1 Thread: id = 2456 os_tid = 0x10d8 [0153.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt")) returned 0x20 [0155.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", dwFileAttributes=0x20) returned 0 [0155.138] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.138] GetLastError () returned 0x5 [0155.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", dwFileAttributes=0x20) returned 0 [0155.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68c30) returned 1 Thread: id = 2457 os_tid = 0x10dc [0153.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt")) returned 0x20 [0155.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", dwFileAttributes=0x20) returned 0 [0155.139] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.139] GetLastError () returned 0x5 [0155.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", dwFileAttributes=0x20) returned 0 [0155.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d08) returned 1 Thread: id = 2458 os_tid = 0x10e0 [0153.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt")) returned 0x20 [0155.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", dwFileAttributes=0x20) returned 0 [0155.141] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.141] GetLastError () returned 0x5 [0155.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", dwFileAttributes=0x20) returned 0 [0155.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68de0) returned 1 Thread: id = 2459 os_tid = 0x10e4 [0153.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt")) returned 0x20 [0155.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", dwFileAttributes=0x20) returned 0 [0155.142] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.142] GetLastError () returned 0x5 [0155.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", dwFileAttributes=0x20) returned 0 [0155.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68eb8) returned 1 Thread: id = 2460 os_tid = 0x10e8 [0153.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt")) returned 0x20 [0155.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", dwFileAttributes=0x20) returned 0 [0155.144] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.144] GetLastError () returned 0x5 [0155.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", dwFileAttributes=0x20) returned 0 [0155.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37540) returned 1 Thread: id = 2461 os_tid = 0x10ec [0153.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt")) returned 0x20 [0155.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", dwFileAttributes=0x20) returned 0 [0155.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.145] GetLastError () returned 0x5 [0155.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", dwFileAttributes=0x20) returned 0 [0155.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37cd8) returned 1 Thread: id = 2462 os_tid = 0x10f0 [0153.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt")) returned 0x20 [0154.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", dwFileAttributes=0x20) returned 0 [0154.465] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.465] GetLastError () returned 0x5 [0154.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", dwFileAttributes=0x20) returned 0 [0154.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38110) returned 1 Thread: id = 2463 os_tid = 0x10f4 [0153.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt")) returned 0x20 [0153.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", dwFileAttributes=0x20) returned 0 [0153.779] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.779] GetLastError () returned 0x5 [0153.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", dwFileAttributes=0x20) returned 0 [0153.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e382c0) returned 1 Thread: id = 2464 os_tid = 0x10f8 [0153.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt")) returned 0x20 [0153.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", dwFileAttributes=0x20) returned 0 [0153.781] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.781] GetLastError () returned 0x5 [0153.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", dwFileAttributes=0x20) returned 0 [0153.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37030) returned 1 Thread: id = 2465 os_tid = 0x10fc [0153.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt")) returned 0x20 [0154.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", dwFileAttributes=0x20) returned 0 [0154.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.467] GetLastError () returned 0x5 [0154.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", dwFileAttributes=0x20) returned 0 [0154.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036210) returned 1 Thread: id = 2472 os_tid = 0x1100 [0153.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf")) returned 0x20 [0153.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0153.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.789] GetLastError () returned 0x5 [0153.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0153.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 Thread: id = 2473 os_tid = 0x1104 [0153.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf")) returned 0x20 [0153.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0153.791] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.792] GetLastError () returned 0x5 [0153.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0153.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 Thread: id = 2474 os_tid = 0x1108 [0153.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr")) returned 0x20 [0153.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR", dwFileAttributes=0x20) returned 0 [0153.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0153.808] GetLastError () returned 0x5 [0153.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR", dwFileAttributes=0x20) returned 0 [0153.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 2475 os_tid = 0x110c [0153.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr")) returned 0x20 [0155.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR", dwFileAttributes=0x20) returned 0 [0155.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.643] GetLastError () returned 0x5 [0155.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR", dwFileAttributes=0x20) returned 0 [0155.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 2476 os_tid = 0x1110 [0153.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr")) returned 0x20 [0155.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR", dwFileAttributes=0x20) returned 0 [0155.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.644] GetLastError () returned 0x5 [0155.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR", dwFileAttributes=0x20) returned 0 [0155.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 2477 os_tid = 0x1114 [0153.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr")) returned 0x20 [0155.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR", dwFileAttributes=0x20) returned 0 [0155.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.646] GetLastError () returned 0x5 [0155.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR", dwFileAttributes=0x20) returned 0 [0155.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 2478 os_tid = 0x1118 [0153.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr")) returned 0x20 [0155.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR", dwFileAttributes=0x20) returned 0 [0155.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.648] GetLastError () returned 0x5 [0155.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR", dwFileAttributes=0x20) returned 0 [0155.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 2479 os_tid = 0x111c [0153.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr")) returned 0x20 [0155.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR", dwFileAttributes=0x20) returned 0 [0155.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.649] GetLastError () returned 0x5 [0155.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR", dwFileAttributes=0x20) returned 0 [0155.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 2480 os_tid = 0x1120 [0153.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr")) returned 0x20 [0155.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR", dwFileAttributes=0x20) returned 0 [0155.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.655] GetLastError () returned 0x5 [0155.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR", dwFileAttributes=0x20) returned 0 [0155.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 2481 os_tid = 0x1124 [0153.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr")) returned 0x20 [0155.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR", dwFileAttributes=0x20) returned 0 [0155.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.656] GetLastError () returned 0x5 [0155.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR", dwFileAttributes=0x20) returned 0 [0155.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 2482 os_tid = 0x1128 [0153.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr")) returned 0x20 [0155.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR", dwFileAttributes=0x20) returned 0 [0155.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.651] GetLastError () returned 0x5 [0155.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR", dwFileAttributes=0x20) returned 0 [0155.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 2483 os_tid = 0x112c [0153.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr")) returned 0x20 [0155.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR", dwFileAttributes=0x20) returned 0 [0155.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.658] GetLastError () returned 0x5 [0155.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR", dwFileAttributes=0x20) returned 0 [0155.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 2484 os_tid = 0x1130 [0153.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr")) returned 0x20 [0155.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR", dwFileAttributes=0x20) returned 0 [0155.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.653] GetLastError () returned 0x5 [0155.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR", dwFileAttributes=0x20) returned 0 [0155.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 2485 os_tid = 0x1134 [0153.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr")) returned 0x20 [0155.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR", dwFileAttributes=0x20) returned 0 [0155.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.659] GetLastError () returned 0x5 [0155.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR", dwFileAttributes=0x20) returned 0 [0155.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 2486 os_tid = 0x1138 [0153.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr")) returned 0x20 [0155.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR", dwFileAttributes=0x20) returned 0 [0155.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.661] GetLastError () returned 0x5 [0155.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR", dwFileAttributes=0x20) returned 0 [0155.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 2487 os_tid = 0x113c [0153.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr")) returned 0x20 [0155.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR", dwFileAttributes=0x20) returned 0 [0155.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.674] GetLastError () returned 0x5 [0155.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR", dwFileAttributes=0x20) returned 0 [0155.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 2488 os_tid = 0x1140 [0153.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr")) returned 0x20 [0155.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR", dwFileAttributes=0x20) returned 0 [0155.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.641] GetLastError () returned 0x5 [0155.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR", dwFileAttributes=0x20) returned 0 [0155.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 2489 os_tid = 0x1144 [0153.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif")) returned 0x20 [0155.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF", dwFileAttributes=0x20) returned 0 [0155.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.147] GetLastError () returned 0x5 [0155.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF", dwFileAttributes=0x20) returned 0 [0155.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64d08) returned 1 Thread: id = 2490 os_tid = 0x1148 [0153.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif")) returned 0x20 [0155.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF", dwFileAttributes=0x20) returned 0 [0155.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.149] GetLastError () returned 0x5 [0155.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF", dwFileAttributes=0x20) returned 0 [0155.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5ee8) returned 1 Thread: id = 2491 os_tid = 0x114c [0153.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif")) returned 0x20 [0155.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF", dwFileAttributes=0x20) returned 0 [0155.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.150] GetLastError () returned 0x5 [0155.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF", dwFileAttributes=0x20) returned 0 [0155.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb64d8) returned 1 Thread: id = 2492 os_tid = 0x1150 [0153.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif")) returned 0x20 [0155.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF", dwFileAttributes=0x20) returned 0 [0155.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.152] GetLastError () returned 0x5 [0155.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF", dwFileAttributes=0x20) returned 0 [0155.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5990) returned 1 Thread: id = 2493 os_tid = 0x1154 [0153.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif")) returned 0x20 [0155.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF", dwFileAttributes=0x20) returned 0 [0155.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.153] GetLastError () returned 0x5 [0155.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF", dwFileAttributes=0x20) returned 0 [0155.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5e50) returned 1 Thread: id = 2494 os_tid = 0x1158 [0153.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif")) returned 0x20 [0155.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF", dwFileAttributes=0x20) returned 0 [0155.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.154] GetLastError () returned 0x5 [0155.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF", dwFileAttributes=0x20) returned 0 [0155.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb70b8) returned 1 Thread: id = 2495 os_tid = 0x115c [0153.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif")) returned 0x20 [0155.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF", dwFileAttributes=0x20) returned 0 [0155.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.156] GetLastError () returned 0x5 [0155.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF", dwFileAttributes=0x20) returned 0 [0155.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 Thread: id = 2496 os_tid = 0x1160 [0153.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif")) returned 0x20 [0155.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF", dwFileAttributes=0x20) returned 0 [0155.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.157] GetLastError () returned 0x5 [0155.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF", dwFileAttributes=0x20) returned 0 [0155.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5f80) returned 1 Thread: id = 2497 os_tid = 0x1164 [0153.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif")) returned 0x20 [0155.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF", dwFileAttributes=0x20) returned 0 [0155.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.158] GetLastError () returned 0x5 [0155.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF", dwFileAttributes=0x20) returned 0 [0155.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 Thread: id = 2498 os_tid = 0x1168 [0153.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif")) returned 0x20 [0155.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF", dwFileAttributes=0x20) returned 0 [0155.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.159] GetLastError () returned 0x5 [0155.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF", dwFileAttributes=0x20) returned 0 [0155.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7448) returned 1 Thread: id = 2499 os_tid = 0x116c [0153.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif")) returned 0x20 [0154.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF", dwFileAttributes=0x20) returned 0 [0154.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.552] GetLastError () returned 0x5 [0154.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF", dwFileAttributes=0x20) returned 0 [0154.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5bf0) returned 1 Thread: id = 2500 os_tid = 0x1170 [0153.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif")) returned 0x20 [0154.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF", dwFileAttributes=0x20) returned 0 [0154.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.554] GetLastError () returned 0x5 [0154.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF", dwFileAttributes=0x20) returned 0 [0154.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 Thread: id = 2501 os_tid = 0x1174 [0153.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf")) returned 0x20 [0155.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.161] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.161] GetLastError () returned 0x5 [0155.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6db8) returned 1 Thread: id = 2502 os_tid = 0x1178 [0153.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf")) returned 0x20 [0155.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0155.692] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.692] GetLastError () returned 0x5 [0155.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0155.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 Thread: id = 2503 os_tid = 0x117c [0153.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf")) returned 0x20 [0155.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0155.694] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.694] GetLastError () returned 0x5 [0155.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0155.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 Thread: id = 2504 os_tid = 0x1180 [0153.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf")) returned 0x20 [0155.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0155.696] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.696] GetLastError () returned 0x5 [0155.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0155.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaec78) returned 1 Thread: id = 2505 os_tid = 0x1184 [0153.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf")) returned 0x20 [0154.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0154.980] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.980] GetLastError () returned 0x5 [0154.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0154.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eae998) returned 1 Thread: id = 2506 os_tid = 0x1188 [0153.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf")) returned 0x20 [0155.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0155.689] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.689] GetLastError () returned 0x5 [0155.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0155.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40128) returned 1 Thread: id = 2507 os_tid = 0x118c [0153.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf")) returned 0x20 [0155.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.162] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.162] GetLastError () returned 0x5 [0155.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf238) returned 1 Thread: id = 2508 os_tid = 0x1190 [0153.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf")) returned 0x20 [0155.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0155.700] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.700] GetLastError () returned 0x5 [0155.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0155.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 2509 os_tid = 0x1194 [0153.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf")) returned 0x20 [0155.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0155.702] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.702] GetLastError () returned 0x5 [0155.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0155.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf010) returned 1 Thread: id = 2510 os_tid = 0x1198 [0153.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf")) returned 0x20 [0155.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0155.704] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.704] GetLastError () returned 0x5 [0155.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0155.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf460) returned 1 Thread: id = 2511 os_tid = 0x119c [0153.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf")) returned 0x20 [0154.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0154.982] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.983] GetLastError () returned 0x5 [0154.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0154.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf740) returned 1 Thread: id = 2512 os_tid = 0x11a0 [0153.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf")) returned 0x20 [0155.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0155.698] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.698] GetLastError () returned 0x5 [0155.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0155.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d401f0) returned 1 Thread: id = 2513 os_tid = 0x11a4 [0153.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo")) returned 0x20 [0155.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO", dwFileAttributes=0x20) returned 0 [0155.163] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.163] GetLastError () returned 0x5 [0155.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO", dwFileAttributes=0x20) returned 0 [0155.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63850) returned 1 Thread: id = 2514 os_tid = 0x11a8 [0153.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo")) returned 0x20 [0155.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO", dwFileAttributes=0x20) returned 0 [0155.713] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.713] GetLastError () returned 0x5 [0155.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO", dwFileAttributes=0x20) returned 0 [0155.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60bd0) returned 1 Thread: id = 2515 os_tid = 0x11ac [0153.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo")) returned 0x20 [0155.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO", dwFileAttributes=0x20) returned 0 [0155.714] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.715] GetLastError () returned 0x5 [0155.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO", dwFileAttributes=0x20) returned 0 [0155.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f90) returned 1 Thread: id = 2516 os_tid = 0x11b0 [0153.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo")) returned 0x20 [0155.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO", dwFileAttributes=0x20) returned 0 [0155.716] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.717] GetLastError () returned 0x5 [0155.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO", dwFileAttributes=0x20) returned 0 [0155.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60240) returned 1 Thread: id = 2517 os_tid = 0x11b4 [0153.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo")) returned 0x20 [0155.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO", dwFileAttributes=0x20) returned 0 [0155.728] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.728] GetLastError () returned 0x5 [0155.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO", dwFileAttributes=0x20) returned 0 [0155.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6310) returned 1 Thread: id = 2518 os_tid = 0x11b8 [0153.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo")) returned 0x20 [0155.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", dwFileAttributes=0x20) returned 0 [0155.731] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.732] GetLastError () returned 0x5 [0155.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO", dwFileAttributes=0x20) returned 0 [0155.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a602d0) returned 1 Thread: id = 2519 os_tid = 0x11bc [0153.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo")) returned 0x20 [0155.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", dwFileAttributes=0x20) returned 0 [0155.718] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.718] GetLastError () returned 0x5 [0155.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO", dwFileAttributes=0x20) returned 0 [0155.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 Thread: id = 2520 os_tid = 0x11c0 [0153.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo")) returned 0x20 [0155.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", dwFileAttributes=0x20) returned 0 [0155.733] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.733] GetLastError () returned 0x5 [0155.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO", dwFileAttributes=0x20) returned 0 [0155.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 2521 os_tid = 0x11c4 [0153.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo")) returned 0x20 [0155.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", dwFileAttributes=0x20) returned 0 [0155.735] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.735] GetLastError () returned 0x5 [0155.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO", dwFileAttributes=0x20) returned 0 [0155.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60510) returned 1 Thread: id = 2522 os_tid = 0x11c8 [0153.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo")) returned 0x20 [0155.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", dwFileAttributes=0x20) returned 0 [0155.720] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.720] GetLastError () returned 0x5 [0155.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO", dwFileAttributes=0x20) returned 0 [0155.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a605a0) returned 1 Thread: id = 2523 os_tid = 0x11cc [0153.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo")) returned 0x20 [0155.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", dwFileAttributes=0x20) returned 0 [0155.737] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.737] GetLastError () returned 0x5 [0155.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO", dwFileAttributes=0x20) returned 0 [0155.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 2524 os_tid = 0x11d0 [0153.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo")) returned 0x20 [0155.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", dwFileAttributes=0x20) returned 0 [0155.739] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.739] GetLastError () returned 0x5 [0155.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO", dwFileAttributes=0x20) returned 0 [0155.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 2525 os_tid = 0x11d4 [0153.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo")) returned 0x20 [0155.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", dwFileAttributes=0x20) returned 0 [0155.722] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.722] GetLastError () returned 0x5 [0155.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO", dwFileAttributes=0x20) returned 0 [0155.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64ed0) returned 1 Thread: id = 2526 os_tid = 0x11d8 [0153.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo")) returned 0x20 [0155.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", dwFileAttributes=0x20) returned 0 [0155.741] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.741] GetLastError () returned 0x5 [0155.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO", dwFileAttributes=0x20) returned 0 [0155.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 Thread: id = 2527 os_tid = 0x11dc [0153.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo")) returned 0x20 [0154.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", dwFileAttributes=0x20) returned 0 [0154.993] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.993] GetLastError () returned 0x5 [0154.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO", dwFileAttributes=0x20) returned 0 [0154.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a607e0) returned 1 Thread: id = 2528 os_tid = 0x11e0 [0153.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo")) returned 0x20 [0155.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", dwFileAttributes=0x20) returned 0 [0155.724] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.724] GetLastError () returned 0x5 [0155.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO", dwFileAttributes=0x20) returned 0 [0155.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60870) returned 1 Thread: id = 2529 os_tid = 0x11e4 [0153.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo")) returned 0x20 [0155.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", dwFileAttributes=0x20) returned 0 [0155.726] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.726] GetLastError () returned 0x5 [0155.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO", dwFileAttributes=0x20) returned 0 [0155.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65980) returned 1 Thread: id = 2530 os_tid = 0x11e8 [0153.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo")) returned 0x20 [0155.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", dwFileAttributes=0x20) returned 0 [0155.706] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.706] GetLastError () returned 0x5 [0155.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO", dwFileAttributes=0x20) returned 0 [0155.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60990) returned 1 Thread: id = 2531 os_tid = 0x11ec [0153.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo")) returned 0x20 [0155.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", dwFileAttributes=0x20) returned 0 [0155.711] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.711] GetLastError () returned 0x5 [0155.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO", dwFileAttributes=0x20) returned 0 [0155.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a658e8) returned 1 Thread: id = 2532 os_tid = 0x11f0 [0154.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo")) returned 0x20 [0155.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", dwFileAttributes=0x20) returned 0 [0155.729] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.730] GetLastError () returned 0x5 [0155.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO", dwFileAttributes=0x20) returned 0 [0155.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60360) returned 1 Thread: id = 2533 os_tid = 0x11f4 Thread: id = 2534 os_tid = 0x11f8 [0154.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d390 [0154.560] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0154.560] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\" [0154.560] wcscat (in: _Dest=0x3f3d390, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*" [0154.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2bc0 [0154.560] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741f0 [0155.582] wcscmp (_String1=".", _String2=".") returned 0 [0155.582] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5540ee90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.582] wcscmp (_String1="..", _String2=".") returned 1 [0155.582] wcscmp (_String1="..", _String2="..") returned 0 [0155.582] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5540ee90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55434ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook Templates", cAlternateFileName="NOTEBO~1")) returned 1 [0155.582] wcscmp (_String1="Notebook Templates", _String2=".") returned 1 [0155.582] wcscmp (_String1="Notebook Templates", _String2="..") returned 1 [0155.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053bb8 [0155.583] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0155.583] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\" [0155.583] wcscat (in: _Dest=0x3053bb8, _Source="Notebook Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" [0161.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb8 [0161.391] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0161.391] wcscmp (_String1="Stationery", _String2=".") returned 1 [0161.392] wcscmp (_String1="Stationery", _String2="..") returned 1 [0161.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7a655f0 [0161.392] wcscpy (in: _Dest=0x7a655f0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14" [0161.392] wcscat (in: _Dest=0x7a655f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\" [0161.392] wcscat (in: _Dest=0x7a655f0, _Source="Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0161.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a655f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0161.393] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0 [0161.393] FindClose (in: hFindFile=0x3e741f0 | out: hFindFile=0x3e741f0) returned 1 [0161.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2bc0) returned 1 [0161.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 [0161.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a298) returned 1 Thread: id = 2535 os_tid = 0x11fc [0154.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf")) returned 0x20 [0154.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0154.561] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.562] GetLastError () returned 0x5 [0154.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0154.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7d88) returned 1 Thread: id = 2536 os_tid = 0x1200 [0154.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf")) returned 0x20 [0154.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0154.568] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.568] GetLastError () returned 0x5 [0154.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0154.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 Thread: id = 2537 os_tid = 0x1204 [0154.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf")) returned 0x20 [0154.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0154.575] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.575] GetLastError () returned 0x5 [0154.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0154.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40510) returned 1 Thread: id = 2538 os_tid = 0x1208 [0154.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf")) returned 0x20 [0154.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0154.577] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.577] GetLastError () returned 0x5 [0154.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", dwFileAttributes=0x20) returned 0 [0154.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5998) returned 1 Thread: id = 2539 os_tid = 0x120c [0154.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf")) returned 0x20 [0154.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0154.579] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.579] GetLastError () returned 0x5 [0154.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", dwFileAttributes=0x20) returned 0 [0154.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a657b8) returned 1 Thread: id = 2540 os_tid = 0x1210 [0154.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d448d0 [0154.580] wcscpy (in: _Dest=0x3d448d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0154.580] wcscat (in: _Dest=0x3d448d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\" [0154.580] wcscat (in: _Dest=0x3d448d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*" [0154.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef26f0 [0154.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0154.582] wcscmp (_String1=".", _String2=".") returned 0 [0154.582] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.583] wcscmp (_String1="..", _String2=".") returned 1 [0154.583] wcscmp (_String1="..", _String2="..") returned 0 [0154.583] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0154.583] wcscmp (_String1="groove.net", _String2=".") returned 1 [0154.583] wcscmp (_String1="groove.net", _String2="..") returned 1 [0154.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5f40 [0154.583] wcscpy (in: _Dest=0x3df5f40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0154.583] wcscat (in: _Dest=0x3df5f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\" [0154.583] wcscat (in: _Dest=0x3df5f40, _Source="groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0164.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df5f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0164.982] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1 [0164.982] wcscmp (_String1="Verisign", _String2=".") returned 1 [0164.982] wcscmp (_String1="Verisign", _String2="..") returned 1 [0164.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64aa8 [0164.982] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates" [0164.982] wcscat (in: _Dest=0x7a64aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\" [0164.982] wcscat (in: _Dest=0x7a64aa8, _Source="Verisign" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" [0164.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a64aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0164.984] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0 [0164.984] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0164.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef26f0) returned 1 [0164.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448d0) returned 1 [0164.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 2541 os_tid = 0x1214 [0154.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19298 [0154.583] wcscpy (in: _Dest=0x3e19298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0154.584] wcscat (in: _Dest=0x3e19298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0154.584] wcscat (in: _Dest=0x3e19298, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*" [0154.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3f00 [0154.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77038290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad79b0 [0156.298] wcscmp (_String1=".", _String2=".") returned 0 [0156.298] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77038290, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.298] wcscmp (_String1="..", _String2=".") returned 1 [0156.298] wcscmp (_String1="..", _String2="..") returned 0 [0156.298] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77038290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9052e150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="People", cAlternateFileName="")) returned 1 [0156.298] wcscmp (_String1="People", _String2=".") returned 1 [0156.298] wcscmp (_String1="People", _String2="..") returned 1 [0156.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062a10 [0156.299] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0156.299] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0156.299] wcscat (in: _Dest=0x3062a10, _Source="People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0166.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0166.632] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9233b710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1 [0166.633] wcscmp (_String1="Places", _String2=".") returned 1 [0166.633] wcscmp (_String1="Places", _String2="..") returned 1 [0166.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c7e0 [0166.633] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0166.633] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0166.633] wcscat (in: _Dest=0x3f3c7e0, _Source="Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0166.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0166.634] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1 [0166.634] wcscmp (_String1="Things", _String2=".") returned 1 [0166.634] wcscmp (_String1="Things", _String2="..") returned 1 [0166.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0166.635] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds" [0166.635] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\" [0166.635] wcscat (in: _Dest=0x3f3cd30, _Source="Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0166.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0166.636] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0 [0166.636] FindClose (in: hFindFile=0x7ad79b0 | out: hFindFile=0x7ad79b0) returned 1 [0166.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f00) returned 1 [0166.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 [0166.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48018) returned 1 Thread: id = 2542 os_tid = 0x1218 [0154.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3cec8 [0154.585] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0154.585] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0154.585] wcscat (in: _Dest=0x3f3cec8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*" [0154.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4638 [0154.585] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770aa6b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0157.445] wcscmp (_String1=".", _String2=".") returned 0 [0157.445] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770aa6b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.333] wcscmp (_String1="..", _String2=".") returned 1 [0158.333] wcscmp (_String1="..", _String2="..") returned 0 [0158.333] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8a400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c8a400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1 [0158.333] wcscmp (_String1="CalendarToolIconImages.jpg", _String2=".") returned 1 [0158.333] wcscmp (_String1="CalendarToolIconImages.jpg", _String2="..") returned 1 [0158.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf7f8 [0158.333] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0158.334] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0158.334] wcscat (in: _Dest=0x3eaf7f8, _Source="CalendarToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" [0164.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg")) returned 0x20 [0164.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0164.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.711] GetLastError () returned 0x5 [0164.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0164.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 [0164.711] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8a400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5c8a400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="CALEND~1.BMP")) returned 1 [0164.711] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2=".") returned 1 [0164.711] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2="..") returned 1 [0164.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66258 [0164.711] wcscpy (in: _Dest=0x3e66258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.711] wcscat (in: _Dest=0x3e66258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.711] wcscat (in: _Dest=0x3e66258, _Source="CalendarToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" [0164.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp")) returned 0x20 [0164.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.712] GetLastError () returned 0x5 [0164.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66258) returned 1 [0164.713] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImages.bmp", cAlternateFileName="CHESSI~1.BMP")) returned 1 [0164.713] wcscmp (_String1="ChessIconImages.bmp", _String2=".") returned 1 [0164.713] wcscmp (_String1="ChessIconImages.bmp", _String2="..") returned 1 [0164.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e090 [0164.713] wcscpy (in: _Dest=0x7a5e090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.713] wcscat (in: _Dest=0x7a5e090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.713] wcscat (in: _Dest=0x7a5e090, _Source="ChessIconImages.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" [0164.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp")) returned 0x20 [0164.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", dwFileAttributes=0x20) returned 0 [0164.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.714] GetLastError () returned 0x5 [0164.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", dwFileAttributes=0x20) returned 0 [0164.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0164.714] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c3dbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImagesMask.bmp", cAlternateFileName="CHESSI~2.BMP")) returned 1 [0164.714] wcscmp (_String1="ChessIconImagesMask.bmp", _String2=".") returned 1 [0164.714] wcscmp (_String1="ChessIconImagesMask.bmp", _String2="..") returned 1 [0164.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66770 [0164.714] wcscpy (in: _Dest=0x7a66770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.715] wcscat (in: _Dest=0x7a66770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.715] wcscat (in: _Dest=0x7a66770, _Source="ChessIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" [0164.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp")) returned 0x20 [0164.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.715] GetLastError () returned 0x5 [0164.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66770) returned 1 [0164.716] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cfc2b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImage.jpg", cAlternateFileName="CREATE~1.JPG")) returned 1 [0164.716] wcscmp (_String1="CreateSpaceImage.jpg", _String2=".") returned 1 [0164.716] wcscmp (_String1="CreateSpaceImage.jpg", _String2="..") returned 1 [0164.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e090 [0164.716] wcscpy (in: _Dest=0x7a5e090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.716] wcscat (in: _Dest=0x7a5e090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.716] wcscat (in: _Dest=0x7a5e090, _Source="CreateSpaceImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" [0164.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg")) returned 0x20 [0164.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", dwFileAttributes=0x20) returned 0 [0164.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.732] GetLastError () returned 0x5 [0164.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", dwFileAttributes=0x20) returned 0 [0164.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0164.732] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cfc2b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImageMask.bmp", cAlternateFileName="CREATE~1.BMP")) returned 1 [0164.732] wcscmp (_String1="CreateSpaceImageMask.bmp", _String2=".") returned 1 [0164.733] wcscmp (_String1="CreateSpaceImageMask.bmp", _String2="..") returned 1 [0164.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66820 [0164.733] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.733] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.733] wcscat (in: _Dest=0x7a66820, _Source="CreateSpaceImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" [0164.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp")) returned 0x20 [0164.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", dwFileAttributes=0x20) returned 0 [0164.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.733] GetLastError () returned 0x5 [0164.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", dwFileAttributes=0x20) returned 0 [0164.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 [0164.734] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImages.jpg", cAlternateFileName="DATALI~1.JPG")) returned 1 [0164.734] wcscmp (_String1="DataListIconImages.jpg", _String2=".") returned 1 [0164.734] wcscmp (_String1="DataListIconImages.jpg", _String2="..") returned 1 [0164.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66820 [0164.734] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.734] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.734] wcscat (in: _Dest=0x7a66820, _Source="DataListIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" [0164.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg")) returned 0x20 [0164.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", dwFileAttributes=0x20) returned 0 [0164.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.735] GetLastError () returned 0x5 [0164.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", dwFileAttributes=0x20) returned 0 [0164.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 [0164.735] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9d100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6f9d100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImagesMask.bmp", cAlternateFileName="DATALI~1.BMP")) returned 1 [0164.735] wcscmp (_String1="DataListIconImagesMask.bmp", _String2=".") returned 1 [0164.735] wcscmp (_String1="DataListIconImagesMask.bmp", _String2="..") returned 1 [0164.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf7f8 [0164.735] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.735] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.735] wcscat (in: _Dest=0x3eaf7f8, _Source="DataListIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" [0164.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp")) returned 0x20 [0164.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.746] GetLastError () returned 0x5 [0164.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 [0164.747] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImages.jpg", cAlternateFileName="DATAVI~1.JPG")) returned 1 [0164.747] wcscmp (_String1="DataViewIconImages.jpg", _String2=".") returned 1 [0164.747] wcscmp (_String1="DataViewIconImages.jpg", _String2="..") returned 1 [0164.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66820 [0164.747] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.747] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.747] wcscat (in: _Dest=0x7a66820, _Source="DataViewIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" [0164.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg")) returned 0x20 [0164.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", dwFileAttributes=0x20) returned 0 [0164.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.748] GetLastError () returned 0x5 [0164.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", dwFileAttributes=0x20) returned 0 [0164.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 [0164.748] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImagesMask.bmp", cAlternateFileName="DATAVI~1.BMP")) returned 1 [0164.748] wcscmp (_String1="DataViewIconImagesMask.bmp", _String2=".") returned 1 [0164.748] wcscmp (_String1="DataViewIconImagesMask.bmp", _String2="..") returned 1 [0164.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf7f8 [0164.748] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.748] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.748] wcscat (in: _Dest=0x3eaf7f8, _Source="DataViewIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" [0164.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp")) returned 0x20 [0164.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.749] GetLastError () returned 0x5 [0164.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 [0164.749] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2eaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1 [0164.749] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2=".") returned 1 [0164.750] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2="..") returned 1 [0164.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf7f8 [0164.750] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.750] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.750] wcscat (in: _Dest=0x3eaf7f8, _Source="DiscussionToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" [0164.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg")) returned 0x20 [0164.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0164.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.758] GetLastError () returned 0x5 [0164.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0164.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 [0164.759] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1 [0164.759] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2=".") returned 1 [0164.759] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2="..") returned 1 [0164.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65c58 [0164.759] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.759] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.759] wcscat (in: _Dest=0x3e65c58, _Source="DiscussionToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" [0164.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp")) returned 0x20 [0164.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.783] GetLastError () returned 0x5 [0164.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 [0164.783] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afe00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82afe00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2a0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImage.jpg", cAlternateFileName="FORM_S~1.JPG")) returned 1 [0164.783] wcscmp (_String1="Form_StatusImage.jpg", _String2=".") returned 1 [0164.783] wcscmp (_String1="Form_StatusImage.jpg", _String2="..") returned 1 [0164.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e090 [0164.784] wcscpy (in: _Dest=0x7a5e090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.784] wcscat (in: _Dest=0x7a5e090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.784] wcscat (in: _Dest=0x7a5e090, _Source="Form_StatusImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" [0164.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg")) returned 0x20 [0164.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg", dwFileAttributes=0x20) returned 0 [0164.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.793] GetLastError () returned 0x5 [0164.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg", dwFileAttributes=0x20) returned 0 [0164.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0164.793] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImageMask.bmp", cAlternateFileName="FORM_S~1.BMP")) returned 1 [0164.793] wcscmp (_String1="Form_StatusImageMask.bmp", _String2=".") returned 1 [0164.794] wcscmp (_String1="Form_StatusImageMask.bmp", _String2="..") returned 1 [0164.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66820 [0164.794] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.794] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.794] wcscat (in: _Dest=0x7a66820, _Source="Form_StatusImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" [0164.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp")) returned 0x20 [0164.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp", dwFileAttributes=0x20) returned 0 [0164.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.795] GetLastError () returned 0x5 [0164.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp", dwFileAttributes=0x20) returned 0 [0164.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 [0164.795] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIP.JPG", cAlternateFileName="")) returned 1 [0164.795] wcscmp (_String1="GRIP.JPG", _String2=".") returned 1 [0164.795] wcscmp (_String1="GRIP.JPG", _String2="..") returned 1 [0164.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60fc0 [0164.795] wcscpy (in: _Dest=0x7a60fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.795] wcscat (in: _Dest=0x7a60fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.795] wcscat (in: _Dest=0x7a60fc0, _Source="GRIP.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" [0164.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg")) returned 0x20 [0164.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG", dwFileAttributes=0x20) returned 0 [0164.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.845] GetLastError () returned 0x5 [0164.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG", dwFileAttributes=0x20) returned 0 [0164.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60fc0) returned 1 [0164.845] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIPMASK.BMP", cAlternateFileName="")) returned 1 [0164.845] wcscmp (_String1="GRIPMASK.BMP", _String2=".") returned 1 [0164.845] wcscmp (_String1="GRIPMASK.BMP", _String2="..") returned 1 [0164.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d408 [0164.846] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.846] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.846] wcscat (in: _Dest=0x32d408, _Source="GRIPMASK.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" [0164.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp")) returned 0x20 [0164.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP", dwFileAttributes=0x20) returned 0 [0164.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.847] GetLastError () returned 0x5 [0164.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP", dwFileAttributes=0x20) returned 0 [0164.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 [0164.848] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIcon.jpg", cAlternateFileName="INFORM~1.JPG")) returned 1 [0164.848] wcscmp (_String1="InformationIcon.jpg", _String2=".") returned 1 [0164.848] wcscmp (_String1="InformationIcon.jpg", _String2="..") returned 1 [0164.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053bb8 [0164.848] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.848] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.848] wcscat (in: _Dest=0x3053bb8, _Source="InformationIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" [0164.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg")) returned 0x20 [0164.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg", dwFileAttributes=0x20) returned 0 [0164.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.849] GetLastError () returned 0x5 [0164.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg", dwFileAttributes=0x20) returned 0 [0164.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 [0164.849] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x95c2b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIconMask.bmp", cAlternateFileName="INFORM~1.BMP")) returned 1 [0164.849] wcscmp (_String1="InformationIconMask.bmp", _String2=".") returned 1 [0164.849] wcscmp (_String1="InformationIconMask.bmp", _String2="..") returned 1 [0164.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66980 [0164.849] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.850] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.850] wcscat (in: _Dest=0x7a66980, _Source="InformationIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" [0164.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp")) returned 0x20 [0164.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp", dwFileAttributes=0x20) returned 0 [0164.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.850] GetLastError () returned 0x5 [0164.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp", dwFileAttributes=0x20) returned 0 [0164.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 [0164.851] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8f8300, ftCreationTime.dwHighDateTime=0x1c9f985, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc8f8300, ftLastWriteTime.dwHighDateTime=0x1c9f985, nFileSizeHigh=0x0, nFileSizeLow=0xceed, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginDialogBackground.jpg", cAlternateFileName="LOGIND~1.JPG")) returned 1 [0164.851] wcscmp (_String1="LoginDialogBackground.jpg", _String2=".") returned 1 [0164.851] wcscmp (_String1="LoginDialogBackground.jpg", _String2="..") returned 1 [0164.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3eaf7f8 [0164.851] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.851] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.851] wcscat (in: _Dest=0x3eaf7f8, _Source="LoginDialogBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" [0164.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg")) returned 0x20 [0164.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg", dwFileAttributes=0x20) returned 0 [0164.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.876] GetLastError () returned 0x5 [0164.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg", dwFileAttributes=0x20) returned 0 [0164.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 [0164.877] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f1f3190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24Images.jpg", cAlternateFileName="LOGINT~1.JPG")) returned 1 [0164.877] wcscmp (_String1="LoginTool24x24Images.jpg", _String2=".") returned 1 [0164.877] wcscmp (_String1="LoginTool24x24Images.jpg", _String2="..") returned 1 [0164.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66980 [0164.877] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.877] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.877] wcscat (in: _Dest=0x7a66980, _Source="LoginTool24x24Images.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" [0164.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg")) returned 0x20 [0164.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0164.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.878] GetLastError () returned 0x5 [0164.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0164.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 [0164.878] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f1f3190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24ImagesMask.bmp", cAlternateFileName="LOGINT~1.BMP")) returned 1 [0164.878] wcscmp (_String1="LoginTool24x24ImagesMask.bmp", _String2=".") returned 1 [0164.878] wcscmp (_String1="LoginTool24x24ImagesMask.bmp", _String2="..") returned 1 [0164.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf7f8 [0164.878] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.878] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.878] wcscat (in: _Dest=0x3eaf7f8, _Source="LoginTool24x24ImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" [0164.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp")) returned 0x20 [0164.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.879] GetLastError () returned 0x5 [0164.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0164.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 [0164.880] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f4c6bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1 [0164.880] wcscmp (_String1="MessageAttachmentIconImages.jpg", _String2=".") returned 1 [0164.880] wcscmp (_String1="MessageAttachmentIconImages.jpg", _String2="..") returned 1 [0164.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e65c58 [0164.880] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0164.880] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0164.880] wcscat (in: _Dest=0x3e65c58, _Source="MessageAttachmentIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" [0164.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg")) returned 0x20 [0165.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.208] GetLastError () returned 0x5 [0165.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg", dwFileAttributes=0x20) returned 0 [0165.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 [0165.232] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1 [0165.232] wcscmp (_String1="MessageAttachmentIconImagesMask.bmp", _String2=".") returned 1 [0165.232] wcscmp (_String1="MessageAttachmentIconImagesMask.bmp", _String2="..") returned 1 [0165.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a440 [0165.232] wcscpy (in: _Dest=0x3e3a440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0165.232] wcscat (in: _Dest=0x3e3a440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0165.232] wcscat (in: _Dest=0x3e3a440, _Source="MessageAttachmentIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" [0166.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0166.546] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x22f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImages.jpg", cAlternateFileName="MESSAG~2.JPG")) returned 1 [0166.546] wcscmp (_String1="MessageHistoryIconImages.jpg", _String2=".") returned 1 [0166.546] wcscmp (_String1="MessageHistoryIconImages.jpg", _String2="..") returned 1 [0166.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6180 [0166.546] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0166.546] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0166.546] wcscat (in: _Dest=0x2ff6180, _Source="MessageHistoryIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" [0166.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0166.547] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d5800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8d5800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImagesMask.bmp", cAlternateFileName="MESSAG~2.BMP")) returned 1 [0166.548] wcscmp (_String1="MessageHistoryIconImagesMask.bmp", _String2=".") returned 1 [0166.548] wcscmp (_String1="MessageHistoryIconImagesMask.bmp", _String2="..") returned 1 [0166.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65c58 [0166.548] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0166.548] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0166.548] wcscat (in: _Dest=0x3e65c58, _Source="MessageHistoryIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" [0166.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0166.549] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbec8400, ftCreationTime.dwHighDateTime=0x1c9e917, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdbec8400, ftLastWriteTime.dwHighDateTime=0x1c9e917, nFileSizeHigh=0x0, nFileSizeLow=0x3efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackground.jpg", cAlternateFileName="NOTIFI~4.JPG")) returned 1 [0166.549] wcscmp (_String1="NotifierBackground.jpg", _String2=".") returned 1 [0166.549] wcscmp (_String1="NotifierBackground.jpg", _String2="..") returned 1 [0166.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a668d0 [0166.549] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0166.549] wcscat (in: _Dest=0x7a668d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0166.549] wcscat (in: _Dest=0x7a668d0, _Source="NotifierBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" [0166.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a668d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0166.551] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe575ec00, ftCreationTime.dwHighDateTime=0x1c9e917, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe575ec00, ftLastWriteTime.dwHighDateTime=0x1c9e917, nFileSizeHigh=0x0, nFileSizeLow=0x40aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackgroundRTL.jpg", cAlternateFileName="NOBA77~1.JPG")) returned 1 [0166.551] wcscmp (_String1="NotifierBackgroundRTL.jpg", _String2=".") returned 1 [0166.551] wcscmp (_String1="NotifierBackgroundRTL.jpg", _String2="..") returned 1 [0166.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6740 [0166.551] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0166.551] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0166.551] wcscat (in: _Dest=0x2ff6740, _Source="NotifierBackgroundRTL.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" [0166.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0166.552] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe652700, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x80e376d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe652700, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierCloseButton.jpg", cAlternateFileName="NOTIFI~1.JPG")) returned 1 [0166.557] wcscmp (_String1="NotifierCloseButton.jpg", _String2=".") returned 1 [0166.557] wcscmp (_String1="NotifierCloseButton.jpg", _String2="..") returned 1 [0166.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66a30 [0166.557] wcscpy (in: _Dest=0x7a66a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0166.557] wcscat (in: _Dest=0x7a66a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0166.557] wcscat (in: _Dest=0x7a66a30, _Source="NotifierCloseButton.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" [0171.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0171.397] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x145b0800, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x145b0800, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableDownArrow.jpg", cAlternateFileName="NOTIFI~2.JPG")) returned 1 [0171.397] wcscmp (_String1="NotifierDisableDownArrow.jpg", _String2=".") returned 1 [0171.397] wcscmp (_String1="NotifierDisableDownArrow.jpg", _String2="..") returned 1 [0171.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaec78 [0171.398] wcscpy (in: _Dest=0x3eaec78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.398] wcscat (in: _Dest=0x3eaec78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.398] wcscat (in: _Dest=0x3eaec78, _Source="NotifierDisableDownArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" [0171.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaec78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0171.398] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17ee8f00, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17ee8f00, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableUpArrow.jpg", cAlternateFileName="NO795D~1.JPG")) returned 1 [0171.398] wcscmp (_String1="NotifierDisableUpArrow.jpg", _String2=".") returned 1 [0171.398] wcscmp (_String1="NotifierDisableUpArrow.jpg", _String2="..") returned 1 [0171.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf460 [0171.399] wcscpy (in: _Dest=0x3eaf460, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.399] wcscat (in: _Dest=0x3eaf460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.399] wcscat (in: _Dest=0x3eaf460, _Source="NotifierDisableUpArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" [0171.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0171.400] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b821600, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b821600, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDownArrow.jpg", cAlternateFileName="NOE4F1~1.JPG")) returned 1 [0171.400] wcscmp (_String1="NotifierDownArrow.jpg", _String2=".") returned 1 [0171.400] wcscmp (_String1="NotifierDownArrow.jpg", _String2="..") returned 1 [0171.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66c40 [0171.400] wcscpy (in: _Dest=0x7a66c40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.400] wcscat (in: _Dest=0x7a66c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.400] wcscat (in: _Dest=0x7a66c40, _Source="NotifierDownArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" [0171.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0171.401] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f159d00, ftCreationTime.dwHighDateTime=0x1c911b6, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f159d00, ftLastWriteTime.dwHighDateTime=0x1c911b6, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierUpArrow.jpg", cAlternateFileName="NOTIFI~3.JPG")) returned 1 [0171.401] wcscmp (_String1="NotifierUpArrow.jpg", _String2=".") returned 1 [0171.401] wcscmp (_String1="NotifierUpArrow.jpg", _String2="..") returned 1 [0171.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053528 [0171.401] wcscpy (in: _Dest=0x3053528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.401] wcscat (in: _Dest=0x3053528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.401] wcscat (in: _Dest=0x3053528, _Source="NotifierUpArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" [0171.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0171.402] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d7c0000, ftCreationTime.dwHighDateTime=0x1c90f66, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9d7c0000, ftLastWriteTime.dwHighDateTime=0x1c90f66, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMask.bmp", cAlternateFileName="NOTIFI~2.BMP")) returned 1 [0171.402] wcscmp (_String1="NotifierWindowMask.bmp", _String2=".") returned 1 [0171.402] wcscmp (_String1="NotifierWindowMask.bmp", _String2="..") returned 1 [0171.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66980 [0171.402] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.402] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.402] wcscat (in: _Dest=0x7a66980, _Source="NotifierWindowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" [0171.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0171.403] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf8d6200, ftCreationTime.dwHighDateTime=0x1c90f66, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf8d6200, ftLastWriteTime.dwHighDateTime=0x1c90f66, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMaskRTL.bmp", cAlternateFileName="NOTIFI~1.BMP")) returned 1 [0171.403] wcscmp (_String1="NotifierWindowMaskRTL.bmp", _String2=".") returned 1 [0171.403] wcscmp (_String1="NotifierWindowMaskRTL.bmp", _String2="..") returned 1 [0171.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3eafad8 [0171.403] wcscpy (in: _Dest=0x3eafad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.403] wcscat (in: _Dest=0x3eafad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.403] wcscat (in: _Dest=0x3eafad8, _Source="NotifierWindowMaskRTL.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" [0171.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eafad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0171.404] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe8500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e5c9f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbbe8500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImages.jpg", cAlternateFileName="OUTLIN~1.JPG")) returned 1 [0171.404] wcscmp (_String1="OutlineToolIconImages.jpg", _String2=".") returned 1 [0171.404] wcscmp (_String1="OutlineToolIconImages.jpg", _String2="..") returned 1 [0171.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3eae998 [0171.404] wcscpy (in: _Dest=0x3eae998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.404] wcscat (in: _Dest=0x3eae998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.404] wcscat (in: _Dest=0x3eae998, _Source="OutlineToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" [0171.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eae998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0171.406] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81d64310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1938, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImagesMask.bmp", cAlternateFileName="OUTLIN~1.BMP")) returned 1 [0171.406] wcscmp (_String1="OutlineToolIconImagesMask.bmp", _String2=".") returned 1 [0171.406] wcscmp (_String1="OutlineToolIconImagesMask.bmp", _String2="..") returned 1 [0171.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66618 [0171.407] wcscpy (in: _Dest=0x3e66618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.407] wcscat (in: _Dest=0x3e66618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.407] wcscat (in: _Dest=0x3e66618, _Source="OutlineToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" [0171.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0171.407] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImages.jpg", cAlternateFileName="OUTOFS~1.JPG")) returned 1 [0171.408] wcscmp (_String1="OutofSyncIconImages.jpg", _String2=".") returned 1 [0171.408] wcscmp (_String1="OutofSyncIconImages.jpg", _String2="..") returned 1 [0171.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66820 [0171.408] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.408] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.408] wcscat (in: _Dest=0x7a66820, _Source="OutofSyncIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" [0171.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0171.409] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8f888c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImagesMask.bmp", cAlternateFileName="OUTOFS~1.BMP")) returned 1 [0171.409] wcscmp (_String1="OutofSyncIconImagesMask.bmp", _String2=".") returned 1 [0171.409] wcscmp (_String1="OutofSyncIconImagesMask.bmp", _String2="..") returned 1 [0171.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x3eaebc0 [0171.409] wcscpy (in: _Dest=0x3eaebc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.409] wcscat (in: _Dest=0x3eaebc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.409] wcscat (in: _Dest=0x3eaebc0, _Source="OutofSyncIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" [0171.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaebc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0171.410] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cd8a500, ftCreationTime.dwHighDateTime=0x1ca0393, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9cd8a500, ftLastWriteTime.dwHighDateTime=0x1ca0393, nFileSizeHigh=0x0, nFileSizeLow=0x5203, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImages.jpg", cAlternateFileName="PICTUR~1.JPG")) returned 1 [0171.410] wcscmp (_String1="PicturesToolIconImages.jpg", _String2=".") returned 1 [0171.410] wcscmp (_String1="PicturesToolIconImages.jpg", _String2="..") returned 1 [0171.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf0c8 [0171.410] wcscpy (in: _Dest=0x3eaf0c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.410] wcscat (in: _Dest=0x3eaf0c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.410] wcscat (in: _Dest=0x3eaf0c8, _Source="PicturesToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" [0171.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf0c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0171.411] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934f3d00, ftCreationTime.dwHighDateTime=0x1ca0393, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x934f3d00, ftLastWriteTime.dwHighDateTime=0x1ca0393, nFileSizeHigh=0x0, nFileSizeLow=0x1238, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImagesMask.bmp", cAlternateFileName="PICTUR~1.BMP")) returned 1 [0171.411] wcscmp (_String1="PicturesToolIconImagesMask.bmp", _String2=".") returned 1 [0171.411] wcscmp (_String1="PicturesToolIconImagesMask.bmp", _String2="..") returned 1 [0171.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e666d8 [0171.412] wcscpy (in: _Dest=0x3e666d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.412] wcscat (in: _Dest=0x3e666d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.412] wcscat (in: _Dest=0x3e666d8, _Source="PicturesToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" [0171.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e666d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0171.437] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIcon.jpg", cAlternateFileName="QUESTI~1.JPG")) returned 1 [0171.437] wcscmp (_String1="QuestionIcon.jpg", _String2=".") returned 1 [0171.438] wcscmp (_String1="QuestionIcon.jpg", _String2="..") returned 1 [0171.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a637b0 [0171.438] wcscpy (in: _Dest=0x7a637b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.438] wcscat (in: _Dest=0x7a637b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.438] wcscat (in: _Dest=0x7a637b0, _Source="QuestionIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" [0171.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a637b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0171.462] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903b1390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIconMask.bmp", cAlternateFileName="QUESTI~1.BMP")) returned 1 [0171.462] wcscmp (_String1="QuestionIconMask.bmp", _String2=".") returned 1 [0171.462] wcscmp (_String1="QuestionIconMask.bmp", _String2="..") returned 1 [0171.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053138 [0171.462] wcscpy (in: _Dest=0x3053138, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.462] wcscat (in: _Dest=0x3053138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.462] wcscat (in: _Dest=0x3053138, _Source="QuestionIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" [0171.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0171.477] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcefb200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcefb200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x64fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16Images.jpg", cAlternateFileName="SHARED~1.JPG")) returned 1 [0171.477] wcscmp (_String1="Shared16x16Images.jpg", _String2=".") returned 1 [0171.477] wcscmp (_String1="Shared16x16Images.jpg", _String2="..") returned 1 [0171.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66400 [0171.477] wcscpy (in: _Dest=0x7a66400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.477] wcscat (in: _Dest=0x7a66400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.477] wcscat (in: _Dest=0x7a66400, _Source="Shared16x16Images.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" [0171.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0171.478] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16ImagesMask.bmp", cAlternateFileName="SHARED~1.BMP")) returned 1 [0171.478] wcscmp (_String1="Shared16x16ImagesMask.bmp", _String2=".") returned 1 [0171.478] wcscmp (_String1="Shared16x16ImagesMask.bmp", _String2="..") returned 1 [0171.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3eaf688 [0171.478] wcscpy (in: _Dest=0x3eaf688, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.478] wcscat (in: _Dest=0x3eaf688, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.478] wcscat (in: _Dest=0x3eaf688, _Source="Shared16x16ImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" [0171.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0171.491] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24Images.jpg", cAlternateFileName="SHARED~2.JPG")) returned 1 [0171.491] wcscmp (_String1="Shared24x24Images.jpg", _String2=".") returned 1 [0171.491] wcscmp (_String1="Shared24x24Images.jpg", _String2="..") returned 1 [0171.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a666c0 [0171.491] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.491] wcscat (in: _Dest=0x7a666c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.491] wcscat (in: _Dest=0x7a666c0, _Source="Shared24x24Images.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" [0171.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a666c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0171.494] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24ImagesMask.bmp", cAlternateFileName="SHARED~2.BMP")) returned 1 [0171.494] wcscmp (_String1="Shared24x24ImagesMask.bmp", _String2=".") returned 1 [0171.494] wcscmp (_String1="Shared24x24ImagesMask.bmp", _String2="..") returned 1 [0171.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3eaed30 [0171.494] wcscpy (in: _Dest=0x3eaed30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.494] wcscat (in: _Dest=0x3eaed30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.494] wcscat (in: _Dest=0x3eaed30, _Source="Shared24x24ImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" [0171.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaed30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0171.495] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchIconImages.bmp", cAlternateFileName="SKETCH~1.BMP")) returned 1 [0171.495] wcscmp (_String1="SketchIconImages.bmp", _String2=".") returned 1 [0171.495] wcscmp (_String1="SketchIconImages.bmp", _String2="..") returned 1 [0171.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053678 [0171.495] wcscpy (in: _Dest=0x3053678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.495] wcscat (in: _Dest=0x3053678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.495] wcscat (in: _Dest=0x3053678, _Source="SketchIconImages.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" [0171.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0171.496] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupicons.jpg", cAlternateFileName="SPACEB~1.JPG")) returned 1 [0171.496] wcscmp (_String1="spacebackupicons.jpg", _String2=".") returned 1 [0171.496] wcscmp (_String1="spacebackupicons.jpg", _String2="..") returned 1 [0171.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053e58 [0171.497] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.497] wcscat (in: _Dest=0x3053e58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.497] wcscat (in: _Dest=0x3053e58, _Source="spacebackupicons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" [0171.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0171.498] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupiconsmask.bmp", cAlternateFileName="SPACEB~1.BMP")) returned 1 [0171.498] wcscmp (_String1="spacebackupiconsmask.bmp", _String2=".") returned 1 [0171.498] wcscmp (_String1="spacebackupiconsmask.bmp", _String2="..") returned 1 [0171.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66cf0 [0171.498] wcscpy (in: _Dest=0x7a66cf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.498] wcscat (in: _Dest=0x7a66cf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.498] wcscat (in: _Dest=0x7a66cf0, _Source="spacebackupiconsmask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" [0171.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0171.499] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOPICON.JPG", cAlternateFileName="")) returned 1 [0171.499] wcscmp (_String1="STOPICON.JPG", _String2=".") returned 1 [0171.499] wcscmp (_String1="STOPICON.JPG", _String2="..") returned 1 [0171.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6e60 [0171.499] wcscpy (in: _Dest=0x7ad6e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.499] wcscat (in: _Dest=0x7ad6e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.499] wcscat (in: _Dest=0x7ad6e60, _Source="STOPICON.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" [0171.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0171.500] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20df00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe20df00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="StopIconMask.bmp", cAlternateFileName="STOPIC~1.BMP")) returned 1 [0171.500] wcscmp (_String1="StopIconMask.bmp", _String2=".") returned 1 [0171.500] wcscmp (_String1="StopIconMask.bmp", _String2="..") returned 1 [0171.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62bd0 [0171.500] wcscpy (in: _Dest=0x7a62bd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.501] wcscat (in: _Dest=0x7a62bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.501] wcscat (in: _Dest=0x7a62bd0, _Source="StopIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" [0171.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0171.502] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28a2a00, ftCreationTime.dwHighDateTime=0x1ca0ba9, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf28a2a00, ftLastWriteTime.dwHighDateTime=0x1ca0ba9, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImages256Colors.bmp", cAlternateFileName="TASKBA~1.BMP")) returned 1 [0171.502] wcscmp (_String1="TaskbarIconImages256Colors.bmp", _String2=".") returned 1 [0171.502] wcscmp (_String1="TaskbarIconImages256Colors.bmp", _String2="..") returned 1 [0171.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65c58 [0171.502] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.502] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.502] wcscat (in: _Dest=0x3e65c58, _Source="TaskbarIconImages256Colors.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" [0171.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0171.503] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2097300, ftCreationTime.dwHighDateTime=0x1ca0baa, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2097300, ftLastWriteTime.dwHighDateTime=0x1ca0baa, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImagesMask256Colors.bmp", cAlternateFileName="TASKBA~2.BMP")) returned 1 [0171.503] wcscmp (_String1="TaskbarIconImagesMask256Colors.bmp", _String2=".") returned 1 [0171.503] wcscmp (_String1="TaskbarIconImagesMask256Colors.bmp", _String2="..") returned 1 [0171.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d57cd0 [0171.503] wcscpy (in: _Dest=0x3d57cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.503] wcscat (in: _Dest=0x3d57cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.503] wcscat (in: _Dest=0x3d57cd0, _Source="TaskbarIconImagesMask256Colors.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" [0171.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0171.504] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf520c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf520c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2605, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImage.jpg", cAlternateFileName="TIPSIM~1.JPG")) returned 1 [0171.504] wcscmp (_String1="TipsImage.jpg", _String2=".") returned 1 [0171.504] wcscmp (_String1="TipsImage.jpg", _String2="..") returned 1 [0171.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63df0 [0171.504] wcscpy (in: _Dest=0x7a63df0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.504] wcscat (in: _Dest=0x7a63df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.504] wcscat (in: _Dest=0x7a63df0, _Source="TipsImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" [0171.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0171.505] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf520c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9078f750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf520c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImageMask.bmp", cAlternateFileName="TIPSIM~1.BMP")) returned 1 [0171.505] wcscmp (_String1="TipsImageMask.bmp", _String2=".") returned 1 [0171.505] wcscmp (_String1="TipsImageMask.bmp", _String2="..") returned 1 [0171.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3052df0 [0171.505] wcscpy (in: _Dest=0x3052df0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.505] wcscat (in: _Dest=0x3052df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.505] wcscat (in: _Dest=0x3052df0, _Source="TipsImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" [0171.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0171.506] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10833900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10833900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 1 [0171.507] wcscmp (_String1="VeriSignLogo.jpg", _String2=".") returned 1 [0171.507] wcscmp (_String1="VeriSignLogo.jpg", _String2="..") returned 1 [0171.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63850 [0171.507] wcscpy (in: _Dest=0x7a63850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.507] wcscat (in: _Dest=0x7a63850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.507] wcscat (in: _Dest=0x7a63850, _Source="VeriSignLogo.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" [0171.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0171.508] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25efdc00, ftCreationTime.dwHighDateTime=0x1ca0394, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25efdc00, ftLastWriteTime.dwHighDateTime=0x1ca0394, nFileSizeHigh=0x0, nFileSizeLow=0x5431, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImages.jpg", cAlternateFileName="WEBTOO~2.JPG")) returned 1 [0171.508] wcscmp (_String1="WebToolIconImages.jpg", _String2=".") returned 1 [0171.508] wcscmp (_String1="WebToolIconImages.jpg", _String2="..") returned 1 [0171.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66da0 [0171.508] wcscpy (in: _Dest=0x7a66da0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.508] wcscat (in: _Dest=0x7a66da0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.508] wcscat (in: _Dest=0x7a66da0, _Source="WebToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" [0171.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0171.750] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d97a100, ftCreationTime.dwHighDateTime=0x1ca0394, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1d97a100, ftLastWriteTime.dwHighDateTime=0x1ca0394, nFileSizeHigh=0x0, nFileSizeLow=0x1538, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImagesMask.bmp", cAlternateFileName="WEBTOO~1.BMP")) returned 1 [0171.750] wcscmp (_String1="WebToolIconImagesMask.bmp", _String2=".") returned 1 [0171.750] wcscmp (_String1="WebToolIconImagesMask.bmp", _String2="..") returned 1 [0171.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3eaf010 [0171.750] wcscpy (in: _Dest=0x3eaf010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0171.750] wcscat (in: _Dest=0x3eaf010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0171.750] wcscat (in: _Dest=0x3eaf010, _Source="WebToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" [0172.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0172.907] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10833900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10833900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1995, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImages16x16.jpg", cAlternateFileName="WEBTOO~1.JPG")) returned 1 [0172.907] wcscmp (_String1="WebToolImages16x16.jpg", _String2=".") returned 1 [0172.907] wcscmp (_String1="WebToolImages16x16.jpg", _String2="..") returned 1 [0172.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b5b8 [0172.907] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0172.907] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0172.907] wcscat (in: _Dest=0x35b5b8, _Source="WebToolImages16x16.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" [0172.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0172.908] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10833900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10833900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImagesMask16x16.bmp", cAlternateFileName="WEBTOO~2.BMP")) returned 1 [0172.908] wcscmp (_String1="WebToolImagesMask16x16.bmp", _String2=".") returned 1 [0172.908] wcscmp (_String1="WebToolImagesMask16x16.bmp", _String2="..") returned 1 [0172.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6fe0 [0172.908] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0172.908] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0172.908] wcscat (in: _Dest=0x2ff6fe0, _Source="WebToolImagesMask16x16.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" [0172.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0172.910] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2308, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImages.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1 [0172.910] wcscmp (_String1="WSSFilesToolIconImages.jpg", _String2=".") returned 1 [0172.910] wcscmp (_String1="WSSFilesToolIconImages.jpg", _String2="..") returned 1 [0172.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7150 [0172.910] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0172.910] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0172.910] wcscat (in: _Dest=0x2ff7150, _Source="WSSFilesToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" [0172.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0172.916] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="WSSFIL~1.BMP")) returned 1 [0172.916] wcscmp (_String1="WSSFilesToolIconImagesMask.bmp", _String2=".") returned 1 [0172.916] wcscmp (_String1="WSSFilesToolIconImagesMask.bmp", _String2="..") returned 1 [0172.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66198 [0172.916] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs" [0172.916] wcscat (in: _Dest=0x3e66198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\" [0172.916] wcscat (in: _Dest=0x3e66198, _Source="WSSFilesToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" [0172.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0172.917] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="WSSFIL~1.BMP")) returned 0 [0174.108] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0175.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4638) returned 1 [0175.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 [0175.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47b18) returned 1 Thread: id = 2543 os_tid = 0x121c [0154.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c208 [0154.586] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" [0154.586] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\" [0154.586] wcscat (in: _Dest=0x3f3c208, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*" [0154.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef48a0 [0154.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76451490, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cb0 [0156.304] wcscmp (_String1=".", _String2=".") returned 0 [0156.304] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76451490, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.304] wcscmp (_String1="..", _String2=".") returned 1 [0156.304] wcscmp (_String1="..", _String2="..") returned 0 [0156.304] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0156.304] wcscmp (_String1="groove.net", _String2=".") returned 1 [0156.304] wcscmp (_String1="groove.net", _String2="..") returned 1 [0156.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65850 [0156.304] wcscpy (in: _Dest=0x7a65850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData" [0156.304] wcscat (in: _Dest=0x7a65850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\" [0156.304] wcscat (in: _Dest=0x7a65850, _Source="groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0163.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a65850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0163.131] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0 [0163.131] FindClose (in: hFindFile=0x7ad7cb0 | out: hFindFile=0x7ad7cb0) returned 1 [0163.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a0) returned 1 [0163.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 [0163.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c98) returned 1 Thread: id = 2544 os_tid = 0x1220 [0154.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c648 [0154.586] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons" [0154.586] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\" [0154.586] wcscat (in: _Dest=0x3f3c648, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*" [0154.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5be0 [0154.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0156.962] wcscmp (_String1=".", _String2=".") returned 0 [0156.962] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924b84d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.438] wcscmp (_String1="..", _String2=".") returned 1 [0157.438] wcscmp (_String1="..", _String2="..") returned 0 [0157.438] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1 [0157.438] wcscmp (_String1="ALERT.ICO", _String2=".") returned 1 [0157.438] wcscmp (_String1="ALERT.ICO", _String2="..") returned 1 [0157.438] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1 [0157.438] wcscmp (_String1="CHEVRON.ICO", _String2=".") returned 1 [0157.438] wcscmp (_String1="CHEVRON.ICO", _String2="..") returned 1 [0157.438] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76febfd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1 [0157.438] wcscmp (_String1="COMPUTER.ICO", _String2=".") returned 1 [0157.438] wcscmp (_String1="COMPUTER.ICO", _String2="..") returned 1 [0157.438] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactSelector.ico", cAlternateFileName="CONTAC~1.ICO")) returned 1 [0157.438] wcscmp (_String1="ContactSelector.ico", _String2=".") returned 1 [0157.438] wcscmp (_String1="ContactSelector.ico", _String2="..") returned 1 [0157.438] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ab2200, ftCreationTime.dwHighDateTime=0x1c9ffd1, ftLastAccessTime.dwLowDateTime=0x88646c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x13ab2200, ftLastWriteTime.dwHighDateTime=0x1c9ffd1, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrorfromgroove.ico", cAlternateFileName="GFSERR~1.ICO")) returned 1 [0157.438] wcscmp (_String1="gfserrorfromgroove.ico", _String2=".") returned 1 [0157.438] wcscmp (_String1="gfserrorfromgroove.ico", _String2="..") returned 1 [0157.438] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb54100, ftCreationTime.dwHighDateTime=0x1c9ffd1, ftLastAccessTime.dwLowDateTime=0x88646c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdb54100, ftLastWriteTime.dwHighDateTime=0x1c9ffd1, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrortogroove.ico", cAlternateFileName="GFSERR~2.ICO")) returned 1 [0157.438] wcscmp (_String1="gfserrortogroove.ico", _String2=".") returned 1 [0157.439] wcscmp (_String1="gfserrortogroove.ico", _String2="..") returned 1 [0157.439] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73232300, ftCreationTime.dwHighDateTime=0x1c9e05e, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x73232300, ftLastWriteTime.dwHighDateTime=0x1c9e05e, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1 [0157.439] wcscmp (_String1="GWE.ICO", _String2=".") returned 1 [0157.439] wcscmp (_String1="GWE.ICO", _String2="..") returned 1 [0157.439] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53451100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53451100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1 [0157.439] wcscmp (_String1="INCOMING.ICO", _String2=".") returned 1 [0157.439] wcscmp (_String1="INCOMING.ICO", _String2="..") returned 1 [0157.439] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53451100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x53451100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1 [0157.439] wcscmp (_String1="INDOMAIN.ICO", _String2=".") returned 1 [0157.439] wcscmp (_String1="INDOMAIN.ICO", _String2="..") returned 1 [0157.439] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1 [0157.439] wcscmp (_String1="MAIL.ICO", _String2=".") returned 1 [0157.439] wcscmp (_String1="MAIL.ICO", _String2="..") returned 1 [0157.439] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1 [0157.439] wcscmp (_String1="MANUAL.ICO", _String2=".") returned 1 [0157.439] wcscmp (_String1="MANUAL.ICO", _String2="..") returned 1 [0157.439] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f4c6bb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxalert.ico", cAlternateFileName="MESSAG~1.ICO")) returned 1 [0157.439] wcscmp (_String1="messageboxalert.ico", _String2=".") returned 1 [0157.439] wcscmp (_String1="messageboxalert.ico", _String2="..") returned 1 [0157.439] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d272c70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxerror.ico", cAlternateFileName="MESSAG~3.ICO")) returned 1 [0157.439] wcscmp (_String1="messageboxerror.ico", _String2=".") returned 1 [0157.439] wcscmp (_String1="messageboxerror.ico", _String2="..") returned 1 [0157.439] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxinfo.ico", cAlternateFileName="MESSAG~2.ICO")) returned 1 [0157.439] wcscmp (_String1="messageboxinfo.ico", _String2=".") returned 1 [0157.439] wcscmp (_String1="messageboxinfo.ico", _String2="..") returned 1 [0157.439] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3dc400, ftCreationTime.dwHighDateTime=0x1ca045a, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xab3dc400, ftLastWriteTime.dwHighDateTime=0x1ca045a, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModifiedTelespace.ico", cAlternateFileName="MODIFI~1.ICO")) returned 1 [0157.439] wcscmp (_String1="ModifiedTelespace.ico", _String2=".") returned 1 [0157.439] wcscmp (_String1="ModifiedTelespace.ico", _String2="..") returned 1 [0157.439] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e4bf590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1 [0157.439] wcscmp (_String1="OFFLINE.ICO", _String2=".") returned 1 [0157.439] wcscmp (_String1="OFFLINE.ICO", _String2="..") returned 1 [0157.440] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1 [0157.440] wcscmp (_String1="ONLINE.ICO", _String2=".") returned 1 [0157.440] wcscmp (_String1="ONLINE.ICO", _String2="..") returned 1 [0157.440] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54763e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8174aab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54763e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineBusy.ico", cAlternateFileName="ONLINE~1.ICO")) returned 1 [0157.440] wcscmp (_String1="OnLineBusy.ico", _String2=".") returned 1 [0157.440] wcscmp (_String1="OnLineBusy.ico", _String2="..") returned 1 [0157.440] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineIdle.ico", cAlternateFileName="ONLINE~2.ICO")) returned 1 [0157.440] wcscmp (_String1="OnLineIdle.ico", _String2=".") returned 1 [0157.440] wcscmp (_String1="OnLineIdle.ico", _String2="..") returned 1 [0157.440] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutDomain.ico", cAlternateFileName="OUTDOM~1.ICO")) returned 1 [0157.440] wcscmp (_String1="OutDomain.ico", _String2=".") returned 1 [0157.440] wcscmp (_String1="OutDomain.ico", _String2="..") returned 1 [0157.440] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81d18050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1 [0157.440] wcscmp (_String1="OUTGOING.ICO", _String2=".") returned 1 [0157.440] wcscmp (_String1="OUTGOING.ICO", _String2="..") returned 1 [0157.440] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81e229f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutSyncPC.ico", cAlternateFileName="OUTSYN~1.ICO")) returned 1 [0157.440] wcscmp (_String1="OutSyncPC.ico", _String2=".") returned 1 [0157.440] wcscmp (_String1="OutSyncPC.ico", _String2="..") returned 1 [0157.440] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a76b00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55a76b00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalContact.ico", cAlternateFileName="PERSON~1.ICO")) returned 1 [0157.440] wcscmp (_String1="PersonalContact.ico", _String2=".") returned 1 [0157.440] wcscmp (_String1="PersonalContact.ico", _String2="..") returned 1 [0157.440] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x904bbd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionMember.ico", cAlternateFileName="SESSIO~2.ICO")) returned 1 [0157.440] wcscmp (_String1="SessionMember.ico", _String2=".") returned 1 [0157.440] wcscmp (_String1="SessionMember.ico", _String2="..") returned 1 [0157.440] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionOwner.ico", cAlternateFileName="SESSIO~1.ICO")) returned 1 [0157.440] wcscmp (_String1="SessionOwner.ico", _String2=".") returned 1 [0157.440] wcscmp (_String1="SessionOwner.ico", _String2="..") returned 1 [0157.440] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpaceSelector.ico", cAlternateFileName="SPACES~1.ICO")) returned 1 [0157.440] wcscmp (_String1="SpaceSelector.ico", _String2=".") returned 1 [0157.440] wcscmp (_String1="SpaceSelector.ico", _String2="..") returned 1 [0157.441] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusAway.ico", cAlternateFileName="STATUS~1.ICO")) returned 1 [0157.441] wcscmp (_String1="StatusAway.ico", _String2=".") returned 1 [0157.441] wcscmp (_String1="StatusAway.ico", _String2="..") returned 1 [0157.441] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="STATUS~2.ICO")) returned 1 [0157.441] wcscmp (_String1="StatusDoNotDisturb.ico", _String2=".") returned 1 [0157.441] wcscmp (_String1="StatusDoNotDisturb.ico", _String2="..") returned 1 [0157.441] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusOnline.ico", cAlternateFileName="STATUS~3.ICO")) returned 1 [0157.441] wcscmp (_String1="StatusOnline.ico", _String2=".") returned 1 [0157.441] wcscmp (_String1="StatusOnline.ico", _String2="..") returned 1 [0157.441] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d89800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56d89800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1 [0157.441] wcscmp (_String1="TOOLICON.ICO", _String2=".") returned 1 [0157.441] wcscmp (_String1="TOOLICON.ICO", _String2="..") returned 1 [0157.441] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5809c500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x924b84d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5809c500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1 [0157.441] wcscmp (_String1="WSS.ICO", _String2=".") returned 1 [0157.441] wcscmp (_String1="WSS.ICO", _String2="..") returned 1 [0157.441] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99659200, ftCreationTime.dwHighDateTime=0x1c9d4a6, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99659200, ftLastWriteTime.dwHighDateTime=0x1c9d4a6, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 1 [0157.441] wcscmp (_String1="WSS_DocLib.ico", _String2=".") returned 1 [0157.441] wcscmp (_String1="WSS_DocLib.ico", _String2="..") returned 1 [0157.441] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99659200, ftCreationTime.dwHighDateTime=0x1c9d4a6, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99659200, ftLastWriteTime.dwHighDateTime=0x1c9d4a6, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 0 [0157.441] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0157.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5be0) returned 1 [0157.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 [0157.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47918) returned 1 Thread: id = 2545 os_tid = 0x1224 [0154.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c6d0 [0154.587] wcscpy (in: _Dest=0x3f3c6d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0154.587] wcscat (in: _Dest=0x3f3c6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0154.587] wcscat (in: _Dest=0x3f3c6d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*" [0154.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a544a8 [0154.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0156.963] wcscmp (_String1=".", _String2=".") returned 0 [0156.963] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.963] wcscmp (_String1="..", _String2=".") returned 1 [0156.963] wcscmp (_String1="..", _String2="..") returned 0 [0156.963] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67aeba00, ftCreationTime.dwHighDateTime=0x1c8a132, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67aeba00, ftLastWriteTime.dwHighDateTime=0x1c8a132, nFileSizeHigh=0x0, nFileSizeLow=0x487, dwReserved0=0x0, dwReserved1=0x0, cFileName="builtincontrolsschema.xsd", cAlternateFileName="BUILTI~1.XSD")) returned 1 [0156.963] wcscmp (_String1="builtincontrolsschema.xsd", _String2=".") returned 1 [0156.963] wcscmp (_String1="builtincontrolsschema.xsd", _String2="..") returned 1 [0156.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6968 [0156.964] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0156.964] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0156.964] wcscat (in: _Dest=0x2ff6968, _Source="builtincontrolsschema.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" [0172.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0172.680] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67aeba00, ftCreationTime.dwHighDateTime=0x1c8a132, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x67aeba00, ftLastWriteTime.dwHighDateTime=0x1c8a132, nFileSizeHigh=0x0, nFileSizeLow=0x5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="grvschema.xsd", cAlternateFileName="GRVSCH~1.XSD")) returned 1 [0172.680] wcscmp (_String1="grvschema.xsd", _String2=".") returned 1 [0172.680] wcscmp (_String1="grvschema.xsd", _String2="..") returned 1 [0172.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62310 [0172.680] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0172.680] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0172.680] wcscat (in: _Dest=0x7a62310, _Source="grvschema.xsd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" [0172.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0172.681] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5809c500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5809c500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Messenger.xml", cAlternateFileName="MESSEN~1.XML")) returned 1 [0172.681] wcscmp (_String1="Messenger.xml", _String2=".") returned 1 [0172.681] wcscmp (_String1="Messenger.xml", _String2="..") returned 1 [0172.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63210 [0172.681] wcscpy (in: _Dest=0x7a63210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0172.681] wcscat (in: _Dest=0x7a63210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0172.681] wcscat (in: _Dest=0x7a63210, _Source="Messenger.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" [0172.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0172.682] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Space Templates", cAlternateFileName="SPACET~1")) returned 1 [0172.682] wcscmp (_String1="Space Templates", _String2=".") returned 1 [0172.682] wcscmp (_String1="Space Templates", _String2="..") returned 1 [0172.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62950 [0172.682] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0172.682] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0172.682] wcscat (in: _Dest=0x7a62950, _Source="Space Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" [0172.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0172.683] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf779900, ftCreationTime.dwHighDateTime=0x1c9d7ab, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf779900, ftLastWriteTime.dwHighDateTime=0x1c9d7ab, nFileSizeHigh=0x0, nFileSizeLow=0x17e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterApplicationDescriptors.xml", cAlternateFileName="STARTE~2.XML")) returned 1 [0172.683] wcscmp (_String1="StarterApplicationDescriptors.xml", _String2=".") returned 1 [0172.683] wcscmp (_String1="StarterApplicationDescriptors.xml", _String2="..") returned 1 [0172.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d56a10 [0172.683] wcscpy (in: _Dest=0x3d56a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0172.683] wcscat (in: _Dest=0x3d56a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0172.683] wcscat (in: _Dest=0x3d56a10, _Source="StarterApplicationDescriptors.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" [0172.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0172.690] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x593af200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826c39b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x593af200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b875, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterNotificationDescriptors.xml", cAlternateFileName="STARTE~1.XML")) returned 1 [0172.690] wcscmp (_String1="StarterNotificationDescriptors.xml", _String2=".") returned 1 [0172.690] wcscmp (_String1="StarterNotificationDescriptors.xml", _String2="..") returned 1 [0172.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d578e8 [0172.690] wcscpy (in: _Dest=0x3d578e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0172.690] wcscat (in: _Dest=0x3d578e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0172.690] wcscat (in: _Dest=0x3d578e8, _Source="StarterNotificationDescriptors.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" [0172.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d578e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0172.691] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7893300, ftCreationTime.dwHighDateTime=0x1c9a4f3, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7893300, ftLastWriteTime.dwHighDateTime=0x1c9a4f3, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~3.XML")) returned 1 [0172.691] wcscmp (_String1="StarterToolTemplates.xml", _String2=".") returned 1 [0172.691] wcscmp (_String1="StarterToolTemplates.xml", _String2="..") returned 1 [0172.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3eaf7f8 [0172.691] wcscpy (in: _Dest=0x3eaf7f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files" [0172.691] wcscat (in: _Dest=0x3eaf7f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\" [0172.691] wcscat (in: _Dest=0x3eaf7f8, _Source="StarterToolTemplates.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" [0172.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0172.692] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7893300, ftCreationTime.dwHighDateTime=0x1c9a4f3, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7893300, ftLastWriteTime.dwHighDateTime=0x1c9a4f3, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~3.XML")) returned 0 [0172.692] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0172.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a544a8) returned 1 [0172.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c6d0) returned 1 [0172.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47898) returned 1 Thread: id = 2546 os_tid = 0x1228 [0154.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf")) returned 0x20 [0154.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF", dwFileAttributes=0x20) returned 0 [0154.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.594] GetLastError () returned 0x5 [0154.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF", dwFileAttributes=0x20) returned 0 [0154.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 2547 os_tid = 0x122c [0154.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf")) returned 0x20 [0154.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF", dwFileAttributes=0x20) returned 0 [0154.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.596] GetLastError () returned 0x5 [0154.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF", dwFileAttributes=0x20) returned 0 [0154.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65720) returned 1 Thread: id = 2548 os_tid = 0x123c [0154.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf")) returned 0x20 [0154.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF", dwFileAttributes=0x20) returned 0 [0154.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.598] GetLastError () returned 0x5 [0154.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF", dwFileAttributes=0x20) returned 0 [0154.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65688) returned 1 Thread: id = 2549 os_tid = 0x1240 [0154.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf")) returned 0x20 [0158.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF", dwFileAttributes=0x20) returned 0 [0158.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.587] GetLastError () returned 0x5 [0159.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF", dwFileAttributes=0x20) returned 0 [0159.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a655f0) returned 1 Thread: id = 2550 os_tid = 0x1244 [0154.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf")) returned 0x20 [0158.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF", dwFileAttributes=0x20) returned 0 [0158.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.450] GetLastError () returned 0x5 [0161.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF", dwFileAttributes=0x20) returned 0 [0161.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65558) returned 1 Thread: id = 2551 os_tid = 0x1248 [0154.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf")) returned 0x20 [0161.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF", dwFileAttributes=0x20) returned 0 [0161.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.679] GetLastError () returned 0x5 [0161.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF", dwFileAttributes=0x20) returned 0 [0161.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a654c0) returned 1 Thread: id = 2552 os_tid = 0x124c [0154.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf")) returned 0x20 [0161.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF", dwFileAttributes=0x20) returned 0 [0161.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.681] GetLastError () returned 0x5 [0161.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF", dwFileAttributes=0x20) returned 0 [0161.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65428) returned 1 Thread: id = 2553 os_tid = 0x1250 [0154.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf")) returned 0x20 [0161.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF", dwFileAttributes=0x20) returned 0 [0161.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.723] GetLastError () returned 0x5 [0161.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF", dwFileAttributes=0x20) returned 0 [0161.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65390) returned 1 Thread: id = 2554 os_tid = 0x1254 [0154.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf")) returned 0x20 [0159.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF", dwFileAttributes=0x20) returned 0 [0159.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.451] GetLastError () returned 0x5 [0161.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF", dwFileAttributes=0x20) returned 0 [0161.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a652f8) returned 1 Thread: id = 2555 os_tid = 0x1258 [0154.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf")) returned 0x20 [0159.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF", dwFileAttributes=0x20) returned 0 [0159.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.722] GetLastError () returned 0x5 [0161.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF", dwFileAttributes=0x20) returned 0 [0161.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65260) returned 1 Thread: id = 2556 os_tid = 0x125c [0154.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf")) returned 0x20 [0158.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF", dwFileAttributes=0x20) returned 0 [0158.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.211] GetLastError () returned 0x5 [0159.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF", dwFileAttributes=0x20) returned 0 [0159.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a651c8) returned 1 Thread: id = 2557 os_tid = 0x1260 [0154.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf")) returned 0x20 [0161.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF", dwFileAttributes=0x20) returned 0 [0161.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.677] GetLastError () returned 0x5 [0161.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF", dwFileAttributes=0x20) returned 0 [0161.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65130) returned 1 Thread: id = 2558 os_tid = 0x1264 [0154.649] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll")) returned 0x2020 [0154.649] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0154.649] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0154.650] GetLastError () returned 0x5 [0154.650] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0154.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 Thread: id = 2559 os_tid = 0x1268 [0154.651] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll")) returned 0x2020 [0155.943] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.943] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.943] GetLastError () returned 0x5 [0155.943] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65098) returned 1 Thread: id = 2560 os_tid = 0x126c [0154.652] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll")) returned 0x2020 [0155.944] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0155.945] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.945] GetLastError () returned 0x5 [0155.945] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64f68) returned 1 Thread: id = 2561 os_tid = 0x1270 [0154.653] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll")) returned 0x2020 [0155.946] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.946] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.946] GetLastError () returned 0x5 [0155.946] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60480) returned 1 Thread: id = 2562 os_tid = 0x1274 [0154.653] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll")) returned 0x2020 [0155.948] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0155.948] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.948] GetLastError () returned 0x5 [0155.948] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64b40) returned 1 Thread: id = 2563 os_tid = 0x1278 [0154.654] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll")) returned 0x2020 [0155.949] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.949] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.949] GetLastError () returned 0x5 [0155.949] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60630) returned 1 Thread: id = 2564 os_tid = 0x127c [0154.655] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll")) returned 0x2020 [0155.950] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0155.951] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.951] GetLastError () returned 0x5 [0155.951] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 Thread: id = 2565 os_tid = 0x1280 [0154.656] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll")) returned 0x2020 [0155.952] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.952] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.952] GetLastError () returned 0x5 [0155.952] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a606c0) returned 1 Thread: id = 2566 os_tid = 0x1284 [0154.656] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll")) returned 0x2020 [0155.953] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.953] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.953] GetLastError () returned 0x5 [0155.953] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60fc0) returned 1 Thread: id = 2567 os_tid = 0x1288 [0154.657] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll")) returned 0x2020 [0155.955] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0155.955] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.955] GetLastError () returned 0x5 [0155.955] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60e10) returned 1 Thread: id = 2568 os_tid = 0x128c [0154.658] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll")) returned 0x2020 [0155.956] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.956] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.956] GetLastError () returned 0x5 [0155.956] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64848) returned 1 Thread: id = 2569 os_tid = 0x1290 [0154.659] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll")) returned 0x2020 [0155.958] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0155.958] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.958] GetLastError () returned 0x5 [0155.958] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64090) returned 1 Thread: id = 2570 os_tid = 0x1294 [0154.660] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll")) returned 0x2020 [0155.959] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.959] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.959] GetLastError () returned 0x5 [0155.959] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60f30) returned 1 Thread: id = 2571 os_tid = 0x1298 [0154.660] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll")) returned 0x2020 [0155.961] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.961] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.961] GetLastError () returned 0x5 [0155.961] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60ea0) returned 1 Thread: id = 2572 os_tid = 0x129c [0154.661] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll")) returned 0x2020 [0155.962] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0155.962] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.962] GetLastError () returned 0x5 [0155.962] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61200) returned 1 Thread: id = 2573 os_tid = 0x12a0 [0154.662] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll")) returned 0x2020 [0155.963] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.964] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.964] GetLastError () returned 0x5 [0155.964] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64128) returned 1 Thread: id = 2574 os_tid = 0x12a4 [0154.663] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll")) returned 0x2020 [0155.965] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0155.965] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.965] GetLastError () returned 0x5 [0155.965] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a641c0) returned 1 Thread: id = 2575 os_tid = 0x12a8 [0154.664] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll")) returned 0x2020 [0155.966] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0155.966] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.967] GetLastError () returned 0x5 [0155.967] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64258) returned 1 Thread: id = 2576 os_tid = 0x12ac [0154.664] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll")) returned 0x2020 [0155.968] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.968] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.968] GetLastError () returned 0x5 [0155.968] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61290) returned 1 Thread: id = 2577 os_tid = 0x12b0 [0154.665] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll")) returned 0x2020 [0155.969] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.969] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.970] GetLastError () returned 0x5 [0155.970] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61320) returned 1 Thread: id = 2578 os_tid = 0x12b4 [0154.666] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll")) returned 0x2020 [0155.224] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.224] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.224] GetLastError () returned 0x5 [0155.224] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a642f0) returned 1 Thread: id = 2579 os_tid = 0x12c0 [0154.667] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll")) returned 0x2020 [0155.226] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.226] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.226] GetLastError () returned 0x5 [0155.226] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a613b0) returned 1 Thread: id = 2580 os_tid = 0x12c4 [0155.233] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll")) returned 0x2020 [0155.233] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0155.233] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.234] GetLastError () returned 0x5 [0155.234] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0155.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61440) returned 1 Thread: id = 2581 os_tid = 0x12c8 [0155.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e663d8 [0155.237] wcscpy (in: _Dest=0x3e663d8, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0155.237] wcscat (in: _Dest=0x3e663d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0155.237] wcscat (in: _Dest=0x3e663d8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*" [0155.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b5a8 [0155.238] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\*", lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0155.238] wcscmp (_String1=".", _String2=".") returned 0 [0155.239] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.239] wcscmp (_String1="..", _String2=".") returned 1 [0155.239] wcscmp (_String1="..", _String2="..") returned 0 [0155.239] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0155.239] wcscmp (_String1="x86", _String2=".") returned 1 [0155.239] wcscmp (_String1="x86", _String2="..") returned 1 [0155.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d40c18 [0155.239] wcscpy (in: _Dest=0x3d40c18, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch" [0155.239] wcscat (in: _Dest=0x3d40c18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\" [0155.239] wcscat (in: _Dest=0x3d40c18, _Source="x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0164.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d406a0 [0164.728] wcscpy (in: _Dest=0x3d406a0, _Source="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86" [0164.729] wcscat (in: _Dest=0x3d406a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\" [0164.729] wcscat (in: _Dest=0x3d406a0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*") returned="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*" [0164.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a9a0 [0164.729] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\D4036846864773E3D647F421DFE7F6CA536E307B\\packages\\Patch\\x86\\*", lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73f70 [0164.729] wcscmp (_String1=".", _String2=".") returned 0 [0164.729] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.729] wcscmp (_String1="..", _String2=".") returned 1 [0164.729] wcscmp (_String1="..", _String2="..") returned 0 [0164.729] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0164.729] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0164.729] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0164.730] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad20100, ftCreationTime.dwHighDateTime=0x1d0a164, ftLastAccessTime.dwLowDateTime=0x9ad20100, ftLastAccessTime.dwHighDateTime=0x1d0a164, ftLastWriteTime.dwLowDateTime=0x9ad20100, ftLastWriteTime.dwHighDateTime=0x1d0a164, nFileSizeHigh=0x0, nFileSizeLow=0x98303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0164.730] FindClose (in: hFindFile=0x3e73f70 | out: hFindFile=0x3e73f70) returned 1 [0164.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a9a0) returned 1 [0164.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d406a0) returned 1 [0164.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40c18) returned 1 [0164.730] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be7f950, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x8be7f950, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x8be7f950, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0164.730] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0164.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b5a8) returned 1 [0164.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e663d8) returned 1 [0164.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 Thread: id = 2582 os_tid = 0x12cc [0155.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3dafad8 [0155.241] wcscpy (in: _Dest=0x3dafad8, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" [0155.241] wcscat (in: _Dest=0x3dafad8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\" [0155.241] wcscat (in: _Dest=0x3dafad8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" [0155.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b340 [0155.241] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0155.242] wcscmp (_String1=".", _String2=".") returned 0 [0155.242] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ec50f10, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x7ec50f10, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x7ec50f10, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.242] wcscmp (_String1="..", _String2=".") returned 1 [0155.242] wcscmp (_String1="..", _String2="..") returned 0 [0155.242] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0155.242] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0155.242] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0155.242] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0155.242] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1 [0155.243] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1 [0155.243] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6014500, ftCreationTime.dwHighDateTime=0x1cf3e37, ftLastAccessTime.dwLowDateTime=0xe6014500, ftLastAccessTime.dwHighDateTime=0x1cf3e37, ftLastWriteTime.dwLowDateTime=0xe6014500, ftLastWriteTime.dwHighDateTime=0x1cf3e37, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0155.243] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0155.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b340) returned 1 [0155.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafad8) returned 1 [0155.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf9e8) returned 1 Thread: id = 2583 os_tid = 0x12d0 [0155.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl")) returned 0x20 [0155.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL", dwFileAttributes=0x20) returned 0 [0155.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.246] GetLastError () returned 0x5 [0155.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL", dwFileAttributes=0x20) returned 0 [0155.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6448) returned 1 Thread: id = 2584 os_tid = 0x12d4 [0155.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl")) returned 0x20 [0156.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL", dwFileAttributes=0x20) returned 0 [0156.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.451] GetLastError () returned 0x5 [0156.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL", dwFileAttributes=0x20) returned 0 [0156.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 Thread: id = 2585 os_tid = 0x12d8 [0155.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl")) returned 0x20 [0155.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL", dwFileAttributes=0x20) returned 0 [0155.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.972] GetLastError () returned 0x5 [0155.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL", dwFileAttributes=0x20) returned 0 [0155.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 2586 os_tid = 0x12dc [0155.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl")) returned 0x20 [0155.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL", dwFileAttributes=0x20) returned 0 [0155.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.973] GetLastError () returned 0x5 [0155.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL", dwFileAttributes=0x20) returned 0 [0155.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 Thread: id = 2587 os_tid = 0x12e0 [0155.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus")) returned 0x20 [0155.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS", dwFileAttributes=0x20) returned 0 [0155.252] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.253] GetLastError () returned 0x5 [0155.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS", dwFileAttributes=0x20) returned 0 [0155.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052f40) returned 1 Thread: id = 2588 os_tid = 0x12e4 [0155.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus")) returned 0x20 [0155.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS", dwFileAttributes=0x20) returned 0 [0155.255] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.255] GetLastError () returned 0x5 [0155.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS", dwFileAttributes=0x20) returned 0 [0155.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66770) returned 1 Thread: id = 2589 os_tid = 0x12e8 [0155.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus")) returned 0x20 [0155.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS", dwFileAttributes=0x20) returned 0 [0155.259] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.259] GetLastError () returned 0x5 [0155.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS", dwFileAttributes=0x20) returned 0 [0155.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 Thread: id = 2590 os_tid = 0x12ec [0155.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus")) returned 0x20 [0155.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS", dwFileAttributes=0x20) returned 0 [0155.266] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.266] GetLastError () returned 0x5 [0155.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS", dwFileAttributes=0x20) returned 0 [0155.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7938) returned 1 Thread: id = 2591 os_tid = 0x12f0 [0155.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3f8a8 [0155.270] wcscpy (in: _Dest=0x3f3f8a8, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0155.270] wcscat (in: _Dest=0x3f3f8a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0155.270] wcscat (in: _Dest=0x3f3f8a8, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*" [0155.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b340 [0155.270] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0155.270] wcscmp (_String1=".", _String2=".") returned 0 [0155.270] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc6a32c0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdc6a32c0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.270] wcscmp (_String1="..", _String2=".") returned 1 [0155.270] wcscmp (_String1="..", _String2="..") returned 0 [0155.270] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0155.270] wcscmp (_String1="directories.acrodata", _String2=".") returned 1 [0155.270] wcscmp (_String1="directories.acrodata", _String2="..") returned 1 [0155.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63850 [0155.270] wcscpy (in: _Dest=0x7a63850, _Source="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" [0155.271] wcscat (in: _Dest=0x7a63850, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\" [0155.271] wcscat (in: _Dest=0x7a63850, _Source="directories.acrodata" | out: _Dest="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" [0164.743] GetFileAttributesW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata")) returned 0x2020 [0164.744] SetFileAttributesW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x20) returned 0 [0164.744] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.744] GetLastError () returned 0x5 [0164.744] SetFileAttributesW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", dwFileAttributes=0x2020) returned 0 [0164.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63850) returned 1 [0164.744] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc6a32c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0164.744] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0164.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b340) returned 1 [0164.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0164.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bb58) returned 1 Thread: id = 2592 os_tid = 0x12f4 [0155.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62130 [0155.271] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" [0155.271] wcscat (in: _Dest=0x7a62130, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\" [0155.271] wcscat (in: _Dest=0x7a62130, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*") returned="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*" [0155.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c680 [0155.272] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0155.272] wcscmp (_String1=".", _String2=".") returned 0 [0155.272] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.272] wcscmp (_String1="..", _String2=".") returned 1 [0155.272] wcscmp (_String1="..", _String2="..") returned 0 [0155.272] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa9474f30, ftCreationTime.dwHighDateTime=0x1d2f5bb, ftLastAccessTime.dwLowDateTime=0xa9474f30, ftLastAccessTime.dwHighDateTime=0x1d2f5bb, ftLastWriteTime.dwLowDateTime=0xa9474f30, ftLastWriteTime.dwHighDateTime=0x1d2f5bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0155.272] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0155.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c680) returned 1 [0155.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 [0155.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6300) returned 1 Thread: id = 2593 os_tid = 0x12f8 [0155.277] GetFileAttributesW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml")) returned 0x2020 [0155.278] SetFileAttributesW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x20) returned 0 [0155.278] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.278] GetLastError () returned 0x5 [0155.279] SetFileAttributesW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", dwFileAttributes=0x2020) returned 0 [0155.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a267e8) returned 1 Thread: id = 2594 os_tid = 0x12fc [0155.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66820 [0155.283] wcscpy (in: _Dest=0x7a66820, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0155.283] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\" [0155.283] wcscat (in: _Dest=0x7a66820, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*" [0155.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c680 [0155.283] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0155.283] wcscmp (_String1=".", _String2=".") returned 0 [0155.283] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.283] wcscmp (_String1="..", _String2=".") returned 1 [0155.283] wcscmp (_String1="..", _String2="..") returned 0 [0155.283] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93532dc2, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x93532dc2, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0155.283] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0155.283] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0155.283] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 1 [0155.283] wcscmp (_String1="Speech Recognition.lnk", _String2=".") returned 1 [0155.283] wcscmp (_String1="Speech Recognition.lnk", _String2="..") returned 1 [0155.284] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 0 [0155.284] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0155.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c680) returned 1 [0155.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 [0155.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7b750) returned 1 Thread: id = 2595 os_tid = 0x1300 [0155.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3e7b750 [0155.288] wcscpy (in: _Dest=0x3e7b750, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0155.289] wcscat (in: _Dest=0x3e7b750, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\" [0155.289] wcscat (in: _Dest=0x3e7b750, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*" [0155.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c680 [0155.289] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0155.289] wcscmp (_String1=".", _String2=".") returned 0 [0155.289] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.289] wcscmp (_String1="..", _String2=".") returned 1 [0155.289] wcscmp (_String1="..", _String2="..") returned 0 [0155.289] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c902257, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c902257, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c9283b7, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="CHARAC~1.LNK")) returned 1 [0155.289] wcscmp (_String1="Character Map.lnk", _String2=".") returned 1 [0155.289] wcscmp (_String1="Character Map.lnk", _String2="..") returned 1 [0155.289] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9357f080, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9357f080, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0155.289] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0155.289] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0155.289] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00af8f, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6c00af8f, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6c00af8f, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0155.289] wcscmp (_String1="dfrgui.lnk", _String2=".") returned 1 [0155.290] wcscmp (_String1="dfrgui.lnk", _String2="..") returned 1 [0155.290] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3e1ef0, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b3e1ef0, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b3e1ef0, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="DISKCL~1.LNK")) returned 1 [0155.290] wcscmp (_String1="Disk Cleanup.lnk", _String2=".") returned 1 [0155.290] wcscmp (_String1="Disk Cleanup.lnk", _String2="..") returned 1 [0155.290] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d2e5e1a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d2e5e1a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d2e5e1a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="RESOUR~1.LNK")) returned 1 [0155.290] wcscmp (_String1="Resource Monitor.lnk", _String2=".") returned 1 [0155.290] wcscmp (_String1="Resource Monitor.lnk", _String2="..") returned 1 [0155.290] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5597fb3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5597fb3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5597fb3a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0155.290] wcscmp (_String1="System Information.lnk", _String2=".") returned 1 [0155.290] wcscmp (_String1="System Information.lnk", _String2="..") returned 1 [0155.290] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad30103, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ad30103, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ad30103, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="SYSTEM~2.LNK")) returned 1 [0155.290] wcscmp (_String1="System Restore.lnk", _String2=".") returned 1 [0155.290] wcscmp (_String1="System Restore.lnk", _String2="..") returned 1 [0155.290] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df49088, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6df49088, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6df49088, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0155.290] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0155.290] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0155.290] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e62b00c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e62b00c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0155.290] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2=".") returned 1 [0155.291] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2="..") returned 1 [0155.291] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0155.291] wcscmp (_String1="Windows Easy Transfer.lnk", _String2=".") returned 1 [0155.291] wcscmp (_String1="Windows Easy Transfer.lnk", _String2="..") returned 1 [0155.291] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0155.291] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0155.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c680) returned 1 [0155.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7b750) returned 1 [0155.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f4e8) returned 1 Thread: id = 2596 os_tid = 0x1304 [0155.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f4e8 [0155.293] wcscpy (in: _Dest=0x7a5f4e8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0155.293] wcscat (in: _Dest=0x7a5f4e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\" [0155.293] wcscat (in: _Dest=0x7a5f4e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*" [0155.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c680 [0155.293] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0155.293] wcscmp (_String1=".", _String2=".") returned 0 [0155.293] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.294] wcscmp (_String1="..", _String2=".") returned 1 [0155.294] wcscmp (_String1="..", _String2="..") returned 0 [0155.294] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84e2d1b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0155.294] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0155.294] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0155.294] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95124c0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95124c0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95124c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="SHAPEC~1.LNK")) returned 1 [0155.294] wcscmp (_String1="ShapeCollector.lnk", _String2=".") returned 1 [0155.294] wcscmp (_String1="ShapeCollector.lnk", _String2="..") returned 1 [0155.294] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95aaa40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95aaa40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95aaa40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0155.294] wcscmp (_String1="TabTip.lnk", _String2=".") returned 1 [0155.294] wcscmp (_String1="TabTip.lnk", _String2="..") returned 1 [0155.294] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0155.294] wcscmp (_String1="Windows Journal.lnk", _String2=".") returned 1 [0155.294] wcscmp (_String1="Windows Journal.lnk", _String2="..") returned 1 [0155.294] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0155.294] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0155.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c680) returned 1 [0155.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f4e8) returned 1 [0155.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 Thread: id = 2597 os_tid = 0x1308 [0155.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7938 [0155.296] wcscpy (in: _Dest=0x2ff7938, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0155.296] wcscat (in: _Dest=0x2ff7938, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\" [0155.296] wcscat (in: _Dest=0x2ff7938, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*" [0155.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c680 [0155.296] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0155.296] wcscmp (_String1=".", _String2=".") returned 0 [0155.297] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.297] wcscmp (_String1="..", _String2=".") returned 1 [0155.297] wcscmp (_String1="..", _String2="..") returned 0 [0155.297] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.297] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0155.297] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0155.297] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119d8cbf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0155.297] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2=".") returned 1 [0155.297] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2="..") returned 1 [0155.297] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0155.297] wcscmp (_String1="Windows PowerShell.lnk", _String2=".") returned 1 [0155.297] wcscmp (_String1="Windows PowerShell.lnk", _String2="..") returned 1 [0155.297] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0155.297] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0155.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c680) returned 1 [0155.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7938) returned 1 [0155.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 Thread: id = 2598 os_tid = 0x130c [0155.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf")) returned 0x20 [0155.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.302] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.303] GetLastError () returned 0x5 [0155.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7710) returned 1 Thread: id = 2599 os_tid = 0x1310 [0155.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf")) returned 0x20 [0155.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0155.305] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.305] GetLastError () returned 0x5 [0155.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0155.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7d88) returned 1 Thread: id = 2600 os_tid = 0x1314 [0155.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf")) returned 0x20 [0155.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0155.307] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.307] GetLastError () returned 0x5 [0155.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0155.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40060) returned 1 Thread: id = 2601 os_tid = 0x1318 [0155.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf")) returned 0x20 [0155.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.310] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.310] GetLastError () returned 0x5 [0155.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7b60) returned 1 Thread: id = 2602 os_tid = 0x1320 [0155.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf")) returned 0x20 [0155.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0155.312] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.312] GetLastError () returned 0x5 [0155.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0155.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6ad8) returned 1 Thread: id = 2603 os_tid = 0x1324 [0155.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf")) returned 0x20 [0155.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0155.314] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.315] GetLastError () returned 0x5 [0155.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0155.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40510) returned 1 Thread: id = 2604 os_tid = 0x1328 [0155.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf")) returned 0x20 [0155.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.317] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.317] GetLastError () returned 0x5 [0155.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0155.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 Thread: id = 2605 os_tid = 0x132c [0155.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf")) returned 0x20 [0155.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0155.319] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.319] GetLastError () returned 0x5 [0155.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0155.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 Thread: id = 2606 os_tid = 0x1330 [0155.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf")) returned 0x20 [0155.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0155.322] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.322] GetLastError () returned 0x5 [0155.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0155.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d405d8) returned 1 Thread: id = 2607 os_tid = 0x1334 [0155.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb")) returned 0x20 [0157.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB", dwFileAttributes=0x20) returned 0 [0157.737] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.738] GetLastError () returned 0x5 [0157.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB", dwFileAttributes=0x20) returned 0 [0157.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45020) returned 1 Thread: id = 2608 os_tid = 0x1338 [0155.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb")) returned 0x20 [0157.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB", dwFileAttributes=0x20) returned 0 [0157.449] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.449] GetLastError () returned 0x5 [0157.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB", dwFileAttributes=0x20) returned 0 [0157.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 Thread: id = 2609 os_tid = 0x133c [0155.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb")) returned 0x20 [0157.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB", dwFileAttributes=0x20) returned 0 [0157.710] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.710] GetLastError () returned 0x5 [0157.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB", dwFileAttributes=0x20) returned 0 [0157.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 2610 os_tid = 0x1340 [0155.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf")) returned 0x20 [0156.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0156.452] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.453] GetLastError () returned 0x5 [0156.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0156.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 2611 os_tid = 0x1344 [0155.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf")) returned 0x20 [0156.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0156.968] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.968] GetLastError () returned 0x5 [0156.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0156.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 Thread: id = 2612 os_tid = 0x1348 [0155.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf")) returned 0x20 [0156.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0156.975] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.975] GetLastError () returned 0x5 [0156.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0156.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7208) returned 1 Thread: id = 2613 os_tid = 0x134c [0155.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf")) returned 0x20 [0156.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0156.977] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.978] GetLastError () returned 0x5 [0156.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0156.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 Thread: id = 2614 os_tid = 0x1350 [0155.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf")) returned 0x20 [0156.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0156.310] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.310] GetLastError () returned 0x5 [0156.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0156.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf5d0) returned 1 Thread: id = 2615 os_tid = 0x1354 [0155.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf")) returned 0x20 [0156.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0156.966] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.966] GetLastError () returned 0x5 [0156.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0156.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ce0) returned 1 Thread: id = 2616 os_tid = 0x1358 [0155.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu")) returned 0x20 [0156.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU", dwFileAttributes=0x20) returned 0 [0156.984] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.984] GetLastError () returned 0x5 [0156.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU", dwFileAttributes=0x20) returned 0 [0156.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63670) returned 1 Thread: id = 2617 os_tid = 0x135c [0155.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu")) returned 0x20 [0156.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU", dwFileAttributes=0x20) returned 0 [0156.986] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.986] GetLastError () returned 0x5 [0156.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU", dwFileAttributes=0x20) returned 0 [0156.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 2618 os_tid = 0x1360 [0155.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu")) returned 0x20 [0157.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU", dwFileAttributes=0x20) returned 0 [0157.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.006] GetLastError () returned 0x5 [0157.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU", dwFileAttributes=0x20) returned 0 [0157.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63350) returned 1 Thread: id = 2619 os_tid = 0x1364 [0155.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu")) returned 0x20 [0156.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU", dwFileAttributes=0x20) returned 0 [0156.988] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.988] GetLastError () returned 0x5 [0156.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU", dwFileAttributes=0x20) returned 0 [0156.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 2620 os_tid = 0x1368 [0155.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu")) returned 0x20 [0156.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU", dwFileAttributes=0x20) returned 0 [0156.993] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.993] GetLastError () returned 0x5 [0156.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU", dwFileAttributes=0x20) returned 0 [0156.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 2621 os_tid = 0x136c [0155.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu")) returned 0x20 [0157.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU", dwFileAttributes=0x20) returned 0 [0157.008] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.008] GetLastError () returned 0x5 [0157.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU", dwFileAttributes=0x20) returned 0 [0157.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 Thread: id = 2622 os_tid = 0x1370 [0155.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu")) returned 0x20 [0157.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU", dwFileAttributes=0x20) returned 0 [0157.009] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.009] GetLastError () returned 0x5 [0157.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU", dwFileAttributes=0x20) returned 0 [0157.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a615f0) returned 1 Thread: id = 2623 os_tid = 0x1374 [0155.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu")) returned 0x20 [0157.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU", dwFileAttributes=0x20) returned 0 [0157.011] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.011] GetLastError () returned 0x5 [0157.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU", dwFileAttributes=0x20) returned 0 [0157.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 2624 os_tid = 0x1378 [0155.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu")) returned 0x20 [0157.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU", dwFileAttributes=0x20) returned 0 [0157.012] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.012] GetLastError () returned 0x5 [0157.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU", dwFileAttributes=0x20) returned 0 [0157.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61680) returned 1 Thread: id = 2625 os_tid = 0x137c [0155.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu")) returned 0x20 [0157.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu", dwFileAttributes=0x20) returned 0 [0157.014] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.014] GetLastError () returned 0x5 [0157.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu", dwFileAttributes=0x20) returned 0 [0157.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61710) returned 1 Thread: id = 2626 os_tid = 0x1380 [0155.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu")) returned 0x20 [0157.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU", dwFileAttributes=0x20) returned 0 [0157.015] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.016] GetLastError () returned 0x5 [0157.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU", dwFileAttributes=0x20) returned 0 [0157.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 2627 os_tid = 0x1384 [0155.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu")) returned 0x20 [0156.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU", dwFileAttributes=0x20) returned 0 [0156.995] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.995] GetLastError () returned 0x5 [0156.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU", dwFileAttributes=0x20) returned 0 [0156.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62b30) returned 1 Thread: id = 2628 os_tid = 0x1388 [0155.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu")) returned 0x20 [0156.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU", dwFileAttributes=0x20) returned 0 [0156.997] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.997] GetLastError () returned 0x5 [0156.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU", dwFileAttributes=0x20) returned 0 [0156.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 2629 os_tid = 0x138c [0155.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu")) returned 0x20 [0157.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU", dwFileAttributes=0x20) returned 0 [0157.017] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.017] GetLastError () returned 0x5 [0157.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU", dwFileAttributes=0x20) returned 0 [0157.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a617a0) returned 1 Thread: id = 2630 os_tid = 0x1390 [0155.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu")) returned 0x20 [0157.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU", dwFileAttributes=0x20) returned 0 [0157.019] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.019] GetLastError () returned 0x5 [0157.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU", dwFileAttributes=0x20) returned 0 [0157.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61830) returned 1 Thread: id = 2631 os_tid = 0x1394 [0155.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu")) returned 0x20 [0156.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU", dwFileAttributes=0x20) returned 0 [0156.999] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.999] GetLastError () returned 0x5 [0156.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU", dwFileAttributes=0x20) returned 0 [0156.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a618c0) returned 1 Thread: id = 2632 os_tid = 0x139c [0155.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu")) returned 0x20 [0157.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU", dwFileAttributes=0x20) returned 0 [0157.001] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.001] GetLastError () returned 0x5 [0157.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU", dwFileAttributes=0x20) returned 0 [0157.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 2633 os_tid = 0x13a0 [0155.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu")) returned 0x20 [0157.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU", dwFileAttributes=0x20) returned 0 [0157.002] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.003] GetLastError () returned 0x5 [0157.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU", dwFileAttributes=0x20) returned 0 [0157.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61950) returned 1 Thread: id = 2634 os_tid = 0x13a4 [0155.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu")) returned 0x20 [0157.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU", dwFileAttributes=0x20) returned 0 [0157.021] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.021] GetLastError () returned 0x5 [0157.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU", dwFileAttributes=0x20) returned 0 [0157.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 2635 os_tid = 0x13a8 [0155.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu")) returned 0x20 [0156.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU", dwFileAttributes=0x20) returned 0 [0156.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.326] GetLastError () returned 0x5 [0156.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU", dwFileAttributes=0x20) returned 0 [0156.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a619e0) returned 1 Thread: id = 2636 os_tid = 0x13ac [0155.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu")) returned 0x20 [0156.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu", dwFileAttributes=0x20) returned 0 [0156.980] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.980] GetLastError () returned 0x5 [0156.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu", dwFileAttributes=0x20) returned 0 [0156.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61a70) returned 1 Thread: id = 2637 os_tid = 0x13b0 [0155.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61440 [0155.407] wcscpy (in: _Dest=0x7a61440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0155.408] wcscat (in: _Dest=0x7a61440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\" [0155.408] wcscat (in: _Dest=0x7a61440, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*" [0155.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c680 [0155.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0156.982] wcscmp (_String1=".", _String2=".") returned 0 [0156.982] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.982] wcscmp (_String1="..", _String2=".") returned 1 [0156.982] wcscmp (_String1="..", _String2="..") returned 0 [0156.982] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0156.982] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0156.983] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0156.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053528 [0156.983] wcscpy (in: _Dest=0x3053528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0156.983] wcscat (in: _Dest=0x3053528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\" [0156.983] wcscat (in: _Dest=0x3053528, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" [0158.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0158.685] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0158.685] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0158.685] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0158.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053870 [0158.685] wcscpy (in: _Dest=0x3053870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services" [0158.685] wcscat (in: _Dest=0x3053870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\" [0158.685] wcscat (in: _Dest=0x3053870, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" [0158.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0158.686] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0158.686] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0158.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c680) returned 1 [0158.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61440) returned 1 [0158.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 2638 os_tid = 0x13b4 [0155.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu")) returned 0x20 [0157.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU", dwFileAttributes=0x20) returned 0 [0157.004] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.004] GetLastError () returned 0x5 [0157.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU", dwFileAttributes=0x20) returned 0 [0157.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b00) returned 1 Thread: id = 2639 os_tid = 0x13b8 [0155.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt")) returned 0x20 [0155.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", dwFileAttributes=0x20) returned 0 [0155.987] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0155.988] GetLastError () returned 0x5 [0155.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", dwFileAttributes=0x20) returned 0 [0155.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 Thread: id = 2640 os_tid = 0x13bc [0155.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt")) returned 0x20 [0158.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", dwFileAttributes=0x20) returned 0 [0158.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.106] GetLastError () returned 0x5 [0158.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", dwFileAttributes=0x20) returned 0 [0158.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d405d8) returned 1 Thread: id = 2641 os_tid = 0x13c0 [0155.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt")) returned 0x20 [0158.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", dwFileAttributes=0x20) returned 0 [0158.334] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.334] GetLastError () returned 0x5 [0158.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", dwFileAttributes=0x20) returned 0 [0158.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 Thread: id = 2642 os_tid = 0x13c4 [0155.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt")) returned 0x20 [0158.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", dwFileAttributes=0x20) returned 0 [0158.335] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.335] GetLastError () returned 0x5 [0158.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", dwFileAttributes=0x20) returned 0 [0158.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 Thread: id = 2643 os_tid = 0x13c8 [0155.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt")) returned 0x20 [0158.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", dwFileAttributes=0x20) returned 0 [0158.101] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.101] GetLastError () returned 0x5 [0158.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", dwFileAttributes=0x20) returned 0 [0158.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66918) returned 1 Thread: id = 2644 os_tid = 0x13d0 [0156.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt")) returned 0x20 [0158.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", dwFileAttributes=0x20) returned 0 [0158.103] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.104] GetLastError () returned 0x5 [0158.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", dwFileAttributes=0x20) returned 0 [0158.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 Thread: id = 2645 os_tid = 0x13d4 [0156.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt")) returned 0x20 [0156.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT", dwFileAttributes=0x20) returned 0 [0156.035] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.035] GetLastError () returned 0x5 [0156.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT", dwFileAttributes=0x20) returned 0 [0156.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 Thread: id = 2646 os_tid = 0x13dc [0156.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+1")) returned 0x20 [0156.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1", dwFileAttributes=0x20) returned 0 [0156.037] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.037] GetLastError () returned 0x5 [0156.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+1", dwFileAttributes=0x20) returned 0 [0156.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 Thread: id = 2647 os_tid = 0x13e0 [0156.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+10")) returned 0x20 [0156.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10", dwFileAttributes=0x20) returned 0 [0156.074] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+10"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.074] GetLastError () returned 0x5 [0156.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+10", dwFileAttributes=0x20) returned 0 [0156.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47720) returned 1 Thread: id = 2648 os_tid = 0x13e4 [0156.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+11")) returned 0x20 [0157.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11", dwFileAttributes=0x20) returned 0 [0157.767] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+11"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.767] GetLastError () returned 0x5 [0157.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+11", dwFileAttributes=0x20) returned 0 [0157.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47fa8) returned 1 Thread: id = 2649 os_tid = 0x13e8 [0156.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+12")) returned 0x20 [0157.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12", dwFileAttributes=0x20) returned 0 [0157.768] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+12"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.769] GetLastError () returned 0x5 [0157.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+12", dwFileAttributes=0x20) returned 0 [0157.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d477f0) returned 1 Thread: id = 2650 os_tid = 0x13ec [0156.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+2")) returned 0x20 [0157.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2", dwFileAttributes=0x20) returned 0 [0157.770] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.770] GetLastError () returned 0x5 [0157.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+2", dwFileAttributes=0x20) returned 0 [0157.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ba8) returned 1 Thread: id = 2651 os_tid = 0x13f0 [0156.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+3")) returned 0x20 [0157.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3", dwFileAttributes=0x20) returned 0 [0157.452] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.452] GetLastError () returned 0x5 [0157.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+3", dwFileAttributes=0x20) returned 0 [0157.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5e88) returned 1 Thread: id = 2652 os_tid = 0x13f4 [0156.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+4")) returned 0x20 [0157.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4", dwFileAttributes=0x20) returned 0 [0157.749] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.749] GetLastError () returned 0x5 [0157.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+4", dwFileAttributes=0x20) returned 0 [0157.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6cc8) returned 1 Thread: id = 2653 os_tid = 0x13f8 [0156.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+5")) returned 0x20 [0157.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5", dwFileAttributes=0x20) returned 0 [0157.750] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.751] GetLastError () returned 0x5 [0157.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+5", dwFileAttributes=0x20) returned 0 [0157.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6668) returned 1 Thread: id = 2654 os_tid = 0x13fc [0156.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+6")) returned 0x20 [0157.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6", dwFileAttributes=0x20) returned 0 [0157.752] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+6"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.752] GetLastError () returned 0x5 [0157.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+6", dwFileAttributes=0x20) returned 0 [0157.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe70e8) returned 1 Thread: id = 2655 os_tid = 0x1400 [0156.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+7")) returned 0x20 [0157.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7", dwFileAttributes=0x20) returned 0 [0157.753] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+7"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.753] GetLastError () returned 0x5 [0157.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+7", dwFileAttributes=0x20) returned 0 [0157.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7208) returned 1 Thread: id = 2656 os_tid = 0x1404 [0156.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+8")) returned 0x20 [0157.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8", dwFileAttributes=0x20) returned 0 [0157.754] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+8"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.754] GetLastError () returned 0x5 [0157.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+8", dwFileAttributes=0x20) returned 0 [0157.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe67e8) returned 1 Thread: id = 2657 os_tid = 0x1408 [0156.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+9")) returned 0x20 [0157.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9", dwFileAttributes=0x20) returned 0 [0157.756] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt+9"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.756] GetLastError () returned 0x5 [0157.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT+9", dwFileAttributes=0x20) returned 0 [0157.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6ea8) returned 1 Thread: id = 2658 os_tid = 0x140c [0156.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-1")) returned 0x20 [0157.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1", dwFileAttributes=0x20) returned 0 [0157.757] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.757] GetLastError () returned 0x5 [0157.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-1", dwFileAttributes=0x20) returned 0 [0157.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6d88) returned 1 Thread: id = 2659 os_tid = 0x1410 [0156.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-10")) returned 0x20 [0157.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10", dwFileAttributes=0x20) returned 0 [0157.758] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-10"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.758] GetLastError () returned 0x5 [0157.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-10", dwFileAttributes=0x20) returned 0 [0157.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47990) returned 1 Thread: id = 2660 os_tid = 0x1414 [0156.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-11")) returned 0x20 [0157.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11", dwFileAttributes=0x20) returned 0 [0157.759] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-11"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.760] GetLastError () returned 0x5 [0157.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-11", dwFileAttributes=0x20) returned 0 [0157.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d479f8) returned 1 Thread: id = 2661 os_tid = 0x1418 [0156.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-12")) returned 0x20 [0157.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12", dwFileAttributes=0x20) returned 0 [0157.761] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-12"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.761] GetLastError () returned 0x5 [0157.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-12", dwFileAttributes=0x20) returned 0 [0157.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47a60) returned 1 Thread: id = 2662 os_tid = 0x141c [0156.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-13")) returned 0x20 [0157.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13", dwFileAttributes=0x20) returned 0 [0157.762] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-13"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.762] GetLastError () returned 0x5 [0157.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-13", dwFileAttributes=0x20) returned 0 [0157.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47ac8) returned 1 Thread: id = 2663 os_tid = 0x1420 [0156.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-14")) returned 0x20 [0157.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14", dwFileAttributes=0x20) returned 0 [0157.763] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-14"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.763] GetLastError () returned 0x5 [0157.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-14", dwFileAttributes=0x20) returned 0 [0157.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47c00) returned 1 Thread: id = 2664 os_tid = 0x1424 [0156.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-2")) returned 0x20 [0157.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2", dwFileAttributes=0x20) returned 0 [0157.765] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.765] GetLastError () returned 0x5 [0157.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-2", dwFileAttributes=0x20) returned 0 [0157.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe2c48) returned 1 Thread: id = 2665 os_tid = 0x1428 [0156.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-3")) returned 0x20 [0157.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3", dwFileAttributes=0x20) returned 0 [0157.766] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.766] GetLastError () returned 0x5 [0157.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-3", dwFileAttributes=0x20) returned 0 [0157.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe65a8) returned 1 Thread: id = 2666 os_tid = 0x142c [0156.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-4")) returned 0x20 [0157.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4", dwFileAttributes=0x20) returned 0 [0157.748] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.748] GetLastError () returned 0x5 [0157.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-4", dwFileAttributes=0x20) returned 0 [0157.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe5948) returned 1 Thread: id = 2667 os_tid = 0x1430 [0156.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-5")) returned 0x20 [0157.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5", dwFileAttributes=0x20) returned 0 [0157.747] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.747] GetLastError () returned 0x5 [0157.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-5", dwFileAttributes=0x20) returned 0 [0157.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6488) returned 1 Thread: id = 2668 os_tid = 0x1434 [0156.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-6")) returned 0x20 [0157.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6", dwFileAttributes=0x20) returned 0 [0157.745] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-6"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.745] GetLastError () returned 0x5 [0157.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-6", dwFileAttributes=0x20) returned 0 [0157.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6b48) returned 1 Thread: id = 2669 os_tid = 0x1438 [0156.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-7")) returned 0x20 [0157.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7", dwFileAttributes=0x20) returned 0 [0157.744] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-7"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.744] GetLastError () returned 0x5 [0157.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-7", dwFileAttributes=0x20) returned 0 [0157.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe73e8) returned 1 Thread: id = 2670 os_tid = 0x143c [0156.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-8")) returned 0x20 [0157.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8", dwFileAttributes=0x20) returned 0 [0157.743] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-8"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.743] GetLastError () returned 0x5 [0157.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-8", dwFileAttributes=0x20) returned 0 [0157.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7448) returned 1 Thread: id = 2671 os_tid = 0x1440 [0156.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-9")) returned 0x20 [0157.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9", dwFileAttributes=0x20) returned 0 [0157.741] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\gmt-9"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.741] GetLastError () returned 0x5 [0157.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\GMT-9", dwFileAttributes=0x20) returned 0 [0157.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe74a8) returned 1 Thread: id = 2672 os_tid = 0x1448 [0156.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\uct")) returned 0x20 [0157.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT", dwFileAttributes=0x20) returned 0 [0157.475] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\uct"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.476] GetLastError () returned 0x5 [0157.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UCT", dwFileAttributes=0x20) returned 0 [0157.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7508) returned 1 Thread: id = 2673 os_tid = 0x144c [0156.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\utc")) returned 0x20 [0157.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC", dwFileAttributes=0x20) returned 0 [0157.740] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\etc\\utc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.740] GetLastError () returned 0x5 [0157.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Etc\\UTC", dwFileAttributes=0x20) returned 0 [0157.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7568) returned 1 Thread: id = 2674 os_tid = 0x1454 [0156.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47098 [0156.487] wcscpy (in: _Dest=0x3e47098, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0156.487] wcscat (in: _Dest=0x3e47098, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0156.488] wcscat (in: _Dest=0x3e47098, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\*" [0156.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0156.488] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bf0 [0157.222] wcscmp (_String1=".", _String2=".") returned 0 [0157.222] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ffc1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8c403d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8c403d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.222] wcscmp (_String1="..", _String2=".") returned 1 [0157.222] wcscmp (_String1="..", _String2="..") returned 0 [0157.222] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0157.222] wcscmp (_String1="CertificateTransparency", _String2=".") returned 1 [0157.222] wcscmp (_String1="CertificateTransparency", _String2="..") returned 1 [0157.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x30539c0 [0157.222] wcscpy (in: _Dest=0x30539c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0157.222] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0157.222] wcscat (in: _Dest=0x30539c0, _Source="CertificateTransparency" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0163.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30539c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0163.871] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3022350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0163.871] wcscmp (_String1="Crashpad", _String2=".") returned 1 [0163.871] wcscmp (_String1="Crashpad", _String2="..") returned 1 [0163.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36e588 [0163.872] wcscpy (in: _Dest=0x36e588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.872] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.872] wcscat (in: _Dest=0x36e588, _Source="Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0163.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0163.873] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fd24d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0163.873] wcscmp (_String1="Default", _String2=".") returned 1 [0163.873] wcscmp (_String1="Default", _String2="..") returned 1 [0163.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9918 [0163.873] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.873] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.873] wcscat (in: _Dest=0x3eb9918, _Source="Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0163.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0163.874] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1 [0163.875] wcscmp (_String1="EVWhitelist", _String2=".") returned 1 [0163.875] wcscmp (_String1="EVWhitelist", _String2="..") returned 1 [0163.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45ec0 [0163.875] wcscpy (in: _Dest=0x3d45ec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.875] wcscat (in: _Dest=0x3d45ec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.875] wcscat (in: _Dest=0x3d45ec0, _Source="EVWhitelist" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0163.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d45ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0163.876] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0163.876] wcscmp (_String1="FileTypePolicies", _String2=".") returned 1 [0163.876] wcscmp (_String1="FileTypePolicies", _String2="..") returned 1 [0163.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7a64b40 [0163.876] wcscpy (in: _Dest=0x7a64b40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.876] wcscat (in: _Dest=0x7a64b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.876] wcscat (in: _Dest=0x7a64b40, _Source="FileTypePolicies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0163.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a64b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0163.878] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3211530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3211530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3211530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0163.878] wcscmp (_String1="First Run", _String2=".") returned 1 [0163.878] wcscmp (_String1="First Run", _String2="..") returned 1 [0163.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44690 [0163.878] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.878] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.878] wcscat (in: _Dest=0x3d44690, _Source="First Run" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" [0163.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0163.879] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8ac0f00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8ac0f00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8ac3610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1064b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0163.879] wcscmp (_String1="Local State", _String2=".") returned 1 [0163.879] wcscmp (_String1="Local State", _String2="..") returned 1 [0163.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45530 [0163.879] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.879] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.880] wcscat (in: _Dest=0x3d45530, _Source="Local State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" [0163.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0163.881] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0163.881] wcscmp (_String1="OriginTrials", _String2=".") returned 1 [0163.881] wcscmp (_String1="OriginTrials", _String2="..") returned 1 [0163.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d459b0 [0163.881] wcscpy (in: _Dest=0x3d459b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.881] wcscat (in: _Dest=0x3d459b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.881] wcscat (in: _Dest=0x3d459b0, _Source="OriginTrials" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0163.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d459b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0163.882] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0163.882] wcscmp (_String1="PepperFlash", _String2=".") returned 1 [0163.882] wcscmp (_String1="PepperFlash", _String2="..") returned 1 [0163.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45020 [0163.883] wcscpy (in: _Dest=0x3d45020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.883] wcscat (in: _Dest=0x3d45020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.883] wcscat (in: _Dest=0x3d45020, _Source="PepperFlash" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0163.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d45020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0163.884] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0163.884] wcscmp (_String1="pnacl", _String2=".") returned 1 [0163.884] wcscmp (_String1="pnacl", _String2="..") returned 1 [0163.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9340 [0163.884] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.884] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.884] wcscat (in: _Dest=0x3eb9340, _Source="pnacl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0163.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0163.885] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0163.885] wcscmp (_String1="SSLErrorAssistant", _String2=".") returned 1 [0163.886] wcscmp (_String1="SSLErrorAssistant", _String2="..") returned 1 [0163.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a629f0 [0163.886] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.886] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.886] wcscat (in: _Dest=0x7a629f0, _Source="SSLErrorAssistant" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0163.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0163.887] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwiftShader", cAlternateFileName="SWIFTS~1")) returned 1 [0163.887] wcscmp (_String1="SwiftShader", _String2=".") returned 1 [0163.887] wcscmp (_String1="SwiftShader", _String2="..") returned 1 [0163.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d451d0 [0163.887] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.888] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.888] wcscat (in: _Dest=0x3d451d0, _Source="SwiftShader" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader" [0163.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d451d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0 [0163.889] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0163.889] wcscmp (_String1="SwReporter", _String2=".") returned 1 [0163.889] wcscmp (_String1="SwReporter", _String2="..") returned 1 [0163.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d447b0 [0163.889] wcscpy (in: _Dest=0x3d447b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.889] wcscat (in: _Dest=0x3d447b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.889] wcscat (in: _Dest=0x3d447b0, _Source="SwReporter" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0163.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d447b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0163.891] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0163.891] wcscmp (_String1="WidevineCdm", _String2=".") returned 1 [0163.891] wcscmp (_String1="WidevineCdm", _String2="..") returned 1 [0163.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45410 [0163.891] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data" [0163.891] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0163.891] wcscat (in: _Dest=0x3d45410, _Source="WidevineCdm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0163.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4 [0163.892] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0163.892] FindClose (in: hFindFile=0x7ad7bf0 | out: hFindFile=0x7ad7bf0) returned 1 [0163.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0163.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47098) returned 1 [0163.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 Thread: id = 2675 os_tid = 0x145c [0156.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadd20 [0156.491] wcscpy (in: _Dest=0x3dadd20, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" [0156.491] wcscat (in: _Dest=0x3dadd20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\" [0156.491] wcscat (in: _Dest=0x3dadd20, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" [0156.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0156.491] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0156.492] wcscmp (_String1=".", _String2=".") returned 0 [0156.492] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ca6930, ftCreationTime.dwHighDateTime=0x1d2da20, ftLastAccessTime.dwLowDateTime=0x68ccca90, ftLastAccessTime.dwHighDateTime=0x1d2da20, ftLastWriteTime.dwLowDateTime=0x68ccca90, ftLastWriteTime.dwHighDateTime=0x1d2da20, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.492] wcscmp (_String1="..", _String2=".") returned 1 [0156.492] wcscmp (_String1="..", _String2="..") returned 0 [0156.492] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe34600, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0x1fe34600, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0x1fe34600, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0156.492] wcscmp (_String1="cab1.cab", _String2=".") returned 1 [0156.492] wcscmp (_String1="cab1.cab", _String2="..") returned 1 [0156.492] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0156.492] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1 [0156.492] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1 [0156.492] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6e3900, ftCreationTime.dwHighDateTime=0x1ced53e, ftLastAccessTime.dwLowDateTime=0xdd6e3900, ftLastAccessTime.dwHighDateTime=0x1ced53e, ftLastWriteTime.dwLowDateTime=0xdd6e3900, ftLastWriteTime.dwHighDateTime=0x1ced53e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0156.492] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0156.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0156.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadd20) returned 1 [0156.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf178) returned 1 Thread: id = 2676 os_tid = 0x1464 [0156.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c0b8 [0156.494] wcscpy (in: _Dest=0x35c0b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0156.494] wcscat (in: _Dest=0x35c0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0156.494] wcscat (in: _Dest=0x35c0b8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*" [0156.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcce0 [0156.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb40a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0157.477] wcscmp (_String1=".", _String2=".") returned 0 [0157.477] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd907be40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdb40a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.810] wcscmp (_String1="..", _String2=".") returned 1 [0157.810] wcscmp (_String1="..", _String2="..") returned 0 [0157.810] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3982c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x203800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara131.lex", cAlternateFileName="")) returned 1 [0157.810] wcscmp (_String1="ara131.lex", _String2=".") returned 1 [0157.810] wcscmp (_String1="ara131.lex", _String2="..") returned 1 [0157.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d401f0 [0157.810] wcscpy (in: _Dest=0x3d401f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0157.810] wcscat (in: _Dest=0x3d401f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0157.810] wcscat (in: _Dest=0x3d401f0, _Source="ara131.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" [0161.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d401f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0161.404] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb372160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara32.clx", cAlternateFileName="")) returned 1 [0161.404] wcscmp (_String1="ara32.clx", _String2=".") returned 1 [0161.404] wcscmp (_String1="ara32.clx", _String2="..") returned 1 [0161.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66cd8 [0161.404] wcscpy (in: _Dest=0x3e66cd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.404] wcscat (in: _Dest=0x3e66cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.404] wcscat (in: _Dest=0x3e66cd8, _Source="ara32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" [0161.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0161.405] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb372160, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="araphon.env", cAlternateFileName="")) returned 1 [0161.406] wcscmp (_String1="araphon.env", _String2=".") returned 1 [0161.406] wcscmp (_String1="araphon.env", _String2="..") returned 1 [0161.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d408f8 [0161.407] wcscpy (in: _Dest=0x3d408f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.407] wcscat (in: _Dest=0x3d408f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.407] wcscat (in: _Dest=0x3d408f8, _Source="araphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" [0161.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d408f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0161.408] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x128c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.fca", cAlternateFileName="")) returned 1 [0161.408] wcscmp (_String1="brt.fca", _String2=".") returned 1 [0161.408] wcscmp (_String1="brt.fca", _String2="..") returned 1 [0161.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66d98 [0161.408] wcscpy (in: _Dest=0x3e66d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.408] wcscat (in: _Dest=0x3e66d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.408] wcscat (in: _Dest=0x3e66d98, _Source="brt.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" [0161.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4 [0161.409] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.hyp", cAlternateFileName="")) returned 1 [0161.409] wcscmp (_String1="brt.hyp", _String2=".") returned 1 [0161.410] wcscmp (_String1="brt.hyp", _String2="..") returned 1 [0161.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66e58 [0161.410] wcscpy (in: _Dest=0x3e66e58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.410] wcscat (in: _Dest=0x3e66e58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.410] wcscat (in: _Dest=0x3e66e58, _Source="brt.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" [0161.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0161.411] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0c48a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2d1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt04.hsp", cAlternateFileName="")) returned 1 [0161.411] wcscmp (_String1="brt04.hsp", _String2=".") returned 1 [0161.411] wcscmp (_String1="brt04.hsp", _String2="..") returned 1 [0161.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66f18 [0161.411] wcscpy (in: _Dest=0x3e66f18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.411] wcscat (in: _Dest=0x3e66f18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.411] wcscat (in: _Dest=0x3e66f18, _Source="brt04.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" [0161.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0161.412] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt32.clx", cAlternateFileName="")) returned 1 [0161.413] wcscmp (_String1="brt32.clx", _String2=".") returned 1 [0161.413] wcscmp (_String1="brt32.clx", _String2="..") returned 1 [0161.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333b28 [0161.413] wcscpy (in: _Dest=0x333b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.413] wcscat (in: _Dest=0x333b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.413] wcscat (in: _Dest=0x333b28, _Source="brt32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" [0161.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc [0161.414] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt55.ths", cAlternateFileName="")) returned 1 [0161.414] wcscmp (_String1="brt55.ths", _String2=".") returned 1 [0161.414] wcscmp (_String1="brt55.ths", _String2="..") returned 1 [0161.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333168 [0161.414] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.414] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.414] wcscat (in: _Dest=0x333168, _Source="brt55.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" [0161.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4 [0161.415] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.fca", cAlternateFileName="")) returned 1 [0161.416] wcscmp (_String1="brz.fca", _String2=".") returned 1 [0161.416] wcscmp (_String1="brz.fca", _String2="..") returned 1 [0161.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333d68 [0161.416] wcscpy (in: _Dest=0x333d68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.416] wcscat (in: _Dest=0x333d68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.416] wcscat (in: _Dest=0x333d68, _Source="brz.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" [0161.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0161.417] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.hyp", cAlternateFileName="")) returned 1 [0161.417] wcscmp (_String1="brz.hyp", _String2=".") returned 1 [0161.417] wcscmp (_String1="brz.hyp", _String2="..") returned 1 [0161.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3338e8 [0161.417] wcscpy (in: _Dest=0x3338e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.417] wcscat (in: _Dest=0x3338e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.417] wcscat (in: _Dest=0x3338e8, _Source="brz.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" [0161.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3338e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0161.419] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz32.clx", cAlternateFileName="")) returned 1 [0161.419] wcscmp (_String1="brz32.clx", _String2=".") returned 1 [0161.419] wcscmp (_String1="brz32.clx", _String2="..") returned 1 [0161.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3339a8 [0161.419] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.419] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.419] wcscat (in: _Dest=0x3339a8, _Source="brz32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" [0161.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0161.420] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz40.hsp", cAlternateFileName="")) returned 1 [0161.420] wcscmp (_String1="brz40.hsp", _String2=".") returned 1 [0161.420] wcscmp (_String1="brz40.hsp", _String2="..") returned 1 [0161.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333a68 [0161.420] wcscpy (in: _Dest=0x333a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.421] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.421] wcscat (in: _Dest=0x333a68, _Source="brz40.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" [0161.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0161.422] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul.hyp", cAlternateFileName="")) returned 1 [0161.422] wcscmp (_String1="bul.hyp", _String2=".") returned 1 [0161.422] wcscmp (_String1="bul.hyp", _String2="..") returned 1 [0161.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0161.422] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.422] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.422] wcscat (in: _Dest=0x333828, _Source="bul.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" [0161.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0161.423] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul120.lex", cAlternateFileName="")) returned 1 [0161.423] wcscmp (_String1="bul120.lex", _String2=".") returned 1 [0161.423] wcscmp (_String1="bul120.lex", _String2="..") returned 1 [0161.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d402b8 [0161.424] wcscpy (in: _Dest=0x3d402b8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.424] wcscat (in: _Dest=0x3d402b8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.424] wcscat (in: _Dest=0x3d402b8, _Source="bul120.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" [0161.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d402b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0161.425] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul32.clx", cAlternateFileName="")) returned 1 [0161.425] wcscmp (_String1="bul32.clx", _String2=".") returned 1 [0161.425] wcscmp (_String1="bul32.clx", _String2="..") returned 1 [0161.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333528 [0161.425] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.425] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.425] wcscat (in: _Dest=0x333528, _Source="bul32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" [0161.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0161.426] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb40a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="bulphon.env", cAlternateFileName="")) returned 1 [0161.426] wcscmp (_String1="bulphon.env", _String2=".") returned 1 [0161.426] wcscmp (_String1="bulphon.env", _String2="..") returned 1 [0161.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d40128 [0161.427] wcscpy (in: _Dest=0x3d40128, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.427] wcscat (in: _Dest=0x3d40128, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.427] wcscat (in: _Dest=0x3d40128, _Source="bulphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" [0161.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0161.428] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb110b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1240, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.fca", cAlternateFileName="")) returned 1 [0161.428] wcscmp (_String1="can.fca", _String2=".") returned 1 [0161.428] wcscmp (_String1="can.fca", _String2="..") returned 1 [0161.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3330a8 [0161.428] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.428] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.428] wcscat (in: _Dest=0x3330a8, _Source="can.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" [0161.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0161.430] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.hyp", cAlternateFileName="")) returned 1 [0161.430] wcscmp (_String1="can.hyp", _String2=".") returned 1 [0161.430] wcscmp (_String1="can.hyp", _String2="..") returned 1 [0161.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3335e8 [0161.430] wcscpy (in: _Dest=0x3335e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.430] wcscat (in: _Dest=0x3335e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.430] wcscat (in: _Dest=0x3335e8, _Source="can.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" [0161.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3335e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0161.431] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0c48a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="can03.ths", cAlternateFileName="")) returned 1 [0161.431] wcscmp (_String1="can03.ths", _String2=".") returned 1 [0161.431] wcscmp (_String1="can03.ths", _String2="..") returned 1 [0161.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3336a8 [0161.431] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.431] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.431] wcscat (in: _Dest=0x3336a8, _Source="can03.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" [0161.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04 [0161.433] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb110b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="can129.hsp", cAlternateFileName="")) returned 1 [0161.433] wcscmp (_String1="can129.hsp", _String2=".") returned 1 [0161.433] wcscmp (_String1="can129.hsp", _String2="..") returned 1 [0161.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d40510 [0161.433] wcscpy (in: _Dest=0x3d40510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.433] wcscat (in: _Dest=0x3d40510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.433] wcscat (in: _Dest=0x3d40510, _Source="can129.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" [0161.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d40510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0161.434] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb110b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="can32.clx", cAlternateFileName="")) returned 1 [0161.434] wcscmp (_String1="can32.clx", _String2=".") returned 1 [0161.434] wcscmp (_String1="can32.clx", _String2="..") returned 1 [0161.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3332e8 [0161.435] wcscpy (in: _Dest=0x3332e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.435] wcscat (in: _Dest=0x3332e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.435] wcscat (in: _Dest=0x3332e8, _Source="can32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" [0161.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3332e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0161.436] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.fca", cAlternateFileName="")) returned 1 [0161.436] wcscmp (_String1="cfr.fca", _String2=".") returned 1 [0161.436] wcscmp (_String1="cfr.fca", _String2="..") returned 1 [0161.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0161.436] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.436] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.436] wcscat (in: _Dest=0x3333a8, _Source="cfr.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" [0161.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0161.437] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.hyp", cAlternateFileName="")) returned 1 [0161.437] wcscmp (_String1="cfr.hyp", _String2=".") returned 1 [0161.437] wcscmp (_String1="cfr.hyp", _String2="..") returned 1 [0161.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333468 [0161.438] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.438] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.438] wcscat (in: _Dest=0x333468, _Source="cfr.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" [0161.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0161.439] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr32.clx", cAlternateFileName="")) returned 1 [0161.439] wcscmp (_String1="cfr32.clx", _String2=".") returned 1 [0161.439] wcscmp (_String1="cfr32.clx", _String2="..") returned 1 [0161.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332f28 [0161.439] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.439] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.439] wcscat (in: _Dest=0x332f28, _Source="cfr32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" [0161.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0161.675] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a251, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr68.hsp", cAlternateFileName="")) returned 1 [0161.675] wcscmp (_String1="cfr68.hsp", _String2=".") returned 1 [0161.675] wcscmp (_String1="cfr68.hsp", _String2="..") returned 1 [0161.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0161.676] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0161.676] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0161.676] wcscat (in: _Dest=0x3e65d18, _Source="cfr68.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" [0164.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp")) returned 0x20 [0164.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp", dwFileAttributes=0x20) returned 0 [0164.780] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.780] GetLastError () returned 0x5 [0164.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp", dwFileAttributes=0x20) returned 0 [0164.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.781] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr95.ths", cAlternateFileName="")) returned 1 [0164.781] wcscmp (_String1="cfr95.ths", _String2=".") returned 1 [0164.781] wcscmp (_String1="cfr95.ths", _String2="..") returned 1 [0164.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0164.781] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.781] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.781] wcscat (in: _Dest=0x3e65d18, _Source="cfr95.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" [0164.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths")) returned 0x20 [0164.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths", dwFileAttributes=0x20) returned 0 [0164.790] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.791] GetLastError () returned 0x5 [0164.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths", dwFileAttributes=0x20) returned 0 [0164.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.791] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.fca", cAlternateFileName="")) returned 1 [0164.791] wcscmp (_String1="ctl.fca", _String2=".") returned 1 [0164.791] wcscmp (_String1="ctl.fca", _String2="..") returned 1 [0164.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65d18 [0164.791] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.792] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.792] wcscat (in: _Dest=0x3e65d18, _Source="ctl.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" [0164.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca")) returned 0x20 [0164.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca", dwFileAttributes=0x20) returned 0 [0164.827] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.828] GetLastError () returned 0x5 [0164.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca", dwFileAttributes=0x20) returned 0 [0164.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.828] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.hyp", cAlternateFileName="")) returned 1 [0164.828] wcscmp (_String1="ctl.hyp", _String2=".") returned 1 [0164.828] wcscmp (_String1="ctl.hyp", _String2="..") returned 1 [0164.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65d18 [0164.828] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.829] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.829] wcscat (in: _Dest=0x3e65d18, _Source="ctl.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" [0164.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp")) returned 0x20 [0164.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp", dwFileAttributes=0x20) returned 0 [0164.829] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.829] GetLastError () returned 0x5 [0164.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp", dwFileAttributes=0x20) returned 0 [0164.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.830] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4589f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl28.hsp", cAlternateFileName="")) returned 1 [0164.830] wcscmp (_String1="ctl28.hsp", _String2=".") returned 1 [0164.830] wcscmp (_String1="ctl28.hsp", _String2="..") returned 1 [0164.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0164.830] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.830] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.830] wcscat (in: _Dest=0x3e65d18, _Source="ctl28.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" [0164.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp")) returned 0x20 [0164.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp", dwFileAttributes=0x20) returned 0 [0164.831] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.831] GetLastError () returned 0x5 [0164.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp", dwFileAttributes=0x20) returned 0 [0164.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.831] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3e4580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl32.clx", cAlternateFileName="")) returned 1 [0164.831] wcscmp (_String1="ctl32.clx", _String2=".") returned 1 [0164.831] wcscmp (_String1="ctl32.clx", _String2="..") returned 1 [0164.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0164.831] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.831] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.832] wcscat (in: _Dest=0x3e65d18, _Source="ctl32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" [0164.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx")) returned 0x20 [0164.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx", dwFileAttributes=0x20) returned 0 [0164.842] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.842] GetLastError () returned 0x5 [0164.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx", dwFileAttributes=0x20) returned 0 [0164.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.842] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb325ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.fca", cAlternateFileName="")) returned 1 [0164.842] wcscmp (_String1="cze.fca", _String2=".") returned 1 [0164.843] wcscmp (_String1="cze.fca", _String2="..") returned 1 [0164.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65d18 [0164.843] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.843] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.843] wcscat (in: _Dest=0x3e65d18, _Source="cze.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" [0164.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca")) returned 0x20 [0164.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca", dwFileAttributes=0x20) returned 0 [0164.870] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.870] GetLastError () returned 0x5 [0164.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca", dwFileAttributes=0x20) returned 0 [0164.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.871] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb325ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.hyp", cAlternateFileName="")) returned 1 [0164.871] wcscmp (_String1="cze.hyp", _String2=".") returned 1 [0164.871] wcscmp (_String1="cze.hyp", _String2="..") returned 1 [0164.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65d18 [0164.871] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.871] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.871] wcscat (in: _Dest=0x3e65d18, _Source="cze.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" [0164.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp")) returned 0x20 [0164.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp", dwFileAttributes=0x20) returned 0 [0164.871] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.872] GetLastError () returned 0x5 [0164.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp", dwFileAttributes=0x20) returned 0 [0164.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.872] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb34c000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x127204, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze108.hsp", cAlternateFileName="")) returned 1 [0164.872] wcscmp (_String1="cze108.hsp", _String2=".") returned 1 [0164.872] wcscmp (_String1="cze108.hsp", _String2="..") returned 1 [0164.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a1e8 [0164.872] wcscpy (in: _Dest=0x3e3a1e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.872] wcscat (in: _Dest=0x3e3a1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.872] wcscat (in: _Dest=0x3e3a1e8, _Source="cze108.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" [0164.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp")) returned 0x20 [0164.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp", dwFileAttributes=0x20) returned 0 [0164.873] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.873] GetLastError () returned 0x5 [0164.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp", dwFileAttributes=0x20) returned 0 [0164.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a1e8) returned 1 [0164.873] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb34c000, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze32.clx", cAlternateFileName="")) returned 1 [0164.873] wcscmp (_String1="cze32.clx", _String2=".") returned 1 [0164.873] wcscmp (_String1="cze32.clx", _String2="..") returned 1 [0164.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0164.873] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.873] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.873] wcscat (in: _Dest=0x3e65d18, _Source="cze32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" [0164.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx")) returned 0x20 [0164.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx", dwFileAttributes=0x20) returned 0 [0164.874] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.874] GetLastError () returned 0x5 [0164.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx", dwFileAttributes=0x20) returned 0 [0164.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.874] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb15ce20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan.hyp", cAlternateFileName="")) returned 1 [0164.875] wcscmp (_String1="dan.hyp", _String2=".") returned 1 [0164.875] wcscmp (_String1="dan.hyp", _String2="..") returned 1 [0164.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65d18 [0164.875] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.875] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.875] wcscat (in: _Dest=0x3e65d18, _Source="dan.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" [0164.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp")) returned 0x20 [0164.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp", dwFileAttributes=0x20) returned 0 [0164.901] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.901] GetLastError () returned 0x5 [0164.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp", dwFileAttributes=0x20) returned 0 [0164.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.902] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan32.clx", cAlternateFileName="")) returned 1 [0164.918] wcscmp (_String1="dan32.clx", _String2=".") returned 1 [0164.918] wcscmp (_String1="dan32.clx", _String2="..") returned 1 [0164.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0164.918] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.918] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.918] wcscat (in: _Dest=0x3e65d18, _Source="dan32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" [0164.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx")) returned 0x20 [0164.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx", dwFileAttributes=0x20) returned 0 [0164.919] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.919] GetLastError () returned 0x5 [0164.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx", dwFileAttributes=0x20) returned 0 [0164.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.919] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x74c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan45.lex", cAlternateFileName="")) returned 1 [0164.919] wcscmp (_String1="dan45.lex", _String2=".") returned 1 [0164.919] wcscmp (_String1="dan45.lex", _String2="..") returned 1 [0164.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0164.919] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.919] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.919] wcscat (in: _Dest=0x3e65d18, _Source="dan45.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" [0164.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex")) returned 0x20 [0164.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex", dwFileAttributes=0x20) returned 0 [0164.920] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.920] GetLastError () returned 0x5 [0164.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex", dwFileAttributes=0x20) returned 0 [0164.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.921] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb15ce20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan94.ths", cAlternateFileName="")) returned 1 [0164.921] wcscmp (_String1="dan94.ths", _String2=".") returned 1 [0164.921] wcscmp (_String1="dan94.ths", _String2="..") returned 1 [0164.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0164.921] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.921] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.921] wcscat (in: _Dest=0x3e65d18, _Source="dan94.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" [0164.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths")) returned 0x20 [0164.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths", dwFileAttributes=0x20) returned 0 [0164.922] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.922] GetLastError () returned 0x5 [0164.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths", dwFileAttributes=0x20) returned 0 [0164.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.922] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb15ce20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="danphon.env", cAlternateFileName="")) returned 1 [0164.922] wcscmp (_String1="danphon.env", _String2=".") returned 1 [0164.922] wcscmp (_String1="danphon.env", _String2="..") returned 1 [0164.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a1e8 [0164.923] wcscpy (in: _Dest=0x3e3a1e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.923] wcscat (in: _Dest=0x3e3a1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.923] wcscat (in: _Dest=0x3e3a1e8, _Source="danphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" [0164.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env")) returned 0x20 [0164.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env", dwFileAttributes=0x20) returned 0 [0164.923] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.924] GetLastError () returned 0x5 [0164.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env", dwFileAttributes=0x20) returned 0 [0164.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a1e8) returned 1 [0164.924] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.fca", cAlternateFileName="")) returned 1 [0164.924] wcscmp (_String1="dut.fca", _String2=".") returned 1 [0164.924] wcscmp (_String1="dut.fca", _String2="..") returned 1 [0164.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65d18 [0164.924] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.924] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.924] wcscat (in: _Dest=0x3e65d18, _Source="dut.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" [0164.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca")) returned 0x20 [0164.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca", dwFileAttributes=0x20) returned 0 [0164.925] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.925] GetLastError () returned 0x5 [0164.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca", dwFileAttributes=0x20) returned 0 [0164.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.926] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.hyp", cAlternateFileName="")) returned 1 [0164.926] wcscmp (_String1="dut.hyp", _String2=".") returned 1 [0164.926] wcscmp (_String1="dut.hyp", _String2="..") returned 1 [0164.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65d18 [0164.926] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.926] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.926] wcscat (in: _Dest=0x3e65d18, _Source="dut.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" [0164.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp")) returned 0x20 [0164.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp", dwFileAttributes=0x20) returned 0 [0164.927] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.927] GetLastError () returned 0x5 [0164.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp", dwFileAttributes=0x20) returned 0 [0164.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.927] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c06a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut102.hsp", cAlternateFileName="")) returned 1 [0164.927] wcscmp (_String1="dut102.hsp", _String2=".") returned 1 [0164.927] wcscmp (_String1="dut102.hsp", _String2="..") returned 1 [0164.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a1e8 [0164.928] wcscpy (in: _Dest=0x3e3a1e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.928] wcscat (in: _Dest=0x3e3a1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.928] wcscat (in: _Dest=0x3e3a1e8, _Source="dut102.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" [0164.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp")) returned 0x20 [0164.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp", dwFileAttributes=0x20) returned 0 [0164.928] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.929] GetLastError () returned 0x5 [0164.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp", dwFileAttributes=0x20) returned 0 [0164.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a1e8) returned 1 [0164.929] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut32.clx", cAlternateFileName="")) returned 1 [0164.929] wcscmp (_String1="dut32.clx", _String2=".") returned 1 [0164.929] wcscmp (_String1="dut32.clx", _String2="..") returned 1 [0164.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0164.929] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.929] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.929] wcscat (in: _Dest=0x3e65d18, _Source="dut32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" [0164.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx")) returned 0x20 [0164.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx", dwFileAttributes=0x20) returned 0 [0164.930] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.930] GetLastError () returned 0x5 [0164.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx", dwFileAttributes=0x20) returned 0 [0164.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0164.930] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad0c640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut57.ths", cAlternateFileName="")) returned 1 [0164.930] wcscmp (_String1="dut57.ths", _String2=".") returned 1 [0164.930] wcscmp (_String1="dut57.ths", _String2="..") returned 1 [0164.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0164.931] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0164.931] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0164.931] wcscat (in: _Dest=0x3e65d18, _Source="dut57.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" [0165.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths")) returned 0x20 [0165.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths", dwFileAttributes=0x20) returned 0 [0165.233] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.233] GetLastError () returned 0x5 [0165.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths", dwFileAttributes=0x20) returned 0 [0165.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 [0165.234] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng.hyp", cAlternateFileName="")) returned 1 [0165.234] wcscmp (_String1="eng.hyp", _String2=".") returned 1 [0165.234] wcscmp (_String1="eng.hyp", _String2="..") returned 1 [0165.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65d18 [0165.234] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0165.234] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0165.234] wcscat (in: _Dest=0x3e65d18, _Source="eng.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" [0167.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0167.846] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng32.clx", cAlternateFileName="")) returned 1 [0167.846] wcscmp (_String1="eng32.clx", _String2=".") returned 1 [0167.846] wcscmp (_String1="eng32.clx", _String2="..") returned 1 [0167.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e663d8 [0167.846] wcscpy (in: _Dest=0x3e663d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.846] wcscat (in: _Dest=0x3e663d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.846] wcscat (in: _Dest=0x3e663d8, _Source="eng32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" [0167.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e663d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0167.847] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="engphon.env", cAlternateFileName="")) returned 1 [0167.847] wcscmp (_String1="engphon.env", _String2=".") returned 1 [0167.847] wcscmp (_String1="engphon.env", _String2="..") returned 1 [0167.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a1e8 [0167.847] wcscpy (in: _Dest=0x3e3a1e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.847] wcscat (in: _Dest=0x3e3a1e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.847] wcscat (in: _Dest=0x3e3a1e8, _Source="engphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" [0167.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0167.848] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2d9be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="est.hyp", cAlternateFileName="")) returned 1 [0167.848] wcscmp (_String1="est.hyp", _String2=".") returned 1 [0167.848] wcscmp (_String1="est.hyp", _String2="..") returned 1 [0167.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66258 [0167.848] wcscpy (in: _Dest=0x3e66258, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.848] wcscat (in: _Dest=0x3e66258, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.848] wcscat (in: _Dest=0x3e66258, _Source="est.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" [0167.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0167.849] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="est133.lex", cAlternateFileName="")) returned 1 [0167.849] wcscmp (_String1="est133.lex", _String2=".") returned 1 [0167.850] wcscmp (_String1="est133.lex", _String2="..") returned 1 [0167.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a378 [0167.850] wcscpy (in: _Dest=0x3e3a378, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.850] wcscat (in: _Dest=0x3e3a378, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.850] wcscat (in: _Dest=0x3e3a378, _Source="est133.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" [0167.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0167.851] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="est32.clx", cAlternateFileName="")) returned 1 [0167.851] wcscmp (_String1="est32.clx", _String2=".") returned 1 [0167.851] wcscmp (_String1="est32.clx", _String2="..") returned 1 [0167.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65c58 [0167.851] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.851] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.851] wcscat (in: _Dest=0x3e65c58, _Source="est32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" [0167.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0167.852] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1029, dwReserved0=0x0, dwReserved1=0x0, cFileName="estphon.env", cAlternateFileName="")) returned 1 [0167.852] wcscmp (_String1="estphon.env", _String2=".") returned 1 [0167.852] wcscmp (_String1="estphon.env", _String2="..") returned 1 [0167.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a440 [0167.852] wcscpy (in: _Dest=0x3e3a440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.852] wcscat (in: _Dest=0x3e3a440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.852] wcscat (in: _Dest=0x3e3a440, _Source="estphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" [0167.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0167.853] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin.hyp", cAlternateFileName="")) returned 1 [0167.853] wcscmp (_String1="fin.hyp", _String2=".") returned 1 [0167.853] wcscmp (_String1="fin.hyp", _String2="..") returned 1 [0167.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65b98 [0167.854] wcscpy (in: _Dest=0x3e65b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.854] wcscat (in: _Dest=0x3e65b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.854] wcscat (in: _Dest=0x3e65b98, _Source="fin.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" [0167.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0167.855] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin32.clx", cAlternateFileName="")) returned 1 [0167.855] wcscmp (_String1="fin32.clx", _String2=".") returned 1 [0167.855] wcscmp (_String1="fin32.clx", _String2="..") returned 1 [0167.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66c18 [0167.855] wcscpy (in: _Dest=0x3e66c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.855] wcscat (in: _Dest=0x3e66c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.855] wcscat (in: _Dest=0x3e66c18, _Source="fin32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" [0167.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0167.856] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin49.lex", cAlternateFileName="")) returned 1 [0167.856] wcscmp (_String1="fin49.lex", _String2=".") returned 1 [0167.856] wcscmp (_String1="fin49.lex", _String2="..") returned 1 [0167.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66b58 [0167.856] wcscpy (in: _Dest=0x3e66b58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.856] wcscat (in: _Dest=0x3e66b58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.856] wcscat (in: _Dest=0x3e66b58, _Source="fin49.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" [0167.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0167.857] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb09e740, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="finphon.env", cAlternateFileName="")) returned 1 [0167.857] wcscmp (_String1="finphon.env", _String2=".") returned 1 [0167.857] wcscmp (_String1="finphon.env", _String2="..") returned 1 [0167.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e38e60 [0167.858] wcscpy (in: _Dest=0x3e38e60, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.858] wcscat (in: _Dest=0x3e38e60, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.858] wcscat (in: _Dest=0x3e38e60, _Source="finphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" [0167.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0167.859] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.fca", cAlternateFileName="")) returned 1 [0167.859] wcscmp (_String1="frn.fca", _String2=".") returned 1 [0167.859] wcscmp (_String1="frn.fca", _String2="..") returned 1 [0167.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e669d8 [0167.859] wcscpy (in: _Dest=0x3e669d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.859] wcscat (in: _Dest=0x3e669d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.859] wcscat (in: _Dest=0x3e669d8, _Source="frn.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" [0167.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e669d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148 [0167.860] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.hyp", cAlternateFileName="")) returned 1 [0167.860] wcscmp (_String1="frn.hyp", _String2=".") returned 1 [0167.860] wcscmp (_String1="frn.hyp", _String2="..") returned 1 [0167.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66d98 [0167.860] wcscpy (in: _Dest=0x3e66d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.860] wcscat (in: _Dest=0x3e66d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.860] wcscat (in: _Dest=0x3e66d98, _Source="frn.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" [0167.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0167.861] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x44280, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn21.hsp", cAlternateFileName="")) returned 1 [0167.861] wcscmp (_String1="frn21.hsp", _String2=".") returned 1 [0167.861] wcscmp (_String1="frn21.hsp", _String2="..") returned 1 [0167.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66e58 [0167.861] wcscpy (in: _Dest=0x3e66e58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.862] wcscat (in: _Dest=0x3e66e58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.862] wcscat (in: _Dest=0x3e66e58, _Source="frn21.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" [0167.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0167.863] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb052480, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn32.clx", cAlternateFileName="")) returned 1 [0167.863] wcscmp (_String1="frn32.clx", _String2=".") returned 1 [0167.863] wcscmp (_String1="frn32.clx", _String2="..") returned 1 [0167.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66f18 [0167.863] wcscpy (in: _Dest=0x3e66f18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.863] wcscat (in: _Dest=0x3e66f18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.863] wcscat (in: _Dest=0x3e66f18, _Source="frn32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" [0167.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0167.864] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0785e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn93.ths", cAlternateFileName="")) returned 1 [0167.864] wcscmp (_String1="frn93.ths", _String2=".") returned 1 [0167.864] wcscmp (_String1="frn93.ths", _String2="..") returned 1 [0167.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66cd8 [0167.864] wcscpy (in: _Dest=0x3e66cd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.864] wcscat (in: _Dest=0x3e66cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.864] wcscat (in: _Dest=0x3e66cd8, _Source="frn93.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" [0167.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0167.865] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.fca", cAlternateFileName="")) returned 1 [0167.865] wcscmp (_String1="gre.fca", _String2=".") returned 1 [0167.865] wcscmp (_String1="gre.fca", _String2="..") returned 1 [0167.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e666d8 [0167.865] wcscpy (in: _Dest=0x3e666d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.865] wcscat (in: _Dest=0x3e666d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.866] wcscat (in: _Dest=0x3e666d8, _Source="gre.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" [0167.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e666d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0167.866] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.hyp", cAlternateFileName="")) returned 1 [0167.866] wcscmp (_String1="gre.hyp", _String2=".") returned 1 [0167.867] wcscmp (_String1="gre.hyp", _String2="..") returned 1 [0167.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66618 [0167.867] wcscpy (in: _Dest=0x3e66618, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.867] wcscat (in: _Dest=0x3e66618, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.867] wcscat (in: _Dest=0x3e66618, _Source="gre.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" [0167.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0167.868] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2d9be0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre110.hsp", cAlternateFileName="")) returned 1 [0167.868] wcscmp (_String1="gre110.hsp", _String2=".") returned 1 [0167.868] wcscmp (_String1="gre110.hsp", _String2="..") returned 1 [0167.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a2b0 [0167.868] wcscpy (in: _Dest=0x3e3a2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.868] wcscat (in: _Dest=0x3e3a2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.868] wcscat (in: _Dest=0x3e3a2b0, _Source="gre110.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" [0167.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0167.869] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre32.clx", cAlternateFileName="")) returned 1 [0167.869] wcscmp (_String1="gre32.clx", _String2=".") returned 1 [0167.869] wcscmp (_String1="gre32.clx", _String2="..") returned 1 [0167.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66798 [0167.869] wcscpy (in: _Dest=0x3e66798, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.869] wcscat (in: _Dest=0x3e66798, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.869] wcscat (in: _Dest=0x3e66798, _Source="gre32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" [0167.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0167.870] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.fca", cAlternateFileName="")) returned 1 [0167.870] wcscmp (_String1="grm.fca", _String2=".") returned 1 [0167.871] wcscmp (_String1="grm.fca", _String2="..") returned 1 [0167.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66a98 [0167.871] wcscpy (in: _Dest=0x3e66a98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.871] wcscat (in: _Dest=0x3e66a98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.871] wcscat (in: _Dest=0x3e66a98, _Source="grm.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" [0167.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0167.872] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.hyp", cAlternateFileName="")) returned 1 [0167.872] wcscmp (_String1="grm.hyp", _String2=".") returned 1 [0167.872] wcscmp (_String1="grm.hyp", _String2="..") returned 1 [0167.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66498 [0167.872] wcscpy (in: _Dest=0x3e66498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.872] wcscat (in: _Dest=0x3e66498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.872] wcscat (in: _Dest=0x3e66498, _Source="grm.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" [0167.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0167.873] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafe0060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x98af7, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm104.hsp", cAlternateFileName="")) returned 1 [0167.873] wcscmp (_String1="grm104.hsp", _String2=".") returned 1 [0167.873] wcscmp (_String1="grm104.hsp", _String2="..") returned 1 [0167.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e39310 [0167.873] wcscpy (in: _Dest=0x3e39310, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.873] wcscat (in: _Dest=0x3e39310, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.873] wcscat (in: _Dest=0x3e39310, _Source="grm104.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" [0167.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e39310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0167.874] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm32.clx", cAlternateFileName="")) returned 1 [0167.874] wcscmp (_String1="grm32.clx", _String2=".") returned 1 [0167.874] wcscmp (_String1="grm32.clx", _String2="..") returned 1 [0167.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66858 [0167.874] wcscpy (in: _Dest=0x3e66858, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.874] wcscat (in: _Dest=0x3e66858, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.874] wcscat (in: _Dest=0x3e66858, _Source="grm32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" [0167.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0167.876] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafe0060, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc0c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm92.ths", cAlternateFileName="")) returned 1 [0167.876] wcscmp (_String1="grm92.ths", _String2=".") returned 1 [0167.876] wcscmp (_String1="grm92.ths", _String2="..") returned 1 [0167.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65dd8 [0167.876] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.876] wcscat (in: _Dest=0x3e65dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.876] wcscat (in: _Dest=0x3e65dd8, _Source="grm92.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" [0167.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0167.877] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.fca", cAlternateFileName="")) returned 1 [0167.877] wcscmp (_String1="heb.fca", _String2=".") returned 1 [0167.877] wcscmp (_String1="heb.fca", _String2="..") returned 1 [0167.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66918 [0167.877] wcscpy (in: _Dest=0x3e66918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.877] wcscat (in: _Dest=0x3e66918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.877] wcscat (in: _Dest=0x3e66918, _Source="heb.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" [0167.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0167.878] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.hyp", cAlternateFileName="")) returned 1 [0167.878] wcscmp (_String1="heb.hyp", _String2=".") returned 1 [0167.878] wcscmp (_String1="heb.hyp", _String2="..") returned 1 [0167.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66558 [0167.879] wcscpy (in: _Dest=0x3e66558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0167.879] wcscat (in: _Dest=0x3e66558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0167.879] wcscat (in: _Dest=0x3e66558, _Source="heb.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" [0167.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0167.880] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb325ea0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb47de, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb134.hsp", cAlternateFileName="")) returned 1 [0169.164] wcscmp (_String1="heb134.hsp", _String2=".") returned 1 [0169.164] wcscmp (_String1="heb134.hsp", _String2="..") returned 1 [0169.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3aa80 [0169.165] wcscpy (in: _Dest=0x3e3aa80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0169.165] wcscat (in: _Dest=0x3e3aa80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0169.165] wcscat (in: _Dest=0x3e3aa80, _Source="heb134.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" [0173.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3aa80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0173.853] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2ffd40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb32.clx", cAlternateFileName="")) returned 1 [0173.854] wcscmp (_String1="heb32.clx", _String2=".") returned 1 [0173.854] wcscmp (_String1="heb32.clx", _String2="..") returned 1 [0173.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66318 [0173.854] wcscpy (in: _Dest=0x3e66318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.854] wcscat (in: _Dest=0x3e66318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.854] wcscat (in: _Dest=0x3e66318, _Source="heb32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" [0173.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0173.855] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv.hyp", cAlternateFileName="")) returned 1 [0173.855] wcscmp (_String1="hrv.hyp", _String2=".") returned 1 [0173.855] wcscmp (_String1="hrv.hyp", _String2="..") returned 1 [0173.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66e58 [0173.855] wcscpy (in: _Dest=0x3e66e58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.855] wcscat (in: _Dest=0x3e66e58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.855] wcscat (in: _Dest=0x3e66e58, _Source="hrv.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" [0173.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0173.861] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x97000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv132.lex", cAlternateFileName="")) returned 1 [0173.861] wcscmp (_String1="hrv132.lex", _String2=".") returned 1 [0173.861] wcscmp (_String1="hrv132.lex", _String2="..") returned 1 [0173.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a8f0 [0173.862] wcscpy (in: _Dest=0x3e3a8f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.862] wcscat (in: _Dest=0x3e3a8f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.862] wcscat (in: _Dest=0x3e3a8f0, _Source="hrv132.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" [0173.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0173.863] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv32.clx", cAlternateFileName="")) returned 1 [0173.863] wcscmp (_String1="hrv32.clx", _String2=".") returned 1 [0173.863] wcscmp (_String1="hrv32.clx", _String2="..") returned 1 [0173.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66d98 [0173.863] wcscpy (in: _Dest=0x3e66d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.863] wcscat (in: _Dest=0x3e66d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.863] wcscat (in: _Dest=0x3e66d98, _Source="hrv32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" [0173.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0173.873] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb3be420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f21, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrvphon.env", cAlternateFileName="")) returned 1 [0173.873] wcscmp (_String1="hrvphon.env", _String2=".") returned 1 [0173.873] wcscmp (_String1="hrvphon.env", _String2="..") returned 1 [0173.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a508 [0173.874] wcscpy (in: _Dest=0x3e3a508, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.874] wcscat (in: _Dest=0x3e3a508, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.874] wcscat (in: _Dest=0x3e3a508, _Source="hrvphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" [0173.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0173.880] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.fca", cAlternateFileName="")) returned 1 [0173.880] wcscmp (_String1="hun.fca", _String2=".") returned 1 [0173.880] wcscmp (_String1="hun.fca", _String2="..") returned 1 [0173.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e669d8 [0173.880] wcscpy (in: _Dest=0x3e669d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.880] wcscat (in: _Dest=0x3e669d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.880] wcscat (in: _Dest=0x3e669d8, _Source="hun.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" [0173.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e669d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0173.882] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.hyp", cAlternateFileName="")) returned 1 [0173.882] wcscmp (_String1="hun.hyp", _String2=".") returned 1 [0173.882] wcscmp (_String1="hun.hyp", _String2="..") returned 1 [0173.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66b58 [0173.882] wcscpy (in: _Dest=0x3e66b58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.882] wcscat (in: _Dest=0x3e66b58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.883] wcscat (in: _Dest=0x3e66b58, _Source="hun.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" [0173.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0173.884] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9eeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun109.hsp", cAlternateFileName="")) returned 1 [0173.884] wcscmp (_String1="hun109.hsp", _String2=".") returned 1 [0173.884] wcscmp (_String1="hun109.hsp", _String2="..") returned 1 [0173.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a5d0 [0173.884] wcscpy (in: _Dest=0x3e3a5d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.884] wcscat (in: _Dest=0x3e3a5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.884] wcscat (in: _Dest=0x3e3a5d0, _Source="hun109.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" [0173.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec [0173.887] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2b3a80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun32.clx", cAlternateFileName="")) returned 1 [0173.887] wcscmp (_String1="hun32.clx", _String2=".") returned 1 [0173.887] wcscmp (_String1="hun32.clx", _String2="..") returned 1 [0173.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66c18 [0173.887] wcscpy (in: _Dest=0x3e66c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.887] wcscat (in: _Dest=0x3e66c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.887] wcscat (in: _Dest=0x3e66c18, _Source="hun32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" [0173.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0173.888] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.fca", cAlternateFileName="")) returned 1 [0173.888] wcscmp (_String1="itl.fca", _String2=".") returned 1 [0173.888] wcscmp (_String1="itl.fca", _String2="..") returned 1 [0173.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65b98 [0173.888] wcscpy (in: _Dest=0x3e65b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.888] wcscat (in: _Dest=0x3e65b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.888] wcscat (in: _Dest=0x3e65b98, _Source="itl.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" [0173.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0173.890] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.hyp", cAlternateFileName="")) returned 1 [0173.890] wcscmp (_String1="itl.hyp", _String2=".") returned 1 [0173.890] wcscmp (_String1="itl.hyp", _String2="..") returned 1 [0173.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e663d8 [0173.890] wcscpy (in: _Dest=0x3e663d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.890] wcscat (in: _Dest=0x3e663d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.890] wcscat (in: _Dest=0x3e663d8, _Source="itl.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" [0173.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e663d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0173.891] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2efe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl26.hsp", cAlternateFileName="")) returned 1 [0173.891] wcscmp (_String1="itl26.hsp", _String2=".") returned 1 [0173.892] wcscmp (_String1="itl26.hsp", _String2="..") returned 1 [0173.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65d18 [0173.892] wcscpy (in: _Dest=0x3e65d18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.892] wcscat (in: _Dest=0x3e65d18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.892] wcscat (in: _Dest=0x3e65d18, _Source="itl26.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" [0173.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0173.893] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl32.clx", cAlternateFileName="")) returned 1 [0173.893] wcscmp (_String1="itl32.clx", _String2=".") returned 1 [0173.893] wcscmp (_String1="itl32.clx", _String2="..") returned 1 [0173.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66558 [0173.893] wcscpy (in: _Dest=0x3e66558, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.893] wcscat (in: _Dest=0x3e66558, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.894] wcscat (in: _Dest=0x3e66558, _Source="itl32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" [0173.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0173.895] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdafb9f00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl61.ths", cAlternateFileName="")) returned 1 [0173.895] wcscmp (_String1="itl61.ths", _String2=".") returned 1 [0173.895] wcscmp (_String1="itl61.ths", _String2="..") returned 1 [0173.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3333a8 [0173.895] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.895] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.895] wcscat (in: _Dest=0x3333a8, _Source="itl61.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" [0173.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0173.897] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav.hyp", cAlternateFileName="")) returned 1 [0173.897] wcscmp (_String1="lav.hyp", _String2=".") returned 1 [0173.897] wcscmp (_String1="lav.hyp", _String2="..") returned 1 [0173.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333468 [0173.897] wcscpy (in: _Dest=0x333468, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.897] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.897] wcscat (in: _Dest=0x333468, _Source="lav.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" [0173.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0173.898] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav135.lex", cAlternateFileName="")) returned 1 [0173.898] wcscmp (_String1="lav135.lex", _String2=".") returned 1 [0173.898] wcscmp (_String1="lav135.lex", _String2="..") returned 1 [0173.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a698 [0173.898] wcscpy (in: _Dest=0x3e3a698, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.899] wcscat (in: _Dest=0x3e3a698, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.899] wcscat (in: _Dest=0x3e3a698, _Source="lav135.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" [0173.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0173.900] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav32.clx", cAlternateFileName="")) returned 1 [0173.900] wcscmp (_String1="lav32.clx", _String2=".") returned 1 [0173.900] wcscmp (_String1="lav32.clx", _String2="..") returned 1 [0173.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333b28 [0173.900] wcscpy (in: _Dest=0x333b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.900] wcscat (in: _Dest=0x333b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.900] wcscat (in: _Dest=0x333b28, _Source="lav32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" [0173.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474 [0173.901] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb28d920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="lavphon.env", cAlternateFileName="")) returned 1 [0173.902] wcscmp (_String1="lavphon.env", _String2=".") returned 1 [0173.902] wcscmp (_String1="lavphon.env", _String2="..") returned 1 [0173.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a760 [0173.902] wcscpy (in: _Dest=0x3e3a760, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.902] wcscat (in: _Dest=0x3e3a760, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.902] wcscat (in: _Dest=0x3e3a760, _Source="lavphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" [0173.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0173.903] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit.hyp", cAlternateFileName="")) returned 1 [0173.903] wcscmp (_String1="lit.hyp", _String2=".") returned 1 [0173.903] wcscmp (_String1="lit.hyp", _String2="..") returned 1 [0173.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333168 [0173.903] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.903] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.903] wcscat (in: _Dest=0x333168, _Source="lit.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" [0173.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0173.904] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x73800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit136.lex", cAlternateFileName="")) returned 1 [0173.904] wcscmp (_String1="lit136.lex", _String2=".") returned 1 [0173.904] wcscmp (_String1="lit136.lex", _String2="..") returned 1 [0173.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a828 [0173.905] wcscpy (in: _Dest=0x3e3a828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.905] wcscat (in: _Dest=0x3e3a828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.905] wcscat (in: _Dest=0x3e3a828, _Source="lit136.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" [0173.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0173.906] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit32.clx", cAlternateFileName="")) returned 1 [0173.906] wcscmp (_String1="lit32.clx", _String2=".") returned 1 [0173.906] wcscmp (_String1="lit32.clx", _String2="..") returned 1 [0173.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333d68 [0173.906] wcscpy (in: _Dest=0x333d68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0173.906] wcscat (in: _Dest=0x333d68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0173.906] wcscat (in: _Dest=0x333d68, _Source="lit32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" [0173.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0174.476] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb2677c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="litphon.env", cAlternateFileName="")) returned 1 [0174.476] wcscmp (_String1="litphon.env", _String2=".") returned 1 [0174.476] wcscmp (_String1="litphon.env", _String2="..") returned 1 [0174.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3aa80 [0174.476] wcscpy (in: _Dest=0x3e3aa80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0174.476] wcscat (in: _Dest=0x3e3aa80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0174.476] wcscat (in: _Dest=0x3e3aa80, _Source="litphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" [0176.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3aa80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0176.168] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.fca", cAlternateFileName="")) returned 1 [0176.168] wcscmp (_String1="nrw.fca", _String2=".") returned 1 [0176.168] wcscmp (_String1="nrw.fca", _String2="..") returned 1 [0176.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66918 [0176.168] wcscpy (in: _Dest=0x3e66918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.168] wcscat (in: _Dest=0x3e66918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.168] wcscat (in: _Dest=0x3e66918, _Source="nrw.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" [0176.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0176.169] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.hyp", cAlternateFileName="")) returned 1 [0176.169] wcscmp (_String1="nrw.hyp", _String2=".") returned 1 [0176.169] wcscmp (_String1="nrw.hyp", _String2="..") returned 1 [0176.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66f18 [0176.170] wcscpy (in: _Dest=0x3e66f18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.170] wcscat (in: _Dest=0x3e66f18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.170] wcscat (in: _Dest=0x3e66f18, _Source="nrw.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" [0176.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0176.171] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff1, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw32.clx", cAlternateFileName="")) returned 1 [0176.171] wcscmp (_String1="nrw32.clx", _String2=".") returned 1 [0176.171] wcscmp (_String1="nrw32.clx", _String2="..") returned 1 [0176.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65ad8 [0176.171] wcscpy (in: _Dest=0x3e65ad8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.171] wcscat (in: _Dest=0x3e65ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.171] wcscat (in: _Dest=0x3e65ad8, _Source="nrw32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" [0176.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0176.173] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4669e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw38.hsp", cAlternateFileName="")) returned 1 [0176.173] wcscmp (_String1="nrw38.hsp", _String2=".") returned 1 [0176.174] wcscmp (_String1="nrw38.hsp", _String2="..") returned 1 [0176.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66618 [0176.174] wcscpy (in: _Dest=0x3e66618, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.174] wcscat (in: _Dest=0x3e66618, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.174] wcscat (in: _Dest=0x3e66618, _Source="nrw38.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" [0176.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0176.175] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf93da0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x57400, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw56.ths", cAlternateFileName="")) returned 1 [0176.176] wcscmp (_String1="nrw56.ths", _String2=".") returned 1 [0176.176] wcscmp (_String1="nrw56.ths", _String2="..") returned 1 [0176.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e666d8 [0176.176] wcscpy (in: _Dest=0x3e666d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.176] wcscat (in: _Dest=0x3e666d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.176] wcscat (in: _Dest=0x3e666d8, _Source="nrw56.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" [0176.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e666d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0176.178] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.fca", cAlternateFileName="")) returned 1 [0176.178] wcscmp (_String1="nyn.fca", _String2=".") returned 1 [0176.178] wcscmp (_String1="nyn.fca", _String2="..") returned 1 [0176.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65dd8 [0176.178] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.178] wcscat (in: _Dest=0x3e65dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.178] wcscat (in: _Dest=0x3e65dd8, _Source="nyn.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" [0176.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0176.181] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.hyp", cAlternateFileName="")) returned 1 [0176.181] wcscmp (_String1="nyn.hyp", _String2=".") returned 1 [0176.181] wcscmp (_String1="nyn.hyp", _String2="..") returned 1 [0176.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66498 [0176.181] wcscpy (in: _Dest=0x3e66498, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.181] wcscat (in: _Dest=0x3e66498, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.181] wcscat (in: _Dest=0x3e66498, _Source="nyn.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" [0176.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0176.183] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn16.clx", cAlternateFileName="")) returned 1 [0176.183] wcscmp (_String1="nyn16.clx", _String2=".") returned 1 [0176.183] wcscmp (_String1="nyn16.clx", _String2="..") returned 1 [0176.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66198 [0176.183] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.183] wcscat (in: _Dest=0x3e66198, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.183] wcscat (in: _Dest=0x3e66198, _Source="nyn16.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" [0176.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0176.185] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf6dc40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3b11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn47.hsp", cAlternateFileName="")) returned 1 [0176.185] wcscmp (_String1="nyn47.hsp", _String2=".") returned 1 [0176.185] wcscmp (_String1="nyn47.hsp", _String2="..") returned 1 [0176.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66318 [0176.185] wcscpy (in: _Dest=0x3e66318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.185] wcscat (in: _Dest=0x3e66318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.185] wcscat (in: _Dest=0x3e66318, _Source="nyn47.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" [0176.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0176.187] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.fca", cAlternateFileName="")) returned 1 [0176.187] wcscmp (_String1="pol.fca", _String2=".") returned 1 [0176.187] wcscmp (_String1="pol.fca", _String2="..") returned 1 [0176.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3339a8 [0176.187] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.187] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.187] wcscat (in: _Dest=0x3339a8, _Source="pol.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" [0176.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0176.189] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.hyp", cAlternateFileName="")) returned 1 [0176.189] wcscmp (_String1="pol.hyp", _String2=".") returned 1 [0176.189] wcscmp (_String1="pol.hyp", _String2="..") returned 1 [0176.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0176.190] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.190] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.190] wcscat (in: _Dest=0x333828, _Source="pol.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" [0176.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0176.191] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xafcef, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol103.hsp", cAlternateFileName="")) returned 1 [0176.192] wcscmp (_String1="pol103.hsp", _String2=".") returned 1 [0176.192] wcscmp (_String1="pol103.hsp", _String2="..") returned 1 [0176.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56a10 [0176.192] wcscpy (in: _Dest=0x3d56a10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0176.192] wcscat (in: _Dest=0x3d56a10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0176.192] wcscat (in: _Dest=0x3d56a10, _Source="pol103.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" [0176.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0176.194] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb241660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol32.clx", cAlternateFileName="")) returned 1 [0177.256] wcscmp (_String1="pol32.clx", _String2=".") returned 1 [0177.256] wcscmp (_String1="pol32.clx", _String2="..") returned 1 [0177.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3330a8 [0177.257] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.257] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.257] wcscat (in: _Dest=0x3330a8, _Source="pol32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" [0177.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0177.451] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.fca", cAlternateFileName="")) returned 1 [0177.451] wcscmp (_String1="prt.fca", _String2=".") returned 1 [0177.451] wcscmp (_String1="prt.fca", _String2="..") returned 1 [0177.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0177.451] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.451] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.451] wcscat (in: _Dest=0x3333a8, _Source="prt.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" [0177.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0177.452] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.hyp", cAlternateFileName="")) returned 1 [0177.452] wcscmp (_String1="prt.hyp", _String2=".") returned 1 [0177.452] wcscmp (_String1="prt.hyp", _String2="..") returned 1 [0177.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3336a8 [0177.452] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.452] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.453] wcscat (in: _Dest=0x3336a8, _Source="prt.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" [0177.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0177.453] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt32.clx", cAlternateFileName="")) returned 1 [0177.453] wcscmp (_String1="prt32.clx", _String2=".") returned 1 [0177.453] wcscmp (_String1="prt32.clx", _String2="..") returned 1 [0177.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3332e8 [0177.454] wcscpy (in: _Dest=0x3332e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.454] wcscat (in: _Dest=0x3332e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.454] wcscat (in: _Dest=0x3332e8, _Source="prt32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" [0177.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3332e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0177.455] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf47ae0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1766c, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt39.hsp", cAlternateFileName="")) returned 1 [0177.455] wcscmp (_String1="prt39.hsp", _String2=".") returned 1 [0177.455] wcscmp (_String1="prt39.hsp", _String2="..") returned 1 [0177.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332f28 [0177.455] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.455] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.455] wcscat (in: _Dest=0x332f28, _Source="prt39.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" [0177.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0177.456] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum.hyp", cAlternateFileName="")) returned 1 [0177.456] wcscmp (_String1="rum.hyp", _String2=".") returned 1 [0177.456] wcscmp (_String1="rum.hyp", _String2="..") returned 1 [0177.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333228 [0177.456] wcscpy (in: _Dest=0x333228, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.456] wcscat (in: _Dest=0x333228, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.456] wcscat (in: _Dest=0x333228, _Source="rum.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" [0177.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0177.457] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum124.lex", cAlternateFileName="")) returned 1 [0177.457] wcscmp (_String1="rum124.lex", _String2=".") returned 1 [0177.457] wcscmp (_String1="rum124.lex", _String2="..") returned 1 [0177.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57820 [0177.457] wcscpy (in: _Dest=0x3d57820, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.457] wcscat (in: _Dest=0x3d57820, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.457] wcscat (in: _Dest=0x3d57820, _Source="rum124.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" [0177.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0177.458] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum32.clx", cAlternateFileName="")) returned 1 [0177.458] wcscmp (_String1="rum32.clx", _String2=".") returned 1 [0177.458] wcscmp (_String1="rum32.clx", _String2="..") returned 1 [0177.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333768 [0177.458] wcscpy (in: _Dest=0x333768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.458] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.458] wcscat (in: _Dest=0x333768, _Source="rum32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" [0177.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0177.459] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2478, dwReserved0=0x0, dwReserved1=0x0, cFileName="rumphon.env", cAlternateFileName="")) returned 1 [0177.459] wcscmp (_String1="rumphon.env", _String2=".") returned 1 [0177.459] wcscmp (_String1="rumphon.env", _String2="..") returned 1 [0177.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d578e8 [0177.460] wcscpy (in: _Dest=0x3d578e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.460] wcscat (in: _Dest=0x3d578e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.460] wcscat (in: _Dest=0x3d578e8, _Source="rumphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" [0177.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d578e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0177.460] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.fca", cAlternateFileName="")) returned 1 [0177.460] wcscmp (_String1="rus.fca", _String2=".") returned 1 [0177.460] wcscmp (_String1="rus.fca", _String2="..") returned 1 [0177.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332ce8 [0177.461] wcscpy (in: _Dest=0x332ce8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.461] wcscat (in: _Dest=0x332ce8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.461] wcscat (in: _Dest=0x332ce8, _Source="rus.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" [0177.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0177.462] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.hyp", cAlternateFileName="")) returned 1 [0177.462] wcscmp (_String1="rus.hyp", _String2=".") returned 1 [0177.462] wcscmp (_String1="rus.hyp", _String2="..") returned 1 [0177.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3329e8 [0177.462] wcscpy (in: _Dest=0x3329e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.462] wcscat (in: _Dest=0x3329e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.462] wcscat (in: _Dest=0x3329e8, _Source="rus.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" [0177.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3329e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0177.463] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb21b500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x70ad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus101.hsp", cAlternateFileName="")) returned 1 [0177.463] wcscmp (_String1="rus101.hsp", _String2=".") returned 1 [0177.463] wcscmp (_String1="rus101.hsp", _String2="..") returned 1 [0177.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d566f0 [0177.463] wcscpy (in: _Dest=0x3d566f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.463] wcscat (in: _Dest=0x3d566f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.463] wcscat (in: _Dest=0x3d566f0, _Source="rus101.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" [0177.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d566f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0177.464] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8025, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus32.clx", cAlternateFileName="")) returned 1 [0177.464] wcscmp (_String1="rus32.clx", _String2=".") returned 1 [0177.464] wcscmp (_String1="rus32.clx", _String2="..") returned 1 [0177.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332268 [0177.464] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.464] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.464] wcscat (in: _Dest=0x332268, _Source="rus32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" [0177.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0177.465] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.fca", cAlternateFileName="")) returned 1 [0177.465] wcscmp (_String1="sgr.fca", _String2=".") returned 1 [0177.465] wcscmp (_String1="sgr.fca", _String2="..") returned 1 [0177.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332e68 [0177.466] wcscpy (in: _Dest=0x332e68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.466] wcscat (in: _Dest=0x332e68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.466] wcscat (in: _Dest=0x332e68, _Source="sgr.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" [0177.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0177.467] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.hyp", cAlternateFileName="")) returned 1 [0177.467] wcscmp (_String1="sgr.hyp", _String2=".") returned 1 [0177.467] wcscmp (_String1="sgr.hyp", _String2="..") returned 1 [0177.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332da8 [0177.467] wcscpy (in: _Dest=0x332da8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.467] wcscat (in: _Dest=0x332da8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.467] wcscat (in: _Dest=0x332da8, _Source="sgr.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" [0177.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332da8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0177.468] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0061c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb9e2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr105.hsp", cAlternateFileName="")) returned 1 [0177.468] wcscmp (_String1="sgr105.hsp", _String2=".") returned 1 [0177.468] wcscmp (_String1="sgr105.hsp", _String2="..") returned 1 [0177.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d575c8 [0177.468] wcscpy (in: _Dest=0x3d575c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.469] wcscat (in: _Dest=0x3d575c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.469] wcscat (in: _Dest=0x3d575c8, _Source="sgr105.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" [0177.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d575c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0177.469] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr32.clx", cAlternateFileName="")) returned 1 [0177.470] wcscmp (_String1="sgr32.clx", _String2=".") returned 1 [0177.470] wcscmp (_String1="sgr32.clx", _String2="..") returned 1 [0177.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3321a8 [0177.470] wcscpy (in: _Dest=0x3321a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.470] wcscat (in: _Dest=0x3321a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.470] wcscat (in: _Dest=0x3321a8, _Source="sgr32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" [0177.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3321a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0177.471] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb02c320, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr96.ths", cAlternateFileName="")) returned 1 [0177.471] wcscmp (_String1="sgr96.ths", _String2=".") returned 1 [0177.471] wcscmp (_String1="sgr96.ths", _String2="..") returned 1 [0177.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333ee8 [0177.471] wcscpy (in: _Dest=0x333ee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.471] wcscat (in: _Dest=0x333ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.471] wcscat (in: _Dest=0x333ee8, _Source="sgr96.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" [0177.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0177.472] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.fca", cAlternateFileName="")) returned 1 [0177.472] wcscmp (_String1="slo.fca", _String2=".") returned 1 [0177.472] wcscmp (_String1="slo.fca", _String2="..") returned 1 [0177.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x334068 [0177.472] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.472] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.472] wcscat (in: _Dest=0x334068, _Source="slo.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" [0177.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0177.473] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.hyp", cAlternateFileName="")) returned 1 [0177.473] wcscmp (_String1="slo.hyp", _String2=".") returned 1 [0177.473] wcscmp (_String1="slo.hyp", _String2="..") returned 1 [0177.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333fa8 [0177.473] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.473] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.473] wcscat (in: _Dest=0x333fa8, _Source="slo.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" [0177.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0177.474] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo113.hsp", cAlternateFileName="")) returned 1 [0177.474] wcscmp (_String1="slo113.hsp", _String2=".") returned 1 [0177.474] wcscmp (_String1="slo113.hsp", _String2="..") returned 1 [0177.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57500 [0177.474] wcscpy (in: _Dest=0x3d57500, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.474] wcscat (in: _Dest=0x3d57500, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.474] wcscat (in: _Dest=0x3d57500, _Source="slo113.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" [0177.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0177.475] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1f53a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo32.clx", cAlternateFileName="")) returned 1 [0177.475] wcscmp (_String1="slo32.clx", _String2=".") returned 1 [0177.475] wcscmp (_String1="slo32.clx", _String2="..") returned 1 [0177.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333e28 [0177.475] wcscpy (in: _Dest=0x333e28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.475] wcscat (in: _Dest=0x333e28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.475] wcscat (in: _Dest=0x333e28, _Source="slo32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" [0177.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0177.476] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv.hyp", cAlternateFileName="")) returned 1 [0177.476] wcscmp (_String1="slv.hyp", _String2=".") returned 1 [0177.476] wcscmp (_String1="slv.hyp", _String2="..") returned 1 [0177.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x7a64090 [0177.477] wcscpy (in: _Dest=0x7a64090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.477] wcscat (in: _Dest=0x7a64090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.477] wcscat (in: _Dest=0x7a64090, _Source="slv.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" [0177.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0177.478] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x51800, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv137.lex", cAlternateFileName="")) returned 1 [0177.478] wcscmp (_String1="slv137.lex", _String2=".") returned 1 [0177.478] wcscmp (_String1="slv137.lex", _String2="..") returned 1 [0177.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56628 [0177.478] wcscpy (in: _Dest=0x3d56628, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.478] wcscat (in: _Dest=0x3d56628, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.478] wcscat (in: _Dest=0x3d56628, _Source="slv137.lex" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" [0177.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0177.479] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv32.clx", cAlternateFileName="")) returned 1 [0177.479] wcscmp (_String1="slv32.clx", _String2=".") returned 1 [0177.479] wcscmp (_String1="slv32.clx", _String2="..") returned 1 [0177.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x7a64150 [0177.479] wcscpy (in: _Dest=0x7a64150, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.479] wcscat (in: _Dest=0x7a64150, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.479] wcscat (in: _Dest=0x7a64150, _Source="slv32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" [0177.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0177.480] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1cf240, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x109f, dwReserved0=0x0, dwReserved1=0x0, cFileName="slvphon.env", cAlternateFileName="")) returned 1 [0177.480] wcscmp (_String1="slvphon.env", _String2=".") returned 1 [0177.480] wcscmp (_String1="slvphon.env", _String2="..") returned 1 [0177.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d57438 [0177.480] wcscpy (in: _Dest=0x3d57438, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.480] wcscat (in: _Dest=0x3d57438, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.480] wcscat (in: _Dest=0x3d57438, _Source="slvphon.env" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" [0177.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0177.481] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.fca", cAlternateFileName="")) returned 1 [0177.481] wcscmp (_String1="spn.fca", _String2=".") returned 1 [0177.481] wcscmp (_String1="spn.fca", _String2="..") returned 1 [0177.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x7a64210 [0177.481] wcscpy (in: _Dest=0x7a64210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.481] wcscat (in: _Dest=0x7a64210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.481] wcscat (in: _Dest=0x7a64210, _Source="spn.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" [0177.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0177.482] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.hyp", cAlternateFileName="")) returned 1 [0177.482] wcscmp (_String1="spn.hyp", _String2=".") returned 1 [0177.482] wcscmp (_String1="spn.hyp", _String2="..") returned 1 [0177.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x7a642d0 [0177.483] wcscpy (in: _Dest=0x7a642d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.483] wcscat (in: _Dest=0x7a642d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.483] wcscat (in: _Dest=0x7a642d0, _Source="spn.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" [0177.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a642d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0177.893] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad7ea60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x33c91, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn24.hsp", cAlternateFileName="")) returned 1 [0177.893] wcscmp (_String1="spn24.hsp", _String2=".") returned 1 [0177.893] wcscmp (_String1="spn24.hsp", _String2="..") returned 1 [0177.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332f28 [0177.893] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0177.893] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0177.893] wcscat (in: _Dest=0x332f28, _Source="spn24.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" [0178.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0178.226] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdadcad20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn32.clx", cAlternateFileName="")) returned 1 [0178.226] wcscmp (_String1="spn32.clx", _String2=".") returned 1 [0178.226] wcscmp (_String1="spn32.clx", _String2="..") returned 1 [0178.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3332e8 [0178.226] wcscpy (in: _Dest=0x3332e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.226] wcscat (in: _Dest=0x3332e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.226] wcscat (in: _Dest=0x3332e8, _Source="spn32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" [0178.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3332e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0178.227] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdada4bc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x84800, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn62.ths", cAlternateFileName="")) returned 1 [0178.227] wcscmp (_String1="spn62.ths", _String2=".") returned 1 [0178.227] wcscmp (_String1="spn62.ths", _String2="..") returned 1 [0178.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3336a8 [0178.227] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.227] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.227] wcscat (in: _Dest=0x3336a8, _Source="spn62.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" [0178.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0178.229] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad58900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.fca", cAlternateFileName="")) returned 1 [0178.229] wcscmp (_String1="swd.fca", _String2=".") returned 1 [0178.229] wcscmp (_String1="swd.fca", _String2="..") returned 1 [0178.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0178.229] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.229] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.229] wcscat (in: _Dest=0x3333a8, _Source="swd.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" [0178.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0178.235] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.hyp", cAlternateFileName="")) returned 1 [0178.235] wcscmp (_String1="swd.hyp", _String2=".") returned 1 [0178.235] wcscmp (_String1="swd.hyp", _String2="..") returned 1 [0178.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3330a8 [0178.235] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.235] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.235] wcscat (in: _Dest=0x3330a8, _Source="swd.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" [0178.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0178.236] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad58900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd32.clx", cAlternateFileName="")) returned 1 [0178.236] wcscmp (_String1="swd32.clx", _String2=".") returned 1 [0178.236] wcscmp (_String1="swd32.clx", _String2="..") returned 1 [0178.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0178.236] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.236] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.236] wcscat (in: _Dest=0x333828, _Source="swd32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" [0178.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0178.237] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad58900, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x821bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd43.hsp", cAlternateFileName="")) returned 1 [0178.237] wcscmp (_String1="swd43.hsp", _String2=".") returned 1 [0178.238] wcscmp (_String1="swd43.hsp", _String2="..") returned 1 [0178.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333168 [0178.238] wcscpy (in: _Dest=0x333168, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.238] wcscat (in: _Dest=0x333168, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.238] wcscat (in: _Dest=0x333168, _Source="swd43.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" [0178.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0178.239] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad7ea60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd58.ths", cAlternateFileName="")) returned 1 [0178.239] wcscmp (_String1="swd58.ths", _String2=".") returned 1 [0178.239] wcscmp (_String1="swd58.ths", _String2="..") returned 1 [0178.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333b28 [0178.239] wcscpy (in: _Dest=0x333b28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0178.239] wcscat (in: _Dest=0x333b28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0178.239] wcscat (in: _Dest=0x333b28, _Source="swd58.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" [0178.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0178.240] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.fca", cAlternateFileName="")) returned 1 [0179.242] wcscmp (_String1="tur.fca", _String2=".") returned 1 [0179.242] wcscmp (_String1="tur.fca", _String2="..") returned 1 [0179.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333d68 [0179.242] wcscpy (in: _Dest=0x333d68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0179.242] wcscat (in: _Dest=0x333d68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0179.242] wcscat (in: _Dest=0x333d68, _Source="tur.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" [0180.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0180.744] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.hyp", cAlternateFileName="")) returned 1 [0180.744] wcscmp (_String1="tur.hyp", _String2=".") returned 1 [0180.744] wcscmp (_String1="tur.hyp", _String2="..") returned 1 [0180.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333768 [0180.744] wcscpy (in: _Dest=0x333768, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0180.744] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0180.744] wcscat (in: _Dest=0x333768, _Source="tur.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" [0180.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0180.745] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x72b36, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur111.hsp", cAlternateFileName="")) returned 1 [0180.745] wcscmp (_String1="tur111.hsp", _String2=".") returned 1 [0180.745] wcscmp (_String1="tur111.hsp", _String2="..") returned 1 [0180.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a828 [0180.745] wcscpy (in: _Dest=0x3e3a828, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0180.745] wcscat (in: _Dest=0x3e3a828, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0180.745] wcscat (in: _Dest=0x3e3a828, _Source="tur111.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" [0180.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0180.746] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb1a90e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ffc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur32.clx", cAlternateFileName="")) returned 1 [0180.746] wcscmp (_String1="tur32.clx", _String2=".") returned 1 [0180.746] wcscmp (_String1="tur32.clx", _String2="..") returned 1 [0180.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332268 [0180.746] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0180.746] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0180.746] wcscat (in: _Dest=0x332268, _Source="tur32.clx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" [0180.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0180.747] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0c48a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa.fca", cAlternateFileName="")) returned 1 [0180.747] wcscmp (_String1="usa.fca", _String2=".") returned 1 [0180.747] wcscmp (_String1="usa.fca", _String2="..") returned 1 [0180.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x334068 [0180.748] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0180.748] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0180.748] wcscat (in: _Dest=0x334068, _Source="usa.fca" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" [0180.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0180.749] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29135300, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb136cc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x29135300, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a6da, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.hsp", cAlternateFileName="")) returned 1 [0180.749] wcscmp (_String1="usa03.hsp", _String2=".") returned 1 [0180.749] wcscmp (_String1="usa03.hsp", _String2="..") returned 1 [0180.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333fa8 [0180.749] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0180.749] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0180.749] wcscat (in: _Dest=0x333fa8, _Source="usa03.hsp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" [0180.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0180.750] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.ths", cAlternateFileName="")) returned 1 [0180.750] wcscmp (_String1="usa03.ths", _String2=".") returned 1 [0180.750] wcscmp (_String1="usa03.ths", _String2="..") returned 1 [0180.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333e28 [0180.750] wcscpy (in: _Dest=0x333e28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0180.750] wcscat (in: _Dest=0x333e28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0180.750] wcscat (in: _Dest=0x333e28, _Source="usa03.ths" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" [0180.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0180.751] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 1 [0180.751] wcscmp (_String1="usa37.hyp", _String2=".") returned 1 [0180.751] wcscmp (_String1="usa37.hyp", _String2="..") returned 1 [0180.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332f28 [0180.751] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00" [0180.751] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\" [0180.751] wcscat (in: _Dest=0x332f28, _Source="usa37.hyp" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" [0180.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0180.752] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x30bcce0 | out: lpFindFileData=0x30bcce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb0eaa00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 0 [0180.752] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0180.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcce0) returned 1 [0180.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c0b8) returned 1 [0180.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66610) returned 1 Thread: id = 2677 os_tid = 0x1468 [0156.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46198 [0156.498] wcscpy (in: _Dest=0x3e46198, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.498] wcscat (in: _Dest=0x3e46198, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0156.498] wcscat (in: _Dest=0x3e46198, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*" [0156.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bca78 [0156.498] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0156.498] wcscmp (_String1=".", _String2=".") returned 0 [0156.498] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.498] wcscmp (_String1="..", _String2=".") returned 1 [0156.498] wcscmp (_String1="..", _String2="..") returned 0 [0156.498] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0156.498] wcscmp (_String1="Accessories", _String2=".") returned 1 [0156.498] wcscmp (_String1="Accessories", _String2="..") returned 1 [0156.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0156.499] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0156.499] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0156.499] wcscat (in: _Dest=0x3eb6a30, _Source="Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0163.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb6a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0163.134] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0163.134] wcscmp (_String1="Administrative Tools", _String2=".") returned 1 [0163.134] wcscmp (_String1="Administrative Tools", _String2="..") returned 1 [0163.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3052fe8 [0163.134] wcscpy (in: _Dest=0x3052fe8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0163.134] wcscat (in: _Dest=0x3052fe8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0163.134] wcscat (in: _Dest=0x3052fe8, _Source="Administrative Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0163.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3052fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0163.136] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f02380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1f02380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1f02380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0163.136] wcscmp (_String1="Adobe Reader X.lnk", _String2=".") returned 1 [0163.136] wcscmp (_String1="Adobe Reader X.lnk", _String2="..") returned 1 [0163.136] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3b1d58, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3b1d58, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0163.136] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0163.136] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0163.136] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0163.136] wcscmp (_String1="Games", _String2=".") returned 1 [0163.136] wcscmp (_String1="Games", _String2="..") returned 1 [0163.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c208 [0163.136] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0163.136] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0163.136] wcscat (in: _Dest=0x3f3c208, _Source="Games" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0163.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0163.138] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21b3df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe21b3df0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe21b3df0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0163.138] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1 [0163.138] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1 [0163.138] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0163.138] wcscmp (_String1="Java", _String2=".") returned 1 [0163.138] wcscmp (_String1="Java", _String2="..") returned 1 [0163.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cc20 [0163.138] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0163.138] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0163.138] wcscat (in: _Dest=0x3f3cc20, _Source="Java" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0163.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0163.140] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0163.140] wcscmp (_String1="Maintenance", _String2=".") returned 1 [0163.140] wcscmp (_String1="Maintenance", _String2="..") returned 1 [0163.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6018 [0163.140] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0163.140] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0163.140] wcscat (in: _Dest=0x3eb6018, _Source="Maintenance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0163.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0163.141] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7b8cc0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed7b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7dee20, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="MEDIAC~1.LNK")) returned 1 [0163.141] wcscmp (_String1="Media Center.lnk", _String2=".") returned 1 [0163.141] wcscmp (_String1="Media Center.lnk", _String2="..") returned 1 [0163.141] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0163.141] wcscmp (_String1="Microsoft Office", _String2=".") returned 1 [0163.141] wcscmp (_String1="Microsoft Office", _String2="..") returned 1 [0163.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62630 [0163.141] wcscpy (in: _Dest=0x7a62630, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0163.141] wcscat (in: _Dest=0x7a62630, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0163.142] wcscat (in: _Dest=0x7a62630, _Source="Microsoft Office" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0163.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0163.143] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77031ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0x77057c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x77057c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0163.143] wcscmp (_String1="Mozilla Firefox.lnk", _String2=".") returned 1 [0163.143] wcscmp (_String1="Mozilla Firefox.lnk", _String2="..") returned 1 [0163.143] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="SHAREP~1")) returned 1 [0163.143] wcscmp (_String1="SharePoint", _String2=".") returned 1 [0163.143] wcscmp (_String1="SharePoint", _String2="..") returned 1 [0163.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a601b0 [0163.143] wcscpy (in: _Dest=0x7a601b0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0163.143] wcscat (in: _Dest=0x7a601b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0163.143] wcscat (in: _Dest=0x7a601b0, _Source="SharePoint" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0163.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a601b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0163.145] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4ae24a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e4ae24a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e4d43aa, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0163.145] wcscmp (_String1="Sidebar.lnk", _String2=".") returned 1 [0163.145] wcscmp (_String1="Sidebar.lnk", _String2="..") returned 1 [0163.145] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0163.145] wcscmp (_String1="Startup", _String2=".") returned 1 [0163.145] wcscmp (_String1="Startup", _String2="..") returned 1 [0163.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61680 [0163.145] wcscpy (in: _Dest=0x7a61680, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0163.145] wcscat (in: _Dest=0x7a61680, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0163.145] wcscat (in: _Dest=0x7a61680, _Source="Startup" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0163.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a61680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0163.146] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0163.146] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0163.146] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0163.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3df30f8 [0163.147] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs" [0163.147] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\" [0163.147] wcscat (in: _Dest=0x3df30f8, _Source="Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0163.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3df30f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0163.148] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecb6c98, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ecb6c98, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ecb6c98, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x548, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0163.148] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2=".") returned 1 [0163.148] wcscmp (_String1="Windows Anytime Upgrade.lnk", _String2="..") returned 1 [0163.148] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea595d60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea595d60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5bbec0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0163.148] wcscmp (_String1="Windows DVD Maker.lnk", _String2=".") returned 1 [0163.148] wcscmp (_String1="Windows DVD Maker.lnk", _String2="..") returned 1 [0163.148] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b74de96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b74de96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b74de96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0163.148] wcscmp (_String1="Windows Fax and Scan.lnk", _String2=".") returned 1 [0163.148] wcscmp (_String1="Windows Fax and Scan.lnk", _String2="..") returned 1 [0163.148] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1172b3fa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x1172b3fa, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x27a4769c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0163.148] wcscmp (_String1="Windows Media Player.lnk", _String2=".") returned 1 [0163.148] wcscmp (_String1="Windows Media Player.lnk", _String2="..") returned 1 [0163.148] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 1 [0163.148] wcscmp (_String1="XPS Viewer.lnk", _String2=".") returned 1 [0163.148] wcscmp (_String1="XPS Viewer.lnk", _String2="..") returned 1 [0163.148] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eecbfdc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7eecbfdc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7eecbfdc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 0 [0163.149] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0163.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0163.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46198) returned 1 [0163.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19398) returned 1 Thread: id = 2678 os_tid = 0x146c [0156.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e46f18 [0156.504] wcscpy (in: _Dest=0x3e46f18, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive" [0156.504] wcscat (in: _Dest=0x3e46f18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\" [0156.504] wcscat (in: _Dest=0x3e46f18, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*" [0156.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0156.504] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78b0 [0156.505] wcscmp (_String1=".", _String2=".") returned 0 [0156.505] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.505] wcscmp (_String1="..", _String2=".") returned 1 [0156.505] wcscmp (_String1="..", _String2="..") returned 0 [0156.505] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fee530, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x57871c41, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.505] FindClose (in: hFindFile=0x7ad78b0 | out: hFindFile=0x7ad78b0) returned 1 [0156.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0156.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f18) returned 1 [0156.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 Thread: id = 2679 os_tid = 0x1470 [0156.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3e2b0 [0156.507] wcscpy (in: _Dest=0x3f3e2b0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue" [0156.507] wcscat (in: _Dest=0x3f3e2b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\" [0156.507] wcscat (in: _Dest=0x3f3e2b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*" [0156.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0156.508] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78b0 [0156.508] wcscmp (_String1=".", _String2=".") returned 0 [0156.508] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.508] wcscmp (_String1="..", _String2=".") returned 1 [0156.508] wcscmp (_String1="..", _String2="..") returned 0 [0156.508] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xb74b9e40, ftLastAccessTime.dwHighDateTime=0x1d2f5bd, ftLastWriteTime.dwLowDateTime=0xb74b9e40, ftLastWriteTime.dwHighDateTime=0x1d2f5bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.508] FindClose (in: hFindFile=0x7ad78b0 | out: hFindFile=0x7ad78b0) returned 1 [0156.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0156.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0156.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 Thread: id = 2680 os_tid = 0x1474 [0156.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf")) returned 0x20 [0156.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0156.510] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.511] GetLastError () returned 0x5 [0156.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0156.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 Thread: id = 2681 os_tid = 0x1478 [0156.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf")) returned 0x20 [0156.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0156.513] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.513] GetLastError () returned 0x5 [0156.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0156.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35aa08) returned 1 Thread: id = 2682 os_tid = 0x1480 [0156.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf")) returned 0x20 [0156.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0156.515] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.515] GetLastError () returned 0x5 [0156.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0156.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf460) returned 1 Thread: id = 2683 os_tid = 0x1488 [0156.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf")) returned 0x20 [0156.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0156.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.517] GetLastError () returned 0x5 [0156.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0156.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402b8) returned 1 Thread: id = 2684 os_tid = 0x148c [0156.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg")) returned 0x20 [0156.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0156.519] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.519] GetLastError () returned 0x5 [0156.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0156.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6bf8) returned 1 Thread: id = 2685 os_tid = 0x1490 [0156.520] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp")) returned 0x20 [0156.524] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0156.527] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.535] GetLastError () returned 0x5 [0156.535] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp", dwFileAttributes=0x20) returned 0 [0156.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 Thread: id = 2686 os_tid = 0x1494 [0156.544] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp")) returned 0x20 [0156.547] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0156.551] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.558] GetLastError () returned 0x5 [0156.559] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp", dwFileAttributes=0x20) returned 0 [0156.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bf58) returned 1 Thread: id = 2687 os_tid = 0x1498 [0156.570] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp")) returned 0x20 [0156.574] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0156.577] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.592] GetLastError () returned 0x5 [0156.592] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp", dwFileAttributes=0x20) returned 0 [0156.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 Thread: id = 2688 os_tid = 0x149c [0156.606] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp")) returned 0x20 [0156.611] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0156.614] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.622] GetLastError () returned 0x5 [0156.622] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp", dwFileAttributes=0x20) returned 0 [0156.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 Thread: id = 2689 os_tid = 0x14a0 [0156.635] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp")) returned 0x20 [0156.639] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0156.643] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.651] GetLastError () returned 0x5 [0156.651] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp", dwFileAttributes=0x20) returned 0 [0156.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b9d8) returned 1 Thread: id = 2690 os_tid = 0x14a4 [0156.657] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp")) returned 0x20 [0156.661] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0156.665] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.673] GetLastError () returned 0x5 [0156.673] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp", dwFileAttributes=0x20) returned 0 [0156.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 Thread: id = 2691 os_tid = 0x14a8 [0156.680] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp")) returned 0x20 [0156.685] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0156.690] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.698] GetLastError () returned 0x5 [0156.699] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp", dwFileAttributes=0x20) returned 0 [0156.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 Thread: id = 2692 os_tid = 0x14ac [0156.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg")) returned 0x20 [0165.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG", dwFileAttributes=0x20) returned 0 [0165.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.642] GetLastError () returned 0x5 [0165.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG", dwFileAttributes=0x20) returned 0 [0165.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61560) returned 1 Thread: id = 2693 os_tid = 0x14b0 [0156.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3d47b30 [0156.712] wcscpy (in: _Dest=0x3d47b30, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache" [0156.712] wcscat (in: _Dest=0x3d47b30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\" [0156.712] wcscat (in: _Dest=0x3d47b30, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*" [0156.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0156.712] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78b0 [0156.712] wcscmp (_String1=".", _String2=".") returned 0 [0156.712] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.712] wcscmp (_String1="..", _String2=".") returned 1 [0156.712] wcscmp (_String1="..", _String2="..") returned 0 [0156.712] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.712] FindClose (in: hFindFile=0x7ad78b0 | out: hFindFile=0x7ad78b0) returned 1 [0156.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0156.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47b30) returned 1 [0156.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe3b48) returned 1 Thread: id = 2694 os_tid = 0x14b4 [0156.714] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\drmstore.hds")) returned 0x2026 [0156.714] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0x20) returned 1 [0157.297] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\drmstore.hds"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1498 [0157.297] GetFileSizeEx (in: hFile=0x1498, lpFileSize=0x408fdec | out: lpFileSize=0x408fdec*=135168) returned 1 [0157.297] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x20ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.297] ReadFile (in: hFile=0x1498, lpBuffer=0x408fdc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x408fdd8, lpOverlapped=0x0 | out: lpBuffer=0x408fdc8*, lpNumberOfBytesRead=0x408fdd8*=0x4, lpOverlapped=0x0) returned 1 [0157.299] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0157.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0157.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0157.300] NtQuerySystemTime (in: CurrentTime=0x408fd60 | out: CurrentTime=0x408fd60*=132462177359052000) returned 0x0 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x7c7b5def [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x41e994b [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x273d3132 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x76ad1f05 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x64c47887 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x3db28a3a [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x3440c7cc [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x6ca055d0 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x15f6f600 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x1b25f68a [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x380c52fc [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x2ad4f52e [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x46f3b603 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x42ad0fba [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x5cb9f714 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x2304a505 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x5c0c0ae8 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x3f0db298 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x770b36cd [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x29469d10 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x91d348f [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x4f9d58bb [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x39159736 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x667e4b1a [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x79f717a9 [0157.300] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x35f176c5 [0157.301] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x5371f364 [0157.301] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x6bfa5183 [0157.301] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x258bb52c [0157.301] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x4b2e30a5 [0157.301] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x763049f [0157.301] RtlRandomEx (in: Seed=0x408fd58 | out: Seed=0x408fd58) returned 0x4ec2170 [0157.310] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.310] ReadFile (in: hFile=0x1498, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x408fd60, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x408fd60*=0x3c00, lpOverlapped=0x0) returned 1 [0157.311] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3a58 [0157.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0157.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0157.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0157.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0157.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0157.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0157.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0157.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0157.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3a58) returned 1 [0157.312] WriteFile (in: hFile=0x1498, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x408fd60, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0x408fd60*=0x3c00, lpOverlapped=0x0) returned 1 [0157.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0157.772] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.772] ReadFile (in: hFile=0x1498, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x408fd60, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x408fd60*=0x3c00, lpOverlapped=0x0) returned 1 [0157.773] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25110 [0157.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0157.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0157.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0157.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0157.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0157.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0157.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0157.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0157.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25110) returned 1 [0157.773] WriteFile (in: hFile=0x1498, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x408fd60, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0x408fd60*=0x3c00, lpOverlapped=0x0) returned 1 [0158.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0158.343] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x1d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.343] ReadFile (in: hFile=0x1498, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x408fd60, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x408fd60*=0x3c00, lpOverlapped=0x0) returned 1 [0158.344] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x1d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25ed8 [0158.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0158.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0158.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0158.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0158.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0158.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0158.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0158.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0158.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ed8) returned 1 [0158.345] WriteFile (in: hFile=0x1498, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x408fd60, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0x408fd60*=0x3c00, lpOverlapped=0x0) returned 1 [0159.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0159.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47ac8 [0159.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0159.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0159.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0159.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0159.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0159.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0159.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84e40) returned 1 [0159.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e0ac18 [0159.209] SetFilePointerEx (in: hFile=0x1498, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.820] WriteFile (in: hFile=0x1498, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x408fde0, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0x408fde0*=0x14a, lpOverlapped=0x0) returned 1 [0163.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25d28 [0163.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0163.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0163.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0163.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb8398 [0163.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0163.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0163.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0163.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0163.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25d28) returned 1 [0163.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x3dd0010 [0163.254] sprintf (in: _Dest=0x3dd0010, _Format="%c%c" | out: _Dest="a7") returned 2 [0163.254] sprintf (in: _Dest=0x3dd0012, _Format="%c%c" | out: _Dest="e6") returned 2 [0163.254] sprintf (in: _Dest=0x3dd0014, _Format="%c%c" | out: _Dest="0d") returned 2 [0163.254] sprintf (in: _Dest=0x3dd0016, _Format="%c%c" | out: _Dest="2a") returned 2 [0163.254] sprintf (in: _Dest=0x3dd0018, _Format="%c%c" | out: _Dest="37") returned 2 [0163.254] sprintf (in: _Dest=0x3dd001a, _Format="%c%c" | out: _Dest="26") returned 2 [0163.254] sprintf (in: _Dest=0x3dd001c, _Format="%c%c" | out: _Dest="1f") returned 2 [0163.254] sprintf (in: _Dest=0x3dd001e, _Format="%c%c" | out: _Dest="fb") returned 2 [0163.254] sprintf (in: _Dest=0x3dd0020, _Format="%c%c" | out: _Dest="ec") returned 2 [0163.254] sprintf (in: _Dest=0x3dd0022, _Format="%c%c" | out: _Dest="92") returned 2 [0163.254] sprintf (in: _Dest=0x3dd0024, _Format="%c%c" | out: _Dest="b6") returned 2 [0163.254] sprintf (in: _Dest=0x3dd0026, _Format="%c%c" | out: _Dest="e4") returned 2 [0163.254] sprintf (in: _Dest=0x3dd0028, _Format="%c%c" | out: _Dest="d6") returned 2 [0163.255] sprintf (in: _Dest=0x3dd002a, _Format="%c%c" | out: _Dest="a0") returned 2 [0163.255] sprintf (in: _Dest=0x3dd002c, _Format="%c%c" | out: _Dest="e0") returned 2 [0163.255] sprintf (in: _Dest=0x3dd002e, _Format="%c%c" | out: _Dest="4a") returned 2 [0163.255] sprintf (in: _Dest=0x3dd0030, _Format="%c%c" | out: _Dest="78") returned 2 [0163.255] sprintf (in: _Dest=0x3dd0032, _Format="%c%c" | out: _Dest="b9") returned 2 [0163.255] sprintf (in: _Dest=0x3dd0034, _Format="%c%c" | out: _Dest="53") returned 2 [0163.255] sprintf (in: _Dest=0x3dd0036, _Format="%c%c" | out: _Dest="f2") returned 2 [0163.255] sprintf (in: _Dest=0x3dd0038, _Format="%c%c" | out: _Dest="ee") returned 2 [0163.255] sprintf (in: _Dest=0x3dd003a, _Format="%c%c" | out: _Dest="76") returned 2 [0163.255] sprintf (in: _Dest=0x3dd003c, _Format="%c%c" | out: _Dest="4a") returned 2 [0163.255] sprintf (in: _Dest=0x3dd003e, _Format="%c%c" | out: _Dest="f0") returned 2 [0163.255] RtlInitAnsiString (in: DestinationString=0x408fd68, SourceString="a7e60d2a37261ffbec92b6e4d6a0e04a78b953f2ee764af0" | out: DestinationString="a7e60d2a37261ffbec92b6e4d6a0e04a78b953f2ee764af0") [0163.255] RtlAnsiStringToUnicodeString (in: DestinationString=0x408fd60, SourceString="a7e60d2a37261ffbec92b6e4d6a0e04a78b953f2ee764af0", AllocateDestinationString=1 | out: DestinationString="a7e60d2a37261ffbec92b6e4d6a0e04a78b953f2ee764af0") returned 0x0 [0163.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26698 [0163.256] wcscat (in: _Dest=0x3e19398, _Source="a7e60d2a3726" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\a7e60d2a3726") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\a7e60d2a3726" [0163.256] wcscat (in: _Dest=0x3e19398, _Source=".68814f" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\a7e60d2a3726.68814f") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\a7e60d2a3726.68814f" [0163.256] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\a7e60d2a3726.68814f", NtPathName=0x408fd58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\a7e60d2a3726.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0163.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df2d08 [0163.260] FlushFileBuffers (hFile=0x1498) returned 1 [0163.610] CloseHandle (hObject=0x1498) returned 1 [0163.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0163.611] wcscpy (in: _Dest=0x30151c0, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0163.611] wcscat (in: _Dest=0x30151c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt" [0163.611] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\68814f-readme.txt")) returned 0x20 [0163.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0163.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a269a8) returned 1 Thread: id = 2695 os_tid = 0x14b8 [0156.715] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.bla")) returned 0x2026 [0156.715] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0x20) returned 1 [0157.313] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.bla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13ec [0157.313] GetFileSizeEx (in: hFile=0x13ec, lpFileSize=0x9f9fa2c | out: lpFileSize=0x9f9fa2c*=9506) returned 1 [0157.313] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x251e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.313] ReadFile (in: hFile=0x13ec, lpBuffer=0x9f9fa08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f9fa18, lpOverlapped=0x0 | out: lpBuffer=0x9f9fa08*, lpNumberOfBytesRead=0x9f9fa18*=0x4, lpOverlapped=0x0) returned 1 [0157.315] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0157.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0157.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0157.316] NtQuerySystemTime (in: CurrentTime=0x9f9f9a0 | out: CurrentTime=0x9f9f9a0*=132462177359208000) returned 0x0 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x6f5f2201 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0xda7326a [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x22310f85 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0xf222a04 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x646fd7a3 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x21a136e [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x69aed3cd [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x5a2aa207 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x29b145c7 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x6c172cd3 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x3ff2dc89 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x3e19b803 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x172d9c85 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x1deb8423 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x796529ce [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x5ebdd44f [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x605af673 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x3a501730 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x28e27235 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x2b72ff77 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x278d8999 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x477245c8 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x70851784 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x66efc292 [0157.316] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x2408ede7 [0157.317] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x4d54c019 [0157.317] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x29e801f [0157.317] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x1fc27d11 [0157.317] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x3e988f77 [0157.317] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x12e0bd7e [0157.317] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x48190d83 [0157.317] RtlRandomEx (in: Seed=0x9f9f998 | out: Seed=0x9f9f998) returned 0x5bf24db4 [0157.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0157.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0157.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0157.325] ReadFile (in: hFile=0x13ec, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x2522, lpNumberOfBytesRead=0x9f9f994, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0x9f9f994*=0x2522, lpOverlapped=0x0) returned 1 [0157.326] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.326] WriteFile (in: hFile=0x13ec, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0x2522, lpNumberOfBytesWritten=0x9f9f998, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0x9f9f998*=0x2522, lpOverlapped=0x0) returned 1 [0158.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b98 [0158.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0158.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0158.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0158.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0158.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0158.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3a58) returned 1 [0158.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53e68 [0158.131] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.131] WriteFile (in: hFile=0x13ec, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x9f9fa20, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x9f9fa20*=0x102, lpOverlapped=0x0) returned 1 [0158.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25ae8 [0158.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50fa8 [0158.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0158.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0158.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0158.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0158.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0158.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0158.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0158.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ae8) returned 1 [0158.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a37560 [0158.775] sprintf (in: _Dest=0x7a37560, _Format="%c%c" | out: _Dest="f5") returned 2 [0158.775] sprintf (in: _Dest=0x7a37562, _Format="%c%c" | out: _Dest="38") returned 2 [0158.775] sprintf (in: _Dest=0x7a37564, _Format="%c%c" | out: _Dest="92") returned 2 [0158.775] sprintf (in: _Dest=0x7a37566, _Format="%c%c" | out: _Dest="d6") returned 2 [0158.775] sprintf (in: _Dest=0x7a37568, _Format="%c%c" | out: _Dest="67") returned 2 [0158.775] sprintf (in: _Dest=0x7a3756a, _Format="%c%c" | out: _Dest="13") returned 2 [0158.775] sprintf (in: _Dest=0x7a3756c, _Format="%c%c" | out: _Dest="4b") returned 2 [0158.775] sprintf (in: _Dest=0x7a3756e, _Format="%c%c" | out: _Dest="da") returned 2 [0158.775] sprintf (in: _Dest=0x7a37570, _Format="%c%c" | out: _Dest="c3") returned 2 [0158.775] sprintf (in: _Dest=0x7a37572, _Format="%c%c" | out: _Dest="cb") returned 2 [0158.775] sprintf (in: _Dest=0x7a37574, _Format="%c%c" | out: _Dest="5f") returned 2 [0158.775] sprintf (in: _Dest=0x7a37576, _Format="%c%c" | out: _Dest="c2") returned 2 [0158.775] sprintf (in: _Dest=0x7a37578, _Format="%c%c" | out: _Dest="05") returned 2 [0158.775] sprintf (in: _Dest=0x7a3757a, _Format="%c%c" | out: _Dest="32") returned 2 [0158.775] sprintf (in: _Dest=0x7a3757c, _Format="%c%c" | out: _Dest="7b") returned 2 [0158.775] sprintf (in: _Dest=0x7a3757e, _Format="%c%c" | out: _Dest="8e") returned 2 [0158.775] RtlInitAnsiString (in: DestinationString=0x9f9f9a8, SourceString="f53892d667134bdac3cb5fc205327b8e" | out: DestinationString="f53892d667134bdac3cb5fc205327b8e") [0158.775] RtlAnsiStringToUnicodeString (in: DestinationString=0x9f9f9a0, SourceString="f53892d667134bdac3cb5fc205327b8e", AllocateDestinationString=1 | out: DestinationString="f53892d667134bdac3cb5fc205327b8e") returned 0x0 [0158.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84998 [0158.776] wcscat (in: _Dest=0x3d50fa8, _Source="f53892d6" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\f53892d6") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\f53892d6" [0158.776] wcscat (in: _Dest=0x3d50fa8, _Source=".68814f" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\f53892d6.68814f") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\f53892d6.68814f" [0158.776] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\f53892d6.68814f", NtPathName=0x9f9f998, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\f53892d6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c978 [0158.778] FlushFileBuffers (hFile=0x13ec) returned 1 [0158.791] CloseHandle (hObject=0x13ec) returned 1 [0158.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50fa8 [0158.792] wcscpy (in: _Dest=0x3d50fa8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0158.792] wcscat (in: _Dest=0x3d50fa8, _Source="68814F-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt" [0158.792] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\68814f-readme.txt")) returned 0x20 [0158.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0158.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e7f8) returned 1 Thread: id = 2696 os_tid = 0x14bc [0156.715] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.sec")) returned 0x2026 [0156.715] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec", dwFileAttributes=0x20) returned 1 [0157.326] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\v3ks.sec" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\v3ks.sec"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19d4 [0157.328] GetFileSizeEx (in: hFile=0x19d4, lpFileSize=0x9a8fd2c | out: lpFileSize=0x9a8fd2c*=740) returned 1 [0157.328] SetFilePointerEx (in: hFile=0x19d4, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.328] ReadFile (in: hFile=0x19d4, lpBuffer=0x9a8fd08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a8fd18, lpOverlapped=0x0 | out: lpBuffer=0x9a8fd08*, lpNumberOfBytesRead=0x9a8fd18*=0x4, lpOverlapped=0x0) returned 1 [0157.330] SetFilePointerEx (in: hFile=0x19d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0157.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0157.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0157.331] NtQuerySystemTime (in: CurrentTime=0x9a8fca0 | out: CurrentTime=0x9a8fca0*=132462177359364000) returned 0x0 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x18e951f4 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x2890aa2c [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x43245171 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x38e44f01 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x6f731c2 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x31ebf40 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x459a55d8 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x27ffece5 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x51dc3c2a [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x71bc52b1 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x18662a19 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x3ecdfb91 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x21362549 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x6871c828 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x49366d60 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x4d1500b [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x7a522bb2 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x1754aa0c [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x49345801 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x685c1d65 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x4db1c367 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x1df515bc [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x5d4c61b4 [0157.331] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x1ec50caa [0157.332] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0xff6c781 [0157.332] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x74670e59 [0157.332] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x16a4586c [0157.332] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x2f066a56 [0157.332] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x300157a4 [0157.332] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x290d1a56 [0157.332] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x4f8ad43c [0157.332] RtlRandomEx (in: Seed=0x9a8fc98 | out: Seed=0x9a8fc98) returned 0x548c8586 [0157.342] ReadFile (in: hFile=0x19d4, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x2e4, lpNumberOfBytesRead=0x9a8fc94, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0x9a8fc94*=0x2e4, lpOverlapped=0x0) returned 1 [0157.342] SetFilePointerEx (in: hFile=0x19d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.342] WriteFile (in: hFile=0x19d4, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x2e4, lpNumberOfBytesWritten=0x9a8fc98, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0x9a8fc98*=0x2e4, lpOverlapped=0x0) returned 1 [0158.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53468 [0158.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f80 [0158.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f80) returned 1 [0158.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0158.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0158.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0158.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41a8) returned 1 [0158.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3e53f80 [0158.133] SetFilePointerEx (in: hFile=0x19d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.133] WriteFile (in: hFile=0x19d4, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x9a8fd20, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x9a8fd20*=0x102, lpOverlapped=0x0) returned 1 [0158.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25ae8 [0158.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50fa8 [0158.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0158.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d28) returned 1 [0158.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x30b4cf0 [0158.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0158.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0158.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d78) returned 1 [0158.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0158.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ae8) returned 1 [0158.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a37560 [0158.764] sprintf (in: _Dest=0x7a37560, _Format="%c%c" | out: _Dest="52") returned 2 [0158.764] sprintf (in: _Dest=0x7a37562, _Format="%c%c" | out: _Dest="2d") returned 2 [0158.764] sprintf (in: _Dest=0x7a37564, _Format="%c%c" | out: _Dest="42") returned 2 [0158.764] sprintf (in: _Dest=0x7a37566, _Format="%c%c" | out: _Dest="3e") returned 2 [0158.764] sprintf (in: _Dest=0x7a37568, _Format="%c%c" | out: _Dest="4c") returned 2 [0158.764] sprintf (in: _Dest=0x7a3756a, _Format="%c%c" | out: _Dest="44") returned 2 [0158.764] sprintf (in: _Dest=0x7a3756c, _Format="%c%c" | out: _Dest="c3") returned 2 [0158.764] sprintf (in: _Dest=0x7a3756e, _Format="%c%c" | out: _Dest="73") returned 2 [0158.764] sprintf (in: _Dest=0x7a37570, _Format="%c%c" | out: _Dest="c9") returned 2 [0158.764] sprintf (in: _Dest=0x7a37572, _Format="%c%c" | out: _Dest="57") returned 2 [0158.764] sprintf (in: _Dest=0x7a37574, _Format="%c%c" | out: _Dest="1e") returned 2 [0158.764] sprintf (in: _Dest=0x7a37576, _Format="%c%c" | out: _Dest="88") returned 2 [0158.764] sprintf (in: _Dest=0x7a37578, _Format="%c%c" | out: _Dest="58") returned 2 [0158.764] sprintf (in: _Dest=0x7a3757a, _Format="%c%c" | out: _Dest="b0") returned 2 [0158.765] sprintf (in: _Dest=0x7a3757c, _Format="%c%c" | out: _Dest="61") returned 2 [0158.765] sprintf (in: _Dest=0x7a3757e, _Format="%c%c" | out: _Dest="fa") returned 2 [0158.765] RtlInitAnsiString (in: DestinationString=0x9a8fca8, SourceString="522d423e4c44c373c9571e8858b061fa" | out: DestinationString="522d423e4c44c373c9571e8858b061fa") [0158.765] RtlAnsiStringToUnicodeString (in: DestinationString=0x9a8fca0, SourceString="522d423e4c44c373c9571e8858b061fa", AllocateDestinationString=1 | out: DestinationString="522d423e4c44c373c9571e8858b061fa") returned 0x0 [0158.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84ad8 [0158.765] wcscat (in: _Dest=0x3d50fa8, _Source="522d423e" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\522d423e") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\522d423e" [0158.765] wcscat (in: _Dest=0x3d50fa8, _Source=".68814f" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\522d423e.68814f") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\522d423e.68814f" [0158.765] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\522d423e.68814f", NtPathName=0x9a8fc98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\522d423e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0158.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c978 [0158.773] FlushFileBuffers (hFile=0x19d4) returned 1 [0158.788] CloseHandle (hObject=0x19d4) returned 1 [0158.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50fa8 [0158.790] wcscpy (in: _Dest=0x3d50fa8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\" [0158.790] wcscat (in: _Dest=0x3d50fa8, _Source="68814F-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt" [0158.790] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\68814F-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\drm\\68814f-readme.txt")) returned 0x20 [0158.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0158.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 Thread: id = 2697 os_tid = 0x14c0 [0156.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg")) returned 0x20 [0165.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG", dwFileAttributes=0x20) returned 0 [0165.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.640] GetLastError () returned 0x5 [0165.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG", dwFileAttributes=0x20) returned 0 [0165.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44960) returned 1 Thread: id = 2698 os_tid = 0x14c4 [0156.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg")) returned 0x20 [0165.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG", dwFileAttributes=0x20) returned 0 [0165.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.656] GetLastError () returned 0x5 [0165.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG", dwFileAttributes=0x20) returned 0 [0165.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 2699 os_tid = 0x14c8 [0156.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg")) returned 0x20 [0165.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG", dwFileAttributes=0x20) returned 0 [0165.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.655] GetLastError () returned 0x5 [0165.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG", dwFileAttributes=0x20) returned 0 [0165.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f00) returned 1 Thread: id = 2700 os_tid = 0x14cc [0156.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg")) returned 0x20 [0165.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG", dwFileAttributes=0x20) returned 0 [0165.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.653] GetLastError () returned 0x5 [0165.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG", dwFileAttributes=0x20) returned 0 [0165.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45800) returned 1 Thread: id = 2701 os_tid = 0x14d0 [0156.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg")) returned 0x20 [0165.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG", dwFileAttributes=0x20) returned 0 [0165.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.648] GetLastError () returned 0x5 [0165.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG", dwFileAttributes=0x20) returned 0 [0165.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 Thread: id = 2702 os_tid = 0x14d4 [0156.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg")) returned 0x20 [0165.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG", dwFileAttributes=0x20) returned 0 [0165.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.042] GetLastError () returned 0x5 [0165.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG", dwFileAttributes=0x20) returned 0 [0165.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 2703 os_tid = 0x14d8 [0156.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg")) returned 0x20 [0163.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG", dwFileAttributes=0x20) returned 0 [0163.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.678] GetLastError () returned 0x5 [0165.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG", dwFileAttributes=0x20) returned 0 [0165.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 Thread: id = 2704 os_tid = 0x14dc [0156.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg")) returned 0x20 [0163.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG", dwFileAttributes=0x20) returned 0 [0163.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.040] GetLastError () returned 0x5 [0165.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG", dwFileAttributes=0x20) returned 0 [0165.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062988) returned 1 Thread: id = 2705 os_tid = 0x14e0 [0156.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg")) returned 0x20 [0165.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG", dwFileAttributes=0x20) returned 0 [0165.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.683] GetLastError () returned 0x5 [0165.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG", dwFileAttributes=0x20) returned 0 [0165.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d440f0) returned 1 Thread: id = 2706 os_tid = 0x14e8 [0156.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg")) returned 0x20 [0165.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG", dwFileAttributes=0x20) returned 0 [0165.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.681] GetLastError () returned 0x5 [0165.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG", dwFileAttributes=0x20) returned 0 [0165.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 Thread: id = 2707 os_tid = 0x14ec [0156.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg")) returned 0x20 [0165.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG", dwFileAttributes=0x20) returned 0 [0165.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.679] GetLastError () returned 0x5 [0165.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG", dwFileAttributes=0x20) returned 0 [0165.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30633a0) returned 1 Thread: id = 2708 os_tid = 0x14f0 [0156.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg")) returned 0x20 [0165.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG", dwFileAttributes=0x20) returned 0 [0165.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.659] GetLastError () returned 0x5 [0165.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG", dwFileAttributes=0x20) returned 0 [0165.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61320) returned 1 Thread: id = 2709 os_tid = 0x14f4 [0156.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg")) returned 0x20 [0165.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG", dwFileAttributes=0x20) returned 0 [0165.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.658] GetLastError () returned 0x5 [0165.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG", dwFileAttributes=0x20) returned 0 [0165.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61290) returned 1 Thread: id = 2710 os_tid = 0x14f8 [0156.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg")) returned 0x20 [0165.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG", dwFileAttributes=0x20) returned 0 [0165.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.136] GetLastError () returned 0x5 [0165.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG", dwFileAttributes=0x20) returned 0 [0165.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61200) returned 1 Thread: id = 2711 os_tid = 0x14fc [0156.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf")) returned 0x20 [0156.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0156.732] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.732] GetLastError () returned 0x5 [0156.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0156.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff74e8) returned 1 Thread: id = 2712 os_tid = 0x1500 [0156.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf")) returned 0x20 [0156.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0156.734] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.734] GetLastError () returned 0x5 [0156.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0156.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 Thread: id = 2713 os_tid = 0x1504 [0156.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf")) returned 0x20 [0156.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0156.737] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.737] GetLastError () returned 0x5 [0156.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0156.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaec78) returned 1 Thread: id = 2714 os_tid = 0x1508 [0156.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf")) returned 0x20 [0156.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0156.739] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.739] GetLastError () returned 0x5 [0156.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0156.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d408f8) returned 1 Thread: id = 2715 os_tid = 0x150c [0156.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf")) returned 0x20 [0157.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.782] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.782] GetLastError () returned 0x5 [0157.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0157.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 2716 os_tid = 0x1510 [0156.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf")) returned 0x20 [0157.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0157.786] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.786] GetLastError () returned 0x5 [0157.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0157.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 2717 os_tid = 0x1514 [0156.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf")) returned 0x20 [0157.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0157.793] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.793] GetLastError () returned 0x5 [0157.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0157.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf010) returned 1 Thread: id = 2718 os_tid = 0x1518 [0156.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf")) returned 0x20 [0157.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.479] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.479] GetLastError () returned 0x5 [0157.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0157.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf238) returned 1 Thread: id = 2719 os_tid = 0x151c [0156.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf")) returned 0x20 [0157.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0157.781] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.781] GetLastError () returned 0x5 [0157.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0157.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf740) returned 1 Thread: id = 2720 os_tid = 0x1520 [0156.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf")) returned 0x20 [0157.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.784] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.784] GetLastError () returned 0x5 [0157.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0157.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d401f0) returned 1 Thread: id = 2721 os_tid = 0x1524 [0156.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol")) returned 0x20 [0156.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL", dwFileAttributes=0x20) returned 0 [0156.754] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.761] GetLastError () returned 0x5 [0156.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL", dwFileAttributes=0x20) returned 0 [0156.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a635d0) returned 1 Thread: id = 2722 os_tid = 0x1528 [0156.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol")) returned 0x20 [0157.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL", dwFileAttributes=0x20) returned 0 [0157.814] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.814] GetLastError () returned 0x5 [0157.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL", dwFileAttributes=0x20) returned 0 [0157.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60ea0) returned 1 Thread: id = 2723 os_tid = 0x152c [0156.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol")) returned 0x20 [0157.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL", dwFileAttributes=0x20) returned 0 [0157.815] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.815] GetLastError () returned 0x5 [0157.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL", dwFileAttributes=0x20) returned 0 [0157.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 2724 os_tid = 0x1530 [0156.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol")) returned 0x20 [0157.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL", dwFileAttributes=0x20) returned 0 [0157.817] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.817] GetLastError () returned 0x5 [0157.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL", dwFileAttributes=0x20) returned 0 [0157.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60f30) returned 1 Thread: id = 2725 os_tid = 0x1534 [0156.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol")) returned 0x20 [0157.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL", dwFileAttributes=0x20) returned 0 [0157.826] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.826] GetLastError () returned 0x5 [0157.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL", dwFileAttributes=0x20) returned 0 [0157.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5b60) returned 1 Thread: id = 2726 os_tid = 0x1538 [0156.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol")) returned 0x20 [0157.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL", dwFileAttributes=0x20) returned 0 [0157.824] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.824] GetLastError () returned 0x5 [0157.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL", dwFileAttributes=0x20) returned 0 [0157.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60e10) returned 1 Thread: id = 2727 os_tid = 0x153c [0156.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol")) returned 0x20 [0157.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL", dwFileAttributes=0x20) returned 0 [0157.823] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.823] GetLastError () returned 0x5 [0157.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL", dwFileAttributes=0x20) returned 0 [0157.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60fc0) returned 1 Thread: id = 2728 os_tid = 0x1540 [0156.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol")) returned 0x20 [0157.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL", dwFileAttributes=0x20) returned 0 [0157.821] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.822] GetLastError () returned 0x5 [0157.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL", dwFileAttributes=0x20) returned 0 [0157.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3063428) returned 1 Thread: id = 2729 os_tid = 0x1544 [0156.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol")) returned 0x20 [0157.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL", dwFileAttributes=0x20) returned 0 [0157.855] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.855] GetLastError () returned 0x5 [0157.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL", dwFileAttributes=0x20) returned 0 [0157.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a606c0) returned 1 Thread: id = 2730 os_tid = 0x1548 [0156.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol")) returned 0x20 [0157.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL", dwFileAttributes=0x20) returned 0 [0157.827] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.827] GetLastError () returned 0x5 [0157.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL", dwFileAttributes=0x20) returned 0 [0157.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60630) returned 1 Thread: id = 2731 os_tid = 0x154c [0156.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol")) returned 0x20 [0157.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL", dwFileAttributes=0x20) returned 0 [0157.828] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.828] GetLastError () returned 0x5 [0157.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL", dwFileAttributes=0x20) returned 0 [0157.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 2732 os_tid = 0x1550 [0156.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol")) returned 0x20 [0157.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL", dwFileAttributes=0x20) returned 0 [0157.836] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.836] GetLastError () returned 0x5 [0157.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL", dwFileAttributes=0x20) returned 0 [0157.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 2733 os_tid = 0x1554 [0156.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol")) returned 0x20 [0157.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL", dwFileAttributes=0x20) returned 0 [0157.820] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.820] GetLastError () returned 0x5 [0157.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL", dwFileAttributes=0x20) returned 0 [0157.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad64e0) returned 1 Thread: id = 2734 os_tid = 0x1558 [0156.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol")) returned 0x20 [0157.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL", dwFileAttributes=0x20) returned 0 [0157.837] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.837] GetLastError () returned 0x5 [0157.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL", dwFileAttributes=0x20) returned 0 [0157.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60480) returned 1 Thread: id = 2735 os_tid = 0x155c [0156.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol")) returned 0x20 [0157.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL", dwFileAttributes=0x20) returned 0 [0157.838] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.838] GetLastError () returned 0x5 [0157.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL", dwFileAttributes=0x20) returned 0 [0157.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 Thread: id = 2736 os_tid = 0x1560 [0156.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol")) returned 0x20 [0157.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL", dwFileAttributes=0x20) returned 0 [0157.839] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.840] GetLastError () returned 0x5 [0157.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL", dwFileAttributes=0x20) returned 0 [0157.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a602d0) returned 1 Thread: id = 2737 os_tid = 0x1564 [0156.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol")) returned 0x20 [0157.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL", dwFileAttributes=0x20) returned 0 [0157.812] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.813] GetLastError () returned 0x5 [0157.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL", dwFileAttributes=0x20) returned 0 [0157.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5608) returned 1 Thread: id = 2738 os_tid = 0x1568 [0156.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol")) returned 0x20 [0157.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL", dwFileAttributes=0x20) returned 0 [0157.818] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.818] GetLastError () returned 0x5 [0157.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL", dwFileAttributes=0x20) returned 0 [0157.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60510) returned 1 Thread: id = 2739 os_tid = 0x156c [0156.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol")) returned 0x20 [0157.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL", dwFileAttributes=0x20) returned 0 [0157.841] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.841] GetLastError () returned 0x5 [0157.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL", dwFileAttributes=0x20) returned 0 [0157.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6448) returned 1 Thread: id = 2740 os_tid = 0x1570 [0156.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol")) returned 0x20 [0157.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL", dwFileAttributes=0x20) returned 0 [0157.842] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.842] GetLastError () returned 0x5 [0157.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL", dwFileAttributes=0x20) returned 0 [0157.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60360) returned 1 Thread: id = 2741 os_tid = 0x1574 [0156.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol")) returned 0x20 [0157.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL", dwFileAttributes=0x20) returned 0 [0157.843] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.844] GetLastError () returned 0x5 [0157.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL", dwFileAttributes=0x20) returned 0 [0157.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60870) returned 1 Thread: id = 2742 os_tid = 0x1578 [0156.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a619e0 [0156.787] wcscpy (in: _Dest=0x7a619e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0156.787] wcscat (in: _Dest=0x7a619e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\" [0156.787] wcscat (in: _Dest=0x7a619e0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*" [0156.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0156.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf690 [0157.845] wcscmp (_String1=".", _String2=".") returned 0 [0157.845] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.845] wcscmp (_String1="..", _String2=".") returned 1 [0157.845] wcscmp (_String1="..", _String2="..") returned 0 [0157.845] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x94c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0157.845] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0157.845] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0157.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053b10 [0157.845] wcscpy (in: _Dest=0x3053b10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0157.845] wcscat (in: _Dest=0x3053b10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\" [0157.845] wcscat (in: _Dest=0x3053b10, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" [0158.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0158.649] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0158.649] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0158.649] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0158.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053138 [0158.649] wcscpy (in: _Dest=0x3053138, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services" [0158.649] wcscat (in: _Dest=0x3053138, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\" [0158.649] wcscat (in: _Dest=0x3053138, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" [0158.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0158.650] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0158.650] FindClose (in: hFindFile=0x3dcf690 | out: hFindFile=0x3dcf690) returned 1 [0158.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0158.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a619e0) returned 1 [0158.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 2743 os_tid = 0x157c [0156.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol")) returned 0x20 [0157.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL", dwFileAttributes=0x20) returned 0 [0157.846] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.846] GetLastError () returned 0x5 [0157.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL", dwFileAttributes=0x20) returned 0 [0157.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a605a0) returned 1 Thread: id = 2744 os_tid = 0x1580 [0156.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol")) returned 0x20 [0157.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL", dwFileAttributes=0x20) returned 0 [0157.852] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.852] GetLastError () returned 0x5 [0157.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL", dwFileAttributes=0x20) returned 0 [0157.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 Thread: id = 2745 os_tid = 0x1584 [0156.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol")) returned 0x20 [0157.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL", dwFileAttributes=0x20) returned 0 [0157.853] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.854] GetLastError () returned 0x5 [0157.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL", dwFileAttributes=0x20) returned 0 [0157.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60240) returned 1 Thread: id = 2746 os_tid = 0x1588 [0156.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60bd0 [0156.790] wcscpy (in: _Dest=0x7a60bd0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0156.790] wcscat (in: _Dest=0x7a60bd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0156.790] wcscat (in: _Dest=0x7a60bd0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*" [0156.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bcf48 [0156.790] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d87950, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d280 [0157.495] wcscmp (_String1=".", _String2=".") returned 0 [0157.495] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d87950, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.495] wcscmp (_String1="..", _String2=".") returned 1 [0157.495] wcscmp (_String1="..", _String2="..") returned 0 [0157.495] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0x230b0c00, ftLastWriteTime.dwHighDateTime=0x1d38ef3, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseline.versions", cAlternateFileName="BASELI~1.VER")) returned 1 [0157.495] wcscmp (_String1="baseline.versions", _String2=".") returned 1 [0157.495] wcscmp (_String1="baseline.versions", _String2="..") returned 1 [0157.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a668d0 [0157.496] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0157.496] wcscat (in: _Dest=0x7a668d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0157.496] wcscat (in: _Dest=0x7a668d0, _Source="baseline.versions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" [0164.564] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\baseline.versions")) returned 0x2020 [0164.577] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions", dwFileAttributes=0x20) returned 1 [0164.578] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\baseline.versions" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\baseline.versions"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x700 [0164.578] GetFileSizeEx (in: hFile=0x700, lpFileSize=0xc62f9c4 | out: lpFileSize=0xc62f9c4*=53) returned 1 [0164.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0164.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0164.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0164.579] NtQuerySystemTime (in: CurrentTime=0xc62f938 | out: CurrentTime=0xc62f938*=132462177431592000) returned 0x0 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x470b1d04 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x7b0da605 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x495b2f05 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x1d8cef46 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x71a937cb [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x17799c52 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x3deedf43 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x74a2b3c0 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0xcc4fb73 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x23ffbdef [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x71ea095f [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x2a49e4de [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x2cd14c15 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x44dcb8be [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x26f7fd03 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x4eb40afb [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x41b2f005 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x7e05731c [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x32aa1ad8 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x600c3336 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x3f8a1854 [0164.579] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x2aa7e0a4 [0164.580] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x25d408a6 [0164.580] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x4b1eb7e1 [0164.580] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x88734b4 [0164.580] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x1d1425b2 [0164.580] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x35e9dbff [0164.580] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x2c184264 [0164.580] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x645a278d [0164.580] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x664b54b5 [0164.580] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x56251bcb [0164.580] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x70cd83e4 [0164.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0164.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0164.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0164.591] ReadFile (in: hFile=0x700, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x35, lpNumberOfBytesRead=0xc62f92c, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0xc62f92c*=0x35, lpOverlapped=0x0) returned 1 [0164.593] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.594] WriteFile (in: hFile=0x700, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x35, lpNumberOfBytesWritten=0xc62f930, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0xc62f930*=0x35, lpOverlapped=0x0) returned 1 [0164.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0164.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0164.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0164.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0164.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0164.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0164.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56690) returned 1 [0164.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78fb0 [0164.626] SetFilePointerEx (in: hFile=0x700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.627] WriteFile (in: hFile=0x700, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xc62f9b8, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xc62f9b8*=0x114, lpOverlapped=0x0) returned 1 [0164.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85428 [0164.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0164.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0164.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0164.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a375c0 [0164.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0164.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0164.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37e0) returned 1 [0164.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0164.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85428) returned 1 [0164.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e84998 [0164.650] sprintf (in: _Dest=0x3e84998, _Format="%c%c" | out: _Dest="f4") returned 2 [0164.650] sprintf (in: _Dest=0x3e8499a, _Format="%c%c" | out: _Dest="e1") returned 2 [0164.650] sprintf (in: _Dest=0x3e8499c, _Format="%c%c" | out: _Dest="58") returned 2 [0164.650] sprintf (in: _Dest=0x3e8499e, _Format="%c%c" | out: _Dest="f5") returned 2 [0164.651] sprintf (in: _Dest=0x3e849a0, _Format="%c%c" | out: _Dest="1b") returned 2 [0164.651] sprintf (in: _Dest=0x3e849a2, _Format="%c%c" | out: _Dest="d7") returned 2 [0164.651] sprintf (in: _Dest=0x3e849a4, _Format="%c%c" | out: _Dest="f9") returned 2 [0164.651] sprintf (in: _Dest=0x3e849a6, _Format="%c%c" | out: _Dest="e2") returned 2 [0164.651] sprintf (in: _Dest=0x3e849a8, _Format="%c%c" | out: _Dest="f6") returned 2 [0164.651] sprintf (in: _Dest=0x3e849aa, _Format="%c%c" | out: _Dest="30") returned 2 [0164.651] sprintf (in: _Dest=0x3e849ac, _Format="%c%c" | out: _Dest="7e") returned 2 [0164.651] sprintf (in: _Dest=0x3e849ae, _Format="%c%c" | out: _Dest="57") returned 2 [0164.651] sprintf (in: _Dest=0x3e849b0, _Format="%c%c" | out: _Dest="f0") returned 2 [0164.651] sprintf (in: _Dest=0x3e849b2, _Format="%c%c" | out: _Dest="00") returned 2 [0164.651] sprintf (in: _Dest=0x3e849b4, _Format="%c%c" | out: _Dest="44") returned 2 [0164.651] sprintf (in: _Dest=0x3e849b6, _Format="%c%c" | out: _Dest="2f") returned 2 [0164.651] sprintf (in: _Dest=0x3e849b8, _Format="%c%c" | out: _Dest="6a") returned 2 [0164.651] sprintf (in: _Dest=0x3e849ba, _Format="%c%c" | out: _Dest="74") returned 2 [0164.651] sprintf (in: _Dest=0x3e849bc, _Format="%c%c" | out: _Dest="8d") returned 2 [0164.651] sprintf (in: _Dest=0x3e849be, _Format="%c%c" | out: _Dest="aa") returned 2 [0164.651] sprintf (in: _Dest=0x3e849c0, _Format="%c%c" | out: _Dest="40") returned 2 [0164.651] sprintf (in: _Dest=0x3e849c2, _Format="%c%c" | out: _Dest="6a") returned 2 [0164.651] sprintf (in: _Dest=0x3e849c4, _Format="%c%c" | out: _Dest="eb") returned 2 [0164.651] sprintf (in: _Dest=0x3e849c6, _Format="%c%c" | out: _Dest="7d") returned 2 [0164.651] sprintf (in: _Dest=0x3e849c8, _Format="%c%c" | out: _Dest="99") returned 2 [0164.652] sprintf (in: _Dest=0x3e849ca, _Format="%c%c" | out: _Dest="b6") returned 2 [0164.652] sprintf (in: _Dest=0x3e849cc, _Format="%c%c" | out: _Dest="1d") returned 2 [0164.652] sprintf (in: _Dest=0x3e849ce, _Format="%c%c" | out: _Dest="bf") returned 2 [0164.652] sprintf (in: _Dest=0x3e849d0, _Format="%c%c" | out: _Dest="76") returned 2 [0164.652] sprintf (in: _Dest=0x3e849d2, _Format="%c%c" | out: _Dest="09") returned 2 [0164.652] sprintf (in: _Dest=0x3e849d4, _Format="%c%c" | out: _Dest="bd") returned 2 [0164.652] sprintf (in: _Dest=0x3e849d6, _Format="%c%c" | out: _Dest="6c") returned 2 [0164.652] sprintf (in: _Dest=0x3e849d8, _Format="%c%c" | out: _Dest="d0") returned 2 [0164.652] sprintf (in: _Dest=0x3e849da, _Format="%c%c" | out: _Dest="5f") returned 2 [0164.652] RtlInitAnsiString (in: DestinationString=0xc62f940, SourceString="f4e158f51bd7f9e2f6307e57f000442f6a748daa406aeb7d99b61dbf7609bd6cd05f" | out: DestinationString="f4e158f51bd7f9e2f6307e57f000442f6a748daa406aeb7d99b61dbf7609bd6cd05f") [0164.652] RtlAnsiStringToUnicodeString (in: DestinationString=0xc62f938, SourceString="f4e158f51bd7f9e2f6307e57f000442f6a748daa406aeb7d99b61dbf7609bd6cd05f", AllocateDestinationString=1 | out: DestinationString="f4e158f51bd7f9e2f6307e57f000442f6a748daa406aeb7d99b61dbf7609bd6cd05f") returned 0x0 [0164.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d408 [0164.652] wcscat (in: _Dest=0x2ff6740, _Source="f4e158f51bd7f9e2f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\f4e158f51bd7f9e2f") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\f4e158f51bd7f9e2f" [0164.652] wcscat (in: _Dest=0x2ff6740, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\f4e158f51bd7f9e2f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\f4e158f51bd7f9e2f.68814f" [0164.652] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\f4e158f51bd7f9e2f.68814f", NtPathName=0xc62f930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\f4e158f51bd7f9e2f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d84e10 [0164.661] FlushFileBuffers (hFile=0x700) returned 1 [0164.703] CloseHandle (hObject=0x700) returned 1 [0164.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66820 [0164.704] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0164.704] wcscat (in: _Dest=0x7a66820, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt" [0164.704] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\68814f-readme.txt")) returned 0xffffffff [0164.704] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d60 [0164.721] WriteFile (in: hFile=0x1d60, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc62f94c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc62f94c*=0x8b9, lpOverlapped=0x0) returned 1 [0164.723] CloseHandle (hObject=0x1d60) returned 1 [0164.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 [0164.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 [0164.724] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xc1ed2680, ftLastWriteTime.dwHighDateTime=0x1ce952b, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist.dynamic", cAlternateFileName="BLACKL~1.DYN")) returned 1 [0164.724] wcscmp (_String1="blacklist.dynamic", _String2=".") returned 1 [0164.724] wcscmp (_String1="blacklist.dynamic", _String2="..") returned 1 [0164.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a668d0 [0164.724] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0164.724] wcscat (in: _Dest=0x7a668d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0164.724] wcscat (in: _Dest=0x7a668d0, _Source="blacklist.dynamic" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" [0164.724] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklist.dynamic")) returned 0x2020 [0164.725] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic", dwFileAttributes=0x20) returned 1 [0164.725] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklist.dynamic" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklist.dynamic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d60 [0164.725] GetFileSizeEx (in: hFile=0x1d60, lpFileSize=0xc62f9c4 | out: lpFileSize=0xc62f9c4*=2837) returned 1 [0164.725] SetFilePointerEx (in: hFile=0x1d60, liDistanceToMove=0xb11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.726] ReadFile (in: hFile=0x1d60, lpBuffer=0xc62f9a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc62f9b0, lpOverlapped=0x0 | out: lpBuffer=0xc62f9a0*, lpNumberOfBytesRead=0xc62f9b0*=0x4, lpOverlapped=0x0) returned 1 [0164.738] SetFilePointerEx (in: hFile=0x1d60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0164.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0164.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0164.739] NtQuerySystemTime (in: CurrentTime=0xc62f938 | out: CurrentTime=0xc62f938*=132462177433152000) returned 0x0 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x5796b15f [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x77573a12 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x6cde822 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x3a75c4c4 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x1f49fddc [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x57678709 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x3111803d [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x2a31609d [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x50dafd95 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x1ff3fe06 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x7d8b5705 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x611b6fd8 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0xf6f702b [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x13d94bbe [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0xa6583f2 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x7c7853f7 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x19a54ebb [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x51ba3413 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x3260769a [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x612b7fb5 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x6a2f8637 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x70460342 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x7d2f7045 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x4d5d5d4f [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x323436 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0xfac66d3 [0164.739] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x6607c8cc [0164.740] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x39342c10 [0164.740] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x1f06ec3d [0164.740] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x28e438fc [0164.740] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x7da1570f [0164.740] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x2759d522 [0164.741] ReadFile (in: hFile=0x1d60, lpBuffer=0x7be3778, nNumberOfBytesToRead=0xb15, lpNumberOfBytesRead=0xc62f92c, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0xc62f92c*=0xb15, lpOverlapped=0x0) returned 1 [0164.741] SetFilePointerEx (in: hFile=0x1d60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.741] WriteFile (in: hFile=0x1d60, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0xb15, lpNumberOfBytesWritten=0xc62f930, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0xc62f930*=0xb15, lpOverlapped=0x0) returned 1 [0164.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0164.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0164.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a00) returned 1 [0164.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0164.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0164.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0164.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48ba0) returned 1 [0164.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78fb0 [0164.756] SetFilePointerEx (in: hFile=0x1d60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.756] WriteFile (in: hFile=0x1d60, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xc62f9b8, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xc62f9b8*=0x114, lpOverlapped=0x0) returned 1 [0164.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48ba0 [0164.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0164.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0164.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0164.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a375c0 [0164.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0164.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0164.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0164.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0164.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48ba0) returned 1 [0164.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e84998 [0164.769] sprintf (in: _Dest=0x3e84998, _Format="%c%c" | out: _Dest="11") returned 2 [0164.769] sprintf (in: _Dest=0x3e8499a, _Format="%c%c" | out: _Dest="5b") returned 2 [0164.769] sprintf (in: _Dest=0x3e8499c, _Format="%c%c" | out: _Dest="ac") returned 2 [0164.769] sprintf (in: _Dest=0x3e8499e, _Format="%c%c" | out: _Dest="8a") returned 2 [0164.769] sprintf (in: _Dest=0x3e849a0, _Format="%c%c" | out: _Dest="96") returned 2 [0164.769] sprintf (in: _Dest=0x3e849a2, _Format="%c%c" | out: _Dest="29") returned 2 [0164.769] sprintf (in: _Dest=0x3e849a4, _Format="%c%c" | out: _Dest="d8") returned 2 [0164.769] sprintf (in: _Dest=0x3e849a6, _Format="%c%c" | out: _Dest="0c") returned 2 [0164.769] sprintf (in: _Dest=0x3e849a8, _Format="%c%c" | out: _Dest="7c") returned 2 [0164.769] sprintf (in: _Dest=0x3e849aa, _Format="%c%c" | out: _Dest="dd") returned 2 [0164.769] sprintf (in: _Dest=0x3e849ac, _Format="%c%c" | out: _Dest="19") returned 2 [0164.769] sprintf (in: _Dest=0x3e849ae, _Format="%c%c" | out: _Dest="1f") returned 2 [0164.769] sprintf (in: _Dest=0x3e849b0, _Format="%c%c" | out: _Dest="b7") returned 2 [0164.770] sprintf (in: _Dest=0x3e849b2, _Format="%c%c" | out: _Dest="ad") returned 2 [0164.770] sprintf (in: _Dest=0x3e849b4, _Format="%c%c" | out: _Dest="3d") returned 2 [0164.770] sprintf (in: _Dest=0x3e849b6, _Format="%c%c" | out: _Dest="ff") returned 2 [0164.770] sprintf (in: _Dest=0x3e849b8, _Format="%c%c" | out: _Dest="a6") returned 2 [0164.770] sprintf (in: _Dest=0x3e849ba, _Format="%c%c" | out: _Dest="59") returned 2 [0164.770] sprintf (in: _Dest=0x3e849bc, _Format="%c%c" | out: _Dest="cb") returned 2 [0164.770] sprintf (in: _Dest=0x3e849be, _Format="%c%c" | out: _Dest="cd") returned 2 [0164.770] sprintf (in: _Dest=0x3e849c0, _Format="%c%c" | out: _Dest="f2") returned 2 [0164.770] sprintf (in: _Dest=0x3e849c2, _Format="%c%c" | out: _Dest="4f") returned 2 [0164.770] sprintf (in: _Dest=0x3e849c4, _Format="%c%c" | out: _Dest="35") returned 2 [0164.770] sprintf (in: _Dest=0x3e849c6, _Format="%c%c" | out: _Dest="3a") returned 2 [0164.770] sprintf (in: _Dest=0x3e849c8, _Format="%c%c" | out: _Dest="28") returned 2 [0164.770] sprintf (in: _Dest=0x3e849ca, _Format="%c%c" | out: _Dest="30") returned 2 [0164.770] sprintf (in: _Dest=0x3e849cc, _Format="%c%c" | out: _Dest="03") returned 2 [0164.770] sprintf (in: _Dest=0x3e849ce, _Format="%c%c" | out: _Dest="dd") returned 2 [0164.770] sprintf (in: _Dest=0x3e849d0, _Format="%c%c" | out: _Dest="4f") returned 2 [0164.770] sprintf (in: _Dest=0x3e849d2, _Format="%c%c" | out: _Dest="4d") returned 2 [0164.770] sprintf (in: _Dest=0x3e849d4, _Format="%c%c" | out: _Dest="eb") returned 2 [0164.770] sprintf (in: _Dest=0x3e849d6, _Format="%c%c" | out: _Dest="b8") returned 2 [0164.770] sprintf (in: _Dest=0x3e849d8, _Format="%c%c" | out: _Dest="5c") returned 2 [0164.770] sprintf (in: _Dest=0x3e849da, _Format="%c%c" | out: _Dest="62") returned 2 [0164.771] RtlInitAnsiString (in: DestinationString=0xc62f940, SourceString="115bac8a9629d80c7cdd191fb7ad3dffa659cbcdf24f353a283003dd4f4debb85c62" | out: DestinationString="115bac8a9629d80c7cdd191fb7ad3dffa659cbcdf24f353a283003dd4f4debb85c62") [0164.771] RtlAnsiStringToUnicodeString (in: DestinationString=0xc62f938, SourceString="115bac8a9629d80c7cdd191fb7ad3dffa659cbcdf24f353a283003dd4f4debb85c62", AllocateDestinationString=1 | out: DestinationString="115bac8a9629d80c7cdd191fb7ad3dffa659cbcdf24f353a283003dd4f4debb85c62") returned 0x0 [0164.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d408 [0164.771] wcscat (in: _Dest=0x3eaf7f8, _Source="115bac8a9629d80c7" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\115bac8a9629d80c7") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\115bac8a9629d80c7" [0164.771] wcscat (in: _Dest=0x3eaf7f8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\115bac8a9629d80c7.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\115bac8a9629d80c7.68814f" [0164.771] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\115bac8a9629d80c7.68814f", NtPathName=0xc62f930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\115bac8a9629d80c7.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d84e10 [0164.774] FlushFileBuffers (hFile=0x1d60) returned 1 [0164.796] CloseHandle (hObject=0x1d60) returned 1 [0164.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66980 [0164.837] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0164.837] wcscat (in: _Dest=0x7a66980, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt" [0164.837] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\68814f-readme.txt")) returned 0x2020 [0164.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 [0164.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 [0164.838] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0x191caa00, ftLastWriteTime.dwHighDateTime=0x1ce1f40, nFileSizeHigh=0x0, nFileSizeLow=0x12, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0164.839] wcscmp (_String1="blacklisted.certs", _String2=".") returned 1 [0164.839] wcscmp (_String1="blacklisted.certs", _String2="..") returned 1 [0164.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a668d0 [0164.839] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0164.839] wcscat (in: _Dest=0x7a668d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0164.839] wcscat (in: _Dest=0x7a668d0, _Source="blacklisted.certs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" [0164.840] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklisted.certs")) returned 0x2020 [0164.861] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs", dwFileAttributes=0x20) returned 1 [0164.861] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\blacklisted.certs" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\blacklisted.certs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xea8 [0164.862] GetFileSizeEx (in: hFile=0xea8, lpFileSize=0xc62f9c4 | out: lpFileSize=0xc62f9c4*=18) returned 1 [0164.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0164.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2908 [0164.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0164.862] NtQuerySystemTime (in: CurrentTime=0xc62f938 | out: CurrentTime=0xc62f938*=132462177434400000) returned 0x0 [0164.862] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0xdf27896 [0164.862] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x2723db8d [0164.862] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x2cf11f32 [0164.862] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x5f113545 [0164.862] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x186cc955 [0164.862] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x50ca40dc [0164.862] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x2677caf6 [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x6ac6ceec [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x287b025e [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x34c2f47b [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x4c0c3ae6 [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x1fe7d635 [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x530fc3ee [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x21b40a [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x58e9c8f9 [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x7259b858 [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x5a71cac4 [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x4db7442d [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x3ffa1b38 [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x1654cb2a [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x4e332215 [0164.863] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x679a3f [0164.864] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x6445d0ab [0164.864] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x42161f63 [0164.864] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x187f61ee [0164.864] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x44c3017e [0164.864] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x4500fb87 [0164.864] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x32807462 [0164.864] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x4bbb7bc2 [0164.864] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x40d82353 [0164.864] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x590a5358 [0164.864] RtlRandomEx (in: Seed=0xc62f930 | out: Seed=0xc62f930) returned 0x3becb643 [0164.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0164.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0164.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0164.866] ReadFile (in: hFile=0xea8, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x12, lpNumberOfBytesRead=0xc62f92c, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0xc62f92c*=0x12, lpOverlapped=0x0) returned 1 [0164.868] SetFilePointerEx (in: hFile=0xea8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.868] WriteFile (in: hFile=0xea8, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x12, lpNumberOfBytesWritten=0xc62f930, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0xc62f930*=0x12, lpOverlapped=0x0) returned 1 [0164.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0164.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0164.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0164.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0164.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0164.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0164.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdbd8) returned 1 [0164.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e78fb0 [0164.888] SetFilePointerEx (in: hFile=0xea8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0164.888] WriteFile (in: hFile=0xea8, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0xc62f9b8, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xc62f9b8*=0x114, lpOverlapped=0x0) returned 1 [0164.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdbd8 [0164.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0164.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0164.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0164.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a375c0 [0164.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0164.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0164.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0164.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0164.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdbd8) returned 1 [0164.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e84998 [0164.891] sprintf (in: _Dest=0x3e84998, _Format="%c%c" | out: _Dest="e8") returned 2 [0164.891] sprintf (in: _Dest=0x3e8499a, _Format="%c%c" | out: _Dest="06") returned 2 [0164.891] sprintf (in: _Dest=0x3e8499c, _Format="%c%c" | out: _Dest="dd") returned 2 [0164.891] sprintf (in: _Dest=0x3e8499e, _Format="%c%c" | out: _Dest="7f") returned 2 [0164.891] sprintf (in: _Dest=0x3e849a0, _Format="%c%c" | out: _Dest="5d") returned 2 [0164.891] sprintf (in: _Dest=0x3e849a2, _Format="%c%c" | out: _Dest="87") returned 2 [0164.891] sprintf (in: _Dest=0x3e849a4, _Format="%c%c" | out: _Dest="39") returned 2 [0164.891] sprintf (in: _Dest=0x3e849a6, _Format="%c%c" | out: _Dest="bf") returned 2 [0164.892] sprintf (in: _Dest=0x3e849a8, _Format="%c%c" | out: _Dest="0a") returned 2 [0164.892] sprintf (in: _Dest=0x3e849aa, _Format="%c%c" | out: _Dest="33") returned 2 [0164.892] sprintf (in: _Dest=0x3e849ac, _Format="%c%c" | out: _Dest="da") returned 2 [0164.892] sprintf (in: _Dest=0x3e849ae, _Format="%c%c" | out: _Dest="57") returned 2 [0164.892] sprintf (in: _Dest=0x3e849b0, _Format="%c%c" | out: _Dest="ce") returned 2 [0164.892] sprintf (in: _Dest=0x3e849b2, _Format="%c%c" | out: _Dest="ba") returned 2 [0164.892] sprintf (in: _Dest=0x3e849b4, _Format="%c%c" | out: _Dest="96") returned 2 [0164.892] sprintf (in: _Dest=0x3e849b6, _Format="%c%c" | out: _Dest="a0") returned 2 [0164.892] sprintf (in: _Dest=0x3e849b8, _Format="%c%c" | out: _Dest="87") returned 2 [0164.892] sprintf (in: _Dest=0x3e849ba, _Format="%c%c" | out: _Dest="dc") returned 2 [0164.892] sprintf (in: _Dest=0x3e849bc, _Format="%c%c" | out: _Dest="54") returned 2 [0164.892] sprintf (in: _Dest=0x3e849be, _Format="%c%c" | out: _Dest="71") returned 2 [0164.892] sprintf (in: _Dest=0x3e849c0, _Format="%c%c" | out: _Dest="4a") returned 2 [0164.892] sprintf (in: _Dest=0x3e849c2, _Format="%c%c" | out: _Dest="33") returned 2 [0164.892] sprintf (in: _Dest=0x3e849c4, _Format="%c%c" | out: _Dest="01") returned 2 [0164.892] sprintf (in: _Dest=0x3e849c6, _Format="%c%c" | out: _Dest="ad") returned 2 [0164.892] sprintf (in: _Dest=0x3e849c8, _Format="%c%c" | out: _Dest="24") returned 2 [0164.892] sprintf (in: _Dest=0x3e849ca, _Format="%c%c" | out: _Dest="1f") returned 2 [0164.892] sprintf (in: _Dest=0x3e849cc, _Format="%c%c" | out: _Dest="a2") returned 2 [0164.892] sprintf (in: _Dest=0x3e849ce, _Format="%c%c" | out: _Dest="95") returned 2 [0164.892] sprintf (in: _Dest=0x3e849d0, _Format="%c%c" | out: _Dest="ce") returned 2 [0164.892] sprintf (in: _Dest=0x3e849d2, _Format="%c%c" | out: _Dest="0b") returned 2 [0164.893] sprintf (in: _Dest=0x3e849d4, _Format="%c%c" | out: _Dest="9e") returned 2 [0164.893] sprintf (in: _Dest=0x3e849d6, _Format="%c%c" | out: _Dest="a2") returned 2 [0164.893] sprintf (in: _Dest=0x3e849d8, _Format="%c%c" | out: _Dest="5e") returned 2 [0164.893] sprintf (in: _Dest=0x3e849da, _Format="%c%c" | out: _Dest="96") returned 2 [0164.893] RtlInitAnsiString (in: DestinationString=0xc62f940, SourceString="e806dd7f5d8739bf0a33da57ceba96a087dc54714a3301ad241fa295ce0b9ea25e96" | out: DestinationString="e806dd7f5d8739bf0a33da57ceba96a087dc54714a3301ad241fa295ce0b9ea25e96") [0164.893] RtlAnsiStringToUnicodeString (in: DestinationString=0xc62f938, SourceString="e806dd7f5d8739bf0a33da57ceba96a087dc54714a3301ad241fa295ce0b9ea25e96", AllocateDestinationString=1 | out: DestinationString="e806dd7f5d8739bf0a33da57ceba96a087dc54714a3301ad241fa295ce0b9ea25e96") returned 0x0 [0164.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64aa8 [0164.893] wcscat (in: _Dest=0x3eaf7f8, _Source="e806dd7f5d8739bf0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\e806dd7f5d8739bf0") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\e806dd7f5d8739bf0" [0164.893] wcscat (in: _Dest=0x3eaf7f8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\e806dd7f5d8739bf0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\e806dd7f5d8739bf0.68814f" [0164.893] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\e806dd7f5d8739bf0.68814f", NtPathName=0xc62f930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\e806dd7f5d8739bf0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0164.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85700 [0164.900] FlushFileBuffers (hFile=0xea8) returned 1 [0164.937] CloseHandle (hObject=0xea8) returned 1 [0164.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a666c0 [0164.942] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0164.942] wcscat (in: _Dest=0x7a666c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt" [0164.942] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\68814f-readme.txt")) returned 0x2020 [0164.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 [0164.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 [0165.219] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.timestamp", cAlternateFileName="UPDATE~1.TIM")) returned 1 [0165.219] wcscmp (_String1="update.timestamp", _String2=".") returned 1 [0165.219] wcscmp (_String1="update.timestamp", _String2="..") returned 1 [0165.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f050 [0165.220] wcscpy (in: _Dest=0x7a5f050, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" [0165.220] wcscat (in: _Dest=0x7a5f050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0165.220] wcscat (in: _Dest=0x7a5f050, _Source="update.timestamp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" [0171.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c [0171.685] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x30bcf48 | out: lpFindFileData=0x30bcf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7148980, ftCreationTime.dwHighDateTime=0x1d3ab29, ftLastAccessTime.dwLowDateTime=0xe7148980, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xe7148980, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.timestamp", cAlternateFileName="UPDATE~1.TIM")) returned 0 [0171.686] FindClose (in: hFindFile=0x7a2d280 | out: hFindFile=0x7a2d280) returned 1 [0171.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf48) returned 1 [0171.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60bd0) returned 1 [0171.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c758) returned 1 Thread: id = 2747 os_tid = 0x158c [0156.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46f18 [0156.821] wcscpy (in: _Dest=0x3e46f18, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" [0156.821] wcscat (in: _Dest=0x3e46f18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\" [0156.821] wcscat (in: _Dest=0x3e46f18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*" [0156.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0156.821] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7c70 [0157.272] wcscmp (_String1=".", _String2=".") returned 0 [0157.272] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x80d3b690, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x80d3b690, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.272] wcscmp (_String1="..", _String2=".") returned 1 [0157.272] wcscmp (_String1="..", _String2="..") returned 0 [0157.272] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xd45a7840, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0157.272] wcscmp (_String1="si", _String2=".") returned 1 [0157.272] wcscmp (_String1="si", _String2="..") returned 1 [0157.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9450 [0157.272] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" [0157.272] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\" [0157.272] wcscat (in: _Dest=0x3eb9450, _Source="si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" [0158.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0158.688] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xd45a7840, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0 [0158.688] FindClose (in: hFindFile=0x7ad7c70 | out: hFindFile=0x7ad7c70) returned 1 [0158.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0158.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f18) returned 1 [0158.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46d98) returned 1 Thread: id = 2748 os_tid = 0x1590 [0156.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aden")) returned 0x20 [0156.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden", dwFileAttributes=0x20) returned 0 [0156.824] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aden"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.824] GetLastError () returned 0x5 [0156.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aden", dwFileAttributes=0x20) returned 0 [0156.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe68a8) returned 1 Thread: id = 2749 os_tid = 0x1594 [0156.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\almaty")) returned 0x20 [0156.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty", dwFileAttributes=0x20) returned 0 [0156.829] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\almaty"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.829] GetLastError () returned 0x5 [0156.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Almaty", dwFileAttributes=0x20) returned 0 [0156.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 Thread: id = 2750 os_tid = 0x1598 [0156.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\amman")) returned 0x20 [0156.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman", dwFileAttributes=0x20) returned 0 [0156.845] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\amman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0156.845] GetLastError () returned 0x5 [0156.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Amman", dwFileAttributes=0x20) returned 0 [0156.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1da28) returned 1 Thread: id = 2751 os_tid = 0x159c [0156.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\anadyr")) returned 0x20 [0161.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr", dwFileAttributes=0x20) returned 0 [0161.769] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\anadyr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.769] GetLastError () returned 0x5 [0161.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Anadyr", dwFileAttributes=0x20) returned 0 [0161.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ea68) returned 1 Thread: id = 2752 os_tid = 0x15a0 [0156.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtau")) returned 0x20 [0161.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau", dwFileAttributes=0x20) returned 0 [0161.767] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.767] GetLastError () returned 0x5 [0161.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtau", dwFileAttributes=0x20) returned 0 [0161.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d958) returned 1 Thread: id = 2753 os_tid = 0x15a4 [0156.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtobe")) returned 0x20 [0161.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe", dwFileAttributes=0x20) returned 0 [0161.682] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\aqtobe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.682] GetLastError () returned 0x5 [0161.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe", dwFileAttributes=0x20) returned 0 [0161.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d8f0) returned 1 Thread: id = 2754 os_tid = 0x15a8 [0156.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ashgabat")) returned 0x20 [0161.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat", dwFileAttributes=0x20) returned 0 [0161.795] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ashgabat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.795] GetLastError () returned 0x5 [0161.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat", dwFileAttributes=0x20) returned 0 [0161.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f150) returned 1 Thread: id = 2755 os_tid = 0x15b0 [0156.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baghdad")) returned 0x20 [0161.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad", dwFileAttributes=0x20) returned 0 [0161.793] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baghdad"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.794] GetLastError () returned 0x5 [0161.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baghdad", dwFileAttributes=0x20) returned 0 [0161.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47720) returned 1 Thread: id = 2756 os_tid = 0x15b4 [0156.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bahrain")) returned 0x20 [0161.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain", dwFileAttributes=0x20) returned 0 [0161.792] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bahrain"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.792] GetLastError () returned 0x5 [0161.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bahrain", dwFileAttributes=0x20) returned 0 [0161.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46a88) returned 1 Thread: id = 2757 os_tid = 0x15b8 [0156.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baku")) returned 0x20 [0161.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku", dwFileAttributes=0x20) returned 0 [0161.790] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\baku"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.791] GetLastError () returned 0x5 [0161.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Baku", dwFileAttributes=0x20) returned 0 [0161.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6908) returned 1 Thread: id = 2758 os_tid = 0x15bc [0156.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bangkok")) returned 0x20 [0161.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok", dwFileAttributes=0x20) returned 0 [0161.789] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bangkok"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.789] GetLastError () returned 0x5 [0161.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bangkok", dwFileAttributes=0x20) returned 0 [0161.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d472a8) returned 1 Thread: id = 2759 os_tid = 0x15c0 [0156.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\beirut")) returned 0x20 [0161.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut", dwFileAttributes=0x20) returned 0 [0161.787] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\beirut"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.788] GetLastError () returned 0x5 [0161.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Beirut", dwFileAttributes=0x20) returned 0 [0161.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47c68) returned 1 Thread: id = 2760 os_tid = 0x15c4 [0156.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bishkek")) returned 0x20 [0159.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek", dwFileAttributes=0x20) returned 0 [0159.630] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\bishkek"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.766] GetLastError () returned 0x5 [0161.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Bishkek", dwFileAttributes=0x20) returned 0 [0161.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47da0) returned 1 Thread: id = 2761 os_tid = 0x15c8 [0156.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\brunei")) returned 0x20 [0161.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei", dwFileAttributes=0x20) returned 0 [0161.453] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\brunei"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.764] GetLastError () returned 0x5 [0161.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Brunei", dwFileAttributes=0x20) returned 0 [0161.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47e08) returned 1 Thread: id = 2762 os_tid = 0x15cc [0156.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\choibalsan")) returned 0x20 [0158.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan", dwFileAttributes=0x20) returned 0 [0158.873] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\choibalsan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.453] GetLastError () returned 0x5 [0161.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan", dwFileAttributes=0x20) returned 0 [0161.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a260e8) returned 1 Thread: id = 2763 os_tid = 0x15d0 [0156.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\chongqing")) returned 0x20 [0158.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing", dwFileAttributes=0x20) returned 0 [0158.144] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\chongqing"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.213] GetLastError () returned 0x5 [0159.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Chongqing", dwFileAttributes=0x20) returned 0 [0159.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a267e8) returned 1 Thread: id = 2764 os_tid = 0x15d4 [0156.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\colombo")) returned 0x20 [0161.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo", dwFileAttributes=0x20) returned 0 [0161.770] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\colombo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.770] GetLastError () returned 0x5 [0161.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Colombo", dwFileAttributes=0x20) returned 0 [0161.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47e70) returned 1 Thread: id = 2765 os_tid = 0x15d8 [0156.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\damascus")) returned 0x20 [0161.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus", dwFileAttributes=0x20) returned 0 [0161.772] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\damascus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.772] GetLastError () returned 0x5 [0161.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Damascus", dwFileAttributes=0x20) returned 0 [0161.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47ed8) returned 1 Thread: id = 2766 os_tid = 0x15dc [0156.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dhaka")) returned 0x20 [0161.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka", dwFileAttributes=0x20) returned 0 [0161.773] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dhaka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.773] GetLastError () returned 0x5 [0161.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dhaka", dwFileAttributes=0x20) returned 0 [0161.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47f40) returned 1 Thread: id = 2767 os_tid = 0x15e0 [0156.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dili")) returned 0x20 [0161.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili", dwFileAttributes=0x20) returned 0 [0161.775] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dili"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.775] GetLastError () returned 0x5 [0161.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dili", dwFileAttributes=0x20) returned 0 [0161.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe14a8) returned 1 Thread: id = 2768 os_tid = 0x15e4 [0156.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dubai")) returned 0x20 [0161.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai", dwFileAttributes=0x20) returned 0 [0161.777] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dubai"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.777] GetLastError () returned 0x5 [0161.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dubai", dwFileAttributes=0x20) returned 0 [0161.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47858) returned 1 Thread: id = 2769 os_tid = 0x15e8 [0156.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dushanbe")) returned 0x20 [0161.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe", dwFileAttributes=0x20) returned 0 [0161.778] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\dushanbe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.778] GetLastError () returned 0x5 [0161.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe", dwFileAttributes=0x20) returned 0 [0161.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47310) returned 1 Thread: id = 2770 os_tid = 0x15ec [0156.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\gaza")) returned 0x20 [0161.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza", dwFileAttributes=0x20) returned 0 [0161.780] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\gaza"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.780] GetLastError () returned 0x5 [0161.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Gaza", dwFileAttributes=0x20) returned 0 [0161.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f08) returned 1 Thread: id = 2771 os_tid = 0x15f0 [0156.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\harbin")) returned 0x20 [0161.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin", dwFileAttributes=0x20) returned 0 [0161.782] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\harbin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.782] GetLastError () returned 0x5 [0161.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Harbin", dwFileAttributes=0x20) returned 0 [0161.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d471d8) returned 1 Thread: id = 2772 os_tid = 0x15f4 [0156.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hebron")) returned 0x20 [0161.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron", dwFileAttributes=0x20) returned 0 [0161.783] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hebron"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.783] GetLastError () returned 0x5 [0161.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hebron", dwFileAttributes=0x20) returned 0 [0161.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47240) returned 1 Thread: id = 2773 os_tid = 0x15f8 [0156.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hong_kong")) returned 0x20 [0161.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong", dwFileAttributes=0x20) returned 0 [0161.798] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hong_kong"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.799] GetLastError () returned 0x5 [0161.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong", dwFileAttributes=0x20) returned 0 [0161.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 Thread: id = 2774 os_tid = 0x15fc [0156.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hovd")) returned 0x20 [0161.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd", dwFileAttributes=0x20) returned 0 [0161.784] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\hovd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.785] GetLastError () returned 0x5 [0161.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Hovd", dwFileAttributes=0x20) returned 0 [0161.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6fc8) returned 1 Thread: id = 2775 os_tid = 0x1600 [0156.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh")) returned 0x20 [0161.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh", dwFileAttributes=0x20) returned 0 [0161.797] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.797] GetLastError () returned 0x5 [0161.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh", dwFileAttributes=0x20) returned 0 [0161.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a268c8) returned 1 Thread: id = 2776 os_tid = 0x1604 [0156.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\irkutsk")) returned 0x20 [0161.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk", dwFileAttributes=0x20) returned 0 [0161.786] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\irkutsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.786] GetLastError () returned 0x5 [0161.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk", dwFileAttributes=0x20) returned 0 [0161.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47378) returned 1 Thread: id = 2777 os_tid = 0x1608 [0157.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jakarta")) returned 0x20 [0161.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta", dwFileAttributes=0x20) returned 0 [0161.506] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jakarta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.506] GetLastError () returned 0x5 [0161.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jakarta", dwFileAttributes=0x20) returned 0 [0161.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d478c0) returned 1 Thread: id = 2778 os_tid = 0x160c [0157.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf")) returned 0x20 [0161.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF", dwFileAttributes=0x20) returned 0 [0161.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.733] GetLastError () returned 0x5 [0161.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF", dwFileAttributes=0x20) returned 0 [0161.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65000) returned 1 Thread: id = 2779 os_tid = 0x1610 [0157.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf")) returned 0x20 [0161.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF", dwFileAttributes=0x20) returned 0 [0161.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.734] GetLastError () returned 0x5 [0161.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF", dwFileAttributes=0x20) returned 0 [0161.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6bf8) returned 1 Thread: id = 2780 os_tid = 0x1614 [0157.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf")) returned 0x20 [0161.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF", dwFileAttributes=0x20) returned 0 [0161.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.736] GetLastError () returned 0x5 [0161.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF", dwFileAttributes=0x20) returned 0 [0161.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 Thread: id = 2781 os_tid = 0x1618 [0157.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf")) returned 0x20 [0161.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF", dwFileAttributes=0x20) returned 0 [0161.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.763] GetLastError () returned 0x5 [0161.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF", dwFileAttributes=0x20) returned 0 [0161.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 2782 os_tid = 0x161c [0157.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf")) returned 0x20 [0161.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF", dwFileAttributes=0x20) returned 0 [0161.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.738] GetLastError () returned 0x5 [0161.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF", dwFileAttributes=0x20) returned 0 [0161.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6310) returned 1 Thread: id = 2783 os_tid = 0x1620 [0157.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf")) returned 0x20 [0161.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF", dwFileAttributes=0x20) returned 0 [0161.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.739] GetLastError () returned 0x5 [0161.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF", dwFileAttributes=0x20) returned 0 [0161.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 Thread: id = 2784 os_tid = 0x1624 [0157.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf")) returned 0x20 [0161.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF", dwFileAttributes=0x20) returned 0 [0161.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.741] GetLastError () returned 0x5 [0161.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF", dwFileAttributes=0x20) returned 0 [0161.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5f80) returned 1 Thread: id = 2785 os_tid = 0x1628 [0157.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf")) returned 0x20 [0161.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF", dwFileAttributes=0x20) returned 0 [0161.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.743] GetLastError () returned 0x5 [0161.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF", dwFileAttributes=0x20) returned 0 [0161.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 Thread: id = 2786 os_tid = 0x1630 [0157.293] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\outlook data file - mail.pst")) returned 0x2020 [0157.502] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst", dwFileAttributes=0x20) returned 1 [0157.503] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\Outlook Data File - mail.pst" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\outlook data file - mail.pst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15e8 [0157.503] GetFileSizeEx (in: hFile=0x15e8, lpFileSize=0x885f85c | out: lpFileSize=0x885f85c*=271360) returned 1 [0157.503] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x423fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.503] ReadFile (in: hFile=0x15e8, lpBuffer=0x885f838, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x885f848, lpOverlapped=0x0 | out: lpBuffer=0x885f838*, lpNumberOfBytesRead=0x885f848*=0x4, lpOverlapped=0x0) returned 1 [0157.505] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0157.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0157.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0157.505] NtQuerySystemTime (in: CurrentTime=0x885f7d0 | out: CurrentTime=0x885f7d0*=132462177361080000) returned 0x0 [0157.505] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x34311503 [0157.523] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0xe153443 [0157.523] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x4c8f5c33 [0157.523] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x6f990b79 [0157.523] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x5860a5c3 [0157.523] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x282530c [0157.523] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x52d628eb [0157.523] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x28241f03 [0157.523] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x42903588 [0157.523] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x665ed8de [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x5b5cba36 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x50c0fd71 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x57b542c3 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x6b089a1b [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x72ea1103 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x6b8acd7d [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x700a1c8c [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0xa3e744e [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x295a5766 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x523e1081 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x16317eae [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x2c33e158 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x118917c0 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x188ce865 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x6840b8e7 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x6ed7df23 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x29009b39 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0xf401d0 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x3505a5e2 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x100a7df7 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x5ab88115 [0157.524] RtlRandomEx (in: Seed=0x885f7c8 | out: Seed=0x885f7c8) returned 0x1abc29f3 [0157.534] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.534] ReadFile (in: hFile=0x15e8, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x885f7d0, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0x885f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0157.537] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be400 [0157.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0157.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0157.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0157.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0157.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0157.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0157.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0157.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0157.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be400) returned 1 [0157.538] WriteFile (in: hFile=0x15e8, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x885f7d0, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x885f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0158.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0158.135] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.135] ReadFile (in: hFile=0x15e8, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x885f7d0, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0x885f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0158.135] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b41a8 [0158.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0158.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0158.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54188) returned 1 [0158.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0158.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0158.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0158.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0158.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0158.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b41a8) returned 1 [0158.136] WriteFile (in: hFile=0x15e8, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x885f7d0, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x885f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0161.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0161.507] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.507] ReadFile (in: hFile=0x15e8, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x885f7d0, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0x885f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0161.508] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bd4d0 [0161.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d513e0 [0161.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0161.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e534b8) returned 1 [0161.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0161.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0161.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b98 [0161.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b98) returned 1 [0161.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 [0161.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd4d0) returned 1 [0161.509] WriteFile (in: hFile=0x15e8, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x885f7d0, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x885f7d0*=0x3c00, lpOverlapped=0x0) returned 1 [0162.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0162.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d958 [0162.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d90) returned 1 [0162.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x46) returned 0x3e84ad8 [0162.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d90 [0162.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0162.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0162.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0162.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e084a8) returned 1 [0162.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16a) returned 0x2fee080 [0162.785] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0162.785] WriteFile (in: hFile=0x15e8, lpBuffer=0x2fee080*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0x885f850, lpOverlapped=0x0 | out: lpBuffer=0x2fee080*, lpNumberOfBytesWritten=0x885f850*=0x16a, lpOverlapped=0x0) returned 1 [0162.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e084a8 [0162.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0162.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0162.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0162.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2de80 [0162.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0162.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0162.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0162.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0162.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e084a8) returned 1 [0162.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x71) returned 0x3e1a318 [0162.788] sprintf (in: _Dest=0x3e1a318, _Format="%c%c" | out: _Dest="0c") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a31a, _Format="%c%c" | out: _Dest="2b") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a31c, _Format="%c%c" | out: _Dest="b9") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a31e, _Format="%c%c" | out: _Dest="ef") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a320, _Format="%c%c" | out: _Dest="fd") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a322, _Format="%c%c" | out: _Dest="7a") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a324, _Format="%c%c" | out: _Dest="8c") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a326, _Format="%c%c" | out: _Dest="5d") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a328, _Format="%c%c" | out: _Dest="07") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a32a, _Format="%c%c" | out: _Dest="3e") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a32c, _Format="%c%c" | out: _Dest="e4") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a32e, _Format="%c%c" | out: _Dest="de") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a330, _Format="%c%c" | out: _Dest="7d") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a332, _Format="%c%c" | out: _Dest="da") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a334, _Format="%c%c" | out: _Dest="c4") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a336, _Format="%c%c" | out: _Dest="9d") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a338, _Format="%c%c" | out: _Dest="50") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a33a, _Format="%c%c" | out: _Dest="33") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a33c, _Format="%c%c" | out: _Dest="5d") returned 2 [0162.788] sprintf (in: _Dest=0x3e1a33e, _Format="%c%c" | out: _Dest="0f") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a340, _Format="%c%c" | out: _Dest="75") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a342, _Format="%c%c" | out: _Dest="2a") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a344, _Format="%c%c" | out: _Dest="39") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a346, _Format="%c%c" | out: _Dest="48") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a348, _Format="%c%c" | out: _Dest="c9") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a34a, _Format="%c%c" | out: _Dest="d2") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a34c, _Format="%c%c" | out: _Dest="9a") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a34e, _Format="%c%c" | out: _Dest="dc") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a350, _Format="%c%c" | out: _Dest="00") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a352, _Format="%c%c" | out: _Dest="8c") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a354, _Format="%c%c" | out: _Dest="53") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a356, _Format="%c%c" | out: _Dest="6b") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a358, _Format="%c%c" | out: _Dest="ca") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a35a, _Format="%c%c" | out: _Dest="a1") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a35c, _Format="%c%c" | out: _Dest="98") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a35e, _Format="%c%c" | out: _Dest="5e") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a360, _Format="%c%c" | out: _Dest="04") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a362, _Format="%c%c" | out: _Dest="c0") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a364, _Format="%c%c" | out: _Dest="f2") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a366, _Format="%c%c" | out: _Dest="20") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a368, _Format="%c%c" | out: _Dest="b3") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a36a, _Format="%c%c" | out: _Dest="5b") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a36c, _Format="%c%c" | out: _Dest="5b") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a36e, _Format="%c%c" | out: _Dest="f5") returned 2 [0162.789] sprintf (in: _Dest=0x3e1a370, _Format="%c%c" | out: _Dest="3d") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a372, _Format="%c%c" | out: _Dest="f3") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a374, _Format="%c%c" | out: _Dest="36") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a376, _Format="%c%c" | out: _Dest="a0") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a378, _Format="%c%c" | out: _Dest="01") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a37a, _Format="%c%c" | out: _Dest="8b") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a37c, _Format="%c%c" | out: _Dest="99") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a37e, _Format="%c%c" | out: _Dest="58") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a380, _Format="%c%c" | out: _Dest="75") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a382, _Format="%c%c" | out: _Dest="62") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a384, _Format="%c%c" | out: _Dest="46") returned 2 [0162.790] sprintf (in: _Dest=0x3e1a386, _Format="%c%c" | out: _Dest="4a") returned 2 [0162.790] RtlInitAnsiString (in: DestinationString=0x885f7d8, SourceString="0c2bb9effd7a8c5d073ee4de7ddac49d50335d0f752a3948c9d29adc008c536bcaa1985e04c0f220b35b5bf53df336a0018b99587562464a" | out: DestinationString="0c2bb9effd7a8c5d073ee4de7ddac49d50335d0f752a3948c9d29adc008c536bcaa1985e04c0f220b35b5bf53df336a0018b99587562464a") [0162.790] RtlAnsiStringToUnicodeString (in: DestinationString=0x885f7d0, SourceString="0c2bb9effd7a8c5d073ee4de7ddac49d50335d0f752a3948c9d29adc008c536bcaa1985e04c0f220b35b5bf53df336a0018b99587562464a", AllocateDestinationString=1 | out: DestinationString="0c2bb9effd7a8c5d073ee4de7ddac49d50335d0f752a3948c9d29adc008c536bcaa1985e04c0f220b35b5bf53df336a0018b99587562464a") returned 0x0 [0162.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3dafad8 [0162.790] wcscat (in: _Dest=0x3052f40, _Source="0c2bb9effd7a8c5d073ee4de7dda" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\0c2bb9effd7a8c5d073ee4de7dda") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\0c2bb9effd7a8c5d073ee4de7dda" [0162.790] wcscat (in: _Dest=0x3052f40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\0c2bb9effd7a8c5d073ee4de7dda.68814f") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\0c2bb9effd7a8c5d073ee4de7dda.68814f" [0162.790] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\0c2bb9effd7a8c5d073ee4de7dda.68814f", NtPathName=0x885f7c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\0c2bb9effd7a8c5d073ee4de7dda.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0162.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7e40 [0162.801] FlushFileBuffers (hFile=0x15e8) returned 1 [0162.825] CloseHandle (hObject=0x15e8) returned 1 [0162.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a318 [0162.827] wcscpy (in: _Dest=0x3e1a318, _Source="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\" [0162.827] wcscat (in: _Dest=0x3e1a318, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\68814F-Readme.txt" [0162.827] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Documents\\Outlook Files\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\documents\\outlook files\\68814f-readme.txt")) returned 0x20 [0162.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a318) returned 1 [0162.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7448) returned 1 Thread: id = 2787 os_tid = 0x1634 [0157.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf")) returned 0x20 [0161.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF", dwFileAttributes=0x20) returned 0 [0161.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.745] GetLastError () returned 0x5 [0161.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF", dwFileAttributes=0x20) returned 0 [0161.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb70b8) returned 1 Thread: id = 2788 os_tid = 0x1638 [0157.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf")) returned 0x20 [0161.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF", dwFileAttributes=0x20) returned 0 [0161.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.746] GetLastError () returned 0x5 [0161.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF", dwFileAttributes=0x20) returned 0 [0161.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5e50) returned 1 Thread: id = 2789 os_tid = 0x163c [0157.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf")) returned 0x20 [0161.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF", dwFileAttributes=0x20) returned 0 [0161.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.748] GetLastError () returned 0x5 [0161.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF", dwFileAttributes=0x20) returned 0 [0161.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5990) returned 1 Thread: id = 2790 os_tid = 0x1640 [0157.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf")) returned 0x20 [0161.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF", dwFileAttributes=0x20) returned 0 [0161.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.749] GetLastError () returned 0x5 [0161.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF", dwFileAttributes=0x20) returned 0 [0161.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb64d8) returned 1 Thread: id = 2791 os_tid = 0x1644 [0157.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf")) returned 0x20 [0161.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF", dwFileAttributes=0x20) returned 0 [0161.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.751] GetLastError () returned 0x5 [0161.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF", dwFileAttributes=0x20) returned 0 [0161.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5ee8) returned 1 Thread: id = 2792 os_tid = 0x1648 [0157.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf")) returned 0x20 [0161.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF", dwFileAttributes=0x20) returned 0 [0161.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.753] GetLastError () returned 0x5 [0161.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF", dwFileAttributes=0x20) returned 0 [0161.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb71e8) returned 1 Thread: id = 2793 os_tid = 0x164c [0157.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf")) returned 0x20 [0161.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF", dwFileAttributes=0x20) returned 0 [0161.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.755] GetLastError () returned 0x5 [0161.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF", dwFileAttributes=0x20) returned 0 [0161.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5bf0) returned 1 Thread: id = 2794 os_tid = 0x1650 [0157.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf")) returned 0x20 [0161.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF", dwFileAttributes=0x20) returned 0 [0161.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.757] GetLastError () returned 0x5 [0161.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF", dwFileAttributes=0x20) returned 0 [0161.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64258) returned 1 Thread: id = 2795 os_tid = 0x1654 [0157.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf")) returned 0x20 [0161.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF", dwFileAttributes=0x20) returned 0 [0161.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.758] GetLastError () returned 0x5 [0161.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF", dwFileAttributes=0x20) returned 0 [0161.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a641c0) returned 1 Thread: id = 2796 os_tid = 0x1658 [0157.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf")) returned 0x20 [0161.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF", dwFileAttributes=0x20) returned 0 [0161.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.760] GetLastError () returned 0x5 [0161.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF", dwFileAttributes=0x20) returned 0 [0161.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64128) returned 1 Thread: id = 2797 os_tid = 0x165c [0157.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf")) returned 0x20 [0161.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF", dwFileAttributes=0x20) returned 0 [0161.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.761] GetLastError () returned 0x5 [0161.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF", dwFileAttributes=0x20) returned 0 [0161.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64090) returned 1 Thread: id = 2798 os_tid = 0x1660 [0157.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf")) returned 0x20 [0161.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF", dwFileAttributes=0x20) returned 0 [0161.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.725] GetLastError () returned 0x5 [0161.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF", dwFileAttributes=0x20) returned 0 [0161.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 Thread: id = 2799 os_tid = 0x1664 [0157.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf")) returned 0x20 [0161.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF", dwFileAttributes=0x20) returned 0 [0161.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.728] GetLastError () returned 0x5 [0161.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF", dwFileAttributes=0x20) returned 0 [0161.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64848) returned 1 Thread: id = 2800 os_tid = 0x1668 [0157.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf")) returned 0x20 [0161.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF", dwFileAttributes=0x20) returned 0 [0161.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.730] GetLastError () returned 0x5 [0161.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF", dwFileAttributes=0x20) returned 0 [0161.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64b40) returned 1 Thread: id = 2801 os_tid = 0x166c [0157.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf")) returned 0x20 [0161.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF", dwFileAttributes=0x20) returned 0 [0161.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.731] GetLastError () returned 0x5 [0161.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF", dwFileAttributes=0x20) returned 0 [0161.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64f68) returned 1 Thread: id = 2802 os_tid = 0x1670 [0157.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf")) returned 0x20 [0161.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF", dwFileAttributes=0x20) returned 0 [0161.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.503] GetLastError () returned 0x5 [0161.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF", dwFileAttributes=0x20) returned 0 [0161.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65098) returned 1 Thread: id = 2803 os_tid = 0x1674 [0157.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum")) returned 0x20 [0157.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM", dwFileAttributes=0x20) returned 0 [0157.541] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.541] GetLastError () returned 0x5 [0157.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM", dwFileAttributes=0x20) returned 0 [0157.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053678) returned 1 Thread: id = 2804 os_tid = 0x1678 [0157.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum")) returned 0x20 [0157.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM", dwFileAttributes=0x20) returned 0 [0157.543] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.543] GetLastError () returned 0x5 [0157.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM", dwFileAttributes=0x20) returned 0 [0157.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 Thread: id = 2805 os_tid = 0x167c [0157.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum")) returned 0x20 [0157.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM", dwFileAttributes=0x20) returned 0 [0157.548] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.548] GetLastError () returned 0x5 [0157.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM", dwFileAttributes=0x20) returned 0 [0157.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 Thread: id = 2806 os_tid = 0x1680 [0157.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum")) returned 0x20 [0157.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM", dwFileAttributes=0x20) returned 0 [0157.550] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.550] GetLastError () returned 0x5 [0157.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM", dwFileAttributes=0x20) returned 0 [0157.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 Thread: id = 2807 os_tid = 0x1684 [0157.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h")) returned 0x20 [0159.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0159.526] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.526] GetLastError () returned 0x5 [0159.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0159.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d060) returned 1 Thread: id = 2808 os_tid = 0x1688 [0157.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h")) returned 0x20 [0159.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H", dwFileAttributes=0x20) returned 0 [0159.528] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.528] GetLastError () returned 0x5 [0159.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H", dwFileAttributes=0x20) returned 0 [0159.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 2809 os_tid = 0x168c [0157.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2")) returned 0x20 [0159.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0159.529] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.530] GetLastError () returned 0x5 [0159.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0159.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 2810 os_tid = 0x1690 [0157.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v")) returned 0x20 [0159.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V", dwFileAttributes=0x20) returned 0 [0159.531] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.531] GetLastError () returned 0x5 [0159.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V", dwFileAttributes=0x20) returned 0 [0159.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 2811 os_tid = 0x1694 [0157.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h")) returned 0x20 [0159.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H", dwFileAttributes=0x20) returned 0 [0159.533] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.533] GetLastError () returned 0x5 [0159.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H", dwFileAttributes=0x20) returned 0 [0159.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 2812 os_tid = 0x1698 [0157.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v")) returned 0x20 [0159.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V", dwFileAttributes=0x20) returned 0 [0159.535] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.535] GetLastError () returned 0x5 [0159.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V", dwFileAttributes=0x20) returned 0 [0159.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 2813 os_tid = 0x16a4 [0157.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h")) returned 0x20 [0159.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0159.536] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.537] GetLastError () returned 0x5 [0159.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H", dwFileAttributes=0x20) returned 0 [0159.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 2814 os_tid = 0x16a8 [0157.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2")) returned 0x20 [0159.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0159.538] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.538] GetLastError () returned 0x5 [0159.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2", dwFileAttributes=0x20) returned 0 [0159.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 2815 os_tid = 0x16ac [0157.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c")) returned 0x20 [0159.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C", dwFileAttributes=0x20) returned 0 [0159.540] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.540] GetLastError () returned 0x5 [0159.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C", dwFileAttributes=0x20) returned 0 [0159.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 2816 os_tid = 0x16b4 [0157.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h")) returned 0x20 [0159.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H", dwFileAttributes=0x20) returned 0 [0159.542] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.543] GetLastError () returned 0x5 [0159.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H", dwFileAttributes=0x20) returned 0 [0159.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46e98) returned 1 Thread: id = 2817 os_tid = 0x16b8 [0157.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v")) returned 0x20 [0159.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V", dwFileAttributes=0x20) returned 0 [0159.545] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.545] GetLastError () returned 0x5 [0159.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V", dwFileAttributes=0x20) returned 0 [0159.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47718) returned 1 Thread: id = 2818 os_tid = 0x16bc [0157.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0")) returned 0x20 [0159.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0", dwFileAttributes=0x20) returned 0 [0159.547] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.547] GetLastError () returned 0x5 [0159.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0", dwFileAttributes=0x20) returned 0 [0159.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 2819 os_tid = 0x16c0 [0157.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1")) returned 0x20 [0159.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1", dwFileAttributes=0x20) returned 0 [0159.549] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.549] GetLastError () returned 0x5 [0159.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1", dwFileAttributes=0x20) returned 0 [0159.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 2820 os_tid = 0x16c4 [0157.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2")) returned 0x20 [0159.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2", dwFileAttributes=0x20) returned 0 [0159.551] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.551] GetLastError () returned 0x5 [0159.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2", dwFileAttributes=0x20) returned 0 [0159.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 2821 os_tid = 0x16c8 [0157.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3")) returned 0x20 [0159.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3", dwFileAttributes=0x20) returned 0 [0159.552] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.553] GetLastError () returned 0x5 [0159.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3", dwFileAttributes=0x20) returned 0 [0159.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 2822 os_tid = 0x16cc [0157.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4")) returned 0x20 [0159.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4", dwFileAttributes=0x20) returned 0 [0159.554] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.554] GetLastError () returned 0x5 [0159.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4", dwFileAttributes=0x20) returned 0 [0159.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 2823 os_tid = 0x16d0 [0157.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5")) returned 0x20 [0159.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5", dwFileAttributes=0x20) returned 0 [0159.558] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.558] GetLastError () returned 0x5 [0159.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5", dwFileAttributes=0x20) returned 0 [0159.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 2824 os_tid = 0x16d4 [0157.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc")) returned 0x20 [0159.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc", dwFileAttributes=0x20) returned 0 [0159.201] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.201] GetLastError () returned 0x5 [0159.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc", dwFileAttributes=0x20) returned 0 [0159.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 Thread: id = 2825 os_tid = 0x16d8 [0157.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5")) returned 0x20 [0159.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5", dwFileAttributes=0x20) returned 0 [0159.577] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.577] GetLastError () returned 0x5 [0159.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5", dwFileAttributes=0x20) returned 0 [0159.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 2826 os_tid = 0x16dc [0157.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid")) returned 0x20 [0159.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID", dwFileAttributes=0x20) returned 0 [0159.576] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.576] GetLastError () returned 0x5 [0159.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID", dwFileAttributes=0x20) returned 0 [0159.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 2827 os_tid = 0x16e0 [0157.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host")) returned 0x20 [0159.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host", dwFileAttributes=0x20) returned 0 [0159.574] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.574] GetLastError () returned 0x5 [0159.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host", dwFileAttributes=0x20) returned 0 [0159.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 2828 os_tid = 0x16e4 [0157.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac")) returned 0x20 [0159.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac", dwFileAttributes=0x20) returned 0 [0159.573] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.573] GetLastError () returned 0x5 [0159.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac", dwFileAttributes=0x20) returned 0 [0159.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61830) returned 1 Thread: id = 2829 os_tid = 0x16e8 [0157.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2")) returned 0x20 [0159.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2", dwFileAttributes=0x20) returned 0 [0159.570] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.570] GetLastError () returned 0x5 [0159.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2", dwFileAttributes=0x20) returned 0 [0159.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a617a0) returned 1 Thread: id = 2830 os_tid = 0x16ec [0157.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0")) returned 0x20 [0159.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0", dwFileAttributes=0x20) returned 0 [0159.568] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.568] GetLastError () returned 0x5 [0159.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0", dwFileAttributes=0x20) returned 0 [0159.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 2831 os_tid = 0x16f0 [0157.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1")) returned 0x20 [0159.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1", dwFileAttributes=0x20) returned 0 [0159.566] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.567] GetLastError () returned 0x5 [0159.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1", dwFileAttributes=0x20) returned 0 [0159.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 2832 os_tid = 0x16f4 [0157.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2")) returned 0x20 [0159.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2", dwFileAttributes=0x20) returned 0 [0159.565] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.565] GetLastError () returned 0x5 [0159.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2", dwFileAttributes=0x20) returned 0 [0159.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 2833 os_tid = 0x16f8 [0157.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3")) returned 0x20 [0159.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3", dwFileAttributes=0x20) returned 0 [0159.563] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.563] GetLastError () returned 0x5 [0159.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3", dwFileAttributes=0x20) returned 0 [0159.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 2834 os_tid = 0x16fc [0157.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4")) returned 0x20 [0159.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4", dwFileAttributes=0x20) returned 0 [0159.561] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.562] GetLastError () returned 0x5 [0159.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4", dwFileAttributes=0x20) returned 0 [0159.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 2835 os_tid = 0x1700 [0157.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5")) returned 0x20 [0159.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5", dwFileAttributes=0x20) returned 0 [0159.556] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.556] GetLastError () returned 0x5 [0159.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5", dwFileAttributes=0x20) returned 0 [0159.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 2836 os_tid = 0x1704 [0157.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc")) returned 0x20 [0159.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC", dwFileAttributes=0x20) returned 0 [0159.560] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.560] GetLastError () returned 0x5 [0159.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC", dwFileAttributes=0x20) returned 0 [0159.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61710) returned 1 Thread: id = 2837 os_tid = 0x1708 [0157.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc")) returned 0x20 [0158.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0158.846] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.202] GetLastError () returned 0x5 [0159.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0159.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61680) returned 1 Thread: id = 2838 os_tid = 0x1710 [0157.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini")) returned 0x20 [0157.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini", dwFileAttributes=0x20) returned 0 [0157.871] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.871] GetLastError () returned 0x5 [0157.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini", dwFileAttributes=0x20) returned 0 [0157.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 2839 os_tid = 0x1714 [0157.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html")) returned 0x20 [0157.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", dwFileAttributes=0x20) returned 0 [0157.873] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.873] GetLastError () returned 0x5 [0157.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", dwFileAttributes=0x20) returned 0 [0157.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61170) returned 1 Thread: id = 2840 os_tid = 0x1718 [0157.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f218 [0157.876] wcscpy (in: _Dest=0x3f3f218, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0157.876] wcscat (in: _Dest=0x3f3f218, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\" [0157.876] wcscat (in: _Dest=0x3f3f218, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*" [0157.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0157.876] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0157.877] wcscmp (_String1=".", _String2=".") returned 0 [0157.877] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1f1b40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.877] wcscmp (_String1="..", _String2=".") returned 1 [0157.877] wcscmp (_String1="..", _String2="..") returned 0 [0157.877] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0157.877] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0157.877] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0157.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9098 [0157.877] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0157.877] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\" [0157.877] wcscat (in: _Dest=0x3eb9098, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" [0163.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0163.156] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0163.156] wcscmp (_String1="license.html", _String2=".") returned 1 [0163.156] wcscmp (_String1="license.html", _String2="..") returned 1 [0163.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df18c8 [0163.156] wcscpy (in: _Dest=0x3df18c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV" [0163.156] wcscat (in: _Dest=0x3df18c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\" [0163.156] wcscat (in: _Dest=0x3df18c8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" [0163.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df18c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0163.157] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0163.157] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0163.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0163.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0163.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 Thread: id = 2841 os_tid = 0x171c [0157.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f650 [0157.878] wcscpy (in: _Dest=0x3f3f650, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0157.878] wcscat (in: _Dest=0x3f3f650, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\" [0157.878] wcscat (in: _Dest=0x3f3f650, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*" [0157.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0157.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0157.879] wcscmp (_String1=".", _String2=".") returned 0 [0157.879] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1f1b40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.879] wcscmp (_String1="..", _String2=".") returned 1 [0157.879] wcscmp (_String1="..", _String2="..") returned 0 [0157.879] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0157.879] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0157.879] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0157.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba4c8 [0157.879] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0157.879] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\" [0157.879] wcscat (in: _Dest=0x3eba4c8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" [0158.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0158.652] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0158.652] wcscmp (_String1="license.html", _String2=".") returned 1 [0158.652] wcscmp (_String1="license.html", _String2="..") returned 1 [0158.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a619e0 [0158.652] wcscpy (in: _Dest=0x7a619e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN" [0158.653] wcscat (in: _Dest=0x7a619e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\" [0158.653] wcscat (in: _Dest=0x7a619e0, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" [0158.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a619e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0158.654] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1f1b40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0158.654] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0158.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0158.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0158.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23610) returned 1 Thread: id = 2842 os_tid = 0x1720 [0157.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f1a0 [0157.880] wcscpy (in: _Dest=0x3f3f1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0157.880] wcscat (in: _Dest=0x3f3f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\" [0157.880] wcscat (in: _Dest=0x3f3f1a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*" [0157.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0157.880] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0162.143] wcscmp (_String1=".", _String2=".") returned 0 [0162.143] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.144] wcscmp (_String1="..", _String2=".") returned 1 [0162.144] wcscmp (_String1="..", _String2="..") returned 0 [0162.144] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.144] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.144] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3bed8 [0162.144] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0162.144] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\" [0162.144] wcscat (in: _Dest=0x3f3bed8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" [0163.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0163.447] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0163.447] wcscmp (_String1="license.html", _String2=".") returned 1 [0163.447] wcscmp (_String1="license.html", _String2="..") returned 1 [0163.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df30f8 [0163.447] wcscpy (in: _Dest=0x3df30f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA" [0163.447] wcscat (in: _Dest=0x3df30f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\" [0163.447] wcscat (in: _Dest=0x3df30f8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" [0163.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df30f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0163.449] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0163.449] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0163.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0163.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0163.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23bc0) returned 1 Thread: id = 2843 os_tid = 0x1724 [0157.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f290 [0157.882] wcscpy (in: _Dest=0x3f3f290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0157.882] wcscat (in: _Dest=0x3f3f290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\" [0157.882] wcscat (in: _Dest=0x3f3f290, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*" [0157.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0157.882] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d240 [0162.143] wcscmp (_String1=".", _String2=".") returned 0 [0162.143] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.143] wcscmp (_String1="..", _String2=".") returned 1 [0162.143] wcscmp (_String1="..", _String2="..") returned 0 [0162.143] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.143] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.143] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3cb10 [0162.143] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0162.143] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\" [0162.143] wcscat (in: _Dest=0x3f3cb10, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" [0164.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini")) returned 0x20 [0164.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.015] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.016] GetLastError () returned 0x5 [0164.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 [0164.016] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0164.016] wcscmp (_String1="license.html", _String2=".") returned 1 [0164.016] wcscmp (_String1="license.html", _String2="..") returned 1 [0164.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45260 [0164.016] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN" [0164.016] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\" [0164.016] wcscat (in: _Dest=0x3d45260, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" [0164.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html")) returned 0x20 [0164.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", dwFileAttributes=0x20) returned 0 [0164.017] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.017] GetLastError () returned 0x5 [0164.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", dwFileAttributes=0x20) returned 0 [0164.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.018] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0164.018] FindClose (in: hFindFile=0x7a2d240 | out: hFindFile=0x7a2d240) returned 1 [0164.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0164.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0164.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23f40) returned 1 Thread: id = 2844 os_tid = 0x1730 [0157.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f998 [0157.886] wcscpy (in: _Dest=0x3f3f998, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0157.886] wcscat (in: _Dest=0x3f3f998, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\" [0157.886] wcscat (in: _Dest=0x3f3f998, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*" [0157.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0157.886] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0162.142] wcscmp (_String1=".", _String2=".") returned 0 [0162.142] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.142] wcscmp (_String1="..", _String2=".") returned 1 [0162.142] wcscmp (_String1="..", _String2="..") returned 0 [0162.142] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.142] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.142] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3da78 [0162.142] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0162.142] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\" [0162.142] wcscat (in: _Dest=0x3f3da78, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" [0163.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0163.443] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0163.443] wcscmp (_String1="license.html", _String2=".") returned 1 [0163.443] wcscmp (_String1="license.html", _String2="..") returned 1 [0163.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df18c8 [0163.443] wcscpy (in: _Dest=0x3df18c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR" [0163.443] wcscat (in: _Dest=0x3df18c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\" [0163.443] wcscat (in: _Dest=0x3df18c8, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" [0163.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df18c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0163.444] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0163.445] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0163.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0163.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0163.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ca0) returned 1 Thread: id = 2845 os_tid = 0x1734 [0157.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f740 [0157.887] wcscpy (in: _Dest=0x3f3f740, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0157.887] wcscat (in: _Dest=0x3f3f740, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\" [0157.887] wcscat (in: _Dest=0x3f3f740, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*" [0157.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0157.887] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73430 [0159.204] wcscmp (_String1=".", _String2=".") returned 0 [0159.204] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd322640, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.204] wcscmp (_String1="..", _String2=".") returned 1 [0159.204] wcscmp (_String1="..", _String2="..") returned 0 [0159.204] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0159.204] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0159.204] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0159.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3cdb8 [0159.205] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0159.205] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\" [0159.205] wcscat (in: _Dest=0x3f3cdb8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" [0170.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0170.852] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0170.852] wcscmp (_String1="license.html", _String2=".") returned 1 [0170.852] wcscmp (_String1="license.html", _String2="..") returned 1 [0170.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a603f0 [0170.853] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD" [0170.853] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\" [0170.853] wcscat (in: _Dest=0x7a603f0, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" [0170.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a603f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0170.854] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0170.854] FindClose (in: hFindFile=0x3e73430 | out: hFindFile=0x3e73430) returned 1 [0170.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0170.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0170.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a70) returned 1 Thread: id = 2846 os_tid = 0x1738 [0157.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f6c8 [0157.892] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0157.892] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\" [0157.892] wcscat (in: _Dest=0x3f3f6c8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*" [0157.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0157.892] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741f0 [0161.802] wcscmp (_String1=".", _String2=".") returned 0 [0161.802] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2fc4e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.802] wcscmp (_String1="..", _String2=".") returned 1 [0161.802] wcscmp (_String1="..", _String2="..") returned 0 [0161.802] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0161.802] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0161.802] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0161.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0161.802] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0161.802] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\" [0161.802] wcscat (in: _Dest=0x3f3d748, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" [0164.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini")) returned 0x20 [0164.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.786] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.786] GetLastError () returned 0x5 [0164.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 [0164.786] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0164.787] wcscmp (_String1="license.html", _String2=".") returned 1 [0164.787] wcscmp (_String1="license.html", _String2="..") returned 1 [0164.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60fc0 [0164.787] wcscpy (in: _Dest=0x7a60fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR" [0164.787] wcscat (in: _Dest=0x7a60fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\" [0164.787] wcscat (in: _Dest=0x7a60fc0, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" [0164.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html")) returned 0x20 [0164.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", dwFileAttributes=0x20) returned 0 [0164.788] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.788] GetLastError () returned 0x5 [0164.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", dwFileAttributes=0x20) returned 0 [0164.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60fc0) returned 1 [0164.788] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2fc4e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0164.788] FindClose (in: hFindFile=0x3e741f0 | out: hFindFile=0x3e741f0) returned 1 [0164.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0164.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0164.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23290) returned 1 Thread: id = 2847 os_tid = 0x173c [0157.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f830 [0157.892] wcscpy (in: _Dest=0x3f3f830, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0157.893] wcscat (in: _Dest=0x3f3f830, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\" [0157.893] wcscat (in: _Dest=0x3f3f830, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*" [0157.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0157.893] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dec0 [0162.144] wcscmp (_String1=".", _String2=".") returned 0 [0162.144] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.144] wcscmp (_String1="..", _String2=".") returned 1 [0162.144] wcscmp (_String1="..", _String2="..") returned 0 [0162.144] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.144] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.144] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3ca00 [0162.145] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0162.145] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\" [0162.145] wcscat (in: _Dest=0x3f3ca00, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" [0164.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini")) returned 0x20 [0164.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.038] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.038] GetLastError () returned 0x5 [0164.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 [0164.038] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0164.038] wcscmp (_String1="license.html", _String2=".") returned 1 [0164.038] wcscmp (_String1="license.html", _String2="..") returned 1 [0164.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0164.039] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL" [0164.039] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\" [0164.039] wcscat (in: _Dest=0x3d44d50, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" [0164.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html")) returned 0x20 [0164.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", dwFileAttributes=0x20) returned 0 [0164.039] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.040] GetLastError () returned 0x5 [0164.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", dwFileAttributes=0x20) returned 0 [0164.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.040] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0164.040] FindClose (in: hFindFile=0x7a2dec0 | out: hFindFile=0x7a2dec0) returned 1 [0164.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0164.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0164.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a238b0) returned 1 Thread: id = 2848 os_tid = 0x1740 [0157.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f5d8 [0157.893] wcscpy (in: _Dest=0x3f3f5d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0157.893] wcscat (in: _Dest=0x3f3f5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\" [0157.893] wcscat (in: _Dest=0x3f3f5d8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*" [0157.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53d70 [0157.893] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc80 [0162.145] wcscmp (_String1=".", _String2=".") returned 0 [0162.145] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2d6380, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2d6380, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.145] wcscmp (_String1="..", _String2=".") returned 1 [0162.145] wcscmp (_String1="..", _String2="..") returned 0 [0162.145] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.145] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.145] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d280 [0162.145] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0162.145] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\" [0162.145] wcscat (in: _Dest=0x3f3d280, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" [0163.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0163.451] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0163.451] wcscmp (_String1="license.html", _String2=".") returned 1 [0163.451] wcscmp (_String1="license.html", _String2="..") returned 1 [0163.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df2d08 [0163.451] wcscpy (in: _Dest=0x3df2d08, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB" [0163.451] wcscat (in: _Dest=0x3df2d08, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\" [0163.451] wcscat (in: _Dest=0x3df2d08, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" [0163.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df2d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0163.453] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0163.453] FindClose (in: hFindFile=0x7a2dc80 | out: hFindFile=0x7a2dc80) returned 1 [0163.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53d70) returned 1 [0163.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0163.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23920) returned 1 Thread: id = 2849 os_tid = 0x1744 [0157.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f4e8 [0157.894] wcscpy (in: _Dest=0x3f3f4e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0157.894] wcscat (in: _Dest=0x3f3f4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\" [0157.894] wcscat (in: _Dest=0x3f3f4e8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*" [0157.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a557e8 [0157.894] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d7c0 [0162.146] wcscmp (_String1=".", _String2=".") returned 0 [0162.146] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.146] wcscmp (_String1="..", _String2=".") returned 1 [0162.146] wcscmp (_String1="..", _String2="..") returned 0 [0162.146] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.146] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.146] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c648 [0162.146] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0162.146] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\" [0162.146] wcscat (in: _Dest=0x3f3c648, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" [0164.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini")) returned 0x20 [0164.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.072] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.072] GetLastError () returned 0x5 [0164.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 [0164.073] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0164.101] wcscmp (_String1="license.html", _String2=".") returned 1 [0164.101] wcscmp (_String1="license.html", _String2="..") returned 1 [0164.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45260 [0164.102] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM" [0164.102] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\" [0164.102] wcscat (in: _Dest=0x3d45260, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" [0164.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html")) returned 0x20 [0164.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", dwFileAttributes=0x20) returned 0 [0164.103] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.103] GetLastError () returned 0x5 [0164.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", dwFileAttributes=0x20) returned 0 [0164.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.103] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0164.103] FindClose (in: hFindFile=0x7a2d7c0 | out: hFindFile=0x7a2d7c0) returned 1 [0164.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a557e8) returned 1 [0164.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0164.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23760) returned 1 Thread: id = 2850 os_tid = 0x1748 [0157.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fc68 [0157.897] wcscpy (in: _Dest=0x3f3fc68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0157.897] wcscat (in: _Dest=0x3f3fc68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\" [0157.897] wcscat (in: _Dest=0x3f3fc68, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*" [0157.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52c98 [0157.898] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db80 [0162.146] wcscmp (_String1=".", _String2=".") returned 0 [0162.146] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1cb9e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.147] wcscmp (_String1="..", _String2=".") returned 1 [0162.147] wcscmp (_String1="..", _String2="..") returned 0 [0162.147] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.147] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.147] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d308 [0162.147] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0162.147] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\" [0162.147] wcscat (in: _Dest=0x3f3d308, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" [0163.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0163.455] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0163.455] wcscmp (_String1="license.html", _String2=".") returned 1 [0163.455] wcscmp (_String1="license.html", _String2="..") returned 1 [0163.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1c28 [0163.455] wcscpy (in: _Dest=0x3df1c28, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS" [0163.455] wcscat (in: _Dest=0x3df1c28, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\" [0163.456] wcscat (in: _Dest=0x3df1c28, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" [0163.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0163.457] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0163.457] FindClose (in: hFindFile=0x7a2db80 | out: hFindFile=0x7a2db80) returned 1 [0163.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52c98) returned 1 [0163.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0163.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a236f0) returned 1 Thread: id = 2851 os_tid = 0x174c [0157.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3fdd0 [0157.899] wcscpy (in: _Dest=0x3f3fdd0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0157.899] wcscat (in: _Dest=0x3f3fdd0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\" [0157.899] wcscat (in: _Dest=0x3f3fdd0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*" [0157.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0157.899] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d980 [0162.147] wcscmp (_String1=".", _String2=".") returned 0 [0162.147] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1cb9e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.147] wcscmp (_String1="..", _String2=".") returned 1 [0162.147] wcscmp (_String1="..", _String2="..") returned 0 [0162.148] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.148] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.148] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36ead8 [0162.148] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0162.148] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\" [0162.148] wcscat (in: _Dest=0x36ead8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" [0164.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini")) returned 0x20 [0164.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.109] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.109] GetLastError () returned 0x5 [0164.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 [0164.109] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0164.110] wcscmp (_String1="license.html", _String2=".") returned 1 [0164.110] wcscmp (_String1="license.html", _String2="..") returned 1 [0164.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0164.110] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY" [0164.110] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\" [0164.110] wcscat (in: _Dest=0x3d44d50, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" [0164.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html")) returned 0x20 [0164.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", dwFileAttributes=0x20) returned 0 [0164.110] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.111] GetLastError () returned 0x5 [0164.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", dwFileAttributes=0x20) returned 0 [0164.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.111] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1cb9e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0164.111] FindClose (in: hFindFile=0x7a2d980 | out: hFindFile=0x7a2d980) returned 1 [0164.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0164.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0164.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23680) returned 1 Thread: id = 2852 os_tid = 0x1750 [0157.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e580 [0157.900] wcscpy (in: _Dest=0x3f3e580, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0157.900] wcscat (in: _Dest=0x3f3e580, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\" [0157.900] wcscat (in: _Dest=0x3f3e580, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*" [0157.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55a50 [0157.900] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d8c0 [0162.148] wcscmp (_String1=".", _String2=".") returned 0 [0162.148] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.148] wcscmp (_String1="..", _String2=".") returned 1 [0162.148] wcscmp (_String1="..", _String2="..") returned 0 [0162.148] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.148] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.148] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36e500 [0162.148] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0162.148] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\" [0162.148] wcscat (in: _Dest=0x36e500, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" [0163.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0163.459] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0163.459] wcscmp (_String1="license.html", _String2=".") returned 1 [0163.459] wcscmp (_String1="license.html", _String2="..") returned 1 [0163.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3df1b98 [0163.459] wcscpy (in: _Dest=0x3df1b98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV" [0163.459] wcscat (in: _Dest=0x3df1b98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\" [0163.459] wcscat (in: _Dest=0x3df1b98, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" [0163.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df1b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0163.461] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0163.461] FindClose (in: hFindFile=0x7a2d8c0 | out: hFindFile=0x7a2d8c0) returned 1 [0163.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55a50) returned 1 [0163.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0163.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23530) returned 1 Thread: id = 2853 os_tid = 0x1754 [0157.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e5f8 [0157.900] wcscpy (in: _Dest=0x3f3e5f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0157.900] wcscat (in: _Dest=0x3f3e5f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\" [0157.900] wcscat (in: _Dest=0x3f3e5f8, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*" [0157.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55580 [0157.900] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d480 [0161.456] wcscmp (_String1=".", _String2=".") returned 0 [0161.456] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2fc4e0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd322640, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.456] wcscmp (_String1="..", _String2=".") returned 1 [0161.456] wcscmp (_String1="..", _String2="..") returned 0 [0161.456] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0161.456] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0161.456] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0161.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d390 [0161.456] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0161.456] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\" [0161.457] wcscat (in: _Dest=0x3f3d390, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" [0163.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0163.897] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0163.897] wcscmp (_String1="license.html", _String2=".") returned 1 [0163.897] wcscmp (_String1="license.html", _String2="..") returned 1 [0163.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44f90 [0163.897] wcscpy (in: _Dest=0x3d44f90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO" [0163.897] wcscat (in: _Dest=0x3d44f90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\" [0163.898] wcscat (in: _Dest=0x3d44f90, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" [0163.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0163.899] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd322640, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0163.899] FindClose (in: hFindFile=0x7a2d480 | out: hFindFile=0x7a2d480) returned 1 [0163.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55580) returned 1 [0163.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0163.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23b50) returned 1 Thread: id = 2854 os_tid = 0x175c [0157.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e2b0 [0157.904] wcscpy (in: _Dest=0x3f3e2b0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0157.904] wcscat (in: _Dest=0x3f3e2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\" [0157.904] wcscat (in: _Dest=0x3f3e2b0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*" [0157.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52f00 [0157.904] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0162.149] wcscmp (_String1=".", _String2=".") returned 0 [0162.149] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd2b0220, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd2b0220, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.149] wcscmp (_String1="..", _String2=".") returned 1 [0162.149] wcscmp (_String1="..", _String2="..") returned 0 [0162.149] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2b0220, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.149] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.149] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36ecf8 [0162.149] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0162.149] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\" [0162.149] wcscat (in: _Dest=0x36ecf8, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" [0164.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini")) returned 0x20 [0164.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.113] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.113] GetLastError () returned 0x5 [0164.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 [0164.113] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0164.113] wcscmp (_String1="license.html", _String2=".") returned 1 [0164.114] wcscmp (_String1="license.html", _String2="..") returned 1 [0164.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0164.114] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE" [0164.114] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\" [0164.114] wcscat (in: _Dest=0x3d44d50, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" [0164.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html")) returned 0x20 [0164.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", dwFileAttributes=0x20) returned 0 [0164.114] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.114] GetLastError () returned 0x5 [0164.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", dwFileAttributes=0x20) returned 0 [0164.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.115] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd2d6380, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0164.115] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0164.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52f00) returned 1 [0164.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0164.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a230d0) returned 1 Thread: id = 2855 os_tid = 0x1764 [0157.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e418 [0157.905] wcscpy (in: _Dest=0x3f3e418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0157.905] wcscat (in: _Dest=0x3f3e418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\" [0157.905] wcscat (in: _Dest=0x3f3e418, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*" [0157.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55cb8 [0157.905] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74070 [0161.801] wcscmp (_String1=".", _String2=".") returned 0 [0161.801] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.801] wcscmp (_String1="..", _String2=".") returned 1 [0161.801] wcscmp (_String1="..", _String2="..") returned 0 [0161.801] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0161.801] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0161.801] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0161.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d6c0 [0161.801] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0161.801] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\" [0161.801] wcscat (in: _Dest=0x3f3d6c0, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" [0164.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini")) returned 0x20 [0164.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.776] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.776] GetLastError () returned 0x5 [0164.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini", dwFileAttributes=0x20) returned 0 [0164.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 [0164.777] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0164.777] wcscmp (_String1="license.html", _String2=".") returned 1 [0164.777] wcscmp (_String1="license.html", _String2="..") returned 1 [0164.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60fc0 [0164.777] wcscpy (in: _Dest=0x7a60fc0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR" [0164.777] wcscat (in: _Dest=0x7a60fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\" [0164.777] wcscat (in: _Dest=0x7a60fc0, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" [0164.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html")) returned 0x20 [0164.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", dwFileAttributes=0x20) returned 0 [0164.778] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.778] GetLastError () returned 0x5 [0164.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", dwFileAttributes=0x20) returned 0 [0164.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60fc0) returned 1 [0164.778] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0164.778] FindClose (in: hFindFile=0x3e74070 | out: hFindFile=0x3e74070) returned 1 [0164.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55cb8) returned 1 [0164.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0164.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a235a0) returned 1 Thread: id = 2856 os_tid = 0x1768 [0157.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e148 [0157.911] wcscpy (in: _Dest=0x3f3e148, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0157.911] wcscat (in: _Dest=0x3f3e148, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\" [0157.911] wcscat (in: _Dest=0x3f3e148, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*" [0157.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0157.911] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0162.141] wcscmp (_String1=".", _String2=".") returned 0 [0162.141] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd1a5880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd1a5880, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.141] wcscmp (_String1="..", _String2=".") returned 1 [0162.141] wcscmp (_String1="..", _String2="..") returned 0 [0162.141] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0162.141] wcscmp (_String1="eula.ini", _String2=".") returned 1 [0162.141] wcscmp (_String1="eula.ini", _String2="..") returned 1 [0162.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c290 [0162.142] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0162.142] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\" [0162.142] wcscat (in: _Dest=0x3f3c290, _Source="eula.ini" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" [0163.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini")) returned 0x20 [0163.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.923] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.923] GetLastError () returned 0x5 [0163.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 [0163.924] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0163.924] wcscmp (_String1="license.html", _String2=".") returned 1 [0163.924] wcscmp (_String1="license.html", _String2="..") returned 1 [0163.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44210 [0163.924] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR" [0163.924] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\" [0163.924] wcscat (in: _Dest=0x3d44210, _Source="license.html" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" [0163.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html")) returned 0x20 [0163.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", dwFileAttributes=0x20) returned 0 [0163.924] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.925] GetLastError () returned 0x5 [0163.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", dwFileAttributes=0x20) returned 0 [0163.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0163.925] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd1a5880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0163.925] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0163.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0163.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0163.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23990) returned 1 Thread: id = 2857 os_tid = 0x176c [0157.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26e08 [0157.912] wcscpy (in: _Dest=0x7a26e08, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0157.912] wcscat (in: _Dest=0x7a26e08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\" [0157.912] wcscat (in: _Dest=0x7a26e08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*" [0157.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0157.912] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfc10 [0157.912] wcscmp (_String1=".", _String2=".") returned 0 [0157.912] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.913] wcscmp (_String1="..", _String2=".") returned 1 [0157.913] wcscmp (_String1="..", _String2="..") returned 0 [0157.913] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0157.913] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2=".") returned 1 [0157.913] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2="..") returned 1 [0157.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf010 [0157.913] wcscpy (in: _Dest=0x3eaf010, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0157.913] wcscat (in: _Dest=0x3eaf010, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\" [0157.913] wcscat (in: _Dest=0x3eaf010, _Source="{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0162.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eaf010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0162.031] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0162.031] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2=".") returned 1 [0162.031] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2="..") returned 1 [0162.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7cd0 [0162.031] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device" [0162.031] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\" [0162.031] wcscat (in: _Dest=0x2ff7cd0, _Source="{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0162.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff7cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0162.033] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0162.033] FindClose (in: hFindFile=0x3dcfc10 | out: hFindFile=0x3dcfc10) returned 1 [0162.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0162.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e08) returned 1 [0162.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26158) returned 1 Thread: id = 2858 os_tid = 0x1770 [0157.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26a18 [0157.913] wcscpy (in: _Dest=0x7a26a18, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0157.914] wcscat (in: _Dest=0x7a26a18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\" [0157.914] wcscat (in: _Dest=0x7a26a18, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*" [0157.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0157.914] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0157.914] wcscmp (_String1=".", _String2=".") returned 0 [0157.914] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9ebda38, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9ebda38, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.914] wcscmp (_String1="..", _String2=".") returned 1 [0157.914] wcscmp (_String1="..", _String2="..") returned 0 [0157.914] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0157.914] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2=".") returned 1 [0157.914] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2="..") returned 1 [0157.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf740 [0157.914] wcscpy (in: _Dest=0x3eaf740, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0157.914] wcscat (in: _Dest=0x3eaf740, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\" [0157.914] wcscat (in: _Dest=0x3eaf740, _Source="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0158.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eaf740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0158.656] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0158.656] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2=".") returned 1 [0158.656] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2="..") returned 1 [0158.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6fe0 [0158.657] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task" [0158.657] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\" [0158.657] wcscat (in: _Dest=0x2ff6fe0, _Source="{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0158.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff6fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0158.658] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0158.658] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0158.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0158.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a18) returned 1 [0158.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0f40) returned 1 Thread: id = 2859 os_tid = 0x1774 [0157.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61170 [0157.915] wcscpy (in: _Dest=0x7a61170, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" [0157.915] wcscat (in: _Dest=0x7a61170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\" [0157.915] wcscat (in: _Dest=0x7a61170, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*" [0157.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53638 [0157.915] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa50 [0157.915] wcscmp (_String1=".", _String2=".") returned 0 [0157.915] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd5a12dd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d1d870, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d1d870, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.916] wcscmp (_String1="..", _String2=".") returned 1 [0157.916] wcscmp (_String1="..", _String2="..") returned 0 [0157.916] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0157.916] wcscmp (_String1="Adobe Custom Dictionary", _String2=".") returned 1 [0157.916] wcscmp (_String1="Adobe Custom Dictionary", _String2="..") returned 1 [0157.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65ad8 [0157.916] wcscpy (in: _Dest=0x3e65ad8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" [0157.916] wcscat (in: _Dest=0x3e65ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\" [0157.916] wcscat (in: _Dest=0x3e65ad8, _Source="Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0167.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e65ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0167.770] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0167.770] FindClose (in: hFindFile=0x3dcfa50 | out: hFindFile=0x3dcfa50) returned 1 [0167.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53638) returned 1 [0167.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61170) returned 1 [0167.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44840) returned 1 Thread: id = 2860 os_tid = 0x1778 [0157.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.tur")) returned 0x20 [0157.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR", dwFileAttributes=0x20) returned 0 [0157.919] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.919] GetLastError () returned 0x5 [0157.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR", dwFileAttributes=0x20) returned 0 [0157.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 2861 os_tid = 0x177c [0157.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr")) returned 0x20 [0157.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR", dwFileAttributes=0x20) returned 0 [0157.921] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" (normalized: "c:\\program files\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.921] GetLastError () returned 0x5 [0157.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR", dwFileAttributes=0x20) returned 0 [0157.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a615f0) returned 1 Thread: id = 2862 os_tid = 0x1780 [0157.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf")) returned 0x20 [0157.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF", dwFileAttributes=0x20) returned 0 [0157.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.923] GetLastError () returned 0x5 [0157.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF", dwFileAttributes=0x20) returned 0 [0157.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 2863 os_tid = 0x1784 [0157.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf")) returned 0x20 [0157.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF", dwFileAttributes=0x20) returned 0 [0157.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.925] GetLastError () returned 0x5 [0157.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF", dwFileAttributes=0x20) returned 0 [0157.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 2864 os_tid = 0x1788 [0157.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf")) returned 0x20 [0157.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF", dwFileAttributes=0x20) returned 0 [0157.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0157.928] GetLastError () returned 0x5 [0157.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF", dwFileAttributes=0x20) returned 0 [0157.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 2865 os_tid = 0x178c [0157.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf")) returned 0x20 [0158.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF", dwFileAttributes=0x20) returned 0 [0158.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.377] GetLastError () returned 0x5 [0158.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF", dwFileAttributes=0x20) returned 0 [0158.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 2866 os_tid = 0x1790 [0157.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf")) returned 0x20 [0158.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF", dwFileAttributes=0x20) returned 0 [0158.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.379] GetLastError () returned 0x5 [0158.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF", dwFileAttributes=0x20) returned 0 [0158.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 2867 os_tid = 0x1794 [0157.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf")) returned 0x20 [0158.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF", dwFileAttributes=0x20) returned 0 [0158.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.380] GetLastError () returned 0x5 [0158.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF", dwFileAttributes=0x20) returned 0 [0158.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 Thread: id = 2868 os_tid = 0x1798 [0157.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf")) returned 0x20 [0158.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF", dwFileAttributes=0x20) returned 0 [0158.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.388] GetLastError () returned 0x5 [0158.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF", dwFileAttributes=0x20) returned 0 [0158.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 2869 os_tid = 0x179c [0157.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif")) returned 0x20 [0158.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF", dwFileAttributes=0x20) returned 0 [0158.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.389] GetLastError () returned 0x5 [0158.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF", dwFileAttributes=0x20) returned 0 [0158.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 2870 os_tid = 0x17dc [0157.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg")) returned 0x20 [0158.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG", dwFileAttributes=0x20) returned 0 [0158.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.390] GetLastError () returned 0x5 [0158.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG", dwFileAttributes=0x20) returned 0 [0158.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 2871 os_tid = 0x17e0 [0157.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf")) returned 0x20 [0158.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF", dwFileAttributes=0x20) returned 0 [0158.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.391] GetLastError () returned 0x5 [0158.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF", dwFileAttributes=0x20) returned 0 [0158.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 2872 os_tid = 0x17e4 [0157.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf")) returned 0x20 [0158.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF", dwFileAttributes=0x20) returned 0 [0158.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.392] GetLastError () returned 0x5 [0158.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF", dwFileAttributes=0x20) returned 0 [0158.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 2873 os_tid = 0x17e8 [0157.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf")) returned 0x20 [0158.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF", dwFileAttributes=0x20) returned 0 [0158.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.392] GetLastError () returned 0x5 [0158.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF", dwFileAttributes=0x20) returned 0 [0158.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 2874 os_tid = 0x17ec [0157.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf")) returned 0x20 [0158.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF", dwFileAttributes=0x20) returned 0 [0158.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.393] GetLastError () returned 0x5 [0158.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF", dwFileAttributes=0x20) returned 0 [0158.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 2875 os_tid = 0x17f0 [0157.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf")) returned 0x20 [0158.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF", dwFileAttributes=0x20) returned 0 [0158.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.394] GetLastError () returned 0x5 [0158.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF", dwFileAttributes=0x20) returned 0 [0158.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 2876 os_tid = 0x17f4 [0157.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf")) returned 0x20 [0158.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF", dwFileAttributes=0x20) returned 0 [0158.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.395] GetLastError () returned 0x5 [0158.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF", dwFileAttributes=0x20) returned 0 [0158.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 2877 os_tid = 0x17f8 [0157.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf")) returned 0x20 [0158.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF", dwFileAttributes=0x20) returned 0 [0158.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.396] GetLastError () returned 0x5 [0158.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF", dwFileAttributes=0x20) returned 0 [0158.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 2878 os_tid = 0x17fc [0157.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf")) returned 0x20 [0158.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF", dwFileAttributes=0x20) returned 0 [0158.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.397] GetLastError () returned 0x5 [0158.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF", dwFileAttributes=0x20) returned 0 [0158.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 2879 os_tid = 0x7ac [0157.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf")) returned 0x20 [0158.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF", dwFileAttributes=0x20) returned 0 [0158.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.397] GetLastError () returned 0x5 [0158.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF", dwFileAttributes=0x20) returned 0 [0158.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 2880 os_tid = 0xc14 [0157.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf")) returned 0x20 [0158.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF", dwFileAttributes=0x20) returned 0 [0158.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.398] GetLastError () returned 0x5 [0158.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF", dwFileAttributes=0x20) returned 0 [0158.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 2881 os_tid = 0xc10 [0157.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf")) returned 0x20 [0158.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF", dwFileAttributes=0x20) returned 0 [0158.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.399] GetLastError () returned 0x5 [0158.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF", dwFileAttributes=0x20) returned 0 [0158.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 2882 os_tid = 0xf64 [0157.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf")) returned 0x20 [0158.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF", dwFileAttributes=0x20) returned 0 [0158.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.400] GetLastError () returned 0x5 [0158.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF", dwFileAttributes=0x20) returned 0 [0158.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 2883 os_tid = 0x74c [0157.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf")) returned 0x20 [0158.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF", dwFileAttributes=0x20) returned 0 [0158.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.401] GetLastError () returned 0x5 [0158.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF", dwFileAttributes=0x20) returned 0 [0158.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f3e0) returned 1 Thread: id = 2884 os_tid = 0xb00 [0157.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf")) returned 0x20 [0158.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF", dwFileAttributes=0x20) returned 0 [0158.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.402] GetLastError () returned 0x5 [0158.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF", dwFileAttributes=0x20) returned 0 [0158.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 2885 os_tid = 0x1804 [0157.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf")) returned 0x20 [0158.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF", dwFileAttributes=0x20) returned 0 [0158.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.406] GetLastError () returned 0x5 [0158.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF", dwFileAttributes=0x20) returned 0 [0158.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 Thread: id = 2886 os_tid = 0x1808 [0157.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf")) returned 0x20 [0158.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF", dwFileAttributes=0x20) returned 0 [0158.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.171] GetLastError () returned 0x5 [0158.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF", dwFileAttributes=0x20) returned 0 [0158.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 2887 os_tid = 0x180c [0157.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf")) returned 0x20 [0158.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF", dwFileAttributes=0x20) returned 0 [0158.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.173] GetLastError () returned 0x5 [0158.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF", dwFileAttributes=0x20) returned 0 [0158.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 2888 os_tid = 0x1810 [0158.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf")) returned 0x20 [0158.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF", dwFileAttributes=0x20) returned 0 [0158.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.179] GetLastError () returned 0x5 [0158.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF", dwFileAttributes=0x20) returned 0 [0158.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 2889 os_tid = 0x1814 [0158.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak")) returned 0x20 [0158.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak", dwFileAttributes=0x20) returned 0 [0158.181] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.181] GetLastError () returned 0x5 [0158.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak", dwFileAttributes=0x20) returned 0 [0158.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64e38) returned 1 Thread: id = 2890 os_tid = 0x1818 [0158.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak")) returned 0x20 [0158.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak", dwFileAttributes=0x20) returned 0 [0158.183] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.183] GetLastError () returned 0x5 [0158.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak", dwFileAttributes=0x20) returned 0 [0158.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6448) returned 1 Thread: id = 2891 os_tid = 0x181c [0158.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak")) returned 0x20 [0158.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak", dwFileAttributes=0x20) returned 0 [0158.873] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.874] GetLastError () returned 0x5 [0158.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak", dwFileAttributes=0x20) returned 0 [0158.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5b60) returned 1 Thread: id = 2892 os_tid = 0x1820 [0158.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak")) returned 0x20 [0158.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak", dwFileAttributes=0x20) returned 0 [0158.875] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.875] GetLastError () returned 0x5 [0158.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak", dwFileAttributes=0x20) returned 0 [0158.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad64e0) returned 1 Thread: id = 2893 os_tid = 0x1824 [0158.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak")) returned 0x20 [0158.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak", dwFileAttributes=0x20) returned 0 [0158.877] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.877] GetLastError () returned 0x5 [0158.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak", dwFileAttributes=0x20) returned 0 [0158.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5608) returned 1 Thread: id = 2894 os_tid = 0x1828 [0158.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak")) returned 0x20 [0158.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak", dwFileAttributes=0x20) returned 0 [0158.878] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.878] GetLastError () returned 0x5 [0158.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak", dwFileAttributes=0x20) returned 0 [0158.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5bf8) returned 1 Thread: id = 2895 os_tid = 0x1850 [0158.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak")) returned 0x20 [0158.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak", dwFileAttributes=0x20) returned 0 [0158.880] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.880] GetLastError () returned 0x5 [0158.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak", dwFileAttributes=0x20) returned 0 [0158.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5998) returned 1 Thread: id = 2896 os_tid = 0x1854 [0158.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak")) returned 0x20 [0158.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak", dwFileAttributes=0x20) returned 0 [0158.881] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.881] GetLastError () returned 0x5 [0158.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak", dwFileAttributes=0x20) returned 0 [0158.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 Thread: id = 2897 os_tid = 0x1858 [0158.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak")) returned 0x20 [0158.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak", dwFileAttributes=0x20) returned 0 [0158.883] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.883] GetLastError () returned 0x5 [0158.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak", dwFileAttributes=0x20) returned 0 [0158.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6a38) returned 1 Thread: id = 2898 os_tid = 0x185c [0158.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak")) returned 0x20 [0158.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak", dwFileAttributes=0x20) returned 0 [0158.885] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.885] GetLastError () returned 0x5 [0158.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak", dwFileAttributes=0x20) returned 0 [0158.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad63b0) returned 1 Thread: id = 2899 os_tid = 0x1860 [0158.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak")) returned 0x20 [0158.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak", dwFileAttributes=0x20) returned 0 [0158.886] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.886] GetLastError () returned 0x5 [0158.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak", dwFileAttributes=0x20) returned 0 [0158.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5148) returned 1 Thread: id = 2900 os_tid = 0x1864 [0158.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak")) returned 0x20 [0158.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak", dwFileAttributes=0x20) returned 0 [0158.888] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.888] GetLastError () returned 0x5 [0158.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak", dwFileAttributes=0x20) returned 0 [0158.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 2901 os_tid = 0x1868 [0158.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak")) returned 0x20 [0158.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak", dwFileAttributes=0x20) returned 0 [0158.889] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.889] GetLastError () returned 0x5 [0158.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak", dwFileAttributes=0x20) returned 0 [0158.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 2902 os_tid = 0x186c [0158.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak")) returned 0x20 [0158.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak", dwFileAttributes=0x20) returned 0 [0158.890] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.891] GetLastError () returned 0x5 [0158.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak", dwFileAttributes=0x20) returned 0 [0158.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c00) returned 1 Thread: id = 2903 os_tid = 0x1870 [0158.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak")) returned 0x20 [0158.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak", dwFileAttributes=0x20) returned 0 [0158.892] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.892] GetLastError () returned 0x5 [0158.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak", dwFileAttributes=0x20) returned 0 [0158.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d8) returned 1 Thread: id = 2904 os_tid = 0x1874 [0158.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak")) returned 0x20 [0158.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak", dwFileAttributes=0x20) returned 0 [0158.893] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.893] GetLastError () returned 0x5 [0158.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak", dwFileAttributes=0x20) returned 0 [0158.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6740) returned 1 Thread: id = 2905 os_tid = 0x1878 [0158.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak")) returned 0x20 [0158.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak", dwFileAttributes=0x20) returned 0 [0158.895] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.895] GetLastError () returned 0x5 [0158.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak", dwFileAttributes=0x20) returned 0 [0158.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5310) returned 1 Thread: id = 2906 os_tid = 0x187c [0158.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak")) returned 0x20 [0158.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak", dwFileAttributes=0x20) returned 0 [0158.896] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.896] GetLastError () returned 0x5 [0158.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak", dwFileAttributes=0x20) returned 0 [0158.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6d30) returned 1 Thread: id = 2907 os_tid = 0x1880 [0158.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak")) returned 0x20 [0158.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak", dwFileAttributes=0x20) returned 0 [0158.897] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.897] GetLastError () returned 0x5 [0158.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak", dwFileAttributes=0x20) returned 0 [0158.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c98) returned 1 Thread: id = 2908 os_tid = 0x1884 [0158.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak")) returned 0x20 [0158.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak", dwFileAttributes=0x20) returned 0 [0158.899] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.899] GetLastError () returned 0x5 [0158.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak", dwFileAttributes=0x20) returned 0 [0158.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6908) returned 1 Thread: id = 2909 os_tid = 0x1894 [0158.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak")) returned 0x20 [0158.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak", dwFileAttributes=0x20) returned 0 [0158.900] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.900] GetLastError () returned 0x5 [0158.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak", dwFileAttributes=0x20) returned 0 [0158.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad60b8) returned 1 Thread: id = 2910 os_tid = 0x1898 [0158.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak")) returned 0x20 [0158.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak", dwFileAttributes=0x20) returned 0 [0158.416] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.416] GetLastError () returned 0x5 [0158.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak", dwFileAttributes=0x20) returned 0 [0158.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5f88) returned 1 Thread: id = 2911 os_tid = 0x189c [0158.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak")) returned 0x20 [0158.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak", dwFileAttributes=0x20) returned 0 [0158.417] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.417] GetLastError () returned 0x5 [0158.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak", dwFileAttributes=0x20) returned 0 [0158.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6ad0) returned 1 Thread: id = 2912 os_tid = 0x18a0 [0158.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak")) returned 0x20 [0158.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak", dwFileAttributes=0x20) returned 0 [0158.433] CreateFileW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.433] GetLastError () returned 0x5 [0158.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak", dwFileAttributes=0x20) returned 0 [0158.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5ef0) returned 1 Thread: id = 2914 os_tid = 0x18b4 [0158.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf")) returned 0x20 [0158.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.482] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.482] GetLastError () returned 0x5 [0158.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7aa8) returned 1 Thread: id = 2915 os_tid = 0x18c0 [0158.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf")) returned 0x20 [0158.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0158.484] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.484] GetLastError () returned 0x5 [0158.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0158.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 2916 os_tid = 0x18c4 [0158.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf")) returned 0x20 [0158.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0158.461] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.462] GetLastError () returned 0x5 [0158.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0158.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf238) returned 1 Thread: id = 2917 os_tid = 0x18cc [0158.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf")) returned 0x20 [0158.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0158.462] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.463] GetLastError () returned 0x5 [0158.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0158.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d405d8) returned 1 Thread: id = 2918 os_tid = 0x18d4 [0158.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf")) returned 0x20 [0158.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.449] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.449] GetLastError () returned 0x5 [0158.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0158.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eafad8) returned 1 Thread: id = 2919 os_tid = 0x18d8 [0158.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf")) returned 0x20 [0158.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0158.452] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.452] GetLastError () returned 0x5 [0158.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0158.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 2920 os_tid = 0x18dc [0158.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf")) returned 0x20 [0158.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0158.454] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.454] GetLastError () returned 0x5 [0158.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0158.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf460) returned 1 Thread: id = 2921 os_tid = 0x18e0 [0158.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf")) returned 0x20 [0158.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0158.455] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.455] GetLastError () returned 0x5 [0158.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0158.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaec78) returned 1 Thread: id = 2922 os_tid = 0x18e4 [0158.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf")) returned 0x20 [0158.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0158.459] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.459] GetLastError () returned 0x5 [0158.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0158.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf5d0) returned 1 Thread: id = 2923 os_tid = 0x18e8 [0158.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf")) returned 0x20 [0158.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0158.460] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.460] GetLastError () returned 0x5 [0158.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0158.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ce0) returned 1 Thread: id = 2924 os_tid = 0x18ec [0158.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq")) returned 0x20 [0158.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ", dwFileAttributes=0x20) returned 0 [0158.469] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.469] GetLastError () returned 0x5 [0158.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ", dwFileAttributes=0x20) returned 0 [0158.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 Thread: id = 2925 os_tid = 0x18f4 [0158.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq")) returned 0x20 [0158.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ", dwFileAttributes=0x20) returned 0 [0158.496] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.496] GetLastError () returned 0x5 [0158.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ", dwFileAttributes=0x20) returned 0 [0158.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a615f0) returned 1 Thread: id = 2926 os_tid = 0x18f8 [0158.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq")) returned 0x20 [0158.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ", dwFileAttributes=0x20) returned 0 [0158.507] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.507] GetLastError () returned 0x5 [0158.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ", dwFileAttributes=0x20) returned 0 [0158.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63170) returned 1 Thread: id = 2927 os_tid = 0x1900 [0158.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq")) returned 0x20 [0158.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ", dwFileAttributes=0x20) returned 0 [0158.506] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.506] GetLastError () returned 0x5 [0158.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ", dwFileAttributes=0x20) returned 0 [0158.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a606c0) returned 1 Thread: id = 2928 os_tid = 0x1904 [0158.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq")) returned 0x20 [0158.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ", dwFileAttributes=0x20) returned 0 [0158.505] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.506] GetLastError () returned 0x5 [0158.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ", dwFileAttributes=0x20) returned 0 [0158.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6448) returned 1 Thread: id = 2929 os_tid = 0x190c [0158.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq")) returned 0x20 [0158.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ", dwFileAttributes=0x20) returned 0 [0158.505] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.505] GetLastError () returned 0x5 [0158.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ", dwFileAttributes=0x20) returned 0 [0158.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60240) returned 1 Thread: id = 2930 os_tid = 0x1910 [0158.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq")) returned 0x20 [0158.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ", dwFileAttributes=0x20) returned 0 [0158.503] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.503] GetLastError () returned 0x5 [0158.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ", dwFileAttributes=0x20) returned 0 [0158.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 Thread: id = 2931 os_tid = 0x1918 [0158.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq")) returned 0x20 [0158.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ", dwFileAttributes=0x20) returned 0 [0158.502] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.502] GetLastError () returned 0x5 [0158.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ", dwFileAttributes=0x20) returned 0 [0158.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 2932 os_tid = 0x191c [0158.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq")) returned 0x20 [0158.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ", dwFileAttributes=0x20) returned 0 [0158.501] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.501] GetLastError () returned 0x5 [0158.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ", dwFileAttributes=0x20) returned 0 [0158.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a605a0) returned 1 Thread: id = 2933 os_tid = 0x1920 [0158.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq")) returned 0x20 [0158.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ", dwFileAttributes=0x20) returned 0 [0158.508] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.508] GetLastError () returned 0x5 [0158.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ", dwFileAttributes=0x20) returned 0 [0158.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60870) returned 1 Thread: id = 2934 os_tid = 0x1924 [0158.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq")) returned 0x20 [0158.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ", dwFileAttributes=0x20) returned 0 [0158.500] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.500] GetLastError () returned 0x5 [0158.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ", dwFileAttributes=0x20) returned 0 [0158.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 2935 os_tid = 0x1928 [0158.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq")) returned 0x20 [0158.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ", dwFileAttributes=0x20) returned 0 [0158.499] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.499] GetLastError () returned 0x5 [0158.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ", dwFileAttributes=0x20) returned 0 [0158.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62bd0) returned 1 Thread: id = 2936 os_tid = 0x1930 [0158.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq")) returned 0x20 [0158.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ", dwFileAttributes=0x20) returned 0 [0158.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.498] GetLastError () returned 0x5 [0158.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ", dwFileAttributes=0x20) returned 0 [0158.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5c90) returned 1 Thread: id = 2937 os_tid = 0x1934 [0158.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq")) returned 0x20 [0158.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ", dwFileAttributes=0x20) returned 0 [0158.497] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.497] GetLastError () returned 0x5 [0158.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ", dwFileAttributes=0x20) returned 0 [0158.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60360) returned 1 Thread: id = 2938 os_tid = 0x1938 [0158.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq")) returned 0x20 [0158.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ", dwFileAttributes=0x20) returned 0 [0158.495] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.495] GetLastError () returned 0x5 [0158.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ", dwFileAttributes=0x20) returned 0 [0158.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a602d0) returned 1 Thread: id = 2939 os_tid = 0x1940 [0158.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq")) returned 0x20 [0158.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ", dwFileAttributes=0x20) returned 0 [0158.493] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.493] GetLastError () returned 0x5 [0158.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ", dwFileAttributes=0x20) returned 0 [0158.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 Thread: id = 2940 os_tid = 0x1944 [0158.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq")) returned 0x20 [0158.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ", dwFileAttributes=0x20) returned 0 [0158.512] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.512] GetLastError () returned 0x5 [0158.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ", dwFileAttributes=0x20) returned 0 [0158.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6150) returned 1 Thread: id = 2941 os_tid = 0x1948 [0158.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq")) returned 0x20 [0158.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ", dwFileAttributes=0x20) returned 0 [0158.511] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.512] GetLastError () returned 0x5 [0158.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ", dwFileAttributes=0x20) returned 0 [0158.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60480) returned 1 Thread: id = 2942 os_tid = 0x194c [0158.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq")) returned 0x20 [0158.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ", dwFileAttributes=0x20) returned 0 [0158.511] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.511] GetLastError () returned 0x5 [0158.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ", dwFileAttributes=0x20) returned 0 [0158.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5900) returned 1 Thread: id = 2943 os_tid = 0x1954 [0158.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq")) returned 0x20 [0158.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ", dwFileAttributes=0x20) returned 0 [0158.510] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.510] GetLastError () returned 0x5 [0158.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ", dwFileAttributes=0x20) returned 0 [0158.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60630) returned 1 Thread: id = 2944 os_tid = 0x1958 [0158.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq")) returned 0x20 [0158.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ", dwFileAttributes=0x20) returned 0 [0158.509] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.509] GetLastError () returned 0x5 [0158.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ", dwFileAttributes=0x20) returned 0 [0158.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60e10) returned 1 Thread: id = 2945 os_tid = 0x1964 [0158.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60ab0 [0158.901] wcscpy (in: _Dest=0x7a60ab0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0158.901] wcscat (in: _Dest=0x7a60ab0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\" [0158.901] wcscat (in: _Dest=0x7a60ab0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*" [0158.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0158.901] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0158.902] wcscmp (_String1=".", _String2=".") returned 0 [0158.902] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.902] wcscmp (_String1="..", _String2=".") returned 1 [0158.902] wcscmp (_String1="..", _String2="..") returned 0 [0158.902] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9251, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0158.902] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0158.902] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0158.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053fa8 [0158.902] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0158.902] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\" [0158.902] wcscat (in: _Dest=0x3053fa8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" [0164.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx")) returned 0x20 [0164.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0164.531] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.531] GetLastError () returned 0x5 [0164.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0164.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 [0164.531] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0164.532] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0164.532] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0164.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053fa8 [0164.532] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services" [0164.532] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\" [0164.532] wcscat (in: _Dest=0x3053fa8, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" [0164.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx")) returned 0x20 [0164.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.532] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.533] GetLastError () returned 0x5 [0164.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 [0164.533] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329cbb00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x329cbb00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0164.533] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0164.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0164.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60ab0) returned 1 [0164.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 2946 os_tid = 0x1968 [0158.905] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\9afbe2b74032.68814f" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\9afbe2b74032.68814f")) returned 0x2026 [0158.905] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\9afbe2b74032.68814f", dwFileAttributes=0x20) returned 1 [0161.526] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\9afbe2b74032.68814f" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\9afbe2b74032.68814f"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13ec [0161.527] GetFileSizeEx (in: hFile=0x13ec, lpFileSize=0xc1ff85c | out: lpFileSize=0xc1ff85c*=286) returned 1 [0161.527] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0161.527] ReadFile (in: hFile=0x13ec, lpBuffer=0xc1ff838, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc1ff848, lpOverlapped=0x0 | out: lpBuffer=0xc1ff838*, lpNumberOfBytesRead=0xc1ff848*=0x4, lpOverlapped=0x0) returned 1 [0161.529] FlushFileBuffers (hFile=0x13ec) returned 1 [0162.471] CloseHandle (hObject=0x13ec) returned 1 [0162.471] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\9afbe2b74032.68814f", dwFileAttributes=0x2026) returned 1 [0163.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d638) returned 1 Thread: id = 2947 os_tid = 0x196c [0158.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a26a18 [0158.912] wcscpy (in: _Dest=0x7a26a18, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache" [0158.912] wcscat (in: _Dest=0x7a26a18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\" [0158.912] wcscat (in: _Dest=0x7a26a18, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*" [0158.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3560 [0158.912] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0158.913] wcscmp (_String1=".", _String2=".") returned 0 [0158.913] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.913] wcscmp (_String1="..", _String2=".") returned 1 [0158.913] wcscmp (_String1="..", _String2="..") returned 0 [0158.913] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0158.913] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0158.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3560) returned 1 [0158.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a18) returned 1 [0158.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47b30) returned 1 Thread: id = 2948 os_tid = 0x1970 [0158.916] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\drmstore.hds")) returned 0x20 [0159.208] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0x20) returned 1 [0161.819] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\drmstore.hds"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.819] GetLastError () returned 0x20 [0161.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x309fd58 [0161.820] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0161.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309fd58) returned 1 [0161.820] RtlReAllocateHeap (Heap=0x280000, Flags=0x8, Ptr=0x7a348b0, Size=0x20) returned 0x3e53b98 [0161.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e850 [0161.820] wcscpy (in: _Dest=0x3f3e850, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" [0161.820] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0x20) returned 1 [0163.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 Thread: id = 2949 os_tid = 0x1974 [0158.921] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.bla")) returned 0xffffffff [0158.921] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0x20) returned 0 [0158.921] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.bla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.921] GetLastError () returned 0x2 [0158.921] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.bla", dwFileAttributes=0xffffffff) returned 0 [0158.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26778) returned 1 Thread: id = 2950 os_tid = 0x1978 [0158.928] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.sec")) returned 0xffffffff [0158.928] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec", dwFileAttributes=0x20) returned 0 [0158.928] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\v3ks.sec"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.928] GetLastError () returned 0x2 [0158.928] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\v3ks.sec", dwFileAttributes=0xffffffff) returned 0 [0158.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26708) returned 1 Thread: id = 2951 os_tid = 0x197c [0158.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt")) returned 0x20 [0158.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", dwFileAttributes=0x20) returned 0 [0158.932] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.932] GetLastError () returned 0x5 [0158.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT", dwFileAttributes=0x20) returned 0 [0158.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf2f0) returned 1 Thread: id = 2952 os_tid = 0x1980 [0158.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt")) returned 0x20 [0161.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", dwFileAttributes=0x20) returned 0 [0161.458] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.460] GetLastError () returned 0x5 [0161.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", dwFileAttributes=0x20) returned 0 [0161.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 Thread: id = 2953 os_tid = 0x1984 [0158.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt")) returned 0x20 [0161.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", dwFileAttributes=0x20) returned 0 [0161.461] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.461] GetLastError () returned 0x5 [0161.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT", dwFileAttributes=0x20) returned 0 [0161.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 Thread: id = 2954 os_tid = 0x1988 [0158.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt")) returned 0x20 [0161.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", dwFileAttributes=0x20) returned 0 [0161.463] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.463] GetLastError () returned 0x5 [0161.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT", dwFileAttributes=0x20) returned 0 [0161.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 Thread: id = 2955 os_tid = 0x198c [0158.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt")) returned 0x20 [0161.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", dwFileAttributes=0x20) returned 0 [0161.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.467] GetLastError () returned 0x5 [0161.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", dwFileAttributes=0x20) returned 0 [0161.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66918) returned 1 Thread: id = 2956 os_tid = 0x1990 [0158.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt")) returned 0x20 [0161.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", dwFileAttributes=0x20) returned 0 [0161.469] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.469] GetLastError () returned 0x5 [0161.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", dwFileAttributes=0x20) returned 0 [0161.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 Thread: id = 2957 os_tid = 0x1994 [0158.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt")) returned 0x20 [0161.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", dwFileAttributes=0x20) returned 0 [0161.470] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.471] GetLastError () returned 0x5 [0161.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", dwFileAttributes=0x20) returned 0 [0161.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 Thread: id = 2958 os_tid = 0x1998 [0158.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt")) returned 0x20 [0159.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", dwFileAttributes=0x20) returned 0 [0159.740] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.740] GetLastError () returned 0x5 [0159.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT", dwFileAttributes=0x20) returned 0 [0159.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7aa8) returned 1 Thread: id = 2959 os_tid = 0x199c [0158.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt")) returned 0x20 [0159.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", dwFileAttributes=0x20) returned 0 [0159.738] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.738] GetLastError () returned 0x5 [0159.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", dwFileAttributes=0x20) returned 0 [0159.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 2960 os_tid = 0x19a0 [0158.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt")) returned 0x20 [0159.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", dwFileAttributes=0x20) returned 0 [0159.662] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.672] GetLastError () returned 0x5 [0159.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT", dwFileAttributes=0x20) returned 0 [0159.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7208) returned 1 Thread: id = 2961 os_tid = 0x19a4 [0158.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt")) returned 0x20 [0161.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", dwFileAttributes=0x20) returned 0 [0161.484] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.484] GetLastError () returned 0x5 [0161.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", dwFileAttributes=0x20) returned 0 [0161.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 Thread: id = 2962 os_tid = 0x19ac [0158.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt")) returned 0x20 [0161.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", dwFileAttributes=0x20) returned 0 [0161.483] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.483] GetLastError () returned 0x5 [0161.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT", dwFileAttributes=0x20) returned 0 [0161.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66618) returned 1 Thread: id = 2963 os_tid = 0x19b0 [0158.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt")) returned 0x20 [0161.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", dwFileAttributes=0x20) returned 0 [0161.481] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.481] GetLastError () returned 0x5 [0161.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT", dwFileAttributes=0x20) returned 0 [0161.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 2964 os_tid = 0x19b4 [0158.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt")) returned 0x20 [0161.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", dwFileAttributes=0x20) returned 0 [0161.480] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.480] GetLastError () returned 0x5 [0161.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", dwFileAttributes=0x20) returned 0 [0161.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff74e8) returned 1 Thread: id = 2965 os_tid = 0x19b8 [0158.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt")) returned 0x20 [0161.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", dwFileAttributes=0x20) returned 0 [0161.479] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.479] GetLastError () returned 0x5 [0161.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", dwFileAttributes=0x20) returned 0 [0161.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66798) returned 1 Thread: id = 2966 os_tid = 0x19bc [0158.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt")) returned 0x20 [0161.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", dwFileAttributes=0x20) returned 0 [0161.477] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.477] GetLastError () returned 0x5 [0161.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", dwFileAttributes=0x20) returned 0 [0161.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 Thread: id = 2967 os_tid = 0x19c0 [0158.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt")) returned 0x20 [0161.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", dwFileAttributes=0x20) returned 0 [0161.476] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.476] GetLastError () returned 0x5 [0161.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT", dwFileAttributes=0x20) returned 0 [0161.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 2968 os_tid = 0x19c4 [0158.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt")) returned 0x20 [0161.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", dwFileAttributes=0x20) returned 0 [0161.474] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.474] GetLastError () returned 0x5 [0161.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", dwFileAttributes=0x20) returned 0 [0161.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66a98) returned 1 Thread: id = 2969 os_tid = 0x19c8 [0158.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt")) returned 0x20 [0161.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", dwFileAttributes=0x20) returned 0 [0161.472] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.472] GetLastError () returned 0x5 [0161.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", dwFileAttributes=0x20) returned 0 [0161.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66498) returned 1 Thread: id = 2970 os_tid = 0x19cc [0158.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg")) returned 0x20 [0158.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0158.942] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.942] GetLastError () returned 0x5 [0158.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0158.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6ef8) returned 1 Thread: id = 2971 os_tid = 0x19d0 [0158.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg")) returned 0x20 [0158.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0158.944] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.944] GetLastError () returned 0x5 [0158.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0158.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6f90) returned 1 Thread: id = 2972 os_tid = 0x19d4 [0158.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat")) returned 0x20 [0161.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT", dwFileAttributes=0x20) returned 0 [0161.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.709] GetLastError () returned 0x5 [0161.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT", dwFileAttributes=0x20) returned 0 [0161.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 Thread: id = 2973 os_tid = 0x19d8 [0158.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a26708 [0158.946] wcscpy (in: _Dest=0x7a26708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0158.946] wcscat (in: _Dest=0x7a26708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0158.946] wcscat (in: _Dest=0x7a26708, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*" [0158.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3560 [0158.946] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76cf2450, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923d3c90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0162.153] wcscmp (_String1=".", _String2=".") returned 0 [0162.153] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76cf2450, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x923d3c90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.153] wcscmp (_String1="..", _String2=".") returned 1 [0162.153] wcscmp (_String1="..", _String2="..") returned 0 [0162.153] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccb9f00, ftCreationTime.dwHighDateTime=0x1bd8b1c, ftLastAccessTime.dwLowDateTime=0x8589a650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ccb9f00, ftLastWriteTime.dwHighDateTime=0x1bd8b1c, nFileSizeHigh=0x0, nFileSizeLow=0x6daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPLAUSE.WAV", cAlternateFileName="")) returned 1 [0162.153] wcscmp (_String1="APPLAUSE.WAV", _String2=".") returned 1 [0162.153] wcscmp (_String1="APPLAUSE.WAV", _String2="..") returned 1 [0162.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e588 [0162.154] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0162.154] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0162.154] wcscat (in: _Dest=0x36e588, _Source="APPLAUSE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" [0163.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0163.463] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707b9000, ftCreationTime.dwHighDateTime=0x1bfbf53, ftLastAccessTime.dwLowDateTime=0x85c065f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x707b9000, ftLastWriteTime.dwHighDateTime=0x1bfbf53, nFileSizeHigh=0x0, nFileSizeLow=0x59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROW.WAV", cAlternateFileName="")) returned 1 [0163.463] wcscmp (_String1="ARROW.WAV", _String2=".") returned 1 [0163.463] wcscmp (_String1="ARROW.WAV", _String2="..") returned 1 [0163.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a318 [0163.463] wcscpy (in: _Dest=0x3e1a318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.463] wcscat (in: _Dest=0x3e1a318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.463] wcscat (in: _Dest=0x3e1a318, _Source="ARROW.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" [0163.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0163.465] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ac4900, ftCreationTime.dwHighDateTime=0x1bfbf50, ftLastAccessTime.dwLowDateTime=0x76cf2450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25ac4900, ftLastWriteTime.dwHighDateTime=0x1bfbf50, nFileSizeHigh=0x0, nFileSizeLow=0x2f676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOMB.WAV", cAlternateFileName="")) returned 1 [0163.465] wcscmp (_String1="BOMB.WAV", _String2=".") returned 1 [0163.465] wcscmp (_String1="BOMB.WAV", _String2="..") returned 1 [0163.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19398 [0163.465] wcscpy (in: _Dest=0x3e19398, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.465] wcscat (in: _Dest=0x3e19398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.465] wcscat (in: _Dest=0x3e19398, _Source="BOMB.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" [0163.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0163.466] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5a29200, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5a29200, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.WAV", cAlternateFileName="")) returned 1 [0163.466] wcscmp (_String1="BREEZE.WAV", _String2=".") returned 1 [0163.466] wcscmp (_String1="BREEZE.WAV", _String2="..") returned 1 [0163.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a298 [0163.466] wcscpy (in: _Dest=0x3e1a298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.466] wcscat (in: _Dest=0x3e1a298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.467] wcscat (in: _Dest=0x3e1a298, _Source="BREEZE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" [0163.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0163.468] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x76e95370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAMERA.WAV", cAlternateFileName="")) returned 1 [0163.468] wcscmp (_String1="CAMERA.WAV", _String2=".") returned 1 [0163.468] wcscmp (_String1="CAMERA.WAV", _String2="..") returned 1 [0163.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19598 [0163.468] wcscpy (in: _Dest=0x3e19598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.468] wcscat (in: _Dest=0x3e19598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.468] wcscat (in: _Dest=0x3e19598, _Source="CAMERA.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" [0163.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0163.469] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASHREG.WAV", cAlternateFileName="")) returned 1 [0163.469] wcscmp (_String1="CASHREG.WAV", _String2=".") returned 1 [0163.469] wcscmp (_String1="CASHREG.WAV", _String2="..") returned 1 [0163.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9098 [0163.470] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.470] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.470] wcscat (in: _Dest=0x3eb9098, _Source="CASHREG.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" [0163.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0163.471] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccb9f00, ftCreationTime.dwHighDateTime=0x1bd8b1c, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ccb9f00, ftLastWriteTime.dwHighDateTime=0x1bd8b1c, nFileSizeHigh=0x0, nFileSizeLow=0x91be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHIMES.WAV", cAlternateFileName="")) returned 1 [0163.471] wcscmp (_String1="CHIMES.WAV", _String2=".") returned 1 [0163.471] wcscmp (_String1="CHIMES.WAV", _String2="..") returned 1 [0163.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a718 [0163.471] wcscpy (in: _Dest=0x3e1a718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.471] wcscat (in: _Dest=0x3e1a718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.471] wcscat (in: _Dest=0x3e1a718, _Source="CHIMES.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" [0163.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0163.472] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94f21c00, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94f21c00, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLICK.WAV", cAlternateFileName="")) returned 1 [0163.473] wcscmp (_String1="CLICK.WAV", _String2=".") returned 1 [0163.473] wcscmp (_String1="CLICK.WAV", _String2="..") returned 1 [0163.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19098 [0163.473] wcscpy (in: _Dest=0x3e19098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.473] wcscat (in: _Dest=0x3e19098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.473] wcscat (in: _Dest=0x3e19098, _Source="CLICK.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" [0163.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0163.474] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8441a600, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8441a600, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COIN.WAV", cAlternateFileName="")) returned 1 [0163.474] wcscmp (_String1="COIN.WAV", _String2=".") returned 1 [0163.474] wcscmp (_String1="COIN.WAV", _String2="..") returned 1 [0163.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a018 [0163.474] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.474] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.474] wcscat (in: _Dest=0x3e1a018, _Source="COIN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" [0163.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0163.475] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x4be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRUMROLL.WAV", cAlternateFileName="")) returned 1 [0163.475] wcscmp (_String1="DRUMROLL.WAV", _String2=".") returned 1 [0163.475] wcscmp (_String1="DRUMROLL.WAV", _String2="..") returned 1 [0163.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba440 [0163.475] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.476] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.476] wcscat (in: _Dest=0x3eba440, _Source="DRUMROLL.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" [0163.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0163.477] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x87b1e550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x5c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLODE.WAV", cAlternateFileName="")) returned 1 [0163.477] wcscmp (_String1="EXPLODE.WAV", _String2=".") returned 1 [0163.477] wcscmp (_String1="EXPLODE.WAV", _String2="..") returned 1 [0163.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba6e8 [0163.477] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.477] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.477] wcscat (in: _Dest=0x3eba6e8, _Source="EXPLODE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" [0163.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0163.478] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6b9000, ftCreationTime.dwHighDateTime=0x1bfc74c, ftLastAccessTime.dwLowDateTime=0x78d3aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d6b9000, ftLastWriteTime.dwHighDateTime=0x1bfc74c, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAMMER.WAV", cAlternateFileName="")) returned 1 [0163.478] wcscmp (_String1="HAMMER.WAV", _String2=".") returned 1 [0163.478] wcscmp (_String1="HAMMER.WAV", _String2="..") returned 1 [0163.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a618 [0163.478] wcscpy (in: _Dest=0x3e1a618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.478] wcscat (in: _Dest=0x3e1a618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.478] wcscat (in: _Dest=0x3e1a618, _Source="HAMMER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" [0163.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0163.480] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x72d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0163.480] wcscmp (_String1="LASER.WAV", _String2=".") returned 1 [0163.480] wcscmp (_String1="LASER.WAV", _String2="..") returned 1 [0163.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a218 [0163.480] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.480] wcscat (in: _Dest=0x3e1a218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.480] wcscat (in: _Dest=0x3e1a218, _Source="LASER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" [0163.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0163.486] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89eabc00, ftCreationTime.dwHighDateTime=0x1bfc74b, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x89eabc00, ftLastWriteTime.dwHighDateTime=0x1bfc74b, nFileSizeHigh=0x0, nFileSizeLow=0x3d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUSH.WAV", cAlternateFileName="")) returned 1 [0163.486] wcscmp (_String1="PUSH.WAV", _String2=".") returned 1 [0163.486] wcscmp (_String1="PUSH.WAV", _String2="..") returned 1 [0163.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19198 [0163.486] wcscpy (in: _Dest=0x3e19198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.486] wcscat (in: _Dest=0x3e19198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.486] wcscat (in: _Dest=0x3e19198, _Source="PUSH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" [0163.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0163.487] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3ef1e00, ftCreationTime.dwHighDateTime=0x1bfa314, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd3ef1e00, ftLastWriteTime.dwHighDateTime=0x1bfa314, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUCTION.WAV", cAlternateFileName="")) returned 1 [0163.487] wcscmp (_String1="SUCTION.WAV", _String2=".") returned 1 [0163.487] wcscmp (_String1="SUCTION.WAV", _String2="..") returned 1 [0163.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb99a0 [0163.487] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.487] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.487] wcscat (in: _Dest=0x3eb99a0, _Source="SUCTION.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" [0163.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0163.489] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccb9f00, ftCreationTime.dwHighDateTime=0x1bd8b1c, ftLastAccessTime.dwLowDateTime=0x907b58b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ccb9f00, ftLastWriteTime.dwHighDateTime=0x1bd8b1c, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TYPE.WAV", cAlternateFileName="")) returned 1 [0163.489] wcscmp (_String1="TYPE.WAV", _String2=".") returned 1 [0163.489] wcscmp (_String1="TYPE.WAV", _String2="..") returned 1 [0163.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a398 [0163.489] wcscpy (in: _Dest=0x3e1a398, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.489] wcscat (in: _Dest=0x3e1a398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.489] wcscat (in: _Dest=0x3e1a398, _Source="TYPE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" [0163.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0163.490] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82106800, ftCreationTime.dwHighDateTime=0x1bfbf52, ftLastAccessTime.dwLowDateTime=0x9227d030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x82106800, ftLastWriteTime.dwHighDateTime=0x1bfbf52, nFileSizeHigh=0x0, nFileSizeLow=0x35c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VOLTAGE.WAV", cAlternateFileName="")) returned 1 [0163.490] wcscmp (_String1="VOLTAGE.WAV", _String2=".") returned 1 [0163.490] wcscmp (_String1="VOLTAGE.WAV", _String2="..") returned 1 [0163.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba660 [0163.490] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.490] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.491] wcscat (in: _Dest=0x3eba660, _Source="VOLTAGE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" [0163.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e4 [0163.492] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0859600, ftCreationTime.dwHighDateTime=0x1bc8dab, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb0859600, ftLastWriteTime.dwHighDateTime=0x1bc8dab, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0163.492] wcscmp (_String1="WHOOSH.WAV", _String2=".") returned 1 [0163.492] wcscmp (_String1="WHOOSH.WAV", _String2="..") returned 1 [0163.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a698 [0163.492] wcscpy (in: _Dest=0x3e1a698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.492] wcscat (in: _Dest=0x3e1a698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.492] wcscat (in: _Dest=0x3e1a698, _Source="WHOOSH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" [0163.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0163.495] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72133800, ftCreationTime.dwHighDateTime=0x1bfc74b, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72133800, ftLastWriteTime.dwHighDateTime=0x1bfc74b, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 1 [0163.495] wcscmp (_String1="WIND.WAV", _String2=".") returned 1 [0163.495] wcscmp (_String1="WIND.WAV", _String2="..") returned 1 [0163.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19d18 [0163.495] wcscpy (in: _Dest=0x3e19d18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA" [0163.495] wcscat (in: _Dest=0x3e19d18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\" [0163.495] wcscat (in: _Dest=0x3e19d18, _Source="WIND.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" [0163.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0163.497] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3560 | out: lpFindFileData=0x3ef3560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72133800, ftCreationTime.dwHighDateTime=0x1bfc74b, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72133800, ftLastWriteTime.dwHighDateTime=0x1bfc74b, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 0 [0163.497] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0163.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3560) returned 1 [0163.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26708) returned 1 [0163.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e78) returned 1 Thread: id = 2974 os_tid = 0x19e0 [0158.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml")) returned 0x20 [0161.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0161.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.534] GetLastError () returned 0x5 [0161.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0161.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6150) returned 1 Thread: id = 2975 os_tid = 0x19e4 [0158.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml")) returned 0x20 [0161.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", dwFileAttributes=0x20) returned 0 [0161.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.830] GetLastError () returned 0x5 [0161.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", dwFileAttributes=0x20) returned 0 [0161.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d405d8) returned 1 Thread: id = 2976 os_tid = 0x19ec [0158.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml")) returned 0x20 [0161.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", dwFileAttributes=0x20) returned 0 [0161.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.837] GetLastError () returned 0x5 [0161.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", dwFileAttributes=0x20) returned 0 [0161.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40ce0) returned 1 Thread: id = 2977 os_tid = 0x19f0 [0158.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml")) returned 0x20 [0161.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0161.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.836] GetLastError () returned 0x5 [0161.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", dwFileAttributes=0x20) returned 0 [0161.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 2978 os_tid = 0x19f4 [0158.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml")) returned 0x20 [0161.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", dwFileAttributes=0x20) returned 0 [0161.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.834] GetLastError () returned 0x5 [0161.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", dwFileAttributes=0x20) returned 0 [0161.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e666d8) returned 1 Thread: id = 2979 os_tid = 0x1a40 [0158.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml")) returned 0x20 [0161.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", dwFileAttributes=0x20) returned 0 [0161.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.832] GetLastError () returned 0x5 [0161.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", dwFileAttributes=0x20) returned 0 [0161.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 2980 os_tid = 0x1a50 [0158.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e46d98 [0158.949] wcscpy (in: _Dest=0x3e46d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0158.949] wcscat (in: _Dest=0x3e46d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0158.949] wcscat (in: _Dest=0x3e46d98, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*" [0158.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4b08 [0158.949] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0162.140] wcscmp (_String1=".", _String2=".") returned 0 [0162.140] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1afde60, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.140] wcscmp (_String1="..", _String2=".") returned 1 [0162.140] wcscmp (_String1="..", _String2="..") returned 0 [0162.140] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaaab040, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.RUM", cAlternateFileName="ACCESS~1.RUM")) returned 1 [0162.140] wcscmp (_String1="Accessibility.RUM", _String2=".") returned 1 [0162.140] wcscmp (_String1="Accessibility.RUM", _String2="..") returned 1 [0162.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62590 [0162.141] wcscpy (in: _Dest=0x7a62590, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0162.141] wcscat (in: _Dest=0x7a62590, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0162.141] wcscat (in: _Dest=0x7a62590, _Source="Accessibility.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" [0163.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum")) returned 0x20 [0163.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM", dwFileAttributes=0x20) returned 0 [0163.927] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.927] GetLastError () returned 0x5 [0163.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM", dwFileAttributes=0x20) returned 0 [0163.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62590) returned 1 [0163.927] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.RUM", cAlternateFileName="")) returned 1 [0163.928] wcscmp (_String1="Acroform.RUM", _String2=".") returned 1 [0163.928] wcscmp (_String1="Acroform.RUM", _String2="..") returned 1 [0163.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44210 [0163.928] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.928] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.928] wcscat (in: _Dest=0x3d44210, _Source="Acroform.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" [0163.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum")) returned 0x20 [0163.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM", dwFileAttributes=0x20) returned 0 [0163.948] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.949] GetLastError () returned 0x5 [0163.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM", dwFileAttributes=0x20) returned 0 [0163.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0163.949] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.RUM", cAlternateFileName="ADOBEC~1.RUM")) returned 1 [0163.949] wcscmp (_String1="AdobeCollabSync.RUM", _String2=".") returned 1 [0163.949] wcscmp (_String1="AdobeCollabSync.RUM", _String2="..") returned 1 [0163.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63d50 [0163.949] wcscpy (in: _Dest=0x7a63d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.949] wcscat (in: _Dest=0x7a63d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.949] wcscat (in: _Dest=0x7a63d50, _Source="AdobeCollabSync.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" [0163.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum")) returned 0x20 [0163.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM", dwFileAttributes=0x20) returned 0 [0163.950] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.950] GetLastError () returned 0x5 [0163.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM", dwFileAttributes=0x20) returned 0 [0163.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63d50) returned 1 [0163.951] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.RUM", cAlternateFileName="")) returned 1 [0163.951] wcscmp (_String1="Annots.RUM", _String2=".") returned 1 [0163.951] wcscmp (_String1="Annots.RUM", _String2="..") returned 1 [0163.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44210 [0163.951] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.951] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.951] wcscat (in: _Dest=0x3d44210, _Source="Annots.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" [0163.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum")) returned 0x20 [0163.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM", dwFileAttributes=0x20) returned 0 [0163.952] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.952] GetLastError () returned 0x5 [0163.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM", dwFileAttributes=0x20) returned 0 [0163.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0163.953] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.RUM", cAlternateFileName="BRDLAN~1.RUM")) returned 1 [0163.953] wcscmp (_String1="BRdlang32.RUM", _String2=".") returned 1 [0163.953] wcscmp (_String1="BRdlang32.RUM", _String2="..") returned 1 [0163.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0163.953] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.953] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.953] wcscat (in: _Dest=0x3eb6a30, _Source="BRdlang32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" [0163.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum")) returned 0x20 [0163.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM", dwFileAttributes=0x20) returned 0 [0163.958] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.958] GetLastError () returned 0x5 [0163.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM", dwFileAttributes=0x20) returned 0 [0163.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0163.959] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.RUM", cAlternateFileName="")) returned 1 [0163.959] wcscmp (_String1="Checkers.RUM", _String2=".") returned 1 [0163.959] wcscmp (_String1="Checkers.RUM", _String2="..") returned 1 [0163.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44210 [0163.959] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.959] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.959] wcscat (in: _Dest=0x3d44210, _Source="Checkers.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" [0163.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum")) returned 0x20 [0163.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM", dwFileAttributes=0x20) returned 0 [0163.960] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.960] GetLastError () returned 0x5 [0163.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM", dwFileAttributes=0x20) returned 0 [0163.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0163.960] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.RUM", cAlternateFileName="")) returned 1 [0163.960] wcscmp (_String1="DigSig.RUM", _String2=".") returned 1 [0163.960] wcscmp (_String1="DigSig.RUM", _String2="..") returned 1 [0163.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44210 [0163.960] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.960] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.960] wcscat (in: _Dest=0x3d44210, _Source="DigSig.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" [0163.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum")) returned 0x20 [0163.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM", dwFileAttributes=0x20) returned 0 [0163.976] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.976] GetLastError () returned 0x5 [0163.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM", dwFileAttributes=0x20) returned 0 [0163.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0163.977] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.RUM", cAlternateFileName="")) returned 1 [0163.977] wcscmp (_String1="DVA.RUM", _String2=".") returned 1 [0163.977] wcscmp (_String1="DVA.RUM", _String2="..") returned 1 [0163.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9560 [0163.977] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.977] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.977] wcscat (in: _Dest=0x3eb9560, _Source="DVA.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" [0163.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum")) returned 0x20 [0163.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM", dwFileAttributes=0x20) returned 0 [0163.978] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.978] GetLastError () returned 0x5 [0163.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM", dwFileAttributes=0x20) returned 0 [0163.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 [0163.978] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.RUM", cAlternateFileName="")) returned 1 [0163.978] wcscmp (_String1="eBook.RUM", _String2=".") returned 1 [0163.978] wcscmp (_String1="eBook.RUM", _String2="..") returned 1 [0163.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44210 [0163.978] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.978] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.978] wcscat (in: _Dest=0x3d44210, _Source="eBook.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" [0163.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum")) returned 0x20 [0163.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM", dwFileAttributes=0x20) returned 0 [0163.979] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.979] GetLastError () returned 0x5 [0163.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM", dwFileAttributes=0x20) returned 0 [0163.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0163.980] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.RUM", cAlternateFileName="")) returned 1 [0163.980] wcscmp (_String1="EScript.RUM", _String2=".") returned 1 [0163.980] wcscmp (_String1="EScript.RUM", _String2="..") returned 1 [0163.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44210 [0163.980] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.980] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.980] wcscat (in: _Dest=0x3d44210, _Source="EScript.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" [0163.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum")) returned 0x20 [0163.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM", dwFileAttributes=0x20) returned 0 [0163.980] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.981] GetLastError () returned 0x5 [0163.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM", dwFileAttributes=0x20) returned 0 [0163.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0163.981] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.RUM", cAlternateFileName="")) returned 1 [0163.981] wcscmp (_String1="IA32.RUM", _String2=".") returned 1 [0163.981] wcscmp (_String1="IA32.RUM", _String2="..") returned 1 [0163.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9560 [0163.981] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.981] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.981] wcscat (in: _Dest=0x3eb9560, _Source="IA32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" [0163.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum")) returned 0x20 [0163.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM", dwFileAttributes=0x20) returned 0 [0163.982] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.982] GetLastError () returned 0x5 [0163.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM", dwFileAttributes=0x20) returned 0 [0163.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 [0163.982] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.RUM", cAlternateFileName="MAKEAC~1.RUM")) returned 1 [0163.982] wcscmp (_String1="MakeAccessible.RUM", _String2=".") returned 1 [0163.982] wcscmp (_String1="MakeAccessible.RUM", _String2="..") returned 1 [0163.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62630 [0163.982] wcscpy (in: _Dest=0x7a62630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.982] wcscat (in: _Dest=0x7a62630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.982] wcscat (in: _Dest=0x7a62630, _Source="MakeAccessible.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" [0163.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum")) returned 0x20 [0163.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM", dwFileAttributes=0x20) returned 0 [0163.983] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.983] GetLastError () returned 0x5 [0163.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM", dwFileAttributes=0x20) returned 0 [0163.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62630) returned 1 [0163.983] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.RUM", cAlternateFileName="MULTIM~1.RUM")) returned 1 [0163.984] wcscmp (_String1="Multimedia.RUM", _String2=".") returned 1 [0163.984] wcscmp (_String1="Multimedia.RUM", _String2="..") returned 1 [0163.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0163.984] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.984] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.984] wcscat (in: _Dest=0x3eb5d20, _Source="Multimedia.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" [0163.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum")) returned 0x20 [0163.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM", dwFileAttributes=0x20) returned 0 [0163.984] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.985] GetLastError () returned 0x5 [0163.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM", dwFileAttributes=0x20) returned 0 [0163.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0163.985] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.RUM", cAlternateFileName="")) returned 1 [0163.985] wcscmp (_String1="PDDom.RUM", _String2=".") returned 1 [0163.985] wcscmp (_String1="PDDom.RUM", _String2="..") returned 1 [0163.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44210 [0163.985] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0163.985] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0163.985] wcscat (in: _Dest=0x3d44210, _Source="PDDom.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" [0163.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum")) returned 0x20 [0164.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM", dwFileAttributes=0x20) returned 0 [0164.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.007] GetLastError () returned 0x5 [0164.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM", dwFileAttributes=0x20) returned 0 [0164.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0164.007] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x82600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.RUM", cAlternateFileName="")) returned 1 [0164.007] wcscmp (_String1="PPKLITE.RUM", _String2=".") returned 1 [0164.007] wcscmp (_String1="PPKLITE.RUM", _String2="..") returned 1 [0164.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44210 [0164.007] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.007] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.007] wcscat (in: _Dest=0x3d44210, _Source="PPKLITE.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" [0164.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum")) returned 0x20 [0164.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM", dwFileAttributes=0x20) returned 0 [0164.020] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.020] GetLastError () returned 0x5 [0164.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM", dwFileAttributes=0x20) returned 0 [0164.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0164.020] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd09aee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x154600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.RUM", cAlternateFileName="")) returned 1 [0164.020] wcscmp (_String1="RdLang32.RUM", _String2=".") returned 1 [0164.020] wcscmp (_String1="RdLang32.RUM", _String2="..") returned 1 [0164.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44210 [0164.021] wcscpy (in: _Dest=0x3d44210, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.021] wcscat (in: _Dest=0x3d44210, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.021] wcscat (in: _Dest=0x3d44210, _Source="RdLang32.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" [0164.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum")) returned 0x20 [0164.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM", dwFileAttributes=0x20) returned 0 [0164.021] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.022] GetLastError () returned 0x5 [0164.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM", dwFileAttributes=0x20) returned 0 [0164.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 [0164.022] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.RUM", cAlternateFileName="READOU~1.RUM")) returned 1 [0164.022] wcscmp (_String1="ReadOutLoud.RUM", _String2=".") returned 1 [0164.022] wcscmp (_String1="ReadOutLoud.RUM", _String2="..") returned 1 [0164.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6a30 [0164.022] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.022] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.022] wcscat (in: _Dest=0x3eb6a30, _Source="ReadOutLoud.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" [0164.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum")) returned 0x20 [0164.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM", dwFileAttributes=0x20) returned 0 [0164.042] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.042] GetLastError () returned 0x5 [0164.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM", dwFileAttributes=0x20) returned 0 [0164.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0164.043] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.RUM", cAlternateFileName="")) returned 1 [0164.043] wcscmp (_String1="Reflow.RUM", _String2=".") returned 1 [0164.043] wcscmp (_String1="Reflow.RUM", _String2="..") returned 1 [0164.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.043] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.043] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.043] wcscat (in: _Dest=0x3d44d50, _Source="Reflow.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" [0164.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum")) returned 0x20 [0164.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM", dwFileAttributes=0x20) returned 0 [0164.043] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.044] GetLastError () returned 0x5 [0164.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM", dwFileAttributes=0x20) returned 0 [0164.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.044] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.RUM", cAlternateFileName="SAVEAS~1.RUM")) returned 1 [0164.044] wcscmp (_String1="SaveAsRTF.RUM", _String2=".") returned 1 [0164.044] wcscmp (_String1="SaveAsRTF.RUM", _String2="..") returned 1 [0164.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0164.044] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.044] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.044] wcscat (in: _Dest=0x3eb6a30, _Source="SaveAsRTF.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" [0164.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum")) returned 0x20 [0164.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM", dwFileAttributes=0x20) returned 0 [0164.045] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.045] GetLastError () returned 0x5 [0164.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM", dwFileAttributes=0x20) returned 0 [0164.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0164.045] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.RUM", cAlternateFileName="")) returned 1 [0164.045] wcscmp (_String1="Search.RUM", _String2=".") returned 1 [0164.045] wcscmp (_String1="Search.RUM", _String2="..") returned 1 [0164.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.046] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.046] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.046] wcscat (in: _Dest=0x3d44d50, _Source="Search.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" [0164.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum")) returned 0x20 [0164.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM", dwFileAttributes=0x20) returned 0 [0164.046] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.047] GetLastError () returned 0x5 [0164.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM", dwFileAttributes=0x20) returned 0 [0164.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.047] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.RUM", cAlternateFileName="")) returned 1 [0164.047] wcscmp (_String1="SendMail.RUM", _String2=".") returned 1 [0164.047] wcscmp (_String1="SendMail.RUM", _String2="..") returned 1 [0164.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.047] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.047] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.047] wcscat (in: _Dest=0x3d44d50, _Source="SendMail.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" [0164.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum")) returned 0x20 [0164.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM", dwFileAttributes=0x20) returned 0 [0164.048] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.048] GetLastError () returned 0x5 [0164.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM", dwFileAttributes=0x20) returned 0 [0164.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.048] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.048] wcscmp (_String1="Services", _String2=".") returned 1 [0164.048] wcscmp (_String1="Services", _String2="..") returned 1 [0164.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3ca00 [0164.048] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.048] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.049] wcscat (in: _Dest=0x3f3ca00, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0164.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.049] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0164.049] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\" [0164.049] wcscat (in: _Dest=0x3d44d50, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*" [0164.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0164.049] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dec0 [0164.049] wcscmp (_String1=".", _String2=".") returned 0 [0164.049] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.049] wcscmp (_String1="..", _String2=".") returned 1 [0164.049] wcscmp (_String1="..", _String2="..") returned 0 [0164.050] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x93a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0164.050] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0164.050] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0164.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053330 [0164.050] wcscpy (in: _Dest=0x3053330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0164.050] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\" [0164.050] wcscat (in: _Dest=0x3053330, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" [0164.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx")) returned 0x20 [0164.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0164.050] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.050] GetLastError () returned 0x5 [0164.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0164.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 [0164.051] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0164.051] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0164.051] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0164.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053330 [0164.051] wcscpy (in: _Dest=0x3053330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services" [0164.051] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\" [0164.051] wcscat (in: _Dest=0x3053330, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" [0164.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx")) returned 0x20 [0164.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.052] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.052] GetLastError () returned 0x5 [0164.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 [0164.052] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0164.052] FindClose (in: hFindFile=0x7a2dec0 | out: hFindFile=0x7a2dec0) returned 1 [0164.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0164.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 [0164.053] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.RUM", cAlternateFileName="")) returned 1 [0164.053] wcscmp (_String1="Spelling.RUM", _String2=".") returned 1 [0164.053] wcscmp (_String1="Spelling.RUM", _String2="..") returned 1 [0164.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.053] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.053] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.053] wcscat (in: _Dest=0x3d44d50, _Source="Spelling.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" [0164.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum")) returned 0x20 [0164.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM", dwFileAttributes=0x20) returned 0 [0164.054] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.054] GetLastError () returned 0x5 [0164.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM", dwFileAttributes=0x20) returned 0 [0164.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.054] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.RUM", cAlternateFileName="")) returned 1 [0164.054] wcscmp (_String1="Updater.RUM", _String2=".") returned 1 [0164.054] wcscmp (_String1="Updater.RUM", _String2="..") returned 1 [0164.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0164.054] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.054] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.054] wcscat (in: _Dest=0x3d44d50, _Source="Updater.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" [0164.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum")) returned 0x20 [0164.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM", dwFileAttributes=0x20) returned 0 [0164.105] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.105] GetLastError () returned 0x5 [0164.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM", dwFileAttributes=0x20) returned 0 [0164.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.106] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUM", cAlternateFileName="")) returned 1 [0164.106] wcscmp (_String1="Weblink.RUM", _String2=".") returned 1 [0164.106] wcscmp (_String1="Weblink.RUM", _String2="..") returned 1 [0164.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0164.106] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO" [0164.106] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\" [0164.106] wcscat (in: _Dest=0x3d44d50, _Source="Weblink.RUM" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" [0164.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum")) returned 0x20 [0164.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM", dwFileAttributes=0x20) returned 0 [0164.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.107] GetLastError () returned 0x5 [0164.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM", dwFileAttributes=0x20) returned 0 [0164.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.107] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18e8b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUM", cAlternateFileName="")) returned 0 [0164.107] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0164.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b08) returned 1 [0164.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46d98) returned 1 [0164.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc98) returned 1 Thread: id = 2981 os_tid = 0x1a54 [0158.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e46f18 [0158.950] wcscpy (in: _Dest=0x3e46f18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0158.950] wcscat (in: _Dest=0x3e46f18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0158.950] wcscat (in: _Dest=0x3e46f18, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*" [0158.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef37c8 [0158.950] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df40 [0162.155] wcscmp (_String1=".", _String2=".") returned 0 [0162.155] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.155] wcscmp (_String1="..", _String2=".") returned 1 [0162.155] wcscmp (_String1="..", _String2="..") returned 0 [0162.155] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.RUS", cAlternateFileName="ACCESS~1.RUS")) returned 1 [0162.155] wcscmp (_String1="Accessibility.RUS", _String2=".") returned 1 [0162.155] wcscmp (_String1="Accessibility.RUS", _String2="..") returned 1 [0162.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63670 [0162.155] wcscpy (in: _Dest=0x7a63670, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0162.155] wcscat (in: _Dest=0x7a63670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0162.155] wcscat (in: _Dest=0x7a63670, _Source="Accessibility.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" [0164.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus")) returned 0x20 [0164.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS", dwFileAttributes=0x20) returned 0 [0164.119] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.120] GetLastError () returned 0x5 [0164.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS", dwFileAttributes=0x20) returned 0 [0164.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63670) returned 1 [0164.120] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x65e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.RUS", cAlternateFileName="")) returned 1 [0164.120] wcscmp (_String1="Acroform.RUS", _String2=".") returned 1 [0164.120] wcscmp (_String1="Acroform.RUS", _String2="..") returned 1 [0164.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45260 [0164.121] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.121] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.121] wcscat (in: _Dest=0x3d45260, _Source="Acroform.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" [0164.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus")) returned 0x20 [0164.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS", dwFileAttributes=0x20) returned 0 [0164.126] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.126] GetLastError () returned 0x5 [0164.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS", dwFileAttributes=0x20) returned 0 [0164.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.127] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.RUS", cAlternateFileName="ADOBEC~1.RUS")) returned 1 [0164.127] wcscmp (_String1="AdobeCollabSync.RUS", _String2=".") returned 1 [0164.127] wcscmp (_String1="AdobeCollabSync.RUS", _String2="..") returned 1 [0164.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63350 [0164.127] wcscpy (in: _Dest=0x7a63350, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.127] wcscat (in: _Dest=0x7a63350, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.127] wcscat (in: _Dest=0x7a63350, _Source="AdobeCollabSync.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" [0164.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus")) returned 0x20 [0164.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS", dwFileAttributes=0x20) returned 0 [0164.138] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.138] GetLastError () returned 0x5 [0164.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS", dwFileAttributes=0x20) returned 0 [0164.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63350) returned 1 [0164.139] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1afde60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.RUS", cAlternateFileName="")) returned 1 [0164.139] wcscmp (_String1="Annots.RUS", _String2=".") returned 1 [0164.139] wcscmp (_String1="Annots.RUS", _String2="..") returned 1 [0164.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.139] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.139] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.139] wcscat (in: _Dest=0x3d44d50, _Source="Annots.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" [0164.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus")) returned 0x20 [0164.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS", dwFileAttributes=0x20) returned 0 [0164.140] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.140] GetLastError () returned 0x5 [0164.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS", dwFileAttributes=0x20) returned 0 [0164.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.140] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.RUS", cAlternateFileName="BRDLAN~1.RUS")) returned 1 [0164.140] wcscmp (_String1="BRdlang32.RUS", _String2=".") returned 1 [0164.140] wcscmp (_String1="BRdlang32.RUS", _String2="..") returned 1 [0164.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0164.140] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.141] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.141] wcscat (in: _Dest=0x3eb6a30, _Source="BRdlang32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" [0164.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus")) returned 0x20 [0164.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS", dwFileAttributes=0x20) returned 0 [0164.141] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.142] GetLastError () returned 0x5 [0164.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS", dwFileAttributes=0x20) returned 0 [0164.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0164.142] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.RUS", cAlternateFileName="")) returned 1 [0164.142] wcscmp (_String1="Checkers.RUS", _String2=".") returned 1 [0164.142] wcscmp (_String1="Checkers.RUS", _String2="..") returned 1 [0164.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.142] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.142] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.142] wcscat (in: _Dest=0x3d44d50, _Source="Checkers.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" [0164.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus")) returned 0x20 [0164.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS", dwFileAttributes=0x20) returned 0 [0164.143] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.143] GetLastError () returned 0x5 [0164.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS", dwFileAttributes=0x20) returned 0 [0164.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.144] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.RUS", cAlternateFileName="")) returned 1 [0164.144] wcscmp (_String1="DigSig.RUS", _String2=".") returned 1 [0164.144] wcscmp (_String1="DigSig.RUS", _String2="..") returned 1 [0164.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.144] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.144] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.144] wcscat (in: _Dest=0x3d44d50, _Source="DigSig.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" [0164.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus")) returned 0x20 [0164.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS", dwFileAttributes=0x20) returned 0 [0164.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.145] GetLastError () returned 0x5 [0164.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS", dwFileAttributes=0x20) returned 0 [0164.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.145] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.RUS", cAlternateFileName="")) returned 1 [0164.145] wcscmp (_String1="DVA.RUS", _String2=".") returned 1 [0164.145] wcscmp (_String1="DVA.RUS", _String2="..") returned 1 [0164.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36ecf8 [0164.146] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.146] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.146] wcscat (in: _Dest=0x36ecf8, _Source="DVA.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" [0164.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus")) returned 0x20 [0164.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS", dwFileAttributes=0x20) returned 0 [0164.146] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.147] GetLastError () returned 0x5 [0164.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS", dwFileAttributes=0x20) returned 0 [0164.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 [0164.147] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.RUS", cAlternateFileName="")) returned 1 [0164.147] wcscmp (_String1="eBook.RUS", _String2=".") returned 1 [0164.147] wcscmp (_String1="eBook.RUS", _String2="..") returned 1 [0164.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0164.147] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.147] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.148] wcscat (in: _Dest=0x3d44d50, _Source="eBook.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" [0164.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus")) returned 0x20 [0164.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS", dwFileAttributes=0x20) returned 0 [0164.148] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.148] GetLastError () returned 0x5 [0164.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS", dwFileAttributes=0x20) returned 0 [0164.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.149] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.RUS", cAlternateFileName="")) returned 1 [0164.149] wcscmp (_String1="EScript.RUS", _String2=".") returned 1 [0164.149] wcscmp (_String1="EScript.RUS", _String2="..") returned 1 [0164.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0164.149] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.149] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.149] wcscat (in: _Dest=0x3d44d50, _Source="EScript.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" [0164.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus")) returned 0x20 [0164.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS", dwFileAttributes=0x20) returned 0 [0164.150] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.150] GetLastError () returned 0x5 [0164.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS", dwFileAttributes=0x20) returned 0 [0164.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.151] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.RUS", cAlternateFileName="")) returned 1 [0164.151] wcscmp (_String1="IA32.RUS", _String2=".") returned 1 [0164.151] wcscmp (_String1="IA32.RUS", _String2="..") returned 1 [0164.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ecf8 [0164.157] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.157] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.157] wcscat (in: _Dest=0x36ecf8, _Source="IA32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" [0164.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus")) returned 0x20 [0164.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS", dwFileAttributes=0x20) returned 0 [0164.169] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.169] GetLastError () returned 0x5 [0164.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS", dwFileAttributes=0x20) returned 0 [0164.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 [0164.169] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.RUS", cAlternateFileName="MAKEAC~1.RUS")) returned 1 [0164.169] wcscmp (_String1="MakeAccessible.RUS", _String2=".") returned 1 [0164.169] wcscmp (_String1="MakeAccessible.RUS", _String2="..") returned 1 [0164.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62b30 [0164.169] wcscpy (in: _Dest=0x7a62b30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.170] wcscat (in: _Dest=0x7a62b30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.170] wcscat (in: _Dest=0x7a62b30, _Source="MakeAccessible.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" [0164.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus")) returned 0x20 [0164.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS", dwFileAttributes=0x20) returned 0 [0164.170] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.170] GetLastError () returned 0x5 [0164.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS", dwFileAttributes=0x20) returned 0 [0164.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62b30) returned 1 [0164.171] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.RUS", cAlternateFileName="MULTIM~1.RUS")) returned 1 [0164.171] wcscmp (_String1="Multimedia.RUS", _String2=".") returned 1 [0164.171] wcscmp (_String1="Multimedia.RUS", _String2="..") returned 1 [0164.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0164.171] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.171] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.171] wcscat (in: _Dest=0x3eb5d20, _Source="Multimedia.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" [0164.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus")) returned 0x20 [0164.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS", dwFileAttributes=0x20) returned 0 [0164.172] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.172] GetLastError () returned 0x5 [0164.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS", dwFileAttributes=0x20) returned 0 [0164.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.172] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.RUS", cAlternateFileName="")) returned 1 [0164.172] wcscmp (_String1="PDDom.RUS", _String2=".") returned 1 [0164.172] wcscmp (_String1="PDDom.RUS", _String2="..") returned 1 [0164.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d443c0 [0164.173] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.173] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.173] wcscat (in: _Dest=0x3d443c0, _Source="PDDom.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" [0164.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus")) returned 0x20 [0164.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS", dwFileAttributes=0x20) returned 0 [0164.173] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.174] GetLastError () returned 0x5 [0164.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS", dwFileAttributes=0x20) returned 0 [0164.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 [0164.174] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x80400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.RUS", cAlternateFileName="")) returned 1 [0164.174] wcscmp (_String1="PPKLITE.RUS", _String2=".") returned 1 [0164.174] wcscmp (_String1="PPKLITE.RUS", _String2="..") returned 1 [0164.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d443c0 [0164.174] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.174] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.174] wcscat (in: _Dest=0x3d443c0, _Source="PPKLITE.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" [0164.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus")) returned 0x20 [0164.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS", dwFileAttributes=0x20) returned 0 [0164.175] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.175] GetLastError () returned 0x5 [0164.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS", dwFileAttributes=0x20) returned 0 [0164.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 [0164.175] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd074d80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.RUS", cAlternateFileName="")) returned 1 [0164.176] wcscmp (_String1="RdLang32.RUS", _String2=".") returned 1 [0164.176] wcscmp (_String1="RdLang32.RUS", _String2="..") returned 1 [0164.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d443c0 [0164.176] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.176] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.176] wcscat (in: _Dest=0x3d443c0, _Source="RdLang32.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" [0164.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus")) returned 0x20 [0164.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS", dwFileAttributes=0x20) returned 0 [0164.176] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.177] GetLastError () returned 0x5 [0164.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS", dwFileAttributes=0x20) returned 0 [0164.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 [0164.177] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.RUS", cAlternateFileName="READOU~1.RUS")) returned 1 [0164.177] wcscmp (_String1="ReadOutLoud.RUS", _String2=".") returned 1 [0164.177] wcscmp (_String1="ReadOutLoud.RUS", _String2="..") returned 1 [0164.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5d20 [0164.177] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.177] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.177] wcscat (in: _Dest=0x3eb5d20, _Source="ReadOutLoud.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" [0164.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus")) returned 0x20 [0164.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS", dwFileAttributes=0x20) returned 0 [0164.178] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.178] GetLastError () returned 0x5 [0164.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS", dwFileAttributes=0x20) returned 0 [0164.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.178] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.RUS", cAlternateFileName="")) returned 1 [0164.178] wcscmp (_String1="Reflow.RUS", _String2=".") returned 1 [0164.178] wcscmp (_String1="Reflow.RUS", _String2="..") returned 1 [0164.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d443c0 [0164.178] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.178] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.178] wcscat (in: _Dest=0x3d443c0, _Source="Reflow.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" [0164.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus")) returned 0x20 [0164.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS", dwFileAttributes=0x20) returned 0 [0164.179] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.179] GetLastError () returned 0x5 [0164.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS", dwFileAttributes=0x20) returned 0 [0164.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 [0164.180] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.RUS", cAlternateFileName="SAVEAS~1.RUS")) returned 1 [0164.180] wcscmp (_String1="SaveAsRTF.RUS", _String2=".") returned 1 [0164.180] wcscmp (_String1="SaveAsRTF.RUS", _String2="..") returned 1 [0164.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.180] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.180] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.180] wcscat (in: _Dest=0x3eb5d20, _Source="SaveAsRTF.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" [0164.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus")) returned 0x20 [0164.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS", dwFileAttributes=0x20) returned 0 [0164.203] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.203] GetLastError () returned 0x5 [0164.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS", dwFileAttributes=0x20) returned 0 [0164.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.204] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe189c860, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.RUS", cAlternateFileName="")) returned 1 [0164.204] wcscmp (_String1="Search.RUS", _String2=".") returned 1 [0164.204] wcscmp (_String1="Search.RUS", _String2="..") returned 1 [0164.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d443c0 [0164.204] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.204] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.204] wcscat (in: _Dest=0x3d443c0, _Source="Search.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" [0164.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus")) returned 0x20 [0164.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS", dwFileAttributes=0x20) returned 0 [0164.205] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.205] GetLastError () returned 0x5 [0164.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS", dwFileAttributes=0x20) returned 0 [0164.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 [0164.205] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.RUS", cAlternateFileName="")) returned 1 [0164.205] wcscmp (_String1="SendMail.RUS", _String2=".") returned 1 [0164.205] wcscmp (_String1="SendMail.RUS", _String2="..") returned 1 [0164.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d443c0 [0164.205] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.205] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.205] wcscat (in: _Dest=0x3d443c0, _Source="SendMail.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" [0164.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus")) returned 0x20 [0164.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS", dwFileAttributes=0x20) returned 0 [0164.206] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.206] GetLastError () returned 0x5 [0164.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS", dwFileAttributes=0x20) returned 0 [0164.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 [0164.206] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.206] wcscmp (_String1="Services", _String2=".") returned 1 [0164.206] wcscmp (_String1="Services", _String2="..") returned 1 [0164.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ead8 [0164.206] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0164.207] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0164.207] wcscat (in: _Dest=0x36ead8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0164.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d443c0 [0164.207] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0164.207] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\" [0164.207] wcscat (in: _Dest=0x3d443c0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*" [0164.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52f00 [0164.207] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0165.133] wcscmp (_String1=".", _String2=".") returned 0 [0165.133] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.133] wcscmp (_String1="..", _String2=".") returned 1 [0165.133] wcscmp (_String1="..", _String2="..") returned 0 [0165.133] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb6ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.133] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.133] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3054050 [0165.133] wcscpy (in: _Dest=0x3054050, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0165.133] wcscat (in: _Dest=0x3054050, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\" [0165.133] wcscat (in: _Dest=0x3054050, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" [0172.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3054050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0172.858] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.858] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.858] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f1a0 [0172.858] wcscpy (in: _Dest=0x7a5f1a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services" [0172.858] wcscat (in: _Dest=0x7a5f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\" [0172.858] wcscat (in: _Dest=0x7a5f1a0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" [0172.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0172.859] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.859] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0172.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52f00) returned 1 [0172.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 [0172.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 [0172.860] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.RUS", cAlternateFileName="")) returned 1 [0172.860] wcscmp (_String1="Spelling.RUS", _String2=".") returned 1 [0172.860] wcscmp (_String1="Spelling.RUS", _String2="..") returned 1 [0172.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d443c0 [0172.860] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.860] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.860] wcscat (in: _Dest=0x3d443c0, _Source="Spelling.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" [0172.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d443c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0172.861] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb561340, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.RUS", cAlternateFileName="")) returned 1 [0172.861] wcscmp (_String1="Updater.RUS", _String2=".") returned 1 [0172.861] wcscmp (_String1="Updater.RUS", _String2="..") returned 1 [0172.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44690 [0172.861] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.861] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.861] wcscat (in: _Dest=0x3d44690, _Source="Updater.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" [0172.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0172.862] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUS", cAlternateFileName="")) returned 1 [0172.862] wcscmp (_String1="Weblink.RUS", _String2=".") returned 1 [0172.863] wcscmp (_String1="Weblink.RUS", _String2="..") returned 1 [0172.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d452f0 [0172.863] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU" [0172.863] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\" [0172.863] wcscat (in: _Dest=0x3d452f0, _Source="Weblink.RUS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" [0172.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0172.864] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18c29c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.RUS", cAlternateFileName="")) returned 0 [0172.864] FindClose (in: hFindFile=0x7a2df40 | out: hFindFile=0x7a2df40) returned 1 [0172.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0172.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f18) returned 1 [0172.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 Thread: id = 2982 os_tid = 0x1a58 [0158.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47c18 [0158.951] wcscpy (in: _Dest=0x3e47c18, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0158.951] wcscat (in: _Dest=0x3e47c18, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0158.951] wcscat (in: _Dest=0x3e47c18, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*" [0158.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5be0 [0158.951] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0162.156] wcscmp (_String1=".", _String2=".") returned 0 [0162.156] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.156] wcscmp (_String1="..", _String2=".") returned 1 [0162.156] wcscmp (_String1="..", _String2="..") returned 0 [0162.156] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SKY", cAlternateFileName="ACCESS~1.SKY")) returned 1 [0162.156] wcscmp (_String1="accessibility.SKY", _String2=".") returned 1 [0162.156] wcscmp (_String1="accessibility.SKY", _String2="..") returned 1 [0162.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63350 [0162.156] wcscpy (in: _Dest=0x7a63350, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0162.156] wcscat (in: _Dest=0x7a63350, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0162.156] wcscat (in: _Dest=0x7a63350, _Source="accessibility.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" [0164.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky")) returned 0x20 [0164.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY", dwFileAttributes=0x20) returned 0 [0164.124] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.124] GetLastError () returned 0x5 [0164.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY", dwFileAttributes=0x20) returned 0 [0164.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63350) returned 1 [0164.125] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x65800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SKY", cAlternateFileName="")) returned 1 [0164.125] wcscmp (_String1="Acroform.SKY", _String2=".") returned 1 [0164.125] wcscmp (_String1="Acroform.SKY", _String2="..") returned 1 [0164.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.125] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.125] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.125] wcscat (in: _Dest=0x3d44d50, _Source="Acroform.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" [0164.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky")) returned 0x20 [0164.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY", dwFileAttributes=0x20) returned 0 [0164.135] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.135] GetLastError () returned 0x5 [0164.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY", dwFileAttributes=0x20) returned 0 [0164.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.136] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SKY", cAlternateFileName="ADOBEC~1.SKY")) returned 1 [0164.136] wcscmp (_String1="AdobeCollabSync.SKY", _String2=".") returned 1 [0164.136] wcscmp (_String1="AdobeCollabSync.SKY", _String2="..") returned 1 [0164.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62b30 [0164.136] wcscpy (in: _Dest=0x7a62b30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.136] wcscat (in: _Dest=0x7a62b30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.136] wcscat (in: _Dest=0x7a62b30, _Source="AdobeCollabSync.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" [0164.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky")) returned 0x20 [0164.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY", dwFileAttributes=0x20) returned 0 [0164.166] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.166] GetLastError () returned 0x5 [0164.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY", dwFileAttributes=0x20) returned 0 [0164.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62b30) returned 1 [0164.167] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x79800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SKY", cAlternateFileName="")) returned 1 [0164.167] wcscmp (_String1="Annots.SKY", _String2=".") returned 1 [0164.167] wcscmp (_String1="Annots.SKY", _String2="..") returned 1 [0164.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44c30 [0164.167] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.167] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.167] wcscat (in: _Dest=0x3d44c30, _Source="Annots.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" [0164.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky")) returned 0x20 [0164.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY", dwFileAttributes=0x20) returned 0 [0164.199] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.199] GetLastError () returned 0x5 [0164.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY", dwFileAttributes=0x20) returned 0 [0164.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.199] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SKY", cAlternateFileName="BRDLAN~1.SKY")) returned 1 [0164.199] wcscmp (_String1="BRdlang32.SKY", _String2=".") returned 1 [0164.199] wcscmp (_String1="BRdlang32.SKY", _String2="..") returned 1 [0164.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0164.199] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.199] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.199] wcscat (in: _Dest=0x3eb6a30, _Source="BRdlang32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" [0164.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky")) returned 0x20 [0164.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY", dwFileAttributes=0x20) returned 0 [0164.200] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.200] GetLastError () returned 0x5 [0164.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY", dwFileAttributes=0x20) returned 0 [0164.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0164.200] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SKY", cAlternateFileName="")) returned 1 [0164.200] wcscmp (_String1="Checkers.SKY", _String2=".") returned 1 [0164.200] wcscmp (_String1="Checkers.SKY", _String2="..") returned 1 [0164.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44c30 [0164.201] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.201] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.201] wcscat (in: _Dest=0x3d44c30, _Source="Checkers.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" [0164.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky")) returned 0x20 [0164.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY", dwFileAttributes=0x20) returned 0 [0164.201] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.201] GetLastError () returned 0x5 [0164.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY", dwFileAttributes=0x20) returned 0 [0164.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.202] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SKY", cAlternateFileName="")) returned 1 [0164.202] wcscmp (_String1="DigSig.SKY", _String2=".") returned 1 [0164.202] wcscmp (_String1="DigSig.SKY", _String2="..") returned 1 [0164.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44c30 [0164.202] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.202] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.202] wcscat (in: _Dest=0x3d44c30, _Source="DigSig.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" [0164.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky")) returned 0x20 [0164.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY", dwFileAttributes=0x20) returned 0 [0164.248] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.248] GetLastError () returned 0x5 [0164.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY", dwFileAttributes=0x20) returned 0 [0164.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.249] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SKY", cAlternateFileName="")) returned 1 [0164.249] wcscmp (_String1="DVA.SKY", _String2=".") returned 1 [0164.249] wcscmp (_String1="DVA.SKY", _String2="..") returned 1 [0164.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8c58 [0164.249] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.249] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.249] wcscat (in: _Dest=0x3eb8c58, _Source="DVA.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" [0164.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky")) returned 0x20 [0164.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY", dwFileAttributes=0x20) returned 0 [0164.250] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.250] GetLastError () returned 0x5 [0164.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY", dwFileAttributes=0x20) returned 0 [0164.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 [0164.250] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SKY", cAlternateFileName="")) returned 1 [0164.250] wcscmp (_String1="eBook.SKY", _String2=".") returned 1 [0164.250] wcscmp (_String1="eBook.SKY", _String2="..") returned 1 [0164.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44c30 [0164.250] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.250] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.250] wcscat (in: _Dest=0x3d44c30, _Source="eBook.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" [0164.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky")) returned 0x20 [0164.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY", dwFileAttributes=0x20) returned 0 [0164.251] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.251] GetLastError () returned 0x5 [0164.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY", dwFileAttributes=0x20) returned 0 [0164.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.251] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SKY", cAlternateFileName="")) returned 1 [0164.251] wcscmp (_String1="EScript.SKY", _String2=".") returned 1 [0164.251] wcscmp (_String1="EScript.SKY", _String2="..") returned 1 [0164.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44c30 [0164.252] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.252] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.252] wcscat (in: _Dest=0x3d44c30, _Source="EScript.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" [0164.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky")) returned 0x20 [0164.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY", dwFileAttributes=0x20) returned 0 [0164.252] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.252] GetLastError () returned 0x5 [0164.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY", dwFileAttributes=0x20) returned 0 [0164.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.253] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18505a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SKY", cAlternateFileName="")) returned 1 [0164.253] wcscmp (_String1="IA32.SKY", _String2=".") returned 1 [0164.253] wcscmp (_String1="IA32.SKY", _String2="..") returned 1 [0164.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0164.253] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.253] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.253] wcscat (in: _Dest=0x3eb8c58, _Source="IA32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" [0164.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky")) returned 0x20 [0164.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY", dwFileAttributes=0x20) returned 0 [0164.254] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.254] GetLastError () returned 0x5 [0164.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY", dwFileAttributes=0x20) returned 0 [0164.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 [0164.254] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SKY", cAlternateFileName="MAKEAC~1.SKY")) returned 1 [0164.254] wcscmp (_String1="makeaccessible.SKY", _String2=".") returned 1 [0164.254] wcscmp (_String1="makeaccessible.SKY", _String2="..") returned 1 [0164.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a638f0 [0164.254] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.254] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.254] wcscat (in: _Dest=0x7a638f0, _Source="makeaccessible.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" [0164.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky")) returned 0x20 [0164.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY", dwFileAttributes=0x20) returned 0 [0164.286] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.286] GetLastError () returned 0x5 [0164.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY", dwFileAttributes=0x20) returned 0 [0164.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 [0164.287] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SKY", cAlternateFileName="MULTIM~1.SKY")) returned 1 [0164.287] wcscmp (_String1="Multimedia.SKY", _String2=".") returned 1 [0164.287] wcscmp (_String1="Multimedia.SKY", _String2="..") returned 1 [0164.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0164.287] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.287] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.287] wcscat (in: _Dest=0x3eb5d20, _Source="Multimedia.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" [0164.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky")) returned 0x20 [0164.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY", dwFileAttributes=0x20) returned 0 [0164.288] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.288] GetLastError () returned 0x5 [0164.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY", dwFileAttributes=0x20) returned 0 [0164.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.289] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SKY", cAlternateFileName="")) returned 1 [0164.289] wcscmp (_String1="pddom.SKY", _String2=".") returned 1 [0164.289] wcscmp (_String1="pddom.SKY", _String2="..") returned 1 [0164.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45260 [0164.289] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.289] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.289] wcscat (in: _Dest=0x3d45260, _Source="pddom.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" [0164.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky")) returned 0x20 [0164.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY", dwFileAttributes=0x20) returned 0 [0164.290] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.290] GetLastError () returned 0x5 [0164.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY", dwFileAttributes=0x20) returned 0 [0164.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.290] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.SKY", cAlternateFileName="")) returned 1 [0164.290] wcscmp (_String1="PPKLite.SKY", _String2=".") returned 1 [0164.290] wcscmp (_String1="PPKLite.SKY", _String2="..") returned 1 [0164.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45260 [0164.291] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.291] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.291] wcscat (in: _Dest=0x3d45260, _Source="PPKLite.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" [0164.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky")) returned 0x20 [0164.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY", dwFileAttributes=0x20) returned 0 [0164.347] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.347] GetLastError () returned 0x5 [0164.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY", dwFileAttributes=0x20) returned 0 [0164.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.347] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd04ec20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x148400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SKY", cAlternateFileName="")) returned 1 [0164.347] wcscmp (_String1="RdLang32.SKY", _String2=".") returned 1 [0164.347] wcscmp (_String1="RdLang32.SKY", _String2="..") returned 1 [0164.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45260 [0164.347] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.347] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.347] wcscat (in: _Dest=0x3d45260, _Source="RdLang32.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" [0164.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky")) returned 0x20 [0164.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY", dwFileAttributes=0x20) returned 0 [0164.367] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.367] GetLastError () returned 0x5 [0164.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY", dwFileAttributes=0x20) returned 0 [0164.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.368] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SKY", cAlternateFileName="READOU~1.SKY")) returned 1 [0164.368] wcscmp (_String1="ReadOutLoud.SKY", _String2=".") returned 1 [0164.368] wcscmp (_String1="ReadOutLoud.SKY", _String2="..") returned 1 [0164.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5d20 [0164.368] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.368] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.368] wcscat (in: _Dest=0x3eb5d20, _Source="ReadOutLoud.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" [0164.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky")) returned 0x20 [0164.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY", dwFileAttributes=0x20) returned 0 [0164.369] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.369] GetLastError () returned 0x5 [0164.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY", dwFileAttributes=0x20) returned 0 [0164.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.370] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SKY", cAlternateFileName="")) returned 1 [0164.370] wcscmp (_String1="reflow.SKY", _String2=".") returned 1 [0164.370] wcscmp (_String1="reflow.SKY", _String2="..") returned 1 [0164.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45260 [0164.370] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.370] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.370] wcscat (in: _Dest=0x3d45260, _Source="reflow.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" [0164.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky")) returned 0x20 [0164.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY", dwFileAttributes=0x20) returned 0 [0164.371] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.371] GetLastError () returned 0x5 [0164.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY", dwFileAttributes=0x20) returned 0 [0164.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.371] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SKY", cAlternateFileName="SAVEAS~1.SKY")) returned 1 [0164.371] wcscmp (_String1="SaveAsRTF.SKY", _String2=".") returned 1 [0164.371] wcscmp (_String1="SaveAsRTF.SKY", _String2="..") returned 1 [0164.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.371] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.371] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.371] wcscat (in: _Dest=0x3eb5d20, _Source="SaveAsRTF.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" [0164.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky")) returned 0x20 [0164.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY", dwFileAttributes=0x20) returned 0 [0164.372] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.372] GetLastError () returned 0x5 [0164.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY", dwFileAttributes=0x20) returned 0 [0164.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.373] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SKY", cAlternateFileName="")) returned 1 [0164.373] wcscmp (_String1="Search.SKY", _String2=".") returned 1 [0164.373] wcscmp (_String1="Search.SKY", _String2="..") returned 1 [0164.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45260 [0164.373] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.373] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.373] wcscat (in: _Dest=0x3d45260, _Source="Search.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" [0164.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky")) returned 0x20 [0164.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY", dwFileAttributes=0x20) returned 0 [0164.373] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.374] GetLastError () returned 0x5 [0164.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY", dwFileAttributes=0x20) returned 0 [0164.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.374] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SKY", cAlternateFileName="")) returned 1 [0164.374] wcscmp (_String1="SendMail.SKY", _String2=".") returned 1 [0164.374] wcscmp (_String1="SendMail.SKY", _String2="..") returned 1 [0164.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45260 [0164.374] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.374] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.374] wcscat (in: _Dest=0x3d45260, _Source="SendMail.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" [0164.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky")) returned 0x20 [0164.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY", dwFileAttributes=0x20) returned 0 [0164.375] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.375] GetLastError () returned 0x5 [0164.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY", dwFileAttributes=0x20) returned 0 [0164.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.375] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.375] wcscmp (_String1="Services", _String2=".") returned 1 [0164.375] wcscmp (_String1="Services", _String2="..") returned 1 [0164.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c648 [0164.376] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0164.376] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0164.376] wcscat (in: _Dest=0x3f3c648, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0164.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45260 [0164.376] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0164.376] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\" [0164.376] wcscat (in: _Dest=0x3d45260, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*" [0164.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0164.376] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0165.170] wcscmp (_String1=".", _String2=".") returned 0 [0165.170] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.170] wcscmp (_String1="..", _String2=".") returned 1 [0165.170] wcscmp (_String1="..", _String2="..") returned 0 [0165.170] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x95c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.170] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.170] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e090 [0165.170] wcscpy (in: _Dest=0x7a5e090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0165.170] wcscat (in: _Dest=0x7a5e090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\" [0165.171] wcscat (in: _Dest=0x7a5e090, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" [0172.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0172.642] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.642] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.642] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053a68 [0172.642] wcscpy (in: _Dest=0x3053a68, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services" [0172.642] wcscat (in: _Dest=0x3053a68, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\" [0172.642] wcscat (in: _Dest=0x3053a68, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" [0172.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0172.643] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.643] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0172.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0172.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0172.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 [0172.644] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SKY", cAlternateFileName="")) returned 1 [0172.644] wcscmp (_String1="Spelling.SKY", _String2=".") returned 1 [0172.644] wcscmp (_String1="Spelling.SKY", _String2="..") returned 1 [0172.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45260 [0172.644] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.644] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.644] wcscat (in: _Dest=0x3d45260, _Source="Spelling.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" [0172.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0172.645] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SKY", cAlternateFileName="")) returned 1 [0172.645] wcscmp (_String1="updater.SKY", _String2=".") returned 1 [0172.645] wcscmp (_String1="updater.SKY", _String2="..") returned 1 [0172.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d440f0 [0172.645] wcscpy (in: _Dest=0x3d440f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.645] wcscat (in: _Dest=0x3d440f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.645] wcscat (in: _Dest=0x3d440f0, _Source="updater.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" [0172.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d440f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0172.646] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.SKY", cAlternateFileName="")) returned 1 [0172.646] wcscmp (_String1="WebLink.SKY", _String2=".") returned 1 [0172.646] wcscmp (_String1="WebLink.SKY", _String2="..") returned 1 [0172.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d442a0 [0172.646] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK" [0172.646] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\" [0172.646] wcscat (in: _Dest=0x3d442a0, _Source="WebLink.SKY" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" [0172.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0172.647] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1876700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.SKY", cAlternateFileName="")) returned 0 [0172.647] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0172.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5be0) returned 1 [0172.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c18) returned 1 [0172.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 Thread: id = 2983 os_tid = 0x1a5c [0158.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47918 [0158.952] wcscpy (in: _Dest=0x3e47918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0158.952] wcscat (in: _Dest=0x3e47918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0158.952] wcscat (in: _Dest=0x3e47918, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*" [0158.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5710 [0158.952] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0162.156] wcscmp (_String1=".", _String2=".") returned 0 [0162.156] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda386e40, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ad7d00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.157] wcscmp (_String1="..", _String2=".") returned 1 [0162.157] wcscmp (_String1="..", _String2="..") returned 0 [0162.157] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.SLV", cAlternateFileName="ACCESS~1.SLV")) returned 1 [0162.157] wcscmp (_String1="Accessibility.SLV", _String2=".") returned 1 [0162.157] wcscmp (_String1="Accessibility.SLV", _String2="..") returned 1 [0162.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62b30 [0162.157] wcscpy (in: _Dest=0x7a62b30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0162.157] wcscat (in: _Dest=0x7a62b30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0162.157] wcscat (in: _Dest=0x7a62b30, _Source="Accessibility.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" [0164.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv")) returned 0x20 [0164.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV", dwFileAttributes=0x20) returned 0 [0164.132] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.133] GetLastError () returned 0x5 [0164.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV", dwFileAttributes=0x20) returned 0 [0164.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62b30) returned 1 [0164.133] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SLV", cAlternateFileName="")) returned 1 [0164.133] wcscmp (_String1="Acroform.SLV", _String2=".") returned 1 [0164.133] wcscmp (_String1="Acroform.SLV", _String2="..") returned 1 [0164.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45260 [0164.133] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.133] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.133] wcscat (in: _Dest=0x3d45260, _Source="Acroform.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" [0164.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv")) returned 0x20 [0164.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV", dwFileAttributes=0x20) returned 0 [0164.163] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.163] GetLastError () returned 0x5 [0164.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV", dwFileAttributes=0x20) returned 0 [0164.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.163] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd23de00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SLV", cAlternateFileName="ADOBEC~1.SLV")) returned 1 [0164.163] wcscmp (_String1="AdobeCollabSync.SLV", _String2=".") returned 1 [0164.163] wcscmp (_String1="AdobeCollabSync.SLV", _String2="..") returned 1 [0164.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63350 [0164.163] wcscpy (in: _Dest=0x7a63350, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.163] wcscat (in: _Dest=0x7a63350, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.163] wcscat (in: _Dest=0x7a63350, _Source="AdobeCollabSync.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" [0164.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv")) returned 0x20 [0164.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV", dwFileAttributes=0x20) returned 0 [0164.164] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.164] GetLastError () returned 0x5 [0164.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV", dwFileAttributes=0x20) returned 0 [0164.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63350) returned 1 [0164.165] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x75800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SLV", cAlternateFileName="")) returned 1 [0164.165] wcscmp (_String1="Annots.SLV", _String2=".") returned 1 [0164.165] wcscmp (_String1="Annots.SLV", _String2="..") returned 1 [0164.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45260 [0164.165] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.165] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.165] wcscat (in: _Dest=0x3d45260, _Source="Annots.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" [0164.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv")) returned 0x20 [0164.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV", dwFileAttributes=0x20) returned 0 [0164.190] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.190] GetLastError () returned 0x5 [0164.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV", dwFileAttributes=0x20) returned 0 [0164.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.190] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd87d7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SLV", cAlternateFileName="BRDLAN~1.SLV")) returned 1 [0164.190] wcscmp (_String1="BRdlang32.SLV", _String2=".") returned 1 [0164.191] wcscmp (_String1="BRdlang32.SLV", _String2="..") returned 1 [0164.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0164.191] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.191] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.191] wcscat (in: _Dest=0x3eb6a30, _Source="BRdlang32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" [0164.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv")) returned 0x20 [0164.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV", dwFileAttributes=0x20) returned 0 [0164.191] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.191] GetLastError () returned 0x5 [0164.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV", dwFileAttributes=0x20) returned 0 [0164.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0164.191] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SLV", cAlternateFileName="")) returned 1 [0164.192] wcscmp (_String1="Checkers.SLV", _String2=".") returned 1 [0164.192] wcscmp (_String1="Checkers.SLV", _String2="..") returned 1 [0164.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45260 [0164.192] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.192] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.192] wcscat (in: _Dest=0x3d45260, _Source="Checkers.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" [0164.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv")) returned 0x20 [0164.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV", dwFileAttributes=0x20) returned 0 [0164.192] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.192] GetLastError () returned 0x5 [0164.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV", dwFileAttributes=0x20) returned 0 [0164.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.193] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SLV", cAlternateFileName="")) returned 1 [0164.193] wcscmp (_String1="DigSig.SLV", _String2=".") returned 1 [0164.193] wcscmp (_String1="DigSig.SLV", _String2="..") returned 1 [0164.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45260 [0164.193] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.193] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.193] wcscat (in: _Dest=0x3d45260, _Source="DigSig.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" [0164.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv")) returned 0x20 [0164.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV", dwFileAttributes=0x20) returned 0 [0164.193] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.194] GetLastError () returned 0x5 [0164.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV", dwFileAttributes=0x20) returned 0 [0164.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.194] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SLV", cAlternateFileName="")) returned 1 [0164.194] wcscmp (_String1="DVA.SLV", _String2=".") returned 1 [0164.194] wcscmp (_String1="DVA.SLV", _String2="..") returned 1 [0164.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36ead8 [0164.194] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.194] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.194] wcscat (in: _Dest=0x36ead8, _Source="DVA.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" [0164.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv")) returned 0x20 [0164.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV", dwFileAttributes=0x20) returned 0 [0164.197] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.197] GetLastError () returned 0x5 [0164.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV", dwFileAttributes=0x20) returned 0 [0164.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 [0164.197] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SLV", cAlternateFileName="")) returned 1 [0164.197] wcscmp (_String1="eBook.SLV", _String2=".") returned 1 [0164.197] wcscmp (_String1="eBook.SLV", _String2="..") returned 1 [0164.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45260 [0164.197] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.197] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.197] wcscat (in: _Dest=0x3d45260, _Source="eBook.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" [0164.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv")) returned 0x20 [0164.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV", dwFileAttributes=0x20) returned 0 [0164.246] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.246] GetLastError () returned 0x5 [0164.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV", dwFileAttributes=0x20) returned 0 [0164.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.247] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SLV", cAlternateFileName="")) returned 1 [0164.247] wcscmp (_String1="EScript.SLV", _String2=".") returned 1 [0164.247] wcscmp (_String1="EScript.SLV", _String2="..") returned 1 [0164.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45260 [0164.247] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.247] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.247] wcscat (in: _Dest=0x3d45260, _Source="EScript.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" [0164.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv")) returned 0x20 [0164.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV", dwFileAttributes=0x20) returned 0 [0164.281] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.281] GetLastError () returned 0x5 [0164.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV", dwFileAttributes=0x20) returned 0 [0164.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.281] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe18042e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SLV", cAlternateFileName="")) returned 1 [0164.281] wcscmp (_String1="IA32.SLV", _String2=".") returned 1 [0164.281] wcscmp (_String1="IA32.SLV", _String2="..") returned 1 [0164.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0164.281] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.281] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.281] wcscat (in: _Dest=0x3eb8c58, _Source="IA32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" [0164.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv")) returned 0x20 [0164.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV", dwFileAttributes=0x20) returned 0 [0164.282] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.282] GetLastError () returned 0x5 [0164.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV", dwFileAttributes=0x20) returned 0 [0164.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 [0164.283] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.SLV", cAlternateFileName="MAKEAC~1.SLV")) returned 1 [0164.283] wcscmp (_String1="MakeAccessible.SLV", _String2=".") returned 1 [0164.283] wcscmp (_String1="MakeAccessible.SLV", _String2="..") returned 1 [0164.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63170 [0164.283] wcscpy (in: _Dest=0x7a63170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.283] wcscat (in: _Dest=0x7a63170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.283] wcscat (in: _Dest=0x7a63170, _Source="MakeAccessible.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" [0164.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv")) returned 0x20 [0164.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV", dwFileAttributes=0x20) returned 0 [0164.340] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.340] GetLastError () returned 0x5 [0164.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV", dwFileAttributes=0x20) returned 0 [0164.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63170) returned 1 [0164.340] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda386e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SLV", cAlternateFileName="MULTIM~1.SLV")) returned 1 [0164.340] wcscmp (_String1="Multimedia.SLV", _String2=".") returned 1 [0164.340] wcscmp (_String1="Multimedia.SLV", _String2="..") returned 1 [0164.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0164.341] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.341] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.341] wcscat (in: _Dest=0x3eb5d20, _Source="Multimedia.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" [0164.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv")) returned 0x20 [0164.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV", dwFileAttributes=0x20) returned 0 [0164.341] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.341] GetLastError () returned 0x5 [0164.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV", dwFileAttributes=0x20) returned 0 [0164.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.342] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.SLV", cAlternateFileName="")) returned 1 [0164.342] wcscmp (_String1="PDDom.SLV", _String2=".") returned 1 [0164.342] wcscmp (_String1="PDDom.SLV", _String2="..") returned 1 [0164.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44c30 [0164.342] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.342] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.342] wcscat (in: _Dest=0x3d44c30, _Source="PDDom.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" [0164.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv")) returned 0x20 [0164.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV", dwFileAttributes=0x20) returned 0 [0164.343] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.343] GetLastError () returned 0x5 [0164.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV", dwFileAttributes=0x20) returned 0 [0164.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.343] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SLV", cAlternateFileName="")) returned 1 [0164.343] wcscmp (_String1="PPKLITE.SLV", _String2=".") returned 1 [0164.343] wcscmp (_String1="PPKLITE.SLV", _String2="..") returned 1 [0164.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44c30 [0164.343] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.343] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.343] wcscat (in: _Dest=0x3d44c30, _Source="PPKLITE.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" [0164.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv")) returned 0x20 [0164.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV", dwFileAttributes=0x20) returned 0 [0164.344] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.344] GetLastError () returned 0x5 [0164.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV", dwFileAttributes=0x20) returned 0 [0164.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.344] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd04ec20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x146000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SLV", cAlternateFileName="")) returned 1 [0164.344] wcscmp (_String1="RdLang32.SLV", _String2=".") returned 1 [0164.345] wcscmp (_String1="RdLang32.SLV", _String2="..") returned 1 [0164.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44c30 [0164.345] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.345] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.345] wcscat (in: _Dest=0x3d44c30, _Source="RdLang32.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" [0164.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv")) returned 0x20 [0164.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV", dwFileAttributes=0x20) returned 0 [0164.364] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.364] GetLastError () returned 0x5 [0164.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV", dwFileAttributes=0x20) returned 0 [0164.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.364] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SLV", cAlternateFileName="READOU~1.SLV")) returned 1 [0164.364] wcscmp (_String1="ReadOutLoud.SLV", _String2=".") returned 1 [0164.364] wcscmp (_String1="ReadOutLoud.SLV", _String2="..") returned 1 [0164.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5d20 [0164.364] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.364] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.364] wcscat (in: _Dest=0x3eb5d20, _Source="ReadOutLoud.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" [0164.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv")) returned 0x20 [0164.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV", dwFileAttributes=0x20) returned 0 [0164.365] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.365] GetLastError () returned 0x5 [0164.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV", dwFileAttributes=0x20) returned 0 [0164.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.366] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.SLV", cAlternateFileName="")) returned 1 [0164.366] wcscmp (_String1="Reflow.SLV", _String2=".") returned 1 [0164.366] wcscmp (_String1="Reflow.SLV", _String2="..") returned 1 [0164.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44c30 [0164.366] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.366] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.366] wcscat (in: _Dest=0x3d44c30, _Source="Reflow.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" [0164.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv")) returned 0x20 [0164.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV", dwFileAttributes=0x20) returned 0 [0164.408] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.408] GetLastError () returned 0x5 [0164.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV", dwFileAttributes=0x20) returned 0 [0164.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.408] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SLV", cAlternateFileName="SAVEAS~1.SLV")) returned 1 [0164.408] wcscmp (_String1="SaveAsRTF.SLV", _String2=".") returned 1 [0164.408] wcscmp (_String1="SaveAsRTF.SLV", _String2="..") returned 1 [0164.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64aa8 [0164.408] wcscpy (in: _Dest=0x7a64aa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.409] wcscat (in: _Dest=0x7a64aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.409] wcscat (in: _Dest=0x7a64aa8, _Source="SaveAsRTF.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" [0164.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv")) returned 0x20 [0164.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV", dwFileAttributes=0x20) returned 0 [0164.409] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.409] GetLastError () returned 0x5 [0164.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV", dwFileAttributes=0x20) returned 0 [0164.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 [0164.410] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SLV", cAlternateFileName="")) returned 1 [0164.410] wcscmp (_String1="Search.SLV", _String2=".") returned 1 [0164.410] wcscmp (_String1="Search.SLV", _String2="..") returned 1 [0164.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44c30 [0164.410] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.410] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.410] wcscat (in: _Dest=0x3d44c30, _Source="Search.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" [0164.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv")) returned 0x20 [0164.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV", dwFileAttributes=0x20) returned 0 [0164.411] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.411] GetLastError () returned 0x5 [0164.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV", dwFileAttributes=0x20) returned 0 [0164.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.411] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SLV", cAlternateFileName="")) returned 1 [0164.411] wcscmp (_String1="SendMail.SLV", _String2=".") returned 1 [0164.412] wcscmp (_String1="SendMail.SLV", _String2="..") returned 1 [0164.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44c30 [0164.412] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.412] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.412] wcscat (in: _Dest=0x3d44c30, _Source="SendMail.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" [0164.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv")) returned 0x20 [0164.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV", dwFileAttributes=0x20) returned 0 [0164.412] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.413] GetLastError () returned 0x5 [0164.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV", dwFileAttributes=0x20) returned 0 [0164.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0164.413] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.413] wcscmp (_String1="Services", _String2=".") returned 1 [0164.413] wcscmp (_String1="Services", _String2="..") returned 1 [0164.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c290 [0164.413] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0164.413] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0164.413] wcscat (in: _Dest=0x3f3c290, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0164.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44c30 [0164.414] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0164.414] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\" [0164.414] wcscat (in: _Dest=0x3d44c30, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*" [0164.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a557e8 [0164.414] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0165.171] wcscmp (_String1=".", _String2=".") returned 0 [0165.171] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.171] wcscmp (_String1="..", _String2=".") returned 1 [0165.171] wcscmp (_String1="..", _String2="..") returned 0 [0165.171] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9103, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.171] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.171] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e918 [0165.172] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0165.172] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\" [0165.172] wcscat (in: _Dest=0x7a5e918, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" [0173.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18 [0173.843] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0173.843] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0173.843] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0173.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x30531e0 [0173.843] wcscpy (in: _Dest=0x30531e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services" [0173.844] wcscat (in: _Dest=0x30531e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\" [0173.844] wcscat (in: _Dest=0x30531e0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" [0173.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30531e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4 [0173.845] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0173.845] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0173.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a557e8) returned 1 [0173.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 [0173.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 [0173.845] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SLV", cAlternateFileName="")) returned 1 [0173.845] wcscmp (_String1="Spelling.SLV", _String2=".") returned 1 [0173.845] wcscmp (_String1="Spelling.SLV", _String2="..") returned 1 [0173.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44c30 [0173.845] wcscpy (in: _Dest=0x3d44c30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0173.845] wcscat (in: _Dest=0x3d44c30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0173.846] wcscat (in: _Dest=0x3d44c30, _Source="Spelling.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" [0173.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118 [0173.847] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.SLV", cAlternateFileName="")) returned 1 [0173.847] wcscmp (_String1="Updater.SLV", _String2=".") returned 1 [0173.847] wcscmp (_String1="Updater.SLV", _String2="..") returned 1 [0173.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44180 [0173.847] wcscpy (in: _Dest=0x3d44180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0173.847] wcscat (in: _Dest=0x3d44180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0173.847] wcscat (in: _Dest=0x3d44180, _Source="Updater.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" [0173.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0173.848] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SLV", cAlternateFileName="")) returned 1 [0173.848] wcscmp (_String1="Weblink.SLV", _String2=".") returned 1 [0173.848] wcscmp (_String1="Weblink.SLV", _String2="..") returned 1 [0173.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0173.848] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI" [0173.848] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\" [0173.848] wcscat (in: _Dest=0x3d44d50, _Source="Weblink.SLV" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" [0173.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0173.850] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe182a440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SLV", cAlternateFileName="")) returned 0 [0173.850] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0173.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5710) returned 1 [0173.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47918) returned 1 [0173.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 Thread: id = 2984 os_tid = 0x1a60 [0158.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47418 [0158.956] wcscpy (in: _Dest=0x3e47418, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0158.956] wcscat (in: _Dest=0x3e47418, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0158.956] wcscat (in: _Dest=0x3e47418, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*" [0158.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0158.956] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0162.154] wcscmp (_String1=".", _String2=".") returned 0 [0162.154] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda2c8760, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe144c080, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.154] wcscmp (_String1="..", _String2=".") returned 1 [0162.154] wcscmp (_String1="..", _String2="..") returned 0 [0162.154] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SVE", cAlternateFileName="ACCESS~1.SVE")) returned 1 [0162.154] wcscmp (_String1="accessibility.SVE", _String2=".") returned 1 [0162.154] wcscmp (_String1="accessibility.SVE", _String2="..") returned 1 [0162.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a635d0 [0162.155] wcscpy (in: _Dest=0x7a635d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0162.155] wcscat (in: _Dest=0x7a635d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0162.155] wcscat (in: _Dest=0x7a635d0, _Source="accessibility.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" [0164.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve")) returned 0x20 [0164.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE", dwFileAttributes=0x20) returned 0 [0164.117] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.117] GetLastError () returned 0x5 [0164.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE", dwFileAttributes=0x20) returned 0 [0164.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a635d0) returned 1 [0164.117] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SVE", cAlternateFileName="")) returned 1 [0164.117] wcscmp (_String1="Acroform.SVE", _String2=".") returned 1 [0164.118] wcscmp (_String1="Acroform.SVE", _String2="..") returned 1 [0164.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.118] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.118] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.118] wcscat (in: _Dest=0x3d44d50, _Source="Acroform.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" [0164.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve")) returned 0x20 [0164.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE", dwFileAttributes=0x20) returned 0 [0164.122] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.122] GetLastError () returned 0x5 [0164.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE", dwFileAttributes=0x20) returned 0 [0164.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.122] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdc9048c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SVE", cAlternateFileName="ADOBEC~1.SVE")) returned 1 [0164.123] wcscmp (_String1="AdobeCollabSync.SVE", _String2=".") returned 1 [0164.123] wcscmp (_String1="AdobeCollabSync.SVE", _String2="..") returned 1 [0164.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63670 [0164.123] wcscpy (in: _Dest=0x7a63670, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.123] wcscat (in: _Dest=0x7a63670, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.123] wcscat (in: _Dest=0x7a63670, _Source="AdobeCollabSync.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" [0164.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve")) returned 0x20 [0164.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE", dwFileAttributes=0x20) returned 0 [0164.128] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.128] GetLastError () returned 0x5 [0164.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE", dwFileAttributes=0x20) returned 0 [0164.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63670) returned 1 [0164.129] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SVE", cAlternateFileName="")) returned 1 [0164.129] wcscmp (_String1="Annots.SVE", _String2=".") returned 1 [0164.129] wcscmp (_String1="Annots.SVE", _String2="..") returned 1 [0164.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45260 [0164.129] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.129] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.129] wcscat (in: _Dest=0x3d45260, _Source="Annots.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" [0164.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve")) returned 0x20 [0164.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE", dwFileAttributes=0x20) returned 0 [0164.130] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.130] GetLastError () returned 0x5 [0164.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE", dwFileAttributes=0x20) returned 0 [0164.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 [0164.130] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SVE", cAlternateFileName="BRDLAN~1.SVE")) returned 1 [0164.130] wcscmp (_String1="BRdlang32.SVE", _String2=".") returned 1 [0164.131] wcscmp (_String1="BRdlang32.SVE", _String2="..") returned 1 [0164.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.131] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.131] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.131] wcscat (in: _Dest=0x3eb5d20, _Source="BRdlang32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" [0164.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve")) returned 0x20 [0164.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE", dwFileAttributes=0x20) returned 0 [0164.159] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.159] GetLastError () returned 0x5 [0164.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE", dwFileAttributes=0x20) returned 0 [0164.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.160] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SVE", cAlternateFileName="")) returned 1 [0164.160] wcscmp (_String1="Checkers.SVE", _String2=".") returned 1 [0164.160] wcscmp (_String1="Checkers.SVE", _String2="..") returned 1 [0164.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.160] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.160] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.160] wcscat (in: _Dest=0x3d44d50, _Source="Checkers.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" [0164.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve")) returned 0x20 [0164.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE", dwFileAttributes=0x20) returned 0 [0164.181] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.181] GetLastError () returned 0x5 [0164.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE", dwFileAttributes=0x20) returned 0 [0164.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.182] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SVE", cAlternateFileName="")) returned 1 [0164.182] wcscmp (_String1="DigSig.SVE", _String2=".") returned 1 [0164.182] wcscmp (_String1="DigSig.SVE", _String2="..") returned 1 [0164.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.182] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.182] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.182] wcscat (in: _Dest=0x3d44d50, _Source="DigSig.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" [0164.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve")) returned 0x20 [0164.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE", dwFileAttributes=0x20) returned 0 [0164.183] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.183] GetLastError () returned 0x5 [0164.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE", dwFileAttributes=0x20) returned 0 [0164.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.183] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SVE", cAlternateFileName="")) returned 1 [0164.183] wcscmp (_String1="DVA.SVE", _String2=".") returned 1 [0164.183] wcscmp (_String1="DVA.SVE", _String2="..") returned 1 [0164.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x36ecf8 [0164.183] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.183] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.183] wcscat (in: _Dest=0x36ecf8, _Source="DVA.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" [0164.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve")) returned 0x20 [0164.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE", dwFileAttributes=0x20) returned 0 [0164.184] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.184] GetLastError () returned 0x5 [0164.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE", dwFileAttributes=0x20) returned 0 [0164.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 [0164.184] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SVE", cAlternateFileName="")) returned 1 [0164.184] wcscmp (_String1="eBook.SVE", _String2=".") returned 1 [0164.184] wcscmp (_String1="eBook.SVE", _String2="..") returned 1 [0164.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0164.184] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.184] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.184] wcscat (in: _Dest=0x3d44d50, _Source="eBook.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" [0164.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve")) returned 0x20 [0164.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE", dwFileAttributes=0x20) returned 0 [0164.185] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.185] GetLastError () returned 0x5 [0164.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE", dwFileAttributes=0x20) returned 0 [0164.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.185] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SVE", cAlternateFileName="")) returned 1 [0164.185] wcscmp (_String1="EScript.SVE", _String2=".") returned 1 [0164.185] wcscmp (_String1="EScript.SVE", _String2="..") returned 1 [0164.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0164.185] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.186] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.186] wcscat (in: _Dest=0x3d44d50, _Source="EScript.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" [0164.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve")) returned 0x20 [0164.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE", dwFileAttributes=0x20) returned 0 [0164.186] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.186] GetLastError () returned 0x5 [0164.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE", dwFileAttributes=0x20) returned 0 [0164.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.186] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SVE", cAlternateFileName="")) returned 1 [0164.186] wcscmp (_String1="IA32.SVE", _String2=".") returned 1 [0164.186] wcscmp (_String1="IA32.SVE", _String2="..") returned 1 [0164.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ecf8 [0164.187] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.187] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.187] wcscat (in: _Dest=0x36ecf8, _Source="IA32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" [0164.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve")) returned 0x20 [0164.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE", dwFileAttributes=0x20) returned 0 [0164.208] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.208] GetLastError () returned 0x5 [0164.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE", dwFileAttributes=0x20) returned 0 [0164.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 [0164.208] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda718f40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SVE", cAlternateFileName="MAKEAC~1.SVE")) returned 1 [0164.208] wcscmp (_String1="makeaccessible.SVE", _String2=".") returned 1 [0164.208] wcscmp (_String1="makeaccessible.SVE", _String2="..") returned 1 [0164.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63490 [0164.208] wcscpy (in: _Dest=0x7a63490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.209] wcscat (in: _Dest=0x7a63490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.209] wcscat (in: _Dest=0x7a63490, _Source="makeaccessible.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" [0164.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve")) returned 0x20 [0164.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE", dwFileAttributes=0x20) returned 0 [0164.209] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.209] GetLastError () returned 0x5 [0164.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE", dwFileAttributes=0x20) returned 0 [0164.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63490) returned 1 [0164.209] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda2c8760, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SVE", cAlternateFileName="MULTIM~1.SVE")) returned 1 [0164.209] wcscmp (_String1="Multimedia.SVE", _String2=".") returned 1 [0164.210] wcscmp (_String1="Multimedia.SVE", _String2="..") returned 1 [0164.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0164.210] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.210] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.210] wcscat (in: _Dest=0x3eb5d20, _Source="Multimedia.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" [0164.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve")) returned 0x20 [0164.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE", dwFileAttributes=0x20) returned 0 [0164.210] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.210] GetLastError () returned 0x5 [0164.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE", dwFileAttributes=0x20) returned 0 [0164.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.211] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SVE", cAlternateFileName="")) returned 1 [0164.211] wcscmp (_String1="pddom.SVE", _String2=".") returned 1 [0164.211] wcscmp (_String1="pddom.SVE", _String2="..") returned 1 [0164.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45ad0 [0164.211] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.211] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.211] wcscat (in: _Dest=0x3d45ad0, _Source="pddom.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" [0164.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve")) returned 0x20 [0164.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE", dwFileAttributes=0x20) returned 0 [0164.212] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.212] GetLastError () returned 0x5 [0164.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE", dwFileAttributes=0x20) returned 0 [0164.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 [0164.212] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SVE", cAlternateFileName="")) returned 1 [0164.212] wcscmp (_String1="PPKLITE.SVE", _String2=".") returned 1 [0164.212] wcscmp (_String1="PPKLITE.SVE", _String2="..") returned 1 [0164.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45ad0 [0164.212] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.212] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.212] wcscat (in: _Dest=0x3d45ad0, _Source="PPKLITE.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" [0164.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve")) returned 0x20 [0164.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE", dwFileAttributes=0x20) returned 0 [0164.213] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.213] GetLastError () returned 0x5 [0164.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE", dwFileAttributes=0x20) returned 0 [0164.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 [0164.214] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb704260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x141800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SVE", cAlternateFileName="")) returned 1 [0164.214] wcscmp (_String1="RdLang32.SVE", _String2=".") returned 1 [0164.214] wcscmp (_String1="RdLang32.SVE", _String2="..") returned 1 [0164.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45ad0 [0164.214] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.214] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.214] wcscat (in: _Dest=0x3d45ad0, _Source="RdLang32.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" [0164.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve")) returned 0x20 [0164.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE", dwFileAttributes=0x20) returned 0 [0164.215] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.215] GetLastError () returned 0x5 [0164.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE", dwFileAttributes=0x20) returned 0 [0164.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 [0164.215] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SVE", cAlternateFileName="READOU~1.SVE")) returned 1 [0164.215] wcscmp (_String1="ReadOutLoud.SVE", _String2=".") returned 1 [0164.215] wcscmp (_String1="ReadOutLoud.SVE", _String2="..") returned 1 [0164.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5d20 [0164.215] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.215] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.215] wcscat (in: _Dest=0x3eb5d20, _Source="ReadOutLoud.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" [0164.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve")) returned 0x20 [0164.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE", dwFileAttributes=0x20) returned 0 [0164.216] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.216] GetLastError () returned 0x5 [0164.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE", dwFileAttributes=0x20) returned 0 [0164.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.216] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SVE", cAlternateFileName="")) returned 1 [0164.216] wcscmp (_String1="reflow.SVE", _String2=".") returned 1 [0164.216] wcscmp (_String1="reflow.SVE", _String2="..") returned 1 [0164.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45ad0 [0164.216] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.216] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.217] wcscat (in: _Dest=0x3d45ad0, _Source="reflow.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" [0164.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve")) returned 0x20 [0164.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE", dwFileAttributes=0x20) returned 0 [0164.217] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.217] GetLastError () returned 0x5 [0164.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE", dwFileAttributes=0x20) returned 0 [0164.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 [0164.217] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SVE", cAlternateFileName="SAVEAS~1.SVE")) returned 1 [0164.217] wcscmp (_String1="SaveAsRTF.SVE", _String2=".") returned 1 [0164.217] wcscmp (_String1="SaveAsRTF.SVE", _String2="..") returned 1 [0164.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.218] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.218] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.218] wcscat (in: _Dest=0x3eb5d20, _Source="SaveAsRTF.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" [0164.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve")) returned 0x20 [0164.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE", dwFileAttributes=0x20) returned 0 [0164.218] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.218] GetLastError () returned 0x5 [0164.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE", dwFileAttributes=0x20) returned 0 [0164.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.219] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SVE", cAlternateFileName="")) returned 1 [0164.219] wcscmp (_String1="Search.SVE", _String2=".") returned 1 [0164.219] wcscmp (_String1="Search.SVE", _String2="..") returned 1 [0164.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45ad0 [0164.219] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.219] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.219] wcscat (in: _Dest=0x3d45ad0, _Source="Search.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" [0164.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve")) returned 0x20 [0164.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE", dwFileAttributes=0x20) returned 0 [0164.219] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.219] GetLastError () returned 0x5 [0164.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE", dwFileAttributes=0x20) returned 0 [0164.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 [0164.220] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1152500, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SVE", cAlternateFileName="")) returned 1 [0164.220] wcscmp (_String1="SendMail.SVE", _String2=".") returned 1 [0164.220] wcscmp (_String1="SendMail.SVE", _String2="..") returned 1 [0164.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45ad0 [0164.220] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.220] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.220] wcscat (in: _Dest=0x3d45ad0, _Source="SendMail.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" [0164.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve")) returned 0x20 [0164.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE", dwFileAttributes=0x20) returned 0 [0164.221] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.221] GetLastError () returned 0x5 [0164.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE", dwFileAttributes=0x20) returned 0 [0164.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 [0164.221] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.221] wcscmp (_String1="Services", _String2=".") returned 1 [0164.221] wcscmp (_String1="Services", _String2="..") returned 1 [0164.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x36ecf8 [0164.221] wcscpy (in: _Dest=0x36ecf8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0164.221] wcscat (in: _Dest=0x36ecf8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0164.222] wcscat (in: _Dest=0x36ecf8, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0164.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45ad0 [0164.222] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0164.222] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\" [0164.222] wcscat (in: _Dest=0x3d45ad0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*" [0164.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0164.222] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0165.134] wcscmp (_String1=".", _String2=".") returned 0 [0165.134] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.134] wcscmp (_String1="..", _String2=".") returned 1 [0165.134] wcscmp (_String1="..", _String2="..") returned 0 [0165.134] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.134] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.134] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x30531e0 [0165.134] wcscpy (in: _Dest=0x30531e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0165.134] wcscat (in: _Dest=0x30531e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\" [0165.134] wcscat (in: _Dest=0x30531e0, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" [0167.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30531e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0167.719] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0167.719] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0167.719] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0167.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e720 [0167.719] wcscpy (in: _Dest=0x7a5e720, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services" [0167.719] wcscat (in: _Dest=0x7a5e720, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\" [0167.719] wcscat (in: _Dest=0x7a5e720, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" [0167.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1444 [0167.720] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0167.720] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0167.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0167.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 [0167.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 [0167.721] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaefb820, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SVE", cAlternateFileName="")) returned 1 [0167.721] wcscmp (_String1="Spelling.SVE", _String2=".") returned 1 [0167.721] wcscmp (_String1="Spelling.SVE", _String2="..") returned 1 [0167.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45ad0 [0167.721] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0167.721] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0167.721] wcscat (in: _Dest=0x3d45ad0, _Source="Spelling.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" [0167.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0167.723] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SVE", cAlternateFileName="")) returned 1 [0167.723] wcscmp (_String1="updater.SVE", _String2=".") returned 1 [0167.723] wcscmp (_String1="updater.SVE", _String2="..") returned 1 [0167.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45c80 [0167.723] wcscpy (in: _Dest=0x3d45c80, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0167.723] wcscat (in: _Dest=0x3d45c80, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0167.723] wcscat (in: _Dest=0x3d45c80, _Source="updater.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" [0167.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440 [0167.724] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SVE", cAlternateFileName="")) returned 1 [0167.724] wcscmp (_String1="Weblink.SVE", _String2=".") returned 1 [0167.725] wcscmp (_String1="Weblink.SVE", _String2="..") returned 1 [0167.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d448d0 [0167.725] wcscpy (in: _Dest=0x3d448d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE" [0167.725] wcscat (in: _Dest=0x3d448d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\" [0167.725] wcscat (in: _Dest=0x3d448d0, _Source="Weblink.SVE" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" [0167.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d448d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0167.726] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe112c3a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SVE", cAlternateFileName="")) returned 0 [0167.726] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0167.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0167.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47418) returned 1 [0167.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 Thread: id = 2985 os_tid = 0x1a64 [0158.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47318 [0158.958] wcscpy (in: _Dest=0x3e47318, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0158.958] wcscat (in: _Dest=0x3e47318, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0158.958] wcscat (in: _Dest=0x3e47318, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*" [0158.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0158.959] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7af0 [0162.158] wcscmp (_String1=".", _String2=".") returned 0 [0162.158] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.158] wcscmp (_String1="..", _String2=".") returned 1 [0162.158] wcscmp (_String1="..", _String2="..") returned 0 [0162.158] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.TUR", cAlternateFileName="ACCESS~1.TUR")) returned 1 [0162.158] wcscmp (_String1="Accessibility.TUR", _String2=".") returned 1 [0162.158] wcscmp (_String1="Accessibility.TUR", _String2="..") returned 1 [0162.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a638f0 [0162.158] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0162.158] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0162.158] wcscat (in: _Dest=0x7a638f0, _Source="Accessibility.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" [0164.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur")) returned 0x20 [0164.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR", dwFileAttributes=0x20) returned 0 [0164.231] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.231] GetLastError () returned 0x5 [0164.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR", dwFileAttributes=0x20) returned 0 [0164.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 [0164.231] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x61200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.TUR", cAlternateFileName="")) returned 1 [0164.231] wcscmp (_String1="Acroform.TUR", _String2=".") returned 1 [0164.231] wcscmp (_String1="Acroform.TUR", _String2="..") returned 1 [0164.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45770 [0164.232] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.232] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.232] wcscat (in: _Dest=0x3d45770, _Source="Acroform.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" [0164.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur")) returned 0x20 [0164.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR", dwFileAttributes=0x20) returned 0 [0164.269] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.269] GetLastError () returned 0x5 [0164.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR", dwFileAttributes=0x20) returned 0 [0164.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.270] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.TUR", cAlternateFileName="ADOBEC~1.TUR")) returned 1 [0164.270] wcscmp (_String1="AdobeCollabSync.TUR", _String2=".") returned 1 [0164.270] wcscmp (_String1="AdobeCollabSync.TUR", _String2="..") returned 1 [0164.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63170 [0164.270] wcscpy (in: _Dest=0x7a63170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.270] wcscat (in: _Dest=0x7a63170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.270] wcscat (in: _Dest=0x7a63170, _Source="AdobeCollabSync.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" [0164.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur")) returned 0x20 [0164.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR", dwFileAttributes=0x20) returned 0 [0164.271] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.271] GetLastError () returned 0x5 [0164.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR", dwFileAttributes=0x20) returned 0 [0164.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63170) returned 1 [0164.272] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ad7d00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x75000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.TUR", cAlternateFileName="")) returned 1 [0164.272] wcscmp (_String1="Annots.TUR", _String2=".") returned 1 [0164.272] wcscmp (_String1="Annots.TUR", _String2="..") returned 1 [0164.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45770 [0164.272] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.272] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.272] wcscat (in: _Dest=0x3d45770, _Source="Annots.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" [0164.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur")) returned 0x20 [0164.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR", dwFileAttributes=0x20) returned 0 [0164.273] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.273] GetLastError () returned 0x5 [0164.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR", dwFileAttributes=0x20) returned 0 [0164.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.273] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.TUR", cAlternateFileName="BRDLAN~1.TUR")) returned 1 [0164.273] wcscmp (_String1="BRdlang32.TUR", _String2=".") returned 1 [0164.273] wcscmp (_String1="BRdlang32.TUR", _String2="..") returned 1 [0164.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.274] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.274] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.274] wcscat (in: _Dest=0x3eb5d20, _Source="BRdlang32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" [0164.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur")) returned 0x20 [0164.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR", dwFileAttributes=0x20) returned 0 [0164.274] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.274] GetLastError () returned 0x5 [0164.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR", dwFileAttributes=0x20) returned 0 [0164.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.275] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.TUR", cAlternateFileName="")) returned 1 [0164.275] wcscmp (_String1="Checkers.TUR", _String2=".") returned 1 [0164.275] wcscmp (_String1="Checkers.TUR", _String2="..") returned 1 [0164.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45770 [0164.275] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.275] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.275] wcscat (in: _Dest=0x3d45770, _Source="Checkers.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" [0164.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur")) returned 0x20 [0164.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR", dwFileAttributes=0x20) returned 0 [0164.276] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.276] GetLastError () returned 0x5 [0164.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR", dwFileAttributes=0x20) returned 0 [0164.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.277] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.TUR", cAlternateFileName="")) returned 1 [0164.277] wcscmp (_String1="DigSig.TUR", _String2=".") returned 1 [0164.277] wcscmp (_String1="DigSig.TUR", _String2="..") returned 1 [0164.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45770 [0164.277] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.277] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.277] wcscat (in: _Dest=0x3d45770, _Source="DigSig.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" [0164.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur")) returned 0x20 [0164.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR", dwFileAttributes=0x20) returned 0 [0164.323] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.323] GetLastError () returned 0x5 [0164.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR", dwFileAttributes=0x20) returned 0 [0164.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.324] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.TUR", cAlternateFileName="")) returned 1 [0164.324] wcscmp (_String1="DVA.TUR", _String2=".") returned 1 [0164.324] wcscmp (_String1="DVA.TUR", _String2="..") returned 1 [0164.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c648 [0164.324] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.324] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.324] wcscat (in: _Dest=0x3f3c648, _Source="DVA.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" [0164.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur")) returned 0x20 [0164.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR", dwFileAttributes=0x20) returned 0 [0164.325] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.325] GetLastError () returned 0x5 [0164.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR", dwFileAttributes=0x20) returned 0 [0164.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 [0164.325] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.TUR", cAlternateFileName="")) returned 1 [0164.325] wcscmp (_String1="eBook.TUR", _String2=".") returned 1 [0164.325] wcscmp (_String1="eBook.TUR", _String2="..") returned 1 [0164.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45770 [0164.325] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.325] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.325] wcscat (in: _Dest=0x3d45770, _Source="eBook.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" [0164.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur")) returned 0x20 [0164.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR", dwFileAttributes=0x20) returned 0 [0164.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.326] GetLastError () returned 0x5 [0164.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR", dwFileAttributes=0x20) returned 0 [0164.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.326] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.TUR", cAlternateFileName="")) returned 1 [0164.327] wcscmp (_String1="EScript.TUR", _String2=".") returned 1 [0164.327] wcscmp (_String1="EScript.TUR", _String2="..") returned 1 [0164.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45770 [0164.327] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.327] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.327] wcscat (in: _Dest=0x3d45770, _Source="EScript.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" [0164.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur")) returned 0x20 [0164.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR", dwFileAttributes=0x20) returned 0 [0164.327] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.327] GetLastError () returned 0x5 [0164.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR", dwFileAttributes=0x20) returned 0 [0164.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.328] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17b8020, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.TUR", cAlternateFileName="")) returned 1 [0164.328] wcscmp (_String1="IA32.TUR", _String2=".") returned 1 [0164.328] wcscmp (_String1="IA32.TUR", _String2="..") returned 1 [0164.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c648 [0164.328] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.328] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.328] wcscat (in: _Dest=0x3f3c648, _Source="IA32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" [0164.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur")) returned 0x20 [0164.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR", dwFileAttributes=0x20) returned 0 [0164.329] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.329] GetLastError () returned 0x5 [0164.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR", dwFileAttributes=0x20) returned 0 [0164.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 [0164.329] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda849a40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.TUR", cAlternateFileName="MAKEAC~1.TUR")) returned 1 [0164.329] wcscmp (_String1="MakeAccessible.TUR", _String2=".") returned 1 [0164.329] wcscmp (_String1="MakeAccessible.TUR", _String2="..") returned 1 [0164.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a638f0 [0164.329] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.329] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.329] wcscat (in: _Dest=0x7a638f0, _Source="MakeAccessible.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" [0164.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur")) returned 0x20 [0164.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR", dwFileAttributes=0x20) returned 0 [0164.330] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.330] GetLastError () returned 0x5 [0164.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR", dwFileAttributes=0x20) returned 0 [0164.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 [0164.330] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.TUR", cAlternateFileName="MULTIM~1.TUR")) returned 1 [0164.331] wcscmp (_String1="Multimedia.TUR", _String2=".") returned 1 [0164.331] wcscmp (_String1="Multimedia.TUR", _String2="..") returned 1 [0164.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0164.331] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.331] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.331] wcscat (in: _Dest=0x3eb5d20, _Source="Multimedia.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" [0164.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur")) returned 0x20 [0164.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR", dwFileAttributes=0x20) returned 0 [0164.331] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.332] GetLastError () returned 0x5 [0164.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR", dwFileAttributes=0x20) returned 0 [0164.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.332] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.TUR", cAlternateFileName="")) returned 1 [0164.332] wcscmp (_String1="PDDom.TUR", _String2=".") returned 1 [0164.332] wcscmp (_String1="PDDom.TUR", _String2="..") returned 1 [0164.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45770 [0164.332] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.332] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.332] wcscat (in: _Dest=0x3d45770, _Source="PDDom.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" [0164.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur")) returned 0x20 [0164.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR", dwFileAttributes=0x20) returned 0 [0164.357] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.357] GetLastError () returned 0x5 [0164.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR", dwFileAttributes=0x20) returned 0 [0164.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.358] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.TUR", cAlternateFileName="")) returned 1 [0164.358] wcscmp (_String1="PPKLITE.TUR", _String2=".") returned 1 [0164.358] wcscmp (_String1="PPKLITE.TUR", _String2="..") returned 1 [0164.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45770 [0164.358] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.358] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.358] wcscat (in: _Dest=0x3d45770, _Source="PPKLITE.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" [0164.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur")) returned 0x20 [0164.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR", dwFileAttributes=0x20) returned 0 [0164.398] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.399] GetLastError () returned 0x5 [0164.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR", dwFileAttributes=0x20) returned 0 [0164.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.399] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd028ac0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.TUR", cAlternateFileName="")) returned 1 [0164.399] wcscmp (_String1="RdLang32.TUR", _String2=".") returned 1 [0164.399] wcscmp (_String1="RdLang32.TUR", _String2="..") returned 1 [0164.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45770 [0164.399] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.399] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.399] wcscat (in: _Dest=0x3d45770, _Source="RdLang32.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" [0164.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur")) returned 0x20 [0164.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR", dwFileAttributes=0x20) returned 0 [0164.400] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.400] GetLastError () returned 0x5 [0164.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR", dwFileAttributes=0x20) returned 0 [0164.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.401] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.TUR", cAlternateFileName="READOU~1.TUR")) returned 1 [0164.401] wcscmp (_String1="ReadOutLoud.TUR", _String2=".") returned 1 [0164.401] wcscmp (_String1="ReadOutLoud.TUR", _String2="..") returned 1 [0164.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5d20 [0164.401] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.401] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.401] wcscat (in: _Dest=0x3eb5d20, _Source="ReadOutLoud.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" [0164.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur")) returned 0x20 [0164.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR", dwFileAttributes=0x20) returned 0 [0164.485] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.485] GetLastError () returned 0x5 [0164.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR", dwFileAttributes=0x20) returned 0 [0164.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.485] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.TUR", cAlternateFileName="")) returned 1 [0164.485] wcscmp (_String1="Reflow.TUR", _String2=".") returned 1 [0164.485] wcscmp (_String1="Reflow.TUR", _String2="..") returned 1 [0164.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45770 [0164.486] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.486] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.486] wcscat (in: _Dest=0x3d45770, _Source="Reflow.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" [0164.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur")) returned 0x20 [0164.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR", dwFileAttributes=0x20) returned 0 [0164.486] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.486] GetLastError () returned 0x5 [0164.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR", dwFileAttributes=0x20) returned 0 [0164.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.487] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.TUR", cAlternateFileName="SAVEAS~1.TUR")) returned 1 [0164.487] wcscmp (_String1="SaveAsRTF.TUR", _String2=".") returned 1 [0164.487] wcscmp (_String1="SaveAsRTF.TUR", _String2="..") returned 1 [0164.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.487] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.487] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.487] wcscat (in: _Dest=0x3eb5d20, _Source="SaveAsRTF.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" [0164.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur")) returned 0x20 [0164.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR", dwFileAttributes=0x20) returned 0 [0164.488] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.488] GetLastError () returned 0x5 [0164.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR", dwFileAttributes=0x20) returned 0 [0164.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.488] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.TUR", cAlternateFileName="")) returned 1 [0164.488] wcscmp (_String1="Search.TUR", _String2=".") returned 1 [0164.488] wcscmp (_String1="Search.TUR", _String2="..") returned 1 [0164.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45770 [0164.488] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.488] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.488] wcscat (in: _Dest=0x3d45770, _Source="Search.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" [0164.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur")) returned 0x20 [0164.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR", dwFileAttributes=0x20) returned 0 [0164.489] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.489] GetLastError () returned 0x5 [0164.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR", dwFileAttributes=0x20) returned 0 [0164.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.489] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.TUR", cAlternateFileName="")) returned 1 [0164.489] wcscmp (_String1="SendMail.TUR", _String2=".") returned 1 [0164.489] wcscmp (_String1="SendMail.TUR", _String2="..") returned 1 [0164.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45770 [0164.490] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.490] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.490] wcscat (in: _Dest=0x3d45770, _Source="SendMail.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" [0164.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur")) returned 0x20 [0164.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR", dwFileAttributes=0x20) returned 0 [0164.490] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.490] GetLastError () returned 0x5 [0164.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR", dwFileAttributes=0x20) returned 0 [0164.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0164.491] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.491] wcscmp (_String1="Services", _String2=".") returned 1 [0164.491] wcscmp (_String1="Services", _String2="..") returned 1 [0164.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d308 [0164.491] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0164.491] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0164.491] wcscat (in: _Dest=0x3f3d308, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0164.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45770 [0164.491] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0164.491] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\" [0164.491] wcscat (in: _Dest=0x3d45770, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*" [0164.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55580 [0164.491] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0165.174] wcscmp (_String1=".", _String2=".") returned 0 [0165.174] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.174] wcscmp (_String1="..", _String2=".") returned 1 [0165.174] wcscmp (_String1="..", _String2="..") returned 0 [0165.174] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9270, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.174] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.174] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f590 [0165.174] wcscpy (in: _Dest=0x7a5f590, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0165.174] wcscat (in: _Dest=0x7a5f590, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\" [0165.174] wcscat (in: _Dest=0x7a5f590, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" [0172.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda0 [0172.866] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.866] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.866] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e1e0 [0172.866] wcscpy (in: _Dest=0x7a5e1e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services" [0172.866] wcscat (in: _Dest=0x7a5e1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\" [0172.866] wcscat (in: _Dest=0x7a5e1e0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" [0172.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0172.867] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.868] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0172.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55580) returned 1 [0172.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 [0172.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 [0172.868] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.TUR", cAlternateFileName="")) returned 1 [0172.868] wcscmp (_String1="Spelling.TUR", _String2=".") returned 1 [0172.868] wcscmp (_String1="Spelling.TUR", _String2="..") returned 1 [0172.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45770 [0172.868] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0172.868] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0172.868] wcscat (in: _Dest=0x3d45770, _Source="Spelling.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" [0172.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0172.870] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.TUR", cAlternateFileName="")) returned 1 [0172.870] wcscmp (_String1="Updater.TUR", _String2=".") returned 1 [0172.870] wcscmp (_String1="Updater.TUR", _String2="..") returned 1 [0172.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45ad0 [0172.870] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0172.870] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0172.870] wcscat (in: _Dest=0x3d45ad0, _Source="Updater.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" [0172.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0172.871] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.TUR", cAlternateFileName="")) returned 1 [0172.871] wcscmp (_String1="Weblink.TUR", _String2=".") returned 1 [0172.871] wcscmp (_String1="Weblink.TUR", _String2="..") returned 1 [0172.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d45f50 [0172.871] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR" [0172.871] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\" [0172.871] wcscat (in: _Dest=0x3d45f50, _Source="Weblink.TUR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" [0172.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4 [0172.873] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe17de180, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.TUR", cAlternateFileName="")) returned 0 [0172.873] FindClose (in: hFindFile=0x7ad7af0 | out: hFindFile=0x7ad7af0) returned 1 [0172.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0172.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47318) returned 1 [0172.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 Thread: id = 2986 os_tid = 0x1a68 [0158.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47d98 [0158.960] wcscpy (in: _Dest=0x3e47d98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0158.960] wcscat (in: _Dest=0x3e47d98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0158.960] wcscat (in: _Dest=0x3e47d98, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*" [0158.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3c98 [0158.960] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7c70 [0162.157] wcscmp (_String1=".", _String2=".") returned 0 [0162.157] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xda360ce0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe1ab1ba0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.157] wcscmp (_String1="..", _String2=".") returned 1 [0162.157] wcscmp (_String1="..", _String2="..") returned 0 [0162.157] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaa84ee0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.UKR", cAlternateFileName="ACCESS~1.UKR")) returned 1 [0162.157] wcscmp (_String1="Accessibility.UKR", _String2=".") returned 1 [0162.157] wcscmp (_String1="Accessibility.UKR", _String2="..") returned 1 [0162.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63490 [0162.158] wcscpy (in: _Dest=0x7a63490, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0162.158] wcscat (in: _Dest=0x7a63490, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0162.158] wcscat (in: _Dest=0x7a63490, _Source="Accessibility.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" [0164.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr")) returned 0x20 [0164.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR", dwFileAttributes=0x20) returned 0 [0164.188] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.188] GetLastError () returned 0x5 [0164.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR", dwFileAttributes=0x20) returned 0 [0164.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63490) returned 1 [0164.189] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1745c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x65600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.UKR", cAlternateFileName="")) returned 1 [0164.189] wcscmp (_String1="Acroform.UKR", _String2=".") returned 1 [0164.189] wcscmp (_String1="Acroform.UKR", _String2="..") returned 1 [0164.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.189] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.189] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.189] wcscat (in: _Dest=0x3d44d50, _Source="Acroform.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" [0164.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr")) returned 0x20 [0164.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR", dwFileAttributes=0x20) returned 0 [0164.233] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.233] GetLastError () returned 0x5 [0164.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR", dwFileAttributes=0x20) returned 0 [0164.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.234] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd217ca0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.UKR", cAlternateFileName="ADOBEC~1.UKR")) returned 1 [0164.234] wcscmp (_String1="AdobeCollabSync.UKR", _String2=".") returned 1 [0164.234] wcscmp (_String1="AdobeCollabSync.UKR", _String2="..") returned 1 [0164.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a638f0 [0164.234] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.234] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.234] wcscat (in: _Dest=0x7a638f0, _Source="AdobeCollabSync.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" [0164.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr")) returned 0x20 [0164.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR", dwFileAttributes=0x20) returned 0 [0164.234] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.235] GetLastError () returned 0x5 [0164.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR", dwFileAttributes=0x20) returned 0 [0164.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 [0164.235] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1ab1ba0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.UKR", cAlternateFileName="")) returned 1 [0164.235] wcscmp (_String1="Annots.UKR", _String2=".") returned 1 [0164.235] wcscmp (_String1="Annots.UKR", _String2="..") returned 1 [0164.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.235] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.235] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.235] wcscat (in: _Dest=0x3d44d50, _Source="Annots.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" [0164.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr")) returned 0x20 [0164.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR", dwFileAttributes=0x20) returned 0 [0164.236] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.236] GetLastError () returned 0x5 [0164.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR", dwFileAttributes=0x20) returned 0 [0164.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.236] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd8a3920, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.UKR", cAlternateFileName="BRDLAN~1.UKR")) returned 1 [0164.236] wcscmp (_String1="BRdlang32.UKR", _String2=".") returned 1 [0164.236] wcscmp (_String1="BRdlang32.UKR", _String2="..") returned 1 [0164.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.236] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.236] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.237] wcscat (in: _Dest=0x3eb5d20, _Source="BRdlang32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" [0164.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr")) returned 0x20 [0164.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR", dwFileAttributes=0x20) returned 0 [0164.237] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.237] GetLastError () returned 0x5 [0164.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR", dwFileAttributes=0x20) returned 0 [0164.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.238] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1745c00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.UKR", cAlternateFileName="")) returned 1 [0164.238] wcscmp (_String1="Checkers.UKR", _String2=".") returned 1 [0164.238] wcscmp (_String1="Checkers.UKR", _String2="..") returned 1 [0164.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.238] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.238] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.238] wcscat (in: _Dest=0x3d44d50, _Source="Checkers.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" [0164.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr")) returned 0x20 [0164.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR", dwFileAttributes=0x20) returned 0 [0164.238] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.239] GetLastError () returned 0x5 [0164.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR", dwFileAttributes=0x20) returned 0 [0164.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.239] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.UKR", cAlternateFileName="")) returned 1 [0164.239] wcscmp (_String1="DigSig.UKR", _String2=".") returned 1 [0164.239] wcscmp (_String1="DigSig.UKR", _String2="..") returned 1 [0164.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44d50 [0164.239] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.239] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.239] wcscat (in: _Dest=0x3d44d50, _Source="DigSig.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" [0164.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr")) returned 0x20 [0164.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR", dwFileAttributes=0x20) returned 0 [0164.240] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.240] GetLastError () returned 0x5 [0164.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR", dwFileAttributes=0x20) returned 0 [0164.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.240] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.UKR", cAlternateFileName="")) returned 1 [0164.240] wcscmp (_String1="DVA.UKR", _String2=".") returned 1 [0164.240] wcscmp (_String1="DVA.UKR", _String2="..") returned 1 [0164.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8c58 [0164.241] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.241] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.241] wcscat (in: _Dest=0x3eb8c58, _Source="DVA.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" [0164.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr")) returned 0x20 [0164.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR", dwFileAttributes=0x20) returned 0 [0164.241] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.241] GetLastError () returned 0x5 [0164.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR", dwFileAttributes=0x20) returned 0 [0164.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 [0164.242] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a658e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.UKR", cAlternateFileName="")) returned 1 [0164.242] wcscmp (_String1="eBook.UKR", _String2=".") returned 1 [0164.242] wcscmp (_String1="eBook.UKR", _String2="..") returned 1 [0164.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0164.242] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.242] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.242] wcscat (in: _Dest=0x3d44d50, _Source="eBook.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" [0164.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr")) returned 0x20 [0164.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR", dwFileAttributes=0x20) returned 0 [0164.278] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.279] GetLastError () returned 0x5 [0164.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR", dwFileAttributes=0x20) returned 0 [0164.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.279] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.UKR", cAlternateFileName="")) returned 1 [0164.279] wcscmp (_String1="EScript.UKR", _String2=".") returned 1 [0164.279] wcscmp (_String1="EScript.UKR", _String2="..") returned 1 [0164.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0164.279] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.279] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.279] wcscat (in: _Dest=0x3d44d50, _Source="EScript.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" [0164.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr")) returned 0x20 [0164.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR", dwFileAttributes=0x20) returned 0 [0164.334] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.334] GetLastError () returned 0x5 [0164.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR", dwFileAttributes=0x20) returned 0 [0164.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.334] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe176bd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.UKR", cAlternateFileName="")) returned 1 [0164.334] wcscmp (_String1="IA32.UKR", _String2=".") returned 1 [0164.334] wcscmp (_String1="IA32.UKR", _String2="..") returned 1 [0164.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c648 [0164.334] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.334] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.334] wcscat (in: _Dest=0x3f3c648, _Source="IA32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" [0164.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr")) returned 0x20 [0164.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR", dwFileAttributes=0x20) returned 0 [0164.335] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.335] GetLastError () returned 0x5 [0164.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR", dwFileAttributes=0x20) returned 0 [0164.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 [0164.335] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda8238e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.UKR", cAlternateFileName="MAKEAC~1.UKR")) returned 1 [0164.335] wcscmp (_String1="MakeAccessible.UKR", _String2=".") returned 1 [0164.336] wcscmp (_String1="MakeAccessible.UKR", _String2="..") returned 1 [0164.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a638f0 [0164.336] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.336] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.336] wcscat (in: _Dest=0x7a638f0, _Source="MakeAccessible.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" [0164.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr")) returned 0x20 [0164.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR", dwFileAttributes=0x20) returned 0 [0164.336] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.336] GetLastError () returned 0x5 [0164.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR", dwFileAttributes=0x20) returned 0 [0164.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 [0164.337] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda360ce0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.UKR", cAlternateFileName="MULTIM~1.UKR")) returned 1 [0164.337] wcscmp (_String1="Multimedia.UKR", _String2=".") returned 1 [0164.337] wcscmp (_String1="Multimedia.UKR", _String2="..") returned 1 [0164.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0164.337] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.337] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.337] wcscat (in: _Dest=0x3eb5d20, _Source="Multimedia.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" [0164.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr")) returned 0x20 [0164.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR", dwFileAttributes=0x20) returned 0 [0164.338] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.338] GetLastError () returned 0x5 [0164.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR", dwFileAttributes=0x20) returned 0 [0164.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.338] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7fd780, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.UKR", cAlternateFileName="")) returned 1 [0164.338] wcscmp (_String1="PDDom.UKR", _String2=".") returned 1 [0164.338] wcscmp (_String1="PDDom.UKR", _String2="..") returned 1 [0164.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44d50 [0164.338] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.339] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.339] wcscat (in: _Dest=0x3d44d50, _Source="PDDom.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" [0164.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr")) returned 0x20 [0164.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR", dwFileAttributes=0x20) returned 0 [0164.359] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.360] GetLastError () returned 0x5 [0164.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR", dwFileAttributes=0x20) returned 0 [0164.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.360] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.UKR", cAlternateFileName="")) returned 1 [0164.360] wcscmp (_String1="PPKLITE.UKR", _String2=".") returned 1 [0164.360] wcscmp (_String1="PPKLITE.UKR", _String2="..") returned 1 [0164.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d44d50 [0164.360] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.360] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.361] wcscat (in: _Dest=0x3d44d50, _Source="PPKLITE.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" [0164.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr")) returned 0x20 [0164.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR", dwFileAttributes=0x20) returned 0 [0164.361] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.361] GetLastError () returned 0x5 [0164.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR", dwFileAttributes=0x20) returned 0 [0164.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.362] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd002960, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.UKR", cAlternateFileName="")) returned 1 [0164.362] wcscmp (_String1="RdLang32.UKR", _String2=".") returned 1 [0164.362] wcscmp (_String1="RdLang32.UKR", _String2="..") returned 1 [0164.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44d50 [0164.362] wcscpy (in: _Dest=0x3d44d50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.362] wcscat (in: _Dest=0x3d44d50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.362] wcscat (in: _Dest=0x3d44d50, _Source="RdLang32.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" [0164.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr")) returned 0x20 [0164.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR", dwFileAttributes=0x20) returned 0 [0164.403] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.403] GetLastError () returned 0x5 [0164.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR", dwFileAttributes=0x20) returned 0 [0164.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 [0164.403] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1a8ba40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.UKR", cAlternateFileName="READOU~1.UKR")) returned 1 [0164.403] wcscmp (_String1="ReadOutLoud.UKR", _String2=".") returned 1 [0164.403] wcscmp (_String1="ReadOutLoud.UKR", _String2="..") returned 1 [0164.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb6a30 [0164.404] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.404] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.404] wcscat (in: _Dest=0x3eb6a30, _Source="ReadOutLoud.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" [0164.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr")) returned 0x20 [0164.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR", dwFileAttributes=0x20) returned 0 [0164.493] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.493] GetLastError () returned 0x5 [0164.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR", dwFileAttributes=0x20) returned 0 [0164.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0164.493] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7d7620, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.UKR", cAlternateFileName="")) returned 1 [0164.493] wcscmp (_String1="Reflow.UKR", _String2=".") returned 1 [0164.493] wcscmp (_String1="Reflow.UKR", _String2="..") returned 1 [0164.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45f50 [0164.493] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.493] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.493] wcscat (in: _Dest=0x3d45f50, _Source="Reflow.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" [0164.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr")) returned 0x20 [0164.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR", dwFileAttributes=0x20) returned 0 [0164.494] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.494] GetLastError () returned 0x5 [0164.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR", dwFileAttributes=0x20) returned 0 [0164.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 [0164.494] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda7b14c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.UKR", cAlternateFileName="SAVEAS~1.UKR")) returned 1 [0164.495] wcscmp (_String1="SaveAsRTF.UKR", _String2=".") returned 1 [0164.495] wcscmp (_String1="SaveAsRTF.UKR", _String2="..") returned 1 [0164.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0164.495] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.495] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.495] wcscat (in: _Dest=0x3eb6a30, _Source="SaveAsRTF.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" [0164.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr")) returned 0x20 [0164.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR", dwFileAttributes=0x20) returned 0 [0164.495] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.496] GetLastError () returned 0x5 [0164.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR", dwFileAttributes=0x20) returned 0 [0164.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 [0164.496] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.UKR", cAlternateFileName="")) returned 1 [0164.496] wcscmp (_String1="Search.UKR", _String2=".") returned 1 [0164.496] wcscmp (_String1="Search.UKR", _String2="..") returned 1 [0164.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45f50 [0164.496] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.496] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.496] wcscat (in: _Dest=0x3d45f50, _Source="Search.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" [0164.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr")) returned 0x20 [0164.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR", dwFileAttributes=0x20) returned 0 [0164.497] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.497] GetLastError () returned 0x5 [0164.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR", dwFileAttributes=0x20) returned 0 [0164.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 [0164.497] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.UKR", cAlternateFileName="")) returned 1 [0164.497] wcscmp (_String1="SendMail.UKR", _String2=".") returned 1 [0164.497] wcscmp (_String1="SendMail.UKR", _String2="..") returned 1 [0164.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45f50 [0164.497] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.497] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.497] wcscat (in: _Dest=0x3d45f50, _Source="SendMail.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" [0164.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr")) returned 0x20 [0164.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR", dwFileAttributes=0x20) returned 0 [0164.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.498] GetLastError () returned 0x5 [0164.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR", dwFileAttributes=0x20) returned 0 [0164.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 [0164.499] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.499] wcscmp (_String1="Services", _String2=".") returned 1 [0164.499] wcscmp (_String1="Services", _String2="..") returned 1 [0164.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d280 [0164.499] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0164.499] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0164.499] wcscat (in: _Dest=0x3f3d280, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0164.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45f50 [0164.499] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0164.499] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\" [0164.499] wcscat (in: _Dest=0x3d45f50, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*" [0164.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55a50 [0164.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0165.175] wcscmp (_String1=".", _String2=".") returned 0 [0165.175] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.175] wcscmp (_String1="..", _String2=".") returned 1 [0165.175] wcscmp (_String1="..", _String2="..") returned 0 [0165.175] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xbab1, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.175] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.175] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f440 [0165.175] wcscpy (in: _Dest=0x7a5f440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0165.175] wcscat (in: _Dest=0x7a5f440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\" [0165.175] wcscat (in: _Dest=0x7a5f440, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" [0167.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0167.729] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0167.729] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0167.729] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0167.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e7c8 [0167.729] wcscpy (in: _Dest=0x7a5e7c8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services" [0167.729] wcscat (in: _Dest=0x7a5e7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\" [0167.729] wcscat (in: _Dest=0x7a5e7c8, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" [0167.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0167.730] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0167.730] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0167.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55a50) returned 1 [0167.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 [0167.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 [0167.731] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb182f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.UKR", cAlternateFileName="")) returned 1 [0167.731] wcscmp (_String1="Spelling.UKR", _String2=".") returned 1 [0167.731] wcscmp (_String1="Spelling.UKR", _String2="..") returned 1 [0167.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45f50 [0167.731] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0167.731] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0167.731] wcscat (in: _Dest=0x3d45f50, _Source="Spelling.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" [0167.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0167.733] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb53b1e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.UKR", cAlternateFileName="")) returned 1 [0167.733] wcscmp (_String1="Updater.UKR", _String2=".") returned 1 [0167.733] wcscmp (_String1="Updater.UKR", _String2="..") returned 1 [0167.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60630 [0167.733] wcscpy (in: _Dest=0x7a60630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0167.733] wcscat (in: _Dest=0x7a60630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0167.733] wcscat (in: _Dest=0x7a60630, _Source="Updater.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" [0167.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0167.735] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 1 [0167.735] wcscmp (_String1="Weblink.UKR", _String2=".") returned 1 [0167.735] wcscmp (_String1="Weblink.UKR", _String2="..") returned 1 [0167.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60090 [0167.735] wcscpy (in: _Dest=0x7a60090, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA" [0167.735] wcscat (in: _Dest=0x7a60090, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\" [0167.735] wcscat (in: _Dest=0x7a60090, _Source="Weblink.UKR" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" [0167.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0167.736] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316b8e00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1791ec0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x316b8e00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 0 [0167.736] FindClose (in: hFindFile=0x7ad7c70 | out: hFindFile=0x7ad7c70) returned 1 [0167.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c98) returned 1 [0167.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47d98) returned 1 [0167.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 Thread: id = 2987 os_tid = 0x1a6c [0158.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47a98 [0158.961] wcscpy (in: _Dest=0x3e47a98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0158.961] wcscat (in: _Dest=0x3e47a98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0158.961] wcscat (in: _Dest=0x3e47a98, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*" [0158.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0158.961] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9942f60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0161.538] wcscmp (_String1=".", _String2=".") returned 0 [0161.538] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9942f60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.538] wcscmp (_String1="..", _String2=".") returned 1 [0161.538] wcscmp (_String1="..", _String2="..") returned 0 [0161.538] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHS", cAlternateFileName="ACCESS~1.CHS")) returned 1 [0161.538] wcscmp (_String1="accessibility.CHS", _String2=".") returned 1 [0161.538] wcscmp (_String1="accessibility.CHS", _String2="..") returned 1 [0161.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62a90 [0161.539] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0161.539] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0161.539] wcscat (in: _Dest=0x7a62a90, _Source="accessibility.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" [0162.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0162.064] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe12f5420, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHS", cAlternateFileName="")) returned 1 [0162.064] wcscmp (_String1="Acroform.CHS", _String2=".") returned 1 [0162.064] wcscmp (_String1="Acroform.CHS", _String2="..") returned 1 [0162.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60630 [0162.064] wcscpy (in: _Dest=0x7a60630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.064] wcscat (in: _Dest=0x7a60630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.064] wcscat (in: _Dest=0x7a60630, _Source="Acroform.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" [0162.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0162.065] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcd7b200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHS", cAlternateFileName="ADOBEC~1.CHS")) returned 1 [0162.065] wcscmp (_String1="AdobeCollabSync.CHS", _String2=".") returned 1 [0162.065] wcscmp (_String1="AdobeCollabSync.CHS", _String2="..") returned 1 [0162.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62630 [0162.066] wcscpy (in: _Dest=0x7a62630, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.066] wcscat (in: _Dest=0x7a62630, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.066] wcscat (in: _Dest=0x7a62630, _Source="AdobeCollabSync.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" [0162.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0162.066] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13ffdc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHS", cAlternateFileName="")) returned 1 [0162.066] wcscmp (_String1="Annots.CHS", _String2=".") returned 1 [0162.066] wcscmp (_String1="Annots.CHS", _String2="..") returned 1 [0162.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60e10 [0162.067] wcscpy (in: _Dest=0x7a60e10, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.067] wcscat (in: _Dest=0x7a60e10, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.067] wcscat (in: _Dest=0x7a60e10, _Source="Annots.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" [0162.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0162.068] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHS", cAlternateFileName="BRDLAN~1.CHS")) returned 1 [0162.068] wcscmp (_String1="BRdlang32.CHS", _String2=".") returned 1 [0162.068] wcscmp (_String1="BRdlang32.CHS", _String2="..") returned 1 [0162.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6018 [0162.068] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.068] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.068] wcscat (in: _Dest=0x3eb6018, _Source="BRdlang32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" [0162.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0162.069] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13416e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHS", cAlternateFileName="")) returned 1 [0162.069] wcscmp (_String1="Checkers.CHS", _String2=".") returned 1 [0162.069] wcscmp (_String1="Checkers.CHS", _String2="..") returned 1 [0162.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a606c0 [0162.069] wcscpy (in: _Dest=0x7a606c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.069] wcscat (in: _Dest=0x7a606c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.069] wcscat (in: _Dest=0x7a606c0, _Source="Checkers.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" [0162.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a606c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0162.070] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHS", cAlternateFileName="")) returned 1 [0162.070] wcscmp (_String1="DigSig.CHS", _String2=".") returned 1 [0162.070] wcscmp (_String1="DigSig.CHS", _String2="..") returned 1 [0162.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60240 [0162.070] wcscpy (in: _Dest=0x7a60240, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.071] wcscat (in: _Dest=0x7a60240, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.071] wcscat (in: _Dest=0x7a60240, _Source="DigSig.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" [0162.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0162.072] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHS", cAlternateFileName="")) returned 1 [0162.072] wcscmp (_String1="DVA.CHS", _String2=".") returned 1 [0162.072] wcscmp (_String1="DVA.CHS", _String2="..") returned 1 [0162.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c5c0 [0162.072] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.072] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.072] wcscat (in: _Dest=0x3f3c5c0, _Source="DVA.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" [0162.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0162.073] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHS", cAlternateFileName="")) returned 1 [0162.073] wcscmp (_String1="eBook.CHS", _String2=".") returned 1 [0162.073] wcscmp (_String1="eBook.CHS", _String2="..") returned 1 [0162.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a603f0 [0162.073] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.073] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.073] wcscat (in: _Dest=0x7a603f0, _Source="eBook.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" [0162.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a603f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0162.075] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHS", cAlternateFileName="")) returned 1 [0162.075] wcscmp (_String1="EScript.CHS", _String2=".") returned 1 [0162.075] wcscmp (_String1="EScript.CHS", _String2="..") returned 1 [0162.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a605a0 [0162.075] wcscpy (in: _Dest=0x7a605a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.075] wcscat (in: _Dest=0x7a605a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.075] wcscat (in: _Dest=0x7a605a0, _Source="EScript.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" [0162.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a605a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0162.076] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHS", cAlternateFileName="")) returned 1 [0162.092] wcscmp (_String1="IA32.CHS", _String2=".") returned 1 [0162.092] wcscmp (_String1="IA32.CHS", _String2="..") returned 1 [0162.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3cd30 [0162.093] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.093] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.093] wcscat (in: _Dest=0x3f3cd30, _Source="IA32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" [0162.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0162.094] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHS", cAlternateFileName="MAKEAC~1.CHS")) returned 1 [0162.094] wcscmp (_String1="makeaccessible.CHS", _String2=".") returned 1 [0162.094] wcscmp (_String1="makeaccessible.CHS", _String2="..") returned 1 [0162.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62f90 [0162.094] wcscpy (in: _Dest=0x7a62f90, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.094] wcscat (in: _Dest=0x7a62f90, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.094] wcscat (in: _Dest=0x7a62f90, _Source="makeaccessible.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" [0162.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0162.095] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9942f60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHS", cAlternateFileName="MULTIM~1.CHS")) returned 1 [0162.095] wcscmp (_String1="Multimedia.CHS", _String2=".") returned 1 [0162.095] wcscmp (_String1="Multimedia.CHS", _String2="..") returned 1 [0162.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5bf0 [0162.095] wcscpy (in: _Dest=0x3eb5bf0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.095] wcscat (in: _Dest=0x3eb5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.095] wcscat (in: _Dest=0x3eb5bf0, _Source="Multimedia.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" [0162.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0162.096] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda5e8440, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHS", cAlternateFileName="")) returned 1 [0162.096] wcscmp (_String1="pddom.CHS", _String2=".") returned 1 [0162.096] wcscmp (_String1="pddom.CHS", _String2="..") returned 1 [0162.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60480 [0162.096] wcscpy (in: _Dest=0x7a60480, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.096] wcscat (in: _Dest=0x7a60480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.096] wcscat (in: _Dest=0x7a60480, _Source="pddom.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" [0162.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0162.097] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHS", cAlternateFileName="")) returned 1 [0162.097] wcscmp (_String1="PPKLITE.CHS", _String2=".") returned 1 [0162.097] wcscmp (_String1="PPKLITE.CHS", _String2="..") returned 1 [0162.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61950 [0162.098] wcscpy (in: _Dest=0x7a61950, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.098] wcscat (in: _Dest=0x7a61950, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.098] wcscat (in: _Dest=0x7a61950, _Source="PPKLITE.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" [0162.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0162.099] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb5874a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHS", cAlternateFileName="")) returned 1 [0162.099] wcscmp (_String1="RdLang32.CHS", _String2=".") returned 1 [0162.099] wcscmp (_String1="RdLang32.CHS", _String2="..") returned 1 [0162.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60870 [0162.099] wcscpy (in: _Dest=0x7a60870, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.099] wcscat (in: _Dest=0x7a60870, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.099] wcscat (in: _Dest=0x7a60870, _Source="RdLang32.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" [0162.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0162.100] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHS", cAlternateFileName="READOU~1.CHS")) returned 1 [0162.100] wcscmp (_String1="ReadOutLoud.CHS", _String2=".") returned 1 [0162.100] wcscmp (_String1="ReadOutLoud.CHS", _String2="..") returned 1 [0162.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb71e8 [0162.100] wcscpy (in: _Dest=0x3eb71e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.100] wcscat (in: _Dest=0x3eb71e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.100] wcscat (in: _Dest=0x3eb71e8, _Source="ReadOutLoud.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" [0162.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb71e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc [0162.101] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHS", cAlternateFileName="")) returned 1 [0162.101] wcscmp (_String1="reflow.CHS", _String2=".") returned 1 [0162.101] wcscmp (_String1="reflow.CHS", _String2="..") returned 1 [0162.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60360 [0162.101] wcscpy (in: _Dest=0x7a60360, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.101] wcscat (in: _Dest=0x7a60360, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.101] wcscat (in: _Dest=0x7a60360, _Source="reflow.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" [0162.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0162.102] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6ccc80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHS", cAlternateFileName="SAVEAS~1.CHS")) returned 1 [0162.102] wcscmp (_String1="SaveAsRTF.CHS", _String2=".") returned 1 [0162.102] wcscmp (_String1="SaveAsRTF.CHS", _String2="..") returned 1 [0162.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5ee8 [0162.102] wcscpy (in: _Dest=0x3eb5ee8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.102] wcscat (in: _Dest=0x3eb5ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.102] wcscat (in: _Dest=0x3eb5ee8, _Source="SaveAsRTF.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" [0162.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0162.103] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHS", cAlternateFileName="")) returned 1 [0162.103] wcscmp (_String1="Search.CHS", _String2=".") returned 1 [0162.103] wcscmp (_String1="Search.CHS", _String2="..") returned 1 [0162.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a615f0 [0162.103] wcscpy (in: _Dest=0x7a615f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.103] wcscat (in: _Dest=0x7a615f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.103] wcscat (in: _Dest=0x7a615f0, _Source="Search.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" [0162.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a615f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0162.105] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHS", cAlternateFileName="")) returned 1 [0162.105] wcscmp (_String1="SendMail.CHS", _String2=".") returned 1 [0162.105] wcscmp (_String1="SendMail.CHS", _String2="..") returned 1 [0162.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a602d0 [0162.105] wcscpy (in: _Dest=0x7a602d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.105] wcscat (in: _Dest=0x7a602d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.105] wcscat (in: _Dest=0x7a602d0, _Source="SendMail.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" [0162.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a602d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0162.106] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0162.106] wcscmp (_String1="Services", _String2=".") returned 1 [0162.106] wcscmp (_String1="Services", _String2="..") returned 1 [0162.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c3a0 [0162.106] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.106] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.106] wcscat (in: _Dest=0x3f3c3a0, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0162.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0162.107] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdad327a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHS", cAlternateFileName="")) returned 1 [0162.107] wcscmp (_String1="Spelling.CHS", _String2=".") returned 1 [0162.107] wcscmp (_String1="Spelling.CHS", _String2="..") returned 1 [0162.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a60750 [0162.107] wcscpy (in: _Dest=0x7a60750, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.107] wcscat (in: _Dest=0x7a60750, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.107] wcscat (in: _Dest=0x7a60750, _Source="Spelling.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" [0162.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0162.108] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHS", cAlternateFileName="")) returned 1 [0162.108] wcscmp (_String1="updater.CHS", _String2=".") returned 1 [0162.108] wcscmp (_String1="updater.CHS", _String2="..") returned 1 [0162.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60510 [0162.108] wcscpy (in: _Dest=0x7a60510, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.108] wcscat (in: _Dest=0x7a60510, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.108] wcscat (in: _Dest=0x7a60510, _Source="updater.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" [0162.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0162.109] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 1 [0162.109] wcscmp (_String1="Weblink.CHS", _String2=".") returned 1 [0162.109] wcscmp (_String1="Weblink.CHS", _String2="..") returned 1 [0162.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60f30 [0162.109] wcscpy (in: _Dest=0x7a60f30, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN" [0162.109] wcscat (in: _Dest=0x7a60f30, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\" [0162.109] wcscat (in: _Dest=0x7a60f30, _Source="Weblink.CHS" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" [0162.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0162.110] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe131b580, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 0 [0162.110] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0162.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0162.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a98) returned 1 [0162.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 Thread: id = 2988 os_tid = 0x1a70 [0158.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e46f98 [0158.962] wcscpy (in: _Dest=0x3e46f98, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0158.962] wcscat (in: _Dest=0x3e46f98, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0158.962] wcscat (in: _Dest=0x3e46f98, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*" [0158.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a538a0 [0158.962] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7930 [0162.159] wcscmp (_String1=".", _String2=".") returned 0 [0162.159] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9884880, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xe15c8e40, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.159] wcscmp (_String1="..", _String2=".") returned 1 [0162.159] wcscmp (_String1="..", _String2="..") returned 0 [0162.159] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda634700, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHT", cAlternateFileName="ACCESS~1.CHT")) returned 1 [0162.159] wcscmp (_String1="accessibility.CHT", _String2=".") returned 1 [0162.159] wcscmp (_String1="accessibility.CHT", _String2="..") returned 1 [0162.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63170 [0162.159] wcscpy (in: _Dest=0x7a63170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0162.159] wcscat (in: _Dest=0x7a63170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0162.159] wcscat (in: _Dest=0x7a63170, _Source="accessibility.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" [0164.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht")) returned 0x20 [0164.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT", dwFileAttributes=0x20) returned 0 [0164.223] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.224] GetLastError () returned 0x5 [0164.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT", dwFileAttributes=0x20) returned 0 [0164.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63170) returned 1 [0164.224] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHT", cAlternateFileName="")) returned 1 [0164.224] wcscmp (_String1="Acroform.CHT", _String2=".") returned 1 [0164.224] wcscmp (_String1="Acroform.CHT", _String2="..") returned 1 [0164.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d452f0 [0164.224] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.224] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.224] wcscat (in: _Dest=0x3d452f0, _Source="Acroform.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" [0164.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht")) returned 0x20 [0164.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT", dwFileAttributes=0x20) returned 0 [0164.225] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.225] GetLastError () returned 0x5 [0164.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT", dwFileAttributes=0x20) returned 0 [0164.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.225] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdcb3fd60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHT", cAlternateFileName="ADOBEC~1.CHT")) returned 1 [0164.225] wcscmp (_String1="AdobeCollabSync.CHT", _String2=".") returned 1 [0164.225] wcscmp (_String1="AdobeCollabSync.CHT", _String2="..") returned 1 [0164.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63170 [0164.226] wcscpy (in: _Dest=0x7a63170, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.226] wcscat (in: _Dest=0x7a63170, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.226] wcscat (in: _Dest=0x7a63170, _Source="AdobeCollabSync.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" [0164.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht")) returned 0x20 [0164.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT", dwFileAttributes=0x20) returned 0 [0164.226] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.226] GetLastError () returned 0x5 [0164.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT", dwFileAttributes=0x20) returned 0 [0164.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63170) returned 1 [0164.227] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe13b3b00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHT", cAlternateFileName="")) returned 1 [0164.227] wcscmp (_String1="Annots.CHT", _String2=".") returned 1 [0164.227] wcscmp (_String1="Annots.CHT", _String2="..") returned 1 [0164.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d452f0 [0164.227] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.227] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.227] wcscat (in: _Dest=0x3d452f0, _Source="Annots.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" [0164.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht")) returned 0x20 [0164.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT", dwFileAttributes=0x20) returned 0 [0164.228] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.228] GetLastError () returned 0x5 [0164.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT", dwFileAttributes=0x20) returned 0 [0164.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.228] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd857660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHT", cAlternateFileName="BRDLAN~1.CHT")) returned 1 [0164.228] wcscmp (_String1="BRdlang32.CHT", _String2=".") returned 1 [0164.228] wcscmp (_String1="BRdlang32.CHT", _String2="..") returned 1 [0164.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.228] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.228] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.228] wcscat (in: _Dest=0x3eb5d20, _Source="BRdlang32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" [0164.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht")) returned 0x20 [0164.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT", dwFileAttributes=0x20) returned 0 [0164.229] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.229] GetLastError () returned 0x5 [0164.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT", dwFileAttributes=0x20) returned 0 [0164.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.229] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHT", cAlternateFileName="")) returned 1 [0164.229] wcscmp (_String1="Checkers.CHT", _String2=".") returned 1 [0164.230] wcscmp (_String1="Checkers.CHT", _String2="..") returned 1 [0164.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d452f0 [0164.230] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.230] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.230] wcscat (in: _Dest=0x3d452f0, _Source="Checkers.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" [0164.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht")) returned 0x20 [0164.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT", dwFileAttributes=0x20) returned 0 [0164.266] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.266] GetLastError () returned 0x5 [0164.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT", dwFileAttributes=0x20) returned 0 [0164.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.267] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHT", cAlternateFileName="")) returned 1 [0164.267] wcscmp (_String1="DigSig.CHT", _String2=".") returned 1 [0164.267] wcscmp (_String1="DigSig.CHT", _String2="..") returned 1 [0164.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d452f0 [0164.267] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.267] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.267] wcscat (in: _Dest=0x3d452f0, _Source="DigSig.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" [0164.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht")) returned 0x20 [0164.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT", dwFileAttributes=0x20) returned 0 [0164.298] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.299] GetLastError () returned 0x5 [0164.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT", dwFileAttributes=0x20) returned 0 [0164.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.299] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe119e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHT", cAlternateFileName="")) returned 1 [0164.299] wcscmp (_String1="DVA.CHT", _String2=".") returned 1 [0164.299] wcscmp (_String1="DVA.CHT", _String2="..") returned 1 [0164.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8c58 [0164.299] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.299] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.299] wcscat (in: _Dest=0x3eb8c58, _Source="DVA.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" [0164.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht")) returned 0x20 [0164.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT", dwFileAttributes=0x20) returned 0 [0164.300] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.300] GetLastError () returned 0x5 [0164.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT", dwFileAttributes=0x20) returned 0 [0164.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 [0164.300] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe144c080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHT", cAlternateFileName="")) returned 1 [0164.300] wcscmp (_String1="eBook.CHT", _String2=".") returned 1 [0164.300] wcscmp (_String1="eBook.CHT", _String2="..") returned 1 [0164.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d452f0 [0164.301] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.301] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.301] wcscat (in: _Dest=0x3d452f0, _Source="eBook.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" [0164.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht")) returned 0x20 [0164.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT", dwFileAttributes=0x20) returned 0 [0164.301] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.301] GetLastError () returned 0x5 [0164.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT", dwFileAttributes=0x20) returned 0 [0164.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.302] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHT", cAlternateFileName="")) returned 1 [0164.302] wcscmp (_String1="EScript.CHT", _String2=".") returned 1 [0164.302] wcscmp (_String1="EScript.CHT", _String2="..") returned 1 [0164.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d452f0 [0164.302] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.302] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.302] wcscat (in: _Dest=0x3d452f0, _Source="EScript.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" [0164.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht")) returned 0x20 [0164.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT", dwFileAttributes=0x20) returned 0 [0164.303] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.303] GetLastError () returned 0x5 [0164.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT", dwFileAttributes=0x20) returned 0 [0164.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.303] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHT", cAlternateFileName="")) returned 1 [0164.303] wcscmp (_String1="IA32.CHT", _String2=".") returned 1 [0164.303] wcscmp (_String1="IA32.CHT", _String2="..") returned 1 [0164.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0164.303] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.303] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.303] wcscat (in: _Dest=0x3eb8c58, _Source="IA32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" [0164.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht")) returned 0x20 [0164.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT", dwFileAttributes=0x20) returned 0 [0164.304] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.304] GetLastError () returned 0x5 [0164.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT", dwFileAttributes=0x20) returned 0 [0164.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 [0164.304] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaad11a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHT", cAlternateFileName="MAKEAC~1.CHT")) returned 1 [0164.304] wcscmp (_String1="makeaccessible.CHT", _String2=".") returned 1 [0164.305] wcscmp (_String1="makeaccessible.CHT", _String2="..") returned 1 [0164.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a638f0 [0164.305] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.305] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.305] wcscat (in: _Dest=0x7a638f0, _Source="makeaccessible.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" [0164.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht")) returned 0x20 [0164.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT", dwFileAttributes=0x20) returned 0 [0164.305] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.305] GetLastError () returned 0x5 [0164.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT", dwFileAttributes=0x20) returned 0 [0164.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 [0164.306] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xd9884880, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHT", cAlternateFileName="MULTIM~1.CHT")) returned 1 [0164.306] wcscmp (_String1="Multimedia.CHT", _String2=".") returned 1 [0164.306] wcscmp (_String1="Multimedia.CHT", _String2="..") returned 1 [0164.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0164.306] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.306] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.306] wcscat (in: _Dest=0x3eb5d20, _Source="Multimedia.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" [0164.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht")) returned 0x20 [0164.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT", dwFileAttributes=0x20) returned 0 [0164.307] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.307] GetLastError () returned 0x5 [0164.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT", dwFileAttributes=0x20) returned 0 [0164.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.307] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda6a6b20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHT", cAlternateFileName="")) returned 1 [0164.307] wcscmp (_String1="pddom.CHT", _String2=".") returned 1 [0164.307] wcscmp (_String1="pddom.CHT", _String2="..") returned 1 [0164.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d452f0 [0164.308] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.308] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.308] wcscat (in: _Dest=0x3d452f0, _Source="pddom.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" [0164.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht")) returned 0x20 [0164.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT", dwFileAttributes=0x20) returned 0 [0164.308] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.308] GetLastError () returned 0x5 [0164.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT", dwFileAttributes=0x20) returned 0 [0164.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.309] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHT", cAlternateFileName="")) returned 1 [0164.309] wcscmp (_String1="PPKLITE.CHT", _String2=".") returned 1 [0164.309] wcscmp (_String1="PPKLITE.CHT", _String2="..") returned 1 [0164.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x3d452f0 [0164.309] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.309] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.309] wcscat (in: _Dest=0x3d452f0, _Source="PPKLITE.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" [0164.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht")) returned 0x20 [0164.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT", dwFileAttributes=0x20) returned 0 [0164.310] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.310] GetLastError () returned 0x5 [0164.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT", dwFileAttributes=0x20) returned 0 [0164.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.310] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb704260, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe0e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHT", cAlternateFileName="")) returned 1 [0164.310] wcscmp (_String1="RdLang32.CHT", _String2=".") returned 1 [0164.310] wcscmp (_String1="RdLang32.CHT", _String2="..") returned 1 [0164.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d452f0 [0164.311] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.311] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.311] wcscat (in: _Dest=0x3d452f0, _Source="RdLang32.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" [0164.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht")) returned 0x20 [0164.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT", dwFileAttributes=0x20) returned 0 [0164.311] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.311] GetLastError () returned 0x5 [0164.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT", dwFileAttributes=0x20) returned 0 [0164.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.312] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe15c8e40, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHT", cAlternateFileName="READOU~1.CHT")) returned 1 [0164.312] wcscmp (_String1="ReadOutLoud.CHT", _String2=".") returned 1 [0164.312] wcscmp (_String1="ReadOutLoud.CHT", _String2="..") returned 1 [0164.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5d20 [0164.312] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.312] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.312] wcscat (in: _Dest=0x3eb5d20, _Source="ReadOutLoud.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" [0164.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht")) returned 0x20 [0164.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT", dwFileAttributes=0x20) returned 0 [0164.313] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.313] GetLastError () returned 0x5 [0164.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT", dwFileAttributes=0x20) returned 0 [0164.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.313] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda60e5a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHT", cAlternateFileName="")) returned 1 [0164.313] wcscmp (_String1="reflow.CHT", _String2=".") returned 1 [0164.313] wcscmp (_String1="reflow.CHT", _String2="..") returned 1 [0164.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d452f0 [0164.314] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.314] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.314] wcscat (in: _Dest=0x3d452f0, _Source="reflow.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" [0164.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht")) returned 0x20 [0164.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT", dwFileAttributes=0x20) returned 0 [0164.314] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.315] GetLastError () returned 0x5 [0164.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT", dwFileAttributes=0x20) returned 0 [0164.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.315] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xda765200, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHT", cAlternateFileName="SAVEAS~1.CHT")) returned 1 [0164.315] wcscmp (_String1="SaveAsRTF.CHT", _String2=".") returned 1 [0164.315] wcscmp (_String1="SaveAsRTF.CHT", _String2="..") returned 1 [0164.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5d20 [0164.315] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.315] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.315] wcscat (in: _Dest=0x3eb5d20, _Source="SaveAsRTF.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" [0164.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht")) returned 0x20 [0164.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT", dwFileAttributes=0x20) returned 0 [0164.316] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.316] GetLastError () returned 0x5 [0164.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT", dwFileAttributes=0x20) returned 0 [0164.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0164.316] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHT", cAlternateFileName="")) returned 1 [0164.316] wcscmp (_String1="Search.CHT", _String2=".") returned 1 [0164.316] wcscmp (_String1="Search.CHT", _String2="..") returned 1 [0164.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d452f0 [0164.317] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.317] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.317] wcscat (in: _Dest=0x3d452f0, _Source="Search.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" [0164.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht")) returned 0x20 [0164.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT", dwFileAttributes=0x20) returned 0 [0164.317] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.317] GetLastError () returned 0x5 [0164.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT", dwFileAttributes=0x20) returned 0 [0164.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.318] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHT", cAlternateFileName="")) returned 1 [0164.318] wcscmp (_String1="SendMail.CHT", _String2=".") returned 1 [0164.318] wcscmp (_String1="SendMail.CHT", _String2="..") returned 1 [0164.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d452f0 [0164.318] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.318] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.318] wcscat (in: _Dest=0x3d452f0, _Source="SendMail.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" [0164.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht")) returned 0x20 [0164.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT", dwFileAttributes=0x20) returned 0 [0164.319] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.319] GetLastError () returned 0x5 [0164.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT", dwFileAttributes=0x20) returned 0 [0164.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0164.319] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0164.319] wcscmp (_String1="Services", _String2=".") returned 1 [0164.319] wcscmp (_String1="Services", _String2="..") returned 1 [0164.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8c58 [0164.319] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0164.319] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0164.319] wcscat (in: _Dest=0x3eb8c58, _Source="Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0164.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d452f0 [0164.320] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0164.320] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\" [0164.320] wcscat (in: _Dest=0x3d452f0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*" [0164.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0164.320] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7a70 [0164.320] wcscmp (_String1=".", _String2=".") returned 0 [0164.320] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd74ccc0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.320] wcscmp (_String1="..", _String2=".") returned 1 [0164.320] wcscmp (_String1="..", _String2="..") returned 0 [0164.320] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x893f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0164.320] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0164.320] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0164.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053330 [0164.321] wcscpy (in: _Dest=0x3053330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0164.321] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\" [0164.321] wcscat (in: _Dest=0x3053330, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" [0164.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx")) returned 0x20 [0164.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0164.321] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.321] GetLastError () returned 0x5 [0164.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0164.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 [0164.322] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0164.322] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0164.322] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0164.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053330 [0164.322] wcscpy (in: _Dest=0x3053330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services" [0164.322] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\" [0164.322] wcscat (in: _Dest=0x3053330, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" [0164.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx")) returned 0x20 [0164.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0164.323] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.138] GetLastError () returned 0x5 [0165.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0165.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 [0165.226] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0165.226] FindClose (in: hFindFile=0x7ad7a70 | out: hFindFile=0x7ad7a70) returned 1 [0165.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0165.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0165.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 [0165.227] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdaf21980, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHT", cAlternateFileName="")) returned 1 [0165.227] wcscmp (_String1="Spelling.CHT", _String2=".") returned 1 [0165.227] wcscmp (_String1="Spelling.CHT", _String2="..") returned 1 [0165.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d452f0 [0165.227] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0165.227] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0165.228] wcscat (in: _Dest=0x3d452f0, _Source="Spelling.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" [0168.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0168.367] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdb515080, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHT", cAlternateFileName="")) returned 1 [0168.367] wcscmp (_String1="updater.CHT", _String2=".") returned 1 [0168.367] wcscmp (_String1="updater.CHT", _String2="..") returned 1 [0168.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a61ef0 [0168.367] wcscpy (in: _Dest=0x7a61ef0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0168.367] wcscat (in: _Dest=0x7a61ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0168.367] wcscat (in: _Dest=0x7a61ef0, _Source="updater.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" [0168.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a61ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0168.368] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 1 [0168.368] wcscmp (_String1="Weblink.CHT", _String2=".") returned 1 [0168.369] wcscmp (_String1="Weblink.CHT", _String2="..") returned 1 [0168.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a60360 [0168.369] wcscpy (in: _Dest=0x7a60360, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW" [0168.369] wcscat (in: _Dest=0x7a60360, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\" [0168.369] wcscat (in: _Dest=0x7a60360, _Source="Weblink.CHT" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" [0168.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a60360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0168.370] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xe1178660, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 0 [0168.370] FindClose (in: hFindFile=0x7ad7930 | out: hFindFile=0x7ad7930) returned 1 [0168.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a538a0) returned 1 [0168.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f98) returned 1 [0168.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 Thread: id = 2989 os_tid = 0x1a74 [0158.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx")) returned 0x20 [0159.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0159.223] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.223] GetLastError () returned 0x5 [0159.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0159.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053678) returned 1 Thread: id = 2990 os_tid = 0x1a78 [0158.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx")) returned 0x20 [0159.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0159.221] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.221] GetLastError () returned 0x5 [0159.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0159.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 Thread: id = 2991 os_tid = 0x1a7c [0158.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx")) returned 0x20 [0159.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0159.226] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.226] GetLastError () returned 0x5 [0159.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0159.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053b10) returned 1 Thread: id = 2992 os_tid = 0x1a80 [0158.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx")) returned 0x20 [0159.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0159.225] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.225] GetLastError () returned 0x5 [0159.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0159.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053138) returned 1 Thread: id = 2993 os_tid = 0x1a84 [0158.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini")) returned 0x20 [0158.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini", dwFileAttributes=0x20) returned 0 [0158.969] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.969] GetLastError () returned 0x5 [0158.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini", dwFileAttributes=0x20) returned 0 [0158.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 2994 os_tid = 0x1a88 [0158.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html")) returned 0x20 [0158.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", dwFileAttributes=0x20) returned 0 [0158.971] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.972] GetLastError () returned 0x5 [0158.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", dwFileAttributes=0x20) returned 0 [0158.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a619e0) returned 1 Thread: id = 2995 os_tid = 0x1a8c [0158.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf2f0 [0158.973] wcscpy (in: _Dest=0x3eaf2f0, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0158.973] wcscat (in: _Dest=0x3eaf2f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0158.973] wcscat (in: _Dest=0x3eaf2f0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*" [0158.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53b08 [0158.974] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0158.974] wcscmp (_String1=".", _String2=".") returned 0 [0158.974] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.974] wcscmp (_String1="..", _String2=".") returned 1 [0158.974] wcscmp (_String1="..", _String2="..") returned 0 [0158.974] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0158.974] wcscmp (_String1="en-US", _String2=".") returned 1 [0158.974] wcscmp (_String1="en-US", _String2="..") returned 1 [0158.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e669d8 [0158.975] wcscpy (in: _Dest=0x3e669d8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0158.975] wcscat (in: _Dest=0x3e669d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0158.975] wcscat (in: _Dest=0x3e669d8, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0164.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d40768 [0164.535] wcscpy (in: _Dest=0x3d40768, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0164.535] wcscat (in: _Dest=0x3d40768, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0164.535] wcscat (in: _Dest=0x3d40768, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*" [0164.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0164.535] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0164.535] wcscmp (_String1=".", _String2=".") returned 0 [0164.535] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.536] wcscmp (_String1="..", _String2=".") returned 1 [0164.536] wcscmp (_String1="..", _String2="..") returned 0 [0164.536] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0164.536] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0164.536] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0164.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8aa8 [0164.536] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" [0164.536] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\" [0164.536] wcscat (in: _Dest=0x2c8aa8, _Source="resource.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" [0164.536] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0x20 [0164.536] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0164.537] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.537] GetLastError () returned 0x5 [0164.537] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0164.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 [0164.537] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42063bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x42063bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x6c424b00, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0164.537] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0164.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0164.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40768) returned 1 [0164.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e669d8) returned 1 [0164.538] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0164.538] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0164.538] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0164.538] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0164.538] wcscmp (_String1="netfol.ico", _String2=".") returned 1 [0164.538] wcscmp (_String1="netfol.ico", _String2="..") returned 1 [0164.538] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647e2d64, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647e2d64, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0164.538] wcscmp (_String1="pictures.ico", _String2=".") returned 1 [0164.538] wcscmp (_String1="pictures.ico", _String2="..") returned 1 [0164.538] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x647bcc04, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x647bcc04, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0164.538] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0164.538] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0164.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85d80 [0164.538] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0164.538] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0164.538] wcscat (in: _Dest=0x3d85d80, _Source="resource.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" [0164.538] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0x20 [0164.539] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0164.539] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.539] GetLastError () returned 0x5 [0164.539] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0 [0164.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 [0164.539] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x113582dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0164.539] wcscmp (_String1="ringtones.ico", _String2=".") returned 1 [0164.539] wcscmp (_String1="ringtones.ico", _String2="..") returned 1 [0164.539] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64808ec4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64808ec4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0164.539] wcscmp (_String1="settings.ico", _String2=".") returned 1 [0164.540] wcscmp (_String1="settings.ico", _String2="..") returned 1 [0164.540] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6482f024, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6482f024, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0164.540] wcscmp (_String1="sync.ico", _String2=".") returned 1 [0164.540] wcscmp (_String1="sync.ico", _String2="..") returned 1 [0164.540] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1137e43c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1137e43c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0164.540] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0164.540] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0164.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d40768 [0164.540] wcscpy (in: _Dest=0x3d40768, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" [0164.540] wcscat (in: _Dest=0x3d40768, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\" [0164.540] wcscat (in: _Dest=0x3d40768, _Source="tasks.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" [0164.540] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0x20 [0164.540] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0164.541] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.541] GetLastError () returned 0x5 [0164.541] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0164.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40768) returned 1 [0164.541] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0164.541] wcscmp (_String1="wmp.ico", _String2=".") returned 1 [0164.541] wcscmp (_String1="wmp.ico", _String2="..") returned 1 [0164.541] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64855184, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64855184, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x1137e43c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0164.541] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0164.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53b08) returned 1 [0164.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf2f0) returned 1 [0164.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf740) returned 1 Thread: id = 2996 os_tid = 0x1a90 [0158.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf238 [0158.975] wcscpy (in: _Dest=0x3eaf238, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0158.975] wcscat (in: _Dest=0x3eaf238, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0158.975] wcscat (in: _Dest=0x3eaf238, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*" [0158.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a533d0 [0158.976] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0158.977] wcscmp (_String1=".", _String2=".") returned 0 [0158.977] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ebda38, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.977] wcscmp (_String1="..", _String2=".") returned 1 [0158.978] wcscmp (_String1="..", _String2="..") returned 0 [0158.978] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0158.978] wcscmp (_String1="en-US", _String2=".") returned 1 [0158.978] wcscmp (_String1="en-US", _String2="..") returned 1 [0158.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66b58 [0158.978] wcscpy (in: _Dest=0x3e66b58, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0158.978] wcscat (in: _Dest=0x3e66b58, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0158.978] wcscat (in: _Dest=0x3e66b58, _Source="en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0164.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d40768 [0164.543] wcscpy (in: _Dest=0x3d40768, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0164.543] wcscat (in: _Dest=0x3d40768, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0164.543] wcscat (in: _Dest=0x3d40768, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*" [0164.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53b08 [0164.543] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0164.544] wcscmp (_String1=".", _String2=".") returned 0 [0164.544] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dd99178, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x7dd99178, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x7dd99178, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.544] wcscmp (_String1="..", _String2=".") returned 1 [0164.544] wcscmp (_String1="..", _String2="..") returned 0 [0164.544] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0164.544] wcscmp (_String1="resource.xml", _String2=".") returned 1 [0164.544] wcscmp (_String1="resource.xml", _String2="..") returned 1 [0164.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8aa8 [0164.544] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" [0164.544] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\" [0164.544] wcscat (in: _Dest=0x2c8aa8, _Source="resource.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" [0164.545] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0x20 [0164.545] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0164.545] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.546] GetLastError () returned 0x5 [0164.546] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0 [0164.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 [0164.546] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35eafc30, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x35eafc30, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8da33700, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0164.546] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0164.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53b08) returned 1 [0164.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40768) returned 1 [0164.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66b58) returned 1 [0164.546] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0164.546] wcscmp (_String1="folder.ico", _String2=".") returned 1 [0164.546] wcscmp (_String1="folder.ico", _String2="..") returned 1 [0164.547] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8343e21, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8343e21, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8ea4dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0164.547] wcscmp (_String1="print_pref.ico", _String2=".") returned 1 [0164.547] wcscmp (_String1="print_pref.ico", _String2="..") returned 1 [0164.547] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8369f80, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8369f80, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0164.547] wcscmp (_String1="print_property.ico", _String2=".") returned 1 [0164.547] wcscmp (_String1="print_property.ico", _String2="..") returned 1 [0164.547] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d91063c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0164.547] wcscmp (_String1="print_queue.ico", _String2=".") returned 1 [0164.547] wcscmp (_String1="print_queue.ico", _String2="..") returned 1 [0164.547] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83b623e, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83b623e, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0164.547] wcscmp (_String1="scan_.ico", _String2=".") returned 1 [0164.547] wcscmp (_String1="scan_.ico", _String2="..") returned 1 [0164.547] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84024fc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa84024fc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0164.547] wcscmp (_String1="scan_property.ico", _String2=".") returned 1 [0164.547] wcscmp (_String1="scan_property.ico", _String2="..") returned 1 [0164.547] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83dc39d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa83dc39d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9a8bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0164.547] wcscmp (_String1="scan_settings.ico", _String2=".") returned 1 [0164.547] wcscmp (_String1="scan_settings.ico", _String2="..") returned 1 [0164.547] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0164.547] wcscmp (_String1="tasks.xml", _String2=".") returned 1 [0164.547] wcscmp (_String1="tasks.xml", _String2="..") returned 1 [0164.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d40768 [0164.548] wcscpy (in: _Dest=0x3d40768, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" [0164.548] wcscat (in: _Dest=0x3d40768, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\" [0164.548] wcscat (in: _Dest=0x3d40768, _Source="tasks.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" [0164.548] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0x20 [0164.548] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0164.548] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.549] GetLastError () returned 0x5 [0164.549] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0 [0164.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40768) returned 1 [0164.549] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8213329, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8213329, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1daff81c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0164.549] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0164.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a533d0) returned 1 [0164.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf238) returned 1 [0164.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 Thread: id = 2997 os_tid = 0x1a94 [0158.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml")) returned 0x20 [0158.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0158.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.980] GetLastError () returned 0x5 [0158.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", dwFileAttributes=0x20) returned 0 [0158.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300d718) returned 1 Thread: id = 2998 os_tid = 0x1a98 [0158.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx")) returned 0x20 [0158.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx", dwFileAttributes=0x20) returned 0 [0158.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.981] GetLastError () returned 0x5 [0158.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx", dwFileAttributes=0x20) returned 0 [0158.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409c0) returned 1 Thread: id = 2999 os_tid = 0x1a9c [0158.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66c18 [0158.983] wcscpy (in: _Dest=0x3e66c18, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0158.983] wcscat (in: _Dest=0x3e66c18, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0158.983] wcscat (in: _Dest=0x3e66c18, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*" [0158.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52090 [0158.983] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\*", lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0158.983] wcscmp (_String1=".", _String2=".") returned 0 [0158.983] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.983] wcscmp (_String1="..", _String2=".") returned 1 [0158.983] wcscmp (_String1="..", _String2="..") returned 0 [0158.983] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0158.983] wcscmp (_String1="x86", _String2=".") returned 1 [0158.983] wcscmp (_String1="x86", _String2="..") returned 1 [0158.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d409c0 [0158.984] wcscpy (in: _Dest=0x3d409c0, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch" [0158.984] wcscat (in: _Dest=0x3d409c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\" [0158.984] wcscat (in: _Dest=0x3d409c0, _Source="x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0164.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d40768 [0164.552] wcscpy (in: _Dest=0x3d40768, _Source="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86" [0164.552] wcscat (in: _Dest=0x3d40768, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\" [0164.552] wcscat (in: _Dest=0x3d40768, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*") returned="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*" [0164.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a533d0 [0164.552] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\564F02E6419B9858949B0CD5A65E2C8C0944DD88\\packages\\Patch\\x86\\*", lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0164.553] wcscmp (_String1=".", _String2=".") returned 0 [0164.553] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.553] wcscmp (_String1="..", _String2=".") returned 1 [0164.553] wcscmp (_String1="..", _String2="..") returned 0 [0164.553] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0164.553] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2=".") returned 1 [0164.553] wcscmp (_String1="Windows6.1-KB2999226-x86.msu", _String2="..") returned 1 [0164.553] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7afb00, ftCreationTime.dwHighDateTime=0x1d28816, ftLastAccessTime.dwLowDateTime=0xbc7afb00, ftLastAccessTime.dwHighDateTime=0x1d28816, ftLastWriteTime.dwLowDateTime=0xbc7afb00, ftLastWriteTime.dwHighDateTime=0x1d28816, nFileSizeHigh=0x0, nFileSizeLow=0x9990e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0164.553] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0164.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a533d0) returned 1 [0164.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40768) returned 1 [0164.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409c0) returned 1 [0164.554] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5bdee80, ftCreationTime.dwHighDateTime=0x1d2f5a0, ftLastAccessTime.dwLowDateTime=0xe5bdee80, ftLastAccessTime.dwHighDateTime=0x1d2f5a0, ftLastWriteTime.dwLowDateTime=0xe5bdee80, ftLastWriteTime.dwHighDateTime=0x1d2f5a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0164.554] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0164.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52090) returned 1 [0164.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66c18) returned 1 [0164.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b98) returned 1 Thread: id = 3000 os_tid = 0x1aa0 [0158.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo")) returned 0x20 [0158.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", dwFileAttributes=0x20) returned 0 [0158.986] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.986] GetLastError () returned 0x5 [0158.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO", dwFileAttributes=0x20) returned 0 [0158.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a614d0) returned 1 Thread: id = 3001 os_tid = 0x1aa4 [0158.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a614d0 [0158.988] wcscpy (in: _Dest=0x7a614d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0158.988] wcscat (in: _Dest=0x7a614d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\" [0158.988] wcscat (in: _Dest=0x7a614d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*" [0158.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3e90 [0158.988] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741b0 [0159.747] wcscmp (_String1=".", _String2=".") returned 0 [0159.747] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.747] wcscmp (_String1="..", _String2=".") returned 1 [0159.747] wcscmp (_String1="..", _String2="..") returned 0 [0159.747] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9299, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0159.747] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0159.747] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0159.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e288 [0159.747] wcscpy (in: _Dest=0x7a5e288, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0159.748] wcscat (in: _Dest=0x7a5e288, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\" [0159.748] wcscat (in: _Dest=0x7a5e288, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" [0167.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0167.766] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0167.766] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0167.766] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0167.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e678 [0167.766] wcscpy (in: _Dest=0x7a5e678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services" [0167.766] wcscat (in: _Dest=0x7a5e678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\" [0167.767] wcscat (in: _Dest=0x7a5e678, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" [0167.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0167.767] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0167.768] FindClose (in: hFindFile=0x3e741b0 | out: hFindFile=0x3e741b0) returned 1 [0167.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3e90) returned 1 [0167.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a614d0) returned 1 [0167.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 3002 os_tid = 0x1aa8 [0158.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo")) returned 0x20 [0159.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", dwFileAttributes=0x20) returned 0 [0159.228] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.228] GetLastError () returned 0x5 [0159.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO", dwFileAttributes=0x20) returned 0 [0159.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 Thread: id = 3003 os_tid = 0x1aac [0158.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo")) returned 0x20 [0159.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", dwFileAttributes=0x20) returned 0 [0159.229] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.230] GetLastError () returned 0x5 [0159.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO", dwFileAttributes=0x20) returned 0 [0159.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 3004 os_tid = 0x1ab0 [0158.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo")) returned 0x20 [0159.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", dwFileAttributes=0x20) returned 0 [0159.745] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.745] GetLastError () returned 0x5 [0159.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO", dwFileAttributes=0x20) returned 0 [0159.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45da0) returned 1 Thread: id = 3005 os_tid = 0x1ab4 [0158.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv")) returned 0x20 [0158.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV", dwFileAttributes=0x20) returned 0 [0158.994] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.995] GetLastError () returned 0x5 [0158.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV", dwFileAttributes=0x20) returned 0 [0158.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e7b600) returned 1 Thread: id = 3006 os_tid = 0x1ab8 [0158.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv")) returned 0x20 [0158.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV", dwFileAttributes=0x20) returned 0 [0158.997] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0158.997] GetLastError () returned 0x5 [0158.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV", dwFileAttributes=0x20) returned 0 [0158.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 Thread: id = 3007 os_tid = 0x1abc [0159.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv")) returned 0x20 [0159.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV", dwFileAttributes=0x20) returned 0 [0159.001] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.001] GetLastError () returned 0x5 [0159.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV", dwFileAttributes=0x20) returned 0 [0159.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 Thread: id = 3008 os_tid = 0x1ac0 [0159.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv")) returned 0x20 [0159.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV", dwFileAttributes=0x20) returned 0 [0159.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.006] GetLastError () returned 0x5 [0159.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV", dwFileAttributes=0x20) returned 0 [0159.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 3009 os_tid = 0x1ac4 [0159.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx")) returned 0x20 [0159.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0159.231] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.231] GetLastError () returned 0x5 [0159.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0159.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053528) returned 1 Thread: id = 3010 os_tid = 0x1ac8 [0159.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx")) returned 0x20 [0159.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0159.233] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.233] GetLastError () returned 0x5 [0159.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0159.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053870) returned 1 Thread: id = 3011 os_tid = 0x1acc [0159.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba4c8 [0159.010] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" [0159.010] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\" [0159.010] wcscat (in: _Dest=0x3eba4c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*" [0159.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0159.010] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xeb650780, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0161.517] wcscmp (_String1=".", _String2=".") returned 0 [0161.518] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xeb650780, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.518] wcscmp (_String1="..", _String2=".") returned 1 [0161.518] wcscmp (_String1="..", _String2="..") returned 0 [0161.518] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d3b690, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0xd45a7840, ftLastAccessTime.dwHighDateTime=0x1d3ab29, ftLastWriteTime.dwLowDateTime=0xeb650780, ftLastWriteTime.dwHighDateTime=0x1d3ab29, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0161.518] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0161.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0161.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 [0161.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 3012 os_tid = 0x1ad0 [0159.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky")) returned 0x20 [0159.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY", dwFileAttributes=0x20) returned 0 [0159.013] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.013] GetLastError () returned 0x5 [0159.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY", dwFileAttributes=0x20) returned 0 [0159.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 3013 os_tid = 0x1ad4 [0159.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky")) returned 0x20 [0159.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY", dwFileAttributes=0x20) returned 0 [0159.015] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.015] GetLastError () returned 0x5 [0159.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY", dwFileAttributes=0x20) returned 0 [0159.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 Thread: id = 3014 os_tid = 0x1adc [0159.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky")) returned 0x20 [0159.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY", dwFileAttributes=0x20) returned 0 [0159.017] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.017] GetLastError () returned 0x5 [0159.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY", dwFileAttributes=0x20) returned 0 [0159.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 Thread: id = 3015 os_tid = 0x1ae0 [0159.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky")) returned 0x20 [0159.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY", dwFileAttributes=0x20) returned 0 [0159.019] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.020] GetLastError () returned 0x5 [0159.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY", dwFileAttributes=0x20) returned 0 [0159.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 Thread: id = 3016 os_tid = 0x1ae8 [0159.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif")) returned 0x20 [0161.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF", dwFileAttributes=0x20) returned 0 [0161.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.714] GetLastError () returned 0x5 [0161.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF", dwFileAttributes=0x20) returned 0 [0161.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1448) returned 1 Thread: id = 3017 os_tid = 0x1aec [0159.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif")) returned 0x20 [0161.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF", dwFileAttributes=0x20) returned 0 [0161.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.859] GetLastError () returned 0x5 [0161.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF", dwFileAttributes=0x20) returned 0 [0161.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61440) returned 1 Thread: id = 3018 os_tid = 0x1af0 [0159.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif")) returned 0x20 [0161.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF", dwFileAttributes=0x20) returned 0 [0161.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.550] GetLastError () returned 0x5 [0161.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF", dwFileAttributes=0x20) returned 0 [0161.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60c60) returned 1 Thread: id = 3019 os_tid = 0x1af4 [0159.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif")) returned 0x20 [0161.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF", dwFileAttributes=0x20) returned 0 [0161.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.897] GetLastError () returned 0x5 [0161.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF", dwFileAttributes=0x20) returned 0 [0161.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60900) returned 1 Thread: id = 3020 os_tid = 0x1af8 [0159.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif")) returned 0x20 [0161.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF", dwFileAttributes=0x20) returned 0 [0161.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.886] GetLastError () returned 0x5 [0161.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF", dwFileAttributes=0x20) returned 0 [0161.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60480) returned 1 Thread: id = 3021 os_tid = 0x1afc [0159.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif")) returned 0x20 [0161.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF", dwFileAttributes=0x20) returned 0 [0161.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.895] GetLastError () returned 0x5 [0161.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF", dwFileAttributes=0x20) returned 0 [0161.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60630) returned 1 Thread: id = 3022 os_tid = 0x1b00 [0159.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif")) returned 0x20 [0161.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF", dwFileAttributes=0x20) returned 0 [0161.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.894] GetLastError () returned 0x5 [0161.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF", dwFileAttributes=0x20) returned 0 [0161.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60e10) returned 1 Thread: id = 3023 os_tid = 0x1b04 [0159.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif")) returned 0x20 [0161.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF", dwFileAttributes=0x20) returned 0 [0161.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.883] GetLastError () returned 0x5 [0161.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF", dwFileAttributes=0x20) returned 0 [0161.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60870) returned 1 Thread: id = 3024 os_tid = 0x1b08 [0159.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif")) returned 0x20 [0161.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF", dwFileAttributes=0x20) returned 0 [0161.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.892] GetLastError () returned 0x5 [0161.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF", dwFileAttributes=0x20) returned 0 [0161.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a606c0) returned 1 Thread: id = 3025 os_tid = 0x1b0c [0159.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif")) returned 0x20 [0161.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF", dwFileAttributes=0x20) returned 0 [0161.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.891] GetLastError () returned 0x5 [0161.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF", dwFileAttributes=0x20) returned 0 [0161.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60240) returned 1 Thread: id = 3026 os_tid = 0x1b10 [0159.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif")) returned 0x20 [0161.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF", dwFileAttributes=0x20) returned 0 [0161.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.889] GetLastError () returned 0x5 [0161.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF", dwFileAttributes=0x20) returned 0 [0161.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 Thread: id = 3027 os_tid = 0x1b14 [0159.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif")) returned 0x20 [0161.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF", dwFileAttributes=0x20) returned 0 [0161.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.888] GetLastError () returned 0x5 [0161.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF", dwFileAttributes=0x20) returned 0 [0161.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a605a0) returned 1 Thread: id = 3028 os_tid = 0x1b18 [0159.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif")) returned 0x20 [0161.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF", dwFileAttributes=0x20) returned 0 [0161.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.882] GetLastError () returned 0x5 [0161.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF", dwFileAttributes=0x20) returned 0 [0161.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60360) returned 1 Thread: id = 3029 os_tid = 0x1b1c [0159.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif")) returned 0x20 [0161.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF", dwFileAttributes=0x20) returned 0 [0161.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.881] GetLastError () returned 0x5 [0161.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF", dwFileAttributes=0x20) returned 0 [0161.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a615f0) returned 1 Thread: id = 3030 os_tid = 0x1b20 [0159.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif")) returned 0x20 [0161.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF", dwFileAttributes=0x20) returned 0 [0161.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.880] GetLastError () returned 0x5 [0161.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF", dwFileAttributes=0x20) returned 0 [0161.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a602d0) returned 1 Thread: id = 3031 os_tid = 0x1b24 [0159.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif")) returned 0x20 [0161.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF", dwFileAttributes=0x20) returned 0 [0161.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.878] GetLastError () returned 0x5 [0161.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF", dwFileAttributes=0x20) returned 0 [0161.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 Thread: id = 3032 os_tid = 0x1b28 [0159.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif")) returned 0x20 [0161.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF", dwFileAttributes=0x20) returned 0 [0161.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.877] GetLastError () returned 0x5 [0161.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF", dwFileAttributes=0x20) returned 0 [0161.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60510) returned 1 Thread: id = 3033 os_tid = 0x1b2c [0159.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif")) returned 0x20 [0161.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF", dwFileAttributes=0x20) returned 0 [0161.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.876] GetLastError () returned 0x5 [0161.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF", dwFileAttributes=0x20) returned 0 [0161.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60f30) returned 1 Thread: id = 3034 os_tid = 0x1b30 [0159.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif")) returned 0x20 [0161.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF", dwFileAttributes=0x20) returned 0 [0161.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.874] GetLastError () returned 0x5 [0161.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF", dwFileAttributes=0x20) returned 0 [0161.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60ea0) returned 1 Thread: id = 3035 os_tid = 0x1b34 [0159.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif")) returned 0x20 [0161.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF", dwFileAttributes=0x20) returned 0 [0161.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.866] GetLastError () returned 0x5 [0161.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF", dwFileAttributes=0x20) returned 0 [0161.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61050) returned 1 Thread: id = 3036 os_tid = 0x1b38 [0159.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif")) returned 0x20 [0161.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF", dwFileAttributes=0x20) returned 0 [0161.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.864] GetLastError () returned 0x5 [0161.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF", dwFileAttributes=0x20) returned 0 [0161.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a610e0) returned 1 Thread: id = 3037 os_tid = 0x1b3c [0159.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif")) returned 0x20 [0161.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF", dwFileAttributes=0x20) returned 0 [0161.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.862] GetLastError () returned 0x5 [0161.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF", dwFileAttributes=0x20) returned 0 [0161.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60090) returned 1 Thread: id = 3038 os_tid = 0x1b40 [0159.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif")) returned 0x20 [0161.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF", dwFileAttributes=0x20) returned 0 [0161.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.861] GetLastError () returned 0x5 [0161.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF", dwFileAttributes=0x20) returned 0 [0161.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60120) returned 1 Thread: id = 3039 os_tid = 0x1b44 [0159.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif")) returned 0x20 [0161.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF", dwFileAttributes=0x20) returned 0 [0161.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.885] GetLastError () returned 0x5 [0161.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF", dwFileAttributes=0x20) returned 0 [0161.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61950) returned 1 Thread: id = 3040 os_tid = 0x1b4c [0159.245] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll")) returned 0x2020 [0159.245] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.245] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.245] GetLastError () returned 0x5 [0159.245] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 Thread: id = 3041 os_tid = 0x1b58 [0159.247] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll")) returned 0x2020 [0159.247] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.247] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.247] GetLastError () returned 0x5 [0159.247] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 3042 os_tid = 0x1b5c [0159.248] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll")) returned 0x2020 [0159.249] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.249] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.249] GetLastError () returned 0x5 [0159.249] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 3043 os_tid = 0x1b64 [0159.250] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll")) returned 0x2020 [0159.250] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.250] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.251] GetLastError () returned 0x5 [0159.251] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6f90) returned 1 Thread: id = 3044 os_tid = 0x1b68 [0159.252] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll")) returned 0x2020 [0159.252] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.252] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.252] GetLastError () returned 0x5 [0159.252] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63170) returned 1 Thread: id = 3045 os_tid = 0x1b6c [0159.257] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll")) returned 0x2020 [0159.257] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.257] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.258] GetLastError () returned 0x5 [0159.258] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6ef8) returned 1 Thread: id = 3046 os_tid = 0x1b74 [0159.262] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll")) returned 0x2020 [0159.262] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.262] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.262] GetLastError () returned 0x5 [0159.262] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 Thread: id = 3047 os_tid = 0x1b78 [0159.272] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll")) returned 0x2020 [0159.273] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.273] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.273] GetLastError () returned 0x5 [0159.273] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad60b8) returned 1 Thread: id = 3048 os_tid = 0x1b7c [0159.275] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll")) returned 0x2020 [0159.275] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.275] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.276] GetLastError () returned 0x5 [0159.276] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6908) returned 1 Thread: id = 3049 os_tid = 0x1b80 [0159.277] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll")) returned 0x2020 [0159.277] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.278] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.278] GetLastError () returned 0x5 [0159.278] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c98) returned 1 Thread: id = 3050 os_tid = 0x1b84 [0159.283] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll")) returned 0x2020 [0159.283] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.283] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.283] GetLastError () returned 0x5 [0159.284] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63490) returned 1 Thread: id = 3051 os_tid = 0x1b88 [0159.286] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll")) returned 0x2020 [0159.287] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.287] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.287] GetLastError () returned 0x5 [0159.287] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62b30) returned 1 Thread: id = 3052 os_tid = 0x1b8c [0159.288] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll")) returned 0x2020 [0159.289] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.289] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.289] GetLastError () returned 0x5 [0159.289] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6d30) returned 1 Thread: id = 3053 os_tid = 0x1b90 [0159.290] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll")) returned 0x2020 [0159.290] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.290] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.291] GetLastError () returned 0x5 [0159.291] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5310) returned 1 Thread: id = 3054 os_tid = 0x1b94 [0159.292] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll")) returned 0x2020 [0159.292] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.292] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.292] GetLastError () returned 0x5 [0159.293] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6740) returned 1 Thread: id = 3055 os_tid = 0x1b98 [0159.294] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll")) returned 0x2020 [0159.294] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.294] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.294] GetLastError () returned 0x5 [0159.294] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63350) returned 1 Thread: id = 3056 os_tid = 0x1b9c [0159.296] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll")) returned 0x2020 [0159.296] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.296] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.296] GetLastError () returned 0x5 [0159.296] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63670) returned 1 Thread: id = 3057 os_tid = 0x1ba0 [0159.297] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll")) returned 0x2020 [0159.298] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0159.298] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.298] GetLastError () returned 0x5 [0159.298] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a635d0) returned 1 Thread: id = 3058 os_tid = 0x1ba4 [0159.299] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll")) returned 0x2020 [0159.299] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.300] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.300] GetLastError () returned 0x5 [0159.300] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d8) returned 1 Thread: id = 3059 os_tid = 0x1ba8 [0159.301] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll")) returned 0x2020 [0159.301] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.301] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.301] GetLastError () returned 0x5 [0159.302] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c00) returned 1 Thread: id = 3060 os_tid = 0x1bac [0159.303] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll")) returned 0x2020 [0159.303] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.303] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.303] GetLastError () returned 0x5 [0159.303] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62590) returned 1 Thread: id = 3061 os_tid = 0x1bb0 [0159.304] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll")) returned 0x2020 [0159.305] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.305] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.305] GetLastError () returned 0x5 [0159.305] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5148) returned 1 Thread: id = 3062 os_tid = 0x1bb4 [0159.306] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll")) returned 0x2020 [0159.306] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0159.306] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.307] GetLastError () returned 0x5 [0159.307] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0159.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad63b0) returned 1 Thread: id = 3063 os_tid = 0x1bb8 [0159.308] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll")) returned 0x2020 [0161.487] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0161.487] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.487] GetLastError () returned 0x5 [0161.487] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0161.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6a38) returned 1 Thread: id = 3064 os_tid = 0x1bbc [0159.309] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll")) returned 0x2020 [0161.489] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0161.489] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.489] GetLastError () returned 0x5 [0161.489] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0161.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 3065 os_tid = 0x1bc0 [0159.314] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll")) returned 0x2020 [0159.755] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0160.167] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.167] GetLastError () returned 0x5 [0160.167] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f90) returned 1 Thread: id = 3066 os_tid = 0x1bc4 [0159.317] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll")) returned 0x2020 [0160.169] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0160.169] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.170] GetLastError () returned 0x5 [0160.170] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0160.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62630) returned 1 Thread: id = 3067 os_tid = 0x1bc8 [0159.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3d47a60 [0159.318] wcscpy (in: _Dest=0x3d47a60, _Source="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles" [0159.318] wcscat (in: _Dest=0x3d47a60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\" [0159.318] wcscat (in: _Dest=0x3d47a60, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*") returned="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*" [0159.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0159.318] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e734b0 [0159.319] wcscmp (_String1=".", _String2=".") returned 0 [0159.319] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.319] wcscmp (_String1="..", _String2=".") returned 1 [0159.319] wcscmp (_String1="..", _String2="..") returned 0 [0159.319] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe4eb893d, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe4eb893d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0159.319] FindClose (in: hFindFile=0x3e734b0 | out: hFindFile=0x3e734b0) returned 1 [0159.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0159.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47a60) returned 1 [0159.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0858) returned 1 Thread: id = 3068 os_tid = 0x1bcc [0159.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml")) returned 0x20 [0159.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0159.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.322] GetLastError () returned 0x5 [0159.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", dwFileAttributes=0x20) returned 0 [0159.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e288) returned 1 Thread: id = 3069 os_tid = 0x1bd0 [0159.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml")) returned 0x20 [0159.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0159.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.324] GetLastError () returned 0x5 [0159.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", dwFileAttributes=0x20) returned 0 [0159.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 Thread: id = 3070 os_tid = 0x1bd4 [0159.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml")) returned 0x20 [0162.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", dwFileAttributes=0x20) returned 0 [0162.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.476] GetLastError () returned 0x5 [0162.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", dwFileAttributes=0x20) returned 0 [0162.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63df0) returned 1 Thread: id = 3071 os_tid = 0x1bd8 [0159.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml")) returned 0x20 [0162.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", dwFileAttributes=0x20) returned 0 [0162.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.163] GetLastError () returned 0x5 [0162.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", dwFileAttributes=0x20) returned 0 [0162.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 3072 os_tid = 0x1bdc [0159.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml")) returned 0x20 [0162.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0162.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.474] GetLastError () returned 0x5 [0162.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", dwFileAttributes=0x20) returned 0 [0162.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 Thread: id = 3073 os_tid = 0x1be0 [0159.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml")) returned 0x20 [0162.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0162.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.162] GetLastError () returned 0x5 [0162.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", dwFileAttributes=0x20) returned 0 [0162.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 3074 os_tid = 0x1be4 [0159.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml")) returned 0x20 [0162.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0162.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.475] GetLastError () returned 0x5 [0162.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", dwFileAttributes=0x20) returned 0 [0162.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052fe8) returned 1 Thread: id = 3075 os_tid = 0x1be8 [0159.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml")) returned 0x20 [0162.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0162.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.161] GetLastError () returned 0x5 [0162.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", dwFileAttributes=0x20) returned 0 [0162.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053c60) returned 1 Thread: id = 3076 os_tid = 0x1bec [0159.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml")) returned 0x20 [0162.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", dwFileAttributes=0x20) returned 0 [0162.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.482] GetLastError () returned 0x5 [0162.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", dwFileAttributes=0x20) returned 0 [0162.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052f40) returned 1 Thread: id = 3077 os_tid = 0x1c1c [0159.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml")) returned 0x20 [0162.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0162.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.481] GetLastError () returned 0x5 [0162.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", dwFileAttributes=0x20) returned 0 [0162.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a626d0) returned 1 Thread: id = 3078 os_tid = 0x1c20 [0159.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml")) returned 0x20 [0162.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", dwFileAttributes=0x20) returned 0 [0162.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.480] GetLastError () returned 0x5 [0162.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", dwFileAttributes=0x20) returned 0 [0162.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 3079 os_tid = 0x1c24 [0159.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml")) returned 0x20 [0162.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", dwFileAttributes=0x20) returned 0 [0162.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.479] GetLastError () returned 0x5 [0162.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", dwFileAttributes=0x20) returned 0 [0162.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 3080 os_tid = 0x1c28 [0159.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml")) returned 0x20 [0162.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", dwFileAttributes=0x20) returned 0 [0162.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.477] GetLastError () returned 0x5 [0162.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", dwFileAttributes=0x20) returned 0 [0162.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 Thread: id = 3081 os_tid = 0x1c2c [0159.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml")) returned 0x20 [0162.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0162.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.472] GetLastError () returned 0x5 [0162.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", dwFileAttributes=0x20) returned 0 [0162.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 Thread: id = 3082 os_tid = 0x1c34 [0159.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu")) returned 0x20 [0159.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU", dwFileAttributes=0x20) returned 0 [0159.330] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.330] GetLastError () returned 0x5 [0159.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU", dwFileAttributes=0x20) returned 0 [0159.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a613b0) returned 1 Thread: id = 3083 os_tid = 0x1c38 [0159.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu")) returned 0x20 [0159.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU", dwFileAttributes=0x20) returned 0 [0159.332] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.332] GetLastError () returned 0x5 [0159.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU", dwFileAttributes=0x20) returned 0 [0159.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 Thread: id = 3084 os_tid = 0x1c3c [0159.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\adak")) returned 0x20 [0159.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak", dwFileAttributes=0x20) returned 0 [0159.337] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\adak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.337] GetLastError () returned 0x5 [0159.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Adak", dwFileAttributes=0x20) returned 0 [0159.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 Thread: id = 3085 os_tid = 0x1c40 [0159.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anchorage")) returned 0x20 [0159.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage", dwFileAttributes=0x20) returned 0 [0159.339] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anchorage"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.339] GetLastError () returned 0x5 [0159.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anchorage", dwFileAttributes=0x20) returned 0 [0159.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23300) returned 1 Thread: id = 3086 os_tid = 0x1c44 [0159.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anguilla")) returned 0x20 [0159.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla", dwFileAttributes=0x20) returned 0 [0159.340] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\anguilla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.340] GetLastError () returned 0x5 [0159.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Anguilla", dwFileAttributes=0x20) returned 0 [0159.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23610) returned 1 Thread: id = 3087 os_tid = 0x1c50 [0159.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\antigua")) returned 0x20 [0159.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua", dwFileAttributes=0x20) returned 0 [0159.342] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\antigua"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.342] GetLastError () returned 0x5 [0159.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Antigua", dwFileAttributes=0x20) returned 0 [0159.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a233e0) returned 1 Thread: id = 3088 os_tid = 0x1c54 [0159.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\araguaina")) returned 0x20 [0159.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina", dwFileAttributes=0x20) returned 0 [0159.349] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\araguaina"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.349] GetLastError () returned 0x5 [0159.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Araguaina", dwFileAttributes=0x20) returned 0 [0159.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23140) returned 1 Thread: id = 3089 os_tid = 0x1c58 [0159.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3dd88 [0159.350] wcscpy (in: _Dest=0x3f3dd88, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0159.350] wcscat (in: _Dest=0x3f3dd88, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0159.350] wcscat (in: _Dest=0x3f3dd88, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\*" [0159.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0159.350] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73830 [0160.181] wcscmp (_String1=".", _String2=".") returned 0 [0160.181] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.181] wcscmp (_String1="..", _String2=".") returned 1 [0160.181] wcscmp (_String1="..", _String2="..") returned 0 [0160.182] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Buenos_Aires", cAlternateFileName="BUENOS~1")) returned 1 [0160.182] wcscmp (_String1="Buenos_Aires", _String2=".") returned 1 [0160.182] wcscmp (_String1="Buenos_Aires", _String2="..") returned 1 [0160.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45da0 [0160.182] wcscpy (in: _Dest=0x3d45da0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0160.182] wcscat (in: _Dest=0x3d45da0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0160.182] wcscat (in: _Dest=0x3d45da0, _Source="Buenos_Aires" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" [0166.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0166.555] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catamarca", cAlternateFileName="CATAMA~1")) returned 1 [0166.555] wcscmp (_String1="Catamarca", _String2=".") returned 1 [0166.555] wcscmp (_String1="Catamarca", _String2="..") returned 1 [0166.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x36e588 [0166.555] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.555] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.555] wcscat (in: _Dest=0x36e588, _Source="Catamarca" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" [0166.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0166.557] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cordoba", cAlternateFileName="")) returned 1 [0166.558] wcscmp (_String1="Cordoba", _String2=".") returned 1 [0166.558] wcscmp (_String1="Cordoba", _String2="..") returned 1 [0166.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a218 [0166.558] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.558] wcscat (in: _Dest=0x3e1a218, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.558] wcscat (in: _Dest=0x3e1a218, _Source="Cordoba" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" [0166.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0166.559] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jujuy", cAlternateFileName="")) returned 1 [0166.559] wcscmp (_String1="Jujuy", _String2=".") returned 1 [0166.559] wcscmp (_String1="Jujuy", _String2="..") returned 1 [0166.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e1a698 [0166.560] wcscpy (in: _Dest=0x3e1a698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.560] wcscat (in: _Dest=0x3e1a698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.560] wcscat (in: _Dest=0x3e1a698, _Source="Jujuy" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" [0166.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0166.561] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="La_Rioja", cAlternateFileName="")) returned 1 [0166.561] wcscmp (_String1="La_Rioja", _String2=".") returned 1 [0166.561] wcscmp (_String1="La_Rioja", _String2="..") returned 1 [0166.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36fc60 [0166.561] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.561] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.561] wcscat (in: _Dest=0x36fc60, _Source="La_Rioja" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" [0166.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0166.563] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mendoza", cAlternateFileName="")) returned 1 [0166.563] wcscmp (_String1="Mendoza", _String2=".") returned 1 [0166.563] wcscmp (_String1="Mendoza", _String2="..") returned 1 [0166.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a718 [0166.563] wcscpy (in: _Dest=0x3e1a718, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.563] wcscat (in: _Dest=0x3e1a718, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.563] wcscat (in: _Dest=0x3e1a718, _Source="Mendoza" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" [0166.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0166.564] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rio_Gallegos", cAlternateFileName="RIO_GA~1")) returned 1 [0166.565] wcscmp (_String1="Rio_Gallegos", _String2=".") returned 1 [0166.565] wcscmp (_String1="Rio_Gallegos", _String2="..") returned 1 [0166.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a603f0 [0166.565] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.565] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.565] wcscat (in: _Dest=0x7a603f0, _Source="Rio_Gallegos" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" [0166.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a603f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0166.566] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Salta", cAlternateFileName="")) returned 1 [0166.566] wcscmp (_String1="Salta", _String2=".") returned 1 [0166.566] wcscmp (_String1="Salta", _String2="..") returned 1 [0166.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e19098 [0166.566] wcscpy (in: _Dest=0x3e19098, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.566] wcscat (in: _Dest=0x3e19098, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.567] wcscat (in: _Dest=0x3e19098, _Source="Salta" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" [0166.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0166.568] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="San_Juan", cAlternateFileName="")) returned 1 [0166.568] wcscmp (_String1="San_Juan", _String2=".") returned 1 [0166.568] wcscmp (_String1="San_Juan", _String2="..") returned 1 [0166.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36e830 [0166.568] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.568] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.568] wcscat (in: _Dest=0x36e830, _Source="San_Juan" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" [0166.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0166.570] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="San_Luis", cAlternateFileName="")) returned 1 [0166.570] wcscmp (_String1="San_Luis", _String2=".") returned 1 [0166.570] wcscmp (_String1="San_Luis", _String2="..") returned 1 [0166.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36ed80 [0166.570] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.570] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.570] wcscat (in: _Dest=0x36ed80, _Source="San_Luis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" [0166.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474 [0166.572] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x235, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tucuman", cAlternateFileName="")) returned 1 [0166.572] wcscmp (_String1="Tucuman", _String2=".") returned 1 [0166.572] wcscmp (_String1="Tucuman", _String2="..") returned 1 [0166.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a018 [0166.572] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.572] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.572] wcscat (in: _Dest=0x3e1a018, _Source="Tucuman" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" [0166.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0166.573] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ushuaia", cAlternateFileName="")) returned 1 [0166.573] wcscmp (_String1="Ushuaia", _String2=".") returned 1 [0166.573] wcscmp (_String1="Ushuaia", _String2="..") returned 1 [0166.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19198 [0166.574] wcscpy (in: _Dest=0x3e19198, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina" [0166.574] wcscat (in: _Dest=0x3e19198, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\" [0166.574] wcscat (in: _Dest=0x3e19198, _Source="Ushuaia" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" [0166.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0166.575] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681a3700, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681a3700, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681a3700, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ushuaia", cAlternateFileName="")) returned 0 [0166.575] FindClose (in: hFindFile=0x3e73830 | out: hFindFile=0x3e73830) returned 1 [0166.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0166.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0166.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23370) returned 1 Thread: id = 3090 os_tid = 0x1c5c [0159.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\aruba")) returned 0x20 [0159.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba", dwFileAttributes=0x20) returned 0 [0159.353] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\aruba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.353] GetLastError () returned 0x5 [0159.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Aruba", dwFileAttributes=0x20) returned 0 [0159.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47b30) returned 1 Thread: id = 3091 os_tid = 0x1c60 [0159.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\asuncion")) returned 0x20 [0159.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion", dwFileAttributes=0x20) returned 0 [0159.355] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\asuncion"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.355] GetLastError () returned 0x5 [0159.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Asuncion", dwFileAttributes=0x20) returned 0 [0159.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 Thread: id = 3092 os_tid = 0x1c64 [0159.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\atikokan")) returned 0x20 [0159.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan", dwFileAttributes=0x20) returned 0 [0159.356] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\atikokan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.357] GetLastError () returned 0x5 [0159.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Atikokan", dwFileAttributes=0x20) returned 0 [0159.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ae0) returned 1 Thread: id = 3093 os_tid = 0x1c68 [0159.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia")) returned 0x20 [0159.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia", dwFileAttributes=0x20) returned 0 [0159.358] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.358] GetLastError () returned 0x5 [0159.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia", dwFileAttributes=0x20) returned 0 [0159.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d477f0) returned 1 Thread: id = 3094 os_tid = 0x1c6c [0159.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia_banderas")) returned 0x20 [0159.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas", dwFileAttributes=0x20) returned 0 [0159.360] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bahia_banderas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.360] GetLastError () returned 0x5 [0159.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas", dwFileAttributes=0x20) returned 0 [0159.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 Thread: id = 3095 os_tid = 0x1c7c [0159.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\barbados")) returned 0x20 [0159.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados", dwFileAttributes=0x20) returned 0 [0159.362] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\barbados"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.362] GetLastError () returned 0x5 [0159.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Barbados", dwFileAttributes=0x20) returned 0 [0159.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23e60) returned 1 Thread: id = 3096 os_tid = 0x1c80 [0159.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belem")) returned 0x20 [0159.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem", dwFileAttributes=0x20) returned 0 [0159.367] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.367] GetLastError () returned 0x5 [0159.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belem", dwFileAttributes=0x20) returned 0 [0159.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47fa8) returned 1 Thread: id = 3097 os_tid = 0x1c84 [0159.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belize")) returned 0x20 [0159.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize", dwFileAttributes=0x20) returned 0 [0159.374] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\belize"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.374] GetLastError () returned 0x5 [0159.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Belize", dwFileAttributes=0x20) returned 0 [0159.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23df0) returned 1 Thread: id = 3098 os_tid = 0x1c88 [0159.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\blanc-sablon")) returned 0x20 [0159.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon", dwFileAttributes=0x20) returned 0 [0159.376] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\blanc-sablon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.376] GetLastError () returned 0x5 [0159.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon", dwFileAttributes=0x20) returned 0 [0159.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 Thread: id = 3099 os_tid = 0x1c8c [0159.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boa_vista")) returned 0x20 [0159.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista", dwFileAttributes=0x20) returned 0 [0159.382] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boa_vista"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.382] GetLastError () returned 0x5 [0159.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boa_Vista", dwFileAttributes=0x20) returned 0 [0159.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d80) returned 1 Thread: id = 3100 os_tid = 0x1c90 [0159.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bogota")) returned 0x20 [0159.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota", dwFileAttributes=0x20) returned 0 [0159.384] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\bogota"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.384] GetLastError () returned 0x5 [0159.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Bogota", dwFileAttributes=0x20) returned 0 [0159.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23c30) returned 1 Thread: id = 3101 os_tid = 0x1c98 [0159.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boise")) returned 0x20 [0159.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise", dwFileAttributes=0x20) returned 0 [0159.385] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\boise"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.385] GetLastError () returned 0x5 [0159.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Boise", dwFileAttributes=0x20) returned 0 [0159.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47c00) returned 1 Thread: id = 3102 os_tid = 0x1ca0 [0159.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cambridge_bay")) returned 0x20 [0159.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay", dwFileAttributes=0x20) returned 0 [0159.387] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cambridge_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.387] GetLastError () returned 0x5 [0159.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay", dwFileAttributes=0x20) returned 0 [0159.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 Thread: id = 3103 os_tid = 0x1ca4 [0159.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\campo_grande")) returned 0x20 [0159.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande", dwFileAttributes=0x20) returned 0 [0159.393] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\campo_grande"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.393] GetLastError () returned 0x5 [0159.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Campo_Grande", dwFileAttributes=0x20) returned 0 [0159.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 Thread: id = 3104 os_tid = 0x1ca8 [0159.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cancun")) returned 0x20 [0159.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun", dwFileAttributes=0x20) returned 0 [0159.395] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cancun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.395] GetLastError () returned 0x5 [0159.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cancun", dwFileAttributes=0x20) returned 0 [0159.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a00) returned 1 Thread: id = 3105 os_tid = 0x1cac [0159.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\caracas")) returned 0x20 [0159.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas", dwFileAttributes=0x20) returned 0 [0159.402] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\caracas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.402] GetLastError () returned 0x5 [0159.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Caracas", dwFileAttributes=0x20) returned 0 [0159.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23220) returned 1 Thread: id = 3106 os_tid = 0x1cb0 [0159.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cayenne")) returned 0x20 [0159.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne", dwFileAttributes=0x20) returned 0 [0159.406] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cayenne"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.406] GetLastError () returned 0x5 [0159.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayenne", dwFileAttributes=0x20) returned 0 [0159.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ed0) returned 1 Thread: id = 3107 os_tid = 0x1cb8 [0159.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cayman")) returned 0x20 [0159.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman", dwFileAttributes=0x20) returned 0 [0159.410] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cayman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.410] GetLastError () returned 0x5 [0159.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cayman", dwFileAttributes=0x20) returned 0 [0159.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d10) returned 1 Thread: id = 3108 os_tid = 0x1cbc [0159.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\chicago")) returned 0x20 [0159.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago", dwFileAttributes=0x20) returned 0 [0159.414] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\chicago"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.414] GetLastError () returned 0x5 [0159.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chicago", dwFileAttributes=0x20) returned 0 [0159.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26778) returned 1 Thread: id = 3109 os_tid = 0x1cc4 [0159.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\chihuahua")) returned 0x20 [0159.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua", dwFileAttributes=0x20) returned 0 [0159.415] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\chihuahua"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.416] GetLastError () returned 0x5 [0159.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Chihuahua", dwFileAttributes=0x20) returned 0 [0159.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a18) returned 1 Thread: id = 3110 os_tid = 0x1ccc [0159.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\costa_rica")) returned 0x20 [0159.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica", dwFileAttributes=0x20) returned 0 [0159.417] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\costa_rica"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0159.417] GetLastError () returned 0x5 [0159.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Costa_Rica", dwFileAttributes=0x20) returned 0 [0159.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 Thread: id = 3111 os_tid = 0x1cd0 [0160.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\creston")) returned 0x20 [0160.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston", dwFileAttributes=0x20) returned 0 [0160.374] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\creston"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0160.385] GetLastError () returned 0x5 [0160.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Creston", dwFileAttributes=0x20) returned 0 [0160.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26cb8) returned 1 Thread: id = 3112 os_tid = 0x1cd4 [0160.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf")) returned 0x20 [0161.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.285] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.292] GetLastError () returned 0x5 [0161.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaede8) returned 1 Thread: id = 3113 os_tid = 0x1cd8 [0161.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf")) returned 0x20 [0161.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.303] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.303] GetLastError () returned 0x5 [0161.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 Thread: id = 3114 os_tid = 0x1ce0 [0161.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf")) returned 0x20 [0161.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.319] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.319] GetLastError () returned 0x5 [0161.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 Thread: id = 3115 os_tid = 0x1d40 [0161.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf")) returned 0x20 [0161.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.326] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.326] GetLastError () returned 0x5 [0161.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 3116 os_tid = 0x1d48 [0161.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf")) returned 0x20 [0161.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.333] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.333] GetLastError () returned 0x5 [0161.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 Thread: id = 3117 os_tid = 0x1d4c [0161.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf")) returned 0x20 [0161.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.335] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.335] GetLastError () returned 0x5 [0161.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40830) returned 1 Thread: id = 3118 os_tid = 0x1d50 [0161.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan")) returned 0x20 [0161.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN", dwFileAttributes=0x20) returned 0 [0161.339] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.339] GetLastError () returned 0x5 [0161.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN", dwFileAttributes=0x20) returned 0 [0161.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63ad0) returned 1 Thread: id = 3119 os_tid = 0x1d54 [0161.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan")) returned 0x20 [0162.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN", dwFileAttributes=0x20) returned 0 [0162.892] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.893] GetLastError () returned 0x5 [0162.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN", dwFileAttributes=0x20) returned 0 [0162.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 Thread: id = 3120 os_tid = 0x1d58 [0161.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan")) returned 0x20 [0163.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN", dwFileAttributes=0x20) returned 0 [0163.267] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.267] GetLastError () returned 0x5 [0163.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN", dwFileAttributes=0x20) returned 0 [0163.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63030) returned 1 Thread: id = 3121 os_tid = 0x1d60 [0161.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan")) returned 0x20 [0163.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN", dwFileAttributes=0x20) returned 0 [0163.269] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.269] GetLastError () returned 0x5 [0163.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN", dwFileAttributes=0x20) returned 0 [0163.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 3122 os_tid = 0x1d6c [0161.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan")) returned 0x20 [0163.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN", dwFileAttributes=0x20) returned 0 [0163.268] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.268] GetLastError () returned 0x5 [0163.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN", dwFileAttributes=0x20) returned 0 [0163.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad63b0) returned 1 Thread: id = 3123 os_tid = 0x1d70 [0161.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan")) returned 0x20 [0163.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN", dwFileAttributes=0x20) returned 0 [0163.270] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.270] GetLastError () returned 0x5 [0163.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN", dwFileAttributes=0x20) returned 0 [0163.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 Thread: id = 3124 os_tid = 0x1d74 [0161.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan")) returned 0x20 [0163.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN", dwFileAttributes=0x20) returned 0 [0163.280] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.280] GetLastError () returned 0x5 [0163.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN", dwFileAttributes=0x20) returned 0 [0163.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 Thread: id = 3125 os_tid = 0x1d78 [0161.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan")) returned 0x20 [0163.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN", dwFileAttributes=0x20) returned 0 [0163.271] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.272] GetLastError () returned 0x5 [0163.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN", dwFileAttributes=0x20) returned 0 [0163.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 3126 os_tid = 0x1d7c [0161.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan")) returned 0x20 [0163.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN", dwFileAttributes=0x20) returned 0 [0163.281] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.281] GetLastError () returned 0x5 [0163.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN", dwFileAttributes=0x20) returned 0 [0163.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45020) returned 1 Thread: id = 3127 os_tid = 0x1d80 [0161.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan")) returned 0x20 [0163.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN", dwFileAttributes=0x20) returned 0 [0163.272] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.273] GetLastError () returned 0x5 [0163.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN", dwFileAttributes=0x20) returned 0 [0163.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 3128 os_tid = 0x1d84 [0161.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan")) returned 0x20 [0163.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN", dwFileAttributes=0x20) returned 0 [0163.274] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.274] GetLastError () returned 0x5 [0163.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN", dwFileAttributes=0x20) returned 0 [0163.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 3129 os_tid = 0x1d88 [0161.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan")) returned 0x20 [0163.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN", dwFileAttributes=0x20) returned 0 [0163.266] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.266] GetLastError () returned 0x5 [0163.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN", dwFileAttributes=0x20) returned 0 [0163.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 Thread: id = 3130 os_tid = 0x1d98 [0161.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan")) returned 0x20 [0163.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN", dwFileAttributes=0x20) returned 0 [0163.265] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.265] GetLastError () returned 0x5 [0163.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN", dwFileAttributes=0x20) returned 0 [0163.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5148) returned 1 Thread: id = 3131 os_tid = 0x1d9c [0161.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan")) returned 0x20 [0163.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN", dwFileAttributes=0x20) returned 0 [0163.282] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.282] GetLastError () returned 0x5 [0163.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN", dwFileAttributes=0x20) returned 0 [0163.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d459b0) returned 1 Thread: id = 3132 os_tid = 0x1da0 [0161.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan")) returned 0x20 [0163.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN", dwFileAttributes=0x20) returned 0 [0163.275] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.275] GetLastError () returned 0x5 [0163.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN", dwFileAttributes=0x20) returned 0 [0163.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f90) returned 1 Thread: id = 3133 os_tid = 0x1da4 [0161.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan")) returned 0x20 [0163.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN", dwFileAttributes=0x20) returned 0 [0163.283] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.284] GetLastError () returned 0x5 [0163.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN", dwFileAttributes=0x20) returned 0 [0163.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 3134 os_tid = 0x1da8 [0161.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan")) returned 0x20 [0163.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN", dwFileAttributes=0x20) returned 0 [0163.264] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.264] GetLastError () returned 0x5 [0163.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN", dwFileAttributes=0x20) returned 0 [0163.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c00) returned 1 Thread: id = 3135 os_tid = 0x1dac [0161.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan")) returned 0x20 [0163.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN", dwFileAttributes=0x20) returned 0 [0163.285] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.285] GetLastError () returned 0x5 [0163.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN", dwFileAttributes=0x20) returned 0 [0163.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 3136 os_tid = 0x1db0 [0161.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan")) returned 0x20 [0163.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN", dwFileAttributes=0x20) returned 0 [0163.263] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.263] GetLastError () returned 0x5 [0163.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN", dwFileAttributes=0x20) returned 0 [0163.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d8) returned 1 Thread: id = 3137 os_tid = 0x1db4 [0161.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan")) returned 0x20 [0163.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN", dwFileAttributes=0x20) returned 0 [0163.276] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.276] GetLastError () returned 0x5 [0163.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN", dwFileAttributes=0x20) returned 0 [0163.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 3138 os_tid = 0x1db8 [0161.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan")) returned 0x20 [0163.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN", dwFileAttributes=0x20) returned 0 [0163.277] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.277] GetLastError () returned 0x5 [0163.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN", dwFileAttributes=0x20) returned 0 [0163.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 Thread: id = 3139 os_tid = 0x1dbc [0161.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d442a0 [0161.355] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0161.355] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\" [0161.355] wcscat (in: _Dest=0x3d442a0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*" [0161.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef43d0 [0161.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0162.858] wcscmp (_String1=".", _String2=".") returned 0 [0162.858] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.858] wcscmp (_String1="..", _String2=".") returned 1 [0162.858] wcscmp (_String1="..", _String2="..") returned 0 [0162.858] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0162.858] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0162.858] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0162.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3052f40 [0162.858] wcscpy (in: _Dest=0x3052f40, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0162.858] wcscat (in: _Dest=0x3052f40, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\" [0162.858] wcscat (in: _Dest=0x3052f40, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" [0166.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0166.620] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0166.620] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0166.620] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0166.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e678 [0166.621] wcscpy (in: _Dest=0x7a5e678, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services" [0166.621] wcscat (in: _Dest=0x7a5e678, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\" [0166.621] wcscat (in: _Dest=0x7a5e678, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" [0166.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0166.622] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0166.622] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0166.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0166.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 [0166.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 3140 os_tid = 0x1dc0 [0161.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan")) returned 0x20 [0163.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN", dwFileAttributes=0x20) returned 0 [0163.278] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.278] GetLastError () returned 0x5 [0163.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN", dwFileAttributes=0x20) returned 0 [0163.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a613b0) returned 1 Thread: id = 3141 os_tid = 0x1dc4 [0161.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan")) returned 0x20 [0162.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN", dwFileAttributes=0x20) returned 0 [0162.891] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.891] GetLastError () returned 0x5 [0162.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN", dwFileAttributes=0x20) returned 0 [0162.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61680) returned 1 Thread: id = 3142 os_tid = 0x1dc8 [0161.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan")) returned 0x20 [0163.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN", dwFileAttributes=0x20) returned 0 [0163.279] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.279] GetLastError () returned 0x5 [0163.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN", dwFileAttributes=0x20) returned 0 [0163.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a619e0) returned 1 Thread: id = 3143 os_tid = 0x1dcc [0161.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\abidjan")) returned 0x20 [0161.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan", dwFileAttributes=0x20) returned 0 [0161.357] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\abidjan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.357] GetLastError () returned 0x5 [0161.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Abidjan", dwFileAttributes=0x20) returned 0 [0161.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39340) returned 1 Thread: id = 3144 os_tid = 0x1dd0 [0161.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\accra")) returned 0x20 [0161.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra", dwFileAttributes=0x20) returned 0 [0161.359] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\accra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.359] GetLastError () returned 0x5 [0161.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Accra", dwFileAttributes=0x20) returned 0 [0161.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47c00) returned 1 Thread: id = 3145 os_tid = 0x1dd4 [0161.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\addis_ababa")) returned 0x20 [0161.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa", dwFileAttributes=0x20) returned 0 [0161.361] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\addis_ababa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.361] GetLastError () returned 0x5 [0161.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa", dwFileAttributes=0x20) returned 0 [0161.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 Thread: id = 3146 os_tid = 0x1dd8 [0161.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\algiers")) returned 0x20 [0162.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers", dwFileAttributes=0x20) returned 0 [0162.176] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\algiers"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.176] GetLastError () returned 0x5 [0162.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Algiers", dwFileAttributes=0x20) returned 0 [0162.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26a18) returned 1 Thread: id = 3147 os_tid = 0x1ddc [0161.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\asmara")) returned 0x20 [0162.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara", dwFileAttributes=0x20) returned 0 [0162.175] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\asmara"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.175] GetLastError () returned 0x5 [0162.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Asmara", dwFileAttributes=0x20) returned 0 [0162.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47fa8) returned 1 Thread: id = 3148 os_tid = 0x1de0 [0161.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bamako")) returned 0x20 [0162.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako", dwFileAttributes=0x20) returned 0 [0162.173] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bamako"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.174] GetLastError () returned 0x5 [0162.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bamako", dwFileAttributes=0x20) returned 0 [0162.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d477f0) returned 1 Thread: id = 3149 os_tid = 0x1de4 [0161.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bangui")) returned 0x20 [0162.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui", dwFileAttributes=0x20) returned 0 [0162.513] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bangui"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.514] GetLastError () returned 0x5 [0162.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bangui", dwFileAttributes=0x20) returned 0 [0162.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47b30) returned 1 Thread: id = 3150 os_tid = 0x1dec [0161.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\banjul")) returned 0x20 [0162.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul", dwFileAttributes=0x20) returned 0 [0162.512] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\banjul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.512] GetLastError () returned 0x5 [0162.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Banjul", dwFileAttributes=0x20) returned 0 [0162.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47a60) returned 1 Thread: id = 3151 os_tid = 0x1df0 [0161.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bissau")) returned 0x20 [0162.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau", dwFileAttributes=0x20) returned 0 [0162.511] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bissau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.511] GetLastError () returned 0x5 [0162.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bissau", dwFileAttributes=0x20) returned 0 [0162.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d479f8) returned 1 Thread: id = 3152 os_tid = 0x1dfc [0161.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\blantyre")) returned 0x20 [0162.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre", dwFileAttributes=0x20) returned 0 [0162.510] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\blantyre"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.510] GetLastError () returned 0x5 [0162.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Blantyre", dwFileAttributes=0x20) returned 0 [0162.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26778) returned 1 Thread: id = 3153 os_tid = 0x1e00 [0161.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\brazzaville")) returned 0x20 [0162.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville", dwFileAttributes=0x20) returned 0 [0162.490] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\brazzaville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.490] GetLastError () returned 0x5 [0162.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville", dwFileAttributes=0x20) returned 0 [0162.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 Thread: id = 3154 os_tid = 0x1e04 [0161.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bujumbura")) returned 0x20 [0162.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura", dwFileAttributes=0x20) returned 0 [0162.491] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\bujumbura"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.492] GetLastError () returned 0x5 [0162.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura", dwFileAttributes=0x20) returned 0 [0162.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a267e8) returned 1 Thread: id = 3155 os_tid = 0x1e08 [0161.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\cairo")) returned 0x20 [0162.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo", dwFileAttributes=0x20) returned 0 [0162.509] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\cairo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.509] GetLastError () returned 0x5 [0162.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Cairo", dwFileAttributes=0x20) returned 0 [0162.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47990) returned 1 Thread: id = 3156 os_tid = 0x1e14 [0161.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\casablanca")) returned 0x20 [0162.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca", dwFileAttributes=0x20) returned 0 [0162.493] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\casablanca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.493] GetLastError () returned 0x5 [0162.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Casablanca", dwFileAttributes=0x20) returned 0 [0162.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a264d8) returned 1 Thread: id = 3157 os_tid = 0x1e18 [0161.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ceuta")) returned 0x20 [0162.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta", dwFileAttributes=0x20) returned 0 [0162.508] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ceuta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.508] GetLastError () returned 0x5 [0162.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ceuta", dwFileAttributes=0x20) returned 0 [0162.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47d38) returned 1 Thread: id = 3158 os_tid = 0x1e1c [0161.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\conakry")) returned 0x20 [0162.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry", dwFileAttributes=0x20) returned 0 [0162.507] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\conakry"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.507] GetLastError () returned 0x5 [0162.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Conakry", dwFileAttributes=0x20) returned 0 [0162.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26938) returned 1 Thread: id = 3159 os_tid = 0x1e20 [0161.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dakar")) returned 0x20 [0162.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar", dwFileAttributes=0x20) returned 0 [0162.503] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dakar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.504] GetLastError () returned 0x5 [0162.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dakar", dwFileAttributes=0x20) returned 0 [0162.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47cd0) returned 1 Thread: id = 3160 os_tid = 0x1e24 [0161.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam")) returned 0x20 [0162.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam", dwFileAttributes=0x20) returned 0 [0162.494] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.494] GetLastError () returned 0x5 [0162.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam", dwFileAttributes=0x20) returned 0 [0162.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 Thread: id = 3161 os_tid = 0x1e28 [0161.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\djibouti")) returned 0x20 [0162.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti", dwFileAttributes=0x20) returned 0 [0162.502] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\djibouti"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.503] GetLastError () returned 0x5 [0162.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Djibouti", dwFileAttributes=0x20) returned 0 [0162.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26698) returned 1 Thread: id = 3162 os_tid = 0x1e2c [0161.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\douala")) returned 0x20 [0162.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala", dwFileAttributes=0x20) returned 0 [0162.501] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\douala"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.502] GetLastError () returned 0x5 [0162.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Douala", dwFileAttributes=0x20) returned 0 [0162.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47928) returned 1 Thread: id = 3163 os_tid = 0x1e30 [0161.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\el_aaiun")) returned 0x20 [0162.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun", dwFileAttributes=0x20) returned 0 [0162.500] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\el_aaiun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.500] GetLastError () returned 0x5 [0162.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun", dwFileAttributes=0x20) returned 0 [0162.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26008) returned 1 Thread: id = 3164 os_tid = 0x1e34 [0161.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\freetown")) returned 0x20 [0162.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown", dwFileAttributes=0x20) returned 0 [0162.499] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\freetown"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.499] GetLastError () returned 0x5 [0162.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Freetown", dwFileAttributes=0x20) returned 0 [0162.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26f58) returned 1 Thread: id = 3165 os_tid = 0x1e38 [0161.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\gaborone")) returned 0x20 [0162.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone", dwFileAttributes=0x20) returned 0 [0162.498] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\gaborone"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.498] GetLastError () returned 0x5 [0162.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Gaborone", dwFileAttributes=0x20) returned 0 [0162.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26c48) returned 1 Thread: id = 3166 os_tid = 0x1e3c [0161.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\harare")) returned 0x20 [0162.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare", dwFileAttributes=0x20) returned 0 [0162.497] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\harare"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.497] GetLastError () returned 0x5 [0162.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Harare", dwFileAttributes=0x20) returned 0 [0162.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47170) returned 1 Thread: id = 3167 os_tid = 0x1e40 [0161.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\johannesburg")) returned 0x20 [0162.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg", dwFileAttributes=0x20) returned 0 [0162.495] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\johannesburg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.495] GetLastError () returned 0x5 [0162.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg", dwFileAttributes=0x20) returned 0 [0162.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 Thread: id = 3168 os_tid = 0x1e44 [0161.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\juba")) returned 0x20 [0161.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba", dwFileAttributes=0x20) returned 0 [0161.563] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\juba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.564] GetLastError () returned 0x5 [0161.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Juba", dwFileAttributes=0x20) returned 0 [0161.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46950) returned 1 Thread: id = 3169 os_tid = 0x1e48 [0161.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kampala")) returned 0x20 [0161.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala", dwFileAttributes=0x20) returned 0 [0161.565] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kampala"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.565] GetLastError () returned 0x5 [0161.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kampala", dwFileAttributes=0x20) returned 0 [0161.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a263f8) returned 1 Thread: id = 3170 os_tid = 0x1e4c [0161.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\khartoum")) returned 0x20 [0162.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum", dwFileAttributes=0x20) returned 0 [0162.496] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\khartoum"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.496] GetLastError () returned 0x5 [0162.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Khartoum", dwFileAttributes=0x20) returned 0 [0162.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a261c8) returned 1 Thread: id = 3171 os_tid = 0x1e54 [0161.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66980 [0161.573] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" [0161.573] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\" [0161.573] wcscat (in: _Dest=0x7a66980, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*" [0161.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0161.574] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5540ee90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55434ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e734b0 [0161.910] wcscmp (_String1=".", _String2=".") returned 0 [0161.910] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5540ee90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x55434ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.911] wcscmp (_String1="..", _String2=".") returned 1 [0161.911] wcscmp (_String1="..", _String2="..") returned 0 [0161.911] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa429f800, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa429f800, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 1 [0161.911] wcscmp (_String1="Notebook03.onepkg", _String2=".") returned 1 [0161.911] wcscmp (_String1="Notebook03.onepkg", _String2="..") returned 1 [0161.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85700 [0161.911] wcscpy (in: _Dest=0x3d85700, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates" [0161.911] wcscat (in: _Dest=0x3d85700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\" [0161.911] wcscat (in: _Dest=0x3d85700, _Source="Notebook03.onepkg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" [0164.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg")) returned 0x20 [0164.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg", dwFileAttributes=0x20) returned 0 [0164.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.798] GetLastError () returned 0x5 [0164.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg", dwFileAttributes=0x20) returned 0 [0164.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 [0164.798] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa429f800, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x55434ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa429f800, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x1490fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 0 [0164.798] FindClose (in: hFindFile=0x3e734b0 | out: hFindFile=0x3e734b0) returned 1 [0164.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0164.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 [0164.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 3172 os_tid = 0x1e58 [0161.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62770 [0161.575] wcscpy (in: _Dest=0x7a62770, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0161.575] wcscat (in: _Dest=0x7a62770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0161.575] wcscat (in: _Dest=0x7a62770, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*" [0161.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0161.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73db0 [0161.911] wcscmp (_String1=".", _String2=".") returned 0 [0161.911] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553507b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x554cd570, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.911] wcscmp (_String1="..", _String2=".") returned 1 [0161.912] wcscmp (_String1="..", _String2="..") returned 0 [0161.912] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf31a00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x55376910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3bf31a00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACADEMIC.ONE", cAlternateFileName="")) returned 1 [0161.912] wcscmp (_String1="ACADEMIC.ONE", _String2=".") returned 1 [0161.912] wcscmp (_String1="ACADEMIC.ONE", _String2="..") returned 1 [0161.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a666c0 [0161.912] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0161.912] wcscat (in: _Dest=0x7a666c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0161.912] wcscat (in: _Dest=0x7a666c0, _Source="ACADEMIC.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" [0164.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one")) returned 0x20 [0164.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE", dwFileAttributes=0x20) returned 0 [0164.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.854] GetLastError () returned 0x5 [0164.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE", dwFileAttributes=0x20) returned 0 [0164.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 [0164.854] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf31a00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x55376910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3bf31a00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x2b428, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLANK.ONE", cAlternateFileName="")) returned 1 [0164.854] wcscmp (_String1="BLANK.ONE", _String2=".") returned 1 [0164.854] wcscmp (_String1="BLANK.ONE", _String2="..") returned 1 [0164.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a666c0 [0164.854] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0164.854] wcscat (in: _Dest=0x7a666c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0164.854] wcscat (in: _Dest=0x7a666c0, _Source="BLANK.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" [0164.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one")) returned 0x20 [0164.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE", dwFileAttributes=0x20) returned 0 [0164.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.856] GetLastError () returned 0x5 [0164.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE", dwFileAttributes=0x20) returned 0 [0164.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 [0164.856] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf31a00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x5539ca70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3bf31a00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x4e630, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUSINESS.ONE", cAlternateFileName="")) returned 1 [0164.856] wcscmp (_String1="BUSINESS.ONE", _String2=".") returned 1 [0164.856] wcscmp (_String1="BUSINESS.ONE", _String2="..") returned 1 [0164.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a666c0 [0164.856] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0164.856] wcscat (in: _Dest=0x7a666c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0164.856] wcscat (in: _Dest=0x7a666c0, _Source="BUSINESS.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" [0164.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one")) returned 0x20 [0164.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE", dwFileAttributes=0x20) returned 0 [0164.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.857] GetLastError () returned 0x5 [0164.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE", dwFileAttributes=0x20) returned 0 [0164.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 [0164.858] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ac1ed00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x5540ee90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3ac1ed00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER.ONE", cAlternateFileName="")) returned 1 [0164.858] wcscmp (_String1="DESIGNER.ONE", _String2=".") returned 1 [0164.858] wcscmp (_String1="DESIGNER.ONE", _String2="..") returned 1 [0164.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a666c0 [0164.858] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0164.858] wcscat (in: _Dest=0x7a666c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0164.858] wcscat (in: _Dest=0x7a666c0, _Source="DESIGNER.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" [0164.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one")) returned 0x20 [0164.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE", dwFileAttributes=0x20) returned 0 [0164.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.859] GetLastError () returned 0x5 [0164.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE", dwFileAttributes=0x20) returned 0 [0164.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 [0164.859] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3990c000, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3990c000, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 1 [0164.859] wcscmp (_String1="PLANNERS.ONE", _String2=".") returned 1 [0164.859] wcscmp (_String1="PLANNERS.ONE", _String2="..") returned 1 [0164.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a666c0 [0164.859] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery" [0164.859] wcscat (in: _Dest=0x7a666c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\" [0164.859] wcscat (in: _Dest=0x7a666c0, _Source="PLANNERS.ONE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE") returned="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" [0164.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one")) returned 0x20 [0164.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE", dwFileAttributes=0x20) returned 0 [0164.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.885] GetLastError () returned 0x5 [0164.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE", dwFileAttributes=0x20) returned 0 [0164.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 [0164.886] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3990c000, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0x554cd570, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3990c000, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 0 [0164.886] FindClose (in: hFindFile=0x3e73db0 | out: hFindFile=0x3e73db0) returned 1 [0164.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0164.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62770) returned 1 [0164.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a655f0) returned 1 Thread: id = 3173 os_tid = 0x1e88 [0161.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf")) returned 0x20 [0161.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.584] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.584] GetLastError () returned 0x5 [0161.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6460) returned 1 Thread: id = 3174 os_tid = 0x1ef0 [0161.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf")) returned 0x20 [0161.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.595] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.595] GetLastError () returned 0x5 [0161.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 Thread: id = 3175 os_tid = 0x1f0c [0161.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf")) returned 0x20 [0161.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.597] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.597] GetLastError () returned 0x5 [0161.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40830) returned 1 Thread: id = 3176 os_tid = 0x1f84 [0161.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid")) returned 0x20 [0161.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID", dwFileAttributes=0x20) returned 0 [0161.599] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.600] GetLastError () returned 0x5 [0161.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID", dwFileAttributes=0x20) returned 0 [0161.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b00) returned 1 Thread: id = 3177 os_tid = 0x1f88 [0161.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex")) returned 0x20 [0162.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex", dwFileAttributes=0x20) returned 0 [0162.532] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.532] GetLastError () returned 0x5 [0162.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex", dwFileAttributes=0x20) returned 0 [0162.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d401f0) returned 1 Thread: id = 3178 os_tid = 0x1f8c [0161.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx")) returned 0x20 [0162.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx", dwFileAttributes=0x20) returned 0 [0162.531] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.531] GetLastError () returned 0x5 [0162.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx", dwFileAttributes=0x20) returned 0 [0162.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66cd8) returned 1 Thread: id = 3179 os_tid = 0x2018 [0161.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env")) returned 0x20 [0162.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env", dwFileAttributes=0x20) returned 0 [0162.529] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.530] GetLastError () returned 0x5 [0162.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env", dwFileAttributes=0x20) returned 0 [0162.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d408f8) returned 1 Thread: id = 3180 os_tid = 0x202c [0161.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca")) returned 0x20 [0162.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca", dwFileAttributes=0x20) returned 0 [0162.853] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.853] GetLastError () returned 0x5 [0162.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca", dwFileAttributes=0x20) returned 0 [0162.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66d98) returned 1 Thread: id = 3181 os_tid = 0x2034 [0161.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp")) returned 0x20 [0162.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp", dwFileAttributes=0x20) returned 0 [0162.852] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.852] GetLastError () returned 0x5 [0162.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp", dwFileAttributes=0x20) returned 0 [0162.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66e58) returned 1 Thread: id = 3182 os_tid = 0x203c [0161.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp")) returned 0x20 [0162.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp", dwFileAttributes=0x20) returned 0 [0162.851] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.851] GetLastError () returned 0x5 [0162.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp", dwFileAttributes=0x20) returned 0 [0162.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66f18) returned 1 Thread: id = 3183 os_tid = 0x2040 [0161.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx")) returned 0x20 [0162.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx", dwFileAttributes=0x20) returned 0 [0162.850] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.851] GetLastError () returned 0x5 [0162.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx", dwFileAttributes=0x20) returned 0 [0162.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333b28) returned 1 Thread: id = 3184 os_tid = 0x2048 [0161.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths")) returned 0x20 [0162.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths", dwFileAttributes=0x20) returned 0 [0162.850] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.850] GetLastError () returned 0x5 [0162.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths", dwFileAttributes=0x20) returned 0 [0162.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 3185 os_tid = 0x204c [0161.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca")) returned 0x20 [0162.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca", dwFileAttributes=0x20) returned 0 [0162.849] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.849] GetLastError () returned 0x5 [0162.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca", dwFileAttributes=0x20) returned 0 [0162.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333d68) returned 1 Thread: id = 3186 os_tid = 0x2054 [0161.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp")) returned 0x20 [0162.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp", dwFileAttributes=0x20) returned 0 [0162.848] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.848] GetLastError () returned 0x5 [0162.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp", dwFileAttributes=0x20) returned 0 [0162.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3338e8) returned 1 Thread: id = 3187 os_tid = 0x2058 [0161.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx")) returned 0x20 [0162.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx", dwFileAttributes=0x20) returned 0 [0162.847] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.847] GetLastError () returned 0x5 [0162.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx", dwFileAttributes=0x20) returned 0 [0162.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 3188 os_tid = 0x2064 [0161.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp")) returned 0x20 [0162.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp", dwFileAttributes=0x20) returned 0 [0162.846] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.846] GetLastError () returned 0x5 [0162.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp", dwFileAttributes=0x20) returned 0 [0162.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 3189 os_tid = 0x2068 [0161.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp")) returned 0x20 [0162.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp", dwFileAttributes=0x20) returned 0 [0162.845] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.846] GetLastError () returned 0x5 [0162.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp", dwFileAttributes=0x20) returned 0 [0162.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 3190 os_tid = 0x20a8 [0161.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex")) returned 0x20 [0162.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex", dwFileAttributes=0x20) returned 0 [0162.845] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.845] GetLastError () returned 0x5 [0162.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex", dwFileAttributes=0x20) returned 0 [0162.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402b8) returned 1 Thread: id = 3191 os_tid = 0x20b4 [0161.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx")) returned 0x20 [0162.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx", dwFileAttributes=0x20) returned 0 [0162.844] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.844] GetLastError () returned 0x5 [0162.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx", dwFileAttributes=0x20) returned 0 [0162.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 3192 os_tid = 0x20b8 [0161.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env")) returned 0x20 [0162.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env", dwFileAttributes=0x20) returned 0 [0162.843] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.843] GetLastError () returned 0x5 [0162.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env", dwFileAttributes=0x20) returned 0 [0162.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40128) returned 1 Thread: id = 3193 os_tid = 0x20bc [0161.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca")) returned 0x20 [0162.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca", dwFileAttributes=0x20) returned 0 [0162.842] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.842] GetLastError () returned 0x5 [0162.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca", dwFileAttributes=0x20) returned 0 [0162.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 3194 os_tid = 0x20c0 [0161.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp")) returned 0x20 [0162.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp", dwFileAttributes=0x20) returned 0 [0162.841] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.841] GetLastError () returned 0x5 [0162.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp", dwFileAttributes=0x20) returned 0 [0162.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3335e8) returned 1 Thread: id = 3195 os_tid = 0x20c8 [0161.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths")) returned 0x20 [0162.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths", dwFileAttributes=0x20) returned 0 [0162.840] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.840] GetLastError () returned 0x5 [0162.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths", dwFileAttributes=0x20) returned 0 [0162.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 3196 os_tid = 0x20cc [0161.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp")) returned 0x20 [0162.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp", dwFileAttributes=0x20) returned 0 [0162.832] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.833] GetLastError () returned 0x5 [0162.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp", dwFileAttributes=0x20) returned 0 [0162.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40510) returned 1 Thread: id = 3197 os_tid = 0x20d0 [0161.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx")) returned 0x20 [0162.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx", dwFileAttributes=0x20) returned 0 [0162.831] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.832] GetLastError () returned 0x5 [0162.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx", dwFileAttributes=0x20) returned 0 [0162.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3332e8) returned 1 Thread: id = 3198 os_tid = 0x182c [0161.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca")) returned 0x20 [0161.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca", dwFileAttributes=0x20) returned 0 [0161.918] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.918] GetLastError () returned 0x5 [0161.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca", dwFileAttributes=0x20) returned 0 [0161.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 3199 os_tid = 0xe14 [0161.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp")) returned 0x20 [0161.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp", dwFileAttributes=0x20) returned 0 [0161.920] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.920] GetLastError () returned 0x5 [0161.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp", dwFileAttributes=0x20) returned 0 [0161.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 3200 os_tid = 0x21fc [0161.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx")) returned 0x20 [0162.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx", dwFileAttributes=0x20) returned 0 [0162.830] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.830] GetLastError () returned 0x5 [0162.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx", dwFileAttributes=0x20) returned 0 [0162.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 3201 os_tid = 0x2200 [0161.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf")) returned 0x20 [0161.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.930] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.930] GetLastError () returned 0x5 [0161.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0161.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaeb08) returned 1 Thread: id = 3202 os_tid = 0x2214 [0161.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf")) returned 0x20 [0161.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.934] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.934] GetLastError () returned 0x5 [0161.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0161.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 Thread: id = 3203 os_tid = 0x2234 [0161.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf")) returned 0x20 [0161.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.939] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.939] GetLastError () returned 0x5 [0161.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0161.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 Thread: id = 3204 os_tid = 0xb8c [0161.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf")) returned 0x20 [0161.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.943] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.943] GetLastError () returned 0x5 [0161.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0161.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6460) returned 1 Thread: id = 3205 os_tid = 0x754 [0161.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf")) returned 0x20 [0161.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.945] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.945] GetLastError () returned 0x5 [0161.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0161.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 3206 os_tid = 0x103c [0161.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf")) returned 0x20 [0161.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.946] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0161.946] GetLastError () returned 0x5 [0161.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0161.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40830) returned 1 Thread: id = 3207 os_tid = 0x1040 [0161.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun")) returned 0x20 [0165.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN", dwFileAttributes=0x20) returned 0 [0165.819] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.819] GetLastError () returned 0x5 [0165.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN", dwFileAttributes=0x20) returned 0 [0165.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63c10) returned 1 Thread: id = 3208 os_tid = 0x13d8 [0161.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun")) returned 0x20 [0163.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN", dwFileAttributes=0x20) returned 0 [0163.288] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.044] GetLastError () returned 0x5 [0165.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN", dwFileAttributes=0x20) returned 0 [0165.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b00) returned 1 Thread: id = 3209 os_tid = 0x1460 [0161.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun")) returned 0x20 [0165.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN", dwFileAttributes=0x20) returned 0 [0165.815] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.815] GetLastError () returned 0x5 [0165.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN", dwFileAttributes=0x20) returned 0 [0165.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62e50) returned 1 Thread: id = 3210 os_tid = 0x147c [0161.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun")) returned 0x20 [0165.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN", dwFileAttributes=0x20) returned 0 [0165.813] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.813] GetLastError () returned 0x5 [0165.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN", dwFileAttributes=0x20) returned 0 [0165.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60c60) returned 1 Thread: id = 3211 os_tid = 0x17a4 [0161.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun")) returned 0x20 [0165.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN", dwFileAttributes=0x20) returned 0 [0165.811] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.812] GetLastError () returned 0x5 [0165.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN", dwFileAttributes=0x20) returned 0 [0165.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6150) returned 1 Thread: id = 3212 os_tid = 0x18a8 [0161.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun")) returned 0x20 [0165.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN", dwFileAttributes=0x20) returned 0 [0165.809] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.810] GetLastError () returned 0x5 [0165.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN", dwFileAttributes=0x20) returned 0 [0165.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60b40) returned 1 Thread: id = 3213 os_tid = 0x18b0 [0161.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun")) returned 0x20 [0165.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN", dwFileAttributes=0x20) returned 0 [0165.846] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.846] GetLastError () returned 0x5 [0165.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN", dwFileAttributes=0x20) returned 0 [0165.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61830) returned 1 Thread: id = 3214 os_tid = 0x18b8 [0161.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun")) returned 0x20 [0165.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN", dwFileAttributes=0x20) returned 0 [0165.848] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.849] GetLastError () returned 0x5 [0165.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN", dwFileAttributes=0x20) returned 0 [0165.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 3215 os_tid = 0x18bc [0161.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun")) returned 0x20 [0165.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN", dwFileAttributes=0x20) returned 0 [0165.805] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.806] GetLastError () returned 0x5 [0165.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN", dwFileAttributes=0x20) returned 0 [0165.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a617a0) returned 1 Thread: id = 3216 os_tid = 0x195c [0161.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun")) returned 0x20 [0165.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN", dwFileAttributes=0x20) returned 0 [0165.850] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.851] GetLastError () returned 0x5 [0165.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN", dwFileAttributes=0x20) returned 0 [0165.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61710) returned 1 Thread: id = 3217 os_tid = 0x19a8 [0161.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun")) returned 0x20 [0165.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN", dwFileAttributes=0x20) returned 0 [0165.852] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.853] GetLastError () returned 0x5 [0165.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN", dwFileAttributes=0x20) returned 0 [0165.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 3218 os_tid = 0x19e8 [0161.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun")) returned 0x20 [0165.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN", dwFileAttributes=0x20) returned 0 [0165.803] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.803] GetLastError () returned 0x5 [0165.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN", dwFileAttributes=0x20) returned 0 [0165.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63ad0) returned 1 Thread: id = 3219 os_tid = 0x19f8 [0161.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun")) returned 0x20 [0165.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN", dwFileAttributes=0x20) returned 0 [0165.801] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.801] GetLastError () returned 0x5 [0165.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN", dwFileAttributes=0x20) returned 0 [0165.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6a38) returned 1 Thread: id = 3220 os_tid = 0x19fc [0161.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun")) returned 0x20 [0165.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN", dwFileAttributes=0x20) returned 0 [0165.799] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.799] GetLastError () returned 0x5 [0165.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN", dwFileAttributes=0x20) returned 0 [0165.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61a70) returned 1 Thread: id = 3221 os_tid = 0x1a00 [0161.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun")) returned 0x20 [0165.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN", dwFileAttributes=0x20) returned 0 [0165.840] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.841] GetLastError () returned 0x5 [0165.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN", dwFileAttributes=0x20) returned 0 [0165.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60990) returned 1 Thread: id = 3222 os_tid = 0x1a04 [0161.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun")) returned 0x20 [0165.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN", dwFileAttributes=0x20) returned 0 [0165.797] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.798] GetLastError () returned 0x5 [0165.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN", dwFileAttributes=0x20) returned 0 [0165.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a607e0) returned 1 Thread: id = 3223 os_tid = 0x1a08 [0161.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun")) returned 0x20 [0165.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN", dwFileAttributes=0x20) returned 0 [0165.662] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.662] GetLastError () returned 0x5 [0165.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN", dwFileAttributes=0x20) returned 0 [0165.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 Thread: id = 3224 os_tid = 0x1a0c [0161.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun")) returned 0x20 [0165.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN", dwFileAttributes=0x20) returned 0 [0165.854] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.855] GetLastError () returned 0x5 [0165.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN", dwFileAttributes=0x20) returned 0 [0165.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a618c0) returned 1 Thread: id = 3225 os_tid = 0x1a10 [0161.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun")) returned 0x20 [0165.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN", dwFileAttributes=0x20) returned 0 [0165.661] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.661] GetLastError () returned 0x5 [0165.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN", dwFileAttributes=0x20) returned 0 [0165.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6740) returned 1 Thread: id = 3226 os_tid = 0x1a14 [0161.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun")) returned 0x20 [0165.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN", dwFileAttributes=0x20) returned 0 [0165.842] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.842] GetLastError () returned 0x5 [0165.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN", dwFileAttributes=0x20) returned 0 [0165.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61c20) returned 1 Thread: id = 3227 os_tid = 0x1a18 [0161.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun")) returned 0x20 [0165.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN", dwFileAttributes=0x20) returned 0 [0165.844] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.844] GetLastError () returned 0x5 [0165.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN", dwFileAttributes=0x20) returned 0 [0165.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61cb0) returned 1 Thread: id = 3228 os_tid = 0x1a1c [0161.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a60900 [0161.977] wcscpy (in: _Dest=0x7a60900, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0161.977] wcscat (in: _Dest=0x7a60900, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\" [0161.977] wcscat (in: _Dest=0x7a60900, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*" [0161.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58e38 [0161.977] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0165.149] wcscmp (_String1=".", _String2=".") returned 0 [0165.150] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.150] wcscmp (_String1="..", _String2=".") returned 1 [0165.150] wcscmp (_String1="..", _String2="..") returned 0 [0165.150] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9598, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.150] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.150] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053330 [0165.150] wcscpy (in: _Dest=0x3053330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0165.150] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\" [0165.150] wcscat (in: _Dest=0x3053330, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" [0166.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0166.027] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0166.027] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0166.027] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0166.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e3d8 [0166.027] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services" [0166.027] wcscat (in: _Dest=0x7a5e3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\" [0166.027] wcscat (in: _Dest=0x7a5e3d8, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" [0166.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0166.028] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0166.029] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0166.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58e38) returned 1 [0166.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60900) returned 1 [0166.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 3229 os_tid = 0x1a20 [0161.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun")) returned 0x20 [0165.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN", dwFileAttributes=0x20) returned 0 [0165.817] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.817] GetLastError () returned 0x5 [0165.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN", dwFileAttributes=0x20) returned 0 [0165.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61d40) returned 1 Thread: id = 3230 os_tid = 0x1a24 [0161.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun")) returned 0x20 [0165.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN", dwFileAttributes=0x20) returned 0 [0165.796] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.796] GetLastError () returned 0x5 [0165.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN", dwFileAttributes=0x20) returned 0 [0165.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61dd0) returned 1 Thread: id = 3231 os_tid = 0x1a28 [0162.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun")) returned 0x20 [0165.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN", dwFileAttributes=0x20) returned 0 [0165.838] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.838] GetLastError () returned 0x5 [0165.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN", dwFileAttributes=0x20) returned 0 [0165.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61e60) returned 1 Thread: id = 3233 os_tid = 0x1a30 [0162.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt")) returned 0x20 [0162.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", dwFileAttributes=0x20) returned 0 [0162.206] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.206] GetLastError () returned 0x5 [0162.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", dwFileAttributes=0x20) returned 0 [0162.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaef58) returned 1 Thread: id = 3234 os_tid = 0x1a34 [0162.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt")) returned 0x20 [0162.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", dwFileAttributes=0x20) returned 0 [0162.211] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.212] GetLastError () returned 0x5 [0162.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", dwFileAttributes=0x20) returned 0 [0162.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 3235 os_tid = 0x1a38 [0162.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt")) returned 0x20 [0163.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", dwFileAttributes=0x20) returned 0 [0163.632] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.632] GetLastError () returned 0x5 [0163.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", dwFileAttributes=0x20) returned 0 [0163.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6460) returned 1 Thread: id = 3236 os_tid = 0x1a3c [0162.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt")) returned 0x20 [0163.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", dwFileAttributes=0x20) returned 0 [0163.628] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.628] GetLastError () returned 0x5 [0163.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", dwFileAttributes=0x20) returned 0 [0163.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 Thread: id = 3237 os_tid = 0x1a44 [0162.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt")) returned 0x20 [0163.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", dwFileAttributes=0x20) returned 0 [0163.799] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.799] GetLastError () returned 0x5 [0163.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", dwFileAttributes=0x20) returned 0 [0163.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 3238 os_tid = 0x1a48 [0162.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt")) returned 0x20 [0163.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", dwFileAttributes=0x20) returned 0 [0163.797] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.797] GetLastError () returned 0x5 [0163.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT", dwFileAttributes=0x20) returned 0 [0163.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff74e8) returned 1 Thread: id = 3239 os_tid = 0x1b70 [0162.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt")) returned 0x20 [0163.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", dwFileAttributes=0x20) returned 0 [0163.795] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.795] GetLastError () returned 0x5 [0163.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT", dwFileAttributes=0x20) returned 0 [0163.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 Thread: id = 3240 os_tid = 0x1c14 [0162.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt")) returned 0x20 [0163.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", dwFileAttributes=0x20) returned 0 [0163.630] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.630] GetLastError () returned 0x5 [0163.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", dwFileAttributes=0x20) returned 0 [0163.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 3241 os_tid = 0x1c4c [0162.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt")) returned 0x20 [0163.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", dwFileAttributes=0x20) returned 0 [0163.828] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.828] GetLastError () returned 0x5 [0163.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", dwFileAttributes=0x20) returned 0 [0163.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 3242 os_tid = 0x1c70 [0162.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt")) returned 0x20 [0163.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", dwFileAttributes=0x20) returned 0 [0163.808] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.808] GetLastError () returned 0x5 [0163.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT", dwFileAttributes=0x20) returned 0 [0163.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 Thread: id = 3243 os_tid = 0x1c74 [0162.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt")) returned 0x20 [0163.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", dwFileAttributes=0x20) returned 0 [0163.806] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.806] GetLastError () returned 0x5 [0163.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT", dwFileAttributes=0x20) returned 0 [0163.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7aa8) returned 1 Thread: id = 3244 os_tid = 0x1c78 [0162.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt")) returned 0x20 [0163.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", dwFileAttributes=0x20) returned 0 [0163.804] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.804] GetLastError () returned 0x5 [0163.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT", dwFileAttributes=0x20) returned 0 [0163.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 3245 os_tid = 0x1cb4 [0162.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt")) returned 0x20 [0163.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", dwFileAttributes=0x20) returned 0 [0163.802] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.802] GetLastError () returned 0x5 [0163.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT", dwFileAttributes=0x20) returned 0 [0163.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7208) returned 1 Thread: id = 3246 os_tid = 0x1cc0 [0162.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt")) returned 0x20 [0163.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", dwFileAttributes=0x20) returned 0 [0163.801] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.801] GetLastError () returned 0x5 [0163.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT", dwFileAttributes=0x20) returned 0 [0163.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 Thread: id = 3247 os_tid = 0x1cc8 [0162.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\blacklist")) returned 0x20 [0162.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist", dwFileAttributes=0x20) returned 0 [0162.543] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\blacklist"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.544] GetLastError () returned 0x5 [0162.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\blacklist", dwFileAttributes=0x20) returned 0 [0162.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 Thread: id = 3248 os_tid = 0x1cf0 [0162.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\cacerts")) returned 0x20 [0162.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts", dwFileAttributes=0x20) returned 0 [0162.545] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\cacerts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.545] GetLastError () returned 0x5 [0162.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\cacerts", dwFileAttributes=0x20) returned 0 [0162.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f150) returned 1 Thread: id = 3249 os_tid = 0x1cf4 [0162.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.policy")) returned 0x20 [0162.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy", dwFileAttributes=0x20) returned 0 [0162.546] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.policy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.546] GetLastError () returned 0x5 [0162.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.policy", dwFileAttributes=0x20) returned 0 [0162.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 Thread: id = 3250 os_tid = 0x1cf8 [0162.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.security")) returned 0x20 [0162.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security", dwFileAttributes=0x20) returned 0 [0162.547] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\java.security"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.547] GetLastError () returned 0x5 [0162.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\java.security", dwFileAttributes=0x20) returned 0 [0162.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 Thread: id = 3251 os_tid = 0x1cfc [0162.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javafx.policy")) returned 0x20 [0162.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy", dwFileAttributes=0x20) returned 0 [0162.379] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javafx.policy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.379] GetLastError () returned 0x5 [0162.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javafx.policy", dwFileAttributes=0x20) returned 0 [0162.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 Thread: id = 3252 os_tid = 0x1d04 [0162.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javaws.policy")) returned 0x20 [0162.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy", dwFileAttributes=0x20) returned 0 [0162.381] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.381] GetLastError () returned 0x5 [0162.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\javaws.policy", dwFileAttributes=0x20) returned 0 [0162.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 Thread: id = 3253 os_tid = 0x1d08 [0162.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\local_policy.jar")) returned 0x20 [0162.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar", dwFileAttributes=0x20) returned 0 [0162.282] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.282] GetLastError () returned 0x5 [0162.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\local_policy.jar", dwFileAttributes=0x20) returned 0 [0162.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a298) returned 1 Thread: id = 3254 os_tid = 0x1d0c [0162.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\trusted.libraries")) returned 0x20 [0162.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries", dwFileAttributes=0x20) returned 0 [0162.283] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.283] GetLastError () returned 0x5 [0162.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\trusted.libraries", dwFileAttributes=0x20) returned 0 [0162.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a318) returned 1 Thread: id = 3255 os_tid = 0x1d10 [0162.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\us_export_policy.jar")) returned 0x20 [0162.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x20) returned 0 [0162.542] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre7\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.542] GetLastError () returned 0x5 [0162.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x20) returned 0 [0162.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 3256 os_tid = 0x1d18 [0162.234] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma")) returned 0x20 [0162.236] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0162.236] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.236] GetLastError () returned 0x5 [0162.236] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", dwFileAttributes=0x20) returned 0 [0162.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 3257 os_tid = 0x1d1c [0162.237] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma")) returned 0x20 [0162.237] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0162.238] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.238] GetLastError () returned 0x5 [0162.238] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", dwFileAttributes=0x20) returned 0 [0162.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 3258 os_tid = 0x1d20 [0162.239] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma")) returned 0x20 [0162.239] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0162.239] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.239] GetLastError () returned 0x5 [0162.239] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", dwFileAttributes=0x20) returned 0 [0162.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 3259 os_tid = 0x1d24 [0162.240] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma")) returned 0x20 [0162.240] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0162.240] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.240] GetLastError () returned 0x5 [0162.240] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", dwFileAttributes=0x20) returned 0 [0162.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 3260 os_tid = 0x1d28 [0162.241] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma")) returned 0x20 [0162.241] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0162.242] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.242] GetLastError () returned 0x5 [0162.242] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", dwFileAttributes=0x20) returned 0 [0162.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 3261 os_tid = 0x1d2c [0162.242] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma")) returned 0x20 [0162.243] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0162.243] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.243] GetLastError () returned 0x5 [0162.243] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", dwFileAttributes=0x20) returned 0 [0162.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 3262 os_tid = 0x1d30 [0162.243] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma")) returned 0x20 [0162.244] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0162.244] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.244] GetLastError () returned 0x5 [0162.244] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", dwFileAttributes=0x20) returned 0 [0162.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d060) returned 1 Thread: id = 3263 os_tid = 0x1d34 [0162.245] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma")) returned 0x20 [0162.245] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0162.245] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.245] GetLastError () returned 0x5 [0162.245] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", dwFileAttributes=0x20) returned 0 [0162.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 3264 os_tid = 0x1d3c [0162.246] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma")) returned 0x20 [0162.246] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0162.246] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.246] GetLastError () returned 0x5 [0162.246] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", dwFileAttributes=0x20) returned 0 [0162.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 3265 os_tid = 0x1d68 [0162.252] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma")) returned 0x20 [0162.253] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0162.253] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.253] GetLastError () returned 0x5 [0162.253] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", dwFileAttributes=0x20) returned 0 [0162.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 3266 os_tid = 0x1d8c [0162.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333468 [0162.254] wcscpy (in: _Dest=0x333468, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0162.254] wcscat (in: _Dest=0x333468, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0162.254] wcscat (in: _Dest=0x333468, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*" [0162.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0162.254] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78b0 [0162.256] wcscmp (_String1=".", _String2=".") returned 0 [0162.256] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.256] wcscmp (_String1="..", _String2=".") returned 1 [0162.256] wcscmp (_String1="..", _String2="..") returned 0 [0162.256] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa825f5e7, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa825f5e7, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7b99dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0162.256] wcscmp (_String1="background.png", _String2=".") returned 1 [0162.256] wcscmp (_String1="background.png", _String2="..") returned 1 [0162.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e68498 [0162.256] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0162.256] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0162.256] wcscat (in: _Dest=0x3e68498, _Source="background.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" [0164.255] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20 [0164.256] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0164.256] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.256] GetLastError () returned 0x5 [0164.256] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0 [0164.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0164.256] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dad96bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x1dad96bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x1dad96bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0164.256] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0164.257] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0164.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68498 [0164.257] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0164.257] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0164.257] wcscat (in: _Dest=0x3e68498, _Source="behavior.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" [0164.257] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0x20 [0164.257] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0164.257] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.258] GetLastError () returned 0x5 [0164.258] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0164.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0164.258] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8285746, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa8285746, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d7dfb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0164.258] wcscmp (_String1="device.png", _String2=".") returned 1 [0164.258] wcscmp (_String1="device.png", _String2="..") returned 1 [0164.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85d80 [0164.258] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0164.258] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0164.258] wcscat (in: _Dest=0x3d85d80, _Source="device.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" [0164.258] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20 [0164.259] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0164.259] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.259] GetLastError () returned 0x5 [0164.259] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0 [0164.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 [0164.259] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82ab8a5, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82ab8a5, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0164.259] wcscmp (_String1="overlay.png", _String2=".") returned 1 [0164.259] wcscmp (_String1="overlay.png", _String2="..") returned 1 [0164.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d85d80 [0164.260] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0164.260] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0164.260] wcscat (in: _Dest=0x3d85d80, _Source="overlay.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" [0164.260] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20 [0164.260] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0164.260] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.260] GetLastError () returned 0x5 [0164.261] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0 [0164.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 [0164.261] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0164.261] wcscmp (_String1="superbar.png", _String2=".") returned 1 [0164.261] wcscmp (_String1="superbar.png", _String2="..") returned 1 [0164.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68498 [0164.261] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" [0164.261] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\" [0164.261] wcscat (in: _Dest=0x3e68498, _Source="superbar.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" [0164.261] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20 [0164.262] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0164.262] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.262] GetLastError () returned 0x5 [0164.262] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0 [0164.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0164.262] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa82d1a04, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa82d1a04, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d8c437c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0164.262] FindClose (in: hFindFile=0x7ad78b0 | out: hFindFile=0x7ad78b0) returned 1 [0164.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0164.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 [0164.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf010) returned 1 Thread: id = 3267 os_tid = 0x1d90 [0162.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0162.257] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0162.257] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0162.257] wcscat (in: _Dest=0x3333a8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*" [0162.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0162.257] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7a70 [0162.257] wcscmp (_String1=".", _String2=".") returned 0 [0162.257] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9e978d9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9e978d9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9e978d9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.257] wcscmp (_String1="..", _String2=".") returned 1 [0162.257] wcscmp (_String1="..", _String2="..") returned 0 [0162.257] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a06b8bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2a06b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0162.257] wcscmp (_String1="background.png", _String2=".") returned 1 [0162.257] wcscmp (_String1="background.png", _String2="..") returned 1 [0162.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e68648 [0162.258] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0162.258] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0162.258] wcscat (in: _Dest=0x3e68648, _Source="background.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" [0164.292] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20 [0164.292] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0164.292] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.292] GetLastError () returned 0x5 [0164.293] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0 [0164.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 [0164.293] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64cf1c24, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64cf1c24, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a06b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0164.293] wcscmp (_String1="behavior.xml", _String2=".") returned 1 [0164.293] wcscmp (_String1="behavior.xml", _String2="..") returned 1 [0164.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68648 [0164.293] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0164.293] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0164.293] wcscat (in: _Dest=0x3e68648, _Source="behavior.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" [0164.294] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0x20 [0164.294] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0164.294] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.294] GetLastError () returned 0x5 [0164.294] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0 [0164.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 [0164.295] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0164.295] wcscmp (_String1="watermark.png", _String2=".") returned 1 [0164.295] wcscmp (_String1="watermark.png", _String2="..") returned 1 [0164.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68648 [0164.295] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" [0164.295] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\" [0164.295] wcscat (in: _Dest=0x3e68648, _Source="watermark.png" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png") returned="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" [0164.295] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20 [0164.295] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0164.295] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0164.296] GetLastError () returned 0x5 [0164.296] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0 [0164.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 [0164.296] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64d3dee4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x64d3dee4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x2a2ccebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0164.296] FindClose (in: hFindFile=0x7ad7a70 | out: hFindFile=0x7ad7a70) returned 1 [0164.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0164.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 [0164.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 Thread: id = 3268 os_tid = 0x1df4 [0162.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\amsterdam")) returned 0x20 [0162.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam", dwFileAttributes=0x20) returned 0 [0162.258] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\amsterdam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.258] GetLastError () returned 0x5 [0162.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam", dwFileAttributes=0x20) returned 0 [0162.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a231b0) returned 1 Thread: id = 3269 os_tid = 0x1df8 [0162.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\andorra")) returned 0x20 [0162.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra", dwFileAttributes=0x20) returned 0 [0162.260] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\andorra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.260] GetLastError () returned 0x5 [0162.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Andorra", dwFileAttributes=0x20) returned 0 [0162.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26158) returned 1 Thread: id = 3270 os_tid = 0x1e78 [0162.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\athens")) returned 0x20 [0162.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens", dwFileAttributes=0x20) returned 0 [0162.261] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\athens"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.261] GetLastError () returned 0x5 [0162.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Athens", dwFileAttributes=0x20) returned 0 [0162.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20400) returned 1 Thread: id = 3271 os_tid = 0x1e7c [0162.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\belgrade")) returned 0x20 [0162.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade", dwFileAttributes=0x20) returned 0 [0162.262] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\belgrade"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.262] GetLastError () returned 0x5 [0162.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Belgrade", dwFileAttributes=0x20) returned 0 [0162.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e08) returned 1 Thread: id = 3272 os_tid = 0x1e80 [0162.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\berlin")) returned 0x20 [0162.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin", dwFileAttributes=0x20) returned 0 [0162.263] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\berlin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.264] GetLastError () returned 0x5 [0162.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Berlin", dwFileAttributes=0x20) returned 0 [0162.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ea68) returned 1 Thread: id = 3273 os_tid = 0x1e84 [0162.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\brussels")) returned 0x20 [0162.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels", dwFileAttributes=0x20) returned 0 [0162.265] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\brussels"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.265] GetLastError () returned 0x5 [0162.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Brussels", dwFileAttributes=0x20) returned 0 [0162.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a268c8) returned 1 Thread: id = 3274 os_tid = 0x1e8c [0162.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\bucharest")) returned 0x20 [0162.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest", dwFileAttributes=0x20) returned 0 [0162.266] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\bucharest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.266] GetLastError () returned 0x5 [0162.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Bucharest", dwFileAttributes=0x20) returned 0 [0162.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a263f8) returned 1 Thread: id = 3275 os_tid = 0x1e90 [0162.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\budapest")) returned 0x20 [0162.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest", dwFileAttributes=0x20) returned 0 [0162.274] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\budapest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.274] GetLastError () returned 0x5 [0162.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Budapest", dwFileAttributes=0x20) returned 0 [0162.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a260e8) returned 1 Thread: id = 3276 os_tid = 0x1f08 [0162.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\chisinau")) returned 0x20 [0162.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau", dwFileAttributes=0x20) returned 0 [0162.281] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\chisinau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.281] GetLastError () returned 0x5 [0162.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Chisinau", dwFileAttributes=0x20) returned 0 [0162.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26cb8) returned 1 Thread: id = 3277 os_tid = 0x1f10 [0162.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\copenhagen")) returned 0x20 [0162.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen", dwFileAttributes=0x20) returned 0 [0162.284] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\copenhagen"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.284] GetLastError () returned 0x5 [0162.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen", dwFileAttributes=0x20) returned 0 [0162.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26af8) returned 1 Thread: id = 3278 os_tid = 0x1f14 [0162.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\dublin")) returned 0x20 [0162.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin", dwFileAttributes=0x20) returned 0 [0162.288] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\dublin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.288] GetLastError () returned 0x5 [0162.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Dublin", dwFileAttributes=0x20) returned 0 [0162.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d958) returned 1 Thread: id = 3279 os_tid = 0x1f2c [0162.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\gibraltar")) returned 0x20 [0162.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar", dwFileAttributes=0x20) returned 0 [0162.289] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\gibraltar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.289] GetLastError () returned 0x5 [0162.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar", dwFileAttributes=0x20) returned 0 [0162.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26468) returned 1 Thread: id = 3280 os_tid = 0x1fac [0162.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\helsinki")) returned 0x20 [0162.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki", dwFileAttributes=0x20) returned 0 [0162.292] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\helsinki"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.292] GetLastError () returned 0x5 [0162.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Helsinki", dwFileAttributes=0x20) returned 0 [0162.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26238) returned 1 Thread: id = 3281 os_tid = 0x2044 [0162.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\istanbul")) returned 0x20 [0162.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul", dwFileAttributes=0x20) returned 0 [0162.293] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\istanbul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.293] GetLastError () returned 0x5 [0162.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Istanbul", dwFileAttributes=0x20) returned 0 [0162.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26078) returned 1 Thread: id = 3282 os_tid = 0x20c4 [0162.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\kaliningrad")) returned 0x20 [0162.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad", dwFileAttributes=0x20) returned 0 [0162.296] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\kaliningrad"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.296] GetLastError () returned 0x5 [0162.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad", dwFileAttributes=0x20) returned 0 [0162.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 Thread: id = 3283 os_tid = 0x2134 [0162.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\kiev")) returned 0x20 [0162.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev", dwFileAttributes=0x20) returned 0 [0162.297] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\kiev"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.297] GetLastError () returned 0x5 [0162.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Kiev", dwFileAttributes=0x20) returned 0 [0162.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d8f0) returned 1 Thread: id = 3284 os_tid = 0x2164 [0162.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\lisbon")) returned 0x20 [0162.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon", dwFileAttributes=0x20) returned 0 [0162.298] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\lisbon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.298] GetLastError () returned 0x5 [0162.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Lisbon", dwFileAttributes=0x20) returned 0 [0162.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e7f8) returned 1 Thread: id = 3285 os_tid = 0x2168 [0162.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\london")) returned 0x20 [0162.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London", dwFileAttributes=0x20) returned 0 [0162.311] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\london"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.311] GetLastError () returned 0x5 [0162.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\London", dwFileAttributes=0x20) returned 0 [0162.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 Thread: id = 3286 os_tid = 0x216c [0162.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\luxembourg")) returned 0x20 [0162.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg", dwFileAttributes=0x20) returned 0 [0162.314] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\luxembourg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.314] GetLastError () returned 0x5 [0162.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg", dwFileAttributes=0x20) returned 0 [0162.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26ee8) returned 1 Thread: id = 3287 os_tid = 0x2170 [0162.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\madrid")) returned 0x20 [0162.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid", dwFileAttributes=0x20) returned 0 [0162.316] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\madrid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.317] GetLastError () returned 0x5 [0162.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Madrid", dwFileAttributes=0x20) returned 0 [0162.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1da28) returned 1 Thread: id = 3288 os_tid = 0x2174 [0162.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\malta")) returned 0x20 [0162.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta", dwFileAttributes=0x20) returned 0 [0162.318] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\malta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.319] GetLastError () returned 0x5 [0162.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Malta", dwFileAttributes=0x20) returned 0 [0162.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 Thread: id = 3289 os_tid = 0x2178 [0162.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\minsk")) returned 0x20 [0162.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk", dwFileAttributes=0x20) returned 0 [0162.324] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\minsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.324] GetLastError () returned 0x5 [0162.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Minsk", dwFileAttributes=0x20) returned 0 [0162.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47720) returned 1 Thread: id = 3290 os_tid = 0x2180 [0162.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\monaco")) returned 0x20 [0162.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco", dwFileAttributes=0x20) returned 0 [0162.329] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\monaco"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.329] GetLastError () returned 0x5 [0162.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Monaco", dwFileAttributes=0x20) returned 0 [0162.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d46a88) returned 1 Thread: id = 3291 os_tid = 0x2184 [0162.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs")) returned 0x20 [0162.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS", dwFileAttributes=0x20) returned 0 [0162.334] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.335] GetLastError () returned 0x5 [0162.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS", dwFileAttributes=0x20) returned 0 [0162.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 3292 os_tid = 0x2188 [0162.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs")) returned 0x20 [0162.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS", dwFileAttributes=0x20) returned 0 [0162.336] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.337] GetLastError () returned 0x5 [0162.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS", dwFileAttributes=0x20) returned 0 [0162.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60630) returned 1 Thread: id = 3293 os_tid = 0x218c [0162.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs")) returned 0x20 [0162.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS", dwFileAttributes=0x20) returned 0 [0162.350] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.351] GetLastError () returned 0x5 [0162.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS", dwFileAttributes=0x20) returned 0 [0162.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62630) returned 1 Thread: id = 3294 os_tid = 0x21a4 [0162.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs")) returned 0x20 [0162.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS", dwFileAttributes=0x20) returned 0 [0162.352] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.353] GetLastError () returned 0x5 [0162.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS", dwFileAttributes=0x20) returned 0 [0162.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60e10) returned 1 Thread: id = 3295 os_tid = 0x21a8 [0162.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs")) returned 0x20 [0162.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS", dwFileAttributes=0x20) returned 0 [0162.354] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.355] GetLastError () returned 0x5 [0162.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS", dwFileAttributes=0x20) returned 0 [0162.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 3296 os_tid = 0x22c [0162.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs")) returned 0x20 [0162.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS", dwFileAttributes=0x20) returned 0 [0162.356] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.356] GetLastError () returned 0x5 [0162.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS", dwFileAttributes=0x20) returned 0 [0162.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a606c0) returned 1 Thread: id = 3297 os_tid = 0x2204 [0162.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs")) returned 0x20 [0165.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS", dwFileAttributes=0x20) returned 0 [0165.705] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.705] GetLastError () returned 0x5 [0165.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS", dwFileAttributes=0x20) returned 0 [0165.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60240) returned 1 Thread: id = 3298 os_tid = 0x2208 [0162.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs")) returned 0x20 [0165.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS", dwFileAttributes=0x20) returned 0 [0165.140] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.140] GetLastError () returned 0x5 [0165.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS", dwFileAttributes=0x20) returned 0 [0165.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 3299 os_tid = 0x220c [0162.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs")) returned 0x20 [0163.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS", dwFileAttributes=0x20) returned 0 [0163.290] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.045] GetLastError () returned 0x5 [0165.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS", dwFileAttributes=0x20) returned 0 [0165.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 Thread: id = 3300 os_tid = 0x2210 [0162.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs")) returned 0x20 [0165.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS", dwFileAttributes=0x20) returned 0 [0165.706] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.707] GetLastError () returned 0x5 [0165.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS", dwFileAttributes=0x20) returned 0 [0165.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a605a0) returned 1 Thread: id = 3301 os_tid = 0x2218 [0162.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs")) returned 0x20 [0165.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS", dwFileAttributes=0x20) returned 0 [0165.701] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.701] GetLastError () returned 0x5 [0165.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS", dwFileAttributes=0x20) returned 0 [0165.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 3302 os_tid = 0x221c [0162.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs")) returned 0x20 [0165.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS", dwFileAttributes=0x20) returned 0 [0165.699] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.699] GetLastError () returned 0x5 [0165.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS", dwFileAttributes=0x20) returned 0 [0165.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f90) returned 1 Thread: id = 3303 os_tid = 0x222c [0162.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs")) returned 0x20 [0165.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS", dwFileAttributes=0x20) returned 0 [0165.697] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.697] GetLastError () returned 0x5 [0165.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS", dwFileAttributes=0x20) returned 0 [0165.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5bf0) returned 1 Thread: id = 3304 os_tid = 0x2230 [0162.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs")) returned 0x20 [0165.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS", dwFileAttributes=0x20) returned 0 [0165.695] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.695] GetLastError () returned 0x5 [0165.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS", dwFileAttributes=0x20) returned 0 [0165.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60480) returned 1 Thread: id = 3305 os_tid = 0x2238 [0162.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs")) returned 0x20 [0165.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS", dwFileAttributes=0x20) returned 0 [0165.708] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.708] GetLastError () returned 0x5 [0165.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS", dwFileAttributes=0x20) returned 0 [0165.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61950) returned 1 Thread: id = 3306 os_tid = 0x223c [0162.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs")) returned 0x20 [0165.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS", dwFileAttributes=0x20) returned 0 [0165.693] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.694] GetLastError () returned 0x5 [0165.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS", dwFileAttributes=0x20) returned 0 [0165.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60870) returned 1 Thread: id = 3307 os_tid = 0x2240 [0162.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs")) returned 0x20 [0165.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS", dwFileAttributes=0x20) returned 0 [0165.691] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.692] GetLastError () returned 0x5 [0165.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS", dwFileAttributes=0x20) returned 0 [0165.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb71e8) returned 1 Thread: id = 3308 os_tid = 0x2244 [0162.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs")) returned 0x20 [0165.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS", dwFileAttributes=0x20) returned 0 [0165.666] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.666] GetLastError () returned 0x5 [0165.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS", dwFileAttributes=0x20) returned 0 [0165.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60360) returned 1 Thread: id = 3309 os_tid = 0x2248 [0162.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs")) returned 0x20 [0165.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS", dwFileAttributes=0x20) returned 0 [0165.664] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.664] GetLastError () returned 0x5 [0165.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS", dwFileAttributes=0x20) returned 0 [0165.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5ee8) returned 1 Thread: id = 3310 os_tid = 0x224c [0162.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs")) returned 0x20 [0165.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS", dwFileAttributes=0x20) returned 0 [0165.702] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.703] GetLastError () returned 0x5 [0165.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS", dwFileAttributes=0x20) returned 0 [0165.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a615f0) returned 1 Thread: id = 3311 os_tid = 0x2250 [0162.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs")) returned 0x20 [0165.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS", dwFileAttributes=0x20) returned 0 [0165.715] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.715] GetLastError () returned 0x5 [0165.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS", dwFileAttributes=0x20) returned 0 [0165.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a602d0) returned 1 Thread: id = 3312 os_tid = 0x2254 [0162.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a606c0 [0162.376] wcscpy (in: _Dest=0x7a606c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0162.376] wcscat (in: _Dest=0x7a606c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\" [0162.376] wcscat (in: _Dest=0x7a606c0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*" [0162.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1a78 [0162.377] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0165.716] wcscmp (_String1=".", _String2=".") returned 0 [0165.716] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd700a00, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd772e20, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.716] wcscmp (_String1="..", _String2=".") returned 1 [0165.716] wcscmp (_String1="..", _String2="..") returned 0 [0165.716] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd772e20, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x899d, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0165.717] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0165.717] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0165.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f638 [0165.717] wcscpy (in: _Dest=0x7a5f638, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0165.717] wcscat (in: _Dest=0x7a5f638, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\" [0165.717] wcscat (in: _Dest=0x7a5f638, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" [0167.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0167.796] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0167.796] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0167.796] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0167.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e480 [0167.796] wcscpy (in: _Dest=0x7a5e480, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services" [0167.796] wcscat (in: _Dest=0x7a5e480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\" [0167.797] wcscat (in: _Dest=0x7a5e480, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" [0167.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0167.798] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0167.798] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0167.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a78) returned 1 [0167.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a606c0) returned 1 [0167.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 3313 os_tid = 0x2258 [0162.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs")) returned 0x20 [0165.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS", dwFileAttributes=0x20) returned 0 [0165.717] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.718] GetLastError () returned 0x5 [0165.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS", dwFileAttributes=0x20) returned 0 [0165.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 Thread: id = 3314 os_tid = 0x225c [0162.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs")) returned 0x20 [0165.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS", dwFileAttributes=0x20) returned 0 [0165.690] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.690] GetLastError () returned 0x5 [0165.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS", dwFileAttributes=0x20) returned 0 [0165.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60510) returned 1 Thread: id = 3315 os_tid = 0x2260 [0162.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs")) returned 0x20 [0165.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS", dwFileAttributes=0x20) returned 0 [0165.719] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.719] GetLastError () returned 0x5 [0165.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS", dwFileAttributes=0x20) returned 0 [0165.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60f30) returned 1 Thread: id = 3316 os_tid = 0x2264 [0162.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\moscow")) returned 0x20 [0162.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow", dwFileAttributes=0x20) returned 0 [0162.383] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\moscow"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.383] GetLastError () returned 0x5 [0162.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Moscow", dwFileAttributes=0x20) returned 0 [0162.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d472a8) returned 1 Thread: id = 3317 os_tid = 0x2268 [0162.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\oslo")) returned 0x20 [0162.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo", dwFileAttributes=0x20) returned 0 [0162.391] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\oslo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.391] GetLastError () returned 0x5 [0162.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Oslo", dwFileAttributes=0x20) returned 0 [0162.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47c68) returned 1 Thread: id = 3318 os_tid = 0x226c [0162.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\paris")) returned 0x20 [0162.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris", dwFileAttributes=0x20) returned 0 [0162.393] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\paris"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.393] GetLastError () returned 0x5 [0162.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Paris", dwFileAttributes=0x20) returned 0 [0162.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47378) returned 1 Thread: id = 3319 os_tid = 0x2270 [0162.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\prague")) returned 0x20 [0162.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague", dwFileAttributes=0x20) returned 0 [0162.395] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\prague"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.395] GetLastError () returned 0x5 [0162.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Prague", dwFileAttributes=0x20) returned 0 [0162.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47240) returned 1 Thread: id = 3320 os_tid = 0x2274 [0162.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\riga")) returned 0x20 [0162.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga", dwFileAttributes=0x20) returned 0 [0162.408] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\riga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.408] GetLastError () returned 0x5 [0162.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Riga", dwFileAttributes=0x20) returned 0 [0162.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d471d8) returned 1 Thread: id = 3321 os_tid = 0x2278 [0162.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\rome")) returned 0x20 [0162.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome", dwFileAttributes=0x20) returned 0 [0162.410] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\rome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.410] GetLastError () returned 0x5 [0162.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Rome", dwFileAttributes=0x20) returned 0 [0162.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47310) returned 1 Thread: id = 3322 os_tid = 0x2280 Thread: id = 3323 os_tid = 0x227c [0162.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\samara")) returned 0x20 [0162.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara", dwFileAttributes=0x20) returned 0 [0162.970] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\samara"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.970] GetLastError () returned 0x5 [0162.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Samara", dwFileAttributes=0x20) returned 0 [0162.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47858) returned 1 Thread: id = 3324 os_tid = 0x2284 [0162.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\simferopol")) returned 0x20 [0162.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol", dwFileAttributes=0x20) returned 0 [0162.972] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\simferopol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.972] GetLastError () returned 0x5 [0162.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Simferopol", dwFileAttributes=0x20) returned 0 [0162.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 Thread: id = 3325 os_tid = 0x2288 [0162.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\sofia")) returned 0x20 [0162.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia", dwFileAttributes=0x20) returned 0 [0162.980] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\sofia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.980] GetLastError () returned 0x5 [0162.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Sofia", dwFileAttributes=0x20) returned 0 [0162.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f150) returned 1 Thread: id = 3326 os_tid = 0x228c [0162.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\stockholm")) returned 0x20 [0162.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm", dwFileAttributes=0x20) returned 0 [0162.986] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\stockholm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.987] GetLastError () returned 0x5 [0162.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Stockholm", dwFileAttributes=0x20) returned 0 [0162.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26778) returned 1 Thread: id = 3327 os_tid = 0x2290 [0162.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\tallinn")) returned 0x20 [0162.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn", dwFileAttributes=0x20) returned 0 [0162.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\tallinn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0162.994] GetLastError () returned 0x5 [0162.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tallinn", dwFileAttributes=0x20) returned 0 [0162.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26938) returned 1 Thread: id = 3328 os_tid = 0x2294 [0163.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\tirane")) returned 0x20 [0163.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane", dwFileAttributes=0x20) returned 0 [0163.000] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\tirane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.001] GetLastError () returned 0x5 [0163.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Tirane", dwFileAttributes=0x20) returned 0 [0163.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 Thread: id = 3329 os_tid = 0x2298 [0163.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\uzhgorod")) returned 0x20 [0163.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod", dwFileAttributes=0x20) returned 0 [0163.002] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\uzhgorod"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.002] GetLastError () returned 0x5 [0163.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod", dwFileAttributes=0x20) returned 0 [0163.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26698) returned 1 Thread: id = 3330 os_tid = 0x229c [0163.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vaduz")) returned 0x20 [0163.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz", dwFileAttributes=0x20) returned 0 [0163.028] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vaduz"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.028] GetLastError () returned 0x5 [0163.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vaduz", dwFileAttributes=0x20) returned 0 [0163.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1da28) returned 1 Thread: id = 3331 os_tid = 0x22a0 [0163.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vienna")) returned 0x20 [0163.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna", dwFileAttributes=0x20) returned 0 [0163.029] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vienna"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.029] GetLastError () returned 0x5 [0163.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vienna", dwFileAttributes=0x20) returned 0 [0163.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 Thread: id = 3332 os_tid = 0x22b0 [0163.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vilnius")) returned 0x20 [0163.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius", dwFileAttributes=0x20) returned 0 [0163.038] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\vilnius"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.038] GetLastError () returned 0x5 [0163.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Vilnius", dwFileAttributes=0x20) returned 0 [0163.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26008) returned 1 Thread: id = 3333 os_tid = 0x22d0 [0163.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\volgograd")) returned 0x20 [0163.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd", dwFileAttributes=0x20) returned 0 [0163.039] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\volgograd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.039] GetLastError () returned 0x5 [0163.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Volgograd", dwFileAttributes=0x20) returned 0 [0163.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26f58) returned 1 Thread: id = 3334 os_tid = 0x22d4 [0163.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\warsaw")) returned 0x20 [0163.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw", dwFileAttributes=0x20) returned 0 [0163.040] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\warsaw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.040] GetLastError () returned 0x5 [0163.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Warsaw", dwFileAttributes=0x20) returned 0 [0163.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e7f8) returned 1 Thread: id = 3335 os_tid = 0x22dc [0163.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\zaporozhye")) returned 0x20 [0163.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye", dwFileAttributes=0x20) returned 0 [0163.022] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\zaporozhye"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.022] GetLastError () returned 0x5 [0163.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye", dwFileAttributes=0x20) returned 0 [0163.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26c48) returned 1 Thread: id = 3336 os_tid = 0x22e4 [0163.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\zurich")) returned 0x20 [0163.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich", dwFileAttributes=0x20) returned 0 [0163.023] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\europe\\zurich"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.023] GetLastError () returned 0x5 [0163.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Europe\\Zurich", dwFileAttributes=0x20) returned 0 [0163.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d8f0) returned 1 Thread: id = 3337 os_tid = 0x22e8 [0163.010] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll")) returned 0x2020 [0163.010] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0163.010] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.011] GetLastError () returned 0x5 [0163.011] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0163.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 3338 os_tid = 0x22ec [0163.012] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll")) returned 0x2020 [0163.012] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0163.012] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.012] GetLastError () returned 0x5 [0163.012] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0163.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 3339 os_tid = 0x22f8 [0163.013] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll")) returned 0x2020 [0163.013] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0163.014] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.014] GetLastError () returned 0x5 [0163.014] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0163.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb64d8) returned 1 Thread: id = 3340 os_tid = 0x22fc [0163.015] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll")) returned 0x2020 [0163.015] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0163.015] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.015] GetLastError () returned 0x5 [0163.016] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0163.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a601b0) returned 1 Thread: id = 3341 os_tid = 0x2300 [0163.016] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll")) returned 0x2020 [0165.792] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.792] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.792] GetLastError () returned 0x5 [0165.792] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5990) returned 1 Thread: id = 3342 os_tid = 0x2304 [0163.018] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll")) returned 0x2020 [0165.738] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.738] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.738] GetLastError () returned 0x5 [0165.738] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61050) returned 1 Thread: id = 3343 os_tid = 0x2308 [0163.019] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll")) returned 0x2020 [0165.737] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.737] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.737] GetLastError () returned 0x5 [0165.737] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5e50) returned 1 Thread: id = 3344 os_tid = 0x230c [0163.019] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll")) returned 0x2020 [0165.735] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.735] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.736] GetLastError () returned 0x5 [0165.736] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60e10) returned 1 Thread: id = 3345 os_tid = 0x2318 [0163.020] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll")) returned 0x2020 [0165.734] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.734] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.734] GetLastError () returned 0x5 [0165.734] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60630) returned 1 Thread: id = 3346 os_tid = 0x231c [0163.020] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll")) returned 0x2020 [0165.733] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.733] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.733] GetLastError () returned 0x5 [0165.733] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60090) returned 1 Thread: id = 3347 os_tid = 0x2320 [0163.021] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll")) returned 0x2020 [0165.732] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.732] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.732] GetLastError () returned 0x5 [0165.732] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb70b8) returned 1 Thread: id = 3348 os_tid = 0x2324 [0163.021] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll")) returned 0x2020 [0165.730] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.730] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.730] GetLastError () returned 0x5 [0165.731] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 Thread: id = 3349 os_tid = 0x2328 [0163.024] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll")) returned 0x2020 [0165.743] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.743] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.743] GetLastError () returned 0x5 [0165.743] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a610e0) returned 1 Thread: id = 3350 os_tid = 0x232c [0163.024] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll")) returned 0x2020 [0165.729] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.729] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.729] GetLastError () returned 0x5 [0165.729] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60ea0) returned 1 Thread: id = 3351 os_tid = 0x23a8 [0163.024] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll")) returned 0x2020 [0165.741] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.741] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.741] GetLastError () returned 0x5 [0165.741] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60120) returned 1 Thread: id = 3352 os_tid = 0x23ac [0163.025] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll")) returned 0x2020 [0165.728] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.728] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.728] GetLastError () returned 0x5 [0165.728] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5f80) returned 1 Thread: id = 3353 os_tid = 0x23b0 [0163.025] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll")) returned 0x2020 [0165.726] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.726] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.726] GetLastError () returned 0x5 [0165.727] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 Thread: id = 3354 os_tid = 0x838 [0163.025] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll")) returned 0x2020 [0165.739] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.739] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.740] GetLastError () returned 0x5 [0165.740] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6310) returned 1 Thread: id = 3355 os_tid = 0x24b0 [0163.025] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll")) returned 0x2020 [0165.723] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.724] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.724] GetLastError () returned 0x5 [0165.724] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61440) returned 1 Thread: id = 3356 os_tid = 0x24b4 [0163.026] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll")) returned 0x2020 [0165.667] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.668] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.668] GetLastError () returned 0x5 [0165.668] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61ef0) returned 1 Thread: id = 3357 os_tid = 0x24b8 [0163.026] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll")) returned 0x2020 [0165.048] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.048] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.725] GetLastError () returned 0x5 [0165.725] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 Thread: id = 3358 os_tid = 0x24bc [0163.027] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll")) returned 0x2020 [0165.790] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.790] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.790] GetLastError () returned 0x5 [0165.790] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61f80) returned 1 Thread: id = 3359 os_tid = 0x24c0 [0163.027] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll")) returned 0x2020 [0165.788] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.788] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.788] GetLastError () returned 0x5 [0165.788] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1448) returned 1 Thread: id = 3360 os_tid = 0x24c4 [0163.027] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll")) returned 0x2020 [0165.786] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.786] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.786] GetLastError () returned 0x5 [0165.786] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2eb8) returned 1 Thread: id = 3361 os_tid = 0x24c8 [0163.290] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll")) returned 0x2020 [0163.640] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0163.641] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.143] GetLastError () returned 0x5 [0165.143] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6bf8) returned 1 Thread: id = 3362 os_tid = 0x24cc [0163.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml")) returned 0x20 [0163.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML", dwFileAttributes=0x20) returned 0 [0163.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.299] GetLastError () returned 0x5 [0163.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML", dwFileAttributes=0x20) returned 0 [0163.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60d80) returned 1 Thread: id = 3363 os_tid = 0x24d0 [0163.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.access")) returned 0x20 [0163.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access", dwFileAttributes=0x20) returned 0 [0163.306] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.306] GetLastError () returned 0x5 [0163.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.access", dwFileAttributes=0x20) returned 0 [0163.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5b70) returned 1 Thread: id = 3364 os_tid = 0x24e4 [0163.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.password.template")) returned 0x20 [0163.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x20) returned 0 [0163.307] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.307] GetLastError () returned 0x5 [0163.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x20) returned 0 [0163.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb64d8) returned 1 Thread: id = 3365 os_tid = 0x24e8 [0163.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\management.properties")) returned 0x20 [0163.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties", dwFileAttributes=0x20) returned 0 [0163.308] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\management.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.308] GetLastError () returned 0x5 [0163.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\management.properties", dwFileAttributes=0x20) returned 0 [0163.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 3366 os_tid = 0x24ec [0163.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\snmp.acl.template")) returned 0x20 [0163.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template", dwFileAttributes=0x20) returned 0 [0163.310] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre7\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.310] GetLastError () returned 0x5 [0163.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\management\\snmp.acl.template", dwFileAttributes=0x20) returned 0 [0163.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a318) returned 1 Thread: id = 3367 os_tid = 0x24f0 [0163.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb64d8 [0163.314] wcscpy (in: _Dest=0x3eb64d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0163.314] wcscat (in: _Dest=0x3eb64d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0163.314] wcscat (in: _Dest=0x3eb64d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*" [0163.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0163.314] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0163.641] wcscmp (_String1=".", _String2=".") returned 0 [0163.641] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85365630, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.641] wcscmp (_String1="..", _String2=".") returned 1 [0163.641] wcscmp (_String1="..", _String2="..") returned 0 [0163.641] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8872b4b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar", cAlternateFileName="")) returned 1 [0163.641] wcscmp (_String1="Calendar", _String2=".") returned 1 [0163.641] wcscmp (_String1="Calendar", _String2="..") returned 1 [0163.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3052fe8 [0163.642] wcscpy (in: _Dest=0x3052fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0163.642] wcscat (in: _Dest=0x3052fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0163.642] wcscat (in: _Dest=0x3052fe8, _Source="Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0165.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66560 [0165.218] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0165.218] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0165.218] wcscat (in: _Dest=0x7a66560, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*" [0165.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2b50 [0165.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8872b4b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7a70 [0165.229] wcscmp (_String1=".", _String2=".") returned 0 [0165.229] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8872b4b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.229] wcscmp (_String1="..", _String2=".") returned 1 [0165.229] wcscmp (_String1="..", _String2="..") returned 0 [0165.230] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59eb0000, ftCreationTime.dwHighDateTime=0x1ca046d, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59eb0000, ftLastWriteTime.dwHighDateTime=0x1ca046d, nFileSizeHigh=0x0, nFileSizeLow=0x3424, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1 [0165.230] wcscmp (_String1="CalendarToolIconImages.jpg", _String2=".") returned 1 [0165.230] wcscmp (_String1="CalendarToolIconImages.jpg", _String2="..") returned 1 [0165.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8488 [0165.230] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0165.230] wcscat (in: _Dest=0x2c8488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0165.230] wcscat (in: _Dest=0x2c8488, _Source="CalendarToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" [0172.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0172.937] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50619800, ftCreationTime.dwHighDateTime=0x1ca046d, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50619800, ftLastWriteTime.dwHighDateTime=0x1ca046d, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="CALEND~1.BMP")) returned 1 [0172.937] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2=".") returned 1 [0172.937] wcscmp (_String1="CalendarToolIconImagesMask.bmp", _String2="..") returned 1 [0172.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4448 [0172.938] wcscpy (in: _Dest=0x3dc4448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0172.938] wcscat (in: _Dest=0x3dc4448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0172.938] wcscat (in: _Dest=0x3dc4448, _Source="CalendarToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" [0172.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2418 [0172.939] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3fa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarViewButtonImages.jpg", cAlternateFileName="CALEND~2.JPG")) returned 1 [0172.939] wcscmp (_String1="CalendarViewButtonImages.jpg", _String2=".") returned 1 [0172.939] wcscmp (_String1="CalendarViewButtonImages.jpg", _String2="..") returned 1 [0172.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8d48 [0172.939] wcscpy (in: _Dest=0x2c8d48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0172.939] wcscat (in: _Dest=0x2c8d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0172.939] wcscat (in: _Dest=0x2c8d48, _Source="CalendarViewButtonImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" [0172.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c [0172.940] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b49, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImage.jpg", cAlternateFileName="GLOBEB~1.JPG")) returned 1 [0172.940] wcscmp (_String1="GlobeButtonImage.jpg", _String2=".") returned 1 [0172.940] wcscmp (_String1="GlobeButtonImage.jpg", _String2="..") returned 1 [0172.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d84ee0 [0172.940] wcscpy (in: _Dest=0x3d84ee0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0172.940] wcscat (in: _Dest=0x3d84ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0172.941] wcscat (in: _Dest=0x3d84ee0, _Source="GlobeButtonImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" [0172.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0172.942] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77ef2ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="GLOBEB~1.BMP")) returned 1 [0172.942] wcscmp (_String1="GlobeButtonImageMask.bmp", _String2=".") returned 1 [0172.942] wcscmp (_String1="GlobeButtonImageMask.bmp", _String2="..") returned 1 [0172.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68648 [0172.942] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar" [0172.942] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\" [0172.942] wcscat (in: _Dest=0x3e68648, _Source="GlobeButtonImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" [0172.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0172.943] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b46600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77ef2ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x11b46600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="GLOBEB~1.BMP")) returned 0 [0172.943] FindClose (in: hFindFile=0x7ad7a70 | out: hFindFile=0x7ad7a70) returned 1 [0172.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2b50) returned 1 [0172.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0172.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052fe8) returned 1 [0172.945] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommonData", cAlternateFileName="COMMON~1")) returned 1 [0172.945] wcscmp (_String1="CommonData", _String2=".") returned 1 [0172.945] wcscmp (_String1="CommonData", _String2="..") returned 1 [0172.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66560 [0172.945] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.945] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.945] wcscat (in: _Dest=0x7a66560, _Source="CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0172.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a66560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0172.946] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77012130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c89e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1 [0172.946] wcscmp (_String1="Computers", _String2=".") returned 1 [0172.946] wcscmp (_String1="Computers", _String2="..") returned 1 [0172.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3052fe8 [0172.946] wcscpy (in: _Dest=0x3052fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.946] wcscat (in: _Dest=0x3052fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.946] wcscat (in: _Dest=0x3052fe8, _Source="Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0172.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3052fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0172.948] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7737e0d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876cdd70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion", cAlternateFileName="DISCUS~1")) returned 1 [0172.948] wcscmp (_String1="Discussion", _String2=".") returned 1 [0172.948] wcscmp (_String1="Discussion", _String2="..") returned 1 [0172.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a662a0 [0172.948] wcscpy (in: _Dest=0x7a662a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.948] wcscat (in: _Dest=0x7a662a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.948] wcscat (in: _Dest=0x7a662a0, _Source="Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0172.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a662a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0172.949] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85365630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8538b790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentShare", cAlternateFileName="DOCUME~1")) returned 1 [0172.949] wcscmp (_String1="DocumentShare", _String2=".") returned 1 [0172.949] wcscmp (_String1="DocumentShare", _String2="..") returned 1 [0172.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66350 [0172.949] wcscpy (in: _Dest=0x7a66350, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.949] wcscat (in: _Dest=0x7a66350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.949] wcscat (in: _Dest=0x7a66350, _Source="DocumentShare" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" [0172.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a66350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0172.951] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveDocumentReview", cAlternateFileName="GROOVE~1")) returned 1 [0172.951] wcscmp (_String1="GrooveDocumentReview", _String2=".") returned 1 [0172.951] wcscmp (_String1="GrooveDocumentReview", _String2="..") returned 1 [0172.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66a98 [0172.951] wcscpy (in: _Dest=0x3e66a98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.951] wcscat (in: _Dest=0x3e66a98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.951] wcscat (in: _Dest=0x3e66a98, _Source="GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0172.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e66a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0172.952] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769d2770, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms", cAlternateFileName="GROOVE~4")) returned 1 [0172.952] wcscmp (_String1="GrooveForms", _String2=".") returned 1 [0172.952] wcscmp (_String1="GrooveForms", _String2="..") returned 1 [0172.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66090 [0172.952] wcscpy (in: _Dest=0x7a66090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.952] wcscat (in: _Dest=0x7a66090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.952] wcscat (in: _Dest=0x7a66090, _Source="GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0172.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a66090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e8 [0172.953] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms3", cAlternateFileName="GROOVE~2")) returned 1 [0172.953] wcscmp (_String1="GrooveForms3", _String2=".") returned 1 [0172.954] wcscmp (_String1="GrooveForms3", _String2="..") returned 1 [0172.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66e50 [0172.954] wcscpy (in: _Dest=0x7a66e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.954] wcscat (in: _Dest=0x7a66e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.954] wcscat (in: _Dest=0x7a66e50, _Source="GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0172.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a66e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4 [0172.957] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms4", cAlternateFileName="GROOVE~3")) returned 1 [0172.957] wcscmp (_String1="GrooveForms4", _String2=".") returned 1 [0172.957] wcscmp (_String1="GrooveForms4", _String2="..") returned 1 [0172.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66f00 [0172.958] wcscpy (in: _Dest=0x7a66f00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.958] wcscat (in: _Dest=0x7a66f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.958] wcscat (in: _Dest=0x7a66f00, _Source="GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0172.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a66f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8 [0172.959] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9220ac10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="GR3B08~1")) returned 1 [0172.959] wcscmp (_String1="GrooveForms5", _String2=".") returned 1 [0172.959] wcscmp (_String1="GrooveForms5", _String2="..") returned 1 [0172.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66fb0 [0172.959] wcscpy (in: _Dest=0x7a66fb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.959] wcscat (in: _Dest=0x7a66fb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.959] wcscat (in: _Dest=0x7a66fb0, _Source="GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0172.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a66fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0172.960] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f2d8f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveProjectToolset", cAlternateFileName="GRA998~1")) returned 1 [0172.960] wcscmp (_String1="GrooveProjectToolset", _String2=".") returned 1 [0172.960] wcscmp (_String1="GrooveProjectToolset", _String2="..") returned 1 [0172.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66cd8 [0172.960] wcscpy (in: _Dest=0x3e66cd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.960] wcscat (in: _Dest=0x3e66cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.960] wcscat (in: _Dest=0x3e66cd8, _Source="GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0172.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e66cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0172.961] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 1 [0172.962] wcscmp (_String1="Welcome Tool", _String2=".") returned 1 [0172.962] wcscmp (_String1="Welcome Tool", _String2="..") returned 1 [0172.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a67060 [0172.962] wcscpy (in: _Dest=0x7a67060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net" [0172.962] wcscat (in: _Dest=0x7a67060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\" [0172.962] wcscat (in: _Dest=0x7a67060, _Source="Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0172.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a67060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0172.963] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 0 [0172.963] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0172.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0172.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb64d8) returned 1 [0172.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65850) returned 1 Thread: id = 3368 os_tid = 0x24f4 [0163.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5d20 [0163.325] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0163.325] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0163.325] wcscat (in: _Dest=0x3eb5d20, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*" [0163.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0163.325] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0163.325] wcscmp (_String1=".", _String2=".") returned 0 [0163.325] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.325] wcscmp (_String1="..", _String2=".") returned 1 [0163.325] wcscmp (_String1="..", _String2="..") returned 0 [0163.325] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0163.325] wcscmp (_String1="Accessibility", _String2=".") returned 1 [0163.325] wcscmp (_String1="Accessibility", _String2="..") returned 1 [0163.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66560 [0163.326] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0163.326] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0163.326] wcscat (in: _Dest=0x7a66560, _Source="Accessibility" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0163.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6b90 [0163.935] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility" [0163.935] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\" [0163.935] wcscat (in: _Dest=0x2ff6b90, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*" [0163.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0163.935] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0163.935] wcscmp (_String1=".", _String2=".") returned 0 [0163.935] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.935] wcscmp (_String1="..", _String2=".") returned 1 [0163.935] wcscmp (_String1="..", _String2="..") returned 0 [0163.935] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93532dc2, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x93532dc2, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7efb081e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0163.935] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0163.935] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0163.936] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 1 [0163.936] wcscmp (_String1="Speech Recognition.lnk", _String2=".") returned 1 [0163.936] wcscmp (_String1="Speech Recognition.lnk", _String2="..") returned 1 [0163.936] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a6be, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ef8a6be, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ef8a6be, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 0 [0163.936] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0163.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0163.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0163.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0163.936] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8b5f96, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c8b5f96, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c8b5f96, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="CALCUL~1.LNK")) returned 1 [0163.936] wcscmp (_String1="Calculator.lnk", _String2=".") returned 1 [0163.936] wcscmp (_String1="Calculator.lnk", _String2="..") returned 1 [0163.936] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9350cc63, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9350cc63, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0xea608180, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0163.936] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0163.936] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0163.936] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b19ca14, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b19ca14, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b19ca14, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="DISPLA~1.LNK")) returned 1 [0163.937] wcscmp (_String1="displayswitch.lnk", _String2=".") returned 1 [0163.937] wcscmp (_String1="displayswitch.lnk", _String2="..") returned 1 [0163.937] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea56fc00, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea56fc00, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea56fc00, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="MATHIN~1.LNK")) returned 1 [0163.937] wcscmp (_String1="Math Input Panel.lnk", _String2=".") returned 1 [0163.937] wcscmp (_String1="Math Input Panel.lnk", _String2="..") returned 1 [0163.937] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9479f40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe9479f40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe9479f40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="MOBILI~1.LNK")) returned 1 [0163.937] wcscmp (_String1="Mobility Center.lnk", _String2=".") returned 1 [0163.937] wcscmp (_String1="Mobility Center.lnk", _String2="..") returned 1 [0163.937] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a13760, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe6a13760, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe6a398c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="NETWOR~1.LNK")) returned 1 [0163.937] wcscmp (_String1="NetworkProjection.lnk", _String2=".") returned 1 [0163.937] wcscmp (_String1="NetworkProjection.lnk", _String2="..") returned 1 [0163.937] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f821656, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6f821656, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6f821656, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0163.937] wcscmp (_String1="Paint.lnk", _String2=".") returned 1 [0163.937] wcscmp (_String1="Paint.lnk", _String2="..") returned 1 [0163.937] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6c09bc, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5f6c09bc, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5f6c09bc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0163.937] wcscmp (_String1="Remote Desktop Connection.lnk", _String2=".") returned 1 [0163.937] wcscmp (_String1="Remote Desktop Connection.lnk", _String2="..") returned 1 [0163.937] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e2020, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea5e2020, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea5e2020, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="SNIPPI~1.LNK")) returned 1 [0163.937] wcscmp (_String1="Snipping Tool.lnk", _String2=".") returned 1 [0163.937] wcscmp (_String1="Snipping Tool.lnk", _String2="..") returned 1 [0163.937] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e52066a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e52066a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e52066a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="SOUNDR~1.LNK")) returned 1 [0163.937] wcscmp (_String1="Sound Recorder.lnk", _String2=".") returned 1 [0163.937] wcscmp (_String1="Sound Recorder.lnk", _String2="..") returned 1 [0163.938] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea4fd7e0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xea4fd7e0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xea4fd7e0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="STICKY~1.LNK")) returned 1 [0163.938] wcscmp (_String1="Sticky Notes.lnk", _String2=".") returned 1 [0163.938] wcscmp (_String1="Sticky Notes.lnk", _String2="..") returned 1 [0163.938] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae14945, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ae14945, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ae14945, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="SYNCCE~1.LNK")) returned 1 [0163.938] wcscmp (_String1="Sync Center.lnk", _String2=".") returned 1 [0163.938] wcscmp (_String1="Sync Center.lnk", _String2="..") returned 1 [0163.938] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0163.938] wcscmp (_String1="System Tools", _String2=".") returned 1 [0163.938] wcscmp (_String1="System Tools", _String2="..") returned 1 [0163.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66560 [0163.938] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0163.938] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0163.938] wcscat (in: _Dest=0x7a66560, _Source="System Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0163.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66820 [0163.938] wcscpy (in: _Dest=0x7a66820, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" [0163.938] wcscat (in: _Dest=0x7a66820, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\" [0163.939] wcscat (in: _Dest=0x7a66820, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*" [0163.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0163.939] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0163.939] wcscmp (_String1=".", _String2=".") returned 0 [0163.939] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.939] wcscmp (_String1="..", _String2=".") returned 1 [0163.939] wcscmp (_String1="..", _String2="..") returned 0 [0163.939] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c902257, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c902257, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c9283b7, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="CHARAC~1.LNK")) returned 1 [0163.939] wcscmp (_String1="Character Map.lnk", _String2=".") returned 1 [0163.939] wcscmp (_String1="Character Map.lnk", _String2="..") returned 1 [0163.939] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9357f080, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x9357f080, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7e65116d, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0163.939] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0163.939] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0163.939] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00af8f, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6c00af8f, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6c00af8f, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0163.940] wcscmp (_String1="dfrgui.lnk", _String2=".") returned 1 [0163.940] wcscmp (_String1="dfrgui.lnk", _String2="..") returned 1 [0163.940] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3e1ef0, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b3e1ef0, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b3e1ef0, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="DISKCL~1.LNK")) returned 1 [0163.940] wcscmp (_String1="Disk Cleanup.lnk", _String2=".") returned 1 [0163.940] wcscmp (_String1="Disk Cleanup.lnk", _String2="..") returned 1 [0163.940] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d2e5e1a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d2e5e1a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d2e5e1a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="RESOUR~1.LNK")) returned 1 [0163.940] wcscmp (_String1="Resource Monitor.lnk", _String2=".") returned 1 [0163.940] wcscmp (_String1="Resource Monitor.lnk", _String2="..") returned 1 [0163.940] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5597fb3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5597fb3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5597fb3a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0163.940] wcscmp (_String1="System Information.lnk", _String2=".") returned 1 [0163.940] wcscmp (_String1="System Information.lnk", _String2="..") returned 1 [0163.940] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad30103, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ad30103, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ad30103, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="SYSTEM~2.LNK")) returned 1 [0163.940] wcscmp (_String1="System Restore.lnk", _String2=".") returned 1 [0163.940] wcscmp (_String1="System Restore.lnk", _String2="..") returned 1 [0163.940] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df49088, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6df49088, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6df49088, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0163.940] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0163.940] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0163.940] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e62b00c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e62b00c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e62b00c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0163.940] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2=".") returned 1 [0163.941] wcscmp (_String1="Windows Easy Transfer Reports.lnk", _String2="..") returned 1 [0163.941] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0163.941] wcscmp (_String1="Windows Easy Transfer.lnk", _String2=".") returned 1 [0163.941] wcscmp (_String1="Windows Easy Transfer.lnk", _String2="..") returned 1 [0163.941] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5b8beb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e5b8beb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e5b8beb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0163.941] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0163.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0163.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 [0163.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0163.941] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0163.941] wcscmp (_String1="Tablet PC", _String2=".") returned 1 [0163.941] wcscmp (_String1="Tablet PC", _String2="..") returned 1 [0163.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053f00 [0163.942] wcscpy (in: _Dest=0x3053f00, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0163.942] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0163.942] wcscat (in: _Dest=0x3053f00, _Source="Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0163.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66560 [0163.942] wcscpy (in: _Dest=0x7a66560, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" [0163.942] wcscat (in: _Dest=0x7a66560, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\" [0163.942] wcscat (in: _Dest=0x7a66560, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*" [0163.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0163.942] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0163.943] wcscmp (_String1=".", _String2=".") returned 0 [0163.943] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0xec3c9480, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.943] wcscmp (_String1="..", _String2=".") returned 1 [0163.943] wcscmp (_String1="..", _String2="..") returned 0 [0163.943] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x84e2d1b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0163.943] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0163.943] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0163.943] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95124c0, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95124c0, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95124c0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="SHAPEC~1.LNK")) returned 1 [0163.943] wcscmp (_String1="ShapeCollector.lnk", _String2=".") returned 1 [0163.943] wcscmp (_String1="ShapeCollector.lnk", _String2="..") returned 1 [0163.943] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe95aaa40, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe95aaa40, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe95aaa40, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0163.943] wcscmp (_String1="TabTip.lnk", _String2=".") returned 1 [0163.943] wcscmp (_String1="TabTip.lnk", _String2="..") returned 1 [0163.943] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0163.943] wcscmp (_String1="Windows Journal.lnk", _String2=".") returned 1 [0163.943] wcscmp (_String1="Windows Journal.lnk", _String2="..") returned 1 [0163.943] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec3a3320, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xec3a3320, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xec3c9480, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0163.943] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0163.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0163.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 [0163.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 [0163.944] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec6a9d8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7ec6a9d8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7ec6a9d8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="WELCOM~1.LNK")) returned 1 [0163.944] wcscmp (_String1="Welcome Center.lnk", _String2=".") returned 1 [0163.944] wcscmp (_String1="Welcome Center.lnk", _String2="..") returned 1 [0163.944] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0163.944] wcscmp (_String1="Windows PowerShell", _String2=".") returned 1 [0163.944] wcscmp (_String1="Windows PowerShell", _String2="..") returned 1 [0163.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6b90 [0163.944] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" [0163.944] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\" [0163.944] wcscat (in: _Dest=0x2ff6b90, _Source="Windows PowerShell" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0163.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66d98 [0163.945] wcscpy (in: _Dest=0x3e66d98, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell" [0163.945] wcscat (in: _Dest=0x3e66d98, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\" [0163.945] wcscat (in: _Dest=0x3e66d98, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*" [0163.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0163.945] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0163.945] wcscmp (_String1=".", _String2=".") returned 0 [0163.945] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119fee1f, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.945] wcscmp (_String1="..", _String2=".") returned 1 [0163.945] wcscmp (_String1="..", _String2="..") returned 0 [0163.945] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119fee1f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0163.945] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0163.945] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0163.945] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119d8cbf, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x119d8cbf, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x119d8cbf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0163.946] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2=".") returned 1 [0163.946] wcscmp (_String1="Windows PowerShell ISE.lnk", _String2="..") returned 1 [0163.946] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0163.946] wcscmp (_String1="Windows PowerShell.lnk", _String2=".") returned 1 [0163.946] wcscmp (_String1="Windows PowerShell.lnk", _String2="..") returned 1 [0163.946] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0163.946] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0163.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0163.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66d98) returned 1 [0163.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0163.946] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0163.946] wcscmp (_String1="Wordpad.lnk", _String2=".") returned 1 [0163.946] wcscmp (_String1="Wordpad.lnk", _String2="..") returned 1 [0163.946] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2fd6ae, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7b2fd6ae, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7b2fd6ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0163.946] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0163.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0163.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 [0163.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 Thread: id = 3369 os_tid = 0x24f8 [0163.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053f00 [0163.327] wcscpy (in: _Dest=0x3053f00, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" [0163.327] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\" [0163.327] wcscat (in: _Dest=0x3053f00, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*" [0163.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0163.327] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0163.327] wcscmp (_String1=".", _String2=".") returned 0 [0163.327] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4eb893d, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.327] wcscmp (_String1="..", _String2=".") returned 1 [0163.327] wcscmp (_String1="..", _String2="..") returned 0 [0163.327] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11bc7ea2, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x11bc7ea2, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x11bc7ea2, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="COMPON~1.LNK")) returned 1 [0163.328] wcscmp (_String1="Component Services.lnk", _String2=".") returned 1 [0163.328] wcscmp (_String1="Component Services.lnk", _String2="..") returned 1 [0163.328] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ecb7b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a3ecb7b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a412cdb, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="COMPUT~1.LNK")) returned 1 [0163.328] wcscmp (_String1="Computer Management.lnk", _String2=".") returned 1 [0163.328] wcscmp (_String1="Computer Management.lnk", _String2="..") returned 1 [0163.328] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffd732, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5dffd732, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5dffd732, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="DATASO~1.LNK")) returned 1 [0163.328] wcscmp (_String1="Data Sources (ODBC).lnk", _String2=".") returned 1 [0163.328] wcscmp (_String1="Data Sources (ODBC).lnk", _String2="..") returned 1 [0163.328] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5571e536, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5571e536, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xed7b8cc0, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0163.328] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0163.328] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0163.328] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6de18586, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6de18586, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6de18586, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="EVENTV~1.LNK")) returned 1 [0163.328] wcscmp (_String1="Event Viewer.lnk", _String2=".") returned 1 [0163.328] wcscmp (_String1="Event Viewer.lnk", _String2="..") returned 1 [0163.328] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a77ec81, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6a77ec81, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6a77ec81, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="ISCSII~1.LNK")) returned 1 [0163.328] wcscmp (_String1="iSCSI Initiator.lnk", _String2=".") returned 1 [0163.328] wcscmp (_String1="iSCSI Initiator.lnk", _String2="..") returned 1 [0163.328] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556f83d6, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x556f83d6, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x556f83d6, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="MEMORY~1.LNK")) returned 1 [0163.328] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2=".") returned 1 [0163.328] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2="..") returned 1 [0163.328] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d227738, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5d227738, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5d227738, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="PERFOR~1.LNK")) returned 1 [0163.328] wcscmp (_String1="Performance Monitor.lnk", _String2=".") returned 1 [0163.328] wcscmp (_String1="Performance Monitor.lnk", _String2="..") returned 1 [0163.328] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a63280, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xe4a63280, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xe4a63280, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="PRINTM~1.LNK")) returned 1 [0163.329] wcscmp (_String1="Print Management.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Print Management.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed792b60, ftCreationTime.dwHighDateTime=0x1d2da36, ftLastAccessTime.dwLowDateTime=0xed792b60, ftLastAccessTime.dwHighDateTime=0x1d2da36, ftLastWriteTime.dwLowDateTime=0xed792b60, ftLastWriteTime.dwHighDateTime=0x1d2da36, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="SECURI~1.LNK")) returned 1 [0163.329] wcscmp (_String1="Security Configuration Management.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Security Configuration Management.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645e65ce, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x645e65ce, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6460c72e, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0163.329] wcscmp (_String1="services.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="services.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5590d719, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5590d719, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x5593387a, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0163.329] wcscmp (_String1="System Configuration.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="System Configuration.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6defcdc8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6defcdc8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6defcdc8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0163.329] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x614cdfb3, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x614cdfb3, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x615b27f5, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0163.329] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0163.329] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2=".") returned 1 [0163.329] wcscmp (_String1="Windows PowerShell Modules.lnk", _String2="..") returned 1 [0163.329] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xe1da0323, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0xe1da0323, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0163.329] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0163.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0163.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 [0163.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052fe8) returned 1 Thread: id = 3370 os_tid = 0x24fc [0163.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a60d80 [0163.334] wcscpy (in: _Dest=0x7a60d80, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games" [0163.334] wcscat (in: _Dest=0x7a60d80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\" [0163.334] wcscat (in: _Dest=0x7a60d80, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*" [0163.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0163.334] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0163.334] wcscmp (_String1=".", _String2=".") returned 0 [0163.334] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xe4edea9e, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0xdb9c12b2, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0xdb9c12b2, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.334] wcscmp (_String1="..", _String2=".") returned 1 [0163.334] wcscmp (_String1="..", _String2="..") returned 0 [0163.334] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5166202, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x8ecb8f72, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x8ecb8f72, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0163.335] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0163.335] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0163.335] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 1 [0163.335] wcscmp (_String1="GameExplorer.lnk", _String2=".") returned 1 [0163.335] wcscmp (_String1="GameExplorer.lnk", _String2="..") returned 1 [0163.335] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3f338d, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7c3f338d, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7c4194ee, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 0 [0163.335] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0163.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0163.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60d80) returned 1 [0163.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 3371 os_tid = 0x2500 [0163.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0163.338] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java" [0163.339] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\" [0163.339] wcscat (in: _Dest=0x3f3c208, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*" [0163.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0163.339] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0163.341] wcscmp (_String1=".", _String2=".") returned 0 [0163.341] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.341] wcscmp (_String1="..", _String2=".") returned 1 [0163.341] wcscmp (_String1="..", _String2="..") returned 0 [0163.341] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0163.341] wcscmp (_String1="About Java.lnk", _String2=".") returned 1 [0163.341] wcscmp (_String1="About Java.lnk", _String2="..") returned 1 [0163.341] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c90fe0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c90fe0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0163.341] wcscmp (_String1="Check For Updates.lnk", _String2=".") returned 1 [0163.341] wcscmp (_String1="Check For Updates.lnk", _String2="..") returned 1 [0163.341] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6ae80, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c6ae80, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c90fe0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x78d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0163.341] wcscmp (_String1="Configure Java.lnk", _String2=".") returned 1 [0163.341] wcscmp (_String1="Configure Java.lnk", _String2="..") returned 1 [0163.341] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="GETHEL~1.LNK")) returned 1 [0163.341] wcscmp (_String1="Get Help.lnk", _String2=".") returned 1 [0163.341] wcscmp (_String1="Get Help.lnk", _String2="..") returned 1 [0163.342] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 1 [0163.342] wcscmp (_String1="Visit Java.com.lnk", _String2=".") returned 1 [0163.342] wcscmp (_String1="Visit Java.com.lnk", _String2="..") returned 1 [0163.342] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c44d20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x69c44d20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x69c44d20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 0 [0163.342] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0163.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0163.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 [0163.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 3372 os_tid = 0x2504 [0163.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x3eb5860 [0163.346] wcscpy (in: _Dest=0x3eb5860, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance" [0163.346] wcscat (in: _Dest=0x3eb5860, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\" [0163.346] wcscat (in: _Dest=0x3eb5860, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*" [0163.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0163.346] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0163.347] wcscmp (_String1=".", _String2=".") returned 0 [0163.347] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.347] wcscmp (_String1="..", _String2=".") returned 1 [0163.347] wcscmp (_String1="..", _String2="..") returned 0 [0163.347] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd17c1c, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7dd17c1c, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7dd17c1c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="BACKUP~1.LNK")) returned 1 [0163.347] wcscmp (_String1="Backup and Restore Center.lnk", _String2=".") returned 1 [0163.347] wcscmp (_String1="Backup and Restore Center.lnk", _String2="..") returned 1 [0163.347] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f211e22, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7f211e22, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="CREATE~1.LNK")) returned 1 [0163.347] wcscmp (_String1="Create Recovery Disc.lnk", _String2=".") returned 1 [0163.347] wcscmp (_String1="Create Recovery Disc.lnk", _String2="..") returned 1 [0163.347] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x935a51df, ftCreationTime.dwHighDateTime=0x1ca0427, ftLastAccessTime.dwLowDateTime=0x935a51df, ftLastAccessTime.dwHighDateTime=0x1ca0427, ftLastWriteTime.dwLowDateTime=0x7f211e22, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0163.347] wcscmp (_String1="Desktop.ini", _String2=".") returned 1 [0163.347] wcscmp (_String1="Desktop.ini", _String2="..") returned 1 [0163.347] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0163.347] wcscmp (_String1="Remote Assistance.lnk", _String2=".") returned 1 [0163.347] wcscmp (_String1="Remote Assistance.lnk", _String2="..") returned 1 [0163.347] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e70f84e, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x7e70f84e, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7e7359ae, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 0 [0163.348] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0163.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0163.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5860) returned 1 [0163.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 3373 os_tid = 0x2508 [0163.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63030 [0163.350] wcscpy (in: _Dest=0x7a63030, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0163.350] wcscat (in: _Dest=0x7a63030, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0163.350] wcscat (in: _Dest=0x7a63030, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*" [0163.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0163.351] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0163.351] wcscmp (_String1=".", _String2=".") returned 0 [0163.351] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22e12f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22e12f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.351] wcscmp (_String1="..", _String2=".") returned 1 [0163.351] wcscmp (_String1="..", _String2="..") returned 0 [0163.351] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0163.351] wcscmp (_String1="Microsoft Access 2010.lnk", _String2=".") returned 1 [0163.351] wcscmp (_String1="Microsoft Access 2010.lnk", _String2="..") returned 1 [0163.351] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d78df0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d78df0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0163.351] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2=".") returned 1 [0163.351] wcscmp (_String1="Microsoft Excel 2010.lnk", _String2="..") returned 1 [0163.351] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97214fd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="MIA4FF~1.LNK")) returned 1 [0163.351] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2=".") returned 1 [0163.351] wcscmp (_String1="Microsoft InfoPath Designer 2010.lnk", _String2="..") returned 1 [0163.351] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8dc50b0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8dc50b0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0163.352] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2=".") returned 1 [0163.352] wcscmp (_String1="Microsoft InfoPath Filler 2010.lnk", _String2="..") returned 1 [0163.352] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="MICROS~1")) returned 1 [0163.352] wcscmp (_String1="Microsoft Office 2010 Tools", _String2=".") returned 1 [0163.352] wcscmp (_String1="Microsoft Office 2010 Tools", _String2="..") returned 1 [0163.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e67568 [0163.352] wcscpy (in: _Dest=0x3e67568, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office" [0163.352] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\" [0163.352] wcscat (in: _Dest=0x3e67568, _Source="Microsoft Office 2010 Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0163.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68de0 [0163.967] wcscpy (in: _Dest=0x3e68de0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools" [0163.967] wcscat (in: _Dest=0x3e68de0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\" [0163.968] wcscat (in: _Dest=0x3e68de0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*" [0163.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0163.968] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0163.969] wcscmp (_String1=".", _String2=".") returned 0 [0163.969] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.970] wcscmp (_String1="..", _String2=".") returned 1 [0163.970] wcscmp (_String1="..", _String2="..") returned 0 [0163.970] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="DIGITA~1.LNK")) returned 1 [0163.970] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2=".") returned 1 [0163.970] wcscmp (_String1="Digital Certificate for VBA Projects.lnk", _String2="..") returned 1 [0163.970] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97130790, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc226eed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc226eed0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0163.970] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2=".") returned 1 [0163.970] wcscmp (_String1="Microsoft Clip Organizer.lnk", _String2="..") returned 1 [0163.970] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971a2bb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xabf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0163.970] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2=".") returned 1 [0163.970] wcscmp (_String1="Microsoft Office 2010 Language Preferences.lnk", _String2="..") returned 1 [0163.970] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9717ca50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0163.970] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2=".") returned 1 [0163.970] wcscmp (_String1="Microsoft Office 2010 Upload Center.lnk", _String2="..") returned 1 [0163.970] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971568f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xc2295030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2295030, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xb3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0163.970] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2=".") returned 1 [0163.970] wcscmp (_String1="Microsoft Office Picture Manager.lnk", _String2="..") returned 1 [0163.970] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 1 [0163.970] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2=".") returned 1 [0163.970] wcscmp (_String1="Microsoft Project Server 2010 Accounts.lnk", _String2="..") returned 1 [0163.970] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8f7d570, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8f7d570, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 0 [0163.971] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0163.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0163.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68de0) returned 1 [0163.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 [0163.973] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8deb210, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8deb210, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="MI807F~1.LNK")) returned 1 [0163.973] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2=".") returned 1 [0163.973] wcscmp (_String1="Microsoft OneNote 2010.lnk", _String2="..") returned 1 [0163.973] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="MI4465~1.LNK")) returned 1 [0163.973] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2=".") returned 1 [0163.973] wcscmp (_String1="Microsoft Outlook 2010.lnk", _String2="..") returned 1 [0163.973] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9723b130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e11370, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xb79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="MIAF79~1.LNK")) returned 1 [0163.973] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2=".") returned 1 [0163.973] wcscmp (_String1="Microsoft PowerPoint 2010.lnk", _String2="..") returned 1 [0163.973] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7d570, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xb8fa36d0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb8fa36d0, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0xb77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="MI6860~1.LNK")) returned 1 [0163.973] wcscmp (_String1="Microsoft Project 2010.lnk", _String2=".") returned 1 [0163.973] wcscmp (_String1="Microsoft Project 2010.lnk", _String2="..") returned 1 [0163.973] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e11370, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="MI260D~1.LNK")) returned 1 [0163.974] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2=".") returned 1 [0163.974] wcscmp (_String1="Microsoft Publisher 2010.lnk", _String2="..") returned 1 [0163.974] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971c8d10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0163.974] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0163.974] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0163.974] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22bb190, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xc22bb190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc22bb190, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="MI7E65~1.LNK")) returned 1 [0163.974] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2=".") returned 1 [0163.974] wcscmp (_String1="Microsoft Visio 2010.lnk", _String2="..") returned 1 [0163.974] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 1 [0163.974] wcscmp (_String1="Microsoft Word 2010.lnk", _String2=".") returned 1 [0163.974] wcscmp (_String1="Microsoft Word 2010.lnk", _String2="..") returned 1 [0163.974] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97261290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8e374d0, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8e374d0, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 0 [0163.974] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0163.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0163.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63030) returned 1 [0163.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62630) returned 1 Thread: id = 3374 os_tid = 0x250c [0163.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6018 [0163.355] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint" [0163.355] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\" [0163.355] wcscat (in: _Dest=0x3eb6018, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*" [0163.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0163.355] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0163.357] wcscmp (_String1=".", _String2=".") returned 0 [0163.357] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.358] wcscmp (_String1="..", _String2=".") returned 1 [0163.358] wcscmp (_String1="..", _String2="..") returned 0 [0163.358] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0163.358] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2=".") returned 1 [0163.358] wcscmp (_String1="Microsoft SharePoint Workspace 2010.lnk", _String2="..") returned 1 [0163.358] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x971eee70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xb8d9ef50, ftLastAccessTime.dwHighDateTime=0x1d3008f, ftLastWriteTime.dwLowDateTime=0xb8d9ef50, ftLastWriteTime.dwHighDateTime=0x1d3008f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 0 [0163.358] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0163.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0163.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 [0163.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a601b0) returned 1 Thread: id = 3375 os_tid = 0x2510 [0163.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x86) returned 0x7a601b0 [0163.361] wcscpy (in: _Dest=0x7a601b0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" [0163.361] wcscat (in: _Dest=0x7a601b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\" [0163.361] wcscat (in: _Dest=0x7a601b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*" [0163.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0163.361] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0163.361] wcscmp (_String1=".", _String2=".") returned 0 [0163.361] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf9fee530, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.362] wcscmp (_String1="..", _String2=".") returned 1 [0163.362] wcscmp (_String1="..", _String2="..") returned 0 [0163.362] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0163.362] wcscmp (_String1="desktop.ini", _String2=".") returned 1 [0163.362] wcscmp (_String1="desktop.ini", _String2="..") returned 1 [0163.362] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6b3d7eb8, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x6b3d7eb8, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x6b3d7eb8, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0163.362] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0163.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0163.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a601b0) returned 1 [0163.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61680) returned 1 Thread: id = 3376 os_tid = 0x2514 [0163.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6018 [0163.363] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC" [0163.363] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\" [0163.363] wcscat (in: _Dest=0x3eb6018, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*" [0163.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0163.363] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0163.364] wcscmp (_String1=".", _String2=".") returned 0 [0163.364] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.364] wcscmp (_String1="..", _String2=".") returned 1 [0163.364] wcscmp (_String1="..", _String2="..") returned 0 [0163.364] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x92b74a2a, ftCreationTime.dwHighDateTime=0x1ca0457, ftLastAccessTime.dwLowDateTime=0x92b74a2a, ftLastAccessTime.dwHighDateTime=0x1ca0457, ftLastWriteTime.dwLowDateTime=0x92b74a2a, ftLastWriteTime.dwHighDateTime=0x1ca0457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0163.364] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 [0163.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 Thread: id = 3377 os_tid = 0x2518 [0163.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf")) returned 0x20 [0163.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0163.369] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.370] GetLastError () returned 0x5 [0163.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0163.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6e70) returned 1 Thread: id = 3378 os_tid = 0x251c [0163.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf")) returned 0x20 [0163.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0163.374] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.374] GetLastError () returned 0x5 [0163.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0163.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 Thread: id = 3379 os_tid = 0x2520 [0163.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf")) returned 0x20 [0163.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0163.376] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.376] GetLastError () returned 0x5 [0163.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0163.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402b8) returned 1 Thread: id = 3380 os_tid = 0x2524 [0163.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini")) returned 0x20 [0163.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.377] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.377] GetLastError () returned 0x5 [0163.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 3381 os_tid = 0x2528 [0163.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html")) returned 0x20 [0163.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", dwFileAttributes=0x20) returned 0 [0163.379] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.379] GetLastError () returned 0x5 [0163.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", dwFileAttributes=0x20) returned 0 [0163.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df18c8) returned 1 Thread: id = 3382 os_tid = 0x252c [0163.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\apia")) returned 0x20 [0163.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia", dwFileAttributes=0x20) returned 0 [0163.380] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\apia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.380] GetLastError () returned 0x5 [0163.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Apia", dwFileAttributes=0x20) returned 0 [0163.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 Thread: id = 3383 os_tid = 0x2530 [0163.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\auckland")) returned 0x20 [0163.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland", dwFileAttributes=0x20) returned 0 [0163.382] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\auckland"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.382] GetLastError () returned 0x5 [0163.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Auckland", dwFileAttributes=0x20) returned 0 [0163.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 Thread: id = 3384 os_tid = 0x2534 [0163.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chatham")) returned 0x20 [0166.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham", dwFileAttributes=0x20) returned 0 [0166.069] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chatham"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.069] GetLastError () returned 0x5 [0166.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chatham", dwFileAttributes=0x20) returned 0 [0166.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 Thread: id = 3385 os_tid = 0x2538 [0163.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chuuk")) returned 0x20 [0166.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk", dwFileAttributes=0x20) returned 0 [0166.353] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\chuuk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.353] GetLastError () returned 0x5 [0166.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk", dwFileAttributes=0x20) returned 0 [0166.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d958) returned 1 Thread: id = 3386 os_tid = 0x253c [0163.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\easter")) returned 0x20 [0166.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter", dwFileAttributes=0x20) returned 0 [0166.380] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\easter"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.380] GetLastError () returned 0x5 [0166.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Easter", dwFileAttributes=0x20) returned 0 [0166.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a231b0) returned 1 Thread: id = 3387 os_tid = 0x2540 [0163.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\efate")) returned 0x20 [0166.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate", dwFileAttributes=0x20) returned 0 [0166.359] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\efate"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.359] GetLastError () returned 0x5 [0166.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Efate", dwFileAttributes=0x20) returned 0 [0166.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e7f8) returned 1 Thread: id = 3388 os_tid = 0x2544 [0163.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\enderbury")) returned 0x20 [0166.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury", dwFileAttributes=0x20) returned 0 [0166.379] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\enderbury"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.379] GetLastError () returned 0x5 [0166.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury", dwFileAttributes=0x20) returned 0 [0166.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 Thread: id = 3389 os_tid = 0x2548 [0163.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fakaofo")) returned 0x20 [0166.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo", dwFileAttributes=0x20) returned 0 [0166.357] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fakaofo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.357] GetLastError () returned 0x5 [0166.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo", dwFileAttributes=0x20) returned 0 [0166.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d10) returned 1 Thread: id = 3390 os_tid = 0x254c [0163.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fiji")) returned 0x20 [0166.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji", dwFileAttributes=0x20) returned 0 [0166.100] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\fiji"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.101] GetLastError () returned 0x5 [0166.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Fiji", dwFileAttributes=0x20) returned 0 [0166.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 Thread: id = 3391 os_tid = 0x2550 [0163.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\funafuti")) returned 0x20 [0166.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti", dwFileAttributes=0x20) returned 0 [0166.364] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\funafuti"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.364] GetLastError () returned 0x5 [0166.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti", dwFileAttributes=0x20) returned 0 [0166.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ed0) returned 1 Thread: id = 3392 os_tid = 0x2554 [0163.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\galapagos")) returned 0x20 [0166.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos", dwFileAttributes=0x20) returned 0 [0166.377] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\galapagos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.377] GetLastError () returned 0x5 [0166.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos", dwFileAttributes=0x20) returned 0 [0166.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23220) returned 1 Thread: id = 3393 os_tid = 0xec0 [0163.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\gambier")) returned 0x20 [0166.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier", dwFileAttributes=0x20) returned 0 [0166.401] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\gambier"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.401] GetLastError () returned 0x5 [0166.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Gambier", dwFileAttributes=0x20) returned 0 [0166.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a00) returned 1 Thread: id = 3394 os_tid = 0x2558 [0163.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guadalcanal")) returned 0x20 [0166.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal", dwFileAttributes=0x20) returned 0 [0166.375] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guadalcanal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.375] GetLastError () returned 0x5 [0166.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal", dwFileAttributes=0x20) returned 0 [0166.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 Thread: id = 3395 os_tid = 0x255c [0163.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guam")) returned 0x20 [0166.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam", dwFileAttributes=0x20) returned 0 [0166.399] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\guam"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.399] GetLastError () returned 0x5 [0166.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Guam", dwFileAttributes=0x20) returned 0 [0166.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1da28) returned 1 Thread: id = 3396 os_tid = 0x2560 [0163.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\honolulu")) returned 0x20 [0166.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu", dwFileAttributes=0x20) returned 0 [0166.362] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\honolulu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.363] GetLastError () returned 0x5 [0166.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu", dwFileAttributes=0x20) returned 0 [0166.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23c30) returned 1 Thread: id = 3397 os_tid = 0x25d8 [0163.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\johnston")) returned 0x20 [0166.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston", dwFileAttributes=0x20) returned 0 [0166.361] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\johnston"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.361] GetLastError () returned 0x5 [0166.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Johnston", dwFileAttributes=0x20) returned 0 [0166.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d80) returned 1 Thread: id = 3398 os_tid = 0x25dc [0163.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kiritimati")) returned 0x20 [0166.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati", dwFileAttributes=0x20) returned 0 [0166.371] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kiritimati"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.371] GetLastError () returned 0x5 [0166.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati", dwFileAttributes=0x20) returned 0 [0166.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 Thread: id = 3399 os_tid = 0x25e0 [0163.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kosrae")) returned 0x20 [0166.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae", dwFileAttributes=0x20) returned 0 [0166.397] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kosrae"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.398] GetLastError () returned 0x5 [0166.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae", dwFileAttributes=0x20) returned 0 [0166.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23df0) returned 1 Thread: id = 3400 os_tid = 0x25e4 [0163.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kwajalein")) returned 0x20 [0166.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein", dwFileAttributes=0x20) returned 0 [0166.369] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\kwajalein"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.369] GetLastError () returned 0x5 [0166.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein", dwFileAttributes=0x20) returned 0 [0166.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23e60) returned 1 Thread: id = 3401 os_tid = 0x25e8 [0163.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\majuro")) returned 0x20 [0166.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro", dwFileAttributes=0x20) returned 0 [0166.396] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\majuro"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.396] GetLastError () returned 0x5 [0166.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Majuro", dwFileAttributes=0x20) returned 0 [0166.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ae0) returned 1 Thread: id = 3402 os_tid = 0x25ec [0163.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\marquesas")) returned 0x20 [0166.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas", dwFileAttributes=0x20) returned 0 [0166.367] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\marquesas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.368] GetLastError () returned 0x5 [0166.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas", dwFileAttributes=0x20) returned 0 [0166.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 Thread: id = 3403 os_tid = 0x25f0 [0163.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\midway")) returned 0x20 [0166.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway", dwFileAttributes=0x20) returned 0 [0166.394] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\midway"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.394] GetLastError () returned 0x5 [0166.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Midway", dwFileAttributes=0x20) returned 0 [0166.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23140) returned 1 Thread: id = 3404 os_tid = 0x25f4 [0163.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\nauru")) returned 0x20 [0166.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru", dwFileAttributes=0x20) returned 0 [0166.392] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\nauru"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.392] GetLastError () returned 0x5 [0166.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Nauru", dwFileAttributes=0x20) returned 0 [0166.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d8f0) returned 1 Thread: id = 3405 os_tid = 0x25f8 [0163.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\niue")) returned 0x20 [0166.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue", dwFileAttributes=0x20) returned 0 [0166.390] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\niue"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.390] GetLastError () returned 0x5 [0166.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Niue", dwFileAttributes=0x20) returned 0 [0166.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 Thread: id = 3406 os_tid = 0x25fc [0163.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\norfolk")) returned 0x20 [0166.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk", dwFileAttributes=0x20) returned 0 [0166.388] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\norfolk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.388] GetLastError () returned 0x5 [0166.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk", dwFileAttributes=0x20) returned 0 [0166.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a233e0) returned 1 Thread: id = 3407 os_tid = 0x2600 [0163.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\noumea")) returned 0x20 [0166.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea", dwFileAttributes=0x20) returned 0 [0166.355] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\noumea"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.356] GetLastError () returned 0x5 [0166.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Noumea", dwFileAttributes=0x20) returned 0 [0166.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23610) returned 1 Thread: id = 3408 os_tid = 0x2604 [0163.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pago_pago")) returned 0x20 [0165.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago", dwFileAttributes=0x20) returned 0 [0165.147] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pago_pago"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.794] GetLastError () returned 0x5 [0165.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago", dwFileAttributes=0x20) returned 0 [0165.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23300) returned 1 Thread: id = 3409 os_tid = 0x2608 [0163.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\palau")) returned 0x20 [0166.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau", dwFileAttributes=0x20) returned 0 [0166.387] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\palau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.387] GetLastError () returned 0x5 [0166.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Palau", dwFileAttributes=0x20) returned 0 [0166.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f150) returned 1 Thread: id = 3410 os_tid = 0x260c [0163.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pitcairn")) returned 0x20 [0166.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn", dwFileAttributes=0x20) returned 0 [0166.385] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pitcairn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.385] GetLastError () returned 0x5 [0166.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn", dwFileAttributes=0x20) returned 0 [0166.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26f58) returned 1 Thread: id = 3411 os_tid = 0x2610 [0163.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pohnpei")) returned 0x20 [0166.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei", dwFileAttributes=0x20) returned 0 [0166.383] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\pohnpei"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.384] GetLastError () returned 0x5 [0166.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei", dwFileAttributes=0x20) returned 0 [0166.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26008) returned 1 Thread: id = 3412 os_tid = 0x2614 [0163.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\port_moresby")) returned 0x20 [0166.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby", dwFileAttributes=0x20) returned 0 [0166.366] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\port_moresby"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.366] GetLastError () returned 0x5 [0166.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby", dwFileAttributes=0x20) returned 0 [0166.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 Thread: id = 3413 os_tid = 0x2618 [0163.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini")) returned 0x20 [0163.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.654] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.654] GetLastError () returned 0x5 [0163.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 3414 os_tid = 0x2628 [0163.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html")) returned 0x20 [0163.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", dwFileAttributes=0x20) returned 0 [0163.656] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.656] GetLastError () returned 0x5 [0163.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", dwFileAttributes=0x20) returned 0 [0163.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df18c8) returned 1 Thread: id = 3415 os_tid = 0x262c [0163.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini")) returned 0x20 [0163.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.658] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.658] GetLastError () returned 0x5 [0163.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 3416 os_tid = 0x2630 [0163.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html")) returned 0x20 [0163.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", dwFileAttributes=0x20) returned 0 [0163.660] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.660] GetLastError () returned 0x5 [0163.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", dwFileAttributes=0x20) returned 0 [0163.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 Thread: id = 3417 os_tid = 0x5d8 [0163.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini")) returned 0x20 [0163.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.662] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.662] GetLastError () returned 0x5 [0163.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 3418 os_tid = 0x2654 [0163.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html")) returned 0x20 [0163.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", dwFileAttributes=0x20) returned 0 [0163.664] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.664] GetLastError () returned 0x5 [0163.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", dwFileAttributes=0x20) returned 0 [0163.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 Thread: id = 3419 os_tid = 0x265c [0163.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini")) returned 0x20 [0163.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.665] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.666] GetLastError () returned 0x5 [0163.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 3420 os_tid = 0x2660 [0163.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html")) returned 0x20 [0163.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", dwFileAttributes=0x20) returned 0 [0163.667] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.667] GetLastError () returned 0x5 [0163.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", dwFileAttributes=0x20) returned 0 [0163.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1c28) returned 1 Thread: id = 3421 os_tid = 0x8fc [0163.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini")) returned 0x20 [0163.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.673] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.674] GetLastError () returned 0x5 [0163.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini", dwFileAttributes=0x20) returned 0 [0163.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 3422 os_tid = 0x131c [0163.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html")) returned 0x20 [0163.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", dwFileAttributes=0x20) returned 0 [0163.681] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.682] GetLastError () returned 0x5 [0163.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", dwFileAttributes=0x20) returned 0 [0163.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 Thread: id = 3423 os_tid = 0x1458 [0163.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav")) returned 0x20 [0163.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV", dwFileAttributes=0x20) returned 0 [0163.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.692] GetLastError () returned 0x5 [0163.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV", dwFileAttributes=0x20) returned 0 [0163.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 3424 os_tid = 0x1484 [0163.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav")) returned 0x20 [0163.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV", dwFileAttributes=0x20) returned 0 [0163.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.698] GetLastError () returned 0x5 [0163.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV", dwFileAttributes=0x20) returned 0 [0163.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a318) returned 1 Thread: id = 3425 os_tid = 0x16b0 [0163.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav")) returned 0x20 [0163.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV", dwFileAttributes=0x20) returned 0 [0163.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.701] GetLastError () returned 0x5 [0163.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV", dwFileAttributes=0x20) returned 0 [0163.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19398) returned 1 Thread: id = 3426 os_tid = 0x1760 [0163.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav")) returned 0x20 [0166.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV", dwFileAttributes=0x20) returned 0 [0166.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.097] GetLastError () returned 0x5 [0166.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV", dwFileAttributes=0x20) returned 0 [0166.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a298) returned 1 Thread: id = 3427 os_tid = 0x17a0 [0163.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav")) returned 0x20 [0166.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV", dwFileAttributes=0x20) returned 0 [0166.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.131] GetLastError () returned 0x5 [0166.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV", dwFileAttributes=0x20) returned 0 [0166.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19598) returned 1 Thread: id = 3428 os_tid = 0x17a8 [0163.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav")) returned 0x20 [0166.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV", dwFileAttributes=0x20) returned 0 [0166.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.147] GetLastError () returned 0x5 [0166.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV", dwFileAttributes=0x20) returned 0 [0166.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 3429 os_tid = 0x17ac [0163.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav")) returned 0x20 [0166.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV", dwFileAttributes=0x20) returned 0 [0166.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.145] GetLastError () returned 0x5 [0166.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV", dwFileAttributes=0x20) returned 0 [0166.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a718) returned 1 Thread: id = 3430 os_tid = 0x17b0 [0163.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav")) returned 0x20 [0166.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV", dwFileAttributes=0x20) returned 0 [0166.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.143] GetLastError () returned 0x5 [0166.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV", dwFileAttributes=0x20) returned 0 [0166.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19098) returned 1 Thread: id = 3431 os_tid = 0x17b4 [0163.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav")) returned 0x20 [0166.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV", dwFileAttributes=0x20) returned 0 [0166.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.141] GetLastError () returned 0x5 [0166.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV", dwFileAttributes=0x20) returned 0 [0166.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 3432 os_tid = 0x17b8 [0163.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav")) returned 0x20 [0166.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV", dwFileAttributes=0x20) returned 0 [0166.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.139] GetLastError () returned 0x5 [0166.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV", dwFileAttributes=0x20) returned 0 [0166.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 3433 os_tid = 0x17bc [0163.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav")) returned 0x20 [0166.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV", dwFileAttributes=0x20) returned 0 [0166.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.137] GetLastError () returned 0x5 [0166.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV", dwFileAttributes=0x20) returned 0 [0166.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 3434 os_tid = 0x17c0 [0163.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav")) returned 0x20 [0165.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV", dwFileAttributes=0x20) returned 0 [0165.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.937] GetLastError () returned 0x5 [0165.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV", dwFileAttributes=0x20) returned 0 [0165.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a618) returned 1 Thread: id = 3435 os_tid = 0x17c4 [0163.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav")) returned 0x20 [0166.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0166.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.154] GetLastError () returned 0x5 [0166.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0166.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 Thread: id = 3436 os_tid = 0x17c8 [0163.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav")) returned 0x20 [0166.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV", dwFileAttributes=0x20) returned 0 [0166.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.136] GetLastError () returned 0x5 [0166.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV", dwFileAttributes=0x20) returned 0 [0166.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19198) returned 1 Thread: id = 3437 os_tid = 0x17cc [0163.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav")) returned 0x20 [0166.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV", dwFileAttributes=0x20) returned 0 [0166.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.152] GetLastError () returned 0x5 [0166.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV", dwFileAttributes=0x20) returned 0 [0166.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 3438 os_tid = 0x17d0 [0163.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav")) returned 0x20 [0166.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV", dwFileAttributes=0x20) returned 0 [0166.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.134] GetLastError () returned 0x5 [0166.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV", dwFileAttributes=0x20) returned 0 [0166.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a398) returned 1 Thread: id = 3439 os_tid = 0x17d4 [0163.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav")) returned 0x20 [0166.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV", dwFileAttributes=0x20) returned 0 [0166.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.150] GetLastError () returned 0x5 [0166.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV", dwFileAttributes=0x20) returned 0 [0166.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 3440 os_tid = 0x17d8 [0163.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav")) returned 0x20 [0166.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0166.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.148] GetLastError () returned 0x5 [0166.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0166.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a698) returned 1 Thread: id = 3441 os_tid = 0x18ac [0163.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav")) returned 0x20 [0166.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV", dwFileAttributes=0x20) returned 0 [0166.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.133] GetLastError () returned 0x5 [0166.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV", dwFileAttributes=0x20) returned 0 [0166.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19d18) returned 1 Thread: id = 3442 os_tid = 0x18c8 [0163.713] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll")) returned 0x2020 [0163.713] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0163.713] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.722] GetLastError () returned 0x5 [0165.722] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681d0) returned 1 Thread: id = 3443 os_tid = 0x18d0 [0163.714] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll")) returned 0x2020 [0163.714] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0163.714] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.721] GetLastError () returned 0x5 [0165.721] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 Thread: id = 3444 os_tid = 0x1908 [0163.715] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll")) returned 0x2020 [0163.715] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0163.715] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.142] GetLastError () returned 0x5 [0165.142] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62810) returned 1 Thread: id = 3445 os_tid = 0x1960 [0163.715] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll")) returned 0x2020 [0163.715] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0163.716] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.094] GetLastError () returned 0x5 [0166.094] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0166.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 3446 os_tid = 0x1c00 [0163.716] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll")) returned 0x2020 [0165.779] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.779] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.779] GetLastError () returned 0x5 [0165.780] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a626d0) returned 1 Thread: id = 3447 os_tid = 0x1c10 [0163.716] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll")) returned 0x2020 [0165.781] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.781] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.781] GetLastError () returned 0x5 [0165.781] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5860) returned 1 Thread: id = 3448 os_tid = 0x1d64 [0163.717] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll")) returned 0x2020 [0165.783] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.783] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.783] GetLastError () returned 0x5 [0165.783] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 3449 os_tid = 0x1d94 [0163.717] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll")) returned 0x2020 [0165.785] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.785] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.785] GetLastError () returned 0x5 [0165.785] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb61e0) returned 1 Thread: id = 3450 os_tid = 0x1e0c [0163.718] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll")) returned 0x2020 [0165.744] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.744] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.745] GetLastError () returned 0x5 [0165.745] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5a28) returned 1 Thread: id = 3451 os_tid = 0x1e10 [0163.718] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll")) returned 0x2020 [0165.752] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.752] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.752] GetLastError () returned 0x5 [0165.752] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7318) returned 1 Thread: id = 3452 os_tid = 0x1e5c [0163.718] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll")) returned 0x2020 [0165.754] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.754] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.754] GetLastError () returned 0x5 [0165.754] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 3453 os_tid = 0x1e60 [0163.719] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll")) returned 0x2020 [0165.756] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.756] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.756] GetLastError () returned 0x5 [0165.756] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 Thread: id = 3454 os_tid = 0x1e64 [0163.719] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll")) returned 0x2020 [0165.758] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.758] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.758] GetLastError () returned 0x5 [0165.758] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7578) returned 1 Thread: id = 3455 os_tid = 0x1e68 [0163.720] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll")) returned 0x2020 [0165.759] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.760] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.760] GetLastError () returned 0x5 [0165.760] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7020) returned 1 Thread: id = 3456 os_tid = 0x1e6c [0163.720] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll")) returned 0x2020 [0165.761] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.761] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.762] GetLastError () returned 0x5 [0165.762] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6900) returned 1 Thread: id = 3457 os_tid = 0x1e70 [0163.721] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll")) returned 0x2020 [0165.764] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.764] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.765] GetLastError () returned 0x5 [0165.765] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63df0) returned 1 Thread: id = 3458 os_tid = 0x1e74 [0163.721] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll")) returned 0x2020 [0165.766] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.766] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.767] GetLastError () returned 0x5 [0165.767] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 3459 os_tid = 0x1e94 [0163.722] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll")) returned 0x2020 [0165.768] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.768] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.768] GetLastError () returned 0x5 [0165.768] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 3460 os_tid = 0x1e98 [0163.722] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll")) returned 0x2020 [0165.770] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.770] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.770] GetLastError () returned 0x5 [0165.770] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64090) returned 1 Thread: id = 3461 os_tid = 0x1e9c [0163.723] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll")) returned 0x2020 [0165.772] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.772] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.772] GetLastError () returned 0x5 [0165.772] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64128) returned 1 Thread: id = 3462 os_tid = 0x1ea0 [0163.723] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll")) returned 0x2020 [0165.773] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.774] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.774] GetLastError () returned 0x5 [0165.774] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 3463 os_tid = 0x1ea4 [0163.723] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll")) returned 0x2020 [0165.775] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.775] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.776] GetLastError () returned 0x5 [0165.776] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a641c0) returned 1 Thread: id = 3464 os_tid = 0x1ea8 [0163.724] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll")) returned 0x2020 [0165.777] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0165.777] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.777] GetLastError () returned 0x5 [0165.778] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64258) returned 1 Thread: id = 3465 os_tid = 0x1eac [0163.846] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll")) returned 0x2020 [0165.151] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0165.151] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.151] GetLastError () returned 0x5 [0165.151] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0165.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65000) returned 1 Thread: id = 3466 os_tid = 0x1eb0 [0163.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf")) returned 0x20 [0163.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x20) returned 0 [0163.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.847] GetLastError () returned 0x5 [0163.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x20) returned 0 [0163.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 3467 os_tid = 0x1eb4 [0163.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf")) returned 0x20 [0163.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x20) returned 0 [0163.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0163.849] GetLastError () returned 0x5 [0163.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x20) returned 0 [0163.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 3468 os_tid = 0x1eb8 [0163.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf")) returned 0x20 [0165.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x20) returned 0 [0165.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.860] GetLastError () returned 0x5 [0165.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x20) returned 0 [0165.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 3469 os_tid = 0x1ebc [0163.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf")) returned 0x20 [0165.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x20) returned 0 [0165.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.864] GetLastError () returned 0x5 [0165.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x20) returned 0 [0165.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f3e0) returned 1 Thread: id = 3470 os_tid = 0x1ec0 [0163.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf")) returned 0x20 [0165.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x20) returned 0 [0165.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.866] GetLastError () returned 0x5 [0165.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x20) returned 0 [0165.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 3471 os_tid = 0x1ec4 [0163.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf")) returned 0x20 [0165.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x20) returned 0 [0165.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.868] GetLastError () returned 0x5 [0165.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x20) returned 0 [0165.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 3472 os_tid = 0x1ec8 [0163.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf")) returned 0x20 [0165.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x20) returned 0 [0165.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.870] GetLastError () returned 0x5 [0165.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x20) returned 0 [0165.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 3473 os_tid = 0x1ecc [0163.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf")) returned 0x20 [0165.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x20) returned 0 [0165.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.872] GetLastError () returned 0x5 [0165.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x20) returned 0 [0165.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 3474 os_tid = 0x1ed0 [0163.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid")) returned 0x20 [0165.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x20) returned 0 [0165.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.877] GetLastError () returned 0x5 [0165.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x20) returned 0 [0165.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 3475 os_tid = 0x1ed4 [0163.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x20 [0165.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x20) returned 0 [0165.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.879] GetLastError () returned 0x5 [0165.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x20) returned 0 [0165.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 3476 os_tid = 0x1ed8 [0163.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x20 [0165.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x20) returned 0 [0165.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.874] GetLastError () returned 0x5 [0165.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x20) returned 0 [0165.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 3477 os_tid = 0x1ee0 [0163.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x20 [0165.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x20) returned 0 [0165.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.881] GetLastError () returned 0x5 [0165.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x20) returned 0 [0165.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 3478 os_tid = 0x1ef4 [0163.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x20 [0165.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x20) returned 0 [0165.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.883] GetLastError () returned 0x5 [0165.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x20) returned 0 [0165.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 3479 os_tid = 0x1f18 [0163.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x20 [0165.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x20) returned 0 [0165.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.884] GetLastError () returned 0x5 [0165.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x20) returned 0 [0165.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 3480 os_tid = 0x1f1c [0163.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x20 [0165.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x20) returned 0 [0165.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.887] GetLastError () returned 0x5 [0165.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x20) returned 0 [0165.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 3481 os_tid = 0x1f20 [0163.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x20 [0165.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x20) returned 0 [0165.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.889] GetLastError () returned 0x5 [0165.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x20) returned 0 [0165.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 3482 os_tid = 0x1f24 [0163.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x20 [0165.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x20) returned 0 [0165.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.891] GetLastError () returned 0x5 [0165.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x20) returned 0 [0165.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 3483 os_tid = 0x1f28 [0163.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x20 [0165.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x20) returned 0 [0165.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.899] GetLastError () returned 0x5 [0165.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x20) returned 0 [0165.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 3484 os_tid = 0x1f30 [0163.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x20 [0165.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x20) returned 0 [0165.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.901] GetLastError () returned 0x5 [0165.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x20) returned 0 [0165.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 3485 os_tid = 0x1f34 [0163.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x20 [0165.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x20) returned 0 [0165.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.894] GetLastError () returned 0x5 [0165.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x20) returned 0 [0165.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 3486 os_tid = 0x1f38 [0163.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x20 [0165.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x20) returned 0 [0165.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.896] GetLastError () returned 0x5 [0165.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x20) returned 0 [0165.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 3487 os_tid = 0x1f3c [0163.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x20 [0165.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x20) returned 0 [0165.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.857] GetLastError () returned 0x5 [0165.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x20) returned 0 [0165.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 3488 os_tid = 0x1f40 [0163.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x20 [0165.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x20) returned 0 [0165.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.859] GetLastError () returned 0x5 [0165.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x20) returned 0 [0165.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 3489 os_tid = 0x1f44 [0163.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x20 [0165.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x20) returned 0 [0165.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.167] GetLastError () returned 0x5 [0165.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x20) returned 0 [0165.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 3490 os_tid = 0x1f48 [0165.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x20 [0165.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x20) returned 0 [0165.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.862] GetLastError () returned 0x5 [0165.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x20) returned 0 [0165.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 3491 os_tid = 0x1f4c [0165.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66140 [0165.064] wcscpy (in: _Dest=0x7a66140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" [0165.064] wcscat (in: _Dest=0x7a66140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\" [0165.064] wcscat (in: _Dest=0x7a66140, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*" [0165.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef26f0 [0165.064] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0166.158] wcscmp (_String1=".", _String2=".") returned 0 [0166.158] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.158] wcscmp (_String1="..", _String2=".") returned 1 [0166.158] wcscmp (_String1="..", _String2="..") returned 0 [0166.158] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.158] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0166.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef26f0) returned 1 [0166.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66140) returned 1 [0166.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 Thread: id = 3492 os_tid = 0x1f50 [0165.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a603f0 [0165.069] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0165.069] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0165.069] wcscat (in: _Dest=0x7a603f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*" [0165.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5e48 [0165.069] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3022350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0166.160] wcscmp (_String1=".", _String2=".") returned 0 [0166.160] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3022350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.160] wcscmp (_String1="..", _String2=".") returned 1 [0166.160] wcscmp (_String1="..", _String2="..") returned 0 [0166.160] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5272e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0166.160] wcscmp (_String1="metadata", _String2=".") returned 1 [0166.160] wcscmp (_String1="metadata", _String2="..") returned 1 [0166.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63ad0 [0166.160] wcscpy (in: _Dest=0x7a63ad0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0166.160] wcscat (in: _Dest=0x7a63ad0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0166.160] wcscat (in: _Dest=0x7a63ad0, _Source="metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" [0166.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208 [0166.517] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5209e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0166.517] wcscmp (_String1="reports", _String2=".") returned 1 [0166.517] wcscmp (_String1="reports", _String2="..") returned 1 [0166.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d078 [0166.517] wcscpy (in: _Dest=0x32d078, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0166.517] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0166.517] wcscat (in: _Dest=0x32d078, _Source="reports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0166.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0166.519] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbba09b80, ftLastWriteTime.dwHighDateTime=0x1d2da1f, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0166.519] wcscmp (_String1="settings.dat", _String2=".") returned 1 [0166.519] wcscmp (_String1="settings.dat", _String2="..") returned 1 [0166.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053330 [0166.519] wcscpy (in: _Dest=0x3053330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" [0166.519] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0166.519] wcscat (in: _Dest=0x3053330, _Source="settings.dat" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" [0166.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0166.520] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3022350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbba09b80, ftLastWriteTime.dwHighDateTime=0x1d2da1f, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0166.520] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0166.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e48) returned 1 [0166.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 [0166.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 3493 os_tid = 0x1f54 [0165.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a61b00 [0165.070] wcscpy (in: _Dest=0x7a61b00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0165.070] wcscat (in: _Dest=0x7a61b00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0165.070] wcscat (in: _Dest=0x7a61b00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*" [0165.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0165.070] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fd24d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d340 [0166.437] wcscmp (_String1=".", _String2=".") returned 0 [0166.437] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fd24d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.291] wcscmp (_String1="..", _String2=".") returned 1 [0167.291] wcscmp (_String1="..", _String2="..") returned 0 [0167.303] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0167.303] wcscmp (_String1="Cache", _String2=".") returned 1 [0167.303] wcscmp (_String1="Cache", _String2="..") returned 1 [0167.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6e60 [0167.303] wcscpy (in: _Dest=0x7ad6e60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0167.303] wcscat (in: _Dest=0x7ad6e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0167.303] wcscat (in: _Dest=0x7ad6e60, _Source="Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0169.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0169.311] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f39f50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0169.312] wcscmp (_String1="Cookies", _String2=".") returned 1 [0169.312] wcscmp (_String1="Cookies", _String2="..") returned 1 [0169.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad6ef8 [0169.312] wcscpy (in: _Dest=0x7ad6ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.312] wcscat (in: _Dest=0x7ad6ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.312] wcscat (in: _Dest=0x7ad6ef8, _Source="Cookies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" [0169.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0169.313] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fd24d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0169.313] wcscmp (_String1="Cookies-journal", _String2=".") returned 1 [0169.313] wcscmp (_String1="Cookies-journal", _String2="..") returned 1 [0169.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f638 [0169.313] wcscpy (in: _Dest=0x7a5f638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.313] wcscat (in: _Dest=0x7a5f638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.314] wcscat (in: _Dest=0x7a5f638, _Source="Cookies-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" [0169.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0169.315] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe654ffa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe654ffa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8a55840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0169.315] wcscmp (_String1="Current Session", _String2=".") returned 1 [0169.315] wcscmp (_String1="Current Session", _String2="..") returned 1 [0169.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e678 [0169.315] wcscpy (in: _Dest=0x7a5e678, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.315] wcscat (in: _Dest=0x7a5e678, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.315] wcscat (in: _Dest=0x7a5e678, _Source="Current Session" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" [0169.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0169.317] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8d4ad70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8d4ad70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0169.317] wcscmp (_String1="Current Tabs", _String2=".") returned 1 [0169.317] wcscmp (_String1="Current Tabs", _String2="..") returned 1 [0169.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63b70 [0169.317] wcscpy (in: _Dest=0x7a63b70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.317] wcscat (in: _Dest=0x7a63b70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.317] wcscat (in: _Dest=0x7a63b70, _Source="Current Tabs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" [0169.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0169.318] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0169.318] wcscmp (_String1="data_reduction_proxy_leveldb", _String2=".") returned 1 [0169.318] wcscmp (_String1="data_reduction_proxy_leveldb", _String2="..") returned 1 [0169.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66318 [0169.319] wcscpy (in: _Dest=0x3e66318, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.319] wcscat (in: _Dest=0x3e66318, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.319] wcscat (in: _Dest=0x3e66318, _Source="data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0169.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e66318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0169.320] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f94030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5030430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~2")) returned 1 [0169.320] wcscmp (_String1="Extension Rules", _String2=".") returned 1 [0169.320] wcscmp (_String1="Extension Rules", _String2="..") returned 1 [0169.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e288 [0169.320] wcscpy (in: _Dest=0x7a5e288, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.320] wcscat (in: _Dest=0x7a5e288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.320] wcscat (in: _Dest=0x7a5e288, _Source="Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0169.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5e288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0169.322] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c17230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~3")) returned 1 [0169.322] wcscmp (_String1="Extension State", _String2=".") returned 1 [0169.322] wcscmp (_String1="Extension State", _String2="..") returned 1 [0169.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e870 [0169.322] wcscpy (in: _Dest=0x7a5e870, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.322] wcscat (in: _Dest=0x7a5e870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.322] wcscat (in: _Dest=0x7a5e870, _Source="Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0169.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5e870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0169.324] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6173350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6173350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0169.324] wcscmp (_String1="Extensions", _String2=".") returned 1 [0169.324] wcscmp (_String1="Extensions", _String2="..") returned 1 [0169.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62a90 [0169.324] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.324] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.324] wcscat (in: _Dest=0x7a62a90, _Source="Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0169.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0169.325] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f2b540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f2b540, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0169.325] wcscmp (_String1="Favicons", _String2=".") returned 1 [0169.325] wcscmp (_String1="Favicons", _String2="..") returned 1 [0169.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6dc8 [0169.326] wcscpy (in: _Dest=0x7ad6dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.326] wcscat (in: _Dest=0x7ad6dc8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.326] wcscat (in: _Dest=0x7ad6dc8, _Source="Favicons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" [0169.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c [0169.327] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0169.327] wcscmp (_String1="Favicons-journal", _String2=".") returned 1 [0169.327] wcscmp (_String1="Favicons-journal", _String2="..") returned 1 [0169.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f6e0 [0169.327] wcscpy (in: _Dest=0x7a5f6e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.327] wcscat (in: _Dest=0x7a5f6e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.327] wcscat (in: _Dest=0x7a5f6e0, _Source="Favicons-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" [0169.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0169.329] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0169.329] wcscmp (_String1="Google Profile.ico", _String2=".") returned 1 [0169.329] wcscmp (_String1="Google Profile.ico", _String2="..") returned 1 [0169.329] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3283950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3283950, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8cb27f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0169.329] wcscmp (_String1="History", _String2=".") returned 1 [0169.329] wcscmp (_String1="History", _String2="..") returned 1 [0169.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x7ad5998 [0169.329] wcscpy (in: _Dest=0x7ad5998, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.329] wcscat (in: _Dest=0x7ad5998, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.329] wcscat (in: _Dest=0x7ad5998, _Source="History" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" [0169.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad5998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0169.331] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4ea9260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ea9260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8ac3610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x7df, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0169.331] wcscmp (_String1="History Provider Cache", _String2=".") returned 1 [0169.331] wcscmp (_String1="History Provider Cache", _String2="..") returned 1 [0169.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf238 [0169.331] wcscpy (in: _Dest=0x3eaf238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.331] wcscat (in: _Dest=0x3eaf238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.331] wcscat (in: _Dest=0x3eaf238, _Source="History Provider Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" [0169.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0169.332] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3283950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3283950, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8cd8950, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0169.332] wcscmp (_String1="History-journal", _String2=".") returned 1 [0169.333] wcscmp (_String1="History-journal", _String2="..") returned 1 [0169.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f248 [0169.333] wcscpy (in: _Dest=0x7a5f248, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.333] wcscat (in: _Dest=0x7a5f248, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.333] wcscat (in: _Dest=0x7a5f248, _Source="History-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" [0169.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0169.334] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~1")) returned 1 [0169.334] wcscmp (_String1="JumpListIcons", _String2=".") returned 1 [0169.334] wcscmp (_String1="JumpListIcons", _String2="..") returned 1 [0169.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f0f8 [0169.334] wcscpy (in: _Dest=0x7a5f0f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.334] wcscat (in: _Dest=0x7a5f0f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.335] wcscat (in: _Dest=0x7a5f0f8, _Source="JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0169.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5f0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0169.336] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74cf430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74cf430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0169.336] wcscmp (_String1="Local Extension Settings", _String2=".") returned 1 [0169.336] wcscmp (_String1="Local Extension Settings", _String2="..") returned 1 [0169.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaef58 [0169.336] wcscpy (in: _Dest=0x3eaef58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.336] wcscat (in: _Dest=0x3eaef58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.336] wcscat (in: _Dest=0x3eaef58, _Source="Local Extension Settings" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0169.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eaef58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0169.338] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0169.338] wcscmp (_String1="Login Data", _String2=".") returned 1 [0169.338] wcscmp (_String1="Login Data", _String2="..") returned 1 [0169.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63a30 [0169.338] wcscpy (in: _Dest=0x7a63a30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.338] wcscat (in: _Dest=0x7a63a30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.338] wcscat (in: _Dest=0x7a63a30, _Source="Login Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" [0169.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0169.340] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0169.340] wcscmp (_String1="Login Data-journal", _String2=".") returned 1 [0169.340] wcscmp (_String1="Login Data-journal", _String2="..") returned 1 [0169.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c588 [0169.340] wcscpy (in: _Dest=0x35c588, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.340] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.340] wcscat (in: _Dest=0x35c588, _Source="Login Data-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" [0169.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0169.342] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56a0360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56a0360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe583ccf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0169.342] wcscmp (_String1="Network Action Predictor", _String2=".") returned 1 [0169.342] wcscmp (_String1="Network Action Predictor", _String2="..") returned 1 [0169.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaeb08 [0169.342] wcscpy (in: _Dest=0x3eaeb08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.342] wcscat (in: _Dest=0x3eaeb08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.342] wcscat (in: _Dest=0x3eaeb08, _Source="Network Action Predictor" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" [0169.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaeb08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0169.344] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56a2a70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56a2a70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe586b320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0169.344] wcscmp (_String1="Network Action Predictor-journal", _String2=".") returned 1 [0169.344] wcscmp (_String1="Network Action Predictor-journal", _String2="..") returned 1 [0169.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e3a120 [0169.344] wcscpy (in: _Dest=0x3e3a120, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.344] wcscat (in: _Dest=0x3e3a120, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.344] wcscat (in: _Dest=0x3e3a120, _Source="Network Action Predictor-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" [0169.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0169.346] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8d4ad70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8d4ad70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1 [0169.346] wcscmp (_String1="Network Persistent State", _String2=".") returned 1 [0169.346] wcscmp (_String1="Network Persistent State", _String2="..") returned 1 [0169.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaede8 [0169.346] wcscpy (in: _Dest=0x3eaede8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.346] wcscat (in: _Dest=0x3eaede8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.346] wcscat (in: _Dest=0x3eaede8, _Source="Network Persistent State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" [0169.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaede8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0169.647] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b84760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b84760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f86210, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0169.647] wcscmp (_String1="Origin Bound Certs", _String2=".") returned 1 [0169.647] wcscmp (_String1="Origin Bound Certs", _String2="..") returned 1 [0169.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bdf8 [0169.648] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0169.648] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0169.648] wcscat (in: _Dest=0x35bdf8, _Source="Origin Bound Certs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" [0170.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0170.810] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b84760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b84760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f86210, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0170.811] wcscmp (_String1="Origin Bound Certs-journal", _String2=".") returned 1 [0170.811] wcscmp (_String1="Origin Bound Certs-journal", _String2="..") returned 1 [0170.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e65dd8 [0170.811] wcscpy (in: _Dest=0x3e65dd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.811] wcscat (in: _Dest=0x3e65dd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.811] wcscat (in: _Dest=0x3e65dd8, _Source="Origin Bound Certs-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" [0170.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0170.817] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8fac370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8fac370, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8fac370, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1a55, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0170.817] wcscmp (_String1="Preferences", _String2=".") returned 1 [0170.817] wcscmp (_String1="Preferences", _String2="..") returned 1 [0170.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a633f0 [0170.817] wcscpy (in: _Dest=0x7a633f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.817] wcscat (in: _Dest=0x7a633f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.817] wcscat (in: _Dest=0x7a633f0, _Source="Preferences" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" [0170.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a633f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0170.819] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4309900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0170.819] wcscmp (_String1="previews_opt_out.db", _String2=".") returned 1 [0170.819] wcscmp (_String1="previews_opt_out.db", _String2="..") returned 1 [0170.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a661f0 [0170.819] wcscpy (in: _Dest=0x7a661f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.819] wcscat (in: _Dest=0x7a661f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.819] wcscat (in: _Dest=0x7a661f0, _Source="previews_opt_out.db" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" [0170.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a661f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0170.821] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0170.821] wcscmp (_String1="previews_opt_out.db-journal", _String2=".") returned 1 [0170.821] wcscmp (_String1="previews_opt_out.db-journal", _String2="..") returned 1 [0170.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66498 [0170.821] wcscpy (in: _Dest=0x3e66498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.821] wcscat (in: _Dest=0x3e66498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.821] wcscat (in: _Dest=0x3e66498, _Source="previews_opt_out.db-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" [0170.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0170.826] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31c5270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31c5270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe31c5270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1 [0170.826] wcscmp (_String1="README", _String2=".") returned 1 [0170.826] wcscmp (_String1="README", _String2="..") returned 1 [0170.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb73b0 [0170.826] wcscpy (in: _Dest=0x3eb73b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.826] wcscat (in: _Dest=0x3eb73b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.826] wcscat (in: _Dest=0x3eb73b0, _Source="README" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" [0170.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb73b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0170.827] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8f13df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8f13df0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8f13df0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x7799, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0170.827] wcscmp (_String1="Secure Preferences", _String2=".") returned 1 [0170.827] wcscmp (_String1="Secure Preferences", _String2="..") returned 1 [0170.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66140 [0170.828] wcscpy (in: _Dest=0x7a66140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.828] wcscat (in: _Dest=0x7a66140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.828] wcscat (in: _Dest=0x7a66140, _Source="Secure Preferences" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" [0170.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0170.829] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe55ff140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe55ff140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5652160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0170.829] wcscmp (_String1="Shortcuts", _String2=".") returned 1 [0170.829] wcscmp (_String1="Shortcuts", _String2="..") returned 1 [0170.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62770 [0170.830] wcscpy (in: _Dest=0x7a62770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.830] wcscat (in: _Dest=0x7a62770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.830] wcscat (in: _Dest=0x7a62770, _Source="Shortcuts" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" [0170.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740 [0170.831] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5601850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5601850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5682ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0170.831] wcscmp (_String1="Shortcuts-journal", _String2=".") returned 1 [0170.831] wcscmp (_String1="Shortcuts-journal", _String2="..") returned 1 [0170.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66770 [0170.831] wcscpy (in: _Dest=0x7a66770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.831] wcscat (in: _Dest=0x7a66770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.832] wcscat (in: _Dest=0x7a66770, _Source="Shortcuts-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" [0170.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0170.833] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd3130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0170.833] wcscmp (_String1="Top Sites", _String2=".") returned 1 [0170.833] wcscmp (_String1="Top Sites", _String2="..") returned 1 [0170.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63710 [0170.833] wcscpy (in: _Dest=0x7a63710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.833] wcscat (in: _Dest=0x7a63710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.833] wcscat (in: _Dest=0x7a63710, _Source="Top Sites" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" [0170.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0170.834] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0170.834] wcscmp (_String1="Top Sites-journal", _String2=".") returned 1 [0170.834] wcscmp (_String1="Top Sites-journal", _String2="..") returned 1 [0170.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66ae0 [0170.835] wcscpy (in: _Dest=0x7a66ae0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.835] wcscat (in: _Dest=0x7a66ae0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.835] wcscat (in: _Dest=0x7a66ae0, _Source="Top Sites-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" [0170.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0170.836] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8e09450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8e09450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8e09450, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0170.836] wcscmp (_String1="TransportSecurity", _String2=".") returned 1 [0170.836] wcscmp (_String1="TransportSecurity", _String2="..") returned 1 [0170.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a668d0 [0170.836] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.836] wcscat (in: _Dest=0x7a668d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.836] wcscat (in: _Dest=0x7a668d0, _Source="TransportSecurity" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" [0170.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a668d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0170.838] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41fef60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41fef60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0170.838] wcscmp (_String1="Visited Links", _String2=".") returned 1 [0170.838] wcscmp (_String1="Visited Links", _String2="..") returned 1 [0170.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053330 [0170.838] wcscpy (in: _Dest=0x3053330, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.838] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.838] wcscat (in: _Dest=0x3053330, _Source="Visited Links" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" [0170.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0170.839] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6626d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6626d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0170.839] wcscmp (_String1="Web Applications", _String2=".") returned 1 [0170.840] wcscmp (_String1="Web Applications", _String2="..") returned 1 [0170.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f8d8 [0170.840] wcscpy (in: _Dest=0x7a5f8d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.840] wcscat (in: _Dest=0x7a5f8d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.840] wcscat (in: _Dest=0x7a5f8d8, _Source="Web Applications" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0170.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5f8d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0170.841] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31eb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31eb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a99d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0170.841] wcscmp (_String1="Web Data", _String2=".") returned 1 [0170.841] wcscmp (_String1="Web Data", _String2="..") returned 1 [0170.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x3eb6900 [0170.841] wcscpy (in: _Dest=0x3eb6900, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.842] wcscat (in: _Dest=0x3eb6900, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.842] wcscat (in: _Dest=0x3eb6900, _Source="Web Data" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" [0170.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0170.843] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31eb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31eb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c6e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0170.843] wcscmp (_String1="Web Data-journal", _String2=".") returned 1 [0170.843] wcscmp (_String1="Web Data-journal", _String2="..") returned 1 [0170.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f398 [0170.843] wcscpy (in: _Dest=0x7a5f398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default" [0170.843] wcscat (in: _Dest=0x7a5f398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0170.843] wcscat (in: _Dest=0x7a5f398, _Source="Web Data-journal" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" [0170.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0170.845] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31eb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe31eb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c6e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 0 [0170.845] FindClose (in: hFindFile=0x7a2d340 | out: hFindFile=0x7a2d340) returned 1 [0170.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0170.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b00) returned 1 [0170.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 3494 os_tid = 0x1f58 [0165.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a64f68 [0165.071] wcscpy (in: _Dest=0x7a64f68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" [0165.071] wcscat (in: _Dest=0x7a64f68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\" [0165.071] wcscat (in: _Dest=0x7a64f68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*" [0165.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0165.071] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0166.163] wcscmp (_String1=".", _String2=".") returned 0 [0166.163] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.163] wcscmp (_String1="..", _String2=".") returned 1 [0166.163] wcscmp (_String1="..", _String2="..") returned 0 [0166.163] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.163] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0166.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0166.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64f68) returned 1 [0166.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 Thread: id = 3495 os_tid = 0x1f5c [0165.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5d60 [0165.071] wcscpy (in: _Dest=0x3df5d60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" [0165.071] wcscat (in: _Dest=0x3df5d60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\" [0165.093] wcscat (in: _Dest=0x3df5d60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*" [0165.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4b08 [0165.093] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0166.165] wcscmp (_String1=".", _String2=".") returned 0 [0166.165] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.165] wcscmp (_String1="..", _String2=".") returned 1 [0166.165] wcscmp (_String1="..", _String2="..") returned 0 [0166.165] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.165] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0166.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b08) returned 1 [0166.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5d60) returned 1 [0166.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64b40) returned 1 Thread: id = 3496 os_tid = 0x1f60 [0165.093] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\first run")) returned 0x2020 [0166.193] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", dwFileAttributes=0x20) returned 1 [0166.193] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1208 [0166.193] GetFileSizeEx (in: hFile=0x1208, lpFileSize=0x86afc0c | out: lpFileSize=0x86afc0c*=0) returned 1 [0166.193] FlushFileBuffers (hFile=0x1208) returned 1 [0166.439] CloseHandle (hObject=0x1208) returned 1 [0166.439] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", dwFileAttributes=0x2020) returned 1 [0166.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 3497 os_tid = 0x1f64 [0165.094] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\local state")) returned 0x2020 [0166.167] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", dwFileAttributes=0x20) returned 1 [0166.171] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1088 [0166.171] GetFileSizeEx (in: hFile=0x1088, lpFileSize=0x938fb7c | out: lpFileSize=0x938fb7c*=67147) returned 1 [0166.171] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x10647, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.171] ReadFile (in: hFile=0x1088, lpBuffer=0x938fb58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x938fb68, lpOverlapped=0x0 | out: lpBuffer=0x938fb58*, lpNumberOfBytesRead=0x938fb68*=0x4, lpOverlapped=0x0) returned 1 [0166.174] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0166.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535d0 [0166.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0166.174] NtQuerySystemTime (in: CurrentTime=0x938faf0 | out: CurrentTime=0x938faf0*=132462177447504000) returned 0x0 [0166.174] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x51c77040 [0166.174] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x189c24a0 [0166.174] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0xc22e7b3 [0166.174] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x62529564 [0166.174] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x479bd246 [0166.174] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x33208922 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x84a49d3 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x509a2b3e [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x5a51cfa7 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x7537a8e8 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x48824e98 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x154b7901 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x193e199d [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x65427c0 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0xb6aa430 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x294e41a8 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x5632272f [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x58199a89 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x5c16f6d [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x514e1810 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x28378a85 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x2af104fc [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x6e998bc2 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x45056c80 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x309c3fe5 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x65e0c4eb [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x1256240e [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x37d711e7 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x6a935083 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x64398e9 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x44eb7d13 [0166.175] RtlRandomEx (in: Seed=0x938fae8 | out: Seed=0x938fae8) returned 0x750e2ae6 [0166.187] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.187] ReadFile (in: hFile=0x1088, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x938faf0, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0x938faf0*=0x3c00, lpOverlapped=0x0) returned 1 [0166.188] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24ed8 [0166.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0166.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0166.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52ea0) returned 1 [0166.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0166.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0166.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0166.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0166.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0166.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ed8) returned 1 [0166.189] WriteFile (in: hFile=0x1088, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x938faf0, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x938faf0*=0x3c00, lpOverlapped=0x0) returned 1 [0167.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0167.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0167.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37500 [0167.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc68) returned 1 [0167.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37590 [0167.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0167.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4b8 [0167.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb4b8) returned 1 [0167.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0167.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e561c8) returned 1 [0167.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300d948 [0167.304] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.305] WriteFile (in: hFile=0x1088, lpBuffer=0x300d948*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x938fb70, lpOverlapped=0x0 | out: lpBuffer=0x300d948*, lpNumberOfBytesWritten=0x938fb70*=0x108, lpOverlapped=0x0) returned 1 [0169.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49650 [0169.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0169.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4c0 [0169.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd4c0) returned 1 [0169.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3e815c0 [0169.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4c0 [0169.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4b8 [0169.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb4b8) returned 1 [0169.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0169.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49650) returned 1 [0169.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x3e78fb0 [0169.855] sprintf (in: _Dest=0x3e78fb0, _Format="%c%c" | out: _Dest="4d") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fb2, _Format="%c%c" | out: _Dest="c6") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fb4, _Format="%c%c" | out: _Dest="6f") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fb6, _Format="%c%c" | out: _Dest="02") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fb8, _Format="%c%c" | out: _Dest="d6") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fba, _Format="%c%c" | out: _Dest="b0") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fbc, _Format="%c%c" | out: _Dest="e3") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fbe, _Format="%c%c" | out: _Dest="4b") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fc0, _Format="%c%c" | out: _Dest="e6") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fc2, _Format="%c%c" | out: _Dest="de") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fc4, _Format="%c%c" | out: _Dest="61") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fc6, _Format="%c%c" | out: _Dest="ea") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fc8, _Format="%c%c" | out: _Dest="23") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fca, _Format="%c%c" | out: _Dest="34") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fcc, _Format="%c%c" | out: _Dest="40") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fce, _Format="%c%c" | out: _Dest="00") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fd0, _Format="%c%c" | out: _Dest="22") returned 2 [0169.855] sprintf (in: _Dest=0x3e78fd2, _Format="%c%c" | out: _Dest="a0") returned 2 [0169.856] sprintf (in: _Dest=0x3e78fd4, _Format="%c%c" | out: _Dest="2c") returned 2 [0169.856] sprintf (in: _Dest=0x3e78fd6, _Format="%c%c" | out: _Dest="e3") returned 2 [0169.856] sprintf (in: _Dest=0x3e78fd8, _Format="%c%c" | out: _Dest="68") returned 2 [0169.856] sprintf (in: _Dest=0x3e78fda, _Format="%c%c" | out: _Dest="0d") returned 2 [0169.856] RtlInitAnsiString (in: DestinationString=0x938faf8, SourceString="4dc66f02d6b0e34be6de61ea2334400022a02ce3680d" | out: DestinationString="4dc66f02d6b0e34be6de61ea2334400022a02ce3680d") [0169.856] RtlAnsiStringToUnicodeString (in: DestinationString=0x938faf0, SourceString="4dc66f02d6b0e34be6de61ea2334400022a02ce3680d", AllocateDestinationString=1 | out: DestinationString="4dc66f02d6b0e34be6de61ea2334400022a02ce3680d") returned 0x0 [0169.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1ea68 [0169.856] wcscat (in: _Dest=0x7a621d0, _Source="4dc66f02d6b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\4dc66f02d6b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\4dc66f02d6b" [0169.856] wcscat (in: _Dest=0x7a621d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\4dc66f02d6b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\4dc66f02d6b.68814f" [0169.856] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\4dc66f02d6b.68814f", NtPathName=0x938fae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\4dc66f02d6b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0169.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3eaf5d0 [0169.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf5d0) returned 1 [0169.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4ad28) returned 1 [0169.863] NtQueryInformationFile (in: FileHandle=0x1088, IoStatusBlock=0x938fac0, FileInformation=0x938fac8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x938fac0, FileInformation=0x938fac8) returned 0x0 [0169.863] NtSetInformationFile (FileHandle=0x1088, IoStatusBlock=0x938fac0, FileInformation=0x938fac8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0169.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 [0169.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ea68) returned 1 [0169.866] FlushFileBuffers (hFile=0x1088) returned 1 [0169.868] CloseHandle (hObject=0x1088) returned 1 [0169.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a621d0 [0169.869] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\" [0169.869] wcscat (in: _Dest=0x7a621d0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\68814F-Readme.txt" [0169.869] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\68814f-readme.txt")) returned 0xffffffff [0169.869] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1088 [0169.870] WriteFile (in: hFile=0x1088, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x938fb04, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x938fb04*=0x8b9, lpOverlapped=0x0) returned 1 [0169.872] CloseHandle (hObject=0x1088) returned 1 [0169.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 [0169.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 3498 os_tid = 0x1f68 [0165.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7a65390 [0165.094] wcscpy (in: _Dest=0x7a65390, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" [0165.094] wcscat (in: _Dest=0x7a65390, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\" [0165.095] wcscat (in: _Dest=0x7a65390, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*" [0165.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef48a0 [0165.095] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0166.191] wcscmp (_String1=".", _String2=".") returned 0 [0166.191] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.191] wcscmp (_String1="..", _String2=".") returned 1 [0166.191] wcscmp (_String1="..", _String2="..") returned 0 [0166.191] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.191] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0166.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a0) returned 1 [0166.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65390) returned 1 [0166.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d459b0) returned 1 Thread: id = 3499 os_tid = 0x1f6c [0165.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a65260 [0165.095] wcscpy (in: _Dest=0x7a65260, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" [0165.095] wcscat (in: _Dest=0x7a65260, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\" [0165.095] wcscat (in: _Dest=0x7a65260, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*" [0165.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2bc0 [0165.095] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0166.195] wcscmp (_String1=".", _String2=".") returned 0 [0166.195] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.195] wcscmp (_String1="..", _String2=".") returned 1 [0166.195] wcscmp (_String1="..", _String2="..") returned 0 [0166.195] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.195] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0166.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2bc0) returned 1 [0166.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65260) returned 1 [0166.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45020) returned 1 Thread: id = 3500 os_tid = 0x1f70 [0165.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3062988 [0165.096] wcscpy (in: _Dest=0x3062988, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" [0165.096] wcscat (in: _Dest=0x3062988, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\" [0165.096] wcscat (in: _Dest=0x3062988, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*" [0165.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2958 [0165.096] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0166.197] wcscmp (_String1=".", _String2=".") returned 0 [0166.197] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.197] wcscmp (_String1="..", _String2=".") returned 1 [0166.197] wcscmp (_String1="..", _String2="..") returned 0 [0166.197] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.197] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0166.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2958) returned 1 [0166.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062988) returned 1 [0166.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 3501 os_tid = 0x1f74 [0165.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df59a0 [0165.097] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" [0165.097] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\" [0165.097] wcscat (in: _Dest=0x3df59a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*" [0165.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0165.097] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0166.198] wcscmp (_String1=".", _String2=".") returned 0 [0166.198] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.198] wcscmp (_String1="..", _String2=".") returned 1 [0166.198] wcscmp (_String1="..", _String2="..") returned 0 [0166.198] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.198] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0166.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0166.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 [0166.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 3502 os_tid = 0x1f78 [0165.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a65428 [0165.098] wcscpy (in: _Dest=0x7a65428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader" [0165.098] wcscat (in: _Dest=0x7a65428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\" [0165.098] wcscat (in: _Dest=0x7a65428, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\*" [0165.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0165.098] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwiftShader\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0166.200] wcscmp (_String1=".", _String2=".") returned 0 [0166.200] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.200] wcscmp (_String1="..", _String2=".") returned 1 [0166.200] wcscmp (_String1="..", _String2="..") returned 0 [0166.200] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4bd0a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4bd0a20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bd0a20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.201] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0166.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0166.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65428) returned 1 [0166.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 Thread: id = 3503 os_tid = 0x1f7c [0165.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x7a61b90 [0165.098] wcscpy (in: _Dest=0x7a61b90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" [0165.098] wcscat (in: _Dest=0x7a61b90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\" [0165.098] wcscat (in: _Dest=0x7a61b90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*" [0165.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1ce0 [0165.099] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0165.949] wcscmp (_String1=".", _String2=".") returned 0 [0165.949] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.949] wcscmp (_String1="..", _String2=".") returned 1 [0165.949] wcscmp (_String1="..", _String2="..") returned 0 [0165.949] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0165.949] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0165.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1ce0) returned 1 [0165.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b90) returned 1 [0165.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 Thread: id = 3504 os_tid = 0x1f80 [0165.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7a654c0 [0165.099] wcscpy (in: _Dest=0x7a654c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" [0165.099] wcscat (in: _Dest=0x7a654c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\" [0165.099] wcscat (in: _Dest=0x7a654c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*" [0165.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb45c8 [0165.099] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0166.156] wcscmp (_String1=".", _String2=".") returned 0 [0166.156] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.156] wcscmp (_String1="..", _String2=".") returned 1 [0166.156] wcscmp (_String1="..", _String2="..") returned 0 [0166.156] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4baa8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4baa8c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4baa8c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0166.156] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0166.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb45c8) returned 1 [0166.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a654c0) returned 1 [0166.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 3505 os_tid = 0x1f90 [0165.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini")) returned 0x20 [0165.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini", dwFileAttributes=0x20) returned 0 [0165.100] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.100] GetLastError () returned 0x5 [0165.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini", dwFileAttributes=0x20) returned 0 [0165.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 3506 os_tid = 0x1f94 [0165.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html")) returned 0x20 [0165.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", dwFileAttributes=0x20) returned 0 [0165.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.106] GetLastError () returned 0x5 [0165.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", dwFileAttributes=0x20) returned 0 [0165.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f90) returned 1 Thread: id = 3507 os_tid = 0x1f98 [0165.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld")) returned 0x20 [0165.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD", dwFileAttributes=0x20) returned 0 [0165.109] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.109] GetLastError () returned 0x5 [0165.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD", dwFileAttributes=0x20) returned 0 [0165.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63710) returned 1 Thread: id = 3508 os_tid = 0x1f9c [0165.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld")) returned 0x20 [0165.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD", dwFileAttributes=0x20) returned 0 [0165.111] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.111] GetLastError () returned 0x5 [0165.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD", dwFileAttributes=0x20) returned 0 [0165.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 3509 os_tid = 0x1fa0 [0165.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld")) returned 0x20 [0165.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD", dwFileAttributes=0x20) returned 0 [0165.116] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.117] GetLastError () returned 0x5 [0165.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD", dwFileAttributes=0x20) returned 0 [0165.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 Thread: id = 3510 os_tid = 0x1fa4 [0165.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld")) returned 0x20 [0165.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD", dwFileAttributes=0x20) returned 0 [0165.119] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.119] GetLastError () returned 0x5 [0165.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD", dwFileAttributes=0x20) returned 0 [0165.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 Thread: id = 3511 os_tid = 0x1fa8 [0165.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld")) returned 0x20 [0165.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD", dwFileAttributes=0x20) returned 0 [0165.120] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.121] GetLastError () returned 0x5 [0165.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD", dwFileAttributes=0x20) returned 0 [0165.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64848) returned 1 Thread: id = 3512 os_tid = 0x1fb0 [0165.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld")) returned 0x20 [0165.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD", dwFileAttributes=0x20) returned 0 [0165.122] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.123] GetLastError () returned 0x5 [0165.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD", dwFileAttributes=0x20) returned 0 [0165.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 3513 os_tid = 0x1fd4 [0165.236] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn")) returned 0x2022 [0165.240] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.244] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.251] GetLastError () returned 0x5 [0165.251] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 3514 os_tid = 0x1fd8 [0165.257] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn")) returned 0x2022 [0165.261] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.264] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.272] GetLastError () returned 0x5 [0165.272] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da63f0) returned 1 Thread: id = 3515 os_tid = 0x1fdc [0165.280] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn")) returned 0x2022 [0165.283] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.288] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.295] GetLastError () returned 0x5 [0165.295] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 3516 os_tid = 0x1fe0 [0165.301] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn")) returned 0x2022 [0165.304] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.308] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.316] GetLastError () returned 0x5 [0165.316] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4af0) returned 1 Thread: id = 3517 os_tid = 0x1fe4 [0165.327] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn")) returned 0x2022 [0165.333] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.336] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.344] GetLastError () returned 0x5 [0165.344] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 Thread: id = 3518 os_tid = 0x1fe8 [0165.352] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn")) returned 0x2022 [0165.356] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.359] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.366] GetLastError () returned 0x5 [0165.366] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5b70) returned 1 Thread: id = 3519 os_tid = 0x1fec [0165.372] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn")) returned 0x2022 [0165.376] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.379] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.386] GetLastError () returned 0x5 [0165.387] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60fc0) returned 1 Thread: id = 3520 os_tid = 0x1ff0 [0165.392] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn")) returned 0x2022 [0165.395] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.399] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.405] GetLastError () returned 0x5 [0165.405] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da65f0) returned 1 Thread: id = 3521 os_tid = 0x1ff4 [0165.410] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn")) returned 0x2022 [0165.413] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.416] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.421] GetLastError () returned 0x5 [0165.421] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da64f0) returned 1 Thread: id = 3522 os_tid = 0x1ff8 [0165.428] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn")) returned 0x2022 [0165.431] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.434] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.440] GetLastError () returned 0x5 [0165.440] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5d70) returned 1 Thread: id = 3523 os_tid = 0x1ffc [0165.445] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn")) returned 0x2022 [0165.449] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.452] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.460] GetLastError () returned 0x5 [0165.460] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 3524 os_tid = 0x80c [0165.466] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn")) returned 0x2022 [0165.470] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.473] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.481] GetLastError () returned 0x5 [0165.481] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da66f0) returned 1 Thread: id = 3525 os_tid = 0xff8 [0165.485] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn")) returned 0x2022 [0165.488] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x20) returned 0 [0165.491] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.497] GetLastError () returned 0x5 [0165.497] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", dwFileAttributes=0x2022) returned 0 [0165.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 3526 os_tid = 0x64c [0165.501] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl")) returned 0x2022 [0165.504] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x20) returned 0 [0165.508] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.514] GetLastError () returned 0x5 [0165.514] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x2022) returned 0 [0165.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b30) returned 1 Thread: id = 3527 os_tid = 0x2004 [0165.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf")) returned 0x20 [0166.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0166.404] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.404] GetLastError () returned 0x5 [0166.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0166.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 Thread: id = 3528 os_tid = 0x2008 [0165.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf")) returned 0x20 [0166.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0166.105] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.105] GetLastError () returned 0x5 [0166.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", dwFileAttributes=0x20) returned 0 [0166.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 Thread: id = 3529 os_tid = 0x200c [0165.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf")) returned 0x20 [0166.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0166.103] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.103] GetLastError () returned 0x5 [0166.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0166.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 Thread: id = 3530 os_tid = 0x2020 [0165.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf")) returned 0x20 [0166.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0166.408] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.408] GetLastError () returned 0x5 [0166.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0166.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a1e8) returned 1 Thread: id = 3531 os_tid = 0x2024 [0165.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62810 [0165.520] wcscpy (in: _Dest=0x7a62810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0165.520] wcscat (in: _Dest=0x7a62810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0165.520] wcscat (in: _Dest=0x7a62810, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*" [0165.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0165.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7d30 [0165.521] wcscmp (_String1=".", _String2=".") returned 0 [0165.521] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.521] wcscmp (_String1="..", _String2=".") returned 1 [0165.521] wcscmp (_String1="..", _String2="..") returned 0 [0165.521] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8256cd50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8256cd50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1 [0165.521] wcscmp (_String1="Components", _String2=".") returned 1 [0165.521] wcscmp (_String1="Components", _String2="..") returned 1 [0165.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x3eaf740 [0165.522] wcscpy (in: _Dest=0x3eaf740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0165.522] wcscat (in: _Dest=0x3eaf740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0165.522] wcscat (in: _Dest=0x3eaf740, _Source="Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" [0172.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eaf740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0172.848] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x904e1e90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1 [0172.848] wcscmp (_String1="ManagedObjects", _String2=".") returned 1 [0172.848] wcscmp (_String1="ManagedObjects", _String2="..") returned 1 [0172.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e66918 [0172.848] wcscpy (in: _Dest=0x3e66918, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0172.848] wcscat (in: _Dest=0x3e66918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0172.848] wcscat (in: _Dest=0x3e66918, _Source="ManagedObjects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" [0172.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e66918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0172.851] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 1 [0172.851] wcscmp (_String1="Servers", _String2=".") returned 1 [0172.851] wcscmp (_String1="Servers", _String2="..") returned 1 [0172.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c378 [0172.851] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net" [0172.851] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\" [0172.851] wcscat (in: _Dest=0x35c378, _Source="Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0172.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0172.855] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 0 [0172.855] FindClose (in: hFindFile=0x7ad7d30 | out: hFindFile=0x7ad7d30) returned 1 [0172.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0172.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62810) returned 1 [0172.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 Thread: id = 3532 os_tid = 0x2028 [0165.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62310 [0165.522] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" [0165.522] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\" [0165.522] wcscat (in: _Dest=0x7a62310, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*" [0165.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55cb8 [0165.522] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf510 [0166.099] wcscmp (_String1=".", _String2=".") returned 0 [0166.099] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851e8870, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0166.099] wcscmp (_String1="..", _String2=".") returned 1 [0166.099] wcscmp (_String1="..", _String2="..") returned 0 [0166.099] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1 [0166.099] wcscmp (_String1="Components", _String2=".") returned 1 [0166.099] wcscmp (_String1="Components", _String2="..") returned 1 [0166.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b5b8 [0166.100] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign" [0166.100] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\" [0166.100] wcscat (in: _Dest=0x35b5b8, _Source="Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0166.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0166.671] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 0 [0166.672] FindClose (in: hFindFile=0x3dcf510 | out: hFindFile=0x3dcf510) returned 1 [0166.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55cb8) returned 1 [0166.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 [0166.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 Thread: id = 3533 os_tid = 0x2030 [0165.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jayapura")) returned 0x20 [0165.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura", dwFileAttributes=0x20) returned 0 [0165.524] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jayapura"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.524] GetLastError () returned 0x5 [0165.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jayapura", dwFileAttributes=0x20) returned 0 [0165.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47b98) returned 1 Thread: id = 3534 os_tid = 0x2050 [0165.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jerusalem")) returned 0x20 [0165.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem", dwFileAttributes=0x20) returned 0 [0165.527] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\jerusalem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.528] GetLastError () returned 0x5 [0165.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem", dwFileAttributes=0x20) returned 0 [0165.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 Thread: id = 3535 os_tid = 0x2060 [0165.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kabul")) returned 0x20 [0166.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul", dwFileAttributes=0x20) returned 0 [0166.106] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kabul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.107] GetLastError () returned 0x5 [0166.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kabul", dwFileAttributes=0x20) returned 0 [0166.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 Thread: id = 3536 os_tid = 0x20a0 [0165.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kamchatka")) returned 0x20 [0166.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka", dwFileAttributes=0x20) returned 0 [0166.120] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kamchatka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.121] GetLastError () returned 0x5 [0166.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka", dwFileAttributes=0x20) returned 0 [0166.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 Thread: id = 3537 os_tid = 0x20d4 [0165.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\karachi")) returned 0x20 [0165.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi", dwFileAttributes=0x20) returned 0 [0165.909] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\karachi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.909] GetLastError () returned 0x5 [0165.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Karachi", dwFileAttributes=0x20) returned 0 [0165.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 Thread: id = 3538 os_tid = 0x20d8 [0165.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kashgar")) returned 0x20 [0165.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar", dwFileAttributes=0x20) returned 0 [0165.911] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kashgar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.911] GetLastError () returned 0x5 [0165.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kashgar", dwFileAttributes=0x20) returned 0 [0165.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0858) returned 1 Thread: id = 3539 os_tid = 0x20dc [0165.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx")) returned 0x20 [0165.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx", dwFileAttributes=0x20) returned 0 [0165.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.533] GetLastError () returned 0x5 [0165.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx", dwFileAttributes=0x20) returned 0 [0165.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 Thread: id = 3540 os_tid = 0x20e0 [0165.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx")) returned 0x20 [0165.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx", dwFileAttributes=0x20) returned 0 [0165.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.535] GetLastError () returned 0x5 [0165.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx", dwFileAttributes=0x20) returned 0 [0165.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 3541 os_tid = 0x20e4 [0165.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx")) returned 0x20 [0171.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx", dwFileAttributes=0x20) returned 0 [0171.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.013] GetLastError () returned 0x5 [0171.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx", dwFileAttributes=0x20) returned 0 [0171.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 Thread: id = 3542 os_tid = 0x20e8 [0165.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx")) returned 0x20 [0170.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx", dwFileAttributes=0x20) returned 0 [0170.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.994] GetLastError () returned 0x5 [0170.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx", dwFileAttributes=0x20) returned 0 [0170.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 Thread: id = 3543 os_tid = 0x20ec [0165.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx")) returned 0x20 [0171.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx", dwFileAttributes=0x20) returned 0 [0171.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.004] GetLastError () returned 0x5 [0171.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx", dwFileAttributes=0x20) returned 0 [0171.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053c60) returned 1 Thread: id = 3544 os_tid = 0x20f0 [0165.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx")) returned 0x20 [0170.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx", dwFileAttributes=0x20) returned 0 [0170.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.992] GetLastError () returned 0x5 [0170.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx", dwFileAttributes=0x20) returned 0 [0170.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 Thread: id = 3545 os_tid = 0x20f4 [0165.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx")) returned 0x20 [0171.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx", dwFileAttributes=0x20) returned 0 [0171.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.003] GetLastError () returned 0x5 [0171.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx", dwFileAttributes=0x20) returned 0 [0171.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 Thread: id = 3546 os_tid = 0x20f8 [0165.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx")) returned 0x20 [0171.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx", dwFileAttributes=0x20) returned 0 [0171.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.001] GetLastError () returned 0x5 [0171.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx", dwFileAttributes=0x20) returned 0 [0171.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 Thread: id = 3547 os_tid = 0x20fc [0165.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx")) returned 0x20 [0170.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx", dwFileAttributes=0x20) returned 0 [0170.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.990] GetLastError () returned 0x5 [0170.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx", dwFileAttributes=0x20) returned 0 [0170.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 3548 os_tid = 0x2100 [0165.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx")) returned 0x20 [0170.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx", dwFileAttributes=0x20) returned 0 [0170.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.999] GetLastError () returned 0x5 [0170.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx", dwFileAttributes=0x20) returned 0 [0171.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 Thread: id = 3549 os_tid = 0x2104 [0165.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx")) returned 0x20 [0170.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx", dwFileAttributes=0x20) returned 0 [0170.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.547] GetLastError () returned 0x5 [0170.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx", dwFileAttributes=0x20) returned 0 [0170.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66770) returned 1 Thread: id = 3550 os_tid = 0x2108 [0165.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx")) returned 0x20 [0171.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx", dwFileAttributes=0x20) returned 0 [0171.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.043] GetLastError () returned 0x5 [0171.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx", dwFileAttributes=0x20) returned 0 [0171.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053870) returned 1 Thread: id = 3551 os_tid = 0x210c [0165.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx")) returned 0x20 [0170.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx", dwFileAttributes=0x20) returned 0 [0170.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.998] GetLastError () returned 0x5 [0170.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx", dwFileAttributes=0x20) returned 0 [0170.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66400) returned 1 Thread: id = 3552 os_tid = 0x2110 [0165.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx")) returned 0x20 [0171.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx", dwFileAttributes=0x20) returned 0 [0171.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.041] GetLastError () returned 0x5 [0171.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx", dwFileAttributes=0x20) returned 0 [0171.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053528) returned 1 Thread: id = 3553 os_tid = 0x2114 [0165.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx")) returned 0x20 [0171.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx", dwFileAttributes=0x20) returned 0 [0171.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.039] GetLastError () returned 0x5 [0171.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx", dwFileAttributes=0x20) returned 0 [0171.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a664b0) returned 1 Thread: id = 3554 os_tid = 0x2118 [0165.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx")) returned 0x20 [0171.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx", dwFileAttributes=0x20) returned 0 [0171.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.034] GetLastError () returned 0x5 [0171.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx", dwFileAttributes=0x20) returned 0 [0171.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66350) returned 1 Thread: id = 3555 os_tid = 0x211c [0165.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx")) returned 0x20 [0170.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx", dwFileAttributes=0x20) returned 0 [0170.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.996] GetLastError () returned 0x5 [0170.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx", dwFileAttributes=0x20) returned 0 [0170.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053b10) returned 1 Thread: id = 3556 os_tid = 0x2120 [0165.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx")) returned 0x20 [0171.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx", dwFileAttributes=0x20) returned 0 [0171.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.032] GetLastError () returned 0x5 [0171.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx", dwFileAttributes=0x20) returned 0 [0171.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053138) returned 1 Thread: id = 3557 os_tid = 0x2124 [0165.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx")) returned 0x20 [0171.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx", dwFileAttributes=0x20) returned 0 [0171.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.030] GetLastError () returned 0x5 [0171.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx", dwFileAttributes=0x20) returned 0 [0171.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053678) returned 1 Thread: id = 3558 os_tid = 0x2128 [0165.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx")) returned 0x20 [0171.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx", dwFileAttributes=0x20) returned 0 [0171.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.028] GetLastError () returned 0x5 [0171.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx", dwFileAttributes=0x20) returned 0 [0171.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a662a0) returned 1 Thread: id = 3559 os_tid = 0x212c [0165.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx")) returned 0x20 [0171.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx", dwFileAttributes=0x20) returned 0 [0171.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.023] GetLastError () returned 0x5 [0171.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx", dwFileAttributes=0x20) returned 0 [0171.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 Thread: id = 3560 os_tid = 0x2130 [0165.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx")) returned 0x20 [0169.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx", dwFileAttributes=0x20) returned 0 [0169.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.980] GetLastError () returned 0x5 [0170.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx", dwFileAttributes=0x20) returned 0 [0170.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053d08) returned 1 Thread: id = 3561 os_tid = 0x2138 [0165.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx")) returned 0x20 [0171.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx", dwFileAttributes=0x20) returned 0 [0171.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.018] GetLastError () returned 0x5 [0171.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx", dwFileAttributes=0x20) returned 0 [0171.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052df0) returned 1 Thread: id = 3562 os_tid = 0x213c [0165.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx")) returned 0x20 [0171.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx", dwFileAttributes=0x20) returned 0 [0171.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.016] GetLastError () returned 0x5 [0171.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx", dwFileAttributes=0x20) returned 0 [0171.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 Thread: id = 3563 os_tid = 0x2140 [0165.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx")) returned 0x20 [0170.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx", dwFileAttributes=0x20) returned 0 [0170.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.587] GetLastError () returned 0x5 [0170.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx", dwFileAttributes=0x20) returned 0 [0170.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a661f0) returned 1 Thread: id = 3564 os_tid = 0x2144 [0165.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx")) returned 0x20 [0171.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx", dwFileAttributes=0x20) returned 0 [0171.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.015] GetLastError () returned 0x5 [0171.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx", dwFileAttributes=0x20) returned 0 [0171.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 Thread: id = 3565 os_tid = 0x215c [0165.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x7a618c0 [0165.920] wcscpy (in: _Dest=0x7a618c0, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0165.920] wcscat (in: _Dest=0x7a618c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0165.920] wcscat (in: _Dest=0x7a618c0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*" [0165.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0165.920] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0165.921] wcscmp (_String1=".", _String2=".") returned 0 [0165.921] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9fc83d1, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xf9fc83d1, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xf9fc83d1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.921] wcscmp (_String1="..", _String2=".") returned 1 [0165.921] wcscmp (_String1="..", _String2="..") returned 0 [0165.921] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6487b2e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x6487b2e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x112e5ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0165.921] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2=".") returned 1 [0165.921] wcscmp (_String1="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", _String2="..") returned 1 [0165.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadb30 [0165.921] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0165.921] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0165.922] wcscat (in: _Dest=0x3dadb30, _Source="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" [0172.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0172.286] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0172.286] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2=".") returned 1 [0172.286] wcscmp (_String1="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", _String2="..") returned 1 [0172.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dad468 [0172.286] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US" [0172.286] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\" [0172.286] wcscat (in: _Dest=0x3dad468, _Source="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" | out: _Dest="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms") returned="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" [0172.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dad468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0172.288] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa842865b, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xa842865b, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x1d9ced1c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0172.288] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0172.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0172.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a618c0) returned 1 [0172.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 3566 os_tid = 0x2194 [0165.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml")) returned 0x20 [0165.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", dwFileAttributes=0x20) returned 0 [0165.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0165.927] GetLastError () returned 0x5 [0165.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", dwFileAttributes=0x20) returned 0 [0165.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37cd8) returned 1 Thread: id = 3567 os_tid = 0x2198 [0165.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl")) returned 0x20 [0169.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL", dwFileAttributes=0x20) returned 0 [0169.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.821] GetLastError () returned 0x5 [0169.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL", dwFileAttributes=0x20) returned 0 [0169.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 Thread: id = 3568 os_tid = 0xc38 [0165.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb")) returned 0x20 [0167.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB", dwFileAttributes=0x20) returned 0 [0167.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.120] GetLastError () returned 0x5 [0169.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB", dwFileAttributes=0x20) returned 0 [0169.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 Thread: id = 3569 os_tid = 0x27a8 [0165.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest")) returned 0x20 [0169.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest", dwFileAttributes=0x20) returned 0 [0169.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.803] GetLastError () returned 0x5 [0169.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest", dwFileAttributes=0x20) returned 0 [0169.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60fc0) returned 1 Thread: id = 3570 os_tid = 0x26b8 [0165.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf")) returned 0x20 [0169.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF", dwFileAttributes=0x20) returned 0 [0169.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.823] GetLastError () returned 0x5 [0169.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF", dwFileAttributes=0x20) returned 0 [0169.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 Thread: id = 3571 os_tid = 0x26e0 [0165.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd")) returned 0x20 [0169.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD", dwFileAttributes=0x20) returned 0 [0169.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.825] GetLastError () returned 0x5 [0169.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD", dwFileAttributes=0x20) returned 0 [0169.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 Thread: id = 3572 os_tid = 0x26e4 [0165.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub")) returned 0x20 [0169.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub", dwFileAttributes=0x20) returned 0 [0169.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.497] GetLastError () returned 0x5 [0169.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub", dwFileAttributes=0x20) returned 0 [0169.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c98) returned 1 Thread: id = 3573 os_tid = 0x26e8 [0165.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub")) returned 0x20 [0169.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub", dwFileAttributes=0x20) returned 0 [0169.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.812] GetLastError () returned 0x5 [0169.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub", dwFileAttributes=0x20) returned 0 [0169.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46d98) returned 1 Thread: id = 3574 os_tid = 0x26ec [0165.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub")) returned 0x20 [0169.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub", dwFileAttributes=0x20) returned 0 [0169.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.811] GetLastError () returned 0x5 [0169.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub", dwFileAttributes=0x20) returned 0 [0169.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47098) returned 1 Thread: id = 3575 os_tid = 0x26f0 [0165.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub")) returned 0x20 [0169.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub", dwFileAttributes=0x20) returned 0 [0169.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.815] GetLastError () returned 0x5 [0169.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub", dwFileAttributes=0x20) returned 0 [0169.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46198) returned 1 Thread: id = 3576 os_tid = 0x26f4 [0165.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub")) returned 0x20 [0169.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub", dwFileAttributes=0x20) returned 0 [0169.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.809] GetLastError () returned 0x5 [0169.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub", dwFileAttributes=0x20) returned 0 [0169.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c98) returned 1 Thread: id = 3577 os_tid = 0x26f8 [0165.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub")) returned 0x20 [0169.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub", dwFileAttributes=0x20) returned 0 [0169.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.807] GetLastError () returned 0x5 [0169.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub", dwFileAttributes=0x20) returned 0 [0169.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a98) returned 1 Thread: id = 3578 os_tid = 0x26fc [0165.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic")) returned 0x20 [0169.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic", dwFileAttributes=0x20) returned 0 [0169.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.827] GetLastError () returned 0x5 [0169.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic", dwFileAttributes=0x20) returned 0 [0169.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 Thread: id = 3579 os_tid = 0x2708 [0165.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic")) returned 0x20 [0169.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic", dwFileAttributes=0x20) returned 0 [0169.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.828] GetLastError () returned 0x5 [0169.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic", dwFileAttributes=0x20) returned 0 [0169.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 Thread: id = 3580 os_tid = 0x270c [0165.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic")) returned 0x20 [0169.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic", dwFileAttributes=0x20) returned 0 [0169.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.801] GetLastError () returned 0x5 [0169.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic", dwFileAttributes=0x20) returned 0 [0169.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3efc0) returned 1 Thread: id = 3581 os_tid = 0x2714 [0165.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic")) returned 0x20 [0169.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic", dwFileAttributes=0x20) returned 0 [0169.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.830] GetLastError () returned 0x5 [0169.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic", dwFileAttributes=0x20) returned 0 [0169.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 Thread: id = 3582 os_tid = 0x271c [0165.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic")) returned 0x20 [0169.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic", dwFileAttributes=0x20) returned 0 [0169.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.832] GetLastError () returned 0x5 [0169.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic", dwFileAttributes=0x20) returned 0 [0169.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 Thread: id = 3583 os_tid = 0x2720 [0165.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic")) returned 0x20 [0169.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic", dwFileAttributes=0x20) returned 0 [0169.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.834] GetLastError () returned 0x5 [0169.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic", dwFileAttributes=0x20) returned 0 [0169.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 Thread: id = 3584 os_tid = 0x2728 [0165.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl")) returned 0x20 [0169.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL", dwFileAttributes=0x20) returned 0 [0169.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.376] GetLastError () returned 0x5 [0169.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL", dwFileAttributes=0x20) returned 0 [0169.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 Thread: id = 3585 os_tid = 0x2740 [0165.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb")) returned 0x20 [0169.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB", dwFileAttributes=0x20) returned 0 [0169.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.836] GetLastError () returned 0x5 [0169.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB", dwFileAttributes=0x20) returned 0 [0169.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 Thread: id = 3586 os_tid = 0x2744 [0165.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb")) returned 0x20 [0169.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB", dwFileAttributes=0x20) returned 0 [0169.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.817] GetLastError () returned 0x5 [0169.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB", dwFileAttributes=0x20) returned 0 [0169.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 Thread: id = 3587 os_tid = 0x2748 [0165.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb")) returned 0x20 [0169.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB", dwFileAttributes=0x20) returned 0 [0169.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.838] GetLastError () returned 0x5 [0169.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB", dwFileAttributes=0x20) returned 0 [0169.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 Thread: id = 3588 os_tid = 0x274c [0165.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest")) returned 0x20 [0169.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest", dwFileAttributes=0x20) returned 0 [0169.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.805] GetLastError () returned 0x5 [0169.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest", dwFileAttributes=0x20) returned 0 [0169.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 3589 os_tid = 0x2750 [0165.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb")) returned 0x20 [0169.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB", dwFileAttributes=0x20) returned 0 [0169.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.840] GetLastError () returned 0x5 [0169.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB", dwFileAttributes=0x20) returned 0 [0169.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 Thread: id = 3590 os_tid = 0x2754 [0166.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb")) returned 0x20 [0169.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB", dwFileAttributes=0x20) returned 0 [0169.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.819] GetLastError () returned 0x5 [0169.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB", dwFileAttributes=0x20) returned 0 [0169.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 Thread: id = 3591 os_tid = 0x2758 [0166.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv")) returned 0x20 [0166.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV", dwFileAttributes=0x20) returned 0 [0166.206] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.206] GetLastError () returned 0x5 [0166.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV", dwFileAttributes=0x20) returned 0 [0166.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a637b0) returned 1 Thread: id = 3592 os_tid = 0x275c [0166.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv")) returned 0x20 [0171.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV", dwFileAttributes=0x20) returned 0 [0171.822] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.823] GetLastError () returned 0x5 [0171.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV", dwFileAttributes=0x20) returned 0 [0171.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 Thread: id = 3593 os_tid = 0x2760 [0166.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv")) returned 0x20 [0171.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV", dwFileAttributes=0x20) returned 0 [0171.821] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.821] GetLastError () returned 0x5 [0171.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV", dwFileAttributes=0x20) returned 0 [0171.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63c10) returned 1 Thread: id = 3594 os_tid = 0x2764 [0166.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv")) returned 0x20 [0171.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV", dwFileAttributes=0x20) returned 0 [0171.845] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.845] GetLastError () returned 0x5 [0171.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV", dwFileAttributes=0x20) returned 0 [0171.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d440f0) returned 1 Thread: id = 3595 os_tid = 0x2768 [0166.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv")) returned 0x20 [0171.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV", dwFileAttributes=0x20) returned 0 [0171.819] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.819] GetLastError () returned 0x5 [0171.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV", dwFileAttributes=0x20) returned 0 [0171.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6150) returned 1 Thread: id = 3596 os_tid = 0x276c [0166.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv")) returned 0x20 [0171.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV", dwFileAttributes=0x20) returned 0 [0171.847] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.847] GetLastError () returned 0x5 [0171.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV", dwFileAttributes=0x20) returned 0 [0171.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 Thread: id = 3597 os_tid = 0x22b4 [0166.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv")) returned 0x20 [0171.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV", dwFileAttributes=0x20) returned 0 [0171.824] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.824] GetLastError () returned 0x5 [0171.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV", dwFileAttributes=0x20) returned 0 [0171.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 Thread: id = 3598 os_tid = 0x22b8 [0166.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv")) returned 0x20 [0171.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV", dwFileAttributes=0x20) returned 0 [0171.826] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.826] GetLastError () returned 0x5 [0171.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV", dwFileAttributes=0x20) returned 0 [0171.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 3599 os_tid = 0x22bc [0166.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv")) returned 0x20 [0171.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV", dwFileAttributes=0x20) returned 0 [0171.572] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.573] GetLastError () returned 0x5 [0171.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV", dwFileAttributes=0x20) returned 0 [0171.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 3600 os_tid = 0x22c0 [0166.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv")) returned 0x20 [0171.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV", dwFileAttributes=0x20) returned 0 [0171.828] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.828] GetLastError () returned 0x5 [0171.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV", dwFileAttributes=0x20) returned 0 [0171.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f00) returned 1 Thread: id = 3601 os_tid = 0x22c4 [0166.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv")) returned 0x20 [0171.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV", dwFileAttributes=0x20) returned 0 [0171.829] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.830] GetLastError () returned 0x5 [0171.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV", dwFileAttributes=0x20) returned 0 [0171.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 3602 os_tid = 0x22c8 [0166.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv")) returned 0x20 [0171.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV", dwFileAttributes=0x20) returned 0 [0171.809] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.810] GetLastError () returned 0x5 [0171.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV", dwFileAttributes=0x20) returned 0 [0171.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62e50) returned 1 Thread: id = 3603 os_tid = 0x22cc [0166.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv")) returned 0x20 [0171.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV", dwFileAttributes=0x20) returned 0 [0171.579] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.579] GetLastError () returned 0x5 [0171.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV", dwFileAttributes=0x20) returned 0 [0171.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6a38) returned 1 Thread: id = 3604 os_tid = 0x2770 [0166.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv")) returned 0x20 [0170.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV", dwFileAttributes=0x20) returned 0 [0170.605] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.131] GetLastError () returned 0x5 [0171.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV", dwFileAttributes=0x20) returned 0 [0171.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45800) returned 1 Thread: id = 3605 os_tid = 0x2774 [0166.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv")) returned 0x20 [0171.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV", dwFileAttributes=0x20) returned 0 [0171.831] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.831] GetLastError () returned 0x5 [0171.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV", dwFileAttributes=0x20) returned 0 [0171.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 Thread: id = 3606 os_tid = 0x22d8 [0166.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv")) returned 0x20 [0171.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV", dwFileAttributes=0x20) returned 0 [0171.840] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.840] GetLastError () returned 0x5 [0171.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV", dwFileAttributes=0x20) returned 0 [0171.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44960) returned 1 Thread: id = 3607 os_tid = 0x2778 [0166.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv")) returned 0x20 [0171.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV", dwFileAttributes=0x20) returned 0 [0171.838] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.839] GetLastError () returned 0x5 [0171.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV", dwFileAttributes=0x20) returned 0 [0171.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 Thread: id = 3608 os_tid = 0x277c [0166.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv")) returned 0x20 [0171.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV", dwFileAttributes=0x20) returned 0 [0171.836] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.837] GetLastError () returned 0x5 [0171.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV", dwFileAttributes=0x20) returned 0 [0171.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 Thread: id = 3609 os_tid = 0x22f4 [0166.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx")) returned 0x20 [0166.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0166.443] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.444] GetLastError () returned 0x5 [0166.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0166.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 3610 os_tid = 0x2788 [0166.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx")) returned 0x20 [0166.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0166.442] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.442] GetLastError () returned 0x5 [0166.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0166.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 Thread: id = 3611 os_tid = 0x278c [0166.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv")) returned 0x20 [0167.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV", dwFileAttributes=0x20) returned 0 [0167.475] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.689] GetLastError () returned 0x5 [0169.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV", dwFileAttributes=0x20) returned 0 [0169.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6740) returned 1 Thread: id = 3612 os_tid = 0x2798 [0166.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv")) returned 0x20 [0171.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV", dwFileAttributes=0x20) returned 0 [0171.833] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.833] GetLastError () returned 0x5 [0171.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV", dwFileAttributes=0x20) returned 0 [0171.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60900) returned 1 Thread: id = 3613 os_tid = 0x279c [0166.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv")) returned 0x20 [0171.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV", dwFileAttributes=0x20) returned 0 [0171.835] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.835] GetLastError () returned 0x5 [0171.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV", dwFileAttributes=0x20) returned 0 [0171.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b90) returned 1 Thread: id = 3614 os_tid = 0x2310 [0166.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d451d0 [0166.223] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0166.223] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\" [0166.223] wcscat (in: _Dest=0x3d451d0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*" [0166.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0166.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73e70 [0171.844] wcscmp (_String1=".", _String2=".") returned 0 [0171.844] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.844] wcscmp (_String1="..", _String2=".") returned 1 [0171.844] wcscmp (_String1="..", _String2="..") returned 0 [0171.844] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9049, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0171.844] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0171.844] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0171.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e330 [0171.844] wcscpy (in: _Dest=0x7a5e330, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0171.844] wcscat (in: _Dest=0x7a5e330, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\" [0171.844] wcscat (in: _Dest=0x7a5e330, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" [0172.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0172.649] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.649] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.649] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053fa8 [0172.649] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services" [0172.649] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\" [0172.649] wcscat (in: _Dest=0x3053fa8, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" [0172.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0172.651] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303a6100, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x303a6100, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.651] FindClose (in: hFindFile=0x3e73e70 | out: hFindFile=0x3e73e70) returned 1 [0172.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0172.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 [0172.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 3615 os_tid = 0x2330 [0166.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv")) returned 0x20 [0170.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV", dwFileAttributes=0x20) returned 0 [0170.605] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.808] GetLastError () returned 0x5 [0171.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV", dwFileAttributes=0x20) returned 0 [0171.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61710) returned 1 Thread: id = 3616 os_tid = 0x2334 [0166.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\madeira")) returned 0x20 [0166.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira", dwFileAttributes=0x20) returned 0 [0166.448] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\madeira"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.448] GetLastError () returned 0x5 [0166.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira", dwFileAttributes=0x20) returned 0 [0166.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e78) returned 1 Thread: id = 3617 os_tid = 0x2338 [0166.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\reykjavik")) returned 0x20 [0166.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik", dwFileAttributes=0x20) returned 0 [0166.450] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\reykjavik"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.450] GetLastError () returned 0x5 [0166.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik", dwFileAttributes=0x20) returned 0 [0166.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 Thread: id = 3618 os_tid = 0x233c [0166.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\south_georgia")) returned 0x20 [0166.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia", dwFileAttributes=0x20) returned 0 [0166.452] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\south_georgia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.452] GetLastError () returned 0x5 [0166.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia", dwFileAttributes=0x20) returned 0 [0166.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 Thread: id = 3619 os_tid = 0x2340 [0166.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\stanley")) returned 0x20 [0166.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley", dwFileAttributes=0x20) returned 0 [0166.454] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\stanley"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.454] GetLastError () returned 0x5 [0166.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley", dwFileAttributes=0x20) returned 0 [0166.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 Thread: id = 3620 os_tid = 0x2344 [0166.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\st_helena")) returned 0x20 [0166.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena", dwFileAttributes=0x20) returned 0 [0166.458] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\atlantic\\st_helena"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.458] GetLastError () returned 0x5 [0166.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena", dwFileAttributes=0x20) returned 0 [0166.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 Thread: id = 3621 os_tid = 0x2348 [0166.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif")) returned 0x20 [0169.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF", dwFileAttributes=0x20) returned 0 [0169.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.490] GetLastError () returned 0x5 [0169.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF", dwFileAttributes=0x20) returned 0 [0169.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 Thread: id = 3622 os_tid = 0x234c [0166.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif")) returned 0x20 [0169.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF", dwFileAttributes=0x20) returned 0 [0169.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.755] GetLastError () returned 0x5 [0169.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF", dwFileAttributes=0x20) returned 0 [0169.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65428) returned 1 Thread: id = 3623 os_tid = 0x2350 [0166.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif")) returned 0x20 [0169.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF", dwFileAttributes=0x20) returned 0 [0169.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.715] GetLastError () returned 0x5 [0169.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF", dwFileAttributes=0x20) returned 0 [0169.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65260) returned 1 Thread: id = 3624 os_tid = 0x2354 [0166.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif")) returned 0x20 [0169.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF", dwFileAttributes=0x20) returned 0 [0169.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.713] GetLastError () returned 0x5 [0169.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF", dwFileAttributes=0x20) returned 0 [0169.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65390) returned 1 Thread: id = 3625 os_tid = 0x2358 [0166.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif")) returned 0x20 [0169.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF", dwFileAttributes=0x20) returned 0 [0169.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.712] GetLastError () returned 0x5 [0169.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF", dwFileAttributes=0x20) returned 0 [0169.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64b40) returned 1 Thread: id = 3626 os_tid = 0x235c [0166.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif")) returned 0x20 [0169.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF", dwFileAttributes=0x20) returned 0 [0169.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.710] GetLastError () returned 0x5 [0169.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF", dwFileAttributes=0x20) returned 0 [0169.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64f68) returned 1 Thread: id = 3627 os_tid = 0x2360 [0166.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif")) returned 0x20 [0169.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF", dwFileAttributes=0x20) returned 0 [0169.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.709] GetLastError () returned 0x5 [0169.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF", dwFileAttributes=0x20) returned 0 [0169.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a654c0) returned 1 Thread: id = 3628 os_tid = 0x2364 [0166.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif")) returned 0x20 [0169.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF", dwFileAttributes=0x20) returned 0 [0169.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.707] GetLastError () returned 0x5 [0169.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF", dwFileAttributes=0x20) returned 0 [0169.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a655f0) returned 1 Thread: id = 3629 os_tid = 0x2368 [0166.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif")) returned 0x20 [0169.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF", dwFileAttributes=0x20) returned 0 [0169.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.747] GetLastError () returned 0x5 [0169.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF", dwFileAttributes=0x20) returned 0 [0169.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64258) returned 1 Thread: id = 3630 os_tid = 0x236c [0166.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif")) returned 0x20 [0169.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF", dwFileAttributes=0x20) returned 0 [0169.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.746] GetLastError () returned 0x5 [0169.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF", dwFileAttributes=0x20) returned 0 [0169.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a641c0) returned 1 Thread: id = 3631 os_tid = 0x2370 [0166.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif")) returned 0x20 [0169.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF", dwFileAttributes=0x20) returned 0 [0169.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.705] GetLastError () returned 0x5 [0169.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF", dwFileAttributes=0x20) returned 0 [0169.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64128) returned 1 Thread: id = 3632 os_tid = 0x2374 [0166.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif")) returned 0x20 [0169.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF", dwFileAttributes=0x20) returned 0 [0169.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.703] GetLastError () returned 0x5 [0169.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF", dwFileAttributes=0x20) returned 0 [0169.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64090) returned 1 Thread: id = 3633 os_tid = 0x2378 [0166.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif")) returned 0x20 [0169.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF", dwFileAttributes=0x20) returned 0 [0169.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.744] GetLastError () returned 0x5 [0169.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF", dwFileAttributes=0x20) returned 0 [0169.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65000) returned 1 Thread: id = 3634 os_tid = 0x237c [0166.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif")) returned 0x20 [0169.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF", dwFileAttributes=0x20) returned 0 [0169.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.742] GetLastError () returned 0x5 [0169.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF", dwFileAttributes=0x20) returned 0 [0169.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64848) returned 1 Thread: id = 3635 os_tid = 0x2380 [0166.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif")) returned 0x20 [0169.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF", dwFileAttributes=0x20) returned 0 [0169.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.740] GetLastError () returned 0x5 [0169.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF", dwFileAttributes=0x20) returned 0 [0169.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65130) returned 1 Thread: id = 3636 os_tid = 0x2384 [0166.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif")) returned 0x20 [0169.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF", dwFileAttributes=0x20) returned 0 [0169.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.738] GetLastError () returned 0x5 [0169.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF", dwFileAttributes=0x20) returned 0 [0169.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65098) returned 1 Thread: id = 3637 os_tid = 0x2388 [0166.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif")) returned 0x20 [0169.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF", dwFileAttributes=0x20) returned 0 [0169.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.737] GetLastError () returned 0x5 [0169.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF", dwFileAttributes=0x20) returned 0 [0169.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a652f8) returned 1 Thread: id = 3638 os_tid = 0x2390 [0166.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif")) returned 0x20 [0169.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF", dwFileAttributes=0x20) returned 0 [0169.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.735] GetLastError () returned 0x5 [0169.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF", dwFileAttributes=0x20) returned 0 [0169.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65558) returned 1 Thread: id = 3639 os_tid = 0x2394 [0166.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif")) returned 0x20 [0169.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF", dwFileAttributes=0x20) returned 0 [0169.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.699] GetLastError () returned 0x5 [0169.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF", dwFileAttributes=0x20) returned 0 [0169.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a651c8) returned 1 Thread: id = 3640 os_tid = 0x2398 [0166.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif")) returned 0x20 [0169.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF", dwFileAttributes=0x20) returned 0 [0169.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.759] GetLastError () returned 0x5 [0169.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF", dwFileAttributes=0x20) returned 0 [0169.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64e38) returned 1 Thread: id = 3641 os_tid = 0x239c [0166.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif")) returned 0x20 [0169.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF", dwFileAttributes=0x20) returned 0 [0169.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.733] GetLastError () returned 0x5 [0169.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF", dwFileAttributes=0x20) returned 0 [0169.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65980) returned 1 Thread: id = 3642 os_tid = 0x23a0 [0166.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif")) returned 0x20 [0169.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF", dwFileAttributes=0x20) returned 0 [0169.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.731] GetLastError () returned 0x5 [0169.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF", dwFileAttributes=0x20) returned 0 [0169.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64ed0) returned 1 Thread: id = 3643 os_tid = 0x23a4 [0166.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif")) returned 0x20 [0169.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF", dwFileAttributes=0x20) returned 0 [0169.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.730] GetLastError () returned 0x5 [0169.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF", dwFileAttributes=0x20) returned 0 [0169.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a658e8) returned 1 Thread: id = 3644 os_tid = 0x23b4 [0166.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif")) returned 0x20 [0169.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF", dwFileAttributes=0x20) returned 0 [0169.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.728] GetLastError () returned 0x5 [0169.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF", dwFileAttributes=0x20) returned 0 [0169.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64da0) returned 1 Thread: id = 3645 os_tid = 0x23b8 [0166.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif")) returned 0x20 [0169.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF", dwFileAttributes=0x20) returned 0 [0169.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.726] GetLastError () returned 0x5 [0169.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF", dwFileAttributes=0x20) returned 0 [0169.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a642f0) returned 1 Thread: id = 3646 os_tid = 0x23bc [0166.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif")) returned 0x20 [0169.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF", dwFileAttributes=0x20) returned 0 [0169.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.724] GetLastError () returned 0x5 [0169.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF", dwFileAttributes=0x20) returned 0 [0169.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64d08) returned 1 Thread: id = 3647 os_tid = 0x23c0 [0166.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif")) returned 0x20 [0169.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF", dwFileAttributes=0x20) returned 0 [0169.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.722] GetLastError () returned 0x5 [0169.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF", dwFileAttributes=0x20) returned 0 [0169.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65688) returned 1 Thread: id = 3648 os_tid = 0x23c4 [0166.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif")) returned 0x20 [0169.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF", dwFileAttributes=0x20) returned 0 [0169.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.751] GetLastError () returned 0x5 [0169.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF", dwFileAttributes=0x20) returned 0 [0169.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65720) returned 1 Thread: id = 3649 os_tid = 0x23c8 [0166.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif")) returned 0x20 [0169.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF", dwFileAttributes=0x20) returned 0 [0169.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.749] GetLastError () returned 0x5 [0169.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF", dwFileAttributes=0x20) returned 0 [0169.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a657b8) returned 1 Thread: id = 3650 os_tid = 0x23cc [0166.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl")) returned 0x20 [0166.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL", dwFileAttributes=0x20) returned 0 [0166.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.484] GetLastError () returned 0x5 [0166.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL", dwFileAttributes=0x20) returned 0 [0166.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 3651 os_tid = 0x23d0 [0166.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl")) returned 0x20 [0169.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x20) returned 0 [0169.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.450] GetLastError () returned 0x5 [0169.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x20) returned 0 [0169.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a637b0) returned 1 Thread: id = 3652 os_tid = 0x23d4 [0166.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl")) returned 0x20 [0167.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x20) returned 0 [0167.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.162] GetLastError () returned 0x5 [0169.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x20) returned 0 [0169.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64388) returned 1 Thread: id = 3653 os_tid = 0x23d8 [0166.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl")) returned 0x20 [0170.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x20) returned 0 [0170.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.184] GetLastError () returned 0x5 [0170.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x20) returned 0 [0170.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 3654 os_tid = 0x23dc [0166.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl")) returned 0x20 [0170.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x20) returned 0 [0170.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.182] GetLastError () returned 0x5 [0170.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x20) returned 0 [0170.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 3655 os_tid = 0x23e4 [0166.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl")) returned 0x20 [0169.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x20) returned 0 [0169.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.550] GetLastError () returned 0x5 [0169.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x20) returned 0 [0169.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a626d0) returned 1 Thread: id = 3656 os_tid = 0x2450 [0166.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl")) returned 0x20 [0170.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x20) returned 0 [0170.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.186] GetLastError () returned 0x5 [0170.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x20) returned 0 [0170.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66140) returned 1 Thread: id = 3657 os_tid = 0x2458 [0166.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl")) returned 0x20 [0170.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL", dwFileAttributes=0x20) returned 0 [0170.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.180] GetLastError () returned 0x5 [0170.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL", dwFileAttributes=0x20) returned 0 [0170.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64420) returned 1 Thread: id = 3658 os_tid = 0x245c [0166.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl")) returned 0x20 [0170.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x20) returned 0 [0170.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.188] GetLastError () returned 0x5 [0170.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x20) returned 0 [0170.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 3659 os_tid = 0x2460 [0166.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl")) returned 0x20 [0170.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x20) returned 0 [0170.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.178] GetLastError () returned 0x5 [0170.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x20) returned 0 [0170.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 3660 os_tid = 0x2464 [0166.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp")) returned 0x20 [0166.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP", dwFileAttributes=0x20) returned 0 [0166.492] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.492] GetLastError () returned 0x5 [0166.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP", dwFileAttributes=0x20) returned 0 [0166.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63990) returned 1 Thread: id = 3661 os_tid = 0x2468 [0166.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp")) returned 0x20 [0167.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP", dwFileAttributes=0x20) returned 0 [0167.998] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.998] GetLastError () returned 0x5 [0167.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP", dwFileAttributes=0x20) returned 0 [0167.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45020) returned 1 Thread: id = 3662 os_tid = 0x246c [0166.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp")) returned 0x20 [0167.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP", dwFileAttributes=0x20) returned 0 [0167.996] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.996] GetLastError () returned 0x5 [0167.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP", dwFileAttributes=0x20) returned 0 [0167.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 3663 os_tid = 0x2470 [0166.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp")) returned 0x20 [0167.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP", dwFileAttributes=0x20) returned 0 [0167.995] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.995] GetLastError () returned 0x5 [0167.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP", dwFileAttributes=0x20) returned 0 [0167.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d459b0) returned 1 Thread: id = 3664 os_tid = 0x8e8 [0166.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp")) returned 0x20 [0167.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP", dwFileAttributes=0x20) returned 0 [0167.994] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.994] GetLastError () returned 0x5 [0167.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP", dwFileAttributes=0x20) returned 0 [0167.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64978) returned 1 Thread: id = 3665 os_tid = 0x2474 [0166.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp")) returned 0x20 [0167.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP", dwFileAttributes=0x20) returned 0 [0167.992] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.993] GetLastError () returned 0x5 [0167.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP", dwFileAttributes=0x20) returned 0 [0167.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 Thread: id = 3666 os_tid = 0x2478 [0166.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp")) returned 0x20 [0167.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP", dwFileAttributes=0x20) returned 0 [0167.991] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.991] GetLastError () returned 0x5 [0167.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP", dwFileAttributes=0x20) returned 0 [0167.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 3667 os_tid = 0x247c [0166.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp")) returned 0x20 [0167.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP", dwFileAttributes=0x20) returned 0 [0167.990] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.990] GetLastError () returned 0x5 [0167.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP", dwFileAttributes=0x20) returned 0 [0167.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 3668 os_tid = 0x2480 [0166.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp")) returned 0x20 [0167.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP", dwFileAttributes=0x20) returned 0 [0167.988] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.988] GetLastError () returned 0x5 [0167.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP", dwFileAttributes=0x20) returned 0 [0167.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 3669 os_tid = 0x2484 [0166.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp")) returned 0x20 [0167.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP", dwFileAttributes=0x20) returned 0 [0167.488] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.488] GetLastError () returned 0x5 [0167.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP", dwFileAttributes=0x20) returned 0 [0167.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 Thread: id = 3670 os_tid = 0x249c [0166.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp")) returned 0x20 [0167.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP", dwFileAttributes=0x20) returned 0 [0167.987] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.987] GetLastError () returned 0x5 [0167.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP", dwFileAttributes=0x20) returned 0 [0167.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 Thread: id = 3671 os_tid = 0x24a0 [0166.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp")) returned 0x20 [0167.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP", dwFileAttributes=0x20) returned 0 [0167.986] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.986] GetLastError () returned 0x5 [0167.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP", dwFileAttributes=0x20) returned 0 [0167.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63df0) returned 1 Thread: id = 3672 os_tid = 0x24a4 [0166.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp")) returned 0x20 [0167.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP", dwFileAttributes=0x20) returned 0 [0167.984] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.984] GetLastError () returned 0x5 [0167.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP", dwFileAttributes=0x20) returned 0 [0167.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a648e0) returned 1 Thread: id = 3673 os_tid = 0x24a8 [0166.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp")) returned 0x20 [0167.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP", dwFileAttributes=0x20) returned 0 [0167.983] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.983] GetLastError () returned 0x5 [0167.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP", dwFileAttributes=0x20) returned 0 [0167.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 3674 os_tid = 0x24ac [0166.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp")) returned 0x20 [0167.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP", dwFileAttributes=0x20) returned 0 [0167.982] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.982] GetLastError () returned 0x5 [0167.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP", dwFileAttributes=0x20) returned 0 [0167.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f90) returned 1 Thread: id = 3675 os_tid = 0x27e4 [0166.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp")) returned 0x20 [0167.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP", dwFileAttributes=0x20) returned 0 [0167.980] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.981] GetLastError () returned 0x5 [0167.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP", dwFileAttributes=0x20) returned 0 [0167.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 3676 os_tid = 0x27e8 [0166.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp")) returned 0x20 [0167.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP", dwFileAttributes=0x20) returned 0 [0167.979] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.979] GetLastError () returned 0x5 [0167.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP", dwFileAttributes=0x20) returned 0 [0167.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64718) returned 1 Thread: id = 3677 os_tid = 0x27ec [0166.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp")) returned 0x20 [0167.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP", dwFileAttributes=0x20) returned 0 [0167.978] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.978] GetLastError () returned 0x5 [0167.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP", dwFileAttributes=0x20) returned 0 [0167.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 3678 os_tid = 0x24dc [0166.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp")) returned 0x20 [0167.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP", dwFileAttributes=0x20) returned 0 [0167.976] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.977] GetLastError () returned 0x5 [0167.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP", dwFileAttributes=0x20) returned 0 [0167.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64680) returned 1 Thread: id = 3679 os_tid = 0x24e0 [0166.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp")) returned 0x20 [0167.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP", dwFileAttributes=0x20) returned 0 [0167.486] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.486] GetLastError () returned 0x5 [0167.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP", dwFileAttributes=0x20) returned 0 [0167.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448d0) returned 1 Thread: id = 3680 os_tid = 0xe0c [0166.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp")) returned 0x20 [0167.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP", dwFileAttributes=0x20) returned 0 [0167.999] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.999] GetLastError () returned 0x5 [0167.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP", dwFileAttributes=0x20) returned 0 [0168.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44600) returned 1 Thread: id = 3681 os_tid = 0xc50 [0166.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44690 [0166.514] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0166.515] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\" [0166.515] wcscat (in: _Dest=0x3d44690, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*" [0166.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54710 [0166.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd700a00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cb0 [0168.001] wcscmp (_String1=".", _String2=".") returned 0 [0168.001] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd6da8a0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd700a00, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.001] wcscmp (_String1="..", _String2=".") returned 1 [0168.001] wcscmp (_String1="..", _String2="..") returned 0 [0168.001] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd6da8a0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0168.001] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0168.001] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0168.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f4e8 [0168.001] wcscpy (in: _Dest=0x7a5f4e8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0168.002] wcscat (in: _Dest=0x7a5f4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\" [0168.002] wcscat (in: _Dest=0x7a5f4e8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" [0172.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0172.791] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0172.791] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0172.791] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0172.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f0f8 [0172.791] wcscpy (in: _Dest=0x7a5f0f8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services" [0172.791] wcscat (in: _Dest=0x7a5f0f8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\" [0172.791] wcscat (in: _Dest=0x7a5f0f8, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" [0172.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0172.792] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd700a00, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0172.793] FindClose (in: hFindFile=0x7ad7cb0 | out: hFindFile=0x7ad7cb0) returned 1 [0172.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54710) returned 1 [0172.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 [0172.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 Thread: id = 3682 os_tid = 0xb24 [0166.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp")) returned 0x20 [0167.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP", dwFileAttributes=0x20) returned 0 [0167.974] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.974] GetLastError () returned 0x5 [0167.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP", dwFileAttributes=0x20) returned 0 [0167.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44720) returned 1 Thread: id = 3683 os_tid = 0xb20 [0166.806] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata")) returned 0x2020 [0167.489] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", dwFileAttributes=0x20) returned 1 [0169.934] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe20 [0169.934] GetFileSizeEx (in: hFile=0xe20, lpFileSize=0x3befec4 | out: lpFileSize=0x3befec4*=114) returned 1 [0169.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0169.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0169.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0169.934] NtQuerySystemTime (in: CurrentTime=0x3befe38 | out: CurrentTime=0x3befe38*=132462177485100000) returned 0x0 [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x56038115 [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0xb59f84b [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x6b9c0f44 [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x755b99b3 [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x366ef790 [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x65c082ac [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x6c73639e [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x1424c0d3 [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x49719542 [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x311684ae [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x156a70eb [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x6425e2a4 [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x4b38113e [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x62233f1b [0169.935] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x27bf0129 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x72103f94 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x7adb874b [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x5b9f18f4 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x8ad42f1 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x42bca16a [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x485bc488 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x45c73050 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x499c6e02 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x1a2aaff1 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x29fb3f3e [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x597301fc [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x360ec95d [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x246b2b98 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x7f245fc4 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x4b73be42 [0169.936] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x5d137d6 [0169.937] RtlRandomEx (in: Seed=0x3befe30 | out: Seed=0x3befe30) returned 0x4548ff35 [0169.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0169.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0169.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0169.951] ReadFile (in: hFile=0xe20, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x72, lpNumberOfBytesRead=0x3befe2c, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0x3befe2c*=0x72, lpOverlapped=0x0) returned 1 [0169.954] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.954] WriteFile (in: hFile=0xe20, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x3befe30, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0x3befe30*=0x72, lpOverlapped=0x0) returned 1 [0170.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0170.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0170.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0170.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0170.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0170.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0170.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25a10) returned 1 [0170.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5a538 [0170.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25a10 [0170.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0170.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0170.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0170.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5dd00 [0170.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0170.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0170.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0170.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0170.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25a10) returned 1 [0170.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x300e668 [0170.584] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.584] WriteFile (in: hFile=0xe20, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x3befeb8, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x3befeb8*=0x102, lpOverlapped=0x0) returned 1 [0171.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b42c8 [0171.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f740 [0171.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0171.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3588) returned 1 [0171.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e438f0 [0171.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0171.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0171.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3600) returned 1 [0171.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0171.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b42c8) returned 1 [0171.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a375c0 [0171.046] sprintf (in: _Dest=0x7a375c0, _Format="%c%c" | out: _Dest="8b") returned 2 [0171.046] sprintf (in: _Dest=0x7a375c2, _Format="%c%c" | out: _Dest="c3") returned 2 [0171.046] sprintf (in: _Dest=0x7a375c4, _Format="%c%c" | out: _Dest="68") returned 2 [0171.046] sprintf (in: _Dest=0x7a375c6, _Format="%c%c" | out: _Dest="12") returned 2 [0171.046] sprintf (in: _Dest=0x7a375c8, _Format="%c%c" | out: _Dest="92") returned 2 [0171.046] sprintf (in: _Dest=0x7a375ca, _Format="%c%c" | out: _Dest="2b") returned 2 [0171.046] sprintf (in: _Dest=0x7a375cc, _Format="%c%c" | out: _Dest="ce") returned 2 [0171.046] sprintf (in: _Dest=0x7a375ce, _Format="%c%c" | out: _Dest="e4") returned 2 [0171.046] sprintf (in: _Dest=0x7a375d0, _Format="%c%c" | out: _Dest="b0") returned 2 [0171.046] sprintf (in: _Dest=0x7a375d2, _Format="%c%c" | out: _Dest="ed") returned 2 [0171.046] sprintf (in: _Dest=0x7a375d4, _Format="%c%c" | out: _Dest="3f") returned 2 [0171.046] sprintf (in: _Dest=0x7a375d6, _Format="%c%c" | out: _Dest="5d") returned 2 [0171.046] sprintf (in: _Dest=0x7a375d8, _Format="%c%c" | out: _Dest="51") returned 2 [0171.046] sprintf (in: _Dest=0x7a375da, _Format="%c%c" | out: _Dest="ba") returned 2 [0171.046] sprintf (in: _Dest=0x7a375dc, _Format="%c%c" | out: _Dest="15") returned 2 [0171.046] sprintf (in: _Dest=0x7a375de, _Format="%c%c" | out: _Dest="4d") returned 2 [0171.047] RtlInitAnsiString (in: DestinationString=0x3befe40, SourceString="8bc36812922bcee4b0ed3f5d51ba154d" | out: DestinationString="8bc36812922bcee4b0ed3f5d51ba154d") [0171.047] RtlAnsiStringToUnicodeString (in: DestinationString=0x3befe38, SourceString="8bc36812922bcee4b0ed3f5d51ba154d", AllocateDestinationString=1 | out: DestinationString="8bc36812922bcee4b0ed3f5d51ba154d") returned 0x0 [0171.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84ad8 [0171.047] RtlFreeAnsiString (AnsiString="8") [0171.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0171.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e438f0) returned 1 [0171.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3588) returned 1 [0171.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0171.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0171.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0171.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0171.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0171.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0171.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0171.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x3053870 [0171.048] wcscat (in: _Dest=0x3053870, _Source="8bc36812" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\8bc36812") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\8bc36812" [0171.048] wcscat (in: _Dest=0x3053870, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\8bc36812.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\8bc36812.68814f" [0171.048] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\8bc36812.68814f", NtPathName=0x3befe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\8bc36812.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0171.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66798 [0174.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66798) returned 1 [0174.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f368f0) returned 1 [0174.537] NtQueryInformationFile (in: FileHandle=0xe20, IoStatusBlock=0x3befe08, FileInformation=0x3befe10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x3befe08, FileInformation=0x3befe10) returned 0x0 [0174.537] NtSetInformationFile (FileHandle=0xe20, IoStatusBlock=0x3befe08, FileInformation=0x3befe10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0174.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053870) returned 1 [0174.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84ad8) returned 1 [0174.874] FlushFileBuffers (hFile=0xe20) returned 1 [0177.308] CloseHandle (hObject=0xe20) returned 1 [0179.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66400 [0179.828] wcscpy (in: _Dest=0x7a66400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0179.828] wcscat (in: _Dest=0x7a66400, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\68814F-Readme.txt" [0179.828] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\68814f-readme.txt")) returned 0x2020 [0179.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66400) returned 1 [0179.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63ad0) returned 1 Thread: id = 3684 os_tid = 0xb48 [0166.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62310 [0166.808] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0166.808] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" [0166.808] wcscat (in: _Dest=0x7a62310, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*" [0166.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbc08 [0166.809] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5209e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78b0 [0167.327] wcscmp (_String1=".", _String2=".") returned 0 [0167.327] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3022350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5209e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.328] wcscmp (_String1="..", _String2=".") returned 1 [0167.328] wcscmp (_String1="..", _String2="..") returned 0 [0167.328] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5209e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe52706f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", cAlternateFileName="3445AE~1.DMP")) returned 1 [0167.328] wcscmp (_String1="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", _String2=".") returned 1 [0167.328] wcscmp (_String1="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", _String2="..") returned 1 [0167.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3daf178 [0167.328] wcscpy (in: _Dest=0x3daf178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" [0167.328] wcscat (in: _Dest=0x3daf178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" [0167.328] wcscat (in: _Dest=0x3daf178, _Source="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" [0172.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3daf178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0172.664] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x30bbc08 | out: lpFindFileData=0x30bbc08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5209e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5209e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe52706f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x19bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", cAlternateFileName="3445AE~1.DMP")) returned 0 [0172.664] FindClose (in: hFindFile=0x7ad78b0 | out: hFindFile=0x7ad78b0) returned 1 [0172.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0172.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 [0172.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 3685 os_tid = 0xb7c [0166.815] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat")) returned 0x2020 [0167.328] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", dwFileAttributes=0x20) returned 1 [0168.019] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xaf4 [0168.019] GetFileSizeEx (in: hFile=0xaf4, lpFileSize=0x785f904 | out: lpFileSize=0x785f904*=40) returned 1 [0168.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0168.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0168.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0168.019] NtQuerySystemTime (in: CurrentTime=0x785f878 | out: CurrentTime=0x785f878*=132462177465912000) returned 0x0 [0168.019] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x3bc3c827 [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x1ab8ac65 [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x1bf4187a [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x1075d348 [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x2e247c96 [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x5528f55c [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x2504a55a [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x303ba681 [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x6f7e6209 [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x2318374f [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x765ec78f [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x57b724b1 [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0xbd1bc03 [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x26c2755b [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x69ed6690 [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x8d6472c [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x53b215 [0168.020] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x2f9ce3b5 [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x3d5204f5 [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x7e7cd042 [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x15f798c4 [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x30274eb5 [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x4a141d76 [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x50c976a5 [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x4da15e5a [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x4b5fde4 [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x3fe7e465 [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x7e2a71f [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x921d3ef [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x504e4c02 [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0xb34ffcd [0168.021] RtlRandomEx (in: Seed=0x785f870 | out: Seed=0x785f870) returned 0x6ab6de38 [0168.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0168.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0168.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0168.034] ReadFile (in: hFile=0xaf4, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0x785f86c, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0x785f86c*=0x28, lpOverlapped=0x0) returned 1 [0168.036] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.036] WriteFile (in: hFile=0xaf4, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x785f870, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0x785f870*=0x28, lpOverlapped=0x0) returned 1 [0169.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0169.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0169.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0169.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0169.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0169.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51020) returned 1 [0169.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25b78) returned 1 [0169.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0169.124] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.124] WriteFile (in: hFile=0xaf4, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x785f8f8, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x785f8f8*=0x10a, lpOverlapped=0x0) returned 1 [0170.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdf38 [0170.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0170.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb648 [0170.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb648) returned 1 [0170.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3eb85f8 [0170.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb648 [0170.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb878 [0170.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb878) returned 1 [0170.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0170.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdf38) returned 1 [0170.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x7a2d700 [0170.566] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="90") returned 2 [0170.566] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="1a") returned 2 [0170.566] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="c5") returned 2 [0170.566] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="fb") returned 2 [0170.566] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="fc") returned 2 [0170.566] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="c6") returned 2 [0170.566] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="70") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="18") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="95") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="93") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="67") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="4f") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="a0") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="93") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="03") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="d4") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="4e") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="4d") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="5c") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="0f") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="8e") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="8d") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="dc") returned 2 [0170.567] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="a4") returned 2 [0170.567] RtlInitAnsiString (in: DestinationString=0x785f880, SourceString="901ac5fbfcc670189593674fa09303d44e4d5c0f8e8ddca4" | out: DestinationString="901ac5fbfcc670189593674fa09303d44e4d5c0f8e8ddca4") [0170.567] RtlAnsiStringToUnicodeString (in: DestinationString=0x785f878, SourceString="901ac5fbfcc670189593674fa09303d44e4d5c0f8e8ddca4", AllocateDestinationString=1 | out: DestinationString="901ac5fbfcc670189593674fa09303d44e4d5c0f8e8ddca4") returned 0x0 [0170.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a260e8 [0170.567] RtlFreeAnsiString (AnsiString="9") [0170.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d700) returned 1 [0170.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb85f8) returned 1 [0170.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb648) returned 1 [0170.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0170.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37530) returned 1 [0170.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0170.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0170.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3600) returned 1 [0170.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0170.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0170.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0170.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66140 [0170.568] wcscat (in: _Dest=0x7a66140, _Source="901ac5fbfcc6" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\901ac5fbfcc6") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\901ac5fbfcc6" [0170.568] wcscat (in: _Dest=0x7a66140, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\901ac5fbfcc6.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\901ac5fbfcc6.68814f" [0170.568] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\901ac5fbfcc6.68814f", NtPathName=0x785f870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\901ac5fbfcc6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0170.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56df8 [0170.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56df8) returned 1 [0170.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37e80) returned 1 [0170.571] NtQueryInformationFile (in: FileHandle=0xaf4, IoStatusBlock=0x785f848, FileInformation=0x785f850, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x785f848, FileInformation=0x785f850) returned 0x0 [0170.571] NtSetInformationFile (FileHandle=0xaf4, IoStatusBlock=0x785f848, FileInformation=0x785f850, Length=0x28, FileInformationClass=0x4) returned 0x0 [0170.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66140) returned 1 [0170.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a260e8) returned 1 [0170.573] FlushFileBuffers (hFile=0xaf4) returned 1 [0170.576] CloseHandle (hObject=0xaf4) returned 1 [0170.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66140 [0170.577] wcscpy (in: _Dest=0x7a66140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\" [0170.577] wcscat (in: _Dest=0x7a66140, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\68814F-Readme.txt" [0170.577] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\68814f-readme.txt")) returned 0xffffffff [0170.577] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xaf4 [0170.577] WriteFile (in: hFile=0xaf4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x785f88c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x785f88c*=0x8b9, lpOverlapped=0x0) returned 1 [0170.579] CloseHandle (hObject=0xaf4) returned 1 [0170.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66140) returned 1 [0170.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 3686 os_tid = 0xdd4 [0166.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\chagos")) returned 0x20 [0166.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos", dwFileAttributes=0x20) returned 0 [0166.819] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\chagos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.819] GetLastError () returned 0x5 [0166.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Chagos", dwFileAttributes=0x20) returned 0 [0166.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf9b8) returned 1 Thread: id = 3687 os_tid = 0x99c [0166.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\christmas")) returned 0x20 [0166.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas", dwFileAttributes=0x20) returned 0 [0166.822] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\christmas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.822] GetLastError () returned 0x5 [0166.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Christmas", dwFileAttributes=0x20) returned 0 [0166.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 Thread: id = 3688 os_tid = 0xa90 [0166.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\cocos")) returned 0x20 [0167.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos", dwFileAttributes=0x20) returned 0 [0167.491] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\cocos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.491] GetLastError () returned 0x5 [0167.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Cocos", dwFileAttributes=0x20) returned 0 [0167.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1da28) returned 1 Thread: id = 3689 os_tid = 0xc68 [0166.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\comoro")) returned 0x20 [0167.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro", dwFileAttributes=0x20) returned 0 [0167.492] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\comoro"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.493] GetLastError () returned 0x5 [0167.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Comoro", dwFileAttributes=0x20) returned 0 [0167.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d8f0) returned 1 Thread: id = 3690 os_tid = 0x474 [0166.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\kerguelen")) returned 0x20 [0167.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen", dwFileAttributes=0x20) returned 0 [0167.494] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\kerguelen"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.494] GetLastError () returned 0x5 [0167.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen", dwFileAttributes=0x20) returned 0 [0167.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e78) returned 1 Thread: id = 3691 os_tid = 0x528 [0166.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mahe")) returned 0x20 [0167.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe", dwFileAttributes=0x20) returned 0 [0167.495] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mahe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.496] GetLastError () returned 0x5 [0167.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mahe", dwFileAttributes=0x20) returned 0 [0167.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 Thread: id = 3692 os_tid = 0x9cc [0166.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\maldives")) returned 0x20 [0167.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives", dwFileAttributes=0x20) returned 0 [0167.497] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\maldives"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.497] GetLastError () returned 0x5 [0167.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Maldives", dwFileAttributes=0x20) returned 0 [0167.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26f58) returned 1 Thread: id = 3693 os_tid = 0x9dc [0166.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mauritius")) returned 0x20 [0167.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius", dwFileAttributes=0x20) returned 0 [0167.330] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mauritius"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.330] GetLastError () returned 0x5 [0167.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mauritius", dwFileAttributes=0x20) returned 0 [0167.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26008) returned 1 Thread: id = 3694 os_tid = 0x257c [0166.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mayotte")) returned 0x20 [0167.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte", dwFileAttributes=0x20) returned 0 [0167.332] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\mayotte"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.332] GetLastError () returned 0x5 [0167.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Mayotte", dwFileAttributes=0x20) returned 0 [0167.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26708) returned 1 Thread: id = 3695 os_tid = 0x2580 [0166.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\reunion")) returned 0x20 [0167.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion", dwFileAttributes=0x20) returned 0 [0167.489] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\indian\\reunion"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.490] GetLastError () returned 0x5 [0167.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Indian\\Reunion", dwFileAttributes=0x20) returned 0 [0167.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 Thread: id = 3696 os_tid = 0x2584 [0166.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp")) returned 0x20 [0167.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.498] GetLastError () returned 0x5 [0167.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a440) returned 1 Thread: id = 3697 os_tid = 0x2588 [0166.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg")) returned 0x20 [0167.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg", dwFileAttributes=0x20) returned 0 [0167.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.499] GetLastError () returned 0x5 [0167.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg", dwFileAttributes=0x20) returned 0 [0167.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 Thread: id = 3698 os_tid = 0x258c [0166.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp")) returned 0x20 [0167.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.501] GetLastError () returned 0x5 [0167.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0167.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 Thread: id = 3699 os_tid = 0x2590 [0166.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg")) returned 0x20 [0167.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg", dwFileAttributes=0x20) returned 0 [0167.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.338] GetLastError () returned 0x5 [0167.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg", dwFileAttributes=0x20) returned 0 [0167.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 Thread: id = 3700 os_tid = 0x2594 [0166.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg")) returned 0x20 [0167.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg", dwFileAttributes=0x20) returned 0 [0167.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.340] GetLastError () returned 0x5 [0167.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg", dwFileAttributes=0x20) returned 0 [0167.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 Thread: id = 3701 os_tid = 0x2598 [0166.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires")) returned 0x20 [0166.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires", dwFileAttributes=0x20) returned 0 [0166.865] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.865] GetLastError () returned 0x5 [0166.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires", dwFileAttributes=0x20) returned 0 [0166.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45da0) returned 1 Thread: id = 3702 os_tid = 0x259c [0166.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca")) returned 0x20 [0166.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca", dwFileAttributes=0x20) returned 0 [0166.872] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.873] GetLastError () returned 0x5 [0166.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca", dwFileAttributes=0x20) returned 0 [0166.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 3703 os_tid = 0x25a0 [0166.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba")) returned 0x20 [0166.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba", dwFileAttributes=0x20) returned 0 [0166.875] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.875] GetLastError () returned 0x5 [0166.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba", dwFileAttributes=0x20) returned 0 [0166.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 Thread: id = 3704 os_tid = 0x25a4 [0166.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy")) returned 0x20 [0166.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy", dwFileAttributes=0x20) returned 0 [0166.877] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.877] GetLastError () returned 0x5 [0166.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy", dwFileAttributes=0x20) returned 0 [0166.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a698) returned 1 Thread: id = 3705 os_tid = 0x25a8 [0166.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja")) returned 0x20 [0166.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja", dwFileAttributes=0x20) returned 0 [0166.887] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.888] GetLastError () returned 0x5 [0166.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja", dwFileAttributes=0x20) returned 0 [0166.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 3706 os_tid = 0x25ac [0166.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza")) returned 0x20 [0166.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza", dwFileAttributes=0x20) returned 0 [0166.890] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.890] GetLastError () returned 0x5 [0166.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza", dwFileAttributes=0x20) returned 0 [0166.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a718) returned 1 Thread: id = 3707 os_tid = 0x25b0 [0166.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos")) returned 0x20 [0166.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos", dwFileAttributes=0x20) returned 0 [0166.892] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.892] GetLastError () returned 0x5 [0166.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos", dwFileAttributes=0x20) returned 0 [0166.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 Thread: id = 3708 os_tid = 0x25b4 [0166.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\salta")) returned 0x20 [0166.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta", dwFileAttributes=0x20) returned 0 [0166.895] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\salta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.895] GetLastError () returned 0x5 [0166.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta", dwFileAttributes=0x20) returned 0 [0166.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19098) returned 1 Thread: id = 3709 os_tid = 0x25b8 [0166.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan")) returned 0x20 [0166.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan", dwFileAttributes=0x20) returned 0 [0166.897] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.897] GetLastError () returned 0x5 [0166.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan", dwFileAttributes=0x20) returned 0 [0166.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 3710 os_tid = 0x25bc [0166.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis")) returned 0x20 [0166.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis", dwFileAttributes=0x20) returned 0 [0166.902] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.902] GetLastError () returned 0x5 [0166.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis", dwFileAttributes=0x20) returned 0 [0166.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 3711 os_tid = 0x25c0 [0166.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman")) returned 0x20 [0166.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman", dwFileAttributes=0x20) returned 0 [0166.906] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.906] GetLastError () returned 0x5 [0166.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman", dwFileAttributes=0x20) returned 0 [0166.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 3712 os_tid = 0x25c4 [0166.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia")) returned 0x20 [0166.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia", dwFileAttributes=0x20) returned 0 [0166.908] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.908] GetLastError () returned 0x5 [0166.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia", dwFileAttributes=0x20) returned 0 [0166.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19198) returned 1 Thread: id = 3713 os_tid = 0x25c8 [0166.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf")) returned 0x20 [0166.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0166.910] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.910] GetLastError () returned 0x5 [0166.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0166.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6518) returned 1 Thread: id = 3714 os_tid = 0x25cc [0166.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf")) returned 0x20 [0166.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0166.921] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.921] GetLastError () returned 0x5 [0166.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0166.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 Thread: id = 3715 os_tid = 0x9ec [0166.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf")) returned 0x20 [0166.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0166.925] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0166.925] GetLastError () returned 0x5 [0166.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0166.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a1e8) returned 1 Thread: id = 3716 os_tid = 0x140 [0166.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf")) returned 0x20 [0168.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0168.002] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.003] GetLastError () returned 0x5 [0168.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0168.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 3717 os_tid = 0xa0c [0166.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf")) returned 0x20 [0167.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0167.505] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.505] GetLastError () returned 0x5 [0167.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0167.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66ae0) returned 1 Thread: id = 3718 os_tid = 0xa1c [0166.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf")) returned 0x20 [0167.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0167.504] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.504] GetLastError () returned 0x5 [0167.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0167.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 Thread: id = 3719 os_tid = 0xa2c [0166.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf")) returned 0x20 [0167.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0167.502] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.502] GetLastError () returned 0x5 [0167.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0167.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 3720 os_tid = 0xa3c [0166.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf")) returned 0x20 [0168.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0168.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.006] GetLastError () returned 0x5 [0168.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0168.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 Thread: id = 3721 os_tid = 0xa4c [0166.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf")) returned 0x20 [0168.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0168.004] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.004] GetLastError () returned 0x5 [0168.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0168.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a120) returned 1 Thread: id = 3722 os_tid = 0x484 [0166.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx")) returned 0x20 [0167.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx", dwFileAttributes=0x20) returned 0 [0167.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.025] GetLastError () returned 0x5 [0170.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx", dwFileAttributes=0x20) returned 0 [0170.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 3723 os_tid = 0xa6c [0166.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx")) returned 0x20 [0171.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx", dwFileAttributes=0x20) returned 0 [0171.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.011] GetLastError () returned 0x5 [0171.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx", dwFileAttributes=0x20) returned 0 [0171.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 Thread: id = 3724 os_tid = 0xa94 [0166.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx")) returned 0x20 [0171.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx", dwFileAttributes=0x20) returned 0 [0171.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.009] GetLastError () returned 0x5 [0171.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx", dwFileAttributes=0x20) returned 0 [0171.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 Thread: id = 3725 os_tid = 0xa88 [0166.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx")) returned 0x20 [0171.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx", dwFileAttributes=0x20) returned 0 [0171.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.008] GetLastError () returned 0x5 [0171.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx", dwFileAttributes=0x20) returned 0 [0171.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66b90) returned 1 Thread: id = 3726 os_tid = 0xa84 [0166.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx")) returned 0x20 [0170.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx", dwFileAttributes=0x20) returned 0 [0170.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.988] GetLastError () returned 0x5 [0170.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx", dwFileAttributes=0x20) returned 0 [0170.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e528) returned 1 Thread: id = 3727 os_tid = 0xa98 [0166.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx")) returned 0x20 [0171.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx", dwFileAttributes=0x20) returned 0 [0171.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.006] GetLastError () returned 0x5 [0171.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx", dwFileAttributes=0x20) returned 0 [0171.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66c40) returned 1 Thread: id = 3728 os_tid = 0xa80 [0166.952] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst")) returned 0x2020 [0166.952] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst", dwFileAttributes=0x20) returned 1 [0166.953] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x142c [0166.953] GetFileSizeEx (in: hFile=0x142c, lpFileSize=0xb40f9dc | out: lpFileSize=0xb40f9dc*=52096) returned 1 [0166.953] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0xcb7c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.953] ReadFile (in: hFile=0x142c, lpBuffer=0xb40f9b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb40f9c8, lpOverlapped=0x0 | out: lpBuffer=0xb40f9b8*, lpNumberOfBytesRead=0xb40f9c8*=0x4, lpOverlapped=0x0) returned 1 [0166.956] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0166.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba80 [0166.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb238 [0166.957] NtQuerySystemTime (in: CurrentTime=0xb40f950 | out: CurrentTime=0xb40f950*=132462177455304000) returned 0x0 [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x6271ead5 [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x358e87ce [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x4b3832fa [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x5c1113f [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x27713464 [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x3f7a8fd4 [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x2f13c38c [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x3e83c4c4 [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x3baf035a [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x980427b [0166.957] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x1c6fe7c3 [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x62ebda6b [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x5add56aa [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x5f33a6c2 [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x40e85662 [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x616b1f60 [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x58057b0e [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x65fadc5f [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x16883a6 [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x73852975 [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x545c8107 [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x2f50b38a [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x6b4652ef [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x906cdd1 [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x57176412 [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x56d55142 [0166.958] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x66d67909 [0166.959] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x571e0cec [0166.959] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x7f3dd284 [0166.959] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x5c0e24b [0166.959] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x4e673214 [0166.959] RtlRandomEx (in: Seed=0xb40f948 | out: Seed=0xb40f948) returned 0x393aa156 [0166.975] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.975] ReadFile (in: hFile=0x142c, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb40f950, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xb40f950*=0x3c00, lpOverlapped=0x0) returned 1 [0166.986] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a250c8 [0166.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0166.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0166.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb800) returned 1 [0166.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0166.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0166.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb238 [0166.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb238) returned 1 [0166.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0166.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a250c8) returned 1 [0166.988] WriteFile (in: hFile=0x142c, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb40f950, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0xb40f950*=0x3c00, lpOverlapped=0x0) returned 1 [0166.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0166.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0166.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0166.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb238) returned 1 [0166.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37590 [0166.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb238 [0166.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0166.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc68) returned 1 [0166.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0166.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a250c8) returned 1 [0166.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x300d948 [0166.992] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0166.992] WriteFile (in: hFile=0x142c, lpBuffer=0x300d948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb40f9d0, lpOverlapped=0x0 | out: lpBuffer=0x300d948*, lpNumberOfBytesWritten=0xb40f9d0*=0x10c, lpOverlapped=0x0) returned 1 [0166.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a250c8 [0166.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0166.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0166.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc68) returned 1 [0166.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3eddc68 [0166.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd8f8 [0166.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb878 [0166.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb878) returned 1 [0166.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0166.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a250c8) returned 1 [0166.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad79b0 [0166.995] sprintf (in: _Dest=0x7ad79b0, _Format="%c%c" | out: _Dest="e9") returned 2 [0166.995] sprintf (in: _Dest=0x7ad79b2, _Format="%c%c" | out: _Dest="e6") returned 2 [0166.995] sprintf (in: _Dest=0x7ad79b4, _Format="%c%c" | out: _Dest="da") returned 2 [0166.995] sprintf (in: _Dest=0x7ad79b6, _Format="%c%c" | out: _Dest="c8") returned 2 [0166.995] sprintf (in: _Dest=0x7ad79b8, _Format="%c%c" | out: _Dest="41") returned 2 [0166.995] sprintf (in: _Dest=0x7ad79ba, _Format="%c%c" | out: _Dest="72") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79bc, _Format="%c%c" | out: _Dest="0f") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79be, _Format="%c%c" | out: _Dest="f1") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79c0, _Format="%c%c" | out: _Dest="fa") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79c2, _Format="%c%c" | out: _Dest="63") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79c4, _Format="%c%c" | out: _Dest="60") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79c6, _Format="%c%c" | out: _Dest="dd") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79c8, _Format="%c%c" | out: _Dest="9a") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79ca, _Format="%c%c" | out: _Dest="b0") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79cc, _Format="%c%c" | out: _Dest="d7") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79ce, _Format="%c%c" | out: _Dest="ab") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79d0, _Format="%c%c" | out: _Dest="9b") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79d2, _Format="%c%c" | out: _Dest="17") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79d4, _Format="%c%c" | out: _Dest="d9") returned 2 [0166.996] sprintf (in: _Dest=0x7ad79d6, _Format="%c%c" | out: _Dest="6a") returned 2 [0166.997] sprintf (in: _Dest=0x7ad79d8, _Format="%c%c" | out: _Dest="ee") returned 2 [0166.997] sprintf (in: _Dest=0x7ad79da, _Format="%c%c" | out: _Dest="39") returned 2 [0166.997] sprintf (in: _Dest=0x7ad79dc, _Format="%c%c" | out: _Dest="ed") returned 2 [0166.997] sprintf (in: _Dest=0x7ad79de, _Format="%c%c" | out: _Dest="6e") returned 2 [0166.997] sprintf (in: _Dest=0x7ad79e0, _Format="%c%c" | out: _Dest="45") returned 2 [0166.997] sprintf (in: _Dest=0x7ad79e2, _Format="%c%c" | out: _Dest="15") returned 2 [0166.997] RtlInitAnsiString (in: DestinationString=0xb40f958, SourceString="e9e6dac841720ff1fa6360dd9ab0d7ab9b17d96aee39ed6e4515" | out: DestinationString="e9e6dac841720ff1fa6360dd9ab0d7ab9b17d96aee39ed6e4515") [0166.997] RtlAnsiStringToUnicodeString (in: DestinationString=0xb40f950, SourceString="e9e6dac841720ff1fa6360dd9ab0d7ab9b17d96aee39ed6e4515", AllocateDestinationString=1 | out: DestinationString="e9e6dac841720ff1fa6360dd9ab0d7ab9b17d96aee39ed6e4515") returned 0x0 [0166.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f650 [0166.997] wcscat (in: _Dest=0x7a5e7c8, _Source="e9e6dac841720" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\e9e6dac841720") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\e9e6dac841720" [0166.997] wcscat (in: _Dest=0x7a5e7c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\e9e6dac841720.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\e9e6dac841720.68814f" [0166.998] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\e9e6dac841720.68814f", NtPathName=0xb40f948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\e9e6dac841720.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0166.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6fe0 [0167.001] FlushFileBuffers (hFile=0x142c) returned 1 [0167.003] CloseHandle (hObject=0x142c) returned 1 [0167.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a633f0 [0167.005] wcscpy (in: _Dest=0x7a633f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\" [0167.005] wcscat (in: _Dest=0x7a633f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\68814F-Readme.txt" [0167.005] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\68814f-readme.txt")) returned 0xffffffff [0167.005] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x142c [0167.005] WriteFile (in: hFile=0x142c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb40f964, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb40f964*=0x8b9, lpOverlapped=0x0) returned 1 [0167.008] CloseHandle (hObject=0x142c) returned 1 [0167.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a633f0) returned 1 [0167.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6dc8) returned 1 Thread: id = 3729 os_tid = 0x2624 [0166.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx")) returned 0x20 [0166.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0166.990] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.009] GetLastError () returned 0x5 [0167.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0167.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052f40) returned 1 Thread: id = 3730 os_tid = 0x2634 [0167.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx")) returned 0x20 [0167.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0167.011] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.011] GetLastError () returned 0x5 [0167.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0167.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e678) returned 1 Thread: id = 3731 os_tid = 0x2638 [0167.013] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll")) returned 0x2020 [0167.013] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0167.013] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.014] GetLastError () returned 0x5 [0167.014] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0167.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7448) returned 1 Thread: id = 3732 os_tid = 0x263c [0167.015] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll")) returned 0x2020 [0167.015] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0167.015] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.016] GetLastError () returned 0x5 [0167.016] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0167.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 3733 os_tid = 0x2640 [0167.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg")) returned 0x20 [0167.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0167.018] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.018] GetLastError () returned 0x5 [0167.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0167.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6e60) returned 1 Thread: id = 3734 os_tid = 0x2650 [0167.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a603f0 [0167.027] wcscpy (in: _Dest=0x7a603f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0167.027] wcscat (in: _Dest=0x7a603f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0167.027] wcscat (in: _Dest=0x7a603f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*" [0167.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0167.027] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77038290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9052e150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bf0 [0167.343] wcscmp (_String1=".", _String2=".") returned 0 [0167.343] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77038290, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9052e150, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.343] wcscmp (_String1="..", _String2=".") returned 1 [0167.343] wcscmp (_String1="..", _String2="..") returned 0 [0167.343] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7705e3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUGH.WAV", cAlternateFileName="")) returned 1 [0167.344] wcscmp (_String1="COUGH.WAV", _String2=".") returned 1 [0167.344] wcscmp (_String1="COUGH.WAV", _String2="..") returned 1 [0167.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a633f0 [0167.344] wcscpy (in: _Dest=0x7a633f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0167.344] wcscat (in: _Dest=0x7a633f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0167.344] wcscat (in: _Dest=0x7a633f0, _Source="COUGH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" [0170.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a633f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0170.342] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88692f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIGGLE.WAV", cAlternateFileName="")) returned 1 [0170.342] wcscmp (_String1="GIGGLE.WAV", _String2=".") returned 1 [0170.342] wcscmp (_String1="GIGGLE.WAV", _String2="..") returned 1 [0170.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62c70 [0170.342] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0170.342] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0170.342] wcscat (in: _Dest=0x7a62c70, _Source="GIGGLE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" [0170.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0170.344] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="HICCUP.WAV", cAlternateFileName="")) returned 1 [0170.344] wcscmp (_String1="HICCUP.WAV", _String2=".") returned 1 [0170.344] wcscmp (_String1="HICCUP.WAV", _String2="..") returned 1 [0170.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a629f0 [0170.344] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0170.345] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0170.346] wcscat (in: _Dest=0x7a629f0, _Source="HICCUP.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" [0170.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0170.347] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d331350, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMHMM.WAV", cAlternateFileName="")) returned 1 [0170.347] wcscmp (_String1="MMHMM.WAV", _String2=".") returned 1 [0170.347] wcscmp (_String1="MMHMM.WAV", _String2="..") returned 1 [0170.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63fd0 [0170.347] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0170.347] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0170.347] wcscat (in: _Dest=0x7a63fd0, _Source="MMHMM.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" [0170.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0170.349] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNEEZE.WAV", cAlternateFileName="")) returned 1 [0170.349] wcscmp (_String1="SNEEZE.WAV", _String2=".") returned 1 [0170.349] wcscmp (_String1="SNEEZE.WAV", _String2="..") returned 1 [0170.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63530 [0170.349] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0170.349] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0170.349] wcscat (in: _Dest=0x7a63530, _Source="SNEEZE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" [0170.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0170.351] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827f44b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="THROAT.WAV", cAlternateFileName="")) returned 1 [0170.351] wcscmp (_String1="THROAT.WAV", _String2=".") returned 1 [0170.351] wcscmp (_String1="THROAT.WAV", _String2="..") returned 1 [0170.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62950 [0170.351] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0170.351] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0170.351] wcscat (in: _Dest=0x7a62950, _Source="THROAT.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" [0170.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0170.352] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 1 [0170.352] wcscmp (_String1="Whistling.wav", _String2=".") returned 1 [0170.353] wcscmp (_String1="Whistling.wav", _String2="..") returned 1 [0170.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3052f40 [0170.353] wcscpy (in: _Dest=0x3052f40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People" [0170.353] wcscat (in: _Dest=0x3052f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\" [0170.353] wcscat (in: _Dest=0x3052f40, _Source="Whistling.wav" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" [0170.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0170.354] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 0 [0170.354] FindClose (in: hFindFile=0x7ad7bf0 | out: hFindFile=0x7ad7bf0) returned 1 [0170.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0170.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 [0170.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062a10) returned 1 Thread: id = 3735 os_tid = 0x2664 [0167.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61830 [0167.030] wcscpy (in: _Dest=0x7a61830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0167.030] wcscat (in: _Dest=0x7a61830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0167.030] wcscat (in: _Dest=0x7a61830, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*" [0167.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc810 [0167.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9233b710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0167.344] wcscmp (_String1=".", _String2=".") returned 0 [0167.344] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9233b710, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.344] wcscmp (_String1="..", _String2=".") returned 1 [0167.345] wcscmp (_String1="..", _String2="..") returned 0 [0167.345] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x84e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM.WAV", cAlternateFileName="")) returned 1 [0167.345] wcscmp (_String1="ALARM.WAV", _String2=".") returned 1 [0167.345] wcscmp (_String1="ALARM.WAV", _String2="..") returned 1 [0167.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62db0 [0167.345] wcscpy (in: _Dest=0x7a62db0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0167.345] wcscat (in: _Dest=0x7a62db0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0167.345] wcscat (in: _Dest=0x7a62db0, _Source="ALARM.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" [0172.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0172.617] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUZZ.WAV", cAlternateFileName="")) returned 1 [0172.618] wcscmp (_String1="BUZZ.WAV", _String2=".") returned 1 [0172.618] wcscmp (_String1="BUZZ.WAV", _String2="..") returned 1 [0172.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a633f0 [0172.618] wcscpy (in: _Dest=0x7a633f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0172.618] wcscat (in: _Dest=0x7a633f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0172.618] wcscat (in: _Dest=0x7a633f0, _Source="BUZZ.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" [0172.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a633f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0172.619] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8872b4b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd686, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0172.619] wcscmp (_String1="LASER.WAV", _String2=".") returned 1 [0172.619] wcscmp (_String1="LASER.WAV", _String2="..") returned 1 [0172.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63cb0 [0172.619] wcscpy (in: _Dest=0x7a63cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0172.619] wcscat (in: _Dest=0x7a63cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0172.619] wcscat (in: _Dest=0x7a63cb0, _Source="LASER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" [0172.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0172.620] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x100ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADAR.WAV", cAlternateFileName="")) returned 1 [0172.620] wcscmp (_String1="RADAR.WAV", _String2=".") returned 1 [0172.620] wcscmp (_String1="RADAR.WAV", _String2="..") returned 1 [0172.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a629f0 [0172.620] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0172.620] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0172.620] wcscat (in: _Dest=0x7a629f0, _Source="RADAR.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" [0172.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0172.621] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOT.WAV", cAlternateFileName="")) returned 1 [0172.621] wcscmp (_String1="TOOT.WAV", _String2=".") returned 1 [0172.621] wcscmp (_String1="TOOT.WAV", _String2="..") returned 1 [0172.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63c10 [0172.621] wcscpy (in: _Dest=0x7a63c10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0172.621] wcscat (in: _Dest=0x7a63c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0172.621] wcscat (in: _Dest=0x7a63c10, _Source="TOOT.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" [0172.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0172.622] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xea72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIBE.WAV", cAlternateFileName="")) returned 1 [0172.622] wcscmp (_String1="VIBE.WAV", _String2=".") returned 1 [0172.622] wcscmp (_String1="VIBE.WAV", _String2="..") returned 1 [0172.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62e50 [0172.623] wcscpy (in: _Dest=0x7a62e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0172.623] wcscat (in: _Dest=0x7a62e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0172.623] wcscat (in: _Dest=0x7a62e50, _Source="VIBE.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" [0172.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0172.624] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 1 [0172.624] wcscmp (_String1="WARN.WAV", _String2=".") returned 1 [0172.624] wcscmp (_String1="WARN.WAV", _String2="..") returned 1 [0172.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62c70 [0172.624] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places" [0172.624] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\" [0172.624] wcscat (in: _Dest=0x7a62c70, _Source="WARN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" [0172.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0172.625] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x30bc810 | out: lpFindFileData=0x30bc810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 0 [0172.625] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0172.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc810) returned 1 [0172.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61830) returned 1 [0172.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 3736 os_tid = 0x2668 [0167.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61cb0 [0167.055] wcscpy (in: _Dest=0x7a61cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0167.055] wcscat (in: _Dest=0x7a61cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0167.055] wcscat (in: _Dest=0x7a61cb0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*" [0167.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0167.055] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cb0 [0167.348] wcscmp (_String1=".", _String2=".") returned 0 [0167.348] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e95370, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.348] wcscmp (_String1="..", _String2=".") returned 1 [0167.348] wcscmp (_String1="..", _String2="..") returned 0 [0167.348] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76ebb4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAN.WAV", cAlternateFileName="")) returned 1 [0167.348] wcscmp (_String1="CAN.WAV", _String2=".") returned 1 [0167.348] wcscmp (_String1="CAN.WAV", _String2="..") returned 1 [0167.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7ad6dc8 [0167.348] wcscpy (in: _Dest=0x7ad6dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0167.348] wcscat (in: _Dest=0x7ad6dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0167.348] wcscat (in: _Dest=0x7ad6dc8, _Source="CAN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" [0167.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0167.834] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cd6150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPLER.WAV", cAlternateFileName="")) returned 1 [0167.834] wcscmp (_String1="COUPLER.WAV", _String2=".") returned 1 [0167.834] wcscmp (_String1="COUPLER.WAV", _String2="..") returned 1 [0167.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62950 [0167.834] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0167.834] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0167.834] wcscat (in: _Dest=0x7a62950, _Source="COUPLER.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" [0167.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0167.835] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa412, dwReserved0=0x0, dwReserved1=0x0, cFileName="HORN.WAV", cAlternateFileName="")) returned 1 [0167.835] wcscmp (_String1="HORN.WAV", _String2=".") returned 1 [0167.835] wcscmp (_String1="HORN.WAV", _String2="..") returned 1 [0167.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a621d0 [0167.836] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0167.836] wcscat (in: _Dest=0x7a621d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0167.836] wcscat (in: _Dest=0x7a621d0, _Source="HORN.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" [0167.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a621d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0167.837] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOT.WAV", cAlternateFileName="")) returned 1 [0167.837] wcscmp (_String1="SHOT.WAV", _String2=".") returned 1 [0167.837] wcscmp (_String1="SHOT.WAV", _String2="..") returned 1 [0167.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62f90 [0167.837] wcscpy (in: _Dest=0x7a62f90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0167.837] wcscat (in: _Dest=0x7a62f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0167.837] wcscat (in: _Dest=0x7a62f90, _Source="SHOT.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" [0167.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0167.838] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf548, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOVEL.WAV", cAlternateFileName="")) returned 1 [0167.838] wcscmp (_String1="SHOVEL.WAV", _String2=".") returned 1 [0167.838] wcscmp (_String1="SHOVEL.WAV", _String2="..") returned 1 [0167.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63710 [0167.838] wcscpy (in: _Dest=0x7a63710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0167.838] wcscat (in: _Dest=0x7a63710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0167.838] wcscat (in: _Dest=0x7a63710, _Source="SHOVEL.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" [0167.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0167.839] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xedd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPLASH.WAV", cAlternateFileName="")) returned 1 [0167.839] wcscmp (_String1="SPLASH.WAV", _String2=".") returned 1 [0167.839] wcscmp (_String1="SPLASH.WAV", _String2="..") returned 1 [0167.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a624f0 [0167.839] wcscpy (in: _Dest=0x7a624f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0167.840] wcscat (in: _Dest=0x7a624f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0167.840] wcscat (in: _Dest=0x7a624f0, _Source="SPLASH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" [0167.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a624f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0167.841] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0167.841] wcscmp (_String1="WHOOSH.WAV", _String2=".") returned 1 [0167.841] wcscmp (_String1="WHOOSH.WAV", _String2="..") returned 1 [0167.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62770 [0167.841] wcscpy (in: _Dest=0x7a62770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things" [0167.841] wcscat (in: _Dest=0x7a62770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\" [0167.841] wcscat (in: _Dest=0x7a62770, _Source="WHOOSH.WAV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" [0167.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0167.842] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3664a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88b7bc90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3664a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 0 [0167.842] FindClose (in: hFindFile=0x7ad7cb0 | out: hFindFile=0x7ad7cb0) returned 1 [0167.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0167.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61cb0) returned 1 [0167.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 3737 os_tid = 0x266c [0167.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x20 [0167.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x20) returned 0 [0167.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.094] GetLastError () returned 0x5 [0167.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x20) returned 0 [0167.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 3738 os_tid = 0x2670 [0167.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x20 [0167.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x20) returned 0 [0167.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.096] GetLastError () returned 0x5 [0167.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x20) returned 0 [0167.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 3739 os_tid = 0x2674 [0167.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x20 [0167.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x20) returned 0 [0167.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.098] GetLastError () returned 0x5 [0167.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x20) returned 0 [0167.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 3740 os_tid = 0x2678 [0167.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x20 [0167.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x20) returned 0 [0167.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.107] GetLastError () returned 0x5 [0167.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x20) returned 0 [0167.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 3741 os_tid = 0x267c [0167.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif")) returned 0x20 [0167.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x20) returned 0 [0167.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.110] GetLastError () returned 0x5 [0167.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x20) returned 0 [0167.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 3742 os_tid = 0x2680 [0167.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif")) returned 0x20 [0167.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x20) returned 0 [0167.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.508] GetLastError () returned 0x5 [0167.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x20) returned 0 [0167.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 3743 os_tid = 0x2684 [0167.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif")) returned 0x20 [0167.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x20) returned 0 [0167.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.509] GetLastError () returned 0x5 [0167.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x20) returned 0 [0167.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 3744 os_tid = 0x2688 [0167.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif")) returned 0x20 [0167.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x20) returned 0 [0167.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.349] GetLastError () returned 0x5 [0167.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x20) returned 0 [0167.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 3745 os_tid = 0x268c [0167.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x20 [0167.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x20) returned 0 [0167.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.351] GetLastError () returned 0x5 [0167.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x20) returned 0 [0167.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 3746 os_tid = 0x2690 [0167.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6fe0 [0167.116] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0167.116] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0167.116] wcscat (in: _Dest=0x2ff6fe0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*" [0167.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bca78 [0167.116] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf990 [0167.510] wcscmp (_String1=".", _String2=".") returned 0 [0167.510] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x851e8870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.510] wcscmp (_String1="..", _String2=".") returned 1 [0167.510] wcscmp (_String1="..", _String2="..") returned 0 [0167.510] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", cAlternateFileName="VERISI~2.CER")) returned 1 [0167.510] wcscmp (_String1="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", _String2=".") returned 1 [0167.510] wcscmp (_String1="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", _String2="..") returned 1 [0167.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2f9a00 [0167.510] wcscpy (in: _Dest=0x2f9a00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0167.510] wcscat (in: _Dest=0x2f9a00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0167.510] wcscat (in: _Dest=0x2f9a00, _Source="VeriSign_Class_3_Code_Signing_2001-4_CA.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" [0172.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2f9a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0172.900] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Public_Primary_CA.cer", cAlternateFileName="VERISI~1.CER")) returned 1 [0172.900] wcscmp (_String1="VeriSign_Class_3_Public_Primary_CA.cer", _String2=".") returned 1 [0172.900] wcscmp (_String1="VeriSign_Class_3_Public_Primary_CA.cer", _String2="..") returned 1 [0172.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3de79b8 [0172.900] wcscpy (in: _Dest=0x3de79b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0172.900] wcscat (in: _Dest=0x3de79b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0172.900] wcscat (in: _Dest=0x3de79b8, _Source="VeriSign_Class_3_Public_Primary_CA.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" [0172.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de79b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0172.901] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8520e9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 1 [0172.901] wcscmp (_String1="VS_ComponentSigningIntermediate.cer", _String2=".") returned 1 [0172.901] wcscmp (_String1="VS_ComponentSigningIntermediate.cer", _String2="..") returned 1 [0172.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dad468 [0172.901] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components" [0172.901] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\" [0172.901] wcscat (in: _Dest=0x3dad468, _Source="VS_ComponentSigningIntermediate.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" [0172.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dad468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0172.903] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x30bca78 | out: lpFindFileData=0x30bca78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8520e9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 0 [0172.903] FindClose (in: hFindFile=0x3dcf990 | out: hFindFile=0x3dcf990) returned 1 [0172.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0172.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 [0172.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 Thread: id = 3747 os_tid = 0x2694 [0167.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv")) returned 0x20 [0171.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV", dwFileAttributes=0x20) returned 0 [0171.130] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.806] GetLastError () returned 0x5 [0171.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV", dwFileAttributes=0x20) returned 0 [0171.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45b60) returned 1 Thread: id = 3748 os_tid = 0x2698 [0167.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv")) returned 0x20 [0171.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV", dwFileAttributes=0x20) returned 0 [0171.842] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.842] GetLastError () returned 0x5 [0171.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV", dwFileAttributes=0x20) returned 0 [0171.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 3749 os_tid = 0x269c [0167.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif")) returned 0x20 [0169.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF", dwFileAttributes=0x20) returned 0 [0169.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.721] GetLastError () returned 0x5 [0169.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF", dwFileAttributes=0x20) returned 0 [0169.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a644b8) returned 1 Thread: id = 3750 os_tid = 0x26a0 [0167.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif")) returned 0x20 [0169.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF", dwFileAttributes=0x20) returned 0 [0169.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.757] GetLastError () returned 0x5 [0169.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF", dwFileAttributes=0x20) returned 0 [0169.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 Thread: id = 3751 os_tid = 0x26a4 [0167.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif")) returned 0x20 [0169.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF", dwFileAttributes=0x20) returned 0 [0169.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.718] GetLastError () returned 0x5 [0169.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF", dwFileAttributes=0x20) returned 0 [0169.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a645e8) returned 1 Thread: id = 3752 os_tid = 0x26a8 [0167.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif")) returned 0x20 [0169.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF", dwFileAttributes=0x20) returned 0 [0169.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.717] GetLastError () returned 0x5 [0169.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF", dwFileAttributes=0x20) returned 0 [0169.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64550) returned 1 Thread: id = 3753 os_tid = 0x26bc [0167.135] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\aze2gi9ozGCpU9SHjh1.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\aze2gi9ozgcpu9shjh1.mp4")) returned 0x20 [0167.135] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\aze2gi9ozGCpU9SHjh1.mp4", dwFileAttributes=0x20) returned 1 [0167.135] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\aze2gi9ozGCpU9SHjh1.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\aze2gi9ozgcpu9shjh1.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1430 [0167.135] GetFileSizeEx (in: hFile=0x1430, lpFileSize=0xbd9fbec | out: lpFileSize=0xbd9fbec*=48604) returned 1 [0167.135] SetFilePointerEx (in: hFile=0x1430, liDistanceToMove=0xbdd8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.136] ReadFile (in: hFile=0x1430, lpBuffer=0xbd9fbc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd9fbd8, lpOverlapped=0x0 | out: lpBuffer=0xbd9fbc8*, lpNumberOfBytesRead=0xbd9fbd8*=0x4, lpOverlapped=0x0) returned 1 [0167.137] SetFilePointerEx (in: hFile=0x1430, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4c0 [0167.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb5a8 [0167.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba80 [0167.138] NtQuerySystemTime (in: CurrentTime=0xbd9fb60 | out: CurrentTime=0xbd9fb60*=132462177457176000) returned 0x0 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x19858fd0 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x451351ad [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x6d42c5c2 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x65629978 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x6d8d8aef [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x2cad3358 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x7612c2e6 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0xf3f3f61 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x1cbed32e [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x585ad5f [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x6fbeb03e [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x32ae4b87 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0xb0af706 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x6112d277 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x2c32ace5 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x7556102d [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x4d75e57e [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x24a44190 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x5d858710 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x481e6af6 [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x13fd7cbc [0167.138] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x54fb531c [0167.139] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x24c4c2fe [0167.139] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x4ff65fef [0167.139] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x7804a4f0 [0167.139] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x7aeca04e [0167.139] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x71640b71 [0167.139] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x467f640a [0167.139] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x6a2a49e2 [0167.139] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x6a15cb [0167.139] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x65004913 [0167.139] RtlRandomEx (in: Seed=0xbd9fb58 | out: Seed=0xbd9fb58) returned 0x4ccc2647 [0167.151] SetFilePointerEx (in: hFile=0x1430, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.151] ReadFile (in: hFile=0x1430, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbd9fb60, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xbd9fb60*=0x3c00, lpOverlapped=0x0) returned 1 [0167.151] SetFilePointerEx (in: hFile=0x1430, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be298 [0167.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0167.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4c0 [0167.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd4c0) returned 1 [0167.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0167.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4c0 [0167.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba80 [0167.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edba80) returned 1 [0167.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0167.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be298) returned 1 [0167.152] WriteFile (in: hFile=0x1430, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbd9fb60, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0xbd9fb60*=0x3c00, lpOverlapped=0x0) returned 1 [0167.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0167.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0167.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x30bdef0 [0167.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb4b8) returned 1 [0167.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e561c8 [0167.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4b8 [0167.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede050 [0167.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede050) returned 1 [0167.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0167.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0167.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55968 [0167.355] SetFilePointerEx (in: hFile=0x1430, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.356] WriteFile (in: hFile=0x1430, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xbd9fbe0, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xbd9fbe0*=0x120, lpOverlapped=0x0) returned 1 [0167.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bd4d0 [0167.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015418 [0167.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0167.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0167.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79720 [0167.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0167.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b20 [0167.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b20) returned 1 [0167.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0167.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd4d0) returned 1 [0167.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5d) returned 0x3e1d9c0 [0167.570] sprintf (in: _Dest=0x3e1d9c0, _Format="%c%c" | out: _Dest="db") returned 2 [0167.570] sprintf (in: _Dest=0x3e1d9c2, _Format="%c%c" | out: _Dest="cf") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9c4, _Format="%c%c" | out: _Dest="21") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9c6, _Format="%c%c" | out: _Dest="83") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9c8, _Format="%c%c" | out: _Dest="04") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9ca, _Format="%c%c" | out: _Dest="89") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9cc, _Format="%c%c" | out: _Dest="13") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9ce, _Format="%c%c" | out: _Dest="b2") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9d0, _Format="%c%c" | out: _Dest="51") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9d2, _Format="%c%c" | out: _Dest="e7") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9d4, _Format="%c%c" | out: _Dest="89") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9d6, _Format="%c%c" | out: _Dest="90") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9d8, _Format="%c%c" | out: _Dest="66") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9da, _Format="%c%c" | out: _Dest="31") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9dc, _Format="%c%c" | out: _Dest="ee") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9de, _Format="%c%c" | out: _Dest="31") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9e0, _Format="%c%c" | out: _Dest="c6") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9e2, _Format="%c%c" | out: _Dest="88") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9e4, _Format="%c%c" | out: _Dest="1a") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9e6, _Format="%c%c" | out: _Dest="94") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9e8, _Format="%c%c" | out: _Dest="a7") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9ea, _Format="%c%c" | out: _Dest="dd") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9ec, _Format="%c%c" | out: _Dest="54") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9ee, _Format="%c%c" | out: _Dest="e7") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9f0, _Format="%c%c" | out: _Dest="72") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9f2, _Format="%c%c" | out: _Dest="1c") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9f4, _Format="%c%c" | out: _Dest="8e") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9f6, _Format="%c%c" | out: _Dest="1e") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9f8, _Format="%c%c" | out: _Dest="87") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9fa, _Format="%c%c" | out: _Dest="05") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9fc, _Format="%c%c" | out: _Dest="82") returned 2 [0167.571] sprintf (in: _Dest=0x3e1d9fe, _Format="%c%c" | out: _Dest="08") returned 2 [0167.571] sprintf (in: _Dest=0x3e1da00, _Format="%c%c" | out: _Dest="4b") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da02, _Format="%c%c" | out: _Dest="c4") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da04, _Format="%c%c" | out: _Dest="58") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da06, _Format="%c%c" | out: _Dest="fc") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da08, _Format="%c%c" | out: _Dest="d8") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da0a, _Format="%c%c" | out: _Dest="05") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da0c, _Format="%c%c" | out: _Dest="20") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da0e, _Format="%c%c" | out: _Dest="f9") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da10, _Format="%c%c" | out: _Dest="c6") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da12, _Format="%c%c" | out: _Dest="e3") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da14, _Format="%c%c" | out: _Dest="98") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da16, _Format="%c%c" | out: _Dest="0d") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da18, _Format="%c%c" | out: _Dest="37") returned 2 [0167.572] sprintf (in: _Dest=0x3e1da1a, _Format="%c%c" | out: _Dest="81") returned 2 [0167.572] RtlInitAnsiString (in: DestinationString=0xbd9fb68, SourceString="dbcf2183048913b251e789906631ee31c6881a94a7dd54e7721c8e1e870582084bc458fcd80520f9c6e3980d3781" | out: DestinationString="dbcf2183048913b251e789906631ee31c6881a94a7dd54e7721c8e1e870582084bc458fcd80520f9c6e3980d3781") [0167.572] RtlAnsiStringToUnicodeString (in: DestinationString=0xbd9fb60, SourceString="dbcf2183048913b251e789906631ee31c6881a94a7dd54e7721c8e1e870582084bc458fcd80520f9c6e3980d3781", AllocateDestinationString=1 | out: DestinationString="dbcf2183048913b251e789906631ee31c6881a94a7dd54e7721c8e1e870582084bc458fcd80520f9c6e3980d3781") returned 0x0 [0167.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a378 [0167.572] wcscat (in: _Dest=0x3ddf1f8, _Source="dbcf2183048913b251e7899" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\dbcf2183048913b251e7899") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\dbcf2183048913b251e7899" [0167.572] wcscat (in: _Dest=0x3ddf1f8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\dbcf2183048913b251e7899.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\dbcf2183048913b251e7899.68814f" [0167.572] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\dbcf2183048913b251e7899.68814f", NtPathName=0xbd9fb58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\dbcf2183048913b251e7899.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x2f93d0 [0167.596] FlushFileBuffers (hFile=0x1430) returned 1 [0167.601] CloseHandle (hObject=0x1430) returned 1 [0167.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e688d0 [0167.606] wcscpy (in: _Dest=0x3e688d0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\" [0167.606] wcscat (in: _Dest=0x3e688d0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\68814F-Readme.txt" [0167.606] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\68814f-readme.txt")) returned 0xffffffff [0167.606] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1430 [0167.606] WriteFile (in: hFile=0x1430, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbd9fb74, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbd9fb74*=0x8b9, lpOverlapped=0x0) returned 1 [0167.608] CloseHandle (hObject=0x1430) returned 1 [0167.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 [0167.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 3754 os_tid = 0x26c0 [0167.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a1e8 [0167.155] wcscpy (in: _Dest=0x3e3a1e8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD" [0167.155] wcscat (in: _Dest=0x3e3a1e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\" [0167.155] wcscat (in: _Dest=0x3e3a1e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\*" [0167.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0167.155] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764651f0, ftCreationTime.dwHighDateTime=0x1d5dbf8, ftLastAccessTime.dwLowDateTime=0x67186130, ftLastAccessTime.dwHighDateTime=0x1d5e3e3, ftLastWriteTime.dwLowDateTime=0x67186130, ftLastWriteTime.dwHighDateTime=0x1d5e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad79b0 [0167.155] wcscmp (_String1=".", _String2=".") returned 0 [0167.155] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764651f0, ftCreationTime.dwHighDateTime=0x1d5dbf8, ftLastAccessTime.dwLowDateTime=0x67186130, ftLastAccessTime.dwHighDateTime=0x1d5e3e3, ftLastWriteTime.dwLowDateTime=0x67186130, ftLastWriteTime.dwHighDateTime=0x1d5e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.155] wcscmp (_String1="..", _String2=".") returned 1 [0167.155] wcscmp (_String1="..", _String2="..") returned 0 [0167.155] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbec4a6d0, ftCreationTime.dwHighDateTime=0x1d5deea, ftLastAccessTime.dwLowDateTime=0x79fe03e0, ftLastAccessTime.dwHighDateTime=0x1d5dcd6, ftLastWriteTime.dwLowDateTime=0x79fe03e0, ftLastWriteTime.dwHighDateTime=0x1d5dcd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLE_6lErO8pgm", cAlternateFileName="BLE_6L~1")) returned 1 [0167.155] wcscmp (_String1="BLE_6lErO8pgm", _String2=".") returned 1 [0167.155] wcscmp (_String1="BLE_6lErO8pgm", _String2="..") returned 1 [0167.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c88e8 [0167.155] wcscpy (in: _Dest=0x2c88e8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD" [0167.155] wcscat (in: _Dest=0x2c88e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\" [0167.155] wcscat (in: _Dest=0x2c88e8, _Source="BLE_6lErO8pgm" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" [0167.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c88e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8 [0167.792] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53399560, ftCreationTime.dwHighDateTime=0x1d5da71, ftLastAccessTime.dwLowDateTime=0xfde6ef70, ftLastAccessTime.dwHighDateTime=0x1d5e675, ftLastWriteTime.dwLowDateTime=0xfde6ef70, ftLastWriteTime.dwHighDateTime=0x1d5e675, nFileSizeHigh=0x0, nFileSizeLow=0xb162, dwReserved0=0x0, dwReserved1=0x0, cFileName="R5bFW6IN4U7.mp4", cAlternateFileName="R5BFW6~1.MP4")) returned 1 [0167.792] wcscmp (_String1="R5bFW6IN4U7.mp4", _String2=".") returned 1 [0167.792] wcscmp (_String1="R5bFW6IN4U7.mp4", _String2="..") returned 1 [0167.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8728 [0167.792] wcscpy (in: _Dest=0x2c8728, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD" [0167.792] wcscat (in: _Dest=0x2c8728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\" [0167.792] wcscat (in: _Dest=0x2c8728, _Source="R5bFW6IN4U7.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\R5bFW6IN4U7.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\R5bFW6IN4U7.mp4" [0167.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1224 [0167.793] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9858b5f0, ftCreationTime.dwHighDateTime=0x1d5e443, ftLastAccessTime.dwLowDateTime=0x17c80f10, ftLastAccessTime.dwHighDateTime=0x1d5e355, ftLastWriteTime.dwLowDateTime=0x17c80f10, ftLastWriteTime.dwHighDateTime=0x1d5e355, nFileSizeHigh=0x0, nFileSizeLow=0xdc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="xrZIUIq_U.swf", cAlternateFileName="XRZIUI~1.SWF")) returned 1 [0167.793] wcscmp (_String1="xrZIUIq_U.swf", _String2=".") returned 1 [0167.793] wcscmp (_String1="xrZIUIq_U.swf", _String2="..") returned 1 [0167.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8c68 [0167.793] wcscpy (in: _Dest=0x2c8c68, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD" [0167.793] wcscat (in: _Dest=0x2c8c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\" [0167.793] wcscat (in: _Dest=0x2c8c68, _Source="xrZIUIq_U.swf" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\xrZIUIq_U.swf") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\xrZIUIq_U.swf" [0167.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0167.794] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9858b5f0, ftCreationTime.dwHighDateTime=0x1d5e443, ftLastAccessTime.dwLowDateTime=0x17c80f10, ftLastAccessTime.dwHighDateTime=0x1d5e355, ftLastWriteTime.dwLowDateTime=0x17c80f10, ftLastWriteTime.dwHighDateTime=0x1d5e355, nFileSizeHigh=0x0, nFileSizeLow=0xdc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="xrZIUIq_U.swf", cAlternateFileName="XRZIUI~1.SWF")) returned 0 [0167.794] FindClose (in: hFindFile=0x7ad79b0 | out: hFindFile=0x7ad79b0) returned 1 [0167.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0167.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a1e8) returned 1 [0167.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e663d8) returned 1 Thread: id = 3755 os_tid = 0x26d8 [0167.156] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\XG045FT-WiPZq0cn.flv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\xg045ft-wipzq0cn.flv")) returned 0x20 [0167.156] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\XG045FT-WiPZq0cn.flv", dwFileAttributes=0x20) returned 1 [0167.156] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\XG045FT-WiPZq0cn.flv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\xg045ft-wipzq0cn.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1438 [0167.157] GetFileSizeEx (in: hFile=0x1438, lpFileSize=0xbfffbec | out: lpFileSize=0xbfffbec*=96948) returned 1 [0167.157] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x17ab0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.157] ReadFile (in: hFile=0x1438, lpBuffer=0xbfffbc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbfffbd8, lpOverlapped=0x0 | out: lpBuffer=0xbfffbc8*, lpNumberOfBytesRead=0xbfffbd8*=0x4, lpOverlapped=0x0) returned 1 [0167.158] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba80 [0167.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd8f8 [0167.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0167.158] NtQuerySystemTime (in: CurrentTime=0xbfffb60 | out: CurrentTime=0xbfffb60*=132462177457332000) returned 0x0 [0167.158] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x15928963 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x1a2651ac [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x420a1906 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x8a88fd7 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x6ddc7a6d [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x2c536009 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x4cbb0edc [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x5b3ef85a [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x21da272e [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x570bce39 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x6c9c8096 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x65ac5f6a [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x4c3dfc5 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x25ee503c [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x54a84f82 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x7ee5b4aa [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x1f03e0a6 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x4d0a077c [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x379f1e7c [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x6fa9ecd6 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x788a777d [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x1b13c510 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x117eed3a [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x4d11743 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x553e5b86 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x47b412dd [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x961e2d3 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x51836375 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x5b462d18 [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x259e5eba [0167.159] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x150381a3 [0167.160] RtlRandomEx (in: Seed=0xbfffb58 | out: Seed=0xbfffb58) returned 0x56dabe17 [0167.174] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.175] ReadFile (in: hFile=0x1438, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbfffb60, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0xbfffb60*=0x3c00, lpOverlapped=0x0) returned 1 [0167.175] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdfc8 [0167.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0167.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba80 [0167.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edba80) returned 1 [0167.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0167.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba80 [0167.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0167.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc68) returned 1 [0167.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0167.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdfc8) returned 1 [0167.176] WriteFile (in: hFile=0x1438, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbfffb60, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0xbfffb60*=0x3c00, lpOverlapped=0x0) returned 1 [0167.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0167.638] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.638] ReadFile (in: hFile=0x1438, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbfffb60, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0xbfffb60*=0x3c00, lpOverlapped=0x0) returned 1 [0167.639] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be400 [0167.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0167.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0167.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0167.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0167.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0167.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ff8 [0167.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ff8) returned 1 [0167.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be400) returned 1 [0167.639] WriteFile (in: hFile=0x1438, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbfffb60, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0xbfffb60*=0x3c00, lpOverlapped=0x0) returned 1 [0169.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0169.109] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x13eb4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.109] ReadFile (in: hFile=0x1438, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbfffb60, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0xbfffb60*=0x3c00, lpOverlapped=0x0) returned 1 [0169.110] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x13eb4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24e00 [0169.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f038 [0169.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0169.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c78) returned 1 [0169.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0169.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0169.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0169.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3600) returned 1 [0169.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f038) returned 1 [0169.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24e00) returned 1 [0169.112] WriteFile (in: hFile=0x1438, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbfffb60, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0xbfffb60*=0x3c00, lpOverlapped=0x0) returned 1 [0169.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0169.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e20190 [0169.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edba80) returned 1 [0169.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d580 [0169.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba80 [0169.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4c0 [0169.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd4c0) returned 1 [0169.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0169.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07e30) returned 1 [0169.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15a) returned 0x3dce108 [0169.472] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.473] WriteFile (in: hFile=0x1438, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x15a, lpNumberOfBytesWritten=0xbfffbe0, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0xbfffbe0*=0x15a, lpOverlapped=0x0) returned 1 [0170.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3ae8 [0170.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0170.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0170.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0170.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0170.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d60 [0170.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52d60) returned 1 [0170.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0170.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3ae8) returned 1 [0170.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe7328 [0170.553] sprintf (in: _Dest=0x2fe7328, _Format="%c%c" | out: _Dest="ca") returned 2 [0170.553] sprintf (in: _Dest=0x2fe732a, _Format="%c%c" | out: _Dest="a2") returned 2 [0170.553] sprintf (in: _Dest=0x2fe732c, _Format="%c%c" | out: _Dest="b2") returned 2 [0170.553] sprintf (in: _Dest=0x2fe732e, _Format="%c%c" | out: _Dest="cf") returned 2 [0170.553] sprintf (in: _Dest=0x2fe7330, _Format="%c%c" | out: _Dest="05") returned 2 [0170.553] sprintf (in: _Dest=0x2fe7332, _Format="%c%c" | out: _Dest="28") returned 2 [0170.553] sprintf (in: _Dest=0x2fe7334, _Format="%c%c" | out: _Dest="60") returned 2 [0170.553] sprintf (in: _Dest=0x2fe7336, _Format="%c%c" | out: _Dest="c7") returned 2 [0170.553] sprintf (in: _Dest=0x2fe7338, _Format="%c%c" | out: _Dest="b9") returned 2 [0170.553] sprintf (in: _Dest=0x2fe733a, _Format="%c%c" | out: _Dest="20") returned 2 [0170.553] sprintf (in: _Dest=0x2fe733c, _Format="%c%c" | out: _Dest="54") returned 2 [0170.554] sprintf (in: _Dest=0x2fe733e, _Format="%c%c" | out: _Dest="91") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7340, _Format="%c%c" | out: _Dest="9d") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7342, _Format="%c%c" | out: _Dest="1b") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7344, _Format="%c%c" | out: _Dest="39") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7346, _Format="%c%c" | out: _Dest="22") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7348, _Format="%c%c" | out: _Dest="49") returned 2 [0170.554] sprintf (in: _Dest=0x2fe734a, _Format="%c%c" | out: _Dest="d0") returned 2 [0170.554] sprintf (in: _Dest=0x2fe734c, _Format="%c%c" | out: _Dest="ff") returned 2 [0170.554] sprintf (in: _Dest=0x2fe734e, _Format="%c%c" | out: _Dest="02") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7350, _Format="%c%c" | out: _Dest="e8") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7352, _Format="%c%c" | out: _Dest="b7") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7354, _Format="%c%c" | out: _Dest="2d") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7356, _Format="%c%c" | out: _Dest="f5") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7358, _Format="%c%c" | out: _Dest="e4") returned 2 [0170.554] sprintf (in: _Dest=0x2fe735a, _Format="%c%c" | out: _Dest="d1") returned 2 [0170.554] sprintf (in: _Dest=0x2fe735c, _Format="%c%c" | out: _Dest="3c") returned 2 [0170.554] sprintf (in: _Dest=0x2fe735e, _Format="%c%c" | out: _Dest="52") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7360, _Format="%c%c" | out: _Dest="cc") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7362, _Format="%c%c" | out: _Dest="7d") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7364, _Format="%c%c" | out: _Dest="0d") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7366, _Format="%c%c" | out: _Dest="0a") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7368, _Format="%c%c" | out: _Dest="ce") returned 2 [0170.554] sprintf (in: _Dest=0x2fe736a, _Format="%c%c" | out: _Dest="36") returned 2 [0170.554] sprintf (in: _Dest=0x2fe736c, _Format="%c%c" | out: _Dest="20") returned 2 [0170.554] sprintf (in: _Dest=0x2fe736e, _Format="%c%c" | out: _Dest="5d") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7370, _Format="%c%c" | out: _Dest="ff") returned 2 [0170.554] sprintf (in: _Dest=0x2fe7372, _Format="%c%c" | out: _Dest="c6") returned 2 [0170.555] sprintf (in: _Dest=0x2fe7374, _Format="%c%c" | out: _Dest="d7") returned 2 [0170.555] sprintf (in: _Dest=0x2fe7376, _Format="%c%c" | out: _Dest="4a") returned 2 [0170.555] RtlInitAnsiString (in: DestinationString=0xbfffb68, SourceString="caa2b2cf052860c7b92054919d1b392249d0ff02e8b72df5e4d13c52cc7d0d0ace36205dffc6d74a" | out: DestinationString="caa2b2cf052860c7b92054919d1b392249d0ff02e8b72df5e4d13c52cc7d0d0ace36205dffc6d74a") [0170.555] RtlAnsiStringToUnicodeString (in: DestinationString=0xbfffb60, SourceString="caa2b2cf052860c7b92054919d1b392249d0ff02e8b72df5e4d13c52cc7d0d0ace36205dffc6d74a", AllocateDestinationString=1 | out: DestinationString="caa2b2cf052860c7b92054919d1b392249d0ff02e8b72df5e4d13c52cc7d0d0ace36205dffc6d74a") returned 0x0 [0170.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66140 [0170.555] RtlFreeAnsiString (AnsiString="c") [0170.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe7328) returned 1 [0170.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0170.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0170.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce108) returned 1 [0170.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d580) returned 1 [0170.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edba80) returned 1 [0170.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d700) returned 1 [0170.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e20190) returned 1 [0170.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd8f8) returned 1 [0170.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb878) returned 1 [0170.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb648) returned 1 [0170.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4190 [0170.556] wcscat (in: _Dest=0x3dc4190, _Source="caa2b2cf052860c7b920" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\caa2b2cf052860c7b920") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\caa2b2cf052860c7b920" [0170.556] wcscat (in: _Dest=0x3dc4190, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\caa2b2cf052860c7b920.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\caa2b2cf052860c7b920.68814f" [0170.556] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\caa2b2cf052860c7b920.68814f", NtPathName=0xbfffb58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\caa2b2cf052860c7b920.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0170.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de76b8 [0170.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de76b8) returned 1 [0170.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34f10) returned 1 [0170.558] NtQueryInformationFile (in: FileHandle=0x1438, IoStatusBlock=0xbfffb30, FileInformation=0xbfffb38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbfffb30, FileInformation=0xbfffb38) returned 0x0 [0170.558] NtSetInformationFile (FileHandle=0x1438, IoStatusBlock=0xbfffb30, FileInformation=0xbfffb38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0170.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 [0170.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66140) returned 1 [0170.560] FlushFileBuffers (hFile=0x1438) returned 1 [0170.561] CloseHandle (hObject=0x1438) returned 1 [0170.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e68498 [0170.562] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\" [0170.562] wcscat (in: _Dest=0x3e68498, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\68814F-Readme.txt" [0170.562] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\68814f-readme.txt")) returned 0x20 [0170.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0170.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 Thread: id = 3756 os_tid = 0x26dc [0167.194] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\h5ZBSYXq-R.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\h5zbsyxq-r.mp4")) returned 0x20 [0167.194] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\h5ZBSYXq-R.mp4", dwFileAttributes=0x20) returned 1 [0167.511] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\h5ZBSYXq-R.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\h5zbsyxq-r.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x143c [0167.511] GetFileSizeEx (in: hFile=0x143c, lpFileSize=0xb5cf8a4 | out: lpFileSize=0xb5cf8a4*=15186) returned 1 [0167.511] SetFilePointerEx (in: hFile=0x143c, liDistanceToMove=0x3b4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.511] ReadFile (in: hFile=0x143c, lpBuffer=0xb5cf880, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb5cf890, lpOverlapped=0x0 | out: lpBuffer=0xb5cf880*, lpNumberOfBytesRead=0xb5cf890*=0x4, lpOverlapped=0x0) returned 1 [0167.513] SetFilePointerEx (in: hFile=0x143c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e90 [0167.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538c8 [0167.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53558 [0167.513] NtQuerySystemTime (in: CurrentTime=0xb5cf818 | out: CurrentTime=0xb5cf818*=132462177460920000) returned 0x0 [0167.513] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0xb17daf [0167.513] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x182d3a89 [0167.513] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x1a4567f [0167.513] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x6f06ecec [0167.513] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x1bddea6f [0167.513] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x47cdccc1 [0167.513] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x28f02af3 [0167.513] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x4ac9e0ae [0167.513] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x18b9830d [0167.513] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x4121ff23 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x44a5c8d8 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x39a232b6 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x1f1cfaa8 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x47d68d43 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x7556ac2f [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x58c52c9e [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x72986eef [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x1510d407 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x54d32842 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x8337152 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x4ebca646 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x31f3bb9 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x5bd2638d [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x50ced642 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x1d9026a [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x55ce012e [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x1fe300e [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x714832e5 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x614d4bdd [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x25344d05 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x5174ef14 [0167.514] RtlRandomEx (in: Seed=0xb5cf810 | out: Seed=0xb5cf810) returned 0x1ad8f441 [0167.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e90) returned 1 [0167.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0167.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0167.526] ReadFile (in: hFile=0x143c, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x3b52, lpNumberOfBytesRead=0xb5cf80c, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xb5cf80c*=0x3b52, lpOverlapped=0x0) returned 1 [0167.526] SetFilePointerEx (in: hFile=0x143c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.526] WriteFile (in: hFile=0x143c, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x3b52, lpNumberOfBytesWritten=0xb5cf810, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0xb5cf810*=0x3b52, lpOverlapped=0x0) returned 1 [0167.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb238 [0167.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0167.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb800) returned 1 [0167.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0167.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0167.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0167.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79720 [0167.576] SetFilePointerEx (in: hFile=0x143c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.576] WriteFile (in: hFile=0x143c, lpBuffer=0x300d718*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xb5cf898, lpOverlapped=0x0 | out: lpBuffer=0x300d718*, lpNumberOfBytesWritten=0xb5cf898*=0x10e, lpOverlapped=0x0) returned 1 [0167.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be130 [0167.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0167.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb850 [0167.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb850) returned 1 [0167.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3edb850 [0167.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb7d8 [0167.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede050 [0167.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede050) returned 1 [0167.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0167.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x30be130 [0167.586] sprintf (in: _Dest=0x30be130, _Format="%c%c" | out: _Dest="06") returned 2 [0167.586] sprintf (in: _Dest=0x30be132, _Format="%c%c" | out: _Dest="91") returned 2 [0167.586] sprintf (in: _Dest=0x30be134, _Format="%c%c" | out: _Dest="f2") returned 2 [0167.586] sprintf (in: _Dest=0x30be136, _Format="%c%c" | out: _Dest="9d") returned 2 [0167.586] sprintf (in: _Dest=0x30be138, _Format="%c%c" | out: _Dest="9e") returned 2 [0167.586] sprintf (in: _Dest=0x30be13a, _Format="%c%c" | out: _Dest="e7") returned 2 [0167.586] sprintf (in: _Dest=0x30be13c, _Format="%c%c" | out: _Dest="41") returned 2 [0167.586] sprintf (in: _Dest=0x30be13e, _Format="%c%c" | out: _Dest="b5") returned 2 [0167.586] sprintf (in: _Dest=0x30be140, _Format="%c%c" | out: _Dest="ea") returned 2 [0167.587] sprintf (in: _Dest=0x30be142, _Format="%c%c" | out: _Dest="b4") returned 2 [0167.587] sprintf (in: _Dest=0x30be144, _Format="%c%c" | out: _Dest="1b") returned 2 [0167.587] sprintf (in: _Dest=0x30be146, _Format="%c%c" | out: _Dest="ca") returned 2 [0167.587] sprintf (in: _Dest=0x30be148, _Format="%c%c" | out: _Dest="83") returned 2 [0167.587] sprintf (in: _Dest=0x30be14a, _Format="%c%c" | out: _Dest="fe") returned 2 [0167.587] sprintf (in: _Dest=0x30be14c, _Format="%c%c" | out: _Dest="21") returned 2 [0167.587] sprintf (in: _Dest=0x30be14e, _Format="%c%c" | out: _Dest="cd") returned 2 [0167.587] sprintf (in: _Dest=0x30be150, _Format="%c%c" | out: _Dest="74") returned 2 [0167.587] sprintf (in: _Dest=0x30be152, _Format="%c%c" | out: _Dest="8b") returned 2 [0167.587] sprintf (in: _Dest=0x30be154, _Format="%c%c" | out: _Dest="ed") returned 2 [0167.587] sprintf (in: _Dest=0x30be156, _Format="%c%c" | out: _Dest="af") returned 2 [0167.587] sprintf (in: _Dest=0x30be158, _Format="%c%c" | out: _Dest="61") returned 2 [0167.587] sprintf (in: _Dest=0x30be15a, _Format="%c%c" | out: _Dest="5b") returned 2 [0167.587] sprintf (in: _Dest=0x30be15c, _Format="%c%c" | out: _Dest="0d") returned 2 [0167.587] sprintf (in: _Dest=0x30be15e, _Format="%c%c" | out: _Dest="d4") returned 2 [0167.587] sprintf (in: _Dest=0x30be160, _Format="%c%c" | out: _Dest="d3") returned 2 [0167.587] sprintf (in: _Dest=0x30be162, _Format="%c%c" | out: _Dest="92") returned 2 [0167.587] sprintf (in: _Dest=0x30be164, _Format="%c%c" | out: _Dest="61") returned 2 [0167.587] sprintf (in: _Dest=0x30be166, _Format="%c%c" | out: _Dest="f9") returned 2 [0167.587] RtlInitAnsiString (in: DestinationString=0xb5cf820, SourceString="0691f29d9ee741b5eab41bca83fe21cd748bedaf615b0dd4d39261f9" | out: DestinationString="0691f29d9ee741b5eab41bca83fe21cd748bedaf615b0dd4d39261f9") [0167.587] RtlAnsiStringToUnicodeString (in: DestinationString=0xb5cf818, SourceString="0691f29d9ee741b5eab41bca83fe21cd748bedaf615b0dd4d39261f9", AllocateDestinationString=1 | out: DestinationString="0691f29d9ee741b5eab41bca83fe21cd748bedaf615b0dd4d39261f9") returned 0x0 [0167.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3efb520 [0167.588] wcscat (in: _Dest=0x3e65c58, _Source="0691f29d9ee741" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\0691f29d9ee741") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\0691f29d9ee741" [0167.588] wcscat (in: _Dest=0x3e65c58, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\0691f29d9ee741.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\0691f29d9ee741.68814f" [0167.588] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\0691f29d9ee741.68814f", NtPathName=0xb5cf810, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\0691f29d9ee741.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e678c8 [0167.615] FlushFileBuffers (hFile=0x143c) returned 1 [0167.616] CloseHandle (hObject=0x143c) returned 1 [0167.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6b90 [0167.618] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" [0167.618] wcscat (in: _Dest=0x2ff6b90, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt" [0167.618] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\68814f-readme.txt")) returned 0xffffffff [0167.618] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1448 [0167.630] WriteFile (in: hFile=0x1448, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb5cf82c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb5cf82c*=0x8b9, lpOverlapped=0x0) returned 1 [0167.631] CloseHandle (hObject=0x1448) returned 1 [0167.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0167.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 3757 os_tid = 0xb98 [0167.194] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\k18 Wob.flv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\k18 wob.flv")) returned 0x20 [0167.194] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\k18 Wob.flv", dwFileAttributes=0x20) returned 1 [0167.527] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\k18 Wob.flv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\k18 wob.flv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1440 [0167.527] GetFileSizeEx (in: hFile=0x1440, lpFileSize=0xc05fc14 | out: lpFileSize=0xc05fc14*=51332) returned 1 [0167.527] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0xc880, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.527] ReadFile (in: hFile=0x1440, lpBuffer=0xc05fbf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc05fc00, lpOverlapped=0x0 | out: lpBuffer=0xc05fbf0*, lpNumberOfBytesRead=0xc05fc00*=0x4, lpOverlapped=0x0) returned 1 [0167.528] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e90 [0167.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53558 [0167.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f58 [0167.529] NtQuerySystemTime (in: CurrentTime=0xc05fb88 | out: CurrentTime=0xc05fb88*=132462177461076000) returned 0x0 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x294c5d0d [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x4617a8a6 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x17fe9a1a [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x5f606eee [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x649ea219 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x624de3f6 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x3a9b6612 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x5ad880 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x25223877 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x9f59b9b [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x1f383314 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x4222dc9b [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x746cfec3 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x16cfdb04 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x7688767f [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x3d462387 [0167.529] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x4cd1e21e [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x42f4c8d6 [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x7022d63f [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x355683fb [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x239de7ba [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x61d23609 [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x320a99b [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x617d1471 [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x297247a7 [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x5e3b0d20 [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0xe1c8b8a [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x6cd899f3 [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x2b3425bb [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x1948f8c1 [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x4fe09fb8 [0167.530] RtlRandomEx (in: Seed=0xc05fb80 | out: Seed=0xc05fb80) returned 0x71bdf74a [0167.541] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.541] ReadFile (in: hFile=0x1440, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc05fb88, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0xc05fb88*=0x3c00, lpOverlapped=0x0) returned 1 [0167.541] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bd4d0 [0167.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015418 [0167.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e90 [0167.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e90) returned 1 [0167.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0167.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e90 [0167.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f58 [0167.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f58) returned 1 [0167.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0167.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd4d0) returned 1 [0167.542] WriteFile (in: hFile=0x1440, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc05fb88, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0xc05fb88*=0x3c00, lpOverlapped=0x0) returned 1 [0167.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0167.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0167.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a375c0 [0167.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb5a8) returned 1 [0167.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37530 [0167.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb5a8 [0167.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4c0 [0167.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd4c0) returned 1 [0167.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0167.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300e668 [0167.579] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.579] WriteFile (in: hFile=0x1440, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xc05fc08, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0xc05fc08*=0x108, lpOverlapped=0x0) returned 1 [0167.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be130 [0167.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0167.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c38 [0167.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c38) returned 1 [0167.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a344f0 [0167.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c38 [0167.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538c8 [0167.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538c8) returned 1 [0167.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0167.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x3e79720 [0167.592] sprintf (in: _Dest=0x3e79720, _Format="%c%c" | out: _Dest="42") returned 2 [0167.592] sprintf (in: _Dest=0x3e79722, _Format="%c%c" | out: _Dest="cc") returned 2 [0167.592] sprintf (in: _Dest=0x3e79724, _Format="%c%c" | out: _Dest="cb") returned 2 [0167.592] sprintf (in: _Dest=0x3e79726, _Format="%c%c" | out: _Dest="f5") returned 2 [0167.592] sprintf (in: _Dest=0x3e79728, _Format="%c%c" | out: _Dest="5d") returned 2 [0167.592] sprintf (in: _Dest=0x3e7972a, _Format="%c%c" | out: _Dest="17") returned 2 [0167.592] sprintf (in: _Dest=0x3e7972c, _Format="%c%c" | out: _Dest="37") returned 2 [0167.592] sprintf (in: _Dest=0x3e7972e, _Format="%c%c" | out: _Dest="e7") returned 2 [0167.592] sprintf (in: _Dest=0x3e79730, _Format="%c%c" | out: _Dest="1c") returned 2 [0167.592] sprintf (in: _Dest=0x3e79732, _Format="%c%c" | out: _Dest="f0") returned 2 [0167.592] sprintf (in: _Dest=0x3e79734, _Format="%c%c" | out: _Dest="d2") returned 2 [0167.592] sprintf (in: _Dest=0x3e79736, _Format="%c%c" | out: _Dest="5d") returned 2 [0167.593] sprintf (in: _Dest=0x3e79738, _Format="%c%c" | out: _Dest="4e") returned 2 [0167.593] sprintf (in: _Dest=0x3e7973a, _Format="%c%c" | out: _Dest="ac") returned 2 [0167.593] sprintf (in: _Dest=0x3e7973c, _Format="%c%c" | out: _Dest="9f") returned 2 [0167.593] sprintf (in: _Dest=0x3e7973e, _Format="%c%c" | out: _Dest="34") returned 2 [0167.593] sprintf (in: _Dest=0x3e79740, _Format="%c%c" | out: _Dest="7a") returned 2 [0167.593] sprintf (in: _Dest=0x3e79742, _Format="%c%c" | out: _Dest="44") returned 2 [0167.593] sprintf (in: _Dest=0x3e79744, _Format="%c%c" | out: _Dest="b7") returned 2 [0167.593] sprintf (in: _Dest=0x3e79746, _Format="%c%c" | out: _Dest="dc") returned 2 [0167.593] sprintf (in: _Dest=0x3e79748, _Format="%c%c" | out: _Dest="20") returned 2 [0167.593] sprintf (in: _Dest=0x3e7974a, _Format="%c%c" | out: _Dest="7f") returned 2 [0167.593] RtlInitAnsiString (in: DestinationString=0xc05fb90, SourceString="42cccbf55d1737e71cf0d25d4eac9f347a44b7dc207f" | out: DestinationString="42cccbf55d1737e71cf0d25d4eac9f347a44b7dc207f") [0167.593] RtlAnsiStringToUnicodeString (in: DestinationString=0xc05fb88, SourceString="42cccbf55d1737e71cf0d25d4eac9f347a44b7dc207f", AllocateDestinationString=1 | out: DestinationString="42cccbf55d1737e71cf0d25d4eac9f347a44b7dc207f") returned 0x0 [0167.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1d8f0 [0167.593] wcscat (in: _Dest=0x2ff7cd0, _Source="42cccbf55d1" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\42cccbf55d1") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\42cccbf55d1" [0167.593] wcscat (in: _Dest=0x2ff7cd0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\42cccbf55d1.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\42cccbf55d1.68814f" [0167.593] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\42cccbf55d1.68814f", NtPathName=0xc05fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\42cccbf55d1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85d80 [0167.620] FlushFileBuffers (hFile=0x1440) returned 1 [0167.623] CloseHandle (hObject=0x1440) returned 1 [0167.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6180 [0167.624] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" [0167.624] wcscat (in: _Dest=0x2ff6180, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt" [0167.624] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\68814f-readme.txt")) returned 0x20 [0167.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 [0167.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e720) returned 1 Thread: id = 3758 os_tid = 0xba4 [0167.195] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\r-aq8EbyADESdMciV.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\r-aq8ebyadesdmciv.mp4")) returned 0x20 [0167.195] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\r-aq8EbyADESdMciV.mp4", dwFileAttributes=0x20) returned 1 [0167.542] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\r-aq8EbyADESdMciV.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\r-aq8ebyadesdmciv.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1444 [0167.542] GetFileSizeEx (in: hFile=0x1444, lpFileSize=0xba3fa94 | out: lpFileSize=0xba3fa94*=53811) returned 1 [0167.543] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0xd22f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.543] ReadFile (in: hFile=0x1444, lpBuffer=0xba3fa70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xba3fa80, lpOverlapped=0x0 | out: lpBuffer=0xba3fa70*, lpNumberOfBytesRead=0xba3fa80*=0x4, lpOverlapped=0x0) returned 1 [0167.544] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f58 [0167.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0167.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0167.544] NtQuerySystemTime (in: CurrentTime=0xba3fa08 | out: CurrentTime=0xba3fa08*=132462177461232000) returned 0x0 [0167.544] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x4b93ba72 [0167.544] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0xa49c80 [0167.544] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x577b6a14 [0167.544] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x349be320 [0167.544] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x5fd91376 [0167.544] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x598c7cd4 [0167.544] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x5c209ec7 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x3feab816 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x243dc2f9 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x46f980f [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0xc2a6894 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x1870167d [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x61834a7c [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x3dc40683 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x5e2ac77b [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x5cfef528 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x78b72755 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x184a29a6 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x9272b14 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x9367838 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x4653bf58 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x5fe2fe98 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x14c7b03b [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x6d57138e [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x3052f636 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x73a84a3c [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x1854373d [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x787cf84 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x17f0e2f [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x7bb256ca [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x7d5f1274 [0167.545] RtlRandomEx (in: Seed=0xba3fa00 | out: Seed=0xba3fa00) returned 0x118cb9ac [0167.553] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.553] ReadFile (in: hFile=0x1444, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xba3fa08, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0xba3fa08*=0x3c00, lpOverlapped=0x0) returned 1 [0167.553] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bd4d0 [0167.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015418 [0167.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f58 [0167.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f58) returned 1 [0167.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0167.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f58 [0167.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0167.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e534b8) returned 1 [0167.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0167.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd4d0) returned 1 [0167.554] WriteFile (in: hFile=0x1444, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xba3fa08, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0xba3fa08*=0x3c00, lpOverlapped=0x0) returned 1 [0167.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0167.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0167.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf510 [0167.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd4c0) returned 1 [0167.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x3dcf590 [0167.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4c0 [0167.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4b8 [0167.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb4b8) returned 1 [0167.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0167.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55968 [0167.582] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.582] WriteFile (in: hFile=0x1444, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xba3fa88, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xba3fa88*=0x11c, lpOverlapped=0x0) returned 1 [0167.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be130 [0167.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0167.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0167.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0167.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79720 [0167.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0167.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53468 [0167.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53468) returned 1 [0167.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0167.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe1328 [0167.598] sprintf (in: _Dest=0x2fe1328, _Format="%c%c" | out: _Dest="dd") returned 2 [0167.598] sprintf (in: _Dest=0x2fe132a, _Format="%c%c" | out: _Dest="96") returned 2 [0167.598] sprintf (in: _Dest=0x2fe132c, _Format="%c%c" | out: _Dest="7f") returned 2 [0167.598] sprintf (in: _Dest=0x2fe132e, _Format="%c%c" | out: _Dest="a9") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1330, _Format="%c%c" | out: _Dest="d0") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1332, _Format="%c%c" | out: _Dest="e2") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1334, _Format="%c%c" | out: _Dest="3e") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1336, _Format="%c%c" | out: _Dest="1a") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1338, _Format="%c%c" | out: _Dest="8e") returned 2 [0167.599] sprintf (in: _Dest=0x2fe133a, _Format="%c%c" | out: _Dest="c3") returned 2 [0167.599] sprintf (in: _Dest=0x2fe133c, _Format="%c%c" | out: _Dest="58") returned 2 [0167.599] sprintf (in: _Dest=0x2fe133e, _Format="%c%c" | out: _Dest="c4") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1340, _Format="%c%c" | out: _Dest="ea") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1342, _Format="%c%c" | out: _Dest="24") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1344, _Format="%c%c" | out: _Dest="1c") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1346, _Format="%c%c" | out: _Dest="47") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1348, _Format="%c%c" | out: _Dest="21") returned 2 [0167.599] sprintf (in: _Dest=0x2fe134a, _Format="%c%c" | out: _Dest="04") returned 2 [0167.599] sprintf (in: _Dest=0x2fe134c, _Format="%c%c" | out: _Dest="1b") returned 2 [0167.599] sprintf (in: _Dest=0x2fe134e, _Format="%c%c" | out: _Dest="4f") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1350, _Format="%c%c" | out: _Dest="5e") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1352, _Format="%c%c" | out: _Dest="64") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1354, _Format="%c%c" | out: _Dest="20") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1356, _Format="%c%c" | out: _Dest="a0") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1358, _Format="%c%c" | out: _Dest="1d") returned 2 [0167.599] sprintf (in: _Dest=0x2fe135a, _Format="%c%c" | out: _Dest="d6") returned 2 [0167.599] sprintf (in: _Dest=0x2fe135c, _Format="%c%c" | out: _Dest="f2") returned 2 [0167.599] sprintf (in: _Dest=0x2fe135e, _Format="%c%c" | out: _Dest="2d") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1360, _Format="%c%c" | out: _Dest="48") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1362, _Format="%c%c" | out: _Dest="51") returned 2 [0167.599] sprintf (in: _Dest=0x2fe1364, _Format="%c%c" | out: _Dest="b8") returned 2 [0167.600] sprintf (in: _Dest=0x2fe1366, _Format="%c%c" | out: _Dest="11") returned 2 [0167.600] sprintf (in: _Dest=0x2fe1368, _Format="%c%c" | out: _Dest="47") returned 2 [0167.600] sprintf (in: _Dest=0x2fe136a, _Format="%c%c" | out: _Dest="e0") returned 2 [0167.600] sprintf (in: _Dest=0x2fe136c, _Format="%c%c" | out: _Dest="a2") returned 2 [0167.600] sprintf (in: _Dest=0x2fe136e, _Format="%c%c" | out: _Dest="ae") returned 2 [0167.600] sprintf (in: _Dest=0x2fe1370, _Format="%c%c" | out: _Dest="d8") returned 2 [0167.600] sprintf (in: _Dest=0x2fe1372, _Format="%c%c" | out: _Dest="57") returned 2 [0167.600] sprintf (in: _Dest=0x2fe1374, _Format="%c%c" | out: _Dest="52") returned 2 [0167.600] sprintf (in: _Dest=0x2fe1376, _Format="%c%c" | out: _Dest="8e") returned 2 [0167.600] sprintf (in: _Dest=0x2fe1378, _Format="%c%c" | out: _Dest="55") returned 2 [0167.600] sprintf (in: _Dest=0x2fe137a, _Format="%c%c" | out: _Dest="9f") returned 2 [0167.600] RtlInitAnsiString (in: DestinationString=0xba3fa10, SourceString="dd967fa9d0e23e1a8ec358c4ea241c4721041b4f5e6420a01dd6f22d4851b81147e0a2aed857528e559f" | out: DestinationString="dd967fa9d0e23e1a8ec358c4ea241c4721041b4f5e6420a01dd6f22d4851b81147e0a2aed857528e559f") [0167.600] RtlAnsiStringToUnicodeString (in: DestinationString=0xba3fa08, SourceString="dd967fa9d0e23e1a8ec358c4ea241c4721041b4f5e6420a01dd6f22d4851b81147e0a2aed857528e559f", AllocateDestinationString=1 | out: DestinationString="dd967fa9d0e23e1a8ec358c4ea241c4721041b4f5e6420a01dd6f22d4851b81147e0a2aed857528e559f") returned 0x0 [0167.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6180 [0167.600] wcscat (in: _Dest=0x3d85700, _Source="dd967fa9d0e23e1a8ec35" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\dd967fa9d0e23e1a8ec35") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\dd967fa9d0e23e1a8ec35" [0167.600] wcscat (in: _Dest=0x3d85700, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\dd967fa9d0e23e1a8ec35.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\dd967fa9d0e23e1a8ec35.68814f" [0167.600] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\dd967fa9d0e23e1a8ec35.68814f", NtPathName=0xba3fa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\dd967fa9d0e23e1a8ec35.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8c68 [0167.622] FlushFileBuffers (hFile=0x1444) returned 1 [0167.627] CloseHandle (hObject=0x1444) returned 1 [0167.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7cd0 [0167.627] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" [0167.627] wcscat (in: _Dest=0x2ff7cd0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt" [0167.627] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\68814f-readme.txt")) returned 0x20 [0167.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 [0167.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66258) returned 1 Thread: id = 3759 os_tid = 0xb90 [0167.196] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\smU44meu-NkY8Se.avi" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\smu44meu-nky8se.avi")) returned 0x20 [0167.196] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\smU44meu-NkY8Se.avi", dwFileAttributes=0x20) returned 1 [0167.555] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\smU44meu-NkY8Se.avi" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\smu44meu-nky8se.avi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1448 [0167.555] GetFileSizeEx (in: hFile=0x1448, lpFileSize=0xc09fb14 | out: lpFileSize=0xc09fb14*=88794) returned 1 [0167.555] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x15ad6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.555] ReadFile (in: hFile=0x1448, lpBuffer=0xc09faf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc09fb00, lpOverlapped=0x0 | out: lpBuffer=0xc09faf0*, lpNumberOfBytesRead=0xc09fb00*=0x4, lpOverlapped=0x0) returned 1 [0167.557] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0167.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52cc0 [0167.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0167.557] NtQuerySystemTime (in: CurrentTime=0xc09fa88 | out: CurrentTime=0xc09fa88*=132462177461388000) returned 0x0 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x76bc4ecc [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x2a67aac5 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x26dd7d96 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x3a0a50b6 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0xdb5dcdd [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x24979b58 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x5c907c6c [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x7783ea7b [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x7873687a [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x72fa05fc [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x4e0c6857 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x72f7d0d8 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x59528a4f [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x64cdf77b [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x3dce337d [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x360c6a25 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x59e14a41 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x5b4d5b9 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x7a952683 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x36460358 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x63980760 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x1ea93e83 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x76555897 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x86a412 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x77898b23 [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x7dd7401e [0167.557] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x507924c2 [0167.558] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x8ec6b9a [0167.558] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x1c99cf15 [0167.558] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x7e7395c [0167.558] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0xd4ec995 [0167.558] RtlRandomEx (in: Seed=0xc09fa80 | out: Seed=0xc09fa80) returned 0x3701135f [0167.565] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.565] ReadFile (in: hFile=0x1448, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc09fa88, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xc09fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0167.566] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bd4d0 [0167.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015418 [0167.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0167.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e534b8) returned 1 [0167.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0167.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0167.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0167.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0167.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0167.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd4d0) returned 1 [0167.566] WriteFile (in: hFile=0x1448, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc09fa88, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xc09fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0167.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0167.583] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.583] ReadFile (in: hFile=0x1448, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc09fa88, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xc09fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0167.583] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0xb400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be130 [0167.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0167.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4b8 [0167.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb4b8) returned 1 [0167.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0167.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4b8 [0167.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb850 [0167.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb850) returned 1 [0167.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0167.584] WriteFile (in: hFile=0x1448, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc09fa88, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xc09fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0167.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0167.588] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x11eda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.589] ReadFile (in: hFile=0x1448, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc09fa88, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xc09fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0167.589] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x11eda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be130 [0167.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0167.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0167.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0167.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0167.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0167.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c38 [0167.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c38) returned 1 [0167.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0167.590] WriteFile (in: hFile=0x1448, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc09fa88, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xc09fa88*=0x3c00, lpOverlapped=0x0) returned 1 [0167.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0167.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d9c0 [0167.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e534b8) returned 1 [0167.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dd0010 [0167.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0167.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0167.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0167.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0167.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x158) returned 0x3dce108 [0167.594] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0167.595] WriteFile (in: hFile=0x1448, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0xc09fb08, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0xc09fb08*=0x158, lpOverlapped=0x0) returned 1 [0167.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be130 [0167.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f308 [0167.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53490 [0167.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53490) returned 1 [0167.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a375c0 [0167.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53490 [0167.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53738 [0167.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53738) returned 1 [0167.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0167.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be130) returned 1 [0167.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4d) returned 0x7a27590 [0167.603] sprintf (in: _Dest=0x7a27590, _Format="%c%c" | out: _Dest="15") returned 2 [0167.603] sprintf (in: _Dest=0x7a27592, _Format="%c%c" | out: _Dest="0f") returned 2 [0167.603] sprintf (in: _Dest=0x7a27594, _Format="%c%c" | out: _Dest="cb") returned 2 [0167.603] sprintf (in: _Dest=0x7a27596, _Format="%c%c" | out: _Dest="e2") returned 2 [0167.603] sprintf (in: _Dest=0x7a27598, _Format="%c%c" | out: _Dest="56") returned 2 [0167.603] sprintf (in: _Dest=0x7a2759a, _Format="%c%c" | out: _Dest="03") returned 2 [0167.603] sprintf (in: _Dest=0x7a2759c, _Format="%c%c" | out: _Dest="87") returned 2 [0167.603] sprintf (in: _Dest=0x7a2759e, _Format="%c%c" | out: _Dest="77") returned 2 [0167.603] sprintf (in: _Dest=0x7a275a0, _Format="%c%c" | out: _Dest="76") returned 2 [0167.603] sprintf (in: _Dest=0x7a275a2, _Format="%c%c" | out: _Dest="11") returned 2 [0167.603] sprintf (in: _Dest=0x7a275a4, _Format="%c%c" | out: _Dest="ee") returned 2 [0167.603] sprintf (in: _Dest=0x7a275a6, _Format="%c%c" | out: _Dest="42") returned 2 [0167.604] sprintf (in: _Dest=0x7a275a8, _Format="%c%c" | out: _Dest="9d") returned 2 [0167.604] sprintf (in: _Dest=0x7a275aa, _Format="%c%c" | out: _Dest="6a") returned 2 [0167.604] sprintf (in: _Dest=0x7a275ac, _Format="%c%c" | out: _Dest="af") returned 2 [0167.604] sprintf (in: _Dest=0x7a275ae, _Format="%c%c" | out: _Dest="38") returned 2 [0167.604] sprintf (in: _Dest=0x7a275b0, _Format="%c%c" | out: _Dest="54") returned 2 [0167.604] sprintf (in: _Dest=0x7a275b2, _Format="%c%c" | out: _Dest="75") returned 2 [0167.604] sprintf (in: _Dest=0x7a275b4, _Format="%c%c" | out: _Dest="95") returned 2 [0167.604] sprintf (in: _Dest=0x7a275b6, _Format="%c%c" | out: _Dest="f7") returned 2 [0167.604] sprintf (in: _Dest=0x7a275b8, _Format="%c%c" | out: _Dest="c8") returned 2 [0167.604] sprintf (in: _Dest=0x7a275ba, _Format="%c%c" | out: _Dest="c1") returned 2 [0167.604] sprintf (in: _Dest=0x7a275bc, _Format="%c%c" | out: _Dest="f3") returned 2 [0167.604] sprintf (in: _Dest=0x7a275be, _Format="%c%c" | out: _Dest="77") returned 2 [0167.604] sprintf (in: _Dest=0x7a275c0, _Format="%c%c" | out: _Dest="fe") returned 2 [0167.604] sprintf (in: _Dest=0x7a275c2, _Format="%c%c" | out: _Dest="04") returned 2 [0167.604] sprintf (in: _Dest=0x7a275c4, _Format="%c%c" | out: _Dest="1a") returned 2 [0167.604] sprintf (in: _Dest=0x7a275c6, _Format="%c%c" | out: _Dest="89") returned 2 [0167.604] sprintf (in: _Dest=0x7a275c8, _Format="%c%c" | out: _Dest="2c") returned 2 [0167.604] sprintf (in: _Dest=0x7a275ca, _Format="%c%c" | out: _Dest="89") returned 2 [0167.604] sprintf (in: _Dest=0x7a275cc, _Format="%c%c" | out: _Dest="92") returned 2 [0167.604] sprintf (in: _Dest=0x7a275ce, _Format="%c%c" | out: _Dest="cc") returned 2 [0167.604] sprintf (in: _Dest=0x7a275d0, _Format="%c%c" | out: _Dest="06") returned 2 [0167.604] sprintf (in: _Dest=0x7a275d2, _Format="%c%c" | out: _Dest="78") returned 2 [0167.604] sprintf (in: _Dest=0x7a275d4, _Format="%c%c" | out: _Dest="82") returned 2 [0167.604] sprintf (in: _Dest=0x7a275d6, _Format="%c%c" | out: _Dest="32") returned 2 [0167.604] sprintf (in: _Dest=0x7a275d8, _Format="%c%c" | out: _Dest="3e") returned 2 [0167.604] sprintf (in: _Dest=0x7a275da, _Format="%c%c" | out: _Dest="a7") returned 2 [0167.604] RtlInitAnsiString (in: DestinationString=0xc09fa90, SourceString="150fcbe2560387777611ee429d6aaf38547595f7c8c1f377fe041a892c8992cc067882323ea7" | out: DestinationString="150fcbe2560387777611ee429d6aaf38547595f7c8c1f377fe041a892c8992cc067882323ea7") [0167.604] RtlAnsiStringToUnicodeString (in: DestinationString=0xc09fa88, SourceString="150fcbe2560387777611ee429d6aaf38547595f7c8c1f377fe041a892c8992cc067882323ea7", AllocateDestinationString=1 | out: DestinationString="150fcbe2560387777611ee429d6aaf38547595f7c8c1f377fe041a892c8992cc067882323ea7") returned 0x0 [0167.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e7c8 [0167.605] wcscat (in: _Dest=0x3e3a378, _Source="150fcbe256038777761" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\150fcbe256038777761") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\150fcbe256038777761" [0167.605] wcscat (in: _Dest=0x3e3a378, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\150fcbe256038777761.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\150fcbe256038777761.68814f" [0167.605] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\150fcbe256038777761.68814f", NtPathName=0xc09fa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\150fcbe256038777761.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0167.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8728 [0167.626] FlushFileBuffers (hFile=0x1448) returned 1 [0167.628] CloseHandle (hObject=0x1448) returned 1 [0167.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6740 [0167.629] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\" [0167.629] wcscat (in: _Dest=0x2ff6740, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt" [0167.629] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\68814f-readme.txt")) returned 0x20 [0167.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 [0167.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf238) returned 1 Thread: id = 3760 os_tid = 0xb9c [0167.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt")) returned 0x20 [0167.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", dwFileAttributes=0x20) returned 0 [0167.197] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.197] GetLastError () returned 0x5 [0167.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", dwFileAttributes=0x20) returned 0 [0167.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 Thread: id = 3761 os_tid = 0xb94 [0167.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt")) returned 0x20 [0167.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", dwFileAttributes=0x20) returned 0 [0167.199] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.199] GetLastError () returned 0x5 [0167.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", dwFileAttributes=0x20) returned 0 [0167.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37cd8) returned 1 Thread: id = 3762 os_tid = 0xbcc [0167.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt")) returned 0x20 [0167.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", dwFileAttributes=0x20) returned 0 [0167.640] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.641] GetLastError () returned 0x5 [0167.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", dwFileAttributes=0x20) returned 0 [0167.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37540) returned 1 Thread: id = 3763 os_tid = 0xbf0 [0167.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt")) returned 0x20 [0167.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", dwFileAttributes=0x20) returned 0 [0167.642] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.642] GetLastError () returned 0x5 [0167.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", dwFileAttributes=0x20) returned 0 [0167.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38110) returned 1 Thread: id = 3764 os_tid = 0x370 [0167.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt")) returned 0x20 [0167.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", dwFileAttributes=0x20) returned 0 [0167.643] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.643] GetLastError () returned 0x5 [0167.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", dwFileAttributes=0x20) returned 0 [0167.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37030) returned 1 Thread: id = 3765 os_tid = 0xbf4 [0167.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt")) returned 0x20 [0167.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", dwFileAttributes=0x20) returned 0 [0167.644] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.644] GetLastError () returned 0x5 [0167.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", dwFileAttributes=0x20) returned 0 [0167.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e382c0) returned 1 Thread: id = 3766 os_tid = 0x444 [0167.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt")) returned 0x20 [0167.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", dwFileAttributes=0x20) returned 0 [0167.646] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.646] GetLastError () returned 0x5 [0167.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", dwFileAttributes=0x20) returned 0 [0167.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38a58) returned 1 Thread: id = 3767 os_tid = 0xbe4 [0167.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt")) returned 0x20 [0167.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", dwFileAttributes=0x20) returned 0 [0167.647] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.647] GetLastError () returned 0x5 [0167.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", dwFileAttributes=0x20) returned 0 [0167.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 Thread: id = 3768 os_tid = 0xbec [0167.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt")) returned 0x20 [0167.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0167.648] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.648] GetLastError () returned 0x5 [0167.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0167.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 Thread: id = 3769 os_tid = 0xbb8 [0167.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt")) returned 0x20 [0167.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", dwFileAttributes=0x20) returned 0 [0167.649] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.650] GetLastError () returned 0x5 [0167.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", dwFileAttributes=0x20) returned 0 [0167.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 3770 os_tid = 0xbb4 [0167.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg")) returned 0x20 [0167.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG", dwFileAttributes=0x20) returned 0 [0167.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.208] GetLastError () returned 0x5 [0167.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG", dwFileAttributes=0x20) returned 0 [0167.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449f0) returned 1 Thread: id = 3771 os_tid = 0x524 [0167.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt")) returned 0x20 [0167.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", dwFileAttributes=0x20) returned 0 [0167.651] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.651] GetLastError () returned 0x5 [0167.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", dwFileAttributes=0x20) returned 0 [0167.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 Thread: id = 3772 os_tid = 0xc08 [0167.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt")) returned 0x20 [0167.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", dwFileAttributes=0x20) returned 0 [0167.652] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.652] GetLastError () returned 0x5 [0167.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", dwFileAttributes=0x20) returned 0 [0167.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68de0) returned 1 Thread: id = 3773 os_tid = 0x6c0 [0167.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt")) returned 0x20 [0167.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", dwFileAttributes=0x20) returned 0 [0167.653] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.653] GetLastError () returned 0x5 [0167.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", dwFileAttributes=0x20) returned 0 [0167.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d08) returned 1 Thread: id = 3774 os_tid = 0x5ec [0167.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt")) returned 0x20 [0167.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", dwFileAttributes=0x20) returned 0 [0167.654] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.654] GetLastError () returned 0x5 [0167.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", dwFileAttributes=0x20) returned 0 [0167.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68c30) returned 1 Thread: id = 3775 os_tid = 0x668 [0167.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt")) returned 0x20 [0167.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", dwFileAttributes=0x20) returned 0 [0167.655] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.655] GetLastError () returned 0x5 [0167.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", dwFileAttributes=0x20) returned 0 [0167.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b58) returned 1 Thread: id = 3776 os_tid = 0x714 [0167.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt")) returned 0x20 [0167.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", dwFileAttributes=0x20) returned 0 [0167.657] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.657] GetLastError () returned 0x5 [0167.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", dwFileAttributes=0x20) returned 0 [0167.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a80) returned 1 Thread: id = 3777 os_tid = 0x508 [0167.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt")) returned 0x20 [0167.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", dwFileAttributes=0x20) returned 0 [0167.371] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.371] GetLastError () returned 0x5 [0167.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", dwFileAttributes=0x20) returned 0 [0167.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689a8) returned 1 Thread: id = 3778 os_tid = 0x520 [0167.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt")) returned 0x20 [0167.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", dwFileAttributes=0x20) returned 0 [0167.373] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.373] GetLastError () returned 0x5 [0167.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", dwFileAttributes=0x20) returned 0 [0167.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 Thread: id = 3779 os_tid = 0x6b0 [0167.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt")) returned 0x20 [0167.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", dwFileAttributes=0x20) returned 0 [0167.382] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.382] GetLastError () returned 0x5 [0167.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", dwFileAttributes=0x20) returned 0 [0167.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 3780 os_tid = 0xc20 [0167.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif")) returned 0x20 [0167.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF", dwFileAttributes=0x20) returned 0 [0167.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.384] GetLastError () returned 0x5 [0167.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF", dwFileAttributes=0x20) returned 0 [0167.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45890) returned 1 Thread: id = 3781 os_tid = 0xc28 [0167.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif")) returned 0x20 [0169.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF", dwFileAttributes=0x20) returned 0 [0169.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.531] GetLastError () returned 0x5 [0169.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF", dwFileAttributes=0x20) returned 0 [0169.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449f0) returned 1 Thread: id = 3782 os_tid = 0xc24 [0167.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif")) returned 0x20 [0169.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF", dwFileAttributes=0x20) returned 0 [0169.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.534] GetLastError () returned 0x5 [0169.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF", dwFileAttributes=0x20) returned 0 [0169.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45da0) returned 1 Thread: id = 3783 os_tid = 0xc1c [0167.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif")) returned 0x20 [0169.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF", dwFileAttributes=0x20) returned 0 [0169.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.535] GetLastError () returned 0x5 [0169.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF", dwFileAttributes=0x20) returned 0 [0169.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45380) returned 1 Thread: id = 3784 os_tid = 0xbd4 [0167.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif")) returned 0x20 [0169.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF", dwFileAttributes=0x20) returned 0 [0169.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.537] GetLastError () returned 0x5 [0169.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF", dwFileAttributes=0x20) returned 0 [0169.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44330) returned 1 Thread: id = 3785 os_tid = 0xad0 [0167.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif")) returned 0x20 [0169.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF", dwFileAttributes=0x20) returned 0 [0169.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.539] GetLastError () returned 0x5 [0169.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF", dwFileAttributes=0x20) returned 0 [0169.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1448) returned 1 Thread: id = 3786 os_tid = 0xacc [0167.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif")) returned 0x20 [0169.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF", dwFileAttributes=0x20) returned 0 [0169.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.541] GetLastError () returned 0x5 [0169.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF", dwFileAttributes=0x20) returned 0 [0169.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2eb8) returned 1 Thread: id = 3787 os_tid = 0xac8 [0167.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif")) returned 0x20 [0169.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF", dwFileAttributes=0x20) returned 0 [0169.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.542] GetLastError () returned 0x5 [0169.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF", dwFileAttributes=0x20) returned 0 [0169.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1b98) returned 1 Thread: id = 3788 os_tid = 0xb78 [0167.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif")) returned 0x20 [0169.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF", dwFileAttributes=0x20) returned 0 [0169.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.544] GetLastError () returned 0x5 [0169.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF", dwFileAttributes=0x20) returned 0 [0169.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1c28) returned 1 Thread: id = 3789 os_tid = 0xc54 [0167.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif")) returned 0x20 [0169.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF", dwFileAttributes=0x20) returned 0 [0169.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.546] GetLastError () returned 0x5 [0169.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF", dwFileAttributes=0x20) returned 0 [0169.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2d08) returned 1 Thread: id = 3790 os_tid = 0xb74 [0167.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif")) returned 0x20 [0169.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF", dwFileAttributes=0x20) returned 0 [0169.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.511] GetLastError () returned 0x5 [0169.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF", dwFileAttributes=0x20) returned 0 [0169.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df30f8) returned 1 Thread: id = 3791 os_tid = 0xb64 [0167.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif")) returned 0x20 [0169.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF", dwFileAttributes=0x20) returned 0 [0169.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.530] GetLastError () returned 0x5 [0169.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF", dwFileAttributes=0x20) returned 0 [0169.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df18c8) returned 1 Thread: id = 3792 os_tid = 0xb6c [0167.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif")) returned 0x20 [0169.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF", dwFileAttributes=0x20) returned 0 [0169.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.528] GetLastError () returned 0x5 [0169.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF", dwFileAttributes=0x20) returned 0 [0169.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df19e8) returned 1 Thread: id = 3793 os_tid = 0x5d4 [0167.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif")) returned 0x20 [0169.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF", dwFileAttributes=0x20) returned 0 [0169.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.526] GetLastError () returned 0x5 [0169.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF", dwFileAttributes=0x20) returned 0 [0169.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df25b8) returned 1 Thread: id = 3794 os_tid = 0xb0 [0167.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif")) returned 0x20 [0169.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF", dwFileAttributes=0x20) returned 0 [0169.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.525] GetLastError () returned 0x5 [0169.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF", dwFileAttributes=0x20) returned 0 [0169.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df2648) returned 1 Thread: id = 3795 os_tid = 0x1c4 [0167.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif")) returned 0x20 [0169.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF", dwFileAttributes=0x20) returned 0 [0169.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.523] GetLastError () returned 0x5 [0169.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF", dwFileAttributes=0x20) returned 0 [0169.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df1838) returned 1 Thread: id = 3796 os_tid = 0x7fc [0167.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif")) returned 0x20 [0169.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF", dwFileAttributes=0x20) returned 0 [0169.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.521] GetLastError () returned 0x5 [0169.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF", dwFileAttributes=0x20) returned 0 [0169.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61c20) returned 1 Thread: id = 3797 os_tid = 0xc5c [0167.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif")) returned 0x20 [0169.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF", dwFileAttributes=0x20) returned 0 [0169.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.520] GetLastError () returned 0x5 [0169.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF", dwFileAttributes=0x20) returned 0 [0169.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60990) returned 1 Thread: id = 3798 os_tid = 0xdb4 [0167.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif")) returned 0x20 [0169.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF", dwFileAttributes=0x20) returned 0 [0169.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.518] GetLastError () returned 0x5 [0169.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF", dwFileAttributes=0x20) returned 0 [0169.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61e60) returned 1 Thread: id = 3799 os_tid = 0xdb8 [0167.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif")) returned 0x20 [0169.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF", dwFileAttributes=0x20) returned 0 [0169.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.516] GetLastError () returned 0x5 [0169.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF", dwFileAttributes=0x20) returned 0 [0169.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61d40) returned 1 Thread: id = 3800 os_tid = 0x6a4 [0167.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif")) returned 0x20 [0169.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF", dwFileAttributes=0x20) returned 0 [0169.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.514] GetLastError () returned 0x5 [0169.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF", dwFileAttributes=0x20) returned 0 [0169.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60c60) returned 1 Thread: id = 3801 os_tid = 0x224 [0167.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif")) returned 0x20 [0169.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF", dwFileAttributes=0x20) returned 0 [0169.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.513] GetLastError () returned 0x5 [0169.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF", dwFileAttributes=0x20) returned 0 [0169.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60b40) returned 1 Thread: id = 3802 os_tid = 0x998 [0167.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif")) returned 0x20 [0169.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF", dwFileAttributes=0x20) returned 0 [0169.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.504] GetLastError () returned 0x5 [0169.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF", dwFileAttributes=0x20) returned 0 [0169.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a617a0) returned 1 Thread: id = 3803 os_tid = 0x9a8 [0167.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif")) returned 0x20 [0169.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF", dwFileAttributes=0x20) returned 0 [0169.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.152] GetLastError () returned 0x5 [0169.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF", dwFileAttributes=0x20) returned 0 [0169.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61a70) returned 1 Thread: id = 3804 os_tid = 0x9b8 [0167.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4adt")) returned 0x20 [0167.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT", dwFileAttributes=0x20) returned 0 [0167.662] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\ast4adt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.662] GetLastError () returned 0x5 [0167.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT", dwFileAttributes=0x20) returned 0 [0167.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26698) returned 1 Thread: id = 3805 os_tid = 0xa8c [0167.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6")) returned 0x20 [0167.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6", dwFileAttributes=0x20) returned 0 [0167.663] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.664] GetLastError () returned 0x5 [0167.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6", dwFileAttributes=0x20) returned 0 [0167.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0928) returned 1 Thread: id = 3806 os_tid = 0xb18 [0167.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6cdt")) returned 0x20 [0172.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT", dwFileAttributes=0x20) returned 0 [0172.187] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\cst6cdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.187] GetLastError () returned 0x5 [0172.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT", dwFileAttributes=0x20) returned 0 [0172.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26708) returned 1 Thread: id = 3807 os_tid = 0x51c [0167.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5")) returned 0x20 [0172.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5", dwFileAttributes=0x20) returned 0 [0172.185] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.185] GetLastError () returned 0x5 [0172.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5", dwFileAttributes=0x20) returned 0 [0172.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf9b8) returned 1 Thread: id = 3808 os_tid = 0xd6c [0167.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5edt")) returned 0x20 [0172.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT", dwFileAttributes=0x20) returned 0 [0172.183] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\est5edt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.184] GetLastError () returned 0x5 [0172.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT", dwFileAttributes=0x20) returned 0 [0172.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26008) returned 1 Thread: id = 3809 os_tid = 0xdd8 [0167.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\hst10")) returned 0x20 [0172.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10", dwFileAttributes=0x20) returned 0 [0172.182] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\hst10"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.182] GetLastError () returned 0x5 [0172.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\HST10", dwFileAttributes=0x20) returned 0 [0172.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 Thread: id = 3810 os_tid = 0xecc [0167.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7")) returned 0x20 [0170.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7", dwFileAttributes=0x20) returned 0 [0171.051] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.180] GetLastError () returned 0x5 [0172.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7", dwFileAttributes=0x20) returned 0 [0172.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0f40) returned 1 Thread: id = 3811 os_tid = 0xed8 [0167.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7mdt")) returned 0x20 [0171.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT", dwFileAttributes=0x20) returned 0 [0171.803] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\mst7mdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.803] GetLastError () returned 0x5 [0171.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT", dwFileAttributes=0x20) returned 0 [0171.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26b68) returned 1 Thread: id = 3812 os_tid = 0x15ac [0167.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8")) returned 0x20 [0171.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8", dwFileAttributes=0x20) returned 0 [0171.801] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.801] GetLastError () returned 0x5 [0171.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8", dwFileAttributes=0x20) returned 0 [0171.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0858) returned 1 Thread: id = 3813 os_tid = 0x1830 [0167.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8pdt")) returned 0x20 [0171.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT", dwFileAttributes=0x20) returned 0 [0171.799] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\pst8pdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.799] GetLastError () returned 0x5 [0171.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT", dwFileAttributes=0x20) returned 0 [0171.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a265b8) returned 1 Thread: id = 3814 os_tid = 0x1834 [0167.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9")) returned 0x20 [0172.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9", dwFileAttributes=0x20) returned 0 [0172.190] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.190] GetLastError () returned 0x5 [0172.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9", dwFileAttributes=0x20) returned 0 [0172.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 Thread: id = 3815 os_tid = 0x1838 [0167.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9ydt")) returned 0x20 [0172.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT", dwFileAttributes=0x20) returned 0 [0172.189] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\systemv\\yst9ydt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.189] GetLastError () returned 0x5 [0172.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT", dwFileAttributes=0x20) returned 0 [0172.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26d98) returned 1 Thread: id = 3816 os_tid = 0x183c [0167.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg")) returned 0x20 [0167.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0167.678] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0167.678] GetLastError () returned 0x5 [0167.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0167.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb74e0) returned 1 Thread: id = 3817 os_tid = 0x1840 [0167.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host")) returned 0x20 [0169.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host", dwFileAttributes=0x20) returned 0 [0169.976] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.976] GetLastError () returned 0x5 [0169.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host", dwFileAttributes=0x20) returned 0 [0169.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 3818 os_tid = 0x1844 [0167.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac")) returned 0x20 [0169.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac", dwFileAttributes=0x20) returned 0 [0169.978] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.978] GetLastError () returned 0x5 [0169.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac", dwFileAttributes=0x20) returned 0 [0169.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45890) returned 1 Thread: id = 3819 os_tid = 0x1848 [0167.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2")) returned 0x20 [0169.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2", dwFileAttributes=0x20) returned 0 [0169.980] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.980] GetLastError () returned 0x5 [0169.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2", dwFileAttributes=0x20) returned 0 [0169.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 3820 os_tid = 0x184c [0167.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0")) returned 0x20 [0169.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0", dwFileAttributes=0x20) returned 0 [0169.981] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.982] GetLastError () returned 0x5 [0169.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0", dwFileAttributes=0x20) returned 0 [0169.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 3821 os_tid = 0x18f0 [0167.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1")) returned 0x20 [0169.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1", dwFileAttributes=0x20) returned 0 [0169.983] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.983] GetLastError () returned 0x5 [0169.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1", dwFileAttributes=0x20) returned 0 [0169.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 3822 os_tid = 0x18fc [0167.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2")) returned 0x20 [0169.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2", dwFileAttributes=0x20) returned 0 [0169.985] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.985] GetLastError () returned 0x5 [0169.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2", dwFileAttributes=0x20) returned 0 [0169.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 3823 os_tid = 0x1914 [0167.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3")) returned 0x20 [0169.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3", dwFileAttributes=0x20) returned 0 [0169.986] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.987] GetLastError () returned 0x5 [0169.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3", dwFileAttributes=0x20) returned 0 [0169.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 3824 os_tid = 0x193c [0167.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4")) returned 0x20 [0169.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4", dwFileAttributes=0x20) returned 0 [0169.988] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.988] GetLastError () returned 0x5 [0169.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4", dwFileAttributes=0x20) returned 0 [0169.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 3825 os_tid = 0x1ae4 [0167.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5")) returned 0x20 [0169.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5", dwFileAttributes=0x20) returned 0 [0169.990] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.990] GetLastError () returned 0x5 [0169.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5", dwFileAttributes=0x20) returned 0 [0169.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 3826 os_tid = 0x1b54 [0167.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6")) returned 0x20 [0169.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6", dwFileAttributes=0x20) returned 0 [0169.991] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.992] GetLastError () returned 0x5 [0169.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6", dwFileAttributes=0x20) returned 0 [0169.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 3827 os_tid = 0x1bfc [0167.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj")) returned 0x20 [0169.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0169.974] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.975] GetLastError () returned 0x5 [0169.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0169.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb61e0) returned 1 Thread: id = 3828 os_tid = 0x1c18 [0167.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj")) returned 0x20 [0169.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0169.973] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.973] GetLastError () returned 0x5 [0169.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0169.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5990) returned 1 Thread: id = 3829 os_tid = 0x1c30 [0167.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid")) returned 0x20 [0169.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID", dwFileAttributes=0x20) returned 0 [0169.971] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.971] GetLastError () returned 0x5 [0169.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID", dwFileAttributes=0x20) returned 0 [0169.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a607e0) returned 1 Thread: id = 3830 os_tid = 0x1c48 [0167.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host")) returned 0x20 [0169.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host", dwFileAttributes=0x20) returned 0 [0169.969] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.969] GetLastError () returned 0x5 [0169.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host", dwFileAttributes=0x20) returned 0 [0169.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7448) returned 1 Thread: id = 3831 os_tid = 0x1c9c [0167.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac")) returned 0x20 [0169.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac", dwFileAttributes=0x20) returned 0 [0169.968] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.968] GetLastError () returned 0x5 [0169.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac", dwFileAttributes=0x20) returned 0 [0169.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61dd0) returned 1 Thread: id = 3832 os_tid = 0x1cdc [0167.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2")) returned 0x20 [0169.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2", dwFileAttributes=0x20) returned 0 [0169.966] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.966] GetLastError () returned 0x5 [0169.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2", dwFileAttributes=0x20) returned 0 [0169.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61f80) returned 1 Thread: id = 3833 os_tid = 0x1d00 [0167.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0")) returned 0x20 [0169.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0", dwFileAttributes=0x20) returned 0 [0169.993] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.993] GetLastError () returned 0x5 [0169.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0", dwFileAttributes=0x20) returned 0 [0169.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 3834 os_tid = 0x1d44 [0167.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1")) returned 0x20 [0169.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1", dwFileAttributes=0x20) returned 0 [0169.995] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.995] GetLastError () returned 0x5 [0169.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1", dwFileAttributes=0x20) returned 0 [0169.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 3835 os_tid = 0x1edc [0167.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2")) returned 0x20 [0169.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2", dwFileAttributes=0x20) returned 0 [0169.996] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.997] GetLastError () returned 0x5 [0169.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2", dwFileAttributes=0x20) returned 0 [0169.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 3836 os_tid = 0x2010 [0167.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid")) returned 0x20 [0169.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID", dwFileAttributes=0x20) returned 0 [0169.998] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.998] GetLastError () returned 0x5 [0169.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID", dwFileAttributes=0x20) returned 0 [0169.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a610e0) returned 1 Thread: id = 3837 os_tid = 0x2014 [0167.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host")) returned 0x20 [0170.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host", dwFileAttributes=0x20) returned 0 [0170.000] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.000] GetLastError () returned 0x5 [0170.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host", dwFileAttributes=0x20) returned 0 [0170.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5860) returned 1 Thread: id = 3838 os_tid = 0x206c [0167.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac")) returned 0x20 [0170.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac", dwFileAttributes=0x20) returned 0 [0170.002] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.002] GetLastError () returned 0x5 [0170.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac", dwFileAttributes=0x20) returned 0 [0170.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60120) returned 1 Thread: id = 3839 os_tid = 0x2070 [0167.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc")) returned 0x20 [0170.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0170.004] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.004] GetLastError () returned 0x5 [0170.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0170.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6900) returned 1 Thread: id = 3840 os_tid = 0x2074 [0167.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc")) returned 0x20 [0169.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0169.383] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.383] GetLastError () returned 0x5 [0169.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0169.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7020) returned 1 Thread: id = 3841 os_tid = 0x207c [0167.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2")) returned 0x20 [0169.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2", dwFileAttributes=0x20) returned 0 [0169.956] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.956] GetLastError () returned 0x5 [0169.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2", dwFileAttributes=0x20) returned 0 [0169.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61050) returned 1 Thread: id = 3842 os_tid = 0x2080 [0167.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h")) returned 0x20 [0169.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H", dwFileAttributes=0x20) returned 0 [0169.964] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.964] GetLastError () returned 0x5 [0169.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H", dwFileAttributes=0x20) returned 0 [0169.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 Thread: id = 3843 os_tid = 0x2084 [0167.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2")) returned 0x20 [0169.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2", dwFileAttributes=0x20) returned 0 [0169.962] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.962] GetLastError () returned 0x5 [0169.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2", dwFileAttributes=0x20) returned 0 [0169.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb320) returned 1 Thread: id = 3844 os_tid = 0x2088 [0167.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c")) returned 0x20 [0169.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C", dwFileAttributes=0x20) returned 0 [0169.960] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.961] GetLastError () returned 0x5 [0169.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C", dwFileAttributes=0x20) returned 0 [0169.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efaca0) returned 1 Thread: id = 3845 os_tid = 0x208c [0168.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v")) returned 0x20 [0169.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V", dwFileAttributes=0x20) returned 0 [0169.958] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.958] GetLastError () returned 0x5 [0169.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V", dwFileAttributes=0x20) returned 0 [0169.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 Thread: id = 3846 os_tid = 0x2090 [0168.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx")) returned 0x20 [0169.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0169.144] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.549] GetLastError () returned 0x5 [0171.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 Thread: id = 3847 os_tid = 0x2094 [0168.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx")) returned 0x20 [0171.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.550] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.550] GetLastError () returned 0x5 [0171.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e720) returned 1 Thread: id = 3848 os_tid = 0x2098 [0168.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve")) returned 0x20 [0168.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE", dwFileAttributes=0x20) returned 0 [0168.056] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.056] GetLastError () returned 0x5 [0168.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE", dwFileAttributes=0x20) returned 0 [0168.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 Thread: id = 3849 os_tid = 0x209c [0168.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve")) returned 0x20 [0170.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE", dwFileAttributes=0x20) returned 0 [0170.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.552] GetLastError () returned 0x5 [0171.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE", dwFileAttributes=0x20) returned 0 [0171.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 Thread: id = 3850 os_tid = 0x214c [0168.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve")) returned 0x20 [0170.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE", dwFileAttributes=0x20) returned 0 [0170.974] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.974] GetLastError () returned 0x5 [0170.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE", dwFileAttributes=0x20) returned 0 [0170.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448d0) returned 1 Thread: id = 3851 os_tid = 0x2158 [0168.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx")) returned 0x20 [0169.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0169.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.557] GetLastError () returned 0x5 [0171.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0171.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f440) returned 1 Thread: id = 3852 os_tid = 0x219c [0168.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx")) returned 0x20 [0171.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.558] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.558] GetLastError () returned 0x5 [0171.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0171.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e7c8) returned 1 Thread: id = 3853 os_tid = 0x21a0 [0168.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr")) returned 0x20 [0168.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR", dwFileAttributes=0x20) returned 0 [0168.064] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.064] GetLastError () returned 0x5 [0168.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR", dwFileAttributes=0x20) returned 0 [0168.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 Thread: id = 3854 os_tid = 0x21ac [0168.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr")) returned 0x20 [0170.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR", dwFileAttributes=0x20) returned 0 [0170.007] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.559] GetLastError () returned 0x5 [0171.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR", dwFileAttributes=0x20) returned 0 [0171.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60630) returned 1 Thread: id = 3855 os_tid = 0x21b0 [0168.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr")) returned 0x20 [0170.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR", dwFileAttributes=0x20) returned 0 [0170.977] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.977] GetLastError () returned 0x5 [0170.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR", dwFileAttributes=0x20) returned 0 [0170.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60090) returned 1 Thread: id = 3856 os_tid = 0x21b4 [0168.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt")) returned 0x20 [0168.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", dwFileAttributes=0x20) returned 0 [0168.130] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.130] GetLastError () returned 0x5 [0168.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", dwFileAttributes=0x20) returned 0 [0168.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37cd8) returned 1 Thread: id = 3857 os_tid = 0x21b8 [0168.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt")) returned 0x20 [0168.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", dwFileAttributes=0x20) returned 0 [0168.132] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.132] GetLastError () returned 0x5 [0168.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", dwFileAttributes=0x20) returned 0 [0168.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a80) returned 1 Thread: id = 3858 os_tid = 0x21bc [0168.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt")) returned 0x20 [0168.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0168.134] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.134] GetLastError () returned 0x5 [0168.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0168.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 Thread: id = 3859 os_tid = 0x21c0 [0168.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt")) returned 0x20 [0168.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", dwFileAttributes=0x20) returned 0 [0168.139] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.139] GetLastError () returned 0x5 [0168.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", dwFileAttributes=0x20) returned 0 [0168.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 Thread: id = 3860 os_tid = 0x21c4 [0168.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt")) returned 0x20 [0168.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", dwFileAttributes=0x20) returned 0 [0168.143] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.143] GetLastError () returned 0x5 [0168.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", dwFileAttributes=0x20) returned 0 [0168.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b58) returned 1 Thread: id = 3861 os_tid = 0x21c8 [0168.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt")) returned 0x20 [0169.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", dwFileAttributes=0x20) returned 0 [0169.507] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.507] GetLastError () returned 0x5 [0169.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", dwFileAttributes=0x20) returned 0 [0169.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 Thread: id = 3862 os_tid = 0x21cc [0168.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt")) returned 0x20 [0170.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", dwFileAttributes=0x20) returned 0 [0170.009] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.009] GetLastError () returned 0x5 [0170.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", dwFileAttributes=0x20) returned 0 [0170.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68c30) returned 1 Thread: id = 3863 os_tid = 0x21d0 [0168.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt")) returned 0x20 [0170.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0170.011] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.011] GetLastError () returned 0x5 [0170.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0170.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 3864 os_tid = 0x21d4 [0168.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt")) returned 0x20 [0170.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", dwFileAttributes=0x20) returned 0 [0170.013] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.013] GetLastError () returned 0x5 [0170.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", dwFileAttributes=0x20) returned 0 [0170.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d08) returned 1 Thread: id = 3865 os_tid = 0x21d8 [0168.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt")) returned 0x20 [0170.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", dwFileAttributes=0x20) returned 0 [0170.007] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.007] GetLastError () returned 0x5 [0170.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", dwFileAttributes=0x20) returned 0 [0170.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68de0) returned 1 Thread: id = 3866 os_tid = 0x21dc [0168.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt")) returned 0x20 [0170.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0170.015] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.015] GetLastError () returned 0x5 [0170.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0170.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 Thread: id = 3867 os_tid = 0x21e0 [0168.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt")) returned 0x20 [0170.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", dwFileAttributes=0x20) returned 0 [0170.017] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.017] GetLastError () returned 0x5 [0170.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", dwFileAttributes=0x20) returned 0 [0170.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 Thread: id = 3868 os_tid = 0x21e4 [0168.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt")) returned 0x20 [0170.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", dwFileAttributes=0x20) returned 0 [0170.019] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.019] GetLastError () returned 0x5 [0170.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", dwFileAttributes=0x20) returned 0 [0170.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 Thread: id = 3869 os_tid = 0x21e8 [0168.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt")) returned 0x20 [0170.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", dwFileAttributes=0x20) returned 0 [0170.021] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.021] GetLastError () returned 0x5 [0170.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", dwFileAttributes=0x20) returned 0 [0170.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85220) returned 1 Thread: id = 3870 os_tid = 0x21ec [0168.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt")) returned 0x20 [0170.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", dwFileAttributes=0x20) returned 0 [0170.023] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.023] GetLastError () returned 0x5 [0170.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", dwFileAttributes=0x20) returned 0 [0170.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 3871 os_tid = 0x21f0 [0168.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt")) returned 0x20 [0169.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", dwFileAttributes=0x20) returned 0 [0169.388] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.388] GetLastError () returned 0x5 [0169.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", dwFileAttributes=0x20) returned 0 [0169.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d858a0) returned 1 Thread: id = 3872 os_tid = 0x21f4 [0168.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx")) returned 0x20 [0168.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0168.153] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.153] GetLastError () returned 0x5 [0168.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0168.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e288) returned 1 Thread: id = 3873 os_tid = 0x21f8 [0168.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx")) returned 0x20 [0168.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0168.155] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.155] GetLastError () returned 0x5 [0168.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0168.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e678) returned 1 Thread: id = 3874 os_tid = 0x4e4 [0168.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66198 [0168.157] wcscpy (in: _Dest=0x3e66198, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0168.157] wcscat (in: _Dest=0x3e66198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0168.157] wcscat (in: _Dest=0x3e66198, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*" [0168.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc5a8 [0168.157] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0169.509] wcscmp (_String1=".", _String2=".") returned 0 [0169.509] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d1d870, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.510] wcscmp (_String1="..", _String2=".") returned 1 [0169.510] wcscmp (_String1="..", _String2="..") returned 0 [0169.510] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0169.510] wcscmp (_String1="all", _String2=".") returned 1 [0169.510] wcscmp (_String1="all", _String2="..") returned 1 [0169.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a9b8 [0169.510] wcscpy (in: _Dest=0x3e3a9b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0169.510] wcscat (in: _Dest=0x3e3a9b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0169.510] wcscat (in: _Dest=0x3e3a9b8, _Source="all" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" [0170.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3a9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0170.387] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara", cAlternateFileName="")) returned 1 [0170.387] wcscmp (_String1="ara", _String2=".") returned 1 [0170.387] wcscmp (_String1="ara", _String2="..") returned 1 [0170.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e39310 [0170.387] wcscpy (in: _Dest=0x3e39310, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.387] wcscat (in: _Dest=0x3e39310, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.387] wcscat (in: _Dest=0x3e39310, _Source="ara" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara" [0170.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e39310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0170.388] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0170.389] wcscmp (_String1="brt", _String2=".") returned 1 [0170.389] wcscmp (_String1="brt", _String2="..") returned 1 [0170.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a2b0 [0170.389] wcscpy (in: _Dest=0x3e3a2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.389] wcscat (in: _Dest=0x3e3a2b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.389] wcscat (in: _Dest=0x3e3a2b0, _Source="brt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" [0170.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3a2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0170.390] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0170.390] wcscmp (_String1="brz", _String2=".") returned 1 [0170.391] wcscmp (_String1="brz", _String2="..") returned 1 [0170.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a440 [0170.391] wcscpy (in: _Dest=0x3e3a440, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.391] wcscat (in: _Dest=0x3e3a440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.391] wcscat (in: _Dest=0x3e3a440, _Source="brz" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" [0170.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3a440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0170.392] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul", cAlternateFileName="")) returned 1 [0170.392] wcscmp (_String1="bul", _String2=".") returned 1 [0170.393] wcscmp (_String1="bul", _String2="..") returned 1 [0170.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a378 [0170.393] wcscpy (in: _Dest=0x3e3a378, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.393] wcscat (in: _Dest=0x3e3a378, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.393] wcscat (in: _Dest=0x3e3a378, _Source="bul" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul" [0170.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3a378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0170.394] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="can", cAlternateFileName="")) returned 1 [0170.394] wcscmp (_String1="can", _String2=".") returned 1 [0170.394] wcscmp (_String1="can", _String2="..") returned 1 [0170.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e38e60 [0170.394] wcscpy (in: _Dest=0x3e38e60, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.395] wcscat (in: _Dest=0x3e38e60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.395] wcscat (in: _Dest=0x3e38e60, _Source="can" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can" [0170.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e38e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0170.396] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr", cAlternateFileName="")) returned 1 [0170.396] wcscmp (_String1="cfr", _String2=".") returned 1 [0170.396] wcscmp (_String1="cfr", _String2="..") returned 1 [0170.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a1e8 [0170.396] wcscpy (in: _Dest=0x3e3a1e8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.397] wcscat (in: _Dest=0x3e3a1e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.397] wcscat (in: _Dest=0x3e3a1e8, _Source="cfr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr" [0170.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3a1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0170.398] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl", cAlternateFileName="")) returned 1 [0170.398] wcscmp (_String1="ctl", _String2=".") returned 1 [0170.398] wcscmp (_String1="ctl", _String2="..") returned 1 [0170.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a828 [0170.398] wcscpy (in: _Dest=0x3e3a828, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.398] wcscat (in: _Dest=0x3e3a828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.398] wcscat (in: _Dest=0x3e3a828, _Source="ctl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl" [0170.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3a828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0170.400] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze", cAlternateFileName="")) returned 1 [0170.400] wcscmp (_String1="cze", _String2=".") returned 1 [0170.400] wcscmp (_String1="cze", _String2="..") returned 1 [0170.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a760 [0170.400] wcscpy (in: _Dest=0x3e3a760, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.400] wcscat (in: _Dest=0x3e3a760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.400] wcscat (in: _Dest=0x3e3a760, _Source="cze" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze" [0170.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3a760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0170.401] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0170.401] wcscmp (_String1="dan", _String2=".") returned 1 [0170.401] wcscmp (_String1="dan", _String2="..") returned 1 [0170.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a698 [0170.401] wcscpy (in: _Dest=0x3e3a698, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.402] wcscat (in: _Dest=0x3e3a698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.402] wcscat (in: _Dest=0x3e3a698, _Source="dan" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" [0170.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0170.403] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0170.403] wcscmp (_String1="dut", _String2=".") returned 1 [0170.403] wcscmp (_String1="dut", _String2="..") returned 1 [0170.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a5d0 [0170.403] wcscpy (in: _Dest=0x3e3a5d0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.403] wcscat (in: _Dest=0x3e3a5d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.403] wcscat (in: _Dest=0x3e3a5d0, _Source="dut" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" [0170.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3a5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0170.405] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0170.405] wcscmp (_String1="eng", _String2=".") returned 1 [0170.405] wcscmp (_String1="eng", _String2="..") returned 1 [0170.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a508 [0170.405] wcscpy (in: _Dest=0x3e3a508, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.405] wcscat (in: _Dest=0x3e3a508, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.405] wcscat (in: _Dest=0x3e3a508, _Source="eng" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" [0170.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3a508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0170.406] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="est", cAlternateFileName="")) returned 1 [0170.406] wcscmp (_String1="est", _String2=".") returned 1 [0170.406] wcscmp (_String1="est", _String2="..") returned 1 [0170.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56498 [0170.406] wcscpy (in: _Dest=0x3d56498, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.407] wcscat (in: _Dest=0x3d56498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.407] wcscat (in: _Dest=0x3d56498, _Source="est" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est" [0170.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0170.408] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin", cAlternateFileName="")) returned 1 [0170.408] wcscmp (_String1="fin", _String2=".") returned 1 [0170.408] wcscmp (_String1="fin", _String2="..") returned 1 [0170.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56560 [0170.409] wcscpy (in: _Dest=0x3d56560, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.409] wcscat (in: _Dest=0x3d56560, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.409] wcscat (in: _Dest=0x3d56560, _Source="fin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin" [0170.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0170.410] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0170.410] wcscmp (_String1="frn", _String2=".") returned 1 [0170.410] wcscmp (_String1="frn", _String2="..") returned 1 [0170.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56628 [0170.410] wcscpy (in: _Dest=0x3d56628, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.410] wcscat (in: _Dest=0x3d56628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.410] wcscat (in: _Dest=0x3d56628, _Source="frn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" [0170.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0170.412] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre", cAlternateFileName="")) returned 1 [0170.412] wcscmp (_String1="gre", _String2=".") returned 1 [0170.412] wcscmp (_String1="gre", _String2="..") returned 1 [0170.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d566f0 [0170.412] wcscpy (in: _Dest=0x3d566f0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.412] wcscat (in: _Dest=0x3d566f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.412] wcscat (in: _Dest=0x3d566f0, _Source="gre" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre" [0170.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d566f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c [0170.413] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0170.413] wcscmp (_String1="grm", _String2=".") returned 1 [0170.414] wcscmp (_String1="grm", _String2="..") returned 1 [0170.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d567b8 [0170.414] wcscpy (in: _Dest=0x3d567b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.414] wcscat (in: _Dest=0x3d567b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.414] wcscat (in: _Dest=0x3d567b8, _Source="grm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" [0170.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d567b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0170.415] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb", cAlternateFileName="")) returned 1 [0170.415] wcscmp (_String1="heb", _String2=".") returned 1 [0170.415] wcscmp (_String1="heb", _String2="..") returned 1 [0170.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56880 [0170.415] wcscpy (in: _Dest=0x3d56880, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.415] wcscat (in: _Dest=0x3d56880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.416] wcscat (in: _Dest=0x3d56880, _Source="heb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb" [0170.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0170.417] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv", cAlternateFileName="")) returned 1 [0170.417] wcscmp (_String1="hrv", _String2=".") returned 1 [0170.417] wcscmp (_String1="hrv", _String2="..") returned 1 [0170.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56948 [0170.417] wcscpy (in: _Dest=0x3d56948, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.417] wcscat (in: _Dest=0x3d56948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.417] wcscat (in: _Dest=0x3d56948, _Source="hrv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv" [0170.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0170.419] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun", cAlternateFileName="")) returned 1 [0170.419] wcscmp (_String1="hun", _String2=".") returned 1 [0170.419] wcscmp (_String1="hun", _String2="..") returned 1 [0170.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56a10 [0170.419] wcscpy (in: _Dest=0x3d56a10, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.419] wcscat (in: _Dest=0x3d56a10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.419] wcscat (in: _Dest=0x3d56a10, _Source="hun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun" [0170.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0170.420] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0170.420] wcscmp (_String1="itl", _String2=".") returned 1 [0170.421] wcscmp (_String1="itl", _String2="..") returned 1 [0170.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56ad8 [0170.421] wcscpy (in: _Dest=0x3d56ad8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.421] wcscat (in: _Dest=0x3d56ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.421] wcscat (in: _Dest=0x3d56ad8, _Source="itl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" [0170.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0170.422] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav", cAlternateFileName="")) returned 1 [0170.422] wcscmp (_String1="lav", _String2=".") returned 1 [0170.422] wcscmp (_String1="lav", _String2="..") returned 1 [0170.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56ba0 [0170.422] wcscpy (in: _Dest=0x3d56ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.422] wcscat (in: _Dest=0x3d56ba0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.422] wcscat (in: _Dest=0x3d56ba0, _Source="lav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav" [0170.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0170.423] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit", cAlternateFileName="")) returned 1 [0170.424] wcscmp (_String1="lit", _String2=".") returned 1 [0170.424] wcscmp (_String1="lit", _String2="..") returned 1 [0170.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56c68 [0170.424] wcscpy (in: _Dest=0x3d56c68, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.424] wcscat (in: _Dest=0x3d56c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.424] wcscat (in: _Dest=0x3d56c68, _Source="lit" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit" [0170.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0170.425] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0170.425] wcscmp (_String1="nrw", _String2=".") returned 1 [0170.425] wcscmp (_String1="nrw", _String2="..") returned 1 [0170.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56d30 [0170.426] wcscpy (in: _Dest=0x3d56d30, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.426] wcscat (in: _Dest=0x3d56d30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.426] wcscat (in: _Dest=0x3d56d30, _Source="nrw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" [0170.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0170.899] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn", cAlternateFileName="")) returned 1 [0170.899] wcscmp (_String1="nyn", _String2=".") returned 1 [0170.899] wcscmp (_String1="nyn", _String2="..") returned 1 [0170.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57b40 [0170.900] wcscpy (in: _Dest=0x3d57b40, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0170.900] wcscat (in: _Dest=0x3d57b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0170.900] wcscat (in: _Dest=0x3d57b40, _Source="nyn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn" [0172.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d57b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0172.255] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol", cAlternateFileName="")) returned 1 [0172.255] wcscmp (_String1="pol", _String2=".") returned 1 [0172.255] wcscmp (_String1="pol", _String2="..") returned 1 [0172.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56880 [0172.255] wcscpy (in: _Dest=0x3d56880, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0172.255] wcscat (in: _Dest=0x3d56880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0172.255] wcscat (in: _Dest=0x3d56880, _Source="pol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol" [0172.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0172.256] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0172.256] wcscmp (_String1="prt", _String2=".") returned 1 [0172.257] wcscmp (_String1="prt", _String2="..") returned 1 [0172.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57690 [0172.257] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0172.257] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0172.257] wcscat (in: _Dest=0x3d57690, _Source="prt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" [0172.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d57690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0172.258] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum", cAlternateFileName="")) returned 1 [0172.258] wcscmp (_String1="rum", _String2=".") returned 1 [0172.258] wcscmp (_String1="rum", _String2="..") returned 1 [0172.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56ba0 [0172.258] wcscpy (in: _Dest=0x3d56ba0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0172.258] wcscat (in: _Dest=0x3d56ba0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0172.258] wcscat (in: _Dest=0x3d56ba0, _Source="rum" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum" [0172.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0172.263] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus", cAlternateFileName="")) returned 1 [0172.263] wcscmp (_String1="rus", _String2=".") returned 1 [0172.264] wcscmp (_String1="rus", _String2="..") returned 1 [0172.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d579b0 [0172.264] wcscpy (in: _Dest=0x3d579b0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0172.264] wcscat (in: _Dest=0x3d579b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0172.264] wcscat (in: _Dest=0x3d579b0, _Source="rus" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus" [0172.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d579b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0172.265] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr", cAlternateFileName="")) returned 1 [0172.265] wcscmp (_String1="sgr", _String2=".") returned 1 [0172.265] wcscmp (_String1="sgr", _String2="..") returned 1 [0172.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56ad8 [0172.265] wcscpy (in: _Dest=0x3d56ad8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0172.265] wcscat (in: _Dest=0x3d56ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0172.265] wcscat (in: _Dest=0x3d56ad8, _Source="sgr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr" [0172.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0172.266] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo", cAlternateFileName="")) returned 1 [0172.266] wcscmp (_String1="slo", _String2=".") returned 1 [0172.266] wcscmp (_String1="slo", _String2="..") returned 1 [0172.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d578e8 [0172.267] wcscpy (in: _Dest=0x3d578e8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0172.267] wcscat (in: _Dest=0x3d578e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0172.267] wcscat (in: _Dest=0x3d578e8, _Source="slo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo" [0172.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d578e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0172.268] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0172.268] wcscmp (_String1="spn", _String2=".") returned 1 [0172.268] wcscmp (_String1="spn", _String2="..") returned 1 [0172.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56a10 [0172.268] wcscpy (in: _Dest=0x3d56a10, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0172.268] wcscat (in: _Dest=0x3d56a10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0172.268] wcscat (in: _Dest=0x3d56a10, _Source="spn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" [0172.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d56a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0172.269] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0172.269] wcscmp (_String1="swd", _String2=".") returned 1 [0172.269] wcscmp (_String1="swd", _String2="..") returned 1 [0172.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57820 [0172.269] wcscpy (in: _Dest=0x3d57820, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0172.269] wcscat (in: _Dest=0x3d57820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0172.269] wcscat (in: _Dest=0x3d57820, _Source="swd" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" [0172.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d57820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0172.270] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur", cAlternateFileName="")) returned 1 [0172.270] wcscmp (_String1="tur", _String2=".") returned 1 [0172.270] wcscmp (_String1="tur", _String2="..") returned 1 [0172.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d567b8 [0172.270] wcscpy (in: _Dest=0x3d567b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" [0172.270] wcscat (in: _Dest=0x3d567b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\" [0172.270] wcscat (in: _Dest=0x3d567b8, _Source="tur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur" [0172.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d567b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0172.271] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x30bc5a8 | out: lpFindFileData=0x30bc5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur", cAlternateFileName="")) returned 0 [0172.271] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0172.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5a8) returned 1 [0172.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 [0172.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65ad8) returned 1 Thread: id = 3875 os_tid = 0x124 [0168.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze")) returned 0x20 [0168.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE", dwFileAttributes=0x20) returned 0 [0168.158] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.158] GetLastError () returned 0x5 [0168.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE", dwFileAttributes=0x20) returned 0 [0168.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79d10) returned 1 Thread: id = 3876 os_tid = 0xba0 [0168.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze")) returned 0x20 [0168.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE", dwFileAttributes=0x20) returned 0 [0168.160] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.160] GetLastError () returned 0x5 [0168.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE", dwFileAttributes=0x20) returned 0 [0168.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 3877 os_tid = 0xed4 [0168.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze")) returned 0x20 [0168.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE", dwFileAttributes=0x20) returned 0 [0168.161] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.161] GetLastError () returned 0x5 [0168.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE", dwFileAttributes=0x20) returned 0 [0168.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 3878 os_tid = 0x2280 [0168.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze")) returned 0x20 [0168.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE", dwFileAttributes=0x20) returned 0 [0168.163] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.163] GetLastError () returned 0x5 [0168.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE", dwFileAttributes=0x20) returned 0 [0168.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf238) returned 1 Thread: id = 3879 os_tid = 0x23ec [0168.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\cursors.properties")) returned 0x20 [0168.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x20) returned 0 [0168.168] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.168] GetLastError () returned 0x5 [0168.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x20) returned 0 [0168.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44180) returned 1 Thread: id = 3880 os_tid = 0x23f0 [0168.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20 [0168.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x20) returned 0 [0168.171] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.171] GetLastError () returned 0x5 [0168.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x20) returned 0 [0168.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 3881 os_tid = 0xfb0 [0168.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20 [0169.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0169.547] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.548] GetLastError () returned 0x5 [0169.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0169.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 3882 os_tid = 0x32c [0168.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20 [0170.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0170.029] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.029] GetLastError () returned 0x5 [0170.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0170.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 Thread: id = 3883 os_tid = 0x3c4 [0168.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20 [0170.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0170.031] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.031] GetLastError () returned 0x5 [0170.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0170.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 3884 os_tid = 0x7e0 [0168.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20 [0170.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0170.033] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.033] GetLastError () returned 0x5 [0170.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0170.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 3885 os_tid = 0x23f4 [0168.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20 [0169.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0169.421] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.421] GetLastError () returned 0x5 [0169.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0169.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 3886 os_tid = 0x584 [0168.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20 [0170.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0170.027] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.027] GetLastError () returned 0x5 [0170.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x20) returned 0 [0170.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 3887 os_tid = 0x774 [0168.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8648 [0168.181] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" [0168.181] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0168.181] wcscat (in: _Dest=0x2c8648, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\*") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\*" [0168.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bbe70 [0168.181] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\*", lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbec4a6d0, ftCreationTime.dwHighDateTime=0x1d5deea, ftLastAccessTime.dwLowDateTime=0x79fe03e0, ftLastAccessTime.dwHighDateTime=0x1d5dcd6, ftLastWriteTime.dwLowDateTime=0x79fe03e0, ftLastWriteTime.dwHighDateTime=0x1d5dcd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad79b0 [0168.181] wcscmp (_String1=".", _String2=".") returned 0 [0168.181] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbec4a6d0, ftCreationTime.dwHighDateTime=0x1d5deea, ftLastAccessTime.dwLowDateTime=0x79fe03e0, ftLastAccessTime.dwHighDateTime=0x1d5dcd6, ftLastWriteTime.dwLowDateTime=0x79fe03e0, ftLastWriteTime.dwHighDateTime=0x1d5dcd6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.182] wcscmp (_String1="..", _String2=".") returned 1 [0168.182] wcscmp (_String1="..", _String2="..") returned 0 [0168.182] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bb9330, ftCreationTime.dwHighDateTime=0x1d5e327, ftLastAccessTime.dwLowDateTime=0xefe6e3b0, ftLastAccessTime.dwHighDateTime=0x1d5e686, ftLastWriteTime.dwLowDateTime=0xefe6e3b0, ftLastWriteTime.dwHighDateTime=0x1d5e686, nFileSizeHigh=0x0, nFileSizeLow=0x18e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fv1v.mkv", cAlternateFileName="")) returned 1 [0168.182] wcscmp (_String1="Fv1v.mkv", _String2=".") returned 1 [0168.182] wcscmp (_String1="Fv1v.mkv", _String2="..") returned 1 [0168.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3ddf1f8 [0168.182] wcscpy (in: _Dest=0x3ddf1f8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" [0168.182] wcscat (in: _Dest=0x3ddf1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0168.182] wcscat (in: _Dest=0x3ddf1f8, _Source="Fv1v.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\Fv1v.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\Fv1v.mkv" [0172.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ddf1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0172.274] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81126410, ftCreationTime.dwHighDateTime=0x1d5d87f, ftLastAccessTime.dwLowDateTime=0xdeba1750, ftLastAccessTime.dwHighDateTime=0x1d5df6b, ftLastWriteTime.dwLowDateTime=0xdeba1750, ftLastWriteTime.dwHighDateTime=0x1d5df6b, nFileSizeHigh=0x0, nFileSizeLow=0x8d9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="lIWYl E LIyzq85Kh -.mp4", cAlternateFileName="LIWYLE~1.MP4")) returned 1 [0172.274] wcscmp (_String1="lIWYl E LIyzq85Kh -.mp4", _String2=".") returned 1 [0172.274] wcscmp (_String1="lIWYl E LIyzq85Kh -.mp4", _String2="..") returned 1 [0172.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x300d718 [0172.274] wcscpy (in: _Dest=0x300d718, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" [0172.274] wcscat (in: _Dest=0x300d718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0172.274] wcscat (in: _Dest=0x300d718, _Source="lIWYl E LIyzq85Kh -.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\lIWYl E LIyzq85Kh -.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\lIWYl E LIyzq85Kh -.mp4" [0172.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x300d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0172.275] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cea8e80, ftCreationTime.dwHighDateTime=0x1d5dcad, ftLastAccessTime.dwLowDateTime=0x2eaa180, ftLastAccessTime.dwHighDateTime=0x1d5e624, ftLastWriteTime.dwLowDateTime=0x2eaa180, ftLastWriteTime.dwHighDateTime=0x1d5e624, nFileSizeHigh=0x0, nFileSizeLow=0x17aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="mQ2Nk-kqL96Y5.mp4", cAlternateFileName="MQ2NK-~1.MP4")) returned 1 [0172.275] wcscmp (_String1="mQ2Nk-kqL96Y5.mp4", _String2=".") returned 1 [0172.275] wcscmp (_String1="mQ2Nk-kqL96Y5.mp4", _String2="..") returned 1 [0172.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de8eb8 [0172.275] wcscpy (in: _Dest=0x3de8eb8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" [0172.275] wcscat (in: _Dest=0x3de8eb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0172.275] wcscat (in: _Dest=0x3de8eb8, _Source="mQ2Nk-kqL96Y5.mp4" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\mQ2Nk-kqL96Y5.mp4") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\mQ2Nk-kqL96Y5.mp4" [0172.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de8eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0172.277] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f229960, ftCreationTime.dwHighDateTime=0x1d5e0a6, ftLastAccessTime.dwLowDateTime=0x9101f800, ftLastAccessTime.dwHighDateTime=0x1d5e599, ftLastWriteTime.dwLowDateTime=0x9101f800, ftLastWriteTime.dwHighDateTime=0x1d5e599, nFileSizeHigh=0x0, nFileSizeLow=0x18d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="o9q8.mkv", cAlternateFileName="")) returned 1 [0172.277] wcscmp (_String1="o9q8.mkv", _String2=".") returned 1 [0172.277] wcscmp (_String1="o9q8.mkv", _String2="..") returned 1 [0172.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3dafe98 [0172.277] wcscpy (in: _Dest=0x3dafe98, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" [0172.277] wcscat (in: _Dest=0x3dafe98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0172.277] wcscat (in: _Dest=0x3dafe98, _Source="o9q8.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\o9q8.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\o9q8.mkv" [0172.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafe98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0172.278] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a26c840, ftCreationTime.dwHighDateTime=0x1d5dbc9, ftLastAccessTime.dwLowDateTime=0x1cacde0, ftLastAccessTime.dwHighDateTime=0x1d5e127, ftLastWriteTime.dwLowDateTime=0x1cacde0, ftLastWriteTime.dwHighDateTime=0x1d5e127, nFileSizeHigh=0x0, nFileSizeLow=0x10e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="XIvqTqzjEelWAyDuhw.mkv", cAlternateFileName="XIVQTQ~1.MKV")) returned 1 [0172.278] wcscmp (_String1="XIvqTqzjEelWAyDuhw.mkv", _String2=".") returned 1 [0172.278] wcscmp (_String1="XIvqTqzjEelWAyDuhw.mkv", _String2="..") returned 1 [0172.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f97f0 [0172.278] wcscpy (in: _Dest=0x2f97f0, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm" [0172.278] wcscat (in: _Dest=0x2f97f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0172.278] wcscat (in: _Dest=0x2f97f0, _Source="XIvqTqzjEelWAyDuhw.mkv" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\XIvqTqzjEelWAyDuhw.mkv") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\XIvqTqzjEelWAyDuhw.mkv" [0172.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2f97f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0172.280] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x30bbe70 | out: lpFindFileData=0x30bbe70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a26c840, ftCreationTime.dwHighDateTime=0x1d5dbc9, ftLastAccessTime.dwLowDateTime=0x1cacde0, ftLastAccessTime.dwHighDateTime=0x1d5e127, ftLastWriteTime.dwLowDateTime=0x1cacde0, ftLastWriteTime.dwHighDateTime=0x1d5e127, nFileSizeHigh=0x0, nFileSizeLow=0x10e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="XIvqTqzjEelWAyDuhw.mkv", cAlternateFileName="XIVQTQ~1.MKV")) returned 0 [0172.280] FindClose (in: hFindFile=0x7ad79b0 | out: hFindFile=0x7ad79b0) returned 1 [0172.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe70) returned 1 [0172.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 [0172.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c88e8) returned 1 Thread: id = 3888 os_tid = 0x2224 [0168.182] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\R5bFW6IN4U7.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\r5bfw6in4u7.mp4")) returned 0x20 [0168.182] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\R5bFW6IN4U7.mp4", dwFileAttributes=0x20) returned 1 [0168.183] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\R5bFW6IN4U7.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\r5bfw6in4u7.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe20 [0168.183] GetFileSizeEx (in: hFile=0xe20, lpFileSize=0xd38fc34 | out: lpFileSize=0xd38fc34*=45410) returned 1 [0168.183] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0xb15e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.183] ReadFile (in: hFile=0xe20, lpBuffer=0xd38fc10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd38fc20, lpOverlapped=0x0 | out: lpBuffer=0xd38fc10*, lpNumberOfBytesRead=0xd38fc20*=0x4, lpOverlapped=0x0) returned 1 [0168.185] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0168.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0168.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0168.185] NtQuerySystemTime (in: CurrentTime=0xd38fba8 | out: CurrentTime=0xd38fba8*=132462177467628000) returned 0x0 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0xf6f8303 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x7bd7f4f0 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x607728f5 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0xed03e8f [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x7ee8bb1 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x28ffa0ce [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x19d904c [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x260d58a8 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0xc695a78 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x662db248 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x60fdf910 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x1d3c7703 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x25348fc4 [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x6a28c98b [0168.185] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x18a174d4 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x5876cf9d [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0xaa75d65 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x6774b9b2 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x2b40c78c [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x84c1c31 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x38de822e [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x70793e69 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0xc558d62 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x749741f8 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x49cd008f [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x66dc8914 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x2cf3d8fb [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0xa30036d [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x2d55f7a5 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x403b6ea8 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x799cc6c3 [0168.186] RtlRandomEx (in: Seed=0xd38fba0 | out: Seed=0xd38fba0) returned 0x3183571c [0168.195] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.195] ReadFile (in: hFile=0xe20, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xd38fba8, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0xd38fba8*=0x3c00, lpOverlapped=0x0) returned 1 [0168.195] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25740 [0168.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0168.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0168.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0168.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0168.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0168.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0168.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0168.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0168.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25740) returned 1 [0168.196] WriteFile (in: hFile=0xe20, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xd38fba8, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0xd38fba8*=0x3c00, lpOverlapped=0x0) returned 1 [0169.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0169.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0169.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78fb0 [0169.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0169.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e798a8 [0169.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0169.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0169.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0169.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0169.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25740) returned 1 [0169.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x300d948 [0169.919] SetFilePointerEx (in: hFile=0xe20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.920] WriteFile (in: hFile=0xe20, lpBuffer=0x300d948*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xd38fc28, lpOverlapped=0x0 | out: lpBuffer=0x300d948*, lpNumberOfBytesWritten=0xd38fc28*=0x110, lpOverlapped=0x0) returned 1 [0169.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25740 [0169.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0169.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0169.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0169.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5a6f0 [0169.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0169.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0169.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0169.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0169.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25740) returned 1 [0169.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x7a25740 [0169.922] sprintf (in: _Dest=0x7a25740, _Format="%c%c" | out: _Dest="49") returned 2 [0169.922] sprintf (in: _Dest=0x7a25742, _Format="%c%c" | out: _Dest="5b") returned 2 [0169.922] sprintf (in: _Dest=0x7a25744, _Format="%c%c" | out: _Dest="37") returned 2 [0169.922] sprintf (in: _Dest=0x7a25746, _Format="%c%c" | out: _Dest="46") returned 2 [0169.922] sprintf (in: _Dest=0x7a25748, _Format="%c%c" | out: _Dest="aa") returned 2 [0169.922] sprintf (in: _Dest=0x7a2574a, _Format="%c%c" | out: _Dest="3e") returned 2 [0169.922] sprintf (in: _Dest=0x7a2574c, _Format="%c%c" | out: _Dest="08") returned 2 [0169.923] sprintf (in: _Dest=0x7a2574e, _Format="%c%c" | out: _Dest="65") returned 2 [0169.923] sprintf (in: _Dest=0x7a25750, _Format="%c%c" | out: _Dest="d5") returned 2 [0169.923] sprintf (in: _Dest=0x7a25752, _Format="%c%c" | out: _Dest="a3") returned 2 [0169.923] sprintf (in: _Dest=0x7a25754, _Format="%c%c" | out: _Dest="03") returned 2 [0169.923] sprintf (in: _Dest=0x7a25756, _Format="%c%c" | out: _Dest="ce") returned 2 [0169.923] sprintf (in: _Dest=0x7a25758, _Format="%c%c" | out: _Dest="6b") returned 2 [0169.923] sprintf (in: _Dest=0x7a2575a, _Format="%c%c" | out: _Dest="c4") returned 2 [0169.923] sprintf (in: _Dest=0x7a2575c, _Format="%c%c" | out: _Dest="15") returned 2 [0169.923] sprintf (in: _Dest=0x7a2575e, _Format="%c%c" | out: _Dest="27") returned 2 [0169.923] sprintf (in: _Dest=0x7a25760, _Format="%c%c" | out: _Dest="bd") returned 2 [0169.923] sprintf (in: _Dest=0x7a25762, _Format="%c%c" | out: _Dest="49") returned 2 [0169.923] sprintf (in: _Dest=0x7a25764, _Format="%c%c" | out: _Dest="e8") returned 2 [0169.923] sprintf (in: _Dest=0x7a25766, _Format="%c%c" | out: _Dest="85") returned 2 [0169.923] sprintf (in: _Dest=0x7a25768, _Format="%c%c" | out: _Dest="6b") returned 2 [0169.924] sprintf (in: _Dest=0x7a2576a, _Format="%c%c" | out: _Dest="54") returned 2 [0169.924] sprintf (in: _Dest=0x7a2576c, _Format="%c%c" | out: _Dest="43") returned 2 [0169.924] sprintf (in: _Dest=0x7a2576e, _Format="%c%c" | out: _Dest="cc") returned 2 [0169.924] sprintf (in: _Dest=0x7a25770, _Format="%c%c" | out: _Dest="7a") returned 2 [0169.924] sprintf (in: _Dest=0x7a25772, _Format="%c%c" | out: _Dest="39") returned 2 [0169.924] sprintf (in: _Dest=0x7a25774, _Format="%c%c" | out: _Dest="4e") returned 2 [0169.924] sprintf (in: _Dest=0x7a25776, _Format="%c%c" | out: _Dest="f1") returned 2 [0169.924] sprintf (in: _Dest=0x7a25778, _Format="%c%c" | out: _Dest="50") returned 2 [0169.924] sprintf (in: _Dest=0x7a2577a, _Format="%c%c" | out: _Dest="bf") returned 2 [0169.924] RtlInitAnsiString (in: DestinationString=0xd38fbb0, SourceString="495b3746aa3e0865d5a303ce6bc41527bd49e8856b5443cc7a394ef150bf" | out: DestinationString="495b3746aa3e0865d5a303ce6bc41527bd49e8856b5443cc7a394ef150bf") [0169.924] RtlAnsiStringToUnicodeString (in: DestinationString=0xd38fba8, SourceString="495b3746aa3e0865d5a303ce6bc41527bd49e8856b5443cc7a394ef150bf", AllocateDestinationString=1 | out: DestinationString="495b3746aa3e0865d5a303ce6bc41527bd49e8856b5443cc7a394ef150bf") returned 0x0 [0169.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c180 [0169.924] wcscat (in: _Dest=0x3dafe98, _Source="495b3746aa3e086" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\495b3746aa3e086") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\495b3746aa3e086" [0169.925] wcscat (in: _Dest=0x3dafe98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\495b3746aa3e086.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\495b3746aa3e086.68814f" [0169.925] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\495b3746aa3e086.68814f", NtPathName=0xd38fba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\495b3746aa3e086.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0169.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2f93d0 [0169.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f93d0) returned 1 [0169.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a297d0) returned 1 [0169.927] NtQueryInformationFile (in: FileHandle=0xe20, IoStatusBlock=0xd38fb78, FileInformation=0xd38fb80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd38fb78, FileInformation=0xd38fb80) returned 0x0 [0169.927] NtSetInformationFile (FileHandle=0xe20, IoStatusBlock=0xd38fb78, FileInformation=0xd38fb80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0169.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafe98) returned 1 [0169.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 [0169.929] FlushFileBuffers (hFile=0xe20) returned 1 [0169.930] CloseHandle (hObject=0xe20) returned 1 [0169.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3ed8 [0169.932] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\" [0169.932] wcscat (in: _Dest=0x3dc3ed8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\68814F-Readme.txt" [0169.932] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\68814f-readme.txt")) returned 0x20 [0169.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 [0169.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8728) returned 1 Thread: id = 3889 os_tid = 0x650 [0168.197] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\xrZIUIq_U.swf" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\xrziuiq_u.swf")) returned 0x20 [0168.197] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\xrZIUIq_U.swf", dwFileAttributes=0x20) returned 1 [0168.197] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\xrZIUIq_U.swf" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\xrziuiq_u.swf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe44 [0168.197] GetFileSizeEx (in: hFile=0xe44, lpFileSize=0x893fc9c | out: lpFileSize=0x893fc9c*=56468) returned 1 [0168.197] SetFilePointerEx (in: hFile=0xe44, liDistanceToMove=0xdc90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.197] ReadFile (in: hFile=0xe44, lpBuffer=0x893fc78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x893fc88, lpOverlapped=0x0 | out: lpBuffer=0x893fc78*, lpNumberOfBytesRead=0x893fc88*=0x4, lpOverlapped=0x0) returned 1 [0168.199] SetFilePointerEx (in: hFile=0xe44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0168.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0168.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0168.199] NtQuerySystemTime (in: CurrentTime=0x893fc10 | out: CurrentTime=0x893fc10*=132462177467784000) returned 0x0 [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x33ac8a7c [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x33d16f42 [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x2e481d63 [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x7b48bd15 [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0xf8cdd50 [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x447e5c4d [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x785bd0 [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x3f8f311d [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x4e5e4612 [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0xc7710da [0168.199] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x21eca30e [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x9e8d014 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x341f38cf [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x291d1b12 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x1c46f423 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x7007e5db [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x4d5d5c43 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x59f273ee [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x3dfc9199 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x2e28c725 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x46b15803 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x441af1a9 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x1fa0d06e [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x2b0255 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x6984990f [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0xec7e19 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x2a3a43e9 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x1f234aa4 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x647156c5 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x2097a352 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x3eedeec7 [0168.200] RtlRandomEx (in: Seed=0x893fc08 | out: Seed=0x893fc08) returned 0x3ca74de [0168.209] SetFilePointerEx (in: hFile=0xe44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.209] ReadFile (in: hFile=0xe44, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x893fc10, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0x893fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0168.209] SetFilePointerEx (in: hFile=0xe44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0168.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25080 [0168.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51188 [0168.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0168.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0168.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0168.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0168.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0168.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0168.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0168.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25080) returned 1 [0168.210] WriteFile (in: hFile=0xe44, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x893fc10, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x893fc10*=0x3c00, lpOverlapped=0x0) returned 1 [0169.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0169.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0169.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0169.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52d60) returned 1 [0169.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37590 [0169.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d60 [0169.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0169.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0169.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0169.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a242c0) returned 1 [0169.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x300d948 [0169.877] SetFilePointerEx (in: hFile=0xe44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.877] WriteFile (in: hFile=0xe44, lpBuffer=0x300d948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x893fc90, lpOverlapped=0x0 | out: lpBuffer=0x300d948*, lpNumberOfBytesWritten=0x893fc90*=0x10c, lpOverlapped=0x0) returned 1 [0169.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a242c0 [0169.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x30151c0 [0169.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0169.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0169.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e68 [0169.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535d0 [0169.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0169.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52ea0) returned 1 [0169.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0169.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a242c0) returned 1 [0169.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0169.900] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="81") returned 2 [0169.900] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="7c") returned 2 [0169.900] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="2e") returned 2 [0169.900] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="34") returned 2 [0169.900] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="6c") returned 2 [0169.900] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="75") returned 2 [0169.900] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="ac") returned 2 [0169.900] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="11") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="00") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="b1") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="cc") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="16") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="9a") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="15") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="d3") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="dd") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="61") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="43") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="08") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="91") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="32") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="4a") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="46") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="69") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="4b") returned 2 [0169.901] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="47") returned 2 [0169.901] RtlInitAnsiString (in: DestinationString=0x893fc18, SourceString="817c2e346c75ac1100b1cc169a15d3dd61430891324a46694b47" | out: DestinationString="817c2e346c75ac1100b1cc169a15d3dd61430891324a46694b47") [0169.901] RtlAnsiStringToUnicodeString (in: DestinationString=0x893fc10, SourceString="817c2e346c75ac1100b1cc169a15d3dd61430891324a46694b47", AllocateDestinationString=1 | out: DestinationString="817c2e346c75ac1100b1cc169a15d3dd61430891324a46694b47") returned 0x0 [0169.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015328 [0169.902] wcscat (in: _Dest=0x3dc3ed8, _Source="817c2e346c75a" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\817c2e346c75a") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\817c2e346c75a" [0169.902] wcscat (in: _Dest=0x3dc3ed8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\817c2e346c75a.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\817c2e346c75a.68814f" [0169.902] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\817c2e346c75a.68814f", NtPathName=0x893fc08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\817c2e346c75a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0169.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de76b8 [0169.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de76b8) returned 1 [0169.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3fd60) returned 1 [0169.905] NtQueryInformationFile (in: FileHandle=0xe44, IoStatusBlock=0x893fbe0, FileInformation=0x893fbe8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x893fbe0, FileInformation=0x893fbe8) returned 0x0 [0169.905] NtSetInformationFile (FileHandle=0xe44, IoStatusBlock=0x893fbe0, FileInformation=0x893fbe8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0169.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 [0169.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0169.906] FlushFileBuffers (hFile=0xe44) returned 1 [0169.908] CloseHandle (hObject=0xe44) returned 1 [0169.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3ed8 [0169.910] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\" [0169.910] wcscat (in: _Dest=0x3dc3ed8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\68814F-Readme.txt" [0169.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\68814f-readme.txt")) returned 0xffffffff [0169.910] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe44 [0169.912] WriteFile (in: hFile=0xe44, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x893fc24, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x893fc24*=0x8b9, lpOverlapped=0x0) returned 1 [0169.914] CloseHandle (hObject=0xe44) returned 1 [0169.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 [0169.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8c68) returned 1 Thread: id = 3890 os_tid = 0x644 [0168.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx")) returned 0x20 [0168.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0168.218] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.219] GetLastError () returned 0x5 [0168.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0168.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f638) returned 1 Thread: id = 3891 os_tid = 0x23f8 [0168.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx")) returned 0x20 [0168.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0168.220] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.220] GetLastError () returned 0x5 [0168.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0168.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e480) returned 1 Thread: id = 3892 os_tid = 0x2704 [0168.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze")) returned 0x20 [0168.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE", dwFileAttributes=0x20) returned 0 [0168.224] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.224] GetLastError () returned 0x5 [0168.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE", dwFileAttributes=0x20) returned 0 [0168.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63a30) returned 1 Thread: id = 3893 os_tid = 0x3ec [0168.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze")) returned 0x20 [0170.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE", dwFileAttributes=0x20) returned 0 [0170.039] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.039] GetLastError () returned 0x5 [0170.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE", dwFileAttributes=0x20) returned 0 [0170.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a606c0) returned 1 Thread: id = 3894 os_tid = 0xfb8 [0168.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze")) returned 0x20 [0170.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE", dwFileAttributes=0x20) returned 0 [0170.041] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.042] GetLastError () returned 0x5 [0170.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE", dwFileAttributes=0x20) returned 0 [0170.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63990) returned 1 Thread: id = 3895 os_tid = 0x2710 [0168.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze")) returned 0x20 [0170.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE", dwFileAttributes=0x20) returned 0 [0170.044] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.044] GetLastError () returned 0x5 [0170.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE", dwFileAttributes=0x20) returned 0 [0170.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61170) returned 1 Thread: id = 3896 os_tid = 0xf68 [0168.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze")) returned 0x20 [0170.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE", dwFileAttributes=0x20) returned 0 [0170.046] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.046] GetLastError () returned 0x5 [0170.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE", dwFileAttributes=0x20) returned 0 [0170.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 3897 os_tid = 0x2718 [0168.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze")) returned 0x20 [0170.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE", dwFileAttributes=0x20) returned 0 [0170.048] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.048] GetLastError () returned 0x5 [0170.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE", dwFileAttributes=0x20) returned 0 [0170.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a614d0) returned 1 Thread: id = 3898 os_tid = 0xab0 [0168.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze")) returned 0x20 [0170.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE", dwFileAttributes=0x20) returned 0 [0170.050] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.051] GetLastError () returned 0x5 [0170.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE", dwFileAttributes=0x20) returned 0 [0170.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60ea0) returned 1 Thread: id = 3899 os_tid = 0x670 [0168.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze")) returned 0x20 [0170.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE", dwFileAttributes=0x20) returned 0 [0170.053] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.053] GetLastError () returned 0x5 [0170.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE", dwFileAttributes=0x20) returned 0 [0170.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 3900 os_tid = 0x2724 [0168.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze")) returned 0x20 [0170.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE", dwFileAttributes=0x20) returned 0 [0170.062] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.063] GetLastError () returned 0x5 [0170.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE", dwFileAttributes=0x20) returned 0 [0170.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61440) returned 1 Thread: id = 3901 os_tid = 0x7c4 [0168.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze")) returned 0x20 [0169.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE", dwFileAttributes=0x20) returned 0 [0169.429] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.429] GetLastError () returned 0x5 [0169.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE", dwFileAttributes=0x20) returned 0 [0169.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60f30) returned 1 Thread: id = 3902 os_tid = 0x272c [0168.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze")) returned 0x20 [0170.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE", dwFileAttributes=0x20) returned 0 [0170.086] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.086] GetLastError () returned 0x5 [0170.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE", dwFileAttributes=0x20) returned 0 [0170.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 3903 os_tid = 0x2730 [0168.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze")) returned 0x20 [0170.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE", dwFileAttributes=0x20) returned 0 [0170.089] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.089] GetLastError () returned 0x5 [0170.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE", dwFileAttributes=0x20) returned 0 [0170.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 Thread: id = 3904 os_tid = 0x2734 [0168.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze")) returned 0x20 [0170.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE", dwFileAttributes=0x20) returned 0 [0170.091] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.091] GetLastError () returned 0x5 [0170.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE", dwFileAttributes=0x20) returned 0 [0170.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 3905 os_tid = 0x2738 [0168.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze")) returned 0x20 [0170.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE", dwFileAttributes=0x20) returned 0 [0170.093] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.093] GetLastError () returned 0x5 [0170.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE", dwFileAttributes=0x20) returned 0 [0170.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 Thread: id = 3906 os_tid = 0x273c [0168.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze")) returned 0x20 [0170.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE", dwFileAttributes=0x20) returned 0 [0170.096] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.096] GetLastError () returned 0x5 [0170.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE", dwFileAttributes=0x20) returned 0 [0170.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a602d0) returned 1 Thread: id = 3907 os_tid = 0x7b0 [0168.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze")) returned 0x20 [0170.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE", dwFileAttributes=0x20) returned 0 [0170.098] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.098] GetLastError () returned 0x5 [0170.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE", dwFileAttributes=0x20) returned 0 [0170.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61950) returned 1 Thread: id = 3908 os_tid = 0xfc8 [0168.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze")) returned 0x20 [0170.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE", dwFileAttributes=0x20) returned 0 [0170.100] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.100] GetLastError () returned 0x5 [0170.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE", dwFileAttributes=0x20) returned 0 [0170.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 3909 os_tid = 0x728 [0168.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze")) returned 0x20 [0170.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE", dwFileAttributes=0x20) returned 0 [0170.102] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.102] GetLastError () returned 0x5 [0170.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE", dwFileAttributes=0x20) returned 0 [0170.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a605a0) returned 1 Thread: id = 3910 os_tid = 0xfcc [0168.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze")) returned 0x20 [0170.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE", dwFileAttributes=0x20) returned 0 [0170.104] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.104] GetLastError () returned 0x5 [0170.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE", dwFileAttributes=0x20) returned 0 [0170.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 3911 os_tid = 0x368 [0168.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze")) returned 0x20 [0170.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE", dwFileAttributes=0x20) returned 0 [0170.106] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.106] GetLastError () returned 0x5 [0170.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE", dwFileAttributes=0x20) returned 0 [0170.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60240) returned 1 Thread: id = 3912 os_tid = 0xfc4 [0168.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze")) returned 0x20 [0170.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE", dwFileAttributes=0x20) returned 0 [0170.108] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.108] GetLastError () returned 0x5 [0170.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE", dwFileAttributes=0x20) returned 0 [0170.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a615f0) returned 1 Thread: id = 3913 os_tid = 0xf70 [0168.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44180 [0168.241] wcscpy (in: _Dest=0x3d44180, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0168.241] wcscat (in: _Dest=0x3d44180, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\" [0168.241] wcscat (in: _Dest=0x3d44180, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*" [0168.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bd1b0 [0168.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73e30 [0170.110] wcscmp (_String1=".", _String2=".") returned 0 [0170.110] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.110] wcscmp (_String1="..", _String2=".") returned 1 [0170.111] wcscmp (_String1="..", _String2="..") returned 0 [0170.111] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9342, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0170.111] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0170.111] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0170.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053bb8 [0170.111] wcscpy (in: _Dest=0x3053bb8, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0170.111] wcscat (in: _Dest=0x3053bb8, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\" [0170.111] wcscat (in: _Dest=0x3053bb8, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" [0173.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0173.793] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0173.793] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0173.793] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0173.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x30539c0 [0173.793] wcscpy (in: _Dest=0x30539c0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services" [0173.793] wcscat (in: _Dest=0x30539c0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\" [0173.793] wcscat (in: _Dest=0x30539c0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" [0173.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30539c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0173.794] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x30bd1b0 | out: lpFindFileData=0x30bd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f093400, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2f093400, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0173.794] FindClose (in: hFindFile=0x3e73e30 | out: hFindFile=0x3e73e30) returned 1 [0173.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0173.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44180) returned 1 [0173.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 3914 os_tid = 0xf78 [0168.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze")) returned 0x20 [0170.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE", dwFileAttributes=0x20) returned 0 [0170.035] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.035] GetLastError () returned 0x5 [0170.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE", dwFileAttributes=0x20) returned 0 [0170.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60480) returned 1 Thread: id = 3915 os_tid = 0xf84 [0168.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze")) returned 0x20 [0170.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE", dwFileAttributes=0x20) returned 0 [0170.112] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.112] GetLastError () returned 0x5 [0170.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE", dwFileAttributes=0x20) returned 0 [0170.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60870) returned 1 Thread: id = 3916 os_tid = 0xf80 [0168.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze")) returned 0x20 [0170.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE", dwFileAttributes=0x20) returned 0 [0170.037] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.038] GetLastError () returned 0x5 [0170.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE", dwFileAttributes=0x20) returned 0 [0170.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60510) returned 1 Thread: id = 3917 os_tid = 0xf7c [0168.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav")) returned 0x20 [0168.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV", dwFileAttributes=0x20) returned 0 [0168.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0168.245] GetLastError () returned 0x5 [0168.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV", dwFileAttributes=0x20) returned 0 [0168.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6dc8) returned 1 Thread: id = 3918 os_tid = 0x330 [0168.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav")) returned 0x20 [0170.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV", dwFileAttributes=0x20) returned 0 [0170.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.122] GetLastError () returned 0x5 [0170.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV", dwFileAttributes=0x20) returned 0 [0170.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 3919 os_tid = 0xaf0 [0168.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav")) returned 0x20 [0169.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV", dwFileAttributes=0x20) returned 0 [0169.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.452] GetLastError () returned 0x5 [0169.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV", dwFileAttributes=0x20) returned 0 [0169.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 Thread: id = 3920 os_tid = 0xb10 [0168.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav")) returned 0x20 [0170.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV", dwFileAttributes=0x20) returned 0 [0170.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.114] GetLastError () returned 0x5 [0170.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV", dwFileAttributes=0x20) returned 0 [0170.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f90) returned 1 Thread: id = 3921 os_tid = 0x188 [0168.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav")) returned 0x20 [0170.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV", dwFileAttributes=0x20) returned 0 [0170.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.116] GetLastError () returned 0x5 [0170.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV", dwFileAttributes=0x20) returned 0 [0170.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63710) returned 1 Thread: id = 3922 os_tid = 0xfc0 [0168.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav")) returned 0x20 [0170.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV", dwFileAttributes=0x20) returned 0 [0170.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.120] GetLastError () returned 0x5 [0170.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV", dwFileAttributes=0x20) returned 0 [0170.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a624f0) returned 1 Thread: id = 3923 os_tid = 0x4f8 [0168.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav")) returned 0x20 [0170.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0170.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.118] GetLastError () returned 0x5 [0170.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV", dwFileAttributes=0x20) returned 0 [0170.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62770) returned 1 Thread: id = 3924 os_tid = 0x3c8 [0168.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp")) returned 0x20 [0170.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp", dwFileAttributes=0x20) returned 0 [0170.125] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.125] GetLastError () returned 0x5 [0170.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp", dwFileAttributes=0x20) returned 0 [0170.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 Thread: id = 3925 os_tid = 0x3f4 [0168.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx")) returned 0x20 [0170.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx", dwFileAttributes=0x20) returned 0 [0170.127] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.127] GetLastError () returned 0x5 [0170.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx", dwFileAttributes=0x20) returned 0 [0170.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e663d8) returned 1 Thread: id = 3926 os_tid = 0xbc0 [0168.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env")) returned 0x20 [0170.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env", dwFileAttributes=0x20) returned 0 [0170.129] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.130] GetLastError () returned 0x5 [0170.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env", dwFileAttributes=0x20) returned 0 [0170.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a1e8) returned 1 Thread: id = 3927 os_tid = 0xba8 [0168.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp")) returned 0x20 [0170.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp", dwFileAttributes=0x20) returned 0 [0170.153] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.154] GetLastError () returned 0x5 [0170.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp", dwFileAttributes=0x20) returned 0 [0170.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66258) returned 1 Thread: id = 3928 os_tid = 0xbc8 [0168.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex")) returned 0x20 [0170.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex", dwFileAttributes=0x20) returned 0 [0170.156] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.156] GetLastError () returned 0x5 [0170.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex", dwFileAttributes=0x20) returned 0 [0170.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a378) returned 1 Thread: id = 3929 os_tid = 0xadc [0168.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx")) returned 0x20 [0170.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx", dwFileAttributes=0x20) returned 0 [0170.158] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.158] GetLastError () returned 0x5 [0170.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx", dwFileAttributes=0x20) returned 0 [0170.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 Thread: id = 3930 os_tid = 0x22e0 [0168.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env")) returned 0x20 [0170.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env", dwFileAttributes=0x20) returned 0 [0170.160] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.160] GetLastError () returned 0x5 [0170.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env", dwFileAttributes=0x20) returned 0 [0170.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a440) returned 1 Thread: id = 3931 os_tid = 0x570 [0168.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp")) returned 0x20 [0170.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp", dwFileAttributes=0x20) returned 0 [0170.131] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.132] GetLastError () returned 0x5 [0170.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp", dwFileAttributes=0x20) returned 0 [0170.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b98) returned 1 Thread: id = 3932 os_tid = 0x2784 [0168.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx")) returned 0x20 [0170.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx", dwFileAttributes=0x20) returned 0 [0170.133] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.134] GetLastError () returned 0x5 [0170.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx", dwFileAttributes=0x20) returned 0 [0170.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66c18) returned 1 Thread: id = 3933 os_tid = 0x22f0 [0168.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex")) returned 0x20 [0170.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex", dwFileAttributes=0x20) returned 0 [0170.135] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.135] GetLastError () returned 0x5 [0170.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex", dwFileAttributes=0x20) returned 0 [0170.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66b58) returned 1 Thread: id = 3934 os_tid = 0xbac [0168.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env")) returned 0x20 [0170.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env", dwFileAttributes=0x20) returned 0 [0170.137] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.137] GetLastError () returned 0x5 [0170.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env", dwFileAttributes=0x20) returned 0 [0170.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38e60) returned 1 Thread: id = 3935 os_tid = 0xbc4 [0168.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca")) returned 0x20 [0170.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca", dwFileAttributes=0x20) returned 0 [0170.139] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.139] GetLastError () returned 0x5 [0170.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca", dwFileAttributes=0x20) returned 0 [0170.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e669d8) returned 1 Thread: id = 3936 os_tid = 0x248 [0168.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp")) returned 0x20 [0170.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp", dwFileAttributes=0x20) returned 0 [0170.141] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.142] GetLastError () returned 0x5 [0170.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp", dwFileAttributes=0x20) returned 0 [0170.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66d98) returned 1 Thread: id = 3937 os_tid = 0x2790 [0168.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp")) returned 0x20 [0170.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp", dwFileAttributes=0x20) returned 0 [0170.143] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.144] GetLastError () returned 0x5 [0170.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp", dwFileAttributes=0x20) returned 0 [0170.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66e58) returned 1 Thread: id = 3938 os_tid = 0x2794 [0168.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx")) returned 0x20 [0170.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx", dwFileAttributes=0x20) returned 0 [0170.145] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.146] GetLastError () returned 0x5 [0170.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx", dwFileAttributes=0x20) returned 0 [0170.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66f18) returned 1 Thread: id = 3939 os_tid = 0x220 [0168.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths")) returned 0x20 [0170.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths", dwFileAttributes=0x20) returned 0 [0170.147] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.148] GetLastError () returned 0x5 [0170.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths", dwFileAttributes=0x20) returned 0 [0170.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66cd8) returned 1 Thread: id = 3940 os_tid = 0x564 [0168.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca")) returned 0x20 [0170.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca", dwFileAttributes=0x20) returned 0 [0170.161] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.162] GetLastError () returned 0x5 [0170.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca", dwFileAttributes=0x20) returned 0 [0170.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e666d8) returned 1 Thread: id = 3941 os_tid = 0x5f8 [0168.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp")) returned 0x20 [0170.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp", dwFileAttributes=0x20) returned 0 [0170.165] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.165] GetLastError () returned 0x5 [0170.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp", dwFileAttributes=0x20) returned 0 [0170.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66618) returned 1 Thread: id = 3942 os_tid = 0x2314 [0168.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp")) returned 0x20 [0170.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp", dwFileAttributes=0x20) returned 0 [0170.167] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.167] GetLastError () returned 0x5 [0170.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp", dwFileAttributes=0x20) returned 0 [0170.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a2b0) returned 1 Thread: id = 3943 os_tid = 0x23fc [0168.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx")) returned 0x20 [0170.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx", dwFileAttributes=0x20) returned 0 [0170.169] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.169] GetLastError () returned 0x5 [0170.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx", dwFileAttributes=0x20) returned 0 [0170.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66798) returned 1 Thread: id = 3944 os_tid = 0x27a0 [0168.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca")) returned 0x20 [0170.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca", dwFileAttributes=0x20) returned 0 [0170.149] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.150] GetLastError () returned 0x5 [0170.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca", dwFileAttributes=0x20) returned 0 [0170.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66a98) returned 1 Thread: id = 3945 os_tid = 0x27ac [0168.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp")) returned 0x20 [0170.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp", dwFileAttributes=0x20) returned 0 [0170.171] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.172] GetLastError () returned 0x5 [0170.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp", dwFileAttributes=0x20) returned 0 [0170.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66498) returned 1 Thread: id = 3946 os_tid = 0x27b0 [0168.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp")) returned 0x20 [0170.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp", dwFileAttributes=0x20) returned 0 [0170.173] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.174] GetLastError () returned 0x5 [0170.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp", dwFileAttributes=0x20) returned 0 [0170.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39310) returned 1 Thread: id = 3947 os_tid = 0x27b4 [0168.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx")) returned 0x20 [0170.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx", dwFileAttributes=0x20) returned 0 [0170.151] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.152] GetLastError () returned 0x5 [0170.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx", dwFileAttributes=0x20) returned 0 [0170.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 Thread: id = 3948 os_tid = 0x27b8 [0168.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths")) returned 0x20 [0170.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths", dwFileAttributes=0x20) returned 0 [0170.176] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.176] GetLastError () returned 0x5 [0170.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths", dwFileAttributes=0x20) returned 0 [0170.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 Thread: id = 3949 os_tid = 0x27bc [0168.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca")) returned 0x20 [0169.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca", dwFileAttributes=0x20) returned 0 [0169.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.447] GetLastError () returned 0x5 [0169.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca", dwFileAttributes=0x20) returned 0 [0169.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66918) returned 1 Thread: id = 3950 os_tid = 0x640 [0168.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp")) returned 0x20 [0170.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp", dwFileAttributes=0x20) returned 0 [0170.123] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.124] GetLastError () returned 0x5 [0170.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp", dwFileAttributes=0x20) returned 0 [0170.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 Thread: id = 3951 os_tid = 0x72c [0168.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif")) returned 0x20 [0169.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF", dwFileAttributes=0x20) returned 0 [0169.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.773] GetLastError () returned 0x5 [0169.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF", dwFileAttributes=0x20) returned 0 [0169.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7578) returned 1 Thread: id = 3952 os_tid = 0xbb0 [0168.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif")) returned 0x20 [0169.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF", dwFileAttributes=0x20) returned 0 [0169.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.775] GetLastError () returned 0x5 [0169.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF", dwFileAttributes=0x20) returned 0 [0169.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 3953 os_tid = 0x56c [0168.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif")) returned 0x20 [0169.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF", dwFileAttributes=0x20) returned 0 [0169.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.777] GetLastError () returned 0x5 [0169.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF", dwFileAttributes=0x20) returned 0 [0169.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 3954 os_tid = 0x2ac [0168.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif")) returned 0x20 [0169.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF", dwFileAttributes=0x20) returned 0 [0169.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.779] GetLastError () returned 0x5 [0169.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF", dwFileAttributes=0x20) returned 0 [0169.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cce8) returned 1 Thread: id = 3955 os_tid = 0x518 [0168.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif")) returned 0x20 [0169.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF", dwFileAttributes=0x20) returned 0 [0169.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.780] GetLastError () returned 0x5 [0169.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF", dwFileAttributes=0x20) returned 0 [0169.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 3956 os_tid = 0x6fc [0168.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif")) returned 0x20 [0169.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF", dwFileAttributes=0x20) returned 0 [0169.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.782] GetLastError () returned 0x5 [0169.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF", dwFileAttributes=0x20) returned 0 [0169.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64a10) returned 1 Thread: id = 3957 os_tid = 0xf74 [0168.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif")) returned 0x20 [0169.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF", dwFileAttributes=0x20) returned 0 [0169.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.784] GetLastError () returned 0x5 [0169.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF", dwFileAttributes=0x20) returned 0 [0169.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64c70) returned 1 Thread: id = 3958 os_tid = 0xf6c [0168.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif")) returned 0x20 [0169.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF", dwFileAttributes=0x20) returned 0 [0169.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.786] GetLastError () returned 0x5 [0169.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF", dwFileAttributes=0x20) returned 0 [0169.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64bd8) returned 1 Thread: id = 3959 os_tid = 0x738 [0168.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif")) returned 0x20 [0169.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF", dwFileAttributes=0x20) returned 0 [0169.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.788] GetLastError () returned 0x5 [0169.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF", dwFileAttributes=0x20) returned 0 [0169.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65a18) returned 1 Thread: id = 3960 os_tid = 0xb04 [0168.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif")) returned 0x20 [0169.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF", dwFileAttributes=0x20) returned 0 [0169.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.789] GetLastError () returned 0x5 [0169.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF", dwFileAttributes=0x20) returned 0 [0169.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65ab0) returned 1 Thread: id = 3961 os_tid = 0x59c [0168.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif")) returned 0x20 [0169.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF", dwFileAttributes=0x20) returned 0 [0169.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.791] GetLastError () returned 0x5 [0169.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF", dwFileAttributes=0x20) returned 0 [0169.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65b48) returned 1 Thread: id = 3962 os_tid = 0xcd8 [0168.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif")) returned 0x20 [0169.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF", dwFileAttributes=0x20) returned 0 [0169.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.793] GetLastError () returned 0x5 [0169.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF", dwFileAttributes=0x20) returned 0 [0169.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65be0) returned 1 Thread: id = 3963 os_tid = 0xcc4 [0168.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif")) returned 0x20 [0169.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF", dwFileAttributes=0x20) returned 0 [0169.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.795] GetLastError () returned 0x5 [0169.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF", dwFileAttributes=0x20) returned 0 [0169.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65c78) returned 1 Thread: id = 3964 os_tid = 0xfdc [0168.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif")) returned 0x20 [0169.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF", dwFileAttributes=0x20) returned 0 [0169.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.797] GetLastError () returned 0x5 [0169.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF", dwFileAttributes=0x20) returned 0 [0169.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65d10) returned 1 Thread: id = 3965 os_tid = 0xd10 [0168.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif")) returned 0x20 [0169.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF", dwFileAttributes=0x20) returned 0 [0169.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.798] GetLastError () returned 0x5 [0169.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF", dwFileAttributes=0x20) returned 0 [0169.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65da8) returned 1 Thread: id = 3966 os_tid = 0x8c4 [0168.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif")) returned 0x20 [0169.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF", dwFileAttributes=0x20) returned 0 [0169.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.372] GetLastError () returned 0x5 [0169.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF", dwFileAttributes=0x20) returned 0 [0169.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65e40) returned 1 Thread: id = 3967 os_tid = 0x914 [0168.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif")) returned 0x20 [0169.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF", dwFileAttributes=0x20) returned 0 [0169.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.695] GetLastError () returned 0x5 [0169.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF", dwFileAttributes=0x20) returned 0 [0169.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65ed8) returned 1 Thread: id = 3968 os_tid = 0x67c [0168.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif")) returned 0x20 [0169.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF", dwFileAttributes=0x20) returned 0 [0169.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.761] GetLastError () returned 0x5 [0169.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF", dwFileAttributes=0x20) returned 0 [0169.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65f70) returned 1 Thread: id = 3969 os_tid = 0x8c0 [0168.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif")) returned 0x20 [0169.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF", dwFileAttributes=0x20) returned 0 [0169.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.762] GetLastError () returned 0x5 [0169.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF", dwFileAttributes=0x20) returned 0 [0169.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 Thread: id = 3970 os_tid = 0x910 [0168.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif")) returned 0x20 [0169.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF", dwFileAttributes=0x20) returned 0 [0169.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.764] GetLastError () returned 0x5 [0169.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF", dwFileAttributes=0x20) returned 0 [0169.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad63b0) returned 1 Thread: id = 3971 os_tid = 0xffc [0168.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif")) returned 0x20 [0169.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF", dwFileAttributes=0x20) returned 0 [0169.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.766] GetLastError () returned 0x5 [0169.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF", dwFileAttributes=0x20) returned 0 [0169.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5148) returned 1 Thread: id = 3972 os_tid = 0x81c [0168.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif")) returned 0x20 [0169.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF", dwFileAttributes=0x20) returned 0 [0169.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.768] GetLastError () returned 0x5 [0169.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF", dwFileAttributes=0x20) returned 0 [0169.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c00) returned 1 Thread: id = 3973 os_tid = 0x238c [0168.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif")) returned 0x20 [0169.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF", dwFileAttributes=0x20) returned 0 [0169.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.770] GetLastError () returned 0x5 [0169.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF", dwFileAttributes=0x20) returned 0 [0169.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d8) returned 1 Thread: id = 3974 os_tid = 0x82c [0168.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif")) returned 0x20 [0169.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF", dwFileAttributes=0x20) returned 0 [0169.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.772] GetLastError () returned 0x5 [0169.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF", dwFileAttributes=0x20) returned 0 [0169.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad51e0) returned 1 Thread: id = 3975 os_tid = 0x89c [0168.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif")) returned 0x20 [0169.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF", dwFileAttributes=0x20) returned 0 [0169.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.697] GetLastError () returned 0x5 [0169.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF", dwFileAttributes=0x20) returned 0 [0169.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5310) returned 1 Thread: id = 3976 os_tid = 0x8ac [0169.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif")) returned 0x20 [0169.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF", dwFileAttributes=0x20) returned 0 [0169.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.753] GetLastError () returned 0x5 [0169.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF", dwFileAttributes=0x20) returned 0 [0169.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6d30) returned 1 Thread: id = 3977 os_tid = 0x8bc [0169.171] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll")) returned 0x2020 [0169.172] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0169.172] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.172] GetLastError () returned 0x5 [0169.172] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0169.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62bd0) returned 1 Thread: id = 3978 os_tid = 0x84c [0169.177] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll")) returned 0x2020 [0169.177] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x20) returned 0 [0169.177] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.177] GetLastError () returned 0x5 [0169.177] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", dwFileAttributes=0x2020) returned 0 [0169.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63a30) returned 1 Thread: id = 3979 os_tid = 0x86c [0169.179] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll")) returned 0x2020 [0169.179] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x20) returned 0 [0169.179] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.180] GetLastError () returned 0x5 [0169.180] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", dwFileAttributes=0x2020) returned 0 [0169.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 3980 os_tid = 0x27c0 [0169.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf")) returned 0x20 [0169.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0169.182] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.182] GetLastError () returned 0x5 [0169.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0169.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 Thread: id = 3981 os_tid = 0x27c8 [0169.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf")) returned 0x20 [0169.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0169.192] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.192] GetLastError () returned 0x5 [0169.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0169.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf238) returned 1 Thread: id = 3982 os_tid = 0x88c [0169.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf")) returned 0x20 [0169.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0169.196] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.196] GetLastError () returned 0x5 [0169.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0169.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a120) returned 1 Thread: id = 3983 os_tid = 0x8cc [0169.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf")) returned 0x20 [0171.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0171.853] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.853] GetLastError () returned 0x5 [0171.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0171.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf180) returned 1 Thread: id = 3984 os_tid = 0x8dc [0169.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf")) returned 0x20 [0171.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0171.848] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.849] GetLastError () returned 0x5 [0171.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", dwFileAttributes=0x20) returned 0 [0171.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 3985 os_tid = 0x85c [0169.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf")) returned 0x20 [0171.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0171.851] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.851] GetLastError () returned 0x5 [0171.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", dwFileAttributes=0x20) returned 0 [0171.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 Thread: id = 3986 os_tid = 0xb58 [0169.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf")) returned 0x20 [0171.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0171.574] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.574] GetLastError () returned 0x5 [0171.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0171.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf2f0) returned 1 Thread: id = 3987 os_tid = 0xb4c [0169.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf")) returned 0x20 [0171.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0171.576] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.576] GetLastError () returned 0x5 [0171.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", dwFileAttributes=0x20) returned 0 [0171.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf010) returned 1 Thread: id = 3988 os_tid = 0x90c [0169.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf")) returned 0x20 [0171.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0171.578] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.578] GetLastError () returned 0x5 [0171.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0171.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3ab48) returned 1 Thread: id = 3989 os_tid = 0x91c [0169.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra")) returned 0x20 [0169.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA", dwFileAttributes=0x20) returned 0 [0169.213] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.213] GetLastError () returned 0x5 [0169.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA", dwFileAttributes=0x20) returned 0 [0169.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63b70) returned 1 Thread: id = 3990 os_tid = 0x92c [0169.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra")) returned 0x20 [0169.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA", dwFileAttributes=0x20) returned 0 [0169.215] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.215] GetLastError () returned 0x5 [0169.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA", dwFileAttributes=0x20) returned 0 [0169.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 Thread: id = 3991 os_tid = 0x93c [0169.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra")) returned 0x20 [0169.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA", dwFileAttributes=0x20) returned 0 [0169.217] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.218] GetLastError () returned 0x5 [0169.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA", dwFileAttributes=0x20) returned 0 [0169.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a630d0) returned 1 Thread: id = 3992 os_tid = 0x23e0 [0169.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra")) returned 0x20 [0169.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA", dwFileAttributes=0x20) returned 0 [0169.219] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.220] GetLastError () returned 0x5 [0169.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA", dwFileAttributes=0x20) returned 0 [0169.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 Thread: id = 3993 os_tid = 0x94c [0169.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra")) returned 0x20 [0169.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA", dwFileAttributes=0x20) returned 0 [0169.224] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.224] GetLastError () returned 0x5 [0169.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA", dwFileAttributes=0x20) returned 0 [0169.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6dc8) returned 1 Thread: id = 3994 os_tid = 0x23e8 [0169.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra")) returned 0x20 [0169.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA", dwFileAttributes=0x20) returned 0 [0169.226] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.226] GetLastError () returned 0x5 [0169.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA", dwFileAttributes=0x20) returned 0 [0169.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44600) returned 1 Thread: id = 3995 os_tid = 0x2400 [0169.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra")) returned 0x20 [0171.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA", dwFileAttributes=0x20) returned 0 [0171.568] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.139] GetLastError () returned 0x5 [0173.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA", dwFileAttributes=0x20) returned 0 [0173.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45020) returned 1 Thread: id = 3996 os_tid = 0x2404 [0169.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra")) returned 0x20 [0175.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA", dwFileAttributes=0x20) returned 0 [0175.276] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.276] GetLastError () returned 0x5 [0175.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA", dwFileAttributes=0x20) returned 0 [0175.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 3997 os_tid = 0x2408 [0169.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra")) returned 0x20 [0175.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA", dwFileAttributes=0x20) returned 0 [0175.277] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.277] GetLastError () returned 0x5 [0175.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA", dwFileAttributes=0x20) returned 0 [0175.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d459b0) returned 1 Thread: id = 3998 os_tid = 0x240c [0169.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra")) returned 0x20 [0174.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra", dwFileAttributes=0x20) returned 0 [0174.496] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.509] GetLastError () returned 0x5 [0174.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra", dwFileAttributes=0x20) returned 0 [0174.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 Thread: id = 3999 os_tid = 0x2410 [0169.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra")) returned 0x20 [0174.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA", dwFileAttributes=0x20) returned 0 [0174.497] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.508] GetLastError () returned 0x5 [0174.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA", dwFileAttributes=0x20) returned 0 [0174.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062988) returned 1 Thread: id = 4000 os_tid = 0x2414 [0169.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra")) returned 0x20 [0173.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA", dwFileAttributes=0x20) returned 0 [0173.421] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.271] GetLastError () returned 0x5 [0175.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA", dwFileAttributes=0x20) returned 0 [0175.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62ef0) returned 1 Thread: id = 4001 os_tid = 0x2418 [0169.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra")) returned 0x20 [0174.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA", dwFileAttributes=0x20) returned 0 [0174.646] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.646] GetLastError () returned 0x5 [0174.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA", dwFileAttributes=0x20) returned 0 [0174.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c98) returned 1 Thread: id = 4002 os_tid = 0x241c [0169.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra")) returned 0x20 [0174.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA", dwFileAttributes=0x20) returned 0 [0174.497] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.507] GetLastError () returned 0x5 [0174.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA", dwFileAttributes=0x20) returned 0 [0174.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 4003 os_tid = 0x2420 [0169.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra")) returned 0x20 [0174.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA", dwFileAttributes=0x20) returned 0 [0174.497] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.506] GetLastError () returned 0x5 [0174.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA", dwFileAttributes=0x20) returned 0 [0174.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 4004 os_tid = 0x2424 [0169.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra")) returned 0x20 [0174.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA", dwFileAttributes=0x20) returned 0 [0174.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.504] GetLastError () returned 0x5 [0174.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA", dwFileAttributes=0x20) returned 0 [0174.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 4005 os_tid = 0x2428 [0169.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra")) returned 0x20 [0173.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA", dwFileAttributes=0x20) returned 0 [0173.140] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.110] GetLastError () returned 0x5 [0174.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA", dwFileAttributes=0x20) returned 0 [0174.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6908) returned 1 Thread: id = 4006 os_tid = 0x242c [0169.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra")) returned 0x20 [0174.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA", dwFileAttributes=0x20) returned 0 [0174.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.503] GetLastError () returned 0x5 [0174.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA", dwFileAttributes=0x20) returned 0 [0174.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f90) returned 1 Thread: id = 4007 os_tid = 0x2430 [0169.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra")) returned 0x20 [0175.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA", dwFileAttributes=0x20) returned 0 [0175.273] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.273] GetLastError () returned 0x5 [0175.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA", dwFileAttributes=0x20) returned 0 [0175.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad60b8) returned 1 Thread: id = 4008 os_tid = 0x2434 [0169.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra")) returned 0x20 [0174.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA", dwFileAttributes=0x20) returned 0 [0174.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.502] GetLastError () returned 0x5 [0174.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA", dwFileAttributes=0x20) returned 0 [0174.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 4009 os_tid = 0x2438 [0169.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra")) returned 0x20 [0174.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra", dwFileAttributes=0x20) returned 0 [0174.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.501] GetLastError () returned 0x5 [0174.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra", dwFileAttributes=0x20) returned 0 [0174.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 4010 os_tid = 0x244c [0169.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d44600 [0169.245] wcscpy (in: _Dest=0x3d44600, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0169.245] wcscat (in: _Dest=0x3d44600, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\" [0169.245] wcscat (in: _Dest=0x3d44600, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*" [0169.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c418 [0169.245] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0174.033] wcscmp (_String1=".", _String2=".") returned 0 [0174.033] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd74ccc0, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd7bf0e0, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.033] wcscmp (_String1="..", _String2=".") returned 1 [0174.033] wcscmp (_String1="..", _String2="..") returned 0 [0174.033] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd7bf0e0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0174.033] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0174.033] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0174.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3054050 [0174.034] wcscpy (in: _Dest=0x3054050, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0174.034] wcscat (in: _Dest=0x3054050, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\" [0174.034] wcscat (in: _Dest=0x3054050, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" [0175.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3054050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0175.175] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0175.176] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0175.176] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0175.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x30531e0 [0175.176] wcscpy (in: _Dest=0x30531e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services" [0175.176] wcscat (in: _Dest=0x30531e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\" [0175.176] wcscat (in: _Dest=0x30531e0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" [0175.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30531e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0175.177] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a448000, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd74ccc0, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2a448000, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0175.177] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0175.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c418) returned 1 [0175.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44600) returned 1 [0175.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30633a0) returned 1 Thread: id = 4011 os_tid = 0x95c [0169.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra")) returned 0x20 [0174.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA", dwFileAttributes=0x20) returned 0 [0174.499] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.274] GetLastError () returned 0x5 [0175.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA", dwFileAttributes=0x20) returned 0 [0175.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44720) returned 1 Thread: id = 4012 os_tid = 0x2454 [0169.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra")) returned 0x20 [0174.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA", dwFileAttributes=0x20) returned 0 [0175.270] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.270] GetLastError () returned 0x5 [0175.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA", dwFileAttributes=0x20) returned 0 [0175.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44840) returned 1 Thread: id = 4013 os_tid = 0x96c [0169.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra")) returned 0x20 [0171.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA", dwFileAttributes=0x20) returned 0 [0171.567] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.427] GetLastError () returned 0x5 [0172.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA", dwFileAttributes=0x20) returned 0 [0172.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61cb0) returned 1 Thread: id = 4014 os_tid = 0x97c [0169.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht")) returned 0x20 [0169.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT", dwFileAttributes=0x20) returned 0 [0169.249] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.249] GetLastError () returned 0x5 [0169.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT", dwFileAttributes=0x20) returned 0 [0169.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 4015 os_tid = 0x98c [0169.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht")) returned 0x20 [0169.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT", dwFileAttributes=0x20) returned 0 [0169.252] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.252] GetLastError () returned 0x5 [0169.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT", dwFileAttributes=0x20) returned 0 [0169.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61ef0) returned 1 Thread: id = 4016 os_tid = 0x9ac [0169.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht")) returned 0x20 [0169.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT", dwFileAttributes=0x20) returned 0 [0169.254] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.254] GetLastError () returned 0x5 [0169.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT", dwFileAttributes=0x20) returned 0 [0169.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60360) returned 1 Thread: id = 4017 os_tid = 0x740 [0169.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor")) returned 0x20 [0169.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR", dwFileAttributes=0x20) returned 0 [0169.258] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.258] GetLastError () returned 0x5 [0169.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR", dwFileAttributes=0x20) returned 0 [0169.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6bf8) returned 1 Thread: id = 4018 os_tid = 0xc8 [0169.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor")) returned 0x20 [0169.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR", dwFileAttributes=0x20) returned 0 [0169.260] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.260] GetLastError () returned 0x5 [0169.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR", dwFileAttributes=0x20) returned 0 [0169.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61320) returned 1 Thread: id = 4019 os_tid = 0x9bc [0169.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor")) returned 0x20 [0169.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR", dwFileAttributes=0x20) returned 0 [0169.262] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.262] GetLastError () returned 0x5 [0169.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR", dwFileAttributes=0x20) returned 0 [0169.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6ef8) returned 1 Thread: id = 4020 os_tid = 0x9fc [0169.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor")) returned 0x20 [0169.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR", dwFileAttributes=0x20) returned 0 [0169.265] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.265] GetLastError () returned 0x5 [0169.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR", dwFileAttributes=0x20) returned 0 [0169.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61290) returned 1 Thread: id = 4021 os_tid = 0x7b4 [0169.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor")) returned 0x20 [0169.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR", dwFileAttributes=0x20) returned 0 [0169.267] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.267] GetLastError () returned 0x5 [0169.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR", dwFileAttributes=0x20) returned 0 [0169.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61560) returned 1 Thread: id = 4022 os_tid = 0x10c [0169.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61560 [0169.269] wcscpy (in: _Dest=0x7a61560, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0169.269] wcscat (in: _Dest=0x7a61560, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\" [0169.269] wcscat (in: _Dest=0x7a61560, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*" [0169.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a4d0 [0169.269] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0169.269] wcscmp (_String1=".", _String2=".") returned 0 [0169.270] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.270] wcscmp (_String1="..", _String2=".") returned 1 [0169.270] wcscmp (_String1="..", _String2="..") returned 0 [0169.270] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8b6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0169.270] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0169.270] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0169.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e480 [0169.270] wcscpy (in: _Dest=0x7a5e480, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0169.270] wcscat (in: _Dest=0x7a5e480, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\" [0169.270] wcscat (in: _Dest=0x7a5e480, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" [0174.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0174.402] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0174.402] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0174.402] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0174.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x30531e0 [0174.403] wcscpy (in: _Dest=0x30531e0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services" [0174.403] wcscat (in: _Dest=0x30531e0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\" [0174.403] wcscat (in: _Dest=0x30531e0, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" [0174.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30531e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0174.404] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd80700, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2dd80700, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0174.404] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0174.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a4d0) returned 1 [0174.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61560) returned 1 [0174.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 4023 os_tid = 0xad8 [0169.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor")) returned 0x20 [0171.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR", dwFileAttributes=0x20) returned 0 [0171.568] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.568] GetLastError () returned 0x5 [0171.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR", dwFileAttributes=0x20) returned 0 [0171.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60a20) returned 1 Thread: id = 4024 os_tid = 0x1c0 [0169.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor")) returned 0x20 [0171.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR", dwFileAttributes=0x20) returned 0 [0171.052] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.052] GetLastError () returned 0x5 [0171.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR", dwFileAttributes=0x20) returned 0 [0171.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61200) returned 1 Thread: id = 4025 os_tid = 0x4c0 [0169.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor")) returned 0x20 [0171.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR", dwFileAttributes=0x20) returned 0 [0171.054] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.054] GetLastError () returned 0x5 [0171.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR", dwFileAttributes=0x20) returned 0 [0171.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60ab0) returned 1 Thread: id = 4026 os_tid = 0x2488 [0169.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a630d0 [0169.273] wcscpy (in: _Dest=0x7a630d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0169.273] wcscat (in: _Dest=0x7a630d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\" [0169.273] wcscat (in: _Dest=0x7a630d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*" [0169.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d020 [0169.273] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d640 [0169.553] wcscmp (_String1=".", _String2=".") returned 0 [0169.553] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x58449620, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5ad0cee0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5ad0cee0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.553] wcscmp (_String1="..", _String2=".") returned 1 [0169.553] wcscmp (_String1="..", _String2="..") returned 0 [0169.553] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0169.553] wcscmp (_String1="support", _String2=".") returned 1 [0169.553] wcscmp (_String1="support", _String2="..") returned 1 [0169.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f2f0 [0169.554] wcscpy (in: _Dest=0x7a5f2f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0169.554] wcscat (in: _Dest=0x7a5f2f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\" [0169.554] wcscat (in: _Dest=0x7a5f2f0, _Source="support" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0172.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5f2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0172.282] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0172.282] FindClose (in: hFindFile=0x7a2d640 | out: hFindFile=0x7a2d640) returned 1 [0172.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d020) returned 1 [0172.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a630d0) returned 1 [0172.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb67d0) returned 1 Thread: id = 4027 os_tid = 0x248c [0169.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kathmandu")) returned 0x20 [0171.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu", dwFileAttributes=0x20) returned 0 [0171.063] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kathmandu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.064] GetLastError () returned 0x5 [0171.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu", dwFileAttributes=0x20) returned 0 [0171.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a269a8) returned 1 Thread: id = 4028 os_tid = 0x2490 [0169.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\khandyga")) returned 0x20 [0171.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga", dwFileAttributes=0x20) returned 0 [0171.065] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\khandyga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.065] GetLastError () returned 0x5 [0171.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Khandyga", dwFileAttributes=0x20) returned 0 [0171.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0a60) returned 1 Thread: id = 4029 os_tid = 0x2494 [0169.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kolkata")) returned 0x20 [0171.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata", dwFileAttributes=0x20) returned 0 [0171.067] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kolkata"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.067] GetLastError () returned 0x5 [0171.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kolkata", dwFileAttributes=0x20) returned 0 [0171.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0928) returned 1 Thread: id = 4030 os_tid = 0x2498 [0169.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk")) returned 0x20 [0171.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk", dwFileAttributes=0x20) returned 0 [0171.069] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.069] GetLastError () returned 0x5 [0171.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk", dwFileAttributes=0x20) returned 0 [0171.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69fa8) returned 1 Thread: id = 4031 os_tid = 0xb3c [0169.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur")) returned 0x20 [0171.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur", dwFileAttributes=0x20) returned 0 [0171.071] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.071] GetLastError () returned 0x5 [0171.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur", dwFileAttributes=0x20) returned 0 [0171.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c28) returned 1 Thread: id = 4032 os_tid = 0xbfc [0169.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuching")) returned 0x20 [0171.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching", dwFileAttributes=0x20) returned 0 [0171.073] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuching"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.073] GetLastError () returned 0x5 [0171.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuching", dwFileAttributes=0x20) returned 0 [0171.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b30) returned 1 Thread: id = 4033 os_tid = 0xbf8 [0169.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuwait")) returned 0x20 [0171.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait", dwFileAttributes=0x20) returned 0 [0171.074] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\kuwait"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.075] GetLastError () returned 0x5 [0171.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Kuwait", dwFileAttributes=0x20) returned 0 [0171.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0c68) returned 1 Thread: id = 4034 os_tid = 0x1008 [0169.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\macau")) returned 0x20 [0171.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau", dwFileAttributes=0x20) returned 0 [0171.076] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\macau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.076] GetLastError () returned 0x5 [0171.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Macau", dwFileAttributes=0x20) returned 0 [0171.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf200) returned 1 Thread: id = 4035 os_tid = 0x100c [0169.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\magadan")) returned 0x20 [0171.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan", dwFileAttributes=0x20) returned 0 [0171.107] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\magadan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.107] GetLastError () returned 0x5 [0171.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Magadan", dwFileAttributes=0x20) returned 0 [0171.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1010) returned 1 Thread: id = 4036 os_tid = 0x27d0 [0169.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\makassar")) returned 0x20 [0171.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar", dwFileAttributes=0x20) returned 0 [0171.110] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\makassar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.110] GetLastError () returned 0x5 [0171.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Makassar", dwFileAttributes=0x20) returned 0 [0171.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee11b0) returned 1 Thread: id = 4037 os_tid = 0x27d4 [0169.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\manila")) returned 0x20 [0171.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila", dwFileAttributes=0x20) returned 0 [0171.112] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\manila"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.112] GetLastError () returned 0x5 [0171.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Manila", dwFileAttributes=0x20) returned 0 [0171.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0ac8) returned 1 Thread: id = 4038 os_tid = 0x27dc [0169.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\muscat")) returned 0x20 [0171.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat", dwFileAttributes=0x20) returned 0 [0171.114] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\muscat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.114] GetLastError () returned 0x5 [0171.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Muscat", dwFileAttributes=0x20) returned 0 [0171.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf4d8) returned 1 Thread: id = 4039 os_tid = 0x1010 [0169.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\nicosia")) returned 0x20 [0170.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia", dwFileAttributes=0x20) returned 0 [0170.594] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\nicosia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.594] GetLastError () returned 0x5 [0170.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Nicosia", dwFileAttributes=0x20) returned 0 [0170.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1218) returned 1 Thread: id = 4040 os_tid = 0x1014 [0169.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novokuznetsk")) returned 0x20 [0171.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk", dwFileAttributes=0x20) returned 0 [0171.061] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novokuznetsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.062] GetLastError () returned 0x5 [0171.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk", dwFileAttributes=0x20) returned 0 [0171.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d08) returned 1 Thread: id = 4041 os_tid = 0x1018 [0169.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novosibirsk")) returned 0x20 [0171.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk", dwFileAttributes=0x20) returned 0 [0171.060] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\novosibirsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.060] GetLastError () returned 0x5 [0171.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk", dwFileAttributes=0x20) returned 0 [0171.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b48) returned 1 Thread: id = 4042 os_tid = 0x24d4 [0169.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\omsk")) returned 0x20 [0171.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk", dwFileAttributes=0x20) returned 0 [0171.117] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\omsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.117] GetLastError () returned 0x5 [0171.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Omsk", dwFileAttributes=0x20) returned 0 [0171.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1328) returned 1 Thread: id = 4043 os_tid = 0x1024 [0169.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\oral")) returned 0x20 [0171.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral", dwFileAttributes=0x20) returned 0 [0171.119] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\oral"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.119] GetLastError () returned 0x5 [0171.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Oral", dwFileAttributes=0x20) returned 0 [0171.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a28) returned 1 Thread: id = 4044 os_tid = 0x1028 [0169.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\phnom_penh")) returned 0x20 [0171.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh", dwFileAttributes=0x20) returned 0 [0171.121] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\phnom_penh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.121] GetLastError () returned 0x5 [0171.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh", dwFileAttributes=0x20) returned 0 [0171.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69de8) returned 1 Thread: id = 4045 os_tid = 0x27f4 [0169.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pontianak")) returned 0x20 [0171.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak", dwFileAttributes=0x20) returned 0 [0171.123] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pontianak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.123] GetLastError () returned 0x5 [0171.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pontianak", dwFileAttributes=0x20) returned 0 [0171.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ec8) returned 1 Thread: id = 4046 os_tid = 0x27f8 [0169.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pyongyang")) returned 0x20 [0171.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang", dwFileAttributes=0x20) returned 0 [0171.124] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\pyongyang"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.125] GetLastError () returned 0x5 [0171.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang", dwFileAttributes=0x20) returned 0 [0171.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ad8) returned 1 Thread: id = 4047 os_tid = 0x102c [0169.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qatar")) returned 0x20 [0171.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar", dwFileAttributes=0x20) returned 0 [0171.126] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qatar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.127] GetLastError () returned 0x5 [0171.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qatar", dwFileAttributes=0x20) returned 0 [0171.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf2d0) returned 1 Thread: id = 4048 os_tid = 0x1030 [0169.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qyzylorda")) returned 0x20 [0171.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda", dwFileAttributes=0x20) returned 0 [0171.056] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\qyzylorda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.056] GetLastError () returned 0x5 [0171.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda", dwFileAttributes=0x20) returned 0 [0171.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69e58) returned 1 Thread: id = 4049 os_tid = 0x1034 [0169.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\rangoon")) returned 0x20 [0171.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon", dwFileAttributes=0x20) returned 0 [0171.058] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\rangoon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.058] GetLastError () returned 0x5 [0171.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Rangoon", dwFileAttributes=0x20) returned 0 [0171.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee09f8) returned 1 Thread: id = 4050 os_tid = 0x1038 [0169.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\rothera")) returned 0x20 [0169.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera", dwFileAttributes=0x20) returned 0 [0169.568] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\rothera"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.568] GetLastError () returned 0x5 [0169.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera", dwFileAttributes=0x20) returned 0 [0169.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 Thread: id = 4051 os_tid = 0x1044 [0169.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\syowa")) returned 0x20 [0169.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa", dwFileAttributes=0x20) returned 0 [0169.570] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\syowa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.571] GetLastError () returned 0x5 [0169.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa", dwFileAttributes=0x20) returned 0 [0169.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 Thread: id = 4052 os_tid = 0x710 [0169.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\vostok")) returned 0x20 [0169.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok", dwFileAttributes=0x20) returned 0 [0169.573] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\antarctica\\vostok"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0169.573] GetLastError () returned 0x5 [0169.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok", dwFileAttributes=0x20) returned 0 [0169.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26698) returned 1 Thread: id = 4053 os_tid = 0x1048 [0169.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32cc50 [0169.574] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0169.575] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0169.575] wcscat (in: _Dest=0x32cc50, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*" [0169.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c1b0 [0169.575] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0170.675] wcscmp (_String1=".", _String2=".") returned 0 [0170.675] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.675] wcscmp (_String1="..", _String2=".") returned 1 [0170.675] wcscmp (_String1="..", _String2="..") returned 0 [0170.675] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0170.675] wcscmp (_String1="data_0", _String2=".") returned 1 [0170.675] wcscmp (_String1="data_0", _String2="..") returned 1 [0170.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a624f0 [0170.676] wcscpy (in: _Dest=0x7a624f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0170.676] wcscat (in: _Dest=0x7a624f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0170.676] wcscat (in: _Dest=0x7a624f0, _Source="data_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" [0171.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a624f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0171.383] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0171.383] wcscmp (_String1="data_1", _String2=".") returned 1 [0171.383] wcscmp (_String1="data_1", _String2="..") returned 1 [0171.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62f90 [0171.383] wcscpy (in: _Dest=0x7a62f90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0171.383] wcscat (in: _Dest=0x7a62f90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0171.383] wcscat (in: _Dest=0x7a62f90, _Source="data_1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" [0171.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0171.384] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0171.384] wcscmp (_String1="data_2", _String2=".") returned 1 [0171.384] wcscmp (_String1="data_2", _String2="..") returned 1 [0171.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62130 [0171.384] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0171.384] wcscat (in: _Dest=0x7a62130, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0171.384] wcscat (in: _Dest=0x7a62130, _Source="data_2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" [0171.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0171.386] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe37203f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe37203f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0171.386] wcscmp (_String1="data_3", _String2=".") returned 1 [0171.386] wcscmp (_String1="data_3", _String2="..") returned 1 [0171.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63990 [0171.386] wcscpy (in: _Dest=0x7a63990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0171.386] wcscat (in: _Dest=0x7a63990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0171.386] wcscat (in: _Dest=0x7a63990, _Source="data_3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" [0171.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0171.387] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0171.387] wcscmp (_String1="index", _String2=".") returned 1 [0171.387] wcscmp (_String1="index", _String2="..") returned 1 [0171.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a621d0 [0171.387] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" [0171.387] wcscat (in: _Dest=0x7a621d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0171.387] wcscat (in: _Dest=0x7a621d0, _Source="index" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" [0171.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a621d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0171.388] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe37203f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 0 [0171.388] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0171.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c1b0) returned 1 [0171.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 [0171.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6e60) returned 1 Thread: id = 4054 os_tid = 0xbd8 [0169.576] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies")) returned 0x2020 [0171.146] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", dwFileAttributes=0x20) returned 1 [0171.146] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x176c [0171.146] GetFileSizeEx (in: hFile=0x176c, lpFileSize=0x9bef8e4 | out: lpFileSize=0x9bef8e4*=7168) returned 1 [0171.146] SetFilePointerEx (in: hFile=0x176c, liDistanceToMove=0x1bfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.146] ReadFile (in: hFile=0x176c, lpBuffer=0x9bef8c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9bef8d0, lpOverlapped=0x0 | out: lpBuffer=0x9bef8c0*, lpNumberOfBytesRead=0x9bef8d0*=0x4, lpOverlapped=0x0) returned 1 [0171.338] SetFilePointerEx (in: hFile=0x176c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0171.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0171.339] NtQuerySystemTime (in: CurrentTime=0x9bef858 | out: CurrentTime=0x9bef858*=132462177499140000) returned 0x0 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0xde7a77a [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x7273b67 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x1f5613b2 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x69fb5767 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x338eca9a [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x7a1d7a49 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x58d8aa26 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x347751ed [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x4e5b1413 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x6df630a2 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x292b0289 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x42449103 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x22703134 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x74c5255e [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x6fbb0a49 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x71fa1944 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0xa3166e2 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x526e2dc6 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x2c1ef84f [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x141c8a17 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x5b6392e [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x48e9bc5b [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x3039e7ba [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x3398b316 [0171.339] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x2540767a [0171.340] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x18974ffa [0171.340] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x2a3aec9c [0171.340] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x664b7c31 [0171.340] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x7334b1f9 [0171.340] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x2f1d8250 [0171.340] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x769a2dd [0171.340] RtlRandomEx (in: Seed=0x9bef850 | out: Seed=0x9bef850) returned 0x50f1c26f [0171.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0171.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0171.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0171.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0171.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0171.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40888 [0171.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0171.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0171.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0171.350] ReadFile (in: hFile=0x176c, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x1c00, lpNumberOfBytesRead=0x9bef84c, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x9bef84c*=0x1c00, lpOverlapped=0x0) returned 1 [0171.493] SetFilePointerEx (in: hFile=0x176c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.493] WriteFile (in: hFile=0x176c, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x9bef850, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0x9bef850*=0x1c00, lpOverlapped=0x0) returned 1 [0171.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0171.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0171.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0171.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0171.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0171.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0171.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40888) returned 1 [0171.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b0c8 [0171.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40888 [0171.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0171.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0171.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0171.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5a718 [0171.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0171.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0171.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0171.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0171.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40888) returned 1 [0171.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f93d0 [0171.990] SetFilePointerEx (in: hFile=0x176c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.991] WriteFile (in: hFile=0x176c, lpBuffer=0x2f93d0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x9bef8d8, lpOverlapped=0x0 | out: lpBuffer=0x2f93d0*, lpNumberOfBytesWritten=0x9bef8d8*=0x100, lpOverlapped=0x0) returned 1 [0172.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48cc0 [0172.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0172.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0172.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0172.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x7ad9280 [0172.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0172.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0172.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0172.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0172.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48cc0) returned 1 [0172.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3d5b500 [0172.522] sprintf (in: _Dest=0x3d5b500, _Format="%c%c" | out: _Dest="bf") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b502, _Format="%c%c" | out: _Dest="1b") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b504, _Format="%c%c" | out: _Dest="4c") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b506, _Format="%c%c" | out: _Dest="87") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b508, _Format="%c%c" | out: _Dest="8e") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b50a, _Format="%c%c" | out: _Dest="41") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b50c, _Format="%c%c" | out: _Dest="67") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b50e, _Format="%c%c" | out: _Dest="e5") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b510, _Format="%c%c" | out: _Dest="70") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b512, _Format="%c%c" | out: _Dest="6b") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b514, _Format="%c%c" | out: _Dest="ea") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b516, _Format="%c%c" | out: _Dest="3e") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b518, _Format="%c%c" | out: _Dest="69") returned 2 [0172.522] sprintf (in: _Dest=0x3d5b51a, _Format="%c%c" | out: _Dest="17") returned 2 [0172.522] RtlInitAnsiString (in: DestinationString=0x9bef860, SourceString="bf1b4c878e4167e5706bea3e6917" | out: DestinationString="bf1b4c878e4167e5706bea3e6917") [0172.522] RtlAnsiStringToUnicodeString (in: DestinationString=0x9bef858, SourceString="bf1b4c878e4167e5706bea3e6917", AllocateDestinationString=1 | out: DestinationString="bf1b4c878e4167e5706bea3e6917") returned 0x0 [0172.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e49a88 [0172.523] wcscat (in: _Dest=0x30531e0, _Source="bf1b4c8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\bf1b4c8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\bf1b4c8" [0172.523] wcscat (in: _Dest=0x30531e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\bf1b4c8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\bf1b4c8.68814f" [0172.523] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\bf1b4c8.68814f", NtPathName=0x9bef850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\bf1b4c8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0172.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65ad8 [0172.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65ad8) returned 1 [0172.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8f608) returned 1 [0172.555] NtQueryInformationFile (in: FileHandle=0x176c, IoStatusBlock=0x9bef828, FileInformation=0x9bef830, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9bef828, FileInformation=0x9bef830) returned 0x0 [0172.555] NtSetInformationFile (FileHandle=0x176c, IoStatusBlock=0x9bef828, FileInformation=0x9bef830, Length=0x28, FileInformationClass=0x4) returned 0x0 [0173.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 [0173.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0173.655] FlushFileBuffers (hFile=0x176c) returned 1 [0174.235] CloseHandle (hObject=0x176c) returned 1 [0175.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a666c0 [0175.429] wcscpy (in: _Dest=0x7a666c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0175.429] wcscat (in: _Dest=0x7a666c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0175.429] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0175.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 [0175.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6ef8) returned 1 Thread: id = 4055 os_tid = 0xb68 [0169.577] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal")) returned 0x2020 [0171.151] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", dwFileAttributes=0x20) returned 1 [0171.152] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1770 [0171.152] GetFileSizeEx (in: hFile=0x1770, lpFileSize=0xa5ffad4 | out: lpFileSize=0xa5ffad4*=0) returned 1 [0171.152] FlushFileBuffers (hFile=0x1770) returned 1 [0172.488] CloseHandle (hObject=0x1770) returned 1 [0172.488] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", dwFileAttributes=0x2020) returned 1 [0174.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f638) returned 1 Thread: id = 4056 os_tid = 0xdcc [0169.578] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current session")) returned 0x2020 [0171.155] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", dwFileAttributes=0x20) returned 1 [0171.156] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1774 [0171.156] GetFileSizeEx (in: hFile=0x1774, lpFileSize=0xa71fa94 | out: lpFileSize=0xa71fa94*=489) returned 1 [0171.156] SetFilePointerEx (in: hFile=0x1774, liDistanceToMove=0x1e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.156] ReadFile (in: hFile=0x1774, lpBuffer=0xa71fa70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa71fa80, lpOverlapped=0x0 | out: lpBuffer=0xa71fa70*, lpNumberOfBytesRead=0xa71fa80*=0x4, lpOverlapped=0x0) returned 1 [0171.159] SetFilePointerEx (in: hFile=0x1774, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0171.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0171.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0171.159] NtQuerySystemTime (in: CurrentTime=0xa71fa08 | out: CurrentTime=0xa71fa08*=132462177497424000) returned 0x0 [0171.159] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x1b395b0e [0171.159] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x4282b600 [0171.159] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x126b261a [0171.159] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x6a31ab13 [0171.159] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x416f3d31 [0171.159] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x1bce4aab [0171.159] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x53004395 [0171.159] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x4f84c037 [0171.159] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x7f4f7af5 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x4ad0c6d2 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x5dc10b18 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x221aa364 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x7a928c38 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x2fecd61d [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x7db5cc6 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x68c71a50 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x489fc218 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x559825b [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x1ab6ed9e [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x52cf33ba [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x665f496e [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x348d31 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x4727332 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x686d3806 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0xc53da77 [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x114fe1ad [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x505615fd [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x683657fb [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x27d80baa [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x3491eadc [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x68aa7bda [0171.160] RtlRandomEx (in: Seed=0xa71fa00 | out: Seed=0xa71fa00) returned 0x501929ec [0171.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0171.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f740 [0171.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0171.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0171.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0171.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48be8 [0171.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f740 [0171.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0171.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0171.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0171.175] ReadFile (in: hFile=0x1774, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x1e9, lpNumberOfBytesRead=0xa71f9fc, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0xa71f9fc*=0x1e9, lpOverlapped=0x0) returned 1 [0171.175] SetFilePointerEx (in: hFile=0x1774, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.175] WriteFile (in: hFile=0x1774, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x1e9, lpNumberOfBytesWritten=0xa71fa00, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0xa71fa00*=0x1e9, lpOverlapped=0x0) returned 1 [0171.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0171.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0171.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0171.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0171.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0171.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0171.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48be8) returned 1 [0171.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e798a8 [0171.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48be8 [0171.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f740 [0171.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0171.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b578) returned 1 [0171.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79870 [0171.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b578 [0171.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0171.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b370) returned 1 [0171.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0171.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48be8) returned 1 [0171.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x300d948 [0171.657] SetFilePointerEx (in: hFile=0x1774, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.657] WriteFile (in: hFile=0x1774, lpBuffer=0x300d948*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xa71fa88, lpOverlapped=0x0 | out: lpBuffer=0x300d948*, lpNumberOfBytesWritten=0xa71fa88*=0x110, lpOverlapped=0x0) returned 1 [0174.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e078d8 [0174.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f7b8 [0174.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0174.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0174.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5b780 [0174.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0174.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0174.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0174.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 [0174.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e078d8) returned 1 [0174.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x3e078d8 [0174.171] sprintf (in: _Dest=0x3e078d8, _Format="%c%c" | out: _Dest="b0") returned 2 [0174.171] sprintf (in: _Dest=0x3e078da, _Format="%c%c" | out: _Dest="45") returned 2 [0174.171] sprintf (in: _Dest=0x3e078dc, _Format="%c%c" | out: _Dest="d8") returned 2 [0174.171] sprintf (in: _Dest=0x3e078de, _Format="%c%c" | out: _Dest="f2") returned 2 [0174.172] sprintf (in: _Dest=0x3e078e0, _Format="%c%c" | out: _Dest="1b") returned 2 [0174.172] sprintf (in: _Dest=0x3e078e2, _Format="%c%c" | out: _Dest="1a") returned 2 [0174.172] sprintf (in: _Dest=0x3e078e4, _Format="%c%c" | out: _Dest="a1") returned 2 [0174.172] sprintf (in: _Dest=0x3e078e6, _Format="%c%c" | out: _Dest="b5") returned 2 [0174.172] sprintf (in: _Dest=0x3e078e8, _Format="%c%c" | out: _Dest="62") returned 2 [0174.172] sprintf (in: _Dest=0x3e078ea, _Format="%c%c" | out: _Dest="2b") returned 2 [0174.172] sprintf (in: _Dest=0x3e078ec, _Format="%c%c" | out: _Dest="bf") returned 2 [0174.172] sprintf (in: _Dest=0x3e078ee, _Format="%c%c" | out: _Dest="ca") returned 2 [0174.172] sprintf (in: _Dest=0x3e078f0, _Format="%c%c" | out: _Dest="4b") returned 2 [0174.172] sprintf (in: _Dest=0x3e078f2, _Format="%c%c" | out: _Dest="44") returned 2 [0174.172] sprintf (in: _Dest=0x3e078f4, _Format="%c%c" | out: _Dest="62") returned 2 [0174.172] sprintf (in: _Dest=0x3e078f6, _Format="%c%c" | out: _Dest="58") returned 2 [0174.172] sprintf (in: _Dest=0x3e078f8, _Format="%c%c" | out: _Dest="44") returned 2 [0174.172] sprintf (in: _Dest=0x3e078fa, _Format="%c%c" | out: _Dest="e6") returned 2 [0174.172] sprintf (in: _Dest=0x3e078fc, _Format="%c%c" | out: _Dest="53") returned 2 [0174.172] sprintf (in: _Dest=0x3e078fe, _Format="%c%c" | out: _Dest="8a") returned 2 [0174.172] sprintf (in: _Dest=0x3e07900, _Format="%c%c" | out: _Dest="9d") returned 2 [0174.172] sprintf (in: _Dest=0x3e07902, _Format="%c%c" | out: _Dest="e5") returned 2 [0174.172] sprintf (in: _Dest=0x3e07904, _Format="%c%c" | out: _Dest="26") returned 2 [0174.172] sprintf (in: _Dest=0x3e07906, _Format="%c%c" | out: _Dest="82") returned 2 [0174.172] sprintf (in: _Dest=0x3e07908, _Format="%c%c" | out: _Dest="c5") returned 2 [0174.172] sprintf (in: _Dest=0x3e0790a, _Format="%c%c" | out: _Dest="ec") returned 2 [0174.172] sprintf (in: _Dest=0x3e0790c, _Format="%c%c" | out: _Dest="11") returned 2 [0174.172] sprintf (in: _Dest=0x3e0790e, _Format="%c%c" | out: _Dest="82") returned 2 [0174.172] sprintf (in: _Dest=0x3e07910, _Format="%c%c" | out: _Dest="40") returned 2 [0174.172] sprintf (in: _Dest=0x3e07912, _Format="%c%c" | out: _Dest="cd") returned 2 [0174.173] RtlInitAnsiString (in: DestinationString=0xa71fa10, SourceString="b045d8f21b1aa1b5622bbfca4b44625844e6538a9de52682c5ec118240cd" | out: DestinationString="b045d8f21b1aa1b5622bbfca4b44625844e6538a9de52682c5ec118240cd") [0174.173] RtlAnsiStringToUnicodeString (in: DestinationString=0xa71fa08, SourceString="b045d8f21b1aa1b5622bbfca4b44625844e6538a9de52682c5ec118240cd", AllocateDestinationString=1 | out: DestinationString="b045d8f21b1aa1b5622bbfca4b44625844e6538a9de52682c5ec118240cd") returned 0x0 [0174.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ca10 [0174.173] wcscat (in: _Dest=0x3eaede8, _Source="b045d8f21b1aa1b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b045d8f21b1aa1b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b045d8f21b1aa1b" [0174.173] wcscat (in: _Dest=0x3eaede8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b045d8f21b1aa1b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b045d8f21b1aa1b.68814f" [0174.173] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b045d8f21b1aa1b.68814f", NtPathName=0xa71fa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b045d8f21b1aa1b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85970 [0179.940] FlushFileBuffers (hFile=0x1774) returned 1 [0179.950] CloseHandle (hObject=0x1774) returned 1 [0179.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c378 [0179.956] wcscpy (in: _Dest=0x35c378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0179.956] wcscat (in: _Dest=0x35c378, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0179.956] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0179.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 [0179.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e678) returned 1 Thread: id = 4057 os_tid = 0xb50 [0169.581] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current tabs")) returned 0x2020 [0171.178] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", dwFileAttributes=0x20) returned 1 [0171.179] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1778 [0171.179] GetFileSizeEx (in: hFile=0x1778, lpFileSize=0x5d2fb0c | out: lpFileSize=0x5d2fb0c*=294) returned 1 [0171.179] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x122, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.179] ReadFile (in: hFile=0x1778, lpBuffer=0x5d2fae8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5d2faf8, lpOverlapped=0x0 | out: lpBuffer=0x5d2fae8*, lpNumberOfBytesRead=0x5d2faf8*=0x4, lpOverlapped=0x0) returned 1 [0171.182] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0171.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0171.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0171.182] NtQuerySystemTime (in: CurrentTime=0x5d2fa80 | out: CurrentTime=0x5d2fa80*=132462177497580000) returned 0x0 [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x713a2d50 [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x2c2dd00f [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x83036e6 [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x568692d0 [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x6a413e0c [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x6c9c2396 [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x7fad43fe [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x1e06b142 [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x5d057f28 [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x563f1625 [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x698c2e29 [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x6387891b [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x47a566ad [0171.182] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x15fe4a23 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x65110075 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x6d6ec788 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x6a89ad17 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x70855aee [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x4c3becfd [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x23c955ef [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x4e3d7c35 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x79bfb3d2 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0xf5010fc [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x60b91717 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x1f4bb09c [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x60b067d0 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x5373e15d [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x174a12b7 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x72375cf4 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x21797c12 [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x7a54e69b [0171.183] RtlRandomEx (in: Seed=0x5d2fa78 | out: Seed=0x5d2fa78) returned 0x251d417 [0171.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0171.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0171.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0171.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0171.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0171.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49ad0 [0171.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0171.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0171.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0171.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0171.194] ReadFile (in: hFile=0x1778, lpBuffer=0x7c08fc8, nNumberOfBytesToRead=0x126, lpNumberOfBytesRead=0x5d2fa74, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesRead=0x5d2fa74*=0x126, lpOverlapped=0x0) returned 1 [0171.195] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.195] WriteFile (in: hFile=0x1778, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x5d2fa78, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0x5d2fa78*=0x126, lpOverlapped=0x0) returned 1 [0171.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0171.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0171.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0171.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0171.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0171.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0171.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49ad0) returned 1 [0171.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37530 [0171.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49ad0 [0171.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0171.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0171.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0171.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a374d0 [0171.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0171.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0171.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0171.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0171.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49ad0) returned 1 [0171.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x300e668 [0171.585] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.585] WriteFile (in: hFile=0x1778, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x5d2fb00, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x5d2fb00*=0x10a, lpOverlapped=0x0) returned 1 [0172.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07968 [0172.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0172.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0172.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e81580 [0172.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0172.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0172.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0172.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0172.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0172.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x7a2dc00 [0172.507] sprintf (in: _Dest=0x7a2dc00, _Format="%c%c" | out: _Dest="e7") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc02, _Format="%c%c" | out: _Dest="73") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc04, _Format="%c%c" | out: _Dest="a6") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc06, _Format="%c%c" | out: _Dest="34") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc08, _Format="%c%c" | out: _Dest="8e") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc0a, _Format="%c%c" | out: _Dest="60") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc0c, _Format="%c%c" | out: _Dest="b0") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc0e, _Format="%c%c" | out: _Dest="af") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc10, _Format="%c%c" | out: _Dest="d3") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc12, _Format="%c%c" | out: _Dest="67") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc14, _Format="%c%c" | out: _Dest="e6") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc16, _Format="%c%c" | out: _Dest="35") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc18, _Format="%c%c" | out: _Dest="66") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc1a, _Format="%c%c" | out: _Dest="b5") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc1c, _Format="%c%c" | out: _Dest="be") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc1e, _Format="%c%c" | out: _Dest="05") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc20, _Format="%c%c" | out: _Dest="4d") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc22, _Format="%c%c" | out: _Dest="c4") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc24, _Format="%c%c" | out: _Dest="0d") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc26, _Format="%c%c" | out: _Dest="39") returned 2 [0172.507] sprintf (in: _Dest=0x7a2dc28, _Format="%c%c" | out: _Dest="5f") returned 2 [0172.508] sprintf (in: _Dest=0x7a2dc2a, _Format="%c%c" | out: _Dest="86") returned 2 [0172.508] sprintf (in: _Dest=0x7a2dc2c, _Format="%c%c" | out: _Dest="f8") returned 2 [0172.508] sprintf (in: _Dest=0x7a2dc2e, _Format="%c%c" | out: _Dest="1f") returned 2 [0172.508] RtlInitAnsiString (in: DestinationString=0x5d2fa88, SourceString="e773a6348e60b0afd367e63566b5be054dc40d395f86f81f" | out: DestinationString="e773a6348e60b0afd367e63566b5be054dc40d395f86f81f") [0172.508] RtlAnsiStringToUnicodeString (in: DestinationString=0x5d2fa80, SourceString="e773a6348e60b0afd367e63566b5be054dc40d395f86f81f", AllocateDestinationString=1 | out: DestinationString="e773a6348e60b0afd367e63566b5be054dc40d395f86f81f") returned 0x0 [0172.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x3e69ad8 [0172.508] wcscat (in: _Dest=0x35b718, _Source="e773a6348e60" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\e773a6348e60") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\e773a6348e60" [0172.508] wcscat (in: _Dest=0x35b718, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\e773a6348e60.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\e773a6348e60.68814f" [0172.508] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\e773a6348e60.68814f", NtPathName=0x5d2fa78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\e773a6348e60.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0172.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d56ba0 [0172.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ba0) returned 1 [0172.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e91438) returned 1 [0172.539] NtQueryInformationFile (in: FileHandle=0x1778, IoStatusBlock=0x5d2fa50, FileInformation=0x5d2fa58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5d2fa50, FileInformation=0x5d2fa58) returned 0x0 [0172.539] NtSetInformationFile (FileHandle=0x1778, IoStatusBlock=0x5d2fa50, FileInformation=0x5d2fa58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0172.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 [0172.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ad8) returned 1 [0172.547] FlushFileBuffers (hFile=0x1778) returned 1 [0172.551] CloseHandle (hObject=0x1778) returned 1 [0172.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b718 [0172.553] wcscpy (in: _Dest=0x35b718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.553] wcscat (in: _Dest=0x35b718, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0172.553] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0172.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 [0172.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63b70) returned 1 Thread: id = 4058 os_tid = 0xb40 [0169.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a8f0 [0169.582] wcscpy (in: _Dest=0x3e3a8f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0169.582] wcscat (in: _Dest=0x3e3a8f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0169.582] wcscat (in: _Dest=0x3e3a8f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*" [0169.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c8e8 [0169.582] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741b0 [0171.662] wcscmp (_String1=".", _String2=".") returned 0 [0171.662] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.662] wcscmp (_String1="..", _String2=".") returned 1 [0171.662] wcscmp (_String1="..", _String2="..") returned 0 [0171.662] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0171.662] wcscmp (_String1="000003.log", _String2=".") returned 1 [0171.662] wcscmp (_String1="000003.log", _String2="..") returned 1 [0171.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e68498 [0171.662] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0171.662] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0171.663] wcscat (in: _Dest=0x3e68498, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" [0173.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0173.817] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe382ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0173.817] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0173.817] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0173.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d84ee0 [0173.817] wcscpy (in: _Dest=0x3d84ee0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0173.817] wcscat (in: _Dest=0x3d84ee0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0173.817] wcscat (in: _Dest=0x3d84ee0, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" [0173.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0173.818] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe34e4f50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0173.818] wcscmp (_String1="LOCK", _String2=".") returned 1 [0173.818] wcscmp (_String1="LOCK", _String2="..") returned 1 [0173.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85220 [0173.819] wcscpy (in: _Dest=0x3d85220, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0173.819] wcscat (in: _Dest=0x3d85220, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0173.819] wcscat (in: _Dest=0x3d85220, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" [0173.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0173.820] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34e4f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe34e4f50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0173.820] wcscmp (_String1="LOG", _String2=".") returned 1 [0173.820] wcscmp (_String1="LOG", _String2="..") returned 1 [0173.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d56880 [0173.820] wcscpy (in: _Dest=0x3d56880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0173.820] wcscat (in: _Dest=0x3d56880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0173.820] wcscat (in: _Dest=0x3d56880, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" [0173.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4 [0173.821] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe350b0b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0173.821] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0173.821] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0173.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8d48 [0173.821] wcscpy (in: _Dest=0x2c8d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" [0173.821] wcscat (in: _Dest=0x2c8d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0173.821] wcscat (in: _Dest=0x2c8d48, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" [0173.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0173.822] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe350b0b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe350b0b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe350b0b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0173.822] FindClose (in: hFindFile=0x3e741b0 | out: hFindFile=0x3e741b0) returned 1 [0173.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c8e8) returned 1 [0173.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a8f0) returned 1 [0173.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 Thread: id = 4059 os_tid = 0xdac [0169.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35c6e8 [0169.584] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0169.584] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0169.584] wcscat (in: _Dest=0x35c6e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*" [0169.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ba78 [0169.584] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f94030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5030430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73df0 [0171.586] wcscmp (_String1=".", _String2=".") returned 0 [0171.586] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f94030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5030430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.586] wcscmp (_String1="..", _String2=".") returned 1 [0171.586] wcscmp (_String1="..", _String2="..") returned 0 [0171.586] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5030430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5030430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0171.586] wcscmp (_String1="000003.log", _String2=".") returned 1 [0171.586] wcscmp (_String1="000003.log", _String2="..") returned 1 [0171.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66258 [0171.586] wcscpy (in: _Dest=0x3e66258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0171.586] wcscat (in: _Dest=0x3e66258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0171.586] wcscat (in: _Dest=0x3e66258, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" [0172.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0172.974] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f98e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f98e50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4fbb130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0172.974] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0172.975] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0172.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7ef8 [0172.975] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0172.975] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0172.975] wcscat (in: _Dest=0x2ff7ef8, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" [0172.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0172.976] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f96740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0172.976] wcscmp (_String1="LOCK", _String2=".") returned 1 [0172.976] wcscmp (_String1="LOCK", _String2="..") returned 1 [0172.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a67110 [0172.976] wcscpy (in: _Dest=0x7a67110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0172.976] wcscat (in: _Dest=0x7a67110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0172.976] wcscat (in: _Dest=0x7a67110, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" [0172.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0172.978] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0172.978] wcscmp (_String1="LOG", _String2=".") returned 1 [0172.978] wcscmp (_String1="LOG", _String2="..") returned 1 [0172.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a671c0 [0172.978] wcscpy (in: _Dest=0x7a671c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0172.978] wcscat (in: _Dest=0x7a671c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0172.978] wcscat (in: _Dest=0x7a671c0, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" [0172.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a671c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98 [0172.980] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f98e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0172.980] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0172.980] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0172.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d579b0 [0172.980] wcscpy (in: _Dest=0x3d579b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" [0172.980] wcscat (in: _Dest=0x3d579b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0172.980] wcscat (in: _Dest=0x3d579b0, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" [0172.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d579b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0172.981] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f96740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f96740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f98e50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0172.981] FindClose (in: hFindFile=0x3e73df0 | out: hFindFile=0x3e73df0) returned 1 [0172.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ba78) returned 1 [0172.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 [0172.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e288) returned 1 Thread: id = 4060 os_tid = 0xb1c [0169.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x35bea8 [0169.585] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0169.585] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0169.585] wcscat (in: _Dest=0x35bea8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*" [0169.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ae70 [0169.585] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c17230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73d30 [0171.660] wcscmp (_String1=".", _String2=".") returned 0 [0171.660] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c17230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.660] wcscmp (_String1="..", _String2=".") returned 1 [0171.660] wcscmp (_String1="..", _String2="..") returned 0 [0171.660] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5c17230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c17230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x43b, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0171.660] wcscmp (_String1="000003.log", _String2=".") returned 1 [0171.660] wcscmp (_String1="000003.log", _String2="..") returned 1 [0171.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66858 [0171.660] wcscpy (in: _Dest=0x3e66858, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0171.660] wcscat (in: _Dest=0x3e66858, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0171.661] wcscat (in: _Dest=0x3e66858, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" [0172.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0172.918] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a9a470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0172.918] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0172.919] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0172.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0172.919] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0172.919] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0172.919] wcscat (in: _Dest=0x2ff7430, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" [0172.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90 [0172.920] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a95650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0172.920] wcscmp (_String1="LOCK", _String2=".") returned 1 [0172.920] wcscmp (_String1="LOCK", _String2="..") returned 1 [0172.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35af88 [0172.920] wcscpy (in: _Dest=0x35af88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0172.920] wcscat (in: _Dest=0x35af88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0172.920] wcscat (in: _Dest=0x35af88, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" [0172.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35af88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0172.921] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0172.921] wcscmp (_String1="LOG", _String2=".") returned 1 [0172.921] wcscmp (_String1="LOG", _String2="..") returned 1 [0172.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b9d8 [0172.922] wcscpy (in: _Dest=0x35b9d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0172.922] wcscat (in: _Dest=0x35b9d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0172.922] wcscat (in: _Dest=0x35b9d8, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" [0172.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22f8 [0172.923] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a95650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0172.923] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0172.923] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0172.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56ad8 [0172.923] wcscpy (in: _Dest=0x3d56ad8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" [0172.923] wcscat (in: _Dest=0x3d56ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0172.923] wcscat (in: _Dest=0x3d56ad8, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" [0172.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0172.924] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a95650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5a95650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5a95650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0172.924] FindClose (in: hFindFile=0x3e73d30 | out: hFindFile=0x3e73d30) returned 1 [0172.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ae70) returned 1 [0172.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 [0172.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e870) returned 1 Thread: id = 4061 os_tid = 0xda8 [0169.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a626d0 [0169.590] wcscpy (in: _Dest=0x7a626d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0169.590] wcscat (in: _Dest=0x7a626d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0169.590] wcscat (in: _Dest=0x7a626d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*" [0169.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b0d8 [0169.590] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6173350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6173350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74130 [0171.661] wcscmp (_String1=".", _String2=".") returned 0 [0171.661] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6173350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6173350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.661] wcscmp (_String1="..", _String2=".") returned 1 [0171.661] wcscmp (_String1="..", _String2="..") returned 0 [0171.661] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6173350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6178170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6178170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1 [0171.661] wcscmp (_String1="aapocclcgogkmnckokdopfmhonfmgoek", _String2=".") returned 1 [0171.661] wcscmp (_String1="aapocclcgogkmnckokdopfmhonfmgoek", _String2="..") returned 1 [0171.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8b88 [0171.661] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0171.661] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0171.661] wcscat (in: _Dest=0x2c8b88, _Source="aapocclcgogkmnckokdopfmhonfmgoek" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0172.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c8b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0172.827] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65fae00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65fae00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1 [0172.827] wcscmp (_String1="aohghmighlieiainnegkcijnfilokake", _String2=".") returned 1 [0172.827] wcscmp (_String1="aohghmighlieiainnegkcijnfilokake", _String2="..") returned 1 [0172.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c88e8 [0172.827] wcscpy (in: _Dest=0x2c88e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0172.827] wcscat (in: _Dest=0x2c88e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0172.827] wcscat (in: _Dest=0x2c88e8, _Source="aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0172.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c88e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0172.828] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f9dc70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ff4960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ff4960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1 [0172.829] wcscmp (_String1="apdfllckaahabafndbhieahigkjlhalf", _String2=".") returned 1 [0172.829] wcscmp (_String1="apdfllckaahabafndbhieahigkjlhalf", _String2="..") returned 1 [0172.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8648 [0172.829] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0172.829] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0172.829] wcscat (in: _Dest=0x2c8648, _Source="apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0172.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c48 [0172.830] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe509e200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe853dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe853dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1 [0172.830] wcscmp (_String1="blpcfgokakmgnkcojhhkbfbldkacnbeo", _String2=".") returned 1 [0172.830] wcscmp (_String1="blpcfgokakmgnkcojhhkbfbldkacnbeo", _String2="..") returned 1 [0172.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8aa8 [0172.830] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0172.830] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0172.830] wcscat (in: _Dest=0x2c8aa8, _Source="blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0172.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0172.832] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5c801e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c85000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c85000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0172.832] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2=".") returned 1 [0172.832] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2="..") returned 1 [0172.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8728 [0172.832] wcscpy (in: _Dest=0x2c8728, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0172.832] wcscat (in: _Dest=0x2c8728, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0172.832] wcscat (in: _Dest=0x2c8728, _Source="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0172.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c8728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0172.833] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5427e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe542cc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe542cc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1 [0172.833] wcscmp (_String1="nmmhkkegccagdldgiimedpiccmgmieda", _String2=".") returned 1 [0172.833] wcscmp (_String1="nmmhkkegccagdldgiimedpiccmgmieda", _String2="..") returned 1 [0172.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8c68 [0172.833] wcscpy (in: _Dest=0x2c8c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0172.833] wcscat (in: _Dest=0x2c8c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0172.833] wcscat (in: _Dest=0x2c8c68, _Source="nmmhkkegccagdldgiimedpiccmgmieda" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0172.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c8c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0172.834] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efa340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b60b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b60b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1 [0172.835] wcscmp (_String1="pjkljhegncpnkpknbcohdijeoejaedia", _String2=".") returned 1 [0172.835] wcscmp (_String1="pjkljhegncpnkpknbcohdijeoejaedia", _String2="..") returned 1 [0172.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8e28 [0172.835] wcscpy (in: _Dest=0x2c8e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0172.835] wcscat (in: _Dest=0x2c8e28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0172.835] wcscat (in: _Dest=0x2c8e28, _Source="pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0172.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c8e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0172.836] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8538ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe85403f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0172.836] wcscmp (_String1="Temp", _String2=".") returned 1 [0172.836] wcscmp (_String1="Temp", _String2="..") returned 1 [0172.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f1a0 [0172.836] wcscpy (in: _Dest=0x7a5f1a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" [0172.836] wcscat (in: _Dest=0x7a5f1a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\" [0172.836] wcscat (in: _Dest=0x7a5f1a0, _Source="Temp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp" [0172.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 [0172.836] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8538ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe85403f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0172.836] FindClose (in: hFindFile=0x3e74130 | out: hFindFile=0x3e74130) returned 1 [0172.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b0d8) returned 1 [0172.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a626d0) returned 1 [0172.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 4062 os_tid = 0xdb0 [0169.591] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons")) returned 0x2020 [0171.205] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", dwFileAttributes=0x20) returned 1 [0171.205] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1780 [0171.205] GetFileSizeEx (in: hFile=0x1780, lpFileSize=0x7f9f92c | out: lpFileSize=0x7f9f92c*=20480) returned 1 [0171.205] SetFilePointerEx (in: hFile=0x1780, liDistanceToMove=0x4ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.205] ReadFile (in: hFile=0x1780, lpBuffer=0x7f9f908, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f9f918, lpOverlapped=0x0 | out: lpBuffer=0x7f9f908*, lpNumberOfBytesRead=0x7f9f918*=0x4, lpOverlapped=0x0) returned 1 [0171.413] SetFilePointerEx (in: hFile=0x1780, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0171.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0171.413] NtQuerySystemTime (in: CurrentTime=0x7f9f8a0 | out: CurrentTime=0x7f9f8a0*=132462177499920000) returned 0x0 [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x77c4c4ec [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x13aa644b [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x375381a7 [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x1a2082b7 [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x66863a1d [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x7e42e7f3 [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x47d267e0 [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x1a6f39c8 [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x28520f49 [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x5c6f6369 [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x77893302 [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x4e086675 [0171.413] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x2b95921a [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x4f9c3d12 [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x55d5d87f [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x294ced52 [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x27cd6682 [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x2575467b [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x368cb7f [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x5120d577 [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x9563989 [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x4154466d [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x4a8fe9ab [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x696d01b7 [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x3366a40f [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x2cf979d3 [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x41e191b3 [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x156e639a [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x73082a8e [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x54c45dd3 [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x57eff420 [0171.414] RtlRandomEx (in: Seed=0x7f9f898 | out: Seed=0x7f9f898) returned 0x4b5dda6d [0171.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0171.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0171.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0171.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0171.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0171.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0171.426] SetFilePointerEx (in: hFile=0x1780, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.426] ReadFile (in: hFile=0x1780, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x7f9f8a0, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0x7f9f8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0171.544] SetFilePointerEx (in: hFile=0x1780, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdef0 [0171.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0171.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9bf68 [0171.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0171.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0171.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0171.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdef0) returned 1 [0171.545] WriteFile (in: hFile=0x1780, lpBuffer=0x7c9bf68*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x7f9f8a0, lpOverlapped=0x0 | out: lpBuffer=0x7c9bf68*, lpNumberOfBytesWritten=0x7f9f8a0*=0x3c00, lpOverlapped=0x0) returned 1 [0172.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9bf68) returned 1 [0172.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0172.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5bf78 [0172.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0172.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5a7e0 [0172.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0172.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0172.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0172.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0172.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07e30) returned 1 [0172.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x300e668 [0172.565] SetFilePointerEx (in: hFile=0x1780, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.565] WriteFile (in: hFile=0x1780, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x7f9f920, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x7f9f920*=0x102, lpOverlapped=0x0) returned 1 [0174.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d409f0 [0174.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0174.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d50 [0174.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d50) returned 1 [0174.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad92f8 [0174.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d50 [0174.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0174.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0174.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0174.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409f0) returned 1 [0174.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a37530 [0174.722] sprintf (in: _Dest=0x7a37530, _Format="%c%c" | out: _Dest="c2") returned 2 [0174.722] sprintf (in: _Dest=0x7a37532, _Format="%c%c" | out: _Dest="42") returned 2 [0174.722] sprintf (in: _Dest=0x7a37534, _Format="%c%c" | out: _Dest="90") returned 2 [0174.723] sprintf (in: _Dest=0x7a37536, _Format="%c%c" | out: _Dest="5c") returned 2 [0174.723] sprintf (in: _Dest=0x7a37538, _Format="%c%c" | out: _Dest="62") returned 2 [0174.723] sprintf (in: _Dest=0x7a3753a, _Format="%c%c" | out: _Dest="7e") returned 2 [0174.723] sprintf (in: _Dest=0x7a3753c, _Format="%c%c" | out: _Dest="8e") returned 2 [0174.723] sprintf (in: _Dest=0x7a3753e, _Format="%c%c" | out: _Dest="5d") returned 2 [0174.723] sprintf (in: _Dest=0x7a37540, _Format="%c%c" | out: _Dest="61") returned 2 [0174.723] sprintf (in: _Dest=0x7a37542, _Format="%c%c" | out: _Dest="ec") returned 2 [0174.723] sprintf (in: _Dest=0x7a37544, _Format="%c%c" | out: _Dest="e4") returned 2 [0174.723] sprintf (in: _Dest=0x7a37546, _Format="%c%c" | out: _Dest="6e") returned 2 [0174.723] sprintf (in: _Dest=0x7a37548, _Format="%c%c" | out: _Dest="7e") returned 2 [0174.723] sprintf (in: _Dest=0x7a3754a, _Format="%c%c" | out: _Dest="36") returned 2 [0174.723] sprintf (in: _Dest=0x7a3754c, _Format="%c%c" | out: _Dest="84") returned 2 [0174.723] sprintf (in: _Dest=0x7a3754e, _Format="%c%c" | out: _Dest="ae") returned 2 [0174.723] RtlInitAnsiString (in: DestinationString=0x7f9f8a8, SourceString="c242905c627e8e5d61ece46e7e3684ae" | out: DestinationString="c242905c627e8e5d61ece46e7e3684ae") [0174.723] RtlAnsiStringToUnicodeString (in: DestinationString=0x7f9f8a0, SourceString="c242905c627e8e5d61ece46e7e3684ae", AllocateDestinationString=1 | out: DestinationString="c242905c627e8e5d61ece46e7e3684ae") returned 0x0 [0174.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e843f8 [0174.724] wcscat (in: _Dest=0x3053720, _Source="c242905c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\c242905c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\c242905c" [0174.724] wcscat (in: _Dest=0x3053720, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\c242905c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\c242905c.68814f" [0174.724] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\c242905c.68814f", NtPathName=0x7f9f898, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\c242905c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66798 [0179.944] FlushFileBuffers (hFile=0x1780) returned 1 [0179.950] CloseHandle (hObject=0x1780) returned 1 [0179.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bdf8 [0179.962] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0179.962] wcscat (in: _Dest=0x35bdf8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0179.962] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0179.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 [0179.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6dc8) returned 1 Thread: id = 4063 os_tid = 0xdbc [0169.592] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal")) returned 0x2020 [0171.207] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", dwFileAttributes=0x20) returned 1 [0171.208] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1784 [0171.208] GetFileSizeEx (in: hFile=0x1784, lpFileSize=0x9b9f7cc | out: lpFileSize=0x9b9f7cc*=0) returned 1 [0171.208] FlushFileBuffers (hFile=0x1784) returned 1 [0172.486] CloseHandle (hObject=0x1784) returned 1 [0172.486] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", dwFileAttributes=0x2020) returned 1 [0174.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f6e0) returned 1 Thread: id = 4064 os_tid = 0xdc4 [0169.599] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history")) returned 0x2020 [0171.228] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", dwFileAttributes=0x20) returned 1 [0171.229] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x178c [0171.229] GetFileSizeEx (in: hFile=0x178c, lpFileSize=0xeb7fe14 | out: lpFileSize=0xeb7fe14*=102400) returned 1 [0171.229] SetFilePointerEx (in: hFile=0x178c, liDistanceToMove=0x18ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.229] ReadFile (in: hFile=0x178c, lpBuffer=0xeb7fdf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xeb7fe00, lpOverlapped=0x0 | out: lpBuffer=0xeb7fdf0*, lpNumberOfBytesRead=0xeb7fe00*=0x4, lpOverlapped=0x0) returned 1 [0171.426] SetFilePointerEx (in: hFile=0x178c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0171.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0171.427] NtQuerySystemTime (in: CurrentTime=0xeb7fd88 | out: CurrentTime=0xeb7fd88*=132462177500076000) returned 0x0 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x29d0e299 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x4e35f824 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x6f7bb9e9 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x6ca06132 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x55f81fe8 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x29242c82 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x5b4a3d4e [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x34a6cc4d [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x5a1f0fd7 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x142a271b [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x526d9d35 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x28f0f193 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x2bfcfb19 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x2f7d9c4a [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x2595f6c2 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x199e09bb [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x6aa60450 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x5a5969a6 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x4c6a66e9 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x242defb0 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x4a235f17 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x50a3fd82 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x741ec94a [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x3fa23dcb [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x5f089b10 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x32f5d732 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x4eb14443 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x49a493b2 [0171.427] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x4886c3de [0171.428] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x344af1fe [0171.428] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x6bb6f128 [0171.428] RtlRandomEx (in: Seed=0xeb7fd80 | out: Seed=0xeb7fd80) returned 0x7571f7e5 [0171.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0171.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0171.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0171.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0171.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0171.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0171.437] SetFilePointerEx (in: hFile=0x178c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.437] ReadFile (in: hFile=0x178c, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xeb7fd88, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0xeb7fd88*=0x3c00, lpOverlapped=0x0) returned 1 [0171.620] SetFilePointerEx (in: hFile=0x178c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41770 [0171.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0171.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0171.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0171.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0171.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0171.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0171.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0171.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0171.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41770) returned 1 [0171.620] WriteFile (in: hFile=0x178c, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xeb7fd88, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0xeb7fd88*=0x3c00, lpOverlapped=0x0) returned 1 [0173.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0173.178] SetFilePointerEx (in: hFile=0x178c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.178] ReadFile (in: hFile=0x178c, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xeb7fd88, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0xeb7fd88*=0x3c00, lpOverlapped=0x0) returned 1 [0173.179] SetFilePointerEx (in: hFile=0x178c, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdbd8 [0173.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0173.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0173.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0173.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0173.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0173.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0173.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0173.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0173.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdbd8) returned 1 [0173.180] WriteFile (in: hFile=0x178c, lpBuffer=0x7c107d8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xeb7fd88, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesWritten=0xeb7fd88*=0x3c00, lpOverlapped=0x0) returned 1 [0175.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0175.048] SetFilePointerEx (in: hFile=0x178c, liDistanceToMove=0x15400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.048] ReadFile (in: hFile=0x178c, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xeb7fd88, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0xeb7fd88*=0x3c00, lpOverlapped=0x0) returned 1 [0177.309] SetFilePointerEx (in: hFile=0x178c, liDistanceToMove=0x15400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a246b0 [0177.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0177.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0177.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0177.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0177.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0177.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0177.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0177.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0177.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a246b0) returned 1 [0177.311] WriteFile (in: hFile=0x178c, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xeb7fd88, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xeb7fd88*=0x3c00, lpOverlapped=0x0) returned 1 [0179.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0179.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1ec08 [0179.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0179.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5aa10 [0179.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0179.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0179.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0179.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0179.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300fa8) returned 1 [0179.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ea2d68 [0179.947] SetFilePointerEx (in: hFile=0x178c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.947] WriteFile (in: hFile=0x178c, lpBuffer=0x3ea2d68*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0xeb7fe08, lpOverlapped=0x0 | out: lpBuffer=0x3ea2d68*, lpNumberOfBytesWritten=0xeb7fe08*=0x140, lpOverlapped=0x0) returned 1 [0179.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d412a8 [0179.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0179.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0179.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0179.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43860 [0179.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0179.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0179.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0179.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0179.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412a8) returned 1 [0179.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3d5b050 [0179.960] sprintf (in: _Dest=0x3d5b050, _Format="%c%c" | out: _Dest="dd") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b052, _Format="%c%c" | out: _Dest="d3") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b054, _Format="%c%c" | out: _Dest="d4") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b056, _Format="%c%c" | out: _Dest="3f") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b058, _Format="%c%c" | out: _Dest="82") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b05a, _Format="%c%c" | out: _Dest="98") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b05c, _Format="%c%c" | out: _Dest="7a") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b05e, _Format="%c%c" | out: _Dest="50") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b060, _Format="%c%c" | out: _Dest="4b") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b062, _Format="%c%c" | out: _Dest="e9") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b064, _Format="%c%c" | out: _Dest="37") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b066, _Format="%c%c" | out: _Dest="88") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b068, _Format="%c%c" | out: _Dest="fd") returned 2 [0179.960] sprintf (in: _Dest=0x3d5b06a, _Format="%c%c" | out: _Dest="66") returned 2 [0179.960] RtlInitAnsiString (in: DestinationString=0xeb7fd90, SourceString="ddd3d43f82987a504be93788fd66" | out: DestinationString="ddd3d43f82987a504be93788fd66") [0179.960] RtlAnsiStringToUnicodeString (in: DestinationString=0xeb7fd88, SourceString="ddd3d43f82987a504be93788fd66", AllocateDestinationString=1 | out: DestinationString="ddd3d43f82987a504be93788fd66") returned 0x0 [0179.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3d40ac8 [0179.960] wcscat (in: _Dest=0x7a5e678, _Source="ddd3d43" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ddd3d43") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ddd3d43" [0179.960] wcscat (in: _Dest=0x7a5e678, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ddd3d43.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ddd3d43.68814f" [0179.960] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ddd3d43.68814f", NtPathName=0xeb7fd80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ddd3d43.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0179.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3e65c58 [0179.979] FlushFileBuffers (hFile=0x178c) returned 1 [0179.980] CloseHandle (hObject=0x178c) returned 1 [0179.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bdf8 [0179.985] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0179.985] wcscat (in: _Dest=0x35bdf8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0179.985] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0179.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 [0179.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5998) returned 1 Thread: id = 4065 os_tid = 0xdc8 [0169.600] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache")) returned 0x2020 [0171.237] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", dwFileAttributes=0x20) returned 1 [0171.237] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1798 [0171.237] GetFileSizeEx (in: hFile=0x1798, lpFileSize=0x8acf93c | out: lpFileSize=0x8acf93c*=2015) returned 1 [0171.237] SetFilePointerEx (in: hFile=0x1798, liDistanceToMove=0x7db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.237] ReadFile (in: hFile=0x1798, lpBuffer=0x8acf918, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8acf928, lpOverlapped=0x0 | out: lpBuffer=0x8acf918*, lpNumberOfBytesRead=0x8acf928*=0x4, lpOverlapped=0x0) returned 1 [0171.451] SetFilePointerEx (in: hFile=0x1798, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0171.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0171.451] NtQuerySystemTime (in: CurrentTime=0x8acf8b0 | out: CurrentTime=0x8acf8b0*=132462177500232000) returned 0x0 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x5cb92a30 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x729379d6 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x5ccaaee2 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x51399d8c [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x6234c4c8 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x76d41867 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x76700ea2 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x2f6063c9 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x370bfdb3 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x50d221e6 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x4adeae7d [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x7cbe7a50 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x650d2ce [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x41d4daed [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x1c5d080a [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x26a17942 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x48a5791a [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x38e7905f [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x2b2d1b13 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x11c858ec [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x2b456cce [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x679bc739 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x58d0a6bd [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x7033b86d [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x21282926 [0171.451] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x4d42ac56 [0171.452] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x56756ee7 [0171.452] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x65be30eb [0171.452] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x617c6b2e [0171.452] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x75fe4ed7 [0171.452] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x27cca86a [0171.452] RtlRandomEx (in: Seed=0x8acf8a8 | out: Seed=0x8acf8a8) returned 0x5b74a61a [0171.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0171.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0171.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0171.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0171.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0171.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be0e8 [0171.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0171.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c143e0 [0171.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0171.461] ReadFile (in: hFile=0x1798, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x7df, lpNumberOfBytesRead=0x8acf8a4, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0x8acf8a4*=0x7df, lpOverlapped=0x0) returned 1 [0171.461] SetFilePointerEx (in: hFile=0x1798, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.461] WriteFile (in: hFile=0x1798, lpBuffer=0x7bf9fa8*, nNumberOfBytesToWrite=0x7df, lpNumberOfBytesWritten=0x8acf8a8, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesWritten=0x8acf8a8*=0x7df, lpOverlapped=0x0) returned 1 [0174.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535d0 [0174.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0174.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0174.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0174.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0174.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0174.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be0e8) returned 1 [0174.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30be0e8 [0174.040] SetFilePointerEx (in: hFile=0x1798, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.040] WriteFile (in: hFile=0x1798, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x8acf930, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0x8acf930*=0x11e, lpOverlapped=0x0) returned 1 [0177.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85b78 [0177.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0177.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edc750 [0177.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc750) returned 1 [0177.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0177.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edc750 [0177.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd7b8 [0177.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd7b8) returned 1 [0177.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0177.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b78) returned 1 [0177.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1d958 [0177.110] sprintf (in: _Dest=0x3e1d958, _Format="%c%c" | out: _Dest="11") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d95a, _Format="%c%c" | out: _Dest="54") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d95c, _Format="%c%c" | out: _Dest="66") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d95e, _Format="%c%c" | out: _Dest="a2") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d960, _Format="%c%c" | out: _Dest="58") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d962, _Format="%c%c" | out: _Dest="d1") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d964, _Format="%c%c" | out: _Dest="18") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d966, _Format="%c%c" | out: _Dest="35") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d968, _Format="%c%c" | out: _Dest="c3") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d96a, _Format="%c%c" | out: _Dest="bc") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d96c, _Format="%c%c" | out: _Dest="f9") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d96e, _Format="%c%c" | out: _Dest="7b") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d970, _Format="%c%c" | out: _Dest="be") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d972, _Format="%c%c" | out: _Dest="c8") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d974, _Format="%c%c" | out: _Dest="e8") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d976, _Format="%c%c" | out: _Dest="e7") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d978, _Format="%c%c" | out: _Dest="d4") returned 2 [0177.110] sprintf (in: _Dest=0x3e1d97a, _Format="%c%c" | out: _Dest="3e") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d97c, _Format="%c%c" | out: _Dest="73") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d97e, _Format="%c%c" | out: _Dest="50") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d980, _Format="%c%c" | out: _Dest="24") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d982, _Format="%c%c" | out: _Dest="23") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d984, _Format="%c%c" | out: _Dest="1b") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d986, _Format="%c%c" | out: _Dest="c5") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d988, _Format="%c%c" | out: _Dest="42") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d98a, _Format="%c%c" | out: _Dest="f9") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d98c, _Format="%c%c" | out: _Dest="3b") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d98e, _Format="%c%c" | out: _Dest="be") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d990, _Format="%c%c" | out: _Dest="d7") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d992, _Format="%c%c" | out: _Dest="34") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d994, _Format="%c%c" | out: _Dest="39") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d996, _Format="%c%c" | out: _Dest="92") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d998, _Format="%c%c" | out: _Dest="f4") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d99a, _Format="%c%c" | out: _Dest="54") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d99c, _Format="%c%c" | out: _Dest="e2") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d99e, _Format="%c%c" | out: _Dest="54") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d9a0, _Format="%c%c" | out: _Dest="c9") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d9a2, _Format="%c%c" | out: _Dest="e2") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d9a4, _Format="%c%c" | out: _Dest="fa") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d9a6, _Format="%c%c" | out: _Dest="aa") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d9a8, _Format="%c%c" | out: _Dest="5e") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d9aa, _Format="%c%c" | out: _Dest="ae") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d9ac, _Format="%c%c" | out: _Dest="1d") returned 2 [0177.111] sprintf (in: _Dest=0x3e1d9ae, _Format="%c%c" | out: _Dest="c7") returned 2 [0177.111] RtlInitAnsiString (in: DestinationString=0x8acf8b8, SourceString="115466a258d11835c3bcf97bbec8e8e7d43e735024231bc542f93bbed7343992f454e254c9e2faaa5eae1dc7" | out: DestinationString="115466a258d11835c3bcf97bbec8e8e7d43e735024231bc542f93bbed7343992f454e254c9e2faaa5eae1dc7") [0177.111] RtlAnsiStringToUnicodeString (in: DestinationString=0x8acf8b0, SourceString="115466a258d11835c3bcf97bbec8e8e7d43e735024231bc542f93bbed7343992f454e254c9e2faaa5eae1dc7", AllocateDestinationString=1 | out: DestinationString="115466a258d11835c3bcf97bbec8e8e7d43e735024231bc542f93bbed7343992f454e254c9e2faaa5eae1dc7") returned 0x0 [0177.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3335e8 [0177.112] wcscat (in: _Dest=0x3d57cd0, _Source="115466a258d11835c3bcf9" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\115466a258d11835c3bcf9") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\115466a258d11835c3bcf9" [0177.112] wcscat (in: _Dest=0x3d57cd0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\115466a258d11835c3bcf9.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\115466a258d11835c3bcf9.68814f" [0177.112] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\115466a258d11835c3bcf9.68814f", NtPathName=0x8acf8a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\115466a258d11835c3bcf9.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0177.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68570 [0179.968] FlushFileBuffers (hFile=0x1798) returned 1 [0179.970] CloseHandle (hObject=0x1798) returned 1 [0179.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bdf8 [0179.971] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0179.971] wcscat (in: _Dest=0x35bdf8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0179.971] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0179.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 [0179.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf238) returned 1 Thread: id = 4066 os_tid = 0xdc0 [0169.600] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history-journal")) returned 0x2020 [0171.232] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", dwFileAttributes=0x20) returned 1 [0171.232] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1790 [0171.232] GetFileSizeEx (in: hFile=0x1790, lpFileSize=0xef3f904 | out: lpFileSize=0xef3f904*=0) returned 1 [0171.232] FlushFileBuffers (hFile=0x1790) returned 1 [0172.486] CloseHandle (hObject=0x1790) returned 1 [0172.487] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", dwFileAttributes=0x2020) returned 1 [0174.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f248) returned 1 Thread: id = 4067 os_tid = 0xda4 [0169.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f1a0 [0169.601] wcscpy (in: _Dest=0x7a5f1a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0169.601] wcscat (in: _Dest=0x7a5f1a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\" [0169.601] wcscat (in: _Dest=0x7a5f1a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*" [0169.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d288 [0169.601] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73470 [0171.240] wcscmp (_String1=".", _String2=".") returned 0 [0171.240] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.240] wcscmp (_String1="..", _String2=".") returned 1 [0171.240] wcscmp (_String1="..", _String2="..") returned 0 [0171.240] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe726ce90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726ce90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726ce90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBA7.tmp", cAlternateFileName="")) returned 1 [0171.240] wcscmp (_String1="BBA7.tmp", _String2=".") returned 1 [0171.240] wcscmp (_String1="BBA7.tmp", _String2="..") returned 1 [0171.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaf5d0 [0171.240] wcscpy (in: _Dest=0x3eaf5d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0171.240] wcscat (in: _Dest=0x3eaf5d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\" [0171.241] wcscat (in: _Dest=0x3eaf5d0, _Source="BBA7.tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp" [0172.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaf5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0172.668] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe726f5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBA8.tmp", cAlternateFileName="")) returned 1 [0172.668] wcscmp (_String1="BBA8.tmp", _String2=".") returned 1 [0172.668] wcscmp (_String1="BBA8.tmp", _String2="..") returned 1 [0172.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x3eaef58 [0172.668] wcscpy (in: _Dest=0x3eaef58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" [0172.668] wcscat (in: _Dest=0x3eaef58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\" [0172.668] wcscat (in: _Dest=0x3eaef58, _Source="BBA8.tmp" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp" [0172.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eaef58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0172.670] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe726f5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe726f5a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe726f5a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBA8.tmp", cAlternateFileName="")) returned 0 [0172.670] FindClose (in: hFindFile=0x3e73470 | out: hFindFile=0x3e73470) returned 1 [0172.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d288) returned 1 [0172.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 [0172.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f0f8) returned 1 Thread: id = 4068 os_tid = 0xd9c [0169.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66918 [0169.602] wcscpy (in: _Dest=0x3e66918, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0169.602] wcscat (in: _Dest=0x3e66918, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\" [0169.602] wcscat (in: _Dest=0x3e66918, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*" [0169.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bce0 [0169.602] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74cf430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74cf430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73430 [0171.133] wcscmp (_String1=".", _String2=".") returned 0 [0171.133] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74cf430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74cf430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.133] wcscmp (_String1="..", _String2=".") returned 1 [0171.133] wcscmp (_String1="..", _String2="..") returned 0 [0171.133] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0171.133] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2=".") returned 1 [0171.133] wcscmp (_String1="ghbmnnjooekpmoecnnnilnnbdlolhkhi", _String2="..") returned 1 [0171.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3de76b8 [0171.134] wcscpy (in: _Dest=0x3de76b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" [0171.134] wcscat (in: _Dest=0x3de76b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\" [0171.134] wcscat (in: _Dest=0x3de76b8, _Source="ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0172.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de76b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0172.666] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 0 [0172.666] FindClose (in: hFindFile=0x3e73430 | out: hFindFile=0x3e73430) returned 1 [0172.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bce0) returned 1 [0172.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66918) returned 1 [0172.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaef58) returned 1 Thread: id = 4069 os_tid = 0x104c [0169.602] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data")) returned 0x2020 [0171.234] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", dwFileAttributes=0x20) returned 1 [0171.234] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1794 [0171.234] GetFileSizeEx (in: hFile=0x1794, lpFileSize=0x99efd5c | out: lpFileSize=0x99efd5c*=18432) returned 1 [0171.234] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x47fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.234] ReadFile (in: hFile=0x1794, lpBuffer=0x99efd38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x99efd48, lpOverlapped=0x0 | out: lpBuffer=0x99efd38*, lpNumberOfBytesRead=0x99efd48*=0x4, lpOverlapped=0x0) returned 1 [0171.439] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0171.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0171.440] NtQuerySystemTime (in: CurrentTime=0x99efcd0 | out: CurrentTime=0x99efcd0*=132462177500232000) returned 0x0 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x2f558042 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x62c876ae [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x3ecdd5a9 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x6d230ae4 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x11cc51e3 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x58f4908f [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x52bafbe0 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x9494bde [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x381b4943 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x645d7be5 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x751e5941 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x697a775 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x2eda49f8 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x4ceb69f9 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x24034a61 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x1b1f0a1 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x169f9af8 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x17728c37 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x56b03c07 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x44b09450 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x2821df57 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x7c6a38eb [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x3b10da47 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x1dd58b7f [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x551f6b45 [0171.440] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x26f72ac2 [0171.441] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x4f0053ea [0171.441] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x650d2ce [0171.441] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x71a842cd [0171.441] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x76f6c6c9 [0171.441] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x7afb0856 [0171.441] RtlRandomEx (in: Seed=0x99efcc8 | out: Seed=0x99efcc8) returned 0x68130c10 [0171.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0171.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0171.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0171.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0171.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0171.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0171.450] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.450] ReadFile (in: hFile=0x1794, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x99efcd0, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x99efcd0*=0x3c00, lpOverlapped=0x0) returned 1 [0171.569] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d402e8 [0171.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0171.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0171.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0171.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c9fb70 [0171.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0171.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0171.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0171.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0171.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402e8) returned 1 [0171.570] WriteFile (in: hFile=0x1794, lpBuffer=0x7c9fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x99efcd0, lpOverlapped=0x0 | out: lpBuffer=0x7c9fb70*, lpNumberOfBytesWritten=0x99efcd0*=0x3c00, lpOverlapped=0x0) returned 1 [0173.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9fb70) returned 1 [0173.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0173.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a374d0 [0173.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0173.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a375c0 [0173.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0173.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0173.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0173.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0173.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdbd8) returned 1 [0173.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x300dfd8 [0173.151] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.151] WriteFile (in: hFile=0x1794, lpBuffer=0x300dfd8*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x99efd50, lpOverlapped=0x0 | out: lpBuffer=0x300dfd8*, lpNumberOfBytesWritten=0x99efd50*=0x106, lpOverlapped=0x0) returned 1 [0174.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e078d8 [0174.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f7b8 [0174.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0174.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0174.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e821c0 [0174.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0174.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52338 [0174.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52338) returned 1 [0174.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 [0174.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e078d8) returned 1 [0174.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3e79288 [0174.168] sprintf (in: _Dest=0x3e79288, _Format="%c%c" | out: _Dest="57") returned 2 [0174.168] sprintf (in: _Dest=0x3e7928a, _Format="%c%c" | out: _Dest="a6") returned 2 [0174.168] sprintf (in: _Dest=0x3e7928c, _Format="%c%c" | out: _Dest="3b") returned 2 [0174.168] sprintf (in: _Dest=0x3e7928e, _Format="%c%c" | out: _Dest="f1") returned 2 [0174.168] sprintf (in: _Dest=0x3e79290, _Format="%c%c" | out: _Dest="10") returned 2 [0174.169] sprintf (in: _Dest=0x3e79292, _Format="%c%c" | out: _Dest="94") returned 2 [0174.169] sprintf (in: _Dest=0x3e79294, _Format="%c%c" | out: _Dest="31") returned 2 [0174.169] sprintf (in: _Dest=0x3e79296, _Format="%c%c" | out: _Dest="88") returned 2 [0174.169] sprintf (in: _Dest=0x3e79298, _Format="%c%c" | out: _Dest="d1") returned 2 [0174.169] sprintf (in: _Dest=0x3e7929a, _Format="%c%c" | out: _Dest="e2") returned 2 [0174.169] sprintf (in: _Dest=0x3e7929c, _Format="%c%c" | out: _Dest="bc") returned 2 [0174.169] sprintf (in: _Dest=0x3e7929e, _Format="%c%c" | out: _Dest="d1") returned 2 [0174.169] sprintf (in: _Dest=0x3e792a0, _Format="%c%c" | out: _Dest="4d") returned 2 [0174.169] sprintf (in: _Dest=0x3e792a2, _Format="%c%c" | out: _Dest="95") returned 2 [0174.169] sprintf (in: _Dest=0x3e792a4, _Format="%c%c" | out: _Dest="22") returned 2 [0174.169] sprintf (in: _Dest=0x3e792a6, _Format="%c%c" | out: _Dest="c7") returned 2 [0174.169] sprintf (in: _Dest=0x3e792a8, _Format="%c%c" | out: _Dest="fe") returned 2 [0174.169] sprintf (in: _Dest=0x3e792aa, _Format="%c%c" | out: _Dest="50") returned 2 [0174.169] sprintf (in: _Dest=0x3e792ac, _Format="%c%c" | out: _Dest="1f") returned 2 [0174.169] sprintf (in: _Dest=0x3e792ae, _Format="%c%c" | out: _Dest="84") returned 2 [0174.169] RtlInitAnsiString (in: DestinationString=0x99efcd8, SourceString="57a63bf110943188d1e2bcd14d9522c7fe501f84" | out: DestinationString="57a63bf110943188d1e2bcd14d9522c7fe501f84") [0174.169] RtlAnsiStringToUnicodeString (in: DestinationString=0x99efcd0, SourceString="57a63bf110943188d1e2bcd14d9522c7fe501f84", AllocateDestinationString=1 | out: DestinationString="57a63bf110943188d1e2bcd14d9522c7fe501f84") returned 0x0 [0174.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe69c8 [0174.170] wcscat (in: _Dest=0x7a67530, _Source="57a63bf110" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\57a63bf110") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\57a63bf110" [0174.170] wcscat (in: _Dest=0x7a67530, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\57a63bf110.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\57a63bf110.68814f" [0174.170] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\57a63bf110.68814f", NtPathName=0x99efcc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\57a63bf110.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3338e8 [0180.819] FlushFileBuffers (hFile=0x1794) returned 1 [0181.711] CloseHandle (hObject=0x1794) returned 1 [0181.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66fb0 [0181.717] wcscpy (in: _Dest=0x7a66fb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0181.717] wcscat (in: _Dest=0x7a66fb0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0181.717] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0181.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66fb0) returned 1 [0181.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63a30) returned 1 Thread: id = 4070 os_tid = 0x1050 [0169.603] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal")) returned 0x2020 [0171.241] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", dwFileAttributes=0x20) returned 1 [0171.241] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17a0 [0171.241] GetFileSizeEx (in: hFile=0x17a0, lpFileSize=0xf66f8ac | out: lpFileSize=0xf66f8ac*=0) returned 1 [0171.242] FlushFileBuffers (hFile=0x17a0) returned 1 [0172.487] CloseHandle (hObject=0x17a0) returned 1 [0172.487] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", dwFileAttributes=0x2020) returned 1 [0174.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 4071 os_tid = 0x1054 [0169.603] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor")) returned 0x2020 [0170.617] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", dwFileAttributes=0x20) returned 1 [0170.618] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xaf4 [0170.618] GetFileSizeEx (in: hFile=0xaf4, lpFileSize=0xf82fc74 | out: lpFileSize=0xf82fc74*=15360) returned 1 [0170.618] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x3bfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.618] ReadFile (in: hFile=0xaf4, lpBuffer=0xf82fc50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf82fc60, lpOverlapped=0x0 | out: lpBuffer=0xf82fc50*, lpNumberOfBytesRead=0xf82fc60*=0x4, lpOverlapped=0x0) returned 1 [0170.626] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0170.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0170.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0170.626] NtQuerySystemTime (in: CurrentTime=0xf82fbe8 | out: CurrentTime=0xf82fbe8*=132462177492120000) returned 0x0 [0170.626] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x49feee43 [0170.626] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x302d54a [0170.626] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x4846a217 [0170.626] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x7e840f3a [0170.626] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x60a31579 [0170.626] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x22002615 [0170.626] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x41754e0f [0170.626] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x34887d34 [0170.626] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x64c45a09 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x6a09394d [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0xb7ebfba [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x63d14ad0 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x2158f1b3 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x36dd9a02 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x21fc0ede [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x7076ef0e [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x4a95ed6d [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x20de0e00 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x3aa06242 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x2c57e08a [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x2c32979c [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x112573da [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x32fc6018 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x39caf131 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x51d5a81e [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x6f90711d [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x26a59183 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x17a330b8 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x7c4e1251 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x1bfd5245 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x1d5c88c3 [0170.627] RtlRandomEx (in: Seed=0xf82fbe0 | out: Seed=0xf82fbe0) returned 0x61b223c2 [0170.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0170.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0170.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0170.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0170.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0170.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0170.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0170.654] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.654] ReadFile (in: hFile=0xaf4, lpBuffer=0x7c053c0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xf82fbe8, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesRead=0xf82fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0171.266] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48ba0 [0171.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0171.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0171.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0171.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0171.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0171.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0171.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0171.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48ba0) returned 1 [0171.267] WriteFile (in: hFile=0xaf4, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xf82fbe8, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xf82fbe8*=0x3c00, lpOverlapped=0x0) returned 1 [0172.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0172.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0172.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e07fe0 [0172.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa08) returned 1 [0172.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e079b0 [0172.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa08 [0172.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0172.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0172.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0172.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e078d8) returned 1 [0172.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9f40 [0172.457] SetFilePointerEx (in: hFile=0xaf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.457] WriteFile (in: hFile=0xaf4, lpBuffer=0x3ec9f40*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xf82fc68, lpOverlapped=0x0 | out: lpBuffer=0x3ec9f40*, lpNumberOfBytesWritten=0xf82fc68*=0x122, lpOverlapped=0x0) returned 1 [0174.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24308 [0174.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0174.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0174.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0174.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79288 [0174.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0174.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52338 [0174.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52338) returned 1 [0174.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0174.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24308) returned 1 [0174.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x7a23680 [0174.194] sprintf (in: _Dest=0x7a23680, _Format="%c%c" | out: _Dest="da") returned 2 [0174.194] sprintf (in: _Dest=0x7a23682, _Format="%c%c" | out: _Dest="94") returned 2 [0174.194] sprintf (in: _Dest=0x7a23684, _Format="%c%c" | out: _Dest="a0") returned 2 [0174.194] sprintf (in: _Dest=0x7a23686, _Format="%c%c" | out: _Dest="71") returned 2 [0174.194] sprintf (in: _Dest=0x7a23688, _Format="%c%c" | out: _Dest="3d") returned 2 [0174.194] sprintf (in: _Dest=0x7a2368a, _Format="%c%c" | out: _Dest="b1") returned 2 [0174.194] sprintf (in: _Dest=0x7a2368c, _Format="%c%c" | out: _Dest="54") returned 2 [0174.194] sprintf (in: _Dest=0x7a2368e, _Format="%c%c" | out: _Dest="b2") returned 2 [0174.194] sprintf (in: _Dest=0x7a23690, _Format="%c%c" | out: _Dest="34") returned 2 [0174.194] sprintf (in: _Dest=0x7a23692, _Format="%c%c" | out: _Dest="ee") returned 2 [0174.194] sprintf (in: _Dest=0x7a23694, _Format="%c%c" | out: _Dest="8f") returned 2 [0174.194] sprintf (in: _Dest=0x7a23696, _Format="%c%c" | out: _Dest="e9") returned 2 [0174.195] sprintf (in: _Dest=0x7a23698, _Format="%c%c" | out: _Dest="35") returned 2 [0174.195] sprintf (in: _Dest=0x7a2369a, _Format="%c%c" | out: _Dest="40") returned 2 [0174.195] sprintf (in: _Dest=0x7a2369c, _Format="%c%c" | out: _Dest="19") returned 2 [0174.195] sprintf (in: _Dest=0x7a2369e, _Format="%c%c" | out: _Dest="25") returned 2 [0174.195] sprintf (in: _Dest=0x7a236a0, _Format="%c%c" | out: _Dest="fb") returned 2 [0174.195] sprintf (in: _Dest=0x7a236a2, _Format="%c%c" | out: _Dest="16") returned 2 [0174.195] sprintf (in: _Dest=0x7a236a4, _Format="%c%c" | out: _Dest="c8") returned 2 [0174.195] sprintf (in: _Dest=0x7a236a6, _Format="%c%c" | out: _Dest="c5") returned 2 [0174.195] sprintf (in: _Dest=0x7a236a8, _Format="%c%c" | out: _Dest="97") returned 2 [0174.195] sprintf (in: _Dest=0x7a236aa, _Format="%c%c" | out: _Dest="e9") returned 2 [0174.195] sprintf (in: _Dest=0x7a236ac, _Format="%c%c" | out: _Dest="4a") returned 2 [0174.195] sprintf (in: _Dest=0x7a236ae, _Format="%c%c" | out: _Dest="09") returned 2 [0174.195] sprintf (in: _Dest=0x7a236b0, _Format="%c%c" | out: _Dest="02") returned 2 [0174.195] sprintf (in: _Dest=0x7a236b2, _Format="%c%c" | out: _Dest="05") returned 2 [0174.195] sprintf (in: _Dest=0x7a236b4, _Format="%c%c" | out: _Dest="e0") returned 2 [0174.195] sprintf (in: _Dest=0x7a236b6, _Format="%c%c" | out: _Dest="18") returned 2 [0174.195] sprintf (in: _Dest=0x7a236b8, _Format="%c%c" | out: _Dest="d6") returned 2 [0174.195] sprintf (in: _Dest=0x7a236ba, _Format="%c%c" | out: _Dest="28") returned 2 [0174.195] sprintf (in: _Dest=0x7a236bc, _Format="%c%c" | out: _Dest="61") returned 2 [0174.196] sprintf (in: _Dest=0x7a236be, _Format="%c%c" | out: _Dest="ad") returned 2 [0174.196] sprintf (in: _Dest=0x7a236c0, _Format="%c%c" | out: _Dest="4b") returned 2 [0174.196] sprintf (in: _Dest=0x7a236c2, _Format="%c%c" | out: _Dest="ed") returned 2 [0174.196] sprintf (in: _Dest=0x7a236c4, _Format="%c%c" | out: _Dest="ce") returned 2 [0174.196] sprintf (in: _Dest=0x7a236c6, _Format="%c%c" | out: _Dest="f9") returned 2 [0174.196] sprintf (in: _Dest=0x7a236c8, _Format="%c%c" | out: _Dest="7d") returned 2 [0174.196] sprintf (in: _Dest=0x7a236ca, _Format="%c%c" | out: _Dest="ca") returned 2 [0174.196] sprintf (in: _Dest=0x7a236cc, _Format="%c%c" | out: _Dest="df") returned 2 [0174.196] sprintf (in: _Dest=0x7a236ce, _Format="%c%c" | out: _Dest="0e") returned 2 [0174.196] sprintf (in: _Dest=0x7a236d0, _Format="%c%c" | out: _Dest="33") returned 2 [0174.196] sprintf (in: _Dest=0x7a236d2, _Format="%c%c" | out: _Dest="da") returned 2 [0174.196] sprintf (in: _Dest=0x7a236d4, _Format="%c%c" | out: _Dest="d2") returned 2 [0174.196] sprintf (in: _Dest=0x7a236d6, _Format="%c%c" | out: _Dest="76") returned 2 [0174.196] sprintf (in: _Dest=0x7a236d8, _Format="%c%c" | out: _Dest="c7") returned 2 [0174.196] sprintf (in: _Dest=0x7a236da, _Format="%c%c" | out: _Dest="bb") returned 2 [0174.196] sprintf (in: _Dest=0x7a236dc, _Format="%c%c" | out: _Dest="98") returned 2 [0174.196] sprintf (in: _Dest=0x7a236de, _Format="%c%c" | out: _Dest="4f") returned 2 [0174.196] RtlInitAnsiString (in: DestinationString=0xf82fbf0, SourceString="da94a0713db154b234ee8fe935401925fb16c8c597e94a090205e018d62861ad4bedcef97dcadf0e33dad276c7bb984f" | out: DestinationString="da94a0713db154b234ee8fe935401925fb16c8c597e94a090205e018d62861ad4bedcef97dcadf0e33dad276c7bb984f") [0174.196] RtlAnsiStringToUnicodeString (in: DestinationString=0xf82fbe8, SourceString="da94a0713db154b234ee8fe935401925fb16c8c597e94a090205e018d62861ad4bedcef97dcadf0e33dad276c7bb984f", AllocateDestinationString=1 | out: DestinationString="da94a0713db154b234ee8fe935401925fb16c8c597e94a090205e018d62861ad4bedcef97dcadf0e33dad276c7bb984f") returned 0x0 [0174.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85150 [0174.197] wcscat (in: _Dest=0x3d57b40, _Source="da94a0713db154b234ee8fe9" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\da94a0713db154b234ee8fe9") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\da94a0713db154b234ee8fe9" [0174.197] wcscat (in: _Dest=0x3d57b40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\da94a0713db154b234ee8fe9.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\da94a0713db154b234ee8fe9.68814f" [0174.197] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\da94a0713db154b234ee8fe9.68814f", NtPathName=0xf82fbe0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\da94a0713db154b234ee8fe9.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8488 [0179.953] FlushFileBuffers (hFile=0xaf4) returned 1 [0179.961] CloseHandle (hObject=0xaf4) returned 1 [0179.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bdf8 [0179.964] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0179.964] wcscat (in: _Dest=0x35bdf8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0179.964] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0179.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 [0179.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaeb08) returned 1 Thread: id = 4072 os_tid = 0x1058 [0169.604] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal")) returned 0x2020 [0171.142] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", dwFileAttributes=0x20) returned 1 [0171.143] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1768 [0171.143] GetFileSizeEx (in: hFile=0x1768, lpFileSize=0xf6efc4c | out: lpFileSize=0xf6efc4c*=0) returned 1 [0171.143] FlushFileBuffers (hFile=0x1768) returned 1 [0171.580] CloseHandle (hObject=0x1768) returned 1 [0171.580] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", dwFileAttributes=0x2020) returned 1 [0174.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a120) returned 1 Thread: id = 4073 os_tid = 0x105c [0170.279] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state")) returned 0x2020 [0171.209] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", dwFileAttributes=0x20) returned 1 [0171.209] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1788 [0171.209] GetFileSizeEx (in: hFile=0x1788, lpFileSize=0xf55fd3c | out: lpFileSize=0xf55fd3c*=40) returned 1 [0171.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0171.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0171.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0171.210] NtQuerySystemTime (in: CurrentTime=0xf55fcb0 | out: CurrentTime=0xf55fcb0*=132462177497892000) returned 0x0 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x1bcb89bb [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x14ad3ca7 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x68b9097a [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x5dde4304 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x7cf9d5c9 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x63a6f319 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x27fcc872 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0xe11a9ed [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x4b260701 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x5b01be4 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x1f71d64e [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x61558312 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x446d2b32 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x73c0ec3d [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x22a60591 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x5ec78c6f [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x748dc167 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x7d989662 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x24d94692 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x5f436830 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x1908ed9 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x41bd4f8d [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x1c20e1fe [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x192ffa87 [0171.210] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x4f95f5ab [0171.211] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x30af6c31 [0171.211] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x134535bd [0171.211] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x781b768b [0171.211] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x1e04f27b [0171.211] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x54782c94 [0171.211] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x5a2b8bd2 [0171.211] RtlRandomEx (in: Seed=0xf55fca8 | out: Seed=0xf55fca8) returned 0x60ad40ea [0171.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0171.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0171.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0171.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0171.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0171.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48cc0 [0171.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0171.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0171.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0171.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0171.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0171.224] ReadFile (in: hFile=0x1788, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0xf55fca4, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0xf55fca4*=0x28, lpOverlapped=0x0) returned 1 [0171.226] SetFilePointerEx (in: hFile=0x1788, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.226] WriteFile (in: hFile=0x1788, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0xf55fca8, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0xf55fca8*=0x28, lpOverlapped=0x0) returned 1 [0171.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0171.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0171.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0171.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0171.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0171.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0171.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48cc0) returned 1 [0171.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e48cc0 [0171.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e49ad0 [0171.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0171.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0171.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0171.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x3e49a88 [0171.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0171.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0171.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0171.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0171.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49ad0) returned 1 [0171.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9a60 [0171.590] SetFilePointerEx (in: hFile=0x1788, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.590] WriteFile (in: hFile=0x1788, lpBuffer=0x3ec9a60*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xf55fd30, lpOverlapped=0x0 | out: lpBuffer=0x3ec9a60*, lpNumberOfBytesWritten=0xf55fd30*=0x122, lpOverlapped=0x0) returned 1 [0172.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07968 [0172.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0172.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0172.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0172.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79100 [0172.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae98 [0172.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0172.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0172.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0172.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07968) returned 1 [0172.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x3e69d78 [0172.510] sprintf (in: _Dest=0x3e69d78, _Format="%c%c" | out: _Dest="d8") returned 2 [0172.510] sprintf (in: _Dest=0x3e69d7a, _Format="%c%c" | out: _Dest="66") returned 2 [0172.510] sprintf (in: _Dest=0x3e69d7c, _Format="%c%c" | out: _Dest="0f") returned 2 [0172.510] sprintf (in: _Dest=0x3e69d7e, _Format="%c%c" | out: _Dest="84") returned 2 [0172.510] sprintf (in: _Dest=0x3e69d80, _Format="%c%c" | out: _Dest="2e") returned 2 [0172.510] sprintf (in: _Dest=0x3e69d82, _Format="%c%c" | out: _Dest="f3") returned 2 [0172.510] sprintf (in: _Dest=0x3e69d84, _Format="%c%c" | out: _Dest="c0") returned 2 [0172.510] sprintf (in: _Dest=0x3e69d86, _Format="%c%c" | out: _Dest="dc") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d88, _Format="%c%c" | out: _Dest="00") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d8a, _Format="%c%c" | out: _Dest="a2") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d8c, _Format="%c%c" | out: _Dest="7a") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d8e, _Format="%c%c" | out: _Dest="e7") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d90, _Format="%c%c" | out: _Dest="22") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d92, _Format="%c%c" | out: _Dest="9c") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d94, _Format="%c%c" | out: _Dest="26") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d96, _Format="%c%c" | out: _Dest="d6") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d98, _Format="%c%c" | out: _Dest="f4") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d9a, _Format="%c%c" | out: _Dest="01") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d9c, _Format="%c%c" | out: _Dest="c2") returned 2 [0172.511] sprintf (in: _Dest=0x3e69d9e, _Format="%c%c" | out: _Dest="f6") returned 2 [0172.511] sprintf (in: _Dest=0x3e69da0, _Format="%c%c" | out: _Dest="55") returned 2 [0172.511] sprintf (in: _Dest=0x3e69da2, _Format="%c%c" | out: _Dest="5c") returned 2 [0172.511] sprintf (in: _Dest=0x3e69da4, _Format="%c%c" | out: _Dest="72") returned 2 [0172.511] sprintf (in: _Dest=0x3e69da6, _Format="%c%c" | out: _Dest="3d") returned 2 [0172.511] sprintf (in: _Dest=0x3e69da8, _Format="%c%c" | out: _Dest="0c") returned 2 [0172.511] sprintf (in: _Dest=0x3e69daa, _Format="%c%c" | out: _Dest="90") returned 2 [0172.511] sprintf (in: _Dest=0x3e69dac, _Format="%c%c" | out: _Dest="65") returned 2 [0172.511] sprintf (in: _Dest=0x3e69dae, _Format="%c%c" | out: _Dest="b4") returned 2 [0172.511] sprintf (in: _Dest=0x3e69db0, _Format="%c%c" | out: _Dest="29") returned 2 [0172.511] sprintf (in: _Dest=0x3e69db2, _Format="%c%c" | out: _Dest="5f") returned 2 [0172.511] sprintf (in: _Dest=0x3e69db4, _Format="%c%c" | out: _Dest="9f") returned 2 [0172.511] sprintf (in: _Dest=0x3e69db6, _Format="%c%c" | out: _Dest="6f") returned 2 [0172.511] sprintf (in: _Dest=0x3e69db8, _Format="%c%c" | out: _Dest="3f") returned 2 [0172.511] sprintf (in: _Dest=0x3e69dba, _Format="%c%c" | out: _Dest="2e") returned 2 [0172.511] sprintf (in: _Dest=0x3e69dbc, _Format="%c%c" | out: _Dest="6d") returned 2 [0172.511] sprintf (in: _Dest=0x3e69dbe, _Format="%c%c" | out: _Dest="cf") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dc0, _Format="%c%c" | out: _Dest="2a") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dc2, _Format="%c%c" | out: _Dest="58") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dc4, _Format="%c%c" | out: _Dest="e4") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dc6, _Format="%c%c" | out: _Dest="af") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dc8, _Format="%c%c" | out: _Dest="33") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dca, _Format="%c%c" | out: _Dest="78") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dcc, _Format="%c%c" | out: _Dest="d5") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dce, _Format="%c%c" | out: _Dest="5f") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dd0, _Format="%c%c" | out: _Dest="65") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dd2, _Format="%c%c" | out: _Dest="5c") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dd4, _Format="%c%c" | out: _Dest="39") returned 2 [0172.512] sprintf (in: _Dest=0x3e69dd6, _Format="%c%c" | out: _Dest="21") returned 2 [0172.512] RtlInitAnsiString (in: DestinationString=0xf55fcb8, SourceString="d8660f842ef3c0dc00a27ae7229c26d6f401c2f6555c723d0c9065b4295f9f6f3f2e6dcf2a58e4af3378d55f655c3921" | out: DestinationString="d8660f842ef3c0dc00a27ae7229c26d6f401c2f6555c723d0c9065b4295f9f6f3f2e6dcf2a58e4af3378d55f655c3921") [0172.512] RtlAnsiStringToUnicodeString (in: DestinationString=0xf55fcb0, SourceString="d8660f842ef3c0dc00a27ae7229c26d6f401c2f6555c723d0c9065b4295f9f6f3f2e6dcf2a58e4af3378d55f655c3921", AllocateDestinationString=1 | out: DestinationString="d8660f842ef3c0dc00a27ae7229c26d6f401c2f6555c723d0c9065b4295f9f6f3f2e6dcf2a58e4af3378d55f655c3921") returned 0x0 [0172.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d84ee0 [0172.512] wcscat (in: _Dest=0x3d57690, _Source="d8660f842ef3c0dc00a27ae7" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\d8660f842ef3c0dc00a27ae7") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\d8660f842ef3c0dc00a27ae7" [0172.512] wcscat (in: _Dest=0x3d57690, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\d8660f842ef3c0dc00a27ae7.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\d8660f842ef3c0dc00a27ae7.68814f" [0172.513] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\d8660f842ef3c0dc00a27ae7.68814f", NtPathName=0xf55fca8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\d8660f842ef3c0dc00a27ae7.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0172.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c88e8 [0172.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c88e8) returned 1 [0172.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e8f1b8) returned 1 [0172.549] NtQueryInformationFile (in: FileHandle=0x1788, IoStatusBlock=0xf55fc80, FileInformation=0xf55fc88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf55fc80, FileInformation=0xf55fc88) returned 0x0 [0172.549] NtSetInformationFile (FileHandle=0x1788, IoStatusBlock=0xf55fc80, FileInformation=0xf55fc88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0172.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 [0172.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ee0) returned 1 [0172.557] FlushFileBuffers (hFile=0x1788) returned 1 [0172.577] CloseHandle (hObject=0x1788) returned 1 [0174.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a67530 [0174.154] wcscpy (in: _Dest=0x7a67530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0174.154] wcscat (in: _Dest=0x7a67530, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0174.154] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0174.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67530) returned 1 [0174.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaede8) returned 1 Thread: id = 4074 os_tid = 0x1060 [0170.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kigali")) returned 0x20 [0170.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali", dwFileAttributes=0x20) returned 0 [0170.280] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kigali"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.281] GetLastError () returned 0x5 [0170.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kigali", dwFileAttributes=0x20) returned 0 [0170.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d47c00) returned 1 Thread: id = 4075 os_tid = 0x1064 [0170.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kinshasa")) returned 0x20 [0170.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa", dwFileAttributes=0x20) returned 0 [0170.287] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\kinshasa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.287] GetLastError () returned 0x5 [0170.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa", dwFileAttributes=0x20) returned 0 [0170.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26698) returned 1 Thread: id = 4076 os_tid = 0x1068 [0170.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lagos")) returned 0x20 [0170.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos", dwFileAttributes=0x20) returned 0 [0170.298] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lagos"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.298] GetLastError () returned 0x5 [0170.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lagos", dwFileAttributes=0x20) returned 0 [0170.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f220) returned 1 Thread: id = 4077 os_tid = 0x106c [0170.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\libreville")) returned 0x20 [0171.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville", dwFileAttributes=0x20) returned 0 [0171.886] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\libreville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.886] GetLastError () returned 0x5 [0171.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Libreville", dwFileAttributes=0x20) returned 0 [0171.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26f58) returned 1 Thread: id = 4078 os_tid = 0x1070 [0170.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lome")) returned 0x20 [0171.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome", dwFileAttributes=0x20) returned 0 [0171.884] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.885] GetLastError () returned 0x5 [0171.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lome", dwFileAttributes=0x20) returned 0 [0171.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d8f0) returned 1 Thread: id = 4079 os_tid = 0x1074 [0170.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\luanda")) returned 0x20 [0171.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda", dwFileAttributes=0x20) returned 0 [0171.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\luanda"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.883] GetLastError () returned 0x5 [0171.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Luanda", dwFileAttributes=0x20) returned 0 [0171.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d9c0) returned 1 Thread: id = 4080 os_tid = 0x1078 [0170.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lubumbashi")) returned 0x20 [0171.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi", dwFileAttributes=0x20) returned 0 [0171.881] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lubumbashi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.881] GetLastError () returned 0x5 [0171.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi", dwFileAttributes=0x20) returned 0 [0171.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26e78) returned 1 Thread: id = 4081 os_tid = 0x107c [0170.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lusaka")) returned 0x20 [0171.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka", dwFileAttributes=0x20) returned 0 [0171.856] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\lusaka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.857] GetLastError () returned 0x5 [0171.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Lusaka", dwFileAttributes=0x20) returned 0 [0171.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1da28) returned 1 Thread: id = 4082 os_tid = 0x1080 [0170.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\malabo")) returned 0x20 [0171.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo", dwFileAttributes=0x20) returned 0 [0171.879] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\malabo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.879] GetLastError () returned 0x5 [0171.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Malabo", dwFileAttributes=0x20) returned 0 [0171.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f150) returned 1 Thread: id = 4083 os_tid = 0x1084 [0170.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maputo")) returned 0x20 [0171.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo", dwFileAttributes=0x20) returned 0 [0171.877] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maputo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.877] GetLastError () returned 0x5 [0171.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maputo", dwFileAttributes=0x20) returned 0 [0171.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e7f8) returned 1 Thread: id = 4084 os_tid = 0x1088 [0170.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maseru")) returned 0x20 [0171.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru", dwFileAttributes=0x20) returned 0 [0171.888] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\maseru"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.888] GetLastError () returned 0x5 [0171.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Maseru", dwFileAttributes=0x20) returned 0 [0171.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d958) returned 1 Thread: id = 4085 os_tid = 0x1094 [0170.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mbabane")) returned 0x20 [0171.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane", dwFileAttributes=0x20) returned 0 [0171.890] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mbabane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.890] GetLastError () returned 0x5 [0171.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mbabane", dwFileAttributes=0x20) returned 0 [0171.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26318) returned 1 Thread: id = 4086 os_tid = 0x1098 [0170.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mogadishu")) returned 0x20 [0171.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu", dwFileAttributes=0x20) returned 0 [0171.891] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\mogadishu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.892] GetLastError () returned 0x5 [0171.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu", dwFileAttributes=0x20) returned 0 [0171.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26548) returned 1 Thread: id = 4087 os_tid = 0x109c [0170.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\monrovia")) returned 0x20 [0171.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia", dwFileAttributes=0x20) returned 0 [0171.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\monrovia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.855] GetLastError () returned 0x5 [0171.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Monrovia", dwFileAttributes=0x20) returned 0 [0171.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26c48) returned 1 Thread: id = 4088 os_tid = 0x10a0 [0170.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nairobi")) returned 0x20 [0171.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi", dwFileAttributes=0x20) returned 0 [0171.871] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nairobi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.871] GetLastError () returned 0x5 [0171.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nairobi", dwFileAttributes=0x20) returned 0 [0171.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26938) returned 1 Thread: id = 4089 os_tid = 0x10a4 [0170.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ndjamena")) returned 0x20 [0171.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena", dwFileAttributes=0x20) returned 0 [0171.869] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ndjamena"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.869] GetLastError () returned 0x5 [0171.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena", dwFileAttributes=0x20) returned 0 [0171.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26778) returned 1 Thread: id = 4090 os_tid = 0x10a8 [0170.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\niamey")) returned 0x20 [0171.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey", dwFileAttributes=0x20) returned 0 [0171.867] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\niamey"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.867] GetLastError () returned 0x5 [0171.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Niamey", dwFileAttributes=0x20) returned 0 [0171.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1e0a8) returned 1 Thread: id = 4091 os_tid = 0x10ac [0170.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nouakchott")) returned 0x20 [0171.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott", dwFileAttributes=0x20) returned 0 [0171.865] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\nouakchott"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.865] GetLastError () returned 0x5 [0171.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott", dwFileAttributes=0x20) returned 0 [0171.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26628) returned 1 Thread: id = 4092 os_tid = 0x10b0 [0170.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ouagadougou")) returned 0x20 [0171.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou", dwFileAttributes=0x20) returned 0 [0171.863] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\ouagadougou"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.864] GetLastError () returned 0x5 [0171.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou", dwFileAttributes=0x20) returned 0 [0171.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 Thread: id = 4093 os_tid = 0x10b4 [0170.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\porto-novo")) returned 0x20 [0171.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo", dwFileAttributes=0x20) returned 0 [0171.862] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\porto-novo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.862] GetLastError () returned 0x5 [0171.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo", dwFileAttributes=0x20) returned 0 [0171.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a261c8) returned 1 Thread: id = 4094 os_tid = 0x10b8 [0170.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\sao_tome")) returned 0x20 [0171.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome", dwFileAttributes=0x20) returned 0 [0171.860] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\sao_tome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.860] GetLastError () returned 0x5 [0171.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome", dwFileAttributes=0x20) returned 0 [0171.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a264d8) returned 1 Thread: id = 4095 os_tid = 0x10bc [0170.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tripoli")) returned 0x20 [0171.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli", dwFileAttributes=0x20) returned 0 [0171.858] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tripoli"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.858] GetLastError () returned 0x5 [0171.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tripoli", dwFileAttributes=0x20) returned 0 [0171.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a267e8) returned 1 Thread: id = 4096 os_tid = 0x10c0 [0170.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tunis")) returned 0x20 [0171.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis", dwFileAttributes=0x20) returned 0 [0171.893] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\tunis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.893] GetLastError () returned 0x5 [0171.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Tunis", dwFileAttributes=0x20) returned 0 [0171.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 Thread: id = 4098 os_tid = 0x10d0 [0170.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav")) returned 0x20 [0170.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV", dwFileAttributes=0x20) returned 0 [0170.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.681] GetLastError () returned 0x5 [0170.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV", dwFileAttributes=0x20) returned 0 [0170.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a633f0) returned 1 Thread: id = 4099 os_tid = 0x10d4 [0170.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav")) returned 0x20 [0171.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV", dwFileAttributes=0x20) returned 0 [0171.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.593] GetLastError () returned 0x5 [0171.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV", dwFileAttributes=0x20) returned 0 [0171.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 4100 os_tid = 0x10d8 [0170.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav")) returned 0x20 [0171.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV", dwFileAttributes=0x20) returned 0 [0171.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.897] GetLastError () returned 0x5 [0171.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV", dwFileAttributes=0x20) returned 0 [0171.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 4101 os_tid = 0x10dc [0170.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav")) returned 0x20 [0171.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV", dwFileAttributes=0x20) returned 0 [0171.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.899] GetLastError () returned 0x5 [0171.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV", dwFileAttributes=0x20) returned 0 [0171.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 4102 os_tid = 0x10e0 [0170.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav")) returned 0x20 [0171.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV", dwFileAttributes=0x20) returned 0 [0171.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.900] GetLastError () returned 0x5 [0171.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV", dwFileAttributes=0x20) returned 0 [0171.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 4103 os_tid = 0x10e4 [0170.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav")) returned 0x20 [0171.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV", dwFileAttributes=0x20) returned 0 [0171.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.588] GetLastError () returned 0x5 [0171.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV", dwFileAttributes=0x20) returned 0 [0171.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 4104 os_tid = 0x10e8 [0170.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav")) returned 0x20 [0171.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", dwFileAttributes=0x20) returned 0 [0171.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.895] GetLastError () returned 0x5 [0171.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", dwFileAttributes=0x20) returned 0 [0171.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052f40) returned 1 Thread: id = 4105 os_tid = 0x5d0 [0170.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cuiaba")) returned 0x20 [0170.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba", dwFileAttributes=0x20) returned 0 [0170.706] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\cuiaba"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.706] GetLastError () returned 0x5 [0170.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Cuiaba", dwFileAttributes=0x20) returned 0 [0170.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26bd8) returned 1 Thread: id = 4106 os_tid = 0x10ec [0170.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\curacao")) returned 0x20 [0170.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao", dwFileAttributes=0x20) returned 0 [0170.709] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\curacao"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.709] GetLastError () returned 0x5 [0170.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Curacao", dwFileAttributes=0x20) returned 0 [0170.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26698) returned 1 Thread: id = 4107 os_tid = 0x10f0 [0170.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\danmarkshavn")) returned 0x20 [0170.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn", dwFileAttributes=0x20) returned 0 [0170.711] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\danmarkshavn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.712] GetLastError () returned 0x5 [0170.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn", dwFileAttributes=0x20) returned 0 [0170.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 Thread: id = 4108 os_tid = 0x10f4 [0170.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dawson")) returned 0x20 [0170.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson", dwFileAttributes=0x20) returned 0 [0170.725] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dawson"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.725] GetLastError () returned 0x5 [0170.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson", dwFileAttributes=0x20) returned 0 [0170.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26ee8) returned 1 Thread: id = 4109 os_tid = 0xefc [0170.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dawson_creek")) returned 0x20 [0170.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek", dwFileAttributes=0x20) returned 0 [0170.728] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dawson_creek"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.728] GetLastError () returned 0x5 [0170.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek", dwFileAttributes=0x20) returned 0 [0170.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 Thread: id = 4110 os_tid = 0x10f8 [0170.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\denver")) returned 0x20 [0170.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver", dwFileAttributes=0x20) returned 0 [0170.731] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\denver"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.731] GetLastError () returned 0x5 [0170.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Denver", dwFileAttributes=0x20) returned 0 [0170.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26078) returned 1 Thread: id = 4111 os_tid = 0x10fc [0170.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\detroit")) returned 0x20 [0170.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit", dwFileAttributes=0x20) returned 0 [0170.734] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\detroit"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0170.734] GetLastError () returned 0x5 [0170.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Detroit", dwFileAttributes=0x20) returned 0 [0170.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26238) returned 1 Thread: id = 4112 os_tid = 0x244 [0170.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf")) returned 0x20 [0174.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF", dwFileAttributes=0x20) returned 0 [0174.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.659] GetLastError () returned 0x5 [0174.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF", dwFileAttributes=0x20) returned 0 [0174.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 4113 os_tid = 0x261c [0170.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf")) returned 0x20 [0174.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF", dwFileAttributes=0x20) returned 0 [0174.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.657] GetLastError () returned 0x5 [0174.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF", dwFileAttributes=0x20) returned 0 [0174.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062a10) returned 1 Thread: id = 4114 os_tid = 0x2620 [0170.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif")) returned 0x20 [0174.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF", dwFileAttributes=0x20) returned 0 [0174.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.654] GetLastError () returned 0x5 [0174.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF", dwFileAttributes=0x20) returned 0 [0174.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3063428) returned 1 Thread: id = 4115 os_tid = 0x1100 [0170.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf")) returned 0x20 [0173.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF", dwFileAttributes=0x20) returned 0 [0173.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.652] GetLastError () returned 0x5 [0174.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF", dwFileAttributes=0x20) returned 0 [0174.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 4116 os_tid = 0x4d0 [0170.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf")) returned 0x20 [0173.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF", dwFileAttributes=0x20) returned 0 [0173.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.651] GetLastError () returned 0x5 [0174.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF", dwFileAttributes=0x20) returned 0 [0174.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 4117 os_tid = 0x7bc [0170.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf")) returned 0x20 [0171.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF", dwFileAttributes=0x20) returned 0 [0171.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.292] GetLastError () returned 0x5 [0171.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF", dwFileAttributes=0x20) returned 0 [0171.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 4118 os_tid = 0x1104 [0170.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf")) returned 0x20 [0171.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF", dwFileAttributes=0x20) returned 0 [0171.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.294] GetLastError () returned 0x5 [0171.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF", dwFileAttributes=0x20) returned 0 [0171.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 4119 os_tid = 0x1108 [0170.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56df8 [0170.745] wcscpy (in: _Dest=0x3d56df8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" [0170.745] wcscat (in: _Dest=0x3d56df8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\" [0170.745] wcscat (in: _Dest=0x3d56df8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*" [0170.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0170.745] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0170.746] wcscmp (_String1=".", _String2=".") returned 0 [0170.746] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.746] wcscmp (_String1="..", _String2=".") returned 1 [0170.746] wcscmp (_String1="..", _String2="..") returned 0 [0170.746] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d439d0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe1d439d0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe1d439d0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0170.746] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0170.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0170.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56df8) returned 1 [0170.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a9b8) returned 1 Thread: id = 4120 os_tid = 0x110c [0170.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a9b8 [0170.748] wcscpy (in: _Dest=0x3e3a9b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara" [0170.748] wcscat (in: _Dest=0x3e3a9b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\" [0170.749] wcscat (in: _Dest=0x3e3a9b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\*" [0170.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0170.749] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ara\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0170.749] wcscmp (_String1=".", _String2=".") returned 0 [0170.749] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.749] wcscmp (_String1="..", _String2=".") returned 1 [0170.749] wcscmp (_String1="..", _String2="..") returned 0 [0170.749] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4c6b90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb4c6b90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb4c6b90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0170.749] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0170.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0170.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a9b8) returned 1 [0170.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39310) returned 1 Thread: id = 4121 os_tid = 0x1110 [0170.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e39310 [0170.751] wcscpy (in: _Dest=0x3e39310, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" [0170.751] wcscat (in: _Dest=0x3e39310, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\" [0170.751] wcscat (in: _Dest=0x3e39310, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*" [0170.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0170.752] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0170.752] wcscmp (_String1=".", _String2=".") returned 0 [0170.752] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.752] wcscmp (_String1="..", _String2=".") returned 1 [0170.752] wcscmp (_String1="..", _String2="..") returned 0 [0170.752] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c5970, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe46c5970, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe46c5970, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0170.752] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0170.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0170.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39310) returned 1 [0170.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a2b0) returned 1 Thread: id = 4122 os_tid = 0x2644 [0170.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a2b0 [0170.761] wcscpy (in: _Dest=0x3e3a2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" [0170.762] wcscat (in: _Dest=0x3e3a2b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\" [0170.762] wcscat (in: _Dest=0x3e3a2b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*" [0170.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb9a0 [0170.762] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73d30 [0171.603] wcscmp (_String1=".", _String2=".") returned 0 [0171.603] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.603] wcscmp (_String1="..", _String2=".") returned 1 [0171.603] wcscmp (_String1="..", _String2="..") returned 0 [0171.603] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x30bb9a0 | out: lpFindFileData=0x30bb9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6b128f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6b128f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6b128f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.603] FindClose (in: hFindFile=0x3e73d30 | out: hFindFile=0x3e73d30) returned 1 [0171.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9a0) returned 1 [0171.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a2b0) returned 1 [0171.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a440) returned 1 Thread: id = 4123 os_tid = 0x6e4 [0170.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e39310 [0170.763] wcscpy (in: _Dest=0x3e39310, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul" [0170.763] wcscat (in: _Dest=0x3e39310, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\" [0170.763] wcscat (in: _Dest=0x3e39310, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\*" [0170.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc0d8 [0170.763] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\bul\\*", lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.907] wcscmp (_String1=".", _String2=".") returned 0 [0171.907] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.907] wcscmp (_String1="..", _String2=".") returned 1 [0171.907] wcscmp (_String1="..", _String2="..") returned 0 [0171.907] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x30bc0d8 | out: lpFindFileData=0x30bc0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8b351f0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8b351f0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8b351f0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.907] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc0d8) returned 1 [0171.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e39310) returned 1 [0171.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a378) returned 1 Thread: id = 4124 os_tid = 0x264c [0170.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a9b8 [0170.764] wcscpy (in: _Dest=0x3e3a9b8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can" [0170.764] wcscat (in: _Dest=0x3e3a9b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\" [0170.765] wcscat (in: _Dest=0x3e3a9b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\*" [0170.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb4d0 [0170.765] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\can\\*", lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.909] wcscmp (_String1=".", _String2=".") returned 0 [0171.909] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.909] wcscmp (_String1="..", _String2=".") returned 1 [0171.909] wcscmp (_String1="..", _String2="..") returned 0 [0171.909] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x30bb4d0 | out: lpFindFileData=0x30bb4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeabb37b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeabb37b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeabb37b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.909] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0171.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a9b8) returned 1 [0171.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38e60) returned 1 Thread: id = 4125 os_tid = 0x1114 [0170.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56df8 [0170.766] wcscpy (in: _Dest=0x3d56df8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr" [0170.766] wcscat (in: _Dest=0x3d56df8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\" [0170.766] wcscat (in: _Dest=0x3d56df8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\*" [0170.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bc340 [0170.766] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cfr\\*", lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.911] wcscmp (_String1=".", _String2=".") returned 0 [0171.911] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.911] wcscmp (_String1="..", _String2=".") returned 1 [0171.911] wcscmp (_String1="..", _String2="..") returned 0 [0171.911] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x30bc340 | out: lpFindFileData=0x30bc340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6faf390, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6faf390, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6faf390, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.912] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0171.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56df8) returned 1 [0171.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a1e8) returned 1 Thread: id = 4126 os_tid = 0x2658 [0170.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56ec0 [0170.767] wcscpy (in: _Dest=0x3d56ec0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl" [0170.767] wcscat (in: _Dest=0x3d56ec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\" [0170.767] wcscat (in: _Dest=0x3d56ec0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\*" [0170.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x30bb738 [0170.767] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\ctl\\*", lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.913] wcscmp (_String1=".", _String2=".") returned 0 [0171.913] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.913] wcscmp (_String1="..", _String2=".") returned 1 [0171.914] wcscmp (_String1="..", _String2="..") returned 0 [0171.914] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x30bb738 | out: lpFindFileData=0x30bb738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe81fbcb0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe81fbcb0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe81fbcb0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.914] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb738) returned 1 [0171.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ec0) returned 1 [0171.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a828) returned 1 Thread: id = 4127 os_tid = 0xb0c [0170.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56f88 [0170.768] wcscpy (in: _Dest=0x3d56f88, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze" [0170.768] wcscat (in: _Dest=0x3d56f88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\" [0170.768] wcscat (in: _Dest=0x3d56f88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\*" [0170.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb28e8 [0170.769] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\cze\\*", lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.915] wcscmp (_String1=".", _String2=".") returned 0 [0171.916] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.916] wcscmp (_String1="..", _String2=".") returned 1 [0171.916] wcscmp (_String1="..", _String2="..") returned 0 [0171.916] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8fd1c90, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8fd1c90, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8fd1c90, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.916] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb28e8) returned 1 [0171.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56f88) returned 1 [0171.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a760) returned 1 Thread: id = 4128 os_tid = 0x1118 [0170.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57050 [0170.770] wcscpy (in: _Dest=0x3d57050, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" [0170.770] wcscat (in: _Dest=0x3d57050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\" [0170.770] wcscat (in: _Dest=0x3d57050, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*" [0170.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1a78 [0170.770] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.918] wcscmp (_String1=".", _String2=".") returned 0 [0171.918] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.918] wcscmp (_String1="..", _String2=".") returned 1 [0171.918] wcscmp (_String1="..", _String2="..") returned 0 [0171.918] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5fd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe58c5fd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe58c5fd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.918] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a78) returned 1 [0171.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57050) returned 1 [0171.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a698) returned 1 Thread: id = 4129 os_tid = 0x111c [0170.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57118 [0170.792] wcscpy (in: _Dest=0x3d57118, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" [0170.792] wcscat (in: _Dest=0x3d57118, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\" [0170.792] wcscat (in: _Dest=0x3d57118, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*" [0170.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3e90 [0170.792] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.919] wcscmp (_String1=".", _String2=".") returned 0 [0171.919] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.920] wcscmp (_String1="..", _String2=".") returned 1 [0171.920] wcscmp (_String1="..", _String2="..") returned 0 [0171.920] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe61d93b0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe61d93b0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe61d93b0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.920] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3e90) returned 1 [0171.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57118) returned 1 [0171.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a5d0) returned 1 Thread: id = 4130 os_tid = 0x1120 [0170.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d571e0 [0170.794] wcscpy (in: _Dest=0x3d571e0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" [0170.794] wcscat (in: _Dest=0x3d571e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\" [0170.794] wcscat (in: _Dest=0x3d571e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*" [0170.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0170.794] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.922] wcscmp (_String1=".", _String2=".") returned 0 [0171.922] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.922] wcscmp (_String1="..", _String2=".") returned 1 [0171.922] wcscmp (_String1="..", _String2="..") returned 0 [0171.922] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe2ef7d70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe2ef7d70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe2ef7d70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.922] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0171.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d571e0) returned 1 [0171.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a508) returned 1 Thread: id = 4131 os_tid = 0x1124 [0170.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d572a8 [0170.795] wcscpy (in: _Dest=0x3d572a8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est" [0170.795] wcscat (in: _Dest=0x3d572a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\" [0170.795] wcscat (in: _Dest=0x3d572a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\*" [0170.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3020 [0170.795] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\est\\*", lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.927] wcscmp (_String1=".", _String2=".") returned 0 [0171.927] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.927] wcscmp (_String1="..", _String2=".") returned 1 [0171.927] wcscmp (_String1="..", _String2="..") returned 0 [0171.927] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9145eee0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x9145eee0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x9145eee0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.927] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3020) returned 1 [0171.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d572a8) returned 1 [0171.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 Thread: id = 4132 os_tid = 0x1128 [0170.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57370 [0170.796] wcscpy (in: _Dest=0x3d57370, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin" [0170.796] wcscat (in: _Dest=0x3d57370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\" [0170.796] wcscat (in: _Dest=0x3d57370, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\*" [0170.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1340 [0170.796] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\fin\\*", lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.905] wcscmp (_String1=".", _String2=".") returned 0 [0171.905] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.905] wcscmp (_String1="..", _String2=".") returned 1 [0171.905] wcscmp (_String1="..", _String2="..") returned 0 [0171.905] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7d5f210, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7d5f210, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7d5f210, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.905] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1340) returned 1 [0171.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57370) returned 1 [0171.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56560) returned 1 Thread: id = 4133 os_tid = 0x112c [0170.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57438 [0170.796] wcscpy (in: _Dest=0x3d57438, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" [0170.796] wcscat (in: _Dest=0x3d57438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\" [0170.796] wcscat (in: _Dest=0x3d57438, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*" [0170.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0170.797] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.929] wcscmp (_String1=".", _String2=".") returned 0 [0171.929] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.929] wcscmp (_String1="..", _String2=".") returned 1 [0171.929] wcscmp (_String1="..", _String2="..") returned 0 [0171.929] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3915af0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3915af0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3915af0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.930] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0171.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57438) returned 1 [0171.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56628) returned 1 Thread: id = 4134 os_tid = 0x1130 [0170.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57500 [0170.797] wcscpy (in: _Dest=0x3d57500, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre" [0170.797] wcscat (in: _Dest=0x3d57500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\" [0170.797] wcscat (in: _Dest=0x3d57500, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\*" [0170.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb45c8 [0170.797] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\gre\\*", lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.932] wcscmp (_String1=".", _String2=".") returned 0 [0171.932] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.932] wcscmp (_String1="..", _String2=".") returned 1 [0171.932] wcscmp (_String1="..", _String2="..") returned 0 [0171.932] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9daab50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9daab50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9daab50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.932] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb45c8) returned 1 [0171.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57500) returned 1 [0171.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d566f0) returned 1 Thread: id = 4135 os_tid = 0x1134 [0170.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d575c8 [0170.798] wcscpy (in: _Dest=0x3d575c8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" [0170.798] wcscat (in: _Dest=0x3d575c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\" [0170.798] wcscat (in: _Dest=0x3d575c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*" [0170.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1ce0 [0170.798] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.934] wcscmp (_String1=".", _String2=".") returned 0 [0171.934] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.934] wcscmp (_String1="..", _String2=".") returned 1 [0171.934] wcscmp (_String1="..", _String2="..") returned 0 [0171.934] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3394810, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3394810, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3394810, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.935] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1ce0) returned 1 [0171.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575c8) returned 1 [0171.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d567b8) returned 1 Thread: id = 4136 os_tid = 0x1138 [0170.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57690 [0170.799] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb" [0170.799] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\" [0170.799] wcscat (in: _Dest=0x3d57690, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\*" [0170.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0c08 [0170.799] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\heb\\*", lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.944] wcscmp (_String1=".", _String2=".") returned 0 [0171.944] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.944] wcscmp (_String1="..", _String2=".") returned 1 [0171.944] wcscmp (_String1="..", _String2="..") returned 0 [0171.944] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x918fb980, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x918fb980, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x918fb980, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.944] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0c08) returned 1 [0171.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 [0171.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56880) returned 1 Thread: id = 4137 os_tid = 0x113c [0170.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57758 [0170.799] wcscpy (in: _Dest=0x3d57758, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv" [0170.799] wcscat (in: _Dest=0x3d57758, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\" [0170.799] wcscat (in: _Dest=0x3d57758, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\*" [0170.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1f48 [0170.800] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hrv\\*", lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73d30 [0171.598] wcscmp (_String1=".", _String2=".") returned 0 [0171.598] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.598] wcscmp (_String1="..", _String2=".") returned 1 [0171.598] wcscmp (_String1="..", _String2="..") returned 0 [0171.598] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x90fe85a0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x90fe85a0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x90fe85a0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.598] FindClose (in: hFindFile=0x3e73d30 | out: hFindFile=0x3e73d30) returned 1 [0171.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1f48) returned 1 [0171.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57758) returned 1 [0171.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56948) returned 1 Thread: id = 4138 os_tid = 0x1140 [0170.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57820 [0170.800] wcscpy (in: _Dest=0x3d57820, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun" [0170.800] wcscat (in: _Dest=0x3d57820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\" [0170.800] wcscat (in: _Dest=0x3d57820, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\*" [0170.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0170.800] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\hun\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.937] wcscmp (_String1=".", _String2=".") returned 0 [0171.937] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.937] wcscmp (_String1="..", _String2=".") returned 1 [0171.937] wcscmp (_String1="..", _String2="..") returned 0 [0171.937] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea73ce70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea73ce70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea73ce70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.937] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0171.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57820) returned 1 [0171.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a10) returned 1 Thread: id = 4139 os_tid = 0x1144 [0170.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d578e8 [0170.801] wcscpy (in: _Dest=0x3d578e8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" [0170.801] wcscat (in: _Dest=0x3d578e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\" [0170.801] wcscat (in: _Dest=0x3d578e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*" [0170.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3758 [0170.801] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.939] wcscmp (_String1=".", _String2=".") returned 0 [0171.939] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.939] wcscmp (_String1="..", _String2=".") returned 1 [0171.940] wcscmp (_String1="..", _String2="..") returned 0 [0171.940] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4228ed0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe4228ed0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe4228ed0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.940] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3758) returned 1 [0171.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d578e8) returned 1 [0171.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ad8) returned 1 Thread: id = 4140 os_tid = 0x1148 [0170.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d579b0 [0170.802] wcscpy (in: _Dest=0x3d579b0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav" [0170.802] wcscat (in: _Dest=0x3d579b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\" [0170.802] wcscat (in: _Dest=0x3d579b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\*" [0170.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb10d8 [0170.802] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lav\\*", lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.942] wcscmp (_String1=".", _String2=".") returned 0 [0171.942] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.942] wcscmp (_String1="..", _String2=".") returned 1 [0171.942] wcscmp (_String1="..", _String2="..") returned 0 [0171.942] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x91d98420, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x91d98420, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x91d98420, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.942] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb10d8) returned 1 [0171.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d579b0) returned 1 [0171.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ba0) returned 1 Thread: id = 4141 os_tid = 0x114c [0170.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57a78 [0170.808] wcscpy (in: _Dest=0x3d57a78, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit" [0170.808] wcscat (in: _Dest=0x3d57a78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\" [0170.808] wcscat (in: _Dest=0x3d57a78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\*" [0170.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3288 [0170.808] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\lit\\*", lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.902] wcscmp (_String1=".", _String2=".") returned 0 [0171.902] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.902] wcscmp (_String1="..", _String2=".") returned 1 [0171.903] wcscmp (_String1="..", _String2="..") returned 0 [0171.903] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x92234ec0, ftCreationTime.dwHighDateTime=0x1d35e26, ftLastAccessTime.dwLowDateTime=0x92234ec0, ftLastAccessTime.dwHighDateTime=0x1d35e26, ftLastWriteTime.dwLowDateTime=0x92234ec0, ftLastWriteTime.dwHighDateTime=0x1d35e26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.903] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3288) returned 1 [0171.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57a78) returned 1 [0171.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56c68) returned 1 Thread: id = 4142 os_tid = 0x1150 [0171.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57c08 [0171.299] wcscpy (in: _Dest=0x3d57c08, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" [0171.299] wcscat (in: _Dest=0x3d57c08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\" [0171.299] wcscat (in: _Dest=0x3d57c08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*" [0171.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0171.299] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0171.924] wcscmp (_String1=".", _String2=".") returned 0 [0171.924] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.924] wcscmp (_String1="..", _String2=".") returned 1 [0171.924] wcscmp (_String1="..", _String2="..") returned 0 [0171.924] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5d62a70, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5d62a70, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5d62a70, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0171.925] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0171.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0171.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57c08) returned 1 [0171.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56d30) returned 1 Thread: id = 4143 os_tid = 0x1154 [0171.300] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs")) returned 0x2020 [0171.300] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", dwFileAttributes=0x20) returned 1 [0171.301] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17a4 [0171.301] GetFileSizeEx (in: hFile=0x17a4, lpFileSize=0x834f9ec | out: lpFileSize=0x834f9ec*=5120) returned 1 [0171.301] SetFilePointerEx (in: hFile=0x17a4, liDistanceToMove=0x13fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.301] ReadFile (in: hFile=0x17a4, lpBuffer=0x834f9c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x834f9d8, lpOverlapped=0x0 | out: lpBuffer=0x834f9c8*, lpNumberOfBytesRead=0x834f9d8*=0x4, lpOverlapped=0x0) returned 1 [0171.463] SetFilePointerEx (in: hFile=0x17a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0171.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0171.463] NtQuerySystemTime (in: CurrentTime=0x834f960 | out: CurrentTime=0x834f960*=132462177500388000) returned 0x0 [0171.463] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x7033b86d [0171.463] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x716d499b [0171.463] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x2d884f9a [0171.463] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x306303bf [0171.463] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x24aeb9b3 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x59f223e2 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x29b6cee2 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x1bedb4a9 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x3f322a2 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x7c826e7e [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0xbb0509a [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x341e7495 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x6177ab2a [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x3c57baef [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x185a698f [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x58a08f2f [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x1a97cee6 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x1ebd51fc [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x55dbcd42 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x7641c18d [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x122e909 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x647fc644 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x768b9113 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x5e23c124 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x5262afb7 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x56b03c07 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x1c5d080a [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x49f2ebe0 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x2b353c58 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x5cc3703 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x1655e0d7 [0171.464] RtlRandomEx (in: Seed=0x834f958 | out: Seed=0x834f958) returned 0x38324629 [0171.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0171.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f5d8 [0171.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0171.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0171.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0171.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdf38 [0171.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f5d8 [0171.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0171.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0171.473] ReadFile (in: hFile=0x17a4, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0x1400, lpNumberOfBytesRead=0x834f954, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0x834f954*=0x1400, lpOverlapped=0x0) returned 1 [0171.695] SetFilePointerEx (in: hFile=0x17a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.695] WriteFile (in: hFile=0x17a4, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x834f958, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0x834f958*=0x1400, lpOverlapped=0x0) returned 1 [0174.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53760 [0174.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53be8 [0174.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53be8) returned 1 [0174.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0174.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0174.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0174.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdf38) returned 1 [0174.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2dc40 [0174.361] SetFilePointerEx (in: hFile=0x17a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.361] WriteFile (in: hFile=0x17a4, lpBuffer=0x3d55bb8*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x834f9e0, lpOverlapped=0x0 | out: lpBuffer=0x3d55bb8*, lpNumberOfBytesWritten=0x834f9e0*=0x116, lpOverlapped=0x0) returned 1 [0174.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be208 [0174.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0174.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0174.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0174.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37530 [0174.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0174.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0174.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0174.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0174.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be208) returned 1 [0174.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x7a396e0 [0174.870] sprintf (in: _Dest=0x7a396e0, _Format="%c%c" | out: _Dest="05") returned 2 [0174.870] sprintf (in: _Dest=0x7a396e2, _Format="%c%c" | out: _Dest="6c") returned 2 [0174.870] sprintf (in: _Dest=0x7a396e4, _Format="%c%c" | out: _Dest="a0") returned 2 [0174.870] sprintf (in: _Dest=0x7a396e6, _Format="%c%c" | out: _Dest="93") returned 2 [0174.870] sprintf (in: _Dest=0x7a396e8, _Format="%c%c" | out: _Dest="17") returned 2 [0174.870] sprintf (in: _Dest=0x7a396ea, _Format="%c%c" | out: _Dest="1d") returned 2 [0174.871] sprintf (in: _Dest=0x7a396ec, _Format="%c%c" | out: _Dest="ef") returned 2 [0174.871] sprintf (in: _Dest=0x7a396ee, _Format="%c%c" | out: _Dest="3e") returned 2 [0174.871] sprintf (in: _Dest=0x7a396f0, _Format="%c%c" | out: _Dest="2a") returned 2 [0174.871] sprintf (in: _Dest=0x7a396f2, _Format="%c%c" | out: _Dest="da") returned 2 [0174.871] sprintf (in: _Dest=0x7a396f4, _Format="%c%c" | out: _Dest="71") returned 2 [0174.871] sprintf (in: _Dest=0x7a396f6, _Format="%c%c" | out: _Dest="e5") returned 2 [0174.871] sprintf (in: _Dest=0x7a396f8, _Format="%c%c" | out: _Dest="64") returned 2 [0174.871] sprintf (in: _Dest=0x7a396fa, _Format="%c%c" | out: _Dest="ac") returned 2 [0174.871] sprintf (in: _Dest=0x7a396fc, _Format="%c%c" | out: _Dest="7a") returned 2 [0174.871] sprintf (in: _Dest=0x7a396fe, _Format="%c%c" | out: _Dest="e8") returned 2 [0174.871] sprintf (in: _Dest=0x7a39700, _Format="%c%c" | out: _Dest="47") returned 2 [0174.871] sprintf (in: _Dest=0x7a39702, _Format="%c%c" | out: _Dest="2a") returned 2 [0174.871] sprintf (in: _Dest=0x7a39704, _Format="%c%c" | out: _Dest="cd") returned 2 [0174.871] sprintf (in: _Dest=0x7a39706, _Format="%c%c" | out: _Dest="b3") returned 2 [0174.871] sprintf (in: _Dest=0x7a39708, _Format="%c%c" | out: _Dest="00") returned 2 [0174.871] sprintf (in: _Dest=0x7a3970a, _Format="%c%c" | out: _Dest="be") returned 2 [0174.871] sprintf (in: _Dest=0x7a3970c, _Format="%c%c" | out: _Dest="82") returned 2 [0174.871] sprintf (in: _Dest=0x7a3970e, _Format="%c%c" | out: _Dest="81") returned 2 [0174.871] sprintf (in: _Dest=0x7a39710, _Format="%c%c" | out: _Dest="40") returned 2 [0174.871] sprintf (in: _Dest=0x7a39712, _Format="%c%c" | out: _Dest="05") returned 2 [0174.871] sprintf (in: _Dest=0x7a39714, _Format="%c%c" | out: _Dest="94") returned 2 [0174.871] sprintf (in: _Dest=0x7a39716, _Format="%c%c" | out: _Dest="05") returned 2 [0174.872] sprintf (in: _Dest=0x7a39718, _Format="%c%c" | out: _Dest="7f") returned 2 [0174.872] sprintf (in: _Dest=0x7a3971a, _Format="%c%c" | out: _Dest="9c") returned 2 [0174.872] sprintf (in: _Dest=0x7a3971c, _Format="%c%c" | out: _Dest="3e") returned 2 [0174.872] sprintf (in: _Dest=0x7a3971e, _Format="%c%c" | out: _Dest="b9") returned 2 [0174.872] sprintf (in: _Dest=0x7a39720, _Format="%c%c" | out: _Dest="cd") returned 2 [0174.872] sprintf (in: _Dest=0x7a39722, _Format="%c%c" | out: _Dest="fe") returned 2 [0174.872] sprintf (in: _Dest=0x7a39724, _Format="%c%c" | out: _Dest="10") returned 2 [0174.872] sprintf (in: _Dest=0x7a39726, _Format="%c%c" | out: _Dest="2e") returned 2 [0174.872] RtlInitAnsiString (in: DestinationString=0x834f968, SourceString="056ca093171def3e2ada71e564ac7ae8472acdb300be8281400594057f9c3eb9cdfe102e" | out: DestinationString="056ca093171def3e2ada71e564ac7ae8472acdb300be8281400594057f9c3eb9cdfe102e") [0174.872] RtlAnsiStringToUnicodeString (in: DestinationString=0x834f960, SourceString="056ca093171def3e2ada71e564ac7ae8472acdb300be8281400594057f9c3eb9cdfe102e", AllocateDestinationString=1 | out: DestinationString="056ca093171def3e2ada71e564ac7ae8472acdb300be8281400594057f9c3eb9cdfe102e") returned 0x0 [0174.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63530 [0174.873] wcscat (in: _Dest=0x3e65c58, _Source="056ca093171def3e2a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\056ca093171def3e2a") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\056ca093171def3e2a" [0174.873] wcscat (in: _Dest=0x3e65c58, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\056ca093171def3e2a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\056ca093171def3e2a.68814f" [0174.873] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\056ca093171def3e2a.68814f", NtPathName=0x834f958, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\056ca093171def3e2a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d853c0 [0179.942] FlushFileBuffers (hFile=0x17a4) returned 1 [0179.950] CloseHandle (hObject=0x17a4) returned 1 [0179.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c378 [0179.957] wcscpy (in: _Dest=0x35c378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0179.957] wcscat (in: _Dest=0x35c378, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0179.957] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0179.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 [0179.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 Thread: id = 4144 os_tid = 0x1158 [0171.303] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal")) returned 0x2020 [0171.303] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", dwFileAttributes=0x20) returned 1 [0171.304] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17d4 [0171.304] GetFileSizeEx (in: hFile=0x17d4, lpFileSize=0x82bfae4 | out: lpFileSize=0x82bfae4*=0) returned 1 [0171.304] FlushFileBuffers (hFile=0x17d4) returned 1 [0172.487] CloseHandle (hObject=0x17d4) returned 1 [0172.487] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", dwFileAttributes=0x2020) returned 1 [0174.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 Thread: id = 4145 os_tid = 0x115c [0171.306] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\preferences")) returned 0x2020 [0171.306] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", dwFileAttributes=0x20) returned 1 [0171.306] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1604 [0171.307] GetFileSizeEx (in: hFile=0x1604, lpFileSize=0x868f98c | out: lpFileSize=0x868f98c*=6741) returned 1 [0171.307] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x1a51, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.307] ReadFile (in: hFile=0x1604, lpBuffer=0x868f968, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x868f978, lpOverlapped=0x0 | out: lpBuffer=0x868f968*, lpNumberOfBytesRead=0x868f978*=0x4, lpOverlapped=0x0) returned 1 [0171.309] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0171.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0171.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0171.309] NtQuerySystemTime (in: CurrentTime=0x868f900 | out: CurrentTime=0x868f900*=132462177498828000) returned 0x0 [0171.309] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x2d6e5ca4 [0171.309] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x20d9cf4f [0171.309] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x1fb6131a [0171.309] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x7e3cfeec [0171.309] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0xc6aab81 [0171.309] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x5ac9783c [0171.309] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x10539b8d [0171.309] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x4532a7eb [0171.309] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x2979de02 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x4087ff2c [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x73879a27 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x6c5ece09 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x4bf29d3b [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x881f85f [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0xc7b37c8 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x4c133f03 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x1c3287cf [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x4cad94c7 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x4dbd7c44 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x71bfa189 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x2ff3e63f [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x29a4b6c2 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x48622197 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x5a7ea794 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x28231802 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x42a1b0d5 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x2c20d18 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x63d5f481 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x68187021 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x1f0f0368 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x36aa43a1 [0171.310] RtlRandomEx (in: Seed=0x868f8f8 | out: Seed=0x868f8f8) returned 0x572dcd84 [0171.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0171.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0171.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0171.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0171.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0171.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0171.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0171.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0171.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0171.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0171.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0171.320] ReadFile (in: hFile=0x1604, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x1a55, lpNumberOfBytesRead=0x868f8f4, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x868f8f4*=0x1a55, lpOverlapped=0x0) returned 1 [0171.321] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.321] WriteFile (in: hFile=0x1604, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x1a55, lpNumberOfBytesWritten=0x868f8f8, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0x868f8f8*=0x1a55, lpOverlapped=0x0) returned 1 [0171.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0171.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0171.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0171.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0171.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0171.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0171.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0171.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a375c0 [0171.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0171.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0171.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0171.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0171.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37530 [0171.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0171.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0171.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0171.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0171.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0171.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300e668 [0171.323] SetFilePointerEx (in: hFile=0x1604, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.323] WriteFile (in: hFile=0x1604, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x868f980, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x868f980*=0x108, lpOverlapped=0x0) returned 1 [0171.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0171.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0171.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0171.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0171.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x7a344b0 [0171.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0171.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0171.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0171.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0171.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0171.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x3e78fb0 [0171.325] sprintf (in: _Dest=0x3e78fb0, _Format="%c%c" | out: _Dest="73") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fb2, _Format="%c%c" | out: _Dest="26") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fb4, _Format="%c%c" | out: _Dest="88") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fb6, _Format="%c%c" | out: _Dest="a4") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fb8, _Format="%c%c" | out: _Dest="2c") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fba, _Format="%c%c" | out: _Dest="85") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fbc, _Format="%c%c" | out: _Dest="4c") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fbe, _Format="%c%c" | out: _Dest="80") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fc0, _Format="%c%c" | out: _Dest="e3") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fc2, _Format="%c%c" | out: _Dest="7b") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fc4, _Format="%c%c" | out: _Dest="0f") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fc6, _Format="%c%c" | out: _Dest="f5") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fc8, _Format="%c%c" | out: _Dest="20") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fca, _Format="%c%c" | out: _Dest="2e") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fcc, _Format="%c%c" | out: _Dest="41") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fce, _Format="%c%c" | out: _Dest="85") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fd0, _Format="%c%c" | out: _Dest="f9") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fd2, _Format="%c%c" | out: _Dest="d6") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fd4, _Format="%c%c" | out: _Dest="94") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fd6, _Format="%c%c" | out: _Dest="e4") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fd8, _Format="%c%c" | out: _Dest="7e") returned 2 [0171.326] sprintf (in: _Dest=0x3e78fda, _Format="%c%c" | out: _Dest="53") returned 2 [0171.326] RtlInitAnsiString (in: DestinationString=0x868f908, SourceString="732688a42c854c80e37b0ff5202e4185f9d694e47e53" | out: DestinationString="732688a42c854c80e37b0ff5202e4185f9d694e47e53") [0171.326] RtlAnsiStringToUnicodeString (in: DestinationString=0x868f900, SourceString="732688a42c854c80e37b0ff5202e4185f9d694e47e53", AllocateDestinationString=1 | out: DestinationString="732688a42c854c80e37b0ff5202e4185f9d694e47e53") returned 0x0 [0171.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3edf4d8 [0171.327] RtlFreeAnsiString (AnsiString="7") [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e78fb0) returned 1 [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a344b0) returned 1 [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37530) returned 1 [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0171.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a664b0 [0171.327] wcscat (in: _Dest=0x7a664b0, _Source="732688a42c8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\732688a42c8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\732688a42c8" [0171.327] wcscat (in: _Dest=0x7a664b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\732688a42c8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\732688a42c8.68814f" [0171.327] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\732688a42c8.68814f", NtPathName=0x868f8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\732688a42c8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0171.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57cd0 [0171.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57cd0) returned 1 [0171.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e91660) returned 1 [0171.329] NtQueryInformationFile (in: FileHandle=0x1604, IoStatusBlock=0x868f8d0, FileInformation=0x868f8d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x868f8d0, FileInformation=0x868f8d8) returned 0x0 [0171.329] NtSetInformationFile (FileHandle=0x1604, IoStatusBlock=0x868f8d0, FileInformation=0x868f8d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0171.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a664b0) returned 1 [0171.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf4d8) returned 1 [0171.330] FlushFileBuffers (hFile=0x1604) returned 1 [0172.487] CloseHandle (hObject=0x1604) returned 1 [0172.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c378 [0172.516] wcscpy (in: _Dest=0x35c378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0172.516] wcscat (in: _Dest=0x35c378, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0172.516] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0xffffffff [0172.529] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xce4 [0172.534] WriteFile (in: hFile=0xce4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x868f914, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x868f914*=0x8b9, lpOverlapped=0x0) returned 1 [0172.536] CloseHandle (hObject=0xce4) returned 1 [0172.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 [0172.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a633f0) returned 1 Thread: id = 4146 os_tid = 0x1160 [0171.333] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db")) returned 0x2020 [0171.334] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", dwFileAttributes=0x20) returned 1 [0171.334] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17d8 [0171.334] GetFileSizeEx (in: hFile=0x17d8, lpFileSize=0x43efe94 | out: lpFileSize=0x43efe94*=16384) returned 1 [0171.334] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x3ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.334] ReadFile (in: hFile=0x17d8, lpBuffer=0x43efe70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x43efe80, lpOverlapped=0x0 | out: lpBuffer=0x43efe70*, lpNumberOfBytesRead=0x43efe80*=0x4, lpOverlapped=0x0) returned 1 [0171.480] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0171.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0171.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0171.480] NtQuerySystemTime (in: CurrentTime=0x43efe08 | out: CurrentTime=0x43efe08*=132462177500544000) returned 0x0 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x4fc51d47 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x512bcc8 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x46e4452c [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x5675a3d6 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x2059cda0 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x21537394 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x6bba7aab [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x2b38fb9b [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x26cc5202 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x7af4cea3 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x2b38fb9b [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x2d9e4ba0 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x1ebd51fc [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x44b5ee69 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x350fa4da [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x15c7d333 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x7641c18d [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x2b2d1b13 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x58034578 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x21282926 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x34c0a070 [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x66fe3c [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x4eabf41a [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x53893bac [0171.480] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x78c21f8b [0171.481] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x55dbcd42 [0171.481] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x51651896 [0171.481] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x63888015 [0171.481] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x7fb7d90d [0171.481] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x2084c357 [0171.481] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x50a190c0 [0171.481] RtlRandomEx (in: Seed=0x43efe00 | out: Seed=0x43efe00) returned 0x2e2328e5 [0171.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0171.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0171.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0171.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0171.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0171.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0171.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c98360 [0171.490] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.490] ReadFile (in: hFile=0x17d8, lpBuffer=0x7c98360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x43efe08, lpOverlapped=0x0 | out: lpBuffer=0x7c98360*, lpNumberOfBytesRead=0x43efe08*=0x3c00, lpOverlapped=0x0) returned 1 [0171.694] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56138 [0171.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f7b8 [0171.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0171.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b370) returned 1 [0171.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0171.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0171.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0171.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0171.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 [0171.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56138) returned 1 [0171.695] WriteFile (in: hFile=0x17d8, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x43efe08, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0x43efe08*=0x3c00, lpOverlapped=0x0) returned 1 [0173.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0173.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c98360) returned 1 [0173.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2df80 [0173.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0173.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x7a2d0c0 [0173.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0173.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0173.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0173.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0173.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdbd8) returned 1 [0173.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3d55968 [0173.177] SetFilePointerEx (in: hFile=0x17d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.177] WriteFile (in: hFile=0x17d8, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x43efe88, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0x43efe88*=0x118, lpOverlapped=0x0) returned 1 [0174.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdf38 [0174.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f5d8 [0174.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0174.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0174.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a374d0 [0174.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0174.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53da0 [0174.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53da0) returned 1 [0174.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0174.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdf38) returned 1 [0174.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4d) returned 0x3d488f8 [0174.364] sprintf (in: _Dest=0x3d488f8, _Format="%c%c" | out: _Dest="b1") returned 2 [0174.364] sprintf (in: _Dest=0x3d488fa, _Format="%c%c" | out: _Dest="13") returned 2 [0174.365] sprintf (in: _Dest=0x3d488fc, _Format="%c%c" | out: _Dest="51") returned 2 [0174.365] sprintf (in: _Dest=0x3d488fe, _Format="%c%c" | out: _Dest="02") returned 2 [0174.365] sprintf (in: _Dest=0x3d48900, _Format="%c%c" | out: _Dest="0d") returned 2 [0174.365] sprintf (in: _Dest=0x3d48902, _Format="%c%c" | out: _Dest="b0") returned 2 [0174.365] sprintf (in: _Dest=0x3d48904, _Format="%c%c" | out: _Dest="7a") returned 2 [0174.365] sprintf (in: _Dest=0x3d48906, _Format="%c%c" | out: _Dest="ab") returned 2 [0174.365] sprintf (in: _Dest=0x3d48908, _Format="%c%c" | out: _Dest="50") returned 2 [0174.365] sprintf (in: _Dest=0x3d4890a, _Format="%c%c" | out: _Dest="63") returned 2 [0174.365] sprintf (in: _Dest=0x3d4890c, _Format="%c%c" | out: _Dest="e8") returned 2 [0174.365] sprintf (in: _Dest=0x3d4890e, _Format="%c%c" | out: _Dest="16") returned 2 [0174.365] sprintf (in: _Dest=0x3d48910, _Format="%c%c" | out: _Dest="f0") returned 2 [0174.365] sprintf (in: _Dest=0x3d48912, _Format="%c%c" | out: _Dest="4d") returned 2 [0174.365] sprintf (in: _Dest=0x3d48914, _Format="%c%c" | out: _Dest="3c") returned 2 [0174.365] sprintf (in: _Dest=0x3d48916, _Format="%c%c" | out: _Dest="05") returned 2 [0174.365] sprintf (in: _Dest=0x3d48918, _Format="%c%c" | out: _Dest="68") returned 2 [0174.365] sprintf (in: _Dest=0x3d4891a, _Format="%c%c" | out: _Dest="3d") returned 2 [0174.365] sprintf (in: _Dest=0x3d4891c, _Format="%c%c" | out: _Dest="20") returned 2 [0174.365] sprintf (in: _Dest=0x3d4891e, _Format="%c%c" | out: _Dest="60") returned 2 [0174.365] sprintf (in: _Dest=0x3d48920, _Format="%c%c" | out: _Dest="6a") returned 2 [0174.365] sprintf (in: _Dest=0x3d48922, _Format="%c%c" | out: _Dest="f6") returned 2 [0174.365] sprintf (in: _Dest=0x3d48924, _Format="%c%c" | out: _Dest="91") returned 2 [0174.365] sprintf (in: _Dest=0x3d48926, _Format="%c%c" | out: _Dest="3f") returned 2 [0174.365] sprintf (in: _Dest=0x3d48928, _Format="%c%c" | out: _Dest="07") returned 2 [0174.366] sprintf (in: _Dest=0x3d4892a, _Format="%c%c" | out: _Dest="20") returned 2 [0174.366] sprintf (in: _Dest=0x3d4892c, _Format="%c%c" | out: _Dest="4c") returned 2 [0174.366] sprintf (in: _Dest=0x3d4892e, _Format="%c%c" | out: _Dest="f1") returned 2 [0174.366] sprintf (in: _Dest=0x3d48930, _Format="%c%c" | out: _Dest="5e") returned 2 [0174.366] sprintf (in: _Dest=0x3d48932, _Format="%c%c" | out: _Dest="ce") returned 2 [0174.366] sprintf (in: _Dest=0x3d48934, _Format="%c%c" | out: _Dest="ed") returned 2 [0174.366] sprintf (in: _Dest=0x3d48936, _Format="%c%c" | out: _Dest="00") returned 2 [0174.366] sprintf (in: _Dest=0x3d48938, _Format="%c%c" | out: _Dest="dc") returned 2 [0174.366] sprintf (in: _Dest=0x3d4893a, _Format="%c%c" | out: _Dest="8d") returned 2 [0174.366] sprintf (in: _Dest=0x3d4893c, _Format="%c%c" | out: _Dest="76") returned 2 [0174.366] sprintf (in: _Dest=0x3d4893e, _Format="%c%c" | out: _Dest="e1") returned 2 [0174.366] sprintf (in: _Dest=0x3d48940, _Format="%c%c" | out: _Dest="d4") returned 2 [0174.366] sprintf (in: _Dest=0x3d48942, _Format="%c%c" | out: _Dest="35") returned 2 [0174.366] RtlInitAnsiString (in: DestinationString=0x43efe10, SourceString="b11351020db07aab5063e816f04d3c05683d20606af6913f07204cf15eceed00dc8d76e1d435" | out: DestinationString="b11351020db07aab5063e816f04d3c05683d20606af6913f07204cf15eceed00dc8d76e1d435") [0174.366] RtlAnsiStringToUnicodeString (in: DestinationString=0x43efe08, SourceString="b11351020db07aab5063e816f04d3c05683d20606af6913f07204cf15eceed00dc8d76e1d435", AllocateDestinationString=1 | out: DestinationString="b11351020db07aab5063e816f04d3c05683d20606af6913f07204cf15eceed00dc8d76e1d435") returned 0x0 [0174.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053a68 [0174.367] wcscat (in: _Dest=0x333a68, _Source="b11351020db07aab506" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b11351020db07aab506") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b11351020db07aab506" [0174.367] wcscat (in: _Dest=0x333a68, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b11351020db07aab506.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b11351020db07aab506.68814f" [0174.367] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b11351020db07aab506.68814f", NtPathName=0x43efe00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\b11351020db07aab506.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e682e8 [0182.216] FlushFileBuffers (hFile=0x17d8) returned 1 [0183.585] CloseHandle (hObject=0x17d8) returned 1 [0184.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66f00 [0184.545] wcscpy (in: _Dest=0x7a66f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0184.545] wcscat (in: _Dest=0x7a66f00, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0184.545] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0184.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66f00) returned 1 [0184.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a661f0) returned 1 Thread: id = 4147 os_tid = 0x1164 [0171.336] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal")) returned 0x2020 [0171.336] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", dwFileAttributes=0x20) returned 1 [0171.337] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17dc [0171.337] GetFileSizeEx (in: hFile=0x17dc, lpFileSize=0x8a0f7f4 | out: lpFileSize=0x8a0f7f4*=0) returned 1 [0171.337] FlushFileBuffers (hFile=0x17dc) returned 1 [0172.488] CloseHandle (hObject=0x17dc) returned 1 [0172.488] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", dwFileAttributes=0x2020) returned 1 [0174.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66498) returned 1 Thread: id = 4148 os_tid = 0x26c4 [0171.350] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\readme")) returned 0x2020 [0174.142] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README", dwFileAttributes=0x20) returned 1 [0182.717] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\readme"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1414 [0182.726] GetFileSizeEx (in: hFile=0x1414, lpFileSize=0x8a4fc34 | out: lpFileSize=0x8a4fc34*=180) returned 1 [0182.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0182.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9e0 [0182.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0182.726] NtQuerySystemTime (in: CurrentTime=0x8a4fba8 | out: CurrentTime=0x8a4fba8*=132462177613020000) returned 0x0 [0182.726] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x28c760ab [0182.726] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x4f9e024b [0182.726] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x2df50481 [0182.726] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x6aa6c3c3 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x99593cf [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x9abe9d [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x21c523f1 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x25242491 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x61eb6bd3 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x4fed9bf [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x4ea6b24 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x4eba2ce1 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x141310c3 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x3334fc70 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0xdbee7bb [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x2614b055 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x59d8485d [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x76d35349 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x3e4378eb [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x69753847 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x4be377b6 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0xc1e87d3 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x202378cd [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x5dff384c [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x528b99c4 [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x724997cd [0182.727] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x1dd452de [0182.728] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x66e3d672 [0182.728] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x39a693ff [0182.728] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x7871c19f [0182.728] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x1f417f35 [0182.728] RtlRandomEx (in: Seed=0x8a4fba0 | out: Seed=0x8a4fba0) returned 0x51ac1d56 [0182.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0182.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0182.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0182.740] ReadFile (in: hFile=0x1414, lpBuffer=0x7c08fc8, nNumberOfBytesToRead=0xb4, lpNumberOfBytesRead=0x8a4fb9c, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesRead=0x8a4fb9c*=0xb4, lpOverlapped=0x0) returned 1 [0182.742] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.742] WriteFile (in: hFile=0x1414, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x8a4fba0, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0x8a4fba0*=0xb4, lpOverlapped=0x0) returned 1 [0183.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0183.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0183.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0183.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0183.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0183.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0183.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ae8) returned 1 [0183.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5a600 [0183.469] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.469] WriteFile (in: hFile=0x1414, lpBuffer=0x7b7a320*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x8a4fc28, lpOverlapped=0x0 | out: lpBuffer=0x7b7a320*, lpNumberOfBytesWritten=0x8a4fc28*=0xfe, lpOverlapped=0x0) returned 1 [0183.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08778 [0183.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f830 [0183.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0183.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0183.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e43860 [0183.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0183.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0183.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0183.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0183.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08778) returned 1 [0183.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x19) returned 0x3d5ac90 [0183.472] sprintf (in: _Dest=0x3d5ac90, _Format="%c%c" | out: _Dest="9d") returned 2 [0183.472] sprintf (in: _Dest=0x3d5ac92, _Format="%c%c" | out: _Dest="8c") returned 2 [0183.472] sprintf (in: _Dest=0x3d5ac94, _Format="%c%c" | out: _Dest="68") returned 2 [0183.472] sprintf (in: _Dest=0x3d5ac96, _Format="%c%c" | out: _Dest="d7") returned 2 [0183.472] sprintf (in: _Dest=0x3d5ac98, _Format="%c%c" | out: _Dest="2c") returned 2 [0183.472] sprintf (in: _Dest=0x3d5ac9a, _Format="%c%c" | out: _Dest="d1") returned 2 [0183.472] sprintf (in: _Dest=0x3d5ac9c, _Format="%c%c" | out: _Dest="df") returned 2 [0183.473] sprintf (in: _Dest=0x3d5ac9e, _Format="%c%c" | out: _Dest="a5") returned 2 [0183.473] sprintf (in: _Dest=0x3d5aca0, _Format="%c%c" | out: _Dest="97") returned 2 [0183.473] sprintf (in: _Dest=0x3d5aca2, _Format="%c%c" | out: _Dest="bd") returned 2 [0183.473] sprintf (in: _Dest=0x3d5aca4, _Format="%c%c" | out: _Dest="9b") returned 2 [0183.473] sprintf (in: _Dest=0x3d5aca6, _Format="%c%c" | out: _Dest="25") returned 2 [0183.473] RtlInitAnsiString (in: DestinationString=0x8a4fbb0, SourceString="9d8c68d72cd1dfa597bd9b25" | out: DestinationString="9d8c68d72cd1dfa597bd9b25") [0183.473] RtlAnsiStringToUnicodeString (in: DestinationString=0x8a4fba8, SourceString="9d8c68d72cd1dfa597bd9b25", AllocateDestinationString=1 | out: DestinationString="9d8c68d72cd1dfa597bd9b25") returned 0x0 [0183.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3dcf610 [0183.473] wcscat (in: _Dest=0x3053a68, _Source="9d8c68" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\9d8c68") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\9d8c68" [0183.473] wcscat (in: _Dest=0x3053a68, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\9d8c68.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\9d8c68.68814f" [0183.473] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\9d8c68.68814f", NtPathName=0x8a4fba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\9d8c68.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf5d0 [0183.478] FlushFileBuffers (hFile=0x1414) returned 1 [0183.609] CloseHandle (hObject=0x1414) returned 1 [0185.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a67530 [0185.996] wcscpy (in: _Dest=0x7a67530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0185.996] wcscat (in: _Dest=0x7a67530, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0185.996] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0185.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67530) returned 1 [0185.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb73b0) returned 1 Thread: id = 4149 os_tid = 0x26c8 [0171.351] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences")) returned 0x2020 [0180.517] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", dwFileAttributes=0x20) returned 1 [0182.847] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb4c [0182.847] GetFileSizeEx (in: hFile=0xb4c, lpFileSize=0x8fefdb4 | out: lpFileSize=0x8fefdb4*=30617) returned 1 [0182.848] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0x7795, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.848] ReadFile (in: hFile=0xb4c, lpBuffer=0x8fefd90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8fefda0, lpOverlapped=0x0 | out: lpBuffer=0x8fefd90*, lpNumberOfBytesRead=0x8fefda0*=0x4, lpOverlapped=0x0) returned 1 [0182.851] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0182.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f90 [0182.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0182.851] NtQuerySystemTime (in: CurrentTime=0x8fefd28 | out: CurrentTime=0x8fefd28*=132462177614268000) returned 0x0 [0182.851] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x7cd59c39 [0182.851] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x376fda40 [0182.851] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x585108aa [0182.851] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x71e49aff [0182.851] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x53d01ac9 [0182.851] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x653895b8 [0182.851] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x2b337162 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x52087558 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x6c03f33 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x1ed8b640 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x29903d88 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x2c7365c1 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x17355be [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x4860f5b8 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x2ff72d81 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x63dae07d [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x2a4ffdd6 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x5140c5bc [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0xe1b26e3 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x64bbc5b1 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x620578c5 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0xda7d79a [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x7e59bd5b [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x2a0194ed [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x659d4cca [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x346e0c65 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x4d637890 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x2db5869e [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x6400a278 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x697f34ce [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x51b554b1 [0182.852] RtlRandomEx (in: Seed=0x8fefd20 | out: Seed=0x8fefd20) returned 0x600526d4 [0182.864] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.864] ReadFile (in: hFile=0xb4c, lpBuffer=0x7ac04c8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8fefd28, lpOverlapped=0x0 | out: lpBuffer=0x7ac04c8*, lpNumberOfBytesRead=0x8fefd28*=0x3c00, lpOverlapped=0x0) returned 1 [0182.865] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07cc8 [0182.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0182.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0182.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0182.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ac40d0 [0182.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0182.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0182.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0182.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0182.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07cc8) returned 1 [0182.866] WriteFile (in: hFile=0xb4c, lpBuffer=0x7ac40d0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8fefd28, lpOverlapped=0x0 | out: lpBuffer=0x7ac40d0*, lpNumberOfBytesWritten=0x8fefd28*=0x3c00, lpOverlapped=0x0) returned 1 [0183.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac40d0) returned 1 [0183.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac04c8) returned 1 [0183.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2d040 [0183.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0183.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2df80 [0183.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0183.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0183.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0183.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3efc0) returned 1 [0183.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0183.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d54cb0 [0183.953] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.953] WriteFile (in: hFile=0xb4c, lpBuffer=0x3d54cb0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x8fefda8, lpOverlapped=0x0 | out: lpBuffer=0x3d54cb0*, lpNumberOfBytesWritten=0x8fefda8*=0x116, lpOverlapped=0x0) returned 1 [0184.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0184.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae20) returned 1 [0184.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a376e0 [0184.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0184.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0184.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b730) returned 1 [0184.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x7a39688 [0184.589] sprintf (in: _Dest=0x7a39688, _Format="%c%c" | out: _Dest="a1") returned 2 [0184.590] sprintf (in: _Dest=0x7a3968a, _Format="%c%c" | out: _Dest="fe") returned 2 [0184.590] sprintf (in: _Dest=0x7a3968c, _Format="%c%c" | out: _Dest="16") returned 2 [0184.590] sprintf (in: _Dest=0x7a3968e, _Format="%c%c" | out: _Dest="07") returned 2 [0184.590] sprintf (in: _Dest=0x7a39690, _Format="%c%c" | out: _Dest="01") returned 2 [0184.590] sprintf (in: _Dest=0x7a39692, _Format="%c%c" | out: _Dest="e6") returned 2 [0184.590] sprintf (in: _Dest=0x7a39694, _Format="%c%c" | out: _Dest="27") returned 2 [0184.590] sprintf (in: _Dest=0x7a39696, _Format="%c%c" | out: _Dest="40") returned 2 [0184.590] sprintf (in: _Dest=0x7a39698, _Format="%c%c" | out: _Dest="24") returned 2 [0184.590] sprintf (in: _Dest=0x7a3969a, _Format="%c%c" | out: _Dest="1c") returned 2 [0184.590] sprintf (in: _Dest=0x7a3969c, _Format="%c%c" | out: _Dest="95") returned 2 [0184.590] sprintf (in: _Dest=0x7a3969e, _Format="%c%c" | out: _Dest="8f") returned 2 [0184.590] sprintf (in: _Dest=0x7a396a0, _Format="%c%c" | out: _Dest="6a") returned 2 [0184.590] sprintf (in: _Dest=0x7a396a2, _Format="%c%c" | out: _Dest="f9") returned 2 [0184.590] sprintf (in: _Dest=0x7a396a4, _Format="%c%c" | out: _Dest="7e") returned 2 [0184.590] sprintf (in: _Dest=0x7a396a6, _Format="%c%c" | out: _Dest="de") returned 2 [0184.590] sprintf (in: _Dest=0x7a396a8, _Format="%c%c" | out: _Dest="b6") returned 2 [0184.590] sprintf (in: _Dest=0x7a396aa, _Format="%c%c" | out: _Dest="d6") returned 2 [0184.590] sprintf (in: _Dest=0x7a396ac, _Format="%c%c" | out: _Dest="a3") returned 2 [0184.590] sprintf (in: _Dest=0x7a396ae, _Format="%c%c" | out: _Dest="0c") returned 2 [0184.590] sprintf (in: _Dest=0x7a396b0, _Format="%c%c" | out: _Dest="84") returned 2 [0184.590] sprintf (in: _Dest=0x7a396b2, _Format="%c%c" | out: _Dest="44") returned 2 [0184.590] sprintf (in: _Dest=0x7a396b4, _Format="%c%c" | out: _Dest="3b") returned 2 [0184.591] sprintf (in: _Dest=0x7a396b6, _Format="%c%c" | out: _Dest="45") returned 2 [0184.591] sprintf (in: _Dest=0x7a396b8, _Format="%c%c" | out: _Dest="51") returned 2 [0184.591] sprintf (in: _Dest=0x7a396ba, _Format="%c%c" | out: _Dest="f2") returned 2 [0184.591] sprintf (in: _Dest=0x7a396bc, _Format="%c%c" | out: _Dest="cc") returned 2 [0184.591] sprintf (in: _Dest=0x7a396be, _Format="%c%c" | out: _Dest="0f") returned 2 [0184.591] sprintf (in: _Dest=0x7a396c0, _Format="%c%c" | out: _Dest="00") returned 2 [0184.591] sprintf (in: _Dest=0x7a396c2, _Format="%c%c" | out: _Dest="80") returned 2 [0184.591] sprintf (in: _Dest=0x7a396c4, _Format="%c%c" | out: _Dest="ca") returned 2 [0184.591] sprintf (in: _Dest=0x7a396c6, _Format="%c%c" | out: _Dest="ba") returned 2 [0184.591] sprintf (in: _Dest=0x7a396c8, _Format="%c%c" | out: _Dest="80") returned 2 [0184.591] sprintf (in: _Dest=0x7a396ca, _Format="%c%c" | out: _Dest="c2") returned 2 [0184.591] sprintf (in: _Dest=0x7a396cc, _Format="%c%c" | out: _Dest="76") returned 2 [0184.591] sprintf (in: _Dest=0x7a396ce, _Format="%c%c" | out: _Dest="68") returned 2 [0184.591] RtlInitAnsiString (in: DestinationString=0x8fefd30, SourceString="a1fe160701e62740241c958f6af97edeb6d6a30c84443b4551f2cc0f0080caba80c27668" | out: DestinationString="a1fe160701e62740241c958f6af97edeb6d6a30c84443b4551f2cc0f0080caba80c27668") [0184.591] RtlAnsiStringToUnicodeString (in: DestinationString=0x8fefd28, SourceString="a1fe160701e62740241c958f6af97edeb6d6a30c84443b4551f2cc0f0080caba80c27668", AllocateDestinationString=1 | out: DestinationString="a1fe160701e62740241c958f6af97edeb6d6a30c84443b4551f2cc0f0080caba80c27668") returned 0x0 [0184.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63530 [0184.592] wcscat (in: _Dest=0x3e66a98, _Source="a1fe160701e6274024" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\a1fe160701e6274024") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\a1fe160701e6274024" [0184.592] wcscat (in: _Dest=0x3e66a98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\a1fe160701e6274024.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\a1fe160701e6274024.68814f" [0184.592] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\a1fe160701e6274024.68814f", NtPathName=0x8fefd20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\a1fe160701e6274024.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d858a0 [0184.650] FlushFileBuffers (hFile=0xb4c) returned 1 [0184.955] CloseHandle (hObject=0xb4c) returned 1 [0186.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a668d0 [0186.017] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0186.017] wcscat (in: _Dest=0x7a668d0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0186.017] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0186.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 [0186.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66140) returned 1 Thread: id = 4150 os_tid = 0x26d0 [0171.352] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts")) returned 0x2020 [0180.516] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", dwFileAttributes=0x20) returned 1 [0182.827] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb5c [0182.827] GetFileSizeEx (in: hFile=0xb5c, lpFileSize=0x8e1f76c | out: lpFileSize=0x8e1f76c*=12288) returned 1 [0182.827] SetFilePointerEx (in: hFile=0xb5c, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.827] ReadFile (in: hFile=0xb5c, lpBuffer=0x8e1f748, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8e1f758, lpOverlapped=0x0 | out: lpBuffer=0x8e1f748*, lpNumberOfBytesRead=0x8e1f758*=0x4, lpOverlapped=0x0) returned 1 [0182.830] SetFilePointerEx (in: hFile=0xb5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0182.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0182.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f90 [0182.830] NtQuerySystemTime (in: CurrentTime=0x8e1f6e0 | out: CurrentTime=0x8e1f6e0*=132462177614112000) returned 0x0 [0182.830] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x206e373d [0182.830] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x6d696d4b [0182.830] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x7da638fe [0182.830] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x1be4bde [0182.830] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x4444a6ca [0182.830] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x513ce26a [0182.830] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x6897b834 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x18222a3a [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x5b199b5a [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x150e4939 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x3a041fec [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x18b2d83f [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x3fa344ce [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x41e5efac [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x6858094d [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x7b0fc7d5 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x5b47b454 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x2a19b7b4 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x13dbac2e [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x2d9f5301 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x6a6bc351 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x746706b5 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x716417c1 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x2422c35a [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x417cdb39 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x57e7b42b [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x2d49a181 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x4734d124 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x1a8de485 [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x74043aaa [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x3063378d [0182.831] RtlRandomEx (in: Seed=0x8e1f6d8 | out: Seed=0x8e1f6d8) returned 0x52b4882b [0182.842] ReadFile (in: hFile=0xb5c, lpBuffer=0x7ab8cb8, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x8e1f6d4, lpOverlapped=0x0 | out: lpBuffer=0x7ab8cb8*, lpNumberOfBytesRead=0x8e1f6d4*=0x3000, lpOverlapped=0x0) returned 1 [0182.845] SetFilePointerEx (in: hFile=0xb5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.845] WriteFile (in: hFile=0xb5c, lpBuffer=0x7abc8c0*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x8e1f6d8, lpOverlapped=0x0 | out: lpBuffer=0x7abc8c0*, lpNumberOfBytesWritten=0x8e1f6d8*=0x3000, lpOverlapped=0x0) returned 1 [0183.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0183.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0183.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0183.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7abc8c0) returned 1 [0183.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab8cb8) returned 1 [0183.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0183.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08538) returned 1 [0183.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0183.938] SetFilePointerEx (in: hFile=0xb5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.938] WriteFile (in: hFile=0xb5c, lpBuffer=0x7a39308*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x8e1f760, lpOverlapped=0x0 | out: lpBuffer=0x7a39308*, lpNumberOfBytesWritten=0x8e1f760*=0x104, lpOverlapped=0x0) returned 1 [0188.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55a78 [0188.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0188.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0188.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0188.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a35790 [0188.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0188.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0188.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0188.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0188.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55a78) returned 1 [0188.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x25) returned 0x7a37830 [0188.607] sprintf (in: _Dest=0x7a37830, _Format="%c%c" | out: _Dest="64") returned 2 [0188.607] sprintf (in: _Dest=0x7a37832, _Format="%c%c" | out: _Dest="b2") returned 2 [0188.607] sprintf (in: _Dest=0x7a37834, _Format="%c%c" | out: _Dest="29") returned 2 [0188.608] sprintf (in: _Dest=0x7a37836, _Format="%c%c" | out: _Dest="87") returned 2 [0188.608] sprintf (in: _Dest=0x7a37838, _Format="%c%c" | out: _Dest="72") returned 2 [0188.608] sprintf (in: _Dest=0x7a3783a, _Format="%c%c" | out: _Dest="66") returned 2 [0188.608] sprintf (in: _Dest=0x7a3783c, _Format="%c%c" | out: _Dest="73") returned 2 [0188.608] sprintf (in: _Dest=0x7a3783e, _Format="%c%c" | out: _Dest="db") returned 2 [0188.608] sprintf (in: _Dest=0x7a37840, _Format="%c%c" | out: _Dest="60") returned 2 [0188.608] sprintf (in: _Dest=0x7a37842, _Format="%c%c" | out: _Dest="6c") returned 2 [0188.608] sprintf (in: _Dest=0x7a37844, _Format="%c%c" | out: _Dest="06") returned 2 [0188.608] sprintf (in: _Dest=0x7a37846, _Format="%c%c" | out: _Dest="b0") returned 2 [0188.608] sprintf (in: _Dest=0x7a37848, _Format="%c%c" | out: _Dest="31") returned 2 [0188.608] sprintf (in: _Dest=0x7a3784a, _Format="%c%c" | out: _Dest="34") returned 2 [0188.608] sprintf (in: _Dest=0x7a3784c, _Format="%c%c" | out: _Dest="61") returned 2 [0188.608] sprintf (in: _Dest=0x7a3784e, _Format="%c%c" | out: _Dest="49") returned 2 [0188.608] sprintf (in: _Dest=0x7a37850, _Format="%c%c" | out: _Dest="a7") returned 2 [0188.608] sprintf (in: _Dest=0x7a37852, _Format="%c%c" | out: _Dest="61") returned 2 [0188.608] RtlInitAnsiString (in: DestinationString=0x8e1f6e8, SourceString="64b22987726673db606c06b031346149a761" | out: DestinationString="64b22987726673db606c06b031346149a761") [0188.608] RtlAnsiStringToUnicodeString (in: DestinationString=0x8e1f6e0, SourceString="64b22987726673db606c06b031346149a761", AllocateDestinationString=1 | out: DestinationString="64b22987726673db606c06b031346149a761") returned 0x0 [0188.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a39790 [0188.609] wcscat (in: _Dest=0x7a5e480, _Source="64b229877" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\64b229877") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\64b229877" [0188.609] wcscat (in: _Dest=0x7a5e480, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\64b229877.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\64b229877.68814f" [0188.609] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\64b229877.68814f", NtPathName=0x8e1f6d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\64b229877.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332f28 [0189.973] FlushFileBuffers (hFile=0xb5c) returned 1 [0190.607] CloseHandle (hObject=0xb5c) returned 1 [0192.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66e50 [0192.485] wcscpy (in: _Dest=0x7a66e50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0192.485] wcscat (in: _Dest=0x7a66e50, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0192.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0192.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66e50) returned 1 [0192.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62770) returned 1 Thread: id = 4151 os_tid = 0x26d4 [0171.352] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal")) returned 0x2020 [0180.516] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", dwFileAttributes=0x20) returned 1 [0182.822] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb88 [0182.826] GetFileSizeEx (in: hFile=0xb88, lpFileSize=0x632faf4 | out: lpFileSize=0x632faf4*=0) returned 1 [0182.826] FlushFileBuffers (hFile=0xb88) returned 1 [0183.592] CloseHandle (hObject=0xb88) returned 1 [0183.592] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", dwFileAttributes=0x2020) returned 1 [0186.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66770) returned 1 Thread: id = 4152 os_tid = 0x1168 [0171.353] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites")) returned 0x2020 [0180.516] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", dwFileAttributes=0x20) returned 1 [0182.805] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10f4 [0182.805] GetFileSizeEx (in: hFile=0x10f4, lpFileSize=0x841f7b4 | out: lpFileSize=0x841f7b4*=20480) returned 1 [0182.805] SetFilePointerEx (in: hFile=0x10f4, liDistanceToMove=0x4ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.806] ReadFile (in: hFile=0x10f4, lpBuffer=0x841f790, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x841f7a0, lpOverlapped=0x0 | out: lpBuffer=0x841f790*, lpNumberOfBytesRead=0x841f7a0*=0x4, lpOverlapped=0x0) returned 1 [0182.808] SetFilePointerEx (in: hFile=0x10f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0182.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0182.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0182.809] NtQuerySystemTime (in: CurrentTime=0x841f728 | out: CurrentTime=0x841f728*=132462177613956000) returned 0x0 [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x44cf47c6 [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x4803448a [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x1a22a73c [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x76e8d7e6 [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x27f20450 [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x3c5c9e79 [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x2033be4b [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x3a6eb0c [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x7f36b7c4 [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x1ab70193 [0182.809] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0xf81bd6a [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x1ed7932 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x6fc52e05 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x2ad7b032 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x6ff91268 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0xd3d473f [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x25550c0d [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x3e448672 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x661eb3ed [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x78aea0dc [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x40b8e53f [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x4ee3520f [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x518a687f [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x2784773b [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x1a0df3e4 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x44080215 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x2fa17c01 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x6acc1943 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x25542fd8 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x5af09981 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x10cda4d9 [0182.810] RtlRandomEx (in: Seed=0x841f720 | out: Seed=0x841f720) returned 0x1f2e8bb7 [0182.821] SetFilePointerEx (in: hFile=0x10f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.821] ReadFile (in: hFile=0x10f4, lpBuffer=0x7c32798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x841f728, lpOverlapped=0x0 | out: lpBuffer=0x7c32798*, lpNumberOfBytesRead=0x841f728*=0x3c00, lpOverlapped=0x0) returned 1 [0182.822] SetFilePointerEx (in: hFile=0x10f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08538 [0182.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0182.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0182.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0182.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab50b0 [0182.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0182.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0182.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0182.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0182.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08538) returned 1 [0182.824] WriteFile (in: hFile=0x10f4, lpBuffer=0x7ab50b0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x841f728, lpOverlapped=0x0 | out: lpBuffer=0x7ab50b0*, lpNumberOfBytesWritten=0x841f728*=0x3c00, lpOverlapped=0x0) returned 1 [0183.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab50b0) returned 1 [0183.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c32798) returned 1 [0183.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0183.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0183.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0183.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0183.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0183.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0183.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0183.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0183.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a391f0 [0183.937] SetFilePointerEx (in: hFile=0x10f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.937] WriteFile (in: hFile=0x10f4, lpBuffer=0x7a391f0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x841f7a8, lpOverlapped=0x0 | out: lpBuffer=0x7a391f0*, lpNumberOfBytesWritten=0x841f7a8*=0x104, lpOverlapped=0x0) returned 1 [0184.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0184.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0184.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a34610 [0184.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0184.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0184.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0184.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x25) returned 0x7a376e0 [0184.582] sprintf (in: _Dest=0x7a376e0, _Format="%c%c" | out: _Dest="22") returned 2 [0184.582] sprintf (in: _Dest=0x7a376e2, _Format="%c%c" | out: _Dest="b2") returned 2 [0184.582] sprintf (in: _Dest=0x7a376e4, _Format="%c%c" | out: _Dest="0b") returned 2 [0184.582] sprintf (in: _Dest=0x7a376e6, _Format="%c%c" | out: _Dest="ae") returned 2 [0184.582] sprintf (in: _Dest=0x7a376e8, _Format="%c%c" | out: _Dest="52") returned 2 [0184.582] sprintf (in: _Dest=0x7a376ea, _Format="%c%c" | out: _Dest="dc") returned 2 [0184.582] sprintf (in: _Dest=0x7a376ec, _Format="%c%c" | out: _Dest="23") returned 2 [0184.582] sprintf (in: _Dest=0x7a376ee, _Format="%c%c" | out: _Dest="98") returned 2 [0184.582] sprintf (in: _Dest=0x7a376f0, _Format="%c%c" | out: _Dest="86") returned 2 [0184.582] sprintf (in: _Dest=0x7a376f2, _Format="%c%c" | out: _Dest="cb") returned 2 [0184.582] sprintf (in: _Dest=0x7a376f4, _Format="%c%c" | out: _Dest="df") returned 2 [0184.582] sprintf (in: _Dest=0x7a376f6, _Format="%c%c" | out: _Dest="b7") returned 2 [0184.582] sprintf (in: _Dest=0x7a376f8, _Format="%c%c" | out: _Dest="c4") returned 2 [0184.582] sprintf (in: _Dest=0x7a376fa, _Format="%c%c" | out: _Dest="15") returned 2 [0184.582] sprintf (in: _Dest=0x7a376fc, _Format="%c%c" | out: _Dest="b1") returned 2 [0184.582] sprintf (in: _Dest=0x7a376fe, _Format="%c%c" | out: _Dest="b5") returned 2 [0184.582] sprintf (in: _Dest=0x7a37700, _Format="%c%c" | out: _Dest="03") returned 2 [0184.582] sprintf (in: _Dest=0x7a37702, _Format="%c%c" | out: _Dest="50") returned 2 [0184.583] RtlInitAnsiString (in: DestinationString=0x841f730, SourceString="22b20bae52dc239886cbdfb7c415b1b50350" | out: DestinationString="22b20bae52dc239886cbdfb7c415b1b50350") [0184.583] RtlAnsiStringToUnicodeString (in: DestinationString=0x841f728, SourceString="22b20bae52dc239886cbdfb7c415b1b50350", AllocateDestinationString=1 | out: DestinationString="22b20bae52dc239886cbdfb7c415b1b50350") returned 0x0 [0184.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a394d0 [0184.583] wcscat (in: _Dest=0x7a5f050, _Source="22b20bae5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\22b20bae5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\22b20bae5" [0184.583] wcscat (in: _Dest=0x7a5f050, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\22b20bae5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\22b20bae5.68814f" [0184.583] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\22b20bae5.68814f", NtPathName=0x841f720, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\22b20bae5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66cd8 [0184.678] FlushFileBuffers (hFile=0x10f4) returned 1 [0184.956] CloseHandle (hObject=0x10f4) returned 1 [0186.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66140 [0186.035] wcscpy (in: _Dest=0x7a66140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0186.035] wcscat (in: _Dest=0x7a66140, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0186.035] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0186.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66140) returned 1 [0186.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63710) returned 1 Thread: id = 4153 os_tid = 0x116c [0171.354] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal")) returned 0x2020 [0180.515] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", dwFileAttributes=0x20) returned 1 [0182.804] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10ec [0182.804] GetFileSizeEx (in: hFile=0x10ec, lpFileSize=0x914fbb4 | out: lpFileSize=0x914fbb4*=0) returned 1 [0182.804] FlushFileBuffers (hFile=0x10ec) returned 1 [0183.591] CloseHandle (hObject=0x10ec) returned 1 [0183.591] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", dwFileAttributes=0x2020) returned 1 [0189.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66ae0) returned 1 Thread: id = 4154 os_tid = 0xb38 [0171.355] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity")) returned 0x2020 [0175.421] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", dwFileAttributes=0x20) returned 1 [0182.785] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd90 [0182.785] GetFileSizeEx (in: hFile=0xd90, lpFileSize=0x77df884 | out: lpFileSize=0x77df884*=632) returned 1 [0182.785] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x274, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.785] ReadFile (in: hFile=0xd90, lpBuffer=0x77df860, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x77df870, lpOverlapped=0x0 | out: lpBuffer=0x77df860*, lpNumberOfBytesRead=0x77df870*=0x4, lpOverlapped=0x0) returned 1 [0182.789] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0182.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0182.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0182.789] NtQuerySystemTime (in: CurrentTime=0x77df7f8 | out: CurrentTime=0x77df7f8*=132462177613644000) returned 0x0 [0182.789] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x67c21c85 [0182.789] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x463bff [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x40371caa [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x4a986d34 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x2ecae92d [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x77034519 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x1a44297d [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x640e0a5e [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x514ed23f [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x139de077 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x23a0d187 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x7fc4a38a [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x38fb03b0 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x8d54844 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x1f774588 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x1ec3cfa0 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x1af618b2 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x662649a3 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0xa311516 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x304cdf01 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x2773f170 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x418e2fd9 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x4acc29ab [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x332c4586 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x30fbb21e [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x2a00805a [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x23169778 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x3e32c407 [0182.790] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x869594f [0182.791] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x4fd91edb [0182.791] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0xe5cbbc8 [0182.791] RtlRandomEx (in: Seed=0x77df7f0 | out: Seed=0x77df7f0) returned 0x21743cc [0182.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0182.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c27380 [0182.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c18360 [0182.802] ReadFile (in: hFile=0xd90, lpBuffer=0x7c27380, nNumberOfBytesToRead=0x278, lpNumberOfBytesRead=0x77df7ec, lpOverlapped=0x0 | out: lpBuffer=0x7c27380*, lpNumberOfBytesRead=0x77df7ec*=0x278, lpOverlapped=0x0) returned 1 [0182.802] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.802] WriteFile (in: hFile=0xd90, lpBuffer=0x7c18360*, nNumberOfBytesToWrite=0x278, lpNumberOfBytesWritten=0x77df7f0, lpOverlapped=0x0 | out: lpBuffer=0x7c18360*, lpNumberOfBytesWritten=0x77df7f0*=0x278, lpOverlapped=0x0) returned 1 [0183.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e340 [0183.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0183.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0183.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c18360) returned 1 [0183.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c27380) returned 1 [0183.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0183.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07f08) returned 1 [0183.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79368 [0183.936] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.936] WriteFile (in: hFile=0xd90, lpBuffer=0x3d55150*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x77df878, lpOverlapped=0x0 | out: lpBuffer=0x3d55150*, lpNumberOfBytesWritten=0x77df878*=0x114, lpOverlapped=0x0) returned 1 [0184.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0184.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0184.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37680 [0184.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0184.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0184.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0184.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e843f8 [0184.558] sprintf (in: _Dest=0x3e843f8, _Format="%c%c" | out: _Dest="2f") returned 2 [0184.558] sprintf (in: _Dest=0x3e843fa, _Format="%c%c" | out: _Dest="d7") returned 2 [0184.558] sprintf (in: _Dest=0x3e843fc, _Format="%c%c" | out: _Dest="c7") returned 2 [0184.558] sprintf (in: _Dest=0x3e843fe, _Format="%c%c" | out: _Dest="53") returned 2 [0184.559] sprintf (in: _Dest=0x3e84400, _Format="%c%c" | out: _Dest="1f") returned 2 [0184.559] sprintf (in: _Dest=0x3e84402, _Format="%c%c" | out: _Dest="54") returned 2 [0184.559] sprintf (in: _Dest=0x3e84404, _Format="%c%c" | out: _Dest="77") returned 2 [0184.559] sprintf (in: _Dest=0x3e84406, _Format="%c%c" | out: _Dest="68") returned 2 [0184.559] sprintf (in: _Dest=0x3e84408, _Format="%c%c" | out: _Dest="4a") returned 2 [0184.559] sprintf (in: _Dest=0x3e8440a, _Format="%c%c" | out: _Dest="a3") returned 2 [0184.559] sprintf (in: _Dest=0x3e8440c, _Format="%c%c" | out: _Dest="1d") returned 2 [0184.559] sprintf (in: _Dest=0x3e8440e, _Format="%c%c" | out: _Dest="65") returned 2 [0184.559] sprintf (in: _Dest=0x3e84410, _Format="%c%c" | out: _Dest="ce") returned 2 [0184.559] sprintf (in: _Dest=0x3e84412, _Format="%c%c" | out: _Dest="89") returned 2 [0184.559] sprintf (in: _Dest=0x3e84414, _Format="%c%c" | out: _Dest="ae") returned 2 [0184.559] sprintf (in: _Dest=0x3e84416, _Format="%c%c" | out: _Dest="dd") returned 2 [0184.559] sprintf (in: _Dest=0x3e84418, _Format="%c%c" | out: _Dest="d2") returned 2 [0184.559] sprintf (in: _Dest=0x3e8441a, _Format="%c%c" | out: _Dest="57") returned 2 [0184.559] sprintf (in: _Dest=0x3e8441c, _Format="%c%c" | out: _Dest="e8") returned 2 [0184.559] sprintf (in: _Dest=0x3e8441e, _Format="%c%c" | out: _Dest="1c") returned 2 [0184.559] sprintf (in: _Dest=0x3e84420, _Format="%c%c" | out: _Dest="d4") returned 2 [0184.559] sprintf (in: _Dest=0x3e84422, _Format="%c%c" | out: _Dest="61") returned 2 [0184.559] sprintf (in: _Dest=0x3e84424, _Format="%c%c" | out: _Dest="0e") returned 2 [0184.559] sprintf (in: _Dest=0x3e84426, _Format="%c%c" | out: _Dest="9f") returned 2 [0184.559] sprintf (in: _Dest=0x3e84428, _Format="%c%c" | out: _Dest="8a") returned 2 [0184.559] sprintf (in: _Dest=0x3e8442a, _Format="%c%c" | out: _Dest="33") returned 2 [0184.559] sprintf (in: _Dest=0x3e8442c, _Format="%c%c" | out: _Dest="51") returned 2 [0184.559] sprintf (in: _Dest=0x3e8442e, _Format="%c%c" | out: _Dest="ec") returned 2 [0184.559] sprintf (in: _Dest=0x3e84430, _Format="%c%c" | out: _Dest="d1") returned 2 [0184.559] sprintf (in: _Dest=0x3e84432, _Format="%c%c" | out: _Dest="b5") returned 2 [0184.559] sprintf (in: _Dest=0x3e84434, _Format="%c%c" | out: _Dest="47") returned 2 [0184.559] sprintf (in: _Dest=0x3e84436, _Format="%c%c" | out: _Dest="e5") returned 2 [0184.559] sprintf (in: _Dest=0x3e84438, _Format="%c%c" | out: _Dest="56") returned 2 [0184.559] sprintf (in: _Dest=0x3e8443a, _Format="%c%c" | out: _Dest="46") returned 2 [0184.559] RtlInitAnsiString (in: DestinationString=0x77df800, SourceString="2fd7c7531f5477684aa31d65ce89aeddd257e81cd4610e9f8a3351ecd1b547e55646" | out: DestinationString="2fd7c7531f5477684aa31d65ce89aeddd257e81cd4610e9f8a3351ecd1b547e55646") [0184.560] RtlAnsiStringToUnicodeString (in: DestinationString=0x77df7f8, SourceString="2fd7c7531f5477684aa31d65ce89aeddd257e81cd4610e9f8a3351ecd1b547e55646", AllocateDestinationString=1 | out: DestinationString="2fd7c7531f5477684aa31d65ce89aeddd257e81cd4610e9f8a3351ecd1b547e55646") returned 0x0 [0184.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7280 [0184.560] wcscat (in: _Dest=0x2ff7cd0, _Source="2fd7c7531f5477684" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\2fd7c7531f5477684") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\2fd7c7531f5477684" [0184.560] wcscat (in: _Dest=0x2ff7cd0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\2fd7c7531f5477684.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\2fd7c7531f5477684.68814f" [0184.560] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\2fd7c7531f5477684.68814f", NtPathName=0x77df7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\2fd7c7531f5477684.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d86330 [0184.647] FlushFileBuffers (hFile=0xd90) returned 1 [0184.955] CloseHandle (hObject=0xd90) returned 1 [0186.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a67530 [0186.010] wcscpy (in: _Dest=0x7a67530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0186.011] wcscat (in: _Dest=0x7a67530, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0186.011] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0186.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67530) returned 1 [0186.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 Thread: id = 4155 os_tid = 0xb34 [0171.355] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\visited links")) returned 0x2020 [0180.518] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", dwFileAttributes=0x20) returned 1 [0182.909] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x570 [0182.925] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x97cfeec | out: lpFileSize=0x97cfeec*=131072) returned 1 [0182.925] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.925] ReadFile (in: hFile=0x570, lpBuffer=0x97cfec8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x97cfed8, lpOverlapped=0x0 | out: lpBuffer=0x97cfec8*, lpNumberOfBytesRead=0x97cfed8*=0x4, lpOverlapped=0x0) returned 1 [0182.928] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0182.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0182.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f40 [0182.929] NtQuerySystemTime (in: CurrentTime=0x97cfe60 | out: CurrentTime=0x97cfe60*=132462177615048000) returned 0x0 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x55f88877 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x4bb05cb3 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x2d997b23 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x5fe2d82b [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x34eed7ec [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0xf6bca78 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x54ef7f0f [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0xaab43c6 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0xbd279b0 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x45296959 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x2c1db441 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x3d039b9d [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x420cccb0 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x309cf079 [0182.929] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x6abe0248 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x3459fe5b [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x1099ecb3 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x616b5e61 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x4d4cc82b [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x2d1b8471 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x5adc0f9a [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x2d68b74e [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x2205ee66 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x1a1dc0a7 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0xd69c629 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x38401d75 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x4eb170af [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x65e3f867 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x16d3a372 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0xa32d6ee [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x2a64c125 [0182.930] RtlRandomEx (in: Seed=0x97cfe58 | out: Seed=0x97cfe58) returned 0x585a663c [0183.405] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.405] ReadFile (in: hFile=0x570, lpBuffer=0x7b3a320, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x97cfe60, lpOverlapped=0x0 | out: lpBuffer=0x7b3a320*, lpNumberOfBytesRead=0x97cfe60*=0x3c00, lpOverlapped=0x0) returned 1 [0183.415] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07cc8 [0183.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0183.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0183.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0183.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7acb8e0 [0183.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0183.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e368 [0183.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e368) returned 1 [0183.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0183.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07cc8) returned 1 [0183.417] WriteFile (in: hFile=0x570, lpBuffer=0x7acb8e0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x97cfe60, lpOverlapped=0x0 | out: lpBuffer=0x7acb8e0*, lpNumberOfBytesWritten=0x97cfe60*=0x3c00, lpOverlapped=0x0) returned 1 [0183.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acb8e0) returned 1 [0183.938] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.938] ReadFile (in: hFile=0x570, lpBuffer=0x7b3a320, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x97cfe60, lpOverlapped=0x0 | out: lpBuffer=0x7b3a320*, lpNumberOfBytesRead=0x97cfe60*=0x3c00, lpOverlapped=0x0) returned 1 [0183.942] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x12c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08070 [0183.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0183.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0183.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0183.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1fb70 [0183.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0183.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0183.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0183.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0183.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08070) returned 1 [0183.943] WriteFile (in: hFile=0x570, lpBuffer=0x7c1fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x97cfe60, lpOverlapped=0x0 | out: lpBuffer=0x7c1fb70*, lpNumberOfBytesWritten=0x97cfe60*=0x3c00, lpOverlapped=0x0) returned 1 [0184.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1fb70) returned 1 [0184.456] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x1c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.456] ReadFile (in: hFile=0x570, lpBuffer=0x7b3a320, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x97cfe60, lpOverlapped=0x0 | out: lpBuffer=0x7b3a320*, lpNumberOfBytesRead=0x97cfe60*=0x3c00, lpOverlapped=0x0) returned 1 [0184.457] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x1c400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f40 [0184.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0184.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0184.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1fb70 [0184.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0184.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0184.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0184.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f40) returned 1 [0184.458] WriteFile (in: hFile=0x570, lpBuffer=0x7c1fb70*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x97cfe60, lpOverlapped=0x0 | out: lpBuffer=0x7c1fb70*, lpNumberOfBytesWritten=0x97cfe60*=0x3c00, lpOverlapped=0x0) returned 1 [0184.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1fb70) returned 1 [0184.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1e7f8 [0184.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0184.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37800 [0184.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0184.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0184.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0184.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f40) returned 1 [0184.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e0ac18 [0184.478] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.478] WriteFile (in: hFile=0x570, lpBuffer=0x3e0ac18*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x97cfee0, lpOverlapped=0x0 | out: lpBuffer=0x3e0ac18*, lpNumberOfBytesWritten=0x97cfee0*=0x14c, lpOverlapped=0x0) returned 1 [0184.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0184.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c20) returned 1 [0184.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9c20 [0184.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0a8 [0184.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0184.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6e8) returned 1 [0184.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d040 [0184.599] sprintf (in: _Dest=0x7a2d040, _Format="%c%c" | out: _Dest="f2") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d042, _Format="%c%c" | out: _Dest="1d") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d044, _Format="%c%c" | out: _Dest="f4") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d046, _Format="%c%c" | out: _Dest="30") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d048, _Format="%c%c" | out: _Dest="ae") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d04a, _Format="%c%c" | out: _Dest="d1") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d04c, _Format="%c%c" | out: _Dest="30") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d04e, _Format="%c%c" | out: _Dest="e9") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d050, _Format="%c%c" | out: _Dest="91") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d052, _Format="%c%c" | out: _Dest="90") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d054, _Format="%c%c" | out: _Dest="37") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d056, _Format="%c%c" | out: _Dest="c5") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d058, _Format="%c%c" | out: _Dest="b3") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d05a, _Format="%c%c" | out: _Dest="05") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d05c, _Format="%c%c" | out: _Dest="27") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d05e, _Format="%c%c" | out: _Dest="82") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d060, _Format="%c%c" | out: _Dest="c8") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d062, _Format="%c%c" | out: _Dest="51") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d064, _Format="%c%c" | out: _Dest="6b") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d066, _Format="%c%c" | out: _Dest="66") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d068, _Format="%c%c" | out: _Dest="54") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d06a, _Format="%c%c" | out: _Dest="82") returned 2 [0184.599] sprintf (in: _Dest=0x7a2d06c, _Format="%c%c" | out: _Dest="60") returned 2 [0184.600] sprintf (in: _Dest=0x7a2d06e, _Format="%c%c" | out: _Dest="d5") returned 2 [0184.600] sprintf (in: _Dest=0x7a2d070, _Format="%c%c" | out: _Dest="4e") returned 2 [0184.600] sprintf (in: _Dest=0x7a2d072, _Format="%c%c" | out: _Dest="9c") returned 2 [0184.600] RtlInitAnsiString (in: DestinationString=0x97cfe68, SourceString="f21df430aed130e9919037c5b3052782c8516b66548260d54e9c" | out: DestinationString="f21df430aed130e9919037c5b3052782c8516b66548260d54e9c") [0184.600] RtlAnsiStringToUnicodeString (in: DestinationString=0x97cfe60, SourceString="f21df430aed130e9919037c5b3052782c8516b66548260d54e9c", AllocateDestinationString=1 | out: DestinationString="f21df430aed130e9919037c5b3052782c8516b66548260d54e9c") returned 0x0 [0184.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f560 [0184.600] wcscat (in: _Dest=0x7a66f00, _Source="f21df430aed13" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\f21df430aed13") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\f21df430aed13" [0184.600] wcscat (in: _Dest=0x7a66f00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\f21df430aed13.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\f21df430aed13.68814f" [0184.600] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\f21df430aed13.68814f", NtPathName=0x97cfe58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\f21df430aed13.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a5d0 [0184.653] FlushFileBuffers (hFile=0x570) returned 1 [0184.956] CloseHandle (hObject=0x570) returned 1 [0186.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a668d0 [0186.014] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0186.014] wcscat (in: _Dest=0x7a668d0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0186.014] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0186.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 [0186.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 4156 os_tid = 0xb30 [0171.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a664b0 [0171.355] wcscpy (in: _Dest=0x7a664b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0171.355] wcscat (in: _Dest=0x7a664b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" [0171.355] wcscat (in: _Dest=0x7a664b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*" [0171.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0171.356] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6626d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6626d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0172.495] wcscmp (_String1=".", _String2=".") returned 0 [0172.495] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6626d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6626d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.495] wcscmp (_String1="..", _String2=".") returned 1 [0172.495] wcscmp (_String1="..", _String2="..") returned 0 [0172.495] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1 [0172.495] wcscmp (_String1="_crx_aohghmighlieiainnegkcijnfilokake", _String2=".") returned 1 [0172.495] wcscmp (_String1="_crx_aohghmighlieiainnegkcijnfilokake", _String2="..") returned 1 [0172.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadd20 [0172.496] wcscpy (in: _Dest=0x3dadd20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" [0172.496] wcscat (in: _Dest=0x3dadd20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\" [0172.496] wcscat (in: _Dest=0x3dadd20, _Source="_crx_aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0172.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dadd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0172.985] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 0 [0172.985] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0172.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0172.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a664b0) returned 1 [0172.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f8d8) returned 1 Thread: id = 4157 os_tid = 0xb2c [0171.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data")) returned 0x2020 [0181.351] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", dwFileAttributes=0x20) returned 1 [0182.886] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10c0 [0182.887] GetFileSizeEx (in: hFile=0x10c0, lpFileSize=0x875f8ec | out: lpFileSize=0x875f8ec*=69632) returned 1 [0182.887] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.887] ReadFile (in: hFile=0x10c0, lpBuffer=0x875f8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x875f8d8, lpOverlapped=0x0 | out: lpBuffer=0x875f8c8*, lpNumberOfBytesRead=0x875f8d8*=0x4, lpOverlapped=0x0) returned 1 [0182.893] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0182.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0182.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0182.894] NtQuerySystemTime (in: CurrentTime=0x875f860 | out: CurrentTime=0x875f860*=132462177614736000) returned 0x0 [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x29cf584b [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x16f8cb96 [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x55fa46b9 [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x5cdf9aab [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x20a48d85 [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x4707d08e [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x4b355747 [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x1b953c93 [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x651e81bc [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x7ea3d6a4 [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x28d36131 [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x50c186f9 [0182.894] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x33501c81 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x2f4e6cb2 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x3d818155 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x52648236 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x36ab7186 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x2bc802c1 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x373b50b7 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x5410afcb [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x6fcfcf19 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x7e8d726f [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x6befce2b [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x190617d3 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0xa46ad4a [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x77f49345 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x6e55169e [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x4ea31c41 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x3746747c [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x504320a2 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x60431c08 [0182.895] RtlRandomEx (in: Seed=0x875f858 | out: Seed=0x875f858) returned 0x4afb9fc0 [0182.907] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.907] ReadFile (in: hFile=0x10c0, lpBuffer=0x7acf4e8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x875f860, lpOverlapped=0x0 | out: lpBuffer=0x7acf4e8*, lpNumberOfBytesRead=0x875f860*=0x3c00, lpOverlapped=0x0) returned 1 [0182.909] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07c38 [0182.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0182.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0182.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0182.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c38360 [0183.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0183.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0183.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0183.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0183.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07c38) returned 1 [0183.482] WriteFile (in: hFile=0x10c0, lpBuffer=0x7c38360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x875f860, lpOverlapped=0x0 | out: lpBuffer=0x7c38360*, lpNumberOfBytesWritten=0x875f860*=0x3c00, lpOverlapped=0x0) returned 1 [0184.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c38360) returned 1 [0184.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acf4e8) returned 1 [0184.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5ada8 [0184.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae98) returned 1 [0184.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5ae98 [0184.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6788 [0184.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0184.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0184.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f40) returned 1 [0184.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c668 [0184.456] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.456] WriteFile (in: hFile=0x10c0, lpBuffer=0x7b7c668*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x875f8e0, lpOverlapped=0x0 | out: lpBuffer=0x7b7c668*, lpNumberOfBytesWritten=0x875f8e0*=0x102, lpOverlapped=0x0) returned 1 [0184.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0184.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0184.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x3e43860 [0184.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0184.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0184.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0184.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a376e0 [0184.594] sprintf (in: _Dest=0x7a376e0, _Format="%c%c" | out: _Dest="ee") returned 2 [0184.594] sprintf (in: _Dest=0x7a376e2, _Format="%c%c" | out: _Dest="7b") returned 2 [0184.594] sprintf (in: _Dest=0x7a376e4, _Format="%c%c" | out: _Dest="db") returned 2 [0184.594] sprintf (in: _Dest=0x7a376e6, _Format="%c%c" | out: _Dest="20") returned 2 [0184.594] sprintf (in: _Dest=0x7a376e8, _Format="%c%c" | out: _Dest="47") returned 2 [0184.594] sprintf (in: _Dest=0x7a376ea, _Format="%c%c" | out: _Dest="29") returned 2 [0184.594] sprintf (in: _Dest=0x7a376ec, _Format="%c%c" | out: _Dest="06") returned 2 [0184.594] sprintf (in: _Dest=0x7a376ee, _Format="%c%c" | out: _Dest="70") returned 2 [0184.594] sprintf (in: _Dest=0x7a376f0, _Format="%c%c" | out: _Dest="24") returned 2 [0184.595] sprintf (in: _Dest=0x7a376f2, _Format="%c%c" | out: _Dest="55") returned 2 [0184.595] sprintf (in: _Dest=0x7a376f4, _Format="%c%c" | out: _Dest="e2") returned 2 [0184.595] sprintf (in: _Dest=0x7a376f6, _Format="%c%c" | out: _Dest="11") returned 2 [0184.595] sprintf (in: _Dest=0x7a376f8, _Format="%c%c" | out: _Dest="86") returned 2 [0184.595] sprintf (in: _Dest=0x7a376fa, _Format="%c%c" | out: _Dest="a3") returned 2 [0184.595] sprintf (in: _Dest=0x7a376fc, _Format="%c%c" | out: _Dest="ce") returned 2 [0184.595] sprintf (in: _Dest=0x7a376fe, _Format="%c%c" | out: _Dest="ef") returned 2 [0184.595] RtlInitAnsiString (in: DestinationString=0x875f868, SourceString="ee7bdb20472906702455e21186a3ceef" | out: DestinationString="ee7bdb20472906702455e21186a3ceef") [0184.595] RtlAnsiStringToUnicodeString (in: DestinationString=0x875f860, SourceString="ee7bdb20472906702455e21186a3ceef", AllocateDestinationString=1 | out: DestinationString="ee7bdb20472906702455e21186a3ceef") returned 0x0 [0184.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84718 [0184.595] wcscat (in: _Dest=0x7a5e720, _Source="ee7bdb20" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ee7bdb20") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ee7bdb20" [0184.595] wcscat (in: _Dest=0x7a5e720, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ee7bdb20.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ee7bdb20.68814f" [0184.595] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ee7bdb20.68814f", NtPathName=0x875f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\ee7bdb20.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3e66918 [0184.654] FlushFileBuffers (hFile=0x10c0) returned 1 [0184.956] CloseHandle (hObject=0x10c0) returned 1 [0186.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a668d0 [0186.016] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\" [0186.016] wcscat (in: _Dest=0x7a668d0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" [0186.016] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\68814f-readme.txt")) returned 0x2020 [0186.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 [0186.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6900) returned 1 Thread: id = 4158 os_tid = 0xb84 [0171.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal")) returned 0x2020 [0174.142] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", dwFileAttributes=0x20) returned 1 [0182.804] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xac4 [0182.805] GetFileSizeEx (in: hFile=0xac4, lpFileSize=0x93cfe94 | out: lpFileSize=0x93cfe94*=0) returned 1 [0182.805] FlushFileBuffers (hFile=0xac4) returned 1 [0183.592] CloseHandle (hObject=0xac4) returned 1 [0183.592] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", dwFileAttributes=0x2020) returned 1 [0186.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f398) returned 1 Thread: id = 4159 os_tid = 0xb88 [0171.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp")) returned 0x20 [0171.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP", dwFileAttributes=0x20) returned 0 [0171.357] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.357] GetLastError () returned 0x5 [0171.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP", dwFileAttributes=0x20) returned 0 [0171.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 4160 os_tid = 0x1170 [0171.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp")) returned 0x20 [0171.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP", dwFileAttributes=0x20) returned 0 [0171.359] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.359] GetLastError () returned 0x5 [0171.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP", dwFileAttributes=0x20) returned 0 [0171.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b00) returned 1 Thread: id = 4161 os_tid = 0x1174 [0171.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini")) returned 0x20 [0171.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini", dwFileAttributes=0x20) returned 0 [0171.360] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.360] GetLastError () returned 0x5 [0171.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini", dwFileAttributes=0x20) returned 0 [0171.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 4162 os_tid = 0x1178 [0171.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html")) returned 0x20 [0171.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", dwFileAttributes=0x20) returned 0 [0171.362] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.362] GetLastError () returned 0x5 [0171.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", dwFileAttributes=0x20) returned 0 [0171.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 Thread: id = 4163 os_tid = 0x117c [0171.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf")) returned 0x20 [0171.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF", dwFileAttributes=0x20) returned 0 [0171.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.364] GetLastError () returned 0x5 [0171.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF", dwFileAttributes=0x20) returned 0 [0171.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 4164 os_tid = 0x1180 [0171.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf")) returned 0x20 [0174.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF", dwFileAttributes=0x20) returned 0 [0174.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.661] GetLastError () returned 0x5 [0174.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF", dwFileAttributes=0x20) returned 0 [0174.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 4165 os_tid = 0x1184 [0171.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf")) returned 0x20 [0173.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF", dwFileAttributes=0x20) returned 0 [0173.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.656] GetLastError () returned 0x5 [0174.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF", dwFileAttributes=0x20) returned 0 [0174.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 4166 os_tid = 0x1188 [0171.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf")) returned 0x20 [0174.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF", dwFileAttributes=0x20) returned 0 [0174.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.665] GetLastError () returned 0x5 [0174.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF", dwFileAttributes=0x20) returned 0 [0174.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 4167 os_tid = 0x118c [0171.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf")) returned 0x20 [0174.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF", dwFileAttributes=0x20) returned 0 [0174.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.126] GetLastError () returned 0x5 [0174.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF", dwFileAttributes=0x20) returned 0 [0174.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 4168 os_tid = 0x1190 [0171.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf")) returned 0x20 [0174.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF", dwFileAttributes=0x20) returned 0 [0174.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.714] GetLastError () returned 0x5 [0174.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF", dwFileAttributes=0x20) returned 0 [0174.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 4169 os_tid = 0x1194 [0171.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf")) returned 0x20 [0174.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF", dwFileAttributes=0x20) returned 0 [0174.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.711] GetLastError () returned 0x5 [0174.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF", dwFileAttributes=0x20) returned 0 [0174.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 4170 os_tid = 0x1198 [0171.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif")) returned 0x20 [0174.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF", dwFileAttributes=0x20) returned 0 [0174.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.709] GetLastError () returned 0x5 [0174.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF", dwFileAttributes=0x20) returned 0 [0174.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 4171 os_tid = 0x119c [0171.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf")) returned 0x20 [0174.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF", dwFileAttributes=0x20) returned 0 [0174.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.708] GetLastError () returned 0x5 [0174.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF", dwFileAttributes=0x20) returned 0 [0174.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 4172 os_tid = 0x11a0 [0171.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf")) returned 0x20 [0174.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF", dwFileAttributes=0x20) returned 0 [0174.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.706] GetLastError () returned 0x5 [0174.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF", dwFileAttributes=0x20) returned 0 [0174.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 4173 os_tid = 0x11a4 [0171.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf")) returned 0x20 [0174.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF", dwFileAttributes=0x20) returned 0 [0174.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.704] GetLastError () returned 0x5 [0174.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF", dwFileAttributes=0x20) returned 0 [0174.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 4174 os_tid = 0x11a8 [0171.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf")) returned 0x20 [0174.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF", dwFileAttributes=0x20) returned 0 [0174.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.702] GetLastError () returned 0x5 [0174.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF", dwFileAttributes=0x20) returned 0 [0174.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 4175 os_tid = 0x11ac [0171.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf")) returned 0x20 [0174.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF", dwFileAttributes=0x20) returned 0 [0174.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.701] GetLastError () returned 0x5 [0174.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF", dwFileAttributes=0x20) returned 0 [0174.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 4176 os_tid = 0x11b0 [0171.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf")) returned 0x20 [0174.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF", dwFileAttributes=0x20) returned 0 [0174.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.699] GetLastError () returned 0x5 [0174.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF", dwFileAttributes=0x20) returned 0 [0174.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 4177 os_tid = 0x11b4 [0171.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg")) returned 0x20 [0174.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG", dwFileAttributes=0x20) returned 0 [0174.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.697] GetLastError () returned 0x5 [0174.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG", dwFileAttributes=0x20) returned 0 [0174.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 4178 os_tid = 0x11b8 [0171.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg")) returned 0x20 [0174.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG", dwFileAttributes=0x20) returned 0 [0174.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.695] GetLastError () returned 0x5 [0174.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG", dwFileAttributes=0x20) returned 0 [0174.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 4179 os_tid = 0x11bc [0171.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf")) returned 0x20 [0174.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF", dwFileAttributes=0x20) returned 0 [0174.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.694] GetLastError () returned 0x5 [0174.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF", dwFileAttributes=0x20) returned 0 [0174.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 4180 os_tid = 0x11c0 [0171.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf")) returned 0x20 [0174.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF", dwFileAttributes=0x20) returned 0 [0174.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.692] GetLastError () returned 0x5 [0174.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF", dwFileAttributes=0x20) returned 0 [0174.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 4181 os_tid = 0x83c [0171.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf")) returned 0x20 [0174.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF", dwFileAttributes=0x20) returned 0 [0174.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.690] GetLastError () returned 0x5 [0174.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF", dwFileAttributes=0x20) returned 0 [0174.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 4182 os_tid = 0x11c4 [0171.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg")) returned 0x20 [0174.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG", dwFileAttributes=0x20) returned 0 [0174.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.688] GetLastError () returned 0x5 [0174.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG", dwFileAttributes=0x20) returned 0 [0174.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 4183 os_tid = 0x11c8 [0171.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf")) returned 0x20 [0174.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF", dwFileAttributes=0x20) returned 0 [0174.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.686] GetLastError () returned 0x5 [0174.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF", dwFileAttributes=0x20) returned 0 [0174.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 4184 os_tid = 0x11cc [0171.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf")) returned 0x20 [0174.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF", dwFileAttributes=0x20) returned 0 [0174.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.685] GetLastError () returned 0x5 [0174.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF", dwFileAttributes=0x20) returned 0 [0174.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 4185 os_tid = 0x11d0 [0171.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf")) returned 0x20 [0174.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF", dwFileAttributes=0x20) returned 0 [0174.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.683] GetLastError () returned 0x5 [0174.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF", dwFileAttributes=0x20) returned 0 [0174.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 4186 os_tid = 0x11d4 [0171.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf")) returned 0x20 [0174.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF", dwFileAttributes=0x20) returned 0 [0174.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.663] GetLastError () returned 0x5 [0174.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF", dwFileAttributes=0x20) returned 0 [0174.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 4187 os_tid = 0x11dc [0171.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\windhoek")) returned 0x20 [0171.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek", dwFileAttributes=0x20) returned 0 [0171.634] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\africa\\windhoek"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.634] GetLastError () returned 0x5 [0171.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Africa\\Windhoek", dwFileAttributes=0x20) returned 0 [0171.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26af8) returned 1 Thread: id = 4188 os_tid = 0xc2c [0171.635] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0")) returned 0x2020 [0171.635] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", dwFileAttributes=0x20) returned 1 [0174.995] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xda0 [0174.996] GetFileSizeEx (in: hFile=0xda0, lpFileSize=0x98efd8c | out: lpFileSize=0x98efd8c*=45056) returned 1 [0174.996] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0xaffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.996] ReadFile (in: hFile=0xda0, lpBuffer=0x98efd68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x98efd78, lpOverlapped=0x0 | out: lpBuffer=0x98efd68*, lpNumberOfBytesRead=0x98efd78*=0x4, lpOverlapped=0x0) returned 1 [0174.998] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0174.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0174.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0174.999] NtQuerySystemTime (in: CurrentTime=0x98efd00 | out: CurrentTime=0x98efd00*=132462177535800000) returned 0x0 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x1c1d8377 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x8089048 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x123d142 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x4db93640 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x3fd24e89 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x680c951 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0xe512d47 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x740d6578 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x42d40472 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x144c05b7 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x6d6bbc09 [0174.999] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0xcfae408 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x9d7d842 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x59b44a95 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x27825ecc [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x3cb87232 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x259c7ed [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x1d7d3ff6 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0xaaf1bcd [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x257a586b [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x72d64f0e [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x6f65dab2 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x9e77cf9 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x5ff5c0e8 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x22df2724 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x207ff0b0 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0xbaf2882 [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x2db10d3f [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x11bf7e1b [0175.000] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x20e18fcd [0175.001] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x1689ecb2 [0175.001] RtlRandomEx (in: Seed=0x98efcf8 | out: Seed=0x98efcf8) returned 0x7154db86 [0175.017] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.017] ReadFile (in: hFile=0xda0, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x98efd00, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0x98efd00*=0x3c00, lpOverlapped=0x0) returned 1 [0177.579] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b3e00 [0177.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0177.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0177.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0177.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0177.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0177.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0177.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0177.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0177.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b3e00) returned 1 [0177.580] WriteFile (in: hFile=0xda0, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x98efd00, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0x98efd00*=0x3c00, lpOverlapped=0x0) returned 1 [0180.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0180.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0180.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5aa38 [0180.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0180.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b820 [0180.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0180.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0180.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0180.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0180.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85860) returned 1 [0180.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2fa978 [0180.644] SetFilePointerEx (in: hFile=0xda0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.644] WriteFile (in: hFile=0xda0, lpBuffer=0x2fa978*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x98efd80, lpOverlapped=0x0 | out: lpBuffer=0x2fa978*, lpNumberOfBytesWritten=0x98efd80*=0xfe, lpOverlapped=0x0) returned 1 [0181.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e853e0 [0181.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0181.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0181.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0181.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e43860 [0181.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0181.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0181.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0181.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0181.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0181.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x19) returned 0x3d5a9c0 [0181.757] sprintf (in: _Dest=0x3d5a9c0, _Format="%c%c" | out: _Dest="ea") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9c2, _Format="%c%c" | out: _Dest="08") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9c4, _Format="%c%c" | out: _Dest="c2") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9c6, _Format="%c%c" | out: _Dest="53") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9c8, _Format="%c%c" | out: _Dest="dd") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9ca, _Format="%c%c" | out: _Dest="8b") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9cc, _Format="%c%c" | out: _Dest="af") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9ce, _Format="%c%c" | out: _Dest="4a") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9d0, _Format="%c%c" | out: _Dest="0c") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9d2, _Format="%c%c" | out: _Dest="85") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9d4, _Format="%c%c" | out: _Dest="b3") returned 2 [0181.757] sprintf (in: _Dest=0x3d5a9d6, _Format="%c%c" | out: _Dest="a2") returned 2 [0181.757] RtlInitAnsiString (in: DestinationString=0x98efd08, SourceString="ea08c253dd8baf4a0c85b3a2" | out: DestinationString="ea08c253dd8baf4a0c85b3a2") [0181.757] RtlAnsiStringToUnicodeString (in: DestinationString=0x98efd00, SourceString="ea08c253dd8baf4a0c85b3a2", AllocateDestinationString=1 | out: DestinationString="ea08c253dd8baf4a0c85b3a2") returned 0x0 [0181.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2dac0 [0181.757] wcscat (in: _Dest=0x7a66fb0, _Source="ea08c2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ea08c2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ea08c2" [0181.757] wcscat (in: _Dest=0x7a66fb0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ea08c2.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ea08c2.68814f" [0181.758] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ea08c2.68814f", NtPathName=0x98efcf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\ea08c2.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0181.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d57690 [0182.381] FlushFileBuffers (hFile=0xda0) returned 1 [0183.591] CloseHandle (hObject=0xda0) returned 1 [0185.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7430 [0185.068] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0185.068] wcscat (in: _Dest=0x2ff7430, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" [0185.068] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\68814f-readme.txt")) returned 0x2020 [0185.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 [0185.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a624f0) returned 1 Thread: id = 4189 os_tid = 0xbd0 [0171.636] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1")) returned 0x2020 [0172.199] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", dwFileAttributes=0x20) returned 1 [0175.433] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17bc [0175.433] GetFileSizeEx (in: hFile=0x17bc, lpFileSize=0x8b1fa3c | out: lpFileSize=0x8b1fa3c*=270336) returned 1 [0175.433] SetFilePointerEx (in: hFile=0x17bc, liDistanceToMove=0x41ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.433] ReadFile (in: hFile=0x17bc, lpBuffer=0x8b1fa18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b1fa28, lpOverlapped=0x0 | out: lpBuffer=0x8b1fa18*, lpNumberOfBytesRead=0x8b1fa28*=0x4, lpOverlapped=0x0) returned 1 [0175.435] SetFilePointerEx (in: hFile=0x17bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0175.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0175.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0175.435] NtQuerySystemTime (in: CurrentTime=0x8b1f9b0 | out: CurrentTime=0x8b1f9b0*=132462177540168000) returned 0x0 [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x6a12b754 [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x2d3e48b1 [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x5a15799b [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x155a66df [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x2faaddad [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x7e099d7b [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x486fe866 [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x6ed7ebc6 [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x22b4d4a [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x77883f1f [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x4af18b47 [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x45a23b9a [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x7ac7f04a [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x6821a88d [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x18e93714 [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x4137d95b [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x5a414e08 [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x5abd799c [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x282a9b8f [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x1c8fa3a4 [0175.435] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x1ace5ffd [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x21ba9471 [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x1375a268 [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x4fb6f094 [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x6cee70b7 [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x40c4090b [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x8a3a134 [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x11a0f5ab [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x75a2429a [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x57a098d [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0x5a9bd8b4 [0175.436] RtlRandomEx (in: Seed=0x8b1f9a8 | out: Seed=0x8b1f9a8) returned 0xb43513c [0175.445] SetFilePointerEx (in: hFile=0x17bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.445] ReadFile (in: hFile=0x17bc, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8b1f9b0, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0x8b1f9b0*=0x3c00, lpOverlapped=0x0) returned 1 [0177.630] SetFilePointerEx (in: hFile=0x17bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08538 [0177.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0177.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0177.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0177.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0177.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0177.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0177.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0177.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0177.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08538) returned 1 [0177.631] WriteFile (in: hFile=0x17bc, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8b1f9b0, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0x8b1f9b0*=0x3c00, lpOverlapped=0x0) returned 1 [0180.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0180.648] SetFilePointerEx (in: hFile=0x17bc, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.648] ReadFile (in: hFile=0x17bc, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8b1f9b0, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0x8b1f9b0*=0x3c00, lpOverlapped=0x0) returned 1 [0180.648] SetFilePointerEx (in: hFile=0x17bc, liDistanceToMove=0x21c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85860 [0180.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f8a8 [0180.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0180.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0180.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0180.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0180.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0180.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0180.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0180.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85860) returned 1 [0180.649] WriteFile (in: hFile=0x17bc, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8b1f9b0, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0x8b1f9b0*=0x3c00, lpOverlapped=0x0) returned 1 [0180.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0180.885] SetFilePointerEx (in: hFile=0x17bc, liDistanceToMove=0x3e400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.885] ReadFile (in: hFile=0x17bc, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x8b1f9b0, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0x8b1f9b0*=0x3c00, lpOverlapped=0x0) returned 1 [0180.885] SetFilePointerEx (in: hFile=0x17bc, liDistanceToMove=0x3e400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x2ff0010 [0180.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0180.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0180.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0180.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0180.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0180.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0180.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0180.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0180.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff0010) returned 1 [0180.886] WriteFile (in: hFile=0x17bc, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x8b1f9b0, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0x8b1f9b0*=0x3c00, lpOverlapped=0x0) returned 1 [0184.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0184.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f150 [0184.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0184.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b2d0 [0184.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0184.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0184.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0184.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3efc0) returned 1 [0184.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e854b8) returned 1 [0184.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ea2eb0 [0184.207] SetFilePointerEx (in: hFile=0x17bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.207] WriteFile (in: hFile=0x17bc, lpBuffer=0x3ea2eb0*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x8b1fa30, lpOverlapped=0x0 | out: lpBuffer=0x3ea2eb0*, lpNumberOfBytesWritten=0x8b1fa30*=0x13e, lpOverlapped=0x0) returned 1 [0184.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0184.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0184.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e43860 [0184.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0184.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0f8 [0184.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0f8) returned 1 [0184.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x19) returned 0x3dca0f8 [0184.578] sprintf (in: _Dest=0x3dca0f8, _Format="%c%c" | out: _Dest="2a") returned 2 [0184.578] sprintf (in: _Dest=0x3dca0fa, _Format="%c%c" | out: _Dest="01") returned 2 [0184.578] sprintf (in: _Dest=0x3dca0fc, _Format="%c%c" | out: _Dest="0d") returned 2 [0184.578] sprintf (in: _Dest=0x3dca0fe, _Format="%c%c" | out: _Dest="d8") returned 2 [0184.578] sprintf (in: _Dest=0x3dca100, _Format="%c%c" | out: _Dest="ef") returned 2 [0184.578] sprintf (in: _Dest=0x3dca102, _Format="%c%c" | out: _Dest="12") returned 2 [0184.578] sprintf (in: _Dest=0x3dca104, _Format="%c%c" | out: _Dest="6d") returned 2 [0184.579] sprintf (in: _Dest=0x3dca106, _Format="%c%c" | out: _Dest="12") returned 2 [0184.579] sprintf (in: _Dest=0x3dca108, _Format="%c%c" | out: _Dest="01") returned 2 [0184.579] sprintf (in: _Dest=0x3dca10a, _Format="%c%c" | out: _Dest="25") returned 2 [0184.579] sprintf (in: _Dest=0x3dca10c, _Format="%c%c" | out: _Dest="a9") returned 2 [0184.579] sprintf (in: _Dest=0x3dca10e, _Format="%c%c" | out: _Dest="44") returned 2 [0184.579] RtlInitAnsiString (in: DestinationString=0x8b1f9b8, SourceString="2a010dd8ef126d120125a944" | out: DestinationString="2a010dd8ef126d120125a944") [0184.579] RtlAnsiStringToUnicodeString (in: DestinationString=0x8b1f9b0, SourceString="2a010dd8ef126d120125a944", AllocateDestinationString=1 | out: DestinationString="2a010dd8ef126d120125a944") returned 0x0 [0184.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e73d30 [0184.579] wcscat (in: _Dest=0x7a661f0, _Source="2a010d" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\2a010d") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\2a010d" [0184.579] wcscat (in: _Dest=0x7a661f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\2a010d.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\2a010d.68814f" [0184.579] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\2a010d.68814f", NtPathName=0x8b1f9a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\2a010d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a760 [0186.200] FlushFileBuffers (hFile=0x17bc) returned 1 [0186.201] CloseHandle (hObject=0x17bc) returned 1 [0186.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff74e8 [0186.204] wcscpy (in: _Dest=0x2ff74e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0186.204] wcscat (in: _Dest=0x2ff74e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" [0186.204] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\68814f-readme.txt")) returned 0x2020 [0186.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff74e8) returned 1 [0186.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f90) returned 1 Thread: id = 4190 os_tid = 0xad4 [0171.636] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2")) returned 0x2020 [0171.985] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", dwFileAttributes=0x20) returned 1 [0175.431] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1020 [0175.431] GetFileSizeEx (in: hFile=0x1020, lpFileSize=0x9aefa0c | out: lpFileSize=0x9aefa0c*=8192) returned 1 [0175.431] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.431] ReadFile (in: hFile=0x1020, lpBuffer=0x9aef9e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9aef9f8, lpOverlapped=0x0 | out: lpBuffer=0x9aef9e8*, lpNumberOfBytesRead=0x9aef9f8*=0x4, lpOverlapped=0x0) returned 1 [0177.314] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0177.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0177.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0177.315] NtQuerySystemTime (in: CurrentTime=0x9aef980 | out: CurrentTime=0x9aef980*=132462177558888000) returned 0x0 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x16a532ec [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x232bdd08 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x52671384 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x4be2f920 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x385afc0 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x1d7a03c3 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x1ead72bf [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x7c5a0074 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x77a4f2ef [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x44b5ee69 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x6200734 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x23f32cbd [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x4c45a252 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x5d6e3970 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x7ce8ce5d [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x65da8930 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x10f28ba8 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x6cc37ba6 [0177.315] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0xcb60576 [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x8fa2f39 [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x1ce89d28 [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x635c20e3 [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x41abf78a [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x175fa4cf [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x6970dbe2 [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x2a0a7b79 [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x2ea92695 [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x27a8ab9e [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x21e03cc4 [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x601c1911 [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x238665a9 [0177.316] RtlRandomEx (in: Seed=0x9aef978 | out: Seed=0x9aef978) returned 0x67d4e438 [0177.325] ReadFile (in: hFile=0x1020, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x9aef974, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0x9aef974*=0x2000, lpOverlapped=0x0) returned 1 [0177.333] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.333] WriteFile (in: hFile=0x1020, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x9aef978, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x9aef978*=0x2000, lpOverlapped=0x0) returned 1 [0179.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6788 [0179.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3268 [0179.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3268) returned 1 [0179.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0179.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0179.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0179.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a246b0) returned 1 [0179.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3268 [0179.877] SetFilePointerEx (in: hFile=0x1020, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.877] WriteFile (in: hFile=0x1020, lpBuffer=0x2fa978*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x9aefa00, lpOverlapped=0x0 | out: lpBuffer=0x2fa978*, lpNumberOfBytesWritten=0x9aefa00*=0xfe, lpOverlapped=0x0) returned 1 [0179.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a246b0 [0179.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0179.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0179.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0179.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3e43860 [0179.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0179.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0179.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0179.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0179.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a246b0) returned 1 [0179.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x19) returned 0x3ec3510 [0179.892] sprintf (in: _Dest=0x3ec3510, _Format="%c%c" | out: _Dest="a0") returned 2 [0179.892] sprintf (in: _Dest=0x3ec3512, _Format="%c%c" | out: _Dest="bc") returned 2 [0179.892] sprintf (in: _Dest=0x3ec3514, _Format="%c%c" | out: _Dest="7e") returned 2 [0179.892] sprintf (in: _Dest=0x3ec3516, _Format="%c%c" | out: _Dest="d3") returned 2 [0179.892] sprintf (in: _Dest=0x3ec3518, _Format="%c%c" | out: _Dest="8e") returned 2 [0179.892] sprintf (in: _Dest=0x3ec351a, _Format="%c%c" | out: _Dest="bc") returned 2 [0179.892] sprintf (in: _Dest=0x3ec351c, _Format="%c%c" | out: _Dest="25") returned 2 [0179.892] sprintf (in: _Dest=0x3ec351e, _Format="%c%c" | out: _Dest="78") returned 2 [0179.892] sprintf (in: _Dest=0x3ec3520, _Format="%c%c" | out: _Dest="2d") returned 2 [0179.892] sprintf (in: _Dest=0x3ec3522, _Format="%c%c" | out: _Dest="3e") returned 2 [0179.892] sprintf (in: _Dest=0x3ec3524, _Format="%c%c" | out: _Dest="32") returned 2 [0179.892] sprintf (in: _Dest=0x3ec3526, _Format="%c%c" | out: _Dest="de") returned 2 [0179.892] RtlInitAnsiString (in: DestinationString=0x9aef988, SourceString="a0bc7ed38ebc25782d3e32de" | out: DestinationString="a0bc7ed38ebc25782d3e32de") [0179.892] RtlAnsiStringToUnicodeString (in: DestinationString=0x9aef980, SourceString="a0bc7ed38ebc25782d3e32de", AllocateDestinationString=1 | out: DestinationString="a0bc7ed38ebc25782d3e32de") returned 0x0 [0179.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3e73df0 [0179.893] wcscat (in: _Dest=0x7a66400, _Source="a0bc7e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\a0bc7e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\a0bc7e" [0179.893] wcscat (in: _Dest=0x7a66400, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\a0bc7e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\a0bc7e.68814f" [0179.893] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\a0bc7e.68814f", NtPathName=0x9aef978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\a0bc7e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0179.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d56a10 [0179.896] FlushFileBuffers (hFile=0x1020) returned 1 [0179.945] CloseHandle (hObject=0x1020) returned 1 [0179.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x3eaf238 [0179.972] wcscpy (in: _Dest=0x3eaf238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0179.972] wcscat (in: _Dest=0x3eaf238, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" [0179.972] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\68814f-readme.txt")) returned 0xffffffff [0179.972] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x178c [0179.980] WriteFile (in: hFile=0x178c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9aef994, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9aef994*=0x8b9, lpOverlapped=0x0) returned 1 [0179.982] CloseHandle (hObject=0x178c) returned 1 [0179.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf238) returned 1 [0179.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 Thread: id = 4191 os_tid = 0x11e0 [0171.637] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3")) returned 0x2020 [0171.986] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", dwFileAttributes=0x20) returned 1 [0180.376] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd34 [0180.377] GetFileSizeEx (in: hFile=0xd34, lpFileSize=0xa76fe04 | out: lpFileSize=0xa76fe04*=4202496) returned 1 [0180.377] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x401ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.377] ReadFile (in: hFile=0xd34, lpBuffer=0xa76fde0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa76fdf0, lpOverlapped=0x0 | out: lpBuffer=0xa76fde0*, lpNumberOfBytesRead=0xa76fdf0*=0x4, lpOverlapped=0x0) returned 1 [0180.379] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0180.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0180.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0180.379] NtQuerySystemTime (in: CurrentTime=0xa76fd78 | out: CurrentTime=0xa76fd78*=132462177589620000) returned 0x0 [0180.379] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x36162a2d [0180.379] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x2352ed0c [0180.379] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x5a78888f [0180.379] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x604601bb [0180.379] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x32ded0c [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x6d534d98 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x6aa1c3fb [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x5e68adc0 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x2ad69f30 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x2d5ce157 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x498d114f [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x32a6969c [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x250214cf [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x6ea752f [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x3fb00b58 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0xa0380f [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x3d1b3f3 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x650c22da [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x5284f79e [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x4232cdb1 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x4132d408 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x150c9a33 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x46e52c41 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x382ec6cb [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x4852017e [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x54409368 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x291476e5 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x63e76611 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x37a17d28 [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x51d282b [0180.380] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x61e89806 [0180.381] RtlRandomEx (in: Seed=0xa76fd70 | out: Seed=0xa76fd70) returned 0x4c83fd8c [0180.392] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.392] ReadFile (in: hFile=0xd34, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa76fd78, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0xa76fd78*=0x3c00, lpOverlapped=0x0) returned 1 [0180.462] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x300858 [0180.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0180.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0180.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0180.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0180.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0180.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0180.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0180.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0180.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300858) returned 1 [0180.463] WriteFile (in: hFile=0xd34, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa76fd78, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0xa76fd78*=0x3c00, lpOverlapped=0x0) returned 1 [0180.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0180.868] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x201c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.869] ReadFile (in: hFile=0xd34, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa76fd78, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0xa76fd78*=0x3c00, lpOverlapped=0x0) returned 1 [0180.872] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x201c00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41968 [0180.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0180.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa88 [0180.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0180.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0180.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa88 [0180.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0180.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1e0) returned 1 [0180.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0180.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41968) returned 1 [0180.872] WriteFile (in: hFile=0xd34, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa76fd78, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0xa76fd78*=0x3c00, lpOverlapped=0x0) returned 1 [0189.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0189.740] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x3fe400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.740] ReadFile (in: hFile=0xd34, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xa76fd78, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0xa76fd78*=0x3c00, lpOverlapped=0x0) returned 1 [0189.746] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x3fe400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40e28 [0189.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0189.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e28 [0189.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e28) returned 1 [0189.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0189.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e28 [0189.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca738 [0189.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca738) returned 1 [0189.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0189.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40e28) returned 1 [0189.747] WriteFile (in: hFile=0xd34, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xa76fd78, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0xa76fd78*=0x3c00, lpOverlapped=0x0) returned 1 [0199.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0199.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1ec08 [0199.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0199.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5aa88 [0199.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0199.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0199.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0199.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0199.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e448) returned 1 [0199.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ea2ff8 [0199.372] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.372] WriteFile (in: hFile=0xd34, lpBuffer=0x3ea2ff8*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0xa76fdf8, lpOverlapped=0x0 | out: lpBuffer=0x3ea2ff8*, lpNumberOfBytesWritten=0xa76fdf8*=0x13e, lpOverlapped=0x0) returned 1 [0200.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0200.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0200.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc) returned 0x3dd0898 [0200.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0200.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0200.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0200.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x19) returned 0x3ec4af0 [0200.913] sprintf (in: _Dest=0x3ec4af0, _Format="%c%c" | out: _Dest="fb") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4af2, _Format="%c%c" | out: _Dest="76") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4af4, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4af6, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4af8, _Format="%c%c" | out: _Dest="43") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4afa, _Format="%c%c" | out: _Dest="8a") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4afc, _Format="%c%c" | out: _Dest="2a") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4afe, _Format="%c%c" | out: _Dest="38") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4b00, _Format="%c%c" | out: _Dest="ba") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4b02, _Format="%c%c" | out: _Dest="2d") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4b04, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.913] sprintf (in: _Dest=0x3ec4b06, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.913] RtlInitAnsiString (in: DestinationString=0xa76fd80, SourceString="fb76b6fc438a2a38ba2da6d9" | out: DestinationString="fb76b6fc438a2a38ba2da6d9") [0200.913] RtlAnsiStringToUnicodeString (in: DestinationString=0xa76fd78, SourceString="fb76b6fc438a2a38ba2da6d9", AllocateDestinationString=1 | out: DestinationString="fb76b6fc438a2a38ba2da6d9") returned 0x0 [0200.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x3066ac0 [0200.913] wcscat (in: _Dest=0x7a66f00, _Source="fb76b6" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\fb76b6") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\fb76b6" [0200.913] wcscat (in: _Dest=0x7a66f00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\fb76b6.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\fb76b6.68814f" [0200.913] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\fb76b6.68814f", NtPathName=0xa76fd70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\fb76b6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d56628 [0201.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56628) returned 1 [0201.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e940d0) returned 1 [0201.181] NtQueryInformationFile (in: FileHandle=0xd34, IoStatusBlock=0xa76fd48, FileInformation=0xa76fd50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa76fd48, FileInformation=0xa76fd50) returned 0x0 [0201.181] NtSetInformationFile (FileHandle=0xd34, IoStatusBlock=0xa76fd48, FileInformation=0xa76fd50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66f00) returned 1 [0201.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066ac0) returned 1 [0201.442] FlushFileBuffers (hFile=0xd34) returned 1 [0201.447] CloseHandle (hObject=0xd34) returned 1 [0208.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6d00 [0208.586] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0208.586] wcscat (in: _Dest=0x2ff6d00, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" [0208.586] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\68814f-readme.txt")) returned 0x2020 [0208.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 [0208.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63990) returned 1 Thread: id = 4192 os_tid = 0x11e4 [0171.638] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index")) returned 0x2020 [0172.199] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", dwFileAttributes=0x20) returned 1 [0174.930] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19d8 [0174.930] GetFileSizeEx (in: hFile=0x19d8, lpFileSize=0x893f784 | out: lpFileSize=0x893f784*=524656) returned 1 [0174.930] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x8016c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.930] ReadFile (in: hFile=0x19d8, lpBuffer=0x893f760, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x893f770, lpOverlapped=0x0 | out: lpBuffer=0x893f760*, lpNumberOfBytesRead=0x893f770*=0x4, lpOverlapped=0x0) returned 1 [0174.933] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0174.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0174.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0174.933] NtQuerySystemTime (in: CurrentTime=0x893f6f8 | out: CurrentTime=0x893f6f8*=132462177535176000) returned 0x0 [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x6d889e3c [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x1d6b53d9 [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x34a28323 [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x6919a31b [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x462b6a01 [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x4c64df7c [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x48a5791a [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x615c500d [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x42c916bb [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0xbda0142 [0174.933] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x3152c13d [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x2d010fb0 [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x32c467d5 [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x25fc6993 [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x5c58949b [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x570edd43 [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x341e7495 [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x6b7b491f [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x2daf269e [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x28073e6a [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x4c92c746 [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x5dc98187 [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x56a25a55 [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x5ac2b63d [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x3a9750df [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x82e6973 [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x1dadfccd [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x7de67e37 [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x6574ce1f [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x7557df2d [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x55144cab [0174.934] RtlRandomEx (in: Seed=0x893f6f0 | out: Seed=0x893f6f0) returned 0x165bf732 [0174.947] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.947] ReadFile (in: hFile=0x19d8, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x893f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0x893f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0177.312] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a246b0 [0177.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0177.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0177.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0177.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0177.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0177.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0177.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0177.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0177.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a246b0) returned 1 [0177.314] WriteFile (in: hFile=0x19d8, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x893f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0x893f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0180.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0180.625] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x43800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.625] ReadFile (in: hFile=0x19d8, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x893f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0x893f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0180.629] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x43800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85860 [0180.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f8a8 [0180.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0180.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0180.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0180.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0180.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0180.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0180.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0180.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85860) returned 1 [0180.630] WriteFile (in: hFile=0x19d8, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x893f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0x893f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0180.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0180.657] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x7c570, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.657] ReadFile (in: hFile=0x19d8, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x893f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0x893f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0180.658] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x7c570, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85860 [0180.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f8a8 [0180.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0180.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0180.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0180.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0180.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0180.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0180.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0180.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85860) returned 1 [0180.659] WriteFile (in: hFile=0x19d8, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x893f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0x893f6f8*=0x3c00, lpOverlapped=0x0) returned 1 [0181.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0181.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f5c8 [0181.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0181.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e809e0 [0181.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0181.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0181.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0181.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0181.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d412a8) returned 1 [0181.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ea2d68 [0181.287] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.287] WriteFile (in: hFile=0x19d8, lpBuffer=0x3ea2d68*, nNumberOfBytesToWrite=0x13c, lpNumberOfBytesWritten=0x893f778, lpOverlapped=0x0 | out: lpBuffer=0x3ea2d68*, lpNumberOfBytesWritten=0x893f778*=0x13c, lpOverlapped=0x0) returned 1 [0181.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40e70 [0181.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0181.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0181.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0181.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa) returned 0x3e43860 [0181.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0181.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0181.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0181.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0181.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40e70) returned 1 [0181.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15) returned 0x3e81640 [0181.719] sprintf (in: _Dest=0x3e81640, _Format="%c%c" | out: _Dest="d6") returned 2 [0181.719] sprintf (in: _Dest=0x3e81642, _Format="%c%c" | out: _Dest="73") returned 2 [0181.719] sprintf (in: _Dest=0x3e81644, _Format="%c%c" | out: _Dest="f5") returned 2 [0181.719] sprintf (in: _Dest=0x3e81646, _Format="%c%c" | out: _Dest="b1") returned 2 [0181.719] sprintf (in: _Dest=0x3e81648, _Format="%c%c" | out: _Dest="80") returned 2 [0181.719] sprintf (in: _Dest=0x3e8164a, _Format="%c%c" | out: _Dest="52") returned 2 [0181.719] sprintf (in: _Dest=0x3e8164c, _Format="%c%c" | out: _Dest="39") returned 2 [0181.719] sprintf (in: _Dest=0x3e8164e, _Format="%c%c" | out: _Dest="ed") returned 2 [0181.719] sprintf (in: _Dest=0x3e81650, _Format="%c%c" | out: _Dest="8b") returned 2 [0181.719] sprintf (in: _Dest=0x3e81652, _Format="%c%c" | out: _Dest="bf") returned 2 [0181.719] RtlInitAnsiString (in: DestinationString=0x893f700, SourceString="d673f5b1805239ed8bbf" | out: DestinationString="d673f5b1805239ed8bbf") [0181.719] RtlAnsiStringToUnicodeString (in: DestinationString=0x893f6f8, SourceString="d673f5b1805239ed8bbf", AllocateDestinationString=1 | out: DestinationString="d673f5b1805239ed8bbf") returned 0x0 [0181.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79100 [0181.720] wcscat (in: _Dest=0x7a66fb0, _Source="d673f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\d673f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\d673f" [0181.720] wcscat (in: _Dest=0x7a66fb0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\d673f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\d673f.68814f" [0181.720] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\d673f.68814f", NtPathName=0x893f6f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\d673f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0181.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57690 [0181.723] FlushFileBuffers (hFile=0x19d8) returned 1 [0181.724] CloseHandle (hObject=0x19d8) returned 1 [0181.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6180 [0181.725] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0181.725] wcscat (in: _Dest=0x2ff6180, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" [0181.726] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\cache\\68814f-readme.txt")) returned 0x2020 [0181.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 [0181.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 Thread: id = 4193 os_tid = 0x11e8 [0171.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor")) returned 0x20 [0171.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR", dwFileAttributes=0x20) returned 0 [0171.640] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.640] GetLastError () returned 0x5 [0171.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR", dwFileAttributes=0x20) returned 0 [0171.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66090) returned 1 Thread: id = 4194 os_tid = 0x11ec [0171.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb")) returned 0x20 [0171.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB", dwFileAttributes=0x20) returned 0 [0171.642] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.642] GetLastError () returned 0x5 [0171.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB", dwFileAttributes=0x20) returned 0 [0171.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66350) returned 1 Thread: id = 4195 os_tid = 0x11f0 [0171.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo")) returned 0x20 [0171.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", dwFileAttributes=0x20) returned 0 [0171.643] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.643] GetLastError () returned 0x5 [0171.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO", dwFileAttributes=0x20) returned 0 [0171.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a662a0) returned 1 Thread: id = 4196 os_tid = 0x11f8 [0171.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve")) returned 0x20 [0171.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE", dwFileAttributes=0x20) returned 0 [0171.645] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.645] GetLastError () returned 0x5 [0171.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE", dwFileAttributes=0x20) returned 0 [0171.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66b90) returned 1 Thread: id = 4197 os_tid = 0x11fc [0171.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg")) returned 0x20 [0175.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg", dwFileAttributes=0x20) returned 0 [0175.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.062] GetLastError () returned 0x5 [0175.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg", dwFileAttributes=0x20) returned 0 [0175.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66a30) returned 1 Thread: id = 4198 os_tid = 0x1200 [0171.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg")) returned 0x20 [0174.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0174.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.636] GetLastError () returned 0x5 [0174.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0174.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaec78) returned 1 Thread: id = 4199 os_tid = 0xb70 [0171.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg")) returned 0x20 [0174.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0174.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.898] GetLastError () returned 0x5 [0174.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0174.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf460) returned 1 Thread: id = 4200 os_tid = 0xb60 [0171.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg")) returned 0x20 [0174.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0174.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.889] GetLastError () returned 0x5 [0174.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg", dwFileAttributes=0x20) returned 0 [0174.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66c40) returned 1 Thread: id = 4201 os_tid = 0xb5c [0171.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg")) returned 0x20 [0174.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0174.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.884] GetLastError () returned 0x5 [0174.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg", dwFileAttributes=0x20) returned 0 [0174.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053528) returned 1 Thread: id = 4202 os_tid = 0x4bc [0171.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp")) returned 0x20 [0175.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp", dwFileAttributes=0x20) returned 0 [0175.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.050] GetLastError () returned 0x5 [0175.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp", dwFileAttributes=0x20) returned 0 [0175.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 Thread: id = 4203 os_tid = 0xac4 [0171.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp")) returned 0x20 [0174.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp", dwFileAttributes=0x20) returned 0 [0174.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.879] GetLastError () returned 0x5 [0174.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp", dwFileAttributes=0x20) returned 0 [0174.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eafad8) returned 1 Thread: id = 4204 os_tid = 0xa9c [0171.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg")) returned 0x20 [0174.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0174.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.950] GetLastError () returned 0x5 [0174.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0174.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eae998) returned 1 Thread: id = 4205 os_tid = 0xa5c [0171.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp")) returned 0x20 [0175.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0175.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.047] GetLastError () returned 0x5 [0175.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0175.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66618) returned 1 Thread: id = 4206 os_tid = 0x1204 [0171.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg")) returned 0x20 [0174.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg", dwFileAttributes=0x20) returned 0 [0174.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.927] GetLastError () returned 0x5 [0174.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg", dwFileAttributes=0x20) returned 0 [0174.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66820) returned 1 Thread: id = 4207 os_tid = 0x1208 [0171.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp")) returned 0x20 [0174.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0174.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.909] GetLastError () returned 0x5 [0174.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0174.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaebc0) returned 1 Thread: id = 4208 os_tid = 0x120c [0171.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg")) returned 0x20 [0175.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0175.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.045] GetLastError () returned 0x5 [0175.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0175.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf0c8) returned 1 Thread: id = 4209 os_tid = 0x121c [0171.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp")) returned 0x20 [0175.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0175.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.043] GetLastError () returned 0x5 [0175.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0175.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e666d8) returned 1 Thread: id = 4210 os_tid = 0xbdc [0171.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg")) returned 0x20 [0175.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg", dwFileAttributes=0x20) returned 0 [0175.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.041] GetLastError () returned 0x5 [0175.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg", dwFileAttributes=0x20) returned 0 [0175.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a637b0) returned 1 Thread: id = 4211 os_tid = 0x7f8 [0171.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp")) returned 0x20 [0174.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp", dwFileAttributes=0x20) returned 0 [0174.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.904] GetLastError () returned 0x5 [0174.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp", dwFileAttributes=0x20) returned 0 [0174.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053138) returned 1 Thread: id = 4212 os_tid = 0x1220 [0171.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg")) returned 0x20 [0175.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg", dwFileAttributes=0x20) returned 0 [0175.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.038] GetLastError () returned 0x5 [0175.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg", dwFileAttributes=0x20) returned 0 [0175.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66400) returned 1 Thread: id = 4213 os_tid = 0x78c [0171.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp")) returned 0x20 [0175.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0175.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.036] GetLastError () returned 0x5 [0175.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0175.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf688) returned 1 Thread: id = 4214 os_tid = 0x390 [0171.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg")) returned 0x20 [0174.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0174.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.991] GetLastError () returned 0x5 [0174.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg", dwFileAttributes=0x20) returned 0 [0174.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a666c0) returned 1 Thread: id = 4215 os_tid = 0x380 [0171.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp")) returned 0x20 [0174.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0174.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.984] GetLastError () returned 0x5 [0174.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0174.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaed30) returned 1 Thread: id = 4216 os_tid = 0x3a0 [0171.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp")) returned 0x20 [0174.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp", dwFileAttributes=0x20) returned 0 [0174.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.901] GetLastError () returned 0x5 [0174.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp", dwFileAttributes=0x20) returned 0 [0174.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053678) returned 1 Thread: id = 4217 os_tid = 0x101c [0171.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg")) returned 0x20 [0174.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg", dwFileAttributes=0x20) returned 0 [0174.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.977] GetLastError () returned 0x5 [0174.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg", dwFileAttributes=0x20) returned 0 [0174.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 Thread: id = 4218 os_tid = 0x1020 [0171.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp")) returned 0x20 [0174.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp", dwFileAttributes=0x20) returned 0 [0174.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.970] GetLastError () returned 0x5 [0174.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp", dwFileAttributes=0x20) returned 0 [0174.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66cf0) returned 1 Thread: id = 4219 os_tid = 0x684 [0171.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg")) returned 0x20 [0174.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG", dwFileAttributes=0x20) returned 0 [0174.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.864] GetLastError () returned 0x5 [0174.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG", dwFileAttributes=0x20) returned 0 [0174.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6e60) returned 1 Thread: id = 4220 os_tid = 0x3f0 [0171.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp")) returned 0x20 [0174.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp", dwFileAttributes=0x20) returned 0 [0174.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.859] GetLastError () returned 0x5 [0174.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp", dwFileAttributes=0x20) returned 0 [0174.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62bd0) returned 1 Thread: id = 4221 os_tid = 0x414 [0171.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp")) returned 0x20 [0174.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp", dwFileAttributes=0x20) returned 0 [0174.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.854] GetLastError () returned 0x5 [0174.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp", dwFileAttributes=0x20) returned 0 [0174.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 Thread: id = 4222 os_tid = 0x328 [0171.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp")) returned 0x20 [0174.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp", dwFileAttributes=0x20) returned 0 [0174.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.801] GetLastError () returned 0x5 [0174.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp", dwFileAttributes=0x20) returned 0 [0174.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57cd0) returned 1 Thread: id = 4223 os_tid = 0x48c [0171.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg")) returned 0x20 [0174.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg", dwFileAttributes=0x20) returned 0 [0174.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.964] GetLastError () returned 0x5 [0174.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg", dwFileAttributes=0x20) returned 0 [0174.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63df0) returned 1 Thread: id = 4224 os_tid = 0x6b8 [0171.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp")) returned 0x20 [0174.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp", dwFileAttributes=0x20) returned 0 [0174.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.764] GetLastError () returned 0x5 [0174.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp", dwFileAttributes=0x20) returned 0 [0174.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052df0) returned 1 Thread: id = 4225 os_tid = 0x7d4 [0171.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg")) returned 0x20 [0174.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg", dwFileAttributes=0x20) returned 0 [0174.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.957] GetLastError () returned 0x5 [0174.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg", dwFileAttributes=0x20) returned 0 [0174.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63850) returned 1 Thread: id = 4226 os_tid = 0x40c [0171.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg")) returned 0x20 [0175.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0175.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.052] GetLastError () returned 0x5 [0175.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0175.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66da0) returned 1 Thread: id = 4227 os_tid = 0x808 [0171.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx")) returned 0x20 [0171.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx", dwFileAttributes=0x20) returned 0 [0171.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0171.996] GetLastError () returned 0x5 [0171.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx", dwFileAttributes=0x20) returned 0 [0171.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 4228 os_tid = 0x818 [0172.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx")) returned 0x20 [0175.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx", dwFileAttributes=0x20) returned 0 [0175.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.489] GetLastError () returned 0x5 [0175.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx", dwFileAttributes=0x20) returned 0 [0175.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e7c8) returned 1 Thread: id = 4229 os_tid = 0x828 [0172.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx")) returned 0x20 [0175.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx", dwFileAttributes=0x20) returned 0 [0175.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.637] GetLastError () returned 0x5 [0175.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx", dwFileAttributes=0x20) returned 0 [0175.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f440) returned 1 Thread: id = 4230 os_tid = 0x848 [0172.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx")) returned 0x20 [0175.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx", dwFileAttributes=0x20) returned 0 [0175.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.632] GetLastError () returned 0x5 [0175.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx", dwFileAttributes=0x20) returned 0 [0175.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e720) returned 1 Thread: id = 4231 os_tid = 0x858 [0172.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx")) returned 0x20 [0174.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx", dwFileAttributes=0x20) returned 0 [0174.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.631] GetLastError () returned 0x5 [0175.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx", dwFileAttributes=0x20) returned 0 [0175.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 Thread: id = 4232 os_tid = 0x868 [0172.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx")) returned 0x20 [0175.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx", dwFileAttributes=0x20) returned 0 [0175.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.634] GetLastError () returned 0x5 [0175.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx", dwFileAttributes=0x20) returned 0 [0175.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e528) returned 1 Thread: id = 4233 os_tid = 0x878 [0172.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx")) returned 0x20 [0175.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx", dwFileAttributes=0x20) returned 0 [0175.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.635] GetLastError () returned 0x5 [0175.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx", dwFileAttributes=0x20) returned 0 [0175.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66b90) returned 1 Thread: id = 4234 os_tid = 0x888 [0172.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\update.timestamp")) returned 0x2020 [0172.010] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp", dwFileAttributes=0x20) returned 1 [0174.912] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\update.timestamp" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\update.timestamp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1104 [0174.912] GetFileSizeEx (in: hFile=0x1104, lpFileSize=0xa8eff14 | out: lpFileSize=0xa8eff14*=1) returned 1 [0174.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0174.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0174.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0174.912] NtQuerySystemTime (in: CurrentTime=0xa8efe88 | out: CurrentTime=0xa8efe88*=132462177534864000) returned 0x0 [0174.912] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x30373fcb [0174.912] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0xaf1d811 [0174.912] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x590c6da1 [0174.912] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x4ed2cb1e [0174.912] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x288bd56 [0174.912] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x3afece90 [0174.912] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x4bf46777 [0174.912] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x41d7f07a [0174.912] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x1e3bb9f7 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x2aabe91e [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x408921db [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x6f040eed [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x6b8b9d21 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x40936e10 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x17982c2 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x4ef22df1 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x765b9e54 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x5dc6acab [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x3eaf21b [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x752db79c [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x573c12d6 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0xb96a537 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x210ac30f [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x1e6ce744 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x38d55566 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x4fbc5253 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x25164875 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x5d65c838 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x3023e355 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x4ddc6694 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x2152f758 [0174.913] RtlRandomEx (in: Seed=0xa8efe80 | out: Seed=0xa8efe80) returned 0x29f20fc3 [0174.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b050) returned 1 [0174.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0174.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0174.923] ReadFile (in: hFile=0x1104, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xa8efe7c, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0xa8efe7c*=0x1, lpOverlapped=0x0) returned 1 [0174.926] SetFilePointerEx (in: hFile=0x1104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.926] WriteFile (in: hFile=0x1104, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0xa8efe80, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xa8efe80*=0x1, lpOverlapped=0x0) returned 1 [0180.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0180.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0180.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0180.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0180.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0180.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0180.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d414a0) returned 1 [0180.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79368 [0180.825] SetFilePointerEx (in: hFile=0x1104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.825] WriteFile (in: hFile=0x1104, lpBuffer=0x3d55278*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xa8eff08, lpOverlapped=0x0 | out: lpBuffer=0x3d55278*, lpNumberOfBytesWritten=0xa8eff08*=0x112, lpOverlapped=0x0) returned 1 [0182.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be1c0 [0182.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0182.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0182.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0182.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0182.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0182.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0182.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be1c0) returned 1 [0182.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e843f8 [0182.373] sprintf (in: _Dest=0x3e843f8, _Format="%c%c" | out: _Dest="25") returned 2 [0182.373] sprintf (in: _Dest=0x3e843fa, _Format="%c%c" | out: _Dest="ef") returned 2 [0182.373] sprintf (in: _Dest=0x3e843fc, _Format="%c%c" | out: _Dest="e5") returned 2 [0182.373] sprintf (in: _Dest=0x3e843fe, _Format="%c%c" | out: _Dest="24") returned 2 [0182.373] sprintf (in: _Dest=0x3e84400, _Format="%c%c" | out: _Dest="01") returned 2 [0182.373] sprintf (in: _Dest=0x3e84402, _Format="%c%c" | out: _Dest="df") returned 2 [0182.373] sprintf (in: _Dest=0x3e84404, _Format="%c%c" | out: _Dest="b4") returned 2 [0182.373] sprintf (in: _Dest=0x3e84406, _Format="%c%c" | out: _Dest="36") returned 2 [0182.373] sprintf (in: _Dest=0x3e84408, _Format="%c%c" | out: _Dest="ad") returned 2 [0182.373] sprintf (in: _Dest=0x3e8440a, _Format="%c%c" | out: _Dest="77") returned 2 [0182.373] sprintf (in: _Dest=0x3e8440c, _Format="%c%c" | out: _Dest="47") returned 2 [0182.373] sprintf (in: _Dest=0x3e8440e, _Format="%c%c" | out: _Dest="3e") returned 2 [0182.373] sprintf (in: _Dest=0x3e84410, _Format="%c%c" | out: _Dest="3d") returned 2 [0182.373] sprintf (in: _Dest=0x3e84412, _Format="%c%c" | out: _Dest="7a") returned 2 [0182.373] sprintf (in: _Dest=0x3e84414, _Format="%c%c" | out: _Dest="0a") returned 2 [0182.373] sprintf (in: _Dest=0x3e84416, _Format="%c%c" | out: _Dest="9d") returned 2 [0182.373] sprintf (in: _Dest=0x3e84418, _Format="%c%c" | out: _Dest="f4") returned 2 [0182.373] sprintf (in: _Dest=0x3e8441a, _Format="%c%c" | out: _Dest="36") returned 2 [0182.373] sprintf (in: _Dest=0x3e8441c, _Format="%c%c" | out: _Dest="d9") returned 2 [0182.373] sprintf (in: _Dest=0x3e8441e, _Format="%c%c" | out: _Dest="35") returned 2 [0182.373] sprintf (in: _Dest=0x3e84420, _Format="%c%c" | out: _Dest="44") returned 2 [0182.373] sprintf (in: _Dest=0x3e84422, _Format="%c%c" | out: _Dest="e3") returned 2 [0182.373] sprintf (in: _Dest=0x3e84424, _Format="%c%c" | out: _Dest="9a") returned 2 [0182.374] sprintf (in: _Dest=0x3e84426, _Format="%c%c" | out: _Dest="09") returned 2 [0182.374] sprintf (in: _Dest=0x3e84428, _Format="%c%c" | out: _Dest="04") returned 2 [0182.374] sprintf (in: _Dest=0x3e8442a, _Format="%c%c" | out: _Dest="ea") returned 2 [0182.374] sprintf (in: _Dest=0x3e8442c, _Format="%c%c" | out: _Dest="1f") returned 2 [0182.374] sprintf (in: _Dest=0x3e8442e, _Format="%c%c" | out: _Dest="dd") returned 2 [0182.374] sprintf (in: _Dest=0x3e84430, _Format="%c%c" | out: _Dest="b5") returned 2 [0182.374] sprintf (in: _Dest=0x3e84432, _Format="%c%c" | out: _Dest="52") returned 2 [0182.374] sprintf (in: _Dest=0x3e84434, _Format="%c%c" | out: _Dest="8a") returned 2 [0182.374] sprintf (in: _Dest=0x3e84436, _Format="%c%c" | out: _Dest="a0") returned 2 [0182.374] RtlInitAnsiString (in: DestinationString=0xa8efe90, SourceString="25efe52401dfb436ad77473e3d7a0a9df436d93544e39a0904ea1fddb5528aa0" | out: DestinationString="25efe52401dfb436ad77473e3d7a0a9df436d93544e39a0904ea1fddb5528aa0") [0182.374] RtlAnsiStringToUnicodeString (in: DestinationString=0xa8efe88, SourceString="25efe52401dfb436ad77473e3d7a0a9df436d93544e39a0904ea1fddb5528aa0", AllocateDestinationString=1 | out: DestinationString="25efe52401dfb436ad77473e3d7a0a9df436d93544e39a0904ea1fddb5528aa0") returned 0x0 [0182.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44570 [0182.374] wcscat (in: _Dest=0x2ff6180, _Source="25efe52401dfb436" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\25efe52401dfb436") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\25efe52401dfb436" [0182.374] wcscat (in: _Dest=0x2ff6180, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\25efe52401dfb436.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\25efe52401dfb436.68814f" [0182.374] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\25efe52401dfb436.68814f", NtPathName=0xa8efe80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\25efe52401dfb436.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d868e0 [0182.377] FlushFileBuffers (hFile=0x1104) returned 1 [0183.590] CloseHandle (hObject=0x1104) returned 1 [0184.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a67530 [0184.098] wcscpy (in: _Dest=0x7a67530, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\" [0184.098] wcscat (in: _Dest=0x7a67530, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt" [0184.098] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\locallow\\sun\\java\\deployment\\security\\68814f-readme.txt")) returned 0x2020 [0184.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67530) returned 1 [0184.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f050) returned 1 Thread: id = 4235 os_tid = 0x898 [0172.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld")) returned 0x20 [0172.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD", dwFileAttributes=0x20) returned 0 [0172.012] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.013] GetLastError () returned 0x5 [0172.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD", dwFileAttributes=0x20) returned 0 [0172.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 Thread: id = 4236 os_tid = 0x8a8 [0172.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld")) returned 0x20 [0172.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD", dwFileAttributes=0x20) returned 0 [0172.015] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.015] GetLastError () returned 0x5 [0172.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD", dwFileAttributes=0x20) returned 0 [0172.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60bd0) returned 1 Thread: id = 4237 os_tid = 0x8b8 [0172.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld")) returned 0x20 [0172.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD", dwFileAttributes=0x20) returned 0 [0172.017] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.017] GetLastError () returned 0x5 [0172.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD", dwFileAttributes=0x20) returned 0 [0172.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60a20) returned 1 Thread: id = 4238 os_tid = 0x8c8 [0172.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt")) returned 0x20 [0172.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", dwFileAttributes=0x20) returned 0 [0172.020] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.020] GetLastError () returned 0x5 [0172.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", dwFileAttributes=0x20) returned 0 [0172.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 Thread: id = 4239 os_tid = 0x8d8 [0172.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt")) returned 0x20 [0172.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", dwFileAttributes=0x20) returned 0 [0172.022] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.022] GetLastError () returned 0x5 [0172.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", dwFileAttributes=0x20) returned 0 [0172.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85220) returned 1 Thread: id = 4240 os_tid = 0x8f8 [0172.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt")) returned 0x20 [0172.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", dwFileAttributes=0x20) returned 0 [0172.024] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.024] GetLastError () returned 0x5 [0172.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", dwFileAttributes=0x20) returned 0 [0172.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 Thread: id = 4241 os_tid = 0x908 [0172.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt")) returned 0x20 [0174.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", dwFileAttributes=0x20) returned 0 [0174.632] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.633] GetLastError () returned 0x5 [0174.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", dwFileAttributes=0x20) returned 0 [0174.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d08) returned 1 Thread: id = 4242 os_tid = 0x918 [0172.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt")) returned 0x20 [0174.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0174.972] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.972] GetLastError () returned 0x5 [0174.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0174.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 Thread: id = 4243 os_tid = 0x928 [0172.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt")) returned 0x20 [0174.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", dwFileAttributes=0x20) returned 0 [0174.979] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.979] GetLastError () returned 0x5 [0174.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", dwFileAttributes=0x20) returned 0 [0174.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 Thread: id = 4244 os_tid = 0x938 [0172.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt")) returned 0x20 [0174.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", dwFileAttributes=0x20) returned 0 [0174.928] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.928] GetLastError () returned 0x5 [0174.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", dwFileAttributes=0x20) returned 0 [0174.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68c30) returned 1 Thread: id = 4245 os_tid = 0x948 [0172.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt")) returned 0x20 [0174.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0174.986] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.986] GetLastError () returned 0x5 [0174.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", dwFileAttributes=0x20) returned 0 [0174.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff88) returned 1 Thread: id = 4246 os_tid = 0x958 [0172.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt")) returned 0x20 [0174.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", dwFileAttributes=0x20) returned 0 [0174.911] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.911] GetLastError () returned 0x5 [0174.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", dwFileAttributes=0x20) returned 0 [0174.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 Thread: id = 4247 os_tid = 0x968 [0172.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt")) returned 0x20 [0174.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", dwFileAttributes=0x20) returned 0 [0174.905] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.906] GetLastError () returned 0x5 [0174.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", dwFileAttributes=0x20) returned 0 [0174.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68de0) returned 1 Thread: id = 4248 os_tid = 0x978 [0172.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt")) returned 0x20 [0174.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", dwFileAttributes=0x20) returned 0 [0174.902] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.902] GetLastError () returned 0x5 [0174.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", dwFileAttributes=0x20) returned 0 [0174.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d858a0) returned 1 Thread: id = 4249 os_tid = 0x988 [0172.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt")) returned 0x20 [0174.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", dwFileAttributes=0x20) returned 0 [0174.899] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.899] GetLastError () returned 0x5 [0174.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", dwFileAttributes=0x20) returned 0 [0174.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b58) returned 1 Thread: id = 4250 os_tid = 0x1228 [0172.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt")) returned 0x20 [0174.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", dwFileAttributes=0x20) returned 0 [0174.200] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.200] GetLastError () returned 0x5 [0174.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", dwFileAttributes=0x20) returned 0 [0174.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 Thread: id = 4251 os_tid = 0x122c [0172.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt")) returned 0x20 [0174.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", dwFileAttributes=0x20) returned 0 [0174.891] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.891] GetLastError () returned 0x5 [0174.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", dwFileAttributes=0x20) returned 0 [0174.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a80) returned 1 Thread: id = 4252 os_tid = 0x123c [0172.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt")) returned 0x20 [0174.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", dwFileAttributes=0x20) returned 0 [0174.966] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.966] GetLastError () returned 0x5 [0174.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", dwFileAttributes=0x20) returned 0 [0174.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85080) returned 1 Thread: id = 4253 os_tid = 0x9c8 [0172.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt")) returned 0x20 [0174.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", dwFileAttributes=0x20) returned 0 [0174.959] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.960] GetLastError () returned 0x5 [0174.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", dwFileAttributes=0x20) returned 0 [0174.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 4254 os_tid = 0x9d8 [0172.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt")) returned 0x20 [0174.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", dwFileAttributes=0x20) returned 0 [0174.886] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.886] GetLastError () returned 0x5 [0174.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", dwFileAttributes=0x20) returned 0 [0174.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852f0) returned 1 Thread: id = 4255 os_tid = 0x9e8 [0172.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt")) returned 0x20 [0174.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", dwFileAttributes=0x20) returned 0 [0174.880] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.881] GetLastError () returned 0x5 [0174.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", dwFileAttributes=0x20) returned 0 [0174.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 Thread: id = 4256 os_tid = 0xa08 [0172.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt")) returned 0x20 [0174.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0174.865] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.866] GetLastError () returned 0x5 [0174.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0174.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 4257 os_tid = 0xa18 [0172.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt")) returned 0x20 [0174.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", dwFileAttributes=0x20) returned 0 [0174.860] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.860] GetLastError () returned 0x5 [0174.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", dwFileAttributes=0x20) returned 0 [0174.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689a8) returned 1 Thread: id = 4258 os_tid = 0xa28 [0172.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt")) returned 0x20 [0174.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0174.856] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.856] GetLastError () returned 0x5 [0174.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0174.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 Thread: id = 4259 os_tid = 0xa38 [0172.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt")) returned 0x20 [0174.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", dwFileAttributes=0x20) returned 0 [0174.952] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.952] GetLastError () returned 0x5 [0174.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", dwFileAttributes=0x20) returned 0 [0174.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687f8) returned 1 Thread: id = 4260 os_tid = 0xa48 [0172.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt")) returned 0x20 [0174.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", dwFileAttributes=0x20) returned 0 [0174.809] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.809] GetLastError () returned 0x5 [0174.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", dwFileAttributes=0x20) returned 0 [0174.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d853c0) returned 1 Thread: id = 4261 os_tid = 0xa58 [0172.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt")) returned 0x20 [0174.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", dwFileAttributes=0x20) returned 0 [0174.797] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.797] GetLastError () returned 0x5 [0174.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", dwFileAttributes=0x20) returned 0 [0174.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67490) returned 1 Thread: id = 4262 os_tid = 0xa68 [0172.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x20 [0172.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x20) returned 0 [0172.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.205] GetLastError () returned 0x5 [0172.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x20) returned 0 [0172.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d638) returned 1 Thread: id = 4263 os_tid = 0xa78 [0172.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x20 [0174.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x20) returned 0 [0174.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.641] GetLastError () returned 0x5 [0174.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x20) returned 0 [0174.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 4264 os_tid = 0xa7c [0172.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x20 [0174.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x20) returned 0 [0174.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.848] GetLastError () returned 0x5 [0174.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x20) returned 0 [0174.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 4265 os_tid = 0x1240 [0172.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x20 [0174.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x20) returned 0 [0174.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.813] GetLastError () returned 0x5 [0174.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x20) returned 0 [0174.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 4266 os_tid = 0x1244 [0172.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x20 [0174.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x20) returned 0 [0174.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.893] GetLastError () returned 0x5 [0174.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x20) returned 0 [0174.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 4267 os_tid = 0x1248 [0172.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x20 [0174.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x20) returned 0 [0174.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.887] GetLastError () returned 0x5 [0174.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x20) returned 0 [0174.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 4268 os_tid = 0x124c [0172.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x20 [0174.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x20) returned 0 [0174.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.815] GetLastError () returned 0x5 [0174.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x20) returned 0 [0174.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 4269 os_tid = 0xda0 [0172.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x20 [0174.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x20) returned 0 [0174.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.817] GetLastError () returned 0x5 [0174.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x20) returned 0 [0174.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 4270 os_tid = 0xe34 [0172.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x20 [0174.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x20) returned 0 [0174.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.819] GetLastError () returned 0x5 [0174.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x20) returned 0 [0174.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 4271 os_tid = 0xe30 [0172.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x20 [0174.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x20) returned 0 [0174.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.820] GetLastError () returned 0x5 [0174.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x20) returned 0 [0174.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 4272 os_tid = 0xe2c [0172.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x20 [0174.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x20) returned 0 [0174.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.822] GetLastError () returned 0x5 [0174.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x20) returned 0 [0174.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c758) returned 1 Thread: id = 4273 os_tid = 0xe24 [0172.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x20 [0174.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x20) returned 0 [0174.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.824] GetLastError () returned 0x5 [0174.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x20) returned 0 [0174.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 4274 os_tid = 0xe18 [0172.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x20 [0174.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x20) returned 0 [0174.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.826] GetLastError () returned 0x5 [0174.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x20) returned 0 [0174.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 4275 os_tid = 0xe38 [0172.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x20 [0174.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x20) returned 0 [0174.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.828] GetLastError () returned 0x5 [0174.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x20) returned 0 [0174.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 4276 os_tid = 0xe10 [0172.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x20 [0174.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x20) returned 0 [0174.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.830] GetLastError () returned 0x5 [0174.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x20) returned 0 [0174.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 4277 os_tid = 0xe8c [0172.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x20 [0174.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x20) returned 0 [0174.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.831] GetLastError () returned 0x5 [0174.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x20) returned 0 [0174.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 4278 os_tid = 0xe04 [0172.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x20 [0174.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x20) returned 0 [0174.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.833] GetLastError () returned 0x5 [0174.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x20) returned 0 [0174.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 4279 os_tid = 0xdf0 [0172.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x20 [0174.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x20) returned 0 [0174.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.835] GetLastError () returned 0x5 [0174.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x20) returned 0 [0174.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 4280 os_tid = 0xe90 [0172.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x20 [0174.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x20) returned 0 [0174.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.858] GetLastError () returned 0x5 [0174.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x20) returned 0 [0174.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 4281 os_tid = 0xdf4 [0172.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x20 [0174.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x20) returned 0 [0174.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.837] GetLastError () returned 0x5 [0174.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x20) returned 0 [0174.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 4282 os_tid = 0xe08 [0172.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x20 [0174.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x20) returned 0 [0174.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.838] GetLastError () returned 0x5 [0174.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x20) returned 0 [0174.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 4283 os_tid = 0xde8 [0172.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x20 [0174.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x20) returned 0 [0174.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.862] GetLastError () returned 0x5 [0174.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x20) returned 0 [0174.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 4284 os_tid = 0xde4 [0172.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x20 [0174.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x20) returned 0 [0174.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.867] GetLastError () returned 0x5 [0174.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x20) returned 0 [0174.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 4285 os_tid = 0xeb0 [0172.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x20 [0174.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x20) returned 0 [0174.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.841] GetLastError () returned 0x5 [0174.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x20) returned 0 [0174.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 4286 os_tid = 0xdd0 [0172.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x20 [0174.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x20) returned 0 [0174.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.882] GetLastError () returned 0x5 [0174.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x20) returned 0 [0174.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 4287 os_tid = 0x1250 [0172.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x20 [0174.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x20) returned 0 [0174.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.639] GetLastError () returned 0x5 [0174.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x20) returned 0 [0174.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 Thread: id = 4288 os_tid = 0x1254 [0172.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x20 [0174.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x20) returned 0 [0174.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.811] GetLastError () returned 0x5 [0174.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x20) returned 0 [0174.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 4289 os_tid = 0x1258 [0172.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x20 [0174.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x20) returned 0 [0174.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.799] GetLastError () returned 0x5 [0174.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x20) returned 0 [0174.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 4290 os_tid = 0xe88 [0172.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita")) returned 0x20 [0172.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA", dwFileAttributes=0x20) returned 0 [0172.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.447] GetLastError () returned 0x5 [0172.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA", dwFileAttributes=0x20) returned 0 [0172.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63cb0) returned 1 Thread: id = 4291 os_tid = 0xee8 [0172.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita")) returned 0x20 [0174.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA", dwFileAttributes=0x20) returned 0 [0174.802] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.803] GetLastError () returned 0x5 [0174.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA", dwFileAttributes=0x20) returned 0 [0174.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60a20) returned 1 Thread: id = 4292 os_tid = 0xe84 [0172.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita")) returned 0x20 [0174.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA", dwFileAttributes=0x20) returned 0 [0174.795] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.796] GetLastError () returned 0x5 [0174.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA", dwFileAttributes=0x20) returned 0 [0174.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 4293 os_tid = 0xeac [0172.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita")) returned 0x20 [0174.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA", dwFileAttributes=0x20) returned 0 [0174.767] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.768] GetLastError () returned 0x5 [0174.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA", dwFileAttributes=0x20) returned 0 [0174.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60bd0) returned 1 Thread: id = 4294 os_tid = 0xde0 [0172.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita")) returned 0x20 [0174.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA", dwFileAttributes=0x20) returned 0 [0174.769] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.769] GetLastError () returned 0x5 [0174.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA", dwFileAttributes=0x20) returned 0 [0174.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6150) returned 1 Thread: id = 4295 os_tid = 0xe78 [0172.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita")) returned 0x20 [0174.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA", dwFileAttributes=0x20) returned 0 [0174.771] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.771] GetLastError () returned 0x5 [0174.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA", dwFileAttributes=0x20) returned 0 [0174.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b90) returned 1 Thread: id = 4296 os_tid = 0xe7c [0172.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita")) returned 0x20 [0174.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA", dwFileAttributes=0x20) returned 0 [0174.772] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.773] GetLastError () returned 0x5 [0174.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA", dwFileAttributes=0x20) returned 0 [0174.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60900) returned 1 Thread: id = 4297 os_tid = 0xe80 [0172.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita")) returned 0x20 [0174.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA", dwFileAttributes=0x20) returned 0 [0174.774] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.774] GetLastError () returned 0x5 [0174.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA", dwFileAttributes=0x20) returned 0 [0174.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d638) returned 1 Thread: id = 4298 os_tid = 0xe74 [0172.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita")) returned 0x20 [0174.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA", dwFileAttributes=0x20) returned 0 [0174.776] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.776] GetLastError () returned 0x5 [0174.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA", dwFileAttributes=0x20) returned 0 [0174.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61710) returned 1 Thread: id = 4299 os_tid = 0xe70 [0172.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita")) returned 0x20 [0174.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA", dwFileAttributes=0x20) returned 0 [0174.777] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.777] GetLastError () returned 0x5 [0174.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA", dwFileAttributes=0x20) returned 0 [0174.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60630) returned 1 Thread: id = 4300 os_tid = 0xeec [0172.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita")) returned 0x20 [0174.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA", dwFileAttributes=0x20) returned 0 [0174.757] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.757] GetLastError () returned 0x5 [0174.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA", dwFileAttributes=0x20) returned 0 [0174.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 4301 os_tid = 0xea8 [0172.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita")) returned 0x20 [0174.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA", dwFileAttributes=0x20) returned 0 [0174.779] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.779] GetLastError () returned 0x5 [0174.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA", dwFileAttributes=0x20) returned 0 [0174.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 4302 os_tid = 0xe9c [0172.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita")) returned 0x20 [0174.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA", dwFileAttributes=0x20) returned 0 [0174.781] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.781] GetLastError () returned 0x5 [0174.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA", dwFileAttributes=0x20) returned 0 [0174.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6a38) returned 1 Thread: id = 4303 os_tid = 0xea0 [0172.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita")) returned 0x20 [0174.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA", dwFileAttributes=0x20) returned 0 [0174.782] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.782] GetLastError () returned 0x5 [0174.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA", dwFileAttributes=0x20) returned 0 [0174.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a603f0) returned 1 Thread: id = 4304 os_tid = 0xea4 [0172.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita")) returned 0x20 [0174.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA", dwFileAttributes=0x20) returned 0 [0174.805] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.805] GetLastError () returned 0x5 [0174.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA", dwFileAttributes=0x20) returned 0 [0174.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b00) returned 1 Thread: id = 4305 os_tid = 0xe98 [0172.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita")) returned 0x20 [0174.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA", dwFileAttributes=0x20) returned 0 [0174.784] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.784] GetLastError () returned 0x5 [0174.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA", dwFileAttributes=0x20) returned 0 [0174.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60ab0) returned 1 Thread: id = 4306 os_tid = 0xe94 [0172.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita")) returned 0x20 [0174.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA", dwFileAttributes=0x20) returned 0 [0174.786] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.786] GetLastError () returned 0x5 [0174.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA", dwFileAttributes=0x20) returned 0 [0174.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad51e0) returned 1 Thread: id = 4307 os_tid = 0xe50 [0172.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita")) returned 0x20 [0174.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA", dwFileAttributes=0x20) returned 0 [0174.788] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.788] GetLastError () returned 0x5 [0174.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA", dwFileAttributes=0x20) returned 0 [0174.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61200) returned 1 Thread: id = 4308 os_tid = 0xe4c [0172.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita")) returned 0x20 [0174.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA", dwFileAttributes=0x20) returned 0 [0174.789] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.790] GetLastError () returned 0x5 [0174.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA", dwFileAttributes=0x20) returned 0 [0174.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d8) returned 1 Thread: id = 4309 os_tid = 0xe54 [0172.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita")) returned 0x20 [0174.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA", dwFileAttributes=0x20) returned 0 [0174.807] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.807] GetLastError () returned 0x5 [0174.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA", dwFileAttributes=0x20) returned 0 [0174.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60090) returned 1 Thread: id = 4310 os_tid = 0xe40 [0172.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita")) returned 0x20 [0174.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA", dwFileAttributes=0x20) returned 0 [0174.165] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.165] GetLastError () returned 0x5 [0174.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA", dwFileAttributes=0x20) returned 0 [0174.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60870) returned 1 Thread: id = 4311 os_tid = 0xe48 [0172.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x7a61cb0 [0172.464] wcscpy (in: _Dest=0x7a61cb0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0172.464] wcscat (in: _Dest=0x7a61cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\" [0172.464] wcscat (in: _Dest=0x7a61cb0, _Source="*" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*" [0172.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54240 [0172.464] FindFirstFileW (in: lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0174.791] wcscmp (_String1=".", _String2=".") returned 0 [0174.791] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd726b60, ftCreationTime.dwHighDateTime=0x1d2da17, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0xdd798f80, ftLastWriteTime.dwHighDateTime=0x1d2da17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.791] wcscmp (_String1="..", _String2=".") returned 1 [0174.791] wcscmp (_String1="..", _String2="..") returned 0 [0174.791] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd798f80, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0x8fdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0174.791] wcscmp (_String1="DEXShare.asfx", _String2=".") returned 1 [0174.791] wcscmp (_String1="DEXShare.asfx", _String2="..") returned 1 [0174.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3052df0 [0174.792] wcscpy (in: _Dest=0x3052df0, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0174.792] wcscat (in: _Dest=0x3052df0, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\" [0174.792] wcscat (in: _Dest=0x3052df0, _Source="DEXShare.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" [0175.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3052df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0175.820] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0175.820] wcscmp (_String1="Services.asfx", _String2=".") returned 1 [0175.820] wcscmp (_String1="Services.asfx", _String2="..") returned 1 [0175.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f440 [0175.820] wcscpy (in: _Dest=0x7a5f440, _Source="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services" [0175.820] wcscat (in: _Dest=0x7a5f440, _Source="\\" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\" [0175.820] wcscat (in: _Dest=0x7a5f440, _Source="Services.asfx" | out: _Dest="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx") returned="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" [0175.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0175.822] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75ad00, ftCreationTime.dwHighDateTime=0x1cb8519, ftLastAccessTime.dwLowDateTime=0xdd726b60, ftLastAccessTime.dwHighDateTime=0x1d2da17, ftLastWriteTime.dwLowDateTime=0x2b75ad00, ftLastWriteTime.dwHighDateTime=0x1cb8519, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0175.822] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0175.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54240) returned 1 [0175.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61cb0) returned 1 [0175.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 4312 os_tid = 0xe3c [0172.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita")) returned 0x20 [0174.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA", dwFileAttributes=0x20) returned 0 [0174.792] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.792] GetLastError () returned 0x5 [0174.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA", dwFileAttributes=0x20) returned 0 [0174.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a615f0) returned 1 Thread: id = 4313 os_tid = 0x150 [0172.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita")) returned 0x20 [0174.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA", dwFileAttributes=0x20) returned 0 [0174.794] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.794] GetLastError () returned 0x5 [0174.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA", dwFileAttributes=0x20) returned 0 [0174.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60240) returned 1 Thread: id = 4314 os_tid = 0x11c [0172.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita")) returned 0x20 [0174.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA", dwFileAttributes=0x20) returned 0 [0174.766] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.766] GetLastError () returned 0x5 [0174.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA", dwFileAttributes=0x20) returned 0 [0174.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a605a0) returned 1 Thread: id = 4315 os_tid = 0xef8 [0172.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d575c8 [0172.465] wcscpy (in: _Dest=0x3d575c8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn" [0172.465] wcscat (in: _Dest=0x3d575c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\" [0172.465] wcscat (in: _Dest=0x3d575c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\*" [0172.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.465] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nyn\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0172.466] wcscmp (_String1=".", _String2=".") returned 0 [0172.466] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.466] wcscmp (_String1="..", _String2=".") returned 1 [0172.466] wcscmp (_String1="..", _String2="..") returned 0 [0172.466] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe78c2770, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe78c2770, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe78c2770, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.466] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0172.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575c8) returned 1 [0172.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57b40) returned 1 Thread: id = 4316 os_tid = 0x530 [0172.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57b40 [0172.468] wcscpy (in: _Dest=0x3d57b40, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol" [0172.468] wcscat (in: _Dest=0x3d57b40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\" [0172.468] wcscat (in: _Dest=0x3d57b40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\*" [0172.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.468] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\pol\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0172.468] wcscmp (_String1=".", _String2=".") returned 0 [0172.468] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.468] wcscmp (_String1="..", _String2=".") returned 1 [0172.469] wcscmp (_String1="..", _String2="..") returned 0 [0172.469] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe946e730, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe946e730, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe946e730, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.469] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0172.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57b40) returned 1 [0172.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56880) returned 1 Thread: id = 4317 os_tid = 0x608 [0172.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56880 [0172.473] wcscpy (in: _Dest=0x3d56880, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" [0172.473] wcscat (in: _Dest=0x3d56880, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\" [0172.473] wcscat (in: _Dest=0x3d56880, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*" [0172.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.473] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0172.474] wcscmp (_String1=".", _String2=".") returned 0 [0172.474] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.474] wcscmp (_String1="..", _String2=".") returned 1 [0172.474] wcscmp (_String1="..", _String2="..") returned 0 [0172.474] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6675e50, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe6675e50, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe6675e50, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.474] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0172.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56880) returned 1 [0172.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 Thread: id = 4318 os_tid = 0x5c8 [0172.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57690 [0172.481] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum" [0172.481] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\" [0172.481] wcscat (in: _Dest=0x3d57690, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\*" [0172.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.481] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rum\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0172.481] wcscmp (_String1=".", _String2=".") returned 0 [0172.481] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.485] wcscmp (_String1="..", _String2=".") returned 1 [0172.485] wcscmp (_String1="..", _String2="..") returned 0 [0172.485] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9931330, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe9931330, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe9931330, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.485] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0172.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 [0172.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ba0) returned 1 Thread: id = 4319 os_tid = 0xf08 [0172.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57690 [0172.560] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus" [0172.560] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\" [0172.560] wcscat (in: _Dest=0x3d57690, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\*" [0172.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.560] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\rus\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0172.561] wcscmp (_String1=".", _String2=".") returned 0 [0172.561] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.561] wcscmp (_String1="..", _String2=".") returned 1 [0172.561] wcscmp (_String1="..", _String2="..") returned 0 [0172.561] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8698750, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe8698750, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe8698750, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.561] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0172.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 [0172.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d579b0) returned 1 Thread: id = 4320 os_tid = 0xf04 [0172.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d579b0 [0172.569] wcscpy (in: _Dest=0x3d579b0, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr" [0172.569] wcscat (in: _Dest=0x3d579b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\" [0172.569] wcscat (in: _Dest=0x3d579b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\*" [0172.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.569] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\sgr\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0172.569] wcscmp (_String1=".", _String2=".") returned 0 [0172.569] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.570] wcscmp (_String1="..", _String2=".") returned 1 [0172.570] wcscmp (_String1="..", _String2="..") returned 0 [0172.570] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7425cd0, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe7425cd0, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe7425cd0, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.570] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0172.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d579b0) returned 1 [0172.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ad8) returned 1 Thread: id = 4321 os_tid = 0xf00 [0172.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56ad8 [0172.571] wcscpy (in: _Dest=0x3d56ad8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo" [0172.571] wcscat (in: _Dest=0x3d56ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\" [0172.571] wcscat (in: _Dest=0x3d56ad8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\*" [0172.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.571] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\slo\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0172.572] wcscmp (_String1=".", _String2=".") returned 0 [0172.572] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.572] wcscmp (_String1="..", _String2=".") returned 1 [0172.572] wcscmp (_String1="..", _String2="..") returned 0 [0172.572] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb050250, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xeb050250, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xeb050250, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.572] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0172.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ad8) returned 1 [0172.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d578e8) returned 1 Thread: id = 4322 os_tid = 0x7ec [0172.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d578e8 [0172.573] wcscpy (in: _Dest=0x3d578e8, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" [0172.573] wcscat (in: _Dest=0x3d578e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\" [0172.574] wcscat (in: _Dest=0x3d578e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*" [0172.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.574] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0172.574] wcscmp (_String1=".", _String2=".") returned 0 [0172.574] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.574] wcscmp (_String1="..", _String2=".") returned 1 [0172.574] wcscmp (_String1="..", _String2="..") returned 0 [0172.574] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d8c430, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe3d8c430, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe3d8c430, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.574] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0172.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d578e8) returned 1 [0172.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a10) returned 1 Thread: id = 4323 os_tid = 0xef4 [0172.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56a10 [0172.576] wcscpy (in: _Dest=0x3d56a10, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" [0172.576] wcscat (in: _Dest=0x3d56a10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\" [0172.576] wcscat (in: _Dest=0x3d56a10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*" [0172.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.580] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0172.580] wcscmp (_String1=".", _String2=".") returned 0 [0172.580] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.581] wcscmp (_String1="..", _String2=".") returned 1 [0172.581] wcscmp (_String1="..", _String2="..") returned 0 [0172.581] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5429530, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xe5429530, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xe5429530, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.581] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0172.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a10) returned 1 [0172.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57820) returned 1 Thread: id = 4324 os_tid = 0xf2c [0172.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d57820 [0172.582] wcscpy (in: _Dest=0x3d57820, _Source="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur" [0172.582] wcscat (in: _Dest=0x3d57820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\" [0172.582] wcscat (in: _Dest=0x3d57820, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\*") returned="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\*" [0172.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.582] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\tur\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0172.582] wcscmp (_String1=".", _String2=".") returned 0 [0172.582] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.583] wcscmp (_String1="..", _String2=".") returned 1 [0172.583] wcscmp (_String1="..", _String2="..") returned 0 [0172.583] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea254110, ftCreationTime.dwHighDateTime=0x1d2da18, ftLastAccessTime.dwLowDateTime=0xea254110, ftLastAccessTime.dwHighDateTime=0x1d2da18, ftLastWriteTime.dwLowDateTime=0xea254110, ftLastWriteTime.dwHighDateTime=0x1d2da18, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.583] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0172.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57820) returned 1 [0172.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d567b8) returned 1 Thread: id = 4325 os_tid = 0xf40 [0172.584] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\Fv1v.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\fv1v.mkv")) returned 0x20 [0172.584] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\Fv1v.mkv", dwFileAttributes=0x20) returned 1 [0174.128] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\Fv1v.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\fv1v.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1788 [0174.128] GetFileSizeEx (in: hFile=0x1788, lpFileSize=0x9e6fc4c | out: lpFileSize=0x9e6fc4c*=6369) returned 1 [0174.128] SetFilePointerEx (in: hFile=0x1788, liDistanceToMove=0x18dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.128] ReadFile (in: hFile=0x1788, lpBuffer=0x9e6fc28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9e6fc38, lpOverlapped=0x0 | out: lpBuffer=0x9e6fc28*, lpNumberOfBytesRead=0x9e6fc38*=0x4, lpOverlapped=0x0) returned 1 [0174.130] SetFilePointerEx (in: hFile=0x1788, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0174.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0174.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52338 [0174.130] NtQuerySystemTime (in: CurrentTime=0x9e6fbc0 | out: CurrentTime=0x9e6fbc0*=132462177527064000) returned 0x0 [0174.130] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x25164875 [0174.130] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x615f6250 [0174.130] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x59708bdd [0174.130] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x2a1a375a [0174.130] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x6423f0ba [0174.130] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x4c2a8d0d [0174.130] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x51a30226 [0174.130] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x702ef362 [0174.130] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x4d17afb6 [0174.130] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x7b6c0d1f [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x1455a4ed [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x1033f7bb [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x20a1a35e [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x1586f9d9 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x49466bac [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x3b07f837 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0xc48ef97 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x1513dcaf [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x44e66868 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x6895a5bd [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x9303b0f [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x3f514802 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0xa15104 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x2d8eddcb [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x4d988d6 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x6a6b93fb [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x554c5f0a [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x3f5b2fb2 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x5fccec61 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x49af48a1 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x57cdee51 [0174.131] RtlRandomEx (in: Seed=0x9e6fbb8 | out: Seed=0x9e6fbb8) returned 0x46c554eb [0174.140] ReadFile (in: hFile=0x1788, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x18e1, lpNumberOfBytesRead=0x9e6fbb4, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0x9e6fbb4*=0x18e1, lpOverlapped=0x0) returned 1 [0174.140] SetFilePointerEx (in: hFile=0x1788, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.141] WriteFile (in: hFile=0x1788, lpBuffer=0x7bf9fa8*, nNumberOfBytesToWrite=0x18e1, lpNumberOfBytesWritten=0x9e6fbb8, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesWritten=0x9e6fbb8*=0x18e1, lpOverlapped=0x0) returned 1 [0174.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0174.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0174.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0174.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0174.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0174.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0174.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d407f8) returned 1 [0174.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5b5c8 [0174.198] SetFilePointerEx (in: hFile=0x1788, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.198] WriteFile (in: hFile=0x1788, lpBuffer=0x300dfd8*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x9e6fc40, lpOverlapped=0x0 | out: lpBuffer=0x300dfd8*, lpNumberOfBytesWritten=0x9e6fc40*=0x102, lpOverlapped=0x0) returned 1 [0174.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25bc0 [0174.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0174.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53da0 [0174.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53da0) returned 1 [0174.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0174.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53da0 [0174.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0174.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e525b8) returned 1 [0174.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0174.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25bc0) returned 1 [0174.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a374d0 [0174.214] sprintf (in: _Dest=0x7a374d0, _Format="%c%c" | out: _Dest="0e") returned 2 [0174.215] sprintf (in: _Dest=0x7a374d2, _Format="%c%c" | out: _Dest="37") returned 2 [0174.215] sprintf (in: _Dest=0x7a374d4, _Format="%c%c" | out: _Dest="2b") returned 2 [0174.215] sprintf (in: _Dest=0x7a374d6, _Format="%c%c" | out: _Dest="d6") returned 2 [0174.215] sprintf (in: _Dest=0x7a374d8, _Format="%c%c" | out: _Dest="63") returned 2 [0174.215] sprintf (in: _Dest=0x7a374da, _Format="%c%c" | out: _Dest="3a") returned 2 [0174.215] sprintf (in: _Dest=0x7a374dc, _Format="%c%c" | out: _Dest="85") returned 2 [0174.215] sprintf (in: _Dest=0x7a374de, _Format="%c%c" | out: _Dest="32") returned 2 [0174.215] sprintf (in: _Dest=0x7a374e0, _Format="%c%c" | out: _Dest="c9") returned 2 [0174.215] sprintf (in: _Dest=0x7a374e2, _Format="%c%c" | out: _Dest="ef") returned 2 [0174.215] sprintf (in: _Dest=0x7a374e4, _Format="%c%c" | out: _Dest="f3") returned 2 [0174.215] sprintf (in: _Dest=0x7a374e6, _Format="%c%c" | out: _Dest="9c") returned 2 [0174.215] sprintf (in: _Dest=0x7a374e8, _Format="%c%c" | out: _Dest="b2") returned 2 [0174.215] sprintf (in: _Dest=0x7a374ea, _Format="%c%c" | out: _Dest="1a") returned 2 [0174.215] sprintf (in: _Dest=0x7a374ec, _Format="%c%c" | out: _Dest="7b") returned 2 [0174.215] sprintf (in: _Dest=0x7a374ee, _Format="%c%c" | out: _Dest="b5") returned 2 [0174.215] RtlInitAnsiString (in: DestinationString=0x9e6fbc8, SourceString="0e372bd6633a8532c9eff39cb21a7bb5" | out: DestinationString="0e372bd6633a8532c9eff39cb21a7bb5") [0174.215] RtlAnsiStringToUnicodeString (in: DestinationString=0x9e6fbc0, SourceString="0e372bd6633a8532c9eff39cb21a7bb5", AllocateDestinationString=1 | out: DestinationString="0e372bd6633a8532c9eff39cb21a7bb5") returned 0x0 [0174.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e843f8 [0174.215] wcscat (in: _Dest=0x3de87b8, _Source="0e372bd6" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\0e372bd6") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\0e372bd6" [0174.215] wcscat (in: _Dest=0x3de87b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\0e372bd6.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\0e372bd6.68814f" [0174.215] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\0e372bd6.68814f", NtPathName=0x9e6fbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\0e372bd6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300dfd8 [0174.231] FlushFileBuffers (hFile=0x1788) returned 1 [0174.363] CloseHandle (hObject=0x1788) returned 1 [0179.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3de79b8 [0179.883] wcscpy (in: _Dest=0x3de79b8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0179.883] wcscat (in: _Dest=0x3de79b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" [0179.883] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\68814f-readme.txt")) returned 0x20 [0181.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de79b8) returned 1 [0181.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddf1f8) returned 1 Thread: id = 4326 os_tid = 0x15c [0172.584] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\lIWYl E LIyzq85Kh -.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\liwyl e liyzq85kh -.mp4")) returned 0x20 [0172.585] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\lIWYl E LIyzq85Kh -.mp4", dwFileAttributes=0x20) returned 1 [0173.952] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\lIWYl E LIyzq85Kh -.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\liwyl e liyzq85kh -.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1778 [0173.952] GetFileSizeEx (in: hFile=0x1778, lpFileSize=0xaabf7ac | out: lpFileSize=0xaabf7ac*=36253) returned 1 [0173.952] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x8d99, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.952] ReadFile (in: hFile=0x1778, lpBuffer=0xaabf788, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaabf798, lpOverlapped=0x0 | out: lpBuffer=0xaabf788*, lpNumberOfBytesRead=0xaabf798*=0x4, lpOverlapped=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0173.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0173.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535d0 [0173.954] NtQuerySystemTime (in: CurrentTime=0xaabf720 | out: CurrentTime=0xaabf720*=132462177525348000) returned 0x0 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x7fe99ba1 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x5e6eaa15 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x3ed43ad6 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x44a6bff [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x55aff119 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x231a95f5 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x235132e0 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x31dc9f15 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x7e4ad0c3 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x42aeb9bb [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x51ace467 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x63a8fd03 [0173.954] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x355f0a35 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x79a10bf5 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x7bd237ea [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x226d8de4 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x4d031eeb [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x43cb1241 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x36ecf8d5 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x6bbe3379 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x1ed0de2 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x34f40785 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x2f6861e4 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x2aa91db5 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x3d204a65 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x5c380a3c [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x6cbc95ac [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0xa281b6a [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x6e30b2c2 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x53853e05 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x69c43955 [0173.955] RtlRandomEx (in: Seed=0xaabf718 | out: Seed=0xaabf718) returned 0x1930e60 [0173.964] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.964] ReadFile (in: hFile=0x1778, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaabf720, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0xaabf720*=0x3c00, lpOverlapped=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851a0 [0173.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e418 [0173.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0173.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0173.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0173.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0173.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535d0 [0173.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535d0) returned 1 [0173.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0173.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851a0) returned 1 [0173.966] WriteFile (in: hFile=0x1778, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaabf720, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0xaabf720*=0x3c00, lpOverlapped=0x0) returned 1 [0174.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0174.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0174.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x7a25bc0 [0174.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0174.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x3e84fa8 [0174.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0174.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0174.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0174.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0174.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0174.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55bb8 [0174.185] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.185] WriteFile (in: hFile=0x1778, lpBuffer=0x3d55bb8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xaabf7a0, lpOverlapped=0x0 | out: lpBuffer=0x3d55bb8*, lpNumberOfBytesWritten=0xaabf7a0*=0x120, lpOverlapped=0x0) returned 1 [0174.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e078d8 [0174.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0174.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54138 [0174.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54138) returned 1 [0174.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79288 [0174.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54138 [0174.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0174.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d28) returned 1 [0174.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0174.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e078d8) returned 1 [0174.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5d) returned 0x3e1d8f0 [0174.208] sprintf (in: _Dest=0x3e1d8f0, _Format="%c%c" | out: _Dest="bc") returned 2 [0174.208] sprintf (in: _Dest=0x3e1d8f2, _Format="%c%c" | out: _Dest="b1") returned 2 [0174.208] sprintf (in: _Dest=0x3e1d8f4, _Format="%c%c" | out: _Dest="4c") returned 2 [0174.208] sprintf (in: _Dest=0x3e1d8f6, _Format="%c%c" | out: _Dest="93") returned 2 [0174.208] sprintf (in: _Dest=0x3e1d8f8, _Format="%c%c" | out: _Dest="8d") returned 2 [0174.208] sprintf (in: _Dest=0x3e1d8fa, _Format="%c%c" | out: _Dest="91") returned 2 [0174.208] sprintf (in: _Dest=0x3e1d8fc, _Format="%c%c" | out: _Dest="92") returned 2 [0174.208] sprintf (in: _Dest=0x3e1d8fe, _Format="%c%c" | out: _Dest="15") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d900, _Format="%c%c" | out: _Dest="04") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d902, _Format="%c%c" | out: _Dest="c3") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d904, _Format="%c%c" | out: _Dest="90") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d906, _Format="%c%c" | out: _Dest="5e") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d908, _Format="%c%c" | out: _Dest="f7") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d90a, _Format="%c%c" | out: _Dest="8c") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d90c, _Format="%c%c" | out: _Dest="02") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d90e, _Format="%c%c" | out: _Dest="46") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d910, _Format="%c%c" | out: _Dest="24") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d912, _Format="%c%c" | out: _Dest="c3") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d914, _Format="%c%c" | out: _Dest="a1") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d916, _Format="%c%c" | out: _Dest="0f") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d918, _Format="%c%c" | out: _Dest="0e") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d91a, _Format="%c%c" | out: _Dest="15") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d91c, _Format="%c%c" | out: _Dest="5d") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d91e, _Format="%c%c" | out: _Dest="45") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d920, _Format="%c%c" | out: _Dest="3f") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d922, _Format="%c%c" | out: _Dest="9b") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d924, _Format="%c%c" | out: _Dest="1c") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d926, _Format="%c%c" | out: _Dest="49") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d928, _Format="%c%c" | out: _Dest="92") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d92a, _Format="%c%c" | out: _Dest="ba") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d92c, _Format="%c%c" | out: _Dest="4c") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d92e, _Format="%c%c" | out: _Dest="bd") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d930, _Format="%c%c" | out: _Dest="c9") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d932, _Format="%c%c" | out: _Dest="22") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d934, _Format="%c%c" | out: _Dest="d8") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d936, _Format="%c%c" | out: _Dest="f8") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d938, _Format="%c%c" | out: _Dest="d7") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d93a, _Format="%c%c" | out: _Dest="f5") returned 2 [0174.209] sprintf (in: _Dest=0x3e1d93c, _Format="%c%c" | out: _Dest="80") returned 2 [0174.210] sprintf (in: _Dest=0x3e1d93e, _Format="%c%c" | out: _Dest="ea") returned 2 [0174.210] sprintf (in: _Dest=0x3e1d940, _Format="%c%c" | out: _Dest="f9") returned 2 [0174.210] sprintf (in: _Dest=0x3e1d942, _Format="%c%c" | out: _Dest="a3") returned 2 [0174.210] sprintf (in: _Dest=0x3e1d944, _Format="%c%c" | out: _Dest="f1") returned 2 [0174.210] sprintf (in: _Dest=0x3e1d946, _Format="%c%c" | out: _Dest="d8") returned 2 [0174.210] sprintf (in: _Dest=0x3e1d948, _Format="%c%c" | out: _Dest="74") returned 2 [0174.210] sprintf (in: _Dest=0x3e1d94a, _Format="%c%c" | out: _Dest="a0") returned 2 [0174.210] RtlInitAnsiString (in: DestinationString=0xaabf728, SourceString="bcb14c938d91921504c3905ef78c024624c3a10f0e155d453f9b1c4992ba4cbdc922d8f8d7f580eaf9a3f1d874a0" | out: DestinationString="bcb14c938d91921504c3905ef78c024624c3a10f0e155d453f9b1c4992ba4cbdc922d8f8d7f580eaf9a3f1d874a0") [0174.210] RtlAnsiStringToUnicodeString (in: DestinationString=0xaabf720, SourceString="bcb14c938d91921504c3905ef78c024624c3a10f0e155d453f9b1c4992ba4cbdc922d8f8d7f580eaf9a3f1d874a0", AllocateDestinationString=1 | out: DestinationString="bcb14c938d91921504c3905ef78c024624c3a10f0e155d453f9b1c4992ba4cbdc922d8f8d7f580eaf9a3f1d874a0") returned 0x0 [0174.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d566f0 [0174.210] wcscat (in: _Dest=0x3dec710, _Source="bcb14c938d91921504c3905" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bcb14c938d91921504c3905") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bcb14c938d91921504c3905" [0174.210] wcscat (in: _Dest=0x3dec710, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bcb14c938d91921504c3905.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bcb14c938d91921504c3905.68814f" [0174.210] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bcb14c938d91921504c3905.68814f", NtPathName=0xaabf718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bcb14c938d91921504c3905.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ec9a60 [0174.230] FlushFileBuffers (hFile=0x1778) returned 1 [0174.363] CloseHandle (hObject=0x1778) returned 1 [0179.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3de87b8 [0179.229] wcscpy (in: _Dest=0x3de87b8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0179.229] wcscat (in: _Dest=0x3de87b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" [0179.229] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\68814f-readme.txt")) returned 0x20 [0184.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de87b8) returned 1 [0184.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300d718) returned 1 Thread: id = 4327 os_tid = 0x5f4 [0172.585] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\mQ2Nk-kqL96Y5.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\mq2nk-kql96y5.mp4")) returned 0x20 [0172.585] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\mQ2Nk-kqL96Y5.mp4", dwFileAttributes=0x20) returned 1 [0173.936] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\mQ2Nk-kqL96Y5.mp4" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\mq2nk-kql96y5.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xce4 [0173.936] GetFileSizeEx (in: hFile=0xce4, lpFileSize=0xb3ef91c | out: lpFileSize=0xb3ef91c*=97002) returned 1 [0173.936] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x17ae6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.936] ReadFile (in: hFile=0xce4, lpBuffer=0xb3ef8f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb3ef908, lpOverlapped=0x0 | out: lpBuffer=0xb3ef8f8*, lpNumberOfBytesRead=0xb3ef908*=0x4, lpOverlapped=0x0) returned 1 [0173.938] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0173.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54048 [0173.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0173.938] NtQuerySystemTime (in: CurrentTime=0xb3ef890 | out: CurrentTime=0xb3ef890*=132462177525192000) returned 0x0 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x3e063c84 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x646ee784 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x3b0434bb [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x54a3d238 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x5c57bcf7 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x7fe49ba8 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x49a7b73 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x65231550 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x32cf2dca [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x646ee784 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x58a08f2f [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x6e741a7d [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x77e8d5e4 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x5f90c153 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0xc882c07 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x31793858 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x12a798e3 [0173.938] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0xc04da02 [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x4a74b7dc [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x1f813ca2 [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x42b54e7 [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x3bd622ea [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x238fbe73 [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x4983501b [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x72ad2878 [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x439760e4 [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x41871fa3 [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x46d77862 [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x3bb8b728 [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x235680c2 [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0xf7143ea [0173.939] RtlRandomEx (in: Seed=0xb3ef888 | out: Seed=0xb3ef888) returned 0x2ed00da4 [0173.950] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.950] ReadFile (in: hFile=0xce4, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb3ef890, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0xb3ef890*=0x3c00, lpOverlapped=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e851a0 [0173.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e418 [0173.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0173.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e541d8) returned 1 [0173.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0173.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0173.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0173.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540e8) returned 1 [0173.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0173.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851a0) returned 1 [0173.951] WriteFile (in: hFile=0xce4, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb3ef890, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0xb3ef890*=0x3c00, lpOverlapped=0x0) returned 1 [0174.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0174.182] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.182] ReadFile (in: hFile=0xce4, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb3ef890, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0xb3ef890*=0x3c00, lpOverlapped=0x0) returned 1 [0174.182] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25bc0 [0174.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0174.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0174.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0174.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0174.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0174.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0174.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0174.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0174.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25bc0) returned 1 [0174.183] WriteFile (in: hFile=0xce4, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb3ef890, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0xb3ef890*=0x3c00, lpOverlapped=0x0) returned 1 [0174.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0174.186] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x13eea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.186] ReadFile (in: hFile=0xce4, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb3ef890, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0xb3ef890*=0x3c00, lpOverlapped=0x0) returned 1 [0174.186] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x13eea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85398 [0174.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0174.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0174.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0174.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0174.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0174.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1b8 [0174.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b1b8) returned 1 [0174.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0174.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0174.187] WriteFile (in: hFile=0xce4, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb3ef890, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0xb3ef890*=0x3c00, lpOverlapped=0x0) returned 1 [0174.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0174.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1d958 [0174.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e541d8) returned 1 [0174.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79870 [0174.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0174.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0174.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0174.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0174.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24308) returned 1 [0174.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x154) returned 0x3dce108 [0174.190] SetFilePointerEx (in: hFile=0xce4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.190] WriteFile (in: hFile=0xce4, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0xb3ef910, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0xb3ef910*=0x154, lpOverlapped=0x0) returned 1 [0174.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25bc0 [0174.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0174.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d60 [0174.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52d60) returned 1 [0174.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a374d0 [0174.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d60 [0174.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0174.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52ea0) returned 1 [0174.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0174.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25bc0) returned 1 [0174.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x45) returned 0x3e84358 [0174.211] sprintf (in: _Dest=0x3e84358, _Format="%c%c" | out: _Dest="bc") returned 2 [0174.211] sprintf (in: _Dest=0x3e8435a, _Format="%c%c" | out: _Dest="90") returned 2 [0174.211] sprintf (in: _Dest=0x3e8435c, _Format="%c%c" | out: _Dest="fb") returned 2 [0174.211] sprintf (in: _Dest=0x3e8435e, _Format="%c%c" | out: _Dest="c0") returned 2 [0174.211] sprintf (in: _Dest=0x3e84360, _Format="%c%c" | out: _Dest="e5") returned 2 [0174.212] sprintf (in: _Dest=0x3e84362, _Format="%c%c" | out: _Dest="ed") returned 2 [0174.212] sprintf (in: _Dest=0x3e84364, _Format="%c%c" | out: _Dest="84") returned 2 [0174.212] sprintf (in: _Dest=0x3e84366, _Format="%c%c" | out: _Dest="87") returned 2 [0174.212] sprintf (in: _Dest=0x3e84368, _Format="%c%c" | out: _Dest="93") returned 2 [0174.212] sprintf (in: _Dest=0x3e8436a, _Format="%c%c" | out: _Dest="02") returned 2 [0174.212] sprintf (in: _Dest=0x3e8436c, _Format="%c%c" | out: _Dest="eb") returned 2 [0174.212] sprintf (in: _Dest=0x3e8436e, _Format="%c%c" | out: _Dest="a7") returned 2 [0174.212] sprintf (in: _Dest=0x3e84370, _Format="%c%c" | out: _Dest="66") returned 2 [0174.212] sprintf (in: _Dest=0x3e84372, _Format="%c%c" | out: _Dest="5b") returned 2 [0174.212] sprintf (in: _Dest=0x3e84374, _Format="%c%c" | out: _Dest="e4") returned 2 [0174.212] sprintf (in: _Dest=0x3e84376, _Format="%c%c" | out: _Dest="10") returned 2 [0174.212] sprintf (in: _Dest=0x3e84378, _Format="%c%c" | out: _Dest="9c") returned 2 [0174.212] sprintf (in: _Dest=0x3e8437a, _Format="%c%c" | out: _Dest="bb") returned 2 [0174.212] sprintf (in: _Dest=0x3e8437c, _Format="%c%c" | out: _Dest="4f") returned 2 [0174.212] sprintf (in: _Dest=0x3e8437e, _Format="%c%c" | out: _Dest="46") returned 2 [0174.212] sprintf (in: _Dest=0x3e84380, _Format="%c%c" | out: _Dest="0c") returned 2 [0174.212] sprintf (in: _Dest=0x3e84382, _Format="%c%c" | out: _Dest="1c") returned 2 [0174.212] sprintf (in: _Dest=0x3e84384, _Format="%c%c" | out: _Dest="a4") returned 2 [0174.212] sprintf (in: _Dest=0x3e84386, _Format="%c%c" | out: _Dest="00") returned 2 [0174.212] sprintf (in: _Dest=0x3e84388, _Format="%c%c" | out: _Dest="cb") returned 2 [0174.212] sprintf (in: _Dest=0x3e8438a, _Format="%c%c" | out: _Dest="63") returned 2 [0174.212] sprintf (in: _Dest=0x3e8438c, _Format="%c%c" | out: _Dest="b7") returned 2 [0174.212] sprintf (in: _Dest=0x3e8438e, _Format="%c%c" | out: _Dest="b2") returned 2 [0174.212] sprintf (in: _Dest=0x3e84390, _Format="%c%c" | out: _Dest="2a") returned 2 [0174.212] sprintf (in: _Dest=0x3e84392, _Format="%c%c" | out: _Dest="18") returned 2 [0174.212] sprintf (in: _Dest=0x3e84394, _Format="%c%c" | out: _Dest="1f") returned 2 [0174.212] sprintf (in: _Dest=0x3e84396, _Format="%c%c" | out: _Dest="17") returned 2 [0174.212] sprintf (in: _Dest=0x3e84398, _Format="%c%c" | out: _Dest="29") returned 2 [0174.212] sprintf (in: _Dest=0x3e8439a, _Format="%c%c" | out: _Dest="37") returned 2 [0174.212] RtlInitAnsiString (in: DestinationString=0xb3ef898, SourceString="bc90fbc0e5ed84879302eba7665be4109cbb4f460c1ca400cb63b7b22a181f172937" | out: DestinationString="bc90fbc0e5ed84879302eba7665be4109cbb4f460c1ca400cb63b7b22a181f172937") [0174.212] RtlAnsiStringToUnicodeString (in: DestinationString=0xb3ef890, SourceString="bc90fbc0e5ed84879302eba7665be4109cbb4f460c1ca400cb63b7b22a181f172937", AllocateDestinationString=1 | out: DestinationString="bc90fbc0e5ed84879302eba7665be4109cbb4f460c1ca400cb63b7b22a181f172937") returned 0x0 [0174.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6740 [0174.213] wcscat (in: _Dest=0x3dec940, _Source="bc90fbc0e5ed84879" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bc90fbc0e5ed84879") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bc90fbc0e5ed84879" [0174.213] wcscat (in: _Dest=0x3dec940, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bc90fbc0e5ed84879.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bc90fbc0e5ed84879.68814f" [0174.213] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bc90fbc0e5ed84879.68814f", NtPathName=0xb3ef888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\bc90fbc0e5ed84879.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55bb8 [0174.233] FlushFileBuffers (hFile=0xce4) returned 1 [0174.363] CloseHandle (hObject=0xce4) returned 1 [0179.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3de73b8 [0179.885] wcscpy (in: _Dest=0x3de73b8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0179.885] wcscat (in: _Dest=0x3de73b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" [0179.885] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\68814f-readme.txt")) returned 0x20 [0183.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de73b8) returned 1 [0183.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de8eb8) returned 1 Thread: id = 4328 os_tid = 0x778 [0172.585] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\o9q8.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\o9q8.mkv")) returned 0x20 [0172.585] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\o9q8.mkv", dwFileAttributes=0x20) returned 1 [0173.922] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\o9q8.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\o9q8.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17e8 [0173.922] GetFileSizeEx (in: hFile=0x17e8, lpFileSize=0xa30fa24 | out: lpFileSize=0xa30fa24*=6353) returned 1 [0173.922] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x18cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.922] ReadFile (in: hFile=0x17e8, lpBuffer=0xa30fa00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa30fa10, lpOverlapped=0x0 | out: lpBuffer=0xa30fa00*, lpNumberOfBytesRead=0xa30fa10*=0x4, lpOverlapped=0x0) returned 1 [0173.924] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0173.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f80 [0173.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54048 [0173.924] NtQuerySystemTime (in: CurrentTime=0xa30f998 | out: CurrentTime=0xa30f998*=132462177525036000) returned 0x0 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x455c602c [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x5ecc162 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0xc4f3f37 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x370bfdb3 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x264bc7c2 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x1cb2e2d0 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x397af9dd [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x2d9a54ee [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x73db5e3 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x2a2fcc5d [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x2a2fcc5d [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x2d2351ad [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x6c5e41a2 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x7e4ad0c3 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x1756f0c [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x40f477f [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x31b6f30a [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x2676a082 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x5929baf8 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x492e124e [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x755a6e31 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x1756f0c [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x26a17942 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x76d41867 [0173.924] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x1d4b659 [0173.925] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x66a366e [0173.925] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x3623eea2 [0173.925] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x22fd5521 [0173.925] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x6a5835d1 [0173.925] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x23273cfe [0173.925] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x1c58cd1 [0173.925] RtlRandomEx (in: Seed=0xa30f990 | out: Seed=0xa30f990) returned 0x10e750bf [0173.935] ReadFile (in: hFile=0x17e8, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x18d1, lpNumberOfBytesRead=0xa30f98c, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xa30f98c*=0x18d1, lpOverlapped=0x0) returned 1 [0173.935] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.935] WriteFile (in: hFile=0x17e8, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x18d1, lpNumberOfBytesWritten=0xa30f990, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0xa30f990*=0x18d1, lpOverlapped=0x0) returned 1 [0174.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0174.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0174.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0174.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0174.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0174.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0174.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25bc0) returned 1 [0174.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5ad30 [0174.180] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.180] WriteFile (in: hFile=0x17e8, lpBuffer=0x300d948*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xa30fa18, lpOverlapped=0x0 | out: lpBuffer=0x300d948*, lpNumberOfBytesWritten=0xa30fa18*=0x102, lpOverlapped=0x0) returned 1 [0174.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e078d8 [0174.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0174.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0174.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d78) returned 1 [0174.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10) returned 0x7ad93e8 [0174.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0174.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0174.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53058) returned 1 [0174.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0174.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e078d8) returned 1 [0174.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x21) returned 0x7a374d0 [0174.206] sprintf (in: _Dest=0x7a374d0, _Format="%c%c" | out: _Dest="d9") returned 2 [0174.206] sprintf (in: _Dest=0x7a374d2, _Format="%c%c" | out: _Dest="55") returned 2 [0174.206] sprintf (in: _Dest=0x7a374d4, _Format="%c%c" | out: _Dest="22") returned 2 [0174.206] sprintf (in: _Dest=0x7a374d6, _Format="%c%c" | out: _Dest="8c") returned 2 [0174.206] sprintf (in: _Dest=0x7a374d8, _Format="%c%c" | out: _Dest="a7") returned 2 [0174.206] sprintf (in: _Dest=0x7a374da, _Format="%c%c" | out: _Dest="10") returned 2 [0174.206] sprintf (in: _Dest=0x7a374dc, _Format="%c%c" | out: _Dest="e7") returned 2 [0174.206] sprintf (in: _Dest=0x7a374de, _Format="%c%c" | out: _Dest="f0") returned 2 [0174.206] sprintf (in: _Dest=0x7a374e0, _Format="%c%c" | out: _Dest="f3") returned 2 [0174.206] sprintf (in: _Dest=0x7a374e2, _Format="%c%c" | out: _Dest="53") returned 2 [0174.206] sprintf (in: _Dest=0x7a374e4, _Format="%c%c" | out: _Dest="4b") returned 2 [0174.206] sprintf (in: _Dest=0x7a374e6, _Format="%c%c" | out: _Dest="c0") returned 2 [0174.206] sprintf (in: _Dest=0x7a374e8, _Format="%c%c" | out: _Dest="51") returned 2 [0174.207] sprintf (in: _Dest=0x7a374ea, _Format="%c%c" | out: _Dest="e7") returned 2 [0174.207] sprintf (in: _Dest=0x7a374ec, _Format="%c%c" | out: _Dest="52") returned 2 [0174.207] sprintf (in: _Dest=0x7a374ee, _Format="%c%c" | out: _Dest="2e") returned 2 [0174.207] RtlInitAnsiString (in: DestinationString=0xa30f9a0, SourceString="d955228ca710e7f0f3534bc051e7522e" | out: DestinationString="d955228ca710e7f0f3534bc051e7522e") [0174.207] RtlAnsiStringToUnicodeString (in: DestinationString=0xa30f998, SourceString="d955228ca710e7f0f3534bc051e7522e", AllocateDestinationString=1 | out: DestinationString="d955228ca710e7f0f3534bc051e7522e") returned 0x0 [0174.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84308 [0174.207] wcscat (in: _Dest=0x3de79b8, _Source="d955228c" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\d955228c") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\d955228c" [0174.207] wcscat (in: _Dest=0x3de79b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\d955228c.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\d955228c.68814f" [0174.207] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\d955228c.68814f", NtPathName=0xa30f990, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\d955228c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300d948 [0174.228] FlushFileBuffers (hFile=0x17e8) returned 1 [0174.362] CloseHandle (hObject=0x17e8) returned 1 [0177.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3de74b8 [0177.364] wcscpy (in: _Dest=0x3de74b8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0177.364] wcscat (in: _Dest=0x3de74b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" [0177.364] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\68814f-readme.txt")) returned 0x20 [0184.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de74b8) returned 1 [0184.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafe98) returned 1 Thread: id = 4329 os_tid = 0x300 [0172.586] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\XIvqTqzjEelWAyDuhw.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\xivqtqzjeelwayduhw.mkv")) returned 0x20 [0172.586] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\XIvqTqzjEelWAyDuhw.mkv", dwFileAttributes=0x20) returned 1 [0173.909] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\XIvqTqzjEelWAyDuhw.mkv" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\xivqtqzjeelwayduhw.mkv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17e4 [0173.909] GetFileSizeEx (in: hFile=0x17e4, lpFileSize=0xae6fd64 | out: lpFileSize=0xae6fd64*=69259) returned 1 [0173.909] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x10e87, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.909] ReadFile (in: hFile=0x17e4, lpBuffer=0xae6fd40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xae6fd50, lpOverlapped=0x0 | out: lpBuffer=0xae6fd40*, lpNumberOfBytesRead=0xae6fd50*=0x4, lpOverlapped=0x0) returned 1 [0173.911] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0173.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53dc8 [0173.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0173.911] NtQuerySystemTime (in: CurrentTime=0xae6fcd8 | out: CurrentTime=0xae6fcd8*=132462177524880000) returned 0x0 [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x4ba8b69a [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x39af8a7f [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x3fe9bf29 [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x6fd32743 [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x65be30eb [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x5f052a88 [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x1b74de9a [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x2b353c58 [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x716d499b [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x274b1616 [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x3fa44041 [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x7da935cc [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x40b86f66 [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x429efe1a [0173.911] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x60f47101 [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0xe14d906 [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x64c75eaf [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x77f3262a [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x8a3a134 [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x2f6063c9 [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x32710892 [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x6ce35fae [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x6703b474 [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x1e4f2f6d [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x17a4218d [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x8217485 [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x64c235e2 [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x24a56e1e [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x7fa4c412 [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x15093fdb [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x1af9d21c [0173.912] RtlRandomEx (in: Seed=0xae6fcd0 | out: Seed=0xae6fcd0) returned 0x679bc739 [0173.920] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.920] ReadFile (in: hFile=0x17e4, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xae6fcd8, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0xae6fcd8*=0x3c00, lpOverlapped=0x0) returned 1 [0173.921] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25bc0 [0173.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0173.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0173.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0173.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0173.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0173.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0173.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e541d8) returned 1 [0173.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0173.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25bc0) returned 1 [0173.921] WriteFile (in: hFile=0x17e4, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xae6fcd8, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0xae6fcd8*=0x3c00, lpOverlapped=0x0) returned 1 [0174.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0174.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0174.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e078d8 [0174.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0174.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e07f50 [0174.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0174.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0174.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0174.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 [0174.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07890) returned 1 [0174.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d55e08 [0174.177] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.177] WriteFile (in: hFile=0x17e4, lpBuffer=0x3d55e08*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xae6fd58, lpOverlapped=0x0 | out: lpBuffer=0x3d55e08*, lpNumberOfBytesWritten=0xae6fd58*=0x11e, lpOverlapped=0x0) returned 1 [0174.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41380 [0174.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0174.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0174.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0174.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79288 [0174.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0174.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0174.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0174.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0174.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41380) returned 1 [0174.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1d8f0 [0174.203] sprintf (in: _Dest=0x3e1d8f0, _Format="%c%c" | out: _Dest="4b") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d8f2, _Format="%c%c" | out: _Dest="78") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d8f4, _Format="%c%c" | out: _Dest="6a") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d8f6, _Format="%c%c" | out: _Dest="c2") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d8f8, _Format="%c%c" | out: _Dest="53") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d8fa, _Format="%c%c" | out: _Dest="8f") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d8fc, _Format="%c%c" | out: _Dest="58") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d8fe, _Format="%c%c" | out: _Dest="41") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d900, _Format="%c%c" | out: _Dest="26") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d902, _Format="%c%c" | out: _Dest="31") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d904, _Format="%c%c" | out: _Dest="02") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d906, _Format="%c%c" | out: _Dest="1c") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d908, _Format="%c%c" | out: _Dest="4a") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d90a, _Format="%c%c" | out: _Dest="51") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d90c, _Format="%c%c" | out: _Dest="c7") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d90e, _Format="%c%c" | out: _Dest="73") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d910, _Format="%c%c" | out: _Dest="20") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d912, _Format="%c%c" | out: _Dest="7d") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d914, _Format="%c%c" | out: _Dest="11") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d916, _Format="%c%c" | out: _Dest="c6") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d918, _Format="%c%c" | out: _Dest="b5") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d91a, _Format="%c%c" | out: _Dest="f8") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d91c, _Format="%c%c" | out: _Dest="5b") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d91e, _Format="%c%c" | out: _Dest="b9") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d920, _Format="%c%c" | out: _Dest="db") returned 2 [0174.203] sprintf (in: _Dest=0x3e1d922, _Format="%c%c" | out: _Dest="88") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d924, _Format="%c%c" | out: _Dest="fd") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d926, _Format="%c%c" | out: _Dest="c6") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d928, _Format="%c%c" | out: _Dest="e9") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d92a, _Format="%c%c" | out: _Dest="6c") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d92c, _Format="%c%c" | out: _Dest="51") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d92e, _Format="%c%c" | out: _Dest="8b") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d930, _Format="%c%c" | out: _Dest="38") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d932, _Format="%c%c" | out: _Dest="73") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d934, _Format="%c%c" | out: _Dest="62") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d936, _Format="%c%c" | out: _Dest="bb") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d938, _Format="%c%c" | out: _Dest="87") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d93a, _Format="%c%c" | out: _Dest="98") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d93c, _Format="%c%c" | out: _Dest="b4") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d93e, _Format="%c%c" | out: _Dest="e4") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d940, _Format="%c%c" | out: _Dest="48") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d942, _Format="%c%c" | out: _Dest="4f") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d944, _Format="%c%c" | out: _Dest="5c") returned 2 [0174.204] sprintf (in: _Dest=0x3e1d946, _Format="%c%c" | out: _Dest="a0") returned 2 [0174.204] RtlInitAnsiString (in: DestinationString=0xae6fce0, SourceString="4b786ac2538f58412631021c4a51c773207d11c6b5f85bb9db88fdc6e96c518b387362bb8798b4e4484f5ca0" | out: DestinationString="4b786ac2538f58412631021c4a51c773207d11c6b5f85bb9db88fdc6e96c518b387362bb8798b4e4484f5ca0") [0174.204] RtlAnsiStringToUnicodeString (in: DestinationString=0xae6fcd8, SourceString="4b786ac2538f58412631021c4a51c773207d11c6b5f85bb9db88fdc6e96c518b387362bb8798b4e4484f5ca0", AllocateDestinationString=1 | out: DestinationString="4b786ac2538f58412631021c4a51c773207d11c6b5f85bb9db88fdc6e96c518b387362bb8798b4e4484f5ca0") returned 0x0 [0174.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333a68 [0174.204] wcscat (in: _Dest=0x3dec4e0, _Source="4b786ac2538f5841263102" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\4b786ac2538f5841263102") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\4b786ac2538f5841263102" [0174.204] wcscat (in: _Dest=0x3dec4e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\4b786ac2538f5841263102.68814f") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\4b786ac2538f5841263102.68814f" [0174.204] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\4b786ac2538f5841263102.68814f", NtPathName=0xae6fcd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\4b786ac2538f5841263102.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0174.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9f40 [0174.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9f40) returned 1 [0174.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cec1e8) returned 1 [0174.223] NtQueryInformationFile (in: FileHandle=0x17e4, IoStatusBlock=0xae6fca8, FileInformation=0xae6fcb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xae6fca8, FileInformation=0xae6fcb0) returned 0x0 [0174.223] NtSetInformationFile (FileHandle=0x17e4, IoStatusBlock=0xae6fca8, FileInformation=0xae6fcb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0174.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 [0174.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 [0174.225] FlushFileBuffers (hFile=0x17e4) returned 1 [0174.362] CloseHandle (hObject=0x17e4) returned 1 [0177.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3de76b8 [0177.362] wcscpy (in: _Dest=0x3de76b8, _Source="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\" [0177.362] wcscat (in: _Dest=0x3de76b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" [0177.362] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\68814f-readme.txt")) returned 0xffffffff [0177.362] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\Videos\\-ixq1 4vSzRQo_\\NIJqOm_Lj-UMW5\\yS5ChHZYrDyBo\\BUxnLWvnq87VKLk\\rKl4yD\\BLE_6lErO8pgm\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\videos\\-ixq1 4vszrqo_\\nijqom_lj-umw5\\ys5chhzyrdybo\\buxnlwvnq87vklk\\rkl4yd\\ble_6lero8pgm\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1818 [0180.514] WriteFile (in: hFile=0x1818, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xae6fcec, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xae6fcec*=0x8b9, lpOverlapped=0x0) returned 1 [0182.463] CloseHandle (hObject=0x1818) returned 1 [0185.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de76b8) returned 1 [0185.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f97f0) returned 1 Thread: id = 4330 os_tid = 0x7c8 [0172.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35b718 [0172.586] wcscpy (in: _Dest=0x35b718, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0172.586] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\" [0172.587] wcscat (in: _Dest=0x35b718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*" [0172.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0172.587] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0172.587] wcscmp (_String1=".", _String2=".") returned 0 [0172.587] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad0cee0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.587] wcscmp (_String1="..", _String2=".") returned 1 [0172.587] wcscmp (_String1="..", _String2="..") returned 0 [0172.587] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0172.587] wcscmp (_String1="flashplayer", _String2=".") returned 1 [0172.587] wcscmp (_String1="flashplayer", _String2="..") returned 1 [0172.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e65ad8 [0172.587] wcscpy (in: _Dest=0x3e65ad8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0172.587] wcscat (in: _Dest=0x3e65ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\" [0172.587] wcscat (in: _Dest=0x3e65ad8, _Source="flashplayer" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0172.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e65ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0172.928] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0172.928] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0172.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0172.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 [0172.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f2f0) returned 1 Thread: id = 4331 os_tid = 0x14c [0172.588] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms")) returned 0x20 [0172.588] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0172.588] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.588] GetLastError () returned 0x5 [0172.588] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0172.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 4332 os_tid = 0x490 [0172.589] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms")) returned 0x20 [0172.590] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0172.590] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.590] GetLastError () returned 0x5 [0172.590] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", dwFileAttributes=0x20) returned 0 [0172.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 Thread: id = 4333 os_tid = 0x125c [0172.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg")) returned 0x20 [0172.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0172.592] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.592] GetLastError () returned 0x5 [0172.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg", dwFileAttributes=0x20) returned 0 [0172.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad57d0) returned 1 Thread: id = 4334 os_tid = 0x1260 [0172.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63b70 [0172.593] wcscpy (in: _Dest=0x7a63b70, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" [0172.593] wcscat (in: _Dest=0x7a63b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\" [0172.593] wcscat (in: _Dest=0x7a63b70, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\*") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\*" [0172.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a538a0 [0172.593] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\*", lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0172.594] wcscmp (_String1=".", _String2=".") returned 0 [0172.594] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b90970, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87b90970, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.594] wcscmp (_String1="..", _String2=".") returned 1 [0172.594] wcscmp (_String1="..", _String2="..") returned 0 [0172.594] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c668700, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c668700, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 1 [0172.594] wcscmp (_String1="Synchronization.rll", _String2=".") returned 1 [0172.594] wcscmp (_String1="Synchronization.rll", _String2="..") returned 1 [0172.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d567b8 [0172.594] wcscpy (in: _Dest=0x3d567b8, _Source="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033" [0172.594] wcscat (in: _Dest=0x3d567b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\" [0172.594] wcscat (in: _Dest=0x3d567b8, _Source="Synchronization.rll" | out: _Dest="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll") returned="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll" [0172.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d567b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e8 [0172.935] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c668700, ftCreationTime.dwHighDateTime=0x1c9c5e1, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c668700, ftLastWriteTime.dwHighDateTime=0x1c9c5e1, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 0 [0172.935] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0172.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a538a0) returned 1 [0172.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63b70) returned 1 [0172.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62450) returned 1 Thread: id = 4335 os_tid = 0x1264 [0172.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl")) returned 0x20 [0172.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL", dwFileAttributes=0x20) returned 0 [0172.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.595] GetLastError () returned 0x5 [0172.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL", dwFileAttributes=0x20) returned 0 [0172.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 4336 os_tid = 0x1268 [0172.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl")) returned 0x20 [0172.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL", dwFileAttributes=0x20) returned 0 [0172.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0172.597] GetLastError () returned 0x5 [0172.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL", dwFileAttributes=0x20) returned 0 [0172.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6170) returned 1 Thread: id = 4337 os_tid = 0x126c [0172.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn")) returned 0x20 [0177.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN", dwFileAttributes=0x20) returned 0 [0177.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.636] GetLastError () returned 0x5 [0177.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN", dwFileAttributes=0x20) returned 0 [0177.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a630d0) returned 1 Thread: id = 4338 os_tid = 0x1270 [0172.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn")) returned 0x20 [0177.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN", dwFileAttributes=0x20) returned 0 [0177.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.639] GetLastError () returned 0x5 [0177.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN", dwFileAttributes=0x20) returned 0 [0177.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052f40) returned 1 Thread: id = 4339 os_tid = 0x1274 [0172.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll")) returned 0x20 [0177.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0177.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.642] GetLastError () returned 0x5 [0177.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0177.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 4340 os_tid = 0x1278 [0172.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd")) returned 0x20 [0177.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD", dwFileAttributes=0x20) returned 0 [0177.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.687] GetLastError () returned 0x5 [0177.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD", dwFileAttributes=0x20) returned 0 [0177.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5f70) returned 1 Thread: id = 4341 os_tid = 0x127c [0172.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs")) returned 0x20 [0177.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS", dwFileAttributes=0x20) returned 0 [0177.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.633] GetLastError () returned 0x5 [0177.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS", dwFileAttributes=0x20) returned 0 [0177.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 4342 os_tid = 0x1280 [0172.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc")) returned 0x20 [0177.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.678] GetLastError () returned 0x5 [0177.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a618c0) returned 1 Thread: id = 4343 os_tid = 0x1284 [0172.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt")) returned 0x20 [0177.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.681] GetLastError () returned 0x5 [0177.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61950) returned 1 Thread: id = 4344 os_tid = 0x1288 [0172.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk")) returned 0x20 [0177.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.682] GetLastError () returned 0x5 [0177.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a602d0) returned 1 Thread: id = 4345 os_tid = 0x128c [0172.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk")) returned 0x20 [0177.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.684] GetLastError () returned 0x5 [0177.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60750) returned 1 Thread: id = 4346 os_tid = 0x1290 [0172.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs")) returned 0x20 [0177.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS", dwFileAttributes=0x20) returned 0 [0177.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.696] GetLastError () returned 0x5 [0177.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS", dwFileAttributes=0x20) returned 0 [0177.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da60f0) returned 1 Thread: id = 4347 os_tid = 0x1294 [0172.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc")) returned 0x20 [0177.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.570] GetLastError () returned 0x5 [0177.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 Thread: id = 4348 os_tid = 0x1298 [0172.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt")) returned 0x20 [0177.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.576] GetLastError () returned 0x5 [0177.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 4349 os_tid = 0x129c [0172.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk")) returned 0x20 [0177.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.583] GetLastError () returned 0x5 [0177.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 4350 os_tid = 0x12a0 [0172.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk")) returned 0x20 [0177.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.588] GetLastError () returned 0x5 [0177.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 4351 os_tid = 0x12a4 [0172.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla")) returned 0x20 [0177.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA", dwFileAttributes=0x20) returned 0 [0177.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.686] GetLastError () returned 0x5 [0177.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA", dwFileAttributes=0x20) returned 0 [0177.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 4352 os_tid = 0x12a8 [0172.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl")) returned 0x20 [0177.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL", dwFileAttributes=0x20) returned 0 [0177.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.730] GetLastError () returned 0x5 [0177.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL", dwFileAttributes=0x20) returned 0 [0177.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f3e0) returned 1 Thread: id = 4353 os_tid = 0x12ac [0172.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd")) returned 0x20 [0177.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD", dwFileAttributes=0x20) returned 0 [0177.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.694] GetLastError () returned 0x5 [0177.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD", dwFileAttributes=0x20) returned 0 [0177.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da61f0) returned 1 Thread: id = 4354 os_tid = 0x12b0 [0172.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css")) returned 0x20 [0177.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS", dwFileAttributes=0x20) returned 0 [0177.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.692] GetLastError () returned 0x5 [0177.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS", dwFileAttributes=0x20) returned 0 [0177.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5bf0) returned 1 Thread: id = 4355 os_tid = 0x12b4 [0172.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css")) returned 0x20 [0177.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS", dwFileAttributes=0x20) returned 0 [0177.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.690] GetLastError () returned 0x5 [0177.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS", dwFileAttributes=0x20) returned 0 [0177.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da6770) returned 1 Thread: id = 4356 os_tid = 0x12c0 [0172.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd")) returned 0x20 [0175.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD", dwFileAttributes=0x20) returned 0 [0175.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.569] GetLastError () returned 0x5 [0177.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD", dwFileAttributes=0x20) returned 0 [0177.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da4c70) returned 1 Thread: id = 4357 os_tid = 0x12c4 [0172.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl")) returned 0x20 [0177.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL", dwFileAttributes=0x20) returned 0 [0177.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.488] GetLastError () returned 0x5 [0177.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL", dwFileAttributes=0x20) returned 0 [0177.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5ef0) returned 1 Thread: id = 4358 os_tid = 0x12c8 [0173.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra")) returned 0x20 [0177.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA", dwFileAttributes=0x20) returned 0 [0177.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.689] GetLastError () returned 0x5 [0177.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA", dwFileAttributes=0x20) returned 0 [0177.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 4359 os_tid = 0x12cc [0173.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav")) returned 0x20 [0173.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV", dwFileAttributes=0x20) returned 0 [0173.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.212] GetLastError () returned 0x5 [0173.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV", dwFileAttributes=0x20) returned 0 [0173.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62db0) returned 1 Thread: id = 4360 os_tid = 0x12d0 [0173.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav")) returned 0x20 [0175.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV", dwFileAttributes=0x20) returned 0 [0175.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.114] GetLastError () returned 0x5 [0175.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV", dwFileAttributes=0x20) returned 0 [0175.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a633f0) returned 1 Thread: id = 4361 os_tid = 0x12d4 [0173.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav")) returned 0x20 [0175.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0175.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.116] GetLastError () returned 0x5 [0175.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV", dwFileAttributes=0x20) returned 0 [0175.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63cb0) returned 1 Thread: id = 4362 os_tid = 0x12d8 [0173.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav")) returned 0x20 [0175.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV", dwFileAttributes=0x20) returned 0 [0175.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.119] GetLastError () returned 0x5 [0175.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV", dwFileAttributes=0x20) returned 0 [0175.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 4363 os_tid = 0x12dc [0173.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav")) returned 0x20 [0175.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV", dwFileAttributes=0x20) returned 0 [0175.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.110] GetLastError () returned 0x5 [0175.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV", dwFileAttributes=0x20) returned 0 [0175.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63c10) returned 1 Thread: id = 4364 os_tid = 0x12e0 [0173.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav")) returned 0x20 [0174.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV", dwFileAttributes=0x20) returned 0 [0174.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.371] GetLastError () returned 0x5 [0174.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV", dwFileAttributes=0x20) returned 0 [0174.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62e50) returned 1 Thread: id = 4365 os_tid = 0x12e4 [0173.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav")) returned 0x20 [0175.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV", dwFileAttributes=0x20) returned 0 [0175.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.113] GetLastError () returned 0x5 [0175.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV", dwFileAttributes=0x20) returned 0 [0175.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 4366 os_tid = 0x12e8 [0173.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf")) returned 0x20 [0173.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0173.221] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.222] GetLastError () returned 0x5 [0173.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", dwFileAttributes=0x20) returned 0 [0173.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 Thread: id = 4367 os_tid = 0x12ec [0173.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf")) returned 0x20 [0173.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0173.226] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.226] GetLastError () returned 0x5 [0173.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", dwFileAttributes=0x20) returned 0 [0173.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf180) returned 1 Thread: id = 4368 os_tid = 0x12f0 [0173.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf")) returned 0x20 [0173.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0173.239] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.240] GetLastError () returned 0x5 [0173.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", dwFileAttributes=0x20) returned 0 [0173.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57820) returned 1 Thread: id = 4369 os_tid = 0x12f4 [0173.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt")) returned 0x20 [0174.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", dwFileAttributes=0x20) returned 0 [0174.759] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.760] GetLastError () returned 0x5 [0174.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", dwFileAttributes=0x20) returned 0 [0174.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 Thread: id = 4370 os_tid = 0x12f8 [0173.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx")) returned 0x20 [0173.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.267] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.267] GetLastError () returned 0x5 [0173.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 Thread: id = 4371 os_tid = 0x12fc [0173.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx")) returned 0x20 [0173.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.274] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.274] GetLastError () returned 0x5 [0173.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 Thread: id = 4372 os_tid = 0x1300 [0173.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn")) returned 0x20 [0173.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN", dwFileAttributes=0x20) returned 0 [0173.275] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.276] GetLastError () returned 0x5 [0173.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN", dwFileAttributes=0x20) returned 0 [0173.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44210) returned 1 Thread: id = 4373 os_tid = 0x1304 [0173.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn")) returned 0x20 [0173.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN", dwFileAttributes=0x20) returned 0 [0173.277] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.278] GetLastError () returned 0x5 [0173.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN", dwFileAttributes=0x20) returned 0 [0173.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45e30) returned 1 Thread: id = 4374 os_tid = 0x1308 [0173.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn")) returned 0x20 [0173.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN", dwFileAttributes=0x20) returned 0 [0173.279] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.279] GetLastError () returned 0x5 [0173.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN", dwFileAttributes=0x20) returned 0 [0173.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 Thread: id = 4375 os_tid = 0x130c [0173.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx")) returned 0x20 [0173.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.281] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.281] GetLastError () returned 0x5 [0173.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 Thread: id = 4376 os_tid = 0x1310 [0173.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx")) returned 0x20 [0173.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.282] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.282] GetLastError () returned 0x5 [0173.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 Thread: id = 4377 os_tid = 0x1314 [0173.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky")) returned 0x20 [0175.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY", dwFileAttributes=0x20) returned 0 [0175.066] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.067] GetLastError () returned 0x5 [0175.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY", dwFileAttributes=0x20) returned 0 [0175.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 Thread: id = 4378 os_tid = 0x1318 [0173.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky")) returned 0x20 [0174.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY", dwFileAttributes=0x20) returned 0 [0174.245] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.246] GetLastError () returned 0x5 [0174.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY", dwFileAttributes=0x20) returned 0 [0174.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d440f0) returned 1 Thread: id = 4379 os_tid = 0x1320 [0173.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky")) returned 0x20 [0175.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY", dwFileAttributes=0x20) returned 0 [0175.064] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.065] GetLastError () returned 0x5 [0175.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY", dwFileAttributes=0x20) returned 0 [0175.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 4380 os_tid = 0x1324 [0173.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx")) returned 0x20 [0173.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.286] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.286] GetLastError () returned 0x5 [0173.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e330) returned 1 Thread: id = 4381 os_tid = 0x1328 [0173.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx")) returned 0x20 [0173.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.296] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.296] GetLastError () returned 0x5 [0173.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 Thread: id = 4382 os_tid = 0x132c [0173.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif")) returned 0x20 [0175.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF", dwFileAttributes=0x20) returned 0 [0175.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.071] GetLastError () returned 0x5 [0175.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF", dwFileAttributes=0x20) returned 0 [0175.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6f90) returned 1 Thread: id = 4383 os_tid = 0x1330 [0173.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif")) returned 0x20 [0175.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF", dwFileAttributes=0x20) returned 0 [0175.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.094] GetLastError () returned 0x5 [0175.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF", dwFileAttributes=0x20) returned 0 [0175.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad57d0) returned 1 Thread: id = 4384 os_tid = 0x1334 [0173.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif")) returned 0x20 [0175.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF", dwFileAttributes=0x20) returned 0 [0175.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.097] GetLastError () returned 0x5 [0175.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF", dwFileAttributes=0x20) returned 0 [0175.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c00) returned 1 Thread: id = 4385 os_tid = 0x1338 [0173.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif")) returned 0x20 [0175.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF", dwFileAttributes=0x20) returned 0 [0175.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.099] GetLastError () returned 0x5 [0175.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF", dwFileAttributes=0x20) returned 0 [0175.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5148) returned 1 Thread: id = 4386 os_tid = 0x133c [0173.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif")) returned 0x20 [0175.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF", dwFileAttributes=0x20) returned 0 [0175.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.101] GetLastError () returned 0x5 [0175.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF", dwFileAttributes=0x20) returned 0 [0175.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad63b0) returned 1 Thread: id = 4387 os_tid = 0x1340 [0173.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif")) returned 0x20 [0175.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF", dwFileAttributes=0x20) returned 0 [0175.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.103] GetLastError () returned 0x5 [0175.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF", dwFileAttributes=0x20) returned 0 [0175.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 Thread: id = 4388 os_tid = 0x1344 [0173.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif")) returned 0x20 [0174.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF", dwFileAttributes=0x20) returned 0 [0174.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.264] GetLastError () returned 0x5 [0174.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF", dwFileAttributes=0x20) returned 0 [0174.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6d30) returned 1 Thread: id = 4389 os_tid = 0x1348 [0173.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif")) returned 0x20 [0175.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF", dwFileAttributes=0x20) returned 0 [0175.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.069] GetLastError () returned 0x5 [0175.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF", dwFileAttributes=0x20) returned 0 [0175.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5310) returned 1 Thread: id = 4390 os_tid = 0x134c [0173.338] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp")) returned 0x2020 [0174.067] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp", dwFileAttributes=0x20) returned 1 [0180.357] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\3445ae1f-7ee8-40f7-802d-c756087f6c35.dmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1514 [0180.357] GetFileSizeEx (in: hFile=0x1514, lpFileSize=0xc9df8e4 | out: lpFileSize=0xc9df8e4*=105456) returned 1 [0180.357] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x19bec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.357] ReadFile (in: hFile=0x1514, lpBuffer=0xc9df8c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc9df8d0, lpOverlapped=0x0 | out: lpBuffer=0xc9df8c0*, lpNumberOfBytesRead=0xc9df8d0*=0x4, lpOverlapped=0x0) returned 1 [0180.360] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0180.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0180.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0180.361] NtQuerySystemTime (in: CurrentTime=0xc9df858 | out: CurrentTime=0xc9df858*=132462177589464000) returned 0x0 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x7618ae39 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x8f327eb [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x645d7be5 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x2da225cb [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x2a7d72d1 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x4929bb2 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x519ee34b [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x7e1e357f [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x4099a443 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x27688327 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x1ad6a1ec [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x5414c82b [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x79bad283 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x1e015ddf [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x4273e96b [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x768b9113 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x33bac4a1 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x339c284a [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x773c854a [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0xe512d47 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x186b8f85 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x104ea311 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x45283ad1 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x66fc30d1 [0180.361] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x65258c61 [0180.362] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x25432503 [0180.362] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x2f728d55 [0180.362] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x765e653e [0180.362] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x6807dbb0 [0180.362] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x1fb4d55d [0180.362] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x3b13e090 [0180.362] RtlRandomEx (in: Seed=0xc9df850 | out: Seed=0xc9df850) returned 0x28fadc26 [0180.372] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.372] ReadFile (in: hFile=0x1514, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc9df858, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0xc9df858*=0x3c00, lpOverlapped=0x0) returned 1 [0180.373] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24620 [0180.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0180.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0180.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0180.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0180.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0180.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0180.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aee8) returned 1 [0180.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0180.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24620) returned 1 [0180.374] WriteFile (in: hFile=0x1514, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc9df858, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xc9df858*=0x3c00, lpOverlapped=0x0) returned 1 [0180.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0180.858] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.859] ReadFile (in: hFile=0x1514, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc9df858, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0xc9df858*=0x3c00, lpOverlapped=0x0) returned 1 [0180.867] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0xf000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41968 [0180.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f218 [0180.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0180.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0180.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0180.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0180.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa88 [0180.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa88) returned 1 [0180.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0180.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41968) returned 1 [0180.868] WriteFile (in: hFile=0x1514, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc9df858, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xc9df858*=0x3c00, lpOverlapped=0x0) returned 1 [0181.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0181.751] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x15ff0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.751] ReadFile (in: hFile=0x1514, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xc9df858, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0xc9df858*=0x3c00, lpOverlapped=0x0) returned 1 [0181.751] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x15ff0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e853e0 [0181.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0181.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0181.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0181.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0181.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0181.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0181.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0181.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0181.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e853e0) returned 1 [0181.752] WriteFile (in: hFile=0x1514, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xc9df858, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xc9df858*=0x3c00, lpOverlapped=0x0) returned 1 [0183.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0183.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f5c8 [0183.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6b8) returned 1 [0183.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5e) returned 0x3e1d9c0 [0183.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0183.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0183.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0183.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0183.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095b40) returned 1 [0183.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x182) returned 0x3074d00 [0183.932] SetFilePointerEx (in: hFile=0x1514, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.932] WriteFile (in: hFile=0x1514, lpBuffer=0x3074d00*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0xc9df8d8, lpOverlapped=0x0 | out: lpBuffer=0x3074d00*, lpNumberOfBytesWritten=0xc9df8d8*=0x182, lpOverlapped=0x0) returned 1 [0184.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0184.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34c0) returned 1 [0184.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x50) returned 0x7a39688 [0184.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0184.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0184.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0184.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa1) returned 0x7a661f0 [0184.549] sprintf (in: _Dest=0x7a661f0, _Format="%c%c" | out: _Dest="9e") returned 2 [0184.549] sprintf (in: _Dest=0x7a661f2, _Format="%c%c" | out: _Dest="b4") returned 2 [0184.549] sprintf (in: _Dest=0x7a661f4, _Format="%c%c" | out: _Dest="43") returned 2 [0184.549] sprintf (in: _Dest=0x7a661f6, _Format="%c%c" | out: _Dest="f7") returned 2 [0184.549] sprintf (in: _Dest=0x7a661f8, _Format="%c%c" | out: _Dest="35") returned 2 [0184.549] sprintf (in: _Dest=0x7a661fa, _Format="%c%c" | out: _Dest="2e") returned 2 [0184.549] sprintf (in: _Dest=0x7a661fc, _Format="%c%c" | out: _Dest="7c") returned 2 [0184.549] sprintf (in: _Dest=0x7a661fe, _Format="%c%c" | out: _Dest="5e") returned 2 [0184.549] sprintf (in: _Dest=0x7a66200, _Format="%c%c" | out: _Dest="49") returned 2 [0184.549] sprintf (in: _Dest=0x7a66202, _Format="%c%c" | out: _Dest="f2") returned 2 [0184.549] sprintf (in: _Dest=0x7a66204, _Format="%c%c" | out: _Dest="c1") returned 2 [0184.549] sprintf (in: _Dest=0x7a66206, _Format="%c%c" | out: _Dest="e7") returned 2 [0184.550] sprintf (in: _Dest=0x7a66208, _Format="%c%c" | out: _Dest="fd") returned 2 [0184.550] sprintf (in: _Dest=0x7a6620a, _Format="%c%c" | out: _Dest="c2") returned 2 [0184.550] sprintf (in: _Dest=0x7a6620c, _Format="%c%c" | out: _Dest="88") returned 2 [0184.550] sprintf (in: _Dest=0x7a6620e, _Format="%c%c" | out: _Dest="2c") returned 2 [0184.550] sprintf (in: _Dest=0x7a66210, _Format="%c%c" | out: _Dest="9b") returned 2 [0184.550] sprintf (in: _Dest=0x7a66212, _Format="%c%c" | out: _Dest="a9") returned 2 [0184.550] sprintf (in: _Dest=0x7a66214, _Format="%c%c" | out: _Dest="6b") returned 2 [0184.550] sprintf (in: _Dest=0x7a66216, _Format="%c%c" | out: _Dest="17") returned 2 [0184.550] sprintf (in: _Dest=0x7a66218, _Format="%c%c" | out: _Dest="54") returned 2 [0184.550] sprintf (in: _Dest=0x7a6621a, _Format="%c%c" | out: _Dest="38") returned 2 [0184.550] sprintf (in: _Dest=0x7a6621c, _Format="%c%c" | out: _Dest="67") returned 2 [0184.550] sprintf (in: _Dest=0x7a6621e, _Format="%c%c" | out: _Dest="93") returned 2 [0184.550] sprintf (in: _Dest=0x7a66220, _Format="%c%c" | out: _Dest="93") returned 2 [0184.550] sprintf (in: _Dest=0x7a66222, _Format="%c%c" | out: _Dest="39") returned 2 [0184.550] sprintf (in: _Dest=0x7a66224, _Format="%c%c" | out: _Dest="94") returned 2 [0184.550] sprintf (in: _Dest=0x7a66226, _Format="%c%c" | out: _Dest="41") returned 2 [0184.550] sprintf (in: _Dest=0x7a66228, _Format="%c%c" | out: _Dest="db") returned 2 [0184.550] sprintf (in: _Dest=0x7a6622a, _Format="%c%c" | out: _Dest="c7") returned 2 [0184.551] sprintf (in: _Dest=0x7a6622c, _Format="%c%c" | out: _Dest="76") returned 2 [0184.551] sprintf (in: _Dest=0x7a6622e, _Format="%c%c" | out: _Dest="0f") returned 2 [0184.551] sprintf (in: _Dest=0x7a66230, _Format="%c%c" | out: _Dest="9b") returned 2 [0184.551] sprintf (in: _Dest=0x7a66232, _Format="%c%c" | out: _Dest="8a") returned 2 [0184.551] sprintf (in: _Dest=0x7a66234, _Format="%c%c" | out: _Dest="26") returned 2 [0184.551] sprintf (in: _Dest=0x7a66236, _Format="%c%c" | out: _Dest="c3") returned 2 [0184.551] sprintf (in: _Dest=0x7a66238, _Format="%c%c" | out: _Dest="49") returned 2 [0184.551] sprintf (in: _Dest=0x7a6623a, _Format="%c%c" | out: _Dest="cd") returned 2 [0184.551] sprintf (in: _Dest=0x7a6623c, _Format="%c%c" | out: _Dest="20") returned 2 [0184.551] sprintf (in: _Dest=0x7a6623e, _Format="%c%c" | out: _Dest="38") returned 2 [0184.551] sprintf (in: _Dest=0x7a66240, _Format="%c%c" | out: _Dest="da") returned 2 [0184.551] sprintf (in: _Dest=0x7a66242, _Format="%c%c" | out: _Dest="8b") returned 2 [0184.551] sprintf (in: _Dest=0x7a66244, _Format="%c%c" | out: _Dest="1a") returned 2 [0184.551] sprintf (in: _Dest=0x7a66246, _Format="%c%c" | out: _Dest="9d") returned 2 [0184.551] sprintf (in: _Dest=0x7a66248, _Format="%c%c" | out: _Dest="95") returned 2 [0184.551] sprintf (in: _Dest=0x7a6624a, _Format="%c%c" | out: _Dest="27") returned 2 [0184.551] sprintf (in: _Dest=0x7a6624c, _Format="%c%c" | out: _Dest="ee") returned 2 [0184.551] sprintf (in: _Dest=0x7a6624e, _Format="%c%c" | out: _Dest="88") returned 2 [0184.551] sprintf (in: _Dest=0x7a66250, _Format="%c%c" | out: _Dest="3d") returned 2 [0184.551] sprintf (in: _Dest=0x7a66252, _Format="%c%c" | out: _Dest="2a") returned 2 [0184.551] sprintf (in: _Dest=0x7a66254, _Format="%c%c" | out: _Dest="04") returned 2 [0184.552] sprintf (in: _Dest=0x7a66256, _Format="%c%c" | out: _Dest="e0") returned 2 [0184.552] sprintf (in: _Dest=0x7a66258, _Format="%c%c" | out: _Dest="37") returned 2 [0184.552] sprintf (in: _Dest=0x7a6625a, _Format="%c%c" | out: _Dest="45") returned 2 [0184.552] sprintf (in: _Dest=0x7a6625c, _Format="%c%c" | out: _Dest="db") returned 2 [0184.552] sprintf (in: _Dest=0x7a6625e, _Format="%c%c" | out: _Dest="ef") returned 2 [0184.552] sprintf (in: _Dest=0x7a66260, _Format="%c%c" | out: _Dest="63") returned 2 [0184.552] sprintf (in: _Dest=0x7a66262, _Format="%c%c" | out: _Dest="4b") returned 2 [0184.552] sprintf (in: _Dest=0x7a66264, _Format="%c%c" | out: _Dest="4f") returned 2 [0184.552] sprintf (in: _Dest=0x7a66266, _Format="%c%c" | out: _Dest="36") returned 2 [0184.552] sprintf (in: _Dest=0x7a66268, _Format="%c%c" | out: _Dest="a2") returned 2 [0184.552] sprintf (in: _Dest=0x7a6626a, _Format="%c%c" | out: _Dest="26") returned 2 [0184.552] sprintf (in: _Dest=0x7a6626c, _Format="%c%c" | out: _Dest="89") returned 2 [0184.552] sprintf (in: _Dest=0x7a6626e, _Format="%c%c" | out: _Dest="23") returned 2 [0184.552] sprintf (in: _Dest=0x7a66270, _Format="%c%c" | out: _Dest="7c") returned 2 [0184.552] sprintf (in: _Dest=0x7a66272, _Format="%c%c" | out: _Dest="23") returned 2 [0184.552] sprintf (in: _Dest=0x7a66274, _Format="%c%c" | out: _Dest="aa") returned 2 [0184.552] sprintf (in: _Dest=0x7a66276, _Format="%c%c" | out: _Dest="c5") returned 2 [0184.552] sprintf (in: _Dest=0x7a66278, _Format="%c%c" | out: _Dest="a1") returned 2 [0184.552] sprintf (in: _Dest=0x7a6627a, _Format="%c%c" | out: _Dest="0a") returned 2 [0184.552] sprintf (in: _Dest=0x7a6627c, _Format="%c%c" | out: _Dest="cb") returned 2 [0184.552] sprintf (in: _Dest=0x7a6627e, _Format="%c%c" | out: _Dest="0b") returned 2 [0184.552] sprintf (in: _Dest=0x7a66280, _Format="%c%c" | out: _Dest="ee") returned 2 [0184.552] sprintf (in: _Dest=0x7a66282, _Format="%c%c" | out: _Dest="1f") returned 2 [0184.553] sprintf (in: _Dest=0x7a66284, _Format="%c%c" | out: _Dest="1b") returned 2 [0184.553] sprintf (in: _Dest=0x7a66286, _Format="%c%c" | out: _Dest="e0") returned 2 [0184.553] sprintf (in: _Dest=0x7a66288, _Format="%c%c" | out: _Dest="41") returned 2 [0184.553] sprintf (in: _Dest=0x7a6628a, _Format="%c%c" | out: _Dest="8a") returned 2 [0184.553] sprintf (in: _Dest=0x7a6628c, _Format="%c%c" | out: _Dest="4c") returned 2 [0184.553] sprintf (in: _Dest=0x7a6628e, _Format="%c%c" | out: _Dest="a1") returned 2 [0184.553] RtlInitAnsiString (in: DestinationString=0xc9df860, SourceString="9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b175438679393399441dbc7760f9b8a26c349cd2038da8b1a9d9527ee883d2a04e03745dbef634b4f36a22689237c23aac5a10acb0bee1f1be0418a4ca1" | out: DestinationString="9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b175438679393399441dbc7760f9b8a26c349cd2038da8b1a9d9527ee883d2a04e03745dbef634b4f36a22689237c23aac5a10acb0bee1f1be0418a4ca1") [0184.553] RtlAnsiStringToUnicodeString (in: DestinationString=0xc9df858, SourceString="9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b175438679393399441dbc7760f9b8a26c349cd2038da8b1a9d9527ee883d2a04e03745dbef634b4f36a22689237c23aac5a10acb0bee1f1be0418a4ca1", AllocateDestinationString=1 | out: DestinationString="9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b175438679393399441dbc7760f9b8a26c349cd2038da8b1a9d9527ee883d2a04e03745dbef634b4f36a22689237c23aac5a10acb0bee1f1be0418a4ca1") returned 0x0 [0184.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0aac0 [0184.553] wcscat (in: _Dest=0x3dadf10, _Source="9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b17" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b17") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b17" [0184.553] wcscat (in: _Dest=0x3dadf10, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b17.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b17.68814f" [0184.553] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b17.68814f", NtPathName=0xc9df850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\9eb443f7352e7c5e49f2c1e7fdc2882c9ba96b17.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7b7c898 [0184.627] FlushFileBuffers (hFile=0x1514) returned 1 [0184.955] CloseHandle (hObject=0x1514) returned 1 [0186.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332268 [0186.000] wcscpy (in: _Dest=0x332268, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\" [0186.000] wcscat (in: _Dest=0x332268, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\68814F-Readme.txt" [0186.000] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\68814f-readme.txt")) returned 0xffffffff [0186.000] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf9c [0186.165] WriteFile (in: hFile=0xf9c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc9df86c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc9df86c*=0x8b9, lpOverlapped=0x0) returned 1 [0186.167] CloseHandle (hObject=0xf9c) returned 1 [0186.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 [0186.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf178) returned 1 Thread: id = 4391 os_tid = 0x1350 [0173.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de74b8 [0173.339] wcscpy (in: _Dest=0x3de74b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0173.339] wcscat (in: _Dest=0x3de74b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0173.339] wcscat (in: _Dest=0x3de74b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*" [0173.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0173.339] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0174.107] wcscmp (_String1=".", _String2=".") returned 0 [0174.107] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe74cf430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.107] wcscmp (_String1="..", _String2=".") returned 1 [0174.107] wcscmp (_String1="..", _String2="..") returned 0 [0174.107] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7d70bc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7d70bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7d70bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0174.107] wcscmp (_String1="000003.log", _String2=".") returned 1 [0174.107] wcscmp (_String1="000003.log", _String2="..") returned 1 [0174.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x300da60 [0174.107] wcscpy (in: _Dest=0x300da60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0174.107] wcscat (in: _Dest=0x300da60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0174.107] wcscat (in: _Dest=0x300da60, _Source="000003.log" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" [0175.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x300da60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0175.191] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d4250, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0175.191] wcscmp (_String1="CURRENT", _String2=".") returned 1 [0175.191] wcscmp (_String1="CURRENT", _String2="..") returned 1 [0175.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x300e668 [0175.191] wcscpy (in: _Dest=0x300e668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0175.191] wcscat (in: _Dest=0x300e668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0175.191] wcscat (in: _Dest=0x300e668, _Source="CURRENT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" [0175.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x300e668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0175.193] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d1b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0175.193] wcscmp (_String1="LOCK", _String2=".") returned 1 [0175.193] wcscmp (_String1="LOCK", _String2="..") returned 1 [0175.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x2f9a00 [0175.193] wcscpy (in: _Dest=0x2f9a00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0175.193] wcscat (in: _Dest=0x2f9a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0175.193] wcscat (in: _Dest=0x2f9a00, _Source="LOCK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" [0175.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2f9a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0175.195] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8d4ad70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0175.195] wcscmp (_String1="LOG", _String2=".") returned 1 [0175.195] wcscmp (_String1="LOG", _String2="..") returned 1 [0175.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2f93d0 [0175.195] wcscpy (in: _Dest=0x2f93d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0175.195] wcscat (in: _Dest=0x2f93d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0175.195] wcscat (in: _Dest=0x2f93d0, _Source="LOG" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" [0175.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2f93d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0175.199] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d1b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0175.199] wcscmp (_String1="MANIFEST-000001", _String2=".") returned 1 [0175.199] wcscmp (_String1="MANIFEST-000001", _String2="..") returned 1 [0175.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55bb8 [0175.199] wcscpy (in: _Dest=0x3d55bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0175.199] wcscat (in: _Dest=0x3d55bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0175.200] wcscat (in: _Dest=0x3d55bb8, _Source="MANIFEST-000001" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" [0175.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1964 [0175.201] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe74d1b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe74d1b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe74d1b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0175.201] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0175.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0175.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de74b8) returned 1 [0175.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de76b8) returned 1 Thread: id = 4392 os_tid = 0x1354 [0173.342] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba7.tmp")) returned 0x2020 [0174.106] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp", dwFileAttributes=0x20) returned 1 [0180.354] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba7.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18a0 [0180.355] GetFileSizeEx (in: hFile=0x18a0, lpFileSize=0xb88fe9c | out: lpFileSize=0xb88fe9c*=0) returned 1 [0180.355] FlushFileBuffers (hFile=0x18a0) returned 1 [0181.711] CloseHandle (hObject=0x18a0) returned 1 [0181.711] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA7.tmp", dwFileAttributes=0x2020) returned 1 [0182.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf5d0) returned 1 Thread: id = 4393 os_tid = 0x1358 [0173.356] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba8.tmp")) returned 0x2020 [0174.106] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp", dwFileAttributes=0x20) returned 1 [0180.351] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\bba8.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd90 [0180.352] GetFileSizeEx (in: hFile=0xd90, lpFileSize=0x87afa6c | out: lpFileSize=0x87afa6c*=0) returned 1 [0180.352] FlushFileBuffers (hFile=0xd90) returned 1 [0180.820] CloseHandle (hObject=0xd90) returned 1 [0180.820] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\BBA8.tmp", dwFileAttributes=0x2020) returned 1 [0182.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaef58) returned 1 Thread: id = 4394 os_tid = 0x135c [0173.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x20 [0174.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x20) returned 0 [0174.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.846] GetLastError () returned 0x5 [0174.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x20) returned 0 [0174.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 4395 os_tid = 0x1360 [0173.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x20 [0174.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x20) returned 0 [0174.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.844] GetLastError () returned 0x5 [0174.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x20) returned 0 [0174.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 4396 os_tid = 0x1364 [0173.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x20 [0174.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x20) returned 0 [0174.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.896] GetLastError () returned 0x5 [0174.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x20) returned 0 [0174.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 4397 os_tid = 0x1368 [0173.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x20 [0174.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x20) returned 0 [0174.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.894] GetLastError () returned 0x5 [0174.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x20) returned 0 [0174.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bd50) returned 1 Thread: id = 4398 os_tid = 0x136c [0173.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x20 [0174.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x20) returned 0 [0174.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.842] GetLastError () returned 0x5 [0174.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x20) returned 0 [0174.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bdd8) returned 1 Thread: id = 4399 os_tid = 0x1370 [0173.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x20 [0174.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x20) returned 0 [0174.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.189] GetLastError () returned 0x5 [0174.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x20) returned 0 [0174.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 4400 os_tid = 0x1374 [0173.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd")) returned 0x20 [0173.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd", dwFileAttributes=0x20) returned 0 [0173.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.397] GetLastError () returned 0x5 [0173.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd", dwFileAttributes=0x20) returned 0 [0173.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 4401 os_tid = 0x1378 [0173.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd")) returned 0x20 [0173.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd", dwFileAttributes=0x20) returned 0 [0173.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.407] GetLastError () returned 0x5 [0173.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd", dwFileAttributes=0x20) returned 0 [0173.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 Thread: id = 4402 os_tid = 0x137c [0173.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml")) returned 0x20 [0175.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", dwFileAttributes=0x20) returned 0 [0175.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.265] GetLastError () returned 0x5 [0175.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", dwFileAttributes=0x20) returned 0 [0175.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63210) returned 1 Thread: id = 4403 os_tid = 0x1380 [0173.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053fa8 [0173.414] wcscpy (in: _Dest=0x3053fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates" [0173.414] wcscat (in: _Dest=0x3053fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\" [0173.414] wcscat (in: _Dest=0x3053fa8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*" [0173.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0173.414] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0175.267] wcscmp (_String1=".", _String2=".") returned 0 [0175.267] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.267] wcscmp (_String1="..", _String2=".") returned 1 [0175.267] wcscmp (_String1="..", _String2="..") returned 0 [0175.267] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0175.267] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0175.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0175.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053fa8) returned 1 [0175.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 4404 os_tid = 0x1384 [0173.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml")) returned 0x20 [0175.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0175.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.269] GetLastError () returned 0x5 [0175.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0175.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a10) returned 1 Thread: id = 4405 os_tid = 0x1388 [0173.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml")) returned 0x20 [0174.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0174.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.482] GetLastError () returned 0x5 [0174.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", dwFileAttributes=0x20) returned 0 [0174.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d578e8) returned 1 Thread: id = 4406 os_tid = 0x138c [0173.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml")) returned 0x20 [0175.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", dwFileAttributes=0x20) returned 0 [0175.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.263] GetLastError () returned 0x5 [0175.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", dwFileAttributes=0x20) returned 0 [0175.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf7f8) returned 1 Thread: id = 4407 os_tid = 0x1390 [0173.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif")) returned 0x20 [0177.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF", dwFileAttributes=0x20) returned 0 [0177.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.365] GetLastError () returned 0x5 [0177.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF", dwFileAttributes=0x20) returned 0 [0177.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60e10) returned 1 Thread: id = 4408 os_tid = 0x1394 [0173.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif")) returned 0x20 [0177.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF", dwFileAttributes=0x20) returned 0 [0177.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.558] GetLastError () returned 0x5 [0177.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF", dwFileAttributes=0x20) returned 0 [0177.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 Thread: id = 4409 os_tid = 0x139c [0173.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif")) returned 0x20 [0177.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF", dwFileAttributes=0x20) returned 0 [0177.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.573] GetLastError () returned 0x5 [0177.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF", dwFileAttributes=0x20) returned 0 [0177.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44960) returned 1 Thread: id = 4410 os_tid = 0x13a0 [0173.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif")) returned 0x20 [0177.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF", dwFileAttributes=0x20) returned 0 [0177.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.581] GetLastError () returned 0x5 [0177.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF", dwFileAttributes=0x20) returned 0 [0177.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 Thread: id = 4411 os_tid = 0x13a4 [0173.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif")) returned 0x20 [0177.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF", dwFileAttributes=0x20) returned 0 [0177.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.586] GetLastError () returned 0x5 [0177.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF", dwFileAttributes=0x20) returned 0 [0177.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 Thread: id = 4412 os_tid = 0x13a8 [0173.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif")) returned 0x20 [0177.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF", dwFileAttributes=0x20) returned 0 [0177.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.631] GetLastError () returned 0x5 [0177.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF", dwFileAttributes=0x20) returned 0 [0177.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f00) returned 1 Thread: id = 4413 os_tid = 0x13ac [0173.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif")) returned 0x20 [0177.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF", dwFileAttributes=0x20) returned 0 [0177.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.634] GetLastError () returned 0x5 [0177.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF", dwFileAttributes=0x20) returned 0 [0177.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 Thread: id = 4414 os_tid = 0x13b0 [0173.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif")) returned 0x20 [0177.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF", dwFileAttributes=0x20) returned 0 [0177.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.637] GetLastError () returned 0x5 [0177.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF", dwFileAttributes=0x20) returned 0 [0177.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 Thread: id = 4415 os_tid = 0x13b4 [0173.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif")) returned 0x20 [0177.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF", dwFileAttributes=0x20) returned 0 [0177.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.641] GetLastError () returned 0x5 [0177.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF", dwFileAttributes=0x20) returned 0 [0177.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45b60) returned 1 Thread: id = 4416 os_tid = 0x13b8 [0173.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif")) returned 0x20 [0177.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF", dwFileAttributes=0x20) returned 0 [0177.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.644] GetLastError () returned 0x5 [0177.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF", dwFileAttributes=0x20) returned 0 [0177.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44060) returned 1 Thread: id = 4417 os_tid = 0x13bc [0173.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif")) returned 0x20 [0177.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF", dwFileAttributes=0x20) returned 0 [0177.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.373] GetLastError () returned 0x5 [0177.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF", dwFileAttributes=0x20) returned 0 [0177.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 4418 os_tid = 0x13c0 [0173.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif")) returned 0x20 [0177.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF", dwFileAttributes=0x20) returned 0 [0177.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.303] GetLastError () returned 0x5 [0177.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF", dwFileAttributes=0x20) returned 0 [0177.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 Thread: id = 4419 os_tid = 0x13c4 [0173.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif")) returned 0x20 [0177.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF", dwFileAttributes=0x20) returned 0 [0177.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.646] GetLastError () returned 0x5 [0177.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF", dwFileAttributes=0x20) returned 0 [0177.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44b10) returned 1 Thread: id = 4420 os_tid = 0x13c8 [0173.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif")) returned 0x20 [0177.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF", dwFileAttributes=0x20) returned 0 [0177.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.648] GetLastError () returned 0x5 [0177.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF", dwFileAttributes=0x20) returned 0 [0177.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44450) returned 1 Thread: id = 4421 os_tid = 0x13d0 [0173.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif")) returned 0x20 [0177.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF", dwFileAttributes=0x20) returned 0 [0177.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.366] GetLastError () returned 0x5 [0177.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF", dwFileAttributes=0x20) returned 0 [0177.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 4422 os_tid = 0x13d4 [0173.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif")) returned 0x20 [0177.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF", dwFileAttributes=0x20) returned 0 [0177.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.650] GetLastError () returned 0x5 [0177.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF", dwFileAttributes=0x20) returned 0 [0177.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45800) returned 1 Thread: id = 4423 os_tid = 0x1398 [0173.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif")) returned 0x20 [0177.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF", dwFileAttributes=0x20) returned 0 [0177.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.652] GetLastError () returned 0x5 [0177.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF", dwFileAttributes=0x20) returned 0 [0177.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448d0) returned 1 Thread: id = 4424 os_tid = 0x13dc [0173.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif")) returned 0x20 [0177.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF", dwFileAttributes=0x20) returned 0 [0177.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.654] GetLastError () returned 0x5 [0177.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF", dwFileAttributes=0x20) returned 0 [0177.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45890) returned 1 Thread: id = 4425 os_tid = 0x13e0 [0173.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif")) returned 0x20 [0177.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF", dwFileAttributes=0x20) returned 0 [0177.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.672] GetLastError () returned 0x5 [0177.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF", dwFileAttributes=0x20) returned 0 [0177.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 4426 os_tid = 0x13e4 [0173.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif")) returned 0x20 [0177.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF", dwFileAttributes=0x20) returned 0 [0177.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.343] GetLastError () returned 0x5 [0177.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF", dwFileAttributes=0x20) returned 0 [0177.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 4427 os_tid = 0x13e8 [0173.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif")) returned 0x20 [0177.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF", dwFileAttributes=0x20) returned 0 [0177.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.367] GetLastError () returned 0x5 [0177.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF", dwFileAttributes=0x20) returned 0 [0177.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44330) returned 1 Thread: id = 4428 os_tid = 0x13ec [0173.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif")) returned 0x20 [0177.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF", dwFileAttributes=0x20) returned 0 [0177.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.369] GetLastError () returned 0x5 [0177.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF", dwFileAttributes=0x20) returned 0 [0177.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45380) returned 1 Thread: id = 4429 os_tid = 0x13f0 [0173.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif")) returned 0x20 [0177.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF", dwFileAttributes=0x20) returned 0 [0177.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.370] GetLastError () returned 0x5 [0177.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF", dwFileAttributes=0x20) returned 0 [0177.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45da0) returned 1 Thread: id = 4430 os_tid = 0x13f4 [0173.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif")) returned 0x20 [0177.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF", dwFileAttributes=0x20) returned 0 [0177.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.371] GetLastError () returned 0x5 [0177.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF", dwFileAttributes=0x20) returned 0 [0177.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449f0) returned 1 Thread: id = 4431 os_tid = 0x13f8 [0173.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh")) returned 0x20 [0173.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh", dwFileAttributes=0x20) returned 0 [0173.439] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.439] GetLastError () returned 0x5 [0173.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh", dwFileAttributes=0x20) returned 0 [0173.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5c8) returned 1 Thread: id = 4432 os_tid = 0x13fc [0173.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh87")) returned 0x20 [0174.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87", dwFileAttributes=0x20) returned 0 [0174.648] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh87"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.648] GetLastError () returned 0x5 [0174.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87", dwFileAttributes=0x20) returned 0 [0174.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1078) returned 1 Thread: id = 4433 os_tid = 0x1400 [0173.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh88")) returned 0x20 [0175.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88", dwFileAttributes=0x20) returned 0 [0175.281] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh88"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.281] GetLastError () returned 0x5 [0175.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88", dwFileAttributes=0x20) returned 0 [0175.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf9b8) returned 1 Thread: id = 4434 os_tid = 0x1404 [0173.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh89")) returned 0x20 [0174.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89", dwFileAttributes=0x20) returned 0 [0174.535] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\riyadh89"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.535] GetLastError () returned 0x5 [0174.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89", dwFileAttributes=0x20) returned 0 [0174.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b98) returned 1 Thread: id = 4435 os_tid = 0x1408 [0173.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\sakhalin")) returned 0x20 [0175.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin", dwFileAttributes=0x20) returned 0 [0175.285] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\sakhalin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.286] GetLastError () returned 0x5 [0175.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin", dwFileAttributes=0x20) returned 0 [0175.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0f40) returned 1 Thread: id = 4436 os_tid = 0x13cc [0173.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\samarkand")) returned 0x20 [0175.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand", dwFileAttributes=0x20) returned 0 [0175.282] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\samarkand"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.283] GetLastError () returned 0x5 [0175.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Samarkand", dwFileAttributes=0x20) returned 0 [0175.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ad8) returned 1 Thread: id = 4437 os_tid = 0x140c [0173.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\seoul")) returned 0x20 [0175.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul", dwFileAttributes=0x20) returned 0 [0175.287] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\seoul"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.287] GetLastError () returned 0x5 [0175.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Seoul", dwFileAttributes=0x20) returned 0 [0175.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee08c0) returned 1 Thread: id = 4438 os_tid = 0x1410 [0173.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\shanghai")) returned 0x20 [0175.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai", dwFileAttributes=0x20) returned 0 [0175.289] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\shanghai"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.289] GetLastError () returned 0x5 [0175.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Shanghai", dwFileAttributes=0x20) returned 0 [0175.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf4d8) returned 1 Thread: id = 4439 os_tid = 0x1414 [0173.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\singapore")) returned 0x20 [0175.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore", dwFileAttributes=0x20) returned 0 [0175.290] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\singapore"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.290] GetLastError () returned 0x5 [0175.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Singapore", dwFileAttributes=0x20) returned 0 [0175.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d78) returned 1 Thread: id = 4440 os_tid = 0x1418 [0173.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\taipei")) returned 0x20 [0175.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei", dwFileAttributes=0x20) returned 0 [0175.292] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\taipei"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.292] GetLastError () returned 0x5 [0175.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Taipei", dwFileAttributes=0x20) returned 0 [0175.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0858) returned 1 Thread: id = 4441 os_tid = 0x141c [0173.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tashkent")) returned 0x20 [0175.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent", dwFileAttributes=0x20) returned 0 [0175.294] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tashkent"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.294] GetLastError () returned 0x5 [0175.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tashkent", dwFileAttributes=0x20) returned 0 [0175.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf2d0) returned 1 Thread: id = 4442 os_tid = 0x1420 [0173.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tbilisi")) returned 0x20 [0175.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi", dwFileAttributes=0x20) returned 0 [0175.298] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tbilisi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.298] GetLastError () returned 0x5 [0175.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi", dwFileAttributes=0x20) returned 0 [0175.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0ac8) returned 1 Thread: id = 4443 os_tid = 0x1424 [0173.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tehran")) returned 0x20 [0175.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran", dwFileAttributes=0x20) returned 0 [0175.299] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tehran"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.299] GetLastError () returned 0x5 [0175.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tehran", dwFileAttributes=0x20) returned 0 [0175.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee11b0) returned 1 Thread: id = 4444 os_tid = 0x1428 [0173.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\thimphu")) returned 0x20 [0175.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu", dwFileAttributes=0x20) returned 0 [0175.301] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\thimphu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.301] GetLastError () returned 0x5 [0175.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Thimphu", dwFileAttributes=0x20) returned 0 [0175.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee1010) returned 1 Thread: id = 4445 os_tid = 0x142c [0173.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tokyo")) returned 0x20 [0175.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo", dwFileAttributes=0x20) returned 0 [0175.302] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\tokyo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.303] GetLastError () returned 0x5 [0175.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Tokyo", dwFileAttributes=0x20) returned 0 [0175.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edf200) returned 1 Thread: id = 4446 os_tid = 0x1430 [0173.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar")) returned 0x20 [0175.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar", dwFileAttributes=0x20) returned 0 [0175.304] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.304] GetLastError () returned 0x5 [0175.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar", dwFileAttributes=0x20) returned 0 [0175.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ec8) returned 1 Thread: id = 4447 os_tid = 0x1434 [0173.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\urumqi")) returned 0x20 [0175.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi", dwFileAttributes=0x20) returned 0 [0175.307] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\urumqi"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.307] GetLastError () returned 0x5 [0175.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Urumqi", dwFileAttributes=0x20) returned 0 [0175.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0c68) returned 1 Thread: id = 4448 os_tid = 0x1438 [0173.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ust-nera")) returned 0x20 [0175.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera", dwFileAttributes=0x20) returned 0 [0175.309] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\ust-nera"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.309] GetLastError () returned 0x5 [0175.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera", dwFileAttributes=0x20) returned 0 [0175.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0b30) returned 1 Thread: id = 4449 os_tid = 0x143c [0173.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vientiane")) returned 0x20 [0175.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane", dwFileAttributes=0x20) returned 0 [0175.311] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vientiane"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.311] GetLastError () returned 0x5 [0175.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vientiane", dwFileAttributes=0x20) returned 0 [0175.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69de8) returned 1 Thread: id = 4450 os_tid = 0x1440 [0173.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vladivostok")) returned 0x20 [0175.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok", dwFileAttributes=0x20) returned 0 [0175.313] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\vladivostok"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.313] GetLastError () returned 0x5 [0175.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok", dwFileAttributes=0x20) returned 0 [0175.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c28) returned 1 Thread: id = 4451 os_tid = 0x1448 [0173.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yakutsk")) returned 0x20 [0175.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk", dwFileAttributes=0x20) returned 0 [0175.314] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yakutsk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.315] GetLastError () returned 0x5 [0175.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk", dwFileAttributes=0x20) returned 0 [0175.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0928) returned 1 Thread: id = 4452 os_tid = 0x144c [0173.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yekaterinburg")) returned 0x20 [0175.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg", dwFileAttributes=0x20) returned 0 [0175.316] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yekaterinburg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.316] GetLastError () returned 0x5 [0175.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg", dwFileAttributes=0x20) returned 0 [0175.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 Thread: id = 4453 os_tid = 0x1454 [0173.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yerevan")) returned 0x20 [0175.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan", dwFileAttributes=0x20) returned 0 [0175.279] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\asia\\yerevan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.279] GetLastError () returned 0x5 [0175.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Asia\\Yerevan", dwFileAttributes=0x20) returned 0 [0175.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee0a60) returned 1 Thread: id = 4454 os_tid = 0x145c [0173.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx")) returned 0x20 [0173.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.450] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.451] GetLastError () returned 0x5 [0173.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f4e8) returned 1 Thread: id = 4455 os_tid = 0x1468 [0173.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx")) returned 0x20 [0173.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.452] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.452] GetLastError () returned 0x5 [0173.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f0f8) returned 1 Thread: id = 4456 os_tid = 0x146c [0173.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat")) returned 0x20 [0175.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT", dwFileAttributes=0x20) returned 0 [0175.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.320] GetLastError () returned 0x5 [0175.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT", dwFileAttributes=0x20) returned 0 [0175.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 Thread: id = 4457 os_tid = 0x1470 [0173.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat")) returned 0x20 [0175.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT", dwFileAttributes=0x20) returned 0 [0175.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.332] GetLastError () returned 0x5 [0175.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT", dwFileAttributes=0x20) returned 0 [0175.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 Thread: id = 4458 os_tid = 0x1474 [0173.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat")) returned 0x20 [0175.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT", dwFileAttributes=0x20) returned 0 [0175.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.345] GetLastError () returned 0x5 [0175.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT", dwFileAttributes=0x20) returned 0 [0175.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 Thread: id = 4459 os_tid = 0x1478 [0173.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml")) returned 0x20 [0175.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML", dwFileAttributes=0x20) returned 0 [0175.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.361] GetLastError () returned 0x5 [0175.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML", dwFileAttributes=0x20) returned 0 [0175.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 Thread: id = 4460 os_tid = 0x1480 [0173.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml")) returned 0x20 [0175.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML", dwFileAttributes=0x20) returned 0 [0175.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.359] GetLastError () returned 0x5 [0175.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML", dwFileAttributes=0x20) returned 0 [0175.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 Thread: id = 4461 os_tid = 0x1488 [0173.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl")) returned 0x20 [0175.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL", dwFileAttributes=0x20) returned 0 [0175.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.357] GetLastError () returned 0x5 [0175.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL", dwFileAttributes=0x20) returned 0 [0175.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 Thread: id = 4462 os_tid = 0x148c [0173.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f998 [0173.456] wcscpy (in: _Dest=0x3f3f998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0173.456] wcscat (in: _Dest=0x3f3f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0173.456] wcscat (in: _Dest=0x3f3f998, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*" [0173.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0173.456] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e57dc70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73e30 [0177.336] wcscmp (_String1=".", _String2=".") returned 0 [0177.336] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e57dc70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.336] wcscmp (_String1="..", _String2=".") returned 1 [0177.336] wcscmp (_String1="..", _String2="..") returned 0 [0177.336] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b31f300, ftCreationTime.dwHighDateTime=0x1c8e688, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b31f300, ftLastWriteTime.dwHighDateTime=0x1c8e688, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote-PipelineConfig.xml", cAlternateFileName="SENDTO~1.XML")) returned 1 [0177.336] wcscmp (_String1="SendToOneNote-PipelineConfig.xml", _String2=".") returned 1 [0177.336] wcscmp (_String1="SendToOneNote-PipelineConfig.xml", _String2="..") returned 1 [0177.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c378 [0177.336] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0177.336] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0177.336] wcscat (in: _Dest=0x35c378, _Source="SendToOneNote-PipelineConfig.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" [0178.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0178.214] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4b5100, ftCreationTime.dwHighDateTime=0x1c9d897, ftLastAccessTime.dwLowDateTime=0x819ac0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c4b5100, ftLastWriteTime.dwHighDateTime=0x1c9d897, nFileSizeHigh=0x0, nFileSizeLow=0x2580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.gpd", cAlternateFileName="SENDTO~1.GPD")) returned 1 [0178.214] wcscmp (_String1="SendToOneNote.gpd", _String2=".") returned 1 [0178.214] wcscmp (_String1="SendToOneNote.gpd", _String2="..") returned 1 [0178.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad6318 [0178.214] wcscpy (in: _Dest=0x7ad6318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0178.215] wcscat (in: _Dest=0x7ad6318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0178.215] wcscat (in: _Dest=0x7ad6318, _Source="SendToOneNote.gpd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" [0178.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad6318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0178.216] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12acbb00, ftCreationTime.dwHighDateTime=0x1c8e2bf, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12acbb00, ftLastWriteTime.dwHighDateTime=0x1c8e2bf, nFileSizeHigh=0x0, nFileSizeLow=0x7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.ini", cAlternateFileName="SENDTO~1.INI")) returned 1 [0178.216] wcscmp (_String1="SendToOneNote.ini", _String2=".") returned 1 [0178.216] wcscmp (_String1="SendToOneNote.ini", _String2="..") returned 1 [0178.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7ad53a8 [0178.216] wcscpy (in: _Dest=0x7ad53a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0178.216] wcscat (in: _Dest=0x7ad53a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0178.216] wcscat (in: _Dest=0x7ad53a8, _Source="SendToOneNote.ini" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" [0178.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ad53a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0178.217] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x819ac0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0x16f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNOteFilter.dll", cAlternateFileName="SENDTO~1.DLL")) returned 1 [0178.217] wcscmp (_String1="SendToOneNOteFilter.dll", _String2=".") returned 1 [0178.217] wcscmp (_String1="SendToOneNOteFilter.dll", _String2="..") returned 1 [0178.217] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aecb200, ftCreationTime.dwHighDateTime=0x1c8ee63, ftLastAccessTime.dwLowDateTime=0x819ac0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8aecb200, ftLastWriteTime.dwHighDateTime=0x1c8ee63, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendtoOneNoteFilter.gpd", cAlternateFileName="SENDTO~2.GPD")) returned 1 [0178.217] wcscmp (_String1="SendtoOneNoteFilter.gpd", _String2=".") returned 1 [0178.217] wcscmp (_String1="SendtoOneNoteFilter.gpd", _String2="..") returned 1 [0178.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62ef0 [0178.217] wcscpy (in: _Dest=0x7a62ef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0178.217] wcscat (in: _Dest=0x7a62ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0178.217] wcscat (in: _Dest=0x7a62ef0, _Source="SendtoOneNoteFilter.gpd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" [0178.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0178.219] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf54b700, ftCreationTime.dwHighDateTime=0x1c8e688, ftLastAccessTime.dwLowDateTime=0x819f8370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf54b700, ftLastWriteTime.dwHighDateTime=0x1c8e688, nFileSizeHigh=0x0, nFileSizeLow=0x1ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="SENDTO~3.GPD")) returned 1 [0178.219] wcscmp (_String1="SendToOneNoteNames.gpd", _String2=".") returned 1 [0178.219] wcscmp (_String1="SendToOneNoteNames.gpd", _String2="..") returned 1 [0178.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62950 [0178.219] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote" [0178.219] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\" [0178.219] wcscat (in: _Dest=0x7a62950, _Source="SendToOneNoteNames.gpd" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd") returned="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" [0178.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0178.220] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xd580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="SENDTO~2.DLL")) returned 1 [0178.220] wcscmp (_String1="SendToOneNoteUI.dll", _String2=".") returned 1 [0178.220] wcscmp (_String1="SendToOneNoteUI.dll", _String2="..") returned 1 [0178.220] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf144c00, ftCreationTime.dwHighDateTime=0x1cacf8e, ftLastAccessTime.dwLowDateTime=0x8e57dc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf144c00, ftLastWriteTime.dwHighDateTime=0x1cacf8e, nFileSizeHigh=0x0, nFileSizeLow=0xd580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="SENDTO~2.DLL")) returned 0 [0178.220] FindClose (in: hFindFile=0x3e73e30 | out: hFindFile=0x3e73e30) returned 1 [0178.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0178.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0178.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69fa8) returned 1 Thread: id = 4463 os_tid = 0x1490 [0173.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml")) returned 0x20 [0175.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML", dwFileAttributes=0x20) returned 0 [0175.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.319] GetLastError () returned 0x5 [0175.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML", dwFileAttributes=0x20) returned 0 [0175.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3efb620) returned 1 Thread: id = 4464 os_tid = 0x1494 [0173.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl")) returned 0x20 [0175.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL", dwFileAttributes=0x20) returned 0 [0175.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.353] GetLastError () returned 0x5 [0175.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL", dwFileAttributes=0x20) returned 0 [0175.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 Thread: id = 4465 os_tid = 0x1498 [0173.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm")) returned 0x20 [0175.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM", dwFileAttributes=0x20) returned 0 [0175.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.351] GetLastError () returned 0x5 [0175.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM", dwFileAttributes=0x20) returned 0 [0175.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d08) returned 1 Thread: id = 4466 os_tid = 0x149c [0173.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs")) returned 0x20 [0175.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS", dwFileAttributes=0x20) returned 0 [0175.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.350] GetLastError () returned 0x5 [0175.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS", dwFileAttributes=0x20) returned 0 [0175.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b48) returned 1 Thread: id = 4467 os_tid = 0x14a0 [0173.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat")) returned 0x20 [0175.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT", dwFileAttributes=0x20) returned 0 [0175.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.348] GetLastError () returned 0x5 [0175.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT", dwFileAttributes=0x20) returned 0 [0175.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 Thread: id = 4468 os_tid = 0x14a4 [0173.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest")) returned 0x20 [0175.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST", dwFileAttributes=0x20) returned 0 [0175.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.346] GetLastError () returned 0x5 [0175.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST", dwFileAttributes=0x20) returned 0 [0175.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 Thread: id = 4469 os_tid = 0x14a8 [0173.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45140 [0173.459] wcscpy (in: _Dest=0x3d45140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0173.459] wcscat (in: _Dest=0x3d45140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0173.459] wcscat (in: _Dest=0x3d45140, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*" [0173.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0173.460] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0174.550] wcscmp (_String1=".", _String2=".") returned 0 [0174.550] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.552] wcscmp (_String1="..", _String2=".") returned 1 [0174.552] wcscmp (_String1="..", _String2="..") returned 0 [0174.552] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMERITECH.NET.XML", cAlternateFileName="AMERIT~1.XML")) returned 1 [0174.552] wcscmp (_String1="AMERITECH.NET.XML", _String2=".") returned 1 [0174.552] wcscmp (_String1="AMERITECH.NET.XML", _String2="..") returned 1 [0174.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a675e0 [0174.553] wcscpy (in: _Dest=0x7a675e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0174.553] wcscat (in: _Dest=0x7a675e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0174.553] wcscat (in: _Dest=0x7a675e0, _Source="AMERITECH.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" [0175.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a675e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0175.208] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTINTERNET.NET.XML", cAlternateFileName="BTINTE~1.XML")) returned 1 [0175.208] wcscmp (_String1="BTINTERNET.NET.XML", _String2=".") returned 1 [0175.208] wcscmp (_String1="BTINTERNET.NET.XML", _String2="..") returned 1 [0175.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66a30 [0175.208] wcscpy (in: _Dest=0x7a66a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.208] wcscat (in: _Dest=0x7a66a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.208] wcscat (in: _Dest=0x7a66a30, _Source="BTINTERNET.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" [0175.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0175.209] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTOPENWORLD.COM.XML", cAlternateFileName="BTOPEN~1.XML")) returned 1 [0175.209] wcscmp (_String1="BTOPENWORLD.COM.XML", _String2=".") returned 1 [0175.209] wcscmp (_String1="BTOPENWORLD.COM.XML", _String2="..") returned 1 [0175.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66da0 [0175.209] wcscpy (in: _Dest=0x7a66da0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.209] wcscat (in: _Dest=0x7a66da0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.209] wcscat (in: _Dest=0x7a66da0, _Source="BTOPENWORLD.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" [0175.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0175.210] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x77d038d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLASH.NET.XML", cAlternateFileName="FLASHN~1.XML")) returned 1 [0175.210] wcscmp (_String1="FLASH.NET.XML", _String2=".") returned 1 [0175.210] wcscmp (_String1="FLASH.NET.XML", _String2="..") returned 1 [0175.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053e58 [0175.210] wcscpy (in: _Dest=0x3053e58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.211] wcscat (in: _Dest=0x3053e58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.211] wcscat (in: _Dest=0x3053e58, _Source="FLASH.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" [0175.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0175.217] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8df64410, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL.ROGERS.COM.XML", cAlternateFileName="NLROGE~1.XML")) returned 1 [0175.217] wcscmp (_String1="NL.ROGERS.COM.XML", _String2=".") returned 1 [0175.217] wcscmp (_String1="NL.ROGERS.COM.XML", _String2="..") returned 1 [0175.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66980 [0175.217] wcscpy (in: _Dest=0x7a66980, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.217] wcscat (in: _Dest=0x7a66980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.217] wcscat (in: _Dest=0x7a66980, _Source="NL.ROGERS.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" [0175.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0175.218] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVBELL.NET.XML", cAlternateFileName="NVBELL~1.XML")) returned 1 [0175.218] wcscmp (_String1="NVBELL.NET.XML", _String2=".") returned 1 [0175.218] wcscmp (_String1="NVBELL.NET.XML", _String2="..") returned 1 [0175.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053138 [0175.218] wcscpy (in: _Dest=0x3053138, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.218] wcscat (in: _Dest=0x3053138, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.218] wcscat (in: _Dest=0x3053138, _Source="NVBELL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" [0175.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0175.219] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8f8aedd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PACBELL.NET.XML", cAlternateFileName="PACBEL~1.XML")) returned 1 [0175.219] wcscmp (_String1="PACBELL.NET.XML", _String2=".") returned 1 [0175.219] wcscmp (_String1="PACBELL.NET.XML", _String2="..") returned 1 [0175.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053678 [0175.220] wcscpy (in: _Dest=0x3053678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.220] wcscat (in: _Dest=0x3053678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.220] wcscat (in: _Dest=0x3053678, _Source="PACBELL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" [0175.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0175.221] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRODIGY.NET.XML", cAlternateFileName="PRODIG~1.XML")) returned 1 [0175.221] wcscmp (_String1="PRODIGY.NET.XML", _String2=".") returned 1 [0175.221] wcscmp (_String1="PRODIGY.NET.XML", _String2="..") returned 1 [0175.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053528 [0175.221] wcscpy (in: _Dest=0x3053528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.221] wcscat (in: _Dest=0x3053528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.221] wcscat (in: _Dest=0x3053528, _Source="PRODIGY.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" [0175.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0175.222] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROGERS.COM.XML", cAlternateFileName="ROGERS~1.XML")) returned 1 [0175.222] wcscmp (_String1="ROGERS.COM.XML", _String2=".") returned 1 [0175.222] wcscmp (_String1="ROGERS.COM.XML", _String2="..") returned 1 [0175.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053870 [0175.222] wcscpy (in: _Dest=0x3053870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.222] wcscat (in: _Dest=0x3053870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.222] wcscat (in: _Dest=0x3053870, _Source="ROGERS.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" [0175.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0175.223] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBCGLOBAL.NET.XML", cAlternateFileName="SBCGLO~1.XML")) returned 1 [0175.223] wcscmp (_String1="SBCGLOBAL.NET.XML", _String2=".") returned 1 [0175.223] wcscmp (_String1="SBCGLOBAL.NET.XML", _String2="..") returned 1 [0175.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66400 [0175.223] wcscpy (in: _Dest=0x7a66400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.223] wcscat (in: _Dest=0x7a66400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.223] wcscat (in: _Dest=0x7a66400, _Source="SBCGLOBAL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" [0175.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0175.224] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9052e150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNET.NET.XML", cAlternateFileName="SNETNE~1.XML")) returned 1 [0175.224] wcscmp (_String1="SNET.NET.XML", _String2=".") returned 1 [0175.224] wcscmp (_String1="SNET.NET.XML", _String2="..") returned 1 [0175.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a629f0 [0175.224] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.224] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.224] wcscat (in: _Dest=0x7a629f0, _Source="SNET.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" [0175.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0175.225] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWBELL.NET.XML", cAlternateFileName="SWBELL~1.XML")) returned 1 [0175.225] wcscmp (_String1="SWBELL.NET.XML", _String2=".") returned 1 [0175.225] wcscmp (_String1="SWBELL.NET.XML", _String2="..") returned 1 [0175.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053f00 [0175.225] wcscpy (in: _Dest=0x3053f00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.226] wcscat (in: _Dest=0x3053f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.226] wcscat (in: _Dest=0x3053f00, _Source="SWBELL.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" [0175.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0175.227] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TALK21.COM.XML", cAlternateFileName="TALK21~1.XML")) returned 1 [0175.227] wcscmp (_String1="TALK21.COM.XML", _String2=".") returned 1 [0175.227] wcscmp (_String1="TALK21.COM.XML", _String2="..") returned 1 [0175.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x3053c60 [0175.227] wcscpy (in: _Dest=0x3053c60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.227] wcscat (in: _Dest=0x3053c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.227] wcscat (in: _Dest=0x3053c60, _Source="TALK21.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" [0175.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0175.228] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9233b710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="WANS.NET.XML", cAlternateFileName="WANSNE~1.XML")) returned 1 [0175.228] wcscmp (_String1="WANS.NET.XML", _String2=".") returned 1 [0175.228] wcscmp (_String1="WANS.NET.XML", _String2="..") returned 1 [0175.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63cb0 [0175.228] wcscpy (in: _Dest=0x7a63cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.228] wcscat (in: _Dest=0x7a63cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.228] wcscat (in: _Dest=0x7a63cb0, _Source="WANS.NET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" [0175.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0175.229] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CA.XML", cAlternateFileName="YAHOOC~2.XML")) returned 1 [0175.229] wcscmp (_String1="YAHOO.CA.XML", _String2=".") returned 1 [0175.229] wcscmp (_String1="YAHOO.CA.XML", _String2="..") returned 1 [0175.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a633f0 [0175.229] wcscpy (in: _Dest=0x7a633f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.229] wcscat (in: _Dest=0x7a633f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.229] wcscat (in: _Dest=0x7a633f0, _Source="YAHOO.CA.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" [0175.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a633f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0175.233] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.ID.XML", cAlternateFileName="YA6C44~1.XML")) returned 1 [0175.233] wcscmp (_String1="YAHOO.CO.ID.XML", _String2=".") returned 1 [0175.233] wcscmp (_String1="YAHOO.CO.ID.XML", _String2="..") returned 1 [0175.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053288 [0175.234] wcscpy (in: _Dest=0x3053288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.234] wcscat (in: _Dest=0x3053288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.234] wcscat (in: _Dest=0x3053288, _Source="YAHOO.CO.ID.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" [0175.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0175.243] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.IN.XML", cAlternateFileName="YA8E91~1.XML")) returned 1 [0175.243] wcscmp (_String1="YAHOO.CO.IN.XML", _String2=".") returned 1 [0175.243] wcscmp (_String1="YAHOO.CO.IN.XML", _String2="..") returned 1 [0175.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053b10 [0175.244] wcscpy (in: _Dest=0x3053b10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.244] wcscat (in: _Dest=0x3053b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.244] wcscat (in: _Dest=0x3053b10, _Source="YAHOO.CO.IN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" [0175.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0175.245] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c8900, ftCreationTime.dwHighDateTime=0x1c6eae1, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x954c8900, ftLastWriteTime.dwHighDateTime=0x1c6eae1, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.JP.XML", cAlternateFileName="YAHOOC~3.XML")) returned 1 [0175.245] wcscmp (_String1="YAHOO.CO.JP.XML", _String2=".") returned 1 [0175.245] wcscmp (_String1="YAHOO.CO.JP.XML", _String2="..") returned 1 [0175.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053480 [0175.245] wcscpy (in: _Dest=0x3053480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.245] wcscat (in: _Dest=0x3053480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.245] wcscat (in: _Dest=0x3053480, _Source="YAHOO.CO.JP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" [0175.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0175.246] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.KR.XML", cAlternateFileName="YAEF96~1.XML")) returned 1 [0175.246] wcscmp (_String1="YAHOO.CO.KR.XML", _String2=".") returned 1 [0175.246] wcscmp (_String1="YAHOO.CO.KR.XML", _String2="..") returned 1 [0175.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053918 [0175.246] wcscpy (in: _Dest=0x3053918, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.246] wcscat (in: _Dest=0x3053918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.246] wcscat (in: _Dest=0x3053918, _Source="YAHOO.CO.KR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" [0175.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0175.247] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.NZ.XML", cAlternateFileName="YA186B~1.XML")) returned 1 [0175.247] wcscmp (_String1="YAHOO.CO.NZ.XML", _String2=".") returned 1 [0175.247] wcscmp (_String1="YAHOO.CO.NZ.XML", _String2="..") returned 1 [0175.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053d08 [0175.247] wcscpy (in: _Dest=0x3053d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.247] wcscat (in: _Dest=0x3053d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.248] wcscat (in: _Dest=0x3053d08, _Source="YAHOO.CO.NZ.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" [0175.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0175.248] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.TH.XML", cAlternateFileName="YACB7D~1.XML")) returned 1 [0175.248] wcscmp (_String1="YAHOO.CO.TH.XML", _String2=".") returned 1 [0175.248] wcscmp (_String1="YAHOO.CO.TH.XML", _String2="..") returned 1 [0175.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e480 [0175.249] wcscpy (in: _Dest=0x7a5e480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.249] wcscat (in: _Dest=0x7a5e480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.249] wcscat (in: _Dest=0x7a5e480, _Source="YAHOO.CO.TH.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" [0175.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0175.250] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.UK.XML", cAlternateFileName="YAE791~1.XML")) returned 1 [0175.250] wcscmp (_String1="YAHOO.CO.UK.XML", _String2=".") returned 1 [0175.250] wcscmp (_String1="YAHOO.CO.UK.XML", _String2="..") returned 1 [0175.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f6e0 [0175.250] wcscpy (in: _Dest=0x7a5f6e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.250] wcscat (in: _Dest=0x7a5f6e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.250] wcscat (in: _Dest=0x7a5f6e0, _Source="YAHOO.CO.UK.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" [0175.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0175.251] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AR.XML", cAlternateFileName="YA81CD~1.XML")) returned 1 [0175.251] wcscmp (_String1="YAHOO.COM.AR.XML", _String2=".") returned 1 [0175.251] wcscmp (_String1="YAHOO.COM.AR.XML", _String2="..") returned 1 [0175.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f248 [0175.251] wcscpy (in: _Dest=0x7a5f248, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.252] wcscat (in: _Dest=0x7a5f248, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.252] wcscat (in: _Dest=0x7a5f248, _Source="YAHOO.COM.AR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" [0175.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0175.260] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AU.XML", cAlternateFileName="YA02CD~1.XML")) returned 1 [0175.260] wcscmp (_String1="YAHOO.COM.AU.XML", _String2=".") returned 1 [0175.260] wcscmp (_String1="YAHOO.COM.AU.XML", _String2="..") returned 1 [0175.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f638 [0175.260] wcscpy (in: _Dest=0x7a5f638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.260] wcscat (in: _Dest=0x7a5f638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.260] wcscat (in: _Dest=0x7a5f638, _Source="YAHOO.COM.AU.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" [0175.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0175.541] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x85554810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.BR.XML", cAlternateFileName="YAHOOC~1.XML")) returned 1 [0175.541] wcscmp (_String1="YAHOO.COM.BR.XML", _String2=".") returned 1 [0175.541] wcscmp (_String1="YAHOO.COM.BR.XML", _String2="..") returned 1 [0175.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e7c8 [0175.541] wcscpy (in: _Dest=0x7a5e7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0175.541] wcscat (in: _Dest=0x7a5e7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0175.541] wcscat (in: _Dest=0x7a5e7c8, _Source="YAHOO.COM.BR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" [0176.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0176.131] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.CN.XML", cAlternateFileName="YAHOOC~4.XML")) returned 1 [0176.131] wcscmp (_String1="YAHOO.COM.CN.XML", _String2=".") returned 1 [0176.131] wcscmp (_String1="YAHOO.COM.CN.XML", _String2="..") returned 1 [0176.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f440 [0176.131] wcscpy (in: _Dest=0x7a5f440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0176.131] wcscat (in: _Dest=0x7a5f440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0176.131] wcscat (in: _Dest=0x7a5f440, _Source="YAHOO.COM.CN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" [0176.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0176.133] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.HK.XML", cAlternateFileName="YA56AC~1.XML")) returned 1 [0176.134] wcscmp (_String1="YAHOO.COM.HK.XML", _String2=".") returned 1 [0176.134] wcscmp (_String1="YAHOO.COM.HK.XML", _String2="..") returned 1 [0176.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e528 [0176.134] wcscpy (in: _Dest=0x7a5e528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0176.134] wcscat (in: _Dest=0x7a5e528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0176.134] wcscat (in: _Dest=0x7a5e528, _Source="YAHOO.COM.HK.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" [0176.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0176.136] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MX.XML", cAlternateFileName="YAEA08~1.XML")) returned 1 [0176.136] wcscmp (_String1="YAHOO.COM.MX.XML", _String2=".") returned 1 [0176.136] wcscmp (_String1="YAHOO.COM.MX.XML", _String2="..") returned 1 [0176.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e720 [0176.136] wcscpy (in: _Dest=0x7a5e720, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0176.136] wcscat (in: _Dest=0x7a5e720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0176.136] wcscat (in: _Dest=0x7a5e720, _Source="YAHOO.COM.MX.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" [0176.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0176.138] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MY.XML", cAlternateFileName="YA0670~1.XML")) returned 1 [0176.138] wcscmp (_String1="YAHOO.COM.MY.XML", _String2=".") returned 1 [0176.138] wcscmp (_String1="YAHOO.COM.MY.XML", _String2="..") returned 1 [0176.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e3d8 [0176.138] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0176.138] wcscat (in: _Dest=0x7a5e3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0176.138] wcscat (in: _Dest=0x7a5e3d8, _Source="YAHOO.COM.MY.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" [0176.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0176.140] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.PH.XML", cAlternateFileName="YA6D1B~1.XML")) returned 1 [0176.140] wcscmp (_String1="YAHOO.COM.PH.XML", _String2=".") returned 1 [0176.140] wcscmp (_String1="YAHOO.COM.PH.XML", _String2="..") returned 1 [0176.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e918 [0176.140] wcscpy (in: _Dest=0x7a5e918, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0176.140] wcscat (in: _Dest=0x7a5e918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0176.140] wcscat (in: _Dest=0x7a5e918, _Source="YAHOO.COM.PH.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" [0176.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0176.142] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.SG.XML", cAlternateFileName="YAC50A~1.XML")) returned 1 [0176.142] wcscmp (_String1="YAHOO.COM.SG.XML", _String2=".") returned 1 [0176.142] wcscmp (_String1="YAHOO.COM.SG.XML", _String2="..") returned 1 [0176.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e5d0 [0176.142] wcscpy (in: _Dest=0x7a5e5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0176.142] wcscat (in: _Dest=0x7a5e5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0176.142] wcscat (in: _Dest=0x7a5e5d0, _Source="YAHOO.COM.SG.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" [0176.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750 [0176.143] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.TW.XML", cAlternateFileName="YAB0F6~1.XML")) returned 1 [0177.127] wcscmp (_String1="YAHOO.COM.TW.XML", _String2=".") returned 1 [0177.127] wcscmp (_String1="YAHOO.COM.TW.XML", _String2="..") returned 1 [0177.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e1e0 [0177.128] wcscpy (in: _Dest=0x7a5e1e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.128] wcscat (in: _Dest=0x7a5e1e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.128] wcscat (in: _Dest=0x7a5e1e0, _Source="YAHOO.COM.TW.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" [0177.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78 [0177.132] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.VN.XML", cAlternateFileName="YA38FD~1.XML")) returned 1 [0177.132] wcscmp (_String1="YAHOO.COM.VN.XML", _String2=".") returned 1 [0177.132] wcscmp (_String1="YAHOO.COM.VN.XML", _String2="..") returned 1 [0177.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f590 [0177.132] wcscpy (in: _Dest=0x7a5f590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.132] wcscat (in: _Dest=0x7a5f590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.132] wcscat (in: _Dest=0x7a5f590, _Source="YAHOO.COM.VN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" [0177.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0177.134] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.XML", cAlternateFileName="YA531A~1.XML")) returned 1 [0177.134] wcscmp (_String1="YAHOO.COM.XML", _String2=".") returned 1 [0177.134] wcscmp (_String1="YAHOO.COM.XML", _String2="..") returned 1 [0177.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5f1a0 [0177.134] wcscpy (in: _Dest=0x7a5f1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.134] wcscat (in: _Dest=0x7a5f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.134] wcscat (in: _Dest=0x7a5f1a0, _Source="YAHOO.COM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" [0177.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0177.136] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.DE.XML", cAlternateFileName="YAHOOD~1.XML")) returned 1 [0177.136] wcscmp (_String1="YAHOO.DE.XML", _String2=".") returned 1 [0177.136] wcscmp (_String1="YAHOO.DE.XML", _String2="..") returned 1 [0177.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63210 [0177.136] wcscpy (in: _Dest=0x7a63210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.136] wcscat (in: _Dest=0x7a63210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.136] wcscat (in: _Dest=0x7a63210, _Source="YAHOO.DE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" [0177.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c [0177.137] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.ES.XML", cAlternateFileName="YAHOOE~1.XML")) returned 1 [0177.138] wcscmp (_String1="YAHOO.ES.XML", _String2=".") returned 1 [0177.138] wcscmp (_String1="YAHOO.ES.XML", _String2="..") returned 1 [0177.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62c70 [0177.138] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.138] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.138] wcscat (in: _Dest=0x7a62c70, _Source="YAHOO.ES.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" [0177.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0177.139] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.FR.XML", cAlternateFileName="YAHOOF~1.XML")) returned 1 [0177.139] wcscmp (_String1="YAHOO.FR.XML", _String2=".") returned 1 [0177.139] wcscmp (_String1="YAHOO.FR.XML", _String2="..") returned 1 [0177.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63c10 [0177.140] wcscpy (in: _Dest=0x7a63c10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.140] wcscat (in: _Dest=0x7a63c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.140] wcscat (in: _Dest=0x7a63c10, _Source="YAHOO.FR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" [0177.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0177.141] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.HK.XML", cAlternateFileName="YAHOOH~1.XML")) returned 1 [0177.141] wcscmp (_String1="YAHOO.HK.XML", _String2=".") returned 1 [0177.141] wcscmp (_String1="YAHOO.HK.XML", _String2="..") returned 1 [0177.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a637b0 [0177.141] wcscpy (in: _Dest=0x7a637b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.141] wcscat (in: _Dest=0x7a637b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.141] wcscat (in: _Dest=0x7a637b0, _Source="YAHOO.HK.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" [0177.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a637b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0177.142] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IE.XML", cAlternateFileName="YAHOOI~1.XML")) returned 1 [0177.142] wcscmp (_String1="YAHOO.IE.XML", _String2=".") returned 1 [0177.142] wcscmp (_String1="YAHOO.IE.XML", _String2="..") returned 1 [0177.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63df0 [0177.142] wcscpy (in: _Dest=0x7a63df0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.142] wcscat (in: _Dest=0x7a63df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.142] wcscat (in: _Dest=0x7a63df0, _Source="YAHOO.IE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" [0177.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0177.143] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IT.XML", cAlternateFileName="YAHOOI~2.XML")) returned 1 [0177.143] wcscmp (_String1="YAHOO.IT.XML", _String2=".") returned 1 [0177.143] wcscmp (_String1="YAHOO.IT.XML", _String2="..") returned 1 [0177.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63850 [0177.143] wcscpy (in: _Dest=0x7a63850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.143] wcscat (in: _Dest=0x7a63850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.143] wcscat (in: _Dest=0x7a63850, _Source="YAHOO.IT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" [0177.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0177.145] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c8900, ftCreationTime.dwHighDateTime=0x1c6eae1, ftLastAccessTime.dwLowDateTime=0x9265b3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x954c8900, ftLastWriteTime.dwHighDateTime=0x1c6eae1, nFileSizeHigh=0x0, nFileSizeLow=0x331, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.JP.XML", cAlternateFileName="YAHOOJ~1.XML")) returned 1 [0177.145] wcscmp (_String1="YAHOO.JP.XML", _String2=".") returned 1 [0177.145] wcscmp (_String1="YAHOO.JP.XML", _String2="..") returned 1 [0177.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62bd0 [0177.145] wcscpy (in: _Dest=0x7a62bd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.145] wcscat (in: _Dest=0x7a62bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.145] wcscat (in: _Dest=0x7a62bd0, _Source="YAHOO.JP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" [0177.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0177.146] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.NO.XML", cAlternateFileName="YAHOON~1.XML")) returned 1 [0177.146] wcscmp (_String1="YAHOO.NO.XML", _String2=".") returned 1 [0177.146] wcscmp (_String1="YAHOO.NO.XML", _String2="..") returned 1 [0177.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63fd0 [0177.146] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.146] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.146] wcscat (in: _Dest=0x7a63fd0, _Source="YAHOO.NO.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" [0177.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0177.147] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x8557a970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.PL.XML", cAlternateFileName="YAHOOP~1.XML")) returned 1 [0177.147] wcscmp (_String1="YAHOO.PL.XML", _String2=".") returned 1 [0177.147] wcscmp (_String1="YAHOO.PL.XML", _String2="..") returned 1 [0177.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62e50 [0177.147] wcscpy (in: _Dest=0x7a62e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.147] wcscat (in: _Dest=0x7a62e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.147] wcscat (in: _Dest=0x7a62e50, _Source="YAHOO.PL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" [0177.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0177.148] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 1 [0177.148] wcscmp (_String1="YAHOO.SE.XML", _String2=".") returned 1 [0177.148] wcscmp (_String1="YAHOO.SE.XML", _String2="..") returned 1 [0177.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62310 [0177.149] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover" [0177.149] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\" [0177.149] wcscat (in: _Dest=0x7a62310, _Source="YAHOO.SE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" [0177.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0177.150] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4389c300, ftCreationTime.dwHighDateTime=0x1c6e7b0, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4389c300, ftLastWriteTime.dwHighDateTime=0x1c6e7b0, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 0 [0178.780] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0178.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0178.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 [0178.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c6d0) returned 1 Thread: id = 4470 os_tid = 0x14b0 [0173.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc3fc0 [0173.460] wcscpy (in: _Dest=0x3dc3fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0173.460] wcscat (in: _Dest=0x3dc3fc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0173.460] wcscat (in: _Dest=0x3dc3fc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*" [0173.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0173.460] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6173350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6178170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6178170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0175.363] wcscmp (_String1=".", _String2=".") returned 0 [0175.363] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6173350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6178170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6178170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.363] wcscmp (_String1="..", _String2=".") returned 1 [0175.363] wcscmp (_String1="..", _String2="..") returned 0 [0175.363] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0175.363] wcscmp (_String1="0.9_0", _String2=".") returned 1 [0175.363] wcscmp (_String1="0.9_0", _String2="..") returned 1 [0175.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3daff88 [0175.363] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" [0175.363] wcscat (in: _Dest=0x3daff88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\" [0175.363] wcscat (in: _Dest=0x3daff88, _Source="0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0175.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3daff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0175.798] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0175.798] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0175.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0175.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3fc0) returned 1 [0175.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 Thread: id = 4471 os_tid = 0x14b4 [0173.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4530 [0173.463] wcscpy (in: _Dest=0x3dc4530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0173.463] wcscat (in: _Dest=0x3dc4530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0173.463] wcscat (in: _Dest=0x3dc4530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*" [0173.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0173.463] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65fae00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65fae00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0175.367] wcscmp (_String1=".", _String2=".") returned 0 [0175.367] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65fae00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65fae00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.367] wcscmp (_String1="..", _String2=".") returned 1 [0175.368] wcscmp (_String1="..", _String2="..") returned 0 [0175.368] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.0.0.6_0", cAlternateFileName="000~1.6_0")) returned 1 [0175.368] wcscmp (_String1="0.0.0.6_0", _String2=".") returned 1 [0175.368] wcscmp (_String1="0.0.0.6_0", _String2="..") returned 1 [0175.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dad468 [0175.368] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0175.368] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0175.368] wcscat (in: _Dest=0x3dad468, _Source="0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0176.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dad468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0176.209] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0176.209] wcscmp (_String1="0.9_0", _String2=".") returned 1 [0176.209] wcscmp (_String1="0.9_0", _String2="..") returned 1 [0176.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db09d8 [0176.209] wcscpy (in: _Dest=0x3db09d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" [0176.209] wcscat (in: _Dest=0x3db09d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\" [0176.209] wcscat (in: _Dest=0x3db09d8, _Source="0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0176.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db09d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0176.212] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0176.212] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0176.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0176.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4530) returned 1 [0176.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c88e8) returned 1 Thread: id = 4472 os_tid = 0x14b8 [0173.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4618 [0173.463] wcscpy (in: _Dest=0x3dc4618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0173.464] wcscat (in: _Dest=0x3dc4618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0173.464] wcscat (in: _Dest=0x3dc4618, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*" [0173.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0173.464] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f9dc70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ff4960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ff4960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0175.365] wcscmp (_String1=".", _String2=".") returned 0 [0175.365] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f9dc70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ff4960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ff4960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.366] wcscmp (_String1="..", _String2=".") returned 1 [0175.366] wcscmp (_String1="..", _String2="..") returned 0 [0175.366] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c610f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 1 [0175.366] wcscmp (_String1="14.1_0", _String2=".") returned 1 [0175.366] wcscmp (_String1="14.1_0", _String2="..") returned 1 [0175.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db0348 [0175.366] wcscpy (in: _Dest=0x3db0348, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0175.366] wcscat (in: _Dest=0x3db0348, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0175.366] wcscat (in: _Dest=0x3db0348, _Source="14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0176.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db0348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0176.222] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.2_0", cAlternateFileName="")) returned 1 [0176.222] wcscmp (_String1="6.2_0", _String2=".") returned 1 [0176.222] wcscmp (_String1="6.2_0", _String2="..") returned 1 [0176.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0ac8 [0176.222] wcscpy (in: _Dest=0x3db0ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" [0176.222] wcscat (in: _Dest=0x3db0ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\" [0176.222] wcscat (in: _Dest=0x3db0ac8, _Source="6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0176.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db0ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0176.224] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.2_0", cAlternateFileName="")) returned 0 [0176.224] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0176.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0176.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4618) returned 1 [0176.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 4473 os_tid = 0x14bc [0173.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4700 [0173.464] wcscpy (in: _Dest=0x3dc4700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0173.464] wcscat (in: _Dest=0x3dc4700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0173.464] wcscat (in: _Dest=0x3dc4700, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*" [0173.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0173.464] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe509e200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe853dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe853dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0175.365] wcscmp (_String1=".", _String2=".") returned 0 [0175.365] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe509e200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe853dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe853dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.365] wcscmp (_String1="..", _String2=".") returned 1 [0175.365] wcscmp (_String1="..", _String2="..") returned 0 [0175.365] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe508f7a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.5_0", cAlternateFileName="4279B3~1.5_0")) returned 1 [0175.365] wcscmp (_String1="4.2.5_0", _String2=".") returned 1 [0175.365] wcscmp (_String1="4.2.5_0", _String2="..") returned 1 [0175.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db0258 [0175.365] wcscpy (in: _Dest=0x3db0258, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0175.365] wcscat (in: _Dest=0x3db0258, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0175.365] wcscat (in: _Dest=0x3db0258, _Source="4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0175.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0175.807] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 1 [0175.808] wcscmp (_String1="4.2.8_0", _String2=".") returned 1 [0175.808] wcscmp (_String1="4.2.8_0", _String2="..") returned 1 [0175.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db0618 [0175.808] wcscpy (in: _Dest=0x3db0618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" [0175.808] wcscat (in: _Dest=0x3db0618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\" [0175.808] wcscat (in: _Dest=0x3db0618, _Source="4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0175.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db0618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0175.809] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 0 [0175.809] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0175.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0175.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4700) returned 1 [0175.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 Thread: id = 4474 os_tid = 0x14fc [0173.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc47e8 [0173.465] wcscpy (in: _Dest=0x3dc47e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0173.465] wcscat (in: _Dest=0x3dc47e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0173.465] wcscat (in: _Dest=0x3dc47e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*" [0173.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0173.465] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5c801e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c85000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c85000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0175.364] wcscmp (_String1=".", _String2=".") returned 0 [0175.364] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5c801e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c85000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c85000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.364] wcscmp (_String1="..", _String2=".") returned 1 [0175.364] wcscmp (_String1="..", _String2="..") returned 0 [0175.364] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 1 [0175.364] wcscmp (_String1="1.4_0", _String2=".") returned 1 [0175.364] wcscmp (_String1="1.4_0", _String2="..") returned 1 [0175.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0078 [0175.364] wcscpy (in: _Dest=0x3db0078, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" [0175.364] wcscat (in: _Dest=0x3db0078, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0175.364] wcscat (in: _Dest=0x3db0078, _Source="1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0175.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db0078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0175.800] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 0 [0175.801] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0175.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0175.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc47e8) returned 1 [0175.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8728) returned 1 Thread: id = 4475 os_tid = 0x1500 [0173.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc48d0 [0173.466] wcscpy (in: _Dest=0x3dc48d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0173.466] wcscat (in: _Dest=0x3dc48d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\" [0173.466] wcscat (in: _Dest=0x3dc48d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*" [0173.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0173.466] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5427e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe542cc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe542cc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0174.557] wcscmp (_String1=".", _String2=".") returned 0 [0174.557] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5427e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe542cc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe542cc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.557] wcscmp (_String1="..", _String2=".") returned 1 [0174.557] wcscmp (_String1="..", _String2="..") returned 0 [0174.557] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 1 [0174.557] wcscmp (_String1="1.0.0.2_0", _String2=".") returned 1 [0174.557] wcscmp (_String1="1.0.0.2_0", _String2="..") returned 1 [0174.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadd20 [0174.558] wcscpy (in: _Dest=0x3dadd20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" [0174.558] wcscat (in: _Dest=0x3dadd20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\" [0174.558] wcscat (in: _Dest=0x3dadd20, _Source="1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0175.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dadd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0175.513] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 0 [0175.513] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0175.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0175.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc48d0) returned 1 [0175.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8c68) returned 1 Thread: id = 4476 os_tid = 0x1504 [0173.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc49b8 [0173.466] wcscpy (in: _Dest=0x3dc49b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0173.466] wcscat (in: _Dest=0x3dc49b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0173.466] wcscat (in: _Dest=0x3dc49b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*" [0173.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0173.466] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efa340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b60b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b60b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0175.366] wcscmp (_String1=".", _String2=".") returned 0 [0175.366] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efa340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b60b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b60b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.366] wcscmp (_String1="..", _String2=".") returned 1 [0175.366] wcscmp (_String1="..", _String2="..") returned 0 [0175.366] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7_0", cAlternateFileName="")) returned 1 [0175.367] wcscmp (_String1="7_0", _String2=".") returned 1 [0175.367] wcscmp (_String1="7_0", _String2="..") returned 1 [0175.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4448 [0175.367] wcscpy (in: _Dest=0x3dc4448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0175.367] wcscat (in: _Dest=0x3dc4448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0175.367] wcscat (in: _Dest=0x3dc4448, _Source="7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0175.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dc4448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0175.816] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 1 [0175.816] wcscmp (_String1="8.1_0", _String2=".") returned 1 [0175.816] wcscmp (_String1="8.1_0", _String2="..") returned 1 [0175.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0708 [0175.816] wcscpy (in: _Dest=0x3db0708, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" [0175.816] wcscat (in: _Dest=0x3db0708, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\" [0175.816] wcscat (in: _Dest=0x3db0708, _Source="8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0175.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3db0708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0175.818] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 0 [0175.818] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0175.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0175.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc49b8) returned 1 [0175.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8e28) returned 1 Thread: id = 4477 os_tid = 0x1508 [0173.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6968 [0173.467] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" [0173.467] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\" [0173.467] wcscat (in: _Dest=0x2ff6968, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*" [0173.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0173.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8256cd50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8256cd50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0174.650] wcscmp (_String1=".", _String2=".") returned 0 [0174.650] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8256cd50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8256cd50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.650] wcscmp (_String1="..", _String2=".") returned 1 [0174.650] wcscmp (_String1="..", _String2="..") returned 0 [0174.650] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 1 [0174.650] wcscmp (_String1="SignedComponents.cer", _String2=".") returned 1 [0174.650] wcscmp (_String1="SignedComponents.cer", _String2="..") returned 1 [0174.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8568 [0174.650] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components" [0174.650] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\" [0174.650] wcscat (in: _Dest=0x2c8568, _Source="SignedComponents.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" [0175.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16fc [0175.496] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 0 [0175.496] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0175.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0175.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 [0175.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf740) returned 1 Thread: id = 4478 os_tid = 0x150c [0173.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66f18 [0173.468] wcscpy (in: _Dest=0x3e66f18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" [0173.468] wcscat (in: _Dest=0x3e66f18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\" [0173.468] wcscat (in: _Dest=0x3e66f18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*" [0173.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0173.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x904e1e90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0174.116] wcscmp (_String1=".", _String2=".") returned 0 [0174.116] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x904e1e90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x904e1e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.116] wcscmp (_String1="..", _String2=".") returned 1 [0174.116] wcscmp (_String1="..", _String2="..") returned 0 [0174.116] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 1 [0174.116] wcscmp (_String1="SignedManagedObjects.cer", _String2=".") returned 1 [0174.116] wcscmp (_String1="SignedManagedObjects.cer", _String2="..") returned 1 [0174.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db0168 [0174.117] wcscpy (in: _Dest=0x3db0168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects" [0174.117] wcscat (in: _Dest=0x3db0168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\" [0174.117] wcscat (in: _Dest=0x3db0168, _Source="SignedManagedObjects.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" [0176.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0176.165] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103f000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x103f000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 0 [0176.165] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0176.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0176.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66f18) returned 1 [0176.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66918) returned 1 Thread: id = 4479 os_tid = 0x1510 [0173.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a664b0 [0173.476] wcscpy (in: _Dest=0x7a664b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0173.476] wcscat (in: _Dest=0x7a664b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\" [0173.476] wcscat (in: _Dest=0x7a664b0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*" [0173.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0173.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0174.558] wcscmp (_String1=".", _String2=".") returned 0 [0174.558] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x824623b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.559] wcscmp (_String1="..", _String2=".") returned 1 [0174.559] wcscmp (_String1="..", _String2="..") returned 0 [0174.559] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Management.cer", cAlternateFileName="MANAGE~1.CER")) returned 1 [0174.559] wcscmp (_String1="Management.cer", _String2=".") returned 1 [0174.559] wcscmp (_String1="Management.cer", _String2="..") returned 1 [0174.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d86260 [0174.559] wcscpy (in: _Dest=0x3d86260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0174.559] wcscat (in: _Dest=0x3d86260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\" [0174.559] wcscat (in: _Dest=0x3d86260, _Source="Management.cer" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" [0176.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0176.216] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 1 [0176.216] wcscmp (_String1="RELAY.CER", _String2=".") returned 1 [0176.216] wcscmp (_String1="RELAY.CER", _String2="..") returned 1 [0176.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333528 [0176.216] wcscpy (in: _Dest=0x333528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers" [0176.216] wcscat (in: _Dest=0x333528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\" [0176.216] wcscat (in: _Dest=0x333528, _Source="RELAY.CER" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" [0176.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0176.218] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2351d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 0 [0176.218] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0176.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0176.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a664b0) returned 1 [0176.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 4480 os_tid = 0x1514 [0173.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx")) returned 0x20 [0173.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.478] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.478] GetLastError () returned 0x5 [0173.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3054050) returned 1 Thread: id = 4481 os_tid = 0x1518 [0173.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx")) returned 0x20 [0173.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.479] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.479] GetLastError () returned 0x5 [0173.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 Thread: id = 4482 os_tid = 0x151c [0173.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus")) returned 0x20 [0175.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS", dwFileAttributes=0x20) returned 0 [0175.370] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.370] GetLastError () returned 0x5 [0175.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS", dwFileAttributes=0x20) returned 0 [0175.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 Thread: id = 4483 os_tid = 0x1520 [0173.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus")) returned 0x20 [0174.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS", dwFileAttributes=0x20) returned 0 [0174.560] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.560] GetLastError () returned 0x5 [0174.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS", dwFileAttributes=0x20) returned 0 [0174.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 4484 os_tid = 0x1524 [0173.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus")) returned 0x20 [0175.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS", dwFileAttributes=0x20) returned 0 [0175.369] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.369] GetLastError () returned 0x5 [0175.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS", dwFileAttributes=0x20) returned 0 [0175.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 4485 os_tid = 0x1528 [0173.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx")) returned 0x20 [0173.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.482] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.483] GetLastError () returned 0x5 [0173.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f590) returned 1 Thread: id = 4486 os_tid = 0x152c [0173.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx")) returned 0x20 [0173.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.484] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.484] GetLastError () returned 0x5 [0173.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e1e0) returned 1 Thread: id = 4487 os_tid = 0x1530 [0173.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur")) returned 0x20 [0175.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR", dwFileAttributes=0x20) returned 0 [0175.374] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.374] GetLastError () returned 0x5 [0175.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR", dwFileAttributes=0x20) returned 0 [0175.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 4488 os_tid = 0x1534 [0173.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur")) returned 0x20 [0174.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR", dwFileAttributes=0x20) returned 0 [0174.562] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.562] GetLastError () returned 0x5 [0174.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR", dwFileAttributes=0x20) returned 0 [0174.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 Thread: id = 4489 os_tid = 0x1538 [0173.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur")) returned 0x20 [0175.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR", dwFileAttributes=0x20) returned 0 [0175.372] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.372] GetLastError () returned 0x5 [0175.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR", dwFileAttributes=0x20) returned 0 [0175.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 Thread: id = 4490 os_tid = 0x153c [0173.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\broken_hill")) returned 0x20 [0173.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill", dwFileAttributes=0x20) returned 0 [0173.498] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\broken_hill"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.504] GetLastError () returned 0x5 [0173.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill", dwFileAttributes=0x20) returned 0 [0173.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 Thread: id = 4491 os_tid = 0x1540 [0173.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\currie")) returned 0x20 [0173.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie", dwFileAttributes=0x20) returned 0 [0173.514] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\currie"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.519] GetLastError () returned 0x5 [0173.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Currie", dwFileAttributes=0x20) returned 0 [0173.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69bb8) returned 1 Thread: id = 4492 os_tid = 0x1544 [0173.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\darwin")) returned 0x20 [0173.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin", dwFileAttributes=0x20) returned 0 [0173.533] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\darwin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.539] GetLastError () returned 0x5 [0173.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Darwin", dwFileAttributes=0x20) returned 0 [0173.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23060) returned 1 Thread: id = 4493 os_tid = 0x1548 [0173.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\eucla")) returned 0x20 [0175.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla", dwFileAttributes=0x20) returned 0 [0175.622] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\eucla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.622] GetLastError () returned 0x5 [0175.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Eucla", dwFileAttributes=0x20) returned 0 [0175.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a70) returned 1 Thread: id = 4494 os_tid = 0x154c [0173.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\hobart")) returned 0x20 [0175.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart", dwFileAttributes=0x20) returned 0 [0175.587] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\hobart"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.587] GetLastError () returned 0x5 [0175.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Hobart", dwFileAttributes=0x20) returned 0 [0175.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23370) returned 1 Thread: id = 4495 os_tid = 0x1550 [0173.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lindeman")) returned 0x20 [0175.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman", dwFileAttributes=0x20) returned 0 [0175.624] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lindeman"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.624] GetLastError () returned 0x5 [0175.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lindeman", dwFileAttributes=0x20) returned 0 [0175.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 Thread: id = 4496 os_tid = 0x1554 [0173.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lord_howe")) returned 0x20 [0175.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe", dwFileAttributes=0x20) returned 0 [0175.625] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\lord_howe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.625] GetLastError () returned 0x5 [0175.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe", dwFileAttributes=0x20) returned 0 [0175.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 Thread: id = 4497 os_tid = 0x1558 [0173.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\melbourne")) returned 0x20 [0175.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne", dwFileAttributes=0x20) returned 0 [0175.629] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\melbourne"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.629] GetLastError () returned 0x5 [0175.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Melbourne", dwFileAttributes=0x20) returned 0 [0175.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 Thread: id = 4498 os_tid = 0x155c [0173.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\perth")) returned 0x20 [0175.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth", dwFileAttributes=0x20) returned 0 [0175.456] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\perth"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.456] GetLastError () returned 0x5 [0175.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Perth", dwFileAttributes=0x20) returned 0 [0175.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a00) returned 1 Thread: id = 4499 os_tid = 0x1560 [0173.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\sydney")) returned 0x20 [0175.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney", dwFileAttributes=0x20) returned 0 [0175.627] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\australia\\sydney"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.627] GetLastError () returned 0x5 [0175.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Australia\\Sydney", dwFileAttributes=0x20) returned 0 [0175.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23df0) returned 1 Thread: id = 4500 os_tid = 0x1564 [0173.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h")) returned 0x20 [0173.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H", dwFileAttributes=0x20) returned 0 [0173.549] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.549] GetLastError () returned 0x5 [0173.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H", dwFileAttributes=0x20) returned 0 [0173.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5af0) returned 1 Thread: id = 4501 os_tid = 0x1568 [0173.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v")) returned 0x20 [0173.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V", dwFileAttributes=0x20) returned 0 [0173.551] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.551] GetLastError () returned 0x5 [0173.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V", dwFileAttributes=0x20) returned 0 [0173.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47318) returned 1 Thread: id = 4502 os_tid = 0x156c [0173.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer")) returned 0x20 [0173.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer", dwFileAttributes=0x20) returned 0 [0173.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.564] GetLastError () returned 0x5 [0173.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer", dwFileAttributes=0x20) returned 0 [0173.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f9a00) returned 1 Thread: id = 4503 os_tid = 0x1570 [0173.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer")) returned 0x20 [0173.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer", dwFileAttributes=0x20) returned 0 [0173.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.578] GetLastError () returned 0x5 [0173.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer", dwFileAttributes=0x20) returned 0 [0173.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de79b8) returned 1 Thread: id = 4504 os_tid = 0x1574 [0173.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer")) returned 0x20 [0173.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer", dwFileAttributes=0x20) returned 0 [0173.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.593] GetLastError () returned 0x5 [0173.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer", dwFileAttributes=0x20) returned 0 [0173.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 Thread: id = 4505 os_tid = 0x1578 [0173.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp")) returned 0x20 [0175.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0175.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.056] GetLastError () returned 0x5 [0175.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0175.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eaf010) returned 1 Thread: id = 4506 os_tid = 0x157c [0173.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg")) returned 0x20 [0175.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg", dwFileAttributes=0x20) returned 0 [0175.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.058] GetLastError () returned 0x5 [0175.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg", dwFileAttributes=0x20) returned 0 [0175.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 Thread: id = 4507 os_tid = 0x1580 [0173.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp")) returned 0x20 [0175.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp", dwFileAttributes=0x20) returned 0 [0175.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.060] GetLastError () returned 0x5 [0175.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp", dwFileAttributes=0x20) returned 0 [0175.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 Thread: id = 4508 os_tid = 0x1584 [0173.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg")) returned 0x20 [0174.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0174.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.217] GetLastError () returned 0x5 [0174.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0174.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 Thread: id = 4509 os_tid = 0x158c [0173.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp")) returned 0x20 [0174.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0174.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.753] GetLastError () returned 0x5 [0174.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0174.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 Thread: id = 4510 os_tid = 0x1590 [0173.599] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log")) returned 0x2020 [0175.630] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", dwFileAttributes=0x20) returned 1 [0182.195] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x127c [0182.195] GetFileSizeEx (in: hFile=0x127c, lpFileSize=0xec6fe74 | out: lpFileSize=0xec6fe74*=1083) returned 1 [0182.195] SetFilePointerEx (in: hFile=0x127c, liDistanceToMove=0x437, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.195] ReadFile (in: hFile=0x127c, lpBuffer=0xec6fe50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xec6fe60, lpOverlapped=0x0 | out: lpBuffer=0xec6fe50*, lpNumberOfBytesRead=0xec6fe60*=0x4, lpOverlapped=0x0) returned 1 [0182.198] SetFilePointerEx (in: hFile=0x127c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0182.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0182.198] NtQuerySystemTime (in: CurrentTime=0xec6fde8 | out: CurrentTime=0xec6fde8*=132462177607716000) returned 0x0 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x5e17064d [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x33d0a6c1 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x1c86e6e3 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x247f21e8 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x6c8ab7b [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x2f76cf1e [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0xb3d75a1 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x4f69d13d [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x54114a9d [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x4fd5abb0 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x967e2d9 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x360dcddd [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x5e81ff1e [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x6f65422 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x7228db59 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x66c2a812 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x2bbe6f84 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x2b794207 [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x379cd83b [0182.198] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x796e57fc [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x52747536 [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x11e0bc35 [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0xc2fb2c2 [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x7bb5a1c0 [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x75c41180 [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x4793e203 [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x68927f26 [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x7e83c3c9 [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x37cb5dcd [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0xb7ded82 [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x64453257 [0182.199] RtlRandomEx (in: Seed=0xec6fde0 | out: Seed=0xec6fde0) returned 0x6793bb15 [0182.209] ReadFile (in: hFile=0x127c, lpBuffer=0x7c2af88, nNumberOfBytesToRead=0x43b, lpNumberOfBytesRead=0xec6fddc, lpOverlapped=0x0 | out: lpBuffer=0x7c2af88*, lpNumberOfBytesRead=0xec6fddc*=0x43b, lpOverlapped=0x0) returned 1 [0182.209] SetFilePointerEx (in: hFile=0x127c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.209] WriteFile (in: hFile=0x127c, lpBuffer=0x7c2eb90*, nNumberOfBytesToWrite=0x43b, lpNumberOfBytesWritten=0xec6fde0, lpOverlapped=0x0 | out: lpBuffer=0x7c2eb90*, lpNumberOfBytesWritten=0xec6fde0*=0x43b, lpOverlapped=0x0) returned 1 [0183.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaad0 [0183.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0183.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0183.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c2eb90) returned 1 [0183.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c2af88) returned 1 [0183.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f038) returned 1 [0183.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdcf8) returned 1 [0183.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a374d0 [0183.679] SetFilePointerEx (in: hFile=0x127c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.679] WriteFile (in: hFile=0x127c, lpBuffer=0x7a38930*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xec6fe68, lpOverlapped=0x0 | out: lpBuffer=0x7a38930*, lpNumberOfBytesWritten=0xec6fe68*=0x106, lpOverlapped=0x0) returned 1 [0184.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e84f60 [0184.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0184.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0184.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0184.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3eb83b8 [0184.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0184.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0184.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0184.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0184.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f60) returned 1 [0184.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3e79368 [0184.723] sprintf (in: _Dest=0x3e79368, _Format="%c%c" | out: _Dest="1a") returned 2 [0184.723] sprintf (in: _Dest=0x3e7936a, _Format="%c%c" | out: _Dest="39") returned 2 [0184.723] sprintf (in: _Dest=0x3e7936c, _Format="%c%c" | out: _Dest="b7") returned 2 [0184.723] sprintf (in: _Dest=0x3e7936e, _Format="%c%c" | out: _Dest="c1") returned 2 [0184.723] sprintf (in: _Dest=0x3e79370, _Format="%c%c" | out: _Dest="78") returned 2 [0184.723] sprintf (in: _Dest=0x3e79372, _Format="%c%c" | out: _Dest="6f") returned 2 [0184.723] sprintf (in: _Dest=0x3e79374, _Format="%c%c" | out: _Dest="b5") returned 2 [0184.723] sprintf (in: _Dest=0x3e79376, _Format="%c%c" | out: _Dest="f3") returned 2 [0184.723] sprintf (in: _Dest=0x3e79378, _Format="%c%c" | out: _Dest="a0") returned 2 [0184.723] sprintf (in: _Dest=0x3e7937a, _Format="%c%c" | out: _Dest="3f") returned 2 [0184.723] sprintf (in: _Dest=0x3e7937c, _Format="%c%c" | out: _Dest="e2") returned 2 [0184.723] sprintf (in: _Dest=0x3e7937e, _Format="%c%c" | out: _Dest="71") returned 2 [0184.723] sprintf (in: _Dest=0x3e79380, _Format="%c%c" | out: _Dest="4e") returned 2 [0184.723] sprintf (in: _Dest=0x3e79382, _Format="%c%c" | out: _Dest="92") returned 2 [0184.723] sprintf (in: _Dest=0x3e79384, _Format="%c%c" | out: _Dest="fd") returned 2 [0184.723] sprintf (in: _Dest=0x3e79386, _Format="%c%c" | out: _Dest="61") returned 2 [0184.723] sprintf (in: _Dest=0x3e79388, _Format="%c%c" | out: _Dest="02") returned 2 [0184.723] sprintf (in: _Dest=0x3e7938a, _Format="%c%c" | out: _Dest="20") returned 2 [0184.723] sprintf (in: _Dest=0x3e7938c, _Format="%c%c" | out: _Dest="f5") returned 2 [0184.723] sprintf (in: _Dest=0x3e7938e, _Format="%c%c" | out: _Dest="cd") returned 2 [0184.723] RtlInitAnsiString (in: DestinationString=0xec6fdf0, SourceString="1a39b7c1786fb5f3a03fe2714e92fd610220f5cd" | out: DestinationString="1a39b7c1786fb5f3a03fe2714e92fd610220f5cd") [0184.723] RtlAnsiStringToUnicodeString (in: DestinationString=0xec6fde8, SourceString="1a39b7c1786fb5f3a03fe2714e92fd610220f5cd", AllocateDestinationString=1 | out: DestinationString="1a39b7c1786fb5f3a03fe2714e92fd610220f5cd") returned 0x0 [0184.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe63c8 [0184.724] wcscat (in: _Dest=0x3d84ee0, _Source="1a39b7c178" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\1a39b7c178") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\1a39b7c178" [0184.724] wcscat (in: _Dest=0x3d84ee0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\1a39b7c178.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\1a39b7c178.68814f" [0184.724] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\1a39b7c178.68814f", NtPathName=0xec6fde0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\1a39b7c178.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8d48 [0184.727] FlushFileBuffers (hFile=0x127c) returned 1 [0184.957] CloseHandle (hObject=0x127c) returned 1 [0186.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d84e10 [0186.050] wcscpy (in: _Dest=0x3d84e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0186.050] wcscat (in: _Dest=0x3d84e10, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt" [0186.051] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\68814f-readme.txt")) returned 0x2020 [0186.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 [0186.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66858) returned 1 Thread: id = 4511 os_tid = 0x1594 [0173.602] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current")) returned 0x2020 [0175.589] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", dwFileAttributes=0x20) returned 1 [0180.491] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1844 [0180.492] GetFileSizeEx (in: hFile=0x1844, lpFileSize=0xee1fe04 | out: lpFileSize=0xee1fe04*=16) returned 1 [0180.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0180.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0180.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0180.492] NtQuerySystemTime (in: CurrentTime=0xee1fd78 | out: CurrentTime=0xee1fd78*=132462177590712000) returned 0x0 [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x7bd77ee3 [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x7860e042 [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x550da07a [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x6a4d5b3c [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x3243bfb1 [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x26471f40 [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x6bfbf7ee [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x4975a2a7 [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x3eb39346 [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x1ab37010 [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x786e42 [0180.492] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x54e2b438 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x3e2e328 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x3567cd23 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x634a0357 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x5b89da7b [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x3367a19 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x23e38b06 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x67b31f41 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x484c58a7 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x3e02a237 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x23986b15 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x18f991a8 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x1666eae5 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x25b9d3fa [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x68626b28 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x8cd9dd [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x3f49693e [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x48b4c6e9 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x5ed11726 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x19059f25 [0180.493] RtlRandomEx (in: Seed=0xee1fd70 | out: Seed=0xee1fd70) returned 0x6bf632e2 [0180.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0180.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0180.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0180.505] ReadFile (in: hFile=0x1844, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xee1fd6c, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xee1fd6c*=0x10, lpOverlapped=0x0) returned 1 [0180.508] SetFilePointerEx (in: hFile=0x1844, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.508] WriteFile (in: hFile=0x1844, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xee1fd70, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0xee1fd70*=0x10, lpOverlapped=0x0) returned 1 [0180.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0180.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0180.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0180.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0180.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0180.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0180.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fef6c8) returned 1 [0180.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b0c8 [0180.878] SetFilePointerEx (in: hFile=0x1844, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.878] WriteFile (in: hFile=0x1844, lpBuffer=0x30bb4d0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xee1fdf8, lpOverlapped=0x0 | out: lpBuffer=0x30bb4d0*, lpNumberOfBytesWritten=0xee1fdf8*=0x100, lpOverlapped=0x0) returned 1 [0182.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be1c0 [0182.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0182.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0182.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43860 [0182.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0182.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0182.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0182.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be1c0) returned 1 [0182.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3d5add0 [0182.369] sprintf (in: _Dest=0x3d5add0, _Format="%c%c" | out: _Dest="09") returned 2 [0182.369] sprintf (in: _Dest=0x3d5add2, _Format="%c%c" | out: _Dest="9f") returned 2 [0182.369] sprintf (in: _Dest=0x3d5add4, _Format="%c%c" | out: _Dest="d4") returned 2 [0182.369] sprintf (in: _Dest=0x3d5add6, _Format="%c%c" | out: _Dest="7f") returned 2 [0182.369] sprintf (in: _Dest=0x3d5add8, _Format="%c%c" | out: _Dest="ee") returned 2 [0182.369] sprintf (in: _Dest=0x3d5adda, _Format="%c%c" | out: _Dest="9b") returned 2 [0182.369] sprintf (in: _Dest=0x3d5addc, _Format="%c%c" | out: _Dest="25") returned 2 [0182.369] sprintf (in: _Dest=0x3d5adde, _Format="%c%c" | out: _Dest="be") returned 2 [0182.369] sprintf (in: _Dest=0x3d5ade0, _Format="%c%c" | out: _Dest="b1") returned 2 [0182.369] sprintf (in: _Dest=0x3d5ade2, _Format="%c%c" | out: _Dest="d4") returned 2 [0182.369] sprintf (in: _Dest=0x3d5ade4, _Format="%c%c" | out: _Dest="ea") returned 2 [0182.369] sprintf (in: _Dest=0x3d5ade6, _Format="%c%c" | out: _Dest="41") returned 2 [0182.369] sprintf (in: _Dest=0x3d5ade8, _Format="%c%c" | out: _Dest="e0") returned 2 [0182.369] sprintf (in: _Dest=0x3d5adea, _Format="%c%c" | out: _Dest="47") returned 2 [0182.369] RtlInitAnsiString (in: DestinationString=0xee1fd80, SourceString="099fd47fee9b25beb1d4ea41e047" | out: DestinationString="099fd47fee9b25beb1d4ea41e047") [0182.369] RtlAnsiStringToUnicodeString (in: DestinationString=0xee1fd78, SourceString="099fd47fee9b25beb1d4ea41e047", AllocateDestinationString=1 | out: DestinationString="099fd47fee9b25beb1d4ea41e047") returned 0x0 [0182.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30bdc20 [0182.370] wcscat (in: _Dest=0x3d56628, _Source="099fd47" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\099fd47") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\099fd47" [0182.370] wcscat (in: _Dest=0x3d56628, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\099fd47.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\099fd47.68814f" [0182.370] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\099fd47.68814f", NtPathName=0xee1fd70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\099fd47.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7a64330 [0182.396] FlushFileBuffers (hFile=0x1844) returned 1 [0183.589] CloseHandle (hObject=0x1844) returned 1 [0184.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d86740 [0184.096] wcscpy (in: _Dest=0x3d86740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0184.096] wcscat (in: _Dest=0x3d86740, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt" [0184.097] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\68814f-readme.txt")) returned 0x2020 [0184.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86740) returned 1 [0184.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 Thread: id = 4512 os_tid = 0x1598 [0173.602] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock")) returned 0x2020 [0175.630] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", dwFileAttributes=0x20) returned 1 [0182.210] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3cc [0182.210] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x961f9d4 | out: lpFileSize=0x961f9d4*=0) returned 1 [0182.210] FlushFileBuffers (hFile=0x3cc) returned 1 [0183.590] CloseHandle (hObject=0x3cc) returned 1 [0183.590] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", dwFileAttributes=0x2020) returned 1 [0186.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35af88) returned 1 Thread: id = 4513 os_tid = 0x159c [0173.603] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log")) returned 0x2020 [0175.457] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", dwFileAttributes=0x20) returned 1 [0180.474] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17b8 [0180.474] GetFileSizeEx (in: hFile=0x17b8, lpFileSize=0xedaff3c | out: lpFileSize=0xedaff3c*=141) returned 1 [0180.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0180.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0180.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0180.475] NtQuerySystemTime (in: CurrentTime=0xedafeb0 | out: CurrentTime=0xedafeb0*=132462177590556000) returned 0x0 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x7203915c [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x78e1e011 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x23d097dd [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x17538858 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x74bc0eb5 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x3a0c06f3 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x1bdc5cdb [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x61178d0d [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x7eb43f85 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x24173340 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x77ee30af [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x5567c391 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x4c78a81b [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x5d7ea47b [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x55ba8ffb [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x704968c4 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x3d9acf26 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x2dcda34 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x50248b04 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x14122a01 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x3b4158ad [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x586d8948 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x4ac6f6f9 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x4545ec1 [0180.475] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x28b460b7 [0180.476] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x6898b6d1 [0180.476] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0xa81785a [0180.476] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x25b6920b [0180.476] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x7738d01a [0180.476] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x72f8c4c6 [0180.476] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x25cb1fd4 [0180.476] RtlRandomEx (in: Seed=0xedafea8 | out: Seed=0xedafea8) returned 0x3aa6c700 [0180.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0180.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0180.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0180.487] ReadFile (in: hFile=0x17b8, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x8d, lpNumberOfBytesRead=0xedafea4, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0xedafea4*=0x8d, lpOverlapped=0x0) returned 1 [0180.490] SetFilePointerEx (in: hFile=0x17b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.490] WriteFile (in: hFile=0x17b8, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0x8d, lpNumberOfBytesWritten=0xedafea8, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0xedafea8*=0x8d, lpOverlapped=0x0) returned 1 [0180.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0180.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0180.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0180.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0180.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0180.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0180.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff0010) returned 1 [0180.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81160 [0180.879] SetFilePointerEx (in: hFile=0x17b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.879] WriteFile (in: hFile=0x17b8, lpBuffer=0x3de70b8*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xedaff30, lpOverlapped=0x0 | out: lpBuffer=0x3de70b8*, lpNumberOfBytesWritten=0xedaff30*=0xf8, lpOverlapped=0x0) returned 1 [0182.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be1c0 [0182.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0182.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0182.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x3ea6540 [0182.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0182.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0182.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0182.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be1c0) returned 1 [0182.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd) returned 0x3e43860 [0182.385] sprintf (in: _Dest=0x3e43860, _Format="%c%c" | out: _Dest="a0") returned 2 [0182.386] sprintf (in: _Dest=0x3e43862, _Format="%c%c" | out: _Dest="fe") returned 2 [0182.386] sprintf (in: _Dest=0x3e43864, _Format="%c%c" | out: _Dest="41") returned 2 [0182.386] sprintf (in: _Dest=0x3e43866, _Format="%c%c" | out: _Dest="ac") returned 2 [0182.386] sprintf (in: _Dest=0x3e43868, _Format="%c%c" | out: _Dest="d1") returned 2 [0182.386] sprintf (in: _Dest=0x3e4386a, _Format="%c%c" | out: _Dest="68") returned 2 [0182.386] RtlInitAnsiString (in: DestinationString=0xedafeb8, SourceString="a0fe41acd168" | out: DestinationString="a0fe41acd168") [0182.386] RtlAnsiStringToUnicodeString (in: DestinationString=0xedafeb0, SourceString="a0fe41acd168", AllocateDestinationString=1 | out: DestinationString="a0fe41acd168") returned 0x0 [0182.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b0a0 [0182.386] wcscat (in: _Dest=0x333a68, _Source="a0f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\a0f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\a0f" [0182.386] wcscat (in: _Dest=0x333a68, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\a0f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\a0f.68814f" [0182.386] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\a0f.68814f", NtPathName=0xedafea8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\a0f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3eeb5d0 [0182.392] FlushFileBuffers (hFile=0x17b8) returned 1 [0183.589] CloseHandle (hObject=0x17b8) returned 1 [0184.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d86670 [0184.094] wcscpy (in: _Dest=0x3d86670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0184.094] wcscat (in: _Dest=0x3d86670, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt" [0184.094] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\68814f-readme.txt")) returned 0xffffffff [0184.094] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfcc [0184.547] WriteFile (in: hFile=0xfcc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xedafec4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xedafec4*=0x8b9, lpOverlapped=0x0) returned 1 [0184.664] CloseHandle (hObject=0xfcc) returned 1 [0184.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86670) returned 1 [0184.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b9d8) returned 1 Thread: id = 4514 os_tid = 0x15a0 [0173.603] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001")) returned 0x2020 [0175.589] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0181.737] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17c0 [0181.737] GetFileSizeEx (in: hFile=0x17c0, lpFileSize=0xecbfa4c | out: lpFileSize=0xecbfa4c*=41) returned 1 [0181.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0181.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0181.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0181.737] NtQuerySystemTime (in: CurrentTime=0xecbf9c0 | out: CurrentTime=0xecbf9c0*=132462177603192000) returned 0x0 [0181.737] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x6b2782a5 [0181.737] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x68f957d [0181.737] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x73cdacbc [0181.737] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x253f1f3b [0181.737] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x50b4383e [0181.737] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x2d90fb7 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x4bdc55fe [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x11e39068 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x20e84901 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x16b90baf [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x8396ef0 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x6e620a8 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x4effcd3e [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x66fd2d72 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0xc2057c4 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0xa83fbc9 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x507b1f2f [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x55ece55d [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x1e5c8512 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x53d99634 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x7f487844 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x3544498a [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x575c80eb [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x5b466932 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x52b12f0 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x550bd444 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x3038a5b [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x7c9e82b [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x589a359b [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x3f304cc3 [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x2c5814cc [0181.738] RtlRandomEx (in: Seed=0xecbf9b8 | out: Seed=0xecbf9b8) returned 0x4f78279f [0181.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0181.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c143e0 [0181.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0181.747] ReadFile (in: hFile=0x17c0, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0xecbf9b4, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0xecbf9b4*=0x29, lpOverlapped=0x0) returned 1 [0181.748] SetFilePointerEx (in: hFile=0x17c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.749] WriteFile (in: hFile=0x17c0, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xecbf9b8, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0xecbf9b8*=0x29, lpOverlapped=0x0) returned 1 [0182.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0182.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0182.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0182.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0182.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0182.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0182.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85818) returned 1 [0182.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0182.399] SetFilePointerEx (in: hFile=0x17c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.400] WriteFile (in: hFile=0x17c0, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xecbfa40, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xecbfa40*=0x110, lpOverlapped=0x0) returned 1 [0183.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85a10 [0183.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0183.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0183.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0183.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3dca5f8 [0183.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f40 [0183.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0183.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9928) returned 1 [0183.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0183.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a10) returned 1 [0183.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x3e85a10 [0183.048] sprintf (in: _Dest=0x3e85a10, _Format="%c%c" | out: _Dest="b5") returned 2 [0183.048] sprintf (in: _Dest=0x3e85a12, _Format="%c%c" | out: _Dest="cb") returned 2 [0183.048] sprintf (in: _Dest=0x3e85a14, _Format="%c%c" | out: _Dest="f7") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a16, _Format="%c%c" | out: _Dest="c3") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a18, _Format="%c%c" | out: _Dest="bf") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a1a, _Format="%c%c" | out: _Dest="e9") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a1c, _Format="%c%c" | out: _Dest="39") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a1e, _Format="%c%c" | out: _Dest="a2") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a20, _Format="%c%c" | out: _Dest="fb") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a22, _Format="%c%c" | out: _Dest="e0") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a24, _Format="%c%c" | out: _Dest="d5") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a26, _Format="%c%c" | out: _Dest="22") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a28, _Format="%c%c" | out: _Dest="84") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a2a, _Format="%c%c" | out: _Dest="93") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a2c, _Format="%c%c" | out: _Dest="3a") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a2e, _Format="%c%c" | out: _Dest="9e") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a30, _Format="%c%c" | out: _Dest="bc") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a32, _Format="%c%c" | out: _Dest="d5") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a34, _Format="%c%c" | out: _Dest="0e") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a36, _Format="%c%c" | out: _Dest="19") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a38, _Format="%c%c" | out: _Dest="51") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a3a, _Format="%c%c" | out: _Dest="c8") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a3c, _Format="%c%c" | out: _Dest="85") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a3e, _Format="%c%c" | out: _Dest="25") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a40, _Format="%c%c" | out: _Dest="f1") returned 2 [0183.049] sprintf (in: _Dest=0x3e85a42, _Format="%c%c" | out: _Dest="ef") returned 2 [0183.050] sprintf (in: _Dest=0x3e85a44, _Format="%c%c" | out: _Dest="dc") returned 2 [0183.050] sprintf (in: _Dest=0x3e85a46, _Format="%c%c" | out: _Dest="e4") returned 2 [0183.050] sprintf (in: _Dest=0x3e85a48, _Format="%c%c" | out: _Dest="b1") returned 2 [0183.050] sprintf (in: _Dest=0x3e85a4a, _Format="%c%c" | out: _Dest="ff") returned 2 [0183.050] RtlInitAnsiString (in: DestinationString=0xecbf9c8, SourceString="b5cbf7c3bfe939a2fbe0d52284933a9ebcd50e1951c88525f1efdce4b1ff" | out: DestinationString="b5cbf7c3bfe939a2fbe0d52284933a9ebcd50e1951c88525f1efdce4b1ff") [0183.050] RtlAnsiStringToUnicodeString (in: DestinationString=0xecbf9c0, SourceString="b5cbf7c3bfe939a2fbe0d52284933a9ebcd50e1951c88525f1efdce4b1ff", AllocateDestinationString=1 | out: DestinationString="b5cbf7c3bfe939a2fbe0d52284933a9ebcd50e1951c88525f1efdce4b1ff") returned 0x0 [0183.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba770 [0183.050] wcscat (in: _Dest=0x3eeb780, _Source="b5cbf7c3bfe939a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\b5cbf7c3bfe939a") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\b5cbf7c3bfe939a" [0183.050] wcscat (in: _Dest=0x3eeb780, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\b5cbf7c3bfe939a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\b5cbf7c3bfe939a.68814f" [0183.050] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\b5cbf7c3bfe939a.68814f", NtPathName=0xecbf9b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\b5cbf7c3bfe939a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0078 [0183.055] FlushFileBuffers (hFile=0x17c0) returned 1 [0184.953] CloseHandle (hObject=0x17c0) returned 1 [0186.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d84e10 [0186.058] wcscpy (in: _Dest=0x3d84e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\" [0186.059] wcscat (in: _Dest=0x3d84e10, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt" [0186.059] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\68814f-readme.txt")) returned 0x2020 [0186.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 [0186.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ad8) returned 1 Thread: id = 4515 os_tid = 0x15a4 [0173.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d57820 [0173.604] wcscpy (in: _Dest=0x3d57820, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0173.604] wcscat (in: _Dest=0x3d57820, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\" [0173.604] wcscat (in: _Dest=0x3d57820, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*" [0173.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0173.604] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0174.121] wcscmp (_String1=".", _String2=".") returned 0 [0174.121] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.121] wcscmp (_String1="..", _String2=".") returned 1 [0174.121] wcscmp (_String1="..", _String2="..") returned 0 [0174.121] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0174.121] wcscmp (_String1="sys", _String2=".") returned 1 [0174.121] wcscmp (_String1="sys", _String2="..") returned 1 [0174.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d567b8 [0174.121] wcscpy (in: _Dest=0x3d567b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0174.121] wcscat (in: _Dest=0x3d567b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\" [0174.121] wcscat (in: _Dest=0x3d567b8, _Source="sys" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0175.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d567b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0175.655] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0 [0175.655] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0175.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0175.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57820) returned 1 [0175.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65ad8) returned 1 Thread: id = 4516 os_tid = 0x15a8 [0173.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x86\\resources\\1033\\synchronization.rll")) returned 0x20 [0174.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll", dwFileAttributes=0x20) returned 0 [0174.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x86\\resources\\1033\\synchronization.rll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.119] GetLastError () returned 0x5 [0174.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x86\\resources\\1033\\Synchronization.rll", dwFileAttributes=0x20) returned 0 [0174.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d567b8) returned 1 Thread: id = 4517 os_tid = 0x15b0 [0173.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg")) returned 0x20 [0173.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0173.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.618] GetLastError () returned 0x5 [0173.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0173.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 Thread: id = 4518 os_tid = 0x15b4 [0173.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp")) returned 0x20 [0173.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0173.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.635] GetLastError () returned 0x5 [0173.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0173.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4448) returned 1 Thread: id = 4519 os_tid = 0x15b8 [0173.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg")) returned 0x20 [0173.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg", dwFileAttributes=0x20) returned 0 [0173.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.650] GetLastError () returned 0x5 [0173.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg", dwFileAttributes=0x20) returned 0 [0173.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8d48) returned 1 Thread: id = 4520 os_tid = 0x15bc [0173.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg")) returned 0x20 [0173.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg", dwFileAttributes=0x20) returned 0 [0173.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.671] GetLastError () returned 0x5 [0173.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg", dwFileAttributes=0x20) returned 0 [0173.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ee0) returned 1 Thread: id = 4521 os_tid = 0x15c0 [0173.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp")) returned 0x20 [0173.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp", dwFileAttributes=0x20) returned 0 [0173.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.686] GetLastError () returned 0x5 [0173.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp", dwFileAttributes=0x20) returned 0 [0173.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 Thread: id = 4522 os_tid = 0x15c4 [0173.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a67270 [0173.690] wcscpy (in: _Dest=0x7a67270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0173.691] wcscat (in: _Dest=0x7a67270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0173.691] wcscat (in: _Dest=0x7a67270, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*" [0173.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0173.691] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0174.725] wcscmp (_String1=".", _String2=".") returned 0 [0174.725] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76640670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.423] wcscmp (_String1="..", _String2=".") returned 1 [0175.423] wcscmp (_String1="..", _String2="..") returned 0 [0175.423] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf874c700, ftCreationTime.dwHighDateTime=0x1c9602c, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf874c700, ftLastWriteTime.dwHighDateTime=0x1c9602c, nFileSizeHigh=0x0, nFileSizeLow=0x44c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Auto.jpg", cAlternateFileName="ALERTI~1.JPG")) returned 1 [0175.423] wcscmp (_String1="AlertImage_Auto.jpg", _String2=".") returned 1 [0175.423] wcscmp (_String1="AlertImage_Auto.jpg", _String2="..") returned 1 [0175.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68570 [0175.423] wcscpy (in: _Dest=0x3e68570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.423] wcscat (in: _Dest=0x3e68570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.423] wcscat (in: _Dest=0x3e68570, _Source="AlertImage_Auto.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" [0175.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0175.679] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c5bf00, ftCreationTime.dwHighDateTime=0x1c9602c, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8c5bf00, ftLastWriteTime.dwHighDateTime=0x1c9602c, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_AutoMask.bmp", cAlternateFileName="ALERTI~1.BMP")) returned 1 [0175.680] wcscmp (_String1="AlertImage_AutoMask.bmp", _String2=".") returned 1 [0175.680] wcscmp (_String1="AlertImage_AutoMask.bmp", _String2="..") returned 1 [0175.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8568 [0175.680] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.680] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.680] wcscat (in: _Dest=0x2c8568, _Source="AlertImage_AutoMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" [0175.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0175.681] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3356, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHigh.jpg", cAlternateFileName="AL8858~1.JPG")) returned 1 [0175.681] wcscmp (_String1="AlertImage_ContactHigh.jpg", _String2=".") returned 1 [0175.681] wcscmp (_String1="AlertImage_ContactHigh.jpg", _String2="..") returned 1 [0175.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8f08 [0175.681] wcscpy (in: _Dest=0x2c8f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.681] wcscat (in: _Dest=0x2c8f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.681] wcscat (in: _Dest=0x2c8f08, _Source="AlertImage_ContactHigh.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" [0175.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0175.682] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHighMask.bmp", cAlternateFileName="ALERTI~4.BMP")) returned 1 [0175.682] wcscmp (_String1="AlertImage_ContactHighMask.bmp", _String2=".") returned 1 [0175.682] wcscmp (_String1="AlertImage_ContactHighMask.bmp", _String2="..") returned 1 [0175.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc48d0 [0175.682] wcscpy (in: _Dest=0x3dc48d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.682] wcscat (in: _Dest=0x3dc48d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.682] wcscat (in: _Dest=0x3dc48d0, _Source="AlertImage_ContactHighMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" [0175.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc48d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0175.689] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLow.jpg", cAlternateFileName="ALERTI~2.JPG")) returned 1 [0175.689] wcscmp (_String1="AlertImage_ContactLow.jpg", _String2=".") returned 1 [0175.689] wcscmp (_String1="AlertImage_ContactLow.jpg", _String2="..") returned 1 [0175.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8fe8 [0175.689] wcscpy (in: _Dest=0x2c8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.689] wcscat (in: _Dest=0x2c8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.689] wcscat (in: _Dest=0x2c8fe8, _Source="AlertImage_ContactLow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" [0175.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0175.690] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e59300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12e59300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLowMask.bmp", cAlternateFileName="ALERTI~2.BMP")) returned 1 [0175.690] wcscmp (_String1="AlertImage_ContactLowMask.bmp", _String2=".") returned 1 [0175.690] wcscmp (_String1="AlertImage_ContactLowMask.bmp", _String2="..") returned 1 [0175.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4190 [0175.691] wcscpy (in: _Dest=0x3dc4190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.691] wcscat (in: _Dest=0x3dc4190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.691] wcscat (in: _Dest=0x3dc4190, _Source="AlertImage_ContactLowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" [0175.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0175.692] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565adc00, ftCreationTime.dwHighDateTime=0x1c96038, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x565adc00, ftLastWriteTime.dwHighDateTime=0x1c96038, nFileSizeHigh=0x0, nFileSizeLow=0x480d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHigh.jpg", cAlternateFileName="AL56B2~1.JPG")) returned 1 [0175.692] wcscmp (_String1="AlertImage_FileHigh.jpg", _String2=".") returned 1 [0175.692] wcscmp (_String1="AlertImage_FileHigh.jpg", _String2="..") returned 1 [0175.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c90c8 [0175.692] wcscpy (in: _Dest=0x2c90c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.692] wcscat (in: _Dest=0x2c90c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.692] wcscat (in: _Dest=0x2c90c8, _Source="AlertImage_FileHigh.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" [0175.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c90c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0175.693] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd08a6100, ftCreationTime.dwHighDateTime=0x1c96036, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd08a6100, ftLastWriteTime.dwHighDateTime=0x1c96036, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHighMask.bmp", cAlternateFileName="ALE626~1.BMP")) returned 1 [0175.693] wcscmp (_String1="AlertImage_FileHighMask.bmp", _String2=".") returned 1 [0175.693] wcscmp (_String1="AlertImage_FileHighMask.bmp", _String2="..") returned 1 [0175.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc3d08 [0175.693] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.694] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.694] wcscat (in: _Dest=0x3dc3d08, _Source="AlertImage_FileHighMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" [0175.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0175.695] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1f9000, ftCreationTime.dwHighDateTime=0x1c96038, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b1f9000, ftLastWriteTime.dwHighDateTime=0x1c96038, nFileSizeHigh=0x0, nFileSizeLow=0x46de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOff.jpg", cAlternateFileName="ALERTI~3.JPG")) returned 1 [0175.695] wcscmp (_String1="AlertImage_FileOff.jpg", _String2=".") returned 1 [0175.695] wcscmp (_String1="AlertImage_FileOff.jpg", _String2="..") returned 1 [0175.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68648 [0175.695] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.695] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.695] wcscat (in: _Dest=0x3e68648, _Source="AlertImage_FileOff.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" [0175.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0175.696] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7b16f00, ftCreationTime.dwHighDateTime=0x1c96036, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7b16f00, ftLastWriteTime.dwHighDateTime=0x1c96036, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOffMask.bmp", cAlternateFileName="ALERTI~3.BMP")) returned 1 [0175.696] wcscmp (_String1="AlertImage_FileOffMask.bmp", _String2=".") returned 1 [0175.696] wcscmp (_String1="AlertImage_FileOffMask.bmp", _String2="..") returned 1 [0175.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c91a8 [0175.697] wcscpy (in: _Dest=0x2c91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.697] wcscat (in: _Dest=0x2c91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.697] wcscat (in: _Dest=0x2c91a8, _Source="AlertImage_FileOffMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" [0175.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0175.698] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ecd600, ftCreationTime.dwHighDateTime=0x1c95f8f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37ecd600, ftLastWriteTime.dwHighDateTime=0x1c95f8f, nFileSizeHigh=0x0, nFileSizeLow=0x13ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_High.jpg", cAlternateFileName="ALERTI~4.JPG")) returned 1 [0175.698] wcscmp (_String1="AlertImage_High.jpg", _String2=".") returned 1 [0175.698] wcscmp (_String1="AlertImage_High.jpg", _String2="..") returned 1 [0175.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e678c8 [0175.698] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.698] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.698] wcscat (in: _Dest=0x3e678c8, _Source="AlertImage_High.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" [0175.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0175.699] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784c5400, ftCreationTime.dwHighDateTime=0x1c95f8f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x784c5400, ftLastWriteTime.dwHighDateTime=0x1c95f8f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_HighMask.bmp", cAlternateFileName="ALBBD8~1.BMP")) returned 1 [0175.699] wcscmp (_String1="AlertImage_HighMask.bmp", _String2=".") returned 1 [0175.699] wcscmp (_String1="AlertImage_HighMask.bmp", _String2="..") returned 1 [0175.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9288 [0175.700] wcscpy (in: _Dest=0x2c9288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.700] wcscat (in: _Dest=0x2c9288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.700] wcscat (in: _Dest=0x2c9288, _Source="AlertImage_HighMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" [0175.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0175.701] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851f8500, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x851f8500, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x41de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Medium.jpg", cAlternateFileName="ALF33C~1.JPG")) returned 1 [0175.701] wcscmp (_String1="AlertImage_Medium.jpg", _String2=".") returned 1 [0175.701] wcscmp (_String1="AlertImage_Medium.jpg", _String2="..") returned 1 [0175.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e687f8 [0175.701] wcscpy (in: _Dest=0x3e687f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.701] wcscat (in: _Dest=0x3e687f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.701] wcscat (in: _Dest=0x3e687f8, _Source="AlertImage_Medium.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" [0175.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0175.702] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68834d00, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68834d00, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_MediumMAsk.bmp", cAlternateFileName="AL441A~1.BMP")) returned 1 [0175.702] wcscmp (_String1="AlertImage_MediumMAsk.bmp", _String2=".") returned 1 [0175.702] wcscmp (_String1="AlertImage_MediumMAsk.bmp", _String2="..") returned 1 [0175.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9368 [0175.702] wcscpy (in: _Dest=0x2c9368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.702] wcscat (in: _Dest=0x2c9368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.702] wcscat (in: _Dest=0x2c9368, _Source="AlertImage_MediumMAsk.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" [0175.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0175.709] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cd1f00, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd3cd1f00, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Off.jpg", cAlternateFileName="AL0F2A~1.JPG")) returned 1 [0175.709] wcscmp (_String1="AlertImage_Off.jpg", _String2=".") returned 1 [0175.709] wcscmp (_String1="AlertImage_Off.jpg", _String2="..") returned 1 [0175.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d85700 [0175.709] wcscpy (in: _Dest=0x3d85700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.709] wcscat (in: _Dest=0x3d85700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.709] wcscat (in: _Dest=0x3d85700, _Source="AlertImage_Off.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" [0175.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0175.710] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbac46e00, ftCreationTime.dwHighDateTime=0x1c9602d, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbac46e00, ftLastWriteTime.dwHighDateTime=0x1c9602d, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_OffMask.bmp", cAlternateFileName="ALA9A1~1.BMP")) returned 1 [0175.710] wcscmp (_String1="AlertImage_OffMask.bmp", _String2=".") returned 1 [0175.711] wcscmp (_String1="AlertImage_OffMask.bmp", _String2="..") returned 1 [0175.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68c30 [0175.711] wcscpy (in: _Dest=0x3e68c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.711] wcscat (in: _Dest=0x3e68c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.711] wcscat (in: _Dest=0x3e68c30, _Source="AlertImage_OffMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" [0175.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0175.712] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ec3100, ftCreationTime.dwHighDateTime=0x1c9bd19, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90ec3100, ftLastWriteTime.dwHighDateTime=0x1c9bd19, nFileSizeHigh=0x0, nFileSizeLow=0x2256, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImage.jpg", cAlternateFileName="COMMSI~1.JPG")) returned 1 [0175.712] wcscmp (_String1="CommsIncomingImage.jpg", _String2=".") returned 1 [0175.712] wcscmp (_String1="CommsIncomingImage.jpg", _String2="..") returned 1 [0175.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68de0 [0175.712] wcscpy (in: _Dest=0x3e68de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.712] wcscat (in: _Dest=0x3e68de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.712] wcscat (in: _Dest=0x3e68de0, _Source="CommsIncomingImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" [0175.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0175.713] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb24d1d00, ftCreationTime.dwHighDateTime=0x1c9bd19, ftLastAccessTime.dwLowDateTime=0x76f9fd10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb24d1d00, ftLastWriteTime.dwHighDateTime=0x1c9bd19, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMask.bmp", cAlternateFileName="COMMSI~1.BMP")) returned 1 [0175.713] wcscmp (_String1="CommsIncomingImageMask.bmp", _String2=".") returned 1 [0175.713] wcscmp (_String1="CommsIncomingImageMask.bmp", _String2="..") returned 1 [0175.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9448 [0175.713] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.713] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.713] wcscat (in: _Dest=0x2c9448, _Source="CommsIncomingImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" [0175.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0175.714] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMaskSmall.bmp", cAlternateFileName="COMMSI~2.BMP")) returned 1 [0175.715] wcscmp (_String1="CommsIncomingImageMaskSmall.bmp", _String2=".") returned 1 [0175.715] wcscmp (_String1="CommsIncomingImageMaskSmall.bmp", _String2="..") returned 1 [0175.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3dafcb8 [0175.715] wcscpy (in: _Dest=0x3dafcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.715] wcscat (in: _Dest=0x3dafcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.715] wcscat (in: _Dest=0x3dafcb8, _Source="CommsIncomingImageMaskSmall.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" [0175.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0175.716] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76fc5e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1de3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageSmall.jpg", cAlternateFileName="COMMSI~2.JPG")) returned 1 [0175.716] wcscmp (_String1="CommsIncomingImageSmall.jpg", _String2=".") returned 1 [0175.716] wcscmp (_String1="CommsIncomingImageSmall.jpg", _String2="..") returned 1 [0175.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc3ed8 [0175.716] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.716] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.716] wcscat (in: _Dest=0x3dc3ed8, _Source="CommsIncomingImageSmall.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" [0175.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0175.717] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17b6e00, ftCreationTime.dwHighDateTime=0x1c9bd19, ftLastAccessTime.dwLowDateTime=0x76fc5e70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf17b6e00, ftLastWriteTime.dwHighDateTime=0x1c9bd19, nFileSizeHigh=0x0, nFileSizeLow=0x22c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImage.jpg", cAlternateFileName="COMMSO~1.JPG")) returned 1 [0175.717] wcscmp (_String1="CommsOutgoingImage.jpg", _String2=".") returned 1 [0175.717] wcscmp (_String1="CommsOutgoingImage.jpg", _String2="..") returned 1 [0175.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68b58 [0175.717] wcscpy (in: _Dest=0x3e68b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.717] wcscat (in: _Dest=0x3e68b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.717] wcscat (in: _Dest=0x3e68b58, _Source="CommsOutgoingImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" [0175.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0175.719] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212a7600, ftCreationTime.dwHighDateTime=0x1c9bd1a, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x212a7600, ftLastWriteTime.dwHighDateTime=0x1c9bd1a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMask.bmp", cAlternateFileName="COMMSO~1.BMP")) returned 1 [0175.719] wcscmp (_String1="CommsOutgoingImageMask.bmp", _String2=".") returned 1 [0175.719] wcscmp (_String1="CommsOutgoingImageMask.bmp", _String2="..") returned 1 [0175.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9528 [0175.719] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.719] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.719] wcscat (in: _Dest=0x2c9528, _Source="CommsOutgoingImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" [0175.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0175.720] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMaskSmall.bmp", cAlternateFileName="COMMSO~2.BMP")) returned 1 [0175.720] wcscmp (_String1="CommsOutgoingImageMaskSmall.bmp", _String2=".") returned 1 [0175.720] wcscmp (_String1="CommsOutgoingImageMaskSmall.bmp", _String2="..") returned 1 [0175.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0528 [0175.720] wcscpy (in: _Dest=0x3db0528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.720] wcscat (in: _Dest=0x3db0528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.720] wcscat (in: _Dest=0x3db0528, _Source="CommsOutgoingImageMaskSmall.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" [0175.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0175.721] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1416c000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1416c000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageSmall.jpg", cAlternateFileName="COMMSO~2.JPG")) returned 1 [0175.721] wcscmp (_String1="CommsOutgoingImageSmall.jpg", _String2=".") returned 1 [0175.721] wcscmp (_String1="CommsOutgoingImageSmall.jpg", _String2="..") returned 1 [0175.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4b88 [0175.721] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.721] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.721] wcscat (in: _Dest=0x3dc4b88, _Source="CommsOutgoingImageSmall.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" [0175.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0175.723] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1 [0175.723] wcscmp (_String1="MessageBoxIconImages.jpg", _String2=".") returned 1 [0175.723] wcscmp (_String1="MessageBoxIconImages.jpg", _String2="..") returned 1 [0175.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9608 [0175.723] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.723] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.723] wcscat (in: _Dest=0x2c9608, _Source="MessageBoxIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" [0175.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0175.724] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f538fd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1 [0175.724] wcscmp (_String1="MessageBoxIconImagesMask.bmp", _String2=".") returned 1 [0175.724] wcscmp (_String1="MessageBoxIconImagesMask.bmp", _String2="..") returned 1 [0175.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4c70 [0175.724] wcscpy (in: _Dest=0x3dc4c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.724] wcscat (in: _Dest=0x3dc4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.724] wcscat (in: _Dest=0x3dc4c70, _Source="MessageBoxIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" [0175.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0175.726] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1483400, ftCreationTime.dwHighDateTime=0x1ca0395, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1483400, ftLastWriteTime.dwHighDateTime=0x1ca0395, nFileSizeHigh=0x0, nFileSizeLow=0x1fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIcon.jpg", cAlternateFileName="UNREAD~1.JPG")) returned 1 [0175.726] wcscmp (_String1="UnreadIcon.jpg", _String2=".") returned 1 [0175.726] wcscmp (_String1="UnreadIcon.jpg", _String2="..") returned 1 [0175.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57820 [0175.726] wcscpy (in: _Dest=0x3d57820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.726] wcscat (in: _Dest=0x3d57820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.726] wcscat (in: _Dest=0x3d57820, _Source="UnreadIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" [0175.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0175.727] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec4a100, ftCreationTime.dwHighDateTime=0x1ca0395, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ec4a100, ftLastWriteTime.dwHighDateTime=0x1ca0395, nFileSizeHigh=0x0, nFileSizeLow=0x1ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImages.jpg", cAlternateFileName="UNREAD~2.JPG")) returned 1 [0175.727] wcscmp (_String1="UnreadIconImages.jpg", _String2=".") returned 1 [0175.727] wcscmp (_String1="UnreadIconImages.jpg", _String2="..") returned 1 [0175.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68a80 [0175.727] wcscpy (in: _Dest=0x3e68a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.727] wcscat (in: _Dest=0x3e68a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.727] wcscat (in: _Dest=0x3e68a80, _Source="UnreadIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" [0175.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0175.729] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e410000, ftCreationTime.dwHighDateTime=0x1ca03bf, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e410000, ftLastWriteTime.dwHighDateTime=0x1ca03bf, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 1 [0175.729] wcscmp (_String1="UnreadIconImagesMask.bmp", _String2=".") returned 1 [0175.729] wcscmp (_String1="UnreadIconImagesMask.bmp", _String2="..") returned 1 [0175.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c96e8 [0175.729] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData" [0175.729] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\" [0175.729] wcscat (in: _Dest=0x2c96e8, _Source="UnreadIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" [0175.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0175.869] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e410000, ftCreationTime.dwHighDateTime=0x1ca03bf, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4e410000, ftLastWriteTime.dwHighDateTime=0x1ca03bf, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 0 [0177.114] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0177.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0177.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67270) returned 1 [0177.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66560) returned 1 Thread: id = 4523 os_tid = 0x15c8 [0173.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a67320 [0173.693] wcscpy (in: _Dest=0x7a67320, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0173.693] wcscat (in: _Dest=0x7a67320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\" [0173.693] wcscat (in: _Dest=0x7a67320, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*" [0173.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0173.693] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77012130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c89e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0177.560] wcscmp (_String1=".", _String2=".") returned 0 [0177.560] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77012130, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86c89e90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.560] wcscmp (_String1="..", _String2=".") returned 1 [0177.560] wcscmp (_String1="..", _String2="..") returned 0 [0177.561] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77012130, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="COMPUT~1.JPG")) returned 1 [0177.561] wcscmp (_String1="computericon.jpg", _String2=".") returned 1 [0177.561] wcscmp (_String1="computericon.jpg", _String2="..") returned 1 [0177.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d860c0 [0177.561] wcscpy (in: _Dest=0x3d860c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0177.561] wcscat (in: _Dest=0x3d860c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\" [0177.561] wcscat (in: _Dest=0x3d860c0, _Source="computericon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" [0178.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d860c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524 [0178.547] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 1 [0178.547] wcscmp (_String1="computericonMask.bmp", _String2=".") returned 1 [0178.547] wcscmp (_String1="computericonMask.bmp", _String2="..") returned 1 [0178.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e17f80 [0178.548] wcscpy (in: _Dest=0x3e17f80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers" [0178.548] wcscat (in: _Dest=0x3e17f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\" [0178.548] wcscat (in: _Dest=0x3e17f80, _Source="computericonMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" [0178.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e17f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0178.549] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1547ed00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1547ed00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 0 [0178.549] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0178.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0178.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67320) returned 1 [0178.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052fe8) returned 1 Thread: id = 4524 os_tid = 0x15cc [0173.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a673d0 [0173.694] wcscpy (in: _Dest=0x7a673d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0173.694] wcscat (in: _Dest=0x7a673d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\" [0173.694] wcscat (in: _Dest=0x7a673d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*" [0173.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0173.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7737e0d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876cdd70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0177.432] wcscmp (_String1=".", _String2=".") returned 0 [0177.432] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7737e0d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876cdd70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.432] wcscmp (_String1="..", _String2=".") returned 1 [0177.432] wcscmp (_String1="..", _String2="..") returned 0 [0177.432] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45357600, ftCreationTime.dwHighDateTime=0x1ca05ed, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45357600, ftLastWriteTime.dwHighDateTime=0x1ca05ed, nFileSizeHigh=0x0, nFileSizeLow=0x393c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1 [0177.432] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2=".") returned 1 [0177.432] wcscmp (_String1="DiscussionToolIconImages.jpg", _String2="..") returned 1 [0177.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3d08 [0177.433] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0177.433] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\" [0177.433] wcscat (in: _Dest=0x3dc3d08, _Source="DiscussionToolIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" [0178.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0178.464] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee17e00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5ee17e00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1 [0178.464] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2=".") returned 1 [0178.464] wcscmp (_String1="DiscussionToolIconImagesMask.bmp", _String2="..") returned 1 [0178.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db0168 [0178.465] wcscpy (in: _Dest=0x3db0168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion" [0178.465] wcscat (in: _Dest=0x3db0168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\" [0178.465] wcscat (in: _Dest=0x3db0168, _Source="DiscussionToolIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" [0178.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0178.466] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee17e00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5ee17e00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 0 [0178.466] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0178.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0178.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a673d0) returned 1 [0178.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a662a0) returned 1 Thread: id = 4525 os_tid = 0x15d0 [0173.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6f28 [0173.698] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" [0173.698] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\" [0173.698] wcscat (in: _Dest=0x2ff6f28, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*" [0173.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0173.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85365630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8538b790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74130 [0177.348] wcscmp (_String1=".", _String2=".") returned 0 [0177.348] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85365630, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8538b790, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.348] wcscmp (_String1="..", _String2=".") returned 1 [0177.348] wcscmp (_String1="..", _String2="..") returned 0 [0177.348] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1 [0177.349] wcscmp (_String1="WSSFilesToolHomePageBackground.jpg", _String2=".") returned 1 [0177.349] wcscmp (_String1="WSSFilesToolHomePageBackground.jpg", _String2="..") returned 1 [0177.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae1f8 [0177.349] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare" [0177.349] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\" [0177.349] wcscat (in: _Dest=0x3dae1f8, _Source="WSSFilesToolHomePageBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" [0178.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0178.223] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8538b790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 0 [0178.223] FindClose (in: hFindFile=0x3e74130 | out: hFindFile=0x3e74130) returned 1 [0178.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0178.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 [0178.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66350) returned 1 Thread: id = 4526 os_tid = 0x15d4 [0173.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57690 [0173.698] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0173.698] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0173.698] wcscat (in: _Dest=0x3d57690, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*" [0173.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2b50 [0173.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73df0 [0179.913] wcscmp (_String1=".", _String2=".") returned 0 [0179.913] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76451490, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8d1682d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.913] wcscmp (_String1="..", _String2=".") returned 1 [0179.913] wcscmp (_String1="..", _String2="..") returned 0 [0179.913] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85685310, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2519, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImage.jpg", cAlternateFileName="ACTIVE~1.JPG")) returned 1 [0179.913] wcscmp (_String1="ActiveTabImage.jpg", _String2=".") returned 1 [0179.913] wcscmp (_String1="ActiveTabImage.jpg", _String2="..") returned 1 [0179.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4b88 [0179.913] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0179.913] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0179.913] wcscat (in: _Dest=0x3dc4b88, _Source="ActiveTabImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" [0181.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0181.652] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16791a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76451490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x16791a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImageMask.bmp", cAlternateFileName="ACTIVE~1.BMP")) returned 1 [0181.652] wcscmp (_String1="ActiveTabImageMask.bmp", _String2=".") returned 1 [0181.652] wcscmp (_String1="ActiveTabImageMask.bmp", _String2="..") returned 1 [0181.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db0708 [0181.652] wcscpy (in: _Dest=0x3db0708, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0181.652] wcscat (in: _Dest=0x3db0708, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0181.652] wcscat (in: _Dest=0x3db0708, _Source="ActiveTabImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" [0181.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0181.653] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ac0e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BodyPaneBackground.jpg", cAlternateFileName="BODYPA~1.JPG")) returned 1 [0181.653] wcscmp (_String1="BodyPaneBackground.jpg", _String2=".") returned 1 [0181.653] wcscmp (_String1="BodyPaneBackground.jpg", _String2="..") returned 1 [0181.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db08e8 [0181.654] wcscpy (in: _Dest=0x3db08e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0181.654] wcscat (in: _Dest=0x3db08e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0181.654] wcscat (in: _Dest=0x3db08e8, _Source="BodyPaneBackground.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" [0181.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db08e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0181.655] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x24ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImage.jpg", cAlternateFileName="INACTI~1.JPG")) returned 1 [0181.655] wcscmp (_String1="InactiveTabImage.jpg", _String2=".") returned 1 [0181.655] wcscmp (_String1="InactiveTabImage.jpg", _String2="..") returned 1 [0181.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4f28 [0181.655] wcscpy (in: _Dest=0x3dc4f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0181.655] wcscat (in: _Dest=0x3dc4f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0181.655] wcscat (in: _Dest=0x3dc4f28, _Source="InactiveTabImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" [0181.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0181.656] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e45850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImageMask.bmp", cAlternateFileName="INACTI~1.BMP")) returned 1 [0181.656] wcscmp (_String1="InactiveTabImageMask.bmp", _String2=".") returned 1 [0181.656] wcscmp (_String1="InactiveTabImageMask.bmp", _String2="..") returned 1 [0181.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3daff88 [0181.656] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0181.656] wcscat (in: _Dest=0x3daff88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0181.656] wcscat (in: _Dest=0x3daff88, _Source="InactiveTabImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" [0181.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3daff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0181.657] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImages.jpg", cAlternateFileName="MARKUP~1.JPG")) returned 1 [0181.657] wcscmp (_String1="MarkupIconImages.jpg", _String2=".") returned 1 [0181.657] wcscmp (_String1="MarkupIconImages.jpg", _String2="..") returned 1 [0181.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc5010 [0181.657] wcscpy (in: _Dest=0x3dc5010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0181.657] wcscat (in: _Dest=0x3dc5010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0181.657] wcscat (in: _Dest=0x3dc5010, _Source="MarkupIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" [0181.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0181.658] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 1 [0181.658] wcscmp (_String1="MarkupIconImagesMask.bmp", _String2=".") returned 1 [0181.658] wcscmp (_String1="MarkupIconImagesMask.bmp", _String2="..") returned 1 [0181.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3dafda8 [0181.658] wcscpy (in: _Dest=0x3dafda8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview" [0181.658] wcscat (in: _Dest=0x3dafda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\" [0181.658] wcscat (in: _Dest=0x3dafda8, _Source="MarkupIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" [0181.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0181.659] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 0 [0181.659] FindClose (in: hFindFile=0x3e73df0 | out: hFindFile=0x3e73df0) returned 1 [0181.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2b50) returned 1 [0181.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 [0181.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66a98) returned 1 Thread: id = 4527 os_tid = 0x15d8 [0173.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a67480 [0173.699] wcscpy (in: _Dest=0x7a67480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0173.699] wcscat (in: _Dest=0x7a67480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0173.699] wcscat (in: _Dest=0x7a67480, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*" [0173.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb15a8 [0173.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769d2770, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73430 [0180.675] wcscmp (_String1=".", _String2=".") returned 0 [0180.675] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769d2770, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.342] wcscmp (_String1="..", _String2=".") returned 1 [0181.342] wcscmp (_String1="..", _String2="..") returned 0 [0181.342] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17aa4700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17aa4700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0181.343] wcscmp (_String1="AddToViewArrow.jpg", _String2=".") returned 1 [0181.343] wcscmp (_String1="AddToViewArrow.jpg", _String2="..") returned 1 [0181.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e682e8 [0181.343] wcscpy (in: _Dest=0x3e682e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0181.343] wcscat (in: _Dest=0x3e682e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0181.343] wcscat (in: _Dest=0x3e682e8, _Source="AddToViewArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" [0182.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e682e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b0 [0182.651] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0182.651] wcscmp (_String1="AddToViewArrowMask.bmp", _String2=".") returned 1 [0182.651] wcscmp (_String1="AddToViewArrowMask.bmp", _String2="..") returned 1 [0182.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7a64250 [0182.651] wcscpy (in: _Dest=0x7a64250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.651] wcscat (in: _Dest=0x7a64250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.651] wcscat (in: _Dest=0x7a64250, _Source="AddToViewArrowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" [0182.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0182.654] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0182.654] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0182.654] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0182.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57438 [0182.654] wcscpy (in: _Dest=0x3d57438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.654] wcscat (in: _Dest=0x3d57438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.654] wcscat (in: _Dest=0x3d57438, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" [0182.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b8 [0182.656] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0182.656] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0182.656] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0182.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56628 [0182.656] wcscpy (in: _Dest=0x3d56628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.656] wcscat (in: _Dest=0x3d56628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.657] wcscat (in: _Dest=0x3d56628, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" [0182.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0182.659] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0182.659] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0182.659] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0182.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57690 [0182.659] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.659] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.659] wcscat (in: _Dest=0x3d57690, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" [0182.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0182.661] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0182.661] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0182.661] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0182.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85220 [0182.661] wcscpy (in: _Dest=0x3d85220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.661] wcscat (in: _Dest=0x3d85220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.661] wcscat (in: _Dest=0x3d85220, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" [0182.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0182.662] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0182.662] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0182.662] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0182.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57500 [0182.663] wcscpy (in: _Dest=0x3d57500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.663] wcscat (in: _Dest=0x3d57500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.663] wcscat (in: _Dest=0x3d57500, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" [0182.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0182.664] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0182.664] wcscmp (_String1="bg_FormsHomePage.gif", _String2=".") returned 1 [0182.664] wcscmp (_String1="bg_FormsHomePage.gif", _String2="..") returned 1 [0182.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3011188 [0182.664] wcscpy (in: _Dest=0x3011188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.664] wcscat (in: _Dest=0x3011188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.664] wcscat (in: _Dest=0x3011188, _Source="bg_FormsHomePage.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" [0182.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3011188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0182.666] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0182.666] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2=".") returned 1 [0182.666] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2="..") returned 1 [0182.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x7a64330 [0182.666] wcscpy (in: _Dest=0x7a64330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.666] wcscat (in: _Dest=0x7a64330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.666] wcscat (in: _Dest=0x7a64330, _Source="bg_FormsHomePageBlank.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" [0182.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0182.668] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0182.668] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0182.668] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0182.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d86190 [0182.668] wcscpy (in: _Dest=0x3d86190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.668] wcscat (in: _Dest=0x3d86190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.668] wcscat (in: _Dest=0x3d86190, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" [0182.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0182.670] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0182.670] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0182.670] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0182.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57cd0 [0182.670] wcscpy (in: _Dest=0x3d57cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.670] wcscat (in: _Dest=0x3d57cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.670] wcscat (in: _Dest=0x3d57cd0, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" [0182.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0182.672] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18db7400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18db7400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0182.672] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0182.672] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0182.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3eeb5d0 [0182.672] wcscpy (in: _Dest=0x3eeb5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.672] wcscat (in: _Dest=0x3eeb5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.672] wcscat (in: _Dest=0x3eeb5d0, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" [0182.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0182.673] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0182.674] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0182.674] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0182.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d868e0 [0182.674] wcscpy (in: _Dest=0x3d868e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.674] wcscat (in: _Dest=0x3d868e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.674] wcscat (in: _Dest=0x3d868e0, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" [0182.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d868e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0182.675] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0182.675] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0182.675] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0182.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d869b0 [0182.675] wcscpy (in: _Dest=0x3d869b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.676] wcscat (in: _Dest=0x3d869b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.676] wcscat (in: _Dest=0x3d869b0, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" [0182.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d869b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0182.678] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0182.678] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0182.678] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0182.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d86a80 [0182.678] wcscpy (in: _Dest=0x3d86a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.678] wcscat (in: _Dest=0x3d86a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.678] wcscat (in: _Dest=0x3d86a80, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" [0182.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0182.679] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0182.679] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0182.680] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0182.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3eeb6a8 [0182.680] wcscpy (in: _Dest=0x3eeb6a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.680] wcscat (in: _Dest=0x3eeb6a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.680] wcscat (in: _Dest=0x3eeb6a8, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" [0182.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb6a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0182.681] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0182.681] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0182.681] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0182.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3034e90 [0182.682] wcscpy (in: _Dest=0x3034e90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.682] wcscat (in: _Dest=0x3034e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.682] wcscat (in: _Dest=0x3034e90, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" [0182.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3034e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0182.683] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BU6EE2~1.GIF")) returned 1 [0182.683] wcscmp (_String1="button_left.gif", _String2=".") returned 1 [0182.683] wcscmp (_String1="button_left.gif", _String2="..") returned 1 [0182.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x30352a0 [0182.683] wcscpy (in: _Dest=0x30352a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.683] wcscat (in: _Dest=0x30352a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.683] wcscat (in: _Dest=0x30352a0, _Source="button_left.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" [0182.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30352a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0182.685] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_disable.gif", cAlternateFileName="BUC0CB~1.GIF")) returned 1 [0182.685] wcscmp (_String1="button_left_disable.gif", _String2=".") returned 1 [0182.685] wcscmp (_String1="button_left_disable.gif", _String2="..") returned 1 [0182.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7a644f0 [0182.685] wcscpy (in: _Dest=0x7a644f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.685] wcscat (in: _Dest=0x7a644f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.685] wcscat (in: _Dest=0x7a644f0, _Source="button_left_disable.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" [0182.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a644f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0182.687] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0182.687] wcscmp (_String1="button_left_over.gif", _String2=".") returned 1 [0182.687] wcscmp (_String1="button_left_over.gif", _String2="..") returned 1 [0182.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3eeb4f8 [0182.687] wcscpy (in: _Dest=0x3eeb4f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.687] wcscat (in: _Dest=0x3eeb4f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.687] wcscat (in: _Dest=0x3eeb4f8, _Source="button_left_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" [0182.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb4f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0182.688] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUB371~1.GIF")) returned 1 [0182.688] wcscmp (_String1="button_mid.gif", _String2=".") returned 1 [0182.688] wcscmp (_String1="button_mid.gif", _String2="..") returned 1 [0182.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3036d70 [0182.689] wcscpy (in: _Dest=0x3036d70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0182.689] wcscat (in: _Dest=0x3036d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0182.689] wcscat (in: _Dest=0x3036d70, _Source="button_mid.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" [0182.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3036d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0183.372] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_disable.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0183.372] wcscmp (_String1="button_mid_disable.gif", _String2=".") returned 1 [0183.372] wcscmp (_String1="button_mid_disable.gif", _String2="..") returned 1 [0183.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7a64330 [0183.372] wcscpy (in: _Dest=0x7a64330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0183.372] wcscat (in: _Dest=0x7a64330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0183.372] wcscat (in: _Dest=0x7a64330, _Source="button_mid_disable.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" [0184.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0184.008] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0184.008] wcscmp (_String1="button_mid_over.gif", _String2=".") returned 1 [0184.008] wcscmp (_String1="button_mid_over.gif", _String2="..") returned 1 [0184.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0184.008] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.008] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.008] wcscat (in: _Dest=0x3e381e8, _Source="button_mid_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" [0184.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e381e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0184.009] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0184.009] wcscmp (_String1="button_right.gif", _String2=".") returned 1 [0184.009] wcscmp (_String1="button_right.gif", _String2="..") returned 1 [0184.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d868e0 [0184.010] wcscpy (in: _Dest=0x3d868e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.010] wcscat (in: _Dest=0x3d868e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.010] wcscat (in: _Dest=0x3d868e0, _Source="button_right.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" [0184.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d868e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0184.013] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0ca100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a0ca100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_disable.gif", cAlternateFileName="BUC143~1.GIF")) returned 1 [0184.013] wcscmp (_String1="button_right_disable.gif", _String2=".") returned 1 [0184.013] wcscmp (_String1="button_right_disable.gif", _String2="..") returned 1 [0184.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8568 [0184.014] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.014] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.014] wcscat (in: _Dest=0x2c8568, _Source="button_right_disable.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" [0184.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0184.015] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0184.015] wcscmp (_String1="button_right_over.gif", _String2=".") returned 1 [0184.015] wcscmp (_String1="button_right_over.gif", _String2="..") returned 1 [0184.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3eeb198 [0184.015] wcscpy (in: _Dest=0x3eeb198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.015] wcscat (in: _Dest=0x3eeb198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.015] wcscat (in: _Dest=0x3eeb198, _Source="button_right_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" [0184.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0184.016] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FieldTypePreview", cAlternateFileName="FIELDT~1")) returned 1 [0184.017] wcscmp (_String1="FieldTypePreview", _String2=".") returned 1 [0184.017] wcscmp (_String1="FieldTypePreview", _String2="..") returned 1 [0184.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d86a80 [0184.017] wcscpy (in: _Dest=0x3d86a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.017] wcscat (in: _Dest=0x3d86a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.017] wcscat (in: _Dest=0x3d86a80, _Source="FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0184.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d86a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0184.018] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x883e5670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0184.018] wcscmp (_String1="FORM.ICO", _String2=".") returned 1 [0184.018] wcscmp (_String1="FORM.ICO", _String2="..") returned 1 [0184.018] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0184.018] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0184.018] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0184.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3eeb270 [0184.018] wcscpy (in: _Dest=0x3eeb270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.018] wcscat (in: _Dest=0x3eeb270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.018] wcscat (in: _Dest=0x3eeb270, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" [0184.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0184.019] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0184.019] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0184.019] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0184.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x7a64250 [0184.020] wcscpy (in: _Dest=0x7a64250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.020] wcscat (in: _Dest=0x7a64250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.020] wcscat (in: _Dest=0x7a64250, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" [0184.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0184.021] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x805, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsDoNotTrust.html", cAlternateFileName="FORMSD~1.HTM")) returned 1 [0184.024] wcscmp (_String1="FormsDoNotTrust.html", _String2=".") returned 1 [0184.024] wcscmp (_String1="FormsDoNotTrust.html", _String2="..") returned 1 [0184.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3eeb348 [0184.024] wcscpy (in: _Dest=0x3eeb348, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.024] wcscat (in: _Dest=0x3eeb348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.025] wcscat (in: _Dest=0x3eeb348, _Source="FormsDoNotTrust.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" [0184.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0184.026] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc96, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0184.026] wcscmp (_String1="FormsHomePage.html", _String2=".") returned 1 [0184.026] wcscmp (_String1="FormsHomePage.html", _String2="..") returned 1 [0184.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3eeb420 [0184.026] wcscpy (in: _Dest=0x3eeb420, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.026] wcscat (in: _Dest=0x3eeb420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.026] wcscat (in: _Dest=0x3eeb420, _Source="FormsHomePage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" [0184.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0184.027] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x15fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0184.027] wcscmp (_String1="FormsHomePageScript.js", _String2=".") returned 1 [0184.027] wcscmp (_String1="FormsHomePageScript.js", _String2="..") returned 1 [0184.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7a645d0 [0184.027] wcscpy (in: _Dest=0x7a645d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.027] wcscat (in: _Dest=0x7a645d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.027] wcscat (in: _Dest=0x7a645d0, _Source="FormsHomePageScript.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" [0184.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a645d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0184.028] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0184.028] wcscmp (_String1="FormsHomePageStyle.css", _String2=".") returned 1 [0184.028] wcscmp (_String1="FormsHomePageStyle.css", _String2="..") returned 1 [0184.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7a646b0 [0184.028] wcscpy (in: _Dest=0x7a646b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.028] wcscat (in: _Dest=0x7a646b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.029] wcscat (in: _Dest=0x7a646b0, _Source="FormsHomePageStyle.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" [0184.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a646b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0184.032] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0184.032] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0184.032] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0184.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x7a64790 [0184.033] wcscpy (in: _Dest=0x7a64790, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.033] wcscat (in: _Dest=0x7a64790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.033] wcscat (in: _Dest=0x7a64790, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" [0184.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0184.034] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0184.034] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0184.034] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0184.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7a64870 [0184.034] wcscpy (in: _Dest=0x7a64870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.034] wcscat (in: _Dest=0x7a64870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.034] wcscat (in: _Dest=0x7a64870, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" [0184.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0184.035] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78d87170, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsTemplates", cAlternateFileName="FORMST~1")) returned 1 [0184.035] wcscmp (_String1="FormsTemplates", _String2=".") returned 1 [0184.035] wcscmp (_String1="FormsTemplates", _String2="..") returned 1 [0184.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d84e10 [0184.035] wcscpy (in: _Dest=0x3d84e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.035] wcscat (in: _Dest=0x3d84e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.035] wcscat (in: _Dest=0x3d84e10, _Source="FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0184.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d84e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0184.036] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0184.036] wcscmp (_String1="FormsVersion1Warning.htm", _String2=".") returned 1 [0184.036] wcscmp (_String1="FormsVersion1Warning.htm", _String2="..") returned 1 [0184.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x7a64950 [0184.036] wcscpy (in: _Dest=0x7a64950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.036] wcscat (in: _Dest=0x7a64950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.036] wcscat (in: _Dest=0x7a64950, _Source="FormsVersion1Warning.htm" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" [0184.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0184.038] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0184.038] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0184.038] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0184.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4f28 [0184.038] wcscpy (in: _Dest=0x3dc4f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.038] wcscat (in: _Dest=0x3dc4f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.038] wcscat (in: _Dest=0x3dc4f28, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" [0184.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0184.039] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0184.039] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0184.039] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0184.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3daff88 [0184.039] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.039] wcscat (in: _Dest=0x3daff88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.039] wcscat (in: _Dest=0x3daff88, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" [0184.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3daff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0184.040] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0184.040] wcscmp (_String1="FormsViewFrame.html", _String2=".") returned 1 [0184.041] wcscmp (_String1="FormsViewFrame.html", _String2="..") returned 1 [0184.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3eeb5d0 [0184.041] wcscpy (in: _Dest=0x3eeb5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.041] wcscat (in: _Dest=0x3eeb5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.041] wcscat (in: _Dest=0x3eeb5d0, _Source="FormsViewFrame.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" [0184.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0184.043] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0184.043] wcscmp (_String1="FormToolImages.jpg", _String2=".") returned 1 [0184.043] wcscmp (_String1="FormToolImages.jpg", _String2="..") returned 1 [0184.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3eeb780 [0184.043] wcscpy (in: _Dest=0x3eeb780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.043] wcscat (in: _Dest=0x3eeb780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.043] wcscat (in: _Dest=0x3eeb780, _Source="FormToolImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" [0184.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0184.045] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78d3aeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x167d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveFormsMetaData.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0184.045] wcscmp (_String1="GrooveFormsMetaData.xml", _String2=".") returned 1 [0184.045] wcscmp (_String1="GrooveFormsMetaData.xml", _String2="..") returned 1 [0184.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7a64a30 [0184.045] wcscpy (in: _Dest=0x7a64a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.045] wcscat (in: _Dest=0x7a64a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.045] wcscat (in: _Dest=0x7a64a30, _Source="GrooveFormsMetaData.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" [0184.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c [0184.046] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1 [0184.046] wcscmp (_String1="MENUS.JS", _String2=".") returned 1 [0184.046] wcscmp (_String1="MENUS.JS", _String2="..") returned 1 [0184.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332f28 [0184.046] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.046] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.046] wcscat (in: _Dest=0x332f28, _Source="MENUS.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" [0184.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004 [0184.047] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="MENU_A~1.GIF")) returned 1 [0184.047] wcscmp (_String1="menu_arrow.gif", _String2=".") returned 1 [0184.047] wcscmp (_String1="menu_arrow.gif", _String2="..") returned 1 [0184.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d864d0 [0184.047] wcscpy (in: _Dest=0x3d864d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.047] wcscat (in: _Dest=0x3d864d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.047] wcscat (in: _Dest=0x3d864d0, _Source="menu_arrow.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" [0184.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d864d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0184.048] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82520a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEARCH.GIF", cAlternateFileName="")) returned 1 [0184.048] wcscmp (_String1="SEARCH.GIF", _String2=".") returned 1 [0184.048] wcscmp (_String1="SEARCH.GIF", _String2="..") returned 1 [0184.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57cd0 [0184.049] wcscpy (in: _Dest=0x3d57cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.049] wcscat (in: _Dest=0x3d57cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.049] wcscat (in: _Dest=0x3d57cd0, _Source="SEARCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" [0184.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0184.050] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0184.050] wcscmp (_String1="SPACER.GIF", _String2=".") returned 1 [0184.050] wcscmp (_String1="SPACER.GIF", _String2="..") returned 1 [0184.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57500 [0184.050] wcscpy (in: _Dest=0x3d57500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.050] wcscat (in: _Dest=0x3d57500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.050] wcscat (in: _Dest=0x3d57500, _Source="SPACER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" [0184.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0184.051] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0184.051] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0184.051] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0184.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333a68 [0184.051] wcscpy (in: _Dest=0x333a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.051] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.051] wcscat (in: _Dest=0x333a68, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" [0184.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0184.052] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0184.052] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0184.052] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0184.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3eeb858 [0184.052] wcscpy (in: _Dest=0x3eeb858, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.052] wcscat (in: _Dest=0x3eeb858, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.052] wcscat (in: _Dest=0x3eeb858, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" [0184.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0184.053] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0184.053] wcscmp (_String1="validation.js", _String2=".") returned 1 [0184.053] wcscmp (_String1="validation.js", _String2="..") returned 1 [0184.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57690 [0184.053] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.054] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.054] wcscat (in: _Dest=0x3d57690, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" [0184.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0184.054] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.CSS", cAlternateFileName="")) returned 1 [0184.055] wcscmp (_String1="VIEW.CSS", _String2=".") returned 1 [0184.055] wcscmp (_String1="VIEW.CSS", _String2="..") returned 1 [0184.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3339a8 [0184.055] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.055] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.055] wcscat (in: _Dest=0x3339a8, _Source="VIEW.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" [0184.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0184.454] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0184.454] wcscmp (_String1="VIEW.ICO", _String2=".") returned 1 [0184.454] wcscmp (_String1="VIEW.ICO", _String2="..") returned 1 [0184.454] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x505b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0184.454] wcscmp (_String1="VIEW.JS", _String2=".") returned 1 [0184.454] wcscmp (_String1="VIEW.JS", _String2="..") returned 1 [0184.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332f28 [0184.454] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0184.454] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0184.454] wcscat (in: _Dest=0x332f28, _Source="VIEW.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" [0185.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0185.430] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWBY.GIF", cAlternateFileName="")) returned 1 [0185.430] wcscmp (_String1="VIEWBY.GIF", _String2=".") returned 1 [0185.430] wcscmp (_String1="VIEWBY.GIF", _String2="..") returned 1 [0185.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57690 [0185.430] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0185.430] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0185.430] wcscat (in: _Dest=0x3d57690, _Source="VIEWBY.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" [0185.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0185.431] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewDblClick.js", cAlternateFileName="VIEWDB~1.JS")) returned 1 [0185.431] wcscmp (_String1="viewDblClick.js", _String2=".") returned 1 [0185.431] wcscmp (_String1="viewDblClick.js", _String2="..") returned 1 [0185.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d84ee0 [0185.431] wcscpy (in: _Dest=0x3d84ee0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0185.431] wcscat (in: _Dest=0x3d84ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0185.431] wcscat (in: _Dest=0x3d84ee0, _Source="viewDblClick.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" [0185.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0185.432] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20028200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20028200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0185.432] wcscmp (_String1="ViewHeaderPreview.jpg", _String2=".") returned 1 [0185.433] wcscmp (_String1="ViewHeaderPreview.jpg", _String2="..") returned 1 [0185.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e687f8 [0185.433] wcscpy (in: _Dest=0x3e687f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0185.433] wcscat (in: _Dest=0x3e687f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0185.433] wcscat (in: _Dest=0x3e687f8, _Source="ViewHeaderPreview.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" [0185.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0185.434] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 1 [0185.434] wcscmp (_String1="viewSelectionChanged.js", _String2=".") returned 1 [0185.434] wcscmp (_String1="viewSelectionChanged.js", _String2="..") returned 1 [0185.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c90c8 [0185.434] wcscpy (in: _Dest=0x2c90c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms" [0185.434] wcscat (in: _Dest=0x2c90c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\" [0185.434] wcscat (in: _Dest=0x2c90c8, _Source="viewSelectionChanged.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" [0185.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c90c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0185.435] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 0 [0185.435] FindClose (in: hFindFile=0x3e73430 | out: hFindFile=0x3e73430) returned 1 [0185.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb15a8) returned 1 [0185.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67480) returned 1 [0185.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66090) returned 1 Thread: id = 4528 os_tid = 0x15dc [0173.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6740 [0173.700] wcscpy (in: _Dest=0x2ff6740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0173.700] wcscat (in: _Dest=0x2ff6740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0173.700] wcscat (in: _Dest=0x2ff6740, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*" [0173.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0173.700] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741b0 [0180.622] wcscmp (_String1=".", _String2=".") returned 0 [0180.622] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.273] wcscmp (_String1="..", _String2=".") returned 1 [0181.273] wcscmp (_String1="..", _String2="..") returned 0 [0181.273] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0181.273] wcscmp (_String1="ADD.GIF", _String2=".") returned 1 [0181.273] wcscmp (_String1="ADD.GIF", _String2="..") returned 1 [0181.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332f28 [0181.274] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.274] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.274] wcscat (in: _Dest=0x332f28, _Source="ADD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" [0181.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0181.954] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0181.954] wcscmp (_String1="AddToViewArrow.jpg", _String2=".") returned 1 [0181.954] wcscmp (_String1="AddToViewArrow.jpg", _String2="..") returned 1 [0181.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3011188 [0181.955] wcscpy (in: _Dest=0x3011188, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.955] wcscat (in: _Dest=0x3011188, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.955] wcscat (in: _Dest=0x3011188, _Source="AddToViewArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" [0181.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3011188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0181.956] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0181.956] wcscmp (_String1="AddToViewArrowMask.bmp", _String2=".") returned 1 [0181.956] wcscmp (_String1="AddToViewArrowMask.bmp", _String2="..") returned 1 [0181.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7a64250 [0181.956] wcscpy (in: _Dest=0x7a64250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.956] wcscat (in: _Dest=0x7a64250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.956] wcscat (in: _Dest=0x7a64250, _Source="AddToViewArrowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" [0181.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0181.958] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769d2770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0181.958] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0181.958] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0181.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d86190 [0181.958] wcscpy (in: _Dest=0x3d86190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.958] wcscat (in: _Dest=0x3d86190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.958] wcscat (in: _Dest=0x3d86190, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" [0181.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40 [0181.959] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0181.959] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0181.959] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0181.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57438 [0181.959] wcscpy (in: _Dest=0x3d57438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.960] wcscat (in: _Dest=0x3d57438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.960] wcscat (in: _Dest=0x3d57438, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" [0181.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0181.961] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0181.961] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0181.961] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0181.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85220 [0181.961] wcscpy (in: _Dest=0x3d85220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.961] wcscat (in: _Dest=0x3d85220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.961] wcscat (in: _Dest=0x3d85220, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" [0181.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0181.963] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0181.963] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0181.963] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0181.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85f20 [0181.963] wcscpy (in: _Dest=0x3d85f20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.963] wcscat (in: _Dest=0x3d85f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.963] wcscat (in: _Dest=0x3d85f20, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" [0181.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004 [0181.964] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0181.964] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0181.965] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0181.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d860c0 [0181.965] wcscpy (in: _Dest=0x3d860c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.965] wcscat (in: _Dest=0x3d860c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.965] wcscat (in: _Dest=0x3d860c0, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" [0181.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d860c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c [0181.966] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0181.966] wcscmp (_String1="bg_FormsHomePage.gif", _String2=".") returned 1 [0181.966] wcscmp (_String1="bg_FormsHomePage.gif", _String2="..") returned 1 [0181.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3012bb0 [0181.967] wcscpy (in: _Dest=0x3012bb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.967] wcscat (in: _Dest=0x3012bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.967] wcscat (in: _Dest=0x3012bb0, _Source="bg_FormsHomePage.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" [0181.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3012bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0181.969] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1 [0181.969] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2=".") returned 1 [0181.969] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2="..") returned 1 [0181.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4b88 [0181.969] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.969] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.969] wcscat (in: _Dest=0x3dc4b88, _Source="bg_FormsHomePageBlank.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" [0181.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0181.970] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0181.970] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2=".") returned 1 [0181.970] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2="..") returned 1 [0181.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4448 [0181.970] wcscpy (in: _Dest=0x3dc4448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.970] wcscat (in: _Dest=0x3dc4448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.970] wcscat (in: _Dest=0x3dc4448, _Source="bg_FormsHomePageSlice.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" [0181.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0181.972] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0181.972] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0181.972] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0181.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85ff0 [0181.972] wcscpy (in: _Dest=0x3d85ff0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.972] wcscat (in: _Dest=0x3d85ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.972] wcscat (in: _Dest=0x3d85ff0, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" [0181.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0181.974] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2133af00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2133af00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0181.974] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0181.974] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0181.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d84e10 [0181.974] wcscpy (in: _Dest=0x3d84e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.974] wcscat (in: _Dest=0x3d84e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.974] wcscat (in: _Dest=0x3d84e10, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" [0181.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0181.975] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0181.975] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0181.975] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0181.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x30115c0 [0181.975] wcscpy (in: _Dest=0x30115c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.975] wcscat (in: _Dest=0x30115c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.975] wcscat (in: _Dest=0x30115c0, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" [0181.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30115c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0181.977] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0181.977] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0181.977] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0181.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3ddcbb0 [0181.977] wcscpy (in: _Dest=0x3ddcbb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.977] wcscat (in: _Dest=0x3ddcbb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.977] wcscat (in: _Dest=0x3ddcbb0, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" [0181.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ddcbb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0181.978] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0181.978] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0181.978] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0181.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d864d0 [0181.978] wcscpy (in: _Dest=0x3d864d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.978] wcscat (in: _Dest=0x3d864d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.978] wcscat (in: _Dest=0x3d864d0, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" [0181.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d864d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0181.980] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0181.980] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0181.980] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0181.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d865a0 [0181.980] wcscpy (in: _Dest=0x3d865a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.980] wcscat (in: _Dest=0x3d865a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.980] wcscat (in: _Dest=0x3d865a0, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" [0181.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d865a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0181.981] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0181.981] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0181.981] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0181.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3eeb198 [0181.981] wcscpy (in: _Dest=0x3eeb198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.981] wcscat (in: _Dest=0x3eeb198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.981] wcscat (in: _Dest=0x3eeb198, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" [0181.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0181.983] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0181.983] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0181.983] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0181.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3eeb270 [0181.983] wcscpy (in: _Dest=0x3eeb270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.983] wcscat (in: _Dest=0x3eeb270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.983] wcscat (in: _Dest=0x3eeb270, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" [0181.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0181.984] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0181.984] wcscmp (_String1="button_left.gif", _String2=".") returned 1 [0181.984] wcscmp (_String1="button_left.gif", _String2="..") returned 1 [0181.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d86670 [0181.984] wcscpy (in: _Dest=0x3d86670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.984] wcscat (in: _Dest=0x3d86670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.984] wcscat (in: _Dest=0x3d86670, _Source="button_left.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" [0181.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0181.986] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0181.986] wcscmp (_String1="button_left_over.gif", _String2=".") returned 1 [0181.986] wcscmp (_String1="button_left_over.gif", _String2="..") returned 1 [0181.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3eeb348 [0181.986] wcscpy (in: _Dest=0x3eeb348, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.986] wcscat (in: _Dest=0x3eeb348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.986] wcscat (in: _Dest=0x3eeb348, _Source="button_left_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" [0181.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0181.987] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0181.987] wcscmp (_String1="button_mid.gif", _String2=".") returned 1 [0181.987] wcscmp (_String1="button_mid.gif", _String2="..") returned 1 [0181.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d86740 [0181.988] wcscpy (in: _Dest=0x3d86740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.988] wcscat (in: _Dest=0x3d86740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.988] wcscat (in: _Dest=0x3d86740, _Source="button_mid.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" [0181.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0181.989] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0181.989] wcscmp (_String1="button_mid_over.gif", _String2=".") returned 1 [0181.989] wcscmp (_String1="button_mid_over.gif", _String2="..") returned 1 [0181.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3eeb420 [0181.990] wcscpy (in: _Dest=0x3eeb420, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.990] wcscat (in: _Dest=0x3eeb420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.990] wcscat (in: _Dest=0x3eeb420, _Source="button_mid_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" [0181.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eeb420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0181.991] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1 [0181.991] wcscmp (_String1="button_right.gif", _String2=".") returned 1 [0181.991] wcscmp (_String1="button_right.gif", _String2="..") returned 1 [0181.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d86810 [0181.991] wcscpy (in: _Dest=0x3d86810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0181.991] wcscat (in: _Dest=0x3d86810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0181.991] wcscat (in: _Dest=0x3d86810, _Source="button_right.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" [0181.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0182.690] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0182.690] wcscmp (_String1="button_right_over.gif", _String2=".") returned 1 [0182.690] wcscmp (_String1="button_right_over.gif", _String2="..") returned 1 [0182.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7a64410 [0182.690] wcscpy (in: _Dest=0x7a64410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0182.690] wcscat (in: _Dest=0x7a64410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0182.690] wcscat (in: _Dest=0x7a64410, _Source="button_right_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" [0188.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0188.389] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0188.389] wcscmp (_String1="CALENDAR.GIF", _String2=".") returned 1 [0188.389] wcscmp (_String1="CALENDAR.GIF", _String2="..") returned 1 [0188.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d575c8 [0188.389] wcscpy (in: _Dest=0x3d575c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.389] wcscat (in: _Dest=0x3d575c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.389] wcscat (in: _Dest=0x3d575c8, _Source="CALENDAR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" [0188.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d575c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0188.391] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2264dc00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2264dc00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0188.391] wcscmp (_String1="DELETE.GIF", _String2=".") returned 1 [0188.391] wcscmp (_String1="DELETE.GIF", _String2="..") returned 1 [0188.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d56ad8 [0188.391] wcscpy (in: _Dest=0x3d56ad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.391] wcscat (in: _Dest=0x3d56ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.391] wcscat (in: _Dest=0x3d56ad8, _Source="DELETE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" [0188.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0188.392] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0188.392] wcscmp (_String1="ERROR.GIF", _String2=".") returned 1 [0188.392] wcscmp (_String1="ERROR.GIF", _String2="..") returned 1 [0188.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57690 [0188.393] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.393] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.393] wcscat (in: _Dest=0x3d57690, _Source="ERROR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" [0188.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0188.395] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0188.395] wcscmp (_String1="FORM.ICO", _String2=".") returned 1 [0188.395] wcscmp (_String1="FORM.ICO", _String2="..") returned 1 [0188.395] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1388d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0188.395] wcscmp (_String1="FORM.JS", _String2=".") returned 1 [0188.395] wcscmp (_String1="FORM.JS", _String2="..") returned 1 [0188.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e666d8 [0188.395] wcscpy (in: _Dest=0x3e666d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.395] wcscat (in: _Dest=0x3e666d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.395] wcscat (in: _Dest=0x3e666d8, _Source="FORM.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" [0188.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e666d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0188.396] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0188.396] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0188.397] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0188.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e68498 [0188.397] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.397] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.397] wcscat (in: _Dest=0x3e68498, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" [0188.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0188.398] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0188.403] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0188.403] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0188.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x7a64170 [0188.403] wcscpy (in: _Dest=0x7a64170, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.403] wcscat (in: _Dest=0x7a64170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.403] wcscat (in: _Dest=0x7a64170, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" [0188.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0188.404] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1 [0188.404] wcscmp (_String1="FormsColorChart.html", _String2=".") returned 1 [0188.404] wcscmp (_String1="FormsColorChart.html", _String2="..") returned 1 [0188.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e687f8 [0188.405] wcscpy (in: _Dest=0x3e687f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.405] wcscat (in: _Dest=0x3e687f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.405] wcscat (in: _Dest=0x3e687f8, _Source="FormsColorChart.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" [0188.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0188.406] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1 [0188.406] wcscmp (_String1="FormsFormTemplate.html", _String2=".") returned 1 [0188.406] wcscmp (_String1="FormsFormTemplate.html", _String2="..") returned 1 [0188.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7a64a30 [0188.407] wcscpy (in: _Dest=0x7a64a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.407] wcscat (in: _Dest=0x7a64a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.407] wcscat (in: _Dest=0x7a64a30, _Source="FormsFormTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" [0188.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0188.408] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0188.408] wcscmp (_String1="FormsHomePage.html", _String2=".") returned 1 [0188.408] wcscmp (_String1="FormsHomePage.html", _String2="..") returned 1 [0188.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e688d0 [0188.408] wcscpy (in: _Dest=0x3e688d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.408] wcscat (in: _Dest=0x3e688d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.408] wcscat (in: _Dest=0x3e688d0, _Source="FormsHomePage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" [0188.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e688d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0188.410] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1dda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0188.410] wcscmp (_String1="FormsHomePageScript.js", _String2=".") returned 1 [0188.410] wcscmp (_String1="FormsHomePageScript.js", _String2="..") returned 1 [0188.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7a64950 [0188.410] wcscpy (in: _Dest=0x7a64950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.410] wcscat (in: _Dest=0x7a64950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.410] wcscat (in: _Dest=0x7a64950, _Source="FormsHomePageScript.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" [0188.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0188.412] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0188.412] wcscmp (_String1="FormsHomePageStyle.css", _String2=".") returned 1 [0188.412] wcscmp (_String1="FormsHomePageStyle.css", _String2="..") returned 1 [0188.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7a64870 [0188.412] wcscpy (in: _Dest=0x7a64870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.412] wcscat (in: _Dest=0x7a64870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.412] wcscat (in: _Dest=0x7a64870, _Source="FormsHomePageStyle.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" [0188.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0188.414] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1 [0188.414] wcscmp (_String1="FormsImageTemplate.html", _String2=".") returned 1 [0188.414] wcscmp (_String1="FormsImageTemplate.html", _String2="..") returned 1 [0188.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x7a64790 [0188.414] wcscpy (in: _Dest=0x7a64790, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.414] wcscat (in: _Dest=0x7a64790, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.414] wcscat (in: _Dest=0x7a64790, _Source="FormsImageTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" [0188.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0188.415] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x856, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1 [0188.415] wcscmp (_String1="FormsMacroTemplate.html", _String2=".") returned 1 [0188.415] wcscmp (_String1="FormsMacroTemplate.html", _String2="..") returned 1 [0188.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x7a646b0 [0188.416] wcscpy (in: _Dest=0x7a646b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.416] wcscat (in: _Dest=0x7a646b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.416] wcscat (in: _Dest=0x7a646b0, _Source="FormsMacroTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" [0188.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a646b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0188.417] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x46fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0188.418] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0188.418] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0188.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc47e8 [0188.418] wcscpy (in: _Dest=0x3dc47e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.418] wcscat (in: _Dest=0x3dc47e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.418] wcscat (in: _Dest=0x3dc47e8, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" [0188.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc47e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0188.420] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0188.420] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0188.420] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0188.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x7a645d0 [0188.420] wcscpy (in: _Dest=0x7a645d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.420] wcscat (in: _Dest=0x7a645d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.420] wcscat (in: _Dest=0x7a645d0, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" [0188.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a645d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0188.422] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1 [0188.422] wcscmp (_String1="FormsStyles", _String2=".") returned 1 [0188.422] wcscmp (_String1="FormsStyles", _String2="..") returned 1 [0188.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d579b0 [0188.422] wcscpy (in: _Dest=0x3d579b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.422] wcscat (in: _Dest=0x3d579b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.422] wcscat (in: _Dest=0x3d579b0, _Source="FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0188.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d579b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30 [0188.423] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0188.424] wcscmp (_String1="FormsVersion1Warning.htm", _String2=".") returned 1 [0188.424] wcscmp (_String1="FormsVersion1Warning.htm", _String2="..") returned 1 [0188.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x7a64250 [0188.424] wcscpy (in: _Dest=0x7a64250, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.424] wcscat (in: _Dest=0x7a64250, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.424] wcscat (in: _Dest=0x7a64250, _Source="FormsVersion1Warning.htm" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" [0188.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0188.425] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0188.425] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0188.425] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0188.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4700 [0188.425] wcscpy (in: _Dest=0x3dc4700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.426] wcscat (in: _Dest=0x3dc4700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.426] wcscat (in: _Dest=0x3dc4700, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" [0188.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0188.427] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0188.427] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0188.427] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0188.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0258 [0188.427] wcscpy (in: _Dest=0x3db0258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0188.427] wcscat (in: _Dest=0x3db0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0188.427] wcscat (in: _Dest=0x3db0258, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" [0188.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0189.662] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1313, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~3.HTM")) returned 1 [0189.662] wcscmp (_String1="FormsViewFrame.html", _String2=".") returned 1 [0189.662] wcscmp (_String1="FormsViewFrame.html", _String2="..") returned 1 [0189.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e688d0 [0189.662] wcscpy (in: _Dest=0x3e688d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0189.662] wcscat (in: _Dest=0x3e688d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0189.662] wcscat (in: _Dest=0x3e688d0, _Source="FormsViewFrame.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" [0190.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e688d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4 [0190.332] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa89, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0190.332] wcscmp (_String1="FormsViewTemplate.html", _String2=".") returned 1 [0190.332] wcscmp (_String1="FormsViewTemplate.html", _String2="..") returned 1 [0190.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9a68 [0190.332] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.332] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.333] wcscat (in: _Dest=0x2c9a68, _Source="FormsViewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" [0190.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0190.334] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0190.334] wcscmp (_String1="FormToolImages.jpg", _String2=".") returned 1 [0190.334] wcscmp (_String1="FormToolImages.jpg", _String2="..") returned 1 [0190.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68498 [0190.334] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.334] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.334] wcscat (in: _Dest=0x3e68498, _Source="FormToolImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" [0190.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0190.335] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23960900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23960900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x23ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1 [0190.335] wcscmp (_String1="form_edit.js", _String2=".") returned 1 [0190.336] wcscmp (_String1="form_edit.js", _String2="..") returned 1 [0190.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57690 [0190.336] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.336] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.336] wcscat (in: _Dest=0x3d57690, _Source="form_edit.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" [0190.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0190.337] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0190.337] wcscmp (_String1="LAUNCH.GIF", _String2=".") returned 1 [0190.337] wcscmp (_String1="LAUNCH.GIF", _String2="..") returned 1 [0190.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d56ad8 [0190.337] wcscpy (in: _Dest=0x3d56ad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.337] wcscat (in: _Dest=0x3d56ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.337] wcscat (in: _Dest=0x3d56ad8, _Source="LAUNCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" [0190.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0190.339] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c42a00, ftCreationTime.dwHighDateTime=0x1c9ff01, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6c42a00, ftLastWriteTime.dwHighDateTime=0x1c9ff01, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1 [0190.339] wcscmp (_String1="macroprogress.gif", _String2=".") returned 1 [0190.339] wcscmp (_String1="macroprogress.gif", _String2="..") returned 1 [0190.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e687f8 [0190.339] wcscpy (in: _Dest=0x3e687f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.339] wcscat (in: _Dest=0x3e687f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.339] wcscat (in: _Dest=0x3e687f8, _Source="macroprogress.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" [0190.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0190.340] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824160f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1 [0190.340] wcscmp (_String1="PublicFunctions.js", _String2=".") returned 1 [0190.340] wcscmp (_String1="PublicFunctions.js", _String2="..") returned 1 [0190.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e67490 [0190.341] wcscpy (in: _Dest=0x3e67490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.341] wcscat (in: _Dest=0x3e67490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.341] wcscat (in: _Dest=0x3e67490, _Source="PublicFunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" [0190.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0190.342] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1 [0190.342] wcscmp (_String1="rtf_alignleft.gif", _String2=".") returned 1 [0190.342] wcscmp (_String1="rtf_alignleft.gif", _String2="..") returned 1 [0190.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e689a8 [0190.342] wcscpy (in: _Dest=0x3e689a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.342] wcscat (in: _Dest=0x3e689a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.342] wcscat (in: _Dest=0x3e689a8, _Source="rtf_alignleft.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" [0190.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e689a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0190.356] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1 [0190.356] wcscmp (_String1="rtf_alignright.gif", _String2=".") returned 1 [0190.356] wcscmp (_String1="rtf_alignright.gif", _String2="..") returned 1 [0190.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68d08 [0190.356] wcscpy (in: _Dest=0x3e68d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.356] wcscat (in: _Dest=0x3e68d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.356] wcscat (in: _Dest=0x3e68d08, _Source="rtf_alignright.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" [0190.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0190.358] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0190.358] wcscmp (_String1="RTF_BOLD.GIF", _String2=".") returned 1 [0190.358] wcscmp (_String1="RTF_BOLD.GIF", _String2="..") returned 1 [0190.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d575c8 [0190.358] wcscpy (in: _Dest=0x3d575c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.358] wcscat (in: _Dest=0x3d575c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.358] wcscat (in: _Dest=0x3d575c8, _Source="RTF_BOLD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" [0190.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d575c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0190.360] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1 [0190.360] wcscmp (_String1="rtf_bullets.gif", _String2=".") returned 1 [0190.360] wcscmp (_String1="rtf_bullets.gif", _String2="..") returned 1 [0190.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85cb0 [0190.360] wcscpy (in: _Dest=0x3d85cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.360] wcscat (in: _Dest=0x3d85cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.360] wcscat (in: _Dest=0x3d85cb0, _Source="rtf_bullets.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" [0190.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0190.361] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1 [0190.362] wcscmp (_String1="rtf_center.gif", _String2=".") returned 1 [0190.362] wcscmp (_String1="rtf_center.gif", _String2="..") returned 1 [0190.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85970 [0190.362] wcscpy (in: _Dest=0x3d85970, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.362] wcscat (in: _Dest=0x3d85970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.362] wcscat (in: _Dest=0x3d85970, _Source="rtf_center.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" [0190.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0190.363] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5669c00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5669c00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~2.GIF")) returned 1 [0190.363] wcscmp (_String1="rtf_choosecolor.gif", _String2=".") returned 1 [0190.363] wcscmp (_String1="rtf_choosecolor.gif", _String2="..") returned 1 [0190.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e67568 [0190.364] wcscpy (in: _Dest=0x3e67568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.364] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.364] wcscat (in: _Dest=0x3e67568, _Source="rtf_choosecolor.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" [0190.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0190.365] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bee4400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2bee4400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0190.365] wcscmp (_String1="rtf_choosefont.gif", _String2=".") returned 1 [0190.365] wcscmp (_String1="rtf_choosefont.gif", _String2="..") returned 1 [0190.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68570 [0190.365] wcscpy (in: _Dest=0x3e68570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.365] wcscat (in: _Dest=0x3e68570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.365] wcscat (in: _Dest=0x3e68570, _Source="rtf_choosefont.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" [0190.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0190.366] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1 [0190.367] wcscmp (_String1="rtf_decreaseindent.gif", _String2=".") returned 1 [0190.367] wcscmp (_String1="rtf_decreaseindent.gif", _String2="..") returned 1 [0190.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c98a8 [0190.367] wcscpy (in: _Dest=0x2c98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.367] wcscat (in: _Dest=0x2c98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.367] wcscat (in: _Dest=0x2c98a8, _Source="rtf_decreaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" [0190.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0190.368] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1 [0190.370] wcscmp (_String1="rtf_increaseindent.gif", _String2=".") returned 1 [0190.371] wcscmp (_String1="rtf_increaseindent.gif", _String2="..") returned 1 [0190.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9988 [0190.371] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.371] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.371] wcscat (in: _Dest=0x2c9988, _Source="rtf_increaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" [0190.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0190.866] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1 [0190.866] wcscmp (_String1="rtf_italic.gif", _String2=".") returned 1 [0190.866] wcscmp (_String1="rtf_italic.gif", _String2="..") returned 1 [0190.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85150 [0190.866] wcscpy (in: _Dest=0x3d85150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.866] wcscat (in: _Dest=0x3d85150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.866] wcscat (in: _Dest=0x3d85150, _Source="rtf_italic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" [0190.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0190.867] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1 [0190.868] wcscmp (_String1="rtf_justify.gif", _String2=".") returned 1 [0190.868] wcscmp (_String1="rtf_justify.gif", _String2="..") returned 1 [0190.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d853c0 [0190.868] wcscpy (in: _Dest=0x3d853c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.868] wcscat (in: _Dest=0x3d853c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.868] wcscat (in: _Dest=0x3d853c0, _Source="rtf_justify.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" [0190.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d853c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0190.869] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1 [0190.869] wcscmp (_String1="rtf_pressed.gif", _String2=".") returned 1 [0190.869] wcscmp (_String1="rtf_pressed.gif", _String2="..") returned 1 [0190.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d84e10 [0190.869] wcscpy (in: _Dest=0x3d84e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.869] wcscat (in: _Dest=0x3d84e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.869] wcscat (in: _Dest=0x3d84e10, _Source="rtf_pressed.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" [0190.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0190.871] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1 [0190.871] wcscmp (_String1="rtf_underline.gif", _String2=".") returned 1 [0190.871] wcscmp (_String1="rtf_underline.gif", _String2="..") returned 1 [0190.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e687f8 [0190.871] wcscpy (in: _Dest=0x3e687f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.871] wcscat (in: _Dest=0x3e687f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.871] wcscat (in: _Dest=0x3e687f8, _Source="rtf_underline.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" [0190.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0190.872] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedee9600, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedee9600, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0190.872] wcscmp (_String1="SAVE.GIF", _String2=".") returned 1 [0190.872] wcscmp (_String1="SAVE.GIF", _String2="..") returned 1 [0190.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332268 [0190.873] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.873] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.873] wcscat (in: _Dest=0x332268, _Source="SAVE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" [0190.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0190.874] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1f7100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d1f7100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x12b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0190.874] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0190.874] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0190.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56ad8 [0190.874] wcscpy (in: _Dest=0x3d56ad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.875] wcscat (in: _Dest=0x3d56ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.875] wcscat (in: _Dest=0x3d56ad8, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" [0190.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0190.876] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8512a190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6e57, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0190.876] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0190.876] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0190.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e68498 [0190.876] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.877] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.877] wcscat (in: _Dest=0x3e68498, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" [0190.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0190.878] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6427, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0190.878] wcscmp (_String1="validation.js", _String2=".") returned 1 [0190.878] wcscmp (_String1="validation.js", _String2="..") returned 1 [0190.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d868e0 [0190.878] wcscpy (in: _Dest=0x3d868e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.878] wcscat (in: _Dest=0x3d868e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.878] wcscat (in: _Dest=0x3d868e0, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" [0190.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d868e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0190.880] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0190.880] wcscmp (_String1="VIEW.ICO", _String2=".") returned 1 [0190.880] wcscmp (_String1="VIEW.ICO", _String2="..") returned 1 [0190.880] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1db1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0190.880] wcscmp (_String1="VIEW.JS", _String2=".") returned 1 [0190.880] wcscmp (_String1="VIEW.JS", _String2="..") returned 1 [0190.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333fa8 [0190.880] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.880] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.880] wcscat (in: _Dest=0x333fa8, _Source="VIEW.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" [0190.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0190.881] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0190.881] wcscmp (_String1="ViewHeaderPreview.jpg", _String2=".") returned 1 [0190.881] wcscmp (_String1="ViewHeaderPreview.jpg", _String2="..") returned 1 [0190.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9a68 [0190.882] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3" [0190.882] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\" [0190.882] wcscat (in: _Dest=0x2c9a68, _Source="ViewHeaderPreview.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" [0190.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0190.883] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 0 [0191.672] FindClose (in: hFindFile=0x3e741b0 | out: hFindFile=0x3e741b0) returned 1 [0192.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0192.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6740) returned 1 [0192.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66e50) returned 1 Thread: id = 4529 os_tid = 0x15e0 [0173.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7cd0 [0173.700] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0173.700] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0173.700] wcscat (in: _Dest=0x2ff7cd0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*" [0173.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2418 [0173.700] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74170 [0177.296] wcscmp (_String1=".", _String2=".") returned 0 [0177.296] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92256ed0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.341] wcscmp (_String1="..", _String2=".") returned 1 [0177.341] wcscmp (_String1="..", _String2="..") returned 0 [0177.341] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0177.341] wcscmp (_String1="ADD.GIF", _String2=".") returned 1 [0177.342] wcscmp (_String1="ADD.GIF", _String2="..") returned 1 [0177.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3339a8 [0177.342] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.342] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.342] wcscat (in: _Dest=0x3339a8, _Source="ADD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" [0177.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0177.861] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0177.861] wcscmp (_String1="AddToViewArrow.jpg", _String2=".") returned 1 [0177.861] wcscmp (_String1="AddToViewArrow.jpg", _String2="..") returned 1 [0177.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e381e8 [0177.861] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.861] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.861] wcscat (in: _Dest=0x3e381e8, _Source="AddToViewArrow.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" [0177.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e381e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0177.862] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0177.862] wcscmp (_String1="AddToViewArrowMask.bmp", _String2=".") returned 1 [0177.863] wcscmp (_String1="AddToViewArrowMask.bmp", _String2="..") returned 1 [0177.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8f08 [0177.863] wcscpy (in: _Dest=0x2c8f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.863] wcscat (in: _Dest=0x2c8f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.863] wcscat (in: _Dest=0x2c8f08, _Source="AddToViewArrowMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" [0177.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0177.864] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0177.864] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0177.864] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0177.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85e50 [0177.864] wcscpy (in: _Dest=0x3d85e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.864] wcscat (in: _Dest=0x3d85e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.864] wcscat (in: _Dest=0x3d85e50, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" [0177.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0177.865] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0177.865] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0177.865] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0177.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e3a828 [0177.865] wcscpy (in: _Dest=0x3e3a828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.865] wcscat (in: _Dest=0x3e3a828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.865] wcscat (in: _Dest=0x3e3a828, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" [0177.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0177.866] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0177.866] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0177.866] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0177.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d86190 [0177.866] wcscpy (in: _Dest=0x3d86190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.866] wcscat (in: _Dest=0x3d86190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.866] wcscat (in: _Dest=0x3d86190, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" [0177.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0177.867] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e509e00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2e509e00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0177.867] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0177.867] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0177.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85cb0 [0177.867] wcscpy (in: _Dest=0x3d85cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.867] wcscat (in: _Dest=0x3d85cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.867] wcscat (in: _Dest=0x3d85cb0, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" [0177.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0177.868] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0177.868] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0177.868] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0177.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85f20 [0177.868] wcscpy (in: _Dest=0x3d85f20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.868] wcscat (in: _Dest=0x3d85f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.868] wcscat (in: _Dest=0x3d85f20, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" [0177.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0177.869] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c33d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0177.869] wcscmp (_String1="bg_FormsHomePage.gif", _String2=".") returned 1 [0177.869] wcscmp (_String1="bg_FormsHomePage.gif", _String2="..") returned 1 [0177.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e37540 [0177.869] wcscpy (in: _Dest=0x3e37540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.869] wcscat (in: _Dest=0x3e37540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.869] wcscat (in: _Dest=0x3e37540, _Source="bg_FormsHomePage.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" [0177.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0177.870] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0177.870] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2=".") returned 1 [0177.870] wcscmp (_String1="bg_FormsHomePageBlank.gif", _String2="..") returned 1 [0177.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4aa0 [0177.870] wcscpy (in: _Dest=0x3dc4aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.870] wcscat (in: _Dest=0x3dc4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.870] wcscat (in: _Dest=0x3dc4aa0, _Source="bg_FormsHomePageBlank.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" [0177.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0177.871] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1 [0177.871] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2=".") returned 1 [0177.871] wcscmp (_String1="bg_FormsHomePageSlice.gif", _String2="..") returned 1 [0177.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc3ed8 [0177.872] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.872] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.872] wcscat (in: _Dest=0x3dc3ed8, _Source="bg_FormsHomePageSlice.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" [0177.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0177.873] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0177.873] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0177.873] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0177.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85700 [0177.873] wcscpy (in: _Dest=0x3d85700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.873] wcscat (in: _Dest=0x3d85700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.873] wcscat (in: _Dest=0x3d85700, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" [0177.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148 [0177.874] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0177.874] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0177.874] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0177.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85080 [0177.874] wcscpy (in: _Dest=0x3d85080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.874] wcscat (in: _Dest=0x3d85080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.874] wcscat (in: _Dest=0x3d85080, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" [0177.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0177.875] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a02730, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0177.875] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0177.875] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0177.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e382c0 [0177.875] wcscpy (in: _Dest=0x3e382c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.875] wcscat (in: _Dest=0x3e382c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.875] wcscat (in: _Dest=0x3e382c0, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" [0177.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e382c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0177.876] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0177.876] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0177.876] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0177.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e38110 [0177.876] wcscpy (in: _Dest=0x3e38110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.876] wcscat (in: _Dest=0x3e38110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.876] wcscat (in: _Dest=0x3e38110, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" [0177.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0177.877] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c59ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0177.877] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0177.878] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0177.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85d80 [0177.878] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.878] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.878] wcscat (in: _Dest=0x3d85d80, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" [0177.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0177.879] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0177.879] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0177.879] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0177.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d858a0 [0177.879] wcscpy (in: _Dest=0x3d858a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.879] wcscat (in: _Dest=0x3d858a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.879] wcscat (in: _Dest=0x3d858a0, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" [0177.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d858a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0177.880] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0177.880] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0177.880] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0177.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e38a58 [0177.881] wcscpy (in: _Dest=0x3e38a58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.881] wcscat (in: _Dest=0x3e38a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.881] wcscat (in: _Dest=0x3e38a58, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" [0177.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0177.882] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0177.882] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0177.882] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0177.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e37cd8 [0177.882] wcscpy (in: _Dest=0x3e37cd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.882] wcscat (in: _Dest=0x3e37cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.882] wcscat (in: _Dest=0x3e37cd8, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" [0177.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0177.883] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f81cb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f81cb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0177.883] wcscmp (_String1="button_left.gif", _String2=".") returned 1 [0177.883] wcscmp (_String1="button_left.gif", _String2="..") returned 1 [0177.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d852f0 [0177.883] wcscpy (in: _Dest=0x3d852f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.883] wcscat (in: _Dest=0x3d852f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.883] wcscat (in: _Dest=0x3d852f0, _Source="button_left.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" [0177.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d852f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180 [0177.884] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0177.884] wcscmp (_String1="button_left_over.gif", _String2=".") returned 1 [0177.884] wcscmp (_String1="button_left_over.gif", _String2="..") returned 1 [0177.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e37030 [0177.885] wcscpy (in: _Dest=0x3e37030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.885] wcscat (in: _Dest=0x3e37030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.885] wcscat (in: _Dest=0x3e37030, _Source="button_left_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" [0177.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0177.886] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0177.886] wcscmp (_String1="button_mid.gif", _String2=".") returned 1 [0177.886] wcscmp (_String1="button_mid.gif", _String2="..") returned 1 [0177.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d86330 [0177.886] wcscpy (in: _Dest=0x3d86330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.886] wcscat (in: _Dest=0x3d86330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.886] wcscat (in: _Dest=0x3d86330, _Source="button_mid.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" [0177.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0177.887] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0177.887] wcscmp (_String1="button_mid_over.gif", _String2=".") returned 1 [0177.887] wcscmp (_String1="button_mid_over.gif", _String2="..") returned 1 [0177.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e16c18 [0177.887] wcscpy (in: _Dest=0x3e16c18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.887] wcscat (in: _Dest=0x3e16c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.887] wcscat (in: _Dest=0x3e16c18, _Source="button_mid_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" [0177.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e16c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0177.888] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1 [0177.888] wcscmp (_String1="button_right.gif", _String2=".") returned 1 [0177.888] wcscmp (_String1="button_right.gif", _String2="..") returned 1 [0177.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d86400 [0177.888] wcscpy (in: _Dest=0x3d86400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.888] wcscat (in: _Dest=0x3d86400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.888] wcscat (in: _Dest=0x3d86400, _Source="button_right.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" [0177.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0177.889] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0177.889] wcscmp (_String1="button_right_over.gif", _String2=".") returned 1 [0177.889] wcscmp (_String1="button_right_over.gif", _String2="..") returned 1 [0177.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c91a8 [0177.890] wcscpy (in: _Dest=0x2c91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.890] wcscat (in: _Dest=0x2c91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.890] wcscat (in: _Dest=0x2c91a8, _Source="button_right_over.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" [0177.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c [0177.891] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0177.891] wcscmp (_String1="CALENDAR.GIF", _String2=".") returned 1 [0177.891] wcscmp (_String1="CALENDAR.GIF", _String2="..") returned 1 [0177.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e3aa80 [0177.891] wcscpy (in: _Dest=0x3e3aa80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.891] wcscat (in: _Dest=0x3e3aa80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.891] wcscat (in: _Dest=0x3e3aa80, _Source="CALENDAR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" [0177.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3aa80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0177.991] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0177.991] wcscmp (_String1="DELETE.GIF", _String2=".") returned 1 [0177.991] wcscmp (_String1="DELETE.GIF", _String2="..") returned 1 [0177.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a760 [0177.991] wcscpy (in: _Dest=0x3e3a760, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0177.991] wcscat (in: _Dest=0x3e3a760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0177.991] wcscat (in: _Dest=0x3e3a760, _Source="DELETE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" [0178.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0178.203] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0178.203] wcscmp (_String1="ERROR.GIF", _String2=".") returned 1 [0178.203] wcscmp (_String1="ERROR.GIF", _String2="..") returned 1 [0178.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3e3a698 [0178.203] wcscpy (in: _Dest=0x3e3a698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0178.203] wcscat (in: _Dest=0x3e3a698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0178.203] wcscat (in: _Dest=0x3e3a698, _Source="ERROR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" [0178.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0178.205] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0178.205] wcscmp (_String1="FORM.ICO", _String2=".") returned 1 [0178.205] wcscmp (_String1="FORM.ICO", _String2="..") returned 1 [0178.205] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x135f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0178.205] wcscmp (_String1="FORM.JS", _String2=".") returned 1 [0178.205] wcscmp (_String1="FORM.JS", _String2="..") returned 1 [0178.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3339a8 [0178.205] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0178.205] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0178.205] wcscat (in: _Dest=0x3339a8, _Source="FORM.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" [0178.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0178.207] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0178.207] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0178.207] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0178.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e16b40 [0178.207] wcscpy (in: _Dest=0x3e16b40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0178.207] wcscat (in: _Dest=0x3e16b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0178.207] wcscat (in: _Dest=0x3e16b40, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" [0178.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e16b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0178.208] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0179.505] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0179.505] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0179.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9288 [0179.506] wcscpy (in: _Dest=0x2c9288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0179.506] wcscat (in: _Dest=0x2c9288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0179.506] wcscat (in: _Dest=0x2c9288, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" [0180.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0180.723] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1 [0180.723] wcscmp (_String1="FormsColorChart.html", _String2=".") returned 1 [0180.723] wcscmp (_String1="FormsColorChart.html", _String2="..") returned 1 [0180.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e37540 [0180.723] wcscpy (in: _Dest=0x3e37540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.723] wcscat (in: _Dest=0x3e37540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.723] wcscat (in: _Dest=0x3e37540, _Source="FormsColorChart.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" [0180.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0180.740] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x115a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1 [0180.740] wcscmp (_String1="FormsFormTemplate.html", _String2=".") returned 1 [0180.740] wcscmp (_String1="FormsFormTemplate.html", _String2="..") returned 1 [0180.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8f08 [0180.740] wcscpy (in: _Dest=0x2c8f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.740] wcscat (in: _Dest=0x2c8f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.740] wcscat (in: _Dest=0x2c8f08, _Source="FormsFormTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" [0180.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0180.741] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0180.742] wcscmp (_String1="FormsHomePage.html", _String2=".") returned 1 [0180.742] wcscmp (_String1="FormsHomePage.html", _String2="..") returned 1 [0180.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e382c0 [0180.742] wcscpy (in: _Dest=0x3e382c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.742] wcscat (in: _Dest=0x3e382c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.742] wcscat (in: _Dest=0x3e382c0, _Source="FormsHomePage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" [0180.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e382c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0180.754] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0180.754] wcscmp (_String1="FormsHomePageScript.js", _String2=".") returned 1 [0180.754] wcscmp (_String1="FormsHomePageScript.js", _String2="..") returned 1 [0180.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c91a8 [0180.754] wcscpy (in: _Dest=0x2c91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.754] wcscat (in: _Dest=0x2c91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.754] wcscat (in: _Dest=0x2c91a8, _Source="FormsHomePageScript.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" [0180.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0180.755] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0180.755] wcscmp (_String1="FormsHomePageStyle.css", _String2=".") returned 1 [0180.755] wcscmp (_String1="FormsHomePageStyle.css", _String2="..") returned 1 [0180.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8488 [0180.755] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.756] wcscat (in: _Dest=0x2c8488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.756] wcscat (in: _Dest=0x2c8488, _Source="FormsHomePageStyle.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" [0180.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0180.778] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1 [0180.778] wcscmp (_String1="FormsImageTemplate.html", _String2=".") returned 1 [0180.778] wcscmp (_String1="FormsImageTemplate.html", _String2="..") returned 1 [0180.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9528 [0180.778] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.778] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.778] wcscat (in: _Dest=0x2c9528, _Source="FormsImageTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" [0180.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0180.779] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1 [0180.779] wcscmp (_String1="FormsMacroTemplate.html", _String2=".") returned 1 [0180.779] wcscmp (_String1="FormsMacroTemplate.html", _String2="..") returned 1 [0180.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c96e8 [0180.779] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.779] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.779] wcscat (in: _Dest=0x2c96e8, _Source="FormsMacroTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" [0180.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c96e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0180.780] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x46a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0180.780] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0180.780] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0180.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc3ed8 [0180.780] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.780] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.780] wcscat (in: _Dest=0x3dc3ed8, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" [0180.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0180.782] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0180.782] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0180.782] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0180.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8fe8 [0180.782] wcscpy (in: _Dest=0x2c8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.782] wcscat (in: _Dest=0x2c8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.782] wcscat (in: _Dest=0x2c8fe8, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" [0180.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0180.783] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1 [0180.783] wcscmp (_String1="FormsStyles", _String2=".") returned 1 [0180.783] wcscmp (_String1="FormsStyles", _String2="..") returned 1 [0180.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3aa80 [0180.783] wcscpy (in: _Dest=0x3e3aa80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.783] wcscat (in: _Dest=0x3e3aa80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.783] wcscat (in: _Dest=0x3e3aa80, _Source="FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0180.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e3aa80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24 [0180.784] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0180.784] wcscmp (_String1="FormsVersion1Warning.htm", _String2=".") returned 1 [0180.784] wcscmp (_String1="FormsVersion1Warning.htm", _String2="..") returned 1 [0180.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9368 [0180.784] wcscpy (in: _Dest=0x2c9368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.785] wcscat (in: _Dest=0x2c9368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.785] wcscat (in: _Dest=0x2c9368, _Source="FormsVersion1Warning.htm" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" [0180.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0180.786] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0180.786] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0180.786] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0180.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4190 [0180.786] wcscpy (in: _Dest=0x3dc4190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.786] wcscat (in: _Dest=0x3dc4190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.786] wcscat (in: _Dest=0x3dc4190, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" [0180.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0180.787] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0180.787] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0180.787] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0180.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3dafcb8 [0180.787] wcscpy (in: _Dest=0x3dafcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.787] wcscat (in: _Dest=0x3dafcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.787] wcscat (in: _Dest=0x3dafcb8, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" [0180.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0180.788] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x164a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0180.788] wcscmp (_String1="FormsViewFrame.html", _String2=".") returned 1 [0180.788] wcscmp (_String1="FormsViewFrame.html", _String2="..") returned 1 [0180.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e38110 [0180.789] wcscpy (in: _Dest=0x3e38110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.789] wcscat (in: _Dest=0x3e38110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.789] wcscat (in: _Dest=0x3e38110, _Source="FormsViewFrame.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" [0180.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0180.790] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x884a3d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="FORMSV~3.HTM")) returned 1 [0180.790] wcscmp (_String1="FormsViewTemplate.html", _String2=".") returned 1 [0180.790] wcscmp (_String1="FormsViewTemplate.html", _String2="..") returned 1 [0180.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9448 [0180.790] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.790] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.790] wcscat (in: _Dest=0x2c9448, _Source="FormsViewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" [0180.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0180.791] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0180.791] wcscmp (_String1="FormToolImages.jpg", _String2=".") returned 1 [0180.791] wcscmp (_String1="FormToolImages.jpg", _String2="..") returned 1 [0180.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e38a58 [0180.791] wcscpy (in: _Dest=0x3e38a58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.791] wcscat (in: _Dest=0x3e38a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.791] wcscat (in: _Dest=0x3e38a58, _Source="FormToolImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" [0180.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e38a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0180.793] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b2f800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x30b2f800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2577, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1 [0180.793] wcscmp (_String1="form_edit.js", _String2=".") returned 1 [0180.793] wcscmp (_String1="form_edit.js", _String2="..") returned 1 [0180.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e3a760 [0180.793] wcscpy (in: _Dest=0x3e3a760, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.793] wcscat (in: _Dest=0x3e3a760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.793] wcscat (in: _Dest=0x3e3a760, _Source="form_edit.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" [0180.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0180.794] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0180.794] wcscmp (_String1="LAUNCH.GIF", _String2=".") returned 1 [0180.794] wcscmp (_String1="LAUNCH.GIF", _String2="..") returned 1 [0180.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a698 [0180.794] wcscpy (in: _Dest=0x3e3a698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.794] wcscat (in: _Dest=0x3e3a698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.794] wcscat (in: _Dest=0x3e3a698, _Source="LAUNCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" [0180.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0180.795] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa52f, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1 [0180.795] wcscmp (_String1="macroprogress.gif", _String2=".") returned 1 [0180.795] wcscmp (_String1="macroprogress.gif", _String2="..") returned 1 [0180.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e37cd8 [0180.795] wcscpy (in: _Dest=0x3e37cd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.795] wcscat (in: _Dest=0x3e37cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.795] wcscat (in: _Dest=0x3e37cd8, _Source="macroprogress.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" [0180.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0180.797] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903650d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1 [0180.797] wcscmp (_String1="PublicFunctions.js", _String2=".") returned 1 [0180.797] wcscmp (_String1="PublicFunctions.js", _String2="..") returned 1 [0180.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e37030 [0180.797] wcscpy (in: _Dest=0x3e37030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.797] wcscat (in: _Dest=0x3e37030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.797] wcscat (in: _Dest=0x3e37030, _Source="PublicFunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" [0180.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0180.798] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1 [0180.798] wcscmp (_String1="rtf_alignleft.gif", _String2=".") returned 1 [0180.798] wcscmp (_String1="rtf_alignleft.gif", _String2="..") returned 1 [0180.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e381e8 [0180.798] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.798] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.798] wcscat (in: _Dest=0x3e381e8, _Source="rtf_alignleft.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" [0180.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e381e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0180.799] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1 [0180.799] wcscmp (_String1="rtf_alignright.gif", _String2=".") returned 1 [0180.799] wcscmp (_String1="rtf_alignright.gif", _String2="..") returned 1 [0180.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e16c18 [0180.799] wcscpy (in: _Dest=0x3e16c18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.799] wcscat (in: _Dest=0x3e16c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.799] wcscat (in: _Dest=0x3e16c18, _Source="rtf_alignright.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" [0180.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e16c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0180.800] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0180.800] wcscmp (_String1="RTF_BOLD.GIF", _String2=".") returned 1 [0180.800] wcscmp (_String1="RTF_BOLD.GIF", _String2="..") returned 1 [0180.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e3a5d0 [0180.800] wcscpy (in: _Dest=0x3e3a5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.801] wcscat (in: _Dest=0x3e3a5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.801] wcscat (in: _Dest=0x3e3a5d0, _Source="RTF_BOLD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" [0180.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0180.802] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1 [0180.802] wcscmp (_String1="rtf_bullets.gif", _String2=".") returned 1 [0180.802] wcscmp (_String1="rtf_bullets.gif", _String2="..") returned 1 [0180.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85700 [0180.802] wcscpy (in: _Dest=0x3d85700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.802] wcscat (in: _Dest=0x3d85700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.802] wcscat (in: _Dest=0x3d85700, _Source="rtf_bullets.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" [0180.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x188c [0180.803] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1 [0180.803] wcscmp (_String1="rtf_center.gif", _String2=".") returned 1 [0180.803] wcscmp (_String1="rtf_center.gif", _String2="..") returned 1 [0180.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85080 [0180.803] wcscpy (in: _Dest=0x3d85080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.803] wcscat (in: _Dest=0x3d85080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.803] wcscat (in: _Dest=0x3d85080, _Source="rtf_center.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" [0180.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974 [0180.804] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0180.804] wcscmp (_String1="rtf_choosecolor.gif", _String2=".") returned 1 [0180.804] wcscmp (_String1="rtf_choosecolor.gif", _String2="..") returned 1 [0180.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e16b40 [0180.804] wcscpy (in: _Dest=0x3e16b40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.804] wcscat (in: _Dest=0x3e16b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.805] wcscat (in: _Dest=0x3e16b40, _Source="rtf_choosecolor.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" [0180.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e16b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0180.806] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~2.GIF")) returned 1 [0180.806] wcscmp (_String1="rtf_choosefont.gif", _String2=".") returned 1 [0180.806] wcscmp (_String1="rtf_choosefont.gif", _String2="..") returned 1 [0180.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e17f80 [0180.806] wcscpy (in: _Dest=0x3e17f80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.806] wcscat (in: _Dest=0x3e17f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.806] wcscat (in: _Dest=0x3e17f80, _Source="rtf_choosefont.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" [0180.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e17f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0180.807] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1 [0180.807] wcscmp (_String1="rtf_decreaseindent.gif", _String2=".") returned 1 [0180.807] wcscmp (_String1="rtf_decreaseindent.gif", _String2="..") returned 1 [0180.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9608 [0180.808] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.808] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.808] wcscat (in: _Dest=0x2c9608, _Source="rtf_decreaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" [0180.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0180.809] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="RTF_HY~1.GIF")) returned 1 [0180.809] wcscmp (_String1="rtf_hyperlink.gif", _String2=".") returned 1 [0180.809] wcscmp (_String1="rtf_hyperlink.gif", _String2="..") returned 1 [0180.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e17200 [0180.809] wcscpy (in: _Dest=0x3e17200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0180.809] wcscat (in: _Dest=0x3e17200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0180.809] wcscat (in: _Dest=0x3e17200, _Source="rtf_hyperlink.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" [0180.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e17200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0181.121] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1 [0181.121] wcscmp (_String1="rtf_increaseindent.gif", _String2=".") returned 1 [0181.121] wcscmp (_String1="rtf_increaseindent.gif", _String2="..") returned 1 [0181.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9288 [0181.121] wcscpy (in: _Dest=0x2c9288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.121] wcscat (in: _Dest=0x2c9288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.121] wcscat (in: _Dest=0x2c9288, _Source="rtf_increaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" [0181.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0181.535] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3c6000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3a3c6000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1 [0181.535] wcscmp (_String1="rtf_italic.gif", _String2=".") returned 1 [0181.535] wcscmp (_String1="rtf_italic.gif", _String2="..") returned 1 [0181.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d858a0 [0181.535] wcscpy (in: _Dest=0x3d858a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.535] wcscat (in: _Dest=0x3d858a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.535] wcscat (in: _Dest=0x3d858a0, _Source="rtf_italic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" [0181.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d858a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0181.536] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1 [0181.536] wcscmp (_String1="rtf_justify.gif", _String2=".") returned 1 [0181.536] wcscmp (_String1="rtf_justify.gif", _String2="..") returned 1 [0181.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d86330 [0181.537] wcscpy (in: _Dest=0x3d86330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.537] wcscat (in: _Dest=0x3d86330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.537] wcscat (in: _Dest=0x3d86330, _Source="rtf_justify.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" [0181.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0181.538] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1 [0181.538] wcscmp (_String1="rtf_pressed.gif", _String2=".") returned 1 [0181.538] wcscmp (_String1="rtf_pressed.gif", _String2="..") returned 1 [0181.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d86400 [0181.538] wcscpy (in: _Dest=0x3d86400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.538] wcscat (in: _Dest=0x3d86400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.538] wcscat (in: _Dest=0x3d86400, _Source="rtf_pressed.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" [0181.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0181.539] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="RTF_SP~1.GIF")) returned 1 [0181.539] wcscmp (_String1="rtf_spellcheck.gif", _String2=".") returned 1 [0181.539] wcscmp (_String1="rtf_spellcheck.gif", _String2="..") returned 1 [0181.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68a80 [0181.539] wcscpy (in: _Dest=0x3e68a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.539] wcscat (in: _Dest=0x3e68a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.539] wcscat (in: _Dest=0x3e68a80, _Source="rtf_spellcheck.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" [0181.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0181.541] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1 [0181.541] wcscmp (_String1="rtf_underline.gif", _String2=".") returned 1 [0181.541] wcscmp (_String1="rtf_underline.gif", _String2="..") returned 1 [0181.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68c30 [0181.541] wcscpy (in: _Dest=0x3e68c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.541] wcscat (in: _Dest=0x3e68c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.541] wcscat (in: _Dest=0x3e68c30, _Source="rtf_underline.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" [0181.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0181.542] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0181.542] wcscmp (_String1="SAVE.GIF", _String2=".") returned 1 [0181.542] wcscmp (_String1="SAVE.GIF", _String2="..") returned 1 [0181.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e66cd8 [0181.542] wcscpy (in: _Dest=0x3e66cd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.542] wcscat (in: _Dest=0x3e66cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.542] wcscat (in: _Dest=0x3e66cd8, _Source="SAVE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" [0181.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0181.543] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14307, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0181.543] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0181.543] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0181.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56ba0 [0181.543] wcscpy (in: _Dest=0x3d56ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.543] wcscat (in: _Dest=0x3d56ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.543] wcscat (in: _Dest=0x3d56ba0, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" [0181.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0181.544] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xca5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0181.544] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0181.544] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0181.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e68de0 [0181.545] wcscpy (in: _Dest=0x3e68de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.545] wcscat (in: _Dest=0x3e68de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.545] wcscat (in: _Dest=0x3e68de0, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" [0181.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00 [0181.546] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x64b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0181.546] wcscmp (_String1="validation.js", _String2=".") returned 1 [0181.546] wcscmp (_String1="validation.js", _String2="..") returned 1 [0181.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85e50 [0181.547] wcscpy (in: _Dest=0x3d85e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.547] wcscat (in: _Dest=0x3d85e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.547] wcscat (in: _Dest=0x3d85e50, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" [0181.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0181.552] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0181.552] wcscmp (_String1="VIEW.ICO", _String2=".") returned 1 [0181.552] wcscmp (_String1="VIEW.ICO", _String2="..") returned 1 [0181.552] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92256ed0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2095, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0181.552] wcscmp (_String1="VIEW.JS", _String2=".") returned 1 [0181.552] wcscmp (_String1="VIEW.JS", _String2="..") returned 1 [0181.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e65c58 [0181.552] wcscpy (in: _Dest=0x3e65c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.552] wcscat (in: _Dest=0x3e65c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.552] wcscat (in: _Dest=0x3e65c58, _Source="VIEW.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" [0181.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e65c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0181.553] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0181.553] wcscmp (_String1="ViewHeaderPreview.jpg", _String2=".") returned 1 [0181.553] wcscmp (_String1="ViewHeaderPreview.jpg", _String2="..") returned 1 [0181.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8e28 [0181.553] wcscpy (in: _Dest=0x2c8e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4" [0181.553] wcscat (in: _Dest=0x2c8e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\" [0181.554] wcscat (in: _Dest=0x2c8e28, _Source="ViewHeaderPreview.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" [0181.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0181.554] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851e8870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 0 [0182.465] FindClose (in: hFindFile=0x3e74170 | out: hFindFile=0x3e74170) returned 1 [0184.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2418) returned 1 [0184.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 [0184.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66f00) returned 1 Thread: id = 4530 os_tid = 0x15e4 [0173.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6180 [0173.701] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0173.701] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0173.701] wcscat (in: _Dest=0x2ff6180, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*" [0173.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0c08 [0173.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9220ac10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73470 [0179.924] wcscmp (_String1=".", _String2=".") returned 0 [0179.924] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76dfcdf0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9220ac10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.661] wcscmp (_String1="..", _String2=".") returned 1 [0180.661] wcscmp (_String1="..", _String2="..") returned 0 [0180.661] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0180.661] wcscmp (_String1="ADD.GIF", _String2=".") returned 1 [0180.661] wcscmp (_String1="ADD.GIF", _String2="..") returned 1 [0180.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3339a8 [0180.661] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0180.662] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0180.662] wcscat (in: _Dest=0x3339a8, _Source="ADD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" [0181.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0181.556] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6d8d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b6d8d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0181.556] wcscmp (_String1="attention.gif", _String2=".") returned 1 [0181.556] wcscmp (_String1="attention.gif", _String2="..") returned 1 [0181.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d86190 [0181.556] wcscpy (in: _Dest=0x3d86190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.556] wcscat (in: _Dest=0x3d86190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.556] wcscat (in: _Dest=0x3d86190, _Source="attention.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" [0181.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0181.557] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9eba00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c9eba00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0181.557] wcscmp (_String1="CALENDAR.GIF", _String2=".") returned 1 [0181.557] wcscmp (_String1="CALENDAR.GIF", _String2="..") returned 1 [0181.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57500 [0181.557] wcscpy (in: _Dest=0x3d57500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.557] wcscat (in: _Dest=0x3d57500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.557] wcscat (in: _Dest=0x3d57500, _Source="CALENDAR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" [0181.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0181.558] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9eba00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c9eba00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0181.558] wcscmp (_String1="DELETE.GIF", _String2=".") returned 1 [0181.558] wcscmp (_String1="DELETE.GIF", _String2="..") returned 1 [0181.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d56628 [0181.559] wcscpy (in: _Dest=0x3d56628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.559] wcscat (in: _Dest=0x3d56628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.559] wcscat (in: _Dest=0x3d56628, _Source="DELETE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" [0181.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb8 [0181.560] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0181.560] wcscmp (_String1="ERROR.GIF", _String2=".") returned 1 [0181.560] wcscmp (_String1="ERROR.GIF", _String2="..") returned 1 [0181.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57438 [0181.560] wcscpy (in: _Dest=0x3d57438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.560] wcscat (in: _Dest=0x3d57438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.560] wcscat (in: _Dest=0x3d57438, _Source="ERROR.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" [0181.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0181.561] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18a400, ftCreationTime.dwHighDateTime=0x1ca5e25, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd18a400, ftLastWriteTime.dwHighDateTime=0x1ca5e25, nFileSizeHigh=0x0, nFileSizeLow=0x14484, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0181.561] wcscmp (_String1="FORM.JS", _String2=".") returned 1 [0181.561] wcscmp (_String1="FORM.JS", _String2="..") returned 1 [0181.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3e66798 [0181.561] wcscpy (in: _Dest=0x3e66798, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.561] wcscat (in: _Dest=0x3e66798, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.561] wcscat (in: _Dest=0x3e66798, _Source="FORM.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" [0181.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e66798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0181.562] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0181.562] wcscmp (_String1="FormsBlankPage.html", _String2=".") returned 1 [0181.562] wcscmp (_String1="FormsBlankPage.html", _String2="..") returned 1 [0181.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e688d0 [0181.562] wcscpy (in: _Dest=0x3e688d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.562] wcscat (in: _Dest=0x3e688d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.562] wcscat (in: _Dest=0x3e688d0, _Source="FormsBlankPage.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" [0181.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e688d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0181.563] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x829, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0181.563] wcscmp (_String1="FormsBrowserUpgrade.html", _String2=".") returned 1 [0181.563] wcscmp (_String1="FormsBrowserUpgrade.html", _String2="..") returned 1 [0181.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8aa8 [0181.564] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.564] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.564] wcscat (in: _Dest=0x2c8aa8, _Source="FormsBrowserUpgrade.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" [0181.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0181.565] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1 [0181.565] wcscmp (_String1="FormsColorChart.html", _String2=".") returned 1 [0181.565] wcscmp (_String1="FormsColorChart.html", _String2="..") returned 1 [0181.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e689a8 [0181.565] wcscpy (in: _Dest=0x3e689a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.565] wcscat (in: _Dest=0x3e689a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.565] wcscat (in: _Dest=0x3e689a8, _Source="FormsColorChart.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" [0181.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e689a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0181.566] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x13bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~2.HTM")) returned 1 [0181.566] wcscmp (_String1="FormsFormTemplate.html", _String2=".") returned 1 [0181.566] wcscmp (_String1="FormsFormTemplate.html", _String2="..") returned 1 [0181.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8728 [0181.566] wcscpy (in: _Dest=0x2c8728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.566] wcscat (in: _Dest=0x2c8728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.566] wcscat (in: _Dest=0x2c8728, _Source="FormsFormTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" [0181.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0181.567] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff336900, ftCreationTime.dwHighDateTime=0x1c7d367, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff336900, ftLastWriteTime.dwHighDateTime=0x1c7d367, nFileSizeHigh=0x0, nFileSizeLow=0x13c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplateRTL.html", cAlternateFileName="FORMSF~1.HTM")) returned 1 [0181.567] wcscmp (_String1="FormsFormTemplateRTL.html", _String2=".") returned 1 [0181.567] wcscmp (_String1="FormsFormTemplateRTL.html", _String2="..") returned 1 [0181.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4700 [0181.567] wcscpy (in: _Dest=0x3dc4700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.567] wcscat (in: _Dest=0x3dc4700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.567] wcscat (in: _Dest=0x3dc4700, _Source="FormsFormTemplateRTL.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" [0181.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0181.568] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1 [0181.568] wcscmp (_String1="FormsImageTemplate.html", _String2=".") returned 1 [0181.568] wcscmp (_String1="FormsImageTemplate.html", _String2="..") returned 1 [0181.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8b88 [0181.569] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.569] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.569] wcscat (in: _Dest=0x2c8b88, _Source="FormsImageTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" [0181.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0181.576] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1 [0181.576] wcscmp (_String1="FormsMacroTemplate.html", _String2=".") returned 1 [0181.576] wcscmp (_String1="FormsMacroTemplate.html", _String2="..") returned 1 [0181.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c97c8 [0181.577] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.577] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.577] wcscat (in: _Dest=0x2c97c8, _Source="FormsMacroTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" [0181.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4 [0181.578] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x46ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~3.HTM")) returned 1 [0181.578] wcscmp (_String1="FormsPreviewTemplate.html", _String2=".") returned 1 [0181.578] wcscmp (_String1="FormsPreviewTemplate.html", _String2="..") returned 1 [0181.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc47e8 [0181.578] wcscpy (in: _Dest=0x3dc47e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.578] wcscat (in: _Dest=0x3dc47e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.578] wcscat (in: _Dest=0x3dc47e8, _Source="FormsPreviewTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" [0181.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc47e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0181.579] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b200, ftCreationTime.dwHighDateTime=0x1c7d368, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb2b200, ftLastWriteTime.dwHighDateTime=0x1c7d368, nFileSizeHigh=0x0, nFileSizeLow=0x4709, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplateRTL.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0181.579] wcscmp (_String1="FormsPreviewTemplateRTL.html", _String2=".") returned 1 [0181.579] wcscmp (_String1="FormsPreviewTemplateRTL.html", _String2="..") returned 1 [0181.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3fc0 [0181.579] wcscpy (in: _Dest=0x3dc3fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.579] wcscat (in: _Dest=0x3dc3fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.579] wcscat (in: _Dest=0x3dc3fc0, _Source="FormsPreviewTemplateRTL.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" [0181.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0181.580] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~4.HTM")) returned 1 [0181.581] wcscmp (_String1="FormsPrintTemplate.html", _String2=".") returned 1 [0181.581] wcscmp (_String1="FormsPrintTemplate.html", _String2="..") returned 1 [0181.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c98a8 [0181.581] wcscpy (in: _Dest=0x2c98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.581] wcscat (in: _Dest=0x2c98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.581] wcscat (in: _Dest=0x2c98a8, _Source="FormsPrintTemplate.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" [0181.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0181.582] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f632800, ftCreationTime.dwHighDateTime=0x1c7d368, ftLastAccessTime.dwLowDateTime=0x77e0e270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f632800, ftLastWriteTime.dwHighDateTime=0x1c7d368, nFileSizeHigh=0x0, nFileSizeLow=0x5c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplateRTL.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0181.582] wcscmp (_String1="FormsPrintTemplateRTL.html", _String2=".") returned 1 [0181.582] wcscmp (_String1="FormsPrintTemplateRTL.html", _String2="..") returned 1 [0181.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4d58 [0181.582] wcscpy (in: _Dest=0x3dc4d58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.582] wcscat (in: _Dest=0x3dc4d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.582] wcscat (in: _Dest=0x3dc4d58, _Source="FormsPrintTemplateRTL.html" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" [0181.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc [0181.591] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46282200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8847dbf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46282200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0181.591] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2=".") returned 1 [0181.591] wcscmp (_String1="FormsViewAttachmentIcons.jpg", _String2="..") returned 1 [0181.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4e40 [0181.591] wcscpy (in: _Dest=0x3dc4e40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.591] wcscat (in: _Dest=0x3dc4e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.591] wcscat (in: _Dest=0x3dc4e40, _Source="FormsViewAttachmentIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" [0181.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0181.592] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77e343d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0181.592] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2=".") returned 1 [0181.592] wcscmp (_String1="FormsViewAttachmentIconsMask.bmp", _String2="..") returned 1 [0181.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0ca8 [0181.593] wcscpy (in: _Dest=0x3db0ca8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.593] wcscat (in: _Dest=0x3db0ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.593] wcscat (in: _Dest=0x3db0ca8, _Source="FormsViewAttachmentIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" [0181.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4 [0181.594] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcfe700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d75cf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3dcfe700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x26b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1 [0181.594] wcscmp (_String1="form_edit.js", _String2=".") returned 1 [0181.594] wcscmp (_String1="form_edit.js", _String2="..") returned 1 [0181.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d578e8 [0181.594] wcscpy (in: _Dest=0x3d578e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.594] wcscat (in: _Dest=0x3d578e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.594] wcscat (in: _Dest=0x3d578e8, _Source="form_edit.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" [0181.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d578e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0181.595] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e6b9b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14316, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathWelcomeImage.jpg", cAlternateFileName="INFOPA~1.JPG")) returned 1 [0181.595] wcscmp (_String1="InfoPathWelcomeImage.jpg", _String2=".") returned 1 [0181.595] wcscmp (_String1="InfoPathWelcomeImage.jpg", _String2="..") returned 1 [0181.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c9988 [0181.595] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.595] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.596] wcscat (in: _Dest=0x2c9988, _Source="InfoPathWelcomeImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" [0181.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0181.596] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0181.596] wcscmp (_String1="LAUNCH.GIF", _String2=".") returned 1 [0181.596] wcscmp (_String1="LAUNCH.GIF", _String2="..") returned 1 [0181.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d566f0 [0181.597] wcscpy (in: _Dest=0x3d566f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.597] wcscat (in: _Dest=0x3d566f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.597] wcscat (in: _Dest=0x3d566f0, _Source="LAUNCH.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" [0181.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d566f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0181.598] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c42a00, ftCreationTime.dwHighDateTime=0x1c9ff01, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd6c42a00, ftLastWriteTime.dwHighDateTime=0x1c9ff01, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1 [0181.598] wcscmp (_String1="macroprogress.gif", _String2=".") returned 1 [0181.598] wcscmp (_String1="macroprogress.gif", _String2="..") returned 1 [0181.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e67490 [0181.598] wcscpy (in: _Dest=0x3e67490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.598] wcscat (in: _Dest=0x3e67490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.598] wcscat (in: _Dest=0x3e67490, _Source="macroprogress.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" [0181.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2270 [0181.599] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903650d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x275e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1 [0181.599] wcscmp (_String1="PublicFunctions.js", _String2=".") returned 1 [0181.599] wcscmp (_String1="PublicFunctions.js", _String2="..") returned 1 [0181.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e67568 [0181.599] wcscpy (in: _Dest=0x3e67568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.599] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.599] wcscat (in: _Dest=0x3e67568, _Source="PublicFunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" [0181.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e67568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0181.600] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1 [0181.600] wcscmp (_String1="rtf_alignleft.gif", _String2=".") returned 1 [0181.600] wcscmp (_String1="rtf_alignleft.gif", _String2="..") returned 1 [0181.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68d08 [0181.601] wcscpy (in: _Dest=0x3e68d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.601] wcscat (in: _Dest=0x3e68d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.601] wcscat (in: _Dest=0x3e68d08, _Source="rtf_alignleft.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" [0181.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0181.601] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1 [0181.602] wcscmp (_String1="rtf_alignright.gif", _String2=".") returned 1 [0181.602] wcscmp (_String1="rtf_alignright.gif", _String2="..") returned 1 [0181.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x2e6650 [0181.602] wcscpy (in: _Dest=0x2e6650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.602] wcscat (in: _Dest=0x2e6650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.602] wcscat (in: _Dest=0x2e6650, _Source="rtf_alignright.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" [0181.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2e6650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0181.603] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1 [0181.603] wcscmp (_String1="rtf_bullets.gif", _String2=".") returned 1 [0181.603] wcscmp (_String1="rtf_bullets.gif", _String2="..") returned 1 [0181.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85cb0 [0181.603] wcscpy (in: _Dest=0x3d85cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.603] wcscat (in: _Dest=0x3d85cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.603] wcscat (in: _Dest=0x3d85cb0, _Source="rtf_bullets.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" [0181.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0181.604] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1 [0181.604] wcscmp (_String1="rtf_center.gif", _String2=".") returned 1 [0181.604] wcscmp (_String1="rtf_center.gif", _String2="..") returned 1 [0181.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d852f0 [0181.604] wcscpy (in: _Dest=0x3d852f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.604] wcscat (in: _Dest=0x3d852f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.604] wcscat (in: _Dest=0x3d852f0, _Source="rtf_center.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" [0181.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d852f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0181.605] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5669c00, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5669c00, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0181.605] wcscmp (_String1="rtf_choosecolor.gif", _String2=".") returned 1 [0181.605] wcscmp (_String1="rtf_choosecolor.gif", _String2="..") returned 1 [0181.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x2e5648 [0181.606] wcscpy (in: _Dest=0x2e5648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.606] wcscat (in: _Dest=0x2e5648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.606] wcscat (in: _Dest=0x2e5648, _Source="rtf_choosecolor.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" [0181.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2e5648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0181.607] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47594f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x47594f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1 [0181.607] wcscmp (_String1="rtf_decreaseindent.gif", _String2=".") returned 1 [0181.607] wcscmp (_String1="rtf_decreaseindent.gif", _String2="..") returned 1 [0181.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9a68 [0181.607] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.607] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.607] wcscat (in: _Dest=0x2c9a68, _Source="rtf_decreaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" [0181.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0181.608] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="RTF_HY~1.GIF")) returned 1 [0181.608] wcscmp (_String1="rtf_hyperlink.gif", _String2=".") returned 1 [0181.608] wcscmp (_String1="rtf_hyperlink.gif", _String2="..") returned 1 [0181.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x2e5b58 [0181.609] wcscpy (in: _Dest=0x2e5b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.609] wcscat (in: _Dest=0x2e5b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.609] wcscat (in: _Dest=0x2e5b58, _Source="rtf_hyperlink.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" [0181.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2e5b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04 [0181.610] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90449910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1 [0181.610] wcscmp (_String1="rtf_increaseindent.gif", _String2=".") returned 1 [0181.610] wcscmp (_String1="rtf_increaseindent.gif", _String2="..") returned 1 [0181.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7a64090 [0181.610] wcscpy (in: _Dest=0x7a64090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.610] wcscat (in: _Dest=0x7a64090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.610] wcscat (in: _Dest=0x7a64090, _Source="rtf_increaseindent.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" [0181.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0181.611] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9046fa70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1 [0181.611] wcscmp (_String1="rtf_justify.gif", _String2=".") returned 1 [0181.611] wcscmp (_String1="rtf_justify.gif", _String2="..") returned 1 [0181.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d85150 [0181.611] wcscpy (in: _Dest=0x3d85150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.611] wcscat (in: _Dest=0x3d85150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.611] wcscat (in: _Dest=0x3d85150, _Source="rtf_justify.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" [0181.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0181.613] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x824d47d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1 [0181.613] wcscmp (_String1="rtf_pressed.gif", _String2=".") returned 1 [0181.613] wcscmp (_String1="rtf_pressed.gif", _String2="..") returned 1 [0181.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d853c0 [0181.613] wcscpy (in: _Dest=0x3d853c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.613] wcscat (in: _Dest=0x3d853c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.613] wcscat (in: _Dest=0x3d853c0, _Source="rtf_pressed.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" [0181.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d853c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0181.614] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedee9600, ftCreationTime.dwHighDateTime=0x1ca039f, ftLastAccessTime.dwLowDateTime=0x824fa930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xedee9600, ftLastWriteTime.dwHighDateTime=0x1ca039f, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0181.614] wcscmp (_String1="SAVE.GIF", _String2=".") returned 1 [0181.614] wcscmp (_String1="SAVE.GIF", _String2="..") returned 1 [0181.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3e666d8 [0181.614] wcscpy (in: _Dest=0x3e666d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.614] wcscat (in: _Dest=0x3e666d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.615] wcscat (in: _Dest=0x3e666d8, _Source="SAVE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" [0181.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e666d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0181.623] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca87b00, ftCreationTime.dwHighDateTime=0x1ca40ef, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbca87b00, ftLastWriteTime.dwHighDateTime=0x1ca40ef, nFileSizeHigh=0x0, nFileSizeLow=0x15162, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0181.623] wcscmp (_String1="SUBMIT.JS", _String2=".") returned 1 [0181.623] wcscmp (_String1="SUBMIT.JS", _String2="..") returned 1 [0181.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d575c8 [0181.624] wcscpy (in: _Dest=0x3d575c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.624] wcscat (in: _Dest=0x3d575c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.624] wcscat (in: _Dest=0x3d575c8, _Source="SUBMIT.JS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" [0181.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d575c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0181.625] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x851502f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xefe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0181.625] wcscmp (_String1="utilityfunctions.js", _String2=".") returned 1 [0181.625] wcscmp (_String1="utilityfunctions.js", _String2="..") returned 1 [0181.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x2e6800 [0181.625] wcscpy (in: _Dest=0x2e6800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.625] wcscat (in: _Dest=0x2e6800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.625] wcscat (in: _Dest=0x2e6800, _Source="utilityfunctions.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" [0181.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2e6800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0181.626] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e91100, ftCreationTime.dwHighDateTime=0x1ca03b6, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8e91100, ftLastWriteTime.dwHighDateTime=0x1ca03b6, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0181.627] wcscmp (_String1="validation.js", _String2=".") returned 1 [0181.627] wcscmp (_String1="validation.js", _String2="..") returned 1 [0181.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85970 [0181.627] wcscpy (in: _Dest=0x3d85970, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5" [0181.627] wcscat (in: _Dest=0x3d85970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\" [0181.627] wcscat (in: _Dest=0x3d85970, _Source="validation.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" [0181.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0181.628] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e91100, ftCreationTime.dwHighDateTime=0x1ca03b6, ftLastAccessTime.dwLowDateTime=0x9220ac10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe8e91100, ftLastWriteTime.dwHighDateTime=0x1ca03b6, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 0 [0181.628] FindClose (in: hFindFile=0x3e73470 | out: hFindFile=0x3e73470) returned 1 [0181.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0c08) returned 1 [0181.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 [0181.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66fb0) returned 1 Thread: id = 4531 os_tid = 0x15e8 [0173.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56ba0 [0173.702] wcscpy (in: _Dest=0x3d56ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0173.702] wcscat (in: _Dest=0x3d56ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0173.702] wcscat (in: _Dest=0x3d56ba0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*" [0173.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb10d8 [0173.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f2d8f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74130 [0179.924] wcscmp (_String1=".", _String2=".") returned 0 [0179.925] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f2d8f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92681550, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.662] wcscmp (_String1="..", _String2=".") returned 1 [0180.662] wcscmp (_String1="..", _String2="..") returned 0 [0180.662] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488a7c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x488a7c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x140b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIcon.jpg", cAlternateFileName="BRIEFC~1.JPG")) returned 1 [0180.662] wcscmp (_String1="BriefcaseIcon.jpg", _String2=".") returned 1 [0180.662] wcscmp (_String1="BriefcaseIcon.jpg", _String2="..") returned 1 [0180.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4aa0 [0180.662] wcscpy (in: _Dest=0x3dc4aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0180.662] wcscat (in: _Dest=0x3dc4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0180.663] wcscat (in: _Dest=0x3dc4aa0, _Source="BriefcaseIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" [0181.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0181.498] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIconMask.bmp", cAlternateFileName="BRIEFC~1.BMP")) returned 1 [0181.498] wcscmp (_String1="BriefcaseIconMask.bmp", _String2=".") returned 1 [0181.498] wcscmp (_String1="BriefcaseIconMask.bmp", _String2="..") returned 1 [0181.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0ac8 [0181.498] wcscpy (in: _Dest=0x3db0ac8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.498] wcscat (in: _Dest=0x3db0ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.498] wcscat (in: _Dest=0x3db0ac8, _Source="BriefcaseIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" [0181.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8 [0181.499] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIcons.jpg", cAlternateFileName="CIRCLE~1.JPG")) returned 1 [0181.499] wcscmp (_String1="CircleIcons.jpg", _String2=".") returned 1 [0181.500] wcscmp (_String1="CircleIcons.jpg", _String2="..") returned 1 [0181.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8568 [0181.500] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.500] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.500] wcscat (in: _Dest=0x2c8568, _Source="CircleIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" [0181.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0181.501] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f2d8f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x114c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIconsMask.bmp", cAlternateFileName="CIRCLE~1.BMP")) returned 1 [0181.501] wcscmp (_String1="CircleIconsMask.bmp", _String2=".") returned 1 [0181.501] wcscmp (_String1="CircleIconsMask.bmp", _String2="..") returned 1 [0181.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc3d08 [0181.501] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.501] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.501] wcscat (in: _Dest=0x3dc3d08, _Source="CircleIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" [0181.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0181.502] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d18e430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x26ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIcon.jpg", cAlternateFileName="MEETIN~1.JPG")) returned 1 [0181.502] wcscmp (_String1="MeetingIcon.jpg", _String2=".") returned 1 [0181.502] wcscmp (_String1="MeetingIcon.jpg", _String2="..") returned 1 [0181.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c90c8 [0181.502] wcscpy (in: _Dest=0x2c90c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.502] wcscat (in: _Dest=0x2c90c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.503] wcscat (in: _Dest=0x2c90c8, _Source="MeetingIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" [0181.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c90c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0181.504] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d18e430, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIconMask.bmp", cAlternateFileName="MEETIN~1.BMP")) returned 1 [0181.504] wcscmp (_String1="MeetingIconMask.bmp", _String2=".") returned 1 [0181.504] wcscmp (_String1="MeetingIconMask.bmp", _String2="..") returned 1 [0181.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4c70 [0181.504] wcscpy (in: _Dest=0x3dc4c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.504] wcscat (in: _Dest=0x3dc4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.504] wcscat (in: _Dest=0x3dc4c70, _Source="MeetingIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" [0181.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0181.505] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x19e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIcons.jpg", cAlternateFileName="PROJEC~1.JPG")) returned 1 [0181.505] wcscmp (_String1="ProjectStatusIcons.jpg", _String2=".") returned 1 [0181.505] wcscmp (_String1="ProjectStatusIcons.jpg", _String2="..") returned 1 [0181.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db0e88 [0181.505] wcscpy (in: _Dest=0x3db0e88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.505] wcscat (in: _Dest=0x3db0e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.505] wcscat (in: _Dest=0x3db0e88, _Source="ProjectStatusIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" [0181.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0181.506] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIconsMask.bmp", cAlternateFileName="PROJEC~2.BMP")) returned 1 [0181.506] wcscmp (_String1="ProjectStatusIconsMask.bmp", _String2=".") returned 1 [0181.507] wcscmp (_String1="ProjectStatusIconsMask.bmp", _String2="..") returned 1 [0181.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae2f0 [0181.507] wcscpy (in: _Dest=0x3dae2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.507] wcscat (in: _Dest=0x3dae2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.507] wcscat (in: _Dest=0x3dae2f0, _Source="ProjectStatusIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" [0181.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0181.508] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIcon.jpg", cAlternateFileName="PROJEC~2.JPG")) returned 1 [0181.508] wcscmp (_String1="ProjectTaskIcon.jpg", _String2=".") returned 1 [0181.508] wcscmp (_String1="ProjectTaskIcon.jpg", _String2="..") returned 1 [0181.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc48d0 [0181.508] wcscpy (in: _Dest=0x3dc48d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.508] wcscat (in: _Dest=0x3dc48d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.508] wcscat (in: _Dest=0x3dc48d0, _Source="ProjectTaskIcon.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" [0181.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc48d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0 [0181.509] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIconMask.bmp", cAlternateFileName="PROJEC~3.BMP")) returned 1 [0181.509] wcscmp (_String1="ProjectTaskIconMask.bmp", _String2=".") returned 1 [0181.509] wcscmp (_String1="ProjectTaskIconMask.bmp", _String2="..") returned 1 [0181.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db09d8 [0181.510] wcscpy (in: _Dest=0x3db09d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.510] wcscat (in: _Dest=0x3db09d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.510] wcscat (in: _Dest=0x3db09d8, _Source="ProjectTaskIconMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" [0181.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db09d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98 [0181.511] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77168d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTool", cAlternateFileName="PROJEC~1")) returned 1 [0181.511] wcscmp (_String1="ProjectTool", _String2=".") returned 1 [0181.511] wcscmp (_String1="ProjectTool", _String2="..") returned 1 [0181.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e68570 [0181.511] wcscpy (in: _Dest=0x3e68570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.511] wcscat (in: _Dest=0x3e68570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.511] wcscat (in: _Dest=0x3e68570, _Source="ProjectTool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" [0181.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e68570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0181.512] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImages.jpg", cAlternateFileName="PROJEC~3.JPG")) returned 1 [0181.512] wcscmp (_String1="ProjectToolsetIconImages.jpg", _String2=".") returned 1 [0181.513] wcscmp (_String1="ProjectToolsetIconImages.jpg", _String2="..") returned 1 [0181.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dae3e8 [0181.513] wcscpy (in: _Dest=0x3dae3e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.513] wcscat (in: _Dest=0x3dae3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.513] wcscat (in: _Dest=0x3dae3e8, _Source="ProjectToolsetIconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" [0181.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0181.514] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2338, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImagesMask.bmp", cAlternateFileName="PROJEC~1.BMP")) returned 1 [0181.514] wcscmp (_String1="ProjectToolsetIconImagesMask.bmp", _String2=".") returned 1 [0181.515] wcscmp (_String1="ProjectToolsetIconImagesMask.bmp", _String2="..") returned 1 [0181.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3de9cb8 [0181.515] wcscpy (in: _Dest=0x3de9cb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.515] wcscat (in: _Dest=0x3de9cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.515] wcscat (in: _Dest=0x3de9cb8, _Source="ProjectToolsetIconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" [0181.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de9cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440 [0181.516] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImage.jpg", cAlternateFileName="SPLASH~1.JPG")) returned 1 [0181.516] wcscmp (_String1="SplashImage.jpg", _String2=".") returned 1 [0181.516] wcscmp (_String1="SplashImage.jpg", _String2="..") returned 1 [0181.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8648 [0181.516] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.516] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.517] wcscat (in: _Dest=0x2c8648, _Source="SplashImage.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" [0181.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0181.518] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImageMask.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0181.518] wcscmp (_String1="SplashImageMask.bmp", _String2=".") returned 1 [0181.518] wcscmp (_String1="SplashImageMask.bmp", _String2="..") returned 1 [0181.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4530 [0181.518] wcscpy (in: _Dest=0x3dc4530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.518] wcscat (in: _Dest=0x3dc4530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.518] wcscat (in: _Dest=0x3dc4530, _Source="SplashImageMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" [0181.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1444 [0181.519] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABMASK.BMP", cAlternateFileName="")) returned 1 [0181.520] wcscmp (_String1="TABMASK.BMP", _String2=".") returned 1 [0181.520] wcscmp (_String1="TABMASK.BMP", _String2="..") returned 1 [0181.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e68648 [0181.520] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.520] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.520] wcscat (in: _Dest=0x3e68648, _Source="TABMASK.BMP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" [0181.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0181.521] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9071d330, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABOFF.JPG", cAlternateFileName="")) returned 1 [0181.521] wcscmp (_String1="TABOFF.JPG", _String2=".") returned 1 [0181.521] wcscmp (_String1="TABOFF.JPG", _String2="..") returned 1 [0181.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e678c8 [0181.521] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.521] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.522] wcscat (in: _Dest=0x3e678c8, _Source="TABOFF.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" [0181.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0181.523] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABON.JPG", cAlternateFileName="")) returned 1 [0181.523] wcscmp (_String1="TABON.JPG", _String2=".") returned 1 [0181.523] wcscmp (_String1="TABON.JPG", _String2="..") returned 1 [0181.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e687f8 [0181.523] wcscpy (in: _Dest=0x3e687f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.523] wcscat (in: _Dest=0x3e687f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.523] wcscat (in: _Dest=0x3e687f8, _Source="TABON.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" [0181.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0181.524] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHITEBOX.JPG", cAlternateFileName="")) returned 1 [0181.524] wcscmp (_String1="WHITEBOX.JPG", _String2=".") returned 1 [0181.525] wcscmp (_String1="WHITEBOX.JPG", _String2="..") returned 1 [0181.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68b58 [0181.525] wcscpy (in: _Dest=0x3e68b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.525] wcscat (in: _Dest=0x3e68b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.525] wcscat (in: _Dest=0x3e68b58, _Source="WHITEBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" [0181.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0181.526] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteboxMask.bmp", cAlternateFileName="WHITEB~1.BMP")) returned 1 [0181.526] wcscmp (_String1="WhiteboxMask.bmp", _String2=".") returned 1 [0181.526] wcscmp (_String1="WhiteboxMask.bmp", _String2="..") returned 1 [0181.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c88e8 [0181.526] wcscpy (in: _Dest=0x2c88e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.526] wcscat (in: _Dest=0x2c88e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.526] wcscat (in: _Dest=0x2c88e8, _Source="WhiteboxMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" [0181.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c88e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0181.528] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1e0300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x855a0ad0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c1e0300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIcons.jpg", cAlternateFileName="ZOOMIC~1.JPG")) returned 1 [0181.528] wcscmp (_String1="ZoomIcons.jpg", _String2=".") returned 1 [0181.528] wcscmp (_String1="ZoomIcons.jpg", _String2="..") returned 1 [0181.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8c68 [0181.528] wcscpy (in: _Dest=0x2c8c68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.528] wcscat (in: _Dest=0x2c8c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.528] wcscat (in: _Dest=0x2c8c68, _Source="ZoomIcons.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" [0181.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0181.530] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1e0300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c1e0300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 1 [0181.530] wcscmp (_String1="ZoomIconsMask.bmp", _String2=".") returned 1 [0181.530] wcscmp (_String1="ZoomIconsMask.bmp", _String2="..") returned 1 [0181.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc49b8 [0181.530] wcscpy (in: _Dest=0x3dc49b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset" [0181.530] wcscat (in: _Dest=0x3dc49b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\" [0181.530] wcscat (in: _Dest=0x3dc49b8, _Source="ZoomIconsMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" [0181.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc49b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0181.531] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1e0300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92681550, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c1e0300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 0 [0181.531] FindClose (in: hFindFile=0x3e74130 | out: hFindFile=0x3e74130) returned 1 [0181.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb10d8) returned 1 [0181.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ba0) returned 1 [0181.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66cd8) returned 1 Thread: id = 4532 os_tid = 0x15ec [0173.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6b90 [0173.702] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0173.702] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\" [0173.702] wcscat (in: _Dest=0x2ff6b90, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*" [0173.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3758 [0173.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0177.564] wcscmp (_String1=".", _String2=".") returned 0 [0177.564] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78e1f6f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c3a370, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.564] wcscmp (_String1="..", _String2=".") returned 1 [0177.564] wcscmp (_String1="..", _String2="..") returned 0 [0177.564] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e2b700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78e1f6f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x50e2b700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImages.jpg", cAlternateFileName="ICONIM~1.JPG")) returned 1 [0177.564] wcscmp (_String1="IconImages.jpg", _String2=".") returned 1 [0177.564] wcscmp (_String1="IconImages.jpg", _String2="..") returned 1 [0177.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85ff0 [0177.564] wcscpy (in: _Dest=0x3d85ff0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0177.564] wcscat (in: _Dest=0x3d85ff0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\" [0177.564] wcscat (in: _Dest=0x3d85ff0, _Source="IconImages.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" [0178.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0178.241] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 1 [0178.241] wcscmp (_String1="IconImagesMask.bmp", _String2=".") returned 1 [0178.241] wcscmp (_String1="IconImagesMask.bmp", _String2="..") returned 1 [0178.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e18130 [0178.242] wcscpy (in: _Dest=0x3e18130, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool" [0178.242] wcscat (in: _Dest=0x3e18130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\" [0178.242] wcscat (in: _Dest=0x3e18130, _Source="IconImagesMask.bmp" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" [0178.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e18130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0178.243] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5213e400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c3a370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5213e400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 0 [0178.243] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0178.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3758) returned 1 [0178.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 [0178.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67060) returned 1 Thread: id = 4533 os_tid = 0x15f0 [0173.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx")) returned 0x20 [0173.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.703] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.704] GetLastError () returned 0x5 [0173.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0173.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e5d0) returned 1 Thread: id = 4534 os_tid = 0x15f4 [0173.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx")) returned 0x20 [0173.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.705] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.705] GetLastError () returned 0x5 [0173.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0173.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 Thread: id = 4535 os_tid = 0x15f8 [0173.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor")) returned 0x20 [0173.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR", dwFileAttributes=0x20) returned 0 [0173.712] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.712] GetLastError () returned 0x5 [0173.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR", dwFileAttributes=0x20) returned 0 [0173.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 Thread: id = 4536 os_tid = 0x15fc [0173.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor")) returned 0x20 [0173.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR", dwFileAttributes=0x20) returned 0 [0173.713] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.714] GetLastError () returned 0x5 [0173.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR", dwFileAttributes=0x20) returned 0 [0173.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61830) returned 1 Thread: id = 4537 os_tid = 0x1600 [0173.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor")) returned 0x20 [0173.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR", dwFileAttributes=0x20) returned 0 [0173.715] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.715] GetLastError () returned 0x5 [0173.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR", dwFileAttributes=0x20) returned 0 [0173.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61440) returned 1 Thread: id = 4538 os_tid = 0x1604 [0173.717] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log")) returned 0x2020 [0177.374] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", dwFileAttributes=0x20) returned 1 [0182.024] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11f0 [0182.024] GetFileSizeEx (in: hFile=0x11f0, lpFileSize=0xf44fdbc | out: lpFileSize=0xf44fdbc*=380) returned 1 [0182.024] SetFilePointerEx (in: hFile=0x11f0, liDistanceToMove=0x178, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.025] ReadFile (in: hFile=0x11f0, lpBuffer=0xf44fd98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf44fda8, lpOverlapped=0x0 | out: lpBuffer=0xf44fd98*, lpNumberOfBytesRead=0xf44fda8*=0x4, lpOverlapped=0x0) returned 1 [0182.027] SetFilePointerEx (in: hFile=0x11f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0182.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0182.027] NtQuerySystemTime (in: CurrentTime=0xf44fd30 | out: CurrentTime=0xf44fd30*=132462177606000000) returned 0x0 [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x1f842dd3 [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x11132e45 [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x49c0455d [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0xbcac0e7 [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x564677b5 [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x5df11a7e [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x7995cba7 [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x4e6cc712 [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x3a85fb4f [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x713fbb24 [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x2402c7c9 [0182.027] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x6d186f10 [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x45ae005 [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x58ef182a [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x5cde2c6a [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x5d5505df [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x4b19d87f [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x25da72ec [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x43978a10 [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x59f338b [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x984d72c [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x3f584a9a [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x1e3e81 [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x7c6e2886 [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x6f70a883 [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x50ab724 [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x475feb44 [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x65dfa400 [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x7b5693ff [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x402580a0 [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x4952abef [0182.028] RtlRandomEx (in: Seed=0xf44fd28 | out: Seed=0xf44fd28) returned 0x16922105 [0182.038] ReadFile (in: hFile=0x11f0, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0x17c, lpNumberOfBytesRead=0xf44fd24, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0xf44fd24*=0x17c, lpOverlapped=0x0) returned 1 [0182.039] SetFilePointerEx (in: hFile=0x11f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.039] WriteFile (in: hFile=0x11f0, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0xf44fd28, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xf44fd28*=0x17c, lpOverlapped=0x0) returned 1 [0182.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec48e8 [0182.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3088 [0182.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3088) returned 1 [0182.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0182.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0182.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0182.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd518) returned 1 [0182.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x22) returned 0x7a37680 [0182.239] SetFilePointerEx (in: hFile=0x11f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.239] WriteFile (in: hFile=0x11f0, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0xf44fdb0, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xf44fdb0*=0x106, lpOverlapped=0x0) returned 1 [0182.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0182.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0182.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e817e0 [0182.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0182.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0182.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0182.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x29) returned 0x3e79100 [0182.286] sprintf (in: _Dest=0x3e79100, _Format="%c%c" | out: _Dest="80") returned 2 [0182.286] sprintf (in: _Dest=0x3e79102, _Format="%c%c" | out: _Dest="96") returned 2 [0182.286] sprintf (in: _Dest=0x3e79104, _Format="%c%c" | out: _Dest="97") returned 2 [0182.286] sprintf (in: _Dest=0x3e79106, _Format="%c%c" | out: _Dest="4d") returned 2 [0182.286] sprintf (in: _Dest=0x3e79108, _Format="%c%c" | out: _Dest="ec") returned 2 [0182.286] sprintf (in: _Dest=0x3e7910a, _Format="%c%c" | out: _Dest="e8") returned 2 [0182.286] sprintf (in: _Dest=0x3e7910c, _Format="%c%c" | out: _Dest="45") returned 2 [0182.286] sprintf (in: _Dest=0x3e7910e, _Format="%c%c" | out: _Dest="5a") returned 2 [0182.286] sprintf (in: _Dest=0x3e79110, _Format="%c%c" | out: _Dest="10") returned 2 [0182.286] sprintf (in: _Dest=0x3e79112, _Format="%c%c" | out: _Dest="51") returned 2 [0182.286] sprintf (in: _Dest=0x3e79114, _Format="%c%c" | out: _Dest="d6") returned 2 [0182.286] sprintf (in: _Dest=0x3e79116, _Format="%c%c" | out: _Dest="6f") returned 2 [0182.286] sprintf (in: _Dest=0x3e79118, _Format="%c%c" | out: _Dest="f1") returned 2 [0182.287] sprintf (in: _Dest=0x3e7911a, _Format="%c%c" | out: _Dest="c9") returned 2 [0182.287] sprintf (in: _Dest=0x3e7911c, _Format="%c%c" | out: _Dest="c0") returned 2 [0182.287] sprintf (in: _Dest=0x3e7911e, _Format="%c%c" | out: _Dest="9a") returned 2 [0182.287] sprintf (in: _Dest=0x3e79120, _Format="%c%c" | out: _Dest="89") returned 2 [0182.287] sprintf (in: _Dest=0x3e79122, _Format="%c%c" | out: _Dest="8c") returned 2 [0182.287] sprintf (in: _Dest=0x3e79124, _Format="%c%c" | out: _Dest="c4") returned 2 [0182.287] sprintf (in: _Dest=0x3e79126, _Format="%c%c" | out: _Dest="15") returned 2 [0182.287] RtlInitAnsiString (in: DestinationString=0xf44fd38, SourceString="8096974dece8455a1051d66ff1c9c09a898cc415" | out: DestinationString="8096974dece8455a1051d66ff1c9c09a898cc415") [0182.287] RtlAnsiStringToUnicodeString (in: DestinationString=0xf44fd30, SourceString="8096974dece8455a1051d66ff1c9c09a898cc415", AllocateDestinationString=1 | out: DestinationString="8096974dece8455a1051d66ff1c9c09a898cc415") returned 0x0 [0182.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe69c8 [0182.287] wcscat (in: _Dest=0x3d868e0, _Source="8096974dec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\8096974dec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\8096974dec" [0182.287] wcscat (in: _Dest=0x3d868e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\8096974dec.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\8096974dec.68814f" [0182.287] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\8096974dec.68814f", NtPathName=0xf44fd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\8096974dec.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x7a64330 [0182.364] FlushFileBuffers (hFile=0x11f0) returned 1 [0183.588] CloseHandle (hObject=0x11f0) returned 1 [0184.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85700 [0184.531] wcscpy (in: _Dest=0x3d85700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0184.531] wcscat (in: _Dest=0x3d85700, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt" [0184.531] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\68814f-readme.txt")) returned 0x2020 [0184.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 [0184.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66258) returned 1 Thread: id = 4539 os_tid = 0x1608 [0173.719] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current")) returned 0x2020 [0177.560] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", dwFileAttributes=0x20) returned 1 [0182.057] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3ac [0182.057] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0xf3cf99c | out: lpFileSize=0xf3cf99c*=16) returned 1 [0182.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0182.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0182.057] NtQuerySystemTime (in: CurrentTime=0xf3cf910 | out: CurrentTime=0xf3cf910*=132462177606312000) returned 0x0 [0182.057] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x33a418e0 [0182.057] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x199353f0 [0182.057] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x14cf8fd4 [0182.057] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x8c5ae92 [0182.057] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x68b06bd0 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x77cdf39c [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x743da0f1 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x677b1eb7 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x75a33922 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x33cfc1ec [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x3f80b6a8 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x34d1bb41 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x23782df0 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x501f1a8f [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x6294542d [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x29ac3f13 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x657db86d [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x31406cdf [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x5280be89 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x77a28c5f [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x42b84ba0 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0xb39d474 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x7c8d7ec1 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x56a3eb26 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x45e5a8c6 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x3b6aa011 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x69789038 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x66ad099d [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x40412646 [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x69fca51d [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x6a8ea02c [0182.058] RtlRandomEx (in: Seed=0xf3cf908 | out: Seed=0xf3cf908) returned 0x1c4bf2a3 [0182.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0182.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0182.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab50b0 [0182.069] ReadFile (in: hFile=0x3ac, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xf3cf904, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0xf3cf904*=0x10, lpOverlapped=0x0) returned 1 [0182.071] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.071] WriteFile (in: hFile=0x3ac, lpBuffer=0x7ab50b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xf3cf908, lpOverlapped=0x0 | out: lpBuffer=0x7ab50b0*, lpNumberOfBytesWritten=0xf3cf908*=0x10, lpOverlapped=0x0) returned 1 [0182.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0182.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0182.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3600) returned 1 [0182.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab50b0) returned 1 [0182.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0182.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0182.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be2e0) returned 1 [0182.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3600 [0182.243] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.243] WriteFile (in: hFile=0x3ac, lpBuffer=0x30bc868*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xf3cf990, lpOverlapped=0x0 | out: lpBuffer=0x30bc868*, lpNumberOfBytesWritten=0xf3cf990*=0x100, lpOverlapped=0x0) returned 1 [0182.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e368 [0182.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e368) returned 1 [0182.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43860 [0182.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e368 [0182.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0182.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0182.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3d5b668 [0182.293] sprintf (in: _Dest=0x3d5b668, _Format="%c%c" | out: _Dest="63") returned 2 [0182.293] sprintf (in: _Dest=0x3d5b66a, _Format="%c%c" | out: _Dest="05") returned 2 [0182.293] sprintf (in: _Dest=0x3d5b66c, _Format="%c%c" | out: _Dest="a7") returned 2 [0182.293] sprintf (in: _Dest=0x3d5b66e, _Format="%c%c" | out: _Dest="de") returned 2 [0182.293] sprintf (in: _Dest=0x3d5b670, _Format="%c%c" | out: _Dest="c0") returned 2 [0182.293] sprintf (in: _Dest=0x3d5b672, _Format="%c%c" | out: _Dest="26") returned 2 [0182.294] sprintf (in: _Dest=0x3d5b674, _Format="%c%c" | out: _Dest="4e") returned 2 [0182.294] sprintf (in: _Dest=0x3d5b676, _Format="%c%c" | out: _Dest="19") returned 2 [0182.294] sprintf (in: _Dest=0x3d5b678, _Format="%c%c" | out: _Dest="01") returned 2 [0182.294] sprintf (in: _Dest=0x3d5b67a, _Format="%c%c" | out: _Dest="1b") returned 2 [0182.294] sprintf (in: _Dest=0x3d5b67c, _Format="%c%c" | out: _Dest="01") returned 2 [0182.294] sprintf (in: _Dest=0x3d5b67e, _Format="%c%c" | out: _Dest="0e") returned 2 [0182.294] sprintf (in: _Dest=0x3d5b680, _Format="%c%c" | out: _Dest="a8") returned 2 [0182.294] sprintf (in: _Dest=0x3d5b682, _Format="%c%c" | out: _Dest="86") returned 2 [0182.294] RtlInitAnsiString (in: DestinationString=0xf3cf918, SourceString="6305a7dec0264e19011b010ea886" | out: DestinationString="6305a7dec0264e19011b010ea886") [0182.294] RtlAnsiStringToUnicodeString (in: DestinationString=0xf3cf910, SourceString="6305a7dec0264e19011b010ea886", AllocateDestinationString=1 | out: DestinationString="6305a7dec0264e19011b010ea886") returned 0x0 [0182.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30bdd88 [0182.294] wcscat (in: _Dest=0x3d56628, _Source="6305a7d" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\6305a7d") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\6305a7d" [0182.294] wcscat (in: _Dest=0x3d56628, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\6305a7d.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\6305a7d.68814f" [0182.294] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\6305a7d.68814f", NtPathName=0xf3cf908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\6305a7d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7a64410 [0182.340] FlushFileBuffers (hFile=0x3ac) returned 1 [0183.586] CloseHandle (hObject=0x3ac) returned 1 [0184.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85080 [0184.540] wcscpy (in: _Dest=0x3d85080, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0184.541] wcscat (in: _Dest=0x3d85080, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt" [0184.541] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\68814f-readme.txt")) returned 0x2020 [0184.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85080) returned 1 [0184.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 4540 os_tid = 0x160c [0173.720] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock")) returned 0x2020 [0177.374] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", dwFileAttributes=0x20) returned 1 [0182.039] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10ec [0182.039] GetFileSizeEx (in: hFile=0x10ec, lpFileSize=0xf1cfcf4 | out: lpFileSize=0xf1cfcf4*=0) returned 1 [0182.039] FlushFileBuffers (hFile=0x10ec) returned 1 [0182.690] CloseHandle (hObject=0x10ec) returned 1 [0182.691] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", dwFileAttributes=0x2020) returned 1 [0182.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67110) returned 1 Thread: id = 4541 os_tid = 0x1610 [0173.720] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log")) returned 0x2020 [0177.346] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", dwFileAttributes=0x20) returned 1 [0182.008] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb8c [0182.009] GetFileSizeEx (in: hFile=0xb8c, lpFileSize=0xf5efcdc | out: lpFileSize=0xf5efcdc*=141) returned 1 [0182.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0182.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0182.009] NtQuerySystemTime (in: CurrentTime=0xf5efc50 | out: CurrentTime=0xf5efc50*=132462177605844000) returned 0x0 [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x4ca19f31 [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x7ddf9ab1 [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x5757ce6a [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x34d16bc8 [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x3dffd871 [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x7b555234 [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x309a11a [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x312f85ea [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x2314717b [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x1c46937b [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x73002fb3 [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x641a2815 [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x6a6d172a [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x75fe4ed7 [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x56d5a1bb [0182.009] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x75327304 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x7bbfc73b [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x4965e8c7 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x7ed80637 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x3e0d1620 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x187aabce [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x7c1ffbc6 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x698d368a [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x50d98b15 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x1eb82be1 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x5d05277a [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x74091544 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x56b20c80 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x43ba8de9 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x6195c48b [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x4cbc398 [0182.010] RtlRandomEx (in: Seed=0xf5efc48 | out: Seed=0xf5efc48) returned 0x311abf8d [0182.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0182.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0182.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0182.021] ReadFile (in: hFile=0xb8c, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0x8d, lpNumberOfBytesRead=0xf5efc44, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xf5efc44*=0x8d, lpOverlapped=0x0) returned 1 [0182.024] SetFilePointerEx (in: hFile=0xb8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.024] WriteFile (in: hFile=0xb8c, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x8d, lpNumberOfBytesWritten=0xf5efc48, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0xf5efc48*=0x8d, lpOverlapped=0x0) returned 1 [0182.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0182.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0182.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0182.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0182.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0182.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0182.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be178) returned 1 [0182.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e817e0 [0182.232] SetFilePointerEx (in: hFile=0xb8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.232] WriteFile (in: hFile=0xb8c, lpBuffer=0x3dea7b8*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xf5efcd0, lpOverlapped=0x0 | out: lpBuffer=0x3dea7b8*, lpNumberOfBytesWritten=0xf5efcd0*=0xf8, lpOverlapped=0x0) returned 1 [0182.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0182.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0182.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x3ea6540 [0182.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0182.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0182.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a510) returned 1 [0182.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd) returned 0x3e43860 [0182.281] sprintf (in: _Dest=0x3e43860, _Format="%c%c" | out: _Dest="cb") returned 2 [0182.281] sprintf (in: _Dest=0x3e43862, _Format="%c%c" | out: _Dest="87") returned 2 [0182.281] sprintf (in: _Dest=0x3e43864, _Format="%c%c" | out: _Dest="de") returned 2 [0182.281] sprintf (in: _Dest=0x3e43866, _Format="%c%c" | out: _Dest="ee") returned 2 [0182.281] sprintf (in: _Dest=0x3e43868, _Format="%c%c" | out: _Dest="db") returned 2 [0182.281] sprintf (in: _Dest=0x3e4386a, _Format="%c%c" | out: _Dest="67") returned 2 [0182.281] RtlInitAnsiString (in: DestinationString=0xf5efc58, SourceString="cb87deeedb67" | out: DestinationString="cb87deeedb67") [0182.282] RtlAnsiStringToUnicodeString (in: DestinationString=0xf5efc50, SourceString="cb87deeedb67", AllocateDestinationString=1 | out: DestinationString="cb87deeedb67") returned 0x0 [0182.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5ac90 [0182.282] wcscat (in: _Dest=0x333a68, _Source="cb8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\cb8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\cb8" [0182.282] wcscat (in: _Dest=0x333a68, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\cb8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\cb8.68814f" [0182.282] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\cb8.68814f", NtPathName=0xf5efc48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\cb8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3eeb5d0 [0182.366] FlushFileBuffers (hFile=0xb8c) returned 1 [0183.589] CloseHandle (hObject=0xb8c) returned 1 [0184.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d865a0 [0184.092] wcscpy (in: _Dest=0x3d865a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0184.092] wcscat (in: _Dest=0x3d865a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt" [0184.092] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\68814f-readme.txt")) returned 0xffffffff [0184.092] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfcc [0184.700] WriteFile (in: hFile=0xfcc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf5efc64, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xf5efc64*=0x8b9, lpOverlapped=0x0) returned 1 [0184.702] CloseHandle (hObject=0xfcc) returned 1 [0184.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d865a0) returned 1 [0184.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a671c0) returned 1 Thread: id = 4542 os_tid = 0x1614 [0173.721] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001")) returned 0x2020 [0177.274] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0181.993] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1080 [0181.994] GetFileSizeEx (in: hFile=0x1080, lpFileSize=0xf33fd3c | out: lpFileSize=0xf33fd3c*=41) returned 1 [0181.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0181.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0181.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0181.994] NtQuerySystemTime (in: CurrentTime=0xf33fcb0 | out: CurrentTime=0xf33fcb0*=132462177605688000) returned 0x0 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0xce78aea [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x61476588 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x2ae5ce45 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x35614c29 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0xaa89549 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x1bfccf28 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x11409365 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x6e3ff5d6 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x125e266c [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x3e73c1f0 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x6d318073 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x582fe8eb [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x458e6641 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x7a003952 [0181.994] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x42c7ffe [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x7bc8b941 [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x4a995777 [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x79212b67 [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x20a8569b [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x1f621ea0 [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x29a56fa1 [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x3f28a4da [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x684890f8 [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x3307f3c5 [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x15ff7ece [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x75a675be [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x1384debb [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x2a81f3dd [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x34deffe7 [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x7baaf274 [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x23c0fdbc [0181.995] RtlRandomEx (in: Seed=0xf33fca8 | out: Seed=0xf33fca8) returned 0x18cc4df [0182.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0182.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0182.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0182.005] ReadFile (in: hFile=0x1080, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0xf33fca4, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0xf33fca4*=0x29, lpOverlapped=0x0) returned 1 [0182.008] SetFilePointerEx (in: hFile=0x1080, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.008] WriteFile (in: hFile=0x1080, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xf33fca8, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0xf33fca8*=0x29, lpOverlapped=0x0) returned 1 [0182.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0182.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3538) returned 1 [0182.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0182.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0182.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0182.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40eb8) returned 1 [0182.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79100 [0182.220] SetFilePointerEx (in: hFile=0x1080, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.221] WriteFile (in: hFile=0x1080, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xf33fd30, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xf33fd30*=0x110, lpOverlapped=0x0) returned 1 [0182.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0182.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0182.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec2c00 [0182.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0182.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0182.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0182.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x30be250 [0182.276] sprintf (in: _Dest=0x30be250, _Format="%c%c" | out: _Dest="dc") returned 2 [0182.276] sprintf (in: _Dest=0x30be252, _Format="%c%c" | out: _Dest="b4") returned 2 [0182.277] sprintf (in: _Dest=0x30be254, _Format="%c%c" | out: _Dest="c5") returned 2 [0182.277] sprintf (in: _Dest=0x30be256, _Format="%c%c" | out: _Dest="40") returned 2 [0182.277] sprintf (in: _Dest=0x30be258, _Format="%c%c" | out: _Dest="0d") returned 2 [0182.277] sprintf (in: _Dest=0x30be25a, _Format="%c%c" | out: _Dest="d1") returned 2 [0182.277] sprintf (in: _Dest=0x30be25c, _Format="%c%c" | out: _Dest="1d") returned 2 [0182.277] sprintf (in: _Dest=0x30be25e, _Format="%c%c" | out: _Dest="0e") returned 2 [0182.277] sprintf (in: _Dest=0x30be260, _Format="%c%c" | out: _Dest="3e") returned 2 [0182.277] sprintf (in: _Dest=0x30be262, _Format="%c%c" | out: _Dest="7e") returned 2 [0182.277] sprintf (in: _Dest=0x30be264, _Format="%c%c" | out: _Dest="f8") returned 2 [0182.277] sprintf (in: _Dest=0x30be266, _Format="%c%c" | out: _Dest="fc") returned 2 [0182.277] sprintf (in: _Dest=0x30be268, _Format="%c%c" | out: _Dest="d7") returned 2 [0182.277] sprintf (in: _Dest=0x30be26a, _Format="%c%c" | out: _Dest="18") returned 2 [0182.277] sprintf (in: _Dest=0x30be26c, _Format="%c%c" | out: _Dest="a0") returned 2 [0182.277] sprintf (in: _Dest=0x30be26e, _Format="%c%c" | out: _Dest="a6") returned 2 [0182.277] sprintf (in: _Dest=0x30be270, _Format="%c%c" | out: _Dest="48") returned 2 [0182.277] sprintf (in: _Dest=0x30be272, _Format="%c%c" | out: _Dest="d4") returned 2 [0182.277] sprintf (in: _Dest=0x30be274, _Format="%c%c" | out: _Dest="de") returned 2 [0182.277] sprintf (in: _Dest=0x30be276, _Format="%c%c" | out: _Dest="2b") returned 2 [0182.277] sprintf (in: _Dest=0x30be278, _Format="%c%c" | out: _Dest="72") returned 2 [0182.277] sprintf (in: _Dest=0x30be27a, _Format="%c%c" | out: _Dest="86") returned 2 [0182.277] sprintf (in: _Dest=0x30be27c, _Format="%c%c" | out: _Dest="43") returned 2 [0182.277] sprintf (in: _Dest=0x30be27e, _Format="%c%c" | out: _Dest="a2") returned 2 [0182.277] sprintf (in: _Dest=0x30be280, _Format="%c%c" | out: _Dest="d5") returned 2 [0182.277] sprintf (in: _Dest=0x30be282, _Format="%c%c" | out: _Dest="11") returned 2 [0182.277] sprintf (in: _Dest=0x30be284, _Format="%c%c" | out: _Dest="8e") returned 2 [0182.277] sprintf (in: _Dest=0x30be286, _Format="%c%c" | out: _Dest="7c") returned 2 [0182.277] sprintf (in: _Dest=0x30be288, _Format="%c%c" | out: _Dest="9e") returned 2 [0182.277] sprintf (in: _Dest=0x30be28a, _Format="%c%c" | out: _Dest="42") returned 2 [0182.278] RtlInitAnsiString (in: DestinationString=0xf33fcb8, SourceString="dcb4c5400dd11d0e3e7ef8fcd718a0a648d4de2b728643a2d5118e7c9e42" | out: DestinationString="dcb4c5400dd11d0e3e7ef8fcd718a0a648d4de2b728643a2d5118e7c9e42") [0182.278] RtlAnsiStringToUnicodeString (in: DestinationString=0xf33fcb0, SourceString="dcb4c5400dd11d0e3e7ef8fcd718a0a648d4de2b728643a2d5118e7c9e42", AllocateDestinationString=1 | out: DestinationString="dcb4c5400dd11d0e3e7ef8fcd718a0a648d4de2b728643a2d5118e7c9e42") returned 0x0 [0182.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba6e8 [0182.278] wcscat (in: _Dest=0x3eeb4f8, _Source="dcb4c5400dd11d0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\dcb4c5400dd11d0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\dcb4c5400dd11d0" [0182.278] wcscat (in: _Dest=0x3eeb4f8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\dcb4c5400dd11d0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\dcb4c5400dd11d0.68814f" [0182.278] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\dcb4c5400dd11d0.68814f", NtPathName=0xf33fca8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\dcb4c5400dd11d0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db08e8 [0182.337] FlushFileBuffers (hFile=0x1080) returned 1 [0183.586] CloseHandle (hObject=0x1080) returned 1 [0184.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d86400 [0184.542] wcscpy (in: _Dest=0x3d86400, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\" [0184.542] wcscat (in: _Dest=0x3d86400, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt" [0184.542] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\68814f-readme.txt")) returned 0x2020 [0184.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86400) returned 1 [0184.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d579b0) returned 1 Thread: id = 4543 os_tid = 0x1618 [0173.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dad468 [0173.721] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0173.721] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\" [0173.721] wcscat (in: _Dest=0x3dad468, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*" [0173.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0173.721] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0173.722] wcscmp (_String1=".", _String2=".") returned 0 [0173.722] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6626d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.722] wcscmp (_String1="..", _String2=".") returned 1 [0173.722] wcscmp (_String1="..", _String2="..") returned 0 [0173.722] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe66468f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe66468f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6649000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0173.722] wcscmp (_String1="Google Docs.ico", _String2=".") returned 1 [0173.722] wcscmp (_String1="Google Docs.ico", _String2="..") returned 1 [0173.722] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6770690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1 [0173.722] wcscmp (_String1="Google Docs.ico.md5", _String2=".") returned 1 [0173.722] wcscmp (_String1="Google Docs.ico.md5", _String2="..") returned 1 [0173.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d54dd8 [0173.722] wcscpy (in: _Dest=0x3d54dd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" [0173.722] wcscat (in: _Dest=0x3d54dd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\" [0173.722] wcscat (in: _Dest=0x3d54dd8, _Source="Google Docs.ico.md5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" [0173.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d54dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0173.840] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6770690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6770690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6770690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 0 [0173.840] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0173.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0173.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 [0173.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadd20) returned 1 Thread: id = 4544 os_tid = 0x161c [0173.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dominica")) returned 0x20 [0173.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica", dwFileAttributes=0x20) returned 0 [0173.723] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\dominica"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.723] GetLastError () returned 0x5 [0173.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Dominica", dwFileAttributes=0x20) returned 0 [0173.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26468) returned 1 Thread: id = 4545 os_tid = 0x1620 [0173.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\edmonton")) returned 0x20 [0173.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton", dwFileAttributes=0x20) returned 0 [0173.725] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\edmonton"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.725] GetLastError () returned 0x5 [0173.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Edmonton", dwFileAttributes=0x20) returned 0 [0173.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ae0) returned 1 Thread: id = 4546 os_tid = 0x1624 [0173.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\eirunepe")) returned 0x20 [0173.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe", dwFileAttributes=0x20) returned 0 [0173.727] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\eirunepe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.727] GetLastError () returned 0x5 [0173.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Eirunepe", dwFileAttributes=0x20) returned 0 [0173.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23140) returned 1 Thread: id = 4547 os_tid = 0x1628 [0173.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\el_salvador")) returned 0x20 [0173.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador", dwFileAttributes=0x20) returned 0 [0173.734] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\el_salvador"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.734] GetLastError () returned 0x5 [0173.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\El_Salvador", dwFileAttributes=0x20) returned 0 [0173.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 Thread: id = 4548 os_tid = 0x1630 [0173.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\fortaleza")) returned 0x20 [0173.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza", dwFileAttributes=0x20) returned 0 [0173.736] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\fortaleza"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.736] GetLastError () returned 0x5 [0173.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Fortaleza", dwFileAttributes=0x20) returned 0 [0173.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a233e0) returned 1 Thread: id = 4549 os_tid = 0x1634 [0173.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\glace_bay")) returned 0x20 [0173.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay", dwFileAttributes=0x20) returned 0 [0173.740] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\glace_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.741] GetLastError () returned 0x5 [0173.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Glace_Bay", dwFileAttributes=0x20) returned 0 [0173.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a231b0) returned 1 Thread: id = 4550 os_tid = 0x1638 [0173.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\godthab")) returned 0x20 [0173.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab", dwFileAttributes=0x20) returned 0 [0173.742] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\godthab"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.743] GetLastError () returned 0x5 [0173.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Godthab", dwFileAttributes=0x20) returned 0 [0173.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 Thread: id = 4551 os_tid = 0x163c [0173.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\goose_bay")) returned 0x20 [0173.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay", dwFileAttributes=0x20) returned 0 [0173.744] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\goose_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.744] GetLastError () returned 0x5 [0173.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Goose_Bay", dwFileAttributes=0x20) returned 0 [0173.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23220) returned 1 Thread: id = 4552 os_tid = 0x1640 [0173.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grand_turk")) returned 0x20 [0173.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk", dwFileAttributes=0x20) returned 0 [0173.746] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grand_turk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.746] GetLastError () returned 0x5 [0173.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grand_Turk", dwFileAttributes=0x20) returned 0 [0173.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 Thread: id = 4553 os_tid = 0x1644 [0173.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grenada")) returned 0x20 [0173.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada", dwFileAttributes=0x20) returned 0 [0173.748] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\grenada"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.748] GetLastError () returned 0x5 [0173.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Grenada", dwFileAttributes=0x20) returned 0 [0173.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23e60) returned 1 Thread: id = 4554 os_tid = 0x1648 [0173.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guadeloupe")) returned 0x20 [0173.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe", dwFileAttributes=0x20) returned 0 [0173.749] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guadeloupe"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.749] GetLastError () returned 0x5 [0173.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guadeloupe", dwFileAttributes=0x20) returned 0 [0173.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 Thread: id = 4555 os_tid = 0x164c [0173.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guatemala")) returned 0x20 [0173.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala", dwFileAttributes=0x20) returned 0 [0173.751] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guatemala"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.751] GetLastError () returned 0x5 [0173.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guatemala", dwFileAttributes=0x20) returned 0 [0173.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 Thread: id = 4556 os_tid = 0x1650 [0173.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guayaquil")) returned 0x20 [0173.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil", dwFileAttributes=0x20) returned 0 [0173.753] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guayaquil"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.753] GetLastError () returned 0x5 [0173.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guayaquil", dwFileAttributes=0x20) returned 0 [0173.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ed0) returned 1 Thread: id = 4557 os_tid = 0x1654 [0173.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guyana")) returned 0x20 [0173.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana", dwFileAttributes=0x20) returned 0 [0173.754] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\guyana"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.754] GetLastError () returned 0x5 [0173.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Guyana", dwFileAttributes=0x20) returned 0 [0173.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23c30) returned 1 Thread: id = 4558 os_tid = 0x1658 [0173.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\halifax")) returned 0x20 [0173.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax", dwFileAttributes=0x20) returned 0 [0173.756] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\halifax"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.756] GetLastError () returned 0x5 [0173.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Halifax", dwFileAttributes=0x20) returned 0 [0173.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d80) returned 1 Thread: id = 4559 os_tid = 0x165c [0173.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\havana")) returned 0x20 [0173.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana", dwFileAttributes=0x20) returned 0 [0173.757] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\havana"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.758] GetLastError () returned 0x5 [0173.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Havana", dwFileAttributes=0x20) returned 0 [0173.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d10) returned 1 Thread: id = 4560 os_tid = 0x1660 [0173.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\hermosillo")) returned 0x20 [0173.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo", dwFileAttributes=0x20) returned 0 [0173.759] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\hermosillo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.759] GetLastError () returned 0x5 [0173.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Hermosillo", dwFileAttributes=0x20) returned 0 [0173.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 Thread: id = 4561 os_tid = 0x1664 [0173.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23d10 [0173.760] wcscpy (in: _Dest=0x7a23d10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0173.760] wcscat (in: _Dest=0x7a23d10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0173.760] wcscat (in: _Dest=0x7a23d10, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\*" [0173.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1ce0 [0173.761] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0175.105] wcscmp (_String1=".", _String2=".") returned 0 [0175.105] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.105] wcscmp (_String1="..", _String2=".") returned 1 [0175.105] wcscmp (_String1="..", _String2="..") returned 0 [0175.105] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x364, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indianapolis", cAlternateFileName="INDIAN~1")) returned 1 [0175.105] wcscmp (_String1="Indianapolis", _String2=".") returned 1 [0175.105] wcscmp (_String1="Indianapolis", _String2="..") returned 1 [0175.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cec8 [0175.105] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0175.105] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0175.106] wcscat (in: _Dest=0x3f3cec8, _Source="Indianapolis" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" [0176.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0176.145] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681c9860, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Knox", cAlternateFileName="")) returned 1 [0176.145] wcscmp (_String1="Knox", _String2=".") returned 1 [0176.145] wcscmp (_String1="Knox", _String2="..") returned 1 [0176.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x3f3dd10 [0176.145] wcscpy (in: _Dest=0x3f3dd10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0176.145] wcscat (in: _Dest=0x3f3dd10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0176.145] wcscat (in: _Dest=0x3f3dd10, _Source="Knox" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" [0176.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3dd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0176.147] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681c9860, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681c9860, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marengo", cAlternateFileName="")) returned 1 [0176.147] wcscmp (_String1="Marengo", _String2=".") returned 1 [0176.147] wcscmp (_String1="Marengo", _String2="..") returned 1 [0176.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47d18 [0176.147] wcscpy (in: _Dest=0x3e47d18, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0176.147] wcscat (in: _Dest=0x3e47d18, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0176.147] wcscat (in: _Dest=0x3e47d18, _Source="Marengo" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" [0176.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0176.149] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Petersburg", cAlternateFileName="PETERS~1")) returned 1 [0176.149] wcscmp (_String1="Petersburg", _String2=".") returned 1 [0176.149] wcscmp (_String1="Petersburg", _String2="..") returned 1 [0176.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba6e8 [0176.150] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0176.150] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0176.150] wcscat (in: _Dest=0x3eba6e8, _Source="Petersburg" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" [0176.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0176.151] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x374, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tell_City", cAlternateFileName="TELL_C~1")) returned 1 [0176.151] wcscmp (_String1="Tell_City", _String2=".") returned 1 [0176.151] wcscmp (_String1="Tell_City", _String2="..") returned 1 [0176.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47998 [0176.152] wcscpy (in: _Dest=0x3e47998, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0176.152] wcscat (in: _Dest=0x3e47998, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0176.152] wcscat (in: _Dest=0x3e47998, _Source="Tell_City" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" [0176.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0176.153] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vevay", cAlternateFileName="")) returned 1 [0176.153] wcscmp (_String1="Vevay", _String2=".") returned 1 [0176.153] wcscmp (_String1="Vevay", _String2="..") returned 1 [0176.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0176.154] wcscpy (in: _Dest=0x3f3e7d8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0176.154] wcscat (in: _Dest=0x3f3e7d8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0176.154] wcscat (in: _Dest=0x3f3e7d8, _Source="Vevay" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" [0176.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3e7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c [0176.155] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x374, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vincennes", cAlternateFileName="VINCEN~1")) returned 1 [0176.155] wcscmp (_String1="Vincennes", _String2=".") returned 1 [0176.155] wcscmp (_String1="Vincennes", _String2="..") returned 1 [0176.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47218 [0176.155] wcscpy (in: _Dest=0x3e47218, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0176.156] wcscat (in: _Dest=0x3e47218, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0176.156] wcscat (in: _Dest=0x3e47218, _Source="Vincennes" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" [0176.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68 [0176.157] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winamac", cAlternateFileName="")) returned 1 [0176.157] wcscmp (_String1="Winamac", _String2=".") returned 1 [0176.157] wcscmp (_String1="Winamac", _String2="..") returned 1 [0176.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x74) returned 0x3e47698 [0176.158] wcscpy (in: _Dest=0x3e47698, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana" [0176.158] wcscat (in: _Dest=0x3e47698, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\" [0176.158] wcscat (in: _Dest=0x3e47698, _Source="Winamac" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" [0176.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac [0176.159] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winamac", cAlternateFileName="")) returned 0 [0176.159] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0176.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1ce0) returned 1 [0176.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d10) returned 1 [0176.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23610) returned 1 Thread: id = 4562 os_tid = 0x1668 [0173.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\inuvik")) returned 0x20 [0173.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik", dwFileAttributes=0x20) returned 0 [0173.763] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\inuvik"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.763] GetLastError () returned 0x5 [0173.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Inuvik", dwFileAttributes=0x20) returned 0 [0173.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 Thread: id = 4563 os_tid = 0x166c [0173.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\iqaluit")) returned 0x20 [0173.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit", dwFileAttributes=0x20) returned 0 [0173.764] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\iqaluit"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.765] GetLastError () returned 0x5 [0173.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Iqaluit", dwFileAttributes=0x20) returned 0 [0173.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23300) returned 1 Thread: id = 4564 os_tid = 0x1670 [0173.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\jamaica")) returned 0x20 [0173.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica", dwFileAttributes=0x20) returned 0 [0173.766] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\jamaica"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.766] GetLastError () returned 0x5 [0173.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Jamaica", dwFileAttributes=0x20) returned 0 [0173.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23290) returned 1 Thread: id = 4565 os_tid = 0x1674 [0173.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\juneau")) returned 0x20 [0173.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau", dwFileAttributes=0x20) returned 0 [0173.768] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\juneau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0173.768] GetLastError () returned 0x5 [0173.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Juneau", dwFileAttributes=0x20) returned 0 [0173.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a235a0) returned 1 Thread: id = 4566 os_tid = 0x1678 [0173.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f6c8 [0173.769] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0173.769] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\" [0173.769] wcscat (in: _Dest=0x3f3f6c8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*" [0173.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb45c8 [0173.769] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0173.770] wcscmp (_String1=".", _String2=".") returned 0 [0173.770] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.770] wcscmp (_String1="..", _String2=".") returned 1 [0173.770] wcscmp (_String1="..", _String2="..") returned 0 [0173.770] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Louisville", cAlternateFileName="LOUISV~1")) returned 1 [0173.770] wcscmp (_String1="Louisville", _String2=".") returned 1 [0173.770] wcscmp (_String1="Louisville", _String2="..") returned 1 [0173.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cb10 [0173.770] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0173.770] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\" [0173.770] wcscat (in: _Dest=0x3f3cb10, _Source="Louisville" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" [0173.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0173.789] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monticello", cAlternateFileName="MONTIC~1")) returned 1 [0173.789] wcscmp (_String1="Monticello", _String2=".") returned 1 [0173.789] wcscmp (_String1="Monticello", _String2="..") returned 1 [0173.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d308 [0173.789] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky" [0173.789] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\" [0173.789] wcscat (in: _Dest=0x3f3d308, _Source="Monticello" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" [0173.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0173.790] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681ef9c0, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x681ef9c0, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x681ef9c0, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monticello", cAlternateFileName="MONTIC~1")) returned 0 [0173.790] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0173.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb45c8) returned 1 [0173.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0173.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a230d0) returned 1 Thread: id = 4567 os_tid = 0x167c [0174.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\la_paz")) returned 0x20 [0174.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz", dwFileAttributes=0x20) returned 0 [0174.146] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\la_paz"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.146] GetLastError () returned 0x5 [0174.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\La_Paz", dwFileAttributes=0x20) returned 0 [0174.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23680) returned 1 Thread: id = 4568 os_tid = 0x1684 [0174.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f6c8 [0174.147] wcscpy (in: _Dest=0x3f3f6c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0174.147] wcscat (in: _Dest=0x3f3f6c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0174.147] wcscat (in: _Dest=0x3f3f6c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*" [0174.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5710 [0174.148] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ebaf70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fba8950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73d30 [0177.340] wcscmp (_String1=".", _String2=".") returned 0 [0177.340] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ebaf70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8fba8950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.340] wcscmp (_String1="..", _String2=".") returned 1 [0177.340] wcscmp (_String1="..", _String2="..") returned 0 [0177.340] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b58100, ftCreationTime.dwHighDateTime=0x1ca114b, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46b58100, ftLastWriteTime.dwHighDateTime=0x1ca114b, nFileSizeHigh=0x0, nFileSizeLow=0xfb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL001.XML", cAlternateFileName="")) returned 1 [0177.340] wcscmp (_String1="PGLBL001.XML", _String2=".") returned 1 [0177.340] wcscmp (_String1="PGLBL001.XML", _String2="..") returned 1 [0177.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45f50 [0177.340] wcscpy (in: _Dest=0x3d45f50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0177.340] wcscat (in: _Dest=0x3d45f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0177.340] wcscat (in: _Dest=0x3d45f50, _Source="PGLBL001.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" [0178.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0178.282] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf70e7800, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf70e7800, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0x15b1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL002.XML", cAlternateFileName="")) returned 1 [0178.282] wcscmp (_String1="PGLBL002.XML", _String2=".") returned 1 [0178.282] wcscmp (_String1="PGLBL002.XML", _String2="..") returned 1 [0178.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45800 [0178.282] wcscpy (in: _Dest=0x3d45800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.282] wcscat (in: _Dest=0x3d45800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.282] wcscat (in: _Dest=0x3d45800, _Source="PGLBL002.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" [0178.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0178.283] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b1c900, ftCreationTime.dwHighDateTime=0x1c9f507, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1b1c900, ftLastWriteTime.dwHighDateTime=0x1c9f507, nFileSizeHigh=0x0, nFileSizeLow=0x33a1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL010.XML", cAlternateFileName="")) returned 1 [0178.283] wcscmp (_String1="PGLBL010.XML", _String2=".") returned 1 [0178.283] wcscmp (_String1="PGLBL010.XML", _String2="..") returned 1 [0178.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44b10 [0178.283] wcscpy (in: _Dest=0x3d44b10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.283] wcscat (in: _Dest=0x3d44b10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.283] wcscat (in: _Dest=0x3d44b10, _Source="PGLBL010.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" [0178.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0178.286] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8640e00, ftCreationTime.dwHighDateTime=0x1c6626a, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8640e00, ftLastWriteTime.dwHighDateTime=0x1c6626a, nFileSizeHigh=0x0, nFileSizeLow=0x1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL011.XML", cAlternateFileName="")) returned 1 [0178.286] wcscmp (_String1="PGLBL011.XML", _String2=".") returned 1 [0178.286] wcscmp (_String1="PGLBL011.XML", _String2="..") returned 1 [0178.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44450 [0178.286] wcscpy (in: _Dest=0x3d44450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.286] wcscat (in: _Dest=0x3d44450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.286] wcscat (in: _Dest=0x3d44450, _Source="PGLBL011.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" [0178.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184 [0178.287] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x331f0700, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x331f0700, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0xa5178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL012.XML", cAlternateFileName="")) returned 1 [0178.287] wcscmp (_String1="PGLBL012.XML", _String2=".") returned 1 [0178.287] wcscmp (_String1="PGLBL012.XML", _String2="..") returned 1 [0178.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d448d0 [0178.287] wcscpy (in: _Dest=0x3d448d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.287] wcscat (in: _Dest=0x3d448d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.287] wcscat (in: _Dest=0x3d448d0, _Source="PGLBL012.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" [0178.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d448d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0178.288] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fce2100, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5fce2100, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0x22cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL016.XML", cAlternateFileName="")) returned 1 [0178.289] wcscmp (_String1="PGLBL016.XML", _String2=".") returned 1 [0178.289] wcscmp (_String1="PGLBL016.XML", _String2="..") returned 1 [0178.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44060 [0178.289] wcscpy (in: _Dest=0x3d44060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.289] wcscat (in: _Dest=0x3d44060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.289] wcscat (in: _Dest=0x3d44060, _Source="PGLBL016.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" [0178.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0178.300] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff0e8c00, ftCreationTime.dwHighDateTime=0x1c6c230, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xff0e8c00, ftLastWriteTime.dwHighDateTime=0x1c6c230, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL020.XML", cAlternateFileName="")) returned 1 [0178.300] wcscmp (_String1="PGLBL020.XML", _String2=".") returned 1 [0178.300] wcscmp (_String1="PGLBL020.XML", _String2="..") returned 1 [0178.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45b60 [0178.300] wcscpy (in: _Dest=0x3d45b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.300] wcscat (in: _Dest=0x3d45b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.300] wcscat (in: _Dest=0x3d45b60, _Source="PGLBL020.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" [0178.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0178.301] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a94100, ftCreationTime.dwHighDateTime=0x1ca1b8d, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28a94100, ftLastWriteTime.dwHighDateTime=0x1ca1b8d, nFileSizeHigh=0x0, nFileSizeLow=0x24c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL022.XML", cAlternateFileName="")) returned 1 [0178.301] wcscmp (_String1="PGLBL022.XML", _String2=".") returned 1 [0178.301] wcscmp (_String1="PGLBL022.XML", _String2="..") returned 1 [0178.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d447b0 [0178.301] wcscpy (in: _Dest=0x3d447b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.301] wcscat (in: _Dest=0x3d447b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.301] wcscat (in: _Dest=0x3d447b0, _Source="PGLBL022.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" [0178.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d447b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0178.302] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8640e00, ftCreationTime.dwHighDateTime=0x1c6626a, ftLastAccessTime.dwLowDateTime=0x8fac4110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8640e00, ftLastWriteTime.dwHighDateTime=0x1c6626a, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL026.XML", cAlternateFileName="")) returned 1 [0178.302] wcscmp (_String1="PGLBL026.XML", _String2=".") returned 1 [0178.303] wcscmp (_String1="PGLBL026.XML", _String2="..") returned 1 [0178.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44cc0 [0178.303] wcscpy (in: _Dest=0x3d44cc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.303] wcscat (in: _Dest=0x3d44cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.303] wcscat (in: _Dest=0x3d44cc0, _Source="PGLBL026.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" [0178.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0178.304] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe96d7200, ftCreationTime.dwHighDateTime=0x1c9f66a, ftLastAccessTime.dwLowDateTime=0x81ee10d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe96d7200, ftLastWriteTime.dwHighDateTime=0x1c9f66a, nFileSizeHigh=0x0, nFileSizeLow=0x6d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL027.XML", cAlternateFileName="")) returned 1 [0178.304] wcscmp (_String1="PGLBL027.XML", _String2=".") returned 1 [0178.304] wcscmp (_String1="PGLBL027.XML", _String2="..") returned 1 [0178.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44f00 [0178.304] wcscpy (in: _Dest=0x3d44f00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.304] wcscat (in: _Dest=0x3d44f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.304] wcscat (in: _Dest=0x3d44f00, _Source="PGLBL027.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" [0178.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0178.305] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98e76800, ftCreationTime.dwHighDateTime=0x1c9e462, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x98e76800, ftLastWriteTime.dwHighDateTime=0x1c9e462, nFileSizeHigh=0x0, nFileSizeLow=0x266a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL044.XML", cAlternateFileName="")) returned 1 [0178.305] wcscmp (_String1="PGLBL044.XML", _String2=".") returned 1 [0178.305] wcscmp (_String1="PGLBL044.XML", _String2="..") returned 1 [0178.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44ba0 [0178.305] wcscpy (in: _Dest=0x3d44ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.305] wcscat (in: _Dest=0x3d44ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.305] wcscat (in: _Dest=0x3d44ba0, _Source="PGLBL044.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" [0178.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0178.306] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadaf8500, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xadaf8500, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x10e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL048.XML", cAlternateFileName="")) returned 1 [0178.306] wcscmp (_String1="PGLBL048.XML", _String2=".") returned 1 [0178.306] wcscmp (_String1="PGLBL048.XML", _String2="..") returned 1 [0178.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45d10 [0178.306] wcscpy (in: _Dest=0x3d45d10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.306] wcscat (in: _Dest=0x3d45d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.306] wcscat (in: _Dest=0x3d45d10, _Source="PGLBL048.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" [0178.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0178.307] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87603d00, ftCreationTime.dwHighDateTime=0x1c9f669, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87603d00, ftLastWriteTime.dwHighDateTime=0x1c9f669, nFileSizeHigh=0x0, nFileSizeLow=0x59f76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL054.XML", cAlternateFileName="")) returned 1 [0178.308] wcscmp (_String1="PGLBL054.XML", _String2=".") returned 1 [0178.308] wcscmp (_String1="PGLBL054.XML", _String2="..") returned 1 [0178.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44960 [0178.308] wcscpy (in: _Dest=0x3d44960, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.308] wcscat (in: _Dest=0x3d44960, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.308] wcscat (in: _Dest=0x3d44960, _Source="PGLBL054.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" [0178.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0178.309] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4017300, ftCreationTime.dwHighDateTime=0x1c6b721, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa4017300, ftLastWriteTime.dwHighDateTime=0x1c6b721, nFileSizeHigh=0x0, nFileSizeLow=0x26c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL058.XML", cAlternateFileName="")) returned 1 [0178.309] wcscmp (_String1="PGLBL058.XML", _String2=".") returned 1 [0178.309] wcscmp (_String1="PGLBL058.XML", _String2="..") returned 1 [0178.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d451d0 [0178.309] wcscpy (in: _Dest=0x3d451d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.309] wcscat (in: _Dest=0x3d451d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.309] wcscat (in: _Dest=0x3d451d0, _Source="PGLBL058.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" [0178.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d451d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0178.311] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fcb000, ftCreationTime.dwHighDateTime=0x1c68f54, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1fcb000, ftLastWriteTime.dwHighDateTime=0x1c68f54, nFileSizeHigh=0x0, nFileSizeLow=0x165d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL065.XML", cAlternateFileName="")) returned 1 [0178.311] wcscmp (_String1="PGLBL065.XML", _String2=".") returned 1 [0178.311] wcscmp (_String1="PGLBL065.XML", _String2="..") returned 1 [0178.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d455c0 [0178.311] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.311] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.311] wcscat (in: _Dest=0x3d455c0, _Source="PGLBL065.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" [0178.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0178.312] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25625600, ftCreationTime.dwHighDateTime=0x1c69b23, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25625600, ftLastWriteTime.dwHighDateTime=0x1c69b23, nFileSizeHigh=0x0, nFileSizeLow=0xacb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL075.XML", cAlternateFileName="")) returned 1 [0178.312] wcscmp (_String1="PGLBL075.XML", _String2=".") returned 1 [0178.312] wcscmp (_String1="PGLBL075.XML", _String2="..") returned 1 [0178.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d449f0 [0178.312] wcscpy (in: _Dest=0x3d449f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.312] wcscat (in: _Dest=0x3d449f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.312] wcscat (in: _Dest=0x3d449f0, _Source="PGLBL075.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" [0178.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d449f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0178.313] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9101f600, ftCreationTime.dwHighDateTime=0x1c6c59d, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9101f600, ftLastWriteTime.dwHighDateTime=0x1c6c59d, nFileSizeHigh=0x0, nFileSizeLow=0x6134, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL077.XML", cAlternateFileName="")) returned 1 [0178.313] wcscmp (_String1="PGLBL077.XML", _String2=".") returned 1 [0178.313] wcscmp (_String1="PGLBL077.XML", _String2="..") returned 1 [0178.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45da0 [0178.313] wcscpy (in: _Dest=0x3d45da0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.313] wcscat (in: _Dest=0x3d45da0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.313] wcscat (in: _Dest=0x3d45da0, _Source="PGLBL077.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" [0178.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45da0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0178.314] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8b8100, ftCreationTime.dwHighDateTime=0x1c6bf3f, ftLastAccessTime.dwLowDateTime=0x8faea270, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7c8b8100, ftLastWriteTime.dwHighDateTime=0x1c6bf3f, nFileSizeHigh=0x0, nFileSizeLow=0x753, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL078.XML", cAlternateFileName="")) returned 1 [0178.314] wcscmp (_String1="PGLBL078.XML", _String2=".") returned 1 [0178.314] wcscmp (_String1="PGLBL078.XML", _String2="..") returned 1 [0178.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45380 [0178.314] wcscpy (in: _Dest=0x3d45380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.314] wcscat (in: _Dest=0x3d45380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.314] wcscat (in: _Dest=0x3d45380, _Source="PGLBL078.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" [0178.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0178.315] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27334500, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fb103d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27334500, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0xe944e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL081.XML", cAlternateFileName="")) returned 1 [0178.315] wcscmp (_String1="PGLBL081.XML", _String2=".") returned 1 [0178.315] wcscmp (_String1="PGLBL081.XML", _String2="..") returned 1 [0178.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44330 [0178.315] wcscpy (in: _Dest=0x3d44330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.315] wcscat (in: _Dest=0x3d44330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.315] wcscat (in: _Dest=0x3d44330, _Source="PGLBL081.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" [0178.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0178.317] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc685900, ftCreationTime.dwHighDateTime=0x1ca0bba, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc685900, ftLastWriteTime.dwHighDateTime=0x1ca0bba, nFileSizeHigh=0x0, nFileSizeLow=0x38d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL082.XML", cAlternateFileName="")) returned 1 [0178.317] wcscmp (_String1="PGLBL082.XML", _String2=".") returned 1 [0178.317] wcscmp (_String1="PGLBL082.XML", _String2="..") returned 1 [0178.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44570 [0178.317] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.317] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.317] wcscat (in: _Dest=0x3d44570, _Source="PGLBL082.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" [0178.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0178.318] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64451000, ftCreationTime.dwHighDateTime=0x1ca264f, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64451000, ftLastWriteTime.dwHighDateTime=0x1ca264f, nFileSizeHigh=0x0, nFileSizeLow=0x8cda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL083.XML", cAlternateFileName="")) returned 1 [0178.318] wcscmp (_String1="PGLBL083.XML", _String2=".") returned 1 [0178.318] wcscmp (_String1="PGLBL083.XML", _String2="..") returned 1 [0178.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45530 [0178.318] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.318] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.318] wcscat (in: _Dest=0x3d45530, _Source="PGLBL083.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" [0178.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0178.319] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e48ff00, ftCreationTime.dwHighDateTime=0x1c6d8fb, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3e48ff00, ftLastWriteTime.dwHighDateTime=0x1c6d8fb, nFileSizeHigh=0x0, nFileSizeLow=0xab732, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL086.XML", cAlternateFileName="")) returned 1 [0178.319] wcscmp (_String1="PGLBL086.XML", _String2=".") returned 1 [0178.319] wcscmp (_String1="PGLBL086.XML", _String2="..") returned 1 [0178.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d443c0 [0178.319] wcscpy (in: _Dest=0x3d443c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.319] wcscat (in: _Dest=0x3d443c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.319] wcscat (in: _Dest=0x3d443c0, _Source="PGLBL086.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" [0178.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d443c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0178.320] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e0b7800, ftCreationTime.dwHighDateTime=0x1c6bf44, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7e0b7800, ftLastWriteTime.dwHighDateTime=0x1c6bf44, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL087.XML", cAlternateFileName="")) returned 1 [0178.320] wcscmp (_String1="PGLBL087.XML", _String2=".") returned 1 [0178.320] wcscmp (_String1="PGLBL087.XML", _String2="..") returned 1 [0178.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d452f0 [0178.320] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.320] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.321] wcscat (in: _Dest=0x3d452f0, _Source="PGLBL087.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" [0178.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0178.322] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc8ad00, ftCreationTime.dwHighDateTime=0x1ca0969, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dc8ad00, ftLastWriteTime.dwHighDateTime=0x1ca0969, nFileSizeHigh=0x0, nFileSizeLow=0xb532, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL089.XML", cAlternateFileName="")) returned 1 [0178.322] wcscmp (_String1="PGLBL089.XML", _String2=".") returned 1 [0178.322] wcscmp (_String1="PGLBL089.XML", _String2="..") returned 1 [0178.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d459b0 [0178.322] wcscpy (in: _Dest=0x3d459b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.322] wcscat (in: _Dest=0x3d459b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.322] wcscat (in: _Dest=0x3d459b0, _Source="PGLBL089.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" [0178.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d459b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0178.328] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf912800, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf912800, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x124b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL090.XML", cAlternateFileName="")) returned 1 [0178.328] wcscmp (_String1="PGLBL090.XML", _String2=".") returned 1 [0178.328] wcscmp (_String1="PGLBL090.XML", _String2="..") returned 1 [0178.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44720 [0178.328] wcscpy (in: _Dest=0x3d44720, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.328] wcscat (in: _Dest=0x3d44720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.328] wcscat (in: _Dest=0x3d44720, _Source="PGLBL090.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" [0178.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0178.333] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59976f00, ftCreationTime.dwHighDateTime=0x1ca1ba9, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x59976f00, ftLastWriteTime.dwHighDateTime=0x1ca1ba9, nFileSizeHigh=0x0, nFileSizeLow=0x19a22, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL092.XML", cAlternateFileName="")) returned 1 [0178.333] wcscmp (_String1="PGLBL092.XML", _String2=".") returned 1 [0178.333] wcscmp (_String1="PGLBL092.XML", _String2="..") returned 1 [0178.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44840 [0178.333] wcscpy (in: _Dest=0x3d44840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.333] wcscat (in: _Dest=0x3d44840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.334] wcscat (in: _Dest=0x3d44840, _Source="PGLBL092.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" [0178.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0178.335] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a2c900, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5a2c900, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0xb3da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL093.XML", cAlternateFileName="")) returned 1 [0178.335] wcscmp (_String1="PGLBL093.XML", _String2=".") returned 1 [0178.335] wcscmp (_String1="PGLBL093.XML", _String2="..") returned 1 [0178.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44600 [0178.335] wcscpy (in: _Dest=0x3d44600, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.335] wcscat (in: _Dest=0x3d44600, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.335] wcscat (in: _Dest=0x3d44600, _Source="PGLBL093.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" [0178.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0178.336] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e96300, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fb36530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7e96300, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x1a1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL095.XML", cAlternateFileName="")) returned 1 [0178.336] wcscmp (_String1="PGLBL095.XML", _String2=".") returned 1 [0178.336] wcscmp (_String1="PGLBL095.XML", _String2="..") returned 1 [0178.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45260 [0178.336] wcscpy (in: _Dest=0x3d45260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.336] wcscat (in: _Dest=0x3d45260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.336] wcscat (in: _Dest=0x3d45260, _Source="PGLBL095.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" [0178.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0178.338] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf107100, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcf107100, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x19ede, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL096.XML", cAlternateFileName="")) returned 1 [0178.338] wcscmp (_String1="PGLBL096.XML", _String2=".") returned 1 [0178.338] wcscmp (_String1="PGLBL096.XML", _String2="..") returned 1 [0178.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d442a0 [0178.338] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.338] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.338] wcscat (in: _Dest=0x3d442a0, _Source="PGLBL096.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" [0178.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0178.589] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4984100, ftCreationTime.dwHighDateTime=0x1c9ef7e, ftLastAccessTime.dwLowDateTime=0x81f07230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc4984100, ftLastWriteTime.dwHighDateTime=0x1c9ef7e, nFileSizeHigh=0x0, nFileSizeLow=0x80ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL097.XML", cAlternateFileName="")) returned 1 [0178.589] wcscmp (_String1="PGLBL097.XML", _String2=".") returned 1 [0178.590] wcscmp (_String1="PGLBL097.XML", _String2="..") returned 1 [0178.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d444e0 [0178.590] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.590] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.590] wcscat (in: _Dest=0x3d444e0, _Source="PGLBL097.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" [0178.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0178.710] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16a5500, ftCreationTime.dwHighDateTime=0x1c6d8fb, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc16a5500, ftLastWriteTime.dwHighDateTime=0x1c6d8fb, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL102.XML", cAlternateFileName="")) returned 1 [0178.710] wcscmp (_String1="PGLBL102.XML", _String2=".") returned 1 [0178.710] wcscmp (_String1="PGLBL102.XML", _String2="..") returned 1 [0178.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d44f90 [0178.710] wcscpy (in: _Dest=0x3d44f90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.710] wcscat (in: _Dest=0x3d44f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.710] wcscat (in: _Dest=0x3d44f90, _Source="PGLBL102.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" [0178.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0178.711] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda375800, ftCreationTime.dwHighDateTime=0x1ca0f79, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda375800, ftLastWriteTime.dwHighDateTime=0x1ca0f79, nFileSizeHigh=0x0, nFileSizeLow=0x27aee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL103.XML", cAlternateFileName="")) returned 1 [0178.711] wcscmp (_String1="PGLBL103.XML", _String2=".") returned 1 [0178.711] wcscmp (_String1="PGLBL103.XML", _String2="..") returned 1 [0178.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45920 [0178.711] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.711] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.711] wcscat (in: _Dest=0x3d45920, _Source="PGLBL103.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" [0178.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0178.712] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b52a500, ftCreationTime.dwHighDateTime=0x1ca1767, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8b52a500, ftLastWriteTime.dwHighDateTime=0x1ca1767, nFileSizeHigh=0x0, nFileSizeLow=0x1fcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL104.XML", cAlternateFileName="")) returned 1 [0178.712] wcscmp (_String1="PGLBL104.XML", _String2=".") returned 1 [0178.712] wcscmp (_String1="PGLBL104.XML", _String2="..") returned 1 [0178.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45a40 [0178.713] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0178.713] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0178.713] wcscat (in: _Dest=0x3d45a40, _Source="PGLBL104.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" [0178.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0178.714] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15339200, ftCreationTime.dwHighDateTime=0x1c9fa87, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15339200, ftLastWriteTime.dwHighDateTime=0x1c9fa87, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL105.XML", cAlternateFileName="")) returned 1 [0179.923] wcscmp (_String1="PGLBL105.XML", _String2=".") returned 1 [0179.924] wcscmp (_String1="PGLBL105.XML", _String2="..") returned 1 [0179.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d444e0 [0179.924] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0179.924] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0179.924] wcscat (in: _Dest=0x3d444e0, _Source="PGLBL105.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" [0181.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0181.050] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68305700, ftCreationTime.dwHighDateTime=0x1ca1ba6, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x68305700, ftLastWriteTime.dwHighDateTime=0x1ca1ba6, nFileSizeHigh=0x0, nFileSizeLow=0x9ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL106.XML", cAlternateFileName="")) returned 1 [0181.050] wcscmp (_String1="PGLBL106.XML", _String2=".") returned 1 [0181.050] wcscmp (_String1="PGLBL106.XML", _String2="..") returned 1 [0181.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45920 [0181.051] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.051] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.051] wcscat (in: _Dest=0x3d45920, _Source="PGLBL106.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" [0181.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0181.052] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda566b00, ftCreationTime.dwHighDateTime=0x1ca1ba9, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xda566b00, ftLastWriteTime.dwHighDateTime=0x1ca1ba9, nFileSizeHigh=0x0, nFileSizeLow=0x1d5c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL107.XML", cAlternateFileName="")) returned 1 [0181.052] wcscmp (_String1="PGLBL107.XML", _String2=".") returned 1 [0181.052] wcscmp (_String1="PGLBL107.XML", _String2="..") returned 1 [0181.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45a40 [0181.052] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.052] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.052] wcscat (in: _Dest=0x3d45a40, _Source="PGLBL107.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" [0181.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0181.054] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181e0800, ftCreationTime.dwHighDateTime=0x1c9f506, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x181e0800, ftLastWriteTime.dwHighDateTime=0x1c9f506, nFileSizeHigh=0x0, nFileSizeLow=0x2dbec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL108.XML", cAlternateFileName="")) returned 1 [0181.054] wcscmp (_String1="PGLBL108.XML", _String2=".") returned 1 [0181.054] wcscmp (_String1="PGLBL108.XML", _String2="..") returned 1 [0181.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d442a0 [0181.054] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.054] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.054] wcscat (in: _Dest=0x3d442a0, _Source="PGLBL108.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" [0181.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0181.055] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa03ff600, ftCreationTime.dwHighDateTime=0x1ca1525, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa03ff600, ftLastWriteTime.dwHighDateTime=0x1ca1525, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL109.XML", cAlternateFileName="")) returned 1 [0181.055] wcscmp (_String1="PGLBL109.XML", _String2=".") returned 1 [0181.055] wcscmp (_String1="PGLBL109.XML", _String2="..") returned 1 [0181.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d454a0 [0181.056] wcscpy (in: _Dest=0x3d454a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.056] wcscat (in: _Dest=0x3d454a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.056] wcscat (in: _Dest=0x3d454a0, _Source="PGLBL109.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" [0181.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d454a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0181.057] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf970d200, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf970d200, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0xcdbee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL110.XML", cAlternateFileName="")) returned 1 [0181.057] wcscmp (_String1="PGLBL110.XML", _String2=".") returned 1 [0181.057] wcscmp (_String1="PGLBL110.XML", _String2="..") returned 1 [0181.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d452f0 [0181.057] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.057] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.057] wcscat (in: _Dest=0x3d452f0, _Source="PGLBL110.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" [0181.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0181.062] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaa1ff00, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfaa1ff00, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0x40198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL111.XML", cAlternateFileName="")) returned 1 [0181.062] wcscmp (_String1="PGLBL111.XML", _String2=".") returned 1 [0181.062] wcscmp (_String1="PGLBL111.XML", _String2="..") returned 1 [0181.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45530 [0181.063] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.063] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.063] wcscat (in: _Dest=0x3d45530, _Source="PGLBL111.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" [0181.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0181.064] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35aee100, ftCreationTime.dwHighDateTime=0x1ca2cb0, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x35aee100, ftLastWriteTime.dwHighDateTime=0x1ca2cb0, nFileSizeHigh=0x0, nFileSizeLow=0x2247e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN001.XML", cAlternateFileName="")) returned 1 [0181.064] wcscmp (_String1="PGMN001.XML", _String2=".") returned 1 [0181.064] wcscmp (_String1="PGMN001.XML", _String2="..") returned 1 [0181.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a685e0 [0181.064] wcscpy (in: _Dest=0x7a685e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.064] wcscat (in: _Dest=0x7a685e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.064] wcscat (in: _Dest=0x7a685e0, _Source="PGMN001.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" [0181.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a685e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0181.066] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd32c00, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfbd32c00, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0xeb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN002.XML", cAlternateFileName="")) returned 1 [0181.066] wcscmp (_String1="PGMN002.XML", _String2=".") returned 1 [0181.066] wcscmp (_String1="PGMN002.XML", _String2="..") returned 1 [0181.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68668 [0181.066] wcscpy (in: _Dest=0x7a68668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.066] wcscat (in: _Dest=0x7a68668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.066] wcscat (in: _Dest=0x7a68668, _Source="PGMN002.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" [0181.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0181.068] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b1c900, ftCreationTime.dwHighDateTime=0x1c9f507, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1b1c900, ftLastWriteTime.dwHighDateTime=0x1c9f507, nFileSizeHigh=0x0, nFileSizeLow=0x1bc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN010.XML", cAlternateFileName="")) returned 1 [0181.068] wcscmp (_String1="PGMN010.XML", _String2=".") returned 1 [0181.068] wcscmp (_String1="PGMN010.XML", _String2="..") returned 1 [0181.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a686f0 [0181.069] wcscpy (in: _Dest=0x7a686f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.069] wcscat (in: _Dest=0x7a686f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.069] wcscat (in: _Dest=0x7a686f0, _Source="PGMN010.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" [0181.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a686f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0181.070] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2f3500, ftCreationTime.dwHighDateTime=0x1ca1b9e, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2a2f3500, ftLastWriteTime.dwHighDateTime=0x1ca1b9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN011.XML", cAlternateFileName="")) returned 1 [0181.070] wcscmp (_String1="PGMN011.XML", _String2=".") returned 1 [0181.070] wcscmp (_String1="PGMN011.XML", _String2="..") returned 1 [0181.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68778 [0181.070] wcscpy (in: _Dest=0x7a68778, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.070] wcscat (in: _Dest=0x7a68778, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.070] wcscat (in: _Dest=0x7a68778, _Source="PGMN011.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" [0181.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0181.071] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9198b500, ftCreationTime.dwHighDateTime=0x1ca1b9d, ftLastAccessTime.dwLowDateTime=0x8fb5c690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9198b500, ftLastWriteTime.dwHighDateTime=0x1ca1b9d, nFileSizeHigh=0x0, nFileSizeLow=0x2936, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN020.XML", cAlternateFileName="")) returned 1 [0181.071] wcscmp (_String1="PGMN020.XML", _String2=".") returned 1 [0181.072] wcscmp (_String1="PGMN020.XML", _String2="..") returned 1 [0181.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68910 [0181.072] wcscpy (in: _Dest=0x7a68910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.072] wcscat (in: _Dest=0x7a68910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.072] wcscat (in: _Dest=0x7a68910, _Source="PGMN020.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" [0181.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0181.073] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace3e200, ftCreationTime.dwHighDateTime=0x1ca070f, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xace3e200, ftLastWriteTime.dwHighDateTime=0x1ca070f, nFileSizeHigh=0x0, nFileSizeLow=0x167d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN022.XML", cAlternateFileName="")) returned 1 [0181.073] wcscmp (_String1="PGMN022.XML", _String2=".") returned 1 [0181.073] wcscmp (_String1="PGMN022.XML", _String2="..") returned 1 [0181.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68558 [0181.074] wcscpy (in: _Dest=0x7a68558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.074] wcscat (in: _Dest=0x7a68558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.074] wcscat (in: _Dest=0x7a68558, _Source="PGMN022.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" [0181.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0181.075] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8640e00, ftCreationTime.dwHighDateTime=0x1c6626a, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf8640e00, ftLastWriteTime.dwHighDateTime=0x1c6626a, nFileSizeHigh=0x0, nFileSizeLow=0x21be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN026.XML", cAlternateFileName="")) returned 1 [0181.075] wcscmp (_String1="PGMN026.XML", _String2=".") returned 1 [0181.075] wcscmp (_String1="PGMN026.XML", _String2="..") returned 1 [0181.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a684d0 [0181.075] wcscpy (in: _Dest=0x7a684d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.075] wcscat (in: _Dest=0x7a684d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.075] wcscat (in: _Dest=0x7a684d0, _Source="PGMN026.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" [0181.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a684d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0181.076] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe96d7200, ftCreationTime.dwHighDateTime=0x1c9f66a, ftLastAccessTime.dwLowDateTime=0x81f2d390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe96d7200, ftLastWriteTime.dwHighDateTime=0x1c9f66a, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN027.XML", cAlternateFileName="")) returned 1 [0181.076] wcscmp (_String1="PGMN027.XML", _String2=".") returned 1 [0181.076] wcscmp (_String1="PGMN027.XML", _String2="..") returned 1 [0181.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68448 [0181.077] wcscpy (in: _Dest=0x7a68448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.077] wcscat (in: _Dest=0x7a68448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.077] wcscat (in: _Dest=0x7a68448, _Source="PGMN027.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" [0181.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0181.102] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf57d5100, ftCreationTime.dwHighDateTime=0x1c9e396, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf57d5100, ftLastWriteTime.dwHighDateTime=0x1c9e396, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN044.XML", cAlternateFileName="")) returned 1 [0181.103] wcscmp (_String1="PGMN044.XML", _String2=".") returned 1 [0181.103] wcscmp (_String1="PGMN044.XML", _String2="..") returned 1 [0181.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68888 [0181.103] wcscpy (in: _Dest=0x7a68888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.103] wcscat (in: _Dest=0x7a68888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.103] wcscat (in: _Dest=0x7a68888, _Source="PGMN044.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" [0181.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018 [0181.104] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd768ac00, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd768ac00, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x9c4ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN048.XML", cAlternateFileName="")) returned 1 [0181.104] wcscmp (_String1="PGMN048.XML", _String2=".") returned 1 [0181.104] wcscmp (_String1="PGMN048.XML", _String2="..") returned 1 [0181.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ee8 [0181.104] wcscpy (in: _Dest=0x7a68ee8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.104] wcscat (in: _Dest=0x7a68ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.105] wcscat (in: _Dest=0x7a68ee8, _Source="PGMN048.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" [0181.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec [0181.106] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb648f00, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb648f00, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0x8250, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN054.XML", cAlternateFileName="")) returned 1 [0181.106] wcscmp (_String1="PGMN054.XML", _String2=".") returned 1 [0181.106] wcscmp (_String1="PGMN054.XML", _String2="..") returned 1 [0181.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68f70 [0181.106] wcscpy (in: _Dest=0x7a68f70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.106] wcscat (in: _Dest=0x7a68f70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.106] wcscat (in: _Dest=0x7a68f70, _Source="PGMN054.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" [0181.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44 [0181.108] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5d28800, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5d28800, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0x8e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN058.XML", cAlternateFileName="")) returned 1 [0181.108] wcscmp (_String1="PGMN058.XML", _String2=".") returned 1 [0181.108] wcscmp (_String1="PGMN058.XML", _String2="..") returned 1 [0181.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a68ff8 [0181.108] wcscpy (in: _Dest=0x7a68ff8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.108] wcscat (in: _Dest=0x7a68ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.108] wcscat (in: _Dest=0x7a68ff8, _Source="PGMN058.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" [0181.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0181.109] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1be4a00, ftCreationTime.dwHighDateTime=0x1ca1b92, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe1be4a00, ftLastWriteTime.dwHighDateTime=0x1ca1b92, nFileSizeHigh=0x0, nFileSizeLow=0x1326, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN065.XML", cAlternateFileName="")) returned 1 [0181.110] wcscmp (_String1="PGMN065.XML", _String2=".") returned 1 [0181.110] wcscmp (_String1="PGMN065.XML", _String2="..") returned 1 [0181.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69080 [0181.110] wcscpy (in: _Dest=0x7a69080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.110] wcscat (in: _Dest=0x7a69080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.110] wcscat (in: _Dest=0x7a69080, _Source="PGMN065.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" [0181.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0181.111] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cd97300, ftCreationTime.dwHighDateTime=0x1c694d2, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4cd97300, ftLastWriteTime.dwHighDateTime=0x1c694d2, nFileSizeHigh=0x0, nFileSizeLow=0x9ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN075.XML", cAlternateFileName="")) returned 1 [0181.111] wcscmp (_String1="PGMN075.XML", _String2=".") returned 1 [0181.111] wcscmp (_String1="PGMN075.XML", _String2="..") returned 1 [0181.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69108 [0181.111] wcscpy (in: _Dest=0x7a69108, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.111] wcscat (in: _Dest=0x7a69108, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.111] wcscat (in: _Dest=0x7a69108, _Source="PGMN075.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" [0181.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0181.112] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd9b100, ftCreationTime.dwHighDateTime=0x1ca04b7, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5bd9b100, ftLastWriteTime.dwHighDateTime=0x1ca04b7, nFileSizeHigh=0x0, nFileSizeLow=0x101198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN081.XML", cAlternateFileName="")) returned 1 [0181.112] wcscmp (_String1="PGMN081.XML", _String2=".") returned 1 [0181.112] wcscmp (_String1="PGMN081.XML", _String2="..") returned 1 [0181.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69190 [0181.112] wcscpy (in: _Dest=0x7a69190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.112] wcscat (in: _Dest=0x7a69190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.113] wcscat (in: _Dest=0x7a69190, _Source="PGMN081.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" [0181.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0181.114] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb372c00, ftCreationTime.dwHighDateTime=0x1ca0bba, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb372c00, ftLastWriteTime.dwHighDateTime=0x1ca0bba, nFileSizeHigh=0x0, nFileSizeLow=0x31a78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN082.XML", cAlternateFileName="")) returned 1 [0181.114] wcscmp (_String1="PGMN082.XML", _String2=".") returned 1 [0181.114] wcscmp (_String1="PGMN082.XML", _String2="..") returned 1 [0181.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69218 [0181.114] wcscpy (in: _Dest=0x7a69218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.114] wcscat (in: _Dest=0x7a69218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.114] wcscat (in: _Dest=0x7a69218, _Source="PGMN082.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" [0181.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0181.115] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb55bf00, ftCreationTime.dwHighDateTime=0x1c6a693, ftLastAccessTime.dwLowDateTime=0x8fb827f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbb55bf00, ftLastWriteTime.dwHighDateTime=0x1c6a693, nFileSizeHigh=0x0, nFileSizeLow=0x2d34, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN086.XML", cAlternateFileName="")) returned 1 [0181.115] wcscmp (_String1="PGMN086.XML", _String2=".") returned 1 [0181.115] wcscmp (_String1="PGMN086.XML", _String2="..") returned 1 [0181.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a692a0 [0181.115] wcscpy (in: _Dest=0x7a692a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.115] wcscat (in: _Dest=0x7a692a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.115] wcscat (in: _Dest=0x7a692a0, _Source="PGMN086.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" [0181.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a692a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0181.117] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc8ad00, ftCreationTime.dwHighDateTime=0x1ca0969, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7dc8ad00, ftLastWriteTime.dwHighDateTime=0x1ca0969, nFileSizeHigh=0x0, nFileSizeLow=0x11a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN089.XML", cAlternateFileName="")) returned 1 [0181.117] wcscmp (_String1="PGMN089.XML", _String2=".") returned 1 [0181.117] wcscmp (_String1="PGMN089.XML", _String2="..") returned 1 [0181.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69328 [0181.117] wcscpy (in: _Dest=0x7a69328, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.117] wcscat (in: _Dest=0x7a69328, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.117] wcscat (in: _Dest=0x7a69328, _Source="PGMN089.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" [0181.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0181.118] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f92d00, ftCreationTime.dwHighDateTime=0x1c6b560, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14f92d00, ftLastWriteTime.dwHighDateTime=0x1c6b560, nFileSizeHigh=0x0, nFileSizeLow=0xa246, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN090.XML", cAlternateFileName="")) returned 1 [0181.118] wcscmp (_String1="PGMN090.XML", _String2=".") returned 1 [0181.118] wcscmp (_String1="PGMN090.XML", _String2="..") returned 1 [0181.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a693b0 [0181.118] wcscpy (in: _Dest=0x7a693b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.118] wcscat (in: _Dest=0x7a693b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.118] wcscat (in: _Dest=0x7a693b0, _Source="PGMN090.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" [0181.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a693b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0181.119] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf90cd300, ftCreationTime.dwHighDateTime=0x1c679d5, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf90cd300, ftLastWriteTime.dwHighDateTime=0x1c679d5, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN092.XML", cAlternateFileName="")) returned 1 [0181.119] wcscmp (_String1="PGMN092.XML", _String2=".") returned 1 [0181.119] wcscmp (_String1="PGMN092.XML", _String2="..") returned 1 [0181.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69438 [0181.120] wcscpy (in: _Dest=0x7a69438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.120] wcscat (in: _Dest=0x7a69438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.120] wcscat (in: _Dest=0x7a69438, _Source="PGMN092.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" [0181.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418 [0181.710] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebaca900, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xebaca900, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x7aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN095.XML", cAlternateFileName="")) returned 1 [0181.710] wcscmp (_String1="PGMN095.XML", _String2=".") returned 1 [0181.710] wcscmp (_String1="PGMN095.XML", _String2="..") returned 1 [0181.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9f78 [0181.710] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0181.710] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0181.710] wcscat (in: _Dest=0x3eb9f78, _Source="PGMN095.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" [0184.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac [0184.330] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1a28a00, ftCreationTime.dwHighDateTime=0x1c9fe80, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf1a28a00, ftLastWriteTime.dwHighDateTime=0x1c9fe80, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN096.XML", cAlternateFileName="")) returned 1 [0184.330] wcscmp (_String1="PGMN096.XML", _String2=".") returned 1 [0184.330] wcscmp (_String1="PGMN096.XML", _String2="..") returned 1 [0184.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9670 [0184.330] wcscpy (in: _Dest=0x3eb9670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.330] wcscat (in: _Dest=0x3eb9670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.330] wcscat (in: _Dest=0x3eb9670, _Source="PGMN096.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" [0184.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8 [0184.331] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74afb200, ftCreationTime.dwHighDateTime=0x1ca1b9c, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x74afb200, ftLastWriteTime.dwHighDateTime=0x1ca1b9c, nFileSizeHigh=0x0, nFileSizeLow=0x11424, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN097.XML", cAlternateFileName="")) returned 1 [0184.331] wcscmp (_String1="PGMN097.XML", _String2=".") returned 1 [0184.331] wcscmp (_String1="PGMN097.XML", _String2="..") returned 1 [0184.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb99a0 [0184.331] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.331] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.331] wcscat (in: _Dest=0x3eb99a0, _Source="PGMN097.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" [0184.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0184.333] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c2eb600, ftCreationTime.dwHighDateTime=0x1c6c606, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2c2eb600, ftLastWriteTime.dwHighDateTime=0x1c6c606, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN102.XML", cAlternateFileName="")) returned 1 [0184.333] wcscmp (_String1="PGMN102.XML", _String2=".") returned 1 [0184.333] wcscmp (_String1="PGMN102.XML", _String2="..") returned 1 [0184.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba3b8 [0184.333] wcscpy (in: _Dest=0x3eba3b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.333] wcscat (in: _Dest=0x3eba3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.333] wcscat (in: _Dest=0x3eba3b8, _Source="PGMN102.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" [0184.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0184.334] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea9b0300, ftCreationTime.dwHighDateTime=0x1ca0f78, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xea9b0300, ftLastWriteTime.dwHighDateTime=0x1ca0f78, nFileSizeHigh=0x0, nFileSizeLow=0xde0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN103.XML", cAlternateFileName="")) returned 1 [0184.334] wcscmp (_String1="PGMN103.XML", _String2=".") returned 1 [0184.334] wcscmp (_String1="PGMN103.XML", _String2="..") returned 1 [0184.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9780 [0184.335] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.335] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.335] wcscat (in: _Dest=0x3eb9780, _Source="PGMN103.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" [0184.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0184.336] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15339200, ftCreationTime.dwHighDateTime=0x1c9fa87, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x15339200, ftLastWriteTime.dwHighDateTime=0x1c9fa87, nFileSizeHigh=0x0, nFileSizeLow=0xff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN105.XML", cAlternateFileName="")) returned 1 [0184.336] wcscmp (_String1="PGMN105.XML", _String2=".") returned 1 [0184.336] wcscmp (_String1="PGMN105.XML", _String2="..") returned 1 [0184.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9ef0 [0184.336] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.336] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.336] wcscat (in: _Dest=0x3eb9ef0, _Source="PGMN105.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" [0184.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0184.337] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cebdc00, ftCreationTime.dwHighDateTime=0x1c9fa8b, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7cebdc00, ftLastWriteTime.dwHighDateTime=0x1c9fa8b, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN107.XML", cAlternateFileName="")) returned 1 [0184.338] wcscmp (_String1="PGMN107.XML", _String2=".") returned 1 [0184.338] wcscmp (_String1="PGMN107.XML", _String2="..") returned 1 [0184.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9e68 [0184.338] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.338] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.338] wcscat (in: _Dest=0x3eb9e68, _Source="PGMN107.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" [0184.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0184.339] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181e0800, ftCreationTime.dwHighDateTime=0x1c9f506, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x181e0800, ftLastWriteTime.dwHighDateTime=0x1c9f506, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN108.XML", cAlternateFileName="")) returned 1 [0184.339] wcscmp (_String1="PGMN108.XML", _String2=".") returned 1 [0184.339] wcscmp (_String1="PGMN108.XML", _String2="..") returned 1 [0184.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9010 [0184.339] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.339] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.339] wcscat (in: _Dest=0x3eb9010, _Source="PGMN108.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" [0184.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c [0184.340] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c3a600, ftCreationTime.dwHighDateTime=0x1ca1526, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25c3a600, ftLastWriteTime.dwHighDateTime=0x1ca1526, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN109.XML", cAlternateFileName="")) returned 1 [0184.340] wcscmp (_String1="PGMN109.XML", _String2=".") returned 1 [0184.340] wcscmp (_String1="PGMN109.XML", _String2="..") returned 1 [0184.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb8b48 [0184.340] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.340] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.340] wcscat (in: _Dest=0x3eb8b48, _Source="PGMN109.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" [0184.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc [0184.342] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd045900, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x81f534f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfd045900, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0xcae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN110.XML", cAlternateFileName="")) returned 1 [0184.342] wcscmp (_String1="PGMN110.XML", _String2=".") returned 1 [0184.342] wcscmp (_String1="PGMN110.XML", _String2="..") returned 1 [0184.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba440 [0184.342] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.342] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.342] wcscat (in: _Dest=0x3eba440, _Source="PGMN110.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" [0184.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0184.344] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe358600, ftCreationTime.dwHighDateTime=0x1ca1aaf, ftLastAccessTime.dwLowDateTime=0x8fba8950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfe358600, ftLastWriteTime.dwHighDateTime=0x1ca1aaf, nFileSizeHigh=0x0, nFileSizeLow=0x45792, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN111.XML", cAlternateFileName="")) returned 1 [0184.344] wcscmp (_String1="PGMN111.XML", _String2=".") returned 1 [0184.344] wcscmp (_String1="PGMN111.XML", _String2="..") returned 1 [0184.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eba660 [0184.344] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.344] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.344] wcscat (in: _Dest=0x3eba660, _Source="PGMN111.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" [0184.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0184.345] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f088a00, ftCreationTime.dwHighDateTime=0x1ca2cb0, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f088a00, ftLastWriteTime.dwHighDateTime=0x1ca2cb0, nFileSizeHigh=0x0, nFileSizeLow=0x878c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 1 [0184.346] wcscmp (_String1="PG_INDEX.XML", _String2=".") returned 1 [0184.346] wcscmp (_String1="PG_INDEX.XML", _String2="..") returned 1 [0184.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d45770 [0184.346] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE" [0184.346] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\" [0184.346] wcscat (in: _Dest=0x3d45770, _Source="PG_INDEX.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" [0184.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0184.347] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f088a00, ftCreationTime.dwHighDateTime=0x1ca2cb0, ftLastAccessTime.dwLowDateTime=0x81ebaf70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1f088a00, ftLastWriteTime.dwHighDateTime=0x1ca2cb0, nFileSizeHigh=0x0, nFileSizeLow=0x878c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 0 [0184.347] FindClose (in: hFindFile=0x3e73d30 | out: hFindFile=0x3e73d30) returned 1 [0184.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5710) returned 1 [0184.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69e58) returned 1 Thread: id = 4569 os_tid = 0x1688 [0174.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest")) returned 0x20 [0175.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest", dwFileAttributes=0x20) returned 0 [0175.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.334] GetLastError () returned 0x5 [0175.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest", dwFileAttributes=0x20) returned 0 [0175.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61440) returned 1 Thread: id = 4570 os_tid = 0x168c [0174.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml")) returned 0x20 [0175.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML", dwFileAttributes=0x20) returned 0 [0175.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.337] GetLastError () returned 0x5 [0175.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML", dwFileAttributes=0x20) returned 0 [0175.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 Thread: id = 4571 os_tid = 0x1690 [0174.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml")) returned 0x20 [0175.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML", dwFileAttributes=0x20) returned 0 [0175.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.338] GetLastError () returned 0x5 [0175.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML", dwFileAttributes=0x20) returned 0 [0175.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 Thread: id = 4572 os_tid = 0x1694 [0174.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23680 [0174.238] wcscpy (in: _Dest=0x7a23680, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0174.239] wcscat (in: _Dest=0x7a23680, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0174.239] wcscat (in: _Dest=0x7a23680, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*" [0174.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0174.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b97b9f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xdf9a4690, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdf9a4690, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73df0 [0177.339] wcscmp (_String1=".", _String2=".") returned 0 [0177.339] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b97b9f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0xdf9a4690, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdf9a4690, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.339] wcscmp (_String1="..", _String2=".") returned 1 [0177.339] wcscmp (_String1="..", _String2="..") returned 0 [0177.339] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51037b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x51037b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51037b90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0177.339] wcscmp (_String1="1033", _String2=".") returned 1 [0177.339] wcscmp (_String1="1033", _String2="..") returned 1 [0177.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3e058 [0177.340] wcscpy (in: _Dest=0x3f3e058, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0177.340] wcscat (in: _Dest=0x3f3e058, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0177.340] wcscat (in: _Dest=0x3f3e058, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" [0178.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3e058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0178.245] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc970910, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xdc970910, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdc970910, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0178.245] wcscmp (_String1="1036", _String2=".") returned 1 [0178.245] wcscmp (_String1="1036", _String2="..") returned 1 [0178.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f998 [0178.245] wcscpy (in: _Dest=0x3f3f998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.245] wcscat (in: _Dest=0x3f3f998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.246] wcscat (in: _Dest=0x3f3f998, _Source="1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" [0178.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0178.247] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b9ede10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4b9ede10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b9ede10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0178.247] wcscmp (_String1="3082", _String2=".") returned 1 [0178.247] wcscmp (_String1="3082", _String2="..") returned 1 [0178.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x3f3f8a8 [0178.247] wcscpy (in: _Dest=0x3f3f8a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.247] wcscat (in: _Dest=0x3f3f8a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.247] wcscat (in: _Dest=0x3f3f8a8, _Source="3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" [0178.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3f3f8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2460 [0178.248] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe85f700, ftCreationTime.dwHighDateTime=0x1c4aa04, ftLastAccessTime.dwLowDateTime=0x515defd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfe85f700, ftLastWriteTime.dwHighDateTime=0x1c4aa04, nFileSizeHigh=0x0, nFileSizeLow=0x39cf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.LEX", cAlternateFileName="")) returned 1 [0178.248] wcscmp (_String1="MSGR3EN.LEX", _String2=".") returned 1 [0178.248] wcscmp (_String1="MSGR3EN.LEX", _String2="..") returned 1 [0178.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3cec8 [0178.248] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.248] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.248] wcscat (in: _Dest=0x3f3cec8, _Source="MSGR3EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" [0178.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0178.249] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431ab100, ftCreationTime.dwHighDateTime=0x1c0458a, ftLastAccessTime.dwLowDateTime=0x4ba86390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x431ab100, ftLastWriteTime.dwHighDateTime=0x1c0458a, nFileSizeHigh=0x0, nFileSizeLow=0x4112e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.LEX", cAlternateFileName="")) returned 1 [0178.249] wcscmp (_String1="MSGR3ES.LEX", _String2=".") returned 1 [0178.249] wcscmp (_String1="MSGR3ES.LEX", _String2="..") returned 1 [0178.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c070 [0178.249] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.249] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.249] wcscat (in: _Dest=0x3f3c070, _Source="MSGR3ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" [0178.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0178.250] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a18ce00, ftCreationTime.dwHighDateTime=0x1cba0b6, ftLastAccessTime.dwLowDateTime=0xdca7b2b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x9a18ce00, ftLastWriteTime.dwHighDateTime=0x1cba0b6, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.LEX", cAlternateFileName="")) returned 1 [0178.250] wcscmp (_String1="MSGR3FR.LEX", _String2=".") returned 1 [0178.250] wcscmp (_String1="MSGR3FR.LEX", _String2="..") returned 1 [0178.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c648 [0178.250] wcscpy (in: _Dest=0x3f3c648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.251] wcscat (in: _Dest=0x3f3c648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.251] wcscat (in: _Dest=0x3f3c648, _Source="MSGR3FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" [0178.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0178.251] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9554700, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xd886d030, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa9554700, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x2c788, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.DLL", cAlternateFileName="")) returned 1 [0178.251] wcscmp (_String1="MSHY7EN.DLL", _String2=".") returned 1 [0178.251] wcscmp (_String1="MSHY7EN.DLL", _String2="..") returned 1 [0178.251] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eafc200, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd8893190, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7eafc200, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x74000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.LEX", cAlternateFileName="")) returned 1 [0178.252] wcscmp (_String1="MSHY7EN.LEX", _String2=".") returned 1 [0178.252] wcscmp (_String1="MSHY7EN.LEX", _String2="..") returned 1 [0178.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d060 [0178.252] wcscpy (in: _Dest=0x3f3d060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.252] wcscat (in: _Dest=0x3f3d060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.252] wcscat (in: _Dest=0x3f3d060, _Source="MSHY7EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" [0178.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0178.253] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb96c2700, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf7691f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb96c2700, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x2c788, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.DLL", cAlternateFileName="")) returned 1 [0178.253] wcscmp (_String1="MSHY7ES.DLL", _String2=".") returned 1 [0178.253] wcscmp (_String1="MSHY7ES.DLL", _String2="..") returned 1 [0178.253] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82434900, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf78f350, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x82434900, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.LEX", cAlternateFileName="")) returned 1 [0178.253] wcscmp (_String1="MSHY7ES.LEX", _String2=".") returned 1 [0178.253] wcscmp (_String1="MSHY7ES.LEX", _String2="..") returned 1 [0178.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3db00 [0178.253] wcscpy (in: _Dest=0x3f3db00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.253] wcscat (in: _Dest=0x3f3db00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.253] wcscat (in: _Dest=0x3f3db00, _Source="MSHY7ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" [0178.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3db00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0178.254] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3764600, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdcb39990, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3764600, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x2c788, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.DLL", cAlternateFileName="")) returned 1 [0178.254] wcscmp (_String1="MSHY7FR.DLL", _String2=".") returned 1 [0178.254] wcscmp (_String1="MSHY7FR.DLL", _String2="..") returned 1 [0178.254] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe0ef00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcb5faf0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x7fe0ef00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x43c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.LEX", cAlternateFileName="")) returned 1 [0178.254] wcscmp (_String1="MSHY7FR.LEX", _String2=".") returned 1 [0178.254] wcscmp (_String1="MSHY7FR.LEX", _String2="..") returned 1 [0178.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d308 [0178.255] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.255] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.255] wcscat (in: _Dest=0x3f3d308, _Source="MSHY7FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" [0178.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0178.256] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3cd5a00, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xd899db30, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3cd5a00, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x183b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.DLL", cAlternateFileName="")) returned 1 [0178.256] wcscmp (_String1="MSSP7EN.DLL", _String2=".") returned 1 [0178.256] wcscmp (_String1="MSSP7EN.DLL", _String2="..") returned 1 [0178.256] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaacb4300, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd8f44f70, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xaacb4300, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.dub", cAlternateFileName="")) returned 1 [0178.256] wcscmp (_String1="MSSP7EN.dub", _String2=".") returned 1 [0178.256] wcscmp (_String1="MSSP7EN.dub", _String2="..") returned 1 [0178.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3bd40 [0178.256] wcscpy (in: _Dest=0x3f3bd40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.256] wcscat (in: _Dest=0x3f3bd40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.256] wcscat (in: _Dest=0x3f3bd40, _Source="MSSP7EN.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" [0178.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0178.257] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72857c00, ftCreationTime.dwHighDateTime=0x1cbae92, ftLastAccessTime.dwLowDateTime=0xd88b92f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x72857c00, ftLastWriteTime.dwHighDateTime=0x1cbae92, nFileSizeHigh=0x0, nFileSizeLow=0x145c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.LEX", cAlternateFileName="")) returned 1 [0178.257] wcscmp (_String1="MSSP7EN.LEX", _String2=".") returned 1 [0178.257] wcscmp (_String1="MSSP7EN.LEX", _String2="..") returned 1 [0178.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3be50 [0178.257] wcscpy (in: _Dest=0x3f3be50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.257] wcscat (in: _Dest=0x3f3be50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.257] wcscat (in: _Dest=0x3f3be50, _Source="MSSP7EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" [0178.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3be50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0178.258] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3cd5a00, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xdf8bfe50, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3cd5a00, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x183b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.DLL", cAlternateFileName="")) returned 1 [0178.258] wcscmp (_String1="MSSP7ES.DLL", _String2=".") returned 1 [0178.258] wcscmp (_String1="MSSP7ES.DLL", _String2="..") returned 1 [0178.258] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3237e00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf65e850, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3237e00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.dub", cAlternateFileName="")) returned 1 [0178.258] wcscmp (_String1="MSSP7ES.dub", _String2=".") returned 1 [0178.258] wcscmp (_String1="MSSP7ES.dub", _String2="..") returned 1 [0178.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c290 [0178.259] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.259] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.259] wcscat (in: _Dest=0x3f3c290, _Source="MSSP7ES.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" [0178.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0178.260] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3237e00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf7b54b0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xb3237e00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x1e0400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.LEX", cAlternateFileName="")) returned 1 [0178.260] wcscmp (_String1="MSSP7ES.LEX", _String2=".") returned 1 [0178.260] wcscmp (_String1="MSSP7ES.LEX", _String2="..") returned 1 [0178.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36f3e0 [0178.260] wcscpy (in: _Dest=0x36f3e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.260] wcscat (in: _Dest=0x36f3e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.260] wcscat (in: _Dest=0x36f3e0, _Source="MSSP7ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" [0178.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0178.261] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e19800, ftCreationTime.dwHighDateTime=0x1cbae99, ftLastAccessTime.dwLowDateTime=0xdccb6750, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa7e19800, ftLastWriteTime.dwHighDateTime=0x1cbae99, nFileSizeHigh=0x0, nFileSizeLow=0x183b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.DLL", cAlternateFileName="")) returned 1 [0178.261] wcscmp (_String1="MSSP7FR.DLL", _String2=".") returned 1 [0178.261] wcscmp (_String1="MSSP7FR.DLL", _String2="..") returned 1 [0178.261] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5eca00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdd094b10, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xae5eca00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.dub", cAlternateFileName="")) returned 1 [0178.261] wcscmp (_String1="MSSP7FR.dub", _String2=".") returned 1 [0178.261] wcscmp (_String1="MSSP7FR.dub", _String2="..") returned 1 [0178.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36e500 [0178.261] wcscpy (in: _Dest=0x36e500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.261] wcscat (in: _Dest=0x36e500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.261] wcscat (in: _Dest=0x36e500, _Source="MSSP7FR.dub" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" [0178.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0178.262] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5eca00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcbabdb0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xae5eca00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x1b1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.LEX", cAlternateFileName="")) returned 1 [0178.262] wcscmp (_String1="MSSP7FR.LEX", _String2=".") returned 1 [0178.262] wcscmp (_String1="MSSP7FR.LEX", _String2="..") returned 1 [0178.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36e588 [0178.262] wcscpy (in: _Dest=0x36e588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.262] wcscat (in: _Dest=0x36e588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.262] wcscat (in: _Dest=0x36e588, _Source="MSSP7FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" [0178.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0178.263] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec171f00, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xd8a82370, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xec171f00, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x53780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7EN.DLL", cAlternateFileName="")) returned 1 [0178.263] wcscmp (_String1="MSTH7EN.DLL", _String2=".") returned 1 [0178.263] wcscmp (_String1="MSTH7EN.DLL", _String2="..") returned 1 [0178.263] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e25d00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xd8a0ff50, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x60e25d00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x40dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7EN.LEX", cAlternateFileName="")) returned 1 [0178.263] wcscmp (_String1="MSTH7EN.LEX", _String2=".") returned 1 [0178.264] wcscmp (_String1="MSTH7EN.LEX", _String2="..") returned 1 [0178.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36fc60 [0178.264] wcscpy (in: _Dest=0x36fc60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.264] wcscat (in: _Dest=0x36fc60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.264] wcscat (in: _Dest=0x36fc60, _Source="MSTH7EN.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" [0178.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36fc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0178.268] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1e0b00, ftCreationTime.dwHighDateTime=0x1cba0c7, ftLastAccessTime.dwLowDateTime=0xdf9ca7f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xab1e0b00, ftLastWriteTime.dwHighDateTime=0x1cba0c7, nFileSizeHigh=0x0, nFileSizeLow=0x53780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7ES.DLL", cAlternateFileName="")) returned 1 [0178.268] wcscmp (_String1="MSTH7ES.DLL", _String2=".") returned 1 [0178.268] wcscmp (_String1="MSTH7ES.DLL", _String2="..") returned 1 [0178.268] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693a9800, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdf932270, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x693a9800, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0x5b3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7ES.LEX", cAlternateFileName="")) returned 1 [0178.268] wcscmp (_String1="MSTH7ES.LEX", _String2=".") returned 1 [0178.268] wcscmp (_String1="MSTH7ES.LEX", _String2="..") returned 1 [0178.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36e830 [0178.268] wcscpy (in: _Dest=0x36e830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.268] wcscat (in: _Dest=0x36e830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.268] wcscat (in: _Dest=0x36e830, _Source="MSTH7ES.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" [0178.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0178.270] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35f6600, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdce59670, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xa35f6600, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0x53780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.DLL", cAlternateFileName="")) returned 1 [0178.270] wcscmp (_String1="MSTH7FR.DLL", _String2=".") returned 1 [0178.270] wcscmp (_String1="MSTH7FR.DLL", _String2="..") returned 1 [0178.270] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62138a00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcdc10f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x62138a00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xc6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.LEX", cAlternateFileName="")) returned 1 [0178.270] wcscmp (_String1="MSTH7FR.LEX", _String2=".") returned 1 [0178.270] wcscmp (_String1="MSTH7FR.LEX", _String2="..") returned 1 [0178.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36ed80 [0178.270] wcscpy (in: _Dest=0x36ed80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF" [0178.270] wcscat (in: _Dest=0x36ed80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\" [0178.270] wcscat (in: _Dest=0x36ed80, _Source="MSTH7FR.LEX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" [0178.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ed80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0178.271] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62138a00, ftCreationTime.dwHighDateTime=0x1cba0ba, ftLastAccessTime.dwLowDateTime=0xdcdc10f0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0x62138a00, ftLastWriteTime.dwHighDateTime=0x1cba0ba, nFileSizeHigh=0x0, nFileSizeLow=0xc6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTH7FR.LEX", cAlternateFileName="")) returned 0 [0178.271] FindClose (in: hFindFile=0x3e73df0 | out: hFindFile=0x3e73df0) returned 1 [0178.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0178.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23680) returned 1 [0178.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a235a0) returned 1 Thread: id = 4573 os_tid = 0x1698 [0174.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x66) returned 0x7a23450 [0174.239] wcscpy (in: _Dest=0x7a23450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0174.239] wcscat (in: _Dest=0x7a23450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0174.239] wcscat (in: _Dest=0x7a23450, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*" [0174.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef37c8 [0174.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80bd60d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd28f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73470 [0177.375] wcscmp (_String1=".", _String2=".") returned 0 [0177.375] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80bd60d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd28f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.375] wcscmp (_String1="..", _String2=".") returned 1 [0177.375] wcscmp (_String1="..", _String2="..") returned 0 [0177.375] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xca60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB10.BDR", cAlternateFileName="")) returned 1 [0177.375] wcscmp (_String1="MSPUB10.BDR", _String2=".") returned 1 [0177.375] wcscmp (_String1="MSPUB10.BDR", _String2="..") returned 1 [0177.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba770 [0177.375] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0177.375] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0177.375] wcscat (in: _Dest=0x3eba770, _Source="MSPUB10.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" [0177.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0177.961] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x69e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB11.BDR", cAlternateFileName="")) returned 1 [0177.961] wcscmp (_String1="MSPUB11.BDR", _String2=".") returned 1 [0177.961] wcscmp (_String1="MSPUB11.BDR", _String2="..") returned 1 [0177.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9098 [0177.961] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0177.961] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0177.961] wcscat (in: _Dest=0x3eb9098, _Source="MSPUB11.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" [0177.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0177.990] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xf254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1A.BDR", cAlternateFileName="")) returned 1 [0177.990] wcscmp (_String1="MSPUB1A.BDR", _String2=".") returned 1 [0177.990] wcscmp (_String1="MSPUB1A.BDR", _String2="..") returned 1 [0177.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8ce0 [0177.991] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0177.991] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0177.991] wcscat (in: _Dest=0x3eb8ce0, _Source="MSPUB1A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" [0178.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4 [0178.516] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bd60d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1B.BDR", cAlternateFileName="")) returned 1 [0178.517] wcscmp (_String1="MSPUB1B.BDR", _String2=".") returned 1 [0178.517] wcscmp (_String1="MSPUB1B.BDR", _String2="..") returned 1 [0178.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3062988 [0178.517] wcscpy (in: _Dest=0x3062988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.517] wcscat (in: _Dest=0x3062988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.517] wcscat (in: _Dest=0x3062988, _Source="MSPUB1B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" [0178.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0178.518] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xc8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2A.BDR", cAlternateFileName="")) returned 1 [0178.518] wcscmp (_String1="MSPUB2A.BDR", _String2=".") returned 1 [0178.518] wcscmp (_String1="MSPUB2A.BDR", _String2="..") returned 1 [0178.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36e478 [0178.518] wcscpy (in: _Dest=0x36e478, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.518] wcscat (in: _Dest=0x36e478, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.518] wcscat (in: _Dest=0x36e478, _Source="MSPUB2A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" [0178.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0178.520] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2B.BDR", cAlternateFileName="")) returned 1 [0178.520] wcscmp (_String1="MSPUB2B.BDR", _String2=".") returned 1 [0178.520] wcscmp (_String1="MSPUB2B.BDR", _String2="..") returned 1 [0178.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x36ead8 [0178.520] wcscpy (in: _Dest=0x36ead8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.520] wcscat (in: _Dest=0x36ead8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.520] wcscat (in: _Dest=0x36ead8, _Source="MSPUB2B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" [0178.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x36ead8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64 [0178.522] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xde58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3A.BDR", cAlternateFileName="")) returned 1 [0178.522] wcscmp (_String1="MSPUB3A.BDR", _String2=".") returned 1 [0178.522] wcscmp (_String1="MSPUB3A.BDR", _String2="..") returned 1 [0178.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ba20 [0178.522] wcscpy (in: _Dest=0x3e1ba20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.522] wcscat (in: _Dest=0x3e1ba20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.522] wcscat (in: _Dest=0x3e1ba20, _Source="MSPUB3A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" [0178.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0178.523] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xf4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3B.BDR", cAlternateFileName="")) returned 1 [0178.524] wcscmp (_String1="MSPUB3B.BDR", _String2=".") returned 1 [0178.524] wcscmp (_String1="MSPUB3B.BDR", _String2="..") returned 1 [0178.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1b888 [0178.524] wcscpy (in: _Dest=0x3e1b888, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.524] wcscat (in: _Dest=0x3e1b888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.524] wcscat (in: _Dest=0x3e1b888, _Source="MSPUB3B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" [0178.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1b888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0178.525] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xc144, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB4.BDR", cAlternateFileName="")) returned 1 [0178.525] wcscmp (_String1="MSPUB4.BDR", _String2=".") returned 1 [0178.525] wcscmp (_String1="MSPUB4.BDR", _String2="..") returned 1 [0178.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a598 [0178.525] wcscpy (in: _Dest=0x3e1a598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.525] wcscat (in: _Dest=0x3e1a598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.526] wcscat (in: _Dest=0x3e1a598, _Source="MSPUB4.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" [0178.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0178.527] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xcfb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5A.BDR", cAlternateFileName="")) returned 1 [0178.527] wcscmp (_String1="MSPUB5A.BDR", _String2=".") returned 1 [0178.527] wcscmp (_String1="MSPUB5A.BDR", _String2="..") returned 1 [0178.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1ced8 [0178.527] wcscpy (in: _Dest=0x3e1ced8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.527] wcscat (in: _Dest=0x3e1ced8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.527] wcscat (in: _Dest=0x3e1ced8, _Source="MSPUB5A.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" [0178.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ced8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0178.529] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x2476, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5B.BDR", cAlternateFileName="")) returned 1 [0178.529] wcscmp (_String1="MSPUB5B.BDR", _String2=".") returned 1 [0178.529] wcscmp (_String1="MSPUB5B.BDR", _String2="..") returned 1 [0178.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3e1bd50 [0178.529] wcscpy (in: _Dest=0x3e1bd50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.529] wcscat (in: _Dest=0x3e1bd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.529] wcscat (in: _Dest=0x3e1bd50, _Source="MSPUB5B.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" [0178.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0178.530] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x7f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB6.BDR", cAlternateFileName="")) returned 1 [0178.530] wcscmp (_String1="MSPUB6.BDR", _String2=".") returned 1 [0178.531] wcscmp (_String1="MSPUB6.BDR", _String2="..") returned 1 [0178.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1ab98 [0178.531] wcscpy (in: _Dest=0x3e1ab98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.531] wcscat (in: _Dest=0x3e1ab98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.531] wcscat (in: _Dest=0x3e1ab98, _Source="MSPUB6.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" [0178.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ab98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0178.532] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x799a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB7.BDR", cAlternateFileName="")) returned 1 [0178.532] wcscmp (_String1="MSPUB7.BDR", _String2=".") returned 1 [0178.532] wcscmp (_String1="MSPUB7.BDR", _String2="..") returned 1 [0178.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19718 [0178.532] wcscpy (in: _Dest=0x3e19718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.532] wcscat (in: _Dest=0x3e19718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.533] wcscat (in: _Dest=0x3e19718, _Source="MSPUB7.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" [0178.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474 [0178.534] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x8dd28f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB8.BDR", cAlternateFileName="")) returned 1 [0178.534] wcscmp (_String1="MSPUB8.BDR", _String2=".") returned 1 [0178.534] wcscmp (_String1="MSPUB8.BDR", _String2="..") returned 1 [0178.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19198 [0178.534] wcscpy (in: _Dest=0x3e19198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.534] wcscat (in: _Dest=0x3e19198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.534] wcscat (in: _Dest=0x3e19198, _Source="MSPUB8.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" [0178.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0178.536] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 1 [0178.536] wcscmp (_String1="MSPUB9.BDR", _String2=".") returned 1 [0178.536] wcscmp (_String1="MSPUB9.BDR", _String2="..") returned 1 [0178.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a018 [0178.536] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA" [0178.536] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\" [0178.536] wcscat (in: _Dest=0x3e1a018, _Source="MSPUB9.BDR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" [0178.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0178.543] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2133600, ftCreationTime.dwHighDateTime=0x1c45945, ftLastAccessTime.dwLowDateTime=0x80bfc230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2133600, ftLastWriteTime.dwHighDateTime=0x1c45945, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 0 [0178.543] FindClose (in: hFindFile=0x3e73470 | out: hFindFile=0x3e73470) returned 1 [0178.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0178.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 [0178.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23290) returned 1 Thread: id = 4574 os_tid = 0x16a4 [0174.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x68) returned 0x7a23e60 [0174.240] wcscpy (in: _Dest=0x7a23e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0174.240] wcscat (in: _Dest=0x7a23e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0174.240] wcscat (in: _Dest=0x7a23e60, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*" [0174.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5be0 [0174.240] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924460b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73e30 [0180.021] wcscmp (_String1=".", _String2=".") returned 0 [0180.021] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x764e9a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x924460b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.707] wcscmp (_String1="..", _String2=".") returned 1 [0180.707] wcscmp (_String1="..", _String2="..") returned 0 [0180.707] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x855ecd90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x2d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCSBAR.POC", cAlternateFileName="")) returned 1 [0180.707] wcscmp (_String1="ACCSBAR.POC", _String2=".") returned 1 [0180.707] wcscmp (_String1="ACCSBAR.POC", _String2="..") returned 1 [0180.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3e1bd50 [0180.707] wcscpy (in: _Dest=0x3e1bd50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0180.707] wcscat (in: _Dest=0x3e1bd50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0180.707] wcscat (in: _Dest=0x3e1bd50, _Source="ACCSBAR.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" [0183.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1bd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2208 [0183.301] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x855ecd90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1cba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCTBOX.POC", cAlternateFileName="")) returned 1 [0183.301] wcscmp (_String1="ACCTBOX.POC", _String2=".") returned 1 [0183.301] wcscmp (_String1="ACCTBOX.POC", _String2="..") returned 1 [0183.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba770 [0183.301] wcscpy (in: _Dest=0x3eba770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.301] wcscat (in: _Dest=0x3eba770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.301] wcscat (in: _Dest=0x3eba770, _Source="ACCTBOX.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" [0183.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0183.302] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabbe0b00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabbe0b00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x5f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.DPV", cAlternateFileName="")) returned 1 [0183.302] wcscmp (_String1="AD.DPV", _String2=".") returned 1 [0183.302] wcscmp (_String1="AD.DPV", _String2="..") returned 1 [0183.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47398 [0183.303] wcscpy (in: _Dest=0x3e47398, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.303] wcscat (in: _Dest=0x3e47398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.303] wcscat (in: _Dest=0x3e47398, _Source="AD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" [0183.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0183.304] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82f2f00, ftCreationTime.dwHighDateTime=0x1c91826, ftLastAccessTime.dwLowDateTime=0x764e9a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe82f2f00, ftLastWriteTime.dwHighDateTime=0x1c91826, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.XML", cAlternateFileName="")) returned 1 [0183.304] wcscmp (_String1="AD.XML", _String2=".") returned 1 [0183.304] wcscmp (_String1="AD.XML", _String2="..") returned 1 [0183.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e47c98 [0183.304] wcscpy (in: _Dest=0x3e47c98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.304] wcscat (in: _Dest=0x3e47c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.304] wcscat (in: _Dest=0x3e47c98, _Source="AD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" [0183.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0183.305] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xb95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD98.POC", cAlternateFileName="")) returned 1 [0183.305] wcscmp (_String1="AD98.POC", _String2=".") returned 1 [0183.305] wcscmp (_String1="AD98.POC", _String2="..") returned 1 [0183.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46f98 [0183.306] wcscpy (in: _Dest=0x3e46f98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.306] wcscat (in: _Dest=0x3e46f98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.306] wcscat (in: _Dest=0x3e46f98, _Source="AD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" [0183.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0183.307] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f178200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76535cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f178200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x854, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADRESPEL.POC", cAlternateFileName="")) returned 1 [0183.307] wcscmp (_String1="ADRESPEL.POC", _String2=".") returned 1 [0183.307] wcscmp (_String1="ADRESPEL.POC", _String2="..") returned 1 [0183.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9918 [0183.307] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.307] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.307] wcscat (in: _Dest=0x3eb9918, _Source="ADRESPEL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" [0183.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0183.337] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76640670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x594c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR98.POC", cAlternateFileName="")) returned 1 [0183.337] wcscmp (_String1="AIR98.POC", _String2=".") returned 1 [0183.337] wcscmp (_String1="AIR98.POC", _String2="..") returned 1 [0183.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e46f18 [0183.337] wcscpy (in: _Dest=0x3e46f18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.337] wcscat (in: _Dest=0x3e46f18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.337] wcscat (in: _Dest=0x3e46f18, _Source="AIR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" [0183.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e46f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0183.338] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa402, dwReserved0=0x0, dwReserved1=0x0, cFileName="AWARDHM.POC", cAlternateFileName="")) returned 1 [0183.338] wcscmp (_String1="AWARDHM.POC", _String2=".") returned 1 [0183.338] wcscmp (_String1="AWARDHM.POC", _String2="..") returned 1 [0183.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9d58 [0183.339] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.339] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.339] wcscat (in: _Dest=0x3eb9d58, _Source="AWARDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" [0183.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0183.346] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x91cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BAN98.POC", cAlternateFileName="")) returned 1 [0183.346] wcscmp (_String1="BAN98.POC", _String2=".") returned 1 [0183.346] wcscmp (_String1="BAN98.POC", _String2="..") returned 1 [0183.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47518 [0183.346] wcscpy (in: _Dest=0x3e47518, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.346] wcscat (in: _Dest=0x3e47518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.346] wcscat (in: _Dest=0x3e47518, _Source="BAN98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" [0183.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0183.348] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabbe0b00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabbe0b00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xd2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.DPV", cAlternateFileName="")) returned 1 [0183.348] wcscmp (_String1="BANNER.DPV", _String2=".") returned 1 [0183.348] wcscmp (_String1="BANNER.DPV", _String2="..") returned 1 [0183.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9098 [0183.348] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.348] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.348] wcscat (in: _Dest=0x3eb9098, _Source="BANNER.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" [0183.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40 [0183.349] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5075b00, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd5075b00, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0x236c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.XML", cAlternateFileName="")) returned 1 [0183.350] wcscmp (_String1="BANNER.XML", _String2=".") returned 1 [0183.350] wcscmp (_String1="BANNER.XML", _String2="..") returned 1 [0183.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9340 [0183.350] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.350] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.350] wcscat (in: _Dest=0x3eb9340, _Source="BANNER.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" [0183.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0183.351] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4048af00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76c0dc10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4048af00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x4d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BDRTKFUL.POC", cAlternateFileName="")) returned 1 [0183.351] wcscmp (_String1="BDRTKFUL.POC", _String2=".") returned 1 [0183.351] wcscmp (_String1="BDRTKFUL.POC", _String2="..") returned 1 [0183.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb91a8 [0183.351] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.351] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.351] wcscat (in: _Dest=0x3eb91a8, _Source="BDRTKFUL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" [0183.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0183.353] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae206500, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae206500, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x3f40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZCARD.DPV", cAlternateFileName="")) returned 1 [0183.353] wcscmp (_String1="BIZCARD.DPV", _String2=".") returned 1 [0183.353] wcscmp (_String1="BIZCARD.DPV", _String2="..") returned 1 [0183.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb95e8 [0183.353] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.353] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.353] wcscat (in: _Dest=0x3eb95e8, _Source="BIZCARD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" [0183.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0183.354] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd02c200, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd02c200, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x31ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZCARD.XML", cAlternateFileName="")) returned 1 [0183.354] wcscmp (_String1="BIZCARD.XML", _String2=".") returned 1 [0183.354] wcscmp (_String1="BIZCARD.XML", _String2="..") returned 1 [0183.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9120 [0183.354] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.354] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.354] wcscat (in: _Dest=0x3eb9120, _Source="BIZCARD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" [0183.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0183.356] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0c4700, ftCreationTime.dwHighDateTime=0x1c5eecc, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f0c4700, ftLastWriteTime.dwHighDateTime=0x1c5eecc, nFileSizeHigh=0x0, nFileSizeLow=0x1b7ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZFORM.DPV", cAlternateFileName="")) returned 1 [0183.356] wcscmp (_String1="BIZFORM.DPV", _String2=".") returned 1 [0183.356] wcscmp (_String1="BIZFORM.DPV", _String2="..") returned 1 [0183.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8f88 [0183.357] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.357] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.357] wcscat (in: _Dest=0x3eb8f88, _Source="BIZFORM.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" [0183.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0183.358] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceb4a500, ftCreationTime.dwHighDateTime=0x1ca5cbd, ftLastAccessTime.dwLowDateTime=0x86a4e9f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xceb4a500, ftLastWriteTime.dwHighDateTime=0x1ca5cbd, nFileSizeHigh=0x0, nFileSizeLow=0x10a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZFORM.XML", cAlternateFileName="")) returned 1 [0183.358] wcscmp (_String1="BIZFORM.XML", _String2=".") returned 1 [0183.358] wcscmp (_String1="BIZFORM.XML", _String2="..") returned 1 [0183.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9c48 [0183.358] wcscpy (in: _Dest=0x3eb9c48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.358] wcscat (in: _Dest=0x3eb9c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.358] wcscat (in: _Dest=0x3eb9c48, _Source="BIZFORM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" [0183.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0183.359] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3378a00, ftCreationTime.dwHighDateTime=0x1c9c8e6, ftLastAccessTime.dwLowDateTime=0x76d185b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc3378a00, ftLastWriteTime.dwHighDateTime=0x1c9c8e6, nFileSizeHigh=0x0, nFileSizeLow=0xf0ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERBB.DPV", cAlternateFileName="")) returned 1 [0183.359] wcscmp (_String1="BORDERBB.DPV", _String2=".") returned 1 [0183.359] wcscmp (_String1="BORDERBB.DPV", _String2="..") returned 1 [0183.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb92b8 [0183.360] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.360] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.360] wcscat (in: _Dest=0x3eb92b8, _Source="BORDERBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" [0183.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0183.361] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd923ec00, ftCreationTime.dwHighDateTime=0x1c97a67, ftLastAccessTime.dwLowDateTime=0x86ac0e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd923ec00, ftLastWriteTime.dwHighDateTime=0x1c97a67, nFileSizeHigh=0x0, nFileSizeLow=0x4e42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERBB.POC", cAlternateFileName="")) returned 1 [0183.361] wcscmp (_String1="BORDERBB.POC", _String2=".") returned 1 [0183.361] wcscmp (_String1="BORDERBB.POC", _String2="..") returned 1 [0183.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba4c8 [0183.361] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.361] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.361] wcscat (in: _Dest=0x3eba4c8, _Source="BORDERBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" [0183.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0183.363] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450d6300, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86ac0e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x450d6300, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3f046, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCH98SP.POC", cAlternateFileName="")) returned 1 [0183.363] wcscmp (_String1="BRCH98SP.POC", _String2=".") returned 1 [0183.363] wcscmp (_String1="BRCH98SP.POC", _String2="..") returned 1 [0183.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9450 [0183.363] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.363] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.363] wcscat (in: _Dest=0x3eb9450, _Source="BRCH98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" [0183.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb8 [0183.364] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc7f800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4fc7f800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x98f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCHUR11.POC", cAlternateFileName="")) returned 1 [0183.364] wcscmp (_String1="BRCHUR11.POC", _String2=".") returned 1 [0183.364] wcscmp (_String1="BRCHUR11.POC", _String2="..") returned 1 [0183.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9de0 [0183.365] wcscpy (in: _Dest=0x3eb9de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.365] wcscat (in: _Dest=0x3eb9de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.365] wcscat (in: _Dest=0x3eb9de0, _Source="BRCHUR11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" [0183.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0183.366] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x243f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCHUR98.POC", cAlternateFileName="")) returned 1 [0183.366] wcscmp (_String1="BRCHUR98.POC", _String2=".") returned 1 [0183.366] wcscmp (_String1="BRCHUR98.POC", _String2="..") returned 1 [0183.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8f00 [0183.366] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.366] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.366] wcscat (in: _Dest=0x3eb8f00, _Source="BRCHUR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" [0183.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270 [0183.367] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1333500, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1333500, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xa7190, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROCHURE.DPV", cAlternateFileName="")) returned 1 [0183.367] wcscmp (_String1="BROCHURE.DPV", _String2=".") returned 1 [0183.367] wcscmp (_String1="BROCHURE.DPV", _String2="..") returned 1 [0183.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8df0 [0183.368] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.368] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.368] wcscat (in: _Dest=0x3eb8df0, _Source="BROCHURE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" [0183.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0 [0183.369] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad53ba00, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x86b0d0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad53ba00, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x757a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROCHURE.XML", cAlternateFileName="")) returned 1 [0183.369] wcscmp (_String1="BROCHURE.XML", _String2=".") returned 1 [0183.369] wcscmp (_String1="BROCHURE.XML", _String2="..") returned 1 [0183.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8d68 [0183.369] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.369] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.369] wcscat (in: _Dest=0x3eb8d68, _Source="BROCHURE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" [0183.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0 [0183.370] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS2BARB.POC", cAlternateFileName="")) returned 1 [0183.370] wcscmp (_String1="BS2BARB.POC", _String2=".") returned 1 [0183.370] wcscmp (_String1="BS2BARB.POC", _String2="..") returned 1 [0183.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9a28 [0183.371] wcscpy (in: _Dest=0x3eb9a28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.371] wcscat (in: _Dest=0x3eb9a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.371] wcscat (in: _Dest=0x3eb9a28, _Source="BS2BARB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" [0183.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0183.585] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76d8a9d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS4BOXES.POC", cAlternateFileName="")) returned 1 [0183.585] wcscmp (_String1="BS4BOXES.POC", _String2=".") returned 1 [0183.585] wcscmp (_String1="BS4BOXES.POC", _String2="..") returned 1 [0183.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb94d8 [0183.585] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0183.585] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0183.585] wcscat (in: _Dest=0x3eb94d8, _Source="BS4BOXES.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" [0184.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060 [0184.318] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS53BOXS.POC", cAlternateFileName="")) returned 1 [0184.318] wcscmp (_String1="BS53BOXS.POC", _String2=".") returned 1 [0184.318] wcscmp (_String1="BS53BOXS.POC", _String2="..") returned 1 [0184.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb96f8 [0184.318] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.318] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.318] wcscat (in: _Dest=0x3eb96f8, _Source="BS53BOXS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" [0184.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0184.319] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec68a00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ec68a00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x12c2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCARD11.POC", cAlternateFileName="")) returned 1 [0184.319] wcscmp (_String1="BZCARD11.POC", _String2=".") returned 1 [0184.319] wcscmp (_String1="BZCARD11.POC", _String2="..") returned 1 [0184.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8ce0 [0184.319] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.319] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.319] wcscat (in: _Dest=0x3eb8ce0, _Source="BZCARD11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" [0184.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0184.320] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff7b700, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76db0b30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ff7b700, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xe6f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCARDHM.POC", cAlternateFileName="")) returned 1 [0184.320] wcscmp (_String1="BZCARDHM.POC", _String2=".") returned 1 [0184.320] wcscmp (_String1="BZCARDHM.POC", _String2="..") returned 1 [0184.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9890 [0184.320] wcscpy (in: _Dest=0x3eb9890, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.320] wcscat (in: _Dest=0x3eb9890, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.320] wcscat (in: _Dest=0x3eb9890, _Source="BZCARDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" [0184.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0184.321] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff7b700, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b59390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ff7b700, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x6214, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCD98SP.POC", cAlternateFileName="")) returned 1 [0184.321] wcscmp (_String1="BZCD98SP.POC", _String2=".") returned 1 [0184.321] wcscmp (_String1="BZCD98SP.POC", _String2="..") returned 1 [0184.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8bd0 [0184.321] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.322] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.322] wcscat (in: _Dest=0x3eb8bd0, _Source="BZCD98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" [0184.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0184.323] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738b3e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76dd6c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x738b3e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3caa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCRD98.POC", cAlternateFileName="")) returned 1 [0184.323] wcscmp (_String1="BZCRD98.POC", _String2=".") returned 1 [0184.323] wcscmp (_String1="BZCRD98.POC", _String2="..") returned 1 [0184.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eba220 [0184.323] wcscpy (in: _Dest=0x3eba220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.323] wcscat (in: _Dest=0x3eba220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.323] wcscat (in: _Dest=0x3eba220, _Source="BZCRD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" [0184.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0184.324] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbedca00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x76dfcdf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcbedca00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x148f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.DPV", cAlternateFileName="")) returned 1 [0184.324] wcscmp (_String1="CALENDAR.DPV", _String2=".") returned 1 [0184.324] wcscmp (_String1="CALENDAR.DPV", _String2="..") returned 1 [0184.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba6e8 [0184.324] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.324] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.324] wcscat (in: _Dest=0x3eba6e8, _Source="CALENDAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" [0184.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064 [0184.325] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34656b00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34656b00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x2614, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.XML", cAlternateFileName="")) returned 1 [0184.325] wcscmp (_String1="CALENDAR.XML", _String2=".") returned 1 [0184.326] wcscmp (_String1="CALENDAR.XML", _String2="..") returned 1 [0184.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba330 [0184.326] wcscpy (in: _Dest=0x3eba330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.326] wcscat (in: _Dest=0x3eba330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.326] wcscat (in: _Dest=0x3eba330, _Source="CALENDAR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" [0184.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0184.327] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771ec500, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86b7f4f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x771ec500, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x329e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALHM.POC", cAlternateFileName="")) returned 1 [0184.327] wcscmp (_String1="CALHM.POC", _String2=".") returned 1 [0184.327] wcscmp (_String1="CALHM.POC", _String2="..") returned 1 [0184.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e47318 [0184.327] wcscpy (in: _Dest=0x3e47318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0184.327] wcscat (in: _Dest=0x3e47318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0184.327] wcscat (in: _Dest=0x3e47318, _Source="CALHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" [0184.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e47318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0184.328] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e759200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76e490b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9e759200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1a6da2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR98.POC", cAlternateFileName="")) returned 1 [0185.347] wcscmp (_String1="CALNDR98.POC", _String2=".") returned 1 [0185.347] wcscmp (_String1="CALNDR98.POC", _String2="..") returned 1 [0185.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba6e8 [0185.347] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0185.347] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0185.347] wcscat (in: _Dest=0x3eba6e8, _Source="CALNDR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" [0189.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0189.620] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2091900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86bcb7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2091900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1b8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALSO11.POC", cAlternateFileName="")) returned 1 [0189.620] wcscmp (_String1="CALSO11.POC", _String2=".") returned 1 [0189.620] wcscmp (_String1="CALSO11.POC", _String2="..") returned 1 [0189.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68dd8 [0189.620] wcscpy (in: _Dest=0x7a68dd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.620] wcscat (in: _Dest=0x7a68dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.620] wcscat (in: _Dest=0x7a68dd8, _Source="CALSO11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" [0189.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0189.622] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3ae00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86bcb7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacc3ae00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x696d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALSO98.POC", cAlternateFileName="")) returned 1 [0189.622] wcscmp (_String1="CALSO98.POC", _String2=".") returned 1 [0189.622] wcscmp (_String1="CALSO98.POC", _String2="..") returned 1 [0189.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68800 [0189.622] wcscpy (in: _Dest=0x7a68800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.622] wcscat (in: _Dest=0x7a68800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.622] wcscat (in: _Dest=0x7a68800, _Source="CALSO98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" [0189.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0189.623] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0c2700, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xba0c2700, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x4e4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATALOG.DPV", cAlternateFileName="")) returned 1 [0189.623] wcscmp (_String1="CATALOG.DPV", _String2=".") returned 1 [0189.623] wcscmp (_String1="CATALOG.DPV", _String2="..") returned 1 [0189.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a69ba8 [0189.623] wcscpy (in: _Dest=0x7a69ba8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.623] wcscat (in: _Dest=0x7a69ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.624] wcscat (in: _Dest=0x7a69ba8, _Source="CATALOG.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" [0189.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c [0189.625] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8c7900, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3b8c7900, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATALOG.XML", cAlternateFileName="")) returned 1 [0189.625] wcscmp (_String1="CATALOG.XML", _String2=".") returned 1 [0189.625] wcscmp (_String1="CATALOG.XML", _String2="..") returned 1 [0189.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a69f60 [0189.625] wcscpy (in: _Dest=0x7a69f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.625] wcscat (in: _Dest=0x7a69f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.625] wcscat (in: _Dest=0x7a69f60, _Source="CATALOG.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" [0189.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18 [0189.627] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1886200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb1886200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x62f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATWIZ.POC", cAlternateFileName="")) returned 1 [0189.627] wcscmp (_String1="CATWIZ.POC", _String2=".") returned 1 [0189.627] wcscmp (_String1="CATWIZ.POC", _String2="..") returned 1 [0189.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69fe8 [0189.627] wcscpy (in: _Dest=0x7a69fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.627] wcscat (in: _Dest=0x7a69fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.627] wcscat (in: _Dest=0x7a69fe8, _Source="CATWIZ.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" [0189.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14 [0189.628] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eabc00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3eabc00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x24f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATWIZ11.POC", cAlternateFileName="")) returned 1 [0189.629] wcscmp (_String1="CATWIZ11.POC", _String2=".") returned 1 [0189.629] wcscmp (_String1="CATWIZ11.POC", _String2="..") returned 1 [0189.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68998 [0189.629] wcscpy (in: _Dest=0x7a68998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.629] wcscat (in: _Dest=0x7a68998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.629] wcscat (in: _Dest=0x7a68998, _Source="CATWIZ11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" [0189.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10 [0189.630] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e92000, ftCreationTime.dwHighDateTime=0x1c6528d, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e92000, ftLastWriteTime.dwHighDateTime=0x1c6528d, nFileSizeHigh=0x0, nFileSizeLow=0x2c1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT.DPV", cAlternateFileName="")) returned 1 [0189.630] wcscmp (_String1="CERT.DPV", _String2=".") returned 1 [0189.630] wcscmp (_String1="CERT.DPV", _String2="..") returned 1 [0189.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a718 [0189.630] wcscpy (in: _Dest=0x3e1a718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.630] wcscat (in: _Dest=0x3e1a718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.630] wcscat (in: _Dest=0x3e1a718, _Source="CERT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" [0189.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c [0189.631] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46470e00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x46470e00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x170a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT.XML", cAlternateFileName="")) returned 1 [0189.632] wcscmp (_String1="CERT.XML", _String2=".") returned 1 [0189.632] wcscmp (_String1="CERT.XML", _String2="..") returned 1 [0189.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19718 [0189.632] wcscpy (in: _Dest=0x3e19718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.632] wcscat (in: _Dest=0x3e19718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.632] wcscat (in: _Dest=0x3e19718, _Source="CERT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" [0189.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0189.633] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eabc00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86c17a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3eabc00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x11b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT98.POC", cAlternateFileName="")) returned 1 [0189.633] wcscmp (_String1="CERT98.POC", _String2=".") returned 1 [0189.633] wcscmp (_String1="CERT98.POC", _String2="..") returned 1 [0189.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a681a0 [0189.633] wcscpy (in: _Dest=0x7a681a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.633] wcscat (in: _Dest=0x7a681a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.633] wcscat (in: _Dest=0x7a681a0, _Source="CERT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" [0189.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a681a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04 [0189.634] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eabc00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3eabc00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x53bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT98SP.POC", cAlternateFileName="")) returned 1 [0189.635] wcscmp (_String1="CERT98SP.POC", _String2=".") returned 1 [0189.635] wcscmp (_String1="CERT98SP.POC", _String2="..") returned 1 [0189.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68118 [0189.635] wcscpy (in: _Dest=0x7a68118, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.635] wcscat (in: _Dest=0x7a68118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.635] wcscat (in: _Dest=0x7a68118, _Source="CERT98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" [0189.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00 [0189.636] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51be900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb51be900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x170e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKER.POC", cAlternateFileName="")) returned 1 [0189.636] wcscmp (_String1="CHECKER.POC", _String2=".") returned 1 [0189.636] wcscmp (_String1="CHECKER.POC", _String2="..") returned 1 [0189.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68228 [0189.636] wcscpy (in: _Dest=0x7a68228, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.636] wcscat (in: _Dest=0x7a68228, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.637] wcscat (in: _Dest=0x7a68228, _Source="CHECKER.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" [0189.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc [0189.638] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28637200, ftCreationTime.dwHighDateTime=0x1c9c765, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x28637200, ftLastWriteTime.dwHighDateTime=0x1c9c765, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTINFOBB.DPV", cAlternateFileName="CONTAC~1.DPV")) returned 1 [0189.638] wcscmp (_String1="CONTACTINFOBB.DPV", _String2=".") returned 1 [0189.638] wcscmp (_String1="CONTACTINFOBB.DPV", _String2="..") returned 1 [0189.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d455c0 [0189.638] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.638] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.638] wcscat (in: _Dest=0x3d455c0, _Source="CONTACTINFOBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" [0189.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8 [0189.639] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a82ab00, ftCreationTime.dwHighDateTime=0x1c9c379, ftLastAccessTime.dwLowDateTime=0x86cafff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1a82ab00, ftLastWriteTime.dwHighDateTime=0x1c9c379, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTINFOBB.POC", cAlternateFileName="CONTAC~1.POC")) returned 1 [0189.639] wcscmp (_String1="CONTACTINFOBB.POC", _String2=".") returned 1 [0189.639] wcscmp (_String1="CONTACTINFOBB.POC", _String2="..") returned 1 [0189.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45770 [0189.639] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.639] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.640] wcscat (in: _Dest=0x3d45770, _Source="CONTACTINFOBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" [0189.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0189.641] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51be900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x86cd6150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb51be900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xc692, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPON.POC", cAlternateFileName="")) returned 1 [0189.641] wcscmp (_String1="COUPON.POC", _String2=".") returned 1 [0189.641] wcscmp (_String1="COUPON.POC", _String2="..") returned 1 [0189.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a683c0 [0189.641] wcscpy (in: _Dest=0x7a683c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.641] wcscat (in: _Dest=0x7a683c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.641] wcscat (in: _Dest=0x7a683c0, _Source="COUPON.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" [0189.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a683c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc [0189.644] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25252000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25252000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBAR.DPV", cAlternateFileName="")) returned 1 [0189.644] wcscmp (_String1="DGACCBAR.DPV", _String2=".") returned 1 [0189.644] wcscmp (_String1="DGACCBAR.DPV", _String2="..") returned 1 [0189.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68090 [0189.644] wcscpy (in: _Dest=0x7a68090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.644] wcscat (in: _Dest=0x7a68090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.644] wcscat (in: _Dest=0x7a68090, _Source="DGACCBAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" [0189.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0189.649] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f42cd00, ftCreationTime.dwHighDateTime=0x1c98dfc, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f42cd00, ftLastWriteTime.dwHighDateTime=0x1c98dfc, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBAR.XML", cAlternateFileName="")) returned 1 [0189.649] wcscmp (_String1="DGACCBAR.XML", _String2=".") returned 1 [0189.649] wcscmp (_String1="DGACCBAR.XML", _String2="..") returned 1 [0189.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a682b0 [0189.649] wcscpy (in: _Dest=0x7a682b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.649] wcscat (in: _Dest=0x7a682b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.649] wcscat (in: _Dest=0x7a682b0, _Source="DGACCBAR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" [0189.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a682b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0189.650] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f3f300, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x23f3f300, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBOX.DPV", cAlternateFileName="")) returned 1 [0189.650] wcscmp (_String1="DGACCBOX.DPV", _String2=".") returned 1 [0189.650] wcscmp (_String1="DGACCBOX.DPV", _String2="..") returned 1 [0189.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68c40 [0189.651] wcscpy (in: _Dest=0x7a68c40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.651] wcscat (in: _Dest=0x7a68c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.651] wcscat (in: _Dest=0x7a68c40, _Source="DGACCBOX.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" [0189.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c [0189.652] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b375400, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b375400, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBOX.XML", cAlternateFileName="")) returned 1 [0189.652] wcscmp (_String1="DGACCBOX.XML", _String2=".") returned 1 [0189.652] wcscmp (_String1="DGACCBOX.XML", _String2="..") returned 1 [0189.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68b30 [0189.652] wcscpy (in: _Dest=0x7a68b30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.652] wcscat (in: _Dest=0x7a68b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.653] wcscat (in: _Dest=0x7a68b30, _Source="DGACCBOX.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" [0189.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0189.654] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d61c100, ftCreationTime.dwHighDateTime=0x1c60006, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d61c100, ftLastWriteTime.dwHighDateTime=0x1c60006, nFileSizeHigh=0x0, nFileSizeLow=0x4b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGAD.DPV", cAlternateFileName="")) returned 1 [0189.654] wcscmp (_String1="DGAD.DPV", _String2=".") returned 1 [0189.654] wcscmp (_String1="DGAD.DPV", _String2="..") returned 1 [0189.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a598 [0189.654] wcscpy (in: _Dest=0x3e1a598, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.654] wcscat (in: _Dest=0x3e1a598, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.654] wcscat (in: _Dest=0x3e1a598, _Source="DGAD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" [0189.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0189.655] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38f8f00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa38f8f00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x3be, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGAD.XML", cAlternateFileName="")) returned 1 [0189.655] wcscmp (_String1="DGAD.XML", _String2=".") returned 1 [0189.656] wcscmp (_String1="DGAD.XML", _String2="..") returned 1 [0189.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19198 [0189.656] wcscpy (in: _Dest=0x3e19198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.656] wcscat (in: _Dest=0x3e19198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.656] wcscat (in: _Dest=0x3e19198, _Source="DGAD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" [0189.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0189.657] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e64a900, ftCreationTime.dwHighDateTime=0x1c7e927, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e64a900, ftLastWriteTime.dwHighDateTime=0x1c7e927, nFileSizeHigh=0x0, nFileSizeLow=0x5269, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGATNGET.DPV", cAlternateFileName="")) returned 1 [0189.657] wcscmp (_String1="DGATNGET.DPV", _String2=".") returned 1 [0189.657] wcscmp (_String1="DGATNGET.DPV", _String2="..") returned 1 [0189.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a694c0 [0189.657] wcscpy (in: _Dest=0x7a694c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.657] wcscat (in: _Dest=0x7a694c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.657] wcscat (in: _Dest=0x7a694c0, _Source="DGATNGET.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" [0189.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a694c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0189.658] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe7ca00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabe7ca00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGATNGET.XML", cAlternateFileName="")) returned 1 [0189.659] wcscmp (_String1="DGATNGET.XML", _String2=".") returned 1 [0189.659] wcscmp (_String1="DGATNGET.XML", _String2="..") returned 1 [0189.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a69548 [0189.659] wcscpy (in: _Dest=0x7a69548, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.659] wcscat (in: _Dest=0x7a69548, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.659] wcscat (in: _Dest=0x7a69548, _Source="DGATNGET.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" [0189.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0189.660] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7d5b00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d7d5b00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBARBLL.DPV", cAlternateFileName="")) returned 1 [0189.660] wcscmp (_String1="DGBARBLL.DPV", _String2=".") returned 1 [0189.660] wcscmp (_String1="DGBARBLL.DPV", _String2="..") returned 1 [0189.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a695d0 [0189.660] wcscpy (in: _Dest=0x7a695d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0189.660] wcscat (in: _Dest=0x7a695d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0189.660] wcscat (in: _Dest=0x7a695d0, _Source="DGBARBLL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" [0189.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a695d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0190.498] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f42cd00, ftCreationTime.dwHighDateTime=0x1c98dfc, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f42cd00, ftLastWriteTime.dwHighDateTime=0x1c98dfc, nFileSizeHigh=0x0, nFileSizeLow=0x456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBARBLL.XML", cAlternateFileName="")) returned 1 [0190.498] wcscmp (_String1="DGBARBLL.XML", _String2=".") returned 1 [0190.498] wcscmp (_String1="DGBARBLL.XML", _String2="..") returned 1 [0190.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a69988 [0190.498] wcscpy (in: _Dest=0x7a69988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0190.498] wcscat (in: _Dest=0x7a69988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0190.498] wcscat (in: _Dest=0x7a69988, _Source="DGBARBLL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" [0192.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0192.207] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7d5b00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d7d5b00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBORDER.DPV", cAlternateFileName="")) returned 1 [0192.207] wcscmp (_String1="DGBORDER.DPV", _String2=".") returned 1 [0192.207] wcscmp (_String1="DGBORDER.DPV", _String2="..") returned 1 [0192.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a694c0 [0192.207] wcscpy (in: _Dest=0x7a694c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.207] wcscat (in: _Dest=0x7a694c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.207] wcscat (in: _Dest=0x7a694c0, _Source="DGBORDER.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" [0192.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a694c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0192.209] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ec72200, ftCreationTime.dwHighDateTime=0x1c9a1b2, ftLastAccessTime.dwLowDateTime=0x7730bcb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7ec72200, ftLastWriteTime.dwHighDateTime=0x1c9a1b2, nFileSizeHigh=0x0, nFileSizeLow=0x9a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBORDER.XML", cAlternateFileName="")) returned 1 [0192.209] wcscmp (_String1="DGBORDER.XML", _String2=".") returned 1 [0192.209] wcscmp (_String1="DGBORDER.XML", _String2="..") returned 1 [0192.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68e60 [0192.209] wcscpy (in: _Dest=0x7a68e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.209] wcscat (in: _Dest=0x7a68e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.209] wcscat (in: _Dest=0x7a68e60, _Source="DGBORDER.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" [0192.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0192.210] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d7d5b00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2d7d5b00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBOXES.DPV", cAlternateFileName="")) returned 1 [0192.210] wcscmp (_String1="DGBOXES.DPV", _String2=".") returned 1 [0192.210] wcscmp (_String1="DGBOXES.DPV", _String2="..") returned 1 [0192.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a69a10 [0192.211] wcscpy (in: _Dest=0x7a69a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.211] wcscat (in: _Dest=0x7a69a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.211] wcscat (in: _Dest=0x7a69a10, _Source="DGBOXES.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" [0192.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0192.212] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc752d500, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc752d500, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBOXES.XML", cAlternateFileName="")) returned 1 [0192.212] wcscmp (_String1="DGBOXES.XML", _String2=".") returned 1 [0192.212] wcscmp (_String1="DGBOXES.XML", _String2="..") returned 1 [0192.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a69cb8 [0192.212] wcscpy (in: _Dest=0x7a69cb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.212] wcscat (in: _Dest=0x7a69cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.212] wcscat (in: _Dest=0x7a69cb8, _Source="DGBOXES.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" [0192.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0192.214] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ccc200, ftCreationTime.dwHighDateTime=0x1c685d3, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9ccc200, ftLastWriteTime.dwHighDateTime=0x1c685d3, nFileSizeHigh=0x0, nFileSizeLow=0x35468, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCAL.DPV", cAlternateFileName="")) returned 1 [0192.214] wcscmp (_String1="DGCAL.DPV", _String2=".") returned 1 [0192.214] wcscmp (_String1="DGCAL.DPV", _String2="..") returned 1 [0192.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a018 [0192.214] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.214] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.214] wcscat (in: _Dest=0x3e1a018, _Source="DGCAL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" [0192.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0192.216] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0dc3d00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd0dc3d00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x1e66, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCAL.XML", cAlternateFileName="")) returned 1 [0192.216] wcscmp (_String1="DGCAL.XML", _String2=".") returned 1 [0192.216] wcscmp (_String1="DGCAL.XML", _String2="..") returned 1 [0192.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1ab98 [0192.216] wcscpy (in: _Dest=0x3e1ab98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.216] wcscat (in: _Dest=0x3e1ab98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.216] wcscat (in: _Dest=0x3e1ab98, _Source="DGCAL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" [0192.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ab98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0192.219] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f8ebd00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f8ebd00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCHKBRD.DPV", cAlternateFileName="")) returned 1 [0192.219] wcscmp (_String1="DGCHKBRD.DPV", _String2=".") returned 1 [0192.219] wcscmp (_String1="DGCHKBRD.DPV", _String2="..") returned 1 [0192.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68998 [0192.219] wcscpy (in: _Dest=0x7a68998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.219] wcscat (in: _Dest=0x7a68998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.219] wcscat (in: _Dest=0x7a68998, _Source="DGCHKBRD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" [0192.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0192.221] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f42cd00, ftCreationTime.dwHighDateTime=0x1c98dfc, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f42cd00, ftLastWriteTime.dwHighDateTime=0x1c98dfc, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCHKBRD.XML", cAlternateFileName="")) returned 1 [0192.221] wcscmp (_String1="DGCHKBRD.XML", _String2=".") returned 1 [0192.221] wcscmp (_String1="DGCHKBRD.XML", _String2="..") returned 1 [0192.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a69fe8 [0192.221] wcscpy (in: _Dest=0x7a69fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.221] wcscat (in: _Dest=0x7a69fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.221] wcscat (in: _Dest=0x7a69fe8, _Source="DGCHKBRD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" [0192.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0192.222] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9b3ce00, ftCreationTime.dwHighDateTime=0x1c9c4f3, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9b3ce00, ftLastWriteTime.dwHighDateTime=0x1c9c4f3, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCINFO.XML", cAlternateFileName="")) returned 1 [0192.222] wcscmp (_String1="DGCINFO.XML", _String2=".") returned 1 [0192.222] wcscmp (_String1="DGCINFO.XML", _String2="..") returned 1 [0192.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a69f60 [0192.222] wcscpy (in: _Dest=0x7a69f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.223] wcscat (in: _Dest=0x7a69f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.223] wcscat (in: _Dest=0x7a69f60, _Source="DGCINFO.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" [0192.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0192.224] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99ffd000, ftCreationTime.dwHighDateTime=0x1c5e958, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x99ffd000, ftLastWriteTime.dwHighDateTime=0x1c5e958, nFileSizeHigh=0x0, nFileSizeLow=0x6082, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCOUPON.DPV", cAlternateFileName="")) returned 1 [0192.229] wcscmp (_String1="DGCOUPON.DPV", _String2=".") returned 1 [0192.230] wcscmp (_String1="DGCOUPON.DPV", _String2="..") returned 1 [0192.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a69ba8 [0192.230] wcscpy (in: _Dest=0x7a69ba8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0192.230] wcscat (in: _Dest=0x7a69ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0192.230] wcscat (in: _Dest=0x7a69ba8, _Source="DGCOUPON.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" [0197.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0 [0197.926] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18cb300, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe18cb300, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCOUPON.XML", cAlternateFileName="")) returned 1 [0197.926] wcscmp (_String1="DGCOUPON.XML", _String2=".") returned 1 [0197.926] wcscmp (_String1="DGCOUPON.XML", _String2="..") returned 1 [0197.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68998 [0197.926] wcscpy (in: _Dest=0x7a68998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.926] wcscat (in: _Dest=0x7a68998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.927] wcscat (in: _Dest=0x7a68998, _Source="DGCOUPON.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" [0197.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0197.928] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5c2200, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d5c2200, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGDOTS.DPV", cAlternateFileName="")) returned 1 [0197.928] wcscmp (_String1="DGDOTS.DPV", _String2=".") returned 1 [0197.928] wcscmp (_String1="DGDOTS.DPV", _String2="..") returned 1 [0197.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69fe8 [0197.928] wcscpy (in: _Dest=0x7a69fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.928] wcscat (in: _Dest=0x7a69fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.928] wcscat (in: _Dest=0x7a69fe8, _Source="DGDOTS.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" [0197.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0197.930] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f092000, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2f092000, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGDOTS.XML", cAlternateFileName="")) returned 1 [0197.930] wcscmp (_String1="DGDOTS.XML", _String2=".") returned 1 [0197.930] wcscmp (_String1="DGDOTS.XML", _String2="..") returned 1 [0197.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69a10 [0197.930] wcscpy (in: _Dest=0x7a69a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.930] wcscat (in: _Dest=0x7a69a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.930] wcscat (in: _Dest=0x7a69a10, _Source="DGDOTS.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" [0197.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0197.931] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd977c00, ftCreationTime.dwHighDateTime=0x1ca0949, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcd977c00, ftLastWriteTime.dwHighDateTime=0x1ca0949, nFileSizeHigh=0x0, nFileSizeLow=0x1ba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGHEADING.XML", cAlternateFileName="DGHEAD~1.XML")) returned 1 [0197.931] wcscmp (_String1="DGHEADING.XML", _String2=".") returned 1 [0197.932] wcscmp (_String1="DGHEADING.XML", _String2="..") returned 1 [0197.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69f60 [0197.932] wcscpy (in: _Dest=0x7a69f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.932] wcscat (in: _Dest=0x7a69f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.932] wcscat (in: _Dest=0x7a69f60, _Source="DGHEADING.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" [0197.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704 [0197.933] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5c2200, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7d5c2200, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLINACC.DPV", cAlternateFileName="")) returned 1 [0197.933] wcscmp (_String1="DGLINACC.DPV", _String2=".") returned 1 [0197.933] wcscmp (_String1="DGLINACC.DPV", _String2="..") returned 1 [0197.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a68448 [0197.934] wcscpy (in: _Dest=0x7a68448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.934] wcscat (in: _Dest=0x7a68448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.934] wcscat (in: _Dest=0x7a68448, _Source="DGLINACC.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" [0197.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0197.935] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37615b00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37615b00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLINACC.XML", cAlternateFileName="")) returned 1 [0197.935] wcscmp (_String1="DGLINACC.XML", _String2=".") returned 1 [0197.935] wcscmp (_String1="DGLINACC.XML", _String2="..") returned 1 [0197.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a69cb8 [0197.935] wcscpy (in: _Dest=0x7a69cb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.936] wcscat (in: _Dest=0x7a69cb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.936] wcscat (in: _Dest=0x7a69cb8, _Source="DGLINACC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" [0197.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0197.937] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84833000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84833000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2ebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLOGO.DPV", cAlternateFileName="")) returned 1 [0197.937] wcscmp (_String1="DGLOGO.DPV", _String2=".") returned 1 [0197.937] wcscmp (_String1="DGLOGO.DPV", _String2="..") returned 1 [0197.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a69080 [0197.937] wcscpy (in: _Dest=0x7a69080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.937] wcscat (in: _Dest=0x7a69080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.937] wcscat (in: _Dest=0x7a69080, _Source="DGLOGO.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" [0197.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0197.939] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb99600, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3fb99600, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x7ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLOGO.XML", cAlternateFileName="")) returned 1 [0197.939] wcscmp (_String1="DGLOGO.XML", _String2=".") returned 1 [0197.939] wcscmp (_String1="DGLOGO.XML", _String2="..") returned 1 [0197.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9098 [0197.939] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.939] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.939] wcscat (in: _Dest=0x3eb9098, _Source="DGLOGO.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" [0197.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f0 [0197.941] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5606a200, ftCreationTime.dwHighDateTime=0x1ca5800, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5606a200, ftLastWriteTime.dwHighDateTime=0x1ca5800, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMAIN.XML", cAlternateFileName="")) returned 1 [0197.941] wcscmp (_String1="DGMAIN.XML", _String2=".") returned 1 [0197.941] wcscmp (_String1="DGMAIN.XML", _String2="..") returned 1 [0197.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9e68 [0197.941] wcscpy (in: _Dest=0x3eb9e68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.941] wcscat (in: _Dest=0x3eb9e68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.941] wcscat (in: _Dest=0x3eb9e68, _Source="DGMAIN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" [0197.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9e68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0197.943] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84833000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77331e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x84833000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMARQ.DPV", cAlternateFileName="")) returned 1 [0197.943] wcscmp (_String1="DGMARQ.DPV", _String2=".") returned 1 [0197.943] wcscmp (_String1="DGMARQ.DPV", _String2="..") returned 1 [0197.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb8b48 [0197.943] wcscpy (in: _Dest=0x3eb8b48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.943] wcscat (in: _Dest=0x3eb8b48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.943] wcscat (in: _Dest=0x3eb8b48, _Source="DGMARQ.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" [0197.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0197.945] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f38df00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x8765b950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4f38df00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMARQ.XML", cAlternateFileName="")) returned 1 [0197.945] wcscmp (_String1="DGMARQ.XML", _String2=".") returned 1 [0197.945] wcscmp (_String1="DGMARQ.XML", _String2="..") returned 1 [0197.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba440 [0197.945] wcscpy (in: _Dest=0x3eba440, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.945] wcscat (in: _Dest=0x3eba440, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.945] wcscat (in: _Dest=0x3eba440, _Source="DGMARQ.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" [0197.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0197.947] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335b500, ftCreationTime.dwHighDateTime=0x1c7e92d, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x335b500, ftLastWriteTime.dwHighDateTime=0x1c7e92d, nFileSizeHigh=0x0, nFileSizeLow=0x50f94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMASTHD.DPV", cAlternateFileName="")) returned 1 [0197.947] wcscmp (_String1="DGMASTHD.DPV", _String2=".") returned 1 [0197.947] wcscmp (_String1="DGMASTHD.DPV", _String2="..") returned 1 [0197.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9ef0 [0197.947] wcscpy (in: _Dest=0x3eb9ef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.947] wcscat (in: _Dest=0x3eb9ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.947] wcscat (in: _Dest=0x3eb9ef0, _Source="DGMASTHD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" [0197.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0197.949] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df85b00, ftCreationTime.dwHighDateTime=0x1c62793, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3df85b00, ftLastWriteTime.dwHighDateTime=0x1c62793, nFileSizeHigh=0x0, nFileSizeLow=0x71a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGNAVBAR.DPV", cAlternateFileName="")) returned 1 [0197.949] wcscmp (_String1="DGNAVBAR.DPV", _String2=".") returned 1 [0197.949] wcscmp (_String1="DGNAVBAR.DPV", _String2="..") returned 1 [0197.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9010 [0197.949] wcscpy (in: _Dest=0x3eb9010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.949] wcscat (in: _Dest=0x3eb9010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.949] wcscat (in: _Dest=0x3eb9010, _Source="DGNAVBAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" [0197.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0197.951] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fe6600, ftCreationTime.dwHighDateTime=0x1c944f8, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24fe6600, ftLastWriteTime.dwHighDateTime=0x1c944f8, nFileSizeHigh=0x0, nFileSizeLow=0x11c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGNAVBAR.XML", cAlternateFileName="")) returned 1 [0197.951] wcscmp (_String1="DGNAVBAR.XML", _String2=".") returned 1 [0197.951] wcscmp (_String1="DGNAVBAR.XML", _String2="..") returned 1 [0197.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba660 [0197.951] wcscpy (in: _Dest=0x3eba660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.951] wcscat (in: _Dest=0x3eba660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.951] wcscat (in: _Dest=0x3eba660, _Source="DGNAVBAR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" [0197.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0197.952] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c35500, ftCreationTime.dwHighDateTime=0x1c9a70e, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x70c35500, ftLastWriteTime.dwHighDateTime=0x1c9a70e, nFileSizeHigh=0x0, nFileSizeLow=0x1eeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPICCAP.DPV", cAlternateFileName="")) returned 1 [0197.953] wcscmp (_String1="DGPICCAP.DPV", _String2=".") returned 1 [0197.953] wcscmp (_String1="DGPICCAP.DPV", _String2="..") returned 1 [0197.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb99a0 [0197.953] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.953] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.953] wcscat (in: _Dest=0x3eb99a0, _Source="DGPICCAP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" [0197.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0197.954] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cbf3e00, ftCreationTime.dwHighDateTime=0x1c9a725, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4cbf3e00, ftLastWriteTime.dwHighDateTime=0x1c9a725, nFileSizeHigh=0x0, nFileSizeLow=0x1aca, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPICCAP.XML", cAlternateFileName="")) returned 1 [0197.954] wcscmp (_String1="DGPICCAP.XML", _String2=".") returned 1 [0197.954] wcscmp (_String1="DGPICCAP.XML", _String2="..") returned 1 [0197.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba3b8 [0197.955] wcscpy (in: _Dest=0x3eba3b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.955] wcscat (in: _Dest=0x3eba3b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.955] wcscat (in: _Dest=0x3eba3b8, _Source="DGPICCAP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" [0197.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0197.957] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1e5a00, ftCreationTime.dwHighDateTime=0x1c7e47b, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc1e5a00, ftLastWriteTime.dwHighDateTime=0x1c7e47b, nFileSizeHigh=0x0, nFileSizeLow=0x938f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPQUOT.DPV", cAlternateFileName="")) returned 1 [0197.957] wcscmp (_String1="DGPQUOT.DPV", _String2=".") returned 1 [0197.957] wcscmp (_String1="DGPQUOT.DPV", _String2="..") returned 1 [0197.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9780 [0197.957] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.957] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.957] wcscat (in: _Dest=0x3eb9780, _Source="DGPQUOT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" [0197.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0197.958] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849e300, ftCreationTime.dwHighDateTime=0x1c97a6a, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7849e300, ftLastWriteTime.dwHighDateTime=0x1c97a6a, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPQUOT.XML", cAlternateFileName="")) returned 1 [0197.959] wcscmp (_String1="DGPQUOT.XML", _String2=".") returned 1 [0197.959] wcscmp (_String1="DGPQUOT.XML", _String2="..") returned 1 [0197.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9340 [0197.959] wcscpy (in: _Dest=0x3eb9340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.959] wcscat (in: _Dest=0x3eb9340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.959] wcscat (in: _Dest=0x3eb9340, _Source="DGPQUOT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" [0197.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140c [0197.960] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09eb100, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb09eb100, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPUNCT.DPV", cAlternateFileName="")) returned 1 [0197.960] wcscmp (_String1="DGPUNCT.DPV", _String2=".") returned 1 [0197.960] wcscmp (_String1="DGPUNCT.DPV", _String2="..") returned 1 [0197.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8f00 [0197.961] wcscpy (in: _Dest=0x3eb8f00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0197.961] wcscat (in: _Dest=0x3eb8f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0197.961] wcscat (in: _Dest=0x3eb8f00, _Source="DGPUNCT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" [0197.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0199.271] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe56edf00, ftCreationTime.dwHighDateTime=0x1c9c8c9, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe56edf00, ftLastWriteTime.dwHighDateTime=0x1c9c8c9, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPUNCT.XML", cAlternateFileName="")) returned 1 [0199.271] wcscmp (_String1="DGPUNCT.XML", _String2=".") returned 1 [0199.271] wcscmp (_String1="DGPUNCT.XML", _String2="..") returned 1 [0199.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68998 [0199.271] wcscpy (in: _Dest=0x7a68998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.271] wcscat (in: _Dest=0x7a68998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.271] wcscat (in: _Dest=0x7a68998, _Source="DGPUNCT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" [0199.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0199.704] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb99ad500, ftCreationTime.dwHighDateTime=0x1c685d8, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb99ad500, ftLastWriteTime.dwHighDateTime=0x1c685d8, nFileSizeHigh=0x0, nFileSizeLow=0x6e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGREPFRM.DPV", cAlternateFileName="")) returned 1 [0199.704] wcscmp (_String1="DGREPFRM.DPV", _String2=".") returned 1 [0199.704] wcscmp (_String1="DGREPFRM.DPV", _String2="..") returned 1 [0199.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9780 [0199.704] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.704] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.704] wcscat (in: _Dest=0x3eb9780, _Source="DGREPFRM.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" [0199.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34 [0199.706] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c04d600, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8c04d600, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGREPFRM.XML", cAlternateFileName="")) returned 1 [0199.706] wcscmp (_String1="DGREPFRM.XML", _String2=".") returned 1 [0199.706] wcscmp (_String1="DGREPFRM.XML", _String2="..") returned 1 [0199.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9de0 [0199.706] wcscpy (in: _Dest=0x3eb9de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.706] wcscat (in: _Dest=0x3eb9de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.706] wcscat (in: _Dest=0x3eb9de0, _Source="DGREPFRM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" [0199.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418 [0199.707] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a0aa00, ftCreationTime.dwHighDateTime=0x1c685d9, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x10a0aa00, ftLastWriteTime.dwHighDateTime=0x1c685d9, nFileSizeHigh=0x0, nFileSizeLow=0xae41, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBR.DPV", cAlternateFileName="")) returned 1 [0199.707] wcscmp (_String1="DGSIDEBR.DPV", _String2=".") returned 1 [0199.707] wcscmp (_String1="DGSIDEBR.DPV", _String2="..") returned 1 [0199.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8df0 [0199.708] wcscpy (in: _Dest=0x3eb8df0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.708] wcscat (in: _Dest=0x3eb8df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.708] wcscat (in: _Dest=0x3eb8df0, _Source="DGSIDEBR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" [0199.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0199.709] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8806b600, ftCreationTime.dwHighDateTime=0x1c97750, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8806b600, ftLastWriteTime.dwHighDateTime=0x1c97750, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBR.XML", cAlternateFileName="")) returned 1 [0199.709] wcscmp (_String1="DGSIDEBR.XML", _String2=".") returned 1 [0199.709] wcscmp (_String1="DGSIDEBR.XML", _String2="..") returned 1 [0199.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8d68 [0199.709] wcscpy (in: _Dest=0x3eb8d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.709] wcscat (in: _Dest=0x3eb8d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.709] wcscat (in: _Dest=0x3eb8d68, _Source="DGSIDEBR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" [0199.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0199.710] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d41b00, ftCreationTime.dwHighDateTime=0x1c97750, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa5d41b00, ftLastWriteTime.dwHighDateTime=0x1c97750, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBRV.XML", cAlternateFileName="DGSIDE~1.XML")) returned 1 [0199.711] wcscmp (_String1="DGSIDEBRV.XML", _String2=".") returned 1 [0199.711] wcscmp (_String1="DGSIDEBRV.XML", _String2="..") returned 1 [0199.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9918 [0199.711] wcscpy (in: _Dest=0x3eb9918, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.711] wcscat (in: _Dest=0x3eb9918, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.711] wcscat (in: _Dest=0x3eb9918, _Source="DGSIDEBRV.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" [0199.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0199.712] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c1700, ftCreationTime.dwHighDateTime=0x1c9774d, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x930c1700, ftLastWriteTime.dwHighDateTime=0x1c9774d, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSTORY.XML", cAlternateFileName="")) returned 1 [0199.712] wcscmp (_String1="DGSTORY.XML", _String2=".") returned 1 [0199.712] wcscmp (_String1="DGSTORY.XML", _String2="..") returned 1 [0199.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9d58 [0199.713] wcscpy (in: _Dest=0x3eb9d58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.713] wcscat (in: _Dest=0x3eb9d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.713] wcscat (in: _Dest=0x3eb9d58, _Source="DGSTORY.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" [0199.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150 [0199.714] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b645200, ftCreationTime.dwHighDateTime=0x1c9774d, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9b645200, ftLastWriteTime.dwHighDateTime=0x1c9774d, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSTORYVERT.XML", cAlternateFileName="DGSTOR~1.XML")) returned 1 [0199.714] wcscmp (_String1="DGSTORYVERT.XML", _String2=".") returned 1 [0199.714] wcscmp (_String1="DGSTORYVERT.XML", _String2="..") returned 1 [0199.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d452f0 [0199.714] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.714] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.714] wcscat (in: _Dest=0x3d452f0, _Source="DGSTORYVERT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" [0199.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860 [0199.715] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa8d000, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaaa8d000, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTEAR.DPV", cAlternateFileName="")) returned 1 [0199.715] wcscmp (_String1="DGTEAR.DPV", _String2=".") returned 1 [0199.715] wcscmp (_String1="DGTEAR.DPV", _String2="..") returned 1 [0199.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb91a8 [0199.716] wcscpy (in: _Dest=0x3eb91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.716] wcscat (in: _Dest=0x3eb91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.716] wcscat (in: _Dest=0x3eb91a8, _Source="DGTEAR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" [0199.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0199.717] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8442b700, ftCreationTime.dwHighDateTime=0x1c685d9, ftLastAccessTime.dwLowDateTime=0x87681ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8442b700, ftLastWriteTime.dwHighDateTime=0x1c685d9, nFileSizeHigh=0x0, nFileSizeLow=0xe50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTOC.DPV", cAlternateFileName="")) returned 1 [0199.717] wcscmp (_String1="DGTOC.DPV", _String2=".") returned 1 [0199.717] wcscmp (_String1="DGTOC.DPV", _String2="..") returned 1 [0199.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a018 [0199.717] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.717] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.717] wcscat (in: _Dest=0x3e1a018, _Source="DGTOC.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" [0199.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0199.718] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2ab2d00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa2ab2d00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x1712, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTOC.XML", cAlternateFileName="")) returned 1 [0199.718] wcscmp (_String1="DGTOC.XML", _String2=".") returned 1 [0199.718] wcscmp (_String1="DGTOC.XML", _String2="..") returned 1 [0199.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19298 [0199.718] wcscpy (in: _Dest=0x3e19298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.718] wcscat (in: _Dest=0x3e19298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.718] wcscat (in: _Dest=0x3e19298, _Source="DGTOC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" [0199.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0199.719] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d23b00, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9d23b00, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBAD.XML", cAlternateFileName="")) returned 1 [0199.719] wcscmp (_String1="DGWEBAD.XML", _String2=".") returned 1 [0199.720] wcscmp (_String1="DGWEBAD.XML", _String2="..") returned 1 [0199.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb95e8 [0199.720] wcscpy (in: _Dest=0x3eb95e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.720] wcscat (in: _Dest=0x3eb95e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.720] wcscat (in: _Dest=0x3eb95e8, _Source="DGWEBAD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" [0199.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb95e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0199.721] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdfb500, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2fdfb500, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBBTN.DPV", cAlternateFileName="")) returned 1 [0199.721] wcscmp (_String1="DGWEBBTN.DPV", _String2=".") returned 1 [0199.721] wcscmp (_String1="DGWEBBTN.DPV", _String2="..") returned 1 [0199.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9120 [0199.721] wcscpy (in: _Dest=0x3eb9120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.721] wcscat (in: _Dest=0x3eb9120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.721] wcscat (in: _Dest=0x3eb9120, _Source="DGWEBBTN.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" [0199.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0199.723] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22a7600, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb22a7600, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x110e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBBTN.XML", cAlternateFileName="")) returned 1 [0199.723] wcscmp (_String1="DGWEBBTN.XML", _String2=".") returned 1 [0199.723] wcscmp (_String1="DGWEBBTN.XML", _String2="..") returned 1 [0199.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8f88 [0199.723] wcscpy (in: _Dest=0x3eb8f88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0199.723] wcscat (in: _Dest=0x3eb8f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0199.723] wcscat (in: _Dest=0x3eb8f88, _Source="DGWEBBTN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" [0199.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0199.724] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0264e00, ftCreationTime.dwHighDateTime=0x1c685d2, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0264e00, ftLastWriteTime.dwHighDateTime=0x1c685d2, nFileSizeHigh=0x0, nFileSizeLow=0x301be, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBCAL.DPV", cAlternateFileName="")) returned 1 [0201.930] wcscmp (_String1="DGWEBCAL.DPV", _String2=".") returned 1 [0201.930] wcscmp (_String1="DGWEBCAL.DPV", _String2="..") returned 1 [0201.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d280 [0201.931] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.931] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.931] wcscat (in: _Dest=0x3f3d280, _Source="DGWEBCAL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" [0201.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24dc [0201.932] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8205700, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x77357f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8205700, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x1cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBCAL.XML", cAlternateFileName="")) returned 1 [0201.932] wcscmp (_String1="DGWEBCAL.XML", _String2=".") returned 1 [0201.932] wcscmp (_String1="DGWEBCAL.XML", _String2="..") returned 1 [0201.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c7e0 [0201.932] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.932] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.932] wcscat (in: _Dest=0x3f3c7e0, _Source="DGWEBCAL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" [0201.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34 [0201.933] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd84c9c00, ftCreationTime.dwHighDateTime=0x1c685d7, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd84c9c00, ftLastWriteTime.dwHighDateTime=0x1c685d7, nFileSizeHigh=0x0, nFileSizeLow=0x2f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBHD.DPV", cAlternateFileName="")) returned 1 [0201.933] wcscmp (_String1="DGWEBHD.DPV", _String2=".") returned 1 [0201.933] wcscmp (_String1="DGWEBHD.DPV", _String2="..") returned 1 [0201.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c180 [0201.933] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.934] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.934] wcscat (in: _Dest=0x3f3c180, _Source="DGWEBHD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" [0201.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0201.935] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf476500, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf476500, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0x1dbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBHD.XML", cAlternateFileName="")) returned 1 [0201.935] wcscmp (_String1="DGWEBHD.XML", _String2=".") returned 1 [0201.935] wcscmp (_String1="DGWEBHD.XML", _String2="..") returned 1 [0201.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cdb8 [0201.935] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.935] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.935] wcscat (in: _Dest=0x3f3cdb8, _Source="DGWEBHD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" [0201.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0201.936] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c0a800, ftCreationTime.dwHighDateTime=0x1c615e0, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd8c0a800, ftLastWriteTime.dwHighDateTime=0x1c615e0, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBPQT.DPV", cAlternateFileName="")) returned 1 [0201.936] wcscmp (_String1="DGWEBPQT.DPV", _String2=".") returned 1 [0201.936] wcscmp (_String1="DGWEBPQT.DPV", _String2="..") returned 1 [0201.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cc20 [0201.936] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.936] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.936] wcscat (in: _Dest=0x3f3cc20, _Source="DGWEBPQT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" [0201.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0201.937] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc79fa000, ftCreationTime.dwHighDateTime=0x1c91766, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc79fa000, ftLastWriteTime.dwHighDateTime=0x1c91766, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBPQT.XML", cAlternateFileName="")) returned 1 [0201.937] wcscmp (_String1="DGWEBPQT.XML", _String2=".") returned 1 [0201.937] wcscmp (_String1="DGWEBPQT.XML", _String2="..") returned 1 [0201.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cd30 [0201.938] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.938] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.938] wcscat (in: _Dest=0x3f3cd30, _Source="DGWEBPQT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" [0201.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0201.939] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc5e2800, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfc5e2800, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBREF.XML", cAlternateFileName="")) returned 1 [0201.939] wcscmp (_String1="DGWEBREF.XML", _String2=".") returned 1 [0201.939] wcscmp (_String1="DGWEBREF.XML", _String2="..") returned 1 [0201.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d6c0 [0201.939] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.939] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.939] wcscat (in: _Dest=0x3f3d6c0, _Source="DGWEBREF.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" [0201.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0201.940] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ca9400, ftCreationTime.dwHighDateTime=0x1c685d8, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd9ca9400, ftLastWriteTime.dwHighDateTime=0x1c685d8, nFileSizeHigh=0x0, nFileSizeLow=0x6df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBSBR.DPV", cAlternateFileName="")) returned 1 [0201.940] wcscmp (_String1="DGWEBSBR.DPV", _String2=".") returned 1 [0201.940] wcscmp (_String1="DGWEBSBR.DPV", _String2="..") returned 1 [0201.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d1f8 [0201.940] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.940] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.940] wcscat (in: _Dest=0x3f3d1f8, _Source="DGWEBSBR.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" [0201.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0201.941] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdedf00, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x876a7c10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xecdedf00, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBSBR.XML", cAlternateFileName="")) returned 1 [0201.941] wcscmp (_String1="DGWEBSBR.XML", _String2=".") returned 1 [0201.941] wcscmp (_String1="DGWEBSBR.XML", _String2="..") returned 1 [0201.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c978 [0201.941] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.941] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.941] wcscat (in: _Dest=0x3f3c978, _Source="DGWEBSBR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" [0201.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0201.943] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc09bc00, ftCreationTime.dwHighDateTime=0x1c5d9c2, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc09bc00, ftLastWriteTime.dwHighDateTime=0x1c5d9c2, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGZIP.DPV", cAlternateFileName="")) returned 1 [0201.943] wcscmp (_String1="DGZIP.DPV", _String2=".") returned 1 [0201.943] wcscmp (_String1="DGZIP.DPV", _String2="..") returned 1 [0201.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a318 [0201.943] wcscpy (in: _Dest=0x3e1a318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.943] wcscat (in: _Dest=0x3e1a318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.943] wcscat (in: _Dest=0x3e1a318, _Source="DGZIP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" [0201.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0201.944] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc1f000, ftCreationTime.dwHighDateTime=0x1c91763, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdfc1f000, ftLastWriteTime.dwHighDateTime=0x1c91763, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGZIPC.XML", cAlternateFileName="")) returned 1 [0201.944] wcscmp (_String1="DGZIPC.XML", _String2=".") returned 1 [0201.944] wcscmp (_String1="DGZIPC.XML", _String2="..") returned 1 [0201.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c538 [0201.944] wcscpy (in: _Dest=0x3f3c538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.944] wcscat (in: _Dest=0x3f3c538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.944] wcscat (in: _Dest=0x3f3c538, _Source="DGZIPC.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" [0201.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0201.946] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51be900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb51be900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1c56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOTS.POC", cAlternateFileName="")) returned 1 [0201.946] wcscmp (_String1="DOTS.POC", _String2=".") returned 1 [0201.946] wcscmp (_String1="DOTS.POC", _String2="..") returned 1 [0201.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19b98 [0201.946] wcscpy (in: _Dest=0x3e19b98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.946] wcscat (in: _Dest=0x3e19b98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.946] wcscat (in: _Dest=0x3e19b98, _Source="DOTS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" [0201.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0201.947] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d1600, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x876cdd70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb64d1600, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x10c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDHM.POC", cAlternateFileName="")) returned 1 [0201.947] wcscmp (_String1="DVDHM.POC", _String2=".") returned 1 [0201.947] wcscmp (_String1="DVDHM.POC", _String2="..") returned 1 [0201.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a498 [0201.947] wcscpy (in: _Dest=0x3e1a498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.947] wcscat (in: _Dest=0x3e1a498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.948] wcscat (in: _Dest=0x3e1a498, _Source="DVDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" [0201.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0201.948] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae206500, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8784ab30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae206500, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x7dc55, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL.DPV", cAlternateFileName="")) returned 1 [0201.949] wcscmp (_String1="EMAIL.DPV", _String2=".") returned 1 [0201.949] wcscmp (_String1="EMAIL.DPV", _String2="..") returned 1 [0201.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e18f18 [0201.949] wcscpy (in: _Dest=0x3e18f18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.949] wcscat (in: _Dest=0x3e18f18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.949] wcscat (in: _Dest=0x3e18f18, _Source="EMAIL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" [0201.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e18f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0201.950] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6e1c00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x8784ab30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4d6e1c00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0xd066, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL.XML", cAlternateFileName="")) returned 1 [0201.950] wcscmp (_String1="EMAIL.XML", _String2=".") returned 1 [0201.950] wcscmp (_String1="EMAIL.XML", _String2="..") returned 1 [0201.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1ab18 [0201.950] wcscpy (in: _Dest=0x3e1ab18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.950] wcscat (in: _Dest=0x3e1ab18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.950] wcscat (in: _Dest=0x3e1ab18, _Source="EMAIL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" [0201.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1ab18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0201.951] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd67e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd67e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xbc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL11.POC", cAlternateFileName="")) returned 1 [0201.951] wcscmp (_String1="EMAIL11.POC", _String2=".") returned 1 [0201.951] wcscmp (_String1="EMAIL11.POC", _String2="..") returned 1 [0201.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cb10 [0201.951] wcscpy (in: _Dest=0x3f3cb10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.952] wcscat (in: _Dest=0x3f3cb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.952] wcscat (in: _Dest=0x3f3cb10, _Source="EMAIL11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" [0201.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0201.953] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4302b400, ftCreationTime.dwHighDateTime=0x1c51435, ftLastAccessTime.dwLowDateTime=0x77416650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302b400, ftLastWriteTime.dwHighDateTime=0x1c51435, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAILMOD.POC", cAlternateFileName="")) returned 1 [0201.953] wcscmp (_String1="EMAILMOD.POC", _String2=".") returned 1 [0201.953] wcscmp (_String1="EMAILMOD.POC", _String2="..") returned 1 [0201.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3ca00 [0201.953] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.953] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.953] wcscat (in: _Dest=0x3f3ca00, _Source="EMAILMOD.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" [0201.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0201.954] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd67e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbfd67e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xc5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV11.POC", cAlternateFileName="")) returned 1 [0201.954] wcscmp (_String1="ENV11.POC", _String2=".") returned 1 [0201.954] wcscmp (_String1="ENV11.POC", _String2="..") returned 1 [0201.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19418 [0201.954] wcscpy (in: _Dest=0x3e19418, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.954] wcscat (in: _Dest=0x3e19418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.954] wcscat (in: _Dest=0x3e19418, _Source="ENV11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" [0201.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0201.956] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x878bcf50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x2a052, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV98.POC", cAlternateFileName="")) returned 1 [0201.956] wcscmp (_String1="ENV98.POC", _String2=".") returned 1 [0201.956] wcscmp (_String1="ENV98.POC", _String2="..") returned 1 [0201.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19698 [0201.956] wcscpy (in: _Dest=0x3e19698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.956] wcscat (in: _Dest=0x3e19698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.956] wcscat (in: _Dest=0x3e19698, _Source="ENV98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" [0201.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0201.957] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x878bcf50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x4af4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV98SP.POC", cAlternateFileName="")) returned 1 [0201.957] wcscmp (_String1="ENV98SP.POC", _String2=".") returned 1 [0201.957] wcscmp (_String1="ENV98SP.POC", _String2="..") returned 1 [0201.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d638 [0201.957] wcscpy (in: _Dest=0x3f3d638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.957] wcscat (in: _Dest=0x3f3d638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.957] wcscat (in: _Dest=0x3f3d638, _Source="ENV98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" [0201.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0201.958] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf519200, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf519200, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x24efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DPV", cAlternateFileName="")) returned 1 [0201.958] wcscmp (_String1="ENVELOPE.DPV", _String2=".") returned 1 [0201.958] wcscmp (_String1="ENVELOPE.DPV", _String2="..") returned 1 [0201.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c3a0 [0201.958] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.958] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.958] wcscat (in: _Dest=0x3f3c3a0, _Source="ENVELOPE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" [0201.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0201.959] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3286200, ftCreationTime.dwHighDateTime=0x1c9d3fb, ftLastAccessTime.dwLowDateTime=0x878e30b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3286200, ftLastWriteTime.dwHighDateTime=0x1c9d3fb, nFileSizeHigh=0x0, nFileSizeLow=0x30de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.XML", cAlternateFileName="")) returned 1 [0201.959] wcscmp (_String1="ENVELOPE.XML", _String2=".") returned 1 [0201.959] wcscmp (_String1="ENVELOPE.XML", _String2="..") returned 1 [0201.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3bc30 [0201.960] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.960] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.960] wcscat (in: _Dest=0x3f3bc30, _Source="ENVELOPE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" [0201.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0201.961] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7743c7b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x8a32, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVHM.POC", cAlternateFileName="")) returned 1 [0201.961] wcscmp (_String1="ENVHM.POC", _String2=".") returned 1 [0201.961] wcscmp (_String1="ENVHM.POC", _String2="..") returned 1 [0201.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19b18 [0201.961] wcscpy (in: _Dest=0x3e19b18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.961] wcscat (in: _Dest=0x3e19b18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.961] wcscat (in: _Dest=0x3e19b18, _Source="ENVHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" [0201.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0201.962] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc238d800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x87b90970, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc238d800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="FEZIP.POC", cAlternateFileName="")) returned 1 [0201.962] wcscmp (_String1="FEZIP.POC", _String2=".") returned 1 [0201.962] wcscmp (_String1="FEZIP.POC", _String2="..") returned 1 [0201.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a198 [0201.963] wcscpy (in: _Dest=0x3e1a198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.963] wcscat (in: _Dest=0x3e1a198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.963] wcscat (in: _Dest=0x3e1a198, _Source="FEZIP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" [0201.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0201.964] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36a0500, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc36a0500, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xfd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLY98SP.POC", cAlternateFileName="")) returned 1 [0201.964] wcscmp (_String1="FLY98SP.POC", _String2=".") returned 1 [0201.964] wcscmp (_String1="FLY98SP.POC", _String2="..") returned 1 [0201.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d4a0 [0201.964] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0201.964] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0201.964] wcscat (in: _Dest=0x3f3d4a0, _Source="FLY98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" [0201.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0203.142] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30b2c00, ftCreationTime.dwHighDateTime=0x1c8f1f7, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd30b2c00, ftLastWriteTime.dwHighDateTime=0x1c8f1f7, nFileSizeHigh=0x0, nFileSizeLow=0x15369c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER.DPV", cAlternateFileName="")) returned 1 [0203.142] wcscmp (_String1="FLYER.DPV", _String2=".") returned 1 [0203.142] wcscmp (_String1="FLYER.DPV", _String2="..") returned 1 [0203.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19998 [0203.142] wcscpy (in: _Dest=0x3e19998, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0203.142] wcscat (in: _Dest=0x3e19998, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0203.142] wcscat (in: _Dest=0x3e19998, _Source="FLYER.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" [0203.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0203.289] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea57c00, ftCreationTime.dwHighDateTime=0x1ca57fe, ftLastAccessTime.dwLowDateTime=0x88373250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ea57c00, ftLastWriteTime.dwHighDateTime=0x1ca57fe, nFileSizeHigh=0x0, nFileSizeLow=0x13d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER.XML", cAlternateFileName="")) returned 1 [0203.289] wcscmp (_String1="FLYER.XML", _String2=".") returned 1 [0203.289] wcscmp (_String1="FLYER.XML", _String2="..") returned 1 [0203.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19898 [0203.289] wcscpy (in: _Dest=0x3e19898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0203.289] wcscat (in: _Dest=0x3e19898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0203.290] wcscat (in: _Dest=0x3e19898, _Source="FLYER.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" [0203.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0203.291] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cc5f00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x883993b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc5cc5f00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x369a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER11.POC", cAlternateFileName="")) returned 1 [0203.291] wcscmp (_String1="FLYER11.POC", _String2=".") returned 1 [0203.291] wcscmp (_String1="FLYER11.POC", _String2="..") returned 1 [0203.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68dd8 [0203.291] wcscpy (in: _Dest=0x7a68dd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0203.291] wcscat (in: _Dest=0x7a68dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0203.291] wcscat (in: _Dest=0x7a68dd8, _Source="FLYER11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" [0203.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a68dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0203.292] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2e94e00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd2e94e00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xe498e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER98.POC", cAlternateFileName="")) returned 1 [0203.292] wcscmp (_String1="FLYER98.POC", _String2=".") returned 1 [0203.292] wcscmp (_String1="FLYER98.POC", _String2="..") returned 1 [0203.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cf50 [0203.293] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0203.293] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0203.293] wcscat (in: _Dest=0x3f3cf50, _Source="FLYER98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" [0203.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0203.294] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41a7b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd41a7b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xd988, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYERHM.POC", cAlternateFileName="")) returned 1 [0203.294] wcscmp (_String1="FLYERHM.POC", _String2=".") returned 1 [0203.294] wcscmp (_String1="FLYERHM.POC", _String2="..") returned 1 [0203.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d968 [0203.294] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0203.294] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0203.294] wcscat (in: _Dest=0x3f3d968, _Source="FLYERHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" [0203.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0203.295] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5477300, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5477300, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x56ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDPROJ.DPV", cAlternateFileName="")) returned 1 [0203.295] wcscmp (_String1="FOLDPROJ.DPV", _String2=".") returned 1 [0203.295] wcscmp (_String1="FOLDPROJ.DPV", _String2="..") returned 1 [0203.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c208 [0203.295] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0203.295] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0203.295] wcscat (in: _Dest=0x3f3c208, _Source="FOLDPROJ.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" [0203.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0203.296] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecf0800, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x77d29a30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6ecf0800, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDPROJ.XML", cAlternateFileName="")) returned 1 [0203.296] wcscmp (_String1="FOLDPROJ.XML", _String2=".") returned 1 [0203.296] wcscmp (_String1="FOLDPROJ.XML", _String2="..") returned 1 [0203.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d390 [0203.297] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0203.297] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0203.297] wcscat (in: _Dest=0x3f3d390, _Source="FOLDPROJ.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" [0203.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0203.298] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded51000, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded51000, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x8c952, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM98.POC", cAlternateFileName="")) returned 1 [0203.298] wcscmp (_String1="FORM98.POC", _String2=".") returned 1 [0203.298] wcscmp (_String1="FORM98.POC", _String2="..") returned 1 [0203.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d748 [0203.298] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0203.298] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0203.298] wcscat (in: _Dest=0x3f3d748, _Source="FORM98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" [0203.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0203.300] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded51000, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded51000, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMCTL.POC", cAlternateFileName="")) returned 1 [0203.300] wcscmp (_String1="FORMCTL.POC", _String2=".") returned 1 [0203.300] wcscmp (_String1="FORMCTL.POC", _String2="..") returned 1 [0203.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bdc8 [0203.300] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0203.300] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0203.300] wcscat (in: _Dest=0x3f3bdc8, _Source="FORMCTL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" [0203.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0203.301] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded51000, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x77e80690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xded51000, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FS3BOX.POC", cAlternateFileName="")) returned 1 [0206.634] wcscmp (_String1="FS3BOX.POC", _String2=".") returned 1 [0206.635] wcscmp (_String1="FS3BOX.POC", _String2="..") returned 1 [0206.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb99a0 [0206.635] wcscpy (in: _Dest=0x3eb99a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0206.635] wcscat (in: _Dest=0x3eb99a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0206.635] wcscat (in: _Dest=0x3eb99a0, _Source="FS3BOX.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" [0207.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb99a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0207.631] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf519200, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x77ea67f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaf519200, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xb0c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT.DPV", cAlternateFileName="")) returned 1 [0207.631] wcscmp (_String1="GIFT.DPV", _String2=".") returned 1 [0207.631] wcscmp (_String1="GIFT.DPV", _String2="..") returned 1 [0207.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19298 [0207.632] wcscpy (in: _Dest=0x3e19298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.632] wcscat (in: _Dest=0x3e19298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.632] wcscat (in: _Dest=0x3e19298, _Source="GIFT.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" [0207.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0207.633] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79899d00, ftCreationTime.dwHighDateTime=0x1c91764, ftLastAccessTime.dwLowDateTime=0x77ea67f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x79899d00, ftLastWriteTime.dwHighDateTime=0x1c91764, nFileSizeHigh=0x0, nFileSizeLow=0x14c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT.XML", cAlternateFileName="")) returned 1 [0207.633] wcscmp (_String1="GIFT.XML", _String2=".") returned 1 [0207.633] wcscmp (_String1="GIFT.XML", _String2="..") returned 1 [0207.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a018 [0207.634] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.634] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.634] wcscat (in: _Dest=0x3e1a018, _Source="GIFT.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" [0207.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0207.635] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0063d00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x88692f30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0063d00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x22cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT98.POC", cAlternateFileName="")) returned 1 [0207.635] wcscmp (_String1="GIFT98.POC", _String2=".") returned 1 [0207.635] wcscmp (_String1="GIFT98.POC", _String2="..") returned 1 [0207.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d968 [0207.636] wcscpy (in: _Dest=0x3f3d968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.636] wcscat (in: _Dest=0x3f3d968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.636] wcscat (in: _Dest=0x3f3d968, _Source="GIFT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" [0207.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0207.638] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee545900, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x78ca2930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xee545900, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xd6314, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREET11.POC", cAlternateFileName="")) returned 1 [0207.638] wcscmp (_String1="GREET11.POC", _String2=".") returned 1 [0207.638] wcscmp (_String1="GREET11.POC", _String2="..") returned 1 [0207.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c208 [0207.638] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.638] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.638] wcscat (in: _Dest=0x3f3c208, _Source="GREET11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" [0207.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0207.640] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd560100, ftCreationTime.dwHighDateTime=0x1c5dc2c, ftLastAccessTime.dwLowDateTime=0x888f4530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd560100, ftLastWriteTime.dwHighDateTime=0x1c5dc2c, nFileSizeHigh=0x0, nFileSizeLow=0x124b3b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREETING.DPV", cAlternateFileName="")) returned 1 [0207.640] wcscmp (_String1="GREETING.DPV", _String2=".") returned 1 [0207.640] wcscmp (_String1="GREETING.DPV", _String2="..") returned 1 [0207.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d4a0 [0207.640] wcscpy (in: _Dest=0x3f3d4a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.640] wcscat (in: _Dest=0x3f3d4a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.640] wcscat (in: _Dest=0x3f3d4a0, _Source="GREETING.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" [0207.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0207.642] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa11cb700, ftCreationTime.dwHighDateTime=0x1ca57f8, ftLastAccessTime.dwLowDateTime=0x888f4530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa11cb700, ftLastWriteTime.dwHighDateTime=0x1ca57f8, nFileSizeHigh=0x0, nFileSizeLow=0xfb0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREETING.XML", cAlternateFileName="")) returned 1 [0207.642] wcscmp (_String1="GREETING.XML", _String2=".") returned 1 [0207.642] wcscmp (_String1="GREETING.XML", _String2="..") returned 1 [0207.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d390 [0207.643] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.643] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.643] wcscat (in: _Dest=0x3f3d390, _Source="GREETING.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" [0207.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0207.644] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ffc3100, ftCreationTime.dwHighDateTime=0x1c97723, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8ffc3100, ftLastWriteTime.dwHighDateTime=0x1c97723, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADINGBB.DPV", cAlternateFileName="HEADIN~1.DPV")) returned 1 [0207.644] wcscmp (_String1="HEADINGBB.DPV", _String2=".") returned 1 [0207.644] wcscmp (_String1="HEADINGBB.DPV", _String2="..") returned 1 [0207.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d748 [0207.645] wcscpy (in: _Dest=0x3f3d748, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.645] wcscat (in: _Dest=0x3f3d748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.645] wcscat (in: _Dest=0x3f3d748, _Source="HEADINGBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" [0207.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0207.646] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c78100, ftCreationTime.dwHighDateTime=0x1c97a9d, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88c78100, ftLastWriteTime.dwHighDateTime=0x1c97a9d, nFileSizeHigh=0x0, nFileSizeLow=0x27e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADINGBB.POC", cAlternateFileName="HEADIN~1.POC")) returned 1 [0207.647] wcscmp (_String1="HEADINGBB.POC", _String2=".") returned 1 [0207.647] wcscmp (_String1="HEADINGBB.POC", _String2="..") returned 1 [0207.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3bdc8 [0207.647] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.647] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.647] wcscat (in: _Dest=0x3f3bdc8, _Source="HEADINGBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" [0207.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0207.648] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9f8e00, ftCreationTime.dwHighDateTime=0x1c5dc20, ftLastAccessTime.dwLowDateTime=0x88d1ebb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc9f8e00, ftLastWriteTime.dwHighDateTime=0x1c5dc20, nFileSizeHigh=0x0, nFileSizeLow=0x3cbaf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE.DPV", cAlternateFileName="")) returned 1 [0207.648] wcscmp (_String1="INVITE.DPV", _String2=".") returned 1 [0207.648] wcscmp (_String1="INVITE.DPV", _String2="..") returned 1 [0207.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d638 [0207.648] wcscpy (in: _Dest=0x3f3d638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.649] wcscat (in: _Dest=0x3f3d638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.649] wcscat (in: _Dest=0x3f3d638, _Source="INVITE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" [0207.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0207.650] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12f7ff00, ftCreationTime.dwHighDateTime=0x1ca57ff, ftLastAccessTime.dwLowDateTime=0x790ccfb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x12f7ff00, ftLastWriteTime.dwHighDateTime=0x1ca57ff, nFileSizeHigh=0x0, nFileSizeLow=0x49c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE.XML", cAlternateFileName="")) returned 1 [0207.650] wcscmp (_String1="INVITE.XML", _String2=".") returned 1 [0207.650] wcscmp (_String1="INVITE.XML", _String2="..") returned 1 [0207.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c7e0 [0207.650] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.650] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.650] wcscat (in: _Dest=0x3f3c7e0, _Source="INVITE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" [0207.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0207.652] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ddc100, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x88d1ebb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf7ddc100, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xbc448, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE11.POC", cAlternateFileName="")) returned 1 [0207.652] wcscmp (_String1="INVITE11.POC", _String2=".") returned 1 [0207.652] wcscmp (_String1="INVITE11.POC", _String2="..") returned 1 [0207.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cdb8 [0207.652] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.652] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.652] wcscat (in: _Dest=0x3f3cdb8, _Source="INVITE11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" [0207.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0207.653] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e51900, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8bdc4d50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb2e51900, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x2a1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL.DPV", cAlternateFileName="")) returned 1 [0207.653] wcscmp (_String1="LABEL.DPV", _String2=".") returned 1 [0207.653] wcscmp (_String1="LABEL.DPV", _String2="..") returned 1 [0207.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19898 [0207.654] wcscpy (in: _Dest=0x3e19898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.654] wcscat (in: _Dest=0x3e19898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.654] wcscat (in: _Dest=0x3e19898, _Source="LABEL.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" [0207.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0207.655] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f69100, ftCreationTime.dwHighDateTime=0x1ca57ff, ftLastAccessTime.dwLowDateTime=0x7b96a710, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31f69100, ftLastWriteTime.dwHighDateTime=0x1ca57ff, nFileSizeHigh=0x0, nFileSizeLow=0x48c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL.XML", cAlternateFileName="")) returned 1 [0207.655] wcscmp (_String1="LABEL.XML", _String2=".") returned 1 [0207.655] wcscmp (_String1="LABEL.XML", _String2="..") returned 1 [0207.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e18f18 [0207.655] wcscpy (in: _Dest=0x3e18f18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.655] wcscat (in: _Dest=0x3e18f18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.655] wcscat (in: _Dest=0x3e18f18, _Source="LABEL.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" [0207.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e18f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0207.656] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa401b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa401b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x27842, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL98.POC", cAlternateFileName="")) returned 1 [0207.656] wcscmp (_String1="LABEL98.POC", _String2=".") returned 1 [0207.657] wcscmp (_String1="LABEL98.POC", _String2="..") returned 1 [0207.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cd30 [0207.657] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.657] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.657] wcscat (in: _Dest=0x3f3cd30, _Source="LABEL98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" [0207.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0207.658] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa401b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa401b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3464, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABELHM.POC", cAlternateFileName="")) returned 1 [0207.658] wcscmp (_String1="LABELHM.POC", _String2=".") returned 1 [0207.658] wcscmp (_String1="LABELHM.POC", _String2="..") returned 1 [0207.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d280 [0207.659] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.659] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.659] wcscat (in: _Dest=0x3f3d280, _Source="LABELHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" [0207.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0207.660] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4164600, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8bdeaeb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4164600, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x1f89d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LETTHEAD.DPV", cAlternateFileName="")) returned 1 [0207.660] wcscmp (_String1="LETTHEAD.DPV", _String2=".") returned 1 [0207.660] wcscmp (_String1="LETTHEAD.DPV", _String2="..") returned 1 [0207.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c180 [0207.660] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.660] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.660] wcscat (in: _Dest=0x3f3c180, _Source="LETTHEAD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" [0207.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0207.663] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf146bf00, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x7b990870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf146bf00, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x309e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LETTHEAD.XML", cAlternateFileName="")) returned 1 [0207.663] wcscmp (_String1="LETTHEAD.XML", _String2=".") returned 1 [0207.663] wcscmp (_String1="LETTHEAD.XML", _String2="..") returned 1 [0207.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cc20 [0207.663] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.663] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.663] wcscat (in: _Dest=0x3f3cc20, _Source="LETTHEAD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" [0207.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0207.664] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa401b00, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfa401b00, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEACT.POC", cAlternateFileName="")) returned 1 [0207.664] wcscmp (_String1="LINEACT.POC", _String2=".") returned 1 [0207.664] wcscmp (_String1="LINEACT.POC", _String2="..") returned 1 [0207.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d6c0 [0207.665] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.665] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.665] wcscat (in: _Dest=0x3f3d6c0, _Source="LINEACT.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" [0207.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80 [0207.667] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb714800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb714800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xb026, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGO98.POC", cAlternateFileName="")) returned 1 [0207.667] wcscmp (_String1="LOGO98.POC", _String2=".") returned 1 [0207.667] wcscmp (_String1="LOGO98.POC", _String2="..") returned 1 [0207.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d1f8 [0207.667] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.667] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.667] wcscat (in: _Dest=0x3f3d1f8, _Source="LOGO98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" [0207.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0207.670] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb714800, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfb714800, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xa82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD11.POC", cAlternateFileName="")) returned 1 [0207.671] wcscmp (_String1="LTHD11.POC", _String2=".") returned 1 [0207.671] wcscmp (_String1="LTHD11.POC", _String2="..") returned 1 [0207.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c978 [0207.671] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.671] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.671] wcscat (in: _Dest=0x3f3c978, _Source="LTHD11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" [0207.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0207.989] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x2383c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD98.POC", cAlternateFileName="")) returned 1 [0207.989] wcscmp (_String1="LTHD98.POC", _String2=".") returned 1 [0207.989] wcscmp (_String1="LTHD98.POC", _String2="..") returned 1 [0207.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d638 [0207.989] wcscpy (in: _Dest=0x3f3d638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0207.989] wcscat (in: _Dest=0x3f3d638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0207.989] wcscat (in: _Dest=0x3f3d638, _Source="LTHD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" [0211.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0211.302] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x8d142170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD98SP.POC", cAlternateFileName="")) returned 1 [0211.302] wcscmp (_String1="LTHD98SP.POC", _String2=".") returned 1 [0211.302] wcscmp (_String1="LTHD98SP.POC", _String2="..") returned 1 [0211.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d6c0 [0211.302] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.302] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.302] wcscat (in: _Dest=0x3f3d6c0, _Source="LTHD98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" [0211.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0211.303] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0x9a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHDHM.POC", cAlternateFileName="")) returned 1 [0211.303] wcscmp (_String1="LTHDHM.POC", _String2=".") returned 1 [0211.303] wcscmp (_String1="LTHDHM.POC", _String2="..") returned 1 [0211.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3cc20 [0211.304] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.304] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.304] wcscat (in: _Dest=0x3f3cc20, _Source="LTHDHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" [0211.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0211.305] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e0bdf00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x7f2192f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1e0bdf00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x2694, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIN.XML", cAlternateFileName="")) returned 1 [0211.305] wcscmp (_String1="MAIN.XML", _String2=".") returned 1 [0211.305] wcscmp (_String1="MAIN.XML", _String2="..") returned 1 [0211.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e18f18 [0211.305] wcscpy (in: _Dest=0x3e18f18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.305] wcscat (in: _Dest=0x3e18f18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.305] wcscat (in: _Dest=0x3e18f18, _Source="MAIN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" [0211.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e18f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0211.306] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd3a200, ftCreationTime.dwHighDateTime=0x1c4a174, ftLastAccessTime.dwLowDateTime=0x7f2b1870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfdd3a200, ftLastWriteTime.dwHighDateTime=0x1c4a174, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="MARQUEE.POC", cAlternateFileName="")) returned 1 [0211.306] wcscmp (_String1="MARQUEE.POC", _String2=".") returned 1 [0211.306] wcscmp (_String1="MARQUEE.POC", _String2="..") returned 1 [0211.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c180 [0211.306] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.306] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.306] wcscat (in: _Dest=0x3f3c180, _Source="MARQUEE.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" [0211.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0211.307] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0ba200, ftCreationTime.dwHighDateTime=0x1c61dd8, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad0ba200, ftLastWriteTime.dwHighDateTime=0x1c61dd8, nFileSizeHigh=0x0, nFileSizeLow=0x14a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU.DPV", cAlternateFileName="")) returned 1 [0211.307] wcscmp (_String1="MENU.DPV", _String2=".") returned 1 [0211.307] wcscmp (_String1="MENU.DPV", _String2="..") returned 1 [0211.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19898 [0211.307] wcscpy (in: _Dest=0x3e19898, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.307] wcscat (in: _Dest=0x3e19898, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.307] wcscat (in: _Dest=0x3e19898, _Source="MENU.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" [0211.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0211.308] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26641a00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x8d24cb10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x26641a00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x138a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU.XML", cAlternateFileName="")) returned 1 [0211.308] wcscmp (_String1="MENU.XML", _String2=".") returned 1 [0211.308] wcscmp (_String1="MENU.XML", _String2="..") returned 1 [0211.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a018 [0211.309] wcscpy (in: _Dest=0x3e1a018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.309] wcscat (in: _Dest=0x3e1a018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.309] wcscat (in: _Dest=0x3e1a018, _Source="MENU.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" [0211.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140c [0211.310] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1672900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x7f3e2370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1672900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU98.POC", cAlternateFileName="")) returned 1 [0211.310] wcscmp (_String1="MENU98.POC", _String2=".") returned 1 [0211.310] wcscmp (_String1="MENU98.POC", _String2="..") returned 1 [0211.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c7e0 [0211.310] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.310] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.310] wcscat (in: _Dest=0x3f3c7e0, _Source="MENU98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" [0211.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0211.311] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c98300, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8dd4f0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3c98300, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x208fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTHED98.POC", cAlternateFileName="")) returned 1 [0211.311] wcscmp (_String1="MSTHED98.POC", _String2=".") returned 1 [0211.311] wcscmp (_String1="MSTHED98.POC", _String2="..") returned 1 [0211.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cdb8 [0211.311] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.312] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.312] wcscat (in: _Dest=0x3f3cdb8, _Source="MSTHED98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" [0211.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0211.312] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fab000, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4fab000, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1da0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBAR11.POC", cAlternateFileName="")) returned 1 [0211.313] wcscmp (_String1="NAVBAR11.POC", _String2=".") returned 1 [0211.313] wcscmp (_String1="NAVBAR11.POC", _String2="..") returned 1 [0211.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cd30 [0211.313] wcscpy (in: _Dest=0x3f3cd30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.313] wcscat (in: _Dest=0x3f3cd30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.313] wcscat (in: _Dest=0x3f3cd30, _Source="NAVBAR11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" [0211.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cd30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0211.314] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bdd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62bdd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1ccde, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBARV.POC", cAlternateFileName="")) returned 1 [0211.314] wcscmp (_String1="NAVBARV.POC", _String2=".") returned 1 [0211.314] wcscmp (_String1="NAVBARV.POC", _String2="..") returned 1 [0211.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bf60 [0211.314] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.314] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.314] wcscat (in: _Dest=0x3f3bf60, _Source="NAVBARV.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" [0211.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bf60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0211.315] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bdd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62bdd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBRPH1.POC", cAlternateFileName="")) returned 1 [0211.315] wcscmp (_String1="NAVBRPH1.POC", _String2=".") returned 1 [0211.315] wcscmp (_String1="NAVBRPH1.POC", _String2="..") returned 1 [0211.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c070 [0211.315] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.315] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.315] wcscat (in: _Dest=0x3f3c070, _Source="NAVBRPH1.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" [0211.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0211.316] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bdd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x80d2cd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62bdd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x396, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBRPH2.POC", cAlternateFileName="")) returned 1 [0211.316] wcscmp (_String1="NAVBRPH2.POC", _String2=".") returned 1 [0211.316] wcscmp (_String1="NAVBRPH2.POC", _String2="..") returned 1 [0211.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d308 [0211.316] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0211.316] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0211.316] wcscat (in: _Dest=0x3f3d308, _Source="NAVBRPH2.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" [0211.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0211.317] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7291600, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc7291600, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x9965a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS.DPV", cAlternateFileName="")) returned 1 [0212.906] wcscmp (_String1="NEWS.DPV", _String2=".") returned 1 [0212.906] wcscmp (_String1="NEWS.DPV", _String2="..") returned 1 [0212.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a198 [0212.907] wcscpy (in: _Dest=0x3e1a198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.907] wcscat (in: _Dest=0x3e1a198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.907] wcscat (in: _Dest=0x3e1a198, _Source="NEWS.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" [0212.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0212.983] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8bec500, ftCreationTime.dwHighDateTime=0x1c9d3fa, ftLastAccessTime.dwLowDateTime=0x8de33910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8bec500, ftLastWriteTime.dwHighDateTime=0x1c9d3fa, nFileSizeHigh=0x0, nFileSizeLow=0x4260, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS.XML", cAlternateFileName="")) returned 1 [0212.983] wcscmp (_String1="NEWS.XML", _String2=".") returned 1 [0212.983] wcscmp (_String1="NEWS.XML", _String2="..") returned 1 [0212.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19b98 [0212.984] wcscpy (in: _Dest=0x3e19b98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.984] wcscat (in: _Dest=0x3e19b98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.984] wcscat (in: _Dest=0x3e19b98, _Source="NEWS.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" [0212.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0212.985] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52eb00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x80d52e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd52eb00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x87d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS11.POC", cAlternateFileName="")) returned 1 [0212.985] wcscmp (_String1="NEWS11.POC", _String2=".") returned 1 [0212.985] wcscmp (_String1="NEWS11.POC", _String2="..") returned 1 [0212.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c208 [0212.985] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.985] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.985] wcscat (in: _Dest=0x3f3c208, _Source="NEWS11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" [0212.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0212.986] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1ee200, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de59a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4a1ee200, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2dc320, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS98.POC", cAlternateFileName="")) returned 1 [0212.986] wcscmp (_String1="NEWS98.POC", _String2=".") returned 1 [0212.986] wcscmp (_String1="NEWS98.POC", _String2="..") returned 1 [0212.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d280 [0212.986] wcscpy (in: _Dest=0x3f3d280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.986] wcscat (in: _Dest=0x3f3d280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.987] wcscat (in: _Dest=0x3f3d280, _Source="NEWS98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" [0212.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0212.988] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8de7fbd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x5166c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWSHM.POC", cAlternateFileName="")) returned 1 [0212.988] wcscmp (_String1="NEWSHM.POC", _String2=".") returned 1 [0212.988] wcscmp (_String1="NEWSHM.POC", _String2="..") returned 1 [0212.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d1f8 [0212.988] wcscpy (in: _Dest=0x3f3d1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.988] wcscat (in: _Dest=0x3f3d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.988] wcscat (in: _Dest=0x3f3d1f8, _Source="NEWSHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" [0212.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0212.989] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8e5a3dd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x82e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORIG98.POC", cAlternateFileName="")) returned 1 [0212.989] wcscmp (_String1="ORIG98.POC", _String2=".") returned 1 [0212.989] wcscmp (_String1="ORIG98.POC", _String2="..") returned 1 [0212.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3bdc8 [0212.989] wcscpy (in: _Dest=0x3f3bdc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.989] wcscat (in: _Dest=0x3f3bdc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.989] wcscat (in: _Dest=0x3f3bdc8, _Source="ORIG98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" [0212.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0212.991] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31056900, ftCreationTime.dwHighDateTime=0x1c9a720, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31056900, ftLastWriteTime.dwHighDateTime=0x1c9a720, nFileSizeHigh=0x0, nFileSizeLow=0x4eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICCAP98.POC", cAlternateFileName="")) returned 1 [0212.991] wcscmp (_String1="PICCAP98.POC", _String2=".") returned 1 [0212.991] wcscmp (_String1="PICCAP98.POC", _String2="..") returned 1 [0212.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cf50 [0212.991] wcscpy (in: _Dest=0x3f3cf50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.991] wcscat (in: _Dest=0x3f3cf50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.991] wcscat (in: _Dest=0x3f3cf50, _Source="PICCAP98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" [0212.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0212.992] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x306fa900, ftCreationTime.dwHighDateTime=0x1c99074, ftLastAccessTime.dwLowDateTime=0x8fc67030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x306fa900, ftLastWriteTime.dwHighDateTime=0x1c99074, nFileSizeHigh=0x0, nFileSizeLow=0x1eac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICSTYLES.DPV", cAlternateFileName="PICSTY~1.DPV")) returned 1 [0212.992] wcscmp (_String1="PICSTYLES.DPV", _String2=".") returned 1 [0212.992] wcscmp (_String1="PICSTYLES.DPV", _String2="..") returned 1 [0212.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3eb9780 [0212.993] wcscpy (in: _Dest=0x3eb9780, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.993] wcscat (in: _Dest=0x3eb9780, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.993] wcscat (in: _Dest=0x3eb9780, _Source="PICSTYLES.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" [0212.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0212.994] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x81fc5910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTPH.POC", cAlternateFileName="")) returned 1 [0212.994] wcscmp (_String1="PICTPH.POC", _String2=".") returned 1 [0212.994] wcscmp (_String1="PICTPH.POC", _String2="..") returned 1 [0212.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9de0 [0212.994] wcscpy (in: _Dest=0x3eb9de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.994] wcscat (in: _Dest=0x3eb9de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.994] wcscat (in: _Dest=0x3eb9de0, _Source="PICTPH.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" [0212.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b90 [0212.995] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8fc8d190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1722, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNCTUATE.POC", cAlternateFileName="")) returned 1 [0212.995] wcscmp (_String1="PNCTUATE.POC", _String2=".") returned 1 [0212.995] wcscmp (_String1="PNCTUATE.POC", _String2="..") returned 1 [0212.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9f78 [0212.995] wcscpy (in: _Dest=0x3eb9f78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.995] wcscat (in: _Dest=0x3eb9f78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.995] wcscat (in: _Dest=0x3eb9f78, _Source="PNCTUATE.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" [0212.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80 [0212.996] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee39600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x81feba70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4ee39600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xb9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST98SP.POC", cAlternateFileName="")) returned 1 [0212.996] wcscmp (_String1="POST98SP.POC", _String2=".") returned 1 [0212.996] wcscmp (_String1="POST98SP.POC", _String2="..") returned 1 [0212.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9bc0 [0212.996] wcscpy (in: _Dest=0x3eb9bc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.996] wcscat (in: _Dest=0x3eb9bc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.996] wcscat (in: _Dest=0x3eb9bc0, _Source="POST98SP.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" [0212.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0212.998] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8994e00, ftCreationTime.dwHighDateTime=0x1c66496, ftLastAccessTime.dwLowDateTime=0x81feba70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc8994e00, ftLastWriteTime.dwHighDateTime=0x1c66496, nFileSizeHigh=0x0, nFileSizeLow=0xa194b, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCARD.DPV", cAlternateFileName="")) returned 1 [0212.998] wcscmp (_String1="POSTCARD.DPV", _String2=".") returned 1 [0212.998] wcscmp (_String1="POSTCARD.DPV", _String2="..") returned 1 [0212.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba550 [0212.998] wcscpy (in: _Dest=0x3eba550, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.998] wcscat (in: _Dest=0x3eba550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.998] wcscat (in: _Dest=0x3eba550, _Source="POSTCARD.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" [0212.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0212.999] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f138000, ftCreationTime.dwHighDateTime=0x1ca57ff, ftLastAccessTime.dwLowDateTime=0x82011bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f138000, ftLastWriteTime.dwHighDateTime=0x1ca57ff, nFileSizeHigh=0x0, nFileSizeLow=0x9a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCARD.XML", cAlternateFileName="")) returned 1 [0212.999] wcscmp (_String1="POSTCARD.XML", _String2=".") returned 1 [0212.999] wcscmp (_String1="POSTCARD.XML", _String2="..") returned 1 [0212.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8bd0 [0212.999] wcscpy (in: _Dest=0x3eb8bd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0212.999] wcscat (in: _Dest=0x3eb8bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0212.999] wcscat (in: _Dest=0x3eb8bd0, _Source="POSTCARD.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" [0212.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0213.000] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5014c300, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8fcd9450, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5014c300, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCD11.POC", cAlternateFileName="")) returned 1 [0213.000] wcscmp (_String1="POSTCD11.POC", _String2=".") returned 1 [0213.000] wcscmp (_String1="POSTCD11.POC", _String2="..") returned 1 [0213.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb8ce0 [0213.001] wcscpy (in: _Dest=0x3eb8ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.001] wcscat (in: _Dest=0x3eb8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.001] wcscat (in: _Dest=0x3eb8ce0, _Source="POSTCD11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" [0213.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0213.002] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82011bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xa84e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTCD98.POC", cAlternateFileName="")) returned 1 [0213.002] wcscmp (_String1="POSTCD98.POC", _String2=".") returned 1 [0213.002] wcscmp (_String1="POSTCD98.POC", _String2="..") returned 1 [0213.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb96f8 [0213.002] wcscpy (in: _Dest=0x3eb96f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.002] wcscat (in: _Dest=0x3eb96f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.002] wcscat (in: _Dest=0x3eb96f8, _Source="POSTCD98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" [0213.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb96f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0213.003] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xaf86, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROG98.POC", cAlternateFileName="")) returned 1 [0213.003] wcscmp (_String1="PROG98.POC", _String2=".") returned 1 [0213.003] wcscmp (_String1="PROG98.POC", _String2="..") returned 1 [0213.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb94d8 [0213.003] wcscpy (in: _Dest=0x3eb94d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.003] wcscat (in: _Dest=0x3eb94d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.003] wcscat (in: _Dest=0x3eb94d8, _Source="PROG98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" [0213.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb94d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0213.004] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb678a000, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x90318e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb678a000, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROGRAM.DPV", cAlternateFileName="")) returned 1 [0213.004] wcscmp (_String1="PROGRAM.DPV", _String2=".") returned 1 [0213.004] wcscmp (_String1="PROGRAM.DPV", _String2="..") returned 1 [0213.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9c48 [0213.005] wcscpy (in: _Dest=0x3eb9c48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.005] wcscat (in: _Dest=0x3eb9c48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.005] wcscat (in: _Dest=0x3eb9c48, _Source="PROGRAM.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" [0213.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b08 [0213.006] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4562ac00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4562ac00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x26c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROGRAM.XML", cAlternateFileName="")) returned 1 [0213.006] wcscmp (_String1="PROGRAM.XML", _String2=".") returned 1 [0213.006] wcscmp (_String1="PROGRAM.XML", _String2="..") returned 1 [0213.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb92b8 [0213.006] wcscpy (in: _Dest=0x3eb92b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.006] wcscat (in: _Dest=0x3eb92b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.006] wcscat (in: _Dest=0x3eb92b8, _Source="PROGRAM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" [0213.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0213.007] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x934, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS10TARG.POC", cAlternateFileName="")) returned 1 [0213.007] wcscmp (_String1="PS10TARG.POC", _String2=".") returned 1 [0213.008] wcscmp (_String1="PS10TARG.POC", _String2="..") returned 1 [0213.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba4c8 [0213.008] wcscpy (in: _Dest=0x3eba4c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.008] wcscat (in: _Dest=0x3eba4c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.008] wcscat (in: _Dest=0x3eba4c8, _Source="PS10TARG.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" [0213.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8 [0213.009] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x9033ef70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS2SWOOS.POC", cAlternateFileName="")) returned 1 [0213.009] wcscmp (_String1="PS2SWOOS.POC", _String2=".") returned 1 [0213.009] wcscmp (_String1="PS2SWOOS.POC", _String2="..") returned 1 [0213.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9450 [0213.009] wcscpy (in: _Dest=0x3eb9450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.009] wcscat (in: _Dest=0x3eb9450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.009] wcscat (in: _Dest=0x3eb9450, _Source="PS2SWOOS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" [0213.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0213.011] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599e2b00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x820d02b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x599e2b00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PS9CRNRH.POC", cAlternateFileName="")) returned 1 [0213.011] wcscmp (_String1="PS9CRNRH.POC", _String2=".") returned 1 [0213.011] wcscmp (_String1="PS9CRNRH.POC", _String2="..") returned 1 [0213.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba110 [0213.011] wcscpy (in: _Dest=0x3eba110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.011] wcscat (in: _Dest=0x3eba110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.011] wcscat (in: _Dest=0x3eba110, _Source="PS9CRNRH.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" [0213.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0213.012] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1403e800, ftCreationTime.dwHighDateTime=0x1c97727, ftLastAccessTime.dwLowDateTime=0x9038b230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1403e800, ftLastWriteTime.dwHighDateTime=0x1c97727, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULLQUOTEBB.DPV", cAlternateFileName="PULLQU~1.DPV")) returned 1 [0213.012] wcscmp (_String1="PULLQUOTEBB.DPV", _String2=".") returned 1 [0213.012] wcscmp (_String1="PULLQUOTEBB.DPV", _String2="..") returned 1 [0213.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d454a0 [0213.012] wcscpy (in: _Dest=0x3d454a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.012] wcscat (in: _Dest=0x3d454a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.012] wcscat (in: _Dest=0x3d454a0, _Source="PULLQUOTEBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" [0213.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d454a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0213.013] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed371000, ftCreationTime.dwHighDateTime=0x1c97a9e, ftLastAccessTime.dwLowDateTime=0x9038b230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xed371000, ftLastWriteTime.dwHighDateTime=0x1c97a9e, nFileSizeHigh=0x0, nFileSizeLow=0x18c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULLQUOTEBB.POC", cAlternateFileName="PULLQU~1.POC")) returned 1 [0213.013] wcscmp (_String1="PULLQUOTEBB.POC", _String2=".") returned 1 [0213.013] wcscmp (_String1="PULLQUOTEBB.POC", _String2="..") returned 1 [0213.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d444e0 [0213.013] wcscpy (in: _Dest=0x3d444e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.013] wcscat (in: _Dest=0x3d444e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.013] wcscat (in: _Dest=0x3d444e0, _Source="PULLQUOTEBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" [0213.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d444e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0213.014] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5acf5800, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5acf5800, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PULQOT98.POC", cAlternateFileName="")) returned 1 [0213.014] wcscmp (_String1="PULQOT98.POC", _String2=".") returned 1 [0213.014] wcscmp (_String1="PULQOT98.POC", _String2="..") returned 1 [0213.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eb9560 [0213.015] wcscpy (in: _Dest=0x3eb9560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.015] wcscat (in: _Dest=0x3eb9560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.015] wcscat (in: _Dest=0x3eb9560, _Source="PULQOT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" [0213.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0213.016] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17250f00, ftCreationTime.dwHighDateTime=0x1c8f1ad, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x17250f00, ftLastWriteTime.dwHighDateTime=0x1c8f1ad, nFileSizeHigh=0x0, nFileSizeLow=0x8d1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="QP.DPV", cAlternateFileName="")) returned 1 [0213.016] wcscmp (_String1="QP.DPV", _String2=".") returned 1 [0213.016] wcscmp (_String1="QP.DPV", _String2="..") returned 1 [0213.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a498 [0213.016] wcscpy (in: _Dest=0x3e1a498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.016] wcscat (in: _Dest=0x3e1a498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.016] wcscat (in: _Dest=0x3e1a498, _Source="QP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" [0213.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0213.017] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c89ba00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x8243c250, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4c89ba00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x33e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="QP.XML", cAlternateFileName="")) returned 1 [0213.017] wcscmp (_String1="QP.XML", _String2=".") returned 1 [0213.017] wcscmp (_String1="QP.XML", _String2="..") returned 1 [0213.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e19698 [0213.017] wcscpy (in: _Dest=0x3e19698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.017] wcscat (in: _Dest=0x3e19698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.017] wcscat (in: _Dest=0x3e19698, _Source="QP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" [0213.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0213.018] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60c53900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x824623b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60c53900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x6f882, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUIKPUBS.POC", cAlternateFileName="")) returned 1 [0213.018] wcscmp (_String1="QUIKPUBS.POC", _String2=".") returned 1 [0213.018] wcscmp (_String1="QUIKPUBS.POC", _String2="..") returned 1 [0213.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3eba6e8 [0213.018] wcscpy (in: _Dest=0x3eba6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.018] wcscat (in: _Dest=0x3eba6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.018] wcscat (in: _Dest=0x3eba6e8, _Source="QUIKPUBS.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" [0213.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eba6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0213.019] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6458c000, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6458c000, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x4d57e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPTWIZ.POC", cAlternateFileName="")) returned 1 [0213.019] wcscmp (_String1="REPTWIZ.POC", _String2=".") returned 1 [0213.019] wcscmp (_String1="REPTWIZ.POC", _String2="..") returned 1 [0213.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb8c58 [0213.020] wcscpy (in: _Dest=0x3eb8c58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0213.020] wcscat (in: _Dest=0x3eb8c58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0213.020] wcscat (in: _Dest=0x3eb8c58, _Source="REPTWIZ.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" [0213.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb8c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0215.722] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6458c000, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6458c000, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x5df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RES98.POC", cAlternateFileName="")) returned 1 [0215.722] wcscmp (_String1="RES98.POC", _String2=".") returned 1 [0215.722] wcscmp (_String1="RES98.POC", _String2="..") returned 1 [0215.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19298 [0215.722] wcscpy (in: _Dest=0x3e19298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0215.722] wcscat (in: _Dest=0x3e19298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0215.722] wcscat (in: _Dest=0x3e19298, _Source="RES98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" [0216.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x189c [0216.249] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabdf4c00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabdf4c00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1effa, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESP98.POC", cAlternateFileName="")) returned 1 [0216.249] wcscmp (_String1="RESP98.POC", _String2=".") returned 1 [0216.249] wcscmp (_String1="RESP98.POC", _String2="..") returned 1 [0216.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c978 [0216.249] wcscpy (in: _Dest=0x3f3c978, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0216.249] wcscat (in: _Dest=0x3f3c978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0216.249] wcscat (in: _Dest=0x3f3c978, _Source="RESP98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" [0216.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284 [0216.250] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a9cd00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x82488510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7a9cd00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESUME.DPV", cAlternateFileName="")) returned 1 [0216.250] wcscmp (_String1="RESUME.DPV", _String2=".") returned 1 [0216.250] wcscmp (_String1="RESUME.DPV", _String2="..") returned 1 [0216.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3d390 [0216.251] wcscpy (in: _Dest=0x3f3d390, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0216.251] wcscat (in: _Dest=0x3f3d390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0216.251] wcscat (in: _Dest=0x3f3d390, _Source="RESUME.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" [0216.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574 [0216.252] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e1f500, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x903d74f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x54e1f500, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESUME.XML", cAlternateFileName="")) returned 1 [0216.252] wcscmp (_String1="RESUME.XML", _String2=".") returned 1 [0216.252] wcscmp (_String1="RESUME.XML", _String2="..") returned 1 [0216.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3da78 [0216.252] wcscpy (in: _Dest=0x3f3da78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0216.252] wcscat (in: _Dest=0x3f3da78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0216.252] wcscat (in: _Dest=0x3f3da78, _Source="RESUME.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" [0216.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3da78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8 [0216.253] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabdf4c00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x824ae670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xabdf4c00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSPMECH.POC", cAlternateFileName="")) returned 1 [0216.253] wcscmp (_String1="RSPMECH.POC", _String2=".") returned 1 [0216.253] wcscmp (_String1="RSPMECH.POC", _String2="..") returned 1 [0216.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bed8 [0216.253] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0216.253] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0216.253] wcscat (in: _Dest=0x3f3bed8, _Source="RSPMECH.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" [0216.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c [0216.254] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad107900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad107900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1075e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDBAR98.POC", cAlternateFileName="")) returned 1 [0216.254] wcscmp (_String1="SIDBAR98.POC", _String2=".") returned 1 [0216.254] wcscmp (_String1="SIDBAR98.POC", _String2="..") returned 1 [0216.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c6d0 [0216.254] wcscpy (in: _Dest=0x3f3c6d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0216.254] wcscat (in: _Dest=0x3f3c6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0216.254] wcscat (in: _Dest=0x3f3c6d0, _Source="SIDBAR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" [0216.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0216.255] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9201100, ftCreationTime.dwHighDateTime=0x1c9c774, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9201100, ftLastWriteTime.dwHighDateTime=0x1c9c774, nFileSizeHigh=0x0, nFileSizeLow=0x4c4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARBB.DPV", cAlternateFileName="SIDEBA~1.DPV")) returned 1 [0217.938] wcscmp (_String1="SIDEBARBB.DPV", _String2=".") returned 1 [0217.938] wcscmp (_String1="SIDEBARBB.DPV", _String2="..") returned 1 [0217.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3c208 [0217.938] wcscpy (in: _Dest=0x3f3c208, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.938] wcscat (in: _Dest=0x3f3c208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.938] wcscat (in: _Dest=0x3f3c208, _Source="SIDEBARBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" [0217.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0217.939] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3938000, ftCreationTime.dwHighDateTime=0x1c98def, ftLastAccessTime.dwLowDateTime=0x82546bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf3938000, ftLastWriteTime.dwHighDateTime=0x1c98def, nFileSizeHigh=0x0, nFileSizeLow=0xb08a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARBB.POC", cAlternateFileName="SIDEBA~1.POC")) returned 1 [0217.939] wcscmp (_String1="SIDEBARBB.POC", _String2=".") returned 1 [0217.939] wcscmp (_String1="SIDEBARBB.POC", _String2="..") returned 1 [0217.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3f3d638 [0217.939] wcscpy (in: _Dest=0x3f3d638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.939] wcscat (in: _Dest=0x3f3d638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.939] wcscat (in: _Dest=0x3f3d638, _Source="SIDEBARBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" [0217.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0217.944] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf953fd00, ftCreationTime.dwHighDateTime=0x1c9c772, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf953fd00, ftLastWriteTime.dwHighDateTime=0x1c9c772, nFileSizeHigh=0x0, nFileSizeLow=0x49e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARVERTBB.DPV", cAlternateFileName="SIDEBA~2.DPV")) returned 1 [0217.944] wcscmp (_String1="SIDEBARVERTBB.DPV", _String2=".") returned 1 [0217.944] wcscmp (_String1="SIDEBARVERTBB.DPV", _String2="..") returned 1 [0217.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44a80 [0217.944] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.944] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.944] wcscat (in: _Dest=0x3d44a80, _Source="SIDEBARVERTBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" [0217.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0217.947] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963fb00, ftCreationTime.dwHighDateTime=0x1c98df1, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7963fb00, ftLastWriteTime.dwHighDateTime=0x1c98df1, nFileSizeHigh=0x0, nFileSizeLow=0xa71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIDEBARVERTBB.POC", cAlternateFileName="SIDEBA~2.POC")) returned 1 [0217.947] wcscmp (_String1="SIDEBARVERTBB.POC", _String2=".") returned 1 [0217.947] wcscmp (_String1="SIDEBARVERTBB.POC", _String2="..") returned 1 [0217.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44570 [0217.947] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.947] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.947] wcscat (in: _Dest=0x3d44570, _Source="SIDEBARVERTBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" [0217.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0217.948] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacef3800, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xacef3800, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x17e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.DPV", cAlternateFileName="")) returned 1 [0217.948] wcscmp (_String1="SIGN.DPV", _String2=".") returned 1 [0217.948] wcscmp (_String1="SIGN.DPV", _String2="..") returned 1 [0217.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a698 [0217.949] wcscpy (in: _Dest=0x3e1a698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.949] wcscat (in: _Dest=0x3e1a698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.949] wcscat (in: _Dest=0x3e1a698, _Source="SIGN.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" [0217.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0217.950] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6c1d00, ftCreationTime.dwHighDateTime=0x1ca1b40, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f6c1d00, ftLastWriteTime.dwHighDateTime=0x1ca1b40, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.XML", cAlternateFileName="")) returned 1 [0217.950] wcscmp (_String1="SIGN.XML", _String2=".") returned 1 [0217.950] wcscmp (_String1="SIGN.XML", _String2="..") returned 1 [0217.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a218 [0217.950] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.950] wcscat (in: _Dest=0x3e1a218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.950] wcscat (in: _Dest=0x3e1a218, _Source="SIGN.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" [0217.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0217.951] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad107900, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x904e1e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xad107900, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0xbb82, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN98.POC", cAlternateFileName="")) returned 1 [0217.951] wcscmp (_String1="SIGN98.POC", _String2=".") returned 1 [0217.951] wcscmp (_String1="SIGN98.POC", _String2="..") returned 1 [0217.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3bf60 [0217.951] wcscpy (in: _Dest=0x3f3bf60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.951] wcscat (in: _Dest=0x3f3bf60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.951] wcscat (in: _Dest=0x3f3bf60, _Source="SIGN98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" [0217.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bf60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc8 [0217.952] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8256cd50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x6d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNHM.POC", cAlternateFileName="")) returned 1 [0217.953] wcscmp (_String1="SIGNHM.POC", _String2=".") returned 1 [0217.953] wcscmp (_String1="SIGNHM.POC", _String2="..") returned 1 [0217.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3f3c070 [0217.953] wcscpy (in: _Dest=0x3f3c070, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.953] wcscat (in: _Dest=0x3f3c070, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.953] wcscat (in: _Dest=0x3f3c070, _Source="SIGNHM.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" [0217.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0217.954] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x760e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNIPE.POC", cAlternateFileName="")) returned 1 [0217.954] wcscmp (_String1="SNIPE.POC", _String2=".") returned 1 [0217.954] wcscmp (_String1="SNIPE.POC", _String2="..") returned 1 [0217.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e18e18 [0217.954] wcscpy (in: _Dest=0x3e18e18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.954] wcscat (in: _Dest=0x3e18e18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.954] wcscat (in: _Dest=0x3e18e18, _Source="SNIPE.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" [0217.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e18e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0217.956] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd44100, ftCreationTime.dwHighDateTime=0x1ca107b, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8dd44100, ftLastWriteTime.dwHighDateTime=0x1ca107b, nFileSizeHigh=0x0, nFileSizeLow=0x5f93b, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYBB.DPV", cAlternateFileName="")) returned 1 [0217.956] wcscmp (_String1="STORYBB.DPV", _String2=".") returned 1 [0217.956] wcscmp (_String1="STORYBB.DPV", _String2="..") returned 1 [0217.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d308 [0217.956] wcscpy (in: _Dest=0x3f3d308, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.956] wcscat (in: _Dest=0x3f3d308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.956] wcscat (in: _Dest=0x3f3d308, _Source="STORYBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" [0217.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0217.957] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71360a00, ftCreationTime.dwHighDateTime=0x1ca1077, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x71360a00, ftLastWriteTime.dwHighDateTime=0x1ca1077, nFileSizeHigh=0x0, nFileSizeLow=0x7d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYBB.POC", cAlternateFileName="")) returned 1 [0217.957] wcscmp (_String1="STORYBB.POC", _String2=".") returned 1 [0217.957] wcscmp (_String1="STORYBB.POC", _String2="..") returned 1 [0217.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3d6c0 [0217.957] wcscpy (in: _Dest=0x3f3d6c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.957] wcscat (in: _Dest=0x3f3d6c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.958] wcscat (in: _Dest=0x3f3d6c0, _Source="STORYBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" [0217.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80 [0217.964] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9746c800, ftCreationTime.dwHighDateTime=0x1c9c771, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9746c800, ftLastWriteTime.dwHighDateTime=0x1c9c771, nFileSizeHigh=0x0, nFileSizeLow=0x4c9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYVERTBB.DPV", cAlternateFileName="STORYV~1.DPV")) returned 1 [0217.964] wcscmp (_String1="STORYVERTBB.DPV", _String2=".") returned 1 [0217.964] wcscmp (_String1="STORYVERTBB.DPV", _String2="..") returned 1 [0217.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d455c0 [0217.964] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.964] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.964] wcscat (in: _Dest=0x3d455c0, _Source="STORYVERTBB.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" [0217.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0217.966] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e47ba00, ftCreationTime.dwHighDateTime=0x1c98df6, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5e47ba00, ftLastWriteTime.dwHighDateTime=0x1c98df6, nFileSizeHigh=0x0, nFileSizeLow=0x6f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="STORYVERTBB.POC", cAlternateFileName="STORYV~1.POC")) returned 1 [0217.966] wcscmp (_String1="STORYVERTBB.POC", _String2=".") returned 1 [0217.966] wcscmp (_String1="STORYVERTBB.POC", _String2="..") returned 1 [0217.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x84) returned 0x3d45ec0 [0217.966] wcscpy (in: _Dest=0x3d45ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.966] wcscat (in: _Dest=0x3d45ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.966] wcscat (in: _Dest=0x3d45ec0, _Source="STORYVERTBB.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" [0217.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0217.968] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRBRST.POC", cAlternateFileName="")) returned 1 [0217.968] wcscmp (_String1="STRBRST.POC", _String2=".") returned 1 [0217.968] wcscmp (_String1="STRBRST.POC", _String2="..") returned 1 [0217.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cc20 [0217.968] wcscpy (in: _Dest=0x3f3cc20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.968] wcscat (in: _Dest=0x3f3cc20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.968] wcscat (in: _Dest=0x3f3cc20, _Source="STRBRST.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" [0217.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cc20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0217.969] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae41a600, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x82782090, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae41a600, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEAROFF.POC", cAlternateFileName="")) returned 1 [0217.969] wcscmp (_String1="TEAROFF.POC", _String2=".") returned 1 [0217.969] wcscmp (_String1="TEAROFF.POC", _String2="..") returned 1 [0217.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c180 [0217.969] wcscpy (in: _Dest=0x3f3c180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.969] wcscat (in: _Dest=0x3f3c180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.970] wcscat (in: _Dest=0x3f3c180, _Source="TEAROFF.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" [0217.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0217.971] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3065a00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x8281a610, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3065a00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x40a0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOC98.POC", cAlternateFileName="")) returned 1 [0217.971] wcscmp (_String1="TOC98.POC", _String2=".") returned 1 [0217.971] wcscmp (_String1="TOC98.POC", _String2="..") returned 1 [0217.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e19418 [0217.971] wcscpy (in: _Dest=0x3e19418, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.971] wcscat (in: _Dest=0x3e19418, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.971] wcscat (in: _Dest=0x3e19418, _Source="TOC98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" [0217.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e19418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0217.972] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb568b400, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb568b400, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x1eab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCOMP98.POC", cAlternateFileName="")) returned 1 [0217.972] wcscmp (_String1="WCOMP98.POC", _String2=".") returned 1 [0217.972] wcscmp (_String1="WCOMP98.POC", _String2="..") returned 1 [0217.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c7e0 [0217.973] wcscpy (in: _Dest=0x3f3c7e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.973] wcscat (in: _Dest=0x3f3c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.973] wcscat (in: _Dest=0x3f3c7e0, _Source="WCOMP98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" [0217.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0217.978] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaddde00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcaddde00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x166484, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEB11.POC", cAlternateFileName="")) returned 1 [0217.978] wcscmp (_String1="WEB11.POC", _String2=".") returned 1 [0217.978] wcscmp (_String1="WEB11.POC", _String2="..") returned 1 [0217.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x3e1a318 [0217.978] wcscpy (in: _Dest=0x3e1a318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.978] wcscat (in: _Dest=0x3e1a318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.978] wcscat (in: _Dest=0x3e1a318, _Source="WEB11.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" [0217.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e1a318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0217.980] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBCALSO.POC", cAlternateFileName="")) returned 1 [0217.980] wcscmp (_String1="WEBCALSO.POC", _String2=".") returned 1 [0217.980] wcscmp (_String1="WEBCALSO.POC", _String2="..") returned 1 [0217.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3cdb8 [0217.980] wcscpy (in: _Dest=0x3f3cdb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.980] wcscat (in: _Dest=0x3f3cdb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.980] wcscat (in: _Dest=0x3f3cdb8, _Source="WEBCALSO.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" [0217.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cdb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0217.981] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBEMAIL.POC", cAlternateFileName="")) returned 1 [0217.981] wcscmp (_String1="WEBEMAIL.POC", _String2=".") returned 1 [0217.981] wcscmp (_String1="WEBEMAIL.POC", _String2="..") returned 1 [0217.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a684d0 [0217.981] wcscpy (in: _Dest=0x7a684d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.982] wcscat (in: _Dest=0x7a684d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.982] wcscat (in: _Dest=0x7a684d0, _Source="WEBEMAIL.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" [0217.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a684d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc [0217.983] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x852f3210, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x12a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBHED98.POC", cAlternateFileName="")) returned 1 [0217.983] wcscmp (_String1="WEBHED98.POC", _String2=".") returned 1 [0217.983] wcscmp (_String1="WEBHED98.POC", _String2="..") returned 1 [0217.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x7a697f0 [0217.983] wcscpy (in: _Dest=0x7a697f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.983] wcscat (in: _Dest=0x7a697f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.983] wcscat (in: _Dest=0x7a697f0, _Source="WEBHED98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" [0217.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a697f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0217.985] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923adb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBHOME.POC", cAlternateFileName="")) returned 1 [0217.985] wcscmp (_String1="WEBHOME.POC", _String2=".") returned 1 [0217.985] wcscmp (_String1="WEBHOME.POC", _String2="..") returned 1 [0217.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a69988 [0217.985] wcscpy (in: _Dest=0x7a69988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.985] wcscat (in: _Dest=0x7a69988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.985] wcscat (in: _Dest=0x7a69988, _Source="WEBHOME.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" [0217.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0217.986] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7facd00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd7facd00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x34a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBLINK.POC", cAlternateFileName="")) returned 1 [0217.986] wcscmp (_String1="WEBLINK.POC", _String2=".") returned 1 [0217.986] wcscmp (_String1="WEBLINK.POC", _String2="..") returned 1 [0217.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a694c0 [0217.986] wcscpy (in: _Dest=0x7a694c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0217.986] wcscat (in: _Dest=0x7a694c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0217.987] wcscat (in: _Dest=0x7a694c0, _Source="WEBLINK.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" [0217.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a694c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0218.519] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f50d00, ftCreationTime.dwHighDateTime=0x1c5d98b, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3f50d00, ftLastWriteTime.dwHighDateTime=0x1c5d98b, nFileSizeHigh=0x0, nFileSizeLow=0xfeb9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBPAGE.DPV", cAlternateFileName="")) returned 1 [0218.519] wcscmp (_String1="WEBPAGE.DPV", _String2=".") returned 1 [0218.519] wcscmp (_String1="WEBPAGE.DPV", _String2="..") returned 1 [0218.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c290 [0218.519] wcscpy (in: _Dest=0x3f3c290, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0218.519] wcscat (in: _Dest=0x3f3c290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0218.519] wcscat (in: _Dest=0x3f3c290, _Source="WEBPAGE.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" [0218.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0218.889] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72af5a00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x85319370, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x72af5a00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x3d6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBPAGE.XML", cAlternateFileName="")) returned 1 [0218.889] wcscmp (_String1="WEBPAGE.XML", _String2=".") returned 1 [0218.889] wcscmp (_String1="WEBPAGE.XML", _String2="..") returned 1 [0218.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3cec8 [0218.889] wcscpy (in: _Dest=0x3f3cec8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0218.889] wcscat (in: _Dest=0x3f3cec8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0218.889] wcscat (in: _Dest=0x3f3cec8, _Source="WEBPAGE.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" [0218.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3cec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0218.890] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a9cd00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x8533f4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7a9cd00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0xba14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WITHCOMP.DPV", cAlternateFileName="")) returned 1 [0218.890] wcscmp (_String1="WITHCOMP.DPV", _String2=".") returned 1 [0218.890] wcscmp (_String1="WITHCOMP.DPV", _String2="..") returned 1 [0218.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3d7d0 [0218.890] wcscpy (in: _Dest=0x3f3d7d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0218.890] wcscat (in: _Dest=0x3f3d7d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0218.890] wcscat (in: _Dest=0x3f3d7d0, _Source="WITHCOMP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" [0218.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3d7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0218.891] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b079500, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x923d3c90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7b079500, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x1716, dwReserved0=0x0, dwReserved1=0x0, cFileName="WITHCOMP.XML", cAlternateFileName="")) returned 1 [0218.891] wcscmp (_String1="WITHCOMP.XML", _String2=".") returned 1 [0218.891] wcscmp (_String1="WITHCOMP.XML", _String2="..") returned 1 [0218.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c758 [0218.892] wcscpy (in: _Dest=0x3f3c758, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0218.892] wcscat (in: _Dest=0x3f3c758, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0218.892] wcscat (in: _Dest=0x3f3c758, _Source="WITHCOMP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" [0218.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0218.893] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb082bf00, ftCreationTime.dwHighDateTime=0x1c5d98a, ftLastAccessTime.dwLowDateTime=0x924460b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb082bf00, ftLastWriteTime.dwHighDateTime=0x1c5d98a, nFileSizeHigh=0x0, nFileSizeLow=0x79e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDREP.DPV", cAlternateFileName="")) returned 1 [0218.893] wcscmp (_String1="WORDREP.DPV", _String2=".") returned 1 [0218.893] wcscmp (_String1="WORDREP.DPV", _String2="..") returned 1 [0218.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3c5c0 [0218.894] wcscpy (in: _Dest=0x3f3c5c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0218.894] wcscat (in: _Dest=0x3f3c5c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0218.894] wcscat (in: _Dest=0x3f3c5c0, _Source="WORDREP.DPV" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" [0218.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0218.895] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8490fd00, ftCreationTime.dwHighDateTime=0x1c91765, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8490fd00, ftLastWriteTime.dwHighDateTime=0x1c91765, nFileSizeHigh=0x0, nFileSizeLow=0x1854, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORDREP.XML", cAlternateFileName="")) returned 1 [0218.895] wcscmp (_String1="WORDREP.XML", _String2=".") returned 1 [0218.895] wcscmp (_String1="WORDREP.XML", _String2="..") returned 1 [0218.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3f3bc30 [0218.895] wcscpy (in: _Dest=0x3f3bc30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0218.895] wcscat (in: _Dest=0x3f3bc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0218.895] wcscat (in: _Dest=0x3f3bc30, _Source="WORDREP.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" [0218.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3bc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0218.896] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92bfa00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd92bfa00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x2dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPULQT98.POC", cAlternateFileName="")) returned 1 [0218.896] wcscmp (_String1="WPULQT98.POC", _String2=".") returned 1 [0218.896] wcscmp (_String1="WPULQT98.POC", _String2="..") returned 1 [0218.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3c3a0 [0218.896] wcscpy (in: _Dest=0x3f3c3a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0218.896] wcscat (in: _Dest=0x3f3c3a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0218.896] wcscat (in: _Dest=0x3f3c3a0, _Source="WPULQT98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" [0218.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3c3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0218.897] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92bfa00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd92bfa00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSIDBR98.POC", cAlternateFileName="")) returned 1 [0218.898] wcscmp (_String1="WSIDBR98.POC", _String2=".") returned 1 [0218.898] wcscmp (_String1="WSIDBR98.POC", _String2="..") returned 1 [0218.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3ca00 [0218.898] wcscpy (in: _Dest=0x3f3ca00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ" [0218.898] wcscat (in: _Dest=0x3f3ca00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\" [0218.898] wcscat (in: _Dest=0x3f3ca00, _Source="WSIDBR98.POC" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC") returned="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" [0218.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3f3ca00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0218.899] FindNextFileW (in: hFindFile=0x3e73e30, lpFindFileData=0x3ef5be0 | out: lpFindFileData=0x3ef5be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92bfa00, ftCreationTime.dwHighDateTime=0x1c4a175, ftLastAccessTime.dwLowDateTime=0x85365630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd92bfa00, ftLastWriteTime.dwHighDateTime=0x1c4a175, nFileSizeHigh=0x0, nFileSizeLow=0x31d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSIDBR98.POC", cAlternateFileName="")) returned 0 [0219.192] FindClose (in: hFindFile=0x3e73e30 | out: hFindFile=0x3e73e30) returned 1 [0219.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5be0) returned 1 [0219.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23e60) returned 1 [0219.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23300) returned 1 Thread: id = 4575 os_tid = 0x16a8 [0174.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fec0 [0174.240] wcscpy (in: _Dest=0x3f3fec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0174.240] wcscat (in: _Dest=0x3f3fec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0174.240] wcscat (in: _Dest=0x3f3fec0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*" [0174.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0174.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ef99d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f1fb30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0177.491] wcscmp (_String1=".", _String2=".") returned 0 [0177.491] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ef99d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x42f1fb30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.491] wcscmp (_String1="..", _String2=".") returned 1 [0177.491] wcscmp (_String1="..", _String2="..") returned 0 [0177.491] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde45ee00, ftCreationTime.dwHighDateTime=0x1bf9825, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xde45ee00, ftLastWriteTime.dwHighDateTime=0x1bf9825, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Currency Rates.iqy", cAlternateFileName="MSNMON~1.IQY")) returned 1 [0177.491] wcscmp (_String1="MSN MoneyCentral Investor Currency Rates.iqy", _String2=".") returned 1 [0177.491] wcscmp (_String1="MSN MoneyCentral Investor Currency Rates.iqy", _String2="..") returned 1 [0177.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d56498 [0177.491] wcscpy (in: _Dest=0x3d56498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0177.491] wcscat (in: _Dest=0x3d56498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0177.491] wcscat (in: _Dest=0x3d56498, _Source="MSN MoneyCentral Investor Currency Rates.iqy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" [0178.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0178.275] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fd9ae00, ftCreationTime.dwHighDateTime=0x1c2d919, ftLastAccessTime.dwLowDateTime=0x42ef99d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2fd9ae00, ftLastWriteTime.dwHighDateTime=0x1c2d919, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Major Indicies.iqy", cAlternateFileName="MSNMON~2.IQY")) returned 1 [0178.275] wcscmp (_String1="MSN MoneyCentral Investor Major Indicies.iqy", _String2=".") returned 1 [0178.275] wcscmp (_String1="MSN MoneyCentral Investor Major Indicies.iqy", _String2="..") returned 1 [0178.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d567b8 [0178.275] wcscpy (in: _Dest=0x3d567b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0178.275] wcscat (in: _Dest=0x3d567b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0178.275] wcscat (in: _Dest=0x3d567b8, _Source="MSN MoneyCentral Investor Major Indicies.iqy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" [0178.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d567b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0178.277] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa04d00, ftCreationTime.dwHighDateTime=0x1bf11b5, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3aa04d00, ftLastWriteTime.dwHighDateTime=0x1bf11b5, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Stock Quotes.iqy", cAlternateFileName="MSNMON~3.IQY")) returned 1 [0178.277] wcscmp (_String1="MSN MoneyCentral Investor Stock Quotes.iqy", _String2=".") returned 1 [0178.277] wcscmp (_String1="MSN MoneyCentral Investor Stock Quotes.iqy", _String2="..") returned 1 [0178.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d56a10 [0178.277] wcscpy (in: _Dest=0x3d56a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES" [0178.277] wcscat (in: _Dest=0x3d56a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\" [0178.277] wcscat (in: _Dest=0x3d56a10, _Source="MSN MoneyCentral Investor Stock Quotes.iqy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy") returned="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" [0178.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0178.278] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa04d00, ftCreationTime.dwHighDateTime=0x1bf11b5, ftLastAccessTime.dwLowDateTime=0x42f1fb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3aa04d00, ftLastWriteTime.dwHighDateTime=0x1bf11b5, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN MoneyCentral Investor Stock Quotes.iqy", cAlternateFileName="MSNMON~3.IQY")) returned 0 [0178.278] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0178.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0178.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0178.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 Thread: id = 4576 os_tid = 0x16ac [0174.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav")) returned 0x20 [0175.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV", dwFileAttributes=0x20) returned 0 [0175.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.340] GetLastError () returned 0x5 [0175.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV", dwFileAttributes=0x20) returned 0 [0175.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 Thread: id = 4577 os_tid = 0x16b4 [0174.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm")) returned 0x20 [0175.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM", dwFileAttributes=0x20) returned 0 [0175.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.342] GetLastError () returned 0x5 [0175.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM", dwFileAttributes=0x20) returned 0 [0175.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 Thread: id = 4578 os_tid = 0x16b8 [0174.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville")) returned 0x20 [0174.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville", dwFileAttributes=0x20) returned 0 [0174.242] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.242] GetLastError () returned 0x5 [0174.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville", dwFileAttributes=0x20) returned 0 [0174.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 4579 os_tid = 0x16bc [0174.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello")) returned 0x20 [0174.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello", dwFileAttributes=0x20) returned 0 [0174.244] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.244] GetLastError () returned 0x5 [0174.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello", dwFileAttributes=0x20) returned 0 [0174.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 4580 os_tid = 0x16c0 [0174.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx")) returned 0x20 [0175.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0175.424] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.424] GetLastError () returned 0x5 [0175.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0175.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053bb8) returned 1 Thread: id = 4581 os_tid = 0x16c4 [0174.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx")) returned 0x20 [0175.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0175.597] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.605] GetLastError () returned 0x5 [0175.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0175.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30539c0) returned 1 Thread: id = 4582 os_tid = 0x16c8 [0174.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\saipan")) returned 0x20 [0175.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan", dwFileAttributes=0x20) returned 0 [0175.452] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\saipan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.452] GetLastError () returned 0x5 [0175.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Saipan", dwFileAttributes=0x20) returned 0 [0175.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23840) returned 1 Thread: id = 4583 os_tid = 0x16cc [0174.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tahiti")) returned 0x20 [0175.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti", dwFileAttributes=0x20) returned 0 [0175.612] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tahiti"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.612] GetLastError () returned 0x5 [0175.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti", dwFileAttributes=0x20) returned 0 [0175.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a230d0) returned 1 Thread: id = 4584 os_tid = 0x16d0 [0174.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tarawa")) returned 0x20 [0175.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa", dwFileAttributes=0x20) returned 0 [0175.613] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tarawa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.614] GetLastError () returned 0x5 [0175.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa", dwFileAttributes=0x20) returned 0 [0175.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d80) returned 1 Thread: id = 4585 os_tid = 0x16d4 [0174.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tongatapu")) returned 0x20 [0175.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu", dwFileAttributes=0x20) returned 0 [0175.615] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\tongatapu"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.615] GetLastError () returned 0x5 [0175.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu", dwFileAttributes=0x20) returned 0 [0175.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23c30) returned 1 Thread: id = 4586 os_tid = 0x16d8 [0174.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wake")) returned 0x20 [0175.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake", dwFileAttributes=0x20) returned 0 [0175.426] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wake"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.426] GetLastError () returned 0x5 [0175.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wake", dwFileAttributes=0x20) returned 0 [0175.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f5c8) returned 1 Thread: id = 4587 os_tid = 0x16dc [0174.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wallis")) returned 0x20 [0175.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis", dwFileAttributes=0x20) returned 0 [0175.610] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\pacific\\wallis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.611] GetLastError () returned 0x5 [0175.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\Pacific\\Wallis", dwFileAttributes=0x20) returned 0 [0175.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ed0) returned 1 Thread: id = 4588 os_tid = 0x16e0 [0174.267] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log")) returned 0x2020 [0175.617] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", dwFileAttributes=0x20) returned 1 [0182.165] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10f0 [0182.165] GetFileSizeEx (in: hFile=0x10f0, lpFileSize=0xbfbf95c | out: lpFileSize=0xbfbf95c*=0) returned 1 [0182.165] FlushFileBuffers (hFile=0x10f0) returned 1 [0183.590] CloseHandle (hObject=0x10f0) returned 1 [0183.590] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", dwFileAttributes=0x2020) returned 1 [0186.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 4589 os_tid = 0x16e4 [0174.273] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current")) returned 0x2020 [0175.617] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", dwFileAttributes=0x20) returned 1 [0182.181] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1290 [0182.181] GetFileSizeEx (in: hFile=0x1290, lpFileSize=0xde6f90c | out: lpFileSize=0xde6f90c*=16) returned 1 [0182.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6788 [0182.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0182.181] NtQuerySystemTime (in: CurrentTime=0xde6f880 | out: CurrentTime=0xde6f880*=132462177607560000) returned 0x0 [0182.181] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x224066fe [0182.181] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x675da1c2 [0182.181] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x2336afc5 [0182.181] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x6fd2cac9 [0182.181] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x161089d1 [0182.181] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x46502e71 [0182.181] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x1a1b4f29 [0182.181] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x6acf8f12 [0182.181] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x41dc555e [0182.181] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x1ecd5f9 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x76a99f44 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0xa6d4f86 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x3957d6d7 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x4824cf3f [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x6219b97e [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x337af541 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x7d5cf47a [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x214ae242 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x6af12a30 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x563b667f [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x7d67f070 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x5589ceb4 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x633664de [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x3d33df2a [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x66a89f23 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x6a8f496e [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x296cf3ce [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x45fd0a32 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x36b2bb7e [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x371c4078 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x604ea032 [0182.182] RtlRandomEx (in: Seed=0xde6f878 | out: Seed=0xde6f878) returned 0x2003774c [0182.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0182.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c23778 [0182.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c27380 [0182.192] ReadFile (in: hFile=0x1290, lpBuffer=0x7c23778, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xde6f874, lpOverlapped=0x0 | out: lpBuffer=0x7c23778*, lpNumberOfBytesRead=0xde6f874*=0x10, lpOverlapped=0x0) returned 1 [0182.194] SetFilePointerEx (in: hFile=0x1290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.195] WriteFile (in: hFile=0x1290, lpBuffer=0x7c27380*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xde6f878, lpOverlapped=0x0 | out: lpBuffer=0x7c27380*, lpNumberOfBytesWritten=0xde6f878*=0x10, lpOverlapped=0x0) returned 1 [0182.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0182.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0182.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0182.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c27380) returned 1 [0182.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c23778) returned 1 [0182.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0182.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdc20) returned 1 [0182.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3380 [0182.255] SetFilePointerEx (in: hFile=0x1290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.255] WriteFile (in: hFile=0x1290, lpBuffer=0x30bc970*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xde6f900, lpOverlapped=0x0 | out: lpBuffer=0x30bc970*, lpNumberOfBytesWritten=0xde6f900*=0x100, lpOverlapped=0x0) returned 1 [0182.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0182.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0182.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43860 [0182.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0182.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0182.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0182.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3d5a740 [0182.311] sprintf (in: _Dest=0x3d5a740, _Format="%c%c" | out: _Dest="9c") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a742, _Format="%c%c" | out: _Dest="42") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a744, _Format="%c%c" | out: _Dest="9b") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a746, _Format="%c%c" | out: _Dest="ff") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a748, _Format="%c%c" | out: _Dest="c9") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a74a, _Format="%c%c" | out: _Dest="82") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a74c, _Format="%c%c" | out: _Dest="8b") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a74e, _Format="%c%c" | out: _Dest="e3") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a750, _Format="%c%c" | out: _Dest="da") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a752, _Format="%c%c" | out: _Dest="ab") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a754, _Format="%c%c" | out: _Dest="fb") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a756, _Format="%c%c" | out: _Dest="03") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a758, _Format="%c%c" | out: _Dest="98") returned 2 [0182.311] sprintf (in: _Dest=0x3d5a75a, _Format="%c%c" | out: _Dest="45") returned 2 [0182.311] RtlInitAnsiString (in: DestinationString=0xde6f888, SourceString="9c429bffc9828be3daabfb039845" | out: DestinationString="9c429bffc9828be3daabfb039845") [0182.311] RtlAnsiStringToUnicodeString (in: DestinationString=0xde6f880, SourceString="9c429bffc9828be3daabfb039845", AllocateDestinationString=1 | out: DestinationString="9c429bffc9828be3daabfb039845") returned 0x0 [0182.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30be1c0 [0182.312] wcscat (in: _Dest=0x7a644f0, _Source="9c429bf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\9c429bf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\9c429bf" [0182.312] wcscat (in: _Dest=0x7a644f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\9c429bf.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\9c429bf.68814f" [0182.312] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\9c429bf.68814f", NtPathName=0xde6f878, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\9c429bf.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadd20 [0182.357] FlushFileBuffers (hFile=0x1290) returned 1 [0183.588] CloseHandle (hObject=0x1290) returned 1 [0184.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc3ed8 [0184.532] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0184.532] wcscat (in: _Dest=0x3dc3ed8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\68814F-Readme.txt" [0184.532] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\68814f-readme.txt")) returned 0xffffffff [0184.532] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfcc [0184.682] WriteFile (in: hFile=0xfcc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xde6f894, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xde6f894*=0x8b9, lpOverlapped=0x0) returned 1 [0184.698] CloseHandle (hObject=0xfcc) returned 1 [0184.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 [0184.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ee0) returned 1 Thread: id = 4590 os_tid = 0x16e8 [0174.273] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock")) returned 0x2020 [0175.428] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", dwFileAttributes=0x20) returned 1 [0180.472] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17c0 [0180.473] GetFileSizeEx (in: hFile=0x17c0, lpFileSize=0xe5cfbb4 | out: lpFileSize=0xe5cfbb4*=0) returned 1 [0180.473] FlushFileBuffers (hFile=0x17c0) returned 1 [0181.710] CloseHandle (hObject=0x17c0) returned 1 [0181.710] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", dwFileAttributes=0x2020) returned 1 [0181.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85220) returned 1 Thread: id = 4591 os_tid = 0x16ec [0174.274] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log")) returned 0x2020 [0175.616] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", dwFileAttributes=0x20) returned 1 [0182.151] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21d8 [0182.151] GetFileSizeEx (in: hFile=0x21d8, lpFileSize=0xdb2f96c | out: lpFileSize=0xdb2f96c*=154) returned 1 [0182.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0182.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0182.151] NtQuerySystemTime (in: CurrentTime=0xdb2f8e0 | out: CurrentTime=0xdb2f8e0*=132462177607248000) returned 0x0 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x10d7adef [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x1576df0a [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x34fc9401 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x113679a9 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x1dffb626 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x72881765 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x3fc19c67 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x1b339d76 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x34d56783 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x109c979c [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x5b89397 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x593969ca [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x3a8e7023 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x4a0ea96b [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x3ab94f48 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x382aaa41 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x65f3f7d5 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x751e98b9 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x3781d25 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x549e95e3 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x3530e6e8 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x30f5f07a [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x50f826a2 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x6fdffa43 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x2eb117d2 [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x7c4f770f [0182.152] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x1f8bc9d [0182.153] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x222aa643 [0182.153] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x34265841 [0182.153] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x31151b4 [0182.153] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x77445edf [0182.153] RtlRandomEx (in: Seed=0xdb2f8d8 | out: Seed=0xdb2f8d8) returned 0x1dbea07f [0182.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0182.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7acf4e8 [0182.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c18360 [0182.162] ReadFile (in: hFile=0x21d8, lpBuffer=0x7acf4e8, nNumberOfBytesToRead=0x9a, lpNumberOfBytesRead=0xdb2f8d4, lpOverlapped=0x0 | out: lpBuffer=0x7acf4e8*, lpNumberOfBytesRead=0xdb2f8d4*=0x9a, lpOverlapped=0x0) returned 1 [0182.164] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.164] WriteFile (in: hFile=0x21d8, lpBuffer=0x7c18360*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0xdb2f8d8, lpOverlapped=0x0 | out: lpBuffer=0x7c18360*, lpNumberOfBytesWritten=0xdb2f8d8*=0x9a, lpOverlapped=0x0) returned 1 [0182.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0182.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2908 [0182.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2908) returned 1 [0182.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c18360) returned 1 [0182.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acf4e8) returned 1 [0182.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0182.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdd88) returned 1 [0182.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e81360 [0182.252] SetFilePointerEx (in: hFile=0x21d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.252] WriteFile (in: hFile=0x21d8, lpBuffer=0x3dea9b8*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xdb2f960, lpOverlapped=0x0 | out: lpBuffer=0x3dea9b8*, lpNumberOfBytesWritten=0xdb2f960*=0xf8, lpOverlapped=0x0) returned 1 [0182.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0182.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0182.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x3ea6540 [0182.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0182.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4e8 [0182.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4e8) returned 1 [0182.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd) returned 0x3e43860 [0182.308] sprintf (in: _Dest=0x3e43860, _Format="%c%c" | out: _Dest="70") returned 2 [0182.308] sprintf (in: _Dest=0x3e43862, _Format="%c%c" | out: _Dest="58") returned 2 [0182.308] sprintf (in: _Dest=0x3e43864, _Format="%c%c" | out: _Dest="d6") returned 2 [0182.308] sprintf (in: _Dest=0x3e43866, _Format="%c%c" | out: _Dest="c0") returned 2 [0182.308] sprintf (in: _Dest=0x3e43868, _Format="%c%c" | out: _Dest="18") returned 2 [0182.308] sprintf (in: _Dest=0x3e4386a, _Format="%c%c" | out: _Dest="8f") returned 2 [0182.308] RtlInitAnsiString (in: DestinationString=0xdb2f8e8, SourceString="7058d6c0188f" | out: DestinationString="7058d6c0188f") [0182.308] RtlAnsiStringToUnicodeString (in: DestinationString=0xdb2f8e0, SourceString="7058d6c0188f", AllocateDestinationString=1 | out: DestinationString="7058d6c0188f") returned 0x0 [0182.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b730 [0182.308] wcscat (in: _Dest=0x3eeb6a8, _Source="705" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\705") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\705" [0182.308] wcscat (in: _Dest=0x3eeb6a8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\705.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\705.68814f" [0182.308] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\705.68814f", NtPathName=0xdb2f8d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\705.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db07f8 [0182.346] FlushFileBuffers (hFile=0x21d8) returned 1 [0183.587] CloseHandle (hObject=0x21d8) returned 1 [0184.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4448 [0184.538] wcscpy (in: _Dest=0x3dc4448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0184.538] wcscat (in: _Dest=0x3dc4448, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\68814F-Readme.txt" [0184.538] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\68814f-readme.txt")) returned 0x2020 [0184.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4448) returned 1 [0184.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56880) returned 1 Thread: id = 4592 os_tid = 0x16f0 [0174.274] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001")) returned 0x2020 [0175.617] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0182.166] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1410 [0182.166] GetFileSizeEx (in: hFile=0x1410, lpFileSize=0xcbbfaa4 | out: lpFileSize=0xcbbfaa4*=41) returned 1 [0182.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0182.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6788 [0182.166] NtQuerySystemTime (in: CurrentTime=0xcbbfa18 | out: CurrentTime=0xcbbfa18*=132462177607404000) returned 0x0 [0182.166] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x43d942b1 [0182.166] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x32115631 [0182.166] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x463d97aa [0182.166] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x57b7c2d6 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x5dd8bdc2 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x28d12c4e [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x978580f [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x3a78bc32 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x5d29080b [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x3258a9ae [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x44506856 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x2fa7601f [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x1778c1e3 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x6f0ec7f5 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x165eed74 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0xc262b26 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x53e997c4 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x1c45f0dc [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x48c8411b [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x3034ab65 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0xa903422 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x726e5a99 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x3151048 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x8900519 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x4e96506e [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x2b05e673 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x3ce20558 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x154cbc82 [0182.167] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x3a5c922f [0182.168] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x32f29a16 [0182.168] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x1abc3b90 [0182.168] RtlRandomEx (in: Seed=0xcbbfa10 | out: Seed=0xcbbfa10) returned 0x5b645d24 [0182.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0182.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1bf68 [0182.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1fb70 [0182.178] ReadFile (in: hFile=0x1410, lpBuffer=0x7c1bf68, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0xcbbfa0c, lpOverlapped=0x0 | out: lpBuffer=0x7c1bf68*, lpNumberOfBytesRead=0xcbbfa0c*=0x29, lpOverlapped=0x0) returned 1 [0182.180] SetFilePointerEx (in: hFile=0x1410, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.180] WriteFile (in: hFile=0x1410, lpBuffer=0x7c1fb70*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0xcbbfa10, lpOverlapped=0x0 | out: lpBuffer=0x7c1fb70*, lpNumberOfBytesWritten=0xcbbfa10*=0x29, lpOverlapped=0x0) returned 1 [0182.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0182.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0182.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0182.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1fb70) returned 1 [0182.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1bf68) returned 1 [0182.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79720 [0182.257] SetFilePointerEx (in: hFile=0x1410, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.257] WriteFile (in: hFile=0x1410, lpBuffer=0x7a385e8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xcbbfa98, lpOverlapped=0x0 | out: lpBuffer=0x7a385e8*, lpNumberOfBytesWritten=0xcbbfa98*=0x110, lpOverlapped=0x0) returned 1 [0182.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0182.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0182.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec3510 [0182.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0182.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6788 [0182.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6788) returned 1 [0182.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x30be250 [0182.314] sprintf (in: _Dest=0x30be250, _Format="%c%c" | out: _Dest="16") returned 2 [0182.314] sprintf (in: _Dest=0x30be252, _Format="%c%c" | out: _Dest="3d") returned 2 [0182.314] sprintf (in: _Dest=0x30be254, _Format="%c%c" | out: _Dest="86") returned 2 [0182.314] sprintf (in: _Dest=0x30be256, _Format="%c%c" | out: _Dest="63") returned 2 [0182.314] sprintf (in: _Dest=0x30be258, _Format="%c%c" | out: _Dest="33") returned 2 [0182.314] sprintf (in: _Dest=0x30be25a, _Format="%c%c" | out: _Dest="7b") returned 2 [0182.314] sprintf (in: _Dest=0x30be25c, _Format="%c%c" | out: _Dest="62") returned 2 [0182.314] sprintf (in: _Dest=0x30be25e, _Format="%c%c" | out: _Dest="6e") returned 2 [0182.314] sprintf (in: _Dest=0x30be260, _Format="%c%c" | out: _Dest="ca") returned 2 [0182.314] sprintf (in: _Dest=0x30be262, _Format="%c%c" | out: _Dest="00") returned 2 [0182.314] sprintf (in: _Dest=0x30be264, _Format="%c%c" | out: _Dest="78") returned 2 [0182.314] sprintf (in: _Dest=0x30be266, _Format="%c%c" | out: _Dest="63") returned 2 [0182.314] sprintf (in: _Dest=0x30be268, _Format="%c%c" | out: _Dest="bd") returned 2 [0182.314] sprintf (in: _Dest=0x30be26a, _Format="%c%c" | out: _Dest="03") returned 2 [0182.314] sprintf (in: _Dest=0x30be26c, _Format="%c%c" | out: _Dest="4f") returned 2 [0182.314] sprintf (in: _Dest=0x30be26e, _Format="%c%c" | out: _Dest="2c") returned 2 [0182.314] sprintf (in: _Dest=0x30be270, _Format="%c%c" | out: _Dest="32") returned 2 [0182.314] sprintf (in: _Dest=0x30be272, _Format="%c%c" | out: _Dest="9f") returned 2 [0182.314] sprintf (in: _Dest=0x30be274, _Format="%c%c" | out: _Dest="a4") returned 2 [0182.314] sprintf (in: _Dest=0x30be276, _Format="%c%c" | out: _Dest="2a") returned 2 [0182.314] sprintf (in: _Dest=0x30be278, _Format="%c%c" | out: _Dest="15") returned 2 [0182.314] sprintf (in: _Dest=0x30be27a, _Format="%c%c" | out: _Dest="8c") returned 2 [0182.314] sprintf (in: _Dest=0x30be27c, _Format="%c%c" | out: _Dest="ae") returned 2 [0182.314] sprintf (in: _Dest=0x30be27e, _Format="%c%c" | out: _Dest="45") returned 2 [0182.314] sprintf (in: _Dest=0x30be280, _Format="%c%c" | out: _Dest="a0") returned 2 [0182.314] sprintf (in: _Dest=0x30be282, _Format="%c%c" | out: _Dest="a4") returned 2 [0182.314] sprintf (in: _Dest=0x30be284, _Format="%c%c" | out: _Dest="75") returned 2 [0182.314] sprintf (in: _Dest=0x30be286, _Format="%c%c" | out: _Dest="d2") returned 2 [0182.314] sprintf (in: _Dest=0x30be288, _Format="%c%c" | out: _Dest="df") returned 2 [0182.315] sprintf (in: _Dest=0x30be28a, _Format="%c%c" | out: _Dest="91") returned 2 [0182.315] RtlInitAnsiString (in: DestinationString=0xcbbfa20, SourceString="163d8663337b626eca007863bd034f2c329fa42a158cae45a0a475d2df91" | out: DestinationString="163d8663337b626eca007863bd034f2c329fa42a158cae45a0a475d2df91") [0182.315] RtlAnsiStringToUnicodeString (in: DestinationString=0xcbbfa18, SourceString="163d8663337b626eca007863bd034f2c329fa42a158cae45a0a475d2df91", AllocateDestinationString=1 | out: DestinationString="163d8663337b626eca007863bd034f2c329fa42a158cae45a0a475d2df91") returned 0x0 [0182.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eb9670 [0182.315] wcscat (in: _Dest=0x3db0168, _Source="163d8663337b626" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\163d8663337b626") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\163d8663337b626" [0182.315] wcscat (in: _Dest=0x3db0168, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\163d8663337b626.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\163d8663337b626.68814f" [0182.315] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\163d8663337b626.68814f", NtPathName=0xcbbfa10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\163d8663337b626.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc970 [0182.355] FlushFileBuffers (hFile=0x1410) returned 1 [0183.588] CloseHandle (hObject=0x1410) returned 1 [0184.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4f28 [0184.534] wcscpy (in: _Dest=0x3dc4f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\" [0184.534] wcscat (in: _Dest=0x3dc4f28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\68814F-Readme.txt" [0184.535] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\68814f-readme.txt")) returned 0x2020 [0184.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4f28) returned 1 [0184.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8d48) returned 1 Thread: id = 4593 os_tid = 0x16f4 [0174.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs")) returned 0x20 [0175.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS", dwFileAttributes=0x20) returned 0 [0175.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.575] GetLastError () returned 0x5 [0177.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS", dwFileAttributes=0x20) returned 0 [0177.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da5a70) returned 1 Thread: id = 4594 os_tid = 0x16f8 [0174.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc")) returned 0x20 [0177.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.713] GetLastError () returned 0x5 [0177.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 4595 os_tid = 0x16fc [0174.276] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5")) returned 0x2020 [0175.421] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", dwFileAttributes=0x20) returned 1 [0182.850] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x588 [0182.868] GetFileSizeEx (in: hFile=0x588, lpFileSize=0xe1ffbac | out: lpFileSize=0xe1ffbac*=16) returned 1 [0182.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0182.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0182.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0182.868] NtQuerySystemTime (in: CurrentTime=0xe1ffb20 | out: CurrentTime=0xe1ffb20*=132462177614424000) returned 0x0 [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x62f67c38 [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x6d386b3e [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x3ff53bd6 [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x3e8c91ba [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x71497bf8 [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x2c488d01 [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x11b0fd54 [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x74866759 [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x5006b6e0 [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x3edbbcf2 [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0xdce6618 [0182.868] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x7473f00c [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x412e5531 [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x79393a7e [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x1f87e225 [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x559826af [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x3b8b03b [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x7ded19c5 [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x607c15f5 [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x67b8e2d [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x54c32f3f [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x5490fa50 [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x6104232c [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x5f4195bb [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x4884dab3 [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x41485211 [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x56d91fab [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x79f9e2d6 [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x667633b9 [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x685293f [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x50d2a4ab [0182.869] RtlRandomEx (in: Seed=0xe1ffb18 | out: Seed=0xe1ffb18) returned 0x1d0bcf04 [0182.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0182.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ac7cd8 [0182.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7acb8e0 [0182.882] ReadFile (in: hFile=0x588, lpBuffer=0x7ac7cd8, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xe1ffb14, lpOverlapped=0x0 | out: lpBuffer=0x7ac7cd8*, lpNumberOfBytesRead=0xe1ffb14*=0x10, lpOverlapped=0x0) returned 1 [0182.885] SetFilePointerEx (in: hFile=0x588, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.885] WriteFile (in: hFile=0x588, lpBuffer=0x7acb8e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xe1ffb18, lpOverlapped=0x0 | out: lpBuffer=0x7acb8e0*, lpNumberOfBytesWritten=0xe1ffb18*=0x10, lpOverlapped=0x0) returned 1 [0183.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e340 [0183.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0183.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0183.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acb8e0) returned 1 [0183.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac7cd8) returned 1 [0183.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0183.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07cc8) returned 1 [0183.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x34) returned 0x3dcfa90 [0183.400] SetFilePointerEx (in: hFile=0x588, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.400] WriteFile (in: hFile=0x588, lpBuffer=0x3d55968*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0xe1ffba0, lpOverlapped=0x0 | out: lpBuffer=0x3d55968*, lpNumberOfBytesWritten=0xe1ffba0*=0x118, lpOverlapped=0x0) returned 1 [0183.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30b4598 [0183.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f7b8 [0183.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0183.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0183.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a374d0 [0183.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0183.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0183.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0183.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 [0183.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30b4598) returned 1 [0183.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4d) returned 0x7a39688 [0183.595] sprintf (in: _Dest=0x7a39688, _Format="%c%c" | out: _Dest="58") returned 2 [0183.595] sprintf (in: _Dest=0x7a3968a, _Format="%c%c" | out: _Dest="72") returned 2 [0183.595] sprintf (in: _Dest=0x7a3968c, _Format="%c%c" | out: _Dest="a8") returned 2 [0183.596] sprintf (in: _Dest=0x7a3968e, _Format="%c%c" | out: _Dest="83") returned 2 [0183.596] sprintf (in: _Dest=0x7a39690, _Format="%c%c" | out: _Dest="25") returned 2 [0183.596] sprintf (in: _Dest=0x7a39692, _Format="%c%c" | out: _Dest="b1") returned 2 [0183.596] sprintf (in: _Dest=0x7a39694, _Format="%c%c" | out: _Dest="34") returned 2 [0183.596] sprintf (in: _Dest=0x7a39696, _Format="%c%c" | out: _Dest="72") returned 2 [0183.596] sprintf (in: _Dest=0x7a39698, _Format="%c%c" | out: _Dest="3e") returned 2 [0183.596] sprintf (in: _Dest=0x7a3969a, _Format="%c%c" | out: _Dest="8a") returned 2 [0183.596] sprintf (in: _Dest=0x7a3969c, _Format="%c%c" | out: _Dest="6b") returned 2 [0183.596] sprintf (in: _Dest=0x7a3969e, _Format="%c%c" | out: _Dest="de") returned 2 [0183.596] sprintf (in: _Dest=0x7a396a0, _Format="%c%c" | out: _Dest="d9") returned 2 [0183.596] sprintf (in: _Dest=0x7a396a2, _Format="%c%c" | out: _Dest="74") returned 2 [0183.596] sprintf (in: _Dest=0x7a396a4, _Format="%c%c" | out: _Dest="90") returned 2 [0183.596] sprintf (in: _Dest=0x7a396a6, _Format="%c%c" | out: _Dest="b0") returned 2 [0183.596] sprintf (in: _Dest=0x7a396a8, _Format="%c%c" | out: _Dest="24") returned 2 [0183.596] sprintf (in: _Dest=0x7a396aa, _Format="%c%c" | out: _Dest="23") returned 2 [0183.596] sprintf (in: _Dest=0x7a396ac, _Format="%c%c" | out: _Dest="43") returned 2 [0183.596] sprintf (in: _Dest=0x7a396ae, _Format="%c%c" | out: _Dest="be") returned 2 [0183.596] sprintf (in: _Dest=0x7a396b0, _Format="%c%c" | out: _Dest="95") returned 2 [0183.596] sprintf (in: _Dest=0x7a396b2, _Format="%c%c" | out: _Dest="cf") returned 2 [0183.596] sprintf (in: _Dest=0x7a396b4, _Format="%c%c" | out: _Dest="44") returned 2 [0183.596] sprintf (in: _Dest=0x7a396b6, _Format="%c%c" | out: _Dest="d8") returned 2 [0183.596] sprintf (in: _Dest=0x7a396b8, _Format="%c%c" | out: _Dest="4c") returned 2 [0183.596] sprintf (in: _Dest=0x7a396ba, _Format="%c%c" | out: _Dest="be") returned 2 [0183.596] sprintf (in: _Dest=0x7a396bc, _Format="%c%c" | out: _Dest="4c") returned 2 [0183.596] sprintf (in: _Dest=0x7a396be, _Format="%c%c" | out: _Dest="63") returned 2 [0183.596] sprintf (in: _Dest=0x7a396c0, _Format="%c%c" | out: _Dest="19") returned 2 [0183.596] sprintf (in: _Dest=0x7a396c2, _Format="%c%c" | out: _Dest="51") returned 2 [0183.596] sprintf (in: _Dest=0x7a396c4, _Format="%c%c" | out: _Dest="22") returned 2 [0183.596] sprintf (in: _Dest=0x7a396c6, _Format="%c%c" | out: _Dest="3b") returned 2 [0183.597] sprintf (in: _Dest=0x7a396c8, _Format="%c%c" | out: _Dest="14") returned 2 [0183.597] sprintf (in: _Dest=0x7a396ca, _Format="%c%c" | out: _Dest="e5") returned 2 [0183.597] sprintf (in: _Dest=0x7a396cc, _Format="%c%c" | out: _Dest="a5") returned 2 [0183.597] sprintf (in: _Dest=0x7a396ce, _Format="%c%c" | out: _Dest="46") returned 2 [0183.597] sprintf (in: _Dest=0x7a396d0, _Format="%c%c" | out: _Dest="15") returned 2 [0183.597] sprintf (in: _Dest=0x7a396d2, _Format="%c%c" | out: _Dest="ad") returned 2 [0183.597] RtlInitAnsiString (in: DestinationString=0xe1ffb28, SourceString="5872a88325b134723e8a6bded97490b0242343be95cf44d84cbe4c631951223b14e5a54615ad" | out: DestinationString="5872a88325b134723e8a6bded97490b0242343be95cf44d84cbe4c631951223b14e5a54615ad") [0183.597] RtlAnsiStringToUnicodeString (in: DestinationString=0xe1ffb20, SourceString="5872a88325b134723e8a6bded97490b0242343be95cf44d84cbe4c631951223b14e5a54615ad", AllocateDestinationString=1 | out: DestinationString="5872a88325b134723e8a6bded97490b0242343be95cf44d84cbe4c631951223b14e5a54615ad") returned 0x0 [0183.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053720 [0183.597] wcscat (in: _Dest=0x3ec9f40, _Source="5872a88325b134723e8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\5872a88325b134723e8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\5872a88325b134723e8" [0183.597] wcscat (in: _Dest=0x3ec9f40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\5872a88325b134723e8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\5872a88325b134723e8.68814f" [0183.597] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\5872a88325b134723e8.68814f", NtPathName=0xe1ffb18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\5872a88325b134723e8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x138) returned 0x3ea2d68 [0184.613] FlushFileBuffers (hFile=0x588) returned 1 [0184.954] CloseHandle (hObject=0x588) returned 1 [0186.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b83918 [0186.031] wcscpy (in: _Dest=0x7b83918, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\" [0186.031] wcscat (in: _Dest=0x7b83918, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\68814F-Readme.txt" [0186.031] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\68814f-readme.txt")) returned 0xffffffff [0186.032] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf9c [0186.171] WriteFile (in: hFile=0xf9c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe1ffb34, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe1ffb34*=0x8b9, lpOverlapped=0x0) returned 1 [0186.173] CloseHandle (hObject=0xf9c) returned 1 [0186.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83918) returned 1 [0186.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 Thread: id = 4596 os_tid = 0x1700 [0174.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx")) returned 0x20 [0174.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0174.282] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.290] GetLastError () returned 0x5 [0174.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0174.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 Thread: id = 4597 os_tid = 0x1704 [0174.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx")) returned 0x20 [0174.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0174.303] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.309] GetLastError () returned 0x5 [0174.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0174.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 Thread: id = 4598 os_tid = 0x1708 [0174.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv")) returned 0x20 [0174.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV", dwFileAttributes=0x20) returned 0 [0174.320] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.325] GetLastError () returned 0x5 [0174.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV", dwFileAttributes=0x20) returned 0 [0174.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44c30) returned 1 Thread: id = 4599 os_tid = 0x1710 [0174.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv")) returned 0x20 [0174.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV", dwFileAttributes=0x20) returned 0 [0174.336] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.341] GetLastError () returned 0x5 [0174.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV", dwFileAttributes=0x20) returned 0 [0174.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44180) returned 1 Thread: id = 4600 os_tid = 0x1714 [0174.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv")) returned 0x20 [0174.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV", dwFileAttributes=0x20) returned 0 [0174.352] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.373] GetLastError () returned 0x5 [0174.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV", dwFileAttributes=0x20) returned 0 [0174.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 Thread: id = 4601 os_tid = 0x1718 [0174.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp")) returned 0x20 [0174.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp", dwFileAttributes=0x20) returned 0 [0174.379] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.379] GetLastError () returned 0x5 [0174.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp", dwFileAttributes=0x20) returned 0 [0174.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3aa80) returned 1 Thread: id = 4602 os_tid = 0x171c [0174.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx")) returned 0x20 [0174.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx", dwFileAttributes=0x20) returned 0 [0174.382] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0174.382] GetLastError () returned 0x5 [0174.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx", dwFileAttributes=0x20) returned 0 [0174.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 Thread: id = 4603 os_tid = 0x1720 [0174.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp")) returned 0x20 [0177.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp", dwFileAttributes=0x20) returned 0 [0177.612] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.612] GetLastError () returned 0x5 [0177.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp", dwFileAttributes=0x20) returned 0 [0177.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66e58) returned 1 Thread: id = 4604 os_tid = 0x1724 [0174.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex")) returned 0x20 [0177.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex", dwFileAttributes=0x20) returned 0 [0177.572] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.572] GetLastError () returned 0x5 [0177.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex", dwFileAttributes=0x20) returned 0 [0177.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a8f0) returned 1 Thread: id = 4605 os_tid = 0x1730 [0174.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx")) returned 0x20 [0177.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx", dwFileAttributes=0x20) returned 0 [0177.578] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.578] GetLastError () returned 0x5 [0177.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx", dwFileAttributes=0x20) returned 0 [0177.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66d98) returned 1 Thread: id = 4606 os_tid = 0x1738 [0174.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env")) returned 0x20 [0177.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env", dwFileAttributes=0x20) returned 0 [0177.585] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.585] GetLastError () returned 0x5 [0177.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env", dwFileAttributes=0x20) returned 0 [0177.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a508) returned 1 Thread: id = 4607 os_tid = 0x173c [0174.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca")) returned 0x20 [0177.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca", dwFileAttributes=0x20) returned 0 [0177.590] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.590] GetLastError () returned 0x5 [0177.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca", dwFileAttributes=0x20) returned 0 [0177.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e669d8) returned 1 Thread: id = 4608 os_tid = 0x1740 [0174.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp")) returned 0x20 [0177.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp", dwFileAttributes=0x20) returned 0 [0177.489] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.490] GetLastError () returned 0x5 [0177.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp", dwFileAttributes=0x20) returned 0 [0177.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66b58) returned 1 Thread: id = 4609 os_tid = 0x1744 [0174.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp")) returned 0x20 [0177.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp", dwFileAttributes=0x20) returned 0 [0177.591] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.591] GetLastError () returned 0x5 [0177.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp", dwFileAttributes=0x20) returned 0 [0177.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a5d0) returned 1 Thread: id = 4610 os_tid = 0x1748 [0174.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx")) returned 0x20 [0177.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx", dwFileAttributes=0x20) returned 0 [0177.593] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.593] GetLastError () returned 0x5 [0177.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx", dwFileAttributes=0x20) returned 0 [0177.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66c18) returned 1 Thread: id = 4611 os_tid = 0x174c [0174.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca")) returned 0x20 [0177.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca", dwFileAttributes=0x20) returned 0 [0177.594] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.594] GetLastError () returned 0x5 [0177.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca", dwFileAttributes=0x20) returned 0 [0177.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65b98) returned 1 Thread: id = 4612 os_tid = 0x1750 [0174.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp")) returned 0x20 [0177.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp", dwFileAttributes=0x20) returned 0 [0177.600] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.600] GetLastError () returned 0x5 [0177.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp", dwFileAttributes=0x20) returned 0 [0177.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e663d8) returned 1 Thread: id = 4613 os_tid = 0x1754 [0174.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp")) returned 0x20 [0177.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp", dwFileAttributes=0x20) returned 0 [0177.598] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.599] GetLastError () returned 0x5 [0177.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp", dwFileAttributes=0x20) returned 0 [0177.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65d18) returned 1 Thread: id = 4614 os_tid = 0x175c [0174.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx")) returned 0x20 [0177.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx", dwFileAttributes=0x20) returned 0 [0177.608] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.608] GetLastError () returned 0x5 [0177.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx", dwFileAttributes=0x20) returned 0 [0177.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66558) returned 1 Thread: id = 4615 os_tid = 0x1764 [0174.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths")) returned 0x20 [0177.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths", dwFileAttributes=0x20) returned 0 [0177.354] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.354] GetLastError () returned 0x5 [0177.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths", dwFileAttributes=0x20) returned 0 [0177.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 4616 os_tid = 0x1768 [0174.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp")) returned 0x20 [0177.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp", dwFileAttributes=0x20) returned 0 [0177.595] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.596] GetLastError () returned 0x5 [0177.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp", dwFileAttributes=0x20) returned 0 [0177.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333468) returned 1 Thread: id = 4617 os_tid = 0x176c [0174.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex")) returned 0x20 [0177.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex", dwFileAttributes=0x20) returned 0 [0177.602] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.602] GetLastError () returned 0x5 [0177.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex", dwFileAttributes=0x20) returned 0 [0177.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a698) returned 1 Thread: id = 4618 os_tid = 0x1770 [0174.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx")) returned 0x20 [0177.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx", dwFileAttributes=0x20) returned 0 [0177.603] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.603] GetLastError () returned 0x5 [0177.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx", dwFileAttributes=0x20) returned 0 [0177.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333b28) returned 1 Thread: id = 4619 os_tid = 0x1778 [0174.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env")) returned 0x20 [0177.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env", dwFileAttributes=0x20) returned 0 [0177.605] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.605] GetLastError () returned 0x5 [0177.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env", dwFileAttributes=0x20) returned 0 [0177.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a760) returned 1 Thread: id = 4620 os_tid = 0x177c [0174.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp")) returned 0x20 [0177.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp", dwFileAttributes=0x20) returned 0 [0177.606] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.606] GetLastError () returned 0x5 [0177.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp", dwFileAttributes=0x20) returned 0 [0177.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 4621 os_tid = 0x1780 [0174.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex")) returned 0x20 [0177.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex", dwFileAttributes=0x20) returned 0 [0177.613] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.613] GetLastError () returned 0x5 [0177.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex", dwFileAttributes=0x20) returned 0 [0177.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a828) returned 1 Thread: id = 4622 os_tid = 0x1784 [0175.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx")) returned 0x20 [0177.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx", dwFileAttributes=0x20) returned 0 [0177.597] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.597] GetLastError () returned 0x5 [0177.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx", dwFileAttributes=0x20) returned 0 [0177.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333d68) returned 1 Thread: id = 4623 os_tid = 0x1788 [0175.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx")) returned 0x20 [0175.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0175.125] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.125] GetLastError () returned 0x5 [0175.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0175.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e480) returned 1 Thread: id = 4624 os_tid = 0x178c [0175.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx")) returned 0x20 [0175.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0175.127] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.127] GetLastError () returned 0x5 [0175.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0175.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 Thread: id = 4625 os_tid = 0x1790 [0175.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\lima")) returned 0x20 [0178.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima", dwFileAttributes=0x20) returned 0 [0178.833] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\lima"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.833] GetLastError () returned 0x5 [0178.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Lima", dwFileAttributes=0x20) returned 0 [0178.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 Thread: id = 4626 os_tid = 0x1794 [0175.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\los_angeles")) returned 0x20 [0178.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles", dwFileAttributes=0x20) returned 0 [0178.835] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\los_angeles"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.835] GetLastError () returned 0x5 [0178.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Los_Angeles", dwFileAttributes=0x20) returned 0 [0178.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 Thread: id = 4627 os_tid = 0x1798 [0175.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt")) returned 0x20 [0175.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", dwFileAttributes=0x20) returned 0 [0175.129] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.130] GetLastError () returned 0x5 [0175.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", dwFileAttributes=0x20) returned 0 [0175.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 Thread: id = 4628 os_tid = 0x179c [0175.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt")) returned 0x20 [0175.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0175.155] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.155] GetLastError () returned 0x5 [0175.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", dwFileAttributes=0x20) returned 0 [0175.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4448) returned 1 Thread: id = 4629 os_tid = 0x17dc [0175.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt")) returned 0x20 [0175.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", dwFileAttributes=0x20) returned 0 [0175.157] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.157] GetLastError () returned 0x5 [0175.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", dwFileAttributes=0x20) returned 0 [0175.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 Thread: id = 4630 os_tid = 0x17e0 [0175.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt")) returned 0x20 [0175.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", dwFileAttributes=0x20) returned 0 [0175.159] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.159] GetLastError () returned 0x5 [0175.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", dwFileAttributes=0x20) returned 0 [0175.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68570) returned 1 Thread: id = 4631 os_tid = 0x17e4 [0175.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt")) returned 0x20 [0177.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", dwFileAttributes=0x20) returned 0 [0177.493] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.494] GetLastError () returned 0x5 [0177.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", dwFileAttributes=0x20) returned 0 [0177.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85cb0) returned 1 Thread: id = 4632 os_tid = 0x17e8 [0175.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt")) returned 0x20 [0177.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", dwFileAttributes=0x20) returned 0 [0177.349] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.349] GetLastError () returned 0x5 [0177.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", dwFileAttributes=0x20) returned 0 [0177.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37cd8) returned 1 Thread: id = 4633 os_tid = 0x17ec [0175.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt")) returned 0x20 [0177.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", dwFileAttributes=0x20) returned 0 [0177.485] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.485] GetLastError () returned 0x5 [0177.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", dwFileAttributes=0x20) returned 0 [0177.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38a58) returned 1 Thread: id = 4634 os_tid = 0x17f0 [0175.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt")) returned 0x20 [0177.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", dwFileAttributes=0x20) returned 0 [0177.511] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.511] GetLastError () returned 0x5 [0177.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", dwFileAttributes=0x20) returned 0 [0177.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85e50) returned 1 Thread: id = 4635 os_tid = 0x17f4 [0175.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt")) returned 0x20 [0177.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", dwFileAttributes=0x20) returned 0 [0177.508] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.508] GetLastError () returned 0x5 [0177.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", dwFileAttributes=0x20) returned 0 [0177.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e382c0) returned 1 Thread: id = 4636 os_tid = 0x17f8 [0175.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt")) returned 0x20 [0177.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", dwFileAttributes=0x20) returned 0 [0177.492] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.492] GetLastError () returned 0x5 [0177.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", dwFileAttributes=0x20) returned 0 [0177.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85f20) returned 1 Thread: id = 4637 os_tid = 0x17fc [0175.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt")) returned 0x20 [0177.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", dwFileAttributes=0x20) returned 0 [0177.268] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.269] GetLastError () returned 0x5 [0177.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", dwFileAttributes=0x20) returned 0 [0177.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37030) returned 1 Thread: id = 4638 os_tid = 0x7ac [0175.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt")) returned 0x20 [0177.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", dwFileAttributes=0x20) returned 0 [0177.523] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.523] GetLastError () returned 0x5 [0177.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", dwFileAttributes=0x20) returned 0 [0177.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ff0) returned 1 Thread: id = 4639 os_tid = 0xc14 [0175.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt")) returned 0x20 [0177.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", dwFileAttributes=0x20) returned 0 [0177.505] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.506] GetLastError () returned 0x5 [0177.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", dwFileAttributes=0x20) returned 0 [0177.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38110) returned 1 Thread: id = 4640 os_tid = 0xc10 [0175.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt")) returned 0x20 [0177.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", dwFileAttributes=0x20) returned 0 [0177.519] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.520] GetLastError () returned 0x5 [0177.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", dwFileAttributes=0x20) returned 0 [0177.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37540) returned 1 Thread: id = 4641 os_tid = 0xf64 [0175.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt")) returned 0x20 [0177.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", dwFileAttributes=0x20) returned 0 [0177.528] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.529] GetLastError () returned 0x5 [0177.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", dwFileAttributes=0x20) returned 0 [0177.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d860c0) returned 1 Thread: id = 4642 os_tid = 0x74c [0175.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt")) returned 0x20 [0177.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", dwFileAttributes=0x20) returned 0 [0177.525] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.526] GetLastError () returned 0x5 [0177.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", dwFileAttributes=0x20) returned 0 [0177.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 Thread: id = 4643 os_tid = 0xb00 [0175.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt")) returned 0x20 [0177.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", dwFileAttributes=0x20) returned 0 [0177.503] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.503] GetLastError () returned 0x5 [0177.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", dwFileAttributes=0x20) returned 0 [0177.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86190) returned 1 Thread: id = 4644 os_tid = 0x1804 [0175.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt")) returned 0x20 [0177.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", dwFileAttributes=0x20) returned 0 [0177.500] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.500] GetLastError () returned 0x5 [0177.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", dwFileAttributes=0x20) returned 0 [0177.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16b40) returned 1 Thread: id = 4645 os_tid = 0x1808 [0175.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt")) returned 0x20 [0177.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", dwFileAttributes=0x20) returned 0 [0177.517] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.517] GetLastError () returned 0x5 [0177.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", dwFileAttributes=0x20) returned 0 [0177.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16c18) returned 1 Thread: id = 4646 os_tid = 0x180c [0175.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt")) returned 0x20 [0177.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", dwFileAttributes=0x20) returned 0 [0177.498] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.498] GetLastError () returned 0x5 [0177.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", dwFileAttributes=0x20) returned 0 [0177.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18130) returned 1 Thread: id = 4647 os_tid = 0x1810 [0175.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt")) returned 0x20 [0177.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", dwFileAttributes=0x20) returned 0 [0177.514] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.514] GetLastError () returned 0x5 [0177.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", dwFileAttributes=0x20) returned 0 [0177.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4aa0) returned 1 Thread: id = 4648 os_tid = 0x1814 [0175.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\maceio")) returned 0x20 [0178.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio", dwFileAttributes=0x20) returned 0 [0178.828] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\maceio"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.828] GetLastError () returned 0x5 [0178.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Maceio", dwFileAttributes=0x20) returned 0 [0178.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23220) returned 1 Thread: id = 4649 os_tid = 0x1818 [0175.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\managua")) returned 0x20 [0178.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua", dwFileAttributes=0x20) returned 0 [0178.775] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\managua"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.775] GetLastError () returned 0x5 [0178.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Managua", dwFileAttributes=0x20) returned 0 [0178.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 Thread: id = 4650 os_tid = 0x181c [0175.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\manaus")) returned 0x20 [0178.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus", dwFileAttributes=0x20) returned 0 [0178.830] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\manaus"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.830] GetLastError () returned 0x5 [0178.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Manaus", dwFileAttributes=0x20) returned 0 [0178.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a231b0) returned 1 Thread: id = 4651 os_tid = 0x1820 [0175.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\martinique")) returned 0x20 [0178.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique", dwFileAttributes=0x20) returned 0 [0178.840] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\martinique"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.840] GetLastError () returned 0x5 [0178.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Martinique", dwFileAttributes=0x20) returned 0 [0178.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 Thread: id = 4652 os_tid = 0x1824 [0175.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\matamoros")) returned 0x20 [0178.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros", dwFileAttributes=0x20) returned 0 [0178.838] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\matamoros"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.838] GetLastError () returned 0x5 [0178.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Matamoros", dwFileAttributes=0x20) returned 0 [0178.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a233e0) returned 1 Thread: id = 4653 os_tid = 0x1828 [0175.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt")) returned 0x20 [0177.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.712] GetLastError () returned 0x5 [0177.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 4654 os_tid = 0x1850 [0175.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk")) returned 0x20 [0177.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.710] GetLastError () returned 0x5 [0177.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 4655 os_tid = 0x1854 [0175.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk")) returned 0x20 [0177.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.708] GetLastError () returned 0x5 [0177.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 4656 os_tid = 0x1858 [0175.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll")) returned 0x20 [0177.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0177.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.706] GetLastError () returned 0x5 [0177.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0177.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7150) returned 1 Thread: id = 4657 os_tid = 0x185c [0175.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll")) returned 0x20 [0177.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0177.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.704] GetLastError () returned 0x5 [0177.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0177.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb64d8) returned 1 Thread: id = 4658 os_tid = 0x1860 [0175.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn")) returned 0x20 [0177.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn", dwFileAttributes=0x20) returned 0 [0177.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.702] GetLastError () returned 0x5 [0177.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn", dwFileAttributes=0x20) returned 0 [0177.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df48c0) returned 1 Thread: id = 4659 os_tid = 0x1864 [0175.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs")) returned 0x20 [0177.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS", dwFileAttributes=0x20) returned 0 [0177.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.352] GetLastError () returned 0x5 [0177.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS", dwFileAttributes=0x20) returned 0 [0177.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47918) returned 1 Thread: id = 4660 os_tid = 0x1868 [0175.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7e) returned 0x3f3bed8 [0175.172] wcscpy (in: _Dest=0x3f3bed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0175.172] wcscat (in: _Dest=0x3f3bed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0175.172] wcscat (in: _Dest=0x3f3bed8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*" [0175.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4638 [0175.173] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f79a10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e740b0 [0179.508] wcscmp (_String1=".", _String2=".") returned 0 [0179.508] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f79a10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.508] wcscmp (_String1="..", _String2=".") returned 1 [0179.508] wcscmp (_String1="..", _String2="..") returned 0 [0179.508] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6c1f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a6c1f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0179.508] wcscmp (_String1="BG_ADOBE.GIF", _String2=".") returned 1 [0179.508] wcscmp (_String1="BG_ADOBE.GIF", _String2="..") returned 1 [0179.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63210 [0179.508] wcscpy (in: _Dest=0x7a63210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0179.508] wcscat (in: _Dest=0x7a63210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0179.508] wcscat (in: _Dest=0x7a63210, _Source="BG_ADOBE.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" [0181.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0181.400] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6c1f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5a6c1f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0181.400] wcscmp (_String1="bg_Casual.gif", _String2=".") returned 1 [0181.400] wcscmp (_String1="bg_Casual.gif", _String2="..") returned 1 [0181.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62950 [0181.400] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.400] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.400] wcscat (in: _Dest=0x7a62950, _Source="bg_Casual.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" [0181.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0181.401] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0181.401] wcscmp (_String1="bg_Country.gif", _String2=".") returned 1 [0181.401] wcscmp (_String1="bg_Country.gif", _String2="..") returned 1 [0181.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a62ef0 [0181.402] wcscpy (in: _Dest=0x7a62ef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.402] wcscat (in: _Dest=0x7a62ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.402] wcscat (in: _Dest=0x7a62ef0, _Source="bg_Country.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" [0181.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0181.403] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0181.403] wcscmp (_String1="bg_Earthy.gif", _String2=".") returned 1 [0181.403] wcscmp (_String1="bg_Earthy.gif", _String2="..") returned 1 [0181.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62130 [0181.403] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.403] wcscat (in: _Dest=0x7a62130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.403] wcscat (in: _Dest=0x7a62130, _Source="bg_Earthy.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" [0181.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150 [0181.405] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0181.405] wcscmp (_String1="bg_GreenTea.gif", _String2=".") returned 1 [0181.405] wcscmp (_String1="bg_GreenTea.gif", _String2="..") returned 1 [0181.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x7a5e678 [0181.405] wcscpy (in: _Dest=0x7a5e678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.405] wcscat (in: _Dest=0x7a5e678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.405] wcscat (in: _Dest=0x7a5e678, _Source="bg_GreenTea.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" [0181.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860 [0181.406] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0181.407] wcscmp (_String1="bg_Groove.gif", _String2=".") returned 1 [0181.407] wcscmp (_String1="bg_Groove.gif", _String2="..") returned 1 [0181.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63530 [0181.407] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.407] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.407] wcscat (in: _Dest=0x7a63530, _Source="bg_Groove.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" [0181.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0181.408] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0181.408] wcscmp (_String1="bg_LightSpirit.gif", _String2=".") returned 1 [0181.408] wcscmp (_String1="bg_LightSpirit.gif", _String2="..") returned 1 [0181.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f590 [0181.408] wcscpy (in: _Dest=0x7a5f590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.408] wcscat (in: _Dest=0x7a5f590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.408] wcscat (in: _Dest=0x7a5f590, _Source="bg_LightSpirit.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" [0181.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0181.410] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0181.410] wcscmp (_String1="bg_OliveGreen.gif", _String2=".") returned 1 [0181.410] wcscmp (_String1="bg_OliveGreen.gif", _String2="..") returned 1 [0181.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5f1a0 [0181.410] wcscpy (in: _Dest=0x7a5f1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.410] wcscat (in: _Dest=0x7a5f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.410] wcscat (in: _Dest=0x7a5f1a0, _Source="bg_OliveGreen.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" [0181.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0181.411] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0181.411] wcscmp (_String1="bg_Premium.gif", _String2=".") returned 1 [0181.411] wcscmp (_String1="bg_Premium.gif", _String2="..") returned 1 [0181.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7a63ad0 [0181.411] wcscpy (in: _Dest=0x7a63ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.411] wcscat (in: _Dest=0x7a63ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.411] wcscat (in: _Dest=0x7a63ad0, _Source="bg_Premium.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" [0181.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0181.413] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f538b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0181.413] wcscmp (_String1="bg_SlateBlue.gif", _String2=".") returned 1 [0181.413] wcscmp (_String1="bg_SlateBlue.gif", _String2="..") returned 1 [0181.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5e720 [0181.413] wcscpy (in: _Dest=0x7a5e720, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.413] wcscat (in: _Dest=0x7a5e720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.414] wcscat (in: _Dest=0x7a5e720, _Source="bg_SlateBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" [0181.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0181.415] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0181.415] wcscmp (_String1="bg_TexturedBlue.gif", _String2=".") returned 1 [0181.415] wcscmp (_String1="bg_TexturedBlue.gif", _String2="..") returned 1 [0181.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a67530 [0181.415] wcscpy (in: _Dest=0x7a67530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.415] wcscat (in: _Dest=0x7a67530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.415] wcscat (in: _Dest=0x7a67530, _Source="bg_TexturedBlue.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" [0181.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0181.416] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9d4c00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5b9d4c00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0181.416] wcscmp (_String1="bg_VelvetRose.gif", _String2=".") returned 1 [0181.416] wcscmp (_String1="bg_VelvetRose.gif", _String2="..") returned 1 [0181.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e3d8 [0181.417] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.417] wcscat (in: _Dest=0x7a5e3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.417] wcscat (in: _Dest=0x7a5e3d8, _Source="bg_VelvetRose.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" [0181.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5e3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0181.418] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1 [0181.418] wcscmp (_String1="FormsStyles", _String2=".") returned 1 [0181.418] wcscmp (_String1="FormsStyles", _String2="..") returned 1 [0181.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62c70 [0181.418] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5" [0181.418] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\" [0181.418] wcscat (in: _Dest=0x7a62c70, _Source="FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0181.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0181.420] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 0 [0181.420] FindClose (in: hFindFile=0x3e740b0 | out: hFindFile=0x3e740b0) returned 1 [0181.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4638) returned 1 [0181.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 [0181.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 Thread: id = 4661 os_tid = 0x186c [0175.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc")) returned 0x20 [0177.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.719] GetLastError () returned 0x5 [0177.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ba20) returned 1 Thread: id = 4662 os_tid = 0x1870 [0175.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt")) returned 0x20 [0177.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.717] GetLastError () returned 0x5 [0177.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b888) returned 1 Thread: id = 4663 os_tid = 0x1874 [0175.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk")) returned 0x20 [0177.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.715] GetLastError () returned 0x5 [0177.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61560) returned 1 Thread: id = 4664 os_tid = 0x1878 [0175.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk")) returned 0x20 [0177.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.698] GetLastError () returned 0x5 [0177.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60870) returned 1 Thread: id = 4665 os_tid = 0x187c [0175.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl")) returned 0x20 [0177.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL", dwFileAttributes=0x20) returned 0 [0177.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.729] GetLastError () returned 0x5 [0177.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL", dwFileAttributes=0x20) returned 0 [0177.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47318) returned 1 Thread: id = 4666 os_tid = 0x1880 [0175.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx")) returned 0x20 [0175.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0175.459] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.459] GetLastError () returned 0x5 [0175.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0175.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3054050) returned 1 Thread: id = 4667 os_tid = 0x1884 [0175.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx")) returned 0x20 [0175.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0175.461] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.461] GetLastError () returned 0x5 [0175.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0175.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30531e0) returned 1 Thread: id = 4668 os_tid = 0x1894 [0175.462] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log")) returned 0x2020 [0177.897] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", dwFileAttributes=0x20) returned 1 [0182.111] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1140 [0182.112] GetFileSizeEx (in: hFile=0x1140, lpFileSize=0x44ef9ec | out: lpFileSize=0x44ef9ec*=0) returned 1 [0182.112] FlushFileBuffers (hFile=0x1140) returned 1 [0183.589] CloseHandle (hObject=0x1140) returned 1 [0183.589] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", dwFileAttributes=0x2020) returned 1 [0186.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300da60) returned 1 Thread: id = 4669 os_tid = 0x1898 [0175.464] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current")) returned 0x2020 [0177.629] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", dwFileAttributes=0x20) returned 1 [0182.041] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1128 [0182.041] GetFileSizeEx (in: hFile=0x1128, lpFileSize=0x408fab4 | out: lpFileSize=0x408fab4*=16) returned 1 [0182.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0182.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0182.042] NtQuerySystemTime (in: CurrentTime=0x408fa28 | out: CurrentTime=0x408fa28*=132462177606156000) returned 0x0 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x70dd327c [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x69b9ad66 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x1ca2ce47 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x7209698a [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x6f0b94fd [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x12f1732f [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x26e95bdf [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x5ca3c836 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x4ca6bee7 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x132beca9 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x53540b5c [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x22f8aae3 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x107272fc [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x5b7eef31 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x45c04bc6 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0xf246867 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x1be904 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x357d1e41 [0182.042] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0xfab55c6 [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x7b6b4ece [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x433a5a2a [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x77d2e49d [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x6a3be4dd [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x53aaaec1 [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x25f5e826 [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x3a4bb857 [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x76292e3b [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x325a4ec7 [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x28d0b95b [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x64053113 [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x17b83b4e [0182.043] RtlRandomEx (in: Seed=0x408fa20 | out: Seed=0x408fa20) returned 0x2f5f076 [0182.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0182.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0182.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0182.054] ReadFile (in: hFile=0x1128, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0x408fa1c, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0x408fa1c*=0x10, lpOverlapped=0x0) returned 1 [0182.056] SetFilePointerEx (in: hFile=0x1128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.056] WriteFile (in: hFile=0x1128, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x408fa20, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0x408fa20*=0x10, lpOverlapped=0x0) returned 1 [0182.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0182.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0182.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30b0) returned 1 [0182.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0182.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0182.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0182.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdea8) returned 1 [0182.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec30b0 [0182.241] SetFilePointerEx (in: hFile=0x1128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.242] WriteFile (in: hFile=0x1128, lpBuffer=0x30bc760*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x408faa8, lpOverlapped=0x0 | out: lpBuffer=0x30bc760*, lpNumberOfBytesWritten=0x408faa8*=0x100, lpOverlapped=0x0) returned 1 [0182.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0182.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0182.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43860 [0182.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0182.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0182.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0182.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3d5a9c0 [0182.289] sprintf (in: _Dest=0x3d5a9c0, _Format="%c%c" | out: _Dest="fa") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9c2, _Format="%c%c" | out: _Dest="06") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9c4, _Format="%c%c" | out: _Dest="29") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9c6, _Format="%c%c" | out: _Dest="06") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9c8, _Format="%c%c" | out: _Dest="ab") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9ca, _Format="%c%c" | out: _Dest="04") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9cc, _Format="%c%c" | out: _Dest="4e") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9ce, _Format="%c%c" | out: _Dest="c8") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9d0, _Format="%c%c" | out: _Dest="f4") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9d2, _Format="%c%c" | out: _Dest="24") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9d4, _Format="%c%c" | out: _Dest="d1") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9d6, _Format="%c%c" | out: _Dest="d1") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9d8, _Format="%c%c" | out: _Dest="05") returned 2 [0182.290] sprintf (in: _Dest=0x3d5a9da, _Format="%c%c" | out: _Dest="54") returned 2 [0182.290] RtlInitAnsiString (in: DestinationString=0x408fa30, SourceString="fa062906ab044ec8f424d1d10554" | out: DestinationString="fa062906ab044ec8f424d1d10554") [0182.290] RtlAnsiStringToUnicodeString (in: DestinationString=0x408fa28, SourceString="fa062906ab044ec8f424d1d10554", AllocateDestinationString=1 | out: DestinationString="fa062906ab044ec8f424d1d10554") returned 0x0 [0182.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x30bdc20 [0182.290] wcscat (in: _Dest=0x3deaf00, _Source="fa06290" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\fa06290") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\fa06290" [0182.290] wcscat (in: _Dest=0x3deaf00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\fa06290.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\fa06290.68814f" [0182.290] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\fa06290.68814f", NtPathName=0x408fa20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\fa06290.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ec9e08 [0182.344] FlushFileBuffers (hFile=0x1128) returned 1 [0183.587] CloseHandle (hObject=0x1128) returned 1 [0184.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7b807c0 [0184.539] wcscpy (in: _Dest=0x7b807c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0184.539] wcscat (in: _Dest=0x7b807c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814F-Readme.txt" [0184.539] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814f-readme.txt")) returned 0x2020 [0184.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b807c0) returned 1 [0184.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 Thread: id = 4670 os_tid = 0x189c [0175.465] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock")) returned 0x2020 [0177.629] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", dwFileAttributes=0x20) returned 1 [0182.071] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1138 [0182.072] GetFileSizeEx (in: hFile=0x1138, lpFileSize=0x478fb34 | out: lpFileSize=0x478fb34*=0) returned 1 [0182.072] FlushFileBuffers (hFile=0x1138) returned 1 [0183.592] CloseHandle (hObject=0x1138) returned 1 [0183.592] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", dwFileAttributes=0x2020) returned 1 [0186.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f9a00) returned 1 Thread: id = 4671 os_tid = 0x18a0 [0175.466] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log")) returned 0x2020 [0177.897] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", dwFileAttributes=0x20) returned 1 [0182.112] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1278 [0182.112] GetFileSizeEx (in: hFile=0x1278, lpFileSize=0x5e4f94c | out: lpFileSize=0x5e4f94c*=183) returned 1 [0182.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e340 [0182.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0182.113] NtQuerySystemTime (in: CurrentTime=0x5e4f8c0 | out: CurrentTime=0x5e4f8c0*=132462177606936000) returned 0x0 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x61ce8965 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x45b93f01 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x5c82bcb9 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x1d315405 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x13b36752 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x731d6ef0 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x87b6c4 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x62fe596 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x2b1d6f0f [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x48f1fe0b [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0xcd975c2 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x19004f09 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x4940d52a [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x50d5c4f3 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x463007d [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x6c9c2875 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x5e763ffc [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x5565c6c0 [0182.113] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x1440ebf5 [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x554dcb2a [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x10a1db37 [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x14354836 [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x35ef0f9a [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x3dfa711e [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x378c52f9 [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x18b5b81e [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x32f81388 [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x52458aa0 [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x1d62bbfd [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x4d9907ac [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x4e8d4854 [0182.114] RtlRandomEx (in: Seed=0x5e4f8b8 | out: Seed=0x5e4f8b8) returned 0x62618e4c [0182.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0182.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ac04c8 [0182.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ac40d0 [0182.125] ReadFile (in: hFile=0x1278, lpBuffer=0x7ac04c8, nNumberOfBytesToRead=0xb7, lpNumberOfBytesRead=0x5e4f8b4, lpOverlapped=0x0 | out: lpBuffer=0x7ac04c8*, lpNumberOfBytesRead=0x5e4f8b4*=0xb7, lpOverlapped=0x0) returned 1 [0182.128] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.128] WriteFile (in: hFile=0x1278, lpBuffer=0x7ac40d0*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x5e4f8b8, lpOverlapped=0x0 | out: lpBuffer=0x7ac40d0*, lpNumberOfBytesWritten=0x5e4f8b8*=0xb7, lpOverlapped=0x0) returned 1 [0182.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fc0 [0182.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0182.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a78) returned 1 [0182.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac40d0) returned 1 [0182.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac04c8) returned 1 [0182.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0182.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdef0) returned 1 [0182.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14) returned 0x3e810a0 [0182.247] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.247] WriteFile (in: hFile=0x1278, lpBuffer=0x3dea8b8*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x5e4f940, lpOverlapped=0x0 | out: lpBuffer=0x3dea8b8*, lpNumberOfBytesWritten=0x5e4f940*=0xf8, lpOverlapped=0x0) returned 1 [0182.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0182.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0182.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6) returned 0x3ea6540 [0182.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0182.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0182.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0182.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd) returned 0x3e43860 [0182.301] sprintf (in: _Dest=0x3e43860, _Format="%c%c" | out: _Dest="32") returned 2 [0182.301] sprintf (in: _Dest=0x3e43862, _Format="%c%c" | out: _Dest="3d") returned 2 [0182.301] sprintf (in: _Dest=0x3e43864, _Format="%c%c" | out: _Dest="6b") returned 2 [0182.301] sprintf (in: _Dest=0x3e43866, _Format="%c%c" | out: _Dest="76") returned 2 [0182.301] sprintf (in: _Dest=0x3e43868, _Format="%c%c" | out: _Dest="0d") returned 2 [0182.301] sprintf (in: _Dest=0x3e4386a, _Format="%c%c" | out: _Dest="99") returned 2 [0182.301] RtlInitAnsiString (in: DestinationString=0x5e4f8c8, SourceString="323d6b760d99" | out: DestinationString="323d6b760d99") [0182.301] RtlAnsiStringToUnicodeString (in: DestinationString=0x5e4f8c0, SourceString="323d6b760d99", AllocateDestinationString=1 | out: DestinationString="323d6b760d99") returned 0x0 [0182.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5add0 [0182.301] wcscat (in: _Dest=0x3dec828, _Source="323" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\323") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\323" [0182.302] wcscat (in: _Dest=0x3dec828, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\323.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\323.68814f" [0182.302] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\323.68814f", NtPathName=0x5e4f8b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\323.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d55968 [0182.350] FlushFileBuffers (hFile=0x1278) returned 1 [0183.587] CloseHandle (hObject=0x1278) returned 1 [0184.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7b80698 [0184.537] wcscpy (in: _Dest=0x7b80698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0184.537] wcscat (in: _Dest=0x7b80698, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814F-Readme.txt" [0184.537] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814f-readme.txt")) returned 0x2020 [0184.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80698) returned 1 [0184.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f93d0) returned 1 Thread: id = 4672 os_tid = 0x18b4 [0175.466] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001")) returned 0x2020 [0177.896] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", dwFileAttributes=0x20) returned 1 [0182.072] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3e8 [0182.072] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x227fc74 | out: lpFileSize=0x227fc74*=41) returned 1 [0182.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0182.073] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e340 [0182.073] NtQuerySystemTime (in: CurrentTime=0x227fbe8 | out: CurrentTime=0x227fbe8*=132462177606468000) returned 0x0 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0xc3c63ab [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x3429e8d9 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x3df35954 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x5c206990 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x27d5c603 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x54b5ad12 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x39f68f83 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x34a6e281 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x5dd021aa [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x4c4412aa [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x6a8229c7 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x7b0b0854 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x6879770b [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x319c3f69 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x618fcd98 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x51e695ee [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x42e5896e [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x627a3e5 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x3d6a2986 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x597102c5 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x24e3b7d3 [0182.073] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x288ec86c [0182.074] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0xdaf5434 [0182.074] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x3109f6f9 [0182.074] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0xd00072a [0182.074] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0xeb51729 [0182.074] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x43390da4 [0182.074] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x4a2b71df [0182.074] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x4f0aae7a [0182.074] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x7b4174f1 [0182.074] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x54a8deaa [0182.074] RtlRandomEx (in: Seed=0x227fbe0 | out: Seed=0x227fbe0) returned 0x2e89144f [0182.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0182.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab8cb8 [0182.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7abc8c0 [0182.108] ReadFile (in: hFile=0x3e8, lpBuffer=0x7ab8cb8, nNumberOfBytesToRead=0x29, lpNumberOfBytesRead=0x227fbdc, lpOverlapped=0x0 | out: lpBuffer=0x7ab8cb8*, lpNumberOfBytesRead=0x227fbdc*=0x29, lpOverlapped=0x0) returned 1 [0182.111] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.111] WriteFile (in: hFile=0x3e8, lpBuffer=0x7abc8c0*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x227fbe0, lpOverlapped=0x0 | out: lpBuffer=0x7abc8c0*, lpNumberOfBytesWritten=0x227fbe0*=0x29, lpOverlapped=0x0) returned 1 [0182.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0182.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0182.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0182.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7abc8c0) returned 1 [0182.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab8cb8) returned 1 [0182.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0182.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdbd8) returned 1 [0182.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e78fb0 [0182.245] SetFilePointerEx (in: hFile=0x3e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.245] WriteFile (in: hFile=0x3e8, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x227fc68, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x227fc68*=0x110, lpOverlapped=0x0) returned 1 [0182.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0182.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0182.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3d5df30 [0182.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0182.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0182.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0182.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x30be250 [0182.297] sprintf (in: _Dest=0x30be250, _Format="%c%c" | out: _Dest="41") returned 2 [0182.297] sprintf (in: _Dest=0x30be252, _Format="%c%c" | out: _Dest="43") returned 2 [0182.297] sprintf (in: _Dest=0x30be254, _Format="%c%c" | out: _Dest="2b") returned 2 [0182.297] sprintf (in: _Dest=0x30be256, _Format="%c%c" | out: _Dest="0c") returned 2 [0182.297] sprintf (in: _Dest=0x30be258, _Format="%c%c" | out: _Dest="40") returned 2 [0182.297] sprintf (in: _Dest=0x30be25a, _Format="%c%c" | out: _Dest="dc") returned 2 [0182.297] sprintf (in: _Dest=0x30be25c, _Format="%c%c" | out: _Dest="b0") returned 2 [0182.297] sprintf (in: _Dest=0x30be25e, _Format="%c%c" | out: _Dest="a2") returned 2 [0182.297] sprintf (in: _Dest=0x30be260, _Format="%c%c" | out: _Dest="a3") returned 2 [0182.297] sprintf (in: _Dest=0x30be262, _Format="%c%c" | out: _Dest="e1") returned 2 [0182.297] sprintf (in: _Dest=0x30be264, _Format="%c%c" | out: _Dest="de") returned 2 [0182.297] sprintf (in: _Dest=0x30be266, _Format="%c%c" | out: _Dest="be") returned 2 [0182.297] sprintf (in: _Dest=0x30be268, _Format="%c%c" | out: _Dest="13") returned 2 [0182.297] sprintf (in: _Dest=0x30be26a, _Format="%c%c" | out: _Dest="77") returned 2 [0182.297] sprintf (in: _Dest=0x30be26c, _Format="%c%c" | out: _Dest="21") returned 2 [0182.298] sprintf (in: _Dest=0x30be26e, _Format="%c%c" | out: _Dest="d7") returned 2 [0182.298] sprintf (in: _Dest=0x30be270, _Format="%c%c" | out: _Dest="22") returned 2 [0182.298] sprintf (in: _Dest=0x30be272, _Format="%c%c" | out: _Dest="cb") returned 2 [0182.298] sprintf (in: _Dest=0x30be274, _Format="%c%c" | out: _Dest="1c") returned 2 [0182.298] sprintf (in: _Dest=0x30be276, _Format="%c%c" | out: _Dest="46") returned 2 [0182.298] sprintf (in: _Dest=0x30be278, _Format="%c%c" | out: _Dest="0b") returned 2 [0182.298] sprintf (in: _Dest=0x30be27a, _Format="%c%c" | out: _Dest="c6") returned 2 [0182.298] sprintf (in: _Dest=0x30be27c, _Format="%c%c" | out: _Dest="ec") returned 2 [0182.298] sprintf (in: _Dest=0x30be27e, _Format="%c%c" | out: _Dest="08") returned 2 [0182.298] sprintf (in: _Dest=0x30be280, _Format="%c%c" | out: _Dest="d4") returned 2 [0182.298] sprintf (in: _Dest=0x30be282, _Format="%c%c" | out: _Dest="af") returned 2 [0182.298] sprintf (in: _Dest=0x30be284, _Format="%c%c" | out: _Dest="cd") returned 2 [0182.298] sprintf (in: _Dest=0x30be286, _Format="%c%c" | out: _Dest="85") returned 2 [0182.298] sprintf (in: _Dest=0x30be288, _Format="%c%c" | out: _Dest="66") returned 2 [0182.298] sprintf (in: _Dest=0x30be28a, _Format="%c%c" | out: _Dest="70") returned 2 [0182.298] RtlInitAnsiString (in: DestinationString=0x227fbf0, SourceString="41432b0c40dcb0a2a3e1debe137721d722cb1c460bc6ec08d4afcd856670" | out: DestinationString="41432b0c40dcb0a2a3e1debe137721d722cb1c460bc6ec08d4afcd856670") [0182.298] RtlAnsiStringToUnicodeString (in: DestinationString=0x227fbe8, SourceString="41432b0c40dcb0a2a3e1debe137721d722cb1c460bc6ec08d4afcd856670", AllocateDestinationString=1 | out: DestinationString="41432b0c40dcb0a2a3e1debe137721d722cb1c460bc6ec08d4afcd856670") returned 0x0 [0182.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x3eba330 [0182.298] wcscat (in: _Dest=0x3d54498, _Source="41432b0c40dcb0a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\41432b0c40dcb0a") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\41432b0c40dcb0a" [0182.298] wcscat (in: _Dest=0x3d54498, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\41432b0c40dcb0a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\41432b0c40dcb0a.68814f" [0182.299] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\41432b0c40dcb0a.68814f", NtPathName=0x227fbe0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\41432b0c40dcb0a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea2d68 [0182.352] FlushFileBuffers (hFile=0x3e8) returned 1 [0183.588] CloseHandle (hObject=0x3e8) returned 1 [0184.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7b80570 [0184.536] wcscpy (in: _Dest=0x7b80570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\" [0184.536] wcscat (in: _Dest=0x7b80570, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814F-Readme.txt" [0184.536] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814f-readme.txt")) returned 0xffffffff [0184.536] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1890 [0184.685] WriteFile (in: hFile=0x1890, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x227fbfc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x227fbfc*=0x8b9, lpOverlapped=0x0) returned 1 [0184.705] CloseHandle (hObject=0x1890) returned 1 [0184.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80570) returned 1 [0184.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55bb8) returned 1 Thread: id = 4673 os_tid = 0x18c0 [0175.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h")) returned 0x20 [0175.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H", dwFileAttributes=0x20) returned 0 [0175.467] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.467] GetLastError () returned 0x5 [0175.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H", dwFileAttributes=0x20) returned 0 [0175.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f18) returned 1 Thread: id = 4674 os_tid = 0x18c4 [0175.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2")) returned 0x20 [0177.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2", dwFileAttributes=0x20) returned 0 [0177.499] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.499] GetLastError () returned 0x5 [0177.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2", dwFileAttributes=0x20) returned 0 [0177.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30633a0) returned 1 Thread: id = 4675 os_tid = 0x18cc [0175.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml")) returned 0x20 [0175.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML", dwFileAttributes=0x20) returned 0 [0175.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.475] GetLastError () returned 0x5 [0175.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML", dwFileAttributes=0x20) returned 0 [0175.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a675e0) returned 1 Thread: id = 4676 os_tid = 0x18d4 [0175.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml")) returned 0x20 [0175.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML", dwFileAttributes=0x20) returned 0 [0175.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.477] GetLastError () returned 0x5 [0175.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML", dwFileAttributes=0x20) returned 0 [0175.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66a30) returned 1 Thread: id = 4677 os_tid = 0x18d8 [0175.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml")) returned 0x20 [0175.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML", dwFileAttributes=0x20) returned 0 [0175.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.478] GetLastError () returned 0x5 [0175.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML", dwFileAttributes=0x20) returned 0 [0175.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66da0) returned 1 Thread: id = 4678 os_tid = 0x18dc [0175.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml")) returned 0x20 [0175.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML", dwFileAttributes=0x20) returned 0 [0175.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.480] GetLastError () returned 0x5 [0175.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML", dwFileAttributes=0x20) returned 0 [0175.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053e58) returned 1 Thread: id = 4679 os_tid = 0x18e0 [0175.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml")) returned 0x20 [0175.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML", dwFileAttributes=0x20) returned 0 [0175.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.482] GetLastError () returned 0x5 [0175.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML", dwFileAttributes=0x20) returned 0 [0175.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66980) returned 1 Thread: id = 4680 os_tid = 0x18e4 [0175.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml")) returned 0x20 [0175.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0175.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.484] GetLastError () returned 0x5 [0175.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0175.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053138) returned 1 Thread: id = 4681 os_tid = 0x18e8 [0175.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml")) returned 0x20 [0178.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0178.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.826] GetLastError () returned 0x5 [0178.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0178.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053678) returned 1 Thread: id = 4682 os_tid = 0x18ec [0175.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml")) returned 0x20 [0178.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML", dwFileAttributes=0x20) returned 0 [0178.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.825] GetLastError () returned 0x5 [0178.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML", dwFileAttributes=0x20) returned 0 [0178.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053528) returned 1 Thread: id = 4683 os_tid = 0x18f4 [0175.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml")) returned 0x20 [0178.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML", dwFileAttributes=0x20) returned 0 [0178.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.829] GetLastError () returned 0x5 [0178.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML", dwFileAttributes=0x20) returned 0 [0178.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053870) returned 1 Thread: id = 4684 os_tid = 0x18f8 [0175.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml")) returned 0x20 [0178.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML", dwFileAttributes=0x20) returned 0 [0178.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.832] GetLastError () returned 0x5 [0178.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML", dwFileAttributes=0x20) returned 0 [0178.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66400) returned 1 Thread: id = 4685 os_tid = 0x1900 [0175.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml")) returned 0x20 [0178.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML", dwFileAttributes=0x20) returned 0 [0178.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.834] GetLastError () returned 0x5 [0178.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML", dwFileAttributes=0x20) returned 0 [0178.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 4686 os_tid = 0x1904 [0175.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml")) returned 0x20 [0178.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0178.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.853] GetLastError () returned 0x5 [0178.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML", dwFileAttributes=0x20) returned 0 [0178.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053f00) returned 1 Thread: id = 4687 os_tid = 0x190c [0175.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml")) returned 0x20 [0178.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML", dwFileAttributes=0x20) returned 0 [0178.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.854] GetLastError () returned 0x5 [0178.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML", dwFileAttributes=0x20) returned 0 [0178.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053c60) returned 1 Thread: id = 4688 os_tid = 0x1910 [0175.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml")) returned 0x20 [0178.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML", dwFileAttributes=0x20) returned 0 [0178.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.839] GetLastError () returned 0x5 [0178.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML", dwFileAttributes=0x20) returned 0 [0178.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63cb0) returned 1 Thread: id = 4689 os_tid = 0x1918 [0175.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml")) returned 0x20 [0178.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML", dwFileAttributes=0x20) returned 0 [0178.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.865] GetLastError () returned 0x5 [0178.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML", dwFileAttributes=0x20) returned 0 [0178.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a633f0) returned 1 Thread: id = 4690 os_tid = 0x191c [0175.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml")) returned 0x20 [0178.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML", dwFileAttributes=0x20) returned 0 [0178.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.849] GetLastError () returned 0x5 [0178.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML", dwFileAttributes=0x20) returned 0 [0178.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053288) returned 1 Thread: id = 4691 os_tid = 0x1920 [0175.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml")) returned 0x20 [0178.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML", dwFileAttributes=0x20) returned 0 [0178.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.871] GetLastError () returned 0x5 [0178.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML", dwFileAttributes=0x20) returned 0 [0178.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053b10) returned 1 Thread: id = 4692 os_tid = 0x1924 [0175.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml")) returned 0x20 [0178.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML", dwFileAttributes=0x20) returned 0 [0178.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.864] GetLastError () returned 0x5 [0178.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML", dwFileAttributes=0x20) returned 0 [0178.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053480) returned 1 Thread: id = 4693 os_tid = 0x1928 [0175.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml")) returned 0x20 [0178.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML", dwFileAttributes=0x20) returned 0 [0178.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.847] GetLastError () returned 0x5 [0178.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML", dwFileAttributes=0x20) returned 0 [0178.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053918) returned 1 Thread: id = 4694 os_tid = 0x1930 [0175.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml")) returned 0x20 [0178.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML", dwFileAttributes=0x20) returned 0 [0178.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.860] GetLastError () returned 0x5 [0178.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML", dwFileAttributes=0x20) returned 0 [0178.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053d08) returned 1 Thread: id = 4695 os_tid = 0x1934 [0175.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml")) returned 0x20 [0178.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML", dwFileAttributes=0x20) returned 0 [0178.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.859] GetLastError () returned 0x5 [0178.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML", dwFileAttributes=0x20) returned 0 [0178.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e480) returned 1 Thread: id = 4696 os_tid = 0x1938 [0175.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml")) returned 0x20 [0178.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML", dwFileAttributes=0x20) returned 0 [0178.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.824] GetLastError () returned 0x5 [0178.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML", dwFileAttributes=0x20) returned 0 [0178.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f6e0) returned 1 Thread: id = 4697 os_tid = 0x1940 [0175.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml")) returned 0x20 [0178.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML", dwFileAttributes=0x20) returned 0 [0178.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.844] GetLastError () returned 0x5 [0178.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML", dwFileAttributes=0x20) returned 0 [0178.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f248) returned 1 Thread: id = 4698 os_tid = 0x1944 [0175.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml")) returned 0x20 [0178.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML", dwFileAttributes=0x20) returned 0 [0178.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.842] GetLastError () returned 0x5 [0178.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML", dwFileAttributes=0x20) returned 0 [0178.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f638) returned 1 Thread: id = 4699 os_tid = 0x1948 [0175.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer")) returned 0x20 [0175.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer", dwFileAttributes=0x20) returned 0 [0175.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.640] GetLastError () returned 0x5 [0175.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer", dwFileAttributes=0x20) returned 0 [0175.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 4700 os_tid = 0x194c [0175.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x20 [0175.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x20) returned 0 [0175.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.642] GetLastError () returned 0x5 [0175.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x20) returned 0 [0175.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 4701 os_tid = 0x1954 [0175.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x20 [0180.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x20) returned 0 [0180.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.962] GetLastError () returned 0x5 [0180.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x20) returned 0 [0180.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 Thread: id = 4702 os_tid = 0x1958 [0175.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x20 [0181.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x20) returned 0 [0181.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.147] GetLastError () returned 0x5 [0181.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x20) returned 0 [0181.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 4703 os_tid = 0x1964 [0175.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x20 [0181.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x20) returned 0 [0181.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.138] GetLastError () returned 0x5 [0181.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x20) returned 0 [0181.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 4704 os_tid = 0x1968 [0175.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x20 [0181.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x20) returned 0 [0181.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.143] GetLastError () returned 0x5 [0181.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x20) returned 0 [0181.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 4705 os_tid = 0x196c [0175.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x20 [0181.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x20) returned 0 [0181.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.192] GetLastError () returned 0x5 [0181.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x20) returned 0 [0181.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 4706 os_tid = 0x1970 [0175.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x20 [0181.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x20) returned 0 [0181.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.144] GetLastError () returned 0x5 [0181.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x20) returned 0 [0181.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 4707 os_tid = 0x1974 [0175.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf")) returned 0x20 [0181.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x20) returned 0 [0181.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.146] GetLastError () returned 0x5 [0181.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x20) returned 0 [0181.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f18) returned 1 Thread: id = 4708 os_tid = 0x1978 [0175.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf")) returned 0x20 [0181.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x20) returned 0 [0181.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.133] GetLastError () returned 0x5 [0181.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x20) returned 0 [0181.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 4709 os_tid = 0x197c [0175.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x20 [0181.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x20) returned 0 [0181.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.170] GetLastError () returned 0x5 [0181.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x20) returned 0 [0181.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 4710 os_tid = 0x1980 [0175.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadb30 [0175.648] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0175.648] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0175.648] wcscat (in: _Dest=0x3dadb30, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*" [0175.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0175.648] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf990 [0181.340] wcscmp (_String1=".", _String2=".") returned 0 [0181.340] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f56fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f56fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.340] wcscmp (_String1="..", _String2=".") returned 1 [0181.340] wcscmp (_String1="..", _String2="..") returned 0 [0181.340] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4ce01e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce09b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x12dfc600, ftLastWriteTime.dwHighDateTime=0x1d29826, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_background.js", cAlternateFileName="CRAW_B~1.JS")) returned 1 [0181.340] wcscmp (_String1="craw_background.js", _String2=".") returned 1 [0181.340] wcscmp (_String1="craw_background.js", _String2="..") returned 1 [0181.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x300dfd8 [0181.341] wcscpy (in: _Dest=0x300dfd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0181.341] wcscat (in: _Dest=0x300dfd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0181.341] wcscat (in: _Dest=0x300dfd8, _Source="craw_background.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" [0181.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x300dfd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0181.941] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4ce01e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e38d80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x12dfc600, ftLastWriteTime.dwHighDateTime=0x1d29826, nFileSizeHigh=0x0, nFileSizeLow=0x3b059, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.js", cAlternateFileName="CRAW_W~1.JS")) returned 1 [0181.941] wcscmp (_String1="craw_window.js", _String2=".") returned 1 [0181.941] wcscmp (_String1="craw_window.js", _String2="..") returned 1 [0181.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec4e0 [0181.941] wcscpy (in: _Dest=0x3dec4e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0181.941] wcscat (in: _Dest=0x3dec4e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0181.941] wcscat (in: _Dest=0x3dec4e0, _Source="craw_window.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" [0181.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dec4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0181.942] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0181.942] wcscmp (_String1="css", _String2=".") returned 1 [0181.942] wcscmp (_String1="css", _String2="..") returned 1 [0181.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3dea4b8 [0181.942] wcscpy (in: _Dest=0x3dea4b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0181.942] wcscat (in: _Dest=0x3dea4b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0181.942] wcscat (in: _Dest=0x3dea4b8, _Source="css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" [0181.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dea4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0181.944] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="html", cAlternateFileName="")) returned 1 [0181.944] wcscmp (_String1="html", _String2=".") returned 1 [0181.944] wcscmp (_String1="html", _String2="..") returned 1 [0181.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3dea5b8 [0181.944] wcscpy (in: _Dest=0x3dea5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0181.944] wcscat (in: _Dest=0x3dea5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0181.944] wcscat (in: _Dest=0x3dea5b8, _Source="html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" [0181.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dea5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0181.945] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54145b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0181.945] wcscmp (_String1="images", _String2=".") returned 1 [0181.945] wcscmp (_String1="images", _String2="..") returned 1 [0181.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3dea6b8 [0181.945] wcscpy (in: _Dest=0x3dea6b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0181.945] wcscat (in: _Dest=0x3dea6b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0181.945] wcscat (in: _Dest=0x3dea6b8, _Source="images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0181.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dea6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0181.946] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f4cb90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe540a970, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0181.946] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0181.946] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0181.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3debf68 [0181.947] wcscpy (in: _Dest=0x3debf68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0181.947] wcscat (in: _Dest=0x3debf68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0181.947] wcscat (in: _Dest=0x3debf68, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" [0181.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3debf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0181.948] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0181.948] wcscmp (_String1="_locales", _String2=".") returned 1 [0181.948] wcscmp (_String1="_locales", _String2="..") returned 1 [0181.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc550 [0181.948] wcscpy (in: _Dest=0x30bc550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0181.948] wcscat (in: _Dest=0x30bc550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0181.948] wcscat (in: _Dest=0x30bc550, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0181.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00 [0181.949] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f56fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f596b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f596b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0181.949] wcscmp (_String1="_metadata", _String2=".") returned 1 [0181.949] wcscmp (_String1="_metadata", _String2="..") returned 1 [0181.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bc658 [0181.949] wcscpy (in: _Dest=0x30bc658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" [0181.949] wcscat (in: _Dest=0x30bc658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0181.949] wcscat (in: _Dest=0x30bc658, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" [0181.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0181.950] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f56fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f596b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f596b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0181.951] FindClose (in: hFindFile=0x3dcf990 | out: hFindFile=0x3dcf990) returned 1 [0181.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0181.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 [0181.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadd20) returned 1 Thread: id = 4711 os_tid = 0x1984 [0175.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x20 [0181.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x20) returned 0 [0181.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.166] GetLastError () returned 0x5 [0181.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x20) returned 0 [0181.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 4712 os_tid = 0x1988 [0175.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x20 [0181.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x20) returned 0 [0181.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.167] GetLastError () returned 0x5 [0181.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x20) returned 0 [0181.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 4713 os_tid = 0x198c [0175.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x20 [0181.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x20) returned 0 [0181.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.168] GetLastError () returned 0x5 [0181.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x20) returned 0 [0181.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 4714 os_tid = 0x1888 [0175.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x20 [0181.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x20) returned 0 [0181.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.149] GetLastError () returned 0x5 [0181.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x20) returned 0 [0181.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 4715 os_tid = 0x1890 [0175.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x20 [0181.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x20) returned 0 [0181.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.191] GetLastError () returned 0x5 [0181.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x20) returned 0 [0181.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 4716 os_tid = 0x1990 [0175.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x20 [0181.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x20) returned 0 [0181.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.190] GetLastError () returned 0x5 [0181.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x20) returned 0 [0181.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 4717 os_tid = 0x1994 [0175.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x20 [0181.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x20) returned 0 [0181.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.129] GetLastError () returned 0x5 [0181.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x20) returned 0 [0181.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c758) returned 1 Thread: id = 4718 os_tid = 0x1998 [0175.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x20 [0181.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x20) returned 0 [0181.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.188] GetLastError () returned 0x5 [0181.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x20) returned 0 [0181.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 4719 os_tid = 0x199c [0175.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x20 [0181.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x20) returned 0 [0181.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.233] GetLastError () returned 0x5 [0181.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x20) returned 0 [0181.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 4720 os_tid = 0x19a0 [0175.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x20 [0181.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x20) returned 0 [0181.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.162] GetLastError () returned 0x5 [0181.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x20) returned 0 [0181.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d638) returned 1 Thread: id = 4721 os_tid = 0x19a4 [0175.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x20 [0181.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x20) returned 0 [0181.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.231] GetLastError () returned 0x5 [0181.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x20) returned 0 [0181.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 4722 os_tid = 0x19ac [0175.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x20 [0181.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x20) returned 0 [0181.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.161] GetLastError () returned 0x5 [0181.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x20) returned 0 [0181.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 4723 os_tid = 0x19b0 [0175.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x20 [0181.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x20) returned 0 [0181.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.159] GetLastError () returned 0x5 [0181.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x20) returned 0 [0181.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 Thread: id = 4724 os_tid = 0x19b4 [0175.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x20 [0181.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x20) returned 0 [0181.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.230] GetLastError () returned 0x5 [0181.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x20) returned 0 [0181.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 4725 os_tid = 0x19b8 [0175.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x20 [0181.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x20) returned 0 [0181.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.165] GetLastError () returned 0x5 [0181.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x20) returned 0 [0181.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 4726 os_tid = 0x19bc [0175.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x20 [0181.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x20) returned 0 [0181.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.158] GetLastError () returned 0x5 [0181.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x20) returned 0 [0181.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 4727 os_tid = 0x19c0 [0175.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x20 [0181.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x20) returned 0 [0181.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.163] GetLastError () returned 0x5 [0181.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x20) returned 0 [0181.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 4728 os_tid = 0x19c4 [0175.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d84e10 [0175.776] wcscpy (in: _Dest=0x3d84e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0175.776] wcscat (in: _Dest=0x3d84e10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" [0175.776] wcscat (in: _Dest=0x3d84e10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*" [0175.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0175.777] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741b0 [0177.335] wcscmp (_String1=".", _String2=".") returned 0 [0177.335] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.335] wcscmp (_String1="..", _String2=".") returned 1 [0177.335] wcscmp (_String1="..", _String2="..") returned 0 [0177.335] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0177.335] wcscmp (_String1="settings.sol", _String2=".") returned 1 [0177.335] wcscmp (_String1="settings.sol", _String2="..") returned 1 [0177.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4618 [0177.335] wcscpy (in: _Dest=0x3dc4618, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0177.336] wcscat (in: _Dest=0x3dc4618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" [0177.336] wcscat (in: _Dest=0x3dc4618, _Source="settings.sol" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" [0178.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0178.212] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b9b23c0, ftCreationTime.dwHighDateTime=0x1d2da26, ftLastAccessTime.dwLowDateTime=0x5b9b23c0, ftLastAccessTime.dwHighDateTime=0x1d2da26, ftLastWriteTime.dwLowDateTime=0x5b9b23c0, ftLastWriteTime.dwHighDateTime=0x1d2da26, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0178.212] FindClose (in: hFindFile=0x3e741b0 | out: hFindFile=0x3e741b0) returned 1 [0178.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0178.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 [0178.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d567b8) returned 1 Thread: id = 4729 os_tid = 0x19c8 [0175.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mazatlan")) returned 0x20 [0178.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan", dwFileAttributes=0x20) returned 0 [0178.848] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mazatlan"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.848] GetLastError () returned 0x5 [0178.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mazatlan", dwFileAttributes=0x20) returned 0 [0178.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23140) returned 1 Thread: id = 4730 os_tid = 0x19cc [0175.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\menominee")) returned 0x20 [0178.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee", dwFileAttributes=0x20) returned 0 [0178.843] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\menominee"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.843] GetLastError () returned 0x5 [0178.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Menominee", dwFileAttributes=0x20) returned 0 [0178.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23df0) returned 1 Thread: id = 4731 os_tid = 0x19d0 [0175.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\merida")) returned 0x20 [0178.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida", dwFileAttributes=0x20) returned 0 [0178.845] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\merida"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.845] GetLastError () returned 0x5 [0178.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Merida", dwFileAttributes=0x20) returned 0 [0178.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a70) returned 1 Thread: id = 4732 os_tid = 0x19d4 [0175.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\metlakatla")) returned 0x20 [0178.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla", dwFileAttributes=0x20) returned 0 [0178.850] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\metlakatla"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.850] GetLastError () returned 0x5 [0178.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Metlakatla", dwFileAttributes=0x20) returned 0 [0178.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 Thread: id = 4733 os_tid = 0x19d8 [0175.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mexico_city")) returned 0x20 [0178.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City", dwFileAttributes=0x20) returned 0 [0178.851] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\mexico_city"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.851] GetLastError () returned 0x5 [0178.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Mexico_City", dwFileAttributes=0x20) returned 0 [0178.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 Thread: id = 4734 os_tid = 0x19e0 [0175.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e238 [0175.780] wcscpy (in: _Dest=0x3f3e238, _Source="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" [0175.781] wcscat (in: _Dest=0x3f3e238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\" [0175.781] wcscat (in: _Dest=0x3f3e238, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*" [0175.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0175.781] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4302a4d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0177.819] wcscmp (_String1=".", _String2=".") returned 0 [0177.819] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4302a4d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4302a4d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.819] wcscmp (_String1="..", _String2=".") returned 1 [0177.819] wcscmp (_String1="..", _String2="..") returned 0 [0177.819] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56499600, ftCreationTime.dwHighDateTime=0x1c30843, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56499600, ftLastWriteTime.dwHighDateTime=0x1c30843, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 1 [0177.819] wcscmp (_String1="SOLVSAMP.XLS", _String2=".") returned 1 [0177.819] wcscmp (_String1="SOLVSAMP.XLS", _String2="..") returned 1 [0177.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x3062a10 [0177.819] wcscpy (in: _Dest=0x3062a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES" [0177.819] wcscat (in: _Dest=0x3062a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\" [0177.820] wcscat (in: _Dest=0x3062a10, _Source="SOLVSAMP.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" [0178.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3062a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0178.209] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56499600, ftCreationTime.dwHighDateTime=0x1c30843, ftLastAccessTime.dwLowDateTime=0x4302a4d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x56499600, ftLastWriteTime.dwHighDateTime=0x1c30843, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 0 [0178.210] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0178.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0178.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0178.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c28) returned 1 Thread: id = 4735 os_tid = 0x19e4 [0175.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf")) returned 0x20 [0177.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf", dwFileAttributes=0x20) returned 0 [0177.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.827] GetLastError () returned 0x5 [0177.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf", dwFileAttributes=0x20) returned 0 [0177.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47898) returned 1 Thread: id = 4736 os_tid = 0x19ec [0175.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml")) returned 0x20 [0177.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", dwFileAttributes=0x20) returned 0 [0177.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.834] GetLastError () returned 0x5 [0177.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", dwFileAttributes=0x20) returned 0 [0177.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 4737 os_tid = 0x19f0 [0175.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml")) returned 0x20 [0177.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML", dwFileAttributes=0x20) returned 0 [0177.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.821] GetLastError () returned 0x5 [0177.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML", dwFileAttributes=0x20) returned 0 [0177.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 Thread: id = 4738 os_tid = 0x19f4 [0175.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng")) returned 0x20 [0177.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG", dwFileAttributes=0x20) returned 0 [0177.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.344] GetLastError () returned 0x5 [0177.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG", dwFileAttributes=0x20) returned 0 [0177.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 Thread: id = 4739 os_tid = 0x1a40 [0175.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp")) returned 0x20 [0177.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", dwFileAttributes=0x20) returned 0 [0177.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.830] GetLastError () returned 0x5 [0177.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", dwFileAttributes=0x20) returned 0 [0177.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c18) returned 1 Thread: id = 4740 os_tid = 0x1a50 [0175.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e940 [0175.783] wcscpy (in: _Dest=0x3f3e940, _Source="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP" [0175.783] wcscat (in: _Dest=0x3f3e940, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\" [0175.783] wcscat (in: _Dest=0x3f3e940, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*" [0175.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0175.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0177.832] wcscmp (_String1=".", _String2=".") returned 0 [0177.832] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.832] wcscmp (_String1="..", _String2=".") returned 1 [0177.832] wcscmp (_String1="..", _String2="..") returned 0 [0177.832] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76320990, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x76320990, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x76320990, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0177.832] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0177.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0177.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0177.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23c30) returned 1 Thread: id = 4741 os_tid = 0x1a6c [0175.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg")) returned 0x20 [0175.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg", dwFileAttributes=0x20) returned 0 [0175.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.784] GetLastError () returned 0x5 [0175.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg", dwFileAttributes=0x20) returned 0 [0175.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68570) returned 1 Thread: id = 4742 os_tid = 0x1a74 [0175.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp")) returned 0x20 [0177.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp", dwFileAttributes=0x20) returned 0 [0177.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.347] GetLastError () returned 0x5 [0177.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp", dwFileAttributes=0x20) returned 0 [0177.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 4743 os_tid = 0x1a78 [0175.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg")) returned 0x20 [0177.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg", dwFileAttributes=0x20) returned 0 [0177.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.422] GetLastError () returned 0x5 [0177.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg", dwFileAttributes=0x20) returned 0 [0177.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8f08) returned 1 Thread: id = 4744 os_tid = 0x1a7c [0175.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp")) returned 0x20 [0177.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp", dwFileAttributes=0x20) returned 0 [0177.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.376] GetLastError () returned 0x5 [0177.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp", dwFileAttributes=0x20) returned 0 [0177.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc48d0) returned 1 Thread: id = 4745 os_tid = 0x1a80 [0175.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg")) returned 0x20 [0177.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg", dwFileAttributes=0x20) returned 0 [0177.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.390] GetLastError () returned 0x5 [0177.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg", dwFileAttributes=0x20) returned 0 [0177.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8fe8) returned 1 Thread: id = 4746 os_tid = 0x1a84 [0175.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp")) returned 0x20 [0177.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp", dwFileAttributes=0x20) returned 0 [0177.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.389] GetLastError () returned 0x5 [0177.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp", dwFileAttributes=0x20) returned 0 [0177.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 Thread: id = 4747 os_tid = 0x192c [0175.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg")) returned 0x20 [0177.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg", dwFileAttributes=0x20) returned 0 [0177.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.125] GetLastError () returned 0x5 [0177.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg", dwFileAttributes=0x20) returned 0 [0177.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c90c8) returned 1 Thread: id = 4748 os_tid = 0x1a88 [0175.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp")) returned 0x20 [0177.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp", dwFileAttributes=0x20) returned 0 [0177.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.411] GetLastError () returned 0x5 [0177.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp", dwFileAttributes=0x20) returned 0 [0177.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 4749 os_tid = 0x1a8c [0175.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg")) returned 0x20 [0177.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg", dwFileAttributes=0x20) returned 0 [0177.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.410] GetLastError () returned 0x5 [0177.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg", dwFileAttributes=0x20) returned 0 [0177.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 Thread: id = 4750 os_tid = 0x1a90 [0175.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp")) returned 0x20 [0177.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp", dwFileAttributes=0x20) returned 0 [0177.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.409] GetLastError () returned 0x5 [0177.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp", dwFileAttributes=0x20) returned 0 [0177.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c91a8) returned 1 Thread: id = 4751 os_tid = 0x1a94 [0175.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg")) returned 0x20 [0177.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg", dwFileAttributes=0x20) returned 0 [0177.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.407] GetLastError () returned 0x5 [0177.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg", dwFileAttributes=0x20) returned 0 [0177.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 4752 os_tid = 0x1a98 [0175.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp")) returned 0x20 [0177.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp", dwFileAttributes=0x20) returned 0 [0177.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.406] GetLastError () returned 0x5 [0177.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp", dwFileAttributes=0x20) returned 0 [0177.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9288) returned 1 Thread: id = 4753 os_tid = 0x1a9c [0175.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg")) returned 0x20 [0177.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg", dwFileAttributes=0x20) returned 0 [0177.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.405] GetLastError () returned 0x5 [0177.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg", dwFileAttributes=0x20) returned 0 [0177.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687f8) returned 1 Thread: id = 4754 os_tid = 0x1aa0 [0175.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp")) returned 0x20 [0177.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp", dwFileAttributes=0x20) returned 0 [0177.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.387] GetLastError () returned 0x5 [0177.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp", dwFileAttributes=0x20) returned 0 [0177.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9368) returned 1 Thread: id = 4755 os_tid = 0x1950 [0175.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg")) returned 0x20 [0177.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg", dwFileAttributes=0x20) returned 0 [0177.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.403] GetLastError () returned 0x5 [0177.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg", dwFileAttributes=0x20) returned 0 [0177.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 Thread: id = 4756 os_tid = 0x1aa8 [0175.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp")) returned 0x20 [0177.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp", dwFileAttributes=0x20) returned 0 [0177.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.386] GetLastError () returned 0x5 [0177.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp", dwFileAttributes=0x20) returned 0 [0177.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68c30) returned 1 Thread: id = 4757 os_tid = 0x1aac [0175.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg")) returned 0x20 [0177.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg", dwFileAttributes=0x20) returned 0 [0177.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.385] GetLastError () returned 0x5 [0177.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg", dwFileAttributes=0x20) returned 0 [0177.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68de0) returned 1 Thread: id = 4758 os_tid = 0x1ab0 [0175.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp")) returned 0x20 [0177.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0177.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.383] GetLastError () returned 0x5 [0177.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0177.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 4759 os_tid = 0x1ab4 [0175.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp")) returned 0x20 [0177.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0177.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.402] GetLastError () returned 0x5 [0177.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0177.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafcb8) returned 1 Thread: id = 4760 os_tid = 0x1ab8 [0175.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg")) returned 0x20 [0177.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0177.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.401] GetLastError () returned 0x5 [0177.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0177.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 Thread: id = 4761 os_tid = 0x1abc [0175.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg")) returned 0x20 [0177.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg", dwFileAttributes=0x20) returned 0 [0177.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.399] GetLastError () returned 0x5 [0177.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg", dwFileAttributes=0x20) returned 0 [0177.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b58) returned 1 Thread: id = 4762 os_tid = 0x1ac0 [0175.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp")) returned 0x20 [0177.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0177.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.398] GetLastError () returned 0x5 [0177.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp", dwFileAttributes=0x20) returned 0 [0177.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 4763 os_tid = 0x1ac4 [0175.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp")) returned 0x20 [0177.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0177.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.397] GetLastError () returned 0x5 [0177.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp", dwFileAttributes=0x20) returned 0 [0177.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0528) returned 1 Thread: id = 4764 os_tid = 0x1ac8 [0175.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg")) returned 0x20 [0177.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0177.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.395] GetLastError () returned 0x5 [0177.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg", dwFileAttributes=0x20) returned 0 [0177.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 4765 os_tid = 0x1acc [0175.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg")) returned 0x20 [0177.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg", dwFileAttributes=0x20) returned 0 [0177.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.382] GetLastError () returned 0x5 [0177.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg", dwFileAttributes=0x20) returned 0 [0177.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 Thread: id = 4766 os_tid = 0x1ad0 [0175.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp")) returned 0x20 [0177.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0177.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.380] GetLastError () returned 0x5 [0177.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0177.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4c70) returned 1 Thread: id = 4767 os_tid = 0x1ad4 [0175.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg")) returned 0x20 [0177.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg", dwFileAttributes=0x20) returned 0 [0177.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.378] GetLastError () returned 0x5 [0177.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg", dwFileAttributes=0x20) returned 0 [0177.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57820) returned 1 Thread: id = 4768 os_tid = 0x1adc [0175.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg")) returned 0x20 [0177.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg", dwFileAttributes=0x20) returned 0 [0177.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.393] GetLastError () returned 0x5 [0177.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg", dwFileAttributes=0x20) returned 0 [0177.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a80) returned 1 Thread: id = 4769 os_tid = 0x1ae0 [0175.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp")) returned 0x20 [0177.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0177.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.392] GetLastError () returned 0x5 [0177.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0177.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 Thread: id = 4770 os_tid = 0x1ae8 [0175.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3dafda8 [0175.925] wcscpy (in: _Dest=0x3dafda8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0175.925] wcscat (in: _Dest=0x3dafda8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0175.925] wcscat (in: _Dest=0x3dafda8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*" [0175.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54240 [0175.925] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0180.893] wcscmp (_String1=".", _String2=".") returned 0 [0180.893] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.893] wcscmp (_String1="..", _String2=".") returned 1 [0180.893] wcscmp (_String1="..", _String2="..") returned 0 [0180.893] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fca670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0180.893] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0180.893] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0180.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bb5d8 [0180.894] wcscpy (in: _Dest=0x30bb5d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0180.894] wcscat (in: _Dest=0x30bb5d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0180.894] wcscat (in: _Dest=0x30bb5d8, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" [0181.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0181.370] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fcf490, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61648f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61648f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0181.371] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0181.371] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0181.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bb7e8 [0181.371] wcscpy (in: _Dest=0x30bb7e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0181.371] wcscat (in: _Dest=0x30bb7e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0181.371] wcscat (in: _Dest=0x30bb7e8, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" [0181.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb7e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0181.372] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fd42b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fd90d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0181.372] wcscmp (_String1="main.html", _String2=".") returned 1 [0181.372] wcscmp (_String1="main.html", _String2="..") returned 1 [0181.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de93b8 [0181.372] wcscpy (in: _Dest=0x3de93b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0181.373] wcscat (in: _Dest=0x3de93b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0181.373] wcscat (in: _Dest=0x3de93b8, _Source="main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" [0181.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de93b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0181.374] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fdb7e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fddef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0181.374] wcscmp (_String1="main.js", _String2=".") returned 1 [0181.374] wcscmp (_String1="main.js", _String2="..") returned 1 [0181.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3de94b8 [0181.374] wcscpy (in: _Dest=0x3de94b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0181.374] wcscat (in: _Dest=0x3de94b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0181.374] wcscat (in: _Dest=0x3de94b8, _Source="main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" [0181.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de94b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0181.376] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e12f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fe2d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe615d3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0181.376] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0181.376] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0181.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bb8f0 [0181.376] wcscpy (in: _Dest=0x30bb8f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0181.376] wcscat (in: _Dest=0x30bb8f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0181.376] wcscat (in: _Dest=0x30bb8f0, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" [0181.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0181.377] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e1cb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc3140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc3140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0181.377] wcscmp (_String1="_locales", _String2=".") returned 1 [0181.377] wcscmp (_String1="_locales", _String2="..") returned 1 [0181.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3de95b8 [0181.377] wcscpy (in: _Dest=0x3de95b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0181.377] wcscat (in: _Dest=0x3de95b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0181.377] wcscat (in: _Dest=0x3de95b8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0181.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de95b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0181.379] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0181.379] wcscmp (_String1="_metadata", _String2=".") returned 1 [0181.379] wcscmp (_String1="_metadata", _String2="..") returned 1 [0181.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de96b8 [0181.379] wcscpy (in: _Dest=0x3de96b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" [0181.379] wcscat (in: _Dest=0x3de96b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0181.379] wcscat (in: _Dest=0x3de96b8, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0181.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de96b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0181.380] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0181.380] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0181.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54240) returned 1 [0181.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafda8) returned 1 [0181.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff88) returned 1 Thread: id = 4771 os_tid = 0x1aec [0175.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db0438 [0175.926] wcscpy (in: _Dest=0x3db0438, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0175.926] wcscat (in: _Dest=0x3db0438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0175.926] wcscat (in: _Dest=0x3db0438, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*" [0175.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a550b0 [0175.926] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf5d0 [0181.307] wcscmp (_String1=".", _String2=".") returned 0 [0181.307] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.307] wcscmp (_String1="..", _String2=".") returned 1 [0181.307] wcscmp (_String1="..", _String2="..") returned 0 [0181.307] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe561c600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5c6f070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0181.307] wcscmp (_String1="128.png", _String2=".") returned 1 [0181.307] wcscmp (_String1="128.png", _String2="..") returned 1 [0181.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3de92b8 [0181.308] wcscpy (in: _Dest=0x3de92b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0181.308] wcscat (in: _Dest=0x3de92b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0181.308] wcscat (in: _Dest=0x3de92b8, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" [0182.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de92b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0182.599] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5935d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5935d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="contentscript_bin_prod.js", cAlternateFileName="CONTEN~1.JS")) returned 1 [0182.599] wcscmp (_String1="contentscript_bin_prod.js", _String2=".") returned 1 [0182.599] wcscmp (_String1="contentscript_bin_prod.js", _String2="..") returned 1 [0182.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55278 [0182.599] wcscpy (in: _Dest=0x3d55278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0182.599] wcscat (in: _Dest=0x3d55278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0182.599] wcscat (in: _Dest=0x3d55278, _Source="contentscript_bin_prod.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" [0182.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c [0182.601] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe593d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe593d280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="dasherSettingSchema.json", cAlternateFileName="DASHER~1.JSO")) returned 1 [0182.601] wcscmp (_String1="dasherSettingSchema.json", _String2=".") returned 1 [0182.601] wcscmp (_String1="dasherSettingSchema.json", _String2="..") returned 1 [0182.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d54498 [0182.601] wcscpy (in: _Dest=0x3d54498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0182.601] wcscat (in: _Dest=0x3d54498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0182.601] wcscat (in: _Dest=0x3d54498, _Source="dasherSettingSchema.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" [0182.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d54498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134 [0182.603] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe59420a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe59420a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventpage_bin_prod.js", cAlternateFileName="EVENTP~1.JS")) returned 1 [0182.603] wcscmp (_String1="eventpage_bin_prod.js", _String2=".") returned 1 [0182.603] wcscmp (_String1="eventpage_bin_prod.js", _String2="..") returned 1 [0182.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x3deca58 [0182.603] wcscpy (in: _Dest=0x3deca58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0182.603] wcscat (in: _Dest=0x3deca58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0182.603] wcscat (in: _Dest=0x3deca58, _Source="eventpage_bin_prod.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" [0182.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3deca58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0182.604] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56129c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe59495d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c67b40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0182.604] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0182.604] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0182.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bc970 [0182.604] wcscpy (in: _Dest=0x30bc970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0182.604] wcscat (in: _Dest=0x30bc970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0182.604] wcscat (in: _Dest=0x30bc970, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" [0182.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0182.606] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe594e3f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe594e3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="page_embed_script.js", cAlternateFileName="PAGE_E~1.JS")) returned 1 [0182.606] wcscmp (_String1="page_embed_script.js", _String2=".") returned 1 [0182.606] wcscmp (_String1="page_embed_script.js", _String2="..") returned 1 [0182.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7a384d0 [0182.606] wcscpy (in: _Dest=0x7a384d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0182.607] wcscat (in: _Dest=0x7a384d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0182.607] wcscat (in: _Dest=0x7a384d0, _Source="page_embed_script.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" [0182.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a384d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc [0182.608] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5623b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592c110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592c110, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0182.608] wcscmp (_String1="_locales", _String2=".") returned 1 [0182.608] wcscmp (_String1="_locales", _String2="..") returned 1 [0182.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3d99300 [0182.608] wcscpy (in: _Dest=0x3d99300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0182.608] wcscat (in: _Dest=0x3d99300, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0182.608] wcscat (in: _Dest=0x3d99300, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0182.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d99300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0182.610] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0182.610] wcscmp (_String1="_metadata", _String2=".") returned 1 [0182.610] wcscmp (_String1="_metadata", _String2="..") returned 1 [0182.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x2f7ac8 [0182.610] wcscpy (in: _Dest=0x2f7ac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" [0182.610] wcscat (in: _Dest=0x2f7ac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0182.610] wcscat (in: _Dest=0x2f7ac8, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0182.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2f7ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c [0182.611] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0182.611] FindClose (in: hFindFile=0x3dcf5d0 | out: hFindFile=0x3dcf5d0) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a550b0) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0438) returned 1 [0182.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0078) returned 1 Thread: id = 4772 os_tid = 0x1af0 [0175.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadc28 [0175.926] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0175.926] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0175.926] wcscat (in: _Dest=0x3dadc28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*" [0175.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a557e8 [0175.927] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\*", lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe508f7a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0180.900] wcscmp (_String1=".", _String2=".") returned 0 [0180.900] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe508f7a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.900] wcscmp (_String1="..", _String2=".") returned 1 [0180.900] wcscmp (_String1="..", _String2="..") returned 0 [0180.900] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe508f7a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5091eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0180.900] wcscmp (_String1="128.png", _String2=".") returned 1 [0180.900] wcscmp (_String1="128.png", _String2="..") returned 1 [0180.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de72b8 [0180.900] wcscpy (in: _Dest=0x3de72b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0180.900] wcscat (in: _Dest=0x3de72b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0180.900] wcscat (in: _Dest=0x3de72b8, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" [0188.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de72b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0188.296] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a7b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5088270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0188.296] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0188.296] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0188.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38d90 [0188.297] wcscpy (in: _Dest=0x7a38d90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0188.297] wcscat (in: _Dest=0x7a38d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0188.297] wcscat (in: _Dest=0x7a38d90, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" [0188.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a38d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0188.298] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0188.298] wcscmp (_String1="_locales", _String2=".") returned 1 [0188.298] wcscmp (_String1="_locales", _String2="..") returned 1 [0188.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3dea7b8 [0188.298] wcscpy (in: _Dest=0x3dea7b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0188.298] wcscat (in: _Dest=0x3dea7b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0188.298] wcscat (in: _Dest=0x3dea7b8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0188.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dea7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554 [0188.300] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 1 [0188.300] wcscmp (_String1="__MACOSX", _String2=".") returned 1 [0188.300] wcscmp (_String1="__MACOSX", _String2="..") returned 1 [0188.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3de70b8 [0188.300] wcscpy (in: _Dest=0x3de70b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0" [0188.300] wcscat (in: _Dest=0x3de70b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0188.300] wcscat (in: _Dest=0x3de70b8, _Source="__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0188.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de70b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f8 [0188.302] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 0 [0188.302] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0188.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a557e8) returned 1 [0188.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 [0188.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0258) returned 1 Thread: id = 4773 os_tid = 0x1af4 [0175.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae100 [0175.927] wcscpy (in: _Dest=0x3dae100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0175.927] wcscat (in: _Dest=0x3dae100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0175.927] wcscat (in: _Dest=0x3dae100, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*" [0175.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55318 [0175.927] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0180.937] wcscmp (_String1=".", _String2=".") returned 0 [0180.937] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7b7eb00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.937] wcscmp (_String1="..", _String2=".") returned 1 [0180.937] wcscmp (_String1="..", _String2="..") returned 0 [0180.937] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b998b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8527d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0180.937] wcscmp (_String1="128.png", _String2=".") returned 1 [0180.937] wcscmp (_String1="128.png", _String2="..") returned 1 [0180.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de82b8 [0180.937] wcscpy (in: _Dest=0x3de82b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0180.937] wcscat (in: _Dest=0x3de82b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0180.937] wcscat (in: _Dest=0x3de82b8, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" [0189.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de82b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34 [0189.611] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b83920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe833f8d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8520820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0189.611] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0189.611] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0189.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c780 [0189.611] wcscpy (in: _Dest=0x7b7c780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0189.611] wcscat (in: _Dest=0x7b7c780, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0189.611] wcscat (in: _Dest=0x7b7c780, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" [0189.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7c780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58 [0189.612] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ba34f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8335c90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8335c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0189.612] wcscmp (_String1="_locales", _String2=".") returned 1 [0189.612] wcscmp (_String1="_locales", _String2="..") returned 1 [0189.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3de8eb8 [0189.613] wcscpy (in: _Dest=0x3de8eb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0189.613] wcscat (in: _Dest=0x3de8eb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0189.613] wcscat (in: _Dest=0x3de8eb8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0189.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de8eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0189.614] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0189.614] wcscmp (_String1="_metadata", _String2=".") returned 1 [0189.614] wcscmp (_String1="_metadata", _String2="..") returned 1 [0189.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6a198 [0189.614] wcscpy (in: _Dest=0x7a6a198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" [0189.614] wcscat (in: _Dest=0x7a6a198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0189.614] wcscat (in: _Dest=0x7a6a198, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0189.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0189.616] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0189.616] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0189.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55318) returned 1 [0189.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae100) returned 1 [0189.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0618) returned 1 Thread: id = 4774 os_tid = 0x1af8 [0175.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db07f8 [0175.933] wcscpy (in: _Dest=0x3db07f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0175.933] wcscat (in: _Dest=0x3db07f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0175.933] wcscat (in: _Dest=0x3db07f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\*" [0175.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0175.933] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0180.903] wcscmp (_String1=".", _String2=".") returned 0 [0180.903] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.903] wcscmp (_String1="..", _String2=".") returned 1 [0180.904] wcscmp (_String1="..", _String2="..") returned 0 [0180.904] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c1f3f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x170c, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0180.904] wcscmp (_String1="128.png", _String2=".") returned 1 [0180.904] wcscmp (_String1="128.png", _String2="..") returned 1 [0180.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae1f8 [0180.904] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0180.904] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0180.904] wcscat (in: _Dest=0x3dae1f8, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" [0181.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0181.664] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44624a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4bf9290, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0181.664] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0181.664] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0181.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc130 [0181.664] wcscpy (in: _Dest=0x30bc130, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0181.664] wcscat (in: _Dest=0x30bc130, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0181.664] wcscat (in: _Dest=0x30bc130, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" [0181.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0181.665] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0181.665] wcscmp (_String1="_locales", _String2=".") returned 1 [0181.665] wcscmp (_String1="_locales", _String2="..") returned 1 [0181.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dad468 [0181.666] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0181.666] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0181.666] wcscat (in: _Dest=0x3dad468, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0181.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dad468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0181.667] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 1 [0181.667] wcscmp (_String1="__MACOSX", _String2=".") returned 1 [0181.667] wcscmp (_String1="__MACOSX", _String2="..") returned 1 [0181.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dadf10 [0181.667] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0" [0181.667] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0181.667] wcscat (in: _Dest=0x3dadf10, _Source="__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" [0181.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0181.669] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 0 [0181.669] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0181.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0181.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db07f8) returned 1 [0181.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4448) returned 1 Thread: id = 4775 os_tid = 0x1afc [0175.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db08e8 [0175.934] wcscpy (in: _Dest=0x3db08e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0175.934] wcscat (in: _Dest=0x3db08e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0175.934] wcscat (in: _Dest=0x3db08e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*" [0175.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a538a0 [0175.934] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0180.969] wcscmp (_String1=".", _String2=".") returned 0 [0180.969] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.970] wcscmp (_String1="..", _String2=".") returned 1 [0180.970] wcscmp (_String1="..", _String2="..") returned 0 [0180.970] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6870c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6b4f9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x180f, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0180.970] wcscmp (_String1="128.png", _String2=".") returned 1 [0180.970] wcscmp (_String1="128.png", _String2="..") returned 1 [0180.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3de90b8 [0180.970] wcscpy (in: _Dest=0x3de90b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0180.970] wcscat (in: _Dest=0x3de90b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0180.970] wcscat (in: _Dest=0x3de90b8, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" [0181.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de90b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0181.643] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe684c230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe686be00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b484c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0181.643] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0181.644] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0181.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bc028 [0181.644] wcscpy (in: _Dest=0x30bc028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0181.644] wcscat (in: _Dest=0x30bc028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0181.644] wcscat (in: _Dest=0x30bc028, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" [0181.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bc028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0181.645] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6878150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6911e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6911e40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0181.645] wcscmp (_String1="_locales", _String2=".") returned 1 [0181.645] wcscmp (_String1="_locales", _String2="..") returned 1 [0181.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3de9db8 [0181.645] wcscpy (in: _Dest=0x3de9db8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0181.645] wcscat (in: _Dest=0x3de9db8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0181.645] wcscat (in: _Dest=0x3de9db8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0181.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de9db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0181.646] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0181.646] wcscmp (_String1="_metadata", _String2=".") returned 1 [0181.646] wcscmp (_String1="_metadata", _String2="..") returned 1 [0181.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de9eb8 [0181.646] wcscpy (in: _Dest=0x3de9eb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" [0181.646] wcscat (in: _Dest=0x3de9eb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0181.647] wcscat (in: _Dest=0x3de9eb8, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0181.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de9eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040 [0181.648] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0181.648] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0181.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a538a0) returned 1 [0181.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db08e8) returned 1 [0181.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0708) returned 1 Thread: id = 4776 os_tid = 0x1b00 [0175.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx")) returned 0x20 [0175.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0175.935] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.935] GetLastError () returned 0x5 [0175.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx", dwFileAttributes=0x20) returned 0 [0175.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3052df0) returned 1 Thread: id = 4777 os_tid = 0x1b04 [0175.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx")) returned 0x20 [0175.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0175.937] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" (normalized: "c:\\program files\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0175.937] GetLastError () returned 0x5 [0175.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx", dwFileAttributes=0x20) returned 0 [0175.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f440) returned 1 Thread: id = 4778 os_tid = 0x1b08 [0175.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif")) returned 0x20 [0180.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF", dwFileAttributes=0x20) returned 0 [0180.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.025] GetLastError () returned 0x5 [0180.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF", dwFileAttributes=0x20) returned 0 [0180.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6908) returned 1 Thread: id = 4779 os_tid = 0x1b0c [0175.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif")) returned 0x20 [0180.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF", dwFileAttributes=0x20) returned 0 [0180.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.060] GetLastError () returned 0x5 [0180.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF", dwFileAttributes=0x20) returned 0 [0180.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb67d0) returned 1 Thread: id = 4780 os_tid = 0x1b10 [0175.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif")) returned 0x20 [0180.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF", dwFileAttributes=0x20) returned 0 [0180.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.062] GetLastError () returned 0x5 [0180.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF", dwFileAttributes=0x20) returned 0 [0180.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6ef0) returned 1 Thread: id = 4781 os_tid = 0x1b14 [0175.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif")) returned 0x20 [0180.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF", dwFileAttributes=0x20) returned 0 [0180.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.183] GetLastError () returned 0x5 [0180.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF", dwFileAttributes=0x20) returned 0 [0180.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7280) returned 1 Thread: id = 4782 os_tid = 0x1b18 [0175.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif")) returned 0x20 [0180.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF", dwFileAttributes=0x20) returned 0 [0180.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.267] GetLastError () returned 0x5 [0180.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF", dwFileAttributes=0x20) returned 0 [0180.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5860) returned 1 Thread: id = 4783 os_tid = 0x1b1c [0175.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif")) returned 0x20 [0180.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF", dwFileAttributes=0x20) returned 0 [0180.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.111] GetLastError () returned 0x5 [0180.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF", dwFileAttributes=0x20) returned 0 [0180.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb61e0) returned 1 Thread: id = 4784 os_tid = 0x1b20 [0175.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif")) returned 0x20 [0180.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF", dwFileAttributes=0x20) returned 0 [0180.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.109] GetLastError () returned 0x5 [0180.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF", dwFileAttributes=0x20) returned 0 [0180.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5990) returned 1 Thread: id = 4785 os_tid = 0x1b24 [0175.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif")) returned 0x20 [0180.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF", dwFileAttributes=0x20) returned 0 [0180.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.106] GetLastError () returned 0x5 [0180.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF", dwFileAttributes=0x20) returned 0 [0180.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7448) returned 1 Thread: id = 4786 os_tid = 0x1b28 [0175.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif")) returned 0x20 [0180.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF", dwFileAttributes=0x20) returned 0 [0180.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.103] GetLastError () returned 0x5 [0180.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF", dwFileAttributes=0x20) returned 0 [0180.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7578) returned 1 Thread: id = 4787 os_tid = 0x1b2c [0175.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif")) returned 0x20 [0180.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF", dwFileAttributes=0x20) returned 0 [0180.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.115] GetLastError () returned 0x5 [0180.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF", dwFileAttributes=0x20) returned 0 [0180.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 Thread: id = 4788 os_tid = 0x1b30 [0175.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif")) returned 0x20 [0180.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF", dwFileAttributes=0x20) returned 0 [0180.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.100] GetLastError () returned 0x5 [0180.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF", dwFileAttributes=0x20) returned 0 [0180.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7020) returned 1 Thread: id = 4789 os_tid = 0x1b34 [0175.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif")) returned 0x20 [0180.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF", dwFileAttributes=0x20) returned 0 [0180.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.098] GetLastError () returned 0x5 [0180.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF", dwFileAttributes=0x20) returned 0 [0180.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6bf8) returned 1 Thread: id = 4790 os_tid = 0x19dc [0175.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif")) returned 0x20 [0180.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF", dwFileAttributes=0x20) returned 0 [0180.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.120] GetLastError () returned 0x5 [0180.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF", dwFileAttributes=0x20) returned 0 [0180.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 4791 os_tid = 0x1b38 [0175.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif")) returned 0x20 [0180.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF", dwFileAttributes=0x20) returned 0 [0180.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.123] GetLastError () returned 0x5 [0180.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF", dwFileAttributes=0x20) returned 0 [0180.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb57c8) returned 1 Thread: id = 4792 os_tid = 0x1b3c [0175.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif")) returned 0x20 [0180.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF", dwFileAttributes=0x20) returned 0 [0180.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.095] GetLastError () returned 0x5 [0180.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF", dwFileAttributes=0x20) returned 0 [0180.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb74e0) returned 1 Thread: id = 4793 os_tid = 0x1b40 [0175.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif")) returned 0x20 [0180.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF", dwFileAttributes=0x20) returned 0 [0180.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.078] GetLastError () returned 0x5 [0180.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF", dwFileAttributes=0x20) returned 0 [0180.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7318) returned 1 Thread: id = 4794 os_tid = 0x1b44 [0175.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif")) returned 0x20 [0180.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF", dwFileAttributes=0x20) returned 0 [0180.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.075] GetLastError () returned 0x5 [0180.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF", dwFileAttributes=0x20) returned 0 [0180.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5a28) returned 1 Thread: id = 4795 os_tid = 0x1b4c [0175.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif")) returned 0x20 [0180.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF", dwFileAttributes=0x20) returned 0 [0180.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.073] GetLastError () returned 0x5 [0180.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF", dwFileAttributes=0x20) returned 0 [0180.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6310) returned 1 Thread: id = 4796 os_tid = 0x1b58 [0175.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif")) returned 0x20 [0180.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF", dwFileAttributes=0x20) returned 0 [0180.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.125] GetLastError () returned 0x5 [0180.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF", dwFileAttributes=0x20) returned 0 [0180.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5e50) returned 1 Thread: id = 4797 os_tid = 0x1b5c [0175.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif")) returned 0x20 [0180.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF", dwFileAttributes=0x20) returned 0 [0180.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.133] GetLastError () returned 0x5 [0180.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF", dwFileAttributes=0x20) returned 0 [0180.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb70b8) returned 1 Thread: id = 4798 os_tid = 0x1b64 [0175.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif")) returned 0x20 [0180.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF", dwFileAttributes=0x20) returned 0 [0180.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.070] GetLastError () returned 0x5 [0180.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF", dwFileAttributes=0x20) returned 0 [0180.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 Thread: id = 4799 os_tid = 0x1b68 [0175.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif")) returned 0x20 [0180.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF", dwFileAttributes=0x20) returned 0 [0180.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.117] GetLastError () returned 0x5 [0180.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF", dwFileAttributes=0x20) returned 0 [0180.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5f80) returned 1 Thread: id = 4800 os_tid = 0x1b6c [0175.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif")) returned 0x20 [0180.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF", dwFileAttributes=0x20) returned 0 [0180.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.136] GetLastError () returned 0x5 [0180.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF", dwFileAttributes=0x20) returned 0 [0180.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 Thread: id = 4801 os_tid = 0x1b74 [0175.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif")) returned 0x20 [0180.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF", dwFileAttributes=0x20) returned 0 [0180.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.131] GetLastError () returned 0x5 [0180.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF", dwFileAttributes=0x20) returned 0 [0180.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 Thread: id = 4802 os_tid = 0x1b78 [0175.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif")) returned 0x20 [0180.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF", dwFileAttributes=0x20) returned 0 [0180.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.128] GetLastError () returned 0x5 [0180.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF", dwFileAttributes=0x20) returned 0 [0180.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5bf0) returned 1 Thread: id = 4803 os_tid = 0x1b7c [0175.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif")) returned 0x20 [0180.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF", dwFileAttributes=0x20) returned 0 [0180.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.192] GetLastError () returned 0x5 [0180.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF", dwFileAttributes=0x20) returned 0 [0180.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb71e8) returned 1 Thread: id = 4804 os_tid = 0x1b80 [0175.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif")) returned 0x20 [0180.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF", dwFileAttributes=0x20) returned 0 [0180.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.068] GetLastError () returned 0x5 [0180.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF", dwFileAttributes=0x20) returned 0 [0180.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5ee8) returned 1 Thread: id = 4805 os_tid = 0x1b84 [0176.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif")) returned 0x20 [0180.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF", dwFileAttributes=0x20) returned 0 [0180.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.065] GetLastError () returned 0x5 [0180.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF", dwFileAttributes=0x20) returned 0 [0180.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 Thread: id = 4806 os_tid = 0x1b88 [0176.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x20 [0181.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x20) returned 0 [0181.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.153] GetLastError () returned 0x5 [0181.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x20) returned 0 [0181.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 4807 os_tid = 0x1b8c [0176.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x20 [0181.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x20) returned 0 [0181.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.152] GetLastError () returned 0x5 [0181.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x20) returned 0 [0181.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9de0) returned 1 Thread: id = 4808 os_tid = 0x1b90 [0176.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x20 [0181.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x20) returned 0 [0181.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.187] GetLastError () returned 0x5 [0181.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x20) returned 0 [0181.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9c48) returned 1 Thread: id = 4809 os_tid = 0x1b94 [0176.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x20 [0181.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x20) returned 0 [0181.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.150] GetLastError () returned 0x5 [0181.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x20) returned 0 [0181.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 4810 os_tid = 0x1b98 [0176.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x20 [0181.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x20) returned 0 [0181.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.185] GetLastError () returned 0x5 [0181.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x20) returned 0 [0181.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 4811 os_tid = 0x1b9c [0176.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x20 [0181.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x20) returned 0 [0181.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.156] GetLastError () returned 0x5 [0181.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x20) returned 0 [0181.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 4812 os_tid = 0x1ba0 [0176.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x20 [0181.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x20) returned 0 [0181.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.155] GetLastError () returned 0x5 [0181.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x20) returned 0 [0181.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 4813 os_tid = 0x1ba4 [0176.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v")) returned 0x20 [0177.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V", dwFileAttributes=0x20) returned 0 [0177.502] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.502] GetLastError () returned 0x5 [0177.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V", dwFileAttributes=0x20) returned 0 [0177.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47b18) returned 1 Thread: id = 4814 os_tid = 0x1ba8 [0176.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h")) returned 0x20 [0177.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H", dwFileAttributes=0x20) returned 0 [0177.504] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.504] GetLastError () returned 0x5 [0177.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H", dwFileAttributes=0x20) returned 0 [0177.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 4815 os_tid = 0x1bac [0176.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v")) returned 0x20 [0177.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V", dwFileAttributes=0x20) returned 0 [0177.507] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.507] GetLastError () returned 0x5 [0177.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V", dwFileAttributes=0x20) returned 0 [0177.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 4816 os_tid = 0x1bb0 [0176.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h")) returned 0x20 [0177.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H", dwFileAttributes=0x20) returned 0 [0177.509] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.509] GetLastError () returned 0x5 [0177.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H", dwFileAttributes=0x20) returned 0 [0177.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46198) returned 1 Thread: id = 4817 os_tid = 0x1bb4 [0176.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v")) returned 0x20 [0177.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V", dwFileAttributes=0x20) returned 0 [0177.351] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.351] GetLastError () returned 0x5 [0177.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V", dwFileAttributes=0x20) returned 0 [0177.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46d98) returned 1 Thread: id = 4818 os_tid = 0x1bb8 [0176.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-h")) returned 0x20 [0177.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H", dwFileAttributes=0x20) returned 0 [0177.486] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.486] GetLastError () returned 0x5 [0177.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H", dwFileAttributes=0x20) returned 0 [0177.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 Thread: id = 4819 os_tid = 0x1bbc [0176.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-v")) returned 0x20 [0177.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V", dwFileAttributes=0x20) returned 0 [0177.521] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.521] GetLastError () returned 0x5 [0177.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V", dwFileAttributes=0x20) returned 0 [0177.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 Thread: id = 4820 os_tid = 0x1bc0 [0176.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h")) returned 0x20 [0177.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H", dwFileAttributes=0x20) returned 0 [0177.537] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.537] GetLastError () returned 0x5 [0177.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H", dwFileAttributes=0x20) returned 0 [0177.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47098) returned 1 Thread: id = 4821 os_tid = 0x1bc4 [0176.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v")) returned 0x20 [0177.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V", dwFileAttributes=0x20) returned 0 [0177.535] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.536] GetLastError () returned 0x5 [0177.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V", dwFileAttributes=0x20) returned 0 [0177.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c98) returned 1 Thread: id = 4822 os_tid = 0x1bc8 [0176.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h")) returned 0x20 [0177.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H", dwFileAttributes=0x20) returned 0 [0177.512] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.512] GetLastError () returned 0x5 [0177.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H", dwFileAttributes=0x20) returned 0 [0177.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a98) returned 1 Thread: id = 4823 os_tid = 0x1bcc [0176.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v")) returned 0x20 [0177.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V", dwFileAttributes=0x20) returned 0 [0177.542] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.543] GetLastError () returned 0x5 [0177.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V", dwFileAttributes=0x20) returned 0 [0177.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c98) returned 1 Thread: id = 4824 os_tid = 0x1bd0 [0176.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h")) returned 0x20 [0177.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H", dwFileAttributes=0x20) returned 0 [0177.541] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.541] GetLastError () returned 0x5 [0177.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H", dwFileAttributes=0x20) returned 0 [0177.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f98) returned 1 Thread: id = 4825 os_tid = 0x1bd4 [0176.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2")) returned 0x20 [0177.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0177.540] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.540] GetLastError () returned 0x5 [0177.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0177.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 4826 os_tid = 0x1bd8 [0176.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v")) returned 0x20 [0177.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V", dwFileAttributes=0x20) returned 0 [0177.544] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.544] GetLastError () returned 0x5 [0177.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V", dwFileAttributes=0x20) returned 0 [0177.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47d98) returned 1 Thread: id = 4827 os_tid = 0x1bdc [0176.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h")) returned 0x20 [0177.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H", dwFileAttributes=0x20) returned 0 [0177.550] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.550] GetLastError () returned 0x5 [0177.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H", dwFileAttributes=0x20) returned 0 [0177.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47418) returned 1 Thread: id = 4828 os_tid = 0x1be0 [0176.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v")) returned 0x20 [0177.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V", dwFileAttributes=0x20) returned 0 [0177.548] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.548] GetLastError () returned 0x5 [0177.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V", dwFileAttributes=0x20) returned 0 [0177.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48018) returned 1 Thread: id = 4829 os_tid = 0x1be4 [0176.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h")) returned 0x20 [0177.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H", dwFileAttributes=0x20) returned 0 [0177.546] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.546] GetLastError () returned 0x5 [0177.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H", dwFileAttributes=0x20) returned 0 [0177.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47718) returned 1 Thread: id = 4830 os_tid = 0x1be8 [0176.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v")) returned 0x20 [0177.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V", dwFileAttributes=0x20) returned 0 [0177.545] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.545] GetLastError () returned 0x5 [0177.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V", dwFileAttributes=0x20) returned 0 [0177.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46e98) returned 1 Thread: id = 4831 os_tid = 0x1bec [0176.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h")) returned 0x20 [0177.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H", dwFileAttributes=0x20) returned 0 [0177.556] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.557] GetLastError () returned 0x5 [0177.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H", dwFileAttributes=0x20) returned 0 [0177.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47518) returned 1 Thread: id = 4832 os_tid = 0x1c1c [0176.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2")) returned 0x20 [0177.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0177.555] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.555] GetLastError () returned 0x5 [0177.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0177.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 4833 os_tid = 0x1c20 [0176.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c")) returned 0x20 [0177.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0177.553] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.553] GetLastError () returned 0x5 [0177.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0177.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 4834 os_tid = 0x1c24 [0176.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v")) returned 0x20 [0177.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V", dwFileAttributes=0x20) returned 0 [0177.552] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.552] GetLastError () returned 0x5 [0177.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V", dwFileAttributes=0x20) returned 0 [0177.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47398) returned 1 Thread: id = 4835 os_tid = 0x1c28 [0176.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h")) returned 0x20 [0177.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H", dwFileAttributes=0x20) returned 0 [0177.496] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.497] GetLastError () returned 0x5 [0177.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H", dwFileAttributes=0x20) returned 0 [0177.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46b98) returned 1 Thread: id = 4836 os_tid = 0x1c2c [0176.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v")) returned 0x20 [0177.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V", dwFileAttributes=0x20) returned 0 [0177.271] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.271] GetLastError () returned 0x5 [0177.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V", dwFileAttributes=0x20) returned 0 [0177.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46518) returned 1 Thread: id = 4837 os_tid = 0x1c34 [0176.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\h")) returned 0x20 [0177.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H", dwFileAttributes=0x20) returned 0 [0177.538] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.539] GetLastError () returned 0x5 [0177.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\H", dwFileAttributes=0x20) returned 0 [0177.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a26468) returned 1 Thread: id = 4838 os_tid = 0x1c38 [0176.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h")) returned 0x20 [0177.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H", dwFileAttributes=0x20) returned 0 [0177.518] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.518] GetLastError () returned 0x5 [0177.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H", dwFileAttributes=0x20) returned 0 [0177.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47498) returned 1 Thread: id = 4839 os_tid = 0x1c3c [0176.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v")) returned 0x20 [0177.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V", dwFileAttributes=0x20) returned 0 [0177.515] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.515] GetLastError () returned 0x5 [0177.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V", dwFileAttributes=0x20) returned 0 [0177.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47a18) returned 1 Thread: id = 4840 os_tid = 0x1c40 [0176.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h")) returned 0x20 [0177.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H", dwFileAttributes=0x20) returned 0 [0177.531] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.531] GetLastError () returned 0x5 [0177.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H", dwFileAttributes=0x20) returned 0 [0177.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47598) returned 1 Thread: id = 4841 os_tid = 0x1c44 [0176.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v")) returned 0x20 [0177.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V", dwFileAttributes=0x20) returned 0 [0177.530] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.530] GetLastError () returned 0x5 [0177.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V", dwFileAttributes=0x20) returned 0 [0177.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47b98) returned 1 Thread: id = 4842 os_tid = 0x1c50 [0176.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd")) returned 0x20 [0177.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD", dwFileAttributes=0x20) returned 0 [0177.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.747] GetLastError () returned 0x5 [0177.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD", dwFileAttributes=0x20) returned 0 [0177.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062a10) returned 1 Thread: id = 4843 os_tid = 0x1c54 [0176.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd")) returned 0x20 [0177.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD", dwFileAttributes=0x20) returned 0 [0177.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.727] GetLastError () returned 0x5 [0177.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD", dwFileAttributes=0x20) returned 0 [0177.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 4844 os_tid = 0x1c5c [0176.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs")) returned 0x20 [0177.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS", dwFileAttributes=0x20) returned 0 [0177.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.725] GetLastError () returned 0x5 [0177.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS", dwFileAttributes=0x20) returned 0 [0177.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 4845 os_tid = 0x1c60 [0176.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs")) returned 0x20 [0177.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS", dwFileAttributes=0x20) returned 0 [0177.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.738] GetLastError () returned 0x5 [0177.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS", dwFileAttributes=0x20) returned 0 [0177.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61cb0) returned 1 Thread: id = 4846 os_tid = 0x1c64 [0176.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc")) returned 0x20 [0177.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.745] GetLastError () returned 0x5 [0177.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad60b8) returned 1 Thread: id = 4847 os_tid = 0x1c68 [0176.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt")) returned 0x20 [0177.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.744] GetLastError () returned 0x5 [0177.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 Thread: id = 4848 os_tid = 0x1c6c [0176.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk")) returned 0x20 [0177.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.741] GetLastError () returned 0x5 [0177.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62ef0) returned 1 Thread: id = 4849 os_tid = 0x1c7c [0176.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk")) returned 0x20 [0177.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.740] GetLastError () returned 0x5 [0177.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 4850 os_tid = 0x1c80 [0176.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc")) returned 0x20 [0177.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.723] GetLastError () returned 0x5 [0177.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC", dwFileAttributes=0x20) returned 0 [0177.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61440) returned 1 Thread: id = 4851 os_tid = 0x1ad8 [0176.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt")) returned 0x20 [0177.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.736] GetLastError () returned 0x5 [0177.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT", dwFileAttributes=0x20) returned 0 [0177.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60090) returned 1 Thread: id = 4852 os_tid = 0x1c84 [0176.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk")) returned 0x20 [0177.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.734] GetLastError () returned 0x5 [0177.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a61b00) returned 1 Thread: id = 4853 os_tid = 0x1c88 [0176.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk")) returned 0x20 [0177.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.732] GetLastError () returned 0x5 [0177.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0177.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a60a20) returned 1 Thread: id = 4854 os_tid = 0x1c8c [0176.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd")) returned 0x20 [0177.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD", dwFileAttributes=0x20) returned 0 [0177.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.825] GetLastError () returned 0x5 [0177.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD", dwFileAttributes=0x20) returned 0 [0177.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 4855 os_tid = 0x1c90 [0176.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd")) returned 0x20 [0177.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD", dwFileAttributes=0x20) returned 0 [0177.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.721] GetLastError () returned 0x5 [0177.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD", dwFileAttributes=0x20) returned 0 [0177.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 4856 os_tid = 0x1c98 [0176.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml")) returned 0x20 [0178.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML", dwFileAttributes=0x20) returned 0 [0178.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.862] GetLastError () returned 0x5 [0178.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML", dwFileAttributes=0x20) returned 0 [0178.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e7c8) returned 1 Thread: id = 4857 os_tid = 0x1ca0 [0176.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml")) returned 0x20 [0178.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML", dwFileAttributes=0x20) returned 0 [0178.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.857] GetLastError () returned 0x5 [0178.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML", dwFileAttributes=0x20) returned 0 [0178.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f440) returned 1 Thread: id = 4858 os_tid = 0x1ca4 [0176.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml")) returned 0x20 [0178.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML", dwFileAttributes=0x20) returned 0 [0178.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.855] GetLastError () returned 0x5 [0178.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML", dwFileAttributes=0x20) returned 0 [0178.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e528) returned 1 Thread: id = 4859 os_tid = 0x1ca8 [0176.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml")) returned 0x20 [0178.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML", dwFileAttributes=0x20) returned 0 [0178.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.868] GetLastError () returned 0x5 [0178.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML", dwFileAttributes=0x20) returned 0 [0178.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e720) returned 1 Thread: id = 4860 os_tid = 0x1cac [0176.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml")) returned 0x20 [0178.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML", dwFileAttributes=0x20) returned 0 [0178.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.867] GetLastError () returned 0x5 [0178.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML", dwFileAttributes=0x20) returned 0 [0178.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 Thread: id = 4861 os_tid = 0x1cb0 [0176.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml")) returned 0x20 [0178.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML", dwFileAttributes=0x20) returned 0 [0178.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.858] GetLastError () returned 0x5 [0178.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML", dwFileAttributes=0x20) returned 0 [0178.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 Thread: id = 4862 os_tid = 0x1cb8 [0176.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml")) returned 0x20 [0178.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML", dwFileAttributes=0x20) returned 0 [0178.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.837] GetLastError () returned 0x5 [0178.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML", dwFileAttributes=0x20) returned 0 [0178.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e5d0) returned 1 Thread: id = 4863 os_tid = 0x1cbc [0176.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis")) returned 0x20 [0176.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis", dwFileAttributes=0x20) returned 0 [0176.302] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.309] GetLastError () returned 0x5 [0176.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis", dwFileAttributes=0x20) returned 0 [0176.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 4864 os_tid = 0x1cc4 [0176.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\knox")) returned 0x20 [0176.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox", dwFileAttributes=0x20) returned 0 [0176.321] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\knox"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.327] GetLastError () returned 0x5 [0176.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox", dwFileAttributes=0x20) returned 0 [0176.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 Thread: id = 4865 os_tid = 0x1ccc [0176.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\marengo")) returned 0x20 [0176.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo", dwFileAttributes=0x20) returned 0 [0176.339] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\marengo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.345] GetLastError () returned 0x5 [0176.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo", dwFileAttributes=0x20) returned 0 [0176.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47d18) returned 1 Thread: id = 4866 os_tid = 0x1cd0 [0176.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg")) returned 0x20 [0176.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg", dwFileAttributes=0x20) returned 0 [0176.355] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.361] GetLastError () returned 0x5 [0176.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg", dwFileAttributes=0x20) returned 0 [0176.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 4867 os_tid = 0x1cd4 [0176.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city")) returned 0x20 [0176.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City", dwFileAttributes=0x20) returned 0 [0176.371] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.378] GetLastError () returned 0x5 [0176.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City", dwFileAttributes=0x20) returned 0 [0176.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47998) returned 1 Thread: id = 4868 os_tid = 0x1cd8 [0176.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vevay")) returned 0x20 [0176.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay", dwFileAttributes=0x20) returned 0 [0176.389] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vevay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.395] GetLastError () returned 0x5 [0176.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay", dwFileAttributes=0x20) returned 0 [0176.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 Thread: id = 4869 os_tid = 0x1ce0 [0176.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes")) returned 0x20 [0176.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes", dwFileAttributes=0x20) returned 0 [0176.406] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.411] GetLastError () returned 0x5 [0176.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes", dwFileAttributes=0x20) returned 0 [0176.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47218) returned 1 Thread: id = 4870 os_tid = 0x1d40 [0176.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\winamac")) returned 0x20 [0176.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac", dwFileAttributes=0x20) returned 0 [0176.422] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\indiana\\winamac"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0176.427] GetLastError () returned 0x5 [0176.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac", dwFileAttributes=0x20) returned 0 [0176.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47698) returned 1 Thread: id = 4871 os_tid = 0x1d48 [0176.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer")) returned 0x20 [0177.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer", dwFileAttributes=0x20) returned 0 [0177.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.823] GetLastError () returned 0x5 [0177.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer", dwFileAttributes=0x20) returned 0 [0177.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0168) returned 1 Thread: id = 4872 os_tid = 0x1d4c [0176.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env")) returned 0x20 [0177.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env", dwFileAttributes=0x20) returned 0 [0177.609] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.609] GetLastError () returned 0x5 [0177.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env", dwFileAttributes=0x20) returned 0 [0177.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3aa80) returned 1 Thread: id = 4873 os_tid = 0x1d50 [0176.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca")) returned 0x20 [0177.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca", dwFileAttributes=0x20) returned 0 [0177.624] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.624] GetLastError () returned 0x5 [0177.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca", dwFileAttributes=0x20) returned 0 [0177.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66918) returned 1 Thread: id = 4874 os_tid = 0x1d54 [0176.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp")) returned 0x20 [0177.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp", dwFileAttributes=0x20) returned 0 [0177.617] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.617] GetLastError () returned 0x5 [0177.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp", dwFileAttributes=0x20) returned 0 [0177.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66f18) returned 1 Thread: id = 4875 os_tid = 0x1d58 [0176.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx")) returned 0x20 [0177.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx", dwFileAttributes=0x20) returned 0 [0177.623] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.623] GetLastError () returned 0x5 [0177.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx", dwFileAttributes=0x20) returned 0 [0177.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65ad8) returned 1 Thread: id = 4876 os_tid = 0x1d60 [0176.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp")) returned 0x20 [0177.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp", dwFileAttributes=0x20) returned 0 [0177.495] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.495] GetLastError () returned 0x5 [0177.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp", dwFileAttributes=0x20) returned 0 [0177.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66618) returned 1 Thread: id = 4877 os_tid = 0x1d6c [0176.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths")) returned 0x20 [0177.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths", dwFileAttributes=0x20) returned 0 [0177.625] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.626] GetLastError () returned 0x5 [0177.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths", dwFileAttributes=0x20) returned 0 [0177.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e666d8) returned 1 Thread: id = 4878 os_tid = 0x1d70 [0176.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca")) returned 0x20 [0177.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca", dwFileAttributes=0x20) returned 0 [0177.621] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.621] GetLastError () returned 0x5 [0177.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca", dwFileAttributes=0x20) returned 0 [0177.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65dd8) returned 1 Thread: id = 4879 os_tid = 0x1d74 [0176.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp")) returned 0x20 [0177.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp", dwFileAttributes=0x20) returned 0 [0177.620] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.620] GetLastError () returned 0x5 [0177.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp", dwFileAttributes=0x20) returned 0 [0177.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66498) returned 1 Thread: id = 4880 os_tid = 0x1d78 [0176.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx")) returned 0x20 [0177.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx", dwFileAttributes=0x20) returned 0 [0177.616] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.616] GetLastError () returned 0x5 [0177.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx", dwFileAttributes=0x20) returned 0 [0177.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66198) returned 1 Thread: id = 4881 os_tid = 0x1d7c [0176.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp")) returned 0x20 [0177.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp", dwFileAttributes=0x20) returned 0 [0177.619] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.619] GetLastError () returned 0x5 [0177.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp", dwFileAttributes=0x20) returned 0 [0177.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66318) returned 1 Thread: id = 4882 os_tid = 0x1d80 [0176.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca")) returned 0x20 [0177.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca", dwFileAttributes=0x20) returned 0 [0177.289] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.290] GetLastError () returned 0x5 [0177.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca", dwFileAttributes=0x20) returned 0 [0177.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 4883 os_tid = 0x1d84 [0176.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp")) returned 0x20 [0177.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp", dwFileAttributes=0x20) returned 0 [0177.627] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.627] GetLastError () returned 0x5 [0177.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp", dwFileAttributes=0x20) returned 0 [0177.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 4884 os_tid = 0x1b60 [0176.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp")) returned 0x20 [0177.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp", dwFileAttributes=0x20) returned 0 [0177.610] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.611] GetLastError () returned 0x5 [0177.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp", dwFileAttributes=0x20) returned 0 [0177.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a10) returned 1 Thread: id = 4885 os_tid = 0x1d88 [0176.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif")) returned 0x20 [0180.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF", dwFileAttributes=0x20) returned 0 [0180.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.189] GetLastError () returned 0x5 [0180.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF", dwFileAttributes=0x20) returned 0 [0180.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6ef8) returned 1 Thread: id = 4886 os_tid = 0x1d98 [0176.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif")) returned 0x20 [0180.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF", dwFileAttributes=0x20) returned 0 [0180.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.187] GetLastError () returned 0x5 [0180.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF", dwFileAttributes=0x20) returned 0 [0180.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad63b0) returned 1 Thread: id = 4887 os_tid = 0x1d9c [0176.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif")) returned 0x20 [0179.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF", dwFileAttributes=0x20) returned 0 [0179.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.297] GetLastError () returned 0x5 [0179.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF", dwFileAttributes=0x20) returned 0 [0179.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5148) returned 1 Thread: id = 4888 os_tid = 0x1da0 [0176.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif")) returned 0x20 [0180.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF", dwFileAttributes=0x20) returned 0 [0180.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.311] GetLastError () returned 0x5 [0180.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF", dwFileAttributes=0x20) returned 0 [0180.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c00) returned 1 Thread: id = 4889 os_tid = 0x1da4 [0176.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif")) returned 0x20 [0180.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF", dwFileAttributes=0x20) returned 0 [0180.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.309] GetLastError () returned 0x5 [0180.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF", dwFileAttributes=0x20) returned 0 [0180.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad57d0) returned 1 Thread: id = 4890 os_tid = 0x1da8 [0176.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif")) returned 0x20 [0179.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF", dwFileAttributes=0x20) returned 0 [0179.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.917] GetLastError () returned 0x5 [0179.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF", dwFileAttributes=0x20) returned 0 [0179.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6f90) returned 1 Thread: id = 4891 os_tid = 0x1dac [0176.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadf10 [0176.444] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0176.444] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0176.444] wcscat (in: _Dest=0x3dadf10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*" [0176.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0176.444] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa90 [0181.341] wcscmp (_String1=".", _String2=".") returned 0 [0181.341] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.341] wcscmp (_String1="..", _String2=".") returned 1 [0181.341] wcscmp (_String1="..", _String2="..") returned 0 [0181.342] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0181.342] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0181.342] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0181.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x300d948 [0181.342] wcscpy (in: _Dest=0x300d948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0181.342] wcscat (in: _Dest=0x300d948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0181.342] wcscat (in: _Dest=0x300d948, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" [0181.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x300d948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0181.633] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0181.633] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0181.633] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0181.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec940 [0181.633] wcscpy (in: _Dest=0x3dec940, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0181.633] wcscat (in: _Dest=0x3dec940, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0181.633] wcscat (in: _Dest=0x3dec940, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" [0181.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dec940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0181.634] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2eab4b00, ftLastWriteTime.dwHighDateTime=0x1cd9c10, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0181.634] wcscmp (_String1="main.html", _String2=".") returned 1 [0181.634] wcscmp (_String1="main.html", _String2="..") returned 1 [0181.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bbd10 [0181.634] wcscpy (in: _Dest=0x30bbd10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0181.634] wcscat (in: _Dest=0x30bbd10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0181.634] wcscat (in: _Dest=0x30bbd10, _Source="main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" [0181.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0181.635] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x2eab4b00, ftLastWriteTime.dwHighDateTime=0x1cd9c10, nFileSizeHigh=0x0, nFileSizeLow=0x4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0181.636] wcscmp (_String1="main.js", _String2=".") returned 1 [0181.636] wcscmp (_String1="main.js", _String2="..") returned 1 [0181.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bbe18 [0181.636] wcscpy (in: _Dest=0x30bbe18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0181.636] wcscat (in: _Dest=0x30bbe18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0181.636] wcscat (in: _Dest=0x30bbe18, _Source="main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" [0181.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbe18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0181.637] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0181.637] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0181.637] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0181.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x3dec710 [0181.637] wcscpy (in: _Dest=0x3dec710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0181.637] wcscat (in: _Dest=0x3dec710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0181.637] wcscat (in: _Dest=0x3dec710, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json" [0181.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dec710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0181.638] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 1 [0181.638] wcscmp (_String1="__MACOSX", _String2=".") returned 1 [0181.638] wcscmp (_String1="__MACOSX", _String2="..") returned 1 [0181.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bbf20 [0181.638] wcscpy (in: _Dest=0x30bbf20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0" [0181.638] wcscat (in: _Dest=0x30bbf20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0181.638] wcscat (in: _Dest=0x30bbf20, _Source="__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0181.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bbf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0181.640] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__MACOSX", cAlternateFileName="")) returned 0 [0181.640] FindClose (in: hFindFile=0x3dcfa90 | out: hFindFile=0x3dcfa90) returned 1 [0181.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0181.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 [0181.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 Thread: id = 4892 os_tid = 0x1db0 [0176.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db0ca8 [0176.445] wcscpy (in: _Dest=0x3db0ca8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0176.445] wcscat (in: _Dest=0x3db0ca8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0176.445] wcscat (in: _Dest=0x3db0ca8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*" [0176.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0176.445] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0180.970] wcscmp (_String1=".", _String2=".") returned 0 [0180.970] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.971] wcscmp (_String1="..", _String2=".") returned 1 [0180.971] wcscmp (_String1="..", _String2="..") returned 0 [0180.971] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe644d300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0180.971] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0180.971] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0180.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bb6e0 [0180.971] wcscpy (in: _Dest=0x30bb6e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0180.971] wcscat (in: _Dest=0x30bb6e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0180.971] wcscat (in: _Dest=0x30bb6e0, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" [0181.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0181.385] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6454830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe65e7580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e7580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0181.385] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0181.385] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0181.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bb9f8 [0181.385] wcscpy (in: _Dest=0x30bb9f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0181.385] wcscat (in: _Dest=0x30bb9f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0181.385] wcscat (in: _Dest=0x30bb9f8, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" [0181.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0181.386] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6459650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe645bd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0181.387] wcscmp (_String1="main.html", _String2=".") returned 1 [0181.387] wcscmp (_String1="main.html", _String2="..") returned 1 [0181.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de97b8 [0181.387] wcscpy (in: _Dest=0x3de97b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0181.387] wcscat (in: _Dest=0x3de97b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0181.387] wcscat (in: _Dest=0x3de97b8, _Source="main.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" [0181.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de97b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0181.388] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6460b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6460b80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0181.388] wcscmp (_String1="main.js", _String2=".") returned 1 [0181.388] wcscmp (_String1="main.js", _String2="..") returned 1 [0181.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3de98b8 [0181.388] wcscpy (in: _Dest=0x3de98b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0181.388] wcscat (in: _Dest=0x3de98b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0181.388] wcscat (in: _Dest=0x3de98b8, _Source="main.js" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" [0181.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de98b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0181.390] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6264e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64659a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e0050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0181.390] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0181.390] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0181.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bbb00 [0181.390] wcscpy (in: _Dest=0x30bbb00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0181.390] wcscat (in: _Dest=0x30bbb00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0181.390] wcscat (in: _Dest=0x30bbb00, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" [0181.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0181.392] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe626eac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6445dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6445dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0181.392] wcscmp (_String1="_locales", _String2=".") returned 1 [0181.392] wcscmp (_String1="_locales", _String2="..") returned 1 [0181.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3de99b8 [0181.392] wcscpy (in: _Dest=0x3de99b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0181.392] wcscat (in: _Dest=0x3de99b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0181.392] wcscat (in: _Dest=0x3de99b8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0181.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de99b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0181.393] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0181.393] wcscmp (_String1="_metadata", _String2=".") returned 1 [0181.393] wcscmp (_String1="_metadata", _String2="..") returned 1 [0181.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de9ab8 [0181.394] wcscpy (in: _Dest=0x3de9ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" [0181.394] wcscat (in: _Dest=0x3de9ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0181.394] wcscat (in: _Dest=0x3de9ab8, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0181.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de9ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0181.395] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0181.395] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0181.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0181.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0ca8) returned 1 [0181.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db09d8) returned 1 Thread: id = 4893 os_tid = 0x1db4 [0176.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer")) returned 0x20 [0179.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer", dwFileAttributes=0x20) returned 0 [0180.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.841] GetLastError () returned 0x5 [0181.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer", dwFileAttributes=0x20) returned 0 [0183.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86260) returned 1 Thread: id = 4894 os_tid = 0x1db8 [0176.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer")) returned 0x20 [0179.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER", dwFileAttributes=0x20) returned 0 [0179.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.899] GetLastError () returned 0x5 [0179.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER", dwFileAttributes=0x20) returned 0 [0179.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333528) returned 1 Thread: id = 4895 os_tid = 0x1dc0 [0176.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0d98 [0176.447] wcscpy (in: _Dest=0x3db0d98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0176.447] wcscat (in: _Dest=0x3db0d98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0176.447] wcscat (in: _Dest=0x3db0d98, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*" [0176.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0176.447] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c610f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0180.938] wcscmp (_String1=".", _String2=".") returned 0 [0180.938] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c610f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.938] wcscmp (_String1="..", _String2=".") returned 1 [0180.938] wcscmp (_String1="..", _String2="..") returned 0 [0180.938] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c6ad30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6fde9d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fde9d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0180.938] wcscmp (_String1="128.png", _String2=".") returned 1 [0180.938] wcscmp (_String1="128.png", _String2="..") returned 1 [0180.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3de71b8 [0180.939] wcscpy (in: _Dest=0x3de71b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0180.939] wcscat (in: _Dest=0x3de71b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0180.939] wcscat (in: _Dest=0x3de71b8, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" [0182.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de71b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0182.588] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c63800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e4bc80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fd74a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0182.588] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0182.588] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0182.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bb4d0 [0182.588] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0182.588] wcscat (in: _Dest=0x30bb4d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0182.588] wcscat (in: _Dest=0x30bb4d0, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" [0182.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bb4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0182.590] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c72260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e42040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e42040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0182.590] wcscmp (_String1="_locales", _String2=".") returned 1 [0182.590] wcscmp (_String1="_locales", _String2="..") returned 1 [0182.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3dea8b8 [0182.590] wcscpy (in: _Dest=0x3dea8b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0182.590] wcscat (in: _Dest=0x3dea8b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0182.590] wcscat (in: _Dest=0x3dea8b8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0182.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dea8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0182.592] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0182.592] wcscmp (_String1="_metadata", _String2=".") returned 1 [0182.592] wcscmp (_String1="_metadata", _String2="..") returned 1 [0182.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3dea7b8 [0182.592] wcscpy (in: _Dest=0x3dea7b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" [0182.592] wcscat (in: _Dest=0x3dea7b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0182.592] wcscat (in: _Dest=0x3dea7b8, _Source="_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0182.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dea7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0182.594] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0182.594] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0d98) returned 1 [0182.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0348) returned 1 Thread: id = 4896 os_tid = 0x1dc4 [0176.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db0e88 [0176.448] wcscpy (in: _Dest=0x3db0e88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0176.448] wcscat (in: _Dest=0x3db0e88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0176.448] wcscat (in: _Dest=0x3db0e88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*" [0176.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0176.448] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0180.939] wcscmp (_String1=".", _String2=".") returned 0 [0180.939] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.939] wcscmp (_String1="..", _String2=".") returned 1 [0180.940] wcscmp (_String1="..", _String2="..") returned 0 [0180.940] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3cc9f40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4ce01e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1d7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0180.940] wcscmp (_String1="128.png", _String2=".") returned 1 [0180.940] wcscmp (_String1="128.png", _String2="..") returned 1 [0180.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf2) returned 0x3de6fb8 [0180.940] wcscpy (in: _Dest=0x3de6fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0180.940] wcscat (in: _Dest=0x3de6fb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0180.940] wcscat (in: _Dest=0x3de6fb8, _Source="128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" [0181.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0181.425] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ca3de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ab880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4ce01e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0181.425] wcscmp (_String1="manifest.json", _String2=".") returned 1 [0181.425] wcscmp (_String1="manifest.json", _String2="..") returned 1 [0181.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bbc08 [0181.425] wcscpy (in: _Dest=0x30bbc08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0181.425] wcscat (in: _Dest=0x30bbc08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0181.425] wcscat (in: _Dest=0x30bbc08, _Source="manifest.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" [0181.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30bbc08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0181.426] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0181.426] wcscmp (_String1="_locales", _String2=".") returned 1 [0181.426] wcscmp (_String1="_locales", _String2="..") returned 1 [0181.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3de9bb8 [0181.427] wcscpy (in: _Dest=0x3de9bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0" [0181.427] wcscat (in: _Dest=0x3de9bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0181.427] wcscat (in: _Dest=0x3de9bb8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0181.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de9bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24d8 [0181.428] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 0 [0181.428] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0181.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0181.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0e88) returned 1 [0181.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0ac8) returned 1 Thread: id = 4897 os_tid = 0x1dc8 [0176.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h")) returned 0x20 [0177.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H", dwFileAttributes=0x20) returned 0 [0177.527] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.527] GetLastError () returned 0x5 [0177.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H", dwFileAttributes=0x20) returned 0 [0177.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 4898 os_tid = 0x1dcc [0176.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v")) returned 0x20 [0177.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V", dwFileAttributes=0x20) returned 0 [0177.524] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.524] GetLastError () returned 0x5 [0177.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V", dwFileAttributes=0x20) returned 0 [0177.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 4899 os_tid = 0x1dd0 [0176.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h")) returned 0x20 [0177.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H", dwFileAttributes=0x20) returned 0 [0177.534] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.534] GetLastError () returned 0x5 [0177.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H", dwFileAttributes=0x20) returned 0 [0177.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 4900 os_tid = 0x1dd4 [0176.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v")) returned 0x20 [0177.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V", dwFileAttributes=0x20) returned 0 [0177.533] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.533] GetLastError () returned 0x5 [0177.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V", dwFileAttributes=0x20) returned 0 [0177.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 4902 os_tid = 0x1ddc [0177.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml")) returned 0x20 [0178.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML", dwFileAttributes=0x20) returned 0 [0178.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.778] GetLastError () returned 0x5 [0178.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML", dwFileAttributes=0x20) returned 0 [0178.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e1e0) returned 1 Thread: id = 4903 os_tid = 0x1de0 [0177.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml")) returned 0x20 [0178.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML", dwFileAttributes=0x20) returned 0 [0178.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.898] GetLastError () returned 0x5 [0178.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML", dwFileAttributes=0x20) returned 0 [0178.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f590) returned 1 Thread: id = 4904 os_tid = 0x1de4 [0177.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml")) returned 0x20 [0178.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML", dwFileAttributes=0x20) returned 0 [0178.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.887] GetLastError () returned 0x5 [0178.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML", dwFileAttributes=0x20) returned 0 [0178.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 Thread: id = 4905 os_tid = 0x1dec [0177.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml")) returned 0x20 [0178.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML", dwFileAttributes=0x20) returned 0 [0178.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.886] GetLastError () returned 0x5 [0178.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML", dwFileAttributes=0x20) returned 0 [0178.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63210) returned 1 Thread: id = 4906 os_tid = 0x1df0 [0177.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml")) returned 0x20 [0178.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML", dwFileAttributes=0x20) returned 0 [0178.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.884] GetLastError () returned 0x5 [0178.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML", dwFileAttributes=0x20) returned 0 [0178.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 4907 os_tid = 0x1dfc [0177.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml")) returned 0x20 [0178.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML", dwFileAttributes=0x20) returned 0 [0178.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.883] GetLastError () returned 0x5 [0178.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML", dwFileAttributes=0x20) returned 0 [0178.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63c10) returned 1 Thread: id = 4908 os_tid = 0x1e00 [0177.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml")) returned 0x20 [0178.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML", dwFileAttributes=0x20) returned 0 [0178.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.882] GetLastError () returned 0x5 [0178.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML", dwFileAttributes=0x20) returned 0 [0178.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a637b0) returned 1 Thread: id = 4909 os_tid = 0x1e04 [0177.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml")) returned 0x20 [0178.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML", dwFileAttributes=0x20) returned 0 [0178.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.880] GetLastError () returned 0x5 [0178.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML", dwFileAttributes=0x20) returned 0 [0178.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63df0) returned 1 Thread: id = 4910 os_tid = 0x1e08 [0177.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml")) returned 0x20 [0178.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML", dwFileAttributes=0x20) returned 0 [0178.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.879] GetLastError () returned 0x5 [0178.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML", dwFileAttributes=0x20) returned 0 [0178.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63850) returned 1 Thread: id = 4911 os_tid = 0x1e14 [0177.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml")) returned 0x20 [0178.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML", dwFileAttributes=0x20) returned 0 [0178.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.876] GetLastError () returned 0x5 [0178.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML", dwFileAttributes=0x20) returned 0 [0178.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62bd0) returned 1 Thread: id = 4912 os_tid = 0x1e18 [0177.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml")) returned 0x20 [0178.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML", dwFileAttributes=0x20) returned 0 [0178.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.875] GetLastError () returned 0x5 [0178.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML", dwFileAttributes=0x20) returned 0 [0178.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 4913 os_tid = 0x1e1c [0177.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml")) returned 0x20 [0178.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML", dwFileAttributes=0x20) returned 0 [0178.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.874] GetLastError () returned 0x5 [0178.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML", dwFileAttributes=0x20) returned 0 [0178.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62e50) returned 1 Thread: id = 4914 os_tid = 0x1e20 [0177.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml")) returned 0x20 [0178.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML", dwFileAttributes=0x20) returned 0 [0178.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.873] GetLastError () returned 0x5 [0178.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML", dwFileAttributes=0x20) returned 0 [0178.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 Thread: id = 4915 os_tid = 0x1e24 [0177.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif")) returned 0x20 [0180.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF", dwFileAttributes=0x20) returned 0 [0180.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.306] GetLastError () returned 0x5 [0180.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF", dwFileAttributes=0x20) returned 0 [0180.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5310) returned 1 Thread: id = 4916 os_tid = 0x1e28 [0177.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif")) returned 0x20 [0180.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF", dwFileAttributes=0x20) returned 0 [0180.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.304] GetLastError () returned 0x5 [0180.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF", dwFileAttributes=0x20) returned 0 [0180.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6e60) returned 1 Thread: id = 4917 os_tid = 0x1e2c [0177.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif")) returned 0x20 [0180.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF", dwFileAttributes=0x20) returned 0 [0180.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.303] GetLastError () returned 0x5 [0180.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF", dwFileAttributes=0x20) returned 0 [0180.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d8) returned 1 Thread: id = 4918 os_tid = 0x1e30 [0177.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif")) returned 0x20 [0180.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF", dwFileAttributes=0x20) returned 0 [0180.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.296] GetLastError () returned 0x5 [0180.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF", dwFileAttributes=0x20) returned 0 [0180.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad51e0) returned 1 Thread: id = 4919 os_tid = 0x1bf8 [0177.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif")) returned 0x20 [0180.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF", dwFileAttributes=0x20) returned 0 [0180.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.293] GetLastError () returned 0x5 [0180.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF", dwFileAttributes=0x20) returned 0 [0180.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6a38) returned 1 Thread: id = 4920 os_tid = 0x1e34 [0177.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif")) returned 0x20 [0180.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF", dwFileAttributes=0x20) returned 0 [0180.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.291] GetLastError () returned 0x5 [0180.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF", dwFileAttributes=0x20) returned 0 [0180.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6150) returned 1 Thread: id = 4921 os_tid = 0x1e38 [0177.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif")) returned 0x20 [0180.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF", dwFileAttributes=0x20) returned 0 [0180.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.289] GetLastError () returned 0x5 [0180.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF", dwFileAttributes=0x20) returned 0 [0180.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c98) returned 1 Thread: id = 4922 os_tid = 0x1c04 [0177.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif")) returned 0x20 [0180.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF", dwFileAttributes=0x20) returned 0 [0180.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.277] GetLastError () returned 0x5 [0180.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF", dwFileAttributes=0x20) returned 0 [0180.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6d30) returned 1 Thread: id = 4923 os_tid = 0x1c08 [0177.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif")) returned 0x20 [0180.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF", dwFileAttributes=0x20) returned 0 [0180.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.285] GetLastError () returned 0x5 [0180.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF", dwFileAttributes=0x20) returned 0 [0180.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6740) returned 1 Thread: id = 4924 os_tid = 0x1c0c [0177.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif")) returned 0x20 [0180.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF", dwFileAttributes=0x20) returned 0 [0180.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.274] GetLastError () returned 0x5 [0180.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF", dwFileAttributes=0x20) returned 0 [0180.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b68) returned 1 Thread: id = 4925 os_tid = 0x1e3c [0177.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif")) returned 0x20 [0180.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF", dwFileAttributes=0x20) returned 0 [0180.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.270] GetLastError () returned 0x5 [0180.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF", dwFileAttributes=0x20) returned 0 [0180.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5bf8) returned 1 Thread: id = 4926 os_tid = 0x1e40 [0177.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif")) returned 0x20 [0180.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF", dwFileAttributes=0x20) returned 0 [0180.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.307] GetLastError () returned 0x5 [0180.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF", dwFileAttributes=0x20) returned 0 [0180.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5608) returned 1 Thread: id = 4927 os_tid = 0x1e44 [0177.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx")) returned 0x20 [0177.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx", dwFileAttributes=0x20) returned 0 [0177.836] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.836] GetLastError () returned 0x5 [0177.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx", dwFileAttributes=0x20) returned 0 [0177.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 4928 os_tid = 0x1e48 [0177.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca")) returned 0x20 [0177.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca", dwFileAttributes=0x20) returned 0 [0177.837] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.838] GetLastError () returned 0x5 [0177.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca", dwFileAttributes=0x20) returned 0 [0177.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 4929 os_tid = 0x1e4c [0177.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp")) returned 0x20 [0177.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp", dwFileAttributes=0x20) returned 0 [0177.839] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.839] GetLastError () returned 0x5 [0177.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp", dwFileAttributes=0x20) returned 0 [0177.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 4930 os_tid = 0x1e54 [0177.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx")) returned 0x20 [0177.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx", dwFileAttributes=0x20) returned 0 [0177.841] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.841] GetLastError () returned 0x5 [0177.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx", dwFileAttributes=0x20) returned 0 [0177.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3332e8) returned 1 Thread: id = 4931 os_tid = 0x1e58 [0177.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp")) returned 0x20 [0177.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp", dwFileAttributes=0x20) returned 0 [0177.843] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.843] GetLastError () returned 0x5 [0177.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp", dwFileAttributes=0x20) returned 0 [0177.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 4932 os_tid = 0x1e88 [0177.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp")) returned 0x20 [0180.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp", dwFileAttributes=0x20) returned 0 [0180.061] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.061] GetLastError () returned 0x5 [0180.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp", dwFileAttributes=0x20) returned 0 [0180.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333228) returned 1 Thread: id = 4933 os_tid = 0x1ef0 [0177.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex")) returned 0x20 [0179.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex", dwFileAttributes=0x20) returned 0 [0179.918] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.918] GetLastError () returned 0x5 [0179.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex", dwFileAttributes=0x20) returned 0 [0179.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57820) returned 1 Thread: id = 4934 os_tid = 0x1f0c [0177.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx")) returned 0x20 [0180.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx", dwFileAttributes=0x20) returned 0 [0180.143] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.143] GetLastError () returned 0x5 [0180.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx", dwFileAttributes=0x20) returned 0 [0180.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 4935 os_tid = 0x1f84 [0177.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env")) returned 0x20 [0180.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env", dwFileAttributes=0x20) returned 0 [0180.099] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.099] GetLastError () returned 0x5 [0180.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env", dwFileAttributes=0x20) returned 0 [0180.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d578e8) returned 1 Thread: id = 4936 os_tid = 0x1f88 [0177.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca")) returned 0x20 [0180.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca", dwFileAttributes=0x20) returned 0 [0180.058] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.059] GetLastError () returned 0x5 [0180.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca", dwFileAttributes=0x20) returned 0 [0180.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332ce8) returned 1 Thread: id = 4937 os_tid = 0x1f8c [0177.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp")) returned 0x20 [0179.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp", dwFileAttributes=0x20) returned 0 [0179.255] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.255] GetLastError () returned 0x5 [0179.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp", dwFileAttributes=0x20) returned 0 [0179.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3329e8) returned 1 Thread: id = 4938 os_tid = 0x2018 [0177.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp")) returned 0x20 [0180.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp", dwFileAttributes=0x20) returned 0 [0180.096] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.096] GetLastError () returned 0x5 [0180.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp", dwFileAttributes=0x20) returned 0 [0180.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d566f0) returned 1 Thread: id = 4939 os_tid = 0x202c [0177.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx")) returned 0x20 [0180.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx", dwFileAttributes=0x20) returned 0 [0180.142] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.142] GetLastError () returned 0x5 [0180.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx", dwFileAttributes=0x20) returned 0 [0180.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 4940 os_tid = 0x2034 [0177.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca")) returned 0x20 [0180.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca", dwFileAttributes=0x20) returned 0 [0180.093] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.093] GetLastError () returned 0x5 [0180.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca", dwFileAttributes=0x20) returned 0 [0180.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332e68) returned 1 Thread: id = 4941 os_tid = 0x203c [0177.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp")) returned 0x20 [0180.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp", dwFileAttributes=0x20) returned 0 [0180.076] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.076] GetLastError () returned 0x5 [0180.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp", dwFileAttributes=0x20) returned 0 [0180.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332da8) returned 1 Thread: id = 4942 os_tid = 0x2040 [0177.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp")) returned 0x20 [0180.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp", dwFileAttributes=0x20) returned 0 [0180.074] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.074] GetLastError () returned 0x5 [0180.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp", dwFileAttributes=0x20) returned 0 [0180.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575c8) returned 1 Thread: id = 4943 os_tid = 0x2048 [0177.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx")) returned 0x20 [0180.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx", dwFileAttributes=0x20) returned 0 [0180.071] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.071] GetLastError () returned 0x5 [0180.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx", dwFileAttributes=0x20) returned 0 [0180.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3321a8) returned 1 Thread: id = 4944 os_tid = 0x204c [0177.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths")) returned 0x20 [0180.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths", dwFileAttributes=0x20) returned 0 [0180.069] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.069] GetLastError () returned 0x5 [0180.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths", dwFileAttributes=0x20) returned 0 [0180.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333ee8) returned 1 Thread: id = 4945 os_tid = 0x2054 [0177.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca")) returned 0x20 [0180.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca", dwFileAttributes=0x20) returned 0 [0180.140] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.140] GetLastError () returned 0x5 [0180.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca", dwFileAttributes=0x20) returned 0 [0180.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 4946 os_tid = 0x2058 [0177.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp")) returned 0x20 [0180.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp", dwFileAttributes=0x20) returned 0 [0180.139] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.139] GetLastError () returned 0x5 [0180.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp", dwFileAttributes=0x20) returned 0 [0180.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 4947 os_tid = 0x2064 [0177.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp")) returned 0x20 [0180.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp", dwFileAttributes=0x20) returned 0 [0180.137] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.137] GetLastError () returned 0x5 [0180.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp", dwFileAttributes=0x20) returned 0 [0180.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57500) returned 1 Thread: id = 4948 os_tid = 0x2068 [0177.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx")) returned 0x20 [0180.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx", dwFileAttributes=0x20) returned 0 [0180.134] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.135] GetLastError () returned 0x5 [0180.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx", dwFileAttributes=0x20) returned 0 [0180.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333e28) returned 1 Thread: id = 4949 os_tid = 0x20a8 [0177.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp")) returned 0x20 [0180.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp", dwFileAttributes=0x20) returned 0 [0180.132] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.132] GetLastError () returned 0x5 [0180.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp", dwFileAttributes=0x20) returned 0 [0180.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64090) returned 1 Thread: id = 4950 os_tid = 0x20b4 [0177.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex")) returned 0x20 [0180.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex", dwFileAttributes=0x20) returned 0 [0180.129] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.129] GetLastError () returned 0x5 [0180.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex", dwFileAttributes=0x20) returned 0 [0180.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56628) returned 1 Thread: id = 4951 os_tid = 0x20b8 [0177.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx")) returned 0x20 [0180.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx", dwFileAttributes=0x20) returned 0 [0180.127] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.127] GetLastError () returned 0x5 [0180.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx", dwFileAttributes=0x20) returned 0 [0180.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64150) returned 1 Thread: id = 4952 os_tid = 0x20bc [0177.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env")) returned 0x20 [0180.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env", dwFileAttributes=0x20) returned 0 [0180.124] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.124] GetLastError () returned 0x5 [0180.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env", dwFileAttributes=0x20) returned 0 [0180.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57438) returned 1 Thread: id = 4953 os_tid = 0x20c0 [0177.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca")) returned 0x20 [0180.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca", dwFileAttributes=0x20) returned 0 [0180.066] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.066] GetLastError () returned 0x5 [0180.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca", dwFileAttributes=0x20) returned 0 [0180.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64210) returned 1 Thread: id = 4954 os_tid = 0x20c8 [0177.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp")) returned 0x20 [0180.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp", dwFileAttributes=0x20) returned 0 [0180.064] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.064] GetLastError () returned 0x5 [0180.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp", dwFileAttributes=0x20) returned 0 [0180.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a642d0) returned 1 Thread: id = 4955 os_tid = 0x20d0 [0177.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one")) returned 0x20 [0177.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one", dwFileAttributes=0x20) returned 0 [0177.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.945] GetLastError () returned 0x5 [0177.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one", dwFileAttributes=0x20) returned 0 [0177.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 Thread: id = 4956 os_tid = 0x182c [0177.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta")) returned 0x20 [0181.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta", dwFileAttributes=0x20) returned 0 [0181.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.848] GetLastError () returned 0x5 [0181.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta", dwFileAttributes=0x20) returned 0 [0181.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 4957 os_tid = 0x1c94 [0177.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css")) returned 0x20 [0181.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS", dwFileAttributes=0x20) returned 0 [0181.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.844] GetLastError () returned 0x5 [0181.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS", dwFileAttributes=0x20) returned 0 [0181.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c18) returned 1 Thread: id = 4958 os_tid = 0xe14 [0177.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl")) returned 0x20 [0181.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL", dwFileAttributes=0x20) returned 0 [0181.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.846] GetLastError () returned 0x5 [0181.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL", dwFileAttributes=0x20) returned 0 [0181.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47898) returned 1 Thread: id = 4959 os_tid = 0x21fc [0177.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll")) returned 0x20 [0183.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0183.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.021] GetLastError () returned 0x5 [0183.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0183.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 4960 os_tid = 0x2200 [0177.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll")) returned 0x20 [0184.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0184.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.192] GetLastError () returned 0x5 [0184.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0184.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad60b8) returned 1 Thread: id = 4961 os_tid = 0x2214 [0177.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif")) returned 0x20 [0177.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0177.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0177.949] GetLastError () returned 0x5 [0177.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0177.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 4962 os_tid = 0x2234 [0177.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg")) returned 0x20 [0180.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0180.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.024] GetLastError () returned 0x5 [0180.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0180.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 Thread: id = 4963 os_tid = 0xb8c [0177.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp")) returned 0x20 [0180.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0180.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.313] GetLastError () returned 0x5 [0180.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0180.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8f08) returned 1 Thread: id = 4964 os_tid = 0x754 [0177.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif")) returned 0x20 [0180.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif", dwFileAttributes=0x20) returned 0 [0180.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.212] GetLastError () returned 0x5 [0180.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif", dwFileAttributes=0x20) returned 0 [0180.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85e50) returned 1 Thread: id = 4965 os_tid = 0x103c [0177.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif")) returned 0x20 [0180.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0180.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.209] GetLastError () returned 0x5 [0180.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0180.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a828) returned 1 Thread: id = 4966 os_tid = 0x1ce4 [0177.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif")) returned 0x20 [0180.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0180.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.205] GetLastError () returned 0x5 [0180.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0180.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86190) returned 1 Thread: id = 4967 os_tid = 0x1d14 [0177.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif")) returned 0x20 [0180.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0180.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.202] GetLastError () returned 0x5 [0180.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0180.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85cb0) returned 1 Thread: id = 4968 os_tid = 0x1a30 [0177.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif")) returned 0x20 [0179.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0179.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.295] GetLastError () returned 0x5 [0179.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0179.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85f20) returned 1 Thread: id = 4969 os_tid = 0x1a34 [0177.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif")) returned 0x20 [0180.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0180.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.287] GetLastError () returned 0x5 [0180.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0180.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37540) returned 1 Thread: id = 4970 os_tid = 0x1a38 [0177.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif")) returned 0x20 [0180.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0180.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.282] GetLastError () returned 0x5 [0180.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0180.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4aa0) returned 1 Thread: id = 4971 os_tid = 0x1d38 [0177.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif")) returned 0x20 [0180.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0180.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.279] GetLastError () returned 0x5 [0180.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0180.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 Thread: id = 4972 os_tid = 0x1a3c [0177.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif")) returned 0x20 [0180.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0180.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.275] GetLastError () returned 0x5 [0180.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0180.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 Thread: id = 4973 os_tid = 0x1a44 [0177.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif")) returned 0x20 [0180.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0180.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.272] GetLastError () returned 0x5 [0180.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0180.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85080) returned 1 Thread: id = 4974 os_tid = 0x1a48 [0177.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif")) returned 0x20 [0180.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0180.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.269] GetLastError () returned 0x5 [0180.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0180.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e382c0) returned 1 Thread: id = 4975 os_tid = 0x1b70 [0177.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif")) returned 0x20 [0180.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0180.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.266] GetLastError () returned 0x5 [0180.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0180.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38110) returned 1 Thread: id = 4976 os_tid = 0x1c14 [0177.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif")) returned 0x20 [0180.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0180.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.263] GetLastError () returned 0x5 [0180.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0180.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 Thread: id = 4977 os_tid = 0x1c4c [0177.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif")) returned 0x20 [0180.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0180.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.260] GetLastError () returned 0x5 [0180.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0180.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d858a0) returned 1 Thread: id = 4978 os_tid = 0x1c70 [0177.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif")) returned 0x20 [0180.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0180.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.256] GetLastError () returned 0x5 [0180.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0180.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38a58) returned 1 Thread: id = 4979 os_tid = 0x1c74 [0177.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif")) returned 0x20 [0180.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0180.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.253] GetLastError () returned 0x5 [0180.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0180.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37cd8) returned 1 Thread: id = 4980 os_tid = 0x1c78 [0177.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif")) returned 0x20 [0180.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif", dwFileAttributes=0x20) returned 0 [0180.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.199] GetLastError () returned 0x5 [0180.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif", dwFileAttributes=0x20) returned 0 [0180.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852f0) returned 1 Thread: id = 4981 os_tid = 0x1cb4 [0177.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif")) returned 0x20 [0180.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0180.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.196] GetLastError () returned 0x5 [0180.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0180.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37030) returned 1 Thread: id = 4982 os_tid = 0x1cc0 [0177.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif")) returned 0x20 [0180.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0180.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.250] GetLastError () returned 0x5 [0180.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0180.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86330) returned 1 Thread: id = 4983 os_tid = 0x1cc8 [0177.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif")) returned 0x20 [0180.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0180.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.247] GetLastError () returned 0x5 [0180.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0180.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16c18) returned 1 Thread: id = 4984 os_tid = 0x1cf0 [0177.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif")) returned 0x20 [0180.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif", dwFileAttributes=0x20) returned 0 [0180.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.219] GetLastError () returned 0x5 [0180.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif", dwFileAttributes=0x20) returned 0 [0180.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86400) returned 1 Thread: id = 4985 os_tid = 0x1cf4 [0177.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif")) returned 0x20 [0180.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0180.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.216] GetLastError () returned 0x5 [0180.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0180.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c91a8) returned 1 Thread: id = 4986 os_tid = 0x1cf8 [0178.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif")) returned 0x20 [0180.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0180.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.194] GetLastError () returned 0x5 [0180.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0180.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3aa80) returned 1 Thread: id = 4987 os_tid = 0x1cfc [0178.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr")) returned 0x20 [0178.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR", dwFileAttributes=0x20) returned 0 [0178.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.037] GetLastError () returned 0x5 [0178.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR", dwFileAttributes=0x20) returned 0 [0178.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 4988 os_tid = 0x1d04 [0178.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr")) returned 0x20 [0178.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR", dwFileAttributes=0x20) returned 0 [0178.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.039] GetLastError () returned 0x5 [0178.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR", dwFileAttributes=0x20) returned 0 [0178.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 4989 os_tid = 0x1d08 [0178.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h")) returned 0x20 [0178.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H", dwFileAttributes=0x20) returned 0 [0178.041] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.041] GetLastError () returned 0x5 [0178.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H", dwFileAttributes=0x20) returned 0 [0178.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 4990 os_tid = 0x1d0c [0178.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v")) returned 0x20 [0178.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V", dwFileAttributes=0x20) returned 0 [0178.042] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.042] GetLastError () returned 0x5 [0178.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V", dwFileAttributes=0x20) returned 0 [0178.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 4991 os_tid = 0x1d10 [0178.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h")) returned 0x20 [0180.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H", dwFileAttributes=0x20) returned 0 [0180.451] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.451] GetLastError () returned 0x5 [0180.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H", dwFileAttributes=0x20) returned 0 [0180.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47518) returned 1 Thread: id = 4992 os_tid = 0x1d18 [0178.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v")) returned 0x20 [0180.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V", dwFileAttributes=0x20) returned 0 [0180.020] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.020] GetLastError () returned 0x5 [0180.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V", dwFileAttributes=0x20) returned 0 [0180.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47398) returned 1 Thread: id = 4993 os_tid = 0x1d1c [0178.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-h")) returned 0x20 [0180.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H", dwFileAttributes=0x20) returned 0 [0180.182] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.182] GetLastError () returned 0x5 [0180.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H", dwFileAttributes=0x20) returned 0 [0180.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47418) returned 1 Thread: id = 4994 os_tid = 0x1d20 [0178.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-v")) returned 0x20 [0180.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V", dwFileAttributes=0x20) returned 0 [0180.418] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\identity-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.418] GetLastError () returned 0x5 [0180.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V", dwFileAttributes=0x20) returned 0 [0180.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48018) returned 1 Thread: id = 4995 os_tid = 0x1d24 [0178.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h")) returned 0x20 [0180.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H", dwFileAttributes=0x20) returned 0 [0180.416] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.416] GetLastError () returned 0x5 [0180.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H", dwFileAttributes=0x20) returned 0 [0180.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47718) returned 1 Thread: id = 4996 os_tid = 0x1d28 [0178.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v")) returned 0x20 [0180.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V", dwFileAttributes=0x20) returned 0 [0180.430] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.430] GetLastError () returned 0x5 [0180.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V", dwFileAttributes=0x20) returned 0 [0180.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46e98) returned 1 Thread: id = 4997 os_tid = 0x1d2c [0178.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h")) returned 0x20 [0180.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H", dwFileAttributes=0x20) returned 0 [0180.449] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.449] GetLastError () returned 0x5 [0180.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H", dwFileAttributes=0x20) returned 0 [0180.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 4998 os_tid = 0x1d30 [0178.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h")) returned 0x20 [0180.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H", dwFileAttributes=0x20) returned 0 [0180.447] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.447] GetLastError () returned 0x5 [0180.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H", dwFileAttributes=0x20) returned 0 [0180.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 4999 os_tid = 0x1d34 [0178.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v")) returned 0x20 [0180.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V", dwFileAttributes=0x20) returned 0 [0180.445] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.445] GetLastError () returned 0x5 [0180.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V", dwFileAttributes=0x20) returned 0 [0180.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 5000 os_tid = 0x1d3c [0178.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2")) returned 0x20 [0180.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2", dwFileAttributes=0x20) returned 0 [0180.443] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.443] GetLastError () returned 0x5 [0180.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2", dwFileAttributes=0x20) returned 0 [0180.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 5001 os_tid = 0x1d68 [0178.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v")) returned 0x20 [0180.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V", dwFileAttributes=0x20) returned 0 [0180.441] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.442] GetLastError () returned 0x5 [0180.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V", dwFileAttributes=0x20) returned 0 [0180.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 5002 os_tid = 0x1d8c [0178.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h")) returned 0x20 [0180.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H", dwFileAttributes=0x20) returned 0 [0180.440] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.440] GetLastError () returned 0x5 [0180.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H", dwFileAttributes=0x20) returned 0 [0180.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 5003 os_tid = 0x1d90 [0178.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2")) returned 0x20 [0180.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0180.438] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.438] GetLastError () returned 0x5 [0180.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2", dwFileAttributes=0x20) returned 0 [0180.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 5004 os_tid = 0x1df4 [0178.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c")) returned 0x20 [0180.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0180.436] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.436] GetLastError () returned 0x5 [0180.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C", dwFileAttributes=0x20) returned 0 [0180.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45c80) returned 1 Thread: id = 5005 os_tid = 0x1df8 [0178.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj")) returned 0x20 [0180.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0180.428] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.428] GetLastError () returned 0x5 [0180.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ", dwFileAttributes=0x20) returned 0 [0180.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 5006 os_tid = 0x1e78 [0178.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj")) returned 0x20 [0180.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0180.434] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.434] GetLastError () returned 0x5 [0180.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ", dwFileAttributes=0x20) returned 0 [0180.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 5007 os_tid = 0x1e7c [0178.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc")) returned 0x20 [0180.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc", dwFileAttributes=0x20) returned 0 [0180.426] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.427] GetLastError () returned 0x5 [0180.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc", dwFileAttributes=0x20) returned 0 [0180.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47d98) returned 1 Thread: id = 5008 os_tid = 0x1e80 [0178.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5")) returned 0x20 [0180.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5", dwFileAttributes=0x20) returned 0 [0180.425] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.425] GetLastError () returned 0x5 [0180.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5", dwFileAttributes=0x20) returned 0 [0180.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 5009 os_tid = 0x1e84 [0178.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc")) returned 0x20 [0180.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC", dwFileAttributes=0x20) returned 0 [0180.423] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.423] GetLastError () returned 0x5 [0180.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC", dwFileAttributes=0x20) returned 0 [0180.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 5010 os_tid = 0x1e8c [0178.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc")) returned 0x20 [0180.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0180.420] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.421] GetLastError () returned 0x5 [0180.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC", dwFileAttributes=0x20) returned 0 [0180.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 5011 os_tid = 0x1e90 [0178.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc")) returned 0x20 [0180.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0180.432] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.432] GetLastError () returned 0x5 [0180.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC", dwFileAttributes=0x20) returned 0 [0180.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 5012 os_tid = 0x1f08 [0178.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif")) returned 0x20 [0180.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF", dwFileAttributes=0x20) returned 0 [0180.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.057] GetLastError () returned 0x5 [0180.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF", dwFileAttributes=0x20) returned 0 [0180.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad64e0) returned 1 Thread: id = 5013 os_tid = 0x1f10 [0178.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif")) returned 0x20 [0180.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF", dwFileAttributes=0x20) returned 0 [0180.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.301] GetLastError () returned 0x5 [0180.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF", dwFileAttributes=0x20) returned 0 [0180.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 Thread: id = 5014 os_tid = 0x1f14 [0178.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif")) returned 0x20 [0180.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF", dwFileAttributes=0x20) returned 0 [0180.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.300] GetLastError () returned 0x5 [0180.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF", dwFileAttributes=0x20) returned 0 [0180.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7150) returned 1 Thread: id = 5015 os_tid = 0x1f2c [0178.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif")) returned 0x20 [0180.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF", dwFileAttributes=0x20) returned 0 [0180.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.298] GetLastError () returned 0x5 [0180.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF", dwFileAttributes=0x20) returned 0 [0180.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb64d8) returned 1 Thread: id = 5016 os_tid = 0x1fac [0178.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif")) returned 0x20 [0180.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF", dwFileAttributes=0x20) returned 0 [0180.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.281] GetLastError () returned 0x5 [0180.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF", dwFileAttributes=0x20) returned 0 [0180.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6280) returned 1 Thread: id = 5017 os_tid = 0x2044 [0178.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif")) returned 0x20 [0180.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF", dwFileAttributes=0x20) returned 0 [0180.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.264] GetLastError () returned 0x5 [0180.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF", dwFileAttributes=0x20) returned 0 [0180.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5b60) returned 1 Thread: id = 5018 os_tid = 0x20c4 [0178.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif")) returned 0x20 [0180.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF", dwFileAttributes=0x20) returned 0 [0180.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.261] GetLastError () returned 0x5 [0180.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF", dwFileAttributes=0x20) returned 0 [0180.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5d28) returned 1 Thread: id = 5019 os_tid = 0x2134 [0178.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif")) returned 0x20 [0180.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF", dwFileAttributes=0x20) returned 0 [0180.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.258] GetLastError () returned 0x5 [0180.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF", dwFileAttributes=0x20) returned 0 [0180.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5900) returned 1 Thread: id = 5020 os_tid = 0x2164 [0178.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif")) returned 0x20 [0180.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF", dwFileAttributes=0x20) returned 0 [0180.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.255] GetLastError () returned 0x5 [0180.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF", dwFileAttributes=0x20) returned 0 [0180.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6448) returned 1 Thread: id = 5021 os_tid = 0x2168 [0178.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif")) returned 0x20 [0180.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF", dwFileAttributes=0x20) returned 0 [0180.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.252] GetLastError () returned 0x5 [0180.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF", dwFileAttributes=0x20) returned 0 [0180.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5c90) returned 1 Thread: id = 5022 os_tid = 0x216c [0178.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif")) returned 0x20 [0180.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF", dwFileAttributes=0x20) returned 0 [0180.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.248] GetLastError () returned 0x5 [0180.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF", dwFileAttributes=0x20) returned 0 [0180.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5ef0) returned 1 Thread: id = 5023 os_tid = 0x2170 [0178.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif")) returned 0x20 [0180.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF", dwFileAttributes=0x20) returned 0 [0180.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.245] GetLastError () returned 0x5 [0180.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF", dwFileAttributes=0x20) returned 0 [0180.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6ad0) returned 1 Thread: id = 5024 os_tid = 0x2174 [0178.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif")) returned 0x20 [0180.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF", dwFileAttributes=0x20) returned 0 [0180.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.217] GetLastError () returned 0x5 [0180.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF", dwFileAttributes=0x20) returned 0 [0180.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5f88) returned 1 Thread: id = 5025 os_tid = 0x2178 [0178.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif")) returned 0x20 [0180.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF", dwFileAttributes=0x20) returned 0 [0180.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.214] GetLastError () returned 0x5 [0180.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF", dwFileAttributes=0x20) returned 0 [0180.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad50b0) returned 1 Thread: id = 5026 os_tid = 0x2180 [0178.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif")) returned 0x20 [0180.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF", dwFileAttributes=0x20) returned 0 [0180.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.211] GetLastError () returned 0x5 [0180.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF", dwFileAttributes=0x20) returned 0 [0180.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad61e8) returned 1 Thread: id = 5027 os_tid = 0x2184 [0178.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x20 [0181.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x20) returned 0 [0181.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.248] GetLastError () returned 0x5 [0181.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x20) returned 0 [0181.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 5028 os_tid = 0x2188 [0178.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x20 [0181.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x20) returned 0 [0181.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.247] GetLastError () returned 0x5 [0181.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x20) returned 0 [0181.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 5029 os_tid = 0x218c [0178.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x20 [0181.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x20) returned 0 [0181.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.218] GetLastError () returned 0x5 [0181.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x20) returned 0 [0181.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 5030 os_tid = 0x21a4 [0178.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x20 [0181.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x20) returned 0 [0181.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.216] GetLastError () returned 0x5 [0181.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x20) returned 0 [0181.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 5031 os_tid = 0x21a8 [0178.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid")) returned 0x20 [0181.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x20) returned 0 [0181.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.221] GetLastError () returned 0x5 [0181.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x20) returned 0 [0181.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 5032 os_tid = 0x22c [0178.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf")) returned 0x20 [0181.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x20) returned 0 [0181.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.246] GetLastError () returned 0x5 [0181.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x20) returned 0 [0181.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 5033 os_tid = 0x2264 [0178.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf")) returned 0x20 [0181.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x20) returned 0 [0181.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.244] GetLastError () returned 0x5 [0181.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x20) returned 0 [0181.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 5034 os_tid = 0x2268 [0178.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf")) returned 0x20 [0181.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x20) returned 0 [0181.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.243] GetLastError () returned 0x5 [0181.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x20) returned 0 [0181.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 5035 os_tid = 0x226c [0178.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf")) returned 0x20 [0181.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x20) returned 0 [0181.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.242] GetLastError () returned 0x5 [0181.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x20) returned 0 [0181.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c98) returned 1 Thread: id = 5036 os_tid = 0x2270 [0178.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x20 [0181.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x20) returned 0 [0181.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.240] GetLastError () returned 0x5 [0181.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x20) returned 0 [0181.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 5037 os_tid = 0x2274 [0178.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf")) returned 0x20 [0181.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x20) returned 0 [0181.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.239] GetLastError () returned 0x5 [0181.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x20) returned 0 [0181.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 5038 os_tid = 0x2278 [0178.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf")) returned 0x20 [0181.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x20) returned 0 [0181.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.238] GetLastError () returned 0x5 [0181.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x20) returned 0 [0181.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 5039 os_tid = 0x227c [0178.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf")) returned 0x20 [0181.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x20) returned 0 [0181.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.237] GetLastError () returned 0x5 [0181.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x20) returned 0 [0181.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f98) returned 1 Thread: id = 5040 os_tid = 0x2284 [0178.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf")) returned 0x20 [0181.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x20) returned 0 [0181.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.235] GetLastError () returned 0x5 [0181.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x20) returned 0 [0181.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 5041 os_tid = 0x2288 [0178.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x20 [0181.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x20) returned 0 [0181.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.234] GetLastError () returned 0x5 [0181.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x20) returned 0 [0181.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 5042 os_tid = 0x228c [0178.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x20 [0181.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x20) returned 0 [0181.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.198] GetLastError () returned 0x5 [0181.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x20) returned 0 [0181.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 5043 os_tid = 0x2290 [0178.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x20 [0181.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x20) returned 0 [0181.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.196] GetLastError () returned 0x5 [0181.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x20) returned 0 [0181.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 5044 os_tid = 0x2294 [0178.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x20 [0181.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x20) returned 0 [0181.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.222] GetLastError () returned 0x5 [0181.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x20) returned 0 [0181.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 5045 os_tid = 0x2298 [0178.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x20 [0181.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x20) returned 0 [0181.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.195] GetLastError () returned 0x5 [0181.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x20) returned 0 [0181.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 5046 os_tid = 0x229c [0178.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x20 [0181.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x20) returned 0 [0181.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.219] GetLastError () returned 0x5 [0181.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x20) returned 0 [0181.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 5047 os_tid = 0x22a0 [0178.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x20 [0181.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x20) returned 0 [0181.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.194] GetLastError () returned 0x5 [0181.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x20) returned 0 [0181.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 5048 os_tid = 0x22b0 [0178.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x20 [0181.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x20) returned 0 [0181.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.205] GetLastError () returned 0x5 [0181.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x20) returned 0 [0181.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 5049 os_tid = 0x22d0 [0178.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif")) returned 0x20 [0180.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0180.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.191] GetLastError () returned 0x5 [0180.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0180.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a760) returned 1 Thread: id = 5050 os_tid = 0x22d4 [0178.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif")) returned 0x20 [0180.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0180.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.188] GetLastError () returned 0x5 [0180.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0180.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a698) returned 1 Thread: id = 5051 os_tid = 0x22dc [0178.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js")) returned 0x20 [0180.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS", dwFileAttributes=0x20) returned 0 [0180.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.185] GetLastError () returned 0x5 [0180.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS", dwFileAttributes=0x20) returned 0 [0180.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 5052 os_tid = 0x22e4 [0178.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html")) returned 0x20 [0180.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0180.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.208] GetLastError () returned 0x5 [0180.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0180.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16b40) returned 1 Thread: id = 5053 os_tid = 0x22e8 [0178.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls")) returned 0x20 [0178.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS", dwFileAttributes=0x20) returned 0 [0178.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.368] GetLastError () returned 0x5 [0178.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS", dwFileAttributes=0x20) returned 0 [0178.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062a10) returned 1 Thread: id = 5054 os_tid = 0x22ec [0178.369] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol")) returned 0x2020 [0178.370] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", dwFileAttributes=0x20) returned 1 [0182.128] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x128c [0182.129] GetFileSizeEx (in: hFile=0x128c, lpFileSize=0xcf6fa0c | out: lpFileSize=0xcf6fa0c*=291) returned 1 [0182.129] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x11f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.129] ReadFile (in: hFile=0x128c, lpBuffer=0xcf6f9e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcf6f9f8, lpOverlapped=0x0 | out: lpBuffer=0xcf6f9e8*, lpNumberOfBytesRead=0xcf6f9f8*=0x4, lpOverlapped=0x0) returned 1 [0182.131] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0182.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0182.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0182.131] NtQuerySystemTime (in: CurrentTime=0xcf6f980 | out: CurrentTime=0xcf6f980*=132462177607092000) returned 0x0 [0182.131] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x54fd56c9 [0182.131] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x67ee32d3 [0182.131] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x7c968be6 [0182.131] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x4eff7a1f [0182.131] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x35524581 [0182.131] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x74a84d7b [0182.131] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x2a8f04a [0182.131] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x57f3ea09 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x381b9f8b [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0xe0ec7f6 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x59825dca [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x1a30f4da [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x15da21ce [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x767525fb [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x4269a0a4 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x468efc03 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0xe9a9a05 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x39c8e3dc [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x570ce9ed [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x35adba70 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x1192148c [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x7377adf4 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x6df47bff [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x2775a0ef [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x2812cceb [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x4a4d63c3 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x67fd12e8 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x7ecebab4 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x5968f11c [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x48feb886 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x16a28725 [0182.132] RtlRandomEx (in: Seed=0xcf6f978 | out: Seed=0xcf6f978) returned 0x1656db42 [0182.144] ReadFile (in: hFile=0x128c, lpBuffer=0x7ac7cd8, nNumberOfBytesToRead=0x123, lpNumberOfBytesRead=0xcf6f974, lpOverlapped=0x0 | out: lpBuffer=0x7ac7cd8*, lpNumberOfBytesRead=0xcf6f974*=0x123, lpOverlapped=0x0) returned 1 [0182.144] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.144] WriteFile (in: hFile=0x128c, lpBuffer=0x7acb8e0*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0xcf6f978, lpOverlapped=0x0 | out: lpBuffer=0x7acb8e0*, lpNumberOfBytesWritten=0xcf6f978*=0x123, lpOverlapped=0x0) returned 1 [0182.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0182.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0182.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0182.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acb8e0) returned 1 [0182.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac7cd8) returned 1 [0182.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3efc0) returned 1 [0182.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be1c0) returned 1 [0182.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a374d0 [0182.248] SetFilePointerEx (in: hFile=0x128c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.248] WriteFile (in: hFile=0x128c, lpBuffer=0x7a384d0*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xcf6fa00, lpOverlapped=0x0 | out: lpBuffer=0x7a384d0*, lpNumberOfBytesWritten=0xcf6fa00*=0x10a, lpOverlapped=0x0) returned 1 [0182.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be250 [0182.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0182.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0182.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0182.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x18) returned 0x3e810a0 [0182.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0182.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0182.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0182.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0182.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0182.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x31) returned 0x3dcf990 [0182.304] sprintf (in: _Dest=0x3dcf990, _Format="%c%c" | out: _Dest="bc") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf992, _Format="%c%c" | out: _Dest="93") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf994, _Format="%c%c" | out: _Dest="44") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf996, _Format="%c%c" | out: _Dest="ee") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf998, _Format="%c%c" | out: _Dest="c3") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf99a, _Format="%c%c" | out: _Dest="ba") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf99c, _Format="%c%c" | out: _Dest="ee") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf99e, _Format="%c%c" | out: _Dest="ee") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9a0, _Format="%c%c" | out: _Dest="42") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9a2, _Format="%c%c" | out: _Dest="c2") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9a4, _Format="%c%c" | out: _Dest="06") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9a6, _Format="%c%c" | out: _Dest="06") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9a8, _Format="%c%c" | out: _Dest="af") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9aa, _Format="%c%c" | out: _Dest="e9") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9ac, _Format="%c%c" | out: _Dest="f0") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9ae, _Format="%c%c" | out: _Dest="a0") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9b0, _Format="%c%c" | out: _Dest="12") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9b2, _Format="%c%c" | out: _Dest="4d") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9b4, _Format="%c%c" | out: _Dest="8b") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9b6, _Format="%c%c" | out: _Dest="5f") returned 2 [0182.304] sprintf (in: _Dest=0x3dcf9b8, _Format="%c%c" | out: _Dest="c6") returned 2 [0182.305] sprintf (in: _Dest=0x3dcf9ba, _Format="%c%c" | out: _Dest="55") returned 2 [0182.305] sprintf (in: _Dest=0x3dcf9bc, _Format="%c%c" | out: _Dest="ac") returned 2 [0182.305] sprintf (in: _Dest=0x3dcf9be, _Format="%c%c" | out: _Dest="02") returned 2 [0182.305] RtlInitAnsiString (in: DestinationString=0xcf6f988, SourceString="bc9344eec3baeeee42c20606afe9f0a0124d8b5fc655ac02" | out: DestinationString="bc9344eec3baeeee42c20606afe9f0a0124d8b5fc655ac02") [0182.305] RtlAnsiStringToUnicodeString (in: DestinationString=0xcf6f980, SourceString="bc9344eec3baeeee42c20606afe9f0a0124d8b5fc655ac02", AllocateDestinationString=1 | out: DestinationString="bc9344eec3baeeee42c20606afe9f0a0124d8b5fc655ac02") returned 0x0 [0182.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x7a235a0 [0182.305] wcscat (in: _Dest=0x3db0708, _Source="bc9344eec3ba" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\bc9344eec3ba") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\bc9344eec3ba" [0182.305] wcscat (in: _Dest=0x3db0708, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\bc9344eec3ba.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\bc9344eec3ba.68814f" [0182.305] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\bc9344eec3ba.68814f", NtPathName=0xcf6f978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\bc9344eec3ba.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bc868 [0182.319] FlushFileBuffers (hFile=0x128c) returned 1 [0183.586] CloseHandle (hObject=0x128c) returned 1 [0184.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3daff88 [0184.543] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\" [0184.543] wcscat (in: _Dest=0x3daff88, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\68814F-Readme.txt" [0184.543] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\68814f-readme.txt")) returned 0xffffffff [0184.544] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1890 [0184.659] WriteFile (in: hFile=0x1890, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcf6f994, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcf6f994*=0x8b9, lpOverlapped=0x0) returned 1 [0184.661] CloseHandle (hObject=0x1890) returned 1 [0184.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff88) returned 1 [0184.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4618) returned 1 Thread: id = 5055 os_tid = 0x22f8 [0178.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml")) returned 0x20 [0179.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", dwFileAttributes=0x20) returned 0 [0179.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.908] GetLastError () returned 0x5 [0179.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", dwFileAttributes=0x20) returned 0 [0179.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 5056 os_tid = 0x22fc [0178.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd")) returned 0x20 [0180.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd", dwFileAttributes=0x20) returned 0 [0180.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.538] GetLastError () returned 0x5 [0180.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd", dwFileAttributes=0x20) returned 0 [0180.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6318) returned 1 Thread: id = 5057 os_tid = 0x1ef8 [0178.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini")) returned 0x20 [0179.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini", dwFileAttributes=0x20) returned 0 [0179.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.909] GetLastError () returned 0x5 [0179.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini", dwFileAttributes=0x20) returned 0 [0179.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad53a8) returned 1 Thread: id = 5058 os_tid = 0x1efc [0178.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd")) returned 0x20 [0180.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd", dwFileAttributes=0x20) returned 0 [0180.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.546] GetLastError () returned 0x5 [0180.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd", dwFileAttributes=0x20) returned 0 [0180.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62ef0) returned 1 Thread: id = 5059 os_tid = 0x24cc [0178.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd")) returned 0x20 [0180.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd", dwFileAttributes=0x20) returned 0 [0180.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.549] GetLastError () returned 0x5 [0180.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd", dwFileAttributes=0x20) returned 0 [0180.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 5060 os_tid = 0x24d0 [0178.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg")) returned 0x20 [0178.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg", dwFileAttributes=0x20) returned 0 [0178.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.375] GetLastError () returned 0x5 [0178.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg", dwFileAttributes=0x20) returned 0 [0178.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 Thread: id = 5061 os_tid = 0x24e4 [0178.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp")) returned 0x20 [0180.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp", dwFileAttributes=0x20) returned 0 [0180.121] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.121] GetLastError () returned 0x5 [0180.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp", dwFileAttributes=0x20) returned 0 [0180.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 5062 os_tid = 0x24e8 [0178.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx")) returned 0x20 [0180.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx", dwFileAttributes=0x20) returned 0 [0180.118] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.118] GetLastError () returned 0x5 [0180.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx", dwFileAttributes=0x20) returned 0 [0180.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3332e8) returned 1 Thread: id = 5063 os_tid = 0x24ec [0178.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths")) returned 0x20 [0180.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths", dwFileAttributes=0x20) returned 0 [0180.116] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.116] GetLastError () returned 0x5 [0180.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths", dwFileAttributes=0x20) returned 0 [0180.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 5064 os_tid = 0x24f4 [0178.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca")) returned 0x20 [0180.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca", dwFileAttributes=0x20) returned 0 [0180.113] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.113] GetLastError () returned 0x5 [0180.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca", dwFileAttributes=0x20) returned 0 [0180.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 5065 os_tid = 0x24f8 [0178.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp")) returned 0x20 [0180.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp", dwFileAttributes=0x20) returned 0 [0180.110] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.110] GetLastError () returned 0x5 [0180.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp", dwFileAttributes=0x20) returned 0 [0180.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 5066 os_tid = 0x24fc [0178.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx")) returned 0x20 [0180.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx", dwFileAttributes=0x20) returned 0 [0180.107] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.107] GetLastError () returned 0x5 [0180.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx", dwFileAttributes=0x20) returned 0 [0180.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 5067 os_tid = 0x2500 [0178.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp")) returned 0x20 [0180.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp", dwFileAttributes=0x20) returned 0 [0180.102] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.102] GetLastError () returned 0x5 [0180.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp", dwFileAttributes=0x20) returned 0 [0180.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 Thread: id = 5068 os_tid = 0x2504 [0178.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths")) returned 0x20 [0180.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths", dwFileAttributes=0x20) returned 0 [0180.104] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.105] GetLastError () returned 0x5 [0180.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths", dwFileAttributes=0x20) returned 0 [0180.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333b28) returned 1 Thread: id = 5069 os_tid = 0x2508 [0178.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg")) returned 0x20 [0178.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", dwFileAttributes=0x20) returned 0 [0178.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.382] GetLastError () returned 0x5 [0178.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", dwFileAttributes=0x20) returned 0 [0178.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ff0) returned 1 Thread: id = 5070 os_tid = 0x250c [0178.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp")) returned 0x20 [0179.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0180.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.841] GetLastError () returned 0x5 [0181.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0183.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18130) returned 1 Thread: id = 5071 os_tid = 0x2510 [0178.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0178.384] wcscpy (in: _Dest=0x3f3fec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033" [0178.384] wcscat (in: _Dest=0x3f3fec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\" [0178.384] wcscat (in: _Dest=0x3f3fec0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*" [0178.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0178.384] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51037b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x51037b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51037b90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73470 [0179.919] wcscmp (_String1=".", _String2=".") returned 0 [0179.919] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51037b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x51037b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x51037b90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.920] wcscmp (_String1="..", _String2=".") returned 1 [0179.920] wcscmp (_String1="..", _String2="..") returned 0 [0179.920] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088b800, ftCreationTime.dwHighDateTime=0x1ca5efc, ftLastAccessTime.dwLowDateTime=0x51083e50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb088b800, ftLastWriteTime.dwHighDateTime=0x1ca5efc, nFileSizeHigh=0x0, nFileSizeLow=0x310750, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 1 [0179.920] wcscmp (_String1="MSGR3EN.DLL", _String2=".") returned 1 [0179.920] wcscmp (_String1="MSGR3EN.DLL", _String2="..") returned 1 [0179.920] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088b800, ftCreationTime.dwHighDateTime=0x1ca5efc, ftLastAccessTime.dwLowDateTime=0x51083e50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb088b800, ftLastWriteTime.dwHighDateTime=0x1ca5efc, nFileSizeHigh=0x0, nFileSizeLow=0x310750, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3EN.DLL", cAlternateFileName="")) returned 0 [0179.920] FindClose (in: hFindFile=0x3e73470 | out: hFindFile=0x3e73470) returned 1 [0179.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0179.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0179.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 Thread: id = 5072 os_tid = 0x2514 [0178.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f470 [0178.386] wcscpy (in: _Dest=0x3f3f470, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036" [0178.386] wcscat (in: _Dest=0x3f3f470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\" [0178.386] wcscat (in: _Dest=0x3f3f470, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*" [0178.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0178.387] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc970910, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xdc970910, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdc970910, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741b0 [0180.148] wcscmp (_String1=".", _String2=".") returned 0 [0180.148] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc970910, ftCreationTime.dwHighDateTime=0x1d3022d, ftLastAccessTime.dwLowDateTime=0xdc970910, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xdc970910, ftLastWriteTime.dwHighDateTime=0x1d3022d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.148] wcscmp (_String1="..", _String2=".") returned 1 [0180.148] wcscmp (_String1="..", _String2="..") returned 0 [0180.148] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa867400, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdca2eff0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xaa867400, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0xa79990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 1 [0180.148] wcscmp (_String1="MSGR3FR.DLL", _String2=".") returned 1 [0180.148] wcscmp (_String1="MSGR3FR.DLL", _String2="..") returned 1 [0180.148] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa867400, ftCreationTime.dwHighDateTime=0x1cba0c9, ftLastAccessTime.dwLowDateTime=0xdca2eff0, ftLastAccessTime.dwHighDateTime=0x1d3022d, ftLastWriteTime.dwLowDateTime=0xaa867400, ftLastWriteTime.dwHighDateTime=0x1cba0c9, nFileSizeHigh=0x0, nFileSizeLow=0xa79990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3FR.DLL", cAlternateFileName="")) returned 0 [0180.148] FindClose (in: hFindFile=0x3e741b0 | out: hFindFile=0x3e741b0) returned 1 [0180.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0180.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0180.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 Thread: id = 5073 os_tid = 0x2518 [0178.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fce0 [0178.387] wcscpy (in: _Dest=0x3f3fce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082" [0178.387] wcscat (in: _Dest=0x3f3fce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\" [0178.387] wcscat (in: _Dest=0x3f3fce0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*" [0178.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0178.387] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b9ede10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4b9ede10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b9ede10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741b0 [0180.146] wcscmp (_String1=".", _String2=".") returned 0 [0180.146] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b9ede10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x4b9ede10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4b9ede10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.146] wcscmp (_String1="..", _String2=".") returned 1 [0180.146] wcscmp (_String1="..", _String2="..") returned 0 [0180.146] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fa4600, ftCreationTime.dwHighDateTime=0x1ca5f02, ftLastAccessTime.dwLowDateTime=0x4ba13f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14fa4600, ftLastWriteTime.dwHighDateTime=0x1ca5f02, nFileSizeHigh=0x0, nFileSizeLow=0x11b748, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 1 [0180.146] wcscmp (_String1="MSGR3ES.DLL", _String2=".") returned 1 [0180.146] wcscmp (_String1="MSGR3ES.DLL", _String2="..") returned 1 [0180.146] FindNextFileW (in: hFindFile=0x3e741b0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fa4600, ftCreationTime.dwHighDateTime=0x1ca5f02, ftLastAccessTime.dwLowDateTime=0x4ba13f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x14fa4600, ftLastWriteTime.dwHighDateTime=0x1ca5f02, nFileSizeHigh=0x0, nFileSizeLow=0x11b748, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR3ES.DLL", cAlternateFileName="")) returned 0 [0180.146] FindClose (in: hFindFile=0x3e741b0 | out: hFindFile=0x3e741b0) returned 1 [0180.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0180.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0180.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 Thread: id = 5074 os_tid = 0x251c [0178.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex")) returned 0x20 [0180.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX", dwFileAttributes=0x20) returned 0 [0180.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.178] GetLastError () returned 0x5 [0180.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX", dwFileAttributes=0x20) returned 0 [0180.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 5075 os_tid = 0x2520 [0178.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex")) returned 0x20 [0180.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX", dwFileAttributes=0x20) returned 0 [0180.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.159] GetLastError () returned 0x5 [0180.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX", dwFileAttributes=0x20) returned 0 [0180.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 5076 os_tid = 0x2524 [0178.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex")) returned 0x20 [0180.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX", dwFileAttributes=0x20) returned 0 [0180.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.154] GetLastError () returned 0x5 [0180.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX", dwFileAttributes=0x20) returned 0 [0180.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 Thread: id = 5077 os_tid = 0x2528 [0178.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex")) returned 0x20 [0180.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX", dwFileAttributes=0x20) returned 0 [0180.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.152] GetLastError () returned 0x5 [0180.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX", dwFileAttributes=0x20) returned 0 [0180.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d060) returned 1 Thread: id = 5078 os_tid = 0x252c [0178.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex")) returned 0x20 [0180.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX", dwFileAttributes=0x20) returned 0 [0180.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.151] GetLastError () returned 0x5 [0180.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX", dwFileAttributes=0x20) returned 0 [0180.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 5079 os_tid = 0x2530 [0178.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex")) returned 0x20 [0180.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX", dwFileAttributes=0x20) returned 0 [0180.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.157] GetLastError () returned 0x5 [0180.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX", dwFileAttributes=0x20) returned 0 [0180.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 5080 os_tid = 0x1fbc [0178.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub")) returned 0x20 [0180.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub", dwFileAttributes=0x20) returned 0 [0180.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.156] GetLastError () returned 0x5 [0180.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub", dwFileAttributes=0x20) returned 0 [0180.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 5081 os_tid = 0x1fc0 [0178.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex")) returned 0x20 [0180.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX", dwFileAttributes=0x20) returned 0 [0180.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.149] GetLastError () returned 0x5 [0180.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX", dwFileAttributes=0x20) returned 0 [0180.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 5082 os_tid = 0x1fc4 [0178.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub")) returned 0x20 [0180.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub", dwFileAttributes=0x20) returned 0 [0180.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.155] GetLastError () returned 0x5 [0180.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub", dwFileAttributes=0x20) returned 0 [0180.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 5083 os_tid = 0x1fc8 [0178.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex")) returned 0x20 [0180.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX", dwFileAttributes=0x20) returned 0 [0180.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.145] GetLastError () returned 0x5 [0180.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX", dwFileAttributes=0x20) returned 0 [0180.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f3e0) returned 1 Thread: id = 5084 os_tid = 0x1fd0 [0178.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub")) returned 0x20 [0179.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub", dwFileAttributes=0x20) returned 0 [0179.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.267] GetLastError () returned 0x5 [0179.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub", dwFileAttributes=0x20) returned 0 [0179.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 5085 os_tid = 0x201c [0178.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex")) returned 0x20 [0180.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX", dwFileAttributes=0x20) returned 0 [0180.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.165] GetLastError () returned 0x5 [0180.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX", dwFileAttributes=0x20) returned 0 [0180.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 5086 os_tid = 0x2038 [0178.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex")) returned 0x20 [0180.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX", dwFileAttributes=0x20) returned 0 [0180.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.163] GetLastError () returned 0x5 [0180.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX", dwFileAttributes=0x20) returned 0 [0180.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 5087 os_tid = 0x2618 [0178.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex")) returned 0x20 [0180.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX", dwFileAttributes=0x20) returned 0 [0180.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.162] GetLastError () returned 0x5 [0180.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX", dwFileAttributes=0x20) returned 0 [0180.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 5088 os_tid = 0x2628 [0178.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex")) returned 0x20 [0180.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX", dwFileAttributes=0x20) returned 0 [0180.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.160] GetLastError () returned 0x5 [0180.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX", dwFileAttributes=0x20) returned 0 [0180.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 5089 os_tid = 0x262c [0178.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy")) returned 0x20 [0178.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy", dwFileAttributes=0x20) returned 0 [0178.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.410] GetLastError () returned 0x5 [0178.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy", dwFileAttributes=0x20) returned 0 [0178.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56498) returned 1 Thread: id = 5090 os_tid = 0x2630 [0178.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy")) returned 0x20 [0178.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy", dwFileAttributes=0x20) returned 0 [0178.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.427] GetLastError () returned 0x5 [0178.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy", dwFileAttributes=0x20) returned 0 [0178.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d567b8) returned 1 Thread: id = 5091 os_tid = 0x5d8 [0178.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy")) returned 0x20 [0178.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy", dwFileAttributes=0x20) returned 0 [0178.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.443] GetLastError () returned 0x5 [0178.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy", dwFileAttributes=0x20) returned 0 [0178.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a10) returned 1 Thread: id = 5092 os_tid = 0x2654 [0178.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml")) returned 0x20 [0180.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML", dwFileAttributes=0x20) returned 0 [0180.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.555] GetLastError () returned 0x5 [0180.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML", dwFileAttributes=0x20) returned 0 [0180.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45f50) returned 1 Thread: id = 5093 os_tid = 0x265c [0178.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml")) returned 0x20 [0180.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML", dwFileAttributes=0x20) returned 0 [0180.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.557] GetLastError () returned 0x5 [0180.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML", dwFileAttributes=0x20) returned 0 [0180.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45800) returned 1 Thread: id = 5094 os_tid = 0x205c [0178.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml")) returned 0x20 [0180.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML", dwFileAttributes=0x20) returned 0 [0180.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.593] GetLastError () returned 0x5 [0180.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML", dwFileAttributes=0x20) returned 0 [0180.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44b10) returned 1 Thread: id = 5095 os_tid = 0x2660 [0178.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml")) returned 0x20 [0180.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML", dwFileAttributes=0x20) returned 0 [0180.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.595] GetLastError () returned 0x5 [0180.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML", dwFileAttributes=0x20) returned 0 [0180.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44450) returned 1 Thread: id = 5096 os_tid = 0x8fc [0178.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml")) returned 0x20 [0180.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML", dwFileAttributes=0x20) returned 0 [0180.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.559] GetLastError () returned 0x5 [0180.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML", dwFileAttributes=0x20) returned 0 [0180.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d448d0) returned 1 Thread: id = 5097 os_tid = 0x131c [0178.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml")) returned 0x20 [0180.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML", dwFileAttributes=0x20) returned 0 [0180.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.561] GetLastError () returned 0x5 [0180.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML", dwFileAttributes=0x20) returned 0 [0180.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44060) returned 1 Thread: id = 5098 os_tid = 0x1458 [0178.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml")) returned 0x20 [0180.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML", dwFileAttributes=0x20) returned 0 [0180.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.597] GetLastError () returned 0x5 [0180.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML", dwFileAttributes=0x20) returned 0 [0180.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45b60) returned 1 Thread: id = 5099 os_tid = 0x1484 [0178.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml")) returned 0x20 [0180.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML", dwFileAttributes=0x20) returned 0 [0180.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.563] GetLastError () returned 0x5 [0180.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML", dwFileAttributes=0x20) returned 0 [0180.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d447b0) returned 1 Thread: id = 5100 os_tid = 0x16b0 [0178.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml")) returned 0x20 [0180.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML", dwFileAttributes=0x20) returned 0 [0180.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.565] GetLastError () returned 0x5 [0180.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML", dwFileAttributes=0x20) returned 0 [0180.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44cc0) returned 1 Thread: id = 5101 os_tid = 0x2078 [0178.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml")) returned 0x20 [0180.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML", dwFileAttributes=0x20) returned 0 [0180.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.599] GetLastError () returned 0x5 [0180.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML", dwFileAttributes=0x20) returned 0 [0180.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f00) returned 1 Thread: id = 5102 os_tid = 0x20a4 [0178.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml")) returned 0x20 [0180.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML", dwFileAttributes=0x20) returned 0 [0180.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.567] GetLastError () returned 0x5 [0180.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML", dwFileAttributes=0x20) returned 0 [0180.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44ba0) returned 1 Thread: id = 5103 os_tid = 0x20ac [0178.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml")) returned 0x20 [0180.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML", dwFileAttributes=0x20) returned 0 [0180.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.601] GetLastError () returned 0x5 [0180.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML", dwFileAttributes=0x20) returned 0 [0180.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45d10) returned 1 Thread: id = 5104 os_tid = 0x20b0 [0178.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml")) returned 0x20 [0180.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML", dwFileAttributes=0x20) returned 0 [0180.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.603] GetLastError () returned 0x5 [0180.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML", dwFileAttributes=0x20) returned 0 [0180.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44960) returned 1 Thread: id = 5105 os_tid = 0x1eb0 [0178.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml")) returned 0x20 [0180.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML", dwFileAttributes=0x20) returned 0 [0180.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.605] GetLastError () returned 0x5 [0180.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML", dwFileAttributes=0x20) returned 0 [0180.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d451d0) returned 1 Thread: id = 5106 os_tid = 0x1eb4 [0178.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml")) returned 0x20 [0180.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML", dwFileAttributes=0x20) returned 0 [0180.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.608] GetLastError () returned 0x5 [0180.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML", dwFileAttributes=0x20) returned 0 [0180.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 5107 os_tid = 0x2148 [0178.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml")) returned 0x20 [0180.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML", dwFileAttributes=0x20) returned 0 [0180.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.569] GetLastError () returned 0x5 [0180.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML", dwFileAttributes=0x20) returned 0 [0180.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d449f0) returned 1 Thread: id = 5108 os_tid = 0x2150 [0178.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml")) returned 0x20 [0180.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML", dwFileAttributes=0x20) returned 0 [0180.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.571] GetLastError () returned 0x5 [0180.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML", dwFileAttributes=0x20) returned 0 [0180.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45da0) returned 1 Thread: id = 5109 os_tid = 0x2154 [0178.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml")) returned 0x20 [0180.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML", dwFileAttributes=0x20) returned 0 [0180.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.574] GetLastError () returned 0x5 [0180.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML", dwFileAttributes=0x20) returned 0 [0180.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45380) returned 1 Thread: id = 5110 os_tid = 0x2160 [0178.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml")) returned 0x20 [0180.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML", dwFileAttributes=0x20) returned 0 [0180.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.577] GetLastError () returned 0x5 [0180.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML", dwFileAttributes=0x20) returned 0 [0180.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44330) returned 1 Thread: id = 5111 os_tid = 0x1e50 [0178.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml")) returned 0x20 [0180.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML", dwFileAttributes=0x20) returned 0 [0180.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.610] GetLastError () returned 0x5 [0180.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML", dwFileAttributes=0x20) returned 0 [0180.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 5112 os_tid = 0xf50 [0178.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml")) returned 0x20 [0180.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML", dwFileAttributes=0x20) returned 0 [0180.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.612] GetLastError () returned 0x5 [0180.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML", dwFileAttributes=0x20) returned 0 [0180.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 5113 os_tid = 0x1fd4 [0178.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml")) returned 0x20 [0180.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML", dwFileAttributes=0x20) returned 0 [0180.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.579] GetLastError () returned 0x5 [0180.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML", dwFileAttributes=0x20) returned 0 [0180.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d443c0) returned 1 Thread: id = 5114 os_tid = 0x1fd8 [0178.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml")) returned 0x20 [0180.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML", dwFileAttributes=0x20) returned 0 [0180.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.614] GetLastError () returned 0x5 [0180.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML", dwFileAttributes=0x20) returned 0 [0180.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 5115 os_tid = 0x1fdc [0178.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml")) returned 0x20 [0180.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML", dwFileAttributes=0x20) returned 0 [0180.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.581] GetLastError () returned 0x5 [0180.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML", dwFileAttributes=0x20) returned 0 [0180.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d459b0) returned 1 Thread: id = 5116 os_tid = 0x1fe0 [0178.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml")) returned 0x20 [0180.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML", dwFileAttributes=0x20) returned 0 [0180.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.583] GetLastError () returned 0x5 [0180.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML", dwFileAttributes=0x20) returned 0 [0180.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44720) returned 1 Thread: id = 5117 os_tid = 0x1fe4 [0178.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml")) returned 0x20 [0180.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML", dwFileAttributes=0x20) returned 0 [0180.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.585] GetLastError () returned 0x5 [0180.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML", dwFileAttributes=0x20) returned 0 [0180.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44840) returned 1 Thread: id = 5118 os_tid = 0x1fe8 [0178.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml")) returned 0x20 [0180.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML", dwFileAttributes=0x20) returned 0 [0180.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.587] GetLastError () returned 0x5 [0180.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML", dwFileAttributes=0x20) returned 0 [0180.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44600) returned 1 Thread: id = 5119 os_tid = 0x1fec [0178.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml")) returned 0x20 [0180.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML", dwFileAttributes=0x20) returned 0 [0180.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.589] GetLastError () returned 0x5 [0180.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML", dwFileAttributes=0x20) returned 0 [0180.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45260) returned 1 Thread: id = 5120 os_tid = 0x1ff0 [0178.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml")) returned 0x20 [0180.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML", dwFileAttributes=0x20) returned 0 [0180.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.620] GetLastError () returned 0x5 [0180.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML", dwFileAttributes=0x20) returned 0 [0180.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 5121 os_tid = 0x1ff4 [0178.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg")) returned 0x20 [0181.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0181.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.123] GetLastError () returned 0x5 [0181.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg", dwFileAttributes=0x20) returned 0 [0181.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 5122 os_tid = 0x1ff8 [0178.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp")) returned 0x20 [0180.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0180.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.124] GetLastError () returned 0x5 [0181.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0181.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0168) returned 1 Thread: id = 5123 os_tid = 0x2228 [0178.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif")) returned 0x20 [0180.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF", dwFileAttributes=0x20) returned 0 [0180.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.206] GetLastError () returned 0x5 [0180.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF", dwFileAttributes=0x20) returned 0 [0180.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5a30) returned 1 Thread: id = 5124 os_tid = 0x1ffc [0178.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif")) returned 0x20 [0180.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF", dwFileAttributes=0x20) returned 0 [0180.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.204] GetLastError () returned 0x5 [0180.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF", dwFileAttributes=0x20) returned 0 [0180.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5278) returned 1 Thread: id = 5125 os_tid = 0x80c [0178.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif")) returned 0x20 [0180.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF", dwFileAttributes=0x20) returned 0 [0180.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.201] GetLastError () returned 0x5 [0180.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF", dwFileAttributes=0x20) returned 0 [0180.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5738) returned 1 Thread: id = 5126 os_tid = 0xff8 [0178.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif")) returned 0x20 [0180.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF", dwFileAttributes=0x20) returned 0 [0180.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.198] GetLastError () returned 0x5 [0180.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF", dwFileAttributes=0x20) returned 0 [0180.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad67d8) returned 1 Thread: id = 5127 os_tid = 0x2700 [0178.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif")) returned 0x20 [0180.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF", dwFileAttributes=0x20) returned 0 [0180.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.195] GetLastError () returned 0x5 [0180.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF", dwFileAttributes=0x20) returned 0 [0180.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6870) returned 1 Thread: id = 5128 os_tid = 0x64c [0178.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd")) returned 0x20 [0181.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", dwFileAttributes=0x20) returned 0 [0181.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.847] GetLastError () returned 0x5 [0181.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD", dwFileAttributes=0x20) returned 0 [0181.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47318) returned 1 Thread: id = 5129 os_tid = 0x2004 [0178.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs")) returned 0x20 [0183.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS", dwFileAttributes=0x20) returned 0 [0183.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.020] GetLastError () returned 0x5 [0183.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS", dwFileAttributes=0x20) returned 0 [0183.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 Thread: id = 5130 os_tid = 0x2008 [0178.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc")) returned 0x20 [0183.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.018] GetLastError () returned 0x5 [0183.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5868) returned 1 Thread: id = 5131 os_tid = 0x200c [0178.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt")) returned 0x20 [0183.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.016] GetLastError () returned 0x5 [0183.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5440) returned 1 Thread: id = 5132 os_tid = 0x2020 [0178.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk")) returned 0x20 [0183.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.014] GetLastError () returned 0x5 [0183.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5e58) returned 1 Thread: id = 5133 os_tid = 0x2028 [0178.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk")) returned 0x20 [0183.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.012] GetLastError () returned 0x5 [0183.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5570) returned 1 Thread: id = 5134 os_tid = 0x2030 [0178.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs")) returned 0x20 [0183.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS", dwFileAttributes=0x20) returned 0 [0183.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.011] GetLastError () returned 0x5 [0183.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS", dwFileAttributes=0x20) returned 0 [0183.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062a10) returned 1 Thread: id = 5135 os_tid = 0x2050 [0178.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc")) returned 0x20 [0183.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.009] GetLastError () returned 0x5 [0183.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC", dwFileAttributes=0x20) returned 0 [0183.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 5136 os_tid = 0x2060 [0178.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt")) returned 0x20 [0183.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.008] GetLastError () returned 0x5 [0183.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 Thread: id = 5137 os_tid = 0x20a0 [0178.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk")) returned 0x20 [0184.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.109] GetLastError () returned 0x5 [0184.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 5138 os_tid = 0x20d4 [0178.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk")) returned 0x20 [0183.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.027] GetLastError () returned 0x5 [0183.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 5139 os_tid = 0x20d8 [0178.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl")) returned 0x20 [0183.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0183.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.025] GetLastError () returned 0x5 [0183.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL", dwFileAttributes=0x20) returned 0 [0183.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 Thread: id = 5140 os_tid = 0x20dc [0178.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs")) returned 0x20 [0182.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", dwFileAttributes=0x20) returned 0 [0182.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.998] GetLastError () returned 0x5 [0182.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS", dwFileAttributes=0x20) returned 0 [0182.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x290300) returned 1 Thread: id = 5141 os_tid = 0x20e0 [0178.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc")) returned 0x20 [0182.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.996] GetLastError () returned 0x5 [0182.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 5142 os_tid = 0x2780 [0178.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt")) returned 0x20 [0182.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.994] GetLastError () returned 0x5 [0182.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT", dwFileAttributes=0x20) returned 0 [0182.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30633a0) returned 1 Thread: id = 5143 os_tid = 0x2194 [0178.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk")) returned 0x20 [0182.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.992] GetLastError () returned 0x5 [0182.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0182.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 5144 os_tid = 0x2758 [0178.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk")) returned 0x20 [0183.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.023] GetLastError () returned 0x5 [0183.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3063428) returned 1 Thread: id = 5145 os_tid = 0x22f4 [0178.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr")) returned 0x20 [0178.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR", dwFileAttributes=0x20) returned 0 [0178.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.639] GetLastError () returned 0x5 [0178.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR", dwFileAttributes=0x20) returned 0 [0178.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 5146 os_tid = 0x2788 [0178.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr")) returned 0x20 [0180.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR", dwFileAttributes=0x20) returned 0 [0180.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.519] GetLastError () returned 0x5 [0180.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR", dwFileAttributes=0x20) returned 0 [0180.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062988) returned 1 Thread: id = 5147 os_tid = 0x27c4 [0178.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr")) returned 0x20 [0180.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR", dwFileAttributes=0x20) returned 0 [0180.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.521] GetLastError () returned 0x5 [0180.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR", dwFileAttributes=0x20) returned 0 [0180.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 5148 os_tid = 0x2334 [0178.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr")) returned 0x20 [0180.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR", dwFileAttributes=0x20) returned 0 [0180.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.528] GetLastError () returned 0x5 [0180.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR", dwFileAttributes=0x20) returned 0 [0180.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 5149 os_tid = 0x2338 [0178.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr")) returned 0x20 [0180.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR", dwFileAttributes=0x20) returned 0 [0180.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.530] GetLastError () returned 0x5 [0180.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR", dwFileAttributes=0x20) returned 0 [0180.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ba20) returned 1 Thread: id = 5150 os_tid = 0x233c [0178.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr")) returned 0x20 [0180.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR", dwFileAttributes=0x20) returned 0 [0180.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.532] GetLastError () returned 0x5 [0180.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR", dwFileAttributes=0x20) returned 0 [0180.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b888) returned 1 Thread: id = 5151 os_tid = 0x2340 [0178.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr")) returned 0x20 [0180.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR", dwFileAttributes=0x20) returned 0 [0180.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.523] GetLastError () returned 0x5 [0180.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR", dwFileAttributes=0x20) returned 0 [0180.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a598) returned 1 Thread: id = 5152 os_tid = 0x2344 [0178.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr")) returned 0x20 [0180.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR", dwFileAttributes=0x20) returned 0 [0180.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.534] GetLastError () returned 0x5 [0180.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR", dwFileAttributes=0x20) returned 0 [0180.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 5153 os_tid = 0x23cc [0178.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr")) returned 0x20 [0180.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR", dwFileAttributes=0x20) returned 0 [0180.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.536] GetLastError () returned 0x5 [0180.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR", dwFileAttributes=0x20) returned 0 [0180.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bd50) returned 1 Thread: id = 5154 os_tid = 0x2464 [0178.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr")) returned 0x20 [0179.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR", dwFileAttributes=0x20) returned 0 [0179.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.902] GetLastError () returned 0x5 [0179.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR", dwFileAttributes=0x20) returned 0 [0179.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab98) returned 1 Thread: id = 5155 os_tid = 0x27f0 [0178.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr")) returned 0x20 [0180.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR", dwFileAttributes=0x20) returned 0 [0180.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.524] GetLastError () returned 0x5 [0180.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR", dwFileAttributes=0x20) returned 0 [0180.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19718) returned 1 Thread: id = 5156 os_tid = 0x24d8 [0178.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr")) returned 0x20 [0179.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR", dwFileAttributes=0x20) returned 0 [0179.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.903] GetLastError () returned 0x5 [0179.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR", dwFileAttributes=0x20) returned 0 [0179.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19198) returned 1 Thread: id = 5157 os_tid = 0x27fc [0178.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr")) returned 0x20 [0180.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR", dwFileAttributes=0x20) returned 0 [0180.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.526] GetLastError () returned 0x5 [0180.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR", dwFileAttributes=0x20) returned 0 [0180.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 5158 os_tid = 0xdd4 [0178.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg")) returned 0x20 [0178.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg", dwFileAttributes=0x20) returned 0 [0178.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.653] GetLastError () returned 0x5 [0178.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg", dwFileAttributes=0x20) returned 0 [0178.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d860c0) returned 1 Thread: id = 5159 os_tid = 0x99c [0178.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp")) returned 0x20 [0178.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp", dwFileAttributes=0x20) returned 0 [0178.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.655] GetLastError () returned 0x5 [0178.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp", dwFileAttributes=0x20) returned 0 [0178.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17f80) returned 1 Thread: id = 5160 os_tid = 0x2598 [0178.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd")) returned 0x20 [0178.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd", dwFileAttributes=0x20) returned 0 [0178.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.657] GetLastError () returned 0x5 [0178.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd", dwFileAttributes=0x20) returned 0 [0178.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46518) returned 1 Thread: id = 5161 os_tid = 0x259c [0178.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\thocr.psp")) returned 0x20 [0178.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP", dwFileAttributes=0x20) returned 0 [0178.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\thocr.psp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.659] GetLastError () returned 0x5 [0178.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP", dwFileAttributes=0x20) returned 0 [0178.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 Thread: id = 5162 os_tid = 0x25a0 [0178.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0007.tll")) returned 0x20 [0178.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL", dwFileAttributes=0x20) returned 0 [0178.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0007.tll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.661] GetLastError () returned 0x5 [0178.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL", dwFileAttributes=0x20) returned 0 [0178.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 Thread: id = 5163 os_tid = 0x25a4 [0178.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0009.tll")) returned 0x20 [0178.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL", dwFileAttributes=0x20) returned 0 [0178.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0009.tll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.662] GetLastError () returned 0x5 [0178.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL", dwFileAttributes=0x20) returned 0 [0178.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 Thread: id = 5164 os_tid = 0x25a8 [0178.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz000c.tll")) returned 0x20 [0178.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL", dwFileAttributes=0x20) returned 0 [0178.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz000c.tll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.664] GetLastError () returned 0x5 [0178.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL", dwFileAttributes=0x20) returned 0 [0178.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 Thread: id = 5165 os_tid = 0x25ac [0178.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0011.tll")) returned 0x20 [0178.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL", dwFileAttributes=0x20) returned 0 [0178.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0011.tll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.668] GetLastError () returned 0x5 [0178.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL", dwFileAttributes=0x20) returned 0 [0178.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 Thread: id = 5166 os_tid = 0x25b0 [0178.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2excl.xsl")) returned 0x20 [0178.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL", dwFileAttributes=0x20) returned 0 [0178.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2excl.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.670] GetLastError () returned 0x5 [0178.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL", dwFileAttributes=0x20) returned 0 [0178.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 Thread: id = 5167 os_tid = 0x25b4 [0178.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2word.xsl")) returned 0x20 [0178.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL", dwFileAttributes=0x20) returned 0 [0178.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2word.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.673] GetLastError () returned 0x5 [0178.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL", dwFileAttributes=0x20) returned 0 [0178.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 Thread: id = 5168 os_tid = 0x25b8 [0178.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e46518 [0178.674] wcscpy (in: _Dest=0x3e46518, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" [0178.674] wcscat (in: _Dest=0x3e46518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\" [0178.674] wcscat (in: _Dest=0x3e46518, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*" [0178.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0178.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa4492e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4492e50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa50 [0183.500] wcscmp (_String1=".", _String2=".") returned 0 [0183.500] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa4492e50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4492e50, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.500] wcscmp (_String1="..", _String2=".") returned 1 [0183.500] wcscmp (_String1="..", _String2="..") returned 0 [0183.500] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0183.501] wcscmp (_String1="1033", _String2=".") returned 1 [0183.501] wcscmp (_String1="1033", _String2="..") returned 1 [0183.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb93c8 [0183.501] wcscpy (in: _Dest=0x3eb93c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content" [0183.501] wcscat (in: _Dest=0x3eb93c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\" [0183.501] wcscat (in: _Dest=0x3eb93c8, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0183.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eb93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0 [0183.787] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0183.787] FindClose (in: hFindFile=0x3dcfa50 | out: hFindFile=0x3dcfa50) returned 1 [0183.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0183.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46518) returned 1 [0183.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19098) returned 1 Thread: id = 5169 os_tid = 0x25bc [0178.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe.manifest")) returned 0x20 [0181.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest", dwFileAttributes=0x20) returned 0 [0181.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.983] GetLastError () returned 0x5 [0182.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest", dwFileAttributes=0x20) returned 0 [0182.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bdd8) returned 1 Thread: id = 5170 os_tid = 0x25c0 [0178.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\visiocustom.propdesc")) returned 0x20 [0181.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc", dwFileAttributes=0x20) returned 0 [0181.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\visiocustom.propdesc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.984] GetLastError () returned 0x5 [0182.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc", dwFileAttributes=0x20) returned 0 [0182.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099cf0) returned 1 Thread: id = 5171 os_tid = 0x25c4 [0178.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.manifest")) returned 0x20 [0181.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest", dwFileAttributes=0x20) returned 0 [0181.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.987] GetLastError () returned 0x5 [0182.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest", dwFileAttributes=0x20) returned 0 [0182.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a5f8) returned 1 Thread: id = 5172 os_tid = 0x25c8 [0178.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv")) returned 0x20 [0181.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv", dwFileAttributes=0x20) returned 0 [0181.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.985] GetLastError () returned 0x5 [0182.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv", dwFileAttributes=0x20) returned 0 [0182.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a718) returned 1 Thread: id = 5173 os_tid = 0x25cc [0178.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml")) returned 0x20 [0183.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML", dwFileAttributes=0x20) returned 0 [0183.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.928] GetLastError () returned 0x5 [0183.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML", dwFileAttributes=0x20) returned 0 [0183.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 Thread: id = 5174 os_tid = 0x9ec [0178.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml")) returned 0x20 [0181.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML", dwFileAttributes=0x20) returned 0 [0181.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.988] GetLastError () returned 0x5 [0182.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML", dwFileAttributes=0x20) returned 0 [0182.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 Thread: id = 5175 os_tid = 0x108c [0178.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml")) returned 0x20 [0181.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML", dwFileAttributes=0x20) returned 0 [0181.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.498] GetLastError () returned 0x5 [0183.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML", dwFileAttributes=0x20) returned 0 [0183.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 Thread: id = 5176 os_tid = 0x1090 [0178.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f830 [0178.679] wcscpy (in: _Dest=0x3f3f830, _Source="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART" [0178.679] wcscat (in: _Dest=0x3f3f830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\" [0178.679] wcscat (in: _Dest=0x3f3f830, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*" [0178.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0178.679] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0181.850] wcscmp (_String1=".", _String2=".") returned 0 [0181.850] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.850] wcscmp (_String1="..", _String2=".") returned 1 [0181.850] wcscmp (_String1="..", _String2="..") returned 0 [0181.850] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x762d46d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x762d46d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x762d46d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.850] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0181.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0181.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0181.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23290) returned 1 Thread: id = 5177 os_tid = 0xa80 [0178.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl")) returned 0x20 [0181.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL", dwFileAttributes=0x20) returned 0 [0181.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.665] GetLastError () returned 0x5 [0183.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL", dwFileAttributes=0x20) returned 0 [0183.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 Thread: id = 5178 os_tid = 0x2624 [0178.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x20 [0181.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x20) returned 0 [0181.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.228] GetLastError () returned 0x5 [0181.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x20) returned 0 [0181.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 Thread: id = 5179 os_tid = 0x2634 [0178.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x20 [0181.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x20) returned 0 [0181.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.226] GetLastError () returned 0x5 [0181.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x20) returned 0 [0181.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 5180 os_tid = 0x2638 [0178.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x20 [0181.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x20) returned 0 [0181.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.225] GetLastError () returned 0x5 [0181.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x20) returned 0 [0181.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 5181 os_tid = 0x263c [0178.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x20 [0181.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x20) returned 0 [0181.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.210] GetLastError () returned 0x5 [0181.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x20) returned 0 [0181.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a708) returned 1 Thread: id = 5182 os_tid = 0x2640 [0178.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x20 [0181.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x20) returned 0 [0181.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.209] GetLastError () returned 0x5 [0181.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x20) returned 0 [0181.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a680) returned 1 Thread: id = 5183 os_tid = 0x266c [0178.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x20 [0181.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x20) returned 0 [0181.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.207] GetLastError () returned 0x5 [0181.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x20) returned 0 [0181.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 Thread: id = 5184 os_tid = 0x2670 [0178.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x20 [0181.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x20) returned 0 [0181.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.215] GetLastError () returned 0x5 [0181.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x20) returned 0 [0181.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68118) returned 1 Thread: id = 5185 os_tid = 0x2674 [0178.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x20 [0181.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x20) returned 0 [0181.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.224] GetLastError () returned 0x5 [0181.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x20) returned 0 [0181.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681a0) returned 1 Thread: id = 5186 os_tid = 0x2678 [0178.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x20 [0181.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x20) returned 0 [0181.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.213] GetLastError () returned 0x5 [0181.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x20) returned 0 [0181.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68228) returned 1 Thread: id = 5187 os_tid = 0x267c [0178.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x20 [0181.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x20) returned 0 [0181.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.137] GetLastError () returned 0x5 [0181.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x20) returned 0 [0181.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a682b0) returned 1 Thread: id = 5188 os_tid = 0xb9c [0178.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x20 [0181.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x20) returned 0 [0181.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.229] GetLastError () returned 0x5 [0181.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x20) returned 0 [0181.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68338) returned 1 Thread: id = 5189 os_tid = 0xb94 [0178.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x20 [0181.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x20) returned 0 [0181.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.212] GetLastError () returned 0x5 [0181.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x20) returned 0 [0181.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a683c0) returned 1 Thread: id = 5190 os_tid = 0xbb4 [0178.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml")) returned 0x20 [0179.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML", dwFileAttributes=0x20) returned 0 [0179.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.922] GetLastError () returned 0x5 [0179.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML", dwFileAttributes=0x20) returned 0 [0179.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 5191 os_tid = 0x26cc [0178.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml")) returned 0x20 [0180.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML", dwFileAttributes=0x20) returned 0 [0180.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.591] GetLastError () returned 0x5 [0180.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML", dwFileAttributes=0x20) returned 0 [0180.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44f90) returned 1 Thread: id = 5192 os_tid = 0x1210 [0178.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml")) returned 0x20 [0180.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML", dwFileAttributes=0x20) returned 0 [0180.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.616] GetLastError () returned 0x5 [0180.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML", dwFileAttributes=0x20) returned 0 [0180.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 5193 os_tid = 0x1214 [0178.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml")) returned 0x20 [0180.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML", dwFileAttributes=0x20) returned 0 [0180.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.618] GetLastError () returned 0x5 [0180.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML", dwFileAttributes=0x20) returned 0 [0180.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 5194 os_tid = 0xe1c [0178.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc")) returned 0x20 [0180.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0180.453] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.453] GetLastError () returned 0x5 [0180.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC", dwFileAttributes=0x20) returned 0 [0180.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 5195 os_tid = 0xdec [0178.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h")) returned 0x20 [0180.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H", dwFileAttributes=0x20) returned 0 [0180.455] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.455] GetLastError () returned 0x5 [0180.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H", dwFileAttributes=0x20) returned 0 [0180.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68448) returned 1 Thread: id = 5196 os_tid = 0x14ac [0178.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v")) returned 0x20 [0180.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V", dwFileAttributes=0x20) returned 0 [0180.456] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.457] GetLastError () returned 0x5 [0180.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V", dwFileAttributes=0x20) returned 0 [0180.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a684d0) returned 1 Thread: id = 5197 os_tid = 0x14c0 [0178.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h")) returned 0x20 [0180.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H", dwFileAttributes=0x20) returned 0 [0180.458] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.459] GetLastError () returned 0x5 [0180.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H", dwFileAttributes=0x20) returned 0 [0180.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68558) returned 1 Thread: id = 5198 os_tid = 0x14c4 [0178.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v")) returned 0x20 [0180.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V", dwFileAttributes=0x20) returned 0 [0180.460] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.460] GetLastError () returned 0x5 [0180.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V", dwFileAttributes=0x20) returned 0 [0180.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a685e0) returned 1 Thread: id = 5199 os_tid = 0x14c8 [0178.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h")) returned 0x20 [0180.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H", dwFileAttributes=0x20) returned 0 [0180.466] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.466] GetLastError () returned 0x5 [0180.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H", dwFileAttributes=0x20) returned 0 [0180.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68668) returned 1 Thread: id = 5200 os_tid = 0x14cc [0178.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v")) returned 0x20 [0180.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V", dwFileAttributes=0x20) returned 0 [0180.468] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.468] GetLastError () returned 0x5 [0180.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V", dwFileAttributes=0x20) returned 0 [0180.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a686f0) returned 1 Thread: id = 5201 os_tid = 0x14d0 [0178.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h")) returned 0x20 [0180.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H", dwFileAttributes=0x20) returned 0 [0180.470] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.470] GetLastError () returned 0x5 [0180.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H", dwFileAttributes=0x20) returned 0 [0180.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68778) returned 1 Thread: id = 5202 os_tid = 0x14d4 [0178.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v")) returned 0x20 [0179.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V", dwFileAttributes=0x20) returned 0 [0179.693] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0179.693] GetLastError () returned 0x5 [0179.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V", dwFileAttributes=0x20) returned 0 [0179.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68800) returned 1 Thread: id = 5203 os_tid = 0x14d8 [0178.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h")) returned 0x20 [0180.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H", dwFileAttributes=0x20) returned 0 [0180.414] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.414] GetLastError () returned 0x5 [0180.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H", dwFileAttributes=0x20) returned 0 [0180.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68888) returned 1 Thread: id = 5204 os_tid = 0x14dc [0178.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp")) returned 0x20 [0183.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP", dwFileAttributes=0x20) returned 0 [0183.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.927] GetLastError () returned 0x5 [0183.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP", dwFileAttributes=0x20) returned 0 [0183.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 Thread: id = 5205 os_tid = 0x14e0 [0178.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\miquelon")) returned 0x20 [0178.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon", dwFileAttributes=0x20) returned 0 [0178.903] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\miquelon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.903] GetLastError () returned 0x5 [0178.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Miquelon", dwFileAttributes=0x20) returned 0 [0178.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 Thread: id = 5206 os_tid = 0x14e8 [0178.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\moncton")) returned 0x20 [0178.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton", dwFileAttributes=0x20) returned 0 [0178.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\moncton"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0178.904] GetLastError () returned 0x5 [0178.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Moncton", dwFileAttributes=0x20) returned 0 [0178.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 Thread: id = 5207 os_tid = 0x14ec [0178.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\monterrey")) returned 0x20 [0180.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey", dwFileAttributes=0x20) returned 0 [0180.351] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\monterrey"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.452] GetLastError () returned 0x5 [0181.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Monterrey", dwFileAttributes=0x20) returned 0 [0181.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a235a0) returned 1 Thread: id = 5208 os_tid = 0x14f0 [0178.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montevideo")) returned 0x20 [0181.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo", dwFileAttributes=0x20) returned 0 [0181.839] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montevideo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.950] GetLastError () returned 0x5 [0182.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montevideo", dwFileAttributes=0x20) returned 0 [0182.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 Thread: id = 5209 os_tid = 0x14f4 [0178.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montreal")) returned 0x20 [0185.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal", dwFileAttributes=0x20) returned 0 [0185.290] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montreal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.291] GetLastError () returned 0x5 [0185.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montreal", dwFileAttributes=0x20) returned 0 [0185.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23680) returned 1 Thread: id = 5210 os_tid = 0x14f8 [0178.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montserrat")) returned 0x20 [0185.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat", dwFileAttributes=0x20) returned 0 [0185.288] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\montserrat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.289] GetLastError () returned 0x5 [0185.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Montserrat", dwFileAttributes=0x20) returned 0 [0185.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 Thread: id = 5211 os_tid = 0x1758 [0178.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nassau")) returned 0x20 [0183.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau", dwFileAttributes=0x20) returned 0 [0183.849] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nassau"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.849] GetLastError () returned 0x5 [0183.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nassau", dwFileAttributes=0x20) returned 0 [0183.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23c30) returned 1 Thread: id = 5212 os_tid = 0x1c58 [0178.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\new_york")) returned 0x20 [0183.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York", dwFileAttributes=0x20) returned 0 [0183.848] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\new_york"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.848] GetLastError () returned 0x5 [0183.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\New_York", dwFileAttributes=0x20) returned 0 [0183.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d10) returned 1 Thread: id = 5213 os_tid = 0x1dbc [0178.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nipigon")) returned 0x20 [0183.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon", dwFileAttributes=0x20) returned 0 [0183.846] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nipigon"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.846] GetLastError () returned 0x5 [0183.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nipigon", dwFileAttributes=0x20) returned 0 [0183.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23610) returned 1 Thread: id = 5214 os_tid = 0x1040 [0178.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nome")) returned 0x20 [0183.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome", dwFileAttributes=0x20) returned 0 [0183.854] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\nome"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.869] GetLastError () returned 0x5 [0184.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Nome", dwFileAttributes=0x20) returned 0 [0184.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d958) returned 1 Thread: id = 5215 os_tid = 0x13d8 [0178.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\noronha")) returned 0x20 [0183.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha", dwFileAttributes=0x20) returned 0 [0183.853] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\noronha"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.868] GetLastError () returned 0x5 [0184.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Noronha", dwFileAttributes=0x20) returned 0 [0184.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23d80) returned 1 Thread: id = 5216 os_tid = 0x1460 [0178.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a218 [0178.908] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0178.908] wcscat (in: _Dest=0x3e1a218, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0178.908] wcscat (in: _Dest=0x3e1a218, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*" [0178.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0178.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0183.857] wcscmp (_String1=".", _String2=".") returned 0 [0183.857] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.857] wcscmp (_String1="..", _String2=".") returned 1 [0183.857] wcscmp (_String1="..", _String2="..") returned 0 [0183.857] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beulah", cAlternateFileName="")) returned 1 [0183.858] wcscmp (_String1="Beulah", _String2=".") returned 1 [0183.858] wcscmp (_String1="Beulah", _String2="..") returned 1 [0183.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a69ba8 [0183.858] wcscpy (in: _Dest=0x7a69ba8, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0183.858] wcscat (in: _Dest=0x7a69ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0183.858] wcscat (in: _Dest=0x7a69ba8, _Source="Beulah" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" [0185.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a69ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0185.719] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Center", cAlternateFileName="")) returned 1 [0185.719] wcscmp (_String1="Center", _String2=".") returned 1 [0185.719] wcscmp (_String1="Center", _String2="..") returned 1 [0185.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x3eb9098 [0185.719] wcscpy (in: _Dest=0x3eb9098, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0185.720] wcscat (in: _Dest=0x3eb9098, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0185.720] wcscat (in: _Dest=0x3eb9098, _Source="Center" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" [0185.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb9098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0185.721] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_Salem", cAlternateFileName="NEW_SA~1")) returned 1 [0185.721] wcscmp (_String1="New_Salem", _String2=".") returned 1 [0185.721] wcscmp (_String1="New_Salem", _String2="..") returned 1 [0185.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d455c0 [0185.721] wcscpy (in: _Dest=0x3d455c0, _Source="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota" [0185.721] wcscat (in: _Dest=0x3d455c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\" [0185.721] wcscat (in: _Dest=0x3d455c0, _Source="New_Salem" | out: _Dest="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem") returned="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" [0185.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d455c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0185.722] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68215b20, ftCreationTime.dwHighDateTime=0x1d2da24, ftLastAccessTime.dwLowDateTime=0x68215b20, ftLastAccessTime.dwHighDateTime=0x1d2da24, ftLastWriteTime.dwLowDateTime=0x68215b20, ftLastWriteTime.dwHighDateTime=0x1d2da24, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_Salem", cAlternateFileName="NEW_SA~1")) returned 0 [0185.722] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0185.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0185.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 [0185.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 Thread: id = 5217 os_tid = 0x147c [0178.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\ojinaga")) returned 0x20 [0183.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga", dwFileAttributes=0x20) returned 0 [0183.665] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\ojinaga"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.901] GetLastError () returned 0x5 [0184.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Ojinaga", dwFileAttributes=0x20) returned 0 [0184.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a230d0) returned 1 Thread: id = 5218 os_tid = 0x17a4 [0178.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\panama")) returned 0x20 [0182.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama", dwFileAttributes=0x20) returned 0 [0182.991] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\panama"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.845] GetLastError () returned 0x5 [0183.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Panama", dwFileAttributes=0x20) returned 0 [0183.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ed0) returned 1 Thread: id = 5219 os_tid = 0x18a8 [0178.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\pangnirtung")) returned 0x20 [0183.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung", dwFileAttributes=0x20) returned 0 [0183.857] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\pangnirtung"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.880] GetLastError () returned 0x5 [0184.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Pangnirtung", dwFileAttributes=0x20) returned 0 [0184.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 Thread: id = 5220 os_tid = 0x18b0 [0178.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\paramaribo")) returned 0x20 [0183.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo", dwFileAttributes=0x20) returned 0 [0183.858] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\paramaribo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.883] GetLastError () returned 0x5 [0184.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Paramaribo", dwFileAttributes=0x20) returned 0 [0184.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 Thread: id = 5221 os_tid = 0x18b8 [0178.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\phoenix")) returned 0x20 [0183.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix", dwFileAttributes=0x20) returned 0 [0183.853] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\phoenix"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.866] GetLastError () returned 0x5 [0184.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Phoenix", dwFileAttributes=0x20) returned 0 [0184.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23370) returned 1 Thread: id = 5222 os_tid = 0x18bc [0178.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port-au-prince")) returned 0x20 [0183.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince", dwFileAttributes=0x20) returned 0 [0183.859] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port-au-prince"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.884] GetLastError () returned 0x5 [0184.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince", dwFileAttributes=0x20) returned 0 [0184.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a698) returned 1 Thread: id = 5223 os_tid = 0x195c [0178.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\porto_velho")) returned 0x20 [0183.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho", dwFileAttributes=0x20) returned 0 [0183.859] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\porto_velho"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.886] GetLastError () returned 0x5 [0184.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Porto_Velho", dwFileAttributes=0x20) returned 0 [0184.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 Thread: id = 5224 os_tid = 0x19a8 [0178.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port_of_spain")) returned 0x20 [0183.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain", dwFileAttributes=0x20) returned 0 [0183.495] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\port_of_spain"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.844] GetLastError () returned 0x5 [0183.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain", dwFileAttributes=0x20) returned 0 [0183.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 Thread: id = 5225 os_tid = 0x19e8 [0178.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\puerto_rico")) returned 0x20 [0183.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico", dwFileAttributes=0x20) returned 0 [0183.773] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\puerto_rico"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.773] GetLastError () returned 0x5 [0183.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico", dwFileAttributes=0x20) returned 0 [0183.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 Thread: id = 5226 os_tid = 0x19f8 [0178.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rainy_river")) returned 0x20 [0183.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River", dwFileAttributes=0x20) returned 0 [0183.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rainy_river"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.872] GetLastError () returned 0x5 [0184.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rainy_River", dwFileAttributes=0x20) returned 0 [0184.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 Thread: id = 5227 os_tid = 0x19fc [0178.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rankin_inlet")) returned 0x20 [0183.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet", dwFileAttributes=0x20) returned 0 [0183.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rankin_inlet"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.874] GetLastError () returned 0x5 [0184.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet", dwFileAttributes=0x20) returned 0 [0184.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 Thread: id = 5228 os_tid = 0x1a00 [0178.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\recife")) returned 0x20 [0183.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife", dwFileAttributes=0x20) returned 0 [0183.853] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\recife"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.864] GetLastError () returned 0x5 [0184.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Recife", dwFileAttributes=0x20) returned 0 [0184.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23450) returned 1 Thread: id = 5229 os_tid = 0x1a04 [0178.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\regina")) returned 0x20 [0183.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina", dwFileAttributes=0x20) returned 0 [0183.852] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\regina"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.863] GetLastError () returned 0x5 [0184.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Regina", dwFileAttributes=0x20) returned 0 [0184.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a234c0) returned 1 Thread: id = 5230 os_tid = 0x1a08 [0178.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\resolute")) returned 0x20 [0183.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute", dwFileAttributes=0x20) returned 0 [0183.852] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\resolute"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.861] GetLastError () returned 0x5 [0184.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Resolute", dwFileAttributes=0x20) returned 0 [0184.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23140) returned 1 Thread: id = 5231 os_tid = 0x1a0c [0178.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rio_branco")) returned 0x20 [0183.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco", dwFileAttributes=0x20) returned 0 [0183.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\rio_branco"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.875] GetLastError () returned 0x5 [0184.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Rio_Branco", dwFileAttributes=0x20) returned 0 [0184.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 Thread: id = 5232 os_tid = 0x1a10 [0178.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santarem")) returned 0x20 [0183.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem", dwFileAttributes=0x20) returned 0 [0183.852] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santarem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.860] GetLastError () returned 0x5 [0184.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santarem", dwFileAttributes=0x20) returned 0 [0184.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a70) returned 1 Thread: id = 5233 os_tid = 0x1a14 [0178.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santa_isabel")) returned 0x20 [0183.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel", dwFileAttributes=0x20) returned 0 [0183.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santa_isabel"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.876] GetLastError () returned 0x5 [0184.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel", dwFileAttributes=0x20) returned 0 [0184.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 Thread: id = 5234 os_tid = 0x1a18 [0178.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santiago")) returned 0x20 [0183.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago", dwFileAttributes=0x20) returned 0 [0183.852] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santiago"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.061] GetLastError () returned 0x5 [0185.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santiago", dwFileAttributes=0x20) returned 0 [0185.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23df0) returned 1 Thread: id = 5235 os_tid = 0x1a1c [0178.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santo_domingo")) returned 0x20 [0183.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo", dwFileAttributes=0x20) returned 0 [0183.856] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\santo_domingo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.878] GetLastError () returned 0x5 [0184.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo", dwFileAttributes=0x20) returned 0 [0184.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 Thread: id = 5236 os_tid = 0x1a20 [0178.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sao_paulo")) returned 0x20 [0183.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo", dwFileAttributes=0x20) returned 0 [0183.856] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sao_paulo"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.879] GetLastError () returned 0x5 [0184.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo", dwFileAttributes=0x20) returned 0 [0184.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a233e0) returned 1 Thread: id = 5237 os_tid = 0x1a24 [0178.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\scoresbysund")) returned 0x20 [0183.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund", dwFileAttributes=0x20) returned 0 [0183.857] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\scoresbysund"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.882] GetLastError () returned 0x5 [0184.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Scoresbysund", dwFileAttributes=0x20) returned 0 [0184.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 Thread: id = 5238 os_tid = 0x1a28 [0178.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sitka")) returned 0x20 [0183.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka", dwFileAttributes=0x20) returned 0 [0183.854] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\sitka"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.871] GetLastError () returned 0x5 [0184.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Sitka", dwFileAttributes=0x20) returned 0 [0184.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 Thread: id = 5239 os_tid = 0x2204 [0178.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_johns")) returned 0x20 [0185.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns", dwFileAttributes=0x20) returned 0 [0185.064] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_johns"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.064] GetLastError () returned 0x5 [0185.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Johns", dwFileAttributes=0x20) returned 0 [0185.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a231b0) returned 1 Thread: id = 5240 os_tid = 0x2208 [0180.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x20 [0181.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x20) returned 0 [0181.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.135] GetLastError () returned 0x5 [0181.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x20) returned 0 [0181.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 5241 os_tid = 0x220c [0180.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x20 [0181.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x20) returned 0 [0181.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.251] GetLastError () returned 0x5 [0181.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x20) returned 0 [0181.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 5242 os_tid = 0x2210 [0180.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x20 [0181.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x20) returned 0 [0181.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.140] GetLastError () returned 0x5 [0181.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x20) returned 0 [0181.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 5243 os_tid = 0x2218 [0180.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x20 [0181.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x20) returned 0 [0181.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.253] GetLastError () returned 0x5 [0181.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x20) returned 0 [0181.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 5244 os_tid = 0x221c [0180.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x20 [0181.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x20) returned 0 [0181.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.254] GetLastError () returned 0x5 [0181.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x20) returned 0 [0181.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 Thread: id = 5245 os_tid = 0x222c [0180.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x20 [0181.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x20) returned 0 [0181.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.142] GetLastError () returned 0x5 [0181.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x20) returned 0 [0181.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 5246 os_tid = 0x2230 [0180.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x20 [0181.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x20) returned 0 [0181.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.256] GetLastError () returned 0x5 [0181.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x20) returned 0 [0181.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68a20) returned 1 Thread: id = 5247 os_tid = 0x2238 [0180.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x20 [0181.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x20) returned 0 [0181.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.257] GetLastError () returned 0x5 [0181.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x20) returned 0 [0181.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68bb8) returned 1 Thread: id = 5248 os_tid = 0x223c [0180.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x20 [0181.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x20) returned 0 [0181.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.259] GetLastError () returned 0x5 [0181.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x20) returned 0 [0181.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68998) returned 1 Thread: id = 5249 os_tid = 0x2240 [0180.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x20 [0180.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x20) returned 0 [0180.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.848] GetLastError () returned 0x5 [0180.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x20) returned 0 [0180.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68910) returned 1 Thread: id = 5250 os_tid = 0x2244 [0180.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x20 [0181.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x20) returned 0 [0181.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.126] GetLastError () returned 0x5 [0181.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x20) returned 0 [0181.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68b30) returned 1 Thread: id = 5251 os_tid = 0x2248 [0180.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x20 [0181.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x20) returned 0 [0181.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.128] GetLastError () returned 0x5 [0181.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x20) returned 0 [0181.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68c40) returned 1 Thread: id = 5252 os_tid = 0x224c [0180.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x20 [0181.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x20) returned 0 [0181.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.250] GetLastError () returned 0x5 [0181.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x20) returned 0 [0181.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68aa8) returned 1 Thread: id = 5253 os_tid = 0x2250 [0180.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs")) returned 0x20 [0183.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", dwFileAttributes=0x20) returned 0 [0183.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.029] GetLastError () returned 0x5 [0183.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS", dwFileAttributes=0x20) returned 0 [0183.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68cc8) returned 1 Thread: id = 5254 os_tid = 0x2258 [0180.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc")) returned 0x20 [0182.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.999] GetLastError () returned 0x5 [0182.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0182.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44e70) returned 1 Thread: id = 5255 os_tid = 0x225c [0180.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt")) returned 0x20 [0183.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.001] GetLastError () returned 0x5 [0183.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0183.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45140) returned 1 Thread: id = 5256 os_tid = 0x2260 [0180.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk")) returned 0x20 [0183.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.003] GetLastError () returned 0x5 [0183.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44d50) returned 1 Thread: id = 5257 os_tid = 0x2300 [0180.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk")) returned 0x20 [0183.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.005] GetLastError () returned 0x5 [0183.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0183.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d450b0) returned 1 Thread: id = 5258 os_tid = 0x2304 [0180.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs")) returned 0x20 [0183.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", dwFileAttributes=0x20) returned 0 [0183.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.006] GetLastError () returned 0x5 [0183.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS", dwFileAttributes=0x20) returned 0 [0183.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47398) returned 1 Thread: id = 5259 os_tid = 0x2308 [0180.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg")) returned 0x20 [0184.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", dwFileAttributes=0x20) returned 0 [0184.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.202] GetLastError () returned 0x5 [0184.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG", dwFileAttributes=0x20) returned 0 [0184.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46718) returned 1 Thread: id = 5260 os_tid = 0x230c [0180.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc")) returned 0x20 [0184.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.200] GetLastError () returned 0x5 [0184.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ca10) returned 1 Thread: id = 5261 os_tid = 0x2318 [0180.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt")) returned 0x20 [0184.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.198] GetLastError () returned 0x5 [0184.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68800) returned 1 Thread: id = 5262 os_tid = 0x231c [0180.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk")) returned 0x20 [0184.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.196] GetLastError () returned 0x5 [0184.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68d50) returned 1 Thread: id = 5263 os_tid = 0x2320 [0180.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk")) returned 0x20 [0184.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.194] GetLastError () returned 0x5 [0184.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68dd8) returned 1 Thread: id = 5264 os_tid = 0x2324 [0180.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm")) returned 0x20 [0184.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", dwFileAttributes=0x20) returned 0 [0184.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.259] GetLastError () returned 0x5 [0184.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM", dwFileAttributes=0x20) returned 0 [0184.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c18) returned 1 Thread: id = 5265 os_tid = 0x2328 [0180.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html")) returned 0x20 [0180.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0180.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.972] GetLastError () returned 0x5 [0180.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0180.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9288) returned 1 Thread: id = 5266 os_tid = 0x232c [0180.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html")) returned 0x20 [0184.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0184.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.734] GetLastError () returned 0x5 [0184.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0184.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37540) returned 1 Thread: id = 5267 os_tid = 0x23a8 [0180.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h")) returned 0x20 [0180.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H", dwFileAttributes=0x20) returned 0 [0180.975] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.975] GetLastError () returned 0x5 [0180.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H", dwFileAttributes=0x20) returned 0 [0180.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d454a0) returned 1 Thread: id = 5268 os_tid = 0x23ac [0180.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v")) returned 0x20 [0180.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V", dwFileAttributes=0x20) returned 0 [0180.977] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.977] GetLastError () returned 0x5 [0180.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V", dwFileAttributes=0x20) returned 0 [0180.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 5269 os_tid = 0x23b0 [0180.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v")) returned 0x20 [0180.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V", dwFileAttributes=0x20) returned 0 [0180.979] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.979] GetLastError () returned 0x5 [0180.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V", dwFileAttributes=0x20) returned 0 [0180.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 5270 os_tid = 0x838 [0180.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h")) returned 0x20 [0180.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H", dwFileAttributes=0x20) returned 0 [0180.981] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.981] GetLastError () returned 0x5 [0180.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H", dwFileAttributes=0x20) returned 0 [0180.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b888) returned 1 Thread: id = 5271 os_tid = 0x24b0 [0180.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v")) returned 0x20 [0180.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V", dwFileAttributes=0x20) returned 0 [0180.983] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.983] GetLastError () returned 0x5 [0180.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V", dwFileAttributes=0x20) returned 0 [0180.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ba20) returned 1 Thread: id = 5272 os_tid = 0x24b4 [0180.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h")) returned 0x20 [0180.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H", dwFileAttributes=0x20) returned 0 [0180.985] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.986] GetLastError () returned 0x5 [0180.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H", dwFileAttributes=0x20) returned 0 [0180.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 5273 os_tid = 0x24b8 [0180.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v")) returned 0x20 [0180.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V", dwFileAttributes=0x20) returned 0 [0180.988] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.988] GetLastError () returned 0x5 [0180.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V", dwFileAttributes=0x20) returned 0 [0180.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 5274 os_tid = 0x24bc [0180.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h")) returned 0x20 [0180.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H", dwFileAttributes=0x20) returned 0 [0180.990] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.990] GetLastError () returned 0x5 [0180.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H", dwFileAttributes=0x20) returned 0 [0180.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68778) returned 1 Thread: id = 5275 os_tid = 0x24c0 [0180.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v")) returned 0x20 [0180.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V", dwFileAttributes=0x20) returned 0 [0180.992] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.992] GetLastError () returned 0x5 [0180.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V", dwFileAttributes=0x20) returned 0 [0180.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a686f0) returned 1 Thread: id = 5276 os_tid = 0x24c4 [0180.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h")) returned 0x20 [0180.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H", dwFileAttributes=0x20) returned 0 [0180.994] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.994] GetLastError () returned 0x5 [0180.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H", dwFileAttributes=0x20) returned 0 [0180.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68668) returned 1 Thread: id = 5277 os_tid = 0x24c8 [0180.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v")) returned 0x20 [0180.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V", dwFileAttributes=0x20) returned 0 [0180.996] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.996] GetLastError () returned 0x5 [0180.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V", dwFileAttributes=0x20) returned 0 [0180.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a685e0) returned 1 Thread: id = 5278 os_tid = 0x2534 [0180.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\v")) returned 0x20 [0180.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V", dwFileAttributes=0x20) returned 0 [0180.998] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\cmap\\v"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0180.998] GetLastError () returned 0x5 [0180.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\CMap\\V", dwFileAttributes=0x20) returned 0 [0180.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a00) returned 1 Thread: id = 5279 os_tid = 0x2538 [0181.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html")) returned 0x20 [0184.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0184.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.735] GetLastError () returned 0x5 [0184.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0184.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8f08) returned 1 Thread: id = 5280 os_tid = 0x1fb8 [0181.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html")) returned 0x20 [0184.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0184.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.737] GetLastError () returned 0x5 [0184.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0184.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e382c0) returned 1 Thread: id = 5281 os_tid = 0x253c [0181.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca")) returned 0x20 [0181.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca", dwFileAttributes=0x20) returned 0 [0181.002] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.002] GetLastError () returned 0x5 [0181.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca", dwFileAttributes=0x20) returned 0 [0181.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333d68) returned 1 Thread: id = 5282 os_tid = 0x2540 [0181.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp")) returned 0x20 [0181.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp", dwFileAttributes=0x20) returned 0 [0181.004] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.004] GetLastError () returned 0x5 [0181.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp", dwFileAttributes=0x20) returned 0 [0181.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 5283 os_tid = 0x2544 [0181.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp")) returned 0x20 [0181.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp", dwFileAttributes=0x20) returned 0 [0181.006] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.007] GetLastError () returned 0x5 [0181.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp", dwFileAttributes=0x20) returned 0 [0181.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a828) returned 1 Thread: id = 5284 os_tid = 0x2548 [0181.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx")) returned 0x20 [0181.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx", dwFileAttributes=0x20) returned 0 [0181.009] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.009] GetLastError () returned 0x5 [0181.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx", dwFileAttributes=0x20) returned 0 [0181.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 5285 os_tid = 0x254c [0181.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca")) returned 0x20 [0181.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca", dwFileAttributes=0x20) returned 0 [0181.011] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.011] GetLastError () returned 0x5 [0181.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca", dwFileAttributes=0x20) returned 0 [0181.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 5286 os_tid = 0x2550 [0181.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp")) returned 0x20 [0181.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp", dwFileAttributes=0x20) returned 0 [0181.013] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.013] GetLastError () returned 0x5 [0181.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp", dwFileAttributes=0x20) returned 0 [0181.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 5287 os_tid = 0x2554 [0181.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths")) returned 0x20 [0181.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths", dwFileAttributes=0x20) returned 0 [0181.016] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.016] GetLastError () returned 0x5 [0181.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths", dwFileAttributes=0x20) returned 0 [0181.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333e28) returned 1 Thread: id = 5288 os_tid = 0xec0 [0181.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp")) returned 0x20 [0181.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp", dwFileAttributes=0x20) returned 0 [0181.018] CreateFileW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" (normalized: "c:\\program files\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.018] GetLastError () returned 0x5 [0181.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp", dwFileAttributes=0x20) returned 0 [0181.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 5289 os_tid = 0x2558 [0181.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js")) returned 0x20 [0184.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0184.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.739] GetLastError () returned 0x5 [0184.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0184.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c91a8) returned 1 Thread: id = 5290 os_tid = 0x255c [0181.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css")) returned 0x20 [0184.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0184.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.740] GetLastError () returned 0x5 [0184.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0184.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 Thread: id = 5291 os_tid = 0x2560 [0181.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_kitts")) returned 0x20 [0183.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts", dwFileAttributes=0x20) returned 0 [0183.862] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_kitts"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.897] GetLastError () returned 0x5 [0184.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Kitts", dwFileAttributes=0x20) returned 0 [0184.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23220) returned 1 Thread: id = 5292 os_tid = 0x25d8 [0181.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_lucia")) returned 0x20 [0185.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia", dwFileAttributes=0x20) returned 0 [0185.294] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_lucia"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.294] GetLastError () returned 0x5 [0185.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Lucia", dwFileAttributes=0x20) returned 0 [0185.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69f38) returned 1 Thread: id = 5293 os_tid = 0x25dc [0181.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_thomas")) returned 0x20 [0183.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas", dwFileAttributes=0x20) returned 0 [0183.859] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_thomas"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.887] GetLastError () returned 0x5 [0184.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Thomas", dwFileAttributes=0x20) returned 0 [0184.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69fa8) returned 1 Thread: id = 5294 os_tid = 0x25e0 [0181.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_vincent")) returned 0x20 [0183.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent", dwFileAttributes=0x20) returned 0 [0183.859] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\st_vincent"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.889] GetLastError () returned 0x5 [0184.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\St_Vincent", dwFileAttributes=0x20) returned 0 [0184.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 Thread: id = 5295 os_tid = 0x25e4 [0181.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\swift_current")) returned 0x20 [0183.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current", dwFileAttributes=0x20) returned 0 [0183.860] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\swift_current"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.891] GetLastError () returned 0x5 [0184.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Swift_Current", dwFileAttributes=0x20) returned 0 [0184.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 Thread: id = 5296 os_tid = 0x25e8 [0181.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tegucigalpa")) returned 0x20 [0183.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa", dwFileAttributes=0x20) returned 0 [0183.860] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tegucigalpa"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.892] GetLastError () returned 0x5 [0184.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa", dwFileAttributes=0x20) returned 0 [0184.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 Thread: id = 5297 os_tid = 0x25ec [0181.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thule")) returned 0x20 [0183.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule", dwFileAttributes=0x20) returned 0 [0183.860] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thule"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.894] GetLastError () returned 0x5 [0184.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thule", dwFileAttributes=0x20) returned 0 [0184.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec08) returned 1 Thread: id = 5298 os_tid = 0x25f0 [0181.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thunder_bay")) returned 0x20 [0182.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay", dwFileAttributes=0x20) returned 0 [0182.953] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\thunder_bay"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.504] GetLastError () returned 0x5 [0183.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay", dwFileAttributes=0x20) returned 0 [0183.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 Thread: id = 5299 os_tid = 0x25f4 [0181.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tijuana")) returned 0x20 [0183.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana", dwFileAttributes=0x20) returned 0 [0183.861] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tijuana"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.895] GetLastError () returned 0x5 [0184.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tijuana", dwFileAttributes=0x20) returned 0 [0184.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69c28) returned 1 Thread: id = 5300 os_tid = 0x25f8 [0181.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\toronto")) returned 0x20 [0183.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto", dwFileAttributes=0x20) returned 0 [0183.861] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\toronto"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.896] GetLastError () returned 0x5 [0184.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Toronto", dwFileAttributes=0x20) returned 0 [0184.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d08) returned 1 Thread: id = 5301 os_tid = 0x25fc [0181.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tortola")) returned 0x20 [0183.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola", dwFileAttributes=0x20) returned 0 [0183.862] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\tortola"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.899] GetLastError () returned 0x5 [0184.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Tortola", dwFileAttributes=0x20) returned 0 [0184.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69b48) returned 1 Thread: id = 5302 os_tid = 0x2600 [0181.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\vancouver")) returned 0x20 [0184.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver", dwFileAttributes=0x20) returned 0 [0185.062] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\vancouver"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.285] GetLastError () returned 0x5 [0185.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Vancouver", dwFileAttributes=0x20) returned 0 [0185.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69de8) returned 1 Thread: id = 5303 os_tid = 0x2604 [0181.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\whitehorse")) returned 0x20 [0184.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse", dwFileAttributes=0x20) returned 0 [0184.902] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\whitehorse"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.282] GetLastError () returned 0x5 [0185.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Whitehorse", dwFileAttributes=0x20) returned 0 [0185.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 Thread: id = 5304 os_tid = 0x2608 [0181.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\winnipeg")) returned 0x20 [0183.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg", dwFileAttributes=0x20) returned 0 [0183.862] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\winnipeg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.900] GetLastError () returned 0x5 [0184.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Winnipeg", dwFileAttributes=0x20) returned 0 [0184.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69ec8) returned 1 Thread: id = 5305 os_tid = 0x260c [0181.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yakutat")) returned 0x20 [0185.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat", dwFileAttributes=0x20) returned 0 [0185.292] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yakutat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.292] GetLastError () returned 0x5 [0185.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yakutat", dwFileAttributes=0x20) returned 0 [0185.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e69d78) returned 1 Thread: id = 5306 os_tid = 0x2610 [0181.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yellowknife")) returned 0x20 [0185.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife", dwFileAttributes=0x20) returned 0 [0185.287] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\yellowknife"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.287] GetLastError () returned 0x5 [0185.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\Yellowknife", dwFileAttributes=0x20) returned 0 [0185.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 Thread: id = 5307 os_tid = 0x2614 [0181.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html")) returned 0x20 [0184.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0184.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.742] GetLastError () returned 0x5 [0184.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0184.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 5308 os_tid = 0x1760 [0181.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html")) returned 0x20 [0184.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0184.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.497] GetLastError () returned 0x5 [0184.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0184.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 Thread: id = 5309 os_tid = 0x17a0 [0181.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html")) returned 0x20 [0184.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0184.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.499] GetLastError () returned 0x5 [0184.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0184.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 Thread: id = 5310 os_tid = 0x17a8 [0181.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html")) returned 0x20 [0184.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0184.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.500] GetLastError () returned 0x5 [0184.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0184.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8fe8) returned 1 Thread: id = 5311 os_tid = 0x17ac [0181.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85d80 [0181.043] wcscpy (in: _Dest=0x3d85d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0181.043] wcscat (in: _Dest=0x3d85d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0181.043] wcscat (in: _Dest=0x3d85d80, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*" [0181.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a527c8 [0181.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0185.053] wcscmp (_String1=".", _String2=".") returned 0 [0185.053] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.278] wcscmp (_String1="..", _String2=".") returned 1 [0185.278] wcscmp (_String1="..", _String2="..") returned 0 [0185.278] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0185.278] wcscmp (_String1="Adobe.css", _String2=".") returned 1 [0185.278] wcscmp (_String1="Adobe.css", _String2="..") returned 1 [0185.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8648 [0185.278] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0185.278] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0185.278] wcscat (in: _Dest=0x2c8648, _Source="Adobe.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" [0199.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0199.864] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8584e390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1 [0199.864] wcscmp (_String1="Americana", _String2=".") returned 1 [0199.864] wcscmp (_String1="Americana", _String2="..") returned 1 [0199.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9a68 [0199.864] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0199.864] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0199.864] wcscat (in: _Dest=0x2c9a68, _Source="Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0199.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0199.866] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1 [0199.866] wcscmp (_String1="Americana.css", _String2=".") returned 1 [0199.866] wcscmp (_String1="Americana.css", _String2="..") returned 1 [0199.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4b88 [0199.866] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0199.866] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0199.942] wcscat (in: _Dest=0x3dc4b88, _Source="Americana.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" [0199.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0200.302] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85dcf670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0200.302] wcscmp (_String1="BabyBlue", _String2=".") returned 1 [0200.302] wcscmp (_String1="BabyBlue", _String2="..") returned 1 [0200.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e67568 [0200.303] wcscpy (in: _Dest=0x3e67568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.303] wcscat (in: _Dest=0x3e67568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.303] wcscat (in: _Dest=0x3e67568, _Source="BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0200.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e67568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0200.304] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x100d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0200.304] wcscmp (_String1="BabyBlue.css", _String2=".") returned 1 [0200.304] wcscmp (_String1="BabyBlue.css", _String2="..") returned 1 [0200.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c98a8 [0200.304] wcscpy (in: _Dest=0x2c98a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.304] wcscat (in: _Dest=0x2c98a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.304] wcscat (in: _Dest=0x2c98a8, _Source="BabyBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" [0200.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c98a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0200.306] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76c80030, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86a28890, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0200.306] wcscmp (_String1="Biscay", _String2=".") returned 1 [0200.306] wcscmp (_String1="Biscay", _String2="..") returned 1 [0200.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68570 [0200.306] wcscpy (in: _Dest=0x3e68570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.306] wcscat (in: _Dest=0x3e68570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.306] wcscat (in: _Dest=0x3e68570, _Source="Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0200.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e68570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0200.307] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0200.307] wcscmp (_String1="Biscay.css", _String2=".") returned 1 [0200.308] wcscmp (_String1="Biscay.css", _String2="..") returned 1 [0200.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9988 [0200.308] wcscpy (in: _Dest=0x2c9988, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.308] wcscat (in: _Dest=0x2c9988, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.308] wcscat (in: _Dest=0x2c9988, _Source="Biscay.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" [0200.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0200.309] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1 [0200.309] wcscmp (_String1="BrightOrange", _String2=".") returned 1 [0200.309] wcscmp (_String1="BrightOrange", _String2="..") returned 1 [0200.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8568 [0200.310] wcscpy (in: _Dest=0x2c8568, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.310] wcscat (in: _Dest=0x2c8568, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.310] wcscat (in: _Dest=0x2c8568, _Source="BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0200.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c8568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0200.311] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1 [0200.311] wcscmp (_String1="BrightOrange.css", _String2=".") returned 1 [0200.311] wcscmp (_String1="BrightOrange.css", _String2="..") returned 1 [0200.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc50f8 [0200.311] wcscpy (in: _Dest=0x3dc50f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.311] wcscat (in: _Dest=0x3dc50f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.312] wcscat (in: _Dest=0x3dc50f8, _Source="BrightOrange.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" [0200.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc50f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0200.313] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1 [0200.313] wcscmp (_String1="BrightYellow", _String2=".") returned 1 [0200.313] wcscmp (_String1="BrightYellow", _String2="..") returned 1 [0200.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8aa8 [0200.313] wcscpy (in: _Dest=0x2c8aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.313] wcscat (in: _Dest=0x2c8aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.313] wcscat (in: _Dest=0x2c8aa8, _Source="BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0200.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c8aa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0200.315] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1074, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1 [0200.315] wcscmp (_String1="BrightYellow.css", _String2=".") returned 1 [0200.315] wcscmp (_String1="BrightYellow.css", _String2="..") returned 1 [0200.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc52c8 [0200.315] wcscpy (in: _Dest=0x3dc52c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.315] wcscat (in: _Dest=0x3dc52c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.315] wcscat (in: _Dest=0x3dc52c8, _Source="BrightYellow.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" [0200.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc52c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0200.316] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0200.316] wcscmp (_String1="Casual.css", _String2=".") returned 1 [0200.317] wcscmp (_String1="Casual.css", _String2="..") returned 1 [0200.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9368 [0200.317] wcscpy (in: _Dest=0x2c9368, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.317] wcscat (in: _Dest=0x2c9368, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.317] wcscat (in: _Dest=0x2c9368, _Source="Casual.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" [0200.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0200.318] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86cd6150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1 [0200.318] wcscmp (_String1="Country.css", _String2=".") returned 1 [0200.318] wcscmp (_String1="Country.css", _String2="..") returned 1 [0200.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x7cc0020 [0200.318] wcscpy (in: _Dest=0x7cc0020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.318] wcscat (in: _Dest=0x7cc0020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.318] wcscat (in: _Dest=0x7cc0020, _Source="Country.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" [0200.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0200.320] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7718eef0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876357f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0200.320] wcscmp (_String1="Desert", _String2=".") returned 1 [0200.320] wcscmp (_String1="Desert", _String2="..") returned 1 [0200.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e687f8 [0200.320] wcscpy (in: _Dest=0x3e687f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.320] wcscat (in: _Dest=0x3e687f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.320] wcscat (in: _Dest=0x3e687f8, _Source="Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0200.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0200.322] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0200.322] wcscmp (_String1="Desert.css", _String2=".") returned 1 [0200.322] wcscmp (_String1="Desert.css", _String2="..") returned 1 [0200.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7cc0100 [0200.322] wcscpy (in: _Dest=0x7cc0100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.322] wcscat (in: _Dest=0x7cc0100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.322] wcscat (in: _Dest=0x7cc0100, _Source="Desert.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" [0200.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0200.323] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x773a4230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x72e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0200.324] wcscmp (_String1="Earthy.css", _String2=".") returned 1 [0200.324] wcscmp (_String1="Earthy.css", _String2="..") returned 1 [0200.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7cc01e0 [0200.324] wcscpy (in: _Dest=0x7cc01e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.324] wcscat (in: _Dest=0x7cc01e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.324] wcscat (in: _Dest=0x7cc01e0, _Source="Earthy.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" [0200.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc01e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0200.325] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c7c7d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88777770, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1 [0200.325] wcscmp (_String1="GrayCheck", _String2=".") returned 1 [0200.325] wcscmp (_String1="GrayCheck", _String2="..") returned 1 [0200.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7cc02c0 [0200.326] wcscpy (in: _Dest=0x7cc02c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.326] wcscat (in: _Dest=0x7cc02c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.326] wcscat (in: _Dest=0x7cc02c0, _Source="GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0200.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cc02c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0200.327] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xeb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1 [0200.327] wcscmp (_String1="GrayCheck.css", _String2=".") returned 1 [0200.327] wcscmp (_String1="GrayCheck.css", _String2="..") returned 1 [0200.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc49b8 [0200.327] wcscpy (in: _Dest=0x3dc49b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.327] wcscat (in: _Dest=0x3dc49b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.328] wcscat (in: _Dest=0x3dc49b8, _Source="GrayCheck.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" [0200.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc49b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0200.329] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x762, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0200.329] wcscmp (_String1="GreenTea.css", _String2=".") returned 1 [0200.329] wcscmp (_String1="GreenTea.css", _String2="..") returned 1 [0200.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x7cc03a0 [0200.329] wcscpy (in: _Dest=0x7cc03a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.329] wcscat (in: _Dest=0x7cc03a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.329] wcscat (in: _Dest=0x7cc03a0, _Source="GreenTea.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" [0200.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc03a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0200.331] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1 [0200.331] wcscmp (_String1="LightSpirit.css", _String2=".") returned 1 [0200.331] wcscmp (_String1="LightSpirit.css", _String2="..") returned 1 [0200.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4aa0 [0200.331] wcscpy (in: _Dest=0x3dc4aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.331] wcscat (in: _Dest=0x3dc4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.331] wcscat (in: _Dest=0x3dc4aa0, _Source="LightSpirit.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" [0200.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0200.332] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8be11010, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0200.332] wcscmp (_String1="Lime", _String2=".") returned 1 [0200.332] wcscmp (_String1="Lime", _String2="..") returned 1 [0200.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d868e0 [0200.333] wcscpy (in: _Dest=0x3d868e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0200.333] wcscat (in: _Dest=0x3d868e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0200.333] wcscat (in: _Dest=0x3d868e0, _Source="Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0200.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d868e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0201.880] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1091, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0201.880] wcscmp (_String1="Lime.css", _String2=".") returned 1 [0201.880] wcscmp (_String1="Lime.css", _String2="..") returned 1 [0201.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68de0 [0201.880] wcscpy (in: _Dest=0x3e68de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.880] wcscat (in: _Dest=0x3e68de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.880] wcscat (in: _Dest=0x3e68de0, _Source="Lime.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" [0201.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0201.881] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7f2b1870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0201.881] wcscmp (_String1="Maroon.css", _String2=".") returned 1 [0201.881] wcscmp (_String1="Maroon.css", _String2="..") returned 1 [0201.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x7cc0560 [0201.882] wcscpy (in: _Dest=0x7cc0560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.882] wcscat (in: _Dest=0x7cc0560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.882] wcscat (in: _Dest=0x7cc0560, _Source="Maroon.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" [0201.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0201.883] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81287eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e3dad50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0201.883] wcscmp (_String1="Oasis", _String2=".") returned 1 [0201.883] wcscmp (_String1="Oasis", _String2="..") returned 1 [0201.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68498 [0201.883] wcscpy (in: _Dest=0x3e68498, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.883] wcscat (in: _Dest=0x3e68498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.883] wcscat (in: _Dest=0x3e68498, _Source="Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0201.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e68498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0201.884] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3b4bf0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0201.885] wcscmp (_String1="Oasis.css", _String2=".") returned 1 [0201.885] wcscmp (_String1="Oasis.css", _String2="..") returned 1 [0201.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7cc0640 [0201.885] wcscpy (in: _Dest=0x7cc0640, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.885] wcscat (in: _Dest=0x7cc0640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.885] wcscat (in: _Dest=0x7cc0640, _Source="Oasis.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" [0201.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0201.886] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e4e56f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1 [0201.886] wcscmp (_String1="OliveGreen.css", _String2=".") returned 1 [0201.886] wcscmp (_String1="OliveGreen.css", _String2="..") returned 1 [0201.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4530 [0201.886] wcscpy (in: _Dest=0x3dc4530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.886] wcscat (in: _Dest=0x3dc4530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.886] wcscat (in: _Dest=0x3dc4530, _Source="OliveGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" [0201.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0201.887] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x902a69f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x706, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0201.888] wcscmp (_String1="Premium.css", _String2=".") returned 1 [0201.888] wcscmp (_String1="Premium.css", _String2="..") returned 1 [0201.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x7cc0720 [0201.888] wcscpy (in: _Dest=0x7cc0720, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.888] wcscat (in: _Dest=0x7cc0720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.888] wcscat (in: _Dest=0x7cc0720, _Source="Premium.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" [0201.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0201.889] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82592eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90507ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0201.889] wcscmp (_String1="Slate", _String2=".") returned 1 [0201.889] wcscmp (_String1="Slate", _String2="..") returned 1 [0201.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e382c0 [0201.890] wcscpy (in: _Dest=0x3e382c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.890] wcscat (in: _Dest=0x3e382c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.890] wcscat (in: _Dest=0x3e382c0, _Source="Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0201.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e382c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0201.891] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0201.891] wcscmp (_String1="Slate.css", _String2=".") returned 1 [0201.891] wcscmp (_String1="Slate.css", _String2="..") returned 1 [0201.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7cc0800 [0201.891] wcscpy (in: _Dest=0x7cc0800, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.891] wcscat (in: _Dest=0x7cc0800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.891] wcscat (in: _Dest=0x7cc0800, _Source="Slate.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" [0201.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0201.892] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1 [0201.893] wcscmp (_String1="SlateBlue.css", _String2=".") returned 1 [0201.893] wcscmp (_String1="SlateBlue.css", _String2="..") returned 1 [0201.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4c70 [0201.893] wcscpy (in: _Dest=0x3dc4c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.893] wcscat (in: _Dest=0x3dc4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.893] wcscat (in: _Dest=0x3dc4c70, _Source="SlateBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" [0201.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0201.894] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x826776f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x905c66d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0201.894] wcscmp (_String1="SoftBlue", _String2=".") returned 1 [0201.894] wcscmp (_String1="SoftBlue", _String2="..") returned 1 [0201.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e38110 [0201.894] wcscpy (in: _Dest=0x3e38110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.894] wcscat (in: _Dest=0x3e38110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.894] wcscat (in: _Dest=0x3e38110, _Source="SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0201.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e38110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c [0201.895] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826776f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x11ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0201.895] wcscmp (_String1="SoftBlue.css", _String2=".") returned 1 [0201.895] wcscmp (_String1="SoftBlue.css", _String2="..") returned 1 [0201.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x7cc08e0 [0201.896] wcscpy (in: _Dest=0x7cc08e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.896] wcscat (in: _Dest=0x7cc08e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.896] wcscat (in: _Dest=0x7cc08e0, _Source="SoftBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" [0201.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc08e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0201.897] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8269d850, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1 [0201.897] wcscmp (_String1="SpringGreen", _String2=".") returned 1 [0201.897] wcscmp (_String1="SpringGreen", _String2="..") returned 1 [0201.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x7cc09c0 [0201.897] wcscpy (in: _Dest=0x7cc09c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.897] wcscat (in: _Dest=0x7cc09c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.897] wcscat (in: _Dest=0x7cc09c0, _Source="SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0201.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cc09c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0201.898] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1 [0201.898] wcscmp (_String1="SpringGreen.css", _String2=".") returned 1 [0201.898] wcscmp (_String1="SpringGreen.css", _String2="..") returned 1 [0201.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc48d0 [0201.898] wcscpy (in: _Dest=0x3dc48d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0201.898] wcscat (in: _Dest=0x3dc48d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0201.898] wcscat (in: _Dest=0x3dc48d0, _Source="SpringGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" [0201.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc48d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0201.899] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xadd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0204.227] wcscmp (_String1="Sts.css", _String2=".") returned 1 [0204.227] wcscmp (_String1="Sts.css", _String2="..") returned 1 [0204.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e37540 [0204.227] wcscpy (in: _Dest=0x3e37540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0204.227] wcscat (in: _Dest=0x3e37540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0204.227] wcscat (in: _Dest=0x3e37540, _Source="Sts.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" [0204.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23ac [0204.232] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8270fc70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906d1070, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0204.232] wcscmp (_String1="STS2", _String2=".") returned 1 [0204.232] wcscmp (_String1="STS2", _String2="..") returned 1 [0204.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d852f0 [0204.232] wcscpy (in: _Dest=0x3d852f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0204.232] wcscat (in: _Dest=0x3d852f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0204.232] wcscat (in: _Dest=0x3d852f0, _Source="STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0204.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d852f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a8 [0204.234] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0204.234] wcscmp (_String1="Sts2.css", _String2=".") returned 1 [0204.234] wcscmp (_String1="Sts2.css", _String2="..") returned 1 [0204.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e37030 [0204.234] wcscpy (in: _Dest=0x3e37030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0204.234] wcscat (in: _Dest=0x3e37030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0204.234] wcscat (in: _Dest=0x3e37030, _Source="Sts2.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" [0204.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e37030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0 [0204.236] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8275bf30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906f71d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0204.236] wcscmp (_String1="Swirl", _String2=".") returned 1 [0204.236] wcscmp (_String1="Swirl", _String2="..") returned 1 [0204.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e17200 [0204.236] wcscpy (in: _Dest=0x3e17200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0204.236] wcscat (in: _Dest=0x3e17200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0204.236] wcscat (in: _Dest=0x3e17200, _Source="Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0204.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e17200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0204.238] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xfb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0204.238] wcscmp (_String1="Swirl.css", _String2=".") returned 1 [0204.238] wcscmp (_String1="Swirl.css", _String2="..") returned 1 [0204.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8c68 [0204.238] wcscpy (in: _Dest=0x2c8c68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0204.238] wcscat (in: _Dest=0x2c8c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0204.238] wcscat (in: _Dest=0x2c8c68, _Source="Swirl.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" [0204.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0204.239] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90743490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0204.239] wcscmp (_String1="Teal.css", _String2=".") returned 1 [0204.239] wcscmp (_String1="Teal.css", _String2="..") returned 1 [0204.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e16b40 [0204.240] wcscpy (in: _Dest=0x3e16b40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0204.240] wcscat (in: _Dest=0x3e16b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0204.240] wcscat (in: _Dest=0x3e16b40, _Source="Teal.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" [0204.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e16b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0204.241] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1 [0204.241] wcscmp (_String1="TexturedBlue.css", _String2=".") returned 1 [0204.241] wcscmp (_String1="TexturedBlue.css", _String2="..") returned 1 [0204.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4190 [0204.241] wcscpy (in: _Dest=0x3dc4190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0204.241] wcscat (in: _Dest=0x3dc4190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0204.241] wcscat (in: _Dest=0x3dc4190, _Source="TexturedBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" [0204.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104 [0204.242] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1 [0204.242] wcscmp (_String1="VelvetRose.css", _String2=".") returned 1 [0204.242] wcscmp (_String1="VelvetRose.css", _String2="..") returned 1 [0204.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3ed8 [0204.242] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles" [0204.242] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\" [0204.242] wcscat (in: _Dest=0x3dc3ed8, _Source="VelvetRose.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" [0204.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0204.243] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a527c8 | out: lpFindFileData=0x7a527c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0 [0204.442] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a527c8) returned 1 [0205.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85d80) returned 1 [0205.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3aa80) returned 1 Thread: id = 5312 os_tid = 0x17b0 [0181.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm")) returned 0x20 [0184.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0184.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.071] GetLastError () returned 0x5 [0184.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0184.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9368) returned 1 Thread: id = 5313 os_tid = 0x17b4 [0181.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg")) returned 0x20 [0184.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0184.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.732] GetLastError () returned 0x5 [0184.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0184.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 Thread: id = 5314 os_tid = 0x17b8 [0181.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0184.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0184.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.731] GetLastError () returned 0x5 [0184.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0184.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafcb8) returned 1 Thread: id = 5315 os_tid = 0x17bc [0181.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html")) returned 0x20 [0184.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0184.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.730] GetLastError () returned 0x5 [0184.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0184.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38110) returned 1 Thread: id = 5316 os_tid = 0x17c0 [0181.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html")) returned 0x20 [0184.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0184.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.728] GetLastError () returned 0x5 [0184.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0184.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 5317 os_tid = 0x17c4 [0181.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg")) returned 0x20 [0184.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0184.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.494] GetLastError () returned 0x5 [0184.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0184.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38a58) returned 1 Thread: id = 5318 os_tid = 0x17c8 [0181.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js")) returned 0x20 [0184.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js", dwFileAttributes=0x20) returned 0 [0184.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.523] GetLastError () returned 0x5 [0184.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js", dwFileAttributes=0x20) returned 0 [0184.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a760) returned 1 Thread: id = 5319 os_tid = 0x17cc [0181.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif")) returned 0x20 [0184.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0184.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.070] GetLastError () returned 0x5 [0184.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0184.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a698) returned 1 Thread: id = 5320 os_tid = 0x17d0 [0181.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif")) returned 0x20 [0184.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0184.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.482] GetLastError () returned 0x5 [0184.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0184.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37cd8) returned 1 Thread: id = 5321 os_tid = 0x17d4 [0181.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js")) returned 0x20 [0184.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0184.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.522] GetLastError () returned 0x5 [0184.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0184.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37030) returned 1 Thread: id = 5322 os_tid = 0x17d8 [0181.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif")) returned 0x20 [0182.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0182.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.835] GetLastError () returned 0x5 [0183.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0183.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 Thread: id = 5323 os_tid = 0x18ac [0181.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif")) returned 0x20 [0184.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0184.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.520] GetLastError () returned 0x5 [0184.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0184.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16c18) returned 1 Thread: id = 5324 os_tid = 0x18c8 [0181.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif")) returned 0x20 [0184.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0184.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.488] GetLastError () returned 0x5 [0184.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0184.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a5d0) returned 1 Thread: id = 5325 os_tid = 0x18d0 [0181.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif")) returned 0x20 [0184.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0184.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.519] GetLastError () returned 0x5 [0184.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0184.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85700) returned 1 Thread: id = 5326 os_tid = 0x1908 [0181.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif")) returned 0x20 [0184.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0184.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.518] GetLastError () returned 0x5 [0184.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0184.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85080) returned 1 Thread: id = 5327 os_tid = 0x1960 [0181.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif")) returned 0x20 [0184.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0184.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.068] GetLastError () returned 0x5 [0184.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0184.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16b40) returned 1 Thread: id = 5328 os_tid = 0x1c00 [0181.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif")) returned 0x20 [0184.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0184.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.745] GetLastError () returned 0x5 [0184.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0184.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17f80) returned 1 Thread: id = 5329 os_tid = 0x1c10 [0181.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif")) returned 0x20 [0184.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0184.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.496] GetLastError () returned 0x5 [0184.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0184.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 Thread: id = 5330 os_tid = 0x1d64 [0181.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif")) returned 0x20 [0184.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif", dwFileAttributes=0x20) returned 0 [0184.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.507] GetLastError () returned 0x5 [0184.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif", dwFileAttributes=0x20) returned 0 [0184.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17200) returned 1 Thread: id = 5331 os_tid = 0x1e0c [0181.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml")) returned 0x20 [0183.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML", dwFileAttributes=0x20) returned 0 [0183.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.527] GetLastError () returned 0x5 [0183.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML", dwFileAttributes=0x20) returned 0 [0183.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 5332 os_tid = 0x1e10 [0181.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml")) returned 0x20 [0183.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML", dwFileAttributes=0x20) returned 0 [0183.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.599] GetLastError () returned 0x5 [0183.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML", dwFileAttributes=0x20) returned 0 [0183.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 5333 os_tid = 0x1e5c [0181.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml")) returned 0x20 [0183.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML", dwFileAttributes=0x20) returned 0 [0183.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.488] GetLastError () returned 0x5 [0183.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML", dwFileAttributes=0x20) returned 0 [0183.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 5334 os_tid = 0x1e60 [0181.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml")) returned 0x20 [0183.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML", dwFileAttributes=0x20) returned 0 [0183.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.637] GetLastError () returned 0x5 [0183.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML", dwFileAttributes=0x20) returned 0 [0183.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 5335 os_tid = 0x1e64 [0181.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml")) returned 0x20 [0183.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML", dwFileAttributes=0x20) returned 0 [0183.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.636] GetLastError () returned 0x5 [0183.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML", dwFileAttributes=0x20) returned 0 [0183.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d454a0) returned 1 Thread: id = 5336 os_tid = 0x1e68 [0181.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml")) returned 0x20 [0183.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML", dwFileAttributes=0x20) returned 0 [0183.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.633] GetLastError () returned 0x5 [0183.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML", dwFileAttributes=0x20) returned 0 [0183.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 5337 os_tid = 0x1e6c [0181.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml")) returned 0x20 [0183.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML", dwFileAttributes=0x20) returned 0 [0183.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.635] GetLastError () returned 0x5 [0183.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML", dwFileAttributes=0x20) returned 0 [0183.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 5338 os_tid = 0x1e70 [0181.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml")) returned 0x20 [0183.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML", dwFileAttributes=0x20) returned 0 [0183.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.631] GetLastError () returned 0x5 [0183.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML", dwFileAttributes=0x20) returned 0 [0183.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a685e0) returned 1 Thread: id = 5339 os_tid = 0x1e74 [0181.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml")) returned 0x20 [0183.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML", dwFileAttributes=0x20) returned 0 [0183.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.629] GetLastError () returned 0x5 [0183.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML", dwFileAttributes=0x20) returned 0 [0183.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68668) returned 1 Thread: id = 5340 os_tid = 0x1e94 [0181.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml")) returned 0x20 [0183.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML", dwFileAttributes=0x20) returned 0 [0183.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.628] GetLastError () returned 0x5 [0183.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML", dwFileAttributes=0x20) returned 0 [0183.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a686f0) returned 1 Thread: id = 5341 os_tid = 0x1e98 [0181.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml")) returned 0x20 [0183.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML", dwFileAttributes=0x20) returned 0 [0183.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.627] GetLastError () returned 0x5 [0183.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML", dwFileAttributes=0x20) returned 0 [0183.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68778) returned 1 Thread: id = 5342 os_tid = 0x1e9c [0181.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml")) returned 0x20 [0183.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML", dwFileAttributes=0x20) returned 0 [0183.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.625] GetLastError () returned 0x5 [0183.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML", dwFileAttributes=0x20) returned 0 [0183.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68910) returned 1 Thread: id = 5343 os_tid = 0x1ea0 [0181.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml")) returned 0x20 [0183.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML", dwFileAttributes=0x20) returned 0 [0183.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.624] GetLastError () returned 0x5 [0183.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML", dwFileAttributes=0x20) returned 0 [0183.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68558) returned 1 Thread: id = 5344 os_tid = 0x1ea4 [0181.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml")) returned 0x20 [0183.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML", dwFileAttributes=0x20) returned 0 [0183.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.623] GetLastError () returned 0x5 [0183.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML", dwFileAttributes=0x20) returned 0 [0183.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a684d0) returned 1 Thread: id = 5345 os_tid = 0x1ea8 [0181.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml")) returned 0x20 [0183.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML", dwFileAttributes=0x20) returned 0 [0183.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.622] GetLastError () returned 0x5 [0183.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML", dwFileAttributes=0x20) returned 0 [0183.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68448) returned 1 Thread: id = 5346 os_tid = 0x1eac [0181.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml")) returned 0x20 [0183.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML", dwFileAttributes=0x20) returned 0 [0183.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.620] GetLastError () returned 0x5 [0183.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML", dwFileAttributes=0x20) returned 0 [0183.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68888) returned 1 Thread: id = 5347 os_tid = 0x1eb8 [0181.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml")) returned 0x20 [0183.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML", dwFileAttributes=0x20) returned 0 [0183.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.619] GetLastError () returned 0x5 [0183.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML", dwFileAttributes=0x20) returned 0 [0183.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ee8) returned 1 Thread: id = 5348 os_tid = 0x1ebc [0181.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml")) returned 0x20 [0183.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML", dwFileAttributes=0x20) returned 0 [0183.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.618] GetLastError () returned 0x5 [0183.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML", dwFileAttributes=0x20) returned 0 [0183.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68f70) returned 1 Thread: id = 5349 os_tid = 0x1ec0 [0181.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml")) returned 0x20 [0183.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML", dwFileAttributes=0x20) returned 0 [0183.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.616] GetLastError () returned 0x5 [0183.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML", dwFileAttributes=0x20) returned 0 [0183.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ff8) returned 1 Thread: id = 5350 os_tid = 0x1ec4 [0181.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml")) returned 0x20 [0183.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML", dwFileAttributes=0x20) returned 0 [0183.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.614] GetLastError () returned 0x5 [0183.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML", dwFileAttributes=0x20) returned 0 [0183.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69080) returned 1 Thread: id = 5351 os_tid = 0x1ec8 [0181.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml")) returned 0x20 [0183.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML", dwFileAttributes=0x20) returned 0 [0183.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.612] GetLastError () returned 0x5 [0183.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML", dwFileAttributes=0x20) returned 0 [0183.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69108) returned 1 Thread: id = 5352 os_tid = 0x1ecc [0181.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml")) returned 0x20 [0183.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML", dwFileAttributes=0x20) returned 0 [0183.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.611] GetLastError () returned 0x5 [0183.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML", dwFileAttributes=0x20) returned 0 [0183.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69190) returned 1 Thread: id = 5353 os_tid = 0x1ed0 [0181.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml")) returned 0x20 [0183.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML", dwFileAttributes=0x20) returned 0 [0183.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.606] GetLastError () returned 0x5 [0183.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML", dwFileAttributes=0x20) returned 0 [0183.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69218) returned 1 Thread: id = 5354 os_tid = 0x1ed4 [0181.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml")) returned 0x20 [0183.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML", dwFileAttributes=0x20) returned 0 [0183.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.604] GetLastError () returned 0x5 [0183.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML", dwFileAttributes=0x20) returned 0 [0183.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a692a0) returned 1 Thread: id = 5355 os_tid = 0x1ed8 [0181.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml")) returned 0x20 [0183.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML", dwFileAttributes=0x20) returned 0 [0183.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.602] GetLastError () returned 0x5 [0183.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML", dwFileAttributes=0x20) returned 0 [0183.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69328) returned 1 Thread: id = 5356 os_tid = 0x1ee0 [0181.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml")) returned 0x20 [0183.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML", dwFileAttributes=0x20) returned 0 [0183.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.601] GetLastError () returned 0x5 [0183.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML", dwFileAttributes=0x20) returned 0 [0183.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a693b0) returned 1 Thread: id = 5357 os_tid = 0x1ef4 [0181.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml")) returned 0x20 [0183.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML", dwFileAttributes=0x20) returned 0 [0183.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.632] GetLastError () returned 0x5 [0183.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML", dwFileAttributes=0x20) returned 0 [0183.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69438) returned 1 Thread: id = 5358 os_tid = 0x1f18 [0181.782] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png")) returned 0x2020 [0183.113] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", dwFileAttributes=0x20) returned 1 [0183.114] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe28 [0183.114] GetFileSizeEx (in: hFile=0xe28, lpFileSize=0x3d1ff2c | out: lpFileSize=0x3d1ff2c*=3372) returned 1 [0183.114] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0xd28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.114] ReadFile (in: hFile=0xe28, lpBuffer=0x3d1ff08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3d1ff18, lpOverlapped=0x0 | out: lpBuffer=0x3d1ff08*, lpNumberOfBytesRead=0x3d1ff18*=0x4, lpOverlapped=0x0) returned 1 [0183.117] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0183.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0183.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0183.118] NtQuerySystemTime (in: CurrentTime=0x3d1fea0 | out: CurrentTime=0x3d1fea0*=132462177616920000) returned 0x0 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x2b04d9b8 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x2cf3f001 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x2c9e3e81 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x6c4dcc20 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x2def7a22 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x68e0ae4d [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x59be6467 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x77152f68 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x6bc2c9fa [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x3a4ec439 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x3b67bf88 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x7d9464f8 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x3ab16dd5 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x148cb6b7 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x6ebd961f [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x18331363 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x8b96add [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x21232a4c [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x2b725141 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x1496916c [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x4f342965 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x75448979 [0183.118] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x7f1cd3ce [0183.119] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x2577e8e8 [0183.119] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x187ac56a [0183.119] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x3902ba69 [0183.119] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x240d0b93 [0183.119] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x4d12ab42 [0183.119] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x53d5e22b [0183.119] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x52aaa733 [0183.119] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x3e3ef678 [0183.119] RtlRandomEx (in: Seed=0x3d1fe98 | out: Seed=0x3d1fe98) returned 0x61086794 [0183.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0183.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d103a0 [0183.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ac7cd8 [0183.414] ReadFile (in: hFile=0xe28, lpBuffer=0x7d103a0, nNumberOfBytesToRead=0xd2c, lpNumberOfBytesRead=0x3d1fe94, lpOverlapped=0x0 | out: lpBuffer=0x7d103a0*, lpNumberOfBytesRead=0x3d1fe94*=0xd2c, lpOverlapped=0x0) returned 1 [0183.414] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.414] WriteFile (in: hFile=0xe28, lpBuffer=0x7ac7cd8*, nNumberOfBytesToWrite=0xd2c, lpNumberOfBytesWritten=0x3d1fe98, lpOverlapped=0x0 | out: lpBuffer=0x7ac7cd8*, lpNumberOfBytesWritten=0x3d1fe98*=0xd2c, lpOverlapped=0x0) returned 1 [0183.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e368 [0183.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0183.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0183.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac7cd8) returned 1 [0183.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d103a0) returned 1 [0183.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0183.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85a10) returned 1 [0183.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37680 [0183.428] SetFilePointerEx (in: hFile=0xe28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.428] WriteFile (in: hFile=0xe28, lpBuffer=0x7a385e8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x3d1ff20, lpOverlapped=0x0 | out: lpBuffer=0x7a385e8*, lpNumberOfBytesWritten=0x3d1ff20*=0x10a, lpOverlapped=0x0) returned 1 [0183.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a385e8) returned 1 [0183.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37530) returned 1 [0183.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0183.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37680) returned 1 [0183.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e368) returned 1 [0183.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0183.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0183.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0183.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x7a385e8 [0183.450] wcscpy (in: _Dest=0x7a385e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" [0183.450] wcscat (in: _Dest=0x7a385e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.68814f" [0183.450] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.68814f", NtPathName=0x3d1fe98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55a90 [0183.453] FlushFileBuffers (hFile=0xe28) returned 1 [0183.609] CloseHandle (hObject=0xe28) returned 1 [0185.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7b7c668 [0185.994] wcscpy (in: _Dest=0x7b7c668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0185.994] wcscat (in: _Dest=0x7b7c668, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" [0185.994] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814f-readme.txt")) returned 0xffffffff [0185.994] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xac4 [0186.141] WriteFile (in: hFile=0xac4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x3d1feb4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x3d1feb4*=0x8b9, lpOverlapped=0x0) returned 1 [0186.149] CloseHandle (hObject=0xac4) returned 1 [0186.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c668) returned 1 [0186.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5d8) returned 1 Thread: id = 5359 os_tid = 0x1f1c [0181.784] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png")) returned 0x2020 [0183.485] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", dwFileAttributes=0x20) returned 1 [0186.462] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1940 [0186.462] GetFileSizeEx (in: hFile=0x1940, lpFileSize=0x46dfd7c | out: lpFileSize=0x46dfd7c*=160) returned 1 [0186.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0186.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0186.463] NtQuerySystemTime (in: CurrentTime=0x46dfcf0 | out: CurrentTime=0x46dfcf0*=132462177650460000) returned 0x0 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x1f92ab4b [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x524fe634 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x7489ea0c [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x5d6b560c [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x79fdec0f [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x100a6080 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x4f380390 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x29726c7a [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x66026b2 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x75a0cf37 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x7a7838f0 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x3cc780c9 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x2269bc3c [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x655ec82c [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x2d1ec8c1 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x4948755b [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x6bcabc6a [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x7e494b31 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x2c6d54e3 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x2dd23838 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x6df0b6a9 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x1a244f4b [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x5741f01 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x57837104 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x286d3d25 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x761cd316 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x1d2519db [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x6b2c9d13 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x552d5b2b [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x3569fd12 [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x6e51f2ae [0186.463] RtlRandomEx (in: Seed=0x46dfce8 | out: Seed=0x46dfce8) returned 0x19dbd904 [0186.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0186.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0186.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0186.472] ReadFile (in: hFile=0x1940, lpBuffer=0x7be7380, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0x46dfce4, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x46dfce4*=0xa0, lpOverlapped=0x0) returned 1 [0186.474] SetFilePointerEx (in: hFile=0x1940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.474] WriteFile (in: hFile=0x1940, lpBuffer=0x7beeb90*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x46dfce8, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesWritten=0x46dfce8*=0xa0, lpOverlapped=0x0) returned 1 [0187.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0187.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0187.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0187.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0187.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0187.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0187.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ff0) returned 1 [0187.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37770 [0187.692] SetFilePointerEx (in: hFile=0x1940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.693] WriteFile (in: hFile=0x1940, lpBuffer=0x7cad1a0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x46dfd70, lpOverlapped=0x0 | out: lpBuffer=0x7cad1a0*, lpNumberOfBytesWritten=0x46dfd70*=0x108, lpOverlapped=0x0) returned 1 [0187.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad1a0) returned 1 [0187.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a376b0) returned 1 [0187.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0187.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37770) returned 1 [0187.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0187.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0187.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0187.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0187.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cad1a0 [0187.756] wcscpy (in: _Dest=0x7cad1a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" [0187.756] wcscat (in: _Dest=0x7cad1a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.68814f" [0187.756] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.68814f", NtPathName=0x46dfce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb0020 [0187.876] FlushFileBuffers (hFile=0x1940) returned 1 [0187.902] CloseHandle (hObject=0x1940) returned 1 [0187.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cacf70 [0187.903] wcscpy (in: _Dest=0x7cacf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0187.903] wcscat (in: _Dest=0x7cacf70, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" [0187.903] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814f-readme.txt")) returned 0x2020 [0187.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacf70) returned 1 [0187.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb7e8) returned 1 Thread: id = 5360 os_tid = 0x1f20 [0181.785] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html")) returned 0x2020 [0183.485] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", dwFileAttributes=0x20) returned 1 [0186.401] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1910 [0186.402] GetFileSizeEx (in: hFile=0x1910, lpFileSize=0x5c8fedc | out: lpFileSize=0x5c8fedc*=92) returned 1 [0186.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0186.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0186.402] NtQuerySystemTime (in: CurrentTime=0x5c8fe50 | out: CurrentTime=0x5c8fe50*=132462177649836000) returned 0x0 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x6b374997 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x73de18a9 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x7168e5f6 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x5ada9d8a [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x3fe08d4f [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x3ce4afe8 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x71f6492b [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x28bf7ba1 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x36ce80ed [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x22894e6c [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x7b3d9f87 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x22f41055 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0xdc83996 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x6f969722 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x6ee3511 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x326d904e [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x4c6c7cf5 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x3a67a4d1 [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x7c7b2cfe [0186.402] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x789e5c9e [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x6c2566a4 [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x23b0a50b [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x2a699c2 [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x13995131 [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x6100eafa [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x771146c4 [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x1b90395c [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x475e1e4c [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x6bb5c123 [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x3404491 [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x59942a0 [0186.403] RtlRandomEx (in: Seed=0x5c8fe48 | out: Seed=0x5c8fe48) returned 0x31f92827 [0186.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0186.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0186.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0186.411] ReadFile (in: hFile=0x1910, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0x5c8fe44, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0x5c8fe44*=0x5c, lpOverlapped=0x0) returned 1 [0186.413] SetFilePointerEx (in: hFile=0x1910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.413] WriteFile (in: hFile=0x1910, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x5c8fe48, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0x5c8fe48*=0x5c, lpOverlapped=0x0) returned 1 [0187.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0187.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0187.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0187.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0187.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0187.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0187.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e00) returned 1 [0187.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0187.684] SetFilePointerEx (in: hFile=0x1910, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.684] WriteFile (in: hFile=0x1910, lpBuffer=0x7cad088*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x5c8fed0, lpOverlapped=0x0 | out: lpBuffer=0x7cad088*, lpNumberOfBytesWritten=0x5c8fed0*=0x104, lpOverlapped=0x0) returned 1 [0187.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0187.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0187.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0187.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0187.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a355b0 [0187.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0187.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0187.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0187.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0187.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x25) returned 0x7a374d0 [0187.749] sprintf (in: _Dest=0x7a374d0, _Format="%c%c" | out: _Dest="28") returned 2 [0187.750] sprintf (in: _Dest=0x7a374d2, _Format="%c%c" | out: _Dest="d5") returned 2 [0187.750] sprintf (in: _Dest=0x7a374d4, _Format="%c%c" | out: _Dest="22") returned 2 [0187.750] sprintf (in: _Dest=0x7a374d6, _Format="%c%c" | out: _Dest="06") returned 2 [0187.750] sprintf (in: _Dest=0x7a374d8, _Format="%c%c" | out: _Dest="7c") returned 2 [0187.750] sprintf (in: _Dest=0x7a374da, _Format="%c%c" | out: _Dest="95") returned 2 [0187.750] sprintf (in: _Dest=0x7a374dc, _Format="%c%c" | out: _Dest="a4") returned 2 [0187.750] sprintf (in: _Dest=0x7a374de, _Format="%c%c" | out: _Dest="b3") returned 2 [0187.750] sprintf (in: _Dest=0x7a374e0, _Format="%c%c" | out: _Dest="08") returned 2 [0187.750] sprintf (in: _Dest=0x7a374e2, _Format="%c%c" | out: _Dest="c7") returned 2 [0187.750] sprintf (in: _Dest=0x7a374e4, _Format="%c%c" | out: _Dest="ca") returned 2 [0187.750] sprintf (in: _Dest=0x7a374e6, _Format="%c%c" | out: _Dest="85") returned 2 [0187.750] sprintf (in: _Dest=0x7a374e8, _Format="%c%c" | out: _Dest="31") returned 2 [0187.750] sprintf (in: _Dest=0x7a374ea, _Format="%c%c" | out: _Dest="5f") returned 2 [0187.750] sprintf (in: _Dest=0x7a374ec, _Format="%c%c" | out: _Dest="aa") returned 2 [0187.750] sprintf (in: _Dest=0x7a374ee, _Format="%c%c" | out: _Dest="aa") returned 2 [0187.750] sprintf (in: _Dest=0x7a374f0, _Format="%c%c" | out: _Dest="70") returned 2 [0187.750] sprintf (in: _Dest=0x7a374f2, _Format="%c%c" | out: _Dest="5f") returned 2 [0187.750] RtlInitAnsiString (in: DestinationString=0x5c8fe58, SourceString="28d522067c95a4b308c7ca85315faaaa705f" | out: DestinationString="28d522067c95a4b308c7ca85315faaaa705f") [0187.750] RtlAnsiStringToUnicodeString (in: DestinationString=0x5c8fe50, SourceString="28d522067c95a4b308c7ca85315faaaa705f", AllocateDestinationString=1 | out: DestinationString="28d522067c95a4b308c7ca85315faaaa705f") returned 0x0 [0187.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a39790 [0187.751] wcscat (in: _Dest=0x7cad088, _Source="28d522067" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\28d522067") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\28d522067" [0187.751] wcscat (in: _Dest=0x7cad088, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\28d522067.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\28d522067.68814f" [0187.751] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\28d522067.68814f", NtPathName=0x5c8fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\28d522067.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7ca9d08 [0187.803] FlushFileBuffers (hFile=0x1910) returned 1 [0187.809] CloseHandle (hObject=0x1910) returned 1 [0187.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cac368 [0187.818] wcscpy (in: _Dest=0x7cac368, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0187.818] wcscat (in: _Dest=0x7cac368, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" [0187.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814f-readme.txt")) returned 0x2020 [0187.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac368) returned 1 [0187.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de93b8) returned 1 Thread: id = 5361 os_tid = 0x1f24 [0181.785] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js")) returned 0x2020 [0183.485] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", dwFileAttributes=0x20) returned 1 [0186.414] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1918 [0186.415] GetFileSizeEx (in: hFile=0x1918, lpFileSize=0x63bf95c | out: lpFileSize=0x63bf95c*=95) returned 1 [0186.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0186.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0186.415] NtQuerySystemTime (in: CurrentTime=0x63bf8d0 | out: CurrentTime=0x63bf8d0*=132462177649992000) returned 0x0 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x5bbc702 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x72cd3b54 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0xc1caaf [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x1b395083 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x581373a1 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x33e1047 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x60bfe619 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x761ae04f [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x16e0d59e [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x486ce306 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x63a59bef [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x4ea1de65 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x7ac6a4be [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x539a2736 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x277c5a88 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x5832dc99 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x27dd77f8 [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x5505b52c [0186.415] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x1bb3c1de [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x5049301f [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x1ca0ec03 [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x366d01e4 [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0xebabd4b [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x78880326 [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x7410a62f [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x42f20555 [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x3f56d5d6 [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x4a75c034 [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x1db0af4c [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x3d3548b6 [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x565f4bf0 [0186.416] RtlRandomEx (in: Seed=0x63bf8c8 | out: Seed=0x63bf8c8) returned 0x43b87c11 [0186.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0186.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0186.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0186.425] ReadFile (in: hFile=0x1918, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0x5f, lpNumberOfBytesRead=0x63bf8c4, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x63bf8c4*=0x5f, lpOverlapped=0x0) returned 1 [0186.427] SetFilePointerEx (in: hFile=0x1918, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.427] WriteFile (in: hFile=0x1918, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x63bf8c8, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0x63bf8c8*=0x5f, lpOverlapped=0x0) returned 1 [0187.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0187.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0187.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0187.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0187.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0187.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0187.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25548) returned 1 [0187.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3358 [0187.686] SetFilePointerEx (in: hFile=0x1918, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.686] WriteFile (in: hFile=0x1918, lpBuffer=0x7cae020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x63bf950, lpOverlapped=0x0 | out: lpBuffer=0x7cae020*, lpNumberOfBytesWritten=0x63bf950*=0x100, lpOverlapped=0x0) returned 1 [0187.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0187.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0187.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0187.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a600) returned 1 [0187.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43860 [0187.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0187.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0187.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0187.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0187.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3d5dc60 [0187.758] sprintf (in: _Dest=0x3d5dc60, _Format="%c%c" | out: _Dest="f2") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc62, _Format="%c%c" | out: _Dest="ff") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc64, _Format="%c%c" | out: _Dest="c1") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc66, _Format="%c%c" | out: _Dest="f0") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc68, _Format="%c%c" | out: _Dest="18") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc6a, _Format="%c%c" | out: _Dest="dd") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc6c, _Format="%c%c" | out: _Dest="4a") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc6e, _Format="%c%c" | out: _Dest="ae") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc70, _Format="%c%c" | out: _Dest="e0") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc72, _Format="%c%c" | out: _Dest="40") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc74, _Format="%c%c" | out: _Dest="db") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc76, _Format="%c%c" | out: _Dest="75") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc78, _Format="%c%c" | out: _Dest="0d") returned 2 [0187.758] sprintf (in: _Dest=0x3d5dc7a, _Format="%c%c" | out: _Dest="b0") returned 2 [0187.758] RtlInitAnsiString (in: DestinationString=0x63bf8d8, SourceString="f2ffc1f018dd4aaee040db750db0" | out: DestinationString="f2ffc1f018dd4aaee040db750db0") [0187.758] RtlAnsiStringToUnicodeString (in: DestinationString=0x63bf8d0, SourceString="f2ffc1f018dd4aaee040db750db0", AllocateDestinationString=1 | out: DestinationString="f2ffc1f018dd4aaee040db750db0") returned 0x0 [0187.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e85470 [0187.759] wcscat (in: _Dest=0x7cae020, _Source="f2ffc1f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f2ffc1f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f2ffc1f" [0187.759] wcscat (in: _Dest=0x7cae020, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f2ffc1f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f2ffc1f.68814f" [0187.759] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f2ffc1f.68814f", NtPathName=0x63bf8c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f2ffc1f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb0148 [0187.887] FlushFileBuffers (hFile=0x1918) returned 1 [0187.897] CloseHandle (hObject=0x1918) returned 1 [0187.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cacf70 [0187.898] wcscpy (in: _Dest=0x7cacf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0187.898] wcscat (in: _Dest=0x7cacf70, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" [0187.898] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814f-readme.txt")) returned 0x2020 [0187.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacf70) returned 1 [0187.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de94b8) returned 1 Thread: id = 5362 os_tid = 0x1f28 [0181.786] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json")) returned 0x2020 [0183.486] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0186.428] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x191c [0186.428] GetFileSizeEx (in: hFile=0x191c, lpFileSize=0x5e0fb9c | out: lpFileSize=0x5e0fb9c*=725) returned 1 [0186.428] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x2d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.429] ReadFile (in: hFile=0x191c, lpBuffer=0x5e0fb78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5e0fb88, lpOverlapped=0x0 | out: lpBuffer=0x5e0fb78*, lpNumberOfBytesRead=0x5e0fb88*=0x4, lpOverlapped=0x0) returned 1 [0186.431] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0186.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0186.431] NtQuerySystemTime (in: CurrentTime=0x5e0fb10 | out: CurrentTime=0x5e0fb10*=132462177650148000) returned 0x0 [0186.431] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x4bf55cac [0186.431] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x5769f569 [0186.431] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x1d56cb88 [0186.431] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x61f8201 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x3d074688 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x2fd5ff14 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x2d1f5e9c [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x77cd212 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x27695f50 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x8c31073 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x6fe5b02f [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0xba0c447 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x5a8cbe55 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x22eef424 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x1cac9c3c [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x7e1958ea [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x457b2d91 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x69fd468 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x15f8568a [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x6bb99b4e [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x5f4a941 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x451327d2 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0xbe4f6af [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x236102d [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x5c9d081 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x53cb58c5 [0186.432] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x29e6a774 [0186.433] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x7377b0c [0186.433] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x15f45f2a [0186.433] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x1a20e875 [0186.433] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x7edb30cb [0186.433] RtlRandomEx (in: Seed=0x5e0fb08 | out: Seed=0x5e0fb08) returned 0x6d4ca8d7 [0186.443] ReadFile (in: hFile=0x191c, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0x5e0fb04, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0x5e0fb04*=0x2d5, lpOverlapped=0x0) returned 1 [0186.443] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.443] WriteFile (in: hFile=0x191c, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0x5e0fb08, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0x5e0fb08*=0x2d5, lpOverlapped=0x0) returned 1 [0189.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0189.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa30 [0189.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0189.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0189.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0189.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 [0189.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25938) returned 1 [0189.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37830 [0189.123] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.123] WriteFile (in: hFile=0x191c, lpBuffer=0x7a39308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5e0fb90, lpOverlapped=0x0 | out: lpBuffer=0x7a39308*, lpNumberOfBytesWritten=0x5e0fb90*=0x10c, lpOverlapped=0x0) returned 1 [0190.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a258f0 [0190.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0190.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0190.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0190.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2ed0 [0190.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0190.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0190.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f98) returned 1 [0190.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0190.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258f0) returned 1 [0190.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d980 [0190.123] sprintf (in: _Dest=0x7a2d980, _Format="%c%c" | out: _Dest="f1") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d982, _Format="%c%c" | out: _Dest="57") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d984, _Format="%c%c" | out: _Dest="8d") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d986, _Format="%c%c" | out: _Dest="c2") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d988, _Format="%c%c" | out: _Dest="33") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d98a, _Format="%c%c" | out: _Dest="40") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d98c, _Format="%c%c" | out: _Dest="56") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d98e, _Format="%c%c" | out: _Dest="43") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d990, _Format="%c%c" | out: _Dest="0c") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d992, _Format="%c%c" | out: _Dest="04") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d994, _Format="%c%c" | out: _Dest="b2") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d996, _Format="%c%c" | out: _Dest="86") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d998, _Format="%c%c" | out: _Dest="da") returned 2 [0190.123] sprintf (in: _Dest=0x7a2d99a, _Format="%c%c" | out: _Dest="9e") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d99c, _Format="%c%c" | out: _Dest="e6") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d99e, _Format="%c%c" | out: _Dest="7e") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d9a0, _Format="%c%c" | out: _Dest="9a") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d9a2, _Format="%c%c" | out: _Dest="94") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d9a4, _Format="%c%c" | out: _Dest="a6") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d9a6, _Format="%c%c" | out: _Dest="5e") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d9a8, _Format="%c%c" | out: _Dest="e8") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d9aa, _Format="%c%c" | out: _Dest="f9") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d9ac, _Format="%c%c" | out: _Dest="16") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d9ae, _Format="%c%c" | out: _Dest="fa") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d9b0, _Format="%c%c" | out: _Dest="40") returned 2 [0190.124] sprintf (in: _Dest=0x7a2d9b2, _Format="%c%c" | out: _Dest="89") returned 2 [0190.124] RtlInitAnsiString (in: DestinationString=0x5e0fb18, SourceString="f1578dc2334056430c04b286da9ee67e9a94a65ee8f916fa4089" | out: DestinationString="f1578dc2334056430c04b286da9ee67e9a94a65ee8f916fa4089") [0190.124] RtlAnsiStringToUnicodeString (in: DestinationString=0x5e0fb10, SourceString="f1578dc2334056430c04b286da9ee67e9a94a65ee8f916fa4089", AllocateDestinationString=1 | out: DestinationString="f1578dc2334056430c04b286da9ee67e9a94a65ee8f916fa4089") returned 0x0 [0190.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e940 [0190.125] wcscat (in: _Dest=0x7a39308, _Source="f1578dc233405" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f1578dc233405") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f1578dc233405" [0190.125] wcscat (in: _Dest=0x7a39308, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f1578dc233405.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f1578dc233405.68814f" [0190.125] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f1578dc233405.68814f", NtPathName=0x5e0fb08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\f1578dc233405.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9b98 [0190.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9b98) returned 1 [0190.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a46828) returned 1 [0190.128] NtQueryInformationFile (in: FileHandle=0x191c, IoStatusBlock=0x5e0fae0, FileInformation=0x5e0fae8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5e0fae0, FileInformation=0x5e0fae8) returned 0x0 [0190.128] NtSetInformationFile (FileHandle=0x191c, IoStatusBlock=0x5e0fae0, FileInformation=0x5e0fae8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39308) returned 1 [0190.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0190.130] FlushFileBuffers (hFile=0x191c) returned 1 [0190.612] CloseHandle (hObject=0x191c) returned 1 [0192.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3deca58 [0192.492] wcscpy (in: _Dest=0x3deca58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\" [0192.492] wcscat (in: _Dest=0x3deca58, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" [0192.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\68814f-readme.txt")) returned 0x2020 [0192.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0192.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb8f0) returned 1 Thread: id = 5363 os_tid = 0x1f30 [0181.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3de9fb8 [0181.787] wcscpy (in: _Dest=0x3de9fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0181.787] wcscat (in: _Dest=0x3de9fb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0181.787] wcscat (in: _Dest=0x3de9fb8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*" [0181.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0181.787] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e1cb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc3140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc3140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf5d0 [0182.948] wcscmp (_String1=".", _String2=".") returned 0 [0182.948] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e1cb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc3140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc3140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.949] wcscmp (_String1="..", _String2=".") returned 1 [0182.949] wcscmp (_String1="..", _String2="..") returned 0 [0182.949] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e21990, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e240a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e240a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0182.949] wcscmp (_String1="ar", _String2=".") returned 1 [0182.949] wcscmp (_String1="ar", _String2="..") returned 1 [0182.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc868 [0182.949] wcscpy (in: _Dest=0x30bc868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0182.949] wcscat (in: _Dest=0x30bc868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0182.949] wcscat (in: _Dest=0x30bc868, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0183.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0183.309] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e2b5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e2dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e2dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0183.309] wcscmp (_String1="bg", _String2=".") returned 1 [0183.309] wcscmp (_String1="bg", _String2="..") returned 1 [0183.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bcd90 [0183.310] wcscpy (in: _Dest=0x30bcd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.310] wcscat (in: _Dest=0x30bcd90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.310] wcscat (in: _Dest=0x30bcd90, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0183.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bcd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0183.311] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e35210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3a030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e3a030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0183.311] wcscmp (_String1="ca", _String2=".") returned 1 [0183.311] wcscmp (_String1="ca", _String2="..") returned 1 [0183.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bce98 [0183.311] wcscpy (in: _Dest=0x30bce98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.311] wcscat (in: _Dest=0x30bce98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.311] wcscat (in: _Dest=0x30bce98, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0183.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bce98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0183.312] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e3ee50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e43c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e43c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0183.312] wcscmp (_String1="cs", _String2=".") returned 1 [0183.312] wcscmp (_String1="cs", _String2="..") returned 1 [0183.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bcfa0 [0183.313] wcscpy (in: _Dest=0x30bcfa0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.313] wcscat (in: _Dest=0x30bcfa0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.313] wcscat (in: _Dest=0x30bcfa0, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0183.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bcfa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0183.314] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e46380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e4b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0183.314] wcscmp (_String1="da", _String2=".") returned 1 [0183.314] wcscmp (_String1="da", _String2="..") returned 1 [0183.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bd0a8 [0183.314] wcscpy (in: _Dest=0x30bd0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.314] wcscat (in: _Dest=0x30bd0a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.314] wcscat (in: _Dest=0x30bd0a8, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0183.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bd0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b8 [0183.318] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e526d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e54de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e54de0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0183.318] wcscmp (_String1="de", _String2=".") returned 1 [0183.318] wcscmp (_String1="de", _String2="..") returned 1 [0183.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bd1b0 [0183.318] wcscpy (in: _Dest=0x30bd1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.318] wcscat (in: _Dest=0x30bd1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.318] wcscat (in: _Dest=0x30bd1b0, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0183.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bd1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0183.335] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e5c310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e5ea20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e5ea20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0183.335] wcscmp (_String1="el", _String2=".") returned 1 [0183.335] wcscmp (_String1="el", _String2="..") returned 1 [0183.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bd2b8 [0183.335] wcscpy (in: _Dest=0x30bd2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.335] wcscat (in: _Dest=0x30bd2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.335] wcscat (in: _Dest=0x30bd2b8, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0183.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bd2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b0 [0183.336] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e65f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e68660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e68660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0183.336] wcscmp (_String1="en_GB", _String2=".") returned 1 [0183.336] wcscmp (_String1="en_GB", _String2="..") returned 1 [0183.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6a090 [0183.462] wcscpy (in: _Dest=0x7a6a090, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.462] wcscat (in: _Dest=0x7a6a090, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.462] wcscat (in: _Dest=0x7a6a090, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0183.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0183.567] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e6fb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e722a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e722a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0183.567] wcscmp (_String1="en_US", _String2=".") returned 1 [0183.567] wcscmp (_String1="en_US", _String2="..") returned 1 [0183.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b320 [0183.567] wcscpy (in: _Dest=0x7a6b320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.567] wcscat (in: _Dest=0x7a6b320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.567] wcscat (in: _Dest=0x7a6b320, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0183.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0183.568] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e797d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e7bee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e7bee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0183.568] wcscmp (_String1="es", _String2=".") returned 1 [0183.568] wcscmp (_String1="es", _String2="..") returned 1 [0183.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6b428 [0183.568] wcscpy (in: _Dest=0x7a6b428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.568] wcscat (in: _Dest=0x7a6b428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.568] wcscat (in: _Dest=0x7a6b428, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0183.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0183.569] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e83410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e85b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e85b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0183.569] wcscmp (_String1="es_419", _String2=".") returned 1 [0183.569] wcscmp (_String1="es_419", _String2="..") returned 1 [0183.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38700 [0183.569] wcscpy (in: _Dest=0x7a38700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.569] wcscat (in: _Dest=0x7a38700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.569] wcscat (in: _Dest=0x7a38700, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0183.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0183.570] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e8d050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8f760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e8f760, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0183.570] wcscmp (_String1="et", _String2=".") returned 1 [0183.570] wcscmp (_String1="et", _String2="..") returned 1 [0183.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6b530 [0183.570] wcscpy (in: _Dest=0x7a6b530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.570] wcscat (in: _Dest=0x7a6b530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.570] wcscat (in: _Dest=0x7a6b530, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0183.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0183.571] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e96c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9bab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e9bab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0183.571] wcscmp (_String1="fi", _String2=".") returned 1 [0183.571] wcscmp (_String1="fi", _String2="..") returned 1 [0183.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6b638 [0183.571] wcscpy (in: _Dest=0x7a6b638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.571] wcscat (in: _Dest=0x7a6b638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.571] wcscat (in: _Dest=0x7a6b638, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0183.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0183.572] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ea2fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea56f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ea56f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0183.572] wcscmp (_String1="fil", _String2=".") returned 1 [0183.572] wcscmp (_String1="fil", _String2="..") returned 1 [0183.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6b740 [0183.572] wcscpy (in: _Dest=0x7a6b740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.572] wcscat (in: _Dest=0x7a6b740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.572] wcscat (in: _Dest=0x7a6b740, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0183.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0 [0183.573] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eacc20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eaf330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eaf330, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0183.573] wcscmp (_String1="fr", _String2=".") returned 1 [0183.573] wcscmp (_String1="fr", _String2="..") returned 1 [0183.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6b848 [0183.573] wcscpy (in: _Dest=0x7a6b848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.573] wcscat (in: _Dest=0x7a6b848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.573] wcscat (in: _Dest=0x7a6b848, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0183.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23fc [0183.574] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eb1a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb6860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eb6860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0183.574] wcscmp (_String1="he", _String2=".") returned 1 [0183.574] wcscmp (_String1="he", _String2="..") returned 1 [0183.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6b950 [0183.574] wcscpy (in: _Dest=0x7a6b950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.574] wcscat (in: _Dest=0x7a6b950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.574] wcscat (in: _Dest=0x7a6b950, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0183.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0183.575] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ebdd90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec04a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ec04a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0183.575] wcscmp (_String1="hi", _String2=".") returned 1 [0183.575] wcscmp (_String1="hi", _String2="..") returned 1 [0183.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6ba58 [0183.575] wcscpy (in: _Dest=0x7a6ba58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.575] wcscat (in: _Dest=0x7a6ba58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.575] wcscat (in: _Dest=0x7a6ba58, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0183.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6ba58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8 [0183.576] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ec52c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eca0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eca0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0183.577] wcscmp (_String1="hu", _String2=".") returned 1 [0183.577] wcscmp (_String1="hu", _String2="..") returned 1 [0183.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6bb60 [0183.577] wcscpy (in: _Dest=0x7a6bb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.577] wcscat (in: _Dest=0x7a6bb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.577] wcscat (in: _Dest=0x7a6bb60, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0183.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6bb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc [0183.578] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ed1610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed3d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ed3d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0183.578] wcscmp (_String1="id", _String2=".") returned 1 [0183.578] wcscmp (_String1="id", _String2="..") returned 1 [0183.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6bc68 [0183.578] wcscpy (in: _Dest=0x7a6bc68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.578] wcscat (in: _Dest=0x7a6bc68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.578] wcscat (in: _Dest=0x7a6bc68, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0183.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6bc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0183.579] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5edd960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee0070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee0070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0183.579] wcscmp (_String1="it", _String2=".") returned 1 [0183.579] wcscmp (_String1="it", _String2="..") returned 1 [0183.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6bd70 [0183.579] wcscpy (in: _Dest=0x7a6bd70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.579] wcscat (in: _Dest=0x7a6bd70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.579] wcscat (in: _Dest=0x7a6bd70, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0183.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0183.580] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee75a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee9cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee9cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0183.580] wcscmp (_String1="ja", _String2=".") returned 1 [0183.580] wcscmp (_String1="ja", _String2="..") returned 1 [0183.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6be78 [0183.580] wcscpy (in: _Dest=0x7a6be78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.580] wcscat (in: _Dest=0x7a6be78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.580] wcscat (in: _Dest=0x7a6be78, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0183.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6be78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250 [0183.581] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ef11e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef38f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ef38f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0183.581] wcscmp (_String1="ko", _String2=".") returned 1 [0183.581] wcscmp (_String1="ko", _String2="..") returned 1 [0183.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7a320 [0183.581] wcscpy (in: _Dest=0x7b7a320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.581] wcscat (in: _Dest=0x7b7a320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.581] wcscat (in: _Dest=0x7b7a320, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0183.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7a320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c [0183.582] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5efae20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5efd530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5efd530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0183.582] wcscmp (_String1="lt", _String2=".") returned 1 [0183.582] wcscmp (_String1="lt", _String2="..") returned 1 [0183.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7a428 [0183.582] wcscpy (in: _Dest=0x7b7a428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.582] wcscat (in: _Dest=0x7b7a428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.582] wcscat (in: _Dest=0x7b7a428, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0183.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7a428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8 [0183.833] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f04a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f07170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f07170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0183.833] wcscmp (_String1="lv", _String2=".") returned 1 [0183.833] wcscmp (_String1="lv", _String2="..") returned 1 [0183.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7b9d0 [0183.833] wcscpy (in: _Dest=0x7b7b9d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0183.833] wcscat (in: _Dest=0x7b7b9d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0183.833] wcscat (in: _Dest=0x7b7b9d0, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0188.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980 [0188.304] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f0e6a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f10db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f10db0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0188.304] wcscmp (_String1="ms", _String2=".") returned 1 [0188.304] wcscmp (_String1="ms", _String2="..") returned 1 [0188.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad58f0 [0188.305] wcscpy (in: _Dest=0x7ad58f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.305] wcscat (in: _Dest=0x7ad58f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.305] wcscat (in: _Dest=0x7ad58f0, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0188.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad58f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910 [0188.306] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f182e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1a9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f1a9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0188.306] wcscmp (_String1="nl", _String2=".") returned 1 [0188.306] wcscmp (_String1="nl", _String2="..") returned 1 [0188.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad57e8 [0188.306] wcscpy (in: _Dest=0x7ad57e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.307] wcscat (in: _Dest=0x7ad57e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.307] wcscat (in: _Dest=0x7ad57e8, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0188.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad57e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4 [0188.308] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f21f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f24630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f24630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0188.308] wcscmp (_String1="no", _String2=".") returned 1 [0188.308] wcscmp (_String1="no", _String2="..") returned 1 [0188.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad56e0 [0188.308] wcscpy (in: _Dest=0x7ad56e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.308] wcscat (in: _Dest=0x7ad56e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.308] wcscat (in: _Dest=0x7ad56e0, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0188.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad56e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548 [0188.309] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f2bb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f2e270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f2e270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0188.309] wcscmp (_String1="pl", _String2=".") returned 1 [0188.309] wcscmp (_String1="pl", _String2="..") returned 1 [0188.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad55d8 [0188.310] wcscpy (in: _Dest=0x7ad55d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.310] wcscat (in: _Dest=0x7ad55d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.310] wcscat (in: _Dest=0x7ad55d8, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0188.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad55d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c [0188.311] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f357a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3a5c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f3a5c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0188.311] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0188.311] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0188.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad53c8 [0188.311] wcscpy (in: _Dest=0x7ad53c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.311] wcscat (in: _Dest=0x7ad53c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.311] wcscat (in: _Dest=0x7ad53c8, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0188.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad53c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a8 [0188.313] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f41af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f44200, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f44200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0188.313] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0188.313] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0188.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6e98 [0188.313] wcscpy (in: _Dest=0x7ad6e98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.313] wcscat (in: _Dest=0x7ad6e98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.313] wcscat (in: _Dest=0x7ad6e98, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0188.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4 [0188.314] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f4b730, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f4de40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f4de40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0188.314] wcscmp (_String1="ro", _String2=".") returned 1 [0188.314] wcscmp (_String1="ro", _String2="..") returned 1 [0188.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad52c0 [0188.314] wcscpy (in: _Dest=0x7ad52c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.314] wcscat (in: _Dest=0x7ad52c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.314] wcscat (in: _Dest=0x7ad52c0, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0188.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad52c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f0 [0188.315] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f55370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5a190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f5a190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0188.315] wcscmp (_String1="ru", _String2=".") returned 1 [0188.315] wcscmp (_String1="ru", _String2="..") returned 1 [0188.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6d90 [0188.315] wcscpy (in: _Dest=0x7ad6d90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.315] wcscat (in: _Dest=0x7ad6d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.330] wcscat (in: _Dest=0x7ad6d90, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0188.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0 [0188.332] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f616c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f63dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f63dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0188.332] wcscmp (_String1="sk", _String2=".") returned 1 [0188.332] wcscmp (_String1="sk", _String2="..") returned 1 [0188.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6c88 [0188.332] wcscpy (in: _Dest=0x7ad6c88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.332] wcscat (in: _Dest=0x7ad6c88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.332] wcscat (in: _Dest=0x7ad6c88, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0188.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0 [0188.334] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f6b300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f70120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f70120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0188.334] wcscmp (_String1="sl", _String2=".") returned 1 [0188.334] wcscmp (_String1="sl", _String2="..") returned 1 [0188.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6b80 [0188.334] wcscpy (in: _Dest=0x7ad6b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.334] wcscat (in: _Dest=0x7ad6b80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.334] wcscat (in: _Dest=0x7ad6b80, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0188.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0 [0188.335] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f79d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7c470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f7c470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0188.335] wcscmp (_String1="sr", _String2=".") returned 1 [0188.335] wcscmp (_String1="sr", _String2="..") returned 1 [0188.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6970 [0188.335] wcscpy (in: _Dest=0x7ad6970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.335] wcscat (in: _Dest=0x7ad6970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.335] wcscat (in: _Dest=0x7ad6970, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0188.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704 [0188.337] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f839a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f860b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f860b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0188.337] wcscmp (_String1="sv", _String2=".") returned 1 [0188.337] wcscmp (_String1="sv", _String2="..") returned 1 [0188.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6868 [0188.337] wcscpy (in: _Dest=0x7ad6868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.337] wcscat (in: _Dest=0x7ad6868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.337] wcscat (in: _Dest=0x7ad6868, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0188.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0188.338] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f8d5e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f8fcf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f8fcf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0188.338] wcscmp (_String1="th", _String2=".") returned 1 [0188.338] wcscmp (_String1="th", _String2="..") returned 1 [0188.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6a78 [0188.339] wcscpy (in: _Dest=0x7ad6a78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.339] wcscat (in: _Dest=0x7ad6a78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.339] wcscat (in: _Dest=0x7ad6a78, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0188.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6a78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0188.340] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f97220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f99930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f99930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0188.340] wcscmp (_String1="tr", _String2=".") returned 1 [0188.341] wcscmp (_String1="tr", _String2="..") returned 1 [0188.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad54d0 [0188.341] wcscpy (in: _Dest=0x7ad54d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.341] wcscat (in: _Dest=0x7ad54d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.341] wcscat (in: _Dest=0x7ad54d0, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0188.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad54d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0188.342] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fa0e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fa8390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fa8390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0188.342] wcscmp (_String1="uk", _String2=".") returned 1 [0188.342] wcscmp (_String1="uk", _String2="..") returned 1 [0188.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bbc08 [0188.342] wcscpy (in: _Dest=0x30bbc08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.342] wcscat (in: _Dest=0x30bbc08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.342] wcscat (in: _Dest=0x30bbc08, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0188.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bbc08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0188.344] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fad1b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb1fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fb1fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0188.344] wcscmp (_String1="vi", _String2=".") returned 1 [0188.344] wcscmp (_String1="vi", _String2="..") returned 1 [0188.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bb5d8 [0188.344] wcscpy (in: _Dest=0x30bb5d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.344] wcscat (in: _Dest=0x30bb5d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.344] wcscat (in: _Dest=0x30bb5d8, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0188.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bb5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c [0188.348] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fb6df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbbc10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fbbc10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0188.348] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0188.348] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0188.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7f9d0 [0188.349] wcscpy (in: _Dest=0x7b7f9d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.349] wcscat (in: _Dest=0x7b7f9d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.349] wcscat (in: _Dest=0x7b7f9d0, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0188.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0 [0188.350] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0188.350] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0188.350] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0188.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b80000 [0188.350] wcscpy (in: _Dest=0x7b80000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" [0188.350] wcscat (in: _Dest=0x7b80000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\" [0188.350] wcscat (in: _Dest=0x7b80000, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0188.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b80000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0188.352] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0188.352] FindClose (in: hFindFile=0x3dcf5d0 | out: hFindFile=0x3dcf5d0) returned 1 [0188.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0188.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de9fb8) returned 1 [0188.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de95b8) returned 1 Thread: id = 5364 os_tid = 0x1f34 [0181.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2fa978 [0181.788] wcscpy (in: _Dest=0x2fa978, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0181.788] wcscat (in: _Dest=0x2fa978, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0181.788] wcscat (in: _Dest=0x2fa978, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*" [0181.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a538a0 [0181.788] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf610 [0183.484] wcscmp (_String1=".", _String2=".") returned 0 [0183.484] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fe5420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b2af0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.484] wcscmp (_String1="..", _String2=".") returned 1 [0183.484] wcscmp (_String1="..", _String2="..") returned 0 [0183.484] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe61b2af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe61b2af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe61b5200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0183.484] wcscmp (_String1="computed_hashes.json", _String2=".") returned 1 [0183.484] wcscmp (_String1="computed_hashes.json", _String2="..") returned 1 [0183.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55e08 [0183.484] wcscpy (in: _Dest=0x3d55e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0183.484] wcscat (in: _Dest=0x3d55e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0183.484] wcscat (in: _Dest=0x3d55e08, _Source="computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" [0184.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0184.314] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fe7b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fea240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0184.314] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0184.314] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0184.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca078 [0184.315] wcscpy (in: _Dest=0x3eca078, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" [0184.315] wcscat (in: _Dest=0x3eca078, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0184.315] wcscat (in: _Dest=0x3eca078, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" [0184.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eca078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0184.315] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fe7b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fea240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0184.316] FindClose (in: hFindFile=0x3dcf610 | out: hFindFile=0x3dcf610) returned 1 [0184.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a538a0) returned 1 [0184.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fa978) returned 1 [0184.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de96b8) returned 1 Thread: id = 5365 os_tid = 0x1f38 [0181.789] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png")) returned 0x2020 [0184.101] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", dwFileAttributes=0x20) returned 1 [0186.570] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8 [0186.583] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x798f8c4 | out: lpFileSize=0x798f8c4*=3213) returned 1 [0186.583] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0xc89, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.583] ReadFile (in: hFile=0x16f8, lpBuffer=0x798f8a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x798f8b0, lpOverlapped=0x0 | out: lpBuffer=0x798f8a0*, lpNumberOfBytesRead=0x798f8b0*=0x4, lpOverlapped=0x0) returned 1 [0186.585] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0186.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0186.585] NtQuerySystemTime (in: CurrentTime=0x798f838 | out: CurrentTime=0x798f838*=132462177651708000) returned 0x0 [0186.585] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x7786136a [0186.585] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x5c733720 [0186.585] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x6370e062 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x7bc537b0 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x5f49f073 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x5604af85 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x73d39c31 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x53564adb [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x1620e76e [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x4cd47866 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x5cadeeab [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x531e9671 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x403e454b [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x50327cec [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x7a829b4c [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x73524280 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x1705016c [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x57d3a24b [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x71de3158 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x11f4641e [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0xccb9c09 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x584cabf2 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x32ec8031 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x436c1888 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x471301ea [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x6f2c6af8 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x37a8d6af [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x1d67c8f8 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x109dc6de [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x56fc1095 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x71afba04 [0186.586] RtlRandomEx (in: Seed=0x798f830 | out: Seed=0x798f830) returned 0x7a5a8f8b [0186.594] ReadFile (in: hFile=0x16f8, lpBuffer=0x7d797f8, nNumberOfBytesToRead=0xc8d, lpNumberOfBytesRead=0x798f82c, lpOverlapped=0x0 | out: lpBuffer=0x7d797f8*, lpNumberOfBytesRead=0x798f82c*=0xc8d, lpOverlapped=0x0) returned 1 [0186.594] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.594] WriteFile (in: hFile=0x16f8, lpBuffer=0x7d7d400*, nNumberOfBytesToWrite=0xc8d, lpNumberOfBytesWritten=0x798f830, lpOverlapped=0x0 | out: lpBuffer=0x7d7d400*, lpNumberOfBytesWritten=0x798f830*=0xc8d, lpOverlapped=0x0) returned 1 [0187.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0187.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0187.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0187.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d7d400) returned 1 [0187.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d797f8) returned 1 [0187.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0187.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e859c8) returned 1 [0187.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a376e0 [0187.611] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.611] WriteFile (in: hFile=0x16f8, lpBuffer=0x7cac368*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x798f8b8, lpOverlapped=0x0 | out: lpBuffer=0x7cac368*, lpNumberOfBytesWritten=0x798f8b8*=0x10a, lpOverlapped=0x0) returned 1 [0187.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac368) returned 1 [0187.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37860) returned 1 [0187.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec47f8) returned 1 [0187.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a376e0) returned 1 [0187.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0187.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0187.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac68) returned 1 [0187.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0187.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x7cac368 [0187.728] wcscpy (in: _Dest=0x7cac368, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" [0187.728] wcscat (in: _Dest=0x7cac368, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.68814f" [0187.728] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.68814f", NtPathName=0x798f830, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7ca93c8 [0187.813] FlushFileBuffers (hFile=0x16f8) returned 1 [0187.819] CloseHandle (hObject=0x16f8) returned 1 [0187.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cad2b8 [0187.839] wcscpy (in: _Dest=0x7cad2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0187.839] wcscat (in: _Dest=0x7cad2b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" [0187.839] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814f-readme.txt")) returned 0x2020 [0187.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad2b8) returned 1 [0187.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb6e0) returned 1 Thread: id = 5366 os_tid = 0x2190 [0181.792] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png")) returned 0x2020 [0183.838] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", dwFileAttributes=0x20) returned 1 [0186.585] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x154c [0186.594] GetFileSizeEx (in: hFile=0x154c, lpFileSize=0x803fc8c | out: lpFileSize=0x803fc8c*=143) returned 1 [0186.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0186.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0186.595] NtQuerySystemTime (in: CurrentTime=0x803fc00 | out: CurrentTime=0x803fc00*=132462177651708000) returned 0x0 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x2255d0e6 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x461d16de [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x78f08135 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x49de341 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x2134715f [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x11f4ea9c [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x6549dccb [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x41d5901 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x41d5901 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x4bee8172 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x65411ad4 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x6246d53d [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x694d8596 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x11461151 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x5375e3e4 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x77700aee [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x3c6e5178 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x5900231d [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x339ef272 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x64b66909 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x31b17f80 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x4d00ba3f [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x19af0720 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x190f888d [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x4266462a [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x14b9f8b0 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x61a5e628 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x74ebbc7a [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x2255d0e6 [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x2bc8926e [0186.595] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x639c83b0 [0186.596] RtlRandomEx (in: Seed=0x803fbf8 | out: Seed=0x803fbf8) returned 0x7a5a8f8b [0186.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0186.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d81008 [0186.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d84c10 [0186.604] ReadFile (in: hFile=0x154c, lpBuffer=0x7d81008, nNumberOfBytesToRead=0x8f, lpNumberOfBytesRead=0x803fbf4, lpOverlapped=0x0 | out: lpBuffer=0x7d81008*, lpNumberOfBytesRead=0x803fbf4*=0x8f, lpOverlapped=0x0) returned 1 [0186.606] SetFilePointerEx (in: hFile=0x154c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.606] WriteFile (in: hFile=0x154c, lpBuffer=0x7d84c10*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x803fbf8, lpOverlapped=0x0 | out: lpBuffer=0x7d84c10*, lpNumberOfBytesWritten=0x803fbf8*=0x8f, lpOverlapped=0x0) returned 1 [0187.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0187.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0187.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0187.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d84c10) returned 1 [0187.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d81008) returned 1 [0187.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e854b8) returned 1 [0187.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a374d0 [0187.041] SetFilePointerEx (in: hFile=0x154c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.041] WriteFile (in: hFile=0x154c, lpBuffer=0x7b7cac8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x803fc80, lpOverlapped=0x0 | out: lpBuffer=0x7b7cac8*, lpNumberOfBytesWritten=0x803fc80*=0x108, lpOverlapped=0x0) returned 1 [0187.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cac8) returned 1 [0187.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0187.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0187.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0187.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0187.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0187.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0187.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0187.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7b7cac8 [0187.615] wcscpy (in: _Dest=0x7b7cac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" [0187.615] wcscat (in: _Dest=0x7b7cac8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.68814f" [0187.615] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.68814f", NtPathName=0x803fbf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7ca93c8 [0187.784] FlushFileBuffers (hFile=0x154c) returned 1 [0187.789] CloseHandle (hObject=0x154c) returned 1 [0187.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cad3d0 [0187.798] wcscpy (in: _Dest=0x7cad3d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0187.798] wcscat (in: _Dest=0x7cad3d0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" [0187.798] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814f-readme.txt")) returned 0xffffffff [0187.798] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc6c [0187.817] WriteFile (in: hFile=0xc6c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x803fc14, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x803fc14*=0x8b9, lpOverlapped=0x0) returned 1 [0187.837] CloseHandle (hObject=0xc6c) returned 1 [0187.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad3d0) returned 1 [0187.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9f8) returned 1 Thread: id = 5367 os_tid = 0x1f3c [0181.793] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html")) returned 0x2020 [0184.100] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", dwFileAttributes=0x20) returned 1 [0186.386] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x190c [0186.386] GetFileSizeEx (in: hFile=0x190c, lpFileSize=0x7a0ff34 | out: lpFileSize=0x7a0ff34*=92) returned 1 [0186.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0186.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0186.387] NtQuerySystemTime (in: CurrentTime=0x7a0fea8 | out: CurrentTime=0x7a0fea8*=132462177649680000) returned 0x0 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x425b0de9 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x4f43fda7 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x28ef9e01 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x7caf6789 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x615ca59f [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0xb8e9e8b [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x4d67673f [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x49721880 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x56e893c4 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x41a7e292 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x47ce063a [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x3f5ba1d8 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x27a52d75 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x3bb49f88 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x2697c381 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0xec59e31 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x7a03e922 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x14f551cf [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x3baab810 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x1216afb8 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x6287a574 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x7e5b08e7 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x12587c27 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x6c7278a [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x100d965 [0186.387] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x6cf31438 [0186.388] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x7166b6ad [0186.388] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x24a732f6 [0186.388] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x3a974c1e [0186.388] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x7caedaad [0186.388] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0x18cc019f [0186.388] RtlRandomEx (in: Seed=0x7a0fea0 | out: Seed=0x7a0fea0) returned 0xd6bd60a [0186.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0186.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0186.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0186.399] ReadFile (in: hFile=0x190c, lpBuffer=0x7bf63a0, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0x7a0fe9c, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesRead=0x7a0fe9c*=0x5c, lpOverlapped=0x0) returned 1 [0186.401] SetFilePointerEx (in: hFile=0x190c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.401] WriteFile (in: hFile=0x190c, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x7a0fea0, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0x7a0fea0*=0x5c, lpOverlapped=0x0) returned 1 [0187.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0187.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0187.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0187.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0187.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0187.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0187.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a256b0) returned 1 [0187.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0187.681] SetFilePointerEx (in: hFile=0x190c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.682] WriteFile (in: hFile=0x190c, lpBuffer=0x7cacf70*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x7a0ff28, lpOverlapped=0x0 | out: lpBuffer=0x7cacf70*, lpNumberOfBytesWritten=0x7a0ff28*=0x104, lpOverlapped=0x0) returned 1 [0187.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0187.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0187.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0187.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0187.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a355b0 [0187.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0187.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0187.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0187.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0187.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x25) returned 0x7a374d0 [0187.745] sprintf (in: _Dest=0x7a374d0, _Format="%c%c" | out: _Dest="6d") returned 2 [0187.746] sprintf (in: _Dest=0x7a374d2, _Format="%c%c" | out: _Dest="82") returned 2 [0187.746] sprintf (in: _Dest=0x7a374d4, _Format="%c%c" | out: _Dest="e0") returned 2 [0187.746] sprintf (in: _Dest=0x7a374d6, _Format="%c%c" | out: _Dest="7c") returned 2 [0187.746] sprintf (in: _Dest=0x7a374d8, _Format="%c%c" | out: _Dest="b0") returned 2 [0187.746] sprintf (in: _Dest=0x7a374da, _Format="%c%c" | out: _Dest="a0") returned 2 [0187.746] sprintf (in: _Dest=0x7a374dc, _Format="%c%c" | out: _Dest="b7") returned 2 [0187.746] sprintf (in: _Dest=0x7a374de, _Format="%c%c" | out: _Dest="4c") returned 2 [0187.746] sprintf (in: _Dest=0x7a374e0, _Format="%c%c" | out: _Dest="7b") returned 2 [0187.746] sprintf (in: _Dest=0x7a374e2, _Format="%c%c" | out: _Dest="d8") returned 2 [0187.746] sprintf (in: _Dest=0x7a374e4, _Format="%c%c" | out: _Dest="c1") returned 2 [0187.746] sprintf (in: _Dest=0x7a374e6, _Format="%c%c" | out: _Dest="77") returned 2 [0187.746] sprintf (in: _Dest=0x7a374e8, _Format="%c%c" | out: _Dest="bf") returned 2 [0187.746] sprintf (in: _Dest=0x7a374ea, _Format="%c%c" | out: _Dest="26") returned 2 [0187.746] sprintf (in: _Dest=0x7a374ec, _Format="%c%c" | out: _Dest="37") returned 2 [0187.746] sprintf (in: _Dest=0x7a374ee, _Format="%c%c" | out: _Dest="09") returned 2 [0187.746] sprintf (in: _Dest=0x7a374f0, _Format="%c%c" | out: _Dest="26") returned 2 [0187.746] sprintf (in: _Dest=0x7a374f2, _Format="%c%c" | out: _Dest="af") returned 2 [0187.746] RtlInitAnsiString (in: DestinationString=0x7a0feb0, SourceString="6d82e07cb0a0b74c7bd8c177bf26370926af" | out: DestinationString="6d82e07cb0a0b74c7bd8c177bf26370926af") [0187.747] RtlAnsiStringToUnicodeString (in: DestinationString=0x7a0fea8, SourceString="6d82e07cb0a0b74c7bd8c177bf26370926af", AllocateDestinationString=1 | out: DestinationString="6d82e07cb0a0b74c7bd8c177bf26370926af") returned 0x0 [0187.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a39688 [0187.747] wcscat (in: _Dest=0x7cacf70, _Source="6d82e07cb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\6d82e07cb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\6d82e07cb" [0187.747] wcscat (in: _Dest=0x7cacf70, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\6d82e07cb.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\6d82e07cb.68814f" [0187.747] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\6d82e07cb.68814f", NtPathName=0x7a0fea0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\6d82e07cb.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7ca9be0 [0187.890] FlushFileBuffers (hFile=0x190c) returned 1 [0187.900] CloseHandle (hObject=0x190c) returned 1 [0187.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cacf70 [0187.901] wcscpy (in: _Dest=0x7cacf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0187.901] wcscat (in: _Dest=0x7cacf70, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" [0187.901] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814f-readme.txt")) returned 0x2020 [0187.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacf70) returned 1 [0187.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de97b8) returned 1 Thread: id = 5368 os_tid = 0x1f40 [0181.793] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js")) returned 0x2020 [0184.100] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", dwFileAttributes=0x20) returned 1 [0186.552] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd0c [0186.553] GetFileSizeEx (in: hFile=0xd0c, lpFileSize=0x5d3ff2c | out: lpFileSize=0x5d3ff2c*=91) returned 1 [0186.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0186.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0186.553] NtQuerySystemTime (in: CurrentTime=0x5d3fea0 | out: CurrentTime=0x5d3fea0*=132462177651396000) returned 0x0 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x20607617 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x6b7b84d8 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x10638c42 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x7a157969 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x32b66bd2 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x1d36787c [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x44adbef6 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x5b1f0441 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x39f8f199 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x7f16e9f8 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x3a613e07 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x7712ee0f [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x2fec96a1 [0186.553] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x4dcb30bc [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x304c06a [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x179a4d5f [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x13694d79 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x722b8707 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x4a9be8b3 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x4912c80f [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x3c4ec8f6 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x7a02f584 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x1eb30093 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x6e0fbf98 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x23dc4cb1 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x4448484c [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x4f394c1 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x3937b221 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x6178a5be [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x20d90f31 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x2ce60531 [0186.554] RtlRandomEx (in: Seed=0x5d3fe98 | out: Seed=0x5d3fe98) returned 0x7b7fd642 [0186.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0186.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d6a7d8 [0186.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d6e3e0 [0186.564] ReadFile (in: hFile=0xd0c, lpBuffer=0x7d6a7d8, nNumberOfBytesToRead=0x5b, lpNumberOfBytesRead=0x5d3fe94, lpOverlapped=0x0 | out: lpBuffer=0x7d6a7d8*, lpNumberOfBytesRead=0x5d3fe94*=0x5b, lpOverlapped=0x0) returned 1 [0186.567] SetFilePointerEx (in: hFile=0xd0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.567] WriteFile (in: hFile=0xd0c, lpBuffer=0x7d6e3e0*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x5d3fe98, lpOverlapped=0x0 | out: lpBuffer=0x7d6e3e0*, lpNumberOfBytesWritten=0x5d3fe98*=0x5b, lpOverlapped=0x0) returned 1 [0187.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0187.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0187.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0187.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d6e3e0) returned 1 [0187.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d6a7d8) returned 1 [0187.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0187.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e850c8) returned 1 [0187.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3678 [0187.618] SetFilePointerEx (in: hFile=0xd0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.618] WriteFile (in: hFile=0xd0c, lpBuffer=0x7b7f190*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x5d3ff20, lpOverlapped=0x0 | out: lpBuffer=0x7b7f190*, lpNumberOfBytesWritten=0x5d3ff20*=0x100, lpOverlapped=0x0) returned 1 [0187.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0187.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0187.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0187.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0187.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43860 [0187.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0187.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0187.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0187.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0187.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3d5b078 [0187.739] sprintf (in: _Dest=0x3d5b078, _Format="%c%c" | out: _Dest="fd") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b07a, _Format="%c%c" | out: _Dest="60") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b07c, _Format="%c%c" | out: _Dest="00") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b07e, _Format="%c%c" | out: _Dest="f9") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b080, _Format="%c%c" | out: _Dest="40") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b082, _Format="%c%c" | out: _Dest="b5") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b084, _Format="%c%c" | out: _Dest="85") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b086, _Format="%c%c" | out: _Dest="59") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b088, _Format="%c%c" | out: _Dest="31") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b08a, _Format="%c%c" | out: _Dest="66") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b08c, _Format="%c%c" | out: _Dest="fc") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b08e, _Format="%c%c" | out: _Dest="43") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b090, _Format="%c%c" | out: _Dest="74") returned 2 [0187.739] sprintf (in: _Dest=0x3d5b092, _Format="%c%c" | out: _Dest="da") returned 2 [0187.739] RtlInitAnsiString (in: DestinationString=0x5d3fea8, SourceString="fd6000f940b585593166fc4374da" | out: DestinationString="fd6000f940b585593166fc4374da") [0187.739] RtlAnsiStringToUnicodeString (in: DestinationString=0x5d3fea0, SourceString="fd6000f940b585593166fc4374da", AllocateDestinationString=1 | out: DestinationString="fd6000f940b585593166fc4374da") returned 0x0 [0187.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e84ff0 [0187.740] wcscat (in: _Dest=0x7b7f190, _Source="fd6000f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\fd6000f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\fd6000f" [0187.740] wcscat (in: _Dest=0x7b7f190, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\fd6000f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\fd6000f.68814f" [0187.740] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\fd6000f.68814f", NtPathName=0x5d3fe98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\fd6000f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7ca94f0 [0187.906] FlushFileBuffers (hFile=0xd0c) returned 1 [0187.908] CloseHandle (hObject=0xd0c) returned 1 [0187.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cacf70 [0187.909] wcscpy (in: _Dest=0x7cacf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0187.909] wcscat (in: _Dest=0x7cacf70, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" [0187.909] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814f-readme.txt")) returned 0x2020 [0187.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacf70) returned 1 [0187.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de98b8) returned 1 Thread: id = 5369 os_tid = 0x1f44 [0181.794] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json")) returned 0x2020 [0184.101] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0186.567] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1790 [0186.567] GetFileSizeEx (in: hFile=0x1790, lpFileSize=0x824fa94 | out: lpFileSize=0x824fa94*=725) returned 1 [0186.568] SetFilePointerEx (in: hFile=0x1790, liDistanceToMove=0x2d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.568] ReadFile (in: hFile=0x1790, lpBuffer=0x824fa70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x824fa80, lpOverlapped=0x0 | out: lpBuffer=0x824fa70*, lpNumberOfBytesRead=0x824fa80*=0x4, lpOverlapped=0x0) returned 1 [0186.571] SetFilePointerEx (in: hFile=0x1790, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0186.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0186.571] NtQuerySystemTime (in: CurrentTime=0x824fa08 | out: CurrentTime=0x824fa08*=132462177651552000) returned 0x0 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x215d686b [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x4dff0e9b [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x6085f3d [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x12b73e53 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x7880fd09 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x30747ea0 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x4d82e918 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x46c9c249 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x7e608783 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x4c221552 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x3bc048b2 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x5f3fd697 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x6150a61e [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x64a56279 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x6210e9b1 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x6b5efc4a [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x6a7d7650 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x5dee2929 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x20ab42a5 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x33f55025 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x31ce11de [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x65f19131 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x42797353 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x616c1ccd [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x2a500711 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x5b230084 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x73aba85d [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x2ee07a44 [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x6512589d [0186.572] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x6529a33d [0186.573] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x48c62be4 [0186.573] RtlRandomEx (in: Seed=0x824fa00 | out: Seed=0x824fa00) returned 0x3dbfc7fa [0186.582] ReadFile (in: hFile=0x1790, lpBuffer=0x7d71fe8, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0x824f9fc, lpOverlapped=0x0 | out: lpBuffer=0x7d71fe8*, lpNumberOfBytesRead=0x824f9fc*=0x2d5, lpOverlapped=0x0) returned 1 [0186.582] SetFilePointerEx (in: hFile=0x1790, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.582] WriteFile (in: hFile=0x1790, lpBuffer=0x7d75bf0*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0x824fa00, lpOverlapped=0x0 | out: lpBuffer=0x7d75bf0*, lpNumberOfBytesWritten=0x824fa00*=0x2d5, lpOverlapped=0x0) returned 1 [0187.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0187.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0187.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0187.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d75bf0) returned 1 [0187.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d71fe8) returned 1 [0187.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0187.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84ff0) returned 1 [0187.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0187.616] SetFilePointerEx (in: hFile=0x1790, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.616] WriteFile (in: hFile=0x1790, lpBuffer=0x7cac480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x824fa88, lpOverlapped=0x0 | out: lpBuffer=0x7cac480*, lpNumberOfBytesWritten=0x824fa88*=0x10c, lpOverlapped=0x0) returned 1 [0187.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25038 [0187.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0187.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0187.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0187.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b500 [0187.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0187.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0187.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac40) returned 1 [0187.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25038) returned 1 [0187.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e740f0 [0187.731] sprintf (in: _Dest=0x3e740f0, _Format="%c%c" | out: _Dest="be") returned 2 [0187.731] sprintf (in: _Dest=0x3e740f2, _Format="%c%c" | out: _Dest="d0") returned 2 [0187.731] sprintf (in: _Dest=0x3e740f4, _Format="%c%c" | out: _Dest="bc") returned 2 [0187.731] sprintf (in: _Dest=0x3e740f6, _Format="%c%c" | out: _Dest="55") returned 2 [0187.731] sprintf (in: _Dest=0x3e740f8, _Format="%c%c" | out: _Dest="e0") returned 2 [0187.731] sprintf (in: _Dest=0x3e740fa, _Format="%c%c" | out: _Dest="93") returned 2 [0187.731] sprintf (in: _Dest=0x3e740fc, _Format="%c%c" | out: _Dest="5b") returned 2 [0187.731] sprintf (in: _Dest=0x3e740fe, _Format="%c%c" | out: _Dest="23") returned 2 [0187.731] sprintf (in: _Dest=0x3e74100, _Format="%c%c" | out: _Dest="6e") returned 2 [0187.731] sprintf (in: _Dest=0x3e74102, _Format="%c%c" | out: _Dest="d5") returned 2 [0187.731] sprintf (in: _Dest=0x3e74104, _Format="%c%c" | out: _Dest="5c") returned 2 [0187.731] sprintf (in: _Dest=0x3e74106, _Format="%c%c" | out: _Dest="8e") returned 2 [0187.731] sprintf (in: _Dest=0x3e74108, _Format="%c%c" | out: _Dest="16") returned 2 [0187.731] sprintf (in: _Dest=0x3e7410a, _Format="%c%c" | out: _Dest="30") returned 2 [0187.732] sprintf (in: _Dest=0x3e7410c, _Format="%c%c" | out: _Dest="84") returned 2 [0187.732] sprintf (in: _Dest=0x3e7410e, _Format="%c%c" | out: _Dest="19") returned 2 [0187.732] sprintf (in: _Dest=0x3e74110, _Format="%c%c" | out: _Dest="75") returned 2 [0187.732] sprintf (in: _Dest=0x3e74112, _Format="%c%c" | out: _Dest="6c") returned 2 [0187.732] sprintf (in: _Dest=0x3e74114, _Format="%c%c" | out: _Dest="9c") returned 2 [0187.732] sprintf (in: _Dest=0x3e74116, _Format="%c%c" | out: _Dest="f8") returned 2 [0187.732] sprintf (in: _Dest=0x3e74118, _Format="%c%c" | out: _Dest="58") returned 2 [0187.732] sprintf (in: _Dest=0x3e7411a, _Format="%c%c" | out: _Dest="4d") returned 2 [0187.732] sprintf (in: _Dest=0x3e7411c, _Format="%c%c" | out: _Dest="ba") returned 2 [0187.732] sprintf (in: _Dest=0x3e7411e, _Format="%c%c" | out: _Dest="23") returned 2 [0187.732] sprintf (in: _Dest=0x3e74120, _Format="%c%c" | out: _Dest="32") returned 2 [0187.732] sprintf (in: _Dest=0x3e74122, _Format="%c%c" | out: _Dest="05") returned 2 [0187.732] RtlInitAnsiString (in: DestinationString=0x824fa10, SourceString="bed0bc55e0935b236ed55c8e16308419756c9cf8584dba233205" | out: DestinationString="bed0bc55e0935b236ed55c8e16308419756c9cf8584dba233205") [0187.732] RtlAnsiStringToUnicodeString (in: DestinationString=0x824fa08, SourceString="bed0bc55e0935b236ed55c8e16308419756c9cf8584dba233205", AllocateDestinationString=1 | out: DestinationString="bed0bc55e0935b236ed55c8e16308419756c9cf8584dba233205") returned 0x0 [0187.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e2b0 [0187.732] wcscat (in: _Dest=0x7cac480, _Source="bed0bc55e0935" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\bed0bc55e0935") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\bed0bc55e0935" [0187.732] wcscat (in: _Dest=0x7cac480, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\bed0bc55e0935.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\bed0bc55e0935.68814f" [0187.732] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\bed0bc55e0935.68814f", NtPathName=0x824fa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\bed0bc55e0935.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.732] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3eca558 [0187.871] FlushFileBuffers (hFile=0x1790) returned 1 [0187.880] CloseHandle (hObject=0x1790) returned 1 [0187.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cacf70 [0187.895] wcscpy (in: _Dest=0x7cacf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\" [0187.895] wcscat (in: _Dest=0x7cacf70, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" [0187.895] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\68814f-readme.txt")) returned 0x2020 [0187.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacf70) returned 1 [0187.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb00) returned 1 Thread: id = 5370 os_tid = 0x1f48 [0181.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3dea0b8 [0181.795] wcscpy (in: _Dest=0x3dea0b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0181.795] wcscat (in: _Dest=0x3dea0b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0181.795] wcscat (in: _Dest=0x3dea0b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*" [0181.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54240 [0181.795] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe626eac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6445dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6445dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0183.896] wcscmp (_String1=".", _String2=".") returned 0 [0183.896] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe626eac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6445dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6445dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.896] wcscmp (_String1="..", _String2=".") returned 1 [0183.896] wcscmp (_String1="..", _String2="..") returned 0 [0183.896] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62738e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6275ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6275ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0183.896] wcscmp (_String1="ar", _String2=".") returned 1 [0183.897] wcscmp (_String1="ar", _String2="..") returned 1 [0183.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7bce8 [0183.897] wcscpy (in: _Dest=0x7b7bce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0183.897] wcscat (in: _Dest=0x7b7bce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0183.897] wcscat (in: _Dest=0x7b7bce8, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0186.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7bce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0186.676] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe627d520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe627fc30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe627fc30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0186.676] wcscmp (_String1="bg", _String2=".") returned 1 [0186.676] wcscmp (_String1="bg", _String2="..") returned 1 [0186.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b84c68 [0186.677] wcscpy (in: _Dest=0x7b84c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.677] wcscat (in: _Dest=0x7b84c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.677] wcscat (in: _Dest=0x7b84c68, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0186.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b84c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0186.679] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6287160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe628bf80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe628bf80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0186.679] wcscmp (_String1="ca", _String2=".") returned 1 [0186.679] wcscmp (_String1="ca", _String2="..") returned 1 [0186.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b84d70 [0186.679] wcscpy (in: _Dest=0x7b84d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.679] wcscat (in: _Dest=0x7b84d70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.679] wcscat (in: _Dest=0x7b84d70, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0186.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b84d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0186.680] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62b0970, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62b5790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0186.680] wcscmp (_String1="cs", _String2=".") returned 1 [0186.680] wcscmp (_String1="cs", _String2="..") returned 1 [0186.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b84e78 [0186.680] wcscpy (in: _Dest=0x7b84e78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.680] wcscat (in: _Dest=0x7b84e78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.680] wcscat (in: _Dest=0x7b84e78, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0186.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b84e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0186.681] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62ba5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62bf3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0186.681] wcscmp (_String1="da", _String2=".") returned 1 [0186.681] wcscmp (_String1="da", _String2="..") returned 1 [0186.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b84f80 [0186.682] wcscpy (in: _Dest=0x7b84f80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.682] wcscat (in: _Dest=0x7b84f80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.682] wcscat (in: _Dest=0x7b84f80, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0186.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b84f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0186.683] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62c6900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62c9010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0186.683] wcscmp (_String1="de", _String2=".") returned 1 [0186.683] wcscmp (_String1="de", _String2="..") returned 1 [0186.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b85088 [0186.683] wcscpy (in: _Dest=0x7b85088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.683] wcscat (in: _Dest=0x7b85088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.683] wcscat (in: _Dest=0x7b85088, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0186.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b85088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0186.684] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62d0540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62d2c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0186.684] wcscmp (_String1="el", _String2=".") returned 1 [0186.684] wcscmp (_String1="el", _String2="..") returned 1 [0186.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b85190 [0186.684] wcscpy (in: _Dest=0x7b85190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.684] wcscat (in: _Dest=0x7b85190, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.684] wcscat (in: _Dest=0x7b85190, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0186.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b85190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0186.685] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62dc890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62defa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62defa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0186.685] wcscmp (_String1="en_GB", _String2=".") returned 1 [0186.685] wcscmp (_String1="en_GB", _String2="..") returned 1 [0186.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b85298 [0186.686] wcscpy (in: _Dest=0x7b85298, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.686] wcscat (in: _Dest=0x7b85298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.686] wcscat (in: _Dest=0x7b85298, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0186.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b85298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0186.687] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62e64d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62e8be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0186.687] wcscmp (_String1="en_US", _String2=".") returned 1 [0186.687] wcscmp (_String1="en_US", _String2="..") returned 1 [0186.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b853a0 [0186.687] wcscpy (in: _Dest=0x7b853a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.687] wcscat (in: _Dest=0x7b853a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.687] wcscat (in: _Dest=0x7b853a0, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0186.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b853a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0186.688] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62f2820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62f4f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0186.688] wcscmp (_String1="es", _String2=".") returned 1 [0186.688] wcscmp (_String1="es", _String2="..") returned 1 [0186.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b854a8 [0186.688] wcscpy (in: _Dest=0x7b854a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.688] wcscat (in: _Dest=0x7b854a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.688] wcscat (in: _Dest=0x7b854a8, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0186.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b854a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0186.689] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62fc460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62feb70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62feb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0186.689] wcscmp (_String1="es_419", _String2=".") returned 1 [0186.689] wcscmp (_String1="es_419", _String2="..") returned 1 [0186.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38818 [0186.689] wcscpy (in: _Dest=0x7a38818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.689] wcscat (in: _Dest=0x7a38818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.690] wcscat (in: _Dest=0x7a38818, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0186.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0186.691] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe630d5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe630fce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe630fce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0186.691] wcscmp (_String1="et", _String2=".") returned 1 [0186.691] wcscmp (_String1="et", _String2="..") returned 1 [0186.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b855b0 [0186.691] wcscpy (in: _Dest=0x7b855b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.691] wcscat (in: _Dest=0x7b855b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.691] wcscat (in: _Dest=0x7b855b0, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0186.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b855b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0186.692] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6317210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe631c030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0186.692] wcscmp (_String1="fi", _String2=".") returned 1 [0186.692] wcscmp (_String1="fi", _String2="..") returned 1 [0186.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b856b8 [0186.692] wcscpy (in: _Dest=0x7b856b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.692] wcscat (in: _Dest=0x7b856b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.692] wcscat (in: _Dest=0x7b856b8, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0186.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b856b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0186.695] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6320e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6325c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0186.695] wcscmp (_String1="fil", _String2=".") returned 1 [0186.695] wcscmp (_String1="fil", _String2="..") returned 1 [0186.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7b857c0 [0186.695] wcscpy (in: _Dest=0x7b857c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.695] wcscat (in: _Dest=0x7b857c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.695] wcscat (in: _Dest=0x7b857c0, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0186.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b857c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0186.696] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe632d1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe632f8b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0186.696] wcscmp (_String1="fr", _String2=".") returned 1 [0186.696] wcscmp (_String1="fr", _String2="..") returned 1 [0186.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b858c8 [0186.697] wcscpy (in: _Dest=0x7b858c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.697] wcscat (in: _Dest=0x7b858c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.697] wcscat (in: _Dest=0x7b858c8, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0186.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b858c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0186.698] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6336de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63394f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0186.699] wcscmp (_String1="he", _String2=".") returned 1 [0186.699] wcscmp (_String1="he", _String2="..") returned 1 [0186.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b859d0 [0186.699] wcscpy (in: _Dest=0x7b859d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.699] wcscat (in: _Dest=0x7b859d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.699] wcscat (in: _Dest=0x7b859d0, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0186.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b859d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0186.700] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6340a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6343130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6343130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0186.700] wcscmp (_String1="hi", _String2=".") returned 1 [0186.700] wcscmp (_String1="hi", _String2="..") returned 1 [0186.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b85ad8 [0186.700] wcscpy (in: _Dest=0x7b85ad8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.700] wcscat (in: _Dest=0x7b85ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.700] wcscat (in: _Dest=0x7b85ad8, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0186.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b85ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70 [0186.702] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe634a660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634cd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe634cd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0186.702] wcscmp (_String1="hu", _String2=".") returned 1 [0186.702] wcscmp (_String1="hu", _String2="..") returned 1 [0186.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b85be0 [0186.702] wcscpy (in: _Dest=0x7b85be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.702] wcscat (in: _Dest=0x7b85be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.702] wcscat (in: _Dest=0x7b85be0, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0186.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b85be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c [0186.703] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63542a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63569b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63569b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0186.704] wcscmp (_String1="id", _String2=".") returned 1 [0186.704] wcscmp (_String1="id", _String2="..") returned 1 [0186.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b85ce8 [0186.704] wcscpy (in: _Dest=0x7b85ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.704] wcscat (in: _Dest=0x7b85ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.704] wcscat (in: _Dest=0x7b85ce8, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0186.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b85ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564 [0186.705] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe635dee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63605f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63605f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0186.705] wcscmp (_String1="it", _String2=".") returned 1 [0186.705] wcscmp (_String1="it", _String2="..") returned 1 [0186.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b85df0 [0186.705] wcscpy (in: _Dest=0x7b85df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.705] wcscat (in: _Dest=0x7b85df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.706] wcscat (in: _Dest=0x7b85df0, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0186.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b85df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0186.707] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6367b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636a230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe636a230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0186.707] wcscmp (_String1="ja", _String2=".") returned 1 [0186.707] wcscmp (_String1="ja", _String2="..") returned 1 [0186.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b85ef8 [0186.707] wcscpy (in: _Dest=0x7b85ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.707] wcscat (in: _Dest=0x7b85ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.707] wcscat (in: _Dest=0x7b85ef8, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0186.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b85ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0186.708] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6371760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6373e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6373e70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0186.708] wcscmp (_String1="ko", _String2=".") returned 1 [0186.708] wcscmp (_String1="ko", _String2="..") returned 1 [0186.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b86000 [0186.709] wcscpy (in: _Dest=0x7b86000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.709] wcscat (in: _Dest=0x7b86000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.709] wcscat (in: _Dest=0x7b86000, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0186.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b86000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0186.710] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe637b3a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe637dab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe637dab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0186.710] wcscmp (_String1="lt", _String2=".") returned 1 [0186.710] wcscmp (_String1="lt", _String2="..") returned 1 [0186.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b86108 [0186.711] wcscpy (in: _Dest=0x7b86108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.711] wcscat (in: _Dest=0x7b86108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.711] wcscat (in: _Dest=0x7b86108, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0186.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b86108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1afc [0186.934] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6389e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe638c510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0186.934] wcscmp (_String1="lv", _String2=".") returned 1 [0186.934] wcscmp (_String1="lv", _String2="..") returned 1 [0186.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e848 [0186.934] wcscpy (in: _Dest=0x7b7e848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0186.934] wcscat (in: _Dest=0x7b7e848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0186.934] wcscat (in: _Dest=0x7b7e848, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0187.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7e848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18 [0187.517] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6393a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6398860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0187.517] wcscmp (_String1="ms", _String2=".") returned 1 [0187.518] wcscmp (_String1="ms", _String2="..") returned 1 [0187.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad59f8 [0187.518] wcscpy (in: _Dest=0x7ad59f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.518] wcscat (in: _Dest=0x7ad59f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.518] wcscat (in: _Dest=0x7ad59f8, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0187.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad59f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec [0187.519] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe639d680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a24a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0187.519] wcscmp (_String1="nl", _String2=".") returned 1 [0187.519] wcscmp (_String1="nl", _String2="..") returned 1 [0187.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caaa70 [0187.519] wcscpy (in: _Dest=0x7caaa70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.519] wcscat (in: _Dest=0x7caaa70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.519] wcscat (in: _Dest=0x7caaa70, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0187.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caaa70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0187.521] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63a99d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ae7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0187.521] wcscmp (_String1="no", _String2=".") returned 1 [0187.521] wcscmp (_String1="no", _String2="..") returned 1 [0187.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caab78 [0187.521] wcscpy (in: _Dest=0x7caab78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.521] wcscat (in: _Dest=0x7caab78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.521] wcscat (in: _Dest=0x7caab78, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0187.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caab78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c [0187.523] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63b3610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63b8430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0187.523] wcscmp (_String1="pl", _String2=".") returned 1 [0187.523] wcscmp (_String1="pl", _String2="..") returned 1 [0187.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caac80 [0187.523] wcscpy (in: _Dest=0x7caac80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.523] wcscat (in: _Dest=0x7caac80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.523] wcscat (in: _Dest=0x7caac80, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0187.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caac80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60 [0187.525] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63bf960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c2070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c2070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0187.525] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0187.525] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0187.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7caad88 [0187.525] wcscpy (in: _Dest=0x7caad88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.525] wcscat (in: _Dest=0x7caad88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.525] wcscat (in: _Dest=0x7caad88, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0187.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caad88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac [0187.527] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63cbcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ce3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0187.527] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0187.527] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0187.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7caae90 [0187.527] wcscpy (in: _Dest=0x7caae90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.527] wcscat (in: _Dest=0x7caae90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.527] wcscat (in: _Dest=0x7caae90, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0187.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caae90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec [0187.528] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63d58f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63d8000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63d8000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0187.528] wcscmp (_String1="ro", _String2=".") returned 1 [0187.528] wcscmp (_String1="ro", _String2="..") returned 1 [0187.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caaf98 [0187.529] wcscpy (in: _Dest=0x7caaf98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.529] wcscat (in: _Dest=0x7caaf98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.529] wcscat (in: _Dest=0x7caaf98, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0187.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caaf98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec [0187.530] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63df530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e1c40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63e1c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0187.530] wcscmp (_String1="ru", _String2=".") returned 1 [0187.530] wcscmp (_String1="ru", _String2="..") returned 1 [0187.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab0a0 [0187.531] wcscpy (in: _Dest=0x7cab0a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.531] wcscat (in: _Dest=0x7cab0a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.531] wcscat (in: _Dest=0x7cab0a0, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0187.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474 [0187.532] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63e9170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63edf90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0187.532] wcscmp (_String1="sk", _String2=".") returned 1 [0187.532] wcscmp (_String1="sk", _String2="..") returned 1 [0187.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab1a8 [0187.532] wcscpy (in: _Dest=0x7cab1a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.532] wcscat (in: _Dest=0x7cab1a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.532] wcscat (in: _Dest=0x7cab1a8, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0187.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208 [0187.534] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63f54c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63f7bd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0187.534] wcscmp (_String1="sl", _String2=".") returned 1 [0187.534] wcscmp (_String1="sl", _String2="..") returned 1 [0187.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab2b0 [0187.534] wcscpy (in: _Dest=0x7cab2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.534] wcscat (in: _Dest=0x7cab2b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.534] wcscat (in: _Dest=0x7cab2b0, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0187.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44 [0187.535] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63ff100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6403f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0187.535] wcscmp (_String1="sr", _String2=".") returned 1 [0187.535] wcscmp (_String1="sr", _String2="..") returned 1 [0187.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab3b8 [0187.535] wcscpy (in: _Dest=0x7cab3b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.535] wcscat (in: _Dest=0x7cab3b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.535] wcscat (in: _Dest=0x7cab3b8, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0187.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88 [0187.537] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe640b450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe640db60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0187.537] wcscmp (_String1="sv", _String2=".") returned 1 [0187.537] wcscmp (_String1="sv", _String2="..") returned 1 [0187.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab4c0 [0187.537] wcscpy (in: _Dest=0x7cab4c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.537] wcscat (in: _Dest=0x7cab4c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.537] wcscat (in: _Dest=0x7cab4c0, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0187.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab4c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0187.538] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6412980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64177a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0187.538] wcscmp (_String1="th", _String2=".") returned 1 [0187.539] wcscmp (_String1="th", _String2="..") returned 1 [0187.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab5c8 [0187.539] wcscpy (in: _Dest=0x7cab5c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.539] wcscat (in: _Dest=0x7cab5c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.539] wcscat (in: _Dest=0x7cab5c8, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0187.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec [0187.540] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe641ecd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64213e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0187.540] wcscmp (_String1="tr", _String2=".") returned 1 [0187.540] wcscmp (_String1="tr", _String2="..") returned 1 [0187.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab6d0 [0187.540] wcscpy (in: _Dest=0x7cab6d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0187.540] wcscat (in: _Dest=0x7cab6d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0187.540] wcscat (in: _Dest=0x7cab6d0, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0187.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0187.542] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6428910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe642b020, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0189.110] wcscmp (_String1="uk", _String2=".") returned 1 [0189.110] wcscmp (_String1="uk", _String2="..") returned 1 [0189.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b80108 [0189.110] wcscpy (in: _Dest=0x7b80108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0189.110] wcscat (in: _Dest=0x7b80108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0189.110] wcscat (in: _Dest=0x7b80108, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0190.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b80108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0190.264] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6432550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6434c60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0190.264] wcscmp (_String1="vi", _String2=".") returned 1 [0190.264] wcscmp (_String1="vi", _String2="..") returned 1 [0190.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab5c8 [0190.265] wcscpy (in: _Dest=0x7cab5c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0190.265] wcscat (in: _Dest=0x7cab5c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0190.265] wcscat (in: _Dest=0x7cab5c8, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0190.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0190.266] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe643c190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe643e8a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0190.266] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0190.266] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0190.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7caa230 [0190.266] wcscpy (in: _Dest=0x7caa230, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0190.267] wcscat (in: _Dest=0x7caa230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0190.267] wcscat (in: _Dest=0x7caa230, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0190.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4 [0190.268] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6445dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64484e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0190.268] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0190.268] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0190.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7caa338 [0190.268] wcscpy (in: _Dest=0x7caa338, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" [0190.268] wcscat (in: _Dest=0x7caa338, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\" [0190.268] wcscat (in: _Dest=0x7caa338, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0190.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0190.270] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6445dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64484e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0190.270] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0190.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54240) returned 1 [0190.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea0b8) returned 1 [0190.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de99b8) returned 1 Thread: id = 5371 os_tid = 0x1f4c [0181.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc238 [0181.796] wcscpy (in: _Dest=0x30bc238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0181.796] wcscat (in: _Dest=0x30bc238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0181.796] wcscat (in: _Dest=0x30bc238, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*" [0181.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0181.796] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf590 [0183.839] wcscmp (_String1=".", _String2=".") returned 0 [0183.839] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.839] wcscmp (_String1="..", _String2=".") returned 1 [0183.839] wcscmp (_String1="..", _String2="..") returned 0 [0183.839] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe665c880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe665c880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe665c880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0183.839] wcscmp (_String1="computed_hashes.json", _String2=".") returned 1 [0183.839] wcscmp (_String1="computed_hashes.json", _String2="..") returned 1 [0183.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d553a0 [0183.839] wcscpy (in: _Dest=0x3d553a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0183.839] wcscat (in: _Dest=0x3d553a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0183.839] wcscat (in: _Dest=0x3d553a0, _Source="computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" [0185.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d553a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0185.692] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe646ced0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0185.692] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0185.692] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0185.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9a60 [0185.692] wcscpy (in: _Dest=0x3ec9a60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" [0185.692] wcscat (in: _Dest=0x3ec9a60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0185.692] wcscat (in: _Dest=0x3ec9a60, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" [0185.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec9a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0185.693] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe646ced0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe646ced0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0185.693] FindClose (in: hFindFile=0x3dcf590 | out: hFindFile=0x3dcf590) returned 1 [0185.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0185.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc238) returned 1 [0185.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de9ab8) returned 1 Thread: id = 5372 os_tid = 0x1f50 [0181.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif")) returned 0x20 [0183.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0183.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.640] GetLastError () returned 0x5 [0183.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0183.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63210) returned 1 Thread: id = 5373 os_tid = 0x1f58 [0181.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif")) returned 0x20 [0183.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0183.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.641] GetLastError () returned 0x5 [0183.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0183.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 5374 os_tid = 0x1f5c [0181.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif")) returned 0x20 [0183.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0183.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.642] GetLastError () returned 0x5 [0183.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0183.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62ef0) returned 1 Thread: id = 5375 os_tid = 0x1f60 [0181.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif")) returned 0x20 [0183.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0183.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.644] GetLastError () returned 0x5 [0183.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0183.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 Thread: id = 5376 os_tid = 0x1f68 [0181.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif")) returned 0x20 [0183.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0183.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.645] GetLastError () returned 0x5 [0183.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0183.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e678) returned 1 Thread: id = 5377 os_tid = 0x1f6c [0181.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif")) returned 0x20 [0183.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0183.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.647] GetLastError () returned 0x5 [0183.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0183.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 5378 os_tid = 0x1f70 [0181.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif")) returned 0x20 [0183.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0183.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.648] GetLastError () returned 0x5 [0183.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0183.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f590) returned 1 Thread: id = 5379 os_tid = 0x1f74 [0181.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif")) returned 0x20 [0183.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0183.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.649] GetLastError () returned 0x5 [0183.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0183.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 Thread: id = 5380 os_tid = 0x1f78 [0181.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif")) returned 0x20 [0183.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0183.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.650] GetLastError () returned 0x5 [0183.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0183.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63ad0) returned 1 Thread: id = 5381 os_tid = 0x1f7c [0181.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif")) returned 0x20 [0183.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0183.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.652] GetLastError () returned 0x5 [0183.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0183.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e720) returned 1 Thread: id = 5382 os_tid = 0x1f80 [0181.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif")) returned 0x20 [0183.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0183.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.490] GetLastError () returned 0x5 [0183.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0183.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67530) returned 1 Thread: id = 5383 os_tid = 0x1f90 [0181.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif")) returned 0x20 [0182.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0182.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.638] GetLastError () returned 0x5 [0183.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0183.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 Thread: id = 5384 os_tid = 0x1f94 [0181.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a621d0 [0181.829] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0181.829] wcscat (in: _Dest=0x7a621d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0181.829] wcscat (in: _Dest=0x7a621d0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*" [0181.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55580 [0181.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa50 [0183.841] wcscmp (_String1=".", _String2=".") returned 0 [0183.841] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f2d750, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.928] wcscmp (_String1="..", _String2=".") returned 1 [0184.928] wcscmp (_String1="..", _String2="..") returned 0 [0184.928] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0184.929] wcscmp (_String1="Adobe.css", _String2=".") returned 1 [0184.929] wcscmp (_String1="Adobe.css", _String2="..") returned 1 [0184.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35b9d8 [0184.929] wcscpy (in: _Dest=0x35b9d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0184.929] wcscat (in: _Dest=0x35b9d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0184.929] wcscat (in: _Dest=0x35b9d8, _Source="Adobe.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" [0185.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0185.235] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1 [0185.235] wcscmp (_String1="Americana", _String2=".") returned 1 [0185.236] wcscmp (_String1="Americana", _String2="..") returned 1 [0185.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c0b8 [0185.236] wcscpy (in: _Dest=0x35c0b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.236] wcscat (in: _Dest=0x35c0b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.236] wcscat (in: _Dest=0x35c0b8, _Source="Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0185.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35c0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0185.239] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1 [0185.239] wcscmp (_String1="Americana.css", _String2=".") returned 1 [0185.239] wcscmp (_String1="Americana.css", _String2="..") returned 1 [0185.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7430 [0185.239] wcscpy (in: _Dest=0x2ff7430, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.239] wcscat (in: _Dest=0x2ff7430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.239] wcscat (in: _Dest=0x2ff7430, _Source="Americana.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" [0185.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0185.240] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f79a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0185.240] wcscmp (_String1="BabyBlue", _String2=".") returned 1 [0185.240] wcscmp (_String1="BabyBlue", _String2="..") returned 1 [0185.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bdf8 [0185.241] wcscpy (in: _Dest=0x35bdf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.241] wcscat (in: _Dest=0x35bdf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.241] wcscat (in: _Dest=0x35bdf8, _Source="BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0185.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35bdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0185.242] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0185.242] wcscmp (_String1="BabyBlue.css", _String2=".") returned 1 [0185.242] wcscmp (_String1="BabyBlue.css", _String2="..") returned 1 [0185.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7ef8 [0185.243] wcscpy (in: _Dest=0x2ff7ef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.243] wcscat (in: _Dest=0x2ff7ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.243] wcscat (in: _Dest=0x2ff7ef8, _Source="BabyBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" [0185.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0185.244] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f2d750, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beige.css", cAlternateFileName="")) returned 1 [0185.244] wcscmp (_String1="Beige.css", _String2=".") returned 1 [0185.244] wcscmp (_String1="Beige.css", _String2="..") returned 1 [0185.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35c378 [0185.244] wcscpy (in: _Dest=0x35c378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.245] wcscat (in: _Dest=0x35c378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.245] wcscat (in: _Dest=0x35c378, _Source="Beige.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" [0185.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0185.246] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0185.246] wcscmp (_String1="Biscay", _String2=".") returned 1 [0185.246] wcscmp (_String1="Biscay", _String2="..") returned 1 [0185.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f050 [0185.246] wcscpy (in: _Dest=0x7a5f050, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.246] wcscat (in: _Dest=0x7a5f050, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.246] wcscat (in: _Dest=0x7a5f050, _Source="Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0185.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5f050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c [0185.248] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0185.248] wcscmp (_String1="Biscay.css", _String2=".") returned 1 [0185.248] wcscmp (_String1="Biscay.css", _String2="..") returned 1 [0185.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b5b8 [0185.248] wcscpy (in: _Dest=0x35b5b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.248] wcscat (in: _Dest=0x35b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.248] wcscat (in: _Dest=0x35b5b8, _Source="Biscay.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" [0185.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0 [0185.250] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1 [0185.250] wcscmp (_String1="BrightOrange", _String2=".") returned 1 [0185.250] wcscmp (_String1="BrightOrange", _String2="..") returned 1 [0185.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7cd0 [0185.250] wcscpy (in: _Dest=0x2ff7cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.250] wcscat (in: _Dest=0x2ff7cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.250] wcscat (in: _Dest=0x2ff7cd0, _Source="BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0185.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff7cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0185.252] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1 [0185.252] wcscmp (_String1="BrightOrange.css", _String2=".") returned 1 [0185.252] wcscmp (_String1="BrightOrange.css", _String2="..") returned 1 [0185.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333a68 [0185.252] wcscpy (in: _Dest=0x333a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.252] wcscat (in: _Dest=0x333a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.252] wcscat (in: _Dest=0x333a68, _Source="BrightOrange.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" [0185.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae0 [0185.253] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1 [0185.253] wcscmp (_String1="BrightYellow", _String2=".") returned 1 [0185.253] wcscmp (_String1="BrightYellow", _String2="..") returned 1 [0185.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6180 [0185.254] wcscpy (in: _Dest=0x2ff6180, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.254] wcscat (in: _Dest=0x2ff6180, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.254] wcscat (in: _Dest=0x2ff6180, _Source="BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0185.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff6180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0 [0185.255] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd03, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1 [0185.255] wcscmp (_String1="BrightYellow.css", _String2=".") returned 1 [0185.255] wcscmp (_String1="BrightYellow.css", _String2="..") returned 1 [0185.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333e28 [0185.255] wcscpy (in: _Dest=0x333e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.255] wcscat (in: _Dest=0x333e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.256] wcscat (in: _Dest=0x333e28, _Source="BrightYellow.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" [0185.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948 [0185.257] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0185.257] wcscmp (_String1="Casual.css", _String2=".") returned 1 [0185.257] wcscmp (_String1="Casual.css", _String2="..") returned 1 [0185.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c588 [0185.257] wcscpy (in: _Dest=0x35c588, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.257] wcscat (in: _Dest=0x35c588, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.257] wcscat (in: _Dest=0x35c588, _Source="Casual.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" [0185.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94 [0185.259] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0185.259] wcscmp (_String1="Desert", _String2=".") returned 1 [0185.259] wcscmp (_String1="Desert", _String2="..") returned 1 [0185.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e720 [0185.260] wcscpy (in: _Dest=0x7a5e720, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.260] wcscat (in: _Dest=0x7a5e720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.260] wcscat (in: _Dest=0x7a5e720, _Source="Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0185.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5e720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0 [0185.261] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0185.261] wcscmp (_String1="Desert.css", _String2=".") returned 1 [0185.261] wcscmp (_String1="Desert.css", _String2="..") returned 1 [0185.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35c6e8 [0185.261] wcscpy (in: _Dest=0x35c6e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.262] wcscat (in: _Dest=0x35c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.262] wcscat (in: _Dest=0x35c6e8, _Source="Desert.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" [0185.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35c6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860 [0185.263] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x173, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.css", cAlternateFileName="DISCUS~1.CSS")) returned 1 [0185.263] wcscmp (_String1="Discussion.css", _String2=".") returned 1 [0185.263] wcscmp (_String1="Discussion.css", _String2="..") returned 1 [0185.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6b90 [0185.263] wcscpy (in: _Dest=0x2ff6b90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.263] wcscat (in: _Dest=0x2ff6b90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.263] wcscat (in: _Dest=0x2ff6b90, _Source="Discussion.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" [0185.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150 [0185.265] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0185.265] wcscmp (_String1="Earthy.css", _String2=".") returned 1 [0185.265] wcscmp (_String1="Earthy.css", _String2="..") returned 1 [0185.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b718 [0185.265] wcscpy (in: _Dest=0x35b718, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.265] wcscat (in: _Dest=0x35b718, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.265] wcscat (in: _Dest=0x35b718, _Source="Earthy.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" [0185.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x35b718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38 [0185.266] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1 [0185.266] wcscmp (_String1="GrayCheck", _String2=".") returned 1 [0185.266] wcscmp (_String1="GrayCheck", _String2="..") returned 1 [0185.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x35bea8 [0185.267] wcscpy (in: _Dest=0x35bea8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.267] wcscat (in: _Dest=0x35bea8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.267] wcscat (in: _Dest=0x35bea8, _Source="GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0185.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x35bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94 [0185.268] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x46011f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1 [0185.268] wcscmp (_String1="GrayCheck.css", _String2=".") returned 1 [0185.268] wcscmp (_String1="GrayCheck.css", _String2="..") returned 1 [0185.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6f28 [0185.268] wcscpy (in: _Dest=0x2ff6f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.268] wcscat (in: _Dest=0x2ff6f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.268] wcscat (in: _Dest=0x2ff6f28, _Source="GrayCheck.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" [0185.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0185.270] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x46011f90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0185.270] wcscmp (_String1="GreenTea.css", _String2=".") returned 1 [0185.270] wcscmp (_String1="GreenTea.css", _String2="..") returned 1 [0185.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6968 [0185.270] wcscpy (in: _Dest=0x2ff6968, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.270] wcscat (in: _Dest=0x2ff6968, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.270] wcscat (in: _Dest=0x2ff6968, _Source="GreenTea.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" [0185.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418 [0185.271] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1 [0185.271] wcscmp (_String1="LightSpirit.css", _String2=".") returned 1 [0185.271] wcscmp (_String1="LightSpirit.css", _String2="..") returned 1 [0185.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333fa8 [0185.271] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.271] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.271] wcscat (in: _Dest=0x333fa8, _Source="LightSpirit.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" [0185.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0185.273] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0185.273] wcscmp (_String1="Lime", _String2=".") returned 1 [0185.273] wcscmp (_String1="Lime", _String2="..") returned 1 [0185.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f1a0 [0185.273] wcscpy (in: _Dest=0x7a5f1a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.273] wcscat (in: _Dest=0x7a5f1a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.273] wcscat (in: _Dest=0x7a5f1a0, _Source="Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0185.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5f1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0185.482] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0185.482] wcscmp (_String1="Lime.css", _String2=".") returned 1 [0185.482] wcscmp (_String1="Lime.css", _String2="..") returned 1 [0185.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66090 [0185.483] wcscpy (in: _Dest=0x7a66090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.483] wcscat (in: _Dest=0x7a66090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.483] wcscat (in: _Dest=0x7a66090, _Source="Lime.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" [0185.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0185.613] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x715, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0185.613] wcscmp (_String1="Maroon.css", _String2=".") returned 1 [0185.613] wcscmp (_String1="Maroon.css", _String2="..") returned 1 [0185.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a67480 [0185.613] wcscpy (in: _Dest=0x7a67480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.613] wcscat (in: _Dest=0x7a67480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.613] wcscat (in: _Dest=0x7a67480, _Source="Maroon.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" [0185.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0185.614] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0185.614] wcscmp (_String1="Oasis", _String2=".") returned 1 [0185.614] wcscmp (_String1="Oasis", _String2="..") returned 1 [0185.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e678 [0185.614] wcscpy (in: _Dest=0x7a5e678, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.614] wcscat (in: _Dest=0x7a5e678, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.614] wcscat (in: _Dest=0x7a5e678, _Source="Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0185.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5e678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0185.616] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0185.616] wcscmp (_String1="Oasis.css", _String2=".") returned 1 [0185.616] wcscmp (_String1="Oasis.css", _String2="..") returned 1 [0185.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a671c0 [0185.616] wcscpy (in: _Dest=0x7a671c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.616] wcscat (in: _Dest=0x7a671c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.616] wcscat (in: _Dest=0x7a671c0, _Source="Oasis.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" [0185.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a671c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0185.617] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1 [0185.617] wcscmp (_String1="OliveGreen.css", _String2=".") returned 1 [0185.617] wcscmp (_String1="OliveGreen.css", _String2="..") returned 1 [0185.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7378 [0185.617] wcscpy (in: _Dest=0x2ff7378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.617] wcscat (in: _Dest=0x2ff7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.617] wcscat (in: _Dest=0x2ff7378, _Source="OliveGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" [0185.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0185.618] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0185.618] wcscmp (_String1="Premium.css", _String2=".") returned 1 [0185.618] wcscmp (_String1="Premium.css", _String2="..") returned 1 [0185.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7208 [0185.618] wcscpy (in: _Dest=0x2ff7208, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.618] wcscat (in: _Dest=0x2ff7208, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.619] wcscat (in: _Dest=0x2ff7208, _Source="Premium.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" [0185.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0185.619] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0185.619] wcscmp (_String1="RTF_BOLD.GIF", _String2=".") returned 1 [0185.619] wcscmp (_String1="RTF_BOLD.GIF", _String2="..") returned 1 [0185.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff7c18 [0185.620] wcscpy (in: _Dest=0x2ff7c18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.620] wcscat (in: _Dest=0x2ff7c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.620] wcscat (in: _Dest=0x2ff7c18, _Source="RTF_BOLD.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" [0185.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7c18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0185.621] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe371600, ftCreationTime.dwHighDateTime=0x1ca2bd5, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe371600, ftLastWriteTime.dwHighDateTime=0x1ca2bd5, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0185.621] wcscmp (_String1="rtf_choosefont.gif", _String2=".") returned 1 [0185.621] wcscmp (_String1="rtf_choosefont.gif", _String2="..") returned 1 [0185.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332f28 [0185.621] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.621] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.621] wcscat (in: _Dest=0x332f28, _Source="rtf_choosefont.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" [0185.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0185.622] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1 [0185.622] wcscmp (_String1="rtf_italic.gif", _String2=".") returned 1 [0185.622] wcscmp (_String1="rtf_italic.gif", _String2="..") returned 1 [0185.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff79f0 [0185.622] wcscpy (in: _Dest=0x2ff79f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.622] wcscat (in: _Dest=0x2ff79f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.622] wcscat (in: _Dest=0x2ff79f0, _Source="rtf_italic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" [0185.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff79f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0185.623] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf614c600, ftCreationTime.dwHighDateTime=0x1ca2bd7, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf614c600, ftLastWriteTime.dwHighDateTime=0x1ca2bd7, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="RTF_SP~1.GIF")) returned 1 [0185.623] wcscmp (_String1="rtf_spellcheck.gif", _String2=".") returned 1 [0185.623] wcscmp (_String1="rtf_spellcheck.gif", _String2="..") returned 1 [0185.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x3339a8 [0185.623] wcscpy (in: _Dest=0x3339a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.623] wcscat (in: _Dest=0x3339a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.623] wcscat (in: _Dest=0x3339a8, _Source="rtf_spellcheck.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" [0185.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3339a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0185.624] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1 [0185.624] wcscmp (_String1="rtf_underline.gif", _String2=".") returned 1 [0185.624] wcscmp (_String1="rtf_underline.gif", _String2="..") returned 1 [0185.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x334068 [0185.624] wcscpy (in: _Dest=0x334068, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0185.624] wcscat (in: _Dest=0x334068, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0185.624] wcscat (in: _Dest=0x334068, _Source="rtf_underline.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" [0185.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x334068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0185.625] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0186.374] wcscmp (_String1="Slate", _String2=".") returned 1 [0186.374] wcscmp (_String1="Slate", _String2="..") returned 1 [0186.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x3053330 [0186.374] wcscpy (in: _Dest=0x3053330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.374] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.374] wcscat (in: _Dest=0x3053330, _Source="Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0186.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0186.876] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xdbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0186.876] wcscmp (_String1="Slate.css", _String2=".") returned 1 [0186.876] wcscmp (_String1="Slate.css", _String2="..") returned 1 [0186.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66770 [0186.876] wcscpy (in: _Dest=0x7a66770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.876] wcscat (in: _Dest=0x7a66770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.876] wcscat (in: _Dest=0x7a66770, _Source="Slate.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" [0186.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0186.877] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x74e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1 [0186.877] wcscmp (_String1="SlateBlue.css", _String2=".") returned 1 [0186.877] wcscmp (_String1="SlateBlue.css", _String2="..") returned 1 [0186.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff74e8 [0186.877] wcscpy (in: _Dest=0x2ff74e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.877] wcscat (in: _Dest=0x2ff74e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.877] wcscat (in: _Dest=0x2ff74e8, _Source="SlateBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" [0186.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff74e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0186.878] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0186.878] wcscmp (_String1="SoftBlue", _String2=".") returned 1 [0186.878] wcscmp (_String1="SoftBlue", _String2="..") returned 1 [0186.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a661f0 [0186.878] wcscpy (in: _Dest=0x7a661f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.878] wcscat (in: _Dest=0x7a661f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.878] wcscat (in: _Dest=0x7a661f0, _Source="SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0186.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a661f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568 [0186.879] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0186.879] wcscmp (_String1="SoftBlue.css", _String2=".") returned 1 [0186.879] wcscmp (_String1="SoftBlue.css", _String2="..") returned 1 [0186.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff62f0 [0186.879] wcscpy (in: _Dest=0x2ff62f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.879] wcscat (in: _Dest=0x2ff62f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.880] wcscat (in: _Dest=0x2ff62f0, _Source="SoftBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" [0186.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff62f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1814 [0186.880] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x460d0670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions", cAlternateFileName="SOLUTI~1")) returned 1 [0186.880] wcscmp (_String1="Solutions", _String2=".") returned 1 [0186.880] wcscmp (_String1="Solutions", _String2="..") returned 1 [0186.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a66140 [0186.881] wcscpy (in: _Dest=0x7a66140, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.881] wcscat (in: _Dest=0x7a66140, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.881] wcscat (in: _Dest=0x7a66140, _Source="Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0186.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a66140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598 [0186.882] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x19cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions.css", cAlternateFileName="SOLUTI~1.CSS")) returned 1 [0186.882] wcscmp (_String1="Solutions.css", _String2=".") returned 1 [0186.882] wcscmp (_String1="Solutions.css", _String2="..") returned 1 [0186.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff6460 [0186.882] wcscpy (in: _Dest=0x2ff6460, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.882] wcscat (in: _Dest=0x2ff6460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.882] wcscat (in: _Dest=0x2ff6460, _Source="Solutions.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" [0186.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0186.883] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Doc.css", cAlternateFileName="SOLUTI~2.CSS")) returned 1 [0186.883] wcscmp (_String1="Solutions_Doc.css", _String2=".") returned 1 [0186.883] wcscmp (_String1="Solutions_Doc.css", _String2="..") returned 1 [0186.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332268 [0186.883] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.883] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.883] wcscat (in: _Dest=0x332268, _Source="Solutions_Doc.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" [0186.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0186.884] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Generic.css", cAlternateFileName="SOLUTI~3.CSS")) returned 1 [0186.884] wcscmp (_String1="Solutions_Generic.css", _String2=".") returned 1 [0186.884] wcscmp (_String1="Solutions_Generic.css", _String2="..") returned 1 [0186.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3e3a760 [0186.884] wcscpy (in: _Dest=0x3e3a760, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.884] wcscat (in: _Dest=0x3e3a760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.884] wcscat (in: _Dest=0x3e3a760, _Source="Solutions_Generic.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" [0186.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x180c [0186.885] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Person.css", cAlternateFileName="SOLUTI~4.CSS")) returned 1 [0186.885] wcscmp (_String1="Solutions_Person.css", _String2=".") returned 1 [0186.885] wcscmp (_String1="Solutions_Person.css", _String2="..") returned 1 [0186.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3e3a5d0 [0186.885] wcscpy (in: _Dest=0x3e3a5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.885] wcscat (in: _Dest=0x3e3a5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.885] wcscat (in: _Dest=0x3e3a5d0, _Source="Solutions_Person.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" [0186.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0186.886] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Response.css", cAlternateFileName="SOB0ED~1.CSS")) returned 1 [0186.886] wcscmp (_String1="Solutions_Response.css", _String2=".") returned 1 [0186.886] wcscmp (_String1="Solutions_Response.css", _String2="..") returned 1 [0186.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e3a698 [0186.886] wcscpy (in: _Dest=0x3e3a698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.886] wcscat (in: _Dest=0x3e3a698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.886] wcscat (in: _Dest=0x3e3a698, _Source="Solutions_Response.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" [0186.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0186.887] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1 [0186.887] wcscmp (_String1="SpringGreen", _String2=".") returned 1 [0186.887] wcscmp (_String1="SpringGreen", _String2="..") returned 1 [0186.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff63a8 [0186.887] wcscpy (in: _Dest=0x2ff63a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.887] wcscat (in: _Dest=0x2ff63a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.887] wcscat (in: _Dest=0x2ff63a8, _Source="SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0186.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2ff63a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48 [0186.888] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1 [0186.888] wcscmp (_String1="SpringGreen.css", _String2=".") returned 1 [0186.888] wcscmp (_String1="SpringGreen.css", _String2="..") returned 1 [0186.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333768 [0186.888] wcscpy (in: _Dest=0x333768, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.888] wcscat (in: _Dest=0x333768, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.888] wcscat (in: _Dest=0x333768, _Source="SpringGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" [0186.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333768, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0186.889] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x9fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0186.889] wcscmp (_String1="Sts.css", _String2=".") returned 1 [0186.889] wcscmp (_String1="Sts.css", _String2="..") returned 1 [0186.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a668d0 [0186.889] wcscpy (in: _Dest=0x7a668d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.889] wcscat (in: _Dest=0x7a668d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.889] wcscat (in: _Dest=0x7a668d0, _Source="Sts.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" [0186.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a668d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0186.890] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0186.890] wcscmp (_String1="STS2", _String2=".") returned 1 [0186.890] wcscmp (_String1="STS2", _String2="..") returned 1 [0186.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9c) returned 0x7a5f398 [0186.890] wcscpy (in: _Dest=0x7a5f398, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.890] wcscat (in: _Dest=0x7a5f398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.890] wcscat (in: _Dest=0x7a5f398, _Source="STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0186.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5f398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64 [0186.891] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0186.891] wcscmp (_String1="Sts2.css", _String2=".") returned 1 [0186.891] wcscmp (_String1="Sts2.css", _String2="..") returned 1 [0186.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a67530 [0186.891] wcscpy (in: _Dest=0x7a67530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.891] wcscat (in: _Dest=0x7a67530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.891] wcscat (in: _Dest=0x7a67530, _Source="Sts2.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" [0186.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec [0186.892] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0186.892] wcscmp (_String1="Swirl", _String2=".") returned 1 [0186.892] wcscmp (_String1="Swirl", _String2="..") returned 1 [0186.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9e) returned 0x7a5e3d8 [0186.892] wcscpy (in: _Dest=0x7a5e3d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.892] wcscat (in: _Dest=0x7a5e3d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.892] wcscat (in: _Dest=0x7a5e3d8, _Source="Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0186.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a5e3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c [0186.893] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0186.893] wcscmp (_String1="Swirl.css", _String2=".") returned 1 [0186.893] wcscmp (_String1="Swirl.css", _String2="..") returned 1 [0186.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa6) returned 0x7a67110 [0186.893] wcscpy (in: _Dest=0x7a67110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.893] wcscat (in: _Dest=0x7a67110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.893] wcscat (in: _Dest=0x7a67110, _Source="Swirl.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" [0186.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764 [0186.894] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0186.894] wcscmp (_String1="Teal.css", _String2=".") returned 1 [0186.894] wcscmp (_String1="Teal.css", _String2="..") returned 1 [0186.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x7a66fb0 [0186.894] wcscpy (in: _Dest=0x7a66fb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.894] wcscat (in: _Dest=0x7a66fb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.894] wcscat (in: _Dest=0x7a66fb0, _Source="Teal.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" [0186.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8 [0186.895] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x727, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1 [0186.895] wcscmp (_String1="TexturedBlue.css", _String2=".") returned 1 [0186.895] wcscmp (_String1="TexturedBlue.css", _String2="..") returned 1 [0186.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333d68 [0186.896] wcscpy (in: _Dest=0x333d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.896] wcscat (in: _Dest=0x333d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.896] wcscat (in: _Dest=0x333d68, _Source="TexturedBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" [0186.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0186.897] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1 [0186.897] wcscmp (_String1="VelvetRose.css", _String2=".") returned 1 [0186.897] wcscmp (_String1="VelvetRose.css", _String2="..") returned 1 [0186.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7880 [0186.897] wcscpy (in: _Dest=0x2ff7880, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles" [0186.897] wcscat (in: _Dest=0x2ff7880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\" [0186.897] wcscat (in: _Dest=0x2ff7880, _Source="VelvetRose.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" [0186.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0186.898] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0 [0186.968] FindClose (in: hFindFile=0x3dcfa50 | out: hFindFile=0x3dcfa50) returned 1 [0191.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55580) returned 1 [0191.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 [0191.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 5385 os_tid = 0x1f98 [0181.830] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png")) returned 0x2020 [0181.830] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png", dwFileAttributes=0x20) returned 1 [0182.694] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19d8 [0182.694] GetFileSizeEx (in: hFile=0x19d8, lpFileSize=0x898fbc4 | out: lpFileSize=0x898fbc4*=7547) returned 1 [0182.694] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x1d77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.694] ReadFile (in: hFile=0x19d8, lpBuffer=0x898fba0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x898fbb0, lpOverlapped=0x0 | out: lpBuffer=0x898fba0*, lpNumberOfBytesRead=0x898fbb0*=0x4, lpOverlapped=0x0) returned 1 [0182.697] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaf8 [0182.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0182.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa08 [0182.698] NtQuerySystemTime (in: CurrentTime=0x898fb38 | out: CurrentTime=0x898fb38*=132462177612708000) returned 0x0 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x68c5bdbe [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x7c7bebea [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x41b6092d [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x375bdde4 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x1d2e1dc4 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x6de4951c [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x5b28bc11 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x22c65fd8 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x15f90bb9 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0xbe38714 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x1e9f6069 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x1f7a569c [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x5f8e0a66 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x1722c685 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0xe2713ea [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x136f6887 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x7f35bd [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x692eb8c9 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x67122c23 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x63756d8c [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x1b8a65b4 [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x51d7590b [0182.698] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x609eaa27 [0182.699] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x10f1ce89 [0182.699] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x2571d231 [0182.699] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x17893332 [0182.699] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x1c565ccf [0182.699] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x2e51159e [0182.699] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x41400b46 [0182.699] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x2218a859 [0182.699] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x5dbc201c [0182.699] RtlRandomEx (in: Seed=0x898fb30 | out: Seed=0x898fb30) returned 0x1a9851ab [0182.710] ReadFile (in: hFile=0x19d8, lpBuffer=0x7c08fc8, nNumberOfBytesToRead=0x1d7b, lpNumberOfBytesRead=0x898fb2c, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesRead=0x898fb2c*=0x1d7b, lpOverlapped=0x0) returned 1 [0182.714] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.714] WriteFile (in: hFile=0x19d8, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0x1d7b, lpNumberOfBytesWritten=0x898fb30, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0x898fb30*=0x1d7b, lpOverlapped=0x0) returned 1 [0182.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaf8 [0182.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa08 [0182.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa08) returned 1 [0182.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0182.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0182.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0182.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ae8) returned 1 [0182.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3dcaa08 [0182.719] SetFilePointerEx (in: hFile=0x19d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.719] WriteFile (in: hFile=0x19d8, lpBuffer=0x30bc868*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x898fbb8, lpOverlapped=0x0 | out: lpBuffer=0x30bc868*, lpNumberOfBytesWritten=0x898fbb8*=0x100, lpOverlapped=0x0) returned 1 [0182.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc868) returned 1 [0182.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0f8) returned 1 [0182.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0182.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa08) returned 1 [0182.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaf8) returned 1 [0182.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0182.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9e0) returned 1 [0182.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0182.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bc868 [0182.721] wcscpy (in: _Dest=0x30bc868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png" [0182.721] wcscat (in: _Dest=0x30bc868, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.68814f" [0182.721] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.68814f", NtPathName=0x898fb30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0182.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55968 [0182.725] FlushFileBuffers (hFile=0x19d8) returned 1 [0183.591] CloseHandle (hObject=0x19d8) returned 1 [0184.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7b7c780 [0184.527] wcscpy (in: _Dest=0x7b7c780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0184.527] wcscat (in: _Dest=0x7b7c780, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\68814F-Readme.txt" [0184.527] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\68814f-readme.txt")) returned 0xffffffff [0184.527] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1890 [0184.601] WriteFile (in: hFile=0x1890, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x898fb4c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x898fb4c*=0x8b9, lpOverlapped=0x0) returned 1 [0184.618] CloseHandle (hObject=0x1890) returned 1 [0184.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c780) returned 1 [0184.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6fb8) returned 1 Thread: id = 5386 os_tid = 0x1f9c [0181.830] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json")) returned 0x2020 [0182.440] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0182.441] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18a0 [0182.441] GetFileSizeEx (in: hFile=0x18a0, lpFileSize=0x5c4f774 | out: lpFileSize=0x5c4f774*=981) returned 1 [0182.441] SetFilePointerEx (in: hFile=0x18a0, liDistanceToMove=0x3d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.441] ReadFile (in: hFile=0x18a0, lpBuffer=0x5c4f750, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5c4f760, lpOverlapped=0x0 | out: lpBuffer=0x5c4f750*, lpNumberOfBytesRead=0x5c4f760*=0x4, lpOverlapped=0x0) returned 1 [0182.444] SetFilePointerEx (in: hFile=0x18a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0182.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0182.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0182.445] NtQuerySystemTime (in: CurrentTime=0x5c4f6e8 | out: CurrentTime=0x5c4f6e8*=132462177610212000) returned 0x0 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x276ed0e0 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x369f0bbf [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x54d892bb [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x71795b3f [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x5613e06d [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x33a5ce01 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x2d5dad40 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x615ac12a [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0xe0d428f [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x30a29081 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x61fc1d45 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x1ee29849 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x35276cc1 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x232dbd92 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x5b54462a [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x6281af34 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x9ac141a [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x893b49c [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x79209371 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x6fbed324 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x45ed83bc [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x18824c26 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x16a8d20b [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x7d7acbb1 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x6c4416d3 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x5f0ad6f6 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x73227597 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x279e6ac2 [0182.445] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x12e1ae0e [0182.446] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x30e6edf8 [0182.446] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0xfa0d9f8 [0182.446] RtlRandomEx (in: Seed=0x5c4f6e0 | out: Seed=0x5c4f6e0) returned 0x2c21c2c5 [0182.456] ReadFile (in: hFile=0x18a0, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0x3d5, lpNumberOfBytesRead=0x5c4f6dc, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0x5c4f6dc*=0x3d5, lpOverlapped=0x0) returned 1 [0182.456] SetFilePointerEx (in: hFile=0x18a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.456] WriteFile (in: hFile=0x18a0, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0x3d5, lpNumberOfBytesWritten=0x5c4f6e0, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0x5c4f6e0*=0x3d5, lpOverlapped=0x0) returned 1 [0183.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0183.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0183.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bf78) returned 1 [0183.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0183.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0183.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0183.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85818) returned 1 [0183.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0183.933] SetFilePointerEx (in: hFile=0x18a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.933] WriteFile (in: hFile=0x18a0, lpBuffer=0x7a390d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5c4f768, lpOverlapped=0x0 | out: lpBuffer=0x7a390d8*, lpNumberOfBytesWritten=0x5c4f768*=0x10c, lpOverlapped=0x0) returned 1 [0184.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0184.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2f8) returned 1 [0184.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b2f8 [0184.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0184.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0184.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0184.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e74170 [0184.556] sprintf (in: _Dest=0x3e74170, _Format="%c%c" | out: _Dest="6b") returned 2 [0184.556] sprintf (in: _Dest=0x3e74172, _Format="%c%c" | out: _Dest="80") returned 2 [0184.556] sprintf (in: _Dest=0x3e74174, _Format="%c%c" | out: _Dest="98") returned 2 [0184.556] sprintf (in: _Dest=0x3e74176, _Format="%c%c" | out: _Dest="63") returned 2 [0184.556] sprintf (in: _Dest=0x3e74178, _Format="%c%c" | out: _Dest="80") returned 2 [0184.556] sprintf (in: _Dest=0x3e7417a, _Format="%c%c" | out: _Dest="23") returned 2 [0184.556] sprintf (in: _Dest=0x3e7417c, _Format="%c%c" | out: _Dest="36") returned 2 [0184.556] sprintf (in: _Dest=0x3e7417e, _Format="%c%c" | out: _Dest="16") returned 2 [0184.556] sprintf (in: _Dest=0x3e74180, _Format="%c%c" | out: _Dest="46") returned 2 [0184.556] sprintf (in: _Dest=0x3e74182, _Format="%c%c" | out: _Dest="d0") returned 2 [0184.556] sprintf (in: _Dest=0x3e74184, _Format="%c%c" | out: _Dest="d4") returned 2 [0184.556] sprintf (in: _Dest=0x3e74186, _Format="%c%c" | out: _Dest="c8") returned 2 [0184.556] sprintf (in: _Dest=0x3e74188, _Format="%c%c" | out: _Dest="f6") returned 2 [0184.556] sprintf (in: _Dest=0x3e7418a, _Format="%c%c" | out: _Dest="59") returned 2 [0184.556] sprintf (in: _Dest=0x3e7418c, _Format="%c%c" | out: _Dest="9d") returned 2 [0184.556] sprintf (in: _Dest=0x3e7418e, _Format="%c%c" | out: _Dest="34") returned 2 [0184.556] sprintf (in: _Dest=0x3e74190, _Format="%c%c" | out: _Dest="15") returned 2 [0184.556] sprintf (in: _Dest=0x3e74192, _Format="%c%c" | out: _Dest="f8") returned 2 [0184.556] sprintf (in: _Dest=0x3e74194, _Format="%c%c" | out: _Dest="c4") returned 2 [0184.556] sprintf (in: _Dest=0x3e74196, _Format="%c%c" | out: _Dest="a6") returned 2 [0184.556] sprintf (in: _Dest=0x3e74198, _Format="%c%c" | out: _Dest="7a") returned 2 [0184.556] sprintf (in: _Dest=0x3e7419a, _Format="%c%c" | out: _Dest="72") returned 2 [0184.556] sprintf (in: _Dest=0x3e7419c, _Format="%c%c" | out: _Dest="f6") returned 2 [0184.556] sprintf (in: _Dest=0x3e7419e, _Format="%c%c" | out: _Dest="7e") returned 2 [0184.556] sprintf (in: _Dest=0x3e741a0, _Format="%c%c" | out: _Dest="42") returned 2 [0184.556] sprintf (in: _Dest=0x3e741a2, _Format="%c%c" | out: _Dest="63") returned 2 [0184.556] RtlInitAnsiString (in: DestinationString=0x5c4f6f0, SourceString="6b8098638023361646d0d4c8f6599d3415f8c4a67a72f67e4263" | out: DestinationString="6b8098638023361646d0d4c8f6599d3415f8c4a67a72f67e4263") [0184.557] RtlAnsiStringToUnicodeString (in: DestinationString=0x5c4f6e8, SourceString="6b8098638023361646d0d4c8f6599d3415f8c4a67a72f67e4263", AllocateDestinationString=1 | out: DestinationString="6b8098638023361646d0d4c8f6599d3415f8c4a67a72f67e4263") returned 0x0 [0184.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa88 [0184.557] wcscat (in: _Dest=0x7a390d8, _Source="6b80986380233" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\6b80986380233") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\6b80986380233" [0184.557] wcscat (in: _Dest=0x7a390d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\6b80986380233.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\6b80986380233.68814f" [0184.557] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\6b80986380233.68814f", NtPathName=0x5c4f6e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\6b80986380233.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3eca2e8 [0184.658] FlushFileBuffers (hFile=0x18a0) returned 1 [0184.956] CloseHandle (hObject=0x18a0) returned 1 [0186.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7b7cbe0 [0186.036] wcscpy (in: _Dest=0x7b7cbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\" [0186.036] wcscat (in: _Dest=0x7b7cbe0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\68814F-Readme.txt" [0186.036] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\68814f-readme.txt")) returned 0x2020 [0186.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cbe0) returned 1 [0186.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 Thread: id = 5387 os_tid = 0x1fa0 [0181.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3dea1b8 [0181.831] wcscpy (in: _Dest=0x3dea1b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0181.831] wcscat (in: _Dest=0x3dea1b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0181.831] wcscat (in: _Dest=0x3dea1b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*" [0181.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52f00 [0181.831] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\*", lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf990 [0183.136] wcscmp (_String1=".", _String2=".") returned 0 [0183.136] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.136] wcscmp (_String1="..", _String2=".") returned 1 [0183.136] wcscmp (_String1="..", _String2="..") returned 0 [0183.136] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0183.136] wcscmp (_String1="ar", _String2=".") returned 1 [0183.136] wcscmp (_String1="ar", _String2="..") returned 1 [0183.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc760 [0183.136] wcscpy (in: _Dest=0x30bc760, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.136] wcscat (in: _Dest=0x30bc760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.136] wcscat (in: _Dest=0x30bc760, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0183.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0183.555] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0183.555] wcscmp (_String1="bg", _String2=".") returned 1 [0183.555] wcscmp (_String1="bg", _String2="..") returned 1 [0183.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6a9d8 [0183.555] wcscpy (in: _Dest=0x7a6a9d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.555] wcscat (in: _Dest=0x7a6a9d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.555] wcscat (in: _Dest=0x7a6a9d8, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0183.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0183.556] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0183.556] wcscmp (_String1="ca", _String2=".") returned 1 [0183.556] wcscmp (_String1="ca", _String2="..") returned 1 [0183.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6aae0 [0183.556] wcscpy (in: _Dest=0x7a6aae0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.556] wcscat (in: _Dest=0x7a6aae0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.556] wcscat (in: _Dest=0x7a6aae0, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0183.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6aae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0183.557] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0183.557] wcscmp (_String1="cs", _String2=".") returned 1 [0183.557] wcscmp (_String1="cs", _String2="..") returned 1 [0183.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6abe8 [0183.558] wcscpy (in: _Dest=0x7a6abe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.558] wcscat (in: _Dest=0x7a6abe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.558] wcscat (in: _Dest=0x7a6abe8, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0183.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6abe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0183.559] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0183.559] wcscmp (_String1="da", _String2=".") returned 1 [0183.559] wcscmp (_String1="da", _String2="..") returned 1 [0183.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6acf0 [0183.559] wcscpy (in: _Dest=0x7a6acf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.559] wcscat (in: _Dest=0x7a6acf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.559] wcscat (in: _Dest=0x7a6acf0, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0183.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6acf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0183.560] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0183.560] wcscmp (_String1="de", _String2=".") returned 1 [0183.560] wcscmp (_String1="de", _String2="..") returned 1 [0183.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6adf8 [0183.560] wcscpy (in: _Dest=0x7a6adf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.560] wcscat (in: _Dest=0x7a6adf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.560] wcscat (in: _Dest=0x7a6adf8, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0183.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6adf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0183.561] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0183.561] wcscmp (_String1="el", _String2=".") returned 1 [0183.561] wcscmp (_String1="el", _String2="..") returned 1 [0183.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6af00 [0183.561] wcscpy (in: _Dest=0x7a6af00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.561] wcscat (in: _Dest=0x7a6af00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.561] wcscat (in: _Dest=0x7a6af00, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0183.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6af00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0183.562] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0183.562] wcscmp (_String1="en_GB", _String2=".") returned 1 [0183.563] wcscmp (_String1="en_GB", _String2="..") returned 1 [0183.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b008 [0183.563] wcscpy (in: _Dest=0x7a6b008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.563] wcscat (in: _Dest=0x7a6b008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.563] wcscat (in: _Dest=0x7a6b008, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0183.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0183.564] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0183.564] wcscmp (_String1="en_US", _String2=".") returned 1 [0183.564] wcscmp (_String1="en_US", _String2="..") returned 1 [0183.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b110 [0183.564] wcscpy (in: _Dest=0x7a6b110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.564] wcscat (in: _Dest=0x7a6b110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.564] wcscat (in: _Dest=0x7a6b110, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0183.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0183.565] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0183.565] wcscmp (_String1="es", _String2=".") returned 1 [0183.565] wcscmp (_String1="es", _String2="..") returned 1 [0183.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6b218 [0183.565] wcscpy (in: _Dest=0x7a6b218, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.565] wcscat (in: _Dest=0x7a6b218, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.565] wcscat (in: _Dest=0x7a6b218, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0183.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0183.584] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0183.584] wcscmp (_String1="es_419", _String2=".") returned 1 [0183.584] wcscmp (_String1="es_419", _String2="..") returned 1 [0183.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38818 [0183.584] wcscpy (in: _Dest=0x7a38818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0183.584] wcscat (in: _Dest=0x7a38818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0183.584] wcscat (in: _Dest=0x7a38818, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0185.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0185.734] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0185.734] wcscmp (_String1="et", _String2=".") returned 1 [0185.734] wcscmp (_String1="et", _String2="..") returned 1 [0185.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7c000 [0185.734] wcscpy (in: _Dest=0x7b7c000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.734] wcscat (in: _Dest=0x7b7c000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.735] wcscat (in: _Dest=0x7b7c000, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0185.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7c000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0185.736] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0185.736] wcscmp (_String1="eu", _String2=".") returned 1 [0185.736] wcscmp (_String1="eu", _String2="..") returned 1 [0185.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7ad70 [0185.736] wcscpy (in: _Dest=0x7b7ad70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.737] wcscat (in: _Dest=0x7b7ad70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.737] wcscat (in: _Dest=0x7b7ad70, _Source="eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0185.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7ad70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0185.738] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0185.738] wcscmp (_String1="fi", _String2=".") returned 1 [0185.738] wcscmp (_String1="fi", _String2="..") returned 1 [0185.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7a428 [0185.738] wcscpy (in: _Dest=0x7b7a428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.738] wcscat (in: _Dest=0x7b7a428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.738] wcscat (in: _Dest=0x7b7a428, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0185.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7a428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0185.740] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0185.740] wcscmp (_String1="fil", _String2=".") returned 1 [0185.740] wcscmp (_String1="fil", _String2="..") returned 1 [0185.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7b7bef8 [0185.740] wcscpy (in: _Dest=0x7b7bef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.740] wcscat (in: _Dest=0x7b7bef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.740] wcscat (in: _Dest=0x7b7bef8, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0185.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7bef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0185.742] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0185.742] wcscmp (_String1="fr", _String2=".") returned 1 [0185.742] wcscmp (_String1="fr", _String2="..") returned 1 [0185.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7a320 [0185.742] wcscpy (in: _Dest=0x7b7a320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.742] wcscat (in: _Dest=0x7b7a320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.742] wcscat (in: _Dest=0x7b7a320, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0185.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7a320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0185.744] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0185.744] wcscmp (_String1="he", _String2=".") returned 1 [0185.744] wcscmp (_String1="he", _String2="..") returned 1 [0185.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7b8c8 [0185.744] wcscpy (in: _Dest=0x7b7b8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.744] wcscat (in: _Dest=0x7b7b8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.745] wcscat (in: _Dest=0x7b7b8c8, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0185.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c [0185.746] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0185.746] wcscmp (_String1="hi", _String2=".") returned 1 [0185.746] wcscmp (_String1="hi", _String2="..") returned 1 [0185.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7b7c0 [0185.746] wcscpy (in: _Dest=0x7b7b7c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.746] wcscat (in: _Dest=0x7b7b7c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.746] wcscat (in: _Dest=0x7b7b7c0, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0185.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0185.747] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0185.747] wcscmp (_String1="hr", _String2=".") returned 1 [0185.748] wcscmp (_String1="hr", _String2="..") returned 1 [0185.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7b6b8 [0185.748] wcscpy (in: _Dest=0x7b7b6b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.748] wcscat (in: _Dest=0x7b7b6b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.748] wcscat (in: _Dest=0x7b7b6b8, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0185.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0185.749] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0185.749] wcscmp (_String1="hu", _String2=".") returned 1 [0185.749] wcscmp (_String1="hu", _String2="..") returned 1 [0185.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7b5b0 [0185.749] wcscpy (in: _Dest=0x7b7b5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.749] wcscat (in: _Dest=0x7b7b5b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.749] wcscat (in: _Dest=0x7b7b5b0, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0185.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0185.751] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0185.751] wcscmp (_String1="id", _String2=".") returned 1 [0185.751] wcscmp (_String1="id", _String2="..") returned 1 [0185.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7b4a8 [0185.751] wcscpy (in: _Dest=0x7b7b4a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.751] wcscat (in: _Dest=0x7b7b4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.751] wcscat (in: _Dest=0x7b7b4a8, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0185.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0185.753] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0185.753] wcscmp (_String1="it", _String2=".") returned 1 [0185.753] wcscmp (_String1="it", _String2="..") returned 1 [0185.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7b3a0 [0185.753] wcscpy (in: _Dest=0x7b7b3a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.753] wcscat (in: _Dest=0x7b7b3a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.753] wcscat (in: _Dest=0x7b7b3a0, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0185.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0185.754] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0185.754] wcscmp (_String1="ja", _String2=".") returned 1 [0185.754] wcscmp (_String1="ja", _String2="..") returned 1 [0185.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7b298 [0185.755] wcscpy (in: _Dest=0x7b7b298, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.755] wcscat (in: _Dest=0x7b7b298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.755] wcscat (in: _Dest=0x7b7b298, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0185.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0185.756] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0185.756] wcscmp (_String1="ko", _String2=".") returned 1 [0185.756] wcscmp (_String1="ko", _String2="..") returned 1 [0185.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7b190 [0185.756] wcscpy (in: _Dest=0x7b7b190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.756] wcscat (in: _Dest=0x7b7b190, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.756] wcscat (in: _Dest=0x7b7b190, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0185.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0185.758] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0185.758] wcscmp (_String1="lt", _String2=".") returned 1 [0185.758] wcscmp (_String1="lt", _String2="..") returned 1 [0185.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7b088 [0185.758] wcscpy (in: _Dest=0x7b7b088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.758] wcscat (in: _Dest=0x7b7b088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.758] wcscat (in: _Dest=0x7b7b088, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" [0185.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0185.760] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0185.760] wcscmp (_String1="lv", _String2=".") returned 1 [0185.760] wcscmp (_String1="lv", _String2="..") returned 1 [0185.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7af80 [0185.760] wcscpy (in: _Dest=0x7b7af80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.760] wcscat (in: _Dest=0x7b7af80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.760] wcscat (in: _Dest=0x7b7af80, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" [0185.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7af80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0185.761] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0185.761] wcscmp (_String1="ms", _String2=".") returned 1 [0185.761] wcscmp (_String1="ms", _String2="..") returned 1 [0185.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7ae78 [0185.761] wcscpy (in: _Dest=0x7b7ae78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.762] wcscat (in: _Dest=0x7b7ae78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.762] wcscat (in: _Dest=0x7b7ae78, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" [0185.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7ae78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0185.763] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0185.763] wcscmp (_String1="nl", _String2=".") returned 1 [0185.763] wcscmp (_String1="nl", _String2="..") returned 1 [0185.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad5c08 [0185.763] wcscpy (in: _Dest=0x7ad5c08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.763] wcscat (in: _Dest=0x7ad5c08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.763] wcscat (in: _Dest=0x7ad5c08, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" [0185.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad5c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0185.764] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0185.764] wcscmp (_String1="no", _String2=".") returned 1 [0185.764] wcscmp (_String1="no", _String2="..") returned 1 [0185.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad5d10 [0185.765] wcscpy (in: _Dest=0x7ad5d10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.765] wcscat (in: _Dest=0x7ad5d10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.765] wcscat (in: _Dest=0x7ad5d10, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" [0185.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad5d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0185.766] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0185.766] wcscmp (_String1="pl", _String2=".") returned 1 [0185.766] wcscmp (_String1="pl", _String2="..") returned 1 [0185.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad5e18 [0185.766] wcscpy (in: _Dest=0x7ad5e18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.766] wcscat (in: _Dest=0x7ad5e18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.766] wcscat (in: _Dest=0x7ad5e18, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" [0185.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad5e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0185.767] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0185.767] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0185.767] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0185.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad5f20 [0185.768] wcscpy (in: _Dest=0x7ad5f20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.768] wcscat (in: _Dest=0x7ad5f20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.768] wcscat (in: _Dest=0x7ad5f20, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" [0185.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad5f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0185.769] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0185.769] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0185.769] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0185.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6028 [0185.769] wcscpy (in: _Dest=0x7ad6028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.769] wcscat (in: _Dest=0x7ad6028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.769] wcscat (in: _Dest=0x7ad6028, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" [0185.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0185.770] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0185.771] wcscmp (_String1="ro", _String2=".") returned 1 [0185.771] wcscmp (_String1="ro", _String2="..") returned 1 [0185.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6130 [0185.771] wcscpy (in: _Dest=0x7ad6130, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0185.771] wcscat (in: _Dest=0x7ad6130, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0185.771] wcscat (in: _Dest=0x7ad6130, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" [0185.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0186.285] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0186.285] wcscmp (_String1="ru", _String2=".") returned 1 [0186.285] wcscmp (_String1="ru", _String2="..") returned 1 [0186.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eec428 [0186.285] wcscpy (in: _Dest=0x3eec428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0186.285] wcscat (in: _Dest=0x3eec428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0186.285] wcscat (in: _Dest=0x3eec428, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" [0188.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0188.288] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0188.288] wcscmp (_String1="sk", _String2=".") returned 1 [0188.288] wcscmp (_String1="sk", _String2="..") returned 1 [0188.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6550 [0188.289] wcscpy (in: _Dest=0x7ad6550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0188.289] wcscat (in: _Dest=0x7ad6550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0188.289] wcscat (in: _Dest=0x7ad6550, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" [0188.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0188.290] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0188.290] wcscmp (_String1="sl", _String2=".") returned 1 [0188.290] wcscmp (_String1="sl", _String2="..") returned 1 [0188.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6448 [0188.290] wcscpy (in: _Dest=0x7ad6448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0188.290] wcscat (in: _Dest=0x7ad6448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0188.290] wcscat (in: _Dest=0x7ad6448, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" [0188.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0188.292] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0188.292] wcscmp (_String1="sr", _String2=".") returned 1 [0188.292] wcscmp (_String1="sr", _String2="..") returned 1 [0188.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6340 [0188.292] wcscpy (in: _Dest=0x7ad6340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0188.292] wcscat (in: _Dest=0x7ad6340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0188.292] wcscat (in: _Dest=0x7ad6340, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" [0188.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0188.293] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0188.293] wcscmp (_String1="sv", _String2=".") returned 1 [0188.294] wcscmp (_String1="sv", _String2="..") returned 1 [0188.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6238 [0188.294] wcscpy (in: _Dest=0x7ad6238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0188.294] wcscat (in: _Dest=0x7ad6238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0188.294] wcscat (in: _Dest=0x7ad6238, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" [0188.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0188.295] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0189.915] wcscmp (_String1="th", _String2=".") returned 1 [0189.915] wcscmp (_String1="th", _String2="..") returned 1 [0189.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6a2a0 [0189.915] wcscpy (in: _Dest=0x7a6a2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0189.915] wcscat (in: _Dest=0x7a6a2a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0189.916] wcscat (in: _Dest=0x7a6a2a0, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" [0190.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0190.451] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0190.451] wcscmp (_String1="tr", _String2=".") returned 1 [0190.451] wcscmp (_String1="tr", _String2="..") returned 1 [0190.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab3b8 [0190.451] wcscpy (in: _Dest=0x7cab3b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0190.451] wcscat (in: _Dest=0x7cab3b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0190.451] wcscat (in: _Dest=0x7cab3b8, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" [0190.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0190.453] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0190.453] wcscmp (_String1="uk", _String2=".") returned 1 [0190.453] wcscmp (_String1="uk", _String2="..") returned 1 [0190.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab2b0 [0190.453] wcscpy (in: _Dest=0x7cab2b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0190.453] wcscat (in: _Dest=0x7cab2b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0190.453] wcscat (in: _Dest=0x7cab2b0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" [0190.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0190.454] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0190.454] wcscmp (_String1="vi", _String2=".") returned 1 [0190.454] wcscmp (_String1="vi", _String2="..") returned 1 [0190.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab1a8 [0190.454] wcscpy (in: _Dest=0x7cab1a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0190.454] wcscat (in: _Dest=0x7cab1a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0190.454] wcscat (in: _Dest=0x7cab1a8, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" [0190.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0190.456] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0190.456] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0190.456] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0190.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7cabe08 [0190.456] wcscpy (in: _Dest=0x7cabe08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0190.456] wcscat (in: _Dest=0x7cabe08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0190.456] wcscat (in: _Dest=0x7cabe08, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" [0190.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cabe08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0190.457] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0190.457] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0190.457] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0190.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7cab0a0 [0190.457] wcscpy (in: _Dest=0x7cab0a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales" [0190.457] wcscat (in: _Dest=0x7cab0a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\" [0190.457] wcscat (in: _Dest=0x7cab0a0, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" [0190.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab0a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0190.458] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0190.539] FindClose (in: hFindFile=0x3dcf990 | out: hFindFile=0x3dcf990) returned 1 [0190.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52f00) returned 1 [0190.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea1b8) returned 1 [0190.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de9bb8) returned 1 Thread: id = 5388 os_tid = 0x1fa4 [0181.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x20 [0181.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x20) returned 0 [0181.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.833] GetLastError () returned 0x5 [0181.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x20) returned 0 [0181.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68e60) returned 1 Thread: id = 5389 os_tid = 0x1fa8 [0181.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x20 [0183.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x20) returned 0 [0183.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.863] GetLastError () returned 0x5 [0183.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x20) returned 0 [0183.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 Thread: id = 5390 os_tid = 0x1fb0 [0181.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x20 [0183.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x20) returned 0 [0183.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.866] GetLastError () returned 0x5 [0183.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x20) returned 0 [0183.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ba20) returned 1 Thread: id = 5391 os_tid = 0x90 [0181.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x20 [0183.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x20) returned 0 [0183.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.872] GetLastError () returned 0x5 [0183.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x20) returned 0 [0183.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b888) returned 1 Thread: id = 5392 os_tid = 0x730 [0181.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x20 [0183.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x20) returned 0 [0183.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.915] GetLastError () returned 0x5 [0183.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x20) returned 0 [0183.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 5393 os_tid = 0xc54 [0181.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x20 [0183.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x20) returned 0 [0183.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.914] GetLastError () returned 0x5 [0183.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x20) returned 0 [0183.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68998) returned 1 Thread: id = 5394 os_tid = 0xb74 [0181.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x20 [0183.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x20) returned 0 [0183.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.875] GetLastError () returned 0x5 [0183.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x20) returned 0 [0183.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68bb8) returned 1 Thread: id = 5395 os_tid = 0xb64 [0181.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x20 [0183.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x20) returned 0 [0183.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.873] GetLastError () returned 0x5 [0183.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x20) returned 0 [0183.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68a20) returned 1 Thread: id = 5396 os_tid = 0xb6c [0181.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x20 [0183.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x20) returned 0 [0183.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.868] GetLastError () returned 0x5 [0183.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x20) returned 0 [0183.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68aa8) returned 1 Thread: id = 5397 os_tid = 0x5d4 [0181.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x20 [0183.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x20) returned 0 [0183.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.871] GetLastError () returned 0x5 [0183.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x20) returned 0 [0183.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68338) returned 1 Thread: id = 5398 os_tid = 0xb0 [0181.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x20 [0183.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x20) returned 0 [0183.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.912] GetLastError () returned 0x5 [0183.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x20) returned 0 [0183.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681a0) returned 1 Thread: id = 5399 os_tid = 0x1c4 [0181.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x20 [0183.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x20) returned 0 [0183.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.911] GetLastError () returned 0x5 [0183.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x20) returned 0 [0183.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68118) returned 1 Thread: id = 5400 os_tid = 0x7fc [0181.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x20 [0183.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x20) returned 0 [0183.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.910] GetLastError () returned 0x5 [0183.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x20) returned 0 [0183.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68228) returned 1 Thread: id = 5401 os_tid = 0xc5c [0181.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x20 [0183.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x20) returned 0 [0183.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.908] GetLastError () returned 0x5 [0183.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x20) returned 0 [0183.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a683c0) returned 1 Thread: id = 5402 os_tid = 0xdb4 [0181.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x20 [0183.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x20) returned 0 [0183.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.907] GetLastError () returned 0x5 [0183.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x20) returned 0 [0183.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 Thread: id = 5403 os_tid = 0xdb8 [0181.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x20 [0183.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x20) returned 0 [0183.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.906] GetLastError () returned 0x5 [0183.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x20) returned 0 [0183.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a682b0) returned 1 Thread: id = 5404 os_tid = 0x6a4 [0181.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x20 [0183.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x20) returned 0 [0183.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.905] GetLastError () returned 0x5 [0183.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x20) returned 0 [0183.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68c40) returned 1 Thread: id = 5405 os_tid = 0x224 [0181.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x20 [0183.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x20) returned 0 [0183.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.903] GetLastError () returned 0x5 [0183.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x20) returned 0 [0183.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68b30) returned 1 Thread: id = 5406 os_tid = 0x998 [0181.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x20 [0183.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x20) returned 0 [0183.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.902] GetLastError () returned 0x5 [0183.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x20) returned 0 [0183.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a694c0) returned 1 Thread: id = 5407 os_tid = 0x9a8 [0181.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x20 [0183.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x20) returned 0 [0183.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.900] GetLastError () returned 0x5 [0183.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x20) returned 0 [0183.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69548) returned 1 Thread: id = 5408 os_tid = 0x9b8 [0181.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x20 [0183.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x20) returned 0 [0183.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.898] GetLastError () returned 0x5 [0183.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x20) returned 0 [0183.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a695d0) returned 1 Thread: id = 5409 os_tid = 0xa8c [0181.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg")) returned 0x20 [0183.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", dwFileAttributes=0x20) returned 0 [0183.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.936] GetLastError () returned 0x5 [0184.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", dwFileAttributes=0x20) returned 0 [0184.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4aa0) returned 1 Thread: id = 5410 os_tid = 0xb18 [0181.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp")) returned 0x20 [0185.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", dwFileAttributes=0x20) returned 0 [0185.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.133] GetLastError () returned 0x5 [0185.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", dwFileAttributes=0x20) returned 0 [0185.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0ac8) returned 1 Thread: id = 5411 os_tid = 0x51c [0181.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg")) returned 0x20 [0183.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", dwFileAttributes=0x20) returned 0 [0183.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.957] GetLastError () returned 0x5 [0183.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", dwFileAttributes=0x20) returned 0 [0183.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 5412 os_tid = 0xd6c [0181.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp")) returned 0x20 [0185.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0185.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.112] GetLastError () returned 0x5 [0185.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0185.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 5413 os_tid = 0xdd8 [0181.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg")) returned 0x20 [0185.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", dwFileAttributes=0x20) returned 0 [0185.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.116] GetLastError () returned 0x5 [0185.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", dwFileAttributes=0x20) returned 0 [0185.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c90c8) returned 1 Thread: id = 5414 os_tid = 0xecc [0181.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp")) returned 0x20 [0185.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", dwFileAttributes=0x20) returned 0 [0185.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.118] GetLastError () returned 0x5 [0185.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", dwFileAttributes=0x20) returned 0 [0185.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4c70) returned 1 Thread: id = 5415 os_tid = 0xed8 [0181.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg")) returned 0x20 [0185.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", dwFileAttributes=0x20) returned 0 [0185.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.114] GetLastError () returned 0x5 [0185.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", dwFileAttributes=0x20) returned 0 [0185.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0e88) returned 1 Thread: id = 5416 os_tid = 0x15ac [0181.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp")) returned 0x20 [0185.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0185.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.119] GetLastError () returned 0x5 [0185.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0185.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae2f0) returned 1 Thread: id = 5417 os_tid = 0x1830 [0181.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg")) returned 0x20 [0185.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", dwFileAttributes=0x20) returned 0 [0185.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.120] GetLastError () returned 0x5 [0185.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", dwFileAttributes=0x20) returned 0 [0185.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc48d0) returned 1 Thread: id = 5418 os_tid = 0x1834 [0181.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp")) returned 0x20 [0185.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", dwFileAttributes=0x20) returned 0 [0185.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.121] GetLastError () returned 0x5 [0185.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", dwFileAttributes=0x20) returned 0 [0185.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db09d8) returned 1 Thread: id = 5419 os_tid = 0x1838 [0181.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7a64170 [0181.862] wcscpy (in: _Dest=0x7a64170, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" [0181.862] wcscat (in: _Dest=0x7a64170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\" [0181.862] wcscat (in: _Dest=0x7a64170, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*" [0181.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0181.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77168d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0185.122] wcscmp (_String1=".", _String2=".") returned 0 [0185.122] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x77168d90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x77168d90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.123] wcscmp (_String1="..", _String2=".") returned 1 [0185.123] wcscmp (_String1="..", _String2="..") returned 0 [0185.123] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 1 [0185.123] wcscmp (_String1="Project Report Type", _String2=".") returned 1 [0185.123] wcscmp (_String1="Project Report Type", _String2="..") returned 1 [0185.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de76b8 [0185.123] wcscpy (in: _Dest=0x3de76b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool" [0185.123] wcscat (in: _Dest=0x3de76b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\" [0185.123] wcscat (in: _Dest=0x3de76b8, _Source="Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0185.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de76b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0185.437] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 0 [0185.438] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0185.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0185.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64170) returned 1 [0185.438] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68570) returned 1 Thread: id = 5420 os_tid = 0x183c [0181.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg")) returned 0x20 [0185.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", dwFileAttributes=0x20) returned 0 [0185.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.124] GetLastError () returned 0x5 [0185.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", dwFileAttributes=0x20) returned 0 [0185.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae3e8) returned 1 Thread: id = 5421 os_tid = 0x1840 [0181.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp")) returned 0x20 [0185.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0185.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.125] GetLastError () returned 0x5 [0185.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0185.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de9cb8) returned 1 Thread: id = 5422 os_tid = 0x20e4 [0181.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg")) returned 0x20 [0185.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", dwFileAttributes=0x20) returned 0 [0185.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.127] GetLastError () returned 0x5 [0185.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", dwFileAttributes=0x20) returned 0 [0185.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 5423 os_tid = 0x20e8 [0181.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp")) returned 0x20 [0185.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", dwFileAttributes=0x20) returned 0 [0185.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.115] GetLastError () returned 0x5 [0185.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", dwFileAttributes=0x20) returned 0 [0185.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4530) returned 1 Thread: id = 5424 os_tid = 0x20ec [0181.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp")) returned 0x20 [0185.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP", dwFileAttributes=0x20) returned 0 [0185.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.129] GetLastError () returned 0x5 [0185.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP", dwFileAttributes=0x20) returned 0 [0185.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 Thread: id = 5425 os_tid = 0x20f0 [0181.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg")) returned 0x20 [0185.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG", dwFileAttributes=0x20) returned 0 [0185.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.128] GetLastError () returned 0x5 [0185.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG", dwFileAttributes=0x20) returned 0 [0185.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 5426 os_tid = 0x20f4 [0181.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg")) returned 0x20 [0185.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG", dwFileAttributes=0x20) returned 0 [0185.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.134] GetLastError () returned 0x5 [0185.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG", dwFileAttributes=0x20) returned 0 [0185.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687f8) returned 1 Thread: id = 5427 os_tid = 0x20f8 [0181.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg")) returned 0x20 [0185.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG", dwFileAttributes=0x20) returned 0 [0185.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.131] GetLastError () returned 0x5 [0185.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG", dwFileAttributes=0x20) returned 0 [0185.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b58) returned 1 Thread: id = 5428 os_tid = 0x20fc [0181.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp")) returned 0x20 [0185.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", dwFileAttributes=0x20) returned 0 [0185.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.066] GetLastError () returned 0x5 [0185.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", dwFileAttributes=0x20) returned 0 [0185.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c88e8) returned 1 Thread: id = 5429 os_tid = 0x2100 [0181.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg")) returned 0x20 [0185.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", dwFileAttributes=0x20) returned 0 [0185.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.109] GetLastError () returned 0x5 [0185.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", dwFileAttributes=0x20) returned 0 [0185.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8c68) returned 1 Thread: id = 5430 os_tid = 0x2104 [0181.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp")) returned 0x20 [0185.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0185.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.111] GetLastError () returned 0x5 [0185.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0185.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc49b8) returned 1 Thread: id = 5431 os_tid = 0x2108 [0181.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif")) returned 0x20 [0184.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0184.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.503] GetLastError () returned 0x5 [0184.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0184.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9288) returned 1 Thread: id = 5432 os_tid = 0x210c [0181.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif")) returned 0x20 [0184.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0184.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.509] GetLastError () returned 0x5 [0184.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0184.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d858a0) returned 1 Thread: id = 5433 os_tid = 0x2110 [0181.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif")) returned 0x20 [0184.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0184.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.510] GetLastError () returned 0x5 [0184.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0184.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86330) returned 1 Thread: id = 5434 os_tid = 0x2114 [0181.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif")) returned 0x20 [0184.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0184.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.512] GetLastError () returned 0x5 [0184.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0184.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86400) returned 1 Thread: id = 5435 os_tid = 0x2118 [0181.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif")) returned 0x20 [0184.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif", dwFileAttributes=0x20) returned 0 [0184.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.513] GetLastError () returned 0x5 [0184.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif", dwFileAttributes=0x20) returned 0 [0184.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a80) returned 1 Thread: id = 5436 os_tid = 0x211c [0181.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif")) returned 0x20 [0184.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0184.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.515] GetLastError () returned 0x5 [0184.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0184.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68c30) returned 1 Thread: id = 5437 os_tid = 0x2120 [0181.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif")) returned 0x20 [0184.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0184.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.486] GetLastError () returned 0x5 [0184.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0184.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66cd8) returned 1 Thread: id = 5438 os_tid = 0x2124 [0181.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js")) returned 0x20 [0184.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0184.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.484] GetLastError () returned 0x5 [0184.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0184.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ba0) returned 1 Thread: id = 5439 os_tid = 0x2128 [0181.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js")) returned 0x20 [0184.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0184.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.516] GetLastError () returned 0x5 [0184.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0184.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68de0) returned 1 Thread: id = 5440 os_tid = 0x212c [0181.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js")) returned 0x20 [0184.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js", dwFileAttributes=0x20) returned 0 [0184.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.504] GetLastError () returned 0x5 [0184.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js", dwFileAttributes=0x20) returned 0 [0184.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85e50) returned 1 Thread: id = 5441 os_tid = 0x2130 [0181.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js")) returned 0x20 [0184.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0184.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.744] GetLastError () returned 0x5 [0184.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0184.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e65c58) returned 1 Thread: id = 5442 os_tid = 0x2138 [0181.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg")) returned 0x20 [0184.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0184.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.506] GetLastError () returned 0x5 [0184.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0184.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8e28) returned 1 Thread: id = 5443 os_tid = 0x213c [0181.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif")) returned 0x20 [0181.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0181.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.873] GetLastError () returned 0x5 [0181.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0181.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 5444 os_tid = 0x2140 [0181.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif")) returned 0x20 [0181.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif", dwFileAttributes=0x20) returned 0 [0181.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.875] GetLastError () returned 0x5 [0181.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif", dwFileAttributes=0x20) returned 0 [0181.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86190) returned 1 Thread: id = 5445 os_tid = 0x2144 [0181.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif")) returned 0x20 [0181.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0181.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.877] GetLastError () returned 0x5 [0181.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0181.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57500) returned 1 Thread: id = 5446 os_tid = 0x215c [0181.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif")) returned 0x20 [0181.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0181.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.878] GetLastError () returned 0x5 [0181.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0181.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56628) returned 1 Thread: id = 5447 os_tid = 0x1844 [0181.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif")) returned 0x20 [0181.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0181.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.880] GetLastError () returned 0x5 [0181.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0181.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57438) returned 1 Thread: id = 5448 os_tid = 0x1848 [0181.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js")) returned 0x20 [0186.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS", dwFileAttributes=0x20) returned 0 [0186.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.632] GetLastError () returned 0x5 [0187.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS", dwFileAttributes=0x20) returned 0 [0188.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e66798) returned 1 Thread: id = 5449 os_tid = 0x2198 [0181.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html")) returned 0x20 [0184.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0184.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.524] GetLastError () returned 0x5 [0185.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0185.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 Thread: id = 5450 os_tid = 0xc38 [0181.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html")) returned 0x20 [0183.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0183.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.107] GetLastError () returned 0x5 [0184.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0184.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 Thread: id = 5451 os_tid = 0x27a8 [0181.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html")) returned 0x20 [0189.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0189.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.427] GetLastError () returned 0x5 [0189.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0189.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689a8) returned 1 Thread: id = 5452 os_tid = 0x26b8 [0181.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html")) returned 0x20 [0189.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0189.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.424] GetLastError () returned 0x5 [0189.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0189.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8728) returned 1 Thread: id = 5453 os_tid = 0x26e0 [0181.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html")) returned 0x20 [0186.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0186.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.632] GetLastError () returned 0x5 [0187.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0188.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4700) returned 1 Thread: id = 5454 os_tid = 0x26e4 [0181.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html")) returned 0x20 [0189.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0189.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.421] GetLastError () returned 0x5 [0189.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0189.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 Thread: id = 5455 os_tid = 0x26e8 [0181.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html")) returned 0x20 [0186.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0187.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.419] GetLastError () returned 0x5 [0189.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0189.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 5456 os_tid = 0x26ec [0181.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html")) returned 0x20 [0186.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0186.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.632] GetLastError () returned 0x5 [0187.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0188.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc47e8) returned 1 Thread: id = 5457 os_tid = 0x26f0 [0181.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html")) returned 0x20 [0189.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0189.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.418] GetLastError () returned 0x5 [0189.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0189.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3fc0) returned 1 Thread: id = 5458 os_tid = 0x26f4 [0181.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html")) returned 0x20 [0189.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0189.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.440] GetLastError () returned 0x5 [0189.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0189.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c98a8) returned 1 Thread: id = 5459 os_tid = 0x26f8 [0181.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html")) returned 0x20 [0184.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0184.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.329] GetLastError () returned 0x5 [0186.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", dwFileAttributes=0x20) returned 0 [0186.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4d58) returned 1 Thread: id = 5460 os_tid = 0x26fc [0181.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg")) returned 0x20 [0189.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0189.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.438] GetLastError () returned 0x5 [0189.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0189.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4e40) returned 1 Thread: id = 5461 os_tid = 0x2708 [0181.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0189.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0189.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.437] GetLastError () returned 0x5 [0189.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0189.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0ca8) returned 1 Thread: id = 5462 os_tid = 0x270c [0181.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js")) returned 0x20 [0189.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js", dwFileAttributes=0x20) returned 0 [0189.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.435] GetLastError () returned 0x5 [0189.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js", dwFileAttributes=0x20) returned 0 [0189.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d578e8) returned 1 Thread: id = 5463 os_tid = 0x2714 [0181.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg")) returned 0x20 [0189.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", dwFileAttributes=0x20) returned 0 [0189.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.433] GetLastError () returned 0x5 [0189.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", dwFileAttributes=0x20) returned 0 [0189.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 Thread: id = 5464 os_tid = 0x271c [0181.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif")) returned 0x20 [0186.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0186.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.633] GetLastError () returned 0x5 [0187.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0189.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d566f0) returned 1 Thread: id = 5465 os_tid = 0x2720 [0181.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif")) returned 0x20 [0189.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0189.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.431] GetLastError () returned 0x5 [0189.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0189.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67490) returned 1 Thread: id = 5466 os_tid = 0x2728 [0181.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js")) returned 0x20 [0189.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0189.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.109] GetLastError () returned 0x5 [0189.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0189.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 Thread: id = 5467 os_tid = 0x2740 [0181.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif")) returned 0x20 [0187.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0188.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.426] GetLastError () returned 0x5 [0189.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0189.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d08) returned 1 Thread: id = 5468 os_tid = 0x2744 [0181.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif")) returned 0x20 [0187.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0187.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.422] GetLastError () returned 0x5 [0189.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0189.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e6650) returned 1 Thread: id = 5469 os_tid = 0x2748 [0181.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif")) returned 0x20 [0188.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0188.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.157] GetLastError () returned 0x5 [0188.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0188.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85cb0) returned 1 Thread: id = 5470 os_tid = 0x274c [0181.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif")) returned 0x20 [0189.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0189.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.449] GetLastError () returned 0x5 [0189.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0189.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852f0) returned 1 Thread: id = 5471 os_tid = 0x2750 [0181.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif")) returned 0x20 [0189.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0189.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.448] GetLastError () returned 0x5 [0189.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0189.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e5648) returned 1 Thread: id = 5472 os_tid = 0x2754 [0181.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif")) returned 0x20 [0189.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0189.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.446] GetLastError () returned 0x5 [0189.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0189.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 5473 os_tid = 0x184c [0181.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif")) returned 0x20 [0189.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif", dwFileAttributes=0x20) returned 0 [0189.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.444] GetLastError () returned 0x5 [0189.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif", dwFileAttributes=0x20) returned 0 [0189.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e5b58) returned 1 Thread: id = 5474 os_tid = 0x275c [0181.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif")) returned 0x20 [0189.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0189.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.442] GetLastError () returned 0x5 [0189.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0189.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64090) returned 1 Thread: id = 5475 os_tid = 0x2760 [0181.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif")) returned 0x20 [0186.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0186.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.630] GetLastError () returned 0x5 [0187.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0187.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85150) returned 1 Thread: id = 5476 os_tid = 0x2764 [0181.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif")) returned 0x20 [0185.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0185.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.133] GetLastError () returned 0x5 [0187.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0187.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d853c0) returned 1 Thread: id = 5477 os_tid = 0x2768 [0181.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif")) returned 0x20 [0186.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0186.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.633] GetLastError () returned 0x5 [0187.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0188.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e666d8) returned 1 Thread: id = 5478 os_tid = 0x276c [0181.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js")) returned 0x20 [0186.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0186.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.633] GetLastError () returned 0x5 [0187.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0188.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575c8) returned 1 Thread: id = 5479 os_tid = 0x22b4 [0181.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js")) returned 0x20 [0186.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0186.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.415] GetLastError () returned 0x5 [0189.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0189.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e6800) returned 1 Thread: id = 5480 os_tid = 0x22b8 [0181.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js")) returned 0x20 [0189.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js", dwFileAttributes=0x20) returned 0 [0189.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.429] GetLastError () returned 0x5 [0189.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js", dwFileAttributes=0x20) returned 0 [0189.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85970) returned 1 Thread: id = 5481 os_tid = 0x22bc [0181.904] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png")) returned 0x2020 [0181.905] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png", dwFileAttributes=0x20) returned 1 [0182.745] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1794 [0182.746] GetFileSizeEx (in: hFile=0x1794, lpFileSize=0xcc5f76c | out: lpFileSize=0xcc5f76c*=3000) returned 1 [0182.746] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0xbb4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.746] ReadFile (in: hFile=0x1794, lpBuffer=0xcc5f748, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcc5f758, lpOverlapped=0x0 | out: lpBuffer=0xcc5f748*, lpNumberOfBytesRead=0xcc5f758*=0x4, lpOverlapped=0x0) returned 1 [0182.749] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0182.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0182.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0182.750] NtQuerySystemTime (in: CurrentTime=0xcc5f6e0 | out: CurrentTime=0xcc5f6e0*=132462177613332000) returned 0x0 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x4cc59808 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x1044d918 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x38af9d98 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x4cf9aac6 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x5ef86cab [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x488c8436 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x49b81444 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x26735ce4 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x67035a52 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x16fa690 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x70e8d76e [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x603e54c8 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x28bc171b [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x5dd525a2 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x385b6d48 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x34d808f8 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x48fb0cba [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x3b9e09a6 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x38cf2166 [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x5e3f11d [0182.750] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x3a354ffe [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x68405fdf [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x7987c7fb [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x436ccb52 [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x68ea3a88 [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x48cf5e4c [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x7dcee459 [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x62bbd452 [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x5a5d3b6b [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x26a547ab [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x46d6a514 [0182.751] RtlRandomEx (in: Seed=0xcc5f6d8 | out: Seed=0xcc5f6d8) returned 0x1f21e36a [0182.763] ReadFile (in: hFile=0x1794, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0xbb8, lpNumberOfBytesRead=0xcc5f6d4, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0xcc5f6d4*=0xbb8, lpOverlapped=0x0) returned 1 [0182.763] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.763] WriteFile (in: hFile=0x1794, lpBuffer=0x7c1bf68*, nNumberOfBytesToWrite=0xbb8, lpNumberOfBytesWritten=0xcc5f6d8, lpOverlapped=0x0 | out: lpBuffer=0x7c1bf68*, lpNumberOfBytesWritten=0xcc5f6d8*=0xbb8, lpOverlapped=0x0) returned 1 [0183.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0183.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0183.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0183.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1bf68) returned 1 [0183.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0183.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3efc0) returned 1 [0183.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07800) returned 1 [0183.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a376e0 [0183.951] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.951] WriteFile (in: hFile=0x1794, lpBuffer=0x7b7c550*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xcc5f760, lpOverlapped=0x0 | out: lpBuffer=0x7b7c550*, lpNumberOfBytesWritten=0xcc5f760*=0x10a, lpOverlapped=0x0) returned 1 [0184.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c550) returned 1 [0184.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37860) returned 1 [0184.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0184.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a376e0) returned 1 [0184.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0184.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0184.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0f8) returned 1 [0184.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0184.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b80a10 [0184.568] wcscpy (in: _Dest=0x7b80a10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png" [0184.568] wcscat (in: _Dest=0x7b80a10, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.68814f" [0184.568] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.68814f", NtPathName=0xcc5f6d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3eca558 [0184.643] FlushFileBuffers (hFile=0x1794) returned 1 [0184.955] CloseHandle (hObject=0x1794) returned 1 [0186.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7c898 [0186.006] wcscpy (in: _Dest=0x7b7c898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0186.006] wcscat (in: _Dest=0x7b7c898, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" [0186.006] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814f-readme.txt")) returned 0x2020 [0186.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c898) returned 1 [0186.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300d948) returned 1 Thread: id = 5482 os_tid = 0x22c0 [0181.906] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png")) returned 0x2020 [0181.906] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png", dwFileAttributes=0x20) returned 1 [0182.764] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x270 [0182.765] GetFileSizeEx (in: hFile=0x270, lpFileSize=0xcb3f7fc | out: lpFileSize=0xcb3f7fc*=143) returned 1 [0182.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0182.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0182.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0182.765] NtQuerySystemTime (in: CurrentTime=0xcb3f770 | out: CurrentTime=0xcb3f770*=132462177613488000) returned 0x0 [0182.765] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x33fb7f81 [0182.765] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x3836c4b3 [0182.765] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x3da511b3 [0182.765] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x48721925 [0182.765] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x8006285 [0182.765] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x4e86452 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x4259b3f6 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x72c1e7f7 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x708d6748 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x4875374a [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x2a63a196 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x4d650e05 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x73e5c313 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x4d68a5b8 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x5e5783aa [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x44c5aeab [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x3067d787 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x6e5db055 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x209eccab [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x1361eb34 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x322f2ff0 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x1ee63763 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x1585dbc5 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x25b30f09 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x231d7619 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x27a8f1ff [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x499d1c2f [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0xecb11f2 [0182.766] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x72ffe14c [0182.767] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x55b1586e [0182.767] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0xe4d79a1 [0182.767] RtlRandomEx (in: Seed=0xcb3f768 | out: Seed=0xcb3f768) returned 0x2ce4e7c1 [0182.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0182.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1fb70 [0182.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c23778 [0182.780] ReadFile (in: hFile=0x270, lpBuffer=0x7c1fb70, nNumberOfBytesToRead=0x8f, lpNumberOfBytesRead=0xcb3f764, lpOverlapped=0x0 | out: lpBuffer=0x7c1fb70*, lpNumberOfBytesRead=0xcb3f764*=0x8f, lpOverlapped=0x0) returned 1 [0182.783] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.783] WriteFile (in: hFile=0x270, lpBuffer=0x7c23778*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0xcb3f768, lpOverlapped=0x0 | out: lpBuffer=0x7c23778*, lpNumberOfBytesWritten=0xcb3f768*=0x8f, lpOverlapped=0x0) returned 1 [0183.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0183.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0183.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0183.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c23778) returned 1 [0183.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1fb70) returned 1 [0183.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0183.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08070) returned 1 [0183.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a374d0 [0183.375] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.375] WriteFile (in: hFile=0x270, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xcb3f7f0, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xcb3f7f0*=0x108, lpOverlapped=0x0) returned 1 [0183.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0183.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0183.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0183.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0183.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc60) returned 1 [0183.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0183.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0183.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0183.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x3dec828 [0183.594] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png" [0183.594] wcscat (in: _Dest=0x3dec828, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.68814f" [0183.594] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.68814f", NtPathName=0xcb3f768, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\icon_16.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ec9a60 [0184.692] FlushFileBuffers (hFile=0x270) returned 1 [0184.957] CloseHandle (hObject=0x270) returned 1 [0186.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7ccf8 [0186.048] wcscpy (in: _Dest=0x7b7ccf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0186.048] wcscat (in: _Dest=0x7b7ccf8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" [0186.048] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814f-readme.txt")) returned 0x2020 [0186.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ccf8) returned 1 [0186.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 Thread: id = 5483 os_tid = 0x22c4 [0181.906] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html")) returned 0x2020 [0183.141] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html", dwFileAttributes=0x20) returned 1 [0183.142] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x74c [0183.142] GetFileSizeEx (in: hFile=0x74c, lpFileSize=0xcc9fd74 | out: lpFileSize=0xcc9fd74*=92) returned 1 [0183.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0183.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0183.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0183.143] NtQuerySystemTime (in: CurrentTime=0xcc9fce8 | out: CurrentTime=0xcc9fce8*=132462177617232000) returned 0x0 [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x35bb9a93 [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x363fdcbb [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x29e87402 [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x3dff4674 [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x79ded001 [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x71d760d4 [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x99250ac [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x5a6243d1 [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x1ffba159 [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x19884482 [0183.143] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x692380ae [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x65e9532b [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x37786df5 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x7b61de61 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0xf018599 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x7edb1fd [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x255fa99a [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x1d1e53f3 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x47aff479 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x493c88a1 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0xff91b36 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x1c23a62c [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x61caa142 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x752b7177 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x52f4046b [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x161d2b2c [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x36d004c9 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x744bda40 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x2cf96b2 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x1702f707 [0183.144] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x45b09752 [0183.145] RtlRandomEx (in: Seed=0xcc9fce0 | out: Seed=0xcc9fce0) returned 0x66fc707 [0183.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0183.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d503a0 [0183.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d53fa8 [0183.424] ReadFile (in: hFile=0x74c, lpBuffer=0x7d503a0, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0xcc9fcdc, lpOverlapped=0x0 | out: lpBuffer=0x7d503a0*, lpNumberOfBytesRead=0xcc9fcdc*=0x5c, lpOverlapped=0x0) returned 1 [0183.426] SetFilePointerEx (in: hFile=0x74c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.426] WriteFile (in: hFile=0x74c, lpBuffer=0x7d53fa8*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0xcc9fce0, lpOverlapped=0x0 | out: lpBuffer=0x7d53fa8*, lpNumberOfBytesWritten=0xcc9fce0*=0x5c, lpOverlapped=0x0) returned 1 [0183.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0183.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0183.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0183.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d53fa8) returned 1 [0183.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d503a0) returned 1 [0183.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0183.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85428) returned 1 [0183.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0183.433] SetFilePointerEx (in: hFile=0x74c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.433] WriteFile (in: hFile=0x74c, lpBuffer=0x7a38700*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xcc9fd68, lpOverlapped=0x0 | out: lpBuffer=0x7a38700*, lpNumberOfBytesWritten=0xcc9fd68*=0x104, lpOverlapped=0x0) returned 1 [0183.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85428 [0183.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fdd0 [0183.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0183.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0183.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12) returned 0x7a35090 [0183.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0183.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0183.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0183.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0183.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85428) returned 1 [0183.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x25) returned 0x7a37500 [0183.435] sprintf (in: _Dest=0x7a37500, _Format="%c%c" | out: _Dest="dd") returned 2 [0183.435] sprintf (in: _Dest=0x7a37502, _Format="%c%c" | out: _Dest="52") returned 2 [0183.435] sprintf (in: _Dest=0x7a37504, _Format="%c%c" | out: _Dest="6e") returned 2 [0183.435] sprintf (in: _Dest=0x7a37506, _Format="%c%c" | out: _Dest="b8") returned 2 [0183.435] sprintf (in: _Dest=0x7a37508, _Format="%c%c" | out: _Dest="57") returned 2 [0183.435] sprintf (in: _Dest=0x7a3750a, _Format="%c%c" | out: _Dest="8c") returned 2 [0183.435] sprintf (in: _Dest=0x7a3750c, _Format="%c%c" | out: _Dest="57") returned 2 [0183.435] sprintf (in: _Dest=0x7a3750e, _Format="%c%c" | out: _Dest="ed") returned 2 [0183.436] sprintf (in: _Dest=0x7a37510, _Format="%c%c" | out: _Dest="54") returned 2 [0183.436] sprintf (in: _Dest=0x7a37512, _Format="%c%c" | out: _Dest="36") returned 2 [0183.436] sprintf (in: _Dest=0x7a37514, _Format="%c%c" | out: _Dest="b0") returned 2 [0183.436] sprintf (in: _Dest=0x7a37516, _Format="%c%c" | out: _Dest="3d") returned 2 [0183.436] sprintf (in: _Dest=0x7a37518, _Format="%c%c" | out: _Dest="a4") returned 2 [0183.436] sprintf (in: _Dest=0x7a3751a, _Format="%c%c" | out: _Dest="25") returned 2 [0183.436] sprintf (in: _Dest=0x7a3751c, _Format="%c%c" | out: _Dest="a6") returned 2 [0183.436] sprintf (in: _Dest=0x7a3751e, _Format="%c%c" | out: _Dest="f3") returned 2 [0183.436] sprintf (in: _Dest=0x7a37520, _Format="%c%c" | out: _Dest="07") returned 2 [0183.436] sprintf (in: _Dest=0x7a37522, _Format="%c%c" | out: _Dest="e3") returned 2 [0183.436] RtlInitAnsiString (in: DestinationString=0xcc9fcf0, SourceString="dd526eb8578c57ed5436b03da425a6f307e3" | out: DestinationString="dd526eb8578c57ed5436b03da425a6f307e3") [0183.436] RtlAnsiStringToUnicodeString (in: DestinationString=0xcc9fce8, SourceString="dd526eb8578c57ed5436b03da425a6f307e3", AllocateDestinationString=1 | out: DestinationString="dd526eb8578c57ed5436b03da425a6f307e3") returned 0x0 [0183.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x7a39688 [0183.436] wcscat (in: _Dest=0x7a38700, _Source="dd526eb85" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\dd526eb85") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\dd526eb85" [0183.436] wcscat (in: _Dest=0x7a38700, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\dd526eb85.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\dd526eb85.68814f" [0183.436] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\dd526eb85.68814f", NtPathName=0xcc9fce0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\dd526eb85.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9e08 [0183.439] FlushFileBuffers (hFile=0x74c) returned 1 [0183.608] CloseHandle (hObject=0x74c) returned 1 [0185.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7a38b60 [0185.780] wcscpy (in: _Dest=0x7a38b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0185.780] wcscat (in: _Dest=0x7a38b60, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" [0185.780] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814f-readme.txt")) returned 0xffffffff [0185.781] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190c [0186.291] WriteFile (in: hFile=0x190c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcc9fcfc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcc9fcfc*=0x8b9, lpOverlapped=0x0) returned 1 [0186.293] CloseHandle (hObject=0x190c) returned 1 [0186.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38b60) returned 1 [0186.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd10) returned 1 Thread: id = 5484 os_tid = 0x22c8 [0181.907] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js")) returned 0x2020 [0183.161] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js", dwFileAttributes=0x20) returned 1 [0183.161] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\main.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10c4 [0183.161] GetFileSizeEx (in: hFile=0x10c4, lpFileSize=0xc99f98c | out: lpFileSize=0xc99f98c*=79) returned 1 [0183.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0183.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0183.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0183.162] NtQuerySystemTime (in: CurrentTime=0xc99f900 | out: CurrentTime=0xc99f900*=132462177617388000) returned 0x0 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x1b80f379 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x1a8c9de0 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x14aff515 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x4e0ac631 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x66e31c50 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x25173b05 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x62e615ab [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x520d0c20 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x2f827a96 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x49d9b29d [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x187ae82a [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x6014a28e [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x30003e22 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x488f0624 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x2e9330a7 [0183.162] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x404ea77d [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x41c3a5f1 [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x3e046898 [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x5d919f6e [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x7a9c36eb [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x1fc0a912 [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x1b5e1d96 [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x6a05d9b [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x4d222624 [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x766206d9 [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x67fa3b1f [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0xf5a53b3 [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x1c750a20 [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x725fbf75 [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x1f293dec [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x7b4d4769 [0183.163] RtlRandomEx (in: Seed=0xc99f8f8 | out: Seed=0xc99f8f8) returned 0x6ba61d2b [0183.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0183.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d903a0 [0183.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d93fa8 [0183.446] ReadFile (in: hFile=0x10c4, lpBuffer=0x7d903a0, nNumberOfBytesToRead=0x4f, lpNumberOfBytesRead=0xc99f8f4, lpOverlapped=0x0 | out: lpBuffer=0x7d903a0*, lpNumberOfBytesRead=0xc99f8f4*=0x4f, lpOverlapped=0x0) returned 1 [0183.448] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.448] WriteFile (in: hFile=0x10c4, lpBuffer=0x7d93fa8*, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0xc99f8f8, lpOverlapped=0x0 | out: lpBuffer=0x7d93fa8*, lpNumberOfBytesWritten=0xc99f8f8*=0x4f, lpOverlapped=0x0) returned 1 [0183.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0183.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0183.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0183.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d93fa8) returned 1 [0183.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d903a0) returned 1 [0183.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0183.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84fa8) returned 1 [0183.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5dd00 [0183.939] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.939] WriteFile (in: hFile=0x10c4, lpBuffer=0x7b7bdf0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xc99f980, lpOverlapped=0x0 | out: lpBuffer=0x7b7bdf0*, lpNumberOfBytesWritten=0xc99f980*=0x100, lpOverlapped=0x0) returned 1 [0184.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0184.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0184.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe) returned 0x3e43860 [0184.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0184.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0184.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b80) returned 1 [0184.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1d) returned 0x3dc9b80 [0184.584] sprintf (in: _Dest=0x3dc9b80, _Format="%c%c" | out: _Dest="57") returned 2 [0184.584] sprintf (in: _Dest=0x3dc9b82, _Format="%c%c" | out: _Dest="86") returned 2 [0184.584] sprintf (in: _Dest=0x3dc9b84, _Format="%c%c" | out: _Dest="65") returned 2 [0184.584] sprintf (in: _Dest=0x3dc9b86, _Format="%c%c" | out: _Dest="55") returned 2 [0184.585] sprintf (in: _Dest=0x3dc9b88, _Format="%c%c" | out: _Dest="8e") returned 2 [0184.585] sprintf (in: _Dest=0x3dc9b8a, _Format="%c%c" | out: _Dest="4b") returned 2 [0184.585] sprintf (in: _Dest=0x3dc9b8c, _Format="%c%c" | out: _Dest="b1") returned 2 [0184.585] sprintf (in: _Dest=0x3dc9b8e, _Format="%c%c" | out: _Dest="74") returned 2 [0184.585] sprintf (in: _Dest=0x3dc9b90, _Format="%c%c" | out: _Dest="98") returned 2 [0184.585] sprintf (in: _Dest=0x3dc9b92, _Format="%c%c" | out: _Dest="4f") returned 2 [0184.585] sprintf (in: _Dest=0x3dc9b94, _Format="%c%c" | out: _Dest="6c") returned 2 [0184.585] sprintf (in: _Dest=0x3dc9b96, _Format="%c%c" | out: _Dest="15") returned 2 [0184.585] sprintf (in: _Dest=0x3dc9b98, _Format="%c%c" | out: _Dest="ce") returned 2 [0184.585] sprintf (in: _Dest=0x3dc9b9a, _Format="%c%c" | out: _Dest="1c") returned 2 [0184.585] RtlInitAnsiString (in: DestinationString=0xc99f908, SourceString="578665558e4bb174984f6c15ce1c" | out: DestinationString="578665558e4bb174984f6c15ce1c") [0184.585] RtlAnsiStringToUnicodeString (in: DestinationString=0xc99f900, SourceString="578665558e4bb174984f6c15ce1c", AllocateDestinationString=1 | out: DestinationString="578665558e4bb174984f6c15ce1c") returned 0x0 [0184.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3d407f8 [0184.585] wcscat (in: _Dest=0x7a391f0, _Source="5786655" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\5786655") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\5786655" [0184.585] wcscat (in: _Dest=0x7a391f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\5786655.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\5786655.68814f" [0184.585] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\5786655.68814f", NtPathName=0xc99f8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\5786655.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d55a90 [0184.694] FlushFileBuffers (hFile=0x10c4) returned 1 [0184.956] CloseHandle (hObject=0x10c4) returned 1 [0186.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7c9b0 [0186.025] wcscpy (in: _Dest=0x7b7c9b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0186.025] wcscat (in: _Dest=0x7b7c9b0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" [0186.025] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814f-readme.txt")) returned 0x2020 [0186.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c9b0) returned 1 [0186.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe18) returned 1 Thread: id = 5485 os_tid = 0x22cc [0181.908] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json")) returned 0x2020 [0182.475] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0182.476] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1630 [0182.476] GetFileSizeEx (in: hFile=0x1630, lpFileSize=0xc2ffc5c | out: lpFileSize=0xc2ffc5c*=649) returned 1 [0182.476] SetFilePointerEx (in: hFile=0x1630, liDistanceToMove=0x285, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.476] ReadFile (in: hFile=0x1630, lpBuffer=0xc2ffc38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc2ffc48, lpOverlapped=0x0 | out: lpBuffer=0xc2ffc38*, lpNumberOfBytesRead=0xc2ffc48*=0x4, lpOverlapped=0x0) returned 1 [0182.479] SetFilePointerEx (in: hFile=0x1630, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0182.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0182.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0182.479] NtQuerySystemTime (in: CurrentTime=0xc2ffbd0 | out: CurrentTime=0xc2ffbd0*=132462177610524000) returned 0x0 [0182.479] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x78e6da74 [0182.479] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0xfc3444d [0182.479] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x1523fe5e [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0xcd6995f [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x140994e [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x15c20ab7 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x4cf6f87a [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x537b9b34 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x6d833ea6 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x65e27384 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0xd4ca23b [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x31254c9e [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x1d726ae0 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x51e44222 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0xb2ef592 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x172a107d [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x779a1b83 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x3ff8eec7 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x2a146ede [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x4dfaf38a [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x5efc22f3 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x2817f090 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x4af81633 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x46ba5381 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x2da9da21 [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x62ce81a [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x729a380d [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x5aba85bf [0182.480] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x4d3aa032 [0182.481] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x16c8c0ae [0182.481] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x763dcffa [0182.481] RtlRandomEx (in: Seed=0xc2ffbc8 | out: Seed=0xc2ffbc8) returned 0x21000731 [0182.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0182.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0182.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0182.491] ReadFile (in: hFile=0x1630, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x289, lpNumberOfBytesRead=0xc2ffbc4, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0xc2ffbc4*=0x289, lpOverlapped=0x0) returned 1 [0182.491] SetFilePointerEx (in: hFile=0x1630, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.491] WriteFile (in: hFile=0x1630, lpBuffer=0x7bf9fa8*, nNumberOfBytesToWrite=0x289, lpNumberOfBytesWritten=0xc2ffbc8, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesWritten=0xc2ffbc8*=0x289, lpOverlapped=0x0) returned 1 [0183.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0183.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0183.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0183.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0183.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0183.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0183.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdc20) returned 1 [0183.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37770 [0183.948] SetFilePointerEx (in: hFile=0x1630, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.948] WriteFile (in: hFile=0x1630, lpBuffer=0x7b7c438*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc2ffc50, lpOverlapped=0x0 | out: lpBuffer=0x7b7c438*, lpNumberOfBytesWritten=0xc2ffc50*=0x10c, lpOverlapped=0x0) returned 1 [0184.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0184.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0184.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5df30 [0184.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0184.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0184.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0184.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e74170 [0184.565] sprintf (in: _Dest=0x3e74170, _Format="%c%c" | out: _Dest="4a") returned 2 [0184.565] sprintf (in: _Dest=0x3e74172, _Format="%c%c" | out: _Dest="2d") returned 2 [0184.565] sprintf (in: _Dest=0x3e74174, _Format="%c%c" | out: _Dest="43") returned 2 [0184.565] sprintf (in: _Dest=0x3e74176, _Format="%c%c" | out: _Dest="21") returned 2 [0184.565] sprintf (in: _Dest=0x3e74178, _Format="%c%c" | out: _Dest="6c") returned 2 [0184.565] sprintf (in: _Dest=0x3e7417a, _Format="%c%c" | out: _Dest="9f") returned 2 [0184.565] sprintf (in: _Dest=0x3e7417c, _Format="%c%c" | out: _Dest="89") returned 2 [0184.565] sprintf (in: _Dest=0x3e7417e, _Format="%c%c" | out: _Dest="b2") returned 2 [0184.565] sprintf (in: _Dest=0x3e74180, _Format="%c%c" | out: _Dest="f9") returned 2 [0184.565] sprintf (in: _Dest=0x3e74182, _Format="%c%c" | out: _Dest="df") returned 2 [0184.565] sprintf (in: _Dest=0x3e74184, _Format="%c%c" | out: _Dest="13") returned 2 [0184.565] sprintf (in: _Dest=0x3e74186, _Format="%c%c" | out: _Dest="5f") returned 2 [0184.565] sprintf (in: _Dest=0x3e74188, _Format="%c%c" | out: _Dest="56") returned 2 [0184.565] sprintf (in: _Dest=0x3e7418a, _Format="%c%c" | out: _Dest="db") returned 2 [0184.565] sprintf (in: _Dest=0x3e7418c, _Format="%c%c" | out: _Dest="01") returned 2 [0184.565] sprintf (in: _Dest=0x3e7418e, _Format="%c%c" | out: _Dest="06") returned 2 [0184.565] sprintf (in: _Dest=0x3e74190, _Format="%c%c" | out: _Dest="6e") returned 2 [0184.565] sprintf (in: _Dest=0x3e74192, _Format="%c%c" | out: _Dest="ba") returned 2 [0184.565] sprintf (in: _Dest=0x3e74194, _Format="%c%c" | out: _Dest="35") returned 2 [0184.565] sprintf (in: _Dest=0x3e74196, _Format="%c%c" | out: _Dest="6b") returned 2 [0184.565] sprintf (in: _Dest=0x3e74198, _Format="%c%c" | out: _Dest="11") returned 2 [0184.565] sprintf (in: _Dest=0x3e7419a, _Format="%c%c" | out: _Dest="c7") returned 2 [0184.566] sprintf (in: _Dest=0x3e7419c, _Format="%c%c" | out: _Dest="7d") returned 2 [0184.566] sprintf (in: _Dest=0x3e7419e, _Format="%c%c" | out: _Dest="2e") returned 2 [0184.566] sprintf (in: _Dest=0x3e741a0, _Format="%c%c" | out: _Dest="41") returned 2 [0184.566] sprintf (in: _Dest=0x3e741a2, _Format="%c%c" | out: _Dest="45") returned 2 [0184.566] RtlInitAnsiString (in: DestinationString=0xc2ffbd8, SourceString="4a2d43216c9f89b2f9df135f56db01066eba356b11c77d2e4145" | out: DestinationString="4a2d43216c9f89b2f9df135f56db01066eba356b11c77d2e4145") [0184.566] RtlAnsiStringToUnicodeString (in: DestinationString=0xc2ffbd0, SourceString="4a2d43216c9f89b2f9df135f56db01066eba356b11c77d2e4145", AllocateDestinationString=1 | out: DestinationString="4a2d43216c9f89b2f9df135f56db01066eba356b11c77d2e4145") returned 0x0 [0184.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f1a0 [0184.566] wcscat (in: _Dest=0x7b808e8, _Source="4a2d43216c9f8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\4a2d43216c9f8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\4a2d43216c9f8" [0184.566] wcscat (in: _Dest=0x7b808e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\4a2d43216c9f8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\4a2d43216c9f8.68814f" [0184.566] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\4a2d43216c9f8.68814f", NtPathName=0xc2ffbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\4a2d43216c9f8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3eca420 [0184.711] FlushFileBuffers (hFile=0x1630) returned 1 [0184.957] CloseHandle (hObject=0x1630) returned 1 [0186.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7cbe0 [0186.041] wcscpy (in: _Dest=0x7b7cbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\" [0186.041] wcscat (in: _Dest=0x7b7cbe0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" [0186.041] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\68814f-readme.txt")) returned 0x2020 [0186.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cbe0) returned 1 [0186.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 Thread: id = 5486 os_tid = 0x2770 [0181.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bc340 [0181.909] wcscpy (in: _Dest=0x30bc340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX" [0181.909] wcscat (in: _Dest=0x30bc340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\" [0181.909] wcscat (in: _Dest=0x30bc340, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*" [0181.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0181.909] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.0.0.6_0\\__MACOSX\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0182.493] wcscmp (_String1=".", _String2=".") returned 0 [0182.493] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.494] wcscmp (_String1="..", _String2=".") returned 1 [0182.494] wcscmp (_String1="..", _String2="..") returned 0 [0182.494] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3cf00a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3cf00a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0182.494] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0182.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0182.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0182.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbf20) returned 1 Thread: id = 5487 os_tid = 0x2774 [0181.910] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png")) returned 0x2020 [0183.505] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", dwFileAttributes=0x20) returned 1 [0186.444] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1920 [0186.444] GetFileSizeEx (in: hFile=0x1920, lpFileSize=0xcebfc94 | out: lpFileSize=0xcebfc94*=6159) returned 1 [0186.444] SetFilePointerEx (in: hFile=0x1920, liDistanceToMove=0x180b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.444] ReadFile (in: hFile=0x1920, lpBuffer=0xcebfc70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcebfc80, lpOverlapped=0x0 | out: lpBuffer=0xcebfc70*, lpNumberOfBytesRead=0xcebfc80*=0x4, lpOverlapped=0x0) returned 1 [0186.447] SetFilePointerEx (in: hFile=0x1920, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0186.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0186.447] NtQuerySystemTime (in: CurrentTime=0xcebfc08 | out: CurrentTime=0xcebfc08*=132462177650304000) returned 0x0 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0xf81613a [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x45a2dac5 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x748e602d [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x4dfd3c89 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x23636ff2 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x460c5c92 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x6e73f2de [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x1490c387 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x7ebf336 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x7efebd55 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x54e29e9 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x3661d010 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x431be17 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x3aa39d52 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x2b90e642 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x17dd4181 [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x47380bcd [0186.447] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x56d45065 [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x59ef7c1 [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x1f384a4f [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x61f66915 [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x17cf56b1 [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x7e0f2b4f [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x32b96410 [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x72bfb6fd [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x4abf660b [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x3e3cef78 [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x70902284 [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x29ab4849 [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x73838fa5 [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x6e8521e9 [0186.448] RtlRandomEx (in: Seed=0xcebfc00 | out: Seed=0xcebfc00) returned 0x5283ec34 [0186.459] ReadFile (in: hFile=0x1920, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0x180f, lpNumberOfBytesRead=0xcebfbfc, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0xcebfbfc*=0x180f, lpOverlapped=0x0) returned 1 [0186.462] SetFilePointerEx (in: hFile=0x1920, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.462] WriteFile (in: hFile=0x1920, lpBuffer=0x7c143e0*, nNumberOfBytesToWrite=0x180f, lpNumberOfBytesWritten=0xcebfc00, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesWritten=0xcebfc00*=0x180f, lpOverlapped=0x0) returned 1 [0187.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0187.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0187.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0187.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0187.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0187.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0187.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0187.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec45f0 [0187.691] SetFilePointerEx (in: hFile=0x1920, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.691] WriteFile (in: hFile=0x1920, lpBuffer=0x7cae128*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xcebfc88, lpOverlapped=0x0 | out: lpBuffer=0x7cae128*, lpNumberOfBytesWritten=0xcebfc88*=0x100, lpOverlapped=0x0) returned 1 [0187.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae128) returned 1 [0187.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0187.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0187.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0187.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0187.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0187.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6f0) returned 1 [0187.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd28) returned 1 [0187.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7cae128 [0187.754] wcscpy (in: _Dest=0x7cae128, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" [0187.754] wcscat (in: _Dest=0x7cae128, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.68814f" [0187.754] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.68814f", NtPathName=0xcebfc00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7ca9e30 [0187.832] FlushFileBuffers (hFile=0x1920) returned 1 [0187.842] CloseHandle (hObject=0x1920) returned 1 [0187.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cad600 [0187.849] wcscpy (in: _Dest=0x7cad600, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0187.849] wcscat (in: _Dest=0x7cad600, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\68814F-Readme.txt" [0187.849] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\68814f-readme.txt")) returned 0x2020 [0187.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad600) returned 1 [0187.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de90b8) returned 1 Thread: id = 5488 os_tid = 0x22d8 [0181.913] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json")) returned 0x2020 [0183.524] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0186.606] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1550 [0186.607] GetFileSizeEx (in: hFile=0x1550, lpFileSize=0xc18fa6c | out: lpFileSize=0xc18fa6c*=784) returned 1 [0186.607] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x30c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.607] ReadFile (in: hFile=0x1550, lpBuffer=0xc18fa48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc18fa58, lpOverlapped=0x0 | out: lpBuffer=0xc18fa48*, lpNumberOfBytesRead=0xc18fa58*=0x4, lpOverlapped=0x0) returned 1 [0186.609] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0186.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0186.609] NtQuerySystemTime (in: CurrentTime=0xc18f9e0 | out: CurrentTime=0xc18f9e0*=132462177651864000) returned 0x0 [0186.609] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x749c676a [0186.609] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x37fd2586 [0186.609] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x970d1cc [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x72c98a43 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x3524a94a [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x4c8bc01 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x6dd446fd [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x343766f5 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x1385ee90 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x740e70d7 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x4490c3f9 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x7fe61f76 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x5a9db11d [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x471301ea [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x6c5f1333 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x76677326 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x3434f3e7 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x27d96bc6 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x65a1e7ec [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x1705016c [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x20e98bad [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x50eeaa74 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x32dae15 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x2fc79cc [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x61a5e628 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x35efbdb1 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x4c7ae337 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x15f2e74b [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x54cf10c6 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x65a1e7ec [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x15f74f93 [0186.610] RtlRandomEx (in: Seed=0xc18f9d8 | out: Seed=0xc18f9d8) returned 0x7a544a5 [0186.619] ReadFile (in: hFile=0x1550, lpBuffer=0x7d88818, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0xc18f9d4, lpOverlapped=0x0 | out: lpBuffer=0x7d88818*, lpNumberOfBytesRead=0xc18f9d4*=0x310, lpOverlapped=0x0) returned 1 [0186.619] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.619] WriteFile (in: hFile=0x1550, lpBuffer=0x7d8c420*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0xc18f9d8, lpOverlapped=0x0 | out: lpBuffer=0x7d8c420*, lpNumberOfBytesWritten=0xc18f9d8*=0x310, lpOverlapped=0x0) returned 1 [0187.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0187.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0187.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0187.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d8c420) returned 1 [0187.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d88818) returned 1 [0187.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0187.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85500) returned 1 [0187.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37890 [0187.044] SetFilePointerEx (in: hFile=0x1550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.044] WriteFile (in: hFile=0x1550, lpBuffer=0x7b7c9b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc18fa60, lpOverlapped=0x0 | out: lpBuffer=0x7b7c9b0*, lpNumberOfBytesWritten=0xc18fa60*=0x10c, lpOverlapped=0x0) returned 1 [0187.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25038 [0187.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0187.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0187.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0187.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3498 [0187.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0187.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0187.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0187.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25038) returned 1 [0187.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e740f0 [0187.717] sprintf (in: _Dest=0x3e740f0, _Format="%c%c" | out: _Dest="fc") returned 2 [0187.717] sprintf (in: _Dest=0x3e740f2, _Format="%c%c" | out: _Dest="28") returned 2 [0187.717] sprintf (in: _Dest=0x3e740f4, _Format="%c%c" | out: _Dest="07") returned 2 [0187.717] sprintf (in: _Dest=0x3e740f6, _Format="%c%c" | out: _Dest="6f") returned 2 [0187.717] sprintf (in: _Dest=0x3e740f8, _Format="%c%c" | out: _Dest="10") returned 2 [0187.717] sprintf (in: _Dest=0x3e740fa, _Format="%c%c" | out: _Dest="db") returned 2 [0187.717] sprintf (in: _Dest=0x3e740fc, _Format="%c%c" | out: _Dest="35") returned 2 [0187.717] sprintf (in: _Dest=0x3e740fe, _Format="%c%c" | out: _Dest="05") returned 2 [0187.717] sprintf (in: _Dest=0x3e74100, _Format="%c%c" | out: _Dest="35") returned 2 [0187.717] sprintf (in: _Dest=0x3e74102, _Format="%c%c" | out: _Dest="c0") returned 2 [0187.717] sprintf (in: _Dest=0x3e74104, _Format="%c%c" | out: _Dest="32") returned 2 [0187.717] sprintf (in: _Dest=0x3e74106, _Format="%c%c" | out: _Dest="02") returned 2 [0187.718] sprintf (in: _Dest=0x3e74108, _Format="%c%c" | out: _Dest="86") returned 2 [0187.718] sprintf (in: _Dest=0x3e7410a, _Format="%c%c" | out: _Dest="12") returned 2 [0187.718] sprintf (in: _Dest=0x3e7410c, _Format="%c%c" | out: _Dest="ce") returned 2 [0187.718] sprintf (in: _Dest=0x3e7410e, _Format="%c%c" | out: _Dest="22") returned 2 [0187.718] sprintf (in: _Dest=0x3e74110, _Format="%c%c" | out: _Dest="7e") returned 2 [0187.718] sprintf (in: _Dest=0x3e74112, _Format="%c%c" | out: _Dest="a0") returned 2 [0187.718] sprintf (in: _Dest=0x3e74114, _Format="%c%c" | out: _Dest="9a") returned 2 [0187.718] sprintf (in: _Dest=0x3e74116, _Format="%c%c" | out: _Dest="4a") returned 2 [0187.718] sprintf (in: _Dest=0x3e74118, _Format="%c%c" | out: _Dest="51") returned 2 [0187.718] sprintf (in: _Dest=0x3e7411a, _Format="%c%c" | out: _Dest="13") returned 2 [0187.718] sprintf (in: _Dest=0x3e7411c, _Format="%c%c" | out: _Dest="a4") returned 2 [0187.718] sprintf (in: _Dest=0x3e7411e, _Format="%c%c" | out: _Dest="3f") returned 2 [0187.718] sprintf (in: _Dest=0x3e74120, _Format="%c%c" | out: _Dest="05") returned 2 [0187.718] sprintf (in: _Dest=0x3e74122, _Format="%c%c" | out: _Dest="11") returned 2 [0187.718] RtlInitAnsiString (in: DestinationString=0xc18f9e8, SourceString="fc28076f10db350535c032028612ce227ea09a4a5113a43f0511" | out: DestinationString="fc28076f10db350535c032028612ce227ea09a4a5113a43f0511") [0187.718] RtlAnsiStringToUnicodeString (in: DestinationString=0xc18f9e0, SourceString="fc28076f10db350535c032028612ce227ea09a4a5113a43f0511", AllocateDestinationString=1 | out: DestinationString="fc28076f10db350535c032028612ce227ea09a4a5113a43f0511") returned 0x0 [0187.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e9b8 [0187.718] wcscat (in: _Dest=0x7b7c9b0, _Source="fc28076f10db3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\fc28076f10db3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\fc28076f10db3" [0187.718] wcscat (in: _Dest=0x7b7c9b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\fc28076f10db3.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\fc28076f10db3.68814f" [0187.719] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\fc28076f10db3.68814f", NtPathName=0xc18f9d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\fc28076f10db3.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3eca2e8 [0187.823] FlushFileBuffers (hFile=0x1550) returned 1 [0187.831] CloseHandle (hObject=0x1550) returned 1 [0187.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cac368 [0187.844] wcscpy (in: _Dest=0x7cac368, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\" [0187.844] wcscat (in: _Dest=0x7cac368, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\68814F-Readme.txt" [0187.844] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\68814f-readme.txt")) returned 0xffffffff [0187.844] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1920 [0187.860] WriteFile (in: hFile=0x1920, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc18f9f4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc18f9f4*=0x8b9, lpOverlapped=0x0) returned 1 [0187.862] CloseHandle (hObject=0x1920) returned 1 [0187.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac368) returned 1 [0187.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc028) returned 1 Thread: id = 5489 os_tid = 0x2778 [0181.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3de79b8 [0181.914] wcscpy (in: _Dest=0x3de79b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0181.914] wcscat (in: _Dest=0x3de79b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0181.914] wcscat (in: _Dest=0x3de79b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*" [0181.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336a90 [0181.914] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6878150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6911e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6911e40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf510 [0183.840] wcscmp (_String1=".", _String2=".") returned 0 [0183.840] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6878150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6911e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6911e40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.840] wcscmp (_String1="..", _String2=".") returned 1 [0183.840] wcscmp (_String1="..", _String2="..") returned 0 [0183.840] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6905af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e1690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0183.840] wcscmp (_String1="ar", _String2=".") returned 1 [0183.840] wcscmp (_String1="ar", _String2="..") returned 1 [0183.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7bad8 [0183.840] wcscpy (in: _Dest=0x7b7bad8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0183.840] wcscat (in: _Dest=0x7b7bad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0183.840] wcscat (in: _Dest=0x7b7bad8, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0195.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7bad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0195.340] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6900cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69da160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69da160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0195.340] wcscmp (_String1="bg", _String2=".") returned 1 [0195.340] wcscmp (_String1="bg", _String2="..") returned 1 [0195.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bd0a8 [0195.341] wcscpy (in: _Dest=0x30bd0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.341] wcscat (in: _Dest=0x30bd0a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.341] wcscat (in: _Dest=0x30bd0a8, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0195.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bd0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0195.342] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a1960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe694c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0195.342] wcscmp (_String1="ca", _String2=".") returned 1 [0195.342] wcscmp (_String1="ca", _String2="..") returned 1 [0195.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bb5d8 [0195.342] wcscpy (in: _Dest=0x30bb5d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.342] wcscat (in: _Dest=0x30bb5d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.342] wcscat (in: _Dest=0x30bb5d8, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0195.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bb5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0195.343] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68844a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6922fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0195.343] wcscmp (_String1="cs", _String2=".") returned 1 [0195.343] wcscmp (_String1="cs", _String2="..") returned 1 [0195.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc970 [0195.344] wcscpy (in: _Dest=0x30bc970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.344] wcscat (in: _Dest=0x30bc970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.344] wcscat (in: _Dest=0x30bc970, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0195.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0195.345] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f97a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d0520, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0195.345] wcscmp (_String1="da", _String2=".") returned 1 [0195.345] wcscmp (_String1="da", _String2="..") returned 1 [0195.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bb8f0 [0195.345] wcscpy (in: _Dest=0x30bb8f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.345] wcscat (in: _Dest=0x30bb8f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.345] wcscat (in: _Dest=0x30bb8f0, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0195.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bb8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0195.346] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6897d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6940470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6940470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0195.346] wcscmp (_String1="de", _String2=".") returned 1 [0195.346] wcscmp (_String1="de", _String2="..") returned 1 [0195.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bbb00 [0195.346] wcscpy (in: _Dest=0x30bbb00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.346] wcscat (in: _Dest=0x30bbb00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.346] wcscat (in: _Dest=0x30bbb00, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0195.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bbb00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94 [0195.348] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c1530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697adf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe697adf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0195.348] wcscmp (_String1="el", _String2=".") returned 1 [0195.348] wcscmp (_String1="el", _String2="..") returned 1 [0195.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bb7e8 [0195.348] wcscpy (in: _Dest=0x30bb7e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.348] wcscat (in: _Dest=0x30bb7e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.348] wcscat (in: _Dest=0x30bb7e8, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0195.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bb7e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0 [0195.349] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f4980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c8ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0195.349] wcscmp (_String1="en", _String2=".") returned 1 [0195.349] wcscmp (_String1="en", _String2="..") returned 1 [0195.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bcd90 [0195.349] wcscpy (in: _Dest=0x30bcd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.349] wcscat (in: _Dest=0x30bcd90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.350] wcscat (in: _Dest=0x30bcd90, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0195.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bcd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98 [0195.351] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe688b9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692f300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0195.351] wcscmp (_String1="es", _String2=".") returned 1 [0195.351] wcscmp (_String1="es", _String2="..") returned 1 [0195.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bcb80 [0195.351] wcscpy (in: _Dest=0x30bcb80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.351] wcscat (in: _Dest=0x30bcb80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.351] wcscat (in: _Dest=0x30bcb80, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0195.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bcb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84 [0195.353] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b78f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69711b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0195.353] wcscmp (_String1="fi", _String2=".") returned 1 [0195.353] wcscmp (_String1="fi", _String2="..") returned 1 [0195.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bd1b0 [0195.353] wcscpy (in: _Dest=0x30bd1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.353] wcscat (in: _Dest=0x30bd1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.353] wcscat (in: _Dest=0x30bd1b0, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0195.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bd1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c [0195.354] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68dc2e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a6d10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0195.354] wcscmp (_String1="fil", _String2=".") returned 1 [0195.354] wcscmp (_String1="fil", _String2="..") returned 1 [0195.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bbf20 [0195.354] wcscpy (in: _Dest=0x30bbf20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.354] wcscat (in: _Dest=0x30bbf20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.354] wcscat (in: _Dest=0x30bbf20, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0195.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bbf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440 [0195.355] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a6780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69515e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0195.356] wcscmp (_String1="fr", _String2=".") returned 1 [0195.356] wcscmp (_String1="fr", _String2="..") returned 1 [0195.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bcfa0 [0195.356] wcscpy (in: _Dest=0x30bcfa0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.356] wcscat (in: _Dest=0x30bcfa0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.356] wcscat (in: _Dest=0x30bcfa0, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0195.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bcfa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8 [0195.357] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6881d90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe691e190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0195.357] wcscmp (_String1="hi", _String2=".") returned 1 [0195.357] wcscmp (_String1="hi", _String2="..") returned 1 [0195.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bce98 [0195.357] wcscpy (in: _Dest=0x30bce98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.357] wcscat (in: _Dest=0x30bce98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.357] wcscat (in: _Dest=0x30bce98, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0195.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bce98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1444 [0195.358] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68bc710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6975fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0195.358] wcscmp (_String1="hr", _String2=".") returned 1 [0195.358] wcscmp (_String1="hr", _String2="..") returned 1 [0195.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bd2b8 [0195.359] wcscpy (in: _Dest=0x30bd2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.359] wcscat (in: _Dest=0x30bd2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.359] wcscat (in: _Dest=0x30bd2b8, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0195.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bd2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448 [0195.360] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68892c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692a4e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0195.360] wcscmp (_String1="hu", _String2=".") returned 1 [0195.360] wcscmp (_String1="hu", _String2="..") returned 1 [0195.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc760 [0195.360] wcscpy (in: _Dest=0x30bc760, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.360] wcscat (in: _Dest=0x30bc760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.360] wcscat (in: _Dest=0x30bc760, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0195.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c [0195.361] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690a910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e3da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0195.361] wcscmp (_String1="id", _String2=".") returned 1 [0195.361] wcscmp (_String1="id", _String2="..") returned 1 [0195.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bcc88 [0195.361] wcscpy (in: _Dest=0x30bcc88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.361] wcscat (in: _Dest=0x30bcc88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.361] wcscat (in: _Dest=0x30bcc88, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0195.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bcc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318 [0195.363] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6911e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f00f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0195.363] wcscmp (_String1="it", _String2=".") returned 1 [0195.363] wcscmp (_String1="it", _String2="..") returned 1 [0195.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc868 [0195.363] wcscpy (in: _Dest=0x30bc868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.363] wcscat (in: _Dest=0x30bc868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.363] wcscat (in: _Dest=0x30bc868, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" [0195.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314 [0195.365] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68fe5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d5340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0195.365] wcscmp (_String1="ja", _String2=".") returned 1 [0195.365] wcscmp (_String1="ja", _String2="..") returned 1 [0195.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc130 [0195.365] wcscpy (in: _Dest=0x30bc130, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.365] wcscat (in: _Dest=0x30bc130, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.365] wcscat (in: _Dest=0x30bc130, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" [0195.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560 [0195.366] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c8a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6989850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0195.366] wcscmp (_String1="ko", _String2=".") returned 1 [0195.366] wcscmp (_String1="ko", _String2="..") returned 1 [0195.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bbd10 [0195.367] wcscpy (in: _Dest=0x30bbd10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.367] wcscat (in: _Dest=0x30bbd10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.367] wcscat (in: _Dest=0x30bbd10, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" [0195.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bbd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c [0195.368] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d74c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a1ef0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0195.369] wcscmp (_String1="lt", _String2=".") returned 1 [0195.369] wcscmp (_String1="lt", _String2="..") returned 1 [0195.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bbc08 [0195.369] wcscpy (in: _Dest=0x30bbc08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.369] wcscat (in: _Dest=0x30bbc08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.369] wcscat (in: _Dest=0x30bbc08, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" [0195.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bbc08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748 [0195.370] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cff90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6995ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0195.370] wcscmp (_String1="lv", _String2=".") returned 1 [0195.370] wcscmp (_String1="lv", _String2="..") returned 1 [0195.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bb9f8 [0195.371] wcscpy (in: _Dest=0x30bb9f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.371] wcscat (in: _Dest=0x30bb9f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.371] wcscat (in: _Dest=0x30bb9f8, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" [0195.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bb9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654 [0195.372] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6895610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe693b650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0195.372] wcscmp (_String1="nl", _String2=".") returned 1 [0195.372] wcscmp (_String1="nl", _String2="..") returned 1 [0195.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bb6e0 [0195.372] wcscpy (in: _Dest=0x30bb6e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.372] wcscat (in: _Dest=0x30bb6e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.372] wcscat (in: _Dest=0x30bb6e0, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" [0195.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bb6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0195.373] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cb170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe698e670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe698e670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0195.373] wcscmp (_String1="no", _String2=".") returned 1 [0195.374] wcscmp (_String1="no", _String2="..") returned 1 [0195.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc028 [0195.374] wcscpy (in: _Dest=0x30bc028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.374] wcscat (in: _Dest=0x30bc028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.374] wcscat (in: _Dest=0x30bc028, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" [0195.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0195.375] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d4db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe699a9c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0195.375] wcscmp (_String1="pl", _String2=".") returned 1 [0195.375] wcscmp (_String1="pl", _String2="..") returned 1 [0195.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bb4d0 [0195.375] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.375] wcscat (in: _Dest=0x30bb4d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.375] wcscat (in: _Dest=0x30bb4d0, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" [0195.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bb4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0195.376] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e8630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b7e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0195.376] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0195.376] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0195.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bc658 [0195.376] wcscpy (in: _Dest=0x30bc658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.376] wcscat (in: _Dest=0x30bc658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.377] wcscat (in: _Dest=0x30bc658, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" [0195.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0195.377] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6956400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6956400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0195.377] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0195.378] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0195.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bc550 [0195.378] wcscpy (in: _Dest=0x30bc550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.378] wcscat (in: _Dest=0x30bc550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.378] wcscat (in: _Dest=0x30bc550, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" [0195.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0195.828] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe689cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69479a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0195.828] wcscmp (_String1="ro", _String2=".") returned 1 [0195.828] wcscmp (_String1="ro", _String2="..") returned 1 [0195.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caa758 [0195.829] wcscpy (in: _Dest=0x7caa758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0195.829] wcscat (in: _Dest=0x7caa758, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0195.829] wcscat (in: _Dest=0x7caa758, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0201.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22cc [0201.614] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b51e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6969c80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0201.614] wcscmp (_String1="ru", _String2=".") returned 1 [0201.614] wcscmp (_String1="ru", _String2="..") returned 1 [0201.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6130 [0201.614] wcscpy (in: _Dest=0x7ad6130, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.614] wcscat (in: _Dest=0x7ad6130, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.614] wcscat (in: _Dest=0x7ad6130, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0201.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0201.615] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b03c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6964e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0201.615] wcscmp (_String1="se", _String2=".") returned 1 [0201.615] wcscmp (_String1="se", _String2="..") returned 1 [0201.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad50b0 [0201.616] wcscpy (in: _Dest=0x7ad50b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.616] wcscat (in: _Dest=0x7ad50b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.616] wcscat (in: _Dest=0x7ad50b0, _Source="se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0201.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0201.617] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c3c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6982320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0201.617] wcscmp (_String1="sk", _String2=".") returned 1 [0201.617] wcscmp (_String1="sk", _String2="..") returned 1 [0201.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad56e0 [0201.617] wcscpy (in: _Dest=0x7ad56e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.617] wcscat (in: _Dest=0x7ad56e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.617] wcscat (in: _Dest=0x7ad56e0, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0201.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad56e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0201.619] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68907f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6936830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0201.619] wcscmp (_String1="sl", _String2=".") returned 1 [0201.619] wcscmp (_String1="sl", _String2="..") returned 1 [0201.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad55d8 [0201.619] wcscpy (in: _Dest=0x7ad55d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.619] wcscat (in: _Dest=0x7ad55d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.619] wcscat (in: _Dest=0x7ad55d8, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0201.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad55d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd4 [0201.620] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68efb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c41d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0201.620] wcscmp (_String1="sr", _String2=".") returned 1 [0201.620] wcscmp (_String1="sr", _String2="..") returned 1 [0201.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad53c8 [0201.620] wcscpy (in: _Dest=0x7ad53c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.620] wcscat (in: _Dest=0x7ad53c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.620] wcscat (in: _Dest=0x7ad53c8, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0201.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad53c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1624 [0201.621] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690d020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e8bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e8bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0201.621] wcscmp (_String1="th", _String2=".") returned 1 [0201.621] wcscmp (_String1="th", _String2="..") returned 1 [0201.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6e98 [0201.621] wcscpy (in: _Dest=0x7ad6e98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.621] wcscat (in: _Dest=0x7ad6e98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.621] wcscat (in: _Dest=0x7ad6e98, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0201.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0201.623] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe687a860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6914550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0201.623] wcscmp (_String1="tr", _String2=".") returned 1 [0201.623] wcscmp (_String1="tr", _String2="..") returned 1 [0201.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad52c0 [0201.623] wcscpy (in: _Dest=0x7ad52c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.623] wcscat (in: _Dest=0x7ad52c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.623] wcscat (in: _Dest=0x7ad52c0, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0201.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad52c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0201.624] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe695d930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0201.624] wcscmp (_String1="uk", _String2=".") returned 1 [0201.624] wcscmp (_String1="uk", _String2="..") returned 1 [0201.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6d90 [0201.624] wcscpy (in: _Dest=0x7ad6d90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.624] wcscat (in: _Dest=0x7ad6d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.624] wcscat (in: _Dest=0x7ad6d90, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0201.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0201.625] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e3810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b3060, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0201.625] wcscmp (_String1="vi", _String2=".") returned 1 [0201.625] wcscmp (_String1="vi", _String2="..") returned 1 [0201.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6c88 [0201.625] wcscpy (in: _Dest=0x7ad6c88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.625] wcscat (in: _Dest=0x7ad6c88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.625] wcscat (in: _Dest=0x7ad6c88, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0201.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0201.626] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e1100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69abb30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0201.626] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0201.626] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0201.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad54d0 [0201.627] wcscpy (in: _Dest=0x7ad54d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.627] wcscat (in: _Dest=0x7ad54d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.627] wcscat (in: _Dest=0x7ad54d0, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0201.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad54d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0201.628] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0201.628] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0201.628] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0201.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6b80 [0201.628] wcscpy (in: _Dest=0x7ad6b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" [0201.628] wcscat (in: _Dest=0x7ad6b80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\" [0201.628] wcscat (in: _Dest=0x7ad6b80, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0201.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc4 [0201.629] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x336a90 | out: lpFindFileData=0x336a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0203.164] FindClose (in: hFindFile=0x3dcf510 | out: hFindFile=0x3dcf510) returned 1 [0203.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336a90) returned 1 [0203.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de79b8) returned 1 [0203.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de9db8) returned 1 Thread: id = 5490 os_tid = 0x277c [0181.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc448 [0181.914] wcscpy (in: _Dest=0x30bc448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0181.914] wcscat (in: _Dest=0x30bc448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" [0181.914] wcscat (in: _Dest=0x30bc448, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*" [0181.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0181.914] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf510 [0183.524] wcscmp (_String1=".", _String2=".") returned 0 [0183.524] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe69f7620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f9d30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.524] wcscmp (_String1="..", _String2=".") returned 1 [0183.524] wcscmp (_String1="..", _String2="..") returned 0 [0183.524] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f9d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x35d07400, ftLastWriteTime.dwHighDateTime=0x1d068b4, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0183.525] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0183.525] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0183.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9928 [0183.525] wcscpy (in: _Dest=0x3ec9928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" [0183.525] wcscat (in: _Dest=0x3ec9928, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" [0183.525] wcscat (in: _Dest=0x3ec9928, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" [0183.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec9928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718 [0183.790] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f9d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f9d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x35d07400, ftLastWriteTime.dwHighDateTime=0x1d068b4, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0183.790] FindClose (in: hFindFile=0x3dcf510 | out: hFindFile=0x3dcf510) returned 1 [0183.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0183.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc448) returned 1 [0183.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de9eb8) returned 1 Thread: id = 5491 os_tid = 0x18f0 [0181.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg")) returned 0x20 [0181.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0181.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.917] GetLastError () returned 0x5 [0181.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0181.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 5492 os_tid = 0x18fc [0181.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp")) returned 0x20 [0181.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0181.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.919] GetLastError () returned 0x5 [0181.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0181.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0708) returned 1 Thread: id = 5493 os_tid = 0x278c [0181.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg")) returned 0x20 [0181.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg", dwFileAttributes=0x20) returned 0 [0181.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0181.920] GetLastError () returned 0x5 [0181.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg", dwFileAttributes=0x20) returned 0 [0181.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db08e8) returned 1 Thread: id = 5494 os_tid = 0x2798 [0181.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg")) returned 0x20 [0183.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0183.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.740] GetLastError () returned 0x5 [0183.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg", dwFileAttributes=0x20) returned 0 [0183.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4f28) returned 1 Thread: id = 5495 os_tid = 0x279c [0181.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp")) returned 0x20 [0183.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0183.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.742] GetLastError () returned 0x5 [0183.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp", dwFileAttributes=0x20) returned 0 [0183.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff88) returned 1 Thread: id = 5496 os_tid = 0x1914 [0181.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg")) returned 0x20 [0183.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg", dwFileAttributes=0x20) returned 0 [0183.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.531] GetLastError () returned 0x5 [0183.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg", dwFileAttributes=0x20) returned 0 [0183.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5010) returned 1 Thread: id = 5497 os_tid = 0x2330 [0181.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp")) returned 0x20 [0183.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0183.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.530] GetLastError () returned 0x5 [0183.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp", dwFileAttributes=0x20) returned 0 [0183.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafda8) returned 1 Thread: id = 5498 os_tid = 0x193c [0181.924] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png")) returned 0x2020 [0181.924] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png", dwFileAttributes=0x20) returned 1 [0184.747] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1890 [0184.747] GetFileSizeEx (in: hFile=0x1890, lpFileSize=0xd1efd94 | out: lpFileSize=0xd1efd94*=5900) returned 1 [0184.747] SetFilePointerEx (in: hFile=0x1890, liDistanceToMove=0x1708, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.747] ReadFile (in: hFile=0x1890, lpBuffer=0xd1efd70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd1efd80, lpOverlapped=0x0 | out: lpBuffer=0xd1efd70*, lpNumberOfBytesRead=0xd1efd80*=0x4, lpOverlapped=0x0) returned 1 [0184.750] SetFilePointerEx (in: hFile=0x1890, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0184.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32b8 [0184.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0184.750] NtQuerySystemTime (in: CurrentTime=0xd1efd08 | out: CurrentTime=0xd1efd08*=132462177633300000) returned 0x0 [0184.750] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x1264fb44 [0184.750] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x2457970d [0184.750] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x4f19a527 [0184.750] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x2eb232c4 [0184.750] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x703262fa [0184.750] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x451f1879 [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x116ea636 [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x7962987f [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x636885aa [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x252d5eac [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x58835d4b [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x64217c8 [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0xee5035f [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x1892a23f [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0xe6af30e [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x37eba16b [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x55aac834 [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x1ab2433c [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x531e5ce0 [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x6d3829fa [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x6993ac67 [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x6288b06e [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x76deb07b [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x7b8dd961 [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x257aef12 [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x10eee13e [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x55990558 [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x4c68a2ca [0184.751] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x3406eb7c [0184.752] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x5f55ec9d [0184.752] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x57e50a8 [0184.752] RtlRandomEx (in: Seed=0xd1efd00 | out: Seed=0xd1efd00) returned 0x2851b324 [0184.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0184.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1fb70 [0184.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1bf68 [0184.764] ReadFile (in: hFile=0x1890, lpBuffer=0x7c1fb70, nNumberOfBytesToRead=0x170c, lpNumberOfBytesRead=0xd1efcfc, lpOverlapped=0x0 | out: lpBuffer=0x7c1fb70*, lpNumberOfBytesRead=0xd1efcfc*=0x170c, lpOverlapped=0x0) returned 1 [0184.765] SetFilePointerEx (in: hFile=0x1890, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.765] WriteFile (in: hFile=0x1890, lpBuffer=0x7c1bf68*, nNumberOfBytesToWrite=0x170c, lpNumberOfBytesWritten=0xd1efd00, lpOverlapped=0x0 | out: lpBuffer=0x7c1bf68*, lpNumberOfBytesWritten=0xd1efd00*=0x170c, lpOverlapped=0x0) returned 1 [0184.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0184.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0184.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0184.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1bf68) returned 1 [0184.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1fb70) returned 1 [0184.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0184.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25d70) returned 1 [0184.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec2bd8 [0184.768] SetFilePointerEx (in: hFile=0x1890, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.768] WriteFile (in: hFile=0x1890, lpBuffer=0x2f93d0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xd1efd88, lpOverlapped=0x0 | out: lpBuffer=0x2f93d0*, lpNumberOfBytesWritten=0xd1efd88*=0x100, lpOverlapped=0x0) returned 1 [0184.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f93d0) returned 1 [0184.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0184.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0184.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0184.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0184.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32b8) returned 1 [0184.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6788) returned 1 [0184.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34c0) returned 1 [0184.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x2f93d0 [0184.770] wcscpy (in: _Dest=0x2f93d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png" [0184.770] wcscat (in: _Dest=0x2f93d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.68814f" [0184.770] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.68814f", NtPathName=0xd1efd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55bb8 [0184.773] FlushFileBuffers (hFile=0x1890) returned 1 [0184.957] CloseHandle (hObject=0x1890) returned 1 [0186.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7ce10 [0186.056] wcscpy (in: _Dest=0x7b7ce10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0186.056] wcscat (in: _Dest=0x7b7ce10, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\68814F-Readme.txt" [0186.056] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\68814f-readme.txt")) returned 0x2020 [0186.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ce10) returned 1 [0186.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 Thread: id = 5499 os_tid = 0x1ae4 [0181.925] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json")) returned 0x2020 [0183.378] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0183.378] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18d4 [0183.379] GetFileSizeEx (in: hFile=0x18d4, lpFileSize=0xd18fc2c | out: lpFileSize=0xd18fc2c*=755) returned 1 [0183.379] SetFilePointerEx (in: hFile=0x18d4, liDistanceToMove=0x2ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.379] ReadFile (in: hFile=0x18d4, lpBuffer=0xd18fc08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd18fc18, lpOverlapped=0x0 | out: lpBuffer=0xd18fc08*, lpNumberOfBytesRead=0xd18fc18*=0x4, lpOverlapped=0x0) returned 1 [0183.382] SetFilePointerEx (in: hFile=0x18d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e340 [0183.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0183.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0183.382] NtQuerySystemTime (in: CurrentTime=0xd18fba0 | out: CurrentTime=0xd18fba0*=132462177619572000) returned 0x0 [0183.382] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x5503ca43 [0183.382] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x645dd964 [0183.382] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x2082aa63 [0183.382] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x2d0d8c74 [0183.382] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x72df3c94 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x475baccc [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x398d4c16 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x1fb7294b [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x3662cd84 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x495440ac [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x3281d1f4 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x7ceaa7e3 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x2080ac05 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x30220bb [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0xcb0e05b [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x420d4c4 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x18fc8084 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x126397fa [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x6e555fa0 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x766bdf2 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x2c7c5b39 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0xaffc553 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x22d9baa2 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x5e086a56 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x75b8bcbd [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x5f4536c1 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x44741c7b [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x62889cb1 [0183.383] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x5d5b307a [0183.384] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x5f4612ea [0183.384] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x46c37071 [0183.384] RtlRandomEx (in: Seed=0xd18fb98 | out: Seed=0xd18fb98) returned 0x72910aa [0183.397] ReadFile (in: hFile=0x18d4, lpBuffer=0x7c1fb70, nNumberOfBytesToRead=0x2f3, lpNumberOfBytesRead=0xd18fb94, lpOverlapped=0x0 | out: lpBuffer=0x7c1fb70*, lpNumberOfBytesRead=0xd18fb94*=0x2f3, lpOverlapped=0x0) returned 1 [0183.397] SetFilePointerEx (in: hFile=0x18d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.397] WriteFile (in: hFile=0x18d4, lpBuffer=0x7c23778*, nNumberOfBytesToWrite=0x2f3, lpNumberOfBytesWritten=0xd18fb98, lpOverlapped=0x0 | out: lpBuffer=0x7c23778*, lpNumberOfBytesWritten=0xd18fb98*=0x2f3, lpOverlapped=0x0) returned 1 [0183.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0183.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0183.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0183.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c23778) returned 1 [0183.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1fb70) returned 1 [0183.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0183.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08070) returned 1 [0183.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0183.940] SetFilePointerEx (in: hFile=0x18d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.940] WriteFile (in: hFile=0x18d4, lpBuffer=0x7b7c320*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd18fc20, lpOverlapped=0x0 | out: lpBuffer=0x7b7c320*, lpNumberOfBytesWritten=0xd18fc20*=0x10c, lpOverlapped=0x0) returned 1 [0184.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40918 [0184.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcabe8 [0184.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0184.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcabe8 [0184.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca2b0 [0184.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0184.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0184.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40918) returned 1 [0184.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e74170 [0184.562] sprintf (in: _Dest=0x3e74170, _Format="%c%c" | out: _Dest="94") returned 2 [0184.562] sprintf (in: _Dest=0x3e74172, _Format="%c%c" | out: _Dest="24") returned 2 [0184.562] sprintf (in: _Dest=0x3e74174, _Format="%c%c" | out: _Dest="72") returned 2 [0184.562] sprintf (in: _Dest=0x3e74176, _Format="%c%c" | out: _Dest="d1") returned 2 [0184.562] sprintf (in: _Dest=0x3e74178, _Format="%c%c" | out: _Dest="94") returned 2 [0184.562] sprintf (in: _Dest=0x3e7417a, _Format="%c%c" | out: _Dest="44") returned 2 [0184.562] sprintf (in: _Dest=0x3e7417c, _Format="%c%c" | out: _Dest="09") returned 2 [0184.562] sprintf (in: _Dest=0x3e7417e, _Format="%c%c" | out: _Dest="b4") returned 2 [0184.562] sprintf (in: _Dest=0x3e74180, _Format="%c%c" | out: _Dest="04") returned 2 [0184.562] sprintf (in: _Dest=0x3e74182, _Format="%c%c" | out: _Dest="f4") returned 2 [0184.562] sprintf (in: _Dest=0x3e74184, _Format="%c%c" | out: _Dest="36") returned 2 [0184.562] sprintf (in: _Dest=0x3e74186, _Format="%c%c" | out: _Dest="81") returned 2 [0184.562] sprintf (in: _Dest=0x3e74188, _Format="%c%c" | out: _Dest="9f") returned 2 [0184.562] sprintf (in: _Dest=0x3e7418a, _Format="%c%c" | out: _Dest="73") returned 2 [0184.562] sprintf (in: _Dest=0x3e7418c, _Format="%c%c" | out: _Dest="92") returned 2 [0184.563] sprintf (in: _Dest=0x3e7418e, _Format="%c%c" | out: _Dest="a4") returned 2 [0184.563] sprintf (in: _Dest=0x3e74190, _Format="%c%c" | out: _Dest="6b") returned 2 [0184.563] sprintf (in: _Dest=0x3e74192, _Format="%c%c" | out: _Dest="9b") returned 2 [0184.563] sprintf (in: _Dest=0x3e74194, _Format="%c%c" | out: _Dest="91") returned 2 [0184.563] sprintf (in: _Dest=0x3e74196, _Format="%c%c" | out: _Dest="7a") returned 2 [0184.563] sprintf (in: _Dest=0x3e74198, _Format="%c%c" | out: _Dest="7f") returned 2 [0184.563] sprintf (in: _Dest=0x3e7419a, _Format="%c%c" | out: _Dest="a2") returned 2 [0184.563] sprintf (in: _Dest=0x3e7419c, _Format="%c%c" | out: _Dest="79") returned 2 [0184.563] sprintf (in: _Dest=0x3e7419e, _Format="%c%c" | out: _Dest="42") returned 2 [0184.563] sprintf (in: _Dest=0x3e741a0, _Format="%c%c" | out: _Dest="44") returned 2 [0184.563] sprintf (in: _Dest=0x3e741a2, _Format="%c%c" | out: _Dest="ad") returned 2 [0184.563] RtlInitAnsiString (in: DestinationString=0xd18fba8, SourceString="942472d1944409b404f436819f7392a46b9b917a7fa2794244ad" | out: DestinationString="942472d1944409b404f436819f7392a46b9b917a7fa2794244ad") [0184.563] RtlAnsiStringToUnicodeString (in: DestinationString=0xd18fba0, SourceString="942472d1944409b404f436819f7392a46b9b917a7fa2794244ad", AllocateDestinationString=1 | out: DestinationString="942472d1944409b404f436819f7392a46b9b917a7fa2794244ad") returned 0x0 [0184.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3efc0 [0184.563] wcscat (in: _Dest=0x7b7c320, _Source="942472d194440" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\942472d194440") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\942472d194440" [0184.563] wcscat (in: _Dest=0x7b7c320, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\942472d194440.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\942472d194440.68814f" [0184.563] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\942472d194440.68814f", NtPathName=0xd18fb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\942472d194440.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0184.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d55150 [0184.634] FlushFileBuffers (hFile=0x18d4) returned 1 [0184.955] CloseHandle (hObject=0x18d4) returned 1 [0186.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7c780 [0186.002] wcscpy (in: _Dest=0x7b7c780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\" [0186.002] wcscat (in: _Dest=0x7b7c780, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\68814F-Readme.txt" [0186.003] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\68814f-readme.txt")) returned 0xffffffff [0186.003] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf9c [0186.174] WriteFile (in: hFile=0xf9c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd18fbb4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd18fbb4*=0x8b9, lpOverlapped=0x0) returned 1 [0186.176] CloseHandle (hObject=0xf9c) returned 1 [0186.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c780) returned 1 [0186.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc130) returned 1 Thread: id = 5500 os_tid = 0x1b54 [0181.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3dea2b8 [0181.926] wcscpy (in: _Dest=0x3dea2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0181.926] wcscat (in: _Dest=0x3dea2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0181.926] wcscat (in: _Dest=0x3dea2b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\*" [0181.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0181.926] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0183.526] wcscmp (_String1=".", _String2=".") returned 0 [0183.526] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.526] wcscmp (_String1="..", _String2=".") returned 1 [0183.526] wcscmp (_String1="..", _String2="..") returned 0 [0183.526] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0183.526] wcscmp (_String1="ar", _String2=".") returned 1 [0183.526] wcscmp (_String1="ar", _String2="..") returned 1 [0183.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3f170 [0183.527] wcscpy (in: _Dest=0x7a3f170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.527] wcscat (in: _Dest=0x7a3f170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.527] wcscat (in: _Dest=0x7a3f170, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" [0183.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3f170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x145c [0183.795] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0183.795] wcscmp (_String1="bg", _String2=".") returned 1 [0183.795] wcscmp (_String1="bg", _String2="..") returned 1 [0183.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3dea3b8 [0183.795] wcscpy (in: _Dest=0x3dea3b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.795] wcscat (in: _Dest=0x3dea3b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.795] wcscat (in: _Dest=0x3dea3b8, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" [0183.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dea3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0183.796] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0183.797] wcscmp (_String1="ca", _String2=".") returned 1 [0183.797] wcscmp (_String1="ca", _String2="..") returned 1 [0183.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de9eb8 [0183.797] wcscpy (in: _Dest=0x3de9eb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.797] wcscat (in: _Dest=0x3de9eb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.797] wcscat (in: _Dest=0x3de9eb8, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" [0183.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de9eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0183.798] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0183.798] wcscmp (_String1="cs", _String2=".") returned 1 [0183.798] wcscmp (_String1="cs", _String2="..") returned 1 [0183.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de8eb8 [0183.798] wcscpy (in: _Dest=0x3de8eb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.798] wcscat (in: _Dest=0x3de8eb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.798] wcscat (in: _Dest=0x3de8eb8, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" [0183.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de8eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8 [0183.800] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0183.800] wcscmp (_String1="da", _String2=".") returned 1 [0183.800] wcscmp (_String1="da", _String2="..") returned 1 [0183.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de73b8 [0183.800] wcscpy (in: _Dest=0x3de73b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.800] wcscat (in: _Dest=0x3de73b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.800] wcscat (in: _Dest=0x3de73b8, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" [0183.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de73b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0183.801] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0183.801] wcscmp (_String1="de", _String2=".") returned 1 [0183.801] wcscmp (_String1="de", _String2="..") returned 1 [0183.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3f270 [0183.801] wcscpy (in: _Dest=0x7a3f270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.801] wcscat (in: _Dest=0x7a3f270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.801] wcscat (in: _Dest=0x7a3f270, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" [0183.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3f270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8 [0183.802] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0183.803] wcscmp (_String1="el", _String2=".") returned 1 [0183.803] wcscmp (_String1="el", _String2="..") returned 1 [0183.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3f370 [0183.803] wcscpy (in: _Dest=0x7a3f370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.803] wcscat (in: _Dest=0x7a3f370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.803] wcscat (in: _Dest=0x7a3f370, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" [0183.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3f370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128 [0183.804] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0183.804] wcscmp (_String1="en", _String2=".") returned 1 [0183.804] wcscmp (_String1="en", _String2="..") returned 1 [0183.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3f470 [0183.804] wcscpy (in: _Dest=0x7a3f470, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.804] wcscat (in: _Dest=0x7a3f470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.804] wcscat (in: _Dest=0x7a3f470, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" [0183.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3f470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac [0183.805] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f516a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0183.805] wcscmp (_String1="es", _String2=".") returned 1 [0183.805] wcscmp (_String1="es", _String2="..") returned 1 [0183.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3f570 [0183.805] wcscpy (in: _Dest=0x7a3f570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.805] wcscat (in: _Dest=0x7a3f570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.805] wcscat (in: _Dest=0x7a3f570, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" [0183.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3f570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080 [0183.807] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0183.807] wcscmp (_String1="fi", _String2=".") returned 1 [0183.807] wcscmp (_String1="fi", _String2="..") returned 1 [0183.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3f670 [0183.807] wcscpy (in: _Dest=0x7a3f670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.807] wcscat (in: _Dest=0x7a3f670, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.807] wcscat (in: _Dest=0x7a3f670, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" [0183.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3f670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c [0183.808] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0183.808] wcscmp (_String1="fil", _String2=".") returned 1 [0183.808] wcscmp (_String1="fil", _String2="..") returned 1 [0183.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x7a3f770 [0183.808] wcscpy (in: _Dest=0x7a3f770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.808] wcscat (in: _Dest=0x7a3f770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.808] wcscat (in: _Dest=0x7a3f770, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" [0183.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3f770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8 [0183.809] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0183.809] wcscmp (_String1="fr", _String2=".") returned 1 [0183.809] wcscmp (_String1="fr", _String2="..") returned 1 [0183.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3f870 [0183.810] wcscpy (in: _Dest=0x7a3f870, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.810] wcscat (in: _Dest=0x7a3f870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.810] wcscat (in: _Dest=0x7a3f870, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" [0183.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3f870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1224 [0183.811] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0183.811] wcscmp (_String1="hi", _String2=".") returned 1 [0183.811] wcscmp (_String1="hi", _String2="..") returned 1 [0183.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3f970 [0183.811] wcscpy (in: _Dest=0x7a3f970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.811] wcscat (in: _Dest=0x7a3f970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.811] wcscat (in: _Dest=0x7a3f970, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" [0183.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3f970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244 [0183.812] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0183.812] wcscmp (_String1="hr", _String2=".") returned 1 [0183.812] wcscmp (_String1="hr", _String2="..") returned 1 [0183.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3fa70 [0183.812] wcscpy (in: _Dest=0x7a3fa70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.812] wcscat (in: _Dest=0x7a3fa70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.813] wcscat (in: _Dest=0x7a3fa70, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" [0183.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3fa70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434 [0183.814] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0183.814] wcscmp (_String1="hu", _String2=".") returned 1 [0183.814] wcscmp (_String1="hu", _String2="..") returned 1 [0183.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3fb70 [0183.814] wcscpy (in: _Dest=0x7a3fb70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.814] wcscat (in: _Dest=0x7a3fb70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.814] wcscat (in: _Dest=0x7a3fb70, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" [0183.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3fb70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8 [0183.815] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0183.815] wcscmp (_String1="id", _String2=".") returned 1 [0183.815] wcscmp (_String1="id", _String2="..") returned 1 [0183.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3fc70 [0183.815] wcscpy (in: _Dest=0x7a3fc70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.815] wcscat (in: _Dest=0x7a3fc70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.815] wcscat (in: _Dest=0x7a3fc70, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" [0183.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3fc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0183.816] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0183.816] wcscmp (_String1="it", _String2=".") returned 1 [0183.816] wcscmp (_String1="it", _String2="..") returned 1 [0183.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3fd70 [0183.816] wcscpy (in: _Dest=0x7a3fd70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.817] wcscat (in: _Dest=0x7a3fd70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.817] wcscat (in: _Dest=0x7a3fd70, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" [0183.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3fd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c [0183.818] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0183.818] wcscmp (_String1="ja", _String2=".") returned 1 [0183.818] wcscmp (_String1="ja", _String2="..") returned 1 [0183.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3fe70 [0183.818] wcscpy (in: _Dest=0x7a3fe70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.818] wcscat (in: _Dest=0x7a3fe70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.818] wcscat (in: _Dest=0x7a3fe70, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" [0183.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3fe70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234 [0183.819] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0183.819] wcscmp (_String1="ko", _String2=".") returned 1 [0183.819] wcscmp (_String1="ko", _String2="..") returned 1 [0183.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a3ff70 [0183.819] wcscpy (in: _Dest=0x7a3ff70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.819] wcscat (in: _Dest=0x7a3ff70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.819] wcscat (in: _Dest=0x7a3ff70, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" [0183.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a3ff70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0183.820] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0183.820] wcscmp (_String1="lt", _String2=".") returned 1 [0183.820] wcscmp (_String1="lt", _String2="..") returned 1 [0183.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a40070 [0183.820] wcscpy (in: _Dest=0x7a40070, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.820] wcscat (in: _Dest=0x7a40070, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.820] wcscat (in: _Dest=0x7a40070, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" [0183.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a40070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218 [0183.821] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0183.821] wcscmp (_String1="lv", _String2=".") returned 1 [0183.821] wcscmp (_String1="lv", _String2="..") returned 1 [0183.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a40170 [0183.822] wcscpy (in: _Dest=0x7a40170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.822] wcscat (in: _Dest=0x7a40170, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.822] wcscat (in: _Dest=0x7a40170, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" [0183.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a40170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0183.823] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0183.823] wcscmp (_String1="nl", _String2=".") returned 1 [0183.823] wcscmp (_String1="nl", _String2="..") returned 1 [0183.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a40270 [0183.823] wcscpy (in: _Dest=0x7a40270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.823] wcscat (in: _Dest=0x7a40270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.823] wcscat (in: _Dest=0x7a40270, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" [0183.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a40270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230 [0183.824] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0183.824] wcscmp (_String1="no", _String2=".") returned 1 [0183.824] wcscmp (_String1="no", _String2="..") returned 1 [0183.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a40370 [0183.824] wcscpy (in: _Dest=0x7a40370, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.824] wcscat (in: _Dest=0x7a40370, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.824] wcscat (in: _Dest=0x7a40370, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" [0183.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a40370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228 [0183.825] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0183.825] wcscmp (_String1="pl", _String2=".") returned 1 [0183.825] wcscmp (_String1="pl", _String2="..") returned 1 [0183.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a40470 [0183.825] wcscpy (in: _Dest=0x7a40470, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.825] wcscat (in: _Dest=0x7a40470, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.825] wcscat (in: _Dest=0x7a40470, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" [0183.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a40470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220 [0183.826] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0183.826] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0183.826] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0183.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc448 [0183.826] wcscpy (in: _Dest=0x30bc448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.827] wcscat (in: _Dest=0x30bc448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.827] wcscat (in: _Dest=0x30bc448, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" [0183.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x121c [0183.828] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0183.828] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0183.828] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0183.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc658 [0183.828] wcscpy (in: _Dest=0x30bc658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.828] wcscat (in: _Dest=0x30bc658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.828] wcscat (in: _Dest=0x30bc658, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" [0183.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200 [0183.829] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0183.829] wcscmp (_String1="ro", _String2=".") returned 1 [0183.829] wcscmp (_String1="ro", _String2="..") returned 1 [0183.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a40570 [0183.829] wcscpy (in: _Dest=0x7a40570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.829] wcscat (in: _Dest=0x7a40570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.829] wcscat (in: _Dest=0x7a40570, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" [0183.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a40570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0183.830] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0183.830] wcscmp (_String1="ru", _String2=".") returned 1 [0183.830] wcscmp (_String1="ru", _String2="..") returned 1 [0183.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a40670 [0183.830] wcscpy (in: _Dest=0x7a40670, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.830] wcscat (in: _Dest=0x7a40670, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.830] wcscat (in: _Dest=0x7a40670, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" [0183.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a40670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0183.831] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0183.831] wcscmp (_String1="se", _String2=".") returned 1 [0183.831] wcscmp (_String1="se", _String2="..") returned 1 [0183.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a40770 [0183.832] wcscpy (in: _Dest=0x7a40770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0183.832] wcscat (in: _Dest=0x7a40770, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0183.832] wcscat (in: _Dest=0x7a40770, _Source="se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" [0183.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a40770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c [0184.056] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0184.056] wcscmp (_String1="sk", _String2=".") returned 1 [0184.056] wcscmp (_String1="sk", _String2="..") returned 1 [0184.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x7a40870 [0184.056] wcscpy (in: _Dest=0x7a40870, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0184.056] wcscat (in: _Dest=0x7a40870, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0184.056] wcscat (in: _Dest=0x7a40870, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" [0185.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a40870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0185.678] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0185.678] wcscmp (_String1="sl", _String2=".") returned 1 [0185.678] wcscmp (_String1="sl", _String2="..") returned 1 [0185.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de76b8 [0185.678] wcscpy (in: _Dest=0x3de76b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.678] wcscat (in: _Dest=0x3de76b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.678] wcscat (in: _Dest=0x3de76b8, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" [0185.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de76b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0185.679] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0185.679] wcscmp (_String1="sr", _String2=".") returned 1 [0185.679] wcscmp (_String1="sr", _String2="..") returned 1 [0185.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de9cb8 [0185.680] wcscpy (in: _Dest=0x3de9cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.680] wcscat (in: _Dest=0x3de9cb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.680] wcscat (in: _Dest=0x3de9cb8, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" [0185.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de9cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0185.681] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0185.681] wcscmp (_String1="th", _String2=".") returned 1 [0185.681] wcscmp (_String1="th", _String2="..") returned 1 [0185.681] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de6fb8 [0185.681] wcscpy (in: _Dest=0x3de6fb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.681] wcscat (in: _Dest=0x3de6fb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.681] wcscat (in: _Dest=0x3de6fb8, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" [0185.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0185.682] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0185.682] wcscmp (_String1="tr", _String2=".") returned 1 [0185.682] wcscmp (_String1="tr", _String2="..") returned 1 [0185.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3dea4b8 [0185.682] wcscpy (in: _Dest=0x3dea4b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.682] wcscat (in: _Dest=0x3dea4b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.682] wcscat (in: _Dest=0x3dea4b8, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" [0185.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dea4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0185.684] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0185.684] wcscmp (_String1="uk", _String2=".") returned 1 [0185.684] wcscmp (_String1="uk", _String2="..") returned 1 [0185.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de70b8 [0185.684] wcscpy (in: _Dest=0x3de70b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.684] wcscat (in: _Dest=0x3de70b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.684] wcscat (in: _Dest=0x3de70b8, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" [0185.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3de70b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f8 [0185.685] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0185.685] wcscmp (_String1="vi", _String2=".") returned 1 [0185.685] wcscmp (_String1="vi", _String2="..") returned 1 [0185.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3dea7b8 [0185.686] wcscpy (in: _Dest=0x3dea7b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.686] wcscat (in: _Dest=0x3dea7b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.686] wcscat (in: _Dest=0x3dea7b8, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" [0185.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dea7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0185.687] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0185.687] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0185.687] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0185.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7b7e638 [0185.687] wcscpy (in: _Dest=0x7b7e638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.687] wcscat (in: _Dest=0x7b7e638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.687] wcscat (in: _Dest=0x7b7e638, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" [0185.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7e638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0185.688] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0185.688] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0185.688] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0185.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7b7e848 [0185.688] wcscpy (in: _Dest=0x7b7e848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales" [0185.688] wcscat (in: _Dest=0x7b7e848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\" [0185.688] wcscat (in: _Dest=0x7b7e848, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" [0185.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7e848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0185.690] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0185.690] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0185.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0185.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea2b8) returned 1 [0185.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 Thread: id = 5501 os_tid = 0x8ec [0181.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x3dea3b8 [0181.926] wcscpy (in: _Dest=0x3dea3b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" [0181.926] wcscat (in: _Dest=0x3dea3b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\" [0181.926] wcscat (in: _Dest=0x3dea3b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\*" [0181.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0181.926] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf590 [0183.525] wcscmp (_String1=".", _String2=".") returned 0 [0183.525] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.525] wcscmp (_String1="..", _String2=".") returned 1 [0183.525] wcscmp (_String1="..", _String2="..") returned 0 [0183.525] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0183.525] wcscmp (_String1="_locales", _String2=".") returned 1 [0183.525] wcscmp (_String1="_locales", _String2="..") returned 1 [0183.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a385e8 [0183.525] wcscpy (in: _Dest=0x7a385e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX" [0183.525] wcscat (in: _Dest=0x7a385e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\" [0183.525] wcscat (in: _Dest=0x7a385e8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales" [0183.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a385e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0183.793] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 0 [0183.793] FindClose (in: hFindFile=0x3dcf590 | out: hFindFile=0x3dcf590) returned 1 [0183.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0183.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea3b8) returned 1 [0183.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 5502 os_tid = 0x1bfc [0181.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x20 [0183.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x20) returned 0 [0183.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.895] GetLastError () returned 0x5 [0183.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x20) returned 0 [0183.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69658) returned 1 Thread: id = 5503 os_tid = 0x1c18 [0181.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x20 [0183.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x20) returned 0 [0183.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.894] GetLastError () returned 0x5 [0183.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x20) returned 0 [0183.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a696e0) returned 1 Thread: id = 5504 os_tid = 0x2348 [0181.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x20 [0183.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x20) returned 0 [0183.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.893] GetLastError () returned 0x5 [0183.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x20) returned 0 [0183.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69768) returned 1 Thread: id = 5505 os_tid = 0x234c [0181.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x20 [0183.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x20) returned 0 [0183.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.892] GetLastError () returned 0x5 [0183.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x20) returned 0 [0183.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a697f0) returned 1 Thread: id = 5506 os_tid = 0x2350 [0181.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x20 [0183.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x20) returned 0 [0183.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.890] GetLastError () returned 0x5 [0183.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x20) returned 0 [0183.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69878) returned 1 Thread: id = 5507 os_tid = 0x2354 [0181.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid")) returned 0x20 [0183.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x20) returned 0 [0183.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.869] GetLastError () returned 0x5 [0183.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x20) returned 0 [0183.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69900) returned 1 Thread: id = 5508 os_tid = 0x2358 [0181.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x20 [0183.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x20) returned 0 [0183.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.889] GetLastError () returned 0x5 [0183.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x20) returned 0 [0183.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69988) returned 1 Thread: id = 5509 os_tid = 0x235c [0181.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x20 [0183.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x20) returned 0 [0183.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.887] GetLastError () returned 0x5 [0183.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x20) returned 0 [0183.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a10) returned 1 Thread: id = 5510 os_tid = 0x2360 [0181.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x20 [0183.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x20) returned 0 [0183.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.865] GetLastError () returned 0x5 [0183.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x20) returned 0 [0183.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a98) returned 1 Thread: id = 5511 os_tid = 0x2364 [0181.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x20 [0183.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x20) returned 0 [0183.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.886] GetLastError () returned 0x5 [0183.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x20) returned 0 [0183.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69b20) returned 1 Thread: id = 5512 os_tid = 0x2368 [0181.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf")) returned 0x20 [0183.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x20) returned 0 [0183.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.662] GetLastError () returned 0x5 [0183.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x20) returned 0 [0183.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ba8) returned 1 Thread: id = 5513 os_tid = 0x236c [0181.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf")) returned 0x20 [0183.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x20) returned 0 [0183.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.925] GetLastError () returned 0x5 [0183.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x20) returned 0 [0183.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69c30) returned 1 Thread: id = 5514 os_tid = 0x2370 [0181.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf")) returned 0x20 [0183.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF", dwFileAttributes=0x20) returned 0 [0183.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.885] GetLastError () returned 0x5 [0183.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF", dwFileAttributes=0x20) returned 0 [0183.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69cb8) returned 1 Thread: id = 5515 os_tid = 0x2374 [0181.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf")) returned 0x20 [0183.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF", dwFileAttributes=0x20) returned 0 [0183.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.883] GetLastError () returned 0x5 [0183.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF", dwFileAttributes=0x20) returned 0 [0183.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69d40) returned 1 Thread: id = 5516 os_tid = 0x2378 [0181.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf")) returned 0x20 [0183.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF", dwFileAttributes=0x20) returned 0 [0183.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.882] GetLastError () returned 0x5 [0183.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF", dwFileAttributes=0x20) returned 0 [0183.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69dc8) returned 1 Thread: id = 5517 os_tid = 0x237c [0181.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf")) returned 0x20 [0183.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF", dwFileAttributes=0x20) returned 0 [0183.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.881] GetLastError () returned 0x5 [0183.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF", dwFileAttributes=0x20) returned 0 [0183.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69e50) returned 1 Thread: id = 5518 os_tid = 0x2380 [0181.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf")) returned 0x20 [0183.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF", dwFileAttributes=0x20) returned 0 [0183.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.924] GetLastError () returned 0x5 [0183.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF", dwFileAttributes=0x20) returned 0 [0183.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ed8) returned 1 Thread: id = 5519 os_tid = 0x2384 [0181.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf")) returned 0x20 [0183.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF", dwFileAttributes=0x20) returned 0 [0183.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.923] GetLastError () returned 0x5 [0183.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF", dwFileAttributes=0x20) returned 0 [0183.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69f60) returned 1 Thread: id = 5520 os_tid = 0x2388 [0181.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid")) returned 0x20 [0183.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID", dwFileAttributes=0x20) returned 0 [0183.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.921] GetLastError () returned 0x5 [0183.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID", dwFileAttributes=0x20) returned 0 [0183.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69fe8) returned 1 Thread: id = 5521 os_tid = 0x2390 [0181.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid")) returned 0x20 [0183.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID", dwFileAttributes=0x20) returned 0 [0183.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.920] GetLastError () returned 0x5 [0183.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID", dwFileAttributes=0x20) returned 0 [0183.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 Thread: id = 5522 os_tid = 0x2394 [0181.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x20 [0183.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF", dwFileAttributes=0x20) returned 0 [0183.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.919] GetLastError () returned 0x5 [0183.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF", dwFileAttributes=0x20) returned 0 [0183.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 5523 os_tid = 0x2398 [0181.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x20 [0183.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF", dwFileAttributes=0x20) returned 0 [0183.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.879] GetLastError () returned 0x5 [0183.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF", dwFileAttributes=0x20) returned 0 [0183.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 5524 os_tid = 0x239c [0181.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x20 [0183.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF", dwFileAttributes=0x20) returned 0 [0183.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.878] GetLastError () returned 0x5 [0183.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF", dwFileAttributes=0x20) returned 0 [0183.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 5525 os_tid = 0x23a0 [0181.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x20 [0183.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF", dwFileAttributes=0x20) returned 0 [0183.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.876] GetLastError () returned 0x5 [0183.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF", dwFileAttributes=0x20) returned 0 [0183.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 5526 os_tid = 0x23a4 [0182.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x20 [0183.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF", dwFileAttributes=0x20) returned 0 [0183.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.917] GetLastError () returned 0x5 [0183.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF", dwFileAttributes=0x20) returned 0 [0183.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 5527 os_tid = 0x27cc [0182.503] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js")) returned 0x2020 [0182.505] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", dwFileAttributes=0x20) returned 1 [0182.506] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12c4 [0182.506] GetFileSizeEx (in: hFile=0x12c4, lpFileSize=0x9e6fe34 | out: lpFileSize=0x9e6fe34*=207406) returned 1 [0182.506] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x32a2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.506] ReadFile (in: hFile=0x12c4, lpBuffer=0x9e6fe10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9e6fe20, lpOverlapped=0x0 | out: lpBuffer=0x9e6fe10*, lpNumberOfBytesRead=0x9e6fe20*=0x4, lpOverlapped=0x0) returned 1 [0182.509] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0182.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0182.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0182.509] NtQuerySystemTime (in: CurrentTime=0x9e6fda8 | out: CurrentTime=0x9e6fda8*=132462177610836000) returned 0x0 [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x36dc7e1a [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x6f0f9d6e [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x770e3879 [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x214a41ba [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x58cb385d [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x4f0f823d [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x758e436a [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x62f9ed58 [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x160ebca4 [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x5e591aa5 [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x33078632 [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x1491d6ab [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x5d4d7a3f [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x2495272c [0182.509] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x785b3ee2 [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x7a10e9d0 [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0xb609ca1 [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x4fea332 [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x2dff7e4d [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x5d58f441 [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x273514f6 [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x2ae155f [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x47d552ab [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x3496a172 [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x49a4cf7f [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x4fc27f15 [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x31d24b1c [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x263b3d8f [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x24640b9f [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x61335a90 [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x72f6bc38 [0182.510] RtlRandomEx (in: Seed=0x9e6fda0 | out: Seed=0x9e6fda0) returned 0x71280ec9 [0182.521] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.521] ReadFile (in: hFile=0x12c4, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9e6fda8, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0x9e6fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0182.522] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be1c0 [0182.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0182.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0182.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0182.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0182.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0182.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be1c0) returned 1 [0182.523] WriteFile (in: hFile=0x12c4, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9e6fda8, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0x9e6fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0183.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0183.934] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x1a400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.934] ReadFile (in: hFile=0x12c4, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9e6fda8, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0x9e6fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0183.944] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x1a400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08070 [0183.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0183.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0183.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0183.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c23778 [0183.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0183.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0183.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0183.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0183.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08070) returned 1 [0183.945] WriteFile (in: hFile=0x12c4, lpBuffer=0x7c23778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9e6fda8, lpOverlapped=0x0 | out: lpBuffer=0x7c23778*, lpNumberOfBytesWritten=0x9e6fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0184.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c23778) returned 1 [0184.460] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x2ee2e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.460] ReadFile (in: hFile=0x12c4, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x9e6fda8, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0x9e6fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0184.461] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x2ee2e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f40 [0184.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0184.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0184.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c23778 [0184.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0184.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0184.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0184.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f40) returned 1 [0184.461] WriteFile (in: hFile=0x12c4, lpBuffer=0x7c23778*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x9e6fda8, lpOverlapped=0x0 | out: lpBuffer=0x7c23778*, lpNumberOfBytesWritten=0x9e6fda8*=0x3c00, lpOverlapped=0x0) returned 1 [0185.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c23778) returned 1 [0185.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1ec08 [0185.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0185.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7a2d280 [0185.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0185.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0185.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0185.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0185.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41968) returned 1 [0185.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x156) returned 0x3dce108 [0185.051] SetFilePointerEx (in: hFile=0x12c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.052] WriteFile (in: hFile=0x12c4, lpBuffer=0x3dce108*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x9e6fe28, lpOverlapped=0x0 | out: lpBuffer=0x3dce108*, lpNumberOfBytesWritten=0x9e6fe28*=0x156, lpOverlapped=0x0) returned 1 [0186.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0186.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e940 [0186.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0186.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0186.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a374d0 [0186.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0186.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0186.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0186.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0186.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0186.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x49) returned 0x7a394d0 [0186.138] sprintf (in: _Dest=0x7a394d0, _Format="%c%c" | out: _Dest="05") returned 2 [0186.138] sprintf (in: _Dest=0x7a394d2, _Format="%c%c" | out: _Dest="25") returned 2 [0186.138] sprintf (in: _Dest=0x7a394d4, _Format="%c%c" | out: _Dest="e0") returned 2 [0186.139] sprintf (in: _Dest=0x7a394d6, _Format="%c%c" | out: _Dest="12") returned 2 [0186.139] sprintf (in: _Dest=0x7a394d8, _Format="%c%c" | out: _Dest="40") returned 2 [0186.139] sprintf (in: _Dest=0x7a394da, _Format="%c%c" | out: _Dest="30") returned 2 [0186.139] sprintf (in: _Dest=0x7a394dc, _Format="%c%c" | out: _Dest="ff") returned 2 [0186.139] sprintf (in: _Dest=0x7a394de, _Format="%c%c" | out: _Dest="fc") returned 2 [0186.139] sprintf (in: _Dest=0x7a394e0, _Format="%c%c" | out: _Dest="a9") returned 2 [0186.139] sprintf (in: _Dest=0x7a394e2, _Format="%c%c" | out: _Dest="75") returned 2 [0186.139] sprintf (in: _Dest=0x7a394e4, _Format="%c%c" | out: _Dest="0a") returned 2 [0186.139] sprintf (in: _Dest=0x7a394e6, _Format="%c%c" | out: _Dest="e8") returned 2 [0186.139] sprintf (in: _Dest=0x7a394e8, _Format="%c%c" | out: _Dest="b0") returned 2 [0186.139] sprintf (in: _Dest=0x7a394ea, _Format="%c%c" | out: _Dest="88") returned 2 [0186.139] sprintf (in: _Dest=0x7a394ec, _Format="%c%c" | out: _Dest="be") returned 2 [0186.139] sprintf (in: _Dest=0x7a394ee, _Format="%c%c" | out: _Dest="2b") returned 2 [0186.139] sprintf (in: _Dest=0x7a394f0, _Format="%c%c" | out: _Dest="b1") returned 2 [0186.139] sprintf (in: _Dest=0x7a394f2, _Format="%c%c" | out: _Dest="ae") returned 2 [0186.139] sprintf (in: _Dest=0x7a394f4, _Format="%c%c" | out: _Dest="68") returned 2 [0186.139] sprintf (in: _Dest=0x7a394f6, _Format="%c%c" | out: _Dest="d7") returned 2 [0186.139] sprintf (in: _Dest=0x7a394f8, _Format="%c%c" | out: _Dest="3b") returned 2 [0186.139] sprintf (in: _Dest=0x7a394fa, _Format="%c%c" | out: _Dest="58") returned 2 [0186.139] sprintf (in: _Dest=0x7a394fc, _Format="%c%c" | out: _Dest="e1") returned 2 [0186.139] sprintf (in: _Dest=0x7a394fe, _Format="%c%c" | out: _Dest="ef") returned 2 [0186.139] sprintf (in: _Dest=0x7a39500, _Format="%c%c" | out: _Dest="75") returned 2 [0186.139] sprintf (in: _Dest=0x7a39502, _Format="%c%c" | out: _Dest="56") returned 2 [0186.139] sprintf (in: _Dest=0x7a39504, _Format="%c%c" | out: _Dest="33") returned 2 [0186.139] sprintf (in: _Dest=0x7a39506, _Format="%c%c" | out: _Dest="3c") returned 2 [0186.139] sprintf (in: _Dest=0x7a39508, _Format="%c%c" | out: _Dest="57") returned 2 [0186.139] sprintf (in: _Dest=0x7a3950a, _Format="%c%c" | out: _Dest="8c") returned 2 [0186.139] sprintf (in: _Dest=0x7a3950c, _Format="%c%c" | out: _Dest="bb") returned 2 [0186.139] sprintf (in: _Dest=0x7a3950e, _Format="%c%c" | out: _Dest="4f") returned 2 [0186.139] sprintf (in: _Dest=0x7a39510, _Format="%c%c" | out: _Dest="66") returned 2 [0186.139] sprintf (in: _Dest=0x7a39512, _Format="%c%c" | out: _Dest="9a") returned 2 [0186.140] sprintf (in: _Dest=0x7a39514, _Format="%c%c" | out: _Dest="74") returned 2 [0186.140] sprintf (in: _Dest=0x7a39516, _Format="%c%c" | out: _Dest="58") returned 2 [0186.140] RtlInitAnsiString (in: DestinationString=0x9e6fdb0, SourceString="0525e0124030fffca9750ae8b088be2bb1ae68d73b58e1ef7556333c578cbb4f669a7458" | out: DestinationString="0525e0124030fffca9750ae8b088be2bb1ae68d73b58e1ef7556333c578cbb4f669a7458") [0186.140] RtlAnsiStringToUnicodeString (in: DestinationString=0x9e6fda8, SourceString="0525e0124030fffca9750ae8b088be2bb1ae68d73b58e1ef7556333c578cbb4f669a7458", AllocateDestinationString=1 | out: DestinationString="0525e0124030fffca9750ae8b088be2bb1ae68d73b58e1ef7556333c578cbb4f669a7458") returned 0x0 [0186.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a626d0 [0186.140] wcscat (in: _Dest=0x7b83a40, _Source="0525e0124030fffca9" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\0525e0124030fffca9") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\0525e0124030fffca9" [0186.140] wcscat (in: _Dest=0x7b83a40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\0525e0124030fffca9.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\0525e0124030fffca9.68814f" [0186.140] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\0525e0124030fffca9.68814f", NtPathName=0x9e6fda0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\0525e0124030fffca9.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x3ea2eb0 [0186.154] FlushFileBuffers (hFile=0x12c4) returned 1 [0186.157] CloseHandle (hObject=0x12c4) returned 1 [0186.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7c668 [0186.158] wcscpy (in: _Dest=0x7b7c668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0186.158] wcscat (in: _Dest=0x7b7c668, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814F-Readme.txt" [0186.158] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814f-readme.txt")) returned 0xffffffff [0186.158] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x12c4 [0186.158] WriteFile (in: hFile=0x12c4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9e6fdbc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9e6fdbc*=0x8b9, lpOverlapped=0x0) returned 1 [0186.160] CloseHandle (hObject=0x12c4) returned 1 [0186.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c668) returned 1 [0186.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dfd8) returned 1 Thread: id = 5528 os_tid = 0x23b4 [0182.525] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js")) returned 0x2020 [0182.525] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", dwFileAttributes=0x20) returned 1 [0182.526] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf9c [0182.526] GetFileSizeEx (in: hFile=0xf9c, lpFileSize=0x62efacc | out: lpFileSize=0x62efacc*=241753) returned 1 [0182.526] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x3b055, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.526] ReadFile (in: hFile=0xf9c, lpBuffer=0x62efaa8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x62efab8, lpOverlapped=0x0 | out: lpBuffer=0x62efaa8*, lpNumberOfBytesRead=0x62efab8*=0x4, lpOverlapped=0x0) returned 1 [0182.529] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0182.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0182.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0182.530] NtQuerySystemTime (in: CurrentTime=0x62efa40 | out: CurrentTime=0x62efa40*=132462177611148000) returned 0x0 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x66463fdc [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x361efbd0 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x68213afa [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x9f24784 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x510e92f1 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x44091e53 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x7eb14440 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x6453103e [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x34d59bb9 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x207cb464 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x645dfeaa [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x3bff423f [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x428fc36c [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x526968cb [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x66b0ac51 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x70f72e90 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x2550f716 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x65a04de3 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x2870729f [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x21fb33b8 [0182.530] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x58e3f2b8 [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x3e4c7aa1 [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x53b653aa [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x214f1610 [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x2bc3540d [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x3d6999ba [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x2ead9738 [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x43faebb1 [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x1b1534a5 [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x5492b432 [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0xea458c9 [0182.531] RtlRandomEx (in: Seed=0x62efa38 | out: Seed=0x62efa38) returned 0x3dc974fc [0182.544] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.544] ReadFile (in: hFile=0xf9c, lpBuffer=0x7bf63a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x62efa40, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesRead=0x62efa40*=0x3c00, lpOverlapped=0x0) returned 1 [0182.546] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdd88 [0182.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0182.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0182.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0182.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0182.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0182.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0182.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0c8) returned 1 [0182.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0182.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdd88) returned 1 [0182.547] WriteFile (in: hFile=0xf9c, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x62efa40, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0x62efa40*=0x3c00, lpOverlapped=0x0) returned 1 [0183.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0183.935] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x1e000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.935] ReadFile (in: hFile=0xf9c, lpBuffer=0x7bf63a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x62efa40, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesRead=0x62efa40*=0x3c00, lpOverlapped=0x0) returned 1 [0183.945] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x1e000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e08070 [0183.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f560 [0183.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0183.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0183.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c32798 [0183.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0183.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0183.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0183.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0183.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08070) returned 1 [0183.946] WriteFile (in: hFile=0xf9c, lpBuffer=0x7c32798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x62efa40, lpOverlapped=0x0 | out: lpBuffer=0x7c32798*, lpNumberOfBytesWritten=0x62efa40*=0x3c00, lpOverlapped=0x0) returned 1 [0184.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c32798) returned 1 [0184.462] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x37459, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.462] ReadFile (in: hFile=0xf9c, lpBuffer=0x7bf63a0, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0x62efa40, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesRead=0x62efa40*=0x3c00, lpOverlapped=0x0) returned 1 [0184.463] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x37459, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55f40 [0184.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f6c8 [0184.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0184.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0184.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c32798 [0184.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0184.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0184.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0184.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0184.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55f40) returned 1 [0184.464] WriteFile (in: hFile=0xf9c, lpBuffer=0x7c32798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x62efa40, lpOverlapped=0x0 | out: lpBuffer=0x7c32798*, lpNumberOfBytesWritten=0x62efa40*=0x3c00, lpOverlapped=0x0) returned 1 [0185.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c32798) returned 1 [0185.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x60) returned 0x3e1f358 [0185.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0185.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79758 [0185.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0185.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0185.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0185.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0185.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e494a0) returned 1 [0185.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x3e0aac0 [0185.277] SetFilePointerEx (in: hFile=0xf9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.277] WriteFile (in: hFile=0xf9c, lpBuffer=0x3e0aac0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x62efac0, lpOverlapped=0x0 | out: lpBuffer=0x3e0aac0*, lpNumberOfBytesWritten=0x62efac0*=0x14e, lpOverlapped=0x0) returned 1 [0186.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0186.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e940 [0186.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0186.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0186.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5e390 [0186.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0186.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0186.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0186.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0186.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0186.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x39) returned 0x3e85080 [0186.143] sprintf (in: _Dest=0x3e85080, _Format="%c%c" | out: _Dest="bc") returned 2 [0186.143] sprintf (in: _Dest=0x3e85082, _Format="%c%c" | out: _Dest="63") returned 2 [0186.143] sprintf (in: _Dest=0x3e85084, _Format="%c%c" | out: _Dest="dc") returned 2 [0186.144] sprintf (in: _Dest=0x3e85086, _Format="%c%c" | out: _Dest="cd") returned 2 [0186.144] sprintf (in: _Dest=0x3e85088, _Format="%c%c" | out: _Dest="50") returned 2 [0186.144] sprintf (in: _Dest=0x3e8508a, _Format="%c%c" | out: _Dest="c4") returned 2 [0186.144] sprintf (in: _Dest=0x3e8508c, _Format="%c%c" | out: _Dest="07") returned 2 [0186.144] sprintf (in: _Dest=0x3e8508e, _Format="%c%c" | out: _Dest="a4") returned 2 [0186.144] sprintf (in: _Dest=0x3e85090, _Format="%c%c" | out: _Dest="6a") returned 2 [0186.144] sprintf (in: _Dest=0x3e85092, _Format="%c%c" | out: _Dest="f1") returned 2 [0186.144] sprintf (in: _Dest=0x3e85094, _Format="%c%c" | out: _Dest="3e") returned 2 [0186.144] sprintf (in: _Dest=0x3e85096, _Format="%c%c" | out: _Dest="29") returned 2 [0186.144] sprintf (in: _Dest=0x3e85098, _Format="%c%c" | out: _Dest="a3") returned 2 [0186.144] sprintf (in: _Dest=0x3e8509a, _Format="%c%c" | out: _Dest="f4") returned 2 [0186.144] sprintf (in: _Dest=0x3e8509c, _Format="%c%c" | out: _Dest="15") returned 2 [0186.144] sprintf (in: _Dest=0x3e8509e, _Format="%c%c" | out: _Dest="83") returned 2 [0186.144] sprintf (in: _Dest=0x3e850a0, _Format="%c%c" | out: _Dest="bf") returned 2 [0186.144] sprintf (in: _Dest=0x3e850a2, _Format="%c%c" | out: _Dest="bc") returned 2 [0186.144] sprintf (in: _Dest=0x3e850a4, _Format="%c%c" | out: _Dest="b0") returned 2 [0186.144] sprintf (in: _Dest=0x3e850a6, _Format="%c%c" | out: _Dest="54") returned 2 [0186.144] sprintf (in: _Dest=0x3e850a8, _Format="%c%c" | out: _Dest="23") returned 2 [0186.144] sprintf (in: _Dest=0x3e850aa, _Format="%c%c" | out: _Dest="29") returned 2 [0186.144] sprintf (in: _Dest=0x3e850ac, _Format="%c%c" | out: _Dest="1d") returned 2 [0186.144] sprintf (in: _Dest=0x3e850ae, _Format="%c%c" | out: _Dest="b9") returned 2 [0186.144] sprintf (in: _Dest=0x3e850b0, _Format="%c%c" | out: _Dest="08") returned 2 [0186.144] sprintf (in: _Dest=0x3e850b2, _Format="%c%c" | out: _Dest="73") returned 2 [0186.144] sprintf (in: _Dest=0x3e850b4, _Format="%c%c" | out: _Dest="c1") returned 2 [0186.144] sprintf (in: _Dest=0x3e850b6, _Format="%c%c" | out: _Dest="fb") returned 2 [0186.144] RtlInitAnsiString (in: DestinationString=0x62efa48, SourceString="bc63dccd50c407a46af13e29a3f41583bfbcb05423291db90873c1fb" | out: DestinationString="bc63dccd50c407a46af13e29a3f41583bfbcb05423291db90873c1fb") [0186.144] RtlAnsiStringToUnicodeString (in: DestinationString=0x62efa40, SourceString="bc63dccd50c407a46af13e29a3f41583bfbcb05423291db90873c1fb", AllocateDestinationString=1 | out: DestinationString="bc63dccd50c407a46af13e29a3f41583bfbcb05423291db90873c1fb") returned 0x0 [0186.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x3e1a698 [0186.145] wcscat (in: _Dest=0x7b83b68, _Source="bc63dccd50c407" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\bc63dccd50c407") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\bc63dccd50c407" [0186.145] wcscat (in: _Dest=0x7b83b68, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\bc63dccd50c407.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\bc63dccd50c407.68814f" [0186.145] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\bc63dccd50c407.68814f", NtPathName=0x62efa38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\bc63dccd50c407.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0186.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3eca2e8 [0186.156] FlushFileBuffers (hFile=0xf9c) returned 1 [0186.162] CloseHandle (hObject=0xf9c) returned 1 [0186.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x300dfd8 [0186.163] wcscpy (in: _Dest=0x300dfd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0186.164] wcscat (in: _Dest=0x300dfd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814F-Readme.txt" [0186.164] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814f-readme.txt")) returned 0x2020 [0186.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dfd8) returned 1 [0186.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 Thread: id = 5529 os_tid = 0x23b8 [0182.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de70b8 [0182.552] wcscpy (in: _Dest=0x3de70b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" [0182.552] wcscat (in: _Dest=0x3de70b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\" [0182.552] wcscat (in: _Dest=0x3de70b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*" [0182.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0182.552] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf950 [0183.533] wcscmp (_String1=".", _String2=".") returned 0 [0183.533] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.533] wcscmp (_String1="..", _String2=".") returned 1 [0183.533] wcscmp (_String1="..", _String2="..") returned 0 [0183.533] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa1ddb600, ftLastWriteTime.dwHighDateTime=0x1cec368, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1 [0183.533] wcscmp (_String1="craw_window.css", _String2=".") returned 1 [0183.533] wcscmp (_String1="craw_window.css", _String2="..") returned 1 [0183.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d54f00 [0183.533] wcscpy (in: _Dest=0x3d54f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" [0183.533] wcscat (in: _Dest=0x3d54f00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\" [0183.533] wcscat (in: _Dest=0x3d54f00, _Source="craw_window.css" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" [0184.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d54f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0184.409] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa1ddb600, ftLastWriteTime.dwHighDateTime=0x1cec368, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 0 [0184.410] FindClose (in: hFindFile=0x3dcf950 | out: hFindFile=0x3dcf950) returned 1 [0184.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0184.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de70b8) returned 1 [0184.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea4b8) returned 1 Thread: id = 5530 os_tid = 0x23bc [0182.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x3dea9b8 [0182.553] wcscpy (in: _Dest=0x3dea9b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" [0182.553] wcscat (in: _Dest=0x3dea9b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\" [0182.554] wcscat (in: _Dest=0x3dea9b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*" [0182.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0182.554] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa90 [0183.670] wcscmp (_String1=".", _String2=".") returned 0 [0183.670] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5cfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4e5cfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.670] wcscmp (_String1="..", _String2=".") returned 1 [0183.670] wcscmp (_String1="..", _String2="..") returned 0 [0183.670] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1 [0183.670] wcscmp (_String1="craw_window.html", _String2=".") returned 1 [0183.670] wcscmp (_String1="craw_window.html", _String2="..") returned 1 [0183.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55968 [0183.671] wcscpy (in: _Dest=0x3d55968, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" [0183.671] wcscat (in: _Dest=0x3d55968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\" [0183.671] wcscat (in: _Dest=0x3d55968, _Source="craw_window.html" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" [0184.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0184.400] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 0 [0184.400] FindClose (in: hFindFile=0x3dcfa90 | out: hFindFile=0x3dcfa90) returned 1 [0184.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0184.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea9b8) returned 1 [0184.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea5b8) returned 1 Thread: id = 5531 os_tid = 0x23c0 [0182.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bbf20 [0182.555] wcscpy (in: _Dest=0x30bbf20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0182.555] wcscat (in: _Dest=0x30bbf20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0182.555] wcscat (in: _Dest=0x30bbf20, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*" [0182.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0182.555] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54145b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0183.930] wcscmp (_String1=".", _String2=".") returned 0 [0183.930] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54145b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.930] wcscmp (_String1="..", _String2=".") returned 1 [0183.930] wcscmp (_String1="..", _String2="..") returned 0 [0183.930] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e5d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1 [0183.930] wcscmp (_String1="flapper.gif", _String2=".") returned 1 [0183.930] wcscmp (_String1="flapper.gif", _String2="..") returned 1 [0183.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7a38fc0 [0183.931] wcscpy (in: _Dest=0x7a38fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0183.931] wcscat (in: _Dest=0x7a38fc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0183.931] wcscat (in: _Dest=0x7a38fc0, _Source="flapper.gif" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" [0184.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a38fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0184.350] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54145b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0184.350] wcscmp (_String1="icon_128.png", _String2=".") returned 1 [0184.350] wcscmp (_String1="icon_128.png", _String2="..") returned 1 [0184.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b80448 [0184.350] wcscpy (in: _Dest=0x7b80448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0184.350] wcscat (in: _Dest=0x7b80448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0184.350] wcscat (in: _Dest=0x7b80448, _Source="icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" [0184.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4 [0184.352] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e5cfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe54145b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0184.352] wcscmp (_String1="icon_16.png", _String2=".") returned 1 [0184.352] wcscmp (_String1="icon_16.png", _String2="..") returned 1 [0184.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x300d718 [0184.352] wcscpy (in: _Dest=0x300d718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0184.352] wcscat (in: _Dest=0x300d718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0184.352] wcscat (in: _Dest=0x300d718, _Source="icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" [0184.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x300d718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0184.354] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e83100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4e84870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1 [0184.354] wcscmp (_String1="topbar_floating_button.png", _String2=".") returned 1 [0184.354] wcscmp (_String1="topbar_floating_button.png", _String2="..") returned 1 [0184.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3eca1b0 [0184.354] wcscpy (in: _Dest=0x3eca1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0184.355] wcscat (in: _Dest=0x3eca1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0184.355] wcscat (in: _Dest=0x3eca1b0, _Source="topbar_floating_button.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" [0184.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eca1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0184.356] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4e83100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f2a8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1 [0184.356] wcscmp (_String1="topbar_floating_button_close.png", _String2=".") returned 1 [0184.356] wcscmp (_String1="topbar_floating_button_close.png", _String2="..") returned 1 [0184.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2ff8 [0184.356] wcscpy (in: _Dest=0x3ea2ff8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0184.357] wcscat (in: _Dest=0x3ea2ff8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0184.357] wcscat (in: _Dest=0x3ea2ff8, _Source="topbar_floating_button_close.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" [0184.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ea2ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0184.358] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f2fea0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f31de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1 [0184.358] wcscmp (_String1="topbar_floating_button_hover.png", _String2=".") returned 1 [0184.358] wcscmp (_String1="topbar_floating_button_hover.png", _String2="..") returned 1 [0184.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3140 [0184.358] wcscpy (in: _Dest=0x3ea3140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0184.359] wcscat (in: _Dest=0x3ea3140, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0184.359] wcscat (in: _Dest=0x3ea3140, _Source="topbar_floating_button_hover.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" [0184.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ea3140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0184.360] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f34cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f39310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1 [0184.360] wcscmp (_String1="topbar_floating_button_maximize.png", _String2=".") returned 1 [0184.360] wcscmp (_String1="topbar_floating_button_maximize.png", _String2="..") returned 1 [0184.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ea3288 [0184.361] wcscpy (in: _Dest=0x3ea3288, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0184.361] wcscat (in: _Dest=0x3ea3288, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0184.361] wcscat (in: _Dest=0x3ea3288, _Source="topbar_floating_button_maximize.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" [0184.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ea3288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0184.362] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f3c1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f3e130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1 [0184.362] wcscmp (_String1="topbar_floating_button_pressed.png", _String2=".") returned 1 [0184.362] wcscmp (_String1="topbar_floating_button_pressed.png", _String2="..") returned 1 [0184.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x3ea33d0 [0184.363] wcscpy (in: _Dest=0x3ea33d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" [0184.363] wcscat (in: _Dest=0x3ea33d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0184.363] wcscat (in: _Dest=0x3ea33d0, _Source="topbar_floating_button_pressed.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" [0184.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ea33d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98 [0184.364] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f3c1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f3e130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x7c8df500, ftLastWriteTime.dwHighDateTime=0x1ce9383, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 0 [0184.364] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0184.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0184.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbf20) returned 1 [0184.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea6b8) returned 1 Thread: id = 5532 os_tid = 0x23c4 [0182.555] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json")) returned 0x2020 [0183.673] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0186.495] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5a0 [0186.496] GetFileSizeEx (in: hFile=0x5a0, lpFileSize=0x99ffaec | out: lpFileSize=0x99ffaec*=1322) returned 1 [0186.496] SetFilePointerEx (in: hFile=0x5a0, liDistanceToMove=0x526, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.496] ReadFile (in: hFile=0x5a0, lpBuffer=0x99ffac8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x99ffad8, lpOverlapped=0x0 | out: lpBuffer=0x99ffac8*, lpNumberOfBytesRead=0x99ffad8*=0x4, lpOverlapped=0x0) returned 1 [0186.498] SetFilePointerEx (in: hFile=0x5a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4e8 [0186.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0186.498] NtQuerySystemTime (in: CurrentTime=0x99ffa60 | out: CurrentTime=0x99ffa60*=132462177650772000) returned 0x0 [0186.498] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x34ff502d [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x3a5f73b8 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x1ad29431 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x221a9dbd [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0xfdbf748 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x35b109fb [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x62d1145a [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x60c9e28c [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x5102ef0e [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x64095af9 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x6248d7ac [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x56e30927 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x11a63852 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x4dd7c97 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x321c3a25 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x605007c7 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x5f11ca32 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x15dd926c [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x37132058 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x3240e2ef [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x1ba56110 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x1fbf118b [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x1c87edc9 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x46fbf5be [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x29afa786 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x205f367f [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x14cc1931 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x766bb428 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x7b5830e2 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x6430faa4 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x54e80425 [0186.499] RtlRandomEx (in: Seed=0x99ffa58 | out: Seed=0x99ffa58) returned 0x60ce796f [0186.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0186.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0186.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d503a0 [0186.507] ReadFile (in: hFile=0x5a0, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x52a, lpNumberOfBytesRead=0x99ffa54, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0x99ffa54*=0x52a, lpOverlapped=0x0) returned 1 [0186.508] SetFilePointerEx (in: hFile=0x5a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.508] WriteFile (in: hFile=0x5a0, lpBuffer=0x7d503a0*, nNumberOfBytesToWrite=0x52a, lpNumberOfBytesWritten=0x99ffa58, lpOverlapped=0x0 | out: lpBuffer=0x7d503a0*, lpNumberOfBytesWritten=0x99ffa58*=0x52a, lpOverlapped=0x0) returned 1 [0189.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0189.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaad0 [0189.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaad0) returned 1 [0189.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d503a0) returned 1 [0189.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0189.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0189.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85788) returned 1 [0189.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0189.126] SetFilePointerEx (in: hFile=0x5a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.126] WriteFile (in: hFile=0x5a0, lpBuffer=0x7a38ea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x99ffae0, lpOverlapped=0x0 | out: lpBuffer=0x7a38ea8*, lpNumberOfBytesWritten=0x99ffae0*=0x10c, lpOverlapped=0x0) returned 1 [0190.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25b30 [0190.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3eaa8 [0190.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0190.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0190.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec6508 [0190.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0190.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0190.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0190.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0190.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25b30) returned 1 [0190.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7970 [0190.003] sprintf (in: _Dest=0x7ad7970, _Format="%c%c" | out: _Dest="c0") returned 2 [0190.003] sprintf (in: _Dest=0x7ad7972, _Format="%c%c" | out: _Dest="b1") returned 2 [0190.003] sprintf (in: _Dest=0x7ad7974, _Format="%c%c" | out: _Dest="8d") returned 2 [0190.003] sprintf (in: _Dest=0x7ad7976, _Format="%c%c" | out: _Dest="36") returned 2 [0190.003] sprintf (in: _Dest=0x7ad7978, _Format="%c%c" | out: _Dest="fa") returned 2 [0190.003] sprintf (in: _Dest=0x7ad797a, _Format="%c%c" | out: _Dest="e7") returned 2 [0190.003] sprintf (in: _Dest=0x7ad797c, _Format="%c%c" | out: _Dest="6b") returned 2 [0190.003] sprintf (in: _Dest=0x7ad797e, _Format="%c%c" | out: _Dest="28") returned 2 [0190.003] sprintf (in: _Dest=0x7ad7980, _Format="%c%c" | out: _Dest="b2") returned 2 [0190.003] sprintf (in: _Dest=0x7ad7982, _Format="%c%c" | out: _Dest="77") returned 2 [0190.004] sprintf (in: _Dest=0x7ad7984, _Format="%c%c" | out: _Dest="bf") returned 2 [0190.004] sprintf (in: _Dest=0x7ad7986, _Format="%c%c" | out: _Dest="3e") returned 2 [0190.004] sprintf (in: _Dest=0x7ad7988, _Format="%c%c" | out: _Dest="3c") returned 2 [0190.004] sprintf (in: _Dest=0x7ad798a, _Format="%c%c" | out: _Dest="8a") returned 2 [0190.004] sprintf (in: _Dest=0x7ad798c, _Format="%c%c" | out: _Dest="f8") returned 2 [0190.004] sprintf (in: _Dest=0x7ad798e, _Format="%c%c" | out: _Dest="ba") returned 2 [0190.004] sprintf (in: _Dest=0x7ad7990, _Format="%c%c" | out: _Dest="0b") returned 2 [0190.004] sprintf (in: _Dest=0x7ad7992, _Format="%c%c" | out: _Dest="ea") returned 2 [0190.004] sprintf (in: _Dest=0x7ad7994, _Format="%c%c" | out: _Dest="26") returned 2 [0190.004] sprintf (in: _Dest=0x7ad7996, _Format="%c%c" | out: _Dest="ac") returned 2 [0190.004] sprintf (in: _Dest=0x7ad7998, _Format="%c%c" | out: _Dest="06") returned 2 [0190.004] sprintf (in: _Dest=0x7ad799a, _Format="%c%c" | out: _Dest="ea") returned 2 [0190.004] sprintf (in: _Dest=0x7ad799c, _Format="%c%c" | out: _Dest="40") returned 2 [0190.004] sprintf (in: _Dest=0x7ad799e, _Format="%c%c" | out: _Dest="a7") returned 2 [0190.004] sprintf (in: _Dest=0x7ad79a0, _Format="%c%c" | out: _Dest="e5") returned 2 [0190.004] sprintf (in: _Dest=0x7ad79a2, _Format="%c%c" | out: _Dest="47") returned 2 [0190.004] RtlInitAnsiString (in: DestinationString=0x99ffa68, SourceString="c0b18d36fae76b28b277bf3e3c8af8ba0bea26ac06ea40a7e547" | out: DestinationString="c0b18d36fae76b28b277bf3e3c8af8ba0bea26ac06ea40a7e547") [0190.004] RtlAnsiStringToUnicodeString (in: DestinationString=0x99ffa60, SourceString="c0b18d36fae76b28b277bf3e3c8af8ba0bea26ac06ea40a7e547", AllocateDestinationString=1 | out: DestinationString="c0b18d36fae76b28b277bf3e3c8af8ba0bea26ac06ea40a7e547") returned 0x0 [0190.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3def0 [0190.005] wcscat (in: _Dest=0x7cb34f0, _Source="c0b18d36fae76" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\c0b18d36fae76") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\c0b18d36fae76" [0190.005] wcscat (in: _Dest=0x7cb34f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\c0b18d36fae76.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\c0b18d36fae76.68814f" [0190.005] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\c0b18d36fae76.68814f", NtPathName=0x99ffa58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\c0b18d36fae76.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3eca558 [0190.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca558) returned 1 [0190.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a49be8) returned 1 [0190.044] NtQueryInformationFile (in: FileHandle=0x5a0, IoStatusBlock=0x99ffa30, FileInformation=0x99ffa38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x99ffa30, FileInformation=0x99ffa38) returned 0x0 [0190.044] NtSetInformationFile (FileHandle=0x5a0, IoStatusBlock=0x99ffa30, FileInformation=0x99ffa38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb34f0) returned 1 [0190.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0190.057] FlushFileBuffers (hFile=0x5a0) returned 1 [0190.609] CloseHandle (hObject=0x5a0) returned 1 [0192.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7cac8 [0192.428] wcscpy (in: _Dest=0x7b7cac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\" [0192.428] wcscat (in: _Dest=0x7b7cac8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814F-Readme.txt" [0192.429] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\68814f-readme.txt")) returned 0x2020 [0192.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cac8) returned 1 [0192.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debf68) returned 1 Thread: id = 5533 os_tid = 0x23c8 [0182.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bc340 [0182.556] wcscpy (in: _Dest=0x30bc340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0182.556] wcscat (in: _Dest=0x30bc340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0182.556] wcscat (in: _Dest=0x30bc340, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*" [0182.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0182.556] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0183.929] wcscmp (_String1=".", _String2=".") returned 0 [0183.929] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.929] wcscmp (_String1="..", _String2=".") returned 1 [0183.929] wcscmp (_String1="..", _String2="..") returned 0 [0183.930] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0183.930] wcscmp (_String1="bg", _String2=".") returned 1 [0183.930] wcscmp (_String1="bg", _String2="..") returned 1 [0183.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3deaf00 [0183.930] wcscpy (in: _Dest=0x3deaf00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0183.930] wcscat (in: _Dest=0x3deaf00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0183.930] wcscat (in: _Dest=0x3deaf00, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" [0187.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3deaf00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0187.552] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0187.552] wcscmp (_String1="ca", _String2=".") returned 1 [0187.552] wcscmp (_String1="ca", _String2="..") returned 1 [0187.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38c78 [0187.552] wcscpy (in: _Dest=0x7a38c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.552] wcscat (in: _Dest=0x7a38c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.552] wcscat (in: _Dest=0x7a38c78, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" [0187.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0187.554] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0187.554] wcscmp (_String1="cs", _String2=".") returned 1 [0187.554] wcscmp (_String1="cs", _String2="..") returned 1 [0187.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d158 [0187.554] wcscpy (in: _Dest=0x7b7d158, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.554] wcscat (in: _Dest=0x7b7d158, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.554] wcscat (in: _Dest=0x7b7d158, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" [0187.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0187.555] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0187.555] wcscmp (_String1="da", _String2=".") returned 1 [0187.555] wcscmp (_String1="da", _String2="..") returned 1 [0187.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d270 [0187.556] wcscpy (in: _Dest=0x7b7d270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.556] wcscat (in: _Dest=0x7b7d270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.556] wcscat (in: _Dest=0x7b7d270, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" [0187.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580 [0187.557] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0187.557] wcscmp (_String1="de", _String2=".") returned 1 [0187.557] wcscmp (_String1="de", _String2="..") returned 1 [0187.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d388 [0187.558] wcscpy (in: _Dest=0x7b7d388, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.558] wcscat (in: _Dest=0x7b7d388, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.558] wcscat (in: _Dest=0x7b7d388, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" [0187.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0187.559] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0187.559] wcscmp (_String1="el", _String2=".") returned 1 [0187.559] wcscmp (_String1="el", _String2="..") returned 1 [0187.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d4a0 [0187.560] wcscpy (in: _Dest=0x7b7d4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.560] wcscat (in: _Dest=0x7b7d4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.560] wcscat (in: _Dest=0x7b7d4a0, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" [0187.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0187.561] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0187.561] wcscmp (_String1="en", _String2=".") returned 1 [0187.561] wcscmp (_String1="en", _String2="..") returned 1 [0187.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d5b8 [0187.562] wcscpy (in: _Dest=0x7b7d5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.562] wcscat (in: _Dest=0x7b7d5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.562] wcscat (in: _Dest=0x7b7d5b8, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" [0187.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0187.563] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0187.563] wcscmp (_String1="en_GB", _String2=".") returned 1 [0187.563] wcscmp (_String1="en_GB", _String2="..") returned 1 [0187.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7b7d6d0 [0187.564] wcscpy (in: _Dest=0x7b7d6d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.564] wcscat (in: _Dest=0x7b7d6d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.564] wcscat (in: _Dest=0x7b7d6d0, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" [0187.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994 [0187.565] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0187.565] wcscmp (_String1="es", _String2=".") returned 1 [0187.565] wcscmp (_String1="es", _String2="..") returned 1 [0187.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d7e8 [0187.565] wcscpy (in: _Dest=0x7b7d7e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.565] wcscat (in: _Dest=0x7b7d7e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.565] wcscat (in: _Dest=0x7b7d7e8, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" [0187.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d7e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2408 [0187.567] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4591060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0187.567] wcscmp (_String1="es_419", _String2=".") returned 1 [0187.567] wcscmp (_String1="es_419", _String2="..") returned 1 [0187.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x7b7d900 [0187.567] wcscpy (in: _Dest=0x7b7d900, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.567] wcscat (in: _Dest=0x7b7d900, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.567] wcscat (in: _Dest=0x7b7d900, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" [0187.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998 [0187.569] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0187.569] wcscmp (_String1="et", _String2=".") returned 1 [0187.569] wcscmp (_String1="et", _String2="..") returned 1 [0187.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7da18 [0187.569] wcscpy (in: _Dest=0x7b7da18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.569] wcscat (in: _Dest=0x7b7da18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.569] wcscat (in: _Dest=0x7b7da18, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" [0187.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7da18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0187.570] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0187.570] wcscmp (_String1="fi", _String2=".") returned 1 [0187.571] wcscmp (_String1="fi", _String2="..") returned 1 [0187.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7db30 [0187.571] wcscpy (in: _Dest=0x7b7db30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.571] wcscat (in: _Dest=0x7b7db30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.571] wcscat (in: _Dest=0x7b7db30, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" [0187.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0187.572] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0187.572] wcscmp (_String1="fil", _String2=".") returned 1 [0187.572] wcscmp (_String1="fil", _String2="..") returned 1 [0187.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7dc48 [0187.572] wcscpy (in: _Dest=0x7b7dc48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.572] wcscat (in: _Dest=0x7b7dc48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.572] wcscat (in: _Dest=0x7b7dc48, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" [0187.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7dc48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4 [0187.573] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0187.573] wcscmp (_String1="fr", _String2=".") returned 1 [0187.573] wcscmp (_String1="fr", _String2="..") returned 1 [0187.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7dd60 [0187.573] wcscpy (in: _Dest=0x7b7dd60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.573] wcscat (in: _Dest=0x7b7dd60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.573] wcscat (in: _Dest=0x7b7dd60, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" [0187.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7dd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0187.574] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0187.574] wcscmp (_String1="hi", _String2=".") returned 1 [0187.574] wcscmp (_String1="hi", _String2="..") returned 1 [0187.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7de78 [0187.575] wcscpy (in: _Dest=0x7b7de78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.575] wcscat (in: _Dest=0x7b7de78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.575] wcscat (in: _Dest=0x7b7de78, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" [0187.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7de78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0187.576] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0187.576] wcscmp (_String1="hr", _String2=".") returned 1 [0187.576] wcscmp (_String1="hr", _String2="..") returned 1 [0187.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7df90 [0187.576] wcscpy (in: _Dest=0x7b7df90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.576] wcscat (in: _Dest=0x7b7df90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.576] wcscat (in: _Dest=0x7b7df90, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" [0187.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7df90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0187.577] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0187.577] wcscmp (_String1="hu", _String2=".") returned 1 [0187.577] wcscmp (_String1="hu", _String2="..") returned 1 [0187.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7e0a8 [0187.577] wcscpy (in: _Dest=0x7b7e0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.577] wcscat (in: _Dest=0x7b7e0a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.577] wcscat (in: _Dest=0x7b7e0a8, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" [0187.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7e0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0187.578] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0187.578] wcscmp (_String1="id", _String2=".") returned 1 [0187.578] wcscmp (_String1="id", _String2="..") returned 1 [0187.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7e1c0 [0187.578] wcscpy (in: _Dest=0x7b7e1c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.578] wcscat (in: _Dest=0x7b7e1c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.578] wcscat (in: _Dest=0x7b7e1c0, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" [0187.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7e1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0187.580] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cc500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47cc500, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0187.580] wcscmp (_String1="it", _String2=".") returned 1 [0187.580] wcscmp (_String1="it", _String2="..") returned 1 [0187.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec710 [0187.580] wcscpy (in: _Dest=0x3dec710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.580] wcscat (in: _Dest=0x3dec710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.580] wcscat (in: _Dest=0x3dec710, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" [0187.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dec710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0187.581] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47f2660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0187.581] wcscmp (_String1="ja", _String2=".") returned 1 [0187.581] wcscmp (_String1="ja", _String2="..") returned 1 [0187.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec940 [0187.581] wcscpy (in: _Dest=0x3dec940, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.581] wcscat (in: _Dest=0x3dec940, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.581] wcscat (in: _Dest=0x3dec940, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" [0187.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dec940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d4 [0187.582] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0187.582] wcscmp (_String1="ko", _String2=".") returned 1 [0187.582] wcscmp (_String1="ko", _String2="..") returned 1 [0187.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec4e0 [0187.583] wcscpy (in: _Dest=0x3dec4e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.583] wcscat (in: _Dest=0x3dec4e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.583] wcscat (in: _Dest=0x3dec4e0, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" [0187.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3dec4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408 [0187.584] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0187.584] wcscmp (_String1="lt", _String2=".") returned 1 [0187.584] wcscmp (_String1="lt", _String2="..") returned 1 [0187.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cac020 [0187.584] wcscpy (in: _Dest=0x7cac020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.584] wcscat (in: _Dest=0x7cac020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.584] wcscat (in: _Dest=0x7cac020, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" [0187.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140c [0187.585] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe483e920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe483e920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0187.585] wcscmp (_String1="lv", _String2=".") returned 1 [0187.585] wcscmp (_String1="lv", _String2="..") returned 1 [0187.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cac138 [0187.586] wcscpy (in: _Dest=0x7cac138, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.586] wcscat (in: _Dest=0x7cac138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.586] wcscat (in: _Dest=0x7cac138, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" [0187.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0187.587] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4864a80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4864a80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0187.587] wcscmp (_String1="nb", _String2=".") returned 1 [0187.587] wcscmp (_String1="nb", _String2="..") returned 1 [0187.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cac250 [0187.587] wcscpy (in: _Dest=0x7cac250, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0187.587] wcscat (in: _Dest=0x7cac250, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0187.587] wcscat (in: _Dest=0x7cac250, _Source="nb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" [0187.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010 [0188.429] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488abe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe488abe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0188.429] wcscmp (_String1="nl", _String2=".") returned 1 [0188.429] wcscmp (_String1="nl", _String2="..") returned 1 [0188.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38c78 [0188.429] wcscpy (in: _Dest=0x7a38c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0188.429] wcscat (in: _Dest=0x7a38c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0188.429] wcscat (in: _Dest=0x7a38c78, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" [0190.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0190.829] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48b0d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d6ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48d6ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0190.829] wcscmp (_String1="pl", _String2=".") returned 1 [0190.829] wcscmp (_String1="pl", _String2="..") returned 1 [0190.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb6c28 [0190.829] wcscpy (in: _Dest=0x7cb6c28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.829] wcscat (in: _Dest=0x7cb6c28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.829] wcscat (in: _Dest=0x7cb6c28, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" [0190.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb6c28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0190.831] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48fd000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4923160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0190.831] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0190.831] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0190.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cb6d40 [0190.831] wcscpy (in: _Dest=0x7cb6d40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.831] wcscat (in: _Dest=0x7cb6d40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.831] wcscat (in: _Dest=0x7cb6d40, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" [0190.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb6d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0190.832] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49492c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49492c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0190.832] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0190.832] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0190.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cb6e58 [0190.832] wcscpy (in: _Dest=0x7cb6e58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.832] wcscat (in: _Dest=0x7cb6e58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.832] wcscat (in: _Dest=0x7cb6e58, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" [0190.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb6e58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0190.834] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe496f420, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0190.834] wcscmp (_String1="ro", _String2=".") returned 1 [0190.834] wcscmp (_String1="ro", _String2="..") returned 1 [0190.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb6f70 [0190.834] wcscpy (in: _Dest=0x7cb6f70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.834] wcscat (in: _Dest=0x7cb6f70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.834] wcscat (in: _Dest=0x7cb6f70, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" [0190.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb6f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0190.835] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4995580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4995580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0190.835] wcscmp (_String1="ru", _String2=".") returned 1 [0190.835] wcscmp (_String1="ru", _String2="..") returned 1 [0190.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb7088 [0190.835] wcscpy (in: _Dest=0x7cb7088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.836] wcscat (in: _Dest=0x7cb7088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.836] wcscat (in: _Dest=0x7cb7088, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" [0190.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb7088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0190.837] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0190.837] wcscmp (_String1="sk", _String2=".") returned 1 [0190.837] wcscmp (_String1="sk", _String2="..") returned 1 [0190.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb71a0 [0190.837] wcscpy (in: _Dest=0x7cb71a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.837] wcscat (in: _Dest=0x7cb71a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.837] wcscat (in: _Dest=0x7cb71a0, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" [0190.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb71a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0190.839] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a079a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a079a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0190.839] wcscmp (_String1="sl", _String2=".") returned 1 [0190.839] wcscmp (_String1="sl", _String2="..") returned 1 [0190.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb72b8 [0190.839] wcscpy (in: _Dest=0x7cb72b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.839] wcscat (in: _Dest=0x7cb72b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.839] wcscat (in: _Dest=0x7cb72b8, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" [0190.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb72b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0190.841] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a79dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a9ff20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a9ff20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0190.841] wcscmp (_String1="sr", _String2=".") returned 1 [0190.841] wcscmp (_String1="sr", _String2="..") returned 1 [0190.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb73d0 [0190.841] wcscpy (in: _Dest=0x7cb73d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.841] wcscat (in: _Dest=0x7cb73d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.841] wcscat (in: _Dest=0x7cb73d0, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" [0190.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb73d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0190.842] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac6080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b384a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b384a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0190.843] wcscmp (_String1="sv", _String2=".") returned 1 [0190.843] wcscmp (_String1="sv", _String2="..") returned 1 [0190.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb74e8 [0190.843] wcscpy (in: _Dest=0x7cb74e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.843] wcscat (in: _Dest=0x7cb74e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.843] wcscat (in: _Dest=0x7cb74e8, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" [0190.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb74e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0190.844] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0190.845] wcscmp (_String1="th", _String2=".") returned 1 [0190.845] wcscmp (_String1="th", _String2="..") returned 1 [0190.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb7600 [0190.845] wcscpy (in: _Dest=0x7cb7600, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.845] wcscat (in: _Dest=0x7cb7600, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.845] wcscat (in: _Dest=0x7cb7600, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" [0190.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb7600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0190.846] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0190.846] wcscmp (_String1="tr", _String2=".") returned 1 [0190.846] wcscmp (_String1="tr", _String2="..") returned 1 [0190.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb7718 [0190.847] wcscpy (in: _Dest=0x7cb7718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.847] wcscat (in: _Dest=0x7cb7718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.847] wcscat (in: _Dest=0x7cb7718, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" [0190.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb7718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0190.848] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0190.848] wcscmp (_String1="uk", _String2=".") returned 1 [0190.848] wcscmp (_String1="uk", _String2="..") returned 1 [0190.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb7830 [0190.848] wcscpy (in: _Dest=0x7cb7830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.848] wcscat (in: _Dest=0x7cb7830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.849] wcscat (in: _Dest=0x7cb7830, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" [0190.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb7830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0190.850] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0190.850] wcscmp (_String1="vi", _String2=".") returned 1 [0190.850] wcscmp (_String1="vi", _String2="..") returned 1 [0190.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb7948 [0190.851] wcscpy (in: _Dest=0x7cb7948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.851] wcscat (in: _Dest=0x7cb7948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.851] wcscat (in: _Dest=0x7cb7948, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" [0190.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb7948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0190.852] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0190.853] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0190.853] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0190.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cb7a60 [0190.853] wcscpy (in: _Dest=0x7cb7a60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.853] wcscat (in: _Dest=0x7cb7a60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.853] wcscat (in: _Dest=0x7cb7a60, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" [0190.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb7a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0190.855] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0190.855] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0190.855] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0190.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cb7b78 [0190.855] wcscpy (in: _Dest=0x7cb7b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" [0190.855] wcscat (in: _Dest=0x7cb7b78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\" [0190.855] wcscat (in: _Dest=0x7cb7b78, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" [0190.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cb7b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0190.857] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0190.857] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0190.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0190.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0190.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc550) returned 1 Thread: id = 5534 os_tid = 0x1c30 [0182.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3deaf00 [0182.557] wcscpy (in: _Dest=0x3deaf00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" [0182.557] wcscat (in: _Dest=0x3deaf00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\" [0182.557] wcscat (in: _Dest=0x3deaf00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*" [0182.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0182.557] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f56fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f596b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f596b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0183.508] wcscmp (_String1=".", _String2=".") returned 0 [0183.508] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4f56fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f596b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4f596b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.508] wcscmp (_String1="..", _String2=".") returned 1 [0183.508] wcscmp (_String1="..", _String2="..") returned 0 [0183.508] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f596b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f5b5f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x107d6c00, ftLastWriteTime.dwHighDateTime=0x1d29826, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0183.509] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0183.509] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0183.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12c) returned 0x3ec9e08 [0183.509] wcscpy (in: _Dest=0x3ec9e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" [0183.509] wcscat (in: _Dest=0x3ec9e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\" [0183.509] wcscat (in: _Dest=0x3ec9e08, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" [0183.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec9e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0183.786] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4f596b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4f5b5f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x107d6c00, ftLastWriteTime.dwHighDateTime=0x1d29826, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0183.786] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0183.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0183.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deaf00) returned 1 [0183.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc658) returned 1 Thread: id = 5535 os_tid = 0x23d0 [0182.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif")) returned 0x20 [0182.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0182.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.561] GetLastError () returned 0x5 [0182.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF", dwFileAttributes=0x20) returned 0 [0182.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 5536 os_tid = 0x23d4 [0182.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg")) returned 0x20 [0182.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0182.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.563] GetLastError () returned 0x5 [0182.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0182.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011188) returned 1 Thread: id = 5537 os_tid = 0x23d8 [0182.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp")) returned 0x20 [0182.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0182.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.565] GetLastError () returned 0x5 [0182.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0182.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64250) returned 1 Thread: id = 5538 os_tid = 0x23dc [0182.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif")) returned 0x20 [0182.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif", dwFileAttributes=0x20) returned 0 [0182.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.567] GetLastError () returned 0x5 [0182.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif", dwFileAttributes=0x20) returned 0 [0182.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86190) returned 1 Thread: id = 5539 os_tid = 0x23e4 [0182.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif")) returned 0x20 [0182.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0182.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.569] GetLastError () returned 0x5 [0182.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0182.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57438) returned 1 Thread: id = 5540 os_tid = 0x2450 [0182.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif")) returned 0x20 [0182.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0182.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0182.571] GetLastError () returned 0x5 [0182.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0182.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85220) returned 1 Thread: id = 5541 os_tid = 0x2458 [0182.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif")) returned 0x20 [0183.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0183.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.534] GetLastError () returned 0x5 [0183.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0183.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85f20) returned 1 Thread: id = 5542 os_tid = 0x245c [0182.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif")) returned 0x20 [0183.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0183.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.700] GetLastError () returned 0x5 [0183.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0183.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d860c0) returned 1 Thread: id = 5543 os_tid = 0x2460 [0182.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif")) returned 0x20 [0183.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0183.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.705] GetLastError () returned 0x5 [0183.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0183.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3012bb0) returned 1 Thread: id = 5544 os_tid = 0x1c48 [0182.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif")) returned 0x20 [0183.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0183.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.521] GetLastError () returned 0x5 [0183.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0183.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 5545 os_tid = 0x2468 [0182.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif")) returned 0x20 [0183.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0183.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.702] GetLastError () returned 0x5 [0183.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif", dwFileAttributes=0x20) returned 0 [0183.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4448) returned 1 Thread: id = 5546 os_tid = 0x246c [0182.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif")) returned 0x20 [0183.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0183.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.699] GetLastError () returned 0x5 [0183.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0183.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85ff0) returned 1 Thread: id = 5547 os_tid = 0x2470 [0182.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif")) returned 0x20 [0183.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0183.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.721] GetLastError () returned 0x5 [0183.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0183.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 Thread: id = 5548 os_tid = 0x8e8 [0182.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif")) returned 0x20 [0183.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0183.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.720] GetLastError () returned 0x5 [0183.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0183.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30115c0) returned 1 Thread: id = 5549 os_tid = 0x2474 [0182.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif")) returned 0x20 [0183.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0183.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.718] GetLastError () returned 0x5 [0183.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0183.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ddcbb0) returned 1 Thread: id = 5550 os_tid = 0x2478 [0182.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif")) returned 0x20 [0183.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0183.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.717] GetLastError () returned 0x5 [0183.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0183.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d864d0) returned 1 Thread: id = 5551 os_tid = 0x247c [0182.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif")) returned 0x20 [0183.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0183.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.716] GetLastError () returned 0x5 [0183.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0183.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d865a0) returned 1 Thread: id = 5552 os_tid = 0x2480 [0182.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif")) returned 0x20 [0183.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0183.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.714] GetLastError () returned 0x5 [0183.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0183.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb198) returned 1 Thread: id = 5553 os_tid = 0x2484 [0182.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif")) returned 0x20 [0183.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0183.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.713] GetLastError () returned 0x5 [0183.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0183.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb270) returned 1 Thread: id = 5554 os_tid = 0x249c [0182.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif")) returned 0x20 [0183.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif", dwFileAttributes=0x20) returned 0 [0183.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.712] GetLastError () returned 0x5 [0183.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif", dwFileAttributes=0x20) returned 0 [0183.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86670) returned 1 Thread: id = 5555 os_tid = 0x24a0 [0182.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif")) returned 0x20 [0183.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0183.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.710] GetLastError () returned 0x5 [0183.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0183.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb348) returned 1 Thread: id = 5556 os_tid = 0x27d8 [0182.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif")) returned 0x20 [0183.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0183.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.709] GetLastError () returned 0x5 [0183.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0183.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86740) returned 1 Thread: id = 5557 os_tid = 0x24a4 [0182.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif")) returned 0x20 [0183.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0183.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.708] GetLastError () returned 0x5 [0183.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0183.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb420) returned 1 Thread: id = 5558 os_tid = 0x24a8 [0183.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif")) returned 0x20 [0183.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif", dwFileAttributes=0x20) returned 0 [0183.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.707] GetLastError () returned 0x5 [0183.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif", dwFileAttributes=0x20) returned 0 [0183.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86810) returned 1 Thread: id = 5559 os_tid = 0x24ac [0183.178] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png")) returned 0x2020 [0183.744] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", dwFileAttributes=0x20) returned 1 [0186.619] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1554 [0186.619] GetFileSizeEx (in: hFile=0x1554, lpFileSize=0xda4fd6c | out: lpFileSize=0xda4fd6c*=6707) returned 1 [0186.619] SetFilePointerEx (in: hFile=0x1554, liDistanceToMove=0x1a2f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.619] ReadFile (in: hFile=0x1554, lpBuffer=0xda4fd48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xda4fd58, lpOverlapped=0x0 | out: lpBuffer=0xda4fd48*, lpNumberOfBytesRead=0xda4fd58*=0x4, lpOverlapped=0x0) returned 1 [0186.622] SetFilePointerEx (in: hFile=0x1554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0186.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0186.622] NtQuerySystemTime (in: CurrentTime=0xda4fce0 | out: CurrentTime=0xda4fce0*=132462177652020000) returned 0x0 [0186.622] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x259a7ff5 [0186.622] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x2665f94c [0186.622] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x209539a1 [0186.622] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x1d1c966 [0186.622] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x5d1f05f2 [0186.622] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x4730a81 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x50c662c5 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x3c7a781 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x75ea7f0 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x14e8989e [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x6312856b [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x854266c [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x20f94b35 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x52fbe7c7 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x639fc497 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x5d05698 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x5a9db11d [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x49aa784f [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x56113f6a [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x6be5b401 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x35efbdb1 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x2794cb43 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x90c7fa8 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x3cd0f5a5 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x21994f4b [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x30776d77 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x23386c79 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x643752b3 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x1a4eb6c [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x20e98bad [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x5fbd7560 [0186.623] RtlRandomEx (in: Seed=0xda4fcd8 | out: Seed=0xda4fcd8) returned 0x23eebc52 [0186.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0186.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d103a0 [0186.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d13fa8 [0186.632] ReadFile (in: hFile=0x1554, lpBuffer=0x7d103a0, nNumberOfBytesToRead=0x1a33, lpNumberOfBytesRead=0xda4fcd4, lpOverlapped=0x0 | out: lpBuffer=0x7d103a0*, lpNumberOfBytesRead=0xda4fcd4*=0x1a33, lpOverlapped=0x0) returned 1 [0186.633] SetFilePointerEx (in: hFile=0x1554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.633] WriteFile (in: hFile=0x1554, lpBuffer=0x7d13fa8*, nNumberOfBytesToWrite=0x1a33, lpNumberOfBytesWritten=0xda4fcd8, lpOverlapped=0x0 | out: lpBuffer=0x7d13fa8*, lpNumberOfBytesWritten=0xda4fcd8*=0x1a33, lpOverlapped=0x0) returned 1 [0187.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0187.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0187.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0187.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d13fa8) returned 1 [0187.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d103a0) returned 1 [0187.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0187.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84f60) returned 1 [0187.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec4398 [0187.050] SetFilePointerEx (in: hFile=0x1554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.050] WriteFile (in: hFile=0x1554, lpBuffer=0x7b7f6b8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xda4fd60, lpOverlapped=0x0 | out: lpBuffer=0x7b7f6b8*, lpNumberOfBytesWritten=0xda4fd60*=0x100, lpOverlapped=0x0) returned 1 [0187.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f6b8) returned 1 [0187.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0187.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fc0) returned 1 [0187.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0187.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bd8) returned 1 [0187.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b4b0) returned 1 [0187.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0187.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31a0) returned 1 [0187.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cad718 [0187.721] wcscpy (in: _Dest=0x7cad718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" [0187.721] wcscat (in: _Dest=0x7cad718, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.68814f" [0187.721] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.68814f", NtPathName=0xda4fcd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca9ab8 [0187.821] FlushFileBuffers (hFile=0x1554) returned 1 [0187.824] CloseHandle (hObject=0x1554) returned 1 [0187.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x7cad718 [0187.841] wcscpy (in: _Dest=0x7cad718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0187.841] wcscat (in: _Dest=0x7cad718, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\68814F-Readme.txt" [0187.841] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\68814f-readme.txt")) returned 0xffffffff [0187.841] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1920 [0187.858] WriteFile (in: hFile=0x1920, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xda4fcf4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xda4fcf4*=0x8b9, lpOverlapped=0x0) returned 1 [0187.860] CloseHandle (hObject=0x1920) returned 1 [0187.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad718) returned 1 [0187.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de71b8) returned 1 Thread: id = 5560 os_tid = 0x27e4 [0183.181] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json")) returned 0x2020 [0183.535] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0186.474] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcdc [0186.474] GetFileSizeEx (in: hFile=0xcdc, lpFileSize=0xc86fec4 | out: lpFileSize=0xc86fec4*=1004) returned 1 [0186.474] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x3e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.475] ReadFile (in: hFile=0xcdc, lpBuffer=0xc86fea0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc86feb0, lpOverlapped=0x0 | out: lpBuffer=0xc86fea0*, lpNumberOfBytesRead=0xc86feb0*=0x4, lpOverlapped=0x0) returned 1 [0186.477] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0186.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4e8 [0186.477] NtQuerySystemTime (in: CurrentTime=0xc86fe38 | out: CurrentTime=0xc86fe38*=132462177650616000) returned 0x0 [0186.477] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x2237bf3e [0186.477] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0xdd24043 [0186.477] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0xd5c5e24 [0186.477] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x68e729ad [0186.477] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x74d14ecc [0186.477] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x1d31944e [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x2e8abd78 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x26b91d00 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x254a1e11 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x6ef6f69c [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x77579a33 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x32a2a8bc [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x5494641 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x1304b4dc [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x37535a03 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x10335c50 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x7c7ae8c5 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x3a3ead4d [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x4e4d8adb [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x6c3e6a72 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x36f3e765 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x46c4403 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x62f4bd71 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x58c20d6f [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x1a1f3af7 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x6bbec040 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0xadf2db6 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x35c74503 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x29cdda62 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x3bd8ec18 [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x30bcee4d [0186.478] RtlRandomEx (in: Seed=0xc86fe30 | out: Seed=0xc86fe30) returned 0x375a5e26 [0186.486] ReadFile (in: hFile=0xcdc, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0x3ec, lpNumberOfBytesRead=0xc86fe2c, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0xc86fe2c*=0x3ec, lpOverlapped=0x0) returned 1 [0186.486] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.486] WriteFile (in: hFile=0xcdc, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0x3ec, lpNumberOfBytesWritten=0xc86fe30, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0xc86fe30*=0x3ec, lpOverlapped=0x0) returned 1 [0187.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0187.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0187.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0187.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0187.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0187.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0187.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e90) returned 1 [0187.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0187.695] SetFilePointerEx (in: hFile=0xcdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.695] WriteFile (in: hFile=0xcdc, lpBuffer=0x7cad2b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc86feb8, lpOverlapped=0x0 | out: lpBuffer=0x7cad2b8*, lpNumberOfBytesWritten=0xc86feb8*=0x10c, lpOverlapped=0x0) returned 1 [0187.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0187.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0187.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0187.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0187.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5ad30 [0187.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0187.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0187.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0187.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0187.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e740f0 [0187.765] sprintf (in: _Dest=0x3e740f0, _Format="%c%c" | out: _Dest="d0") returned 2 [0187.765] sprintf (in: _Dest=0x3e740f2, _Format="%c%c" | out: _Dest="aa") returned 2 [0187.765] sprintf (in: _Dest=0x3e740f4, _Format="%c%c" | out: _Dest="0c") returned 2 [0187.765] sprintf (in: _Dest=0x3e740f6, _Format="%c%c" | out: _Dest="e9") returned 2 [0187.765] sprintf (in: _Dest=0x3e740f8, _Format="%c%c" | out: _Dest="6d") returned 2 [0187.765] sprintf (in: _Dest=0x3e740fa, _Format="%c%c" | out: _Dest="02") returned 2 [0187.765] sprintf (in: _Dest=0x3e740fc, _Format="%c%c" | out: _Dest="cd") returned 2 [0187.765] sprintf (in: _Dest=0x3e740fe, _Format="%c%c" | out: _Dest="63") returned 2 [0187.765] sprintf (in: _Dest=0x3e74100, _Format="%c%c" | out: _Dest="e5") returned 2 [0187.766] sprintf (in: _Dest=0x3e74102, _Format="%c%c" | out: _Dest="85") returned 2 [0187.766] sprintf (in: _Dest=0x3e74104, _Format="%c%c" | out: _Dest="20") returned 2 [0187.766] sprintf (in: _Dest=0x3e74106, _Format="%c%c" | out: _Dest="60") returned 2 [0187.766] sprintf (in: _Dest=0x3e74108, _Format="%c%c" | out: _Dest="97") returned 2 [0187.766] sprintf (in: _Dest=0x3e7410a, _Format="%c%c" | out: _Dest="0d") returned 2 [0187.766] sprintf (in: _Dest=0x3e7410c, _Format="%c%c" | out: _Dest="d7") returned 2 [0187.766] sprintf (in: _Dest=0x3e7410e, _Format="%c%c" | out: _Dest="1c") returned 2 [0187.766] sprintf (in: _Dest=0x3e74110, _Format="%c%c" | out: _Dest="04") returned 2 [0187.766] sprintf (in: _Dest=0x3e74112, _Format="%c%c" | out: _Dest="4b") returned 2 [0187.766] sprintf (in: _Dest=0x3e74114, _Format="%c%c" | out: _Dest="a2") returned 2 [0187.766] sprintf (in: _Dest=0x3e74116, _Format="%c%c" | out: _Dest="4a") returned 2 [0187.766] sprintf (in: _Dest=0x3e74118, _Format="%c%c" | out: _Dest="11") returned 2 [0187.766] sprintf (in: _Dest=0x3e7411a, _Format="%c%c" | out: _Dest="49") returned 2 [0187.766] sprintf (in: _Dest=0x3e7411c, _Format="%c%c" | out: _Dest="0e") returned 2 [0187.766] sprintf (in: _Dest=0x3e7411e, _Format="%c%c" | out: _Dest="ce") returned 2 [0187.766] sprintf (in: _Dest=0x3e74120, _Format="%c%c" | out: _Dest="17") returned 2 [0187.766] sprintf (in: _Dest=0x3e74122, _Format="%c%c" | out: _Dest="64") returned 2 [0187.766] RtlInitAnsiString (in: DestinationString=0xc86fe40, SourceString="d0aa0ce96d02cd63e5852060970dd71c044ba24a11490ece1764" | out: DestinationString="d0aa0ce96d02cd63e5852060970dd71c044ba24a11490ece1764") [0187.766] RtlAnsiStringToUnicodeString (in: DestinationString=0xc86fe38, SourceString="d0aa0ce96d02cd63e5852060970dd71c044ba24a11490ece1764", AllocateDestinationString=1 | out: DestinationString="d0aa0ce96d02cd63e5852060970dd71c044ba24a11490ece1764") returned 0x0 [0187.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e6e8 [0187.767] wcscat (in: _Dest=0x7cad2b8, _Source="d0aa0ce96d02c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\d0aa0ce96d02c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\d0aa0ce96d02c" [0187.767] wcscat (in: _Dest=0x7cad2b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\d0aa0ce96d02c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\d0aa0ce96d02c.68814f" [0187.767] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\d0aa0ce96d02c.68814f", NtPathName=0xc86fe30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\d0aa0ce96d02c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9f40 [0187.830] FlushFileBuffers (hFile=0xcdc) returned 1 [0187.838] CloseHandle (hObject=0xcdc) returned 1 [0187.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x7cad088 [0187.848] wcscpy (in: _Dest=0x7cad088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\" [0187.848] wcscat (in: _Dest=0x7cad088, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\68814F-Readme.txt" [0187.848] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\68814f-readme.txt")) returned 0x2020 [0187.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad088) returned 1 [0187.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 Thread: id = 5561 os_tid = 0x1c9c [0183.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bca78 [0183.182] wcscpy (in: _Dest=0x30bca78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0183.182] wcscat (in: _Dest=0x30bca78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0183.182] wcscat (in: _Dest=0x30bca78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*" [0183.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a550b0 [0183.182] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c72260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e42040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e42040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0183.841] wcscmp (_String1=".", _String2=".") returned 0 [0183.841] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c72260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e42040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e42040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.841] wcscmp (_String1="..", _String2=".") returned 1 [0183.841] wcscmp (_String1="..", _String2="..") returned 0 [0183.841] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c77080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c79790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0183.841] wcscmp (_String1="ar", _String2=".") returned 1 [0183.841] wcscmp (_String1="ar", _String2="..") returned 1 [0183.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7b7bbe0 [0183.841] wcscpy (in: _Dest=0x7b7bbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0183.841] wcscat (in: _Dest=0x7b7bbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0183.841] wcscat (in: _Dest=0x7b7bbe0, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0185.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7bbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0 [0185.010] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c80cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c833d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0185.010] wcscmp (_String1="bg", _String2=".") returned 1 [0185.010] wcscmp (_String1="bg", _String2="..") returned 1 [0185.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x2fa978 [0185.010] wcscpy (in: _Dest=0x2fa978, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.010] wcscat (in: _Dest=0x2fa978, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.010] wcscat (in: _Dest=0x2fa978, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0185.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2fa978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570 [0185.012] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c8a900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c8d010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0185.012] wcscmp (_String1="ca", _String2=".") returned 1 [0185.012] wcscmp (_String1="ca", _String2="..") returned 1 [0185.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7b7fdf0 [0185.012] wcscpy (in: _Dest=0x7b7fdf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.012] wcscat (in: _Dest=0x7b7fdf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.012] wcscat (in: _Dest=0x7b7fdf0, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0185.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7fdf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0185.014] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c94540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c96c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0185.014] wcscmp (_String1="cs", _String2=".") returned 1 [0185.014] wcscmp (_String1="cs", _String2="..") returned 1 [0185.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7b7fef8 [0185.014] wcscpy (in: _Dest=0x7b7fef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.014] wcscat (in: _Dest=0x7b7fef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.014] wcscat (in: _Dest=0x7b7fef8, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0185.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7fef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0185.015] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c9e180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ca2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0185.015] wcscmp (_String1="da", _String2=".") returned 1 [0185.015] wcscmp (_String1="da", _String2="..") returned 1 [0185.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7b80000 [0185.015] wcscpy (in: _Dest=0x7b80000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.016] wcscat (in: _Dest=0x7b80000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.016] wcscat (in: _Dest=0x7b80000, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0185.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b80000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794 [0185.017] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ca7dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cacbe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0185.017] wcscmp (_String1="de", _String2=".") returned 1 [0185.017] wcscmp (_String1="de", _String2="..") returned 1 [0185.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7b80108 [0185.017] wcscpy (in: _Dest=0x7b80108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.017] wcscat (in: _Dest=0x7b80108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.017] wcscat (in: _Dest=0x7b80108, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0185.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b80108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0185.019] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cb4110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cb6820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0185.019] wcscmp (_String1="el", _String2=".") returned 1 [0185.019] wcscmp (_String1="el", _String2="..") returned 1 [0185.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6a198 [0185.019] wcscpy (in: _Dest=0x7a6a198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.019] wcscat (in: _Dest=0x7a6a198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.019] wcscat (in: _Dest=0x7a6a198, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0185.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0185.020] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cbdd50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cd8b00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0185.020] wcscmp (_String1="en_GB", _String2=".") returned 1 [0185.020] wcscmp (_String1="en_GB", _String2="..") returned 1 [0185.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38930 [0185.021] wcscpy (in: _Dest=0x7a38930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.021] wcscat (in: _Dest=0x7a38930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.021] wcscat (in: _Dest=0x7a38930, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0185.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0185.022] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce0030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ce2740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0185.022] wcscmp (_String1="en_US", _String2=".") returned 1 [0185.022] wcscmp (_String1="en_US", _String2="..") returned 1 [0185.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a391f0 [0185.022] wcscpy (in: _Dest=0x7a391f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.022] wcscat (in: _Dest=0x7a391f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.022] wcscat (in: _Dest=0x7a391f0, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0185.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a391f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0185.024] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce9c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cec380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cec380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0185.024] wcscmp (_String1="es", _String2=".") returned 1 [0185.024] wcscmp (_String1="es", _String2="..") returned 1 [0185.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6a2a0 [0185.024] wcscpy (in: _Dest=0x7a6a2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.024] wcscat (in: _Dest=0x7a6a2a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.024] wcscat (in: _Dest=0x7a6a2a0, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0185.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0185.026] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cf38b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cf5fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0185.026] wcscmp (_String1="es_419", _String2=".") returned 1 [0185.026] wcscmp (_String1="es_419", _String2="..") returned 1 [0185.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a390d8 [0185.026] wcscpy (in: _Dest=0x7a390d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.026] wcscat (in: _Dest=0x7a390d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.026] wcscat (in: _Dest=0x7a390d8, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0185.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a390d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0185.027] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cfade0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cffc00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0185.027] wcscmp (_String1="et", _String2=".") returned 1 [0185.027] wcscmp (_String1="et", _String2="..") returned 1 [0185.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6a8d0 [0185.028] wcscpy (in: _Dest=0x7a6a8d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.028] wcscat (in: _Dest=0x7a6a8d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.028] wcscat (in: _Dest=0x7a6a8d0, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0185.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0185.029] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d07130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d09840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0185.029] wcscmp (_String1="eu", _String2=".") returned 1 [0185.029] wcscmp (_String1="eu", _String2="..") returned 1 [0185.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6a7c8 [0185.029] wcscpy (in: _Dest=0x7a6a7c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.029] wcscat (in: _Dest=0x7a6a7c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.029] wcscat (in: _Dest=0x7a6a7c8, _Source="eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0185.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0185.031] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d10d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d13480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0185.031] wcscmp (_String1="fi", _String2=".") returned 1 [0185.031] wcscmp (_String1="fi", _String2="..") returned 1 [0185.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6a3a8 [0185.031] wcscpy (in: _Dest=0x7a6a3a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.031] wcscat (in: _Dest=0x7a6a3a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.031] wcscat (in: _Dest=0x7a6a3a8, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0185.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0185.032] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d1a9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1d0c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d1d0c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0185.032] wcscmp (_String1="fil", _String2=".") returned 1 [0185.032] wcscmp (_String1="fil", _String2="..") returned 1 [0185.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a4b0 [0185.033] wcscpy (in: _Dest=0x7a6a4b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.033] wcscat (in: _Dest=0x7a6a4b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.033] wcscat (in: _Dest=0x7a6a4b0, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0185.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24 [0185.034] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d245f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d26d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d26d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0185.034] wcscmp (_String1="fr", _String2=".") returned 1 [0185.034] wcscmp (_String1="fr", _String2="..") returned 1 [0185.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6a5b8 [0185.034] wcscpy (in: _Dest=0x7a6a5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.034] wcscat (in: _Dest=0x7a6a5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.034] wcscat (in: _Dest=0x7a6a5b8, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0185.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0185.036] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d2e230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d33050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0185.036] wcscmp (_String1="he", _String2=".") returned 1 [0185.036] wcscmp (_String1="he", _String2="..") returned 1 [0185.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6af00 [0185.036] wcscpy (in: _Dest=0x7a6af00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.036] wcscat (in: _Dest=0x7a6af00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.036] wcscat (in: _Dest=0x7a6af00, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0185.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6af00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0185.037] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d37e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d3cc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0185.037] wcscmp (_String1="hi", _String2=".") returned 1 [0185.037] wcscmp (_String1="hi", _String2="..") returned 1 [0185.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6adf8 [0185.038] wcscpy (in: _Dest=0x7a6adf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.038] wcscat (in: _Dest=0x7a6adf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.038] wcscat (in: _Dest=0x7a6adf8, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0185.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6adf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0185.039] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d441c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d468d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0185.039] wcscmp (_String1="hr", _String2=".") returned 1 [0185.039] wcscmp (_String1="hr", _String2="..") returned 1 [0185.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6acf0 [0185.039] wcscpy (in: _Dest=0x7a6acf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.039] wcscat (in: _Dest=0x7a6acf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.040] wcscat (in: _Dest=0x7a6acf0, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0185.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6acf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0185.041] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d4de00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d50510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0185.041] wcscmp (_String1="hu", _String2=".") returned 1 [0185.041] wcscmp (_String1="hu", _String2="..") returned 1 [0185.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6abe8 [0185.041] wcscpy (in: _Dest=0x7a6abe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.041] wcscat (in: _Dest=0x7a6abe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.041] wcscat (in: _Dest=0x7a6abe8, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0185.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6abe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0185.043] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d57a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d5a150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0185.043] wcscmp (_String1="id", _String2=".") returned 1 [0185.043] wcscmp (_String1="id", _String2="..") returned 1 [0185.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6aae0 [0185.043] wcscpy (in: _Dest=0x7a6aae0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.043] wcscat (in: _Dest=0x7a6aae0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.043] wcscat (in: _Dest=0x7a6aae0, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0185.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6aae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0185.045] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d61680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d664a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0185.045] wcscmp (_String1="it", _String2=".") returned 1 [0185.045] wcscmp (_String1="it", _String2="..") returned 1 [0185.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc868 [0185.045] wcscpy (in: _Dest=0x30bc868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.045] wcscat (in: _Dest=0x30bc868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.045] wcscat (in: _Dest=0x30bc868, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0185.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584 [0185.047] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d6d9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d727f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0185.047] wcscmp (_String1="ja", _String2=".") returned 1 [0185.047] wcscmp (_String1="ja", _String2="..") returned 1 [0185.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bd2b8 [0185.047] wcscpy (in: _Dest=0x30bd2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.047] wcscat (in: _Dest=0x30bd2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.047] wcscat (in: _Dest=0x30bd2b8, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0185.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bd2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468 [0185.275] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d77610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d7c430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0185.275] wcscmp (_String1="ko", _String2=".") returned 1 [0185.275] wcscmp (_String1="ko", _String2="..") returned 1 [0185.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bd0a8 [0185.275] wcscpy (in: _Dest=0x30bd0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.275] wcscat (in: _Dest=0x30bd0a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.275] wcscat (in: _Dest=0x30bd0a8, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0185.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bd0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0185.696] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d83960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d86070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0185.696] wcscmp (_String1="lt", _String2=".") returned 1 [0185.696] wcscmp (_String1="lt", _String2="..") returned 1 [0185.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc238 [0185.696] wcscpy (in: _Dest=0x30bc238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.696] wcscat (in: _Dest=0x30bc238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.696] wcscat (in: _Dest=0x30bc238, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0185.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0185.697] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d8d5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d8fcb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d8fcb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0185.697] wcscmp (_String1="lv", _String2=".") returned 1 [0185.697] wcscmp (_String1="lv", _String2="..") returned 1 [0185.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc760 [0185.697] wcscpy (in: _Dest=0x30bc760, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.697] wcscat (in: _Dest=0x30bc760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.697] wcscat (in: _Dest=0x30bc760, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0185.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0185.698] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d923c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d998f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0185.698] wcscmp (_String1="ms", _String2=".") returned 1 [0185.698] wcscmp (_String1="ms", _String2="..") returned 1 [0185.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bcc88 [0185.698] wcscpy (in: _Dest=0x30bcc88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.698] wcscat (in: _Dest=0x30bcc88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.698] wcscat (in: _Dest=0x30bcc88, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0185.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bcc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0185.701] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d9e710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6da3530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0185.701] wcscmp (_String1="nl", _String2=".") returned 1 [0185.701] wcscmp (_String1="nl", _String2="..") returned 1 [0185.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc868 [0185.701] wcscpy (in: _Dest=0x30bc868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.701] wcscat (in: _Dest=0x30bc868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.701] wcscat (in: _Dest=0x30bc868, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0185.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0185.702] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6daaa60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dad170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0185.702] wcscmp (_String1="no", _String2=".") returned 1 [0185.702] wcscmp (_String1="no", _String2="..") returned 1 [0185.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7ad52c0 [0185.703] wcscpy (in: _Dest=0x7ad52c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.703] wcscat (in: _Dest=0x7ad52c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.703] wcscat (in: _Dest=0x7ad52c0, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0185.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad52c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0185.704] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6db46a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6db94c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0185.704] wcscmp (_String1="pl", _String2=".") returned 1 [0185.704] wcscmp (_String1="pl", _String2="..") returned 1 [0185.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7ad53c8 [0185.704] wcscpy (in: _Dest=0x7ad53c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.704] wcscat (in: _Dest=0x7ad53c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.704] wcscat (in: _Dest=0x7ad53c8, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0185.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad53c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0185.705] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dc09f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dc3100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0185.705] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0185.705] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0185.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38ea8 [0185.705] wcscpy (in: _Dest=0x7a38ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.705] wcscat (in: _Dest=0x7a38ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.705] wcscat (in: _Dest=0x7a38ea8, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0185.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0185.708] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dca630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dccd40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0185.708] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0185.708] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0185.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c438 [0185.709] wcscpy (in: _Dest=0x7b7c438, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.709] wcscat (in: _Dest=0x7b7c438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.709] wcscat (in: _Dest=0x7b7c438, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0185.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7c438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0185.710] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dd4270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd6980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dd6980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0185.710] wcscmp (_String1="ro", _String2=".") returned 1 [0185.710] wcscmp (_String1="ro", _String2="..") returned 1 [0185.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7ad55d8 [0185.710] wcscpy (in: _Dest=0x7ad55d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.710] wcscat (in: _Dest=0x7ad55d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.710] wcscat (in: _Dest=0x7ad55d8, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0185.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad55d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0185.711] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dddeb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6de2cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0185.711] wcscmp (_String1="ru", _String2=".") returned 1 [0185.711] wcscmp (_String1="ru", _String2="..") returned 1 [0185.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7ad56e0 [0185.711] wcscpy (in: _Dest=0x7ad56e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.711] wcscat (in: _Dest=0x7ad56e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.711] wcscat (in: _Dest=0x7ad56e0, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0185.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad56e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0185.712] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6de7af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dec910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0185.712] wcscmp (_String1="sk", _String2=".") returned 1 [0185.712] wcscmp (_String1="sk", _String2="..") returned 1 [0185.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7ad57e8 [0185.712] wcscpy (in: _Dest=0x7ad57e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.713] wcscat (in: _Dest=0x7ad57e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.713] wcscat (in: _Dest=0x7ad57e8, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0185.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad57e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0185.714] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6df3e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6df6550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0185.714] wcscmp (_String1="sl", _String2=".") returned 1 [0185.714] wcscmp (_String1="sl", _String2="..") returned 1 [0185.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7ad58f0 [0185.714] wcscpy (in: _Dest=0x7ad58f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.714] wcscat (in: _Dest=0x7ad58f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.714] wcscat (in: _Dest=0x7ad58f0, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0185.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad58f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0185.715] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dfda80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e00190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0185.715] wcscmp (_String1="sr", _String2=".") returned 1 [0185.715] wcscmp (_String1="sr", _String2="..") returned 1 [0185.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7ad59f8 [0185.715] wcscpy (in: _Dest=0x7ad59f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.715] wcscat (in: _Dest=0x7ad59f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.715] wcscat (in: _Dest=0x7ad59f8, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0185.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad59f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0185.716] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e076c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e09dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0185.716] wcscmp (_String1="sv", _String2=".") returned 1 [0185.717] wcscmp (_String1="sv", _String2="..") returned 1 [0185.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7ad5b00 [0185.717] wcscpy (in: _Dest=0x7ad5b00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0185.717] wcscat (in: _Dest=0x7ad5b00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0185.717] wcscat (in: _Dest=0x7ad5b00, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0185.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad5b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0185.718] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e11300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e16120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0186.339] wcscmp (_String1="th", _String2=".") returned 1 [0186.339] wcscmp (_String1="th", _String2="..") returned 1 [0186.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bbd10 [0186.339] wcscpy (in: _Dest=0x30bbd10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0186.340] wcscat (in: _Dest=0x30bbd10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0186.340] wcscat (in: _Dest=0x30bbd10, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0188.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bbd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0188.374] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e1af40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e1fd60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0188.374] wcscmp (_String1="tr", _String2=".") returned 1 [0188.374] wcscmp (_String1="tr", _String2="..") returned 1 [0188.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc130 [0188.374] wcscpy (in: _Dest=0x30bc130, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0188.374] wcscat (in: _Dest=0x30bc130, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0188.374] wcscat (in: _Dest=0x30bc130, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0188.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0188.376] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e24b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e299a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0188.376] wcscmp (_String1="uk", _String2=".") returned 1 [0188.376] wcscmp (_String1="uk", _String2="..") returned 1 [0188.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc868 [0188.376] wcscpy (in: _Dest=0x30bc868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0188.376] wcscat (in: _Dest=0x30bc868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0188.376] wcscat (in: _Dest=0x30bc868, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0188.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0188.378] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e2e7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0188.378] wcscmp (_String1="vi", _String2=".") returned 1 [0188.378] wcscmp (_String1="vi", _String2="..") returned 1 [0188.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bcc88 [0188.379] wcscpy (in: _Dest=0x30bcc88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0188.379] wcscat (in: _Dest=0x30bcc88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0188.379] wcscat (in: _Dest=0x30bcc88, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0188.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bcc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0188.380] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e38400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e3ab10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0188.380] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0188.380] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0188.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38700 [0188.381] wcscpy (in: _Dest=0x7a38700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0188.381] wcscat (in: _Dest=0x7a38700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0188.381] wcscat (in: _Dest=0x7a38700, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0188.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70 [0188.383] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0188.383] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0188.383] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0188.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38a48 [0188.383] wcscpy (in: _Dest=0x7a38a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" [0188.383] wcscat (in: _Dest=0x7a38a48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\" [0188.383] wcscat (in: _Dest=0x7a38a48, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0188.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0188.385] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0188.385] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0188.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a550b0) returned 1 [0188.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0188.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea8b8) returned 1 Thread: id = 5562 os_tid = 0x27e8 [0183.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bcb80 [0183.183] wcscpy (in: _Dest=0x30bcb80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0183.184] wcscat (in: _Dest=0x30bcb80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" [0183.184] wcscat (in: _Dest=0x30bcb80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*" [0183.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0183.184] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf650 [0183.743] wcscmp (_String1=".", _String2=".") returned 0 [0183.743] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e50aa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5a6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e5a6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.743] wcscmp (_String1="..", _String2=".") returned 1 [0183.743] wcscmp (_String1="..", _String2="..") returned 0 [0183.743] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e5a6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5cdf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0183.743] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0183.743] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0183.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3ec9b98 [0183.744] wcscpy (in: _Dest=0x3ec9b98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" [0183.744] wcscat (in: _Dest=0x3ec9b98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" [0183.744] wcscat (in: _Dest=0x3ec9b98, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" [0184.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec9b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0184.402] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e5a6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e5cdf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0184.402] FindClose (in: hFindFile=0x3dcf650 | out: hFindFile=0x3dcf650) returned 1 [0184.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0184.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcb80) returned 1 [0184.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea7b8) returned 1 Thread: id = 5563 os_tid = 0x1cdc [0183.184] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png")) returned 0x2020 [0183.186] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", dwFileAttributes=0x20) returned 1 [0183.187] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xac8 [0183.187] GetFileSizeEx (in: hFile=0xac8, lpFileSize=0xd3cf97c | out: lpFileSize=0xd3cf97c*=4984) returned 1 [0183.187] SetFilePointerEx (in: hFile=0xac8, liDistanceToMove=0x1374, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.187] ReadFile (in: hFile=0xac8, lpBuffer=0xd3cf958, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd3cf968, lpOverlapped=0x0 | out: lpBuffer=0xd3cf958*, lpNumberOfBytesRead=0xd3cf968*=0x4, lpOverlapped=0x0) returned 1 [0183.190] SetFilePointerEx (in: hFile=0xac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0183.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0183.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a600 [0183.191] NtQuerySystemTime (in: CurrentTime=0xd3cf8f0 | out: CurrentTime=0xd3cf8f0*=132462177617700000) returned 0x0 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x64b5c4ab [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x14f7173b [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x62321176 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x1f26e3ac [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0xb500099 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0xc240145 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x62cf57a6 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x337f8874 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x2899ec81 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x7fc5497f [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x2ff8d9fc [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0xad6d9c5 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x19955bf6 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x5f8646c1 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x46384ff5 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x78471fb0 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x71f2f6a8 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x2b870667 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x6c6e0ca6 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x3b152578 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0xe9010e0 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x5ff380f [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x291a76c1 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x23d04738 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x51306bb2 [0183.191] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x29702841 [0183.192] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x638bfed2 [0183.192] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x7b5afdce [0183.192] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x34e654f9 [0183.192] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x378031bc [0183.192] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x6c4dbd4b [0183.192] RtlRandomEx (in: Seed=0xd3cf8e8 | out: Seed=0xd3cf8e8) returned 0x13217d76 [0183.458] ReadFile (in: hFile=0xac8, lpBuffer=0x10d50060, nNumberOfBytesToRead=0x1378, lpNumberOfBytesRead=0xd3cf8e4, lpOverlapped=0x0 | out: lpBuffer=0x10d50060*, lpNumberOfBytesRead=0xd3cf8e4*=0x1378, lpOverlapped=0x0) returned 1 [0183.467] SetFilePointerEx (in: hFile=0xac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.467] WriteFile (in: hFile=0xac8, lpBuffer=0x10d53c68*, nNumberOfBytesToWrite=0x1378, lpNumberOfBytesWritten=0xd3cf8e8, lpOverlapped=0x0 | out: lpBuffer=0x10d53c68*, lpNumberOfBytesWritten=0xd3cf8e8*=0x1378, lpOverlapped=0x0) returned 1 [0183.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0183.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0183.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0183.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d53c68) returned 1 [0183.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d50060) returned 1 [0183.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0183.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08778) returned 1 [0183.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3d5b0a0 [0183.471] SetFilePointerEx (in: hFile=0xac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.471] WriteFile (in: hFile=0xac8, lpBuffer=0x7b7a428*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xd3cf970, lpOverlapped=0x0 | out: lpBuffer=0x7b7a428*, lpNumberOfBytesWritten=0xd3cf970*=0x100, lpOverlapped=0x0) returned 1 [0183.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a428) returned 1 [0183.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0183.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e368) returned 1 [0183.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b0a0) returned 1 [0183.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ab50) returned 1 [0183.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0183.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0183.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0183.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6a198 [0183.475] wcscpy (in: _Dest=0x7a6a198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" [0183.475] wcscat (in: _Dest=0x7a6a198, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.68814f" [0183.475] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.68814f", NtPathName=0xd3cf8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0183.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55a90 [0184.610] FlushFileBuffers (hFile=0xac8) returned 1 [0184.954] CloseHandle (hObject=0xac8) returned 1 [0186.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7b7cac8 [0186.028] wcscpy (in: _Dest=0x7b7cac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0186.028] wcscat (in: _Dest=0x7b7cac8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" [0186.028] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814f-readme.txt")) returned 0xffffffff [0186.028] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf9c [0186.168] WriteFile (in: hFile=0xf9c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd3cf904, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd3cf904*=0x8b9, lpOverlapped=0x0) returned 1 [0186.170] CloseHandle (hObject=0xf9c) returned 1 [0186.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cac8) returned 1 [0186.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de92b8) returned 1 Thread: id = 5564 os_tid = 0x27ec [0183.205] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js")) returned 0x2020 [0185.055] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", dwFileAttributes=0x20) returned 1 [0187.388] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17e8 [0187.388] GetFileSizeEx (in: hFile=0x17e8, lpFileSize=0xe25fcd4 | out: lpFileSize=0xe25fcd4*=4355) returned 1 [0187.388] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x10ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.388] ReadFile (in: hFile=0x17e8, lpBuffer=0xe25fcb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe25fcc0, lpOverlapped=0x0 | out: lpBuffer=0xe25fcb0*, lpNumberOfBytesRead=0xe25fcc0*=0x4, lpOverlapped=0x0) returned 1 [0187.391] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0187.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0187.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0187.391] NtQuerySystemTime (in: CurrentTime=0xe25fc48 | out: CurrentTime=0xe25fc48*=132462177659664000) returned 0x0 [0187.391] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x1c804c78 [0187.391] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x26242b37 [0187.391] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x2b456dd [0187.391] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x54cf10c6 [0187.391] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x7760cd7b [0187.391] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x44831c1 [0187.391] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x219fa69a [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x148f838c [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x4a3f6f6b [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x749c676a [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x21ec640b [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x3dfd87ad [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x3f28041 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x6a84340c [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x47fba5d2 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x32747985 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x428261ba [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x2326132c [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x50bfc832 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x57a92f8c [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x752a6a7 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x293ae5b5 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x6d24a554 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x1634d414 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x187204ff [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x6d15caa [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x357d0a2b [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x22988d3f [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x16618506 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x190651e9 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x15f74f93 [0187.392] RtlRandomEx (in: Seed=0xe25fc40 | out: Seed=0xe25fc40) returned 0x3c04dc6d [0187.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0187.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b88360 [0187.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b8bf68 [0187.401] ReadFile (in: hFile=0x17e8, lpBuffer=0x7b88360, nNumberOfBytesToRead=0x1103, lpNumberOfBytesRead=0xe25fc3c, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesRead=0xe25fc3c*=0x1103, lpOverlapped=0x0) returned 1 [0187.402] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.402] WriteFile (in: hFile=0x17e8, lpBuffer=0x7b8bf68*, nNumberOfBytesToWrite=0x1103, lpNumberOfBytesWritten=0xe25fc40, lpOverlapped=0x0 | out: lpBuffer=0x7b8bf68*, lpNumberOfBytesWritten=0xe25fc40*=0x1103, lpOverlapped=0x0) returned 1 [0189.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0189.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0189.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc6e08) returned 1 [0189.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0189.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0189.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc98) returned 1 [0189.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25b30) returned 1 [0189.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25b30 [0189.131] SetFilePointerEx (in: hFile=0x17e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.131] WriteFile (in: hFile=0x17e8, lpBuffer=0x3eca078*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0xe25fcc8, lpOverlapped=0x0 | out: lpBuffer=0x3eca078*, lpNumberOfBytesWritten=0xe25fcc8*=0x124, lpOverlapped=0x0) returned 1 [0189.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41f08 [0189.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3eaa8 [0189.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0189.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0189.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x32) returned 0x7ad7970 [0189.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0189.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0189.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0189.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0189.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41f08) returned 1 [0189.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x65) returned 0x3e69f38 [0189.996] sprintf (in: _Dest=0x3e69f38, _Format="%c%c" | out: _Dest="25") returned 2 [0189.996] sprintf (in: _Dest=0x3e69f3a, _Format="%c%c" | out: _Dest="11") returned 2 [0189.996] sprintf (in: _Dest=0x3e69f3c, _Format="%c%c" | out: _Dest="b0") returned 2 [0189.996] sprintf (in: _Dest=0x3e69f3e, _Format="%c%c" | out: _Dest="8e") returned 2 [0189.996] sprintf (in: _Dest=0x3e69f40, _Format="%c%c" | out: _Dest="bd") returned 2 [0189.996] sprintf (in: _Dest=0x3e69f42, _Format="%c%c" | out: _Dest="bc") returned 2 [0189.996] sprintf (in: _Dest=0x3e69f44, _Format="%c%c" | out: _Dest="90") returned 2 [0189.996] sprintf (in: _Dest=0x3e69f46, _Format="%c%c" | out: _Dest="68") returned 2 [0189.996] sprintf (in: _Dest=0x3e69f48, _Format="%c%c" | out: _Dest="28") returned 2 [0189.996] sprintf (in: _Dest=0x3e69f4a, _Format="%c%c" | out: _Dest="c9") returned 2 [0189.996] sprintf (in: _Dest=0x3e69f4c, _Format="%c%c" | out: _Dest="92") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f4e, _Format="%c%c" | out: _Dest="3e") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f50, _Format="%c%c" | out: _Dest="5f") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f52, _Format="%c%c" | out: _Dest="b1") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f54, _Format="%c%c" | out: _Dest="2a") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f56, _Format="%c%c" | out: _Dest="33") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f58, _Format="%c%c" | out: _Dest="86") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f5a, _Format="%c%c" | out: _Dest="0e") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f5c, _Format="%c%c" | out: _Dest="3e") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f5e, _Format="%c%c" | out: _Dest="01") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f60, _Format="%c%c" | out: _Dest="58") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f62, _Format="%c%c" | out: _Dest="18") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f64, _Format="%c%c" | out: _Dest="cf") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f66, _Format="%c%c" | out: _Dest="94") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f68, _Format="%c%c" | out: _Dest="70") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f6a, _Format="%c%c" | out: _Dest="dd") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f6c, _Format="%c%c" | out: _Dest="b6") returned 2 [0189.997] sprintf (in: _Dest=0x3e69f6e, _Format="%c%c" | out: _Dest="db") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f70, _Format="%c%c" | out: _Dest="de") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f72, _Format="%c%c" | out: _Dest="ae") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f74, _Format="%c%c" | out: _Dest="9e") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f76, _Format="%c%c" | out: _Dest="a2") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f78, _Format="%c%c" | out: _Dest="27") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f7a, _Format="%c%c" | out: _Dest="4c") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f7c, _Format="%c%c" | out: _Dest="de") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f7e, _Format="%c%c" | out: _Dest="22") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f80, _Format="%c%c" | out: _Dest="86") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f82, _Format="%c%c" | out: _Dest="e4") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f84, _Format="%c%c" | out: _Dest="7a") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f86, _Format="%c%c" | out: _Dest="84") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f88, _Format="%c%c" | out: _Dest="0e") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f8a, _Format="%c%c" | out: _Dest="35") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f8c, _Format="%c%c" | out: _Dest="7a") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f8e, _Format="%c%c" | out: _Dest="01") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f90, _Format="%c%c" | out: _Dest="5b") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f92, _Format="%c%c" | out: _Dest="fd") returned 2 [0189.998] sprintf (in: _Dest=0x3e69f94, _Format="%c%c" | out: _Dest="32") returned 2 [0189.999] sprintf (in: _Dest=0x3e69f96, _Format="%c%c" | out: _Dest="85") returned 2 [0189.999] sprintf (in: _Dest=0x3e69f98, _Format="%c%c" | out: _Dest="5a") returned 2 [0189.999] sprintf (in: _Dest=0x3e69f9a, _Format="%c%c" | out: _Dest="4e") returned 2 [0189.999] RtlInitAnsiString (in: DestinationString=0xe25fc50, SourceString="2511b08ebdbc906828c9923e5fb12a33860e3e015818cf9470ddb6dbdeae9ea2274cde2286e47a840e357a015bfd32855a4e" | out: DestinationString="2511b08ebdbc906828c9923e5fb12a33860e3e015818cf9470ddb6dbdeae9ea2274cde2286e47a840e357a015bfd32855a4e") [0189.999] RtlAnsiStringToUnicodeString (in: DestinationString=0xe25fc48, SourceString="2511b08ebdbc906828c9923e5fb12a33860e3e015818cf9470ddb6dbdeae9ea2274cde2286e47a840e357a015bfd32855a4e", AllocateDestinationString=1 | out: DestinationString="2511b08ebdbc906828c9923e5fb12a33860e3e015818cf9470ddb6dbdeae9ea2274cde2286e47a840e357a015bfd32855a4e") returned 0x0 [0189.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68498 [0189.999] wcscat (in: _Dest=0x3eca078, _Source="2511b08ebdbc906828c9923e5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\2511b08ebdbc906828c9923e5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\2511b08ebdbc906828c9923e5" [0189.999] wcscat (in: _Dest=0x3eca078, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\2511b08ebdbc906828c9923e5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\2511b08ebdbc906828c9923e5.68814f" [0189.999] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\2511b08ebdbc906828c9923e5.68814f", NtPathName=0xe25fc40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\2511b08ebdbc906828c9923e5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0189.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2eb0 [0190.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0190.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a48208) returned 1 [0190.043] NtQueryInformationFile (in: FileHandle=0x17e8, IoStatusBlock=0xe25fc18, FileInformation=0xe25fc20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe25fc18, FileInformation=0xe25fc20) returned 0x0 [0190.043] NtSetInformationFile (FileHandle=0x17e8, IoStatusBlock=0xe25fc18, FileInformation=0xe25fc20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca078) returned 1 [0190.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 [0190.054] FlushFileBuffers (hFile=0x17e8) returned 1 [0190.607] CloseHandle (hObject=0x17e8) returned 1 [0192.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7b7cac8 [0192.425] wcscpy (in: _Dest=0x7b7cac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0192.425] wcscat (in: _Dest=0x7b7cac8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" [0192.425] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814f-readme.txt")) returned 0x2020 [0192.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cac8) returned 1 [0192.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 Thread: id = 5565 os_tid = 0x24dc [0183.207] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json")) returned 0x2020 [0185.056] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", dwFileAttributes=0x20) returned 1 [0187.402] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1914 [0187.403] GetFileSizeEx (in: hFile=0x1914, lpFileSize=0xdbbf914 | out: lpFileSize=0xdbbf914*=854) returned 1 [0187.403] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x352, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.403] ReadFile (in: hFile=0x1914, lpBuffer=0xdbbf8f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdbbf900, lpOverlapped=0x0 | out: lpBuffer=0xdbbf8f0*, lpNumberOfBytesRead=0xdbbf900*=0x4, lpOverlapped=0x0) returned 1 [0187.405] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0187.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0187.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0187.406] NtQuerySystemTime (in: CurrentTime=0xdbbf888 | out: CurrentTime=0xdbbf888*=132462177659820000) returned 0x0 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x3448d3b5 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x42e48704 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x691e31e0 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x6246d53d [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x1807344a [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x4ad28843 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x22c648eb [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x72c98a43 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x46165922 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x2d1b2a46 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x30f606f1 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x67e5e8a6 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x3d326b03 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x52e11d02 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x2cb9e707 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x18508bd [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x704e56f5 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x52b3ee02 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x536c5fcc [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x75bdafc2 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x6f2ea23d [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x70bf5880 [0187.406] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x533f32d7 [0187.407] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x449aef6a [0187.407] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x38f2fb31 [0187.407] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x1789f66f [0187.407] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x22614360 [0187.407] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x8417743 [0187.407] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x3b833363 [0187.407] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x128f5129 [0187.407] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x2f942d95 [0187.407] RtlRandomEx (in: Seed=0xdbbf880 | out: Seed=0xdbbf880) returned 0x2f0ec6b6 [0187.421] ReadFile (in: hFile=0x1914, lpBuffer=0x7b8fb70, nNumberOfBytesToRead=0x356, lpNumberOfBytesRead=0xdbbf87c, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesRead=0xdbbf87c*=0x356, lpOverlapped=0x0) returned 1 [0187.421] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.421] WriteFile (in: hFile=0x1914, lpBuffer=0x7b93778*, nNumberOfBytesToWrite=0x356, lpNumberOfBytesWritten=0xdbbf880, lpOverlapped=0x0 | out: lpBuffer=0x7b93778*, lpNumberOfBytesWritten=0xdbbf880*=0x356, lpOverlapped=0x0) returned 1 [0189.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0189.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0189.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0189.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0189.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0189.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0189.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258f0) returned 1 [0189.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x7a258f0 [0189.134] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.134] WriteFile (in: hFile=0x1914, lpBuffer=0x3ec9b98*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0xdbbf908, lpOverlapped=0x0 | out: lpBuffer=0x3ec9b98*, lpNumberOfBytesWritten=0xdbbf908*=0x122, lpOverlapped=0x0) returned 1 [0190.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25b30 [0190.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0190.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0190.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0190.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x3e79368 [0190.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0190.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0190.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0190.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0190.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25b30) returned 1 [0190.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x61) returned 0x3e69f38 [0190.076] sprintf (in: _Dest=0x3e69f38, _Format="%c%c" | out: _Dest="50") returned 2 [0190.076] sprintf (in: _Dest=0x3e69f3a, _Format="%c%c" | out: _Dest="8f") returned 2 [0190.076] sprintf (in: _Dest=0x3e69f3c, _Format="%c%c" | out: _Dest="16") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f3e, _Format="%c%c" | out: _Dest="68") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f40, _Format="%c%c" | out: _Dest="ab") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f42, _Format="%c%c" | out: _Dest="c8") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f44, _Format="%c%c" | out: _Dest="b2") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f46, _Format="%c%c" | out: _Dest="b1") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f48, _Format="%c%c" | out: _Dest="6d") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f4a, _Format="%c%c" | out: _Dest="52") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f4c, _Format="%c%c" | out: _Dest="9e") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f4e, _Format="%c%c" | out: _Dest="41") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f50, _Format="%c%c" | out: _Dest="22") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f52, _Format="%c%c" | out: _Dest="22") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f54, _Format="%c%c" | out: _Dest="33") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f56, _Format="%c%c" | out: _Dest="0e") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f58, _Format="%c%c" | out: _Dest="10") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f5a, _Format="%c%c" | out: _Dest="46") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f5c, _Format="%c%c" | out: _Dest="84") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f5e, _Format="%c%c" | out: _Dest="2e") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f60, _Format="%c%c" | out: _Dest="f9") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f62, _Format="%c%c" | out: _Dest="8e") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f64, _Format="%c%c" | out: _Dest="25") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f66, _Format="%c%c" | out: _Dest="fb") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f68, _Format="%c%c" | out: _Dest="90") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f6a, _Format="%c%c" | out: _Dest="f7") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f6c, _Format="%c%c" | out: _Dest="35") returned 2 [0190.077] sprintf (in: _Dest=0x3e69f6e, _Format="%c%c" | out: _Dest="15") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f70, _Format="%c%c" | out: _Dest="fa") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f72, _Format="%c%c" | out: _Dest="a2") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f74, _Format="%c%c" | out: _Dest="5c") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f76, _Format="%c%c" | out: _Dest="e8") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f78, _Format="%c%c" | out: _Dest="88") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f7a, _Format="%c%c" | out: _Dest="42") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f7c, _Format="%c%c" | out: _Dest="36") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f7e, _Format="%c%c" | out: _Dest="19") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f80, _Format="%c%c" | out: _Dest="28") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f82, _Format="%c%c" | out: _Dest="10") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f84, _Format="%c%c" | out: _Dest="2b") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f86, _Format="%c%c" | out: _Dest="3d") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f88, _Format="%c%c" | out: _Dest="2f") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f8a, _Format="%c%c" | out: _Dest="e1") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f8c, _Format="%c%c" | out: _Dest="fa") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f8e, _Format="%c%c" | out: _Dest="68") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f90, _Format="%c%c" | out: _Dest="9e") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f92, _Format="%c%c" | out: _Dest="14") returned 2 [0190.078] sprintf (in: _Dest=0x3e69f94, _Format="%c%c" | out: _Dest="69") returned 2 [0190.104] sprintf (in: _Dest=0x3e69f96, _Format="%c%c" | out: _Dest="bd") returned 2 [0190.104] RtlInitAnsiString (in: DestinationString=0xdbbf890, SourceString="508f1668abc8b2b16d529e412222330e1046842ef98e25fb90f73515faa25ce88842361928102b3d2fe1fa689e1469bd" | out: DestinationString="508f1668abc8b2b16d529e412222330e1046842ef98e25fb90f73515faa25ce88842361928102b3d2fe1fa689e1469bd") [0190.104] RtlAnsiStringToUnicodeString (in: DestinationString=0xdbbf888, SourceString="508f1668abc8b2b16d529e412222330e1046842ef98e25fb90f73515faa25ce88842361928102b3d2fe1fa689e1469bd", AllocateDestinationString=1 | out: DestinationString="508f1668abc8b2b16d529e412222330e1046842ef98e25fb90f73515faa25ce88842361928102b3d2fe1fa689e1469bd") returned 0x0 [0190.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85cb0 [0190.104] wcscat (in: _Dest=0x3ec9b98, _Source="508f1668abc8b2b16d529e41" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\508f1668abc8b2b16d529e41") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\508f1668abc8b2b16d529e41" [0190.105] wcscat (in: _Dest=0x3ec9b98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\508f1668abc8b2b16d529e41.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\508f1668abc8b2b16d529e41.68814f" [0190.105] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\508f1668abc8b2b16d529e41.68814f", NtPathName=0xdbbf880, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\508f1668abc8b2b16d529e41.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x138) returned 0x3ea3a38 [0190.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3a38) returned 1 [0190.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a46828) returned 1 [0190.109] NtQueryInformationFile (in: FileHandle=0x1914, IoStatusBlock=0xdbbf858, FileInformation=0xdbbf860, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdbbf858, FileInformation=0xdbbf860) returned 0x0 [0190.109] NtSetInformationFile (FileHandle=0x1914, IoStatusBlock=0xdbbf858, FileInformation=0xdbbf860, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9b98) returned 1 [0190.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85cb0) returned 1 [0190.110] FlushFileBuffers (hFile=0x1914) returned 1 [0190.611] CloseHandle (hObject=0x1914) returned 1 [0192.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3debf68 [0192.479] wcscpy (in: _Dest=0x3debf68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0192.479] wcscat (in: _Dest=0x3debf68, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" [0192.479] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814f-readme.txt")) returned 0x2020 [0192.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debf68) returned 1 [0192.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 Thread: id = 5566 os_tid = 0x24e0 [0183.208] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js")) returned 0x2020 [0185.056] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", dwFileAttributes=0x20) returned 1 [0187.405] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1778 [0187.422] GetFileSizeEx (in: hFile=0x1778, lpFileSize=0xbd3fd8c | out: lpFileSize=0xbd3fd8c*=23404) returned 1 [0187.422] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x5b68, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.422] ReadFile (in: hFile=0x1778, lpBuffer=0xbd3fd68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd3fd78, lpOverlapped=0x0 | out: lpBuffer=0xbd3fd68*, lpNumberOfBytesRead=0xbd3fd78*=0x4, lpOverlapped=0x0) returned 1 [0187.428] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0187.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0187.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0187.429] NtQuerySystemTime (in: CurrentTime=0xbd3fd00 | out: CurrentTime=0xbd3fd00*=132462177660132000) returned 0x0 [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x188c9b29 [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x5d1deb8e [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x3e9c17e1 [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x7fb9001e [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x561aa7df [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x73d194b2 [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x3891bc0d [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x4266462a [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x52038a2b [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x589eb6b2 [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x7936c1fa [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x73cf7462 [0187.429] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x44d72733 [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x67862034 [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x102197da [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x4d00ba3f [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x3a48d8be [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x70491658 [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x161e5294 [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x4844cfdb [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x740e70d7 [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x2794cb43 [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x128bc6b4 [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x7b695200 [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x44294572 [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x5bfc5cea [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x6c9ac83b [0187.430] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x126dbb56 [0187.431] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x7e71479d [0187.431] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x72203209 [0187.431] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x6b07b24e [0187.431] RtlRandomEx (in: Seed=0xbd3fcf8 | out: Seed=0xbd3fcf8) returned 0x4838ceed [0187.444] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.444] ReadFile (in: hFile=0x1778, lpBuffer=0x7b97380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xbd3fd00, lpOverlapped=0x0 | out: lpBuffer=0x7b97380*, lpNumberOfBytesRead=0xbd3fd00*=0x3c00, lpOverlapped=0x0) returned 1 [0187.445] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d401c8 [0187.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0187.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0187.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0187.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b9af88 [0187.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0187.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0187.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0187.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0187.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d401c8) returned 1 [0187.446] WriteFile (in: hFile=0x1778, lpBuffer=0x7b9af88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xbd3fd00, lpOverlapped=0x0 | out: lpBuffer=0x7b9af88*, lpNumberOfBytesWritten=0xbd3fd00*=0x3c00, lpOverlapped=0x0) returned 1 [0189.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9af88) returned 1 [0189.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b97380) returned 1 [0189.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2d980 [0189.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0a8) returned 1 [0189.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x7a2dd00 [0189.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0a8 [0189.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0189.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c20) returned 1 [0189.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0189.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25938) returned 1 [0189.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cb04c0 [0189.138] SetFilePointerEx (in: hFile=0x1778, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.138] WriteFile (in: hFile=0x1778, lpBuffer=0x7cb04c0*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0xbd3fd80, lpOverlapped=0x0 | out: lpBuffer=0x7cb04c0*, lpNumberOfBytesWritten=0xbd3fd80*=0x11c, lpOverlapped=0x0) returned 1 [0190.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a258f0 [0190.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e6e8 [0190.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0190.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0190.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x3e79368 [0190.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0190.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0190.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3920) returned 1 [0190.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0190.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258f0) returned 1 [0190.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x55) returned 0x2fe6f68 [0190.113] sprintf (in: _Dest=0x2fe6f68, _Format="%c%c" | out: _Dest="57") returned 2 [0190.113] sprintf (in: _Dest=0x2fe6f6a, _Format="%c%c" | out: _Dest="4c") returned 2 [0190.113] sprintf (in: _Dest=0x2fe6f6c, _Format="%c%c" | out: _Dest="ea") returned 2 [0190.113] sprintf (in: _Dest=0x2fe6f6e, _Format="%c%c" | out: _Dest="9f") returned 2 [0190.113] sprintf (in: _Dest=0x2fe6f70, _Format="%c%c" | out: _Dest="d6") returned 2 [0190.113] sprintf (in: _Dest=0x2fe6f72, _Format="%c%c" | out: _Dest="5a") returned 2 [0190.113] sprintf (in: _Dest=0x2fe6f74, _Format="%c%c" | out: _Dest="4f") returned 2 [0190.113] sprintf (in: _Dest=0x2fe6f76, _Format="%c%c" | out: _Dest="2b") returned 2 [0190.113] sprintf (in: _Dest=0x2fe6f78, _Format="%c%c" | out: _Dest="de") returned 2 [0190.113] sprintf (in: _Dest=0x2fe6f7a, _Format="%c%c" | out: _Dest="28") returned 2 [0190.113] sprintf (in: _Dest=0x2fe6f7c, _Format="%c%c" | out: _Dest="b9") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f7e, _Format="%c%c" | out: _Dest="3d") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f80, _Format="%c%c" | out: _Dest="95") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f82, _Format="%c%c" | out: _Dest="56") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f84, _Format="%c%c" | out: _Dest="b5") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f86, _Format="%c%c" | out: _Dest="cf") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f88, _Format="%c%c" | out: _Dest="62") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f8a, _Format="%c%c" | out: _Dest="25") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f8c, _Format="%c%c" | out: _Dest="e7") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f8e, _Format="%c%c" | out: _Dest="f1") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f90, _Format="%c%c" | out: _Dest="9a") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f92, _Format="%c%c" | out: _Dest="69") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f94, _Format="%c%c" | out: _Dest="35") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f96, _Format="%c%c" | out: _Dest="ae") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f98, _Format="%c%c" | out: _Dest="d2") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f9a, _Format="%c%c" | out: _Dest="e6") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f9c, _Format="%c%c" | out: _Dest="5a") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6f9e, _Format="%c%c" | out: _Dest="cf") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6fa0, _Format="%c%c" | out: _Dest="05") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6fa2, _Format="%c%c" | out: _Dest="ea") returned 2 [0190.114] sprintf (in: _Dest=0x2fe6fa4, _Format="%c%c" | out: _Dest="5f") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6fa6, _Format="%c%c" | out: _Dest="1e") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6fa8, _Format="%c%c" | out: _Dest="fe") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6faa, _Format="%c%c" | out: _Dest="86") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6fac, _Format="%c%c" | out: _Dest="de") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6fae, _Format="%c%c" | out: _Dest="f9") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6fb0, _Format="%c%c" | out: _Dest="d2") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6fb2, _Format="%c%c" | out: _Dest="9d") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6fb4, _Format="%c%c" | out: _Dest="00") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6fb6, _Format="%c%c" | out: _Dest="c5") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6fb8, _Format="%c%c" | out: _Dest="19") returned 2 [0190.115] sprintf (in: _Dest=0x2fe6fba, _Format="%c%c" | out: _Dest="fd") returned 2 [0190.115] RtlInitAnsiString (in: DestinationString=0xbd3fd08, SourceString="574cea9fd65a4f2bde28b93d9556b5cf6225e7f19a6935aed2e65acf05ea5f1efe86def9d29d00c519fd" | out: DestinationString="574cea9fd65a4f2bde28b93d9556b5cf6225e7f19a6935aed2e65acf05ea5f1efe86def9d29d00c519fd") [0190.115] RtlAnsiStringToUnicodeString (in: DestinationString=0xbd3fd00, SourceString="574cea9fd65a4f2bde28b93d9556b5cf6225e7f19a6935aed2e65acf05ea5f1efe86def9d29d00c519fd", AllocateDestinationString=1 | out: DestinationString="574cea9fd65a4f2bde28b93d9556b5cf6225e7f19a6935aed2e65acf05ea5f1efe86def9d29d00c519fd") returned 0x0 [0190.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6ad8 [0190.115] wcscat (in: _Dest=0x7cb04c0, _Source="574cea9fd65a4f2bde28b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\574cea9fd65a4f2bde28b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\574cea9fd65a4f2bde28b" [0190.116] wcscat (in: _Dest=0x7cb04c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\574cea9fd65a4f2bde28b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\574cea9fd65a4f2bde28b.68814f" [0190.116] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\574cea9fd65a4f2bde28b.68814f", NtPathName=0xbd3fcf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\574cea9fd65a4f2bde28b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3ea3a38 [0190.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3a38) returned 1 [0190.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a46828) returned 1 [0190.118] NtQueryInformationFile (in: FileHandle=0x1778, IoStatusBlock=0xbd3fcd0, FileInformation=0xbd3fcd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbd3fcd0, FileInformation=0xbd3fcd8) returned 0x0 [0190.118] NtSetInformationFile (FileHandle=0x1778, IoStatusBlock=0xbd3fcd0, FileInformation=0xbd3fcd8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb04c0) returned 1 [0190.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6ad8) returned 1 [0190.120] FlushFileBuffers (hFile=0x1778) returned 1 [0190.611] CloseHandle (hObject=0x1778) returned 1 [0192.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3debf68 [0192.486] wcscpy (in: _Dest=0x3debf68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0192.486] wcscat (in: _Dest=0x3debf68, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" [0192.487] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814f-readme.txt")) returned 0x2020 [0192.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debf68) returned 1 [0192.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 Thread: id = 5567 os_tid = 0xe0c [0183.209] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json")) returned 0x2020 [0183.959] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0186.498] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1548 [0186.508] GetFileSizeEx (in: hFile=0x1548, lpFileSize=0xe3fff64 | out: lpFileSize=0xe3fff64*=1457) returned 1 [0186.508] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x5ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.508] ReadFile (in: hFile=0x1548, lpBuffer=0xe3fff40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe3fff50, lpOverlapped=0x0 | out: lpBuffer=0xe3fff40*, lpNumberOfBytesRead=0xe3fff50*=0x4, lpOverlapped=0x0) returned 1 [0186.511] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0186.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0186.511] NtQuerySystemTime (in: CurrentTime=0xe3ffed8 | out: CurrentTime=0xe3ffed8*=132462177650928000) returned 0x0 [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x2feae537 [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x425009fd [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x2f1d9deb [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x1c08f6a8 [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x21d99c66 [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x72839243 [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x6eb3de4f [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x7529b2b0 [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x248b85e [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x3e8c3478 [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x2883f027 [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x5609cf8a [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x53cc8fce [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x66f7414d [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x734f6803 [0186.511] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x6c967b34 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x5ec690e6 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x11c8dbb1 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x3fb48be1 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x1c23ab86 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x7afb51e [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x7b69281 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x345ff500 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x552adcc6 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x2a416736 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x9a63a4f [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x17cf187d [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x7150a884 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x43116f53 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x64a5ac1 [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x4ad0885a [0186.512] RtlRandomEx (in: Seed=0xe3ffed0 | out: Seed=0xe3ffed0) returned 0x32eaea62 [0186.521] ReadFile (in: hFile=0x1548, lpBuffer=0x7d53fa8, nNumberOfBytesToRead=0x5b1, lpNumberOfBytesRead=0xe3ffecc, lpOverlapped=0x0 | out: lpBuffer=0x7d53fa8*, lpNumberOfBytesRead=0xe3ffecc*=0x5b1, lpOverlapped=0x0) returned 1 [0186.521] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.521] WriteFile (in: hFile=0x1548, lpBuffer=0x7d57bb0*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0xe3ffed0, lpOverlapped=0x0 | out: lpBuffer=0x7d57bb0*, lpNumberOfBytesWritten=0xe3ffed0*=0x5b1, lpOverlapped=0x0) returned 1 [0187.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0187.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0187.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0187.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d57bb0) returned 1 [0187.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d53fa8) returned 1 [0187.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0187.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85470) returned 1 [0187.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0187.701] SetFilePointerEx (in: hFile=0x1548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.701] WriteFile (in: hFile=0x1548, lpBuffer=0x7cad3d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe3fff58, lpOverlapped=0x0 | out: lpBuffer=0x7cad3d0*, lpNumberOfBytesWritten=0xe3fff58*=0x10c, lpOverlapped=0x0) returned 1 [0187.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0187.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0187.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0187.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0187.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b320 [0187.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0187.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0187.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a740) returned 1 [0187.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0187.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e740f0 [0187.769] sprintf (in: _Dest=0x3e740f0, _Format="%c%c" | out: _Dest="9a") returned 2 [0187.769] sprintf (in: _Dest=0x3e740f2, _Format="%c%c" | out: _Dest="fc") returned 2 [0187.769] sprintf (in: _Dest=0x3e740f4, _Format="%c%c" | out: _Dest="50") returned 2 [0187.769] sprintf (in: _Dest=0x3e740f6, _Format="%c%c" | out: _Dest="9f") returned 2 [0187.769] sprintf (in: _Dest=0x3e740f8, _Format="%c%c" | out: _Dest="cf") returned 2 [0187.769] sprintf (in: _Dest=0x3e740fa, _Format="%c%c" | out: _Dest="f0") returned 2 [0187.769] sprintf (in: _Dest=0x3e740fc, _Format="%c%c" | out: _Dest="87") returned 2 [0187.769] sprintf (in: _Dest=0x3e740fe, _Format="%c%c" | out: _Dest="83") returned 2 [0187.769] sprintf (in: _Dest=0x3e74100, _Format="%c%c" | out: _Dest="cf") returned 2 [0187.770] sprintf (in: _Dest=0x3e74102, _Format="%c%c" | out: _Dest="97") returned 2 [0187.770] sprintf (in: _Dest=0x3e74104, _Format="%c%c" | out: _Dest="22") returned 2 [0187.770] sprintf (in: _Dest=0x3e74106, _Format="%c%c" | out: _Dest="5b") returned 2 [0187.770] sprintf (in: _Dest=0x3e74108, _Format="%c%c" | out: _Dest="0b") returned 2 [0187.770] sprintf (in: _Dest=0x3e7410a, _Format="%c%c" | out: _Dest="23") returned 2 [0187.770] sprintf (in: _Dest=0x3e7410c, _Format="%c%c" | out: _Dest="47") returned 2 [0187.770] sprintf (in: _Dest=0x3e7410e, _Format="%c%c" | out: _Dest="03") returned 2 [0187.770] sprintf (in: _Dest=0x3e74110, _Format="%c%c" | out: _Dest="f9") returned 2 [0187.770] sprintf (in: _Dest=0x3e74112, _Format="%c%c" | out: _Dest="03") returned 2 [0187.770] sprintf (in: _Dest=0x3e74114, _Format="%c%c" | out: _Dest="68") returned 2 [0187.770] sprintf (in: _Dest=0x3e74116, _Format="%c%c" | out: _Dest="00") returned 2 [0187.770] sprintf (in: _Dest=0x3e74118, _Format="%c%c" | out: _Dest="a6") returned 2 [0187.770] sprintf (in: _Dest=0x3e7411a, _Format="%c%c" | out: _Dest="f1") returned 2 [0187.770] sprintf (in: _Dest=0x3e7411c, _Format="%c%c" | out: _Dest="93") returned 2 [0187.770] sprintf (in: _Dest=0x3e7411e, _Format="%c%c" | out: _Dest="f0") returned 2 [0187.770] sprintf (in: _Dest=0x3e74120, _Format="%c%c" | out: _Dest="41") returned 2 [0187.770] sprintf (in: _Dest=0x3e74122, _Format="%c%c" | out: _Dest="d5") returned 2 [0187.770] RtlInitAnsiString (in: DestinationString=0xe3ffee0, SourceString="9afc509fcff08783cf97225b0b234703f9036800a6f193f041d5" | out: DestinationString="9afc509fcff08783cf97225b0b234703f9036800a6f193f041d5") [0187.770] RtlAnsiStringToUnicodeString (in: DestinationString=0xe3ffed8, SourceString="9afc509fcff08783cf97225b0b234703f9036800a6f193f041d5", AllocateDestinationString=1 | out: DestinationString="9afc509fcff08783cf97225b0b234703f9036800a6f193f041d5") returned 0x0 [0187.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dfe0 [0187.771] wcscat (in: _Dest=0x7cad3d0, _Source="9afc509fcff08" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\9afc509fcff08") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\9afc509fcff08" [0187.771] wcscat (in: _Dest=0x7cad3d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\9afc509fcff08.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\9afc509fcff08.68814f" [0187.771] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\9afc509fcff08.68814f", NtPathName=0xe3ffed0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\9afc509fcff08.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3eca690 [0187.795] FlushFileBuffers (hFile=0x1548) returned 1 [0187.799] CloseHandle (hObject=0x1548) returned 1 [0187.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cad088 [0187.811] wcscpy (in: _Dest=0x7cad088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0187.811] wcscat (in: _Dest=0x7cad088, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" [0187.811] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814f-readme.txt")) returned 0x2020 [0187.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad088) returned 1 [0187.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc970) returned 1 Thread: id = 5568 os_tid = 0x1d00 [0183.210] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js")) returned 0x2020 [0185.058] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", dwFileAttributes=0x20) returned 1 [0189.246] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b34 [0189.246] GetFileSizeEx (in: hFile=0x1b34, lpFileSize=0xdadfc9c | out: lpFileSize=0xdadfc9c*=224) returned 1 [0189.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0189.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0189.247] NtQuerySystemTime (in: CurrentTime=0xdadfc10 | out: CurrentTime=0xdadfc10*=132462177678228000) returned 0x0 [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x11360c16 [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x22c1436f [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x5f864b7f [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x3f07e076 [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x478d3d49 [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x4c8c4493 [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x24857594 [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x67b1844f [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x1b5cc02b [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x446b782 [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x406fbe0d [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0xe369bc0 [0189.247] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x54608d89 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x78797822 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x21e7f40a [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0xeb382cb [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x8d6c16 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x450df413 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x6980448e [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x2d878de5 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x4037878f [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x32fccfd5 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x7f70e11 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x3871c3d0 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x271ec816 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0xbe97d10 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x396f7f56 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x45f819f3 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x2d00b2b5 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x7b1cf3c5 [0189.248] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x288daeeb [0189.249] RtlRandomEx (in: Seed=0xdadfc08 | out: Seed=0xdadfc08) returned 0x6a3962c2 [0189.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0189.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bbcbd0 [0189.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bc07d8 [0189.261] ReadFile (in: hFile=0x1b34, lpBuffer=0x7bbcbd0, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xdadfc04, lpOverlapped=0x0 | out: lpBuffer=0x7bbcbd0*, lpNumberOfBytesRead=0xdadfc04*=0xe0, lpOverlapped=0x0) returned 1 [0189.263] SetFilePointerEx (in: hFile=0x1b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.263] WriteFile (in: hFile=0x1b34, lpBuffer=0x7bc07d8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xdadfc08, lpOverlapped=0x0 | out: lpBuffer=0x7bc07d8*, lpNumberOfBytesWritten=0xdadfc08*=0xe0, lpOverlapped=0x0) returned 1 [0192.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0192.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0192.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0192.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc07d8) returned 1 [0192.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bbcbd0) returned 1 [0192.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0192.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a253e0) returned 1 [0192.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad7eb0 [0192.392] SetFilePointerEx (in: hFile=0x1b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.393] WriteFile (in: hFile=0x1b34, lpBuffer=0x7ca9ab8*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xdadfc90, lpOverlapped=0x0 | out: lpBuffer=0x7ca9ab8*, lpNumberOfBytesWritten=0xdadfc90*=0x11a, lpOverlapped=0x0) returned 1 [0192.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb82f0 [0192.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f90 [0192.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f90) returned 1 [0192.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37830 [0192.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f90 [0192.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0192.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0192.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82f0) returned 1 [0192.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6a88 [0192.628] sprintf (in: _Dest=0x2fe6a88, _Format="%c%c" | out: _Dest="58") returned 2 [0192.628] sprintf (in: _Dest=0x2fe6a8a, _Format="%c%c" | out: _Dest="4a") returned 2 [0192.628] sprintf (in: _Dest=0x2fe6a8c, _Format="%c%c" | out: _Dest="31") returned 2 [0192.628] sprintf (in: _Dest=0x2fe6a8e, _Format="%c%c" | out: _Dest="a3") returned 2 [0192.628] sprintf (in: _Dest=0x2fe6a90, _Format="%c%c" | out: _Dest="7f") returned 2 [0192.628] sprintf (in: _Dest=0x2fe6a92, _Format="%c%c" | out: _Dest="5d") returned 2 [0192.628] sprintf (in: _Dest=0x2fe6a94, _Format="%c%c" | out: _Dest="03") returned 2 [0192.628] sprintf (in: _Dest=0x2fe6a96, _Format="%c%c" | out: _Dest="63") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6a98, _Format="%c%c" | out: _Dest="ba") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6a9a, _Format="%c%c" | out: _Dest="e5") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6a9c, _Format="%c%c" | out: _Dest="78") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6a9e, _Format="%c%c" | out: _Dest="0d") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6aa0, _Format="%c%c" | out: _Dest="42") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6aa2, _Format="%c%c" | out: _Dest="19") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6aa4, _Format="%c%c" | out: _Dest="e8") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6aa6, _Format="%c%c" | out: _Dest="f5") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6aa8, _Format="%c%c" | out: _Dest="90") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6aaa, _Format="%c%c" | out: _Dest="72") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6aac, _Format="%c%c" | out: _Dest="cf") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6aae, _Format="%c%c" | out: _Dest="48") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6ab0, _Format="%c%c" | out: _Dest="cf") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6ab2, _Format="%c%c" | out: _Dest="5e") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6ab4, _Format="%c%c" | out: _Dest="87") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6ab6, _Format="%c%c" | out: _Dest="6b") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6ab8, _Format="%c%c" | out: _Dest="d9") returned 2 [0192.629] sprintf (in: _Dest=0x2fe6aba, _Format="%c%c" | out: _Dest="ba") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6abc, _Format="%c%c" | out: _Dest="e0") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6abe, _Format="%c%c" | out: _Dest="ce") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6ac0, _Format="%c%c" | out: _Dest="f5") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6ac2, _Format="%c%c" | out: _Dest="d7") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6ac4, _Format="%c%c" | out: _Dest="ef") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6ac6, _Format="%c%c" | out: _Dest="6a") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6ac8, _Format="%c%c" | out: _Dest="f9") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6aca, _Format="%c%c" | out: _Dest="1f") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6acc, _Format="%c%c" | out: _Dest="9b") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6ace, _Format="%c%c" | out: _Dest="e9") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6ad0, _Format="%c%c" | out: _Dest="de") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6ad2, _Format="%c%c" | out: _Dest="cd") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6ad4, _Format="%c%c" | out: _Dest="17") returned 2 [0192.630] sprintf (in: _Dest=0x2fe6ad6, _Format="%c%c" | out: _Dest="69") returned 2 [0192.630] RtlInitAnsiString (in: DestinationString=0xdadfc18, SourceString="584a31a37f5d0363bae5780d4219e8f59072cf48cf5e876bd9bae0cef5d7ef6af91f9be9decd1769" | out: DestinationString="584a31a37f5d0363bae5780d4219e8f59072cf48cf5e876bd9bae0cef5d7ef6af91f9be9decd1769") [0192.630] RtlAnsiStringToUnicodeString (in: DestinationString=0xdadfc10, SourceString="584a31a37f5d0363bae5780d4219e8f59072cf48cf5e876bd9bae0cef5d7ef6af91f9be9decd1769", AllocateDestinationString=1 | out: DestinationString="584a31a37f5d0363bae5780d4219e8f59072cf48cf5e876bd9bae0cef5d7ef6af91f9be9decd1769") returned 0x0 [0192.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66ae0 [0192.631] RtlFreeAnsiString (AnsiString="5") [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6a88) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37830) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f90) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9ab8) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066ec0) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0192.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0192.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0192.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca2b0) returned 1 [0192.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcabe8) returned 1 [0192.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7ca9ab8 [0192.632] wcscat (in: _Dest=0x7ca9ab8, _Source="584a31a37f5d0363bae5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\584a31a37f5d0363bae5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\584a31a37f5d0363bae5" [0192.632] wcscat (in: _Dest=0x7ca9ab8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\584a31a37f5d0363bae5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\584a31a37f5d0363bae5.68814f" [0192.632] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\584a31a37f5d0363bae5.68814f", NtPathName=0xdadfc08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\584a31a37f5d0363bae5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x130) returned 0x3db8148 [0192.632] NtSetInformationFile (FileHandle=0x1b34, IoStatusBlock=0xdadfc10, FileInformation=0x3db8148, Length=0x130, FileInformationClass=0xa) returned 0x0 [0192.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db8148) returned 1 [0192.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9d210) returned 1 [0192.764] NtQueryInformationFile (in: FileHandle=0x1b34, IoStatusBlock=0xdadfbe0, FileInformation=0xdadfbe8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdadfbe0, FileInformation=0xdadfbe8) returned 0x0 [0192.764] NtSetInformationFile (FileHandle=0x1b34, IoStatusBlock=0xdadfbe0, FileInformation=0xdadfbe8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9ab8) returned 1 [0192.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66ae0) returned 1 [0192.833] FlushFileBuffers (hFile=0x1b34) returned 1 [0192.856] CloseHandle (hObject=0x1b34) returned 1 [0192.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7a38fc0 [0192.964] wcscpy (in: _Dest=0x7a38fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\" [0192.964] wcscat (in: _Dest=0x7a38fc0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" [0192.964] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\68814f-readme.txt")) returned 0x2020 [0192.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38fc0) returned 1 [0192.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a384d0) returned 1 Thread: id = 5569 os_tid = 0xb24 [0183.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf8) returned 0x7a3f070 [0183.210] wcscpy (in: _Dest=0x7a3f070, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0183.210] wcscat (in: _Dest=0x7a3f070, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0183.210] wcscat (in: _Dest=0x7a3f070, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*" [0183.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54710 [0183.210] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5623b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592c110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592c110, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfbd0 [0184.181] wcscmp (_String1=".", _String2=".") returned 0 [0184.181] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5623b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592c110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592c110, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.951] wcscmp (_String1="..", _String2=".") returned 1 [0184.951] wcscmp (_String1="..", _String2="..") returned 0 [0184.951] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5628950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe562d770, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0184.951] wcscmp (_String1="af", _String2=".") returned 1 [0184.951] wcscmp (_String1="af", _String2="..") returned 1 [0184.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x2f93d0 [0184.952] wcscpy (in: _Dest=0x2f93d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0184.952] wcscat (in: _Dest=0x2f93d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0184.952] wcscat (in: _Dest=0x2f93d0, _Source="af" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0186.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2f93d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0186.248] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5634ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56373b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56373b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0186.248] wcscmp (_String1="am", _String2=".") returned 1 [0186.248] wcscmp (_String1="am", _String2="..") returned 1 [0186.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f190 [0186.248] wcscpy (in: _Dest=0x7b7f190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.248] wcscat (in: _Dest=0x7b7f190, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.248] wcscat (in: _Dest=0x7b7f190, _Source="am" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0186.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0186.249] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe563e8e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5643700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0186.250] wcscmp (_String1="ar", _String2=".") returned 1 [0186.250] wcscmp (_String1="ar", _String2="..") returned 1 [0186.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f298 [0186.250] wcscpy (in: _Dest=0x7b7f298, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.250] wcscat (in: _Dest=0x7b7f298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.250] wcscat (in: _Dest=0x7b7f298, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0186.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0186.251] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5648520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe564d340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1 [0186.251] wcscmp (_String1="az", _String2=".") returned 1 [0186.251] wcscmp (_String1="az", _String2="..") returned 1 [0186.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f3a0 [0186.252] wcscpy (in: _Dest=0x7b7f3a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.252] wcscat (in: _Dest=0x7b7f3a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.252] wcscat (in: _Dest=0x7b7f3a0, _Source="az" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0186.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0186.253] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5656f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5659690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5659690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0186.253] wcscmp (_String1="bg", _String2=".") returned 1 [0186.253] wcscmp (_String1="bg", _String2="..") returned 1 [0186.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f4a8 [0186.253] wcscpy (in: _Dest=0x7b7f4a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.253] wcscat (in: _Dest=0x7b7f4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.253] wcscat (in: _Dest=0x7b7f4a8, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0186.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0186.254] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56632d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56659e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0186.254] wcscmp (_String1="bn", _String2=".") returned 1 [0186.254] wcscmp (_String1="bn", _String2="..") returned 1 [0186.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f5b0 [0186.254] wcscpy (in: _Dest=0x7b7f5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.254] wcscat (in: _Dest=0x7b7f5b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.254] wcscat (in: _Dest=0x7b7f5b0, _Source="bn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0186.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454 [0186.256] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe566cf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe566f620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe566f620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0186.256] wcscmp (_String1="ca", _String2=".") returned 1 [0186.256] wcscmp (_String1="ca", _String2="..") returned 1 [0186.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e740 [0186.256] wcscpy (in: _Dest=0x7b7e740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.256] wcscat (in: _Dest=0x7b7e740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.256] wcscat (in: _Dest=0x7b7e740, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0186.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7e740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0186.257] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5676b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5687cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0186.257] wcscmp (_String1="cs", _String2=".") returned 1 [0186.257] wcscmp (_String1="cs", _String2="..") returned 1 [0186.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eeb198 [0186.257] wcscpy (in: _Dest=0x3eeb198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.257] wcscat (in: _Dest=0x3eeb198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.257] wcscat (in: _Dest=0x3eeb198, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0186.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0186.258] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe568f1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5691900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0186.259] wcscmp (_String1="da", _String2=".") returned 1 [0186.259] wcscmp (_String1="da", _String2="..") returned 1 [0186.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eeb2a0 [0186.259] wcscpy (in: _Dest=0x3eeb2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.259] wcscat (in: _Dest=0x3eeb2a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.259] wcscat (in: _Dest=0x3eeb2a0, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0186.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0186.260] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5698e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe569dc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0186.260] wcscmp (_String1="de", _String2=".") returned 1 [0186.260] wcscmp (_String1="de", _String2="..") returned 1 [0186.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eeb3a8 [0186.260] wcscpy (in: _Dest=0x3eeb3a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.260] wcscat (in: _Dest=0x3eeb3a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.260] wcscat (in: _Dest=0x3eeb3a8, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0186.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0186.261] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ac6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56aedc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56aedc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0186.261] wcscmp (_String1="el", _String2=".") returned 1 [0186.261] wcscmp (_String1="el", _String2="..") returned 1 [0186.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eeb4b0 [0186.262] wcscpy (in: _Dest=0x3eeb4b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.262] wcscat (in: _Dest=0x3eeb4b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.262] wcscat (in: _Dest=0x3eeb4b0, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0186.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0186.263] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b62f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b8a00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56b8a00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0186.263] wcscmp (_String1="en_GB", _String2=".") returned 1 [0186.263] wcscmp (_String1="en_GB", _String2="..") returned 1 [0186.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3eeb5b8 [0186.263] wcscpy (in: _Dest=0x3eeb5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.263] wcscat (in: _Dest=0x3eeb5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.263] wcscat (in: _Dest=0x3eeb5b8, _Source="en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0186.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0186.264] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56bff30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c2640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56c2640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0186.264] wcscmp (_String1="en_US", _String2=".") returned 1 [0186.264] wcscmp (_String1="en_US", _String2="..") returned 1 [0186.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3eeb6c0 [0186.264] wcscpy (in: _Dest=0x3eeb6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.265] wcscat (in: _Dest=0x3eeb6c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.265] wcscat (in: _Dest=0x3eeb6c0, _Source="en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0186.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0186.266] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56cc280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56d10a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0186.266] wcscmp (_String1="es", _String2=".") returned 1 [0186.266] wcscmp (_String1="es", _String2="..") returned 1 [0186.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eeb7c8 [0186.266] wcscpy (in: _Dest=0x3eeb7c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.266] wcscat (in: _Dest=0x3eeb7c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.266] wcscat (in: _Dest=0x3eeb7c8, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0186.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0186.267] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56d85d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56dace0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0186.267] wcscmp (_String1="es_419", _String2=".") returned 1 [0186.267] wcscmp (_String1="es_419", _String2="..") returned 1 [0186.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d040 [0186.267] wcscpy (in: _Dest=0x7b7d040, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.267] wcscat (in: _Dest=0x7b7d040, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.267] wcscat (in: _Dest=0x7b7d040, _Source="es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0186.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138 [0186.269] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56e2210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56e4920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0186.269] wcscmp (_String1="et", _String2=".") returned 1 [0186.269] wcscmp (_String1="et", _String2="..") returned 1 [0186.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eeb8d0 [0186.269] wcscpy (in: _Dest=0x3eeb8d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.269] wcscat (in: _Dest=0x3eeb8d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.269] wcscat (in: _Dest=0x3eeb8d0, _Source="et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0186.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0186.270] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ebe50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56f0c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0186.270] wcscmp (_String1="eu", _String2=".") returned 1 [0186.270] wcscmp (_String1="eu", _String2="..") returned 1 [0186.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eeb9d8 [0186.270] wcscpy (in: _Dest=0x3eeb9d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.270] wcscat (in: _Dest=0x3eeb9d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.270] wcscat (in: _Dest=0x3eeb9d8, _Source="eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0186.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0186.271] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56f81a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56fcfc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0186.271] wcscmp (_String1="fa", _String2=".") returned 1 [0186.271] wcscmp (_String1="fa", _String2="..") returned 1 [0186.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eebae0 [0186.272] wcscpy (in: _Dest=0x3eebae0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.272] wcscat (in: _Dest=0x3eebae0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.272] wcscat (in: _Dest=0x3eebae0, _Source="fa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0186.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eebae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140 [0186.273] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57044f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5706c00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0186.273] wcscmp (_String1="fi", _String2=".") returned 1 [0186.273] wcscmp (_String1="fi", _String2="..") returned 1 [0186.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eebbe8 [0186.273] wcscpy (in: _Dest=0x3eebbe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.273] wcscat (in: _Dest=0x3eebbe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.273] wcscat (in: _Dest=0x3eebbe8, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0186.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eebbe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0186.274] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe570e130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5710840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0186.274] wcscmp (_String1="fil", _String2=".") returned 1 [0186.274] wcscmp (_String1="fil", _String2="..") returned 1 [0186.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x3eebcf0 [0186.275] wcscpy (in: _Dest=0x3eebcf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.275] wcscat (in: _Dest=0x3eebcf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.275] wcscat (in: _Dest=0x3eebcf0, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0186.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eebcf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0186.276] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5717d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571a480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe571a480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0186.276] wcscmp (_String1="fr", _String2=".") returned 1 [0186.276] wcscmp (_String1="fr", _String2="..") returned 1 [0186.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eebdf8 [0186.276] wcscpy (in: _Dest=0x3eebdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.276] wcscat (in: _Dest=0x3eebdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.276] wcscat (in: _Dest=0x3eebdf8, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0186.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eebdf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0186.277] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57240c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57267d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1 [0186.277] wcscmp (_String1="fr_CA", _String2=".") returned 1 [0186.277] wcscmp (_String1="fr_CA", _String2="..") returned 1 [0186.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3eebf00 [0186.277] wcscpy (in: _Dest=0x3eebf00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.277] wcscat (in: _Dest=0x3eebf00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.277] wcscat (in: _Dest=0x3eebf00, _Source="fr_CA" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0186.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eebf00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0186.278] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5730410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5732b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0186.278] wcscmp (_String1="gl", _String2=".") returned 1 [0186.278] wcscmp (_String1="gl", _String2="..") returned 1 [0186.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eec008 [0186.278] wcscpy (in: _Dest=0x3eec008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.278] wcscat (in: _Dest=0x3eec008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.279] wcscat (in: _Dest=0x3eec008, _Source="gl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0186.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0186.280] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe573a050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe573ee70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0186.280] wcscmp (_String1="gu", _String2=".") returned 1 [0186.280] wcscmp (_String1="gu", _String2="..") returned 1 [0186.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eec110 [0186.280] wcscpy (in: _Dest=0x3eec110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.280] wcscat (in: _Dest=0x3eec110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.280] wcscat (in: _Dest=0x3eec110, _Source="gu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0186.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0186.281] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5748ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe574b1c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0186.281] wcscmp (_String1="hi", _String2=".") returned 1 [0186.281] wcscmp (_String1="hi", _String2="..") returned 1 [0186.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eec218 [0186.281] wcscpy (in: _Dest=0x3eec218, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.282] wcscat (in: _Dest=0x3eec218, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.282] wcscat (in: _Dest=0x3eec218, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0186.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0186.283] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57526f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5754e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0186.283] wcscmp (_String1="hr", _String2=".") returned 1 [0186.283] wcscmp (_String1="hr", _String2="..") returned 1 [0186.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x3eec320 [0186.283] wcscpy (in: _Dest=0x3eec320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.283] wcscat (in: _Dest=0x3eec320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.283] wcscat (in: _Dest=0x3eec320, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0186.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0186.712] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe575c330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5761150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0186.712] wcscmp (_String1="hu", _String2=".") returned 1 [0186.712] wcscmp (_String1="hu", _String2="..") returned 1 [0186.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b86320 [0186.712] wcscpy (in: _Dest=0x7b86320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0186.712] wcscat (in: _Dest=0x7b86320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0186.712] wcscat (in: _Dest=0x7b86320, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0187.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b86320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0187.183] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5765f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe576ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1 [0187.183] wcscmp (_String1="hy", _String2=".") returned 1 [0187.183] wcscmp (_String1="hy", _String2="..") returned 1 [0187.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f7c0 [0187.183] wcscpy (in: _Dest=0x7b7f7c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.183] wcscat (in: _Dest=0x7b7f7c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.183] wcscat (in: _Dest=0x7b7f7c0, _Source="hy" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0187.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0187.184] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57749d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57770e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57770e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0187.184] wcscmp (_String1="id", _String2=".") returned 1 [0187.185] wcscmp (_String1="id", _String2="..") returned 1 [0187.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f8c8 [0187.185] wcscpy (in: _Dest=0x7b7f8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.185] wcscat (in: _Dest=0x7b7f8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.185] wcscat (in: _Dest=0x7b7f8c8, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0187.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4 [0187.186] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe577e610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5783430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0187.186] wcscmp (_String1="is", _String2=".") returned 1 [0187.186] wcscmp (_String1="is", _String2="..") returned 1 [0187.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f9d0 [0187.186] wcscpy (in: _Dest=0x7b7f9d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.186] wcscat (in: _Dest=0x7b7f9d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.186] wcscat (in: _Dest=0x7b7f9d0, _Source="is" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0187.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0187.187] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5788250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe578d070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0187.187] wcscmp (_String1="it", _String2=".") returned 1 [0187.187] wcscmp (_String1="it", _String2="..") returned 1 [0187.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b879d0 [0187.188] wcscpy (in: _Dest=0x7b879d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.188] wcscat (in: _Dest=0x7b879d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.188] wcscat (in: _Dest=0x7b879d0, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0187.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b879d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0187.189] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5791e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57993c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0187.189] wcscmp (_String1="iw", _String2=".") returned 1 [0187.189] wcscmp (_String1="iw", _String2="..") returned 1 [0187.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b87ad8 [0187.189] wcscpy (in: _Dest=0x7b87ad8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.189] wcscat (in: _Dest=0x7b87ad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.189] wcscat (in: _Dest=0x7b87ad8, _Source="iw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0187.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b87ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0187.190] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57a08f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57a5710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0187.190] wcscmp (_String1="ja", _String2=".") returned 1 [0187.190] wcscmp (_String1="ja", _String2="..") returned 1 [0187.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b87be0 [0187.191] wcscpy (in: _Dest=0x7b87be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.191] wcscat (in: _Dest=0x7b87be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.191] wcscat (in: _Dest=0x7b87be0, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0187.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b87be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0 [0187.192] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57aa530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57af350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0187.192] wcscmp (_String1="ka", _String2=".") returned 1 [0187.192] wcscmp (_String1="ka", _String2="..") returned 1 [0187.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b87ce8 [0187.192] wcscpy (in: _Dest=0x7b87ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.192] wcscat (in: _Dest=0x7b87ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.192] wcscat (in: _Dest=0x7b87ce8, _Source="ka" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0187.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b87ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0187.193] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57b4170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57b8f90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1 [0187.193] wcscmp (_String1="km", _String2=".") returned 1 [0187.193] wcscmp (_String1="km", _String2="..") returned 1 [0187.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b87df0 [0187.194] wcscpy (in: _Dest=0x7b87df0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.194] wcscat (in: _Dest=0x7b87df0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.194] wcscat (in: _Dest=0x7b87df0, _Source="km" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0187.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b87df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0187.195] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57c04c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57c52e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0187.195] wcscmp (_String1="kn", _String2=".") returned 1 [0187.195] wcscmp (_String1="kn", _String2="..") returned 1 [0187.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b87ef8 [0187.195] wcscpy (in: _Dest=0x7b87ef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.195] wcscat (in: _Dest=0x7b87ef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.195] wcscat (in: _Dest=0x7b87ef8, _Source="kn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0187.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b87ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0187.196] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57cc810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57d1630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0187.196] wcscmp (_String1="ko", _String2=".") returned 1 [0187.196] wcscmp (_String1="ko", _String2="..") returned 1 [0187.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b88000 [0187.196] wcscpy (in: _Dest=0x7b88000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.197] wcscat (in: _Dest=0x7b88000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.197] wcscat (in: _Dest=0x7b88000, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0187.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b88000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0187.198] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57d8b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57db270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1 [0187.198] wcscmp (_String1="lo", _String2=".") returned 1 [0187.198] wcscmp (_String1="lo", _String2="..") returned 1 [0187.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b88108 [0187.198] wcscpy (in: _Dest=0x7b88108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0187.198] wcscat (in: _Dest=0x7b88108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0187.198] wcscat (in: _Dest=0x7b88108, _Source="lo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" [0187.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b88108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0187.199] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57e27a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57e4eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0188.432] wcscmp (_String1="lt", _String2=".") returned 1 [0188.432] wcscmp (_String1="lt", _String2="..") returned 1 [0188.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e428 [0188.432] wcscpy (in: _Dest=0x7b7e428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0188.432] wcscat (in: _Dest=0x7b7e428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0188.432] wcscat (in: _Dest=0x7b7e428, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0195.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7e428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0195.791] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57f1200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57f3910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0195.791] wcscmp (_String1="lv", _String2=".") returned 1 [0195.791] wcscmp (_String1="lv", _String2="..") returned 1 [0195.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab5c8 [0195.791] wcscpy (in: _Dest=0x7cab5c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.791] wcscat (in: _Dest=0x7cab5c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.791] wcscat (in: _Dest=0x7cab5c8, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0195.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8 [0195.793] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57fae40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57fd550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0195.793] wcscmp (_String1="ml", _String2=".") returned 1 [0195.793] wcscmp (_String1="ml", _String2="..") returned 1 [0195.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caa650 [0195.793] wcscpy (in: _Dest=0x7caa650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.793] wcscat (in: _Dest=0x7caa650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.793] wcscat (in: _Dest=0x7caa650, _Source="ml" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0195.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0195.794] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5804a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5807190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0195.794] wcscmp (_String1="mn", _String2=".") returned 1 [0195.794] wcscmp (_String1="mn", _String2="..") returned 1 [0195.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caa548 [0195.795] wcscpy (in: _Dest=0x7caa548, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.795] wcscat (in: _Dest=0x7caa548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.795] wcscat (in: _Dest=0x7caa548, _Source="mn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0195.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0195.796] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5810dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5815bf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0195.796] wcscmp (_String1="mr", _String2=".") returned 1 [0195.796] wcscmp (_String1="mr", _String2="..") returned 1 [0195.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caa440 [0195.796] wcscpy (in: _Dest=0x7caa440, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.796] wcscat (in: _Dest=0x7caa440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.796] wcscat (in: _Dest=0x7caa440, _Source="mr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0195.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0195.798] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe581d120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe581f830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe581f830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0195.798] wcscmp (_String1="ms", _String2=".") returned 1 [0195.798] wcscmp (_String1="ms", _String2="..") returned 1 [0195.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab7d8 [0195.798] wcscpy (in: _Dest=0x7cab7d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.798] wcscat (in: _Dest=0x7cab7d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.798] wcscat (in: _Dest=0x7cab7d8, _Source="ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0195.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0195.800] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5826d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe582bb80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1 [0195.800] wcscmp (_String1="ne", _String2=".") returned 1 [0195.800] wcscmp (_String1="ne", _String2="..") returned 1 [0195.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab8e0 [0195.800] wcscpy (in: _Dest=0x7cab8e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.800] wcscat (in: _Dest=0x7cab8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.800] wcscat (in: _Dest=0x7cab8e0, _Source="ne" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0195.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0195.802] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58309a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5841b10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0195.802] wcscmp (_String1="nl", _String2=".") returned 1 [0195.802] wcscmp (_String1="nl", _String2="..") returned 1 [0195.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caaa70 [0195.802] wcscpy (in: _Dest=0x7caaa70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.802] wcscat (in: _Dest=0x7caaa70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.802] wcscat (in: _Dest=0x7caaa70, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0195.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caaa70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0195.804] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5849040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe584b750, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0195.804] wcscmp (_String1="no", _String2=".") returned 1 [0195.804] wcscmp (_String1="no", _String2="..") returned 1 [0195.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab9e8 [0195.804] wcscpy (in: _Dest=0x7cab9e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.804] wcscat (in: _Dest=0x7cab9e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.804] wcscat (in: _Dest=0x7cab9e8, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" [0195.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0195.806] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5852c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5855390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0195.806] wcscmp (_String1="pl", _String2=".") returned 1 [0195.806] wcscmp (_String1="pl", _String2="..") returned 1 [0195.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caab78 [0195.806] wcscpy (in: _Dest=0x7caab78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.806] wcscat (in: _Dest=0x7caab78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.806] wcscat (in: _Dest=0x7caab78, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" [0195.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caab78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0195.808] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe585c8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe585efd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0195.808] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0195.808] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0195.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7cabaf0 [0195.808] wcscpy (in: _Dest=0x7cabaf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.808] wcscat (in: _Dest=0x7cabaf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.808] wcscat (in: _Dest=0x7cabaf0, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" [0195.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cabaf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0195.810] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5866500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5868c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5868c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0195.810] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0195.810] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0195.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7caac80 [0195.810] wcscpy (in: _Dest=0x7caac80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.810] wcscat (in: _Dest=0x7caac80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.810] wcscat (in: _Dest=0x7caac80, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" [0195.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caac80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0195.812] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5874f60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5877670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0195.812] wcscmp (_String1="ro", _String2=".") returned 1 [0195.812] wcscmp (_String1="ro", _String2="..") returned 1 [0195.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caad88 [0195.812] wcscpy (in: _Dest=0x7caad88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.812] wcscat (in: _Dest=0x7caad88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.812] wcscat (in: _Dest=0x7caad88, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" [0195.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caad88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0195.814] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe587eba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58812b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0195.814] wcscmp (_String1="ru", _String2=".") returned 1 [0195.814] wcscmp (_String1="ru", _String2="..") returned 1 [0195.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caae90 [0195.814] wcscpy (in: _Dest=0x7caae90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.814] wcscat (in: _Dest=0x7caae90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.814] wcscat (in: _Dest=0x7caae90, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" [0195.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caae90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0195.816] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58887e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe588d600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0195.816] wcscmp (_String1="si", _String2=".") returned 1 [0195.816] wcscmp (_String1="si", _String2="..") returned 1 [0195.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cabbf8 [0195.816] wcscpy (in: _Dest=0x7cabbf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.816] wcscat (in: _Dest=0x7cabbf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.816] wcscat (in: _Dest=0x7cabbf8, _Source="si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" [0195.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cabbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0195.817] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5894b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5897240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0195.817] wcscmp (_String1="sk", _String2=".") returned 1 [0195.817] wcscmp (_String1="sk", _String2="..") returned 1 [0195.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caaf98 [0195.817] wcscpy (in: _Dest=0x7caaf98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.817] wcscat (in: _Dest=0x7caaf98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.818] wcscat (in: _Dest=0x7caaf98, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" [0195.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caaf98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0195.819] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe589e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a0e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58a0e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0195.819] wcscmp (_String1="sl", _String2=".") returned 1 [0195.819] wcscmp (_String1="sl", _String2="..") returned 1 [0195.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cabd00 [0195.819] wcscpy (in: _Dest=0x7cabd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.819] wcscat (in: _Dest=0x7cabd00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.819] wcscat (in: _Dest=0x7cabd00, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" [0195.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cabd00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c [0195.821] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58a83b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ad1d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0195.821] wcscmp (_String1="sr", _String2=".") returned 1 [0195.821] wcscmp (_String1="sr", _String2="..") returned 1 [0195.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab4c0 [0195.821] wcscpy (in: _Dest=0x7cab4c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.821] wcscat (in: _Dest=0x7cab4c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.821] wcscat (in: _Dest=0x7cab4c0, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" [0195.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab4c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0195.822] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58b1ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58b6e10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0195.823] wcscmp (_String1="sv", _String2=".") returned 1 [0195.823] wcscmp (_String1="sv", _String2="..") returned 1 [0195.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7cab6d0 [0195.823] wcscpy (in: _Dest=0x7cab6d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.823] wcscat (in: _Dest=0x7cab6d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.823] wcscat (in: _Dest=0x7cab6d0, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0195.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58 [0195.824] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58bbc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58c0a50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0195.824] wcscmp (_String1="sw", _String2=".") returned 1 [0195.824] wcscmp (_String1="sw", _String2="..") returned 1 [0195.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caa968 [0195.825] wcscpy (in: _Dest=0x7caa968, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.825] wcscat (in: _Dest=0x7caa968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.825] wcscat (in: _Dest=0x7caa968, _Source="sw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0195.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0 [0195.826] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ca690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0195.826] wcscmp (_String1="ta", _String2=".") returned 1 [0195.826] wcscmp (_String1="ta", _String2="..") returned 1 [0195.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7caa860 [0195.826] wcscpy (in: _Dest=0x7caa860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0195.827] wcscat (in: _Dest=0x7caa860, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0195.827] wcscat (in: _Dest=0x7caa860, _Source="ta" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0195.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054 [0197.962] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58cf4b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58d42d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0197.962] wcscmp (_String1="te", _String2=".") returned 1 [0197.962] wcscmp (_String1="te", _String2="..") returned 1 [0197.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b80000 [0197.962] wcscpy (in: _Dest=0x7b80000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0197.962] wcscat (in: _Dest=0x7b80000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0197.962] wcscat (in: _Dest=0x7b80000, _Source="te" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0199.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b80000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0199.616] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58d90f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ddf10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0199.616] wcscmp (_String1="th", _String2=".") returned 1 [0199.616] wcscmp (_String1="th", _String2="..") returned 1 [0199.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bd0a8 [0199.617] wcscpy (in: _Dest=0x30bd0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0199.617] wcscat (in: _Dest=0x30bd0a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0199.617] wcscat (in: _Dest=0x30bd0a8, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0199.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bd0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0199.618] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58e5440, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58e7b50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58e7b50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0199.618] wcscmp (_String1="tr", _String2=".") returned 1 [0199.618] wcscmp (_String1="tr", _String2="..") returned 1 [0199.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc448 [0199.618] wcscpy (in: _Dest=0x30bc448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0199.618] wcscat (in: _Dest=0x30bc448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0199.618] wcscat (in: _Dest=0x30bc448, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0199.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0199.620] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58ef080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f1790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58f1790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0199.620] wcscmp (_String1="uk", _String2=".") returned 1 [0199.620] wcscmp (_String1="uk", _String2="..") returned 1 [0199.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc340 [0199.620] wcscpy (in: _Dest=0x30bc340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0199.620] wcscat (in: _Dest=0x30bc340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0199.620] wcscat (in: _Dest=0x30bc340, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" [0199.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x30bc340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0199.621] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58f8cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58fb3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1 [0199.621] wcscmp (_String1="ur", _String2=".") returned 1 [0199.622] wcscmp (_String1="ur", _String2="..") returned 1 [0199.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6b530 [0199.622] wcscpy (in: _Dest=0x7a6b530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0199.622] wcscat (in: _Dest=0x7a6b530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0199.622] wcscat (in: _Dest=0x7a6b530, _Source="ur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" [0199.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148 [0199.623] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5902900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5907720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0199.623] wcscmp (_String1="vi", _String2=".") returned 1 [0199.623] wcscmp (_String1="vi", _String2="..") returned 1 [0199.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6b740 [0199.623] wcscpy (in: _Dest=0x7a6b740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0199.624] wcscat (in: _Dest=0x7a6b740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0199.624] wcscat (in: _Dest=0x7a6b740, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" [0199.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0199.625] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe590c540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5911360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0199.625] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0199.625] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0199.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b950 [0199.625] wcscpy (in: _Dest=0x7a6b950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0199.625] wcscat (in: _Dest=0x7a6b950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0199.625] wcscat (in: _Dest=0x7a6b950, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" [0199.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0199.626] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5918890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe591afa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1 [0199.626] wcscmp (_String1="zh_HK", _String2=".") returned 1 [0199.626] wcscmp (_String1="zh_HK", _String2="..") returned 1 [0199.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6a4b0 [0199.627] wcscpy (in: _Dest=0x7a6a4b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0199.627] wcscat (in: _Dest=0x7a6a4b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0199.627] wcscat (in: _Dest=0x7a6a4b0, _Source="zh_HK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0199.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0199.629] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe59224d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5924be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0199.629] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0199.629] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0199.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b638 [0199.629] wcscpy (in: _Dest=0x7a6b638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0199.629] wcscat (in: _Dest=0x7a6b638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0199.629] wcscat (in: _Dest=0x7a6b638, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0199.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0199.630] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe592c110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592e820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592e820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1 [0199.630] wcscmp (_String1="zu", _String2=".") returned 1 [0199.631] wcscmp (_String1="zu", _String2="..") returned 1 [0199.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7a6ba58 [0199.631] wcscpy (in: _Dest=0x7a6ba58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" [0199.631] wcscat (in: _Dest=0x7a6ba58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\" [0199.631] wcscat (in: _Dest=0x7a6ba58, _Source="zu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" [0199.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6ba58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530 [0199.632] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe592c110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592e820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592e820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 0 [0199.632] FindClose (in: hFindFile=0x3dcfbd0 | out: hFindFile=0x3dcfbd0) returned 1 [0199.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54710) returned 1 [0199.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f070) returned 1 [0199.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d99300) returned 1 Thread: id = 5570 os_tid = 0xb7c [0183.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bcc88 [0183.211] wcscpy (in: _Dest=0x30bcc88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0183.211] wcscat (in: _Dest=0x30bcc88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0183.211] wcscat (in: _Dest=0x30bcc88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*" [0183.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a544a8 [0183.211] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d340 [0185.057] wcscmp (_String1=".", _String2=".") returned 0 [0185.057] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5953210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.057] wcscmp (_String1="..", _String2=".") returned 1 [0185.057] wcscmp (_String1="..", _String2="..") returned 0 [0185.057] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5cd5910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5cd5910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5cd5910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0185.057] wcscmp (_String1="computed_hashes.json", _String2=".") returned 1 [0185.057] wcscmp (_String1="computed_hashes.json", _String2="..") returned 1 [0185.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b81478 [0185.057] wcscpy (in: _Dest=0x7b81478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0185.057] wcscat (in: _Dest=0x7b81478, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0185.057] wcscat (in: _Dest=0x7b81478, _Source="computed_hashes.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" [0185.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0185.563] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5955920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5955920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0185.563] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0185.563] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0185.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca420 [0185.564] wcscpy (in: _Dest=0x3eca420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" [0185.564] wcscat (in: _Dest=0x3eca420, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0185.564] wcscat (in: _Dest=0x3eca420, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" [0185.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eca420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0185.565] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5955920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5955920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0185.565] FindClose (in: hFindFile=0x7a2d340 | out: hFindFile=0x7a2d340) returned 1 [0185.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a544a8) returned 1 [0185.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcc88) returned 1 [0185.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f7ac8) returned 1 Thread: id = 5571 os_tid = 0x1d44 [0183.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs")) returned 0x20 [0184.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", dwFileAttributes=0x20) returned 0 [0184.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.257] GetLastError () returned 0x5 [0184.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS", dwFileAttributes=0x20) returned 0 [0184.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 5572 os_tid = 0x1edc [0183.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc")) returned 0x20 [0184.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.258] GetLastError () returned 0x5 [0184.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 5573 os_tid = 0xa90 [0183.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt")) returned 0x20 [0184.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.264] GetLastError () returned 0x5 [0184.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 5574 os_tid = 0xc68 [0183.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk")) returned 0x20 [0184.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.265] GetLastError () returned 0x5 [0184.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 5575 os_tid = 0x474 [0183.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk")) returned 0x20 [0184.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.267] GetLastError () returned 0x5 [0184.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 5576 os_tid = 0x528 [0183.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css")) returned 0x20 [0184.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", dwFileAttributes=0x20) returned 0 [0184.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.269] GetLastError () returned 0x5 [0184.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS", dwFileAttributes=0x20) returned 0 [0184.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47318) returned 1 Thread: id = 5577 os_tid = 0x9cc [0183.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd")) returned 0x20 [0184.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", dwFileAttributes=0x20) returned 0 [0184.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.270] GetLastError () returned 0x5 [0184.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD", dwFileAttributes=0x20) returned 0 [0184.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 5578 os_tid = 0x9dc [0183.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd")) returned 0x20 [0184.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", dwFileAttributes=0x20) returned 0 [0184.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.272] GetLastError () returned 0x5 [0184.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD", dwFileAttributes=0x20) returned 0 [0184.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 5579 os_tid = 0x257c [0183.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd")) returned 0x20 [0184.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", dwFileAttributes=0x20) returned 0 [0184.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.273] GetLastError () returned 0x5 [0184.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD", dwFileAttributes=0x20) returned 0 [0184.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 5580 os_tid = 0x2580 [0183.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml")) returned 0x20 [0184.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", dwFileAttributes=0x20) returned 0 [0184.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.275] GetLastError () returned 0x5 [0184.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML", dwFileAttributes=0x20) returned 0 [0184.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 5581 os_tid = 0x2584 [0183.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml")) returned 0x20 [0184.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", dwFileAttributes=0x20) returned 0 [0184.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.276] GetLastError () returned 0x5 [0184.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML", dwFileAttributes=0x20) returned 0 [0184.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 5582 os_tid = 0x2588 [0183.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs")) returned 0x20 [0184.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", dwFileAttributes=0x20) returned 0 [0184.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.278] GetLastError () returned 0x5 [0184.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS", dwFileAttributes=0x20) returned 0 [0184.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 Thread: id = 5583 os_tid = 0x258c [0183.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc")) returned 0x20 [0184.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.261] GetLastError () returned 0x5 [0184.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC", dwFileAttributes=0x20) returned 0 [0184.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47898) returned 1 Thread: id = 5584 os_tid = 0x2590 [0183.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt")) returned 0x20 [0184.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.262] GetLastError () returned 0x5 [0184.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT", dwFileAttributes=0x20) returned 0 [0184.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c18) returned 1 Thread: id = 5585 os_tid = 0x2594 [0183.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk")) returned 0x20 [0184.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.280] GetLastError () returned 0x5 [0184.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 5586 os_tid = 0x2010 [0183.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk")) returned 0x20 [0184.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.254] GetLastError () returned 0x5 [0184.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0184.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 5587 os_tid = 0x2014 [0183.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg")) returned 0x20 [0183.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0183.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.222] GetLastError () returned 0x5 [0183.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg", dwFileAttributes=0x20) returned 0 [0183.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682e8) returned 1 Thread: id = 5588 os_tid = 0x206c [0183.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp")) returned 0x20 [0183.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0183.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.225] GetLastError () returned 0x5 [0183.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp", dwFileAttributes=0x20) returned 0 [0183.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64250) returned 1 Thread: id = 5589 os_tid = 0x2070 [0183.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif")) returned 0x20 [0183.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif", dwFileAttributes=0x20) returned 0 [0183.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.227] GetLastError () returned 0x5 [0183.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif", dwFileAttributes=0x20) returned 0 [0183.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57438) returned 1 Thread: id = 5590 os_tid = 0x2074 [0183.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif")) returned 0x20 [0183.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0183.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.229] GetLastError () returned 0x5 [0183.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF", dwFileAttributes=0x20) returned 0 [0183.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56628) returned 1 Thread: id = 5591 os_tid = 0x207c [0183.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif")) returned 0x20 [0183.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0183.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.231] GetLastError () returned 0x5 [0183.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif", dwFileAttributes=0x20) returned 0 [0183.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 Thread: id = 5592 os_tid = 0x2080 [0183.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif")) returned 0x20 [0183.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0183.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.238] GetLastError () returned 0x5 [0183.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif", dwFileAttributes=0x20) returned 0 [0183.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85220) returned 1 Thread: id = 5593 os_tid = 0x2084 [0183.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif")) returned 0x20 [0183.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0183.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.240] GetLastError () returned 0x5 [0183.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif", dwFileAttributes=0x20) returned 0 [0183.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57500) returned 1 Thread: id = 5594 os_tid = 0x2088 [0183.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif")) returned 0x20 [0183.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0183.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.242] GetLastError () returned 0x5 [0183.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif", dwFileAttributes=0x20) returned 0 [0183.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3011188) returned 1 Thread: id = 5595 os_tid = 0x208c [0183.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif")) returned 0x20 [0183.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0183.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.244] GetLastError () returned 0x5 [0183.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif", dwFileAttributes=0x20) returned 0 [0183.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64330) returned 1 Thread: id = 5596 os_tid = 0x2090 [0183.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif")) returned 0x20 [0183.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0183.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.257] GetLastError () returned 0x5 [0183.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif", dwFileAttributes=0x20) returned 0 [0183.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86190) returned 1 Thread: id = 5597 os_tid = 0x2094 [0183.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif")) returned 0x20 [0183.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0183.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.259] GetLastError () returned 0x5 [0183.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif", dwFileAttributes=0x20) returned 0 [0183.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57cd0) returned 1 Thread: id = 5598 os_tid = 0x2098 [0183.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif")) returned 0x20 [0183.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0183.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.262] GetLastError () returned 0x5 [0183.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif", dwFileAttributes=0x20) returned 0 [0183.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb5d0) returned 1 Thread: id = 5599 os_tid = 0x209c [0183.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif")) returned 0x20 [0183.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0183.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.965] GetLastError () returned 0x5 [0183.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif", dwFileAttributes=0x20) returned 0 [0183.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d868e0) returned 1 Thread: id = 5600 os_tid = 0x214c [0183.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif")) returned 0x20 [0184.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0184.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.115] GetLastError () returned 0x5 [0184.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif", dwFileAttributes=0x20) returned 0 [0184.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d869b0) returned 1 Thread: id = 5601 os_tid = 0x140 [0183.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif")) returned 0x20 [0183.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0183.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.962] GetLastError () returned 0x5 [0183.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif", dwFileAttributes=0x20) returned 0 [0183.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86a80) returned 1 Thread: id = 5602 os_tid = 0xa0c [0183.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif")) returned 0x20 [0184.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0184.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.124] GetLastError () returned 0x5 [0184.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif", dwFileAttributes=0x20) returned 0 [0184.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb6a8) returned 1 Thread: id = 5603 os_tid = 0xa1c [0183.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif")) returned 0x20 [0184.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0184.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.123] GetLastError () returned 0x5 [0184.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif", dwFileAttributes=0x20) returned 0 [0184.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3034e90) returned 1 Thread: id = 5604 os_tid = 0x2158 [0183.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif")) returned 0x20 [0184.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif", dwFileAttributes=0x20) returned 0 [0184.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.121] GetLastError () returned 0x5 [0184.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif", dwFileAttributes=0x20) returned 0 [0184.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30352a0) returned 1 Thread: id = 5605 os_tid = 0x219c [0183.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif")) returned 0x20 [0184.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif", dwFileAttributes=0x20) returned 0 [0184.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.119] GetLastError () returned 0x5 [0184.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif", dwFileAttributes=0x20) returned 0 [0184.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a644f0) returned 1 Thread: id = 5606 os_tid = 0xa2c [0183.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif")) returned 0x20 [0184.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0184.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.117] GetLastError () returned 0x5 [0184.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif", dwFileAttributes=0x20) returned 0 [0184.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb4f8) returned 1 Thread: id = 5607 os_tid = 0xa3c [0183.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif")) returned 0x20 [0183.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0183.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0183.964] GetLastError () returned 0x5 [0183.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif", dwFileAttributes=0x20) returned 0 [0183.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3036d70) returned 1 Thread: id = 5608 os_tid = 0xa4c [0183.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\accsbar.poc")) returned 0x20 [0185.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC", dwFileAttributes=0x20) returned 0 [0185.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\accsbar.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.139] GetLastError () returned 0x5 [0185.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC", dwFileAttributes=0x20) returned 0 [0185.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bd50) returned 1 Thread: id = 5609 os_tid = 0x484 [0183.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\acctbox.poc")) returned 0x20 [0185.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC", dwFileAttributes=0x20) returned 0 [0185.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\acctbox.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.141] GetLastError () returned 0x5 [0185.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC", dwFileAttributes=0x20) returned 0 [0185.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 5610 os_tid = 0xa6c [0183.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.dpv")) returned 0x20 [0185.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV", dwFileAttributes=0x20) returned 0 [0185.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.100] GetLastError () returned 0x5 [0185.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV", dwFileAttributes=0x20) returned 0 [0185.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47398) returned 1 Thread: id = 5611 os_tid = 0xa94 [0183.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml")) returned 0x20 [0185.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML", dwFileAttributes=0x20) returned 0 [0185.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.369] GetLastError () returned 0x5 [0185.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML", dwFileAttributes=0x20) returned 0 [0185.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c98) returned 1 Thread: id = 5612 os_tid = 0xa88 [0183.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad98.poc")) returned 0x20 [0185.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC", dwFileAttributes=0x20) returned 0 [0185.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.367] GetLastError () returned 0x5 [0185.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC", dwFileAttributes=0x20) returned 0 [0185.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f98) returned 1 Thread: id = 5613 os_tid = 0xa84 [0183.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\adrespel.poc")) returned 0x20 [0185.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC", dwFileAttributes=0x20) returned 0 [0185.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\adrespel.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.366] GetLastError () returned 0x5 [0185.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC", dwFileAttributes=0x20) returned 0 [0185.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 5614 os_tid = 0xa98 [0183.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a2a0 [0183.542] wcscpy (in: _Dest=0x7a6a2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0183.542] wcscat (in: _Dest=0x7a6a2a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" [0183.542] wcscat (in: _Dest=0x7a6a2a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*" [0183.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0183.542] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e21990, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e240a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e240a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfc10 [0183.543] wcscmp (_String1=".", _String2=".") returned 0 [0183.543] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e21990, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e240a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e240a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.543] wcscmp (_String1="..", _String2=".") returned 1 [0183.543] wcscmp (_String1="..", _String2="..") returned 0 [0183.543] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e240a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e267b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.543] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.543] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d555f0 [0183.543] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" [0183.543] wcscat (in: _Dest=0x3d555f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" [0183.543] wcscat (in: _Dest=0x3d555f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" [0184.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d555f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e4 [0184.412] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e240a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e267b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.412] FindClose (in: hFindFile=0x3dcfc10 | out: hFindFile=0x3dcfc10) returned 1 [0184.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0184.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a2a0) returned 1 [0184.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc868) returned 1 Thread: id = 5615 os_tid = 0x21a0 [0183.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a3a8 [0183.544] wcscpy (in: _Dest=0x7a6a3a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0183.544] wcscat (in: _Dest=0x7a6a3a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" [0183.544] wcscat (in: _Dest=0x7a6a3a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*" [0183.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0183.544] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e2b5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e2dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e2dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf9d0 [0184.143] wcscmp (_String1=".", _String2=".") returned 0 [0184.143] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e2b5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e2dce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e2dce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.143] wcscmp (_String1="..", _String2=".") returned 1 [0184.143] wcscmp (_String1="..", _String2="..") returned 0 [0184.143] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e2dce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e32b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.143] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.143] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b80320 [0184.144] wcscpy (in: _Dest=0x7b80320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" [0184.144] wcscat (in: _Dest=0x7b80320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" [0184.144] wcscat (in: _Dest=0x7b80320, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" [0184.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0184.394] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e2dce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e32b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.394] FindClose (in: hFindFile=0x3dcf9d0 | out: hFindFile=0x3dcf9d0) returned 1 [0184.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0184.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a3a8) returned 1 [0184.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcd90) returned 1 Thread: id = 5616 os_tid = 0x21ac [0183.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a4b0 [0183.544] wcscpy (in: _Dest=0x7a6a4b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0183.544] wcscat (in: _Dest=0x7a6a4b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" [0183.545] wcscat (in: _Dest=0x7a6a4b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*" [0183.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53638 [0183.545] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e35210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3a030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e3a030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf790 [0184.142] wcscmp (_String1=".", _String2=".") returned 0 [0184.142] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e35210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3a030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e3a030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.142] wcscmp (_String1="..", _String2=".") returned 1 [0184.142] wcscmp (_String1="..", _String2="..") returned 0 [0184.142] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e3a030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3c740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.142] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.142] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x30413a8 [0184.143] wcscpy (in: _Dest=0x30413a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" [0184.143] wcscat (in: _Dest=0x30413a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" [0184.143] wcscat (in: _Dest=0x30413a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" [0184.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30413a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0184.384] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e3a030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e3c740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.384] FindClose (in: hFindFile=0x3dcf790 | out: hFindFile=0x3dcf790) returned 1 [0184.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53638) returned 1 [0184.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a4b0) returned 1 [0184.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bce98) returned 1 Thread: id = 5617 os_tid = 0x21b0 [0183.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a5b8 [0183.545] wcscpy (in: _Dest=0x7a6a5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0183.545] wcscat (in: _Dest=0x7a6a5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" [0183.545] wcscat (in: _Dest=0x7a6a5b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*" [0183.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55a50 [0183.546] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e3ee50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e43c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e43c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0184.141] wcscmp (_String1=".", _String2=".") returned 0 [0184.141] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e3ee50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e43c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e43c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.141] wcscmp (_String1="..", _String2=".") returned 1 [0184.141] wcscmp (_String1="..", _String2="..") returned 0 [0184.141] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e43c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e46380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.141] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.141] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3040a68 [0184.142] wcscpy (in: _Dest=0x3040a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" [0184.142] wcscat (in: _Dest=0x3040a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" [0184.142] wcscat (in: _Dest=0x3040a68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" [0184.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3040a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0184.382] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e43c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e46380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.382] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0184.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55a50) returned 1 [0184.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a5b8) returned 1 [0184.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcfa0) returned 1 Thread: id = 5618 os_tid = 0x21b4 [0183.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a6c0 [0183.546] wcscpy (in: _Dest=0x7a6a6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0183.546] wcscat (in: _Dest=0x7a6a6c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" [0183.546] wcscat (in: _Dest=0x7a6a6c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*" [0183.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0183.546] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e46380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e4b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0184.917] wcscmp (_String1=".", _String2=".") returned 0 [0184.917] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e46380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4b1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e4b1a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.917] wcscmp (_String1="..", _String2=".") returned 1 [0184.917] wcscmp (_String1="..", _String2="..") returned 0 [0184.917] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e4b1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4d8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.917] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.917] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b81350 [0184.918] wcscpy (in: _Dest=0x7b81350, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" [0184.918] wcscat (in: _Dest=0x7b81350, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" [0184.918] wcscat (in: _Dest=0x7b81350, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" [0185.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0185.233] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e4b1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e4d8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.233] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0185.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0185.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a6c0) returned 1 [0185.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd0a8) returned 1 Thread: id = 5619 os_tid = 0x21b8 [0183.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a7c8 [0183.547] wcscpy (in: _Dest=0x7a6a7c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0183.547] wcscat (in: _Dest=0x7a6a7c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" [0183.547] wcscat (in: _Dest=0x7a6a7c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*" [0183.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53fd8 [0183.547] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e526d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e54de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e54de0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0183.748] wcscmp (_String1=".", _String2=".") returned 0 [0183.748] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e526d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e54de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e54de0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.748] wcscmp (_String1="..", _String2=".") returned 1 [0183.748] wcscmp (_String1="..", _String2="..") returned 0 [0183.748] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e54de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e574f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.748] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.748] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d54810 [0183.748] wcscpy (in: _Dest=0x3d54810, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" [0183.748] wcscat (in: _Dest=0x3d54810, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" [0183.748] wcscat (in: _Dest=0x3d54810, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" [0184.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d54810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda0 [0184.405] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e54de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e574f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.405] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0184.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53fd8) returned 1 [0184.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a7c8) returned 1 [0184.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 Thread: id = 5620 os_tid = 0x21bc [0183.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a8d0 [0183.548] wcscpy (in: _Dest=0x7a6a8d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0183.548] wcscat (in: _Dest=0x7a6a8d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" [0183.548] wcscat (in: _Dest=0x7a6a8d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*" [0183.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55cb8 [0183.548] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e5c310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e5ea20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e5ea20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff90 [0183.749] wcscmp (_String1=".", _String2=".") returned 0 [0183.749] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e5c310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e5ea20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e5ea20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.749] wcscmp (_String1="..", _String2=".") returned 1 [0183.749] wcscmp (_String1="..", _String2="..") returned 0 [0183.749] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e5ea20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e61130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.749] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.749] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d56058 [0183.749] wcscpy (in: _Dest=0x3d56058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" [0183.749] wcscat (in: _Dest=0x3d56058, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" [0183.749] wcscat (in: _Dest=0x3d56058, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" [0184.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0184.407] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e5ea20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e61130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.407] FindClose (in: hFindFile=0x3dcff90 | out: hFindFile=0x3dcff90) returned 1 [0184.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55cb8) returned 1 [0184.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a8d0) returned 1 [0184.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd2b8) returned 1 Thread: id = 5621 os_tid = 0x2650 [0183.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\air98.poc")) returned 0x20 [0185.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC", dwFileAttributes=0x20) returned 0 [0185.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\air98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.364] GetLastError () returned 0x5 [0185.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC", dwFileAttributes=0x20) returned 0 [0185.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46f18) returned 1 Thread: id = 5622 os_tid = 0x2668 [0183.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\awardhm.poc")) returned 0x20 [0185.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC", dwFileAttributes=0x20) returned 0 [0185.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\awardhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.363] GetLastError () returned 0x5 [0185.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC", dwFileAttributes=0x20) returned 0 [0185.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 5623 os_tid = 0x21c0 [0183.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ban98.poc")) returned 0x20 [0185.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC", dwFileAttributes=0x20) returned 0 [0185.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ban98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.099] GetLastError () returned 0x5 [0185.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC", dwFileAttributes=0x20) returned 0 [0185.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47518) returned 1 Thread: id = 5624 os_tid = 0x21c4 [0183.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.dpv")) returned 0x20 [0185.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV", dwFileAttributes=0x20) returned 0 [0185.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.379] GetLastError () returned 0x5 [0185.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV", dwFileAttributes=0x20) returned 0 [0185.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 5625 os_tid = 0x21c8 [0183.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml")) returned 0x20 [0185.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML", dwFileAttributes=0x20) returned 0 [0185.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.378] GetLastError () returned 0x5 [0185.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML", dwFileAttributes=0x20) returned 0 [0185.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 5626 os_tid = 0x21cc [0183.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bdrtkful.poc")) returned 0x20 [0185.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC", dwFileAttributes=0x20) returned 0 [0185.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bdrtkful.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.362] GetLastError () returned 0x5 [0185.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC", dwFileAttributes=0x20) returned 0 [0185.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 5627 os_tid = 0x21d0 [0183.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.dpv")) returned 0x20 [0185.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV", dwFileAttributes=0x20) returned 0 [0185.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.360] GetLastError () returned 0x5 [0185.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV", dwFileAttributes=0x20) returned 0 [0185.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 5628 os_tid = 0x2680 [0183.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml")) returned 0x20 [0185.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML", dwFileAttributes=0x20) returned 0 [0185.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.359] GetLastError () returned 0x5 [0185.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML", dwFileAttributes=0x20) returned 0 [0185.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 5629 os_tid = 0x2684 [0183.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.dpv")) returned 0x20 [0185.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV", dwFileAttributes=0x20) returned 0 [0185.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.358] GetLastError () returned 0x5 [0185.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV", dwFileAttributes=0x20) returned 0 [0185.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 5630 os_tid = 0x2688 [0183.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml")) returned 0x20 [0185.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML", dwFileAttributes=0x20) returned 0 [0185.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.356] GetLastError () returned 0x5 [0185.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML", dwFileAttributes=0x20) returned 0 [0185.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9c48) returned 1 Thread: id = 5631 os_tid = 0x268c [0183.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.dpv")) returned 0x20 [0185.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV", dwFileAttributes=0x20) returned 0 [0185.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.355] GetLastError () returned 0x5 [0185.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV", dwFileAttributes=0x20) returned 0 [0185.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 5632 os_tid = 0x6f0 [0183.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.poc")) returned 0x20 [0185.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC", dwFileAttributes=0x20) returned 0 [0185.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.352] GetLastError () returned 0x5 [0185.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC", dwFileAttributes=0x20) returned 0 [0185.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 5633 os_tid = 0x2694 [0183.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brch98sp.poc")) returned 0x20 [0185.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC", dwFileAttributes=0x20) returned 0 [0185.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brch98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.351] GetLastError () returned 0x5 [0185.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC", dwFileAttributes=0x20) returned 0 [0185.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 5634 os_tid = 0x2698 [0183.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur11.poc")) returned 0x20 [0185.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC", dwFileAttributes=0x20) returned 0 [0185.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.374] GetLastError () returned 0x5 [0185.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC", dwFileAttributes=0x20) returned 0 [0185.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9de0) returned 1 Thread: id = 5635 os_tid = 0x269c [0183.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur98.poc")) returned 0x20 [0185.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC", dwFileAttributes=0x20) returned 0 [0185.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.376] GetLastError () returned 0x5 [0185.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC", dwFileAttributes=0x20) returned 0 [0185.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 5636 os_tid = 0x26a0 [0183.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.dpv")) returned 0x20 [0185.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV", dwFileAttributes=0x20) returned 0 [0185.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.372] GetLastError () returned 0x5 [0185.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV", dwFileAttributes=0x20) returned 0 [0185.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 5637 os_tid = 0x480 [0183.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml")) returned 0x20 [0185.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML", dwFileAttributes=0x20) returned 0 [0185.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.371] GetLastError () returned 0x5 [0185.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML", dwFileAttributes=0x20) returned 0 [0185.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 5638 os_tid = 0x26a4 [0183.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs2barb.poc")) returned 0x20 [0185.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC", dwFileAttributes=0x20) returned 0 [0185.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs2barb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.102] GetLastError () returned 0x5 [0185.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC", dwFileAttributes=0x20) returned 0 [0185.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 5639 os_tid = 0x26a8 [0183.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a530 [0183.750] wcscpy (in: _Dest=0x7b7a530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0183.750] wcscat (in: _Dest=0x7b7a530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" [0183.750] wcscat (in: _Dest=0x7b7a530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*" [0183.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52090 [0183.750] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\*", lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb10 [0183.750] wcscmp (_String1=".", _String2=".") returned 0 [0183.750] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.750] wcscmp (_String1="..", _String2=".") returned 1 [0183.751] wcscmp (_String1="..", _String2="..") returned 0 [0183.751] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3b3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.751] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.751] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d554c8 [0183.751] wcscpy (in: _Dest=0x3d554c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar" [0183.751] wcscat (in: _Dest=0x3d554c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" [0183.751] wcscat (in: _Dest=0x3d554c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" [0184.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d554c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0184.023] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3b3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.023] FindClose (in: hFindFile=0x3dcfb10 | out: hFindFile=0x3dcfb10) returned 1 [0184.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52090) returned 1 [0184.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a530) returned 1 [0184.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc760) returned 1 Thread: id = 5640 os_tid = 0x26bc [0183.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a638 [0183.751] wcscpy (in: _Dest=0x7b7a638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0183.751] wcscat (in: _Dest=0x7b7a638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" [0183.751] wcscat (in: _Dest=0x7b7a638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*" [0183.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a533d0 [0183.751] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\*", lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0184.128] wcscmp (_String1=".", _String2=".") returned 0 [0184.128] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.128] wcscmp (_String1="..", _String2=".") returned 1 [0184.128] wcscmp (_String1="..", _String2="..") returned 0 [0184.128] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.128] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.128] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d56180 [0184.128] wcscpy (in: _Dest=0x3d56180, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg" [0184.128] wcscat (in: _Dest=0x3d56180, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" [0184.129] wcscat (in: _Dest=0x3d56180, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" [0190.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90 [0190.826] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.826] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0190.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a533d0) returned 1 [0190.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a638) returned 1 [0190.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a9d8) returned 1 Thread: id = 5641 os_tid = 0x26c0 [0183.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a740 [0183.752] wcscpy (in: _Dest=0x7b7a740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0183.752] wcscat (in: _Dest=0x7b7a740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" [0183.752] wcscat (in: _Dest=0x7b7a740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*" [0183.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53b08 [0183.752] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\*", lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0184.129] wcscmp (_String1=".", _String2=".") returned 0 [0184.129] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.129] wcscmp (_String1="..", _String2=".") returned 1 [0184.129] wcscmp (_String1="..", _String2="..") returned 0 [0184.129] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.129] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.129] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d562a8 [0184.129] wcscpy (in: _Dest=0x3d562a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca" [0184.129] wcscat (in: _Dest=0x3d562a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" [0184.129] wcscat (in: _Dest=0x3d562a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" [0184.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d562a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c [0184.369] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.369] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0184.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53b08) returned 1 [0184.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a740) returned 1 [0184.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6aae0) returned 1 Thread: id = 5642 os_tid = 0x26d8 [0183.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a848 [0183.756] wcscpy (in: _Dest=0x7b7a848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0183.756] wcscat (in: _Dest=0x7b7a848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" [0183.756] wcscat (in: _Dest=0x7b7a848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*" [0183.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52c98 [0183.756] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\*", lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0184.130] wcscmp (_String1=".", _String2=".") returned 0 [0184.130] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.130] wcscmp (_String1="..", _String2=".") returned 1 [0184.130] wcscmp (_String1="..", _String2="..") returned 0 [0184.130] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.130] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.130] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x330cd0 [0184.130] wcscpy (in: _Dest=0x330cd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs" [0184.130] wcscat (in: _Dest=0x330cd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" [0184.130] wcscat (in: _Dest=0x330cd0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" [0184.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x330cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc [0184.372] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dadfb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.372] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0184.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52c98) returned 1 [0184.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a848) returned 1 [0184.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6abe8) returned 1 Thread: id = 5643 os_tid = 0x26dc [0183.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a950 [0183.757] wcscpy (in: _Dest=0x7b7a950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0183.757] wcscat (in: _Dest=0x7b7a950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" [0183.757] wcscat (in: _Dest=0x7b7a950, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*" [0183.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53d70 [0183.757] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\*", lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf690 [0184.131] wcscmp (_String1=".", _String2=".") returned 0 [0184.131] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.131] wcscmp (_String1="..", _String2=".") returned 1 [0184.131] wcscmp (_String1="..", _String2="..") returned 0 [0184.131] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.131] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.131] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3041f38 [0184.131] wcscpy (in: _Dest=0x3041f38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da" [0184.131] wcscat (in: _Dest=0x3041f38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" [0184.131] wcscat (in: _Dest=0x3041f38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" [0184.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3041f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4 [0184.375] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.375] FindClose (in: hFindFile=0x3dcf690 | out: hFindFile=0x3dcf690) returned 1 [0184.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53d70) returned 1 [0184.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a950) returned 1 [0184.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6acf0) returned 1 Thread: id = 5644 os_tid = 0xb98 [0183.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7aa58 [0183.758] wcscpy (in: _Dest=0x7b7aa58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0183.758] wcscat (in: _Dest=0x7b7aa58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" [0183.758] wcscat (in: _Dest=0x7b7aa58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*" [0183.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c418 [0183.758] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\*", lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0184.132] wcscmp (_String1=".", _String2=".") returned 0 [0184.132] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.132] wcscmp (_String1="..", _String2=".") returned 1 [0184.132] wcscmp (_String1="..", _String2="..") returned 0 [0184.132] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3df9aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.132] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.132] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3042500 [0184.132] wcscpy (in: _Dest=0x3042500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de" [0184.132] wcscat (in: _Dest=0x3042500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" [0184.132] wcscat (in: _Dest=0x3042500, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" [0184.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3042500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0 [0184.378] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3df9aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.378] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0184.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c418) returned 1 [0184.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7aa58) returned 1 [0184.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6adf8) returned 1 Thread: id = 5645 os_tid = 0xba4 [0183.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ab60 [0183.759] wcscpy (in: _Dest=0x7b7ab60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0183.759] wcscat (in: _Dest=0x7b7ab60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" [0183.759] wcscat (in: _Dest=0x7b7ab60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*" [0183.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a4d0 [0183.759] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\*", lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf850 [0184.133] wcscmp (_String1=".", _String2=".") returned 0 [0184.133] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.133] wcscmp (_String1="..", _String2=".") returned 1 [0184.133] wcscmp (_String1="..", _String2="..") returned 0 [0184.133] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.133] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.133] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3041720 [0184.133] wcscpy (in: _Dest=0x3041720, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el" [0184.133] wcscat (in: _Dest=0x3041720, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" [0184.133] wcscat (in: _Dest=0x3041720, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" [0184.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3041720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc [0184.380] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0184.380] FindClose (in: hFindFile=0x3dcf850 | out: hFindFile=0x3dcf850) returned 1 [0184.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a4d0) returned 1 [0184.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ab60) returned 1 [0184.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6af00) returned 1 Thread: id = 5646 os_tid = 0xb90 [0183.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a38a48 [0183.760] wcscpy (in: _Dest=0x7a38a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0183.760] wcscat (in: _Dest=0x7a38a48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" [0183.760] wcscat (in: _Dest=0x7a38a48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*" [0183.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c8e8 [0183.761] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\*", lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0183.972] wcscmp (_String1=".", _String2=".") returned 0 [0183.972] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.972] wcscmp (_String1="..", _String2=".") returned 1 [0183.972] wcscmp (_String1="..", _String2="..") returned 0 [0183.972] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.973] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.973] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d54938 [0183.973] wcscpy (in: _Dest=0x3d54938, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB" [0183.973] wcscat (in: _Dest=0x3d54938, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" [0183.973] wcscat (in: _Dest=0x3d54938, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" [0185.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d54938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0185.725] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.725] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0185.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c8e8) returned 1 [0185.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38a48) returned 1 [0185.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b008) returned 1 Thread: id = 5647 os_tid = 0x20c [0183.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a38b60 [0183.761] wcscpy (in: _Dest=0x7a38b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0183.761] wcscat (in: _Dest=0x7a38b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" [0183.761] wcscat (in: _Dest=0x7a38b60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*" [0183.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ba78 [0183.762] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\*", lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0183.973] wcscmp (_String1=".", _String2=".") returned 0 [0183.973] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.973] wcscmp (_String1="..", _String2=".") returned 1 [0183.973] wcscmp (_String1="..", _String2="..") returned 0 [0183.973] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6c690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.974] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.974] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55028 [0183.974] wcscpy (in: _Dest=0x3d55028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US" [0183.974] wcscat (in: _Dest=0x3d55028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" [0183.974] wcscat (in: _Dest=0x3d55028, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" [0185.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc [0185.728] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6c690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.728] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0185.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ba78) returned 1 [0185.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38b60) returned 1 [0185.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b110) returned 1 Thread: id = 5648 os_tid = 0x21d4 [0183.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ac68 [0183.762] wcscpy (in: _Dest=0x7b7ac68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0183.763] wcscat (in: _Dest=0x7b7ac68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" [0183.763] wcscat (in: _Dest=0x7b7ac68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*" [0183.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ae70 [0183.763] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\*", lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfb10 [0184.127] wcscmp (_String1=".", _String2=".") returned 0 [0184.127] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.127] wcscmp (_String1="..", _String2=".") returned 1 [0184.127] wcscmp (_String1="..", _String2="..") returned 0 [0184.127] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.127] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.127] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55840 [0184.127] wcscpy (in: _Dest=0x3d55840, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es" [0184.128] wcscat (in: _Dest=0x3d55840, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" [0184.128] wcscat (in: _Dest=0x3d55840, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" [0194.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0194.961] FindNextFileW (in: hFindFile=0x3dcfb10, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.961] FindClose (in: hFindFile=0x3dcfb10 | out: hFindFile=0x3dcfb10) returned 1 [0194.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ae70) returned 1 [0194.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ac68) returned 1 [0194.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b218) returned 1 Thread: id = 5649 os_tid = 0x410 [0183.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a38c78 [0183.763] wcscpy (in: _Dest=0x7a38c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0183.763] wcscat (in: _Dest=0x7a38c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" [0183.763] wcscat (in: _Dest=0x7a38c78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*" [0183.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d4f0 [0183.763] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e65f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e68660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e68660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0184.903] wcscmp (_String1=".", _String2=".") returned 0 [0184.903] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e65f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e68660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e68660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.903] wcscmp (_String1="..", _String2=".") returned 1 [0184.903] wcscmp (_String1="..", _String2="..") returned 0 [0184.903] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e68660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e6d480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.903] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.903] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55bb8 [0184.903] wcscpy (in: _Dest=0x3d55bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" [0184.903] wcscat (in: _Dest=0x3d55bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" [0184.903] wcscat (in: _Dest=0x3d55bb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" [0185.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0185.555] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e68660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e6d480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6167000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.556] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0185.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d4f0) returned 1 [0185.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38c78) returned 1 [0185.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a090) returned 1 Thread: id = 5650 os_tid = 0x21d8 [0183.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a38d90 [0183.764] wcscpy (in: _Dest=0x7a38d90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0183.764] wcscat (in: _Dest=0x7a38d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" [0183.764] wcscat (in: _Dest=0x7a38d90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*" [0183.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b0d8 [0183.764] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e6fb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e722a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e722a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0184.904] wcscmp (_String1=".", _String2=".") returned 0 [0184.904] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e6fb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e722a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e722a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.904] wcscmp (_String1="..", _String2=".") returned 1 [0184.904] wcscmp (_String1="..", _String2="..") returned 0 [0184.904] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e722a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e770c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.904] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.904] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55a90 [0184.904] wcscpy (in: _Dest=0x3d55a90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" [0184.904] wcscat (in: _Dest=0x3d55a90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" [0184.904] wcscat (in: _Dest=0x3d55a90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" [0185.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0185.559] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e722a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e770c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.559] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0185.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b0d8) returned 1 [0185.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38d90) returned 1 [0185.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b320) returned 1 Thread: id = 5651 os_tid = 0xbcc [0183.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ad70 [0183.765] wcscpy (in: _Dest=0x7b7ad70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0183.765] wcscat (in: _Dest=0x7b7ad70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" [0183.765] wcscat (in: _Dest=0x7b7ad70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*" [0183.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3cb50 [0183.765] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e797d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e7bee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e7bee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0184.904] wcscmp (_String1=".", _String2=".") returned 0 [0184.905] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e797d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e7bee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e7bee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.905] wcscmp (_String1="..", _String2=".") returned 1 [0184.905] wcscmp (_String1="..", _String2="..") returned 0 [0184.905] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e7bee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e80d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.905] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.905] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55150 [0184.905] wcscpy (in: _Dest=0x3d55150, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" [0184.905] wcscat (in: _Dest=0x3d55150, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" [0184.905] wcscat (in: _Dest=0x3d55150, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" [0185.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0185.561] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e7bee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e80d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.561] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0185.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3cb50) returned 1 [0185.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ad70) returned 1 [0185.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b428) returned 1 Thread: id = 5652 os_tid = 0xbf0 [0183.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7a38ea8 [0183.766] wcscpy (in: _Dest=0x7a38ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0183.766] wcscat (in: _Dest=0x7a38ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" [0183.766] wcscat (in: _Dest=0x7a38ea8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*" [0183.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d288 [0183.766] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e83410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e85b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e85b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0184.905] wcscmp (_String1=".", _String2=".") returned 0 [0184.905] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e83410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e85b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e85b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.905] wcscmp (_String1="..", _String2=".") returned 1 [0184.905] wcscmp (_String1="..", _String2="..") returned 0 [0184.905] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e85b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8a940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.906] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.906] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d54cb0 [0184.906] wcscpy (in: _Dest=0x3d54cb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" [0184.906] wcscat (in: _Dest=0x3d54cb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" [0184.906] wcscat (in: _Dest=0x3d54cb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" [0185.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d54cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0185.191] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e85b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8a940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.191] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0185.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d288) returned 1 [0185.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38ea8) returned 1 [0185.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38700) returned 1 Thread: id = 5653 os_tid = 0x370 [0183.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ae78 [0183.767] wcscpy (in: _Dest=0x7b7ae78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0183.768] wcscat (in: _Dest=0x7b7ae78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" [0183.768] wcscat (in: _Dest=0x7b7ae78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*" [0183.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bce0 [0183.768] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e8d050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8f760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e8f760, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0184.906] wcscmp (_String1=".", _String2=".") returned 0 [0184.906] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e8d050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e8f760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e8f760, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.906] wcscmp (_String1="..", _String2=".") returned 1 [0184.906] wcscmp (_String1="..", _String2="..") returned 0 [0184.906] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e8f760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e94580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.906] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.906] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b80570 [0184.907] wcscpy (in: _Dest=0x7b80570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" [0184.907] wcscat (in: _Dest=0x7b80570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" [0184.907] wcscat (in: _Dest=0x7b80570, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" [0185.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0185.193] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e8f760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e94580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.193] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0185.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bce0) returned 1 [0185.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ae78) returned 1 [0185.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b530) returned 1 Thread: id = 5654 os_tid = 0xbf4 [0183.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7af80 [0183.769] wcscpy (in: _Dest=0x7b7af80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0183.769] wcscat (in: _Dest=0x7b7af80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" [0183.769] wcscat (in: _Dest=0x7b7af80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*" [0183.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ac08 [0183.769] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e96c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9bab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e9bab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0184.907] wcscmp (_String1=".", _String2=".") returned 0 [0184.907] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5e96c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9bab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5e9bab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.907] wcscmp (_String1="..", _String2=".") returned 1 [0184.907] wcscmp (_String1="..", _String2="..") returned 0 [0184.907] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e993a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9e1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.907] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.907] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b807c0 [0184.907] wcscpy (in: _Dest=0x7b807c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" [0184.908] wcscat (in: _Dest=0x7b807c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" [0184.908] wcscat (in: _Dest=0x7b807c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" [0185.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b807c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0185.196] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5e993a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5e9e1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.196] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0185.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ac08) returned 1 [0185.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7af80) returned 1 [0185.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b638) returned 1 Thread: id = 5655 os_tid = 0x444 [0183.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7b088 [0183.770] wcscpy (in: _Dest=0x7b7b088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0183.770] wcscat (in: _Dest=0x7b7b088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" [0183.770] wcscat (in: _Dest=0x7b7b088, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*" [0183.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d020 [0183.770] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ea2fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea56f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ea56f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0184.908] wcscmp (_String1=".", _String2=".") returned 0 [0184.908] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ea2fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea56f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ea56f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.908] wcscmp (_String1="..", _String2=".") returned 1 [0184.908] wcscmp (_String1="..", _String2="..") returned 0 [0184.908] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ea56f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea7e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.908] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.908] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7b80698 [0184.908] wcscpy (in: _Dest=0x7b80698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" [0184.908] wcscat (in: _Dest=0x7b80698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" [0184.908] wcscat (in: _Dest=0x7b80698, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" [0185.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0185.198] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ea56f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ea7e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.198] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0185.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d020) returned 1 [0185.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b088) returned 1 [0185.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b740) returned 1 Thread: id = 5656 os_tid = 0xbe4 [0183.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b190 [0183.775] wcscpy (in: _Dest=0x7b7b190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0183.775] wcscat (in: _Dest=0x7b7b190, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" [0183.775] wcscat (in: _Dest=0x7b7b190, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*" [0183.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3de90 [0183.775] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eacc20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eaf330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eaf330, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0184.909] wcscmp (_String1=".", _String2=".") returned 0 [0184.909] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eacc20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eaf330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eaf330, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.909] wcscmp (_String1="..", _String2=".") returned 1 [0184.909] wcscmp (_String1="..", _String2="..") returned 0 [0184.909] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eaf330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb1a40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.909] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.909] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b808e8 [0184.909] wcscpy (in: _Dest=0x7b808e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" [0184.909] wcscat (in: _Dest=0x7b808e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" [0184.909] wcscat (in: _Dest=0x7b808e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" [0185.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b808e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0185.212] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eaf330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb1a40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.213] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0185.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3de90) returned 1 [0185.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b190) returned 1 [0185.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b848) returned 1 Thread: id = 5657 os_tid = 0xbec [0183.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b298 [0183.776] wcscpy (in: _Dest=0x7b7b298, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0183.776] wcscat (in: _Dest=0x7b7b298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" [0183.776] wcscat (in: _Dest=0x7b7b298, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*" [0183.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c1b0 [0183.776] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eb1a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb6860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eb6860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df40 [0184.910] wcscmp (_String1=".", _String2=".") returned 0 [0184.910] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5eb1a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb6860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eb6860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.910] wcscmp (_String1="..", _String2=".") returned 1 [0184.910] wcscmp (_String1="..", _String2="..") returned 0 [0184.910] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eb6860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb8f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.910] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.910] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b80a10 [0184.911] wcscpy (in: _Dest=0x7b80a10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" [0184.911] wcscat (in: _Dest=0x7b80a10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" [0184.911] wcscat (in: _Dest=0x7b80a10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" [0185.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0185.215] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eb6860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eb8f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6169710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.215] FindClose (in: hFindFile=0x7a2df40 | out: hFindFile=0x7a2df40) returned 1 [0185.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c1b0) returned 1 [0185.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b298) returned 1 [0185.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b950) returned 1 Thread: id = 5658 os_tid = 0xbb8 [0183.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b3a0 [0183.777] wcscpy (in: _Dest=0x7b7b3a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0183.777] wcscat (in: _Dest=0x7b7b3a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" [0183.777] wcscat (in: _Dest=0x7b7b3a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*" [0183.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b340 [0183.777] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ebdd90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec04a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ec04a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0184.911] wcscmp (_String1=".", _String2=".") returned 0 [0184.911] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ebdd90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec04a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ec04a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.911] wcscmp (_String1="..", _String2=".") returned 1 [0184.911] wcscmp (_String1="..", _String2="..") returned 0 [0184.911] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ec04a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec2bb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.911] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.911] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b80b38 [0184.911] wcscpy (in: _Dest=0x7b80b38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" [0184.911] wcscat (in: _Dest=0x7b80b38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" [0184.912] wcscat (in: _Dest=0x7b80b38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" [0185.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0185.217] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ec04a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ec2bb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.217] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0185.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b340) returned 1 [0185.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b3a0) returned 1 [0185.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ba58) returned 1 Thread: id = 5659 os_tid = 0x21dc [0183.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b4a8 [0183.778] wcscpy (in: _Dest=0x7b7b4a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0183.778] wcscat (in: _Dest=0x7b7b4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" [0183.778] wcscat (in: _Dest=0x7b7b4a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*" [0183.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b5a8 [0183.778] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ec52c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eca0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eca0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0184.912] wcscmp (_String1=".", _String2=".") returned 0 [0184.912] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ec52c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eca0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5eca0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.912] wcscmp (_String1="..", _String2=".") returned 1 [0184.912] wcscmp (_String1="..", _String2="..") returned 0 [0184.912] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eca0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ecc7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.912] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.912] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b80c60 [0184.912] wcscpy (in: _Dest=0x7b80c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" [0184.912] wcscat (in: _Dest=0x7b80c60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" [0184.912] wcscat (in: _Dest=0x7b80c60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" [0185.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0185.219] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5eca0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ecc7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.219] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0185.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b5a8) returned 1 [0185.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b4a8) returned 1 [0185.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6bb60) returned 1 Thread: id = 5660 os_tid = 0x524 [0183.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b5b0 [0183.779] wcscpy (in: _Dest=0x7b7b5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0183.779] wcscat (in: _Dest=0x7b7b5b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" [0183.779] wcscat (in: _Dest=0x7b7b5b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*" [0183.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a9a0 [0183.779] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ed1610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed3d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ed3d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0184.913] wcscmp (_String1=".", _String2=".") returned 0 [0184.913] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ed1610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed3d20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ed3d20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.913] wcscmp (_String1="..", _String2=".") returned 1 [0184.913] wcscmp (_String1="..", _String2="..") returned 0 [0184.913] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed3d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed8b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.913] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.913] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b80d88 [0184.913] wcscpy (in: _Dest=0x7b80d88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" [0184.913] wcscat (in: _Dest=0x7b80d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" [0184.913] wcscat (in: _Dest=0x7b80d88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" [0185.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0185.221] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed3d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ed8b40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.221] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0185.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a9a0) returned 1 [0185.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b5b0) returned 1 [0185.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6bc68) returned 1 Thread: id = 5661 os_tid = 0xc08 [0183.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b6b8 [0183.780] wcscpy (in: _Dest=0x7b7b6b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0183.780] wcscat (in: _Dest=0x7b7b6b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" [0183.780] wcscat (in: _Dest=0x7b7b6b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*" [0183.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d758 [0183.780] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5edd960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee0070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee0070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0184.914] wcscmp (_String1=".", _String2=".") returned 0 [0184.914] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5edd960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee0070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee0070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.914] wcscmp (_String1="..", _String2=".") returned 1 [0184.914] wcscmp (_String1="..", _String2="..") returned 0 [0184.914] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee0070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee2780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.914] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.914] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b80eb0 [0184.914] wcscpy (in: _Dest=0x7b80eb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" [0184.914] wcscat (in: _Dest=0x7b80eb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" [0184.914] wcscat (in: _Dest=0x7b80eb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" [0185.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0185.223] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee0070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee2780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.223] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0185.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d758) returned 1 [0185.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b6b8) returned 1 [0185.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6bd70) returned 1 Thread: id = 5662 os_tid = 0x6c0 [0183.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b7c0 [0183.781] wcscpy (in: _Dest=0x7b7b7c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0183.781] wcscat (in: _Dest=0x7b7b7c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" [0183.781] wcscat (in: _Dest=0x7b7b7c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*" [0183.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d9c0 [0183.781] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee75a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee9cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee9cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0184.914] wcscmp (_String1=".", _String2=".") returned 0 [0184.915] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee75a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ee9cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ee9cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.915] wcscmp (_String1="..", _String2=".") returned 1 [0184.915] wcscmp (_String1="..", _String2="..") returned 0 [0184.915] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee9cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eec3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.915] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.915] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b80fd8 [0184.915] wcscpy (in: _Dest=0x7b80fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" [0184.915] wcscat (in: _Dest=0x7b80fd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" [0184.915] wcscat (in: _Dest=0x7b80fd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" [0185.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004 [0185.225] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ee9cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5eec3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.225] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0185.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d9c0) returned 1 [0185.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b7c0) returned 1 [0185.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6be78) returned 1 Thread: id = 5663 os_tid = 0x5ec [0183.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b8c8 [0183.782] wcscpy (in: _Dest=0x7b7b8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0183.782] wcscat (in: _Dest=0x7b7b8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" [0183.782] wcscat (in: _Dest=0x7b7b8c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*" [0183.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bf48 [0183.782] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ef11e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef38f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ef38f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0184.916] wcscmp (_String1=".", _String2=".") returned 0 [0184.916] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ef11e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef38f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5ef38f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.916] wcscmp (_String1="..", _String2=".") returned 1 [0184.916] wcscmp (_String1="..", _String2="..") returned 0 [0184.916] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ef38f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef6000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.916] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.916] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b81100 [0184.916] wcscpy (in: _Dest=0x7b81100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" [0184.916] wcscat (in: _Dest=0x7b81100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" [0184.916] wcscat (in: _Dest=0x7b81100, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" [0185.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c [0185.228] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ef38f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5ef6000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.228] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0185.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bf48) returned 1 [0185.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b8c8) returned 1 [0185.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a320) returned 1 Thread: id = 5664 os_tid = 0x668 [0183.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7bef8 [0183.977] wcscpy (in: _Dest=0x7b7bef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0183.977] wcscat (in: _Dest=0x7b7bef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" [0183.977] wcscat (in: _Dest=0x7b7bef8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*" [0183.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3dc28 [0183.977] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5efae20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5efd530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5efd530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0184.916] wcscmp (_String1=".", _String2=".") returned 0 [0184.916] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5efae20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5efd530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5efd530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.917] wcscmp (_String1="..", _String2=".") returned 1 [0184.917] wcscmp (_String1="..", _String2="..") returned 0 [0184.917] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5efd530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5effc40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0184.917] wcscmp (_String1="messages.json", _String2=".") returned 1 [0184.917] wcscmp (_String1="messages.json", _String2="..") returned 1 [0184.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b81228 [0184.917] wcscpy (in: _Dest=0x7b81228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" [0184.917] wcscat (in: _Dest=0x7b81228, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" [0184.917] wcscat (in: _Dest=0x7b81228, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" [0185.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0185.230] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5efd530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5effc40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.230] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0185.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3dc28) returned 1 [0185.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7bef8) returned 1 [0185.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a428) returned 1 Thread: id = 5665 os_tid = 0x714 [0183.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x80) returned 0x7a69c30 [0183.978] wcscpy (in: _Dest=0x7a69c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0183.978] wcscat (in: _Dest=0x7a69c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0183.978] wcscat (in: _Dest=0x7a69c30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*" [0183.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c680 [0183.979] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d640 [0184.952] wcscmp (_String1=".", _String2=".") returned 0 [0184.952] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d6b3f0, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.135] wcscmp (_String1="..", _String2=".") returned 1 [0185.135] wcscmp (_String1="..", _String2="..") returned 0 [0185.135] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a32b00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa44b8fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2a32b00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTDIR_M.VST", cAlternateFileName="")) returned 1 [0185.135] wcscmp (_String1="ACTDIR_M.VST", _String2=".") returned 1 [0185.135] wcscmp (_String1="ACTDIR_M.VST", _String2="..") returned 1 [0185.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a624f0 [0185.136] wcscpy (in: _Dest=0x7a624f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.136] wcscat (in: _Dest=0x7a624f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.136] wcscat (in: _Dest=0x7a624f0, _Source="ACTDIR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" [0185.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a624f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c0 [0185.440] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb636b200, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa44b8fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb636b200, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTDIR_U.VST", cAlternateFileName="")) returned 1 [0185.440] wcscmp (_String1="ACTDIR_U.VST", _String2=".") returned 1 [0185.440] wcscmp (_String1="ACTDIR_U.VST", _String2="..") returned 1 [0185.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63530 [0185.440] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.440] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.440] wcscat (in: _Dest=0x7a63530, _Source="ACTDIR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" [0185.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8 [0185.442] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748df600, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44b8fb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x748df600, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO_M.VSS", cAlternateFileName="")) returned 1 [0185.442] wcscmp (_String1="ADO_M.VSS", _String2=".") returned 1 [0185.442] wcscmp (_String1="ADO_M.VSS", _String2="..") returned 1 [0185.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c5c8 [0185.442] wcscpy (in: _Dest=0x32c5c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.442] wcscat (in: _Dest=0x32c5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.442] wcscat (in: _Dest=0x32c5c8, _Source="ADO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" [0185.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0185.443] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a032000, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a032000, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO_U.VSS", cAlternateFileName="")) returned 1 [0185.443] wcscmp (_String1="ADO_U.VSS", _String2=".") returned 1 [0185.443] wcscmp (_String1="ADO_U.VSS", _String2="..") returned 1 [0185.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c9f0 [0185.443] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.443] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.443] wcscat (in: _Dest=0x32c9f0, _Source="ADO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" [0185.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0185.444] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912a2e00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x912a2e00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x21200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADS_M.VSS", cAlternateFileName="")) returned 1 [0185.444] wcscmp (_String1="ADS_M.VSS", _String2=".") returned 1 [0185.444] wcscmp (_String1="ADS_M.VSS", _String2="..") returned 1 [0185.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d078 [0185.444] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.445] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.445] wcscat (in: _Dest=0x32d078, _Source="ADS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" [0185.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0 [0185.446] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98513c00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98513c00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADS_U.VSS", cAlternateFileName="")) returned 1 [0185.446] wcscmp (_String1="ADS_U.VSS", _String2=".") returned 1 [0185.446] wcscmp (_String1="ADS_U.VSS", _String2="..") returned 1 [0185.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cc50 [0185.446] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.446] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.447] wcscat (in: _Dest=0x32cc50, _Source="ADS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" [0185.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0185.448] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e471d00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e471d00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x16800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM_M.VSS", cAlternateFileName="")) returned 1 [0185.448] wcscmp (_String1="ALARM_M.VSS", _String2=".") returned 1 [0185.448] wcscmp (_String1="ALARM_M.VSS", _String2="..") returned 1 [0185.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63ad0 [0185.448] wcscpy (in: _Dest=0x7a63ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.448] wcscat (in: _Dest=0x7a63ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.448] wcscat (in: _Dest=0x7a63ad0, _Source="ALARM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" [0185.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504 [0185.450] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa56e2b00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa44df110, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa56e2b00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM_U.VSS", cAlternateFileName="")) returned 1 [0185.450] wcscmp (_String1="ALARM_U.VSS", _String2=".") returned 1 [0185.450] wcscmp (_String1="ALARM_U.VSS", _String2="..") returned 1 [0185.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62130 [0185.450] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.450] wcscat (in: _Dest=0x7a62130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.450] wcscat (in: _Dest=0x7a62130, _Source="ALARM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" [0185.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf0 [0185.451] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef79300, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4505270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaef79300, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x2c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANNOT_M.VSS", cAlternateFileName="")) returned 1 [0185.452] wcscmp (_String1="ANNOT_M.VSS", _String2=".") returned 1 [0185.452] wcscmp (_String1="ANNOT_M.VSS", _String2="..") returned 1 [0185.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62ef0 [0185.452] wcscpy (in: _Dest=0x7a62ef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.452] wcscat (in: _Dest=0x7a62ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.452] wcscat (in: _Dest=0x7a62ef0, _Source="ANNOT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" [0185.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04 [0185.453] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74fce00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4505270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb74fce00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x26800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANNOT_U.VSS", cAlternateFileName="")) returned 1 [0185.453] wcscmp (_String1="ANNOT_U.VSS", _String2=".") returned 1 [0185.453] wcscmp (_String1="ANNOT_U.VSS", _String2="..") returned 1 [0185.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62950 [0185.453] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.453] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.453] wcscat (in: _Dest=0x7a62950, _Source="ANNOT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" [0185.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0185.454] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59dea00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4505270, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc59dea00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPL_M.VSS", cAlternateFileName="")) returned 1 [0185.454] wcscmp (_String1="APPL_M.VSS", _String2=".") returned 1 [0185.454] wcscmp (_String1="APPL_M.VSS", _String2="..") returned 1 [0185.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63210 [0185.454] wcscpy (in: _Dest=0x7a63210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.454] wcscat (in: _Dest=0x7a63210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.454] wcscat (in: _Dest=0x7a63210, _Source="APPL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" [0185.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0185.456] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51d3300, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa452b3d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd51d3300, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPL_U.VSS", cAlternateFileName="")) returned 1 [0185.456] wcscmp (_String1="APPL_U.VSS", _String2=".") returned 1 [0185.456] wcscmp (_String1="APPL_U.VSS", _String2="..") returned 1 [0185.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63a30 [0185.456] wcscpy (in: _Dest=0x7a63a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.456] wcscat (in: _Dest=0x7a63a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.456] wcscat (in: _Dest=0x7a63a30, _Source="APPL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" [0185.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0185.457] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd77f8d00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa452b3d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd77f8d00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROWS_M.VSS", cAlternateFileName="")) returned 1 [0185.457] wcscmp (_String1="ARROWS_M.VSS", _String2=".") returned 1 [0185.457] wcscmp (_String1="ARROWS_M.VSS", _String2="..") returned 1 [0185.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63c10 [0185.457] wcscpy (in: _Dest=0x7a63c10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.457] wcscat (in: _Dest=0x7a63c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.457] wcscat (in: _Dest=0x7a63c10, _Source="ARROWS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" [0185.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0185.458] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b0ba00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa452b3d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd8b0ba00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROWS_U.VSS", cAlternateFileName="")) returned 1 [0185.458] wcscmp (_String1="ARROWS_U.VSS", _String2=".") returned 1 [0185.458] wcscmp (_String1="ARROWS_U.VSS", _String2="..") returned 1 [0185.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a637b0 [0185.458] wcscpy (in: _Dest=0x7a637b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.458] wcscat (in: _Dest=0x7a637b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.458] wcscat (in: _Dest=0x7a637b0, _Source="ARROWS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" [0185.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a637b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0185.459] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34038600, ftCreationTime.dwHighDateTime=0x1ca1ccd, ftLastAccessTime.dwLowDateTime=0xa4551530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34038600, ftLastWriteTime.dwHighDateTime=0x1ca1ccd, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT.XLS", cAlternateFileName="")) returned 1 [0185.459] wcscmp (_String1="ASTMGT.XLS", _String2=".") returned 1 [0185.459] wcscmp (_String1="ASTMGT.XLS", _String2="..") returned 1 [0185.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63df0 [0185.460] wcscpy (in: _Dest=0x7a63df0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.460] wcscat (in: _Dest=0x7a63df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.460] wcscat (in: _Dest=0x7a63df0, _Source="ASTMGT.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" [0185.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178 [0185.462] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c0b200, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa4551530, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5c0b200, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x120000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT_M.VST", cAlternateFileName="")) returned 1 [0185.462] wcscmp (_String1="ASTMGT_M.VST", _String2=".") returned 1 [0185.462] wcscmp (_String1="ASTMGT_M.VST", _String2="..") returned 1 [0185.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63850 [0185.462] wcscpy (in: _Dest=0x7a63850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.462] wcscat (in: _Dest=0x7a63850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.462] wcscat (in: _Dest=0x7a63850, _Source="ASTMGT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" [0185.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0185.463] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb061d00, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcb061d00, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x11c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASTMGT_U.VST", cAlternateFileName="")) returned 1 [0185.463] wcscmp (_String1="ASTMGT_U.VST", _String2=".") returned 1 [0185.463] wcscmp (_String1="ASTMGT_U.VST", _String2="..") returned 1 [0185.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62bd0 [0185.463] wcscpy (in: _Dest=0x7a62bd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.463] wcscat (in: _Dest=0x7a62bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.463] wcscat (in: _Dest=0x7a62bd0, _Source="ASTMGT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" [0185.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0185.464] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23a2200, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe23a2200, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x26c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_M.VSS", cAlternateFileName="")) returned 1 [0185.465] wcscmp (_String1="AUDIT_M.VSS", _String2=".") returned 1 [0185.465] wcscmp (_String1="AUDIT_M.VSS", _String2="..") returned 1 [0185.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63fd0 [0185.465] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.465] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.465] wcscat (in: _Dest=0x7a63fd0, _Source="AUDIT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" [0185.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0185.466] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9498200, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc9498200, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_M.VST", cAlternateFileName="")) returned 1 [0185.466] wcscmp (_String1="AUDIT_M.VST", _String2=".") returned 1 [0185.466] wcscmp (_String1="AUDIT_M.VST", _String2="..") returned 1 [0185.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62e50 [0185.466] wcscpy (in: _Dest=0x7a62e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.466] wcscat (in: _Dest=0x7a62e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.466] wcscat (in: _Dest=0x7a62e50, _Source="AUDIT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" [0185.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0185.467] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf4b700, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecf4b700, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_U.VSS", cAlternateFileName="")) returned 1 [0185.467] wcscmp (_String1="AUDIT_U.VSS", _String2=".") returned 1 [0185.467] wcscmp (_String1="AUDIT_U.VSS", _String2="..") returned 1 [0185.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62310 [0185.467] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.467] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.467] wcscat (in: _Dest=0x7a62310, _Source="AUDIT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" [0185.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0185.469] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdd0900, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccdd0900, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIT_U.VST", cAlternateFileName="")) returned 1 [0185.469] wcscmp (_String1="AUDIT_U.VST", _String2=".") returned 1 [0185.469] wcscmp (_String1="AUDIT_U.VST", _String2="..") returned 1 [0185.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a633f0 [0185.469] wcscpy (in: _Dest=0x7a633f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.469] wcscat (in: _Dest=0x7a633f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.469] wcscat (in: _Dest=0x7a633f0, _Source="AUDIT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" [0185.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a633f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544 [0185.470] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fde4600, ftCreationTime.dwHighDateTime=0x1ca484d, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6fde4600, ftLastWriteTime.dwHighDateTime=0x1ca484d, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_M.VSS", cAlternateFileName="")) returned 1 [0185.470] wcscmp (_String1="BASFLO_M.VSS", _String2=".") returned 1 [0185.470] wcscmp (_String1="BASFLO_M.VSS", _String2="..") returned 1 [0185.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63cb0 [0185.470] wcscpy (in: _Dest=0x7a63cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.470] wcscat (in: _Dest=0x7a63cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.470] wcscat (in: _Dest=0x7a63cb0, _Source="BASFLO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" [0185.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0185.471] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b6c500, ftCreationTime.dwHighDateTime=0x1ca6c61, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99b6c500, ftLastWriteTime.dwHighDateTime=0x1ca6c61, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_M.VST", cAlternateFileName="")) returned 1 [0185.471] wcscmp (_String1="BASFLO_M.VST", _String2=".") returned 1 [0185.471] wcscmp (_String1="BASFLO_M.VST", _String2="..") returned 1 [0185.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a629f0 [0185.471] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.471] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.471] wcscat (in: _Dest=0x7a629f0, _Source="BASFLO_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" [0185.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0185.472] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a01e00, ftCreationTime.dwHighDateTime=0x1ca484d, ftLastAccessTime.dwLowDateTime=0xa4577690, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2a01e00, ftLastWriteTime.dwHighDateTime=0x1ca484d, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_U.VSS", cAlternateFileName="")) returned 1 [0185.472] wcscmp (_String1="BASFLO_U.VSS", _String2=".") returned 1 [0185.472] wcscmp (_String1="BASFLO_U.VSS", _String2="..") returned 1 [0185.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a630d0 [0185.473] wcscpy (in: _Dest=0x7a630d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.473] wcscat (in: _Dest=0x7a630d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.473] wcscat (in: _Dest=0x7a630d0, _Source="BASFLO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" [0185.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a630d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0185.474] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3873a600, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3873a600, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASFLO_U.VST", cAlternateFileName="")) returned 1 [0185.474] wcscmp (_String1="BASFLO_U.VST", _String2=".") returned 1 [0185.474] wcscmp (_String1="BASFLO_U.VST", _String2="..") returned 1 [0185.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62db0 [0185.474] wcscpy (in: _Dest=0x7a62db0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.474] wcscat (in: _Dest=0x7a62db0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.474] wcscat (in: _Dest=0x7a62db0, _Source="BASFLO_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" [0185.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0185.478] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0709000, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0709000, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASICD_M.VST", cAlternateFileName="")) returned 1 [0185.478] wcscmp (_String1="BASICD_M.VST", _String2=".") returned 1 [0185.478] wcscmp (_String1="BASICD_M.VST", _String2="..") returned 1 [0185.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62450 [0185.479] wcscpy (in: _Dest=0x7a62450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.479] wcscat (in: _Dest=0x7a62450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.479] wcscat (in: _Dest=0x7a62450, _Source="BASICD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" [0185.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0185.480] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d2ea00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2d2ea00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASICD_U.VST", cAlternateFileName="")) returned 1 [0185.480] wcscmp (_String1="BASICD_U.VST", _String2=".") returned 1 [0185.480] wcscmp (_String1="BASICD_U.VST", _String2="..") returned 1 [0185.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63b70 [0185.480] wcscpy (in: _Dest=0x7a63b70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.480] wcscat (in: _Dest=0x7a63b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.480] wcscat (in: _Dest=0x7a63b70, _Source="BASICD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" [0185.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0185.481] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda52d00, ftCreationTime.dwHighDateTime=0x1ca478a, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfda52d00, ftLastWriteTime.dwHighDateTime=0x1ca478a, nFileSizeHigh=0x0, nFileSizeLow=0x18400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC_M.VSS", cAlternateFileName="")) returned 1 [0185.481] wcscmp (_String1="BASIC_M.VSS", _String2=".") returned 1 [0185.481] wcscmp (_String1="BASIC_M.VSS", _String2="..") returned 1 [0185.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62810 [0185.481] wcscpy (in: _Dest=0x7a62810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.481] wcscat (in: _Dest=0x7a62810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.481] wcscat (in: _Dest=0x7a62810, _Source="BASIC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" [0185.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0185.772] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b0e00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39b0e00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC_U.VSS", cAlternateFileName="")) returned 1 [0185.772] wcscmp (_String1="BASIC_U.VSS", _String2=".") returned 1 [0185.772] wcscmp (_String1="BASIC_U.VSS", _String2="..") returned 1 [0185.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62a90 [0185.772] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0185.772] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0185.772] wcscat (in: _Dest=0x7a62a90, _Source="BASIC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" [0186.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0186.871] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x33400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCKGRN_M.VSS", cAlternateFileName="")) returned 1 [0186.871] wcscmp (_String1="BCKGRN_M.VSS", _String2=".") returned 1 [0186.871] wcscmp (_String1="BCKGRN_M.VSS", _String2="..") returned 1 [0186.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62810 [0186.871] wcscpy (in: _Dest=0x7a62810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.871] wcscat (in: _Dest=0x7a62810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.871] wcscat (in: _Dest=0x7a62810, _Source="BCKGRN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" [0186.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4 [0186.873] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x30600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCKGRN_U.VSS", cAlternateFileName="")) returned 1 [0186.873] wcscmp (_String1="BCKGRN_U.VSS", _String2=".") returned 1 [0186.873] wcscmp (_String1="BCKGRN_U.VSS", _String2="..") returned 1 [0186.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62f90 [0186.873] wcscpy (in: _Dest=0x7a62f90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.873] wcscat (in: _Dest=0x7a62f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.873] wcscat (in: _Dest=0x7a62f90, _Source="BCKGRN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" [0186.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0 [0186.874] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23cacd00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa459d7f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23cacd00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x51000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDCOR_M.VSS", cAlternateFileName="")) returned 1 [0186.874] wcscmp (_String1="BLDCOR_M.VSS", _String2=".") returned 1 [0186.874] wcscmp (_String1="BLDCOR_M.VSS", _String2="..") returned 1 [0186.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a626d0 [0186.874] wcscpy (in: _Dest=0x7a626d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.874] wcscat (in: _Dest=0x7a626d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.875] wcscat (in: _Dest=0x7a626d0, _Source="BLDCOR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" [0186.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a626d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0186.899] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x393ff700, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x393ff700, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x4fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDCOR_U.VSS", cAlternateFileName="")) returned 1 [0186.899] wcscmp (_String1="BLDCOR_U.VSS", _String2=".") returned 1 [0186.899] wcscmp (_String1="BLDCOR_U.VSS", _String2="..") returned 1 [0186.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63710 [0186.899] wcscpy (in: _Dest=0x7a63710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.899] wcscat (in: _Dest=0x7a63710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.899] wcscat (in: _Dest=0x7a63710, _Source="BLDCOR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" [0186.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x193c [0186.900] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f378100, ftCreationTime.dwHighDateTime=0x1c33fd1, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8f378100, ftLastWriteTime.dwHighDateTime=0x1c33fd1, nFileSizeHigh=0x0, nFileSizeLow=0x72a6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDGPLAN.DWG", cAlternateFileName="")) returned 1 [0186.903] wcscmp (_String1="BLDGPLAN.DWG", _String2=".") returned 1 [0186.903] wcscmp (_String1="BLDGPLAN.DWG", _String2="..") returned 1 [0186.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62090 [0186.903] wcscpy (in: _Dest=0x7a62090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.903] wcscat (in: _Dest=0x7a62090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.903] wcscat (in: _Dest=0x7a62090, _Source="BLDGPLAN.DWG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" [0186.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0186.904] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca85900, ftCreationTime.dwHighDateTime=0x1c2efb3, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdca85900, ftLastWriteTime.dwHighDateTime=0x1c2efb3, nFileSizeHigh=0x0, nFileSizeLow=0xd9ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLDGPLAN.JPG", cAlternateFileName="")) returned 1 [0186.904] wcscmp (_String1="BLDGPLAN.JPG", _String2=".") returned 1 [0186.904] wcscmp (_String1="BLDGPLAN.JPG", _String2="..") returned 1 [0186.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63170 [0186.905] wcscpy (in: _Dest=0x7a63170, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.905] wcscat (in: _Dest=0x7a63170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.905] wcscat (in: _Dest=0x7a63170, _Source="BLDGPLAN.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" [0186.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1938 [0186.906] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17fa9200, ftCreationTime.dwHighDateTime=0x1c907a7, ftLastAccessTime.dwLowDateTime=0xa45c3950, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x17fa9200, ftLastWriteTime.dwHighDateTime=0x1c907a7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLNKDG_M.VSD", cAlternateFileName="")) returned 1 [0186.906] wcscmp (_String1="BLNKDG_M.VSD", _String2=".") returned 1 [0186.906] wcscmp (_String1="BLNKDG_M.VSD", _String2="..") returned 1 [0186.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a638f0 [0186.906] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.906] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.906] wcscat (in: _Dest=0x7a638f0, _Source="BLNKDG_M.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" [0186.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a638f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c6c [0186.908] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395b7e00, ftCreationTime.dwHighDateTime=0x1c907a7, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x395b7e00, ftLastWriteTime.dwHighDateTime=0x1c907a7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLNKDG_U.VSD", cAlternateFileName="")) returned 1 [0186.908] wcscmp (_String1="BLNKDG_U.VSD", _String2=".") returned 1 [0186.908] wcscmp (_String1="BLNKDG_U.VSD", _String2="..") returned 1 [0186.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63490 [0186.908] wcscpy (in: _Dest=0x7a63490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.908] wcscat (in: _Dest=0x7a63490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.908] wcscat (in: _Dest=0x7a63490, _Source="BLNKDG_U.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" [0186.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0 [0186.910] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40670500, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x40670500, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK3_M.VSS", cAlternateFileName="")) returned 1 [0186.910] wcscmp (_String1="BLOCK3_M.VSS", _String2=".") returned 1 [0186.910] wcscmp (_String1="BLOCK3_M.VSS", _String2="..") returned 1 [0186.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62b30 [0186.910] wcscpy (in: _Dest=0x7a62b30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.910] wcscat (in: _Dest=0x7a62b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.910] wcscat (in: _Dest=0x7a62b30, _Source="BLOCK3_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" [0186.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1930 [0186.911] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51177b00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x51177b00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK3_U.VSS", cAlternateFileName="")) returned 1 [0186.911] wcscmp (_String1="BLOCK3_U.VSS", _String2=".") returned 1 [0186.911] wcscmp (_String1="BLOCK3_U.VSS", _String2="..") returned 1 [0186.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63350 [0186.912] wcscpy (in: _Dest=0x7a63350, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.912] wcscat (in: _Dest=0x7a63350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.912] wcscat (in: _Dest=0x7a63350, _Source="BLOCK3_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" [0186.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754 [0186.913] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596fb600, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x596fb600, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_M.VSS", cAlternateFileName="")) returned 1 [0186.913] wcscmp (_String1="BLOCKP_M.VSS", _String2=".") returned 1 [0186.913] wcscmp (_String1="BLOCKP_M.VSS", _String2="..") returned 1 [0186.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63670 [0186.913] wcscpy (in: _Dest=0x7a63670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.913] wcscat (in: _Dest=0x7a63670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.913] wcscat (in: _Dest=0x7a63670, _Source="BLOCKP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" [0186.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1928 [0186.914] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6667100, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd6667100, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_M.VST", cAlternateFileName="")) returned 1 [0186.914] wcscmp (_String1="BLOCKP_M.VST", _String2=".") returned 1 [0186.914] wcscmp (_String1="BLOCKP_M.VST", _String2="..") returned 1 [0186.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a635d0 [0186.915] wcscpy (in: _Dest=0x7a635d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.915] wcscat (in: _Dest=0x7a635d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.915] wcscat (in: _Dest=0x7a635d0, _Source="BLOCKP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" [0186.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a635d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c [0186.916] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62f91e00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62f91e00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x2b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_U.VSS", cAlternateFileName="")) returned 1 [0186.916] wcscmp (_String1="BLOCKP_U.VSS", _String2=".") returned 1 [0186.916] wcscmp (_String1="BLOCKP_U.VSS", _String2="..") returned 1 [0186.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62630 [0186.916] wcscpy (in: _Dest=0x7a62630, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.916] wcscat (in: _Dest=0x7a62630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.916] wcscat (in: _Dest=0x7a62630, _Source="BLOCKP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" [0186.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8 [0186.917] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c8cb00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd8c8cb00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKP_U.VST", cAlternateFileName="")) returned 1 [0186.917] wcscmp (_String1="BLOCKP_U.VST", _String2=".") returned 1 [0186.917] wcscmp (_String1="BLOCKP_U.VST", _String2="..") returned 1 [0186.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63030 [0186.918] wcscpy (in: _Dest=0x7a63030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.918] wcscat (in: _Dest=0x7a63030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.918] wcscat (in: _Dest=0x7a63030, _Source="BLOCKP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" [0186.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40 [0186.918] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72bf500, ftCreationTime.dwHighDateTime=0x1c63651, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb72bf500, ftLastWriteTime.dwHighDateTime=0x1c63651, nFileSizeHigh=0x0, nFileSizeLow=0xf1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCKS.DWG", cAlternateFileName="")) returned 1 [0186.919] wcscmp (_String1="BLOCKS.DWG", _String2=".") returned 1 [0186.919] wcscmp (_String1="BLOCKS.DWG", _String2="..") returned 1 [0186.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62590 [0186.919] wcscpy (in: _Dest=0x7a62590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.919] wcscat (in: _Dest=0x7a62590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.919] wcscat (in: _Dest=0x7a62590, _Source="BLOCKS.DWG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" [0186.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0186.920] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b515900, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b515900, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_M.VSS", cAlternateFileName="")) returned 1 [0186.920] wcscmp (_String1="BLOCK_M.VSS", _String2=".") returned 1 [0186.920] wcscmp (_String1="BLOCK_M.VSS", _String2="..") returned 1 [0186.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63d50 [0186.920] wcscpy (in: _Dest=0x7a63d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.920] wcscat (in: _Dest=0x7a63d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.920] wcscat (in: _Dest=0x7a63d50, _Source="BLOCK_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" [0186.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0186.921] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5c5200, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc5c5200, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_M.VST", cAlternateFileName="")) returned 1 [0186.921] wcscmp (_String1="BLOCK_M.VST", _String2=".") returned 1 [0186.921] wcscmp (_String1="BLOCK_M.VST", _String2="..") returned 1 [0186.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62d10 [0186.922] wcscpy (in: _Dest=0x7a62d10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.922] wcscat (in: _Dest=0x7a62d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.922] wcscat (in: _Dest=0x7a62d10, _Source="BLOCK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" [0186.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0186.923] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73a99400, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73a99400, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_U.VSS", cAlternateFileName="")) returned 1 [0186.923] wcscmp (_String1="BLOCK_U.VSS", _String2=".") returned 1 [0186.923] wcscmp (_String1="BLOCK_U.VSS", _String2="..") returned 1 [0186.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a632b0 [0186.923] wcscpy (in: _Dest=0x7a632b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.923] wcscat (in: _Dest=0x7a632b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.923] wcscat (in: _Dest=0x7a632b0, _Source="BLOCK_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" [0186.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a632b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0186.924] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfefd900, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa45e9ab0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdfefd900, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLOCK_U.VST", cAlternateFileName="")) returned 1 [0186.924] wcscmp (_String1="BLOCK_U.VST", _String2=".") returned 1 [0186.924] wcscmp (_String1="BLOCK_U.VST", _String2="..") returned 1 [0186.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63e90 [0186.925] wcscpy (in: _Dest=0x7a63e90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.925] wcscat (in: _Dest=0x7a63e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.925] wcscat (in: _Dest=0x7a63e90, _Source="BLOCK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" [0186.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618 [0186.926] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf042a600, ftCreationTime.dwHighDateTime=0x1ca5ee2, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf042a600, ftLastWriteTime.dwHighDateTime=0x1ca5ee2, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDRS_M.VSS", cAlternateFileName="")) returned 1 [0186.926] wcscmp (_String1="BORDRS_M.VSS", _String2=".") returned 1 [0186.926] wcscmp (_String1="BORDRS_M.VSS", _String2="..") returned 1 [0186.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63f30 [0186.926] wcscpy (in: _Dest=0x7a63f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.926] wcscat (in: _Dest=0x7a63f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.926] wcscat (in: _Dest=0x7a63f30, _Source="BORDRS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" [0186.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4 [0186.927] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf042a600, ftCreationTime.dwHighDateTime=0x1ca5ee2, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf042a600, ftLastWriteTime.dwHighDateTime=0x1ca5ee2, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDRS_U.VSS", cAlternateFileName="")) returned 1 [0186.927] wcscmp (_String1="BORDRS_U.VSS", _String2=".") returned 1 [0186.927] wcscmp (_String1="BORDRS_U.VSS", _String2="..") returned 1 [0186.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a623b0 [0186.928] wcscpy (in: _Dest=0x7a623b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.928] wcscat (in: _Dest=0x7a623b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.928] wcscat (in: _Dest=0x7a623b0, _Source="BORDRS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" [0186.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a623b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4 [0186.929] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4426600, ftCreationTime.dwHighDateTime=0x1ca4e99, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4426600, ftLastWriteTime.dwHighDateTime=0x1ca4e99, nFileSizeHigh=0x0, nFileSizeLow=0x8ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNA_M.VSS", cAlternateFileName="")) returned 1 [0186.929] wcscmp (_String1="BPMNA_M.VSS", _String2=".") returned 1 [0186.929] wcscmp (_String1="BPMNA_M.VSS", _String2="..") returned 1 [0186.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a628b0 [0186.929] wcscpy (in: _Dest=0x7a628b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.929] wcscat (in: _Dest=0x7a628b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.929] wcscat (in: _Dest=0x7a628b0, _Source="BPMNA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" [0186.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a628b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8 [0186.930] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eac0300, ftCreationTime.dwHighDateTime=0x1ca4e9a, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1eac0300, ftLastWriteTime.dwHighDateTime=0x1ca4e9a, nFileSizeHigh=0x0, nFileSizeLow=0x8da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNA_U.VSS", cAlternateFileName="")) returned 1 [0186.930] wcscmp (_String1="BPMNA_U.VSS", _String2=".") returned 1 [0186.930] wcscmp (_String1="BPMNA_U.VSS", _String2="..") returned 1 [0186.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62270 [0186.930] wcscpy (in: _Dest=0x7a62270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.930] wcscat (in: _Dest=0x7a62270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.930] wcscat (in: _Dest=0x7a62270, _Source="BPMNA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" [0186.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0186.931] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e94700, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe4e94700, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0xe800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNC_M.VSS", cAlternateFileName="")) returned 1 [0186.932] wcscmp (_String1="BPMNC_M.VSS", _String2=".") returned 1 [0186.932] wcscmp (_String1="BPMNC_M.VSS", _String2="..") returned 1 [0186.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df48c0 [0186.932] wcscpy (in: _Dest=0x3df48c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.932] wcscat (in: _Dest=0x3df48c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.932] wcscat (in: _Dest=0x3df48c0, _Source="BPMNC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" [0186.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df48c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c [0186.933] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9adfb00, ftCreationTime.dwHighDateTime=0x1ca478b, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9adfb00, ftLastWriteTime.dwHighDateTime=0x1ca478b, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNC_U.VSS", cAlternateFileName="")) returned 1 [0186.933] wcscmp (_String1="BPMNC_U.VSS", _String2=".") returned 1 [0186.933] wcscmp (_String1="BPMNC_U.VSS", _String2="..") returned 1 [0186.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5f40 [0186.933] wcscpy (in: _Dest=0x3df5f40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0186.933] wcscat (in: _Dest=0x3df5f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0186.933] wcscat (in: _Dest=0x3df5f40, _Source="BPMNC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" [0186.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0187.239] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52957300, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52957300, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0xb2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNE_M.VSS", cAlternateFileName="")) returned 1 [0187.239] wcscmp (_String1="BPMNE_M.VSS", _String2=".") returned 1 [0187.239] wcscmp (_String1="BPMNE_M.VSS", _String2="..") returned 1 [0187.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62a90 [0187.239] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0187.239] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0187.239] wcscat (in: _Dest=0x7a62a90, _Source="BPMNE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" [0190.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c [0190.291] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bcde300, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa465bed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8bcde300, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0xb0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNE_U.VSS", cAlternateFileName="")) returned 1 [0190.291] wcscmp (_String1="BPMNE_U.VSS", _String2=".") returned 1 [0190.291] wcscmp (_String1="BPMNE_U.VSS", _String2="..") returned 1 [0190.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62450 [0190.291] wcscpy (in: _Dest=0x7a62450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.291] wcscat (in: _Dest=0x7a62450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.291] wcscat (in: _Dest=0x7a62450, _Source="BPMNE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" [0190.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b18 [0190.293] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34212d00, ftCreationTime.dwHighDateTime=0x1ca4e9a, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34212d00, ftLastWriteTime.dwHighDateTime=0x1ca4e9a, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNG_M.VSS", cAlternateFileName="")) returned 1 [0190.293] wcscmp (_String1="BPMNG_M.VSS", _String2=".") returned 1 [0190.293] wcscmp (_String1="BPMNG_M.VSS", _String2="..") returned 1 [0190.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63cb0 [0190.293] wcscpy (in: _Dest=0x7a63cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.293] wcscat (in: _Dest=0x7a63cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.293] wcscat (in: _Dest=0x7a63cb0, _Source="BPMNG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" [0190.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20 [0190.296] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400cef00, ftCreationTime.dwHighDateTime=0x1ca4e9a, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x400cef00, ftLastWriteTime.dwHighDateTime=0x1ca4e9a, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMNG_U.VSS", cAlternateFileName="")) returned 1 [0190.296] wcscmp (_String1="BPMNG_U.VSS", _String2=".") returned 1 [0190.296] wcscmp (_String1="BPMNG_U.VSS", _String2="..") returned 1 [0190.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a633f0 [0190.296] wcscpy (in: _Dest=0x7a633f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.296] wcscat (in: _Dest=0x7a633f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.296] wcscat (in: _Dest=0x7a633f0, _Source="BPMNG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" [0190.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a633f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4 [0190.298] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4d6000, ftCreationTime.dwHighDateTime=0x1ca5d6c, ftLastAccessTime.dwLowDateTime=0xa460fc10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7b4d6000, ftLastWriteTime.dwHighDateTime=0x1ca5d6c, nFileSizeHigh=0x0, nFileSizeLow=0x4d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_M.VSS", cAlternateFileName="")) returned 1 [0190.298] wcscmp (_String1="BPMN_M.VSS", _String2=".") returned 1 [0190.298] wcscmp (_String1="BPMN_M.VSS", _String2="..") returned 1 [0190.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62e50 [0190.298] wcscpy (in: _Dest=0x7a62e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.298] wcscat (in: _Dest=0x7a62e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.298] wcscat (in: _Dest=0x7a62e50, _Source="BPMN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" [0190.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8 [0190.299] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed291300, ftCreationTime.dwHighDateTime=0x1ca6c61, ftLastAccessTime.dwLowDateTime=0xa4635d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xed291300, ftLastWriteTime.dwHighDateTime=0x1ca6c61, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_M.VST", cAlternateFileName="")) returned 1 [0190.299] wcscmp (_String1="BPMN_M.VST", _String2=".") returned 1 [0190.299] wcscmp (_String1="BPMN_M.VST", _String2="..") returned 1 [0190.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63df0 [0190.300] wcscpy (in: _Dest=0x7a63df0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.300] wcscat (in: _Dest=0x7a63df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.300] wcscat (in: _Dest=0x7a63df0, _Source="BPMN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" [0190.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1634 [0190.301] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51f6600, ftCreationTime.dwHighDateTime=0x1ca5d6e, ftLastAccessTime.dwLowDateTime=0xa4635d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb51f6600, ftLastWriteTime.dwHighDateTime=0x1ca5d6e, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_U.VSS", cAlternateFileName="")) returned 1 [0190.301] wcscmp (_String1="BPMN_U.VSS", _String2=".") returned 1 [0190.301] wcscmp (_String1="BPMN_U.VSS", _String2="..") returned 1 [0190.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63c10 [0190.302] wcscpy (in: _Dest=0x7a63c10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.302] wcscat (in: _Dest=0x7a63c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.302] wcscat (in: _Dest=0x7a63c10, _Source="BPMN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" [0190.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0190.303] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26b97200, ftCreationTime.dwHighDateTime=0x1ca4e9d, ftLastAccessTime.dwLowDateTime=0xa4635d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26b97200, ftLastWriteTime.dwHighDateTime=0x1ca4e9d, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPMN_U.VST", cAlternateFileName="")) returned 1 [0190.303] wcscmp (_String1="BPMN_U.VST", _String2=".") returned 1 [0190.303] wcscmp (_String1="BPMN_U.VST", _String2="..") returned 1 [0190.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63210 [0190.303] wcscpy (in: _Dest=0x7a63210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.303] wcscat (in: _Dest=0x7a63210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.303] wcscat (in: _Dest=0x7a63210, _Source="BPMN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" [0190.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154 [0190.305] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce8fbb00, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xce8fbb00, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x19c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPRES_M.VSS", cAlternateFileName="")) returned 1 [0190.305] wcscmp (_String1="BPRES_M.VSS", _String2=".") returned 1 [0190.305] wcscmp (_String1="BPRES_M.VSS", _String2="..") returned 1 [0190.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63ad0 [0190.305] wcscpy (in: _Dest=0x7a63ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.305] wcscat (in: _Dest=0x7a63ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.305] wcscat (in: _Dest=0x7a63ad0, _Source="BPRES_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" [0190.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658 [0190.306] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4859c00, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd4859c00, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BPRES_U.VSS", cAlternateFileName="")) returned 1 [0190.306] wcscmp (_String1="BPRES_U.VSS", _String2=".") returned 1 [0190.306] wcscmp (_String1="BPRES_U.VSS", _String2="..") returned 1 [0190.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63530 [0190.307] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.307] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.307] wcscat (in: _Dest=0x7a63530, _Source="BPRES_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" [0190.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16fc [0190.308] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94726300, ftCreationTime.dwHighDateTime=0x1c33005, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x94726300, ftLastWriteTime.dwHighDateTime=0x1c33005, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRAINSTM.XML", cAlternateFileName="")) returned 1 [0190.308] wcscmp (_String1="BRAINSTM.XML", _String2=".") returned 1 [0190.308] wcscmp (_String1="BRAINSTM.XML", _String2="..") returned 1 [0190.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a624f0 [0190.308] wcscpy (in: _Dest=0x7a624f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.308] wcscat (in: _Dest=0x7a624f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.308] wcscat (in: _Dest=0x7a624f0, _Source="BRAINSTM.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" [0190.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a624f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c [0190.310] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e7f600, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa4682030, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd6e7f600, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_M.VSS", cAlternateFileName="")) returned 1 [0190.310] wcscmp (_String1="BSTORM_M.VSS", _String2=".") returned 1 [0190.310] wcscmp (_String1="BSTORM_M.VSS", _String2="..") returned 1 [0190.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62130 [0190.310] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.310] wcscat (in: _Dest=0x7a62130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.310] wcscat (in: _Dest=0x7a62130, _Source="BSTORM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" [0190.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x194c [0190.312] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ecd900, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23ecd900, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_M.VST", cAlternateFileName="")) returned 1 [0190.312] wcscmp (_String1="BSTORM_M.VST", _String2=".") returned 1 [0190.312] wcscmp (_String1="BSTORM_M.VST", _String2="..") returned 1 [0190.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62ef0 [0190.313] wcscpy (in: _Dest=0x7a62ef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0190.313] wcscat (in: _Dest=0x7a62ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0190.313] wcscat (in: _Dest=0x7a62ef0, _Source="BSTORM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" [0190.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300 [0190.314] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd94a5000, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd94a5000, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_U.VSS", cAlternateFileName="")) returned 1 [0191.600] wcscmp (_String1="BSTORM_U.VSS", _String2=".") returned 1 [0191.600] wcscmp (_String1="BSTORM_U.VSS", _String2="..") returned 1 [0191.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62c70 [0191.600] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0191.600] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0191.600] wcscat (in: _Dest=0x7a62c70, _Source="BSTORM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" [0199.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70 [0199.235] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b18d00, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28b18d00, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM_U.VST", cAlternateFileName="")) returned 1 [0199.235] wcscmp (_String1="BSTORM_U.VST", _String2=".") returned 1 [0199.235] wcscmp (_String1="BSTORM_U.VST", _String2="..") returned 1 [0199.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62f90 [0199.235] wcscpy (in: _Dest=0x7a62f90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.236] wcscat (in: _Dest=0x7a62f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.236] wcscat (in: _Dest=0x7a62f90, _Source="BSTORM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" [0199.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150 [0199.237] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d3b800, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46a8190, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2d3b800, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x22800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTHKT_M.VSS", cAlternateFileName="")) returned 1 [0199.237] wcscmp (_String1="BTHKT_M.VSS", _String2=".") returned 1 [0199.237] wcscmp (_String1="BTHKT_M.VSS", _String2="..") returned 1 [0199.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63c10 [0199.237] wcscpy (in: _Dest=0x7a63c10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.237] wcscat (in: _Dest=0x7a63c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.237] wcscat (in: _Dest=0x7a63c10, _Source="BTHKT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" [0199.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c [0199.238] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2bf300, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb2bf300, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTHKT_U.VSS", cAlternateFileName="")) returned 1 [0199.239] wcscmp (_String1="BTHKT_U.VSS", _String2=".") returned 1 [0199.239] wcscmp (_String1="BTHKT_U.VSS", _String2="..") returned 1 [0199.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63d50 [0199.239] wcscpy (in: _Dest=0x7a63d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.239] wcscat (in: _Dest=0x7a63d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.239] wcscat (in: _Dest=0x7a63d50, _Source="BTHKT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" [0199.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d0 [0199.240] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf717b500, ftCreationTime.dwHighDateTime=0x1ca478c, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf717b500, ftLastWriteTime.dwHighDateTime=0x1ca478c, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CABNT_M.VSS", cAlternateFileName="")) returned 1 [0199.240] wcscmp (_String1="CABNT_M.VSS", _String2=".") returned 1 [0199.240] wcscmp (_String1="CABNT_M.VSS", _String2="..") returned 1 [0199.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62d10 [0199.240] wcscpy (in: _Dest=0x7a62d10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.240] wcscat (in: _Dest=0x7a62d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.240] wcscat (in: _Dest=0x7a62d10, _Source="CABNT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" [0199.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8 [0199.242] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d24a00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa46ce2f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1d24a00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x1c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CABNT_U.VSS", cAlternateFileName="")) returned 1 [0199.242] wcscmp (_String1="CABNT_U.VSS", _String2=".") returned 1 [0199.242] wcscmp (_String1="CABNT_U.VSS", _String2="..") returned 1 [0199.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a632b0 [0199.242] wcscpy (in: _Dest=0x7a632b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.242] wcscat (in: _Dest=0x7a632b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.242] wcscat (in: _Dest=0x7a632b0, _Source="CABNT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" [0199.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a632b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4 [0199.243] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dedcb00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa46f4450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2dedcb00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x19f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_M.VSS", cAlternateFileName="")) returned 1 [0199.243] wcscmp (_String1="CALNDR_M.VSS", _String2=".") returned 1 [0199.243] wcscmp (_String1="CALNDR_M.VSS", _String2="..") returned 1 [0199.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63e90 [0199.244] wcscpy (in: _Dest=0x7a63e90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.244] wcscat (in: _Dest=0x7a63e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.244] wcscat (in: _Dest=0x7a63e90, _Source="CALNDR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" [0199.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c [0199.245] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaaa6e00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa46f4450, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeaaa6e00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_M.VST", cAlternateFileName="")) returned 1 [0199.245] wcscmp (_String1="CALNDR_M.VST", _String2=".") returned 1 [0199.245] wcscmp (_String1="CALNDR_M.VST", _String2="..") returned 1 [0199.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a626d0 [0199.245] wcscpy (in: _Dest=0x7a626d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.245] wcscat (in: _Dest=0x7a626d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.246] wcscat (in: _Dest=0x7a626d0, _Source="CALNDR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" [0199.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a626d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08 [0199.247] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54136b00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54136b00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x19da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_U.VSS", cAlternateFileName="")) returned 1 [0199.247] wcscmp (_String1="CALNDR_U.VSS", _String2=".") returned 1 [0199.247] wcscmp (_String1="CALNDR_U.VSS", _String2="..") returned 1 [0199.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62770 [0199.247] wcscpy (in: _Dest=0x7a62770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.247] wcscat (in: _Dest=0x7a62770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.247] wcscat (in: _Dest=0x7a62770, _Source="CALNDR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" [0199.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1824 [0199.248] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee3df500, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee3df500, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR_U.VST", cAlternateFileName="")) returned 1 [0199.248] wcscmp (_String1="CALNDR_U.VST", _String2=".") returned 1 [0199.248] wcscmp (_String1="CALNDR_U.VST", _String2="..") returned 1 [0199.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62950 [0199.249] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.249] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.249] wcscat (in: _Dest=0x7a62950, _Source="CALNDR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" [0199.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68 [0199.250] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b3a7900, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5b3a7900, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALOUT_M.VSS", cAlternateFileName="")) returned 1 [0199.250] wcscmp (_String1="CALOUT_M.VSS", _String2=".") returned 1 [0199.250] wcscmp (_String1="CALOUT_M.VSS", _String2="..") returned 1 [0199.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63a30 [0199.250] wcscpy (in: _Dest=0x7a63a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.250] wcscat (in: _Dest=0x7a63a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.250] wcscat (in: _Dest=0x7a63a30, _Source="CALOUT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" [0199.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4 [0199.251] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62618700, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62618700, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALOUT_U.VSS", cAlternateFileName="")) returned 1 [0199.251] wcscmp (_String1="CALOUT_U.VSS", _String2=".") returned 1 [0199.251] wcscmp (_String1="CALOUT_U.VSS", _String2="..") returned 1 [0199.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a637b0 [0199.252] wcscpy (in: _Dest=0x7a637b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.252] wcscat (in: _Dest=0x7a637b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.252] wcscat (in: _Dest=0x7a637b0, _Source="CALOUT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" [0199.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a637b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc [0199.253] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64c3e100, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64c3e100, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_M.VSS", cAlternateFileName="")) returned 1 [0199.253] wcscmp (_String1="CAUSEF_M.VSS", _String2=".") returned 1 [0199.253] wcscmp (_String1="CAUSEF_M.VSS", _String2="..") returned 1 [0199.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63850 [0199.253] wcscpy (in: _Dest=0x7a63850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.254] wcscat (in: _Dest=0x7a63850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.254] wcscat (in: _Dest=0x7a63850, _Source="CAUSEF_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" [0199.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00 [0199.255] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x454dc500, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa471a5b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x454dc500, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_M.VST", cAlternateFileName="")) returned 1 [0199.255] wcscmp (_String1="CAUSEF_M.VST", _String2=".") returned 1 [0199.255] wcscmp (_String1="CAUSEF_M.VST", _String2="..") returned 1 [0199.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62bd0 [0199.255] wcscpy (in: _Dest=0x7a62bd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.255] wcscat (in: _Dest=0x7a62bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.255] wcscat (in: _Dest=0x7a62bd0, _Source="CAUSEF_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" [0199.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0199.256] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68576800, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68576800, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_U.VSS", cAlternateFileName="")) returned 1 [0199.257] wcscmp (_String1="CAUSEF_U.VSS", _String2=".") returned 1 [0199.257] wcscmp (_String1="CAUSEF_U.VSS", _String2="..") returned 1 [0199.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63fd0 [0199.257] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.257] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.257] wcscat (in: _Dest=0x7a63fd0, _Source="CAUSEF_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" [0199.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0199.258] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b43a600, ftCreationTime.dwHighDateTime=0x1ca4901, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4b43a600, ftLastWriteTime.dwHighDateTime=0x1ca4901, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAUSEF_U.VST", cAlternateFileName="")) returned 1 [0199.258] wcscmp (_String1="CAUSEF_U.VST", _String2=".") returned 1 [0199.258] wcscmp (_String1="CAUSEF_U.VST", _String2="..") returned 1 [0199.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62310 [0199.258] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.258] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.258] wcscat (in: _Dest=0x7a62310, _Source="CAUSEF_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" [0199.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1904 [0199.260] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeee6b00, ftCreationTime.dwHighDateTime=0x1ca48ec, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfeee6b00, ftLastWriteTime.dwHighDateTime=0x1ca48ec, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEILPL_M.VST", cAlternateFileName="")) returned 1 [0199.260] wcscmp (_String1="CEILPL_M.VST", _String2=".") returned 1 [0199.260] wcscmp (_String1="CEILPL_M.VST", _String2="..") returned 1 [0199.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a629f0 [0199.260] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.260] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.260] wcscat (in: _Dest=0x7a629f0, _Source="CEILPL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" [0199.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1900 [0199.261] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877d300, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x877d300, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEILPL_U.VST", cAlternateFileName="")) returned 1 [0199.261] wcscmp (_String1="CEILPL_U.VST", _String2=".") returned 1 [0199.261] wcscmp (_String1="CEILPL_U.VST", _String2="..") returned 1 [0199.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a630d0 [0199.262] wcscpy (in: _Dest=0x7a630d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.262] wcscat (in: _Dest=0x7a630d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.262] wcscat (in: _Dest=0x7a630d0, _Source="CEILPL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" [0199.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a630d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18fc [0199.263] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802eec00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x802eec00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x84200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_M.VSS", cAlternateFileName="")) returned 1 [0199.263] wcscmp (_String1="CHART_M.VSS", _String2=".") returned 1 [0199.263] wcscmp (_String1="CHART_M.VSS", _String2="..") returned 1 [0199.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62db0 [0199.263] wcscpy (in: _Dest=0x7a62db0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.263] wcscat (in: _Dest=0x7a62db0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.263] wcscat (in: _Dest=0x7a62db0, _Source="CHART_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" [0199.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4 [0199.265] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b5a00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4740710, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc0b5a00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_M.VST", cAlternateFileName="")) returned 1 [0199.265] wcscmp (_String1="CHART_M.VST", _String2=".") returned 1 [0199.265] wcscmp (_String1="CHART_M.VST", _String2="..") returned 1 [0199.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63b70 [0199.265] wcscpy (in: _Dest=0x7a63b70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.265] wcscat (in: _Dest=0x7a63b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.265] wcscat (in: _Dest=0x7a63b70, _Source="CHART_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" [0199.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0 [0199.266] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99379d00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99379d00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_U.VSS", cAlternateFileName="")) returned 1 [0199.266] wcscmp (_String1="CHART_U.VSS", _String2=".") returned 1 [0199.266] wcscmp (_String1="CHART_U.VSS", _String2="..") returned 1 [0199.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5f40 [0199.266] wcscpy (in: _Dest=0x3df5f40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.267] wcscat (in: _Dest=0x3df5f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.267] wcscat (in: _Dest=0x3df5f40, _Source="CHART_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" [0199.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ec [0199.268] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ee100, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf9ee100, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART_U.VST", cAlternateFileName="")) returned 1 [0199.268] wcscmp (_String1="CHART_U.VST", _String2=".") returned 1 [0199.268] wcscmp (_String1="CHART_U.VST", _String2="..") returned 1 [0199.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df59a0 [0199.268] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.268] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.268] wcscat (in: _Dest=0x3df59a0, _Source="CHART_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" [0199.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df59a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec [0199.269] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2d7e00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9f2d7e00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_M.VSS", cAlternateFileName="")) returned 1 [0199.270] wcscmp (_String1="COMOLE_M.VSS", _String2=".") returned 1 [0199.270] wcscmp (_String1="COMOLE_M.VSS", _String2="..") returned 1 [0199.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5d60 [0199.270] wcscpy (in: _Dest=0x3df5d60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.270] wcscat (in: _Dest=0x3df5d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.270] wcscat (in: _Dest=0x3df5d60, _Source="COMOLE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" [0199.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4 [0199.473] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13326800, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13326800, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_M.VST", cAlternateFileName="")) returned 1 [0199.473] wcscmp (_String1="COMOLE_M.VST", _String2=".") returned 1 [0199.473] wcscmp (_String1="COMOLE_M.VST", _String2="..") returned 1 [0199.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63710 [0199.473] wcscpy (in: _Dest=0x7a63710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.473] wcscat (in: _Dest=0x7a63710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.473] wcscat (in: _Dest=0x7a63710, _Source="COMOLE_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" [0199.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068 [0199.750] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f23200, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa3f23200, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_U.VSS", cAlternateFileName="")) returned 1 [0199.750] wcscmp (_String1="COMOLE_U.VSS", _String2=".") returned 1 [0199.750] wcscmp (_String1="COMOLE_U.VSS", _String2="..") returned 1 [0199.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a628b0 [0199.750] wcscpy (in: _Dest=0x7a628b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.750] wcscat (in: _Dest=0x7a628b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.750] wcscat (in: _Dest=0x7a628b0, _Source="COMOLE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" [0199.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a628b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8 [0199.751] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594c200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4766870, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1594c200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMOLE_U.VST", cAlternateFileName="")) returned 1 [0199.751] wcscmp (_String1="COMOLE_U.VST", _String2=".") returned 1 [0199.751] wcscmp (_String1="COMOLE_U.VST", _String2="..") returned 1 [0199.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df54a0 [0199.751] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.751] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.751] wcscat (in: _Dest=0x3df54a0, _Source="COMOLE_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" [0199.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df54a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c [0199.752] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa47fedf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPLN_M.VSS", cAlternateFileName="")) returned 1 [0199.752] wcscmp (_String1="COMPLN_M.VSS", _String2=".") returned 1 [0199.752] wcscmp (_String1="COMPLN_M.VSS", _String2="..") returned 1 [0199.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5fe0 [0199.753] wcscpy (in: _Dest=0x3df5fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.753] wcscat (in: _Dest=0x3df5fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.753] wcscat (in: _Dest=0x3df5fe0, _Source="COMPLN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" [0199.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038 [0199.753] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa47fedf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPLN_U.VSS", cAlternateFileName="")) returned 1 [0199.754] wcscmp (_String1="COMPLN_U.VSS", _String2=".") returned 1 [0199.754] wcscmp (_String1="COMPLN_U.VSS", _String2="..") returned 1 [0199.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5ea0 [0199.754] wcscpy (in: _Dest=0x3df5ea0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.754] wcscat (in: _Dest=0x3df5ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.754] wcscat (in: _Dest=0x3df5ea0, _Source="COMPLN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" [0199.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c [0199.755] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2404e00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4824f50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2404e00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x3de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPS_M.VSS", cAlternateFileName="")) returned 1 [0199.755] wcscmp (_String1="COMPS_M.VSS", _String2=".") returned 1 [0199.755] wcscmp (_String1="COMPS_M.VSS", _String2="..") returned 1 [0199.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4e60 [0199.755] wcscpy (in: _Dest=0x3df4e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.755] wcscat (in: _Dest=0x3df4e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.755] wcscat (in: _Dest=0x3df4e60, _Source="COMPS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" [0199.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50 [0199.756] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbc9b600, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbbc9b600, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x3c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPS_U.VSS", cAlternateFileName="")) returned 1 [0199.756] wcscmp (_String1="COMPS_U.VSS", _String2=".") returned 1 [0199.756] wcscmp (_String1="COMPS_U.VSS", _String2="..") returned 1 [0199.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4fa0 [0199.756] wcscpy (in: _Dest=0x3df4fa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.756] wcscat (in: _Dest=0x3df4fa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.756] wcscat (in: _Dest=0x3df4fa0, _Source="COMPS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" [0199.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c [0199.757] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a597600, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1a597600, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONLOG_M.VST", cAlternateFileName="")) returned 1 [0199.757] wcscmp (_String1="CONLOG_M.VST", _String2=".") returned 1 [0199.757] wcscmp (_String1="CONLOG_M.VST", _String2="..") returned 1 [0199.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6300 [0199.758] wcscpy (in: _Dest=0x3df6300, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.758] wcscat (in: _Dest=0x3df6300, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.758] wcscat (in: _Dest=0x3df6300, _Source="CONLOG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" [0199.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004 [0199.758] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f1e2a00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1f1e2a00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONLOG_U.VST", cAlternateFileName="")) returned 1 [0199.759] wcscmp (_String1="CONLOG_U.VST", _String2=".") returned 1 [0199.759] wcscmp (_String1="CONLOG_U.VST", _String2="..") returned 1 [0199.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5540 [0199.759] wcscpy (in: _Dest=0x3df5540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.759] wcscat (in: _Dest=0x3df5540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.759] wcscat (in: _Dest=0x3df5540, _Source="CONLOG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" [0199.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8 [0199.760] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e6a500, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa484b0b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8e6a500, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONNEC_M.VSS", cAlternateFileName="")) returned 1 [0199.760] wcscmp (_String1="CONNEC_M.VSS", _String2=".") returned 1 [0199.760] wcscmp (_String1="CONNEC_M.VSS", _String2="..") returned 1 [0199.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4460 [0199.760] wcscpy (in: _Dest=0x3df4460, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.760] wcscat (in: _Dest=0x3df4460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.760] wcscat (in: _Dest=0x3df4460, _Source="CONNEC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" [0199.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14 [0199.761] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd865ee00, ftCreationTime.dwHighDateTime=0x1ca478d, ftLastAccessTime.dwLowDateTime=0xa4871210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd865ee00, ftLastWriteTime.dwHighDateTime=0x1ca478d, nFileSizeHigh=0x0, nFileSizeLow=0x34600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONNEC_U.VSS", cAlternateFileName="")) returned 1 [0199.761] wcscmp (_String1="CONNEC_U.VSS", _String2=".") returned 1 [0199.761] wcscmp (_String1="CONNEC_U.VSS", _String2="..") returned 1 [0199.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6120 [0199.761] wcscpy (in: _Dest=0x3df6120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0199.761] wcscat (in: _Dest=0x3df6120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0199.761] wcscat (in: _Dest=0x3df6120, _Source="CONNEC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" [0199.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4 [0199.762] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0ad700, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4871210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe0ad700, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x89200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUBICL_M.VSS", cAlternateFileName="")) returned 1 [0202.653] wcscmp (_String1="CUBICL_M.VSS", _String2=".") returned 1 [0202.654] wcscmp (_String1="CUBICL_M.VSS", _String2="..") returned 1 [0202.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62590 [0202.654] wcscpy (in: _Dest=0x7a62590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0202.654] wcscat (in: _Dest=0x7a62590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0202.654] wcscat (in: _Dest=0x7a62590, _Source="CUBICL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" [0203.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0203.102] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427e9300, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4871210, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x427e9300, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x8ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUBICL_U.VSS", cAlternateFileName="")) returned 1 [0203.103] wcscmp (_String1="CUBICL_U.VSS", _String2=".") returned 1 [0203.103] wcscmp (_String1="CUBICL_U.VSS", _String2="..") returned 1 [0203.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62810 [0203.103] wcscpy (in: _Dest=0x7a62810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.103] wcscat (in: _Dest=0x7a62810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.103] wcscat (in: _Dest=0x7a62810, _Source="CUBICL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" [0203.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0203.104] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47434700, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4897370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47434700, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_M.VSS", cAlternateFileName="")) returned 1 [0203.104] wcscmp (_String1="DATFLO_M.VSS", _String2=".") returned 1 [0203.104] wcscmp (_String1="DATFLO_M.VSS", _String2="..") returned 1 [0203.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df61c0 [0203.104] wcscpy (in: _Dest=0x3df61c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.104] wcscat (in: _Dest=0x3df61c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.104] wcscat (in: _Dest=0x3df61c0, _Source="DATFLO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" [0203.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df61c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac [0203.105] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21808400, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa492f8f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x21808400, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_M.VST", cAlternateFileName="")) returned 1 [0203.105] wcscmp (_String1="DATFLO_M.VST", _String2=".") returned 1 [0203.105] wcscmp (_String1="DATFLO_M.VST", _String2="..") returned 1 [0203.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4be0 [0203.105] wcscpy (in: _Dest=0x3df4be0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.106] wcscat (in: _Dest=0x3df4be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.106] wcscat (in: _Dest=0x3df4be0, _Source="DATFLO_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" [0203.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0203.107] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d392800, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa492f8f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d392800, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_U.VSS", cAlternateFileName="")) returned 1 [0203.107] wcscmp (_String1="DATFLO_U.VSS", _String2=".") returned 1 [0203.107] wcscmp (_String1="DATFLO_U.VSS", _String2="..") returned 1 [0203.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4aa0 [0203.107] wcscpy (in: _Dest=0x3df4aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.107] wcscat (in: _Dest=0x3df4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.107] wcscat (in: _Dest=0x3df4aa0, _Source="DATFLO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" [0203.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0203.111] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25140b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa492f8f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x25140b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATFLO_U.VST", cAlternateFileName="")) returned 1 [0203.111] wcscmp (_String1="DATFLO_U.VST", _String2=".") returned 1 [0203.111] wcscmp (_String1="DATFLO_U.VST", _String2="..") returned 1 [0203.111] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6260 [0203.111] wcscpy (in: _Dest=0x3df6260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.112] wcscat (in: _Dest=0x3df6260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.112] wcscat (in: _Dest=0x3df6260, _Source="DATFLO_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" [0203.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0203.113] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26453800, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa49c7e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26453800, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATMOD_M.VST", cAlternateFileName="")) returned 1 [0203.113] wcscmp (_String1="DATMOD_M.VST", _String2=".") returned 1 [0203.113] wcscmp (_String1="DATMOD_M.VST", _String2="..") returned 1 [0203.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6080 [0203.114] wcscpy (in: _Dest=0x3df6080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.114] wcscat (in: _Dest=0x3df6080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.114] wcscat (in: _Dest=0x3df6080, _Source="DATMOD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" [0203.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0203.115] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a79200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa49c7e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28a79200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATMOD_U.VST", cAlternateFileName="")) returned 1 [0203.115] wcscmp (_String1="DATMOD_U.VST", _String2=".") returned 1 [0203.115] wcscmp (_String1="DATMOD_U.VST", _String2="..") returned 1 [0203.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4dc0 [0203.115] wcscpy (in: _Dest=0x3df4dc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.115] wcscat (in: _Dest=0x3df4dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.115] wcscat (in: _Dest=0x3df4dc0, _Source="DATMOD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" [0203.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0203.116] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b09ec00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa49edfd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b09ec00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBMODL_M.VST", cAlternateFileName="")) returned 1 [0203.116] wcscmp (_String1="DBMODL_M.VST", _String2=".") returned 1 [0203.116] wcscmp (_String1="DBMODL_M.VST", _String2="..") returned 1 [0203.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df57c0 [0203.116] wcscpy (in: _Dest=0x3df57c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.117] wcscat (in: _Dest=0x3df57c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.117] wcscat (in: _Dest=0x3df57c0, _Source="DBMODL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" [0203.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df57c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0203.118] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9d7300, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4a3a290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2e9d7300, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBMODL_U.VST", cAlternateFileName="")) returned 1 [0203.118] wcscmp (_String1="DBMODL_U.VST", _String2=".") returned 1 [0203.118] wcscmp (_String1="DBMODL_U.VST", _String2="..") returned 1 [0203.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5220 [0203.118] wcscpy (in: _Dest=0x3df5220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.118] wcscat (in: _Dest=0x3df5220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.118] wcscat (in: _Dest=0x3df5220, _Source="DBMODL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" [0203.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0203.119] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532f0900, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4a603f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x532f0900, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGICON_M.VSS", cAlternateFileName="")) returned 1 [0203.119] wcscmp (_String1="DGICON_M.VSS", _String2=".") returned 1 [0203.119] wcscmp (_String1="DGICON_M.VSS", _String2="..") returned 1 [0203.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5b80 [0203.119] wcscpy (in: _Dest=0x3df5b80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.119] wcscat (in: _Dest=0x3df5b80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.119] wcscat (in: _Dest=0x3df5b80, _Source="DGICON_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" [0203.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0203.120] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57f3bd00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4aac6b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x57f3bd00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGICON_U.VSS", cAlternateFileName="")) returned 1 [0203.121] wcscmp (_String1="DGICON_U.VSS", _String2=".") returned 1 [0203.121] wcscmp (_String1="DGICON_U.VSS", _String2="..") returned 1 [0203.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5a40 [0203.121] wcscpy (in: _Dest=0x3df5a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.121] wcscat (in: _Dest=0x3df5a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.121] wcscat (in: _Dest=0x3df5a40, _Source="DGICON_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" [0203.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0203.122] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67730600, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4aac6b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67730600, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMARC_U.VSS", cAlternateFileName="")) returned 1 [0203.122] wcscmp (_String1="DIMARC_U.VSS", _String2=".") returned 1 [0203.122] wcscmp (_String1="DIMARC_U.VSS", _String2="..") returned 1 [0203.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5c20 [0203.122] wcscpy (in: _Dest=0x3df5c20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.122] wcscat (in: _Dest=0x3df5c20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.122] wcscat (in: _Dest=0x3df5c20, _Source="DIMARC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" [0203.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0203.123] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78237c00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4aac6b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x78237c00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMENG_M.VSS", cAlternateFileName="")) returned 1 [0203.123] wcscmp (_String1="DIMENG_M.VSS", _String2=".") returned 1 [0203.123] wcscmp (_String1="DIMENG_M.VSS", _String2="..") returned 1 [0203.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4d20 [0203.123] wcscpy (in: _Dest=0x3df4d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.123] wcscat (in: _Dest=0x3df4d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.124] wcscat (in: _Dest=0x3df4d20, _Source="DIMENG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" [0203.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0203.125] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a2c500, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x87a2c500, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x2d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIMENG_U.VSS", cAlternateFileName="")) returned 1 [0203.125] wcscmp (_String1="DIMENG_U.VSS", _String2=".") returned 1 [0203.125] wcscmp (_String1="DIMENG_U.VSS", _String2="..") returned 1 [0203.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7698 [0203.125] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.125] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.125] wcscat (in: _Dest=0x2c7698, _Source="DIMENG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" [0203.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0203.126] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d98a600, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8d98a600, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRAWTL_M.VSS", cAlternateFileName="")) returned 1 [0203.126] wcscmp (_String1="DRAWTL_M.VSS", _String2=".") returned 1 [0203.126] wcscmp (_String1="DRAWTL_M.VSS", _String2="..") returned 1 [0203.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c70f8 [0203.126] wcscpy (in: _Dest=0x2c70f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.126] wcscat (in: _Dest=0x2c70f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.126] wcscat (in: _Dest=0x2c70f8, _Source="DRAWTL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" [0203.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c70f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0203.127] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f0e100, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95f0e100, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRAWTL_U.VSS", cAlternateFileName="")) returned 1 [0203.127] wcscmp (_String1="DRAWTL_U.VSS", _String2=".") returned 1 [0203.127] wcscmp (_String1="DRAWTL_U.VSS", _String2="..") returned 1 [0203.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7558 [0203.128] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.128] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.128] wcscat (in: _Dest=0x2c7558, _Source="DRAWTL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" [0203.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0203.129] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98533b00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98533b00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_M.VSS", cAlternateFileName="")) returned 1 [0203.129] wcscmp (_String1="DRILLD_M.VSS", _String2=".") returned 1 [0203.129] wcscmp (_String1="DRILLD_M.VSS", _String2="..") returned 1 [0203.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c6e78 [0203.129] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.129] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.130] wcscat (in: _Dest=0x2c6e78, _Source="DRILLD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" [0203.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0203.131] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33622700, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x33622700, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_M.VST", cAlternateFileName="")) returned 1 [0203.131] wcscmp (_String1="DRILLD_M.VST", _String2=".") returned 1 [0203.131] wcscmp (_String1="DRILLD_M.VST", _String2="..") returned 1 [0203.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7738 [0203.131] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.131] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.131] wcscat (in: _Dest=0x2c7738, _Source="DRILLD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" [0203.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0203.132] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab59500, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4ad2810, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ab59500, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_U.VSS", cAlternateFileName="")) returned 1 [0203.132] wcscmp (_String1="DRILLD_U.VSS", _String2=".") returned 1 [0203.132] wcscmp (_String1="DRILLD_U.VSS", _String2="..") returned 1 [0203.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c6298 [0203.133] wcscpy (in: _Dest=0x2c6298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.133] wcscat (in: _Dest=0x2c6298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.133] wcscat (in: _Dest=0x2c6298, _Source="DRILLD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" [0203.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0203.134] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3826db00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4af8970, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3826db00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLD_U.VST", cAlternateFileName="")) returned 1 [0203.134] wcscmp (_String1="DRILLD_U.VST", _String2=".") returned 1 [0203.134] wcscmp (_String1="DRILLD_U.VST", _String2="..") returned 1 [0203.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c6fb8 [0203.134] wcscpy (in: _Dest=0x2c6fb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.134] wcscat (in: _Dest=0x2c6fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.134] wcscat (in: _Dest=0x2c6fb8, _Source="DRILLD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" [0203.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0203.135] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac973800, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4af8970, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xac973800, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_M.VSS", cAlternateFileName="")) returned 1 [0203.135] wcscmp (_String1="DTLNET_M.VSS", _String2=".") returned 1 [0203.135] wcscmp (_String1="DTLNET_M.VSS", _String2="..") returned 1 [0203.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c75f8 [0203.135] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.135] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.136] wcscat (in: _Dest=0x2c75f8, _Source="DTLNET_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" [0203.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0203.137] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a087e00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4a087e00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_M.VST", cAlternateFileName="")) returned 1 [0203.137] wcscmp (_String1="DTLNET_M.VST", _String2=".") returned 1 [0203.137] wcscmp (_String1="DTLNET_M.VST", _String2="..") returned 1 [0203.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7378 [0203.137] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.137] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.137] wcscat (in: _Dest=0x2c7378, _Source="DTLNET_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" [0203.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0203.138] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd47ae00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd47ae00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x63600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_U.VSS", cAlternateFileName="")) returned 1 [0203.138] wcscmp (_String1="DTLNET_U.VSS", _String2=".") returned 1 [0203.138] wcscmp (_String1="DTLNET_U.VSS", _String2="..") returned 1 [0203.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7198 [0203.138] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.138] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.138] wcscat (in: _Dest=0x2c7198, _Source="DTLNET_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" [0203.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0203.139] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5391e600, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5391e600, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x1e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DTLNET_U.VST", cAlternateFileName="")) returned 1 [0203.139] wcscmp (_String1="DTLNET_U.VST", _String2=".") returned 1 [0203.139] wcscmp (_String1="DTLNET_U.VST", _String2="..") returned 1 [0203.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6020 [0203.140] wcscpy (in: _Dest=0x7cb6020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.140] wcscat (in: _Dest=0x7cb6020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.140] wcscat (in: _Dest=0x7cb6020, _Source="DTLNET_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" [0203.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0203.141] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfaa0800, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbfaa0800, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVCALL_M.VSS", cAlternateFileName="")) returned 1 [0203.141] wcscmp (_String1="DVCALL_M.VSS", _String2=".") returned 1 [0203.141] wcscmp (_String1="DVCALL_M.VSS", _String2="..") returned 1 [0203.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb60c0 [0203.141] wcscpy (in: _Dest=0x7cb60c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.141] wcscat (in: _Dest=0x7cb60c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.141] wcscat (in: _Dest=0x7cb60c0, _Source="DVCALL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" [0203.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb60c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0203.371] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46ebc00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b1ead0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc46ebc00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x4b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVCALL_U.VSS", cAlternateFileName="")) returned 1 [0203.371] wcscmp (_String1="DVCALL_U.VSS", _String2=".") returned 1 [0203.371] wcscmp (_String1="DVCALL_U.VSS", _String2="..") returned 1 [0203.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb63e0 [0203.372] wcscpy (in: _Dest=0x7cb63e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.372] wcscat (in: _Dest=0x7cb63e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.372] wcscat (in: _Dest=0x7cb63e0, _Source="DVCALL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" [0203.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb63e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0203.779] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdf5400, ftCreationTime.dwHighDateTime=0x1ca3706, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccdf5400, ftLastWriteTime.dwHighDateTime=0x1ca3706, nFileSizeHigh=0x0, nFileSizeLow=0xf699f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV_M.VTX", cAlternateFileName="")) returned 1 [0203.779] wcscmp (_String1="DWGCNV_M.VTX", _String2=".") returned 1 [0203.779] wcscmp (_String1="DWGCNV_M.VTX", _String2="..") returned 1 [0203.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6340 [0203.780] wcscpy (in: _Dest=0x7cb6340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.780] wcscat (in: _Dest=0x7cb6340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.780] wcscat (in: _Dest=0x7cb6340, _Source="DWGCNV_M.VTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" [0203.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4 [0203.781] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdf5400, ftCreationTime.dwHighDateTime=0x1ca3706, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xccdf5400, ftLastWriteTime.dwHighDateTime=0x1ca3706, nFileSizeHigh=0x0, nFileSizeLow=0xef20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV_U.VTX", cAlternateFileName="")) returned 1 [0203.781] wcscmp (_String1="DWGCNV_U.VTX", _String2=".") returned 1 [0203.781] wcscmp (_String1="DWGCNV_U.VTX", _String2="..") returned 1 [0203.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb62a0 [0203.781] wcscpy (in: _Dest=0x7cb62a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.781] wcscat (in: _Dest=0x7cb62a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.781] wcscat (in: _Dest=0x7cb62a0, _Source="DWGCNV_U.VTX" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" [0203.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb62a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0203.782] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e3e600, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b44c30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9e3e600, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x5d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_M.VSS", cAlternateFileName="")) returned 1 [0203.782] wcscmp (_String1="EECHIP_M.VSS", _String2=".") returned 1 [0203.782] wcscmp (_String1="EECHIP_M.VSS", _String2="..") returned 1 [0203.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6200 [0203.782] wcscpy (in: _Dest=0x7cb6200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.782] wcscat (in: _Dest=0x7cb6200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.782] wcscat (in: _Dest=0x7cb6200, _Source="EECHIP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" [0203.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0203.788] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58569a00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58569a00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_M.VST", cAlternateFileName="")) returned 1 [0203.788] wcscmp (_String1="EECHIP_M.VST", _String2=".") returned 1 [0203.788] wcscmp (_String1="EECHIP_M.VST", _String2="..") returned 1 [0203.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6160 [0203.788] wcscpy (in: _Dest=0x7cb6160, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.788] wcscat (in: _Dest=0x7cb6160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.788] wcscat (in: _Dest=0x7cb6160, _Source="EECHIP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" [0203.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0203.790] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bb6a00, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf1bb6a00, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_U.VSS", cAlternateFileName="")) returned 1 [0203.790] wcscmp (_String1="EECHIP_U.VSS", _String2=".") returned 1 [0203.790] wcscmp (_String1="EECHIP_U.VSS", _String2="..") returned 1 [0203.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6480 [0203.790] wcscpy (in: _Dest=0x7cb6480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.790] wcscat (in: _Dest=0x7cb6480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.790] wcscat (in: _Dest=0x7cb6480, _Source="EECHIP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" [0203.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0203.792] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e4c7b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e4c7b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECHIP_U.VST", cAlternateFileName="")) returned 1 [0203.792] wcscmp (_String1="EECHIP_U.VST", _String2=".") returned 1 [0203.792] wcscmp (_String1="EECHIP_U.VST", _String2="..") returned 1 [0203.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6520 [0203.792] wcscpy (in: _Dest=0x7cb6520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.792] wcscat (in: _Dest=0x7cb6520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.792] wcscat (in: _Dest=0x7cb6520, _Source="EECHIP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" [0203.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0203.793] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13a500, ftCreationTime.dwHighDateTime=0x1ca478e, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfa13a500, ftLastWriteTime.dwHighDateTime=0x1ca478e, nFileSizeHigh=0x0, nFileSizeLow=0x26000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECOMP_M.VSS", cAlternateFileName="")) returned 1 [0203.793] wcscmp (_String1="EECOMP_M.VSS", _String2=".") returned 1 [0203.793] wcscmp (_String1="EECOMP_M.VSS", _String2="..") returned 1 [0203.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb65c0 [0203.794] wcscpy (in: _Dest=0x7cb65c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0203.794] wcscat (in: _Dest=0x7cb65c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0203.794] wcscat (in: _Dest=0x7cb65c0, _Source="EECOMP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" [0203.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb65c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0203.795] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d0d00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39d0d00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x24600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EECOMP_U.VSS", cAlternateFileName="")) returned 1 [0204.345] wcscmp (_String1="EECOMP_U.VSS", _String2=".") returned 1 [0204.345] wcscmp (_String1="EECOMP_U.VSS", _String2="..") returned 1 [0204.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb63e0 [0204.346] wcscpy (in: _Dest=0x7cb63e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.346] wcscat (in: _Dest=0x7cb63e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.346] wcscat (in: _Dest=0x7cb63e0, _Source="EECOMP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" [0204.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb63e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23e0 [0204.347] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11eb2900, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x11eb2900, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEFUND_M.VSS", cAlternateFileName="")) returned 1 [0204.347] wcscmp (_String1="EEFUND_M.VSS", _String2=".") returned 1 [0204.347] wcscmp (_String1="EEFUND_M.VSS", _String2="..") returned 1 [0204.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6660 [0204.348] wcscpy (in: _Dest=0x7cb6660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.348] wcscat (in: _Dest=0x7cb6660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.348] wcscat (in: _Dest=0x7cb6660, _Source="EEFUND_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" [0204.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0204.349] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20394500, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x20394500, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEFUND_U.VSS", cAlternateFileName="")) returned 1 [0204.349] wcscmp (_String1="EEFUND_U.VSS", _String2=".") returned 1 [0204.349] wcscmp (_String1="EEFUND_U.VSS", _String2="..") returned 1 [0204.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6700 [0204.349] wcscpy (in: _Dest=0x7cb6700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.349] wcscat (in: _Dest=0x7cb6700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.349] wcscat (in: _Dest=0x7cb6700, _Source="EEFUND_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" [0204.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558 [0204.350] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64425c00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b6ad90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64425c00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEGENR_M.VST", cAlternateFileName="")) returned 1 [0204.350] wcscmp (_String1="EEGENR_M.VST", _String2=".") returned 1 [0204.350] wcscmp (_String1="EEGENR_M.VST", _String2="..") returned 1 [0204.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb67a0 [0204.351] wcscpy (in: _Dest=0x7cb67a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.351] wcscat (in: _Dest=0x7cb67a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.351] wcscat (in: _Dest=0x7cb67a0, _Source="EEGENR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" [0204.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb67a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8 [0204.352] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a383d00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6a383d00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEGENR_U.VST", cAlternateFileName="")) returned 1 [0204.352] wcscmp (_String1="EEGENR_U.VST", _String2=".") returned 1 [0204.352] wcscmp (_String1="EEGENR_U.VST", _String2="..") returned 1 [0204.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6840 [0204.352] wcscpy (in: _Dest=0x7cb6840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.352] wcscat (in: _Dest=0x7cb6840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.352] wcscat (in: _Dest=0x7cb6840, _Source="EEGENR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" [0204.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0204.353] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715f4b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x715f4b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEICS_M.VST", cAlternateFileName="")) returned 1 [0204.353] wcscmp (_String1="EEICS_M.VST", _String2=".") returned 1 [0204.353] wcscmp (_String1="EEICS_M.VST", _String2="..") returned 1 [0204.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb68e0 [0204.354] wcscpy (in: _Dest=0x7cb68e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.354] wcscat (in: _Dest=0x7cb68e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.354] wcscat (in: _Dest=0x7cb68e0, _Source="EEICS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" [0204.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb68e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0204.355] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77552c00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x77552c00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEICS_U.VST", cAlternateFileName="")) returned 1 [0204.355] wcscmp (_String1="EEICS_U.VST", _String2=".") returned 1 [0204.355] wcscmp (_String1="EEICS_U.VST", _String2="..") returned 1 [0204.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb6980 [0204.355] wcscpy (in: _Dest=0x7cb6980, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.355] wcscat (in: _Dest=0x7cb6980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.355] wcscat (in: _Dest=0x7cb6980, _Source="EEICS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" [0204.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0204.356] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fdf900, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x24fdf900, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAIN_M.VSS", cAlternateFileName="")) returned 1 [0204.356] wcscmp (_String1="EEMAIN_M.VSS", _String2=".") returned 1 [0204.356] wcscmp (_String1="EEMAIN_M.VSS", _String2="..") returned 1 [0204.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6a20 [0204.357] wcscpy (in: _Dest=0x7cb6a20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.357] wcscat (in: _Dest=0x7cb6a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.357] wcscat (in: _Dest=0x7cb6a20, _Source="EEMAIN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" [0204.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0204.358] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c2ad00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x29c2ad00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAIN_U.VSS", cAlternateFileName="")) returned 1 [0204.358] wcscmp (_String1="EEMAIN_U.VSS", _String2=".") returned 1 [0204.358] wcscmp (_String1="EEMAIN_U.VSS", _String2="..") returned 1 [0204.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6ac0 [0204.358] wcscpy (in: _Dest=0x7cb6ac0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.358] wcscat (in: _Dest=0x7cb6ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.358] wcscat (in: _Dest=0x7cb6ac0, _Source="EEMAIN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" [0204.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0204.361] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ae6f00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x35ae6f00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAPS_M.VSS", cAlternateFileName="")) returned 1 [0204.361] wcscmp (_String1="EEMAPS_M.VSS", _String2=".") returned 1 [0204.361] wcscmp (_String1="EEMAPS_M.VSS", _String2="..") returned 1 [0204.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6b60 [0204.361] wcscpy (in: _Dest=0x7cb6b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.361] wcscat (in: _Dest=0x7cb6b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.361] wcscat (in: _Dest=0x7cb6b60, _Source="EEMAPS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" [0204.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0204.366] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419a3100, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x419a3100, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x2ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMAPS_U.VSS", cAlternateFileName="")) returned 1 [0204.366] wcscmp (_String1="EEMAPS_U.VSS", _String2=".") returned 1 [0204.366] wcscmp (_String1="EEMAPS_U.VSS", _String2="..") returned 1 [0204.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6c00 [0204.366] wcscpy (in: _Dest=0x7cb6c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.366] wcscat (in: _Dest=0x7cb6c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.366] wcscat (in: _Dest=0x7cb6c00, _Source="EEMAPS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" [0204.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0204.370] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47901200, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47901200, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMECH_M.VSS", cAlternateFileName="")) returned 1 [0204.370] wcscmp (_String1="EEMECH_M.VSS", _String2=".") returned 1 [0204.370] wcscmp (_String1="EEMECH_M.VSS", _String2="..") returned 1 [0204.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6ca0 [0204.371] wcscpy (in: _Dest=0x7cb6ca0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.371] wcscat (in: _Dest=0x7cb6ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.371] wcscat (in: _Dest=0x7cb6ca0, _Source="EEMECH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" [0204.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0204.373] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c54c600, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4b90ef0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4c54c600, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x14800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEMECH_U.VSS", cAlternateFileName="")) returned 1 [0204.373] wcscmp (_String1="EEMECH_U.VSS", _String2=".") returned 1 [0204.373] wcscmp (_String1="EEMECH_U.VSS", _String2="..") returned 1 [0204.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6d40 [0204.373] wcscpy (in: _Dest=0x7cb6d40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.373] wcscat (in: _Dest=0x7cb6d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.373] wcscat (in: _Dest=0x7cb6d40, _Source="EEMECH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" [0204.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0204.375] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54ad0100, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bb7050, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54ad0100, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEPATH_M.VSS", cAlternateFileName="")) returned 1 [0204.375] wcscmp (_String1="EEPATH_M.VSS", _String2=".") returned 1 [0204.375] wcscmp (_String1="EEPATH_M.VSS", _String2="..") returned 1 [0204.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6de0 [0204.376] wcscpy (in: _Dest=0x7cb6de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.376] wcscat (in: _Dest=0x7cb6de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.376] wcscat (in: _Dest=0x7cb6de0, _Source="EEPATH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" [0204.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0204.377] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d053c00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5d053c00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEPATH_U.VSS", cAlternateFileName="")) returned 1 [0204.377] wcscmp (_String1="EEPATH_U.VSS", _String2=".") returned 1 [0204.377] wcscmp (_String1="EEPATH_U.VSS", _String2="..") returned 1 [0204.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6e80 [0204.377] wcscpy (in: _Dest=0x7cb6e80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.377] wcscat (in: _Dest=0x7cb6e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.377] wcscat (in: _Dest=0x7cb6e80, _Source="EEPATH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" [0204.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0204.378] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62fb1d00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62fb1d00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEQUAL_M.VSS", cAlternateFileName="")) returned 1 [0204.378] wcscmp (_String1="EEQUAL_M.VSS", _String2=".") returned 1 [0204.378] wcscmp (_String1="EEQUAL_M.VSS", _String2="..") returned 1 [0204.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6f20 [0204.379] wcscpy (in: _Dest=0x7cb6f20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.379] wcscat (in: _Dest=0x7cb6f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.379] wcscat (in: _Dest=0x7cb6f20, _Source="EEQUAL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" [0204.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0204.380] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f0fe00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68f0fe00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEQUAL_U.VSS", cAlternateFileName="")) returned 1 [0204.380] wcscmp (_String1="EEQUAL_U.VSS", _String2=".") returned 1 [0204.380] wcscmp (_String1="EEQUAL_U.VSS", _String2="..") returned 1 [0204.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6fc0 [0204.380] wcscpy (in: _Dest=0x7cb6fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0204.381] wcscat (in: _Dest=0x7cb6fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0204.381] wcscat (in: _Dest=0x7cb6fc0, _Source="EEQUAL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" [0204.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec [0205.024] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ab9300, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73ab9300, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x29c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESEMI_M.VSS", cAlternateFileName="")) returned 1 [0205.024] wcscmp (_String1="EESEMI_M.VSS", _String2=".") returned 1 [0205.024] wcscmp (_String1="EESEMI_M.VSS", _String2="..") returned 1 [0205.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb67a0 [0205.024] wcscpy (in: _Dest=0x7cb67a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.024] wcscat (in: _Dest=0x7cb67a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.024] wcscat (in: _Dest=0x7cb67a0, _Source="EESEMI_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" [0205.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb67a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d8 [0205.194] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e662800, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7e662800, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x29a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESEMI_U.VSS", cAlternateFileName="")) returned 1 [0205.195] wcscmp (_String1="EESEMI_U.VSS", _String2=".") returned 1 [0205.195] wcscmp (_String1="EESEMI_U.VSS", _String2="..") returned 1 [0205.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6340 [0205.195] wcscpy (in: _Dest=0x7cb6340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.195] wcscat (in: _Dest=0x7cb6340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.195] wcscat (in: _Dest=0x7cb6340, _Source="EESEMI_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" [0205.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c5c [0205.196] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9178f800, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9178f800, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x4b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESWCH_M.VSS", cAlternateFileName="")) returned 1 [0205.196] wcscmp (_String1="EESWCH_M.VSS", _String2=".") returned 1 [0205.196] wcscmp (_String1="EESWCH_M.VSS", _String2="..") returned 1 [0205.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb62a0 [0205.196] wcscpy (in: _Dest=0x7cb62a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.196] wcscat (in: _Dest=0x7cb62a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.196] wcscat (in: _Dest=0x7cb62a0, _Source="EESWCH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" [0205.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb62a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c58 [0205.197] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa48bc800, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4bdd1b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa48bc800, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x48600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESWCH_U.VSS", cAlternateFileName="")) returned 1 [0205.197] wcscmp (_String1="EESWCH_U.VSS", _String2=".") returned 1 [0205.197] wcscmp (_String1="EESWCH_U.VSS", _String2="..") returned 1 [0205.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6200 [0205.198] wcscpy (in: _Dest=0x7cb6200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.198] wcscat (in: _Dest=0x7cb6200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.198] wcscat (in: _Dest=0x7cb6200, _Source="EESWCH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" [0205.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0205.199] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fad6700, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7fad6700, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESYS_M.VST", cAlternateFileName="")) returned 1 [0205.199] wcscmp (_String1="EESYS_M.VST", _String2=".") returned 1 [0205.199] wcscmp (_String1="EESYS_M.VST", _String2="..") returned 1 [0205.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb6160 [0205.199] wcscpy (in: _Dest=0x7cb6160, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.199] wcscat (in: _Dest=0x7cb6160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.199] wcscat (in: _Dest=0x7cb6160, _Source="EESYS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" [0205.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0205.200] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8805a200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8805a200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EESYS_U.VST", cAlternateFileName="")) returned 1 [0205.200] wcscmp (_String1="EESYS_U.VST", _String2=".") returned 1 [0205.200] wcscmp (_String1="EESYS_U.VST", _String2="..") returned 1 [0205.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb6020 [0205.200] wcscpy (in: _Dest=0x7cb6020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.200] wcscat (in: _Dest=0x7cb6020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.201] wcscat (in: _Dest=0x7cb6020, _Source="EESYS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" [0205.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c44 [0205.202] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb2d600, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xabb2d600, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETCOM_M.VSS", cAlternateFileName="")) returned 1 [0205.202] wcscmp (_String1="EETCOM_M.VSS", _String2=".") returned 1 [0205.202] wcscmp (_String1="EETCOM_M.VSS", _String2="..") returned 1 [0205.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6480 [0205.202] wcscpy (in: _Dest=0x7cb6480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.202] wcscat (in: _Dest=0x7cb6480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.202] wcscat (in: _Dest=0x7cb6480, _Source="EETCOM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" [0205.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0205.203] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d9e400, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb2d9e400, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETCOM_U.VSS", cAlternateFileName="")) returned 1 [0205.203] wcscmp (_String1="EETCOM_U.VSS", _String2=".") returned 1 [0205.203] wcscmp (_String1="EETCOM_U.VSS", _String2="..") returned 1 [0205.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6520 [0205.203] wcscpy (in: _Dest=0x7cb6520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.203] wcscat (in: _Dest=0x7cb6520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.203] wcscat (in: _Dest=0x7cb6520, _Source="EETCOM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" [0205.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0205.204] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc634c00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbc634c00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETERM_M.VSS", cAlternateFileName="")) returned 1 [0205.204] wcscmp (_String1="EETERM_M.VSS", _String2=".") returned 1 [0205.204] wcscmp (_String1="EETERM_M.VSS", _String2="..") returned 1 [0205.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb65c0 [0205.205] wcscpy (in: _Dest=0x7cb65c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.205] wcscat (in: _Dest=0x7cb65c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.205] wcscat (in: _Dest=0x7cb65c0, _Source="EETERM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" [0205.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb65c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0205.206] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc71de100, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc71de100, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETERM_U.VSS", cAlternateFileName="")) returned 1 [0205.206] wcscmp (_String1="EETERM_U.VSS", _String2=".") returned 1 [0205.206] wcscmp (_String1="EETERM_U.VSS", _String2="..") returned 1 [0205.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7060 [0205.206] wcscpy (in: _Dest=0x7cb7060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.206] wcscat (in: _Dest=0x7cb7060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.206] wcscat (in: _Dest=0x7cb7060, _Source="EETERM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" [0205.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0205.207] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd13c200, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd13c200, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETRAN_M.VSS", cAlternateFileName="")) returned 1 [0205.207] wcscmp (_String1="EETRAN_M.VSS", _String2=".") returned 1 [0205.207] wcscmp (_String1="EETRAN_M.VSS", _String2="..") returned 1 [0205.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7100 [0205.207] wcscpy (in: _Dest=0x7cb7100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.207] wcscat (in: _Dest=0x7cb7100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.207] wcscat (in: _Dest=0x7cb7100, _Source="EETRAN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" [0205.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0205.209] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd309a300, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c03310, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd309a300, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EETRAN_U.VSS", cAlternateFileName="")) returned 1 [0205.209] wcscmp (_String1="EETRAN_U.VSS", _String2=".") returned 1 [0205.209] wcscmp (_String1="EETRAN_U.VSS", _String2="..") returned 1 [0205.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb71a0 [0205.209] wcscpy (in: _Dest=0x7cb71a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.209] wcscat (in: _Dest=0x7cb71a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.209] wcscat (in: _Dest=0x7cb71a0, _Source="EETRAN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" [0205.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb71a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0205.210] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc930b00, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc930b00, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEVHF_M.VSS", cAlternateFileName="")) returned 1 [0205.211] wcscmp (_String1="EEVHF_M.VSS", _String2=".") returned 1 [0205.211] wcscmp (_String1="EEVHF_M.VSS", _String2="..") returned 1 [0205.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7240 [0205.211] wcscpy (in: _Dest=0x7cb7240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.211] wcscat (in: _Dest=0x7cb7240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.211] wcscat (in: _Dest=0x7cb7240, _Source="EEVHF_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" [0205.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0205.212] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61c7300, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe61c7300, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x27c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEVHF_U.VSS", cAlternateFileName="")) returned 1 [0205.212] wcscmp (_String1="EEVHF_U.VSS", _String2=".") returned 1 [0205.212] wcscmp (_String1="EEVHF_U.VSS", _String2="..") returned 1 [0205.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb72e0 [0205.212] wcscpy (in: _Dest=0x7cb72e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.212] wcscat (in: _Dest=0x7cb72e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.212] wcscat (in: _Dest=0x7cb72e0, _Source="EEVHF_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" [0205.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb72e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0205.213] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2083500, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2083500, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x25c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_M.VSS", cAlternateFileName="")) returned 1 [0205.213] wcscmp (_String1="ELETEL_M.VSS", _String2=".") returned 1 [0205.213] wcscmp (_String1="ELETEL_M.VSS", _String2="..") returned 1 [0205.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7380 [0205.213] wcscpy (in: _Dest=0x7cb7380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.213] wcscat (in: _Dest=0x7cb7380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.213] wcscat (in: _Dest=0x7cb7380, _Source="ELETEL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" [0205.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0205.217] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905ddd00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x905ddd00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_M.VST", cAlternateFileName="")) returned 1 [0205.218] wcscmp (_String1="ELETEL_M.VST", _String2=".") returned 1 [0205.218] wcscmp (_String1="ELETEL_M.VST", _String2="..") returned 1 [0205.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7420 [0205.218] wcscpy (in: _Dest=0x7cb7420, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.218] wcscat (in: _Dest=0x7cb7420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.218] wcscat (in: _Dest=0x7cb7420, _Source="ELETEL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" [0205.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0205.222] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf3f700, ftCreationTime.dwHighDateTime=0x1ca478f, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfdf3f700, ftLastWriteTime.dwHighDateTime=0x1ca478f, nFileSizeHigh=0x0, nFileSizeLow=0x27a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_U.VSS", cAlternateFileName="")) returned 1 [0205.222] wcscmp (_String1="ELETEL_U.VSS", _String2=".") returned 1 [0205.222] wcscmp (_String1="ELETEL_U.VSS", _String2="..") returned 1 [0205.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb74c0 [0205.222] wcscpy (in: _Dest=0x7cb74c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.222] wcscat (in: _Dest=0x7cb74c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.222] wcscat (in: _Dest=0x7cb74c0, _Source="ELETEL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" [0205.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb74c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0205.224] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e74500, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99e74500, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELETEL_U.VST", cAlternateFileName="")) returned 1 [0205.237] wcscmp (_String1="ELETEL_U.VST", _String2=".") returned 1 [0205.237] wcscmp (_String1="ELETEL_U.VST", _String2="..") returned 1 [0205.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7560 [0205.237] wcscpy (in: _Dest=0x7cb7560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.237] wcscat (in: _Dest=0x7cb7560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.237] wcscat (in: _Dest=0x7cb7560, _Source="ELETEL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" [0205.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0205.238] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dfb900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c29470, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9dfb900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMBELL_M.VSS", cAlternateFileName="")) returned 1 [0205.238] wcscmp (_String1="EMBELL_M.VSS", _String2=".") returned 1 [0205.238] wcscmp (_String1="EMBELL_M.VSS", _String2="..") returned 1 [0205.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7600 [0205.238] wcscpy (in: _Dest=0x7cb7600, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.238] wcscat (in: _Dest=0x7cb7600, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.238] wcscat (in: _Dest=0x7cb7600, _Source="EMBELL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" [0205.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0205.239] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15cb7b00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15cb7b00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x54c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMBELL_U.VSS", cAlternateFileName="")) returned 1 [0205.239] wcscmp (_String1="EMBELL_U.VSS", _String2=".") returned 1 [0205.239] wcscmp (_String1="EMBELL_U.VSS", _String2="..") returned 1 [0205.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb76a0 [0205.240] wcscpy (in: _Dest=0x7cb76a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.240] wcscat (in: _Dest=0x7cb76a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.240] wcscat (in: _Dest=0x7cb76a0, _Source="EMBELL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" [0205.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb76a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0205.241] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b40a500, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b40a500, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x6d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_M.VSS", cAlternateFileName="")) returned 1 [0205.241] wcscmp (_String1="ENTAPP_M.VSS", _String2=".") returned 1 [0205.241] wcscmp (_String1="ENTAPP_M.VSS", _String2="..") returned 1 [0205.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7740 [0205.241] wcscpy (in: _Dest=0x7cb7740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.241] wcscat (in: _Dest=0x7cb7740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.241] wcscat (in: _Dest=0x7cb7740, _Source="ENTAPP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" [0205.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0205.242] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d7acc00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9d7acc00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_M.VST", cAlternateFileName="")) returned 1 [0205.242] wcscmp (_String1="ENTAPP_M.VST", _String2=".") returned 1 [0205.242] wcscmp (_String1="ENTAPP_M.VST", _String2="..") returned 1 [0205.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb77e0 [0205.242] wcscpy (in: _Dest=0x7cb77e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.242] wcscat (in: _Dest=0x7cb77e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.242] wcscat (in: _Dest=0x7cb77e0, _Source="ENTAPP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" [0205.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb77e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0205.243] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f84a200, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3f84a200, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x69c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_U.VSS", cAlternateFileName="")) returned 1 [0205.243] wcscmp (_String1="ENTAPP_U.VSS", _String2=".") returned 1 [0205.243] wcscmp (_String1="ENTAPP_U.VSS", _String2="..") returned 1 [0205.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7880 [0205.243] wcscpy (in: _Dest=0x7cb7880, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.244] wcscat (in: _Dest=0x7cb7880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.244] wcscat (in: _Dest=0x7cb7880, _Source="ENTAPP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" [0205.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0205.245] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fdd2600, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9fdd2600, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTAPP_U.VST", cAlternateFileName="")) returned 1 [0205.245] wcscmp (_String1="ENTAPP_U.VST", _String2=".") returned 1 [0205.245] wcscmp (_String1="ENTAPP_U.VST", _String2="..") returned 1 [0205.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7920 [0205.245] wcscpy (in: _Dest=0x7cb7920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.245] wcscat (in: _Dest=0x7cb7920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.245] wcscat (in: _Dest=0x7cb7920, _Source="ENTAPP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" [0205.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0205.246] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43182900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x43182900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTITY_M.VSS", cAlternateFileName="")) returned 1 [0205.246] wcscmp (_String1="ENTITY_M.VSS", _String2=".") returned 1 [0205.246] wcscmp (_String1="ENTITY_M.VSS", _String2="..") returned 1 [0205.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb79c0 [0205.246] wcscpy (in: _Dest=0x7cb79c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.246] wcscat (in: _Dest=0x7cb79c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.246] wcscat (in: _Dest=0x7cb79c0, _Source="ENTITY_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" [0205.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb79c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0205.247] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46abb000, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c4f5d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x46abb000, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENTITY_U.VSS", cAlternateFileName="")) returned 1 [0205.247] wcscmp (_String1="ENTITY_U.VSS", _String2=".") returned 1 [0205.247] wcscmp (_String1="ENTITY_U.VSS", _String2="..") returned 1 [0205.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7a60 [0205.248] wcscpy (in: _Dest=0x7cb7a60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.248] wcscat (in: _Dest=0x7cb7a60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.248] wcscat (in: _Dest=0x7cb7a60, _Source="ENTITY_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" [0205.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0205.249] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x490e0a00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x490e0a00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_M.VSS", cAlternateFileName="")) returned 1 [0205.249] wcscmp (_String1="EPC_M.VSS", _String2=".") returned 1 [0205.249] wcscmp (_String1="EPC_M.VSS", _String2="..") returned 1 [0205.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d078 [0205.249] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.249] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.249] wcscat (in: _Dest=0x32d078, _Source="EPC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" [0205.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0205.250] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa370ad00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa370ad00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_M.VST", cAlternateFileName="")) returned 1 [0205.250] wcscmp (_String1="EPC_M.VST", _String2=".") returned 1 [0205.250] wcscmp (_String1="EPC_M.VST", _String2="..") returned 1 [0205.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d668 [0205.250] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.250] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.250] wcscat (in: _Dest=0x32d668, _Source="EPC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" [0205.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0205.251] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca19100, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4ca19100, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_U.VSS", cAlternateFileName="")) returned 1 [0205.251] wcscmp (_String1="EPC_U.VSS", _String2=".") returned 1 [0205.251] wcscmp (_String1="EPC_U.VSS", _String2="..") returned 1 [0205.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cc50 [0205.252] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.252] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.252] wcscat (in: _Dest=0x32cc50, _Source="EPC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" [0205.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0205.253] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d30700, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa5d30700, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPC_U.VST", cAlternateFileName="")) returned 1 [0205.253] wcscmp (_String1="EPC_U.VST", _String2=".") returned 1 [0205.253] wcscmp (_String1="EPC_U.VST", _String2="..") returned 1 [0205.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c9f0 [0205.253] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.253] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.253] wcscat (in: _Dest=0x32c9f0, _Source="EPC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" [0205.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0205.311] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e833400, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c75730, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5e833400, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCOBJ_M.VSS", cAlternateFileName="")) returned 1 [0205.311] wcscmp (_String1="EXCOBJ_M.VSS", _String2=".") returned 1 [0205.311] wcscmp (_String1="EXCOBJ_M.VSS", _String2="..") returned 1 [0205.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7b00 [0205.311] wcscpy (in: _Dest=0x7cb7b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.312] wcscat (in: _Dest=0x7cb7b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.312] wcscat (in: _Dest=0x7cb7b00, _Source="EXCOBJ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" [0205.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0205.313] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33aa00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6f33aa00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCOBJ_U.VSS", cAlternateFileName="")) returned 1 [0205.313] wcscmp (_String1="EXCOBJ_U.VSS", _String2=".") returned 1 [0205.313] wcscmp (_String1="EXCOBJ_U.VSS", _String2="..") returned 1 [0205.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7ba0 [0205.313] wcscpy (in: _Dest=0x7cb7ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.313] wcscat (in: _Dest=0x7cb7ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.313] wcscat (in: _Dest=0x7cb7ba0, _Source="EXCOBJ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" [0205.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0205.314] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82467a00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x82467a00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x42800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN1_M.VSS", cAlternateFileName="")) returned 1 [0205.314] wcscmp (_String1="FASTN1_M.VSS", _String2=".") returned 1 [0205.314] wcscmp (_String1="FASTN1_M.VSS", _String2="..") returned 1 [0205.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7c40 [0205.315] wcscpy (in: _Dest=0x7cb7c40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.315] wcscat (in: _Dest=0x7cb7c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.315] wcscat (in: _Dest=0x7cb7c40, _Source="FASTN1_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" [0205.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0205.316] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94281d00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x94281d00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x3ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN1_U.VSS", cAlternateFileName="")) returned 1 [0205.316] wcscmp (_String1="FASTN1_U.VSS", _String2=".") returned 1 [0205.316] wcscmp (_String1="FASTN1_U.VSS", _String2="..") returned 1 [0205.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7ce0 [0205.316] wcscpy (in: _Dest=0x7cb7ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.316] wcscat (in: _Dest=0x7cb7ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.316] wcscat (in: _Dest=0x7cb7ce0, _Source="FASTN1_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" [0205.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0205.317] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2763900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa2763900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN2_M.VSS", cAlternateFileName="")) returned 1 [0205.317] wcscmp (_String1="FASTN2_M.VSS", _String2=".") returned 1 [0205.317] wcscmp (_String1="FASTN2_M.VSS", _String2="..") returned 1 [0205.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7d80 [0205.317] wcscpy (in: _Dest=0x7cb7d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.318] wcscat (in: _Dest=0x7cb7d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.318] wcscat (in: _Dest=0x7cb7d80, _Source="FASTN2_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" [0205.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0205.319] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf932800, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaf932800, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FASTN2_U.VSS", cAlternateFileName="")) returned 1 [0205.319] wcscmp (_String1="FASTN2_U.VSS", _String2=".") returned 1 [0205.319] wcscmp (_String1="FASTN2_U.VSS", _String2="..") returned 1 [0205.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7e20 [0205.319] wcscpy (in: _Dest=0x7cb7e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.319] wcscat (in: _Dest=0x7cb7e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.319] wcscat (in: _Dest=0x7cb7e20, _Source="FASTN2_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" [0205.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0205.320] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f58200, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1f58200, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_M.VSS", cAlternateFileName="")) returned 1 [0205.320] wcscmp (_String1="FAULT_M.VSS", _String2=".") returned 1 [0205.320] wcscmp (_String1="FAULT_M.VSS", _String2="..") returned 1 [0205.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7ec0 [0205.321] wcscpy (in: _Dest=0x7cb7ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.321] wcscat (in: _Dest=0x7cb7ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.321] wcscat (in: _Dest=0x7cb7ec0, _Source="FAULT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" [0205.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0205.322] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8356100, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4c9b890, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa8356100, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_M.VST", cAlternateFileName="")) returned 1 [0205.322] wcscmp (_String1="FAULT_M.VST", _String2=".") returned 1 [0205.322] wcscmp (_String1="FAULT_M.VST", _String2="..") returned 1 [0205.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7f60 [0205.322] wcscpy (in: _Dest=0x7cb7f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.322] wcscat (in: _Dest=0x7cb7f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.322] wcscat (in: _Dest=0x7cb7f60, _Source="FAULT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" [0205.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0205.324] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5890900, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5890900, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_U.VSS", cAlternateFileName="")) returned 1 [0205.324] wcscmp (_String1="FAULT_U.VSS", _String2=".") returned 1 [0205.324] wcscmp (_String1="FAULT_U.VSS", _String2="..") returned 1 [0205.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63b70 [0205.324] wcscpy (in: _Dest=0x7a63b70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.324] wcscat (in: _Dest=0x7a63b70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.324] wcscat (in: _Dest=0x7a63b70, _Source="FAULT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" [0205.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63b70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0205.325] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa97bb00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaa97bb00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAULT_U.VST", cAlternateFileName="")) returned 1 [0205.325] wcscmp (_String1="FAULT_U.VST", _String2=".") returned 1 [0205.325] wcscmp (_String1="FAULT_U.VST", _String2="..") returned 1 [0205.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a632b0 [0205.325] wcscpy (in: _Dest=0x7a632b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.325] wcscat (in: _Dest=0x7a632b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.325] wcscat (in: _Dest=0x7a632b0, _Source="FAULT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" [0205.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a632b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0205.326] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d72500, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc3d72500, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOSHP_M.VSS", cAlternateFileName="")) returned 1 [0205.326] wcscmp (_String1="FLOSHP_M.VSS", _String2=".") returned 1 [0205.326] wcscmp (_String1="FLOSHP_M.VSS", _String2="..") returned 1 [0205.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63d50 [0205.326] wcscpy (in: _Dest=0x7a63d50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.326] wcscat (in: _Dest=0x7a63d50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.326] wcscat (in: _Dest=0x7a63d50, _Source="FLOSHP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" [0205.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63d50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0205.327] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2254100, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2254100, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x2b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOSHP_U.VSS", cAlternateFileName="")) returned 1 [0205.328] wcscmp (_String1="FLOSHP_U.VSS", _String2=".") returned 1 [0205.328] wcscmp (_String1="FLOSHP_U.VSS", _String2="..") returned 1 [0205.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63c10 [0205.328] wcscpy (in: _Dest=0x7a63c10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.328] wcscat (in: _Dest=0x7a63c10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.328] wcscat (in: _Dest=0x7a63c10, _Source="FLOSHP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" [0205.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0205.329] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5525000, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5525000, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLRPLN_M.VST", cAlternateFileName="")) returned 1 [0205.329] wcscmp (_String1="FLRPLN_M.VST", _String2=".") returned 1 [0205.329] wcscmp (_String1="FLRPLN_M.VST", _String2="..") returned 1 [0205.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62db0 [0205.329] wcscpy (in: _Dest=0x7a62db0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.329] wcscat (in: _Dest=0x7a62db0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.329] wcscat (in: _Dest=0x7a62db0, _Source="FLRPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" [0205.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0205.330] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc13e1200, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc13e1200, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x17c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLRPLN_U.VST", cAlternateFileName="")) returned 1 [0205.330] wcscmp (_String1="FLRPLN_U.VST", _String2=".") returned 1 [0205.330] wcscmp (_String1="FLRPLN_U.VST", _String2="..") returned 1 [0205.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a630d0 [0205.330] wcscpy (in: _Dest=0x7a630d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.330] wcscat (in: _Dest=0x7a630d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.330] wcscat (in: _Dest=0x7a630d0, _Source="FLRPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" [0205.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a630d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0205.331] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9964d00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc9964d00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPALL_M.VST", cAlternateFileName="")) returned 1 [0205.331] wcscmp (_String1="FPALL_M.VST", _String2=".") returned 1 [0205.332] wcscmp (_String1="FPALL_M.VST", _String2="..") returned 1 [0205.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63850 [0205.332] wcscpy (in: _Dest=0x7a63850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.332] wcscat (in: _Dest=0x7a63850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.332] wcscat (in: _Dest=0x7a63850, _Source="FPALL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" [0205.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c [0205.333] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bd5b00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4cc19f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0bd5b00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPALL_U.VST", cAlternateFileName="")) returned 1 [0205.333] wcscmp (_String1="FPALL_U.VST", _String2=".") returned 1 [0205.333] wcscmp (_String1="FPALL_U.VST", _String2="..") returned 1 [0205.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a637b0 [0205.333] wcscpy (in: _Dest=0x7a637b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.333] wcscat (in: _Dest=0x7a637b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.334] wcscat (in: _Dest=0x7a637b0, _Source="FPALL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" [0205.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a637b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0205.335] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79a6b00, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe79a6b00, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPASSM_M.VSS", cAlternateFileName="")) returned 1 [0205.335] wcscmp (_String1="FPASSM_M.VSS", _String2=".") returned 1 [0205.335] wcscmp (_String1="FPASSM_M.VSS", _String2="..") returned 1 [0205.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63a30 [0205.335] wcscpy (in: _Dest=0x7a63a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.335] wcscat (in: _Dest=0x7a63a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.335] wcscat (in: _Dest=0x7a63a30, _Source="FPASSM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" [0205.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0205.337] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf84ae100, ftCreationTime.dwHighDateTime=0x1ca4790, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf84ae100, ftLastWriteTime.dwHighDateTime=0x1ca4790, nFileSizeHigh=0x0, nFileSizeLow=0x40200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPASSM_U.VSS", cAlternateFileName="")) returned 1 [0205.337] wcscmp (_String1="FPASSM_U.VSS", _String2=".") returned 1 [0205.337] wcscmp (_String1="FPASSM_U.VSS", _String2="..") returned 1 [0205.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62d10 [0205.337] wcscpy (in: _Dest=0x7a62d10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.337] wcscat (in: _Dest=0x7a62d10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.337] wcscat (in: _Dest=0x7a62d10, _Source="FPASSM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" [0205.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0205.339] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef13800, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xef13800, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x4e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEQP_M.VSS", cAlternateFileName="")) returned 1 [0205.339] wcscmp (_String1="FPEQP_M.VSS", _String2=".") returned 1 [0205.339] wcscmp (_String1="FPEQP_M.VSS", _String2="..") returned 1 [0205.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62590 [0205.339] wcscpy (in: _Dest=0x7a62590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.339] wcscat (in: _Dest=0x7a62590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.339] wcscat (in: _Dest=0x7a62590, _Source="FPEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" [0205.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0205.340] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22040800, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4ce7b50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22040800, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x45e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEQP_U.VSS", cAlternateFileName="")) returned 1 [0205.340] wcscmp (_String1="FPEQP_U.VSS", _String2=".") returned 1 [0205.340] wcscmp (_String1="FPEQP_U.VSS", _String2="..") returned 1 [0205.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62810 [0205.340] wcscpy (in: _Dest=0x7a62810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.340] wcscat (in: _Dest=0x7a62810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.340] wcscat (in: _Dest=0x7a62810, _Source="FPEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" [0205.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0205.341] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e5ab00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x33e5ab00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x3a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPVALV_M.VSS", cAlternateFileName="")) returned 1 [0205.341] wcscmp (_String1="FPVALV_M.VSS", _String2=".") returned 1 [0205.341] wcscmp (_String1="FPVALV_M.VSS", _String2="..") returned 1 [0205.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a628b0 [0205.342] wcscpy (in: _Dest=0x7a628b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0205.342] wcscat (in: _Dest=0x7a628b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0205.342] wcscat (in: _Dest=0x7a628b0, _Source="FPVALV_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" [0205.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a628b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0205.343] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4364f400, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4364f400, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPVALV_U.VSS", cAlternateFileName="")) returned 1 [0207.747] wcscmp (_String1="FPVALV_U.VSS", _String2=".") returned 1 [0207.747] wcscmp (_String1="FPVALV_U.VSS", _String2="..") returned 1 [0207.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb63e0 [0207.747] wcscpy (in: _Dest=0x7cb63e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0207.747] wcscat (in: _Dest=0x7cb63e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0207.747] wcscat (in: _Dest=0x7cb63e0, _Source="FPVALV_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" [0211.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb63e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0211.319] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bbd2f00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4bbd2f00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREEQP_M.VSS", cAlternateFileName="")) returned 1 [0211.319] wcscmp (_String1="FREEQP_M.VSS", _String2=".") returned 1 [0211.319] wcscmp (_String1="FREEQP_M.VSS", _String2="..") returned 1 [0211.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6340 [0211.319] wcscpy (in: _Dest=0x7cb6340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.319] wcscat (in: _Dest=0x7cb6340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.319] wcscat (in: _Dest=0x7cb6340, _Source="FREEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" [0211.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088 [0211.320] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e43d00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52e43d00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREEQP_U.VSS", cAlternateFileName="")) returned 1 [0211.320] wcscmp (_String1="FREEQP_U.VSS", _String2=".") returned 1 [0211.320] wcscmp (_String1="FREEQP_U.VSS", _String2="..") returned 1 [0211.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb62a0 [0211.320] wcscpy (in: _Dest=0x7cb62a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.320] wcscat (in: _Dest=0x7cb62a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.320] wcscat (in: _Dest=0x7cb62a0, _Source="FREEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" [0211.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb62a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804 [0211.321] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60012c00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x60012c00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x31600, dwReserved0=0x0, dwReserved1=0x0, cFileName="FURN_M.VSS", cAlternateFileName="")) returned 1 [0211.321] wcscmp (_String1="FURN_M.VSS", _String2=".") returned 1 [0211.321] wcscmp (_String1="FURN_M.VSS", _String2="..") returned 1 [0211.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb60c0 [0211.321] wcscpy (in: _Dest=0x7cb60c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.321] wcscat (in: _Dest=0x7cb60c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.321] wcscat (in: _Dest=0x7cb60c0, _Source="FURN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" [0211.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb60c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0 [0211.322] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1e1b00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d1e1b00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x31200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FURN_U.VSS", cAlternateFileName="")) returned 1 [0211.322] wcscmp (_String1="FURN_U.VSS", _String2=".") returned 1 [0211.322] wcscmp (_String1="FURN_U.VSS", _String2="..") returned 1 [0211.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb6700 [0211.322] wcscpy (in: _Dest=0x7cb6700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.323] wcscat (in: _Dest=0x7cb6700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.323] wcscat (in: _Dest=0x7cb6700, _Source="FURN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" [0211.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b9c [0211.324] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f807500, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6f807500, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANESA_M.VSS", cAlternateFileName="")) returned 1 [0211.324] wcscmp (_String1="GANESA_M.VSS", _String2=".") returned 1 [0211.324] wcscmp (_String1="GANESA_M.VSS", _String2="..") returned 1 [0211.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6660 [0211.324] wcscpy (in: _Dest=0x7cb6660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.324] wcscat (in: _Dest=0x7cb6660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.324] wcscat (in: _Dest=0x7cb6660, _Source="GANESA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" [0211.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0 [0211.325] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b1a200, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d0dcb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70b1a200, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANESA_U.VSS", cAlternateFileName="")) returned 1 [0211.325] wcscmp (_String1="GANESA_U.VSS", _String2=".") returned 1 [0211.325] wcscmp (_String1="GANESA_U.VSS", _String2="..") returned 1 [0211.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63990 [0211.325] wcscpy (in: _Dest=0x7a63990, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.325] wcscat (in: _Dest=0x7a63990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.325] wcscat (in: _Dest=0x7a63990, _Source="GANESA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" [0211.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8 [0211.326] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b6c3700, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7b6c3700, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_M.VSS", cAlternateFileName="")) returned 1 [0211.326] wcscmp (_String1="GANTT_M.VSS", _String2=".") returned 1 [0211.326] wcscmp (_String1="GANTT_M.VSS", _String2="..") returned 1 [0211.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62770 [0211.326] wcscpy (in: _Dest=0x7a62770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.326] wcscat (in: _Dest=0x7a62770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.326] wcscat (in: _Dest=0x7a62770, _Source="GANTT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" [0211.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158 [0211.327] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5820f00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5820f00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_M.VST", cAlternateFileName="")) returned 1 [0211.327] wcscmp (_String1="GANTT_M.VST", _String2=".") returned 1 [0211.327] wcscmp (_String1="GANTT_M.VST", _String2="..") returned 1 [0211.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62f90 [0211.327] wcscpy (in: _Dest=0x7a62f90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.327] wcscat (in: _Dest=0x7a62f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.327] wcscat (in: _Dest=0x7a62f90, _Source="GANTT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" [0211.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88 [0211.328] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f59f00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x84f59f00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_U.VSS", cAlternateFileName="")) returned 1 [0211.329] wcscmp (_String1="GANTT_U.VSS", _String2=".") returned 1 [0211.329] wcscmp (_String1="GANTT_U.VSS", _String2="..") returned 1 [0211.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62c70 [0211.329] wcscpy (in: _Dest=0x7a62c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.329] wcscat (in: _Dest=0x7a62c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.329] wcscat (in: _Dest=0x7a62c70, _Source="GANTT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" [0211.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0211.330] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda46c300, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xda46c300, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT_U.VST", cAlternateFileName="")) returned 1 [0211.330] wcscmp (_String1="GANTT_U.VST", _String2=".") returned 1 [0211.330] wcscmp (_String1="GANTT_U.VST", _String2="..") returned 1 [0211.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63e90 [0211.330] wcscpy (in: _Dest=0x7a63e90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.330] wcscat (in: _Dest=0x7a63e90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.330] wcscat (in: _Dest=0x7a63e90, _Source="GANTT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" [0211.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0211.331] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aeb8000, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8aeb8000, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARDEN_M.VSS", cAlternateFileName="")) returned 1 [0211.331] wcscmp (_String1="GARDEN_M.VSS", _String2=".") returned 1 [0211.331] wcscmp (_String1="GARDEN_M.VSS", _String2="..") returned 1 [0211.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a626d0 [0211.331] wcscpy (in: _Dest=0x7a626d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.331] wcscat (in: _Dest=0x7a626d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.331] wcscat (in: _Dest=0x7a626d0, _Source="GARDEN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" [0211.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a626d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0211.332] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e16100, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90e16100, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARDEN_U.VSS", cAlternateFileName="")) returned 1 [0211.332] wcscmp (_String1="GARDEN_U.VSS", _String2=".") returned 1 [0211.332] wcscmp (_String1="GARDEN_U.VSS", _String2="..") returned 1 [0211.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63710 [0211.332] wcscpy (in: _Dest=0x7a63710, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.333] wcscat (in: _Dest=0x7a63710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.333] wcscat (in: _Dest=0x7a63710, _Source="GARDEN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" [0211.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0211.333] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99399c00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d33e10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x99399c00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x22800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDT_M.VSS", cAlternateFileName="")) returned 1 [0211.334] wcscmp (_String1="GDT_M.VSS", _String2=".") returned 1 [0211.334] wcscmp (_String1="GDT_M.VSS", _String2="..") returned 1 [0211.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7cc01e8 [0211.334] wcscpy (in: _Dest=0x7cc01e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.334] wcscat (in: _Dest=0x7cc01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.334] wcscat (in: _Dest=0x7cc01e8, _Source="GDT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" [0211.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0211.335] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa191d700, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa191d700, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x21a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDT_U.VSS", cAlternateFileName="")) returned 1 [0211.335] wcscmp (_String1="GDT_U.VSS", _String2=".") returned 1 [0211.335] wcscmp (_String1="GDT_U.VSS", _String2="..") returned 1 [0211.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x7cc0150 [0211.335] wcscpy (in: _Dest=0x7cc0150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.335] wcscat (in: _Dest=0x7cc0150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.335] wcscat (in: _Dest=0x7cc0150, _Source="GDT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" [0211.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0211.336] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c60c00, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9c60c00, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOMPLN_M.VST", cAlternateFileName="")) returned 1 [0211.336] wcscmp (_String1="HOMPLN_M.VST", _String2=".") returned 1 [0211.336] wcscmp (_String1="HOMPLN_M.VST", _String2="..") returned 1 [0211.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a629f0 [0211.336] wcscpy (in: _Dest=0x7a629f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.336] wcscat (in: _Dest=0x7a629f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.336] wcscat (in: _Dest=0x7a629f0, _Source="HOMPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" [0211.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a629f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0211.337] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8142800, ftCreationTime.dwHighDateTime=0x1ca48ed, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf8142800, ftLastWriteTime.dwHighDateTime=0x1ca48ed, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOMPLN_U.VST", cAlternateFileName="")) returned 1 [0211.337] wcscmp (_String1="HOMPLN_U.VST", _String2=".") returned 1 [0211.337] wcscmp (_String1="HOMPLN_U.VST", _String2="..") returned 1 [0211.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62310 [0211.337] wcscpy (in: _Dest=0x7a62310, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.337] wcscat (in: _Dest=0x7a62310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.337] wcscat (in: _Dest=0x7a62310, _Source="HOMPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" [0211.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0211.338] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeaec600, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaeaec600, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACCE_M.VSS", cAlternateFileName="")) returned 1 [0211.338] wcscmp (_String1="HVACCE_M.VSS", _String2=".") returned 1 [0211.338] wcscmp (_String1="HVACCE_M.VSS", _String2="..") returned 1 [0211.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63fd0 [0211.338] wcscpy (in: _Dest=0x7a63fd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.338] wcscat (in: _Dest=0x7a63fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.338] wcscat (in: _Dest=0x7a63fd0, _Source="HVACCE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" [0211.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0211.339] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe2e0f00, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe2e0f00, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACCE_U.VSS", cAlternateFileName="")) returned 1 [0211.339] wcscmp (_String1="HVACCE_U.VSS", _String2=".") returned 1 [0211.339] wcscmp (_String1="HVACCE_U.VSS", _String2="..") returned 1 [0211.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62bd0 [0211.339] wcscpy (in: _Dest=0x7a62bd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.339] wcscat (in: _Dest=0x7a62bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.339] wcscat (in: _Dest=0x7a62bd0, _Source="HVACCE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" [0211.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62bd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0211.340] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca19d100, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xca19d100, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACC_M.VSS", cAlternateFileName="")) returned 1 [0211.340] wcscmp (_String1="HVACC_M.VSS", _String2=".") returned 1 [0211.341] wcscmp (_String1="HVACC_M.VSS", _String2="..") returned 1 [0211.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62950 [0211.341] wcscpy (in: _Dest=0x7a62950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.341] wcscat (in: _Dest=0x7a62950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.341] wcscat (in: _Dest=0x7a62950, _Source="HVACC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" [0211.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0211.342] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6059300, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd6059300, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACC_U.VSS", cAlternateFileName="")) returned 1 [0211.342] wcscmp (_String1="HVACC_U.VSS", _String2=".") returned 1 [0211.342] wcscmp (_String1="HVACC_U.VSS", _String2="..") returned 1 [0211.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a623b0 [0211.342] wcscpy (in: _Dest=0x7a623b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.342] wcscat (in: _Dest=0x7a623b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.342] wcscat (in: _Dest=0x7a623b0, _Source="HVACC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" [0211.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a623b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0211.343] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3228200, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe3228200, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACD_M.VSS", cAlternateFileName="")) returned 1 [0211.343] wcscmp (_String1="HVACD_M.VSS", _String2=".") returned 1 [0211.343] wcscmp (_String1="HVACD_M.VSS", _String2="..") returned 1 [0211.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63f30 [0211.343] wcscpy (in: _Dest=0x7a63f30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.343] wcscat (in: _Dest=0x7a63f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.343] wcscat (in: _Dest=0x7a63f30, _Source="HVACD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" [0211.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0211.344] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03f7100, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4d800d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf03f7100, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x26a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACD_U.VSS", cAlternateFileName="")) returned 1 [0211.344] wcscmp (_String1="HVACD_U.VSS", _String2=".") returned 1 [0211.344] wcscmp (_String1="HVACD_U.VSS", _String2="..") returned 1 [0211.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a62a90 [0211.344] wcscpy (in: _Dest=0x7a62a90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.344] wcscat (in: _Dest=0x7a62a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.345] wcscat (in: _Dest=0x7a62a90, _Source="HVACD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" [0211.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0211.345] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2b3300, ftCreationTime.dwHighDateTime=0x1ca4791, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc2b3300, ftLastWriteTime.dwHighDateTime=0x1ca4791, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACEQ_M.VSS", cAlternateFileName="")) returned 1 [0211.345] wcscmp (_String1="HVACEQ_M.VSS", _String2=".") returned 1 [0211.345] wcscmp (_String1="HVACEQ_M.VSS", _String2="..") returned 1 [0211.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62450 [0211.346] wcscpy (in: _Dest=0x7a62450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.346] wcscat (in: _Dest=0x7a62450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.346] wcscat (in: _Dest=0x7a62450, _Source="HVACEQ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" [0211.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0211.347] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4836e00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4836e00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACEQ_U.VSS", cAlternateFileName="")) returned 1 [0211.347] wcscmp (_String1="HVACEQ_U.VSS", _String2=".") returned 1 [0211.347] wcscmp (_String1="HVACEQ_U.VSS", _String2="..") returned 1 [0211.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63cb0 [0211.347] wcscpy (in: _Dest=0x7a63cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.347] wcscat (in: _Dest=0x7a63cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.347] wcscat (in: _Dest=0x7a63cb0, _Source="HVACEQ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" [0211.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0211.348] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19d9000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19d9000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC_M.VST", cAlternateFileName="")) returned 1 [0211.348] wcscmp (_String1="HVAC_M.VST", _String2=".") returned 1 [0211.348] wcscmp (_String1="HVAC_M.VST", _String2="..") returned 1 [0211.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a633f0 [0211.348] wcscpy (in: _Dest=0x7a633f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.348] wcscat (in: _Dest=0x7a633f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.348] wcscat (in: _Dest=0x7a633f0, _Source="HVAC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" [0211.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a633f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0211.349] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26f800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4d59f70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb26f800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC_U.VST", cAlternateFileName="")) returned 1 [0211.349] wcscmp (_String1="HVAC_U.VST", _String2=".") returned 1 [0211.349] wcscmp (_String1="HVAC_U.VST", _String2="..") returned 1 [0211.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62e50 [0211.349] wcscpy (in: _Dest=0x7a62e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.349] wcscat (in: _Dest=0x7a62e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.349] wcscat (in: _Dest=0x7a62e50, _Source="HVAC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" [0211.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0211.350] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x816f500, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x816f500, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_M.VSS", cAlternateFileName="")) returned 1 [0211.350] wcscmp (_String1="IDEF0_M.VSS", _String2=".") returned 1 [0211.350] wcscmp (_String1="IDEF0_M.VSS", _String2="..") returned 1 [0211.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63df0 [0211.350] wcscpy (in: _Dest=0x7a63df0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.350] wcscat (in: _Dest=0x7a63df0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.350] wcscat (in: _Dest=0x7a63df0, _Source="IDEF0_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" [0211.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0211.352] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd895200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd895200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_M.VST", cAlternateFileName="")) returned 1 [0211.352] wcscmp (_String1="IDEF0_M.VST", _String2=".") returned 1 [0211.352] wcscmp (_String1="IDEF0_M.VST", _String2="..") returned 1 [0211.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63ad0 [0211.352] wcscpy (in: _Dest=0x7a63ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.352] wcscat (in: _Dest=0x7a63ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.352] wcscat (in: _Dest=0x7a63ad0, _Source="IDEF0_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" [0211.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0211.353] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbaa7c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_U.VSS", cAlternateFileName="")) returned 1 [0211.353] wcscmp (_String1="IDEF0_U.VSS", _String2=".") returned 1 [0211.353] wcscmp (_String1="IDEF0_U.VSS", _String2="..") returned 1 [0211.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63530 [0211.353] wcscpy (in: _Dest=0x7a63530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.353] wcscat (in: _Dest=0x7a63530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.353] wcscat (in: _Dest=0x7a63530, _Source="IDEF0_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" [0211.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0211.354] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfebac00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfebac00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDEF0_U.VST", cAlternateFileName="")) returned 1 [0211.354] wcscmp (_String1="IDEF0_U.VST", _String2=".") returned 1 [0211.354] wcscmp (_String1="IDEF0_U.VST", _String2="..") returned 1 [0211.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a624f0 [0211.354] wcscpy (in: _Dest=0x7a624f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.354] wcscat (in: _Dest=0x7a624f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.354] wcscat (in: _Dest=0x7a624f0, _Source="IDEF0_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" [0211.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a624f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0211.355] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106f3000, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x106f3000, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xf400, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTANN_M.VSS", cAlternateFileName="")) returned 1 [0211.355] wcscmp (_String1="INTANN_M.VSS", _String2=".") returned 1 [0211.355] wcscmp (_String1="INTANN_M.VSS", _String2="..") returned 1 [0211.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62130 [0211.355] wcscpy (in: _Dest=0x7a62130, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.355] wcscat (in: _Dest=0x7a62130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.355] wcscat (in: _Dest=0x7a62130, _Source="INTANN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" [0211.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0211.572] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16651100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16651100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTANN_U.VSS", cAlternateFileName="")) returned 1 [0211.572] wcscmp (_String1="INTANN_U.VSS", _String2=".") returned 1 [0211.572] wcscmp (_String1="INTANN_U.VSS", _String2="..") returned 1 [0211.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6020 [0211.573] wcscpy (in: _Dest=0x7cb6020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.573] wcscat (in: _Dest=0x7cb6020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.573] wcscat (in: _Dest=0x7cb6020, _Source="INTANN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" [0211.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0211.684] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f89800, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19f89800, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRRIG_M.VSS", cAlternateFileName="")) returned 1 [0211.684] wcscmp (_String1="IRRIG_M.VSS", _String2=".") returned 1 [0211.684] wcscmp (_String1="IRRIG_M.VSS", _String2="..") returned 1 [0211.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63850 [0211.684] wcscpy (in: _Dest=0x7a63850, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0211.684] wcscat (in: _Dest=0x7a63850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0211.684] wcscat (in: _Dest=0x7a63850, _Source="IRRIG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" [0211.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0211.686] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ebd4c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4da6230, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ebd4c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRRIG_U.VSS", cAlternateFileName="")) returned 1 [0212.717] wcscmp (_String1="IRRIG_U.VSS", _String2=".") returned 1 [0212.717] wcscmp (_String1="IRRIG_U.VSS", _String2="..") returned 1 [0212.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a63030 [0212.718] wcscpy (in: _Dest=0x7a63030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.718] wcscat (in: _Dest=0x7a63030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.718] wcscat (in: _Dest=0x7a63030, _Source="IRRIG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" [0212.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c [0212.844] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2977e100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2977e100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x67600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_M.VSS", cAlternateFileName="")) returned 1 [0212.844] wcscmp (_String1="ITIL_M.VSS", _String2=".") returned 1 [0212.844] wcscmp (_String1="ITIL_M.VSS", _String2="..") returned 1 [0212.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62630 [0212.844] wcscpy (in: _Dest=0x7a62630, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.844] wcscat (in: _Dest=0x7a62630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.844] wcscat (in: _Dest=0x7a62630, _Source="ITIL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" [0212.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0 [0212.845] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafa93a00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xafa93a00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_M.VST", cAlternateFileName="")) returned 1 [0212.845] wcscmp (_String1="ITIL_M.VST", _String2=".") returned 1 [0212.845] wcscmp (_String1="ITIL_M.VST", _String2="..") returned 1 [0212.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a635d0 [0212.845] wcscpy (in: _Dest=0x7a635d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.845] wcscat (in: _Dest=0x7a635d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.845] wcscat (in: _Dest=0x7a635d0, _Source="ITIL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" [0212.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a635d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0212.846] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34327600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34327600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x65c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_U.VSS", cAlternateFileName="")) returned 1 [0212.846] wcscmp (_String1="ITIL_U.VSS", _String2=".") returned 1 [0212.846] wcscmp (_String1="ITIL_U.VSS", _String2="..") returned 1 [0212.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63670 [0212.846] wcscpy (in: _Dest=0x7a63670, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.846] wcscat (in: _Dest=0x7a63670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.846] wcscat (in: _Dest=0x7a63670, _Source="ITIL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" [0212.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10 [0212.847] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4cd6c00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf4cd6c00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x18c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIL_U.VST", cAlternateFileName="")) returned 1 [0212.847] wcscmp (_String1="ITIL_U.VST", _String2=".") returned 1 [0212.847] wcscmp (_String1="ITIL_U.VST", _String2="..") returned 1 [0212.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a63350 [0212.847] wcscpy (in: _Dest=0x7a63350, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.847] wcscat (in: _Dest=0x7a63350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.847] wcscat (in: _Dest=0x7a63350, _Source="ITIL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" [0212.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac [0212.848] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37c5fd00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37c5fd00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LANGLV_M.VSS", cAlternateFileName="")) returned 1 [0212.848] wcscmp (_String1="LANGLV_M.VSS", _String2=".") returned 1 [0212.848] wcscmp (_String1="LANGLV_M.VSS", _String2="..") returned 1 [0212.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62b30 [0212.848] wcscpy (in: _Dest=0x7a62b30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.848] wcscat (in: _Dest=0x7a62b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.848] wcscat (in: _Dest=0x7a62b30, _Source="LANGLV_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" [0212.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62b30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0 [0212.849] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b598400, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3b598400, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LANGLV_U.VSS", cAlternateFileName="")) returned 1 [0212.849] wcscmp (_String1="LANGLV_U.VSS", _String2=".") returned 1 [0212.849] wcscmp (_String1="LANGLV_U.VSS", _String2="..") returned 1 [0212.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63490 [0212.849] wcscpy (in: _Dest=0x7a63490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.849] wcscat (in: _Dest=0x7a63490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.849] wcscat (in: _Dest=0x7a63490, _Source="LANGLV_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" [0212.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4 [0212.850] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x124e0600, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x124e0600, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPDR_M.VST", cAlternateFileName="")) returned 1 [0212.850] wcscmp (_String1="LDAPDR_M.VST", _String2=".") returned 1 [0212.850] wcscmp (_String1="LDAPDR_M.VST", _String2="..") returned 1 [0212.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a638f0 [0212.851] wcscpy (in: _Dest=0x7a638f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.851] wcscat (in: _Dest=0x7a638f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.851] wcscat (in: _Dest=0x7a638f0, _Source="LDAPDR_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" [0212.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a638f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc [0212.851] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15e18d00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4dcc390, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x15e18d00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPDR_U.VST", cAlternateFileName="")) returned 1 [0212.851] wcscmp (_String1="LDAPDR_U.VST", _String2=".") returned 1 [0212.852] wcscmp (_String1="LDAPDR_U.VST", _String2="..") returned 1 [0212.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63170 [0212.852] wcscpy (in: _Dest=0x7a63170, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.852] wcscat (in: _Dest=0x7a63170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.852] wcscat (in: _Dest=0x7a63170, _Source="LDAPDR_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" [0212.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b54 [0212.853] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48767300, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x48767300, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPOB_M.VSS", cAlternateFileName="")) returned 1 [0212.853] wcscmp (_String1="LDAPOB_M.VSS", _String2=".") returned 1 [0212.853] wcscmp (_String1="LDAPOB_M.VSS", _String2="..") returned 1 [0212.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a63210 [0212.853] wcscpy (in: _Dest=0x7a63210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.853] wcscat (in: _Dest=0x7a63210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.853] wcscat (in: _Dest=0x7a63210, _Source="LDAPOB_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" [0212.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a63210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4 [0212.854] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c48f00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56c48f00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x40c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LDAPOB_U.VSS", cAlternateFileName="")) returned 1 [0212.854] wcscmp (_String1="LDAPOB_U.VSS", _String2=".") returned 1 [0212.854] wcscmp (_String1="LDAPOB_U.VSS", _String2="..") returned 1 [0212.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62ef0 [0212.854] wcscpy (in: _Dest=0x7a62ef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.854] wcscat (in: _Dest=0x7a62ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.854] wcscat (in: _Dest=0x7a62ef0, _Source="LDAPOB_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" [0212.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274 [0212.855] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x968b1300, ftCreationTime.dwHighDateTime=0x1ca630a, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x968b1300, ftLastWriteTime.dwHighDateTime=0x1ca630a, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEGEND_M.VSS", cAlternateFileName="")) returned 1 [0212.855] wcscmp (_String1="LEGEND_M.VSS", _String2=".") returned 1 [0212.855] wcscmp (_String1="LEGEND_M.VSS", _String2="..") returned 1 [0212.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a621d0 [0212.855] wcscpy (in: _Dest=0x7a621d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.855] wcscat (in: _Dest=0x7a621d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.855] wcscat (in: _Dest=0x7a621d0, _Source="LEGEND_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" [0212.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a621d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0212.856] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b4fc700, ftCreationTime.dwHighDateTime=0x1ca630a, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9b4fc700, ftLastWriteTime.dwHighDateTime=0x1ca630a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEGEND_U.VSS", cAlternateFileName="")) returned 1 [0212.856] wcscmp (_String1="LEGEND_U.VSS", _String2=".") returned 1 [0212.856] wcscmp (_String1="LEGEND_U.VSS", _String2="..") returned 1 [0212.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a62090 [0212.856] wcscpy (in: _Dest=0x7a62090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.856] wcscat (in: _Dest=0x7a62090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.856] wcscat (in: _Dest=0x7a62090, _Source="LEGEND_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" [0212.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0212.857] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b05100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62b05100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND_M.VSS", cAlternateFileName="")) returned 1 [0212.857] wcscmp (_String1="LGND_M.VSS", _String2=".") returned 1 [0212.857] wcscmp (_String1="LGND_M.VSS", _String2="..") returned 1 [0212.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7a62270 [0212.857] wcscpy (in: _Dest=0x7a62270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.857] wcscat (in: _Dest=0x7a62270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.857] wcscat (in: _Dest=0x7a62270, _Source="LGND_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" [0212.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a62270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0212.858] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a63200, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4df24f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x68a63200, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x37600, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND_U.VSS", cAlternateFileName="")) returned 1 [0212.858] wcscmp (_String1="LGND_U.VSS", _String2=".") returned 1 [0212.858] wcscmp (_String1="LGND_U.VSS", _String2="..") returned 1 [0212.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df59a0 [0212.858] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.858] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.858] wcscat (in: _Dest=0x3df59a0, _Source="LGND_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" [0212.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df59a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0212.859] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6ae600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e18650, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d6ae600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINPAT_M.VSS", cAlternateFileName="")) returned 1 [0212.859] wcscmp (_String1="LINPAT_M.VSS", _String2=".") returned 1 [0212.859] wcscmp (_String1="LINPAT_M.VSS", _String2="..") returned 1 [0212.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5f40 [0212.859] wcscpy (in: _Dest=0x3df5f40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.859] wcscat (in: _Dest=0x3df5f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.859] wcscat (in: _Dest=0x3df5f40, _Source="LINPAT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" [0212.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0212.860] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722f9a00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e18650, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x722f9a00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINPAT_U.VSS", cAlternateFileName="")) returned 1 [0212.860] wcscmp (_String1="LINPAT_U.VSS", _String2=".") returned 1 [0212.860] wcscmp (_String1="LINPAT_U.VSS", _String2="..") returned 1 [0212.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4d20 [0212.860] wcscpy (in: _Dest=0x3df4d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.861] wcscat (in: _Dest=0x3df4d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.861] wcscat (in: _Dest=0x3df4d20, _Source="LINPAT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" [0212.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0212.861] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda8cb00, ftCreationTime.dwHighDateTime=0x1cac094, ftLastAccessTime.dwLowDateTime=0xa4e18650, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdda8cb00, ftLastWriteTime.dwHighDateTime=0x1cac094, nFileSizeHigh=0x0, nFileSizeLow=0xe1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="LNDMRK_M.VSS", cAlternateFileName="")) returned 1 [0212.862] wcscmp (_String1="LNDMRK_M.VSS", _String2=".") returned 1 [0212.862] wcscmp (_String1="LNDMRK_M.VSS", _String2="..") returned 1 [0212.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5a40 [0212.862] wcscpy (in: _Dest=0x3df5a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.862] wcscat (in: _Dest=0x3df5a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.862] wcscat (in: _Dest=0x3df5a40, _Source="LNDMRK_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" [0212.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0212.877] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded9f800, ftCreationTime.dwHighDateTime=0x1cac094, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xded9f800, ftLastWriteTime.dwHighDateTime=0x1cac094, nFileSizeHigh=0x0, nFileSizeLow=0xe0800, dwReserved0=0x0, dwReserved1=0x0, cFileName="LNDMRK_U.VSS", cAlternateFileName="")) returned 1 [0212.877] wcscmp (_String1="LNDMRK_U.VSS", _String2=".") returned 1 [0212.877] wcscmp (_String1="LNDMRK_U.VSS", _String2="..") returned 1 [0212.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4aa0 [0212.877] wcscpy (in: _Dest=0x3df4aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.877] wcscat (in: _Dest=0x3df4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.877] wcscat (in: _Dest=0x3df4aa0, _Source="LNDMRK_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" [0212.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0212.878] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a071e00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8a071e00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGIC_M.VSS", cAlternateFileName="")) returned 1 [0212.878] wcscmp (_String1="LOGIC_M.VSS", _String2=".") returned 1 [0212.878] wcscmp (_String1="LOGIC_M.VSS", _String2="..") returned 1 [0212.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df6260 [0212.878] wcscpy (in: _Dest=0x3df6260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.878] wcscat (in: _Dest=0x3df6260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.878] wcscat (in: _Dest=0x3df6260, _Source="LOGIC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" [0212.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0212.879] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93908600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x93908600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGIC_U.VSS", cAlternateFileName="")) returned 1 [0212.879] wcscmp (_String1="LOGIC_U.VSS", _String2=".") returned 1 [0212.879] wcscmp (_String1="LOGIC_U.VSS", _String2="..") returned 1 [0212.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df6080 [0212.879] wcscpy (in: _Dest=0x3df6080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.879] wcscat (in: _Dest=0x3df6080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.879] wcscat (in: _Dest=0x3df6080, _Source="LOGIC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" [0212.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0212.880] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d19ee00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9d19ee00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x35800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_M.VSS", cAlternateFileName="")) returned 1 [0212.880] wcscmp (_String1="MAP3D_M.VSS", _String2=".") returned 1 [0212.880] wcscmp (_String1="MAP3D_M.VSS", _String2="..") returned 1 [0212.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4dc0 [0212.880] wcscpy (in: _Dest=0x3df4dc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.880] wcscat (in: _Dest=0x3df4dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.880] wcscat (in: _Dest=0x3df4dc0, _Source="MAP3D_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" [0212.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0212.881] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19751400, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19751400, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_M.VST", cAlternateFileName="")) returned 1 [0212.881] wcscmp (_String1="MAP3D_M.VST", _String2=".") returned 1 [0212.881] wcscmp (_String1="MAP3D_M.VST", _String2="..") returned 1 [0212.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df57c0 [0212.881] wcscpy (in: _Dest=0x3df57c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.881] wcscat (in: _Dest=0x3df57c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.881] wcscat (in: _Dest=0x3df57c0, _Source="MAP3D_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" [0212.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df57c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0212.882] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa905b000, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa905b000, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x34c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_U.VSS", cAlternateFileName="")) returned 1 [0212.882] wcscmp (_String1="MAP3D_U.VSS", _String2=".") returned 1 [0212.882] wcscmp (_String1="MAP3D_U.VSS", _String2="..") returned 1 [0212.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5220 [0212.882] wcscpy (in: _Dest=0x3df5220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.883] wcscat (in: _Dest=0x3df5220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.883] wcscat (in: _Dest=0x3df5220, _Source="MAP3D_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" [0212.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0212.883] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d089b00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1d089b00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP3D_U.VST", cAlternateFileName="")) returned 1 [0212.883] wcscmp (_String1="MAP3D_U.VST", _String2=".") returned 1 [0212.883] wcscmp (_String1="MAP3D_U.VST", _String2="..") returned 1 [0212.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5b80 [0212.884] wcscpy (in: _Dest=0x3df5b80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.884] wcscat (in: _Dest=0x3df5b80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.884] wcscat (in: _Dest=0x3df5b80, _Source="MAP3D_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" [0212.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0212.885] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22fe7c00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22fe7c00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP_M.VST", cAlternateFileName="")) returned 1 [0212.885] wcscmp (_String1="MAP_M.VST", _String2=".") returned 1 [0212.885] wcscmp (_String1="MAP_M.VST", _String2="..") returned 1 [0212.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c5c8 [0212.885] wcscpy (in: _Dest=0x32c5c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.885] wcscat (in: _Dest=0x32c5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.885] wcscat (in: _Dest=0x32c5c8, _Source="MAP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" [0212.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0212.886] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f45d00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e3e7b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28f45d00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xe200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAP_U.VST", cAlternateFileName="")) returned 1 [0212.886] wcscmp (_String1="MAP_U.VST", _String2=".") returned 1 [0212.886] wcscmp (_String1="MAP_U.VST", _String2="..") returned 1 [0212.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d700 [0212.886] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0212.886] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0212.886] wcscat (in: _Dest=0x32d700, _Source="MAP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" [0212.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8 [0213.021] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ad60000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3ad60000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEALL_M.VST", cAlternateFileName="")) returned 1 [0213.021] wcscmp (_String1="MEALL_M.VST", _String2=".") returned 1 [0213.021] wcscmp (_String1="MEALL_M.VST", _String2="..") returned 1 [0213.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb6840 [0213.021] wcscpy (in: _Dest=0x7cb6840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0213.021] wcscat (in: _Dest=0x7cb6840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0213.021] wcscat (in: _Dest=0x7cb6840, _Source="MEALL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" [0216.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0216.241] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445f6800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x445f6800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEALL_U.VST", cAlternateFileName="")) returned 1 [0216.241] wcscmp (_String1="MEALL_U.VST", _String2=".") returned 1 [0216.241] wcscmp (_String1="MEALL_U.VST", _String2="..") returned 1 [0216.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb6980 [0216.241] wcscpy (in: _Dest=0x7cb6980, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0216.242] wcscat (in: _Dest=0x7cb6980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0216.242] wcscat (in: _Dest=0x7cb6980, _Source="MEALL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" [0216.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4 [0216.242] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb9100, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaefb9100, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEMOBJ_M.VSS", cAlternateFileName="")) returned 1 [0216.242] wcscmp (_String1="MEMOBJ_M.VSS", _String2=".") returned 1 [0216.242] wcscmp (_String1="MEMOBJ_M.VSS", _String2="..") returned 1 [0216.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6480 [0216.243] wcscpy (in: _Dest=0x7cb6480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0216.243] wcscat (in: _Dest=0x7cb6480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0216.243] wcscat (in: _Dest=0x7cb6480, _Source="MEMOBJ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" [0216.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc [0216.244] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c04500, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e64910, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb3c04500, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEMOBJ_U.VSS", cAlternateFileName="")) returned 1 [0216.244] wcscmp (_String1="MEMOBJ_U.VSS", _String2=".") returned 1 [0216.244] wcscmp (_String1="MEMOBJ_U.VSS", _String2="..") returned 1 [0216.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7920 [0216.244] wcscpy (in: _Dest=0x7cb7920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0216.244] wcscat (in: _Dest=0x7cb7920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0216.244] wcscat (in: _Dest=0x7cb7920, _Source="MEMOBJ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" [0216.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4 [0216.245] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb753cc00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb753cc00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="METRO_M.VSS", cAlternateFileName="")) returned 1 [0216.245] wcscmp (_String1="METRO_M.VSS", _String2=".") returned 1 [0216.245] wcscmp (_String1="METRO_M.VSS", _String2="..") returned 1 [0216.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7880 [0216.245] wcscpy (in: _Dest=0x7cb7880, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0216.245] wcscat (in: _Dest=0x7cb7880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0216.245] wcscat (in: _Dest=0x7cb7880, _Source="METRO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" [0216.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0216.246] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b62600, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb9b62600, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="METRO_U.VSS", cAlternateFileName="")) returned 1 [0216.246] wcscmp (_String1="METRO_U.VSS", _String2=".") returned 1 [0216.246] wcscmp (_String1="METRO_U.VSS", _String2="..") returned 1 [0216.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb77e0 [0216.246] wcscpy (in: _Dest=0x7cb77e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0216.246] wcscat (in: _Dest=0x7cb77e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0216.246] wcscat (in: _Dest=0x7cb77e0, _Source="METRO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" [0216.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb77e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0216.247] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca669c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xca669c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_M.VSS", cAlternateFileName="")) returned 1 [0216.247] wcscmp (_String1="MRKTDG_M.VSS", _String2=".") returned 1 [0216.247] wcscmp (_String1="MRKTDG_M.VSS", _String2="..") returned 1 [0216.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7740 [0216.247] wcscpy (in: _Dest=0x7cb7740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0216.247] wcscat (in: _Dest=0x7cb7740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0216.247] wcscat (in: _Dest=0x7cb7740, _Source="MRKTDG_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" [0216.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0216.248] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a554900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4a554900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_M.VST", cAlternateFileName="")) returned 1 [0218.607] wcscmp (_String1="MRKTDG_M.VST", _String2=".") returned 1 [0218.607] wcscmp (_String1="MRKTDG_M.VST", _String2="..") returned 1 [0218.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7740 [0218.607] wcscpy (in: _Dest=0x7cb7740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.607] wcscat (in: _Dest=0x7cb7740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.608] wcscat (in: _Dest=0x7cb7740, _Source="MRKTDG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" [0218.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0218.901] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd796c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdd796c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x5c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_U.VSS", cAlternateFileName="")) returned 1 [0218.901] wcscmp (_String1="MRKTDG_U.VSS", _String2=".") returned 1 [0218.901] wcscmp (_String1="MRKTDG_U.VSS", _String2="..") returned 1 [0218.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb77e0 [0218.901] wcscpy (in: _Dest=0x7cb77e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.901] wcscat (in: _Dest=0x7cb77e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.901] wcscat (in: _Dest=0x7cb77e0, _Source="MRKTDG_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" [0218.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb77e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0218.902] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f19fd00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4f19fd00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRKTDG_U.VST", cAlternateFileName="")) returned 1 [0218.902] wcscmp (_String1="MRKTDG_U.VST", _String2=".") returned 1 [0218.902] wcscmp (_String1="MRKTDG_U.VST", _String2="..") returned 1 [0218.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6840 [0218.902] wcscpy (in: _Dest=0x7cb6840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.902] wcscat (in: _Dest=0x7cb6840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.902] wcscat (in: _Dest=0x7cb6840, _Source="MRKTDG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" [0218.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0218.904] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5d1a700, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4e8aa70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe5d1a700, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETLOC_M.VSS", cAlternateFileName="")) returned 1 [0218.904] wcscmp (_String1="NETLOC_M.VSS", _String2=".") returned 1 [0218.904] wcscmp (_String1="NETLOC_M.VSS", _String2="..") returned 1 [0218.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6980 [0218.904] wcscpy (in: _Dest=0x7cb6980, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.904] wcscat (in: _Dest=0x7cb6980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.904] wcscat (in: _Dest=0x7cb6980, _Source="NETLOC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" [0218.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138 [0218.905] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee29e200, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xee29e200, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETLOC_U.VSS", cAlternateFileName="")) returned 1 [0218.905] wcscmp (_String1="NETLOC_U.VSS", _String2=".") returned 1 [0218.905] wcscmp (_String1="NETLOC_U.VSS", _String2="..") returned 1 [0218.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6480 [0218.905] wcscpy (in: _Dest=0x7cb6480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.905] wcscat (in: _Dest=0x7cb6480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.905] wcscat (in: _Dest=0x7cb6480, _Source="NETLOC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" [0218.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2350 [0218.906] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08c3c00, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf08c3c00, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETRM_M.VSS", cAlternateFileName="")) returned 1 [0218.907] wcscmp (_String1="NETRM_M.VSS", _String2=".") returned 1 [0218.907] wcscmp (_String1="NETRM_M.VSS", _String2="..") returned 1 [0218.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7920 [0218.907] wcscpy (in: _Dest=0x7cb7920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.907] wcscat (in: _Dest=0x7cb7920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.907] wcscat (in: _Dest=0x7cb7920, _Source="NETRM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" [0218.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240c [0218.908] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf41fc300, ftCreationTime.dwHighDateTime=0x1ca4792, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf41fc300, ftLastWriteTime.dwHighDateTime=0x1ca4792, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETRM_U.VSS", cAlternateFileName="")) returned 1 [0218.908] wcscmp (_String1="NETRM_U.VSS", _String2=".") returned 1 [0218.908] wcscmp (_String1="NETRM_U.VSS", _String2="..") returned 1 [0218.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb63e0 [0218.908] wcscpy (in: _Dest=0x7cb63e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.908] wcscat (in: _Dest=0x7cb63e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.908] wcscat (in: _Dest=0x7cb63e0, _Source="NETRM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" [0218.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb63e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2424 [0218.910] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d03900, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4d03900, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x4ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETSYM_M.VSS", cAlternateFileName="")) returned 1 [0218.910] wcscmp (_String1="NETSYM_M.VSS", _String2=".") returned 1 [0218.910] wcscmp (_String1="NETSYM_M.VSS", _String2="..") returned 1 [0218.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6020 [0218.910] wcscpy (in: _Dest=0x7cb6020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.910] wcscat (in: _Dest=0x7cb6020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.910] wcscat (in: _Dest=0x7cb6020, _Source="NETSYM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" [0218.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2438 [0218.911] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b1dc00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x16b1dc00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETSYM_U.VSS", cAlternateFileName="")) returned 1 [0218.911] wcscmp (_String1="NETSYM_U.VSS", _String2=".") returned 1 [0218.911] wcscmp (_String1="NETSYM_U.VSS", _String2="..") returned 1 [0218.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6340 [0218.912] wcscpy (in: _Dest=0x7cb6340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.912] wcscat (in: _Dest=0x7cb6340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.912] wcscat (in: _Dest=0x7cb6340, _Source="NETSYM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" [0218.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2448 [0218.913] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53deb100, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x53deb100, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETW_M.VST", cAlternateFileName="")) returned 1 [0218.913] wcscmp (_String1="NETW_M.VST", _String2=".") returned 1 [0218.913] wcscmp (_String1="NETW_M.VST", _String2="..") returned 1 [0218.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb6660 [0218.913] wcscpy (in: _Dest=0x7cb6660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.913] wcscat (in: _Dest=0x7cb6660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.913] wcscat (in: _Dest=0x7cb6660, _Source="NETW_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" [0218.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0218.915] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57723800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4eb0bd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x57723800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETW_U.VST", cAlternateFileName="")) returned 1 [0218.915] wcscmp (_String1="NETW_U.VST", _String2=".") returned 1 [0218.915] wcscmp (_String1="NETW_U.VST", _String2="..") returned 1 [0218.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb6700 [0218.915] wcscpy (in: _Dest=0x7cb6700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.915] wcscat (in: _Dest=0x7cb6700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.915] wcscat (in: _Dest=0x7cb6700, _Source="NETW_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" [0218.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0218.916] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b769000, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b769000, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OBJREL_M.VSS", cAlternateFileName="")) returned 1 [0218.917] wcscmp (_String1="OBJREL_M.VSS", _String2=".") returned 1 [0218.917] wcscmp (_String1="OBJREL_M.VSS", _String2="..") returned 1 [0218.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb60c0 [0218.917] wcscpy (in: _Dest=0x7cb60c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.917] wcscat (in: _Dest=0x7cb60c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.917] wcscat (in: _Dest=0x7cb60c0, _Source="OBJREL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" [0218.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb60c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0218.918] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203b4400, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x203b4400, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OBJREL_U.VSS", cAlternateFileName="")) returned 1 [0218.918] wcscmp (_String1="OBJREL_U.VSS", _String2=".") returned 1 [0218.918] wcscmp (_String1="OBJREL_U.VSS", _String2="..") returned 1 [0218.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb62a0 [0218.918] wcscpy (in: _Dest=0x7cb62a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.918] wcscat (in: _Dest=0x7cb62a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.918] wcscat (in: _Dest=0x7cb62a0, _Source="OBJREL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" [0218.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb62a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0218.920] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26312500, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26312500, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFACC_M.VSS", cAlternateFileName="")) returned 1 [0218.920] wcscmp (_String1="OFFACC_M.VSS", _String2=".") returned 1 [0218.920] wcscmp (_String1="OFFACC_M.VSS", _String2="..") returned 1 [0218.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6200 [0218.920] wcscpy (in: _Dest=0x7cb6200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.920] wcscat (in: _Dest=0x7cb6200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.920] wcscat (in: _Dest=0x7cb6200, _Source="OFFACC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" [0218.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0218.922] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c270600, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2c270600, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFACC_U.VSS", cAlternateFileName="")) returned 1 [0218.922] wcscmp (_String1="OFFACC_U.VSS", _String2=".") returned 1 [0218.922] wcscmp (_String1="OFFACC_U.VSS", _String2="..") returned 1 [0218.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6e80 [0218.922] wcscpy (in: _Dest=0x7cb6e80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.922] wcscat (in: _Dest=0x7cb6e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.922] wcscat (in: _Dest=0x7cb6e80, _Source="OFFACC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" [0218.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0218.924] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3943f500, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3943f500, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x32600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFEQP_M.VSS", cAlternateFileName="")) returned 1 [0218.924] wcscmp (_String1="OFFEQP_M.VSS", _String2=".") returned 1 [0218.924] wcscmp (_String1="OFFEQP_M.VSS", _String2="..") returned 1 [0218.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6f20 [0218.924] wcscpy (in: _Dest=0x7cb6f20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.924] wcscat (in: _Dest=0x7cb6f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.924] wcscat (in: _Dest=0x7cb6f20, _Source="OFFEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" [0218.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0218.926] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4660e400, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4660e400, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFEQP_U.VSS", cAlternateFileName="")) returned 1 [0218.926] wcscmp (_String1="OFFEQP_U.VSS", _String2=".") returned 1 [0218.926] wcscmp (_String1="OFFEQP_U.VSS", _String2="..") returned 1 [0218.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7880 [0218.926] wcscpy (in: _Dest=0x7cb7880, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.926] wcscat (in: _Dest=0x7cb7880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.926] wcscat (in: _Dest=0x7cb7880, _Source="OFFEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" [0218.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0218.927] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x609ac200, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4ed6d30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x609ac200, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x77000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFFRN_M.VSS", cAlternateFileName="")) returned 1 [0218.927] wcscmp (_String1="OFFFRN_M.VSS", _String2=".") returned 1 [0218.927] wcscmp (_String1="OFFFRN_M.VSS", _String2="..") returned 1 [0218.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb74c0 [0218.928] wcscpy (in: _Dest=0x7cb74c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.928] wcscat (in: _Dest=0x7cb74c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.928] wcscat (in: _Dest=0x7cb74c0, _Source="OFFFRN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" [0218.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb74c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0218.929] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad4a000, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7ad4a000, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x75800, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFFRN_U.VSS", cAlternateFileName="")) returned 1 [0218.929] wcscmp (_String1="OFFFRN_U.VSS", _String2=".") returned 1 [0218.929] wcscmp (_String1="OFFFRN_U.VSS", _String2="..") returned 1 [0218.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7420 [0218.929] wcscpy (in: _Dest=0x7cb7420, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.929] wcscat (in: _Dest=0x7cb7420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.929] wcscat (in: _Dest=0x7cb7420, _Source="OFFFRN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" [0218.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0218.931] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60fba000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x60fba000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLYT_M.VST", cAlternateFileName="")) returned 1 [0218.931] wcscmp (_String1="OFFLYT_M.VST", _String2=".") returned 1 [0218.931] wcscmp (_String1="OFFLYT_M.VST", _String2="..") returned 1 [0218.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7380 [0218.931] wcscpy (in: _Dest=0x7cb7380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.931] wcscat (in: _Dest=0x7cb7380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.931] wcscat (in: _Dest=0x7cb7380, _Source="OFFLYT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" [0218.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0218.932] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6953db00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6953db00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLYT_U.VST", cAlternateFileName="")) returned 1 [0218.932] wcscmp (_String1="OFFLYT_U.VST", _String2=".") returned 1 [0218.932] wcscmp (_String1="OFFLYT_U.VST", _String2="..") returned 1 [0218.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb72e0 [0218.932] wcscpy (in: _Dest=0x7cb72e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.932] wcscat (in: _Dest=0x7cb72e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.932] wcscat (in: _Dest=0x7cb72e0, _Source="OFFLYT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" [0218.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb72e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c [0218.934] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c06200, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x86c06200, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_M.VSS", cAlternateFileName="")) returned 1 [0218.934] wcscmp (_String1="ORGCH_M.VSS", _String2=".") returned 1 [0218.934] wcscmp (_String1="ORGCH_M.VSS", _String2="..") returned 1 [0218.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7240 [0218.934] wcscpy (in: _Dest=0x7cb7240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.934] wcscat (in: _Dest=0x7cb7240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.934] wcscat (in: _Dest=0x7cb7240, _Source="ORGCH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" [0218.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8 [0218.935] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce76200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6ce76200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_M.VST", cAlternateFileName="")) returned 1 [0218.935] wcscmp (_String1="ORGCH_M.VST", _String2=".") returned 1 [0218.935] wcscmp (_String1="ORGCH_M.VST", _String2="..") returned 1 [0218.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb71a0 [0218.935] wcscpy (in: _Dest=0x7cb71a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.935] wcscat (in: _Dest=0x7cb71a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.936] wcscat (in: _Dest=0x7cb71a0, _Source="ORGCH_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" [0218.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb71a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4 [0218.937] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ac2400, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x92ac2400, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_U.VSS", cAlternateFileName="")) returned 1 [0218.937] wcscmp (_String1="ORGCH_U.VSS", _String2=".") returned 1 [0218.937] wcscmp (_String1="ORGCH_U.VSS", _String2="..") returned 1 [0218.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7100 [0218.937] wcscpy (in: _Dest=0x7cb7100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.937] wcscat (in: _Dest=0x7cb7100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.937] wcscat (in: _Dest=0x7cb7100, _Source="ORGCH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" [0218.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28 [0218.938] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ae900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x707ae900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH_U.VST", cAlternateFileName="")) returned 1 [0218.938] wcscmp (_String1="ORGCH_U.VST", _String2=".") returned 1 [0218.950] wcscmp (_String1="ORGCH_U.VST", _String2="..") returned 1 [0218.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7060 [0218.950] wcscpy (in: _Dest=0x7cb7060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0218.950] wcscat (in: _Dest=0x7cb7060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0218.950] wcscat (in: _Dest=0x7cb7060, _Source="ORGCH_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" [0218.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8 [0219.053] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca85900, ftCreationTime.dwHighDateTime=0x1c2efb3, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdca85900, ftLastWriteTime.dwHighDateTime=0x1c2efb3, nFileSizeHigh=0x0, nFileSizeLow=0x1345, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGDATA.TXT", cAlternateFileName="")) returned 1 [0219.053] wcscmp (_String1="ORGDATA.TXT", _String2=".") returned 1 [0219.053] wcscmp (_String1="ORGDATA.TXT", _String2="..") returned 1 [0219.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb65c0 [0219.053] wcscpy (in: _Dest=0x7cb65c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.054] wcscat (in: _Dest=0x7cb65c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.054] wcscat (in: _Dest=0x7cb65c0, _Source="ORGDATA.TXT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" [0219.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb65c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0219.139] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c890500, ftCreationTime.dwHighDateTime=0x1c6653c, ftLastAccessTime.dwLowDateTime=0xa4efce90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6c890500, ftLastWriteTime.dwHighDateTime=0x1c6653c, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGDATA.XLS", cAlternateFileName="")) returned 1 [0219.139] wcscmp (_String1="ORGDATA.XLS", _String2=".") returned 1 [0219.139] wcscmp (_String1="ORGDATA.XLS", _String2="..") returned 1 [0219.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb6520 [0219.140] wcscpy (in: _Dest=0x7cb6520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.140] wcscat (in: _Dest=0x7cb6520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.140] wcscat (in: _Dest=0x7cb6520, _Source="ORGDATA.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" [0219.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0219.141] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x740e7000, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x740e7000, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ_M.VST", cAlternateFileName="")) returned 1 [0219.141] wcscmp (_String1="ORGWIZ_M.VST", _String2=".") returned 1 [0219.141] wcscmp (_String1="ORGWIZ_M.VST", _String2="..") returned 1 [0219.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7a60 [0219.141] wcscpy (in: _Dest=0x7cb7a60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.142] wcscat (in: _Dest=0x7cb7a60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.142] wcscat (in: _Dest=0x7cb7a60, _Source="ORGWIZ_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" [0219.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0219.143] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7670ca00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7670ca00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ_U.VST", cAlternateFileName="")) returned 1 [0219.143] wcscmp (_String1="ORGWIZ_U.VST", _String2=".") returned 1 [0219.143] wcscmp (_String1="ORGWIZ_U.VST", _String2="..") returned 1 [0219.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb79c0 [0219.143] wcscpy (in: _Dest=0x7cb79c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.143] wcscat (in: _Dest=0x7cb79c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.143] wcscat (in: _Dest=0x7cb79c0, _Source="ORGWIZ_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" [0219.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb79c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0219.144] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc51900, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4bc51900, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x67e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBASLN_M.VST", cAlternateFileName="")) returned 1 [0219.144] wcscmp (_String1="PBASLN_M.VST", _String2=".") returned 1 [0219.144] wcscmp (_String1="PBASLN_M.VST", _String2="..") returned 1 [0219.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6b60 [0219.144] wcscpy (in: _Dest=0x7cb6b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.144] wcscat (in: _Dest=0x7cb6b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.144] wcscat (in: _Dest=0x7cb6b60, _Source="PBASLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" [0219.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0219.145] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ec2700, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x52ec2700, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x67000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBASLN_U.VST", cAlternateFileName="")) returned 1 [0219.145] wcscmp (_String1="PBASLN_U.VST", _String2=".") returned 1 [0219.145] wcscmp (_String1="PBASLN_U.VST", _String2="..") returned 1 [0219.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6c00 [0219.146] wcscpy (in: _Dest=0x7cb6c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.146] wcscat (in: _Dest=0x7cb6c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.146] wcscat (in: _Dest=0x7cb6c00, _Source="PBASLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" [0219.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0219.147] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554e8100, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x554e8100, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBLANK_M.VST", cAlternateFileName="")) returned 1 [0219.147] wcscmp (_String1="PBLANK_M.VST", _String2=".") returned 1 [0219.147] wcscmp (_String1="PBLANK_M.VST", _String2="..") returned 1 [0219.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6ca0 [0219.147] wcscpy (in: _Dest=0x7cb6ca0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.147] wcscat (in: _Dest=0x7cb6ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.147] wcscat (in: _Dest=0x7cb6ca0, _Source="PBLANK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" [0219.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0219.148] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58e20800, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f22ff0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58e20800, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x1b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBLANK_U.VST", cAlternateFileName="")) returned 1 [0219.148] wcscmp (_String1="PBLANK_U.VST", _String2=".") returned 1 [0219.148] wcscmp (_String1="PBLANK_U.VST", _String2="..") returned 1 [0219.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6d40 [0219.148] wcscpy (in: _Dest=0x7cb6d40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.148] wcscat (in: _Dest=0x7cb6d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.148] wcscat (in: _Dest=0x7cb6d40, _Source="PBLANK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" [0219.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140c [0219.149] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed7e900, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f49150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ed7e900, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x65a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCRTSK_M.VST", cAlternateFileName="")) returned 1 [0219.149] wcscmp (_String1="PCRTSK_M.VST", _String2=".") returned 1 [0219.149] wcscmp (_String1="PCRTSK_M.VST", _String2="..") returned 1 [0219.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6de0 [0219.149] wcscpy (in: _Dest=0x7cb6de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.149] wcscat (in: _Dest=0x7cb6de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.149] wcscat (in: _Dest=0x7cb6de0, _Source="PCRTSK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" [0219.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0219.150] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65fef700, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f49150, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65fef700, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x65000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCRTSK_U.VST", cAlternateFileName="")) returned 1 [0219.689] wcscmp (_String1="PCRTSK_U.VST", _String2=".") returned 1 [0219.689] wcscmp (_String1="PCRTSK_U.VST", _String2="..") returned 1 [0219.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6ac0 [0219.689] wcscpy (in: _Dest=0x7cb6ac0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.689] wcscat (in: _Dest=0x7cb6ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.689] wcscat (in: _Dest=0x7cb6ac0, _Source="PCRTSK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" [0219.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0219.690] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d260500, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6d260500, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x4e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCSHFL_M.VST", cAlternateFileName="")) returned 1 [0219.690] wcscmp (_String1="PCSHFL_M.VST", _String2=".") returned 1 [0219.690] wcscmp (_String1="PCSHFL_M.VST", _String2="..") returned 1 [0219.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6a20 [0219.691] wcscpy (in: _Dest=0x7cb6a20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.691] wcscat (in: _Dest=0x7cb6a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.691] wcscat (in: _Dest=0x7cb6a20, _Source="PCSHFL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" [0219.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0219.693] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731be600, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x731be600, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x4da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCSHFL_U.VST", cAlternateFileName="")) returned 1 [0219.693] wcscmp (_String1="PCSHFL_U.VST", _String2=".") returned 1 [0219.693] wcscmp (_String1="PCSHFL_U.VST", _String2="..") returned 1 [0219.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb76a0 [0219.693] wcscpy (in: _Dest=0x7cb76a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.693] wcscat (in: _Dest=0x7cb76a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.693] wcscat (in: _Dest=0x7cb76a0, _Source="PCSHFL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" [0219.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb76a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0219.694] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a20500, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x98a20500, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEANNT_M.VSS", cAlternateFileName="")) returned 1 [0219.694] wcscmp (_String1="PEANNT_M.VSS", _String2=".") returned 1 [0219.694] wcscmp (_String1="PEANNT_M.VSS", _String2="..") returned 1 [0219.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7600 [0219.694] wcscpy (in: _Dest=0x7cb7600, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.694] wcscat (in: _Dest=0x7cb7600, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.695] wcscat (in: _Dest=0x7cb7600, _Source="PEANNT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" [0219.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0219.696] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e97e600, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9e97e600, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEANNT_U.VSS", cAlternateFileName="")) returned 1 [0219.696] wcscmp (_String1="PEANNT_U.VSS", _String2=".") returned 1 [0219.696] wcscmp (_String1="PEANNT_U.VSS", _String2="..") returned 1 [0219.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7560 [0219.696] wcscpy (in: _Dest=0x7cb7560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.696] wcscat (in: _Dest=0x7cb7560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.696] wcscat (in: _Dest=0x7cb7560, _Source="PEANNT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" [0219.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0219.700] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb932a200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb932a200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEDG_M.VST", cAlternateFileName="")) returned 1 [0219.700] wcscmp (_String1="PEDG_M.VST", _String2=".") returned 1 [0219.700] wcscmp (_String1="PEDG_M.VST", _String2="..") returned 1 [0219.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb7ba0 [0219.701] wcscpy (in: _Dest=0x7cb7ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.701] wcscat (in: _Dest=0x7cb7ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.701] wcscat (in: _Dest=0x7cb7ba0, _Source="PEDG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" [0219.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0219.711] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51e6400, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa4f6f2b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc51e6400, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEDG_U.VST", cAlternateFileName="")) returned 1 [0219.711] wcscmp (_String1="PEDG_U.VST", _String2=".") returned 1 [0219.711] wcscmp (_String1="PEDG_U.VST", _String2="..") returned 1 [0219.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb7b00 [0219.711] wcscpy (in: _Dest=0x7cb7b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.711] wcscat (in: _Dest=0x7cb7b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.711] wcscat (in: _Dest=0x7cb7b00, _Source="PEDG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" [0219.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0219.714] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1aab600, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1aab600, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x31400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEEQP_M.VSS", cAlternateFileName="")) returned 1 [0219.714] wcscmp (_String1="PEEQP_M.VSS", _String2=".") returned 1 [0219.714] wcscmp (_String1="PEEQP_M.VSS", _String2="..") returned 1 [0219.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7f60 [0219.714] wcscpy (in: _Dest=0x7cb7f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.714] wcscat (in: _Dest=0x7cb7f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.715] wcscat (in: _Dest=0x7cb7f60, _Source="PEEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" [0219.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0219.717] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc25b2c00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc25b2c00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x2fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEEQP_U.VSS", cAlternateFileName="")) returned 1 [0219.717] wcscmp (_String1="PEEQP_U.VSS", _String2=".") returned 1 [0219.717] wcscmp (_String1="PEEQP_U.VSS", _String2="..") returned 1 [0219.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7ec0 [0219.717] wcscpy (in: _Dest=0x7cb7ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.717] wcscat (in: _Dest=0x7cb7ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.717] wcscat (in: _Dest=0x7cb7ec0, _Source="PEEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" [0219.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0219.720] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce46ee00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xce46ee00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEHEAT_M.VSS", cAlternateFileName="")) returned 1 [0219.721] wcscmp (_String1="PEHEAT_M.VSS", _String2=".") returned 1 [0219.721] wcscmp (_String1="PEHEAT_M.VSS", _String2="..") returned 1 [0219.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7e20 [0219.721] wcscpy (in: _Dest=0x7cb7e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.721] wcscat (in: _Dest=0x7cb7e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.721] wcscat (in: _Dest=0x7cb7e20, _Source="PEHEAT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" [0219.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0219.723] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9018300, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd9018300, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEHEAT_U.VSS", cAlternateFileName="")) returned 1 [0219.723] wcscmp (_String1="PEHEAT_U.VSS", _String2=".") returned 1 [0219.723] wcscmp (_String1="PEHEAT_U.VSS", _String2="..") returned 1 [0219.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7d80 [0219.723] wcscpy (in: _Dest=0x7cb7d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.723] wcscat (in: _Dest=0x7cb7d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.723] wcscat (in: _Dest=0x7cb7d80, _Source="PEHEAT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" [0219.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0219.726] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59dbb00, ftCreationTime.dwHighDateTime=0x1ca4793, ftLastAccessTime.dwLowDateTime=0xa4f95410, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf59dbb00, ftLastWriteTime.dwHighDateTime=0x1ca4793, nFileSizeHigh=0x0, nFileSizeLow=0x52800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEINST_M.VSS", cAlternateFileName="")) returned 1 [0219.726] wcscmp (_String1="PEINST_M.VSS", _String2=".") returned 1 [0219.726] wcscmp (_String1="PEINST_M.VSS", _String2="..") returned 1 [0219.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7ce0 [0219.726] wcscpy (in: _Dest=0x7cb7ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.726] wcscat (in: _Dest=0x7cb7ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.726] wcscat (in: _Dest=0x7cb7ce0, _Source="PEINST_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" [0219.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0219.729] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1239f300, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa4fbb570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1239f300, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x50c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEINST_U.VSS", cAlternateFileName="")) returned 1 [0219.729] wcscmp (_String1="PEINST_U.VSS", _String2=".") returned 1 [0219.729] wcscmp (_String1="PEINST_U.VSS", _String2="..") returned 1 [0219.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7c40 [0219.729] wcscpy (in: _Dest=0x7cb7c40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.729] wcscat (in: _Dest=0x7cb7c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.729] wcscat (in: _Dest=0x7cb7c40, _Source="PEINST_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" [0219.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0219.730] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149c4d00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa4fbb570, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x149c4d00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_M.VSS", cAlternateFileName="")) returned 1 [0219.731] wcscmp (_String1="PEPIPE_M.VSS", _String2=".") returned 1 [0219.731] wcscmp (_String1="PEPIPE_M.VSS", _String2="..") returned 1 [0219.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6fc0 [0219.731] wcscpy (in: _Dest=0x7cb6fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.731] wcscat (in: _Dest=0x7cb6fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.731] wcscat (in: _Dest=0x7cb6fc0, _Source="PEPIPE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" [0219.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0219.732] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfd8f900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa50c5f10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcfd8f900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_M.VST", cAlternateFileName="")) returned 1 [0219.733] wcscmp (_String1="PEPIPE_M.VST", _String2=".") returned 1 [0219.733] wcscmp (_String1="PEPIPE_M.VST", _String2="..") returned 1 [0219.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6160 [0219.733] wcscpy (in: _Dest=0x7cb6160, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.733] wcscat (in: _Dest=0x7cb6160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.733] wcscat (in: _Dest=0x7cb6160, _Source="PEPIPE_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" [0219.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0219.734] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x182fd400, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50c5f10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x182fd400, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_U.VSS", cAlternateFileName="")) returned 1 [0219.734] wcscmp (_String1="PEPIPE_U.VSS", _String2=".") returned 1 [0219.734] wcscmp (_String1="PEPIPE_U.VSS", _String2="..") returned 1 [0219.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb68e0 [0219.734] wcscpy (in: _Dest=0x7cb68e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.734] wcscat (in: _Dest=0x7cb68e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.734] wcscat (in: _Dest=0x7cb68e0, _Source="PEPIPE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" [0219.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb68e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0219.736] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda938e00, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa50c5f10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xda938e00, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPIPE_U.VST", cAlternateFileName="")) returned 1 [0219.736] wcscmp (_String1="PEPIPE_U.VST", _String2=".") returned 1 [0219.736] wcscmp (_String1="PEPIPE_U.VST", _String2="..") returned 1 [0219.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb67a0 [0219.736] wcscpy (in: _Dest=0x7cb67a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.736] wcscat (in: _Dest=0x7cb67a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.736] wcscat (in: _Dest=0x7cb67a0, _Source="PEPIPE_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" [0219.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb67a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0219.737] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22ea6900, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50ec070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x22ea6900, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPUMP_M.VSS", cAlternateFileName="")) returned 1 [0219.737] wcscmp (_String1="PEPUMP_M.VSS", _String2=".") returned 1 [0219.738] wcscmp (_String1="PEPUMP_M.VSS", _String2="..") returned 1 [0219.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5b80 [0219.738] wcscpy (in: _Dest=0x3df5b80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.738] wcscat (in: _Dest=0x3df5b80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.738] wcscat (in: _Dest=0x3df5b80, _Source="PEPUMP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" [0219.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0219.739] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da4fe00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50ec070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2da4fe00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEPUMP_U.VSS", cAlternateFileName="")) returned 1 [0219.739] wcscmp (_String1="PEPUMP_U.VSS", _String2=".") returned 1 [0219.739] wcscmp (_String1="PEPUMP_U.VSS", _String2="..") returned 1 [0219.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4aa0 [0219.739] wcscpy (in: _Dest=0x3df4aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.739] wcscat (in: _Dest=0x3df4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.739] wcscat (in: _Dest=0x3df4aa0, _Source="PEPUMP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" [0219.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8 [0219.741] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47dedc00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa50ec070, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x47dedc00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x89c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERIPH_M.VSS", cAlternateFileName="")) returned 1 [0219.741] wcscmp (_String1="PERIPH_M.VSS", _String2=".") returned 1 [0219.741] wcscmp (_String1="PERIPH_M.VSS", _String2="..") returned 1 [0219.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6260 [0219.741] wcscpy (in: _Dest=0x3df6260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.741] wcscat (in: _Dest=0x3df6260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.741] wcscat (in: _Dest=0x3df6260, _Source="PERIPH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" [0219.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc [0219.742] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6349e700, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6349e700, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x87c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERIPH_U.VSS", cAlternateFileName="")) returned 1 [0219.742] wcscmp (_String1="PERIPH_U.VSS", _String2=".") returned 1 [0219.742] wcscmp (_String1="PERIPH_U.VSS", _String2="..") returned 1 [0219.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6080 [0219.743] wcscpy (in: _Dest=0x3df6080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.743] wcscat (in: _Dest=0x3df6080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.743] wcscat (in: _Dest=0x3df6080, _Source="PERIPH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" [0219.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0 [0219.744] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65ac4100, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x65ac4100, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_M.VSS", cAlternateFileName="")) returned 1 [0219.744] wcscmp (_String1="PERT_M.VSS", _String2=".") returned 1 [0219.744] wcscmp (_String1="PERT_M.VSS", _String2="..") returned 1 [0219.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df59a0 [0219.744] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.744] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.744] wcscat (in: _Dest=0x3df59a0, _Source="PERT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" [0219.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df59a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714 [0219.766] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf5e800, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdcf5e800, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_M.VST", cAlternateFileName="")) returned 1 [0219.766] wcscmp (_String1="PERT_M.VST", _String2=".") returned 1 [0219.766] wcscmp (_String1="PERT_M.VST", _String2="..") returned 1 [0219.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5f40 [0219.766] wcscpy (in: _Dest=0x3df5f40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.766] wcscat (in: _Dest=0x3df5f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.766] wcscat (in: _Dest=0x3df5f40, _Source="PERT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" [0219.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0219.771] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x680e9b00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x680e9b00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_U.VSS", cAlternateFileName="")) returned 1 [0219.771] wcscmp (_String1="PERT_U.VSS", _String2=".") returned 1 [0219.771] wcscmp (_String1="PERT_U.VSS", _String2="..") returned 1 [0219.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df4d20 [0219.772] wcscpy (in: _Dest=0x3df4d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.772] wcscat (in: _Dest=0x3df4d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.772] wcscat (in: _Dest=0x3df4d20, _Source="PERT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" [0219.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2390 [0219.773] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf584200, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdf584200, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERT_U.VST", cAlternateFileName="")) returned 1 [0219.773] wcscmp (_String1="PERT_U.VST", _String2=".") returned 1 [0219.773] wcscmp (_String1="PERT_U.VST", _String2="..") returned 1 [0219.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5a40 [0219.773] wcscpy (in: _Dest=0x3df5a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.773] wcscat (in: _Dest=0x3df5a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.773] wcscat (in: _Dest=0x3df5a40, _Source="PERT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" [0219.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90 [0219.775] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778de400, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x778de400, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x32800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVALV_M.VSS", cAlternateFileName="")) returned 1 [0219.775] wcscmp (_String1="PEVALV_M.VSS", _String2=".") returned 1 [0219.775] wcscmp (_String1="PEVALV_M.VSS", _String2="..") returned 1 [0219.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4dc0 [0219.775] wcscpy (in: _Dest=0x3df4dc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.775] wcscat (in: _Dest=0x3df4dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.775] wcscat (in: _Dest=0x3df4dc0, _Source="PEVALV_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" [0219.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238 [0219.776] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870d2d00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x870d2d00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x31400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVALV_U.VSS", cAlternateFileName="")) returned 1 [0219.776] wcscmp (_String1="PEVALV_U.VSS", _String2=".") returned 1 [0219.776] wcscmp (_String1="PEVALV_U.VSS", _String2="..") returned 1 [0219.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df57c0 [0219.776] wcscpy (in: _Dest=0x3df57c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.776] wcscat (in: _Dest=0x3df57c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.776] wcscat (in: _Dest=0x3df57c0, _Source="PEVALV_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" [0219.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df57c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c [0219.777] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90969500, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51121d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x90969500, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVESS_M.VSS", cAlternateFileName="")) returned 1 [0219.778] wcscmp (_String1="PEVESS_M.VSS", _String2=".") returned 1 [0219.778] wcscmp (_String1="PEVESS_M.VSS", _String2="..") returned 1 [0219.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5220 [0219.778] wcscpy (in: _Dest=0x3df5220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.778] wcscat (in: _Dest=0x3df5220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.778] wcscat (in: _Dest=0x3df5220, _Source="PEVESS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" [0219.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d4 [0219.779] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1ffd00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9a1ffd00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEVESS_U.VSS", cAlternateFileName="")) returned 1 [0219.779] wcscmp (_String1="PEVESS_U.VSS", _String2=".") returned 1 [0219.779] wcscmp (_String1="PEVESS_U.VSS", _String2="..") returned 1 [0219.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5c20 [0219.779] wcscpy (in: _Dest=0x3df5c20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.779] wcscat (in: _Dest=0x3df5c20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.779] wcscat (in: _Dest=0x3df5c20, _Source="PEVESS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" [0219.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c [0219.780] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaad07300, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaad07300, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x42600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE1_M.VSS", cAlternateFileName="")) returned 1 [0219.780] wcscmp (_String1="PIPE1_M.VSS", _String2=".") returned 1 [0219.780] wcscmp (_String1="PIPE1_M.VSS", _String2="..") returned 1 [0219.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df61c0 [0219.780] wcscpy (in: _Dest=0x3df61c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.780] wcscat (in: _Dest=0x3df61c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.780] wcscat (in: _Dest=0x3df61c0, _Source="PIPE1_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" [0219.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df61c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8 [0219.782] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb80e900, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbb80e900, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x36600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE1_U.VSS", cAlternateFileName="")) returned 1 [0219.783] wcscmp (_String1="PIPE1_U.VSS", _String2=".") returned 1 [0219.783] wcscmp (_String1="PIPE1_U.VSS", _String2="..") returned 1 [0219.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4be0 [0219.783] wcscpy (in: _Dest=0x3df4be0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.783] wcscat (in: _Dest=0x3df4be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.783] wcscat (in: _Dest=0x3df4be0, _Source="PIPE1_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" [0219.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0 [0219.784] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc76cab00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5138330, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc76cab00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE2_M.VSS", cAlternateFileName="")) returned 1 [0219.784] wcscmp (_String1="PIPE2_M.VSS", _String2=".") returned 1 [0219.784] wcscmp (_String1="PIPE2_M.VSS", _String2="..") returned 1 [0219.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4460 [0219.784] wcscpy (in: _Dest=0x3df4460, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.784] wcscat (in: _Dest=0x3df4460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.784] wcscat (in: _Dest=0x3df4460, _Source="PIPE2_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" [0219.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0 [0219.790] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2274000, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51aa750, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd2274000, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPE2_U.VSS", cAlternateFileName="")) returned 1 [0219.790] wcscmp (_String1="PIPE2_U.VSS", _String2=".") returned 1 [0219.790] wcscmp (_String1="PIPE2_U.VSS", _String2="..") returned 1 [0219.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df6120 [0219.791] wcscpy (in: _Dest=0x3df6120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.791] wcscat (in: _Dest=0x3df6120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.791] wcscat (in: _Dest=0x3df6120, _Source="PIPE2_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" [0219.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0219.792] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde130200, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa51d08b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde130200, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x56600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANT_M.VSS", cAlternateFileName="")) returned 1 [0219.792] wcscmp (_String1="PLANT_M.VSS", _String2=".") returned 1 [0219.793] wcscmp (_String1="PLANT_M.VSS", _String2="..") returned 1 [0219.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df5d60 [0219.793] wcscpy (in: _Dest=0x3df5d60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0219.793] wcscat (in: _Dest=0x3df5d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0219.793] wcscat (in: _Dest=0x3df5d60, _Source="PLANT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" [0219.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0219.794] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9fec400, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa5268e30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe9fec400, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x51000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANT_U.VSS", cAlternateFileName="")) returned 1 [0220.071] wcscmp (_String1="PLANT_U.VSS", _String2=".") returned 1 [0220.071] wcscmp (_String1="PLANT_U.VSS", _String2="..") returned 1 [0220.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df54a0 [0220.072] wcscpy (in: _Dest=0x3df54a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.072] wcscat (in: _Dest=0x3df54a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.072] wcscat (in: _Dest=0x3df54a0, _Source="PLANT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" [0220.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df54a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b98 [0220.143] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb440400, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa5268e30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb440400, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLMPIP_M.VST", cAlternateFileName="")) returned 1 [0220.143] wcscmp (_String1="PLMPIP_M.VST", _String2=".") returned 1 [0220.143] wcscmp (_String1="PLMPIP_M.VST", _String2="..") returned 1 [0220.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb77e0 [0220.144] wcscpy (in: _Dest=0x7cb77e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.144] wcscat (in: _Dest=0x7cb77e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.144] wcscat (in: _Dest=0x7cb77e0, _Source="PLMPIP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" [0220.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb77e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1884 [0220.145] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5fe9900, ftCreationTime.dwHighDateTime=0x1ca48ee, ftLastAccessTime.dwLowDateTime=0xa5268e30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf5fe9900, ftLastWriteTime.dwHighDateTime=0x1ca48ee, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLMPIP_U.VST", cAlternateFileName="")) returned 1 [0220.145] wcscmp (_String1="PLMPIP_U.VST", _String2=".") returned 1 [0220.145] wcscmp (_String1="PLMPIP_U.VST", _String2="..") returned 1 [0220.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6840 [0220.145] wcscpy (in: _Dest=0x7cb6840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.145] wcscat (in: _Dest=0x7cb6840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.145] wcscat (in: _Dest=0x7cb6840, _Source="PLMPIP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" [0220.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0 [0220.146] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b8800, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x31b8800, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x16200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLTLYT_M.VST", cAlternateFileName="")) returned 1 [0220.146] wcscmp (_String1="PLTLYT_M.VST", _String2=".") returned 1 [0220.146] wcscmp (_String1="PLTLYT_M.VST", _String2="..") returned 1 [0220.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5fe0 [0220.146] wcscpy (in: _Dest=0x3df5fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.146] wcscat (in: _Dest=0x3df5fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.146] wcscat (in: _Dest=0x3df5fe0, _Source="PLTLYT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" [0220.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0220.147] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10387700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x10387700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLTLYT_U.VST", cAlternateFileName="")) returned 1 [0220.147] wcscmp (_String1="PLTLYT_U.VST", _String2=".") returned 1 [0220.147] wcscmp (_String1="PLTLYT_U.VST", _String2="..") returned 1 [0220.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5ea0 [0220.147] wcscpy (in: _Dest=0x3df5ea0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.148] wcscat (in: _Dest=0x3df5ea0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.148] wcscat (in: _Dest=0x3df5ea0, _Source="PLTLYT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" [0220.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0220.149] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3882c00, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3882c00, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUMB_M.VSS", cAlternateFileName="")) returned 1 [0220.149] wcscmp (_String1="PLUMB_M.VSS", _String2=".") returned 1 [0220.149] wcscmp (_String1="PLUMB_M.VSS", _String2="..") returned 1 [0220.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df4fa0 [0220.149] wcscpy (in: _Dest=0x3df4fa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.149] wcscat (in: _Dest=0x3df4fa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.149] wcscat (in: _Dest=0x3df4fa0, _Source="PLUMB_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" [0220.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0220.150] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe42c100, ftCreationTime.dwHighDateTime=0x1ca4794, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfe42c100, ftLastWriteTime.dwHighDateTime=0x1ca4794, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUMB_U.VSS", cAlternateFileName="")) returned 1 [0220.150] wcscmp (_String1="PLUMB_U.VSS", _String2=".") returned 1 [0220.150] wcscmp (_String1="PLUMB_U.VSS", _String2="..") returned 1 [0220.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x3df6300 [0220.150] wcscpy (in: _Dest=0x3df6300, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.150] wcscat (in: _Dest=0x3df6300, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.150] wcscat (in: _Dest=0x3df6300, _Source="PLUMB_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" [0220.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0220.151] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f92900, ftCreationTime.dwHighDateTime=0x1c982e4, ftLastAccessTime.dwLowDateTime=0xa528ef90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37f92900, ftLastWriteTime.dwHighDateTime=0x1c982e4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRCIMP.XLS", cAlternateFileName="")) returned 1 [0220.151] wcscmp (_String1="PRCIMP.XLS", _String2=".") returned 1 [0220.151] wcscmp (_String1="PRCIMP.XLS", _String2="..") returned 1 [0220.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5540 [0220.151] wcscpy (in: _Dest=0x3df5540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.151] wcscat (in: _Dest=0x3df5540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.151] wcscat (in: _Dest=0x3df5540, _Source="PRCIMP.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" [0220.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0220.152] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d38200, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe8d38200, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x81a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRCIMP_M.VST", cAlternateFileName="")) returned 1 [0220.152] wcscmp (_String1="PRCIMP_M.VST", _String2=".") returned 1 [0220.152] wcscmp (_String1="PRCIMP_M.VST", _String2="..") returned 1 [0220.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4e60 [0220.153] wcscpy (in: _Dest=0x3df4e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.153] wcscat (in: _Dest=0x3df4e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.153] wcscat (in: _Dest=0x3df4e60, _Source="PRCIMP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" [0220.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0220.154] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4a1a00, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdf4a1a00, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0x7f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRCIMP_U.VST", cAlternateFileName="")) returned 1 [0220.154] wcscmp (_String1="PRCIMP_U.VST", _String2=".") returned 1 [0220.154] wcscmp (_String1="PRCIMP_U.VST", _String2="..") returned 1 [0220.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df48c0 [0220.154] wcscpy (in: _Dest=0x3df48c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.154] wcscat (in: _Dest=0x3df48c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.154] wcscat (in: _Dest=0x3df48c0, _Source="PRCIMP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" [0220.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df48c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0220.155] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34038600, ftCreationTime.dwHighDateTime=0x1ca1ccd, ftLastAccessTime.dwLowDateTime=0xa52b50f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34038600, ftLastWriteTime.dwHighDateTime=0x1ca1ccd, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJMGT.XLS", cAlternateFileName="")) returned 1 [0220.155] wcscmp (_String1="PRJMGT.XLS", _String2=".") returned 1 [0220.155] wcscmp (_String1="PRJMGT.XLS", _String2="..") returned 1 [0220.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c75f8 [0220.156] wcscpy (in: _Dest=0x2c75f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.156] wcscat (in: _Dest=0x2c75f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.156] wcscat (in: _Dest=0x2c75f8, _Source="PRJMGT.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" [0220.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0220.157] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe48ac00, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52db250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfe48ac00, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0xf7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJMGT_M.VST", cAlternateFileName="")) returned 1 [0220.157] wcscmp (_String1="PRJMGT_M.VST", _String2=".") returned 1 [0220.157] wcscmp (_String1="PRJMGT_M.VST", _String2="..") returned 1 [0220.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7378 [0220.157] wcscpy (in: _Dest=0x2c7378, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.157] wcscat (in: _Dest=0x2c7378, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.157] wcscat (in: _Dest=0x2c7378, _Source="PRJMGT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" [0220.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0220.158] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf38e1700, ftCreationTime.dwHighDateTime=0x1ca5bee, ftLastAccessTime.dwLowDateTime=0xa52db250, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf38e1700, ftLastWriteTime.dwHighDateTime=0x1ca5bee, nFileSizeHigh=0x0, nFileSizeLow=0xf5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJMGT_U.VST", cAlternateFileName="")) returned 1 [0220.158] wcscmp (_String1="PRJMGT_U.VST", _String2=".") returned 1 [0220.158] wcscmp (_String1="PRJMGT_U.VST", _String2="..") returned 1 [0220.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7198 [0220.158] wcscpy (in: _Dest=0x2c7198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.158] wcscat (in: _Dest=0x2c7198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.158] wcscat (in: _Dest=0x2c7198, _Source="PRJMGT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" [0220.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0220.159] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5fb000, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5fb000, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRKRD_M.VSS", cAlternateFileName="")) returned 1 [0220.159] wcscmp (_String1="PRKRD_M.VSS", _String2=".") returned 1 [0220.159] wcscmp (_String1="PRKRD_M.VSS", _String2="..") returned 1 [0220.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c7698 [0220.160] wcscpy (in: _Dest=0x2c7698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.160] wcscat (in: _Dest=0x2c7698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.160] wcscat (in: _Dest=0x2c7698, _Source="PRKRD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" [0220.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0220.161] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1286be00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1286be00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x17e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRKRD_U.VSS", cAlternateFileName="")) returned 1 [0220.161] wcscmp (_String1="PRKRD_U.VSS", _String2=".") returned 1 [0220.161] wcscmp (_String1="PRKRD_U.VSS", _String2="..") returned 1 [0220.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x2c70f8 [0220.161] wcscpy (in: _Dest=0x2c70f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.161] wcscat (in: _Dest=0x2c70f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.161] wcscat (in: _Dest=0x2c70f8, _Source="PRKRD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" [0220.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c70f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0220.162] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34038600, ftCreationTime.dwHighDateTime=0x1ca1ccd, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x34038600, ftLastWriteTime.dwHighDateTime=0x1ca1ccd, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJTL.XLS", cAlternateFileName="")) returned 1 [0220.162] wcscmp (_String1="PROJTL.XLS", _String2=".") returned 1 [0220.162] wcscmp (_String1="PROJTL.XLS", _String2="..") returned 1 [0220.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x2c7558 [0220.163] wcscpy (in: _Dest=0x2c7558, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.163] wcscat (in: _Dest=0x2c7558, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.163] wcscat (in: _Dest=0x2c7558, _Source="PROJTL.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" [0220.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4 [0220.164] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa346e00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa346e00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x63400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJTL_M.VST", cAlternateFileName="")) returned 1 [0220.164] wcscmp (_String1="PROJTL_M.VST", _String2=".") returned 1 [0220.164] wcscmp (_String1="PROJTL_M.VST", _String2="..") returned 1 [0220.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c7738 [0220.164] wcscpy (in: _Dest=0x2c7738, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.164] wcscat (in: _Dest=0x2c7738, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.164] wcscat (in: _Dest=0x2c7738, _Source="PROJTL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" [0220.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c7738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0220.165] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e8d00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53013b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x43e8d00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x63000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJTL_U.VST", cAlternateFileName="")) returned 1 [0220.165] wcscmp (_String1="PROJTL_U.VST", _String2=".") returned 1 [0220.165] wcscmp (_String1="PROJTL_U.VST", _String2="..") returned 1 [0220.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c6298 [0220.165] wcscpy (in: _Dest=0x2c6298, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.165] wcscat (in: _Dest=0x2c6298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.165] wcscat (in: _Dest=0x2c6298, _Source="PROJTL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" [0220.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6298, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0220.166] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x875fe300, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5327510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x875fe300, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSAVL_M.VST", cAlternateFileName="")) returned 1 [0220.166] wcscmp (_String1="PRSAVL_M.VST", _String2=".") returned 1 [0220.166] wcscmp (_String1="PRSAVL_M.VST", _String2="..") returned 1 [0220.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c6fb8 [0220.166] wcscpy (in: _Dest=0x2c6fb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.166] wcscat (in: _Dest=0x2c6fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.167] wcscat (in: _Dest=0x2c6fb8, _Source="PRSAVL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" [0220.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0220.167] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fb81e00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5327510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8fb81e00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSAVL_U.VST", cAlternateFileName="")) returned 1 [0220.167] wcscmp (_String1="PRSAVL_U.VST", _String2=".") returned 1 [0220.167] wcscmp (_String1="PRSAVL_U.VST", _String2="..") returned 1 [0220.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x2c6e78 [0220.168] wcscpy (in: _Dest=0x2c6e78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.168] wcscat (in: _Dest=0x2c6e78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.168] wcscat (in: _Dest=0x2c6e78, _Source="PRSAVL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" [0220.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c6e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0220.169] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95adff00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5327510, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95adff00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x51400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSSTS_M.VST", cAlternateFileName="")) returned 1 [0220.169] wcscmp (_String1="PRSSTS_M.VST", _String2=".") returned 1 [0220.169] wcscmp (_String1="PRSSTS_M.VST", _String2="..") returned 1 [0220.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0020 [0220.169] wcscpy (in: _Dest=0x7cc0020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.169] wcscat (in: _Dest=0x7cc0020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.169] wcscat (in: _Dest=0x7cc0020, _Source="PRSSTS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" [0220.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0220.170] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba3e000, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9ba3e000, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x50c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRSSTS_U.VST", cAlternateFileName="")) returned 1 [0220.170] wcscmp (_String1="PRSSTS_U.VST", _String2=".") returned 1 [0220.170] wcscmp (_String1="PRSSTS_U.VST", _String2="..") returned 1 [0220.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc00c0 [0220.170] wcscpy (in: _Dest=0x7cc00c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.170] wcscat (in: _Dest=0x7cc00c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.170] wcscat (in: _Dest=0x7cc00c0, _Source="PRSSTS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" [0220.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc00c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0220.171] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee61100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x5ee61100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTRCT_M.VST", cAlternateFileName="")) returned 1 [0220.171] wcscmp (_String1="PSTRCT_M.VST", _String2=".") returned 1 [0220.171] wcscmp (_String1="PSTRCT_M.VST", _String2="..") returned 1 [0220.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0160 [0220.172] wcscpy (in: _Dest=0x7cc0160, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.172] wcscat (in: _Dest=0x7cc0160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.172] wcscat (in: _Dest=0x7cc0160, _Source="PSTRCT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" [0220.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0 [0220.173] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62799800, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x62799800, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTRCT_U.VST", cAlternateFileName="")) returned 1 [0220.173] wcscmp (_String1="PSTRCT_U.VST", _String2=".") returned 1 [0220.173] wcscmp (_String1="PSTRCT_U.VST", _String2="..") returned 1 [0220.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0200 [0220.173] wcscpy (in: _Dest=0x7cc0200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.173] wcscat (in: _Dest=0x7cc0200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.173] wcscat (in: _Dest=0x7cc0200, _Source="PSTRCT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" [0220.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0220.174] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161a4500, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x161a4500, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSCLD_M.VSS", cAlternateFileName="")) returned 1 [0220.174] wcscmp (_String1="PTSCLD_M.VSS", _String2=".") returned 1 [0220.174] wcscmp (_String1="PTSCLD_M.VSS", _String2="..") returned 1 [0220.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc02a0 [0220.174] wcscpy (in: _Dest=0x7cc02a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.174] wcscat (in: _Dest=0x7cc02a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.174] wcscat (in: _Dest=0x7cc02a0, _Source="PTSCLD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" [0220.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc02a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0220.175] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187c9f00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x187c9f00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSCLD_U.VSS", cAlternateFileName="")) returned 1 [0220.176] wcscmp (_String1="PTSCLD_U.VSS", _String2=".") returned 1 [0220.176] wcscmp (_String1="PTSCLD_U.VSS", _String2="..") returned 1 [0220.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0340 [0220.176] wcscpy (in: _Dest=0x7cc0340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.176] wcscat (in: _Dest=0x7cc0340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.176] wcscat (in: _Dest=0x7cc0340, _Source="PTSCLD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" [0220.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0220.425] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f22f600, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2f22f600, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSINT_M.VSS", cAlternateFileName="")) returned 1 [0220.425] wcscmp (_String1="PTSINT_M.VSS", _String2=".") returned 1 [0220.425] wcscmp (_String1="PTSINT_M.VSS", _String2="..") returned 1 [0220.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb65c0 [0220.425] wcscpy (in: _Dest=0x7cb65c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.425] wcscat (in: _Dest=0x7cb65c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.425] wcscat (in: _Dest=0x7cb65c0, _Source="PTSINT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" [0220.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb65c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014 [0220.426] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c94d00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x45c94d00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x56e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSINT_U.VSS", cAlternateFileName="")) returned 1 [0220.426] wcscmp (_String1="PTSINT_U.VSS", _String2=".") returned 1 [0220.426] wcscmp (_String1="PTSINT_U.VSS", _String2="..") returned 1 [0220.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6520 [0220.427] wcscpy (in: _Dest=0x7cb6520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.427] wcscat (in: _Dest=0x7cb6520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.427] wcscat (in: _Dest=0x7cb6520, _Source="PTSINT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" [0220.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140c [0220.428] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7911c700, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa534d670, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7911c700, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSKST_M.VST", cAlternateFileName="")) returned 1 [0220.428] wcscmp (_String1="PTSKST_M.VST", _String2=".") returned 1 [0220.428] wcscmp (_String1="PTSKST_M.VST", _String2="..") returned 1 [0220.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7b00 [0220.428] wcscpy (in: _Dest=0x7cb7b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.428] wcscat (in: _Dest=0x7cb7b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.428] wcscat (in: _Dest=0x7cb7b00, _Source="PTSKST_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" [0220.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0220.429] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038d500, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8038d500, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTSKST_U.VST", cAlternateFileName="")) returned 1 [0220.429] wcscmp (_String1="PTSKST_U.VST", _String2=".") returned 1 [0220.429] wcscmp (_String1="PTSKST_U.VST", _String2="..") returned 1 [0220.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7ba0 [0220.429] wcscpy (in: _Dest=0x7cb7ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.429] wcscat (in: _Dest=0x7cb7ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.429] wcscat (in: _Dest=0x7cb7ba0, _Source="PTSKST_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" [0220.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0220.430] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf05b00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4cf05b00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x25c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTUSCL_M.VSS", cAlternateFileName="")) returned 1 [0220.430] wcscmp (_String1="PTUSCL_M.VSS", _String2=".") returned 1 [0220.430] wcscmp (_String1="PTUSCL_M.VSS", _String2="..") returned 1 [0220.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7560 [0220.431] wcscpy (in: _Dest=0x7cb7560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.431] wcscat (in: _Dest=0x7cb7560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.431] wcscat (in: _Dest=0x7cb7560, _Source="PTUSCL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" [0220.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0220.432] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54176900, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x54176900, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTUSCL_U.VSS", cAlternateFileName="")) returned 1 [0220.432] wcscmp (_String1="PTUSCL_U.VSS", _String2=".") returned 1 [0220.432] wcscmp (_String1="PTUSCL_U.VSS", _String2="..") returned 1 [0220.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7ec0 [0220.432] wcscpy (in: _Dest=0x7cb7ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.432] wcscat (in: _Dest=0x7cb7ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.432] wcscat (in: _Dest=0x7cb7ec0, _Source="PTUSCL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" [0220.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0220.433] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745b3b00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x745b3b00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x35c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RACK_M.VST", cAlternateFileName="")) returned 1 [0220.433] wcscmp (_String1="RACK_M.VST", _String2=".") returned 1 [0220.433] wcscmp (_String1="RACK_M.VST", _String2="..") returned 1 [0220.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb7f60 [0220.433] wcscpy (in: _Dest=0x7cb7f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.433] wcscat (in: _Dest=0x7cb7f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.433] wcscat (in: _Dest=0x7cb7f60, _Source="RACK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" [0220.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0 [0220.434] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791fef00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x791fef00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RACK_U.VST", cAlternateFileName="")) returned 1 [0220.434] wcscmp (_String1="RACK_U.VST", _String2=".") returned 1 [0220.434] wcscmp (_String1="RACK_U.VST", _String2="..") returned 1 [0220.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb7c40 [0220.434] wcscpy (in: _Dest=0x7cb7c40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.434] wcscat (in: _Dest=0x7cb7c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.435] wcscat (in: _Dest=0x7cb7c40, _Source="RACK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" [0220.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0220.436] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698c9300, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x698c9300, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x54a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKEQP_M.VSS", cAlternateFileName="")) returned 1 [0220.730] wcscmp (_String1="RCKEQP_M.VSS", _String2=".") returned 1 [0220.730] wcscmp (_String1="RCKEQP_M.VSS", _String2="..") returned 1 [0220.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7ce0 [0220.730] wcscpy (in: _Dest=0x7cb7ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.730] wcscat (in: _Dest=0x7cb7ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.730] wcscat (in: _Dest=0x7cb7ce0, _Source="RCKEQP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" [0220.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0220.745] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8032ea00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53737d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8032ea00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x53600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKEQP_U.VSS", cAlternateFileName="")) returned 1 [0220.745] wcscmp (_String1="RCKEQP_U.VSS", _String2=".") returned 1 [0220.745] wcscmp (_String1="RCKEQP_U.VSS", _String2="..") returned 1 [0220.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7d80 [0220.745] wcscpy (in: _Dest=0x7cb7d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.745] wcscat (in: _Dest=0x7cb7d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.745] wcscat (in: _Dest=0x7cb7d80, _Source="RCKEQP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" [0220.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2454 [0220.747] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993b9b00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x993b9b00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xd7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKSVR_M.VSS", cAlternateFileName="")) returned 1 [0220.747] wcscmp (_String1="RCKSVR_M.VSS", _String2=".") returned 1 [0220.747] wcscmp (_String1="RCKSVR_M.VSS", _String2="..") returned 1 [0220.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7e20 [0220.747] wcscpy (in: _Dest=0x7cb7e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.747] wcscat (in: _Dest=0x7cb7e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.747] wcscat (in: _Dest=0x7cb7e20, _Source="RCKSVR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" [0220.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac [0220.748] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7090000, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb7090000, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xd6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCKSVR_U.VSS", cAlternateFileName="")) returned 1 [0220.748] wcscmp (_String1="RCKSVR_U.VSS", _String2=".") returned 1 [0220.748] wcscmp (_String1="RCKSVR_U.VSS", _String2="..") returned 1 [0220.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb67a0 [0220.748] wcscpy (in: _Dest=0x7cb67a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.748] wcscat (in: _Dest=0x7cb67a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.748] wcscat (in: _Dest=0x7cb67a0, _Source="RCKSVR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" [0220.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb67a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1890 [0220.750] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfee100, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbcfee100, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECRT_M.VSS", cAlternateFileName="")) returned 1 [0220.750] wcscmp (_String1="RECRT_M.VSS", _String2=".") returned 1 [0220.750] wcscmp (_String1="RECRT_M.VSS", _String2="..") returned 1 [0220.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb68e0 [0220.750] wcscpy (in: _Dest=0x7cb68e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.750] wcscat (in: _Dest=0x7cb68e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.750] wcscat (in: _Dest=0x7cb68e0, _Source="RECRT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" [0220.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb68e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040 [0220.751] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc425ef00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa5399930, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc425ef00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECRT_U.VSS", cAlternateFileName="")) returned 1 [0220.751] wcscmp (_String1="RECRT_U.VSS", _String2=".") returned 1 [0220.751] wcscmp (_String1="RECRT_U.VSS", _String2="..") returned 1 [0220.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb6160 [0220.751] wcscpy (in: _Dest=0x7cb6160, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.751] wcscat (in: _Dest=0x7cb6160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.751] wcscat (in: _Dest=0x7cb6160, _Source="RECRT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" [0220.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4 [0220.753] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4cfd00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcb4cfd00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECSHP_M.VSS", cAlternateFileName="")) returned 1 [0220.753] wcscmp (_String1="RECSHP_M.VSS", _String2=".") returned 1 [0220.753] wcscmp (_String1="RECSHP_M.VSS", _String2="..") returned 1 [0220.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6fc0 [0220.753] wcscpy (in: _Dest=0x7cb6fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.753] wcscat (in: _Dest=0x7cb6fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.753] wcscat (in: _Dest=0x7cb6fc0, _Source="RECSHP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" [0220.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0220.754] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd142de00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd142de00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x42200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECSHP_U.VSS", cAlternateFileName="")) returned 1 [0220.754] wcscmp (_String1="RECSHP_U.VSS", _String2=".") returned 1 [0220.754] wcscmp (_String1="RECSHP_U.VSS", _String2="..") returned 1 [0220.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7600 [0220.755] wcscpy (in: _Dest=0x7cb7600, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.755] wcscat (in: _Dest=0x7cb7600, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.755] wcscat (in: _Dest=0x7cb7600, _Source="RECSHP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" [0220.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c [0220.756] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd738bf00, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd738bf00, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="REGSTR_M.VSS", cAlternateFileName="")) returned 1 [0220.756] wcscmp (_String1="REGSTR_M.VSS", _String2=".") returned 1 [0220.756] wcscmp (_String1="REGSTR_M.VSS", _String2="..") returned 1 [0220.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb76a0 [0220.756] wcscpy (in: _Dest=0x7cb76a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.756] wcscat (in: _Dest=0x7cb76a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.756] wcscat (in: _Dest=0x7cb76a0, _Source="REGSTR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" [0220.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb76a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0220.757] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd2ea000, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdd2ea000, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="REGSTR_U.VSS", cAlternateFileName="")) returned 1 [0220.757] wcscmp (_String1="REGSTR_U.VSS", _String2=".") returned 1 [0220.758] wcscmp (_String1="REGSTR_U.VSS", _String2="..") returned 1 [0220.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6ac0 [0220.758] wcscpy (in: _Dest=0x7cb6ac0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.758] wcscat (in: _Dest=0x7cb6ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.758] wcscat (in: _Dest=0x7cb6ac0, _Source="REGSTR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" [0220.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94 [0220.759] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f35400, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe1f35400, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_M.VSS", cAlternateFileName="")) returned 1 [0220.759] wcscmp (_String1="ROAD_M.VSS", _String2=".") returned 1 [0220.759] wcscmp (_String1="ROAD_M.VSS", _String2="..") returned 1 [0220.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb7740 [0220.759] wcscpy (in: _Dest=0x7cb7740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.759] wcscat (in: _Dest=0x7cb7740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.759] wcscat (in: _Dest=0x7cb7740, _Source="ROAD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" [0220.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0220.760] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e93500, ftCreationTime.dwHighDateTime=0x1ca4795, ftLastAccessTime.dwLowDateTime=0xa53bfa90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe7e93500, ftLastWriteTime.dwHighDateTime=0x1ca4795, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_U.VSS", cAlternateFileName="")) returned 1 [0220.760] wcscmp (_String1="ROAD_U.VSS", _String2=".") returned 1 [0220.760] wcscmp (_String1="ROAD_U.VSS", _String2="..") returned 1 [0220.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb7060 [0220.761] wcscpy (in: _Dest=0x7cb7060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.761] wcscat (in: _Dest=0x7cb7060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.761] wcscat (in: _Dest=0x7cb7060, _Source="ROAD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" [0220.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0220.762] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6db400, ftCreationTime.dwHighDateTime=0x1c67041, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdc6db400, ftLastWriteTime.dwHighDateTime=0x1c67041, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SALSUM.XLS", cAlternateFileName="")) returned 1 [0220.762] wcscmp (_String1="SALSUM.XLS", _String2=".") returned 1 [0220.762] wcscmp (_String1="SALSUM.XLS", _String2="..") returned 1 [0220.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb7a60 [0220.762] wcscpy (in: _Dest=0x7cb7a60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.762] wcscat (in: _Dest=0x7cb7a60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.762] wcscat (in: _Dest=0x7cb7a60, _Source="SALSUM.XLS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" [0220.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0220.764] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa99800, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1fa99800, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0xbee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SALSUM_M.VST", cAlternateFileName="")) returned 1 [0220.764] wcscmp (_String1="SALSUM_M.VST", _String2=".") returned 1 [0220.764] wcscmp (_String1="SALSUM_M.VST", _String2="..") returned 1 [0220.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb79c0 [0220.765] wcscpy (in: _Dest=0x7cb79c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.765] wcscat (in: _Dest=0x7cb79c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.765] wcscat (in: _Dest=0x7cb79c0, _Source="SALSUM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" [0220.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb79c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0 [0220.766] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ef0300, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x14ef0300, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0xbce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SALSUM_U.VST", cAlternateFileName="")) returned 1 [0220.766] wcscmp (_String1="SALSUM_U.VST", _String2=".") returned 1 [0220.766] wcscmp (_String1="SALSUM_U.VST", _String2="..") returned 1 [0220.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6b60 [0220.766] wcscpy (in: _Dest=0x7cb6b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.766] wcscat (in: _Dest=0x7cb6b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.766] wcscat (in: _Dest=0x7cb6b60, _Source="SALSUM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" [0220.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc [0220.767] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39eba100, ftCreationTime.dwHighDateTime=0x1ca48e3, ftLastAccessTime.dwLowDateTime=0xa53e5bf0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39eba100, ftLastWriteTime.dwHighDateTime=0x1ca48e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCALL_M.VSS", cAlternateFileName="")) returned 1 [0220.767] wcscmp (_String1="SDCALL_M.VSS", _String2=".") returned 1 [0220.768] wcscmp (_String1="SDCALL_M.VSS", _String2="..") returned 1 [0220.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6c00 [0220.768] wcscpy (in: _Dest=0x7cb6c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.768] wcscat (in: _Dest=0x7cb6c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.768] wcscat (in: _Dest=0x7cb6c00, _Source="SDCALL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" [0220.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244c [0220.769] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8270a00, ftCreationTime.dwHighDateTime=0x1ca48e4, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8270a00, ftLastWriteTime.dwHighDateTime=0x1ca48e4, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCALL_U.VSS", cAlternateFileName="")) returned 1 [0220.769] wcscmp (_String1="SDCALL_U.VSS", _String2=".") returned 1 [0220.769] wcscmp (_String1="SDCALL_U.VSS", _String2="..") returned 1 [0220.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6ca0 [0220.769] wcscpy (in: _Dest=0x7cb6ca0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.769] wcscat (in: _Dest=0x7cb6ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.769] wcscat (in: _Dest=0x7cb6ca0, _Source="SDCALL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" [0220.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110 [0220.770] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb874a100, ftCreationTime.dwHighDateTime=0x1ca4e03, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb874a100, ftLastWriteTime.dwHighDateTime=0x1ca4e03, nFileSizeHigh=0x0, nFileSizeLow=0x38c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCONT_M.VSS", cAlternateFileName="")) returned 1 [0220.770] wcscmp (_String1="SDCONT_M.VSS", _String2=".") returned 1 [0220.771] wcscmp (_String1="SDCONT_M.VSS", _String2="..") returned 1 [0220.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6d40 [0220.771] wcscpy (in: _Dest=0x7cb6d40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.771] wcscat (in: _Dest=0x7cb6d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.771] wcscat (in: _Dest=0x7cb6d40, _Source="SDCONT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" [0220.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4 [0220.772] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22dc800, ftCreationTime.dwHighDateTime=0x1ca4e03, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe22dc800, ftLastWriteTime.dwHighDateTime=0x1ca4e03, nFileSizeHigh=0x0, nFileSizeLow=0x37e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDCONT_U.VSS", cAlternateFileName="")) returned 1 [0220.772] wcscmp (_String1="SDCONT_U.VSS", _String2=".") returned 1 [0220.772] wcscmp (_String1="SDCONT_U.VSS", _String2="..") returned 1 [0220.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6de0 [0220.772] wcscpy (in: _Dest=0x7cb6de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.772] wcscat (in: _Dest=0x7cb6de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.773] wcscat (in: _Dest=0x7cb6de0, _Source="SDCONT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" [0220.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728 [0220.774] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefd9000, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xaefd9000, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x16000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_M.VSS", cAlternateFileName="")) returned 1 [0220.774] wcscmp (_String1="SDL_M.VSS", _String2=".") returned 1 [0220.774] wcscmp (_String1="SDL_M.VSS", _String2="..") returned 1 [0220.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32b820 [0220.774] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.774] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.774] wcscat (in: _Dest=0x32b820, _Source="SDL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" [0220.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084 [0220.775] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95bc2700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95bc2700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_M.VST", cAlternateFileName="")) returned 1 [0220.775] wcscmp (_String1="SDL_M.VST", _String2=".") returned 1 [0220.775] wcscmp (_String1="SDL_M.VST", _String2="..") returned 1 [0220.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d240 [0220.775] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.776] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.776] wcscat (in: _Dest=0x32d240, _Source="SDL_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" [0220.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c [0220.870] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6249e00, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb6249e00, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_U.VSS", cAlternateFileName="")) returned 1 [0220.870] wcscmp (_String1="SDL_U.VSS", _String2=".") returned 1 [0220.870] wcscmp (_String1="SDL_U.VSS", _String2="..") returned 1 [0220.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cce8 [0220.871] wcscpy (in: _Dest=0x32cce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.871] wcscat (in: _Dest=0x32cce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.871] wcscat (in: _Dest=0x32cce8, _Source="SDL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" [0220.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0220.872] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981e8100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x981e8100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDL_U.VST", cAlternateFileName="")) returned 1 [0220.872] wcscmp (_String1="SDL_U.VST", _String2=".") returned 1 [0220.872] wcscmp (_String1="SDL_U.VST", _String2="..") returned 1 [0220.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cb20 [0220.872] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.872] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.872] wcscat (in: _Dest=0x32cb20, _Source="SDL_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" [0220.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0220.874] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d91600, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa2d91600, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECACC_M.VST", cAlternateFileName="")) returned 1 [0220.874] wcscmp (_String1="SECACC_M.VST", _String2=".") returned 1 [0220.874] wcscmp (_String1="SECACC_M.VST", _String2="..") returned 1 [0220.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6340 [0220.874] wcscpy (in: _Dest=0x7cb6340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.874] wcscat (in: _Dest=0x7cb6340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.874] wcscat (in: _Dest=0x7cb6340, _Source="SECACC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" [0220.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23a4 [0220.876] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab315100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa540bd50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xab315100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECACC_U.VST", cAlternateFileName="")) returned 1 [0220.876] wcscmp (_String1="SECACC_U.VST", _String2=".") returned 1 [0220.876] wcscmp (_String1="SECACC_U.VST", _String2="..") returned 1 [0220.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6700 [0220.876] wcscpy (in: _Dest=0x7cb6700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.876] wcscat (in: _Dest=0x7cb6700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.876] wcscat (in: _Dest=0x7cb6700, _Source="SECACC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" [0220.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c [0220.877] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcccaf500, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa5431eb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcccaf500, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVER_M.VSS", cAlternateFileName="")) returned 1 [0220.877] wcscmp (_String1="SERVER_M.VSS", _String2=".") returned 1 [0220.877] wcscmp (_String1="SERVER_M.VSS", _String2="..") returned 1 [0220.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7880 [0220.877] wcscpy (in: _Dest=0x7cb7880, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.878] wcscat (in: _Dest=0x7cb7880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.878] wcscat (in: _Dest=0x7cb7880, _Source="SERVER_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" [0220.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0220.879] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3714c00, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa5431eb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe3714c00, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x7aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVER_U.VSS", cAlternateFileName="")) returned 1 [0220.879] wcscmp (_String1="SERVER_U.VSS", _String2=".") returned 1 [0220.879] wcscmp (_String1="SERVER_U.VSS", _String2="..") returned 1 [0220.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb74c0 [0220.879] wcscpy (in: _Dest=0x7cb74c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.879] wcscat (in: _Dest=0x7cb74c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.879] wcscat (in: _Dest=0x7cb74c0, _Source="SERVER_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" [0220.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb74c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0220.880] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b54900, ftCreationTime.dwHighDateTime=0x1ca4796, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf7b54900, ftLastWriteTime.dwHighDateTime=0x1ca4796, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPMCH_M.VSS", cAlternateFileName="")) returned 1 [0220.880] wcscmp (_String1="SHPMCH_M.VSS", _String2=".") returned 1 [0220.880] wcscmp (_String1="SHPMCH_M.VSS", _String2="..") returned 1 [0220.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7100 [0220.881] wcscpy (in: _Dest=0x7cb7100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.881] wcscat (in: _Dest=0x7cb7100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.881] wcscat (in: _Dest=0x7cb7100, _Source="SHPMCH_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" [0220.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0220.882] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf94600, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbf94600, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x42800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPMCH_U.VSS", cAlternateFileName="")) returned 1 [0220.882] wcscmp (_String1="SHPMCH_U.VSS", _String2=".") returned 1 [0220.882] wcscmp (_String1="SHPMCH_U.VSS", _String2="..") returned 1 [0220.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6020 [0220.882] wcscpy (in: _Dest=0x7cb6020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.882] wcscat (in: _Dest=0x7cb6020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.882] wcscat (in: _Dest=0x7cb6020, _Source="SHPMCH_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" [0220.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c50 [0220.884] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b788f00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1b788f00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPREC_M.VSS", cAlternateFileName="")) returned 1 [0220.884] wcscmp (_String1="SHPREC_M.VSS", _String2=".") returned 1 [0220.884] wcscmp (_String1="SHPREC_M.VSS", _String2="..") returned 1 [0220.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6980 [0220.884] wcscpy (in: _Dest=0x7cb6980, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.884] wcscat (in: _Dest=0x7cb6980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.884] wcscat (in: _Dest=0x7cb6980, _Source="SHPREC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" [0220.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0220.885] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28957e00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa547e170, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x28957e00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPREC_U.VSS", cAlternateFileName="")) returned 1 [0220.886] wcscmp (_String1="SHPREC_U.VSS", _String2=".") returned 1 [0220.886] wcscmp (_String1="SHPREC_U.VSS", _String2="..") returned 1 [0220.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6480 [0220.886] wcscpy (in: _Dest=0x7cb6480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.886] wcscat (in: _Dest=0x7cb6480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.886] wcscat (in: _Dest=0x7cb6480, _Source="SHPREC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" [0220.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0220.887] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419e2f00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x419e2f00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPSTR_M.VSS", cAlternateFileName="")) returned 1 [0220.887] wcscmp (_String1="SHPSTR_M.VSS", _String2=".") returned 1 [0220.887] wcscmp (_String1="SHPSTR_M.VSS", _String2="..") returned 1 [0220.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7920 [0220.887] wcscpy (in: _Dest=0x7cb7920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.887] wcscat (in: _Dest=0x7cb7920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.887] wcscat (in: _Dest=0x7cb7920, _Source="SHPSTR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" [0220.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0220.889] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58448600, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x58448600, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x59600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHPSTR_U.VSS", cAlternateFileName="")) returned 1 [0220.889] wcscmp (_String1="SHPSTR_U.VSS", _String2=".") returned 1 [0220.889] wcscmp (_String1="SHPSTR_U.VSS", _String2="..") returned 1 [0220.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb63e0 [0220.889] wcscpy (in: _Dest=0x7cb63e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.889] wcscat (in: _Dest=0x7cb63e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.889] wcscat (in: _Dest=0x7cb63e0, _Source="SHPSTR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" [0220.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb63e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0220.890] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64304800, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x64304800, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x22e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITACC_M.VSS", cAlternateFileName="")) returned 1 [0220.890] wcscmp (_String1="SITACC_M.VSS", _String2=".") returned 1 [0220.891] wcscmp (_String1="SITACC_M.VSS", _String2="..") returned 1 [0220.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6660 [0220.891] wcscpy (in: _Dest=0x7cb6660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0220.891] wcscat (in: _Dest=0x7cb6660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0220.891] wcscat (in: _Dest=0x7cb6660, _Source="SITACC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" [0220.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0220.892] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeadd00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6eeadd00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x22a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITACC_U.VSS", cAlternateFileName="")) returned 1 [0221.031] wcscmp (_String1="SITACC_U.VSS", _String2=".") returned 1 [0221.031] wcscmp (_String1="SITACC_U.VSS", _String2="..") returned 1 [0221.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb60c0 [0221.031] wcscpy (in: _Dest=0x7cb60c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.031] wcscat (in: _Dest=0x7cb60c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.031] wcscat (in: _Dest=0x7cb60c0, _Source="SITACC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" [0221.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb60c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264 [0221.032] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ebe600, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54a42d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb5ebe600, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITPLN_M.VST", cAlternateFileName="")) returned 1 [0221.032] wcscmp (_String1="SITPLN_M.VST", _String2=".") returned 1 [0221.032] wcscmp (_String1="SITPLN_M.VST", _String2="..") returned 1 [0221.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb62a0 [0221.033] wcscpy (in: _Dest=0x7cb62a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.033] wcscat (in: _Dest=0x7cb62a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.033] wcscat (in: _Dest=0x7cb62a0, _Source="SITPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" [0221.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb62a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238 [0221.034] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d7a800, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc1d7a800, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SITPLN_U.VST", cAlternateFileName="")) returned 1 [0221.034] wcscmp (_String1="SITPLN_U.VST", _String2=".") returned 1 [0221.034] wcscmp (_String1="SITPLN_U.VST", _String2="..") returned 1 [0221.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6200 [0221.034] wcscpy (in: _Dest=0x7cb6200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.034] wcscat (in: _Dest=0x7cb6200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.034] wcscat (in: _Dest=0x7cb6200, _Source="SITPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" [0221.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c [0221.036] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89ff00, ftCreationTime.dwHighDateTime=0x1ca6c62, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe89ff00, ftLastWriteTime.dwHighDateTime=0x1ca6c62, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIXSIG_M.VST", cAlternateFileName="")) returned 1 [0221.036] wcscmp (_String1="SIXSIG_M.VST", _String2=".") returned 1 [0221.036] wcscmp (_String1="SIXSIG_M.VST", _String2="..") returned 1 [0221.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6e80 [0221.036] wcscpy (in: _Dest=0x7cb6e80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.036] wcscat (in: _Dest=0x7cb6e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.036] wcscat (in: _Dest=0x7cb6e80, _Source="SIXSIG_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" [0221.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0221.037] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbda00, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6fbda00, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIXSIG_U.VST", cAlternateFileName="")) returned 1 [0221.037] wcscmp (_String1="SIXSIG_U.VST", _String2=".") returned 1 [0221.037] wcscmp (_String1="SIXSIG_U.VST", _String2="..") returned 1 [0221.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6f20 [0221.037] wcscpy (in: _Dest=0x7cb6f20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.037] wcscat (in: _Dest=0x7cb6f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.037] wcscat (in: _Dest=0x7cb6f20, _Source="SIXSIG_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" [0221.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0221.038] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8feb600, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8feb600, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPCPLN_M.VST", cAlternateFileName="")) returned 1 [0221.038] wcscmp (_String1="SPCPLN_M.VST", _String2=".") returned 1 [0221.038] wcscmp (_String1="SPCPLN_M.VST", _String2="..") returned 1 [0221.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7420 [0221.039] wcscpy (in: _Dest=0x7cb7420, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.039] wcscat (in: _Dest=0x7cb7420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.039] wcscat (in: _Dest=0x7cb7420, _Source="SPCPLN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" [0221.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0221.040] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd025c400, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd025c400, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPCPLN_U.VST", cAlternateFileName="")) returned 1 [0221.040] wcscmp (_String1="SPCPLN_U.VST", _String2=".") returned 1 [0221.040] wcscmp (_String1="SPCPLN_U.VST", _String2="..") returned 1 [0221.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb7380 [0221.040] wcscpy (in: _Dest=0x7cb7380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.040] wcscat (in: _Dest=0x7cb7380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.040] wcscat (in: _Dest=0x7cb7380, _Source="SPCPLN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" [0221.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0221.041] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x832eda00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x832eda00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRBR_M.VSS", cAlternateFileName="")) returned 1 [0221.041] wcscmp (_String1="SPRBR_M.VSS", _String2=".") returned 1 [0221.041] wcscmp (_String1="SPRBR_M.VSS", _String2="..") returned 1 [0221.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb72e0 [0221.042] wcscpy (in: _Dest=0x7cb72e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.042] wcscat (in: _Dest=0x7cb72e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.042] wcscat (in: _Dest=0x7cb72e0, _Source="SPRBR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" [0221.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb72e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0221.043] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9641aa00, ftCreationTime.dwHighDateTime=0x1ca4797, ftLastAccessTime.dwLowDateTime=0xa54ca430, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9641aa00, ftLastWriteTime.dwHighDateTime=0x1ca4797, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRBR_U.VSS", cAlternateFileName="")) returned 1 [0221.043] wcscmp (_String1="SPRBR_U.VSS", _String2=".") returned 1 [0221.043] wcscmp (_String1="SPRBR_U.VSS", _String2="..") returned 1 [0221.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cb7240 [0221.043] wcscpy (in: _Dest=0x7cb7240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.043] wcscat (in: _Dest=0x7cb7240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.043] wcscat (in: _Dest=0x7cb7240, _Source="SPRBR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" [0221.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb7240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0221.048] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x55a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWA_M.VSS", cAlternateFileName="")) returned 1 [0221.048] wcscmp (_String1="SPWA_M.VSS", _String2=".") returned 1 [0221.048] wcscmp (_String1="SPWA_M.VSS", _String2="..") returned 1 [0221.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb71a0 [0221.048] wcscpy (in: _Dest=0x7cb71a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.048] wcscat (in: _Dest=0x7cb71a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.048] wcscat (in: _Dest=0x7cb71a0, _Source="SPWA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" [0221.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb71a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0221.049] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x55c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWA_U.VSS", cAlternateFileName="")) returned 1 [0221.049] wcscmp (_String1="SPWA_U.VSS", _String2=".") returned 1 [0221.049] wcscmp (_String1="SPWA_U.VSS", _String2="..") returned 1 [0221.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb6a20 [0221.049] wcscpy (in: _Dest=0x7cb6a20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.049] wcscat (in: _Dest=0x7cb6a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.049] wcscat (in: _Dest=0x7cb6a20, _Source="SPWA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" [0221.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0221.051] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWC_M.VSS", cAlternateFileName="")) returned 1 [0221.051] wcscmp (_String1="SPWC_M.VSS", _String2=".") returned 1 [0221.051] wcscmp (_String1="SPWC_M.VSS", _String2="..") returned 1 [0221.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cc03e0 [0221.051] wcscpy (in: _Dest=0x7cc03e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.051] wcscat (in: _Dest=0x7cc03e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.051] wcscat (in: _Dest=0x7cc03e0, _Source="SPWC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" [0221.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc03e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0221.052] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWC_U.VSS", cAlternateFileName="")) returned 1 [0221.052] wcscmp (_String1="SPWC_U.VSS", _String2=".") returned 1 [0221.052] wcscmp (_String1="SPWC_U.VSS", _String2="..") returned 1 [0221.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cc0480 [0221.052] wcscpy (in: _Dest=0x7cc0480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.052] wcscat (in: _Dest=0x7cc0480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.052] wcscat (in: _Dest=0x7cc0480, _Source="SPWC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" [0221.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0221.053] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWT_M.VSS", cAlternateFileName="")) returned 1 [0221.053] wcscmp (_String1="SPWT_M.VSS", _String2=".") returned 1 [0221.053] wcscmp (_String1="SPWT_M.VSS", _String2="..") returned 1 [0221.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cc0520 [0221.054] wcscpy (in: _Dest=0x7cc0520, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.054] wcscat (in: _Dest=0x7cc0520, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.054] wcscat (in: _Dest=0x7cc0520, _Source="SPWT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" [0221.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0221.055] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPWT_U.VSS", cAlternateFileName="")) returned 1 [0221.055] wcscmp (_String1="SPWT_U.VSS", _String2=".") returned 1 [0221.055] wcscmp (_String1="SPWT_U.VSS", _String2="..") returned 1 [0221.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cc05c0 [0221.055] wcscpy (in: _Dest=0x7cc05c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.055] wcscat (in: _Dest=0x7cc05c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.055] wcscat (in: _Dest=0x7cc05c0, _Source="SPWT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" [0221.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc05c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0221.057] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e9fc00, ftCreationTime.dwHighDateTime=0x1ca6c70, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x70e9fc00, ftLastWriteTime.dwHighDateTime=0x1ca6c70, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPW_M.VST", cAlternateFileName="")) returned 1 [0221.057] wcscmp (_String1="SPW_M.VST", _String2=".") returned 1 [0221.057] wcscmp (_String1="SPW_M.VST", _String2="..") returned 1 [0221.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d5d0 [0221.057] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.057] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.057] wcscat (in: _Dest=0x32d5d0, _Source="SPW_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" [0221.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0221.058] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa54f0590, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPW_U.VST", cAlternateFileName="")) returned 1 [0221.058] wcscmp (_String1="SPW_U.VST", _String2=".") returned 1 [0221.058] wcscmp (_String1="SPW_U.VST", _String2="..") returned 1 [0221.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d538 [0221.058] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.058] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.058] wcscat (in: _Dest=0x32d538, _Source="SPW_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" [0221.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0221.059] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ac600, ftCreationTime.dwHighDateTime=0x1ca48e4, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3c9ac600, ftLastWriteTime.dwHighDateTime=0x1ca48e4, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSFLOW_M.VSS", cAlternateFileName="")) returned 1 [0221.059] wcscmp (_String1="SSFLOW_M.VSS", _String2=".") returned 1 [0221.059] wcscmp (_String1="SSFLOW_M.VSS", _String2="..") returned 1 [0221.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0660 [0221.059] wcscpy (in: _Dest=0x7cc0660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.059] wcscat (in: _Dest=0x7cc0660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.059] wcscat (in: _Dest=0x7cc0660, _Source="SSFLOW_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" [0221.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0221.061] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e70b00, ftCreationTime.dwHighDateTime=0x1ca48eb, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf3e70b00, ftLastWriteTime.dwHighDateTime=0x1ca48eb, nFileSizeHigh=0x0, nFileSizeLow=0xec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSFLOW_U.VSS", cAlternateFileName="")) returned 1 [0221.061] wcscmp (_String1="SSFLOW_U.VSS", _String2=".") returned 1 [0221.061] wcscmp (_String1="SSFLOW_U.VSS", _String2="..") returned 1 [0221.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0700 [0221.061] wcscpy (in: _Dest=0x7cc0700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.061] wcscat (in: _Dest=0x7cc0700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.061] wcscat (in: _Dest=0x7cc0700, _Source="SSFLOW_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" [0221.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094 [0221.062] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf68700, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1cf68700, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0xa6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSHOQ_M.VSS", cAlternateFileName="")) returned 1 [0221.062] wcscmp (_String1="SSHOQ_M.VSS", _String2=".") returned 1 [0221.062] wcscmp (_String1="SSHOQ_M.VSS", _String2="..") returned 1 [0221.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cc07a0 [0221.062] wcscpy (in: _Dest=0x7cc07a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.062] wcscat (in: _Dest=0x7cc07a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.062] wcscat (in: _Dest=0x7cc07a0, _Source="SSHOQ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" [0221.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc07a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098 [0221.063] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba42100, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55166f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6ba42100, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0xa3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSHOQ_U.VSS", cAlternateFileName="")) returned 1 [0221.063] wcscmp (_String1="SSHOQ_U.VSS", _String2=".") returned 1 [0221.063] wcscmp (_String1="SSHOQ_U.VSS", _String2="..") returned 1 [0221.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cc0840 [0221.064] wcscpy (in: _Dest=0x7cc0840, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.064] wcscat (in: _Dest=0x7cc0840, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.064] wcscat (in: _Dest=0x7cc0840, _Source="SSHOQ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" [0221.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0221.065] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73fc5c00, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x73fc5c00, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x3d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL_M.VSS", cAlternateFileName="")) returned 1 [0221.065] wcscmp (_String1="SYMBOL_M.VSS", _String2=".") returned 1 [0221.065] wcscmp (_String1="SYMBOL_M.VSS", _String2="..") returned 1 [0221.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc08e0 [0221.065] wcscpy (in: _Dest=0x7cc08e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.065] wcscat (in: _Dest=0x7cc08e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.065] wcscat (in: _Dest=0x7cc08e0, _Source="SYMBOL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" [0221.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc08e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0221.066] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d85c400, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7d85c400, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x3ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL_U.VSS", cAlternateFileName="")) returned 1 [0221.066] wcscmp (_String1="SYMBOL_U.VSS", _String2=".") returned 1 [0221.066] wcscmp (_String1="SYMBOL_U.VSS", _String2="..") returned 1 [0221.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0980 [0221.066] wcscpy (in: _Dest=0x7cc0980, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.066] wcscat (in: _Dest=0x7cc0980, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.066] wcscat (in: _Dest=0x7cc0980, _Source="SYMBOL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" [0221.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0221.067] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f139a00, ftCreationTime.dwHighDateTime=0x1c33be1, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2f139a00, ftLastWriteTime.dwHighDateTime=0x1c33be1, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELINE.MPP", cAlternateFileName="")) returned 1 [0221.067] wcscmp (_String1="TIMELINE.MPP", _String2=".") returned 1 [0221.067] wcscmp (_String1="TIMELINE.MPP", _String2="..") returned 1 [0221.067] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0a20 [0221.067] wcscpy (in: _Dest=0x7cc0a20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.067] wcscat (in: _Dest=0x7cc0a20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.067] wcscat (in: _Dest=0x7cc0a20, _Source="TIMELINE.MPP" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" [0221.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28 [0221.068] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1490a00, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa553c850, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa1490a00, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x99e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_M.VSS", cAlternateFileName="")) returned 1 [0221.068] wcscmp (_String1="TIMELN_M.VSS", _String2=".") returned 1 [0221.068] wcscmp (_String1="TIMELN_M.VSS", _String2="..") returned 1 [0221.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0ac0 [0221.069] wcscpy (in: _Dest=0x7cc0ac0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.069] wcscat (in: _Dest=0x7cc0ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.069] wcscat (in: _Dest=0x7cc0ac0, _Source="TIMELN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" [0221.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734 [0221.170] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae05900, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdae05900, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_M.VST", cAlternateFileName="")) returned 1 [0221.170] wcscmp (_String1="TIMELN_M.VST", _String2=".") returned 1 [0221.170] wcscmp (_String1="TIMELN_M.VST", _String2="..") returned 1 [0221.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0b60 [0221.171] wcscpy (in: _Dest=0x7cc0b60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.171] wcscat (in: _Dest=0x7cc0b60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.171] wcscat (in: _Dest=0x7cc0b60, _Source="TIMELN_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" [0221.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0221.203] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc178c900, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc178c900, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x98800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_U.VSS", cAlternateFileName="")) returned 1 [0221.204] wcscmp (_String1="TIMELN_U.VSS", _String2=".") returned 1 [0221.204] wcscmp (_String1="TIMELN_U.VSS", _String2="..") returned 1 [0221.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0c00 [0221.204] wcscpy (in: _Dest=0x7cc0c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.204] wcscat (in: _Dest=0x7cc0c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.204] wcscat (in: _Dest=0x7cc0c00, _Source="TIMELN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" [0221.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0221.205] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde73e000, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xde73e000, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMELN_U.VST", cAlternateFileName="")) returned 1 [0221.205] wcscmp (_String1="TIMELN_U.VST", _String2=".") returned 1 [0221.205] wcscmp (_String1="TIMELN_U.VST", _String2="..") returned 1 [0221.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0ca0 [0221.205] wcscpy (in: _Dest=0x7cc0ca0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.205] wcscat (in: _Dest=0x7cc0ca0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.205] wcscat (in: _Dest=0x7cc0ca0, _Source="TIMELN_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" [0221.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0ca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0221.206] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc335e00, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc335e00, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE_M.VSS", cAlternateFileName="")) returned 1 [0221.206] wcscmp (_String1="TITLE_M.VSS", _String2=".") returned 1 [0221.207] wcscmp (_String1="TITLE_M.VSS", _String2="..") returned 1 [0221.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cc0d40 [0221.207] wcscpy (in: _Dest=0x7cc0d40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.207] wcscat (in: _Dest=0x7cc0d40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.207] wcscat (in: _Dest=0x7cc0d40, _Source="TITLE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" [0221.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0221.208] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5bcc600, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd5bcc600, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE_U.VSS", cAlternateFileName="")) returned 1 [0221.208] wcscmp (_String1="TITLE_U.VSS", _String2=".") returned 1 [0221.208] wcscmp (_String1="TITLE_U.VSS", _String2="..") returned 1 [0221.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cc0de0 [0221.208] wcscpy (in: _Dest=0x7cc0de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.208] wcscat (in: _Dest=0x7cc0de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.208] wcscat (in: _Dest=0x7cc0de0, _Source="TITLE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" [0221.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0221.209] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d9b500, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2d9b500, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x30800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_M.VSS", cAlternateFileName="")) returned 1 [0221.209] wcscmp (_String1="TQM_M.VSS", _String2=".") returned 1 [0221.209] wcscmp (_String1="TQM_M.VSS", _String2="..") returned 1 [0221.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d2d8 [0221.210] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.210] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.210] wcscat (in: _Dest=0x32d2d8, _Source="TQM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" [0221.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0221.211] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2076700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55629b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe2076700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_M.VST", cAlternateFileName="")) returned 1 [0221.211] wcscmp (_String1="TQM_M.VST", _String2=".") returned 1 [0221.211] wcscmp (_String1="TQM_M.VST", _String2="..") returned 1 [0221.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32ca88 [0221.211] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.211] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.211] wcscat (in: _Dest=0x32ca88, _Source="TQM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" [0221.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0221.212] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff6a400, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeff6a400, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_U.VSS", cAlternateFileName="")) returned 1 [0221.212] wcscmp (_String1="TQM_U.VSS", _String2=".") returned 1 [0221.212] wcscmp (_String1="TQM_U.VSS", _String2="..") returned 1 [0221.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d078 [0221.213] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.213] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.213] wcscat (in: _Dest=0x32d078, _Source="TQM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" [0221.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0221.214] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe59aee00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe59aee00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TQM_U.VST", cAlternateFileName="")) returned 1 [0221.214] wcscmp (_String1="TQM_U.VST", _String2=".") returned 1 [0221.214] wcscmp (_String1="TQM_U.VST", _String2="..") returned 1 [0221.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32cc50 [0221.214] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.214] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.214] wcscat (in: _Dest=0x32cc50, _Source="TQM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" [0221.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0221.215] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe26600, ftCreationTime.dwHighDateTime=0x1ca4798, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfbe26600, ftLastWriteTime.dwHighDateTime=0x1ca4798, nFileSizeHigh=0x0, nFileSizeLow=0x44200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSP_M.VSS", cAlternateFileName="")) returned 1 [0221.503] wcscmp (_String1="TRANSP_M.VSS", _String2=".") returned 1 [0221.503] wcscmp (_String1="TRANSP_M.VSS", _String2="..") returned 1 [0221.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0e80 [0221.503] wcscpy (in: _Dest=0x7cc0e80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.503] wcscat (in: _Dest=0x7cc0e80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.503] wcscat (in: _Dest=0x7cc0e80, _Source="TRANSP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" [0221.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0221.504] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3097400, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3097400, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x27200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSP_U.VSS", cAlternateFileName="")) returned 1 [0221.504] wcscmp (_String1="TRANSP_U.VSS", _String2=".") returned 1 [0221.504] wcscmp (_String1="TRANSP_U.VSS", _String2="..") returned 1 [0221.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0f20 [0221.504] wcscpy (in: _Dest=0x7cc0f20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.505] wcscat (in: _Dest=0x7cc0f20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.505] wcscat (in: _Dest=0x7cc0f20, _Source="TRANSP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" [0221.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0221.506] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ff5500, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa5588b10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8ff5500, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLACT_M.VSS", cAlternateFileName="")) returned 1 [0221.506] wcscmp (_String1="UMLACT_M.VSS", _String2=".") returned 1 [0221.506] wcscmp (_String1="UMLACT_M.VSS", _String2="..") returned 1 [0221.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc0fc0 [0221.506] wcscpy (in: _Dest=0x7cc0fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.506] wcscat (in: _Dest=0x7cc0fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.506] wcscat (in: _Dest=0x7cc0fc0, _Source="UMLACT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" [0221.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0221.507] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef53600, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xef53600, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLACT_U.VSS", cAlternateFileName="")) returned 1 [0221.507] wcscmp (_String1="UMLACT_U.VSS", _String2=".") returned 1 [0221.507] wcscmp (_String1="UMLACT_U.VSS", _String2="..") returned 1 [0221.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1060 [0221.507] wcscpy (in: _Dest=0x7cc1060, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.508] wcscat (in: _Dest=0x7cc1060, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.508] wcscat (in: _Dest=0x7cc1060, _Source="UMLACT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" [0221.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0221.509] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b9ea00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x13b9ea00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOL_M.VSS", cAlternateFileName="")) returned 1 [0221.509] wcscmp (_String1="UMLCOL_M.VSS", _String2=".") returned 1 [0221.509] wcscmp (_String1="UMLCOL_M.VSS", _String2="..") returned 1 [0221.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1100 [0221.509] wcscpy (in: _Dest=0x7cc1100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.509] wcscat (in: _Dest=0x7cc1100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.509] wcscat (in: _Dest=0x7cc1100, _Source="UMLCOL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" [0221.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0221.510] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19afcb00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x19afcb00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOL_U.VSS", cAlternateFileName="")) returned 1 [0221.510] wcscmp (_String1="UMLCOL_U.VSS", _String2=".") returned 1 [0221.510] wcscmp (_String1="UMLCOL_U.VSS", _String2="..") returned 1 [0221.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc11a0 [0221.510] wcscpy (in: _Dest=0x7cc11a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.510] wcscat (in: _Dest=0x7cc11a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.510] wcscat (in: _Dest=0x7cc11a0, _Source="UMLCOL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" [0221.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc11a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0221.512] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e747f00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e747f00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOM_M.VSS", cAlternateFileName="")) returned 1 [0221.512] wcscmp (_String1="UMLCOM_M.VSS", _String2=".") returned 1 [0221.512] wcscmp (_String1="UMLCOM_M.VSS", _String2="..") returned 1 [0221.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1240 [0221.512] wcscpy (in: _Dest=0x7cc1240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.512] wcscat (in: _Dest=0x7cc1240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.512] wcscat (in: _Dest=0x7cc1240, _Source="UMLCOM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" [0221.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0221.513] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23393300, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x23393300, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLCOM_U.VSS", cAlternateFileName="")) returned 1 [0221.513] wcscmp (_String1="UMLCOM_U.VSS", _String2=".") returned 1 [0221.513] wcscmp (_String1="UMLCOM_U.VSS", _String2="..") returned 1 [0221.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc12e0 [0221.514] wcscpy (in: _Dest=0x7cc12e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.514] wcscat (in: _Dest=0x7cc12e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.514] wcscat (in: _Dest=0x7cc12e0, _Source="UMLCOM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" [0221.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc12e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0221.515] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b916e00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2b916e00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDEP_M.VSS", cAlternateFileName="")) returned 1 [0221.515] wcscmp (_String1="UMLDEP_M.VSS", _String2=".") returned 1 [0221.515] wcscmp (_String1="UMLDEP_M.VSS", _String2="..") returned 1 [0221.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1380 [0221.515] wcscpy (in: _Dest=0x7cc1380, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.515] wcscat (in: _Dest=0x7cc1380, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.515] wcscat (in: _Dest=0x7cc1380, _Source="UMLDEP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" [0221.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4 [0221.517] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31874f00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x31874f00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDEP_U.VSS", cAlternateFileName="")) returned 1 [0221.517] wcscmp (_String1="UMLDEP_U.VSS", _String2=".") returned 1 [0221.517] wcscmp (_String1="UMLDEP_U.VSS", _String2="..") returned 1 [0221.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1420 [0221.517] wcscpy (in: _Dest=0x7cc1420, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.517] wcscat (in: _Dest=0x7cc1420, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.517] wcscat (in: _Dest=0x7cc1420, _Source="UMLDEP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" [0221.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68 [0221.518] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37686d00, ftCreationTime.dwHighDateTime=0x1c68be5, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x37686d00, ftLastWriteTime.dwHighDateTime=0x1c68be5, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDG_M.VSD", cAlternateFileName="")) returned 1 [0221.518] wcscmp (_String1="UMLDG_M.VSD", _String2=".") returned 1 [0221.518] wcscmp (_String1="UMLDG_M.VSD", _String2="..") returned 1 [0221.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cc14c0 [0221.519] wcscpy (in: _Dest=0x7cc14c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.519] wcscat (in: _Dest=0x7cc14c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.519] wcscat (in: _Dest=0x7cc14c0, _Source="UMLDG_M.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" [0221.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc14c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00 [0221.520] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8a4500, ftCreationTime.dwHighDateTime=0x1c67518, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfd8a4500, ftLastWriteTime.dwHighDateTime=0x1c67518, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLDG_U.VSD", cAlternateFileName="")) returned 1 [0221.520] wcscmp (_String1="UMLDG_U.VSD", _String2=".") returned 1 [0221.520] wcscmp (_String1="UMLDG_U.VSD", _String2="..") returned 1 [0221.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7cc1560 [0221.520] wcscpy (in: _Dest=0x7cc1560, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.520] wcscat (in: _Dest=0x7cc1560, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.520] wcscat (in: _Dest=0x7cc1560, _Source="UMLDG_U.VSD" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" [0221.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0221.521] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc1fc00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xecc1fc00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLMOD_M.VST", cAlternateFileName="")) returned 1 [0221.521] wcscmp (_String1="UMLMOD_M.VST", _String2=".") returned 1 [0221.522] wcscmp (_String1="UMLMOD_M.VST", _String2="..") returned 1 [0221.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1600 [0221.522] wcscpy (in: _Dest=0x7cc1600, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.522] wcscat (in: _Dest=0x7cc1600, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.522] wcscat (in: _Dest=0x7cc1600, _Source="UMLMOD_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" [0221.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0221.523] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b7dd00, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf2b7dd00, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x12600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLMOD_U.VST", cAlternateFileName="")) returned 1 [0221.523] wcscmp (_String1="UMLMOD_U.VST", _String2=".") returned 1 [0221.524] wcscmp (_String1="UMLMOD_U.VST", _String2="..") returned 1 [0221.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc16a0 [0221.524] wcscpy (in: _Dest=0x7cc16a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.524] wcscat (in: _Dest=0x7cc16a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.524] wcscat (in: _Dest=0x7cc16a0, _Source="UMLMOD_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" [0221.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc16a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0221.525] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39df8a00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39df8a00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSEQ_M.VSS", cAlternateFileName="")) returned 1 [0221.525] wcscmp (_String1="UMLSEQ_M.VSS", _String2=".") returned 1 [0221.525] wcscmp (_String1="UMLSEQ_M.VSS", _String2="..") returned 1 [0221.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1740 [0221.525] wcscpy (in: _Dest=0x7cc1740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.525] wcscat (in: _Dest=0x7cc1740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.525] wcscat (in: _Dest=0x7cc1740, _Source="UMLSEQ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" [0221.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0221.527] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4237c500, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55aec70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4237c500, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSEQ_U.VSS", cAlternateFileName="")) returned 1 [0221.527] wcscmp (_String1="UMLSEQ_U.VSS", _String2=".") returned 1 [0221.527] wcscmp (_String1="UMLSEQ_U.VSS", _String2="..") returned 1 [0221.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc17e0 [0221.527] wcscpy (in: _Dest=0x7cc17e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.527] wcscat (in: _Dest=0x7cc17e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.527] wcscat (in: _Dest=0x7cc17e0, _Source="UMLSEQ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" [0221.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc17e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0221.568] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482da600, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x482da600, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTA_M.VSS", cAlternateFileName="")) returned 1 [0221.568] wcscmp (_String1="UMLSTA_M.VSS", _String2=".") returned 1 [0221.568] wcscmp (_String1="UMLSTA_M.VSS", _String2="..") returned 1 [0221.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1880 [0221.569] wcscpy (in: _Dest=0x7cc1880, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.569] wcscat (in: _Dest=0x7cc1880, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.569] wcscat (in: _Dest=0x7cc1880, _Source="UMLSTA_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" [0221.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0221.570] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e238700, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e238700, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTA_U.VSS", cAlternateFileName="")) returned 1 [0221.570] wcscmp (_String1="UMLSTA_U.VSS", _String2=".") returned 1 [0221.570] wcscmp (_String1="UMLSTA_U.VSS", _String2="..") returned 1 [0221.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1920 [0221.570] wcscpy (in: _Dest=0x7cc1920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.570] wcscat (in: _Dest=0x7cc1920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.571] wcscat (in: _Dest=0x7cc1920, _Source="UMLSTA_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" [0221.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0221.572] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60052a00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x60052a00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x36600, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTR_M.VSS", cAlternateFileName="")) returned 1 [0221.572] wcscmp (_String1="UMLSTR_M.VSS", _String2=".") returned 1 [0221.572] wcscmp (_String1="UMLSTR_M.VSS", _String2="..") returned 1 [0221.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc19c0 [0221.572] wcscpy (in: _Dest=0x7cc19c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.572] wcscat (in: _Dest=0x7cc19c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.572] wcscat (in: _Dest=0x7cc19c0, _Source="UMLSTR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" [0221.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc19c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0221.573] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e6cd00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x71e6cd00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLSTR_U.VSS", cAlternateFileName="")) returned 1 [0221.573] wcscmp (_String1="UMLSTR_U.VSS", _String2=".") returned 1 [0221.574] wcscmp (_String1="UMLSTR_U.VSS", _String2="..") returned 1 [0221.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1a60 [0221.574] wcscpy (in: _Dest=0x7cc1a60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.574] wcscat (in: _Dest=0x7cc1a60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.574] wcscat (in: _Dest=0x7cc1a60, _Source="UMLSTR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" [0221.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0221.611] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76ab8100, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x76ab8100, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLUSE_M.VSS", cAlternateFileName="")) returned 1 [0221.611] wcscmp (_String1="UMLUSE_M.VSS", _String2=".") returned 1 [0221.611] wcscmp (_String1="UMLUSE_M.VSS", _String2="..") returned 1 [0221.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1b00 [0221.611] wcscpy (in: _Dest=0x7cc1b00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.612] wcscat (in: _Dest=0x7cc1b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.612] wcscat (in: _Dest=0x7cc1b00, _Source="UMLUSE_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" [0221.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0221.613] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca16200, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x7ca16200, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMLUSE_U.VSS", cAlternateFileName="")) returned 1 [0221.613] wcscmp (_String1="UMLUSE_U.VSS", _String2=".") returned 1 [0221.613] wcscmp (_String1="UMLUSE_U.VSS", _String2="..") returned 1 [0221.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1ba0 [0221.613] wcscpy (in: _Dest=0x7cc1ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.613] wcscat (in: _Dest=0x7cc1ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.613] wcscat (in: _Dest=0x7cc1ba0, _Source="UMLUSE_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" [0221.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0221.615] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89be5100, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x89be5100, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x22c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE1_M.VSS", cAlternateFileName="")) returned 1 [0221.615] wcscmp (_String1="VALVE1_M.VSS", _String2=".") returned 1 [0221.615] wcscmp (_String1="VALVE1_M.VSS", _String2="..") returned 1 [0221.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1c40 [0221.615] wcscpy (in: _Dest=0x7cc1c40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.615] wcscat (in: _Dest=0x7cc1c40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.615] wcscat (in: _Dest=0x7cc1c40, _Source="VALVE1_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" [0221.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0221.616] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95aa1300, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55d4dd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95aa1300, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x20e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE1_U.VSS", cAlternateFileName="")) returned 1 [0221.616] wcscmp (_String1="VALVE1_U.VSS", _String2=".") returned 1 [0221.616] wcscmp (_String1="VALVE1_U.VSS", _String2="..") returned 1 [0221.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1ce0 [0221.617] wcscpy (in: _Dest=0x7cc1ce0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.617] wcscat (in: _Dest=0x7cc1ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.617] wcscat (in: _Dest=0x7cc1ce0, _Source="VALVE1_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" [0221.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0221.618] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cd12100, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9cd12100, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE2_M.VSS", cAlternateFileName="")) returned 1 [0221.618] wcscmp (_String1="VALVE2_M.VSS", _String2=".") returned 1 [0221.618] wcscmp (_String1="VALVE2_M.VSS", _String2="..") returned 1 [0221.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1d80 [0221.618] wcscpy (in: _Dest=0x7cc1d80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.618] wcscat (in: _Dest=0x7cc1d80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.618] wcscat (in: _Dest=0x7cc1d80, _Source="VALVE2_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" [0221.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0221.620] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2c70200, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa2c70200, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE2_U.VSS", cAlternateFileName="")) returned 1 [0221.620] wcscmp (_String1="VALVE2_U.VSS", _String2=".") returned 1 [0221.620] wcscmp (_String1="VALVE2_U.VSS", _String2="..") returned 1 [0221.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1e20 [0221.620] wcscpy (in: _Dest=0x7cc1e20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.620] wcscat (in: _Dest=0x7cc1e20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.620] wcscat (in: _Dest=0x7cc1e20, _Source="VALVE2_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" [0221.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0221.621] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1151e00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1151e00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEHICL_M.VSS", cAlternateFileName="")) returned 1 [0221.621] wcscmp (_String1="VEHICL_M.VSS", _String2=".") returned 1 [0221.621] wcscmp (_String1="VEHICL_M.VSS", _String2="..") returned 1 [0221.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1ec0 [0221.621] wcscpy (in: _Dest=0x7cc1ec0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.622] wcscat (in: _Dest=0x7cc1ec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.622] wcscat (in: _Dest=0x7cc1ec0, _Source="VEHICL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" [0221.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0221.623] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd00e000, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbd00e000, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x3fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEHICL_U.VSS", cAlternateFileName="")) returned 1 [0221.623] wcscmp (_String1="VEHICL_U.VSS", _String2=".") returned 1 [0221.623] wcscmp (_String1="VEHICL_U.VSS", _String2="..") returned 1 [0221.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cc1f60 [0221.624] wcscpy (in: _Dest=0x7cc1f60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.624] wcscat (in: _Dest=0x7cc1f60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.624] wcscat (in: _Dest=0x7cc1f60, _Source="VEHICL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" [0221.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0221.625] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc427ee00, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc427ee00, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIDSUR_M.VSS", cAlternateFileName="")) returned 1 [0221.625] wcscmp (_String1="VIDSUR_M.VSS", _String2=".") returned 1 [0221.625] wcscmp (_String1="VIDSUR_M.VSS", _String2="..") returned 1 [0221.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4460 [0221.625] wcscpy (in: _Dest=0x3df4460, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.625] wcscat (in: _Dest=0x3df4460, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.625] wcscat (in: _Dest=0x3df4460, _Source="VIDSUR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" [0221.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0 [0221.627] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc802900, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcc802900, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIDSUR_U.VSS", cAlternateFileName="")) returned 1 [0221.627] wcscmp (_String1="VIDSUR_U.VSS", _String2=".") returned 1 [0221.627] wcscmp (_String1="VIDSUR_U.VSS", _String2="..") returned 1 [0221.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4be0 [0221.627] wcscpy (in: _Dest=0x3df4be0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.627] wcscat (in: _Dest=0x3df4be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.627] wcscat (in: _Dest=0x3df4be0, _Source="VIDSUR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" [0221.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0221.628] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3a73700, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd3a73700, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_M.VSS", cAlternateFileName="")) returned 1 [0221.629] wcscmp (_String1="VSM_M.VSS", _String2=".") returned 1 [0221.629] wcscmp (_String1="VSM_M.VSS", _String2="..") returned 1 [0221.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c660 [0221.629] wcscpy (in: _Dest=0x32c660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.629] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.629] wcscat (in: _Dest=0x32c660, _Source="VSM_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" [0221.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0221.630] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51a3700, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf51a3700, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_M.VST", cAlternateFileName="")) returned 1 [0221.630] wcscmp (_String1="VSM_M.VST", _String2=".") returned 1 [0221.630] wcscmp (_String1="VSM_M.VST", _String2="..") returned 1 [0221.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32c9f0 [0221.630] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.630] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.630] wcscat (in: _Dest=0x32c9f0, _Source="VSM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" [0221.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0221.632] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbff7200, ftCreationTime.dwHighDateTime=0x1ca4799, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xdbff7200, ftLastWriteTime.dwHighDateTime=0x1ca4799, nFileSizeHigh=0x0, nFileSizeLow=0x1d600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_U.VSS", cAlternateFileName="")) returned 1 [0221.632] wcscmp (_String1="VSM_U.VSS", _String2=".") returned 1 [0221.632] wcscmp (_String1="VSM_U.VSS", _String2="..") returned 1 [0221.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32ceb0 [0221.632] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.632] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.632] wcscat (in: _Dest=0x32ceb0, _Source="VSM_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" [0221.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0221.633] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf77c9100, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf77c9100, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSM_U.VST", cAlternateFileName="")) returned 1 [0221.633] wcscmp (_String1="VSM_U.VST", _String2=".") returned 1 [0221.633] wcscmp (_String1="VSM_U.VST", _String2="..") returned 1 [0221.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d408 [0221.634] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.634] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.634] wcscat (in: _Dest=0x32d408, _Source="VSM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" [0221.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c64 [0221.635] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1537e200, ftCreationTime.dwHighDateTime=0x1ca479a, ftLastAccessTime.dwLowDateTime=0xa591ac10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1537e200, ftLastWriteTime.dwHighDateTime=0x1ca479a, nFileSizeHigh=0x0, nFileSizeLow=0x7fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WADOWI_M.VSS", cAlternateFileName="")) returned 1 [0221.648] wcscmp (_String1="WADOWI_M.VSS", _String2=".") returned 1 [0221.648] wcscmp (_String1="WADOWI_M.VSS", _String2="..") returned 1 [0221.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df61c0 [0221.648] wcscpy (in: _Dest=0x3df61c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.648] wcscat (in: _Dest=0x3df61c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.648] wcscat (in: _Dest=0x3df61c0, _Source="WADOWI_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" [0221.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df61c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0221.649] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e705200, ftCreationTime.dwHighDateTime=0x1ca479a, ftLastAccessTime.dwLowDateTime=0xa5940d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4e705200, ftLastWriteTime.dwHighDateTime=0x1ca479a, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WADOWI_U.VSS", cAlternateFileName="")) returned 1 [0221.649] wcscmp (_String1="WADOWI_U.VSS", _String2=".") returned 1 [0221.649] wcscmp (_String1="WADOWI_U.VSS", _String2="..") returned 1 [0221.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5c20 [0221.649] wcscpy (in: _Dest=0x3df5c20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.649] wcscat (in: _Dest=0x3df5c20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.650] wcscat (in: _Dest=0x3df5c20, _Source="WADOWI_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" [0221.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50 [0221.651] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7ed800, ftCreationTime.dwHighDateTime=0x1ca479a, ftLastAccessTime.dwLowDateTime=0xa5940d70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbe7ed800, ftLastWriteTime.dwHighDateTime=0x1ca479a, nFileSizeHigh=0x0, nFileSizeLow=0xdae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WALL_M.VSS", cAlternateFileName="")) returned 1 [0221.651] wcscmp (_String1="WALL_M.VSS", _String2=".") returned 1 [0221.651] wcscmp (_String1="WALL_M.VSS", _String2="..") returned 1 [0221.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5220 [0221.651] wcscpy (in: _Dest=0x3df5220, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.651] wcscat (in: _Dest=0x3df5220, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.651] wcscat (in: _Dest=0x3df5220, _Source="WALL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" [0221.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730 [0221.652] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cabbb00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1cabbb00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0xd9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WALL_U.VSS", cAlternateFileName="")) returned 1 [0221.652] wcscmp (_String1="WALL_U.VSS", _String2=".") returned 1 [0221.652] wcscmp (_String1="WALL_U.VSS", _String2="..") returned 1 [0221.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df57c0 [0221.652] wcscpy (in: _Dest=0x3df57c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.652] wcscat (in: _Dest=0x3df57c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.652] wcscat (in: _Dest=0x3df57c0, _Source="WALL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" [0221.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df57c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c [0221.654] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b595500, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5966ed0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x6b595500, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_M.VSS", cAlternateFileName="")) returned 1 [0221.654] wcscmp (_String1="WEBMAP_M.VSS", _String2=".") returned 1 [0221.654] wcscmp (_String1="WEBMAP_M.VSS", _String2="..") returned 1 [0221.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4dc0 [0221.654] wcscpy (in: _Dest=0x3df4dc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.654] wcscat (in: _Dest=0x3df4dc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.654] wcscat (in: _Dest=0x3df4dc0, _Source="WEBMAP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" [0221.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488 [0221.655] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc414500, ftCreationTime.dwHighDateTime=0x1ca48ef, ftLastAccessTime.dwLowDateTime=0xa5a979d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xfc414500, ftLastWriteTime.dwHighDateTime=0x1ca48ef, nFileSizeHigh=0x0, nFileSizeLow=0x18800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_M.VST", cAlternateFileName="")) returned 1 [0221.655] wcscmp (_String1="WEBMAP_M.VST", _String2=".") returned 1 [0221.655] wcscmp (_String1="WEBMAP_M.VST", _String2="..") returned 1 [0221.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5a40 [0221.655] wcscpy (in: _Dest=0x3df5a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.655] wcscat (in: _Dest=0x3df5a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.655] wcscat (in: _Dest=0x3df5a40, _Source="WEBMAP_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" [0221.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c4c [0221.657] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d5c200, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5ae3c90, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb8d5c200, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x189200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_U.VSS", cAlternateFileName="")) returned 1 [0221.657] wcscmp (_String1="WEBMAP_U.VSS", _String2=".") returned 1 [0221.657] wcscmp (_String1="WEBMAP_U.VSS", _String2="..") returned 1 [0221.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4d20 [0221.657] wcscpy (in: _Dest=0x3df4d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.657] wcscat (in: _Dest=0x3df4d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.657] wcscat (in: _Dest=0x3df4d20, _Source="WEBMAP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" [0221.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0221.725] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105f900, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x105f900, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBMAP_U.VST", cAlternateFileName="")) returned 1 [0221.726] wcscmp (_String1="WEBMAP_U.VST", _String2=".") returned 1 [0221.726] wcscmp (_String1="WEBMAP_U.VST", _String2="..") returned 1 [0221.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5f40 [0221.726] wcscpy (in: _Dest=0x3df5f40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.726] wcscat (in: _Dest=0x3df5f40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.726] wcscat (in: _Dest=0x3df5f40, _Source="WEBMAP_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" [0221.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0221.753] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecba300, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xbecba300, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x12a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_M.VSS", cAlternateFileName="")) returned 1 [0221.753] wcscmp (_String1="WEBSIT_M.VSS", _String2=".") returned 1 [0221.753] wcscmp (_String1="WEBSIT_M.VSS", _String2="..") returned 1 [0221.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df59a0 [0221.753] wcscpy (in: _Dest=0x3df59a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.753] wcscat (in: _Dest=0x3df59a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.753] wcscat (in: _Dest=0x3df59a0, _Source="WEBSIT_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" [0221.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df59a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0221.754] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4998000, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x4998000, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_M.VST", cAlternateFileName="")) returned 1 [0221.754] wcscmp (_String1="WEBSIT_M.VST", _String2=".") returned 1 [0221.754] wcscmp (_String1="WEBSIT_M.VST", _String2="..") returned 1 [0221.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6260 [0221.755] wcscpy (in: _Dest=0x3df6260, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.755] wcscat (in: _Dest=0x3df6260, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.755] wcscat (in: _Dest=0x3df6260, _Source="WEBSIT_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" [0221.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0221.756] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3905700, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc3905700, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_U.VSS", cAlternateFileName="")) returned 1 [0221.756] wcscmp (_String1="WEBSIT_U.VSS", _String2=".") returned 1 [0221.756] wcscmp (_String1="WEBSIT_U.VSS", _String2="..") returned 1 [0221.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df4aa0 [0221.756] wcscpy (in: _Dest=0x3df4aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.756] wcscat (in: _Dest=0x3df4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.756] wcscat (in: _Dest=0x3df4aa0, _Source="WEBSIT_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" [0221.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0221.758] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e3400, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x95e3400, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSIT_U.VST", cAlternateFileName="")) returned 1 [0221.758] wcscmp (_String1="WEBSIT_U.VST", _String2=".") returned 1 [0221.758] wcscmp (_String1="WEBSIT_U.VST", _String2="..") returned 1 [0221.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df5b80 [0221.758] wcscpy (in: _Dest=0x3df5b80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.758] wcscat (in: _Dest=0x3df5b80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.758] wcscat (in: _Dest=0x3df5b80, _Source="WEBSIT_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" [0221.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0221.759] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8550b00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc8550b00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x15400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WELD_M.VSS", cAlternateFileName="")) returned 1 [0221.759] wcscmp (_String1="WELD_M.VSS", _String2=".") returned 1 [0221.759] wcscmp (_String1="WELD_M.VSS", _String2="..") returned 1 [0221.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df5d60 [0221.760] wcscpy (in: _Dest=0x3df5d60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.760] wcscat (in: _Dest=0x3df5d60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.760] wcscat (in: _Dest=0x3df5d60, _Source="WELD_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" [0221.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df5d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0221.761] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd19bf00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b09df0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xcd19bf00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WELD_U.VSS", cAlternateFileName="")) returned 1 [0221.761] wcscmp (_String1="WELD_U.VSS", _String2=".") returned 1 [0221.761] wcscmp (_String1="WELD_U.VSS", _String2="..") returned 1 [0221.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df6120 [0221.761] wcscpy (in: _Dest=0x3df6120, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.761] wcscat (in: _Dest=0x3df6120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.761] wcscat (in: _Dest=0x3df6120, _Source="WELD_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" [0221.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0221.763] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ad4600, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd0ad4600, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x18400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCICN_M.VSS", cAlternateFileName="")) returned 1 [0221.763] wcscmp (_String1="WFCICN_M.VSS", _String2=".") returned 1 [0221.763] wcscmp (_String1="WFCICN_M.VSS", _String2="..") returned 1 [0221.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x3df6080 [0221.763] wcscpy (in: _Dest=0x3df6080, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.763] wcscat (in: _Dest=0x3df6080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.763] wcscat (in: _Dest=0x3df6080, _Source="WFCICN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" [0221.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df6080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0221.764] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd440cd00, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd440cd00, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCICN_U.VSS", cAlternateFileName="")) returned 1 [0221.764] wcscmp (_String1="WFCICN_U.VSS", _String2=".") returned 1 [0221.765] wcscmp (_String1="WFCICN_U.VSS", _String2="..") returned 1 [0221.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6a090 [0221.765] wcscpy (in: _Dest=0x7a6a090, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.765] wcscat (in: _Dest=0x7a6a090, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.765] wcscat (in: _Dest=0x7a6a090, _Source="WFCICN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" [0221.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0221.766] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec185100, ftCreationTime.dwHighDateTime=0x1ca479b, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xec185100, ftLastWriteTime.dwHighDateTime=0x1ca479b, nFileSizeHigh=0x0, nFileSizeLow=0x78000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCRS_M.VSS", cAlternateFileName="")) returned 1 [0221.766] wcscmp (_String1="WFCRS_M.VSS", _String2=".") returned 1 [0221.766] wcscmp (_String1="WFCRS_M.VSS", _String2="..") returned 1 [0221.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6a130 [0221.766] wcscpy (in: _Dest=0x7a6a130, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.766] wcscat (in: _Dest=0x7a6a130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.767] wcscat (in: _Dest=0x7a6a130, _Source="WFCRS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" [0221.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0221.768] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3efd500, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5b2ff50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x3efd500, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x77e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCRS_U.VSS", cAlternateFileName="")) returned 1 [0221.768] wcscmp (_String1="WFCRS_U.VSS", _String2=".") returned 1 [0221.768] wcscmp (_String1="WFCRS_U.VSS", _String2="..") returned 1 [0221.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6a1d0 [0221.768] wcscpy (in: _Dest=0x7a6a1d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.768] wcscat (in: _Dest=0x7a6a1d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.768] wcscat (in: _Dest=0x7a6a1d0, _Source="WFCRS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" [0221.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0221.769] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96949100, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5b560b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x96949100, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x27800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCTRL_M.VSS", cAlternateFileName="")) returned 1 [0221.770] wcscmp (_String1="WFCTRL_M.VSS", _String2=".") returned 1 [0221.770] wcscmp (_String1="WFCTRL_M.VSS", _String2="..") returned 1 [0221.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6a270 [0221.770] wcscpy (in: _Dest=0x7a6a270, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.770] wcscat (in: _Dest=0x7a6a270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.770] wcscat (in: _Dest=0x7a6a270, _Source="WFCTRL_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" [0221.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0221.771] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eeccc00, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5b560b0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x9eeccc00, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x26e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFCTRL_U.VSS", cAlternateFileName="")) returned 1 [0221.771] wcscmp (_String1="WFCTRL_U.VSS", _String2=".") returned 1 [0221.771] wcscmp (_String1="WFCTRL_U.VSS", _String2="..") returned 1 [0221.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6a310 [0221.771] wcscpy (in: _Dest=0x7a6a310, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.771] wcscat (in: _Dest=0x7a6a310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.771] wcscat (in: _Dest=0x7a6a310, _Source="WFCTRL_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" [0221.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0221.773] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x516c4200, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5ba2370, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x516c4200, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x217a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDEP_M.VSS", cAlternateFileName="")) returned 1 [0221.773] wcscmp (_String1="WFDEP_M.VSS", _String2=".") returned 1 [0221.773] wcscmp (_String1="WFDEP_M.VSS", _String2="..") returned 1 [0221.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6a3b0 [0221.773] wcscpy (in: _Dest=0x7a6a3b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.773] wcscat (in: _Dest=0x7a6a3b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.773] wcscat (in: _Dest=0x7a6a3b0, _Source="WFDEP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" [0221.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0221.775] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x837da400, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5bc84d0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x837da400, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x215e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDEP_U.VSS", cAlternateFileName="")) returned 1 [0221.775] wcscmp (_String1="WFDEP_U.VSS", _String2=".") returned 1 [0221.775] wcscmp (_String1="WFDEP_U.VSS", _String2="..") returned 1 [0221.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6a450 [0221.775] wcscpy (in: _Dest=0x7a6a450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.775] wcscat (in: _Dest=0x7a6a450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.775] wcscat (in: _Dest=0x7a6a450, _Source="WFDEP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" [0221.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0221.776] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDGM_M.VST", cAlternateFileName="")) returned 1 [0221.776] wcscmp (_String1="WFDGM_M.VST", _String2=".") returned 1 [0221.776] wcscmp (_String1="WFDGM_M.VST", _String2="..") returned 1 [0221.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6a4f0 [0221.776] wcscpy (in: _Dest=0x7a6a4f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.777] wcscat (in: _Dest=0x7a6a4f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.777] wcscat (in: _Dest=0x7a6a4f0, _Source="WFDGM_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" [0221.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a4f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0221.778] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6c600, ftCreationTime.dwHighDateTime=0x1ca50eb, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x67a6c600, ftLastWriteTime.dwHighDateTime=0x1ca50eb, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDGM_U.VST", cAlternateFileName="")) returned 1 [0221.778] wcscmp (_String1="WFDGM_U.VST", _String2=".") returned 1 [0221.778] wcscmp (_String1="WFDGM_U.VST", _String2="..") returned 1 [0221.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6a590 [0221.778] wcscpy (in: _Dest=0x7a6a590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.778] wcscat (in: _Dest=0x7a6a590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.778] wcscat (in: _Dest=0x7a6a590, _Source="WFDGM_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" [0221.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0221.780] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e2ad00, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa4e2ad00, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDLGS_M.VSS", cAlternateFileName="")) returned 1 [0221.780] wcscmp (_String1="WFDLGS_M.VSS", _String2=".") returned 1 [0221.780] wcscmp (_String1="WFDLGS_M.VSS", _String2="..") returned 1 [0221.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6a630 [0221.780] wcscpy (in: _Dest=0x7a6a630, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.780] wcscat (in: _Dest=0x7a6a630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.780] wcscat (in: _Dest=0x7a6a630, _Source="WFDLGS_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" [0221.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0221.781] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9a76100, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5bee630, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa9a76100, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFDLGS_U.VSS", cAlternateFileName="")) returned 1 [0221.781] wcscmp (_String1="WFDLGS_U.VSS", _String2=".") returned 1 [0221.781] wcscmp (_String1="WFDLGS_U.VSS", _String2="..") returned 1 [0221.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6a6d0 [0221.782] wcscpy (in: _Dest=0x7a6a6d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.782] wcscat (in: _Dest=0x7a6a6d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.782] wcscat (in: _Dest=0x7a6a6d0, _Source="WFDLGS_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" [0221.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88 [0221.783] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa14b0900, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5c60a50, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa14b0900, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xba400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFOBJ_M.VSS", cAlternateFileName="")) returned 1 [0221.783] wcscmp (_String1="WFOBJ_M.VSS", _String2=".") returned 1 [0221.783] wcscmp (_String1="WFOBJ_M.VSS", _String2="..") returned 1 [0221.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6a770 [0221.783] wcscpy (in: _Dest=0x7a6a770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.783] wcscat (in: _Dest=0x7a6a770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.783] wcscat (in: _Dest=0x7a6a770, _Source="WFOBJ_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" [0221.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8 [0221.784] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45dd900, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5c86bb0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb45dd900, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xb9800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFOBJ_U.VSS", cAlternateFileName="")) returned 1 [0221.785] wcscmp (_String1="WFOBJ_U.VSS", _String2=".") returned 1 [0221.785] wcscmp (_String1="WFOBJ_U.VSS", _String2="..") returned 1 [0221.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6a810 [0221.785] wcscpy (in: _Dest=0x7a6a810, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.785] wcscat (in: _Dest=0x7a6a810, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.785] wcscat (in: _Dest=0x7a6a810, _Source="WFOBJ_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" [0221.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c [0221.836] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50e4f00, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc50e4f00, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xa7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFSTEP_M.VSS", cAlternateFileName="")) returned 1 [0221.836] wcscmp (_String1="WFSTEP_M.VSS", _String2=".") returned 1 [0221.836] wcscmp (_String1="WFSTEP_M.VSS", _String2="..") returned 1 [0221.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6a8b0 [0221.836] wcscpy (in: _Dest=0x7a6a8b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.836] wcscat (in: _Dest=0x7a6a8b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.836] wcscat (in: _Dest=0x7a6a8b0, _Source="WFSTEP_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" [0221.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0221.838] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd48d9800, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xd48d9800, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0xa7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFSTEP_U.VSS", cAlternateFileName="")) returned 1 [0221.838] wcscmp (_String1="WFSTEP_U.VSS", _String2=".") returned 1 [0221.838] wcscmp (_String1="WFSTEP_U.VSS", _String2="..") returned 1 [0221.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6a950 [0221.838] wcscpy (in: _Dest=0x7a6a950, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.838] wcscat (in: _Dest=0x7a6a950, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.838] wcscat (in: _Dest=0x7a6a950, _Source="WFSTEP_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" [0221.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0221.839] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad3ae800, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xad3ae800, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFTLBR_M.VSS", cAlternateFileName="")) returned 1 [0221.839] wcscmp (_String1="WFTLBR_M.VSS", _String2=".") returned 1 [0221.839] wcscmp (_String1="WFTLBR_M.VSS", _String2="..") returned 1 [0221.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6a9f0 [0221.840] wcscpy (in: _Dest=0x7a6a9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.840] wcscat (in: _Dest=0x7a6a9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.840] wcscat (in: _Dest=0x7a6a9f0, _Source="WFTLBR_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" [0221.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6a9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0221.841] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1ff9c00, ftCreationTime.dwHighDateTime=0x1ca687d, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xb1ff9c00, ftLastWriteTime.dwHighDateTime=0x1ca687d, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFTLBR_U.VSS", cAlternateFileName="")) returned 1 [0221.841] wcscmp (_String1="WFTLBR_U.VSS", _String2=".") returned 1 [0221.841] wcscmp (_String1="WFTLBR_U.VSS", _String2="..") returned 1 [0221.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6aa90 [0221.841] wcscpy (in: _Dest=0x7a6aa90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.841] wcscat (in: _Dest=0x7a6aa90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.841] wcscat (in: _Dest=0x7a6aa90, _Source="WFTLBR_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" [0221.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6aa90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0221.843] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe66f3b00, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cacd10, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xe66f3b00, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x22c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFWICN_M.VSS", cAlternateFileName="")) returned 1 [0221.843] wcscmp (_String1="WFWICN_M.VSS", _String2=".") returned 1 [0221.843] wcscmp (_String1="WFWICN_M.VSS", _String2="..") returned 1 [0221.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6ab30 [0221.843] wcscpy (in: _Dest=0x7a6ab30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.843] wcscat (in: _Dest=0x7a6ab30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.843] wcscat (in: _Dest=0x7a6ab30, _Source="WFWICN_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" [0221.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6ab30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0221.844] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb33ef00, ftCreationTime.dwHighDateTime=0x1ca479c, ftLastAccessTime.dwLowDateTime=0xa5cd2e70, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xeb33ef00, ftLastWriteTime.dwHighDateTime=0x1ca479c, nFileSizeHigh=0x0, nFileSizeLow=0x22600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WFWICN_U.VSS", cAlternateFileName="")) returned 1 [0221.844] wcscmp (_String1="WFWICN_U.VSS", _String2=".") returned 1 [0221.844] wcscmp (_String1="WFWICN_U.VSS", _String2="..") returned 1 [0221.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6abd0 [0221.845] wcscpy (in: _Dest=0x7a6abd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0221.845] wcscat (in: _Dest=0x7a6abd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0221.845] wcscat (in: _Dest=0x7a6abd0, _Source="WFWICN_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" [0221.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6abd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc [0221.846] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56dcd00, ftCreationTime.dwHighDateTime=0x1ca479d, ftLastAccessTime.dwLowDateTime=0xa5cf8fd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x56dcd00, ftLastWriteTime.dwHighDateTime=0x1ca479d, nFileSizeHigh=0x0, nFileSizeLow=0xa2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_M.VSS", cAlternateFileName="")) returned 1 [0222.793] wcscmp (_String1="WRKFLO_M.VSS", _String2=".") returned 1 [0222.793] wcscmp (_String1="WRKFLO_M.VSS", _String2="..") returned 1 [0222.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6ac70 [0222.793] wcscpy (in: _Dest=0x7a6ac70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.793] wcscat (in: _Dest=0x7a6ac70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.793] wcscat (in: _Dest=0x7a6ac70, _Source="WRKFLO_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" [0222.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6ac70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258 [0222.794] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18dd7d00, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5cf8fd0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x18dd7d00, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x39a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_M.VST", cAlternateFileName="")) returned 1 [0222.794] wcscmp (_String1="WRKFLO_M.VST", _String2=".") returned 1 [0222.794] wcscmp (_String1="WRKFLO_M.VST", _String2="..") returned 1 [0222.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6ad10 [0222.794] wcscpy (in: _Dest=0x7a6ad10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.794] wcscat (in: _Dest=0x7a6ad10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.794] wcscat (in: _Dest=0x7a6ad10, _Source="WRKFLO_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" [0222.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6ad10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664 [0222.795] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e767e00, ftCreationTime.dwHighDateTime=0x1ca479d, ftLastAccessTime.dwLowDateTime=0xa5d1f130, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1e767e00, ftLastWriteTime.dwHighDateTime=0x1ca479d, nFileSizeHigh=0x0, nFileSizeLow=0x9b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_U.VSS", cAlternateFileName="")) returned 1 [0222.795] wcscmp (_String1="WRKFLO_U.VSS", _String2=".") returned 1 [0222.795] wcscmp (_String1="WRKFLO_U.VSS", _String2="..") returned 1 [0222.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6adb0 [0222.796] wcscpy (in: _Dest=0x7a6adb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.796] wcscat (in: _Dest=0x7a6adb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.796] wcscat (in: _Dest=0x7a6adb0, _Source="WRKFLO_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" [0222.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6adb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578 [0222.797] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed35e00, ftCreationTime.dwHighDateTime=0x1ca48f0, ftLastAccessTime.dwLowDateTime=0xa5d1f130, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x1ed35e00, ftLastWriteTime.dwHighDateTime=0x1ca48f0, nFileSizeHigh=0x0, nFileSizeLow=0x39800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WRKFLO_U.VST", cAlternateFileName="")) returned 1 [0222.797] wcscmp (_String1="WRKFLO_U.VST", _String2=".") returned 1 [0222.797] wcscmp (_String1="WRKFLO_U.VST", _String2="..") returned 1 [0222.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6ae50 [0222.797] wcscpy (in: _Dest=0x7a6ae50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.797] wcscat (in: _Dest=0x7a6ae50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.797] wcscat (in: _Dest=0x7a6ae50, _Source="WRKFLO_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" [0222.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6ae50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0 [0222.798] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f28e100, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d45290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x2f28e100, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x74400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSISS_M.VST", cAlternateFileName="")) returned 1 [0222.798] wcscmp (_String1="WSSISS_M.VST", _String2=".") returned 1 [0222.798] wcscmp (_String1="WSSISS_M.VST", _String2="..") returned 1 [0222.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6aef0 [0222.798] wcscpy (in: _Dest=0x7a6aef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.798] wcscat (in: _Dest=0x7a6aef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.799] wcscat (in: _Dest=0x7a6aef0, _Source="WSSISS_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" [0222.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6aef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64 [0222.800] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d0a600, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d45290, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x26d0a600, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x72a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSISS_U.VST", cAlternateFileName="")) returned 1 [0222.800] wcscmp (_String1="WSSISS_U.VST", _String2=".") returned 1 [0222.800] wcscmp (_String1="WSSISS_U.VST", _String2="..") returned 1 [0222.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6af90 [0222.800] wcscpy (in: _Dest=0x7a6af90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.800] wcscat (in: _Dest=0x7a6af90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.800] wcscat (in: _Dest=0x7a6af90, _Source="WSSISS_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" [0222.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6af90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484 [0222.801] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436cde00, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x436cde00, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSTSK_M.VST", cAlternateFileName="")) returned 1 [0222.801] wcscmp (_String1="WSSTSK_M.VST", _String2=".") returned 1 [0222.801] wcscmp (_String1="WSSTSK_M.VST", _String2="..") returned 1 [0222.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6b030 [0222.801] wcscpy (in: _Dest=0x7a6b030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.801] wcscat (in: _Dest=0x7a6b030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.801] wcscat (in: _Dest=0x7a6b030, _Source="WSSTSK_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" [0222.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6b030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0222.802] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e37600, ftCreationTime.dwHighDateTime=0x1ca5bef, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x39e37600, ftLastWriteTime.dwHighDateTime=0x1ca5bef, nFileSizeHigh=0x0, nFileSizeLow=0x8be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSTSK_U.VST", cAlternateFileName="")) returned 1 [0222.802] wcscmp (_String1="WSSTSK_U.VST", _String2=".") returned 1 [0222.802] wcscmp (_String1="WSSTSK_U.VST", _String2="..") returned 1 [0222.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7a6b0d0 [0222.803] wcscpy (in: _Dest=0x7a6b0d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.803] wcscat (in: _Dest=0x7a6b0d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.803] wcscat (in: _Dest=0x7a6b0d0, _Source="WSSTSK_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" [0222.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6b0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x187c [0222.804] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d3ec00, ftCreationTime.dwHighDateTime=0x1ca5d6c, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xc2d3ec00, ftLastWriteTime.dwHighDateTime=0x1ca5d6c, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_M.VSS", cAlternateFileName="")) returned 1 [0222.804] wcscmp (_String1="XFUNC_M.VSS", _String2=".") returned 1 [0222.804] wcscmp (_String1="XFUNC_M.VSS", _String2="..") returned 1 [0222.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6b170 [0222.804] wcscpy (in: _Dest=0x7a6b170, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.804] wcscat (in: _Dest=0x7a6b170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.804] wcscat (in: _Dest=0x7a6b170, _Source="XFUNC_M.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" [0222.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6b170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0222.805] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83139600, ftCreationTime.dwHighDateTime=0x1ca4e8b, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x83139600, ftLastWriteTime.dwHighDateTime=0x1ca4e8b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_M.VST", cAlternateFileName="")) returned 1 [0222.805] wcscmp (_String1="XFUNC_M.VST", _String2=".") returned 1 [0222.805] wcscmp (_String1="XFUNC_M.VST", _String2="..") returned 1 [0222.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6b210 [0222.805] wcscpy (in: _Dest=0x7a6b210, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.805] wcscat (in: _Dest=0x7a6b210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.805] wcscat (in: _Dest=0x7a6b210, _Source="XFUNC_M.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" [0222.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6b210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0222.806] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9aa0200, ftCreationTime.dwHighDateTime=0x1ca5d6c, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xf9aa0200, ftLastWriteTime.dwHighDateTime=0x1ca5d6c, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_U.VSS", cAlternateFileName="")) returned 1 [0222.806] wcscmp (_String1="XFUNC_U.VSS", _String2=".") returned 1 [0222.806] wcscmp (_String1="XFUNC_U.VSS", _String2="..") returned 1 [0222.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6b2b0 [0222.806] wcscpy (in: _Dest=0x7a6b2b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.806] wcscat (in: _Dest=0x7a6b2b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.806] wcscat (in: _Dest=0x7a6b2b0, _Source="XFUNC_U.VSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" [0222.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6b2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1960 [0222.807] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9cfe00, ftCreationTime.dwHighDateTime=0x1ca4e8b, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8c9cfe00, ftLastWriteTime.dwHighDateTime=0x1ca4e8b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_U.VST", cAlternateFileName="")) returned 1 [0222.807] wcscmp (_String1="XFUNC_U.VST", _String2=".") returned 1 [0222.807] wcscmp (_String1="XFUNC_U.VST", _String2="..") returned 1 [0222.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x94) returned 0x7a6b350 [0222.807] wcscpy (in: _Dest=0x7a6b350, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033" [0222.807] wcscat (in: _Dest=0x7a6b350, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\" [0222.807] wcscat (in: _Dest=0x7a6b350, _Source="XFUNC_U.VST" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST") returned="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" [0222.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a6b350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0222.808] FindNextFileW (in: hFindFile=0x7a2d640, lpFindFileData=0x7a3c680 | out: lpFindFileData=0x7a3c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9cfe00, ftCreationTime.dwHighDateTime=0x1ca4e8b, ftLastAccessTime.dwLowDateTime=0xa5d6b3f0, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0x8c9cfe00, ftLastWriteTime.dwHighDateTime=0x1ca4e8b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC_U.VST", cAlternateFileName="")) returned 0 [0222.887] FindClose (in: hFindFile=0x7a2d640 | out: hFindFile=0x7a2d640) returned 1 [0225.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c680) returned 1 [0225.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69c30) returned 1 [0225.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 5666 os_tid = 0x508 [0183.981] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json")) returned 0x2020 [0183.981] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0186.510] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1088 [0186.522] GetFileSizeEx (in: hFile=0x1088, lpFileSize=0x83bfdf4 | out: lpFileSize=0x83bfdf4*=11770) returned 1 [0186.522] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x2df6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.522] ReadFile (in: hFile=0x1088, lpBuffer=0x83bfdd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x83bfde0, lpOverlapped=0x0 | out: lpBuffer=0x83bfdd0*, lpNumberOfBytesRead=0x83bfde0*=0x4, lpOverlapped=0x0) returned 1 [0186.527] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0186.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0186.527] NtQuerySystemTime (in: CurrentTime=0x83bfd68 | out: CurrentTime=0x83bfd68*=132462177651084000) returned 0x0 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x1b9de33c [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x3e8ad2f3 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x78490823 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x6797d051 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x509c2096 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x5adc00ff [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x394e2ad1 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x1acf9144 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x217be1df [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0xadd6d3d [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x58e7bf53 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x29e2c7b1 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x4ef49922 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x1dd5d1b1 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x3480a225 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x2566bf0c [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x2c55ddb4 [0186.527] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x8cea172 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x607eeff7 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x536be74e [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x1d995f74 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0xacaadc4 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x21038d2 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x3b480726 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x17d1b325 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x18148d63 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0xeb7d651 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x19945679 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x305b5acf [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x2f175e7f [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x4b879659 [0186.528] RtlRandomEx (in: Seed=0x83bfd60 | out: Seed=0x83bfd60) returned 0x760ced66 [0186.537] ReadFile (in: hFile=0x1088, lpBuffer=0x7d5b7b8, nNumberOfBytesToRead=0x2dfa, lpNumberOfBytesRead=0x83bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x7d5b7b8*, lpNumberOfBytesRead=0x83bfd5c*=0x2dfa, lpOverlapped=0x0) returned 1 [0186.538] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.538] WriteFile (in: hFile=0x1088, lpBuffer=0x7d5f3c0*, nNumberOfBytesToWrite=0x2dfa, lpNumberOfBytesWritten=0x83bfd60, lpOverlapped=0x0 | out: lpBuffer=0x7d5f3c0*, lpNumberOfBytesWritten=0x83bfd60*=0x2dfa, lpOverlapped=0x0) returned 1 [0190.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0190.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0190.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0190.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d5f3c0) returned 1 [0190.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d5b7b8) returned 1 [0190.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0190.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84e40) returned 1 [0190.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e84e40 [0190.518] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.518] WriteFile (in: hFile=0x1088, lpBuffer=0x7cb04c0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x83bfde8, lpOverlapped=0x0 | out: lpBuffer=0x7cb04c0*, lpNumberOfBytesWritten=0x83bfde8*=0x11e, lpOverlapped=0x0) returned 1 [0192.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41650 [0192.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd88 [0192.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0192.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0192.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0192.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0192.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0192.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0192.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0192.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41650) returned 1 [0192.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1f358 [0192.534] sprintf (in: _Dest=0x3e1f358, _Format="%c%c" | out: _Dest="90") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f35a, _Format="%c%c" | out: _Dest="9b") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f35c, _Format="%c%c" | out: _Dest="9e") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f35e, _Format="%c%c" | out: _Dest="99") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f360, _Format="%c%c" | out: _Dest="47") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f362, _Format="%c%c" | out: _Dest="ef") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f364, _Format="%c%c" | out: _Dest="69") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f366, _Format="%c%c" | out: _Dest="fd") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f368, _Format="%c%c" | out: _Dest="73") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f36a, _Format="%c%c" | out: _Dest="16") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f36c, _Format="%c%c" | out: _Dest="72") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f36e, _Format="%c%c" | out: _Dest="e7") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f370, _Format="%c%c" | out: _Dest="6d") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f372, _Format="%c%c" | out: _Dest="fa") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f374, _Format="%c%c" | out: _Dest="0a") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f376, _Format="%c%c" | out: _Dest="64") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f378, _Format="%c%c" | out: _Dest="75") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f37a, _Format="%c%c" | out: _Dest="3f") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f37c, _Format="%c%c" | out: _Dest="91") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f37e, _Format="%c%c" | out: _Dest="2f") returned 2 [0192.535] sprintf (in: _Dest=0x3e1f380, _Format="%c%c" | out: _Dest="bd") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f382, _Format="%c%c" | out: _Dest="62") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f384, _Format="%c%c" | out: _Dest="27") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f386, _Format="%c%c" | out: _Dest="8c") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f388, _Format="%c%c" | out: _Dest="a2") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f38a, _Format="%c%c" | out: _Dest="a9") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f38c, _Format="%c%c" | out: _Dest="0b") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f38e, _Format="%c%c" | out: _Dest="b9") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f390, _Format="%c%c" | out: _Dest="aa") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f392, _Format="%c%c" | out: _Dest="30") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f394, _Format="%c%c" | out: _Dest="d8") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f396, _Format="%c%c" | out: _Dest="88") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f398, _Format="%c%c" | out: _Dest="ef") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f39a, _Format="%c%c" | out: _Dest="ec") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f39c, _Format="%c%c" | out: _Dest="8e") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f39e, _Format="%c%c" | out: _Dest="62") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f3a0, _Format="%c%c" | out: _Dest="30") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f3a2, _Format="%c%c" | out: _Dest="87") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f3a4, _Format="%c%c" | out: _Dest="8f") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f3a6, _Format="%c%c" | out: _Dest="3c") returned 2 [0192.536] sprintf (in: _Dest=0x3e1f3a8, _Format="%c%c" | out: _Dest="b1") returned 2 [0192.537] sprintf (in: _Dest=0x3e1f3aa, _Format="%c%c" | out: _Dest="8a") returned 2 [0192.537] sprintf (in: _Dest=0x3e1f3ac, _Format="%c%c" | out: _Dest="23") returned 2 [0192.537] sprintf (in: _Dest=0x3e1f3ae, _Format="%c%c" | out: _Dest="84") returned 2 [0192.537] RtlInitAnsiString (in: DestinationString=0x83bfd70, SourceString="909b9e9947ef69fd731672e76dfa0a64753f912fbd62278ca2a90bb9aa30d888efec8e6230878f3cb18a2384" | out: DestinationString="909b9e9947ef69fd731672e76dfa0a64753f912fbd62278ca2a90bb9aa30d888efec8e6230878f3cb18a2384") [0192.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x83bfd68, SourceString="909b9e9947ef69fd731672e76dfa0a64753f912fbd62278ca2a90bb9aa30d888efec8e6230878f3cb18a2384", AllocateDestinationString=1 | out: DestinationString="909b9e9947ef69fd731672e76dfa0a64753f912fbd62278ca2a90bb9aa30d888efec8e6230878f3cb18a2384") returned 0x0 [0192.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333fa8 [0192.537] RtlFreeAnsiString (AnsiString="9") [0192.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 [0192.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0192.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0192.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb04c0) returned 1 [0192.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84ed0) returned 1 [0192.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0192.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84e40) returned 1 [0192.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0192.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0192.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0192.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0192.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2eb0 [0192.538] wcscat (in: _Dest=0x3ea2eb0, _Source="909b9e9947ef69fd731672" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\909b9e9947ef69fd731672") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\909b9e9947ef69fd731672" [0192.539] wcscat (in: _Dest=0x3ea2eb0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\909b9e9947ef69fd731672.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\909b9e9947ef69fd731672.68814f" [0192.539] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\909b9e9947ef69fd731672.68814f", NtPathName=0x83bfd60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\909b9e9947ef69fd731672.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x150) returned 0x3e0aac0 [0192.539] NtSetInformationFile (FileHandle=0x1088, IoStatusBlock=0x83bfd68, FileInformation=0x3e0aac0, Length=0x150, FileInformationClass=0xa) returned 0x0 [0192.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0aac0) returned 1 [0192.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4e090) returned 1 [0192.699] NtQueryInformationFile (in: FileHandle=0x1088, IoStatusBlock=0x83bfd38, FileInformation=0x83bfd40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x83bfd38, FileInformation=0x83bfd40) returned 0x0 [0192.699] NtSetInformationFile (FileHandle=0x1088, IoStatusBlock=0x83bfd38, FileInformation=0x83bfd40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0192.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 [0192.773] FlushFileBuffers (hFile=0x1088) returned 1 [0192.778] CloseHandle (hObject=0x1088) returned 1 [0192.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca2e8 [0192.867] wcscpy (in: _Dest=0x3eca2e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\" [0192.867] wcscat (in: _Dest=0x3eca2e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\68814F-Readme.txt" [0192.867] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\68814f-readme.txt")) returned 0xffffffff [0192.867] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0193.156] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x83bfd7c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x83bfd7c*=0x8b9, lpOverlapped=0x0) returned 1 [0193.158] CloseHandle (hObject=0x1518) returned 1 [0193.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca2e8) returned 1 [0193.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9e08) returned 1 Thread: id = 5667 os_tid = 0x520 [0183.982] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json")) returned 0x2020 [0183.982] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0186.538] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc6c [0186.539] GetFileSizeEx (in: hFile=0xc6c, lpFileSize=0x40cf8f4 | out: lpFileSize=0x40cf8f4*=9862) returned 1 [0186.539] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x2682, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.539] ReadFile (in: hFile=0xc6c, lpBuffer=0x40cf8d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x40cf8e0, lpOverlapped=0x0 | out: lpBuffer=0x40cf8d0*, lpNumberOfBytesRead=0x40cf8e0*=0x4, lpOverlapped=0x0) returned 1 [0186.541] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0186.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0186.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0186.541] NtQuerySystemTime (in: CurrentTime=0x40cf868 | out: CurrentTime=0x40cf868*=132462177651240000) returned 0x0 [0186.541] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x3d566965 [0186.541] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x69d957a2 [0186.541] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x7f82be20 [0186.541] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x5446d97e [0186.541] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x276ea839 [0186.541] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0xee60588 [0186.541] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x75a543a6 [0186.541] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x7bdd0387 [0186.541] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x5cb1c96a [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0xe5f2ca0 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x140e0eb5 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x53416726 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x5ed2f3b8 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x6c7f02f9 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x58c05d22 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x26df8a31 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0xb32d537 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x4ecfb78a [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0xd4c9162 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x1a3d2aa5 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0xe0df54c [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x5c638221 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x6b382baf [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x27b30026 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x3391eb3e [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x242c7591 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x4ccd17a0 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x478a2a33 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x3a382bbc [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x429d684b [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0x57df054 [0186.542] RtlRandomEx (in: Seed=0x40cf860 | out: Seed=0x40cf860) returned 0xa80a4c1 [0186.551] ReadFile (in: hFile=0xc6c, lpBuffer=0x7d62fc8, nNumberOfBytesToRead=0x2686, lpNumberOfBytesRead=0x40cf85c, lpOverlapped=0x0 | out: lpBuffer=0x7d62fc8*, lpNumberOfBytesRead=0x40cf85c*=0x2686, lpOverlapped=0x0) returned 1 [0186.552] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.552] WriteFile (in: hFile=0xc6c, lpBuffer=0x7d66bd0*, nNumberOfBytesToWrite=0x2686, lpNumberOfBytesWritten=0x40cf860, lpOverlapped=0x0 | out: lpBuffer=0x7d66bd0*, lpNumberOfBytesWritten=0x40cf860*=0x2686, lpOverlapped=0x0) returned 1 [0187.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0187.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0187.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0187.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d66bd0) returned 1 [0187.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d62fc8) returned 1 [0187.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0187.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0187.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e85080 [0187.619] SetFilePointerEx (in: hFile=0xc6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.619] WriteFile (in: hFile=0xc6c, lpBuffer=0x7ca94f0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x40cf8e8, lpOverlapped=0x0 | out: lpBuffer=0x7ca94f0*, lpNumberOfBytesWritten=0x40cf8e8*=0x11e, lpOverlapped=0x0) returned 1 [0187.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25038 [0187.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0187.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e340 [0187.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e340) returned 1 [0187.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0187.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e340 [0187.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0187.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0187.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25038) returned 1 [0187.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1f358 [0187.736] sprintf (in: _Dest=0x3e1f358, _Format="%c%c" | out: _Dest="90") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f35a, _Format="%c%c" | out: _Dest="e3") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f35c, _Format="%c%c" | out: _Dest="ff") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f35e, _Format="%c%c" | out: _Dest="c8") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f360, _Format="%c%c" | out: _Dest="a0") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f362, _Format="%c%c" | out: _Dest="3d") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f364, _Format="%c%c" | out: _Dest="aa") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f366, _Format="%c%c" | out: _Dest="99") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f368, _Format="%c%c" | out: _Dest="56") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f36a, _Format="%c%c" | out: _Dest="4b") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f36c, _Format="%c%c" | out: _Dest="2b") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f36e, _Format="%c%c" | out: _Dest="df") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f370, _Format="%c%c" | out: _Dest="14") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f372, _Format="%c%c" | out: _Dest="a5") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f374, _Format="%c%c" | out: _Dest="1b") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f376, _Format="%c%c" | out: _Dest="53") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f378, _Format="%c%c" | out: _Dest="48") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f37a, _Format="%c%c" | out: _Dest="51") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f37c, _Format="%c%c" | out: _Dest="f4") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f37e, _Format="%c%c" | out: _Dest="9e") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f380, _Format="%c%c" | out: _Dest="69") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f382, _Format="%c%c" | out: _Dest="d4") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f384, _Format="%c%c" | out: _Dest="c4") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f386, _Format="%c%c" | out: _Dest="6c") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f388, _Format="%c%c" | out: _Dest="17") returned 2 [0187.736] sprintf (in: _Dest=0x3e1f38a, _Format="%c%c" | out: _Dest="1a") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f38c, _Format="%c%c" | out: _Dest="3d") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f38e, _Format="%c%c" | out: _Dest="44") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f390, _Format="%c%c" | out: _Dest="60") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f392, _Format="%c%c" | out: _Dest="04") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f394, _Format="%c%c" | out: _Dest="ff") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f396, _Format="%c%c" | out: _Dest="3f") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f398, _Format="%c%c" | out: _Dest="c7") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f39a, _Format="%c%c" | out: _Dest="23") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f39c, _Format="%c%c" | out: _Dest="db") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f39e, _Format="%c%c" | out: _Dest="33") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f3a0, _Format="%c%c" | out: _Dest="a2") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f3a2, _Format="%c%c" | out: _Dest="89") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f3a4, _Format="%c%c" | out: _Dest="b1") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f3a6, _Format="%c%c" | out: _Dest="de") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f3a8, _Format="%c%c" | out: _Dest="12") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f3aa, _Format="%c%c" | out: _Dest="3c") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f3ac, _Format="%c%c" | out: _Dest="0d") returned 2 [0187.737] sprintf (in: _Dest=0x3e1f3ae, _Format="%c%c" | out: _Dest="6f") returned 2 [0187.737] RtlInitAnsiString (in: DestinationString=0x40cf870, SourceString="90e3ffc8a03daa99564b2bdf14a51b534851f49e69d4c46c171a3d446004ff3fc723db33a289b1de123c0d6f" | out: DestinationString="90e3ffc8a03daa99564b2bdf14a51b534851f49e69d4c46c171a3d446004ff3fc723db33a289b1de123c0d6f") [0187.737] RtlAnsiStringToUnicodeString (in: DestinationString=0x40cf868, SourceString="90e3ffc8a03daa99564b2bdf14a51b534851f49e69d4c46c171a3d446004ff3fc723db33a289b1de123c0d6f", AllocateDestinationString=1 | out: DestinationString="90e3ffc8a03daa99564b2bdf14a51b534851f49e69d4c46c171a3d446004ff3fc723db33a289b1de123c0d6f") returned 0x0 [0187.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3336a8 [0187.737] wcscat (in: _Dest=0x3ea2eb0, _Source="90e3ffc8a03daa99564b2b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\90e3ffc8a03daa99564b2b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\90e3ffc8a03daa99564b2b" [0187.737] wcscat (in: _Dest=0x3ea2eb0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\90e3ffc8a03daa99564b2b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\90e3ffc8a03daa99564b2b.68814f" [0187.738] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\90e3ffc8a03daa99564b2b.68814f", NtPathName=0x40cf860, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\90e3ffc8a03daa99564b2b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e0aac0 [0187.808] FlushFileBuffers (hFile=0xc6c) returned 1 [0187.814] CloseHandle (hObject=0xc6c) returned 1 [0187.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7ca9ab8 [0187.826] wcscpy (in: _Dest=0x7ca9ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\" [0187.826] wcscat (in: _Dest=0x7ca9ab8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\68814F-Readme.txt" [0187.826] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\68814f-readme.txt")) returned 0xffffffff [0187.826] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1920 [0187.842] WriteFile (in: hFile=0x1920, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x40cf87c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x40cf87c*=0x8b9, lpOverlapped=0x0) returned 1 [0187.852] CloseHandle (hObject=0x1920) returned 1 [0187.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9ab8) returned 1 [0187.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9928) returned 1 Thread: id = 5668 os_tid = 0x6b0 [0183.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7b7c668 [0183.983] wcscpy (in: _Dest=0x7b7c668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales" [0183.983] wcscat (in: _Dest=0x7b7c668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\" [0183.983] wcscat (in: _Dest=0x7b7c668, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\*" [0183.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a738 [0183.983] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\__MACOSX\\_locales\\*", lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0183.983] wcscmp (_String1=".", _String2=".") returned 0 [0183.983] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.983] wcscmp (_String1="..", _String2=".") returned 1 [0183.983] wcscmp (_String1="..", _String2="..") returned 0 [0183.983] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.983] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0183.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a738) returned 1 [0183.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c668) returned 1 [0183.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a385e8) returned 1 Thread: id = 5669 os_tid = 0xc20 [0183.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7c000 [0183.985] wcscpy (in: _Dest=0x7b7c000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" [0183.985] wcscat (in: _Dest=0x7b7c000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" [0183.985] wcscat (in: _Dest=0x7b7c000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\*" [0183.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a738 [0183.985] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\*", lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0183.986] wcscmp (_String1=".", _String2=".") returned 0 [0183.986] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.986] wcscmp (_String1="..", _String2=".") returned 1 [0183.986] wcscmp (_String1="..", _String2="..") returned 0 [0183.986] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0183.986] wcscmp (_String1="messages.json", _String2=".") returned 1 [0183.986] wcscmp (_String1="messages.json", _String2="..") returned 1 [0183.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d55718 [0183.986] wcscpy (in: _Dest=0x3d55718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar" [0183.986] wcscat (in: _Dest=0x3d55718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" [0183.986] wcscat (in: _Dest=0x3d55718, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" [0185.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0185.731] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.731] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0185.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a738) returned 1 [0185.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c000) returned 1 [0185.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f170) returned 1 Thread: id = 5670 os_tid = 0xc28 [0183.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7c108 [0183.987] wcscpy (in: _Dest=0x7b7c108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" [0183.987] wcscat (in: _Dest=0x7b7c108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" [0183.987] wcscat (in: _Dest=0x7b7c108, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\*" [0183.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b810 [0183.987] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\*", lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0185.492] wcscmp (_String1=".", _String2=".") returned 0 [0185.492] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.492] wcscmp (_String1="..", _String2=".") returned 1 [0185.492] wcscmp (_String1="..", _String2="..") returned 0 [0185.492] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.492] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.493] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b81db8 [0185.493] wcscpy (in: _Dest=0x7b81db8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg" [0185.493] wcscat (in: _Dest=0x7b81db8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" [0185.493] wcscat (in: _Dest=0x7b81db8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" [0190.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458 [0190.888] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.888] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0190.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b810) returned 1 [0190.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c108) returned 1 [0190.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea3b8) returned 1 Thread: id = 5671 os_tid = 0xc24 [0183.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e320 [0183.988] wcscpy (in: _Dest=0x7b7e320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" [0183.988] wcscat (in: _Dest=0x7b7e320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" [0183.988] wcscat (in: _Dest=0x7b7e320, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\*" [0183.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3e0f8 [0183.988] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\*", lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0185.388] wcscmp (_String1=".", _String2=".") returned 0 [0185.388] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.388] wcscmp (_String1="..", _String2=".") returned 1 [0185.388] wcscmp (_String1="..", _String2="..") returned 0 [0185.388] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.388] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.388] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b816c8 [0185.388] wcscpy (in: _Dest=0x7b816c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca" [0185.388] wcscat (in: _Dest=0x7b816c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" [0185.388] wcscat (in: _Dest=0x7b816c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" [0192.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b816c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0192.200] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.200] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0192.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3e0f8) returned 1 [0192.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e320) returned 1 [0192.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de9eb8) returned 1 Thread: id = 5672 os_tid = 0xc1c [0183.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e428 [0183.989] wcscpy (in: _Dest=0x7b7e428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" [0183.989] wcscat (in: _Dest=0x7b7e428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" [0183.989] wcscat (in: _Dest=0x7b7e428, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\*" [0183.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3cdb8 [0183.989] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\*", lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0185.491] wcscmp (_String1=".", _String2=".") returned 0 [0185.492] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.492] wcscmp (_String1="..", _String2=".") returned 1 [0185.492] wcscmp (_String1="..", _String2="..") returned 0 [0185.492] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.492] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.492] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b81c90 [0185.492] wcscpy (in: _Dest=0x7b81c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs" [0185.492] wcscat (in: _Dest=0x7b81c90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" [0185.492] wcscat (in: _Dest=0x7b81c90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" [0188.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08 [0188.401] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.401] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0188.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3cdb8) returned 1 [0188.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e428) returned 1 [0188.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de8eb8) returned 1 Thread: id = 5673 os_tid = 0x21e0 [0183.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e530 [0183.989] wcscpy (in: _Dest=0x7b7e530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" [0183.989] wcscat (in: _Dest=0x7b7e530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" [0183.989] wcscat (in: _Dest=0x7b7e530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\*" [0183.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4638 [0183.990] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\*", lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0185.491] wcscmp (_String1=".", _String2=".") returned 0 [0185.491] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.491] wcscmp (_String1="..", _String2=".") returned 1 [0185.491] wcscmp (_String1="..", _String2="..") returned 0 [0185.491] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.491] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.491] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b81b68 [0185.491] wcscpy (in: _Dest=0x7b81b68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da" [0185.491] wcscat (in: _Dest=0x7b81b68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" [0185.491] wcscat (in: _Dest=0x7b81b68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" [0190.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0190.884] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd50b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.884] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0190.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4638) returned 1 [0190.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e530) returned 1 [0190.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de73b8) returned 1 Thread: id = 5674 os_tid = 0xbd4 [0183.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e638 [0183.990] wcscpy (in: _Dest=0x7b7e638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" [0183.990] wcscat (in: _Dest=0x7b7e638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" [0183.990] wcscat (in: _Dest=0x7b7e638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\*" [0183.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2e28 [0183.990] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\*", lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0185.387] wcscmp (_String1=".", _String2=".") returned 0 [0185.387] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.387] wcscmp (_String1="..", _String2=".") returned 1 [0185.387] wcscmp (_String1="..", _String2="..") returned 0 [0185.387] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.387] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.387] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b815a0 [0185.387] wcscpy (in: _Dest=0x7b815a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de" [0185.387] wcscat (in: _Dest=0x7b815a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" [0185.387] wcscat (in: _Dest=0x7b815a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" [0185.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b815a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0185.477] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.477] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0185.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2e28) returned 1 [0185.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e638) returned 1 [0185.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f270) returned 1 Thread: id = 5675 os_tid = 0xad0 [0183.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e740 [0183.991] wcscpy (in: _Dest=0x7b7e740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" [0183.991] wcscat (in: _Dest=0x7b7e740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" [0183.991] wcscat (in: _Dest=0x7b7e740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\*" [0183.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0183.991] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0185.389] wcscmp (_String1=".", _String2=".") returned 0 [0185.389] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.389] wcscmp (_String1="..", _String2=".") returned 1 [0185.389] wcscmp (_String1="..", _String2="..") returned 0 [0185.389] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.389] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.389] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b817f0 [0185.389] wcscpy (in: _Dest=0x7b817f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el" [0185.389] wcscat (in: _Dest=0x7b817f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" [0185.389] wcscat (in: _Dest=0x7b817f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" [0185.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b817f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0185.607] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e47ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.608] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0185.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0185.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e740) returned 1 [0185.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f370) returned 1 Thread: id = 5676 os_tid = 0xacc [0183.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e848 [0183.991] wcscpy (in: _Dest=0x7b7e848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" [0183.991] wcscat (in: _Dest=0x7b7e848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" [0183.991] wcscat (in: _Dest=0x7b7e848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\*" [0183.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0183.992] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0185.509] wcscmp (_String1=".", _String2=".") returned 0 [0185.509] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.509] wcscmp (_String1="..", _String2=".") returned 1 [0185.509] wcscmp (_String1="..", _String2="..") returned 0 [0185.509] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.509] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.509] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b836c8 [0185.509] wcscpy (in: _Dest=0x7b836c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en" [0185.509] wcscat (in: _Dest=0x7b836c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" [0185.509] wcscat (in: _Dest=0x7b836c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" [0185.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b836c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0185.652] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.652] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0185.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0185.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e848) returned 1 [0185.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f470) returned 1 Thread: id = 5677 os_tid = 0xac8 [0183.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e950 [0183.992] wcscpy (in: _Dest=0x7b7e950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" [0183.992] wcscat (in: _Dest=0x7b7e950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" [0183.992] wcscat (in: _Dest=0x7b7e950, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\*" [0183.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0183.992] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f516a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d400 [0185.508] wcscmp (_String1=".", _String2=".") returned 0 [0185.508] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f516a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f516a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.508] wcscmp (_String1="..", _String2=".") returned 1 [0185.508] wcscmp (_String1="..", _String2="..") returned 0 [0185.508] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.508] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.508] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b835a0 [0185.508] wcscpy (in: _Dest=0x7b835a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es" [0185.508] wcscat (in: _Dest=0x7b835a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" [0185.508] wcscat (in: _Dest=0x7b835a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" [0185.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b835a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c [0185.650] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f516a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.650] FindClose (in: hFindFile=0x7a2d400 | out: hFindFile=0x7a2d400) returned 1 [0185.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0185.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e950) returned 1 [0185.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f570) returned 1 Thread: id = 5678 os_tid = 0xb14 [0183.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7ea58 [0183.993] wcscpy (in: _Dest=0x7b7ea58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" [0183.993] wcscat (in: _Dest=0x7b7ea58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" [0183.993] wcscat (in: _Dest=0x7b7ea58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\*" [0183.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef37c8 [0183.993] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\*", lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0185.507] wcscmp (_String1=".", _String2=".") returned 0 [0185.507] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.507] wcscmp (_String1="..", _String2=".") returned 1 [0185.507] wcscmp (_String1="..", _String2="..") returned 0 [0185.507] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.507] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.507] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b83478 [0185.507] wcscpy (in: _Dest=0x7b83478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi" [0185.507] wcscat (in: _Dest=0x7b83478, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" [0185.508] wcscat (in: _Dest=0x7b83478, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" [0185.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0185.648] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.648] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0185.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0185.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ea58) returned 1 [0185.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f670) returned 1 Thread: id = 5679 os_tid = 0x308 [0183.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7b7eb60 [0183.993] wcscpy (in: _Dest=0x7b7eb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" [0183.993] wcscat (in: _Dest=0x7b7eb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" [0183.994] wcscat (in: _Dest=0x7b7eb60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\*" [0183.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2220 [0183.994] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\*", lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0185.506] wcscmp (_String1=".", _String2=".") returned 0 [0185.506] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.506] wcscmp (_String1="..", _String2=".") returned 1 [0185.506] wcscmp (_String1="..", _String2="..") returned 0 [0185.507] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.507] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.507] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7b83350 [0185.507] wcscpy (in: _Dest=0x7b83350, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil" [0185.507] wcscat (in: _Dest=0x7b83350, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" [0185.507] wcscat (in: _Dest=0x7b83350, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" [0185.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0185.646] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.646] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0185.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2220) returned 1 [0185.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7eb60) returned 1 [0185.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f770) returned 1 Thread: id = 5680 os_tid = 0xb44 [0183.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7ec68 [0183.994] wcscpy (in: _Dest=0x7b7ec68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" [0183.994] wcscat (in: _Dest=0x7b7ec68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" [0183.994] wcscat (in: _Dest=0x7b7ec68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\*" [0183.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5240 [0183.994] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\*", lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d5c0 [0185.506] wcscmp (_String1=".", _String2=".") returned 0 [0185.506] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.506] wcscmp (_String1="..", _String2=".") returned 1 [0185.506] wcscmp (_String1="..", _String2="..") returned 0 [0185.506] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.506] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.506] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b83228 [0185.506] wcscpy (in: _Dest=0x7b83228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr" [0185.506] wcscat (in: _Dest=0x7b83228, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" [0185.506] wcscat (in: _Dest=0x7b83228, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" [0185.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0185.645] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.645] FindClose (in: hFindFile=0x7a2d5c0 | out: hFindFile=0x7a2d5c0) returned 1 [0185.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5240) returned 1 [0185.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ec68) returned 1 [0185.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f870) returned 1 Thread: id = 5681 os_tid = 0xb78 [0183.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7ed70 [0183.995] wcscpy (in: _Dest=0x7b7ed70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" [0183.995] wcscat (in: _Dest=0x7b7ed70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" [0183.995] wcscat (in: _Dest=0x7b7ed70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\*" [0183.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0183.995] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0185.504] wcscmp (_String1=".", _String2=".") returned 0 [0185.504] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.504] wcscmp (_String1="..", _String2=".") returned 1 [0185.504] wcscmp (_String1="..", _String2="..") returned 0 [0185.505] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.505] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.505] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b83100 [0185.505] wcscpy (in: _Dest=0x7b83100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi" [0185.505] wcscat (in: _Dest=0x7b83100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" [0185.505] wcscat (in: _Dest=0x7b83100, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" [0185.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0185.642] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.643] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0185.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0185.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ed70) returned 1 [0185.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3f970) returned 1 Thread: id = 5682 os_tid = 0x21e4 [0183.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7ee78 [0183.996] wcscpy (in: _Dest=0x7b7ee78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" [0183.996] wcscat (in: _Dest=0x7b7ee78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" [0183.996] wcscat (in: _Dest=0x7b7ee78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\*" [0183.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef54a8 [0183.996] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\*", lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0185.504] wcscmp (_String1=".", _String2=".") returned 0 [0185.504] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.504] wcscmp (_String1="..", _String2=".") returned 1 [0185.504] wcscmp (_String1="..", _String2="..") returned 0 [0185.504] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.504] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.504] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b82fd8 [0185.504] wcscpy (in: _Dest=0x7b82fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr" [0185.504] wcscat (in: _Dest=0x7b82fd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" [0185.504] wcscat (in: _Dest=0x7b82fd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" [0185.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0185.641] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.641] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0185.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54a8) returned 1 [0185.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ee78) returned 1 [0185.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3fa70) returned 1 Thread: id = 5683 os_tid = 0x21e8 [0183.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7ef80 [0183.997] wcscpy (in: _Dest=0x7b7ef80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" [0183.997] wcscat (in: _Dest=0x7b7ef80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" [0183.997] wcscat (in: _Dest=0x7b7ef80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\*" [0183.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3c98 [0183.997] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\*", lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0185.503] wcscmp (_String1=".", _String2=".") returned 0 [0185.503] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.503] wcscmp (_String1="..", _String2=".") returned 1 [0185.503] wcscmp (_String1="..", _String2="..") returned 0 [0185.503] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.503] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.503] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b82eb0 [0185.503] wcscpy (in: _Dest=0x7b82eb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu" [0185.503] wcscat (in: _Dest=0x7b82eb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" [0185.503] wcscat (in: _Dest=0x7b82eb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" [0185.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0185.638] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.639] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0185.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c98) returned 1 [0185.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ef80) returned 1 [0185.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3fb70) returned 1 Thread: id = 5684 os_tid = 0x21ec [0183.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f088 [0183.997] wcscpy (in: _Dest=0x7b7f088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" [0183.997] wcscat (in: _Dest=0x7b7f088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" [0183.997] wcscat (in: _Dest=0x7b7f088, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\*" [0183.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0183.998] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0185.502] wcscmp (_String1=".", _String2=".") returned 0 [0185.502] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.502] wcscmp (_String1="..", _String2=".") returned 1 [0185.502] wcscmp (_String1="..", _String2="..") returned 0 [0185.502] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.502] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.502] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b82d88 [0185.502] wcscpy (in: _Dest=0x7b82d88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id" [0185.502] wcscat (in: _Dest=0x7b82d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" [0185.502] wcscat (in: _Dest=0x7b82d88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" [0185.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0185.636] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.636] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0185.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0185.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f088) returned 1 [0185.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3fc70) returned 1 Thread: id = 5685 os_tid = 0x21f0 [0183.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f190 [0183.999] wcscpy (in: _Dest=0x7b7f190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" [0183.999] wcscat (in: _Dest=0x7b7f190, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" [0183.999] wcscat (in: _Dest=0x7b7f190, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\*" [0183.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3f00 [0183.999] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\*", lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da40 [0185.501] wcscmp (_String1=".", _String2=".") returned 0 [0185.501] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.501] wcscmp (_String1="..", _String2=".") returned 1 [0185.501] wcscmp (_String1="..", _String2="..") returned 0 [0185.501] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.501] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.501] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b82c60 [0185.502] wcscpy (in: _Dest=0x7b82c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it" [0185.502] wcscat (in: _Dest=0x7b82c60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" [0185.502] wcscat (in: _Dest=0x7b82c60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" [0185.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148 [0185.634] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.634] FindClose (in: hFindFile=0x7a2da40 | out: hFindFile=0x7a2da40) returned 1 [0185.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f00) returned 1 [0185.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f190) returned 1 [0185.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3fd70) returned 1 Thread: id = 5686 os_tid = 0x21f4 [0183.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f298 [0183.999] wcscpy (in: _Dest=0x7b7f298, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" [0183.999] wcscat (in: _Dest=0x7b7f298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" [0184.000] wcscat (in: _Dest=0x7b7f298, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\*" [0184.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef43d0 [0184.000] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\*", lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d680 [0185.500] wcscmp (_String1=".", _String2=".") returned 0 [0185.501] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.501] wcscmp (_String1="..", _String2=".") returned 1 [0185.501] wcscmp (_String1="..", _String2="..") returned 0 [0185.501] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.501] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.501] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b82b38 [0185.501] wcscpy (in: _Dest=0x7b82b38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja" [0185.501] wcscat (in: _Dest=0x7b82b38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" [0185.501] wcscat (in: _Dest=0x7b82b38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" [0185.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164 [0185.632] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.632] FindClose (in: hFindFile=0x7a2d680 | out: hFindFile=0x7a2d680) returned 1 [0185.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0185.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f298) returned 1 [0185.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3fe70) returned 1 Thread: id = 5687 os_tid = 0x21f8 [0184.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f3a0 [0184.000] wcscpy (in: _Dest=0x7b7f3a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" [0184.000] wcscat (in: _Dest=0x7b7f3a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" [0184.000] wcscat (in: _Dest=0x7b7f3a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\*" [0184.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4d70 [0184.000] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\*", lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0185.500] wcscmp (_String1=".", _String2=".") returned 0 [0185.500] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.500] wcscmp (_String1="..", _String2=".") returned 1 [0185.500] wcscmp (_String1="..", _String2="..") returned 0 [0185.500] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.500] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.500] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b82a10 [0185.500] wcscpy (in: _Dest=0x7b82a10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko" [0185.500] wcscat (in: _Dest=0x7b82a10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" [0185.500] wcscat (in: _Dest=0x7b82a10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" [0185.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170 [0185.630] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.630] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0185.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d70) returned 1 [0185.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f3a0) returned 1 [0185.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ff70) returned 1 Thread: id = 5688 os_tid = 0x4e4 [0184.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f4a8 [0184.001] wcscpy (in: _Dest=0x7b7f4a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" [0184.001] wcscat (in: _Dest=0x7b7f4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" [0184.001] wcscat (in: _Dest=0x7b7f4a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\*" [0184.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0184.001] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d440 [0185.499] wcscmp (_String1=".", _String2=".") returned 0 [0185.499] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.499] wcscmp (_String1="..", _String2=".") returned 1 [0185.499] wcscmp (_String1="..", _String2="..") returned 0 [0185.499] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f5d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.499] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.499] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b828e8 [0185.499] wcscpy (in: _Dest=0x7b828e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt" [0185.499] wcscat (in: _Dest=0x7b828e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" [0185.499] wcscat (in: _Dest=0x7b828e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" [0185.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b828e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c [0185.628] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f5d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.628] FindClose (in: hFindFile=0x7a2d440 | out: hFindFile=0x7a2d440) returned 1 [0185.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0185.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f4a8) returned 1 [0185.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40070) returned 1 Thread: id = 5689 os_tid = 0x124 [0184.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f5b0 [0184.001] wcscpy (in: _Dest=0x7b7f5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" [0184.001] wcscat (in: _Dest=0x7b7f5b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" [0184.002] wcscat (in: _Dest=0x7b7f5b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\*" [0184.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5e48 [0184.002] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\*", lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0185.498] wcscmp (_String1=".", _String2=".") returned 0 [0185.498] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.498] wcscmp (_String1="..", _String2=".") returned 1 [0185.498] wcscmp (_String1="..", _String2="..") returned 0 [0185.498] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.498] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.498] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b827c0 [0185.499] wcscpy (in: _Dest=0x7b827c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv" [0185.499] wcscat (in: _Dest=0x7b827c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" [0185.499] wcscat (in: _Dest=0x7b827c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" [0185.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b827c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0 [0185.626] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.626] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0185.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e48) returned 1 [0185.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f5b0) returned 1 [0185.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40170) returned 1 Thread: id = 5690 os_tid = 0xba0 [0184.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f6b8 [0184.002] wcscpy (in: _Dest=0x7b7f6b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" [0184.002] wcscat (in: _Dest=0x7b7f6b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" [0184.002] wcscat (in: _Dest=0x7b7f6b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\*" [0184.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2958 [0184.002] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\*", lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0185.498] wcscmp (_String1=".", _String2=".") returned 0 [0185.498] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.498] wcscmp (_String1="..", _String2=".") returned 1 [0185.498] wcscmp (_String1="..", _String2="..") returned 0 [0185.498] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.498] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.498] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b82698 [0185.498] wcscpy (in: _Dest=0x7b82698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl" [0185.498] wcscat (in: _Dest=0x7b82698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" [0185.498] wcscat (in: _Dest=0x7b82698, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" [0186.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0186.869] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.869] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0186.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2958) returned 1 [0186.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f6b8) returned 1 [0186.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40270) returned 1 Thread: id = 5691 os_tid = 0xed4 [0184.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f7c0 [0184.003] wcscpy (in: _Dest=0x7b7f7c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" [0184.003] wcscat (in: _Dest=0x7b7f7c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" [0184.003] wcscat (in: _Dest=0x7b7f7c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\*" [0184.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2bc0 [0184.003] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\*", lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0185.497] wcscmp (_String1=".", _String2=".") returned 0 [0185.497] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.497] wcscmp (_String1="..", _String2=".") returned 1 [0185.497] wcscmp (_String1="..", _String2="..") returned 0 [0185.497] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.497] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.497] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b82570 [0185.497] wcscpy (in: _Dest=0x7b82570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no" [0185.497] wcscat (in: _Dest=0x7b82570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" [0185.497] wcscat (in: _Dest=0x7b82570, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" [0187.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168 [0187.180] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.180] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0187.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2bc0) returned 1 [0187.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f7c0) returned 1 [0187.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40370) returned 1 Thread: id = 5692 os_tid = 0x2280 [0184.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7f8c8 [0184.003] wcscpy (in: _Dest=0x7b7f8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" [0184.003] wcscat (in: _Dest=0x7b7f8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" [0184.004] wcscat (in: _Dest=0x7b7f8c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\*" [0184.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef48a0 [0184.004] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\*", lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0185.496] wcscmp (_String1=".", _String2=".") returned 0 [0185.496] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.496] wcscmp (_String1="..", _String2=".") returned 1 [0185.496] wcscmp (_String1="..", _String2="..") returned 0 [0185.496] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.496] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.496] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b82448 [0185.496] wcscpy (in: _Dest=0x7b82448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl" [0185.497] wcscat (in: _Dest=0x7b82448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" [0185.497] wcscat (in: _Dest=0x7b82448, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" [0187.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c [0187.177] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.177] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0187.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a0) returned 1 [0187.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f8c8) returned 1 [0187.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40470) returned 1 Thread: id = 5693 os_tid = 0x23ec [0184.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7f9d0 [0184.004] wcscpy (in: _Dest=0x7b7f9d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" [0184.004] wcscat (in: _Dest=0x7b7f9d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" [0184.004] wcscat (in: _Dest=0x7b7f9d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\*" [0184.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4b08 [0184.004] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\*", lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0185.495] wcscmp (_String1=".", _String2=".") returned 0 [0185.495] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.495] wcscmp (_String1="..", _String2=".") returned 1 [0185.495] wcscmp (_String1="..", _String2="..") returned 0 [0185.496] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.496] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.496] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7b82320 [0185.496] wcscpy (in: _Dest=0x7b82320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR" [0185.496] wcscat (in: _Dest=0x7b82320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" [0185.496] wcscat (in: _Dest=0x7b82320, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" [0187.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4 [0187.174] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.174] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0187.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b08) returned 1 [0187.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f9d0) returned 1 [0187.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc448) returned 1 Thread: id = 5694 os_tid = 0x23f0 [0184.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7fad8 [0184.005] wcscpy (in: _Dest=0x7b7fad8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" [0184.005] wcscat (in: _Dest=0x7b7fad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" [0184.005] wcscat (in: _Dest=0x7b7fad8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\*" [0184.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0184.005] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df40 [0185.494] wcscmp (_String1=".", _String2=".") returned 0 [0185.494] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.495] wcscmp (_String1="..", _String2=".") returned 1 [0185.495] wcscmp (_String1="..", _String2="..") returned 0 [0185.495] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.495] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.495] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7b82130 [0185.495] wcscpy (in: _Dest=0x7b82130, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT" [0185.495] wcscat (in: _Dest=0x7b82130, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" [0185.495] wcscat (in: _Dest=0x7b82130, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" [0190.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178 [0190.911] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.911] FindClose (in: hFindFile=0x7a2df40 | out: hFindFile=0x7a2df40) returned 1 [0190.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0190.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fad8) returned 1 [0190.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc658) returned 1 Thread: id = 5695 os_tid = 0xfb0 [0184.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7fbe0 [0184.005] wcscpy (in: _Dest=0x7b7fbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" [0184.005] wcscat (in: _Dest=0x7b7fbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" [0184.005] wcscat (in: _Dest=0x7b7fbe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\*" [0184.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef26f0 [0184.006] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\*", lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0185.494] wcscmp (_String1=".", _String2=".") returned 0 [0185.494] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.494] wcscmp (_String1="..", _String2=".") returned 1 [0185.494] wcscmp (_String1="..", _String2="..") returned 0 [0185.494] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4227000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.494] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.494] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b82008 [0185.494] wcscpy (in: _Dest=0x7b82008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro" [0185.494] wcscat (in: _Dest=0x7b82008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" [0185.494] wcscat (in: _Dest=0x7b82008, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" [0190.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210 [0190.895] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4227000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.895] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0190.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef26f0) returned 1 [0190.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fbe0) returned 1 [0190.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40570) returned 1 Thread: id = 5696 os_tid = 0x32c [0184.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7fce8 [0184.006] wcscpy (in: _Dest=0x7b7fce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" [0184.006] wcscat (in: _Dest=0x7b7fce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" [0184.006] wcscat (in: _Dest=0x7b7fce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\*" [0184.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2b50 [0184.006] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\*", lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0185.493] wcscmp (_String1=".", _String2=".") returned 0 [0185.493] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.493] wcscmp (_String1="..", _String2=".") returned 1 [0185.493] wcscmp (_String1="..", _String2="..") returned 0 [0185.493] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.493] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.493] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b81ee0 [0185.493] wcscpy (in: _Dest=0x7b81ee0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru" [0185.493] wcscat (in: _Dest=0x7b81ee0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" [0185.493] wcscat (in: _Dest=0x7b81ee0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" [0190.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1820 [0190.892] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.892] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0190.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2b50) returned 1 [0190.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fce8) returned 1 [0190.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40670) returned 1 Thread: id = 5697 os_tid = 0x3c4 [0184.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc760 [0184.182] wcscpy (in: _Dest=0x30bc760, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" [0184.182] wcscat (in: _Dest=0x30bc760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" [0184.182] wcscat (in: _Dest=0x30bc760, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\*" [0184.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52090 [0184.183] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\*", lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0185.509] wcscmp (_String1=".", _String2=".") returned 0 [0185.509] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.509] wcscmp (_String1="..", _String2=".") returned 1 [0185.510] wcscmp (_String1="..", _String2="..") returned 0 [0185.510] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.510] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.510] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b837f0 [0185.510] wcscpy (in: _Dest=0x7b837f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se" [0185.510] wcscat (in: _Dest=0x7b837f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" [0185.510] wcscat (in: _Dest=0x7b837f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" [0185.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b837f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0185.654] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.655] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0185.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52090) returned 1 [0185.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc760) returned 1 [0185.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40770) returned 1 Thread: id = 5698 os_tid = 0x7e0 [0184.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif")) returned 0x20 [0184.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif", dwFileAttributes=0x20) returned 0 [0184.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.184] GetLastError () returned 0x5 [0184.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif", dwFileAttributes=0x20) returned 0 [0184.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64330) returned 1 Thread: id = 5699 os_tid = 0x23f4 [0184.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif")) returned 0x20 [0184.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0184.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.186] GetLastError () returned 0x5 [0184.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif", dwFileAttributes=0x20) returned 0 [0184.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 Thread: id = 5700 os_tid = 0x584 [0184.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif")) returned 0x20 [0184.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif", dwFileAttributes=0x20) returned 0 [0184.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.211] GetLastError () returned 0x5 [0184.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif", dwFileAttributes=0x20) returned 0 [0184.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d868e0) returned 1 Thread: id = 5701 os_tid = 0x774 [0184.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif")) returned 0x20 [0184.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif", dwFileAttributes=0x20) returned 0 [0184.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.214] GetLastError () returned 0x5 [0184.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif", dwFileAttributes=0x20) returned 0 [0184.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 5702 os_tid = 0x2224 [0184.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif")) returned 0x20 [0184.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0184.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.216] GetLastError () returned 0x5 [0184.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0184.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb198) returned 1 Thread: id = 5703 os_tid = 0x650 [0184.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3eeb198 [0184.217] wcscpy (in: _Dest=0x3eeb198, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0184.217] wcscat (in: _Dest=0x3eeb198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0184.217] wcscat (in: _Dest=0x3eeb198, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*" [0184.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0c08 [0184.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0184.958] wcscmp (_String1=".", _String2=".") returned 0 [0184.958] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x921be950, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.958] wcscmp (_String1="..", _String2=".") returned 1 [0184.958] wcscmp (_String1="..", _String2="..") returned 0 [0184.958] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85da9510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x368c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="ATTACH~1.JPG")) returned 1 [0184.958] wcscmp (_String1="Attachments.jpg", _String2=".") returned 1 [0184.958] wcscmp (_String1="Attachments.jpg", _String2="..") returned 1 [0184.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3dafcb8 [0184.958] wcscpy (in: _Dest=0x3dafcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0184.958] wcscat (in: _Dest=0x3dafcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0184.958] wcscat (in: _Dest=0x3dafcb8, _Source="Attachments.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" [0185.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0185.567] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREAK.JPG", cAlternateFileName="")) returned 1 [0185.567] wcscmp (_String1="BREAK.JPG", _String2=".") returned 1 [0185.567] wcscmp (_String1="BREAK.JPG", _String2="..") returned 1 [0185.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc48d0 [0185.567] wcscpy (in: _Dest=0x3dc48d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.567] wcscat (in: _Dest=0x3dc48d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.567] wcscat (in: _Dest=0x3dc48d0, _Source="BREAK.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" [0185.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc48d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0185.568] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86b33230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.JPG", cAlternateFileName="")) returned 1 [0185.568] wcscmp (_String1="BUTTON.JPG", _String2=".") returned 1 [0185.568] wcscmp (_String1="BUTTON.JPG", _String2="..") returned 1 [0185.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4c70 [0185.568] wcscpy (in: _Dest=0x3dc4c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.568] wcscat (in: _Dest=0x3dc4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.568] wcscat (in: _Dest=0x3dc4c70, _Source="BUTTON.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" [0185.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0185.569] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76f07790, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x33d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKBOX.JPG", cAlternateFileName="")) returned 1 [0185.569] wcscmp (_String1="CHECKBOX.JPG", _String2=".") returned 1 [0185.569] wcscmp (_String1="CHECKBOX.JPG", _String2="..") returned 1 [0185.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4530 [0185.569] wcscpy (in: _Dest=0x3dc4530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.570] wcscat (in: _Dest=0x3dc4530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.570] wcscat (in: _Dest=0x3dc4530, _Source="CHECKBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" [0185.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0185.571] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86c89e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMBOBOX.JPG", cAlternateFileName="")) returned 1 [0185.571] wcscmp (_String1="COMBOBOX.JPG", _String2=".") returned 1 [0185.571] wcscmp (_String1="COMBOBOX.JPG", _String2="..") returned 1 [0185.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3d08 [0185.571] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.571] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.571] wcscat (in: _Dest=0x3dc3d08, _Source="COMBOBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" [0185.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0185.573] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77038290, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x36bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.JPG", cAlternateFileName="")) returned 1 [0185.573] wcscmp (_String1="CONTACT.JPG", _String2=".") returned 1 [0185.573] wcscmp (_String1="CONTACT.JPG", _String2="..") returned 1 [0185.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc49b8 [0185.574] wcscpy (in: _Dest=0x3dc49b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.574] wcscat (in: _Dest=0x3dc49b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.574] wcscat (in: _Dest=0x3dc49b8, _Source="CONTACT.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" [0185.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc49b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0185.575] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770aa6b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.JPG", cAlternateFileName="")) returned 1 [0185.575] wcscmp (_String1="CURRENCY.JPG", _String2=".") returned 1 [0185.575] wcscmp (_String1="CURRENCY.JPG", _String2="..") returned 1 [0185.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4aa0 [0185.576] wcscpy (in: _Dest=0x3dc4aa0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.576] wcscat (in: _Dest=0x3dc4aa0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.576] wcscat (in: _Dest=0x3dc4aa0, _Source="CURRENCY.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" [0185.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0185.577] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x42af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATE.JPG", cAlternateFileName="")) returned 1 [0185.577] wcscmp (_String1="DATE.JPG", _String2=".") returned 1 [0185.577] wcscmp (_String1="DATE.JPG", _String2="..") returned 1 [0185.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x7a64170 [0185.577] wcscpy (in: _Dest=0x7a64170, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.577] wcscat (in: _Dest=0x7a64170, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.577] wcscat (in: _Dest=0x7a64170, _Source="DATE.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" [0185.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0185.578] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x770d0810, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4139, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATETIME.JPG", cAlternateFileName="")) returned 1 [0185.578] wcscmp (_String1="DATETIME.JPG", _String2=".") returned 1 [0185.579] wcscmp (_String1="DATETIME.JPG", _String2="..") returned 1 [0185.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4190 [0185.579] wcscpy (in: _Dest=0x3dc4190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.579] wcscat (in: _Dest=0x3dc4190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.579] wcscat (in: _Dest=0x3dc4190, _Source="DATETIME.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" [0185.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0185.580] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7737e0d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalInk.jpg", cAlternateFileName="DIGITA~1.JPG")) returned 1 [0185.580] wcscmp (_String1="DigitalInk.jpg", _String2=".") returned 1 [0185.580] wcscmp (_String1="DigitalInk.jpg", _String2="..") returned 1 [0185.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db0ac8 [0185.580] wcscpy (in: _Dest=0x3db0ac8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.580] wcscat (in: _Dest=0x3db0ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.580] wcscat (in: _Dest=0x3db0ac8, _Source="DigitalInk.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" [0185.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0185.582] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b3dce00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8784ab30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1b3dce00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmbeddedView.jpg", cAlternateFileName="EMBEDD~1.JPG")) returned 1 [0185.582] wcscmp (_String1="EmbeddedView.jpg", _String2=".") returned 1 [0185.582] wcscmp (_String1="EmbeddedView.jpg", _String2="..") returned 1 [0185.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db09d8 [0185.582] wcscpy (in: _Dest=0x3db09d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.582] wcscat (in: _Dest=0x3db09d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.582] wcscat (in: _Dest=0x3db09d8, _Source="EmbeddedView.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" [0185.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db09d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0185.583] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88ba1df0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADING.JPG", cAlternateFileName="")) returned 1 [0185.583] wcscmp (_String1="HEADING.JPG", _String2=".") returned 1 [0185.583] wcscmp (_String1="HEADING.JPG", _String2="..") returned 1 [0185.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc3ed8 [0185.583] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.583] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.583] wcscat (in: _Dest=0x3dc3ed8, _Source="HEADING.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" [0185.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0185.585] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88c604d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x139a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMAGE.JPG", cAlternateFileName="")) returned 1 [0185.585] wcscmp (_String1="IMAGE.JPG", _String2=".") returned 1 [0185.585] wcscmp (_String1="IMAGE.JPG", _String2="..") returned 1 [0185.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4448 [0185.585] wcscpy (in: _Dest=0x3dc4448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.585] wcscat (in: _Dest=0x3dc4448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.585] wcscat (in: _Dest=0x3dc4448, _Source="IMAGE.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" [0185.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0185.586] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe65, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINE.JPG", cAlternateFileName="")) returned 1 [0185.586] wcscmp (_String1="LINE.JPG", _String2=".") returned 1 [0185.586] wcscmp (_String1="LINE.JPG", _String2="..") returned 1 [0185.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x7a64a30 [0185.586] wcscpy (in: _Dest=0x7a64a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.586] wcscat (in: _Dest=0x7a64a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.587] wcscat (in: _Dest=0x7a64a30, _Source="LINE.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" [0185.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0185.588] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9dcb30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3b3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTBOX.JPG", cAlternateFileName="")) returned 1 [0185.588] wcscmp (_String1="LISTBOX.JPG", _String2=".") returned 1 [0185.588] wcscmp (_String1="LISTBOX.JPG", _String2="..") returned 1 [0185.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4f28 [0185.588] wcscpy (in: _Dest=0x3dc4f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.588] wcscat (in: _Dest=0x3dc4f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.588] wcscat (in: _Dest=0x3dc4f28, _Source="LISTBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" [0185.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c [0185.589] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x80ea9af0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x443a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NUMERIC.JPG", cAlternateFileName="")) returned 1 [0185.589] wcscmp (_String1="NUMERIC.JPG", _String2=".") returned 1 [0185.589] wcscmp (_String1="NUMERIC.JPG", _String2="..") returned 1 [0185.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4618 [0185.589] wcscpy (in: _Dest=0x3dc4618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.589] wcscat (in: _Dest=0x3dc4618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.589] wcscat (in: _Dest=0x3dc4618, _Source="NUMERIC.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" [0185.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0185.591] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81e48b50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x12f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSWORD.JPG", cAlternateFileName="")) returned 1 [0185.591] wcscmp (_String1="PASSWORD.JPG", _String2=".") returned 1 [0185.591] wcscmp (_String1="PASSWORD.JPG", _String2="..") returned 1 [0185.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc5010 [0185.591] wcscpy (in: _Dest=0x3dc5010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.591] wcscat (in: _Dest=0x3dc5010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.591] wcscat (in: _Dest=0x3dc5010, _Source="PASSWORD.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" [0185.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0185.592] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x903b1390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x43c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIO.JPG", cAlternateFileName="")) returned 1 [0185.592] wcscmp (_String1="RADIO.JPG", _String2=".") returned 1 [0185.592] wcscmp (_String1="RADIO.JPG", _String2="..") returned 1 [0185.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4b88 [0185.592] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.592] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.592] wcscat (in: _Dest=0x3dc4b88, _Source="RADIO.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" [0185.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0185.593] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90495bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3ad9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SectionHeading.jpg", cAlternateFileName="SECTIO~1.JPG")) returned 1 [0185.593] wcscmp (_String1="SectionHeading.jpg", _String2=".") returned 1 [0185.594] wcscmp (_String1="SectionHeading.jpg", _String2="..") returned 1 [0185.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae3e8 [0185.594] wcscpy (in: _Dest=0x3dae3e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.594] wcscat (in: _Dest=0x3dae3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.594] wcscat (in: _Dest=0x3dae3e8, _Source="SectionHeading.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" [0185.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0185.595] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="StaticText.jpg", cAlternateFileName="STATIC~1.JPG")) returned 1 [0185.595] wcscmp (_String1="StaticText.jpg", _String2=".") returned 1 [0185.595] wcscmp (_String1="StaticText.jpg", _String2="..") returned 1 [0185.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db0e88 [0185.595] wcscpy (in: _Dest=0x3db0e88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.595] wcscat (in: _Dest=0x3db0e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.595] wcscat (in: _Dest=0x3db0e88, _Source="StaticText.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" [0185.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0185.597] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3983, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTAREA.JPG", cAlternateFileName="")) returned 1 [0185.597] wcscmp (_String1="TEXTAREA.JPG", _String2=".") returned 1 [0185.597] wcscmp (_String1="TEXTAREA.JPG", _String2="..") returned 1 [0185.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc50f8 [0185.597] wcscpy (in: _Dest=0x3dc50f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.597] wcscat (in: _Dest=0x3dc50f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.597] wcscat (in: _Dest=0x3dc50f8, _Source="TEXTAREA.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" [0185.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc50f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0185.598] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6efb00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90743490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1c6efb00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTBOX.JPG", cAlternateFileName="")) returned 1 [0185.598] wcscmp (_String1="TEXTBOX.JPG", _String2=".") returned 1 [0185.598] wcscmp (_String1="TEXTBOX.JPG", _String2="..") returned 1 [0185.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc51e0 [0185.598] wcscpy (in: _Dest=0x3dc51e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.598] wcscat (in: _Dest=0x3dc51e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.598] wcscat (in: _Dest=0x3dc51e0, _Source="TEXTBOX.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" [0185.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc51e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0185.599] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x42fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTVIEW.JPG", cAlternateFileName="")) returned 1 [0185.599] wcscmp (_String1="TEXTVIEW.JPG", _String2=".") returned 1 [0185.600] wcscmp (_String1="TEXTVIEW.JPG", _String2="..") returned 1 [0185.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc52c8 [0185.600] wcscpy (in: _Dest=0x3dc52c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.600] wcscat (in: _Dest=0x3dc52c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.600] wcscat (in: _Dest=0x3dc52c8, _Source="TEXTVIEW.JPG" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" [0185.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc52c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c [0185.601] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 1 [0185.601] wcscmp (_String1="UnformattedNumeric.jpg", _String2=".") returned 1 [0185.601] wcscmp (_String1="UnformattedNumeric.jpg", _String2="..") returned 1 [0185.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf4) returned 0x2f7ac8 [0185.602] wcscpy (in: _Dest=0x2f7ac8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview" [0185.602] wcscat (in: _Dest=0x2f7ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\" [0185.602] wcscat (in: _Dest=0x2f7ac8, _Source="UnformattedNumeric.jpg" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" [0185.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2f7ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0185.603] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x921be950, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 0 [0185.603] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0185.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0c08) returned 1 [0185.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb198) returned 1 [0185.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86a80) returned 1 Thread: id = 5704 os_tid = 0x644 [0184.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html")) returned 0x20 [0184.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0184.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.222] GetLastError () returned 0x5 [0184.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0184.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb270) returned 1 Thread: id = 5705 os_tid = 0x23f8 [0184.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html")) returned 0x20 [0184.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0184.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.224] GetLastError () returned 0x5 [0184.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0184.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64250) returned 1 Thread: id = 5706 os_tid = 0x2704 [0184.225] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json")) returned 0x2020 [0185.054] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0187.375] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10ec [0187.375] GetFileSizeEx (in: hFile=0x10ec, lpFileSize=0xa34fa9c | out: lpFileSize=0xa34fa9c*=278) returned 1 [0187.376] SetFilePointerEx (in: hFile=0x10ec, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.376] ReadFile (in: hFile=0x10ec, lpBuffer=0xa34fa78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa34fa88, lpOverlapped=0x0 | out: lpBuffer=0xa34fa78*, lpNumberOfBytesRead=0xa34fa88*=0x4, lpOverlapped=0x0) returned 1 [0187.377] SetFilePointerEx (in: hFile=0x10ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0187.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0187.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0187.378] NtQuerySystemTime (in: CurrentTime=0xa34fa10 | out: CurrentTime=0xa34fa10*=132462177659508000) returned 0x0 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x31421a35 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x5477bcf [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x3524a94a [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x680cec83 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x7d4edc81 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x6b296253 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x273235ff [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x1bd7281d [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0xa9dd46 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x3581f26d [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x57268f12 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x7626fe87 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x78afe39d [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x3a1fea9 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x42f46a30 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x3789b508 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x1260cc24 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x2f942d95 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x7ec42d17 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x79bc7b11 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x3b5ec2f0 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x51e6d81 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x2a49b3ba [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x52d520a6 [0187.378] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x47a88011 [0187.379] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x6877e605 [0187.379] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x2eb8976a [0187.379] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x5b69d0cf [0187.379] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x4f51e439 [0187.379] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x6a154c2a [0187.379] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x5174f5e0 [0187.379] RtlRandomEx (in: Seed=0xa34fa08 | out: Seed=0xa34fa08) returned 0x3941a22e [0187.387] ReadFile (in: hFile=0x10ec, lpBuffer=0x7d81008, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0xa34fa04, lpOverlapped=0x0 | out: lpBuffer=0x7d81008*, lpNumberOfBytesRead=0xa34fa04*=0x116, lpOverlapped=0x0) returned 1 [0187.387] SetFilePointerEx (in: hFile=0x10ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.388] WriteFile (in: hFile=0x10ec, lpBuffer=0x7d84c10*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xa34fa08, lpOverlapped=0x0 | out: lpBuffer=0x7d84c10*, lpNumberOfBytesWritten=0xa34fa08*=0x116, lpOverlapped=0x0) returned 1 [0187.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0187.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0187.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0187.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d84c10) returned 1 [0187.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d81008) returned 1 [0187.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25038) returned 1 [0187.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37830 [0187.711] SetFilePointerEx (in: hFile=0x10ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.711] WriteFile (in: hFile=0x10ec, lpBuffer=0x7cad600*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa34fa90, lpOverlapped=0x0 | out: lpBuffer=0x7cad600*, lpNumberOfBytesWritten=0xa34fa90*=0x10c, lpOverlapped=0x0) returned 1 [0187.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85080 [0187.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0187.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0187.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0187.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2d18 [0187.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0187.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0187.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0187.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0187.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85080) returned 1 [0187.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e740f0 [0187.777] sprintf (in: _Dest=0x3e740f0, _Format="%c%c" | out: _Dest="5c") returned 2 [0187.777] sprintf (in: _Dest=0x3e740f2, _Format="%c%c" | out: _Dest="91") returned 2 [0187.777] sprintf (in: _Dest=0x3e740f4, _Format="%c%c" | out: _Dest="23") returned 2 [0187.777] sprintf (in: _Dest=0x3e740f6, _Format="%c%c" | out: _Dest="ef") returned 2 [0187.777] sprintf (in: _Dest=0x3e740f8, _Format="%c%c" | out: _Dest="f5") returned 2 [0187.777] sprintf (in: _Dest=0x3e740fa, _Format="%c%c" | out: _Dest="ac") returned 2 [0187.777] sprintf (in: _Dest=0x3e740fc, _Format="%c%c" | out: _Dest="5e") returned 2 [0187.777] sprintf (in: _Dest=0x3e740fe, _Format="%c%c" | out: _Dest="f6") returned 2 [0187.777] sprintf (in: _Dest=0x3e74100, _Format="%c%c" | out: _Dest="5f") returned 2 [0187.777] sprintf (in: _Dest=0x3e74102, _Format="%c%c" | out: _Dest="6c") returned 2 [0187.778] sprintf (in: _Dest=0x3e74104, _Format="%c%c" | out: _Dest="bc") returned 2 [0187.778] sprintf (in: _Dest=0x3e74106, _Format="%c%c" | out: _Dest="20") returned 2 [0187.778] sprintf (in: _Dest=0x3e74108, _Format="%c%c" | out: _Dest="f5") returned 2 [0187.778] sprintf (in: _Dest=0x3e7410a, _Format="%c%c" | out: _Dest="db") returned 2 [0187.778] sprintf (in: _Dest=0x3e7410c, _Format="%c%c" | out: _Dest="84") returned 2 [0187.778] sprintf (in: _Dest=0x3e7410e, _Format="%c%c" | out: _Dest="e2") returned 2 [0187.778] sprintf (in: _Dest=0x3e74110, _Format="%c%c" | out: _Dest="8a") returned 2 [0187.778] sprintf (in: _Dest=0x3e74112, _Format="%c%c" | out: _Dest="a9") returned 2 [0187.778] sprintf (in: _Dest=0x3e74114, _Format="%c%c" | out: _Dest="62") returned 2 [0187.778] sprintf (in: _Dest=0x3e74116, _Format="%c%c" | out: _Dest="d8") returned 2 [0187.778] sprintf (in: _Dest=0x3e74118, _Format="%c%c" | out: _Dest="24") returned 2 [0187.778] sprintf (in: _Dest=0x3e7411a, _Format="%c%c" | out: _Dest="7b") returned 2 [0187.778] sprintf (in: _Dest=0x3e7411c, _Format="%c%c" | out: _Dest="e8") returned 2 [0187.778] sprintf (in: _Dest=0x3e7411e, _Format="%c%c" | out: _Dest="fa") returned 2 [0187.778] sprintf (in: _Dest=0x3e74120, _Format="%c%c" | out: _Dest="3a") returned 2 [0187.778] sprintf (in: _Dest=0x3e74122, _Format="%c%c" | out: _Dest="c5") returned 2 [0187.778] RtlInitAnsiString (in: DestinationString=0xa34fa18, SourceString="5c9123eff5ac5ef65f6cbc20f5db84e28aa962d8247be8fa3ac5" | out: DestinationString="5c9123eff5ac5ef65f6cbc20f5db84e28aa962d8247be8fa3ac5") [0187.778] RtlAnsiStringToUnicodeString (in: DestinationString=0xa34fa10, SourceString="5c9123eff5ac5ef65f6cbc20f5db84e28aa962d8247be8fa3ac5", AllocateDestinationString=1 | out: DestinationString="5c9123eff5ac5ef65f6cbc20f5db84e28aa962d8247be8fa3ac5") returned 0x0 [0187.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd10 [0187.779] wcscat (in: _Dest=0x3db8148, _Source="5c9123eff5ac5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\5c9123eff5ac5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\5c9123eff5ac5" [0187.779] wcscat (in: _Dest=0x3db8148, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\5c9123eff5ac5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\5c9123eff5ac5.68814f" [0187.779] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\5c9123eff5ac5.68814f", NtPathName=0xa34fa08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\5c9123eff5ac5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3518 [0191.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3518) returned 1 [0191.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3da0e58) returned 1 [0191.071] NtQueryInformationFile (in: FileHandle=0x10ec, IoStatusBlock=0xa34f9e0, FileInformation=0xa34f9e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa34f9e0, FileInformation=0xa34f9e8) returned 0x0 [0191.071] NtSetInformationFile (FileHandle=0x10ec, IoStatusBlock=0xa34f9e0, FileInformation=0xa34f9e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db8148) returned 1 [0192.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.621] FlushFileBuffers (hFile=0x10ec) returned 1 [0192.625] CloseHandle (hObject=0x10ec) returned 1 [0192.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbf740 [0192.759] wcscpy (in: _Dest=0x7cbf740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\" [0192.760] wcscat (in: _Dest=0x7cbf740, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\68814F-Readme.txt" [0192.760] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\68814f-readme.txt")) returned 0xffffffff [0192.760] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ar\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0193.139] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa34fa24, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa34fa24*=0x8b9, lpOverlapped=0x0) returned 1 [0193.141] CloseHandle (hObject=0x1518) returned 1 [0193.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf740) returned 1 [0193.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d554c8) returned 1 Thread: id = 5707 os_tid = 0x3ec [0184.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html")) returned 0x20 [0184.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html", dwFileAttributes=0x20) returned 0 [0184.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.226] GetLastError () returned 0x5 [0184.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html", dwFileAttributes=0x20) returned 0 [0184.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb348) returned 1 Thread: id = 5708 os_tid = 0xfb8 [0184.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html")) returned 0x20 [0184.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0184.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.236] GetLastError () returned 0x5 [0184.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0184.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb420) returned 1 Thread: id = 5709 os_tid = 0x2710 [0184.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js")) returned 0x20 [0184.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0184.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.238] GetLastError () returned 0x5 [0184.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0184.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a645d0) returned 1 Thread: id = 5710 os_tid = 0xf68 [0184.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css")) returned 0x20 [0184.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0184.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.240] GetLastError () returned 0x5 [0184.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0184.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a646b0) returned 1 Thread: id = 5711 os_tid = 0x2718 [0184.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html")) returned 0x20 [0184.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0184.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.242] GetLastError () returned 0x5 [0184.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0184.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64790) returned 1 Thread: id = 5712 os_tid = 0xab0 [0184.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html")) returned 0x20 [0184.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0184.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.243] GetLastError () returned 0x5 [0184.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0184.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64870) returned 1 Thread: id = 5713 os_tid = 0x670 [0184.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc6) returned 0x3d868e0 [0184.245] wcscpy (in: _Dest=0x3d868e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0184.245] wcscat (in: _Dest=0x3d868e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0184.245] wcscat (in: _Dest=0x3d868e0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*" [0184.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb10d8 [0184.245] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78d87170, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0184.959] wcscmp (_String1=".", _String2=".") returned 0 [0184.959] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78d87170, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906aaf10, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.959] wcscmp (_String1="..", _String2=".") returned 1 [0184.959] wcscmp (_String1="..", _String2="..") returned 0 [0184.959] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86e2cdb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x2021e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Customer Support.fdt", cAlternateFileName="CUSTOM~1.FDT")) returned 1 [0184.959] wcscmp (_String1="Customer Support.fdt", _String2=".") returned 1 [0184.959] wcscmp (_String1="Customer Support.fdt", _String2="..") returned 1 [0184.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadf10 [0184.960] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0184.960] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0184.960] wcscat (in: _Dest=0x3dadf10, _Source="Customer Support.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" [0185.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0185.662] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da02800, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78d87170, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1da02800, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x20b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardware Tracker.fdt", cAlternateFileName="HARDWA~1.FDT")) returned 1 [0185.662] wcscmp (_String1="Hardware Tracker.fdt", _String2=".") returned 1 [0185.662] wcscmp (_String1="Hardware Tracker.fdt", _String2="..") returned 1 [0185.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae2f0 [0185.662] wcscpy (in: _Dest=0x3dae2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0185.662] wcscat (in: _Dest=0x3dae2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0185.662] wcscat (in: _Dest=0x3dae2f0, _Source="Hardware Tracker.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" [0185.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0185.663] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x24051, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition - Customized.fdt", cAlternateFileName="HIRING~1.FDT")) returned 1 [0185.663] wcscmp (_String1="Hiring Requisition - Customized.fdt", _String2=".") returned 1 [0185.664] wcscmp (_String1="Hiring Requisition - Customized.fdt", _String2="..") returned 1 [0185.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x7a38c78 [0185.664] wcscpy (in: _Dest=0x7a38c78, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0185.664] wcscat (in: _Dest=0x7a38c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0185.665] wcscat (in: _Dest=0x7a38c78, _Source="Hiring Requisition - Customized.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" [0185.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a38c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0185.666] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x248db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition.fdt", cAlternateFileName="HIRING~2.FDT")) returned 1 [0185.666] wcscmp (_String1="Hiring Requisition.fdt", _String2=".") returned 1 [0185.666] wcscmp (_String1="Hiring Requisition.fdt", _String2="..") returned 1 [0185.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dadd20 [0185.666] wcscpy (in: _Dest=0x3dadd20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0185.666] wcscat (in: _Dest=0x3dadd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0185.666] wcscat (in: _Dest=0x3dadd20, _Source="Hiring Requisition.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" [0185.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0185.667] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8fc8d190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x17d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POLICIES.FDT", cAlternateFileName="")) returned 1 [0185.668] wcscmp (_String1="POLICIES.FDT", _String2=".") returned 1 [0185.668] wcscmp (_String1="POLICIES.FDT", _String2="..") returned 1 [0185.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc53b0 [0185.668] wcscpy (in: _Dest=0x3dc53b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0185.668] wcscat (in: _Dest=0x3dc53b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0185.668] wcscat (in: _Dest=0x3dc53b0, _Source="POLICIES.FDT" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" [0185.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc53b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0185.669] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x820aa150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Process Library.fdt", cAlternateFileName="PROCES~1.FDT")) returned 1 [0185.669] wcscmp (_String1="Process Library.fdt", _String2=".") returned 1 [0185.669] wcscmp (_String1="Process Library.fdt", _String2="..") returned 1 [0185.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dadb30 [0185.669] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0185.669] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0185.669] wcscat (in: _Dest=0x3dadb30, _Source="Process Library.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" [0185.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0185.671] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906aaf10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x18ead, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status Report.fdt", cAlternateFileName="STATUS~1.FDT")) returned 1 [0185.671] wcscmp (_String1="Status Report.fdt", _String2=".") returned 1 [0185.671] wcscmp (_String1="Status Report.fdt", _String2="..") returned 1 [0185.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3daff88 [0185.671] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0185.671] wcscat (in: _Dest=0x3daff88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0185.671] wcscat (in: _Dest=0x3daff88, _Source="Status Report.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" [0185.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3daff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0185.672] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 1 [0185.672] wcscmp (_String1="Track Issues.fdt", _String2=".") returned 1 [0185.672] wcscmp (_String1="Track Issues.fdt", _String2="..") returned 1 [0185.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3dafe98 [0185.672] wcscpy (in: _Dest=0x3dafe98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates" [0185.672] wcscat (in: _Dest=0x3dafe98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\" [0185.672] wcscat (in: _Dest=0x3dafe98, _Source="Track Issues.fdt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" [0185.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafe98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0185.674] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed15500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82840770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1ed15500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 0 [0185.674] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0185.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb10d8) returned 1 [0185.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d868e0) returned 1 [0185.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 Thread: id = 5714 os_tid = 0x2724 [0184.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm")) returned 0x20 [0184.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0184.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.249] GetLastError () returned 0x5 [0184.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0184.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64950) returned 1 Thread: id = 5715 os_tid = 0x7c4 [0184.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg")) returned 0x20 [0184.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0184.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.250] GetLastError () returned 0x5 [0184.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0184.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4f28) returned 1 Thread: id = 5716 os_tid = 0x272c [0184.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0184.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0184.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.252] GetLastError () returned 0x5 [0184.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0184.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff88) returned 1 Thread: id = 5717 os_tid = 0x2730 [0184.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html")) returned 0x20 [0184.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0184.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.255] GetLastError () returned 0x5 [0184.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0184.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb5d0) returned 1 Thread: id = 5718 os_tid = 0x2734 [0184.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg")) returned 0x20 [0184.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0184.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.282] GetLastError () returned 0x5 [0184.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0184.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb780) returned 1 Thread: id = 5719 os_tid = 0x2738 [0184.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml")) returned 0x20 [0184.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml", dwFileAttributes=0x20) returned 0 [0184.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.285] GetLastError () returned 0x5 [0184.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml", dwFileAttributes=0x20) returned 0 [0184.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64a30) returned 1 Thread: id = 5720 os_tid = 0x273c [0184.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js")) returned 0x20 [0184.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS", dwFileAttributes=0x20) returned 0 [0184.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.287] GetLastError () returned 0x5 [0184.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS", dwFileAttributes=0x20) returned 0 [0184.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 5721 os_tid = 0x7b0 [0184.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif")) returned 0x20 [0184.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif", dwFileAttributes=0x20) returned 0 [0184.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.289] GetLastError () returned 0x5 [0184.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif", dwFileAttributes=0x20) returned 0 [0184.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d864d0) returned 1 Thread: id = 5722 os_tid = 0xfc8 [0184.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif")) returned 0x20 [0184.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF", dwFileAttributes=0x20) returned 0 [0184.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.290] GetLastError () returned 0x5 [0184.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF", dwFileAttributes=0x20) returned 0 [0184.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57cd0) returned 1 Thread: id = 5723 os_tid = 0x728 [0184.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif")) returned 0x20 [0184.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0184.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.305] GetLastError () returned 0x5 [0184.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0184.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57500) returned 1 Thread: id = 5724 os_tid = 0xfcc [0184.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js")) returned 0x20 [0185.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0185.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.137] GetLastError () returned 0x5 [0185.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0185.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 5725 os_tid = 0x368 [0184.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js")) returned 0x20 [0185.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0185.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.070] GetLastError () returned 0x5 [0185.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0185.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb858) returned 1 Thread: id = 5726 os_tid = 0xfc4 [0184.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js")) returned 0x20 [0185.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js", dwFileAttributes=0x20) returned 0 [0185.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.344] GetLastError () returned 0x5 [0185.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js", dwFileAttributes=0x20) returned 0 [0185.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 Thread: id = 5727 os_tid = 0xf78 [0184.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css")) returned 0x20 [0185.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS", dwFileAttributes=0x20) returned 0 [0185.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.346] GetLastError () returned 0x5 [0185.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS", dwFileAttributes=0x20) returned 0 [0185.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 5728 os_tid = 0xf84 [0184.962] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json")) returned 0x2020 [0187.060] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", dwFileAttributes=0x20) returned 1 [0195.148] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15e8 [0195.148] GetFileSizeEx (in: hFile=0x15e8, lpFileSize=0x8d7fdc4 | out: lpFileSize=0x8d7fdc4*=352) returned 1 [0195.148] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x15c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.149] ReadFile (in: hFile=0x15e8, lpBuffer=0x8d7fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d7fdb0, lpOverlapped=0x0 | out: lpBuffer=0x8d7fda0*, lpNumberOfBytesRead=0x8d7fdb0*=0x4, lpOverlapped=0x0) returned 1 [0195.150] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0195.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0195.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0195.151] NtQuerySystemTime (in: CurrentTime=0x8d7fd38 | out: CurrentTime=0x8d7fd38*=132462177737352000) returned 0x0 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x7bf82196 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x5ed54ea0 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0xef8eab7 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x315b096f [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x5d8e623d [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x1cb9e59c [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x7bf9c56c [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x6adfa612 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x8a31660 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x68345a1c [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x704307e1 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x16d1a867 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x4e22b646 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x695c9c69 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x275abab0 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x173d7c9c [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x432ec54 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x69ec52ba [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x283a8540 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x49090f70 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x3b85be00 [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x7cbdd2db [0195.151] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x2cbf6180 [0195.152] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x603ee263 [0195.152] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x382628ba [0195.152] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x2c9488c0 [0195.152] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x5fee06e6 [0195.152] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x1e10c68b [0195.152] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x65422882 [0195.152] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x2c275099 [0195.152] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x68505105 [0195.152] RtlRandomEx (in: Seed=0x8d7fd30 | out: Seed=0x8d7fd30) returned 0x3d5de4e4 [0195.163] ReadFile (in: hFile=0x15e8, lpBuffer=0x7bb53c0, nNumberOfBytesToRead=0x160, lpNumberOfBytesRead=0x8d7fd2c, lpOverlapped=0x0 | out: lpBuffer=0x7bb53c0*, lpNumberOfBytesRead=0x8d7fd2c*=0x160, lpOverlapped=0x0) returned 1 [0195.163] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.163] WriteFile (in: hFile=0x15e8, lpBuffer=0x7bb8fc8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x8d7fd30, lpOverlapped=0x0 | out: lpBuffer=0x7bb8fc8*, lpNumberOfBytesWritten=0x8d7fd30*=0x160, lpOverlapped=0x0) returned 1 [0195.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0195.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0195.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0195.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb8fc8) returned 1 [0195.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb53c0) returned 1 [0195.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0195.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25668) returned 1 [0195.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2de40 [0195.451] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.452] WriteFile (in: hFile=0x15e8, lpBuffer=0x7cbe838*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x8d7fdb8, lpOverlapped=0x0 | out: lpBuffer=0x7cbe838*, lpNumberOfBytesWritten=0x8d7fdb8*=0x11a, lpOverlapped=0x0) returned 1 [0195.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdbd8 [0195.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0195.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0195.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d58) returned 1 [0195.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a378c0 [0195.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0195.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0195.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4000) returned 1 [0195.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0195.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdbd8) returned 1 [0195.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6f68 [0195.551] sprintf (in: _Dest=0x2fe6f68, _Format="%c%c" | out: _Dest="0d") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f6a, _Format="%c%c" | out: _Dest="65") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f6c, _Format="%c%c" | out: _Dest="42") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f6e, _Format="%c%c" | out: _Dest="f1") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f70, _Format="%c%c" | out: _Dest="3d") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f72, _Format="%c%c" | out: _Dest="a8") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f74, _Format="%c%c" | out: _Dest="54") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f76, _Format="%c%c" | out: _Dest="7a") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f78, _Format="%c%c" | out: _Dest="a6") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f7a, _Format="%c%c" | out: _Dest="19") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f7c, _Format="%c%c" | out: _Dest="9b") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f7e, _Format="%c%c" | out: _Dest="7f") returned 2 [0195.551] sprintf (in: _Dest=0x2fe6f80, _Format="%c%c" | out: _Dest="f2") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f82, _Format="%c%c" | out: _Dest="e8") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f84, _Format="%c%c" | out: _Dest="86") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f86, _Format="%c%c" | out: _Dest="c8") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f88, _Format="%c%c" | out: _Dest="f8") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f8a, _Format="%c%c" | out: _Dest="d2") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f8c, _Format="%c%c" | out: _Dest="3e") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f8e, _Format="%c%c" | out: _Dest="6d") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f90, _Format="%c%c" | out: _Dest="c9") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f92, _Format="%c%c" | out: _Dest="cb") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f94, _Format="%c%c" | out: _Dest="b4") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f96, _Format="%c%c" | out: _Dest="d0") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f98, _Format="%c%c" | out: _Dest="03") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f9a, _Format="%c%c" | out: _Dest="d0") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f9c, _Format="%c%c" | out: _Dest="5b") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6f9e, _Format="%c%c" | out: _Dest="69") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6fa0, _Format="%c%c" | out: _Dest="e5") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6fa2, _Format="%c%c" | out: _Dest="d7") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6fa4, _Format="%c%c" | out: _Dest="ff") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6fa6, _Format="%c%c" | out: _Dest="97") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6fa8, _Format="%c%c" | out: _Dest="bc") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6faa, _Format="%c%c" | out: _Dest="2f") returned 2 [0195.552] sprintf (in: _Dest=0x2fe6fac, _Format="%c%c" | out: _Dest="ee") returned 2 [0195.553] sprintf (in: _Dest=0x2fe6fae, _Format="%c%c" | out: _Dest="97") returned 2 [0195.553] sprintf (in: _Dest=0x2fe6fb0, _Format="%c%c" | out: _Dest="ce") returned 2 [0195.553] sprintf (in: _Dest=0x2fe6fb2, _Format="%c%c" | out: _Dest="07") returned 2 [0195.553] sprintf (in: _Dest=0x2fe6fb4, _Format="%c%c" | out: _Dest="ec") returned 2 [0195.553] sprintf (in: _Dest=0x2fe6fb6, _Format="%c%c" | out: _Dest="ae") returned 2 [0195.553] RtlInitAnsiString (in: DestinationString=0x8d7fd40, SourceString="0d6542f13da8547aa6199b7ff2e886c8f8d23e6dc9cbb4d003d05b69e5d7ff97bc2fee97ce07ecae" | out: DestinationString="0d6542f13da8547aa6199b7ff2e886c8f8d23e6dc9cbb4d003d05b69e5d7ff97bc2fee97ce07ecae") [0195.553] RtlAnsiStringToUnicodeString (in: DestinationString=0x8d7fd38, SourceString="0d6542f13da8547aa6199b7ff2e886c8f8d23e6dc9cbb4d003d05b69e5d7ff97bc2fee97ce07ecae", AllocateDestinationString=1 | out: DestinationString="0d6542f13da8547aa6199b7ff2e886c8f8d23e6dc9cbb4d003d05b69e5d7ff97bc2fee97ce07ecae") returned 0x0 [0195.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a67530 [0195.553] wcscat (in: _Dest=0x3ec9928, _Source="0d6542f13da8547aa619" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\0d6542f13da8547aa619") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\0d6542f13da8547aa619" [0195.553] wcscat (in: _Dest=0x3ec9928, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\0d6542f13da8547aa619.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\0d6542f13da8547aa619.68814f" [0195.553] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\0d6542f13da8547aa619.68814f", NtPathName=0x8d7fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\0d6542f13da8547aa619.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e0ad70 [0196.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ad70) returned 1 [0196.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34670) returned 1 [0196.025] NtQueryInformationFile (in: FileHandle=0x15e8, IoStatusBlock=0x8d7fd08, FileInformation=0x8d7fd10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8d7fd08, FileInformation=0x8d7fd10) returned 0x0 [0196.025] NtSetInformationFile (FileHandle=0x15e8, IoStatusBlock=0x8d7fd08, FileInformation=0x8d7fd10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9928) returned 1 [0196.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67530) returned 1 [0196.157] FlushFileBuffers (hFile=0x15e8) returned 1 [0196.167] CloseHandle (hObject=0x15e8) returned 1 [0196.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbf868 [0196.214] wcscpy (in: _Dest=0x7cbf868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0196.214] wcscat (in: _Dest=0x7cbf868, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\68814F-Readme.txt" [0196.214] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\68814f-readme.txt")) returned 0x2020 [0196.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf868) returned 1 [0196.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55e08) returned 1 Thread: id = 5729 os_tid = 0xf80 [0184.962] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json")) returned 0x2020 [0187.060] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0187.982] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10dc [0187.982] GetFileSizeEx (in: hFile=0x10dc, lpFileSize=0x626f8ac | out: lpFileSize=0x626f8ac*=11094) returned 1 [0187.982] SetFilePointerEx (in: hFile=0x10dc, liDistanceToMove=0x2b52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.982] ReadFile (in: hFile=0x10dc, lpBuffer=0x626f888, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x626f898, lpOverlapped=0x0 | out: lpBuffer=0x626f888*, lpNumberOfBytesRead=0x626f898*=0x4, lpOverlapped=0x0) returned 1 [0187.984] SetFilePointerEx (in: hFile=0x10dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0187.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0187.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0187.985] NtQuerySystemTime (in: CurrentTime=0x626f820 | out: CurrentTime=0x626f820*=132462177665592000) returned 0x0 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x3f121404 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x6d0c81fe [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x12639fde [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x2791d35b [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x66e0c25f [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x541706d1 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x6bd4e7db [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x326f059 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x3b15061c [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0xb8ea72 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x758dafc0 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x7be9dc40 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x1e18a8ed [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x72ff83bf [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x31d5a409 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x469794c1 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x57d848f2 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x7fd1c97 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x384755fd [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x36d0b51f [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x7f578790 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x7efa771a [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x28bacde6 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x6b2ba3ac [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x42101f33 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x33c99eda [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x79ebace6 [0187.985] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x2553438e [0187.986] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x575d764c [0187.986] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x155eb158 [0187.986] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x4905aa5e [0187.986] RtlRandomEx (in: Seed=0x626f818 | out: Seed=0x626f818) returned 0x204da136 [0187.994] ReadFile (in: hFile=0x10dc, lpBuffer=0x7d53fa8, nNumberOfBytesToRead=0x2b56, lpNumberOfBytesRead=0x626f814, lpOverlapped=0x0 | out: lpBuffer=0x7d53fa8*, lpNumberOfBytesRead=0x626f814*=0x2b56, lpOverlapped=0x0) returned 1 [0187.995] SetFilePointerEx (in: hFile=0x10dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.995] WriteFile (in: hFile=0x10dc, lpBuffer=0x7d57bb0*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0x626f818, lpOverlapped=0x0 | out: lpBuffer=0x7d57bb0*, lpNumberOfBytesWritten=0x626f818*=0x2b56, lpOverlapped=0x0) returned 1 [0187.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0187.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0187.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0187.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d57bb0) returned 1 [0187.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d53fa8) returned 1 [0187.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0187.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d409a8) returned 1 [0187.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3d409a8 [0187.998] SetFilePointerEx (in: hFile=0x10dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.998] WriteFile (in: hFile=0x10dc, lpBuffer=0x7ca94f0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x626f8a0, lpOverlapped=0x0 | out: lpBuffer=0x7ca94f0*, lpNumberOfBytesWritten=0x626f8a0*=0x11e, lpOverlapped=0x0) returned 1 [0187.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x300858 [0187.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0188.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0188.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0188.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0188.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0188.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0188.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec49d8) returned 1 [0188.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0188.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300858) returned 1 [0188.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1f358 [0188.000] sprintf (in: _Dest=0x3e1f358, _Format="%c%c" | out: _Dest="3b") returned 2 [0188.000] sprintf (in: _Dest=0x3e1f35a, _Format="%c%c" | out: _Dest="38") returned 2 [0188.000] sprintf (in: _Dest=0x3e1f35c, _Format="%c%c" | out: _Dest="57") returned 2 [0188.000] sprintf (in: _Dest=0x3e1f35e, _Format="%c%c" | out: _Dest="fe") returned 2 [0188.000] sprintf (in: _Dest=0x3e1f360, _Format="%c%c" | out: _Dest="53") returned 2 [0188.000] sprintf (in: _Dest=0x3e1f362, _Format="%c%c" | out: _Dest="c8") returned 2 [0188.000] sprintf (in: _Dest=0x3e1f364, _Format="%c%c" | out: _Dest="65") returned 2 [0188.000] sprintf (in: _Dest=0x3e1f366, _Format="%c%c" | out: _Dest="20") returned 2 [0188.000] sprintf (in: _Dest=0x3e1f368, _Format="%c%c" | out: _Dest="e6") returned 2 [0188.000] sprintf (in: _Dest=0x3e1f36a, _Format="%c%c" | out: _Dest="80") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f36c, _Format="%c%c" | out: _Dest="5c") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f36e, _Format="%c%c" | out: _Dest="b1") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f370, _Format="%c%c" | out: _Dest="5d") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f372, _Format="%c%c" | out: _Dest="05") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f374, _Format="%c%c" | out: _Dest="90") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f376, _Format="%c%c" | out: _Dest="cb") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f378, _Format="%c%c" | out: _Dest="65") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f37a, _Format="%c%c" | out: _Dest="88") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f37c, _Format="%c%c" | out: _Dest="f0") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f37e, _Format="%c%c" | out: _Dest="11") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f380, _Format="%c%c" | out: _Dest="33") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f382, _Format="%c%c" | out: _Dest="9d") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f384, _Format="%c%c" | out: _Dest="00") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f386, _Format="%c%c" | out: _Dest="44") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f388, _Format="%c%c" | out: _Dest="3d") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f38a, _Format="%c%c" | out: _Dest="25") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f38c, _Format="%c%c" | out: _Dest="71") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f38e, _Format="%c%c" | out: _Dest="6c") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f390, _Format="%c%c" | out: _Dest="29") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f392, _Format="%c%c" | out: _Dest="b4") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f394, _Format="%c%c" | out: _Dest="51") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f396, _Format="%c%c" | out: _Dest="77") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f398, _Format="%c%c" | out: _Dest="38") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f39a, _Format="%c%c" | out: _Dest="3b") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f39c, _Format="%c%c" | out: _Dest="d7") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f39e, _Format="%c%c" | out: _Dest="b9") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f3a0, _Format="%c%c" | out: _Dest="43") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f3a2, _Format="%c%c" | out: _Dest="5f") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f3a4, _Format="%c%c" | out: _Dest="d3") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f3a6, _Format="%c%c" | out: _Dest="6f") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f3a8, _Format="%c%c" | out: _Dest="4d") returned 2 [0188.001] sprintf (in: _Dest=0x3e1f3aa, _Format="%c%c" | out: _Dest="8b") returned 2 [0188.002] sprintf (in: _Dest=0x3e1f3ac, _Format="%c%c" | out: _Dest="50") returned 2 [0188.002] sprintf (in: _Dest=0x3e1f3ae, _Format="%c%c" | out: _Dest="cb") returned 2 [0188.002] RtlInitAnsiString (in: DestinationString=0x626f828, SourceString="3b3857fe53c86520e6805cb15d0590cb6588f011339d00443d25716c29b45177383bd7b9435fd36f4d8b50cb" | out: DestinationString="3b3857fe53c86520e6805cb15d0590cb6588f011339d00443d25716c29b45177383bd7b9435fd36f4d8b50cb") [0188.002] RtlAnsiStringToUnicodeString (in: DestinationString=0x626f820, SourceString="3b3857fe53c86520e6805cb15d0590cb6588f011339d00443d25716c29b45177383bd7b9435fd36f4d8b50cb", AllocateDestinationString=1 | out: DestinationString="3b3857fe53c86520e6805cb15d0590cb6588f011339d00443d25716c29b45177383bd7b9435fd36f4d8b50cb") returned 0x0 [0188.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3336a8 [0188.002] wcscat (in: _Dest=0x3ea2eb0, _Source="3b3857fe53c86520e6805c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\3b3857fe53c86520e6805c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\3b3857fe53c86520e6805c" [0188.002] wcscat (in: _Dest=0x3ea2eb0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\3b3857fe53c86520e6805c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\3b3857fe53c86520e6805c.68814f" [0188.002] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\3b3857fe53c86520e6805c.68814f", NtPathName=0x626f818, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\3b3857fe53c86520e6805c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0188.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e0aac0 [0188.010] FlushFileBuffers (hFile=0x10dc) returned 1 [0188.012] CloseHandle (hObject=0x10dc) returned 1 [0188.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7ca94f0 [0188.014] wcscpy (in: _Dest=0x7ca94f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\" [0188.014] wcscat (in: _Dest=0x7ca94f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\68814F-Readme.txt" [0188.014] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\68814f-readme.txt")) returned 0xffffffff [0188.014] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10dc [0188.018] WriteFile (in: hFile=0x10dc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x626f834, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x626f834*=0x8b9, lpOverlapped=0x0) returned 1 [0188.020] CloseHandle (hObject=0x10dc) returned 1 [0188.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca94f0) returned 1 [0188.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca078) returned 1 Thread: id = 5730 os_tid = 0xf7c [0184.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs4boxes.poc")) returned 0x20 [0185.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC", dwFileAttributes=0x20) returned 0 [0185.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs4boxes.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.142] GetLastError () returned 0x5 [0185.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC", dwFileAttributes=0x20) returned 0 [0185.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 5731 os_tid = 0x330 [0184.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs53boxs.poc")) returned 0x20 [0185.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC", dwFileAttributes=0x20) returned 0 [0185.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs53boxs.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.144] GetLastError () returned 0x5 [0185.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC", dwFileAttributes=0x20) returned 0 [0185.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 5732 os_tid = 0xaf0 [0184.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc")) returned 0x20 [0185.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC", dwFileAttributes=0x20) returned 0 [0185.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.146] GetLastError () returned 0x5 [0185.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC", dwFileAttributes=0x20) returned 0 [0185.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 5733 os_tid = 0xb10 [0184.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc")) returned 0x20 [0185.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC", dwFileAttributes=0x20) returned 0 [0185.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.148] GetLastError () returned 0x5 [0185.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC", dwFileAttributes=0x20) returned 0 [0185.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 5734 os_tid = 0x188 [0184.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc")) returned 0x20 [0185.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC", dwFileAttributes=0x20) returned 0 [0185.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.151] GetLastError () returned 0x5 [0185.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC", dwFileAttributes=0x20) returned 0 [0185.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 5735 os_tid = 0xfc0 [0184.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcrd98.poc")) returned 0x20 [0185.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC", dwFileAttributes=0x20) returned 0 [0185.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcrd98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.152] GetLastError () returned 0x5 [0185.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC", dwFileAttributes=0x20) returned 0 [0185.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 5736 os_tid = 0x4f8 [0184.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.dpv")) returned 0x20 [0185.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV", dwFileAttributes=0x20) returned 0 [0185.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.154] GetLastError () returned 0x5 [0185.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV", dwFileAttributes=0x20) returned 0 [0185.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 5737 os_tid = 0x3c8 [0184.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml")) returned 0x20 [0185.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML", dwFileAttributes=0x20) returned 0 [0185.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.348] GetLastError () returned 0x5 [0185.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML", dwFileAttributes=0x20) returned 0 [0185.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 5738 os_tid = 0x3f4 [0184.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calhm.poc")) returned 0x20 [0185.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC", dwFileAttributes=0x20) returned 0 [0185.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.349] GetLastError () returned 0x5 [0185.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC", dwFileAttributes=0x20) returned 0 [0185.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47318) returned 1 Thread: id = 5739 os_tid = 0xbc0 [0184.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml")) returned 0x20 [0184.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML", dwFileAttributes=0x20) returned 0 [0184.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.967] GetLastError () returned 0x5 [0184.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML", dwFileAttributes=0x20) returned 0 [0184.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 5740 os_tid = 0xba8 [0184.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml")) returned 0x20 [0184.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML", dwFileAttributes=0x20) returned 0 [0184.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.969] GetLastError () returned 0x5 [0184.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML", dwFileAttributes=0x20) returned 0 [0184.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 5741 os_tid = 0xbc8 [0184.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml")) returned 0x20 [0185.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML", dwFileAttributes=0x20) returned 0 [0185.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.817] GetLastError () returned 0x5 [0185.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML", dwFileAttributes=0x20) returned 0 [0185.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 5742 os_tid = 0xadc [0184.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml")) returned 0x20 [0185.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML", dwFileAttributes=0x20) returned 0 [0185.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.816] GetLastError () returned 0x5 [0185.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML", dwFileAttributes=0x20) returned 0 [0185.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 Thread: id = 5743 os_tid = 0x22e0 [0184.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml")) returned 0x20 [0185.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML", dwFileAttributes=0x20) returned 0 [0185.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.814] GetLastError () returned 0x5 [0185.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML", dwFileAttributes=0x20) returned 0 [0185.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 5744 os_tid = 0x570 [0184.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml")) returned 0x20 [0186.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML", dwFileAttributes=0x20) returned 0 [0186.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.334] GetLastError () returned 0x5 [0186.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML", dwFileAttributes=0x20) returned 0 [0186.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 5745 os_tid = 0x2784 [0184.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml")) returned 0x20 [0186.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML", dwFileAttributes=0x20) returned 0 [0186.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.338] GetLastError () returned 0x5 [0186.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML", dwFileAttributes=0x20) returned 0 [0186.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 5746 os_tid = 0x22f0 [0184.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml")) returned 0x20 [0186.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML", dwFileAttributes=0x20) returned 0 [0186.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.332] GetLastError () returned 0x5 [0186.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML", dwFileAttributes=0x20) returned 0 [0186.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 5747 os_tid = 0xbac [0184.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml")) returned 0x20 [0186.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML", dwFileAttributes=0x20) returned 0 [0186.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.337] GetLastError () returned 0x5 [0186.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML", dwFileAttributes=0x20) returned 0 [0186.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 5748 os_tid = 0xbc4 [0184.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml")) returned 0x20 [0186.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML", dwFileAttributes=0x20) returned 0 [0186.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.335] GetLastError () returned 0x5 [0186.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML", dwFileAttributes=0x20) returned 0 [0186.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 5749 os_tid = 0x248 [0184.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml")) returned 0x20 [0186.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML", dwFileAttributes=0x20) returned 0 [0186.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.331] GetLastError () returned 0x5 [0186.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML", dwFileAttributes=0x20) returned 0 [0186.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 5750 os_tid = 0x2790 [0184.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml")) returned 0x20 [0186.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML", dwFileAttributes=0x20) returned 0 [0186.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.329] GetLastError () returned 0x5 [0186.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML", dwFileAttributes=0x20) returned 0 [0186.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 5751 os_tid = 0x2794 [0184.976] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif")) returned 0x2020 [0184.978] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", dwFileAttributes=0x20) returned 1 [0189.165] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b28 [0189.166] GetFileSizeEx (in: hFile=0x1b28, lpFileSize=0xaf0f99c | out: lpFileSize=0xaf0f99c*=70364) returned 1 [0189.166] SetFilePointerEx (in: hFile=0x1b28, liDistanceToMove=0x112d8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.166] ReadFile (in: hFile=0x1b28, lpBuffer=0xaf0f978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaf0f988, lpOverlapped=0x0 | out: lpBuffer=0xaf0f978*, lpNumberOfBytesRead=0xaf0f988*=0x4, lpOverlapped=0x0) returned 1 [0189.168] SetFilePointerEx (in: hFile=0x1b28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0189.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0189.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.169] NtQuerySystemTime (in: CurrentTime=0xaf0f910 | out: CurrentTime=0xaf0f910*=132462177677448000) returned 0x0 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x1db0d70b [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x598d6e63 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x44325507 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x33f38784 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x3cdf97a7 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x69a86c47 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0xb80b46c [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x20d6a16d [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x4575ed44 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x1e0609e5 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x287e4a34 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x7e74de65 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x569ce79 [0189.169] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x6f318340 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x3fd5ee32 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x751d5dce [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x7824a2d0 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x27066135 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x642f2020 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x6d4e6769 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x55f36f03 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x59e9552d [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x76a931b1 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x74e23181 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x5815a473 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0xc273f33 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x1ba7a200 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x7877950 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x1172376f [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x641a3dae [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x29cb9b55 [0189.170] RtlRandomEx (in: Seed=0xaf0f908 | out: Seed=0xaf0f908) returned 0x7ce59294 [0189.184] SetFilePointerEx (in: hFile=0x1b28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.184] ReadFile (in: hFile=0x1b28, lpBuffer=0x7b97380, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xaf0f910, lpOverlapped=0x0 | out: lpBuffer=0x7b97380*, lpNumberOfBytesRead=0xaf0f910*=0x3c00, lpOverlapped=0x0) returned 1 [0189.189] SetFilePointerEx (in: hFile=0x1b28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25938 [0189.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3ea30 [0189.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0189.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c20) returned 1 [0189.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b9af88 [0189.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0189.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0189.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0189.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25938) returned 1 [0189.191] WriteFile (in: hFile=0x1b28, lpBuffer=0x7b9af88*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xaf0f910, lpOverlapped=0x0 | out: lpBuffer=0x7b9af88*, lpNumberOfBytesWritten=0xaf0f910*=0x3c00, lpOverlapped=0x0) returned 1 [0190.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9af88) returned 1 [0190.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b97380) returned 1 [0190.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37830 [0190.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a00) returned 1 [0190.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a37740 [0190.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0190.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0190.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0190.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0190.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41650) returned 1 [0190.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cb7c90 [0190.976] SetFilePointerEx (in: hFile=0x1b28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.976] WriteFile (in: hFile=0x1b28, lpBuffer=0x7cb7c90*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xaf0f990, lpOverlapped=0x0 | out: lpBuffer=0x7cb7c90*, lpNumberOfBytesWritten=0xaf0f990*=0x108, lpOverlapped=0x0) returned 1 [0192.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb82f0 [0192.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0192.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0192.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0192.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x16) returned 0x3eb8238 [0192.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0192.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0192.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0192.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0192.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82f0) returned 1 [0192.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2d) returned 0x3e79720 [0192.609] sprintf (in: _Dest=0x3e79720, _Format="%c%c" | out: _Dest="3a") returned 2 [0192.609] sprintf (in: _Dest=0x3e79722, _Format="%c%c" | out: _Dest="88") returned 2 [0192.609] sprintf (in: _Dest=0x3e79724, _Format="%c%c" | out: _Dest="b1") returned 2 [0192.609] sprintf (in: _Dest=0x3e79726, _Format="%c%c" | out: _Dest="14") returned 2 [0192.609] sprintf (in: _Dest=0x3e79728, _Format="%c%c" | out: _Dest="1c") returned 2 [0192.609] sprintf (in: _Dest=0x3e7972a, _Format="%c%c" | out: _Dest="0c") returned 2 [0192.609] sprintf (in: _Dest=0x3e7972c, _Format="%c%c" | out: _Dest="11") returned 2 [0192.609] sprintf (in: _Dest=0x3e7972e, _Format="%c%c" | out: _Dest="e9") returned 2 [0192.609] sprintf (in: _Dest=0x3e79730, _Format="%c%c" | out: _Dest="a3") returned 2 [0192.609] sprintf (in: _Dest=0x3e79732, _Format="%c%c" | out: _Dest="e4") returned 2 [0192.609] sprintf (in: _Dest=0x3e79734, _Format="%c%c" | out: _Dest="d2") returned 2 [0192.609] sprintf (in: _Dest=0x3e79736, _Format="%c%c" | out: _Dest="6b") returned 2 [0192.609] sprintf (in: _Dest=0x3e79738, _Format="%c%c" | out: _Dest="90") returned 2 [0192.609] sprintf (in: _Dest=0x3e7973a, _Format="%c%c" | out: _Dest="9a") returned 2 [0192.609] sprintf (in: _Dest=0x3e7973c, _Format="%c%c" | out: _Dest="90") returned 2 [0192.609] sprintf (in: _Dest=0x3e7973e, _Format="%c%c" | out: _Dest="48") returned 2 [0192.609] sprintf (in: _Dest=0x3e79740, _Format="%c%c" | out: _Dest="91") returned 2 [0192.609] sprintf (in: _Dest=0x3e79742, _Format="%c%c" | out: _Dest="e3") returned 2 [0192.609] sprintf (in: _Dest=0x3e79744, _Format="%c%c" | out: _Dest="4b") returned 2 [0192.609] sprintf (in: _Dest=0x3e79746, _Format="%c%c" | out: _Dest="57") returned 2 [0192.609] sprintf (in: _Dest=0x3e79748, _Format="%c%c" | out: _Dest="b3") returned 2 [0192.609] sprintf (in: _Dest=0x3e7974a, _Format="%c%c" | out: _Dest="a8") returned 2 [0192.609] RtlInitAnsiString (in: DestinationString=0xaf0f918, SourceString="3a88b1141c0c11e9a3e4d26b909a904891e34b57b3a8" | out: DestinationString="3a88b1141c0c11e9a3e4d26b909a904891e34b57b3a8") [0192.609] RtlAnsiStringToUnicodeString (in: DestinationString=0xaf0f910, SourceString="3a88b1141c0c11e9a3e4d26b909a904891e34b57b3a8", AllocateDestinationString=1 | out: DestinationString="3a88b1141c0c11e9a3e4d26b909a904891e34b57b3a8") returned 0x0 [0192.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x5a) returned 0x3e1ec08 [0192.610] RtlFreeAnsiString (AnsiString="3") [0192.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0192.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8238) returned 1 [0192.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0192.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7c90) returned 1 [0192.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37740) returned 1 [0192.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a00) returned 1 [0192.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37830) returned 1 [0192.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c20) returned 1 [0192.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6e8) returned 1 [0192.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0192.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f90) returned 1 [0192.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cbe960 [0192.611] wcscat (in: _Dest=0x7cbe960, _Source="3a88b1141c0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\3a88b1141c0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\3a88b1141c0" [0192.611] wcscat (in: _Dest=0x7cbe960, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\3a88b1141c0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\3a88b1141c0.68814f" [0192.611] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\3a88b1141c0.68814f", NtPathName=0xaf0f908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\3a88b1141c0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x3ea41e8 [0192.611] NtSetInformationFile (FileHandle=0x1b28, IoStatusBlock=0xaf0f910, FileInformation=0x3ea41e8, Length=0x134, FileInformationClass=0xa) returned 0x0 [0192.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea41e8) returned 1 [0192.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a564e0) returned 1 [0192.764] NtQueryInformationFile (in: FileHandle=0x1b28, IoStatusBlock=0xaf0f8e0, FileInformation=0xaf0f8e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaf0f8e0, FileInformation=0xaf0f8e8) returned 0x0 [0192.764] NtSetInformationFile (FileHandle=0x1b28, IoStatusBlock=0xaf0f8e0, FileInformation=0xaf0f8e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe960) returned 1 [0192.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec08) returned 1 [0192.835] FlushFileBuffers (hFile=0x1b28) returned 1 [0192.842] CloseHandle (hObject=0x1b28) returned 1 [0192.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cbf3c8 [0192.961] wcscpy (in: _Dest=0x7cbf3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0192.961] wcscat (in: _Dest=0x7cbf3c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" [0192.961] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814f-readme.txt")) returned 0x2020 [0192.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf3c8) returned 1 [0192.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38fc0) returned 1 Thread: id = 5752 os_tid = 0x220 [0184.979] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png")) returned 0x2020 [0184.979] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", dwFileAttributes=0x20) returned 1 [0187.353] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17e4 [0187.353] GetFileSizeEx (in: hFile=0x17e4, lpFileSize=0xaf6fa9c | out: lpFileSize=0xaf6fa9c*=4361) returned 1 [0187.353] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x1105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.353] ReadFile (in: hFile=0x17e4, lpBuffer=0xaf6fa78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaf6fa88, lpOverlapped=0x0 | out: lpBuffer=0xaf6fa78*, lpNumberOfBytesRead=0xaf6fa88*=0x4, lpOverlapped=0x0) returned 1 [0187.356] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0187.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0187.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0187.357] NtQuerySystemTime (in: CurrentTime=0xaf6fa10 | out: CurrentTime=0xaf6fa10*=132462177659352000) returned 0x0 [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x2d03b40c [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x3789b508 [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x436c1888 [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x7a4eb5e [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x6805af8f [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x1b8c5b1b [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x74dfbb8c [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x970d1cc [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x5aedc13f [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0xa9dd46 [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x520d0dde [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x48b00349 [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x74ebbc7a [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x2f99a7a7 [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x410f8d3 [0187.357] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x185e0ffe [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x771715de [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x2e78b605 [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x20a7b98c [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x570c41b1 [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x527164ae [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x19939d2f [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x55bd56e5 [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x70c72045 [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x3ce865d6 [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x78e77ffa [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x541ac282 [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x3bf638b1 [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x6d528744 [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x476cbf1f [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x3876d677 [0187.358] RtlRandomEx (in: Seed=0xaf6fa08 | out: Seed=0xaf6fa08) returned 0x1adc6d84 [0187.374] ReadFile (in: hFile=0x17e4, lpBuffer=0x7d88818, nNumberOfBytesToRead=0x1109, lpNumberOfBytesRead=0xaf6fa04, lpOverlapped=0x0 | out: lpBuffer=0x7d88818*, lpNumberOfBytesRead=0xaf6fa04*=0x1109, lpOverlapped=0x0) returned 1 [0187.374] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.375] WriteFile (in: hFile=0x17e4, lpBuffer=0x7d8c420*, nNumberOfBytesToWrite=0x1109, lpNumberOfBytesWritten=0xaf6fa08, lpOverlapped=0x0 | out: lpBuffer=0x7d8c420*, lpNumberOfBytesWritten=0xaf6fa08*=0x1109, lpOverlapped=0x0) returned 1 [0187.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0187.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0187.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0187.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d8c420) returned 1 [0187.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d88818) returned 1 [0187.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0187.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25788) returned 1 [0187.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x7a37620 [0187.708] SetFilePointerEx (in: hFile=0x17e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.708] WriteFile (in: hFile=0x17e4, lpBuffer=0x7cad4e8*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xaf6fa90, lpOverlapped=0x0 | out: lpBuffer=0x7cad4e8*, lpNumberOfBytesWritten=0xaf6fa90*=0x10a, lpOverlapped=0x0) returned 1 [0187.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad4e8) returned 1 [0187.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37650) returned 1 [0187.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0187.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37620) returned 1 [0187.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0187.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0187.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0187.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0187.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cb0270 [0187.773] wcscpy (in: _Dest=0x7cb0270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" [0187.773] wcscat (in: _Dest=0x7cb0270, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.68814f" [0187.773] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.68814f", NtPathName=0xaf6fa08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea2d68 [0187.800] FlushFileBuffers (hFile=0x17e4) returned 1 [0187.804] CloseHandle (hObject=0x17e4) returned 1 [0187.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7ca9e30 [0187.816] wcscpy (in: _Dest=0x7ca9e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0187.816] wcscat (in: _Dest=0x7ca9e30, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" [0187.816] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814f-readme.txt")) returned 0xffffffff [0187.816] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1550 [0187.835] WriteFile (in: hFile=0x1550, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaf6fa24, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xaf6fa24*=0x8b9, lpOverlapped=0x0) returned 1 [0187.846] CloseHandle (hObject=0x1550) returned 1 [0187.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9e30) returned 1 [0187.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80448) returned 1 Thread: id = 5753 os_tid = 0x564 [0184.980] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png")) returned 0x2020 [0184.980] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", dwFileAttributes=0x20) returned 1 [0189.264] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b38 [0189.264] GetFileSizeEx (in: hFile=0x1b38, lpFileSize=0xb19fb8c | out: lpFileSize=0xb19fb8c*=556) returned 1 [0189.264] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.264] ReadFile (in: hFile=0x1b38, lpBuffer=0xb19fb68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb19fb78, lpOverlapped=0x0 | out: lpBuffer=0xb19fb68*, lpNumberOfBytesRead=0xb19fb78*=0x4, lpOverlapped=0x0) returned 1 [0189.266] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0189.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0189.267] NtQuerySystemTime (in: CurrentTime=0xb19fb00 | out: CurrentTime=0xb19fb00*=132462177678384000) returned 0x0 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x64c91a86 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0xb62c2db [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x281a8141 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x683ff106 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x4905260d [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x5d615c8 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x311d2d65 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x7758d4f [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x13d02e33 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x3aaa2215 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x49cdc117 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x69dc2249 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x7a9b696b [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x5a2a0b33 [0189.267] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x7fa48a1b [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x760e6637 [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x71bf4117 [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x3c48ce1e [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x5eaebdec [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x5df4d3d8 [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x57b6a51e [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x21471972 [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x28ed784c [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x73f1799f [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x1e232d63 [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x5528639b [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x2ac09e4c [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x3478710c [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0xf54d4ce [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x7c2f3801 [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0xfed24f2 [0189.268] RtlRandomEx (in: Seed=0xb19faf8 | out: Seed=0xb19faf8) returned 0x1ede3103 [0189.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0189.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bc43e0 [0189.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0189.281] ReadFile (in: hFile=0x1b38, lpBuffer=0x7bc43e0, nNumberOfBytesToRead=0x22c, lpNumberOfBytesRead=0xb19faf4, lpOverlapped=0x0 | out: lpBuffer=0x7bc43e0*, lpNumberOfBytesRead=0xb19faf4*=0x22c, lpOverlapped=0x0) returned 1 [0189.282] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.282] WriteFile (in: hFile=0x1b38, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0x22c, lpNumberOfBytesWritten=0xb19faf8, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0xb19faf8*=0x22c, lpOverlapped=0x0) returned 1 [0192.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0192.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0192.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0192.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0192.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc43e0) returned 1 [0192.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 [0192.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25980) returned 1 [0192.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x7a376e0 [0192.395] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.395] WriteFile (in: hFile=0x1b38, lpBuffer=0x7b7c9b0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xb19fb80, lpOverlapped=0x0 | out: lpBuffer=0x7b7c9b0*, lpNumberOfBytesWritten=0xb19fb80*=0x108, lpOverlapped=0x0) returned 1 [0192.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c9b0) returned 1 [0192.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37860) returned 1 [0192.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0192.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a376e0) returned 1 [0192.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0192.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8f0) returned 1 [0192.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0192.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6c0) returned 1 [0192.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cbea88 [0192.639] wcscpy (in: _Dest=0x7cbea88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" [0192.639] wcscat (in: _Dest=0x7cbea88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.68814f" [0192.639] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.68814f", NtPathName=0xb19faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x134) returned 0x3ea3518 [0192.639] NtSetInformationFile (FileHandle=0x1b38, IoStatusBlock=0xb19fb00, FileInformation=0x3ea3518, Length=0x134, FileInformationClass=0xa) returned 0x0 [0193.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3518) returned 1 [0193.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c99a00) returned 1 [0193.120] NtQueryInformationFile (in: FileHandle=0x1b38, IoStatusBlock=0xb19fad0, FileInformation=0xb19fad8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb19fad0, FileInformation=0xb19fad8) returned 0x0 [0193.120] NtSetInformationFile (FileHandle=0x1b38, IoStatusBlock=0xb19fad0, FileInformation=0xb19fad8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbea88) returned 1 [0193.122] FlushFileBuffers (hFile=0x1b38) returned 1 [0193.184] CloseHandle (hObject=0x1b38) returned 1 [0193.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d555f0 [0193.271] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0193.271] wcscat (in: _Dest=0x3d555f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" [0193.271] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814f-readme.txt")) returned 0x2020 [0193.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0193.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300d718) returned 1 Thread: id = 5754 os_tid = 0x5f8 [0184.980] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png")) returned 0x2020 [0184.981] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", dwFileAttributes=0x20) returned 1 [0189.282] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfa4 [0189.283] GetFileSizeEx (in: hFile=0xfa4, lpFileSize=0xaaafe5c | out: lpFileSize=0xaaafe5c*=160) returned 1 [0189.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0189.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0189.283] NtQuerySystemTime (in: CurrentTime=0xaaafdd0 | out: CurrentTime=0xaaafdd0*=132462177678696000) returned 0x0 [0189.283] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x7007bf00 [0189.283] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x6728df40 [0189.283] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x3f532724 [0189.283] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x4a537748 [0189.283] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x535165ce [0189.283] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x7fe285cb [0189.283] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x5878273f [0189.283] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x32698b02 [0189.283] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x522478e9 [0189.284] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0xadf82c2 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x37dbb14a [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x66166bf5 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x675d58da [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x30be791d [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x5b8614a1 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x6186cec9 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x2bc2e67a [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x44ae0fa0 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x6444050f [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x2db18e77 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x1cfbbbbd [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x212976c [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x656c8bf [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x4ac17be5 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x340e3cc1 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x67a96980 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x2a0a8c5c [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x14add194 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x39491ebe [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x6c090945 [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x537c0ccb [0189.285] RtlRandomEx (in: Seed=0xaaafdc8 | out: Seed=0xaaafdc8) returned 0x48674fff [0189.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0189.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0189.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0189.298] ReadFile (in: hFile=0xfa4, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0xaaafdc4, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0xaaafdc4*=0xa0, lpOverlapped=0x0) returned 1 [0189.301] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.301] WriteFile (in: hFile=0xfa4, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xaaafdc8, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0xaaafdc8*=0xa0, lpOverlapped=0x0) returned 1 [0192.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0192.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0192.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0192.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0192.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0192.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0192.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ce0) returned 1 [0192.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e84718 [0192.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25ce0 [0192.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0192.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0192.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0192.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x42) returned 0x3e843f8 [0192.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0192.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0192.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0192.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0192.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ce0) returned 1 [0192.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3eca2e8 [0192.413] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.413] WriteFile (in: hFile=0xfa4, lpBuffer=0x3eca2e8*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0xaaafe50, lpOverlapped=0x0 | out: lpBuffer=0x3eca2e8*, lpNumberOfBytesWritten=0xaaafe50*=0x126, lpOverlapped=0x0) returned 1 [0192.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca2e8) returned 1 [0192.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e843f8) returned 1 [0192.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0192.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84718) returned 1 [0192.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4820) returned 1 [0192.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0192.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c48) returned 1 [0192.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5f8) returned 1 [0192.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ea3a38 [0192.636] wcscpy (in: _Dest=0x3ea3a38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" [0192.636] wcscat (in: _Dest=0x3ea3a38, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.68814f" [0192.636] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.68814f", NtPathName=0xaaafdc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x152) returned 0x3dce108 [0192.636] NtSetInformationFile (FileHandle=0xfa4, IoStatusBlock=0xaaafdd0, FileInformation=0x3dce108, Length=0x152, FileInformationClass=0xa) returned 0x0 [0193.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dce108) returned 1 [0193.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c98d10) returned 1 [0193.098] NtQueryInformationFile (in: FileHandle=0xfa4, IoStatusBlock=0xaaafda0, FileInformation=0xaaafda8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaaafda0, FileInformation=0xaaafda8) returned 0x0 [0193.098] NtSetInformationFile (FileHandle=0xfa4, IoStatusBlock=0xaaafda0, FileInformation=0xaaafda8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3a38) returned 1 [0193.103] FlushFileBuffers (hFile=0xfa4) returned 1 [0193.200] CloseHandle (hObject=0xfa4) returned 1 [0193.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b835a0 [0193.203] wcscpy (in: _Dest=0x7b835a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0193.203] wcscat (in: _Dest=0x7b835a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" [0193.203] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814f-readme.txt")) returned 0x2020 [0193.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b835a0) returned 1 [0193.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca1b0) returned 1 Thread: id = 5755 os_tid = 0x2314 [0184.981] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png")) returned 0x2020 [0184.981] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", dwFileAttributes=0x20) returned 1 [0189.301] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc0 [0189.301] GetFileSizeEx (in: hFile=0x1bc0, lpFileSize=0x9d3ff0c | out: lpFileSize=0x9d3ff0c*=252) returned 1 [0189.302] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.302] ReadFile (in: hFile=0x1bc0, lpBuffer=0x9d3fee8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d3fef8, lpOverlapped=0x0 | out: lpBuffer=0x9d3fee8*, lpNumberOfBytesRead=0x9d3fef8*=0x4, lpOverlapped=0x0) returned 1 [0189.304] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0189.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0189.304] NtQuerySystemTime (in: CurrentTime=0x9d3fe80 | out: CurrentTime=0x9d3fe80*=132462177678852000) returned 0x0 [0189.304] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x11a2fbd8 [0189.304] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x5ab15a2b [0189.304] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x14fb2db9 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x1f87a8b1 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x677e90c0 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0xbc74359 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0xb98e983 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x4983fb5f [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x23236b2 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x3e65499f [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x7c995ccf [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0xfa45243 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x2e6bcd37 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x61384d85 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x5e55f437 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x42662316 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x124ca219 [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x464fc0de [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x1d754ddb [0189.305] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x68bc5fcb [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x579b35b [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x84de2f9 [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x1f7491b4 [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x32197b33 [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x21633aad [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x361694b5 [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x2fd3fe51 [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0xc8a7eb9 [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x2a8c49cf [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x6e46ac67 [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x428a4a91 [0189.306] RtlRandomEx (in: Seed=0x9d3fe78 | out: Seed=0x9d3fe78) returned 0x6cf5aeec [0189.320] ReadFile (in: hFile=0x1bc0, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0xfc, lpNumberOfBytesRead=0x9d3fe74, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0x9d3fe74*=0xfc, lpOverlapped=0x0) returned 1 [0189.320] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.320] WriteFile (in: hFile=0x1bc0, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x9d3fe78, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x9d3fe78*=0xfc, lpOverlapped=0x0) returned 1 [0192.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0192.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0192.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0192.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0192.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0192.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0192.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a257d0) returned 1 [0192.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a394d0 [0192.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a257d0 [0192.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e670 [0192.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0192.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0192.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a396e0 [0192.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0192.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0192.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e98) returned 1 [0192.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0192.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a257d0) returned 1 [0192.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3ea37a8 [0192.422] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.423] WriteFile (in: hFile=0x1bc0, lpBuffer=0x3ea37a8*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x9d3ff00, lpOverlapped=0x0 | out: lpBuffer=0x3ea37a8*, lpNumberOfBytesWritten=0x9d3ff00*=0x132, lpOverlapped=0x0) returned 1 [0192.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea37a8) returned 1 [0192.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a396e0) returned 1 [0192.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0192.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a394d0) returned 1 [0192.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2818) returned 1 [0192.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0192.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0192.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9978) returned 1 [0192.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e0a560 [0192.644] wcscpy (in: _Dest=0x3e0a560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" [0192.644] wcscat (in: _Dest=0x3e0a560, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.68814f" [0192.644] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.68814f", NtPathName=0x9d3fe78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15e) returned 0x3dcd460 [0192.644] NtSetInformationFile (FileHandle=0x1bc0, IoStatusBlock=0x9d3fe80, FileInformation=0x3dcd460, Length=0x15e, FileInformationClass=0xa) returned 0x0 [0193.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcd460) returned 1 [0193.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea94b8) returned 1 [0193.248] NtQueryInformationFile (in: FileHandle=0x1bc0, IoStatusBlock=0x9d3fe50, FileInformation=0x9d3fe58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9d3fe50, FileInformation=0x9d3fe58) returned 0x0 [0193.248] NtSetInformationFile (FileHandle=0x1bc0, IoStatusBlock=0x9d3fe50, FileInformation=0x9d3fe58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0a560) returned 1 [0193.255] FlushFileBuffers (hFile=0x1bc0) returned 1 [0193.257] CloseHandle (hObject=0x1bc0) returned 1 [0193.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d555f0 [0193.262] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0193.262] wcscat (in: _Dest=0x3d555f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" [0193.262] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814f-readme.txt")) returned 0x2020 [0193.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0193.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2ff8) returned 1 Thread: id = 5756 os_tid = 0x23fc [0184.982] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png")) returned 0x2020 [0184.982] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", dwFileAttributes=0x20) returned 1 [0189.324] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc4 [0189.324] GetFileSizeEx (in: hFile=0x1bc4, lpFileSize=0xb3ef99c | out: lpFileSize=0xb3ef99c*=160) returned 1 [0189.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0189.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0189.325] NtQuerySystemTime (in: CurrentTime=0xb3ef910 | out: CurrentTime=0xb3ef910*=132462177679008000) returned 0x0 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x65f76230 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x6112962c [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x1f8f9a43 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x62abb6d2 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x34fb91b7 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x3919d235 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x64e1bbaf [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x1dfc3898 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x3307da2d [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x418d2a04 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x2705df95 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x54d1882e [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x7d1d231f [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x6dc08659 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x1e4316c0 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x2b810d49 [0189.325] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x585b3f3c [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x4429a099 [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x5e82bb7c [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x3512b4f8 [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0xe64701e [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x66d32dc0 [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x526c687b [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x7cf01da5 [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x23181e0b [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x1d71635d [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x6990e0f9 [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x70a10290 [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x4a6f7710 [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x37a420bf [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x290035bb [0189.326] RtlRandomEx (in: Seed=0xb3ef908 | out: Seed=0xb3ef908) returned 0x549b1855 [0189.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0189.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0189.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0189.342] ReadFile (in: hFile=0x1bc4, lpBuffer=0x7be7380, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0xb3ef904, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xb3ef904*=0xa0, lpOverlapped=0x0) returned 1 [0189.344] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.344] WriteFile (in: hFile=0x1bc4, lpBuffer=0x7beeb90*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xb3ef908, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesWritten=0xb3ef908*=0xa0, lpOverlapped=0x0) returned 1 [0192.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0192.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0192.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0192.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0192.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0192.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0192.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25db8) returned 1 [0192.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a39790 [0192.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25db8 [0192.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e148 [0192.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0192.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0192.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4e) returned 0x7a39688 [0192.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0192.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0192.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2818) returned 1 [0192.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0192.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25db8) returned 1 [0192.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3ea38f0 [0192.420] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.420] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3ea38f0*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0xb3ef990, lpOverlapped=0x0 | out: lpBuffer=0x3ea38f0*, lpNumberOfBytesWritten=0xb3ef990*=0x132, lpOverlapped=0x0) returned 1 [0192.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38f0) returned 1 [0192.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39688) returned 1 [0192.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0192.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39790) returned 1 [0192.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0192.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9928) returned 1 [0192.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca850) returned 1 [0192.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8a0) returned 1 [0192.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e0ac18 [0192.642] wcscpy (in: _Dest=0x3e0ac18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" [0192.642] wcscat (in: _Dest=0x3e0ac18, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.68814f" [0192.642] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.68814f", NtPathName=0xb3ef908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x15e) returned 0x3dcde38 [0192.642] NtSetInformationFile (FileHandle=0x1bc4, IoStatusBlock=0xb3ef910, FileInformation=0x3dcde38, Length=0x15e, FileInformationClass=0xa) returned 0x0 [0193.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcde38) returned 1 [0193.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c995b0) returned 1 [0193.108] NtQueryInformationFile (in: FileHandle=0x1bc4, IoStatusBlock=0xb3ef8e0, FileInformation=0xb3ef8e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb3ef8e0, FileInformation=0xb3ef8e8) returned 0x0 [0193.108] NtSetInformationFile (FileHandle=0x1bc4, IoStatusBlock=0xb3ef8e0, FileInformation=0xb3ef8e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0193.110] FlushFileBuffers (hFile=0x1bc4) returned 1 [0193.114] CloseHandle (hObject=0x1bc4) returned 1 [0193.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b83100 [0193.117] wcscpy (in: _Dest=0x7b83100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0193.118] wcscat (in: _Dest=0x7b83100, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" [0193.118] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814f-readme.txt")) returned 0x2020 [0193.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83100) returned 1 [0193.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3140) returned 1 Thread: id = 5757 os_tid = 0x27a0 [0184.983] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png")) returned 0x2020 [0184.983] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", dwFileAttributes=0x20) returned 1 [0189.344] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc8 [0189.345] GetFileSizeEx (in: hFile=0x1bc8, lpFileSize=0x813fb54 | out: lpFileSize=0x813fb54*=166) returned 1 [0189.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0189.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa80 [0189.345] NtQuerySystemTime (in: CurrentTime=0x813fac8 | out: CurrentTime=0x813fac8*=132462177679320000) returned 0x0 [0189.345] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x4526c835 [0189.345] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x42e1819f [0189.345] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x5246c188 [0189.345] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x19838125 [0189.345] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x4c7805a3 [0189.345] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x3559a8d6 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x78dbd65f [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x360b08fb [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x36d145ff [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x4306b447 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x6a860a40 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x6829f3c0 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0xf776ad3 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x1fe58a0c [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x46219ca9 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x3a995103 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x63df74f7 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x4ba4ad79 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x75b00d66 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x2c89726b [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x2609b338 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x2f3f948c [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0xec19515 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x40f1bd05 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x8aed05 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x3f204d35 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x2eafc547 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x2cb1709e [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x59305f0a [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x27861e73 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x6dd4fcd9 [0189.346] RtlRandomEx (in: Seed=0x813fac0 | out: Seed=0x813fac0) returned 0x763b5569 [0189.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0189.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0189.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c143e0 [0189.358] ReadFile (in: hFile=0x1bc8, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0xa6, lpNumberOfBytesRead=0x813fabc, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0x813fabc*=0xa6, lpOverlapped=0x0) returned 1 [0189.364] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.364] WriteFile (in: hFile=0x1bc8, lpBuffer=0x7c143e0*, nNumberOfBytesToWrite=0xa6, lpNumberOfBytesWritten=0x813fac0, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesWritten=0x813fac0*=0xa6, lpOverlapped=0x0) returned 1 [0192.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec65a8 [0192.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec54a0 [0192.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec54a0) returned 1 [0192.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0192.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0192.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e8c8) returned 1 [0192.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3008a0) returned 1 [0192.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe1d48 [0192.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3008a0 [0192.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e8c8 [0192.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec54a0 [0192.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec54a0) returned 1 [0192.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2fe6c68 [0192.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec54a0 [0192.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5450 [0192.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5450) returned 1 [0192.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e8c8) returned 1 [0192.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3008a0) returned 1 [0192.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x138) returned 0x3ea2d68 [0192.477] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.477] WriteFile (in: hFile=0x1bc8, lpBuffer=0x3ea2d68*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x813fb48, lpOverlapped=0x0 | out: lpBuffer=0x3ea2d68*, lpNumberOfBytesWritten=0x813fb48*=0x138, lpOverlapped=0x0) returned 1 [0192.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0192.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6c68) returned 1 [0192.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec54a0) returned 1 [0192.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe1d48) returned 1 [0192.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec65a8) returned 1 [0192.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca990) returned 1 [0192.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0192.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca030) returned 1 [0192.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14e) returned 0x3e0ad70 [0192.649] wcscpy (in: _Dest=0x3e0ad70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" [0192.649] wcscat (in: _Dest=0x3e0ad70, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.68814f" [0192.649] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.68814f", NtPathName=0x813fac0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x164) returned 0x2fee950 [0192.649] NtSetInformationFile (FileHandle=0x1bc8, IoStatusBlock=0x813fac8, FileInformation=0x2fee950, Length=0x164, FileInformationClass=0xa) returned 0x0 [0193.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fee950) returned 1 [0193.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a571d0) returned 1 [0193.244] NtQueryInformationFile (in: FileHandle=0x1bc8, IoStatusBlock=0x813fa98, FileInformation=0x813faa0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x813fa98, FileInformation=0x813faa0) returned 0x0 [0193.244] NtSetInformationFile (FileHandle=0x1bc8, IoStatusBlock=0x813fa98, FileInformation=0x813faa0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ad70) returned 1 [0193.246] FlushFileBuffers (hFile=0x1bc8) returned 1 [0193.264] CloseHandle (hObject=0x1bc8) returned 1 [0193.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d555f0 [0193.269] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0193.269] wcscat (in: _Dest=0x3d555f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" [0193.269] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814f-readme.txt")) returned 0x2020 [0193.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0193.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3288) returned 1 Thread: id = 5758 os_tid = 0x27ac [0184.984] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png")) returned 0x2020 [0184.984] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", dwFileAttributes=0x20) returned 1 [0189.365] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1950 [0189.365] GetFileSizeEx (in: hFile=0x1950, lpFileSize=0xbe8f844 | out: lpFileSize=0xbe8f844*=160) returned 1 [0189.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa80 [0189.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0189.366] NtQuerySystemTime (in: CurrentTime=0xbe8f7b8 | out: CurrentTime=0xbe8f7b8*=132462177679476000) returned 0x0 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x5be8dec [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x371dea18 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x683140bd [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x1bd06a61 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x3ae79a6c [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0xe0ff3f9 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x3b6fc061 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x4bf820ef [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x3891dba8 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x6dc14588 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x4aa0a6bf [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x44af464c [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x51a4fe09 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x62f3952a [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x1f4d8a66 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x54b8530b [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0xe859693 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x2d8e0c26 [0189.366] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x2491b503 [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x2934735 [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x5bb72423 [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x66f167bf [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x2507a243 [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0xe5e146c [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x699a7ceb [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x13c9c130 [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x6820cd67 [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x254913ce [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x3f644534 [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x1675b24e [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x2345ec00 [0189.367] RtlRandomEx (in: Seed=0xbe8f7b0 | out: Seed=0xbe8f7b0) returned 0x595bf7f0 [0189.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0189.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0189.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0189.382] ReadFile (in: hFile=0x1950, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0xa0, lpNumberOfBytesRead=0xbe8f7ac, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0xbe8f7ac*=0xa0, lpOverlapped=0x0) returned 1 [0189.385] SetFilePointerEx (in: hFile=0x1950, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.385] WriteFile (in: hFile=0x1950, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0xbe8f7b0, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0xbe8f7b0*=0xa0, lpOverlapped=0x0) returned 1 [0192.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0192.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0192.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f10) returned 1 [0192.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0192.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0192.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0192.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300fa8) returned 1 [0192.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe6f68 [0192.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x300fa8 [0192.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e5f8 [0192.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0192.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f10) returned 1 [0192.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2fe69c8 [0192.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0192.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec65a8 [0192.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec65a8) returned 1 [0192.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0192.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300fa8) returned 1 [0192.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3660 [0192.454] SetFilePointerEx (in: hFile=0x1950, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.454] WriteFile (in: hFile=0x1950, lpBuffer=0x3ea3660*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0xbe8f838, lpOverlapped=0x0 | out: lpBuffer=0x3ea3660*, lpNumberOfBytesWritten=0xbe8f838*=0x136, lpOverlapped=0x0) returned 1 [0192.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3660) returned 1 [0192.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe69c8) returned 1 [0192.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f10) returned 1 [0192.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0192.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e98) returned 1 [0192.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0192.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0192.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca008) returned 1 [0192.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14c) returned 0x3e0b178 [0192.653] wcscpy (in: _Dest=0x3e0b178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" [0192.653] wcscat (in: _Dest=0x3e0b178, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.68814f" [0192.653] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.68814f", NtPathName=0xbe8f7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x162) returned 0x2fee080 [0192.654] NtSetInformationFile (FileHandle=0x1950, IoStatusBlock=0xbe8f7b8, FileInformation=0x2fee080, Length=0x162, FileInformationClass=0xa) returned 0x0 [0193.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fee080) returned 1 [0193.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a59ac8) returned 1 [0193.229] NtQueryInformationFile (in: FileHandle=0x1950, IoStatusBlock=0xbe8f788, FileInformation=0xbe8f790, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbe8f788, FileInformation=0xbe8f790) returned 0x0 [0193.229] NtSetInformationFile (FileHandle=0x1950, IoStatusBlock=0xbe8f788, FileInformation=0xbe8f790, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b178) returned 1 [0193.232] FlushFileBuffers (hFile=0x1950) returned 1 [0193.237] CloseHandle (hObject=0x1950) returned 1 [0193.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d555f0 [0193.241] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\" [0193.242] wcscat (in: _Dest=0x3d555f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" [0193.242] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\68814f-readme.txt")) returned 0x2020 [0193.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0193.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea33d0) returned 1 Thread: id = 5759 os_tid = 0x27b0 [0184.985] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json")) returned 0x2020 [0191.770] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0198.558] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc00 [0198.559] GetFileSizeEx (in: hFile=0xc00, lpFileSize=0x9b1fa94 | out: lpFileSize=0x9b1fa94*=265) returned 1 [0198.559] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.559] ReadFile (in: hFile=0xc00, lpBuffer=0x9b1fa70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b1fa80, lpOverlapped=0x0 | out: lpBuffer=0x9b1fa70*, lpNumberOfBytesRead=0x9b1fa80*=0x4, lpOverlapped=0x0) returned 1 [0198.562] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0198.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0198.562] NtQuerySystemTime (in: CurrentTime=0x9b1fa08 | out: CurrentTime=0x9b1fa08*=132462177771360000) returned 0x0 [0198.562] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x52021984 [0198.562] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x24e209e7 [0198.562] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x5b36168c [0198.562] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x5ec3a71d [0198.562] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x428e1b03 [0198.562] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x20bb19f8 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x39a4b992 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x2787d049 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x2b841d8e [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x3d3d5d1b [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x7fae0362 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x6d0143 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x30532b3b [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x48f5215e [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x5dd5ea8c [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x61273040 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x8d327f9 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x6f4361bc [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x70748e12 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x6f123a59 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x32d82c4f [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x163269df [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x3c65fb05 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x2526c3d9 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x3a6fb9c8 [0198.563] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x9025683 [0198.564] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x7111b6e8 [0198.564] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x6d1ee9cd [0198.564] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x67686958 [0198.564] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x2470ceac [0198.564] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x7c89224 [0198.564] RtlRandomEx (in: Seed=0x9b1fa00 | out: Seed=0x9b1fa00) returned 0x183c4d47 [0198.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e9b478 [0198.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e9f080 [0198.580] ReadFile (in: hFile=0xc00, lpBuffer=0x10e9b478, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0x9b1f9fc, lpOverlapped=0x0 | out: lpBuffer=0x10e9b478*, lpNumberOfBytesRead=0x9b1f9fc*=0x109, lpOverlapped=0x0) returned 1 [0198.580] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.581] WriteFile (in: hFile=0xc00, lpBuffer=0x10e9f080*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x9b1fa00, lpOverlapped=0x0 | out: lpBuffer=0x10e9f080*, lpNumberOfBytesWritten=0x9b1fa00*=0x109, lpOverlapped=0x0) returned 1 [0200.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca030 [0200.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0200.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca990) returned 1 [0200.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e9f080) returned 1 [0200.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e9b478) returned 1 [0200.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0200.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84cb0) returned 1 [0200.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e864e8 [0200.075] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.075] WriteFile (in: hFile=0xc00, lpBuffer=0x7cbd830*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9b1fa88, lpOverlapped=0x0 | out: lpBuffer=0x7cbd830*, lpNumberOfBytesWritten=0x9b1fa88*=0x10c, lpOverlapped=0x0) returned 1 [0200.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0200.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52ea0) returned 1 [0200.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52ea0 [0200.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d60 [0200.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53be8 [0200.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53be8) returned 1 [0200.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.898] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="ed") returned 2 [0200.898] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.898] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="40") returned 2 [0200.898] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="35") returned 2 [0200.898] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="fb") returned 2 [0200.898] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.898] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.898] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="0f") returned 2 [0200.898] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="3f") returned 2 [0200.898] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="fa") returned 2 [0200.898] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="58") returned 2 [0200.898] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="1a") returned 2 [0200.898] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="69") returned 2 [0200.898] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="38") returned 2 [0200.898] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.898] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.898] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="2e") returned 2 [0200.898] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="29") returned 2 [0200.898] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.898] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="6a") returned 2 [0200.898] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="00") returned 2 [0200.898] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="c7") returned 2 [0200.898] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="0d") returned 2 [0200.898] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="04") returned 2 [0200.898] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="6f") returned 2 [0200.898] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="66") returned 2 [0200.898] RtlInitAnsiString (in: DestinationString=0x9b1fa10, SourceString="edff4035fbe85a0f3ffa581a6938b6d32e29bc6a00c70d046f66" | out: DestinationString="edff4035fbe85a0f3ffa581a6938b6d32e29bc6a00c70d046f66") [0200.898] RtlAnsiStringToUnicodeString (in: DestinationString=0x9b1fa08, SourceString="edff4035fbe85a0f3ffa581a6938b6d32e29bc6a00c70d046f66", AllocateDestinationString=1 | out: DestinationString="edff4035fbe85a0f3ffa581a6938b6d32e29bc6a00c70d046f66") returned 0x0 [0200.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c4c8 [0200.899] wcscat (in: _Dest=0x7ddac28, _Source="edff4035fbe85" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\edff4035fbe85") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\edff4035fbe85" [0200.899] wcscat (in: _Dest=0x7ddac28, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\edff4035fbe85.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\edff4035fbe85.68814f" [0200.899] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\edff4035fbe85.68814f", NtPathName=0x9b1fa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\edff4035fbe85.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9ab0 [0201.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9ab0) returned 1 [0201.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e93a58) returned 1 [0201.176] NtQueryInformationFile (in: FileHandle=0xc00, IoStatusBlock=0x9b1f9d8, FileInformation=0x9b1f9e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9b1f9d8, FileInformation=0x9b1f9e0) returned 0x0 [0201.176] NtSetInformationFile (FileHandle=0xc00, IoStatusBlock=0x9b1f9d8, FileInformation=0x9b1f9e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddac28) returned 1 [0201.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c4c8) returned 1 [0201.433] FlushFileBuffers (hFile=0xc00) returned 1 [0201.445] CloseHandle (hObject=0xc00) returned 1 [0208.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cab3c8 [0208.593] wcscpy (in: _Dest=0x7cab3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\" [0208.593] wcscat (in: _Dest=0x7cab3c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\68814F-Readme.txt" [0208.594] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\68814f-readme.txt")) returned 0xffffffff [0208.594] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ca\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf70 [0209.610] WriteFile (in: hFile=0xf70, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9b1fa1c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9b1fa1c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.655] CloseHandle (hObject=0xf70) returned 1 [0209.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab3c8) returned 1 [0209.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d562a8) returned 1 Thread: id = 5760 os_tid = 0x27b4 [0184.985] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json")) returned 0x2020 [0191.770] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0198.581] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2204 [0198.582] GetFileSizeEx (in: hFile=0x2204, lpFileSize=0x8f6fd24 | out: lpFileSize=0x8f6fd24*=259) returned 1 [0198.582] SetFilePointerEx (in: hFile=0x2204, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.582] ReadFile (in: hFile=0x2204, lpBuffer=0x8f6fd00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8f6fd10, lpOverlapped=0x0 | out: lpBuffer=0x8f6fd00*, lpNumberOfBytesRead=0x8f6fd10*=0x4, lpOverlapped=0x0) returned 1 [0198.584] SetFilePointerEx (in: hFile=0x2204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0198.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0198.585] NtQuerySystemTime (in: CurrentTime=0x8f6fc98 | out: CurrentTime=0x8f6fc98*=132462177771672000) returned 0x0 [0198.585] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x7abdcc51 [0198.585] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x5dc90ea9 [0198.585] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x623f3a43 [0198.585] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x7211e669 [0198.585] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0xdd28bed [0198.585] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x6a2d286e [0198.585] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0xe227f7d [0198.585] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x3e8ca80 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x693bfcc5 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x77074c51 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x2d94ccc3 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x1a6b82ba [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x2f43dfb3 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x3d5fc8e4 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x4fbe4baf [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x2699ae5d [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x5242d140 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x5684dc84 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x50c118d [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x68fea701 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x1d47adf [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x251d1733 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x334e4747 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0xcc12364 [0198.586] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x2febee5a [0198.587] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x12e2c372 [0198.587] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x4cbaf9a0 [0198.587] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0xe0edebe [0198.587] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x38735a9c [0198.587] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x5383d3e0 [0198.587] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x2d3a4527 [0198.587] RtlRandomEx (in: Seed=0x8f6fc90 | out: Seed=0x8f6fc90) returned 0x339b47c3 [0198.605] ReadFile (in: hFile=0x2204, lpBuffer=0x10ea2c88, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x8f6fc8c, lpOverlapped=0x0 | out: lpBuffer=0x10ea2c88*, lpNumberOfBytesRead=0x8f6fc8c*=0x103, lpOverlapped=0x0) returned 1 [0198.605] SetFilePointerEx (in: hFile=0x2204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.605] WriteFile (in: hFile=0x2204, lpBuffer=0x10ea6890*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x8f6fc90, lpOverlapped=0x0 | out: lpBuffer=0x10ea6890*, lpNumberOfBytesWritten=0x8f6fc90*=0x103, lpOverlapped=0x0) returned 1 [0200.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0200.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0200.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0200.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ea6890) returned 1 [0200.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ea2c88) returned 1 [0200.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cea0) returned 1 [0200.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84cf8) returned 1 [0200.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85ee8 [0200.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0200.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85fa8 [0200.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0200.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa80 [0200.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0200.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cea0) returned 1 [0200.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84cf8) returned 1 [0200.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbce58 [0200.101] SetFilePointerEx (in: hFile=0x2204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.101] WriteFile (in: hFile=0x2204, lpBuffer=0x7cbce58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8f6fd18, lpOverlapped=0x0 | out: lpBuffer=0x7cbce58*, lpNumberOfBytesWritten=0x8f6fd18*=0x10c, lpOverlapped=0x0) returned 1 [0200.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0200.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2ca68 [0200.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0200.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0200.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b780 [0200.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0200.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0200.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0200.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ca68) returned 1 [0200.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0200.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.980] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="8b") returned 2 [0200.980] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.981] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="20") returned 2 [0200.981] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="f0") returned 2 [0200.981] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.981] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="06") returned 2 [0200.981] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.981] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="da") returned 2 [0200.981] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.981] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="8a") returned 2 [0200.981] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.981] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="c1") returned 2 [0200.981] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="72") returned 2 [0200.981] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="e2") returned 2 [0200.981] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.981] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="0f") returned 2 [0200.981] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="af") returned 2 [0200.981] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="98") returned 2 [0200.981] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="0e") returned 2 [0200.981] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.981] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="6a") returned 2 [0200.981] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="ec") returned 2 [0200.981] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="59") returned 2 [0200.981] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="39") returned 2 [0200.981] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="f2") returned 2 [0200.981] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.982] RtlInitAnsiString (in: DestinationString=0x8f6fca0, SourceString="8be820f0e3066dda5a8ad3c172e2a60faf980e6e6aec5939f2f4" | out: DestinationString="8be820f0e3066dda5a8ad3c172e2a60faf980e6e6aec5939f2f4") [0200.982] RtlAnsiStringToUnicodeString (in: DestinationString=0x8f6fc98, SourceString="8be820f0e3066dda5a8ad3c172e2a60faf980e6e6aec5939f2f4", AllocateDestinationString=1 | out: DestinationString="8be820f0e3066dda5a8ad3c172e2a60faf980e6e6aec5939f2f4") returned 0x0 [0200.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c978 [0200.982] wcscat (in: _Dest=0x3eca690, _Source="8be820f0e3066" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\8be820f0e3066") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\8be820f0e3066" [0200.982] wcscat (in: _Dest=0x3eca690, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\8be820f0e3066.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\8be820f0e3066.68814f" [0200.982] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\8be820f0e3066.68814f", NtPathName=0x8f6fc90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\8be820f0e3066.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3288 [0201.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3288) returned 1 [0201.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9e128) returned 1 [0201.246] NtQueryInformationFile (in: FileHandle=0x2204, IoStatusBlock=0x8f6fc68, FileInformation=0x8f6fc70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8f6fc68, FileInformation=0x8f6fc70) returned 0x0 [0201.246] NtSetInformationFile (FileHandle=0x2204, IoStatusBlock=0x8f6fc68, FileInformation=0x8f6fc70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0203.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca690) returned 1 [0203.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c978) returned 1 [0203.170] FlushFileBuffers (hFile=0x2204) returned 1 [0204.319] CloseHandle (hObject=0x2204) returned 1 [0206.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7fb68 [0206.213] wcscpy (in: _Dest=0x7b7fb68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\" [0206.213] wcscat (in: _Dest=0x7b7fb68, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\68814F-Readme.txt" [0206.213] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\68814f-readme.txt")) returned 0xffffffff [0206.213] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\cs\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1218 [0208.779] WriteFile (in: hFile=0x1218, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8f6fcac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8f6fcac*=0x8b9, lpOverlapped=0x0) returned 1 [0210.202] CloseHandle (hObject=0x1218) returned 1 [0210.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fb68) returned 1 [0210.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x330cd0) returned 1 Thread: id = 5761 os_tid = 0x27b8 [0184.986] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json")) returned 0x2020 [0191.771] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0198.468] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1740 [0198.468] GetFileSizeEx (in: hFile=0x1740, lpFileSize=0xc77f80c | out: lpFileSize=0xc77f80c*=243) returned 1 [0198.468] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.469] ReadFile (in: hFile=0x1740, lpBuffer=0xc77f7e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc77f7f8, lpOverlapped=0x0 | out: lpBuffer=0xc77f7e8*, lpNumberOfBytesRead=0xc77f7f8*=0x4, lpOverlapped=0x0) returned 1 [0198.471] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b48 [0198.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533f0 [0198.474] NtQuerySystemTime (in: CurrentTime=0xc77f780 | out: CurrentTime=0xc77f780*=132462177770580000) returned 0x0 [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x147a2019 [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x6f869322 [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x7339a2ca [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x7f9831 [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x4fb8270d [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x1ff2c69c [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x7bf35b6c [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x78a4a3cf [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x62bf60e8 [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x3937aa3d [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x736a51ab [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x52a18fe3 [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x3b04b16f [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x23b86f2a [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x5fffb9e5 [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x3874db6c [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x51990896 [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x369bf21b [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x216b27bc [0198.474] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x4081bbf2 [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x78b1276 [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x6a90a3d3 [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x194ed75a [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x7157e1ac [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x2d2fe9c5 [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x199eb273 [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x4b359b21 [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x58ae67a4 [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x3c3903bd [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x30a3e1c2 [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x45e52252 [0198.475] RtlRandomEx (in: Seed=0xc77f778 | out: Seed=0xc77f778) returned 0x5e8d3937 [0198.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e7d0c0 [0198.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e80cc8 [0198.487] ReadFile (in: hFile=0x1740, lpBuffer=0x10e7d0c0, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0xc77f774, lpOverlapped=0x0 | out: lpBuffer=0x10e7d0c0*, lpNumberOfBytesRead=0xc77f774*=0xf3, lpOverlapped=0x0) returned 1 [0198.487] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.487] WriteFile (in: hFile=0x1740, lpBuffer=0x10e80cc8*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0xc77f778, lpOverlapped=0x0 | out: lpBuffer=0x10e80cc8*, lpNumberOfBytesWritten=0xc77f778*=0xf3, lpOverlapped=0x0) returned 1 [0200.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54228 [0200.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53fa8 [0200.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53fa8) returned 1 [0200.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e80cc8) returned 1 [0200.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e7d0c0) returned 1 [0200.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0200.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84b90) returned 1 [0200.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86428 [0200.063] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.064] WriteFile (in: hFile=0x1740, lpBuffer=0x7cbd3d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc77f800, lpOverlapped=0x0 | out: lpBuffer=0x7cbd3d0*, lpNumberOfBytesWritten=0xc77f800*=0x10c, lpOverlapped=0x0) returned 1 [0200.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537d8 [0200.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e537d8) returned 1 [0200.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e537d8 [0200.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c10 [0200.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53710 [0200.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53710) returned 1 [0200.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.880] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="5d") returned 2 [0200.881] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="b1") returned 2 [0200.881] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="9d") returned 2 [0200.881] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="9f") returned 2 [0200.881] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="a1") returned 2 [0200.881] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="29") returned 2 [0200.881] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="2e") returned 2 [0200.881] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="e5") returned 2 [0200.881] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="d6") returned 2 [0200.881] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="a3") returned 2 [0200.881] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.881] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="5e") returned 2 [0200.881] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="d0") returned 2 [0200.881] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.881] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="2e") returned 2 [0200.881] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.881] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="34") returned 2 [0200.881] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.881] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="31") returned 2 [0200.881] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="4c") returned 2 [0200.881] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="15") returned 2 [0200.881] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.881] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="be") returned 2 [0200.881] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="ca") returned 2 [0200.881] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="a1") returned 2 [0200.881] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="43") returned 2 [0200.882] RtlInitAnsiString (in: DestinationString=0xc77f788, SourceString="5db19d9fa1292ee5d6a39b5ed0bb2ef334ff314c153dbecaa143" | out: DestinationString="5db19d9fa1292ee5d6a39b5ed0bb2ef334ff314c153dbecaa143") [0200.882] RtlAnsiStringToUnicodeString (in: DestinationString=0xc77f780, SourceString="5db19d9fa1292ee5d6a39b5ed0bb2ef334ff314c153dbecaa143", AllocateDestinationString=1 | out: DestinationString="5db19d9fa1292ee5d6a39b5ed0bb2ef334ff314c153dbecaa143") returned 0x0 [0200.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c798 [0200.882] wcscat (in: _Dest=0x7dda748, _Source="5db19d9fa1292" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\5db19d9fa1292") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\5db19d9fa1292" [0200.882] wcscat (in: _Dest=0x7dda748, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\5db19d9fa1292.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\5db19d9fa1292.68814f" [0200.882] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\5db19d9fa1292.68814f", NtPathName=0xc77f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\5db19d9fa1292.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9590 [0201.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9590) returned 1 [0201.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e931b8) returned 1 [0201.171] NtQueryInformationFile (in: FileHandle=0x1740, IoStatusBlock=0xc77f750, FileInformation=0xc77f758, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc77f750, FileInformation=0xc77f758) returned 0x0 [0201.171] NtSetInformationFile (FileHandle=0x1740, IoStatusBlock=0xc77f750, FileInformation=0xc77f758, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda748) returned 1 [0201.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c798) returned 1 [0201.420] FlushFileBuffers (hFile=0x1740) returned 1 [0201.431] CloseHandle (hObject=0x1740) returned 1 [0208.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cab618 [0208.600] wcscpy (in: _Dest=0x7cab618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\" [0208.601] wcscat (in: _Dest=0x7cab618, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\68814F-Readme.txt" [0208.601] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\68814f-readme.txt")) returned 0xffffffff [0208.601] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\da\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1714 [0209.031] WriteFile (in: hFile=0x1714, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc77f794, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc77f794*=0x8b9, lpOverlapped=0x0) returned 1 [0209.716] CloseHandle (hObject=0x1714) returned 1 [0209.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab618) returned 1 [0209.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041f38) returned 1 Thread: id = 5762 os_tid = 0x27bc [0184.986] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json")) returned 0x2020 [0191.771] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0198.488] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10c4 [0198.489] GetFileSizeEx (in: hFile=0x10c4, lpFileSize=0x8cdfd14 | out: lpFileSize=0x8cdfd14*=256) returned 1 [0198.489] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.489] ReadFile (in: hFile=0x10c4, lpBuffer=0x8cdfcf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8cdfd00, lpOverlapped=0x0 | out: lpBuffer=0x8cdfcf0*, lpNumberOfBytesRead=0x8cdfd00*=0x4, lpOverlapped=0x0) returned 1 [0198.491] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533f0 [0198.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d00 [0198.492] NtQuerySystemTime (in: CurrentTime=0x8cdfc88 | out: CurrentTime=0x8cdfc88*=132462177770736000) returned 0x0 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x2ebe7289 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x71eb8c48 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x4b899a07 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0xa75a2c5 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x347ca8ee [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x6f9f859f [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x48f82779 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x2431e2e7 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x726af377 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x27af332a [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x28e44a49 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x514b7c0 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x7f9a1b32 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x4f708f80 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x66f581de [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0xc53f146 [0198.492] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x1ca3f33e [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x50eb863c [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x6ae44204 [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x2c4bcc7b [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x4ab8720c [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x7a36aa95 [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0xe8b2f66 [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x77091c48 [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x2908f9d6 [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x363b1767 [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x71feb1fa [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x30980a43 [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x1a26f597 [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x70b5ebc1 [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x7c177c1f [0198.493] RtlRandomEx (in: Seed=0x8cdfc80 | out: Seed=0x8cdfc80) returned 0x61bd0d94 [0198.506] ReadFile (in: hFile=0x10c4, lpBuffer=0x10e848d0, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x8cdfc7c, lpOverlapped=0x0 | out: lpBuffer=0x10e848d0*, lpNumberOfBytesRead=0x8cdfc7c*=0x100, lpOverlapped=0x0) returned 1 [0198.506] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.506] WriteFile (in: hFile=0x10c4, lpBuffer=0x10e884d8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x8cdfc80, lpOverlapped=0x0 | out: lpBuffer=0x10e884d8*, lpNumberOfBytesWritten=0x8cdfc80*=0x100, lpOverlapped=0x0) returned 1 [0200.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca710 [0200.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca198 [0200.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca198) returned 1 [0200.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e884d8) returned 1 [0200.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e848d0) returned 1 [0200.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ccc0) returned 1 [0200.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84bd8) returned 1 [0200.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86488 [0200.066] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.066] WriteFile (in: hFile=0x10c4, lpBuffer=0x7cbd4e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8cdfd08, lpOverlapped=0x0 | out: lpBuffer=0x7cbd4e8*, lpNumberOfBytesWritten=0x8cdfd08*=0x10c, lpOverlapped=0x0) returned 1 [0200.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d50 [0200.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d50) returned 1 [0200.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53d50 [0200.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0200.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b48 [0200.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b48) returned 1 [0200.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.885] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.885] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="e2") returned 2 [0200.885] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="60") returned 2 [0200.885] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="ba") returned 2 [0200.885] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="72") returned 2 [0200.885] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="0d") returned 2 [0200.885] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="06") returned 2 [0200.885] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.885] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="1a") returned 2 [0200.885] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="61") returned 2 [0200.885] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="15") returned 2 [0200.885] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="d7") returned 2 [0200.885] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="95") returned 2 [0200.885] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="c1") returned 2 [0200.885] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="5f") returned 2 [0200.885] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="89") returned 2 [0200.886] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="9e") returned 2 [0200.886] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="93") returned 2 [0200.886] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.886] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="83") returned 2 [0200.886] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="55") returned 2 [0200.886] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="db") returned 2 [0200.886] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="69") returned 2 [0200.886] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="1c") returned 2 [0200.886] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="d0") returned 2 [0200.886] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="db") returned 2 [0200.886] RtlInitAnsiString (in: DestinationString=0x8cdfc90, SourceString="7ae260ba720d06dc1a6115d795c15f899e93d38355db691cd0db" | out: DestinationString="7ae260ba720d06dc1a6115d795c15f899e93d38355db691cd0db") [0200.886] RtlAnsiStringToUnicodeString (in: DestinationString=0x8cdfc88, SourceString="7ae260ba720d06dc1a6115d795c15f899e93d38355db691cd0db", AllocateDestinationString=1 | out: DestinationString="7ae260ba720d06dc1a6115d795c15f899e93d38355db691cd0db") returned 0x0 [0200.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c5b8 [0200.886] wcscat (in: _Dest=0x7dda880, _Source="7ae260ba720d0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\7ae260ba720d0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\7ae260ba720d0" [0200.886] wcscat (in: _Dest=0x7dda880, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\7ae260ba720d0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\7ae260ba720d0.68814f" [0200.886] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\7ae260ba720d0.68814f", NtPathName=0x8cdfc80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\7ae260ba720d0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd96d8 [0201.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd96d8) returned 1 [0201.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e933e0) returned 1 [0201.173] NtQueryInformationFile (in: FileHandle=0x10c4, IoStatusBlock=0x8cdfc58, FileInformation=0x8cdfc60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8cdfc58, FileInformation=0x8cdfc60) returned 0x0 [0201.173] NtSetInformationFile (FileHandle=0x10c4, IoStatusBlock=0x8cdfc58, FileInformation=0x8cdfc60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda880) returned 1 [0201.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c5b8) returned 1 [0201.423] FlushFileBuffers (hFile=0x10c4) returned 1 [0201.434] CloseHandle (hObject=0x10c4) returned 1 [0208.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cab868 [0208.667] wcscpy (in: _Dest=0x7cab868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\" [0208.667] wcscat (in: _Dest=0x7cab868, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\68814F-Readme.txt" [0208.667] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\68814f-readme.txt")) returned 0xffffffff [0208.667] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\de\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1248 [0209.700] WriteFile (in: hFile=0x1248, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8cdfc9c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8cdfc9c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.702] CloseHandle (hObject=0x1248) returned 1 [0209.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab868) returned 1 [0209.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3042500) returned 1 Thread: id = 5763 os_tid = 0x640 [0184.987] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json")) returned 0x2020 [0191.771] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0198.506] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1618 [0198.507] GetFileSizeEx (in: hFile=0x1618, lpFileSize=0xb9bfc4c | out: lpFileSize=0xb9bfc4c*=329) returned 1 [0198.507] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x145, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.507] ReadFile (in: hFile=0x1618, lpBuffer=0xb9bfc28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb9bfc38, lpOverlapped=0x0 | out: lpBuffer=0xb9bfc28*, lpNumberOfBytesRead=0xb9bfc38*=0x4, lpOverlapped=0x0) returned 1 [0198.515] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d00 [0198.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53be8 [0198.515] NtQuerySystemTime (in: CurrentTime=0xb9bfbc0 | out: CurrentTime=0xb9bfbc0*=132462177770892000) returned 0x0 [0198.515] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x67dcf7d4 [0198.515] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x3f7fdebc [0198.515] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x26773487 [0198.515] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x1f7faca1 [0198.515] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x5e480466 [0198.515] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x428a8295 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x46594584 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x53f9080 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x7d400985 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x4b9e4e40 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x5cf135da [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x357dc9a3 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x4ad1ec97 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x5f14f406 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x15e395f6 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x275b7394 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x15fc8e6c [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x2e148cb5 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x73e5b93a [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0xdb91c72 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x4eb861f8 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x43bcb62f [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x5c4fe6c1 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x4f9cdf34 [0198.516] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x6e389308 [0198.517] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x727a17e4 [0198.517] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x53259602 [0198.517] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x5d6a9060 [0198.517] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x73a9ad52 [0198.517] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x46954c0 [0198.517] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x1c90d9cc [0198.517] RtlRandomEx (in: Seed=0xb9bfbb8 | out: Seed=0xb9bfbb8) returned 0x16fa948d [0198.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e8c0e0 [0198.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e90060 [0198.536] ReadFile (in: hFile=0x1618, lpBuffer=0x10e8c0e0, nNumberOfBytesToRead=0x149, lpNumberOfBytesRead=0xb9bfbb4, lpOverlapped=0x0 | out: lpBuffer=0x10e8c0e0*, lpNumberOfBytesRead=0xb9bfbb4*=0x149, lpOverlapped=0x0) returned 1 [0198.536] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.536] WriteFile (in: hFile=0x1618, lpBuffer=0x10e90060*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0xb9bfbb8, lpOverlapped=0x0 | out: lpBuffer=0x10e90060*, lpNumberOfBytesWritten=0xb9bfbb8*=0x149, lpOverlapped=0x0) returned 1 [0200.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0200.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e28 [0200.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e28) returned 1 [0200.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e90060) returned 1 [0200.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e8c0e0) returned 1 [0200.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cd38) returned 1 [0200.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84c20) returned 1 [0200.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e864b8 [0200.070] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.070] WriteFile (in: hFile=0x1618, lpBuffer=0x7cbd600*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb9bfc40, lpOverlapped=0x0 | out: lpBuffer=0x7cbd600*, lpNumberOfBytesWritten=0xb9bfc40*=0x10c, lpOverlapped=0x0) returned 1 [0200.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0200.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0200.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52a68 [0200.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c60 [0200.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533f0 [0200.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533f0) returned 1 [0200.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.889] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="80") returned 2 [0200.889] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="a0") returned 2 [0200.889] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="03") returned 2 [0200.889] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="61") returned 2 [0200.889] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="56") returned 2 [0200.889] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="67") returned 2 [0200.889] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="3b") returned 2 [0200.889] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="90") returned 2 [0200.889] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.889] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="44") returned 2 [0200.889] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="70") returned 2 [0200.889] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.889] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.889] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="b8") returned 2 [0200.889] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="ae") returned 2 [0200.889] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="8c") returned 2 [0200.890] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="81") returned 2 [0200.890] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="69") returned 2 [0200.890] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="2e") returned 2 [0200.890] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.890] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="80") returned 2 [0200.890] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="ab") returned 2 [0200.890] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.890] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="02") returned 2 [0200.890] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="2e") returned 2 [0200.890] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="e9") returned 2 [0200.890] RtlInitAnsiString (in: DestinationString=0xb9bfbc8, SourceString="80a0036156673b90f44470a2bbb8ae8c81692e5a80abd9022ee9" | out: DestinationString="80a0036156673b90f44470a2bbb8ae8c81692e5a80abd9022ee9") [0200.890] RtlAnsiStringToUnicodeString (in: DestinationString=0xb9bfbc0, SourceString="80a0036156673b90f44470a2bbb8ae8c81692e5a80abd9022ee9", AllocateDestinationString=1 | out: DestinationString="80a0036156673b90f44470a2bbb8ae8c81692e5a80abd9022ee9") returned 0x0 [0200.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c6a8 [0200.890] wcscat (in: _Dest=0x7dda9b8, _Source="80a0036156673" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\80a0036156673") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\80a0036156673" [0200.890] wcscat (in: _Dest=0x7dda9b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\80a0036156673.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\80a0036156673.68814f" [0200.890] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\80a0036156673.68814f", NtPathName=0xb9bfbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\80a0036156673.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9820 [0201.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9820) returned 1 [0201.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e93608) returned 1 [0201.175] NtQueryInformationFile (in: FileHandle=0x1618, IoStatusBlock=0xb9bfb90, FileInformation=0xb9bfb98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb9bfb90, FileInformation=0xb9bfb98) returned 0x0 [0201.175] NtSetInformationFile (FileHandle=0x1618, IoStatusBlock=0xb9bfb90, FileInformation=0xb9bfb98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda9b8) returned 1 [0201.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c6a8) returned 1 [0201.430] FlushFileBuffers (hFile=0x1618) returned 1 [0201.438] CloseHandle (hObject=0x1618) returned 1 [0208.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cab740 [0208.619] wcscpy (in: _Dest=0x7cab740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\" [0208.619] wcscat (in: _Dest=0x7cab740, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\68814F-Readme.txt" [0208.619] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\68814f-readme.txt")) returned 0xffffffff [0208.619] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\el\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf70 [0209.666] WriteFile (in: hFile=0xf70, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb9bfbd4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb9bfbd4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.668] CloseHandle (hObject=0xf70) returned 1 [0209.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab740) returned 1 [0209.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 Thread: id = 5764 os_tid = 0x72c [0184.987] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json")) returned 0x2020 [0187.061] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0195.195] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2284 [0195.195] GetFileSizeEx (in: hFile=0x2284, lpFileSize=0xc3cfc5c | out: lpFileSize=0xc3cfc5c*=224) returned 1 [0195.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0195.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0195.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0195.195] NtQuerySystemTime (in: CurrentTime=0xc3cfbd0 | out: CurrentTime=0xc3cfbd0*=132462177737664000) returned 0x0 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x1508e90f [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x59daaf09 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x5c6d7f4a [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x6e685591 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x4a3bd0cf [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x5d5ce9d9 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x407ea871 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x4d025695 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x26cd6f6a [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x3a86f771 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x12d12f94 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0xad416e3 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x79744ab9 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x10faa29c [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x79955ef [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x63646632 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x7684e23b [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x8f42649 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x177d0053 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x5f7876c [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x1f14dad8 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x51816c3d [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x458e2a4a [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x62985361 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x727f7ee3 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x64789fb7 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x2cea3a40 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x6bfd176c [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x6183d9c8 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x22376a6d [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x2ef3c979 [0195.196] RtlRandomEx (in: Seed=0xc3cfbc8 | out: Seed=0xc3cfbc8) returned 0x233bcac7 [0195.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0195.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba2798 [0195.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba63a0 [0195.205] ReadFile (in: hFile=0x2284, lpBuffer=0x7ba2798, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xc3cfbc4, lpOverlapped=0x0 | out: lpBuffer=0x7ba2798*, lpNumberOfBytesRead=0xc3cfbc4*=0xe0, lpOverlapped=0x0) returned 1 [0195.207] SetFilePointerEx (in: hFile=0x2284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.207] WriteFile (in: hFile=0x2284, lpBuffer=0x7ba63a0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xc3cfbc8, lpOverlapped=0x0 | out: lpBuffer=0x7ba63a0*, lpNumberOfBytesWritten=0xc3cfbc8*=0xe0, lpOverlapped=0x0) returned 1 [0195.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0195.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0195.461] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0195.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba63a0) returned 1 [0195.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba2798) returned 1 [0195.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0195.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0195.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a377a0 [0195.462] SetFilePointerEx (in: hFile=0x2284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.462] WriteFile (in: hFile=0x2284, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc3cfc50, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xc3cfc50*=0x10c, lpOverlapped=0x0) returned 1 [0195.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30bdbd8 [0195.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0195.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0195.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0195.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5928 [0195.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0195.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0195.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0195.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0195.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdbd8) returned 1 [0195.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2de40 [0195.555] sprintf (in: _Dest=0x7a2de40, _Format="%c%c" | out: _Dest="55") returned 2 [0195.555] sprintf (in: _Dest=0x7a2de42, _Format="%c%c" | out: _Dest="12") returned 2 [0195.555] sprintf (in: _Dest=0x7a2de44, _Format="%c%c" | out: _Dest="28") returned 2 [0195.555] sprintf (in: _Dest=0x7a2de46, _Format="%c%c" | out: _Dest="97") returned 2 [0195.555] sprintf (in: _Dest=0x7a2de48, _Format="%c%c" | out: _Dest="e5") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de4a, _Format="%c%c" | out: _Dest="e7") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de4c, _Format="%c%c" | out: _Dest="fe") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de4e, _Format="%c%c" | out: _Dest="15") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de50, _Format="%c%c" | out: _Dest="dd") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de52, _Format="%c%c" | out: _Dest="a3") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de54, _Format="%c%c" | out: _Dest="b6") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de56, _Format="%c%c" | out: _Dest="55") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de58, _Format="%c%c" | out: _Dest="96") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de5a, _Format="%c%c" | out: _Dest="db") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de5c, _Format="%c%c" | out: _Dest="51") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de5e, _Format="%c%c" | out: _Dest="a3") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de60, _Format="%c%c" | out: _Dest="a8") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de62, _Format="%c%c" | out: _Dest="f8") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de64, _Format="%c%c" | out: _Dest="6e") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de66, _Format="%c%c" | out: _Dest="0d") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de68, _Format="%c%c" | out: _Dest="46") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de6a, _Format="%c%c" | out: _Dest="09") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de6c, _Format="%c%c" | out: _Dest="9e") returned 2 [0195.556] sprintf (in: _Dest=0x7a2de6e, _Format="%c%c" | out: _Dest="db") returned 2 [0195.557] sprintf (in: _Dest=0x7a2de70, _Format="%c%c" | out: _Dest="86") returned 2 [0195.557] sprintf (in: _Dest=0x7a2de72, _Format="%c%c" | out: _Dest="d9") returned 2 [0195.557] RtlInitAnsiString (in: DestinationString=0xc3cfbd8, SourceString="55122897e5e7fe15dda3b65596db51a3a8f86e0d46099edb86d9" | out: DestinationString="55122897e5e7fe15dda3b65596db51a3a8f86e0d46099edb86d9") [0195.557] RtlAnsiStringToUnicodeString (in: DestinationString=0xc3cfbd0, SourceString="55122897e5e7fe15dda3b65596db51a3a8f86e0d46099edb86d9", AllocateDestinationString=1 | out: DestinationString="55122897e5e7fe15dda3b65596db51a3a8f86e0d46099edb86d9") returned 0x0 [0195.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3df68 [0195.557] wcscat (in: _Dest=0x3db8148, _Source="55122897e5e7f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\55122897e5e7f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\55122897e5e7f" [0195.557] wcscat (in: _Dest=0x3db8148, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\55122897e5e7f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\55122897e5e7f.68814f" [0195.557] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\55122897e5e7f.68814f", NtPathName=0xc3cfbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\55122897e5e7f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3518 [0196.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3518) returned 1 [0196.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33dd0) returned 1 [0196.026] NtQueryInformationFile (in: FileHandle=0x2284, IoStatusBlock=0xc3cfba0, FileInformation=0xc3cfba8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc3cfba0, FileInformation=0xc3cfba8) returned 0x0 [0196.027] NtSetInformationFile (FileHandle=0x2284, IoStatusBlock=0xc3cfba0, FileInformation=0xc3cfba8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db8148) returned 1 [0196.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0196.164] FlushFileBuffers (hFile=0x2284) returned 1 [0196.170] CloseHandle (hObject=0x2284) returned 1 [0196.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55e08 [0196.224] wcscpy (in: _Dest=0x3d55e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\" [0196.224] wcscat (in: _Dest=0x3d55e08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\68814F-Readme.txt" [0196.224] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\68814f-readme.txt")) returned 0xffffffff [0196.224] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0196.354] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc3cfbe4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc3cfbe4*=0x8b9, lpOverlapped=0x0) returned 1 [0196.356] CloseHandle (hObject=0x1140) returned 1 [0196.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55e08) returned 1 [0196.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 Thread: id = 5765 os_tid = 0xbb0 [0184.988] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json")) returned 0x2020 [0187.061] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0188.023] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd78 [0188.023] GetFileSizeEx (in: hFile=0xd78, lpFileSize=0xafafbec | out: lpFileSize=0xafafbec*=224) returned 1 [0188.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0188.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0188.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0188.023] NtQuerySystemTime (in: CurrentTime=0xafafb60 | out: CurrentTime=0xafafb60*=132462177666060000) returned 0x0 [0188.023] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x7eea5649 [0188.023] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x59de249f [0188.023] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x177f1c1c [0188.023] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x9578a28 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x2a76f30f [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x10ba9773 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x6a08bc45 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x7a265c1e [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x7a4dee76 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x7562d700 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x2b825c0 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x5d6fe99 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x47527425 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x2f6b2b5f [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x469bc001 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x3a2e8b0 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x3c09a433 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x31361531 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x47431981 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x16e21901 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x52cadeb3 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x44d2319 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x710fcb02 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x4b19d7b3 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x3d48a88 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0xcb50346 [0188.024] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x67eceb01 [0188.025] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x8003b1c [0188.025] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x3abd20bf [0188.025] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x5517cb80 [0188.025] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x2e999f79 [0188.025] RtlRandomEx (in: Seed=0xafafb58 | out: Seed=0xafafb58) returned 0x2fe942b1 [0188.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0188.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d53fa8 [0188.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d57bb0 [0188.037] ReadFile (in: hFile=0xd78, lpBuffer=0x7d53fa8, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xafafb54, lpOverlapped=0x0 | out: lpBuffer=0x7d53fa8*, lpNumberOfBytesRead=0xafafb54*=0xe0, lpOverlapped=0x0) returned 1 [0188.040] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.040] WriteFile (in: hFile=0xd78, lpBuffer=0x7d57bb0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xafafb58, lpOverlapped=0x0 | out: lpBuffer=0x7d57bb0*, lpNumberOfBytesWritten=0xafafb58*=0xe0, lpOverlapped=0x0) returned 1 [0189.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0189.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0189.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d57bb0) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d53fa8) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0189.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a252c0) returned 1 [0189.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0189.403] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.403] WriteFile (in: hFile=0xd78, lpBuffer=0x7a38930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xafafbe0, lpOverlapped=0x0 | out: lpBuffer=0x7a38930*, lpNumberOfBytesWritten=0xafafbe0*=0x10c, lpOverlapped=0x0) returned 1 [0192.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41e30 [0192.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0192.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0192.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0192.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec6580 [0192.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0192.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0192.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0192.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0192.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e30) returned 1 [0192.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x30671c0 [0192.560] sprintf (in: _Dest=0x30671c0, _Format="%c%c" | out: _Dest="c5") returned 2 [0192.560] sprintf (in: _Dest=0x30671c2, _Format="%c%c" | out: _Dest="cd") returned 2 [0192.561] sprintf (in: _Dest=0x30671c4, _Format="%c%c" | out: _Dest="86") returned 2 [0192.561] sprintf (in: _Dest=0x30671c6, _Format="%c%c" | out: _Dest="14") returned 2 [0192.561] sprintf (in: _Dest=0x30671c8, _Format="%c%c" | out: _Dest="75") returned 2 [0192.561] sprintf (in: _Dest=0x30671ca, _Format="%c%c" | out: _Dest="f4") returned 2 [0192.561] sprintf (in: _Dest=0x30671cc, _Format="%c%c" | out: _Dest="f6") returned 2 [0192.561] sprintf (in: _Dest=0x30671ce, _Format="%c%c" | out: _Dest="9f") returned 2 [0192.561] sprintf (in: _Dest=0x30671d0, _Format="%c%c" | out: _Dest="14") returned 2 [0192.561] sprintf (in: _Dest=0x30671d2, _Format="%c%c" | out: _Dest="ab") returned 2 [0192.561] sprintf (in: _Dest=0x30671d4, _Format="%c%c" | out: _Dest="b9") returned 2 [0192.561] sprintf (in: _Dest=0x30671d6, _Format="%c%c" | out: _Dest="23") returned 2 [0192.561] sprintf (in: _Dest=0x30671d8, _Format="%c%c" | out: _Dest="3c") returned 2 [0192.561] sprintf (in: _Dest=0x30671da, _Format="%c%c" | out: _Dest="34") returned 2 [0192.561] sprintf (in: _Dest=0x30671dc, _Format="%c%c" | out: _Dest="fa") returned 2 [0192.561] sprintf (in: _Dest=0x30671de, _Format="%c%c" | out: _Dest="c5") returned 2 [0192.562] sprintf (in: _Dest=0x30671e0, _Format="%c%c" | out: _Dest="57") returned 2 [0192.562] sprintf (in: _Dest=0x30671e2, _Format="%c%c" | out: _Dest="3c") returned 2 [0192.562] sprintf (in: _Dest=0x30671e4, _Format="%c%c" | out: _Dest="be") returned 2 [0192.562] sprintf (in: _Dest=0x30671e6, _Format="%c%c" | out: _Dest="55") returned 2 [0192.562] sprintf (in: _Dest=0x30671e8, _Format="%c%c" | out: _Dest="a6") returned 2 [0192.562] sprintf (in: _Dest=0x30671ea, _Format="%c%c" | out: _Dest="51") returned 2 [0192.562] sprintf (in: _Dest=0x30671ec, _Format="%c%c" | out: _Dest="c5") returned 2 [0192.562] sprintf (in: _Dest=0x30671ee, _Format="%c%c" | out: _Dest="91") returned 2 [0192.562] sprintf (in: _Dest=0x30671f0, _Format="%c%c" | out: _Dest="cb") returned 2 [0192.562] sprintf (in: _Dest=0x30671f2, _Format="%c%c" | out: _Dest="f5") returned 2 [0192.562] RtlInitAnsiString (in: DestinationString=0xafafb68, SourceString="c5cd861475f4f69f14abb9233c34fac5573cbe55a651c591cbf5" | out: DestinationString="c5cd861475f4f69f14abb9233c34fac5573cbe55a651c591cbf5") [0192.562] RtlAnsiStringToUnicodeString (in: DestinationString=0xafafb60, SourceString="c5cd861475f4f69f14abb9233c34fac5573cbe55a651c591cbf5", AllocateDestinationString=1 | out: DestinationString="c5cd861475f4f69f14abb9233c34fac5573cbe55a651c591cbf5") returned 0x0 [0192.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e7d8 [0192.563] RtlFreeAnsiString (AnsiString="c") [0192.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30671c0) returned 1 [0192.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0192.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec49d8) returned 1 [0192.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38930) returned 1 [0192.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37530) returned 1 [0192.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0192.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37680) returned 1 [0192.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0192.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0192.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0192.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0192.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7cc0020 [0192.564] wcscat (in: _Dest=0x7cc0020, _Source="c5cd861475f4f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\c5cd861475f4f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\c5cd861475f4f" [0192.564] wcscat (in: _Dest=0x7cc0020, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\c5cd861475f4f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\c5cd861475f4f.68814f" [0192.564] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\c5cd861475f4f.68814f", NtPathName=0xafafb58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\c5cd861475f4f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3e10 [0192.564] NtSetInformationFile (FileHandle=0xd78, IoStatusBlock=0xafafb60, FileInformation=0x3ea3e10, Length=0x13a, FileInformationClass=0xa) returned 0x0 [0192.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3e10) returned 1 [0192.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4e2b8) returned 1 [0192.702] NtQueryInformationFile (in: FileHandle=0xd78, IoStatusBlock=0xafafb30, FileInformation=0xafafb38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xafafb30, FileInformation=0xafafb38) returned 0x0 [0192.702] NtSetInformationFile (FileHandle=0xd78, IoStatusBlock=0xafafb30, FileInformation=0xafafb38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0020) returned 1 [0192.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0192.787] FlushFileBuffers (hFile=0xd78) returned 1 [0192.802] CloseHandle (hObject=0xd78) returned 1 [0192.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbee00 [0192.909] wcscpy (in: _Dest=0x7cbee00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\" [0192.909] wcscat (in: _Dest=0x7cbee00, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\68814F-Readme.txt" [0192.909] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\68814f-readme.txt")) returned 0xffffffff [0192.909] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0193.165] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xafafb74, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xafafb74*=0x8b9, lpOverlapped=0x0) returned 1 [0193.168] CloseHandle (hObject=0x1518) returned 1 [0193.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbee00) returned 1 [0193.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30413a8) returned 1 Thread: id = 5766 os_tid = 0x56c [0184.988] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json")) returned 0x2020 [0187.062] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0190.612] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb5c [0190.613] GetFileSizeEx (in: hFile=0xb5c, lpFileSize=0x96efcbc | out: lpFileSize=0x96efcbc*=272) returned 1 [0190.613] SetFilePointerEx (in: hFile=0xb5c, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.613] ReadFile (in: hFile=0xb5c, lpBuffer=0x96efc98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x96efca8, lpOverlapped=0x0 | out: lpBuffer=0x96efc98*, lpNumberOfBytesRead=0x96efca8*=0x4, lpOverlapped=0x0) returned 1 [0190.615] SetFilePointerEx (in: hFile=0xb5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0190.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb7d8 [0190.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb850 [0190.615] NtQuerySystemTime (in: CurrentTime=0x96efc30 | out: CurrentTime=0x96efc30*=132462177691956000) returned 0x0 [0190.615] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x1b4b0382 [0190.615] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x307d1512 [0190.615] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x33faee40 [0190.615] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0xd1849be [0190.615] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x1991de68 [0190.615] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x5e1f26c0 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x4b65c746 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x58eee780 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x737a49 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x75d1b99b [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x6e070335 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x2e0d840 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x54d2eaf1 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x4064600e [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x17348479 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x4fc07ca3 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x355df4ac [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x721868ad [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x51567bf [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x5c9d7fdc [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x40b4464b [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x6a102a72 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x13824c5a [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x16262fbd [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x6cd03952 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x112ff6b9 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x19007b6 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x41dc4ae7 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x3945e8ef [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x1b061e4c [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x67d5c136 [0190.616] RtlRandomEx (in: Seed=0x96efc28 | out: Seed=0x96efc28) returned 0x3b91c02c [0190.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb800) returned 1 [0190.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba63a0 [0190.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba9fa8 [0190.632] ReadFile (in: hFile=0xb5c, lpBuffer=0x7ba63a0, nNumberOfBytesToRead=0x110, lpNumberOfBytesRead=0x96efc24, lpOverlapped=0x0 | out: lpBuffer=0x7ba63a0*, lpNumberOfBytesRead=0x96efc24*=0x110, lpOverlapped=0x0) returned 1 [0190.632] SetFilePointerEx (in: hFile=0xb5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.632] WriteFile (in: hFile=0xb5c, lpBuffer=0x7ba9fa8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x96efc28, lpOverlapped=0x0 | out: lpBuffer=0x7ba9fa8*, lpNumberOfBytesWritten=0x96efc28*=0x110, lpOverlapped=0x0) returned 1 [0192.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5450 [0192.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6198 [0192.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6198) returned 1 [0192.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba9fa8) returned 1 [0192.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba63a0) returned 1 [0192.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0192.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37890 [0192.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0192.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6198 [0192.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6198) returned 1 [0192.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37800 [0192.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6198 [0192.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0192.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5db0) returned 1 [0192.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0192.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deca58 [0192.504] SetFilePointerEx (in: hFile=0xb5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.505] WriteFile (in: hFile=0xb5c, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x96efcb0, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x96efcb0*=0x10c, lpOverlapped=0x0) returned 1 [0192.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb82f0 [0192.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca008 [0192.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca008) returned 1 [0192.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca008 [0192.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0192.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa80 [0192.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0192.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82f0) returned 1 [0192.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.656] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="85") returned 2 [0192.656] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="0e") returned 2 [0192.656] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="68") returned 2 [0192.656] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="ec") returned 2 [0192.656] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="e9") returned 2 [0192.656] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="da") returned 2 [0192.656] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="a6") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="93") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="df") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="31") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="36") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="17") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="c5") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="d3") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="f4") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="a1") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="2e") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="fa") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="45") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="2b") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="66") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="47") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="20") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="4d") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="d1") returned 2 [0192.657] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="dc") returned 2 [0192.657] RtlInitAnsiString (in: DestinationString=0x96efc38, SourceString="850e68ece9daa693df313617c5d3f4a12efa452b6647204dd1dc" | out: DestinationString="850e68ece9daa693df313617c5d3f4a12efa452b6647204dd1dc") [0192.657] RtlAnsiStringToUnicodeString (in: DestinationString=0x96efc30, SourceString="850e68ece9daa693df313617c5d3f4a12efa452b6647204dd1dc", AllocateDestinationString=1 | out: DestinationString="850e68ece9daa693df313617c5d3f4a12efa452b6647204dd1dc") returned 0x0 [0192.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3df68 [0192.658] RtlFreeAnsiString (AnsiString="8") [0192.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca008) returned 1 [0192.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0192.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0192.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37800) returned 1 [0192.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6198) returned 1 [0192.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37890) returned 1 [0192.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5450) returned 1 [0192.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb7d8) returned 1 [0192.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede050) returned 1 [0192.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd600) returned 1 [0192.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca2e8 [0192.659] wcscat (in: _Dest=0x3eca2e8, _Source="850e68ece9daa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\850e68ece9daa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\850e68ece9daa" [0192.659] wcscat (in: _Dest=0x3eca2e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\850e68ece9daa.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\850e68ece9daa.68814f" [0192.659] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\850e68ece9daa.68814f", NtPathName=0x96efc28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\850e68ece9daa.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3660 [0192.659] NtSetInformationFile (FileHandle=0xb5c, IoStatusBlock=0x96efc30, FileInformation=0x3ea3660, Length=0x13a, FileInformationClass=0xa) returned 0x0 [0192.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3660) returned 1 [0192.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a56fa8) returned 1 [0192.766] NtQueryInformationFile (in: FileHandle=0xb5c, IoStatusBlock=0x96efc00, FileInformation=0x96efc08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x96efc00, FileInformation=0x96efc08) returned 0x0 [0192.766] NtSetInformationFile (FileHandle=0xb5c, IoStatusBlock=0x96efc00, FileInformation=0x96efc08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca2e8) returned 1 [0192.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0192.839] FlushFileBuffers (hFile=0xb5c) returned 1 [0192.863] CloseHandle (hObject=0xb5c) returned 1 [0192.966] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbf3c8 [0192.966] wcscpy (in: _Dest=0x7cbf3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\" [0192.966] wcscat (in: _Dest=0x7cbf3c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\68814F-Readme.txt" [0192.966] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\68814f-readme.txt")) returned 0xffffffff [0192.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2250 [0192.992] WriteFile (in: hFile=0x2250, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x96efc44, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x96efc44*=0x8b9, lpOverlapped=0x0) returned 1 [0192.999] CloseHandle (hObject=0x2250) returned 1 [0193.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf3c8) returned 1 [0193.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80320) returned 1 Thread: id = 5767 os_tid = 0x2ac [0184.988] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html")) returned 0x2020 [0186.385] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", dwFileAttributes=0x20) returned 1 [0189.245] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f5c [0191.291] GetFileSizeEx (in: hFile=0x1f5c, lpFileSize=0xcb7f77c | out: lpFileSize=0xcb7f77c*=810) returned 1 [0191.291] SetFilePointerEx (in: hFile=0x1f5c, liDistanceToMove=0x326, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.291] ReadFile (in: hFile=0x1f5c, lpBuffer=0xcb7f758, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcb7f768, lpOverlapped=0x0 | out: lpBuffer=0xcb7f758*, lpNumberOfBytesRead=0xcb7f768*=0x4, lpOverlapped=0x0) returned 1 [0191.294] SetFilePointerEx (in: hFile=0x1f5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0191.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0191.294] NtQuerySystemTime (in: CurrentTime=0xcb7f6f0 | out: CurrentTime=0xcb7f6f0*=132462177698664000) returned 0x0 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x3876d82a [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x6706ca3b [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x675d0d16 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x1cef36ae [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x2689c68a [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x483905e5 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x1131bb52 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x4bc0adf7 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x7e787332 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x7a4c071d [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x18bcda06 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x563641d1 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x4b3d49cf [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x266f8031 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x13378e11 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x7f951e92 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x40bf0d38 [0191.294] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x2689c68a [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x3f49a620 [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x66202ab9 [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x396d59f8 [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x51bcfeb3 [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x5fdc3157 [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x682b7a86 [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x3d729d75 [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x3e45d1fe [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x6684ad76 [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x227ce9df [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x500beb35 [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x31aed9b8 [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x1d7f86d [0191.295] RtlRandomEx (in: Seed=0xcb7f6e8 | out: Seed=0xcb7f6e8) returned 0x6497f7ac [0191.308] ReadFile (in: hFile=0x1f5c, lpBuffer=0x7ab8cb8, nNumberOfBytesToRead=0x32a, lpNumberOfBytesRead=0xcb7f6e4, lpOverlapped=0x0 | out: lpBuffer=0x7ab8cb8*, lpNumberOfBytesRead=0xcb7f6e4*=0x32a, lpOverlapped=0x0) returned 1 [0191.308] SetFilePointerEx (in: hFile=0x1f5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.308] WriteFile (in: hFile=0x1f5c, lpBuffer=0x7abc8c0*, nNumberOfBytesToWrite=0x32a, lpNumberOfBytesWritten=0xcb7f6e8, lpOverlapped=0x0 | out: lpBuffer=0x7abc8c0*, lpNumberOfBytesWritten=0xcb7f6e8*=0x32a, lpOverlapped=0x0) returned 1 [0194.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3df8 [0194.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0194.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e20) returned 1 [0194.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7abc8c0) returned 1 [0194.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab8cb8) returned 1 [0194.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0194.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82a8) returned 1 [0194.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79368 [0194.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb82a8 [0194.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0194.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0194.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e20) returned 1 [0194.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x3e79758 [0194.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0194.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0194.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4050) returned 1 [0194.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0194.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82a8) returned 1 [0194.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b80fd8 [0194.458] SetFilePointerEx (in: hFile=0x1f5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.458] WriteFile (in: hFile=0x1f5c, lpBuffer=0x7b80fd8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xcb7f770, lpOverlapped=0x0 | out: lpBuffer=0x7b80fd8*, lpNumberOfBytesWritten=0xcb7f770*=0x112, lpOverlapped=0x0) returned 1 [0194.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb82a8 [0194.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0194.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0194.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4050) returned 1 [0194.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0194.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0194.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0194.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0194.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0194.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82a8) returned 1 [0194.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x41) returned 0x3e84718 [0194.466] sprintf (in: _Dest=0x3e84718, _Format="%c%c" | out: _Dest="d7") returned 2 [0194.466] sprintf (in: _Dest=0x3e8471a, _Format="%c%c" | out: _Dest="e5") returned 2 [0194.466] sprintf (in: _Dest=0x3e8471c, _Format="%c%c" | out: _Dest="ca") returned 2 [0194.466] sprintf (in: _Dest=0x3e8471e, _Format="%c%c" | out: _Dest="74") returned 2 [0194.466] sprintf (in: _Dest=0x3e84720, _Format="%c%c" | out: _Dest="8a") returned 2 [0194.466] sprintf (in: _Dest=0x3e84722, _Format="%c%c" | out: _Dest="35") returned 2 [0194.466] sprintf (in: _Dest=0x3e84724, _Format="%c%c" | out: _Dest="15") returned 2 [0194.466] sprintf (in: _Dest=0x3e84726, _Format="%c%c" | out: _Dest="14") returned 2 [0194.466] sprintf (in: _Dest=0x3e84728, _Format="%c%c" | out: _Dest="a3") returned 2 [0194.466] sprintf (in: _Dest=0x3e8472a, _Format="%c%c" | out: _Dest="d0") returned 2 [0194.466] sprintf (in: _Dest=0x3e8472c, _Format="%c%c" | out: _Dest="a2") returned 2 [0194.466] sprintf (in: _Dest=0x3e8472e, _Format="%c%c" | out: _Dest="6f") returned 2 [0194.466] sprintf (in: _Dest=0x3e84730, _Format="%c%c" | out: _Dest="e0") returned 2 [0194.466] sprintf (in: _Dest=0x3e84732, _Format="%c%c" | out: _Dest="48") returned 2 [0194.466] sprintf (in: _Dest=0x3e84734, _Format="%c%c" | out: _Dest="e6") returned 2 [0194.466] sprintf (in: _Dest=0x3e84736, _Format="%c%c" | out: _Dest="86") returned 2 [0194.467] sprintf (in: _Dest=0x3e84738, _Format="%c%c" | out: _Dest="09") returned 2 [0194.467] sprintf (in: _Dest=0x3e8473a, _Format="%c%c" | out: _Dest="ed") returned 2 [0194.467] sprintf (in: _Dest=0x3e8473c, _Format="%c%c" | out: _Dest="d1") returned 2 [0194.467] sprintf (in: _Dest=0x3e8473e, _Format="%c%c" | out: _Dest="29") returned 2 [0194.467] sprintf (in: _Dest=0x3e84740, _Format="%c%c" | out: _Dest="8a") returned 2 [0194.467] sprintf (in: _Dest=0x3e84742, _Format="%c%c" | out: _Dest="e5") returned 2 [0194.467] sprintf (in: _Dest=0x3e84744, _Format="%c%c" | out: _Dest="ab") returned 2 [0194.467] sprintf (in: _Dest=0x3e84746, _Format="%c%c" | out: _Dest="4a") returned 2 [0194.467] sprintf (in: _Dest=0x3e84748, _Format="%c%c" | out: _Dest="1e") returned 2 [0194.467] sprintf (in: _Dest=0x3e8474a, _Format="%c%c" | out: _Dest="4b") returned 2 [0194.467] sprintf (in: _Dest=0x3e8474c, _Format="%c%c" | out: _Dest="fe") returned 2 [0194.467] sprintf (in: _Dest=0x3e8474e, _Format="%c%c" | out: _Dest="56") returned 2 [0194.467] sprintf (in: _Dest=0x3e84750, _Format="%c%c" | out: _Dest="9e") returned 2 [0194.467] sprintf (in: _Dest=0x3e84752, _Format="%c%c" | out: _Dest="ef") returned 2 [0194.467] sprintf (in: _Dest=0x3e84754, _Format="%c%c" | out: _Dest="95") returned 2 [0194.467] sprintf (in: _Dest=0x3e84756, _Format="%c%c" | out: _Dest="43") returned 2 [0194.467] RtlInitAnsiString (in: DestinationString=0xcb7f6f8, SourceString="d7e5ca748a351514a3d0a26fe048e68609edd1298ae5ab4a1e4bfe569eef9543" | out: DestinationString="d7e5ca748a351514a3d0a26fe048e68609edd1298ae5ab4a1e4bfe569eef9543") [0194.467] RtlAnsiStringToUnicodeString (in: DestinationString=0xcb7f6f0, SourceString="d7e5ca748a351514a3d0a26fe048e68609edd1298ae5ab4a1e4bfe569eef9543", AllocateDestinationString=1 | out: DestinationString="d7e5ca748a351514a3d0a26fe048e68609edd1298ae5ab4a1e4bfe569eef9543") returned 0x0 [0194.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x3d452f0 [0194.468] RtlFreeAnsiString (AnsiString="d") [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84718) returned 1 [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4050) returned 1 [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80fd8) returned 1 [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79758) returned 1 [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e20) returned 1 [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3df8) returned 1 [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0194.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0194.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9a60 [0194.469] wcscat (in: _Dest=0x3ec9a60, _Source="d7e5ca748a351514" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\d7e5ca748a351514") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\d7e5ca748a351514" [0194.469] wcscat (in: _Dest=0x3ec9a60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\d7e5ca748a351514.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\d7e5ca748a351514.68814f" [0194.469] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\d7e5ca748a351514.68814f", NtPathName=0xcb7f6e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\d7e5ca748a351514.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0194.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2eb0 [0194.469] NtSetInformationFile (FileHandle=0x1f5c, IoStatusBlock=0xcb7f6f0, FileInformation=0x3ea2eb0, Length=0x13a, FileInformationClass=0xa) returned 0x0 [0194.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0194.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cebb70) returned 1 [0194.472] NtQueryInformationFile (in: FileHandle=0x1f5c, IoStatusBlock=0xcb7f6c0, FileInformation=0xcb7f6c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcb7f6c0, FileInformation=0xcb7f6c8) returned 0x0 [0194.472] NtSetInformationFile (FileHandle=0x1f5c, IoStatusBlock=0xcb7f6c0, FileInformation=0xcb7f6c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0194.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 [0194.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 [0194.474] FlushFileBuffers (hFile=0x1f5c) returned 1 [0194.476] CloseHandle (hObject=0x1f5c) returned 1 [0195.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbea88 [0195.440] wcscpy (in: _Dest=0x7cbea88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\" [0195.440] wcscat (in: _Dest=0x7cbea88, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\68814F-Readme.txt" [0195.440] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\68814f-readme.txt")) returned 0xffffffff [0195.440] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcd8 [0195.541] WriteFile (in: hFile=0xcd8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcb7f704, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcb7f704*=0x8b9, lpOverlapped=0x0) returned 1 [0196.371] CloseHandle (hObject=0xcd8) returned 1 [0196.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbea88) returned 1 [0196.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 Thread: id = 5768 os_tid = 0x518 [0184.989] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json")) returned 0x2020 [0187.058] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0187.915] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ac8 [0187.915] GetFileSizeEx (in: hFile=0x1ac8, lpFileSize=0xabafd04 | out: lpFileSize=0xabafd04*=11221) returned 1 [0187.915] SetFilePointerEx (in: hFile=0x1ac8, liDistanceToMove=0x2bd1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.915] ReadFile (in: hFile=0x1ac8, lpBuffer=0xabafce0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xabafcf0, lpOverlapped=0x0 | out: lpBuffer=0xabafce0*, lpNumberOfBytesRead=0xabafcf0*=0x4, lpOverlapped=0x0) returned 1 [0187.917] SetFilePointerEx (in: hFile=0x1ac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0187.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0187.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0187.917] NtQuerySystemTime (in: CurrentTime=0xabafc78 | out: CurrentTime=0xabafc78*=132462177664968000) returned 0x0 [0187.917] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x41276ae [0187.917] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x72daf4dc [0187.917] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0xde8bfe9 [0187.917] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x1d60f6f9 [0187.917] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x31949d3 [0187.917] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x6b659d0c [0187.917] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x8ab9215 [0187.917] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x152942ff [0187.917] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x4fb3a184 [0187.917] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x7b942ac0 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x7d62bc0e [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x7b9f2074 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x56113f6a [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x2584585a [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x37055a49 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x35191db6 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x61236145 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x588591c3 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x76612c28 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x8b29e30 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x6c01730f [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x45c6b5f8 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x741c2f1f [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x3cdcf412 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x75e36140 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x28df3e24 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x2bed8e81 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x2bb93f55 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x1f5c05db [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x7b67c818 [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x497b69bb [0187.918] RtlRandomEx (in: Seed=0xabafc70 | out: Seed=0xabafc70) returned 0x74ce7a1c [0187.926] ReadFile (in: hFile=0x1ac8, lpBuffer=0x7d81008, nNumberOfBytesToRead=0x2bd5, lpNumberOfBytesRead=0xabafc6c, lpOverlapped=0x0 | out: lpBuffer=0x7d81008*, lpNumberOfBytesRead=0xabafc6c*=0x2bd5, lpOverlapped=0x0) returned 1 [0187.927] SetFilePointerEx (in: hFile=0x1ac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.928] WriteFile (in: hFile=0x1ac8, lpBuffer=0x7d84c10*, nNumberOfBytesToWrite=0x2bd5, lpNumberOfBytesWritten=0xabafc70, lpOverlapped=0x0 | out: lpBuffer=0x7d84c10*, lpNumberOfBytesWritten=0xabafc70*=0x2bd5, lpOverlapped=0x0) returned 1 [0187.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0187.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0187.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0187.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d84c10) returned 1 [0187.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d81008) returned 1 [0187.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0187.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85aa0) returned 1 [0187.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x3e85aa0 [0187.931] SetFilePointerEx (in: hFile=0x1ac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.931] WriteFile (in: hFile=0x1ac8, lpBuffer=0x7ca94f0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xabafcf8, lpOverlapped=0x0 | out: lpBuffer=0x7ca94f0*, lpNumberOfBytesWritten=0xabafcf8*=0x11e, lpOverlapped=0x0) returned 1 [0187.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85038 [0187.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0187.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0187.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0187.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0187.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0187.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0187.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0187.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0187.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85038) returned 1 [0187.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1f358 [0187.933] sprintf (in: _Dest=0x3e1f358, _Format="%c%c" | out: _Dest="9c") returned 2 [0187.933] sprintf (in: _Dest=0x3e1f35a, _Format="%c%c" | out: _Dest="34") returned 2 [0187.933] sprintf (in: _Dest=0x3e1f35c, _Format="%c%c" | out: _Dest="47") returned 2 [0187.933] sprintf (in: _Dest=0x3e1f35e, _Format="%c%c" | out: _Dest="0c") returned 2 [0187.933] sprintf (in: _Dest=0x3e1f360, _Format="%c%c" | out: _Dest="69") returned 2 [0187.933] sprintf (in: _Dest=0x3e1f362, _Format="%c%c" | out: _Dest="1a") returned 2 [0187.933] sprintf (in: _Dest=0x3e1f364, _Format="%c%c" | out: _Dest="23") returned 2 [0187.933] sprintf (in: _Dest=0x3e1f366, _Format="%c%c" | out: _Dest="39") returned 2 [0187.933] sprintf (in: _Dest=0x3e1f368, _Format="%c%c" | out: _Dest="94") returned 2 [0187.933] sprintf (in: _Dest=0x3e1f36a, _Format="%c%c" | out: _Dest="8e") returned 2 [0187.933] sprintf (in: _Dest=0x3e1f36c, _Format="%c%c" | out: _Dest="43") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f36e, _Format="%c%c" | out: _Dest="36") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f370, _Format="%c%c" | out: _Dest="cd") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f372, _Format="%c%c" | out: _Dest="a6") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f374, _Format="%c%c" | out: _Dest="ad") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f376, _Format="%c%c" | out: _Dest="ac") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f378, _Format="%c%c" | out: _Dest="fd") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f37a, _Format="%c%c" | out: _Dest="08") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f37c, _Format="%c%c" | out: _Dest="b7") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f37e, _Format="%c%c" | out: _Dest="0a") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f380, _Format="%c%c" | out: _Dest="7f") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f382, _Format="%c%c" | out: _Dest="f0") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f384, _Format="%c%c" | out: _Dest="4e") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f386, _Format="%c%c" | out: _Dest="1c") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f388, _Format="%c%c" | out: _Dest="78") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f38a, _Format="%c%c" | out: _Dest="a4") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f38c, _Format="%c%c" | out: _Dest="33") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f38e, _Format="%c%c" | out: _Dest="3a") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f390, _Format="%c%c" | out: _Dest="cd") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f392, _Format="%c%c" | out: _Dest="83") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f394, _Format="%c%c" | out: _Dest="43") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f396, _Format="%c%c" | out: _Dest="1b") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f398, _Format="%c%c" | out: _Dest="93") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f39a, _Format="%c%c" | out: _Dest="9c") returned 2 [0187.934] sprintf (in: _Dest=0x3e1f39c, _Format="%c%c" | out: _Dest="57") returned 2 [0187.935] sprintf (in: _Dest=0x3e1f39e, _Format="%c%c" | out: _Dest="91") returned 2 [0187.935] sprintf (in: _Dest=0x3e1f3a0, _Format="%c%c" | out: _Dest="38") returned 2 [0187.935] sprintf (in: _Dest=0x3e1f3a2, _Format="%c%c" | out: _Dest="02") returned 2 [0187.935] sprintf (in: _Dest=0x3e1f3a4, _Format="%c%c" | out: _Dest="44") returned 2 [0187.935] sprintf (in: _Dest=0x3e1f3a6, _Format="%c%c" | out: _Dest="16") returned 2 [0187.935] sprintf (in: _Dest=0x3e1f3a8, _Format="%c%c" | out: _Dest="97") returned 2 [0187.935] sprintf (in: _Dest=0x3e1f3aa, _Format="%c%c" | out: _Dest="07") returned 2 [0187.935] sprintf (in: _Dest=0x3e1f3ac, _Format="%c%c" | out: _Dest="04") returned 2 [0187.935] sprintf (in: _Dest=0x3e1f3ae, _Format="%c%c" | out: _Dest="de") returned 2 [0187.935] RtlInitAnsiString (in: DestinationString=0xabafc80, SourceString="9c34470c691a2339948e4336cda6adacfd08b70a7ff04e1c78a4333acd83431b939c579138024416970704de" | out: DestinationString="9c34470c691a2339948e4336cda6adacfd08b70a7ff04e1c78a4333acd83431b939c579138024416970704de") [0187.935] RtlAnsiStringToUnicodeString (in: DestinationString=0xabafc78, SourceString="9c34470c691a2339948e4336cda6adacfd08b70a7ff04e1c78a4333acd83431b939c579138024416970704de", AllocateDestinationString=1 | out: DestinationString="9c34470c691a2339948e4336cda6adacfd08b70a7ff04e1c78a4333acd83431b939c579138024416970704de") returned 0x0 [0187.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3332e8 [0187.935] wcscat (in: _Dest=0x3ea2eb0, _Source="9c34470c691a2339948e43" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\9c34470c691a2339948e43") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\9c34470c691a2339948e43" [0187.935] wcscat (in: _Dest=0x3ea2eb0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\9c34470c691a2339948e43.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\9c34470c691a2339948e43.68814f" [0187.935] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\9c34470c691a2339948e43.68814f", NtPathName=0xabafc70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\9c34470c691a2339948e43.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0187.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x14a) returned 0x3e0aac0 [0187.939] FlushFileBuffers (hFile=0x1ac8) returned 1 [0187.940] CloseHandle (hObject=0x1ac8) returned 1 [0187.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7ca94f0 [0187.941] wcscpy (in: _Dest=0x7ca94f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\" [0187.941] wcscat (in: _Dest=0x7ca94f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\68814F-Readme.txt" [0187.941] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\68814f-readme.txt")) returned 0xffffffff [0187.942] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac8 [0187.942] WriteFile (in: hFile=0x1ac8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xabafc8c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xabafc8c*=0x8b9, lpOverlapped=0x0) returned 1 [0187.944] CloseHandle (hObject=0x1ac8) returned 1 [0187.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca94f0) returned 1 [0187.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9b98) returned 1 Thread: id = 5769 os_tid = 0x6fc [0184.989] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json")) returned 0x2020 [0187.062] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0188.043] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2184 [0188.043] GetFileSizeEx (in: hFile=0x2184, lpFileSize=0xb31fe0c | out: lpFileSize=0xb31fe0c*=234) returned 1 [0188.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0188.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0188.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0188.044] NtQuerySystemTime (in: CurrentTime=0xb31fd80 | out: CurrentTime=0xb31fd80*=132462177666216000) returned 0x0 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x22dd8592 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x330e4c5c [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x6ffbd7ca [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x56742bfe [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x3e0bcd1d [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x1c67812f [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x1a2e82c5 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x3d618412 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x3a8aa9f3 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x601b9026 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x3e7833d0 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x591005c8 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x2f24b677 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x7d4834a7 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x60253fc2 [0188.044] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x7627a979 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x79757638 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x11ffbada [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x5addce24 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0xafbf3f2 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x62400ca5 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x74b77400 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x17453355 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x4aa1d289 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x3b0e4233 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x71a06faa [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x151828b4 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x269c2130 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x7a6dd995 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x7c7efedf [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x5a28160 [0188.045] RtlRandomEx (in: Seed=0xb31fd78 | out: Seed=0xb31fd78) returned 0x32938801 [0188.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0188.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d62fc8 [0188.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d66bd0 [0188.059] ReadFile (in: hFile=0x2184, lpBuffer=0x7d62fc8, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xb31fd74, lpOverlapped=0x0 | out: lpBuffer=0x7d62fc8*, lpNumberOfBytesRead=0xb31fd74*=0xea, lpOverlapped=0x0) returned 1 [0188.062] SetFilePointerEx (in: hFile=0x2184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.062] WriteFile (in: hFile=0x2184, lpBuffer=0x7d66bd0*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xb31fd78, lpOverlapped=0x0 | out: lpBuffer=0x7d66bd0*, lpNumberOfBytesWritten=0xb31fd78*=0xea, lpOverlapped=0x0) returned 1 [0189.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0189.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0189.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a78) returned 1 [0189.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d66bd0) returned 1 [0189.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d62fc8) returned 1 [0189.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0189.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25428) returned 1 [0189.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0189.757] SetFilePointerEx (in: hFile=0x2184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.757] WriteFile (in: hFile=0x2184, lpBuffer=0x7b7c320*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb31fe00, lpOverlapped=0x0 | out: lpBuffer=0x7b7c320*, lpNumberOfBytesWritten=0xb31fe00*=0x10c, lpOverlapped=0x0) returned 1 [0192.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41e30 [0192.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0192.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0192.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0192.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec6710 [0192.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0192.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0192.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0192.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0192.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e30) returned 1 [0192.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x30671c0 [0192.550] sprintf (in: _Dest=0x30671c0, _Format="%c%c" | out: _Dest="b8") returned 2 [0192.550] sprintf (in: _Dest=0x30671c2, _Format="%c%c" | out: _Dest="eb") returned 2 [0192.550] sprintf (in: _Dest=0x30671c4, _Format="%c%c" | out: _Dest="7a") returned 2 [0192.550] sprintf (in: _Dest=0x30671c6, _Format="%c%c" | out: _Dest="84") returned 2 [0192.550] sprintf (in: _Dest=0x30671c8, _Format="%c%c" | out: _Dest="30") returned 2 [0192.551] sprintf (in: _Dest=0x30671ca, _Format="%c%c" | out: _Dest="6b") returned 2 [0192.551] sprintf (in: _Dest=0x30671cc, _Format="%c%c" | out: _Dest="3f") returned 2 [0192.551] sprintf (in: _Dest=0x30671ce, _Format="%c%c" | out: _Dest="01") returned 2 [0192.551] sprintf (in: _Dest=0x30671d0, _Format="%c%c" | out: _Dest="01") returned 2 [0192.551] sprintf (in: _Dest=0x30671d2, _Format="%c%c" | out: _Dest="88") returned 2 [0192.551] sprintf (in: _Dest=0x30671d4, _Format="%c%c" | out: _Dest="31") returned 2 [0192.551] sprintf (in: _Dest=0x30671d6, _Format="%c%c" | out: _Dest="6f") returned 2 [0192.551] sprintf (in: _Dest=0x30671d8, _Format="%c%c" | out: _Dest="44") returned 2 [0192.551] sprintf (in: _Dest=0x30671da, _Format="%c%c" | out: _Dest="97") returned 2 [0192.551] sprintf (in: _Dest=0x30671dc, _Format="%c%c" | out: _Dest="02") returned 2 [0192.551] sprintf (in: _Dest=0x30671de, _Format="%c%c" | out: _Dest="16") returned 2 [0192.551] sprintf (in: _Dest=0x30671e0, _Format="%c%c" | out: _Dest="50") returned 2 [0192.551] sprintf (in: _Dest=0x30671e2, _Format="%c%c" | out: _Dest="c7") returned 2 [0192.551] sprintf (in: _Dest=0x30671e4, _Format="%c%c" | out: _Dest="8f") returned 2 [0192.551] sprintf (in: _Dest=0x30671e6, _Format="%c%c" | out: _Dest="00") returned 2 [0192.551] sprintf (in: _Dest=0x30671e8, _Format="%c%c" | out: _Dest="59") returned 2 [0192.551] sprintf (in: _Dest=0x30671ea, _Format="%c%c" | out: _Dest="63") returned 2 [0192.551] sprintf (in: _Dest=0x30671ec, _Format="%c%c" | out: _Dest="86") returned 2 [0192.552] sprintf (in: _Dest=0x30671ee, _Format="%c%c" | out: _Dest="7f") returned 2 [0192.552] sprintf (in: _Dest=0x30671f0, _Format="%c%c" | out: _Dest="60") returned 2 [0192.552] sprintf (in: _Dest=0x30671f2, _Format="%c%c" | out: _Dest="7d") returned 2 [0192.552] RtlInitAnsiString (in: DestinationString=0xb31fd88, SourceString="b8eb7a84306b3f010188316f4497021650c78f005963867f607d" | out: DestinationString="b8eb7a84306b3f010188316f4497021650c78f005963867f607d") [0192.552] RtlAnsiStringToUnicodeString (in: DestinationString=0xb31fd80, SourceString="b8eb7a84306b3f010188316f4497021650c78f005963867f607d", AllocateDestinationString=1 | out: DestinationString="b8eb7a84306b3f010188316f4497021650c78f005963867f607d") returned 0x0 [0192.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e0d0 [0192.552] RtlFreeAnsiString (AnsiString="b") [0192.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30671c0) returned 1 [0192.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0192.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c320) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a78) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec46e0) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec49d8) returned 1 [0192.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0192.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8f28 [0192.553] wcscat (in: _Dest=0x3dd8f28, _Source="b8eb7a84306b3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\b8eb7a84306b3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\b8eb7a84306b3" [0192.553] wcscat (in: _Dest=0x3dd8f28, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\b8eb7a84306b3.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\b8eb7a84306b3.68814f" [0192.553] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\b8eb7a84306b3.68814f", NtPathName=0xb31fd78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\b8eb7a84306b3.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3cc8 [0192.554] NtSetInformationFile (FileHandle=0x2184, IoStatusBlock=0xb31fd80, FileInformation=0x3ea3cc8, Length=0x13a, FileInformationClass=0xa) returned 0x0 [0192.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3cc8) returned 1 [0192.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a51000) returned 1 [0192.700] NtQueryInformationFile (in: FileHandle=0x2184, IoStatusBlock=0xb31fd50, FileInformation=0xb31fd58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb31fd50, FileInformation=0xb31fd58) returned 0x0 [0192.700] NtSetInformationFile (FileHandle=0x2184, IoStatusBlock=0xb31fd50, FileInformation=0xb31fd58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8f28) returned 1 [0192.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0192.783] FlushFileBuffers (hFile=0x2184) returned 1 [0192.794] CloseHandle (hObject=0x2184) returned 1 [0192.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbebb0 [0192.901] wcscpy (in: _Dest=0x7cbebb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\" [0192.901] wcscat (in: _Dest=0x7cbebb0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\68814F-Readme.txt" [0192.901] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\68814f-readme.txt")) returned 0xffffffff [0192.901] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0193.160] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb31fd94, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb31fd94*=0x8b9, lpOverlapped=0x0) returned 1 [0193.163] CloseHandle (hObject=0x1518) returned 1 [0193.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbebb0) returned 1 [0193.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 Thread: id = 5770 os_tid = 0xf74 [0184.990] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json")) returned 0x2020 [0187.062] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0193.324] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d28 [0193.324] GetFileSizeEx (in: hFile=0x1d28, lpFileSize=0xbe4faec | out: lpFileSize=0xbe4faec*=274) returned 1 [0193.324] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.325] ReadFile (in: hFile=0x1d28, lpBuffer=0xbe4fac8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbe4fad8, lpOverlapped=0x0 | out: lpBuffer=0xbe4fac8*, lpNumberOfBytesRead=0xbe4fad8*=0x4, lpOverlapped=0x0) returned 1 [0193.326] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0193.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca008 [0193.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa80 [0193.327] NtQuerySystemTime (in: CurrentTime=0xbe4fa60 | out: CurrentTime=0xbe4fa60*=132462177719100000) returned 0x0 [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x12991ef3 [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x666b431b [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x27b6b7bc [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x3c501f40 [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x28aa2896 [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x308ef4af [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x1848fc1 [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x268b0ae6 [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x2d898d45 [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x3eeb2d13 [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x1fa2326d [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x662ecc4a [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x425dcd3b [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x192c880a [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x6f054566 [0193.327] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x1b93179f [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x4feaa899 [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x510d94eb [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x79c5597 [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x64ade431 [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x356ed892 [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x668929d8 [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x25e1b00c [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x35f774ce [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x6629e97d [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x28ee629c [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x7df34231 [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x7eb7c34f [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x23fd1f03 [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x34f3c4b7 [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x2e4cdcf6 [0193.328] RtlRandomEx (in: Seed=0xbe4fa58 | out: Seed=0xbe4fa58) returned 0x55679194 [0193.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca030 [0193.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3ea30 [0193.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0193.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0193.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0193.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0193.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24c50 [0193.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3ea30 [0193.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0193.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8c8) returned 1 [0193.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d6e3e0 [0193.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d71fe8 [0193.357] ReadFile (in: hFile=0x1d28, lpBuffer=0x7d6e3e0, nNumberOfBytesToRead=0x112, lpNumberOfBytesRead=0xbe4fa54, lpOverlapped=0x0 | out: lpBuffer=0x7d6e3e0*, lpNumberOfBytesRead=0xbe4fa54*=0x112, lpOverlapped=0x0) returned 1 [0193.357] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.357] WriteFile (in: hFile=0x1d28, lpBuffer=0x7d71fe8*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xbe4fa58, lpOverlapped=0x0 | out: lpBuffer=0x7d71fe8*, lpNumberOfBytesWritten=0xbe4fa58*=0x112, lpOverlapped=0x0) returned 1 [0195.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0195.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0195.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0195.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d71fe8) returned 1 [0195.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d6e3e0) returned 1 [0195.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0195.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24c50) returned 1 [0195.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0195.230] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.230] WriteFile (in: hFile=0x1d28, lpBuffer=0x7cb69f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbe4fae0, lpOverlapped=0x0 | out: lpBuffer=0x7cb69f8*, lpNumberOfBytesWritten=0xbe4fae0*=0x10c, lpOverlapped=0x0) returned 1 [0195.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a23ff0 [0195.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e580 [0195.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0195.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c50) returned 1 [0195.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2c50 [0195.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0195.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0195.469] sprintf (in: _Dest=0x7a2da00, _Format="%c%c" | out: _Dest="4e") returned 2 [0195.469] sprintf (in: _Dest=0x7a2da02, _Format="%c%c" | out: _Dest="8f") returned 2 [0195.469] sprintf (in: _Dest=0x7a2da04, _Format="%c%c" | out: _Dest="f0") returned 2 [0195.469] sprintf (in: _Dest=0x7a2da06, _Format="%c%c" | out: _Dest="d6") returned 2 [0195.469] sprintf (in: _Dest=0x7a2da08, _Format="%c%c" | out: _Dest="1b") returned 2 [0195.469] sprintf (in: _Dest=0x7a2da0a, _Format="%c%c" | out: _Dest="4f") returned 2 [0195.469] sprintf (in: _Dest=0x7a2da0c, _Format="%c%c" | out: _Dest="e7") returned 2 [0195.469] sprintf (in: _Dest=0x7a2da0e, _Format="%c%c" | out: _Dest="ca") returned 2 [0195.469] sprintf (in: _Dest=0x7a2da10, _Format="%c%c" | out: _Dest="18") returned 2 [0195.469] sprintf (in: _Dest=0x7a2da12, _Format="%c%c" | out: _Dest="17") returned 2 [0195.469] sprintf (in: _Dest=0x7a2da14, _Format="%c%c" | out: _Dest="a7") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da16, _Format="%c%c" | out: _Dest="07") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da18, _Format="%c%c" | out: _Dest="f4") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da1a, _Format="%c%c" | out: _Dest="48") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da1c, _Format="%c%c" | out: _Dest="51") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da1e, _Format="%c%c" | out: _Dest="70") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da20, _Format="%c%c" | out: _Dest="e6") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da22, _Format="%c%c" | out: _Dest="ed") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da24, _Format="%c%c" | out: _Dest="d4") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da26, _Format="%c%c" | out: _Dest="e7") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da28, _Format="%c%c" | out: _Dest="6e") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da2a, _Format="%c%c" | out: _Dest="a7") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da2c, _Format="%c%c" | out: _Dest="d5") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da2e, _Format="%c%c" | out: _Dest="11") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da30, _Format="%c%c" | out: _Dest="59") returned 2 [0195.470] sprintf (in: _Dest=0x7a2da32, _Format="%c%c" | out: _Dest="11") returned 2 [0195.470] RtlInitAnsiString (in: DestinationString=0xbe4fa68, SourceString="4e8ff0d61b4fe7ca1817a707f4485170e6edd4e76ea7d5115911" | out: DestinationString="4e8ff0d61b4fe7ca1817a707f4485170e6edd4e76ea7d5115911") [0195.470] RtlAnsiStringToUnicodeString (in: DestinationString=0xbe4fa60, SourceString="4e8ff0d61b4fe7ca1817a707f4485170e6edd4e76ea7d5115911", AllocateDestinationString=1 | out: DestinationString="4e8ff0d61b4fe7ca1817a707f4485170e6edd4e76ea7d5115911") returned 0x0 [0195.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3ea30 [0195.470] wcscat (in: _Dest=0x3eca1b0, _Source="4e8ff0d61b4fe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\4e8ff0d61b4fe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\4e8ff0d61b4fe" [0195.470] wcscat (in: _Dest=0x3eca1b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\4e8ff0d61b4fe.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\4e8ff0d61b4fe.68814f" [0195.470] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\4e8ff0d61b4fe.68814f", NtPathName=0xbe4fa58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\4e8ff0d61b4fe.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2ff8 [0196.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2ff8) returned 1 [0196.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a88) returned 1 [0196.174] NtQueryInformationFile (in: FileHandle=0x1d28, IoStatusBlock=0xbe4fa30, FileInformation=0xbe4fa38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbe4fa30, FileInformation=0xbe4fa38) returned 0x0 [0196.174] NtSetInformationFile (FileHandle=0x1d28, IoStatusBlock=0xbe4fa30, FileInformation=0xbe4fa38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca1b0) returned 1 [0196.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0196.230] FlushFileBuffers (hFile=0x1d28) returned 1 [0196.241] CloseHandle (hObject=0x1d28) returned 1 [0196.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d54f00 [0196.267] wcscpy (in: _Dest=0x3d54f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\" [0196.267] wcscat (in: _Dest=0x3d54f00, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\68814F-Readme.txt" [0196.267] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\68814f-readme.txt")) returned 0xffffffff [0196.268] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc8 [0196.287] WriteFile (in: hFile=0x1bc8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbe4fa74, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbe4fa74*=0x8b9, lpOverlapped=0x0) returned 1 [0196.368] CloseHandle (hObject=0x1bc8) returned 1 [0196.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54f00) returned 1 [0196.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56058) returned 1 Thread: id = 5771 os_tid = 0xf6c [0184.990] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css")) returned 0x2020 [0186.414] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", dwFileAttributes=0x20) returned 1 [0189.245] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ac4 [0191.309] GetFileSizeEx (in: hFile=0x1ac4, lpFileSize=0x853f924 | out: lpFileSize=0x853f924*=1741) returned 1 [0191.309] SetFilePointerEx (in: hFile=0x1ac4, liDistanceToMove=0x6c9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.309] ReadFile (in: hFile=0x1ac4, lpBuffer=0x853f900, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x853f910, lpOverlapped=0x0 | out: lpBuffer=0x853f900*, lpNumberOfBytesRead=0x853f910*=0x4, lpOverlapped=0x0) returned 1 [0191.311] SetFilePointerEx (in: hFile=0x1ac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0191.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0191.312] NtQuerySystemTime (in: CurrentTime=0x853f898 | out: CurrentTime=0x853f898*=132462177698976000) returned 0x0 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x28cb64cb [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x73325f56 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x551aa19d [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x66a77fa8 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x7579a1e7 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x2cf16249 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x4f03f3d2 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x4bc0adf7 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x52ae770a [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x51e75800 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x14058b99 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x2c73c45b [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x2c2f43ef [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x394de83e [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x2c73c45b [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x51bc7f40 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x46eca0a6 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x46c58838 [0191.312] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x4a80d3fd [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x5166cdc0 [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x24f8a104 [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x5da68a6f [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x16ffd9d [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x140cedac [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x6e4304fa [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x77aaebde [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x2e2ec691 [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x751b96d1 [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x42f117ef [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x440f6501 [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x7ded7d3a [0191.313] RtlRandomEx (in: Seed=0x853f890 | out: Seed=0x853f890) returned 0x71ccbf7f [0191.324] ReadFile (in: hFile=0x1ac4, lpBuffer=0x7ac04c8, nNumberOfBytesToRead=0x6cd, lpNumberOfBytesRead=0x853f88c, lpOverlapped=0x0 | out: lpBuffer=0x7ac04c8*, lpNumberOfBytesRead=0x853f88c*=0x6cd, lpOverlapped=0x0) returned 1 [0191.324] SetFilePointerEx (in: hFile=0x1ac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.324] WriteFile (in: hFile=0x1ac4, lpBuffer=0x7ac40d0*, nNumberOfBytesToWrite=0x6cd, lpNumberOfBytesWritten=0x853f890, lpOverlapped=0x0 | out: lpBuffer=0x7ac40d0*, lpNumberOfBytesWritten=0x853f890*=0x6cd, lpOverlapped=0x0) returned 1 [0192.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0192.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0192.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0192.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac40d0) returned 1 [0192.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac04c8) returned 1 [0192.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0192.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82f0) returned 1 [0192.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0192.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb82f0 [0192.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0192.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0192.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0192.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79758 [0192.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0192.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0192.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af10) returned 1 [0192.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0192.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82f0) returned 1 [0192.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cbda60 [0192.606] SetFilePointerEx (in: hFile=0x1ac4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.606] WriteFile (in: hFile=0x1ac4, lpBuffer=0x7cbda60*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x853f918, lpOverlapped=0x0 | out: lpBuffer=0x7cbda60*, lpNumberOfBytesWritten=0x853f918*=0x110, lpOverlapped=0x0) returned 1 [0192.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0192.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0192.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x3ec6508 [0192.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0192.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0192.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0192.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3d) returned 0x7a25e48 [0192.748] sprintf (in: _Dest=0x7a25e48, _Format="%c%c" | out: _Dest="a3") returned 2 [0192.748] sprintf (in: _Dest=0x7a25e4a, _Format="%c%c" | out: _Dest="31") returned 2 [0192.748] sprintf (in: _Dest=0x7a25e4c, _Format="%c%c" | out: _Dest="e8") returned 2 [0192.748] sprintf (in: _Dest=0x7a25e4e, _Format="%c%c" | out: _Dest="58") returned 2 [0192.748] sprintf (in: _Dest=0x7a25e50, _Format="%c%c" | out: _Dest="47") returned 2 [0192.748] sprintf (in: _Dest=0x7a25e52, _Format="%c%c" | out: _Dest="c8") returned 2 [0192.748] sprintf (in: _Dest=0x7a25e54, _Format="%c%c" | out: _Dest="02") returned 2 [0192.748] sprintf (in: _Dest=0x7a25e56, _Format="%c%c" | out: _Dest="42") returned 2 [0192.748] sprintf (in: _Dest=0x7a25e58, _Format="%c%c" | out: _Dest="01") returned 2 [0192.748] sprintf (in: _Dest=0x7a25e5a, _Format="%c%c" | out: _Dest="a9") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e5c, _Format="%c%c" | out: _Dest="68") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e5e, _Format="%c%c" | out: _Dest="68") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e60, _Format="%c%c" | out: _Dest="41") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e62, _Format="%c%c" | out: _Dest="19") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e64, _Format="%c%c" | out: _Dest="f4") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e66, _Format="%c%c" | out: _Dest="c1") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e68, _Format="%c%c" | out: _Dest="56") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e6a, _Format="%c%c" | out: _Dest="e4") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e6c, _Format="%c%c" | out: _Dest="f6") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e6e, _Format="%c%c" | out: _Dest="d2") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e70, _Format="%c%c" | out: _Dest="33") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e72, _Format="%c%c" | out: _Dest="9e") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e74, _Format="%c%c" | out: _Dest="20") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e76, _Format="%c%c" | out: _Dest="5e") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e78, _Format="%c%c" | out: _Dest="ae") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e7a, _Format="%c%c" | out: _Dest="06") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e7c, _Format="%c%c" | out: _Dest="47") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e7e, _Format="%c%c" | out: _Dest="4f") returned 2 [0192.749] sprintf (in: _Dest=0x7a25e80, _Format="%c%c" | out: _Dest="64") returned 2 [0192.750] sprintf (in: _Dest=0x7a25e82, _Format="%c%c" | out: _Dest="48") returned 2 [0192.750] RtlInitAnsiString (in: DestinationString=0x853f8a0, SourceString="a331e85847c8024201a968684119f4c156e4f6d2339e205eae06474f6448" | out: DestinationString="a331e85847c8024201a968684119f4c156e4f6d2339e205eae06474f6448") [0192.750] RtlAnsiStringToUnicodeString (in: DestinationString=0x853f898, SourceString="a331e85847c8024201a968684119f4c156e4f6d2339e205eae06474f6448", AllocateDestinationString=1 | out: DestinationString="a331e85847c8024201a968684119f4c156e4f6d2339e205eae06474f6448") returned 0x0 [0192.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7a) returned 0x7a697f0 [0192.750] RtlFreeAnsiString (AnsiString="a") [0192.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0192.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0192.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbda60) returned 1 [0192.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79758) returned 1 [0192.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0192.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0192.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0192.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0192.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0192.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0192.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbf618 [0192.751] wcscat (in: _Dest=0x7cbf618, _Source="a331e85847c8024" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\a331e85847c8024") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\a331e85847c8024" [0192.751] wcscat (in: _Dest=0x7cbf618, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\a331e85847c8024.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\a331e85847c8024.68814f" [0192.751] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\a331e85847c8024.68814f", NtPathName=0x853f890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\a331e85847c8024.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea4708 [0192.752] NtSetInformationFile (FileHandle=0x1ac4, IoStatusBlock=0x853f898, FileInformation=0x3ea4708, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4708) returned 1 [0192.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8f68) returned 1 [0192.821] NtQueryInformationFile (in: FileHandle=0x1ac4, IoStatusBlock=0x853f868, FileInformation=0x853f870, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x853f868, FileInformation=0x853f870) returned 0x0 [0192.821] NtSetInformationFile (FileHandle=0x1ac4, IoStatusBlock=0x853f868, FileInformation=0x853f870, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf618) returned 1 [0192.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a697f0) returned 1 [0192.946] FlushFileBuffers (hFile=0x1ac4) returned 1 [0192.954] CloseHandle (hObject=0x1ac4) returned 1 [0192.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7cbfab8 [0192.987] wcscpy (in: _Dest=0x7cbfab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\" [0192.987] wcscat (in: _Dest=0x7cbfab8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\68814F-Readme.txt" [0192.987] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\68814f-readme.txt")) returned 0xffffffff [0192.987] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a38 [0192.996] WriteFile (in: hFile=0x1a38, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x853f8ac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x853f8ac*=0x8b9, lpOverlapped=0x0) returned 1 [0193.018] CloseHandle (hObject=0x1a38) returned 1 [0193.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfab8) returned 1 [0193.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54f00) returned 1 Thread: id = 5772 os_tid = 0x738 [0184.991] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json")) returned 0x2020 [0187.063] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0188.063] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14d8 [0188.064] GetFileSizeEx (in: hFile=0x14d8, lpFileSize=0xbc4f9cc | out: lpFileSize=0xbc4f9cc*=257) returned 1 [0188.064] SetFilePointerEx (in: hFile=0x14d8, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.064] ReadFile (in: hFile=0x14d8, lpBuffer=0xbc4f9a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbc4f9b8, lpOverlapped=0x0 | out: lpBuffer=0xbc4f9a8*, lpNumberOfBytesRead=0xbc4f9b8*=0x4, lpOverlapped=0x0) returned 1 [0188.090] SetFilePointerEx (in: hFile=0x14d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0188.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0188.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0188.091] NtQuerySystemTime (in: CurrentTime=0xbc4f940 | out: CurrentTime=0xbc4f940*=132462177666684000) returned 0x0 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x63efba48 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x7c33d51f [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x3eb50b5b [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x232b93b1 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x764ccc75 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x55529093 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x5497c1d3 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x34b43d60 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x1b486949 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x4eac20c6 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x2289f6fb [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x1b45c4d6 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x2d2ae4e3 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x5c245d40 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x3e0fdd0a [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x2f594394 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x7537fe40 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x7df758e1 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x5036de5c [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x1851452c [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x4872d67c [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x382ed523 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x5d9a051d [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x36d4d884 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x5a1f5ae9 [0188.091] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x5717137 [0188.092] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x1cc66a8 [0188.092] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x740c1100 [0188.092] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x7b6bd416 [0188.092] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x6267722b [0188.092] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x76ee7d9c [0188.092] RtlRandomEx (in: Seed=0xbc4f938 | out: Seed=0xbc4f938) returned 0x55e97baa [0188.102] ReadFile (in: hFile=0x14d8, lpBuffer=0x7d6a7d8, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0xbc4f934, lpOverlapped=0x0 | out: lpBuffer=0x7d6a7d8*, lpNumberOfBytesRead=0xbc4f934*=0x101, lpOverlapped=0x0) returned 1 [0188.102] SetFilePointerEx (in: hFile=0x14d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.102] WriteFile (in: hFile=0x14d8, lpBuffer=0x7d6e3e0*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xbc4f938, lpOverlapped=0x0 | out: lpBuffer=0x7d6e3e0*, lpNumberOfBytesWritten=0xbc4f938*=0x101, lpOverlapped=0x0) returned 1 [0189.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e00 [0189.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d6e3e0) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d6a7d8) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0189.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25038) returned 1 [0189.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0189.405] SetFilePointerEx (in: hFile=0x14d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.405] WriteFile (in: hFile=0x14d8, lpBuffer=0x7a385e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbc4f9c0, lpOverlapped=0x0 | out: lpBuffer=0x7a385e8*, lpNumberOfBytesWritten=0xbc4f9c0*=0x10c, lpOverlapped=0x0) returned 1 [0192.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41e30 [0192.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0192.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0192.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0192.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3970 [0192.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0192.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0192.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0192.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0192.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e30) returned 1 [0192.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x30671c0 [0192.567] sprintf (in: _Dest=0x30671c0, _Format="%c%c" | out: _Dest="be") returned 2 [0192.567] sprintf (in: _Dest=0x30671c2, _Format="%c%c" | out: _Dest="de") returned 2 [0192.567] sprintf (in: _Dest=0x30671c4, _Format="%c%c" | out: _Dest="4a") returned 2 [0192.567] sprintf (in: _Dest=0x30671c6, _Format="%c%c" | out: _Dest="f9") returned 2 [0192.567] sprintf (in: _Dest=0x30671c8, _Format="%c%c" | out: _Dest="ba") returned 2 [0192.567] sprintf (in: _Dest=0x30671ca, _Format="%c%c" | out: _Dest="db") returned 2 [0192.567] sprintf (in: _Dest=0x30671cc, _Format="%c%c" | out: _Dest="41") returned 2 [0192.567] sprintf (in: _Dest=0x30671ce, _Format="%c%c" | out: _Dest="9d") returned 2 [0192.567] sprintf (in: _Dest=0x30671d0, _Format="%c%c" | out: _Dest="c3") returned 2 [0192.567] sprintf (in: _Dest=0x30671d2, _Format="%c%c" | out: _Dest="68") returned 2 [0192.567] sprintf (in: _Dest=0x30671d4, _Format="%c%c" | out: _Dest="76") returned 2 [0192.567] sprintf (in: _Dest=0x30671d6, _Format="%c%c" | out: _Dest="de") returned 2 [0192.567] sprintf (in: _Dest=0x30671d8, _Format="%c%c" | out: _Dest="36") returned 2 [0192.567] sprintf (in: _Dest=0x30671da, _Format="%c%c" | out: _Dest="88") returned 2 [0192.567] sprintf (in: _Dest=0x30671dc, _Format="%c%c" | out: _Dest="d6") returned 2 [0192.567] sprintf (in: _Dest=0x30671de, _Format="%c%c" | out: _Dest="61") returned 2 [0192.568] sprintf (in: _Dest=0x30671e0, _Format="%c%c" | out: _Dest="c8") returned 2 [0192.568] sprintf (in: _Dest=0x30671e2, _Format="%c%c" | out: _Dest="18") returned 2 [0192.568] sprintf (in: _Dest=0x30671e4, _Format="%c%c" | out: _Dest="94") returned 2 [0192.568] sprintf (in: _Dest=0x30671e6, _Format="%c%c" | out: _Dest="b4") returned 2 [0192.568] sprintf (in: _Dest=0x30671e8, _Format="%c%c" | out: _Dest="3c") returned 2 [0192.568] sprintf (in: _Dest=0x30671ea, _Format="%c%c" | out: _Dest="be") returned 2 [0192.568] sprintf (in: _Dest=0x30671ec, _Format="%c%c" | out: _Dest="d1") returned 2 [0192.568] sprintf (in: _Dest=0x30671ee, _Format="%c%c" | out: _Dest="eb") returned 2 [0192.568] sprintf (in: _Dest=0x30671f0, _Format="%c%c" | out: _Dest="cf") returned 2 [0192.568] sprintf (in: _Dest=0x30671f2, _Format="%c%c" | out: _Dest="ea") returned 2 [0192.568] RtlInitAnsiString (in: DestinationString=0xbc4f948, SourceString="bede4af9badb419dc36876de3688d661c81894b43cbed1ebcfea" | out: DestinationString="bede4af9badb419dc36876de3688d661c81894b43cbed1ebcfea") [0192.568] RtlAnsiStringToUnicodeString (in: DestinationString=0xbc4f940, SourceString="bede4af9badb419dc36876de3688d661c81894b43cbed1ebcfea", AllocateDestinationString=1 | out: DestinationString="bede4af9badb419dc36876de3688d661c81894b43cbed1ebcfea") returned 0x0 [0192.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e8c8 [0192.569] RtlFreeAnsiString (AnsiString="b") [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30671c0) returned 1 [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a385e8) returned 1 [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37590) returned 1 [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e00) returned 1 [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0192.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0192.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7cc0158 [0192.570] wcscat (in: _Dest=0x7cc0158, _Source="bede4af9badb4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\bede4af9badb4") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\bede4af9badb4" [0192.570] wcscat (in: _Dest=0x7cc0158, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\bede4af9badb4.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\bede4af9badb4.68814f" [0192.570] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\bede4af9badb4.68814f", NtPathName=0xbc4f938, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\bede4af9badb4.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3f58 [0192.570] NtSetInformationFile (FileHandle=0x14d8, IoStatusBlock=0xbc4f940, FileInformation=0x3ea3f58, Length=0x13a, FileInformationClass=0xa) returned 0x0 [0192.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3f58) returned 1 [0192.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a59678) returned 1 [0192.703] NtQueryInformationFile (in: FileHandle=0x14d8, IoStatusBlock=0xbc4f910, FileInformation=0xbc4f918, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbc4f910, FileInformation=0xbc4f918) returned 0x0 [0192.703] NtSetInformationFile (FileHandle=0x14d8, IoStatusBlock=0xbc4f910, FileInformation=0xbc4f918, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0158) returned 1 [0192.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e8c8) returned 1 [0192.791] FlushFileBuffers (hFile=0x14d8) returned 1 [0192.807] CloseHandle (hObject=0x14d8) returned 1 [0192.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbef28 [0192.918] wcscpy (in: _Dest=0x7cbef28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\" [0192.918] wcscat (in: _Dest=0x7cbef28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\68814F-Readme.txt" [0192.918] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\68814f-readme.txt")) returned 0xffffffff [0192.918] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0193.170] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbc4f954, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbc4f954*=0x8b9, lpOverlapped=0x0) returned 1 [0193.173] CloseHandle (hObject=0x1518) returned 1 [0193.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbef28) returned 1 [0193.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 Thread: id = 5773 os_tid = 0xb04 [0184.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll")) returned 0x20 [0184.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0184.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0184.992] GetLastError () returned 0x5 [0184.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0184.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 5774 os_tid = 0x59c [0184.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs")) returned 0x20 [0189.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", dwFileAttributes=0x20) returned 0 [0189.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.826] GetLastError () returned 0x5 [0189.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS", dwFileAttributes=0x20) returned 0 [0189.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47c18) returned 1 Thread: id = 5775 os_tid = 0xcd8 [0184.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc")) returned 0x20 [0189.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.835] GetLastError () returned 0x5 [0189.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 5776 os_tid = 0xcc4 [0184.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt")) returned 0x20 [0189.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.837] GetLastError () returned 0x5 [0189.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 5777 os_tid = 0xfdc [0184.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk")) returned 0x20 [0189.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.839] GetLastError () returned 0x5 [0189.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 5778 os_tid = 0xd10 [0184.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk")) returned 0x20 [0189.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.808] GetLastError () returned 0x5 [0189.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 5779 os_tid = 0x8c4 [0184.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg")) returned 0x20 [0189.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", dwFileAttributes=0x20) returned 0 [0189.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.810] GetLastError () returned 0x5 [0189.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg", dwFileAttributes=0x20) returned 0 [0189.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 5780 os_tid = 0x914 [0184.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll")) returned 0x20 [0189.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.813] GetLastError () returned 0x5 [0189.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 5781 os_tid = 0x67c [0185.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll")) returned 0x20 [0189.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.815] GetLastError () returned 0x5 [0189.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d454a0) returned 1 Thread: id = 5782 os_tid = 0x8c0 [0185.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd")) returned 0x20 [0187.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", dwFileAttributes=0x20) returned 0 [0187.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.427] GetLastError () returned 0x5 [0187.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD", dwFileAttributes=0x20) returned 0 [0187.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47898) returned 1 Thread: id = 5783 os_tid = 0x910 [0185.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl")) returned 0x20 [0189.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", dwFileAttributes=0x20) returned 0 [0189.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.828] GetLastError () returned 0x5 [0189.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL", dwFileAttributes=0x20) returned 0 [0189.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 5784 os_tid = 0xffc [0185.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd")) returned 0x20 [0189.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", dwFileAttributes=0x20) returned 0 [0189.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.831] GetLastError () returned 0x5 [0189.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD", dwFileAttributes=0x20) returned 0 [0189.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46c18) returned 1 Thread: id = 5785 os_tid = 0x81c [0185.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl")) returned 0x20 [0189.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", dwFileAttributes=0x20) returned 0 [0189.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.783] GetLastError () returned 0x5 [0189.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL", dwFileAttributes=0x20) returned 0 [0189.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46718) returned 1 Thread: id = 5786 os_tid = 0x238c [0185.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat")) returned 0x20 [0189.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", dwFileAttributes=0x20) returned 0 [0189.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.786] GetLastError () returned 0x5 [0189.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT", dwFileAttributes=0x20) returned 0 [0189.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46518) returned 1 Thread: id = 5787 os_tid = 0x82c [0185.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf")) returned 0x20 [0189.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", dwFileAttributes=0x20) returned 0 [0189.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.788] GetLastError () returned 0x5 [0189.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF", dwFileAttributes=0x20) returned 0 [0189.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e46e98) returned 1 Thread: id = 5788 os_tid = 0x89c [0185.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll")) returned 0x20 [0189.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.824] GetLastError () returned 0x5 [0189.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 Thread: id = 5789 os_tid = 0x8ac [0185.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll")) returned 0x20 [0189.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.822] GetLastError () returned 0x5 [0189.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7150) returned 1 Thread: id = 5790 os_tid = 0x8bc [0185.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs")) returned 0x20 [0189.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", dwFileAttributes=0x20) returned 0 [0189.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.820] GetLastError () returned 0x5 [0189.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS", dwFileAttributes=0x20) returned 0 [0189.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 5791 os_tid = 0x84c [0185.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc")) returned 0x20 [0189.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.817] GetLastError () returned 0x5 [0189.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 5792 os_tid = 0x86c [0185.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt")) returned 0x20 [0189.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.848] GetLastError () returned 0x5 [0189.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 5793 os_tid = 0x27c0 [0185.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk")) returned 0x20 [0189.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.846] GetLastError () returned 0x5 [0189.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb64d8) returned 1 Thread: id = 5794 os_tid = 0x27c8 [0185.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk")) returned 0x20 [0189.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.841] GetLastError () returned 0x5 [0189.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5860) returned 1 Thread: id = 5795 os_tid = 0x88c [0185.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol")) returned 0x20 [0189.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", dwFileAttributes=0x20) returned 0 [0189.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.790] GetLastError () returned 0x5 [0189.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL", dwFileAttributes=0x20) returned 0 [0189.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e47d98) returned 1 Thread: id = 5796 os_tid = 0x8cc [0185.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs")) returned 0x20 [0187.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", dwFileAttributes=0x20) returned 0 [0187.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.448] GetLastError () returned 0x5 [0187.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS", dwFileAttributes=0x20) returned 0 [0187.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48018) returned 1 Thread: id = 5797 os_tid = 0x8dc [0185.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc")) returned 0x20 [0187.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.784] GetLastError () returned 0x5 [0189.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 5798 os_tid = 0x85c [0185.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt")) returned 0x20 [0186.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", dwFileAttributes=0x20) returned 0 [0186.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.446] GetLastError () returned 0x5 [0187.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT", dwFileAttributes=0x20) returned 0 [0187.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 5799 os_tid = 0xb58 [0185.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk")) returned 0x20 [0189.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.833] GetLastError () returned 0x5 [0189.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 5800 os_tid = 0xd98 [0185.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x2f97f0 [0185.161] wcscpy (in: _Dest=0x2f97f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0185.161] wcscat (in: _Dest=0x2f97f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" [0185.161] wcscat (in: _Dest=0x2f97f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*" [0185.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2418 [0185.161] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c77080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c79790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0187.251] wcscmp (_String1=".", _String2=".") returned 0 [0187.251] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c77080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c79790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.251] wcscmp (_String1="..", _String2=".") returned 1 [0187.251] wcscmp (_String1="..", _String2="..") returned 0 [0187.251] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c79790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.251] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.251] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec7ce8 [0187.251] wcscpy (in: _Dest=0x3ec7ce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" [0187.252] wcscat (in: _Dest=0x3ec7ce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" [0187.252] wcscat (in: _Dest=0x3ec7ce8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" [0188.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84 [0188.190] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c79790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c79790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.190] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0188.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2418) returned 1 [0188.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f97f0) returned 1 [0188.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7bbe0) returned 1 Thread: id = 5801 os_tid = 0x500 [0185.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bd1b0 [0185.162] wcscpy (in: _Dest=0x30bd1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0185.162] wcscat (in: _Dest=0x30bd1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" [0185.162] wcscat (in: _Dest=0x30bd1b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*" [0185.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2db8 [0185.162] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c80cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c833d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0187.250] wcscmp (_String1=".", _String2=".") returned 0 [0187.250] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c80cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c833d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.250] wcscmp (_String1="..", _String2=".") returned 1 [0187.250] wcscmp (_String1="..", _String2="..") returned 0 [0187.250] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c833d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.250] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.250] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec7bc0 [0187.250] wcscpy (in: _Dest=0x3ec7bc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" [0187.250] wcscat (in: _Dest=0x3ec7bc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" [0187.250] wcscat (in: _Dest=0x3ec7bc0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" [0188.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f4 [0188.188] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c833d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c833d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.188] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0188.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 [0188.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0188.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fa978) returned 1 Thread: id = 5802 os_tid = 0xb4c [0185.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bcb80 [0185.163] wcscpy (in: _Dest=0x30bcb80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0185.163] wcscat (in: _Dest=0x30bcb80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" [0185.163] wcscat (in: _Dest=0x30bcb80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*" [0185.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3758 [0185.163] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c8a900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c8d010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0187.248] wcscmp (_String1=".", _String2=".") returned 0 [0187.248] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c8a900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c8d010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.248] wcscmp (_String1="..", _String2=".") returned 1 [0187.249] wcscmp (_String1="..", _String2="..") returned 0 [0187.249] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c8d010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.249] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.249] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec7a98 [0187.249] wcscpy (in: _Dest=0x3ec7a98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" [0187.249] wcscat (in: _Dest=0x3ec7a98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" [0187.249] wcscat (in: _Dest=0x3ec7a98, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" [0188.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7a98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c [0188.179] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c8d010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c8d010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.179] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0188.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3758) returned 1 [0188.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcb80) returned 1 [0188.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fdf0) returned 1 Thread: id = 5803 os_tid = 0x90c [0185.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bcd90 [0185.165] wcscpy (in: _Dest=0x30bcd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0185.165] wcscat (in: _Dest=0x30bcd90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" [0185.165] wcscat (in: _Dest=0x30bcd90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*" [0185.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1ce0 [0185.165] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c94540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c96c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0187.247] wcscmp (_String1=".", _String2=".") returned 0 [0187.247] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c94540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6c96c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.247] wcscmp (_String1="..", _String2=".") returned 1 [0187.247] wcscmp (_String1="..", _String2="..") returned 0 [0187.247] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c96c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.247] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.248] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec7970 [0187.248] wcscpy (in: _Dest=0x3ec7970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" [0187.248] wcscat (in: _Dest=0x3ec7970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" [0187.248] wcscat (in: _Dest=0x3ec7970, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" [0188.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1860 [0188.176] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6c96c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6c96c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.176] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0188.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1ce0) returned 1 [0188.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcd90) returned 1 [0188.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fef8) returned 1 Thread: id = 5804 os_tid = 0x91c [0185.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bce98 [0185.172] wcscpy (in: _Dest=0x30bce98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0185.172] wcscat (in: _Dest=0x30bce98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" [0185.172] wcscat (in: _Dest=0x30bce98, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*" [0185.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0185.172] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c9e180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ca2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0187.262] wcscmp (_String1=".", _String2=".") returned 0 [0187.262] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6c9e180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ca2fa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.263] wcscmp (_String1="..", _String2=".") returned 1 [0187.263] wcscmp (_String1="..", _String2="..") returned 0 [0187.263] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ca2fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.263] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.263] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca8148 [0187.263] wcscpy (in: _Dest=0x7ca8148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" [0187.263] wcscat (in: _Dest=0x7ca8148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" [0187.263] wcscat (in: _Dest=0x7ca8148, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" [0188.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8 [0188.219] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ca2fa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ca2fa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.219] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0188.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0188.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bce98) returned 1 [0188.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80000) returned 1 Thread: id = 5805 os_tid = 0x92c [0185.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bcfa0 [0185.174] wcscpy (in: _Dest=0x30bcfa0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0185.174] wcscat (in: _Dest=0x30bcfa0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" [0185.174] wcscat (in: _Dest=0x30bcfa0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*" [0185.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb45c8 [0185.174] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ca7dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cacbe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0187.261] wcscmp (_String1=".", _String2=".") returned 0 [0187.261] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ca7dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cacbe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.261] wcscmp (_String1="..", _String2=".") returned 1 [0187.261] wcscmp (_String1="..", _String2="..") returned 0 [0187.262] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cacbe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.262] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.262] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca8020 [0187.262] wcscpy (in: _Dest=0x7ca8020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" [0187.262] wcscat (in: _Dest=0x7ca8020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" [0187.262] wcscat (in: _Dest=0x7ca8020, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" [0188.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c [0188.216] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cacbe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cacbe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe10e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.216] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0188.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb45c8) returned 1 [0188.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcfa0) returned 1 [0188.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80108) returned 1 Thread: id = 5806 os_tid = 0x93c [0185.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x30bbf20 [0185.175] wcscpy (in: _Dest=0x30bbf20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0185.175] wcscat (in: _Dest=0x30bbf20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" [0185.175] wcscat (in: _Dest=0x30bbf20, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*" [0185.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0185.175] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cb4110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cb6820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0187.260] wcscmp (_String1=".", _String2=".") returned 0 [0187.260] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cb4110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cb6820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.260] wcscmp (_String1="..", _String2=".") returned 1 [0187.261] wcscmp (_String1="..", _String2="..") returned 0 [0187.261] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cb6820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.261] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.261] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec8628 [0187.261] wcscpy (in: _Dest=0x3ec8628, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" [0187.261] wcscat (in: _Dest=0x3ec8628, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" [0187.261] wcscat (in: _Dest=0x3ec8628, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" [0188.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec8628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0 [0188.214] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cb6820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cb6820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.214] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0188.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0188.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbf20) returned 1 [0188.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a198) returned 1 Thread: id = 5807 os_tid = 0x23e0 [0185.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7a385e8 [0185.176] wcscpy (in: _Dest=0x7a385e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0185.176] wcscat (in: _Dest=0x7a385e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" [0185.176] wcscat (in: _Dest=0x7a385e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*" [0185.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3020 [0185.176] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cbdd50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cd8b00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d5c0 [0187.259] wcscmp (_String1=".", _String2=".") returned 0 [0187.259] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cbdd50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cd8b00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.260] wcscmp (_String1="..", _String2=".") returned 1 [0187.260] wcscmp (_String1="..", _String2="..") returned 0 [0187.260] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cd8b00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.260] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.260] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3ec8500 [0187.260] wcscpy (in: _Dest=0x3ec8500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" [0187.260] wcscat (in: _Dest=0x3ec8500, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" [0187.260] wcscat (in: _Dest=0x3ec8500, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" [0188.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec8500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1944 [0188.211] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cd8b00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cd8b00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.211] FindClose (in: hFindFile=0x7a2d5c0 | out: hFindFile=0x7a2d5c0) returned 1 [0188.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3020) returned 1 [0188.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a385e8) returned 1 [0188.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38930) returned 1 Thread: id = 5808 os_tid = 0x94c [0185.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x300e668 [0185.177] wcscpy (in: _Dest=0x300e668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0185.177] wcscat (in: _Dest=0x300e668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" [0185.177] wcscat (in: _Dest=0x300e668, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*" [0185.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0185.177] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce0030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ce2740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0187.258] wcscmp (_String1=".", _String2=".") returned 0 [0187.258] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce0030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6ce2740, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.259] wcscmp (_String1="..", _String2=".") returned 1 [0187.259] wcscmp (_String1="..", _String2="..") returned 0 [0187.259] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ce2740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.259] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.259] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3ec83d8 [0187.259] wcscpy (in: _Dest=0x3ec83d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" [0187.259] wcscat (in: _Dest=0x3ec83d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" [0187.259] wcscat (in: _Dest=0x3ec83d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" [0188.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec83d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564 [0188.205] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6ce2740, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ce2740, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.205] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0188.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0188.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0188.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a391f0) returned 1 Thread: id = 5809 os_tid = 0x23e8 [0185.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7bdf0 [0185.178] wcscpy (in: _Dest=0x7b7bdf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0185.178] wcscat (in: _Dest=0x7b7bdf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" [0185.178] wcscat (in: _Dest=0x7b7bdf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*" [0185.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3e90 [0185.178] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce9c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cec380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cec380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0187.258] wcscmp (_String1=".", _String2=".") returned 0 [0187.258] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6ce9c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cec380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cec380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.258] wcscmp (_String1="..", _String2=".") returned 1 [0187.258] wcscmp (_String1="..", _String2="..") returned 0 [0187.258] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cec380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ceea90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.258] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.258] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec82b0 [0187.258] wcscpy (in: _Dest=0x3ec82b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" [0187.258] wcscat (in: _Dest=0x3ec82b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" [0187.258] wcscat (in: _Dest=0x3ec82b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" [0188.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec82b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594 [0188.202] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cec380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6ceea90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.202] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0188.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3e90) returned 1 [0188.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7bdf0) returned 1 [0188.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a2a0) returned 1 Thread: id = 5810 os_tid = 0xe00 [0185.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x3dec828 [0185.179] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0185.179] wcscat (in: _Dest=0x3dec828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" [0185.179] wcscat (in: _Dest=0x3dec828, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*" [0185.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1a78 [0185.179] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cf38b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cf5fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d400 [0187.256] wcscmp (_String1=".", _String2=".") returned 0 [0187.256] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cf38b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cf5fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.256] wcscmp (_String1="..", _String2=".") returned 1 [0187.256] wcscmp (_String1="..", _String2="..") returned 0 [0187.256] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cf5fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.256] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.256] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3ec8188 [0187.256] wcscpy (in: _Dest=0x3ec8188, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" [0187.257] wcscat (in: _Dest=0x3ec8188, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" [0187.257] wcscat (in: _Dest=0x3ec8188, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" [0188.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec8188, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184 [0188.200] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cf5fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cf5fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.200] FindClose (in: hFindFile=0x7a2d400 | out: hFindFile=0x7a2d400) returned 1 [0188.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a78) returned 1 [0188.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0188.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a390d8) returned 1 Thread: id = 5811 os_tid = 0x97c [0185.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7ab60 [0185.180] wcscpy (in: _Dest=0x7b7ab60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0185.180] wcscat (in: _Dest=0x7b7ab60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" [0185.180] wcscat (in: _Dest=0x7b7ab60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*" [0185.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb28e8 [0185.180] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cfade0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cffc00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0187.255] wcscmp (_String1=".", _String2=".") returned 0 [0187.255] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6cfade0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6cffc00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.255] wcscmp (_String1="..", _String2=".") returned 1 [0187.255] wcscmp (_String1="..", _String2="..") returned 0 [0187.255] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cffc00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.255] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.255] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec8060 [0187.256] wcscpy (in: _Dest=0x3ec8060, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" [0187.256] wcscat (in: _Dest=0x3ec8060, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" [0187.256] wcscat (in: _Dest=0x3ec8060, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" [0188.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec8060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118 [0188.198] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6cffc00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6cffc00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.198] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0188.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb28e8) returned 1 [0188.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ab60) returned 1 [0188.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a8d0) returned 1 Thread: id = 5812 os_tid = 0x98c [0185.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7aa58 [0185.181] wcscpy (in: _Dest=0x7b7aa58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0185.181] wcscat (in: _Dest=0x7b7aa58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" [0185.181] wcscat (in: _Dest=0x7b7aa58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*" [0185.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1340 [0185.181] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d07130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d09840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0187.254] wcscmp (_String1=".", _String2=".") returned 0 [0187.254] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d07130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d09840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.254] wcscmp (_String1="..", _String2=".") returned 1 [0187.254] wcscmp (_String1="..", _String2="..") returned 0 [0187.254] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d09840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.254] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.254] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec7f38 [0187.254] wcscpy (in: _Dest=0x3ec7f38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" [0187.254] wcscat (in: _Dest=0x3ec7f38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" [0187.254] wcscat (in: _Dest=0x3ec7f38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" [0188.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0188.195] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d09840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d09840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.195] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0188.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1340) returned 1 [0188.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7aa58) returned 1 [0188.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a7c8) returned 1 Thread: id = 5813 os_tid = 0x9ac [0185.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7a950 [0185.182] wcscpy (in: _Dest=0x7b7a950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0185.182] wcscat (in: _Dest=0x7b7a950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" [0185.182] wcscat (in: _Dest=0x7b7a950, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*" [0185.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3288 [0185.182] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d10d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d13480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0187.252] wcscmp (_String1=".", _String2=".") returned 0 [0187.252] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d10d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d13480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.252] wcscmp (_String1="..", _String2=".") returned 1 [0187.253] wcscmp (_String1="..", _String2="..") returned 0 [0187.253] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d13480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.253] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.253] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec7e10 [0187.253] wcscpy (in: _Dest=0x3ec7e10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" [0187.253] wcscat (in: _Dest=0x3ec7e10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" [0187.253] wcscat (in: _Dest=0x3ec7e10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" [0188.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060 [0188.193] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d13480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d13480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.193] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0188.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3288) returned 1 [0188.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a950) returned 1 [0188.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a3a8) returned 1 Thread: id = 5814 os_tid = 0x740 [0185.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c320 [0185.183] wcscpy (in: _Dest=0x7b7c320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0185.183] wcscat (in: _Dest=0x7b7c320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" [0185.183] wcscat (in: _Dest=0x7b7c320, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*" [0185.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1f48 [0185.183] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d1a9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1d0c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d1d0c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0187.246] wcscmp (_String1=".", _String2=".") returned 0 [0187.246] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d1a9b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1d0c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d1d0c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.246] wcscmp (_String1="..", _String2=".") returned 1 [0187.246] wcscmp (_String1="..", _String2="..") returned 0 [0187.246] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d1d0c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1f7d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.246] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.246] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3ec7848 [0187.247] wcscpy (in: _Dest=0x3ec7848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" [0187.247] wcscat (in: _Dest=0x3ec7848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" [0187.247] wcscat (in: _Dest=0x3ec7848, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" [0188.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c [0188.173] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d1d0c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d1f7d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe37f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.173] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0188.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1f48) returned 1 [0188.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c320) returned 1 [0188.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a4b0) returned 1 Thread: id = 5815 os_tid = 0xc8 [0185.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7a848 [0185.184] wcscpy (in: _Dest=0x7b7a848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0185.184] wcscat (in: _Dest=0x7b7a848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" [0185.184] wcscat (in: _Dest=0x7b7a848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*" [0185.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb4830 [0185.184] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d245f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d26d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d26d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d280 [0187.245] wcscmp (_String1=".", _String2=".") returned 0 [0187.245] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d245f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d26d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d26d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.245] wcscmp (_String1="..", _String2=".") returned 1 [0187.245] wcscmp (_String1="..", _String2="..") returned 0 [0187.245] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d26d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d29410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.245] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.245] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec7720 [0187.245] wcscpy (in: _Dest=0x3ec7720, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" [0187.246] wcscat (in: _Dest=0x3ec7720, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" [0187.246] wcscat (in: _Dest=0x3ec7720, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" [0188.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1864 [0188.171] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d26d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d29410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.171] FindClose (in: hFindFile=0x7a2d280 | out: hFindFile=0x7a2d280) returned 1 [0188.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb4830) returned 1 [0188.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a848) returned 1 [0188.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a5b8) returned 1 Thread: id = 5816 os_tid = 0x9bc [0185.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7a740 [0185.185] wcscpy (in: _Dest=0x7b7a740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0185.185] wcscat (in: _Dest=0x7b7a740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" [0185.185] wcscat (in: _Dest=0x7b7a740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*" [0185.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1810 [0185.185] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d2e230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d33050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d540 [0187.244] wcscmp (_String1=".", _String2=".") returned 0 [0187.244] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d2e230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d33050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.244] wcscmp (_String1="..", _String2=".") returned 1 [0187.244] wcscmp (_String1="..", _String2="..") returned 0 [0187.244] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d33050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.244] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.244] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec75f8 [0187.244] wcscpy (in: _Dest=0x3ec75f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" [0187.244] wcscat (in: _Dest=0x3ec75f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" [0187.245] wcscat (in: _Dest=0x3ec75f8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" [0188.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec75f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc [0188.168] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d33050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d33050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.168] FindClose (in: hFindFile=0x7a2d540 | out: hFindFile=0x7a2d540) returned 1 [0188.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1810) returned 1 [0188.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a740) returned 1 [0188.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6af00) returned 1 Thread: id = 5817 os_tid = 0x9fc [0185.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7a530 [0185.186] wcscpy (in: _Dest=0x7b7a530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0185.186] wcscat (in: _Dest=0x7b7a530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" [0185.186] wcscat (in: _Dest=0x7b7a530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*" [0185.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb40f8 [0185.186] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d37e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d3cc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0187.242] wcscmp (_String1=".", _String2=".") returned 0 [0187.243] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d37e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d3cc90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.243] wcscmp (_String1="..", _String2=".") returned 1 [0187.243] wcscmp (_String1="..", _String2="..") returned 0 [0187.243] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d3a580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.243] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.243] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec74d0 [0187.243] wcscpy (in: _Dest=0x3ec74d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" [0187.243] wcscat (in: _Dest=0x3ec74d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" [0187.243] wcscat (in: _Dest=0x3ec74d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" [0190.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690 [0190.815] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d3a580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d3cc90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.815] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0190.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb40f8) returned 1 [0190.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a530) returned 1 [0190.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6adf8) returned 1 Thread: id = 5818 os_tid = 0x7b4 [0185.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad50b0 [0185.187] wcscpy (in: _Dest=0x7ad50b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0185.187] wcscat (in: _Dest=0x7ad50b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" [0185.187] wcscat (in: _Dest=0x7ad50b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*" [0185.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3c28 [0185.187] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d441c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d468d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0187.242] wcscmp (_String1=".", _String2=".") returned 0 [0187.242] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d441c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d468d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.242] wcscmp (_String1="..", _String2=".") returned 1 [0187.242] wcscmp (_String1="..", _String2="..") returned 0 [0187.242] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d468d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.242] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.242] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec73a8 [0187.242] wcscpy (in: _Dest=0x3ec73a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" [0187.242] wcscat (in: _Dest=0x3ec73a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" [0187.242] wcscat (in: _Dest=0x3ec73a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" [0192.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec73a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428 [0192.203] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3eb3c28 | out: lpFindFileData=0x3eb3c28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d468d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d468d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.204] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0192.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3c28) returned 1 [0192.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad50b0) returned 1 [0192.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6acf0) returned 1 Thread: id = 5819 os_tid = 0xad8 [0185.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad51b8 [0185.188] wcscpy (in: _Dest=0x7ad51b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0185.188] wcscat (in: _Dest=0x7ad51b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" [0185.188] wcscat (in: _Dest=0x7ad51b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*" [0185.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0185.188] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d4de00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d50510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0187.241] wcscmp (_String1=".", _String2=".") returned 0 [0187.241] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d4de00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d50510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.241] wcscmp (_String1="..", _String2=".") returned 1 [0187.241] wcscmp (_String1="..", _String2="..") returned 0 [0187.241] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d50510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.241] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.241] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec7280 [0187.241] wcscpy (in: _Dest=0x3ec7280, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" [0187.241] wcscat (in: _Dest=0x3ec7280, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" [0187.241] wcscat (in: _Dest=0x3ec7280, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" [0190.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1858 [0190.917] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d50510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d50510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.917] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0190.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0190.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad51b8) returned 1 [0190.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6abe8) returned 1 Thread: id = 5820 os_tid = 0x1c0 [0185.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad52c0 [0185.189] wcscpy (in: _Dest=0x7ad52c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0185.189] wcscat (in: _Dest=0x7ad52c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" [0185.189] wcscat (in: _Dest=0x7ad52c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*" [0185.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0185.189] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d57a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d5a150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0185.410] wcscmp (_String1=".", _String2=".") returned 0 [0185.410] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d57a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d5a150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.410] wcscmp (_String1="..", _String2=".") returned 1 [0185.410] wcscmp (_String1="..", _String2="..") returned 0 [0185.410] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d5a150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.410] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.410] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7b81918 [0185.411] wcscpy (in: _Dest=0x7b81918, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" [0185.411] wcscat (in: _Dest=0x7b81918, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" [0185.411] wcscat (in: _Dest=0x7b81918, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" [0185.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0185.610] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d5a150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d5a150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.610] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0185.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0185.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad52c0) returned 1 [0185.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6aae0) returned 1 Thread: id = 5821 os_tid = 0x4c0 [0185.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad53c8 [0185.189] wcscpy (in: _Dest=0x7ad53c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0185.190] wcscat (in: _Dest=0x7ad53c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" [0185.190] wcscat (in: _Dest=0x7ad53c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*" [0185.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0185.190] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d61680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d664a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0185.411] wcscmp (_String1=".", _String2=".") returned 0 [0185.411] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d61680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d664a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.411] wcscmp (_String1="..", _String2=".") returned 1 [0185.411] wcscmp (_String1="..", _String2="..") returned 0 [0185.411] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d664a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0185.411] wcscmp (_String1="messages.json", _String2=".") returned 1 [0185.411] wcscmp (_String1="messages.json", _String2="..") returned 1 [0185.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7b81a40 [0185.411] wcscpy (in: _Dest=0x7b81a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" [0185.411] wcscat (in: _Dest=0x7b81a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" [0185.411] wcscat (in: _Dest=0x7b81a40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" [0185.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0185.552] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d664a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d664a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0185.553] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0185.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0185.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad53c8) returned 1 [0185.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc868) returned 1 Thread: id = 5822 os_tid = 0x2488 [0185.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad54d0 [0185.412] wcscpy (in: _Dest=0x7ad54d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0185.412] wcscat (in: _Dest=0x7ad54d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" [0185.412] wcscat (in: _Dest=0x7ad54d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*" [0185.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0185.412] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d6d9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d727f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0187.263] wcscmp (_String1=".", _String2=".") returned 0 [0187.263] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d6d9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d727f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.264] wcscmp (_String1="..", _String2=".") returned 1 [0187.264] wcscmp (_String1="..", _String2="..") returned 0 [0187.264] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d727f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.264] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.264] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca8270 [0187.264] wcscpy (in: _Dest=0x7ca8270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" [0187.264] wcscat (in: _Dest=0x7ca8270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" [0187.264] wcscat (in: _Dest=0x7ca8270, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" [0188.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64 [0188.221] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d727f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d727f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.221] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0188.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0188.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d0) returned 1 [0188.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd2b8) returned 1 Thread: id = 5823 os_tid = 0x248c [0185.413] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0186.751] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0189.238] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18d4 [0191.803] GetFileSizeEx (in: hFile=0x18d4, lpFileSize=0x43ff814 | out: lpFileSize=0x43ff814*=221) returned 1 [0191.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4078 [0191.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0191.804] NtQuerySystemTime (in: CurrentTime=0x43ff788 | out: CurrentTime=0x43ff788*=132462177703812000) returned 0x0 [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x684eed90 [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x237bd9ec [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x68db3ca [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x5707169b [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x55297e7f [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x2a30c651 [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x5436bb06 [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x78324fe6 [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x51991370 [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x4e3e1122 [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x246da44d [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x750c5ebc [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x2a734b95 [0191.804] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x68bfd305 [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x12b085f [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x208589a6 [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x48182af7 [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x4c28fc4c [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x5707169b [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x39ebacfb [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x3fc170cd [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x58706f60 [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x3f84fece [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x52ae770a [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x35b45fcc [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x6debaeb [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x513bf500 [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x364e957d [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x237f6a8d [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x1ac3f5cc [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x60993b9 [0191.805] RtlRandomEx (in: Seed=0x43ff780 | out: Seed=0x43ff780) returned 0x137fa266 [0191.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0191.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b4cf48 [0191.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b50b50 [0191.823] ReadFile (in: hFile=0x18d4, lpBuffer=0x7b4cf48, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x43ff77c, lpOverlapped=0x0 | out: lpBuffer=0x7b4cf48*, lpNumberOfBytesRead=0x43ff77c*=0xdd, lpOverlapped=0x0) returned 1 [0191.825] SetFilePointerEx (in: hFile=0x18d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.825] WriteFile (in: hFile=0x18d4, lpBuffer=0x7b50b50*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x43ff780, lpOverlapped=0x0 | out: lpBuffer=0x7b50b50*, lpNumberOfBytesWritten=0x43ff780*=0xdd, lpOverlapped=0x0) returned 1 [0195.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0195.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0195.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0195.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b50b50) returned 1 [0195.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b4cf48) returned 1 [0195.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0195.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9970) returned 1 [0195.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0195.283] SetFilePointerEx (in: hFile=0x18d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.283] WriteFile (in: hFile=0x18d4, lpBuffer=0x7cac7c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x43ff808, lpOverlapped=0x0 | out: lpBuffer=0x7cac7c8*, lpNumberOfBytesWritten=0x43ff808*=0x10c, lpOverlapped=0x0) returned 1 [0195.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb82a8 [0195.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0195.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0195.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0195.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3f38 [0195.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0195.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0195.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3998) returned 1 [0195.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0195.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82a8) returned 1 [0195.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2da00 [0195.494] sprintf (in: _Dest=0x7a2da00, _Format="%c%c" | out: _Dest="20") returned 2 [0195.494] sprintf (in: _Dest=0x7a2da02, _Format="%c%c" | out: _Dest="6c") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da04, _Format="%c%c" | out: _Dest="1a") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da06, _Format="%c%c" | out: _Dest="02") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da08, _Format="%c%c" | out: _Dest="15") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da0a, _Format="%c%c" | out: _Dest="c9") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da0c, _Format="%c%c" | out: _Dest="72") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da0e, _Format="%c%c" | out: _Dest="a7") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da10, _Format="%c%c" | out: _Dest="ab") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da12, _Format="%c%c" | out: _Dest="f1") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da14, _Format="%c%c" | out: _Dest="29") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da16, _Format="%c%c" | out: _Dest="80") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da18, _Format="%c%c" | out: _Dest="95") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da1a, _Format="%c%c" | out: _Dest="05") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da1c, _Format="%c%c" | out: _Dest="9b") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da1e, _Format="%c%c" | out: _Dest="f4") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da20, _Format="%c%c" | out: _Dest="a0") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da22, _Format="%c%c" | out: _Dest="db") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da24, _Format="%c%c" | out: _Dest="fe") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da26, _Format="%c%c" | out: _Dest="e9") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da28, _Format="%c%c" | out: _Dest="53") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da2a, _Format="%c%c" | out: _Dest="04") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da2c, _Format="%c%c" | out: _Dest="0e") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da2e, _Format="%c%c" | out: _Dest="cf") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da30, _Format="%c%c" | out: _Dest="26") returned 2 [0195.495] sprintf (in: _Dest=0x7a2da32, _Format="%c%c" | out: _Dest="c6") returned 2 [0195.495] RtlInitAnsiString (in: DestinationString=0x43ff790, SourceString="206c1a0215c972a7abf1298095059bf4a0dbfee953040ecf26c6" | out: DestinationString="206c1a0215c972a7abf1298095059bf4a0dbfee953040ecf26c6") [0195.495] RtlAnsiStringToUnicodeString (in: DestinationString=0x43ff788, SourceString="206c1a0215c972a7abf1298095059bf4a0dbfee953040ecf26c6", AllocateDestinationString=1 | out: DestinationString="206c1a0215c972a7abf1298095059bf4a0dbfee953040ecf26c6") returned 0x0 [0195.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3de00 [0195.496] wcscat (in: _Dest=0x3ec9e08, _Source="206c1a0215c97" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\206c1a0215c97") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\206c1a0215c97" [0195.496] wcscat (in: _Dest=0x3ec9e08, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\206c1a0215c97.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\206c1a0215c97.68814f" [0195.496] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\206c1a0215c97.68814f", NtPathName=0x43ff780, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\206c1a0215c97.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0a560 [0195.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0a560) returned 1 [0195.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a778) returned 1 [0195.989] NtQueryInformationFile (in: FileHandle=0x18d4, IoStatusBlock=0x43ff758, FileInformation=0x43ff760, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x43ff758, FileInformation=0x43ff760) returned 0x0 [0195.989] NtSetInformationFile (FileHandle=0x18d4, IoStatusBlock=0x43ff758, FileInformation=0x43ff760, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9e08) returned 1 [0196.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0196.131] FlushFileBuffers (hFile=0x18d4) returned 1 [0196.137] CloseHandle (hObject=0x18d4) returned 1 [0196.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7b84590 [0196.195] wcscpy (in: _Dest=0x7b84590, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\" [0196.195] wcscat (in: _Dest=0x7b84590, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\68814F-Readme.txt" [0196.195] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\68814f-readme.txt")) returned 0xffffffff [0196.195] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0196.337] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x43ff79c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x43ff79c*=0x8b9, lpOverlapped=0x0) returned 1 [0196.339] CloseHandle (hObject=0x1140) returned 1 [0196.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84590) returned 1 [0196.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54cb0) returned 1 Thread: id = 5824 os_tid = 0x2490 [0185.414] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json")) returned 0x2020 [0186.752] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0189.238] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b08 [0191.827] GetFileSizeEx (in: hFile=0x1b08, lpFileSize=0x7e8f7d4 | out: lpFileSize=0x7e8f7d4*=214) returned 1 [0191.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0191.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0191.827] NtQuerySystemTime (in: CurrentTime=0x7e8f748 | out: CurrentTime=0x7e8f748*=132462177704124000) returned 0x0 [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x23a7eb14 [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x47ab184d [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x405946b6 [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x71a54389 [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x596d6975 [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x51c226b9 [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x66d1ed7b [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x51c494d9 [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x3873d12c [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x75dce33 [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x4c616740 [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x4c4e64c5 [0191.827] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x3151aca [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x144c3ad [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x7ad7119d [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x79b906ee [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x3b7536b9 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x79c51502 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x40b61722 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x4521567b [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x7619e617 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x5239683 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x6a4a43e8 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x7f02f7a4 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x7024858e [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x2a3075b9 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x426b1fe6 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x76dd76db [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x74528a22 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x63df54ec [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x784942b3 [0191.828] RtlRandomEx (in: Seed=0x7e8f740 | out: Seed=0x7e8f740) returned 0x39514364 [0191.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0191.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b54758 [0191.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b58360 [0191.841] ReadFile (in: hFile=0x1b08, lpBuffer=0x7b54758, nNumberOfBytesToRead=0xd6, lpNumberOfBytesRead=0x7e8f73c, lpOverlapped=0x0 | out: lpBuffer=0x7b54758*, lpNumberOfBytesRead=0x7e8f73c*=0xd6, lpOverlapped=0x0) returned 1 [0191.843] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.843] WriteFile (in: hFile=0x1b08, lpBuffer=0x7b58360*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x7e8f740, lpOverlapped=0x0 | out: lpBuffer=0x7b58360*, lpNumberOfBytesWritten=0x7e8f740*=0xd6, lpOverlapped=0x0) returned 1 [0195.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0195.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0195.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4000) returned 1 [0195.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b58360) returned 1 [0195.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b54758) returned 1 [0195.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 [0195.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb99b8) returned 1 [0195.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0195.567] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.567] WriteFile (in: hFile=0x1b08, lpBuffer=0x7cac138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7e8f7c8, lpOverlapped=0x0 | out: lpBuffer=0x7cac138*, lpNumberOfBytesWritten=0x7e8f7c8*=0x10c, lpOverlapped=0x0) returned 1 [0196.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e560f0 [0196.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0196.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c68 [0196.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c68) returned 1 [0196.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3c68 [0196.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0196.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0196.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ce0) returned 1 [0196.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0196.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e560f0) returned 1 [0196.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2dfc0 [0196.046] sprintf (in: _Dest=0x7a2dfc0, _Format="%c%c" | out: _Dest="0a") returned 2 [0196.046] sprintf (in: _Dest=0x7a2dfc2, _Format="%c%c" | out: _Dest="92") returned 2 [0196.046] sprintf (in: _Dest=0x7a2dfc4, _Format="%c%c" | out: _Dest="a0") returned 2 [0196.046] sprintf (in: _Dest=0x7a2dfc6, _Format="%c%c" | out: _Dest="2f") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfc8, _Format="%c%c" | out: _Dest="d8") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfca, _Format="%c%c" | out: _Dest="96") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfcc, _Format="%c%c" | out: _Dest="40") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfce, _Format="%c%c" | out: _Dest="9c") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfd0, _Format="%c%c" | out: _Dest="a6") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfd2, _Format="%c%c" | out: _Dest="c2") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfd4, _Format="%c%c" | out: _Dest="dc") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfd6, _Format="%c%c" | out: _Dest="f3") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfd8, _Format="%c%c" | out: _Dest="c8") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfda, _Format="%c%c" | out: _Dest="3b") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfdc, _Format="%c%c" | out: _Dest="ed") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfde, _Format="%c%c" | out: _Dest="d9") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfe0, _Format="%c%c" | out: _Dest="d8") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfe2, _Format="%c%c" | out: _Dest="14") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfe4, _Format="%c%c" | out: _Dest="c6") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfe6, _Format="%c%c" | out: _Dest="0b") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfe8, _Format="%c%c" | out: _Dest="fc") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfea, _Format="%c%c" | out: _Dest="b9") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfec, _Format="%c%c" | out: _Dest="18") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dfee, _Format="%c%c" | out: _Dest="fd") returned 2 [0196.047] sprintf (in: _Dest=0x7a2dff0, _Format="%c%c" | out: _Dest="62") returned 2 [0196.048] sprintf (in: _Dest=0x7a2dff2, _Format="%c%c" | out: _Dest="1c") returned 2 [0196.048] RtlInitAnsiString (in: DestinationString=0x7e8f750, SourceString="0a92a02fd896409ca6c2dcf3c83bedd9d814c60bfcb918fd621c" | out: DestinationString="0a92a02fd896409ca6c2dcf3c83bedd9d814c60bfcb918fd621c") [0196.048] RtlAnsiStringToUnicodeString (in: DestinationString=0x7e8f748, SourceString="0a92a02fd896409ca6c2dcf3c83bedd9d814c60bfcb918fd621c", AllocateDestinationString=1 | out: DestinationString="0a92a02fd896409ca6c2dcf3c83bedd9d814c60bfcb918fd621c") returned 0x0 [0196.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e7d8 [0196.048] wcscat (in: _Dest=0x7b84a70, _Source="0a92a02fd8964" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\0a92a02fd8964") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\0a92a02fd8964" [0196.048] wcscat (in: _Dest=0x7b84a70, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\0a92a02fd8964.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\0a92a02fd8964.68814f" [0196.048] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\0a92a02fd8964.68814f", NtPathName=0x7e8f740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\0a92a02fd8964.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea38f0 [0196.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38f0) returned 1 [0196.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f384f8) returned 1 [0196.172] NtQueryInformationFile (in: FileHandle=0x1b08, IoStatusBlock=0x7e8f718, FileInformation=0x7e8f720, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7e8f718, FileInformation=0x7e8f720) returned 0x0 [0196.172] NtSetInformationFile (FileHandle=0x1b08, IoStatusBlock=0x7e8f718, FileInformation=0x7e8f720, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84a70) returned 1 [0196.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0196.227] FlushFileBuffers (hFile=0x1b08) returned 1 [0196.241] CloseHandle (hObject=0x1b08) returned 1 [0196.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55278 [0196.266] wcscpy (in: _Dest=0x3d55278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\" [0196.266] wcscat (in: _Dest=0x3d55278, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\68814F-Readme.txt" [0196.266] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\68814f-readme.txt")) returned 0xffffffff [0196.266] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0196.280] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7e8f75c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x7e8f75c*=0x8b9, lpOverlapped=0x0) returned 1 [0196.302] CloseHandle (hObject=0x1140) returned 1 [0196.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0196.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80570) returned 1 Thread: id = 5825 os_tid = 0x2494 [0185.414] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json")) returned 0x2020 [0186.752] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.239] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d40 [0191.844] GetFileSizeEx (in: hFile=0x1d40, lpFileSize=0x906f88c | out: lpFileSize=0x906f88c*=217) returned 1 [0191.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0191.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0191.844] NtQuerySystemTime (in: CurrentTime=0x906f800 | out: CurrentTime=0x906f800*=132462177704280000) returned 0x0 [0191.844] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x1db1891f [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x48841d8f [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x897b8bc [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x5ce0c2a8 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x5681c62c [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x237c2e01 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x21069495 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x7d43141b [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x52b8fc9a [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x29023a66 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x67945db4 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x369c5213 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x6790fc89 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x3ac9f079 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x704a7254 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x1c98b7c2 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x321fb7b5 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x1d0cb07f [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x1426d94c [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x4bb939c9 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x3cb86fb8 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x57ff5679 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x2126bd39 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x1e4c32e6 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x3ffd1926 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x75d26870 [0191.845] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x14b18f83 [0191.846] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x4bb60440 [0191.846] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x4e0ddec0 [0191.846] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x554d8f35 [0191.846] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x348ac625 [0191.846] RtlRandomEx (in: Seed=0x906f7f8 | out: Seed=0x906f7f8) returned 0x1e38b768 [0191.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0191.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5bf68 [0191.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5fb70 [0191.862] ReadFile (in: hFile=0x1d40, lpBuffer=0x7b5bf68, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0x906f7f4, lpOverlapped=0x0 | out: lpBuffer=0x7b5bf68*, lpNumberOfBytesRead=0x906f7f4*=0xd9, lpOverlapped=0x0) returned 1 [0191.864] SetFilePointerEx (in: hFile=0x1d40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.864] WriteFile (in: hFile=0x1d40, lpBuffer=0x7b5fb70*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x906f7f8, lpOverlapped=0x0 | out: lpBuffer=0x7b5fb70*, lpNumberOfBytesWritten=0x906f7f8*=0xd9, lpOverlapped=0x0) returned 1 [0195.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0195.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0195.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0195.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5fb70) returned 1 [0195.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5bf68) returned 1 [0195.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0195.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9a00) returned 1 [0195.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a379e0 [0195.564] SetFilePointerEx (in: hFile=0x1d40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.564] WriteFile (in: hFile=0x1d40, lpBuffer=0x7cadda8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x906f880, lpOverlapped=0x0 | out: lpBuffer=0x7cadda8*, lpNumberOfBytesWritten=0x906f880*=0x10c, lpOverlapped=0x0) returned 1 [0196.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e560f0 [0196.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0196.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c40 [0196.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c40) returned 1 [0196.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3c40 [0196.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c18 [0196.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0196.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ba0) returned 1 [0196.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0196.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e560f0) returned 1 [0196.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2dfc0 [0196.038] sprintf (in: _Dest=0x7a2dfc0, _Format="%c%c" | out: _Dest="1a") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfc2, _Format="%c%c" | out: _Dest="27") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfc4, _Format="%c%c" | out: _Dest="aa") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfc6, _Format="%c%c" | out: _Dest="7a") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfc8, _Format="%c%c" | out: _Dest="f1") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfca, _Format="%c%c" | out: _Dest="4d") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfcc, _Format="%c%c" | out: _Dest="7f") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfce, _Format="%c%c" | out: _Dest="ba") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfd0, _Format="%c%c" | out: _Dest="46") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfd2, _Format="%c%c" | out: _Dest="ec") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfd4, _Format="%c%c" | out: _Dest="49") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfd6, _Format="%c%c" | out: _Dest="69") returned 2 [0196.038] sprintf (in: _Dest=0x7a2dfd8, _Format="%c%c" | out: _Dest="83") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfda, _Format="%c%c" | out: _Dest="55") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfdc, _Format="%c%c" | out: _Dest="e2") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfde, _Format="%c%c" | out: _Dest="74") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfe0, _Format="%c%c" | out: _Dest="e4") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfe2, _Format="%c%c" | out: _Dest="72") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfe4, _Format="%c%c" | out: _Dest="87") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfe6, _Format="%c%c" | out: _Dest="0c") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfe8, _Format="%c%c" | out: _Dest="73") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfea, _Format="%c%c" | out: _Dest="aa") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfec, _Format="%c%c" | out: _Dest="01") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dfee, _Format="%c%c" | out: _Dest="64") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dff0, _Format="%c%c" | out: _Dest="2e") returned 2 [0196.039] sprintf (in: _Dest=0x7a2dff2, _Format="%c%c" | out: _Dest="ee") returned 2 [0196.039] RtlInitAnsiString (in: DestinationString=0x906f808, SourceString="1a27aa7af14d7fba46ec49698355e274e472870c73aa01642eee" | out: DestinationString="1a27aa7af14d7fba46ec49698355e274e472870c73aa01642eee") [0196.039] RtlAnsiStringToUnicodeString (in: DestinationString=0x906f800, SourceString="1a27aa7af14d7fba46ec49698355e274e472870c73aa01642eee", AllocateDestinationString=1 | out: DestinationString="1a27aa7af14d7fba46ec49698355e274e472870c73aa01642eee") returned 0x0 [0196.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e5f8 [0196.039] wcscat (in: _Dest=0x7b84800, _Source="1a27aa7af14d7" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\1a27aa7af14d7") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\1a27aa7af14d7" [0196.040] wcscat (in: _Dest=0x7b84800, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\1a27aa7af14d7.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\1a27aa7af14d7.68814f" [0196.040] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\1a27aa7af14d7.68814f", NtPathName=0x906f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\1a27aa7af14d7.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2eb0 [0196.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0196.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f34670) returned 1 [0196.169] NtQueryInformationFile (in: FileHandle=0x1d40, IoStatusBlock=0x906f7d0, FileInformation=0x906f7d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x906f7d0, FileInformation=0x906f7d8) returned 0x0 [0196.169] NtSetInformationFile (FileHandle=0x1d40, IoStatusBlock=0x906f7d0, FileInformation=0x906f7d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84800) returned 1 [0196.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0196.217] FlushFileBuffers (hFile=0x1d40) returned 1 [0196.225] CloseHandle (hObject=0x1d40) returned 1 [0196.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d554c8 [0196.257] wcscpy (in: _Dest=0x3d554c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\" [0196.257] wcscat (in: _Dest=0x3d554c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\68814F-Readme.txt" [0196.258] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\68814f-readme.txt")) returned 0xffffffff [0196.258] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd90 [0196.276] WriteFile (in: hFile=0xd90, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x906f814, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x906f814*=0x8b9, lpOverlapped=0x0) returned 1 [0196.295] CloseHandle (hObject=0xd90) returned 1 [0196.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d554c8) returned 1 [0196.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b807c0) returned 1 Thread: id = 5826 os_tid = 0x2498 [0185.415] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json")) returned 0x2020 [0186.753] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0189.239] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1794 [0191.870] GetFileSizeEx (in: hFile=0x1794, lpFileSize=0x792fc74 | out: lpFileSize=0x792fc74*=224) returned 1 [0191.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0191.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0191.871] NtQuerySystemTime (in: CurrentTime=0x792fbe8 | out: CurrentTime=0x792fbe8*=132462177704436000) returned 0x0 [0191.871] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x5ea46b93 [0191.871] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x343b0f [0191.871] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x6555028a [0191.871] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x251e4261 [0191.871] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x195c6e72 [0191.871] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x6d024383 [0191.871] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0xe560a88 [0191.871] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x7e317856 [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x112dee8b [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x29dec683 [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x618068d1 [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x18fbcc84 [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x6d42dec9 [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x6c533f89 [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x7a4c071d [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x8920e0c [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x762943e7 [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x3e4b9e78 [0191.872] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x3bf86fb3 [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x3e34c578 [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x3feb8e57 [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x3243b559 [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x1b07aaf3 [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x40249536 [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x43b04d34 [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x62258812 [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x3e21ec13 [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x561b169d [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x652f659e [0191.873] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x42848798 [0191.874] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x666d631f [0191.874] RtlRandomEx (in: Seed=0x792fbe0 | out: Seed=0x792fbe0) returned 0x525d65bb [0191.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0191.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b63778 [0191.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b67380 [0191.893] ReadFile (in: hFile=0x1794, lpBuffer=0x7b63778, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0x792fbdc, lpOverlapped=0x0 | out: lpBuffer=0x7b63778*, lpNumberOfBytesRead=0x792fbdc*=0xe0, lpOverlapped=0x0) returned 1 [0191.895] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.895] WriteFile (in: hFile=0x1794, lpBuffer=0x7b67380*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x792fbe0, lpOverlapped=0x0 | out: lpBuffer=0x7b67380*, lpNumberOfBytesWritten=0x792fbe0*=0xe0, lpOverlapped=0x0) returned 1 [0195.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0195.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0195.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0195.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b67380) returned 1 [0195.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b63778) returned 1 [0195.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30153a0) returned 1 [0195.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9a48) returned 1 [0195.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a378c0 [0195.562] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.563] WriteFile (in: hFile=0x1794, lpBuffer=0x7cac020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x792fc68, lpOverlapped=0x0 | out: lpBuffer=0x7cac020*, lpNumberOfBytesWritten=0x792fc68*=0x10c, lpOverlapped=0x0) returned 1 [0196.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e560f0 [0196.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0196.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0196.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3da8) returned 1 [0196.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3da8 [0196.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0196.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0196.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ab0) returned 1 [0196.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0196.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e560f0) returned 1 [0196.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2dfc0 [0196.041] sprintf (in: _Dest=0x7a2dfc0, _Format="%c%c" | out: _Dest="eb") returned 2 [0196.041] sprintf (in: _Dest=0x7a2dfc2, _Format="%c%c" | out: _Dest="99") returned 2 [0196.041] sprintf (in: _Dest=0x7a2dfc4, _Format="%c%c" | out: _Dest="44") returned 2 [0196.041] sprintf (in: _Dest=0x7a2dfc6, _Format="%c%c" | out: _Dest="2c") returned 2 [0196.041] sprintf (in: _Dest=0x7a2dfc8, _Format="%c%c" | out: _Dest="27") returned 2 [0196.041] sprintf (in: _Dest=0x7a2dfca, _Format="%c%c" | out: _Dest="db") returned 2 [0196.041] sprintf (in: _Dest=0x7a2dfcc, _Format="%c%c" | out: _Dest="f0") returned 2 [0196.041] sprintf (in: _Dest=0x7a2dfce, _Format="%c%c" | out: _Dest="2b") returned 2 [0196.041] sprintf (in: _Dest=0x7a2dfd0, _Format="%c%c" | out: _Dest="ef") returned 2 [0196.041] sprintf (in: _Dest=0x7a2dfd2, _Format="%c%c" | out: _Dest="f7") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfd4, _Format="%c%c" | out: _Dest="ce") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfd6, _Format="%c%c" | out: _Dest="58") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfd8, _Format="%c%c" | out: _Dest="e3") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfda, _Format="%c%c" | out: _Dest="92") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfdc, _Format="%c%c" | out: _Dest="03") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfde, _Format="%c%c" | out: _Dest="59") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfe0, _Format="%c%c" | out: _Dest="a5") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfe2, _Format="%c%c" | out: _Dest="79") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfe4, _Format="%c%c" | out: _Dest="66") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfe6, _Format="%c%c" | out: _Dest="42") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfe8, _Format="%c%c" | out: _Dest="56") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfea, _Format="%c%c" | out: _Dest="77") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfec, _Format="%c%c" | out: _Dest="54") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dfee, _Format="%c%c" | out: _Dest="31") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dff0, _Format="%c%c" | out: _Dest="f4") returned 2 [0196.042] sprintf (in: _Dest=0x7a2dff2, _Format="%c%c" | out: _Dest="0a") returned 2 [0196.042] RtlInitAnsiString (in: DestinationString=0x792fbf0, SourceString="eb99442c27dbf02beff7ce58e3920359a579664256775431f40a" | out: DestinationString="eb99442c27dbf02beff7ce58e3920359a579664256775431f40a") [0196.042] RtlAnsiStringToUnicodeString (in: DestinationString=0x792fbe8, SourceString="eb99442c27dbf02beff7ce58e3920359a579664256775431f40a", AllocateDestinationString=1 | out: DestinationString="eb99442c27dbf02beff7ce58e3920359a579664256775431f40a") returned 0x0 [0196.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e8c8 [0196.042] wcscat (in: _Dest=0x7b84938, _Source="eb99442c27dbf" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\eb99442c27dbf") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\eb99442c27dbf" [0196.043] wcscat (in: _Dest=0x7b84938, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\eb99442c27dbf.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\eb99442c27dbf.68814f" [0196.043] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\eb99442c27dbf.68814f", NtPathName=0x792fbe0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\eb99442c27dbf.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ea33d0 [0196.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea33d0) returned 1 [0196.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f375e0) returned 1 [0196.170] NtQueryInformationFile (in: FileHandle=0x1794, IoStatusBlock=0x792fbb8, FileInformation=0x792fbc0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x792fbb8, FileInformation=0x792fbc0) returned 0x0 [0196.170] NtSetInformationFile (FileHandle=0x1794, IoStatusBlock=0x792fbb8, FileInformation=0x792fbc0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84938) returned 1 [0196.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e8c8) returned 1 [0196.220] FlushFileBuffers (hFile=0x1794) returned 1 [0196.232] CloseHandle (hObject=0x1794) returned 1 [0196.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9928 [0196.259] wcscpy (in: _Dest=0x3ec9928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\" [0196.260] wcscat (in: _Dest=0x3ec9928, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\68814F-Readme.txt" [0196.260] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\68814f-readme.txt")) returned 0xffffffff [0196.260] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1734 [0196.277] WriteFile (in: hFile=0x1734, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x792fbfc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x792fbfc*=0x8b9, lpOverlapped=0x0) returned 1 [0196.298] CloseHandle (hObject=0x1734) returned 1 [0196.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9928) returned 1 [0196.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80698) returned 1 Thread: id = 5827 os_tid = 0xb3c [0185.415] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json")) returned 0x2020 [0186.753] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.239] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd90 [0191.896] GetFileSizeEx (in: hFile=0xd90, lpFileSize=0x8dbfc6c | out: lpFileSize=0x8dbfc6c*=222) returned 1 [0191.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0191.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0191.896] NtQuerySystemTime (in: CurrentTime=0x8dbfbe0 | out: CurrentTime=0x8dbfbe0*=132462177704748000) returned 0x0 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0xb83e88b [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x7eb56e9f [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x5ad1e48a [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x1d6e9bb8 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x3036f0b9 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x7c53d8b5 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x692a3d99 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x3734a7d3 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x24e55840 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x17c69cd2 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0xfcfef2 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x3cd61413 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x63a9039e [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x1c2312bb [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x2d33b339 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x2e797cf2 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x6e390ccf [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x10a81d5 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x588ae9a [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x2d05678c [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x196ce03f [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x67dfcb3e [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x72261d8 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x4b357a00 [0191.897] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x753f294f [0191.898] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x13977c37 [0191.898] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x514aed88 [0191.898] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x57a0f84c [0191.898] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x550e574c [0191.898] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x56ae8a5f [0191.898] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x13645395 [0191.898] RtlRandomEx (in: Seed=0x8dbfbd8 | out: Seed=0x8dbfbd8) returned 0x2cf9ef97 [0191.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0191.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b6af88 [0191.910] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b6eb90 [0191.910] ReadFile (in: hFile=0xd90, lpBuffer=0x7b6af88, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0x8dbfbd4, lpOverlapped=0x0 | out: lpBuffer=0x7b6af88*, lpNumberOfBytesRead=0x8dbfbd4*=0xde, lpOverlapped=0x0) returned 1 [0191.912] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.912] WriteFile (in: hFile=0xd90, lpBuffer=0x7b6eb90*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x8dbfbd8, lpOverlapped=0x0 | out: lpBuffer=0x7b6eb90*, lpNumberOfBytesWritten=0x8dbfbd8*=0xde, lpOverlapped=0x0) returned 1 [0195.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0195.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0195.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0195.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6eb90) returned 1 [0195.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6af88) returned 1 [0195.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015670) returned 1 [0195.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9a90) returned 1 [0195.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a377a0 [0195.559] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.559] WriteFile (in: hFile=0xd90, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8dbfc60, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0x8dbfc60*=0x10c, lpOverlapped=0x0) returned 1 [0196.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e560f0 [0196.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0196.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0196.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fb0) returned 1 [0196.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3fb0 [0196.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0196.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0196.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2980) returned 1 [0196.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0196.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e560f0) returned 1 [0196.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2dfc0 [0196.031] sprintf (in: _Dest=0x7a2dfc0, _Format="%c%c" | out: _Dest="91") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfc2, _Format="%c%c" | out: _Dest="93") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfc4, _Format="%c%c" | out: _Dest="13") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfc6, _Format="%c%c" | out: _Dest="11") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfc8, _Format="%c%c" | out: _Dest="9f") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfca, _Format="%c%c" | out: _Dest="9a") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfcc, _Format="%c%c" | out: _Dest="ba") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfce, _Format="%c%c" | out: _Dest="6d") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfd0, _Format="%c%c" | out: _Dest="8a") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfd2, _Format="%c%c" | out: _Dest="53") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfd4, _Format="%c%c" | out: _Dest="53") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfd6, _Format="%c%c" | out: _Dest="4e") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfd8, _Format="%c%c" | out: _Dest="37") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfda, _Format="%c%c" | out: _Dest="df") returned 2 [0196.031] sprintf (in: _Dest=0x7a2dfdc, _Format="%c%c" | out: _Dest="d3") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dfde, _Format="%c%c" | out: _Dest="6b") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dfe0, _Format="%c%c" | out: _Dest="61") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dfe2, _Format="%c%c" | out: _Dest="f2") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dfe4, _Format="%c%c" | out: _Dest="bd") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dfe6, _Format="%c%c" | out: _Dest="c6") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dfe8, _Format="%c%c" | out: _Dest="85") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dfea, _Format="%c%c" | out: _Dest="3d") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dfec, _Format="%c%c" | out: _Dest="ba") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dfee, _Format="%c%c" | out: _Dest="0c") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dff0, _Format="%c%c" | out: _Dest="10") returned 2 [0196.032] sprintf (in: _Dest=0x7a2dff2, _Format="%c%c" | out: _Dest="20") returned 2 [0196.032] RtlInitAnsiString (in: DestinationString=0x8dbfbe8, SourceString="919313119f9aba6d8a53534e37dfd36b61f2bdc6853dba0c1020" | out: DestinationString="919313119f9aba6d8a53534e37dfd36b61f2bdc6853dba0c1020") [0196.032] RtlAnsiStringToUnicodeString (in: DestinationString=0x8dbfbe0, SourceString="919313119f9aba6d8a53534e37dfd36b61f2bdc6853dba0c1020", AllocateDestinationString=1 | out: DestinationString="919313119f9aba6d8a53534e37dfd36b61f2bdc6853dba0c1020") returned 0x0 [0196.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e760 [0196.033] wcscat (in: _Dest=0x3ec9a60, _Source="919313119f9ab" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\919313119f9ab") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\919313119f9ab" [0196.033] wcscat (in: _Dest=0x3ec9a60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\919313119f9ab.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\919313119f9ab.68814f" [0196.033] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\919313119f9ab.68814f", NtPathName=0x8dbfbd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\919313119f9ab.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3518 [0196.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3518) returned 1 [0196.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33dd0) returned 1 [0196.166] NtQueryInformationFile (in: FileHandle=0xd90, IoStatusBlock=0x8dbfbb0, FileInformation=0x8dbfbb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8dbfbb0, FileInformation=0x8dbfbb8) returned 0x0 [0196.166] NtSetInformationFile (FileHandle=0xd90, IoStatusBlock=0x8dbfbb0, FileInformation=0x8dbfbb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 [0196.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0196.212] FlushFileBuffers (hFile=0xd90) returned 1 [0196.219] CloseHandle (hObject=0xd90) returned 1 [0196.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d55bb8 [0196.254] wcscpy (in: _Dest=0x3d55bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\" [0196.254] wcscat (in: _Dest=0x3d55bb8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\68814F-Readme.txt" [0196.254] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\68814f-readme.txt")) returned 0xffffffff [0196.255] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d40 [0196.275] WriteFile (in: hFile=0x1d40, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8dbfbf4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8dbfbf4*=0x8b9, lpOverlapped=0x0) returned 1 [0196.293] CloseHandle (hObject=0x1d40) returned 1 [0196.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55bb8) returned 1 [0196.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b808e8) returned 1 Thread: id = 5828 os_tid = 0xbfc [0185.415] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json")) returned 0x2020 [0186.754] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0189.239] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b14 [0191.917] GetFileSizeEx (in: hFile=0x1b14, lpFileSize=0x8acfd14 | out: lpFileSize=0x8acfd14*=225) returned 1 [0191.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0191.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c90 [0191.917] NtQuerySystemTime (in: CurrentTime=0x8acfc88 | out: CurrentTime=0x8acfc88*=132462177704904000) returned 0x0 [0191.917] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x773d3f7a [0191.917] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0xaf9ccc1 [0191.917] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x58c19fdc [0191.917] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x1f173bdf [0191.917] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x421ac2f8 [0191.917] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x22f21f47 [0191.917] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x1c63b8ef [0191.917] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x204a1d4b [0191.917] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x3791690d [0191.917] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x7b67802c [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x4b8b2b80 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x2e623145 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x6a619411 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x1b87e62e [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0xd0c6754 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x4b0aa140 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0xc39f583 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x4de30600 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x6f924b1c [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x1dd7e492 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x618068d1 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x4fddc60 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0xce9954c [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x2315a3e6 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x21d92c34 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x7c6fbece [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x66202ab9 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x382be978 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x3b0824cb [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x4c368e80 [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x7c08157a [0191.918] RtlRandomEx (in: Seed=0x8acfc80 | out: Seed=0x8acfc80) returned 0x73325f56 [0191.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0191.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b72798 [0191.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b763a0 [0191.931] ReadFile (in: hFile=0x1b14, lpBuffer=0x7b72798, nNumberOfBytesToRead=0xe1, lpNumberOfBytesRead=0x8acfc7c, lpOverlapped=0x0 | out: lpBuffer=0x7b72798*, lpNumberOfBytesRead=0x8acfc7c*=0xe1, lpOverlapped=0x0) returned 1 [0191.934] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.934] WriteFile (in: hFile=0x1b14, lpBuffer=0x7b763a0*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0x8acfc80, lpOverlapped=0x0 | out: lpBuffer=0x7b763a0*, lpNumberOfBytesWritten=0x8acfc80*=0xe1, lpOverlapped=0x0) returned 1 [0195.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0f8 [0195.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0195.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0195.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b763a0) returned 1 [0195.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b72798) returned 1 [0195.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0195.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0195.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0195.437] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.438] WriteFile (in: hFile=0x1b14, lpBuffer=0x7cac138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8acfd08, lpOverlapped=0x0 | out: lpBuffer=0x7cac138*, lpNumberOfBytesWritten=0x8acfd08*=0x10c, lpOverlapped=0x0) returned 1 [0195.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55cb8 [0195.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0195.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0195.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0195.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3f38 [0195.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0195.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0195.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec59c8) returned 1 [0195.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0195.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55cb8) returned 1 [0195.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2da00 [0195.523] sprintf (in: _Dest=0x7a2da00, _Format="%c%c" | out: _Dest="48") returned 2 [0195.523] sprintf (in: _Dest=0x7a2da02, _Format="%c%c" | out: _Dest="1f") returned 2 [0195.523] sprintf (in: _Dest=0x7a2da04, _Format="%c%c" | out: _Dest="a9") returned 2 [0195.523] sprintf (in: _Dest=0x7a2da06, _Format="%c%c" | out: _Dest="e0") returned 2 [0195.523] sprintf (in: _Dest=0x7a2da08, _Format="%c%c" | out: _Dest="d5") returned 2 [0195.523] sprintf (in: _Dest=0x7a2da0a, _Format="%c%c" | out: _Dest="9e") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da0c, _Format="%c%c" | out: _Dest="02") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da0e, _Format="%c%c" | out: _Dest="01") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da10, _Format="%c%c" | out: _Dest="bc") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da12, _Format="%c%c" | out: _Dest="cb") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da14, _Format="%c%c" | out: _Dest="92") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da16, _Format="%c%c" | out: _Dest="28") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da18, _Format="%c%c" | out: _Dest="86") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da1a, _Format="%c%c" | out: _Dest="b5") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da1c, _Format="%c%c" | out: _Dest="f8") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da1e, _Format="%c%c" | out: _Dest="ba") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da20, _Format="%c%c" | out: _Dest="c1") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da22, _Format="%c%c" | out: _Dest="06") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da24, _Format="%c%c" | out: _Dest="f1") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da26, _Format="%c%c" | out: _Dest="5a") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da28, _Format="%c%c" | out: _Dest="4f") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da2a, _Format="%c%c" | out: _Dest="6e") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da2c, _Format="%c%c" | out: _Dest="3d") returned 2 [0195.524] sprintf (in: _Dest=0x7a2da2e, _Format="%c%c" | out: _Dest="a9") returned 2 [0195.525] sprintf (in: _Dest=0x7a2da30, _Format="%c%c" | out: _Dest="f9") returned 2 [0195.525] sprintf (in: _Dest=0x7a2da32, _Format="%c%c" | out: _Dest="2c") returned 2 [0195.525] RtlInitAnsiString (in: DestinationString=0x8acfc90, SourceString="481fa9e0d59e0201bccb922886b5f8bac106f15a4f6e3da9f92c" | out: DestinationString="481fa9e0d59e0201bccb922886b5f8bac106f15a4f6e3da9f92c") [0195.525] RtlAnsiStringToUnicodeString (in: DestinationString=0x8acfc88, SourceString="481fa9e0d59e0201bccb922886b5f8bac106f15a4f6e3da9f92c", AllocateDestinationString=1 | out: DestinationString="481fa9e0d59e0201bccb922886b5f8bac106f15a4f6e3da9f92c") returned 0x0 [0195.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e148 [0195.525] wcscat (in: _Dest=0x3eca2e8, _Source="481fa9e0d59e0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\481fa9e0d59e0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\481fa9e0d59e0" [0195.525] wcscat (in: _Dest=0x3eca2e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\481fa9e0d59e0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\481fa9e0d59e0.68814f" [0195.526] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\481fa9e0d59e0.68814f", NtPathName=0x8acfc80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\481fa9e0d59e0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3288 [0196.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3288) returned 1 [0196.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36b18) returned 1 [0196.005] NtQueryInformationFile (in: FileHandle=0x1b14, IoStatusBlock=0x8acfc58, FileInformation=0x8acfc60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8acfc58, FileInformation=0x8acfc60) returned 0x0 [0196.005] NtSetInformationFile (FileHandle=0x1b14, IoStatusBlock=0x8acfc58, FileInformation=0x8acfc60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca2e8) returned 1 [0196.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0196.139] FlushFileBuffers (hFile=0x1b14) returned 1 [0196.145] CloseHandle (hObject=0x1b14) returned 1 [0196.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbfd08 [0196.201] wcscpy (in: _Dest=0x7cbfd08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\" [0196.201] wcscat (in: _Dest=0x7cbfd08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\68814F-Readme.txt" [0196.201] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\68814f-readme.txt")) returned 0xffffffff [0196.202] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0196.341] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8acfc9c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8acfc9c*=0x8b9, lpOverlapped=0x0) returned 1 [0196.343] CloseHandle (hObject=0x1140) returned 1 [0196.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfd08) returned 1 [0196.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80a10) returned 1 Thread: id = 5829 os_tid = 0xbf8 [0185.416] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json")) returned 0x2020 [0186.754] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.240] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1524 [0191.935] GetFileSizeEx (in: hFile=0x1524, lpFileSize=0x786f9b4 | out: lpFileSize=0x786f9b4*=291) returned 1 [0191.935] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0x11f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.935] ReadFile (in: hFile=0x1524, lpBuffer=0x786f990, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x786f9a0, lpOverlapped=0x0 | out: lpBuffer=0x786f990*, lpNumberOfBytesRead=0x786f9a0*=0x4, lpOverlapped=0x0) returned 1 [0191.937] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c90 [0191.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f60 [0191.938] NtQuerySystemTime (in: CurrentTime=0x786f928 | out: CurrentTime=0x786f928*=132462177705216000) returned 0x0 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x1db421e6 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x505b7312 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x13539cc1 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x1544b869 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x7294c03a [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x530d43e2 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x7e1dbe99 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x2fae6cba [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x4be0dd00 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x64b8a451 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x4434e86 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x21b094ac [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x1632da4 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x363d6bb9 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0xd1240c8 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x1609dcc0 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x31193975 [0191.938] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x3e96654e [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x3feb8e57 [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x87a7993 [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x3f973ba4 [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x1975faaa [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x7d6d81ee [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x79affb7e [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x30b9a5fc [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x647b6733 [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x4e46f23a [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x3e987671 [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x66b5ebab [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x5caa37ae [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x5990ff04 [0191.939] RtlRandomEx (in: Seed=0x786f920 | out: Seed=0x786f920) returned 0x3a6f9a30 [0191.954] ReadFile (in: hFile=0x1524, lpBuffer=0x10d50060, nNumberOfBytesToRead=0x123, lpNumberOfBytesRead=0x786f91c, lpOverlapped=0x0 | out: lpBuffer=0x10d50060*, lpNumberOfBytesRead=0x786f91c*=0x123, lpOverlapped=0x0) returned 1 [0191.954] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.954] WriteFile (in: hFile=0x1524, lpBuffer=0x10d53c68*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0x786f920, lpOverlapped=0x0 | out: lpBuffer=0x10d53c68*, lpNumberOfBytesWritten=0x786f920*=0x123, lpOverlapped=0x0) returned 1 [0195.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0195.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0195.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9978) returned 1 [0195.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d53c68) returned 1 [0195.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d50060) returned 1 [0195.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0195.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9b20) returned 1 [0195.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a378c0 [0195.443] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.443] WriteFile (in: hFile=0x1524, lpBuffer=0x7cac020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x786f9a8, lpOverlapped=0x0 | out: lpBuffer=0x7cac020*, lpNumberOfBytesWritten=0x786f9a8*=0x10c, lpOverlapped=0x0) returned 1 [0195.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55cb8 [0195.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0195.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0195.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e70) returned 1 [0195.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3e70 [0195.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3dd0 [0195.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f60 [0195.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f60) returned 1 [0195.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0195.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55cb8) returned 1 [0195.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2da00 [0195.536] sprintf (in: _Dest=0x7a2da00, _Format="%c%c" | out: _Dest="a4") returned 2 [0195.536] sprintf (in: _Dest=0x7a2da02, _Format="%c%c" | out: _Dest="64") returned 2 [0195.536] sprintf (in: _Dest=0x7a2da04, _Format="%c%c" | out: _Dest="d0") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da06, _Format="%c%c" | out: _Dest="61") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da08, _Format="%c%c" | out: _Dest="66") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da0a, _Format="%c%c" | out: _Dest="a9") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da0c, _Format="%c%c" | out: _Dest="4c") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da0e, _Format="%c%c" | out: _Dest="ca") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da10, _Format="%c%c" | out: _Dest="a6") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da12, _Format="%c%c" | out: _Dest="72") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da14, _Format="%c%c" | out: _Dest="06") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da16, _Format="%c%c" | out: _Dest="fd") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da18, _Format="%c%c" | out: _Dest="08") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da1a, _Format="%c%c" | out: _Dest="5c") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da1c, _Format="%c%c" | out: _Dest="24") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da1e, _Format="%c%c" | out: _Dest="bd") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da20, _Format="%c%c" | out: _Dest="89") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da22, _Format="%c%c" | out: _Dest="7d") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da24, _Format="%c%c" | out: _Dest="0a") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da26, _Format="%c%c" | out: _Dest="17") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da28, _Format="%c%c" | out: _Dest="1e") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da2a, _Format="%c%c" | out: _Dest="e0") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da2c, _Format="%c%c" | out: _Dest="93") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da2e, _Format="%c%c" | out: _Dest="bd") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da30, _Format="%c%c" | out: _Dest="da") returned 2 [0195.537] sprintf (in: _Dest=0x7a2da32, _Format="%c%c" | out: _Dest="92") returned 2 [0195.537] RtlInitAnsiString (in: DestinationString=0x786f930, SourceString="a464d06166a94ccaa67206fd085c24bd897d0a171ee093bdda92" | out: DestinationString="a464d06166a94ccaa67206fd085c24bd897d0a171ee093bdda92") [0195.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x786f928, SourceString="a464d06166a94ccaa67206fd085c24bd897d0a171ee093bdda92", AllocateDestinationString=1 | out: DestinationString="a464d06166a94ccaa67206fd085c24bd897d0a171ee093bdda92") returned 0x0 [0195.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e3a0 [0195.538] wcscat (in: _Dest=0x3eca690, _Source="a464d06166a94" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\a464d06166a94") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\a464d06166a94" [0195.538] wcscat (in: _Dest=0x3eca690, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\a464d06166a94.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\a464d06166a94.68814f" [0195.538] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\a464d06166a94.68814f", NtPathName=0x786f920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\a464d06166a94.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2eb0 [0196.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0196.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca0248) returned 1 [0196.016] NtQueryInformationFile (in: FileHandle=0x1524, IoStatusBlock=0x786f8f8, FileInformation=0x786f900, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x786f8f8, FileInformation=0x786f900) returned 0x0 [0196.016] NtSetInformationFile (FileHandle=0x1524, IoStatusBlock=0x786f8f8, FileInformation=0x786f900, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca690) returned 1 [0196.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0196.147] FlushFileBuffers (hFile=0x1524) returned 1 [0196.162] CloseHandle (hObject=0x1524) returned 1 [0196.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbfab8 [0196.207] wcscpy (in: _Dest=0x7cbfab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\" [0196.207] wcscat (in: _Dest=0x7cbfab8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\68814F-Readme.txt" [0196.208] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\68814f-readme.txt")) returned 0xffffffff [0196.208] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0196.350] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x786f93c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x786f93c*=0x8b9, lpOverlapped=0x0) returned 1 [0196.352] CloseHandle (hObject=0x1140) returned 1 [0196.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfab8) returned 1 [0196.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80b38) returned 1 Thread: id = 5830 os_tid = 0x1008 [0185.416] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json")) returned 0x2020 [0186.755] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0189.240] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13bc [0191.955] GetFileSizeEx (in: hFile=0x13bc, lpFileSize=0x94dfdcc | out: lpFileSize=0x94dfdcc*=230) returned 1 [0191.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f60 [0191.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d80 [0191.955] NtQuerySystemTime (in: CurrentTime=0x94dfd40 | out: CurrentTime=0x94dfd40*=132462177705372000) returned 0x0 [0191.955] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x1ebae417 [0191.955] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x1cc9eed6 [0191.955] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x5991e874 [0191.955] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x1520bbda [0191.955] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x6763736c [0191.955] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x50de78df [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x3b01e21d [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x7232e7cd [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x437b56c7 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x710d3546 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x173e3884 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x64528154 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x3d6dc419 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x24def71e [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x1a906116 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x3065639 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x734e7a40 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x5182861b [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x21958ba7 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x36583b52 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x5a1e4a4a [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x2429fab9 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x10d73229 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x5c5c30e3 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x48bb4c28 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x418f1825 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x4262c23f [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x6b047203 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x2ba50a8 [0191.956] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x505b800a [0191.957] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x566d271f [0191.957] RtlRandomEx (in: Seed=0x94dfd38 | out: Seed=0x94dfd38) returned 0x3ef77e44 [0191.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0191.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d57870 [0191.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d5b478 [0191.969] ReadFile (in: hFile=0x13bc, lpBuffer=0x10d57870, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0x94dfd34, lpOverlapped=0x0 | out: lpBuffer=0x10d57870*, lpNumberOfBytesRead=0x94dfd34*=0xe6, lpOverlapped=0x0) returned 1 [0191.971] SetFilePointerEx (in: hFile=0x13bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.971] WriteFile (in: hFile=0x13bc, lpBuffer=0x10d5b478*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x94dfd38, lpOverlapped=0x0 | out: lpBuffer=0x10d5b478*, lpNumberOfBytesWritten=0x94dfd38*=0xe6, lpOverlapped=0x0) returned 1 [0195.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0195.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa80 [0195.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa80) returned 1 [0195.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d5b478) returned 1 [0195.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d57870) returned 1 [0195.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0195.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9b68) returned 1 [0195.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a379e0 [0195.442] SetFilePointerEx (in: hFile=0x13bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.442] WriteFile (in: hFile=0x13bc, lpBuffer=0x7cadda8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x94dfdc0, lpOverlapped=0x0 | out: lpBuffer=0x7cadda8*, lpNumberOfBytesWritten=0x94dfdc0*=0x10c, lpOverlapped=0x0) returned 1 [0195.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e55cb8 [0195.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0195.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ee8 [0195.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ee8) returned 1 [0195.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3ee8 [0195.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ec0 [0195.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0195.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d08) returned 1 [0195.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0195.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55cb8) returned 1 [0195.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2da00 [0195.531] sprintf (in: _Dest=0x7a2da00, _Format="%c%c" | out: _Dest="ca") returned 2 [0195.531] sprintf (in: _Dest=0x7a2da02, _Format="%c%c" | out: _Dest="a9") returned 2 [0195.531] sprintf (in: _Dest=0x7a2da04, _Format="%c%c" | out: _Dest="23") returned 2 [0195.531] sprintf (in: _Dest=0x7a2da06, _Format="%c%c" | out: _Dest="73") returned 2 [0195.531] sprintf (in: _Dest=0x7a2da08, _Format="%c%c" | out: _Dest="2b") returned 2 [0195.531] sprintf (in: _Dest=0x7a2da0a, _Format="%c%c" | out: _Dest="75") returned 2 [0195.531] sprintf (in: _Dest=0x7a2da0c, _Format="%c%c" | out: _Dest="e0") returned 2 [0195.531] sprintf (in: _Dest=0x7a2da0e, _Format="%c%c" | out: _Dest="78") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da10, _Format="%c%c" | out: _Dest="c9") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da12, _Format="%c%c" | out: _Dest="b5") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da14, _Format="%c%c" | out: _Dest="c0") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da16, _Format="%c%c" | out: _Dest="23") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da18, _Format="%c%c" | out: _Dest="65") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da1a, _Format="%c%c" | out: _Dest="3a") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da1c, _Format="%c%c" | out: _Dest="12") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da1e, _Format="%c%c" | out: _Dest="88") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da20, _Format="%c%c" | out: _Dest="ab") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da22, _Format="%c%c" | out: _Dest="6b") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da24, _Format="%c%c" | out: _Dest="79") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da26, _Format="%c%c" | out: _Dest="b6") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da28, _Format="%c%c" | out: _Dest="39") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da2a, _Format="%c%c" | out: _Dest="0d") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da2c, _Format="%c%c" | out: _Dest="6c") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da2e, _Format="%c%c" | out: _Dest="1a") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da30, _Format="%c%c" | out: _Dest="08") returned 2 [0195.532] sprintf (in: _Dest=0x7a2da32, _Format="%c%c" | out: _Dest="4f") returned 2 [0195.532] RtlInitAnsiString (in: DestinationString=0x94dfd48, SourceString="caa923732b75e078c9b5c023653a1288ab6b79b6390d6c1a084f" | out: DestinationString="caa923732b75e078c9b5c023653a1288ab6b79b6390d6c1a084f") [0195.532] RtlAnsiStringToUnicodeString (in: DestinationString=0x94dfd40, SourceString="caa923732b75e078c9b5c023653a1288ab6b79b6390d6c1a084f", AllocateDestinationString=1 | out: DestinationString="caa923732b75e078c9b5c023653a1288ab6b79b6390d6c1a084f") returned 0x0 [0195.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e670 [0195.533] wcscat (in: _Dest=0x3ec9f40, _Source="caa923732b75e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\caa923732b75e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\caa923732b75e" [0195.533] wcscat (in: _Dest=0x3ec9f40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\caa923732b75e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\caa923732b75e.68814f" [0195.533] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\caa923732b75e.68814f", NtPathName=0x94dfd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\caa923732b75e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea33d0 [0196.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea33d0) returned 1 [0196.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f375e0) returned 1 [0196.012] NtQueryInformationFile (in: FileHandle=0x13bc, IoStatusBlock=0x94dfd10, FileInformation=0x94dfd18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x94dfd10, FileInformation=0x94dfd18) returned 0x0 [0196.012] NtSetInformationFile (FileHandle=0x13bc, IoStatusBlock=0x94dfd10, FileInformation=0x94dfd18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9f40) returned 1 [0196.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0196.144] FlushFileBuffers (hFile=0x13bc) returned 1 [0196.154] CloseHandle (hObject=0x13bc) returned 1 [0196.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbfbe0 [0196.203] wcscpy (in: _Dest=0x7cbfbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\" [0196.203] wcscat (in: _Dest=0x7cbfbe0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\68814F-Readme.txt" [0196.204] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\68814f-readme.txt")) returned 0xffffffff [0196.204] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0196.345] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x94dfd54, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x94dfd54*=0x8b9, lpOverlapped=0x0) returned 1 [0196.347] CloseHandle (hObject=0x1140) returned 1 [0196.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfbe0) returned 1 [0196.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80c60) returned 1 Thread: id = 5831 os_tid = 0x100c [0185.416] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json")) returned 0x2020 [0186.755] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0189.240] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb4c [0191.973] GetFileSizeEx (in: hFile=0xb4c, lpFileSize=0x9abfdbc | out: lpFileSize=0x9abfdbc*=208) returned 1 [0191.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d80 [0191.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0191.973] NtQuerySystemTime (in: CurrentTime=0x9abfd30 | out: CurrentTime=0x9abfd30*=132462177705528000) returned 0x0 [0191.973] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x4c5410e3 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x37803bbc [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x4be434d0 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x5dcd1739 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x1eaedb4b [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x29f44919 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0xcd2dbfc [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x6005d201 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x17faeb5f [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x5a91b9d2 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x3b2ca6d [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x1f5943e3 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x791a9375 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x6623b2c7 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x1da53edf [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x1a6c49a2 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x1d7e96b0 [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x4575fe1a [0191.974] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0xab95c87 [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x57b49479 [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x79004858 [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x1947abc9 [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0xb1a013d [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x363d88cf [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x5408f8fc [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x44fdc5b8 [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x38f5eb9e [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x5b82444f [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x6e3612bf [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x4a8a1700 [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x1e6e70e [0191.975] RtlRandomEx (in: Seed=0x9abfd28 | out: Seed=0x9abfd28) returned 0x6427285b [0191.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0191.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d5f080 [0191.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d62c88 [0191.995] ReadFile (in: hFile=0xb4c, lpBuffer=0x10d5f080, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0x9abfd24, lpOverlapped=0x0 | out: lpBuffer=0x10d5f080*, lpNumberOfBytesRead=0x9abfd24*=0xd0, lpOverlapped=0x0) returned 1 [0191.997] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.997] WriteFile (in: hFile=0xb4c, lpBuffer=0x10d62c88*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x9abfd28, lpOverlapped=0x0 | out: lpBuffer=0x10d62c88*, lpNumberOfBytesWritten=0x9abfd28*=0xd0, lpOverlapped=0x0) returned 1 [0193.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0193.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0193.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4168) returned 1 [0193.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d62c88) returned 1 [0193.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d5f080) returned 1 [0193.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0193.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9bb0) returned 1 [0193.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0193.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9bb0 [0193.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fec0 [0193.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0193.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4168) returned 1 [0193.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37650 [0193.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0193.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0193.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bb0) returned 1 [0193.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0193.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9bb0) returned 1 [0193.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7a384d0 [0193.524] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.524] WriteFile (in: hFile=0xb4c, lpBuffer=0x7a384d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9abfdb0, lpOverlapped=0x0 | out: lpBuffer=0x7a384d0*, lpNumberOfBytesWritten=0x9abfdb0*=0x10c, lpOverlapped=0x0) returned 1 [0194.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e567f8 [0194.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015418 [0194.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39e8 [0194.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39e8) returned 1 [0194.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec39e8 [0194.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40f0 [0194.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bf0 [0194.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bf0) returned 1 [0194.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0194.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e567f8) returned 1 [0194.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d500 [0194.340] sprintf (in: _Dest=0x7a2d500, _Format="%c%c" | out: _Dest="c8") returned 2 [0194.340] sprintf (in: _Dest=0x7a2d502, _Format="%c%c" | out: _Dest="a6") returned 2 [0194.340] sprintf (in: _Dest=0x7a2d504, _Format="%c%c" | out: _Dest="44") returned 2 [0194.340] sprintf (in: _Dest=0x7a2d506, _Format="%c%c" | out: _Dest="9d") returned 2 [0194.340] sprintf (in: _Dest=0x7a2d508, _Format="%c%c" | out: _Dest="ad") returned 2 [0194.340] sprintf (in: _Dest=0x7a2d50a, _Format="%c%c" | out: _Dest="0c") returned 2 [0194.340] sprintf (in: _Dest=0x7a2d50c, _Format="%c%c" | out: _Dest="11") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d50e, _Format="%c%c" | out: _Dest="a1") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d510, _Format="%c%c" | out: _Dest="fc") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d512, _Format="%c%c" | out: _Dest="7c") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d514, _Format="%c%c" | out: _Dest="0f") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d516, _Format="%c%c" | out: _Dest="18") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d518, _Format="%c%c" | out: _Dest="14") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d51a, _Format="%c%c" | out: _Dest="d1") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d51c, _Format="%c%c" | out: _Dest="a1") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d51e, _Format="%c%c" | out: _Dest="53") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d520, _Format="%c%c" | out: _Dest="5c") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d522, _Format="%c%c" | out: _Dest="a6") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d524, _Format="%c%c" | out: _Dest="df") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d526, _Format="%c%c" | out: _Dest="4a") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d528, _Format="%c%c" | out: _Dest="4d") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d52a, _Format="%c%c" | out: _Dest="77") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d52c, _Format="%c%c" | out: _Dest="2d") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d52e, _Format="%c%c" | out: _Dest="3d") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d530, _Format="%c%c" | out: _Dest="2e") returned 2 [0194.341] sprintf (in: _Dest=0x7a2d532, _Format="%c%c" | out: _Dest="53") returned 2 [0194.341] RtlInitAnsiString (in: DestinationString=0x9abfd38, SourceString="c8a6449dad0c11a1fc7c0f1814d1a1535ca6df4a4d772d3d2e53" | out: DestinationString="c8a6449dad0c11a1fc7c0f1814d1a1535ca6df4a4d772d3d2e53") [0194.341] RtlAnsiStringToUnicodeString (in: DestinationString=0x9abfd30, SourceString="c8a6449dad0c11a1fc7c0f1814d1a1535ca6df4a4d772d3d2e53", AllocateDestinationString=1 | out: DestinationString="c8a6449dad0c11a1fc7c0f1814d1a1535ca6df4a4d772d3d2e53") returned 0x0 [0194.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015328 [0194.342] RtlFreeAnsiString (AnsiString="c") [0194.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d500) returned 1 [0194.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39e8) returned 1 [0194.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40f0) returned 1 [0194.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a384d0) returned 1 [0194.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37650) returned 1 [0194.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4168) returned 1 [0194.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37620) returned 1 [0194.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0194.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d80) returned 1 [0194.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f88) returned 1 [0194.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4028) returned 1 [0194.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca420 [0194.343] wcscat (in: _Dest=0x3eca420, _Source="c8a6449dad0c1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\c8a6449dad0c1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\c8a6449dad0c1" [0194.343] wcscat (in: _Dest=0x3eca420, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\c8a6449dad0c1.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\c8a6449dad0c1.68814f" [0194.343] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\c8a6449dad0c1.68814f", NtPathName=0x9abfd28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\c8a6449dad0c1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0194.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2d68 [0194.343] NtSetInformationFile (FileHandle=0xb4c, IoStatusBlock=0x9abfd30, FileInformation=0x3ea2d68, Length=0x13a, FileInformationClass=0xa) returned 0x0 [0194.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0194.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9190) returned 1 [0194.362] NtQueryInformationFile (in: FileHandle=0xb4c, IoStatusBlock=0x9abfd00, FileInformation=0x9abfd08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9abfd00, FileInformation=0x9abfd08) returned 0x0 [0194.362] NtSetInformationFile (FileHandle=0xb4c, IoStatusBlock=0x9abfd00, FileInformation=0x9abfd08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0194.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca420) returned 1 [0194.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0194.367] FlushFileBuffers (hFile=0xb4c) returned 1 [0194.375] CloseHandle (hObject=0xb4c) returned 1 [0194.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b835a0 [0194.378] wcscpy (in: _Dest=0x7b835a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\" [0194.378] wcscat (in: _Dest=0x7b835a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\68814F-Readme.txt" [0194.378] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\68814f-readme.txt")) returned 0xffffffff [0194.378] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb4c [0194.378] WriteFile (in: hFile=0xb4c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9abfd44, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9abfd44*=0x8b9, lpOverlapped=0x0) returned 1 [0194.380] CloseHandle (hObject=0xb4c) returned 1 [0194.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b835a0) returned 1 [0194.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80d88) returned 1 Thread: id = 5832 os_tid = 0x27d0 [0185.417] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json")) returned 0x2020 [0186.756] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0189.240] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x570 [0191.998] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x879f8f4 | out: lpFileSize=0x879f8f4*=221) returned 1 [0191.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0191.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0191.999] NtQuerySystemTime (in: CurrentTime=0x879f868 | out: CurrentTime=0x879f868*=132462177705840000) returned 0x0 [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x476e7d1e [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x1a3a99c9 [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x313bd2ab [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x50557aaa [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x21e898f0 [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x2931bef6 [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x7af7e770 [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x567134de [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x322aa6a2 [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x35c4fdb9 [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x7a769c3a [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x562b02ac [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x25bc5aa9 [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x291139d4 [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x424a61b9 [0191.999] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x341627b7 [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x4b541a39 [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x45a2a542 [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x22f5b3bc [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x1b3e650c [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x7c2aca55 [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x3f472439 [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x69845b91 [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x4a098cc0 [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x27e12f9e [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x2e4835f9 [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x1376d465 [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x6c0a481b [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x1c5de66d [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x10ce14fb [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x3e8af771 [0192.000] RtlRandomEx (in: Seed=0x879f860 | out: Seed=0x879f860) returned 0x44d291d2 [0192.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0192.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d66890 [0192.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d6a498 [0192.022] ReadFile (in: hFile=0x570, lpBuffer=0x10d66890, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x879f85c, lpOverlapped=0x0 | out: lpBuffer=0x10d66890*, lpNumberOfBytesRead=0x879f85c*=0xdd, lpOverlapped=0x0) returned 1 [0192.024] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.025] WriteFile (in: hFile=0x570, lpBuffer=0x10d6a498*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x879f860, lpOverlapped=0x0 | out: lpBuffer=0x10d6a498*, lpNumberOfBytesWritten=0x879f860*=0xdd, lpOverlapped=0x0) returned 1 [0193.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0193.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0193.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0193.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d6a498) returned 1 [0193.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d66890) returned 1 [0193.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0193.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9bf8) returned 1 [0193.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37770 [0193.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9bf8 [0193.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fce0 [0193.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0193.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0193.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376b0 [0193.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0193.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0193.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0193.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0193.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9bf8) returned 1 [0193.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7a385e8 [0193.529] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.529] WriteFile (in: hFile=0x570, lpBuffer=0x7a385e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x879f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7a385e8*, lpNumberOfBytesWritten=0x879f8e8*=0x10c, lpOverlapped=0x0) returned 1 [0194.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e567f8 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015418 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0194.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4028) returned 1 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4028 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f88 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d80 [0194.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d80) returned 1 [0194.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0194.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e567f8) returned 1 [0194.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d500 [0194.357] sprintf (in: _Dest=0x7a2d500, _Format="%c%c" | out: _Dest="c4") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d502, _Format="%c%c" | out: _Dest="1d") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d504, _Format="%c%c" | out: _Dest="6b") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d506, _Format="%c%c" | out: _Dest="6c") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d508, _Format="%c%c" | out: _Dest="0c") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d50a, _Format="%c%c" | out: _Dest="d6") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d50c, _Format="%c%c" | out: _Dest="82") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d50e, _Format="%c%c" | out: _Dest="39") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d510, _Format="%c%c" | out: _Dest="0b") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d512, _Format="%c%c" | out: _Dest="88") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d514, _Format="%c%c" | out: _Dest="57") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d516, _Format="%c%c" | out: _Dest="e6") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d518, _Format="%c%c" | out: _Dest="ee") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d51a, _Format="%c%c" | out: _Dest="c0") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d51c, _Format="%c%c" | out: _Dest="3f") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d51e, _Format="%c%c" | out: _Dest="20") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d520, _Format="%c%c" | out: _Dest="97") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d522, _Format="%c%c" | out: _Dest="db") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d524, _Format="%c%c" | out: _Dest="39") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d526, _Format="%c%c" | out: _Dest="10") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d528, _Format="%c%c" | out: _Dest="93") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d52a, _Format="%c%c" | out: _Dest="0c") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d52c, _Format="%c%c" | out: _Dest="87") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d52e, _Format="%c%c" | out: _Dest="83") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d530, _Format="%c%c" | out: _Dest="ed") returned 2 [0194.357] sprintf (in: _Dest=0x7a2d532, _Format="%c%c" | out: _Dest="3d") returned 2 [0194.357] RtlInitAnsiString (in: DestinationString=0x879f870, SourceString="c41d6b6c0cd682390b8857e6eec03f2097db3910930c8783ed3d" | out: DestinationString="c41d6b6c0cd682390b8857e6eec03f2097db3910930c8783ed3d") [0194.357] RtlAnsiStringToUnicodeString (in: DestinationString=0x879f868, SourceString="c41d6b6c0cd682390b8857e6eec03f2097db3910930c8783ed3d", AllocateDestinationString=1 | out: DestinationString="c41d6b6c0cd682390b8857e6eec03f2097db3910930c8783ed3d") returned 0x0 [0194.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f8a8 [0194.358] RtlFreeAnsiString (AnsiString="c") [0194.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d500) returned 1 [0194.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4028) returned 1 [0194.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f88) returned 1 [0194.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a385e8) returned 1 [0194.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a376b0) returned 1 [0194.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0194.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37770) returned 1 [0194.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0194.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fb0) returned 1 [0194.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40a0) returned 1 [0194.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40c8) returned 1 [0194.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca1b0 [0194.359] wcscat (in: _Dest=0x3eca1b0, _Source="c41d6b6c0cd68" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\c41d6b6c0cd68") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\c41d6b6c0cd68" [0194.359] wcscat (in: _Dest=0x3eca1b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\c41d6b6c0cd68.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\c41d6b6c0cd68.68814f" [0194.359] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\c41d6b6c0cd68.68814f", NtPathName=0x879f860, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\c41d6b6c0cd68.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0194.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2eb0 [0194.359] NtSetInformationFile (FileHandle=0x570, IoStatusBlock=0x879f868, FileInformation=0x3ea2eb0, Length=0x13a, FileInformationClass=0xa) returned 0x0 [0194.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0194.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8050) returned 1 [0194.365] NtQueryInformationFile (in: FileHandle=0x570, IoStatusBlock=0x879f838, FileInformation=0x879f840, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x879f838, FileInformation=0x879f840) returned 0x0 [0194.365] NtSetInformationFile (FileHandle=0x570, IoStatusBlock=0x879f838, FileInformation=0x879f840, Length=0x28, FileInformationClass=0x4) returned 0x0 [0194.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca1b0) returned 1 [0194.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0194.373] FlushFileBuffers (hFile=0x570) returned 1 [0194.382] CloseHandle (hObject=0x570) returned 1 [0194.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b80d88 [0194.384] wcscpy (in: _Dest=0x7b80d88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\" [0194.384] wcscat (in: _Dest=0x7b80d88, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\68814F-Readme.txt" [0194.384] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\68814f-readme.txt")) returned 0xffffffff [0194.384] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570 [0194.389] WriteFile (in: hFile=0x570, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x879f87c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x879f87c*=0x8b9, lpOverlapped=0x0) returned 1 [0194.391] CloseHandle (hObject=0x570) returned 1 [0194.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80d88) returned 1 [0194.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80eb0) returned 1 Thread: id = 5833 os_tid = 0x27d4 [0185.417] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json")) returned 0x2020 [0186.756] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0189.241] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfe8 [0192.025] GetFileSizeEx (in: hFile=0xfe8, lpFileSize=0x62af8bc | out: lpFileSize=0x62af8bc*=236) returned 1 [0192.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0192.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0192.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5568 [0192.026] NtQuerySystemTime (in: CurrentTime=0x62af830 | out: CurrentTime=0x62af830*=132462177705996000) returned 0x0 [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0xe6f6686 [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x4ee653f3 [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x5da00678 [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x6abf8b46 [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x3ade6f0c [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x75d630b0 [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x2462d25c [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x2283295b [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x6746edce [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x7a3b339d [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x5dc3c0c7 [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x5ade56bd [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x34465fc5 [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x4032ae46 [0192.026] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x7e8834c8 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x79cd34b3 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x2fac612e [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x22eecca5 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x6bc5f443 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x71aa3845 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x453d4d0f [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x7c21a178 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x512e418a [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x35271486 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x649c5191 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x36f09353 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x14b771b2 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x2216cfc3 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x25e12a81 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x1793806a [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x66d7a637 [0192.027] RtlRandomEx (in: Seed=0x62af828 | out: Seed=0x62af828) returned 0x6f52be1f [0192.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0192.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d6e0a0 [0192.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d71ca8 [0192.040] ReadFile (in: hFile=0xfe8, lpBuffer=0x10d6e0a0, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0x62af824, lpOverlapped=0x0 | out: lpBuffer=0x10d6e0a0*, lpNumberOfBytesRead=0x62af824*=0xec, lpOverlapped=0x0) returned 1 [0192.042] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.043] WriteFile (in: hFile=0xfe8, lpBuffer=0x10d71ca8*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x62af828, lpOverlapped=0x0 | out: lpBuffer=0x10d71ca8*, lpNumberOfBytesWritten=0x62af828*=0xec, lpOverlapped=0x0) returned 1 [0193.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0193.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0193.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0193.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d71ca8) returned 1 [0193.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d6e0a0) returned 1 [0193.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0193.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9c40) returned 1 [0193.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0193.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9c40 [0193.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f8a8 [0193.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0193.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0193.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0193.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0193.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0193.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0193.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0193.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9c40) returned 1 [0193.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7a38930 [0193.534] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.534] WriteFile (in: hFile=0xfe8, lpBuffer=0x7a38930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x62af8b0, lpOverlapped=0x0 | out: lpBuffer=0x7a38930*, lpNumberOfBytesWritten=0x62af8b0*=0x10c, lpOverlapped=0x0) returned 1 [0194.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40f90 [0194.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fce0 [0194.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0f8 [0194.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0f8) returned 1 [0194.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca0f8 [0194.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0194.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0194.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0194.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0194.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40f90) returned 1 [0194.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d500 [0194.439] sprintf (in: _Dest=0x7a2d500, _Format="%c%c" | out: _Dest="a9") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d502, _Format="%c%c" | out: _Dest="bc") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d504, _Format="%c%c" | out: _Dest="78") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d506, _Format="%c%c" | out: _Dest="1a") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d508, _Format="%c%c" | out: _Dest="f0") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d50a, _Format="%c%c" | out: _Dest="75") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d50c, _Format="%c%c" | out: _Dest="24") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d50e, _Format="%c%c" | out: _Dest="71") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d510, _Format="%c%c" | out: _Dest="97") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d512, _Format="%c%c" | out: _Dest="9c") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d514, _Format="%c%c" | out: _Dest="a7") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d516, _Format="%c%c" | out: _Dest="0c") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d518, _Format="%c%c" | out: _Dest="1c") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d51a, _Format="%c%c" | out: _Dest="bf") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d51c, _Format="%c%c" | out: _Dest="26") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d51e, _Format="%c%c" | out: _Dest="d9") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d520, _Format="%c%c" | out: _Dest="58") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d522, _Format="%c%c" | out: _Dest="0c") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d524, _Format="%c%c" | out: _Dest="2d") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d526, _Format="%c%c" | out: _Dest="4f") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d528, _Format="%c%c" | out: _Dest="43") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d52a, _Format="%c%c" | out: _Dest="c0") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d52c, _Format="%c%c" | out: _Dest="4e") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d52e, _Format="%c%c" | out: _Dest="12") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d530, _Format="%c%c" | out: _Dest="58") returned 2 [0194.440] sprintf (in: _Dest=0x7a2d532, _Format="%c%c" | out: _Dest="bd") returned 2 [0194.440] RtlInitAnsiString (in: DestinationString=0x62af838, SourceString="a9bc781af0752471979ca70c1cbf26d9580c2d4f43c04e1258bd" | out: DestinationString="a9bc781af0752471979ca70c1cbf26d9580c2d4f43c04e1258bd") [0194.440] RtlAnsiStringToUnicodeString (in: DestinationString=0x62af830, SourceString="a9bc781af0752471979ca70c1cbf26d9580c2d4f43c04e1258bd", AllocateDestinationString=1 | out: DestinationString="a9bc781af0752471979ca70c1cbf26d9580c2d4f43c04e1258bd") returned 0x0 [0194.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f8a8 [0194.441] RtlFreeAnsiString (AnsiString="a") [0194.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d500) returned 1 [0194.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0f8) returned 1 [0194.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0194.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38930) returned 1 [0194.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0194.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0194.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0194.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0194.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4050) returned 1 [0194.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e20) returned 1 [0194.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3df8) returned 1 [0194.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9a60 [0194.442] wcscat (in: _Dest=0x3ec9a60, _Source="a9bc781af0752" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\a9bc781af0752") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\a9bc781af0752" [0194.442] wcscat (in: _Dest=0x3ec9a60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\a9bc781af0752.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\a9bc781af0752.68814f" [0194.442] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\a9bc781af0752.68814f", NtPathName=0x62af828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\a9bc781af0752.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0194.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2eb0 [0194.442] NtSetInformationFile (FileHandle=0xfe8, IoStatusBlock=0x62af830, FileInformation=0x3ea2eb0, Length=0x13a, FileInformationClass=0xa) returned 0x0 [0194.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0194.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39410) returned 1 [0194.444] NtQueryInformationFile (in: FileHandle=0xfe8, IoStatusBlock=0x62af800, FileInformation=0x62af808, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x62af800, FileInformation=0x62af808) returned 0x0 [0194.444] NtSetInformationFile (FileHandle=0xfe8, IoStatusBlock=0x62af800, FileInformation=0x62af808, Length=0x28, FileInformationClass=0x4) returned 0x0 [0194.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 [0194.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0194.446] FlushFileBuffers (hFile=0xfe8) returned 1 [0194.448] CloseHandle (hObject=0xfe8) returned 1 [0194.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d553a0 [0194.450] wcscpy (in: _Dest=0x3d553a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\" [0194.450] wcscat (in: _Dest=0x3d553a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\68814F-Readme.txt" [0194.450] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\68814f-readme.txt")) returned 0xffffffff [0194.450] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfe8 [0194.451] WriteFile (in: hFile=0xfe8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x62af844, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x62af844*=0x8b9, lpOverlapped=0x0) returned 1 [0194.453] CloseHandle (hObject=0xfe8) returned 1 [0194.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0194.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80fd8) returned 1 Thread: id = 5834 os_tid = 0x27dc [0185.418] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json")) returned 0x2020 [0186.757] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0189.241] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c48 [0191.629] GetFileSizeEx (in: hFile=0x1c48, lpFileSize=0x9f7fbe4 | out: lpFileSize=0x9f7fbe4*=230) returned 1 [0191.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0191.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30d8 [0191.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0191.629] NtQuerySystemTime (in: CurrentTime=0x9f7fb58 | out: CurrentTime=0x9f7fb58*=132462177702096000) returned 0x0 [0191.629] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x559eb7e5 [0191.629] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x45d372f7 [0191.629] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x37ce3e13 [0191.629] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x718a7b9f [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x1fad2444 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x4aabcd69 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x5704b1d2 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x1a656409 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x61ab7ef3 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x2e005b7f [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0xf9463bc [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x40b61722 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x5232494f [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x43f990cf [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x36eae5a8 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x3dbbcfb8 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x541e8e31 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x293b06cc [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x7e647cf2 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x49c8c5b8 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x5843f064 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x54052427 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x43950e46 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x498defc1 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x394de83e [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0xc766187 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x8e57765 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x68529fa2 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x71b8daf4 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x254d319e [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x7ef16ca1 [0191.630] RtlRandomEx (in: Seed=0x9f7fb50 | out: Seed=0x9f7fb50) returned 0x298d8101 [0191.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0191.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7acf4e8 [0191.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b3a320 [0191.651] ReadFile (in: hFile=0x1c48, lpBuffer=0x7acf4e8, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0x9f7fb4c, lpOverlapped=0x0 | out: lpBuffer=0x7acf4e8*, lpNumberOfBytesRead=0x9f7fb4c*=0xe6, lpOverlapped=0x0) returned 1 [0191.652] SetFilePointerEx (in: hFile=0x1c48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.652] WriteFile (in: hFile=0x1c48, lpBuffer=0x7b3a320*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x9f7fb50, lpOverlapped=0x0 | out: lpBuffer=0x7b3a320*, lpNumberOfBytesWritten=0x9f7fb50*=0xe6, lpOverlapped=0x0) returned 1 [0193.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0193.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0193.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0193.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3a320) returned 1 [0193.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acf4e8) returned 1 [0193.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0193.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a10) returned 1 [0193.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a377a0 [0193.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24a10 [0193.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0193.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0193.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0193.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37710 [0193.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0193.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0193.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0193.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0193.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a10) returned 1 [0193.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7a38fc0 [0193.528] SetFilePointerEx (in: hFile=0x1c48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.528] WriteFile (in: hFile=0x1c48, lpBuffer=0x7a38fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9f7fbd8, lpOverlapped=0x0 | out: lpBuffer=0x7a38fc0*, lpNumberOfBytesWritten=0x9f7fbd8*=0x10c, lpOverlapped=0x0) returned 1 [0194.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e497b8 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f8a8 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40c8 [0194.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40c8) returned 1 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec40c8 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0194.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fb0) returned 1 [0194.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0194.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e497b8) returned 1 [0194.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d500 [0194.394] sprintf (in: _Dest=0x7a2d500, _Format="%c%c" | out: _Dest="c0") returned 2 [0194.394] sprintf (in: _Dest=0x7a2d502, _Format="%c%c" | out: _Dest="6c") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d504, _Format="%c%c" | out: _Dest="48") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d506, _Format="%c%c" | out: _Dest="61") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d508, _Format="%c%c" | out: _Dest="2a") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d50a, _Format="%c%c" | out: _Dest="ef") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d50c, _Format="%c%c" | out: _Dest="8f") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d50e, _Format="%c%c" | out: _Dest="a4") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d510, _Format="%c%c" | out: _Dest="59") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d512, _Format="%c%c" | out: _Dest="2e") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d514, _Format="%c%c" | out: _Dest="a6") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d516, _Format="%c%c" | out: _Dest="6c") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d518, _Format="%c%c" | out: _Dest="0b") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d51a, _Format="%c%c" | out: _Dest="4c") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d51c, _Format="%c%c" | out: _Dest="d3") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d51e, _Format="%c%c" | out: _Dest="22") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d520, _Format="%c%c" | out: _Dest="9f") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d522, _Format="%c%c" | out: _Dest="b8") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d524, _Format="%c%c" | out: _Dest="58") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d526, _Format="%c%c" | out: _Dest="21") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d528, _Format="%c%c" | out: _Dest="9c") returned 2 [0194.395] sprintf (in: _Dest=0x7a2d52a, _Format="%c%c" | out: _Dest="08") returned 2 [0194.396] sprintf (in: _Dest=0x7a2d52c, _Format="%c%c" | out: _Dest="f5") returned 2 [0194.396] sprintf (in: _Dest=0x7a2d52e, _Format="%c%c" | out: _Dest="09") returned 2 [0194.396] sprintf (in: _Dest=0x7a2d530, _Format="%c%c" | out: _Dest="d9") returned 2 [0194.396] sprintf (in: _Dest=0x7a2d532, _Format="%c%c" | out: _Dest="ef") returned 2 [0194.396] RtlInitAnsiString (in: DestinationString=0x9f7fb60, SourceString="c06c48612aef8fa4592ea66c0b4cd3229fb858219c08f509d9ef" | out: DestinationString="c06c48612aef8fa4592ea66c0b4cd3229fb858219c08f509d9ef") [0194.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x9f7fb58, SourceString="c06c48612aef8fa4592ea66c0b4cd3229fb858219c08f509d9ef", AllocateDestinationString=1 | out: DestinationString="c06c48612aef8fa4592ea66c0b4cd3229fb858219c08f509d9ef") returned 0x0 [0194.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fce0 [0194.396] RtlFreeAnsiString (AnsiString="c") [0194.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d500) returned 1 [0194.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40c8) returned 1 [0194.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40a0) returned 1 [0194.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38fc0) returned 1 [0194.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37710) returned 1 [0194.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0194.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a377a0) returned 1 [0194.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bb0) returned 1 [0194.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30d8) returned 1 [0194.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0194.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38d0) returned 1 [0194.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca1b0 [0194.397] wcscat (in: _Dest=0x3eca1b0, _Source="c06c48612aef8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\c06c48612aef8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\c06c48612aef8" [0194.397] wcscat (in: _Dest=0x3eca1b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\c06c48612aef8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\c06c48612aef8.68814f" [0194.397] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\c06c48612aef8.68814f", NtPathName=0x9f7fb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\c06c48612aef8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0194.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2eb0 [0194.397] NtSetInformationFile (FileHandle=0x1c48, IoStatusBlock=0x9f7fb58, FileInformation=0x3ea2eb0, Length=0x13a, FileInformationClass=0xa) returned 0x0 [0194.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0194.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceb720) returned 1 [0194.400] NtQueryInformationFile (in: FileHandle=0x1c48, IoStatusBlock=0x9f7fb28, FileInformation=0x9f7fb30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9f7fb28, FileInformation=0x9f7fb30) returned 0x0 [0194.400] NtSetInformationFile (FileHandle=0x1c48, IoStatusBlock=0x9f7fb28, FileInformation=0x9f7fb30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0194.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca1b0) returned 1 [0194.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0194.402] FlushFileBuffers (hFile=0x1c48) returned 1 [0194.404] CloseHandle (hObject=0x1c48) returned 1 [0194.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b80eb0 [0194.410] wcscpy (in: _Dest=0x7b80eb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\" [0194.410] wcscat (in: _Dest=0x7b80eb0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\68814F-Readme.txt" [0194.410] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\68814f-readme.txt")) returned 0xffffffff [0194.411] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c48 [0194.411] WriteFile (in: hFile=0x1c48, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9f7fb6c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9f7fb6c*=0x8b9, lpOverlapped=0x0) returned 1 [0194.413] CloseHandle (hObject=0x1c48) returned 1 [0194.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80eb0) returned 1 [0194.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81100) returned 1 Thread: id = 5835 os_tid = 0x1010 [0185.418] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json")) returned 0x2020 [0186.757] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0189.241] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d98 [0191.783] GetFileSizeEx (in: hFile=0x1d98, lpFileSize=0x9cbfbdc | out: lpFileSize=0x9cbfbdc*=228) returned 1 [0191.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0191.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bf0 [0191.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4078 [0191.783] NtQuerySystemTime (in: CurrentTime=0x9cbfb50 | out: CurrentTime=0x9cbfb50*=132462177703656000) returned 0x0 [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x17a374fa [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x8a6153f [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x4ac539fb [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x5ed08819 [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x30d2c811 [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x40afb525 [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x4c28fc4c [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x219d6665 [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x75078073 [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x786bb349 [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x772e2783 [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x402d8876 [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0xa095b8f [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x4b578fb4 [0191.783] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x420a2ae [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x1d3dee03 [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x1721ea5c [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x2b46b1bd [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x86d6491 [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x3e4af44 [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x4b0c50ec [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x374cd955 [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x21b2e978 [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x6fa3032d [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x290c42 [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x6af96915 [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x11ca962a [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x3d044c1b [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x4578f79d [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x1a27632a [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x2dcbd3f8 [0191.784] RtlRandomEx (in: Seed=0x9cbfb48 | out: Seed=0x9cbfb48) returned 0x514c5592 [0191.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0191.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b45738 [0191.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b49340 [0191.800] ReadFile (in: hFile=0x1d98, lpBuffer=0x7b45738, nNumberOfBytesToRead=0xe4, lpNumberOfBytesRead=0x9cbfb44, lpOverlapped=0x0 | out: lpBuffer=0x7b45738*, lpNumberOfBytesRead=0x9cbfb44*=0xe4, lpOverlapped=0x0) returned 1 [0191.802] SetFilePointerEx (in: hFile=0x1d98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.802] WriteFile (in: hFile=0x1d98, lpBuffer=0x7b49340*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x9cbfb48, lpOverlapped=0x0 | out: lpBuffer=0x7b49340*, lpNumberOfBytesWritten=0x9cbfb48*=0xe4, lpOverlapped=0x0) returned 1 [0194.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0194.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0194.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0194.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b49340) returned 1 [0194.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b45738) returned 1 [0194.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0194.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9928) returned 1 [0194.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0194.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9928 [0194.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015418 [0194.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0194.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0194.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37590 [0194.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0194.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0194.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0194.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0194.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9928) returned 1 [0194.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7b7d5b8 [0194.286] SetFilePointerEx (in: hFile=0x1d98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.286] WriteFile (in: hFile=0x1d98, lpBuffer=0x7b7d5b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9cbfbd0, lpOverlapped=0x0 | out: lpBuffer=0x7b7d5b8*, lpNumberOfBytesWritten=0x9cbfbd0*=0x10c, lpOverlapped=0x0) returned 1 [0194.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9928 [0194.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015328 [0194.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0194.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0194.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2840 [0194.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0194.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0194.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0194.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0194.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9928) returned 1 [0194.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d500 [0194.297] sprintf (in: _Dest=0x7a2d500, _Format="%c%c" | out: _Dest="06") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d502, _Format="%c%c" | out: _Dest="d1") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d504, _Format="%c%c" | out: _Dest="0d") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d506, _Format="%c%c" | out: _Dest="a4") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d508, _Format="%c%c" | out: _Dest="fb") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d50a, _Format="%c%c" | out: _Dest="fd") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d50c, _Format="%c%c" | out: _Dest="e3") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d50e, _Format="%c%c" | out: _Dest="13") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d510, _Format="%c%c" | out: _Dest="69") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d512, _Format="%c%c" | out: _Dest="91") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d514, _Format="%c%c" | out: _Dest="44") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d516, _Format="%c%c" | out: _Dest="f9") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d518, _Format="%c%c" | out: _Dest="10") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d51a, _Format="%c%c" | out: _Dest="4d") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d51c, _Format="%c%c" | out: _Dest="8a") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d51e, _Format="%c%c" | out: _Dest="17") returned 2 [0194.297] sprintf (in: _Dest=0x7a2d520, _Format="%c%c" | out: _Dest="25") returned 2 [0194.298] sprintf (in: _Dest=0x7a2d522, _Format="%c%c" | out: _Dest="e9") returned 2 [0194.298] sprintf (in: _Dest=0x7a2d524, _Format="%c%c" | out: _Dest="f4") returned 2 [0194.298] sprintf (in: _Dest=0x7a2d526, _Format="%c%c" | out: _Dest="50") returned 2 [0194.298] sprintf (in: _Dest=0x7a2d528, _Format="%c%c" | out: _Dest="66") returned 2 [0194.298] sprintf (in: _Dest=0x7a2d52a, _Format="%c%c" | out: _Dest="e6") returned 2 [0194.298] sprintf (in: _Dest=0x7a2d52c, _Format="%c%c" | out: _Dest="45") returned 2 [0194.298] sprintf (in: _Dest=0x7a2d52e, _Format="%c%c" | out: _Dest="2a") returned 2 [0194.298] sprintf (in: _Dest=0x7a2d530, _Format="%c%c" | out: _Dest="14") returned 2 [0194.298] sprintf (in: _Dest=0x7a2d532, _Format="%c%c" | out: _Dest="65") returned 2 [0194.298] RtlInitAnsiString (in: DestinationString=0x9cbfb58, SourceString="06d10da4fbfde313699144f9104d8a1725e9f45066e6452a1465" | out: DestinationString="06d10da4fbfde313699144f9104d8a1725e9f45066e6452a1465") [0194.298] RtlAnsiStringToUnicodeString (in: DestinationString=0x9cbfb50, SourceString="06d10da4fbfde313699144f9104d8a1725e9f45066e6452a1465", AllocateDestinationString=1 | out: DestinationString="06d10da4fbfde313699144f9104d8a1725e9f45066e6452a1465") returned 0x0 [0194.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015418 [0194.298] RtlFreeAnsiString (AnsiString="0") [0194.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d500) returned 1 [0194.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0194.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0194.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d5b8) returned 1 [0194.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37590) returned 1 [0194.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0194.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0194.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0194.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bf0) returned 1 [0194.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40f0) returned 1 [0194.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39e8) returned 1 [0194.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca420 [0194.299] wcscat (in: _Dest=0x3eca420, _Source="06d10da4fbfde" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\06d10da4fbfde") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\06d10da4fbfde" [0194.299] wcscat (in: _Dest=0x3eca420, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\06d10da4fbfde.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\06d10da4fbfde.68814f" [0194.299] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\06d10da4fbfde.68814f", NtPathName=0x9cbfb48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\06d10da4fbfde.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0194.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2d68 [0194.299] NtSetInformationFile (FileHandle=0x1d98, IoStatusBlock=0x9cbfb50, FileInformation=0x3ea2d68, Length=0x13a, FileInformationClass=0xa) returned 0x0 [0194.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0194.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4a260) returned 1 [0194.302] NtQueryInformationFile (in: FileHandle=0x1d98, IoStatusBlock=0x9cbfb20, FileInformation=0x9cbfb28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9cbfb20, FileInformation=0x9cbfb28) returned 0x0 [0194.302] NtSetInformationFile (FileHandle=0x1d98, IoStatusBlock=0x9cbfb20, FileInformation=0x9cbfb28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0194.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca420) returned 1 [0194.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0194.303] FlushFileBuffers (hFile=0x1d98) returned 1 [0194.317] CloseHandle (hObject=0x1d98) returned 1 [0194.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b837f0 [0194.335] wcscpy (in: _Dest=0x7b837f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\" [0194.335] wcscat (in: _Dest=0x7b837f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\68814F-Readme.txt" [0194.335] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\68814f-readme.txt")) returned 0xffffffff [0194.335] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c48 [0194.416] WriteFile (in: hFile=0x1c48, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9cbfb64, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9cbfb64*=0x8b9, lpOverlapped=0x0) returned 1 [0194.418] CloseHandle (hObject=0x1c48) returned 1 [0194.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b837f0) returned 1 [0194.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81228) returned 1 Thread: id = 5836 os_tid = 0x1014 [0185.418] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json")) returned 0x2020 [0187.059] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0187.962] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ab8 [0187.962] GetFileSizeEx (in: hFile=0x1ab8, lpFileSize=0x408fcbc | out: lpFileSize=0x408fcbc*=224) returned 1 [0187.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0187.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0187.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0187.963] NtQuerySystemTime (in: CurrentTime=0x408fc30 | out: CurrentTime=0x408fc30*=132462177665436000) returned 0x0 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x4c91c0b2 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x258e6c9a [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x52983bb2 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x1851452c [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x33077b9 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x18a85faf [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x321d92d3 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x2c27b1b2 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x409f3217 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x5bd2d468 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x79348f2e [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x5fa0c7f3 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x7924e6a5 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x7c304804 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x58ff5825 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x3476053c [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x3531a539 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x453b0b8 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x3f0ce1b3 [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x28fd2bce [0187.963] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x275e383e [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x476cbf1f [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x6cf98bc3 [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x52e159ab [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x4c4dab27 [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x65358139 [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x5da3526d [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x7bbf0380 [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x3e8ba363 [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x606b751b [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x2ac7977e [0187.964] RtlRandomEx (in: Seed=0x408fc28 | out: Seed=0x408fc28) returned 0x1be07df5 [0187.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0187.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d88818 [0187.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d8c420 [0187.978] ReadFile (in: hFile=0x1ab8, lpBuffer=0x7d88818, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0x408fc24, lpOverlapped=0x0 | out: lpBuffer=0x7d88818*, lpNumberOfBytesRead=0x408fc24*=0xe0, lpOverlapped=0x0) returned 1 [0187.980] SetFilePointerEx (in: hFile=0x1ab8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.980] WriteFile (in: hFile=0x1ab8, lpBuffer=0x7d8c420*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x408fc28, lpOverlapped=0x0 | out: lpBuffer=0x7d8c420*, lpNumberOfBytesWritten=0x408fc28*=0xe0, lpOverlapped=0x0) returned 1 [0189.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0189.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0189.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0189.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d8c420) returned 1 [0189.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d88818) returned 1 [0189.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0189.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41890) returned 1 [0189.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37890 [0189.760] SetFilePointerEx (in: hFile=0x1ab8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.760] WriteFile (in: hFile=0x1ab8, lpBuffer=0x7b7cac8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x408fcb0, lpOverlapped=0x0 | out: lpBuffer=0x7b7cac8*, lpNumberOfBytesWritten=0x408fcb0*=0x10c, lpOverlapped=0x0) returned 1 [0192.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be328 [0192.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e940 [0192.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb490 [0192.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb490) returned 1 [0192.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3edb490 [0192.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd830 [0192.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede0a0 [0192.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede0a0) returned 1 [0192.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0192.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be328) returned 1 [0192.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.377] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="91") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="cc") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="57") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="91") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="e5") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="5e") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="f8") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="93") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="18") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="c5") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="5a") returned 2 [0192.377] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="c9") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="9b") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="31") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="37") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="c1") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="62") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="6f") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="16") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="03") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="5e") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="2c") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="ad") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="97") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="9c") returned 2 [0192.378] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="62") returned 2 [0192.378] RtlInitAnsiString (in: DestinationString=0x408fc38, SourceString="91cc5791e55ef89318c55ac99b3137c1626f16035e2cad979c62" | out: DestinationString="91cc5791e55ef89318c55ac99b3137c1626f16035e2cad979c62") [0192.378] RtlAnsiStringToUnicodeString (in: DestinationString=0x408fc30, SourceString="91cc5791e55ef89318c55ac99b3137c1626f16035e2cad979c62", AllocateDestinationString=1 | out: DestinationString="91cc5791e55ef89318c55ac99b3137c1626f16035e2cad979c62") returned 0x0 [0192.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f1a0 [0192.379] wcscat (in: _Dest=0x3ec9928, _Source="91cc5791e55ef" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\91cc5791e55ef") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\91cc5791e55ef" [0192.379] wcscat (in: _Dest=0x3ec9928, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\91cc5791e55ef.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\91cc5791e55ef.68814f" [0192.379] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\91cc5791e55ef.68814f", NtPathName=0x408fc28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\91cc5791e55ef.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3518 [0192.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3518) returned 1 [0192.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c98d10) returned 1 [0192.617] NtQueryInformationFile (in: FileHandle=0x1ab8, IoStatusBlock=0x408fc00, FileInformation=0x408fc08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x408fc00, FileInformation=0x408fc08) returned 0x0 [0192.617] NtSetInformationFile (FileHandle=0x1ab8, IoStatusBlock=0x408fc00, FileInformation=0x408fc08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9928) returned 1 [0192.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0192.755] FlushFileBuffers (hFile=0x1ab8) returned 1 [0192.761] CloseHandle (hObject=0x1ab8) returned 1 [0192.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cb04c0 [0192.824] wcscpy (in: _Dest=0x7cb04c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\" [0192.824] wcscat (in: _Dest=0x7cb04c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\68814F-Readme.txt" [0192.825] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\68814f-readme.txt")) returned 0xffffffff [0192.825] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0193.143] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x408fc44, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x408fc44*=0x8b9, lpOverlapped=0x0) returned 1 [0193.145] CloseHandle (hObject=0x1518) returned 1 [0193.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb04c0) returned 1 [0193.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81350) returned 1 Thread: id = 5837 os_tid = 0x1018 [0185.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css")) returned 0x20 [0191.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0191.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.879] GetLastError () returned 0x5 [0192.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0192.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b9d8) returned 1 Thread: id = 5838 os_tid = 0x24d4 [0185.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6fe0 [0185.420] wcscpy (in: _Dest=0x2ff6fe0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0185.420] wcscat (in: _Dest=0x2ff6fe0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\" [0185.420] wcscat (in: _Dest=0x2ff6fe0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*" [0185.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0185.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa50 [0191.377] wcscmp (_String1=".", _String2=".") returned 0 [0191.377] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.377] wcscmp (_String1="..", _String2=".") returned 1 [0191.377] wcscmp (_String1="..", _String2="..") returned 0 [0191.377] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0191.377] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0191.377] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0191.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d578e8 [0191.377] wcscpy (in: _Dest=0x3d578e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0191.378] wcscat (in: _Dest=0x3d578e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\" [0191.378] wcscat (in: _Dest=0x3d578e8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" [0199.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d578e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028 [0199.217] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0199.217] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0199.217] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0199.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d57438 [0199.217] wcscpy (in: _Dest=0x3d57438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana" [0199.217] wcscat (in: _Dest=0x3d57438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\" [0199.217] wcscat (in: _Dest=0x3d57438, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" [0199.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab8 [0199.219] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0199.219] FindClose (in: hFindFile=0x3dcfa50 | out: hFindFile=0x3dcfa50) returned 1 [0199.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0199.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6fe0) returned 1 [0199.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c0b8) returned 1 Thread: id = 5839 os_tid = 0x1024 [0185.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css")) returned 0x20 [0194.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0194.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.856] GetLastError () returned 0x5 [0194.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0194.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7430) returned 1 Thread: id = 5840 os_tid = 0x1028 [0185.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x35b7c8 [0185.421] wcscpy (in: _Dest=0x35b7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0185.421] wcscat (in: _Dest=0x35b7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0185.421] wcscat (in: _Dest=0x35b7c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*" [0185.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55cb8 [0185.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f79a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d100 [0190.978] wcscmp (_String1=".", _String2=".") returned 0 [0190.978] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f79a10, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.978] wcscmp (_String1="..", _String2=".") returned 1 [0190.978] wcscmp (_String1="..", _String2="..") returned 0 [0190.978] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f79a10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0190.978] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0190.978] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0190.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d57690 [0190.979] wcscpy (in: _Dest=0x3d57690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0190.979] wcscat (in: _Dest=0x3d57690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0190.979] wcscat (in: _Dest=0x3d57690, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" [0201.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e8 [0201.556] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dffa600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460aa510, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5dffa600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0201.557] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0201.557] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0201.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56628 [0201.557] wcscpy (in: _Dest=0x3d56628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0201.557] wcscat (in: _Dest=0x3d56628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0201.557] wcscat (in: _Dest=0x3d56628, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" [0201.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408 [0201.558] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0201.558] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0201.558] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0201.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d57cd0 [0201.558] wcscpy (in: _Dest=0x3d57cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0201.558] wcscat (in: _Dest=0x3d57cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0201.558] wcscat (in: _Dest=0x3d57cd0, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" [0201.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04 [0201.559] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.559] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.559] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d575c8 [0201.560] wcscpy (in: _Dest=0x3d575c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue" [0201.560] wcscat (in: _Dest=0x3d575c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\" [0201.560] wcscat (in: _Dest=0x3d575c8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" [0201.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d575c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04 [0201.561] FindNextFileW (in: hFindFile=0x7a2d100, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.561] FindClose (in: hFindFile=0x7a2d100 | out: hFindFile=0x7a2d100) returned 1 [0201.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55cb8) returned 1 [0201.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b7c8) returned 1 [0201.562] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bdf8) returned 1 Thread: id = 5841 os_tid = 0x27f4 [0185.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css")) returned 0x20 [0191.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0191.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.874] GetLastError () returned 0x5 [0192.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0192.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7ef8) returned 1 Thread: id = 5842 os_tid = 0x27f8 [0185.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css")) returned 0x20 [0194.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", dwFileAttributes=0x20) returned 0 [0194.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.855] GetLastError () returned 0x5 [0194.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", dwFileAttributes=0x20) returned 0 [0194.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c378) returned 1 Thread: id = 5843 os_tid = 0x102c [0185.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35c168 [0185.422] wcscpy (in: _Dest=0x35c168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0185.422] wcscat (in: _Dest=0x35c168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\" [0185.422] wcscat (in: _Dest=0x35c168, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*" [0185.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53fd8 [0185.422] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0190.979] wcscmp (_String1=".", _String2=".") returned 0 [0190.979] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.979] wcscmp (_String1="..", _String2=".") returned 1 [0190.979] wcscmp (_String1="..", _String2="..") returned 0 [0190.979] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0190.980] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0190.980] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0190.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x332f28 [0190.980] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0190.980] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\" [0190.980] wcscat (in: _Dest=0x332f28, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" [0195.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c [0195.634] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.634] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.634] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332268 [0195.635] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay" [0195.635] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\" [0195.635] wcscat (in: _Dest=0x332268, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" [0195.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec [0195.636] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.636] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0195.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53fd8) returned 1 [0195.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c168) returned 1 [0195.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f050) returned 1 Thread: id = 5844 os_tid = 0x1030 [0185.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css")) returned 0x20 [0191.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0191.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.876] GetLastError () returned 0x5 [0192.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0192.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b5b8) returned 1 Thread: id = 5845 os_tid = 0x1034 [0185.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff7150 [0185.423] wcscpy (in: _Dest=0x2ff7150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0185.423] wcscat (in: _Dest=0x2ff7150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0185.423] wcscat (in: _Dest=0x2ff7150, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*" [0185.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0185.423] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0194.841] wcscmp (_String1=".", _String2=".") returned 0 [0194.841] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.841] wcscmp (_String1="..", _String2=".") returned 1 [0194.841] wcscmp (_String1="..", _String2="..") returned 0 [0194.841] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0194.841] wcscmp (_String1="background.gif", _String2=".") returned 1 [0194.841] wcscmp (_String1="background.gif", _String2="..") returned 1 [0194.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68d08 [0194.841] wcscpy (in: _Dest=0x3e68d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0194.841] wcscat (in: _Dest=0x3e68d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0194.841] wcscat (in: _Dest=0x3e68d08, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" [0199.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264 [0199.806] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0199.806] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0199.806] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0199.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d86a80 [0199.806] wcscpy (in: _Dest=0x3d86a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0199.807] wcscat (in: _Dest=0x3d86a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0199.807] wcscat (in: _Dest=0x3d86a80, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" [0199.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048 [0199.808] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0199.808] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0199.808] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0199.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d853c0 [0199.809] wcscpy (in: _Dest=0x3d853c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0199.809] wcscat (in: _Dest=0x3d853c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0199.809] wcscat (in: _Dest=0x3d853c0, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" [0199.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d853c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c [0199.835] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0199.835] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0199.835] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0199.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85150 [0199.835] wcscpy (in: _Dest=0x3d85150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange" [0199.835] wcscat (in: _Dest=0x3d85150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\" [0199.835] wcscat (in: _Dest=0x3d85150, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" [0199.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0 [0199.860] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0199.860] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0199.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0199.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7150) returned 1 [0199.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7cd0) returned 1 Thread: id = 5846 os_tid = 0x1038 [0185.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css")) returned 0x20 [0194.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0194.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.840] GetLastError () returned 0x5 [0194.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0194.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333a68) returned 1 Thread: id = 5847 os_tid = 0x1044 [0185.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x2ff6518 [0185.424] wcscpy (in: _Dest=0x2ff6518, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0185.424] wcscat (in: _Dest=0x2ff6518, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0185.424] wcscat (in: _Dest=0x2ff6518, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*" [0185.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0185.424] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0194.838] wcscmp (_String1=".", _String2=".") returned 0 [0194.838] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45f9fb70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.838] wcscmp (_String1="..", _String2=".") returned 1 [0194.838] wcscmp (_String1="..", _String2="..") returned 0 [0194.838] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f30d300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f30d300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0194.838] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0194.838] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0194.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d85cb0 [0194.838] wcscpy (in: _Dest=0x3d85cb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0194.838] wcscat (in: _Dest=0x3d85cb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0194.838] wcscat (in: _Dest=0x3d85cb0, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" [0199.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498 [0199.229] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0199.229] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0199.229] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0199.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc4) returned 0x3d85970 [0199.230] wcscpy (in: _Dest=0x3d85970, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0199.230] wcscat (in: _Dest=0x3d85970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0199.230] wcscat (in: _Dest=0x3d85970, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" [0199.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d85970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc [0199.231] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0199.231] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0199.231] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0199.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d84e10 [0199.231] wcscpy (in: _Dest=0x3d84e10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow" [0199.231] wcscat (in: _Dest=0x3d84e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\" [0199.231] wcscat (in: _Dest=0x3d84e10, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" [0199.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d84e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0 [0199.232] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0199.233] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0199.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6518) returned 1 [0199.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6180) returned 1 Thread: id = 5848 os_tid = 0x710 [0185.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css")) returned 0x20 [0194.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0194.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.836] GetLastError () returned 0x5 [0194.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0194.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333e28) returned 1 Thread: id = 5849 os_tid = 0x1048 [0185.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css")) returned 0x20 [0191.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0191.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.876] GetLastError () returned 0x5 [0192.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0192.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c588) returned 1 Thread: id = 5850 os_tid = 0x1060 [0185.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa4) returned 0x35bf58 [0185.425] wcscpy (in: _Dest=0x35bf58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0185.425] wcscat (in: _Dest=0x35bf58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0185.425] wcscat (in: _Dest=0x35bf58, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*" [0185.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53638 [0185.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0191.373] wcscmp (_String1=".", _String2=".") returned 0 [0191.373] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45f9fb70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.373] wcscmp (_String1="..", _String2=".") returned 1 [0191.373] wcscmp (_String1="..", _String2="..") returned 0 [0191.373] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0191.373] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0191.373] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0191.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3336a8 [0191.374] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0191.374] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0191.374] wcscat (in: _Dest=0x3336a8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" [0193.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0193.440] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45f9fb70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0193.440] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0193.440] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0193.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333828 [0193.440] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0193.440] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0193.440] wcscat (in: _Dest=0x333828, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" [0193.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0193.441] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0193.441] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0193.441] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0193.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x333fa8 [0193.442] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert" [0193.442] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\" [0193.442] wcscat (in: _Dest=0x333fa8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" [0193.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0193.443] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0193.443] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0193.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53638) returned 1 [0193.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bf58) returned 1 [0193.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e720) returned 1 Thread: id = 5851 os_tid = 0x1064 [0185.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css")) returned 0x20 [0191.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0191.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.876] GetLastError () returned 0x5 [0192.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0192.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35c6e8) returned 1 Thread: id = 5852 os_tid = 0x1068 [0185.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css")) returned 0x20 [0194.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", dwFileAttributes=0x20) returned 0 [0194.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.831] GetLastError () returned 0x5 [0194.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", dwFileAttributes=0x20) returned 0 [0194.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6b90) returned 1 Thread: id = 5853 os_tid = 0x106c [0185.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css")) returned 0x20 [0191.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0191.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.877] GetLastError () returned 0x5 [0192.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0192.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35b718) returned 1 Thread: id = 5854 os_tid = 0x1070 [0185.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff7aa8 [0185.427] wcscpy (in: _Dest=0x2ff7aa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0185.427] wcscat (in: _Dest=0x2ff7aa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0185.427] wcscat (in: _Dest=0x2ff7aa8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*" [0185.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55a50 [0185.427] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0194.490] wcscmp (_String1=".", _String2=".") returned 0 [0194.490] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.490] wcscmp (_String1="..", _String2=".") returned 1 [0194.490] wcscmp (_String1="..", _String2="..") returned 0 [0194.490] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60620000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x60620000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0194.490] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0194.490] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0194.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d57500 [0194.490] wcscpy (in: _Dest=0x3d57500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0194.491] wcscat (in: _Dest=0x3d57500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0194.491] wcscat (in: _Dest=0x3d57500, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" [0195.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4 [0195.734] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.734] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.734] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d575c8 [0195.734] wcscpy (in: _Dest=0x3d575c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0195.734] wcscat (in: _Dest=0x3d575c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0195.734] wcscat (in: _Dest=0x3d575c8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" [0195.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d575c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac [0195.735] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.736] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.736] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d57cd0 [0195.736] wcscpy (in: _Dest=0x3d57cd0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck" [0195.736] wcscat (in: _Dest=0x3d57cd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\" [0195.736] wcscat (in: _Dest=0x3d57cd0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" [0195.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57cd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c [0195.737] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.737] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0195.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55a50) returned 1 [0195.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7aa8) returned 1 [0195.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x35bea8) returned 1 Thread: id = 5855 os_tid = 0x1074 [0185.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css")) returned 0x20 [0192.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0192.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.834] GetLastError () returned 0x5 [0194.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0194.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6f28) returned 1 Thread: id = 5856 os_tid = 0x1078 [0185.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css")) returned 0x20 [0191.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0191.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.876] GetLastError () returned 0x5 [0192.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0192.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6968) returned 1 Thread: id = 5857 os_tid = 0x107c [0185.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css")) returned 0x20 [0186.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0186.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.405] GetLastError () returned 0x5 [0189.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0189.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 5858 os_tid = 0x1080 [0185.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5f590 [0185.530] wcscpy (in: _Dest=0x7a5f590, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0185.530] wcscat (in: _Dest=0x7a5f590, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\" [0185.530] wcscat (in: _Dest=0x7a5f590, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*" [0185.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2e28 [0185.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0191.380] wcscmp (_String1=".", _String2=".") returned 0 [0191.380] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.381] wcscmp (_String1="..", _String2=".") returned 1 [0191.381] wcscmp (_String1="..", _String2="..") returned 0 [0191.381] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0191.381] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0191.381] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0191.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0191.381] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0191.381] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\" [0191.381] wcscat (in: _Dest=0x3333a8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" [0193.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0193.446] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0193.446] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0193.446] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0193.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x332268 [0193.446] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime" [0193.446] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\" [0193.446] wcscat (in: _Dest=0x332268, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" [0193.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x191c [0193.447] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0193.447] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0193.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2e28) returned 1 [0193.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f590) returned 1 [0193.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 Thread: id = 5859 os_tid = 0x1088 [0185.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js")) returned 0x20 [0185.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0185.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.532] GetLastError () returned 0x5 [0185.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0185.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 5860 os_tid = 0x1094 [0185.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif")) returned 0x20 [0185.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF", dwFileAttributes=0x20) returned 0 [0185.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.534] GetLastError () returned 0x5 [0185.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF", dwFileAttributes=0x20) returned 0 [0185.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 Thread: id = 5861 os_tid = 0x1098 [0185.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js")) returned 0x20 [0185.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js", dwFileAttributes=0x20) returned 0 [0185.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.535] GetLastError () returned 0x5 [0185.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js", dwFileAttributes=0x20) returned 0 [0185.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ee0) returned 1 Thread: id = 5862 os_tid = 0x109c [0185.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg")) returned 0x20 [0185.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0185.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.831] GetLastError () returned 0x5 [0185.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0185.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687f8) returned 1 Thread: id = 5863 os_tid = 0x10a0 [0185.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js")) returned 0x20 [0185.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js", dwFileAttributes=0x20) returned 0 [0185.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.829] GetLastError () returned 0x5 [0185.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js", dwFileAttributes=0x20) returned 0 [0185.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c90c8) returned 1 Thread: id = 5864 os_tid = 0x10a4 [0185.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7b7e638 [0185.538] wcscpy (in: _Dest=0x7b7e638, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0185.538] wcscat (in: _Dest=0x7b7e638, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\" [0185.538] wcscat (in: _Dest=0x7b7e638, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*" [0185.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5710 [0185.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0185.539] wcscmp (_String1=".", _String2=".") returned 0 [0185.539] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x78df9590, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.539] wcscmp (_String1="..", _String2=".") returned 1 [0185.539] wcscmp (_String1="..", _String2="..") returned 0 [0185.539] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7718eef0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Basic", cAlternateFileName="")) returned 1 [0185.539] wcscmp (_String1="Basic", _String2=".") returned 1 [0185.539] wcscmp (_String1="Basic", _String2="..") returned 1 [0185.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38700 [0185.539] wcscpy (in: _Dest=0x7a38700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0185.539] wcscat (in: _Dest=0x7a38700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\" [0185.539] wcscat (in: _Dest=0x7a38700, _Source="Basic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" [0185.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0185.657] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 1 [0185.657] wcscmp (_String1="Fancy", _String2=".") returned 1 [0185.657] wcscmp (_String1="Fancy", _String2="..") returned 1 [0185.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38d90 [0185.658] wcscpy (in: _Dest=0x7a38d90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type" [0185.658] wcscat (in: _Dest=0x7a38d90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\" [0185.658] wcscat (in: _Dest=0x7a38d90, _Source="Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0185.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0185.659] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 0 [0185.659] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0185.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5710) returned 1 [0185.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e638) returned 1 [0185.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de76b8) returned 1 Thread: id = 5865 os_tid = 0x10a8 [0185.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst")) returned 0x20 [0187.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST", dwFileAttributes=0x20) returned 0 [0187.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.014] GetLastError () returned 0x5 [0187.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST", dwFileAttributes=0x20) returned 0 [0187.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a624f0) returned 1 Thread: id = 5866 os_tid = 0x10ac [0185.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst")) returned 0x20 [0187.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST", dwFileAttributes=0x20) returned 0 [0187.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.016] GetLastError () returned 0x5 [0187.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST", dwFileAttributes=0x20) returned 0 [0187.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 5867 os_tid = 0x10b0 [0185.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss")) returned 0x20 [0187.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS", dwFileAttributes=0x20) returned 0 [0187.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.017] GetLastError () returned 0x5 [0187.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS", dwFileAttributes=0x20) returned 0 [0187.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c5c8) returned 1 Thread: id = 5868 os_tid = 0x10b4 [0185.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss")) returned 0x20 [0187.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS", dwFileAttributes=0x20) returned 0 [0187.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.019] GetLastError () returned 0x5 [0187.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS", dwFileAttributes=0x20) returned 0 [0187.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 5869 os_tid = 0x10b8 [0185.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss")) returned 0x20 [0186.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS", dwFileAttributes=0x20) returned 0 [0186.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.995] GetLastError () returned 0x5 [0186.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS", dwFileAttributes=0x20) returned 0 [0186.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 5870 os_tid = 0x10bc [0185.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss")) returned 0x20 [0187.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS", dwFileAttributes=0x20) returned 0 [0187.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.013] GetLastError () returned 0x5 [0187.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS", dwFileAttributes=0x20) returned 0 [0187.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 5871 os_tid = 0x10c0 [0185.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss")) returned 0x20 [0187.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS", dwFileAttributes=0x20) returned 0 [0187.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.020] GetLastError () returned 0x5 [0187.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS", dwFileAttributes=0x20) returned 0 [0187.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63ad0) returned 1 Thread: id = 5872 os_tid = 0x10d0 [0185.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss")) returned 0x20 [0187.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS", dwFileAttributes=0x20) returned 0 [0187.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.012] GetLastError () returned 0x5 [0187.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS", dwFileAttributes=0x20) returned 0 [0187.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 Thread: id = 5873 os_tid = 0x10d4 [0185.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss")) returned 0x20 [0187.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS", dwFileAttributes=0x20) returned 0 [0187.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.010] GetLastError () returned 0x5 [0187.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS", dwFileAttributes=0x20) returned 0 [0187.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62ef0) returned 1 Thread: id = 5874 os_tid = 0x10d8 [0185.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss")) returned 0x20 [0187.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS", dwFileAttributes=0x20) returned 0 [0187.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.009] GetLastError () returned 0x5 [0187.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS", dwFileAttributes=0x20) returned 0 [0187.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 5875 os_tid = 0x10dc [0185.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss")) returned 0x20 [0187.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS", dwFileAttributes=0x20) returned 0 [0187.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.023] GetLastError () returned 0x5 [0187.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS", dwFileAttributes=0x20) returned 0 [0187.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63210) returned 1 Thread: id = 5876 os_tid = 0x10e0 [0185.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss")) returned 0x20 [0187.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS", dwFileAttributes=0x20) returned 0 [0187.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.007] GetLastError () returned 0x5 [0187.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS", dwFileAttributes=0x20) returned 0 [0187.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63a30) returned 1 Thread: id = 5877 os_tid = 0x10e4 [0185.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss")) returned 0x20 [0187.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS", dwFileAttributes=0x20) returned 0 [0187.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.024] GetLastError () returned 0x5 [0187.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS", dwFileAttributes=0x20) returned 0 [0187.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63c10) returned 1 Thread: id = 5878 os_tid = 0x10e8 [0185.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss")) returned 0x20 [0187.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS", dwFileAttributes=0x20) returned 0 [0187.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.006] GetLastError () returned 0x5 [0187.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS", dwFileAttributes=0x20) returned 0 [0187.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a637b0) returned 1 Thread: id = 5879 os_tid = 0x5d0 [0185.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls")) returned 0x20 [0187.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS", dwFileAttributes=0x20) returned 0 [0187.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.025] GetLastError () returned 0x5 [0187.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS", dwFileAttributes=0x20) returned 0 [0187.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63df0) returned 1 Thread: id = 5880 os_tid = 0x10ec [0185.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst")) returned 0x20 [0187.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST", dwFileAttributes=0x20) returned 0 [0187.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.005] GetLastError () returned 0x5 [0187.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST", dwFileAttributes=0x20) returned 0 [0187.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63850) returned 1 Thread: id = 5881 os_tid = 0x10f0 [0185.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst")) returned 0x20 [0187.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST", dwFileAttributes=0x20) returned 0 [0187.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.003] GetLastError () returned 0x5 [0187.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST", dwFileAttributes=0x20) returned 0 [0187.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62bd0) returned 1 Thread: id = 5882 os_tid = 0x10f4 [0185.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss")) returned 0x20 [0187.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS", dwFileAttributes=0x20) returned 0 [0187.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.002] GetLastError () returned 0x5 [0187.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS", dwFileAttributes=0x20) returned 0 [0187.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 5883 os_tid = 0xefc [0185.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst")) returned 0x20 [0187.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST", dwFileAttributes=0x20) returned 0 [0187.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.027] GetLastError () returned 0x5 [0187.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST", dwFileAttributes=0x20) returned 0 [0187.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62e50) returned 1 Thread: id = 5884 os_tid = 0x10f8 [0185.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss")) returned 0x20 [0187.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS", dwFileAttributes=0x20) returned 0 [0187.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.001] GetLastError () returned 0x5 [0187.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS", dwFileAttributes=0x20) returned 0 [0187.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 Thread: id = 5885 os_tid = 0x10fc [0185.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst")) returned 0x20 [0187.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST", dwFileAttributes=0x20) returned 0 [0187.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.028] GetLastError () returned 0x5 [0187.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST", dwFileAttributes=0x20) returned 0 [0187.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a633f0) returned 1 Thread: id = 5886 os_tid = 0x7bc [0185.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss")) returned 0x20 [0187.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0187.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.029] GetLastError () returned 0x5 [0187.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0187.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63cb0) returned 1 Thread: id = 5887 os_tid = 0x1104 [0185.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst")) returned 0x20 [0186.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST", dwFileAttributes=0x20) returned 0 [0186.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.999] GetLastError () returned 0x5 [0186.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST", dwFileAttributes=0x20) returned 0 [0186.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 5888 os_tid = 0x1108 [0185.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss")) returned 0x20 [0186.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0186.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.997] GetLastError () returned 0x5 [0186.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0186.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a630d0) returned 1 Thread: id = 5889 os_tid = 0x110c [0185.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst")) returned 0x20 [0186.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST", dwFileAttributes=0x20) returned 0 [0186.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.996] GetLastError () returned 0x5 [0186.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST", dwFileAttributes=0x20) returned 0 [0186.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62db0) returned 1 Thread: id = 5890 os_tid = 0x1110 [0185.550] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json")) returned 0x2020 [0186.766] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0189.242] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19f0 [0191.001] GetFileSizeEx (in: hFile=0x19f0, lpFileSize=0xac8fe14 | out: lpFileSize=0xac8fe14*=239) returned 1 [0191.001] SetFilePointerEx (in: hFile=0x19f0, liDistanceToMove=0xeb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.001] ReadFile (in: hFile=0x19f0, lpBuffer=0xac8fdf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac8fe00, lpOverlapped=0x0 | out: lpBuffer=0xac8fdf0*, lpNumberOfBytesRead=0xac8fe00*=0x4, lpOverlapped=0x0) returned 1 [0191.003] SetFilePointerEx (in: hFile=0x19f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0191.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0191.003] NtQuerySystemTime (in: CurrentTime=0xac8fd88 | out: CurrentTime=0xac8fd88*=132462177695856000) returned 0x0 [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x51344078 [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x49339cef [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x7c3d5107 [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x136d27a4 [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x3f33b8b7 [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x5893c59c [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x4fa16af0 [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x5df04b0f [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x7d75cc37 [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x305c3fec [0191.003] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x43aae69a [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x14b9c09c [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0xb0a28f2 [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x2e8c338d [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x3c968e5e [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x646e0f02 [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x4dfb910d [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x79159eed [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x3bf17ddf [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x2bad0e62 [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x3a245fd3 [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x197ac7ba [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x14de230 [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x96f2ff [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x189a052b [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x1f513450 [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x47063872 [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x54bfbcc0 [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x4d8fa23f [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x30d18abe [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x51241619 [0191.004] RtlRandomEx (in: Seed=0xac8fd80 | out: Seed=0xac8fd80) returned 0x255cb900 [0191.014] ReadFile (in: hFile=0x19f0, lpBuffer=0x7b97380, nNumberOfBytesToRead=0xef, lpNumberOfBytesRead=0xac8fd7c, lpOverlapped=0x0 | out: lpBuffer=0x7b97380*, lpNumberOfBytesRead=0xac8fd7c*=0xef, lpOverlapped=0x0) returned 1 [0191.036] SetFilePointerEx (in: hFile=0x19f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.036] WriteFile (in: hFile=0x19f0, lpBuffer=0x7b9af88*, nNumberOfBytesToWrite=0xef, lpNumberOfBytesWritten=0xac8fd80, lpOverlapped=0x0 | out: lpBuffer=0x7b9af88*, lpNumberOfBytesWritten=0xac8fd80*=0xef, lpOverlapped=0x0) returned 1 [0192.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0192.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0192.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f20) returned 1 [0192.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9af88) returned 1 [0192.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b97380) returned 1 [0192.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0192.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40be8) returned 1 [0192.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37980 [0192.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40be8 [0192.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0192.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0192.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f20) returned 1 [0192.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a379b0 [0192.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0192.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0192.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f48) returned 1 [0192.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0192.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40be8) returned 1 [0192.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3debf68 [0192.512] SetFilePointerEx (in: hFile=0x19f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.512] WriteFile (in: hFile=0x19f0, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xac8fe08, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0xac8fe08*=0x10c, lpOverlapped=0x0) returned 1 [0192.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb8f0 [0192.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8f0) returned 1 [0192.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3edb8f0 [0192.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb990 [0192.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb850 [0192.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb850) returned 1 [0192.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.669] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="42") returned 2 [0192.669] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="1f") returned 2 [0192.669] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="83") returned 2 [0192.669] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="cb") returned 2 [0192.669] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="ec") returned 2 [0192.669] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="e5") returned 2 [0192.669] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="07") returned 2 [0192.669] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="7d") returned 2 [0192.669] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="b8") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="b8") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="38") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="31") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="7e") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="5a") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="fd") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="de") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="28") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="6f") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="3d") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="33") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="09") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="f0") returned 2 [0192.670] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="47") returned 2 [0192.671] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="ee") returned 2 [0192.671] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="02") returned 2 [0192.671] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="17") returned 2 [0192.671] RtlInitAnsiString (in: DestinationString=0xac8fd90, SourceString="421f83cbece5077db8b838317e5afdde286f3d3309f047ee0217" | out: DestinationString="421f83cbece5077db8b838317e5afdde286f3d3309f047ee0217") [0192.671] RtlAnsiStringToUnicodeString (in: DestinationString=0xac8fd88, SourceString="421f83cbece5077db8b838317e5afdde286f3d3309f047ee0217", AllocateDestinationString=1 | out: DestinationString="421f83cbece5077db8b838317e5afdde286f3d3309f047ee0217") returned 0x0 [0192.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e580 [0192.671] RtlFreeAnsiString (AnsiString="4") [0192.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8f0) returned 1 [0192.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb990) returned 1 [0192.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debf68) returned 1 [0192.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a379b0) returned 1 [0192.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f20) returned 1 [0192.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37980) returned 1 [0192.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3038) returned 1 [0192.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0192.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0192.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0192.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d54498 [0192.672] wcscat (in: _Dest=0x3d54498, _Source="421f83cbece50" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\421f83cbece50") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\421f83cbece50" [0192.672] wcscat (in: _Dest=0x3d54498, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\421f83cbece50.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\421f83cbece50.68814f" [0192.672] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\421f83cbece50.68814f", NtPathName=0xac8fd80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\421f83cbece50.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea37a8 [0192.673] NtSetInformationFile (FileHandle=0x19f0, IoStatusBlock=0xac8fd88, FileInformation=0x3ea37a8, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea37a8) returned 1 [0192.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9a30) returned 1 [0192.767] NtQueryInformationFile (in: FileHandle=0x19f0, IoStatusBlock=0xac8fd58, FileInformation=0xac8fd60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xac8fd58, FileInformation=0xac8fd60) returned 0x0 [0192.767] NtSetInformationFile (FileHandle=0x19f0, IoStatusBlock=0xac8fd58, FileInformation=0xac8fd60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 [0192.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0192.846] FlushFileBuffers (hFile=0x19f0) returned 1 [0192.867] CloseHandle (hObject=0x19f0) returned 1 [0192.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbf618 [0192.968] wcscpy (in: _Dest=0x7cbf618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\" [0192.968] wcscat (in: _Dest=0x7cbf618, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\68814F-Readme.txt" [0192.968] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\68814f-readme.txt")) returned 0xffffffff [0192.968] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\de\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1570 [0192.993] WriteFile (in: hFile=0x1570, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xac8fd9c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xac8fd9c*=0x8b9, lpOverlapped=0x0) returned 1 [0193.001] CloseHandle (hObject=0x1570) returned 1 [0193.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf618) returned 1 [0193.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b815a0) returned 1 Thread: id = 5891 os_tid = 0x2644 [0185.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst")) returned 0x20 [0187.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST", dwFileAttributes=0x20) returned 0 [0187.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.031] GetLastError () returned 0x5 [0187.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST", dwFileAttributes=0x20) returned 0 [0187.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62450) returned 1 Thread: id = 5892 os_tid = 0x6e4 [0185.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst")) returned 0x20 [0186.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST", dwFileAttributes=0x20) returned 0 [0186.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.993] GetLastError () returned 0x5 [0186.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST", dwFileAttributes=0x20) returned 0 [0186.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63b70) returned 1 Thread: id = 5893 os_tid = 0x264c [0185.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss")) returned 0x20 [0186.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS", dwFileAttributes=0x20) returned 0 [0186.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.737] GetLastError () returned 0x5 [0186.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS", dwFileAttributes=0x20) returned 0 [0186.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62810) returned 1 Thread: id = 5894 os_tid = 0x1114 [0185.834] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json")) returned 0x2020 [0187.059] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0187.946] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1abc [0187.946] GetFileSizeEx (in: hFile=0x1abc, lpFileSize=0xb43ff2c | out: lpFileSize=0xb43ff2c*=258) returned 1 [0187.946] SetFilePointerEx (in: hFile=0x1abc, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.946] ReadFile (in: hFile=0x1abc, lpBuffer=0xb43ff08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb43ff18, lpOverlapped=0x0 | out: lpBuffer=0xb43ff08*, lpNumberOfBytesRead=0xb43ff18*=0x4, lpOverlapped=0x0) returned 1 [0187.948] SetFilePointerEx (in: hFile=0x1abc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0187.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0187.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0187.948] NtQuerySystemTime (in: CurrentTime=0xb43fea0 | out: CurrentTime=0xb43fea0*=132462177665280000) returned 0x0 [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x34fec225 [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x15f2e74b [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x2b8328dc [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x498e8332 [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x36b3a787 [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x4bc822bc [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x2508c674 [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x31ec4adf [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x31d562 [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x56fc1095 [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x66853b66 [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x5f586fd5 [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x3d8e3d5e [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x7b13a080 [0187.948] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x625e4b77 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0xb2d1067 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x39d905de [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x623ce9b3 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x1a7de27a [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x4e8e0eca [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x4f94fe32 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x95a2803 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x3b600b62 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x2e616c89 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x2bffaf1f [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x21b5f9b0 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x48c1df59 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x77d147a [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x655ea470 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x551edbd8 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x17b79120 [0187.949] RtlRandomEx (in: Seed=0xb43fe98 | out: Seed=0xb43fe98) returned 0x4fdfd96 [0187.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0187.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d81008 [0187.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d84c10 [0187.960] ReadFile (in: hFile=0x1abc, lpBuffer=0x7d81008, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0xb43fe94, lpOverlapped=0x0 | out: lpBuffer=0x7d81008*, lpNumberOfBytesRead=0xb43fe94*=0x102, lpOverlapped=0x0) returned 1 [0187.960] SetFilePointerEx (in: hFile=0x1abc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.960] WriteFile (in: hFile=0x1abc, lpBuffer=0x7d84c10*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xb43fe98, lpOverlapped=0x0 | out: lpBuffer=0x7d84c10*, lpNumberOfBytesWritten=0xb43fe98*=0x102, lpOverlapped=0x0) returned 1 [0189.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca738 [0189.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca120 [0189.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca120) returned 1 [0189.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d84c10) returned 1 [0189.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d81008) returned 1 [0189.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0189.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d400f0) returned 1 [0189.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37770 [0189.756] SetFilePointerEx (in: hFile=0x1abc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.756] WriteFile (in: hFile=0x1abc, lpBuffer=0x7b7ce10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb43ff20, lpOverlapped=0x0 | out: lpBuffer=0x7b7ce10*, lpNumberOfBytesWritten=0xb43ff20*=0x10c, lpOverlapped=0x0) returned 1 [0192.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41e30 [0192.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0192.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0192.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0192.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5a6a0 [0192.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0192.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0192.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0192.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0192.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e30) returned 1 [0192.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x30671c0 [0192.540] sprintf (in: _Dest=0x30671c0, _Format="%c%c" | out: _Dest="75") returned 2 [0192.540] sprintf (in: _Dest=0x30671c2, _Format="%c%c" | out: _Dest="4a") returned 2 [0192.540] sprintf (in: _Dest=0x30671c4, _Format="%c%c" | out: _Dest="7f") returned 2 [0192.540] sprintf (in: _Dest=0x30671c6, _Format="%c%c" | out: _Dest="09") returned 2 [0192.540] sprintf (in: _Dest=0x30671c8, _Format="%c%c" | out: _Dest="5e") returned 2 [0192.540] sprintf (in: _Dest=0x30671ca, _Format="%c%c" | out: _Dest="36") returned 2 [0192.540] sprintf (in: _Dest=0x30671cc, _Format="%c%c" | out: _Dest="cd") returned 2 [0192.540] sprintf (in: _Dest=0x30671ce, _Format="%c%c" | out: _Dest="89") returned 2 [0192.541] sprintf (in: _Dest=0x30671d0, _Format="%c%c" | out: _Dest="2c") returned 2 [0192.541] sprintf (in: _Dest=0x30671d2, _Format="%c%c" | out: _Dest="02") returned 2 [0192.541] sprintf (in: _Dest=0x30671d4, _Format="%c%c" | out: _Dest="43") returned 2 [0192.541] sprintf (in: _Dest=0x30671d6, _Format="%c%c" | out: _Dest="1d") returned 2 [0192.541] sprintf (in: _Dest=0x30671d8, _Format="%c%c" | out: _Dest="47") returned 2 [0192.541] sprintf (in: _Dest=0x30671da, _Format="%c%c" | out: _Dest="f2") returned 2 [0192.541] sprintf (in: _Dest=0x30671dc, _Format="%c%c" | out: _Dest="d7") returned 2 [0192.541] sprintf (in: _Dest=0x30671de, _Format="%c%c" | out: _Dest="01") returned 2 [0192.541] sprintf (in: _Dest=0x30671e0, _Format="%c%c" | out: _Dest="30") returned 2 [0192.541] sprintf (in: _Dest=0x30671e2, _Format="%c%c" | out: _Dest="2c") returned 2 [0192.541] sprintf (in: _Dest=0x30671e4, _Format="%c%c" | out: _Dest="b9") returned 2 [0192.541] sprintf (in: _Dest=0x30671e6, _Format="%c%c" | out: _Dest="f9") returned 2 [0192.541] sprintf (in: _Dest=0x30671e8, _Format="%c%c" | out: _Dest="78") returned 2 [0192.541] sprintf (in: _Dest=0x30671ea, _Format="%c%c" | out: _Dest="9c") returned 2 [0192.542] sprintf (in: _Dest=0x30671ec, _Format="%c%c" | out: _Dest="3e") returned 2 [0192.542] sprintf (in: _Dest=0x30671ee, _Format="%c%c" | out: _Dest="43") returned 2 [0192.542] sprintf (in: _Dest=0x30671f0, _Format="%c%c" | out: _Dest="cd") returned 2 [0192.542] sprintf (in: _Dest=0x30671f2, _Format="%c%c" | out: _Dest="39") returned 2 [0192.542] RtlInitAnsiString (in: DestinationString=0xb43fea8, SourceString="754a7f095e36cd892c02431d47f2d701302cb9f9789c3e43cd39" | out: DestinationString="754a7f095e36cd892c02431d47f2d701302cb9f9789c3e43cd39") [0192.542] RtlAnsiStringToUnicodeString (in: DestinationString=0xb43fea0, SourceString="754a7f095e36cd892c02431d47f2d701302cb9f9789c3e43cd39", AllocateDestinationString=1 | out: DestinationString="754a7f095e36cd892c02431d47f2d701302cb9f9789c3e43cd39") returned 0x0 [0192.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd88 [0192.542] RtlFreeAnsiString (AnsiString="7") [0192.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30671c0) returned 1 [0192.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0192.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0192.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ce10) returned 1 [0192.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a376b0) returned 1 [0192.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca120) returned 1 [0192.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37770) returned 1 [0192.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca738) returned 1 [0192.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0192.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0192.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0192.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3eca690 [0192.544] wcscat (in: _Dest=0x3eca690, _Source="754a7f095e36c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\754a7f095e36c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\754a7f095e36c" [0192.544] wcscat (in: _Dest=0x3eca690, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\754a7f095e36c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\754a7f095e36c.68814f" [0192.544] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\754a7f095e36c.68814f", NtPathName=0xb43fe98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\754a7f095e36c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ea3b80 [0192.545] NtSetInformationFile (FileHandle=0x1abc, IoStatusBlock=0xb43fea0, FileInformation=0x3ea3b80, Length=0x13c, FileInformationClass=0xa) returned 0x0 [0192.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3b80) returned 1 [0192.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a500e8) returned 1 [0192.697] NtQueryInformationFile (in: FileHandle=0x1abc, IoStatusBlock=0xb43fe70, FileInformation=0xb43fe78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb43fe70, FileInformation=0xb43fe78) returned 0x0 [0192.697] NtSetInformationFile (FileHandle=0x1abc, IoStatusBlock=0xb43fe70, FileInformation=0xb43fe78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca690) returned 1 [0192.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0192.771] FlushFileBuffers (hFile=0x1abc) returned 1 [0192.784] CloseHandle (hObject=0x1abc) returned 1 [0192.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9f40 [0192.882] wcscpy (in: _Dest=0x3ec9f40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\" [0192.882] wcscat (in: _Dest=0x3ec9f40, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\68814F-Readme.txt" [0192.882] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\68814f-readme.txt")) returned 0xffffffff [0192.882] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0193.152] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb43feb4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb43feb4*=0x8b9, lpOverlapped=0x0) returned 1 [0193.154] CloseHandle (hObject=0x1518) returned 1 [0193.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9f40) returned 1 [0193.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81a40) returned 1 Thread: id = 5895 os_tid = 0x2658 [0185.835] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0187.063] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0188.105] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x152c [0188.105] GetFileSizeEx (in: hFile=0x152c, lpFileSize=0xb05f9ec | out: lpFileSize=0xb05f9ec*=214) returned 1 [0188.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0188.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0188.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0188.105] NtQuerySystemTime (in: CurrentTime=0xb05f960 | out: CurrentTime=0xb05f960*=132462177666840000) returned 0x0 [0188.105] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x66e49cc [0188.105] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x23956a3c [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x609e656a [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x4109a323 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x443be8f0 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x5d2263c6 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x21abc18a [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x748c9b40 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x72308627 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x1c58332c [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x204ad380 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x4b4fd1d3 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x4d1c5b64 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x36032933 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x6dd446fd [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x5803cab [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x3199c072 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x140192b1 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x322c0719 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x65a8ecb6 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x11447c4c [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x50f66ff1 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x37bf2358 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x91a7846 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x3c29e434 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x33c71a26 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0xb4b51e9 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x17fcf3a2 [0188.106] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x694bfaab [0188.107] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x37b9455f [0188.107] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x5aad5457 [0188.107] RtlRandomEx (in: Seed=0xb05f958 | out: Seed=0xb05f958) returned 0x5cced94d [0188.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0188.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d71fe8 [0188.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d75bf0 [0188.119] ReadFile (in: hFile=0x152c, lpBuffer=0x7d71fe8, nNumberOfBytesToRead=0xd6, lpNumberOfBytesRead=0xb05f954, lpOverlapped=0x0 | out: lpBuffer=0x7d71fe8*, lpNumberOfBytesRead=0xb05f954*=0xd6, lpOverlapped=0x0) returned 1 [0188.121] SetFilePointerEx (in: hFile=0x152c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.121] WriteFile (in: hFile=0x152c, lpBuffer=0x7d75bf0*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0xb05f958, lpOverlapped=0x0 | out: lpBuffer=0x7d75bf0*, lpNumberOfBytesWritten=0xb05f958*=0xd6, lpOverlapped=0x0) returned 1 [0189.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0189.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0189.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4820) returned 1 [0189.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d75bf0) returned 1 [0189.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d71fe8) returned 1 [0189.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0189.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25788) returned 1 [0189.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376e0 [0189.759] SetFilePointerEx (in: hFile=0x152c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.759] WriteFile (in: hFile=0x152c, lpBuffer=0x7b7c9b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb05f9e0, lpOverlapped=0x0 | out: lpBuffer=0x7b7c9b0*, lpNumberOfBytesWritten=0xb05f9e0*=0x10c, lpOverlapped=0x0) returned 1 [0192.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x30be328 [0192.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e940 [0192.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0192.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3790) returned 1 [0192.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3790 [0192.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0192.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0192.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0192.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0192.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be328) returned 1 [0192.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.383] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="73") returned 2 [0192.383] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="73") returned 2 [0192.383] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="c1") returned 2 [0192.383] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="3e") returned 2 [0192.383] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="c1") returned 2 [0192.383] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="e0") returned 2 [0192.383] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="ca") returned 2 [0192.383] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="dc") returned 2 [0192.383] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="77") returned 2 [0192.383] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="6b") returned 2 [0192.383] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="2c") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="68") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="c4") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="9c") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="9b") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="1e") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="41") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="e6") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="25") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="10") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="7b") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="da") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="75") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="1a") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="08") returned 2 [0192.384] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="4a") returned 2 [0192.384] RtlInitAnsiString (in: DestinationString=0xb05f968, SourceString="7373c13ec1e0cadc776b2c68c49c9b1e41e625107bda751a084a" | out: DestinationString="7373c13ec1e0cadc776b2c68c49c9b1e41e625107bda751a084a") [0192.384] RtlAnsiStringToUnicodeString (in: DestinationString=0xb05f960, SourceString="7373c13ec1e0cadc776b2c68c49c9b1e41e625107bda751a084a", AllocateDestinationString=1 | out: DestinationString="7373c13ec1e0cadc776b2c68c49c9b1e41e625107bda751a084a") returned 0x0 [0192.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa88 [0192.385] wcscat (in: _Dest=0x3ec9f40, _Source="7373c13ec1e0c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\7373c13ec1e0c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\7373c13ec1e0c" [0192.385] wcscat (in: _Dest=0x3ec9f40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\7373c13ec1e0c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\7373c13ec1e0c.68814f" [0192.385] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\7373c13ec1e0c.68814f", NtPathName=0xb05f958, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\7373c13ec1e0c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ea3a38 [0192.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3a38) returned 1 [0192.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9d210) returned 1 [0192.619] NtQueryInformationFile (in: FileHandle=0x152c, IoStatusBlock=0xb05f930, FileInformation=0xb05f938, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb05f930, FileInformation=0xb05f938) returned 0x0 [0192.619] NtSetInformationFile (FileHandle=0x152c, IoStatusBlock=0xb05f930, FileInformation=0xb05f938, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9f40) returned 1 [0192.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0192.757] FlushFileBuffers (hFile=0x152c) returned 1 [0192.763] CloseHandle (hObject=0x152c) returned 1 [0192.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3eca690 [0192.826] wcscpy (in: _Dest=0x3eca690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\" [0192.826] wcscat (in: _Dest=0x3eca690, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\68814F-Readme.txt" [0192.826] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\68814f-readme.txt")) returned 0xffffffff [0192.826] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0193.147] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb05f974, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb05f974*=0x8b9, lpOverlapped=0x0) returned 1 [0193.150] CloseHandle (hObject=0x1518) returned 1 [0193.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca690) returned 1 [0193.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55bb8) returned 1 Thread: id = 5896 os_tid = 0xb0c [0185.835] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0187.064] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0194.756] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1140 [0194.757] GetFileSizeEx (in: hFile=0x1140, lpFileSize=0x9dcfc0c | out: lpFileSize=0x9dcfc0c*=215) returned 1 [0194.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0194.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0194.758] NtQuerySystemTime (in: CurrentTime=0x9dcfb80 | out: CurrentTime=0x9dcfb80*=132462177733296000) returned 0x0 [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x5b469db4 [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x7aeddac7 [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0xf18b870 [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x14987a2b [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x4b25029a [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x32374326 [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x3395dbe2 [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x50731e56 [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0xdf10093 [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x63eeb559 [0194.758] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x2de61d9b [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x4a191f0d [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x7a1d899c [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x4d71ef55 [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x446ee6b9 [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x5bcb6fec [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x5b9cd680 [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x2a5a4d5b [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x3a346d43 [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x175ad7a0 [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x50df56c [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x111fb511 [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x1f46fb2d [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x4fcfc16b [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x5a8b24bd [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x6ff3c2cf [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x771827c8 [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x27cd01fe [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x5d52bf1d [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x730913bd [0194.759] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x49005af6 [0194.760] RtlRandomEx (in: Seed=0x9dcfb78 | out: Seed=0x9dcfb78) returned 0x47cb512b [0194.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0194.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b93778 [0194.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b97380 [0194.780] ReadFile (in: hFile=0x1140, lpBuffer=0x7b93778, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0x9dcfb74, lpOverlapped=0x0 | out: lpBuffer=0x7b93778*, lpNumberOfBytesRead=0x9dcfb74*=0xd7, lpOverlapped=0x0) returned 1 [0194.783] SetFilePointerEx (in: hFile=0x1140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.783] WriteFile (in: hFile=0x1140, lpBuffer=0x7b97380*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x9dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x7b97380*, lpNumberOfBytesWritten=0x9dcfb78*=0xd7, lpOverlapped=0x0) returned 1 [0196.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d80 [0196.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0196.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4028) returned 1 [0196.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b97380) returned 1 [0196.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0196.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0196.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e560f0) returned 1 [0196.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37770 [0196.022] SetFilePointerEx (in: hFile=0x1140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.022] WriteFile (in: hFile=0x1140, lpBuffer=0x7cadec0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9dcfc00, lpOverlapped=0x0 | out: lpBuffer=0x7cadec0*, lpNumberOfBytesWritten=0x9dcfc00*=0x10c, lpOverlapped=0x0) returned 1 [0196.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d419b0 [0196.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0196.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0196.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a10) returned 1 [0196.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3a10 [0196.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0196.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0196.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4000) returned 1 [0196.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0196.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d419b0) returned 1 [0196.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2dfc0 [0196.159] sprintf (in: _Dest=0x7a2dfc0, _Format="%c%c" | out: _Dest="19") returned 2 [0196.159] sprintf (in: _Dest=0x7a2dfc2, _Format="%c%c" | out: _Dest="61") returned 2 [0196.159] sprintf (in: _Dest=0x7a2dfc4, _Format="%c%c" | out: _Dest="11") returned 2 [0196.159] sprintf (in: _Dest=0x7a2dfc6, _Format="%c%c" | out: _Dest="74") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfc8, _Format="%c%c" | out: _Dest="0c") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfca, _Format="%c%c" | out: _Dest="05") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfcc, _Format="%c%c" | out: _Dest="28") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfce, _Format="%c%c" | out: _Dest="6b") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfd0, _Format="%c%c" | out: _Dest="97") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfd2, _Format="%c%c" | out: _Dest="f3") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfd4, _Format="%c%c" | out: _Dest="98") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfd6, _Format="%c%c" | out: _Dest="71") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfd8, _Format="%c%c" | out: _Dest="e4") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfda, _Format="%c%c" | out: _Dest="02") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfdc, _Format="%c%c" | out: _Dest="63") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfde, _Format="%c%c" | out: _Dest="87") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfe0, _Format="%c%c" | out: _Dest="62") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfe2, _Format="%c%c" | out: _Dest="11") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfe4, _Format="%c%c" | out: _Dest="3d") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfe6, _Format="%c%c" | out: _Dest="c8") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfe8, _Format="%c%c" | out: _Dest="d3") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfea, _Format="%c%c" | out: _Dest="21") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfec, _Format="%c%c" | out: _Dest="66") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dfee, _Format="%c%c" | out: _Dest="b7") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dff0, _Format="%c%c" | out: _Dest="4a") returned 2 [0196.160] sprintf (in: _Dest=0x7a2dff2, _Format="%c%c" | out: _Dest="9a") returned 2 [0196.160] RtlInitAnsiString (in: DestinationString=0x9dcfb88, SourceString="196111740c05286b97f39871e402638762113dc8d32166b74a9a" | out: DestinationString="196111740c05286b97f39871e402638762113dc8d32166b74a9a") [0196.160] RtlAnsiStringToUnicodeString (in: DestinationString=0x9dcfb80, SourceString="196111740c05286b97f39871e402638762113dc8d32166b74a9a", AllocateDestinationString=1 | out: DestinationString="196111740c05286b97f39871e402638762113dc8d32166b74a9a") returned 0x0 [0196.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e670 [0196.161] wcscat (in: _Dest=0x3ec9928, _Source="196111740c052" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\196111740c052") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\196111740c052" [0196.161] wcscat (in: _Dest=0x3ec9928, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\196111740c052.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\196111740c052.68814f" [0196.161] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\196111740c052.68814f", NtPathName=0x9dcfb78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\196111740c052.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ea3288 [0196.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3288) returned 1 [0196.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3abc8) returned 1 [0196.207] NtQueryInformationFile (in: FileHandle=0x1140, IoStatusBlock=0x9dcfb50, FileInformation=0x9dcfb58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9dcfb50, FileInformation=0x9dcfb58) returned 0x0 [0196.207] NtSetInformationFile (FileHandle=0x1140, IoStatusBlock=0x9dcfb50, FileInformation=0x9dcfb58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9928) returned 1 [0196.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0196.251] FlushFileBuffers (hFile=0x1140) returned 1 [0196.255] CloseHandle (hObject=0x1140) returned 1 [0196.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3db8148 [0196.274] wcscpy (in: _Dest=0x3db8148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\" [0196.274] wcscat (in: _Dest=0x3db8148, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\68814F-Readme.txt" [0196.275] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\68814f-readme.txt")) returned 0xffffffff [0196.275] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d28 [0196.291] WriteFile (in: hFile=0x1d28, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9dcfb94, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9dcfb94*=0x8b9, lpOverlapped=0x0) returned 1 [0196.308] CloseHandle (hObject=0x1d28) returned 1 [0196.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db8148) returned 1 [0196.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55a90) returned 1 Thread: id = 5897 os_tid = 0x1118 [0185.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json")) returned 0x2020 [0186.750] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0189.238] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x153c [0191.653] GetFileSizeEx (in: hFile=0x153c, lpFileSize=0x989fd9c | out: lpFileSize=0x989fd9c*=223) returned 1 [0191.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0191.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0191.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0191.653] NtQuerySystemTime (in: CurrentTime=0x989fd10 | out: CurrentTime=0x989fd10*=132462177702252000) returned 0x0 [0191.653] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x4661151 [0191.653] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x682b7a86 [0191.653] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x2618028f [0191.653] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x729111ca [0191.653] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x216b954f [0191.653] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0xb359c25 [0191.653] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x58d9cb41 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x66754ba7 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x4f15b3da [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x241efa2f [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x3dbbcfb8 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x65bb02ea [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x314895cc [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x6819d882 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x179c2eff [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x4c4f0787 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x6e2956cd [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x59fd5fc4 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x14aad27 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x5f9d8548 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x75f84a4f [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x12006b8f [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x48882525 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x5fdd9aa8 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x6d6dd615 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x4153e5bc [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x5477c18e [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x6e4cfa5b [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x7c3ed486 [0191.654] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x293cde4c [0191.655] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x33447a57 [0191.655] RtlRandomEx (in: Seed=0x989fd08 | out: Seed=0x989fd08) returned 0x36634158 [0191.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0191.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b3df28 [0191.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b41b30 [0191.663] ReadFile (in: hFile=0x153c, lpBuffer=0x7b3df28, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0x989fd04, lpOverlapped=0x0 | out: lpBuffer=0x7b3df28*, lpNumberOfBytesRead=0x989fd04*=0xdf, lpOverlapped=0x0) returned 1 [0191.665] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.665] WriteFile (in: hFile=0x153c, lpBuffer=0x7b41b30*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x989fd08, lpOverlapped=0x0 | out: lpBuffer=0x7b41b30*, lpNumberOfBytesWritten=0x989fd08*=0xdf, lpOverlapped=0x0) returned 1 [0194.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0194.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0194.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0194.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b41b30) returned 1 [0194.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3df28) returned 1 [0194.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0194.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ce0) returned 1 [0194.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0194.864] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.864] WriteFile (in: hFile=0x153c, lpBuffer=0x7a38930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x989fd90, lpOverlapped=0x0 | out: lpBuffer=0x7a38930*, lpNumberOfBytesWritten=0x989fd90*=0x10c, lpOverlapped=0x0) returned 1 [0195.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb82a8 [0195.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e3a0 [0195.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca008 [0195.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca008) returned 1 [0195.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca008 [0195.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0195.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0195.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0195.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0195.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82a8) returned 1 [0195.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2da00 [0195.488] sprintf (in: _Dest=0x7a2da00, _Format="%c%c" | out: _Dest="82") returned 2 [0195.488] sprintf (in: _Dest=0x7a2da02, _Format="%c%c" | out: _Dest="83") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da04, _Format="%c%c" | out: _Dest="47") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da06, _Format="%c%c" | out: _Dest="a9") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da08, _Format="%c%c" | out: _Dest="bc") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da0a, _Format="%c%c" | out: _Dest="83") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da0c, _Format="%c%c" | out: _Dest="d6") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da0e, _Format="%c%c" | out: _Dest="5f") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da10, _Format="%c%c" | out: _Dest="1a") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da12, _Format="%c%c" | out: _Dest="24") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da14, _Format="%c%c" | out: _Dest="7f") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da16, _Format="%c%c" | out: _Dest="7b") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da18, _Format="%c%c" | out: _Dest="4c") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da1a, _Format="%c%c" | out: _Dest="af") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da1c, _Format="%c%c" | out: _Dest="29") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da1e, _Format="%c%c" | out: _Dest="ae") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da20, _Format="%c%c" | out: _Dest="b6") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da22, _Format="%c%c" | out: _Dest="4b") returned 2 [0195.489] sprintf (in: _Dest=0x7a2da24, _Format="%c%c" | out: _Dest="92") returned 2 [0195.490] sprintf (in: _Dest=0x7a2da26, _Format="%c%c" | out: _Dest="49") returned 2 [0195.490] sprintf (in: _Dest=0x7a2da28, _Format="%c%c" | out: _Dest="2f") returned 2 [0195.490] sprintf (in: _Dest=0x7a2da2a, _Format="%c%c" | out: _Dest="f8") returned 2 [0195.490] sprintf (in: _Dest=0x7a2da2c, _Format="%c%c" | out: _Dest="10") returned 2 [0195.490] sprintf (in: _Dest=0x7a2da2e, _Format="%c%c" | out: _Dest="9d") returned 2 [0195.490] sprintf (in: _Dest=0x7a2da30, _Format="%c%c" | out: _Dest="5a") returned 2 [0195.490] sprintf (in: _Dest=0x7a2da32, _Format="%c%c" | out: _Dest="42") returned 2 [0195.490] RtlInitAnsiString (in: DestinationString=0x989fd18, SourceString="828347a9bc83d65f1a247f7b4caf29aeb64b92492ff8109d5a42" | out: DestinationString="828347a9bc83d65f1a247f7b4caf29aeb64b92492ff8109d5a42") [0195.490] RtlAnsiStringToUnicodeString (in: DestinationString=0x989fd10, SourceString="828347a9bc83d65f1a247f7b4caf29aeb64b92492ff8109d5a42", AllocateDestinationString=1 | out: DestinationString="828347a9bc83d65f1a247f7b4caf29aeb64b92492ff8109d5a42") returned 0x0 [0195.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e580 [0195.490] wcscat (in: _Dest=0x3eca420, _Source="828347a9bc83d" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\828347a9bc83d") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\828347a9bc83d" [0195.490] wcscat (in: _Dest=0x3eca420, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\828347a9bc83d.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\828347a9bc83d.68814f" [0195.490] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\828347a9bc83d.68814f", NtPathName=0x989fd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\828347a9bc83d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3140 [0195.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3140) returned 1 [0195.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35360) returned 1 [0195.982] NtQueryInformationFile (in: FileHandle=0x153c, IoStatusBlock=0x989fce0, FileInformation=0x989fce8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x989fce0, FileInformation=0x989fce8) returned 0x0 [0195.983] NtSetInformationFile (FileHandle=0x153c, IoStatusBlock=0x989fce0, FileInformation=0x989fce8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca420) returned 1 [0196.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0196.063] FlushFileBuffers (hFile=0x153c) returned 1 [0196.133] CloseHandle (hObject=0x153c) returned 1 [0196.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbe710 [0196.191] wcscpy (in: _Dest=0x7cbe710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\" [0196.191] wcscat (in: _Dest=0x7cbe710, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\68814F-Readme.txt" [0196.191] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\68814f-readme.txt")) returned 0xffffffff [0196.191] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0196.332] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x989fd24, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x989fd24*=0x8b9, lpOverlapped=0x0) returned 1 [0196.334] CloseHandle (hObject=0x1140) returned 1 [0196.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe710) returned 1 [0196.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55150) returned 1 Thread: id = 5898 os_tid = 0x111c [0185.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json")) returned 0x2020 [0187.620] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", dwFileAttributes=0x20) returned 1 [0194.680] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe64 [0194.681] GetFileSizeEx (in: hFile=0xe64, lpFileSize=0xb4efd4c | out: lpFileSize=0xb4efd4c*=2803) returned 1 [0194.681] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0xaef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.681] ReadFile (in: hFile=0xe64, lpBuffer=0xb4efd28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb4efd38, lpOverlapped=0x0 | out: lpBuffer=0xb4efd28*, lpNumberOfBytesRead=0xb4efd38*=0x4, lpOverlapped=0x0) returned 1 [0194.684] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f88 [0194.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0194.684] NtQuerySystemTime (in: CurrentTime=0xb4efcc0 | out: CurrentTime=0xb4efcc0*=132462177732672000) returned 0x0 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x3bcf9500 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x2d3febc0 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x56219ee6 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x22babb77 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x540e2bff [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x4e325786 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x19b75641 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x45d1ead7 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x22bee066 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x12f3d74 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x48701e1a [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x55447c92 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x44e6636e [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x4d0c83 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x4bc5448f [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x7a951e8d [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x1525c571 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x2d959d40 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x44af17ff [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x21c2306 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x2ad5b527 [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x1bc4de4c [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x24fd666a [0194.684] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x26268103 [0194.685] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x52067a4d [0194.685] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x3581dcf [0194.685] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x2c212dab [0194.685] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x6fe776dd [0194.685] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x1dcfaf70 [0194.685] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x3967803d [0194.685] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x653c54fb [0194.685] RtlRandomEx (in: Seed=0xb4efcb8 | out: Seed=0xb4efcb8) returned 0x488da326 [0194.693] ReadFile (in: hFile=0xe64, lpBuffer=0x10d7d0c0, nNumberOfBytesToRead=0xaf3, lpNumberOfBytesRead=0xb4efcb4, lpOverlapped=0x0 | out: lpBuffer=0x10d7d0c0*, lpNumberOfBytesRead=0xb4efcb4*=0xaf3, lpOverlapped=0x0) returned 1 [0194.693] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.693] WriteFile (in: hFile=0xe64, lpBuffer=0x10d80cc8*, nNumberOfBytesToWrite=0xaf3, lpNumberOfBytesWritten=0xb4efcb8, lpOverlapped=0x0 | out: lpBuffer=0x10d80cc8*, lpNumberOfBytesWritten=0xb4efcb8*=0xaf3, lpOverlapped=0x0) returned 1 [0199.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb210 [0199.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edddf8 [0199.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edddf8) returned 1 [0199.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d80cc8) returned 1 [0199.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d7d0c0) returned 1 [0199.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0199.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e567f8) returned 1 [0199.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7a2d880 [0199.296] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.296] WriteFile (in: hFile=0xe64, lpBuffer=0x3d54f00*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xb4efd40, lpOverlapped=0x0 | out: lpBuffer=0x3d54f00*, lpNumberOfBytesWritten=0xb4efd40*=0x11a, lpOverlapped=0x0) returned 1 [0200.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0200.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0200.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37980 [0200.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0200.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b28 [0200.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b28) returned 1 [0200.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6f68 [0200.157] sprintf (in: _Dest=0x2fe6f68, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f6a, _Format="%c%c" | out: _Dest="f5") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f6c, _Format="%c%c" | out: _Dest="27") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f6e, _Format="%c%c" | out: _Dest="31") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f70, _Format="%c%c" | out: _Dest="71") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f72, _Format="%c%c" | out: _Dest="2d") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f74, _Format="%c%c" | out: _Dest="15") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f76, _Format="%c%c" | out: _Dest="7c") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f78, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f7a, _Format="%c%c" | out: _Dest="0f") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f7c, _Format="%c%c" | out: _Dest="ad") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f7e, _Format="%c%c" | out: _Dest="28") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f80, _Format="%c%c" | out: _Dest="f0") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f82, _Format="%c%c" | out: _Dest="b0") returned 2 [0200.157] sprintf (in: _Dest=0x2fe6f84, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f86, _Format="%c%c" | out: _Dest="43") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f88, _Format="%c%c" | out: _Dest="9e") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f8a, _Format="%c%c" | out: _Dest="92") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f8c, _Format="%c%c" | out: _Dest="de") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f8e, _Format="%c%c" | out: _Dest="ed") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f90, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f92, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f94, _Format="%c%c" | out: _Dest="e2") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f96, _Format="%c%c" | out: _Dest="bf") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f98, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f9a, _Format="%c%c" | out: _Dest="4f") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f9c, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6f9e, _Format="%c%c" | out: _Dest="82") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fa0, _Format="%c%c" | out: _Dest="05") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fa2, _Format="%c%c" | out: _Dest="bd") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fa4, _Format="%c%c" | out: _Dest="09") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fa6, _Format="%c%c" | out: _Dest="8d") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fa8, _Format="%c%c" | out: _Dest="85") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6faa, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fac, _Format="%c%c" | out: _Dest="31") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fae, _Format="%c%c" | out: _Dest="9f") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fb0, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fb2, _Format="%c%c" | out: _Dest="1b") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fb4, _Format="%c%c" | out: _Dest="cb") returned 2 [0200.158] sprintf (in: _Dest=0x2fe6fb6, _Format="%c%c" | out: _Dest="85") returned 2 [0200.158] RtlInitAnsiString (in: DestinationString=0xb4efcc8, SourceString="b3f52731712d157cee0fad28f0b0e8439e92deedacf1e2bfa84fff8205bd098d854a319fe31bcb85" | out: DestinationString="b3f52731712d157cee0fad28f0b0e8439e92deedacf1e2bfa84fff8205bd098d854a319fe31bcb85") [0200.158] RtlAnsiStringToUnicodeString (in: DestinationString=0xb4efcc0, SourceString="b3f52731712d157cee0fad28f0b0e8439e92deedacf1e2bfa84fff8205bd098d854a319fe31bcb85", AllocateDestinationString=1 | out: DestinationString="b3f52731712d157cee0fad28f0b0e8439e92deedacf1e2bfa84fff8205bd098d854a319fe31bcb85") returned 0x0 [0200.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a67320 [0200.159] wcscat (in: _Dest=0x3eca690, _Source="b3f52731712d157cee0f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\b3f52731712d157cee0f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\b3f52731712d157cee0f" [0200.159] wcscat (in: _Dest=0x3eca690, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\b3f52731712d157cee0f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\b3f52731712d157cee0f.68814f" [0200.159] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\b3f52731712d157cee0f.68814f", NtPathName=0xb4efcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\b3f52731712d157cee0f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e0ad70 [0200.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ad70) returned 1 [0200.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccb160) returned 1 [0200.637] NtQueryInformationFile (in: FileHandle=0xe64, IoStatusBlock=0xb4efc90, FileInformation=0xb4efc98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb4efc90, FileInformation=0xb4efc98) returned 0x0 [0200.637] NtSetInformationFile (FileHandle=0xe64, IoStatusBlock=0xb4efc90, FileInformation=0xb4efc98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0200.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca690) returned 1 [0200.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67320) returned 1 [0200.964] FlushFileBuffers (hFile=0xe64) returned 1 [0200.970] CloseHandle (hObject=0xe64) returned 1 [0201.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cd65e8 [0201.241] wcscpy (in: _Dest=0x7cd65e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0201.241] wcscat (in: _Dest=0x7cd65e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\68814F-Readme.txt" [0201.241] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\68814f-readme.txt")) returned 0x2020 [0201.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd65e8) returned 1 [0201.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81478) returned 1 Thread: id = 5899 os_tid = 0x1120 [0185.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json")) returned 0x2020 [0187.326] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0190.633] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x191c [0190.633] GetFileSizeEx (in: hFile=0x191c, lpFileSize=0xb36f8bc | out: lpFileSize=0xb36f8bc*=17492) returned 1 [0190.633] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x4450, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.633] ReadFile (in: hFile=0x191c, lpBuffer=0xb36f898, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb36f8a8, lpOverlapped=0x0 | out: lpBuffer=0xb36f898*, lpNumberOfBytesRead=0xb36f8a8*=0x4, lpOverlapped=0x0) returned 1 [0190.637] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0190.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb850 [0190.637] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd628 [0190.637] NtQuerySystemTime (in: CurrentTime=0xb36f830 | out: CurrentTime=0xb36f830*=132462177692112000) returned 0x0 [0190.637] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x615366bd [0190.637] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x33c6a706 [0190.637] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x35ec8e6c [0190.637] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x3fb8b01b [0190.637] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x25bee6c9 [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0xe5d02dd [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x6bb97644 [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x76290baf [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x6535be9b [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x460deb8f [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x299e25a9 [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x5e4eaf3e [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x2bfd4380 [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x23b4cb7a [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x3740f2cd [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x13056fac [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x44fcccf [0190.638] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x535982e7 [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x22533639 [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x5039dd5 [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0xaf074c9 [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x7d49b12a [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x18054128 [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x12e159dc [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x4a54e14b [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x4c4a521f [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x5dc97540 [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x11003f0a [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x6030864c [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x697142e5 [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0xae9ae33 [0190.639] RtlRandomEx (in: Seed=0xb36f828 | out: Seed=0xb36f828) returned 0x42238ab5 [0190.654] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.654] ReadFile (in: hFile=0x191c, lpBuffer=0x7b9eb90, nNumberOfBytesToRead=0x3c00, lpNumberOfBytesRead=0xb36f830, lpOverlapped=0x0 | out: lpBuffer=0x7b9eb90*, lpNumberOfBytesRead=0xb36f830*=0x3c00, lpOverlapped=0x0) returned 1 [0190.656] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25c50 [0190.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e0d0 [0190.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0190.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb800) returned 1 [0190.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba2798 [0190.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0190.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd628 [0190.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd628) returned 1 [0190.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0190.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25c50) returned 1 [0190.657] WriteFile (in: hFile=0x191c, lpBuffer=0x7ba2798*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0xb36f830, lpOverlapped=0x0 | out: lpBuffer=0x7ba2798*, lpNumberOfBytesWritten=0xb36f830*=0x3c00, lpOverlapped=0x0) returned 1 [0192.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba2798) returned 1 [0192.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9eb90) returned 1 [0192.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a25e48 [0192.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a257d0 [0192.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e7d8 [0192.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0192.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5db0) returned 1 [0192.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a25db8 [0192.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0192.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0192.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3038) returned 1 [0192.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0192.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a257d0) returned 1 [0192.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d54498 [0192.508] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.508] WriteFile (in: hFile=0x191c, lpBuffer=0x3d54498*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xb36f8b0, lpOverlapped=0x0 | out: lpBuffer=0x3d54498*, lpNumberOfBytesWritten=0xb36f8b0*=0x11e, lpOverlapped=0x0) returned 1 [0192.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb82f0 [0192.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd600 [0192.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd600) returned 1 [0192.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79720 [0192.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd600 [0192.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede050 [0192.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede050) returned 1 [0192.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82f0) returned 1 [0192.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1f358 [0192.661] sprintf (in: _Dest=0x3e1f358, _Format="%c%c" | out: _Dest="01") returned 2 [0192.661] sprintf (in: _Dest=0x3e1f35a, _Format="%c%c" | out: _Dest="56") returned 2 [0192.661] sprintf (in: _Dest=0x3e1f35c, _Format="%c%c" | out: _Dest="47") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f35e, _Format="%c%c" | out: _Dest="8b") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f360, _Format="%c%c" | out: _Dest="d9") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f362, _Format="%c%c" | out: _Dest="85") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f364, _Format="%c%c" | out: _Dest="a5") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f366, _Format="%c%c" | out: _Dest="40") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f368, _Format="%c%c" | out: _Dest="9e") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f36a, _Format="%c%c" | out: _Dest="fc") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f36c, _Format="%c%c" | out: _Dest="fc") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f36e, _Format="%c%c" | out: _Dest="2f") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f370, _Format="%c%c" | out: _Dest="af") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f372, _Format="%c%c" | out: _Dest="f4") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f374, _Format="%c%c" | out: _Dest="bc") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f376, _Format="%c%c" | out: _Dest="2c") returned 2 [0192.662] sprintf (in: _Dest=0x3e1f378, _Format="%c%c" | out: _Dest="96") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f37a, _Format="%c%c" | out: _Dest="fd") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f37c, _Format="%c%c" | out: _Dest="24") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f37e, _Format="%c%c" | out: _Dest="0c") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f380, _Format="%c%c" | out: _Dest="05") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f382, _Format="%c%c" | out: _Dest="36") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f384, _Format="%c%c" | out: _Dest="b2") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f386, _Format="%c%c" | out: _Dest="cb") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f388, _Format="%c%c" | out: _Dest="d6") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f38a, _Format="%c%c" | out: _Dest="9f") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f38c, _Format="%c%c" | out: _Dest="db") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f38e, _Format="%c%c" | out: _Dest="07") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f390, _Format="%c%c" | out: _Dest="3a") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f392, _Format="%c%c" | out: _Dest="3d") returned 2 [0192.663] sprintf (in: _Dest=0x3e1f394, _Format="%c%c" | out: _Dest="1b") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f396, _Format="%c%c" | out: _Dest="08") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f398, _Format="%c%c" | out: _Dest="a2") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f39a, _Format="%c%c" | out: _Dest="2d") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f39c, _Format="%c%c" | out: _Dest="58") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f39e, _Format="%c%c" | out: _Dest="a7") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f3a0, _Format="%c%c" | out: _Dest="13") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f3a2, _Format="%c%c" | out: _Dest="99") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f3a4, _Format="%c%c" | out: _Dest="68") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f3a6, _Format="%c%c" | out: _Dest="53") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f3a8, _Format="%c%c" | out: _Dest="41") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f3aa, _Format="%c%c" | out: _Dest="6a") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f3ac, _Format="%c%c" | out: _Dest="73") returned 2 [0192.664] sprintf (in: _Dest=0x3e1f3ae, _Format="%c%c" | out: _Dest="b8") returned 2 [0192.664] RtlInitAnsiString (in: DestinationString=0xb36f838, SourceString="0156478bd985a5409efcfc2faff4bc2c96fd240c0536b2cbd69fdb073a3d1b08a22d58a713996853416a73b8" | out: DestinationString="0156478bd985a5409efcfc2faff4bc2c96fd240c0536b2cbd69fdb073a3d1b08a22d58a713996853416a73b8") [0192.664] RtlAnsiStringToUnicodeString (in: DestinationString=0xb36f830, SourceString="0156478bd985a5409efcfc2faff4bc2c96fd240c0536b2cbd69fdb073a3d1b08a22d58a713996853416a73b8", AllocateDestinationString=1 | out: DestinationString="0156478bd985a5409efcfc2faff4bc2c96fd240c0536b2cbd69fdb073a3d1b08a22d58a713996853416a73b8") returned 0x0 [0192.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333828 [0192.665] RtlFreeAnsiString (AnsiString="0") [0192.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1f358) returned 1 [0192.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79720) returned 1 [0192.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd600) returned 1 [0192.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 [0192.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25db8) returned 1 [0192.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5db0) returned 1 [0192.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb800) returned 1 [0192.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb850) returned 1 [0192.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb990) returned 1 [0192.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8f0) returned 1 [0192.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3ea2d68 [0192.666] wcscat (in: _Dest=0x3ea2d68, _Source="0156478bd985a5409efcfc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\0156478bd985a5409efcfc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\0156478bd985a5409efcfc" [0192.666] wcscat (in: _Dest=0x3ea2d68, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\0156478bd985a5409efcfc.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\0156478bd985a5409efcfc.68814f" [0192.666] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\0156478bd985a5409efcfc.68814f", NtPathName=0xb36f828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\0156478bd985a5409efcfc.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e0b020 [0192.667] NtSetInformationFile (FileHandle=0x191c, IoStatusBlock=0xb36f830, FileInformation=0x3e0b020, Length=0x148, FileInformationClass=0xa) returned 0x0 [0193.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b020) returned 1 [0193.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6670) returned 1 [0193.131] NtQueryInformationFile (in: FileHandle=0x191c, IoStatusBlock=0xb36f800, FileInformation=0xb36f808, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb36f800, FileInformation=0xb36f808) returned 0x0 [0193.131] NtSetInformationFile (FileHandle=0x191c, IoStatusBlock=0xb36f800, FileInformation=0xb36f808, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0193.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 [0193.133] FlushFileBuffers (hFile=0x191c) returned 1 [0193.217] CloseHandle (hObject=0x191c) returned 1 [0193.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d553a0 [0193.223] wcscpy (in: _Dest=0x3d553a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\" [0193.223] wcscat (in: _Dest=0x3d553a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\68814F-Readme.txt" [0193.223] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\68814f-readme.txt")) returned 0xffffffff [0193.224] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc8 [0193.275] WriteFile (in: hFile=0x1bc8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb36f844, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb36f844*=0x8b9, lpOverlapped=0x0) returned 1 [0193.277] CloseHandle (hObject=0x1bc8) returned 1 [0193.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0193.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca420) returned 1 Thread: id = 5900 os_tid = 0x1124 [0185.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg")) returned 0x20 [0185.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg", dwFileAttributes=0x20) returned 0 [0185.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.849] GetLastError () returned 0x5 [0185.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg", dwFileAttributes=0x20) returned 0 [0185.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafcb8) returned 1 Thread: id = 5901 os_tid = 0x1128 [0185.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg")) returned 0x20 [0185.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG", dwFileAttributes=0x20) returned 0 [0185.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.868] GetLastError () returned 0x5 [0185.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG", dwFileAttributes=0x20) returned 0 [0185.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc48d0) returned 1 Thread: id = 5902 os_tid = 0x112c [0185.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg")) returned 0x20 [0185.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG", dwFileAttributes=0x20) returned 0 [0185.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.884] GetLastError () returned 0x5 [0185.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG", dwFileAttributes=0x20) returned 0 [0185.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4c70) returned 1 Thread: id = 5903 os_tid = 0x1130 [0185.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg")) returned 0x20 [0185.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG", dwFileAttributes=0x20) returned 0 [0185.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.901] GetLastError () returned 0x5 [0185.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG", dwFileAttributes=0x20) returned 0 [0185.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4530) returned 1 Thread: id = 5904 os_tid = 0x1134 [0185.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg")) returned 0x20 [0185.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG", dwFileAttributes=0x20) returned 0 [0185.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.917] GetLastError () returned 0x5 [0185.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG", dwFileAttributes=0x20) returned 0 [0185.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 5905 os_tid = 0x1138 [0185.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg")) returned 0x20 [0187.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG", dwFileAttributes=0x20) returned 0 [0187.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.105] GetLastError () returned 0x5 [0187.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG", dwFileAttributes=0x20) returned 0 [0187.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc49b8) returned 1 Thread: id = 5906 os_tid = 0x113c [0185.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg")) returned 0x20 [0187.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG", dwFileAttributes=0x20) returned 0 [0187.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.103] GetLastError () returned 0x5 [0187.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG", dwFileAttributes=0x20) returned 0 [0187.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4aa0) returned 1 Thread: id = 5907 os_tid = 0x1140 [0185.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg")) returned 0x20 [0187.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG", dwFileAttributes=0x20) returned 0 [0187.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.129] GetLastError () returned 0x5 [0187.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG", dwFileAttributes=0x20) returned 0 [0187.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64170) returned 1 Thread: id = 5908 os_tid = 0x1144 [0185.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg")) returned 0x20 [0187.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG", dwFileAttributes=0x20) returned 0 [0187.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.128] GetLastError () returned 0x5 [0187.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG", dwFileAttributes=0x20) returned 0 [0187.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 Thread: id = 5909 os_tid = 0x1148 [0185.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg")) returned 0x20 [0187.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg", dwFileAttributes=0x20) returned 0 [0187.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.126] GetLastError () returned 0x5 [0187.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg", dwFileAttributes=0x20) returned 0 [0187.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0ac8) returned 1 Thread: id = 5910 os_tid = 0x114c [0185.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg")) returned 0x20 [0187.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg", dwFileAttributes=0x20) returned 0 [0187.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.124] GetLastError () returned 0x5 [0187.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg", dwFileAttributes=0x20) returned 0 [0187.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db09d8) returned 1 Thread: id = 5911 os_tid = 0x1150 [0185.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg")) returned 0x20 [0187.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG", dwFileAttributes=0x20) returned 0 [0187.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.123] GetLastError () returned 0x5 [0187.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG", dwFileAttributes=0x20) returned 0 [0187.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 Thread: id = 5912 os_tid = 0xb88 [0185.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg")) returned 0x20 [0187.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG", dwFileAttributes=0x20) returned 0 [0187.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.121] GetLastError () returned 0x5 [0187.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG", dwFileAttributes=0x20) returned 0 [0187.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4448) returned 1 Thread: id = 5913 os_tid = 0x1170 [0185.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg")) returned 0x20 [0187.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG", dwFileAttributes=0x20) returned 0 [0187.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.119] GetLastError () returned 0x5 [0187.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG", dwFileAttributes=0x20) returned 0 [0187.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64a30) returned 1 Thread: id = 5914 os_tid = 0x1174 [0185.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg")) returned 0x20 [0187.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG", dwFileAttributes=0x20) returned 0 [0187.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.131] GetLastError () returned 0x5 [0187.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG", dwFileAttributes=0x20) returned 0 [0187.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4f28) returned 1 Thread: id = 5915 os_tid = 0x1178 [0185.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg")) returned 0x20 [0187.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG", dwFileAttributes=0x20) returned 0 [0187.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.118] GetLastError () returned 0x5 [0187.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG", dwFileAttributes=0x20) returned 0 [0187.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4618) returned 1 Thread: id = 5916 os_tid = 0x117c [0185.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg")) returned 0x20 [0187.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG", dwFileAttributes=0x20) returned 0 [0187.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.132] GetLastError () returned 0x5 [0187.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG", dwFileAttributes=0x20) returned 0 [0187.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5010) returned 1 Thread: id = 5917 os_tid = 0x11dc [0185.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg")) returned 0x20 [0187.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG", dwFileAttributes=0x20) returned 0 [0187.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.116] GetLastError () returned 0x5 [0187.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG", dwFileAttributes=0x20) returned 0 [0187.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 5918 os_tid = 0x11e8 [0185.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg")) returned 0x20 [0187.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg", dwFileAttributes=0x20) returned 0 [0187.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.114] GetLastError () returned 0x5 [0187.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg", dwFileAttributes=0x20) returned 0 [0187.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae3e8) returned 1 Thread: id = 5919 os_tid = 0x11ec [0185.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg")) returned 0x20 [0187.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg", dwFileAttributes=0x20) returned 0 [0187.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.113] GetLastError () returned 0x5 [0187.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg", dwFileAttributes=0x20) returned 0 [0187.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0e88) returned 1 Thread: id = 5920 os_tid = 0x11f0 [0185.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg")) returned 0x20 [0187.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG", dwFileAttributes=0x20) returned 0 [0187.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.111] GetLastError () returned 0x5 [0187.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG", dwFileAttributes=0x20) returned 0 [0187.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc50f8) returned 1 Thread: id = 5921 os_tid = 0x11f8 [0185.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg")) returned 0x20 [0187.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG", dwFileAttributes=0x20) returned 0 [0187.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.100] GetLastError () returned 0x5 [0187.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG", dwFileAttributes=0x20) returned 0 [0187.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc51e0) returned 1 Thread: id = 5922 os_tid = 0x808 [0185.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg")) returned 0x20 [0187.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG", dwFileAttributes=0x20) returned 0 [0187.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.109] GetLastError () returned 0x5 [0187.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG", dwFileAttributes=0x20) returned 0 [0187.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc52c8) returned 1 Thread: id = 5923 os_tid = 0x898 [0185.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg")) returned 0x20 [0187.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg", dwFileAttributes=0x20) returned 0 [0187.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.108] GetLastError () returned 0x5 [0187.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg", dwFileAttributes=0x20) returned 0 [0187.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f7ac8) returned 1 Thread: id = 5924 os_tid = 0x8a8 [0185.936] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json")) returned 0x2020 [0186.766] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0189.242] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a38 [0191.037] GetFileSizeEx (in: hFile=0x1a38, lpFileSize=0xcc0f9fc | out: lpFileSize=0xcc0f9fc*=332) returned 1 [0191.038] SetFilePointerEx (in: hFile=0x1a38, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.038] ReadFile (in: hFile=0x1a38, lpBuffer=0xcc0f9d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcc0f9e8, lpOverlapped=0x0 | out: lpBuffer=0xcc0f9d8*, lpNumberOfBytesRead=0xcc0f9e8*=0x4, lpOverlapped=0x0) returned 1 [0191.040] SetFilePointerEx (in: hFile=0x1a38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0191.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0191.042] NtQuerySystemTime (in: CurrentTime=0xcc0f970 | out: CurrentTime=0xcc0f970*=132462177696168000) returned 0x0 [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x3f292f18 [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x4ffbb2f6 [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x13c39888 [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x57a92965 [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x48ce8223 [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0xcbcc7bc [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x29b8e00a [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x74943998 [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x498752bc [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x7e88a6bc [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x5c6b5cbf [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x76638447 [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x59057285 [0191.042] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x1c5f3a88 [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x63c3b45f [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x31abfc6d [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x69f11c0c [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x74ff3a02 [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x6e334ffb [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x7006f553 [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x3d69fd1f [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x29c95c7c [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x455f0b4d [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x3f64cba4 [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x58c40ec0 [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x1cab515a [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x6572a67b [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x617ad943 [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x7c7ad308 [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x8546f68 [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x1226c861 [0191.043] RtlRandomEx (in: Seed=0xcc0f968 | out: Seed=0xcc0f968) returned 0x612a68a1 [0191.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0191.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0191.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0191.146] ReadFile (in: hFile=0x1a38, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x14c, lpNumberOfBytesRead=0xcc0f964, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0xcc0f964*=0x14c, lpOverlapped=0x0) returned 1 [0191.146] SetFilePointerEx (in: hFile=0x1a38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.146] WriteFile (in: hFile=0x1a38, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0xcc0f968, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0xcc0f968*=0x14c, lpOverlapped=0x0) returned 1 [0192.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0192.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4118 [0192.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4118) returned 1 [0192.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0192.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0192.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0192.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41650) returned 1 [0192.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37920 [0192.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41650 [0192.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd88 [0192.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4118 [0192.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4118) returned 1 [0192.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37950 [0192.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4118 [0192.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e08 [0192.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e08) returned 1 [0192.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0192.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41650) returned 1 [0192.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbd1a0 [0192.523] SetFilePointerEx (in: hFile=0x1a38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.523] WriteFile (in: hFile=0x1a38, lpBuffer=0x7cbd1a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcc0f9f0, lpOverlapped=0x0 | out: lpBuffer=0x7cbd1a0*, lpNumberOfBytesWritten=0xcc0f9f0*=0x10c, lpOverlapped=0x0) returned 1 [0192.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0192.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0192.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3560 [0192.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0192.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0192.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0192.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.677] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="52") returned 2 [0192.677] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="80") returned 2 [0192.677] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="a1") returned 2 [0192.677] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="67") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="87") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="90") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="27") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="d7") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="13") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="bb") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="2d") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="26") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="21") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="4f") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="44") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="38") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="10") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="01") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="21") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="0c") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="af") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="9b") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="61") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="1a") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="97") returned 2 [0192.678] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="a3") returned 2 [0192.679] RtlInitAnsiString (in: DestinationString=0xcc0f978, SourceString="5280a167879027d713bb2d26214f44381001210caf9b611a97a3" | out: DestinationString="5280a167879027d713bb2d26214f44381001210caf9b611a97a3") [0192.679] RtlAnsiStringToUnicodeString (in: DestinationString=0xcc0f970, SourceString="5280a167879027d713bb2d26214f44381001210caf9b611a97a3", AllocateDestinationString=1 | out: DestinationString="5280a167879027d713bb2d26214f44381001210caf9b611a97a3") returned 0x0 [0192.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e9b8 [0192.679] RtlFreeAnsiString (AnsiString="5") [0192.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0192.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0192.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd1a0) returned 1 [0192.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37950) returned 1 [0192.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4118) returned 1 [0192.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37920) returned 1 [0192.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f48) returned 1 [0192.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0192.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0192.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0192.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbebb0 [0192.680] wcscat (in: _Dest=0x7cbebb0, _Source="5280a16787902" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\5280a16787902") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\5280a16787902" [0192.680] wcscat (in: _Dest=0x7cbebb0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\5280a16787902.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\5280a16787902.68814f" [0192.680] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\5280a16787902.68814f", NtPathName=0xcc0f968, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\5280a16787902.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea38f0 [0192.680] NtSetInformationFile (FileHandle=0x1a38, IoStatusBlock=0xcc0f970, FileInformation=0x3ea38f0, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38f0) returned 1 [0192.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef93b8) returned 1 [0192.770] NtQueryInformationFile (in: FileHandle=0x1a38, IoStatusBlock=0xcc0f940, FileInformation=0xcc0f948, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcc0f940, FileInformation=0xcc0f948) returned 0x0 [0192.770] NtSetInformationFile (FileHandle=0x1a38, IoStatusBlock=0xcc0f940, FileInformation=0xcc0f948, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbebb0) returned 1 [0192.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0192.862] FlushFileBuffers (hFile=0x1a38) returned 1 [0192.880] CloseHandle (hObject=0x1a38) returned 1 [0192.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbf4f0 [0192.972] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\" [0192.972] wcscat (in: _Dest=0x7cbf4f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\68814F-Readme.txt" [0192.972] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\68814f-readme.txt")) returned 0xffffffff [0192.972] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\el\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac4 [0192.994] WriteFile (in: hFile=0x1ac4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcc0f984, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcc0f984*=0x8b9, lpOverlapped=0x0) returned 1 [0193.003] CloseHandle (hObject=0x1ac4) returned 1 [0193.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0193.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b817f0) returned 1 Thread: id = 5925 os_tid = 0x8b8 [0185.936] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json")) returned 0x2020 [0187.058] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0193.279] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc8 [0193.280] GetFileSizeEx (in: hFile=0x1bc8, lpFileSize=0xd58fbb4 | out: lpFileSize=0xd58fbb4*=261) returned 1 [0193.280] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x101, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.280] ReadFile (in: hFile=0x1bc8, lpBuffer=0xd58fb90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd58fba0, lpOverlapped=0x0 | out: lpBuffer=0xd58fb90*, lpNumberOfBytesRead=0xd58fba0*=0x4, lpOverlapped=0x0) returned 1 [0193.282] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0193.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0193.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0193.282] NtQuerySystemTime (in: CurrentTime=0xd58fb28 | out: CurrentTime=0xd58fb28*=132462177718632000) returned 0x0 [0193.282] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x3eec343b [0193.282] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x39af6ea3 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x12a2b981 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x206f32a9 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0xcbc2232 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x58f2ef42 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x3901d22c [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x2264d401 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x3d1888e3 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x4a393b92 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x104b8ff2 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x33bda78f [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x63f04d20 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x7ddf38a3 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x6ae0109f [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x947d640 [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x384f19ff [0193.283] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x264e043c [0193.284] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x35a641c6 [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x7701fb24 [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x74edb1f2 [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x5aafe0bd [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x67ba4509 [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x1fc0f32b [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x33ce116f [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x6d19675f [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x44d64fd7 [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x46dc2ade [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x4a5f3e40 [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x4c7547cf [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x4e5757b9 [0193.285] RtlRandomEx (in: Seed=0xd58fb20 | out: Seed=0xd58fb20) returned 0x73ce18a2 [0194.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5d0) returned 1 [0194.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b9af88 [0194.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b9eb90 [0194.859] ReadFile (in: hFile=0x1bc8, lpBuffer=0x7b9af88, nNumberOfBytesToRead=0x105, lpNumberOfBytesRead=0xd58fb1c, lpOverlapped=0x0 | out: lpBuffer=0x7b9af88*, lpNumberOfBytesRead=0xd58fb1c*=0x105, lpOverlapped=0x0) returned 1 [0194.859] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.859] WriteFile (in: hFile=0x1bc8, lpBuffer=0x7b9eb90*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0xd58fb20, lpOverlapped=0x0 | out: lpBuffer=0x7b9eb90*, lpNumberOfBytesWritten=0xd58fb20*=0x105, lpOverlapped=0x0) returned 1 [0196.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3cb8 [0196.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b28 [0196.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b28) returned 1 [0196.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9eb90) returned 1 [0196.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9af88) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0196.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d419b0) returned 1 [0196.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0196.053] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.053] WriteFile (in: hFile=0x1bc8, lpBuffer=0x7cac138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd58fba8, lpOverlapped=0x0 | out: lpBuffer=0x7cac138*, lpNumberOfBytesWritten=0xd58fba8*=0x10c, lpOverlapped=0x0) returned 1 [0196.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d419b0 [0196.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0196.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0196.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0196.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2930 [0196.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0196.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0196.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0196.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0196.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d419b0) returned 1 [0196.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2dfc0 [0196.176] sprintf (in: _Dest=0x7a2dfc0, _Format="%c%c" | out: _Dest="31") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfc2, _Format="%c%c" | out: _Dest="7a") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfc4, _Format="%c%c" | out: _Dest="4a") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfc6, _Format="%c%c" | out: _Dest="67") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfc8, _Format="%c%c" | out: _Dest="cc") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfca, _Format="%c%c" | out: _Dest="f4") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfcc, _Format="%c%c" | out: _Dest="8c") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfce, _Format="%c%c" | out: _Dest="ea") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfd0, _Format="%c%c" | out: _Dest="96") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfd2, _Format="%c%c" | out: _Dest="4b") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfd4, _Format="%c%c" | out: _Dest="11") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfd6, _Format="%c%c" | out: _Dest="f7") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfd8, _Format="%c%c" | out: _Dest="0e") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfda, _Format="%c%c" | out: _Dest="b3") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfdc, _Format="%c%c" | out: _Dest="dc") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfde, _Format="%c%c" | out: _Dest="cc") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfe0, _Format="%c%c" | out: _Dest="57") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfe2, _Format="%c%c" | out: _Dest="57") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfe4, _Format="%c%c" | out: _Dest="f2") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfe6, _Format="%c%c" | out: _Dest="58") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfe8, _Format="%c%c" | out: _Dest="c4") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfea, _Format="%c%c" | out: _Dest="4e") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfec, _Format="%c%c" | out: _Dest="7a") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dfee, _Format="%c%c" | out: _Dest="b9") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dff0, _Format="%c%c" | out: _Dest="61") returned 2 [0196.176] sprintf (in: _Dest=0x7a2dff2, _Format="%c%c" | out: _Dest="b2") returned 2 [0196.176] RtlInitAnsiString (in: DestinationString=0xd58fb30, SourceString="317a4a67ccf48cea964b11f70eb3dccc5757f258c44e7ab961b2" | out: DestinationString="317a4a67ccf48cea964b11f70eb3dccc5757f258c44e7ab961b2") [0196.177] RtlAnsiStringToUnicodeString (in: DestinationString=0xd58fb28, SourceString="317a4a67ccf48cea964b11f70eb3dccc5757f258c44e7ab961b2", AllocateDestinationString=1 | out: DestinationString="317a4a67ccf48cea964b11f70eb3dccc5757f258c44e7ab961b2") returned 0x0 [0196.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e3a0 [0196.177] wcscat (in: _Dest=0x3db8148, _Source="317a4a67ccf48" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\317a4a67ccf48") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\317a4a67ccf48" [0196.177] wcscat (in: _Dest=0x3db8148, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\317a4a67ccf48.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\317a4a67ccf48.68814f" [0196.177] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\317a4a67ccf48.68814f", NtPathName=0xd58fb20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\317a4a67ccf48.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ea2ff8 [0196.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2ff8) returned 1 [0196.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39a88) returned 1 [0196.234] NtQueryInformationFile (in: FileHandle=0x1bc8, IoStatusBlock=0xd58faf8, FileInformation=0xd58fb00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd58faf8, FileInformation=0xd58fb00) returned 0x0 [0196.234] NtSetInformationFile (FileHandle=0x1bc8, IoStatusBlock=0xd58faf8, FileInformation=0xd58fb00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db8148) returned 1 [0196.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0196.261] FlushFileBuffers (hFile=0x1bc8) returned 1 [0196.266] CloseHandle (hObject=0x1bc8) returned 1 [0196.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7b84a70 [0196.282] wcscpy (in: _Dest=0x7b84a70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\" [0196.282] wcscat (in: _Dest=0x7b84a70, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\68814F-Readme.txt" [0196.282] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\68814f-readme.txt")) returned 0xffffffff [0196.283] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0196.304] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd58fb3c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd58fb3c*=0x8b9, lpOverlapped=0x0) returned 1 [0196.321] CloseHandle (hObject=0x1140) returned 1 [0196.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84a70) returned 1 [0196.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81918) returned 1 Thread: id = 5926 os_tid = 0x8c8 [0185.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css")) returned 0x20 [0191.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0191.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.879] GetLastError () returned 0x5 [0192.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0192.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66090) returned 1 Thread: id = 5927 os_tid = 0x8d8 [0185.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css")) returned 0x20 [0191.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0191.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.878] GetLastError () returned 0x5 [0192.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0192.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67480) returned 1 Thread: id = 5928 os_tid = 0x8f8 [0185.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66f00 [0185.939] wcscpy (in: _Dest=0x7a66f00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0185.939] wcscat (in: _Dest=0x7a66f00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0185.939] wcscat (in: _Dest=0x7a66f00, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*" [0185.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a738 [0185.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0191.378] wcscmp (_String1=".", _String2=".") returned 0 [0191.378] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.378] wcscmp (_String1="..", _String2=".") returned 1 [0191.378] wcscmp (_String1="..", _String2="..") returned 0 [0191.378] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0191.379] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0191.379] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0191.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3332e8 [0191.379] wcscpy (in: _Dest=0x3332e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0191.379] wcscat (in: _Dest=0x3332e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0191.379] wcscat (in: _Dest=0x3332e8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" [0199.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3332e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258 [0199.793] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0199.793] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0199.793] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0199.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3336a8 [0199.793] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0199.793] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0199.793] wcscat (in: _Dest=0x3336a8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" [0199.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020 [0199.794] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0199.794] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0199.794] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0199.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0199.795] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis" [0199.795] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\" [0199.795] wcscat (in: _Dest=0x333828, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" [0199.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20 [0199.796] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x7a3a738 | out: lpFindFileData=0x7a3a738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61932d00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61932d00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0199.796] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0199.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a738) returned 1 [0199.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66f00) returned 1 [0199.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e678) returned 1 Thread: id = 5929 os_tid = 0x1588 [0185.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css")) returned 0x20 [0191.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0191.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.878] GetLastError () returned 0x5 [0192.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0192.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a671c0) returned 1 Thread: id = 5930 os_tid = 0xa68 [0185.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css")) returned 0x20 [0194.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0194.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.652] GetLastError () returned 0x5 [0194.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0194.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7378) returned 1 Thread: id = 5931 os_tid = 0x1734 [0185.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css")) returned 0x20 [0191.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0191.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.878] GetLastError () returned 0x5 [0192.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0192.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7208) returned 1 Thread: id = 5932 os_tid = 0x1774 [0185.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif")) returned 0x20 [0191.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0191.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.878] GetLastError () returned 0x5 [0192.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0192.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7c18) returned 1 Thread: id = 5933 os_tid = 0x188c [0185.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif")) returned 0x20 [0187.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0188.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0188.430] GetLastError () returned 0x5 [0188.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0188.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 5934 os_tid = 0x1a60 [0185.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif")) returned 0x20 [0189.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0189.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.525] GetLastError () returned 0x5 [0190.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0190.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff79f0) returned 1 Thread: id = 5935 os_tid = 0x1a68 [0185.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif")) returned 0x20 [0191.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif", dwFileAttributes=0x20) returned 0 [0191.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.833] GetLastError () returned 0x5 [0194.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif", dwFileAttributes=0x20) returned 0 [0194.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3339a8) returned 1 Thread: id = 5936 os_tid = 0x1a70 [0185.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif")) returned 0x20 [0190.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0191.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.894] GetLastError () returned 0x5 [0192.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0194.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334068) returned 1 Thread: id = 5937 os_tid = 0x1aa4 [0185.942] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json")) returned 0x2020 [0186.767] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0189.242] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17c0 [0191.149] GetFileSizeEx (in: hFile=0x17c0, lpFileSize=0xd8bfdcc | out: lpFileSize=0xd8bfdcc*=238) returned 1 [0191.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0191.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0191.149] NtQuerySystemTime (in: CurrentTime=0xd8bfd40 | out: CurrentTime=0xd8bfd40*=132462177697260000) returned 0x0 [0191.149] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0xbe6974b [0191.149] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x99c52a7 [0191.149] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x72aa47b0 [0191.149] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x73e56fba [0191.149] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x35b0cf2b [0191.149] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x34c0eb26 [0191.149] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x1323372f [0191.149] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x2ff3f999 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x1f9806fc [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x11443e61 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x3c75bd50 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x20e4393b [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x244bdf8f [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x5a5ef6eb [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x39916eb6 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0xb731b57 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x144ad066 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x7ced023e [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x623898cf [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x1fde70f [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x5b95cf62 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x4b2d4335 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x320c6631 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x7e3eaa43 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x35b2a5d5 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x49b6e250 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x29d89f70 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x31e813a4 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x73c636ef [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x7bf4476b [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x2660f61 [0191.150] RtlRandomEx (in: Seed=0xd8bfd38 | out: Seed=0xd8bfd38) returned 0x24f30b2c [0191.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0191.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0191.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0191.159] ReadFile (in: hFile=0x17c0, lpBuffer=0x7bf63a0, nNumberOfBytesToRead=0xee, lpNumberOfBytesRead=0xd8bfd34, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesRead=0xd8bfd34*=0xee, lpOverlapped=0x0) returned 1 [0191.161] SetFilePointerEx (in: hFile=0x17c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.161] WriteFile (in: hFile=0x17c0, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0xd8bfd38, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0xd8bfd38*=0xee, lpOverlapped=0x0) returned 1 [0192.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e08 [0192.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0192.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0192.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0192.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0192.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0192.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e30) returned 1 [0192.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a378c0 [0192.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41e30 [0192.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0192.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0192.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0192.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a378f0 [0192.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0192.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0192.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0192.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0192.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e30) returned 1 [0192.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbd2b8 [0192.526] SetFilePointerEx (in: hFile=0x17c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.526] WriteFile (in: hFile=0x17c0, lpBuffer=0x7cbd2b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd8bfdc0, lpOverlapped=0x0 | out: lpBuffer=0x7cbd2b8*, lpNumberOfBytesWritten=0xd8bfdc0*=0x10c, lpOverlapped=0x0) returned 1 [0192.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0192.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0192.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3fd8 [0192.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0192.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0192.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0192.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.692] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="25") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="4a") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="75") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="76") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="d2") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="b9") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="23") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="50") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="08") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="3a") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="6b") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="3e") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="6e") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="7e") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="27") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="c4") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="a6") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="56") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="64") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="82") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="95") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="fb") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="62") returned 2 [0192.692] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="2d") returned 2 [0192.693] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="5f") returned 2 [0192.693] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="24") returned 2 [0192.693] RtlInitAnsiString (in: DestinationString=0xd8bfd48, SourceString="254a7576d2b92350083a6b3e6e7e27c4a656648295fb622d5f24" | out: DestinationString="254a7576d2b92350083a6b3e6e7e27c4a656648295fb622d5f24") [0192.693] RtlAnsiStringToUnicodeString (in: DestinationString=0xd8bfd40, SourceString="254a7576d2b92350083a6b3e6e7e27c4a656648295fb622d5f24", AllocateDestinationString=1 | out: DestinationString="254a7576d2b92350083a6b3e6e7e27c4a656648295fb622d5f24") returned 0x0 [0192.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e058 [0192.693] RtlFreeAnsiString (AnsiString="2") [0192.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0192.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0192.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd2b8) returned 1 [0192.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a378f0) returned 1 [0192.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0192.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a378c0) returned 1 [0192.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e08) returned 1 [0192.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0192.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0192.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0192.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbecd8 [0192.694] wcscat (in: _Dest=0x7cbecd8, _Source="254a7576d2b92" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\254a7576d2b92") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\254a7576d2b92" [0192.694] wcscat (in: _Dest=0x7cbecd8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\254a7576d2b92.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\254a7576d2b92.68814f" [0192.694] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\254a7576d2b92.68814f", NtPathName=0xd8bfd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\254a7576d2b92.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea4330 [0192.694] NtSetInformationFile (FileHandle=0x17c0, IoStatusBlock=0xd8bfd40, FileInformation=0x3ea4330, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4330) returned 1 [0192.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9c58) returned 1 [0192.768] NtQueryInformationFile (in: FileHandle=0x17c0, IoStatusBlock=0xd8bfd10, FileInformation=0xd8bfd18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd8bfd10, FileInformation=0xd8bfd18) returned 0x0 [0192.768] NtSetInformationFile (FileHandle=0x17c0, IoStatusBlock=0xd8bfd10, FileInformation=0xd8bfd18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbecd8) returned 1 [0192.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0192.854] FlushFileBuffers (hFile=0x17c0) returned 1 [0192.880] CloseHandle (hObject=0x17c0) returned 1 [0192.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbf2a0 [0192.974] wcscpy (in: _Dest=0x7cbf2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\" [0192.974] wcscat (in: _Dest=0x7cbf2a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\68814F-Readme.txt" [0192.974] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\68814f-readme.txt")) returned 0xffffffff [0192.975] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lv\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x220c [0192.994] WriteFile (in: hFile=0x220c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd8bfd54, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd8bfd54*=0x8b9, lpOverlapped=0x0) returned 1 [0193.006] CloseHandle (hObject=0x220c) returned 1 [0193.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf2a0) returned 1 [0193.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b827c0) returned 1 Thread: id = 5938 os_tid = 0x1bf0 [0185.942] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json")) returned 0x2020 [0186.768] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0189.242] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1828 [0191.161] GetFileSizeEx (in: hFile=0x1828, lpFileSize=0xd96f844 | out: lpFileSize=0xd96f844*=253) returned 1 [0191.162] SetFilePointerEx (in: hFile=0x1828, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.162] ReadFile (in: hFile=0x1828, lpBuffer=0xd96f820, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd96f830, lpOverlapped=0x0 | out: lpBuffer=0xd96f820*, lpNumberOfBytesRead=0xd96f830*=0x4, lpOverlapped=0x0) returned 1 [0191.163] SetFilePointerEx (in: hFile=0x1828, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0191.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0191.164] NtQuerySystemTime (in: CurrentTime=0xd96f7b8 | out: CurrentTime=0xd96f7b8*=132462177697416000) returned 0x0 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x702f5f05 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x62baa3b1 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x2db7a3d4 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x26e84882 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0xa84ba38 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x48d2fa2c [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x7f099656 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x39042370 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x2463a9ce [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x4c032511 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0xfd77f06 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x269248bf [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x641f03e5 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x3f7750ba [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x61fab59f [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x7dae9e34 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x322dd215 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x5a9dfcce [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x68861863 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x16094b9b [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x78f13ebe [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x338b3d1 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x3755d756 [0191.164] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x4b3918af [0191.165] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x397056c2 [0191.165] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x60dc9b42 [0191.165] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x5af15dd6 [0191.165] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x505dca11 [0191.165] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x3d9a9212 [0191.165] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x46035b11 [0191.165] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x5f7afdbe [0191.165] RtlRandomEx (in: Seed=0xd96f7b0 | out: Seed=0xd96f7b0) returned 0x22c6398b [0191.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0191.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d503a0 [0191.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d53fa8 [0191.173] ReadFile (in: hFile=0x1828, lpBuffer=0x7d503a0, nNumberOfBytesToRead=0xfd, lpNumberOfBytesRead=0xd96f7ac, lpOverlapped=0x0 | out: lpBuffer=0x7d503a0*, lpNumberOfBytesRead=0xd96f7ac*=0xfd, lpOverlapped=0x0) returned 1 [0191.173] SetFilePointerEx (in: hFile=0x1828, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.173] WriteFile (in: hFile=0x1828, lpBuffer=0x7d53fa8*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0xd96f7b0, lpOverlapped=0x0 | out: lpBuffer=0x7d53fa8*, lpNumberOfBytesWritten=0xd96f7b0*=0xfd, lpOverlapped=0x0) returned 1 [0192.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0192.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0192.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0192.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d53fa8) returned 1 [0192.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d503a0) returned 1 [0192.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0192.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b58) returned 1 [0192.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0192.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40b58 [0192.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0192.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0192.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0192.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37590 [0192.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0192.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0192.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0192.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0192.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b58) returned 1 [0192.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbd3d0 [0192.585] SetFilePointerEx (in: hFile=0x1828, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.585] WriteFile (in: hFile=0x1828, lpBuffer=0x7cbd3d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd96f838, lpOverlapped=0x0 | out: lpBuffer=0x7cbd3d0*, lpNumberOfBytesWritten=0xd96f838*=0x10c, lpOverlapped=0x0) returned 1 [0192.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0192.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28b8) returned 1 [0192.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec28b8 [0192.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec48e8 [0192.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0192.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0192.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.714] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="21") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="09") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="61") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="07") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="62") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="3c") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="60") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="ec") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="ad") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="97") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="c3") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="1c") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="ca") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="4f") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="4a") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="00") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="06") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="76") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="f3") returned 2 [0192.714] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="dc") returned 2 [0192.715] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="a3") returned 2 [0192.715] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="79") returned 2 [0192.715] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="92") returned 2 [0192.715] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="06") returned 2 [0192.715] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="49") returned 2 [0192.715] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="a5") returned 2 [0192.715] RtlInitAnsiString (in: DestinationString=0xd96f7c0, SourceString="21096107623c60ecad97c31cca4f4a000676f3dca379920649a5" | out: DestinationString="21096107623c60ecad97c31cca4f4a000676f3dca379920649a5") [0192.715] RtlAnsiStringToUnicodeString (in: DestinationString=0xd96f7b8, SourceString="21096107623c60ecad97c31cca4f4a000676f3dca379920649a5", AllocateDestinationString=1 | out: DestinationString="21096107623c60ecad97c31cca4f4a000676f3dca379920649a5") returned 0x0 [0192.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e1c0 [0192.715] RtlFreeAnsiString (AnsiString="2") [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28b8) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec48e8) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd3d0) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37590) returned 1 [0192.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0192.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37500) returned 1 [0192.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0192.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3808) returned 1 [0192.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30b0) returned 1 [0192.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0192.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbef28 [0192.716] wcscat (in: _Dest=0x7cbef28, _Source="21096107623c6" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\21096107623c6") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\21096107623c6" [0192.716] wcscat (in: _Dest=0x7cbef28, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\21096107623c6.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\21096107623c6.68814f" [0192.716] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\21096107623c6.68814f", NtPathName=0xd96f7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\21096107623c6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3f58 [0192.716] NtSetInformationFile (FileHandle=0x1828, IoStatusBlock=0xd96f7b8, FileInformation=0x3ea3f58, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3f58) returned 1 [0192.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a59678) returned 1 [0192.807] NtQueryInformationFile (in: FileHandle=0x1828, IoStatusBlock=0xd96f788, FileInformation=0xd96f790, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd96f788, FileInformation=0xd96f790) returned 0x0 [0192.807] NtSetInformationFile (FileHandle=0x1828, IoStatusBlock=0xd96f788, FileInformation=0xd96f790, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbef28) returned 1 [0192.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0192.913] FlushFileBuffers (hFile=0x1828) returned 1 [0192.923] CloseHandle (hObject=0x1828) returned 1 [0192.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbecd8 [0192.979] wcscpy (in: _Dest=0x7cbecd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\" [0192.979] wcscat (in: _Dest=0x7cbecd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\68814F-Readme.txt" [0192.979] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\68814f-readme.txt")) returned 0xffffffff [0192.979] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\lt\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d5c [0192.995] WriteFile (in: hFile=0x1d5c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd96f7cc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd96f7cc*=0x8b9, lpOverlapped=0x0) returned 1 [0193.010] CloseHandle (hObject=0x1d5c) returned 1 [0193.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbecd8) returned 1 [0193.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b828e8) returned 1 Thread: id = 5939 os_tid = 0x1bf4 [0185.942] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json")) returned 0x2020 [0187.086] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0188.433] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5ec [0188.433] GetFileSizeEx (in: hFile=0x5ec, lpFileSize=0xc4ffcac | out: lpFileSize=0xc4ffcac*=256) returned 1 [0188.433] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.433] ReadFile (in: hFile=0x5ec, lpBuffer=0xc4ffc88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc4ffc98, lpOverlapped=0x0 | out: lpBuffer=0xc4ffc88*, lpNumberOfBytesRead=0xc4ffc98*=0x4, lpOverlapped=0x0) returned 1 [0188.435] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0188.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0188.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0188.436] NtQuerySystemTime (in: CurrentTime=0xc4ffc20 | out: CurrentTime=0xc4ffc20*=132462177670116000) returned 0x0 [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x7394fbca [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0xd545ee2 [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x5b6dae5f [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0xce3b990 [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x1735d03c [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x62c9c52c [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0xc13c541 [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x369c99ff [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x492f4269 [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x36426718 [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x30e4df4d [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x22e27507 [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x1d36316c [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x1a92e703 [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x17e3af4f [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x7033fd24 [0188.436] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x46b1f0a0 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x51fdac32 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x5c0c6d2 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x55ee291c [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x6ef9d4d [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x1bce2eda [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x510593c6 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x43eeccda [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x1dc07335 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x9c95066 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x30ec4bf4 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0xfaf13c4 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x67bd0c5 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x445b0384 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0xbd87792 [0188.437] RtlRandomEx (in: Seed=0xc4ffc18 | out: Seed=0xc4ffc18) returned 0x5c238ad6 [0188.454] ReadFile (in: hFile=0x5ec, lpBuffer=0x7d797f8, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0xc4ffc14, lpOverlapped=0x0 | out: lpBuffer=0x7d797f8*, lpNumberOfBytesRead=0xc4ffc14*=0x100, lpOverlapped=0x0) returned 1 [0188.454] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.454] WriteFile (in: hFile=0x5ec, lpBuffer=0x7d7d400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xc4ffc18, lpOverlapped=0x0 | out: lpBuffer=0x7d7d400*, lpNumberOfBytesWritten=0xc4ffc18*=0x100, lpOverlapped=0x0) returned 1 [0189.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0189.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0189.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0189.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d7d400) returned 1 [0189.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d797f8) returned 1 [0189.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0189.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56138) returned 1 [0189.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a378c0 [0189.762] SetFilePointerEx (in: hFile=0x5ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.762] WriteFile (in: hFile=0x5ec, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc4ffca0, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xc4ffca0*=0x10c, lpOverlapped=0x0) returned 1 [0190.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25b30 [0190.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3eaa8 [0190.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0190.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a858) returned 1 [0190.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5a858 [0190.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6b8 [0190.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0190.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0190.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0190.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25b30) returned 1 [0190.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7970 [0190.022] sprintf (in: _Dest=0x7ad7970, _Format="%c%c" | out: _Dest="6b") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7972, _Format="%c%c" | out: _Dest="dd") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7974, _Format="%c%c" | out: _Dest="4e") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7976, _Format="%c%c" | out: _Dest="1f") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7978, _Format="%c%c" | out: _Dest="a1") returned 2 [0190.022] sprintf (in: _Dest=0x7ad797a, _Format="%c%c" | out: _Dest="7f") returned 2 [0190.022] sprintf (in: _Dest=0x7ad797c, _Format="%c%c" | out: _Dest="d0") returned 2 [0190.022] sprintf (in: _Dest=0x7ad797e, _Format="%c%c" | out: _Dest="e5") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7980, _Format="%c%c" | out: _Dest="b2") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7982, _Format="%c%c" | out: _Dest="83") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7984, _Format="%c%c" | out: _Dest="a2") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7986, _Format="%c%c" | out: _Dest="25") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7988, _Format="%c%c" | out: _Dest="cf") returned 2 [0190.022] sprintf (in: _Dest=0x7ad798a, _Format="%c%c" | out: _Dest="21") returned 2 [0190.022] sprintf (in: _Dest=0x7ad798c, _Format="%c%c" | out: _Dest="07") returned 2 [0190.022] sprintf (in: _Dest=0x7ad798e, _Format="%c%c" | out: _Dest="78") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7990, _Format="%c%c" | out: _Dest="2c") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7992, _Format="%c%c" | out: _Dest="5e") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7994, _Format="%c%c" | out: _Dest="9f") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7996, _Format="%c%c" | out: _Dest="3d") returned 2 [0190.022] sprintf (in: _Dest=0x7ad7998, _Format="%c%c" | out: _Dest="aa") returned 2 [0190.022] sprintf (in: _Dest=0x7ad799a, _Format="%c%c" | out: _Dest="71") returned 2 [0190.023] sprintf (in: _Dest=0x7ad799c, _Format="%c%c" | out: _Dest="24") returned 2 [0190.023] sprintf (in: _Dest=0x7ad799e, _Format="%c%c" | out: _Dest="6c") returned 2 [0190.023] sprintf (in: _Dest=0x7ad79a0, _Format="%c%c" | out: _Dest="9f") returned 2 [0190.023] sprintf (in: _Dest=0x7ad79a2, _Format="%c%c" | out: _Dest="36") returned 2 [0190.023] RtlInitAnsiString (in: DestinationString=0xc4ffc28, SourceString="6bdd4e1fa17fd0e5b283a225cf2107782c5e9f3daa71246c9f36" | out: DestinationString="6bdd4e1fa17fd0e5b283a225cf2107782c5e9f3daa71246c9f36") [0190.023] RtlAnsiStringToUnicodeString (in: DestinationString=0xc4ffc20, SourceString="6bdd4e1fa17fd0e5b283a225cf2107782c5e9f3daa71246c9f36", AllocateDestinationString=1 | out: DestinationString="6bdd4e1fa17fd0e5b283a225cf2107782c5e9f3daa71246c9f36") returned 0x0 [0190.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd88 [0190.023] wcscat (in: _Dest=0x7cb3740, _Source="6bdd4e1fa17fd" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\6bdd4e1fa17fd") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\6bdd4e1fa17fd" [0190.023] wcscat (in: _Dest=0x7cb3740, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\6bdd4e1fa17fd.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\6bdd4e1fa17fd.68814f" [0190.023] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\6bdd4e1fa17fd.68814f", NtPathName=0xc4ffc18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\6bdd4e1fa17fd.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3660 [0190.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3660) returned 1 [0190.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a49e10) returned 1 [0190.048] NtQueryInformationFile (in: FileHandle=0x5ec, IoStatusBlock=0xc4ffbf0, FileInformation=0xc4ffbf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc4ffbf0, FileInformation=0xc4ffbf8) returned 0x0 [0190.048] NtSetInformationFile (FileHandle=0x5ec, IoStatusBlock=0xc4ffbf0, FileInformation=0xc4ffbf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3740) returned 1 [0190.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0190.062] FlushFileBuffers (hFile=0x5ec) returned 1 [0190.610] CloseHandle (hObject=0x5ec) returned 1 [0192.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbe4c0 [0192.435] wcscpy (in: _Dest=0x7cbe4c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\" [0192.435] wcscat (in: _Dest=0x7cbe4c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\68814F-Readme.txt" [0192.435] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\68814f-readme.txt")) returned 0xffffffff [0192.435] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ko\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0192.645] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc4ffc34, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc4ffc34*=0x8b9, lpOverlapped=0x0) returned 1 [0193.136] CloseHandle (hObject=0x1518) returned 1 [0193.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe4c0) returned 1 [0193.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82a10) returned 1 Thread: id = 5940 os_tid = 0x1d5c [0185.942] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json")) returned 0x2020 [0186.769] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0189.243] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1750 [0191.174] GetFileSizeEx (in: hFile=0x1750, lpFileSize=0x8c5fde4 | out: lpFileSize=0x8c5fde4*=271) returned 1 [0191.174] SetFilePointerEx (in: hFile=0x1750, liDistanceToMove=0x10b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.174] ReadFile (in: hFile=0x1750, lpBuffer=0x8c5fdc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c5fdd0, lpOverlapped=0x0 | out: lpBuffer=0x8c5fdc0*, lpNumberOfBytesRead=0x8c5fdd0*=0x4, lpOverlapped=0x0) returned 1 [0191.176] SetFilePointerEx (in: hFile=0x1750, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0191.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0191.176] NtQuerySystemTime (in: CurrentTime=0x8c5fd58 | out: CurrentTime=0x8c5fd58*=132462177697572000) returned 0x0 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x3b81eb72 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x70fe0f42 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x50dd71b7 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x7c4455b9 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x534557f0 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0xb3ec366 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x251fd0d8 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x546a0b40 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0xd0c06dd [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x66fe0680 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x46d8fe27 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x1e84013 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x63c3508e [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x3b6f5130 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x1f82bfde [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x3a8e841e [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x42aae7d2 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x27c76487 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x76abfad4 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x1c3f4631 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x62d91155 [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x2aa1ae0b [0191.176] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x1fc7e9f9 [0191.177] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x1eecce0c [0191.177] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x35964296 [0191.177] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x6c96548b [0191.177] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x2b21ba77 [0191.177] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x33be5c70 [0191.177] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x74572107 [0191.177] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x11417bc [0191.177] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0x15278438 [0191.177] RtlRandomEx (in: Seed=0x8c5fd50 | out: Seed=0x8c5fd50) returned 0xa1c2f8 [0191.185] ReadFile (in: hFile=0x1750, lpBuffer=0x7d57bb0, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x8c5fd4c, lpOverlapped=0x0 | out: lpBuffer=0x7d57bb0*, lpNumberOfBytesRead=0x8c5fd4c*=0x10f, lpOverlapped=0x0) returned 1 [0191.185] SetFilePointerEx (in: hFile=0x1750, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.185] WriteFile (in: hFile=0x1750, lpBuffer=0x7d5b7b8*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0x8c5fd50, lpOverlapped=0x0 | out: lpBuffer=0x7d5b7b8*, lpNumberOfBytesWritten=0x8c5fd50*=0x10f, lpOverlapped=0x0) returned 1 [0192.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0192.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0192.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0192.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d5b7b8) returned 1 [0192.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d57bb0) returned 1 [0192.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0192.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8068) returned 1 [0192.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a379e0 [0192.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8068 [0192.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3eaa8 [0192.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0192.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0192.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a10 [0192.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0192.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0192.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0192.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0192.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8068) returned 1 [0192.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbd088 [0192.581] SetFilePointerEx (in: hFile=0x1750, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.581] WriteFile (in: hFile=0x1750, lpBuffer=0x7cbd088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8c5fdd8, lpOverlapped=0x0 | out: lpBuffer=0x7cbd088*, lpNumberOfBytesWritten=0x8c5fdd8*=0x10c, lpOverlapped=0x0) returned 1 [0192.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0192.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0192.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0192.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0192.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0192.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0192.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.708] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="fa") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="09") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="58") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="3e") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="dd") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="8c") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="b5") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="8b") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="af") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="09") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="2e") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="17") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="2a") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="a5") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="28") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="f8") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="17") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="23") returned 2 [0192.708] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="fa") returned 2 [0192.709] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="03") returned 2 [0192.709] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="7f") returned 2 [0192.709] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="3e") returned 2 [0192.709] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="a0") returned 2 [0192.709] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="39") returned 2 [0192.709] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="d2") returned 2 [0192.709] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="6c") returned 2 [0192.709] RtlInitAnsiString (in: DestinationString=0x8c5fd60, SourceString="fa09583edd8cb58baf092e172aa528f81723fa037f3ea039d26c" | out: DestinationString="fa09583edd8cb58baf092e172aa528f81723fa037f3ea039d26c") [0192.709] RtlAnsiStringToUnicodeString (in: DestinationString=0x8c5fd58, SourceString="fa09583edd8cb58baf092e172aa528f81723fa037f3ea039d26c", AllocateDestinationString=1 | out: DestinationString="fa09583edd8cb58baf092e172aa528f81723fa037f3ea039d26c") returned 0x0 [0192.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dfe0 [0192.709] RtlFreeAnsiString (AnsiString="f") [0192.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0192.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0192.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd088) returned 1 [0192.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37a10) returned 1 [0192.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0192.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a379e0) returned 1 [0192.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0192.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0192.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec48e8) returned 1 [0192.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28b8) returned 1 [0192.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbee00 [0192.710] wcscat (in: _Dest=0x7cbee00, _Source="fa09583edd8cb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\fa09583edd8cb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\fa09583edd8cb" [0192.710] wcscat (in: _Dest=0x7cbee00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\fa09583edd8cb.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\fa09583edd8cb.68814f" [0192.710] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\fa09583edd8cb.68814f", NtPathName=0x8c5fd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\fa09583edd8cb.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea40a0 [0192.711] NtSetInformationFile (FileHandle=0x1750, IoStatusBlock=0x8c5fd58, FileInformation=0x3ea40a0, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea40a0) returned 1 [0192.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a573f8) returned 1 [0192.801] NtQueryInformationFile (in: FileHandle=0x1750, IoStatusBlock=0x8c5fd28, FileInformation=0x8c5fd30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8c5fd28, FileInformation=0x8c5fd30) returned 0x0 [0192.801] NtSetInformationFile (FileHandle=0x1750, IoStatusBlock=0x8c5fd28, FileInformation=0x8c5fd30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbee00) returned 1 [0192.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0192.904] FlushFileBuffers (hFile=0x1750) returned 1 [0192.914] CloseHandle (hObject=0x1750) returned 1 [0192.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbf178 [0192.978] wcscpy (in: _Dest=0x7cbf178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\" [0192.978] wcscat (in: _Dest=0x7cbf178, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\68814F-Readme.txt" [0192.978] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\68814f-readme.txt")) returned 0xffffffff [0192.978] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ja\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23f8 [0192.994] WriteFile (in: hFile=0x23f8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8c5fd6c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8c5fd6c*=0x8b9, lpOverlapped=0x0) returned 1 [0193.008] CloseHandle (hObject=0x23f8) returned 1 [0193.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf178) returned 1 [0193.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82b38) returned 1 Thread: id = 5941 os_tid = 0x1de8 [0185.943] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json")) returned 0x2020 [0187.087] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0188.456] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14d4 [0188.457] GetFileSizeEx (in: hFile=0x14d4, lpFileSize=0x849f8ec | out: lpFileSize=0x849f8ec*=256) returned 1 [0188.457] SetFilePointerEx (in: hFile=0x14d4, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.457] ReadFile (in: hFile=0x14d4, lpBuffer=0x849f8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x849f8d8, lpOverlapped=0x0 | out: lpBuffer=0x849f8c8*, lpNumberOfBytesRead=0x849f8d8*=0x4, lpOverlapped=0x0) returned 1 [0188.459] SetFilePointerEx (in: hFile=0x14d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0188.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0188.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0188.459] NtQuerySystemTime (in: CurrentTime=0x849f860 | out: CurrentTime=0x849f860*=132462177670428000) returned 0x0 [0188.459] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x341db201 [0188.459] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x5f458921 [0188.459] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x49c6566c [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x38585f13 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x73e13840 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x65f791a9 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x34dcde42 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x3932c93b [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x2dbc5722 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x290b3621 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x435649f0 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0xa32824b [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x5c002910 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0xee45cc9 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x4f7e528c [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x53fac635 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x63934da5 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x1e32eb42 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x2f54c00c [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x67895009 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x7f0a6adb [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x1e8f7b41 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x488eb0c8 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x6202c47e [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x314bcd34 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x5f056566 [0188.460] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x519ede8a [0188.461] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x686865d2 [0188.461] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0xb0f0b61 [0188.461] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0xc3ecf6b [0188.461] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x22009d30 [0188.461] RtlRandomEx (in: Seed=0x849f858 | out: Seed=0x849f858) returned 0x7f7e8786 [0188.473] ReadFile (in: hFile=0x14d4, lpBuffer=0x7b9eb90, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x849f854, lpOverlapped=0x0 | out: lpBuffer=0x7b9eb90*, lpNumberOfBytesRead=0x849f854*=0x100, lpOverlapped=0x0) returned 1 [0188.474] SetFilePointerEx (in: hFile=0x14d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.474] WriteFile (in: hFile=0x14d4, lpBuffer=0x7ba2798*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x849f858, lpOverlapped=0x0 | out: lpBuffer=0x7ba2798*, lpNumberOfBytesWritten=0x849f858*=0x100, lpOverlapped=0x0) returned 1 [0189.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0189.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0189.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0189.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba2798) returned 1 [0189.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9eb90) returned 1 [0189.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0189.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56378) returned 1 [0189.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a377a0 [0189.761] SetFilePointerEx (in: hFile=0x14d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.761] WriteFile (in: hFile=0x14d4, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x849f8e0, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x849f8e0*=0x10c, lpOverlapped=0x0) returned 1 [0190.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25b30 [0190.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3eaa8 [0190.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0190.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae20) returned 1 [0190.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5ae20 [0190.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0190.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4e8 [0190.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a4e8) returned 1 [0190.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0190.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25b30) returned 1 [0190.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7970 [0190.014] sprintf (in: _Dest=0x7ad7970, _Format="%c%c" | out: _Dest="52") returned 2 [0190.014] sprintf (in: _Dest=0x7ad7972, _Format="%c%c" | out: _Dest="25") returned 2 [0190.014] sprintf (in: _Dest=0x7ad7974, _Format="%c%c" | out: _Dest="27") returned 2 [0190.014] sprintf (in: _Dest=0x7ad7976, _Format="%c%c" | out: _Dest="85") returned 2 [0190.014] sprintf (in: _Dest=0x7ad7978, _Format="%c%c" | out: _Dest="b7") returned 2 [0190.014] sprintf (in: _Dest=0x7ad797a, _Format="%c%c" | out: _Dest="5b") returned 2 [0190.014] sprintf (in: _Dest=0x7ad797c, _Format="%c%c" | out: _Dest="95") returned 2 [0190.014] sprintf (in: _Dest=0x7ad797e, _Format="%c%c" | out: _Dest="ab") returned 2 [0190.014] sprintf (in: _Dest=0x7ad7980, _Format="%c%c" | out: _Dest="73") returned 2 [0190.015] sprintf (in: _Dest=0x7ad7982, _Format="%c%c" | out: _Dest="ae") returned 2 [0190.015] sprintf (in: _Dest=0x7ad7984, _Format="%c%c" | out: _Dest="c6") returned 2 [0190.015] sprintf (in: _Dest=0x7ad7986, _Format="%c%c" | out: _Dest="b9") returned 2 [0190.015] sprintf (in: _Dest=0x7ad7988, _Format="%c%c" | out: _Dest="8a") returned 2 [0190.015] sprintf (in: _Dest=0x7ad798a, _Format="%c%c" | out: _Dest="a0") returned 2 [0190.015] sprintf (in: _Dest=0x7ad798c, _Format="%c%c" | out: _Dest="10") returned 2 [0190.015] sprintf (in: _Dest=0x7ad798e, _Format="%c%c" | out: _Dest="14") returned 2 [0190.015] sprintf (in: _Dest=0x7ad7990, _Format="%c%c" | out: _Dest="e4") returned 2 [0190.015] sprintf (in: _Dest=0x7ad7992, _Format="%c%c" | out: _Dest="01") returned 2 [0190.015] sprintf (in: _Dest=0x7ad7994, _Format="%c%c" | out: _Dest="c2") returned 2 [0190.015] sprintf (in: _Dest=0x7ad7996, _Format="%c%c" | out: _Dest="9f") returned 2 [0190.015] sprintf (in: _Dest=0x7ad7998, _Format="%c%c" | out: _Dest="08") returned 2 [0190.015] sprintf (in: _Dest=0x7ad799a, _Format="%c%c" | out: _Dest="07") returned 2 [0190.015] sprintf (in: _Dest=0x7ad799c, _Format="%c%c" | out: _Dest="dd") returned 2 [0190.015] sprintf (in: _Dest=0x7ad799e, _Format="%c%c" | out: _Dest="23") returned 2 [0190.015] sprintf (in: _Dest=0x7ad79a0, _Format="%c%c" | out: _Dest="a8") returned 2 [0190.015] sprintf (in: _Dest=0x7ad79a2, _Format="%c%c" | out: _Dest="90") returned 2 [0190.015] RtlInitAnsiString (in: DestinationString=0x849f868, SourceString="52252785b75b95ab73aec6b98aa01014e401c29f0807dd23a890" | out: DestinationString="52252785b75b95ab73aec6b98aa01014e401c29f0807dd23a890") [0190.015] RtlAnsiStringToUnicodeString (in: DestinationString=0x849f860, SourceString="52252785b75b95ab73aec6b98aa01014e401c29f0807dd23a890", AllocateDestinationString=1 | out: DestinationString="52252785b75b95ab73aec6b98aa01014e401c29f0807dd23a890") returned 0x0 [0190.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e760 [0190.016] wcscat (in: _Dest=0x7cb3618, _Source="52252785b75b9" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\52252785b75b9") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\52252785b75b9" [0190.016] wcscat (in: _Dest=0x7cb3618, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\52252785b75b9.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\52252785b75b9.68814f" [0190.016] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\52252785b75b9.68814f", NtPathName=0x849f858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\52252785b75b9.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea2d68 [0190.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0190.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4cd80) returned 1 [0190.046] NtQueryInformationFile (in: FileHandle=0x14d4, IoStatusBlock=0x849f830, FileInformation=0x849f838, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x849f830, FileInformation=0x849f838) returned 0x0 [0190.047] NtSetInformationFile (FileHandle=0x14d4, IoStatusBlock=0x849f830, FileInformation=0x849f838, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3618) returned 1 [0190.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0190.060] FlushFileBuffers (hFile=0x14d4) returned 1 [0190.609] CloseHandle (hObject=0x14d4) returned 1 [0192.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d55278 [0192.431] wcscpy (in: _Dest=0x3d55278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\" [0192.431] wcscat (in: _Dest=0x3d55278, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\68814F-Readme.txt" [0192.431] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\68814f-readme.txt")) returned 0xffffffff [0192.432] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\it\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x10ec [0192.643] WriteFile (in: hFile=0x10ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x849f874, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x849f874*=0x8b9, lpOverlapped=0x0) returned 1 [0193.126] CloseHandle (hObject=0x10ec) returned 1 [0193.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 [0193.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82c60) returned 1 Thread: id = 5942 os_tid = 0x2254 [0185.943] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json")) returned 0x2020 [0186.770] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0189.243] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d5c [0191.186] GetFileSizeEx (in: hFile=0x1d5c, lpFileSize=0xa25fbec | out: lpFileSize=0xa25fbec*=242) returned 1 [0191.186] SetFilePointerEx (in: hFile=0x1d5c, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.186] ReadFile (in: hFile=0x1d5c, lpBuffer=0xa25fbc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa25fbd8, lpOverlapped=0x0 | out: lpBuffer=0xa25fbc8*, lpNumberOfBytesRead=0xa25fbd8*=0x4, lpOverlapped=0x0) returned 1 [0191.187] SetFilePointerEx (in: hFile=0x1d5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0191.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0191.188] NtQuerySystemTime (in: CurrentTime=0xa25fb60 | out: CurrentTime=0xa25fb60*=132462177697728000) returned 0x0 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0xcd2517b [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x6dd8b9d [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x439a2809 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x5967ca86 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0xd577d55 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0xfd92fc8 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x53023004 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x46c2eb9 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x25a1e3b8 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x689c0531 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x1ab9f48a [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x35fc436b [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x52e86c80 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x27dbbb69 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x39224f21 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x79ac70b5 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x32639935 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0xe22ed10 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x30c7ea19 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x42f117ef [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x77e166a1 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x4331f8b0 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0xee07d44 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x52bd93c0 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x275c5676 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x533e1e00 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x551aa19d [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x31ba2e9d [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x6c4bcb29 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x4014da47 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x743730f9 [0191.188] RtlRandomEx (in: Seed=0xa25fb58 | out: Seed=0xa25fb58) returned 0x17a02ea6 [0191.197] ReadFile (in: hFile=0x1d5c, lpBuffer=0x7d5f3c0, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0xa25fb54, lpOverlapped=0x0 | out: lpBuffer=0x7d5f3c0*, lpNumberOfBytesRead=0xa25fb54*=0xf2, lpOverlapped=0x0) returned 1 [0191.197] SetFilePointerEx (in: hFile=0x1d5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.197] WriteFile (in: hFile=0x1d5c, lpBuffer=0x7d62fc8*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0xa25fb58, lpOverlapped=0x0 | out: lpBuffer=0x7d62fc8*, lpNumberOfBytesWritten=0xa25fb58*=0xf2, lpOverlapped=0x0) returned 1 [0192.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0192.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0192.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d62fc8) returned 1 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d5f3c0) returned 1 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb80b0) returned 1 [0192.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0192.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb80b0 [0192.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0192.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0192.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37530 [0192.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0192.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0192.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb80b0) returned 1 [0192.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbd4e8 [0192.588] SetFilePointerEx (in: hFile=0x1d5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.588] WriteFile (in: hFile=0x1d5c, lpBuffer=0x7cbd4e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa25fbe0, lpOverlapped=0x0 | out: lpBuffer=0x7cbd4e8*, lpNumberOfBytesWritten=0xa25fbe0*=0x10c, lpOverlapped=0x0) returned 1 [0192.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0192.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0192.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3768 [0192.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0192.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0192.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3808) returned 1 [0192.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.719] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="00") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="a8") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="05") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="3f") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="c8") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="66") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="58") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="30") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="ce") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="98") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="d0") returned 2 [0192.719] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="14") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="d4") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="48") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="f5") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="00") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="a5") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="37") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="bb") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="18") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="e5") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="14") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="ec") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="09") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="4c") returned 2 [0192.720] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="42") returned 2 [0192.720] RtlInitAnsiString (in: DestinationString=0xa25fb68, SourceString="00a8053fc8665830ce98d014d448f500a537bb18e514ec094c42" | out: DestinationString="00a8053fc8665830ce98d014d448f500a537bb18e514ec094c42") [0192.720] RtlAnsiStringToUnicodeString (in: DestinationString=0xa25fb60, SourceString="00a8053fc8665830ce98d014d448f500a537bb18e514ec094c42", AllocateDestinationString=1 | out: DestinationString="00a8053fc8665830ce98d014d448f500a537bb18e514ec094c42") returned 0x0 [0192.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3def0 [0192.720] RtlFreeAnsiString (AnsiString="0") [0192.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0192.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30b0) returned 1 [0192.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd4e8) returned 1 [0192.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37530) returned 1 [0192.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0192.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37680) returned 1 [0192.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a6a0) returned 1 [0192.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3330) returned 1 [0192.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f98) returned 1 [0192.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0192.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbf050 [0192.721] wcscat (in: _Dest=0x7cbf050, _Source="00a8053fc8665" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\00a8053fc8665") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\00a8053fc8665" [0192.721] wcscat (in: _Dest=0x7cbf050, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\00a8053fc8665.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\00a8053fc8665.68814f" [0192.721] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\00a8053fc8665.68814f", NtPathName=0xa25fb58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\00a8053fc8665.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3e10 [0192.722] NtSetInformationFile (FileHandle=0x1d5c, IoStatusBlock=0xa25fb60, FileInformation=0x3ea3e10, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3e10) returned 1 [0192.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef8050) returned 1 [0192.811] NtQueryInformationFile (in: FileHandle=0x1d5c, IoStatusBlock=0xa25fb30, FileInformation=0xa25fb38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa25fb30, FileInformation=0xa25fb38) returned 0x0 [0192.811] NtSetInformationFile (FileHandle=0x1d5c, IoStatusBlock=0xa25fb30, FileInformation=0xa25fb38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf050) returned 1 [0192.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0192.921] FlushFileBuffers (hFile=0x1d5c) returned 1 [0192.931] CloseHandle (hObject=0x1d5c) returned 1 [0192.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbe960 [0192.981] wcscpy (in: _Dest=0x7cbe960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\" [0192.981] wcscat (in: _Dest=0x7cbe960, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\68814F-Readme.txt" [0192.981] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\68814f-readme.txt")) returned 0xffffffff [0192.981] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\id\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1828 [0192.995] WriteFile (in: hFile=0x1828, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa25fb74, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa25fb74*=0x8b9, lpOverlapped=0x0) returned 1 [0193.012] CloseHandle (hObject=0x1828) returned 1 [0193.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe960) returned 1 [0193.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82d88) returned 1 Thread: id = 5943 os_tid = 0x1fb4 [0185.943] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json")) returned 0x2020 [0187.087] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0188.476] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14cc [0188.477] GetFileSizeEx (in: hFile=0x14cc, lpFileSize=0xd91ff1c | out: lpFileSize=0xd91ff1c*=226) returned 1 [0188.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0188.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0188.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0188.477] NtQuerySystemTime (in: CurrentTime=0xd91fe90 | out: CurrentTime=0xd91fe90*=132462177670584000) returned 0x0 [0188.477] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x30f3502a [0188.477] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x47fd4d9f [0188.477] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0xfe84c53 [0188.477] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x2504d664 [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x6fdce640 [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x3d9df25d [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x7d6f5d03 [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x5ddbd48f [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x68fea144 [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x39359866 [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x4fd85896 [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x1f48223 [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x399f0e87 [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x4f886c1b [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x72d0fa3d [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x48785f18 [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x3d489e3f [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x14f91f0e [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x65b09bf9 [0188.478] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x70308a8b [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x4d11ab72 [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x233b2abb [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x500dec21 [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x38a9a40f [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x7974b84c [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x15f02571 [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x33856c21 [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x2420e2cc [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x62441f15 [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x77e5b1cc [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x6f00b560 [0188.479] RtlRandomEx (in: Seed=0xd91fe88 | out: Seed=0xd91fe88) returned 0x128d8888 [0188.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0188.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba63a0 [0188.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba9fa8 [0188.502] ReadFile (in: hFile=0x14cc, lpBuffer=0x7ba63a0, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0xd91fe84, lpOverlapped=0x0 | out: lpBuffer=0x7ba63a0*, lpNumberOfBytesRead=0xd91fe84*=0xe2, lpOverlapped=0x0) returned 1 [0188.509] SetFilePointerEx (in: hFile=0x14cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.509] WriteFile (in: hFile=0x14cc, lpBuffer=0x7ba9fa8*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0xd91fe88, lpOverlapped=0x0 | out: lpBuffer=0x7ba9fa8*, lpNumberOfBytesWritten=0xd91fe88*=0xe2, lpOverlapped=0x0) returned 1 [0189.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0189.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0189.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0189.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba9fa8) returned 1 [0189.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba63a0) returned 1 [0189.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0189.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56330) returned 1 [0189.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37920 [0189.763] SetFilePointerEx (in: hFile=0x14cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.764] WriteFile (in: hFile=0x14cc, lpBuffer=0x7a64090*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd91ff10, lpOverlapped=0x0 | out: lpBuffer=0x7a64090*, lpNumberOfBytesWritten=0xd91ff10*=0x10c, lpOverlapped=0x0) returned 1 [0190.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25b30 [0190.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3eaa8 [0190.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0190.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0190.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b550 [0190.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0190.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b190 [0190.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b190) returned 1 [0190.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0190.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25b30) returned 1 [0190.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7970 [0190.027] sprintf (in: _Dest=0x7ad7970, _Format="%c%c" | out: _Dest="4c") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7972, _Format="%c%c" | out: _Dest="6e") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7974, _Format="%c%c" | out: _Dest="0b") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7976, _Format="%c%c" | out: _Dest="78") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7978, _Format="%c%c" | out: _Dest="c4") returned 2 [0190.027] sprintf (in: _Dest=0x7ad797a, _Format="%c%c" | out: _Dest="77") returned 2 [0190.027] sprintf (in: _Dest=0x7ad797c, _Format="%c%c" | out: _Dest="61") returned 2 [0190.027] sprintf (in: _Dest=0x7ad797e, _Format="%c%c" | out: _Dest="0c") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7980, _Format="%c%c" | out: _Dest="4d") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7982, _Format="%c%c" | out: _Dest="94") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7984, _Format="%c%c" | out: _Dest="b8") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7986, _Format="%c%c" | out: _Dest="39") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7988, _Format="%c%c" | out: _Dest="15") returned 2 [0190.027] sprintf (in: _Dest=0x7ad798a, _Format="%c%c" | out: _Dest="ed") returned 2 [0190.027] sprintf (in: _Dest=0x7ad798c, _Format="%c%c" | out: _Dest="d7") returned 2 [0190.027] sprintf (in: _Dest=0x7ad798e, _Format="%c%c" | out: _Dest="bf") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7990, _Format="%c%c" | out: _Dest="ba") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7992, _Format="%c%c" | out: _Dest="24") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7994, _Format="%c%c" | out: _Dest="9c") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7996, _Format="%c%c" | out: _Dest="a8") returned 2 [0190.027] sprintf (in: _Dest=0x7ad7998, _Format="%c%c" | out: _Dest="51") returned 2 [0190.027] sprintf (in: _Dest=0x7ad799a, _Format="%c%c" | out: _Dest="19") returned 2 [0190.028] sprintf (in: _Dest=0x7ad799c, _Format="%c%c" | out: _Dest="f7") returned 2 [0190.028] sprintf (in: _Dest=0x7ad799e, _Format="%c%c" | out: _Dest="a6") returned 2 [0190.028] sprintf (in: _Dest=0x7ad79a0, _Format="%c%c" | out: _Dest="b6") returned 2 [0190.028] sprintf (in: _Dest=0x7ad79a2, _Format="%c%c" | out: _Dest="4e") returned 2 [0190.028] RtlInitAnsiString (in: DestinationString=0xd91fe98, SourceString="4c6e0b78c477610c4d94b83915edd7bfba249ca85119f7a6b64e" | out: DestinationString="4c6e0b78c477610c4d94b83915edd7bfba249ca85119f7a6b64e") [0190.028] RtlAnsiStringToUnicodeString (in: DestinationString=0xd91fe90, SourceString="4c6e0b78c477610c4d94b83915edd7bfba249ca85119f7a6b64e", AllocateDestinationString=1 | out: DestinationString="4c6e0b78c477610c4d94b83915edd7bfba249ca85119f7a6b64e") returned 0x0 [0190.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e0d0 [0190.028] wcscat (in: _Dest=0x7cb3868, _Source="4c6e0b78c4776" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\4c6e0b78c4776") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\4c6e0b78c4776" [0190.028] wcscat (in: _Dest=0x7cb3868, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\4c6e0b78c4776.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\4c6e0b78c4776.68814f" [0190.028] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\4c6e0b78c4776.68814f", NtPathName=0xd91fe88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\4c6e0b78c4776.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea37a8 [0190.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea37a8) returned 1 [0190.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4a8d8) returned 1 [0190.050] NtQueryInformationFile (in: FileHandle=0x14cc, IoStatusBlock=0xd91fe60, FileInformation=0xd91fe68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd91fe60, FileInformation=0xd91fe68) returned 0x0 [0190.050] NtSetInformationFile (FileHandle=0x14cc, IoStatusBlock=0xd91fe60, FileInformation=0xd91fe68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3868) returned 1 [0190.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0190.066] FlushFileBuffers (hFile=0x14cc) returned 1 [0190.610] CloseHandle (hObject=0x14cc) returned 1 [0192.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbe5e8 [0192.442] wcscpy (in: _Dest=0x7cbe5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\" [0192.442] wcscat (in: _Dest=0x7cbe5e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\68814F-Readme.txt" [0192.442] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\68814f-readme.txt")) returned 0xffffffff [0192.442] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hu\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2250 [0193.039] WriteFile (in: hFile=0x2250, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd91fea4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd91fea4*=0x8b9, lpOverlapped=0x0) returned 1 [0193.041] CloseHandle (hObject=0x2250) returned 1 [0193.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe5e8) returned 1 [0193.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82eb0) returned 1 Thread: id = 5944 os_tid = 0x1fcc [0185.944] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json")) returned 0x2020 [0186.770] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0189.243] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x23f8 [0191.198] GetFileSizeEx (in: hFile=0x23f8, lpFileSize=0xdb1f9b4 | out: lpFileSize=0xdb1f9b4*=230) returned 1 [0191.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0191.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0191.198] NtQuerySystemTime (in: CurrentTime=0xdb1f928 | out: CurrentTime=0xdb1f928*=132462177697728000) returned 0x0 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x5c1022e5 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x31095c94 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x7358aeda [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0xfba9201 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x35b48f87 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x66e936a6 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0xd4cb960 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x699f305 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x49167ad5 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x15da0046 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x4b0c50ec [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x3064b6c1 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x2b04a464 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0xb422146 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x92b7ac6 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x7e188970 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x224655d2 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x328cd25c [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x64773c42 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x51dfad35 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x34434236 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x2c27ae49 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x56bcb814 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x129b7bb3 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x37ef03cd [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0xd4cb960 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x71e012f8 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x7a3a40eb [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x2dac99e2 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x6a650618 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x5c084150 [0191.199] RtlRandomEx (in: Seed=0xdb1f920 | out: Seed=0xdb1f920) returned 0x1131bb52 [0191.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0191.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d66bd0 [0191.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d6a7d8 [0191.209] ReadFile (in: hFile=0x23f8, lpBuffer=0x7d66bd0, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0xdb1f91c, lpOverlapped=0x0 | out: lpBuffer=0x7d66bd0*, lpNumberOfBytesRead=0xdb1f91c*=0xe6, lpOverlapped=0x0) returned 1 [0191.211] SetFilePointerEx (in: hFile=0x23f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.211] WriteFile (in: hFile=0x23f8, lpBuffer=0x7d6a7d8*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xdb1f920, lpOverlapped=0x0 | out: lpBuffer=0x7d6a7d8*, lpNumberOfBytesWritten=0xdb1f920*=0xe6, lpOverlapped=0x0) returned 1 [0192.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0192.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e340 [0192.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e340) returned 1 [0192.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d6a7d8) returned 1 [0192.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d66bd0) returned 1 [0192.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0192.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb80f8) returned 1 [0192.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0192.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb80f8 [0192.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0192.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e340 [0192.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e340) returned 1 [0192.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0192.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e340 [0192.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0192.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0192.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0192.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb80f8) returned 1 [0192.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbd600 [0192.590] SetFilePointerEx (in: hFile=0x23f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.590] WriteFile (in: hFile=0x23f8, lpBuffer=0x7cbd600*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdb1f9a8, lpOverlapped=0x0 | out: lpBuffer=0x7cbd600*, lpNumberOfBytesWritten=0xdb1f9a8*=0x10c, lpOverlapped=0x0) returned 1 [0192.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0192.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0192.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3470 [0192.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0192.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0192.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3330) returned 1 [0192.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.725] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="cd") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="81") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="a6") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="88") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="8d") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="b9") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="29") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="53") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="2b") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="5f") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="91") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="85") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="a3") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="1e") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="f1") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="e6") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="bb") returned 2 [0192.725] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="4a") returned 2 [0192.726] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="80") returned 2 [0192.726] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="88") returned 2 [0192.726] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="49") returned 2 [0192.726] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="5f") returned 2 [0192.726] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="1b") returned 2 [0192.726] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="c2") returned 2 [0192.726] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="0d") returned 2 [0192.726] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="a0") returned 2 [0192.726] RtlInitAnsiString (in: DestinationString=0xdb1f930, SourceString="cd81a6888db929532b5f9185a31ef1e6bb4a8088495f1bc20da0" | out: DestinationString="cd81a6888db929532b5f9185a31ef1e6bb4a8088495f1bc20da0") [0192.726] RtlAnsiStringToUnicodeString (in: DestinationString=0xdb1f928, SourceString="cd81a6888db929532b5f9185a31ef1e6bb4a8088495f1bc20da0", AllocateDestinationString=1 | out: DestinationString="cd81a6888db929532b5f9185a31ef1e6bb4a8088495f1bc20da0") returned 0x0 [0192.726] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3eaa8 [0192.726] RtlFreeAnsiString (AnsiString="c") [0192.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0192.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f98) returned 1 [0192.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd600) returned 1 [0192.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a375c0) returned 1 [0192.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e340) returned 1 [0192.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a374d0) returned 1 [0192.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b668) returned 1 [0192.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0192.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3920) returned 1 [0192.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec59c8) returned 1 [0192.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbf178 [0192.727] wcscat (in: _Dest=0x7cbf178, _Source="cd81a6888db92" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\cd81a6888db92") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\cd81a6888db92" [0192.727] wcscat (in: _Dest=0x7cbf178, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\cd81a6888db92.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\cd81a6888db92.68814f" [0192.727] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\cd81a6888db92.68814f", NtPathName=0xdb1f920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\cd81a6888db92.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3cc8 [0192.727] NtSetInformationFile (FileHandle=0x23f8, IoStatusBlock=0xdb1f928, FileInformation=0x3ea3cc8, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3cc8) returned 1 [0192.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef9190) returned 1 [0192.815] NtQueryInformationFile (in: FileHandle=0x23f8, IoStatusBlock=0xdb1f8f8, FileInformation=0xdb1f900, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdb1f8f8, FileInformation=0xdb1f900) returned 0x0 [0192.815] NtSetInformationFile (FileHandle=0x23f8, IoStatusBlock=0xdb1f8f8, FileInformation=0xdb1f900, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf178) returned 1 [0192.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0192.929] FlushFileBuffers (hFile=0x23f8) returned 1 [0192.941] CloseHandle (hObject=0x23f8) returned 1 [0192.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbf868 [0192.983] wcscpy (in: _Dest=0x7cbf868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\" [0192.983] wcscat (in: _Dest=0x7cbf868, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\68814F-Readme.txt" [0192.983] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\68814f-readme.txt")) returned 0xffffffff [0192.983] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17c0 [0192.996] WriteFile (in: hFile=0x17c0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdb1f93c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xdb1f93c*=0x8b9, lpOverlapped=0x0) returned 1 [0193.016] CloseHandle (hObject=0x17c0) returned 1 [0193.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf868) returned 1 [0193.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82fd8) returned 1 Thread: id = 5945 os_tid = 0x1f54 [0185.944] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json")) returned 0x2020 [0187.088] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0188.511] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14c4 [0188.512] GetFileSizeEx (in: hFile=0x14c4, lpFileSize=0x8eafbe4 | out: lpFileSize=0x8eafbe4*=289) returned 1 [0188.512] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x11d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.512] ReadFile (in: hFile=0x14c4, lpBuffer=0x8eafbc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8eafbd0, lpOverlapped=0x0 | out: lpBuffer=0x8eafbc0*, lpNumberOfBytesRead=0x8eafbd0*=0x4, lpOverlapped=0x0) returned 1 [0188.514] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0188.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0188.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0188.515] NtQuerySystemTime (in: CurrentTime=0x8eafb58 | out: CurrentTime=0x8eafb58*=132462177670896000) returned 0x0 [0188.515] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x2277cf34 [0188.515] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x2f44dc0 [0188.515] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x8c6f512 [0188.515] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x65620b96 [0188.515] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0xdd0229e [0188.515] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x435ec2fd [0188.515] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x122862b7 [0188.515] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x1fd01199 [0188.515] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x789690f5 [0188.515] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x2e2b757c [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x57f6dbd8 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x7c768c51 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x4d9b9bcc [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x1bf4f25f [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x39290ee3 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x52f54c86 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x57b15a7e [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x674313a3 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x46975949 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x13936e17 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x59950833 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x4e1d1533 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x2f54037 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x75d90a6 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0xa5d0107 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x6f8734c0 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x1249bd09 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x7b642666 [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x684d8a1b [0188.516] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x7304dd86 [0188.517] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x5f48663f [0188.517] RtlRandomEx (in: Seed=0x8eafb50 | out: Seed=0x8eafb50) returned 0x43ef6737 [0188.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0188.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7badbb0 [0188.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb17b8 [0188.535] ReadFile (in: hFile=0x14c4, lpBuffer=0x7badbb0, nNumberOfBytesToRead=0x121, lpNumberOfBytesRead=0x8eafb4c, lpOverlapped=0x0 | out: lpBuffer=0x7badbb0*, lpNumberOfBytesRead=0x8eafb4c*=0x121, lpOverlapped=0x0) returned 1 [0188.535] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.535] WriteFile (in: hFile=0x14c4, lpBuffer=0x7bb17b8*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x8eafb50, lpOverlapped=0x0 | out: lpBuffer=0x7bb17b8*, lpNumberOfBytesWritten=0x8eafb50*=0x121, lpOverlapped=0x0) returned 1 [0189.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0189.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0189.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0189.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb17b8) returned 1 [0189.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7badbb0) returned 1 [0189.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0189.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56450) returned 1 [0189.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a379e0 [0189.766] SetFilePointerEx (in: hFile=0x14c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.766] WriteFile (in: hFile=0x14c4, lpBuffer=0x7a642c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8eafbd8, lpOverlapped=0x0 | out: lpBuffer=0x7a642c0*, lpNumberOfBytesWritten=0x8eafbd8*=0x10c, lpOverlapped=0x0) returned 1 [0190.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25b30 [0190.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3eaa8 [0190.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0190.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0190.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5ad30 [0190.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0190.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0190.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b370) returned 1 [0190.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0190.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25b30) returned 1 [0190.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7970 [0190.037] sprintf (in: _Dest=0x7ad7970, _Format="%c%c" | out: _Dest="71") returned 2 [0190.037] sprintf (in: _Dest=0x7ad7972, _Format="%c%c" | out: _Dest="bb") returned 2 [0190.037] sprintf (in: _Dest=0x7ad7974, _Format="%c%c" | out: _Dest="70") returned 2 [0190.037] sprintf (in: _Dest=0x7ad7976, _Format="%c%c" | out: _Dest="09") returned 2 [0190.037] sprintf (in: _Dest=0x7ad7978, _Format="%c%c" | out: _Dest="70") returned 2 [0190.038] sprintf (in: _Dest=0x7ad797a, _Format="%c%c" | out: _Dest="e5") returned 2 [0190.038] sprintf (in: _Dest=0x7ad797c, _Format="%c%c" | out: _Dest="a7") returned 2 [0190.038] sprintf (in: _Dest=0x7ad797e, _Format="%c%c" | out: _Dest="d3") returned 2 [0190.038] sprintf (in: _Dest=0x7ad7980, _Format="%c%c" | out: _Dest="33") returned 2 [0190.038] sprintf (in: _Dest=0x7ad7982, _Format="%c%c" | out: _Dest="75") returned 2 [0190.038] sprintf (in: _Dest=0x7ad7984, _Format="%c%c" | out: _Dest="09") returned 2 [0190.038] sprintf (in: _Dest=0x7ad7986, _Format="%c%c" | out: _Dest="6d") returned 2 [0190.038] sprintf (in: _Dest=0x7ad7988, _Format="%c%c" | out: _Dest="0e") returned 2 [0190.038] sprintf (in: _Dest=0x7ad798a, _Format="%c%c" | out: _Dest="71") returned 2 [0190.038] sprintf (in: _Dest=0x7ad798c, _Format="%c%c" | out: _Dest="38") returned 2 [0190.038] sprintf (in: _Dest=0x7ad798e, _Format="%c%c" | out: _Dest="ad") returned 2 [0190.038] sprintf (in: _Dest=0x7ad7990, _Format="%c%c" | out: _Dest="08") returned 2 [0190.038] sprintf (in: _Dest=0x7ad7992, _Format="%c%c" | out: _Dest="ea") returned 2 [0190.038] sprintf (in: _Dest=0x7ad7994, _Format="%c%c" | out: _Dest="1f") returned 2 [0190.038] sprintf (in: _Dest=0x7ad7996, _Format="%c%c" | out: _Dest="52") returned 2 [0190.038] sprintf (in: _Dest=0x7ad7998, _Format="%c%c" | out: _Dest="d3") returned 2 [0190.038] sprintf (in: _Dest=0x7ad799a, _Format="%c%c" | out: _Dest="3e") returned 2 [0190.038] sprintf (in: _Dest=0x7ad799c, _Format="%c%c" | out: _Dest="5c") returned 2 [0190.038] sprintf (in: _Dest=0x7ad799e, _Format="%c%c" | out: _Dest="15") returned 2 [0190.038] sprintf (in: _Dest=0x7ad79a0, _Format="%c%c" | out: _Dest="bf") returned 2 [0190.038] sprintf (in: _Dest=0x7ad79a2, _Format="%c%c" | out: _Dest="64") returned 2 [0190.038] RtlInitAnsiString (in: DestinationString=0x8eafb60, SourceString="71bb700970e5a7d33375096d0e7138ad08ea1f52d33e5c15bf64" | out: DestinationString="71bb700970e5a7d33375096d0e7138ad08ea1f52d33e5c15bf64") [0190.039] RtlAnsiStringToUnicodeString (in: DestinationString=0x8eafb58, SourceString="71bb700970e5a7d33375096d0e7138ad08ea1f52d33e5c15bf64", AllocateDestinationString=1 | out: DestinationString="71bb700970e5a7d33375096d0e7138ad08ea1f52d33e5c15bf64") returned 0x0 [0190.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e6e8 [0190.039] wcscat (in: _Dest=0x7cb3ab8, _Source="71bb700970e5a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\71bb700970e5a") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\71bb700970e5a" [0190.039] wcscat (in: _Dest=0x7cb3ab8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\71bb700970e5a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\71bb700970e5a.68814f" [0190.039] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\71bb700970e5a.68814f", NtPathName=0x8eafb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\71bb700970e5a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3a38 [0190.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3a38) returned 1 [0190.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a46828) returned 1 [0190.053] NtQueryInformationFile (in: FileHandle=0x14c4, IoStatusBlock=0x8eafb28, FileInformation=0x8eafb30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8eafb28, FileInformation=0x8eafb30) returned 0x0 [0190.053] NtSetInformationFile (FileHandle=0x14c4, IoStatusBlock=0x8eafb28, FileInformation=0x8eafb30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3ab8) returned 1 [0190.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0190.073] FlushFileBuffers (hFile=0x14c4) returned 1 [0190.611] CloseHandle (hObject=0x14c4) returned 1 [0192.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbe838 [0192.471] wcscpy (in: _Dest=0x7cbe838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\" [0192.471] wcscat (in: _Dest=0x7cbe838, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\68814F-Readme.txt" [0192.471] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\68814f-readme.txt")) returned 0xffffffff [0192.471] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\hi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c4 [0193.092] WriteFile (in: hFile=0x13c4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8eafb6c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8eafb6c*=0x8b9, lpOverlapped=0x0) returned 1 [0193.094] CloseHandle (hObject=0x13c4) returned 1 [0193.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe838) returned 1 [0193.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83100) returned 1 Thread: id = 5946 os_tid = 0x1f64 [0185.944] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json")) returned 0x2020 [0187.088] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0188.537] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14bc [0188.537] GetFileSizeEx (in: hFile=0x14bc, lpFileSize=0xd9bfa54 | out: lpFileSize=0xd9bfa54*=268) returned 1 [0188.537] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.538] ReadFile (in: hFile=0x14bc, lpBuffer=0xd9bfa30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd9bfa40, lpOverlapped=0x0 | out: lpBuffer=0xd9bfa30*, lpNumberOfBytesRead=0xd9bfa40*=0x4, lpOverlapped=0x0) returned 1 [0188.540] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0188.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0188.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0188.540] NtQuerySystemTime (in: CurrentTime=0xd9bf9c8 | out: CurrentTime=0xd9bf9c8*=132462177671208000) returned 0x0 [0188.540] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x7efa9f4f [0188.540] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x73642e59 [0188.540] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x1ce0d28d [0188.540] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x526b1626 [0188.540] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x4ce8cf48 [0188.540] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x6204e8c3 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x30e8a615 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x3b8087fd [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x2d98028d [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x4a3909e5 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x6672370b [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x101153de [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x4b53aefc [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x2e84c534 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x58e07874 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x7be6c24b [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x61aaa1eb [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x578d0512 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x4e7a6fa1 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x196e16b4 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x11182125 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x75954dc3 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x28a8d6f1 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x222cf30 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x2ae4f531 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0xaec8361 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x14c1f1b5 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x75cb0a5a [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x249bbfe0 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x5e375b88 [0188.541] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x42d45a04 [0188.542] RtlRandomEx (in: Seed=0xd9bf9c0 | out: Seed=0xd9bf9c0) returned 0x11d97f5b [0188.561] ReadFile (in: hFile=0x14bc, lpBuffer=0x7bb53c0, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0xd9bf9bc, lpOverlapped=0x0 | out: lpBuffer=0x7bb53c0*, lpNumberOfBytesRead=0xd9bf9bc*=0x10c, lpOverlapped=0x0) returned 1 [0188.561] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.561] WriteFile (in: hFile=0x14bc, lpBuffer=0x7bb8fc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd9bf9c0, lpOverlapped=0x0 | out: lpBuffer=0x7bb8fc8*, lpNumberOfBytesWritten=0xd9bf9c0*=0x10c, lpOverlapped=0x0) returned 1 [0189.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0189.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0189.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0189.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb8fc8) returned 1 [0189.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb53c0) returned 1 [0189.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0189.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e559a0) returned 1 [0189.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37980 [0189.765] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.765] WriteFile (in: hFile=0x14bc, lpBuffer=0x7a641a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd9bfa48, lpOverlapped=0x0 | out: lpBuffer=0x7a641a8*, lpNumberOfBytesWritten=0xd9bfa48*=0x10c, lpOverlapped=0x0) returned 1 [0190.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25b30 [0190.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3eaa8 [0190.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0190.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b2d0) returned 1 [0190.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b2d0 [0190.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0190.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0190.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0190.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0190.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25b30) returned 1 [0190.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7970 [0190.032] sprintf (in: _Dest=0x7ad7970, _Format="%c%c" | out: _Dest="d5") returned 2 [0190.032] sprintf (in: _Dest=0x7ad7972, _Format="%c%c" | out: _Dest="ab") returned 2 [0190.032] sprintf (in: _Dest=0x7ad7974, _Format="%c%c" | out: _Dest="71") returned 2 [0190.032] sprintf (in: _Dest=0x7ad7976, _Format="%c%c" | out: _Dest="b8") returned 2 [0190.032] sprintf (in: _Dest=0x7ad7978, _Format="%c%c" | out: _Dest="09") returned 2 [0190.033] sprintf (in: _Dest=0x7ad797a, _Format="%c%c" | out: _Dest="77") returned 2 [0190.033] sprintf (in: _Dest=0x7ad797c, _Format="%c%c" | out: _Dest="1d") returned 2 [0190.033] sprintf (in: _Dest=0x7ad797e, _Format="%c%c" | out: _Dest="39") returned 2 [0190.033] sprintf (in: _Dest=0x7ad7980, _Format="%c%c" | out: _Dest="fd") returned 2 [0190.033] sprintf (in: _Dest=0x7ad7982, _Format="%c%c" | out: _Dest="0c") returned 2 [0190.033] sprintf (in: _Dest=0x7ad7984, _Format="%c%c" | out: _Dest="c7") returned 2 [0190.033] sprintf (in: _Dest=0x7ad7986, _Format="%c%c" | out: _Dest="77") returned 2 [0190.033] sprintf (in: _Dest=0x7ad7988, _Format="%c%c" | out: _Dest="72") returned 2 [0190.033] sprintf (in: _Dest=0x7ad798a, _Format="%c%c" | out: _Dest="19") returned 2 [0190.033] sprintf (in: _Dest=0x7ad798c, _Format="%c%c" | out: _Dest="58") returned 2 [0190.033] sprintf (in: _Dest=0x7ad798e, _Format="%c%c" | out: _Dest="2f") returned 2 [0190.033] sprintf (in: _Dest=0x7ad7990, _Format="%c%c" | out: _Dest="44") returned 2 [0190.033] sprintf (in: _Dest=0x7ad7992, _Format="%c%c" | out: _Dest="5c") returned 2 [0190.033] sprintf (in: _Dest=0x7ad7994, _Format="%c%c" | out: _Dest="ad") returned 2 [0190.033] sprintf (in: _Dest=0x7ad7996, _Format="%c%c" | out: _Dest="30") returned 2 [0190.033] sprintf (in: _Dest=0x7ad7998, _Format="%c%c" | out: _Dest="72") returned 2 [0190.033] sprintf (in: _Dest=0x7ad799a, _Format="%c%c" | out: _Dest="c7") returned 2 [0190.033] sprintf (in: _Dest=0x7ad799c, _Format="%c%c" | out: _Dest="b7") returned 2 [0190.033] sprintf (in: _Dest=0x7ad799e, _Format="%c%c" | out: _Dest="9a") returned 2 [0190.033] sprintf (in: _Dest=0x7ad79a0, _Format="%c%c" | out: _Dest="c0") returned 2 [0190.033] sprintf (in: _Dest=0x7ad79a2, _Format="%c%c" | out: _Dest="81") returned 2 [0190.033] RtlInitAnsiString (in: DestinationString=0xd9bf9d0, SourceString="d5ab71b809771d39fd0cc7777219582f445cad3072c7b79ac081" | out: DestinationString="d5ab71b809771d39fd0cc7777219582f445cad3072c7b79ac081") [0190.033] RtlAnsiStringToUnicodeString (in: DestinationString=0xd9bf9c8, SourceString="d5ab71b809771d39fd0cc7777219582f445cad3072c7b79ac081", AllocateDestinationString=1 | out: DestinationString="d5ab71b809771d39fd0cc7777219582f445cad3072c7b79ac081") returned 0x0 [0190.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e940 [0190.034] wcscat (in: _Dest=0x7cb3990, _Source="d5ab71b809771" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\d5ab71b809771") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\d5ab71b809771" [0190.034] wcscat (in: _Dest=0x7cb3990, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\d5ab71b809771.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\d5ab71b809771.68814f" [0190.034] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\d5ab71b809771.68814f", NtPathName=0xd9bf9c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\d5ab71b809771.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0190.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea38f0 [0190.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38f0) returned 1 [0190.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4a6b0) returned 1 [0190.051] NtQueryInformationFile (in: FileHandle=0x14bc, IoStatusBlock=0xd9bf998, FileInformation=0xd9bf9a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd9bf998, FileInformation=0xd9bf9a0) returned 0x0 [0190.051] NtSetInformationFile (FileHandle=0x14bc, IoStatusBlock=0xd9bf998, FileInformation=0xd9bf9a0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0190.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3990) returned 1 [0190.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0190.069] FlushFileBuffers (hFile=0x14bc) returned 1 [0190.610] CloseHandle (hObject=0x14bc) returned 1 [0192.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbe710 [0192.449] wcscpy (in: _Dest=0x7cbe710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\" [0192.449] wcscat (in: _Dest=0x7cbe710, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\68814F-Readme.txt" [0192.449] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\68814f-readme.txt")) returned 0xffffffff [0192.449] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c4 [0193.070] WriteFile (in: hFile=0x13c4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd9bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd9bf9dc*=0x8b9, lpOverlapped=0x0) returned 1 [0193.073] CloseHandle (hObject=0x13c4) returned 1 [0193.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe710) returned 1 [0193.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83228) returned 1 Thread: id = 5947 os_tid = 0x1264 [0185.945] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json")) returned 0x2020 [0186.772] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0189.244] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13c4 [0191.211] GetFileSizeEx (in: hFile=0x13c4, lpFileSize=0x781fe5c | out: lpFileSize=0x781fe5c*=234) returned 1 [0191.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0191.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0191.212] NtQuerySystemTime (in: CurrentTime=0x781fdd0 | out: CurrentTime=0x781fdd0*=132462177697884000) returned 0x0 [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x1ade162f [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x4a80d3fd [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x6104a21a [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x7885ab5f [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x108b3538 [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x7b966f69 [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x614b9159 [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x5c25c0b5 [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x109af702 [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x48691c24 [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x67e76f2c [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x4117e54a [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x170df6fb [0191.212] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x37066428 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x64340c5f [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x74a04a53 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x7a3a40eb [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x522c4a5b [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x5822afdc [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x18b54a2 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x27dbbb69 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x59966ba8 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x43f18c3d [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x2eab9c38 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x19b85e66 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x7885ab5f [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x1071d084 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x6fa3032d [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x4236f637 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x39224f21 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x23a3f996 [0191.213] RtlRandomEx (in: Seed=0x781fdc8 | out: Seed=0x781fdc8) returned 0x40a0958c [0191.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0191.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d6e3e0 [0191.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d71fe8 [0191.225] ReadFile (in: hFile=0x13c4, lpBuffer=0x7d6e3e0, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0x781fdc4, lpOverlapped=0x0 | out: lpBuffer=0x7d6e3e0*, lpNumberOfBytesRead=0x781fdc4*=0xea, lpOverlapped=0x0) returned 1 [0191.227] SetFilePointerEx (in: hFile=0x13c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.227] WriteFile (in: hFile=0x13c4, lpBuffer=0x7d71fe8*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x781fdc8, lpOverlapped=0x0 | out: lpBuffer=0x7d71fe8*, lpNumberOfBytesWritten=0x781fdc8*=0xea, lpOverlapped=0x0) returned 1 [0193.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0193.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0193.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0193.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d71fe8) returned 1 [0193.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d6e3e0) returned 1 [0193.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0193.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8140) returned 1 [0193.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0193.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8140 [0193.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0193.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0193.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0193.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37650 [0193.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0193.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0193.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0193.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0193.046] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8140) returned 1 [0193.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7a384d0 [0193.047] SetFilePointerEx (in: hFile=0x13c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.047] WriteFile (in: hFile=0x13c4, lpBuffer=0x7a384d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x781fe50, lpOverlapped=0x0 | out: lpBuffer=0x7a384d0*, lpNumberOfBytesWritten=0x781fe50*=0x10c, lpOverlapped=0x0) returned 1 [0193.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8140 [0193.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0193.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0193.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0193.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec6508 [0193.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0193.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0193.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0193.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0193.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8140) returned 1 [0193.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x30671c0 [0193.051] sprintf (in: _Dest=0x30671c0, _Format="%c%c" | out: _Dest="5c") returned 2 [0193.051] sprintf (in: _Dest=0x30671c2, _Format="%c%c" | out: _Dest="39") returned 2 [0193.052] sprintf (in: _Dest=0x30671c4, _Format="%c%c" | out: _Dest="5d") returned 2 [0193.052] sprintf (in: _Dest=0x30671c6, _Format="%c%c" | out: _Dest="d3") returned 2 [0193.052] sprintf (in: _Dest=0x30671c8, _Format="%c%c" | out: _Dest="77") returned 2 [0193.052] sprintf (in: _Dest=0x30671ca, _Format="%c%c" | out: _Dest="10") returned 2 [0193.052] sprintf (in: _Dest=0x30671cc, _Format="%c%c" | out: _Dest="00") returned 2 [0193.052] sprintf (in: _Dest=0x30671ce, _Format="%c%c" | out: _Dest="b7") returned 2 [0193.052] sprintf (in: _Dest=0x30671d0, _Format="%c%c" | out: _Dest="2c") returned 2 [0193.052] sprintf (in: _Dest=0x30671d2, _Format="%c%c" | out: _Dest="b9") returned 2 [0193.052] sprintf (in: _Dest=0x30671d4, _Format="%c%c" | out: _Dest="a4") returned 2 [0193.052] sprintf (in: _Dest=0x30671d6, _Format="%c%c" | out: _Dest="6a") returned 2 [0193.052] sprintf (in: _Dest=0x30671d8, _Format="%c%c" | out: _Dest="f4") returned 2 [0193.052] sprintf (in: _Dest=0x30671da, _Format="%c%c" | out: _Dest="7f") returned 2 [0193.052] sprintf (in: _Dest=0x30671dc, _Format="%c%c" | out: _Dest="3a") returned 2 [0193.052] sprintf (in: _Dest=0x30671de, _Format="%c%c" | out: _Dest="08") returned 2 [0193.052] sprintf (in: _Dest=0x30671e0, _Format="%c%c" | out: _Dest="7c") returned 2 [0193.053] sprintf (in: _Dest=0x30671e2, _Format="%c%c" | out: _Dest="e9") returned 2 [0193.053] sprintf (in: _Dest=0x30671e4, _Format="%c%c" | out: _Dest="a0") returned 2 [0193.053] sprintf (in: _Dest=0x30671e6, _Format="%c%c" | out: _Dest="2e") returned 2 [0193.053] sprintf (in: _Dest=0x30671e8, _Format="%c%c" | out: _Dest="24") returned 2 [0193.053] sprintf (in: _Dest=0x30671ea, _Format="%c%c" | out: _Dest="67") returned 2 [0193.053] sprintf (in: _Dest=0x30671ec, _Format="%c%c" | out: _Dest="bf") returned 2 [0193.053] sprintf (in: _Dest=0x30671ee, _Format="%c%c" | out: _Dest="f6") returned 2 [0193.053] sprintf (in: _Dest=0x30671f0, _Format="%c%c" | out: _Dest="9a") returned 2 [0193.053] sprintf (in: _Dest=0x30671f2, _Format="%c%c" | out: _Dest="29") returned 2 [0193.053] RtlInitAnsiString (in: DestinationString=0x781fdd8, SourceString="5c395dd3771000b72cb9a46af47f3a087ce9a02e2467bff69a29" | out: DestinationString="5c395dd3771000b72cb9a46af47f3a087ce9a02e2467bff69a29") [0193.053] RtlAnsiStringToUnicodeString (in: DestinationString=0x781fdd0, SourceString="5c395dd3771000b72cb9a46af47f3a087ce9a02e2467bff69a29", AllocateDestinationString=1 | out: DestinationString="5c395dd3771000b72cb9a46af47f3a087ce9a02e2467bff69a29") returned 0x0 [0193.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3ea30 [0193.054] RtlFreeAnsiString (AnsiString="5") [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30671c0) returned 1 [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a384d0) returned 1 [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37650) returned 1 [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37620) returned 1 [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0193.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0193.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9928 [0193.055] wcscat (in: _Dest=0x3ec9928, _Source="5c395dd377100" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\5c395dd377100") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\5c395dd377100" [0193.055] wcscat (in: _Dest=0x3ec9928, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\5c395dd377100.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\5c395dd377100.68814f" [0193.055] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\5c395dd377100.68814f", NtPathName=0x781fdc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\5c395dd377100.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0193.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x138) returned 0x3ea4478 [0193.055] NtSetInformationFile (FileHandle=0x13c4, IoStatusBlock=0x781fdd0, FileInformation=0x3ea4478, Length=0x138, FileInformationClass=0xa) returned 0x0 [0193.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4478) returned 1 [0193.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a30f68) returned 1 [0193.057] NtQueryInformationFile (in: FileHandle=0x13c4, IoStatusBlock=0x781fda0, FileInformation=0x781fda8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x781fda0, FileInformation=0x781fda8) returned 0x0 [0193.057] NtSetInformationFile (FileHandle=0x13c4, IoStatusBlock=0x781fda0, FileInformation=0x781fda8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9928) returned 1 [0193.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0193.059] FlushFileBuffers (hFile=0x13c4) returned 1 [0193.063] CloseHandle (hObject=0x13c4) returned 1 [0193.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b82eb0 [0193.065] wcscpy (in: _Dest=0x7b82eb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\" [0193.065] wcscat (in: _Dest=0x7b82eb0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\68814F-Readme.txt" [0193.065] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\68814f-readme.txt")) returned 0xffffffff [0193.065] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fil\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c4 [0193.066] WriteFile (in: hFile=0x13c4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x781fde4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x781fde4*=0x8b9, lpOverlapped=0x0) returned 1 [0193.068] CloseHandle (hObject=0x13c4) returned 1 [0193.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82eb0) returned 1 [0193.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83350) returned 1 Thread: id = 5948 os_tid = 0x1268 [0185.945] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json")) returned 0x2020 [0186.772] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0189.244] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x220c [0191.228] GetFileSizeEx (in: hFile=0x220c, lpFileSize=0x833fe4c | out: lpFileSize=0x833fe4c*=256) returned 1 [0191.228] SetFilePointerEx (in: hFile=0x220c, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.228] ReadFile (in: hFile=0x220c, lpBuffer=0x833fe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x833fe38, lpOverlapped=0x0 | out: lpBuffer=0x833fe28*, lpNumberOfBytesRead=0x833fe38*=0x4, lpOverlapped=0x0) returned 1 [0191.230] SetFilePointerEx (in: hFile=0x220c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0191.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0191.230] NtQuerySystemTime (in: CurrentTime=0x833fdc0 | out: CurrentTime=0x833fdc0*=132462177698040000) returned 0x0 [0191.230] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x46082873 [0191.230] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x55566df4 [0191.230] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x4b7671f6 [0191.230] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x6a650618 [0191.230] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x37ef03cd [0191.230] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x7b966f69 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x4be20fc [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x5f2975fe [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x72193544 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x4a500a0a [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x34b21738 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x31e49579 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x53134540 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x7a49c657 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x22ee8ea6 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x74b57be2 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x56b9b31c [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x699f305 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x2e65e26d [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x4e59205 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x1936451c [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x7629ce25 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x4f6c2a50 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x4b7a5dcc [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x5aced0fe [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x6260457e [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x92ce969 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0xe8b8b3 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x38d104e [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x465f4b05 [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x1b0766ab [0191.231] RtlRandomEx (in: Seed=0x833fdb8 | out: Seed=0x833fdb8) returned 0x4e59205 [0191.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0191.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d75bf0 [0191.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d797f8 [0191.250] ReadFile (in: hFile=0x220c, lpBuffer=0x7d75bf0, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x833fdb4, lpOverlapped=0x0 | out: lpBuffer=0x7d75bf0*, lpNumberOfBytesRead=0x833fdb4*=0x100, lpOverlapped=0x0) returned 1 [0191.250] SetFilePointerEx (in: hFile=0x220c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.250] WriteFile (in: hFile=0x220c, lpBuffer=0x7d797f8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x833fdb8, lpOverlapped=0x0 | out: lpBuffer=0x7d797f8*, lpNumberOfBytesWritten=0x833fdb8*=0x100, lpOverlapped=0x0) returned 1 [0192.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0192.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0192.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0192.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d797f8) returned 1 [0192.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d75bf0) returned 1 [0192.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0192.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8188) returned 1 [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37770 [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8188 [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e058 [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0192.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376b0 [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0192.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0192.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0192.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0192.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8188) returned 1 [0192.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbd718 [0192.595] SetFilePointerEx (in: hFile=0x220c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.595] WriteFile (in: hFile=0x220c, lpBuffer=0x7cbd718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x833fe40, lpOverlapped=0x0 | out: lpBuffer=0x7cbd718*, lpNumberOfBytesWritten=0x833fe40*=0x10c, lpOverlapped=0x0) returned 1 [0192.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0192.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec59c8) returned 1 [0192.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec59c8 [0192.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0192.729] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0192.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0192.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.730] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="2e") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="eb") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="d0") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="c0") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="a3") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="1f") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="69") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="6c") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="cf") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="1d") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="1b") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="ef") returned 2 [0192.730] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="6c") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="fc") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="48") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="28") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="69") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="24") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="92") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="81") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="20") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="f5") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="87") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="47") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="3d") returned 2 [0192.731] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="93") returned 2 [0192.731] RtlInitAnsiString (in: DestinationString=0x833fdc8, SourceString="2eebd0c0a31f696ccf1d1bef6cfc48286924928120f587473d93" | out: DestinationString="2eebd0c0a31f696ccf1d1bef6cfc48286924928120f587473d93") [0192.731] RtlAnsiStringToUnicodeString (in: DestinationString=0x833fdc0, SourceString="2eebd0c0a31f696ccf1d1bef6cfc48286924928120f587473d93", AllocateDestinationString=1 | out: DestinationString="2eebd0c0a31f696ccf1d1bef6cfc48286924928120f587473d93") returned 0x0 [0192.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e760 [0192.732] RtlFreeAnsiString (AnsiString="2") [0192.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec59c8) returned 1 [0192.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3920) returned 1 [0192.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd718) returned 1 [0192.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a376b0) returned 1 [0192.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0192.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37770) returned 1 [0192.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a9c0) returned 1 [0192.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0192.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0192.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0192.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbf2a0 [0192.733] wcscat (in: _Dest=0x7cbf2a0, _Source="2eebd0c0a31f6" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\2eebd0c0a31f6") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\2eebd0c0a31f6" [0192.733] wcscat (in: _Dest=0x7cbf2a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\2eebd0c0a31f6.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\2eebd0c0a31f6.68814f" [0192.733] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\2eebd0c0a31f6.68814f", NtPathName=0x833fdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\2eebd0c0a31f6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3b80 [0192.733] NtSetInformationFile (FileHandle=0x220c, IoStatusBlock=0x833fdc0, FileInformation=0x3ea3b80, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3b80) returned 1 [0192.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef79d8) returned 1 [0192.816] NtQueryInformationFile (in: FileHandle=0x220c, IoStatusBlock=0x833fd90, FileInformation=0x833fd98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x833fd90, FileInformation=0x833fd98) returned 0x0 [0192.817] NtSetInformationFile (FileHandle=0x220c, IoStatusBlock=0x833fd90, FileInformation=0x833fd98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf2a0) returned 1 [0192.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0192.935] FlushFileBuffers (hFile=0x220c) returned 1 [0192.952] CloseHandle (hObject=0x220c) returned 1 [0192.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbf990 [0192.985] wcscpy (in: _Dest=0x7cbf990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\" [0192.985] wcscat (in: _Dest=0x7cbf990, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\68814F-Readme.txt" [0192.986] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\68814f-readme.txt")) returned 0xffffffff [0192.986] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\fi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1750 [0192.996] WriteFile (in: hFile=0x1750, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x833fdd4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x833fdd4*=0x8b9, lpOverlapped=0x0) returned 1 [0193.015] CloseHandle (hObject=0x1750) returned 1 [0193.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf990) returned 1 [0193.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83478) returned 1 Thread: id = 5949 os_tid = 0x2310 [0185.945] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json")) returned 0x2020 [0186.773] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0189.244] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2250 [0191.251] GetFileSizeEx (in: hFile=0x2250, lpFileSize=0x8b6ff3c | out: lpFileSize=0x8b6ff3c*=269) returned 1 [0191.251] SetFilePointerEx (in: hFile=0x2250, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.251] ReadFile (in: hFile=0x2250, lpBuffer=0x8b6ff18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b6ff28, lpOverlapped=0x0 | out: lpBuffer=0x8b6ff18*, lpNumberOfBytesRead=0x8b6ff28*=0x4, lpOverlapped=0x0) returned 1 [0191.253] SetFilePointerEx (in: hFile=0x2250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0191.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0191.253] NtQuerySystemTime (in: CurrentTime=0x8b6feb0 | out: CurrentTime=0x8b6feb0*=132462177698352000) returned 0x0 [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x66bb0e4f [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x109af702 [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x1c627072 [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0xec4c9de [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x11f189fb [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x67e76f2c [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x4f6c2a50 [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x2552a331 [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x39793e1a [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x2df0ed81 [0191.253] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x495a285a [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x153b1cda [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x42b8ab54 [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x1d6eed52 [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x6df521eb [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x55872fd [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x64ad38ef [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x36b3c24b [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x2ba85eb8 [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x44c39d2e [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x1777a4ac [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0xe8b8b3 [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x35b2d052 [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x4a500a0a [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x751e4fef [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x4c30cb43 [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x5292bb00 [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x5fdf6a9 [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x49958d7f [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x28a52138 [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x38f29665 [0191.254] RtlRandomEx (in: Seed=0x8b6fea8 | out: Seed=0x8b6fea8) returned 0x336c6de7 [0191.264] ReadFile (in: hFile=0x2250, lpBuffer=0x7d7d400, nNumberOfBytesToRead=0x10d, lpNumberOfBytesRead=0x8b6fea4, lpOverlapped=0x0 | out: lpBuffer=0x7d7d400*, lpNumberOfBytesRead=0x8b6fea4*=0x10d, lpOverlapped=0x0) returned 1 [0191.264] SetFilePointerEx (in: hFile=0x2250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.264] WriteFile (in: hFile=0x2250, lpBuffer=0x7d81008*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x8b6fea8, lpOverlapped=0x0 | out: lpBuffer=0x7d81008*, lpNumberOfBytesWritten=0x8b6fea8*=0x10d, lpOverlapped=0x0) returned 1 [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b118 [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0192.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0192.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d81008) returned 1 [0192.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d7d400) returned 1 [0192.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0192.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb81d0) returned 1 [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a377a0 [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb81d0 [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0192.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0192.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0192.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37710 [0192.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0192.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0192.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0192.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0192.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb81d0) returned 1 [0192.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbd830 [0192.598] SetFilePointerEx (in: hFile=0x2250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.598] WriteFile (in: hFile=0x2250, lpBuffer=0x7cbd830*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8b6ff30, lpOverlapped=0x0 | out: lpBuffer=0x7cbd830*, lpNumberOfBytesWritten=0x8b6ff30*=0x10c, lpOverlapped=0x0) returned 1 [0192.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0192.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0192.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4528 [0192.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0192.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0192.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0192.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.736] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="cc") returned 2 [0192.736] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="96") returned 2 [0192.736] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="f5") returned 2 [0192.736] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="ac") returned 2 [0192.736] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="f9") returned 2 [0192.736] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="35") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="65") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="21") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="54") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="e4") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="31") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="07") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="8c") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="b2") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="83") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="06") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="76") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="9d") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="fe") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="fd") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="c4") returned 2 [0192.737] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="ad") returned 2 [0192.738] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="10") returned 2 [0192.738] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="e4") returned 2 [0192.738] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="fd") returned 2 [0192.738] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="6a") returned 2 [0192.738] RtlInitAnsiString (in: DestinationString=0x8b6feb8, SourceString="cc96f5acf935652154e431078cb28306769dfefdc4ad10e4fd6a" | out: DestinationString="cc96f5acf935652154e431078cb28306769dfefdc4ad10e4fd6a") [0192.738] RtlAnsiStringToUnicodeString (in: DestinationString=0x8b6feb0, SourceString="cc96f5acf935652154e431078cb28306769dfefdc4ad10e4fd6a", AllocateDestinationString=1 | out: DestinationString="cc96f5acf935652154e431078cb28306769dfefdc4ad10e4fd6a") returned 0x0 [0192.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e670 [0192.738] RtlFreeAnsiString (AnsiString="c") [0192.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0192.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0192.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd830) returned 1 [0192.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37710) returned 1 [0192.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0192.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a377a0) returned 1 [0192.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b118) returned 1 [0192.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0192.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0192.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0192.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbf3c8 [0192.740] wcscat (in: _Dest=0x7cbf3c8, _Source="cc96f5acf9356" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\cc96f5acf9356") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\cc96f5acf9356" [0192.740] wcscat (in: _Dest=0x7cbf3c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\cc96f5acf9356.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\cc96f5acf9356.68814f" [0192.740] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\cc96f5acf9356.68814f", NtPathName=0x8b6fea8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\cc96f5acf9356.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea4478 [0192.740] NtSetInformationFile (FileHandle=0x2250, IoStatusBlock=0x8b6feb0, FileInformation=0x3ea4478, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4478) returned 1 [0192.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef6448) returned 1 [0192.822] NtQueryInformationFile (in: FileHandle=0x2250, IoStatusBlock=0x8b6fe80, FileInformation=0x8b6fe88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8b6fe80, FileInformation=0x8b6fe88) returned 0x0 [0192.822] NtSetInformationFile (FileHandle=0x2250, IoStatusBlock=0x8b6fe80, FileInformation=0x8b6fe88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf3c8) returned 1 [0192.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0192.950] FlushFileBuffers (hFile=0x2250) returned 1 [0192.956] CloseHandle (hObject=0x2250) returned 1 [0192.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbfd08 [0192.991] wcscpy (in: _Dest=0x7cbfd08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\" [0192.991] wcscat (in: _Dest=0x7cbfd08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\68814F-Readme.txt" [0192.991] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\68814f-readme.txt")) returned 0xffffffff [0192.991] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\es\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2250 [0192.999] WriteFile (in: hFile=0x2250, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8b6fec4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8b6fec4*=0x8b9, lpOverlapped=0x0) returned 1 [0193.024] CloseHandle (hObject=0x2250) returned 1 [0193.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfd08) returned 1 [0193.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b835a0) returned 1 Thread: id = 5950 os_tid = 0x27e0 [0185.945] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json")) returned 0x2020 [0186.773] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0189.244] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1570 [0191.265] GetFileSizeEx (in: hFile=0x1570, lpFileSize=0xb88faa4 | out: lpFileSize=0xb88faa4*=215) returned 1 [0191.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0191.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0191.265] NtQuerySystemTime (in: CurrentTime=0xb88fa18 | out: CurrentTime=0xb88fa18*=132462177698508000) returned 0x0 [0191.265] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x1b4b0cd [0191.265] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x35b48f87 [0191.265] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x1424a7e1 [0191.265] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x3a2f23c8 [0191.265] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x156c31ef [0191.265] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x3b751429 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x456db3d [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x78c73a42 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x2eab9c38 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x7db581db [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x5dab7e6d [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x63df54ec [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x51e75800 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x6bfd959f [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x5d6e0dee [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x2a3ef27e [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x1a64467a [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x1009a8c [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x6c73965 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x4cbac5dd [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x5267e240 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x766999b2 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x605cd1de [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x623e3648 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x24ec9bb4 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x2cf16249 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x7c68db3b [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x51bcfeb3 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x23a94daf [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x24f8a104 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x92ce969 [0191.266] RtlRandomEx (in: Seed=0xb88fa10 | out: Seed=0xb88fa10) returned 0x5f05b7cb [0191.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0191.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d84c10 [0191.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d88818 [0191.275] ReadFile (in: hFile=0x1570, lpBuffer=0x7d84c10, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0xb88fa0c, lpOverlapped=0x0 | out: lpBuffer=0x7d84c10*, lpNumberOfBytesRead=0xb88fa0c*=0xd7, lpOverlapped=0x0) returned 1 [0191.276] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.277] WriteFile (in: hFile=0x1570, lpBuffer=0x7d88818*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0xb88fa10, lpOverlapped=0x0 | out: lpBuffer=0x7d88818*, lpNumberOfBytesWritten=0xb88fa10*=0xd7, lpOverlapped=0x0) returned 1 [0192.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0192.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0192.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0192.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d88818) returned 1 [0192.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d84c10) returned 1 [0192.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0192.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8218) returned 1 [0192.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0192.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8218 [0192.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e580 [0192.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0192.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0192.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37650 [0192.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0192.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0192.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0192.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0192.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8218) returned 1 [0192.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbd948 [0192.602] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.602] WriteFile (in: hFile=0x1570, lpBuffer=0x7cbd948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb88fa98, lpOverlapped=0x0 | out: lpBuffer=0x7cbd948*, lpNumberOfBytesWritten=0xb88fa98*=0x10c, lpOverlapped=0x0) returned 1 [0192.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25e48 [0192.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dd10 [0192.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0192.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0192.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3510 [0192.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0192.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0192.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0192.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0192.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0192.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7eb0 [0192.742] sprintf (in: _Dest=0x7ad7eb0, _Format="%c%c" | out: _Dest="ae") returned 2 [0192.742] sprintf (in: _Dest=0x7ad7eb2, _Format="%c%c" | out: _Dest="77") returned 2 [0192.742] sprintf (in: _Dest=0x7ad7eb4, _Format="%c%c" | out: _Dest="b1") returned 2 [0192.742] sprintf (in: _Dest=0x7ad7eb6, _Format="%c%c" | out: _Dest="a9") returned 2 [0192.742] sprintf (in: _Dest=0x7ad7eb8, _Format="%c%c" | out: _Dest="80") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7eba, _Format="%c%c" | out: _Dest="8f") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ebc, _Format="%c%c" | out: _Dest="11") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ebe, _Format="%c%c" | out: _Dest="dc") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ec0, _Format="%c%c" | out: _Dest="53") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ec2, _Format="%c%c" | out: _Dest="02") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ec4, _Format="%c%c" | out: _Dest="42") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ec6, _Format="%c%c" | out: _Dest="89") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ec8, _Format="%c%c" | out: _Dest="e6") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7eca, _Format="%c%c" | out: _Dest="4c") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ecc, _Format="%c%c" | out: _Dest="65") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ece, _Format="%c%c" | out: _Dest="b1") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ed0, _Format="%c%c" | out: _Dest="0a") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ed2, _Format="%c%c" | out: _Dest="3b") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ed4, _Format="%c%c" | out: _Dest="b7") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ed6, _Format="%c%c" | out: _Dest="8c") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7ed8, _Format="%c%c" | out: _Dest="15") returned 2 [0192.743] sprintf (in: _Dest=0x7ad7eda, _Format="%c%c" | out: _Dest="c6") returned 2 [0192.744] sprintf (in: _Dest=0x7ad7edc, _Format="%c%c" | out: _Dest="ef") returned 2 [0192.744] sprintf (in: _Dest=0x7ad7ede, _Format="%c%c" | out: _Dest="a8") returned 2 [0192.744] sprintf (in: _Dest=0x7ad7ee0, _Format="%c%c" | out: _Dest="84") returned 2 [0192.744] sprintf (in: _Dest=0x7ad7ee2, _Format="%c%c" | out: _Dest="00") returned 2 [0192.744] RtlInitAnsiString (in: DestinationString=0xb88fa20, SourceString="ae77b1a9808f11dc53024289e64c65b10a3bb78c15c6efa88400" | out: DestinationString="ae77b1a9808f11dc53024289e64c65b10a3bb78c15c6efa88400") [0192.744] RtlAnsiStringToUnicodeString (in: DestinationString=0xb88fa18, SourceString="ae77b1a9808f11dc53024289e64c65b10a3bb78c15c6efa88400", AllocateDestinationString=1 | out: DestinationString="ae77b1a9808f11dc53024289e64c65b10a3bb78c15c6efa88400") returned 0x0 [0192.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e148 [0192.744] RtlFreeAnsiString (AnsiString="a") [0192.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0192.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0192.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0192.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd948) returned 1 [0192.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37650) returned 1 [0192.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0192.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37620) returned 1 [0192.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0192.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0192.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0192.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0192.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cbf4f0 [0192.745] wcscat (in: _Dest=0x7cbf4f0, _Source="ae77b1a9808f1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\ae77b1a9808f1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\ae77b1a9808f1" [0192.745] wcscat (in: _Dest=0x7cbf4f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\ae77b1a9808f1.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\ae77b1a9808f1.68814f" [0192.745] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\ae77b1a9808f1.68814f", NtPathName=0xb88fa10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\ae77b1a9808f1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea45c0 [0192.746] NtSetInformationFile (FileHandle=0x1570, IoStatusBlock=0xb88fa18, FileInformation=0x3ea45c0, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea45c0) returned 1 [0192.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef86c8) returned 1 [0192.818] NtQueryInformationFile (in: FileHandle=0x1570, IoStatusBlock=0xb88f9e8, FileInformation=0xb88f9f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb88f9e8, FileInformation=0xb88f9f0) returned 0x0 [0192.818] NtSetInformationFile (FileHandle=0x1570, IoStatusBlock=0xb88f9e8, FileInformation=0xb88f9f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0192.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0192.939] FlushFileBuffers (hFile=0x1570) returned 1 [0192.955] CloseHandle (hObject=0x1570) returned 1 [0192.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbfbe0 [0192.989] wcscpy (in: _Dest=0x7cbfbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\" [0192.989] wcscat (in: _Dest=0x7cbfbe0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\68814F-Readme.txt" [0192.989] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\68814f-readme.txt")) returned 0xffffffff [0192.989] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\en\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19f0 [0192.997] WriteFile (in: hFile=0x19f0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb88fa2c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb88fa2c*=0x8b9, lpOverlapped=0x0) returned 1 [0193.020] CloseHandle (hObject=0x19f0) returned 1 [0193.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfbe0) returned 1 [0193.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b836c8) returned 1 Thread: id = 5951 os_tid = 0xb48 [0185.946] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json")) returned 0x2020 [0186.774] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json", dwFileAttributes=0x20) returned 1 [0189.245] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc9c [0191.277] GetFileSizeEx (in: hFile=0xc9c, lpFileSize=0x82ffea4 | out: lpFileSize=0x82ffea4*=210) returned 1 [0191.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0191.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0191.278] NtQuerySystemTime (in: CurrentTime=0x82ffe18 | out: CurrentTime=0x82ffe18*=132462177698508000) returned 0x0 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x45bc9e8a [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x15fb6a17 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x7a3b488f [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x20d872fb [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x66754ba7 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x31ba2e9d [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x6d50959d [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x4185c78f [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x506e00da [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x13065c60 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x467c835a [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x266f8031 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x604d6a6c [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x42848798 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x521230c0 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x465f4b05 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x420a2ae [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x483905e5 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x28afc774 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x21b2e978 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x3f5d2922 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x72193544 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x68af7bab [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x4aabcd69 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x792f2e2 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x328cd25c [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x6bfd959f [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x609282a2 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x28cb64cb [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x171749a9 [0191.278] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x251e4261 [0191.279] RtlRandomEx (in: Seed=0x82ffe10 | out: Seed=0x82ffe10) returned 0x6c51e086 [0191.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0191.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d8c420 [0191.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab50b0 [0191.288] ReadFile (in: hFile=0xc9c, lpBuffer=0x7d8c420, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0x82ffe0c, lpOverlapped=0x0 | out: lpBuffer=0x7d8c420*, lpNumberOfBytesRead=0x82ffe0c*=0xd2, lpOverlapped=0x0) returned 1 [0191.290] SetFilePointerEx (in: hFile=0xc9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.290] WriteFile (in: hFile=0xc9c, lpBuffer=0x7ab50b0*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x82ffe10, lpOverlapped=0x0 | out: lpBuffer=0x7ab50b0*, lpNumberOfBytesWritten=0x82ffe10*=0xd2, lpOverlapped=0x0) returned 1 [0194.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0194.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0194.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0194.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab50b0) returned 1 [0194.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d8c420) returned 1 [0194.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0194.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8260) returned 1 [0194.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0194.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8260 [0194.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0194.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0194.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0194.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37530 [0194.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0194.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0194.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0194.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0194.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8260) returned 1 [0194.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7b7d4a0 [0194.280] SetFilePointerEx (in: hFile=0xc9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.280] WriteFile (in: hFile=0xc9c, lpBuffer=0x7b7d4a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x82ffe98, lpOverlapped=0x0 | out: lpBuffer=0x7b7d4a0*, lpNumberOfBytesWritten=0x82ffe98*=0x10c, lpOverlapped=0x0) returned 1 [0194.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9928 [0194.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015418 [0194.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36a0 [0194.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0194.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec36a0 [0194.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0194.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0194.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0194.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0194.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9928) returned 1 [0194.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d500 [0194.288] sprintf (in: _Dest=0x7a2d500, _Format="%c%c" | out: _Dest="80") returned 2 [0194.288] sprintf (in: _Dest=0x7a2d502, _Format="%c%c" | out: _Dest="1d") returned 2 [0194.288] sprintf (in: _Dest=0x7a2d504, _Format="%c%c" | out: _Dest="50") returned 2 [0194.288] sprintf (in: _Dest=0x7a2d506, _Format="%c%c" | out: _Dest="b1") returned 2 [0194.288] sprintf (in: _Dest=0x7a2d508, _Format="%c%c" | out: _Dest="e1") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d50a, _Format="%c%c" | out: _Dest="22") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d50c, _Format="%c%c" | out: _Dest="c1") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d50e, _Format="%c%c" | out: _Dest="bc") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d510, _Format="%c%c" | out: _Dest="40") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d512, _Format="%c%c" | out: _Dest="b7") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d514, _Format="%c%c" | out: _Dest="bc") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d516, _Format="%c%c" | out: _Dest="2a") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d518, _Format="%c%c" | out: _Dest="4b") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d51a, _Format="%c%c" | out: _Dest="c2") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d51c, _Format="%c%c" | out: _Dest="1d") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d51e, _Format="%c%c" | out: _Dest="6d") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d520, _Format="%c%c" | out: _Dest="6b") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d522, _Format="%c%c" | out: _Dest="da") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d524, _Format="%c%c" | out: _Dest="49") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d526, _Format="%c%c" | out: _Dest="40") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d528, _Format="%c%c" | out: _Dest="00") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d52a, _Format="%c%c" | out: _Dest="0e") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d52c, _Format="%c%c" | out: _Dest="1f") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d52e, _Format="%c%c" | out: _Dest="fe") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d530, _Format="%c%c" | out: _Dest="f7") returned 2 [0194.289] sprintf (in: _Dest=0x7a2d532, _Format="%c%c" | out: _Dest="3c") returned 2 [0194.289] RtlInitAnsiString (in: DestinationString=0x82ffe20, SourceString="801d50b1e122c1bc40b7bc2a4bc21d6d6bda4940000e1ffef73c" | out: DestinationString="801d50b1e122c1bc40b7bc2a4bc21d6d6bda4940000e1ffef73c") [0194.289] RtlAnsiStringToUnicodeString (in: DestinationString=0x82ffe18, SourceString="801d50b1e122c1bc40b7bc2a4bc21d6d6bda4940000e1ffef73c", AllocateDestinationString=1 | out: DestinationString="801d50b1e122c1bc40b7bc2a4bc21d6d6bda4940000e1ffef73c") returned 0x0 [0194.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015328 [0194.289] RtlFreeAnsiString (AnsiString="8") [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d500) returned 1 [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36a0) returned 1 [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d4a0) returned 1 [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37530) returned 1 [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37680) returned 1 [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3380) returned 1 [0194.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0194.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d555f0 [0194.290] wcscat (in: _Dest=0x3d555f0, _Source="801d50b1e122c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\801d50b1e122c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\801d50b1e122c" [0194.290] wcscat (in: _Dest=0x3d555f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\801d50b1e122c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\801d50b1e122c.68814f" [0194.290] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\801d50b1e122c.68814f", NtPathName=0x82ffe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\801d50b1e122c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0194.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea2d68 [0194.291] NtSetInformationFile (FileHandle=0xc9c, IoStatusBlock=0x82ffe18, FileInformation=0x3ea2d68, Length=0x136, FileInformationClass=0xa) returned 0x0 [0194.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0194.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a4a260) returned 1 [0194.293] NtQueryInformationFile (in: FileHandle=0xc9c, IoStatusBlock=0x82ffde8, FileInformation=0x82ffdf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x82ffde8, FileInformation=0x82ffdf0) returned 0x0 [0194.293] NtSetInformationFile (FileHandle=0xc9c, IoStatusBlock=0x82ffde8, FileInformation=0x82ffdf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0194.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0194.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0194.294] FlushFileBuffers (hFile=0xc9c) returned 1 [0194.307] CloseHandle (hObject=0xc9c) returned 1 [0194.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d555f0 [0194.310] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\" [0194.310] wcscat (in: _Dest=0x3d555f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\68814F-Readme.txt" [0194.310] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\68814f-readme.txt")) returned 0xffffffff [0194.310] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\se\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc9c [0194.311] WriteFile (in: hFile=0xc9c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x82ffe2c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x82ffe2c*=0x8b9, lpOverlapped=0x0) returned 1 [0194.313] CloseHandle (hObject=0xc9c) returned 1 [0194.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0194.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b837f0) returned 1 Thread: id = 5952 os_tid = 0x2664 [0185.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7a38a48 [0185.946] wcscpy (in: _Dest=0x7a38a48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" [0185.946] wcscat (in: _Dest=0x7a38a48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\" [0185.946] wcscat (in: _Dest=0x7a38a48, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*" [0185.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ba78 [0185.946] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7718eef0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73d30 [0186.743] wcscmp (_String1=".", _String2=".") returned 0 [0186.743] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77168d90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x7718eef0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.743] wcscmp (_String1="..", _String2=".") returned 1 [0186.743] wcscmp (_String1="..", _String2="..") returned 0 [0186.743] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 1 [0186.743] wcscmp (_String1="DEFAULT.XSL", _String2=".") returned 1 [0186.743] wcscmp (_String1="DEFAULT.XSL", _String2="..") returned 1 [0186.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b83db8 [0186.744] wcscpy (in: _Dest=0x7b83db8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic" [0186.744] wcscat (in: _Dest=0x7b83db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\" [0186.744] wcscat (in: _Dest=0x7b83db8, _Source="DEFAULT.XSL" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" [0188.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88 [0188.367] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7718eef0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 0 [0188.367] FindClose (in: hFindFile=0x3e73d30 | out: hFindFile=0x3e73d30) returned 1 [0188.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ba78) returned 1 [0188.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38a48) returned 1 [0188.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38700) returned 1 Thread: id = 5953 os_tid = 0x2648 [0185.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7b7c550 [0185.947] wcscpy (in: _Dest=0x7b7c550, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0185.947] wcscat (in: _Dest=0x7b7c550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0185.948] wcscat (in: _Dest=0x7b7c550, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*" [0185.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c8e8 [0185.948] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e734b0 [0187.056] wcscmp (_String1=".", _String2=".") returned 0 [0187.056] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78df9590, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9065ec50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.056] wcscmp (_String1="..", _String2=".") returned 1 [0187.056] wcscmp (_String1="..", _String2="..") returned 0 [0187.056] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bba900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78df9590, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x49bba900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.js", cAlternateFileName="HIERAR~1.JS")) returned 1 [0187.056] wcscmp (_String1="Hierarchy.js", _String2=".") returned 1 [0187.056] wcscmp (_String1="Hierarchy.js", _String2="..") returned 1 [0187.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3ec6de0 [0187.057] wcscpy (in: _Dest=0x3ec6de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0187.057] wcscat (in: _Dest=0x3ec6de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0187.057] wcscat (in: _Dest=0x3ec6de0, _Source="Hierarchy.js" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" [0188.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c [0188.258] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88bee0b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x157e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.xsl", cAlternateFileName="HIERAR~1.XSL")) returned 1 [0188.258] wcscmp (_String1="Hierarchy.xsl", _String2=".") returned 1 [0188.258] wcscmp (_String1="Hierarchy.xsl", _String2="..") returned 1 [0188.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7ca94f0 [0188.258] wcscpy (in: _Dest=0x7ca94f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0188.258] wcscat (in: _Dest=0x7ca94f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0188.258] wcscat (in: _Dest=0x7ca94f0, _Source="Hierarchy.xsl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" [0188.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca94f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0188.259] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x807f7d10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="MINUS.GIF", cAlternateFileName="")) returned 1 [0188.259] wcscmp (_String1="MINUS.GIF", _String2=".") returned 1 [0188.260] wcscmp (_String1="MINUS.GIF", _String2="..") returned 1 [0188.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7ca9be0 [0188.260] wcscpy (in: _Dest=0x7ca9be0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0188.260] wcscat (in: _Dest=0x7ca9be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0188.260] wcscat (in: _Dest=0x7ca9be0, _Source="MINUS.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" [0188.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0188.261] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8fc8d190, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUS.GIF", cAlternateFileName="")) returned 1 [0188.261] wcscmp (_String1="PLUS.GIF", _String2=".") returned 1 [0188.261] wcscmp (_String1="PLUS.GIF", _String2="..") returned 1 [0188.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7ca9ab8 [0188.261] wcscpy (in: _Dest=0x7ca9ab8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0188.261] wcscat (in: _Dest=0x7ca9ab8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0188.261] wcscat (in: _Dest=0x7ca9ab8, _Source="PLUS.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" [0188.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0188.262] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0188.262] wcscmp (_String1="SPACER.GIF", _String2=".") returned 1 [0188.262] wcscmp (_String1="SPACER.GIF", _String2="..") returned 1 [0188.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca9e30 [0188.263] wcscpy (in: _Dest=0x7ca9e30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy" [0188.263] wcscat (in: _Dest=0x7ca9e30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\" [0188.263] wcscat (in: _Dest=0x7ca9e30, _Source="SPACER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" [0188.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0188.263] FindNextFileW (in: hFindFile=0x3e734b0, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aecd600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x4aecd600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 0 [0188.264] FindClose (in: hFindFile=0x3e734b0 | out: hFindFile=0x3e734b0) returned 1 [0188.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c8e8) returned 1 [0188.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c550) returned 1 [0188.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38d90) returned 1 Thread: id = 5954 os_tid = 0xfd0 [0185.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\customer support.fdt")) returned 0x20 [0185.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt", dwFileAttributes=0x20) returned 0 [0185.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\customer support.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.959] GetLastError () returned 0x5 [0185.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt", dwFileAttributes=0x20) returned 0 [0185.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 5955 os_tid = 0xb28 [0185.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hardware tracker.fdt")) returned 0x20 [0185.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt", dwFileAttributes=0x20) returned 0 [0185.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hardware tracker.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0185.976] GetLastError () returned 0x5 [0185.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt", dwFileAttributes=0x20) returned 0 [0185.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae2f0) returned 1 Thread: id = 5956 os_tid = 0x1224 [0185.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition - customized.fdt")) returned 0x20 [0187.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt", dwFileAttributes=0x20) returned 0 [0187.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition - customized.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.066] GetLastError () returned 0x5 [0187.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt", dwFileAttributes=0x20) returned 0 [0187.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38c78) returned 1 Thread: id = 5957 os_tid = 0x96c [0186.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition.fdt")) returned 0x20 [0187.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt", dwFileAttributes=0x20) returned 0 [0187.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.067] GetLastError () returned 0x5 [0187.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt", dwFileAttributes=0x20) returned 0 [0187.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadd20) returned 1 Thread: id = 5958 os_tid = 0xb50 [0186.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\policies.fdt")) returned 0x20 [0186.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT", dwFileAttributes=0x20) returned 0 [0186.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\policies.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.764] GetLastError () returned 0x5 [0186.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT", dwFileAttributes=0x20) returned 0 [0186.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc53b0) returned 1 Thread: id = 5959 os_tid = 0xda4 [0186.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\process library.fdt")) returned 0x20 [0186.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt", dwFileAttributes=0x20) returned 0 [0186.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\process library.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.763] GetLastError () returned 0x5 [0186.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt", dwFileAttributes=0x20) returned 0 [0186.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 5960 os_tid = 0xd9c [0186.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt")) returned 0x20 [0186.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt", dwFileAttributes=0x20) returned 0 [0186.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.761] GetLastError () returned 0x5 [0186.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt", dwFileAttributes=0x20) returned 0 [0186.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff88) returned 1 Thread: id = 5961 os_tid = 0x115c [0186.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\track issues.fdt")) returned 0x20 [0187.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt", dwFileAttributes=0x20) returned 0 [0187.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\track issues.fdt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.085] GetLastError () returned 0x5 [0187.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt", dwFileAttributes=0x20) returned 0 [0187.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafe98) returned 1 Thread: id = 5962 os_tid = 0xe88 [0186.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bc130 [0186.188] wcscpy (in: _Dest=0x30bc130, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" [0186.188] wcscat (in: _Dest=0x30bc130, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" [0186.188] wcscat (in: _Dest=0x30bc130, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\*" [0186.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3cb50 [0186.188] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\*", lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74130 [0186.774] wcscmp (_String1=".", _String2=".") returned 0 [0186.774] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.774] wcscmp (_String1="..", _String2=".") returned 1 [0186.774] wcscmp (_String1="..", _String2="..") returned 0 [0186.775] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.775] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.775] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b83ee0 [0186.775] wcscpy (in: _Dest=0x7b83ee0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk" [0186.775] wcscat (in: _Dest=0x7b83ee0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" [0186.775] wcscat (in: _Dest=0x7b83ee0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" [0188.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0188.370] FindNextFileW (in: hFindFile=0x3e74130, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.371] FindClose (in: hFindFile=0x3e74130 | out: hFindFile=0x3e74130) returned 1 [0188.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3cb50) returned 1 [0188.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc130) returned 1 [0188.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a40870) returned 1 Thread: id = 5963 os_tid = 0xef8 [0186.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bb5d8 [0186.189] wcscpy (in: _Dest=0x30bb5d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" [0186.189] wcscat (in: _Dest=0x30bb5d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" [0186.189] wcscat (in: _Dest=0x30bb5d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\*" [0186.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b0d8 [0186.189] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\*", lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e740b0 [0186.775] wcscmp (_String1=".", _String2=".") returned 0 [0186.775] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.775] wcscmp (_String1="..", _String2=".") returned 1 [0186.775] wcscmp (_String1="..", _String2="..") returned 0 [0186.775] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.775] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.775] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b84008 [0186.776] wcscpy (in: _Dest=0x7b84008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl" [0186.776] wcscat (in: _Dest=0x7b84008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" [0186.776] wcscat (in: _Dest=0x7b84008, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" [0188.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b84008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b0c [0188.268] FindNextFileW (in: hFindFile=0x3e740b0, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.268] FindClose (in: hFindFile=0x3e740b0 | out: hFindFile=0x3e740b0) returned 1 [0188.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b0d8) returned 1 [0188.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5d8) returned 1 [0188.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de76b8) returned 1 Thread: id = 5964 os_tid = 0x530 [0186.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x30bbc08 [0186.190] wcscpy (in: _Dest=0x30bbc08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" [0186.190] wcscat (in: _Dest=0x30bbc08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" [0186.190] wcscat (in: _Dest=0x30bbc08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\*" [0186.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d4f0 [0186.190] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\*", lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73e70 [0186.776] wcscmp (_String1=".", _String2=".") returned 0 [0186.776] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.776] wcscmp (_String1="..", _String2=".") returned 1 [0186.776] wcscmp (_String1="..", _String2="..") returned 0 [0186.776] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42be5e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.776] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.776] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x7b84130 [0186.776] wcscpy (in: _Dest=0x7b84130, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr" [0186.776] wcscat (in: _Dest=0x7b84130, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" [0186.776] wcscat (in: _Dest=0x7b84130, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" [0188.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b84130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0188.271] FindNextFileW (in: hFindFile=0x3e73e70, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42be5e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.272] FindClose (in: hFindFile=0x3e73e70 | out: hFindFile=0x3e73e70) returned 1 [0188.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d4f0) returned 1 [0188.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 [0188.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de9cb8) returned 1 Thread: id = 5965 os_tid = 0x608 [0186.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6238 [0186.191] wcscpy (in: _Dest=0x7ad6238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" [0186.191] wcscat (in: _Dest=0x7ad6238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" [0186.191] wcscat (in: _Dest=0x7ad6238, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\*" [0186.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3dc28 [0186.191] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\*", lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73eb0 [0186.777] wcscmp (_String1=".", _String2=".") returned 0 [0186.777] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.777] wcscmp (_String1="..", _String2=".") returned 1 [0186.777] wcscmp (_String1="..", _String2="..") returned 0 [0186.777] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.777] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.777] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3ec6818 [0186.777] wcscpy (in: _Dest=0x3ec6818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th" [0186.777] wcscat (in: _Dest=0x3ec6818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" [0186.777] wcscat (in: _Dest=0x3ec6818, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" [0188.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c [0188.274] FindNextFileW (in: hFindFile=0x3e73eb0, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.274] FindClose (in: hFindFile=0x3e73eb0 | out: hFindFile=0x3e73eb0) returned 1 [0188.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3dc28) returned 1 [0188.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6238) returned 1 [0188.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de6fb8) returned 1 Thread: id = 5966 os_tid = 0x5c8 [0186.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6340 [0186.192] wcscpy (in: _Dest=0x7ad6340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" [0186.192] wcscat (in: _Dest=0x7ad6340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" [0186.192] wcscat (in: _Dest=0x7ad6340, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\*" [0186.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bf48 [0186.192] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\*", lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73fb0 [0186.777] wcscmp (_String1=".", _String2=".") returned 0 [0186.777] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.777] wcscmp (_String1="..", _String2=".") returned 1 [0186.777] wcscmp (_String1="..", _String2="..") returned 0 [0186.777] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.777] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.777] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3ec6940 [0186.778] wcscpy (in: _Dest=0x3ec6940, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr" [0186.778] wcscat (in: _Dest=0x3ec6940, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" [0186.778] wcscat (in: _Dest=0x3ec6940, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" [0188.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0 [0188.276] FindNextFileW (in: hFindFile=0x3e73fb0, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.277] FindClose (in: hFindFile=0x3e73fb0 | out: hFindFile=0x3e73fb0) returned 1 [0188.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bf48) returned 1 [0188.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6340) returned 1 [0188.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea4b8) returned 1 Thread: id = 5967 os_tid = 0xf08 [0186.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6448 [0186.193] wcscpy (in: _Dest=0x7ad6448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" [0186.193] wcscat (in: _Dest=0x7ad6448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" [0186.193] wcscat (in: _Dest=0x7ad6448, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\*" [0186.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d9c0 [0186.193] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\*", lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73830 [0186.778] wcscmp (_String1=".", _String2=".") returned 0 [0186.778] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.778] wcscmp (_String1="..", _String2=".") returned 1 [0186.778] wcscmp (_String1="..", _String2="..") returned 0 [0186.778] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.778] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.778] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3ec6a68 [0186.778] wcscpy (in: _Dest=0x3ec6a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk" [0186.778] wcscat (in: _Dest=0x3ec6a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" [0186.778] wcscat (in: _Dest=0x3ec6a68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" [0188.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0188.279] FindNextFileW (in: hFindFile=0x3e73830, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.279] FindClose (in: hFindFile=0x3e73830 | out: hFindFile=0x3e73830) returned 1 [0188.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d9c0) returned 1 [0188.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6448) returned 1 [0188.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de70b8) returned 1 Thread: id = 5968 os_tid = 0xf04 [0186.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfa) returned 0x7ad6550 [0186.194] wcscpy (in: _Dest=0x7ad6550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" [0186.194] wcscat (in: _Dest=0x7ad6550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" [0186.194] wcscat (in: _Dest=0x7ad6550, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\*" [0186.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d758 [0186.195] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\*", lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73db0 [0186.779] wcscmp (_String1=".", _String2=".") returned 0 [0186.779] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.779] wcscmp (_String1="..", _String2=".") returned 1 [0186.779] wcscmp (_String1="..", _String2="..") returned 0 [0186.779] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ef8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.779] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.779] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3ec6b90 [0186.779] wcscpy (in: _Dest=0x3ec6b90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi" [0186.779] wcscat (in: _Dest=0x3ec6b90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" [0186.779] wcscat (in: _Dest=0x3ec6b90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" [0188.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0188.282] FindNextFileW (in: hFindFile=0x3e73db0, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ef8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.282] FindClose (in: hFindFile=0x3e73db0 | out: hFindFile=0x3e73db0) returned 1 [0188.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d758) returned 1 [0188.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6550) returned 1 [0188.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea7b8) returned 1 Thread: id = 5969 os_tid = 0xf00 [0186.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6658 [0186.195] wcscpy (in: _Dest=0x7ad6658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" [0186.195] wcscat (in: _Dest=0x7ad6658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" [0186.195] wcscat (in: _Dest=0x7ad6658, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\*" [0186.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a9a0 [0186.196] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\*", lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73430 [0186.644] wcscmp (_String1=".", _String2=".") returned 0 [0186.644] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.644] wcscmp (_String1="..", _String2=".") returned 1 [0186.644] wcscmp (_String1="..", _String2="..") returned 0 [0186.644] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.644] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.644] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7b83918 [0186.644] wcscpy (in: _Dest=0x7b83918, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN" [0186.644] wcscat (in: _Dest=0x7b83918, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" [0186.644] wcscat (in: _Dest=0x7b83918, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" [0187.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4 [0187.543] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.543] FindClose (in: hFindFile=0x3e73430 | out: hFindFile=0x3e73430) returned 1 [0187.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a9a0) returned 1 [0187.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6658) returned 1 [0187.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e638) returned 1 Thread: id = 5970 os_tid = 0x7ec [0186.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6760 [0186.196] wcscpy (in: _Dest=0x7ad6760, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" [0186.196] wcscat (in: _Dest=0x7ad6760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" [0186.197] wcscat (in: _Dest=0x7ad6760, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\*" [0186.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b5a8 [0186.197] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\*", lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74170 [0186.645] wcscmp (_String1=".", _String2=".") returned 0 [0186.645] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.645] wcscmp (_String1="..", _String2=".") returned 1 [0186.645] wcscmp (_String1="..", _String2="..") returned 0 [0186.645] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.645] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.645] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7b83b68 [0186.645] wcscpy (in: _Dest=0x7b83b68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW" [0186.645] wcscat (in: _Dest=0x7b83b68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" [0186.645] wcscat (in: _Dest=0x7b83b68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" [0186.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758 [0186.902] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c1f3f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.902] FindClose (in: hFindFile=0x3e74170 | out: hFindFile=0x3e74170) returned 1 [0186.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b5a8) returned 1 [0186.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6760) returned 1 [0186.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e848) returned 1 Thread: id = 5971 os_tid = 0xef4 [0186.197] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json")) returned 0x2020 [0186.748] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json", dwFileAttributes=0x20) returned 1 [0189.191] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b2c [0189.192] GetFileSizeEx (in: hFile=0x1b2c, lpFileSize=0xdfefbcc | out: lpFileSize=0xdfefbcc*=352) returned 1 [0189.192] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x15c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.192] ReadFile (in: hFile=0x1b2c, lpBuffer=0xdfefba8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdfefbb8, lpOverlapped=0x0 | out: lpBuffer=0xdfefba8*, lpNumberOfBytesRead=0xdfefbb8*=0x4, lpOverlapped=0x0) returned 1 [0189.194] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0189.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0189.194] NtQuerySystemTime (in: CurrentTime=0xdfefb40 | out: CurrentTime=0xdfefb40*=132462177677760000) returned 0x0 [0189.194] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x1fa24223 [0189.194] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x137a7cba [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x74afbd75 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0xcc892b7 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x60099a41 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x4f880ce4 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x5587a2db [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x3307189f [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x5ec81a25 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x668b0da8 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x1c9641ee [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0xc6c9b7b [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x4647959a [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x34633ee3 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x3c6b91df [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x253d8e2c [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x686f17b0 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x41964744 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x56a65bde [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x481884a1 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x687fa540 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x2f11dcd0 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x79bc1034 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0xef77ae6 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x19e5aee4 [0189.195] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x2446d73c [0189.196] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x2d0cdc35 [0189.196] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x7c1877ac [0189.196] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x2dd9b3b8 [0189.196] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x6972a892 [0189.196] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x64130b72 [0189.196] RtlRandomEx (in: Seed=0xdfefb38 | out: Seed=0xdfefb38) returned 0x2e22e92c [0189.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca828) returned 1 [0189.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b8fb70 [0189.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b93778 [0189.210] ReadFile (in: hFile=0x1b2c, lpBuffer=0x7b8fb70, nNumberOfBytesToRead=0x160, lpNumberOfBytesRead=0xdfefb34, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesRead=0xdfefb34*=0x160, lpOverlapped=0x0) returned 1 [0189.210] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.210] WriteFile (in: hFile=0x1b2c, lpBuffer=0x7b93778*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0xdfefb38, lpOverlapped=0x0 | out: lpBuffer=0x7b93778*, lpNumberOfBytesWritten=0xdfefb38*=0x160, lpOverlapped=0x0) returned 1 [0192.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0193.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0193.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0193.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0193.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0193.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0193.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25938) returned 1 [0193.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x7ad7eb0 [0193.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25938 [0193.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3ea30 [0193.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0193.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0193.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x3066ec0 [0193.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0193.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0193.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0193.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0193.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25938) returned 1 [0193.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b835a0 [0193.038] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.038] WriteFile (in: hFile=0x1b2c, lpBuffer=0x7b835a0*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0xdfefbc0, lpOverlapped=0x0 | out: lpBuffer=0x7b835a0*, lpNumberOfBytesWritten=0xdfefbc0*=0x11a, lpOverlapped=0x0) returned 1 [0193.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e56570 [0193.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3ea30 [0193.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0193.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0193.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0193.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0193.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0193.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0193.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0193.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56570) returned 1 [0193.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x51) returned 0x2fe6f68 [0193.189] sprintf (in: _Dest=0x2fe6f68, _Format="%c%c" | out: _Dest="1b") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f6a, _Format="%c%c" | out: _Dest="19") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f6c, _Format="%c%c" | out: _Dest="8f") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f6e, _Format="%c%c" | out: _Dest="29") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f70, _Format="%c%c" | out: _Dest="a2") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f72, _Format="%c%c" | out: _Dest="00") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f74, _Format="%c%c" | out: _Dest="a2") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f76, _Format="%c%c" | out: _Dest="42") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f78, _Format="%c%c" | out: _Dest="9a") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f7a, _Format="%c%c" | out: _Dest="b3") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f7c, _Format="%c%c" | out: _Dest="b2") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f7e, _Format="%c%c" | out: _Dest="b7") returned 2 [0193.189] sprintf (in: _Dest=0x2fe6f80, _Format="%c%c" | out: _Dest="71") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f82, _Format="%c%c" | out: _Dest="2e") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f84, _Format="%c%c" | out: _Dest="68") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f86, _Format="%c%c" | out: _Dest="e6") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f88, _Format="%c%c" | out: _Dest="ec") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f8a, _Format="%c%c" | out: _Dest="bd") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f8c, _Format="%c%c" | out: _Dest="05") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f8e, _Format="%c%c" | out: _Dest="c8") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f90, _Format="%c%c" | out: _Dest="7d") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f92, _Format="%c%c" | out: _Dest="fa") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f94, _Format="%c%c" | out: _Dest="0a") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f96, _Format="%c%c" | out: _Dest="e4") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f98, _Format="%c%c" | out: _Dest="f1") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f9a, _Format="%c%c" | out: _Dest="22") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f9c, _Format="%c%c" | out: _Dest="c3") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6f9e, _Format="%c%c" | out: _Dest="83") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6fa0, _Format="%c%c" | out: _Dest="e4") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6fa2, _Format="%c%c" | out: _Dest="6e") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6fa4, _Format="%c%c" | out: _Dest="99") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6fa6, _Format="%c%c" | out: _Dest="79") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6fa8, _Format="%c%c" | out: _Dest="c7") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6faa, _Format="%c%c" | out: _Dest="7f") returned 2 [0193.190] sprintf (in: _Dest=0x2fe6fac, _Format="%c%c" | out: _Dest="17") returned 2 [0193.191] sprintf (in: _Dest=0x2fe6fae, _Format="%c%c" | out: _Dest="8d") returned 2 [0193.191] sprintf (in: _Dest=0x2fe6fb0, _Format="%c%c" | out: _Dest="ef") returned 2 [0193.191] sprintf (in: _Dest=0x2fe6fb2, _Format="%c%c" | out: _Dest="a0") returned 2 [0193.191] sprintf (in: _Dest=0x2fe6fb4, _Format="%c%c" | out: _Dest="b1") returned 2 [0193.191] sprintf (in: _Dest=0x2fe6fb6, _Format="%c%c" | out: _Dest="78") returned 2 [0193.191] RtlInitAnsiString (in: DestinationString=0xdfefb48, SourceString="1b198f29a200a2429ab3b2b7712e68e6ecbd05c87dfa0ae4f122c383e46e9979c77f178defa0b178" | out: DestinationString="1b198f29a200a2429ab3b2b7712e68e6ecbd05c87dfa0ae4f122c383e46e9979c77f178defa0b178") [0193.191] RtlAnsiStringToUnicodeString (in: DestinationString=0xdfefb40, SourceString="1b198f29a200a2429ab3b2b7712e68e6ecbd05c87dfa0ae4f122c383e46e9979c77f178defa0b178", AllocateDestinationString=1 | out: DestinationString="1b198f29a200a2429ab3b2b7712e68e6ecbd05c87dfa0ae4f122c383e46e9979c77f178defa0b178") returned 0x0 [0193.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66fb0 [0193.191] RtlFreeAnsiString (AnsiString="1") [0193.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2fe6f68) returned 1 [0193.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37620) returned 1 [0193.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0193.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b835a0) returned 1 [0193.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3066ec0) returned 1 [0193.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0193.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad7eb0) returned 1 [0193.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0193.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0193.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b80) returned 1 [0193.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5d0) returned 1 [0193.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12e) returned 0x3ec9e08 [0193.192] wcscat (in: _Dest=0x3ec9e08, _Source="1b198f29a200a2429ab3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\1b198f29a200a2429ab3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\1b198f29a200a2429ab3" [0193.193] wcscat (in: _Dest=0x3ec9e08, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\1b198f29a200a2429ab3.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\1b198f29a200a2429ab3.68814f" [0193.193] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\1b198f29a200a2429ab3.68814f", NtPathName=0xdfefb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\1b198f29a200a2429ab3.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0193.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e0b020 [0193.193] NtSetInformationFile (FileHandle=0x1b2c, IoStatusBlock=0xdfefb40, FileInformation=0x3e0b020, Length=0x144, FileInformationClass=0xa) returned 0x0 [0193.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b020) returned 1 [0193.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b2d068) returned 1 [0193.195] NtQueryInformationFile (in: FileHandle=0x1b2c, IoStatusBlock=0xdfefb10, FileInformation=0xdfefb18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdfefb10, FileInformation=0xdfefb18) returned 0x0 [0193.195] NtSetInformationFile (FileHandle=0x1b2c, IoStatusBlock=0xdfefb10, FileInformation=0xdfefb18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0193.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9e08) returned 1 [0193.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66fb0) returned 1 [0193.198] FlushFileBuffers (hFile=0x1b2c) returned 1 [0193.204] CloseHandle (hObject=0x1b2c) returned 1 [0193.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7b835a0 [0193.209] wcscpy (in: _Dest=0x7b835a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0193.209] wcscat (in: _Dest=0x7b835a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\68814F-Readme.txt" [0193.209] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\68814f-readme.txt")) returned 0xffffffff [0193.209] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b2c [0193.212] WriteFile (in: hFile=0x1b2c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdfefb54, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xdfefb54*=0x8b9, lpOverlapped=0x0) returned 1 [0193.215] CloseHandle (hObject=0x1b2c) returned 1 [0193.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b835a0) returned 1 [0193.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 Thread: id = 5972 os_tid = 0xf2c [0186.211] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json")) returned 0x2020 [0186.748] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0189.211] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b30 [0189.211] GetFileSizeEx (in: hFile=0x1b30, lpFileSize=0xdbffe14 | out: lpFileSize=0xdbffe14*=11094) returned 1 [0189.211] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x2b52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.211] ReadFile (in: hFile=0x1b30, lpBuffer=0xdbffdf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdbffe00, lpOverlapped=0x0 | out: lpBuffer=0xdbffdf0*, lpNumberOfBytesRead=0xdbffe00*=0x4, lpOverlapped=0x0) returned 1 [0189.219] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0189.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0189.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0189.219] NtQuerySystemTime (in: CurrentTime=0xdbffd88 | out: CurrentTime=0xdbffd88*=132462177677916000) returned 0x0 [0189.219] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x12048700 [0189.219] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x67ff1b00 [0189.219] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x301019b5 [0189.219] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x5eb3b24d [0189.219] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x31f33ef4 [0189.219] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x7b20d04a [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x418b9aa5 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x5726cdb3 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x3584b227 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0xe0edf39 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x7d629029 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x7811b097 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x95bb898 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x3cab78fe [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x4c24e28c [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0xd6c8d13 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x328fed2 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0xe6941f1 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x4f0d5843 [0189.220] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x38f132f0 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x61ac00a6 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x16f277b3 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0xde5e255 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x1bc85c98 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x783131d5 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x705d7080 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0xbf2cea3 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x3d377924 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x67d4e5a4 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x299534a2 [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x46b15ccd [0189.221] RtlRandomEx (in: Seed=0xdbffd80 | out: Seed=0xdbffd80) returned 0x56ffba2a [0189.236] ReadFile (in: hFile=0x1b30, lpBuffer=0x7b88360, nNumberOfBytesToRead=0x2b56, lpNumberOfBytesRead=0xdbffd7c, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesRead=0xdbffd7c*=0x2b56, lpOverlapped=0x0) returned 1 [0189.237] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.237] WriteFile (in: hFile=0x1b30, lpBuffer=0x7b8bf68*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0xdbffd80, lpOverlapped=0x0 | out: lpBuffer=0x7b8bf68*, lpNumberOfBytesWritten=0xdbffd80*=0x2b56, lpOverlapped=0x0) returned 1 [0193.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0193.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0193.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4438) returned 1 [0193.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0193.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0193.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc98) returned 1 [0193.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ae8) returned 1 [0193.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a25ae8 [0193.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a25860 [0193.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dc98 [0193.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0193.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4438) returned 1 [0193.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7a25620 [0193.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0193.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0193.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0193.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc98) returned 1 [0193.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25860) returned 1 [0193.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d553a0 [0193.521] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.521] WriteFile (in: hFile=0x1b30, lpBuffer=0x3d553a0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xdbffe08, lpOverlapped=0x0 | out: lpBuffer=0x3d553a0*, lpNumberOfBytesWritten=0xdbffe08*=0x11e, lpOverlapped=0x0) returned 1 [0194.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e48b58 [0194.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fce0 [0194.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38d0 [0194.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38d0) returned 1 [0194.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0194.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38d0 [0194.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0194.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0194.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0194.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b58) returned 1 [0194.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3e1ec08 [0194.421] sprintf (in: _Dest=0x3e1ec08, _Format="%c%c" | out: _Dest="57") returned 2 [0194.421] sprintf (in: _Dest=0x3e1ec0a, _Format="%c%c" | out: _Dest="aa") returned 2 [0194.421] sprintf (in: _Dest=0x3e1ec0c, _Format="%c%c" | out: _Dest="d1") returned 2 [0194.421] sprintf (in: _Dest=0x3e1ec0e, _Format="%c%c" | out: _Dest="29") returned 2 [0194.421] sprintf (in: _Dest=0x3e1ec10, _Format="%c%c" | out: _Dest="7d") returned 2 [0194.421] sprintf (in: _Dest=0x3e1ec12, _Format="%c%c" | out: _Dest="ac") returned 2 [0194.421] sprintf (in: _Dest=0x3e1ec14, _Format="%c%c" | out: _Dest="62") returned 2 [0194.421] sprintf (in: _Dest=0x3e1ec16, _Format="%c%c" | out: _Dest="29") returned 2 [0194.421] sprintf (in: _Dest=0x3e1ec18, _Format="%c%c" | out: _Dest="3e") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec1a, _Format="%c%c" | out: _Dest="bd") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec1c, _Format="%c%c" | out: _Dest="22") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec1e, _Format="%c%c" | out: _Dest="f4") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec20, _Format="%c%c" | out: _Dest="92") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec22, _Format="%c%c" | out: _Dest="7c") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec24, _Format="%c%c" | out: _Dest="0a") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec26, _Format="%c%c" | out: _Dest="4f") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec28, _Format="%c%c" | out: _Dest="ff") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec2a, _Format="%c%c" | out: _Dest="9f") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec2c, _Format="%c%c" | out: _Dest="0b") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec2e, _Format="%c%c" | out: _Dest="d3") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec30, _Format="%c%c" | out: _Dest="a7") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec32, _Format="%c%c" | out: _Dest="04") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec34, _Format="%c%c" | out: _Dest="97") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec36, _Format="%c%c" | out: _Dest="54") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec38, _Format="%c%c" | out: _Dest="47") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec3a, _Format="%c%c" | out: _Dest="23") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec3c, _Format="%c%c" | out: _Dest="61") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec3e, _Format="%c%c" | out: _Dest="3b") returned 2 [0194.422] sprintf (in: _Dest=0x3e1ec40, _Format="%c%c" | out: _Dest="76") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec42, _Format="%c%c" | out: _Dest="b2") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec44, _Format="%c%c" | out: _Dest="67") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec46, _Format="%c%c" | out: _Dest="ce") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec48, _Format="%c%c" | out: _Dest="67") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec4a, _Format="%c%c" | out: _Dest="5d") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec4c, _Format="%c%c" | out: _Dest="66") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec4e, _Format="%c%c" | out: _Dest="69") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec50, _Format="%c%c" | out: _Dest="88") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec52, _Format="%c%c" | out: _Dest="92") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec54, _Format="%c%c" | out: _Dest="04") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec56, _Format="%c%c" | out: _Dest="79") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec58, _Format="%c%c" | out: _Dest="8b") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec5a, _Format="%c%c" | out: _Dest="aa") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec5c, _Format="%c%c" | out: _Dest="c6") returned 2 [0194.423] sprintf (in: _Dest=0x3e1ec5e, _Format="%c%c" | out: _Dest="5b") returned 2 [0194.423] RtlInitAnsiString (in: DestinationString=0xdbffd90, SourceString="57aad1297dac62293ebd22f4927c0a4fff9f0bd3a70497544723613b76b267ce675d6669889204798baac65b" | out: DestinationString="57aad1297dac62293ebd22f4927c0a4fff9f0bd3a70497544723613b76b267ce675d6669889204798baac65b") [0194.424] RtlAnsiStringToUnicodeString (in: DestinationString=0xdbffd88, SourceString="57aad1297dac62293ebd22f4927c0a4fff9f0bd3a70497544723613b76b267ce675d6669889204798baac65b", AllocateDestinationString=1 | out: DestinationString="57aad1297dac62293ebd22f4927c0a4fff9f0bd3a70497544723613b76b267ce675d6669889204798baac65b") returned 0x0 [0194.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333168 [0194.424] RtlFreeAnsiString (AnsiString="5") [0194.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ec08) returned 1 [0194.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e79368) returned 1 [0194.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38d0) returned 1 [0194.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0194.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25620) returned 1 [0194.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4438) returned 1 [0194.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ae8) returned 1 [0194.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e30) returned 1 [0194.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0194.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca648) returned 1 [0194.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0f8) returned 1 [0194.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x132) returned 0x3ea2eb0 [0194.425] wcscat (in: _Dest=0x3ea2eb0, _Source="57aad1297dac62293ebd22" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\57aad1297dac62293ebd22") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\57aad1297dac62293ebd22" [0194.425] wcscat (in: _Dest=0x3ea2eb0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\57aad1297dac62293ebd22.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\57aad1297dac62293ebd22.68814f" [0194.425] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\57aad1297dac62293ebd22.68814f", NtPathName=0xdbffd80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\57aad1297dac62293ebd22.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0194.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e0a560 [0194.426] NtSetInformationFile (FileHandle=0x1b30, IoStatusBlock=0xdbffd88, FileInformation=0x3e0a560, Length=0x148, FileInformationClass=0xa) returned 0x0 [0194.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0a560) returned 1 [0194.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cef5a8) returned 1 [0194.428] NtQueryInformationFile (in: FileHandle=0x1b30, IoStatusBlock=0xdbffd58, FileInformation=0xdbffd60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdbffd58, FileInformation=0xdbffd60) returned 0x0 [0194.428] NtSetInformationFile (FileHandle=0x1b30, IoStatusBlock=0xdbffd58, FileInformation=0xdbffd60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0194.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0194.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333168) returned 1 [0194.430] FlushFileBuffers (hFile=0x1b30) returned 1 [0194.432] CloseHandle (hObject=0x1b30) returned 1 [0194.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d553a0 [0194.434] wcscpy (in: _Dest=0x3d553a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\" [0194.434] wcscat (in: _Dest=0x3d553a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\68814F-Readme.txt" [0194.434] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\68814f-readme.txt")) returned 0x2020 [0194.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0194.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 Thread: id = 5973 os_tid = 0x14c [0186.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6868 [0186.211] wcscpy (in: _Dest=0x7ad6868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0186.211] wcscat (in: _Dest=0x7ad6868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" [0186.211] wcscat (in: _Dest=0x7ad6868, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*" [0186.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b340 [0186.211] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d77610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d7c430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d680 [0187.266] wcscmp (_String1=".", _String2=".") returned 0 [0187.266] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d77610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d7c430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.266] wcscmp (_String1="..", _String2=".") returned 1 [0187.266] wcscmp (_String1="..", _String2="..") returned 0 [0187.266] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d7c430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.266] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.266] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca84c0 [0187.266] wcscpy (in: _Dest=0x7ca84c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" [0187.266] wcscat (in: _Dest=0x7ca84c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" [0187.266] wcscat (in: _Dest=0x7ca84c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" [0188.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca84c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f8 [0188.226] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d7c430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d7c430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe5f00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.226] FindClose (in: hFindFile=0x7a2d680 | out: hFindFile=0x7a2d680) returned 1 [0188.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b340) returned 1 [0188.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6868) returned 1 [0188.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd0a8) returned 1 Thread: id = 5974 os_tid = 0x490 [0186.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6970 [0186.212] wcscpy (in: _Dest=0x7ad6970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0186.212] wcscat (in: _Dest=0x7ad6970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" [0186.212] wcscat (in: _Dest=0x7ad6970, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*" [0186.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c1b0 [0186.212] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d83960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d86070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0187.266] wcscmp (_String1=".", _String2=".") returned 0 [0187.266] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d83960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d86070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.266] wcscmp (_String1="..", _String2=".") returned 1 [0187.266] wcscmp (_String1="..", _String2="..") returned 0 [0187.266] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d86070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.267] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.267] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca85e8 [0187.267] wcscpy (in: _Dest=0x7ca85e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" [0187.267] wcscat (in: _Dest=0x7ca85e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" [0187.267] wcscat (in: _Dest=0x7ca85e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" [0188.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca85e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0 [0188.229] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d86070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d86070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.229] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0188.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c1b0) returned 1 [0188.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6970) returned 1 [0188.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc238) returned 1 Thread: id = 5975 os_tid = 0x125c [0186.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6a78 [0186.212] wcscpy (in: _Dest=0x7ad6a78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0186.213] wcscat (in: _Dest=0x7ad6a78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" [0186.213] wcscat (in: _Dest=0x7ad6a78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*" [0186.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3de90 [0186.213] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d8d5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d8fcb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d8fcb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da40 [0187.264] wcscmp (_String1=".", _String2=".") returned 0 [0187.265] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d8d5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d8fcb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d8fcb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.265] wcscmp (_String1="..", _String2=".") returned 1 [0187.265] wcscmp (_String1="..", _String2="..") returned 0 [0187.265] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d8fcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d923c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.265] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.265] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca8398 [0187.265] wcscpy (in: _Dest=0x7ca8398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" [0187.265] wcscat (in: _Dest=0x7ca8398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" [0187.265] wcscat (in: _Dest=0x7ca8398, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" [0188.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c [0188.224] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d8fcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d923c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.224] FindClose (in: hFindFile=0x7a2da40 | out: hFindFile=0x7a2da40) returned 1 [0188.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3de90) returned 1 [0188.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6a78) returned 1 [0188.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc760) returned 1 Thread: id = 5976 os_tid = 0x1a58 [0186.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6b80 [0186.213] wcscpy (in: _Dest=0x7ad6b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0186.213] wcscat (in: _Dest=0x7ad6b80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" [0186.213] wcscat (in: _Dest=0x7ad6b80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*" [0186.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d020 [0186.213] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d923c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d998f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d440 [0187.267] wcscmp (_String1=".", _String2=".") returned 0 [0187.267] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d923c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6d998f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.267] wcscmp (_String1="..", _String2=".") returned 1 [0187.267] wcscmp (_String1="..", _String2="..") returned 0 [0187.267] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d998f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.267] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.267] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca8710 [0187.268] wcscpy (in: _Dest=0x7ca8710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" [0187.268] wcscat (in: _Dest=0x7ca8710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" [0187.268] wcscat (in: _Dest=0x7ca8710, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" [0188.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20 [0188.232] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6d998f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6d998f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.232] FindClose (in: hFindFile=0x7a2d440 | out: hFindFile=0x7a2d440) returned 1 [0188.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d020) returned 1 [0188.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b80) returned 1 [0188.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcc88) returned 1 Thread: id = 5977 os_tid = 0x2024 [0186.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6c88 [0186.214] wcscpy (in: _Dest=0x7ad6c88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0186.214] wcscat (in: _Dest=0x7ad6c88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" [0186.214] wcscat (in: _Dest=0x7ad6c88, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*" [0186.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ac08 [0186.214] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d9e710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6da3530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0187.268] wcscmp (_String1=".", _String2=".") returned 0 [0187.268] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6d9e710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6da3530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.268] wcscmp (_String1="..", _String2=".") returned 1 [0187.268] wcscmp (_String1="..", _String2="..") returned 0 [0187.268] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6da3530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.268] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.268] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.268] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca8838 [0187.268] wcscpy (in: _Dest=0x7ca8838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" [0187.268] wcscat (in: _Dest=0x7ca8838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" [0187.268] wcscat (in: _Dest=0x7ca8838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" [0188.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58 [0188.234] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6da3530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6da3530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.234] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0188.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ac08) returned 1 [0188.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c88) returned 1 [0188.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc868) returned 1 Thread: id = 5978 os_tid = 0xc50 [0186.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6d90 [0186.214] wcscpy (in: _Dest=0x7ad6d90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0186.214] wcscat (in: _Dest=0x7ad6d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\" [0186.214] wcscat (in: _Dest=0x7ad6d90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*" [0186.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bce0 [0186.214] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6daaa60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dad170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0187.269] wcscmp (_String1=".", _String2=".") returned 0 [0187.269] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6daaa60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dad170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.269] wcscmp (_String1="..", _String2=".") returned 1 [0187.269] wcscmp (_String1="..", _String2="..") returned 0 [0187.269] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dad170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.269] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.269] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca8960 [0187.269] wcscpy (in: _Dest=0x7ca8960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" [0187.269] wcscat (in: _Dest=0x7ca8960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\" [0187.269] wcscat (in: _Dest=0x7ca8960, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" [0188.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc [0188.237] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dad170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dad170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xcacedf00, ftLastWriteTime.dwHighDateTime=0x1d10b1c, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.237] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0188.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bce0) returned 1 [0188.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6d90) returned 1 [0188.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad52c0) returned 1 Thread: id = 5979 os_tid = 0x2690 [0186.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7ad6e98 [0186.215] wcscpy (in: _Dest=0x7ad6e98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0186.215] wcscat (in: _Dest=0x7ad6e98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" [0186.215] wcscat (in: _Dest=0x7ad6e98, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*" [0186.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d288 [0186.215] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6db46a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6db94c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0187.269] wcscmp (_String1=".", _String2=".") returned 0 [0187.269] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6db46a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6db94c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.269] wcscmp (_String1="..", _String2=".") returned 1 [0187.269] wcscmp (_String1="..", _String2="..") returned 0 [0187.269] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6db94c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.270] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.270] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca8a88 [0187.270] wcscpy (in: _Dest=0x7ca8a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" [0187.270] wcscat (in: _Dest=0x7ca8a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" [0187.270] wcscat (in: _Dest=0x7ca8a88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" [0188.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0188.240] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6db94c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6db94c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.240] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0188.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d288) returned 1 [0188.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6e98) returned 1 [0188.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad53c8) returned 1 Thread: id = 5980 os_tid = 0xddc [0186.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7b7ce10 [0186.215] wcscpy (in: _Dest=0x7b7ce10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0186.215] wcscat (in: _Dest=0x7b7ce10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" [0186.215] wcscat (in: _Dest=0x7b7ce10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*" [0186.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a4d0 [0186.215] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dc09f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dc3100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0187.270] wcscmp (_String1=".", _String2=".") returned 0 [0187.270] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dc09f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dc3100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.270] wcscmp (_String1="..", _String2=".") returned 1 [0187.270] wcscmp (_String1="..", _String2="..") returned 0 [0187.270] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dc3100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.270] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.270] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7ca8bb0 [0187.271] wcscpy (in: _Dest=0x7ca8bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" [0187.271] wcscat (in: _Dest=0x7ca8bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" [0187.271] wcscat (in: _Dest=0x7ca8bb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" [0188.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22a8 [0188.242] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dc3100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dc3100, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.242] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0188.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a4d0) returned 1 [0188.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ce10) returned 1 [0188.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38ea8) returned 1 Thread: id = 5981 os_tid = 0xe20 [0186.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7b7c780 [0186.216] wcscpy (in: _Dest=0x7b7c780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0186.216] wcscat (in: _Dest=0x7b7c780, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" [0186.216] wcscat (in: _Dest=0x7b7c780, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*" [0186.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c418 [0186.216] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dca630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dccd40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d340 [0187.271] wcscmp (_String1=".", _String2=".") returned 0 [0187.271] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dca630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dccd40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.271] wcscmp (_String1="..", _String2=".") returned 1 [0187.271] wcscmp (_String1="..", _String2="..") returned 0 [0187.271] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dccd40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.271] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.271] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7ca8cd8 [0187.271] wcscpy (in: _Dest=0x7ca8cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" [0187.271] wcscat (in: _Dest=0x7ca8cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" [0187.271] wcscat (in: _Dest=0x7ca8cd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" [0188.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc [0188.245] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dccd40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dccd40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.245] FindClose (in: hFindFile=0x7a2d340 | out: hFindFile=0x7a2d340) returned 1 [0188.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c418) returned 1 [0188.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c780) returned 1 [0188.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c438) returned 1 Thread: id = 5982 os_tid = 0xda8 [0186.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b110 [0186.216] wcscpy (in: _Dest=0x7a6b110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0186.216] wcscat (in: _Dest=0x7a6b110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" [0186.216] wcscat (in: _Dest=0x7a6b110, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*" [0186.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337900 [0186.216] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dd4270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd6980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dd6980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0187.272] wcscmp (_String1=".", _String2=".") returned 0 [0187.272] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dd4270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd6980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dd6980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.272] wcscmp (_String1="..", _String2=".") returned 1 [0187.272] wcscmp (_String1="..", _String2="..") returned 0 [0187.272] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dd6980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd9090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.272] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.272] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca8e00 [0187.272] wcscpy (in: _Dest=0x7ca8e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" [0187.272] wcscat (in: _Dest=0x7ca8e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" [0187.272] wcscat (in: _Dest=0x7ca8e00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" [0188.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0188.247] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x337900 | out: lpFindFileData=0x337900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dd6980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dd9090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fe8610, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.247] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0188.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337900) returned 1 [0188.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b110) returned 1 [0188.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad55d8) returned 1 Thread: id = 5983 os_tid = 0x1a54 [0186.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b008 [0186.217] wcscpy (in: _Dest=0x7a6b008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0186.217] wcscat (in: _Dest=0x7a6b008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" [0186.217] wcscat (in: _Dest=0x7a6b008, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*" [0186.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336cf8 [0186.217] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dddeb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6de2cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0187.272] wcscmp (_String1=".", _String2=".") returned 0 [0187.272] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dddeb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6de2cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.273] wcscmp (_String1="..", _String2=".") returned 1 [0187.273] wcscmp (_String1="..", _String2="..") returned 0 [0187.273] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6de2cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.273] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.273] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca8f28 [0187.273] wcscpy (in: _Dest=0x7ca8f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" [0187.273] wcscat (in: _Dest=0x7ca8f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" [0187.273] wcscat (in: _Dest=0x7ca8f28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" [0188.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca8f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0188.250] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x336cf8 | out: lpFindFileData=0x336cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6de2cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6de2cd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.250] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0188.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336cf8) returned 1 [0188.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b008) returned 1 [0188.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad56e0) returned 1 Thread: id = 5984 os_tid = 0x1a64 [0186.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6aae0 [0186.217] wcscpy (in: _Dest=0x7a6aae0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0186.217] wcscat (in: _Dest=0x7a6aae0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" [0186.218] wcscat (in: _Dest=0x7a6aae0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*" [0186.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3360f0 [0186.218] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6de7af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dec910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0187.273] wcscmp (_String1=".", _String2=".") returned 0 [0187.273] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6de7af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6dec910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.273] wcscmp (_String1="..", _String2=".") returned 1 [0187.273] wcscmp (_String1="..", _String2="..") returned 0 [0187.273] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dec910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.273] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.273] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca9050 [0187.274] wcscpy (in: _Dest=0x7ca9050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" [0187.274] wcscat (in: _Dest=0x7ca9050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" [0187.274] wcscat (in: _Dest=0x7ca9050, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" [0188.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984 [0188.252] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3360f0 | out: lpFindFileData=0x3360f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6dec910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6dec910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.253] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0188.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3360f0) returned 1 [0188.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6aae0) returned 1 [0188.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad57e8) returned 1 Thread: id = 5985 os_tid = 0x1f04 [0186.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b428 [0186.218] wcscpy (in: _Dest=0x7a6b428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0186.218] wcscat (in: _Dest=0x7a6b428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" [0186.218] wcscat (in: _Dest=0x7a6b428, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*" [0186.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3371c8 [0186.218] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6df3e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6df6550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0187.274] wcscmp (_String1=".", _String2=".") returned 0 [0187.274] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6df3e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6df6550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.274] wcscmp (_String1="..", _String2=".") returned 1 [0187.274] wcscmp (_String1="..", _String2="..") returned 0 [0187.274] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6df6550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.274] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.274] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca9178 [0187.274] wcscpy (in: _Dest=0x7ca9178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" [0187.274] wcscat (in: _Dest=0x7ca9178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" [0187.274] wcscat (in: _Dest=0x7ca9178, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" [0188.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988 [0188.255] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3371c8 | out: lpFindFileData=0x3371c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6df6550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6df6550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.255] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0188.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3371c8) returned 1 [0188.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b428) returned 1 [0188.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad58f0) returned 1 Thread: id = 5986 os_tid = 0xb08 [0186.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b320 [0186.219] wcscpy (in: _Dest=0x7a6b320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0186.219] wcscat (in: _Dest=0x7a6b320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" [0186.219] wcscat (in: _Dest=0x7a6b320, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*" [0186.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0186.219] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dfda80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e00190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74170 [0186.944] wcscmp (_String1=".", _String2=".") returned 0 [0186.944] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6dfda80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e00190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.944] wcscmp (_String1="..", _String2=".") returned 1 [0186.944] wcscmp (_String1="..", _String2="..") returned 0 [0186.944] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e00190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.944] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.944] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec6cb8 [0186.944] wcscpy (in: _Dest=0x3ec6cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" [0186.944] wcscat (in: _Dest=0x3ec6cb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" [0186.944] wcscat (in: _Dest=0x3ec6cb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" [0187.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c [0187.515] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e00190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e00190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.516] FindClose (in: hFindFile=0x3e74170 | out: hFindFile=0x3e74170) returned 1 [0187.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0187.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b320) returned 1 [0187.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad59f8) returned 1 Thread: id = 5987 os_tid = 0x1260 [0186.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6a090 [0186.219] wcscpy (in: _Dest=0x7a6a090, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0186.219] wcscat (in: _Dest=0x7a6a090, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" [0186.219] wcscat (in: _Dest=0x7a6a090, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*" [0186.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0186.219] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e076c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e09dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0187.240] wcscmp (_String1=".", _String2=".") returned 0 [0187.240] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e076c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e09dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.240] wcscmp (_String1="..", _String2=".") returned 1 [0187.240] wcscmp (_String1="..", _String2="..") returned 0 [0187.240] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e09dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.240] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.240] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x3ec7158 [0187.240] wcscpy (in: _Dest=0x3ec7158, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" [0187.240] wcscat (in: _Dest=0x3ec7158, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" [0187.240] wcscat (in: _Dest=0x3ec7158, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" [0190.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214 [0190.914] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e09dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e09dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.914] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0190.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0190.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a090) returned 1 [0190.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5b00) returned 1 Thread: id = 5988 os_tid = 0x12cc [0186.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah")) returned 0x20 [0187.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah", dwFileAttributes=0x20) returned 0 [0187.089] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.089] GetLastError () returned 0x5 [0187.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah", dwFileAttributes=0x20) returned 0 [0187.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ba8) returned 1 Thread: id = 5989 os_tid = 0x12e8 [0186.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\center")) returned 0x20 [0186.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center", dwFileAttributes=0x20) returned 0 [0186.781] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\center"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.781] GetLastError () returned 0x5 [0186.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center", dwFileAttributes=0x20) returned 0 [0186.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 5990 os_tid = 0x12ec [0186.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem")) returned 0x20 [0186.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem", dwFileAttributes=0x20) returned 0 [0186.780] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" (normalized: "c:\\program files\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0186.780] GetLastError () returned 0x5 [0186.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem", dwFileAttributes=0x20) returned 0 [0186.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 5991 os_tid = 0x12f0 [0186.221] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0191.768] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0198.536] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17d0 [0198.537] GetFileSizeEx (in: hFile=0x17d0, lpFileSize=0x88ffe2c | out: lpFileSize=0x88ffe2c*=249) returned 1 [0198.537] SetFilePointerEx (in: hFile=0x17d0, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.537] ReadFile (in: hFile=0x17d0, lpBuffer=0x88ffe08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x88ffe18, lpOverlapped=0x0 | out: lpBuffer=0x88ffe08*, lpNumberOfBytesRead=0x88ffe18*=0x4, lpOverlapped=0x0) returned 1 [0198.540] SetFilePointerEx (in: hFile=0x17d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53be8 [0198.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0198.540] NtQuerySystemTime (in: CurrentTime=0x88ffda0 | out: CurrentTime=0x88ffda0*=132462177771204000) returned 0x0 [0198.540] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x327692cd [0198.540] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x42bcde19 [0198.540] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x5e11cfef [0198.540] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x5086d74a [0198.540] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x217ca201 [0198.540] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x3409cf8b [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x402a6253 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x3c95bcb7 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x168bb6a1 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x3d27d246 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x45e3bf2f [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x56a6940 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x3b91df56 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x7dedc526 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x65117139 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x2942bb22 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x374d4938 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x7dd0af67 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x253c9bad [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x5a11f9d8 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x7e791c12 [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x63cbe0e [0198.541] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x49366ed5 [0198.542] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x1277a343 [0198.542] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x43e7c00 [0198.542] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x10fc961f [0198.542] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x5f0f5c15 [0198.542] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x9f59cc9 [0198.542] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x2753aa74 [0198.542] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x215c02a3 [0198.542] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0x35a475aa [0198.542] RtlRandomEx (in: Seed=0x88ffd98 | out: Seed=0x88ffd98) returned 0xcffa74e [0198.557] ReadFile (in: hFile=0x17d0, lpBuffer=0x10e93c68, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x88ffd94, lpOverlapped=0x0 | out: lpBuffer=0x10e93c68*, lpNumberOfBytesRead=0x88ffd94*=0xf9, lpOverlapped=0x0) returned 1 [0198.558] SetFilePointerEx (in: hFile=0x17d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.558] WriteFile (in: hFile=0x17d0, lpBuffer=0x10e97870*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x88ffd98, lpOverlapped=0x0 | out: lpBuffer=0x10e97870*, lpNumberOfBytesWritten=0x88ffd98*=0xf9, lpOverlapped=0x0) returned 1 [0200.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0200.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0200.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0200.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e97870) returned 1 [0200.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e93c68) returned 1 [0200.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cdb0) returned 1 [0200.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84c68) returned 1 [0200.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85dc8 [0200.073] SetFilePointerEx (in: hFile=0x17d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.073] WriteFile (in: hFile=0x17d0, lpBuffer=0x7cbd718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x88ffe20, lpOverlapped=0x0 | out: lpBuffer=0x7cbd718*, lpNumberOfBytesWritten=0x88ffe20*=0x10c, lpOverlapped=0x0) returned 1 [0200.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53da0 [0200.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53da0) returned 1 [0200.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53da0 [0200.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54048 [0200.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d00 [0200.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d00) returned 1 [0200.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.893] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="11") returned 2 [0200.893] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="fb") returned 2 [0200.893] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="30") returned 2 [0200.893] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="ef") returned 2 [0200.894] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="a3") returned 2 [0200.894] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="7d") returned 2 [0200.894] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="4c") returned 2 [0200.894] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="80") returned 2 [0200.894] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="53") returned 2 [0200.894] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="d5") returned 2 [0200.894] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="fa") returned 2 [0200.894] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="49") returned 2 [0200.894] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="53") returned 2 [0200.894] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="cd") returned 2 [0200.894] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.894] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="87") returned 2 [0200.894] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="94") returned 2 [0200.894] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="d6") returned 2 [0200.894] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="64") returned 2 [0200.894] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="47") returned 2 [0200.894] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="af") returned 2 [0200.894] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="97") returned 2 [0200.894] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="f5") returned 2 [0200.894] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="af") returned 2 [0200.894] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="d7") returned 2 [0200.894] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.894] RtlInitAnsiString (in: DestinationString=0x88ffda8, SourceString="11fb30efa37d4c8053d5fa4953cdce8794d66447af97f5afd77b" | out: DestinationString="11fb30efa37d4c8053d5fa4953cdce8794d66447af97f5afd77b") [0200.894] RtlAnsiStringToUnicodeString (in: DestinationString=0x88ffda0, SourceString="11fb30efa37d4c8053d5fa4953cdce8794d66447af97f5afd77b", AllocateDestinationString=1 | out: DestinationString="11fb30efa37d4c8053d5fa4953cdce8794d66447af97f5afd77b") returned 0x0 [0200.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c630 [0200.894] wcscat (in: _Dest=0x7ddaaf0, _Source="11fb30efa37d4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\11fb30efa37d4") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\11fb30efa37d4" [0200.894] wcscat (in: _Dest=0x7ddaaf0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\11fb30efa37d4.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\11fb30efa37d4.68814f" [0200.894] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\11fb30efa37d4.68814f", NtPathName=0x88ffd98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\11fb30efa37d4.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7dd9968 [0201.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9968) returned 1 [0201.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e93830) returned 1 [0201.174] NtQueryInformationFile (in: FileHandle=0x17d0, IoStatusBlock=0x88ffd70, FileInformation=0x88ffd78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x88ffd70, FileInformation=0x88ffd78) returned 0x0 [0201.174] NtSetInformationFile (FileHandle=0x17d0, IoStatusBlock=0x88ffd70, FileInformation=0x88ffd78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddaaf0) returned 1 [0201.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c630) returned 1 [0201.427] FlushFileBuffers (hFile=0x17d0) returned 1 [0201.438] CloseHandle (hObject=0x17d0) returned 1 [0208.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7ddeaf0 [0208.602] wcscpy (in: _Dest=0x7ddeaf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\" [0208.602] wcscat (in: _Dest=0x7ddeaf0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\68814F-Readme.txt" [0208.602] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\68814f-readme.txt")) returned 0xffffffff [0208.602] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_GB\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_gb\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf70 [0209.658] WriteFile (in: hFile=0xf70, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x88ffdb4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x88ffdb4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.659] CloseHandle (hObject=0xf70) returned 1 [0209.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddeaf0) returned 1 [0209.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54938) returned 1 Thread: id = 5992 os_tid = 0x12f8 [0186.224] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0191.771] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0197.731] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1434 [0197.731] GetFileSizeEx (in: hFile=0x1434, lpFileSize=0xe68fcb4 | out: lpFileSize=0xe68fcb4*=249) returned 1 [0197.731] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.731] ReadFile (in: hFile=0x1434, lpBuffer=0xe68fc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe68fca0, lpOverlapped=0x0 | out: lpBuffer=0xe68fc90*, lpNumberOfBytesRead=0xe68fca0*=0x4, lpOverlapped=0x0) returned 1 [0197.733] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0197.733] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0197.733] NtQuerySystemTime (in: CurrentTime=0xe68fc28 | out: CurrentTime=0xe68fc28*=132462177763092000) returned 0x0 [0197.733] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x10d6682e [0197.733] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x25f9314b [0197.733] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x64681193 [0197.733] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x59a757f3 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x704573bc [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x70aec35f [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x243a039c [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x47dbc644 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x2cb37d1c [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x59cc91e [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0xd730d40 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x16f2c9c2 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x45688907 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x5f4c1ff8 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x16cd24ac [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x251e8a4d [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x1cf944c2 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x5e532f18 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0xb20e416 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x25e01bfd [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x789d8178 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x764b1bec [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x71594f53 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x75cf2541 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x55c5922c [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x217227ea [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x2f7040a3 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x3275fbec [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x4e4b8aa9 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0xe1433d8 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x28f6cc82 [0197.734] RtlRandomEx (in: Seed=0xe68fc20 | out: Seed=0xe68fc20) returned 0x7b86bde [0197.743] ReadFile (in: hFile=0x1434, lpBuffer=0x10e394b8, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0xe68fc1c, lpOverlapped=0x0 | out: lpBuffer=0x10e394b8*, lpNumberOfBytesRead=0xe68fc1c*=0xf9, lpOverlapped=0x0) returned 1 [0197.744] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.744] WriteFile (in: hFile=0x1434, lpBuffer=0x10e3d0c0*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0xe68fc20, lpOverlapped=0x0 | out: lpBuffer=0x10e3d0c0*, lpNumberOfBytesWritten=0xe68fc20*=0xf9, lpOverlapped=0x0) returned 1 [0200.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd560 [0200.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb1c0 [0200.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb1c0) returned 1 [0200.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e3d0c0) returned 1 [0200.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e394b8) returned 1 [0200.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x349128) returned 1 [0200.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48ba0) returned 1 [0200.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86a58 [0200.006] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.006] WriteFile (in: hFile=0x1434, lpBuffer=0x7cb68e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68fca8, lpOverlapped=0x0 | out: lpBuffer=0x7cb68e0*, lpNumberOfBytesWritten=0xe68fca8*=0x10c, lpOverlapped=0x0) returned 1 [0200.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0200.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0200.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c090 [0200.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0200.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0200.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0200.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.782] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.782] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.782] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="b9") returned 2 [0200.782] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="55") returned 2 [0200.782] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="53") returned 2 [0200.782] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="12") returned 2 [0200.782] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="1a") returned 2 [0200.782] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="08") returned 2 [0200.783] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="8f") returned 2 [0200.783] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="69") returned 2 [0200.783] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="54") returned 2 [0200.783] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="1a") returned 2 [0200.783] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.783] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="ef") returned 2 [0200.783] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="f6") returned 2 [0200.783] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="35") returned 2 [0200.783] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="fa") returned 2 [0200.783] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="5d") returned 2 [0200.783] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.783] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="e0") returned 2 [0200.783] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="02") returned 2 [0200.783] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="b9") returned 2 [0200.783] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="4f") returned 2 [0200.783] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="c3") returned 2 [0200.783] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="96") returned 2 [0200.783] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="93") returned 2 [0200.783] RtlInitAnsiString (in: DestinationString=0xe68fc30, SourceString="a8f7b95553121a088f69541a3deff635fa5dd3e002b94fc39693" | out: DestinationString="a8f7b95553121a088f69541a3deff635fa5dd3e002b94fc39693") [0200.783] RtlAnsiStringToUnicodeString (in: DestinationString=0xe68fc28, SourceString="a8f7b95553121a088f69541a3deff635fa5dd3e002b94fc39693", AllocateDestinationString=1 | out: DestinationString="a8f7b95553121a088f69541a3deff635fa5dd3e002b94fc39693") returned 0x0 [0200.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3def0 [0200.784] wcscat (in: _Dest=0x7cd4c50, _Source="a8f7b95553121" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\a8f7b95553121") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\a8f7b95553121" [0200.784] wcscat (in: _Dest=0x7cd4c50, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\a8f7b95553121.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\a8f7b95553121.68814f" [0200.784] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\a8f7b95553121.68814f", NtPathName=0xe68fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\a8f7b95553121.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7b88098 [0201.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88098) returned 1 [0201.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd5e30) returned 1 [0201.142] NtQueryInformationFile (in: FileHandle=0x1434, IoStatusBlock=0xe68fbf8, FileInformation=0xe68fc00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe68fbf8, FileInformation=0xe68fc00) returned 0x0 [0201.142] NtSetInformationFile (FileHandle=0x1434, IoStatusBlock=0xe68fbf8, FileInformation=0xe68fc00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4c50) returned 1 [0201.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0201.344] FlushFileBuffers (hFile=0x1434) returned 1 [0201.360] CloseHandle (hObject=0x1434) returned 1 [0205.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7ddb858 [0205.856] wcscpy (in: _Dest=0x7ddb858, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\" [0205.856] wcscat (in: _Dest=0x7ddb858, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\68814F-Readme.txt" [0205.856] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\68814f-readme.txt")) returned 0xffffffff [0205.856] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_US\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\en_us\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc50 [0206.577] WriteFile (in: hFile=0xc50, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe68fc3c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe68fc3c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.431] CloseHandle (hObject=0xc50) returned 1 [0215.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb858) returned 1 [0215.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55028) returned 1 Thread: id = 5993 os_tid = 0x12fc [0186.225] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json")) returned 0x2020 [0186.749] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0189.214] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x574 [0191.325] GetFileSizeEx (in: hFile=0x574, lpFileSize=0xe5ef794 | out: lpFileSize=0xe5ef794*=312) returned 1 [0191.326] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x134, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.326] ReadFile (in: hFile=0x574, lpBuffer=0xe5ef770, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe5ef780, lpOverlapped=0x0 | out: lpBuffer=0xe5ef770*, lpNumberOfBytesRead=0xe5ef780*=0x4, lpOverlapped=0x0) returned 1 [0191.328] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0191.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0191.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0191.329] NtQuerySystemTime (in: CurrentTime=0xe5ef708 | out: CurrentTime=0xe5ef708*=132462177699132000) returned 0x0 [0191.329] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x2271783b [0191.329] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x7fec448f [0191.329] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x216b954f [0191.329] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x2df3347 [0191.329] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x16ffd9d [0191.329] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x31656761 [0191.329] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x6684ad76 [0191.329] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x12c71759 [0191.329] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x474f8207 [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x7a4ccc8 [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x52bd93c0 [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x35cb40e [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x4fe218c9 [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x2c93312f [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x61c6bca [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x70795a64 [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x783d96e [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x19d98566 [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x764fac4b [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x433ca1d8 [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x78bab606 [0191.330] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x21f112a0 [0191.331] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x524fd1b0 [0191.331] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x3ab89238 [0191.331] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x7db4aa4 [0191.331] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x621a4196 [0191.331] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x7f9a88c5 [0191.331] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x66a77fa8 [0191.331] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x61cf4636 [0191.331] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x5fdc3157 [0191.331] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x18eb262b [0191.331] RtlRandomEx (in: Seed=0xe5ef700 | out: Seed=0xe5ef700) returned 0x2eb49e94 [0191.348] ReadFile (in: hFile=0x574, lpBuffer=0x7ac7cd8, nNumberOfBytesToRead=0x138, lpNumberOfBytesRead=0xe5ef6fc, lpOverlapped=0x0 | out: lpBuffer=0x7ac7cd8*, lpNumberOfBytesRead=0xe5ef6fc*=0x138, lpOverlapped=0x0) returned 1 [0191.348] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.348] WriteFile (in: hFile=0x574, lpBuffer=0x7acb8e0*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0xe5ef700, lpOverlapped=0x0 | out: lpBuffer=0x7acb8e0*, lpNumberOfBytesWritten=0xe5ef700*=0x138, lpOverlapped=0x0) returned 1 [0195.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0195.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0195.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0195.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acb8e0) returned 1 [0195.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac7cd8) returned 1 [0195.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0195.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8338) returned 1 [0195.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37770 [0195.212] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.212] WriteFile (in: hFile=0x574, lpBuffer=0x7cb6b10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe5ef788, lpOverlapped=0x0 | out: lpBuffer=0x7cb6b10*, lpNumberOfBytesWritten=0xe5ef788*=0x10c, lpOverlapped=0x0) returned 1 [0195.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a23ff0 [0195.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e580 [0195.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0195.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0195.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5a718 [0195.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0195.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0195.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5df30) returned 1 [0195.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0195.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0195.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2da00 [0195.464] sprintf (in: _Dest=0x7a2da00, _Format="%c%c" | out: _Dest="52") returned 2 [0195.464] sprintf (in: _Dest=0x7a2da02, _Format="%c%c" | out: _Dest="61") returned 2 [0195.464] sprintf (in: _Dest=0x7a2da04, _Format="%c%c" | out: _Dest="af") returned 2 [0195.464] sprintf (in: _Dest=0x7a2da06, _Format="%c%c" | out: _Dest="f7") returned 2 [0195.464] sprintf (in: _Dest=0x7a2da08, _Format="%c%c" | out: _Dest="86") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da0a, _Format="%c%c" | out: _Dest="2f") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da0c, _Format="%c%c" | out: _Dest="27") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da0e, _Format="%c%c" | out: _Dest="e3") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da10, _Format="%c%c" | out: _Dest="7e") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da12, _Format="%c%c" | out: _Dest="8c") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da14, _Format="%c%c" | out: _Dest="90") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da16, _Format="%c%c" | out: _Dest="5d") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da18, _Format="%c%c" | out: _Dest="00") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da1a, _Format="%c%c" | out: _Dest="0a") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da1c, _Format="%c%c" | out: _Dest="51") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da1e, _Format="%c%c" | out: _Dest="be") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da20, _Format="%c%c" | out: _Dest="f3") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da22, _Format="%c%c" | out: _Dest="0a") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da24, _Format="%c%c" | out: _Dest="84") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da26, _Format="%c%c" | out: _Dest="59") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da28, _Format="%c%c" | out: _Dest="00") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da2a, _Format="%c%c" | out: _Dest="2f") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da2c, _Format="%c%c" | out: _Dest="43") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da2e, _Format="%c%c" | out: _Dest="b3") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da30, _Format="%c%c" | out: _Dest="20") returned 2 [0195.465] sprintf (in: _Dest=0x7a2da32, _Format="%c%c" | out: _Dest="8b") returned 2 [0195.465] RtlInitAnsiString (in: DestinationString=0xe5ef710, SourceString="5261aff7862f27e37e8c905d000a51bef30a8459002f43b3208b" | out: DestinationString="5261aff7862f27e37e8c905d000a51bef30a8459002f43b3208b") [0195.466] RtlAnsiStringToUnicodeString (in: DestinationString=0xe5ef708, SourceString="5261aff7862f27e37e8c905d000a51bef30a8459002f43b3208b", AllocateDestinationString=1 | out: DestinationString="5261aff7862f27e37e8c905d000a51bef30a8459002f43b3208b") returned 0x0 [0195.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e6e8 [0195.466] wcscat (in: _Dest=0x7cbe710, _Source="5261aff7862f2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\5261aff7862f2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\5261aff7862f2" [0195.466] wcscat (in: _Dest=0x7cbe710, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\5261aff7862f2.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\5261aff7862f2.68814f" [0195.466] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\5261aff7862f2.68814f", NtPathName=0xe5ef700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\5261aff7862f2.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea2d68 [0196.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0196.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3b240) returned 1 [0196.061] NtQueryInformationFile (in: FileHandle=0x574, IoStatusBlock=0xe5ef6d8, FileInformation=0xe5ef6e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe5ef6d8, FileInformation=0xe5ef6e0) returned 0x0 [0196.061] NtSetInformationFile (FileHandle=0x574, IoStatusBlock=0xe5ef6d8, FileInformation=0xe5ef6e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe710) returned 1 [0196.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0196.179] FlushFileBuffers (hFile=0x574) returned 1 [0196.187] CloseHandle (hObject=0x574) returned 1 [0196.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d553a0 [0196.240] wcscpy (in: _Dest=0x3d553a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\" [0196.240] wcscat (in: _Dest=0x3d553a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\68814F-Readme.txt" [0196.240] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\68814f-readme.txt")) returned 0xffffffff [0196.240] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ar\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0196.263] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe5ef71c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe5ef71c*=0x8b9, lpOverlapped=0x0) returned 1 [0196.279] CloseHandle (hObject=0x1140) returned 1 [0196.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 [0196.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 Thread: id = 5994 os_tid = 0x1300 [0186.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7b7cac8 [0186.225] wcscpy (in: _Dest=0x7b7cac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0186.225] wcscat (in: _Dest=0x7b7cac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" [0186.225] wcscat (in: _Dest=0x7b7cac8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*" [0186.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0186.225] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73d30 [0186.226] wcscmp (_String1=".", _String2=".") returned 0 [0186.226] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.226] wcscmp (_String1="..", _String2=".") returned 1 [0186.226] wcscmp (_String1="..", _String2="..") returned 0 [0186.226] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.226] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.226] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3d54dd8 [0186.226] wcscpy (in: _Dest=0x3d54dd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419" [0186.226] wcscat (in: _Dest=0x3d54dd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" [0186.226] wcscat (in: _Dest=0x3d54dd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" [0186.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d54dd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c [0186.674] FindNextFileW (in: hFindFile=0x3e73d30, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0186.674] FindClose (in: hFindFile=0x3e73d30 | out: hFindFile=0x3e73d30) returned 1 [0186.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0186.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cac8) returned 1 [0186.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38818) returned 1 Thread: id = 5995 os_tid = 0x1304 [0186.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a6c0 [0186.227] wcscpy (in: _Dest=0x7a6a6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0186.227] wcscat (in: _Dest=0x7a6a6c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\" [0186.227] wcscat (in: _Dest=0x7a6a6c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*" [0186.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0186.227] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e30 [0191.612] wcscmp (_String1=".", _String2=".") returned 0 [0191.612] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.612] wcscmp (_String1="..", _String2=".") returned 1 [0191.612] wcscmp (_String1="..", _String2="..") returned 0 [0191.612] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb8180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.612] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.612] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cba5e8 [0191.612] wcscpy (in: _Dest=0x7cba5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et" [0191.612] wcscat (in: _Dest=0x7cba5e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\" [0191.613] wcscat (in: _Dest=0x7cba5e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" [0195.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cba5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34 [0195.746] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb8180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.746] FindClose (in: hFindFile=0x7ad7e30 | out: hFindFile=0x7ad7e30) returned 1 [0195.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0195.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a6c0) returned 1 [0195.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c000) returned 1 Thread: id = 5996 os_tid = 0x1308 [0186.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6be78 [0186.228] wcscpy (in: _Dest=0x7a6be78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0186.228] wcscat (in: _Dest=0x7a6be78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\" [0186.228] wcscat (in: _Dest=0x7a6be78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*" [0186.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0186.228] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf990 [0190.542] wcscmp (_String1=".", _String2=".") returned 0 [0190.542] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f053e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f053e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.542] wcscmp (_String1="..", _String2=".") returned 1 [0190.542] wcscmp (_String1="..", _String2="..") returned 0 [0190.542] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x19cd9000, ftLastWriteTime.dwHighDateTime=0x1cd855c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.542] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.542] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb3ab8 [0190.543] wcscpy (in: _Dest=0x7cb3ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu" [0190.543] wcscat (in: _Dest=0x7cb3ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\" [0190.543] wcscat (in: _Dest=0x7cb3ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" [0201.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb3ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0201.609] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f053e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f51e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x19cd9000, ftLastWriteTime.dwHighDateTime=0x1cd855c, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.610] FindClose (in: hFindFile=0x3dcf990 | out: hFindFile=0x3dcf990) returned 1 [0201.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0201.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6be78) returned 1 [0201.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ad70) returned 1 Thread: id = 5997 os_tid = 0x130c [0186.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6bd70 [0186.229] wcscpy (in: _Dest=0x7a6bd70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0186.229] wcscat (in: _Dest=0x7a6bd70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\" [0186.229] wcscat (in: _Dest=0x7a6bd70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*" [0186.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0186.229] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78f0 [0191.617] wcscmp (_String1=".", _String2=".") returned 0 [0191.617] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.617] wcscmp (_String1="..", _String2=".") returned 1 [0191.617] wcscmp (_String1="..", _String2="..") returned 0 [0191.617] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f76860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.617] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.617] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbaa88 [0191.617] wcscpy (in: _Dest=0x7cbaa88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi" [0191.617] wcscat (in: _Dest=0x7cbaa88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\" [0191.617] wcscat (in: _Dest=0x7cbaa88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" [0195.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbaa88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b10 [0195.756] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f76860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.756] FindClose (in: hFindFile=0x7ad78f0 | out: hFindFile=0x7ad78f0) returned 1 [0195.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0195.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6bd70) returned 1 [0195.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a428) returned 1 Thread: id = 5998 os_tid = 0x1310 [0186.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6bc68 [0186.229] wcscpy (in: _Dest=0x7a6bc68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0186.229] wcscat (in: _Dest=0x7a6bc68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\" [0186.229] wcscat (in: _Dest=0x7a6bc68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*" [0186.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0186.229] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7a30 [0191.617] wcscmp (_String1=".", _String2=".") returned 0 [0191.617] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.617] wcscmp (_String1="..", _String2=".") returned 1 [0191.617] wcscmp (_String1="..", _String2="..") returned 0 [0191.617] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.618] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.618] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7cbabb0 [0191.618] wcscpy (in: _Dest=0x7cbabb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil" [0191.618] wcscat (in: _Dest=0x7cbabb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\" [0191.618] wcscat (in: _Dest=0x7cbabb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" [0195.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbabb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c [0195.759] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.759] FindClose (in: hFindFile=0x7ad7a30 | out: hFindFile=0x7ad7a30) returned 1 [0195.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0195.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6bc68) returned 1 [0195.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7bef8) returned 1 Thread: id = 5999 os_tid = 0x1324 [0186.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6bb60 [0186.230] wcscpy (in: _Dest=0x7a6bb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0186.230] wcscat (in: _Dest=0x7a6bb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\" [0186.230] wcscat (in: _Dest=0x7a6bb60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*" [0186.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0186.230] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7f70 [0191.618] wcscmp (_String1=".", _String2=".") returned 0 [0191.618] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.618] wcscmp (_String1="..", _String2=".") returned 1 [0191.618] wcscmp (_String1="..", _String2="..") returned 0 [0191.618] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.618] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.618] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbacd8 [0191.619] wcscpy (in: _Dest=0x7cbacd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr" [0191.619] wcscat (in: _Dest=0x7cbacd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\" [0191.619] wcscat (in: _Dest=0x7cbacd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" [0195.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbacd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0195.761] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc4a60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.761] FindClose (in: hFindFile=0x7ad7f70 | out: hFindFile=0x7ad7f70) returned 1 [0195.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0195.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6bb60) returned 1 [0195.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a320) returned 1 Thread: id = 6000 os_tid = 0x1328 [0186.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6ba58 [0186.236] wcscpy (in: _Dest=0x7a6ba58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0186.236] wcscat (in: _Dest=0x7a6ba58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\" [0186.236] wcscat (in: _Dest=0x7a6ba58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*" [0186.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0186.236] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7ef0 [0191.619] wcscmp (_String1=".", _String2=".") returned 0 [0191.619] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.619] wcscmp (_String1="..", _String2=".") returned 1 [0191.619] wcscmp (_String1="..", _String2="..") returned 0 [0191.619] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.619] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.619] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbae00 [0191.619] wcscpy (in: _Dest=0x7cbae00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he" [0191.619] wcscat (in: _Dest=0x7cbae00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\" [0191.620] wcscat (in: _Dest=0x7cbae00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" [0195.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbae00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af8 [0195.764] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.764] FindClose (in: hFindFile=0x7ad7ef0 | out: hFindFile=0x7ad7ef0) returned 1 [0195.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0195.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ba58) returned 1 [0195.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b8c8) returned 1 Thread: id = 6001 os_tid = 0x1374 [0186.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b950 [0186.236] wcscpy (in: _Dest=0x7a6b950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0186.236] wcscat (in: _Dest=0x7a6b950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\" [0186.237] wcscat (in: _Dest=0x7a6b950, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*" [0186.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0186.237] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf5d0 [0190.545] wcscmp (_String1=".", _String2=".") returned 0 [0190.545] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.545] wcscmp (_String1="..", _String2=".") returned 1 [0190.545] wcscmp (_String1="..", _String2="..") returned 0 [0190.545] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.545] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.546] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb3868 [0190.546] wcscpy (in: _Dest=0x7cb3868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi" [0190.546] wcscat (in: _Dest=0x7cb3868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\" [0190.546] wcscat (in: _Dest=0x7cb3868, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" [0197.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb3868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0197.901] FindNextFileW (in: hFindFile=0x3dcf5d0, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.902] FindClose (in: hFindFile=0x3dcf5d0 | out: hFindFile=0x3dcf5d0) returned 1 [0197.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0197.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b950) returned 1 [0197.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b7c0) returned 1 Thread: id = 6002 os_tid = 0x1378 [0186.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b848 [0186.237] wcscpy (in: _Dest=0x7a6b848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0186.237] wcscat (in: _Dest=0x7a6b848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" [0186.237] wcscat (in: _Dest=0x7a6b848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*" [0186.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0186.237] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cb0 [0191.620] wcscmp (_String1=".", _String2=".") returned 0 [0191.620] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.620] wcscmp (_String1="..", _String2=".") returned 1 [0191.620] wcscmp (_String1="..", _String2="..") returned 0 [0191.620] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4034f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.620] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.620] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbaf28 [0191.620] wcscpy (in: _Dest=0x7cbaf28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr" [0191.620] wcscat (in: _Dest=0x7cbaf28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" [0191.620] wcscat (in: _Dest=0x7cbaf28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" [0194.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbaf28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788 [0194.977] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4034f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.977] FindClose (in: hFindFile=0x7ad7cb0 | out: hFindFile=0x7ad7cb0) returned 1 [0194.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0194.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b848) returned 1 [0194.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b6b8) returned 1 Thread: id = 6003 os_tid = 0x13f8 [0186.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b740 [0186.238] wcscpy (in: _Dest=0x7a6b740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0186.238] wcscat (in: _Dest=0x7a6b740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\" [0186.238] wcscat (in: _Dest=0x7a6b740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*" [0186.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0186.238] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf590 [0190.546] wcscmp (_String1=".", _String2=".") returned 0 [0190.546] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.546] wcscmp (_String1="..", _String2=".") returned 1 [0190.546] wcscmp (_String1="..", _String2="..") returned 0 [0190.547] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.547] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.547] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb3740 [0190.547] wcscpy (in: _Dest=0x7cb3740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu" [0190.547] wcscat (in: _Dest=0x7cb3740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\" [0190.547] wcscat (in: _Dest=0x7cb3740, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" [0197.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb3740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0197.905] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.905] FindClose (in: hFindFile=0x3dcf590 | out: hFindFile=0x3dcf590) returned 1 [0197.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0197.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b740) returned 1 [0197.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b5b0) returned 1 Thread: id = 6004 os_tid = 0x145c [0186.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b638 [0186.238] wcscpy (in: _Dest=0x7a6b638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0186.238] wcscat (in: _Dest=0x7a6b638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\" [0186.238] wcscat (in: _Dest=0x7a6b638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*" [0186.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0186.239] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0191.626] wcscmp (_String1=".", _String2=".") returned 0 [0191.626] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.626] wcscmp (_String1="..", _String2=".") returned 1 [0191.626] wcscmp (_String1="..", _String2="..") returned 0 [0191.626] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.626] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.626] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbb740 [0191.627] wcscpy (in: _Dest=0x7cbb740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id" [0191.627] wcscat (in: _Dest=0x7cbb740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\" [0191.627] wcscat (in: _Dest=0x7cbb740, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" [0195.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbb740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0195.783] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.783] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0195.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0195.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b638) returned 1 [0195.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b4a8) returned 1 Thread: id = 6005 os_tid = 0x1468 [0186.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b530 [0186.239] wcscpy (in: _Dest=0x7a6b530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0186.239] wcscat (in: _Dest=0x7a6b530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\" [0186.239] wcscat (in: _Dest=0x7a6b530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*" [0186.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5710 [0186.239] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\*", lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0190.547] wcscmp (_String1=".", _String2=".") returned 0 [0190.547] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.548] wcscmp (_String1="..", _String2=".") returned 1 [0190.548] wcscmp (_String1="..", _String2="..") returned 0 [0190.548] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a7b30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.548] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.548] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb3618 [0190.548] wcscpy (in: _Dest=0x7cb3618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it" [0190.548] wcscat (in: _Dest=0x7cb3618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\" [0190.548] wcscat (in: _Dest=0x7cb3618, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" [0197.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb3618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0197.908] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x3ef5710 | out: lpFindFileData=0x3ef5710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a7b30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.908] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0197.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5710) returned 1 [0197.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b530) returned 1 [0197.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b3a0) returned 1 Thread: id = 6006 os_tid = 0x1514 [0186.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7e950 [0186.240] wcscpy (in: _Dest=0x7b7e950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0186.240] wcscat (in: _Dest=0x7b7e950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\" [0186.240] wcscat (in: _Dest=0x7b7e950, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*" [0186.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0186.240] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b30 [0191.615] wcscmp (_String1=".", _String2=".") returned 0 [0191.615] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.615] wcscmp (_String1="..", _String2=".") returned 1 [0191.615] wcscmp (_String1="..", _String2="..") returned 0 [0191.615] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.615] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.615] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cba838 [0191.615] wcscpy (in: _Dest=0x7cba838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja" [0191.616] wcscat (in: _Dest=0x7cba838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\" [0191.616] wcscat (in: _Dest=0x7cba838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" [0195.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cba838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0195.751] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.751] FindClose (in: hFindFile=0x7ad7b30 | out: hFindFile=0x7ad7b30) returned 1 [0195.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0195.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e950) returned 1 [0195.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b298) returned 1 Thread: id = 6007 os_tid = 0x1518 [0186.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ea58 [0186.240] wcscpy (in: _Dest=0x7b7ea58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0186.240] wcscat (in: _Dest=0x7b7ea58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\" [0186.240] wcscat (in: _Dest=0x7b7ea58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*" [0186.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0186.241] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7770 [0191.616] wcscmp (_String1=".", _String2=".") returned 0 [0191.616] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.616] wcscmp (_String1="..", _String2=".") returned 1 [0191.616] wcscmp (_String1="..", _String2="..") returned 0 [0191.616] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f3620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.616] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.616] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cba960 [0191.616] wcscpy (in: _Dest=0x7cba960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko" [0191.616] wcscat (in: _Dest=0x7cba960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\" [0191.616] wcscat (in: _Dest=0x7cba960, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" [0195.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cba960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0195.753] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f3620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.753] FindClose (in: hFindFile=0x7ad7770 | out: hFindFile=0x7ad7770) returned 1 [0195.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0195.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ea58) returned 1 [0195.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b190) returned 1 Thread: id = 6008 os_tid = 0x1528 [0186.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7eb60 [0186.241] wcscpy (in: _Dest=0x7b7eb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" [0186.241] wcscat (in: _Dest=0x7b7eb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\" [0186.241] wcscat (in: _Dest=0x7b7eb60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*" [0186.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef37c8 [0186.241] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\*", lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0191.621] wcscmp (_String1=".", _String2=".") returned 0 [0191.621] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.621] wcscmp (_String1="..", _String2=".") returned 1 [0191.621] wcscmp (_String1="..", _String2="..") returned 0 [0191.621] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.621] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.621] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbb050 [0191.621] wcscpy (in: _Dest=0x7cbb050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt" [0191.621] wcscat (in: _Dest=0x7cbb050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\" [0191.621] wcscat (in: _Dest=0x7cbb050, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" [0195.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbb050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044 [0195.767] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.767] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0195.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0195.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7eb60) returned 1 [0195.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b088) returned 1 Thread: id = 6009 os_tid = 0x152c [0186.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ec68 [0186.242] wcscpy (in: _Dest=0x7b7ec68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" [0186.242] wcscat (in: _Dest=0x7b7ec68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\" [0186.242] wcscat (in: _Dest=0x7b7ec68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*" [0186.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2220 [0186.242] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\*", lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0191.622] wcscmp (_String1=".", _String2=".") returned 0 [0191.622] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.622] wcscmp (_String1="..", _String2=".") returned 1 [0191.622] wcscmp (_String1="..", _String2="..") returned 0 [0191.622] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.622] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.622] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbb178 [0191.622] wcscpy (in: _Dest=0x7cbb178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv" [0191.622] wcscat (in: _Dest=0x7cbb178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\" [0191.622] wcscat (in: _Dest=0x7cbb178, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" [0195.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbb178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0195.769] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.769] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0195.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2220) returned 1 [0195.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ec68) returned 1 [0195.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7af80) returned 1 Thread: id = 6010 os_tid = 0x153c [0186.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ed70 [0186.242] wcscpy (in: _Dest=0x7b7ed70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" [0186.242] wcscat (in: _Dest=0x7b7ed70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\" [0186.242] wcscat (in: _Dest=0x7b7ed70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*" [0186.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5240 [0186.243] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\*", lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da40 [0191.622] wcscmp (_String1=".", _String2=".") returned 0 [0191.623] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.623] wcscmp (_String1="..", _String2=".") returned 1 [0191.623] wcscmp (_String1="..", _String2="..") returned 0 [0191.623] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4166210, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.623] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.623] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbb2a0 [0191.623] wcscpy (in: _Dest=0x7cbb2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms" [0191.623] wcscat (in: _Dest=0x7cbb2a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\" [0191.623] wcscat (in: _Dest=0x7cbb2a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" [0195.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbb2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470 [0195.772] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4166210, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.772] FindClose (in: hFindFile=0x7a2da40 | out: hFindFile=0x7a2da40) returned 1 [0195.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5240) returned 1 [0195.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ed70) returned 1 [0195.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ae78) returned 1 Thread: id = 6011 os_tid = 0x1540 [0186.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ee78 [0186.243] wcscpy (in: _Dest=0x7b7ee78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" [0186.243] wcscat (in: _Dest=0x7b7ee78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\" [0186.243] wcscat (in: _Dest=0x7b7ee78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*" [0186.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2488 [0186.243] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\*", lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfc10 [0190.548] wcscmp (_String1=".", _String2=".") returned 0 [0190.548] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.548] wcscmp (_String1="..", _String2=".") returned 1 [0190.549] wcscmp (_String1="..", _String2="..") returned 0 [0190.549] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.549] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.549] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb34f0 [0190.549] wcscpy (in: _Dest=0x7cb34f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl" [0190.549] wcscat (in: _Dest=0x7cb34f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\" [0190.549] wcscat (in: _Dest=0x7cb34f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" [0197.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb34f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22ac [0197.911] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x3ef2488 | out: lpFindFileData=0x3ef2488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.912] FindClose (in: hFindFile=0x3dcfc10 | out: hFindFile=0x3dcfc10) returned 1 [0197.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2488) returned 1 [0197.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ee78) returned 1 [0197.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5c08) returned 1 Thread: id = 6012 os_tid = 0x1544 [0186.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ef80 [0186.244] wcscpy (in: _Dest=0x7b7ef80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" [0186.244] wcscat (in: _Dest=0x7b7ef80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\" [0186.244] wcscat (in: _Dest=0x7b7ef80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*" [0186.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef54a8 [0186.244] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\*", lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d680 [0191.623] wcscmp (_String1=".", _String2=".") returned 0 [0191.623] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.623] wcscmp (_String1="..", _String2=".") returned 1 [0191.624] wcscmp (_String1="..", _String2="..") returned 0 [0191.624] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x19cd9000, ftLastWriteTime.dwHighDateTime=0x1cd855c, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.624] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.624] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbb3c8 [0191.624] wcscpy (in: _Dest=0x7cbb3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no" [0191.624] wcscat (in: _Dest=0x7cbb3c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\" [0191.624] wcscat (in: _Dest=0x7cbb3c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" [0195.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbb3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc [0195.774] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418d310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x19cd9000, ftLastWriteTime.dwHighDateTime=0x1cd855c, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.774] FindClose (in: hFindFile=0x7a2d680 | out: hFindFile=0x7a2d680) returned 1 [0195.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54a8) returned 1 [0195.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ef80) returned 1 [0195.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5d10) returned 1 Thread: id = 6013 os_tid = 0x1564 [0186.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f088 [0186.244] wcscpy (in: _Dest=0x7b7f088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" [0186.244] wcscat (in: _Dest=0x7b7f088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\" [0186.244] wcscat (in: _Dest=0x7b7f088, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*" [0186.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3c98 [0186.245] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\*", lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad70b0 [0191.613] wcscmp (_String1=".", _String2=".") returned 0 [0191.613] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.613] wcscmp (_String1="..", _String2=".") returned 1 [0191.613] wcscmp (_String1="..", _String2="..") returned 0 [0191.613] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b1d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.613] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.613] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cba710 [0191.613] wcscpy (in: _Dest=0x7cba710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl" [0191.613] wcscat (in: _Dest=0x7cba710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\" [0191.613] wcscat (in: _Dest=0x7cba710, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" [0195.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cba710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0195.748] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b1d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.748] FindClose (in: hFindFile=0x7ad70b0 | out: hFindFile=0x7ad70b0) returned 1 [0195.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c98) returned 1 [0195.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f088) returned 1 [0195.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5e18) returned 1 Thread: id = 6014 os_tid = 0x1568 [0186.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7c668 [0186.245] wcscpy (in: _Dest=0x7b7c668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" [0186.245] wcscat (in: _Dest=0x7b7c668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\" [0186.245] wcscat (in: _Dest=0x7b7c668, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*" [0186.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0186.245] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0191.624] wcscmp (_String1=".", _String2=".") returned 0 [0191.624] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.624] wcscmp (_String1="..", _String2=".") returned 1 [0191.624] wcscmp (_String1="..", _String2="..") returned 0 [0191.624] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42248f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.624] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.625] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbb4f0 [0191.625] wcscpy (in: _Dest=0x7cbb4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR" [0191.625] wcscat (in: _Dest=0x7cbb4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\" [0191.625] wcscat (in: _Dest=0x7cbb4f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" [0195.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbb4f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0195.777] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42248f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.777] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0195.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0195.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c668) returned 1 [0195.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad5f20) returned 1 Thread: id = 6015 os_tid = 0x156c [0186.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7cf28 [0186.246] wcscpy (in: _Dest=0x7b7cf28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" [0186.246] wcscat (in: _Dest=0x7b7cf28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\" [0186.246] wcscat (in: _Dest=0x7b7cf28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*" [0186.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3f00 [0186.246] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d440 [0191.625] wcscmp (_String1=".", _String2=".") returned 0 [0191.625] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.625] wcscmp (_String1="..", _String2=".") returned 1 [0191.625] wcscmp (_String1="..", _String2="..") returned 0 [0191.625] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.625] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.625] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbb618 [0191.625] wcscpy (in: _Dest=0x7cbb618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT" [0191.625] wcscat (in: _Dest=0x7cbb618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\" [0191.625] wcscat (in: _Dest=0x7cbb618, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" [0195.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbb618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0195.780] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.780] FindClose (in: hFindFile=0x7a2d440 | out: hFindFile=0x7a2d440) returned 1 [0195.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f00) returned 1 [0195.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cf28) returned 1 [0195.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6028) returned 1 Thread: id = 6016 os_tid = 0x1570 [0186.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2f9a00 [0186.646] wcscpy (in: _Dest=0x2f9a00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" [0186.646] wcscat (in: _Dest=0x2f9a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\" [0186.646] wcscat (in: _Dest=0x2f9a00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*" [0186.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef43d0 [0186.646] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\*", lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0190.544] wcscmp (_String1=".", _String2=".") returned 0 [0190.544] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.544] wcscmp (_String1="..", _String2=".") returned 1 [0190.544] wcscmp (_String1="..", _String2="..") returned 0 [0190.544] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42703e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.544] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.544] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb3990 [0190.544] wcscpy (in: _Dest=0x7cb3990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro" [0190.545] wcscat (in: _Dest=0x7cb3990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\" [0190.545] wcscat (in: _Dest=0x7cb3990, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" [0201.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb3990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0201.612] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef43d0 | out: lpFindFileData=0x3ef43d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42703e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.612] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0201.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef43d0) returned 1 [0201.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f9a00) returned 1 [0201.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6130) returned 1 Thread: id = 6017 os_tid = 0x1574 [0186.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec530 [0186.647] wcscpy (in: _Dest=0x3eec530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0186.647] wcscat (in: _Dest=0x3eec530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" [0186.647] wcscat (in: _Dest=0x3eec530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*" [0186.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4d70 [0186.647] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5628950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe562d770, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73df0 [0186.647] wcscmp (_String1=".", _String2=".") returned 0 [0186.647] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5628950, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562d770, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe562d770, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.647] wcscmp (_String1="..", _String2=".") returned 1 [0186.647] wcscmp (_String1="..", _String2="..") returned 0 [0186.647] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe562d770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562fe80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.647] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.647] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83a40 [0186.647] wcscpy (in: _Dest=0x7b83a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" [0186.647] wcscat (in: _Dest=0x7b83a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" [0186.647] wcscat (in: _Dest=0x7b83a40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" [0187.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c [0187.546] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe562d770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe562fe80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.546] FindClose (in: hFindFile=0x3e73df0 | out: hFindFile=0x3e73df0) returned 1 [0187.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d70) returned 1 [0187.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec530) returned 1 [0187.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f93d0) returned 1 Thread: id = 6018 os_tid = 0x15b0 [0186.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec638 [0186.648] wcscpy (in: _Dest=0x3eec638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0186.648] wcscat (in: _Dest=0x3eec638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" [0186.648] wcscat (in: _Dest=0x3eec638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*" [0186.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0186.648] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5634ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56373b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56373b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73470 [0186.648] wcscmp (_String1=".", _String2=".") returned 0 [0186.648] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5634ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56373b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56373b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.648] wcscmp (_String1="..", _String2=".") returned 1 [0186.648] wcscmp (_String1="..", _String2="..") returned 0 [0186.648] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56373b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5639ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0186.648] wcscmp (_String1="messages.json", _String2=".") returned 1 [0186.648] wcscmp (_String1="messages.json", _String2="..") returned 1 [0186.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83c90 [0186.649] wcscpy (in: _Dest=0x7b83c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" [0186.649] wcscat (in: _Dest=0x7b83c90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" [0186.649] wcscat (in: _Dest=0x7b83c90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" [0187.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c [0187.549] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56373b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5639ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0187.549] FindClose (in: hFindFile=0x3e73470 | out: hFindFile=0x3e73470) returned 1 [0187.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0187.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec638) returned 1 [0187.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f190) returned 1 Thread: id = 6019 os_tid = 0x15b4 [0186.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec740 [0186.653] wcscpy (in: _Dest=0x3eec740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0186.653] wcscat (in: _Dest=0x3eec740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" [0186.653] wcscat (in: _Dest=0x3eec740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*" [0186.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5e48 [0186.653] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe563e8e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5643700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0188.587] wcscmp (_String1=".", _String2=".") returned 0 [0188.587] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe563e8e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5643700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.587] wcscmp (_String1="..", _String2=".") returned 1 [0188.587] wcscmp (_String1="..", _String2="..") returned 0 [0188.587] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5643700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.587] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.588] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caee00 [0188.588] wcscpy (in: _Dest=0x7caee00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" [0188.588] wcscat (in: _Dest=0x7caee00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" [0188.588] wcscat (in: _Dest=0x7caee00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" [0190.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caee00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938 [0190.208] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5643700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5643700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c6f070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.208] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0190.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e48) returned 1 [0190.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec740) returned 1 [0190.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f298) returned 1 Thread: id = 6020 os_tid = 0x15b8 [0186.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec848 [0186.656] wcscpy (in: _Dest=0x3eec848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0186.656] wcscat (in: _Dest=0x3eec848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" [0186.657] wcscat (in: _Dest=0x3eec848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*" [0186.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0186.657] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5648520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe564d340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0188.588] wcscmp (_String1=".", _String2=".") returned 0 [0188.588] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5648520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe564d340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.588] wcscmp (_String1="..", _String2=".") returned 1 [0188.588] wcscmp (_String1="..", _String2="..") returned 0 [0188.588] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe564d340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.588] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.588] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caef28 [0188.589] wcscpy (in: _Dest=0x7caef28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" [0188.589] wcscat (in: _Dest=0x7caef28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" [0188.589] wcscat (in: _Dest=0x7caef28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" [0190.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caef28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98 [0190.211] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe564d340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe564d340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.212] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0190.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0190.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec848) returned 1 [0190.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f3a0) returned 1 Thread: id = 6021 os_tid = 0x15bc [0186.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec950 [0186.657] wcscpy (in: _Dest=0x3eec950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0186.658] wcscat (in: _Dest=0x3eec950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" [0186.658] wcscat (in: _Dest=0x3eec950, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*" [0186.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0186.658] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5656f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5659690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5659690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0188.589] wcscmp (_String1=".", _String2=".") returned 0 [0188.589] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5656f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5659690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5659690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.589] wcscmp (_String1="..", _String2=".") returned 1 [0188.589] wcscmp (_String1="..", _String2="..") returned 0 [0188.589] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5659690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe565bda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.589] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.589] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caf050 [0188.590] wcscpy (in: _Dest=0x7caf050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" [0188.590] wcscat (in: _Dest=0x7caf050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" [0188.590] wcscat (in: _Dest=0x7caf050, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" [0190.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caf050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4 [0190.214] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5659690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe565bda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.214] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0190.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0190.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec950) returned 1 [0190.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f4a8) returned 1 Thread: id = 6022 os_tid = 0x15c0 [0186.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eeca58 [0186.659] wcscpy (in: _Dest=0x3eeca58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0186.659] wcscat (in: _Dest=0x3eeca58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" [0186.659] wcscat (in: _Dest=0x3eeca58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*" [0186.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58e38 [0186.659] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56632d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56659e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0188.590] wcscmp (_String1=".", _String2=".") returned 0 [0188.590] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56632d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56659e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.590] wcscmp (_String1="..", _String2=".") returned 1 [0188.590] wcscmp (_String1="..", _String2="..") returned 0 [0188.590] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56659e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.590] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.590] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caf178 [0188.591] wcscpy (in: _Dest=0x7caf178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" [0188.591] wcscat (in: _Dest=0x7caf178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" [0188.591] wcscat (in: _Dest=0x7caf178, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" [0190.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caf178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc [0190.217] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56659e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56659e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.217] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0190.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58e38) returned 1 [0190.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeca58) returned 1 [0190.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f5b0) returned 1 Thread: id = 6023 os_tid = 0x15f0 [0186.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eecb60 [0186.660] wcscpy (in: _Dest=0x3eecb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0186.660] wcscat (in: _Dest=0x3eecb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" [0186.660] wcscat (in: _Dest=0x3eecb60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*" [0186.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d5a178 [0186.660] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe566cf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe566f620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe566f620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d5c0 [0188.591] wcscmp (_String1=".", _String2=".") returned 0 [0188.591] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe566cf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe566f620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe566f620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.591] wcscmp (_String1="..", _String2=".") returned 1 [0188.591] wcscmp (_String1="..", _String2="..") returned 0 [0188.591] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe566f620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5671d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.591] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.591] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caf2a0 [0188.592] wcscpy (in: _Dest=0x7caf2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" [0188.592] wcscat (in: _Dest=0x7caf2a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" [0188.592] wcscat (in: _Dest=0x7caf2a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" [0190.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caf2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c [0190.220] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe566f620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5671d30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.220] FindClose (in: hFindFile=0x7a2d5c0 | out: hFindFile=0x7a2d5c0) returned 1 [0190.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a178) returned 1 [0190.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecb60) returned 1 [0190.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e740) returned 1 Thread: id = 6024 os_tid = 0x15f4 [0186.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eecc68 [0186.661] wcscpy (in: _Dest=0x3eecc68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0186.661] wcscat (in: _Dest=0x3eecc68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" [0186.661] wcscat (in: _Dest=0x3eecc68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*" [0186.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58bd0 [0186.661] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5676b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5687cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0188.592] wcscmp (_String1=".", _String2=".") returned 0 [0188.592] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5676b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5687cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.592] wcscmp (_String1="..", _String2=".") returned 1 [0188.592] wcscmp (_String1="..", _String2="..") returned 0 [0188.592] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5687cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.592] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.592] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caf3c8 [0188.593] wcscpy (in: _Dest=0x7caf3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" [0188.593] wcscat (in: _Dest=0x7caf3c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" [0188.593] wcscat (in: _Dest=0x7caf3c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" [0190.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caf3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0 [0190.223] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5687cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5687cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.223] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0190.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58bd0) returned 1 [0190.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecc68) returned 1 [0190.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb198) returned 1 Thread: id = 6025 os_tid = 0x15f8 [0186.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eecd70 [0186.662] wcscpy (in: _Dest=0x3eecd70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0186.662] wcscat (in: _Dest=0x3eecd70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\" [0186.662] wcscat (in: _Dest=0x3eecd70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*" [0186.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58498 [0186.662] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe568f1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5691900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0188.594] wcscmp (_String1=".", _String2=".") returned 0 [0188.594] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe568f1f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5691900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.594] wcscmp (_String1="..", _String2=".") returned 1 [0188.594] wcscmp (_String1="..", _String2="..") returned 0 [0188.594] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5691900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.594] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.594] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caf4f0 [0188.594] wcscpy (in: _Dest=0x7caf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" [0188.594] wcscat (in: _Dest=0x7caf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\" [0188.594] wcscat (in: _Dest=0x7caf4f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" [0190.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caf4f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1954 [0190.226] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5691900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5691900, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.226] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0190.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58498) returned 1 [0190.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecd70) returned 1 [0190.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb2a0) returned 1 Thread: id = 6026 os_tid = 0x15fc [0186.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eece78 [0186.663] wcscpy (in: _Dest=0x3eece78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0186.663] wcscat (in: _Dest=0x3eece78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" [0186.663] wcscat (in: _Dest=0x3eece78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*" [0186.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0186.663] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5698e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe569dc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d400 [0188.595] wcscmp (_String1=".", _String2=".") returned 0 [0188.595] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5698e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe569dc50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.595] wcscmp (_String1="..", _String2=".") returned 1 [0188.595] wcscmp (_String1="..", _String2="..") returned 0 [0188.595] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe569dc50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.595] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.595] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caf618 [0188.595] wcscpy (in: _Dest=0x7caf618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" [0188.595] wcscat (in: _Dest=0x7caf618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" [0188.595] wcscat (in: _Dest=0x7caf618, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" [0190.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caf618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc [0190.228] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe569dc50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe569dc50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.229] FindClose (in: hFindFile=0x7a2d400 | out: hFindFile=0x7a2d400) returned 1 [0190.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0190.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eece78) returned 1 [0190.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb3a8) returned 1 Thread: id = 6027 os_tid = 0x1600 [0186.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eecf80 [0186.663] wcscpy (in: _Dest=0x3eecf80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0186.663] wcscat (in: _Dest=0x3eecf80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" [0186.664] wcscat (in: _Dest=0x3eecf80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*" [0186.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59a40 [0186.664] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ac6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56aedc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56aedc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da40 [0188.586] wcscmp (_String1=".", _String2=".") returned 0 [0188.586] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ac6b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56aedc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56aedc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.586] wcscmp (_String1="..", _String2=".") returned 1 [0188.586] wcscmp (_String1="..", _String2="..") returned 0 [0188.587] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56aedc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b14d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.587] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.587] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caecd8 [0188.587] wcscpy (in: _Dest=0x7caecd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" [0188.587] wcscat (in: _Dest=0x7caecd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" [0188.587] wcscat (in: _Dest=0x7caecd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" [0190.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94 [0190.206] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56aedc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b14d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.206] FindClose (in: hFindFile=0x7a2da40 | out: hFindFile=0x7a2da40) returned 1 [0190.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59a40) returned 1 [0190.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecf80) returned 1 [0190.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb4b0) returned 1 Thread: id = 6028 os_tid = 0x161c [0186.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a38b60 [0186.664] wcscpy (in: _Dest=0x7a38b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0186.664] wcscat (in: _Dest=0x7a38b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" [0186.664] wcscat (in: _Dest=0x7a38b60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*" [0186.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59570 [0186.664] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b62f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b8a00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56b8a00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d680 [0188.585] wcscmp (_String1=".", _String2=".") returned 0 [0188.585] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b62f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56b8a00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56b8a00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.585] wcscmp (_String1="..", _String2=".") returned 1 [0188.585] wcscmp (_String1="..", _String2="..") returned 0 [0188.586] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56b8a00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56bb110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.586] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.586] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7caebb0 [0188.586] wcscpy (in: _Dest=0x7caebb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" [0188.586] wcscat (in: _Dest=0x7caebb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" [0188.586] wcscat (in: _Dest=0x7caebb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" [0190.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caebb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90 [0190.203] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56b8a00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56bb110, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c71780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.203] FindClose (in: hFindFile=0x7a2d680 | out: hFindFile=0x7a2d680) returned 1 [0190.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59570) returned 1 [0190.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38b60) returned 1 [0190.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb5b8) returned 1 Thread: id = 6029 os_tid = 0x1620 [0186.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7cbe0 [0186.665] wcscpy (in: _Dest=0x7b7cbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0186.665] wcscat (in: _Dest=0x7b7cbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" [0186.665] wcscat (in: _Dest=0x7b7cbe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*" [0186.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59308 [0186.665] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56bff30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c2640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56c2640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0188.584] wcscmp (_String1=".", _String2=".") returned 0 [0188.584] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56bff30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c2640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56c2640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.584] wcscmp (_String1="..", _String2=".") returned 1 [0188.584] wcscmp (_String1="..", _String2="..") returned 0 [0188.584] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56c2640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c4d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.584] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.585] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7caea88 [0188.585] wcscpy (in: _Dest=0x7caea88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" [0188.585] wcscat (in: _Dest=0x7caea88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" [0188.585] wcscat (in: _Dest=0x7caea88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" [0190.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caea88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c [0190.200] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56c2640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56c4d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.200] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0190.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59308) returned 1 [0190.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cbe0) returned 1 [0190.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb6c0) returned 1 Thread: id = 6030 os_tid = 0x1624 [0186.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bbe18 [0186.665] wcscpy (in: _Dest=0x30bbe18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0186.666] wcscat (in: _Dest=0x30bbe18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" [0186.666] wcscat (in: _Dest=0x30bbe18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*" [0186.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59f10 [0186.666] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56cc280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56d10a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d440 [0188.583] wcscmp (_String1=".", _String2=".") returned 0 [0188.583] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56cc280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56d10a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.583] wcscmp (_String1="..", _String2=".") returned 1 [0188.583] wcscmp (_String1="..", _String2="..") returned 0 [0188.583] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56d10a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.583] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.583] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cae960 [0188.584] wcscpy (in: _Dest=0x7cae960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" [0188.584] wcscat (in: _Dest=0x7cae960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" [0188.584] wcscat (in: _Dest=0x7cae960, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" [0190.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cae960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84 [0190.197] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56d10a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56d10a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.197] FindClose (in: hFindFile=0x7a2d440 | out: hFindFile=0x7a2d440) returned 1 [0190.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59f10) returned 1 [0190.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe18) returned 1 [0190.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb7c8) returned 1 Thread: id = 6031 os_tid = 0x1628 [0186.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7b7ccf8 [0186.666] wcscpy (in: _Dest=0x7b7ccf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0186.666] wcscat (in: _Dest=0x7b7ccf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" [0186.666] wcscat (in: _Dest=0x7b7ccf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*" [0186.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0186.666] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56d85d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56dace0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0188.582] wcscmp (_String1=".", _String2=".") returned 0 [0188.582] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56d85d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56dace0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.582] wcscmp (_String1="..", _String2=".") returned 1 [0188.582] wcscmp (_String1="..", _String2="..") returned 0 [0188.582] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56dace0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.582] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.582] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cae838 [0188.583] wcscpy (in: _Dest=0x7cae838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" [0188.583] wcscat (in: _Dest=0x7cae838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" [0188.583] wcscat (in: _Dest=0x7cae838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" [0190.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cae838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c [0190.195] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56dace0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56dace0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.195] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0190.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0190.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ccf8) returned 1 [0190.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d040) returned 1 Thread: id = 6032 os_tid = 0x1630 [0186.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b84320 [0186.667] wcscpy (in: _Dest=0x7b84320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0186.667] wcscat (in: _Dest=0x7b84320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" [0186.667] wcscat (in: _Dest=0x7b84320, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*" [0186.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d590a0 [0186.667] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56e2210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56e4920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0188.581] wcscmp (_String1=".", _String2=".") returned 0 [0188.581] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56e2210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56e4920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.581] wcscmp (_String1="..", _String2=".") returned 1 [0188.581] wcscmp (_String1="..", _String2="..") returned 0 [0188.581] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56e4920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.581] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.581] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cae710 [0188.582] wcscpy (in: _Dest=0x7cae710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" [0188.582] wcscat (in: _Dest=0x7cae710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" [0188.582] wcscat (in: _Dest=0x7cae710, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" [0190.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cae710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78 [0190.192] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56e4920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56e4920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.192] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0190.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d590a0) returned 1 [0190.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84320) returned 1 [0190.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb8d0) returned 1 Thread: id = 6033 os_tid = 0x1634 [0186.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b84428 [0186.667] wcscpy (in: _Dest=0x7b84428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0186.668] wcscat (in: _Dest=0x7b84428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" [0186.668] wcscat (in: _Dest=0x7b84428, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*" [0186.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0186.668] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ebe50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56f0c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0188.580] wcscmp (_String1=".", _String2=".") returned 0 [0188.580] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56ebe50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56f0c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.580] wcscmp (_String1="..", _String2=".") returned 1 [0188.580] wcscmp (_String1="..", _String2="..") returned 0 [0188.580] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56f0c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.580] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.580] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cae5e8 [0188.580] wcscpy (in: _Dest=0x7cae5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" [0188.580] wcscat (in: _Dest=0x7cae5e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" [0188.580] wcscat (in: _Dest=0x7cae5e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" [0190.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cae5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74 [0190.190] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56f0c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56f0c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.190] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0190.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0190.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84428) returned 1 [0190.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb9d8) returned 1 Thread: id = 6034 os_tid = 0x1638 [0186.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b84530 [0186.668] wcscpy (in: _Dest=0x7b84530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0186.668] wcscat (in: _Dest=0x7b84530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" [0186.668] wcscat (in: _Dest=0x7b84530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*" [0186.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52090 [0186.668] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56f81a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56fcfc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0188.579] wcscmp (_String1=".", _String2=".") returned 0 [0188.579] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56f81a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe56fcfc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.579] wcscmp (_String1="..", _String2=".") returned 1 [0188.579] wcscmp (_String1="..", _String2="..") returned 0 [0188.579] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56fcfc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.579] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.579] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cae4c0 [0188.579] wcscpy (in: _Dest=0x7cae4c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" [0188.579] wcscat (in: _Dest=0x7cae4c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" [0188.579] wcscat (in: _Dest=0x7cae4c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" [0190.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cae4c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70 [0190.187] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe56fcfc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe56fcfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.187] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0190.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52090) returned 1 [0190.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84530) returned 1 [0190.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebae0) returned 1 Thread: id = 6035 os_tid = 0x163c [0186.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b84638 [0186.669] wcscpy (in: _Dest=0x7b84638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0186.669] wcscat (in: _Dest=0x7b84638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" [0186.669] wcscat (in: _Dest=0x7b84638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*" [0186.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a544a8 [0186.669] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57044f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5706c00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d340 [0188.577] wcscmp (_String1=".", _String2=".") returned 0 [0188.577] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57044f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5706c00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.578] wcscmp (_String1="..", _String2=".") returned 1 [0188.578] wcscmp (_String1="..", _String2="..") returned 0 [0188.578] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5706c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.578] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.578] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cae398 [0188.578] wcscpy (in: _Dest=0x7cae398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" [0188.578] wcscat (in: _Dest=0x7cae398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" [0188.578] wcscat (in: _Dest=0x7cae398, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" [0190.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cae398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c [0190.185] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5706c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5706c00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.185] FindClose (in: hFindFile=0x7a2d340 | out: hFindFile=0x7a2d340) returned 1 [0190.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a544a8) returned 1 [0190.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84638) returned 1 [0190.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebbe8) returned 1 Thread: id = 6036 os_tid = 0x1640 [0186.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b84740 [0186.669] wcscpy (in: _Dest=0x7b84740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0186.669] wcscat (in: _Dest=0x7b84740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" [0186.669] wcscat (in: _Dest=0x7b84740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*" [0186.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53d70 [0186.669] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe570e130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5710840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0188.576] wcscmp (_String1=".", _String2=".") returned 0 [0188.576] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe570e130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5710840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.576] wcscmp (_String1="..", _String2=".") returned 1 [0188.576] wcscmp (_String1="..", _String2="..") returned 0 [0188.577] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5710840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.577] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.577] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7cae270 [0188.577] wcscpy (in: _Dest=0x7cae270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" [0188.577] wcscat (in: _Dest=0x7cae270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" [0188.577] wcscat (in: _Dest=0x7cae270, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" [0190.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cae270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990 [0190.182] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5710840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5710840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.182] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0190.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53d70) returned 1 [0190.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84740) returned 1 [0190.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebcf0) returned 1 Thread: id = 6037 os_tid = 0x1644 [0186.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b84848 [0186.670] wcscpy (in: _Dest=0x7b84848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0186.670] wcscat (in: _Dest=0x7b84848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" [0186.670] wcscat (in: _Dest=0x7b84848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*" [0186.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52c98 [0186.670] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5717d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571a480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe571a480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0188.575] wcscmp (_String1=".", _String2=".") returned 0 [0188.575] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5717d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571a480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe571a480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.575] wcscmp (_String1="..", _String2=".") returned 1 [0188.575] wcscmp (_String1="..", _String2="..") returned 0 [0188.575] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe571a480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571cb90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.575] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.575] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cae148 [0188.576] wcscpy (in: _Dest=0x7cae148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" [0188.576] wcscat (in: _Dest=0x7cae148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" [0188.576] wcscat (in: _Dest=0x7cae148, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" [0190.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cae148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68 [0190.329] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe571a480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe571cb90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.329] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0190.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52c98) returned 1 [0190.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84848) returned 1 [0190.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebdf8) returned 1 Thread: id = 6038 os_tid = 0x1648 [0186.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7c898 [0186.670] wcscpy (in: _Dest=0x7b7c898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0186.670] wcscat (in: _Dest=0x7b7c898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" [0186.670] wcscat (in: _Dest=0x7b7c898, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*" [0186.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53b08 [0186.671] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57240c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57267d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0188.574] wcscmp (_String1=".", _String2=".") returned 0 [0188.574] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57240c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57267d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.574] wcscmp (_String1="..", _String2=".") returned 1 [0188.574] wcscmp (_String1="..", _String2="..") returned 0 [0188.574] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57267d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.574] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.574] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cae020 [0188.574] wcscpy (in: _Dest=0x7cae020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" [0188.574] wcscat (in: _Dest=0x7cae020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" [0188.574] wcscat (in: _Dest=0x7cae020, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" [0190.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cae020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64 [0190.326] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57267d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57267d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c73e90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.326] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0190.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53b08) returned 1 [0190.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c898) returned 1 [0190.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebf00) returned 1 Thread: id = 6039 os_tid = 0x164c [0186.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b84950 [0186.671] wcscpy (in: _Dest=0x7b84950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0186.671] wcscat (in: _Dest=0x7b84950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" [0186.671] wcscat (in: _Dest=0x7b84950, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*" [0186.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a538a0 [0186.671] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5730410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5732b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0188.572] wcscmp (_String1=".", _String2=".") returned 0 [0188.572] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5730410, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5732b20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.572] wcscmp (_String1="..", _String2=".") returned 1 [0188.572] wcscmp (_String1="..", _String2="..") returned 0 [0188.572] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5732b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.573] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.573] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b80448 [0188.573] wcscpy (in: _Dest=0x7b80448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" [0188.573] wcscat (in: _Dest=0x7b80448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" [0188.573] wcscat (in: _Dest=0x7b80448, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" [0190.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4 [0190.319] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5732b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5732b20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.319] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0190.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a538a0) returned 1 [0190.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84950) returned 1 [0190.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec008) returned 1 Thread: id = 6040 os_tid = 0x1650 [0186.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b84a58 [0186.671] wcscpy (in: _Dest=0x7b84a58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0186.672] wcscat (in: _Dest=0x7b84a58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" [0186.672] wcscat (in: _Dest=0x7b84a58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*" [0186.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb10d8 [0186.672] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe573a050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe573ee70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0188.571] wcscmp (_String1=".", _String2=".") returned 0 [0188.571] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe573a050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe573ee70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.571] wcscmp (_String1="..", _String2=".") returned 1 [0188.571] wcscmp (_String1="..", _String2="..") returned 0 [0188.571] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe573ee70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.571] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.571] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7ca9d08 [0188.572] wcscpy (in: _Dest=0x7ca9d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" [0188.572] wcscat (in: _Dest=0x7ca9d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" [0188.572] wcscat (in: _Dest=0x7ca9d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" [0190.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c [0190.316] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe573ee70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe573ee70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.316] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0190.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb10d8) returned 1 [0190.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84a58) returned 1 [0190.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec110) returned 1 Thread: id = 6041 os_tid = 0x1654 [0186.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b84b60 [0186.672] wcscpy (in: _Dest=0x7b84b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0186.672] wcscat (in: _Dest=0x7b84b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\" [0186.672] wcscat (in: _Dest=0x7b84b60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*" [0186.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0c08 [0186.672] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5748ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe574b1c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73df0 [0187.629] wcscmp (_String1=".", _String2=".") returned 0 [0187.629] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5748ab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe574b1c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.629] wcscmp (_String1="..", _String2=".") returned 1 [0187.629] wcscmp (_String1="..", _String2="..") returned 0 [0187.629] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe574b1c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.630] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.630] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7ca9618 [0187.630] wcscpy (in: _Dest=0x7ca9618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" [0187.630] wcscat (in: _Dest=0x7ca9618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\" [0187.630] wcscat (in: _Dest=0x7ca9618, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" [0194.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15f4 [0194.956] FindNextFileW (in: hFindFile=0x3e73df0, lpFindFileData=0x3eb0c08 | out: lpFindFileData=0x3eb0c08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe574b1c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe574b1c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.956] FindClose (in: hFindFile=0x3e73df0 | out: hFindFile=0x3e73df0) returned 1 [0194.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0c08) returned 1 [0194.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84b60) returned 1 [0194.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec218) returned 1 Thread: id = 6042 os_tid = 0x1658 [0186.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86428 [0186.791] wcscpy (in: _Dest=0x7b86428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0186.791] wcscat (in: _Dest=0x7b86428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" [0186.791] wcscat (in: _Dest=0x7b86428, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*" [0186.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336828 [0186.791] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57526f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5754e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0188.596] wcscmp (_String1=".", _String2=".") returned 0 [0188.596] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57526f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5754e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.597] wcscmp (_String1="..", _String2=".") returned 1 [0188.597] wcscmp (_String1="..", _String2="..") returned 0 [0188.597] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5754e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.597] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.597] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caf868 [0188.597] wcscpy (in: _Dest=0x7caf868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" [0188.597] wcscat (in: _Dest=0x7caf868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" [0188.597] wcscat (in: _Dest=0x7caf868, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" [0190.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caf868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8 [0190.233] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x336828 | out: lpFindFileData=0x336828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5754e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5754e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.234] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0190.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336828) returned 1 [0190.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86428) returned 1 [0190.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec320) returned 1 Thread: id = 6043 os_tid = 0x165c [0186.792] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0191.772] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0197.744] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1244 [0197.745] GetFileSizeEx (in: hFile=0x1244, lpFileSize=0xad4f774 | out: lpFileSize=0xad4f774*=259) returned 1 [0197.745] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.745] ReadFile (in: hFile=0x1244, lpBuffer=0xad4f750, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad4f760, lpOverlapped=0x0 | out: lpBuffer=0xad4f750*, lpNumberOfBytesRead=0xad4f760*=0x4, lpOverlapped=0x0) returned 1 [0197.747] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0197.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0197.747] NtQuerySystemTime (in: CurrentTime=0xad4f6e8 | out: CurrentTime=0xad4f6e8*=132462177763248000) returned 0x0 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x3e8ebf15 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x2945a92 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x20eb8a9e [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x5710d014 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x3db33375 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x67bfcfbd [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x4e149236 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x7d32558b [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x785869d2 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x47271935 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x43dd688d [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x76792a1b [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x60d15e4f [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x2a1b7447 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x19f60742 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x3034e956 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x11e7d276 [0197.748] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x6ab28f4d [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x53aafce1 [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x17e67f08 [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x27058a37 [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x5e26b006 [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x179b82a6 [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x64e71f1c [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x1d56db53 [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x403ed71b [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0xa78ad81 [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x3483646b [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x9cafc22 [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x54805fa7 [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x5c0e9681 [0197.749] RtlRandomEx (in: Seed=0xad4f6e0 | out: Seed=0xad4f6e0) returned 0x7f4039ff [0197.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e40cc8 [0197.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e448d0 [0197.766] ReadFile (in: hFile=0x1244, lpBuffer=0x10e40cc8, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0xad4f6dc, lpOverlapped=0x0 | out: lpBuffer=0x10e40cc8*, lpNumberOfBytesRead=0xad4f6dc*=0x103, lpOverlapped=0x0) returned 1 [0197.766] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.766] WriteFile (in: hFile=0x1244, lpBuffer=0x10e448d0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xad4f6e0, lpOverlapped=0x0 | out: lpBuffer=0x10e448d0*, lpNumberOfBytesWritten=0xad4f6e0*=0x103, lpOverlapped=0x0) returned 1 [0200.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd5d8 [0200.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddfb0 [0200.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddfb0) returned 1 [0200.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e448d0) returned 1 [0200.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e40cc8) returned 1 [0200.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0200.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49920) returned 1 [0200.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86b18 [0200.009] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.009] WriteFile (in: hFile=0x1244, lpBuffer=0x7cb7a60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xad4f768, lpOverlapped=0x0 | out: lpBuffer=0x7cb7a60*, lpNumberOfBytesWritten=0xad4f768*=0x10c, lpOverlapped=0x0) returned 1 [0200.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c158 [0200.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0200.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c158 [0200.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c298 [0200.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0200.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0200.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.787] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="3e") returned 2 [0200.787] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="35") returned 2 [0200.787] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="49") returned 2 [0200.787] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="96") returned 2 [0200.787] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="61") returned 2 [0200.787] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="9d") returned 2 [0200.788] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="cc") returned 2 [0200.788] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="56") returned 2 [0200.788] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="cd") returned 2 [0200.788] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="25") returned 2 [0200.788] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="29") returned 2 [0200.788] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.788] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.788] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="55") returned 2 [0200.788] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.788] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="c2") returned 2 [0200.788] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="8e") returned 2 [0200.788] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="3e") returned 2 [0200.788] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="19") returned 2 [0200.788] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="3a") returned 2 [0200.788] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="d8") returned 2 [0200.788] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="41") returned 2 [0200.788] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="76") returned 2 [0200.788] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="b5") returned 2 [0200.788] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="94") returned 2 [0200.788] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.788] RtlInitAnsiString (in: DestinationString=0xad4f6f0, SourceString="3e354996619dcc56cd2529ddff55a8c28e3e193ad84176b5946e" | out: DestinationString="3e354996619dcc56cd2529ddff55a8c28e3e193ad84176b5946e") [0200.788] RtlAnsiStringToUnicodeString (in: DestinationString=0xad4f6e8, SourceString="3e354996619dcc56cd2529ddff55a8c28e3e193ad84176b5946e", AllocateDestinationString=1 | out: DestinationString="3e354996619dcc56cd2529ddff55a8c28e3e193ad84176b5946e") returned 0x0 [0200.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dfe0 [0200.788] wcscat (in: _Dest=0x7cd4d88, _Source="3e354996619dc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\3e354996619dc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\3e354996619dc" [0200.788] wcscat (in: _Dest=0x7cd4d88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\3e354996619dc.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\3e354996619dc.68814f" [0200.789] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\3e354996619dc.68814f", NtPathName=0xad4f6e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\3e354996619dc.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0ad70 [0201.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ad70) returned 1 [0201.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd6058) returned 1 [0201.143] NtQueryInformationFile (in: FileHandle=0x1244, IoStatusBlock=0xad4f6b8, FileInformation=0xad4f6c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xad4f6b8, FileInformation=0xad4f6c0) returned 0x0 [0201.143] NtSetInformationFile (FileHandle=0x1244, IoStatusBlock=0xad4f6b8, FileInformation=0xad4f6c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4d88) returned 1 [0201.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0201.348] FlushFileBuffers (hFile=0x1244) returned 1 [0201.365] CloseHandle (hObject=0x1244) returned 1 [0205.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7ddad60 [0205.872] wcscpy (in: _Dest=0x7ddad60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\" [0205.872] wcscat (in: _Dest=0x7ddad60, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\68814F-Readme.txt" [0205.872] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\68814f-readme.txt")) returned 0xffffffff [0205.872] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es_419\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14d8 [0206.578] WriteFile (in: hFile=0x14d8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xad4f6fc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xad4f6fc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.434] CloseHandle (hObject=0x14d8) returned 1 [0215.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddad60) returned 1 [0215.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54dd8) returned 1 Thread: id = 6044 os_tid = 0x1660 [0186.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86530 [0186.792] wcscpy (in: _Dest=0x7b86530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0186.792] wcscat (in: _Dest=0x7b86530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" [0186.792] wcscat (in: _Dest=0x7b86530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*" [0186.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb15a8 [0186.792] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62738e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6275ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6275ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7af0 [0189.874] wcscmp (_String1=".", _String2=".") returned 0 [0189.874] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62738e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6275ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6275ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.874] wcscmp (_String1="..", _String2=".") returned 1 [0189.874] wcscmp (_String1="..", _String2="..") returned 0 [0189.874] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6275ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6278700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.874] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.874] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb13c8 [0189.874] wcscpy (in: _Dest=0x7cb13c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" [0189.874] wcscat (in: _Dest=0x7cb13c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" [0189.874] wcscat (in: _Dest=0x7cb13c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" [0195.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb13c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8 [0195.315] FindNextFileW (in: hFindFile=0x7ad7af0, lpFindFileData=0x3eb15a8 | out: lpFindFileData=0x3eb15a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6275ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6278700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.315] FindClose (in: hFindFile=0x7ad7af0 | out: hFindFile=0x7ad7af0) returned 1 [0195.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb15a8) returned 1 [0195.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86530) returned 1 [0195.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7bce8) returned 1 Thread: id = 6045 os_tid = 0x1668 [0186.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86638 [0186.793] wcscpy (in: _Dest=0x7b86638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0186.793] wcscat (in: _Dest=0x7b86638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" [0186.793] wcscat (in: _Dest=0x7b86638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*" [0186.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e00800 [0186.793] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x3e00800 | out: lpFindFileData=0x3e00800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe627d520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe627fc30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe627fc30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7a70 [0189.873] wcscmp (_String1=".", _String2=".") returned 0 [0189.873] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x3e00800 | out: lpFindFileData=0x3e00800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe627d520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe627fc30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe627fc30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.873] wcscmp (_String1="..", _String2=".") returned 1 [0189.873] wcscmp (_String1="..", _String2="..") returned 0 [0189.873] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x3e00800 | out: lpFindFileData=0x3e00800*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe627fc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6282340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.873] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.873] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb12a0 [0189.873] wcscpy (in: _Dest=0x7cb12a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" [0189.873] wcscat (in: _Dest=0x7cb12a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" [0189.873] wcscat (in: _Dest=0x7cb12a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" [0195.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb12a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4 [0195.312] FindNextFileW (in: hFindFile=0x7ad7a70, lpFindFileData=0x3e00800 | out: lpFindFileData=0x3e00800*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe627fc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6282340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.312] FindClose (in: hFindFile=0x7ad7a70 | out: hFindFile=0x7ad7a70) returned 1 [0195.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00800) returned 1 [0195.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86638) returned 1 [0195.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84c68) returned 1 Thread: id = 6046 os_tid = 0x166c [0186.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86740 [0186.834] wcscpy (in: _Dest=0x7b86740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0186.834] wcscat (in: _Dest=0x7b86740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" [0186.835] wcscat (in: _Dest=0x7b86740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*" [0186.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e00a68 [0186.835] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x3e00a68 | out: lpFindFileData=0x3e00a68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6287160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe628bf80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe628bf80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad79f0 [0189.871] wcscmp (_String1=".", _String2=".") returned 0 [0189.871] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x3e00a68 | out: lpFindFileData=0x3e00a68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6287160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe628bf80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe628bf80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.872] wcscmp (_String1="..", _String2=".") returned 1 [0189.872] wcscmp (_String1="..", _String2="..") returned 0 [0189.872] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x3e00a68 | out: lpFindFileData=0x3e00a68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe628bf80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62abb50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.872] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.872] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb1178 [0189.872] wcscpy (in: _Dest=0x7cb1178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" [0189.872] wcscat (in: _Dest=0x7cb1178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" [0189.872] wcscat (in: _Dest=0x7cb1178, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" [0195.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb1178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4 [0195.310] FindNextFileW (in: hFindFile=0x7ad79f0, lpFindFileData=0x3e00a68 | out: lpFindFileData=0x3e00a68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe628bf80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62abb50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.310] FindClose (in: hFindFile=0x7ad79f0 | out: hFindFile=0x7ad79f0) returned 1 [0195.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00a68) returned 1 [0195.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86740) returned 1 [0195.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84d70) returned 1 Thread: id = 6047 os_tid = 0x1670 [0186.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86848 [0186.836] wcscpy (in: _Dest=0x7b86848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0186.836] wcscat (in: _Dest=0x7b86848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" [0186.836] wcscat (in: _Dest=0x7b86848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*" [0186.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e00cd0 [0186.836] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x3e00cd0 | out: lpFindFileData=0x3e00cd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62b0970, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62b5790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0189.870] wcscmp (_String1=".", _String2=".") returned 0 [0189.870] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3e00cd0 | out: lpFindFileData=0x3e00cd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62b0970, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62b5790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.870] wcscmp (_String1="..", _String2=".") returned 1 [0189.870] wcscmp (_String1="..", _String2="..") returned 0 [0189.870] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3e00cd0 | out: lpFindFileData=0x3e00cd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62b5790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.870] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.871] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb1050 [0189.871] wcscpy (in: _Dest=0x7cb1050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" [0189.871] wcscat (in: _Dest=0x7cb1050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" [0189.871] wcscat (in: _Dest=0x7cb1050, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" [0195.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb1050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c [0195.307] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x3e00cd0 | out: lpFindFileData=0x3e00cd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62b5790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62b5790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.307] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0195.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00cd0) returned 1 [0195.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86848) returned 1 [0195.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e78) returned 1 Thread: id = 6048 os_tid = 0x1674 [0186.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86950 [0186.837] wcscpy (in: _Dest=0x7b86950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0186.837] wcscat (in: _Dest=0x7b86950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" [0186.837] wcscat (in: _Dest=0x7b86950, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*" [0186.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e00f38 [0186.837] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x3e00f38 | out: lpFindFileData=0x3e00f38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62ba5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62bf3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0189.869] wcscmp (_String1=".", _String2=".") returned 0 [0189.869] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3e00f38 | out: lpFindFileData=0x3e00f38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62ba5b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62bf3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.869] wcscmp (_String1="..", _String2=".") returned 1 [0189.869] wcscmp (_String1="..", _String2="..") returned 0 [0189.869] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3e00f38 | out: lpFindFileData=0x3e00f38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62bf3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.869] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.869] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb0f28 [0189.869] wcscpy (in: _Dest=0x7cb0f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" [0189.869] wcscat (in: _Dest=0x7cb0f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" [0189.869] wcscat (in: _Dest=0x7cb0f28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" [0195.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c [0195.305] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x3e00f38 | out: lpFindFileData=0x3e00f38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62bf3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62bf3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.305] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0195.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00f38) returned 1 [0195.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86950) returned 1 [0195.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84f80) returned 1 Thread: id = 6049 os_tid = 0xb54 [0186.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86a58 [0186.838] wcscpy (in: _Dest=0x7b86a58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0186.838] wcscat (in: _Dest=0x7b86a58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" [0186.838] wcscat (in: _Dest=0x7b86a58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*" [0186.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e011a0 [0186.838] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x3e011a0 | out: lpFindFileData=0x3e011a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62c6900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62c9010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc80 [0189.868] wcscmp (_String1=".", _String2=".") returned 0 [0189.868] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x3e011a0 | out: lpFindFileData=0x3e011a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62c6900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62c9010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.868] wcscmp (_String1="..", _String2=".") returned 1 [0189.868] wcscmp (_String1="..", _String2="..") returned 0 [0189.868] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x3e011a0 | out: lpFindFileData=0x3e011a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62c9010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.868] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.868] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb0e00 [0189.868] wcscpy (in: _Dest=0x7cb0e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" [0189.868] wcscat (in: _Dest=0x7cb0e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" [0189.868] wcscat (in: _Dest=0x7cb0e00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" [0195.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568 [0195.302] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x3e011a0 | out: lpFindFileData=0x3e011a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62c9010, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62c9010, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.303] FindClose (in: hFindFile=0x7a2dc80 | out: hFindFile=0x7a2dc80) returned 1 [0195.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e011a0) returned 1 [0195.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86a58) returned 1 [0195.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85088) returned 1 Thread: id = 6050 os_tid = 0x2400 [0186.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86b60 [0186.838] wcscpy (in: _Dest=0x7b86b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0186.839] wcscat (in: _Dest=0x7b86b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" [0186.839] wcscat (in: _Dest=0x7b86b60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*" [0186.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e01408 [0186.839] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x3e01408 | out: lpFindFileData=0x3e01408*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62d0540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62d2c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db80 [0189.867] wcscmp (_String1=".", _String2=".") returned 0 [0189.867] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3e01408 | out: lpFindFileData=0x3e01408*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62d0540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62d2c50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.867] wcscmp (_String1="..", _String2=".") returned 1 [0189.867] wcscmp (_String1="..", _String2="..") returned 0 [0189.867] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3e01408 | out: lpFindFileData=0x3e01408*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62d2c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.867] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.867] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb0cd8 [0189.867] wcscpy (in: _Dest=0x7cb0cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" [0189.867] wcscat (in: _Dest=0x7cb0cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" [0189.867] wcscat (in: _Dest=0x7cb0cd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" [0195.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f4 [0195.300] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3e01408 | out: lpFindFileData=0x3e01408*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62d2c50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62d2c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.300] FindClose (in: hFindFile=0x7a2db80 | out: hFindFile=0x7a2db80) returned 1 [0195.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01408) returned 1 [0195.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86b60) returned 1 [0195.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85190) returned 1 Thread: id = 6051 os_tid = 0xdac [0186.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x300da60 [0186.839] wcscpy (in: _Dest=0x300da60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0186.840] wcscat (in: _Dest=0x300da60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" [0186.840] wcscat (in: _Dest=0x300da60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*" [0186.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e01670 [0186.840] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x3e01670 | out: lpFindFileData=0x3e01670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62dc890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62defa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62defa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d8c0 [0189.866] wcscmp (_String1=".", _String2=".") returned 0 [0189.866] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3e01670 | out: lpFindFileData=0x3e01670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62dc890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62defa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62defa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.866] wcscmp (_String1="..", _String2=".") returned 1 [0189.866] wcscmp (_String1="..", _String2="..") returned 0 [0189.866] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3e01670 | out: lpFindFileData=0x3e01670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62defa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e16b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.866] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.866] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cb0bb0 [0189.866] wcscpy (in: _Dest=0x7cb0bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" [0189.866] wcscat (in: _Dest=0x7cb0bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" [0189.866] wcscat (in: _Dest=0x7cb0bb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" [0195.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50 [0195.297] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3e01670 | out: lpFindFileData=0x3e01670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62defa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e16b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65e9c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.298] FindClose (in: hFindFile=0x7a2d8c0 | out: hFindFile=0x7a2d8c0) returned 1 [0195.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01670) returned 1 [0195.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300da60) returned 1 [0195.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85298) returned 1 Thread: id = 6052 os_tid = 0xb1c [0186.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x300d948 [0186.841] wcscpy (in: _Dest=0x300d948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0186.841] wcscat (in: _Dest=0x300d948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" [0186.841] wcscat (in: _Dest=0x300d948, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*" [0186.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e018d8 [0186.841] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x3e018d8 | out: lpFindFileData=0x3e018d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62e64d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62e8be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d480 [0189.865] wcscmp (_String1=".", _String2=".") returned 0 [0189.865] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3e018d8 | out: lpFindFileData=0x3e018d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62e64d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62e8be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.865] wcscmp (_String1="..", _String2=".") returned 1 [0189.865] wcscmp (_String1="..", _String2="..") returned 0 [0189.865] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3e018d8 | out: lpFindFileData=0x3e018d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62e8be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.865] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.865] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cb0a88 [0189.865] wcscpy (in: _Dest=0x7cb0a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" [0189.865] wcscat (in: _Dest=0x7cb0a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" [0189.866] wcscat (in: _Dest=0x7cb0a88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" [0195.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80 [0195.295] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3e018d8 | out: lpFindFileData=0x3e018d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62e8be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62e8be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.295] FindClose (in: hFindFile=0x7a2d480 | out: hFindFile=0x7a2d480) returned 1 [0195.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e018d8) returned 1 [0195.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300d948) returned 1 [0195.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b853a0) returned 1 Thread: id = 6053 os_tid = 0xb30 [0186.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86c68 [0186.842] wcscpy (in: _Dest=0x7b86c68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0186.842] wcscat (in: _Dest=0x7b86c68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" [0186.842] wcscat (in: _Dest=0x7b86c68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*" [0186.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e01b40 [0186.842] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x3e01b40 | out: lpFindFileData=0x3e01b40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62f2820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62f4f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0189.864] wcscmp (_String1=".", _String2=".") returned 0 [0189.864] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3e01b40 | out: lpFindFileData=0x3e01b40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62f2820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62f4f30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.864] wcscmp (_String1="..", _String2=".") returned 1 [0189.864] wcscmp (_String1="..", _String2="..") returned 0 [0189.864] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3e01b40 | out: lpFindFileData=0x3e01b40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62f4f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.864] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.864] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb0960 [0189.864] wcscpy (in: _Dest=0x7cb0960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" [0189.865] wcscat (in: _Dest=0x7cb0960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" [0189.865] wcscat (in: _Dest=0x7cb0960, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" [0195.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180 [0195.292] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3e01b40 | out: lpFindFileData=0x3e01b40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62f4f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62f4f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.292] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0195.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01b40) returned 1 [0195.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86c68) returned 1 [0195.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b854a8) returned 1 Thread: id = 6054 os_tid = 0x7c8 [0186.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x300dfd8 [0186.847] wcscpy (in: _Dest=0x300dfd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0186.847] wcscat (in: _Dest=0x300dfd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" [0186.847] wcscat (in: _Dest=0x300dfd8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*" [0186.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e01da8 [0186.847] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x3e01da8 | out: lpFindFileData=0x3e01da8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62fc460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62feb70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62feb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7f30 [0189.884] wcscmp (_String1=".", _String2=".") returned 0 [0189.884] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x3e01da8 | out: lpFindFileData=0x3e01da8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe62fc460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe62feb70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe62feb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.885] wcscmp (_String1="..", _String2=".") returned 1 [0189.885] wcscmp (_String1="..", _String2="..") returned 0 [0189.885] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x3e01da8 | out: lpFindFileData=0x3e01da8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62feb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6301280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.885] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.885] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3ec6de0 [0189.885] wcscpy (in: _Dest=0x3ec6de0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" [0189.885] wcscat (in: _Dest=0x3ec6de0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" [0189.885] wcscat (in: _Dest=0x3ec6de0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" [0190.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14 [0190.393] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x3e01da8 | out: lpFindFileData=0x3e01da8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe62feb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6301280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.393] FindClose (in: hFindFile=0x7ad7f30 | out: hFindFile=0x7ad7f30) returned 1 [0190.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01da8) returned 1 [0190.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dfd8) returned 1 [0190.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38818) returned 1 Thread: id = 6055 os_tid = 0x24f0 [0186.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86d70 [0186.848] wcscpy (in: _Dest=0x7b86d70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0186.848] wcscat (in: _Dest=0x7b86d70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" [0186.848] wcscat (in: _Dest=0x7b86d70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*" [0186.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e02010 [0186.848] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x3e02010 | out: lpFindFileData=0x3e02010*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe630d5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe630fce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe630fce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7170 [0189.883] wcscmp (_String1=".", _String2=".") returned 0 [0189.883] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3e02010 | out: lpFindFileData=0x3e02010*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe630d5d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe630fce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe630fce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.883] wcscmp (_String1="..", _String2=".") returned 1 [0189.884] wcscmp (_String1="..", _String2="..") returned 0 [0189.884] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3e02010 | out: lpFindFileData=0x3e02010*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe630fce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63123f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.884] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.884] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb1e30 [0189.884] wcscpy (in: _Dest=0x7cb1e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" [0189.884] wcscat (in: _Dest=0x7cb1e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" [0189.884] wcscat (in: _Dest=0x7cb1e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" [0190.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb1e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578 [0190.391] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3e02010 | out: lpFindFileData=0x3e02010*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe630fce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63123f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.391] FindClose (in: hFindFile=0x7ad7170 | out: hFindFile=0x7ad7170) returned 1 [0190.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02010) returned 1 [0190.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86d70) returned 1 [0190.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b855b0) returned 1 Thread: id = 6056 os_tid = 0x1678 [0186.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b86e78 [0186.852] wcscpy (in: _Dest=0x7b86e78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0186.852] wcscat (in: _Dest=0x7b86e78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" [0186.852] wcscat (in: _Dest=0x7b86e78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*" [0186.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e02278 [0186.852] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x3e02278 | out: lpFindFileData=0x3e02278*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6317210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe631c030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7c70 [0189.882] wcscmp (_String1=".", _String2=".") returned 0 [0189.882] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3e02278 | out: lpFindFileData=0x3e02278*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6317210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe631c030, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.882] wcscmp (_String1="..", _String2=".") returned 1 [0189.882] wcscmp (_String1="..", _String2="..") returned 0 [0189.882] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3e02278 | out: lpFindFileData=0x3e02278*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe631c030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.883] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.883] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb1d08 [0189.883] wcscpy (in: _Dest=0x7cb1d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" [0189.883] wcscat (in: _Dest=0x7cb1d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" [0189.883] wcscat (in: _Dest=0x7cb1d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" [0190.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb1d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d0 [0190.388] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3e02278 | out: lpFindFileData=0x3e02278*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe631c030, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe631c030, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.388] FindClose (in: hFindFile=0x7ad7c70 | out: hFindFile=0x7ad7c70) returned 1 [0190.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02278) returned 1 [0190.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86e78) returned 1 [0190.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b856b8) returned 1 Thread: id = 6057 os_tid = 0xf70 [0186.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b86f80 [0186.854] wcscpy (in: _Dest=0x7b86f80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0186.854] wcscat (in: _Dest=0x7b86f80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" [0186.854] wcscat (in: _Dest=0x7b86f80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*" [0186.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e024e0 [0186.854] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x3e024e0 | out: lpFindFileData=0x3e024e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6320e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6325c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7930 [0189.881] wcscmp (_String1=".", _String2=".") returned 0 [0189.881] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x3e024e0 | out: lpFindFileData=0x3e024e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6320e50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6325c70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.881] wcscmp (_String1="..", _String2=".") returned 1 [0189.881] wcscmp (_String1="..", _String2="..") returned 0 [0189.881] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x3e024e0 | out: lpFindFileData=0x3e024e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6325c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.881] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.882] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7cb1be0 [0189.882] wcscpy (in: _Dest=0x7cb1be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" [0189.882] wcscat (in: _Dest=0x7cb1be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" [0189.882] wcscat (in: _Dest=0x7cb1be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" [0190.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb1be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38 [0190.385] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x3e024e0 | out: lpFindFileData=0x3e024e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6325c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6325c70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.385] FindClose (in: hFindFile=0x7ad7930 | out: hFindFile=0x7ad7930) returned 1 [0190.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e024e0) returned 1 [0190.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86f80) returned 1 [0190.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b857c0) returned 1 Thread: id = 6058 os_tid = 0x12e0 [0186.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b87088 [0186.855] wcscpy (in: _Dest=0x7b87088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0186.855] wcscat (in: _Dest=0x7b87088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" [0186.855] wcscat (in: _Dest=0x7b87088, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*" [0186.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e02748 [0186.855] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x3e02748 | out: lpFindFileData=0x3e02748*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe632d1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe632f8b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bf0 [0189.880] wcscmp (_String1=".", _String2=".") returned 0 [0189.880] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x3e02748 | out: lpFindFileData=0x3e02748*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe632d1a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe632f8b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.880] wcscmp (_String1="..", _String2=".") returned 1 [0189.880] wcscmp (_String1="..", _String2="..") returned 0 [0189.880] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x3e02748 | out: lpFindFileData=0x3e02748*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe632f8b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.880] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.880] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb1ab8 [0189.881] wcscpy (in: _Dest=0x7cb1ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" [0189.881] wcscat (in: _Dest=0x7cb1ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" [0189.881] wcscat (in: _Dest=0x7cb1ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" [0190.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb1ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574 [0190.383] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x3e02748 | out: lpFindFileData=0x3e02748*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe632f8b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe632f8b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.383] FindClose (in: hFindFile=0x7ad7bf0 | out: hFindFile=0x7ad7bf0) returned 1 [0190.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02748) returned 1 [0190.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87088) returned 1 [0190.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b858c8) returned 1 Thread: id = 6059 os_tid = 0x16b8 [0186.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b87190 [0186.856] wcscpy (in: _Dest=0x7b87190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0186.856] wcscat (in: _Dest=0x7b87190, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" [0186.856] wcscat (in: _Dest=0x7b87190, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*" [0186.856] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e029b0 [0186.856] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x3e029b0 | out: lpFindFileData=0x3e029b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6336de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63394f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad79b0 [0189.879] wcscmp (_String1=".", _String2=".") returned 0 [0189.879] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3e029b0 | out: lpFindFileData=0x3e029b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6336de0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63394f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.879] wcscmp (_String1="..", _String2=".") returned 1 [0189.879] wcscmp (_String1="..", _String2="..") returned 0 [0189.879] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3e029b0 | out: lpFindFileData=0x3e029b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63394f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.879] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.879] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb1990 [0189.879] wcscpy (in: _Dest=0x7cb1990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" [0189.880] wcscat (in: _Dest=0x7cb1990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" [0189.880] wcscat (in: _Dest=0x7cb1990, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" [0190.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb1990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f0 [0190.380] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3e029b0 | out: lpFindFileData=0x3e029b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63394f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63394f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.380] FindClose (in: hFindFile=0x7ad79b0 | out: hFindFile=0x7ad79b0) returned 1 [0190.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e029b0) returned 1 [0190.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87190) returned 1 [0190.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b859d0) returned 1 Thread: id = 6060 os_tid = 0x16bc [0186.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b87298 [0186.861] wcscpy (in: _Dest=0x7b87298, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0186.861] wcscat (in: _Dest=0x7b87298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" [0186.861] wcscat (in: _Dest=0x7b87298, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*" [0186.861] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e02c18 [0186.861] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x3e02c18 | out: lpFindFileData=0x3e02c18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6340a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6343130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6343130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0189.878] wcscmp (_String1=".", _String2=".") returned 0 [0189.878] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3e02c18 | out: lpFindFileData=0x3e02c18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6340a20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6343130, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6343130, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.878] wcscmp (_String1="..", _String2=".") returned 1 [0189.878] wcscmp (_String1="..", _String2="..") returned 0 [0189.878] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3e02c18 | out: lpFindFileData=0x3e02c18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6343130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6345840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.878] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.878] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb1868 [0189.878] wcscpy (in: _Dest=0x7cb1868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" [0189.878] wcscat (in: _Dest=0x7cb1868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" [0189.878] wcscat (in: _Dest=0x7cb1868, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" [0190.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb1868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80 [0190.377] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3e02c18 | out: lpFindFileData=0x3e02c18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6343130, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6345840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65ec3a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.377] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0190.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02c18) returned 1 [0190.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87298) returned 1 [0190.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85ad8) returned 1 Thread: id = 6061 os_tid = 0x1318 [0186.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b873a0 [0186.862] wcscpy (in: _Dest=0x7b873a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0186.862] wcscat (in: _Dest=0x7b873a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" [0186.862] wcscat (in: _Dest=0x7b873a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*" [0186.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e02e80 [0186.862] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x3e02e80 | out: lpFindFileData=0x3e02e80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe634a660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634cd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe634cd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78b0 [0189.877] wcscmp (_String1=".", _String2=".") returned 0 [0189.877] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x3e02e80 | out: lpFindFileData=0x3e02e80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe634a660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634cd70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe634cd70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.877] wcscmp (_String1="..", _String2=".") returned 1 [0189.877] wcscmp (_String1="..", _String2="..") returned 0 [0189.877] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x3e02e80 | out: lpFindFileData=0x3e02e80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe634cd70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634f480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.877] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.877] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb1740 [0189.877] wcscpy (in: _Dest=0x7cb1740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" [0189.877] wcscat (in: _Dest=0x7cb1740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" [0189.877] wcscat (in: _Dest=0x7cb1740, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" [0190.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb1740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8 [0190.371] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x3e02e80 | out: lpFindFileData=0x3e02e80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe634cd70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe634f480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.371] FindClose (in: hFindFile=0x7ad78b0 | out: hFindFile=0x7ad78b0) returned 1 [0190.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02e80) returned 1 [0190.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b873a0) returned 1 [0190.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85be0) returned 1 Thread: id = 6062 os_tid = 0x1344 [0186.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b874a8 [0186.863] wcscpy (in: _Dest=0x7b874a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0186.863] wcscat (in: _Dest=0x7b874a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" [0186.863] wcscat (in: _Dest=0x7b874a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*" [0186.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e030e8 [0186.863] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x3e030e8 | out: lpFindFileData=0x3e030e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63542a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63569b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63569b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cb0 [0189.876] wcscmp (_String1=".", _String2=".") returned 0 [0189.876] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3e030e8 | out: lpFindFileData=0x3e030e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63542a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63569b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63569b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.876] wcscmp (_String1="..", _String2=".") returned 1 [0189.876] wcscmp (_String1="..", _String2="..") returned 0 [0189.876] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3e030e8 | out: lpFindFileData=0x3e030e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63569b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63590c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.876] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.876] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb1618 [0189.876] wcscpy (in: _Dest=0x7cb1618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" [0189.876] wcscat (in: _Dest=0x7cb1618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" [0189.876] wcscat (in: _Dest=0x7cb1618, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" [0190.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb1618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1414 [0190.863] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x3e030e8 | out: lpFindFileData=0x3e030e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63569b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63590c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.863] FindClose (in: hFindFile=0x7ad7cb0 | out: hFindFile=0x7ad7cb0) returned 1 [0190.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e030e8) returned 1 [0190.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b874a8) returned 1 [0190.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85ce8) returned 1 Thread: id = 6063 os_tid = 0x1370 [0186.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b875b0 [0186.864] wcscpy (in: _Dest=0x7b875b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0186.865] wcscat (in: _Dest=0x7b875b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" [0186.865] wcscat (in: _Dest=0x7b875b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*" [0186.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e03350 [0186.865] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x3e03350 | out: lpFindFileData=0x3e03350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe635dee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63605f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63605f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7d30 [0189.875] wcscmp (_String1=".", _String2=".") returned 0 [0189.875] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3e03350 | out: lpFindFileData=0x3e03350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe635dee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63605f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63605f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.875] wcscmp (_String1="..", _String2=".") returned 1 [0189.875] wcscmp (_String1="..", _String2="..") returned 0 [0189.875] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3e03350 | out: lpFindFileData=0x3e03350*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63605f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6362d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.875] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.875] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb14f0 [0189.875] wcscpy (in: _Dest=0x7cb14f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" [0189.875] wcscat (in: _Dest=0x7cb14f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" [0189.875] wcscat (in: _Dest=0x7cb14f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" [0195.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb14f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c [0195.317] FindNextFileW (in: hFindFile=0x7ad7d30, lpFindFileData=0x3e03350 | out: lpFindFileData=0x3e03350*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63605f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6362d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.317] FindClose (in: hFindFile=0x7ad7d30 | out: hFindFile=0x7ad7d30) returned 1 [0195.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03350) returned 1 [0195.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b875b0) returned 1 [0195.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85df0) returned 1 Thread: id = 6064 os_tid = 0x1700 [0186.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b876b8 [0186.866] wcscpy (in: _Dest=0x7b876b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0186.866] wcscat (in: _Dest=0x7b876b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\" [0186.866] wcscat (in: _Dest=0x7b876b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*" [0186.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e035b8 [0186.866] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x3e035b8 | out: lpFindFileData=0x3e035b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6367b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636a230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe636a230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e741f0 [0187.146] wcscmp (_String1=".", _String2=".") returned 0 [0187.146] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3e035b8 | out: lpFindFileData=0x3e035b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6367b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636a230, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe636a230, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.147] wcscmp (_String1="..", _String2=".") returned 1 [0187.147] wcscmp (_String1="..", _String2="..") returned 0 [0187.147] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3e035b8 | out: lpFindFileData=0x3e035b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe636a230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636c940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.147] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.147] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3ec6f08 [0187.147] wcscpy (in: _Dest=0x3ec6f08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" [0187.147] wcscat (in: _Dest=0x3ec6f08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\" [0187.147] wcscat (in: _Dest=0x3ec6f08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" [0188.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec6f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1400 [0188.360] FindNextFileW (in: hFindFile=0x3e741f0, lpFindFileData=0x3e035b8 | out: lpFindFileData=0x3e035b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe636a230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe636c940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.361] FindClose (in: hFindFile=0x3e741f0 | out: hFindFile=0x3e741f0) returned 1 [0188.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e035b8) returned 1 [0188.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b876b8) returned 1 [0188.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85ef8) returned 1 Thread: id = 6065 os_tid = 0x1704 [0186.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b877c0 [0186.867] wcscpy (in: _Dest=0x7b877c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0186.867] wcscat (in: _Dest=0x7b877c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" [0186.867] wcscat (in: _Dest=0x7b877c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*" [0186.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e03820 [0186.867] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x3e03820 | out: lpFindFileData=0x3e03820*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6371760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6373e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6373e70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74070 [0187.148] wcscmp (_String1=".", _String2=".") returned 0 [0187.148] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3e03820 | out: lpFindFileData=0x3e03820*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6371760, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6373e70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6373e70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.148] wcscmp (_String1="..", _String2=".") returned 1 [0187.148] wcscmp (_String1="..", _String2="..") returned 0 [0187.148] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3e03820 | out: lpFindFileData=0x3e03820*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6373e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6376580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.148] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.148] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3ec7030 [0187.148] wcscpy (in: _Dest=0x3ec7030, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" [0187.148] wcscat (in: _Dest=0x3ec7030, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" [0187.149] wcscat (in: _Dest=0x3ec7030, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" [0188.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec7030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0188.364] FindNextFileW (in: hFindFile=0x3e74070, lpFindFileData=0x3e03820 | out: lpFindFileData=0x3e03820*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6373e70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6376580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.364] FindClose (in: hFindFile=0x3e74070 | out: hFindFile=0x3e74070) returned 1 [0188.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03820) returned 1 [0188.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b877c0) returned 1 [0188.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86000) returned 1 Thread: id = 6066 os_tid = 0x1708 [0187.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b878c8 [0187.149] wcscpy (in: _Dest=0x7b878c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0187.149] wcscat (in: _Dest=0x7b878c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" [0187.149] wcscat (in: _Dest=0x7b878c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*" [0187.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b5a8 [0187.149] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe637b3a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe637dab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe637dab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7df0 [0189.886] wcscmp (_String1=".", _String2=".") returned 0 [0189.887] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe637b3a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe637dab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe637dab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.887] wcscmp (_String1="..", _String2=".") returned 1 [0189.887] wcscmp (_String1="..", _String2="..") returned 0 [0189.887] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe637dab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63801c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.887] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.887] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb2148 [0189.887] wcscpy (in: _Dest=0x7cb2148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" [0189.887] wcscat (in: _Dest=0x7cb2148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" [0189.887] wcscat (in: _Dest=0x7cb2148, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" [0190.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30 [0190.399] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe637dab0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63801c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.399] FindClose (in: hFindFile=0x7ad7df0 | out: hFindFile=0x7ad7df0) returned 1 [0190.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b5a8) returned 1 [0190.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b878c8) returned 1 [0190.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86108) returned 1 Thread: id = 6067 os_tid = 0x1584 [0187.150] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json")) returned 0x2020 [0187.456] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0190.133] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x165c [0190.133] GetFileSizeEx (in: hFile=0x165c, lpFileSize=0xae2fca4 | out: lpFileSize=0xae2fca4*=232) returned 1 [0190.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0190.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0190.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0190.133] NtQuerySystemTime (in: CurrentTime=0xae2fc18 | out: CurrentTime=0xae2fc18*=132462177687120000) returned 0x0 [0190.133] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x452ba2ba [0190.133] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x2822c66c [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x4d93f303 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x48224a15 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x11536da6 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x667d7c40 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x256811e1 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x6428fb8b [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x378890d7 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x507cba52 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x17a16ca9 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0xd1f7541 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0xaf32213 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x7337a4a7 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x73530e74 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0xb5884ee [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x636efcf2 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x651ab8a8 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x6d96ca3f [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x3a5d2fa0 [0190.134] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x5e77ad5a [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x47e72709 [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x55188403 [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x66d00d94 [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x573ae5f4 [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x1f6d0fea [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x7150a476 [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x6652a380 [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x7042f191 [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x70ed109b [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0x1bf6dbb0 [0190.135] RtlRandomEx (in: Seed=0xae2fc10 | out: Seed=0xae2fc10) returned 0xadd03b1 [0190.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b410) returned 1 [0190.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7badbb0 [0190.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb17b8 [0190.152] ReadFile (in: hFile=0x165c, lpBuffer=0x7badbb0, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0xae2fc0c, lpOverlapped=0x0 | out: lpBuffer=0x7badbb0*, lpNumberOfBytesRead=0xae2fc0c*=0xe8, lpOverlapped=0x0) returned 1 [0190.154] SetFilePointerEx (in: hFile=0x165c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.154] WriteFile (in: hFile=0x165c, lpBuffer=0x7bb17b8*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xae2fc10, lpOverlapped=0x0 | out: lpBuffer=0x7bb17b8*, lpNumberOfBytesWritten=0xae2fc10*=0xe8, lpOverlapped=0x0) returned 1 [0192.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0192.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5568 [0192.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5568) returned 1 [0192.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb17b8) returned 1 [0192.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7badbb0) returned 1 [0192.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0192.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258f0) returned 1 [0192.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a379e0 [0192.152] SetFilePointerEx (in: hFile=0x165c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.152] WriteFile (in: hFile=0x165c, lpBuffer=0x7cbd088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae2fc98, lpOverlapped=0x0 | out: lpBuffer=0x7cbd088*, lpNumberOfBytesWritten=0xae2fc98*=0x10c, lpOverlapped=0x0) returned 1 [0192.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41e30 [0192.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e760 [0192.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0192.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0192.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2db8 [0192.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0192.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0192.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0192.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0192.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e30) returned 1 [0192.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x30671c0 [0192.572] sprintf (in: _Dest=0x30671c0, _Format="%c%c" | out: _Dest="1b") returned 2 [0192.572] sprintf (in: _Dest=0x30671c2, _Format="%c%c" | out: _Dest="bc") returned 2 [0192.572] sprintf (in: _Dest=0x30671c4, _Format="%c%c" | out: _Dest="fe") returned 2 [0192.572] sprintf (in: _Dest=0x30671c6, _Format="%c%c" | out: _Dest="89") returned 2 [0192.572] sprintf (in: _Dest=0x30671c8, _Format="%c%c" | out: _Dest="5a") returned 2 [0192.572] sprintf (in: _Dest=0x30671ca, _Format="%c%c" | out: _Dest="a8") returned 2 [0192.572] sprintf (in: _Dest=0x30671cc, _Format="%c%c" | out: _Dest="f7") returned 2 [0192.572] sprintf (in: _Dest=0x30671ce, _Format="%c%c" | out: _Dest="e0") returned 2 [0192.572] sprintf (in: _Dest=0x30671d0, _Format="%c%c" | out: _Dest="35") returned 2 [0192.573] sprintf (in: _Dest=0x30671d2, _Format="%c%c" | out: _Dest="bc") returned 2 [0192.573] sprintf (in: _Dest=0x30671d4, _Format="%c%c" | out: _Dest="92") returned 2 [0192.573] sprintf (in: _Dest=0x30671d6, _Format="%c%c" | out: _Dest="d5") returned 2 [0192.573] sprintf (in: _Dest=0x30671d8, _Format="%c%c" | out: _Dest="77") returned 2 [0192.573] sprintf (in: _Dest=0x30671da, _Format="%c%c" | out: _Dest="3d") returned 2 [0192.573] sprintf (in: _Dest=0x30671dc, _Format="%c%c" | out: _Dest="a8") returned 2 [0192.573] sprintf (in: _Dest=0x30671de, _Format="%c%c" | out: _Dest="25") returned 2 [0192.573] sprintf (in: _Dest=0x30671e0, _Format="%c%c" | out: _Dest="db") returned 2 [0192.573] sprintf (in: _Dest=0x30671e2, _Format="%c%c" | out: _Dest="22") returned 2 [0192.573] sprintf (in: _Dest=0x30671e4, _Format="%c%c" | out: _Dest="59") returned 2 [0192.573] sprintf (in: _Dest=0x30671e6, _Format="%c%c" | out: _Dest="39") returned 2 [0192.573] sprintf (in: _Dest=0x30671e8, _Format="%c%c" | out: _Dest="f4") returned 2 [0192.573] sprintf (in: _Dest=0x30671ea, _Format="%c%c" | out: _Dest="03") returned 2 [0192.573] sprintf (in: _Dest=0x30671ec, _Format="%c%c" | out: _Dest="39") returned 2 [0192.573] sprintf (in: _Dest=0x30671ee, _Format="%c%c" | out: _Dest="cd") returned 2 [0192.573] sprintf (in: _Dest=0x30671f0, _Format="%c%c" | out: _Dest="8f") returned 2 [0192.573] sprintf (in: _Dest=0x30671f2, _Format="%c%c" | out: _Dest="99") returned 2 [0192.573] RtlInitAnsiString (in: DestinationString=0xae2fc20, SourceString="1bbcfe895aa8f7e035bc92d5773da825db225939f40339cd8f99" | out: DestinationString="1bbcfe895aa8f7e035bc92d5773da825db225939f40339cd8f99") [0192.573] RtlAnsiStringToUnicodeString (in: DestinationString=0xae2fc18, SourceString="1bbcfe895aa8f7e035bc92d5773da825db225939f40339cd8f99", AllocateDestinationString=1 | out: DestinationString="1bbcfe895aa8f7e035bc92d5773da825db225939f40339cd8f99") returned 0x0 [0192.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e5f8 [0192.574] RtlFreeAnsiString (AnsiString="1") [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30671c0) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd088) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37a10) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5568) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a379e0) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0192.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad80) returned 1 [0192.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0192.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0192.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cb04c0 [0192.575] wcscat (in: _Dest=0x7cb04c0, _Source="1bbcfe895aa8f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\1bbcfe895aa8f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\1bbcfe895aa8f" [0192.575] wcscat (in: _Dest=0x7cb04c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\1bbcfe895aa8f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\1bbcfe895aa8f.68814f" [0192.575] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\1bbcfe895aa8f.68814f", NtPathName=0xae2fc10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\1bbcfe895aa8f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0192.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea40a0 [0192.575] NtSetInformationFile (FileHandle=0x165c, IoStatusBlock=0xae2fc18, FileInformation=0x3ea40a0, Length=0x136, FileInformationClass=0xa) returned 0x0 [0192.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea40a0) returned 1 [0192.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a573f8) returned 1 [0192.704] NtQueryInformationFile (in: FileHandle=0x165c, IoStatusBlock=0xae2fbe8, FileInformation=0xae2fbf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xae2fbe8, FileInformation=0xae2fbf0) returned 0x0 [0192.704] NtSetInformationFile (FileHandle=0x165c, IoStatusBlock=0xae2fbe8, FileInformation=0xae2fbf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0192.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb04c0) returned 1 [0192.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0192.797] FlushFileBuffers (hFile=0x165c) returned 1 [0192.811] CloseHandle (hObject=0x165c) returned 1 [0192.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbf050 [0192.926] wcscpy (in: _Dest=0x7cbf050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\" [0192.926] wcscat (in: _Dest=0x7cbf050, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\68814F-Readme.txt" [0192.926] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\68814f-readme.txt")) returned 0xffffffff [0192.926] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\nl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1518 [0193.175] WriteFile (in: hFile=0x1518, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xae2fc2c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xae2fc2c*=0x8b9, lpOverlapped=0x0) returned 1 [0193.177] CloseHandle (hObject=0x1518) returned 1 [0193.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf050) returned 1 [0193.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82698) returned 1 Thread: id = 6068 os_tid = 0x15a8 [0187.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss")) returned 0x20 [0187.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS", dwFileAttributes=0x20) returned 0 [0187.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.152] GetLastError () returned 0x5 [0187.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS", dwFileAttributes=0x20) returned 0 [0187.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 6069 os_tid = 0x1710 [0187.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss")) returned 0x20 [0191.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS", dwFileAttributes=0x20) returned 0 [0192.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.505] GetLastError () returned 0x5 [0199.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS", dwFileAttributes=0x20) returned 0 [0200.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62810) returned 1 Thread: id = 6070 os_tid = 0x1714 [0187.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss")) returned 0x20 [0192.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS", dwFileAttributes=0x20) returned 0 [0192.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.851] GetLastError () returned 0x5 [0195.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS", dwFileAttributes=0x20) returned 0 [0197.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f90) returned 1 Thread: id = 6071 os_tid = 0x1718 [0187.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss")) returned 0x20 [0194.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS", dwFileAttributes=0x20) returned 0 [0194.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.851] GetLastError () returned 0x5 [0195.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS", dwFileAttributes=0x20) returned 0 [0195.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a626d0) returned 1 Thread: id = 6072 os_tid = 0x171c [0187.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a66610 [0187.156] wcscpy (in: _Dest=0x7a66610, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0187.156] wcscat (in: _Dest=0x7a66610, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\" [0187.156] wcscat (in: _Dest=0x7a66610, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*" [0187.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e03a88 [0187.156] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x3e03a88 | out: lpFindFileData=0x3e03a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d400 [0191.383] wcscmp (_String1=".", _String2=".") returned 0 [0191.383] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3e03a88 | out: lpFindFileData=0x3e03a88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45fc5cd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.384] wcscmp (_String1="..", _String2=".") returned 1 [0191.384] wcscmp (_String1="..", _String2="..") returned 0 [0191.384] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3e03a88 | out: lpFindFileData=0x3e03a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0191.384] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0191.384] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0191.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x3330a8 [0191.384] wcscpy (in: _Dest=0x3330a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0191.384] wcscat (in: _Dest=0x3330a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\" [0191.384] wcscat (in: _Dest=0x3330a8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" [0195.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3330a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738 [0195.678] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3e03a88 | out: lpFindFileData=0x3e03a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.678] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.678] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x3333a8 [0195.678] wcscpy (in: _Dest=0x3333a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate" [0195.678] wcscat (in: _Dest=0x3333a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\" [0195.678] wcscat (in: _Dest=0x3333a8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" [0195.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3333a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0195.680] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3e03a88 | out: lpFindFileData=0x3e03a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.680] FindClose (in: hFindFile=0x7a2d400 | out: hFindFile=0x7a2d400) returned 1 [0195.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03a88) returned 1 [0195.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66610) returned 1 [0195.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 6073 os_tid = 0x1618 [0187.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css")) returned 0x20 [0191.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0191.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.875] GetLastError () returned 0x5 [0192.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0192.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66770) returned 1 Thread: id = 6074 os_tid = 0x167c [0187.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css")) returned 0x20 [0194.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0194.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.851] GetLastError () returned 0x5 [0194.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0194.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff74e8) returned 1 Thread: id = 6075 os_tid = 0xdf8 [0187.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa8) returned 0x7a66400 [0187.157] wcscpy (in: _Dest=0x7a66400, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0187.157] wcscat (in: _Dest=0x7a66400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0187.157] wcscat (in: _Dest=0x7a66400, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*" [0187.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e03cf0 [0187.157] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x3e03cf0 | out: lpFindFileData=0x3e03cf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0191.387] wcscmp (_String1=".", _String2=".") returned 0 [0191.387] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3e03cf0 | out: lpFindFileData=0x3e03cf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45fc5cd0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.387] wcscmp (_String1="..", _String2=".") returned 1 [0191.387] wcscmp (_String1="..", _String2="..") returned 0 [0191.387] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3e03cf0 | out: lpFindFileData=0x3e03cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45fc5cd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0191.387] wcscmp (_String1="background.gif", _String2=".") returned 1 [0191.387] wcscmp (_String1="background.gif", _String2="..") returned 1 [0191.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d86a80 [0191.388] wcscpy (in: _Dest=0x3d86a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0191.388] wcscat (in: _Dest=0x3d86a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0191.388] wcscat (in: _Dest=0x3d86a80, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" [0193.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2364 [0193.450] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3e03cf0 | out: lpFindFileData=0x3e03cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c45a00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62c45a00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0193.450] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0193.450] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0193.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d575c8 [0193.450] wcscpy (in: _Dest=0x3d575c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0193.450] wcscat (in: _Dest=0x3d575c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0193.450] wcscat (in: _Dest=0x3d575c8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" [0193.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d575c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0193.451] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3e03cf0 | out: lpFindFileData=0x3e03cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0193.451] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0193.452] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0193.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56ad8 [0193.452] wcscpy (in: _Dest=0x3d56ad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue" [0193.452] wcscat (in: _Dest=0x3d56ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\" [0193.452] wcscat (in: _Dest=0x3d56ad8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" [0193.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0193.453] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3e03cf0 | out: lpFindFileData=0x3e03cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0193.453] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0193.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03cf0) returned 1 [0193.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66400) returned 1 [0193.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a661f0) returned 1 Thread: id = 6076 os_tid = 0x2428 [0187.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css")) returned 0x20 [0190.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0191.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.829] GetLastError () returned 0x5 [0194.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0194.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff62f0) returned 1 Thread: id = 6077 os_tid = 0x10c [0187.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xaa) returned 0x2ff6d00 [0187.158] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0187.158] wcscat (in: _Dest=0x2ff6d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0187.158] wcscat (in: _Dest=0x2ff6d00, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*" [0187.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e03f58 [0187.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x3e03f58 | out: lpFindFileData=0x3e03f58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x460d0670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7eb0 [0195.232] wcscmp (_String1=".", _String2=".") returned 0 [0195.232] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3e03f58 | out: lpFindFileData=0x3e03f58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x460d0670, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x460f67d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.232] wcscmp (_String1="..", _String2=".") returned 1 [0195.232] wcscmp (_String1="..", _String2="..") returned 0 [0195.232] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3e03f58 | out: lpFindFileData=0x3e03f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow.png", cAlternateFileName="")) returned 1 [0195.232] wcscmp (_String1="arrow.png", _String2=".") returned 1 [0195.232] wcscmp (_String1="arrow.png", _String2="..") returned 1 [0195.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56ad8 [0195.232] wcscpy (in: _Dest=0x3d56ad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0195.232] wcscat (in: _Dest=0x3d56ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0195.232] wcscat (in: _Dest=0x3d56ad8, _Source="arrow.png" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" [0201.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4 [0201.737] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3e03f58 | out: lpFindFileData=0x3e03f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x931, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document.gif", cAlternateFileName="")) returned 1 [0201.737] wcscmp (_String1="Document.gif", _String2=".") returned 1 [0201.737] wcscmp (_String1="Document.gif", _String2="..") returned 1 [0201.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57500 [0201.737] wcscpy (in: _Dest=0x3d57500, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0201.737] wcscat (in: _Dest=0x3d57500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0201.737] wcscat (in: _Dest=0x3d57500, _Source="Document.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" [0201.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204 [0201.738] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3e03f58 | out: lpFindFileData=0x3e03f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x832, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.gif", cAlternateFileName="")) returned 1 [0201.738] wcscmp (_String1="Generic.gif", _String2=".") returned 1 [0201.738] wcscmp (_String1="Generic.gif", _String2="..") returned 1 [0201.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbe) returned 0x3d56ba0 [0201.738] wcscpy (in: _Dest=0x3d56ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0201.738] wcscat (in: _Dest=0x3d56ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0201.738] wcscat (in: _Dest=0x3d56ba0, _Source="Generic.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" [0201.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8 [0201.739] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3e03f58 | out: lpFindFileData=0x3e03f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gradient.png", cAlternateFileName="")) returned 1 [0201.739] wcscmp (_String1="gradient.png", _String2=".") returned 1 [0201.739] wcscmp (_String1="gradient.png", _String2="..") returned 1 [0201.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d57b40 [0201.739] wcscpy (in: _Dest=0x3d57b40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0201.739] wcscat (in: _Dest=0x3d57b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0201.739] wcscat (in: _Dest=0x3d57b40, _Source="gradient.png" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" [0201.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4 [0201.740] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3e03f58 | out: lpFindFileData=0x3e03f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460d0670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Main.gif", cAlternateFileName="")) returned 1 [0201.740] wcscmp (_String1="Main.gif", _String2=".") returned 1 [0201.741] wcscmp (_String1="Main.gif", _String2="..") returned 1 [0201.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb8) returned 0x333fa8 [0201.741] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0201.741] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0201.741] wcscat (in: _Dest=0x333fa8, _Source="Main.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" [0201.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778 [0201.742] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3e03f58 | out: lpFindFileData=0x3e03f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Person.gif", cAlternateFileName="")) returned 1 [0201.742] wcscmp (_String1="Person.gif", _String2=".") returned 1 [0201.742] wcscmp (_String1="Person.gif", _String2="..") returned 1 [0201.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d57820 [0201.742] wcscpy (in: _Dest=0x3d57820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0201.742] wcscat (in: _Dest=0x3d57820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0201.742] wcscat (in: _Dest=0x3d57820, _Source="Person.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" [0201.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d57820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914 [0201.743] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3e03f58 | out: lpFindFileData=0x3e03f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 1 [0201.743] wcscmp (_String1="Response.gif", _String2=".") returned 1 [0201.743] wcscmp (_String1="Response.gif", _String2="..") returned 1 [0201.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d56a10 [0201.743] wcscpy (in: _Dest=0x3d56a10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions" [0201.743] wcscat (in: _Dest=0x3d56a10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\" [0201.743] wcscat (in: _Dest=0x3d56a10, _Source="Response.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" [0201.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4 [0201.744] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x3e03f58 | out: lpFindFileData=0x3e03f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f58700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x460f67d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x63f58700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 0 [0201.744] FindClose (in: hFindFile=0x7ad7eb0 | out: hFindFile=0x7ad7eb0) returned 1 [0201.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03f58) returned 1 [0201.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 [0201.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66140) returned 1 Thread: id = 6078 os_tid = 0xb40 [0187.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css")) returned 0x20 [0189.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", dwFileAttributes=0x20) returned 0 [0189.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.368] GetLastError () returned 0x5 [0191.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", dwFileAttributes=0x20) returned 0 [0191.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6460) returned 1 Thread: id = 6079 os_tid = 0x105c [0187.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css")) returned 0x20 [0190.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", dwFileAttributes=0x20) returned 0 [0190.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.530] GetLastError () returned 0x5 [0190.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", dwFileAttributes=0x20) returned 0 [0190.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 6080 os_tid = 0x118c [0187.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css")) returned 0x20 [0194.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", dwFileAttributes=0x20) returned 0 [0194.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.842] GetLastError () returned 0x5 [0194.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", dwFileAttributes=0x20) returned 0 [0194.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a760) returned 1 Thread: id = 6081 os_tid = 0x1228 [0187.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css")) returned 0x20 [0194.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", dwFileAttributes=0x20) returned 0 [0194.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.843] GetLastError () returned 0x5 [0194.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", dwFileAttributes=0x20) returned 0 [0194.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a5d0) returned 1 Thread: id = 6082 os_tid = 0xe40 [0187.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css")) returned 0x20 [0194.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", dwFileAttributes=0x20) returned 0 [0194.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.845] GetLastError () returned 0x5 [0194.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", dwFileAttributes=0x20) returned 0 [0194.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a698) returned 1 Thread: id = 6083 os_tid = 0x1a5c [0187.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xae) returned 0x2ff7e40 [0187.160] wcscpy (in: _Dest=0x2ff7e40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0187.160] wcscat (in: _Dest=0x2ff7e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0187.160] wcscat (in: _Dest=0x2ff7e40, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*" [0187.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e041c0 [0187.160] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x3e041c0 | out: lpFindFileData=0x3e041c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0194.846] wcscmp (_String1=".", _String2=".") returned 0 [0194.846] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3e041c0 | out: lpFindFileData=0x3e041c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.846] wcscmp (_String1="..", _String2=".") returned 1 [0194.846] wcscmp (_String1="..", _String2="..") returned 0 [0194.846] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3e041c0 | out: lpFindFileData=0x3e041c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0194.846] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0194.846] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0194.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3e3a698 [0194.847] wcscpy (in: _Dest=0x3e3a698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0194.847] wcscat (in: _Dest=0x3e3a698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0194.847] wcscat (in: _Dest=0x3e3a698, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" [0195.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e3a698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c [0195.740] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3e041c0 | out: lpFindFileData=0x3e041c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.740] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.740] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d86a80 [0195.740] wcscpy (in: _Dest=0x3d86a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0195.740] wcscat (in: _Dest=0x3d86a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0195.740] wcscat (in: _Dest=0x3d86a80, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" [0195.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d86a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8 [0195.742] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3e041c0 | out: lpFindFileData=0x3e041c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.742] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.742] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc0) returned 0x3d56628 [0195.742] wcscpy (in: _Dest=0x3d56628, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen" [0195.742] wcscat (in: _Dest=0x3d56628, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\" [0195.742] wcscat (in: _Dest=0x3d56628, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" [0195.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0 [0195.743] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3e041c0 | out: lpFindFileData=0x3e041c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.743] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0195.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e041c0) returned 1 [0195.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7e40) returned 1 [0195.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff63a8) returned 1 Thread: id = 6084 os_tid = 0x1578 [0187.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css")) returned 0x20 [0194.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0194.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.847] GetLastError () returned 0x5 [0194.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0194.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333768) returned 1 Thread: id = 6085 os_tid = 0x12d0 [0187.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css")) returned 0x20 [0193.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0193.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.165] GetLastError () returned 0x5 [0195.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0195.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a668d0) returned 1 Thread: id = 6086 os_tid = 0x12d4 [0187.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa0) returned 0x7a5e7c8 [0187.162] wcscpy (in: _Dest=0x7a5e7c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0187.162] wcscat (in: _Dest=0x7a5e7c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0187.162] wcscat (in: _Dest=0x7a5e7c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*" [0187.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e04428 [0187.162] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x3e04428 | out: lpFindFileData=0x3e04428*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d5c0 [0191.391] wcscmp (_String1=".", _String2=".") returned 0 [0191.391] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3e04428 | out: lpFindFileData=0x3e04428*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.391] wcscmp (_String1="..", _String2=".") returned 1 [0191.391] wcscmp (_String1="..", _String2="..") returned 0 [0191.391] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3e04428 | out: lpFindFileData=0x3e04428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0191.391] wcscmp (_String1="background.gif", _String2=".") returned 1 [0191.391] wcscmp (_String1="background.gif", _String2="..") returned 1 [0191.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xba) returned 0x3d56ba0 [0191.391] wcscpy (in: _Dest=0x3d56ba0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0191.391] wcscat (in: _Dest=0x3d56ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0191.392] wcscat (in: _Dest=0x3d56ba0, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" [0195.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c [0195.683] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3e04428 | out: lpFindFileData=0x3e04428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0195.683] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0195.683] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0195.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x333fa8 [0195.683] wcscpy (in: _Dest=0x333fa8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0195.683] wcscat (in: _Dest=0x333fa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0195.683] wcscat (in: _Dest=0x333fa8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" [0195.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744 [0195.685] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3e04428 | out: lpFindFileData=0x3e04428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0195.685] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0195.685] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0195.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333828 [0195.685] wcscpy (in: _Dest=0x333828, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0195.685] wcscat (in: _Dest=0x333828, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0195.685] wcscat (in: _Dest=0x333828, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" [0195.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748 [0195.686] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3e04428 | out: lpFindFileData=0x3e04428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0195.686] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0195.686] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0195.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x3336a8 [0195.687] wcscpy (in: _Dest=0x3336a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2" [0195.687] wcscat (in: _Dest=0x3336a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\" [0195.687] wcscat (in: _Dest=0x3336a8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" [0195.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3336a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2410 [0195.688] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3e04428 | out: lpFindFileData=0x3e04428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6526b400, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6526b400, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0195.688] FindClose (in: hFindFile=0x7a2d5c0 | out: hFindFile=0x7a2d5c0) returned 1 [0195.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e04428) returned 1 [0195.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e7c8) returned 1 [0195.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f398) returned 1 Thread: id = 6087 os_tid = 0x12d8 [0187.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css")) returned 0x20 [0191.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0192.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.899] GetLastError () returned 0x5 [0192.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0194.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67530) returned 1 Thread: id = 6088 os_tid = 0x12dc [0187.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa2) returned 0x7a67320 [0187.163] wcscpy (in: _Dest=0x7a67320, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0187.163] wcscat (in: _Dest=0x7a67320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0187.163] wcscat (in: _Dest=0x7a67320, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*" [0187.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2958 [0187.163] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0191.390] wcscmp (_String1=".", _String2=".") returned 0 [0191.390] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45febe30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x45febe30, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.390] wcscmp (_String1="..", _String2=".") returned 1 [0191.390] wcscmp (_String1="..", _String2="..") returned 0 [0191.390] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0191.390] wcscmp (_String1="background.gif", _String2=".") returned 1 [0191.390] wcscmp (_String1="background.gif", _String2="..") returned 1 [0191.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xbc) returned 0x3d566f0 [0191.390] wcscpy (in: _Dest=0x3d566f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0191.390] wcscat (in: _Dest=0x3d566f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0191.390] wcscat (in: _Dest=0x3d566f0, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" [0199.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d566f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30 [0199.221] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0199.221] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0199.221] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0199.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x332268 [0199.222] wcscpy (in: _Dest=0x332268, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0199.222] wcscat (in: _Dest=0x332268, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0199.222] wcscat (in: _Dest=0x332268, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" [0199.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c [0199.223] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0199.223] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0199.223] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0199.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb6) returned 0x332f28 [0199.223] wcscpy (in: _Dest=0x332f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0199.223] wcscat (in: _Dest=0x332f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0199.224] wcscat (in: _Dest=0x332f28, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" [0199.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x332f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640 [0199.225] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0199.225] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0199.225] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0199.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb4) returned 0x333d68 [0199.225] wcscpy (in: _Dest=0x333d68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl" [0199.225] wcscat (in: _Dest=0x333d68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\" [0199.225] wcscat (in: _Dest=0x333d68, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" [0199.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x333d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770 [0199.226] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3ef2958 | out: lpFindFileData=0x3ef2958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6657e100, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x45febe30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x6657e100, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0199.226] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0199.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2958) returned 1 [0199.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67320) returned 1 [0199.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e3d8) returned 1 Thread: id = 6089 os_tid = 0x12e4 [0187.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css")) returned 0x20 [0191.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0191.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.875] GetLastError () returned 0x5 [0192.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0192.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67110) returned 1 Thread: id = 6090 os_tid = 0x12f4 [0187.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css")) returned 0x20 [0191.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0191.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.875] GetLastError () returned 0x5 [0192.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0192.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66fb0) returned 1 Thread: id = 6091 os_tid = 0x1798 [0187.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css")) returned 0x20 [0194.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0194.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.849] GetLastError () returned 0x5 [0194.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0194.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333d68) returned 1 Thread: id = 6092 os_tid = 0x1314 [0187.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css")) returned 0x20 [0195.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0195.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.233] GetLastError () returned 0x5 [0195.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0195.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff7880) returned 1 Thread: id = 6093 os_tid = 0x179c [0187.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss")) returned 0x20 [0191.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS", dwFileAttributes=0x20) returned 0 [0191.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.993] GetLastError () returned 0x5 [0197.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS", dwFileAttributes=0x20) returned 0 [0199.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63710) returned 1 Thread: id = 6094 os_tid = 0x1320 [0187.166] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0187.457] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0190.156] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc50 [0190.156] GetFileSizeEx (in: hFile=0xc50, lpFileSize=0xf1ffbbc | out: lpFileSize=0xf1ffbbc*=249) returned 1 [0190.156] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.157] ReadFile (in: hFile=0xc50, lpBuffer=0xf1ffb98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf1ffba8, lpOverlapped=0x0 | out: lpBuffer=0xf1ffb98*, lpNumberOfBytesRead=0xf1ffba8*=0x4, lpOverlapped=0x0) returned 1 [0190.158] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0190.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0190.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0190.159] NtQuerySystemTime (in: CurrentTime=0xf1ffb30 | out: CurrentTime=0xf1ffb30*=132462177687432000) returned 0x0 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x3460a712 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x247eb455 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x7a355626 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x4a332635 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x70c6dc0a [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0xb39f813 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x4e3080b5 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x67aa0db5 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x6f1751c4 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x6a888d5a [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x32f869e9 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x31114d2b [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x32d7fccd [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x9446c7c [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x471e14ff [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x33395e16 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x59803f00 [0190.159] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x6f9dc311 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x4962dfe4 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x4876234d [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x12bd5895 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x2c0a7ee5 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x3f0b8eb9 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x3dfbc8e6 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x7562e9d5 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x3fb220b0 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x43de60e5 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x459c1abf [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x48768d72 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x3b17c9a0 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x355dfc24 [0190.160] RtlRandomEx (in: Seed=0xf1ffb28 | out: Seed=0xf1ffb28) returned 0x8a48d60 [0190.171] ReadFile (in: hFile=0xc50, lpBuffer=0x7bb53c0, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0xf1ffb24, lpOverlapped=0x0 | out: lpBuffer=0x7bb53c0*, lpNumberOfBytesRead=0xf1ffb24*=0xf9, lpOverlapped=0x0) returned 1 [0190.171] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.171] WriteFile (in: hFile=0xc50, lpBuffer=0x7bb8fc8*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0xf1ffb28, lpOverlapped=0x0 | out: lpBuffer=0x7bb8fc8*, lpNumberOfBytesWritten=0xf1ffb28*=0xf9, lpOverlapped=0x0) returned 1 [0195.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0195.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb8fc8) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb53c0) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0195.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25668) returned 1 [0195.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a377a0 [0195.147] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.147] WriteFile (in: hFile=0xc50, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf1ffbb0, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xf1ffbb0*=0x10c, lpOverlapped=0x0) returned 1 [0195.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9b20 [0195.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0195.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0195.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0195.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca918 [0195.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0195.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8a0 [0195.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8a0) returned 1 [0195.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0195.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9b20) returned 1 [0195.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2de40 [0195.449] sprintf (in: _Dest=0x7a2de40, _Format="%c%c" | out: _Dest="18") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de42, _Format="%c%c" | out: _Dest="92") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de44, _Format="%c%c" | out: _Dest="cf") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de46, _Format="%c%c" | out: _Dest="b9") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de48, _Format="%c%c" | out: _Dest="47") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de4a, _Format="%c%c" | out: _Dest="2c") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de4c, _Format="%c%c" | out: _Dest="ba") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de4e, _Format="%c%c" | out: _Dest="44") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de50, _Format="%c%c" | out: _Dest="2f") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de52, _Format="%c%c" | out: _Dest="d2") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de54, _Format="%c%c" | out: _Dest="28") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de56, _Format="%c%c" | out: _Dest="13") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de58, _Format="%c%c" | out: _Dest="28") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de5a, _Format="%c%c" | out: _Dest="17") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de5c, _Format="%c%c" | out: _Dest="5f") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de5e, _Format="%c%c" | out: _Dest="52") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de60, _Format="%c%c" | out: _Dest="05") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de62, _Format="%c%c" | out: _Dest="08") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de64, _Format="%c%c" | out: _Dest="e3") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de66, _Format="%c%c" | out: _Dest="dc") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de68, _Format="%c%c" | out: _Dest="8f") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de6a, _Format="%c%c" | out: _Dest="92") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de6c, _Format="%c%c" | out: _Dest="03") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de6e, _Format="%c%c" | out: _Dest="86") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de70, _Format="%c%c" | out: _Dest="3c") returned 2 [0195.449] sprintf (in: _Dest=0x7a2de72, _Format="%c%c" | out: _Dest="71") returned 2 [0195.450] RtlInitAnsiString (in: DestinationString=0xf1ffb38, SourceString="1892cfb9472cba442fd2281328175f520508e3dc8f9203863c71" | out: DestinationString="1892cfb9472cba442fd2281328175f520508e3dc8f9203863c71") [0195.450] RtlAnsiStringToUnicodeString (in: DestinationString=0xf1ffb30, SourceString="1892cfb9472cba442fd2281328175f520508e3dc8f9203863c71", AllocateDestinationString=1 | out: DestinationString="1892cfb9472cba442fd2281328175f520508e3dc8f9203863c71") returned 0x0 [0195.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f5d8 [0195.450] wcscat (in: _Dest=0x3ec9a60, _Source="1892cfb9472cb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\1892cfb9472cb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\1892cfb9472cb" [0195.450] wcscat (in: _Dest=0x3ec9a60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\1892cfb9472cb.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\1892cfb9472cb.68814f" [0195.450] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\1892cfb9472cb.68814f", NtPathName=0xf1ffb28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\1892cfb9472cb.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ea2eb0 [0195.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0195.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca0248) returned 1 [0195.535] NtQueryInformationFile (in: FileHandle=0xc50, IoStatusBlock=0xf1ffb00, FileInformation=0xf1ffb08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf1ffb00, FileInformation=0xf1ffb08) returned 0x0 [0195.535] NtSetInformationFile (FileHandle=0xc50, IoStatusBlock=0xf1ffb00, FileInformation=0xf1ffb08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 [0196.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0196.014] FlushFileBuffers (hFile=0xc50) returned 1 [0196.018] CloseHandle (hObject=0xc50) returned 1 [0196.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3eca690 [0196.152] wcscpy (in: _Dest=0x3eca690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\" [0196.152] wcscat (in: _Dest=0x3eca690, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\68814F-Readme.txt" [0196.152] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\68814f-readme.txt")) returned 0xffffffff [0196.153] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_TW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_tw\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0196.325] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf1ffb44, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xf1ffb44*=0x8b9, lpOverlapped=0x0) returned 1 [0196.327] CloseHandle (hObject=0x1140) returned 1 [0196.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca690) returned 1 [0196.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83b68) returned 1 Thread: id = 6095 os_tid = 0x132c [0187.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg")) returned 0x20 [0199.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG", dwFileAttributes=0x20) returned 0 [0200.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.406] GetLastError () returned 0x5 [0203.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG", dwFileAttributes=0x20) returned 0 [0204.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62090) returned 1 Thread: id = 6096 os_tid = 0x1330 [0187.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg")) returned 0x20 [0204.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG", dwFileAttributes=0x20) returned 0 [0204.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.444] GetLastError () returned 0x5 [0204.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG", dwFileAttributes=0x20) returned 0 [0204.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63170) returned 1 Thread: id = 6097 os_tid = 0x1334 [0187.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd")) returned 0x20 [0204.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD", dwFileAttributes=0x20) returned 0 [0204.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.451] GetLastError () returned 0x5 [0204.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD", dwFileAttributes=0x20) returned 0 [0204.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 Thread: id = 6098 os_tid = 0x1338 [0187.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd")) returned 0x20 [0204.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD", dwFileAttributes=0x20) returned 0 [0204.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.458] GetLastError () returned 0x5 [0204.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD", dwFileAttributes=0x20) returned 0 [0204.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63490) returned 1 Thread: id = 6099 os_tid = 0x133c [0187.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss")) returned 0x20 [0204.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS", dwFileAttributes=0x20) returned 0 [0204.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.466] GetLastError () returned 0x5 [0204.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS", dwFileAttributes=0x20) returned 0 [0204.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62b30) returned 1 Thread: id = 6100 os_tid = 0x1340 [0187.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss")) returned 0x20 [0204.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS", dwFileAttributes=0x20) returned 0 [0204.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.473] GetLastError () returned 0x5 [0204.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS", dwFileAttributes=0x20) returned 0 [0204.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63350) returned 1 Thread: id = 6101 os_tid = 0x17dc [0187.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss")) returned 0x20 [0204.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS", dwFileAttributes=0x20) returned 0 [0204.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.481] GetLastError () returned 0x5 [0204.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS", dwFileAttributes=0x20) returned 0 [0204.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63670) returned 1 Thread: id = 6102 os_tid = 0x1348 [0187.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst")) returned 0x20 [0204.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST", dwFileAttributes=0x20) returned 0 [0204.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.487] GetLastError () returned 0x5 [0204.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST", dwFileAttributes=0x20) returned 0 [0204.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a635d0) returned 1 Thread: id = 6103 os_tid = 0x135c [0187.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss")) returned 0x20 [0204.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS", dwFileAttributes=0x20) returned 0 [0204.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.493] GetLastError () returned 0x5 [0204.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS", dwFileAttributes=0x20) returned 0 [0204.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62630) returned 1 Thread: id = 6104 os_tid = 0x1360 [0187.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst")) returned 0x20 [0204.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST", dwFileAttributes=0x20) returned 0 [0204.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.500] GetLastError () returned 0x5 [0204.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST", dwFileAttributes=0x20) returned 0 [0204.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63030) returned 1 Thread: id = 6105 os_tid = 0x1364 [0187.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg")) returned 0x20 [0200.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG", dwFileAttributes=0x20) returned 0 [0200.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.568] GetLastError () returned 0x5 [0201.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG", dwFileAttributes=0x20) returned 0 [0201.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62590) returned 1 Thread: id = 6106 os_tid = 0x1368 [0187.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss")) returned 0x20 [0194.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS", dwFileAttributes=0x20) returned 0 [0194.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.857] GetLastError () returned 0x5 [0195.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS", dwFileAttributes=0x20) returned 0 [0195.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63d50) returned 1 Thread: id = 6107 os_tid = 0x136c [0187.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst")) returned 0x20 [0194.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST", dwFileAttributes=0x20) returned 0 [0194.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.856] GetLastError () returned 0x5 [0195.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST", dwFileAttributes=0x20) returned 0 [0195.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62d10) returned 1 Thread: id = 6108 os_tid = 0x17e0 [0187.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss")) returned 0x20 [0194.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS", dwFileAttributes=0x20) returned 0 [0194.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.854] GetLastError () returned 0x5 [0195.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS", dwFileAttributes=0x20) returned 0 [0195.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a632b0) returned 1 Thread: id = 6109 os_tid = 0x1388 [0187.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst")) returned 0x20 [0194.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST", dwFileAttributes=0x20) returned 0 [0194.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.853] GetLastError () returned 0x5 [0195.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST", dwFileAttributes=0x20) returned 0 [0195.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63e90) returned 1 Thread: id = 6110 os_tid = 0x13fc [0187.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss")) returned 0x20 [0204.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS", dwFileAttributes=0x20) returned 0 [0204.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.567] GetLastError () returned 0x5 [0204.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS", dwFileAttributes=0x20) returned 0 [0204.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63f30) returned 1 Thread: id = 6111 os_tid = 0x1404 [0187.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss")) returned 0x20 [0204.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS", dwFileAttributes=0x20) returned 0 [0204.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.573] GetLastError () returned 0x5 [0204.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS", dwFileAttributes=0x20) returned 0 [0204.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a623b0) returned 1 Thread: id = 6112 os_tid = 0x1520 [0187.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss")) returned 0x20 [0195.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS", dwFileAttributes=0x20) returned 0 [0195.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.297] GetLastError () returned 0x5 [0199.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS", dwFileAttributes=0x20) returned 0 [0199.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a628b0) returned 1 Thread: id = 6113 os_tid = 0x1534 [0187.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss")) returned 0x20 [0199.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS", dwFileAttributes=0x20) returned 0 [0200.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.655] GetLastError () returned 0x5 [0202.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS", dwFileAttributes=0x20) returned 0 [0203.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62270) returned 1 Thread: id = 6114 os_tid = 0x157c [0187.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss")) returned 0x20 [0199.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS", dwFileAttributes=0x20) returned 0 [0199.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.215] GetLastError () returned 0x5 [0203.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS", dwFileAttributes=0x20) returned 0 [0203.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df48c0) returned 1 Thread: id = 6115 os_tid = 0x1580 [0187.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss")) returned 0x20 [0189.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS", dwFileAttributes=0x20) returned 0 [0189.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.980] GetLastError () returned 0x5 [0190.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS", dwFileAttributes=0x20) returned 0 [0190.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 Thread: id = 6117 os_tid = 0x1788 [0187.458] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0187.458] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0194.542] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x188c [0194.542] GetFileSizeEx (in: hFile=0x188c, lpFileSize=0x86dfb74 | out: lpFileSize=0x86dfb74*=222) returned 1 [0194.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0194.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0194.543] NtQuerySystemTime (in: CurrentTime=0x86dfae8 | out: CurrentTime=0x86dfae8*=132462177731268000) returned 0x0 [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x43408e50 [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x775b623a [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x24092532 [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0xc5b4423 [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x44675c4d [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x3a9c6d3a [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0xfa85692 [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x75f2750e [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x683c71b8 [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0xad94f1d [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x15e44ed1 [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x792c9afb [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x6c14d2fe [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x2972007 [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x53ea08bb [0194.543] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x2614012 [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x208acdb8 [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x4ab4efc0 [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x30bb8250 [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x484fc1e [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x63ef4cb5 [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x2080ada [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x15f2cb6f [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x4d2fd93c [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x71a050d6 [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x7abd604c [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x46987415 [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x366442bd [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x4d0189d4 [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x21dc572b [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x3e80810 [0194.544] RtlRandomEx (in: Seed=0x86dfae0 | out: Seed=0x86dfae0) returned 0x450f4cab [0194.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0194.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab8cb8 [0194.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7abc8c0 [0194.559] ReadFile (in: hFile=0x188c, lpBuffer=0x7ab8cb8, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0x86dfadc, lpOverlapped=0x0 | out: lpBuffer=0x7ab8cb8*, lpNumberOfBytesRead=0x86dfadc*=0xde, lpOverlapped=0x0) returned 1 [0194.561] SetFilePointerEx (in: hFile=0x188c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.562] WriteFile (in: hFile=0x188c, lpBuffer=0x7abc8c0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x86dfae0, lpOverlapped=0x0 | out: lpBuffer=0x7abc8c0*, lpNumberOfBytesWritten=0x86dfae0*=0xde, lpOverlapped=0x0) returned 1 [0195.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0195.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca030 [0195.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca030) returned 1 [0195.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7abc8c0) returned 1 [0195.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab8cb8) returned 1 [0195.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0195.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82a8) returned 1 [0195.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0195.487] SetFilePointerEx (in: hFile=0x188c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.487] WriteFile (in: hFile=0x188c, lpBuffer=0x7cb69f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x86dfb68, lpOverlapped=0x0 | out: lpBuffer=0x7cb69f8*, lpNumberOfBytesWritten=0x86dfb68*=0x10c, lpOverlapped=0x0) returned 1 [0195.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07848 [0195.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015238 [0195.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0195.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0195.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0195.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0195.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0195.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e70) returned 1 [0195.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0195.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07848) returned 1 [0195.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2dfc0 [0195.984] sprintf (in: _Dest=0x7a2dfc0, _Format="%c%c" | out: _Dest="25") returned 2 [0195.984] sprintf (in: _Dest=0x7a2dfc2, _Format="%c%c" | out: _Dest="1f") returned 2 [0195.984] sprintf (in: _Dest=0x7a2dfc4, _Format="%c%c" | out: _Dest="37") returned 2 [0195.984] sprintf (in: _Dest=0x7a2dfc6, _Format="%c%c" | out: _Dest="97") returned 2 [0195.984] sprintf (in: _Dest=0x7a2dfc8, _Format="%c%c" | out: _Dest="18") returned 2 [0195.984] sprintf (in: _Dest=0x7a2dfca, _Format="%c%c" | out: _Dest="16") returned 2 [0195.984] sprintf (in: _Dest=0x7a2dfcc, _Format="%c%c" | out: _Dest="ca") returned 2 [0195.984] sprintf (in: _Dest=0x7a2dfce, _Format="%c%c" | out: _Dest="50") returned 2 [0195.984] sprintf (in: _Dest=0x7a2dfd0, _Format="%c%c" | out: _Dest="8d") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfd2, _Format="%c%c" | out: _Dest="88") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfd4, _Format="%c%c" | out: _Dest="b5") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfd6, _Format="%c%c" | out: _Dest="57") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfd8, _Format="%c%c" | out: _Dest="cc") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfda, _Format="%c%c" | out: _Dest="9d") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfdc, _Format="%c%c" | out: _Dest="09") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfde, _Format="%c%c" | out: _Dest="63") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfe0, _Format="%c%c" | out: _Dest="15") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfe2, _Format="%c%c" | out: _Dest="57") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfe4, _Format="%c%c" | out: _Dest="83") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfe6, _Format="%c%c" | out: _Dest="c5") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfe8, _Format="%c%c" | out: _Dest="71") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfea, _Format="%c%c" | out: _Dest="b1") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfec, _Format="%c%c" | out: _Dest="65") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dfee, _Format="%c%c" | out: _Dest="a9") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dff0, _Format="%c%c" | out: _Dest="23") returned 2 [0195.985] sprintf (in: _Dest=0x7a2dff2, _Format="%c%c" | out: _Dest="fd") returned 2 [0195.985] RtlInitAnsiString (in: DestinationString=0x86dfaf0, SourceString="251f37971816ca508d88b557cc9d0963155783c571b165a923fd" | out: DestinationString="251f37971816ca508d88b557cc9d0963155783c571b165a923fd") [0195.985] RtlAnsiStringToUnicodeString (in: DestinationString=0x86dfae8, SourceString="251f37971816ca508d88b557cc9d0963155783c571b165a923fd", AllocateDestinationString=1 | out: DestinationString="251f37971816ca508d88b557cc9d0963155783c571b165a923fd") returned 0x0 [0195.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015058 [0195.986] wcscat (in: _Dest=0x7b84320, _Source="251f37971816c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\251f37971816c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\251f37971816c" [0195.986] wcscat (in: _Dest=0x7b84320, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\251f37971816c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\251f37971816c.68814f" [0195.986] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\251f37971816c.68814f", NtPathName=0x86dfae0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\251f37971816c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ea3140 [0196.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3140) returned 1 [0196.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35360) returned 1 [0196.066] NtQueryInformationFile (in: FileHandle=0x188c, IoStatusBlock=0x86dfab8, FileInformation=0x86dfac0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x86dfab8, FileInformation=0x86dfac0) returned 0x0 [0196.066] NtSetInformationFile (FileHandle=0x188c, IoStatusBlock=0x86dfab8, FileInformation=0x86dfac0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84320) returned 1 [0196.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0196.182] FlushFileBuffers (hFile=0x188c) returned 1 [0196.194] CloseHandle (hObject=0x188c) returned 1 [0196.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3eca1b0 [0196.243] wcscpy (in: _Dest=0x3eca1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\" [0196.243] wcscat (in: _Dest=0x3eca1b0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\68814F-Readme.txt" [0196.243] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\68814f-readme.txt")) returned 0xffffffff [0196.243] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_BR\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_br\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc8 [0196.269] WriteFile (in: hFile=0x1bc8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x86dfafc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x86dfafc*=0x8b9, lpOverlapped=0x0) returned 1 [0196.286] CloseHandle (hObject=0x1bc8) returned 1 [0196.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca1b0) returned 1 [0196.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82320) returned 1 Thread: id = 6118 os_tid = 0x178c [0187.459] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json")) returned 0x2020 [0187.459] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0194.562] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1974 [0194.563] GetFileSizeEx (in: hFile=0x1974, lpFileSize=0xa7ff99c | out: lpFileSize=0xa7ff99c*=264) returned 1 [0194.563] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.563] ReadFile (in: hFile=0x1974, lpBuffer=0xa7ff978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa7ff988, lpOverlapped=0x0 | out: lpBuffer=0xa7ff978*, lpNumberOfBytesRead=0xa7ff988*=0x4, lpOverlapped=0x0) returned 1 [0194.565] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0194.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0194.565] NtQuerySystemTime (in: CurrentTime=0xa7ff910 | out: CurrentTime=0xa7ff910*=132462177731424000) returned 0x0 [0194.565] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x48a1fb74 [0194.565] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x85904a2 [0194.565] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0xc285e68 [0194.565] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x21c0eef3 [0194.565] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x4e83b386 [0194.565] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x30640ce [0194.565] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x1700e7ca [0194.565] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x706f697f [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x2d50f1b7 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x2e493c53 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x69f65601 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x33d7e511 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x121ad596 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x2ea645a7 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x2dfa41f8 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x47f9cf75 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0xe943893 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x79c7346b [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x25295c72 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x59de19b1 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x56e47bb9 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x5f56e09b [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x2efe3ce4 [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x28d1fee [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x70f9cf9f [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x262818ca [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x55d7407e [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x12d0d61d [0194.566] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x7add1a0c [0194.567] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x7dfae982 [0194.567] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x3ed2ac [0194.567] RtlRandomEx (in: Seed=0xa7ff908 | out: Seed=0xa7ff908) returned 0x5a71f00a [0194.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0194.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab50b0 [0194.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7acf4e8 [0194.582] ReadFile (in: hFile=0x1974, lpBuffer=0x7ab50b0, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0xa7ff904, lpOverlapped=0x0 | out: lpBuffer=0x7ab50b0*, lpNumberOfBytesRead=0xa7ff904*=0x108, lpOverlapped=0x0) returned 1 [0194.582] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.582] WriteFile (in: hFile=0x1974, lpBuffer=0x7acf4e8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xa7ff908, lpOverlapped=0x0 | out: lpBuffer=0x7acf4e8*, lpNumberOfBytesWritten=0xa7ff908*=0x108, lpOverlapped=0x0) returned 1 [0199.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb648 [0199.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb878 [0199.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb878) returned 1 [0199.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acf4e8) returned 1 [0199.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab50b0) returned 1 [0199.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0199.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9928) returned 1 [0199.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37770 [0199.280] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.280] WriteFile (in: hFile=0x1974, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa7ff990, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xa7ff990*=0x10c, lpOverlapped=0x0) returned 1 [0200.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0200.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0200.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec29f8 [0200.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0200.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0200.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2890) returned 1 [0200.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d600 [0200.137] sprintf (in: _Dest=0x7a2d600, _Format="%c%c" | out: _Dest="b4") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d602, _Format="%c%c" | out: _Dest="39") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d604, _Format="%c%c" | out: _Dest="67") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d606, _Format="%c%c" | out: _Dest="98") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d608, _Format="%c%c" | out: _Dest="13") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d60a, _Format="%c%c" | out: _Dest="34") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d60c, _Format="%c%c" | out: _Dest="e1") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d60e, _Format="%c%c" | out: _Dest="c1") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d610, _Format="%c%c" | out: _Dest="e2") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d612, _Format="%c%c" | out: _Dest="f0") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d614, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d616, _Format="%c%c" | out: _Dest="05") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d618, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d61a, _Format="%c%c" | out: _Dest="42") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d61c, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d61e, _Format="%c%c" | out: _Dest="49") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d620, _Format="%c%c" | out: _Dest="92") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d622, _Format="%c%c" | out: _Dest="15") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d624, _Format="%c%c" | out: _Dest="6f") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d626, _Format="%c%c" | out: _Dest="57") returned 2 [0200.138] sprintf (in: _Dest=0x7a2d628, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.139] sprintf (in: _Dest=0x7a2d62a, _Format="%c%c" | out: _Dest="19") returned 2 [0200.139] sprintf (in: _Dest=0x7a2d62c, _Format="%c%c" | out: _Dest="cf") returned 2 [0200.139] sprintf (in: _Dest=0x7a2d62e, _Format="%c%c" | out: _Dest="13") returned 2 [0200.139] sprintf (in: _Dest=0x7a2d630, _Format="%c%c" | out: _Dest="9d") returned 2 [0200.139] sprintf (in: _Dest=0x7a2d632, _Format="%c%c" | out: _Dest="53") returned 2 [0200.139] RtlInitAnsiString (in: DestinationString=0xa7ff918, SourceString="b43967981334e1c1e2f0ce05a6424a4992156f57dc19cf139d53" | out: DestinationString="b43967981334e1c1e2f0ce05a6424a4992156f57dc19cf139d53") [0200.139] RtlAnsiStringToUnicodeString (in: DestinationString=0xa7ff910, SourceString="b43967981334e1c1e2f0ce05a6424a4992156f57dc19cf139d53", AllocateDestinationString=1 | out: DestinationString="b43967981334e1c1e2f0ce05a6424a4992156f57dc19cf139d53") returned 0x0 [0200.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c888 [0200.139] wcscat (in: _Dest=0x7cbf618, _Source="b43967981334e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\b43967981334e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\b43967981334e" [0200.139] wcscat (in: _Dest=0x7cbf618, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\b43967981334e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\b43967981334e.68814f" [0200.139] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\b43967981334e.68814f", NtPathName=0xa7ff908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\b43967981334e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea33d0 [0200.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea33d0) returned 1 [0200.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cca8c0) returned 1 [0200.629] NtQueryInformationFile (in: FileHandle=0x1974, IoStatusBlock=0xa7ff8e0, FileInformation=0xa7ff8e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa7ff8e0, FileInformation=0xa7ff8e8) returned 0x0 [0200.629] NtSetInformationFile (FileHandle=0x1974, IoStatusBlock=0xa7ff8e0, FileInformation=0xa7ff8e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0200.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf618) returned 1 [0200.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c888) returned 1 [0200.938] FlushFileBuffers (hFile=0x1974) returned 1 [0200.962] CloseHandle (hObject=0x1974) returned 1 [0201.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cd64c0 [0201.237] wcscpy (in: _Dest=0x7cd64c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\" [0201.237] wcscat (in: _Dest=0x7cd64c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\68814F-Readme.txt" [0201.237] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\68814f-readme.txt")) returned 0xffffffff [0201.237] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1914 [0203.167] WriteFile (in: hFile=0x1914, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa7ff924, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa7ff924*=0x8b9, lpOverlapped=0x0) returned 1 [0206.594] CloseHandle (hObject=0x1914) returned 1 [0211.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd64c0) returned 1 [0211.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82448) returned 1 Thread: id = 6119 os_tid = 0x1218 [0187.460] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json")) returned 0x2020 [0187.460] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0194.582] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc68 [0194.583] GetFileSizeEx (in: hFile=0xc68, lpFileSize=0xa72fae4 | out: lpFileSize=0xa72fae4*=210) returned 1 [0194.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0194.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0194.583] NtQuerySystemTime (in: CurrentTime=0xa72fa58 | out: CurrentTime=0xa72fa58*=132462177731580000) returned 0x0 [0194.583] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x4a5b0e85 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x73979e2c [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x498f7147 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x6e5689ec [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x71a2d38b [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x266d39bd [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x3ed9c1e7 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x454d9f39 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x23824067 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x76b8fb71 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x31a11e88 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x61b55e99 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x63177fba [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0xcff73b9 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x7b952fab [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x10a9e119 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x6ffe502c [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x32b89893 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x56c520b8 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x165cc16 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x517d6db7 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x122dbfe9 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x4598fa5f [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x182a94c6 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x5c742ada [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x6e8393a8 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x21a510a7 [0194.584] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x1e81deb9 [0194.585] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x47448cde [0194.585] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x421e402c [0194.585] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x2abda2d [0194.585] RtlRandomEx (in: Seed=0xa72fa50 | out: Seed=0xa72fa50) returned 0x1f3d10c6 [0194.595] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0194.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ac04c8 [0194.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ac40d0 [0194.595] ReadFile (in: hFile=0xc68, lpBuffer=0x7ac04c8, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xa72fa4c, lpOverlapped=0x0 | out: lpBuffer=0x7ac04c8*, lpNumberOfBytesRead=0xa72fa4c*=0xd2, lpOverlapped=0x0) returned 1 [0194.603] SetFilePointerEx (in: hFile=0xc68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.603] WriteFile (in: hFile=0xc68, lpBuffer=0x7ac40d0*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xa72fa50, lpOverlapped=0x0 | out: lpBuffer=0x7ac40d0*, lpNumberOfBytesWritten=0xa72fa50*=0xd2, lpOverlapped=0x0) returned 1 [0199.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb5f8 [0199.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde70 [0199.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edde70) returned 1 [0199.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac40d0) returned 1 [0199.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac04c8) returned 1 [0199.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc98) returned 1 [0199.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8260) returned 1 [0199.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0199.278] SetFilePointerEx (in: hFile=0xc68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.278] WriteFile (in: hFile=0xc68, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa72fad8, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xa72fad8*=0x10c, lpOverlapped=0x0) returned 1 [0200.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8a0 [0200.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8a0) returned 1 [0200.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca8a0 [0200.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0200.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0200.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9928) returned 1 [0200.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d600 [0200.127] sprintf (in: _Dest=0x7a2d600, _Format="%c%c" | out: _Dest="d6") returned 2 [0200.127] sprintf (in: _Dest=0x7a2d602, _Format="%c%c" | out: _Dest="e7") returned 2 [0200.127] sprintf (in: _Dest=0x7a2d604, _Format="%c%c" | out: _Dest="4e") returned 2 [0200.127] sprintf (in: _Dest=0x7a2d606, _Format="%c%c" | out: _Dest="38") returned 2 [0200.127] sprintf (in: _Dest=0x7a2d608, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.127] sprintf (in: _Dest=0x7a2d60a, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.127] sprintf (in: _Dest=0x7a2d60c, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.127] sprintf (in: _Dest=0x7a2d60e, _Format="%c%c" | out: _Dest="84") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d610, _Format="%c%c" | out: _Dest="d1") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d612, _Format="%c%c" | out: _Dest="51") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d614, _Format="%c%c" | out: _Dest="60") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d616, _Format="%c%c" | out: _Dest="fe") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d618, _Format="%c%c" | out: _Dest="41") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d61a, _Format="%c%c" | out: _Dest="17") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d61c, _Format="%c%c" | out: _Dest="f2") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d61e, _Format="%c%c" | out: _Dest="54") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d620, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d622, _Format="%c%c" | out: _Dest="7f") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d624, _Format="%c%c" | out: _Dest="61") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d626, _Format="%c%c" | out: _Dest="6a") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d628, _Format="%c%c" | out: _Dest="08") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d62a, _Format="%c%c" | out: _Dest="ec") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d62c, _Format="%c%c" | out: _Dest="38") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d62e, _Format="%c%c" | out: _Dest="29") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d630, _Format="%c%c" | out: _Dest="e0") returned 2 [0200.128] sprintf (in: _Dest=0x7a2d632, _Format="%c%c" | out: _Dest="57") returned 2 [0200.128] RtlInitAnsiString (in: DestinationString=0xa72fa60, SourceString="d6e74e38e36df184d15160fe4117f254b67f616a08ec3829e057" | out: DestinationString="d6e74e38e36df184d15160fe4117f254b67f616a08ec3829e057") [0200.128] RtlAnsiStringToUnicodeString (in: DestinationString=0xa72fa58, SourceString="d6e74e38e36df184d15160fe4117f254b67f616a08ec3829e057", AllocateDestinationString=1 | out: DestinationString="d6e74e38e36df184d15160fe4117f254b67f616a08ec3829e057") returned 0x0 [0200.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c018 [0200.129] wcscat (in: _Dest=0x3d555f0, _Source="d6e74e38e36df" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\d6e74e38e36df") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\d6e74e38e36df" [0200.129] wcscat (in: _Dest=0x3d555f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\d6e74e38e36df.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\d6e74e38e36df.68814f" [0200.129] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\d6e74e38e36df.68814f", NtPathName=0xa72fa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\d6e74e38e36df.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3288 [0200.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3288) returned 1 [0200.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9e128) returned 1 [0200.620] NtQueryInformationFile (in: FileHandle=0xc68, IoStatusBlock=0xa72fa28, FileInformation=0xa72fa30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa72fa28, FileInformation=0xa72fa30) returned 0x0 [0200.621] NtSetInformationFile (FileHandle=0xc68, IoStatusBlock=0xa72fa28, FileInformation=0xa72fa30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0200.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0200.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c018) returned 1 [0200.917] FlushFileBuffers (hFile=0xc68) returned 1 [0200.936] CloseHandle (hObject=0xc68) returned 1 [0201.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cb04c0 [0201.223] wcscpy (in: _Dest=0x7cb04c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\" [0201.223] wcscat (in: _Dest=0x7cb04c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\68814F-Readme.txt" [0201.223] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\68814f-readme.txt")) returned 0xffffffff [0201.223] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\no\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x119c [0203.166] WriteFile (in: hFile=0x119c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa72fa6c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa72fa6c*=0x8b9, lpOverlapped=0x0) returned 1 [0206.588] CloseHandle (hObject=0x119c) returned 1 [0211.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb04c0) returned 1 [0211.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82570) returned 1 Thread: id = 6120 os_tid = 0x240c [0187.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad6760 [0187.461] wcscpy (in: _Dest=0x7ad6760, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0187.461] wcscat (in: _Dest=0x7ad6760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" [0187.461] wcscat (in: _Dest=0x7ad6760, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*" [0187.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2bc0 [0187.461] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe575c330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5761150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0188.595] wcscmp (_String1=".", _String2=".") returned 0 [0188.596] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe575c330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5761150, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.596] wcscmp (_String1="..", _String2=".") returned 1 [0188.596] wcscmp (_String1="..", _String2="..") returned 0 [0188.596] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5761150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.596] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.596] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caf740 [0188.596] wcscpy (in: _Dest=0x7caf740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" [0188.596] wcscat (in: _Dest=0x7caf740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" [0188.596] wcscat (in: _Dest=0x7caf740, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" [0190.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caf740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4 [0190.231] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5761150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5761150, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.231] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0190.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2bc0) returned 1 [0190.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6760) returned 1 [0190.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86320) returned 1 Thread: id = 6121 os_tid = 0x2410 [0187.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bc448 [0187.462] wcscpy (in: _Dest=0x30bc448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0187.462] wcscat (in: _Dest=0x30bc448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" [0187.462] wcscat (in: _Dest=0x30bc448, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*" [0187.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef48a0 [0187.463] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5765f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe576ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0188.597] wcscmp (_String1=".", _String2=".") returned 0 [0188.597] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5765f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe576ad90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.597] wcscmp (_String1="..", _String2=".") returned 1 [0188.597] wcscmp (_String1="..", _String2="..") returned 0 [0188.597] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe576ad90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.598] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.598] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7caf990 [0188.598] wcscpy (in: _Dest=0x7caf990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" [0188.598] wcscat (in: _Dest=0x7caf990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" [0188.598] wcscat (in: _Dest=0x7caf990, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" [0190.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7caf990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8 [0190.236] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe576ad90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe576ad90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.236] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0190.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a0) returned 1 [0190.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc448) returned 1 [0190.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f7c0) returned 1 Thread: id = 6122 os_tid = 0x2418 [0187.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa020 [0187.463] wcscpy (in: _Dest=0x7caa020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0187.463] wcscat (in: _Dest=0x7caa020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\" [0187.463] wcscat (in: _Dest=0x7caa020, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*" [0187.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4b08 [0187.463] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57749d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57770e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57770e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0188.564] wcscmp (_String1=".", _String2=".") returned 0 [0188.564] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57749d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57770e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57770e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.564] wcscmp (_String1="..", _String2=".") returned 1 [0188.564] wcscmp (_String1="..", _String2="..") returned 0 [0188.564] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57770e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57797f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.564] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.565] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7ca93c8 [0188.565] wcscpy (in: _Dest=0x7ca93c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" [0188.565] wcscat (in: _Dest=0x7ca93c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\" [0188.565] wcscat (in: _Dest=0x7ca93c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" [0199.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca93c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0199.635] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x3ef4b08 | out: lpFindFileData=0x3ef4b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57770e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57797f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.635] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0199.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4b08) returned 1 [0199.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa020) returned 1 [0199.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f8c8) returned 1 Thread: id = 6123 os_tid = 0x241c [0187.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa128 [0187.464] wcscpy (in: _Dest=0x7caa128, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0187.464] wcscat (in: _Dest=0x7caa128, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" [0187.464] wcscat (in: _Dest=0x7caa128, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*" [0187.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6d0b0 [0187.464] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x7a6d0b0 | out: lpFindFileData=0x7a6d0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe577e610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5783430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73470 [0187.603] wcscmp (_String1=".", _String2=".") returned 0 [0187.603] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a6d0b0 | out: lpFindFileData=0x7a6d0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe577e610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5783430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.603] wcscmp (_String1="..", _String2=".") returned 1 [0187.603] wcscmp (_String1="..", _String2="..") returned 0 [0187.603] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a6d0b0 | out: lpFindFileData=0x7a6d0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5783430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.603] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.603] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7ca92a0 [0187.603] wcscpy (in: _Dest=0x7ca92a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" [0187.603] wcscat (in: _Dest=0x7ca92a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" [0187.603] wcscat (in: _Dest=0x7ca92a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" [0188.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca92a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0188.346] FindNextFileW (in: hFindFile=0x3e73470, lpFindFileData=0x7a6d0b0 | out: lpFindFileData=0x7a6d0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5783430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5783430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.347] FindClose (in: hFindFile=0x3e73470 | out: hFindFile=0x3e73470) returned 1 [0188.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d0b0) returned 1 [0188.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa128) returned 1 [0188.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f9d0) returned 1 Thread: id = 6124 os_tid = 0x2420 [0187.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa230 [0187.464] wcscpy (in: _Dest=0x7caa230, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0187.464] wcscat (in: _Dest=0x7caa230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" [0187.464] wcscat (in: _Dest=0x7caa230, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*" [0187.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6d318 [0187.465] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x7a6d318 | out: lpFindFileData=0x7a6d318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5788250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe578d070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0188.604] wcscmp (_String1=".", _String2=".") returned 0 [0188.604] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a6d318 | out: lpFindFileData=0x7a6d318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5788250, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe578d070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.604] wcscmp (_String1="..", _String2=".") returned 1 [0188.604] wcscmp (_String1="..", _String2="..") returned 0 [0188.604] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a6d318 | out: lpFindFileData=0x7a6d318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe578d070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.604] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.605] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb0398 [0188.605] wcscpy (in: _Dest=0x7cb0398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" [0188.605] wcscat (in: _Dest=0x7cb0398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" [0188.605] wcscat (in: _Dest=0x7cb0398, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" [0190.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec [0190.258] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a6d318 | out: lpFindFileData=0x7a6d318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe578d070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe578d070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.258] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0190.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d318) returned 1 [0190.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa230) returned 1 [0190.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b879d0) returned 1 Thread: id = 6125 os_tid = 0x2424 [0187.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa338 [0187.465] wcscpy (in: _Dest=0x7caa338, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0187.465] wcscat (in: _Dest=0x7caa338, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" [0187.465] wcscat (in: _Dest=0x7caa338, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*" [0187.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6d580 [0187.465] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x7a6d580 | out: lpFindFileData=0x7a6d580*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5791e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57993c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d540 [0188.603] wcscmp (_String1=".", _String2=".") returned 0 [0188.603] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a6d580 | out: lpFindFileData=0x7a6d580*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5791e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57993c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.603] wcscmp (_String1="..", _String2=".") returned 1 [0188.604] wcscmp (_String1="..", _String2="..") returned 0 [0188.604] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a6d580 | out: lpFindFileData=0x7a6d580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57993c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.604] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.604] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb0270 [0188.604] wcscpy (in: _Dest=0x7cb0270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" [0188.604] wcscat (in: _Dest=0x7cb0270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" [0188.604] wcscat (in: _Dest=0x7cb0270, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" [0190.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8 [0190.256] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a6d580 | out: lpFindFileData=0x7a6d580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57993c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57993c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.256] FindClose (in: hFindFile=0x7a2d540 | out: hFindFile=0x7a2d540) returned 1 [0190.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d580) returned 1 [0190.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa338) returned 1 [0190.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87ad8) returned 1 Thread: id = 6126 os_tid = 0x242c [0187.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa440 [0187.466] wcscpy (in: _Dest=0x7caa440, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0187.466] wcscat (in: _Dest=0x7caa440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" [0187.466] wcscat (in: _Dest=0x7caa440, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*" [0187.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6d7e8 [0187.466] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x7a6d7e8 | out: lpFindFileData=0x7a6d7e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57a08f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57a5710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d280 [0188.603] wcscmp (_String1=".", _String2=".") returned 0 [0188.603] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a6d7e8 | out: lpFindFileData=0x7a6d7e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57a08f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57a5710, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.603] wcscmp (_String1="..", _String2=".") returned 1 [0188.603] wcscmp (_String1="..", _String2="..") returned 0 [0188.603] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a6d7e8 | out: lpFindFileData=0x7a6d7e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57a5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.603] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.603] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb0148 [0188.603] wcscpy (in: _Dest=0x7cb0148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" [0188.603] wcscat (in: _Dest=0x7cb0148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" [0188.603] wcscat (in: _Dest=0x7cb0148, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" [0190.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac [0190.253] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a6d7e8 | out: lpFindFileData=0x7a6d7e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57a5710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57a5710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.253] FindClose (in: hFindFile=0x7a2d280 | out: hFindFile=0x7a2d280) returned 1 [0190.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d7e8) returned 1 [0190.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa440) returned 1 [0190.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87be0) returned 1 Thread: id = 6127 os_tid = 0x2434 [0187.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa548 [0187.466] wcscpy (in: _Dest=0x7caa548, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0187.466] wcscat (in: _Dest=0x7caa548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" [0187.466] wcscat (in: _Dest=0x7caa548, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*" [0187.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6da50 [0187.467] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x7a6da50 | out: lpFindFileData=0x7a6da50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57aa530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57af350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0188.602] wcscmp (_String1=".", _String2=".") returned 0 [0188.602] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a6da50 | out: lpFindFileData=0x7a6da50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57aa530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57af350, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.602] wcscmp (_String1="..", _String2=".") returned 1 [0188.602] wcscmp (_String1="..", _String2="..") returned 0 [0188.602] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a6da50 | out: lpFindFileData=0x7a6da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57af350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.602] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.602] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb0020 [0188.602] wcscpy (in: _Dest=0x7cb0020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" [0188.602] wcscat (in: _Dest=0x7cb0020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" [0188.602] wcscat (in: _Dest=0x7cb0020, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" [0190.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c [0190.250] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a6da50 | out: lpFindFileData=0x7a6da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57af350, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57af350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.250] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0190.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6da50) returned 1 [0190.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa548) returned 1 [0190.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87ce8) returned 1 Thread: id = 6128 os_tid = 0x2438 [0187.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa650 [0187.467] wcscpy (in: _Dest=0x7caa650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0187.467] wcscat (in: _Dest=0x7caa650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" [0187.467] wcscat (in: _Dest=0x7caa650, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*" [0187.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6dcb8 [0187.467] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x7a6dcb8 | out: lpFindFileData=0x7a6dcb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57b4170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57b8f90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0188.601] wcscmp (_String1=".", _String2=".") returned 0 [0188.601] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a6dcb8 | out: lpFindFileData=0x7a6dcb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57b4170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57b8f90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.601] wcscmp (_String1="..", _String2=".") returned 1 [0188.601] wcscmp (_String1="..", _String2="..") returned 0 [0188.601] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a6dcb8 | out: lpFindFileData=0x7a6dcb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57b8f90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.601] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.601] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cafe30 [0188.601] wcscpy (in: _Dest=0x7cafe30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" [0188.601] wcscat (in: _Dest=0x7cafe30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" [0188.601] wcscat (in: _Dest=0x7cafe30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" [0190.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cafe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8 [0190.247] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a6dcb8 | out: lpFindFileData=0x7a6dcb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57b8f90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57b8f90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.247] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0190.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6dcb8) returned 1 [0190.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa650) returned 1 [0190.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87df0) returned 1 Thread: id = 6129 os_tid = 0x244c [0187.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa758 [0187.468] wcscpy (in: _Dest=0x7caa758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0187.468] wcscat (in: _Dest=0x7caa758, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" [0187.468] wcscat (in: _Dest=0x7caa758, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*" [0187.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6df20 [0187.468] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x7a6df20 | out: lpFindFileData=0x7a6df20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57c04c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57c52e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0188.600] wcscmp (_String1=".", _String2=".") returned 0 [0188.600] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a6df20 | out: lpFindFileData=0x7a6df20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57c04c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57c52e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.600] wcscmp (_String1="..", _String2=".") returned 1 [0188.600] wcscmp (_String1="..", _String2="..") returned 0 [0188.600] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a6df20 | out: lpFindFileData=0x7a6df20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57c52e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.600] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.600] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cafd08 [0188.600] wcscpy (in: _Dest=0x7cafd08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" [0188.600] wcscat (in: _Dest=0x7cafd08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" [0188.600] wcscat (in: _Dest=0x7cafd08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" [0190.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cafd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc [0190.244] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a6df20 | out: lpFindFileData=0x7a6df20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57c52e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57c52e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c765a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.244] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0190.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6df20) returned 1 [0190.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa758) returned 1 [0190.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87ef8) returned 1 Thread: id = 6130 os_tid = 0xb68 [0187.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa860 [0187.468] wcscpy (in: _Dest=0x7caa860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0187.468] wcscat (in: _Dest=0x7caa860, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" [0187.469] wcscat (in: _Dest=0x7caa860, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*" [0187.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6e188 [0187.469] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x7a6e188 | out: lpFindFileData=0x7a6e188*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57cc810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57d1630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0188.599] wcscmp (_String1=".", _String2=".") returned 0 [0188.599] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a6e188 | out: lpFindFileData=0x7a6e188*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57cc810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57d1630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.599] wcscmp (_String1="..", _String2=".") returned 1 [0188.599] wcscmp (_String1="..", _String2="..") returned 0 [0188.599] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a6e188 | out: lpFindFileData=0x7a6e188*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57d1630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.599] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.599] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cafbe0 [0188.599] wcscpy (in: _Dest=0x7cafbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" [0188.600] wcscat (in: _Dest=0x7cafbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" [0188.600] wcscat (in: _Dest=0x7cafbe0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" [0190.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cafbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8 [0190.242] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a6e188 | out: lpFindFileData=0x7a6e188*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57d1630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57d1630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.242] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0190.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e188) returned 1 [0190.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa860) returned 1 [0190.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88000) returned 1 Thread: id = 6131 os_tid = 0xdbc [0187.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa968 [0187.469] wcscpy (in: _Dest=0x7caa968, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" [0187.469] wcscat (in: _Dest=0x7caa968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\" [0187.469] wcscat (in: _Dest=0x7caa968, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*" [0187.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6e3f0 [0187.469] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x7a6e3f0 | out: lpFindFileData=0x7a6e3f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57d8b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57db270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0188.598] wcscmp (_String1=".", _String2=".") returned 0 [0188.598] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a6e3f0 | out: lpFindFileData=0x7a6e3f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57d8b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57db270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.598] wcscmp (_String1="..", _String2=".") returned 1 [0188.598] wcscmp (_String1="..", _String2="..") returned 0 [0188.598] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a6e3f0 | out: lpFindFileData=0x7a6e3f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57db270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0188.598] wcscmp (_String1="messages.json", _String2=".") returned 1 [0188.598] wcscmp (_String1="messages.json", _String2="..") returned 1 [0188.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cafab8 [0188.599] wcscpy (in: _Dest=0x7cafab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" [0188.599] wcscat (in: _Dest=0x7cafab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\" [0188.599] wcscat (in: _Dest=0x7cafab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" [0190.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cafab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac [0190.239] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a6e3f0 | out: lpFindFileData=0x7a6e3f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57db270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57db270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.239] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0190.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e3f0) returned 1 [0190.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa968) returned 1 [0190.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88108) returned 1 Thread: id = 6132 os_tid = 0xdc0 [0187.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk")) returned 0x20 [0187.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0187.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.470] GetLastError () returned 0x5 [0187.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0187.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 6133 os_tid = 0x1050 [0187.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h")) returned 0x20 [0187.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", dwFileAttributes=0x20) returned 0 [0187.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.472] GetLastError () returned 0x5 [0187.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H", dwFileAttributes=0x20) returned 0 [0187.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a698) returned 1 Thread: id = 6134 os_tid = 0x1058 [0187.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini")) returned 0x20 [0187.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", dwFileAttributes=0x20) returned 0 [0187.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.494] GetLastError () returned 0x5 [0187.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI", dwFileAttributes=0x20) returned 0 [0187.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ba8) returned 1 Thread: id = 6135 os_tid = 0x244 [0187.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll")) returned 0x20 [0187.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0187.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.496] GetLastError () returned 0x5 [0187.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0187.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 6136 os_tid = 0x261c [0187.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\owshlp10.chm")) returned 0x20 [0187.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM", dwFileAttributes=0x20) returned 0 [0187.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\owshlp10.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0187.498] GetLastError () returned 0x5 [0187.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM", dwFileAttributes=0x20) returned 0 [0187.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68800) returned 1 Thread: id = 6137 os_tid = 0x2620 [0187.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css")) returned 0x20 [0189.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", dwFileAttributes=0x20) returned 0 [0189.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.850] GetLastError () returned 0x5 [0189.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS", dwFileAttributes=0x20) returned 0 [0189.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68d50) returned 1 Thread: id = 6138 os_tid = 0x1100 [0187.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css")) returned 0x20 [0189.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", dwFileAttributes=0x20) returned 0 [0189.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.852] GetLastError () returned 0x5 [0189.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS", dwFileAttributes=0x20) returned 0 [0189.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 Thread: id = 6139 os_tid = 0x4d0 [0187.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl")) returned 0x20 [0189.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", dwFileAttributes=0x20) returned 0 [0189.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.854] GetLastError () returned 0x5 [0189.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL", dwFileAttributes=0x20) returned 0 [0189.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 Thread: id = 6140 os_tid = 0x1158 [0187.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd")) returned 0x20 [0189.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", dwFileAttributes=0x20) returned 0 [0189.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.458] GetLastError () returned 0x5 [0189.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD", dwFileAttributes=0x20) returned 0 [0189.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68dd8) returned 1 Thread: id = 6141 os_tid = 0x1164 [0187.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs")) returned 0x20 [0189.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", dwFileAttributes=0x20) returned 0 [0189.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.806] GetLastError () returned 0x5 [0189.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS", dwFileAttributes=0x20) returned 0 [0189.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 6142 os_tid = 0x1180 [0187.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc")) returned 0x20 [0189.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.804] GetLastError () returned 0x5 [0189.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 6143 os_tid = 0x1184 [0187.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt")) returned 0x20 [0189.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.801] GetLastError () returned 0x5 [0189.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c5c8) returned 1 Thread: id = 6144 os_tid = 0x1188 [0187.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk")) returned 0x20 [0189.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.799] GetLastError () returned 0x5 [0189.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 6145 os_tid = 0x1190 [0187.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk")) returned 0x20 [0189.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.856] GetLastError () returned 0x5 [0189.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 6146 os_tid = 0x1194 [0187.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs")) returned 0x20 [0189.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", dwFileAttributes=0x20) returned 0 [0189.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.858] GetLastError () returned 0x5 [0189.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS", dwFileAttributes=0x20) returned 0 [0189.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ed8) returned 1 Thread: id = 6147 os_tid = 0x1198 [0187.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc")) returned 0x20 [0189.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.860] GetLastError () returned 0x5 [0189.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC", dwFileAttributes=0x20) returned 0 [0189.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 6148 os_tid = 0x119c [0187.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt")) returned 0x20 [0189.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.862] GetLastError () returned 0x5 [0189.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT", dwFileAttributes=0x20) returned 0 [0189.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 6149 os_tid = 0x11a0 [0187.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk")) returned 0x20 [0189.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.798] GetLastError () returned 0x5 [0189.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 6150 os_tid = 0x11a4 [0187.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk")) returned 0x20 [0189.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.796] GetLastError () returned 0x5 [0189.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0189.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 Thread: id = 6151 os_tid = 0x11a8 [0187.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll")) returned 0x20 [0189.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.794] GetLastError () returned 0x5 [0189.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 6152 os_tid = 0x11ac [0187.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll")) returned 0x20 [0189.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.792] GetLastError () returned 0x5 [0189.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0189.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 Thread: id = 6153 os_tid = 0x11b0 [0187.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css")) returned 0x20 [0189.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", dwFileAttributes=0x20) returned 0 [0189.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.779] GetLastError () returned 0x5 [0189.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS", dwFileAttributes=0x20) returned 0 [0189.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 6154 os_tid = 0x11b4 [0187.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl")) returned 0x20 [0189.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", dwFileAttributes=0x20) returned 0 [0189.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.781] GetLastError () returned 0x5 [0189.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL", dwFileAttributes=0x20) returned 0 [0189.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19098) returned 1 Thread: id = 6155 os_tid = 0x11b8 [0187.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7e638 [0187.648] wcscpy (in: _Dest=0x7b7e638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0187.648] wcscat (in: _Dest=0x7b7e638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" [0187.648] wcscat (in: _Dest=0x7b7e638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*" [0187.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0187.648] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6389e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe638c510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7ff0 [0189.885] wcscmp (_String1=".", _String2=".") returned 0 [0189.885] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6389e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe638c510, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.886] wcscmp (_String1="..", _String2=".") returned 1 [0189.886] wcscmp (_String1="..", _String2="..") returned 0 [0189.886] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe638c510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.886] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.886] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb2020 [0189.886] wcscpy (in: _Dest=0x7cb2020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" [0189.886] wcscat (in: _Dest=0x7cb2020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" [0189.886] wcscat (in: _Dest=0x7cb2020, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" [0190.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c [0190.396] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe638c510, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe638c510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.396] FindClose (in: hFindFile=0x7ad7ff0 | out: hFindFile=0x7ad7ff0) returned 1 [0190.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0190.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e638) returned 1 [0190.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e848) returned 1 Thread: id = 6156 os_tid = 0x11bc [0187.653] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json")) returned 0x2020 [0187.654] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0194.603] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xeb4 [0194.604] GetFileSizeEx (in: hFile=0xeb4, lpFileSize=0xb28ff44 | out: lpFileSize=0xb28ff44*=287) returned 1 [0194.604] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x11b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.604] ReadFile (in: hFile=0xeb4, lpBuffer=0xb28ff20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb28ff30, lpOverlapped=0x0 | out: lpBuffer=0xb28ff20*, lpNumberOfBytesRead=0xb28ff30*=0x4, lpOverlapped=0x0) returned 1 [0194.606] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.606] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0194.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0194.607] NtQuerySystemTime (in: CurrentTime=0xb28feb8 | out: CurrentTime=0xb28feb8*=132462177731892000) returned 0x0 [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x4d0b8732 [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x3940a939 [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x14e917ad [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x67ff5374 [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x49deb400 [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x5cab1a90 [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0xd5122a8 [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x201e5c9c [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x4b6785bb [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x3585e064 [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x871d0af [0194.607] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x47497caf [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x5b5b23c0 [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x3c9638b4 [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x62d4a4e9 [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x18f0529a [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x175e7e00 [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x2ad58cc [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x382e6fdd [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x618024f6 [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x797419b9 [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x3d034739 [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x223d1791 [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x1c5c06cd [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x7d2e181d [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x534280cb [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0xa702bce [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x69bdac5e [0194.608] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x3ddd7cc7 [0194.609] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x17b4578d [0194.609] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0xa36589d [0194.609] RtlRandomEx (in: Seed=0xb28feb0 | out: Seed=0xb28feb0) returned 0x452e48da [0194.624] ReadFile (in: hFile=0xeb4, lpBuffer=0x10d6e0a0, nNumberOfBytesToRead=0x11f, lpNumberOfBytesRead=0xb28feac, lpOverlapped=0x0 | out: lpBuffer=0x10d6e0a0*, lpNumberOfBytesRead=0xb28feac*=0x11f, lpOverlapped=0x0) returned 1 [0194.624] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.624] WriteFile (in: hFile=0xeb4, lpBuffer=0x10d71ca8*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0xb28feb0, lpOverlapped=0x0 | out: lpBuffer=0x10d71ca8*, lpNumberOfBytesWritten=0xb28feb0*=0x11f, lpOverlapped=0x0) returned 1 [0199.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd8f8 [0199.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba80 [0199.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edba80) returned 1 [0199.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d71ca8) returned 1 [0199.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d6e0a0) returned 1 [0199.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0199.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9c40) returned 1 [0199.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a378c0 [0199.283] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.283] WriteFile (in: hFile=0xeb4, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb28ff38, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xb28ff38*=0x10c, lpOverlapped=0x0) returned 1 [0200.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0200.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3650) returned 1 [0200.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3650 [0200.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0200.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0200.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0200.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d600 [0200.144] sprintf (in: _Dest=0x7a2d600, _Format="%c%c" | out: _Dest="be") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d602, _Format="%c%c" | out: _Dest="74") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d604, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d606, _Format="%c%c" | out: _Dest="13") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d608, _Format="%c%c" | out: _Dest="8e") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d60a, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d60c, _Format="%c%c" | out: _Dest="11") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d60e, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d610, _Format="%c%c" | out: _Dest="4c") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d612, _Format="%c%c" | out: _Dest="3b") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d614, _Format="%c%c" | out: _Dest="bf") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d616, _Format="%c%c" | out: _Dest="19") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d618, _Format="%c%c" | out: _Dest="d7") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d61a, _Format="%c%c" | out: _Dest="b0") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d61c, _Format="%c%c" | out: _Dest="db") returned 2 [0200.144] sprintf (in: _Dest=0x7a2d61e, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.145] sprintf (in: _Dest=0x7a2d620, _Format="%c%c" | out: _Dest="de") returned 2 [0200.145] sprintf (in: _Dest=0x7a2d622, _Format="%c%c" | out: _Dest="97") returned 2 [0200.145] sprintf (in: _Dest=0x7a2d624, _Format="%c%c" | out: _Dest="81") returned 2 [0200.145] sprintf (in: _Dest=0x7a2d626, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.145] sprintf (in: _Dest=0x7a2d628, _Format="%c%c" | out: _Dest="fb") returned 2 [0200.145] sprintf (in: _Dest=0x7a2d62a, _Format="%c%c" | out: _Dest="cc") returned 2 [0200.145] sprintf (in: _Dest=0x7a2d62c, _Format="%c%c" | out: _Dest="1c") returned 2 [0200.145] sprintf (in: _Dest=0x7a2d62e, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.145] sprintf (in: _Dest=0x7a2d630, _Format="%c%c" | out: _Dest="0b") returned 2 [0200.145] sprintf (in: _Dest=0x7a2d632, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.145] RtlInitAnsiString (in: DestinationString=0xb28fec0, SourceString="be74c0138ebb11dd4c3bbf19d7b0db5ade9781acfbcc1cb60ba2" | out: DestinationString="be74c0138ebb11dd4c3bbf19d7b0db5ade9781acfbcc1cb60ba2") [0200.145] RtlAnsiStringToUnicodeString (in: DestinationString=0xb28feb8, SourceString="be74c0138ebb11dd4c3bbf19d7b0db5ade9781acfbcc1cb60ba2", AllocateDestinationString=1 | out: DestinationString="be74c0138ebb11dd4c3bbf19d7b0db5ade9781acfbcc1cb60ba2") returned 0x0 [0200.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c900 [0200.145] wcscat (in: _Dest=0x3eca1b0, _Source="be74c0138ebb1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\be74c0138ebb1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\be74c0138ebb1" [0200.145] wcscat (in: _Dest=0x3eca1b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\be74c0138ebb1.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\be74c0138ebb1.68814f" [0200.145] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\be74c0138ebb1.68814f", NtPathName=0xb28feb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\be74c0138ebb1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ea2eb0 [0200.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0200.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccaae8) returned 1 [0200.630] NtQueryInformationFile (in: FileHandle=0xeb4, IoStatusBlock=0xb28fe88, FileInformation=0xb28fe90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb28fe88, FileInformation=0xb28fe90) returned 0x0 [0200.630] NtSetInformationFile (FileHandle=0xeb4, IoStatusBlock=0xb28fe88, FileInformation=0xb28fe90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0200.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca1b0) returned 1 [0200.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c900) returned 1 [0200.955] FlushFileBuffers (hFile=0xeb4) returned 1 [0200.968] CloseHandle (hObject=0xeb4) returned 1 [0201.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddefd0 [0201.239] wcscpy (in: _Dest=0x7ddefd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\" [0201.239] wcscat (in: _Dest=0x7ddefd0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\68814F-Readme.txt" [0201.239] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\68814f-readme.txt")) returned 0xffffffff [0201.239] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x14c4 [0203.167] WriteFile (in: hFile=0x14c4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb28fecc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb28fecc*=0x8b9, lpOverlapped=0x0) returned 1 [0206.592] CloseHandle (hObject=0x14c4) returned 1 [0211.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddefd0) returned 1 [0211.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6cb8) returned 1 Thread: id = 6157 os_tid = 0x11c0 [0187.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cab7d8 [0187.655] wcscpy (in: _Dest=0x7cab7d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0187.655] wcscat (in: _Dest=0x7cab7d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" [0187.655] wcscat (in: _Dest=0x7cab7d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*" [0187.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4d70 [0187.655] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6393a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6398860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad8030 [0189.888] wcscmp (_String1=".", _String2=".") returned 0 [0189.888] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6393a40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6398860, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.888] wcscmp (_String1="..", _String2=".") returned 1 [0189.888] wcscmp (_String1="..", _String2="..") returned 0 [0189.888] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6398860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.888] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.888] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb2270 [0189.888] wcscpy (in: _Dest=0x7cb2270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" [0189.888] wcscat (in: _Dest=0x7cb2270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" [0189.889] wcscat (in: _Dest=0x7cb2270, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" [0190.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24 [0190.401] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6398860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6398860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.402] FindClose (in: hFindFile=0x7ad8030 | out: hFindFile=0x7ad8030) returned 1 [0190.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d70) returned 1 [0190.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab7d8) returned 1 [0190.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad59f8) returned 1 Thread: id = 6158 os_tid = 0x83c [0187.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cab8e0 [0187.656] wcscpy (in: _Dest=0x7cab8e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0187.656] wcscat (in: _Dest=0x7cab8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" [0187.656] wcscat (in: _Dest=0x7cab8e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*" [0187.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6e658 [0187.656] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x7a6e658 | out: lpFindFileData=0x7a6e658*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe639d680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a24a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7fb0 [0189.889] wcscmp (_String1=".", _String2=".") returned 0 [0189.889] FindNextFileW (in: hFindFile=0x7ad7fb0, lpFindFileData=0x7a6e658 | out: lpFindFileData=0x7a6e658*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe639d680, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63a24a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.889] wcscmp (_String1="..", _String2=".") returned 1 [0189.889] wcscmp (_String1="..", _String2="..") returned 0 [0189.889] FindNextFileW (in: hFindFile=0x7ad7fb0, lpFindFileData=0x7a6e658 | out: lpFindFileData=0x7a6e658*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63a24a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.889] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.889] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb2398 [0189.889] wcscpy (in: _Dest=0x7cb2398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" [0189.890] wcscat (in: _Dest=0x7cb2398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" [0189.890] wcscat (in: _Dest=0x7cb2398, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" [0190.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650 [0190.404] FindNextFileW (in: hFindFile=0x7ad7fb0, lpFindFileData=0x7a6e658 | out: lpFindFileData=0x7a6e658*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63a24a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63a24a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65eeab0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.404] FindClose (in: hFindFile=0x7ad7fb0 | out: hFindFile=0x7ad7fb0) returned 1 [0190.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e658) returned 1 [0190.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab8e0) returned 1 [0190.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaa70) returned 1 Thread: id = 6159 os_tid = 0x11c4 [0187.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cab9e8 [0187.656] wcscpy (in: _Dest=0x7cab9e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0187.656] wcscat (in: _Dest=0x7cab9e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" [0187.657] wcscat (in: _Dest=0x7cab9e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*" [0187.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6e8c0 [0187.657] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x7a6e8c0 | out: lpFindFileData=0x7a6e8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63a99d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ae7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b70 [0189.890] wcscmp (_String1=".", _String2=".") returned 0 [0189.890] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a6e8c0 | out: lpFindFileData=0x7a6e8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63a99d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ae7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.890] wcscmp (_String1="..", _String2=".") returned 1 [0189.890] wcscmp (_String1="..", _String2="..") returned 0 [0189.890] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a6e8c0 | out: lpFindFileData=0x7a6e8c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ae7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.890] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.890] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb24c0 [0189.890] wcscpy (in: _Dest=0x7cb24c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" [0189.891] wcscat (in: _Dest=0x7cb24c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" [0189.891] wcscat (in: _Dest=0x7cb24c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" [0190.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb24c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08 [0190.407] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a6e8c0 | out: lpFindFileData=0x7a6e8c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ae7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ae7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x56c2ca00, ftLastWriteTime.dwHighDateTime=0x1d03fd3, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.407] FindClose (in: hFindFile=0x7ad7b70 | out: hFindFile=0x7ad7b70) returned 1 [0190.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e8c0) returned 1 [0190.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab9e8) returned 1 [0190.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caab78) returned 1 Thread: id = 6160 os_tid = 0x11c8 [0187.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cabaf0 [0187.657] wcscpy (in: _Dest=0x7cabaf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0187.657] wcscat (in: _Dest=0x7cabaf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" [0187.657] wcscat (in: _Dest=0x7cabaf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*" [0187.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6eb28 [0187.657] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x7a6eb28 | out: lpFindFileData=0x7a6eb28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63b3610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63b8430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e30 [0189.891] wcscmp (_String1=".", _String2=".") returned 0 [0189.891] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a6eb28 | out: lpFindFileData=0x7a6eb28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63b3610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63b8430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.891] wcscmp (_String1="..", _String2=".") returned 1 [0189.891] wcscmp (_String1="..", _String2="..") returned 0 [0189.891] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a6eb28 | out: lpFindFileData=0x7a6eb28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63b8430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.891] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.891] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb25e8 [0189.892] wcscpy (in: _Dest=0x7cb25e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" [0189.892] wcscat (in: _Dest=0x7cb25e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" [0189.892] wcscat (in: _Dest=0x7cb25e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" [0190.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb25e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8 [0190.410] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x7a6eb28 | out: lpFindFileData=0x7a6eb28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63b8430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63b8430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.410] FindClose (in: hFindFile=0x7ad7e30 | out: hFindFile=0x7ad7e30) returned 1 [0190.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6eb28) returned 1 [0190.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabaf0) returned 1 [0190.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caac80) returned 1 Thread: id = 6161 os_tid = 0x11cc [0187.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cac598 [0187.658] wcscpy (in: _Dest=0x7cac598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0187.658] wcscat (in: _Dest=0x7cac598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" [0187.658] wcscat (in: _Dest=0x7cac598, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*" [0187.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6ed90 [0187.658] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x7a6ed90 | out: lpFindFileData=0x7a6ed90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63bf960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c2070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c2070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad70b0 [0189.892] wcscmp (_String1=".", _String2=".") returned 0 [0189.892] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a6ed90 | out: lpFindFileData=0x7a6ed90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63bf960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c2070, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63c2070, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.892] wcscmp (_String1="..", _String2=".") returned 1 [0189.892] wcscmp (_String1="..", _String2="..") returned 0 [0189.892] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a6ed90 | out: lpFindFileData=0x7a6ed90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63c2070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c4780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.892] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.892] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cb2710 [0189.893] wcscpy (in: _Dest=0x7cb2710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" [0189.893] wcscat (in: _Dest=0x7cb2710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" [0189.893] wcscat (in: _Dest=0x7cb2710, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" [0190.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50 [0190.413] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x7a6ed90 | out: lpFindFileData=0x7a6ed90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63c2070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63c4780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.413] FindClose (in: hFindFile=0x7ad70b0 | out: hFindFile=0x7ad70b0) returned 1 [0190.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ed90) returned 1 [0190.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac598) returned 1 [0190.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caad88) returned 1 Thread: id = 6162 os_tid = 0x11d0 [0187.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cac6b0 [0187.658] wcscpy (in: _Dest=0x7cac6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0187.658] wcscat (in: _Dest=0x7cac6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" [0187.658] wcscat (in: _Dest=0x7cac6b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*" [0187.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6eff8 [0187.658] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x7a6eff8 | out: lpFindFileData=0x7a6eff8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63cbcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ce3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b30 [0189.893] wcscmp (_String1=".", _String2=".") returned 0 [0189.893] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x7a6eff8 | out: lpFindFileData=0x7a6eff8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63cbcb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63ce3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.893] wcscmp (_String1="..", _String2=".") returned 1 [0189.893] wcscmp (_String1="..", _String2="..") returned 0 [0189.894] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x7a6eff8 | out: lpFindFileData=0x7a6eff8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ce3c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.894] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.894] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cb2838 [0189.894] wcscpy (in: _Dest=0x7cb2838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" [0189.894] wcscat (in: _Dest=0x7cb2838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" [0189.894] wcscat (in: _Dest=0x7cb2838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" [0190.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64 [0190.416] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x7a6eff8 | out: lpFindFileData=0x7a6eff8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63ce3c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63ce3c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.416] FindClose (in: hFindFile=0x7ad7b30 | out: hFindFile=0x7ad7b30) returned 1 [0190.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6eff8) returned 1 [0190.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac6b0) returned 1 [0190.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caae90) returned 1 Thread: id = 6163 os_tid = 0x11d4 [0187.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cabbf8 [0187.659] wcscpy (in: _Dest=0x7cabbf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0187.659] wcscat (in: _Dest=0x7cabbf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" [0187.659] wcscat (in: _Dest=0x7cabbf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*" [0187.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6f260 [0187.659] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x7a6f260 | out: lpFindFileData=0x7a6f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63d58f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63d8000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63d8000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7770 [0189.894] wcscmp (_String1=".", _String2=".") returned 0 [0189.895] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x7a6f260 | out: lpFindFileData=0x7a6f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63d58f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63d8000, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63d8000, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.895] wcscmp (_String1="..", _String2=".") returned 1 [0189.895] wcscmp (_String1="..", _String2="..") returned 0 [0189.895] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x7a6f260 | out: lpFindFileData=0x7a6f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63d8000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63da710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.895] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.895] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb2960 [0189.895] wcscpy (in: _Dest=0x7cb2960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" [0189.895] wcscat (in: _Dest=0x7cb2960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" [0189.895] wcscat (in: _Dest=0x7cb2960, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" [0190.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8 [0190.435] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x7a6f260 | out: lpFindFileData=0x7a6f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63d8000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63da710, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.435] FindClose (in: hFindFile=0x7ad7770 | out: hFindFile=0x7ad7770) returned 1 [0190.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f260) returned 1 [0190.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabbf8) returned 1 [0190.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf98) returned 1 Thread: id = 6164 os_tid = 0x11fc [0187.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cabd00 [0187.659] wcscpy (in: _Dest=0x7cabd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0187.659] wcscat (in: _Dest=0x7cabd00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" [0187.660] wcscat (in: _Dest=0x7cabd00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*" [0187.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6f4c8 [0187.660] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x7a6f4c8 | out: lpFindFileData=0x7a6f4c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63df530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e1c40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63e1c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78f0 [0189.896] wcscmp (_String1=".", _String2=".") returned 0 [0189.896] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a6f4c8 | out: lpFindFileData=0x7a6f4c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63df530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e1c40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63e1c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.896] wcscmp (_String1="..", _String2=".") returned 1 [0189.896] wcscmp (_String1="..", _String2="..") returned 0 [0189.896] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a6f4c8 | out: lpFindFileData=0x7a6f4c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63e1c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e4350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.896] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.896] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb2a88 [0189.896] wcscpy (in: _Dest=0x7cb2a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" [0189.896] wcscat (in: _Dest=0x7cb2a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" [0189.896] wcscat (in: _Dest=0x7cb2a88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" [0190.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c [0190.438] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a6f4c8 | out: lpFindFileData=0x7a6f4c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63e1c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63e4350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.438] FindClose (in: hFindFile=0x7ad78f0 | out: hFindFile=0x7ad78f0) returned 1 [0190.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f4c8) returned 1 [0190.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabd00) returned 1 [0190.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab0a0) returned 1 Thread: id = 6165 os_tid = 0x1200 [0187.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cabe08 [0187.660] wcscpy (in: _Dest=0x7cabe08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0187.660] wcscat (in: _Dest=0x7cabe08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" [0187.660] wcscat (in: _Dest=0x7cabe08, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*" [0187.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6f730 [0187.660] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x7a6f730 | out: lpFindFileData=0x7a6f730*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63e9170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63edf90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7a30 [0189.897] wcscmp (_String1=".", _String2=".") returned 0 [0189.897] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x7a6f730 | out: lpFindFileData=0x7a6f730*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63e9170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63edf90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.897] wcscmp (_String1="..", _String2=".") returned 1 [0189.897] wcscmp (_String1="..", _String2="..") returned 0 [0189.897] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x7a6f730 | out: lpFindFileData=0x7a6f730*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63edf90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.897] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.897] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb2bb0 [0189.897] wcscpy (in: _Dest=0x7cb2bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" [0189.897] wcscat (in: _Dest=0x7cb2bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" [0189.897] wcscat (in: _Dest=0x7cb2bb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" [0190.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10 [0190.441] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x7a6f730 | out: lpFindFileData=0x7a6f730*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63edf90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63edf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.441] FindClose (in: hFindFile=0x7ad7a30 | out: hFindFile=0x7ad7a30) returned 1 [0190.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f730) returned 1 [0190.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabe08) returned 1 [0190.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab1a8) returned 1 Thread: id = 6166 os_tid = 0xb70 [0187.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec638 [0187.661] wcscpy (in: _Dest=0x3eec638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0187.661] wcscat (in: _Dest=0x3eec638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" [0187.661] wcscat (in: _Dest=0x3eec638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*" [0187.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6f998 [0187.661] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x7a6f998 | out: lpFindFileData=0x7a6f998*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63f54c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63f7bd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7f70 [0189.898] wcscmp (_String1=".", _String2=".") returned 0 [0189.898] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x7a6f998 | out: lpFindFileData=0x7a6f998*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63f54c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe63f7bd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.898] wcscmp (_String1="..", _String2=".") returned 1 [0189.898] wcscmp (_String1="..", _String2="..") returned 0 [0189.898] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x7a6f998 | out: lpFindFileData=0x7a6f998*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63f7bd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.898] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.898] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb2cd8 [0189.898] wcscpy (in: _Dest=0x7cb2cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" [0189.898] wcscat (in: _Dest=0x7cb2cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" [0189.898] wcscat (in: _Dest=0x7cb2cd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" [0190.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04 [0190.444] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x7a6f998 | out: lpFindFileData=0x7a6f998*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe63f7bd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe63f7bd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.444] FindClose (in: hFindFile=0x7ad7f70 | out: hFindFile=0x7ad7f70) returned 1 [0190.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f998) returned 1 [0190.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec638) returned 1 [0190.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab2b0) returned 1 Thread: id = 6167 os_tid = 0xb60 [0187.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec530 [0187.661] wcscpy (in: _Dest=0x3eec530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0187.662] wcscat (in: _Dest=0x3eec530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" [0187.662] wcscat (in: _Dest=0x3eec530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*" [0187.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6fc00 [0187.662] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x7a6fc00 | out: lpFindFileData=0x7a6fc00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63ff100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6403f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7ef0 [0189.899] wcscmp (_String1=".", _String2=".") returned 0 [0189.899] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x7a6fc00 | out: lpFindFileData=0x7a6fc00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe63ff100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6403f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.899] wcscmp (_String1="..", _String2=".") returned 1 [0189.899] wcscmp (_String1="..", _String2="..") returned 0 [0189.899] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x7a6fc00 | out: lpFindFileData=0x7a6fc00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6403f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.899] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.899] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb2e00 [0189.899] wcscpy (in: _Dest=0x7cb2e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" [0189.899] wcscat (in: _Dest=0x7cb2e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" [0189.899] wcscat (in: _Dest=0x7cb2e00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" [0190.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0 [0190.447] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x7a6fc00 | out: lpFindFileData=0x7a6fc00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6403f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6403f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.447] FindClose (in: hFindFile=0x7ad7ef0 | out: hFindFile=0x7ad7ef0) returned 1 [0190.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6fc00) returned 1 [0190.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec530) returned 1 [0190.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab3b8) returned 1 Thread: id = 6168 os_tid = 0xb5c [0187.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x2f93d0 [0187.662] wcscpy (in: _Dest=0x2f93d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0187.662] wcscat (in: _Dest=0x2f93d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" [0187.662] wcscat (in: _Dest=0x2f93d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*" [0187.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6fe68 [0187.662] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x7a6fe68 | out: lpFindFileData=0x7a6fe68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe640b450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe640db60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7eb0 [0189.900] wcscmp (_String1=".", _String2=".") returned 0 [0189.900] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x7a6fe68 | out: lpFindFileData=0x7a6fe68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe640b450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe640db60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.900] wcscmp (_String1="..", _String2=".") returned 1 [0189.900] wcscmp (_String1="..", _String2="..") returned 0 [0189.900] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x7a6fe68 | out: lpFindFileData=0x7a6fe68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe640db60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.900] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.900] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb2f28 [0189.900] wcscpy (in: _Dest=0x7cb2f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" [0189.900] wcscat (in: _Dest=0x7cb2f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" [0189.900] wcscat (in: _Dest=0x7cb2f28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" [0190.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb2f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc [0190.458] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x7a6fe68 | out: lpFindFileData=0x7a6fe68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe640db60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe640db60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f11c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.459] FindClose (in: hFindFile=0x7ad7eb0 | out: hFindFile=0x7ad7eb0) returned 1 [0190.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6fe68) returned 1 [0190.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2f93d0) returned 1 [0190.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab4c0) returned 1 Thread: id = 6169 os_tid = 0x4bc [0187.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b320 [0187.663] wcscpy (in: _Dest=0x7a6b320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0187.663] wcscat (in: _Dest=0x7a6b320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" [0187.663] wcscat (in: _Dest=0x7a6b320, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*" [0187.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a700d0 [0187.663] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x7a700d0 | out: lpFindFileData=0x7a700d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6412980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64177a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d7c0 [0189.471] wcscmp (_String1=".", _String2=".") returned 0 [0189.471] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a700d0 | out: lpFindFileData=0x7a700d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6412980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64177a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.472] wcscmp (_String1="..", _String2=".") returned 1 [0189.472] wcscmp (_String1="..", _String2="..") returned 0 [0189.472] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a700d0 | out: lpFindFileData=0x7a700d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64177a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.472] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.472] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb05e8 [0189.472] wcscpy (in: _Dest=0x7cb05e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" [0189.472] wcscat (in: _Dest=0x7cb05e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" [0189.472] wcscat (in: _Dest=0x7cb05e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" [0190.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb05e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8 [0190.263] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a700d0 | out: lpFindFileData=0x7a700d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64177a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64177a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0190.263] FindClose (in: hFindFile=0x7a2d7c0 | out: hFindFile=0x7a2d7c0) returned 1 [0190.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a700d0) returned 1 [0190.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b320) returned 1 [0190.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab5c8) returned 1 Thread: id = 6170 os_tid = 0xac4 [0187.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad6658 [0187.663] wcscpy (in: _Dest=0x7ad6658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0187.663] wcscat (in: _Dest=0x7ad6658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" [0187.664] wcscat (in: _Dest=0x7ad6658, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*" [0187.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a70338 [0187.664] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x7a70338 | out: lpFindFileData=0x7a70338*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe641ecd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64213e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0189.863] wcscmp (_String1=".", _String2=".") returned 0 [0189.863] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a70338 | out: lpFindFileData=0x7a70338*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe641ecd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64213e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.863] wcscmp (_String1="..", _String2=".") returned 1 [0189.863] wcscmp (_String1="..", _String2="..") returned 0 [0189.863] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a70338 | out: lpFindFileData=0x7a70338*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64213e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.863] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.863] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83db8 [0189.864] wcscpy (in: _Dest=0x7b83db8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" [0189.864] wcscat (in: _Dest=0x7b83db8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" [0189.864] wcscat (in: _Dest=0x7b83db8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" [0195.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0195.289] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x7a70338 | out: lpFindFileData=0x7a70338*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64213e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64213e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.289] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0195.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a70338) returned 1 [0195.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6658) returned 1 [0195.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab6d0) returned 1 Thread: id = 6171 os_tid = 0xa9c [0187.664] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0189.114] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0194.653] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1734 [0194.654] GetFileSizeEx (in: hFile=0x1734, lpFileSize=0xa29fac4 | out: lpFileSize=0xa29fac4*=258) returned 1 [0194.654] SetFilePointerEx (in: hFile=0x1734, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.654] ReadFile (in: hFile=0x1734, lpBuffer=0xa29faa0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa29fab0, lpOverlapped=0x0 | out: lpBuffer=0xa29faa0*, lpNumberOfBytesRead=0xa29fab0*=0x4, lpOverlapped=0x0) returned 1 [0194.656] SetFilePointerEx (in: hFile=0x1734, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0194.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f88 [0194.656] NtQuerySystemTime (in: CurrentTime=0xa29fa38 | out: CurrentTime=0xa29fa38*=132462177732360000) returned 0x0 [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x6aadad9b [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x5e86e5b3 [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x482dc4b8 [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x2c2ea186 [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x204d33a3 [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x2b78cff4 [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x2b71412e [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x1cdc665c [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x3c6abdbd [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0xd77881 [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x7833d188 [0194.656] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x7fc9cace [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x681de1e5 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x69e282a1 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x2159b275 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x4e7353a [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x520102e5 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x27be41af [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0xb996cf7 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x38c7834b [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x14dd3b81 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x6f84c4d7 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x6ba35b56 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x515fbf45 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x3a1cfb35 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x377f7fe7 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x61c2060f [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x3f0c75ed [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x4abf6404 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x2b9c5799 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x5a058957 [0194.657] RtlRandomEx (in: Seed=0xa29fa30 | out: Seed=0xa29fa30) returned 0x5c822f77 [0194.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0194.679] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d758b0 [0194.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d794b8 [0194.680] ReadFile (in: hFile=0x1734, lpBuffer=0x10d758b0, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0xa29fa2c, lpOverlapped=0x0 | out: lpBuffer=0x10d758b0*, lpNumberOfBytesRead=0xa29fa2c*=0x102, lpOverlapped=0x0) returned 1 [0194.680] SetFilePointerEx (in: hFile=0x1734, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.680] WriteFile (in: hFile=0x1734, lpBuffer=0x10d794b8*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xa29fa30, lpOverlapped=0x0 | out: lpBuffer=0x10d794b8*, lpNumberOfBytesWritten=0xa29fa30*=0x102, lpOverlapped=0x0) returned 1 [0195.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0195.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0195.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2980) returned 1 [0195.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d794b8) returned 1 [0195.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d758b0) returned 1 [0195.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0195.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55cb8) returned 1 [0195.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37770 [0195.506] SetFilePointerEx (in: hFile=0x1734, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.506] WriteFile (in: hFile=0x1734, lpBuffer=0x7cadec0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa29fab8, lpOverlapped=0x0 | out: lpBuffer=0x7cadec0*, lpNumberOfBytesWritten=0xa29fab8*=0x10c, lpOverlapped=0x0) returned 1 [0196.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07848 [0196.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015238 [0196.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0196.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec35b0 [0196.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0196.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0196.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07848) returned 1 [0196.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2dfc0 [0196.006] sprintf (in: _Dest=0x7a2dfc0, _Format="%c%c" | out: _Dest="00") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfc2, _Format="%c%c" | out: _Dest="66") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfc4, _Format="%c%c" | out: _Dest="68") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfc6, _Format="%c%c" | out: _Dest="a4") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfc8, _Format="%c%c" | out: _Dest="1f") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfca, _Format="%c%c" | out: _Dest="52") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfcc, _Format="%c%c" | out: _Dest="a2") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfce, _Format="%c%c" | out: _Dest="8e") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfd0, _Format="%c%c" | out: _Dest="93") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfd2, _Format="%c%c" | out: _Dest="60") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfd4, _Format="%c%c" | out: _Dest="1b") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfd6, _Format="%c%c" | out: _Dest="8d") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfd8, _Format="%c%c" | out: _Dest="92") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfda, _Format="%c%c" | out: _Dest="0a") returned 2 [0196.007] sprintf (in: _Dest=0x7a2dfdc, _Format="%c%c" | out: _Dest="d9") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dfde, _Format="%c%c" | out: _Dest="94") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dfe0, _Format="%c%c" | out: _Dest="03") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dfe2, _Format="%c%c" | out: _Dest="ad") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dfe4, _Format="%c%c" | out: _Dest="d8") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dfe6, _Format="%c%c" | out: _Dest="22") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dfe8, _Format="%c%c" | out: _Dest="bb") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dfea, _Format="%c%c" | out: _Dest="5d") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dfec, _Format="%c%c" | out: _Dest="93") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dfee, _Format="%c%c" | out: _Dest="ef") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dff0, _Format="%c%c" | out: _Dest="b2") returned 2 [0196.008] sprintf (in: _Dest=0x7a2dff2, _Format="%c%c" | out: _Dest="c2") returned 2 [0196.008] RtlInitAnsiString (in: DestinationString=0xa29fa40, SourceString="006668a41f52a28e93601b8d920ad99403add822bb5d93efb2c2" | out: DestinationString="006668a41f52a28e93601b8d920ad99403add822bb5d93efb2c2") [0196.008] RtlAnsiStringToUnicodeString (in: DestinationString=0xa29fa38, SourceString="006668a41f52a28e93601b8d920ad99403add822bb5d93efb2c2", AllocateDestinationString=1 | out: DestinationString="006668a41f52a28e93601b8d920ad99403add822bb5d93efb2c2") returned 0x0 [0196.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015418 [0196.009] wcscat (in: _Dest=0x7b846c8, _Source="006668a41f52a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\006668a41f52a") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\006668a41f52a" [0196.009] wcscat (in: _Dest=0x7b846c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\006668a41f52a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\006668a41f52a.68814f" [0196.009] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\006668a41f52a.68814f", NtPathName=0xa29fa30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\006668a41f52a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ea3288 [0196.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3288) returned 1 [0196.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f36b18) returned 1 [0196.141] NtQueryInformationFile (in: FileHandle=0x1734, IoStatusBlock=0xa29fa08, FileInformation=0xa29fa10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa29fa08, FileInformation=0xa29fa10) returned 0x0 [0196.141] NtSetInformationFile (FileHandle=0x1734, IoStatusBlock=0xa29fa08, FileInformation=0xa29fa10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b846c8) returned 1 [0196.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0196.198] FlushFileBuffers (hFile=0x1734) returned 1 [0196.204] CloseHandle (hObject=0x1734) returned 1 [0196.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x3ec9a60 [0196.248] wcscpy (in: _Dest=0x3ec9a60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\" [0196.248] wcscat (in: _Dest=0x3ec9a60, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\68814F-Readme.txt" [0196.248] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\68814f-readme.txt")) returned 0xffffffff [0196.249] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_CN\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\zh_cn\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1794 [0196.270] WriteFile (in: hFile=0x1794, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa29fa4c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa29fa4c*=0x8b9, lpOverlapped=0x0) returned 1 [0196.363] CloseHandle (hObject=0x1794) returned 1 [0196.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 [0196.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83918) returned 1 Thread: id = 6172 os_tid = 0xa5c [0187.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json")) returned 0x2020 [0187.665] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", dwFileAttributes=0x20) returned 1 [0194.625] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x189c [0194.626] GetFileSizeEx (in: hFile=0x189c, lpFileSize=0xcaefb34 | out: lpFileSize=0xcaefb34*=132) returned 1 [0194.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0194.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0194.626] NtQuerySystemTime (in: CurrentTime=0xcaefaa8 | out: CurrentTime=0xcaefaa8*=132462177732048000) returned 0x0 [0194.626] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x54995de1 [0194.626] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x3eb905f1 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x68d059a0 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x245b948e [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x2deb4ec0 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x38c8815f [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x3499c940 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x7cd53b6b [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x718f8dc2 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x3cf998a2 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x198b6292 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x5cab033d [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x298bbe97 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x4f5a7ae9 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x5dad3cc8 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x59df7ca2 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x2e2decb5 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x7fa2cb54 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x32c24da8 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0xe12d063 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x2be5319e [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x50b5a281 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x5213c107 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x7ed8a958 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x2552f172 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x622b899e [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x2d562b73 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x59ecfd92 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x721f9984 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x4c51f074 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x533a92a6 [0194.627] RtlRandomEx (in: Seed=0xcaefaa0 | out: Seed=0xcaefaa0) returned 0x3433117c [0194.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0194.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d66890 [0194.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d6a498 [0194.636] ReadFile (in: hFile=0x189c, lpBuffer=0x10d66890, nNumberOfBytesToRead=0x84, lpNumberOfBytesRead=0xcaefa9c, lpOverlapped=0x0 | out: lpBuffer=0x10d66890*, lpNumberOfBytesRead=0xcaefa9c*=0x84, lpOverlapped=0x0) returned 1 [0194.639] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.639] WriteFile (in: hFile=0x189c, lpBuffer=0x10d6a498*, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0xcaefaa0, lpOverlapped=0x0 | out: lpBuffer=0x10d6a498*, lpNumberOfBytesWritten=0xcaefaa0*=0x84, lpOverlapped=0x0) returned 1 [0195.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a60 [0195.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a38 [0195.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a38) returned 1 [0195.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d6a498) returned 1 [0195.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d66890) returned 1 [0195.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0195.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9bf8) returned 1 [0195.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0195.501] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.501] WriteFile (in: hFile=0x189c, lpBuffer=0x7cac7c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcaefb28, lpOverlapped=0x0 | out: lpBuffer=0x7cac7c8*, lpNumberOfBytesWritten=0xcaefb28*=0x10c, lpOverlapped=0x0) returned 1 [0195.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07848 [0195.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015238 [0195.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0195.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e20) returned 1 [0195.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3e20 [0195.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3df8 [0195.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0195.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0195.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0195.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07848) returned 1 [0195.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2dfc0 [0195.994] sprintf (in: _Dest=0x7a2dfc0, _Format="%c%c" | out: _Dest="1a") returned 2 [0195.994] sprintf (in: _Dest=0x7a2dfc2, _Format="%c%c" | out: _Dest="08") returned 2 [0195.994] sprintf (in: _Dest=0x7a2dfc4, _Format="%c%c" | out: _Dest="25") returned 2 [0195.994] sprintf (in: _Dest=0x7a2dfc6, _Format="%c%c" | out: _Dest="b8") returned 2 [0195.994] sprintf (in: _Dest=0x7a2dfc8, _Format="%c%c" | out: _Dest="c3") returned 2 [0195.994] sprintf (in: _Dest=0x7a2dfca, _Format="%c%c" | out: _Dest="43") returned 2 [0195.994] sprintf (in: _Dest=0x7a2dfcc, _Format="%c%c" | out: _Dest="7d") returned 2 [0195.994] sprintf (in: _Dest=0x7a2dfce, _Format="%c%c" | out: _Dest="85") returned 2 [0195.994] sprintf (in: _Dest=0x7a2dfd0, _Format="%c%c" | out: _Dest="9e") returned 2 [0195.994] sprintf (in: _Dest=0x7a2dfd2, _Format="%c%c" | out: _Dest="b1") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfd4, _Format="%c%c" | out: _Dest="fc") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfd6, _Format="%c%c" | out: _Dest="15") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfd8, _Format="%c%c" | out: _Dest="03") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfda, _Format="%c%c" | out: _Dest="4e") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfdc, _Format="%c%c" | out: _Dest="28") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfde, _Format="%c%c" | out: _Dest="b4") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfe0, _Format="%c%c" | out: _Dest="a0") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfe2, _Format="%c%c" | out: _Dest="32") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfe4, _Format="%c%c" | out: _Dest="ff") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfe6, _Format="%c%c" | out: _Dest="d5") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfe8, _Format="%c%c" | out: _Dest="5b") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfea, _Format="%c%c" | out: _Dest="ca") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfec, _Format="%c%c" | out: _Dest="6c") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dfee, _Format="%c%c" | out: _Dest="d2") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dff0, _Format="%c%c" | out: _Dest="24") returned 2 [0195.995] sprintf (in: _Dest=0x7a2dff2, _Format="%c%c" | out: _Dest="a5") returned 2 [0195.995] RtlInitAnsiString (in: DestinationString=0xcaefab0, SourceString="1a0825b8c3437d859eb1fc15034e28b4a032ffd55bca6cd224a5" | out: DestinationString="1a0825b8c3437d859eb1fc15034e28b4a032ffd55bca6cd224a5") [0195.995] RtlAnsiStringToUnicodeString (in: DestinationString=0xcaefaa8, SourceString="1a0825b8c3437d859eb1fc15034e28b4a032ffd55bca6cd224a5", AllocateDestinationString=1 | out: DestinationString="1a0825b8c3437d859eb1fc15034e28b4a032ffd55bca6cd224a5") returned 0x0 [0195.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x30151c0 [0195.996] wcscat (in: _Dest=0x7b84458, _Source="1a0825b8c3437" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\1a0825b8c3437") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\1a0825b8c3437" [0195.996] wcscat (in: _Dest=0x7b84458, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\1a0825b8c3437.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\1a0825b8c3437.68814f" [0195.996] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\1a0825b8c3437.68814f", NtPathName=0xcaefaa0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\1a0825b8c3437.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0195.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3660 [0196.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3660) returned 1 [0196.135] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a778) returned 1 [0196.135] NtQueryInformationFile (in: FileHandle=0x189c, IoStatusBlock=0xcaefa78, FileInformation=0xcaefa80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcaefa78, FileInformation=0xcaefa80) returned 0x0 [0196.135] NtSetInformationFile (FileHandle=0x189c, IoStatusBlock=0xcaefa78, FileInformation=0xcaefa80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84458) returned 1 [0196.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0196.186] FlushFileBuffers (hFile=0x189c) returned 1 [0196.196] CloseHandle (hObject=0x189c) returned 1 [0196.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d555f0 [0196.245] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\" [0196.245] wcscat (in: _Dest=0x3d555f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\68814F-Readme.txt" [0196.245] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\68814f-readme.txt")) returned 0xffffffff [0196.245] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d28 [0196.269] WriteFile (in: hFile=0x1d28, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcaefabc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcaefabc*=0x8b9, lpOverlapped=0x0) returned 1 [0196.289] CloseHandle (hObject=0x1d28) returned 1 [0196.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0196.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83a40) returned 1 Thread: id = 6173 os_tid = 0x1204 [0187.666] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json")) returned 0x2020 [0187.666] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", dwFileAttributes=0x20) returned 1 [0194.639] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15f8 [0194.640] GetFileSizeEx (in: hFile=0x15f8, lpFileSize=0xbcaf7d4 | out: lpFileSize=0xbcaf7d4*=259) returned 1 [0194.640] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.640] ReadFile (in: hFile=0x15f8, lpBuffer=0xbcaf7b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbcaf7c0, lpOverlapped=0x0 | out: lpBuffer=0xbcaf7b0*, lpNumberOfBytesRead=0xbcaf7c0*=0x4, lpOverlapped=0x0) returned 1 [0194.641] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0194.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0194.642] NtQuerySystemTime (in: CurrentTime=0xbcaf748 | out: CurrentTime=0xbcaf748*=132462177732204000) returned 0x0 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x58f5b88b [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x5468c504 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x441ceb46 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0xf40f209 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x52eb7c5d [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x7ddbd4b6 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x43cde735 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x2e96b1c0 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x3cfbd36 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x213f58f4 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0xd3765e6 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x610051a7 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x6d6efb1f [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x142c9920 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x69559d93 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x5551d7d6 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x27b17385 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x6765a9df [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x4b115c3f [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x427138bd [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x15307e35 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x5b82c5ee [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x77b6ca59 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x540a0270 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x745546ef [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x2dc07600 [0194.642] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x6d9a6365 [0194.643] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x7fd4fc62 [0194.643] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x7994056b [0194.643] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0xeded161 [0194.643] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x36734457 [0194.643] RtlRandomEx (in: Seed=0xbcaf740 | out: Seed=0xbcaf740) returned 0x3b64b1f7 [0194.651] ReadFile (in: hFile=0x15f8, lpBuffer=0x10d5f080, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0xbcaf73c, lpOverlapped=0x0 | out: lpBuffer=0x10d5f080*, lpNumberOfBytesRead=0xbcaf73c*=0x103, lpOverlapped=0x0) returned 1 [0194.651] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.652] WriteFile (in: hFile=0x15f8, lpBuffer=0x10d62c88*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xbcaf740, lpOverlapped=0x0 | out: lpBuffer=0x10d62c88*, lpNumberOfBytesWritten=0xbcaf740*=0x103, lpOverlapped=0x0) returned 1 [0195.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4078 [0195.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0195.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f98) returned 1 [0195.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d62c88) returned 1 [0195.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d5f080) returned 1 [0195.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0195.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9bb0) returned 1 [0195.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0195.503] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.503] WriteFile (in: hFile=0x15f8, lpBuffer=0x7cadc90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbcaf7c8, lpOverlapped=0x0 | out: lpBuffer=0x7cadc90*, lpNumberOfBytesWritten=0xbcaf7c8*=0x10c, lpOverlapped=0x0) returned 1 [0195.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e07848 [0195.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015238 [0195.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40c8 [0195.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40c8) returned 1 [0195.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec40c8 [0195.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0195.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0195.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0196.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0196.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07848) returned 1 [0196.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2dfc0 [0196.000] sprintf (in: _Dest=0x7a2dfc0, _Format="%c%c" | out: _Dest="71") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfc2, _Format="%c%c" | out: _Dest="f1") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfc4, _Format="%c%c" | out: _Dest="2c") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfc6, _Format="%c%c" | out: _Dest="37") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfc8, _Format="%c%c" | out: _Dest="dd") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfca, _Format="%c%c" | out: _Dest="00") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfcc, _Format="%c%c" | out: _Dest="2e") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfce, _Format="%c%c" | out: _Dest="99") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfd0, _Format="%c%c" | out: _Dest="bd") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfd2, _Format="%c%c" | out: _Dest="22") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfd4, _Format="%c%c" | out: _Dest="c1") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfd6, _Format="%c%c" | out: _Dest="e1") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfd8, _Format="%c%c" | out: _Dest="50") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfda, _Format="%c%c" | out: _Dest="a0") returned 2 [0196.000] sprintf (in: _Dest=0x7a2dfdc, _Format="%c%c" | out: _Dest="0a") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dfde, _Format="%c%c" | out: _Dest="72") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dfe0, _Format="%c%c" | out: _Dest="3a") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dfe2, _Format="%c%c" | out: _Dest="04") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dfe4, _Format="%c%c" | out: _Dest="7b") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dfe6, _Format="%c%c" | out: _Dest="69") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dfe8, _Format="%c%c" | out: _Dest="fb") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dfea, _Format="%c%c" | out: _Dest="f1") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dfec, _Format="%c%c" | out: _Dest="e6") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dfee, _Format="%c%c" | out: _Dest="75") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dff0, _Format="%c%c" | out: _Dest="5d") returned 2 [0196.001] sprintf (in: _Dest=0x7a2dff2, _Format="%c%c" | out: _Dest="90") returned 2 [0196.001] RtlInitAnsiString (in: DestinationString=0xbcaf750, SourceString="71f12c37dd002e99bd22c1e150a00a723a047b69fbf1e6755d90" | out: DestinationString="71f12c37dd002e99bd22c1e150a00a723a047b69fbf1e6755d90") [0196.001] RtlAnsiStringToUnicodeString (in: DestinationString=0xbcaf748, SourceString="71f12c37dd002e99bd22c1e150a00a723a047b69fbf1e6755d90", AllocateDestinationString=1 | out: DestinationString="71f12c37dd002e99bd22c1e150a00a723a047b69fbf1e6755d90") returned 0x0 [0196.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015328 [0196.002] wcscat (in: _Dest=0x7b84590, _Source="71f12c37dd002" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\71f12c37dd002") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\71f12c37dd002" [0196.002] wcscat (in: _Dest=0x7b84590, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\71f12c37dd002.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\71f12c37dd002.68814f" [0196.002] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\71f12c37dd002.68814f", NtPathName=0xbcaf740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\71f12c37dd002.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0196.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea37a8 [0196.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea37a8) returned 1 [0196.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3abc8) returned 1 [0196.137] NtQueryInformationFile (in: FileHandle=0x15f8, IoStatusBlock=0xbcaf718, FileInformation=0xbcaf720, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbcaf718, FileInformation=0xbcaf720) returned 0x0 [0196.137] NtSetInformationFile (FileHandle=0x15f8, IoStatusBlock=0xbcaf718, FileInformation=0xbcaf720, Length=0x28, FileInformationClass=0x4) returned 0x0 [0196.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84590) returned 1 [0196.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0196.193] FlushFileBuffers (hFile=0x15f8) returned 1 [0196.199] CloseHandle (hObject=0x15f8) returned 1 [0196.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3d54810 [0196.247] wcscpy (in: _Dest=0x3d54810, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\" [0196.247] wcscat (in: _Dest=0x3d54810, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\68814F-Readme.txt" [0196.247] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\68814f-readme.txt")) returned 0xffffffff [0196.247] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b08 [0196.270] WriteFile (in: hFile=0x1b08, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbcaf75c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbcaf75c*=0x8b9, lpOverlapped=0x0) returned 1 [0196.360] CloseHandle (hObject=0x1b08) returned 1 [0196.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 [0196.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83c90) returned 1 Thread: id = 6174 os_tid = 0x1208 [0187.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cac7c8 [0187.667] wcscpy (in: _Dest=0x7cac7c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" [0187.667] wcscat (in: _Dest=0x7cac7c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\" [0187.667] wcscat (in: _Dest=0x7cac7c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*" [0187.667] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a705a0 [0187.667] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x7a705a0 | out: lpFindFileData=0x7a705a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73430 [0187.668] wcscmp (_String1=".", _String2=".") returned 0 [0187.668] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x7a705a0 | out: lpFindFileData=0x7a705a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.668] wcscmp (_String1="..", _String2=".") returned 1 [0187.668] wcscmp (_String1="..", _String2="..") returned 0 [0187.668] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x7a705a0 | out: lpFindFileData=0x7a705a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c9f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.668] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.668] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7ca9740 [0187.668] wcscpy (in: _Dest=0x7ca9740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" [0187.668] wcscat (in: _Dest=0x7ca9740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\" [0187.668] wcscat (in: _Dest=0x7ca9740, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" [0194.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4 [0194.959] FindNextFileW (in: hFindFile=0x3e73430, lpFindFileData=0x7a705a0 | out: lpFindFileData=0x7a705a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c9f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.959] FindClose (in: hFindFile=0x3e73430 | out: hFindFile=0x3e73430) returned 1 [0194.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a705a0) returned 1 [0194.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac7c8) returned 1 [0194.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deaf00) returned 1 Thread: id = 6175 os_tid = 0x120c [0187.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cac8e0 [0187.669] wcscpy (in: _Dest=0x7cac8e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" [0187.669] wcscat (in: _Dest=0x7cac8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" [0187.669] wcscat (in: _Dest=0x7cac8e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*" [0187.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a70808 [0187.669] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x7a70808 | out: lpFindFileData=0x7a70808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e74170 [0187.669] wcscmp (_String1=".", _String2=".") returned 0 [0187.669] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a70808 | out: lpFindFileData=0x7a70808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.669] wcscmp (_String1="..", _String2=".") returned 1 [0187.669] wcscmp (_String1="..", _String2="..") returned 0 [0187.669] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a70808 | out: lpFindFileData=0x7a70808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4415a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.669] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.669] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7ca9868 [0187.669] wcscpy (in: _Dest=0x7ca9868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" [0187.669] wcscat (in: _Dest=0x7ca9868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" [0187.669] wcscat (in: _Dest=0x7ca9868, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" [0188.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0188.355] FindNextFileW (in: hFindFile=0x3e74170, lpFindFileData=0x7a70808 | out: lpFindFileData=0x7a70808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4415a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.355] FindClose (in: hFindFile=0x3e74170 | out: hFindFile=0x3e74170) returned 1 [0188.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a70808) returned 1 [0188.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac8e0) returned 1 [0188.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38c78) returned 1 Thread: id = 6176 os_tid = 0x121c [0187.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cac9f8 [0187.670] wcscpy (in: _Dest=0x7cac9f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" [0187.670] wcscat (in: _Dest=0x7cac9f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" [0187.670] wcscat (in: _Dest=0x7cac9f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*" [0187.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a70a70 [0187.670] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x7a70a70 | out: lpFindFileData=0x7a70a70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3e73f70 [0187.671] wcscmp (_String1=".", _String2=".") returned 0 [0187.671] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a70a70 | out: lpFindFileData=0x7a70a70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.671] wcscmp (_String1="..", _String2=".") returned 1 [0187.671] wcscmp (_String1="..", _String2="..") returned 0 [0187.671] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a70a70 | out: lpFindFileData=0x7a70a70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0187.671] wcscmp (_String1="messages.json", _String2=".") returned 1 [0187.671] wcscmp (_String1="messages.json", _String2="..") returned 1 [0187.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7ca9990 [0187.671] wcscpy (in: _Dest=0x7ca9990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" [0187.671] wcscat (in: _Dest=0x7ca9990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" [0187.671] wcscat (in: _Dest=0x7ca9990, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" [0188.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13fc [0188.358] FindNextFileW (in: hFindFile=0x3e73f70, lpFindFileData=0x7a70a70 | out: lpFindFileData=0x7a70a70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0188.358] FindClose (in: hFindFile=0x3e73f70 | out: hFindFile=0x3e73f70) returned 1 [0188.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a70a70) returned 1 [0188.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac9f8) returned 1 [0188.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d158) returned 1 Thread: id = 6177 os_tid = 0xbdc [0187.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cacb10 [0187.672] wcscpy (in: _Dest=0x7cacb10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" [0187.672] wcscat (in: _Dest=0x7cacb10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\" [0187.672] wcscat (in: _Dest=0x7cacb10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*" [0187.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a70cd8 [0187.672] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x7a70cd8 | out: lpFindFileData=0x7a70cd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff90 [0190.555] wcscmp (_String1=".", _String2=".") returned 0 [0190.555] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a70cd8 | out: lpFindFileData=0x7a70cd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.555] wcscmp (_String1="..", _String2=".") returned 1 [0190.555] wcscmp (_String1="..", _String2="..") returned 0 [0190.555] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a70cd8 | out: lpFindFileData=0x7a70cd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4461500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.555] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.555] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb3d08 [0190.556] wcscpy (in: _Dest=0x7cb3d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" [0190.556] wcscat (in: _Dest=0x7cb3d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\" [0190.556] wcscat (in: _Dest=0x7cb3d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" [0197.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8 [0197.919] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a70cd8 | out: lpFindFileData=0x7a70cd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4461500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5416cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.919] FindClose (in: hFindFile=0x3dcff90 | out: hFindFile=0x3dcff90) returned 1 [0197.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a70cd8) returned 1 [0197.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacb10) returned 1 [0197.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d270) returned 1 Thread: id = 6178 os_tid = 0x7f8 [0187.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cacc28 [0187.673] wcscpy (in: _Dest=0x7cacc28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" [0187.673] wcscat (in: _Dest=0x7cacc28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\" [0187.673] wcscat (in: _Dest=0x7cacc28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*" [0187.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a9a0 [0187.673] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf950 [0190.554] wcscmp (_String1=".", _String2=".") returned 0 [0190.554] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.554] wcscmp (_String1="..", _String2=".") returned 1 [0190.554] wcscmp (_String1="..", _String2="..") returned 0 [0190.554] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4488600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.554] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.554] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb3be0 [0190.555] wcscpy (in: _Dest=0x7cb3be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" [0190.555] wcscat (in: _Dest=0x7cb3be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\" [0190.555] wcscat (in: _Dest=0x7cb3be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" [0197.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb3be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec [0197.916] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x7a3a9a0 | out: lpFindFileData=0x7a3a9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4488600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.916] FindClose (in: hFindFile=0x3dcf950 | out: hFindFile=0x3dcf950) returned 1 [0197.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a9a0) returned 1 [0197.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacc28) returned 1 [0197.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d388) returned 1 Thread: id = 6179 os_tid = 0x1220 [0187.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cacd40 [0187.675] wcscpy (in: _Dest=0x7cacd40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" [0187.675] wcscat (in: _Dest=0x7cacd40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\" [0187.675] wcscat (in: _Dest=0x7cacd40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*" [0187.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0187.675] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0190.997] wcscmp (_String1=".", _String2=".") returned 0 [0190.997] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.998] wcscmp (_String1="..", _String2=".") returned 1 [0190.998] wcscmp (_String1="..", _String2="..") returned 0 [0190.998] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.998] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.998] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cba020 [0190.998] wcscpy (in: _Dest=0x7cba020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" [0190.998] wcscat (in: _Dest=0x7cba020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\" [0190.998] wcscat (in: _Dest=0x7cba020, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" [0193.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cba020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4 [0193.421] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.421] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0193.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0193.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacd40) returned 1 [0193.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d4a0) returned 1 Thread: id = 6180 os_tid = 0x78c [0187.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cace58 [0187.726] wcscpy (in: _Dest=0x7cace58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" [0187.911] wcscat (in: _Dest=0x7cace58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\" [0187.911] wcscat (in: _Dest=0x7cace58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*" [0187.911] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a28018 [0187.911] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0190.996] wcscmp (_String1=".", _String2=".") returned 0 [0190.997] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.997] wcscmp (_String1="..", _String2=".") returned 1 [0190.997] wcscmp (_String1="..", _String2="..") returned 0 [0190.997] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.997] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.997] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb5e30 [0190.997] wcscpy (in: _Dest=0x7cb5e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" [0190.997] wcscat (in: _Dest=0x7cb5e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\" [0190.997] wcscat (in: _Dest=0x7cb5e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" [0193.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb5e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c [0193.418] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44acff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.419] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0193.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28018) returned 1 [0193.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cace58) returned 1 [0193.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d5b8) returned 1 Thread: id = 6181 os_tid = 0x390 [0187.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cacf70 [0187.912] wcscpy (in: _Dest=0x7cacf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" [0187.912] wcscat (in: _Dest=0x7cacf70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\" [0187.912] wcscat (in: _Dest=0x7cacf70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*" [0187.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a28280 [0187.912] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x7a28280 | out: lpFindFileData=0x7a28280*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0190.996] wcscmp (_String1=".", _String2=".") returned 0 [0190.996] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a28280 | out: lpFindFileData=0x7a28280*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.996] wcscmp (_String1="..", _String2=".") returned 1 [0190.996] wcscmp (_String1="..", _String2="..") returned 0 [0190.996] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a28280 | out: lpFindFileData=0x7a28280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4546ce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.996] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.996] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca558 [0190.996] wcscpy (in: _Dest=0x3eca558, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" [0190.996] wcscat (in: _Dest=0x3eca558, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\" [0190.996] wcscat (in: _Dest=0x3eca558, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" [0193.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eca558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc0 [0193.416] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a28280 | out: lpFindFileData=0x7a28280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4546ce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.416] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0193.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28280) returned 1 [0193.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacf70) returned 1 [0193.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d6d0) returned 1 Thread: id = 6182 os_tid = 0x380 [0187.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cad1a0 [0187.914] wcscpy (in: _Dest=0x7cad1a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" [0187.914] wcscat (in: _Dest=0x7cad1a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\" [0187.914] wcscat (in: _Dest=0x7cad1a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*" [0187.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a284e8 [0187.914] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0190.994] wcscmp (_String1=".", _String2=".") returned 0 [0190.994] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.994] wcscmp (_String1="..", _String2=".") returned 1 [0190.994] wcscmp (_String1="..", _String2="..") returned 0 [0190.994] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456b6d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.994] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.994] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb5d08 [0190.995] wcscpy (in: _Dest=0x7cb5d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" [0190.995] wcscat (in: _Dest=0x7cb5d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\" [0190.995] wcscat (in: _Dest=0x7cb5d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" [0195.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb5d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0195.670] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456b6d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.670] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0195.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a284e8) returned 1 [0195.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad1a0) returned 1 [0195.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d7e8) returned 1 Thread: id = 6183 os_tid = 0x3a0 [0188.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x7cac480 [0188.125] wcscpy (in: _Dest=0x7cac480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" [0188.125] wcscat (in: _Dest=0x7cac480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\" [0188.125] wcscat (in: _Dest=0x7cac480, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*" [0188.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a28750 [0188.125] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x7a28750 | out: lpFindFileData=0x7a28750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4591060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d280 [0190.993] wcscmp (_String1=".", _String2=".") returned 0 [0190.993] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a28750 | out: lpFindFileData=0x7a28750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4591060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.993] wcscmp (_String1="..", _String2=".") returned 1 [0190.993] wcscmp (_String1="..", _String2="..") returned 0 [0190.993] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a28750 | out: lpFindFileData=0x7a28750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.993] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.993] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3eca078 [0190.994] wcscpy (in: _Dest=0x3eca078, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" [0190.994] wcscat (in: _Dest=0x3eca078, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\" [0190.994] wcscat (in: _Dest=0x3eca078, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" [0195.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eca078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0195.667] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a28750 | out: lpFindFileData=0x7a28750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.667] FindClose (in: hFindFile=0x7a2d280 | out: hFindFile=0x7a2d280) returned 1 [0195.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28750) returned 1 [0195.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac480) returned 1 [0195.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d900) returned 1 Thread: id = 6184 os_tid = 0x101c [0188.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cad600 [0188.131] wcscpy (in: _Dest=0x7cad600, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" [0188.131] wcscat (in: _Dest=0x7cad600, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\" [0188.131] wcscat (in: _Dest=0x7cad600, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*" [0188.131] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a289b8 [0188.131] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x7a289b8 | out: lpFindFileData=0x7a289b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d540 [0190.992] wcscmp (_String1=".", _String2=".") returned 0 [0190.992] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a289b8 | out: lpFindFileData=0x7a289b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.992] wcscmp (_String1="..", _String2=".") returned 1 [0190.992] wcscmp (_String1="..", _String2="..") returned 0 [0190.992] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a289b8 | out: lpFindFileData=0x7a289b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45de2c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.993] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.993] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb5be0 [0190.993] wcscpy (in: _Dest=0x7cb5be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" [0190.993] wcscat (in: _Dest=0x7cb5be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\" [0190.993] wcscat (in: _Dest=0x7cb5be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" [0195.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb5be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0195.664] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a289b8 | out: lpFindFileData=0x7a289b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45de2c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe54193d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.664] FindClose (in: hFindFile=0x7a2d540 | out: hFindFile=0x7a2d540) returned 1 [0195.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a289b8) returned 1 [0195.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad600) returned 1 [0195.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7da18) returned 1 Thread: id = 6185 os_tid = 0x1020 [0188.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cad088 [0188.132] wcscpy (in: _Dest=0x7cad088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" [0188.132] wcscat (in: _Dest=0x7cad088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\" [0188.132] wcscat (in: _Dest=0x7cad088, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*" [0188.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a28c20 [0188.133] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x7a28c20 | out: lpFindFileData=0x7a28c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0190.991] wcscmp (_String1=".", _String2=".") returned 0 [0190.991] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a28c20 | out: lpFindFileData=0x7a28c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.992] wcscmp (_String1="..", _String2=".") returned 1 [0190.992] wcscmp (_String1="..", _String2="..") returned 0 [0190.992] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a28c20 | out: lpFindFileData=0x7a28c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46053c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.992] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.992] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb5ab8 [0190.992] wcscpy (in: _Dest=0x7cb5ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" [0190.992] wcscat (in: _Dest=0x7cb5ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\" [0190.992] wcscat (in: _Dest=0x7cb5ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" [0195.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb5ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0195.661] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a28c20 | out: lpFindFileData=0x7a28c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46053c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.661] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0195.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28c20) returned 1 [0195.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad088) returned 1 [0195.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7db30) returned 1 Thread: id = 6186 os_tid = 0x684 [0188.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cac368 [0188.136] wcscpy (in: _Dest=0x7cac368, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" [0188.136] wcscat (in: _Dest=0x7cac368, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\" [0188.136] wcscat (in: _Dest=0x7cac368, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*" [0188.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a28e88 [0188.136] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x7a28e88 | out: lpFindFileData=0x7a28e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d7c0 [0190.990] wcscmp (_String1=".", _String2=".") returned 0 [0190.991] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a28e88 | out: lpFindFileData=0x7a28e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.991] wcscmp (_String1="..", _String2=".") returned 1 [0190.991] wcscmp (_String1="..", _String2="..") returned 0 [0190.991] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a28e88 | out: lpFindFileData=0x7a28e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4629db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.991] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.991] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cb5990 [0190.991] wcscpy (in: _Dest=0x7cb5990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" [0190.991] wcscat (in: _Dest=0x7cb5990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\" [0190.991] wcscat (in: _Dest=0x7cb5990, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" [0195.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb5990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0195.658] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a28e88 | out: lpFindFileData=0x7a28e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4629db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.658] FindClose (in: hFindFile=0x7a2d7c0 | out: hFindFile=0x7a2d7c0) returned 1 [0195.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28e88) returned 1 [0195.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac368) returned 1 [0195.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7dc48) returned 1 Thread: id = 6187 os_tid = 0x3f0 [0188.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cad718 [0188.137] wcscpy (in: _Dest=0x7cad718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" [0188.137] wcscat (in: _Dest=0x7cad718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\" [0188.137] wcscat (in: _Dest=0x7cad718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*" [0188.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a290f0 [0188.137] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x7a290f0 | out: lpFindFileData=0x7a290f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0190.989] wcscmp (_String1=".", _String2=".") returned 0 [0190.990] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a290f0 | out: lpFindFileData=0x7a290f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.990] wcscmp (_String1="..", _String2=".") returned 1 [0190.990] wcscmp (_String1="..", _String2="..") returned 0 [0190.990] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a290f0 | out: lpFindFileData=0x7a290f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c3aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.990] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.990] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb5868 [0190.990] wcscpy (in: _Dest=0x7cb5868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" [0190.990] wcscat (in: _Dest=0x7cb5868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\" [0190.990] wcscat (in: _Dest=0x7cb5868, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" [0195.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb5868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0195.655] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a290f0 | out: lpFindFileData=0x7a290f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c3aa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.655] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0195.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a290f0) returned 1 [0195.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad718) returned 1 [0195.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7dd60) returned 1 Thread: id = 6188 os_tid = 0x414 [0188.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cad2b8 [0188.138] wcscpy (in: _Dest=0x7cad2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" [0188.138] wcscat (in: _Dest=0x7cad2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\" [0188.139] wcscat (in: _Dest=0x7cad2b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*" [0188.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a29358 [0188.139] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x7a29358 | out: lpFindFileData=0x7a29358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0190.989] wcscmp (_String1=".", _String2=".") returned 0 [0190.989] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a29358 | out: lpFindFileData=0x7a29358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.989] wcscmp (_String1="..", _String2=".") returned 1 [0190.989] wcscmp (_String1="..", _String2="..") returned 0 [0190.989] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a29358 | out: lpFindFileData=0x7a29358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e8490, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.989] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.989] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb5740 [0190.989] wcscpy (in: _Dest=0x7cb5740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" [0190.989] wcscat (in: _Dest=0x7cb5740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\" [0190.989] wcscat (in: _Dest=0x7cb5740, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" [0195.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb5740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0195.653] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a29358 | out: lpFindFileData=0x7a29358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e8490, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.653] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0195.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a29358) returned 1 [0195.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad2b8) returned 1 [0195.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7de78) returned 1 Thread: id = 6189 os_tid = 0x328 [0188.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cad3d0 [0188.140] wcscpy (in: _Dest=0x7cad3d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" [0188.140] wcscat (in: _Dest=0x7cad3d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\" [0188.140] wcscat (in: _Dest=0x7cad3d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*" [0188.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a295c0 [0188.140] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x7a295c0 | out: lpFindFileData=0x7a295c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0190.988] wcscmp (_String1=".", _String2=".") returned 0 [0190.988] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a295c0 | out: lpFindFileData=0x7a295c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.988] wcscmp (_String1="..", _String2=".") returned 1 [0190.988] wcscmp (_String1="..", _String2="..") returned 0 [0190.988] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a295c0 | out: lpFindFileData=0x7a295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.988] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.988] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb5618 [0190.988] wcscpy (in: _Dest=0x7cb5618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" [0190.988] wcscat (in: _Dest=0x7cb5618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\" [0190.988] wcscat (in: _Dest=0x7cb5618, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" [0195.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb5618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0195.650] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a295c0 | out: lpFindFileData=0x7a295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.650] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0195.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a295c0) returned 1 [0195.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad3d0) returned 1 [0195.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7df90) returned 1 Thread: id = 6190 os_tid = 0x48c [0188.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cad4e8 [0188.158] wcscpy (in: _Dest=0x7cad4e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" [0188.158] wcscat (in: _Dest=0x7cad4e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\" [0188.158] wcscat (in: _Dest=0x7cad4e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*" [0188.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a29828 [0188.158] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x7a29828 | out: lpFindFileData=0x7a29828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0190.987] wcscmp (_String1=".", _String2=".") returned 0 [0190.987] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a29828 | out: lpFindFileData=0x7a29828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.987] wcscmp (_String1="..", _String2=".") returned 1 [0190.987] wcscmp (_String1="..", _String2="..") returned 0 [0190.987] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a29828 | out: lpFindFileData=0x7a29828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475b080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.987] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.987] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb54f0 [0190.987] wcscpy (in: _Dest=0x7cb54f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" [0190.987] wcscat (in: _Dest=0x7cb54f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\" [0190.987] wcscat (in: _Dest=0x7cb54f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" [0195.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb54f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c [0195.647] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a29828 | out: lpFindFileData=0x7a29828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475b080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.647] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0195.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a29828) returned 1 [0195.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad4e8) returned 1 [0195.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e0a8) returned 1 Thread: id = 6191 os_tid = 0x6b8 [0188.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cad830 [0188.159] wcscpy (in: _Dest=0x7cad830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" [0188.159] wcscat (in: _Dest=0x7cad830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\" [0188.159] wcscat (in: _Dest=0x7cad830, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*" [0188.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a29a90 [0188.160] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x7a29a90 | out: lpFindFileData=0x7a29a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0190.986] wcscmp (_String1=".", _String2=".") returned 0 [0190.986] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a29a90 | out: lpFindFileData=0x7a29a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.986] wcscmp (_String1="..", _String2=".") returned 1 [0190.986] wcscmp (_String1="..", _String2="..") returned 0 [0190.986] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a29a90 | out: lpFindFileData=0x7a29a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4782180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.986] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.986] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb53c8 [0190.986] wcscpy (in: _Dest=0x7cb53c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" [0190.986] wcscat (in: _Dest=0x7cb53c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\" [0190.986] wcscat (in: _Dest=0x7cb53c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" [0195.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb53c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0195.644] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a29a90 | out: lpFindFileData=0x7a29a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4782180, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541bae0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.645] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0195.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a29a90) returned 1 [0195.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad830) returned 1 [0195.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e1c0) returned 1 Thread: id = 6192 os_tid = 0x7d4 [0188.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cad948 [0188.161] wcscpy (in: _Dest=0x7cad948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" [0188.161] wcscat (in: _Dest=0x7cad948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\" [0188.161] wcscat (in: _Dest=0x7cad948, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*" [0188.161] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a29cf8 [0188.161] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x7a29cf8 | out: lpFindFileData=0x7a29cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cc500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47cc500, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0190.985] wcscmp (_String1=".", _String2=".") returned 0 [0190.985] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a29cf8 | out: lpFindFileData=0x7a29cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cc500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47cc500, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.985] wcscmp (_String1="..", _String2=".") returned 1 [0190.985] wcscmp (_String1="..", _String2="..") returned 0 [0190.985] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a29cf8 | out: lpFindFileData=0x7a29cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.985] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.985] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb52a0 [0190.985] wcscpy (in: _Dest=0x7cb52a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" [0190.986] wcscat (in: _Dest=0x7cb52a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\" [0190.986] wcscat (in: _Dest=0x7cb52a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" [0195.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb52a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0195.642] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a29cf8 | out: lpFindFileData=0x7a29cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47cdc70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.642] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0195.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a29cf8) returned 1 [0195.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad948) returned 1 [0195.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec710) returned 1 Thread: id = 6193 os_tid = 0x40c [0188.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cada60 [0188.162] wcscpy (in: _Dest=0x7cada60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" [0188.162] wcscat (in: _Dest=0x7cada60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\" [0188.162] wcscat (in: _Dest=0x7cada60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*" [0188.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a29f60 [0188.162] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x7a29f60 | out: lpFindFileData=0x7a29f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47f2660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0190.984] wcscmp (_String1=".", _String2=".") returned 0 [0190.984] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a29f60 | out: lpFindFileData=0x7a29f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47cc500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47f2660, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.984] wcscmp (_String1="..", _String2=".") returned 1 [0190.984] wcscmp (_String1="..", _String2="..") returned 0 [0190.984] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a29f60 | out: lpFindFileData=0x7a29f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.984] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.984] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb5178 [0190.985] wcscpy (in: _Dest=0x7cb5178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" [0190.985] wcscat (in: _Dest=0x7cb5178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\" [0190.985] wcscat (in: _Dest=0x7cb5178, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" [0195.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb5178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008 [0195.639] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a29f60 | out: lpFindFileData=0x7a29f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47f2660, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.639] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0195.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a29f60) returned 1 [0195.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cada60) returned 1 [0195.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec940) returned 1 Thread: id = 6194 os_tid = 0x908 [0188.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cadb78 [0188.163] wcscpy (in: _Dest=0x7cadb78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" [0188.163] wcscat (in: _Dest=0x7cadb78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\" [0188.163] wcscat (in: _Dest=0x7cadb78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*" [0188.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2a1c8 [0188.163] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x7a2a1c8 | out: lpFindFileData=0x7a2a1c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df40 [0190.983] wcscmp (_String1=".", _String2=".") returned 0 [0190.983] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x7a2a1c8 | out: lpFindFileData=0x7a2a1c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47f2660, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.983] wcscmp (_String1="..", _String2=".") returned 1 [0190.983] wcscmp (_String1="..", _String2="..") returned 0 [0190.983] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x7a2a1c8 | out: lpFindFileData=0x7a2a1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.983] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.983] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb5050 [0190.984] wcscpy (in: _Dest=0x7cb5050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" [0190.984] wcscat (in: _Dest=0x7cb5050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\" [0190.984] wcscat (in: _Dest=0x7cb5050, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" [0199.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb5050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164 [0199.214] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x7a2a1c8 | out: lpFindFileData=0x7a2a1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.214] FindClose (in: hFindFile=0x7a2df40 | out: hFindFile=0x7a2df40) returned 1 [0199.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2a1c8) returned 1 [0199.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadb78) returned 1 [0199.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec4e0) returned 1 Thread: id = 6195 os_tid = 0x918 [0188.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cadc90 [0188.164] wcscpy (in: _Dest=0x7cadc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" [0188.164] wcscat (in: _Dest=0x7cadc90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\" [0188.164] wcscat (in: _Dest=0x7cadc90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*" [0188.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2a430 [0188.165] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x7a2a430 | out: lpFindFileData=0x7a2a430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dec0 [0189.474] wcscmp (_String1=".", _String2=".") returned 0 [0189.475] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a2a430 | out: lpFindFileData=0x7a2a430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48187c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48187c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.475] wcscmp (_String1="..", _String2=".") returned 1 [0189.475] wcscmp (_String1="..", _String2="..") returned 0 [0189.475] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a2a430 | out: lpFindFileData=0x7a2a430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.475] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.475] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb0710 [0189.475] wcscpy (in: _Dest=0x7cb0710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" [0189.475] wcscat (in: _Dest=0x7cb0710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\" [0189.475] wcscat (in: _Dest=0x7cb0710, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" [0195.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8 [0195.333] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x7a2a430 | out: lpFindFileData=0x7a2a430*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48187c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4819760, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.333] FindClose (in: hFindFile=0x7a2dec0 | out: hFindFile=0x7a2dec0) returned 1 [0195.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2a430) returned 1 [0195.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadc90) returned 1 [0195.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac020) returned 1 Thread: id = 6196 os_tid = 0x928 [0188.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cadda8 [0188.166] wcscpy (in: _Dest=0x7cadda8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" [0188.166] wcscat (in: _Dest=0x7cadda8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\" [0188.166] wcscat (in: _Dest=0x7cadda8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*" [0188.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2a698 [0188.166] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x7a2a698 | out: lpFindFileData=0x7a2a698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe483e920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe483e920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d240 [0189.476] wcscmp (_String1=".", _String2=".") returned 0 [0189.476] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x7a2a698 | out: lpFindFileData=0x7a2a698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe483e920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe483e920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.476] wcscmp (_String1="..", _String2=".") returned 1 [0189.476] wcscmp (_String1="..", _String2="..") returned 0 [0189.476] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x7a2a698 | out: lpFindFileData=0x7a2a698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4840860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.476] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.476] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb0838 [0189.476] wcscpy (in: _Dest=0x7cb0838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" [0189.476] wcscat (in: _Dest=0x7cb0838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\" [0189.477] wcscat (in: _Dest=0x7cb0838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" [0195.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb0838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b80 [0195.336] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x7a2a698 | out: lpFindFileData=0x7a2a698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4840860, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.336] FindClose (in: hFindFile=0x7a2d240 | out: hFindFile=0x7a2d240) returned 1 [0195.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2a698) returned 1 [0195.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadda8) returned 1 [0195.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac138) returned 1 Thread: id = 6197 os_tid = 0x938 [0189.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7a391f0 [0189.477] wcscpy (in: _Dest=0x7a391f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" [0189.477] wcscat (in: _Dest=0x7a391f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\" [0189.477] wcscat (in: _Dest=0x7a391f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*" [0189.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3cdb8 [0189.478] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4864a80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4864a80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad8030 [0190.756] wcscmp (_String1=".", _String2=".") returned 0 [0190.756] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe483e920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4864a80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4864a80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.756] wcscmp (_String1="..", _String2=".") returned 1 [0190.756] wcscmp (_String1="..", _String2="..") returned 0 [0190.756] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4864a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4865250, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.756] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.756] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7a657b0 [0190.757] wcscpy (in: _Dest=0x7a657b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" [0190.757] wcscat (in: _Dest=0x7a657b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\" [0190.757] wcscat (in: _Dest=0x7a657b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" [0201.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a657b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0201.731] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x7a3cdb8 | out: lpFindFileData=0x7a3cdb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4864a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4865250, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.731] FindClose (in: hFindFile=0x7ad8030 | out: hFindFile=0x7ad8030) returned 1 [0201.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3cdb8) returned 1 [0201.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a391f0) returned 1 [0201.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac250) returned 1 Thread: id = 6198 os_tid = 0x948 [0189.482] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json")) returned 0x2020 [0189.483] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0197.996] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xacc [0197.997] GetFileSizeEx (in: hFile=0xacc, lpFileSize=0xaf6fd5c | out: lpFileSize=0xaf6fd5c*=278) returned 1 [0197.997] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.997] ReadFile (in: hFile=0xacc, lpBuffer=0xaf6fd38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaf6fd48, lpOverlapped=0x0 | out: lpBuffer=0xaf6fd38*, lpNumberOfBytesRead=0xaf6fd48*=0x4, lpOverlapped=0x0) returned 1 [0197.999] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0197.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0197.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0198.000] NtQuerySystemTime (in: CurrentTime=0xaf6fcd0 | out: CurrentTime=0xaf6fcd0*=132462177765744000) returned 0x0 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x2f92b368 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x4abf2e42 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x70b61019 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x370f5bd7 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x4107fabb [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x3381be56 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x4c2f12e6 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x3e8ebf15 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x5bbd5cdc [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x7ed8ddc1 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x7d32404e [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x4e2790e0 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x77d64a4a [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x5657b23b [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x737c9489 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x53aafce1 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x5191a17f [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x2a1b7447 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x137cff9 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x4ada7a12 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0xcc7aa40 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x7696dc62 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x4a9c0047 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x32777a36 [0198.000] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x563e07f4 [0198.001] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x73a81ed4 [0198.001] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x20eb8a9e [0198.001] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x63b617ad [0198.001] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x9cafc22 [0198.001] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x2eb8091b [0198.001] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x29c007c8 [0198.001] RtlRandomEx (in: Seed=0xaf6fcc8 | out: Seed=0xaf6fcc8) returned 0x50305a42 [0198.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e484d8 [0198.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e4c0e0 [0198.013] ReadFile (in: hFile=0xacc, lpBuffer=0x10e484d8, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0xaf6fcc4, lpOverlapped=0x0 | out: lpBuffer=0x10e484d8*, lpNumberOfBytesRead=0xaf6fcc4*=0x116, lpOverlapped=0x0) returned 1 [0198.013] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.013] WriteFile (in: hFile=0xacc, lpBuffer=0x10e4c0e0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xaf6fcc8, lpOverlapped=0x0 | out: lpBuffer=0x10e4c0e0*, lpNumberOfBytesWritten=0xaf6fcc8*=0x116, lpOverlapped=0x0) returned 1 [0200.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0200.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f60 [0200.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f60) returned 1 [0200.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e4c0e0) returned 1 [0200.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e484d8) returned 1 [0200.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c108) returned 1 [0200.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41578) returned 1 [0200.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37fe0 [0200.556] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.556] WriteFile (in: hFile=0xacc, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf6fd50, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xaf6fd50*=0x10c, lpOverlapped=0x0) returned 1 [0200.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53788 [0200.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53788) returned 1 [0200.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53788 [0200.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53300 [0200.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53288 [0200.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53288) returned 1 [0200.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.859] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="25") returned 2 [0200.859] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="14") returned 2 [0200.859] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="ea") returned 2 [0200.859] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.859] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="db") returned 2 [0200.859] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="2d") returned 2 [0200.859] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.859] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="44") returned 2 [0200.859] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="27") returned 2 [0200.859] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="21") returned 2 [0200.859] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="cb") returned 2 [0200.859] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="db") returned 2 [0200.859] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="5f") returned 2 [0200.859] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="97") returned 2 [0200.859] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.859] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="0a") returned 2 [0200.859] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="c8") returned 2 [0200.859] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="3e") returned 2 [0200.859] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.859] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.859] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="04") returned 2 [0200.859] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="6c") returned 2 [0200.859] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="8e") returned 2 [0200.859] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.859] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="c7") returned 2 [0200.859] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="94") returned 2 [0200.859] RtlInitAnsiString (in: DestinationString=0xaf6fcd8, SourceString="2514ea7adb2df3442721cbdb5f97e80ac83ee8d4046c8edcc794" | out: DestinationString="2514ea7adb2df3442721cbdb5f97e80ac83ee8d4046c8edcc794") [0200.860] RtlAnsiStringToUnicodeString (in: DestinationString=0xaf6fcd0, SourceString="2514ea7adb2df3442721cbdb5f97e80ac83ee8d4046c8edcc794", AllocateDestinationString=1 | out: DestinationString="2514ea7adb2df3442721cbdb5f97e80ac83ee8d4046c8edcc794") returned 0x0 [0200.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6ccc0 [0200.860] wcscat (in: _Dest=0x7cd5e98, _Source="2514ea7adb2df" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\2514ea7adb2df") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\2514ea7adb2df" [0200.860] wcscat (in: _Dest=0x7cd5e98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\2514ea7adb2df.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\2514ea7adb2df.68814f" [0200.860] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\2514ea7adb2df.68814f", NtPathName=0xaf6fcc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\2514ea7adb2df.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd9070 [0201.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9070) returned 1 [0201.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd80b0) returned 1 [0201.167] NtQueryInformationFile (in: FileHandle=0xacc, IoStatusBlock=0xaf6fca0, FileInformation=0xaf6fca8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaf6fca0, FileInformation=0xaf6fca8) returned 0x0 [0201.167] NtSetInformationFile (FileHandle=0xacc, IoStatusBlock=0xaf6fca0, FileInformation=0xaf6fca8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5e98) returned 1 [0201.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ccc0) returned 1 [0201.406] FlushFileBuffers (hFile=0xacc) returned 1 [0201.421] CloseHandle (hObject=0xacc) returned 1 [0205.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7a5e1c8 [0206.000] wcscpy (in: _Dest=0x7a5e1c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\" [0206.000] wcscat (in: _Dest=0x7a5e1c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\68814F-Readme.txt" [0206.000] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\68814f-readme.txt")) returned 0xffffffff [0206.000] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b14 [0206.393] WriteFile (in: hFile=0x1b14, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaf6fce4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xaf6fce4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.735] CloseHandle (hObject=0x1b14) returned 1 [0210.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e1c8) returned 1 [0210.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec75f8) returned 1 Thread: id = 6199 os_tid = 0x958 [0189.483] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json")) returned 0x2020 [0189.483] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.975] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e0 [0198.976] GetFileSizeEx (in: hFile=0x16e0, lpFileSize=0x46cfb1c | out: lpFileSize=0x46cfb1c*=252) returned 1 [0198.976] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.976] ReadFile (in: hFile=0x16e0, lpBuffer=0x46cfaf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x46cfb08, lpOverlapped=0x0 | out: lpBuffer=0x46cfaf8*, lpNumberOfBytesRead=0x46cfb08*=0x4, lpOverlapped=0x0) returned 1 [0198.978] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537b0 [0198.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0198.979] NtQuerySystemTime (in: CurrentTime=0x46cfa90 | out: CurrentTime=0x46cfa90*=132462177775572000) returned 0x0 [0198.979] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x4aca3f78 [0198.979] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x11bcdfa6 [0198.979] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x262d3fd8 [0198.979] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x4c84ed2 [0198.979] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x345db79e [0198.979] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x51c6fe6b [0198.979] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0xd83c5d0 [0198.979] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x4191754d [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x3aebcfe6 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x28742be2 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x6f91ac02 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x54609bab [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x3ccd0e9d [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x7f39157f [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0xb45352c [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x7bd6fe06 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x352242aa [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x1ac65f5e [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x512da720 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x608ac491 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x4a945d06 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x681b4d80 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x47c4cb53 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x26583678 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x137ee369 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x2fa0cc74 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x230cbe09 [0198.980] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x527bd05 [0198.981] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x45788a0a [0198.981] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x7a980fec [0198.981] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x59110d65 [0198.981] RtlRandomEx (in: Seed=0x46cfa88 | out: Seed=0x46cfa88) returned 0x54ac904d [0198.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f22c88 [0198.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f26890 [0198.994] ReadFile (in: hFile=0x16e0, lpBuffer=0x10f22c88, nNumberOfBytesToRead=0xfc, lpNumberOfBytesRead=0x46cfa84, lpOverlapped=0x0 | out: lpBuffer=0x10f22c88*, lpNumberOfBytesRead=0x46cfa84*=0xfc, lpOverlapped=0x0) returned 1 [0198.994] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.994] WriteFile (in: hFile=0x16e0, lpBuffer=0x10f26890*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x46cfa88, lpOverlapped=0x0 | out: lpBuffer=0x10f26890*, lpNumberOfBytesWritten=0x46cfa88*=0xfc, lpOverlapped=0x0) returned 1 [0200.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0200.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4bb8 [0200.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4bb8) returned 1 [0200.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f26890) returned 1 [0200.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f22c88) returned 1 [0200.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c6a8) returned 1 [0200.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b851c0) returned 1 [0200.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37920 [0200.712] SetFilePointerEx (in: hFile=0x16e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.712] WriteFile (in: hFile=0x16e0, lpBuffer=0x7b7e0a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x46cfb10, lpOverlapped=0x0 | out: lpBuffer=0x7b7e0a8*, lpNumberOfBytesWritten=0x46cfb10*=0x10c, lpOverlapped=0x0) returned 1 [0201.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3ea30 [0201.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0201.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0201.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4410 [0201.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0201.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0201.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0201.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0201.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.058] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="3e") returned 2 [0201.058] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="cf") returned 2 [0201.058] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="96") returned 2 [0201.058] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="f3") returned 2 [0201.058] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="46") returned 2 [0201.058] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="88") returned 2 [0201.058] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="5f") returned 2 [0201.058] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="09") returned 2 [0201.058] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="2a") returned 2 [0201.058] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="9f") returned 2 [0201.059] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="ad") returned 2 [0201.059] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="14") returned 2 [0201.059] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="65") returned 2 [0201.059] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="d3") returned 2 [0201.059] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="f3") returned 2 [0201.059] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="07") returned 2 [0201.059] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="90") returned 2 [0201.059] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="16") returned 2 [0201.059] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="a0") returned 2 [0201.059] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="11") returned 2 [0201.059] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="6d") returned 2 [0201.059] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="a1") returned 2 [0201.059] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="92") returned 2 [0201.059] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="85") returned 2 [0201.059] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="6a") returned 2 [0201.059] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="60") returned 2 [0201.059] RtlInitAnsiString (in: DestinationString=0x46cfa98, SourceString="3ecf96f346885f092a9fad1465d3f3079016a0116da192856a60" | out: DestinationString="3ecf96f346885f092a9fad1465d3f3079016a0116da192856a60") [0201.059] RtlAnsiStringToUnicodeString (in: DestinationString=0x46cfa90, SourceString="3ecf96f346885f092a9fad1465d3f3079016a0116da192856a60", AllocateDestinationString=1 | out: DestinationString="3ecf96f346885f092a9fad1465d3f3079016a0116da192856a60") returned 0x0 [0201.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3df68 [0201.060] wcscat (in: _Dest=0x7ddc0e0, _Source="3ecf96f346885" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\3ecf96f346885") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\3ecf96f346885" [0201.060] wcscat (in: _Dest=0x7ddc0e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\3ecf96f346885.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\3ecf96f346885.68814f" [0201.060] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\3ecf96f346885.68814f", NtPathName=0x46cfa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\3ecf96f346885.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddcf28 [0201.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcf28) returned 1 [0201.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e967a0) returned 1 [0201.308] NtQueryInformationFile (in: FileHandle=0x16e0, IoStatusBlock=0x46cfa60, FileInformation=0x46cfa68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x46cfa60, FileInformation=0x46cfa68) returned 0x0 [0201.308] NtSetInformationFile (FileHandle=0x16e0, IoStatusBlock=0x46cfa60, FileInformation=0x46cfa68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc0e0) returned 1 [0208.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0208.569] FlushFileBuffers (hFile=0x16e0) returned 1 [0209.754] CloseHandle (hObject=0x16e0) returned 1 [0209.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddfd38 [0209.756] wcscpy (in: _Dest=0x7ddfd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\" [0209.756] wcscat (in: _Dest=0x7ddfd38, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\68814F-Readme.txt" [0209.756] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\68814f-readme.txt")) returned 0xffffffff [0209.756] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.757] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x46cfaa4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x46cfaa4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.759] CloseHandle (hObject=0x16e0) returned 1 [0209.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddfd38) returned 1 [0209.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7720) returned 1 Thread: id = 6200 os_tid = 0x968 [0189.484] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json")) returned 0x2020 [0189.484] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0199.035] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2270 [0199.035] GetFileSizeEx (in: hFile=0x2270, lpFileSize=0xbcffbcc | out: lpFileSize=0xbcffbcc*=260) returned 1 [0199.035] SetFilePointerEx (in: hFile=0x2270, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.035] ReadFile (in: hFile=0x2270, lpBuffer=0xbcffba8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbcffbb8, lpOverlapped=0x0 | out: lpBuffer=0xbcffba8*, lpNumberOfBytesRead=0xbcffbb8*=0x4, lpOverlapped=0x0) returned 1 [0199.038] SetFilePointerEx (in: hFile=0x2270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0199.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0199.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53670 [0199.038] NtQuerySystemTime (in: CurrentTime=0xbcffb40 | out: CurrentTime=0xbcffb40*=132462177776196000) returned 0x0 [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x1e38e061 [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x5df6f7de [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x18436c1 [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x7e8db27f [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0xcbc1722 [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x74005afe [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x1d864b06 [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x163f04a7 [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x900a74a [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x190f000 [0199.038] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x2897ef01 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x25b18188 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x5483a940 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x7f5fb5eb [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0xcbb4f40 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x228afb3c [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x73868349 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x635ef750 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x5e4c1b07 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x27c1e790 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x617e7452 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x58fc5967 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x30ee27c4 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x43974fc8 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x66d25d43 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x56897a82 [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x73f5444d [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x2d911fa [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x1a031e1f [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x35b0e23e [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x34afe98d [0199.039] RtlRandomEx (in: Seed=0xbcffb38 | out: Seed=0xbcffb38) returned 0x492c5b9b [0199.051] ReadFile (in: hFile=0x2270, lpBuffer=0x10f2a498, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xbcffb34, lpOverlapped=0x0 | out: lpBuffer=0x10f2a498*, lpNumberOfBytesRead=0xbcffb34*=0x104, lpOverlapped=0x0) returned 1 [0199.051] SetFilePointerEx (in: hFile=0x2270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.051] WriteFile (in: hFile=0x2270, lpBuffer=0x10f2e0a0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xbcffb38, lpOverlapped=0x0 | out: lpBuffer=0x10f2e0a0*, lpNumberOfBytesWritten=0xbcffb38*=0x104, lpOverlapped=0x0) returned 1 [0200.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0200.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0200.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d68) returned 1 [0200.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f2e0a0) returned 1 [0200.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f2a498) returned 1 [0200.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0200.715] SetFilePointerEx (in: hFile=0x2270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.715] WriteFile (in: hFile=0x2270, lpBuffer=0x7b7df90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbcffbc0, lpOverlapped=0x0 | out: lpBuffer=0x7b7df90*, lpNumberOfBytesWritten=0xbcffbc0*=0x10c, lpOverlapped=0x0) returned 1 [0201.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3ea30 [0201.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54160 [0201.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54160) returned 1 [0201.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e54160 [0201.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0201.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537b0 [0201.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e537b0) returned 1 [0201.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0201.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.064] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="85") returned 2 [0201.064] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="70") returned 2 [0201.064] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="c0") returned 2 [0201.064] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="9e") returned 2 [0201.064] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="9f") returned 2 [0201.064] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="e5") returned 2 [0201.064] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="f4") returned 2 [0201.064] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="a1") returned 2 [0201.064] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="b9") returned 2 [0201.064] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="0b") returned 2 [0201.064] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="41") returned 2 [0201.064] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="b6") returned 2 [0201.064] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="0a") returned 2 [0201.064] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="3d") returned 2 [0201.064] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="68") returned 2 [0201.065] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="0b") returned 2 [0201.065] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="0f") returned 2 [0201.065] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="55") returned 2 [0201.065] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="c8") returned 2 [0201.065] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="ba") returned 2 [0201.065] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="16") returned 2 [0201.065] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="03") returned 2 [0201.065] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="f9") returned 2 [0201.065] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="10") returned 2 [0201.065] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="8e") returned 2 [0201.065] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="fd") returned 2 [0201.065] RtlInitAnsiString (in: DestinationString=0xbcffb48, SourceString="8570c09e9fe5f4a1b90b41b60a3d680b0f55c8ba1603f9108efd" | out: DestinationString="8570c09e9fe5f4a1b90b41b60a3d680b0f55c8ba1603f9108efd") [0201.065] RtlAnsiStringToUnicodeString (in: DestinationString=0xbcffb40, SourceString="8570c09e9fe5f4a1b90b41b60a3d680b0f55c8ba1603f9108efd", AllocateDestinationString=1 | out: DestinationString="8570c09e9fe5f4a1b90b41b60a3d680b0f55c8ba1603f9108efd") returned 0x0 [0201.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f4e8 [0201.065] wcscat (in: _Dest=0x7ddc218, _Source="8570c09e9fe5f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\8570c09e9fe5f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\8570c09e9fe5f" [0201.065] wcscat (in: _Dest=0x7ddc218, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\8570c09e9fe5f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\8570c09e9fe5f.68814f" [0201.065] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\8570c09e9fe5f.68814f", NtPathName=0xbcffb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\8570c09e9fe5f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x7b86840 [0201.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86840) returned 1 [0201.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cce2f8) returned 1 [0201.311] NtQueryInformationFile (in: FileHandle=0x2270, IoStatusBlock=0xbcffb10, FileInformation=0xbcffb18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbcffb10, FileInformation=0xbcffb18) returned 0x0 [0201.311] NtSetInformationFile (FileHandle=0x2270, IoStatusBlock=0xbcffb10, FileInformation=0xbcffb18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc218) returned 1 [0205.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0205.824] FlushFileBuffers (hFile=0x2270) returned 1 [0205.836] CloseHandle (hObject=0x2270) returned 1 [0206.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7ddfd38 [0206.287] wcscpy (in: _Dest=0x7ddfd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\" [0206.287] wcscat (in: _Dest=0x7ddfd38, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\68814F-Readme.txt" [0206.287] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\68814f-readme.txt")) returned 0xffffffff [0206.287] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a2c [0209.751] WriteFile (in: hFile=0x1a2c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbcffb54, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbcffb54*=0x8b9, lpOverlapped=0x0) returned 1 [0209.752] CloseHandle (hObject=0x1a2c) returned 1 [0209.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddfd38) returned 1 [0209.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7848) returned 1 Thread: id = 6201 os_tid = 0x978 [0189.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json")) returned 0x2020 [0189.485] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0197.029] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2064 [0197.030] GetFileSizeEx (in: hFile=0x2064, lpFileSize=0x5c8fa5c | out: lpFileSize=0x5c8fa5c*=259) returned 1 [0197.030] SetFilePointerEx (in: hFile=0x2064, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.030] ReadFile (in: hFile=0x2064, lpBuffer=0x5c8fa38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5c8fa48, lpOverlapped=0x0 | out: lpBuffer=0x5c8fa38*, lpNumberOfBytesRead=0x5c8fa48*=0x4, lpOverlapped=0x0) returned 1 [0197.031] SetFilePointerEx (in: hFile=0x2064, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0197.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0197.032] NtQuerySystemTime (in: CurrentTime=0x5c8f9d0 | out: CurrentTime=0x5c8f9d0*=132462177756072000) returned 0x0 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x14a57580 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x1424eb40 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x60970f63 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x1f4c87a [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x56891257 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x3cb529d4 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x35842854 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x4a5f896e [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x4417b331 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x147a9cc0 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0xf60fa41 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x27b828cc [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x543063c0 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x6b0663c6 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x19f4a7f6 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x318824de [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x46d6821 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x663f44c0 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x2e427eb0 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x26c7ecc [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x304ead71 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x4492d648 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x4e88a633 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x2f212d45 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x32d394bb [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x261a9495 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x7eb9c12e [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x4f337be4 [0197.032] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x2f5b8581 [0197.033] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x3421fdab [0197.033] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0xdec0ef6 [0197.033] RtlRandomEx (in: Seed=0x5c8f9c8 | out: Seed=0x5c8f9c8) returned 0x846c18e [0197.042] ReadFile (in: hFile=0x2064, lpBuffer=0x7c3bf68, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x5c8f9c4, lpOverlapped=0x0 | out: lpBuffer=0x7c3bf68*, lpNumberOfBytesRead=0x5c8f9c4*=0x103, lpOverlapped=0x0) returned 1 [0197.042] SetFilePointerEx (in: hFile=0x2064, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.042] WriteFile (in: hFile=0x2064, lpBuffer=0x7c3fb70*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x5c8f9c8, lpOverlapped=0x0 | out: lpBuffer=0x7c3fb70*, lpNumberOfBytesWritten=0x5c8f9c8*=0x103, lpOverlapped=0x0) returned 1 [0200.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fc0 [0200.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0200.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0200.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c3fb70) returned 1 [0200.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c3bf68) returned 1 [0200.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0200.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a245d8) returned 1 [0200.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38160 [0200.545] SetFilePointerEx (in: hFile=0x2064, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.545] WriteFile (in: hFile=0x2064, lpBuffer=0x7a39308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5c8fa50, lpOverlapped=0x0 | out: lpBuffer=0x7a39308*, lpNumberOfBytesWritten=0x5c8fa50*=0x10c, lpOverlapped=0x0) returned 1 [0201.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e858f0 [0201.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3bae0 [0201.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0201.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0201.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c680 [0201.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0201.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0201.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0201.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0201.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e858f0) returned 1 [0201.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.045] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="d6") returned 2 [0201.045] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="cb") returned 2 [0201.045] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="d7") returned 2 [0201.045] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="6c") returned 2 [0201.045] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="67") returned 2 [0201.045] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="d9") returned 2 [0201.045] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="fd") returned 2 [0201.045] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="b6") returned 2 [0201.045] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="d1") returned 2 [0201.045] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="ca") returned 2 [0201.045] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="71") returned 2 [0201.045] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="cc") returned 2 [0201.045] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="8d") returned 2 [0201.046] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="7c") returned 2 [0201.046] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="38") returned 2 [0201.046] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="94") returned 2 [0201.046] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="bb") returned 2 [0201.046] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="1b") returned 2 [0201.046] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="d9") returned 2 [0201.046] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="18") returned 2 [0201.046] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="bd") returned 2 [0201.046] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="a4") returned 2 [0201.046] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="75") returned 2 [0201.046] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="3c") returned 2 [0201.046] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="27") returned 2 [0201.046] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="a5") returned 2 [0201.046] RtlInitAnsiString (in: DestinationString=0x5c8f9d8, SourceString="d6cbd76c67d9fdb6d1ca71cc8d7c3894bb1bd918bda4753c27a5" | out: DestinationString="d6cbd76c67d9fdb6d1ca71cc8d7c3894bb1bd918bda4753c27a5") [0201.046] RtlAnsiStringToUnicodeString (in: DestinationString=0x5c8f9d0, SourceString="d6cbd76c67d9fdb6d1ca71cc8d7c3894bb1bd918bda4753c27a5", AllocateDestinationString=1 | out: DestinationString="d6cbd76c67d9fdb6d1ca71cc8d7c3894bb1bd918bda4753c27a5") returned 0x0 [0201.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3bb58 [0201.046] wcscat (in: _Dest=0x7ddbfa8, _Source="d6cbd76c67d9f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\d6cbd76c67d9f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\d6cbd76c67d9f" [0201.046] wcscat (in: _Dest=0x7ddbfa8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\d6cbd76c67d9f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\d6cbd76c67d9f.68814f" [0201.046] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\d6cbd76c67d9f.68814f", NtPathName=0x5c8f9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\d6cbd76c67d9f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddcde0 [0201.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcde0) returned 1 [0201.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e96578) returned 1 [0201.297] NtQueryInformationFile (in: FileHandle=0x2064, IoStatusBlock=0x5c8f9a0, FileInformation=0x5c8f9a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5c8f9a0, FileInformation=0x5c8f9a8) returned 0x0 [0201.297] NtSetInformationFile (FileHandle=0x2064, IoStatusBlock=0x5c8f9a0, FileInformation=0x5c8f9a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddbfa8) returned 1 [0205.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bb58) returned 1 [0205.809] FlushFileBuffers (hFile=0x2064) returned 1 [0205.828] CloseHandle (hObject=0x2064) returned 1 [0206.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddfc00 [0206.283] wcscpy (in: _Dest=0x7ddfc00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\" [0206.283] wcscat (in: _Dest=0x7ddfc00, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\68814F-Readme.txt" [0206.283] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\68814f-readme.txt")) returned 0xffffffff [0206.284] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.337] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5c8f9e4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x5c8f9e4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.339] CloseHandle (hObject=0x17ec) returned 1 [0210.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddfc00) returned 1 [0210.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7970) returned 1 Thread: id = 6202 os_tid = 0x988 [0189.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json")) returned 0x2020 [0190.588] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0197.283] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12e8 [0197.283] GetFileSizeEx (in: hFile=0x12e8, lpFileSize=0x796f994 | out: lpFileSize=0x796f994*=265) returned 1 [0197.283] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.285] ReadFile (in: hFile=0x12e8, lpBuffer=0x796f970, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x796f980, lpOverlapped=0x0 | out: lpBuffer=0x796f970*, lpNumberOfBytesRead=0x796f980*=0x4, lpOverlapped=0x0) returned 1 [0197.286] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0197.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4a0 [0197.287] NtQuerySystemTime (in: CurrentTime=0x796f908 | out: CurrentTime=0x796f908*=132462177758724000) returned 0x0 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x785a1ee0 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x56700e [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x1bc38df2 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x489e8ac1 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x4691c371 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x179775ce [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x68a7a0f7 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x34c1cdaf [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x6fdb9e6a [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x5f2f73f8 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x74f914e9 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x18159b11 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x57534534 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x201e9a94 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x4dc8840c [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x6f1f4b3b [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x481337f3 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x16acd62b [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x3c9194c1 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x46e0fe40 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x398e5741 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x6296c467 [0197.287] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x124d9b00 [0197.288] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x2cb06d7b [0197.288] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x2b417a64 [0197.288] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x2ccc3074 [0197.288] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x467c8751 [0197.288] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x1374dbfa [0197.288] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x7e2dc987 [0197.288] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x71c723f0 [0197.288] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x53cb187a [0197.288] RtlRandomEx (in: Seed=0x796f900 | out: Seed=0x796f900) returned 0x4d6dce5e [0197.299] ReadFile (in: hFile=0x12e8, lpBuffer=0x7dae3e0, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0x796f8fc, lpOverlapped=0x0 | out: lpBuffer=0x7dae3e0*, lpNumberOfBytesRead=0x796f8fc*=0x109, lpOverlapped=0x0) returned 1 [0197.300] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.300] WriteFile (in: hFile=0x12e8, lpBuffer=0x7db1fe8*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x796f900, lpOverlapped=0x0 | out: lpBuffer=0x7db1fe8*, lpNumberOfBytesWritten=0x796f900*=0x109, lpOverlapped=0x0) returned 1 [0201.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0201.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0201.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0201.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db1fe8) returned 1 [0201.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dae3e0) returned 1 [0201.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0201.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38160 [0201.048] SetFilePointerEx (in: hFile=0x12e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.048] WriteFile (in: hFile=0x12e8, lpBuffer=0x7a39308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x796f988, lpOverlapped=0x0 | out: lpBuffer=0x7a39308*, lpNumberOfBytesWritten=0x796f988*=0x10c, lpOverlapped=0x0) returned 1 [0201.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24ae8 [0201.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51458 [0201.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c748 [0201.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c748) returned 1 [0201.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c748 [0201.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cab8 [0201.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0201.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0201.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0201.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ae8) returned 1 [0201.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.304] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="c5") returned 2 [0201.304] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="e3") returned 2 [0201.304] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="9f") returned 2 [0201.304] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="1e") returned 2 [0201.304] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="cc") returned 2 [0201.305] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="be") returned 2 [0201.305] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="0c") returned 2 [0201.305] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="78") returned 2 [0201.305] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="2e") returned 2 [0201.305] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="c4") returned 2 [0201.305] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="a1") returned 2 [0201.305] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="c5") returned 2 [0201.305] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="53") returned 2 [0201.305] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="28") returned 2 [0201.305] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="44") returned 2 [0201.305] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="b5") returned 2 [0201.305] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="ed") returned 2 [0201.305] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="d3") returned 2 [0201.305] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="f8") returned 2 [0201.305] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="fb") returned 2 [0201.305] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="78") returned 2 [0201.305] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="59") returned 2 [0201.305] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="16") returned 2 [0201.305] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="cf") returned 2 [0201.305] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="80") returned 2 [0201.305] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="eb") returned 2 [0201.305] RtlInitAnsiString (in: DestinationString=0x796f910, SourceString="c5e39f1eccbe0c782ec4a1c5532844b5edd3f8fb785916cf80eb" | out: DestinationString="c5e39f1eccbe0c782ec4a1c5532844b5edd3f8fb785916cf80eb") [0201.305] RtlAnsiStringToUnicodeString (in: DestinationString=0x796f908, SourceString="c5e39f1eccbe0c782ec4a1c5532844b5edd3f8fb785916cf80eb", AllocateDestinationString=1 | out: DestinationString="c5e39f1eccbe0c782ec4a1c5532844b5edd3f8fb785916cf80eb") returned 0x0 [0201.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d517a0 [0201.306] wcscat (in: _Dest=0x7ddf4b0, _Source="c5e39f1eccbe0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\c5e39f1eccbe0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\c5e39f1eccbe0" [0201.306] wcscat (in: _Dest=0x7ddf4b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\c5e39f1eccbe0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\c5e39f1eccbe0.68814f" [0201.306] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\c5e39f1eccbe0.68814f", NtPathName=0x796f900, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\c5e39f1eccbe0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddcb50 [0208.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcb50) returned 1 [0208.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e95f00) returned 1 [0208.572] NtQueryInformationFile (in: FileHandle=0x12e8, IoStatusBlock=0x796f8d8, FileInformation=0x796f8e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x796f8d8, FileInformation=0x796f8e0) returned 0x0 [0208.572] NtSetInformationFile (FileHandle=0x12e8, IoStatusBlock=0x796f8d8, FileInformation=0x796f8e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf4b0) returned 1 [0209.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0209.018] FlushFileBuffers (hFile=0x12e8) returned 1 [0210.342] CloseHandle (hObject=0x12e8) returned 1 [0210.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddffa8 [0210.344] wcscpy (in: _Dest=0x7ddffa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\" [0210.344] wcscat (in: _Dest=0x7ddffa8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\68814F-Readme.txt" [0210.344] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\68814f-readme.txt")) returned 0xffffffff [0210.344] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x12e8 [0210.345] WriteFile (in: hFile=0x12e8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x796f91c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x796f91c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.347] CloseHandle (hObject=0x12e8) returned 1 [0210.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddffa8) returned 1 [0210.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7a98) returned 1 Thread: id = 6203 os_tid = 0x122c [0189.486] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json")) returned 0x2020 [0190.588] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0197.300] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd7c [0197.301] GetFileSizeEx (in: hFile=0xd7c, lpFileSize=0x5d3fb3c | out: lpFileSize=0x5d3fb3c*=319) returned 1 [0197.301] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x13b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.301] ReadFile (in: hFile=0xd7c, lpBuffer=0x5d3fb18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5d3fb28, lpOverlapped=0x0 | out: lpBuffer=0x5d3fb18*, lpNumberOfBytesRead=0x5d3fb28*=0x4, lpOverlapped=0x0) returned 1 [0197.303] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4a0 [0197.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8d8 [0197.303] NtQuerySystemTime (in: CurrentTime=0x5d3fab0 | out: CurrentTime=0x5d3fab0*=132462177758880000) returned 0x0 [0197.303] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x7f15cc2c [0197.303] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x2112a492 [0197.303] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x715c3705 [0197.303] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x2c4cf513 [0197.303] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x251ebf9c [0197.303] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x6cc195ff [0197.303] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x46d09751 [0197.303] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x21c8882d [0197.303] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x2c50a15f [0197.303] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x9990624 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x54da9f47 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0xd8bf6e9 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x4a26602a [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x40087e29 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x52218d44 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x3cdaa861 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x2cddeca5 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x7f6720d8 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x3ccec553 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0xabfb082 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x12a34c80 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x52e22a2e [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0xb8d7ce4 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x6254a70f [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x169a65ab [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x565a3145 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x33ea7955 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x6e23e3f4 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x9e1b746 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x160c40a8 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0x4c780b76 [0197.304] RtlRandomEx (in: Seed=0x5d3faa8 | out: Seed=0x5d3faa8) returned 0xef5bd5b [0197.317] ReadFile (in: hFile=0xd7c, lpBuffer=0x7db5bf0, nNumberOfBytesToRead=0x13f, lpNumberOfBytesRead=0x5d3faa4, lpOverlapped=0x0 | out: lpBuffer=0x7db5bf0*, lpNumberOfBytesRead=0x5d3faa4*=0x13f, lpOverlapped=0x0) returned 1 [0197.317] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.317] WriteFile (in: hFile=0xd7c, lpBuffer=0x7db97f8*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x5d3faa8, lpOverlapped=0x0 | out: lpBuffer=0x7db97f8*, lpNumberOfBytesWritten=0x5d3faa8*=0x13f, lpOverlapped=0x0) returned 1 [0199.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd920 [0199.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd858 [0199.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd858) returned 1 [0199.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db97f8) returned 1 [0199.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db5bf0) returned 1 [0199.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0199.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24740) returned 1 [0199.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86998 [0199.963] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.963] WriteFile (in: hFile=0xd7c, lpBuffer=0x7cac368*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5d3fb30, lpOverlapped=0x0 | out: lpBuffer=0x7cac368*, lpNumberOfBytesWritten=0x5d3fb30*=0x10c, lpOverlapped=0x0) returned 1 [0200.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0200.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0200.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bcf8 [0200.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0200.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0200.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0200.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.745] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.745] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.745] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="98") returned 2 [0200.745] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="2a") returned 2 [0200.745] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="35") returned 2 [0200.745] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.745] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="35") returned 2 [0200.745] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.746] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="45") returned 2 [0200.746] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="a7") returned 2 [0200.746] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="41") returned 2 [0200.746] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="7f") returned 2 [0200.746] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="4b") returned 2 [0200.746] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="41") returned 2 [0200.746] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="b7") returned 2 [0200.746] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="64") returned 2 [0200.746] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="74") returned 2 [0200.746] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="2c") returned 2 [0200.746] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="de") returned 2 [0200.746] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="de") returned 2 [0200.746] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="22") returned 2 [0200.746] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.746] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="e9") returned 2 [0200.746] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="a9") returned 2 [0200.747] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.747] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="00") returned 2 [0200.747] RtlInitAnsiString (in: DestinationString=0x5d3fab8, SourceString="fcff982a35d335a845a7417f4b41b764742cdede22d3e9a9bc00" | out: DestinationString="fcff982a35d335a845a7417f4b41b764742cdede22d3e9a9bc00") [0200.747] RtlAnsiStringToUnicodeString (in: DestinationString=0x5d3fab0, SourceString="fcff982a35d335a845a7417f4b41b764742cdede22d3e9a9bc00", AllocateDestinationString=1 | out: DestinationString="fcff982a35d335a845a7417f4b41b764742cdede22d3e9a9bc00") returned 0x0 [0200.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c2e8 [0200.747] wcscat (in: _Dest=0x7cd4290, _Source="fcff982a35d33" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\fcff982a35d33") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\fcff982a35d33" [0200.747] wcscat (in: _Dest=0x7cd4290, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\fcff982a35d33.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\fcff982a35d33.68814f" [0200.747] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\fcff982a35d33.68814f", NtPathName=0x5d3faa8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\fcff982a35d33.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7b87658 [0201.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87658) returned 1 [0201.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cca8c0) returned 1 [0201.074] NtQueryInformationFile (in: FileHandle=0xd7c, IoStatusBlock=0x5d3fa80, FileInformation=0x5d3fa88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5d3fa80, FileInformation=0x5d3fa88) returned 0x0 [0201.074] NtSetInformationFile (FileHandle=0xd7c, IoStatusBlock=0x5d3fa80, FileInformation=0x5d3fa88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4290) returned 1 [0201.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c2e8) returned 1 [0201.328] FlushFileBuffers (hFile=0xd7c) returned 1 [0201.336] CloseHandle (hObject=0xd7c) returned 1 [0205.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddbd38 [0205.841] wcscpy (in: _Dest=0x7ddbd38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\" [0205.841] wcscat (in: _Dest=0x7ddbd38, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\68814F-Readme.txt" [0205.841] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\68814f-readme.txt")) returned 0xffffffff [0205.841] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1734 [0206.575] WriteFile (in: hFile=0x1734, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5d3fac4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x5d3fac4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.416] CloseHandle (hObject=0x1734) returned 1 [0215.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddbd38) returned 1 [0215.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7bc0) returned 1 Thread: id = 6204 os_tid = 0x123c [0189.486] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json")) returned 0x2020 [0190.589] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0197.317] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12fc [0197.318] GetFileSizeEx (in: hFile=0x12fc, lpFileSize=0x40cf97c | out: lpFileSize=0x40cf97c*=278) returned 1 [0197.318] SetFilePointerEx (in: hFile=0x12fc, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.318] ReadFile (in: hFile=0x12fc, lpBuffer=0x40cf958, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x40cf968, lpOverlapped=0x0 | out: lpBuffer=0x40cf958*, lpNumberOfBytesRead=0x40cf968*=0x4, lpOverlapped=0x0) returned 1 [0197.320] SetFilePointerEx (in: hFile=0x12fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8d8 [0197.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb08 [0197.321] NtQuerySystemTime (in: CurrentTime=0x40cf8f0 | out: CurrentTime=0x40cf8f0*=132462177759036000) returned 0x0 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x5555c08 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x65b66752 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x70a33007 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x5a6373c6 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x4ba1c841 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x7427bda0 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x4ea505c1 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x70c7c932 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x1121adc0 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x4607bae0 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x284048d9 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x58861fcb [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x5d7981f9 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x11663078 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x778b6ea3 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x300a7b83 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x114c8680 [0197.321] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x57127b9e [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x171e8c5b [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x57966ced [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x40a35c76 [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x2501dbcb [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x74837f6e [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x6f03ab4d [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x42a9a762 [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x3f94d241 [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x1131ef27 [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x79873480 [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x1439e7f8 [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x79ec1ec7 [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x7ce61de4 [0197.322] RtlRandomEx (in: Seed=0x40cf8e8 | out: Seed=0x40cf8e8) returned 0x25a6afb1 [0197.331] ReadFile (in: hFile=0x12fc, lpBuffer=0x7dbd400, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0x40cf8e4, lpOverlapped=0x0 | out: lpBuffer=0x7dbd400*, lpNumberOfBytesRead=0x40cf8e4*=0x116, lpOverlapped=0x0) returned 1 [0197.331] SetFilePointerEx (in: hFile=0x12fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.331] WriteFile (in: hFile=0x12fc, lpBuffer=0x7dc1008*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x40cf8e8, lpOverlapped=0x0 | out: lpBuffer=0x7dc1008*, lpNumberOfBytesWritten=0x40cf8e8*=0x116, lpOverlapped=0x0) returned 1 [0199.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd8d0 [0199.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd970 [0199.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd970) returned 1 [0199.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc1008) returned 1 [0199.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dbd400) returned 1 [0199.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51020) returned 1 [0199.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a242c0) returned 1 [0199.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86128 [0199.968] SetFilePointerEx (in: hFile=0x12fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.968] WriteFile (in: hFile=0x12fc, lpBuffer=0x7cad718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x40cf970, lpOverlapped=0x0 | out: lpBuffer=0x7cad718*, lpNumberOfBytesWritten=0x40cf970*=0x10c, lpOverlapped=0x0) returned 1 [0200.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0200.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1d0) returned 1 [0200.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c1d0 [0200.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0200.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0200.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc98) returned 1 [0200.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.756] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="84") returned 2 [0200.756] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="7f") returned 2 [0200.756] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="8b") returned 2 [0200.756] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="51") returned 2 [0200.756] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="8b") returned 2 [0200.756] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="55") returned 2 [0200.756] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="02") returned 2 [0200.756] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="6f") returned 2 [0200.756] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="8b") returned 2 [0200.756] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.756] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="8d") returned 2 [0200.756] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="42") returned 2 [0200.756] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.756] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="1d") returned 2 [0200.756] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.756] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="1d") returned 2 [0200.756] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="47") returned 2 [0200.756] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.756] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="77") returned 2 [0200.756] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="80") returned 2 [0200.756] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="ae") returned 2 [0200.756] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.756] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="3a") returned 2 [0200.756] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="21") returned 2 [0200.756] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.756] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="82") returned 2 [0200.757] RtlInitAnsiString (in: DestinationString=0x40cf8f8, SourceString="847f8b518b55026f8b0c8d42a81dff1d47e87780ae5a3a21dd82" | out: DestinationString="847f8b518b55026f8b0c8d42a81dff1d47e87780ae5a3a21dd82") [0200.757] RtlAnsiStringToUnicodeString (in: DestinationString=0x40cf8f0, SourceString="847f8b518b55026f8b0c8d42a81dff1d47e87780ae5a3a21dd82", AllocateDestinationString=1 | out: DestinationString="847f8b518b55026f8b0c8d42a81dff1d47e87780ae5a3a21dd82") returned 0x0 [0200.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c540 [0200.757] wcscat (in: _Dest=0x7cd4500, _Source="847f8b518b550" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\847f8b518b550") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\847f8b518b550" [0200.757] wcscat (in: _Dest=0x7cd4500, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\847f8b518b550.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\847f8b518b550.68814f" [0200.757] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\847f8b518b550.68814f", NtPathName=0x40cf8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\847f8b518b550.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7b878e8 [0201.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b878e8) returned 1 [0201.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd5140) returned 1 [0201.071] NtQueryInformationFile (in: FileHandle=0x12fc, IoStatusBlock=0x40cf8c0, FileInformation=0x40cf8c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x40cf8c0, FileInformation=0x40cf8c8) returned 0x0 [0201.071] NtSetInformationFile (FileHandle=0x12fc, IoStatusBlock=0x40cf8c0, FileInformation=0x40cf8c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4500) returned 1 [0201.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c540) returned 1 [0201.321] FlushFileBuffers (hFile=0x12fc) returned 1 [0201.332] CloseHandle (hObject=0x12fc) returned 1 [0205.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddbfa8 [0205.838] wcscpy (in: _Dest=0x7ddbfa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\" [0205.838] wcscat (in: _Dest=0x7ddbfa8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\68814F-Readme.txt" [0205.838] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\68814f-readme.txt")) returned 0xffffffff [0205.838] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd90 [0206.574] WriteFile (in: hFile=0xd90, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x40cf904, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x40cf904*=0x8b9, lpOverlapped=0x0) returned 1 [0210.402] CloseHandle (hObject=0xd90) returned 1 [0215.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddbfa8) returned 1 [0215.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7ce8) returned 1 Thread: id = 6205 os_tid = 0x9c8 [0189.486] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json")) returned 0x2020 [0190.590] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0197.332] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a80 [0197.332] GetFileSizeEx (in: hFile=0x1a80, lpFileSize=0x78bf7dc | out: lpFileSize=0x78bf7dc*=257) returned 1 [0197.332] SetFilePointerEx (in: hFile=0x1a80, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.332] ReadFile (in: hFile=0x1a80, lpBuffer=0x78bf7b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x78bf7c8, lpOverlapped=0x0 | out: lpBuffer=0x78bf7b8*, lpNumberOfBytesRead=0x78bf7c8*=0x4, lpOverlapped=0x0) returned 1 [0197.334] SetFilePointerEx (in: hFile=0x1a80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb08 [0197.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0197.334] NtQuerySystemTime (in: CurrentTime=0x78bf750 | out: CurrentTime=0x78bf750*=132462177759192000) returned 0x0 [0197.334] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x60b34e9b [0197.334] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x23f8899 [0197.334] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x766d4c5a [0197.334] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x980dc [0197.334] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x53da2b21 [0197.334] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x8db4d07 [0197.334] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x358d80ee [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x10cbfc40 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x5147d723 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x2e9feb27 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x359b4732 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x1f1214a9 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x795af55b [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x1539e1ae [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x64da3e27 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x43c5359f [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x422b4526 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x50123ad6 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x3d54c03c [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x6d65d5b4 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x106020b [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x5345671e [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x5b829790 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x133dd9c8 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x2436ae57 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x763f0ce7 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x368b19c1 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x436fad4d [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x69f2b0ff [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x7524765b [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x38a028e9 [0197.335] RtlRandomEx (in: Seed=0x78bf748 | out: Seed=0x78bf748) returned 0x47b6dcf7 [0197.344] ReadFile (in: hFile=0x1a80, lpBuffer=0x7dc4c10, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0x78bf744, lpOverlapped=0x0 | out: lpBuffer=0x7dc4c10*, lpNumberOfBytesRead=0x78bf744*=0x101, lpOverlapped=0x0) returned 1 [0197.344] SetFilePointerEx (in: hFile=0x1a80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.345] WriteFile (in: hFile=0x1a80, lpBuffer=0x7dc8818*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x78bf748, lpOverlapped=0x0 | out: lpBuffer=0x7dc8818*, lpNumberOfBytesWritten=0x78bf748*=0x101, lpOverlapped=0x0) returned 1 [0200.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0200.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a38 [0200.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a38) returned 1 [0200.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc8818) returned 1 [0200.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc4c10) returned 1 [0200.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0200.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a241e8) returned 1 [0200.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37f80 [0200.558] SetFilePointerEx (in: hFile=0x1a80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.558] WriteFile (in: hFile=0x1a80, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x78bf7d0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x78bf7d0*=0x10c, lpOverlapped=0x0) returned 1 [0204.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850a0 [0204.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c4c8 [0204.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0204.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ac8) returned 1 [0204.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4ac8 [0204.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0204.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0204.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0204.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c4c8) returned 1 [0204.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850a0) returned 1 [0204.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7e70 [0204.335] sprintf (in: _Dest=0x7ad7e70, _Format="%c%c" | out: _Dest="d4") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e72, _Format="%c%c" | out: _Dest="b7") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e74, _Format="%c%c" | out: _Dest="3d") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e76, _Format="%c%c" | out: _Dest="da") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e78, _Format="%c%c" | out: _Dest="a3") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e7a, _Format="%c%c" | out: _Dest="29") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e7c, _Format="%c%c" | out: _Dest="ca") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e7e, _Format="%c%c" | out: _Dest="62") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e80, _Format="%c%c" | out: _Dest="aa") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e82, _Format="%c%c" | out: _Dest="82") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e84, _Format="%c%c" | out: _Dest="b3") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e86, _Format="%c%c" | out: _Dest="8e") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e88, _Format="%c%c" | out: _Dest="dd") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e8a, _Format="%c%c" | out: _Dest="e7") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e8c, _Format="%c%c" | out: _Dest="16") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e8e, _Format="%c%c" | out: _Dest="fc") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e90, _Format="%c%c" | out: _Dest="8b") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e92, _Format="%c%c" | out: _Dest="97") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e94, _Format="%c%c" | out: _Dest="94") returned 2 [0204.335] sprintf (in: _Dest=0x7ad7e96, _Format="%c%c" | out: _Dest="24") returned 2 [0204.336] sprintf (in: _Dest=0x7ad7e98, _Format="%c%c" | out: _Dest="f5") returned 2 [0204.336] sprintf (in: _Dest=0x7ad7e9a, _Format="%c%c" | out: _Dest="0c") returned 2 [0204.336] sprintf (in: _Dest=0x7ad7e9c, _Format="%c%c" | out: _Dest="45") returned 2 [0204.336] sprintf (in: _Dest=0x7ad7e9e, _Format="%c%c" | out: _Dest="26") returned 2 [0204.336] sprintf (in: _Dest=0x7ad7ea0, _Format="%c%c" | out: _Dest="c7") returned 2 [0204.336] sprintf (in: _Dest=0x7ad7ea2, _Format="%c%c" | out: _Dest="b3") returned 2 [0204.336] RtlInitAnsiString (in: DestinationString=0x78bf758, SourceString="d4b73ddaa329ca62aa82b38edde716fc8b979424f50c4526c7b3" | out: DestinationString="d4b73ddaa329ca62aa82b38edde716fc8b979424f50c4526c7b3") [0204.336] RtlAnsiStringToUnicodeString (in: DestinationString=0x78bf750, SourceString="d4b73ddaa329ca62aa82b38edde716fc8b979424f50c4526c7b3", AllocateDestinationString=1 | out: DestinationString="d4b73ddaa329ca62aa82b38edde716fc8b979424f50c4526c7b3") returned 0x0 [0204.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c450 [0204.336] wcscat (in: _Dest=0x7ddf720, _Source="d4b73ddaa329c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\d4b73ddaa329c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\d4b73ddaa329c" [0204.336] wcscat (in: _Dest=0x7ddf720, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\d4b73ddaa329c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\d4b73ddaa329c.68814f" [0204.336] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\d4b73ddaa329c.68814f", NtPathName=0x78bf748, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\d4b73ddaa329c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd96d8 [0206.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd96d8) returned 1 [0206.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceca88) returned 1 [0206.222] NtQueryInformationFile (in: FileHandle=0x1a80, IoStatusBlock=0x78bf720, FileInformation=0x78bf728, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x78bf720, FileInformation=0x78bf728) returned 0x0 [0206.222] NtSetInformationFile (FileHandle=0x1a80, IoStatusBlock=0x78bf720, FileInformation=0x78bf728, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf720) returned 1 [0208.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c450) returned 1 [0208.722] FlushFileBuffers (hFile=0x1a80) returned 1 [0208.734] CloseHandle (hObject=0x1a80) returned 1 [0209.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7a5f548 [0209.119] wcscpy (in: _Dest=0x7a5f548, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\" [0209.119] wcscat (in: _Dest=0x7a5f548, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\68814F-Readme.txt" [0209.119] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\68814f-readme.txt")) returned 0xffffffff [0209.120] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17d0 [0211.247] WriteFile (in: hFile=0x17d0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x78bf764, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x78bf764*=0x8b9, lpOverlapped=0x0) returned 1 [0215.864] CloseHandle (hObject=0x17d0) returned 1 [0222.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f548) returned 1 [0222.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7e10) returned 1 Thread: id = 6206 os_tid = 0x9d8 [0189.487] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json")) returned 0x2020 [0190.590] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", dwFileAttributes=0x20) returned 1 [0197.345] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12d0 [0197.346] GetFileSizeEx (in: hFile=0x12d0, lpFileSize=0x5d9fbb4 | out: lpFileSize=0x5d9fbb4*=243) returned 1 [0197.346] SetFilePointerEx (in: hFile=0x12d0, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.346] ReadFile (in: hFile=0x12d0, lpBuffer=0x5d9fb90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5d9fba0, lpOverlapped=0x0 | out: lpBuffer=0x5d9fb90*, lpNumberOfBytesRead=0x5d9fba0*=0x4, lpOverlapped=0x0) returned 1 [0197.347] SetFilePointerEx (in: hFile=0x12d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0197.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0197.348] NtQuerySystemTime (in: CurrentTime=0x5d9fb28 | out: CurrentTime=0x5d9fb28*=132462177759192000) returned 0x0 [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x1fca6090 [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x4ed6f90c [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x1bb84724 [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x64b19aae [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x3e140769 [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x38dec0df [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x592cbbf1 [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x7b5845bc [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x5d41a469 [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x471731bb [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x32bf12a1 [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x126ff38 [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x72b8af5b [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x3c223a8c [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x7570aa3d [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x4225d050 [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x265a1ce [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x59575a1a [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x1ee2185 [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x38c176ff [0197.348] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x58f5230e [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x46a60ff6 [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x38d32ab2 [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0xd0aff38 [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x7f54f04b [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x4bd5ee0e [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x5d41a469 [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x11f3da30 [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x5e687b9c [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x47b6dcf7 [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x1159657d [0197.349] RtlRandomEx (in: Seed=0x5d9fb20 | out: Seed=0x5d9fb20) returned 0x24c03a2 [0197.360] ReadFile (in: hFile=0x12d0, lpBuffer=0x7dcc420, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0x5d9fb1c, lpOverlapped=0x0 | out: lpBuffer=0x7dcc420*, lpNumberOfBytesRead=0x5d9fb1c*=0xf3, lpOverlapped=0x0) returned 1 [0197.360] SetFilePointerEx (in: hFile=0x12d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.360] WriteFile (in: hFile=0x12d0, lpBuffer=0x10d90060*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x5d9fb20, lpOverlapped=0x0 | out: lpBuffer=0x10d90060*, lpNumberOfBytesWritten=0x5d9fb20*=0xf3, lpOverlapped=0x0) returned 1 [0203.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0203.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0203.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0203.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d90060) returned 1 [0203.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dcc420) returned 1 [0203.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0203.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24500) returned 1 [0203.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38040 [0203.198] SetFilePointerEx (in: hFile=0x12d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.198] WriteFile (in: hFile=0x12d0, lpBuffer=0x7cad4e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5d9fba8, lpOverlapped=0x0 | out: lpBuffer=0x7cad4e8*, lpNumberOfBytesWritten=0x5d9fba8*=0x10c, lpOverlapped=0x0) returned 1 [0206.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c9f0 [0206.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0206.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0206.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4ca8 [0206.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0206.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0206.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28e0) returned 1 [0206.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0206.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.235] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="69") returned 2 [0206.235] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="76") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="ba") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="ba") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="64") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="61") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="6c") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="24") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="af") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="9e") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="9a") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="aa") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="99") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="8f") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="d5") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="6b") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="e1") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="31") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="6d") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="df") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="2d") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="5a") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="69") returned 2 [0206.236] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="d9") returned 2 [0206.237] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="4b") returned 2 [0206.237] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="39") returned 2 [0206.237] RtlInitAnsiString (in: DestinationString=0x5d9fb30, SourceString="6976baba64616c24af9e9aaa998fd56be1316ddf2d5a69d94b39" | out: DestinationString="6976baba64616c24af9e9aaa998fd56be1316ddf2d5a69d94b39") [0206.237] RtlAnsiStringToUnicodeString (in: DestinationString=0x5d9fb28, SourceString="6976baba64616c24af9e9aaa998fd56be1316ddf2d5a69d94b39", AllocateDestinationString=1 | out: DestinationString="6976baba64616c24af9e9aaa998fd56be1316ddf2d5a69d94b39") returned 0x0 [0206.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c360 [0206.237] wcscat (in: _Dest=0x7a5f680, _Source="6976baba64616" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\6976baba64616") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\6976baba64616" [0206.237] wcscat (in: _Dest=0x7a5f680, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\6976baba64616.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\6976baba64616.68814f" [0206.237] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\6976baba64616.68814f", NtPathName=0x5d9fb20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\6976baba64616.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd96d8 [0208.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd96d8) returned 1 [0208.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94dc0) returned 1 [0208.736] NtQueryInformationFile (in: FileHandle=0x12d0, IoStatusBlock=0x5d9faf8, FileInformation=0x5d9fb00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5d9faf8, FileInformation=0x5d9fb00) returned 0x0 [0208.736] NtSetInformationFile (FileHandle=0x12d0, IoStatusBlock=0x5d9faf8, FileInformation=0x5d9fb00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f680) returned 1 [0209.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c360) returned 1 [0209.124] FlushFileBuffers (hFile=0x12d0) returned 1 [0210.411] CloseHandle (hObject=0x12d0) returned 1 [0213.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7a5f680 [0213.480] wcscpy (in: _Dest=0x7a5f680, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\" [0213.480] wcscat (in: _Dest=0x7a5f680, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\68814F-Readme.txt" [0213.480] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\68814f-readme.txt")) returned 0xffffffff [0213.480] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x948 [0213.917] WriteFile (in: hFile=0x948, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5d9fb3c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x5d9fb3c*=0x8b9, lpOverlapped=0x0) returned 1 [0213.994] CloseHandle (hObject=0x948) returned 1 [0214.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f680) returned 1 [0214.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7f38) returned 1 Thread: id = 6207 os_tid = 0x9e8 [0189.487] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json")) returned 0x2020 [0190.591] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0197.366] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2158 [0197.366] GetFileSizeEx (in: hFile=0x2158, lpFileSize=0x919fd8c | out: lpFileSize=0x919fd8c*=251) returned 1 [0197.366] SetFilePointerEx (in: hFile=0x2158, liDistanceToMove=0xf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.367] ReadFile (in: hFile=0x2158, lpBuffer=0x919fd68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x919fd78, lpOverlapped=0x0 | out: lpBuffer=0x919fd68*, lpNumberOfBytesRead=0x919fd78*=0x4, lpOverlapped=0x0) returned 1 [0197.368] SetFilePointerEx (in: hFile=0x2158, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0197.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0197.369] NtQuerySystemTime (in: CurrentTime=0x919fd00 | out: CurrentTime=0x919fd00*=132462177759504000) returned 0x0 [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x62ef811c [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x3ec388bb [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x3e85969e [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x7570aa3d [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x3e140769 [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x6b831f79 [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x6048a127 [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x22977a59 [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x565155d3 [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x5534aa73 [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x8e40f49 [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x5417ff13 [0197.369] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x288d607e [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x6ea610a3 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x55b69f25 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x4225d050 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x779abf4c [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x2c19087c [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x3ef0a3e2 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x67d8f0ba [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x62dd807a [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x4faec15b [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x16406295 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x2168ba30 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x422b4526 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x5fda215a [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x3f65b439 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x45e7ec65 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x11f7e980 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x59046795 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x127a5cd4 [0197.370] RtlRandomEx (in: Seed=0x919fcf8 | out: Seed=0x919fcf8) returned 0x6781d8d3 [0197.380] ReadFile (in: hFile=0x2158, lpBuffer=0x10d93c68, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0x919fcf4, lpOverlapped=0x0 | out: lpBuffer=0x10d93c68*, lpNumberOfBytesRead=0x919fcf4*=0xfb, lpOverlapped=0x0) returned 1 [0197.380] SetFilePointerEx (in: hFile=0x2158, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.380] WriteFile (in: hFile=0x2158, lpBuffer=0x10d97870*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x919fcf8, lpOverlapped=0x0 | out: lpBuffer=0x10d97870*, lpNumberOfBytesWritten=0x919fcf8*=0xfb, lpOverlapped=0x0) returned 1 [0200.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0200.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0200.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0200.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d97870) returned 1 [0200.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d93c68) returned 1 [0200.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d514d0) returned 1 [0200.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84ff0) returned 1 [0200.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a380a0 [0200.554] SetFilePointerEx (in: hFile=0x2158, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.554] WriteFile (in: hFile=0x2158, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x919fd80, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x919fd80*=0x10c, lpOverlapped=0x0) returned 1 [0205.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40378 [0205.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c900 [0205.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd678 [0205.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd678) returned 1 [0205.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3edd678 [0205.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddfd8 [0205.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddf60 [0205.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddf60) returned 1 [0205.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c900) returned 1 [0205.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40378) returned 1 [0205.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0205.678] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="9b") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="20") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="fd") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="a9") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="20") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="be") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="c8") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="6f") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="b0") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="03") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="d9") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="39") returned 2 [0205.678] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="05") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="f2") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="37") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="89") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="a0") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="d3") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="f0") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="85") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="76") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="44") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="67") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="91") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="25") returned 2 [0205.679] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="8c") returned 2 [0205.679] RtlInitAnsiString (in: DestinationString=0x919fd08, SourceString="9b20fda920bec86fb003d93905f23789a0d3f08576446791258c" | out: DestinationString="9b20fda920bec86fb003d93905f23789a0d3f08576446791258c") [0205.679] RtlAnsiStringToUnicodeString (in: DestinationString=0x919fd00, SourceString="9b20fda920bec86fb003d93905f23789a0d3f08576446791258c", AllocateDestinationString=1 | out: DestinationString="9b20fda920bec86fb003d93905f23789a0d3f08576446791258c") returned 0x0 [0205.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c4c8 [0205.680] wcscat (in: _Dest=0x7ddfac8, _Source="9b20fda920bec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\9b20fda920bec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\9b20fda920bec" [0205.680] wcscat (in: _Dest=0x7ddfac8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\9b20fda920bec.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\9b20fda920bec.68814f" [0205.680] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\9b20fda920bec.68814f", NtPathName=0x919fcf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\9b20fda920bec.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0205.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd9820 [0208.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9820) returned 1 [0208.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea0730) returned 1 [0208.699] NtQueryInformationFile (in: FileHandle=0x2158, IoStatusBlock=0x919fcd0, FileInformation=0x919fcd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x919fcd0, FileInformation=0x919fcd8) returned 0x0 [0208.699] NtSetInformationFile (FileHandle=0x2158, IoStatusBlock=0x919fcd0, FileInformation=0x919fcd8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddfac8) returned 1 [0209.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c4c8) returned 1 [0209.045] FlushFileBuffers (hFile=0x2158) returned 1 [0209.063] CloseHandle (hObject=0x2158) returned 1 [0209.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7cd4500 [0209.392] wcscpy (in: _Dest=0x7cd4500, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\" [0209.392] wcscat (in: _Dest=0x7cd4500, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\68814F-Readme.txt" [0209.392] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\68814f-readme.txt")) returned 0xffffffff [0209.392] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.947] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x919fd14, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x919fd14*=0x8b9, lpOverlapped=0x0) returned 1 [0209.948] CloseHandle (hObject=0xbb8) returned 1 [0209.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4500) returned 1 [0209.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec8060) returned 1 Thread: id = 6208 os_tid = 0xa08 [0189.488] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0190.592] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0197.381] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xba8 [0197.381] GetFileSizeEx (in: hFile=0xba8, lpFileSize=0x7a1f99c | out: lpFileSize=0x7a1f99c*=259) returned 1 [0197.381] SetFilePointerEx (in: hFile=0xba8, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.381] ReadFile (in: hFile=0xba8, lpBuffer=0x7a1f978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7a1f988, lpOverlapped=0x0 | out: lpBuffer=0x7a1f978*, lpNumberOfBytesRead=0x7a1f988*=0x4, lpOverlapped=0x0) returned 1 [0197.383] SetFilePointerEx (in: hFile=0xba8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0197.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0197.383] NtQuerySystemTime (in: CurrentTime=0x7a1f910 | out: CurrentTime=0x7a1f910*=132462177759660000) returned 0x0 [0197.383] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x37dba9e3 [0197.383] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x297cc8c8 [0197.383] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x2780242a [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x1077a49a [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0xc28ae72 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x4c714d2f [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x7c6f3f7b [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x13cf39c0 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x7524765b [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x3cb81cc0 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x5eec4d15 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x188dcaf0 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x4ec109f7 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x7505b2c2 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x1dc6a963 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x19499a0f [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0xf4a9419 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x2b7ae07c [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x1f7c4c25 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x2af542bd [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x10f6d500 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x6c43f1fb [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x5e8094 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x74e27ce0 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x1fe66c95 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x7bc972c2 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x68349d09 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x10764ac0 [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x141f06af [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x53cc04fc [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x300d37ba [0197.384] RtlRandomEx (in: Seed=0x7a1f908 | out: Seed=0x7a1f908) returned 0x336478d0 [0197.393] ReadFile (in: hFile=0xba8, lpBuffer=0x10d9b478, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x7a1f904, lpOverlapped=0x0 | out: lpBuffer=0x10d9b478*, lpNumberOfBytesRead=0x7a1f904*=0x103, lpOverlapped=0x0) returned 1 [0197.393] SetFilePointerEx (in: hFile=0xba8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.393] WriteFile (in: hFile=0xba8, lpBuffer=0x10d9f080*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x7a1f908, lpOverlapped=0x0 | out: lpBuffer=0x10d9f080*, lpNumberOfBytesWritten=0x7a1f908*=0x103, lpOverlapped=0x0) returned 1 [0203.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0203.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0203.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0203.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d9f080) returned 1 [0203.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d9b478) returned 1 [0203.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0203.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85980) returned 1 [0203.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a10 [0203.191] SetFilePointerEx (in: hFile=0xba8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.192] WriteFile (in: hFile=0xba8, lpBuffer=0x7cad718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7a1f990, lpOverlapped=0x0 | out: lpBuffer=0x7cad718*, lpNumberOfBytesWritten=0x7a1f990*=0x10c, lpOverlapped=0x0) returned 1 [0206.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c9f0 [0206.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0206.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0206.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2b10 [0206.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0206.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5568 [0206.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5568) returned 1 [0206.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0206.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.157] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.157] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="09") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="0e") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="79") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="7a") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="b3") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="09") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="68") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="10") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="ca") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="80") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="bd") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="f3") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="8b") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="83") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="3f") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="4a") returned 2 [0206.157] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="cf") returned 2 [0206.158] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="b2") returned 2 [0206.158] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="97") returned 2 [0206.158] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="b7") returned 2 [0206.158] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="db") returned 2 [0206.158] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="4f") returned 2 [0206.158] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="cb") returned 2 [0206.158] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="53") returned 2 [0206.158] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="25") returned 2 [0206.158] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="36") returned 2 [0206.158] RtlInitAnsiString (in: DestinationString=0x7a1f918, SourceString="090e797ab3096810ca80bdf38b833f4acfb297b7db4fcb532536" | out: DestinationString="090e797ab3096810ca80bdf38b833f4acfb297b7db4fcb532536") [0206.158] RtlAnsiStringToUnicodeString (in: DestinationString=0x7a1f910, SourceString="090e797ab3096810ca80bdf38b833f4acfb297b7db4fcb532536", AllocateDestinationString=1 | out: DestinationString="090e797ab3096810ca80bdf38b833f4acfb297b7db4fcb532536") returned 0x0 [0206.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c108 [0206.158] wcscat (in: _Dest=0x3ec9a60, _Source="090e797ab3096" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\090e797ab3096") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\090e797ab3096" [0206.158] wcscat (in: _Dest=0x3ec9a60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\090e797ab3096.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\090e797ab3096.68814f" [0206.158] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\090e797ab3096.68814f", NtPathName=0x7a1f908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\090e797ab3096.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.158] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x144) returned 0x3e0b020 [0208.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b020) returned 1 [0208.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e97b08) returned 1 [0208.702] NtQueryInformationFile (in: FileHandle=0xba8, IoStatusBlock=0x7a1f8e0, FileInformation=0x7a1f8e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7a1f8e0, FileInformation=0x7a1f8e8) returned 0x0 [0208.702] NtSetInformationFile (FileHandle=0xba8, IoStatusBlock=0x7a1f8e0, FileInformation=0x7a1f8e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 [0209.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c108) returned 1 [0209.054] FlushFileBuffers (hFile=0xba8) returned 1 [0209.090] CloseHandle (hObject=0xba8) returned 1 [0209.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x7cd43c8 [0209.394] wcscpy (in: _Dest=0x7cd43c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\" [0209.394] wcscat (in: _Dest=0x7cd43c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\68814F-Readme.txt" [0209.394] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\68814f-readme.txt")) returned 0xffffffff [0209.394] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.954] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7a1f924, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x7a1f924*=0x8b9, lpOverlapped=0x0) returned 1 [0209.956] CloseHandle (hObject=0xbb8) returned 1 [0209.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd43c8) returned 1 [0209.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec8188) returned 1 Thread: id = 6209 os_tid = 0xa18 [0189.488] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json")) returned 0x2020 [0190.592] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0197.394] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12f4 [0197.394] GetFileSizeEx (in: hFile=0x12f4, lpFileSize=0x9b6fe6c | out: lpFileSize=0x9b6fe6c*=259) returned 1 [0197.394] SetFilePointerEx (in: hFile=0x12f4, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.394] ReadFile (in: hFile=0x12f4, lpBuffer=0x9b6fe48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b6fe58, lpOverlapped=0x0 | out: lpBuffer=0x9b6fe48*, lpNumberOfBytesRead=0x9b6fe58*=0x4, lpOverlapped=0x0) returned 1 [0197.396] SetFilePointerEx (in: hFile=0x12f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0197.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0197.396] NtQuerySystemTime (in: CurrentTime=0x9b6fde0 | out: CurrentTime=0x9b6fde0*=132462177759816000) returned 0x0 [0197.396] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x7928cf1d [0197.396] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x16406295 [0197.396] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x320307d5 [0197.396] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x7ccc5ce2 [0197.396] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x5ca74ebe [0197.396] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x57aebe41 [0197.396] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x65de8b78 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x297cc8c8 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x8a0ccba [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x402d890c [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x371f6c66 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x11775f40 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x37a57196 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x2e1c42 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x5e687b9c [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x29931d71 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x436fad4d [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x6e47f6e1 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x190be930 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x39a177ce [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x2008926b [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x38590789 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x71419cc [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x288f6ea3 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x3b84b25c [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x732373f0 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x5a72003b [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x5eb7dcac [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x33fd306c [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x19006d94 [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x7138c6e [0197.397] RtlRandomEx (in: Seed=0x9b6fdd8 | out: Seed=0x9b6fdd8) returned 0x4bd5ee0e [0197.407] ReadFile (in: hFile=0x12f4, lpBuffer=0x10da2c88, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x9b6fdd4, lpOverlapped=0x0 | out: lpBuffer=0x10da2c88*, lpNumberOfBytesRead=0x9b6fdd4*=0x103, lpOverlapped=0x0) returned 1 [0197.407] SetFilePointerEx (in: hFile=0x12f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.407] WriteFile (in: hFile=0x12f4, lpBuffer=0x10da6890*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x9b6fdd8, lpOverlapped=0x0 | out: lpBuffer=0x10da6890*, lpNumberOfBytesWritten=0x9b6fdd8*=0x103, lpOverlapped=0x0) returned 1 [0200.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0200.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0200.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0200.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10da6890) returned 1 [0200.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10da2c88) returned 1 [0200.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0200.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c98) returned 1 [0200.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a382e0 [0200.539] SetFilePointerEx (in: hFile=0x12f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.539] WriteFile (in: hFile=0x12f4, lpBuffer=0x7a38700*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9b6fe60, lpOverlapped=0x0 | out: lpBuffer=0x7a38700*, lpNumberOfBytesWritten=0x9b6fe60*=0x10c, lpOverlapped=0x0) returned 1 [0201.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0201.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3038) returned 1 [0201.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3038 [0201.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0201.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0201.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f48) returned 1 [0201.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.026] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="ae") returned 2 [0201.026] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ad") returned 2 [0201.026] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="7c") returned 2 [0201.026] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="7c") returned 2 [0201.026] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="70") returned 2 [0201.026] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="8a") returned 2 [0201.026] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="24") returned 2 [0201.027] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="b6") returned 2 [0201.027] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="97") returned 2 [0201.027] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="39") returned 2 [0201.027] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="9e") returned 2 [0201.027] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="dd") returned 2 [0201.027] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="bf") returned 2 [0201.027] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="31") returned 2 [0201.027] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="be") returned 2 [0201.027] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="41") returned 2 [0201.027] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="55") returned 2 [0201.027] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="b8") returned 2 [0201.027] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="e1") returned 2 [0201.027] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="36") returned 2 [0201.027] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="57") returned 2 [0201.027] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="f8") returned 2 [0201.027] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="4a") returned 2 [0201.027] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="80") returned 2 [0201.027] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="e1") returned 2 [0201.027] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="65") returned 2 [0201.027] RtlInitAnsiString (in: DestinationString=0x9b6fde8, SourceString="aead7c7c708a24b697399eddbf31be4155b8e13657f84a80e165" | out: DestinationString="aead7c7c708a24b697399eddbf31be4155b8e13657f84a80e165") [0201.027] RtlAnsiStringToUnicodeString (in: DestinationString=0x9b6fde0, SourceString="aead7c7c708a24b697399eddbf31be4155b8e13657f84a80e165", AllocateDestinationString=1 | out: DestinationString="aead7c7c708a24b697399eddbf31be4155b8e13657f84a80e165") returned 0x0 [0201.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c1f8 [0201.027] wcscat (in: _Dest=0x7ddb990, _Source="aead7c7c708a2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\aead7c7c708a2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\aead7c7c708a2" [0201.027] wcscat (in: _Dest=0x7ddb990, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\aead7c7c708a2.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\aead7c7c708a2.68814f" [0201.027] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\aead7c7c708a2.68814f", NtPathName=0x9b6fdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\aead7c7c708a2.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddc8c0 [0201.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc8c0) returned 1 [0201.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e95ab0) returned 1 [0201.265] NtQueryInformationFile (in: FileHandle=0x12f4, IoStatusBlock=0x9b6fdb0, FileInformation=0x9b6fdb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9b6fdb0, FileInformation=0x9b6fdb8) returned 0x0 [0201.265] NtSetInformationFile (FileHandle=0x12f4, IoStatusBlock=0x9b6fdb0, FileInformation=0x9b6fdb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb990) returned 1 [0205.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c1f8) returned 1 [0205.778] FlushFileBuffers (hFile=0x12f4) returned 1 [0205.794] CloseHandle (hObject=0x12f4) returned 1 [0206.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddb108 [0206.267] wcscpy (in: _Dest=0x7ddb108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\" [0206.267] wcscat (in: _Dest=0x7ddb108, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\68814F-Readme.txt" [0206.267] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\68814f-readme.txt")) returned 0xffffffff [0206.267] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1abc [0208.780] WriteFile (in: hFile=0x1abc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9b6fdf4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9b6fdf4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.211] CloseHandle (hObject=0x1abc) returned 1 [0210.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb108) returned 1 [0210.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec82b0) returned 1 Thread: id = 6210 os_tid = 0xa28 [0189.488] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0190.593] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0197.407] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b9c [0197.408] GetFileSizeEx (in: hFile=0x1b9c, lpFileSize=0x3bef804 | out: lpFileSize=0x3bef804*=249) returned 1 [0197.408] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.408] ReadFile (in: hFile=0x1b9c, lpBuffer=0x3bef7e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3bef7f0, lpOverlapped=0x0 | out: lpBuffer=0x3bef7e0*, lpNumberOfBytesRead=0x3bef7f0*=0x4, lpOverlapped=0x0) returned 1 [0197.414] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0197.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cae0 [0197.415] NtQuerySystemTime (in: CurrentTime=0x3bef778 | out: CurrentTime=0x3bef778*=132462177759972000) returned 0x0 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x5fe46ba [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x7bc972c2 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x128e0dc6 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x50ab7543 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x6338fc0e [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x5b984d17 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x71627054 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x58329824 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x2af542bd [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x78659826 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x15ae4a0d [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x51a84341 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x320307d5 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x6da888dd [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x59841df9 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x1578bc08 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x7b216fa8 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x8357af3 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x5ff6eca0 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0xb28ebbe [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x5c28879f [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x1ba7a600 [0197.415] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x7945c3e2 [0197.416] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0xff5c080 [0197.416] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x7c4bef36 [0197.416] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x3dc38a29 [0197.416] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x2ccdfe52 [0197.416] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x3d299a60 [0197.416] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x1fff8733 [0197.416] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0xad953b9 [0197.416] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x3adac8c5 [0197.416] RtlRandomEx (in: Seed=0x3bef770 | out: Seed=0x3bef770) returned 0x69765134 [0197.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10daa498 [0197.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dae0a0 [0197.429] ReadFile (in: hFile=0x1b9c, lpBuffer=0x10daa498, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x3bef76c, lpOverlapped=0x0 | out: lpBuffer=0x10daa498*, lpNumberOfBytesRead=0x3bef76c*=0xf9, lpOverlapped=0x0) returned 1 [0197.430] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.430] WriteFile (in: hFile=0x1b9c, lpBuffer=0x10dae0a0*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x3bef770, lpOverlapped=0x0 | out: lpBuffer=0x10dae0a0*, lpNumberOfBytesWritten=0x3bef770*=0xf9, lpOverlapped=0x0) returned 1 [0200.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0200.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0200.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0200.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dae0a0) returned 1 [0200.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10daa498) returned 1 [0200.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0200.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84db0) returned 1 [0200.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376b0 [0200.951] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.951] WriteFile (in: hFile=0x1b9c, lpBuffer=0x7cd3a60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x3bef7f8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3a60*, lpNumberOfBytesWritten=0x3bef7f8*=0x10c, lpOverlapped=0x0) returned 1 [0206.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c9f0 [0206.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5450 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5450) returned 1 [0206.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5450 [0206.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0206.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0206.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.170] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="59") returned 2 [0206.170] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="05") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="14") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="98") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="b1") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="ea") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="28") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="b7") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="f9") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="02") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="b3") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="32") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="c4") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="70") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="7b") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="20") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="68") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="19") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="43") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="49") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="3a") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="89") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="63") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="ca") returned 2 [0206.171] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="54") returned 2 [0206.172] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="28") returned 2 [0206.172] RtlInitAnsiString (in: DestinationString=0x3bef780, SourceString="59051498b1ea28b7f902b332c4707b20681943493a8963ca5428" | out: DestinationString="59051498b1ea28b7f902b332c4707b20681943493a8963ca5428") [0206.172] RtlAnsiStringToUnicodeString (in: DestinationString=0x3bef778, SourceString="59051498b1ea28b7f902b332c4707b20681943493a8963ca5428", AllocateDestinationString=1 | out: DestinationString="59051498b1ea28b7f902b332c4707b20681943493a8963ca5428") returned 0x0 [0206.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c090 [0206.172] wcscat (in: _Dest=0x7a5e438, _Source="59051498b1ea2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\59051498b1ea2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\59051498b1ea2" [0206.172] wcscat (in: _Dest=0x7a5e438, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\59051498b1ea2.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\59051498b1ea2.68814f" [0206.172] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\59051498b1ea2.68814f", NtPathName=0x3bef770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\59051498b1ea2.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0ac18 [0208.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0208.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e96bf0) returned 1 [0208.707] NtQueryInformationFile (in: FileHandle=0x1b9c, IoStatusBlock=0x3bef748, FileInformation=0x3bef750, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x3bef748, FileInformation=0x3bef750) returned 0x0 [0208.707] NtSetInformationFile (FileHandle=0x1b9c, IoStatusBlock=0x3bef748, FileInformation=0x3bef750, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e438) returned 1 [0209.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0209.087] FlushFileBuffers (hFile=0x1b9c) returned 1 [0209.103] CloseHandle (hObject=0x1b9c) returned 1 [0209.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7cd5880 [0209.401] wcscpy (in: _Dest=0x7cd5880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\" [0209.401] wcscat (in: _Dest=0x7cd5880, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\68814F-Readme.txt" [0209.401] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\68814f-readme.txt")) returned 0xffffffff [0209.401] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.966] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x3bef78c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x3bef78c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.968] CloseHandle (hObject=0xbb8) returned 1 [0209.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5880) returned 1 [0209.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec83d8) returned 1 Thread: id = 6211 os_tid = 0xa38 [0189.489] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0190.594] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0197.430] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb90 [0197.430] GetFileSizeEx (in: hFile=0xb90, lpFileSize=0x802f784 | out: lpFileSize=0x802f784*=249) returned 1 [0197.430] SetFilePointerEx (in: hFile=0xb90, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.430] ReadFile (in: hFile=0xb90, lpBuffer=0x802f760, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x802f770, lpOverlapped=0x0 | out: lpBuffer=0x802f760*, lpNumberOfBytesRead=0x802f770*=0x4, lpOverlapped=0x0) returned 1 [0197.432] SetFilePointerEx (in: hFile=0xb90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cae0 [0197.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0197.433] NtQuerySystemTime (in: CurrentTime=0x802f6f8 | out: CurrentTime=0x802f6f8*=132462177760128000) returned 0x0 [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x51a84341 [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x73dd38dc [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x79becad6 [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x58f5230e [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x25ea3848 [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x4f286e5b [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x663d6705 [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x4597e1e3 [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x10cbfc40 [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x2628dc60 [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x7d82c730 [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x5c9de1e1 [0197.433] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x56a8cbd0 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x50ad8dee [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x68a76616 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x13edb051 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x2a460668 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x71419cc [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x37d1e5aa [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x501ac58e [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x6217d46b [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x7a520631 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x1b521dc4 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x1159657d [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x2d52d1bb [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x1b149128 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x74bdbf45 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x10209940 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x774479aa [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x726fec73 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0xb3e7c08 [0197.434] RtlRandomEx (in: Seed=0x802f6f0 | out: Seed=0x802f6f0) returned 0x497d7e4 [0197.446] ReadFile (in: hFile=0xb90, lpBuffer=0x10db1ca8, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x802f6ec, lpOverlapped=0x0 | out: lpBuffer=0x10db1ca8*, lpNumberOfBytesRead=0x802f6ec*=0xf9, lpOverlapped=0x0) returned 1 [0197.447] SetFilePointerEx (in: hFile=0xb90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.447] WriteFile (in: hFile=0xb90, lpBuffer=0x10db58b0*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x802f6f0, lpOverlapped=0x0 | out: lpBuffer=0x10db58b0*, lpNumberOfBytesWritten=0x802f6f0*=0xf9, lpOverlapped=0x0) returned 1 [0200.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0200.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0200.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0200.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db58b0) returned 1 [0200.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db1ca8) returned 1 [0200.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0200.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84df8) returned 1 [0200.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38220 [0200.541] SetFilePointerEx (in: hFile=0xb90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.541] WriteFile (in: hFile=0xb90, lpBuffer=0x7a38fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x802f778, lpOverlapped=0x0 | out: lpBuffer=0x7a38fc0*, lpNumberOfBytesWritten=0x802f778*=0x10c, lpOverlapped=0x0) returned 1 [0201.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0201.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca90) returned 1 [0201.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ca90 [0201.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0201.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0201.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8b0) returned 1 [0201.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.029] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="06") returned 2 [0201.029] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="02") returned 2 [0201.029] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="7b") returned 2 [0201.029] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="73") returned 2 [0201.029] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="2a") returned 2 [0201.029] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="90") returned 2 [0201.029] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="5b") returned 2 [0201.029] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="68") returned 2 [0201.029] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="1b") returned 2 [0201.029] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="16") returned 2 [0201.029] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="d8") returned 2 [0201.030] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="fc") returned 2 [0201.030] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="79") returned 2 [0201.030] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="e3") returned 2 [0201.030] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="a8") returned 2 [0201.030] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="90") returned 2 [0201.030] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="f6") returned 2 [0201.030] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="ac") returned 2 [0201.030] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="74") returned 2 [0201.030] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="6c") returned 2 [0201.030] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="69") returned 2 [0201.030] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="03") returned 2 [0201.030] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="cb") returned 2 [0201.030] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="b6") returned 2 [0201.030] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="ae") returned 2 [0201.030] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="83") returned 2 [0201.030] RtlInitAnsiString (in: DestinationString=0x802f700, SourceString="06027b732a905b681b16d8fc79e3a890f6ac746c6903cbb6ae83" | out: DestinationString="06027b732a905b681b16d8fc79e3a890f6ac746c6903cbb6ae83") [0201.030] RtlAnsiStringToUnicodeString (in: DestinationString=0x802f6f8, SourceString="06027b732a905b681b16d8fc79e3a890f6ac746c6903cbb6ae83", AllocateDestinationString=1 | out: DestinationString="06027b732a905b681b16d8fc79e3a890f6ac746c6903cbb6ae83") returned 0x0 [0201.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c090 [0201.031] wcscat (in: _Dest=0x7ddbac8, _Source="06027b732a905" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\06027b732a905") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\06027b732a905" [0201.031] wcscat (in: _Dest=0x7ddbac8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\06027b732a905.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\06027b732a905.68814f" [0201.031] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\06027b732a905.68814f", NtPathName=0x802f6f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\06027b732a905.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0ac18 [0201.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0201.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e95cd8) returned 1 [0201.267] NtQueryInformationFile (in: FileHandle=0xb90, IoStatusBlock=0x802f6c8, FileInformation=0x802f6d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x802f6c8, FileInformation=0x802f6d0) returned 0x0 [0201.267] NtSetInformationFile (FileHandle=0xb90, IoStatusBlock=0x802f6c8, FileInformation=0x802f6d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddbac8) returned 1 [0205.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0205.782] FlushFileBuffers (hFile=0xb90) returned 1 [0205.800] CloseHandle (hObject=0xb90) returned 1 [0206.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7ddb240 [0206.269] wcscpy (in: _Dest=0x7ddb240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\" [0206.269] wcscat (in: _Dest=0x7ddb240, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\68814F-Readme.txt" [0206.269] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\68814f-readme.txt")) returned 0xffffffff [0206.269] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a80 [0208.780] WriteFile (in: hFile=0x1a80, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x802f70c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x802f70c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.208] CloseHandle (hObject=0x1a80) returned 1 [0210.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb240) returned 1 [0210.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec8500) returned 1 Thread: id = 6212 os_tid = 0xa48 [0189.489] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json")) returned 0x2020 [0190.595] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0197.447] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd74 [0197.448] GetFileSizeEx (in: hFile=0xd74, lpFileSize=0x63afdfc | out: lpFileSize=0x63afdfc*=329) returned 1 [0197.448] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x145, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.448] ReadFile (in: hFile=0xd74, lpBuffer=0x63afdd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x63afde8, lpOverlapped=0x0 | out: lpBuffer=0x63afdd8*, lpNumberOfBytesRead=0x63afde8*=0x4, lpOverlapped=0x0) returned 1 [0197.450] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0197.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0197.450] NtQuerySystemTime (in: CurrentTime=0x63afd70 | out: CurrentTime=0x63afd70*=132462177760284000) returned 0x0 [0197.450] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x34b5e435 [0197.450] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x7ac14e73 [0197.450] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x60b876c1 [0197.450] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x6941f924 [0197.450] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x77de5314 [0197.450] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x438f88d0 [0197.450] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x74215f9d [0197.450] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x3df84b58 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x104b7200 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x27398965 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x23fbfb91 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x248ab38b [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x6f283d52 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x1d2f71bf [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x55880aae [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x6f791146 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x1ae0dd19 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x71627054 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x1a9b689f [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x7b05b610 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x2401deed [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x7a3d07d5 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x3c85eb80 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x6c322ce3 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x5a71ac7d [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x3db0b73d [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x19a9e4e5 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0xe3653c0 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x791839ce [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x72a5933f [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x243ad229 [0197.451] RtlRandomEx (in: Seed=0x63afd68 | out: Seed=0x63afd68) returned 0x72aa0051 [0197.461] ReadFile (in: hFile=0xd74, lpBuffer=0x10db94b8, nNumberOfBytesToRead=0x149, lpNumberOfBytesRead=0x63afd64, lpOverlapped=0x0 | out: lpBuffer=0x10db94b8*, lpNumberOfBytesRead=0x63afd64*=0x149, lpOverlapped=0x0) returned 1 [0197.461] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.461] WriteFile (in: hFile=0xd74, lpBuffer=0x10dbd0c0*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x63afd68, lpOverlapped=0x0 | out: lpBuffer=0x10dbd0c0*, lpNumberOfBytesWritten=0x63afd68*=0x149, lpOverlapped=0x0) returned 1 [0200.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2d0 [0200.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0200.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b780) returned 1 [0200.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dbd0c0) returned 1 [0200.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db94b8) returned 1 [0200.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 [0200.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0200.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a10 [0201.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0201.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37830 [0201.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0201.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f58 [0201.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f58) returned 1 [0201.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cd2e58 [0201.038] SetFilePointerEx (in: hFile=0xd74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.038] WriteFile (in: hFile=0xd74, lpBuffer=0x7cd2e58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x63afdf0, lpOverlapped=0x0 | out: lpBuffer=0x7cd2e58*, lpNumberOfBytesWritten=0x63afdf0*=0x10c, lpOverlapped=0x0) returned 1 [0201.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24ae8 [0201.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51458 [0201.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a80 [0201.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a80) returned 1 [0201.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53a80 [0201.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53940 [0201.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53670 [0201.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53670) returned 1 [0201.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0201.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ae8) returned 1 [0201.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.292] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="ee") returned 2 [0201.292] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="8f") returned 2 [0201.292] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="4a") returned 2 [0201.292] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="26") returned 2 [0201.292] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="f1") returned 2 [0201.292] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="0e") returned 2 [0201.292] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="8b") returned 2 [0201.292] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="d9") returned 2 [0201.292] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="ec") returned 2 [0201.292] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="bb") returned 2 [0201.292] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="a9") returned 2 [0201.292] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="3e") returned 2 [0201.292] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="9c") returned 2 [0201.292] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="2b") returned 2 [0201.292] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="d2") returned 2 [0201.292] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="23") returned 2 [0201.292] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="3c") returned 2 [0201.293] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="b9") returned 2 [0201.293] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="e1") returned 2 [0201.293] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="87") returned 2 [0201.293] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="68") returned 2 [0201.293] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="6d") returned 2 [0201.293] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="d4") returned 2 [0201.293] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="41") returned 2 [0201.293] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="58") returned 2 [0201.293] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="54") returned 2 [0201.293] RtlInitAnsiString (in: DestinationString=0x63afd78, SourceString="ee8f4a26f10e8bd9ecbba93e9c2bd2233cb9e187686dd4415854" | out: DestinationString="ee8f4a26f10e8bd9ecbba93e9c2bd2233cb9e187686dd4415854") [0201.293] RtlAnsiStringToUnicodeString (in: DestinationString=0x63afd70, SourceString="ee8f4a26f10e8bd9ecbba93e9c2bd2233cb9e187686dd4415854", AllocateDestinationString=1 | out: DestinationString="ee8f4a26f10e8bd9ecbba93e9c2bd2233cb9e187686dd4415854") returned 0x0 [0201.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d50c60 [0201.293] wcscat (in: _Dest=0x7ddf240, _Source="ee8f4a26f10e8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ee8f4a26f10e8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ee8f4a26f10e8" [0201.293] wcscat (in: _Dest=0x7ddf240, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ee8f4a26f10e8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ee8f4a26f10e8.68814f" [0201.293] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ee8f4a26f10e8.68814f", NtPathName=0x63afd68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\ee8f4a26f10e8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddcc98 [0205.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcc98) returned 1 [0205.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e96350) returned 1 [0205.802] NtQueryInformationFile (in: FileHandle=0xd74, IoStatusBlock=0x63afd40, FileInformation=0x63afd48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x63afd40, FileInformation=0x63afd48) returned 0x0 [0205.802] NtSetInformationFile (FileHandle=0xd74, IoStatusBlock=0x63afd40, FileInformation=0x63afd48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf240) returned 1 [0206.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0206.272] FlushFileBuffers (hFile=0xd74) returned 1 [0206.274] CloseHandle (hObject=0xd74) returned 1 [0208.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddf990 [0208.757] wcscpy (in: _Dest=0x7ddf990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\" [0208.757] wcscat (in: _Dest=0x7ddf990, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\68814F-Readme.txt" [0208.757] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\68814f-readme.txt")) returned 0xffffffff [0208.757] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.769] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x63afd84, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x63afd84*=0x8b9, lpOverlapped=0x0) returned 1 [0209.771] CloseHandle (hObject=0x16e0) returned 1 [0209.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf990) returned 1 [0209.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec8628) returned 1 Thread: id = 6213 os_tid = 0xa58 [0189.489] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json")) returned 0x2020 [0190.596] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0197.461] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22f8 [0197.462] GetFileSizeEx (in: hFile=0x22f8, lpFileSize=0x81cfb0c | out: lpFileSize=0x81cfb0c*=256) returned 1 [0197.462] SetFilePointerEx (in: hFile=0x22f8, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.462] ReadFile (in: hFile=0x22f8, lpBuffer=0x81cfae8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x81cfaf8, lpOverlapped=0x0 | out: lpBuffer=0x81cfae8*, lpNumberOfBytesRead=0x81cfaf8*=0x4, lpOverlapped=0x0) returned 1 [0197.464] SetFilePointerEx (in: hFile=0x22f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0197.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0197.464] NtQuerySystemTime (in: CurrentTime=0x81cfa80 | out: CurrentTime=0x81cfa80*=132462177760440000) returned 0x0 [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x13a7edcc [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x55a746a9 [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x4d5ef839 [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x4b35f402 [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x16501062 [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x63bbb441 [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x3df456a4 [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x658bf873 [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x53f1c102 [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x1e1b1eda [0197.464] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x55f79a09 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x15d18773 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x5950631f [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x1c3073fe [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x3e9570bb [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x6f80d459 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x15b160a0 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x59993292 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x198e60da [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x7062637a [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x4c2a43b2 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x195c7b2d [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x1a531030 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x63af9f9c [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x197e1295 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x511a18ab [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x3522b146 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x80c9cca [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x763176d1 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x50ba8bdd [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x66bef1c1 [0197.465] RtlRandomEx (in: Seed=0x81cfa78 | out: Seed=0x81cfa78) returned 0x9bd781a [0197.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dc0cc8 [0197.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dc48d0 [0197.474] ReadFile (in: hFile=0x22f8, lpBuffer=0x10dc0cc8, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x81cfa74, lpOverlapped=0x0 | out: lpBuffer=0x10dc0cc8*, lpNumberOfBytesRead=0x81cfa74*=0x100, lpOverlapped=0x0) returned 1 [0197.474] SetFilePointerEx (in: hFile=0x22f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.474] WriteFile (in: hFile=0x22f8, lpBuffer=0x10dc48d0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x81cfa78, lpOverlapped=0x0 | out: lpBuffer=0x10dc48d0*, lpNumberOfBytesWritten=0x81cfa78*=0x100, lpOverlapped=0x0) returned 1 [0200.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0200.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0200.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0200.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc48d0) returned 1 [0200.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc0cc8) returned 1 [0200.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bb58) returned 1 [0200.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c08) returned 1 [0200.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a381c0 [0200.543] SetFilePointerEx (in: hFile=0x22f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.543] WriteFile (in: hFile=0x22f8, lpBuffer=0x7a384d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x81cfb00, lpOverlapped=0x0 | out: lpBuffer=0x7a384d0*, lpNumberOfBytesWritten=0x81cfb00*=0x10c, lpOverlapped=0x0) returned 1 [0201.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f58 [0201.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f58) returned 1 [0201.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53f58 [0201.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0201.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e528b0 [0201.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e528b0) returned 1 [0201.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.040] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="fe") returned 2 [0201.040] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="81") returned 2 [0201.040] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="ed") returned 2 [0201.040] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="9d") returned 2 [0201.040] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="ff") returned 2 [0201.040] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="28") returned 2 [0201.040] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="a6") returned 2 [0201.041] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="f8") returned 2 [0201.041] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="39") returned 2 [0201.041] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="89") returned 2 [0201.041] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="ae") returned 2 [0201.041] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="5c") returned 2 [0201.041] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="f7") returned 2 [0201.041] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="df") returned 2 [0201.041] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="02") returned 2 [0201.041] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="89") returned 2 [0201.041] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="19") returned 2 [0201.041] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="33") returned 2 [0201.041] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="e5") returned 2 [0201.041] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="5a") returned 2 [0201.041] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="28") returned 2 [0201.041] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="a9") returned 2 [0201.041] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="a1") returned 2 [0201.041] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="c9") returned 2 [0201.041] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="79") returned 2 [0201.041] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="fb") returned 2 [0201.041] RtlInitAnsiString (in: DestinationString=0x81cfa88, SourceString="fe81ed9dff28a6f83989ae5cf7df02891933e55a28a9a1c979fb" | out: DestinationString="fe81ed9dff28a6f83989ae5cf7df02891933e55a28a9a1c979fb") [0201.041] RtlAnsiStringToUnicodeString (in: DestinationString=0x81cfa80, SourceString="fe81ed9dff28a6f83989ae5cf7df02891933e55a28a9a1c979fb", AllocateDestinationString=1 | out: DestinationString="fe81ed9dff28a6f83989ae5cf7df02891933e55a28a9a1c979fb") returned 0x0 [0201.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fdd0 [0201.041] wcscat (in: _Dest=0x7ddbe70, _Source="fe81ed9dff28a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\fe81ed9dff28a") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\fe81ed9dff28a" [0201.042] wcscat (in: _Dest=0x7ddbe70, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\fe81ed9dff28a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\fe81ed9dff28a.68814f" [0201.042] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\fe81ed9dff28a.68814f", NtPathName=0x81cfa78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\fe81ed9dff28a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddcc98 [0201.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcc98) returned 1 [0201.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e96350) returned 1 [0201.291] NtQueryInformationFile (in: FileHandle=0x22f8, IoStatusBlock=0x81cfa50, FileInformation=0x81cfa58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x81cfa50, FileInformation=0x81cfa58) returned 0x0 [0201.291] NtSetInformationFile (FileHandle=0x22f8, IoStatusBlock=0x81cfa50, FileInformation=0x81cfa58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddbe70) returned 1 [0205.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0205.792] FlushFileBuffers (hFile=0x22f8) returned 1 [0205.817] CloseHandle (hObject=0x22f8) returned 1 [0206.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddf240 [0206.276] wcscpy (in: _Dest=0x7ddf240, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\" [0206.276] wcscat (in: _Dest=0x7ddf240, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\68814F-Readme.txt" [0206.276] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\68814f-readme.txt")) returned 0xffffffff [0206.276] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1abc [0210.220] WriteFile (in: hFile=0x1abc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x81cfa94, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x81cfa94*=0x8b9, lpOverlapped=0x0) returned 1 [0210.226] CloseHandle (hObject=0x1abc) returned 1 [0210.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf240) returned 1 [0210.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8020) returned 1 Thread: id = 6214 os_tid = 0xa78 [0189.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json")) returned 0x2020 [0190.597] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0197.474] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d68 [0197.475] GetFileSizeEx (in: hFile=0x1d68, lpFileSize=0x777f904 | out: lpFileSize=0x777f904*=243) returned 1 [0197.475] SetFilePointerEx (in: hFile=0x1d68, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.475] ReadFile (in: hFile=0x1d68, lpBuffer=0x777f8e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x777f8f0, lpOverlapped=0x0 | out: lpBuffer=0x777f8e0*, lpNumberOfBytesRead=0x777f8f0*=0x4, lpOverlapped=0x0) returned 1 [0197.477] SetFilePointerEx (in: hFile=0x1d68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0197.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0197.477] NtQuerySystemTime (in: CurrentTime=0x777f878 | out: CurrentTime=0x777f878*=132462177760596000) returned 0x0 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x3f2b0316 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x168a1c88 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x353deec5 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x3048d742 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0xb1302ef [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x626235d6 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x41a535e2 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x693dac28 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x459b4d41 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x3b0dfa3b [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0xfa00f00 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x701fb26c [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x333a7173 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x69c22f41 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x377f5696 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x2bc35619 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x56a7be5f [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x5a1e5a22 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x3f8b4044 [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x3fe8611a [0197.477] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x47303369 [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x331324fb [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x6cc2055 [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x1f0cc5ba [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x3b248e24 [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x4f1aaef6 [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x4942a525 [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x4aa88cd9 [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x320de7a6 [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x2de6f7b7 [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x3634d795 [0197.478] RtlRandomEx (in: Seed=0x777f870 | out: Seed=0x777f870) returned 0x962f6b [0197.486] ReadFile (in: hFile=0x1d68, lpBuffer=0x10dc84d8, nNumberOfBytesToRead=0xf3, lpNumberOfBytesRead=0x777f86c, lpOverlapped=0x0 | out: lpBuffer=0x10dc84d8*, lpNumberOfBytesRead=0x777f86c*=0xf3, lpOverlapped=0x0) returned 1 [0197.487] SetFilePointerEx (in: hFile=0x1d68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.487] WriteFile (in: hFile=0x1d68, lpBuffer=0x10dcc0e0*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x777f870, lpOverlapped=0x0 | out: lpBuffer=0x10dcc0e0*, lpNumberOfBytesWritten=0x777f870*=0xf3, lpOverlapped=0x0) returned 1 [0201.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0201.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0201.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9c8) returned 1 [0201.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dcc0e0) returned 1 [0201.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc84d8) returned 1 [0201.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0201.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e858f0) returned 1 [0201.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a381c0 [0201.043] SetFilePointerEx (in: hFile=0x1d68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.043] WriteFile (in: hFile=0x1d68, lpBuffer=0x7a384d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x777f8f8, lpOverlapped=0x0 | out: lpBuffer=0x7a384d0*, lpNumberOfBytesWritten=0x777f8f8*=0x10c, lpOverlapped=0x0) returned 1 [0201.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24ae8 [0201.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51458 [0201.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0201.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0201.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c838 [0201.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0201.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0201.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0201.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0201.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ae8) returned 1 [0201.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.299] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="7a") returned 2 [0201.299] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="dc") returned 2 [0201.299] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="b5") returned 2 [0201.299] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="85") returned 2 [0201.299] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="d5") returned 2 [0201.299] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="2b") returned 2 [0201.299] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="ed") returned 2 [0201.299] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="33") returned 2 [0201.299] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="3f") returned 2 [0201.299] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="da") returned 2 [0201.299] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="13") returned 2 [0201.299] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="2a") returned 2 [0201.299] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="e6") returned 2 [0201.299] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="3a") returned 2 [0201.299] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="81") returned 2 [0201.299] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="81") returned 2 [0201.299] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="1a") returned 2 [0201.299] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="cd") returned 2 [0201.299] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="d5") returned 2 [0201.299] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="b4") returned 2 [0201.299] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="b1") returned 2 [0201.300] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="14") returned 2 [0201.300] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="55") returned 2 [0201.300] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="67") returned 2 [0201.300] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="ae") returned 2 [0201.300] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="3a") returned 2 [0201.300] RtlInitAnsiString (in: DestinationString=0x777f880, SourceString="7adcb585d52bed333fda132ae63a81811acdd5b4b1145567ae3a" | out: DestinationString="7adcb585d52bed333fda132ae63a81811acdd5b4b1145567ae3a") [0201.300] RtlAnsiStringToUnicodeString (in: DestinationString=0x777f878, SourceString="7adcb585d52bed333fda132ae63a81811acdd5b4b1145567ae3a", AllocateDestinationString=1 | out: DestinationString="7adcb585d52bed333fda132ae63a81811acdd5b4b1145567ae3a") returned 0x0 [0201.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d514d0 [0201.300] wcscat (in: _Dest=0x7ddf378, _Source="7adcb585d52be" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\7adcb585d52be") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\7adcb585d52be" [0201.300] wcscat (in: _Dest=0x7ddf378, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\7adcb585d52be.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\7adcb585d52be.68814f" [0201.300] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\7adcb585d52be.68814f", NtPathName=0x777f870, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\7adcb585d52be.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddcde0 [0205.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcde0) returned 1 [0205.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e96578) returned 1 [0205.821] NtQueryInformationFile (in: FileHandle=0x1d68, IoStatusBlock=0x777f848, FileInformation=0x777f850, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x777f848, FileInformation=0x777f850) returned 0x0 [0205.821] NtSetInformationFile (FileHandle=0x1d68, IoStatusBlock=0x777f848, FileInformation=0x777f850, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf378) returned 1 [0206.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d514d0) returned 1 [0206.278] FlushFileBuffers (hFile=0x1d68) returned 1 [0206.285] CloseHandle (hObject=0x1d68) returned 1 [0208.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddf858 [0208.760] wcscpy (in: _Dest=0x7ddf858, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\" [0208.760] wcscat (in: _Dest=0x7ddf858, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\68814F-Readme.txt" [0208.760] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\68814f-readme.txt")) returned 0xffffffff [0208.760] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.773] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x777f88c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x777f88c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.775] CloseHandle (hObject=0x16e0) returned 1 [0209.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf858) returned 1 [0209.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8148) returned 1 Thread: id = 6215 os_tid = 0xa7c [0189.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json")) returned 0x2020 [0190.597] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0197.487] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d3c [0197.487] GetFileSizeEx (in: hFile=0x1d3c, lpFileSize=0x459f9e4 | out: lpFileSize=0x459f9e4*=293) returned 1 [0197.487] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x121, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.487] ReadFile (in: hFile=0x1d3c, lpBuffer=0x459f9c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x459f9d0, lpOverlapped=0x0 | out: lpBuffer=0x459f9c0*, lpNumberOfBytesRead=0x459f9d0*=0x4, lpOverlapped=0x0) returned 1 [0197.489] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0197.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0197.490] NtQuerySystemTime (in: CurrentTime=0x459f958 | out: CurrentTime=0x459f958*=132462177760752000) returned 0x0 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x30a853d9 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x153a0dd2 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x59c3d34b [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x5a5b9c9 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x40e3dd56 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x142a1a7b [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x6cc56cc1 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x4ca5c046 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x38f55d4f [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x5267689 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x65e405a6 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x5d3d3318 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x303b2471 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x59575a1a [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x32a53359 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x7f5bb1ef [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0xf1f84c0 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x705ba545 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x588f4c02 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x44c27cd [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x3307a624 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x5a43ea21 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x502d4097 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x67b572b8 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x6a2c3806 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x50f04b99 [0197.490] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x2b360ad3 [0197.491] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x125e284b [0197.491] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x5ffb6fb7 [0197.491] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x20642578 [0197.491] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x76333ce7 [0197.491] RtlRandomEx (in: Seed=0x459f950 | out: Seed=0x459f950) returned 0x7cc2031f [0197.504] ReadFile (in: hFile=0x1d3c, lpBuffer=0x10dd0060, nNumberOfBytesToRead=0x125, lpNumberOfBytesRead=0x459f94c, lpOverlapped=0x0 | out: lpBuffer=0x10dd0060*, lpNumberOfBytesRead=0x459f94c*=0x125, lpOverlapped=0x0) returned 1 [0197.505] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.505] WriteFile (in: hFile=0x1d3c, lpBuffer=0x10dd3c68*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x459f950, lpOverlapped=0x0 | out: lpBuffer=0x10dd3c68*, lpNumberOfBytesWritten=0x459f950*=0x125, lpOverlapped=0x0) returned 1 [0199.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede168 [0199.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb508 [0199.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb508) returned 1 [0199.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dd3c68) returned 1 [0199.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dd0060) returned 1 [0199.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0199.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85ce0) returned 1 [0199.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86908 [0199.977] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.977] WriteFile (in: hFile=0x1d3c, lpBuffer=0x7cad2b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x459f9d8, lpOverlapped=0x0 | out: lpBuffer=0x7cad2b8*, lpNumberOfBytesWritten=0x459f9d8*=0x10c, lpOverlapped=0x0) returned 1 [0200.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0200.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0200.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c9a0 [0200.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0200.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4a0 [0200.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4a0) returned 1 [0200.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.753] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="99") returned 2 [0200.753] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="c9") returned 2 [0200.753] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="8b") returned 2 [0200.753] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="63") returned 2 [0200.753] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="6b") returned 2 [0200.753] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="26") returned 2 [0200.753] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="0e") returned 2 [0200.753] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.753] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="29") returned 2 [0200.753] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="98") returned 2 [0200.753] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.753] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="e6") returned 2 [0200.753] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="16") returned 2 [0200.753] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="29") returned 2 [0200.753] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="87") returned 2 [0200.753] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="44") returned 2 [0200.753] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="31") returned 2 [0200.753] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="b0") returned 2 [0200.753] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="32") returned 2 [0200.753] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="18") returned 2 [0200.753] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="67") returned 2 [0200.753] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="01") returned 2 [0200.753] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.753] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.754] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="43") returned 2 [0200.754] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="0d") returned 2 [0200.754] RtlInitAnsiString (in: DestinationString=0x459f960, SourceString="99c98b636b260ed92998b6e61629874431b0321867011ff3430d" | out: DestinationString="99c98b636b260ed92998b6e61629874431b0321867011ff3430d") [0200.754] RtlAnsiStringToUnicodeString (in: DestinationString=0x459f958, SourceString="99c98b636b260ed92998b6e61629874431b0321867011ff3430d", AllocateDestinationString=1 | out: DestinationString="99c98b636b260ed92998b6e61629874431b0321867011ff3430d") returned 0x0 [0200.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c1f8 [0200.754] wcscat (in: _Dest=0x7cd43c8, _Source="99c98b636b260" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\99c98b636b260") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\99c98b636b260" [0200.754] wcscat (in: _Dest=0x7cd43c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\99c98b636b260.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\99c98b636b260.68814f" [0200.754] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\99c98b636b260.68814f", NtPathName=0x459f950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\99c98b636b260.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7b877a0 [0201.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b877a0) returned 1 [0201.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd4f18) returned 1 [0201.070] NtQueryInformationFile (in: FileHandle=0x1d3c, IoStatusBlock=0x459f928, FileInformation=0x459f930, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x459f928, FileInformation=0x459f930) returned 0x0 [0201.070] NtSetInformationFile (FileHandle=0x1d3c, IoStatusBlock=0x459f928, FileInformation=0x459f930, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd43c8) returned 1 [0201.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c1f8) returned 1 [0201.317] FlushFileBuffers (hFile=0x1d3c) returned 1 [0201.329] CloseHandle (hObject=0x1d3c) returned 1 [0205.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddc218 [0205.834] wcscpy (in: _Dest=0x7ddc218, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\" [0205.834] wcscat (in: _Dest=0x7ddc218, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\68814F-Readme.txt" [0205.834] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\68814f-readme.txt")) returned 0xffffffff [0205.834] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1140 [0206.574] WriteFile (in: hFile=0x1140, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x459f96c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x459f96c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.455] CloseHandle (hObject=0x1140) returned 1 [0215.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc218) returned 1 [0215.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8270) returned 1 Thread: id = 6216 os_tid = 0x1240 [0189.490] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json")) returned 0x2020 [0190.598] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0197.505] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2418 [0197.505] GetFileSizeEx (in: hFile=0x2418, lpFileSize=0x817f9e4 | out: lpFileSize=0x817f9e4*=258) returned 1 [0197.506] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.506] ReadFile (in: hFile=0x2418, lpBuffer=0x817f9c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x817f9d0, lpOverlapped=0x0 | out: lpBuffer=0x817f9c0*, lpNumberOfBytesRead=0x817f9d0*=0x4, lpOverlapped=0x0) returned 1 [0197.507] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0197.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0197.508] NtQuerySystemTime (in: CurrentTime=0x817f958 | out: CurrentTime=0x817f958*=132462177760908000) returned 0x0 [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x77ee2aee [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0xa02007 [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x73dd3d83 [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0xc071a6c [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x5db53941 [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x234baa21 [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x1851880c [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x5d297b6d [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x18d91983 [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x151836aa [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x1f0f183b [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x255f538b [0197.508] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x37dba9e3 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x55c69789 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x3065b775 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x852e06e [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x576e0133 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x7c8a5171 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x3df014bf [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x4ac7fed5 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x131479d7 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x1dc5741c [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x1a92be7 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x5709dd85 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x1058ad23 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x78095815 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0xef9c82f [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x6fc8aa41 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x35612a7b [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x5a9da939 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0xfcae7c0 [0197.509] RtlRandomEx (in: Seed=0x817f950 | out: Seed=0x817f950) returned 0x287c612c [0197.521] ReadFile (in: hFile=0x2418, lpBuffer=0x10dd7870, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0x817f94c, lpOverlapped=0x0 | out: lpBuffer=0x10dd7870*, lpNumberOfBytesRead=0x817f94c*=0x102, lpOverlapped=0x0) returned 1 [0197.521] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.521] WriteFile (in: hFile=0x2418, lpBuffer=0x10ddb478*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x817f950, lpOverlapped=0x0 | out: lpBuffer=0x10ddb478*, lpNumberOfBytesWritten=0x817f950*=0x102, lpOverlapped=0x0) returned 1 [0199.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd9c0 [0199.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edda38 [0199.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edda38) returned 1 [0199.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ddb478) returned 1 [0199.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dd7870) returned 1 [0199.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0199.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85398) returned 1 [0199.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86bd8 [0199.981] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.981] WriteFile (in: hFile=0x2418, lpBuffer=0x7cad3d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x817f9d8, lpOverlapped=0x0 | out: lpBuffer=0x7cad3d0*, lpNumberOfBytesWritten=0x817f9d8*=0x10c, lpOverlapped=0x0) returned 1 [0200.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca68 [0200.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca68) returned 1 [0200.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ca68 [0200.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0200.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8d8 [0200.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8d8) returned 1 [0200.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.759] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="99") returned 2 [0200.759] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="9a") returned 2 [0200.759] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.759] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="97") returned 2 [0200.759] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="44") returned 2 [0200.759] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="26") returned 2 [0200.759] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="7d") returned 2 [0200.759] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="21") returned 2 [0200.759] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="a7") returned 2 [0200.759] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.759] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="d1") returned 2 [0200.759] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="ed") returned 2 [0200.759] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="34") returned 2 [0200.759] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="fe") returned 2 [0200.759] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="a7") returned 2 [0200.759] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="27") returned 2 [0200.759] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.759] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.759] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="07") returned 2 [0200.759] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.759] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="7c") returned 2 [0200.759] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="52") returned 2 [0200.759] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.759] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="ba") returned 2 [0200.759] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="8c") returned 2 [0200.759] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="fa") returned 2 [0200.759] RtlInitAnsiString (in: DestinationString=0x817f960, SourceString="999aff9744267d21a7f4d1ed34fea727c0ce076e7c52c0ba8cfa" | out: DestinationString="999aff9744267d21a7f4d1ed34fea727c0ce076e7c52c0ba8cfa") [0200.760] RtlAnsiStringToUnicodeString (in: DestinationString=0x817f958, SourceString="999aff9744267d21a7f4d1ed34fea727c0ce076e7c52c0ba8cfa", AllocateDestinationString=1 | out: DestinationString="999aff9744267d21a7f4d1ed34fea727c0ce076e7c52c0ba8cfa") returned 0x0 [0200.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c630 [0200.760] wcscat (in: _Dest=0x7cd4638, _Source="999aff9744267" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\999aff9744267") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\999aff9744267" [0200.760] wcscat (in: _Dest=0x7cd4638, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\999aff9744267.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\999aff9744267.68814f" [0200.760] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\999aff9744267.68814f", NtPathName=0x817f950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\999aff9744267.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7b87a30 [0201.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87a30) returned 1 [0201.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd5368) returned 1 [0201.072] NtQueryInformationFile (in: FileHandle=0x2418, IoStatusBlock=0x817f928, FileInformation=0x817f930, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x817f928, FileInformation=0x817f930) returned 0x0 [0201.072] NtSetInformationFile (FileHandle=0x2418, IoStatusBlock=0x817f928, FileInformation=0x817f930, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4638) returned 1 [0201.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c630) returned 1 [0201.325] FlushFileBuffers (hFile=0x2418) returned 1 [0201.339] CloseHandle (hObject=0x2418) returned 1 [0205.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddbe70 [0205.844] wcscpy (in: _Dest=0x7ddbe70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\" [0205.844] wcscat (in: _Dest=0x7ddbe70, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\68814F-Readme.txt" [0205.844] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\68814f-readme.txt")) returned 0xffffffff [0205.844] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d40 [0206.576] WriteFile (in: hFile=0x1d40, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x817f96c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x817f96c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.421] CloseHandle (hObject=0x1d40) returned 1 [0215.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddbe70) returned 1 [0215.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8398) returned 1 Thread: id = 6217 os_tid = 0x1244 [0189.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json")) returned 0x2020 [0190.598] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0197.521] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1610 [0197.522] GetFileSizeEx (in: hFile=0x1610, lpFileSize=0x824f88c | out: lpFileSize=0x824f88c*=281) returned 1 [0197.522] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.522] ReadFile (in: hFile=0x1610, lpBuffer=0x824f868, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x824f878, lpOverlapped=0x0 | out: lpBuffer=0x824f868*, lpNumberOfBytesRead=0x824f878*=0x4, lpOverlapped=0x0) returned 1 [0197.523] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0197.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0197.524] NtQuerySystemTime (in: CurrentTime=0x824f800 | out: CurrentTime=0x824f800*=132462177761064000) returned 0x0 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x7e9c6257 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x77adb2c8 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x2f8a3105 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x6ffa6fae [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x3691c6aa [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x155c3764 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x28488d63 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0xf753640 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x1539e1ae [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x7ccd5323 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x4b2ab988 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x7ac14e73 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x61e20c7e [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x4072c4b6 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0xf826ee8 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x1140faf7 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x60410748 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x3e4645c0 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x4bd1f5a [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x19011594 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x46930023 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x24d1e833 [0197.524] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x72c44e06 [0197.525] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x6e328347 [0197.525] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x46727f49 [0197.525] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x4f9ff551 [0197.525] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x6da9b421 [0197.525] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x7ebf702d [0197.525] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x3ec388bb [0197.525] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x42a92de6 [0197.525] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0x3d6b0012 [0197.525] RtlRandomEx (in: Seed=0x824f7f8 | out: Seed=0x824f7f8) returned 0xada237a [0197.533] ReadFile (in: hFile=0x1610, lpBuffer=0x10ddf080, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0x824f7f4, lpOverlapped=0x0 | out: lpBuffer=0x10ddf080*, lpNumberOfBytesRead=0x824f7f4*=0x119, lpOverlapped=0x0) returned 1 [0197.533] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.533] WriteFile (in: hFile=0x1610, lpBuffer=0x10de2c88*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x824f7f8, lpOverlapped=0x0 | out: lpBuffer=0x10de2c88*, lpNumberOfBytesWritten=0x824f7f8*=0x119, lpOverlapped=0x0) returned 1 [0199.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edda88 [0199.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddd58 [0199.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddd58) returned 1 [0199.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10de2c88) returned 1 [0199.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ddf080) returned 1 [0199.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0199.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e851e8) returned 1 [0199.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86cf8 [0199.987] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.987] WriteFile (in: hFile=0x1610, lpBuffer=0x7cad4e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x824f880, lpOverlapped=0x0 | out: lpBuffer=0x7cad4e8*, lpNumberOfBytesWritten=0x824f880*=0x10c, lpOverlapped=0x0) returned 1 [0200.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0200.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0200.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b7d0 [0200.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0200.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0200.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c068) returned 1 [0200.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.764] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.764] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="41") returned 2 [0200.764] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="26") returned 2 [0200.764] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="5d") returned 2 [0200.764] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="51") returned 2 [0200.764] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="59") returned 2 [0200.764] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="8c") returned 2 [0200.764] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="a5") returned 2 [0200.764] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="cf") returned 2 [0200.764] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="e6") returned 2 [0200.764] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="0a") returned 2 [0200.764] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="91") returned 2 [0200.764] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="37") returned 2 [0200.764] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="57") returned 2 [0200.764] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="b1") returned 2 [0200.764] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="9e") returned 2 [0200.764] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="47") returned 2 [0200.765] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="eb") returned 2 [0200.765] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="eb") returned 2 [0200.765] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="34") returned 2 [0200.765] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="22") returned 2 [0200.765] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="52") returned 2 [0200.765] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="9c") returned 2 [0200.765] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="5d") returned 2 [0200.765] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="6a") returned 2 [0200.765] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="38") returned 2 [0200.765] RtlInitAnsiString (in: DestinationString=0x824f808, SourceString="ff41265d51598ca5cfe60a913757b19e47ebeb3422529c5d6a38" | out: DestinationString="ff41265d51598ca5cfe60a913757b19e47ebeb3422529c5d6a38") [0200.765] RtlAnsiStringToUnicodeString (in: DestinationString=0x824f800, SourceString="ff41265d51598ca5cfe60a913757b19e47ebeb3422529c5d6a38", AllocateDestinationString=1 | out: DestinationString="ff41265d51598ca5cfe60a913757b19e47ebeb3422529c5d6a38") returned 0x0 [0200.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c090 [0200.765] wcscat (in: _Dest=0x7cd4770, _Source="ff41265d51598" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ff41265d51598") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ff41265d51598" [0200.765] wcscat (in: _Dest=0x7cd4770, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ff41265d51598.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ff41265d51598.68814f" [0200.765] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ff41265d51598.68814f", NtPathName=0x824f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\ff41265d51598.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7b87b78 [0201.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87b78) returned 1 [0201.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd5590) returned 1 [0201.075] NtQueryInformationFile (in: FileHandle=0x1610, IoStatusBlock=0x824f7d0, FileInformation=0x824f7d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x824f7d0, FileInformation=0x824f7d8) returned 0x0 [0201.075] NtSetInformationFile (FileHandle=0x1610, IoStatusBlock=0x824f7d0, FileInformation=0x824f7d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4770) returned 1 [0201.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0201.331] FlushFileBuffers (hFile=0x1610) returned 1 [0201.342] CloseHandle (hObject=0x1610) returned 1 [0205.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddbc00 [0205.847] wcscpy (in: _Dest=0x7ddbc00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\" [0205.847] wcscat (in: _Dest=0x7ddbc00, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\68814F-Readme.txt" [0205.847] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\68814f-readme.txt")) returned 0xffffffff [0205.848] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d28 [0206.575] WriteFile (in: hFile=0x1d28, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x824f814, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x824f814*=0x8b9, lpOverlapped=0x0) returned 1 [0210.419] CloseHandle (hObject=0x1d28) returned 1 [0215.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddbc00) returned 1 [0215.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca84c0) returned 1 Thread: id = 6218 os_tid = 0x1248 [0189.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json")) returned 0x2020 [0190.599] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0197.533] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x121c [0197.534] GetFileSizeEx (in: hFile=0x121c, lpFileSize=0x972ff5c | out: lpFileSize=0x972ff5c*=285) returned 1 [0197.534] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.534] ReadFile (in: hFile=0x121c, lpBuffer=0x972ff38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x972ff48, lpOverlapped=0x0 | out: lpBuffer=0x972ff38*, lpNumberOfBytesRead=0x972ff48*=0x4, lpOverlapped=0x0) returned 1 [0197.540] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0197.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0197.541] NtQuerySystemTime (in: CurrentTime=0x972fed0 | out: CurrentTime=0x972fed0*=132462177761220000) returned 0x0 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x405224d8 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x6a49fe30 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x4a115562 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x6478d7be [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x49302140 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x3a5bc784 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x1ea2f666 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x2cd36b18 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x6a450171 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x36660842 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x3c14ea7f [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x57addb1f [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x12eec67f [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x60949544 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x72cbe7c1 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x5dcbbf1b [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x3b938ecd [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x6331d61e [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x1bd76fcb [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0xef4ac00 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x61d4ea90 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x3b6c1b5f [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x67f6a5fe [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x57a625e2 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x6c3d5aac [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x25bf266e [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0xa78cd50 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x2e79fe77 [0197.541] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x45c294df [0197.542] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x468782cd [0197.542] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0xbf6ceda [0197.542] RtlRandomEx (in: Seed=0x972fec8 | out: Seed=0x972fec8) returned 0x71b26806 [0197.552] ReadFile (in: hFile=0x121c, lpBuffer=0x10de6890, nNumberOfBytesToRead=0x11d, lpNumberOfBytesRead=0x972fec4, lpOverlapped=0x0 | out: lpBuffer=0x10de6890*, lpNumberOfBytesRead=0x972fec4*=0x11d, lpOverlapped=0x0) returned 1 [0197.552] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.552] WriteFile (in: hFile=0x121c, lpBuffer=0x10dea498*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x972fec8, lpOverlapped=0x0 | out: lpBuffer=0x10dea498*, lpNumberOfBytesWritten=0x972fec8*=0x11d, lpOverlapped=0x0) returned 1 [0199.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb440 [0199.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede028 [0199.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede028) returned 1 [0199.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dea498) returned 1 [0199.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10de6890) returned 1 [0199.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0199.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e852c0) returned 1 [0199.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c98 [0199.989] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.989] WriteFile (in: hFile=0x121c, lpBuffer=0x7cad830*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x972ff50, lpOverlapped=0x0 | out: lpBuffer=0x7cad830*, lpNumberOfBytesWritten=0x972ff50*=0x10c, lpOverlapped=0x0) returned 1 [0200.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0200.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0200.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c3d8 [0200.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0200.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0200.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1f8) returned 1 [0200.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.769] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="a5") returned 2 [0200.769] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="33") returned 2 [0200.769] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="1c") returned 2 [0200.769] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="37") returned 2 [0200.769] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="11") returned 2 [0200.769] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="42") returned 2 [0200.769] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="6b") returned 2 [0200.769] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="9e") returned 2 [0200.769] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.769] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="bf") returned 2 [0200.769] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="69") returned 2 [0200.769] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="aa") returned 2 [0200.769] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="b5") returned 2 [0200.769] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="84") returned 2 [0200.769] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="8f") returned 2 [0200.769] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.769] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.769] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="e0") returned 2 [0200.769] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="48") returned 2 [0200.769] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="36") returned 2 [0200.769] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="3e") returned 2 [0200.769] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="79") returned 2 [0200.769] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="8b") returned 2 [0200.769] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="da") returned 2 [0200.769] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="6f") returned 2 [0200.769] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="54") returned 2 [0200.769] RtlInitAnsiString (in: DestinationString=0x972fed8, SourceString="a5331c3711426b9e6ebf69aab5848fe3ace048363e798bda6f54" | out: DestinationString="a5331c3711426b9e6ebf69aab5848fe3ace048363e798bda6f54") [0200.769] RtlAnsiStringToUnicodeString (in: DestinationString=0x972fed0, SourceString="a5331c3711426b9e6ebf69aab5848fe3ace048363e798bda6f54", AllocateDestinationString=1 | out: DestinationString="a5331c3711426b9e6ebf69aab5848fe3ace048363e798bda6f54") returned 0x0 [0200.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e238 [0200.770] wcscat (in: _Dest=0x7cd48a8, _Source="a5331c3711426" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\a5331c3711426") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\a5331c3711426" [0200.770] wcscat (in: _Dest=0x7cd48a8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\a5331c3711426.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\a5331c3711426.68814f" [0200.770] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\a5331c3711426.68814f", NtPathName=0x972fec8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\a5331c3711426.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7b87cc0 [0201.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87cc0) returned 1 [0201.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd57b8) returned 1 [0201.076] NtQueryInformationFile (in: FileHandle=0x121c, IoStatusBlock=0x972fea0, FileInformation=0x972fea8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x972fea0, FileInformation=0x972fea8) returned 0x0 [0201.076] NtSetInformationFile (FileHandle=0x121c, IoStatusBlock=0x972fea0, FileInformation=0x972fea8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd48a8) returned 1 [0201.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0201.334] FlushFileBuffers (hFile=0x121c) returned 1 [0201.346] CloseHandle (hObject=0x121c) returned 1 [0205.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddbac8 [0205.850] wcscpy (in: _Dest=0x7ddbac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\" [0205.850] wcscat (in: _Dest=0x7ddbac8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\68814F-Readme.txt" [0205.850] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\68814f-readme.txt")) returned 0xffffffff [0205.850] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x189c [0206.576] WriteFile (in: hFile=0x189c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x972fee4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x972fee4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.424] CloseHandle (hObject=0x189c) returned 1 [0215.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddbac8) returned 1 [0215.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca85e8) returned 1 Thread: id = 6219 os_tid = 0x124c [0189.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json")) returned 0x2020 [0190.600] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0197.552] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1220 [0197.553] GetFileSizeEx (in: hFile=0x1220, lpFileSize=0xc19fa14 | out: lpFileSize=0xc19fa14*=254) returned 1 [0197.553] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.553] ReadFile (in: hFile=0x1220, lpBuffer=0xc19f9f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc19fa00, lpOverlapped=0x0 | out: lpBuffer=0xc19f9f0*, lpNumberOfBytesRead=0xc19fa00*=0x4, lpOverlapped=0x0) returned 1 [0197.554] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0197.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0197.555] NtQuerySystemTime (in: CurrentTime=0xc19f988 | out: CurrentTime=0xc19f988*=132462177761376000) returned 0x0 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x2c912009 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0xe6a17e8 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x67ac8fd0 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x5cd1751a [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x9c88eef [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x38a9caf4 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x563da4c3 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x65cbacb3 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0xe9efa80 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x3939311c [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x6d50403 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x6dd57791 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0xf4a5d80 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x2c3faffe [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x107f73ae [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x1ee2185 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x23e40722 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x2ab3cb6f [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x38fd74ca [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x5266130d [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x1ec23d32 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x6f791146 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x1c587acd [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0xc5dc32d [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x505b78d [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x66c0c006 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x3dec7b58 [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x6726371b [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x7f0cffac [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x5e1e1bbc [0197.555] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x962f6b [0197.556] RtlRandomEx (in: Seed=0xc19f980 | out: Seed=0xc19f980) returned 0x1a2b2b6a [0197.564] ReadFile (in: hFile=0x1220, lpBuffer=0x10dee0a0, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0xc19f97c, lpOverlapped=0x0 | out: lpBuffer=0x10dee0a0*, lpNumberOfBytesRead=0xc19f97c*=0xfe, lpOverlapped=0x0) returned 1 [0197.564] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.565] WriteFile (in: hFile=0x1220, lpBuffer=0x10df1ca8*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xc19f980, lpOverlapped=0x0 | out: lpBuffer=0x10df1ca8*, lpNumberOfBytesWritten=0xc19f980*=0xfe, lpOverlapped=0x0) returned 1 [0200.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0200.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0200.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2980) returned 1 [0200.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10df1ca8) returned 1 [0200.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dee0a0) returned 1 [0200.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0200.567] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85230) returned 1 [0200.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e00 [0200.567] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.568] WriteFile (in: hFile=0x1220, lpBuffer=0x7cd2250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc19fa08, lpOverlapped=0x0 | out: lpBuffer=0x7cd2250*, lpNumberOfBytesWritten=0xc19fa08*=0x10c, lpOverlapped=0x0) returned 1 [0208.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24a58 [0208.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0208.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0208.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0208.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ccc0 [0208.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0208.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0208.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b618) returned 1 [0208.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0208.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a58) returned 1 [0208.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0208.516] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="07") returned 2 [0208.516] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="ab") returned 2 [0208.516] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="5e") returned 2 [0208.516] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="a7") returned 2 [0208.516] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="9c") returned 2 [0208.516] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="88") returned 2 [0208.517] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="2b") returned 2 [0208.517] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="d2") returned 2 [0208.517] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="2f") returned 2 [0208.517] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="be") returned 2 [0208.517] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="d3") returned 2 [0208.517] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="0b") returned 2 [0208.517] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="7a") returned 2 [0208.517] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="f2") returned 2 [0208.517] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="b9") returned 2 [0208.517] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="61") returned 2 [0208.517] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="61") returned 2 [0208.517] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="d9") returned 2 [0208.517] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="35") returned 2 [0208.517] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="11") returned 2 [0208.517] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="d6") returned 2 [0208.517] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="b6") returned 2 [0208.517] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="eb") returned 2 [0208.517] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="ee") returned 2 [0208.517] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="07") returned 2 [0208.517] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="05") returned 2 [0208.517] RtlInitAnsiString (in: DestinationString=0xc19f990, SourceString="07ab5ea79c882bd22fbed30b7af2b96161d93511d6b6ebee0705" | out: DestinationString="07ab5ea79c882bd22fbed30b7af2b96161d93511d6b6ebee0705") [0208.517] RtlAnsiStringToUnicodeString (in: DestinationString=0xc19f988, SourceString="07ab5ea79c882bd22fbed30b7af2b96161d93511d6b6ebee0705", AllocateDestinationString=1 | out: DestinationString="07ab5ea79c882bd22fbed30b7af2b96161d93511d6b6ebee0705") returned 0x0 [0208.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f5d8 [0208.517] wcscat (in: _Dest=0x7cd4500, _Source="07ab5ea79c882" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\07ab5ea79c882") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\07ab5ea79c882" [0208.518] wcscat (in: _Dest=0x7cd4500, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\07ab5ea79c882.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\07ab5ea79c882.68814f" [0208.518] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\07ab5ea79c882.68814f", NtPathName=0xc19f980, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\07ab5ea79c882.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddd968 [0209.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd968) returned 1 [0209.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e97f58) returned 1 [0209.004] NtQueryInformationFile (in: FileHandle=0x1220, IoStatusBlock=0xc19f958, FileInformation=0xc19f960, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc19f958, FileInformation=0xc19f960) returned 0x0 [0209.005] NtSetInformationFile (FileHandle=0x1220, IoStatusBlock=0xc19f958, FileInformation=0xc19f960, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4500) returned 1 [0209.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0209.383] FlushFileBuffers (hFile=0x1220) returned 1 [0209.386] CloseHandle (hObject=0x1220) returned 1 [0209.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7a5ef30 [0209.511] wcscpy (in: _Dest=0x7a5ef30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\" [0209.511] wcscat (in: _Dest=0x7a5ef30, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\68814F-Readme.txt" [0209.511] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\68814f-readme.txt")) returned 0xffffffff [0209.511] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.135] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc19f99c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc19f99c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.137] CloseHandle (hObject=0xbb8) returned 1 [0210.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ef30) returned 1 [0210.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8710) returned 1 Thread: id = 6220 os_tid = 0xda0 [0189.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json")) returned 0x2020 [0190.600] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0197.565] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1228 [0197.565] GetFileSizeEx (in: hFile=0x1228, lpFileSize=0x844f95c | out: lpFileSize=0x844f95c*=242) returned 1 [0197.565] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.565] ReadFile (in: hFile=0x1228, lpBuffer=0x844f938, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x844f948, lpOverlapped=0x0 | out: lpBuffer=0x844f938*, lpNumberOfBytesRead=0x844f948*=0x4, lpOverlapped=0x0) returned 1 [0197.567] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0197.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0197.568] NtQuerySystemTime (in: CurrentTime=0x844f8d0 | out: CurrentTime=0x844f8d0*=132462177761532000) returned 0x0 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x5b3c527c [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x25073d35 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x19150120 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x7aa70dcd [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x6c622bfc [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x74972b15 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x520c30fa [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x6554d939 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x20ea19b5 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0xf528bb7 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0xe7421c0 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x681dd5c7 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x3f501fcf [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x700bfa01 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x34d2a8ce [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x6faa6a01 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x6438571b [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x3a5ed779 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x26ab090f [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x28db7ed [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x43819022 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x28e91d12 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x15c96da3 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x7a39688a [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0xf57ce39 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x4383ccb0 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x52091119 [0197.568] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x1c75d56 [0197.569] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x4c739aed [0197.569] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x725e5c3 [0197.569] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0x1f9bf47a [0197.569] RtlRandomEx (in: Seed=0x844f8c8 | out: Seed=0x844f8c8) returned 0xdfa495f [0197.577] ReadFile (in: hFile=0x1228, lpBuffer=0x10df58b0, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0x844f8c4, lpOverlapped=0x0 | out: lpBuffer=0x10df58b0*, lpNumberOfBytesRead=0x844f8c4*=0xf2, lpOverlapped=0x0) returned 1 [0197.577] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.577] WriteFile (in: hFile=0x1228, lpBuffer=0x10df94b8*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x844f8c8, lpOverlapped=0x0 | out: lpBuffer=0x10df94b8*, lpNumberOfBytesWritten=0x844f8c8*=0xf2, lpOverlapped=0x0) returned 1 [0203.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0203.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0203.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec46e0) returned 1 [0203.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10df94b8) returned 1 [0203.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10df58b0) returned 1 [0203.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30151c0) returned 1 [0203.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85740) returned 1 [0203.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a381c0 [0203.174] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.174] WriteFile (in: hFile=0x1228, lpBuffer=0x7cad2b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x844f950, lpOverlapped=0x0 | out: lpBuffer=0x7cad2b8*, lpNumberOfBytesWritten=0x844f950*=0x10c, lpOverlapped=0x0) returned 1 [0208.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24a58 [0208.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa88 [0208.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0208.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3600) returned 1 [0208.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3600 [0208.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0208.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0208.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0208.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0208.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a58) returned 1 [0208.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0208.512] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="f2") returned 2 [0208.512] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="f1") returned 2 [0208.512] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="bb") returned 2 [0208.512] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="03") returned 2 [0208.512] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="87") returned 2 [0208.512] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="46") returned 2 [0208.512] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="00") returned 2 [0208.512] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="57") returned 2 [0208.512] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="4e") returned 2 [0208.512] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="ef") returned 2 [0208.512] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="df") returned 2 [0208.512] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="68") returned 2 [0208.512] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="47") returned 2 [0208.512] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="18") returned 2 [0208.512] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="62") returned 2 [0208.512] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="33") returned 2 [0208.512] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="7d") returned 2 [0208.512] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="68") returned 2 [0208.512] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="da") returned 2 [0208.512] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="fe") returned 2 [0208.512] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="a9") returned 2 [0208.513] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="eb") returned 2 [0208.513] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="5e") returned 2 [0208.513] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="b8") returned 2 [0208.513] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="ac") returned 2 [0208.513] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="b2") returned 2 [0208.513] RtlInitAnsiString (in: DestinationString=0x844f8d8, SourceString="f2f1bb03874600574eefdf68471862337d68dafea9eb5eb8acb2" | out: DestinationString="f2f1bb03874600574eefdf68471862337d68dafea9eb5eb8acb2") [0208.513] RtlAnsiStringToUnicodeString (in: DestinationString=0x844f8d0, SourceString="f2f1bb03874600574eefdf68471862337d68dafea9eb5eb8acb2", AllocateDestinationString=1 | out: DestinationString="f2f1bb03874600574eefdf68471862337d68dafea9eb5eb8acb2") returned 0x0 [0208.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fce0 [0208.513] wcscat (in: _Dest=0x7cd43c8, _Source="f2f1bb0387460" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\f2f1bb0387460") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\f2f1bb0387460" [0208.513] wcscat (in: _Dest=0x7cd43c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\f2f1bb0387460.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\f2f1bb0387460.68814f" [0208.513] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\f2f1bb0387460.68814f", NtPathName=0x844f8c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\f2f1bb0387460.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddd820 [0208.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd820) returned 1 [0208.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca26f0) returned 1 [0208.998] NtQueryInformationFile (in: FileHandle=0x1228, IoStatusBlock=0x844f8a0, FileInformation=0x844f8a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x844f8a0, FileInformation=0x844f8a8) returned 0x0 [0208.998] NtSetInformationFile (FileHandle=0x1228, IoStatusBlock=0x844f8a0, FileInformation=0x844f8a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd43c8) returned 1 [0209.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0209.378] FlushFileBuffers (hFile=0x1228) returned 1 [0209.384] CloseHandle (hObject=0x1228) returned 1 [0209.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7cd4638 [0209.507] wcscpy (in: _Dest=0x7cd4638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\" [0209.507] wcscat (in: _Dest=0x7cd4638, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\68814F-Readme.txt" [0209.507] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\68814f-readme.txt")) returned 0xffffffff [0209.507] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.131] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x844f8e4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x844f8e4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.133] CloseHandle (hObject=0xbb8) returned 1 [0210.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4638) returned 1 [0210.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8838) returned 1 Thread: id = 6221 os_tid = 0xe34 [0189.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json")) returned 0x2020 [0190.601] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0197.578] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1230 [0197.578] GetFileSizeEx (in: hFile=0x1230, lpFileSize=0xbf6fc2c | out: lpFileSize=0xbf6fc2c*=218) returned 1 [0197.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0197.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0197.578] NtQuerySystemTime (in: CurrentTime=0xbf6fba0 | out: CurrentTime=0xbf6fba0*=132462177761532000) returned 0x0 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x211461c3 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x174af48 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0xa78ad81 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x588aac93 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x22df6e27 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x3f62f120 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x3ca9812e [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x78d262c1 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x5ca74ebe [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x45eca793 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x245dd002 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x46fd9782 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x6b210446 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x4708cf2b [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x7607c7b3 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x496e5a63 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x6c990b5e [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x5379a86f [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x28f6f24c [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x1116059a [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x30c4e05b [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x3a6ea5d0 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x6b14bcb1 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x7bd2f5ad [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x4ae096d [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0xbf30c98 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x3899f937 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x4f4d2bf6 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x4383ccb0 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x29dda953 [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0x40bc348a [0197.579] RtlRandomEx (in: Seed=0xbf6fb98 | out: Seed=0xbf6fb98) returned 0xec9d340 [0197.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dfd0c0 [0197.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e00cc8 [0197.588] ReadFile (in: hFile=0x1230, lpBuffer=0x10dfd0c0, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0xbf6fb94, lpOverlapped=0x0 | out: lpBuffer=0x10dfd0c0*, lpNumberOfBytesRead=0xbf6fb94*=0xda, lpOverlapped=0x0) returned 1 [0197.590] SetFilePointerEx (in: hFile=0x1230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.590] WriteFile (in: hFile=0x1230, lpBuffer=0x10e00cc8*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0xbf6fb98, lpOverlapped=0x0 | out: lpBuffer=0x10e00cc8*, lpNumberOfBytesWritten=0xbf6fb98*=0xda, lpOverlapped=0x0) returned 1 [0200.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3df8 [0200.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0200.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40a0) returned 1 [0200.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e00cc8) returned 1 [0200.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dfd0c0) returned 1 [0200.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0200.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84e40) returned 1 [0200.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37f20 [0200.561] SetFilePointerEx (in: hFile=0x1230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.561] WriteFile (in: hFile=0x1230, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbf6fc20, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xbf6fc20*=0x10c, lpOverlapped=0x0) returned 1 [0204.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850a0 [0204.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c4c8 [0204.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0204.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0204.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c4c8 [0204.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0204.338] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb08 [0204.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb08) returned 1 [0204.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c4c8) returned 1 [0204.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850a0) returned 1 [0204.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7e70 [0204.339] sprintf (in: _Dest=0x7ad7e70, _Format="%c%c" | out: _Dest="a9") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e72, _Format="%c%c" | out: _Dest="8b") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e74, _Format="%c%c" | out: _Dest="bb") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e76, _Format="%c%c" | out: _Dest="75") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e78, _Format="%c%c" | out: _Dest="42") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e7a, _Format="%c%c" | out: _Dest="08") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e7c, _Format="%c%c" | out: _Dest="59") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e7e, _Format="%c%c" | out: _Dest="37") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e80, _Format="%c%c" | out: _Dest="04") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e82, _Format="%c%c" | out: _Dest="0c") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e84, _Format="%c%c" | out: _Dest="f8") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e86, _Format="%c%c" | out: _Dest="1d") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e88, _Format="%c%c" | out: _Dest="ef") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e8a, _Format="%c%c" | out: _Dest="f6") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e8c, _Format="%c%c" | out: _Dest="b7") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e8e, _Format="%c%c" | out: _Dest="68") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e90, _Format="%c%c" | out: _Dest="83") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e92, _Format="%c%c" | out: _Dest="de") returned 2 [0204.339] sprintf (in: _Dest=0x7ad7e94, _Format="%c%c" | out: _Dest="18") returned 2 [0204.340] sprintf (in: _Dest=0x7ad7e96, _Format="%c%c" | out: _Dest="62") returned 2 [0204.340] sprintf (in: _Dest=0x7ad7e98, _Format="%c%c" | out: _Dest="7b") returned 2 [0204.340] sprintf (in: _Dest=0x7ad7e9a, _Format="%c%c" | out: _Dest="b1") returned 2 [0204.340] sprintf (in: _Dest=0x7ad7e9c, _Format="%c%c" | out: _Dest="74") returned 2 [0204.340] sprintf (in: _Dest=0x7ad7e9e, _Format="%c%c" | out: _Dest="41") returned 2 [0204.340] sprintf (in: _Dest=0x7ad7ea0, _Format="%c%c" | out: _Dest="81") returned 2 [0204.340] sprintf (in: _Dest=0x7ad7ea2, _Format="%c%c" | out: _Dest="8a") returned 2 [0204.340] RtlInitAnsiString (in: DestinationString=0xbf6fba8, SourceString="a98bbb7542085937040cf81deff6b76883de18627bb17441818a" | out: DestinationString="a98bbb7542085937040cf81deff6b76883de18627bb17441818a") [0204.340] RtlAnsiStringToUnicodeString (in: DestinationString=0xbf6fba0, SourceString="a98bbb7542085937040cf81deff6b76883de18627bb17441818a", AllocateDestinationString=1 | out: DestinationString="a98bbb7542085937040cf81deff6b76883de18627bb17441818a") returned 0x0 [0204.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c798 [0204.340] wcscat (in: _Dest=0x7ddf858, _Source="a98bbb7542085" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\a98bbb7542085") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\a98bbb7542085" [0204.340] wcscat (in: _Dest=0x7ddf858, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\a98bbb7542085.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\a98bbb7542085.68814f" [0204.340] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\a98bbb7542085.68814f", NtPathName=0xbf6fb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\a98bbb7542085.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd9968 [0206.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9968) returned 1 [0206.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94dc0) returned 1 [0206.224] NtQueryInformationFile (in: FileHandle=0x1230, IoStatusBlock=0xbf6fb70, FileInformation=0xbf6fb78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbf6fb70, FileInformation=0xbf6fb78) returned 0x0 [0206.224] NtSetInformationFile (FileHandle=0x1230, IoStatusBlock=0xbf6fb70, FileInformation=0xbf6fb78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf858) returned 1 [0208.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c798) returned 1 [0208.726] FlushFileBuffers (hFile=0x1230) returned 1 [0208.736] CloseHandle (hObject=0x1230) returned 1 [0209.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7a5f680 [0209.127] wcscpy (in: _Dest=0x7a5f680, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\" [0209.127] wcscat (in: _Dest=0x7a5f680, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\68814F-Readme.txt" [0209.127] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\68814f-readme.txt")) returned 0xffffffff [0209.128] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.330] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbf6fbb4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbf6fbb4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.331] CloseHandle (hObject=0x17ec) returned 1 [0210.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f680) returned 1 [0210.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8960) returned 1 Thread: id = 6222 os_tid = 0xe30 [0189.493] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json")) returned 0x2020 [0190.602] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0197.590] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x122c [0197.591] GetFileSizeEx (in: hFile=0x122c, lpFileSize=0xabafa14 | out: lpFileSize=0xabafa14*=257) returned 1 [0197.591] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.591] ReadFile (in: hFile=0x122c, lpBuffer=0xabaf9f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xabafa00, lpOverlapped=0x0 | out: lpBuffer=0xabaf9f0*, lpNumberOfBytesRead=0xabafa00*=0x4, lpOverlapped=0x0) returned 1 [0197.593] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0197.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0197.593] NtQuerySystemTime (in: CurrentTime=0xabaf988 | out: CurrentTime=0xabaf988*=132462177761688000) returned 0x0 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x63859fe1 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x614e6c5d [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x5379a86f [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x8b61ec2 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x6118e7fc [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x3c0cef00 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x216e7d01 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0xc4a4101 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x6bb46e0 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x1cff9156 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x3899f937 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x40bb9b5a [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x22977a59 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x4afabb20 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x5a928388 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x392bf7a3 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x1350e21 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x6c92e86c [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x63ed50f [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x6785ab07 [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x7da6c6bd [0197.593] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x7f55d80c [0197.594] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x21684698 [0197.594] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x3b5ccbf6 [0197.594] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0xf9504b5 [0197.594] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x524d3c0f [0197.594] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x22b5896 [0197.594] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x751e5dbb [0197.594] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x7f841ab8 [0197.594] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x14c06820 [0197.594] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x4a446ee8 [0197.594] RtlRandomEx (in: Seed=0xabaf980 | out: Seed=0xabaf980) returned 0x28db7ed [0197.604] ReadFile (in: hFile=0x122c, lpBuffer=0x10e048d0, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0xabaf97c, lpOverlapped=0x0 | out: lpBuffer=0x10e048d0*, lpNumberOfBytesRead=0xabaf97c*=0x101, lpOverlapped=0x0) returned 1 [0197.604] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.604] WriteFile (in: hFile=0x122c, lpBuffer=0x10e084d8*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xabaf980, lpOverlapped=0x0 | out: lpBuffer=0x10e084d8*, lpNumberOfBytesWritten=0xabaf980*=0x101, lpOverlapped=0x0) returned 1 [0203.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0203.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0203.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0203.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e084d8) returned 1 [0203.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e048d0) returned 1 [0203.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0203.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e84ed0) returned 1 [0203.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0203.199] SetFilePointerEx (in: hFile=0x122c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.200] WriteFile (in: hFile=0x122c, lpBuffer=0x7cad830*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabafa08, lpOverlapped=0x0 | out: lpBuffer=0x7cad830*, lpNumberOfBytesWritten=0xabafa08*=0x10c, lpOverlapped=0x0) returned 1 [0206.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cae0 [0206.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0206.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0206.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c6a8 [0206.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0206.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0206.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0206.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cae0) returned 1 [0206.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.241] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="68") returned 2 [0206.241] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.241] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="6a") returned 2 [0206.241] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="99") returned 2 [0206.241] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="39") returned 2 [0206.241] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="ff") returned 2 [0206.241] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="13") returned 2 [0206.241] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="f0") returned 2 [0206.241] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="72") returned 2 [0206.241] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="ee") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="44") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="11") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="51") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="6b") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="98") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="bd") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="82") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="95") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="8c") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="22") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="12") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="f4") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="42") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="88") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="74") returned 2 [0206.242] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="1c") returned 2 [0206.242] RtlInitAnsiString (in: DestinationString=0xabaf990, SourceString="684e6a9939ff13f072ee4411516b98bd82958c2212f44288741c" | out: DestinationString="684e6a9939ff13f072ee4411516b98bd82958c2212f44288741c") [0206.242] RtlAnsiStringToUnicodeString (in: DestinationString=0xabaf988, SourceString="684e6a9939ff13f072ee4411516b98bd82958c2212f44288741c", AllocateDestinationString=1 | out: DestinationString="684e6a9939ff13f072ee4411516b98bd82958c2212f44288741c") returned 0x0 [0206.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c810 [0206.243] wcscat (in: _Dest=0x7ddb378, _Source="684e6a9939ff1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\684e6a9939ff1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\684e6a9939ff1" [0206.243] wcscat (in: _Dest=0x7ddb378, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\684e6a9939ff1.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\684e6a9939ff1.68814f" [0206.243] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\684e6a9939ff1.68814f", NtPathName=0xabaf980, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\684e6a9939ff1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd9590 [0208.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9590) returned 1 [0208.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27a80) returned 1 [0208.741] NtQueryInformationFile (in: FileHandle=0x122c, IoStatusBlock=0xabaf958, FileInformation=0xabaf960, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xabaf958, FileInformation=0xabaf960) returned 0x0 [0208.741] NtSetInformationFile (FileHandle=0x122c, IoStatusBlock=0xabaf958, FileInformation=0xabaf960, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb378) returned 1 [0209.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c810) returned 1 [0209.132] FlushFileBuffers (hFile=0x122c) returned 1 [0210.409] CloseHandle (hObject=0x122c) returned 1 [0213.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7a5f1a0 [0213.479] wcscpy (in: _Dest=0x7a5f1a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\" [0213.479] wcscat (in: _Dest=0x7a5f1a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\68814F-Readme.txt" [0213.479] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\68814f-readme.txt")) returned 0xffffffff [0213.479] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xee0 [0213.916] WriteFile (in: hFile=0xee0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xabaf99c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xabaf99c*=0x8b9, lpOverlapped=0x0) returned 1 [0213.992] CloseHandle (hObject=0xee0) returned 1 [0214.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 [0214.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8a88) returned 1 Thread: id = 6223 os_tid = 0xe2c [0189.494] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0190.602] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0197.604] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1218 [0197.605] GetFileSizeEx (in: hFile=0x1218, lpFileSize=0x625f84c | out: lpFileSize=0x625f84c*=246) returned 1 [0197.605] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.605] ReadFile (in: hFile=0x1218, lpBuffer=0x625f828, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x625f838, lpOverlapped=0x0 | out: lpBuffer=0x625f828*, lpNumberOfBytesRead=0x625f838*=0x4, lpOverlapped=0x0) returned 1 [0197.607] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0197.607] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0197.607] NtQuerySystemTime (in: CurrentTime=0x625f7c0 | out: CurrentTime=0x625f7c0*=132462177761844000) returned 0x0 [0197.607] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0xe494900 [0197.607] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0xdf39780 [0197.607] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x4df58c2 [0197.607] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x788abb42 [0197.607] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x1fdf1b0f [0197.607] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x14ac472a [0197.607] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x78484f8c [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x6b14bcb1 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x128e0dc6 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x52c79de [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x63da4654 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x22c76db0 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x12283957 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x5f5eaff2 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x14c06820 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x123c94c0 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x376f6121 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0xe1e7040 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x392bf7a3 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x30c4e05b [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x5e86151f [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x323bd0a1 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x9ac1e4 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x547a8878 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x15a0aff0 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x7ed8ddc1 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x466d714 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x1332ddf2 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x6d5f44a7 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x728c0ef1 [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x52c79de [0197.608] RtlRandomEx (in: Seed=0x625f7b8 | out: Seed=0x625f7b8) returned 0x78b566f2 [0197.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e0c0e0 [0197.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e10060 [0197.653] ReadFile (in: hFile=0x1218, lpBuffer=0x10e0c0e0, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0x625f7b4, lpOverlapped=0x0 | out: lpBuffer=0x10e0c0e0*, lpNumberOfBytesRead=0x625f7b4*=0xf6, lpOverlapped=0x0) returned 1 [0197.653] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.654] WriteFile (in: hFile=0x1218, lpBuffer=0x10e10060*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x625f7b8, lpOverlapped=0x0 | out: lpBuffer=0x10e10060*, lpNumberOfBytesWritten=0x625f7b8*=0xf6, lpOverlapped=0x0) returned 1 [0200.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0200.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0200.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0200.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e10060) returned 1 [0200.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e0c0e0) returned 1 [0200.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e069e0) returned 1 [0200.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85158) returned 1 [0200.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ec0 [0200.563] SetFilePointerEx (in: hFile=0x1218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.564] WriteFile (in: hFile=0x1218, lpBuffer=0x7cd2020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x625f840, lpOverlapped=0x0 | out: lpBuffer=0x7cd2020*, lpNumberOfBytesWritten=0x625f840*=0x10c, lpOverlapped=0x0) returned 1 [0204.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850a0 [0204.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c4c8 [0204.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0204.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0204.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c130 [0204.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0204.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0204.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0204.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c4c8) returned 1 [0204.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850a0) returned 1 [0204.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7e70 [0204.342] sprintf (in: _Dest=0x7ad7e70, _Format="%c%c" | out: _Dest="8a") returned 2 [0204.342] sprintf (in: _Dest=0x7ad7e72, _Format="%c%c" | out: _Dest="51") returned 2 [0204.342] sprintf (in: _Dest=0x7ad7e74, _Format="%c%c" | out: _Dest="b6") returned 2 [0204.342] sprintf (in: _Dest=0x7ad7e76, _Format="%c%c" | out: _Dest="bc") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e78, _Format="%c%c" | out: _Dest="68") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e7a, _Format="%c%c" | out: _Dest="d4") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e7c, _Format="%c%c" | out: _Dest="11") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e7e, _Format="%c%c" | out: _Dest="3f") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e80, _Format="%c%c" | out: _Dest="05") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e82, _Format="%c%c" | out: _Dest="aa") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e84, _Format="%c%c" | out: _Dest="d4") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e86, _Format="%c%c" | out: _Dest="ee") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e88, _Format="%c%c" | out: _Dest="64") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e8a, _Format="%c%c" | out: _Dest="33") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e8c, _Format="%c%c" | out: _Dest="ea") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e8e, _Format="%c%c" | out: _Dest="10") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e90, _Format="%c%c" | out: _Dest="a6") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e92, _Format="%c%c" | out: _Dest="37") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e94, _Format="%c%c" | out: _Dest="8c") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e96, _Format="%c%c" | out: _Dest="72") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e98, _Format="%c%c" | out: _Dest="3d") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e9a, _Format="%c%c" | out: _Dest="4b") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e9c, _Format="%c%c" | out: _Dest="c0") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7e9e, _Format="%c%c" | out: _Dest="57") returned 2 [0204.343] sprintf (in: _Dest=0x7ad7ea0, _Format="%c%c" | out: _Dest="24") returned 2 [0204.344] sprintf (in: _Dest=0x7ad7ea2, _Format="%c%c" | out: _Dest="3f") returned 2 [0204.344] RtlInitAnsiString (in: DestinationString=0x625f7c8, SourceString="8a51b6bc68d4113f05aad4ee6433ea10a6378c723d4bc057243f" | out: DestinationString="8a51b6bc68d4113f05aad4ee6433ea10a6378c723d4bc057243f") [0204.344] RtlAnsiStringToUnicodeString (in: DestinationString=0x625f7c0, SourceString="8a51b6bc68d4113f05aad4ee6433ea10a6378c723d4bc057243f", AllocateDestinationString=1 | out: DestinationString="8a51b6bc68d4113f05aad4ee6433ea10a6378c723d4bc057243f") returned 0x0 [0204.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c888 [0204.344] wcscat (in: _Dest=0x7ddf990, _Source="8a51b6bc68d41" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\8a51b6bc68d41") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\8a51b6bc68d41" [0204.344] wcscat (in: _Dest=0x7ddf990, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\8a51b6bc68d41.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\8a51b6bc68d41.68814f" [0204.344] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\8a51b6bc68d41.68814f", NtPathName=0x625f7b8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\8a51b6bc68d41.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0a560 [0206.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0a560) returned 1 [0206.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94b98) returned 1 [0206.225] NtQueryInformationFile (in: FileHandle=0x1218, IoStatusBlock=0x625f790, FileInformation=0x625f798, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x625f790, FileInformation=0x625f798) returned 0x0 [0206.225] NtSetInformationFile (FileHandle=0x1218, IoStatusBlock=0x625f790, FileInformation=0x625f798, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf990) returned 1 [0208.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c888) returned 1 [0208.730] FlushFileBuffers (hFile=0x1218) returned 1 [0208.739] CloseHandle (hObject=0x1218) returned 1 [0209.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7a5f1a0 [0209.129] wcscpy (in: _Dest=0x7a5f1a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\" [0209.129] wcscat (in: _Dest=0x7a5f1a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\68814F-Readme.txt" [0209.129] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\68814f-readme.txt")) returned 0xffffffff [0209.129] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1238 [0210.394] WriteFile (in: hFile=0x1238, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x625f7d4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x625f7d4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.396] CloseHandle (hObject=0x1238) returned 1 [0210.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 [0210.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8bb0) returned 1 Thread: id = 6224 os_tid = 0xe24 [0189.494] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0190.603] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0197.654] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1238 [0197.655] GetFileSizeEx (in: hFile=0x1238, lpFileSize=0x857fb3c | out: lpFileSize=0x857fb3c*=264) returned 1 [0197.655] SetFilePointerEx (in: hFile=0x1238, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.655] ReadFile (in: hFile=0x1238, lpBuffer=0x857fb18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x857fb28, lpOverlapped=0x0 | out: lpBuffer=0x857fb18*, lpNumberOfBytesRead=0x857fb28*=0x4, lpOverlapped=0x0) returned 1 [0197.656] SetFilePointerEx (in: hFile=0x1238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0197.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0197.657] NtQuerySystemTime (in: CurrentTime=0x857fab0 | out: CurrentTime=0x857fab0*=132462177762312000) returned 0x0 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x1bbad393 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x7409dfcf [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x3373f51d [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0xf9504b5 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x4b57a0b2 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x266c64bd [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x22c76db0 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x3b6d7ca6 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x217227ea [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x7942ee21 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x72cf1366 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x2aa8bf8d [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x5178e333 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x37aff636 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x9a9fd44 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0xb0b0b7b [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x7fe1b39d [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x33d6b335 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x5922780d [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x6d70a287 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x2bb3ec4c [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x65208ce4 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x1a58efa1 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x45800622 [0197.657] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x68d43371 [0197.658] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x6d596265 [0197.658] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x3990273c [0197.658] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x463fdd61 [0197.658] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x5daba81c [0197.658] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x4c60ea74 [0197.658] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0x1873ca4e [0197.658] RtlRandomEx (in: Seed=0x857faa8 | out: Seed=0x857faa8) returned 0xf626748 [0197.667] ReadFile (in: hFile=0x1238, lpBuffer=0x10e13c68, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x857faa4, lpOverlapped=0x0 | out: lpBuffer=0x10e13c68*, lpNumberOfBytesRead=0x857faa4*=0x108, lpOverlapped=0x0) returned 1 [0197.667] SetFilePointerEx (in: hFile=0x1238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.668] WriteFile (in: hFile=0x1238, lpBuffer=0x10e17870*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x857faa8, lpOverlapped=0x0 | out: lpBuffer=0x10e17870*, lpNumberOfBytesWritten=0x857faa8*=0x108, lpOverlapped=0x0) returned 1 [0203.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0203.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0203.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d58) returned 1 [0203.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e17870) returned 1 [0203.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e13c68) returned 1 [0203.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0203.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49ad0) returned 1 [0203.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38460 [0203.200] SetFilePointerEx (in: hFile=0x1238, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.201] WriteFile (in: hFile=0x1238, lpBuffer=0x7cad948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x857fb30, lpOverlapped=0x0 | out: lpBuffer=0x7cad948*, lpNumberOfBytesWritten=0x857fb30*=0x10c, lpOverlapped=0x0) returned 1 [0206.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c450 [0206.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b708 [0206.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b708) returned 1 [0206.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b708 [0206.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3c0 [0206.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0206.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0206.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c450) returned 1 [0206.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.250] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="4f") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="41") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="f7") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="07") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="d7") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="34") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="98") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="6e") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="a5") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="63") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="ff") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="23") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="fe") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="f5") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="fc") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="03") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="fe") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="e7") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="47") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="a5") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="5d") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="7c") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="d7") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="98") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="70") returned 2 [0206.251] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="71") returned 2 [0206.251] RtlInitAnsiString (in: DestinationString=0x857fab8, SourceString="4f41f707d734986ea563ff23fef5fc03fee747a55d7cd7987071" | out: DestinationString="4f41f707d734986ea563ff23fef5fc03fee747a55d7cd7987071") [0206.252] RtlAnsiStringToUnicodeString (in: DestinationString=0x857fab0, SourceString="4f41f707d734986ea563ff23fef5fc03fee747a55d7cd7987071", AllocateDestinationString=1 | out: DestinationString="4f41f707d734986ea563ff23fef5fc03fee747a55d7cd7987071") returned 0x0 [0206.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cae0 [0206.252] wcscat (in: _Dest=0x7ddb4b0, _Source="4f41f707d7349" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\4f41f707d7349") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\4f41f707d7349" [0206.252] wcscat (in: _Dest=0x7ddb4b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\4f41f707d7349.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\4f41f707d7349.68814f" [0206.252] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\4f41f707d7349.68814f", NtPathName=0x857faa8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\4f41f707d7349.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0a560 [0208.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0a560) returned 1 [0208.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24270) returned 1 [0208.743] NtQueryInformationFile (in: FileHandle=0x1238, IoStatusBlock=0x857fa80, FileInformation=0x857fa88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x857fa80, FileInformation=0x857fa88) returned 0x0 [0208.743] NtSetInformationFile (FileHandle=0x1238, IoStatusBlock=0x857fa80, FileInformation=0x857fa88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb4b0) returned 1 [0209.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cae0) returned 1 [0209.134] FlushFileBuffers (hFile=0x1238) returned 1 [0210.378] CloseHandle (hObject=0x1238) returned 1 [0210.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7ddfc00 [0210.380] wcscpy (in: _Dest=0x7ddfc00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\" [0210.380] wcscat (in: _Dest=0x7ddfc00, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\68814F-Readme.txt" [0210.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\68814f-readme.txt")) returned 0xffffffff [0210.380] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1238 [0210.381] WriteFile (in: hFile=0x1238, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x857fac4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x857fac4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.382] CloseHandle (hObject=0x1238) returned 1 [0210.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddfc00) returned 1 [0210.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8cd8) returned 1 Thread: id = 6225 os_tid = 0xe18 [0189.494] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json")) returned 0x2020 [0190.604] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0197.668] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1234 [0197.668] GetFileSizeEx (in: hFile=0x1234, lpFileSize=0xc0efa74 | out: lpFileSize=0xc0efa74*=281) returned 1 [0197.668] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.668] ReadFile (in: hFile=0x1234, lpBuffer=0xc0efa50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc0efa60, lpOverlapped=0x0 | out: lpBuffer=0xc0efa50*, lpNumberOfBytesRead=0xc0efa60*=0x4, lpOverlapped=0x0) returned 1 [0197.670] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0197.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0197.670] NtQuerySystemTime (in: CurrentTime=0xc0ef9e8 | out: CurrentTime=0xc0ef9e8*=132462177762468000) returned 0x0 [0197.670] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x259917d9 [0197.670] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x7eb03fd6 [0197.670] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x5ab1fbc1 [0197.670] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x72cf1366 [0197.670] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x1f078196 [0197.670] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x565e4348 [0197.670] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x2287d4 [0197.670] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x788abb42 [0197.670] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x13b4103f [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0xaea67db [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0xc4a4101 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x21b2c027 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x33ec2af [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0xf626748 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x1d4b37fb [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x7095bca6 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x585ad8eb [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x574e4325 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x2757e10d [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x5c7f471d [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x40bb9b5a [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x2ad8545 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x702c96b0 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x6e3f5ff8 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x25f9314b [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x6b13b1ae [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x6d70a287 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x29666181 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x4e149236 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x6008b9b3 [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0xef945fa [0197.671] RtlRandomEx (in: Seed=0xc0ef9e0 | out: Seed=0xc0ef9e0) returned 0x3600c0e3 [0197.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e1b478 [0197.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e1f080 [0197.684] ReadFile (in: hFile=0x1234, lpBuffer=0x10e1b478, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0xc0ef9dc, lpOverlapped=0x0 | out: lpBuffer=0x10e1b478*, lpNumberOfBytesRead=0xc0ef9dc*=0x119, lpOverlapped=0x0) returned 1 [0197.684] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.684] WriteFile (in: hFile=0x1234, lpBuffer=0x10e1f080*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xc0ef9e0, lpOverlapped=0x0 | out: lpBuffer=0x10e1f080*, lpNumberOfBytesWritten=0xc0ef9e0*=0x119, lpOverlapped=0x0) returned 1 [0200.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a60 [0200.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4078 [0200.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4078) returned 1 [0200.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e1f080) returned 1 [0200.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e1b478) returned 1 [0200.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0200.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e499b0) returned 1 [0200.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e60 [0200.565] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.566] WriteFile (in: hFile=0x1234, lpBuffer=0x7cd2138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc0efa68, lpOverlapped=0x0 | out: lpBuffer=0x7cd2138*, lpNumberOfBytesWritten=0xc0efa68*=0x10c, lpOverlapped=0x0) returned 1 [0204.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850a0 [0204.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c4c8 [0204.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0204.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0204.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0204.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0204.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec65a8 [0204.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec65a8) returned 1 [0204.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c4c8) returned 1 [0204.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850a0) returned 1 [0204.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7e70 [0204.327] sprintf (in: _Dest=0x7ad7e70, _Format="%c%c" | out: _Dest="14") returned 2 [0204.327] sprintf (in: _Dest=0x7ad7e72, _Format="%c%c" | out: _Dest="46") returned 2 [0204.327] sprintf (in: _Dest=0x7ad7e74, _Format="%c%c" | out: _Dest="c7") returned 2 [0204.327] sprintf (in: _Dest=0x7ad7e76, _Format="%c%c" | out: _Dest="29") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e78, _Format="%c%c" | out: _Dest="05") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e7a, _Format="%c%c" | out: _Dest="5c") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e7c, _Format="%c%c" | out: _Dest="0f") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e7e, _Format="%c%c" | out: _Dest="4d") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e80, _Format="%c%c" | out: _Dest="bf") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e82, _Format="%c%c" | out: _Dest="63") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e84, _Format="%c%c" | out: _Dest="1e") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e86, _Format="%c%c" | out: _Dest="0f") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e88, _Format="%c%c" | out: _Dest="6a") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e8a, _Format="%c%c" | out: _Dest="b6") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e8c, _Format="%c%c" | out: _Dest="d9") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e8e, _Format="%c%c" | out: _Dest="2c") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e90, _Format="%c%c" | out: _Dest="04") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e92, _Format="%c%c" | out: _Dest="28") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e94, _Format="%c%c" | out: _Dest="c2") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e96, _Format="%c%c" | out: _Dest="7b") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e98, _Format="%c%c" | out: _Dest="01") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e9a, _Format="%c%c" | out: _Dest="08") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e9c, _Format="%c%c" | out: _Dest="35") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7e9e, _Format="%c%c" | out: _Dest="15") returned 2 [0204.328] sprintf (in: _Dest=0x7ad7ea0, _Format="%c%c" | out: _Dest="3b") returned 2 [0204.329] sprintf (in: _Dest=0x7ad7ea2, _Format="%c%c" | out: _Dest="53") returned 2 [0204.329] RtlInitAnsiString (in: DestinationString=0xc0ef9f0, SourceString="1446c729055c0f4dbf631e0f6ab6d92c0428c27b010835153b53" | out: DestinationString="1446c729055c0f4dbf631e0f6ab6d92c0428c27b010835153b53") [0204.329] RtlAnsiStringToUnicodeString (in: DestinationString=0xc0ef9e8, SourceString="1446c729055c0f4dbf631e0f6ab6d92c0428c27b010835153b53", AllocateDestinationString=1 | out: DestinationString="1446c729055c0f4dbf631e0f6ab6d92c0428c27b010835153b53") returned 0x0 [0204.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c6a8 [0204.329] wcscat (in: _Dest=0x7ddec28, _Source="1446c729055c0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\1446c729055c0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\1446c729055c0" [0204.329] wcscat (in: _Dest=0x7ddec28, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\1446c729055c0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\1446c729055c0.68814f" [0204.329] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\1446c729055c0.68814f", NtPathName=0xc0ef9e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\1446c729055c0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd9448 [0206.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9448) returned 1 [0206.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceddf0) returned 1 [0206.219] NtQueryInformationFile (in: FileHandle=0x1234, IoStatusBlock=0xc0ef9b8, FileInformation=0xc0ef9c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc0ef9b8, FileInformation=0xc0ef9c0) returned 0x0 [0206.220] NtSetInformationFile (FileHandle=0x1234, IoStatusBlock=0xc0ef9b8, FileInformation=0xc0ef9c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddec28) returned 1 [0208.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c6a8) returned 1 [0208.715] FlushFileBuffers (hFile=0x1234) returned 1 [0208.728] CloseHandle (hObject=0x1234) returned 1 [0209.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7a5ea50 [0209.110] wcscpy (in: _Dest=0x7a5ea50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\" [0209.110] wcscat (in: _Dest=0x7a5ea50, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\68814F-Readme.txt" [0209.110] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\68814f-readme.txt")) returned 0xffffffff [0209.110] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.936] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc0ef9fc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc0ef9fc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.938] CloseHandle (hObject=0xbb8) returned 1 [0209.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ea50) returned 1 [0209.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8e00) returned 1 Thread: id = 6226 os_tid = 0xe38 [0189.495] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json")) returned 0x2020 [0190.604] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0197.685] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x123c [0197.685] GetFileSizeEx (in: hFile=0x123c, lpFileSize=0xc87fe3c | out: lpFileSize=0xc87fe3c*=338) returned 1 [0197.685] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x14e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.685] ReadFile (in: hFile=0x123c, lpBuffer=0xc87fe18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc87fe28, lpOverlapped=0x0 | out: lpBuffer=0xc87fe18*, lpNumberOfBytesRead=0xc87fe28*=0x4, lpOverlapped=0x0) returned 1 [0197.693] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0197.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be38 [0197.693] NtQuerySystemTime (in: CurrentTime=0xc87fdb0 | out: CurrentTime=0xc87fdb0*=132462177762780000) returned 0x0 [0197.693] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x4ece543 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x4f62761d [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x2aac5990 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x79931ab7 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x31475e28 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x14fd581d [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x2a61feba [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x73ebbec6 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0xe30259a [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x79f77f5a [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x62edd01c [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x365d77b9 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x71675f9a [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x4652a890 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x1616eb4 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x657db204 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x62fcdb7 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x7226f2c1 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x27412aa6 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0xd496bfa [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x7bd5a041 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0xb475dbe [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x6bd37fbf [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x10ec4ec2 [0197.694] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x51cb1130 [0197.695] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x50ecac85 [0197.695] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x4fb7149a [0197.695] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x4e12cdea [0197.695] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x63ed50f [0197.695] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x62eff350 [0197.695] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0xdfa495f [0197.695] RtlRandomEx (in: Seed=0xc87fda8 | out: Seed=0xc87fda8) returned 0x9d5aee [0197.706] ReadFile (in: hFile=0x123c, lpBuffer=0x10e22c88, nNumberOfBytesToRead=0x152, lpNumberOfBytesRead=0xc87fda4, lpOverlapped=0x0 | out: lpBuffer=0x10e22c88*, lpNumberOfBytesRead=0xc87fda4*=0x152, lpOverlapped=0x0) returned 1 [0197.706] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.706] WriteFile (in: hFile=0x123c, lpBuffer=0x10e26890*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0xc87fda8, lpOverlapped=0x0 | out: lpBuffer=0x10e26890*, lpNumberOfBytesWritten=0xc87fda8*=0x152, lpOverlapped=0x0) returned 1 [0203.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0203.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0203.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0203.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e26890) returned 1 [0203.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e22c88) returned 1 [0203.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0203.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49968) returned 1 [0203.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37800 [0203.210] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.210] WriteFile (in: hFile=0x123c, lpBuffer=0x7cada60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc87fe30, lpOverlapped=0x0 | out: lpBuffer=0x7cada60*, lpNumberOfBytesWritten=0xc87fe30*=0x10c, lpOverlapped=0x0) returned 1 [0208.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d402e8 [0208.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c888 [0208.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0208.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0208.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c428 [0208.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0208.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0208.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0208.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c888) returned 1 [0208.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d402e8) returned 1 [0208.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0208.901] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="00") returned 2 [0208.901] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="55") returned 2 [0208.901] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="73") returned 2 [0208.901] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="7d") returned 2 [0208.901] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="0a") returned 2 [0208.901] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="c6") returned 2 [0208.902] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="d7") returned 2 [0208.902] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="7a") returned 2 [0208.902] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="15") returned 2 [0208.902] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="1a") returned 2 [0208.902] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="97") returned 2 [0208.902] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="27") returned 2 [0208.902] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="98") returned 2 [0208.902] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="77") returned 2 [0208.902] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="53") returned 2 [0208.902] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="a7") returned 2 [0208.902] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="d0") returned 2 [0208.902] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="03") returned 2 [0208.902] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="95") returned 2 [0208.902] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="bc") returned 2 [0208.902] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="04") returned 2 [0208.902] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="b7") returned 2 [0208.902] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="e5") returned 2 [0208.902] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="e1") returned 2 [0208.902] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="cb") returned 2 [0208.902] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="a5") returned 2 [0208.902] RtlInitAnsiString (in: DestinationString=0xc87fdb8, SourceString="0055737d0ac6d77a151a9727987753a7d00395bc04b7e5e1cba5" | out: DestinationString="0055737d0ac6d77a151a9727987753a7d00395bc04b7e5e1cba5") [0208.902] RtlAnsiStringToUnicodeString (in: DestinationString=0xc87fdb0, SourceString="0055737d0ac6d77a151a9727987753a7d00395bc04b7e5e1cba5", AllocateDestinationString=1 | out: DestinationString="0055737d0ac6d77a151a9727987753a7d00395bc04b7e5e1cba5") returned 0x0 [0208.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c798 [0208.903] wcscat (in: _Dest=0x7ddf108, _Source="0055737d0ac6d" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\0055737d0ac6d") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\0055737d0ac6d" [0208.903] wcscat (in: _Dest=0x7ddf108, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\0055737d0ac6d.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\0055737d0ac6d.68814f" [0208.903] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\0055737d0ac6d.68814f", NtPathName=0xc87fda8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\0055737d0ac6d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddd448 [0209.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd448) returned 1 [0209.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceeae0) returned 1 [0209.272] NtQueryInformationFile (in: FileHandle=0x123c, IoStatusBlock=0xc87fd80, FileInformation=0xc87fd88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc87fd80, FileInformation=0xc87fd88) returned 0x0 [0209.272] NtSetInformationFile (FileHandle=0x123c, IoStatusBlock=0xc87fd80, FileInformation=0xc87fd88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf108) returned 1 [0209.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c798) returned 1 [0209.456] FlushFileBuffers (hFile=0x123c) returned 1 [0209.459] CloseHandle (hObject=0x123c) returned 1 [0209.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7a5e7e0 [0209.518] wcscpy (in: _Dest=0x7a5e7e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\" [0209.518] wcscat (in: _Dest=0x7a5e7e0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\68814F-Readme.txt" [0209.518] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\68814f-readme.txt")) returned 0xffffffff [0209.519] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.149] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc87fdc4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc87fdc4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.151] CloseHandle (hObject=0xbb8) returned 1 [0210.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e7e0) returned 1 [0210.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8f28) returned 1 Thread: id = 6227 os_tid = 0xe10 [0189.495] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json")) returned 0x2020 [0190.605] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0197.706] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xea4 [0197.706] GetFileSizeEx (in: hFile=0xea4, lpFileSize=0x5e4fc1c | out: lpFileSize=0x5e4fc1c*=274) returned 1 [0197.707] SetFilePointerEx (in: hFile=0xea4, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.707] ReadFile (in: hFile=0xea4, lpBuffer=0x5e4fbf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5e4fc08, lpOverlapped=0x0 | out: lpBuffer=0x5e4fbf8*, lpNumberOfBytesRead=0x5e4fc08*=0x4, lpOverlapped=0x0) returned 1 [0197.708] SetFilePointerEx (in: hFile=0xea4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be38 [0197.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0197.709] NtQuerySystemTime (in: CurrentTime=0x5e4fb90 | out: CurrentTime=0x5e4fb90*=132462177762936000) returned 0x0 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0xd483480 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0xcc7aa40 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x1ea59e9a [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x778cb330 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x284bc21f [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x466d714 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x51c16aa [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x52fa8e47 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x73b44924 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x2d6d94ba [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x3ed57b17 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x1a6e8e02 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x5ba26de5 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x132a5bdd [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x6302f1fa [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x263b35ad [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x8fb60ed [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x1b1ddc7c [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x22df6e27 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x65936ba8 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x79fa8bc3 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x5e2dd4cb [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x3ca36a75 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x6785ab07 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x268215a6 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x181b6653 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x19f69041 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x4ec2f036 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x2cb37d1c [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x3fb8ca58 [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x7279142d [0197.709] RtlRandomEx (in: Seed=0x5e4fb88 | out: Seed=0x5e4fb88) returned 0x2eb8091b [0197.717] ReadFile (in: hFile=0xea4, lpBuffer=0x10e2a498, nNumberOfBytesToRead=0x112, lpNumberOfBytesRead=0x5e4fb84, lpOverlapped=0x0 | out: lpBuffer=0x10e2a498*, lpNumberOfBytesRead=0x5e4fb84*=0x112, lpOverlapped=0x0) returned 1 [0197.718] SetFilePointerEx (in: hFile=0xea4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.718] WriteFile (in: hFile=0xea4, lpBuffer=0x10e2e0a0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x5e4fb88, lpOverlapped=0x0 | out: lpBuffer=0x10e2e0a0*, lpNumberOfBytesWritten=0x5e4fb88*=0x112, lpOverlapped=0x0) returned 1 [0199.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede078 [0199.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd6f0 [0199.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd6f0) returned 1 [0199.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e2e0a0) returned 1 [0199.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e2a498) returned 1 [0199.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3490b0) returned 1 [0199.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48c30) returned 1 [0199.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85e88 [0199.999] SetFilePointerEx (in: hFile=0xea4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.999] WriteFile (in: hFile=0xea4, lpBuffer=0x7cad948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5e4fc10, lpOverlapped=0x0 | out: lpBuffer=0x7cad948*, lpNumberOfBytesWritten=0x5e4fc10*=0x10c, lpOverlapped=0x0) returned 1 [0200.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0200.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0200.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c180 [0200.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1a8 [0200.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0200.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0200.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.772] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.772] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="2b") returned 2 [0200.772] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="04") returned 2 [0200.772] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="72") returned 2 [0200.772] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="3f") returned 2 [0200.772] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="a7") returned 2 [0200.772] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="90") returned 2 [0200.772] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="4c") returned 2 [0200.772] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="45") returned 2 [0200.772] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="55") returned 2 [0200.772] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.772] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="9c") returned 2 [0200.772] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="62") returned 2 [0200.772] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="46") returned 2 [0200.772] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="6a") returned 2 [0200.772] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="81") returned 2 [0200.772] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="c6") returned 2 [0200.772] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="30") returned 2 [0200.772] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="87") returned 2 [0200.772] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="2b") returned 2 [0200.772] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="ca") returned 2 [0200.772] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="96") returned 2 [0200.772] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="f8") returned 2 [0200.772] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="39") returned 2 [0200.773] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="d2") returned 2 [0200.773] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="ab") returned 2 [0200.773] RtlInitAnsiString (in: DestinationString=0x5e4fb98, SourceString="ee2b04723fa7904c45557b9c62466a81c630872bca96f839d2ab" | out: DestinationString="ee2b04723fa7904c45557b9c62466a81c630872bca96f839d2ab") [0200.773] RtlAnsiStringToUnicodeString (in: DestinationString=0x5e4fb90, SourceString="ee2b04723fa7904c45557b9c62466a81c630872bca96f839d2ab", AllocateDestinationString=1 | out: DestinationString="ee2b04723fa7904c45557b9c62466a81c630872bca96f839d2ab") returned 0x0 [0200.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3eaa8 [0200.773] wcscat (in: _Dest=0x7cd49e0, _Source="ee2b04723fa79" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ee2b04723fa79") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ee2b04723fa79" [0200.773] wcscat (in: _Dest=0x7cd49e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ee2b04723fa79.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ee2b04723fa79.68814f" [0200.773] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ee2b04723fa79.68814f", NtPathName=0x5e4fb88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\ee2b04723fa79.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7b87e08 [0201.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87e08) returned 1 [0201.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd59e0) returned 1 [0201.140] NtQueryInformationFile (in: FileHandle=0xea4, IoStatusBlock=0x5e4fb60, FileInformation=0x5e4fb68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5e4fb60, FileInformation=0x5e4fb68) returned 0x0 [0201.140] NtSetInformationFile (FileHandle=0xea4, IoStatusBlock=0x5e4fb60, FileInformation=0x5e4fb68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd49e0) returned 1 [0201.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0201.338] FlushFileBuffers (hFile=0xea4) returned 1 [0201.354] CloseHandle (hObject=0xea4) returned 1 [0205.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddb990 [0205.853] wcscpy (in: _Dest=0x7ddb990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\" [0205.853] wcscat (in: _Dest=0x7ddb990, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\68814F-Readme.txt" [0205.853] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\68814f-readme.txt")) returned 0xffffffff [0205.853] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2284 [0206.576] WriteFile (in: hFile=0x2284, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5e4fba4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x5e4fba4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.426] CloseHandle (hObject=0x2284) returned 1 [0215.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb990) returned 1 [0215.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9050) returned 1 Thread: id = 6228 os_tid = 0xe8c [0189.495] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json")) returned 0x2020 [0190.606] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0197.718] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11f8 [0197.718] GetFileSizeEx (in: hFile=0x11f8, lpFileSize=0x828fe84 | out: lpFileSize=0x828fe84*=268) returned 1 [0197.718] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.718] ReadFile (in: hFile=0x11f8, lpBuffer=0x828fe60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x828fe70, lpOverlapped=0x0 | out: lpBuffer=0x828fe60*, lpNumberOfBytesRead=0x828fe70*=0x4, lpOverlapped=0x0) returned 1 [0197.720] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0197.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0197.720] NtQuerySystemTime (in: CurrentTime=0x828fdf8 | out: CurrentTime=0x828fdf8*=132462177762936000) returned 0x0 [0197.720] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x6fe493e9 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x58f423d0 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x37bd8a41 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x5c0e9681 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x2f7040a3 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x501c58b [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x3483646b [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x28f11172 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0xde91142 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0xe494900 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x4fba455e [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x45964f75 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x1f286ba2 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x35dde315 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x5ae76602 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x2ca9db2e [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x10a388e5 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x3c828381 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x33f26fc6 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x7ab3a0e0 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x2768029 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x3ed2c0a9 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x1dfa37e6 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x596c95c7 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x4abf2e42 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x6fa3708f [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x5b6133c5 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x5d52db2b [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x4b38d8d3 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x2215ea8 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x499cbf31 [0197.721] RtlRandomEx (in: Seed=0x828fdf0 | out: Seed=0x828fdf0) returned 0x5b6133c5 [0197.730] ReadFile (in: hFile=0x11f8, lpBuffer=0x10e31ca8, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0x828fdec, lpOverlapped=0x0 | out: lpBuffer=0x10e31ca8*, lpNumberOfBytesRead=0x828fdec*=0x10c, lpOverlapped=0x0) returned 1 [0197.730] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.730] WriteFile (in: hFile=0x11f8, lpBuffer=0x10e358b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x828fdf0, lpOverlapped=0x0 | out: lpBuffer=0x10e358b0*, lpNumberOfBytesWritten=0x828fdf0*=0x10c, lpOverlapped=0x0) returned 1 [0200.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddb28 [0200.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddb78 [0200.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddb78) returned 1 [0200.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e358b0) returned 1 [0200.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e31ca8) returned 1 [0200.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x348f48) returned 1 [0200.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49650) returned 1 [0200.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86ab8 [0200.001] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.001] WriteFile (in: hFile=0x11f8, lpBuffer=0x7cada60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x828fe78, lpOverlapped=0x0 | out: lpBuffer=0x7cada60*, lpNumberOfBytesWritten=0x828fe78*=0x10c, lpOverlapped=0x0) returned 1 [0200.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0200.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0200.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bff0 [0200.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0200.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be38 [0200.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be38) returned 1 [0200.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.778] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="a0") returned 2 [0200.778] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="f8") returned 2 [0200.778] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="7d") returned 2 [0200.778] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.778] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="57") returned 2 [0200.778] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.778] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="83") returned 2 [0200.778] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="3e") returned 2 [0200.778] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="2a") returned 2 [0200.778] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="32") returned 2 [0200.778] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="bd") returned 2 [0200.778] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="8a") returned 2 [0200.778] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="1b") returned 2 [0200.778] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.778] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.778] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="e7") returned 2 [0200.778] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.778] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="0f") returned 2 [0200.778] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="2b") returned 2 [0200.778] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="aa") returned 2 [0200.778] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="d5") returned 2 [0200.778] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="09") returned 2 [0200.778] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="93") returned 2 [0200.778] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="37") returned 2 [0200.778] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="c8") returned 2 [0200.778] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="aa") returned 2 [0200.778] RtlInitAnsiString (in: DestinationString=0x828fe00, SourceString="a0f87ddd577a833e2a32bd8a1be3d3e73d0f2baad5099337c8aa" | out: DestinationString="a0f87ddd577a833e2a32bd8a1be3d3e73d0f2baad5099337c8aa") [0200.778] RtlAnsiStringToUnicodeString (in: DestinationString=0x828fdf8, SourceString="a0f87ddd577a833e2a32bd8a1be3d3e73d0f2baad5099337c8aa", AllocateDestinationString=1 | out: DestinationString="a0f87ddd577a833e2a32bd8a1be3d3e73d0f2baad5099337c8aa") returned 0x0 [0200.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e1c0 [0200.779] wcscat (in: _Dest=0x7cd4b18, _Source="a0f87ddd577a8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\a0f87ddd577a8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\a0f87ddd577a8" [0200.779] wcscat (in: _Dest=0x7cd4b18, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\a0f87ddd577a8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\a0f87ddd577a8.68814f" [0200.779] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\a0f87ddd577a8.68814f", NtPathName=0x828fdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\a0f87ddd577a8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7b87f50 [0201.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87f50) returned 1 [0201.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd5c08) returned 1 [0201.141] NtQueryInformationFile (in: FileHandle=0x11f8, IoStatusBlock=0x828fdc8, FileInformation=0x828fdd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x828fdc8, FileInformation=0x828fdd0) returned 0x0 [0201.141] NtSetInformationFile (FileHandle=0x11f8, IoStatusBlock=0x828fdc8, FileInformation=0x828fdd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4b18) returned 1 [0201.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0201.345] FlushFileBuffers (hFile=0x11f8) returned 1 [0201.364] CloseHandle (hObject=0x11f8) returned 1 [0205.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddae98 [0205.860] wcscpy (in: _Dest=0x7ddae98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\" [0205.860] wcscat (in: _Dest=0x7ddae98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\68814F-Readme.txt" [0205.860] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\68814f-readme.txt")) returned 0xffffffff [0205.860] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574 [0206.577] WriteFile (in: hFile=0x574, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x828fe0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x828fe0c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.428] CloseHandle (hObject=0x574) returned 1 [0215.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddae98) returned 1 [0215.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9178) returned 1 Thread: id = 6229 os_tid = 0xe04 [0189.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js")) returned 0x20 [0189.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js", dwFileAttributes=0x20) returned 0 [0189.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.498] GetLastError () returned 0x5 [0189.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js", dwFileAttributes=0x20) returned 0 [0189.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6de0) returned 1 Thread: id = 6230 os_tid = 0xdf0 [0189.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl")) returned 0x20 [0191.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl", dwFileAttributes=0x20) returned 0 [0191.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.679] GetLastError () returned 0x5 [0191.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl", dwFileAttributes=0x20) returned 0 [0191.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca94f0) returned 1 Thread: id = 6231 os_tid = 0xe90 [0189.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif")) returned 0x20 [0191.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF", dwFileAttributes=0x20) returned 0 [0191.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.683] GetLastError () returned 0x5 [0191.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF", dwFileAttributes=0x20) returned 0 [0191.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9be0) returned 1 Thread: id = 6232 os_tid = 0xdf4 [0189.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif")) returned 0x20 [0192.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF", dwFileAttributes=0x20) returned 0 [0192.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.158] GetLastError () returned 0x5 [0192.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF", dwFileAttributes=0x20) returned 0 [0192.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9ab8) returned 1 Thread: id = 6233 os_tid = 0xe08 [0189.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif")) returned 0x20 [0191.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0191.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.681] GetLastError () returned 0x5 [0191.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF", dwFileAttributes=0x20) returned 0 [0191.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9e30) returned 1 Thread: id = 6234 os_tid = 0xde8 [0189.504] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json")) returned 0x2020 [0191.000] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0198.683] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14f8 [0198.684] GetFileSizeEx (in: hFile=0x14f8, lpFileSize=0xe07f934 | out: lpFileSize=0xe07f934*=234) returned 1 [0198.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a18 [0198.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0198.684] NtQuerySystemTime (in: CurrentTime=0xe07f8a8 | out: CurrentTime=0xe07f8a8*=132462177772608000) returned 0x0 [0198.684] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x5e6d55a9 [0198.684] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x67ae3814 [0198.684] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x4ff15504 [0198.684] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x387efe52 [0198.684] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x2c51d215 [0198.684] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x34250977 [0198.684] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x5732d08f [0198.684] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x2606ecf [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x5537f005 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x1dabb6f9 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x16b31694 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x3ca50043 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x5078e0a8 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x4350446f [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x106cc1ec [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x72edf1ed [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x647efcbe [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x2672bc0 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x3bda3470 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x5dcba789 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x31a54ef3 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x1d11c4d4 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x69251533 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x3121db78 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x4bb533c3 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x7d7022a3 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x26072a7 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x19b41056 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x3edfa688 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x33d6780 [0198.685] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x38f7e84d [0198.686] RtlRandomEx (in: Seed=0xe07f8a0 | out: Seed=0xe07f8a0) returned 0x69ed223d [0198.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ec0cc8 [0198.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ec48d0 [0198.698] ReadFile (in: hFile=0x14f8, lpBuffer=0x10ec0cc8, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xe07f89c, lpOverlapped=0x0 | out: lpBuffer=0x10ec0cc8*, lpNumberOfBytesRead=0xe07f89c*=0xea, lpOverlapped=0x0) returned 1 [0198.700] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.701] WriteFile (in: hFile=0x14f8, lpBuffer=0x10ec48d0*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xe07f8a0, lpOverlapped=0x0 | out: lpBuffer=0x10ec48d0*, lpNumberOfBytesWritten=0xe07f8a0*=0xea, lpOverlapped=0x0) returned 1 [0200.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca008 [0200.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0200.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0200.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ec48d0) returned 1 [0200.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ec0cc8) returned 1 [0200.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3180 [0200.110] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.111] WriteFile (in: hFile=0x14f8, lpBuffer=0x300d948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe07f928, lpOverlapped=0x0 | out: lpBuffer=0x300d948*, lpNumberOfBytesWritten=0xe07f928*=0x10c, lpOverlapped=0x0) returned 1 [0200.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24620 [0200.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fdd0 [0200.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0200.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0200.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3358 [0200.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0200.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0200.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0200.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0200.622] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24620) returned 1 [0200.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.622] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.622] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="1d") returned 2 [0200.622] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="5c") returned 2 [0200.622] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="f8") returned 2 [0200.622] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.622] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.622] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="39") returned 2 [0200.622] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="8b") returned 2 [0200.622] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="b8") returned 2 [0200.622] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="64") returned 2 [0200.623] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="57") returned 2 [0200.623] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="ab") returned 2 [0200.623] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="7e") returned 2 [0200.623] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="9a") returned 2 [0200.623] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="53") returned 2 [0200.623] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="56") returned 2 [0200.623] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.623] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="1b") returned 2 [0200.623] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.623] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="73") returned 2 [0200.623] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="22") returned 2 [0200.623] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="1a") returned 2 [0200.623] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="25") returned 2 [0200.623] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.623] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="97") returned 2 [0200.623] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.623] RtlInitAnsiString (in: DestinationString=0xe07f8b0, SourceString="bc1d5cf89bf1398bb86457ab7e9a53563d1bf473221a25d997f7" | out: DestinationString="bc1d5cf89bf1398bb86457ab7e9a53563d1bf473221a25d997f7") [0200.623] RtlAnsiStringToUnicodeString (in: DestinationString=0xe07f8a8, SourceString="bc1d5cf89bf1398bb86457ab7e9a53563d1bf473221a25d997f7", AllocateDestinationString=1 | out: DestinationString="bc1d5cf89bf1398bb86457ab7e9a53563d1bf473221a25d997f7") returned 0x0 [0200.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fc68 [0200.624] wcscat (in: _Dest=0x7cb04c0, _Source="bc1d5cf89bf13" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\bc1d5cf89bf13") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\bc1d5cf89bf13" [0200.624] wcscat (in: _Dest=0x7cb04c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\bc1d5cf89bf13.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\bc1d5cf89bf13.68814f" [0200.624] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\bc1d5cf89bf13.68814f", NtPathName=0xe07f8a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\bc1d5cf89bf13.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3288 [0200.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3288) returned 1 [0200.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9e128) returned 1 [0200.919] NtQueryInformationFile (in: FileHandle=0x14f8, IoStatusBlock=0xe07f878, FileInformation=0xe07f880, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe07f878, FileInformation=0xe07f880) returned 0x0 [0200.920] NtSetInformationFile (FileHandle=0x14f8, IoStatusBlock=0xe07f878, FileInformation=0xe07f880, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb04c0) returned 1 [0201.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0201.186] FlushFileBuffers (hFile=0x14f8) returned 1 [0201.202] CloseHandle (hObject=0x14f8) returned 1 [0201.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cd6270 [0201.450] wcscpy (in: _Dest=0x7cd6270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\" [0201.450] wcscat (in: _Dest=0x7cd6270, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\68814F-Readme.txt" [0201.450] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\68814f-readme.txt")) returned 0xffffffff [0201.450] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13b8 [0208.693] WriteFile (in: hFile=0x13b8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe07f8bc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe07f8bc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.477] CloseHandle (hObject=0x13b8) returned 1 [0215.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6270) returned 1 [0215.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84008) returned 1 Thread: id = 6235 os_tid = 0xde4 [0189.510] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json")) returned 0x2020 [0189.932] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0194.695] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1138 [0194.695] GetFileSizeEx (in: hFile=0x1138, lpFileSize=0xc44f7ac | out: lpFileSize=0xc44f7ac*=295) returned 1 [0194.695] SetFilePointerEx (in: hFile=0x1138, liDistanceToMove=0x123, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.695] ReadFile (in: hFile=0x1138, lpBuffer=0xc44f788, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc44f798, lpOverlapped=0x0 | out: lpBuffer=0xc44f788*, lpNumberOfBytesRead=0xc44f798*=0x4, lpOverlapped=0x0) returned 1 [0194.697] SetFilePointerEx (in: hFile=0x1138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0194.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39e8 [0194.698] NtQuerySystemTime (in: CurrentTime=0xc44f720 | out: CurrentTime=0xc44f720*=132462177732828000) returned 0x0 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x3a925e49 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x1f25a3d3 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x8bedfe [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x5a83d920 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0xd3b4c34 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x7cf942ff [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x3765d0e5 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x311bef2e [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x2d151300 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x5066c768 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x4f82a5ac [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x3033c6b8 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x3abf9de4 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x59fdd0d7 [0194.698] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x3d700313 [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x77e6d805 [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x16fd94c9 [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x42146467 [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x1ad74fa2 [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x2cf34e72 [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x38c58c43 [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x2195354c [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x6f190b5 [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x1a809272 [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x2bb04fcc [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x3b8b664e [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x5b6f3c6f [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x4143838a [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x26fe51c1 [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x7d1670cc [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x3bedcb9e [0194.699] RtlRandomEx (in: Seed=0xc44f718 | out: Seed=0xc44f718) returned 0x1878556 [0194.711] ReadFile (in: hFile=0x1138, lpBuffer=0x10d848d0, nNumberOfBytesToRead=0x127, lpNumberOfBytesRead=0xc44f714, lpOverlapped=0x0 | out: lpBuffer=0x10d848d0*, lpNumberOfBytesRead=0xc44f714*=0x127, lpOverlapped=0x0) returned 1 [0194.711] SetFilePointerEx (in: hFile=0x1138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.711] WriteFile (in: hFile=0x1138, lpBuffer=0x10d884d8*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0xc44f718, lpOverlapped=0x0 | out: lpBuffer=0x10d884d8*, lpNumberOfBytesWritten=0xc44f718*=0x127, lpOverlapped=0x0) returned 1 [0199.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4b8 [0199.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edc750 [0199.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edc750) returned 1 [0199.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d884d8) returned 1 [0199.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d848d0) returned 1 [0199.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0199.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e56498) returned 1 [0199.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a377a0 [0199.288] SetFilePointerEx (in: hFile=0x1138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.288] WriteFile (in: hFile=0x1138, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc44f7a0, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xc44f7a0*=0x10c, lpOverlapped=0x0) returned 1 [0200.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0200.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bb0) returned 1 [0200.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2bb0 [0200.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30d8 [0200.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0200.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e30) returned 1 [0200.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d600 [0200.148] sprintf (in: _Dest=0x7a2d600, _Format="%c%c" | out: _Dest="42") returned 2 [0200.148] sprintf (in: _Dest=0x7a2d602, _Format="%c%c" | out: _Dest="0d") returned 2 [0200.148] sprintf (in: _Dest=0x7a2d604, _Format="%c%c" | out: _Dest="8e") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d606, _Format="%c%c" | out: _Dest="0d") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d608, _Format="%c%c" | out: _Dest="de") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d60a, _Format="%c%c" | out: _Dest="a9") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d60c, _Format="%c%c" | out: _Dest="d8") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d60e, _Format="%c%c" | out: _Dest="de") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d610, _Format="%c%c" | out: _Dest="99") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d612, _Format="%c%c" | out: _Dest="af") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d614, _Format="%c%c" | out: _Dest="5d") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d616, _Format="%c%c" | out: _Dest="01") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d618, _Format="%c%c" | out: _Dest="60") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d61a, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d61c, _Format="%c%c" | out: _Dest="a5") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d61e, _Format="%c%c" | out: _Dest="e1") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d620, _Format="%c%c" | out: _Dest="6c") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d622, _Format="%c%c" | out: _Dest="cc") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d624, _Format="%c%c" | out: _Dest="77") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d626, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d628, _Format="%c%c" | out: _Dest="f8") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d62a, _Format="%c%c" | out: _Dest="b8") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d62c, _Format="%c%c" | out: _Dest="d2") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d62e, _Format="%c%c" | out: _Dest="11") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d630, _Format="%c%c" | out: _Dest="7c") returned 2 [0200.149] sprintf (in: _Dest=0x7a2d632, _Format="%c%c" | out: _Dest="c8") returned 2 [0200.149] RtlInitAnsiString (in: DestinationString=0xc44f728, SourceString="420d8e0ddea9d8de99af5d01609ba5e16ccc777af8b8d2117cc8" | out: DestinationString="420d8e0ddea9d8de99af5d01609ba5e16ccc777af8b8d2117cc8") [0200.149] RtlAnsiStringToUnicodeString (in: DestinationString=0xc44f720, SourceString="420d8e0ddea9d8de99af5d01609ba5e16ccc777af8b8d2117cc8", AllocateDestinationString=1 | out: DestinationString="420d8e0ddea9d8de99af5d01609ba5e16ccc777af8b8d2117cc8") returned 0x0 [0200.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c978 [0200.150] wcscat (in: _Dest=0x7cbf3c8, _Source="420d8e0ddea9d" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\420d8e0ddea9d") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\420d8e0ddea9d" [0200.150] wcscat (in: _Dest=0x7cbf3c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\420d8e0ddea9d.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\420d8e0ddea9d.68814f" [0200.150] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\420d8e0ddea9d.68814f", NtPathName=0xc44f718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\420d8e0ddea9d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3518 [0200.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3518) returned 1 [0200.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccad10) returned 1 [0200.632] NtQueryInformationFile (in: FileHandle=0x1138, IoStatusBlock=0xc44f6f0, FileInformation=0xc44f6f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc44f6f0, FileInformation=0xc44f6f8) returned 0x0 [0200.632] NtSetInformationFile (FileHandle=0x1138, IoStatusBlock=0xc44f6f0, FileInformation=0xc44f6f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0200.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf3c8) returned 1 [0200.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c978) returned 1 [0200.958] FlushFileBuffers (hFile=0x1138) returned 1 [0200.971] CloseHandle (hObject=0x1138) returned 1 [0201.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7b81478 [0201.243] wcscpy (in: _Dest=0x7b81478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\" [0201.243] wcscat (in: _Dest=0x7b81478, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\68814F-Readme.txt" [0201.243] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\68814f-readme.txt")) returned 0xffffffff [0201.243] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1778 [0203.172] WriteFile (in: hFile=0x1778, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc44f734, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc44f734*=0x8b9, lpOverlapped=0x0) returned 1 [0206.596] CloseHandle (hObject=0x1778) returned 1 [0211.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81478) returned 1 [0211.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84130) returned 1 Thread: id = 6236 os_tid = 0xeb0 [0189.510] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json")) returned 0x2020 [0189.511] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0197.042] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2040 [0197.043] GetFileSizeEx (in: hFile=0x2040, lpFileSize=0x898f894 | out: lpFileSize=0x898f894*=324) returned 1 [0197.043] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.043] ReadFile (in: hFile=0x2040, lpBuffer=0x898f870, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x898f880, lpOverlapped=0x0 | out: lpBuffer=0x898f870*, lpNumberOfBytesRead=0x898f880*=0x4, lpOverlapped=0x0) returned 1 [0197.045] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0197.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0197.045] NtQuerySystemTime (in: CurrentTime=0x898f808 | out: CurrentTime=0x898f808*=132462177756228000) returned 0x0 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x250b9d0 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x5e5dd249 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x5ffd794b [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x39001966 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x32fb62cb [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x3514496a [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x15355bf4 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x8a2419a [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x95a7f41 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x385fe1b7 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0xc285b31 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x5110cfdf [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x68f9a334 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x1b1c83ed [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x3e5884cc [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x4ae0b0aa [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x7055f6a7 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x5b00022d [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x13fa1280 [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x45996e0f [0197.045] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x7dfe368f [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x1525ffc0 [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x7872405d [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x36556648 [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x4486c64b [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x5f01da78 [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x2a1b8ec1 [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x187946a0 [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x6159530d [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x2818c00f [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x47790880 [0197.046] RtlRandomEx (in: Seed=0x898f800 | out: Seed=0x898f800) returned 0x14537a39 [0197.059] ReadFile (in: hFile=0x2040, lpBuffer=0x7c43778, nNumberOfBytesToRead=0x144, lpNumberOfBytesRead=0x898f7fc, lpOverlapped=0x0 | out: lpBuffer=0x7c43778*, lpNumberOfBytesRead=0x898f7fc*=0x144, lpOverlapped=0x0) returned 1 [0197.059] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.060] WriteFile (in: hFile=0x2040, lpBuffer=0x7c47380*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x898f800, lpOverlapped=0x0 | out: lpBuffer=0x7c47380*, lpNumberOfBytesWritten=0x898f800*=0x144, lpOverlapped=0x0) returned 1 [0199.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddf10 [0199.915] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb418 [0199.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb418) returned 1 [0199.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c47380) returned 1 [0199.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c43778) returned 1 [0199.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f038) returned 1 [0199.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24350) returned 1 [0199.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a383a0 [0199.917] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.917] WriteFile (in: hFile=0x2040, lpBuffer=0x7cac7c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x898f888, lpOverlapped=0x0 | out: lpBuffer=0x7cac7c8*, lpNumberOfBytesWritten=0x898f888*=0x10c, lpOverlapped=0x0) returned 1 [0200.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e08 [0200.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e08) returned 1 [0200.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2e08 [0200.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0200.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0200.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28b8) returned 1 [0200.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.294] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="80") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="56") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="59") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="d5") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="77") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="04") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.294] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="65") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="91") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="49") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="f9") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="c2") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="18") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="5b") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="a1") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="09") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="39") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="99") returned 2 [0200.295] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="43") returned 2 [0200.295] RtlInitAnsiString (in: DestinationString=0x898f810, SourceString="f78056f759fcd577fc04fc659149f9c2fc18f1fc5ba109399943" | out: DestinationString="f78056f759fcd577fc04fc659149f9c2fc18f1fc5ba109399943") [0200.295] RtlAnsiStringToUnicodeString (in: DestinationString=0x898f808, SourceString="f78056f759fcd577fc04fc659149f9c2fc18f1fc5ba109399943", AllocateDestinationString=1 | out: DestinationString="f78056f759fcd577fc04fc659149f9c2fc18f1fc5ba109399943") returned 0x0 [0200.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3ea30 [0200.296] wcscat (in: _Dest=0x7cbfe30, _Source="f78056f759fcd" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\f78056f759fcd") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\f78056f759fcd" [0200.296] wcscat (in: _Dest=0x7cbfe30, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\f78056f759fcd.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\f78056f759fcd.68814f" [0200.296] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\f78056f759fcd.68814f", NtPathName=0x898f800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\f78056f759fcd.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x7b86ff0 [0200.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86ff0) returned 1 [0200.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccefe8) returned 1 [0200.705] NtQueryInformationFile (in: FileHandle=0x2040, IoStatusBlock=0x898f7d8, FileInformation=0x898f7e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x898f7d8, FileInformation=0x898f7e0) returned 0x0 [0200.705] NtSetInformationFile (FileHandle=0x2040, IoStatusBlock=0x898f7d8, FileInformation=0x898f7e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfe30) returned 1 [0201.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0201.053] FlushFileBuffers (hFile=0x2040) returned 1 [0201.055] CloseHandle (hObject=0x2040) returned 1 [0201.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cd6710 [0201.303] wcscpy (in: _Dest=0x7cd6710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\" [0201.303] wcscat (in: _Dest=0x7cd6710, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\68814F-Readme.txt" [0201.303] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\68814f-readme.txt")) returned 0xffffffff [0201.303] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\th\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xb50 [0208.693] WriteFile (in: hFile=0xb50, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x898f81c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x898f81c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.474] CloseHandle (hObject=0xb50) returned 1 [0215.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6710) returned 1 [0215.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6818) returned 1 Thread: id = 6237 os_tid = 0xdd0 [0189.511] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json")) returned 0x2020 [0189.511] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0197.060] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dac [0197.061] GetFileSizeEx (in: hFile=0x1dac, lpFileSize=0xcaaf854 | out: lpFileSize=0xcaaf854*=234) returned 1 [0197.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0197.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0197.061] NtQuerySystemTime (in: CurrentTime=0xcaaf7c8 | out: CurrentTime=0xcaaf7c8*=132462177756384000) returned 0x0 [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x6ebe294e [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x414776eb [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x7fa0792a [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x39be0b8a [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x52626daf [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x6739e834 [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x7b0510eb [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x1a77cdcb [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x2a3cdb67 [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x1f766a62 [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x66f3c50 [0197.061] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x63188374 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x162f4fa8 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x3e5829e2 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x487f6e2e [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0xeb3e8af [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x5a53db49 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0xc4004bc [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x326d573d [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x69e9b866 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x70ac65f0 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x3dedac0d [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x189c68c6 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x59a4cf2c [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x8f1acbd [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x1b6df041 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x744fdd72 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x533b5233 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x14d04e40 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x6d1f8a96 [0197.062] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x768cb0f1 [0197.063] RtlRandomEx (in: Seed=0xcaaf7c0 | out: Seed=0xcaaf7c0) returned 0x7f77929 [0197.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c52798 [0197.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c563a0 [0197.144] ReadFile (in: hFile=0x1dac, lpBuffer=0x7c52798, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xcaaf7bc, lpOverlapped=0x0 | out: lpBuffer=0x7c52798*, lpNumberOfBytesRead=0xcaaf7bc*=0xea, lpOverlapped=0x0) returned 1 [0197.146] SetFilePointerEx (in: hFile=0x1dac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.146] WriteFile (in: hFile=0x1dac, lpBuffer=0x7c563a0*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xcaaf7c0, lpOverlapped=0x0 | out: lpBuffer=0x7c563a0*, lpNumberOfBytesWritten=0xcaaf7c0*=0xea, lpOverlapped=0x0) returned 1 [0199.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb698 [0199.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edda10 [0199.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edda10) returned 1 [0199.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c563a0) returned 1 [0199.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c52798) returned 1 [0199.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 [0199.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24bc0) returned 1 [0199.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38400 [0199.937] SetFilePointerEx (in: hFile=0x1dac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.937] WriteFile (in: hFile=0x1dac, lpBuffer=0x7cad1a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcaaf848, lpOverlapped=0x0 | out: lpBuffer=0x7cad1a0*, lpNumberOfBytesWritten=0xcaaf848*=0x10c, lpOverlapped=0x0) returned 1 [0200.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24620 [0200.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fdd0 [0200.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0200.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d58) returned 1 [0200.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3d58 [0200.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0200.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0200.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0200.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0200.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24620) returned 1 [0200.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.610] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="e2") returned 2 [0200.610] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.610] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.610] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="98") returned 2 [0200.610] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="4e") returned 2 [0200.610] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="f9") returned 2 [0200.610] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.610] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="f0") returned 2 [0200.610] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="95") returned 2 [0200.610] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="be") returned 2 [0200.610] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="c2") returned 2 [0200.610] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="40") returned 2 [0200.610] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.610] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="14") returned 2 [0200.610] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="04") returned 2 [0200.610] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.610] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="b9") returned 2 [0200.610] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="5c") returned 2 [0200.611] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.611] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="13") returned 2 [0200.611] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="76") returned 2 [0200.611] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.611] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="3c") returned 2 [0200.611] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="bf") returned 2 [0200.611] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.611] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.611] RtlInitAnsiString (in: DestinationString=0xcaaf7d0, SourceString="e2ce3d984ef90cf095bec2404a1404ddb95ca213760c3cbff41f" | out: DestinationString="e2ce3d984ef90cf095bec2404a1404ddb95ca213760c3cbff41f") [0200.611] RtlAnsiStringToUnicodeString (in: DestinationString=0xcaaf7c8, SourceString="e2ce3d984ef90cf095bec2404a1404ddb95ca213760c3cbff41f", AllocateDestinationString=1 | out: DestinationString="e2ce3d984ef90cf095bec2404a1404ddb95ca213760c3cbff41f") returned 0x0 [0200.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fb00 [0200.611] wcscat (in: _Dest=0x7ca9ab8, _Source="e2ce3d984ef90" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\e2ce3d984ef90") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\e2ce3d984ef90" [0200.611] wcscat (in: _Dest=0x7ca9ab8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\e2ce3d984ef90.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\e2ce3d984ef90.68814f" [0200.611] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\e2ce3d984ef90.68814f", NtPathName=0xcaaf7c0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\e2ce3d984ef90.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x7b87280 [0200.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87280) returned 1 [0200.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd4cf0) returned 1 [0200.916] NtQueryInformationFile (in: FileHandle=0x1dac, IoStatusBlock=0xcaaf798, FileInformation=0xcaaf7a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcaaf798, FileInformation=0xcaaf7a0) returned 0x0 [0200.916] NtSetInformationFile (FileHandle=0x1dac, IoStatusBlock=0xcaaf798, FileInformation=0xcaaf7a0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9ab8) returned 1 [0201.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0201.183] FlushFileBuffers (hFile=0x1dac) returned 1 [0201.190] CloseHandle (hObject=0x1dac) returned 1 [0201.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cd6398 [0201.444] wcscpy (in: _Dest=0x7cd6398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\" [0201.444] wcscat (in: _Dest=0x7cd6398, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\68814F-Readme.txt" [0201.444] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\68814f-readme.txt")) returned 0xffffffff [0201.444] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\tr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17f0 [0208.694] WriteFile (in: hFile=0x17f0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcaaf7dc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcaaf7dc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.479] CloseHandle (hObject=0x17f0) returned 1 [0215.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6398) returned 1 [0215.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6940) returned 1 Thread: id = 6238 os_tid = 0x1250 [0189.512] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json")) returned 0x2020 [0189.512] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0197.146] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbc4 [0197.147] GetFileSizeEx (in: hFile=0xbc4, lpFileSize=0x92bf8cc | out: lpFileSize=0x92bf8cc*=304) returned 1 [0197.147] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x12c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.147] ReadFile (in: hFile=0xbc4, lpBuffer=0x92bf8a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x92bf8b8, lpOverlapped=0x0 | out: lpBuffer=0x92bf8a8*, lpNumberOfBytesRead=0x92bf8b8*=0x4, lpOverlapped=0x0) returned 1 [0197.149] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0197.149] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0197.150] NtQuerySystemTime (in: CurrentTime=0x92bf840 | out: CurrentTime=0x92bf840*=132462177757320000) returned 0x0 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x566eae4f [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x74164ba2 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x33a1b488 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x4ede1397 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x680816c9 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x57b3af3 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x277ae641 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x52ee23da [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x1323d6c0 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x414d98d4 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x1832383d [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x9014d6d [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x13e0d4d4 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x17bf1ab3 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x24444ded [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x3542ccd4 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x50c1fcf3 [0197.150] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x1518c25 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x709b117 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x59a49795 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x441577a5 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x4500a1d4 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x4e211cd6 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x12ce2540 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x6c37be29 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x402d7870 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0xdddcec4 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x752ec6b0 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x39e8cb23 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x39a410f0 [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x499052ec [0197.151] RtlRandomEx (in: Seed=0x92bf838 | out: Seed=0x92bf838) returned 0x66775fa [0197.161] ReadFile (in: hFile=0xbc4, lpBuffer=0x7c59fa8, nNumberOfBytesToRead=0x130, lpNumberOfBytesRead=0x92bf834, lpOverlapped=0x0 | out: lpBuffer=0x7c59fa8*, lpNumberOfBytesRead=0x92bf834*=0x130, lpOverlapped=0x0) returned 1 [0197.161] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.161] WriteFile (in: hFile=0xbc4, lpBuffer=0x7c5dbb0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x92bf838, lpOverlapped=0x0 | out: lpBuffer=0x7c5dbb0*, lpNumberOfBytesWritten=0x92bf838*=0x130, lpOverlapped=0x0) returned 1 [0199.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddbc8 [0199.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddcb8 [0199.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddcb8) returned 1 [0199.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c5dbb0) returned 1 [0199.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c59fa8) returned 1 [0199.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0199.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a247d0) returned 1 [0199.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38460 [0199.940] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.940] WriteFile (in: hFile=0xbc4, lpBuffer=0x7cac480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x92bf8c0, lpOverlapped=0x0 | out: lpBuffer=0x7cac480*, lpNumberOfBytesWritten=0x92bf8c0*=0x10c, lpOverlapped=0x0) returned 1 [0200.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0200.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3240) returned 1 [0200.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3240 [0200.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0200.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0200.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b50) returned 1 [0200.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.721] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.721] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="2b") returned 2 [0200.721] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="89") returned 2 [0200.722] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="1c") returned 2 [0200.722] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="be") returned 2 [0200.722] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="92") returned 2 [0200.722] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="84") returned 2 [0200.722] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="8c") returned 2 [0200.722] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="17") returned 2 [0200.722] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="77") returned 2 [0200.722] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="c1") returned 2 [0200.722] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="ed") returned 2 [0200.722] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.722] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="b5") returned 2 [0200.722] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="de") returned 2 [0200.722] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="93") returned 2 [0200.722] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="5b") returned 2 [0200.722] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="2e") returned 2 [0200.723] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="b9") returned 2 [0200.723] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.723] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="74") returned 2 [0200.723] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.723] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.723] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="8a") returned 2 [0200.723] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="55") returned 2 [0200.723] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="f6") returned 2 [0200.723] RtlInitAnsiString (in: DestinationString=0x92bf848, SourceString="ee2b891cbe92848c1777c1edeeb5de935b2eb9d474ee6d8a55f6" | out: DestinationString="ee2b891cbe92848c1777c1edeeb5de935b2eb9d474ee6d8a55f6") [0200.723] RtlAnsiStringToUnicodeString (in: DestinationString=0x92bf840, SourceString="ee2b891cbe92848c1777c1edeeb5de935b2eb9d474ee6d8a55f6", AllocateDestinationString=1 | out: DestinationString="ee2b891cbe92848c1777c1edeeb5de935b2eb9d474ee6d8a55f6") returned 0x0 [0200.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c6a8 [0200.723] wcscat (in: _Dest=0x7cd6020, _Source="ee2b891cbe928" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\ee2b891cbe928") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\ee2b891cbe928" [0200.723] wcscat (in: _Dest=0x7cd6020, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\ee2b891cbe928.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\ee2b891cbe928.68814f" [0200.723] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\ee2b891cbe928.68814f", NtPathName=0x92bf838, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\ee2b891cbe928.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x7b86840 [0201.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86840) returned 1 [0201.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cce2f8) returned 1 [0201.061] NtQueryInformationFile (in: FileHandle=0xbc4, IoStatusBlock=0x92bf810, FileInformation=0x92bf818, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x92bf810, FileInformation=0x92bf818) returned 0x0 [0201.062] NtSetInformationFile (FileHandle=0xbc4, IoStatusBlock=0x92bf810, FileInformation=0x92bf818, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6020) returned 1 [0201.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c6a8) returned 1 [0201.309] FlushFileBuffers (hFile=0xbc4) returned 1 [0201.313] CloseHandle (hObject=0xbc4) returned 1 [0205.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d54f00 [0205.827] wcscpy (in: _Dest=0x3d54f00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\" [0205.827] wcscat (in: _Dest=0x3d54f00, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\68814F-Readme.txt" [0205.827] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\68814f-readme.txt")) returned 0xffffffff [0205.827] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\uk\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc8 [0206.572] WriteFile (in: hFile=0x1bc8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x92bf854, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x92bf854*=0x8b9, lpOverlapped=0x0) returned 1 [0210.195] CloseHandle (hObject=0x1bc8) returned 1 [0210.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54f00) returned 1 [0210.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6a68) returned 1 Thread: id = 6239 os_tid = 0x1254 [0189.512] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json")) returned 0x2020 [0189.933] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0194.712] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3cc [0194.712] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0xe02fecc | out: lpFileSize=0xe02fecc*=232) returned 1 [0194.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39e8 [0194.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0194.713] NtQuerySystemTime (in: CurrentTime=0xe02fe40 | out: CurrentTime=0xe02fe40*=132462177732984000) returned 0x0 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x3b9edf5e [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x20f274cb [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x174bd3d8 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x6473240c [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x11c4cf59 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x4877b3bd [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x7512b78a [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x19727f49 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x1f8c476 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x55f9cb3 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x21cf16ff [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x5032ce3f [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x504f00df [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x430e33d2 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x2f0d032 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x22bb37ef [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x24baafa6 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x660a870d [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x65aac9b7 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x2f365664 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x6c8b0196 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x31dee20e [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x10a22570 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x2e162780 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x91f5d53 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x2e6bd900 [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0xbb2211f [0194.713] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x1f7061d1 [0194.714] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x5098a3bb [0194.714] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x14b05d7d [0194.714] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0xed610f1 [0194.714] RtlRandomEx (in: Seed=0xe02fe38 | out: Seed=0xe02fe38) returned 0x5500a72b [0194.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0194.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d8c0e0 [0194.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b88360 [0194.728] ReadFile (in: hFile=0x3cc, lpBuffer=0x10d8c0e0, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0xe02fe34, lpOverlapped=0x0 | out: lpBuffer=0x10d8c0e0*, lpNumberOfBytesRead=0xe02fe34*=0xe8, lpOverlapped=0x0) returned 1 [0194.730] SetFilePointerEx (in: hFile=0x3cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.730] WriteFile (in: hFile=0x3cc, lpBuffer=0x7b88360*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xe02fe38, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesWritten=0xe02fe38*=0xe8, lpOverlapped=0x0) returned 1 [0199.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd650 [0199.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb260 [0199.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb260) returned 1 [0199.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0199.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d8c0e0) returned 1 [0199.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0199.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55d00) returned 1 [0199.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0199.291] SetFilePointerEx (in: hFile=0x3cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.291] WriteFile (in: hFile=0x3cc, lpBuffer=0x7a38ea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe02fec0, lpOverlapped=0x0 | out: lpBuffer=0x7a38ea8*, lpNumberOfBytesWritten=0xe02fec0*=0x10c, lpOverlapped=0x0) returned 1 [0200.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40f0 [0200.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40f0) returned 1 [0200.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec40f0 [0200.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4168 [0200.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f88 [0200.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f88) returned 1 [0200.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.163] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="43") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="39") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="a0") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="69") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="aa") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="3f") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="62") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="c1") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="76") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="1b") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="83") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="25") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="3f") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="cd") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="65") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="f0") returned 2 [0200.163] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="67") returned 2 [0200.164] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="4d") returned 2 [0200.164] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="da") returned 2 [0200.164] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="9e") returned 2 [0200.164] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="16") returned 2 [0200.164] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.164] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.164] RtlInitAnsiString (in: DestinationString=0xe02fe48, SourceString="4339a0f46e69aa3f62c1761b83253ff3cd65f0674dda9e16f76e" | out: DestinationString="4339a0f46e69aa3f62c1761b83253ff3cd65f0674dda9e16f76e") [0200.164] RtlAnsiStringToUnicodeString (in: DestinationString=0xe02fe40, SourceString="4339a0f46e69aa3f62c1761b83253ff3cd65f0674dda9e16f76e", AllocateDestinationString=1 | out: DestinationString="4339a0f46e69aa3f62c1761b83253ff3cd65f0674dda9e16f76e") returned 0x0 [0200.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2ca68 [0200.164] wcscat (in: _Dest=0x3d54f00, _Source="4339a0f46e69a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\4339a0f46e69a") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\4339a0f46e69a" [0200.164] wcscat (in: _Dest=0x3d54f00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\4339a0f46e69a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\4339a0f46e69a.68814f" [0200.164] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\4339a0f46e69a.68814f", NtPathName=0xe02fe38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\4339a0f46e69a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3660 [0200.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3660) returned 1 [0200.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccb388) returned 1 [0200.639] NtQueryInformationFile (in: FileHandle=0x3cc, IoStatusBlock=0xe02fe10, FileInformation=0xe02fe18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe02fe10, FileInformation=0xe02fe18) returned 0x0 [0200.639] NtSetInformationFile (FileHandle=0x3cc, IoStatusBlock=0xe02fe10, FileInformation=0xe02fe18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0200.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54f00) returned 1 [0200.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ca68) returned 1 [0200.967] FlushFileBuffers (hFile=0x3cc) returned 1 [0200.978] CloseHandle (hObject=0x3cc) returned 1 [0201.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cd65e8 [0201.244] wcscpy (in: _Dest=0x7cd65e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\" [0201.244] wcscat (in: _Dest=0x7cd65e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\68814F-Readme.txt" [0201.244] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\68814f-readme.txt")) returned 0xffffffff [0201.244] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\vi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfe4 [0203.172] WriteFile (in: hFile=0xfe4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe02fe54, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe02fe54*=0x8b9, lpOverlapped=0x0) returned 1 [0206.598] CloseHandle (hObject=0xfe4) returned 1 [0211.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd65e8) returned 1 [0211.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6b90) returned 1 Thread: id = 6240 os_tid = 0x1258 [0189.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7fdf0 [0189.514] wcscpy (in: _Dest=0x7b7fdf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" [0189.514] wcscat (in: _Dest=0x7b7fdf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\" [0189.514] wcscat (in: _Dest=0x7b7fdf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*" [0189.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3cb50 [0189.514] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\*", lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d340 [0191.768] wcscmp (_String1=".", _String2=".") returned 0 [0191.768] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.768] wcscmp (_String1="..", _String2=".") returned 1 [0191.768] wcscmp (_String1="..", _String2="..") returned 0 [0191.768] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42703e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.768] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.768] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7ca9e30 [0191.769] wcscpy (in: _Dest=0x7ca9e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru" [0191.769] wcscat (in: _Dest=0x7ca9e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\" [0191.769] wcscat (in: _Dest=0x7ca9e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" [0201.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0201.818] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a3cb50 | out: lpFindFileData=0x7a3cb50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42703e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.818] FindClose (in: hFindFile=0x7a2d340 | out: hFindFile=0x7a2d340) returned 1 [0201.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3cb50) returned 1 [0201.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fdf0) returned 1 [0201.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec428) returned 1 Thread: id = 6241 os_tid = 0xee8 [0189.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7fef8 [0189.517] wcscpy (in: _Dest=0x7b7fef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" [0189.517] wcscat (in: _Dest=0x7b7fef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\" [0189.517] wcscat (in: _Dest=0x7b7fef8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*" [0189.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ba78 [0189.517] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\*", lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066f40 [0191.774] wcscmp (_String1=".", _String2=".") returned 0 [0191.775] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.775] wcscmp (_String1="..", _String2=".") returned 1 [0191.775] wcscmp (_String1="..", _String2="..") returned 0 [0191.775] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.775] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.775] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbbd08 [0191.775] wcscpy (in: _Dest=0x7cbbd08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk" [0191.775] wcscat (in: _Dest=0x7cbbd08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\" [0191.775] wcscat (in: _Dest=0x7cbbd08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" [0201.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbbd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0201.748] FindNextFileW (in: hFindFile=0x3066f40, lpFindFileData=0x7a3ba78 | out: lpFindFileData=0x7a3ba78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.748] FindClose (in: hFindFile=0x3066f40 | out: hFindFile=0x3066f40) returned 1 [0201.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ba78) returned 1 [0201.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fef8) returned 1 [0201.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6550) returned 1 Thread: id = 6242 os_tid = 0xe84 [0189.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f190 [0189.518] wcscpy (in: _Dest=0x7b7f190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" [0189.518] wcscat (in: _Dest=0x7b7f190, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\" [0189.518] wcscat (in: _Dest=0x7b7f190, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*" [0189.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d758 [0189.518] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\*", lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0191.769] wcscmp (_String1=".", _String2=".") returned 0 [0191.769] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.769] wcscmp (_String1="..", _String2=".") returned 1 [0191.769] wcscmp (_String1="..", _String2="..") returned 0 [0191.769] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42be5e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.769] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.769] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7ca94f0 [0191.770] wcscpy (in: _Dest=0x7ca94f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl" [0191.770] wcscat (in: _Dest=0x7ca94f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\" [0191.770] wcscat (in: _Dest=0x7ca94f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" [0201.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca94f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0201.820] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a3d758 | out: lpFindFileData=0x7a3d758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42be5e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.820] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0201.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d758) returned 1 [0201.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f190) returned 1 [0201.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6448) returned 1 Thread: id = 6243 os_tid = 0xeac [0189.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f6b8 [0189.519] wcscpy (in: _Dest=0x7b7f6b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" [0189.519] wcscat (in: _Dest=0x7b7f6b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\" [0189.519] wcscat (in: _Dest=0x7b7f6b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*" [0189.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d9c0 [0189.519] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\*", lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0191.774] wcscmp (_String1=".", _String2=".") returned 0 [0191.774] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.774] wcscmp (_String1="..", _String2=".") returned 1 [0191.774] wcscmp (_String1="..", _String2="..") returned 0 [0191.774] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.774] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.774] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbbbe0 [0191.774] wcscpy (in: _Dest=0x7cbbbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr" [0191.774] wcscat (in: _Dest=0x7cbbbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\" [0191.774] wcscat (in: _Dest=0x7cbbbe0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" [0201.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbbbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0201.825] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a3d9c0 | out: lpFindFileData=0x7a3d9c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e2fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.825] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0201.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d9c0) returned 1 [0201.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f6b8) returned 1 [0201.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6340) returned 1 Thread: id = 6244 os_tid = 0xde0 [0189.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bca78 [0189.520] wcscpy (in: _Dest=0x30bca78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" [0189.520] wcscat (in: _Dest=0x30bca78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\" [0189.520] wcscat (in: _Dest=0x30bca78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*" [0189.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bf48 [0189.520] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\*", lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d980 [0191.773] wcscmp (_String1=".", _String2=".") returned 0 [0191.773] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.773] wcscmp (_String1="..", _String2=".") returned 1 [0191.773] wcscmp (_String1="..", _String2="..") returned 0 [0191.773] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a16b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.773] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.773] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbbab8 [0191.773] wcscpy (in: _Dest=0x7cbbab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv" [0191.773] wcscat (in: _Dest=0x7cbbab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\" [0191.773] wcscat (in: _Dest=0x7cbbab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" [0201.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbbab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0201.822] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x7a3bf48 | out: lpFindFileData=0x7a3bf48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a16b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.822] FindClose (in: hFindFile=0x7a2d980 | out: hFindFile=0x7a2d980) returned 1 [0201.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bf48) returned 1 [0201.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca78) returned 1 [0201.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6238) returned 1 Thread: id = 6245 os_tid = 0xe78 [0189.520] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png")) returned 0x2020 [0189.521] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png", dwFileAttributes=0x20) returned 1 [0197.162] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x144c [0197.162] GetFileSizeEx (in: hFile=0x144c, lpFileSize=0xe0dfd3c | out: lpFileSize=0xe0dfd3c*=3479) returned 1 [0197.162] SetFilePointerEx (in: hFile=0x144c, liDistanceToMove=0xd93, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.163] ReadFile (in: hFile=0x144c, lpBuffer=0xe0dfd18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe0dfd28, lpOverlapped=0x0 | out: lpBuffer=0xe0dfd18*, lpNumberOfBytesRead=0xe0dfd28*=0x4, lpOverlapped=0x0) returned 1 [0197.167] SetFilePointerEx (in: hFile=0x144c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0197.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0197.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0197.167] NtQuerySystemTime (in: CurrentTime=0xe0dfcb0 | out: CurrentTime=0xe0dfcb0*=132462177757476000) returned 0x0 [0197.167] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x35037166 [0197.167] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x395bcf2c [0197.167] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x503e0ecc [0197.167] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x122167bf [0197.167] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x1abf8ad [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x42e1f3a [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x679506a1 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0xd3e43d1 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x11d54d07 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x6a469297 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x251e314d [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0xcb9b42f [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x2daceeaa [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x2f911775 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x14f88670 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x42be1bb3 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x25f49ed2 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x429a9a20 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x6e90b06a [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x68442529 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x5ba2f560 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x20e9f3f0 [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x1077a49a [0197.168] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x185b899a [0197.169] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x26a2e85f [0197.169] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x576c570d [0197.169] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x576c570d [0197.169] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x46ce36b4 [0197.169] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x5a61e0cd [0197.169] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x7f15cc2c [0197.169] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x4fff5ac4 [0197.169] RtlRandomEx (in: Seed=0xe0dfca8 | out: Seed=0xe0dfca8) returned 0x4ce7292b [0197.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0197.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c617b8 [0197.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c653c0 [0197.181] ReadFile (in: hFile=0x144c, lpBuffer=0x7c617b8, nNumberOfBytesToRead=0xd97, lpNumberOfBytesRead=0xe0dfca4, lpOverlapped=0x0 | out: lpBuffer=0x7c617b8*, lpNumberOfBytesRead=0xe0dfca4*=0xd97, lpOverlapped=0x0) returned 1 [0197.182] SetFilePointerEx (in: hFile=0x144c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.182] WriteFile (in: hFile=0x144c, lpBuffer=0x7c653c0*, nNumberOfBytesToWrite=0xd97, lpNumberOfBytesWritten=0xe0dfca8, lpOverlapped=0x0 | out: lpBuffer=0x7c653c0*, lpNumberOfBytesWritten=0xe0dfca8*=0xd97, lpOverlapped=0x0) returned 1 [0199.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb828 [0199.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb760 [0199.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb760) returned 1 [0199.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c653c0) returned 1 [0199.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c617b8) returned 1 [0199.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0199.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24c08) returned 1 [0199.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3edb760 [0199.955] SetFilePointerEx (in: hFile=0x144c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.955] WriteFile (in: hFile=0x144c, lpBuffer=0x7a6a8d0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xe0dfd30, lpOverlapped=0x0 | out: lpBuffer=0x7a6a8d0*, lpNumberOfBytesWritten=0xe0dfd30*=0x100, lpOverlapped=0x0) returned 1 [0200.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a8d0) returned 1 [0200.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb8c8) returned 1 [0200.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd768) returned 1 [0200.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb760) returned 1 [0200.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb828) returned 1 [0200.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0200.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a78) returned 1 [0200.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0200.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cad600 [0200.730] wcscpy (in: _Dest=0x7cad600, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png" [0200.730] wcscat (in: _Dest=0x7cad600, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.68814f" [0200.730] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.68814f", NtPathName=0xe0dfca8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.730] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd6148 [0201.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6148) returned 1 [0201.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccad10) returned 1 [0201.067] NtQueryInformationFile (in: FileHandle=0x144c, IoStatusBlock=0xe0dfc80, FileInformation=0xe0dfc88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe0dfc80, FileInformation=0xe0dfc88) returned 0x0 [0201.067] NtSetInformationFile (FileHandle=0x144c, IoStatusBlock=0xe0dfc80, FileInformation=0xe0dfc88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad600) returned 1 [0208.691] FlushFileBuffers (hFile=0x144c) returned 1 [0208.694] CloseHandle (hObject=0x144c) returned 1 [0210.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cd2480 [0210.188] wcscpy (in: _Dest=0x7cd2480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0210.188] wcscat (in: _Dest=0x7cd2480, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\68814F-Readme.txt" [0210.188] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\68814f-readme.txt")) returned 0xffffffff [0210.580] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcf4 [0213.548] WriteFile (in: hFile=0xcf4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe0dfcc4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe0dfcc4*=0x8b9, lpOverlapped=0x0) returned 1 [0213.998] CloseHandle (hObject=0xcf4) returned 1 [0214.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd2480) returned 1 [0214.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de72b8) returned 1 Thread: id = 6246 os_tid = 0xe7c [0189.521] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json")) returned 0x2020 [0189.521] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0199.058] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1888 [0199.058] GetFileSizeEx (in: hFile=0x1888, lpFileSize=0xb09f794 | out: lpFileSize=0xb09f794*=745) returned 1 [0199.059] SetFilePointerEx (in: hFile=0x1888, liDistanceToMove=0x2e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.059] ReadFile (in: hFile=0x1888, lpBuffer=0xb09f770, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb09f780, lpOverlapped=0x0 | out: lpBuffer=0xb09f770*, lpNumberOfBytesRead=0xb09f780*=0x4, lpOverlapped=0x0) returned 1 [0199.062] SetFilePointerEx (in: hFile=0x1888, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0199.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53670 [0199.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53828 [0199.062] NtQuerySystemTime (in: CurrentTime=0xb09f708 | out: CurrentTime=0xb09f708*=132462177776352000) returned 0x0 [0199.062] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x76a239d1 [0199.062] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x47fc783a [0199.062] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x363e2d84 [0199.062] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x6e5d5366 [0199.062] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x159042a5 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x7ab91d5a [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x5b6b618f [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x7c59ac97 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x231d583c [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x7429b3e3 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x46630567 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x57f999d7 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x4782c744 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x6e8dc8b8 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x2b55edf8 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x4a45093d [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x5468d42f [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x1abac46b [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x7735baa1 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x5a5d9a0d [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x3f134955 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x64b42631 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x7bdb5026 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0xeb59d39 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x426a7695 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x7847a18 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x48a6abb5 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x6d32027 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0xdfc7cc4 [0199.063] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x3089c4fc [0199.064] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x773af1bf [0199.064] RtlRandomEx (in: Seed=0xb09f700 | out: Seed=0xb09f700) returned 0x6b555043 [0199.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0199.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f31ca8 [0199.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f358b0 [0199.106] ReadFile (in: hFile=0x1888, lpBuffer=0x10f31ca8, nNumberOfBytesToRead=0x2e9, lpNumberOfBytesRead=0xb09f6fc, lpOverlapped=0x0 | out: lpBuffer=0x10f31ca8*, lpNumberOfBytesRead=0xb09f6fc*=0x2e9, lpOverlapped=0x0) returned 1 [0199.106] SetFilePointerEx (in: hFile=0x1888, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.106] WriteFile (in: hFile=0x1888, lpBuffer=0x10f358b0*, nNumberOfBytesToWrite=0x2e9, lpNumberOfBytesWritten=0xb09f700, lpOverlapped=0x0 | out: lpBuffer=0x10f358b0*, lpNumberOfBytesWritten=0xb09f700*=0x2e9, lpOverlapped=0x0) returned 1 [0200.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af10 [0200.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b320 [0200.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b320) returned 1 [0200.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f358b0) returned 1 [0200.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f31ca8) returned 1 [0200.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c798) returned 1 [0200.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85250) returned 1 [0200.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38430 [0200.941] SetFilePointerEx (in: hFile=0x1888, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.941] WriteFile (in: hFile=0x1888, lpBuffer=0x7cd33d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb09f788, lpOverlapped=0x0 | out: lpBuffer=0x7cd33d0*, lpNumberOfBytesWritten=0xb09f788*=0x10c, lpOverlapped=0x0) returned 1 [0201.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24ae8 [0201.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51458 [0201.251] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0201.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0201.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c018 [0201.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0201.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0201.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c360) returned 1 [0201.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0201.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ae8) returned 1 [0201.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.252] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="e0") returned 2 [0201.252] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ac") returned 2 [0201.252] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="8c") returned 2 [0201.252] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="cb") returned 2 [0201.252] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="0c") returned 2 [0201.252] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="c6") returned 2 [0201.252] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="74") returned 2 [0201.252] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="c4") returned 2 [0201.252] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="74") returned 2 [0201.252] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="6b") returned 2 [0201.252] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="f9") returned 2 [0201.252] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="2b") returned 2 [0201.253] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="75") returned 2 [0201.253] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="f6") returned 2 [0201.253] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="b8") returned 2 [0201.253] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="a6") returned 2 [0201.253] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="d9") returned 2 [0201.253] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="b4") returned 2 [0201.253] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="4f") returned 2 [0201.253] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="3c") returned 2 [0201.253] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="71") returned 2 [0201.253] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="ba") returned 2 [0201.253] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="e0") returned 2 [0201.253] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="2e") returned 2 [0201.253] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="ee") returned 2 [0201.253] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="32") returned 2 [0201.253] RtlInitAnsiString (in: DestinationString=0xb09f710, SourceString="e0ac8ccb0cc674c4746bf92b75f6b8a6d9b44f3c71bae02eee32" | out: DestinationString="e0ac8ccb0cc674c4746bf92b75f6b8a6d9b44f3c71bae02eee32") [0201.253] RtlAnsiStringToUnicodeString (in: DestinationString=0xb09f708, SourceString="e0ac8ccb0cc674c4746bf92b75f6b8a6d9b44f3c71bae02eee32", AllocateDestinationString=1 | out: DestinationString="e0ac8ccb0cc674c4746bf92b75f6b8a6d9b44f3c71bae02eee32") returned 0x0 [0201.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d50fa8 [0201.253] wcscat (in: _Dest=0x7cd33d0, _Source="e0ac8ccb0cc67" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\e0ac8ccb0cc67") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\e0ac8ccb0cc67" [0201.253] wcscat (in: _Dest=0x7cd33d0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\e0ac8ccb0cc67.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\e0ac8ccb0cc67.68814f" [0201.254] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\e0ac8ccb0cc67.68814f", NtPathName=0xb09f700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\e0ac8ccb0cc67.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7ddf108 [0208.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf108) returned 1 [0208.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94748) returned 1 [0208.690] NtQueryInformationFile (in: FileHandle=0x1888, IoStatusBlock=0xb09f6d8, FileInformation=0xb09f6e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb09f6d8, FileInformation=0xb09f6e0) returned 0x0 [0208.690] NtSetInformationFile (FileHandle=0x1888, IoStatusBlock=0xb09f6d8, FileInformation=0xb09f6e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd33d0) returned 1 [0210.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0210.582] FlushFileBuffers (hFile=0x1888) returned 1 [0212.718] CloseHandle (hObject=0x1888) returned 1 [0214.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cd2480 [0214.353] wcscpy (in: _Dest=0x7cd2480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\" [0214.353] wcscat (in: _Dest=0x7cd2480, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\68814F-Readme.txt" [0214.353] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\68814f-readme.txt")) returned 0x2020 [0214.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd2480) returned 1 [0214.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38d90) returned 1 Thread: id = 6247 os_tid = 0xe80 [0189.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bc238 [0189.522] wcscpy (in: _Dest=0x30bc238, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0189.522] wcscat (in: _Dest=0x30bc238, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0189.522] wcscat (in: _Dest=0x30bc238, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*" [0189.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3dc28 [0189.522] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\*", lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0189.934] wcscmp (_String1=".", _String2=".") returned 0 [0189.934] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.934] wcscmp (_String1="..", _String2=".") returned 1 [0189.934] wcscmp (_String1="..", _String2="..") returned 0 [0189.934] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0189.934] wcscmp (_String1="ar", _String2=".") returned 1 [0189.934] wcscmp (_String1="ar", _String2="..") returned 1 [0189.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a8d0 [0189.934] wcscpy (in: _Dest=0x7a6a8d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0189.934] wcscat (in: _Dest=0x7a6a8d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0189.934] wcscat (in: _Dest=0x7a6a8d0, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0190.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4 [0190.461] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0190.461] wcscmp (_String1="bg", _String2=".") returned 1 [0190.461] wcscmp (_String1="bg", _String2="..") returned 1 [0190.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cab4c0 [0190.461] wcscpy (in: _Dest=0x7cab4c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.461] wcscat (in: _Dest=0x7cab4c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.461] wcscat (in: _Dest=0x7cab4c0, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0190.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab4c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0190.463] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0190.463] wcscmp (_String1="ca", _String2=".") returned 1 [0190.463] wcscmp (_String1="ca", _String2="..") returned 1 [0190.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cabd00 [0190.463] wcscpy (in: _Dest=0x7cabd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.463] wcscat (in: _Dest=0x7cabd00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.463] wcscat (in: _Dest=0x7cabd00, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0190.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cabd00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454 [0190.464] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfaa40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dfaa40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0190.464] wcscmp (_String1="cs", _String2=".") returned 1 [0190.464] wcscmp (_String1="cs", _String2="..") returned 1 [0190.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caaf98 [0190.464] wcscpy (in: _Dest=0x7caaf98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.464] wcscat (in: _Dest=0x7caaf98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.464] wcscat (in: _Dest=0x7caaf98, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0190.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caaf98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0190.466] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0190.466] wcscmp (_String1="da", _String2=".") returned 1 [0190.466] wcscmp (_String1="da", _String2="..") returned 1 [0190.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cabbf8 [0190.466] wcscpy (in: _Dest=0x7cabbf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.466] wcscat (in: _Dest=0x7cabbf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.466] wcscat (in: _Dest=0x7cabbf8, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0190.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cabbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0190.467] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0190.467] wcscmp (_String1="de", _String2=".") returned 1 [0190.467] wcscmp (_String1="de", _String2="..") returned 1 [0190.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caae90 [0190.468] wcscpy (in: _Dest=0x7caae90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.468] wcscat (in: _Dest=0x7caae90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.468] wcscat (in: _Dest=0x7caae90, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0190.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caae90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0190.470] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0190.470] wcscmp (_String1="el", _String2=".") returned 1 [0190.470] wcscmp (_String1="el", _String2="..") returned 1 [0190.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caad88 [0190.470] wcscpy (in: _Dest=0x7caad88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.470] wcscat (in: _Dest=0x7caad88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.470] wcscat (in: _Dest=0x7caad88, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0190.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caad88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0190.471] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0190.472] wcscmp (_String1="en", _String2=".") returned 1 [0190.472] wcscmp (_String1="en", _String2="..") returned 1 [0190.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caac80 [0190.472] wcscpy (in: _Dest=0x7caac80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.472] wcscat (in: _Dest=0x7caac80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.472] wcscat (in: _Dest=0x7caac80, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0190.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caac80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0190.473] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0190.473] wcscmp (_String1="es", _String2=".") returned 1 [0190.473] wcscmp (_String1="es", _String2="..") returned 1 [0190.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cabaf0 [0190.473] wcscpy (in: _Dest=0x7cabaf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.473] wcscat (in: _Dest=0x7cabaf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.474] wcscat (in: _Dest=0x7cabaf0, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0190.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cabaf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0190.475] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0190.475] wcscmp (_String1="fi", _String2=".") returned 1 [0190.475] wcscmp (_String1="fi", _String2="..") returned 1 [0190.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caab78 [0190.475] wcscpy (in: _Dest=0x7caab78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.475] wcscat (in: _Dest=0x7caab78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.475] wcscat (in: _Dest=0x7caab78, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0190.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caab78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0190.477] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0190.477] wcscmp (_String1="fil", _String2=".") returned 1 [0190.477] wcscmp (_String1="fil", _String2="..") returned 1 [0190.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7cab9e8 [0190.477] wcscpy (in: _Dest=0x7cab9e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.477] wcscat (in: _Dest=0x7cab9e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.477] wcscat (in: _Dest=0x7cab9e8, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0190.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0190.478] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0190.478] wcscmp (_String1="fr", _String2=".") returned 1 [0190.478] wcscmp (_String1="fr", _String2="..") returned 1 [0190.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caaa70 [0190.479] wcscpy (in: _Dest=0x7caaa70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.479] wcscat (in: _Dest=0x7caaa70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.479] wcscat (in: _Dest=0x7caaa70, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0190.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caaa70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0190.480] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0190.480] wcscmp (_String1="he", _String2=".") returned 1 [0190.480] wcscmp (_String1="he", _String2="..") returned 1 [0190.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cab8e0 [0190.481] wcscpy (in: _Dest=0x7cab8e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.481] wcscat (in: _Dest=0x7cab8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.481] wcscat (in: _Dest=0x7cab8e0, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0190.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0190.482] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0190.482] wcscmp (_String1="hi", _String2=".") returned 1 [0190.482] wcscmp (_String1="hi", _String2="..") returned 1 [0190.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cab7d8 [0190.482] wcscpy (in: _Dest=0x7cab7d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.482] wcscat (in: _Dest=0x7cab7d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.483] wcscat (in: _Dest=0x7cab7d8, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0190.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cab7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0190.484] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0190.484] wcscmp (_String1="hr", _String2=".") returned 1 [0190.484] wcscmp (_String1="hr", _String2="..") returned 1 [0190.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa440 [0190.484] wcscpy (in: _Dest=0x7caa440, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.484] wcscat (in: _Dest=0x7caa440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.485] wcscat (in: _Dest=0x7caa440, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0190.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac [0190.486] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0190.486] wcscmp (_String1="hu", _String2=".") returned 1 [0190.486] wcscmp (_String1="hu", _String2="..") returned 1 [0190.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa548 [0190.487] wcscpy (in: _Dest=0x7caa548, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.487] wcscat (in: _Dest=0x7caa548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.487] wcscat (in: _Dest=0x7caa548, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0190.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0190.488] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0190.488] wcscmp (_String1="id", _String2=".") returned 1 [0190.488] wcscmp (_String1="id", _String2="..") returned 1 [0190.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa650 [0190.488] wcscpy (in: _Dest=0x7caa650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.488] wcscat (in: _Dest=0x7caa650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.488] wcscat (in: _Dest=0x7caa650, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0190.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0190.490] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0190.490] wcscmp (_String1="it", _String2=".") returned 1 [0190.490] wcscmp (_String1="it", _String2="..") returned 1 [0190.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa758 [0190.490] wcscpy (in: _Dest=0x7caa758, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.490] wcscat (in: _Dest=0x7caa758, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.490] wcscat (in: _Dest=0x7caa758, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0190.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0190.492] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0190.492] wcscmp (_String1="ja", _String2=".") returned 1 [0190.492] wcscmp (_String1="ja", _String2="..") returned 1 [0190.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa860 [0190.492] wcscpy (in: _Dest=0x7caa860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.492] wcscat (in: _Dest=0x7caa860, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.492] wcscat (in: _Dest=0x7caa860, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0190.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0190.494] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0190.494] wcscmp (_String1="ko", _String2=".") returned 1 [0190.494] wcscmp (_String1="ko", _String2="..") returned 1 [0190.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa968 [0190.494] wcscpy (in: _Dest=0x7caa968, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.494] wcscat (in: _Dest=0x7caa968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.494] wcscat (in: _Dest=0x7caa968, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0190.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74 [0190.496] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41d8e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0190.496] wcscmp (_String1="lt", _String2=".") returned 1 [0190.496] wcscmp (_String1="lt", _String2="..") returned 1 [0190.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa128 [0190.496] wcscpy (in: _Dest=0x7caa128, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.497] wcscat (in: _Dest=0x7caa128, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.497] wcscat (in: _Dest=0x7caa128, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0190.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8 [0190.958] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0190.958] wcscmp (_String1="lv", _String2=".") returned 1 [0190.958] wcscmp (_String1="lv", _String2="..") returned 1 [0190.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6abe8 [0190.958] wcscpy (in: _Dest=0x7a6abe8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0190.958] wcscat (in: _Dest=0x7a6abe8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0190.958] wcscat (in: _Dest=0x7a6abe8, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0192.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6abe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0192.272] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0192.273] wcscmp (_String1="nl", _String2=".") returned 1 [0192.273] wcscmp (_String1="nl", _String2="..") returned 1 [0192.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad6970 [0192.273] wcscpy (in: _Dest=0x7ad6970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.273] wcscat (in: _Dest=0x7ad6970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.273] wcscat (in: _Dest=0x7ad6970, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0192.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0192.275] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0192.275] wcscmp (_String1="no", _String2=".") returned 1 [0192.275] wcscmp (_String1="no", _String2="..") returned 1 [0192.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad6b80 [0192.275] wcscpy (in: _Dest=0x7ad6b80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.275] wcscat (in: _Dest=0x7ad6b80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.275] wcscat (in: _Dest=0x7ad6b80, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0192.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248 [0192.277] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0192.277] wcscmp (_String1="pl", _String2=".") returned 1 [0192.277] wcscmp (_String1="pl", _String2="..") returned 1 [0192.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad6c88 [0192.277] wcscpy (in: _Dest=0x7ad6c88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.278] wcscat (in: _Dest=0x7ad6c88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.278] wcscat (in: _Dest=0x7ad6c88, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0192.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944 [0192.279] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0192.279] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0192.280] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0192.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cac8e0 [0192.280] wcscpy (in: _Dest=0x7cac8e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.280] wcscat (in: _Dest=0x7cac8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.280] wcscat (in: _Dest=0x7cac8e0, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0192.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac8e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1810 [0192.282] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0192.282] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0192.282] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0192.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cac9f8 [0192.282] wcscpy (in: _Dest=0x7cac9f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.282] wcscat (in: _Dest=0x7cac9f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.283] wcscat (in: _Dest=0x7cac9f8, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0192.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x183c [0192.286] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0192.286] wcscmp (_String1="ro", _String2=".") returned 1 [0192.286] wcscmp (_String1="ro", _String2="..") returned 1 [0192.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad6d90 [0192.286] wcscpy (in: _Dest=0x7ad6d90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.286] wcscat (in: _Dest=0x7ad6d90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.286] wcscat (in: _Dest=0x7ad6d90, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0192.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540 [0192.288] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0192.288] wcscmp (_String1="ru", _String2=".") returned 1 [0192.288] wcscmp (_String1="ru", _String2="..") returned 1 [0192.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad52c0 [0192.289] wcscpy (in: _Dest=0x7ad52c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.289] wcscat (in: _Dest=0x7ad52c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.289] wcscat (in: _Dest=0x7ad52c0, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0192.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad52c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4 [0192.290] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0192.291] wcscmp (_String1="sk", _String2=".") returned 1 [0192.291] wcscmp (_String1="sk", _String2="..") returned 1 [0192.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad6e98 [0192.291] wcscpy (in: _Dest=0x7ad6e98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.291] wcscat (in: _Dest=0x7ad6e98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.291] wcscat (in: _Dest=0x7ad6e98, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0192.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad6e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0 [0192.293] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0192.293] wcscmp (_String1="sl", _String2=".") returned 1 [0192.293] wcscmp (_String1="sl", _String2="..") returned 1 [0192.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad53c8 [0192.293] wcscpy (in: _Dest=0x7ad53c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.293] wcscat (in: _Dest=0x7ad53c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.294] wcscat (in: _Dest=0x7ad53c8, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0192.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad53c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18d8 [0192.295] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0192.295] wcscmp (_String1="sr", _String2=".") returned 1 [0192.295] wcscmp (_String1="sr", _String2="..") returned 1 [0192.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad55d8 [0192.296] wcscpy (in: _Dest=0x7ad55d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.296] wcscat (in: _Dest=0x7ad55d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.296] wcscat (in: _Dest=0x7ad55d8, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0192.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad55d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494 [0192.297] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0192.297] wcscmp (_String1="sv", _String2=".") returned 1 [0192.297] wcscmp (_String1="sv", _String2="..") returned 1 [0192.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad56e0 [0192.298] wcscpy (in: _Dest=0x7ad56e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.298] wcscat (in: _Dest=0x7ad56e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.298] wcscat (in: _Dest=0x7ad56e0, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0192.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad56e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0192.299] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0192.300] wcscmp (_String1="th", _String2=".") returned 1 [0192.300] wcscmp (_String1="th", _String2="..") returned 1 [0192.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad57e8 [0192.300] wcscpy (in: _Dest=0x7ad57e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.300] wcscat (in: _Dest=0x7ad57e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.300] wcscat (in: _Dest=0x7ad57e8, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0192.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad57e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0192.302] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0192.302] wcscmp (_String1="tr", _String2=".") returned 1 [0192.302] wcscmp (_String1="tr", _String2="..") returned 1 [0192.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad58f0 [0192.302] wcscpy (in: _Dest=0x7ad58f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.302] wcscat (in: _Dest=0x7ad58f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.302] wcscat (in: _Dest=0x7ad58f0, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0192.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad58f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0192.304] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0192.304] wcscmp (_String1="uk", _String2=".") returned 1 [0192.304] wcscmp (_String1="uk", _String2="..") returned 1 [0192.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad50b0 [0192.304] wcscpy (in: _Dest=0x7ad50b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.304] wcscat (in: _Dest=0x7ad50b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.305] wcscat (in: _Dest=0x7ad50b0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0192.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0192.306] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0192.306] wcscmp (_String1="vi", _String2=".") returned 1 [0192.306] wcscmp (_String1="vi", _String2="..") returned 1 [0192.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7ad54d0 [0192.306] wcscpy (in: _Dest=0x7ad54d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0192.307] wcscat (in: _Dest=0x7ad54d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0192.307] wcscat (in: _Dest=0x7ad54d0, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0192.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7ad54d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0193.495] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0193.495] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0193.495] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0193.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a38c78 [0193.495] wcscpy (in: _Dest=0x7a38c78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0193.495] wcscat (in: _Dest=0x7a38c78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0193.495] wcscat (in: _Dest=0x7a38c78, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0195.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520 [0195.733] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0197.968] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0197.968] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0197.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7d158 [0197.968] wcscpy (in: _Dest=0x7b7d158, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales" [0197.968] wcscat (in: _Dest=0x7b7d158, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\" [0197.968] wcscat (in: _Dest=0x7b7d158, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0199.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68 [0199.785] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a3dc28 | out: lpFindFileData=0x7a3dc28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0202.647] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0203.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3dc28) returned 1 [0203.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc238) returned 1 [0203.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dea7b8) returned 1 Thread: id = 6248 os_tid = 0xe74 [0189.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x30bd0a8 [0189.525] wcscpy (in: _Dest=0x30bd0a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0189.525] wcscat (in: _Dest=0x30bd0a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\" [0189.525] wcscat (in: _Dest=0x30bd0a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*" [0189.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d4f0 [0189.525] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\*", lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0189.526] wcscmp (_String1=".", _String2=".") returned 0 [0189.526] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3cf00a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.526] wcscmp (_String1="..", _String2=".") returned 1 [0189.526] wcscmp (_String1="..", _String2="..") returned 0 [0189.526] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0189.526] wcscmp (_String1="_locales", _String2=".") returned 1 [0189.526] wcscmp (_String1="_locales", _String2="..") returned 1 [0189.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10a) returned 0x7a390d8 [0189.526] wcscpy (in: _Dest=0x7a390d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX" [0189.526] wcscat (in: _Dest=0x7a390d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\" [0189.526] wcscat (in: _Dest=0x7a390d8, _Source="_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0195.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a390d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24dc [0195.338] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 0 [0195.338] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0195.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d4f0) returned 1 [0195.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd0a8) returned 1 [0195.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de70b8) returned 1 Thread: id = 6249 os_tid = 0xe70 [0189.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bc760 [0189.527] wcscpy (in: _Dest=0x30bc760, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0189.527] wcscat (in: _Dest=0x30bc760, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" [0189.527] wcscat (in: _Dest=0x30bc760, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*" [0189.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b0d8 [0189.527] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f04a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f07170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f07170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf650 [0190.558] wcscmp (_String1=".", _String2=".") returned 0 [0190.558] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f04a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f07170, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f07170, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.558] wcscmp (_String1="..", _String2=".") returned 1 [0190.558] wcscmp (_String1="..", _String2="..") returned 0 [0190.558] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f07170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f09880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.558] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.558] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a64090 [0190.559] wcscpy (in: _Dest=0x7a64090, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" [0190.559] wcscat (in: _Dest=0x7a64090, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" [0190.559] wcscat (in: _Dest=0x7a64090, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" [0192.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c [0192.226] FindNextFileW (in: hFindFile=0x3dcf650, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f07170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f09880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.227] FindClose (in: hFindFile=0x3dcf650 | out: hFindFile=0x3dcf650) returned 1 [0192.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b0d8) returned 1 [0192.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc760) returned 1 [0192.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b9d0) returned 1 Thread: id = 6250 os_tid = 0xeec [0189.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bd2b8 [0189.528] wcscpy (in: _Dest=0x30bd2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0189.528] wcscat (in: _Dest=0x30bd2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" [0189.528] wcscat (in: _Dest=0x30bd2b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*" [0189.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c8e8 [0189.528] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f0e6a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f10db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f10db0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa90 [0190.559] wcscmp (_String1=".", _String2=".") returned 0 [0190.559] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f0e6a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f10db0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f10db0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.559] wcscmp (_String1="..", _String2=".") returned 1 [0190.559] wcscmp (_String1="..", _String2="..") returned 0 [0190.559] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f10db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f134c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.559] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.559] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a641b8 [0190.560] wcscpy (in: _Dest=0x7a641b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" [0190.560] wcscat (in: _Dest=0x7a641b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" [0190.560] wcscat (in: _Dest=0x7a641b8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" [0192.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a641b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4 [0192.230] FindNextFileW (in: hFindFile=0x3dcfa90, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f10db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f134c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.230] FindClose (in: hFindFile=0x3dcfa90 | out: hFindFile=0x3dcfa90) returned 1 [0192.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c8e8) returned 1 [0192.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd2b8) returned 1 [0192.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad58f0) returned 1 Thread: id = 6251 os_tid = 0xea8 [0189.529] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bce98 [0189.529] wcscpy (in: _Dest=0x30bce98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0189.530] wcscat (in: _Dest=0x30bce98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" [0189.530] wcscat (in: _Dest=0x30bce98, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*" [0189.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c418 [0189.530] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f182e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1a9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f1a9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf9d0 [0190.560] wcscmp (_String1=".", _String2=".") returned 0 [0190.560] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f182e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1a9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f1a9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.561] wcscmp (_String1="..", _String2=".") returned 1 [0190.561] wcscmp (_String1="..", _String2="..") returned 0 [0190.561] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f1a9f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1f810, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.561] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.561] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a642e0 [0190.561] wcscpy (in: _Dest=0x7a642e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" [0190.561] wcscat (in: _Dest=0x7a642e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" [0190.561] wcscat (in: _Dest=0x7a642e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" [0192.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a642e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20 [0192.238] FindNextFileW (in: hFindFile=0x3dcf9d0, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f1a9f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f1f810, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616be20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.238] FindClose (in: hFindFile=0x3dcf9d0 | out: hFindFile=0x3dcf9d0) returned 1 [0192.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c418) returned 1 [0192.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bce98) returned 1 [0192.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad57e8) returned 1 Thread: id = 6252 os_tid = 0xe9c [0189.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bcfa0 [0189.531] wcscpy (in: _Dest=0x30bcfa0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0189.531] wcscat (in: _Dest=0x30bcfa0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" [0189.531] wcscat (in: _Dest=0x30bcfa0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*" [0189.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a4d0 [0189.531] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f21f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f24630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f24630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf790 [0190.561] wcscmp (_String1=".", _String2=".") returned 0 [0190.562] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f21f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f24630, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f24630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.562] wcscmp (_String1="..", _String2=".") returned 1 [0190.562] wcscmp (_String1="..", _String2="..") returned 0 [0190.562] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f24630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f29450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.562] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.562] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a64408 [0190.562] wcscpy (in: _Dest=0x7a64408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" [0190.562] wcscat (in: _Dest=0x7a64408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" [0190.562] wcscat (in: _Dest=0x7a64408, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" [0192.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24 [0192.241] FindNextFileW (in: hFindFile=0x3dcf790, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f24630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f29450, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3cd5b700, ftLastWriteTime.dwHighDateTime=0x1d03fd4, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.241] FindClose (in: hFindFile=0x3dcf790 | out: hFindFile=0x3dcf790) returned 1 [0192.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a4d0) returned 1 [0192.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcfa0) returned 1 [0192.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad56e0) returned 1 Thread: id = 6253 os_tid = 0xea0 [0189.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bbf20 [0189.532] wcscpy (in: _Dest=0x30bbf20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0189.532] wcscat (in: _Dest=0x30bbf20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" [0189.532] wcscat (in: _Dest=0x30bbf20, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*" [0189.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d288 [0189.532] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f2bb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f2e270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f2e270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfd50 [0190.563] wcscmp (_String1=".", _String2=".") returned 0 [0190.563] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f2bb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f2e270, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f2e270, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.563] wcscmp (_String1="..", _String2=".") returned 1 [0190.563] wcscmp (_String1="..", _String2="..") returned 0 [0190.563] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f2e270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f33090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.563] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.563] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a64530 [0190.563] wcscpy (in: _Dest=0x7a64530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" [0190.563] wcscat (in: _Dest=0x7a64530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" [0190.563] wcscat (in: _Dest=0x7a64530, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" [0192.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac [0192.244] FindNextFileW (in: hFindFile=0x3dcfd50, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f2e270, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f33090, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.244] FindClose (in: hFindFile=0x3dcfd50 | out: hFindFile=0x3dcfd50) returned 1 [0192.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d288) returned 1 [0192.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbf20) returned 1 [0192.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad55d8) returned 1 Thread: id = 6254 os_tid = 0xea4 [0189.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cac9f8 [0189.533] wcscpy (in: _Dest=0x7cac9f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0189.533] wcscat (in: _Dest=0x7cac9f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" [0189.533] wcscat (in: _Dest=0x7cac9f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*" [0189.533] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bce0 [0189.534] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f357a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3a5c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f3a5c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf850 [0190.564] wcscmp (_String1=".", _String2=".") returned 0 [0190.564] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f357a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3a5c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f3a5c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.564] wcscmp (_String1="..", _String2=".") returned 1 [0190.564] wcscmp (_String1="..", _String2="..") returned 0 [0190.564] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f3a5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3ccd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.564] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.564] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7a64658 [0190.564] wcscpy (in: _Dest=0x7a64658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" [0190.564] wcscat (in: _Dest=0x7a64658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" [0190.564] wcscat (in: _Dest=0x7a64658, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" [0192.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec [0192.248] FindNextFileW (in: hFindFile=0x3dcf850, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f3a5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f3ccd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.248] FindClose (in: hFindFile=0x3dcf850 | out: hFindFile=0x3dcf850) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bce0) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac9f8) returned 1 [0192.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad53c8) returned 1 Thread: id = 6255 os_tid = 0xe98 [0189.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cac8e0 [0189.534] wcscpy (in: _Dest=0x7cac8e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0189.535] wcscat (in: _Dest=0x7cac8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" [0189.535] wcscat (in: _Dest=0x7cac8e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*" [0189.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ac08 [0189.535] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f41af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f44200, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f44200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf8d0 [0190.565] wcscmp (_String1=".", _String2=".") returned 0 [0190.565] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f41af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f44200, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f44200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.565] wcscmp (_String1="..", _String2=".") returned 1 [0190.565] wcscmp (_String1="..", _String2="..") returned 0 [0190.565] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f44200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f46910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.565] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.565] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7a64780 [0190.565] wcscpy (in: _Dest=0x7a64780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" [0190.565] wcscat (in: _Dest=0x7a64780, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" [0190.565] wcscat (in: _Dest=0x7a64780, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" [0192.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc [0192.250] FindNextFileW (in: hFindFile=0x3dcf8d0, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f44200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f46910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.251] FindClose (in: hFindFile=0x3dcf8d0 | out: hFindFile=0x3dcf8d0) returned 1 [0192.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ac08) returned 1 [0192.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac8e0) returned 1 [0192.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6e98) returned 1 Thread: id = 6256 os_tid = 0xe94 [0189.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bd1b0 [0189.536] wcscpy (in: _Dest=0x30bd1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0189.536] wcscat (in: _Dest=0x30bd1b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" [0189.536] wcscat (in: _Dest=0x30bd1b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*" [0189.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d020 [0189.536] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f4b730, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f4de40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f4de40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf690 [0190.566] wcscmp (_String1=".", _String2=".") returned 0 [0190.566] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f4b730, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f4de40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f4de40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.566] wcscmp (_String1="..", _String2=".") returned 1 [0190.566] wcscmp (_String1="..", _String2="..") returned 0 [0190.566] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f4de40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f50550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.566] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.566] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a648a8 [0190.566] wcscpy (in: _Dest=0x7a648a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" [0190.567] wcscat (in: _Dest=0x7a648a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" [0190.567] wcscat (in: _Dest=0x7a648a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" [0192.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a648a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8 [0192.254] FindNextFileW (in: hFindFile=0x3dcf690, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f4de40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f50550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.254] FindClose (in: hFindFile=0x3dcf690 | out: hFindFile=0x3dcf690) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d020) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 [0192.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad52c0) returned 1 Thread: id = 6257 os_tid = 0xe50 [0189.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bcb80 [0189.538] wcscpy (in: _Dest=0x30bcb80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0189.538] wcscat (in: _Dest=0x30bcb80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" [0189.538] wcscat (in: _Dest=0x30bcb80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*" [0189.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c1b0 [0189.539] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f55370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5a190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f5a190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0090 [0190.567] wcscmp (_String1=".", _String2=".") returned 0 [0190.567] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f55370, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5a190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f5a190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.567] wcscmp (_String1="..", _String2=".") returned 1 [0190.567] wcscmp (_String1="..", _String2="..") returned 0 [0190.567] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f5a190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5c8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.567] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.567] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a649d0 [0190.568] wcscpy (in: _Dest=0x7a649d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" [0190.568] wcscat (in: _Dest=0x7a649d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" [0190.568] wcscat (in: _Dest=0x7a649d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" [0192.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a649d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc [0192.256] FindNextFileW (in: hFindFile=0x3dd0090, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f5a190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f5c8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.257] FindClose (in: hFindFile=0x3dd0090 | out: hFindFile=0x3dd0090) returned 1 [0192.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c1b0) returned 1 [0192.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcb80) returned 1 [0192.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6d90) returned 1 Thread: id = 6258 os_tid = 0xe4c [0189.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bcd90 [0189.540] wcscpy (in: _Dest=0x30bcd90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0189.540] wcscat (in: _Dest=0x30bcd90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" [0189.540] wcscat (in: _Dest=0x30bcd90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*" [0189.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b340 [0189.540] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f616c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f63dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f63dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0110 [0190.568] wcscmp (_String1=".", _String2=".") returned 0 [0190.568] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f616c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f63dd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f63dd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.568] wcscmp (_String1="..", _String2=".") returned 1 [0190.568] wcscmp (_String1="..", _String2="..") returned 0 [0190.568] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f63dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f664e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.568] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.569] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a64af8 [0190.569] wcscpy (in: _Dest=0x7a64af8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" [0190.569] wcscat (in: _Dest=0x7a64af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" [0190.569] wcscat (in: _Dest=0x7a64af8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" [0192.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0 [0192.262] FindNextFileW (in: hFindFile=0x3dd0110, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f63dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f664e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.262] FindClose (in: hFindFile=0x3dd0110 | out: hFindFile=0x3dd0110) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b340) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcd90) returned 1 [0192.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c88) returned 1 Thread: id = 6259 os_tid = 0xe54 [0189.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bb7e8 [0189.541] wcscpy (in: _Dest=0x30bb7e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0189.541] wcscat (in: _Dest=0x30bb7e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" [0189.541] wcscat (in: _Dest=0x30bb7e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*" [0189.541] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3de90 [0189.541] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f6b300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f70120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f70120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf610 [0190.569] wcscmp (_String1=".", _String2=".") returned 0 [0190.569] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f6b300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f70120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f70120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.569] wcscmp (_String1="..", _String2=".") returned 1 [0190.569] wcscmp (_String1="..", _String2="..") returned 0 [0190.569] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f70120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f72830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.569] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.569] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a64c20 [0190.570] wcscpy (in: _Dest=0x7a64c20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" [0190.570] wcscat (in: _Dest=0x7a64c20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" [0190.570] wcscat (in: _Dest=0x7a64c20, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" [0192.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4 [0192.265] FindNextFileW (in: hFindFile=0x3dcf610, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f70120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f72830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.266] FindClose (in: hFindFile=0x3dcf610 | out: hFindFile=0x3dcf610) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3de90) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb7e8) returned 1 [0192.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b80) returned 1 Thread: id = 6260 os_tid = 0xe3c [0189.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bbb00 [0189.542] wcscpy (in: _Dest=0x30bbb00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0189.543] wcscat (in: _Dest=0x30bbb00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" [0189.543] wcscat (in: _Dest=0x30bbb00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*" [0189.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2a900 [0189.543] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x7a2a900 | out: lpFindFileData=0x7a2a900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f79d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7c470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f7c470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7eb0 [0190.570] wcscmp (_String1=".", _String2=".") returned 0 [0190.570] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x7a2a900 | out: lpFindFileData=0x7a2a900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f79d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7c470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f7c470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.570] wcscmp (_String1="..", _String2=".") returned 1 [0190.570] wcscmp (_String1="..", _String2="..") returned 0 [0190.570] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x7a2a900 | out: lpFindFileData=0x7a2a900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f7c470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7eb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.570] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.570] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a64d48 [0190.571] wcscpy (in: _Dest=0x7a64d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" [0190.571] wcscat (in: _Dest=0x7a64d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" [0190.571] wcscat (in: _Dest=0x7a64d48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" [0192.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4 [0192.269] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x7a2a900 | out: lpFindFileData=0x7a2a900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f7c470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f7eb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0192.269] FindClose (in: hFindFile=0x7ad7eb0 | out: hFindFile=0x7ad7eb0) returned 1 [0192.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2a900) returned 1 [0192.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb00) returned 1 [0192.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6970) returned 1 Thread: id = 6261 os_tid = 0x150 [0189.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bb4d0 [0189.544] wcscpy (in: _Dest=0x30bb4d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0189.544] wcscat (in: _Dest=0x30bb4d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" [0189.544] wcscat (in: _Dest=0x30bb4d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*" [0189.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2ab68 [0189.544] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f839a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f860b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f860b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7ef0 [0190.571] wcscmp (_String1=".", _String2=".") returned 0 [0190.571] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f839a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f860b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f860b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.571] wcscmp (_String1="..", _String2=".") returned 1 [0190.571] wcscmp (_String1="..", _String2="..") returned 0 [0190.571] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f860b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f887c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.571] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.571] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a64e70 [0190.573] wcscpy (in: _Dest=0x7a64e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" [0190.573] wcscat (in: _Dest=0x7a64e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" [0190.573] wcscat (in: _Dest=0x7a64e70, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" [0191.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0191.525] FindNextFileW (in: hFindFile=0x7ad7ef0, lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f860b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f887c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe616e530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.525] FindClose (in: hFindFile=0x7ad7ef0 | out: hFindFile=0x7ad7ef0) returned 1 [0191.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ab68) returned 1 [0191.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 [0191.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6868) returned 1 Thread: id = 6262 os_tid = 0x11c [0189.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bc028 [0189.545] wcscpy (in: _Dest=0x30bc028, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0189.546] wcscat (in: _Dest=0x30bc028, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" [0189.546] wcscat (in: _Dest=0x30bc028, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*" [0189.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2add0 [0189.546] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f8d5e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f8fcf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f8fcf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7f70 [0190.573] wcscmp (_String1=".", _String2=".") returned 0 [0190.573] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f8d5e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f8fcf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f8fcf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.573] wcscmp (_String1="..", _String2=".") returned 1 [0190.573] wcscmp (_String1="..", _String2="..") returned 0 [0190.573] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f8fcf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f92400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.573] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.573] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a64f98 [0190.574] wcscpy (in: _Dest=0x7a64f98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" [0190.574] wcscat (in: _Dest=0x7a64f98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" [0190.574] wcscat (in: _Dest=0x7a64f98, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" [0191.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a64f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0191.528] FindNextFileW (in: hFindFile=0x7ad7f70, lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f8fcf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f92400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.528] FindClose (in: hFindFile=0x7ad7f70 | out: hFindFile=0x7ad7f70) returned 1 [0191.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2add0) returned 1 [0191.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc028) returned 1 [0191.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6a78) returned 1 Thread: id = 6263 os_tid = 0x1b50 [0189.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bb6e0 [0189.547] wcscpy (in: _Dest=0x30bb6e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0189.547] wcscat (in: _Dest=0x30bb6e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" [0189.547] wcscat (in: _Dest=0x30bb6e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*" [0189.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b038 [0189.547] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f97220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f99930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f99930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7a30 [0190.574] wcscmp (_String1=".", _String2=".") returned 0 [0190.574] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5f97220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f99930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5f99930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.574] wcscmp (_String1="..", _String2=".") returned 1 [0190.574] wcscmp (_String1="..", _String2="..") returned 0 [0190.574] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f99930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f9e750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.574] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.574] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a650c0 [0190.575] wcscpy (in: _Dest=0x7a650c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" [0190.575] wcscat (in: _Dest=0x7a650c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" [0190.575] wcscat (in: _Dest=0x7a650c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" [0191.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a650c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0191.531] FindNextFileW (in: hFindFile=0x7ad7a30, lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5f99930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5f9e750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.531] FindClose (in: hFindFile=0x7ad7a30 | out: hFindFile=0x7ad7a30) returned 1 [0191.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b038) returned 1 [0191.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb6e0) returned 1 [0191.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d0) returned 1 Thread: id = 6264 os_tid = 0x1688 [0189.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bb9f8 [0189.549] wcscpy (in: _Dest=0x30bb9f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0189.549] wcscat (in: _Dest=0x30bb9f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" [0189.549] wcscat (in: _Dest=0x30bb9f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*" [0189.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b2a0 [0189.549] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fa0e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fa8390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fa8390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78f0 [0190.575] wcscmp (_String1=".", _String2=".") returned 0 [0190.575] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fa0e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fa8390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fa8390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.575] wcscmp (_String1="..", _String2=".") returned 1 [0190.575] wcscmp (_String1="..", _String2="..") returned 0 [0190.575] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fa8390, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5faaaa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.575] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.575] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a651e8 [0190.575] wcscpy (in: _Dest=0x7a651e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" [0190.576] wcscat (in: _Dest=0x7a651e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" [0190.576] wcscat (in: _Dest=0x7a651e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" [0191.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a651e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0191.533] FindNextFileW (in: hFindFile=0x7ad78f0, lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fa8390, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5faaaa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.533] FindClose (in: hFindFile=0x7ad78f0 | out: hFindFile=0x7ad78f0) returned 1 [0191.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b2a0) returned 1 [0191.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9f8) returned 1 [0191.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 Thread: id = 6265 os_tid = 0x18c0 [0189.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bc970 [0189.550] wcscpy (in: _Dest=0x30bc970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0189.550] wcscat (in: _Dest=0x30bc970, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" [0189.550] wcscat (in: _Dest=0x30bc970, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*" [0189.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b508 [0189.551] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x7a2b508 | out: lpFindFileData=0x7a2b508*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fad1b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb1fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fb1fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7870 [0189.941] wcscmp (_String1=".", _String2=".") returned 0 [0189.941] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a2b508 | out: lpFindFileData=0x7a2b508*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fad1b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb1fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fb1fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.941] wcscmp (_String1="..", _String2=".") returned 1 [0189.941] wcscmp (_String1="..", _String2="..") returned 0 [0189.941] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a2b508 | out: lpFindFileData=0x7a2b508*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fb1fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb46e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.941] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.941] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cb3050 [0189.942] wcscpy (in: _Dest=0x7cb3050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" [0189.942] wcscat (in: _Dest=0x7cb3050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" [0189.942] wcscat (in: _Dest=0x7cb3050, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" [0195.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb3050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0 [0195.322] FindNextFileW (in: hFindFile=0x7ad7870, lpFindFileData=0x7a2b508 | out: lpFindFileData=0x7a2b508*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fb1fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fb46e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.322] FindClose (in: hFindFile=0x7ad7870 | out: hFindFile=0x7ad7870) returned 1 [0195.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b508) returned 1 [0195.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc970) returned 1 [0195.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5d8) returned 1 Thread: id = 6266 os_tid = 0x168c [0189.552] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json")) returned 0x2020 [0189.552] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", dwFileAttributes=0x20) returned 1 [0197.164] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbd8 [0197.165] GetFileSizeEx (in: hFile=0xbd8, lpFileSize=0xda4fbd4 | out: lpFileSize=0xda4fbd4*=178) returned 1 [0197.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0197.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0197.165] NtQuerySystemTime (in: CurrentTime=0xda4fb48 | out: CurrentTime=0xda4fb48*=132462177757476000) returned 0x0 [0197.165] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x1e72860d [0197.165] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0xa0ff62c [0197.165] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x2d6b37eb [0197.165] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x63136e1e [0197.165] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x314709e8 [0197.165] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x6924d9ba [0197.165] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x26bba79d [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x1b3642ac [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x7b89280 [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x2fccb58e [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x6414a0d2 [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x30849ec1 [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x2f8cd8df [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x239b3bc1 [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x60cdc50c [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x5802712 [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x336578d9 [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x1f8f316d [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x5d673694 [0197.166] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x1aa8f766 [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x1a3108d9 [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x5a61e0cd [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x5ea14e2c [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x7ef933b7 [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0xbcd6620 [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x7a3669cd [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x5d9955dd [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x7bb2c9da [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x67a8f2e6 [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x260f36e2 [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x4426f49b [0197.182] RtlRandomEx (in: Seed=0xda4fb40 | out: Seed=0xda4fb40) returned 0x30849ec1 [0197.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c68fc8 [0197.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c6cbd0 [0197.198] ReadFile (in: hFile=0xbd8, lpBuffer=0x7c68fc8, nNumberOfBytesToRead=0xb2, lpNumberOfBytesRead=0xda4fb3c, lpOverlapped=0x0 | out: lpBuffer=0x7c68fc8*, lpNumberOfBytesRead=0xda4fb3c*=0xb2, lpOverlapped=0x0) returned 1 [0197.200] SetFilePointerEx (in: hFile=0xbd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.200] WriteFile (in: hFile=0xbd8, lpBuffer=0x7c6cbd0*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0xda4fb40, lpOverlapped=0x0 | out: lpBuffer=0x7c6cbd0*, lpNumberOfBytesWritten=0xda4fb40*=0xb2, lpOverlapped=0x0) returned 1 [0199.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede0f0 [0199.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede140 [0199.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ede140) returned 1 [0199.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c6cbd0) returned 1 [0199.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c68fc8) returned 1 [0199.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0199.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a244b8) returned 1 [0199.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e868a8 [0199.944] SetFilePointerEx (in: hFile=0xbd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.945] WriteFile (in: hFile=0xbd8, lpBuffer=0x7cad600*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xda4fbc8, lpOverlapped=0x0 | out: lpBuffer=0x7cad600*, lpNumberOfBytesWritten=0xda4fbc8*=0x10c, lpOverlapped=0x0) returned 1 [0200.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0200.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0200.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2868 [0200.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0200.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0200.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a00) returned 1 [0200.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.725] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="4b") returned 2 [0200.725] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="60") returned 2 [0200.725] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="60") returned 2 [0200.725] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="e0") returned 2 [0200.725] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="0e") returned 2 [0200.726] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="39") returned 2 [0200.726] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="87") returned 2 [0200.726] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="aa") returned 2 [0200.726] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="86") returned 2 [0200.726] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="27") returned 2 [0200.726] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.726] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.726] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="c6") returned 2 [0200.726] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.726] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="ed") returned 2 [0200.726] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="5f") returned 2 [0200.726] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="90") returned 2 [0200.726] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="64") returned 2 [0200.726] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="5b") returned 2 [0200.726] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="43") returned 2 [0200.726] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="53") returned 2 [0200.726] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.726] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="61") returned 2 [0200.726] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="92") returned 2 [0200.727] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="6a") returned 2 [0200.727] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="de") returned 2 [0200.727] RtlInitAnsiString (in: DestinationString=0xda4fb50, SourceString="4b6060e00e3987aa8627f1d9c63ded5f90645b4353a261926ade" | out: DestinationString="4b6060e00e3987aa8627f1d9c63ded5f90645b4353a261926ade") [0200.727] RtlAnsiStringToUnicodeString (in: DestinationString=0xda4fb48, SourceString="4b6060e00e3987aa8627f1d9c63ded5f90645b4353a261926ade", AllocateDestinationString=1 | out: DestinationString="4b6060e00e3987aa8627f1d9c63ded5f90645b4353a261926ade") returned 0x0 [0200.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c108 [0200.727] wcscat (in: _Dest=0x7cd4158, _Source="4b6060e00e398" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\4b6060e00e398") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\4b6060e00e398" [0200.727] wcscat (in: _Dest=0x7cd4158, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\4b6060e00e398.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\4b6060e00e398.68814f" [0200.727] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\4b6060e00e398.68814f", NtPathName=0xda4fb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\4b6060e00e398.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b873c8 [0201.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b873c8) returned 1 [0201.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccb160) returned 1 [0201.477] NtQueryInformationFile (in: FileHandle=0xbd8, IoStatusBlock=0xda4fb18, FileInformation=0xda4fb20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xda4fb18, FileInformation=0xda4fb20) returned 0x0 [0201.477] NtSetInformationFile (FileHandle=0xbd8, IoStatusBlock=0xda4fb18, FileInformation=0xda4fb20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4158) returned 1 [0206.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c108) returned 1 [0206.128] FlushFileBuffers (hFile=0xbd8) returned 1 [0206.134] CloseHandle (hObject=0xbd8) returned 1 [0206.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caabb0 [0206.556] wcscpy (in: _Dest=0x7caabb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\" [0206.556] wcscat (in: _Dest=0x7caabb0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\68814F-Readme.txt" [0206.556] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\68814f-readme.txt")) returned 0xffffffff [0206.556] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.292] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xda4fb5c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xda4fb5c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.293] CloseHandle (hObject=0x17ec) returned 1 [0210.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caabb0) returned 1 [0210.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca92a0) returned 1 Thread: id = 6267 os_tid = 0x1690 [0189.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cadec0 [0189.553] wcscpy (in: _Dest=0x7cadec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0189.553] wcscat (in: _Dest=0x7cadec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" [0189.553] wcscat (in: _Dest=0x7cadec0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*" [0189.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b770 [0189.553] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fb6df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbbc10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fbbc10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad77f0 [0189.942] wcscmp (_String1=".", _String2=".") returned 0 [0189.942] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fb6df0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbbc10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fbbc10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.942] wcscmp (_String1="..", _String2=".") returned 1 [0189.942] wcscmp (_String1="..", _String2="..") returned 0 [0189.942] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fbbc10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbe320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.942] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.942] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cb3178 [0189.943] wcscpy (in: _Dest=0x7cb3178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" [0189.943] wcscat (in: _Dest=0x7cb3178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" [0189.943] wcscat (in: _Dest=0x7cb3178, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" [0195.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb3178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0 [0195.326] FindNextFileW (in: hFindFile=0x7ad77f0, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fbbc10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fbe320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.326] FindClose (in: hFindFile=0x7ad77f0 | out: hFindFile=0x7ad77f0) returned 1 [0195.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b770) returned 1 [0195.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadec0) returned 1 [0195.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f9d0) returned 1 Thread: id = 6268 os_tid = 0x16ac [0189.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7d158 [0189.554] wcscpy (in: _Dest=0x7b7d158, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0189.554] wcscat (in: _Dest=0x7b7d158, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\" [0189.554] wcscat (in: _Dest=0x7b7d158, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*" [0189.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b9d8 [0189.554] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x7a2b9d8 | out: lpFindFileData=0x7a2b9d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0190.557] wcscmp (_String1=".", _String2=".") returned 0 [0190.557] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x7a2b9d8 | out: lpFindFileData=0x7a2b9d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5fc3140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc5850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5fc5850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.557] wcscmp (_String1="..", _String2=".") returned 1 [0190.557] wcscmp (_String1="..", _String2="..") returned 0 [0190.557] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x7a2b9d8 | out: lpFindFileData=0x7a2b9d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fc5850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc7f60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.557] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.557] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cb3e30 [0190.557] wcscpy (in: _Dest=0x7cb3e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" [0190.557] wcscat (in: _Dest=0x7cb3e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\" [0190.557] wcscat (in: _Dest=0x7cb3e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" [0197.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb3e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc [0197.922] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x7a2b9d8 | out: lpFindFileData=0x7a2b9d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5fc5850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5fc7f60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6170c40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0197.923] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0197.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b9d8) returned 1 [0197.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d158) returned 1 [0197.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80000) returned 1 Thread: id = 6269 os_tid = 0x16b4 [0189.555] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json")) returned 0x2020 [0189.555] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0197.200] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d54 [0197.200] GetFileSizeEx (in: hFile=0x1d54, lpFileSize=0xfccfc24 | out: lpFileSize=0xfccfc24*=705) returned 1 [0197.200] SetFilePointerEx (in: hFile=0x1d54, liDistanceToMove=0x2bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.200] ReadFile (in: hFile=0x1d54, lpBuffer=0xfccfc00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfccfc10, lpOverlapped=0x0 | out: lpBuffer=0xfccfc00*, lpNumberOfBytesRead=0xfccfc10*=0x4, lpOverlapped=0x0) returned 1 [0197.203] SetFilePointerEx (in: hFile=0x1d54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0197.203] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0197.203] NtQuerySystemTime (in: CurrentTime=0xfccfb98 | out: CurrentTime=0xfccfb98*=132462177757788000) returned 0x0 [0197.203] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x6048a127 [0197.203] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x7d7ca1c0 [0197.203] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x5bf292d5 [0197.203] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x74629f1a [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x239b3bc1 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x67d8f0ba [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x6ff54499 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x58a8809e [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x48df8541 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x2cddeca5 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x649762ee [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x2da1f817 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x12a34c80 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x260a5dd0 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x2393877a [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x54901f2a [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x2a38302a [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x7f293d83 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x1af15474 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x598377c2 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x3085a501 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x481dad6e [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x263570f1 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x2f6e6593 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x63d686c6 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x3dd92157 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x40fe018b [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x3633c0a0 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x7d18a721 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x197fcf05 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x63e08854 [0197.204] RtlRandomEx (in: Seed=0xfccfb90 | out: Seed=0xfccfb90) returned 0x63e08854 [0197.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c707d8 [0197.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c743e0 [0197.214] ReadFile (in: hFile=0x1d54, lpBuffer=0x7c707d8, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0xfccfb8c, lpOverlapped=0x0 | out: lpBuffer=0x7c707d8*, lpNumberOfBytesRead=0xfccfb8c*=0x2c1, lpOverlapped=0x0) returned 1 [0197.214] SetFilePointerEx (in: hFile=0x1d54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.214] WriteFile (in: hFile=0x1d54, lpBuffer=0x7c743e0*, nNumberOfBytesToWrite=0x2c1, lpNumberOfBytesWritten=0xfccfb90, lpOverlapped=0x0 | out: lpBuffer=0x7c743e0*, lpNumberOfBytesWritten=0xfccfb90*=0x2c1, lpOverlapped=0x0) returned 1 [0200.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0200.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0200.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4000) returned 1 [0200.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c743e0) returned 1 [0200.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c707d8) returned 1 [0200.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0200.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24620) returned 1 [0200.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376e0 [0200.604] SetFilePointerEx (in: hFile=0x1d54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.604] WriteFile (in: hFile=0x1d54, lpBuffer=0x7cd2f70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfccfc18, lpOverlapped=0x0 | out: lpBuffer=0x7cd2f70*, lpNumberOfBytesWritten=0xfccfc18*=0x10c, lpOverlapped=0x0) returned 1 [0200.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0200.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0200.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b898 [0200.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0200.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0200.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0200.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.908] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="7f") returned 2 [0200.908] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="f8") returned 2 [0200.908] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="be") returned 2 [0200.908] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="14") returned 2 [0200.908] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="45") returned 2 [0200.908] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="91") returned 2 [0200.908] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="b2") returned 2 [0200.908] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="32") returned 2 [0200.908] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="44") returned 2 [0200.908] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="4e") returned 2 [0200.908] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="c8") returned 2 [0200.908] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="34") returned 2 [0200.908] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="e5") returned 2 [0200.908] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.909] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="1b") returned 2 [0200.909] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="17") returned 2 [0200.909] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="91") returned 2 [0200.909] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="42") returned 2 [0200.909] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="7d") returned 2 [0200.909] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="ab") returned 2 [0200.909] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="bf") returned 2 [0200.909] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="46") returned 2 [0200.909] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="40") returned 2 [0200.909] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="e1") returned 2 [0200.909] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="a9") returned 2 [0200.909] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.909] RtlInitAnsiString (in: DestinationString=0xfccfba0, SourceString="7ff8be144591b232444ec834e5f11b1791427dabbf4640e1a9dc" | out: DestinationString="7ff8be144591b232444ec834e5f11b1791427dabbf4640e1a9dc") [0200.909] RtlAnsiStringToUnicodeString (in: DestinationString=0xfccfb98, SourceString="7ff8be144591b232444ec834e5f11b1791427dabbf4640e1a9dc", AllocateDestinationString=1 | out: DestinationString="7ff8be144591b232444ec834e5f11b1791427dabbf4640e1a9dc") returned 0x0 [0200.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c3d8 [0200.909] wcscat (in: _Dest=0x7ddae98, _Source="7ff8be144591b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\7ff8be144591b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\7ff8be144591b" [0200.909] wcscat (in: _Dest=0x7ddae98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\7ff8be144591b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\7ff8be144591b.68814f" [0200.909] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\7ff8be144591b.68814f", NtPathName=0xfccfb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\7ff8be144591b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0b020 [0201.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b020) returned 1 [0201.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e93ea8) returned 1 [0201.179] NtQueryInformationFile (in: FileHandle=0x1d54, IoStatusBlock=0xfccfb68, FileInformation=0xfccfb70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfccfb68, FileInformation=0xfccfb70) returned 0x0 [0201.179] NtSetInformationFile (FileHandle=0x1d54, IoStatusBlock=0xfccfb68, FileInformation=0xfccfb70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddae98) returned 1 [0201.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c3d8) returned 1 [0201.440] FlushFileBuffers (hFile=0x1d54) returned 1 [0201.446] CloseHandle (hObject=0x1d54) returned 1 [0208.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7dde4d8 [0208.589] wcscpy (in: _Dest=0x7dde4d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\" [0208.589] wcscat (in: _Dest=0x7dde4d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\68814F-Readme.txt" [0208.589] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\68814f-readme.txt")) returned 0xffffffff [0208.589] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a2c [0209.446] WriteFile (in: hFile=0x1a2c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfccfbac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xfccfbac*=0x8b9, lpOverlapped=0x0) returned 1 [0209.737] CloseHandle (hObject=0x1a2c) returned 1 [0210.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dde4d8) returned 1 [0210.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9868) returned 1 Thread: id = 6270 os_tid = 0x18cc [0189.555] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json")) returned 0x2020 [0189.556] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0197.202] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbc0 [0197.214] GetFileSizeEx (in: hFile=0xbc0, lpFileSize=0x100aff0c | out: lpFileSize=0x100aff0c*=663) returned 1 [0197.214] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x293, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.214] ReadFile (in: hFile=0xbc0, lpBuffer=0x100afee8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x100afef8, lpOverlapped=0x0 | out: lpBuffer=0x100afee8*, lpNumberOfBytesRead=0x100afef8*=0x4, lpOverlapped=0x0) returned 1 [0197.221] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0197.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0197.221] NtQuerySystemTime (in: CurrentTime=0x100afe80 | out: CurrentTime=0x100afe80*=132462177757944000) returned 0x0 [0197.221] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x37241685 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x9686671 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x34c19413 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x44ff6c8d [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x57966ced [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x6f1cf98e [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x20569f5e [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x4a9c8e1f [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x2da1f817 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x251e314d [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x682c8f48 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x1b68b0a1 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x4a9c8e1f [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x61e88399 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x27cc5983 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x4d4bed05 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x4a639666 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x1b080f98 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x7ccd87da [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x45c20690 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x10a9555f [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x32bf12a1 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x139a0d2 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x196ee710 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x5bebfa4b [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x623eb254 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x39d39840 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x2ff673b8 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x2fccb58e [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x39d39840 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x682c8f48 [0197.222] RtlRandomEx (in: Seed=0x100afe78 | out: Seed=0x100afe78) returned 0x5759b744 [0197.235] ReadFile (in: hFile=0xbc0, lpBuffer=0x7d903a0, nNumberOfBytesToRead=0x297, lpNumberOfBytesRead=0x100afe74, lpOverlapped=0x0 | out: lpBuffer=0x7d903a0*, lpNumberOfBytesRead=0x100afe74*=0x297, lpOverlapped=0x0) returned 1 [0197.235] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.235] WriteFile (in: hFile=0xbc0, lpBuffer=0x7d93fa8*, nNumberOfBytesToWrite=0x297, lpNumberOfBytesWritten=0x100afe78, lpOverlapped=0x0 | out: lpBuffer=0x7d93fa8*, lpNumberOfBytesWritten=0x100afe78*=0x297, lpOverlapped=0x0) returned 1 [0200.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0200.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c68 [0200.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c68) returned 1 [0200.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d93fa8) returned 1 [0200.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d903a0) returned 1 [0200.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0200.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a249c8) returned 1 [0200.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a40 [0200.597] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.598] WriteFile (in: hFile=0xbc0, lpBuffer=0x7cd2d40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x100aff00, lpOverlapped=0x0 | out: lpBuffer=0x7cd2d40*, lpNumberOfBytesWritten=0x100aff00*=0x10c, lpOverlapped=0x0) returned 1 [0200.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54138 [0200.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54138) returned 1 [0200.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e54138 [0200.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0200.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0200.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e525b8) returned 1 [0200.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.904] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.904] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="c5") returned 2 [0200.904] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="8c") returned 2 [0200.904] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="8c") returned 2 [0200.904] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="8e") returned 2 [0200.904] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="8a") returned 2 [0200.905] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="1c") returned 2 [0200.905] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="9c") returned 2 [0200.905] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="45") returned 2 [0200.905] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="b7") returned 2 [0200.905] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="d5") returned 2 [0200.905] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="3a") returned 2 [0200.905] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="76") returned 2 [0200.905] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="46") returned 2 [0200.905] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="65") returned 2 [0200.905] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="06") returned 2 [0200.905] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="69") returned 2 [0200.905] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="a7") returned 2 [0200.905] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="24") returned 2 [0200.905] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="23") returned 2 [0200.905] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="9c") returned 2 [0200.905] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.905] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="18") returned 2 [0200.905] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="1a") returned 2 [0200.905] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="7c") returned 2 [0200.905] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="cc") returned 2 [0200.905] RtlInitAnsiString (in: DestinationString=0x100afe88, SourceString="fcc58c8c8e8a1c9c45b7d53a7646650669a724239c9b181a7ccc" | out: DestinationString="fcc58c8c8e8a1c9c45b7d53a7646650669a724239c9b181a7ccc") [0200.905] RtlAnsiStringToUnicodeString (in: DestinationString=0x100afe80, SourceString="fcc58c8c8e8a1c9c45b7d53a7646650669a724239c9b181a7ccc", AllocateDestinationString=1 | out: DestinationString="fcc58c8c8e8a1c9c45b7d53a7646650669a724239c9b181a7ccc") returned 0x0 [0200.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c540 [0200.905] wcscat (in: _Dest=0x7ddad60, _Source="fcc58c8c8e8a1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\fcc58c8c8e8a1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\fcc58c8c8e8a1" [0200.906] wcscat (in: _Dest=0x7ddad60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\fcc58c8c8e8a1.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\fcc58c8c8e8a1.68814f" [0200.906] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\fcc58c8c8e8a1.68814f", NtPathName=0x100afe78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\fcc58c8c8e8a1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0b178 [0201.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b178) returned 1 [0201.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e93c80) returned 1 [0201.177] NtQueryInformationFile (in: FileHandle=0xbc0, IoStatusBlock=0x100afe50, FileInformation=0x100afe58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x100afe50, FileInformation=0x100afe58) returned 0x0 [0201.178] NtSetInformationFile (FileHandle=0xbc0, IoStatusBlock=0x100afe50, FileInformation=0x100afe58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddad60) returned 1 [0201.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c540) returned 1 [0201.436] FlushFileBuffers (hFile=0xbc0) returned 1 [0201.441] CloseHandle (hObject=0xbc0) returned 1 [0208.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7dde3a0 [0208.596] wcscpy (in: _Dest=0x7dde3a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\" [0208.596] wcscat (in: _Dest=0x7dde3a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\68814F-Readme.txt" [0208.596] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\68814f-readme.txt")) returned 0xffffffff [0208.596] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf70 [0209.662] WriteFile (in: hFile=0xf70, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x100afe94, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x100afe94*=0x8b9, lpOverlapped=0x0) returned 1 [0209.664] CloseHandle (hObject=0xf70) returned 1 [0209.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dde3a0) returned 1 [0209.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9990) returned 1 Thread: id = 6271 os_tid = 0x18d4 [0189.556] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json")) returned 0x2020 [0189.556] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0197.236] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cd8 [0197.236] GetFileSizeEx (in: hFile=0x1cd8, lpFileSize=0x902ff5c | out: lpFileSize=0x902ff5c*=221) returned 1 [0197.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0197.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0197.236] NtQuerySystemTime (in: CurrentTime=0x902fed0 | out: CurrentTime=0x902fed0*=132462177758100000) returned 0x0 [0197.236] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x12451b2e [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x780ecacc [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x6e90b06a [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x1f435087 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x10d15797 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0xc28a360 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x2549e6d1 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x582672d1 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x6821ab17 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x186ab2c1 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x5bb11cef [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x6f1f4b3b [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x58655c23 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x305c747c [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x19471b05 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x1222c240 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x9686671 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x3758b0fd [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x3ae4aaf8 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x12a3946e [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x7aea85c9 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x58655c23 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x228edc40 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x11f4833f [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x4f1e772f [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x39761fe5 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x4a7d2f03 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x4332b183 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x2523bbbe [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x23119380 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x507b5fb2 [0197.237] RtlRandomEx (in: Seed=0x902fec8 | out: Seed=0x902fec8) returned 0x78b5a76e [0197.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d97bb0 [0197.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d9b7b8 [0197.249] ReadFile (in: hFile=0x1cd8, lpBuffer=0x7d97bb0, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x902fec4, lpOverlapped=0x0 | out: lpBuffer=0x7d97bb0*, lpNumberOfBytesRead=0x902fec4*=0xdd, lpOverlapped=0x0) returned 1 [0197.251] SetFilePointerEx (in: hFile=0x1cd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.251] WriteFile (in: hFile=0x1cd8, lpBuffer=0x7d9b7b8*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x902fec8, lpOverlapped=0x0 | out: lpBuffer=0x7d9b7b8*, lpNumberOfBytesWritten=0x902fec8*=0xdd, lpOverlapped=0x0) returned 1 [0200.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0200.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ee8 [0200.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ee8) returned 1 [0200.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d9b7b8) returned 1 [0200.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d97bb0) returned 1 [0200.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0200.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24308) returned 1 [0200.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38040 [0200.551] SetFilePointerEx (in: hFile=0x1cd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.551] WriteFile (in: hFile=0x1cd8, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x902ff50, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x902ff50*=0x10c, lpOverlapped=0x0) returned 1 [0201.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d51458 [0201.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0201.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0201.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4780 [0201.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fc0 [0201.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0201.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0201.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0201.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.050] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="da") returned 2 [0201.050] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="dd") returned 2 [0201.050] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="14") returned 2 [0201.050] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="66") returned 2 [0201.050] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="f2") returned 2 [0201.050] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="cd") returned 2 [0201.050] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="2e") returned 2 [0201.050] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="2a") returned 2 [0201.050] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="43") returned 2 [0201.050] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="a4") returned 2 [0201.050] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="9f") returned 2 [0201.050] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="53") returned 2 [0201.050] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="4c") returned 2 [0201.050] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="2e") returned 2 [0201.050] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="93") returned 2 [0201.050] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="9a") returned 2 [0201.050] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="13") returned 2 [0201.050] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="fc") returned 2 [0201.050] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="7e") returned 2 [0201.050] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="c6") returned 2 [0201.050] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="2f") returned 2 [0201.050] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="94") returned 2 [0201.050] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="b5") returned 2 [0201.051] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="87") returned 2 [0201.051] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="fe") returned 2 [0201.051] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="50") returned 2 [0201.051] RtlInitAnsiString (in: DestinationString=0x902fed8, SourceString="dadd1466f2cd2e2a43a49f534c2e939a13fc7ec62f94b587fe50" | out: DestinationString="dadd1466f2cd2e2a43a49f534c2e939a13fc7ec62f94b587fe50") [0201.051] RtlAnsiStringToUnicodeString (in: DestinationString=0x902fed0, SourceString="dadd1466f2cd2e2a43a49f534c2e939a13fc7ec62f94b587fe50", AllocateDestinationString=1 | out: DestinationString="dadd1466f2cd2e2a43a49f534c2e939a13fc7ec62f94b587fe50") returned 0x0 [0201.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d513e0 [0201.234] wcscat (in: _Dest=0x7ddee98, _Source="dadd1466f2cd2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\dadd1466f2cd2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\dadd1466f2cd2" [0201.459] wcscat (in: _Dest=0x7ddee98, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\dadd1466f2cd2.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\dadd1466f2cd2.68814f" [0201.459] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\dadd1466f2cd2.68814f", NtPathName=0x902fec8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\dadd1466f2cd2.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd91b8 Thread: id = 6272 os_tid = 0x18d8 [0189.557] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json")) returned 0x2020 [0189.560] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0197.252] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12f0 [0197.252] GetFileSizeEx (in: hFile=0x12f0, lpFileSize=0x1013fe8c | out: lpFileSize=0x1013fe8c*=218) returned 1 [0197.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0197.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0197.252] NtQuerySystemTime (in: CurrentTime=0x1013fe00 | out: CurrentTime=0x1013fe00*=132462177758256000) returned 0x0 [0197.252] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x48f2df42 [0197.252] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x49ac84db [0197.252] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x39806261 [0197.252] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x2b3562d3 [0197.252] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x756564b5 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0xeb7b03e [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x1da6bef4 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x6821ab17 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x688b40d2 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x16acd62b [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x1cfd407f [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x16f06a76 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x784215a [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0xa4d289 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x466f8484 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x713a923f [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x5de88e18 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x73fddd29 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x1eb06fd [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x59ebd236 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x56a8cbd0 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x445f9be1 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0xcef8dc7 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x31bdf44a [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x7893729 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x48df8541 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x20abdccd [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x6e23e3f4 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x4e761137 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x6d74dc34 [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x7a3669cd [0197.253] RtlRandomEx (in: Seed=0x1013fdf8 | out: Seed=0x1013fdf8) returned 0x11cd10c0 [0197.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d9f3c0 [0197.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7da2fc8 [0197.265] ReadFile (in: hFile=0x12f0, lpBuffer=0x7d9f3c0, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0x1013fdf4, lpOverlapped=0x0 | out: lpBuffer=0x7d9f3c0*, lpNumberOfBytesRead=0x1013fdf4*=0xda, lpOverlapped=0x0) returned 1 [0197.267] SetFilePointerEx (in: hFile=0x12f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.267] WriteFile (in: hFile=0x12f0, lpBuffer=0x7da2fc8*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x1013fdf8, lpOverlapped=0x0 | out: lpBuffer=0x7da2fc8*, lpNumberOfBytesWritten=0x1013fdf8*=0xda, lpOverlapped=0x0) returned 1 [0201.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0201.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0201.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0201.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7da2fc8) returned 1 [0201.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d9f3c0) returned 1 [0201.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0201.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24038) returned 1 [0201.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38160 [0201.481] SetFilePointerEx (in: hFile=0x12f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.481] WriteFile (in: hFile=0x12f0, lpBuffer=0x7a39308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1013fe80, lpOverlapped=0x0 | out: lpBuffer=0x7a39308*, lpNumberOfBytesWritten=0x1013fe80*=0x10c, lpOverlapped=0x0) returned 1 [0206.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c9f0 [0206.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0206.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0206.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c310 [0206.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c338 [0206.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0206.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0206.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0206.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.177] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="07") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="bb") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="aa") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="0e") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="56") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="9e") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="da") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="a2") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="09") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="04") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="4a") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="e4") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="c0") returned 2 [0206.177] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="5a") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="27") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="e5") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="3f") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="33") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="af") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="b9") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="93") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="7f") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="ef") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="82") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="b3") returned 2 [0206.178] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="30") returned 2 [0206.178] RtlInitAnsiString (in: DestinationString=0x1013fe08, SourceString="07bbaa0e569edaa209044ae4c05a27e53f33afb9937fef82b330" | out: DestinationString="07bbaa0e569edaa209044ae4c05a27e53f33afb9937fef82b330") [0206.178] RtlAnsiStringToUnicodeString (in: DestinationString=0x1013fe00, SourceString="07bbaa0e569edaa209044ae4c05a27e53f33afb9937fef82b330", AllocateDestinationString=1 | out: DestinationString="07bbaa0e569edaa209044ae4c05a27e53f33afb9937fef82b330") returned 0x0 [0206.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2ce28 [0206.178] wcscat (in: _Dest=0x7a5f1a0, _Source="07bbaa0e569ed" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\07bbaa0e569ed") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\07bbaa0e569ed" [0206.178] wcscat (in: _Dest=0x7a5f1a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\07bbaa0e569ed.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\07bbaa0e569ed.68814f" [0206.179] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\07bbaa0e569ed.68814f", NtPathName=0x1013fdf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\07bbaa0e569ed.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddcf28 [0208.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcf28) returned 1 [0208.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e97268) returned 1 [0208.708] NtQueryInformationFile (in: FileHandle=0x12f0, IoStatusBlock=0x1013fdd0, FileInformation=0x1013fdd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1013fdd0, FileInformation=0x1013fdd8) returned 0x0 [0208.708] NtSetInformationFile (FileHandle=0x12f0, IoStatusBlock=0x1013fdd0, FileInformation=0x1013fdd8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 [0209.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ce28) returned 1 [0209.093] FlushFileBuffers (hFile=0x12f0) returned 1 [0209.106] CloseHandle (hObject=0x12f0) returned 1 [0209.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caa838 [0209.404] wcscpy (in: _Dest=0x7caa838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\" [0209.404] wcscat (in: _Dest=0x7caa838, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\68814F-Readme.txt" [0209.404] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\68814f-readme.txt")) returned 0xffffffff [0209.404] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.963] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1013fe14, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x1013fe14*=0x8b9, lpOverlapped=0x0) returned 1 [0209.964] CloseHandle (hObject=0xbb8) returned 1 [0209.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa838) returned 1 [0209.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7030) returned 1 Thread: id = 6273 os_tid = 0x18dc [0189.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl")) returned 0x20 [0189.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL", dwFileAttributes=0x20) returned 0 [0189.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.561] GetLastError () returned 0x5 [0189.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL", dwFileAttributes=0x20) returned 0 [0189.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83db8) returned 1 Thread: id = 6274 os_tid = 0x16c0 [0189.562] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json")) returned 0x2020 [0189.943] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0194.730] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10f0 [0194.731] GetFileSizeEx (in: hFile=0x10f0, lpFileSize=0xdc4febc | out: lpFileSize=0xdc4febc*=222) returned 1 [0194.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0194.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0194.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0194.731] NtQuerySystemTime (in: CurrentTime=0xdc4fe30 | out: CurrentTime=0xdc4fe30*=132462177733140000) returned 0x0 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x5e39e328 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x17144424 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x21b9a42a [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x34d4d476 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x4574763d [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x71816095 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x20dc4d26 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x346b61db [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x5a90f07c [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x300c218d [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x3a4f5fd0 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x2997fb8c [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x2f65e7b3 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x76f59952 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x18f2ecd [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x181a8415 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x3ada0e07 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x2ec18a80 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x55007876 [0194.731] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x1e161e32 [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x71a52344 [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x6f01d6fb [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x14d3973f [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x2e9fb115 [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x15d5e93f [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x4947ae9f [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x58c5fa68 [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x73b44ab3 [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x7880cd47 [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x4ed44b1f [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0xdfd2bbf [0194.732] RtlRandomEx (in: Seed=0xdc4fe28 | out: Seed=0xdc4fe28) returned 0x5f43eb2 [0194.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0194.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b8bf68 [0194.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b8fb70 [0194.747] ReadFile (in: hFile=0x10f0, lpBuffer=0x7b8bf68, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xdc4fe24, lpOverlapped=0x0 | out: lpBuffer=0x7b8bf68*, lpNumberOfBytesRead=0xdc4fe24*=0xde, lpOverlapped=0x0) returned 1 [0194.756] SetFilePointerEx (in: hFile=0x10f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.756] WriteFile (in: hFile=0x10f0, lpBuffer=0x7b8fb70*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xdc4fe28, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesWritten=0xdc4fe28*=0xde, lpOverlapped=0x0) returned 1 [0199.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc68 [0199.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4c0 [0199.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd4c0) returned 1 [0199.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0199.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0199.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0199.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e55958) returned 1 [0199.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a379e0 [0199.286] SetFilePointerEx (in: hFile=0x10f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.286] WriteFile (in: hFile=0x10f0, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdc4feb0, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xdc4feb0*=0x10c, lpOverlapped=0x0) returned 1 [0200.132] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38d0 [0200.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38d0) returned 1 [0200.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec38d0 [0200.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0200.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0200.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0200.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d600 [0200.133] sprintf (in: _Dest=0x7a2d600, _Format="%c%c" | out: _Dest="c7") returned 2 [0200.133] sprintf (in: _Dest=0x7a2d602, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d604, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d606, _Format="%c%c" | out: _Dest="62") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d608, _Format="%c%c" | out: _Dest="87") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d60a, _Format="%c%c" | out: _Dest="a4") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d60c, _Format="%c%c" | out: _Dest="a1") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d60e, _Format="%c%c" | out: _Dest="9e") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d610, _Format="%c%c" | out: _Dest="81") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d612, _Format="%c%c" | out: _Dest="86") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d614, _Format="%c%c" | out: _Dest="43") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d616, _Format="%c%c" | out: _Dest="6c") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d618, _Format="%c%c" | out: _Dest="a0") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d61a, _Format="%c%c" | out: _Dest="28") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d61c, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d61e, _Format="%c%c" | out: _Dest="08") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d620, _Format="%c%c" | out: _Dest="7d") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d622, _Format="%c%c" | out: _Dest="71") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d624, _Format="%c%c" | out: _Dest="92") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d626, _Format="%c%c" | out: _Dest="d5") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d628, _Format="%c%c" | out: _Dest="5e") returned 2 [0200.134] sprintf (in: _Dest=0x7a2d62a, _Format="%c%c" | out: _Dest="82") returned 2 [0200.135] sprintf (in: _Dest=0x7a2d62c, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.135] sprintf (in: _Dest=0x7a2d62e, _Format="%c%c" | out: _Dest="ae") returned 2 [0200.135] sprintf (in: _Dest=0x7a2d630, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.135] sprintf (in: _Dest=0x7a2d632, _Format="%c%c" | out: _Dest="28") returned 2 [0200.135] RtlInitAnsiString (in: DestinationString=0xdc4fe38, SourceString="c7bce86287a4a19e8186436ca028fc087d7192d55e82d4aef328" | out: DestinationString="c7bce86287a4a19e8186436ca028fc087d7192d55e82d4aef328") [0200.135] RtlAnsiStringToUnicodeString (in: DestinationString=0xdc4fe30, SourceString="c7bce86287a4a19e8186436ca028fc087d7192d55e82d4aef328", AllocateDestinationString=1 | out: DestinationString="c7bce86287a4a19e8186436ca028fc087d7192d55e82d4aef328") returned 0x0 [0200.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c810 [0200.135] wcscat (in: _Dest=0x7cbf4f0, _Source="c7bce86287a4a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\c7bce86287a4a") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\c7bce86287a4a" [0200.135] wcscat (in: _Dest=0x7cbf4f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\c7bce86287a4a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\c7bce86287a4a.68814f" [0200.135] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\c7bce86287a4a.68814f", NtPathName=0xdc4fe28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\c7bce86287a4a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea38f0 [0200.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38f0) returned 1 [0200.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9e7a0) returned 1 [0200.626] NtQueryInformationFile (in: FileHandle=0x10f0, IoStatusBlock=0xdc4fe00, FileInformation=0xdc4fe08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdc4fe00, FileInformation=0xdc4fe08) returned 0x0 [0200.626] NtSetInformationFile (FileHandle=0x10f0, IoStatusBlock=0xdc4fe00, FileInformation=0xdc4fe08, Length=0x28, FileInformationClass=0x4) returned 0x0 [0200.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0200.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c810) returned 1 [0200.935] FlushFileBuffers (hFile=0x10f0) returned 1 [0200.956] CloseHandle (hObject=0x10f0) returned 1 [0201.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cd6148 [0201.235] wcscpy (in: _Dest=0x7cd6148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\" [0201.235] wcscat (in: _Dest=0x7cd6148, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\68814F-Readme.txt" [0201.235] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\68814f-readme.txt")) returned 0xffffffff [0201.235] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\sk\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe50 [0203.166] WriteFile (in: hFile=0xe50, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdc4fe44, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xdc4fe44*=0x8b9, lpOverlapped=0x0) returned 1 [0206.590] CloseHandle (hObject=0xe50) returned 1 [0211.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6148) returned 1 [0211.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83ee0) returned 1 Thread: id = 6275 os_tid = 0x16c4 [0189.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b428 [0189.563] wcscpy (in: _Dest=0x7a6b428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0189.563] wcscat (in: _Dest=0x7a6b428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" [0189.563] wcscat (in: _Dest=0x7a6b428, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*" [0189.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2bc40 [0189.563] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x7a2bc40 | out: lpFindFileData=0x7a2bc40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e11300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e16120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7770 [0190.576] wcscmp (_String1=".", _String2=".") returned 0 [0190.576] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x7a2bc40 | out: lpFindFileData=0x7a2bc40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e11300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e16120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.576] wcscmp (_String1="..", _String2=".") returned 1 [0190.576] wcscmp (_String1="..", _String2="..") returned 0 [0190.576] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x7a2bc40 | out: lpFindFileData=0x7a2bc40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e16120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.576] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.576] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7a65310 [0190.576] wcscpy (in: _Dest=0x7a65310, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" [0190.576] wcscat (in: _Dest=0x7a65310, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" [0190.576] wcscat (in: _Dest=0x7a65310, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" [0191.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0191.535] FindNextFileW (in: hFindFile=0x7ad7770, lpFindFileData=0x7a2bc40 | out: lpFindFileData=0x7a2bc40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e16120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e16120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.536] FindClose (in: hFindFile=0x7ad7770 | out: hFindFile=0x7ad7770) returned 1 [0191.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2bc40) returned 1 [0191.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b428) returned 1 [0191.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd10) returned 1 Thread: id = 6276 os_tid = 0x18e0 [0189.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6aae0 [0189.564] wcscpy (in: _Dest=0x7a6aae0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0189.565] wcscat (in: _Dest=0x7a6aae0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" [0189.565] wcscat (in: _Dest=0x7a6aae0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*" [0189.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0189.565] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e1af40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e1fd60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b30 [0190.577] wcscmp (_String1=".", _String2=".") returned 0 [0190.577] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e1af40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e1fd60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.577] wcscmp (_String1="..", _String2=".") returned 1 [0190.577] wcscmp (_String1="..", _String2="..") returned 0 [0190.577] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e1fd60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.577] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.577] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7a65438 [0190.577] wcscpy (in: _Dest=0x7a65438, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" [0190.577] wcscat (in: _Dest=0x7a65438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" [0190.577] wcscat (in: _Dest=0x7a65438, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" [0191.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0191.538] FindNextFileW (in: hFindFile=0x7ad7b30, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e1fd60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e1fd60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.538] FindClose (in: hFindFile=0x7ad7b30 | out: hFindFile=0x7ad7b30) returned 1 [0191.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0191.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6aae0) returned 1 [0191.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc130) returned 1 Thread: id = 6277 os_tid = 0x18e4 [0189.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b008 [0189.566] wcscpy (in: _Dest=0x7a6b008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0189.566] wcscat (in: _Dest=0x7a6b008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" [0189.566] wcscat (in: _Dest=0x7a6b008, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*" [0189.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb45c8 [0189.566] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e24b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e299a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad70b0 [0190.578] wcscmp (_String1=".", _String2=".") returned 0 [0190.578] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e24b80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e299a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.578] wcscmp (_String1="..", _String2=".") returned 1 [0190.578] wcscmp (_String1="..", _String2="..") returned 0 [0190.578] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e299a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.578] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.578] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7a65560 [0190.578] wcscpy (in: _Dest=0x7a65560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" [0190.578] wcscat (in: _Dest=0x7a65560, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" [0190.578] wcscat (in: _Dest=0x7a65560, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" [0191.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0191.540] FindNextFileW (in: hFindFile=0x7ad70b0, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e299a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e299a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fead20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.540] FindClose (in: hFindFile=0x7ad70b0 | out: hFindFile=0x7ad70b0) returned 1 [0191.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb45c8) returned 1 [0191.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b008) returned 1 [0191.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc868) returned 1 Thread: id = 6278 os_tid = 0x1350 [0189.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7a6b110 [0189.567] wcscpy (in: _Dest=0x7a6b110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0189.567] wcscat (in: _Dest=0x7a6b110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" [0189.567] wcscat (in: _Dest=0x7a6b110, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*" [0189.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0189.567] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e2e7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e30 [0190.579] wcscmp (_String1=".", _String2=".") returned 0 [0190.579] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e2e7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.579] wcscmp (_String1="..", _String2=".") returned 1 [0190.579] wcscmp (_String1="..", _String2="..") returned 0 [0190.579] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.579] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.579] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7a65688 [0190.579] wcscpy (in: _Dest=0x7a65688, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" [0190.579] wcscat (in: _Dest=0x7a65688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" [0190.579] wcscat (in: _Dest=0x7a65688, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" [0191.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0191.543] FindNextFileW (in: hFindFile=0x7ad7e30, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e2e7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e2e7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0191.543] FindClose (in: hFindFile=0x7ad7e30 | out: hFindFile=0x7ad7e30) returned 1 [0191.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0191.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b110) returned 1 [0191.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcc88) returned 1 Thread: id = 6279 os_tid = 0x16c8 [0189.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7b7c550 [0189.568] wcscpy (in: _Dest=0x7b7c550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0189.568] wcscat (in: _Dest=0x7b7c550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" [0189.568] wcscat (in: _Dest=0x7b7c550, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*" [0189.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3020 [0189.568] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e38400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e3ab10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7ab0 [0189.946] wcscmp (_String1=".", _String2=".") returned 0 [0189.946] FindNextFileW (in: hFindFile=0x7ad7ab0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e38400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e3ab10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.946] wcscmp (_String1="..", _String2=".") returned 1 [0189.946] wcscmp (_String1="..", _String2="..") returned 0 [0189.946] FindNextFileW (in: hFindFile=0x7ad7ab0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e3ab10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.946] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.946] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb32a0 [0189.946] wcscpy (in: _Dest=0x7cb32a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" [0189.947] wcscat (in: _Dest=0x7cb32a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" [0189.947] wcscat (in: _Dest=0x7cb32a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" [0195.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb32a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec [0195.328] FindNextFileW (in: hFindFile=0x7ad7ab0, lpFindFileData=0x3eb3020 | out: lpFindFileData=0x3eb3020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e3ab10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e3ab10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.328] FindClose (in: hFindFile=0x7ad7ab0 | out: hFindFile=0x7ad7ab0) returned 1 [0195.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3020) returned 1 [0195.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c550) returned 1 [0195.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38700) returned 1 Thread: id = 6280 os_tid = 0x16cc [0189.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7b7c438 [0189.569] wcscpy (in: _Dest=0x7b7c438, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0189.569] wcscat (in: _Dest=0x7b7c438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" [0189.569] wcscat (in: _Dest=0x7b7c438, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*" [0189.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2680 [0189.569] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7230 [0189.947] wcscmp (_String1=".", _String2=".") returned 0 [0189.947] FindNextFileW (in: hFindFile=0x7ad7230, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6e42040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6e46e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.947] wcscmp (_String1="..", _String2=".") returned 1 [0189.947] wcscmp (_String1="..", _String2="..") returned 0 [0189.947] FindNextFileW (in: hFindFile=0x7ad7230, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e46e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0189.947] wcscmp (_String1="messages.json", _String2=".") returned 1 [0189.947] wcscmp (_String1="messages.json", _String2="..") returned 1 [0189.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cb33c8 [0189.948] wcscpy (in: _Dest=0x7cb33c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" [0189.948] wcscat (in: _Dest=0x7cb33c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" [0189.948] wcscat (in: _Dest=0x7cb33c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" [0195.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb33c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0195.331] FindNextFileW (in: hFindFile=0x7ad7230, lpFindFileData=0x3eb2680 | out: lpFindFileData=0x3eb2680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6e46e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6e46e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6fed430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.331] FindClose (in: hFindFile=0x7ad7230 | out: hFindFile=0x7ad7230) returned 1 [0195.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2680) returned 1 [0195.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c438) returned 1 [0195.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38a48) returned 1 Thread: id = 6281 os_tid = 0x137c [0189.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif")) returned 0x20 [0189.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0189.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.571] GetLastError () returned 0x5 [0189.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif", dwFileAttributes=0x20) returned 0 [0189.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64410) returned 1 Thread: id = 6282 os_tid = 0x1380 [0189.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif")) returned 0x20 [0189.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0189.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.573] GetLastError () returned 0x5 [0189.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF", dwFileAttributes=0x20) returned 0 [0189.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575c8) returned 1 Thread: id = 6283 os_tid = 0x1384 [0189.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif")) returned 0x20 [0189.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0189.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.575] GetLastError () returned 0x5 [0189.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF", dwFileAttributes=0x20) returned 0 [0189.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ad8) returned 1 Thread: id = 6284 os_tid = 0x138c [0189.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif")) returned 0x20 [0189.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0189.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.577] GetLastError () returned 0x5 [0189.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF", dwFileAttributes=0x20) returned 0 [0189.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 Thread: id = 6285 os_tid = 0x16d0 [0189.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js")) returned 0x20 [0189.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS", dwFileAttributes=0x20) returned 0 [0189.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.579] GetLastError () returned 0x5 [0189.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS", dwFileAttributes=0x20) returned 0 [0189.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e666d8) returned 1 Thread: id = 6286 os_tid = 0x1400 [0189.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html")) returned 0x20 [0189.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0189.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.581] GetLastError () returned 0x5 [0189.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html", dwFileAttributes=0x20) returned 0 [0189.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 6287 os_tid = 0x1408 [0189.582] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json")) returned 0x2020 [0189.582] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0197.268] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10c0 [0197.268] GetFileSizeEx (in: hFile=0x10c0, lpFileSize=0x1027fdb4 | out: lpFileSize=0x1027fdb4*=249) returned 1 [0197.268] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.268] ReadFile (in: hFile=0x10c0, lpBuffer=0x1027fd90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1027fda0, lpOverlapped=0x0 | out: lpBuffer=0x1027fd90*, lpNumberOfBytesRead=0x1027fda0*=0x4, lpOverlapped=0x0) returned 1 [0197.270] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0197.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0197.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0197.270] NtQuerySystemTime (in: CurrentTime=0x1027fd28 | out: CurrentTime=0x1027fd28*=132462177758568000) returned 0x0 [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x6d5b0af9 [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x4ea9d846 [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x31f31417 [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x73a5744d [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x33a39f7 [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x40fe018b [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x747e4eb2 [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x6e5ed8dc [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x8c3a0bf [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x2d816141 [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x41cc5d45 [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x5b1b3e7b [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x7ce8961e [0197.270] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x9a9d3f3 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x3af043a0 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x4d445641 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x7e6b6e1 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x520f18ac [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x5fa170e0 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x5c25220f [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x4e7b188e [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x75b1c1a1 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x3ae4aaf8 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x20c7d434 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x637ccc62 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x172807c4 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x9c041c8 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x5bebfa4b [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x25248302 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x3b14fe38 [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x5362943c [0197.271] RtlRandomEx (in: Seed=0x1027fd20 | out: Seed=0x1027fd20) returned 0x7fff78d3 [0197.282] ReadFile (in: hFile=0x10c0, lpBuffer=0x7da6bd0, nNumberOfBytesToRead=0xf9, lpNumberOfBytesRead=0x1027fd1c, lpOverlapped=0x0 | out: lpBuffer=0x7da6bd0*, lpNumberOfBytesRead=0x1027fd1c*=0xf9, lpOverlapped=0x0) returned 1 [0197.282] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.283] WriteFile (in: hFile=0x10c0, lpBuffer=0x7daa7d8*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x1027fd20, lpOverlapped=0x0 | out: lpBuffer=0x7daa7d8*, lpNumberOfBytesWritten=0x1027fd20*=0xf9, lpOverlapped=0x0) returned 1 [0199.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd7e0 [0199.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd9e8 [0199.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd9e8) returned 1 [0199.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7daa7d8) returned 1 [0199.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7da6bd0) returned 1 [0199.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0199.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23ff0) returned 1 [0199.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0199.959] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.959] WriteFile (in: hFile=0x10c0, lpBuffer=0x7cad088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1027fda8, lpOverlapped=0x0 | out: lpBuffer=0x7cad088*, lpNumberOfBytesWritten=0x1027fda8*=0x10c, lpOverlapped=0x0) returned 1 [0200.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0200.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0200.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2ac0 [0200.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0200.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0200.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0200.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.737] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="ef") returned 2 [0200.737] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="96") returned 2 [0200.737] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="7f") returned 2 [0200.737] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="23") returned 2 [0200.737] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.737] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="a7") returned 2 [0200.737] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="08") returned 2 [0200.737] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="64") returned 2 [0200.737] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="2c") returned 2 [0200.737] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="10") returned 2 [0200.737] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="30") returned 2 [0200.737] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="c1") returned 2 [0200.738] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="e7") returned 2 [0200.738] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="87") returned 2 [0200.738] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="39") returned 2 [0200.738] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="8c") returned 2 [0200.738] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="d0") returned 2 [0200.738] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="e4") returned 2 [0200.738] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="9d") returned 2 [0200.738] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="b4") returned 2 [0200.738] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="29") returned 2 [0200.738] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="0b") returned 2 [0200.738] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.738] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="cc") returned 2 [0200.738] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.738] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.738] RtlInitAnsiString (in: DestinationString=0x1027fd30, SourceString="ef967f239ba708642c1030c1e787398cd0e49db4290ba2cc5a9b" | out: DestinationString="ef967f239ba708642c1030c1e787398cd0e49db4290ba2cc5a9b") [0200.738] RtlAnsiStringToUnicodeString (in: DestinationString=0x1027fd28, SourceString="ef967f239ba708642c1030c1e787398cd0e49db4290ba2cc5a9b", AllocateDestinationString=1 | out: DestinationString="ef967f239ba708642c1030c1e787398cd0e49db4290ba2cc5a9b") returned 0x0 [0200.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c3d8 [0200.739] wcscat (in: _Dest=0x7cd6270, _Source="ef967f239ba70" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\ef967f239ba70") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\ef967f239ba70" [0200.739] wcscat (in: _Dest=0x7cd6270, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\ef967f239ba70.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\ef967f239ba70.68814f" [0200.739] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\ef967f239ba70.68814f", NtPathName=0x1027fd20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\ef967f239ba70.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.739] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x7b87510 [0201.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87510) returned 1 [0201.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccaae8) returned 1 [0201.069] NtQueryInformationFile (in: FileHandle=0x10c0, IoStatusBlock=0x1027fcf8, FileInformation=0x1027fd00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1027fcf8, FileInformation=0x1027fd00) returned 0x0 [0201.069] NtSetInformationFile (FileHandle=0x10c0, IoStatusBlock=0x1027fcf8, FileInformation=0x1027fd00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6270) returned 1 [0201.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c3d8) returned 1 [0201.315] FlushFileBuffers (hFile=0x10c0) returned 1 [0201.322] CloseHandle (hObject=0x10c0) returned 1 [0205.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7b7eeb0 [0205.830] wcscpy (in: _Dest=0x7b7eeb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\" [0205.830] wcscat (in: _Dest=0x7b7eeb0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\68814F-Readme.txt" [0205.831] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\68814f-readme.txt")) returned 0xffffffff [0205.831] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\cs\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b08 [0206.574] WriteFile (in: hFile=0x1b08, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1027fd3c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x1027fd3c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.458] CloseHandle (hObject=0x1b08) returned 1 [0215.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7eeb0) returned 1 [0215.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81c90) returned 1 Thread: id = 6288 os_tid = 0x13cc [0189.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html")) returned 0x20 [0189.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0189.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.583] GetLastError () returned 0x5 [0189.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html", dwFileAttributes=0x20) returned 0 [0189.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64170) returned 1 Thread: id = 6289 os_tid = 0x140c [0189.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html")) returned 0x20 [0189.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0189.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.585] GetLastError () returned 0x5 [0189.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html", dwFileAttributes=0x20) returned 0 [0189.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687f8) returned 1 Thread: id = 6290 os_tid = 0x1410 [0189.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html")) returned 0x20 [0189.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0189.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.587] GetLastError () returned 0x5 [0189.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html", dwFileAttributes=0x20) returned 0 [0189.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64a30) returned 1 Thread: id = 6291 os_tid = 0x1414 [0189.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html")) returned 0x20 [0189.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0189.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.588] GetLastError () returned 0x5 [0189.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html", dwFileAttributes=0x20) returned 0 [0189.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 Thread: id = 6292 os_tid = 0x1418 [0189.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js")) returned 0x20 [0189.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0189.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.590] GetLastError () returned 0x5 [0189.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js", dwFileAttributes=0x20) returned 0 [0189.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64950) returned 1 Thread: id = 6293 os_tid = 0x141c [0189.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css")) returned 0x20 [0189.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0189.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.592] GetLastError () returned 0x5 [0189.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css", dwFileAttributes=0x20) returned 0 [0189.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64870) returned 1 Thread: id = 6294 os_tid = 0x1420 [0189.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html")) returned 0x20 [0189.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0189.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.594] GetLastError () returned 0x5 [0189.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html", dwFileAttributes=0x20) returned 0 [0189.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64790) returned 1 Thread: id = 6295 os_tid = 0x1424 [0189.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html")) returned 0x20 [0189.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0189.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.595] GetLastError () returned 0x5 [0189.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html", dwFileAttributes=0x20) returned 0 [0189.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a646b0) returned 1 Thread: id = 6296 os_tid = 0x1428 [0189.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html")) returned 0x20 [0189.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0189.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.597] GetLastError () returned 0x5 [0189.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html", dwFileAttributes=0x20) returned 0 [0189.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc47e8) returned 1 Thread: id = 6297 os_tid = 0x142c [0189.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html")) returned 0x20 [0189.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0189.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.599] GetLastError () returned 0x5 [0189.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html", dwFileAttributes=0x20) returned 0 [0189.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a645d0) returned 1 Thread: id = 6298 os_tid = 0x1430 [0189.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc2) returned 0x3d852f0 [0189.601] wcscpy (in: _Dest=0x3d852f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0189.601] wcscat (in: _Dest=0x3d852f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0189.601] wcscat (in: _Dest=0x3d852f0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*" [0189.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3e90 [0189.601] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7830 [0189.948] wcscmp (_String1=".", _String2=".") returned 0 [0189.948] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7668c930, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x92230d70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.580] wcscmp (_String1="..", _String2=".") returned 1 [0190.580] wcscmp (_String1="..", _String2="..") returned 0 [0190.580] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x857b5e10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1 [0190.580] wcscmp (_String1="Adobe.css", _String2=".") returned 1 [0190.580] wcscmp (_String1="Adobe.css", _String2="..") returned 1 [0190.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8728 [0190.580] wcscpy (in: _Dest=0x2c8728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0190.580] wcscat (in: _Dest=0x2c8728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0190.580] wcscat (in: _Dest=0x2c8728, _Source="Adobe.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" [0191.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0191.545] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1 [0191.545] wcscmp (_String1="Americana", _String2=".") returned 1 [0191.545] wcscmp (_String1="Americana", _String2="..") returned 1 [0191.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c8b88 [0191.546] wcscpy (in: _Dest=0x2c8b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.546] wcscat (in: _Dest=0x2c8b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.546] wcscat (in: _Dest=0x2c8b88, _Source="Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0191.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c8b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0191.547] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7668c930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xa32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1 [0191.547] wcscmp (_String1="Americana.css", _String2=".") returned 1 [0191.547] wcscmp (_String1="Americana.css", _String2="..") returned 1 [0191.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4700 [0191.547] wcscpy (in: _Dest=0x3dc4700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.547] wcscat (in: _Dest=0x3dc4700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.547] wcscat (in: _Dest=0x3dc4700, _Source="Americana.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" [0191.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660 [0191.548] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1 [0191.549] wcscmp (_String1="BabyBlue", _String2=".") returned 1 [0191.549] wcscmp (_String1="BabyBlue", _String2="..") returned 1 [0191.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e688d0 [0191.549] wcscpy (in: _Dest=0x3e688d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.549] wcscat (in: _Dest=0x3e688d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.549] wcscat (in: _Dest=0x3e688d0, _Source="BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0191.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e688d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0191.550] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1 [0191.550] wcscmp (_String1="BabyBlue.css", _String2=".") returned 1 [0191.550] wcscmp (_String1="BabyBlue.css", _String2="..") returned 1 [0191.550] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c97c8 [0191.550] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.550] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.550] wcscat (in: _Dest=0x2c97c8, _Source="BabyBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" [0191.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c97c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c [0191.551] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1 [0191.551] wcscmp (_String1="Biscay", _String2=".") returned 1 [0191.551] wcscmp (_String1="Biscay", _String2="..") returned 1 [0191.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68b58 [0191.552] wcscpy (in: _Dest=0x3e68b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.552] wcscat (in: _Dest=0x3e68b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.552] wcscat (in: _Dest=0x3e68b58, _Source="Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0191.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e68b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0191.553] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1 [0191.553] wcscmp (_String1="Biscay.css", _String2=".") returned 1 [0191.553] wcscmp (_String1="Biscay.css", _String2="..") returned 1 [0191.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c90c8 [0191.553] wcscpy (in: _Dest=0x2c90c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.553] wcscat (in: _Dest=0x2c90c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.553] wcscat (in: _Dest=0x2c90c8, _Source="Biscay.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" [0191.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c90c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50 [0191.554] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1 [0191.554] wcscmp (_String1="BrightOrange", _String2=".") returned 1 [0191.554] wcscmp (_String1="BrightOrange", _String2="..") returned 1 [0191.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8c68 [0191.555] wcscpy (in: _Dest=0x2c8c68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.555] wcscat (in: _Dest=0x2c8c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.555] wcscat (in: _Dest=0x2c8c68, _Source="BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0191.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c8c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508 [0191.556] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1 [0191.556] wcscmp (_String1="BrightOrange.css", _String2=".") returned 1 [0191.556] wcscmp (_String1="BrightOrange.css", _String2="..") returned 1 [0191.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc47e8 [0191.556] wcscpy (in: _Dest=0x3dc47e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.556] wcscat (in: _Dest=0x3dc47e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.556] wcscat (in: _Dest=0x3dc47e8, _Source="BrightOrange.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" [0191.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc47e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b4 [0191.558] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1 [0191.558] wcscmp (_String1="BrightYellow", _String2=".") returned 1 [0191.558] wcscmp (_String1="BrightYellow", _String2="..") returned 1 [0191.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c88e8 [0191.558] wcscpy (in: _Dest=0x2c88e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.558] wcscat (in: _Dest=0x2c88e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.558] wcscat (in: _Dest=0x2c88e8, _Source="BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0191.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c88e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0191.559] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1 [0191.559] wcscmp (_String1="BrightYellow.css", _String2=".") returned 1 [0191.559] wcscmp (_String1="BrightYellow.css", _String2="..") returned 1 [0191.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4e40 [0191.559] wcscpy (in: _Dest=0x3dc4e40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.559] wcscat (in: _Dest=0x3dc4e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.560] wcscat (in: _Dest=0x3dc4e40, _Source="BrightYellow.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" [0191.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec [0191.561] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76ee1630, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1 [0191.561] wcscmp (_String1="Casual.css", _String2=".") returned 1 [0191.561] wcscmp (_String1="Casual.css", _String2="..") returned 1 [0191.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9528 [0191.561] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.561] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.562] wcscat (in: _Dest=0x2c9528, _Source="Casual.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" [0191.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44 [0191.563] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7705e3f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1 [0191.563] wcscmp (_String1="Country.css", _String2=".") returned 1 [0191.563] wcscmp (_String1="Country.css", _String2="..") returned 1 [0191.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8488 [0191.563] wcscpy (in: _Dest=0x2c8488, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.563] wcscat (in: _Dest=0x2c8488, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.563] wcscat (in: _Dest=0x2c8488, _Source="Country.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" [0191.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664 [0191.564] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1 [0191.564] wcscmp (_String1="Desert", _String2=".") returned 1 [0191.564] wcscmp (_String1="Desert", _String2="..") returned 1 [0191.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e68648 [0191.564] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.564] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.564] wcscat (in: _Dest=0x3e68648, _Source="Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0191.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e68648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0191.565] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x977, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1 [0191.566] wcscmp (_String1="Desert.css", _String2=".") returned 1 [0191.566] wcscmp (_String1="Desert.css", _String2="..") returned 1 [0191.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c91a8 [0191.566] wcscpy (in: _Dest=0x2c91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.566] wcscat (in: _Dest=0x2c91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.566] wcscat (in: _Dest=0x2c91a8, _Source="Desert.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" [0191.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c91a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668 [0191.567] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8771a030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1 [0191.567] wcscmp (_String1="Earthy.css", _String2=".") returned 1 [0191.567] wcscmp (_String1="Earthy.css", _String2="..") returned 1 [0191.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8f08 [0191.567] wcscpy (in: _Dest=0x2c8f08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.567] wcscat (in: _Dest=0x2c8f08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.567] wcscat (in: _Dest=0x2c8f08, _Source="Earthy.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" [0191.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198 [0191.568] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1 [0191.568] wcscmp (_String1="GrayCheck", _String2=".") returned 1 [0191.568] wcscmp (_String1="GrayCheck", _String2="..") returned 1 [0191.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9448 [0191.569] wcscpy (in: _Dest=0x2c9448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.569] wcscat (in: _Dest=0x2c9448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.569] wcscat (in: _Dest=0x2c9448, _Source="GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0191.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c9448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8 [0191.569] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xaf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1 [0191.570] wcscmp (_String1="GrayCheck.css", _String2=".") returned 1 [0191.570] wcscmp (_String1="GrayCheck.css", _String2="..") returned 1 [0191.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc3fc0 [0191.570] wcscpy (in: _Dest=0x3dc3fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.570] wcscat (in: _Dest=0x3dc3fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.570] wcscat (in: _Dest=0x3dc3fc0, _Source="GrayCheck.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" [0191.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c [0191.571] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1 [0191.571] wcscmp (_String1="GreenTea.css", _String2=".") returned 1 [0191.571] wcscmp (_String1="GreenTea.css", _String2="..") returned 1 [0191.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8d48 [0191.571] wcscpy (in: _Dest=0x2c8d48, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.571] wcscat (in: _Dest=0x2c8d48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.571] wcscat (in: _Dest=0x2c8d48, _Source="GreenTea.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" [0191.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670 [0191.572] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1 [0191.572] wcscmp (_String1="LightSpirit.css", _String2=".") returned 1 [0191.572] wcscmp (_String1="LightSpirit.css", _String2="..") returned 1 [0191.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc5010 [0191.572] wcscpy (in: _Dest=0x3dc5010, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.572] wcscat (in: _Dest=0x3dc5010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.572] wcscat (in: _Dest=0x3dc5010, _Source="LightSpirit.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" [0191.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674 [0191.573] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1 [0191.573] wcscmp (_String1="Lime", _String2=".") returned 1 [0191.573] wcscmp (_String1="Lime", _String2="..") returned 1 [0191.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d84ee0 [0191.573] wcscpy (in: _Dest=0x3d84ee0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.574] wcscat (in: _Dest=0x3d84ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.574] wcscat (in: _Dest=0x3d84ee0, _Source="Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0191.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d84ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0191.575] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1 [0191.575] wcscmp (_String1="Lime.css", _String2=".") returned 1 [0191.575] wcscmp (_String1="Lime.css", _String2="..") returned 1 [0191.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e678c8 [0191.575] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.575] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.575] wcscat (in: _Dest=0x3e678c8, _Source="Lime.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" [0191.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e678c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94 [0191.576] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8d1682d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1 [0191.576] wcscmp (_String1="Maroon.css", _String2=".") returned 1 [0191.576] wcscmp (_String1="Maroon.css", _String2="..") returned 1 [0191.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c8e28 [0191.576] wcscpy (in: _Dest=0x2c8e28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.576] wcscat (in: _Dest=0x2c8e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.576] wcscat (in: _Dest=0x2c8e28, _Source="Maroon.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" [0191.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf4 [0191.577] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1 [0191.577] wcscmp (_String1="Oasis", _String2=".") returned 1 [0191.577] wcscmp (_String1="Oasis", _String2="..") returned 1 [0191.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68de0 [0191.578] wcscpy (in: _Dest=0x3e68de0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.578] wcscat (in: _Dest=0x3e68de0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.578] wcscat (in: _Dest=0x3e68de0, _Source="Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0191.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e68de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0191.579] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1 [0191.579] wcscmp (_String1="Oasis.css", _String2=".") returned 1 [0191.579] wcscmp (_String1="Oasis.css", _String2="..") returned 1 [0191.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9288 [0191.579] wcscpy (in: _Dest=0x2c9288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.579] wcscat (in: _Dest=0x2c9288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.579] wcscat (in: _Dest=0x2c9288, _Source="Oasis.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" [0191.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0191.580] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81619fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1 [0191.580] wcscmp (_String1="OliveGreen.css", _String2=".") returned 1 [0191.580] wcscmp (_String1="OliveGreen.css", _String2="..") returned 1 [0191.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4f28 [0191.580] wcscpy (in: _Dest=0x3dc4f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.580] wcscat (in: _Dest=0x3dc4f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.580] wcscat (in: _Dest=0x3dc4f28, _Source="OliveGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" [0191.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0191.581] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8205de90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1 [0191.581] wcscmp (_String1="Premium.css", _String2=".") returned 1 [0191.581] wcscmp (_String1="Premium.css", _String2="..") returned 1 [0191.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8fe8 [0191.581] wcscpy (in: _Dest=0x2c8fe8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.581] wcscat (in: _Dest=0x2c8fe8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.581] wcscat (in: _Dest=0x2c8fe8, _Source="Premium.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" [0191.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8fe8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8 [0191.756] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1 [0191.756] wcscmp (_String1="Slate", _String2=".") returned 1 [0191.756] wcscmp (_String1="Slate", _String2="..") returned 1 [0191.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e37540 [0191.756] wcscpy (in: _Dest=0x3e37540, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0191.756] wcscat (in: _Dest=0x3e37540, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0191.756] wcscat (in: _Dest=0x3e37540, _Source="Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0201.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e37540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0201.793] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1 [0201.794] wcscmp (_String1="Slate.css", _String2=".") returned 1 [0201.794] wcscmp (_String1="Slate.css", _String2="..") returned 1 [0201.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2c9a68 [0201.794] wcscpy (in: _Dest=0x2c9a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.794] wcscat (in: _Dest=0x2c9a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.794] wcscat (in: _Dest=0x2c9a68, _Source="Slate.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" [0201.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c9a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac [0201.795] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1 [0201.795] wcscmp (_String1="SlateBlue.css", _String2=".") returned 1 [0201.795] wcscmp (_String1="SlateBlue.css", _String2="..") returned 1 [0201.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4f28 [0201.795] wcscpy (in: _Dest=0x3dc4f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.795] wcscat (in: _Dest=0x3dc4f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.795] wcscat (in: _Dest=0x3dc4f28, _Source="SlateBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" [0201.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0 [0201.796] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1 [0201.796] wcscmp (_String1="SoftBlue", _String2=".") returned 1 [0201.796] wcscmp (_String1="SoftBlue", _String2="..") returned 1 [0201.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68648 [0201.796] wcscpy (in: _Dest=0x3e68648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.796] wcscat (in: _Dest=0x3e68648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.796] wcscat (in: _Dest=0x3e68648, _Source="SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0201.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e68648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x161c [0201.798] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe34, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1 [0201.798] wcscmp (_String1="SoftBlue.css", _String2=".") returned 1 [0201.798] wcscmp (_String1="SoftBlue.css", _String2="..") returned 1 [0201.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd8) returned 0x2c8648 [0201.798] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.798] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.798] wcscat (in: _Dest=0x2c8648, _Source="SoftBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" [0201.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2c8648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064 [0201.799] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1 [0201.799] wcscmp (_String1="SpringGreen", _String2=".") returned 1 [0201.799] wcscmp (_String1="SpringGreen", _String2="..") returned 1 [0201.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9288 [0201.799] wcscpy (in: _Dest=0x2c9288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.799] wcscat (in: _Dest=0x2c9288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.799] wcscat (in: _Dest=0x2c9288, _Source="SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0201.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x2c9288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0201.802] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x9065ec50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1 [0201.802] wcscmp (_String1="SpringGreen.css", _String2=".") returned 1 [0201.802] wcscmp (_String1="SpringGreen.css", _String2="..") returned 1 [0201.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc51e0 [0201.802] wcscpy (in: _Dest=0x3dc51e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.802] wcscat (in: _Dest=0x3dc51e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.802] wcscat (in: _Dest=0x3dc51e0, _Source="SpringGreen.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" [0201.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc51e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720 [0201.803] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x736, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1 [0201.803] wcscmp (_String1="Sts.css", _String2=".") returned 1 [0201.803] wcscmp (_String1="Sts.css", _String2="..") returned 1 [0201.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e68a80 [0201.803] wcscpy (in: _Dest=0x3e68a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.803] wcscat (in: _Dest=0x3e68a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.803] wcscat (in: _Dest=0x3e68a80, _Source="Sts.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" [0201.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc [0201.804] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1 [0201.804] wcscmp (_String1="STS2", _String2=".") returned 1 [0201.804] wcscmp (_String1="STS2", _String2="..") returned 1 [0201.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x3d84ee0 [0201.804] wcscpy (in: _Dest=0x3d84ee0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.804] wcscat (in: _Dest=0x3d84ee0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.804] wcscat (in: _Dest=0x3d84ee0, _Source="STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0201.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d84ee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190 [0201.805] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826e9b10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1 [0201.805] wcscmp (_String1="Sts2.css", _String2=".") returned 1 [0201.805] wcscmp (_String1="Sts2.css", _String2="..") returned 1 [0201.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e682e8 [0201.806] wcscpy (in: _Dest=0x3e682e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.806] wcscat (in: _Dest=0x3e682e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.806] wcscat (in: _Dest=0x3e682e8, _Source="Sts2.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" [0201.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e682e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674 [0201.807] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88457a90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1 [0201.807] wcscmp (_String1="Swirl", _String2=".") returned 1 [0201.807] wcscmp (_String1="Swirl", _String2="..") returned 1 [0201.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xca) returned 0x3e68b58 [0201.807] wcscpy (in: _Dest=0x3e68b58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.807] wcscat (in: _Dest=0x3e68b58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.807] wcscat (in: _Dest=0x3e68b58, _Source="Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0201.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3e68b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0201.808] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xc23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1 [0201.808] wcscmp (_String1="Swirl.css", _String2=".") returned 1 [0201.808] wcscmp (_String1="Swirl.css", _String2="..") returned 1 [0201.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x7cc0480 [0201.808] wcscpy (in: _Dest=0x7cc0480, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.808] wcscat (in: _Dest=0x7cc0480, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.808] wcscat (in: _Dest=0x7cc0480, _Source="Swirl.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" [0201.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0201.810] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90743490, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1 [0201.810] wcscmp (_String1="Teal.css", _String2=".") returned 1 [0201.810] wcscmp (_String1="Teal.css", _String2="..") returned 1 [0201.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68c30 [0201.810] wcscpy (in: _Dest=0x3e68c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.810] wcscat (in: _Dest=0x3e68c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.810] wcscat (in: _Dest=0x3e68c30, _Source="Teal.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" [0201.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3e68c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac [0201.811] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x827a81f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x37b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1 [0201.811] wcscmp (_String1="TexturedBlue.css", _String2=".") returned 1 [0201.812] wcscmp (_String1="TexturedBlue.css", _String2="..") returned 1 [0201.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4d58 [0201.812] wcscpy (in: _Dest=0x3dc4d58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.812] wcscat (in: _Dest=0x3dc4d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.812] wcscat (in: _Dest=0x3dc4d58, _Source="TexturedBlue.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" [0201.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc [0201.813] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1 [0201.813] wcscmp (_String1="VelvetRose.css", _String2=".") returned 1 [0201.813] wcscmp (_String1="VelvetRose.css", _String2="..") returned 1 [0201.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc53b0 [0201.813] wcscpy (in: _Dest=0x3dc53b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles" [0201.813] wcscat (in: _Dest=0x3dc53b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\" [0201.813] wcscat (in: _Dest=0x3dc53b0, _Source="VelvetRose.css" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" [0201.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc53b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc [0201.815] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x3eb3e90 | out: lpFindFileData=0x3eb3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x92230d70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0 [0201.815] FindClose (in: hFindFile=0x7ad7830 | out: hFindFile=0x7ad7830) returned 1 [0201.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3e90) returned 1 [0201.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852f0) returned 1 [0201.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d579b0) returned 1 Thread: id = 6299 os_tid = 0x1434 [0189.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm")) returned 0x20 [0189.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0189.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.605] GetLastError () returned 0x5 [0189.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm", dwFileAttributes=0x20) returned 0 [0189.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64250) returned 1 Thread: id = 6300 os_tid = 0x1438 [0189.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg")) returned 0x20 [0189.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0189.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.607] GetLastError () returned 0x5 [0189.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg", dwFileAttributes=0x20) returned 0 [0189.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4700) returned 1 Thread: id = 6301 os_tid = 0x143c [0189.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp")) returned 0x20 [0189.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0189.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.953] GetLastError () returned 0x5 [0189.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp", dwFileAttributes=0x20) returned 0 [0189.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0258) returned 1 Thread: id = 6302 os_tid = 0x1448 [0189.955] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png")) returned 0x2020 [0190.998] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", dwFileAttributes=0x20) returned 1 [0197.025] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d88 [0197.026] GetFileSizeEx (in: hFile=0x1d88, lpFileSize=0xbd9f90c | out: lpFileSize=0xbd9f90c*=3406) returned 1 [0197.026] SetFilePointerEx (in: hFile=0x1d88, liDistanceToMove=0xd4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.026] ReadFile (in: hFile=0x1d88, lpBuffer=0xbd9f8e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd9f8f8, lpOverlapped=0x0 | out: lpBuffer=0xbd9f8e8*, lpNumberOfBytesRead=0xbd9f8f8*=0x4, lpOverlapped=0x0) returned 1 [0197.125] SetFilePointerEx (in: hFile=0x1d88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0197.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5568 [0197.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0197.125] NtQuerySystemTime (in: CurrentTime=0xbd9f880 | out: CurrentTime=0xbd9f880*=132462177757008000) returned 0x0 [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x5548f4e5 [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x51dea346 [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x37858863 [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x65a60206 [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x3edeeaf9 [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x4d7005b7 [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x670a407d [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0xe477d1d [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x15677541 [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x25abc9a4 [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x32696e9f [0197.125] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x1dcd0dd7 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0xc5dbcc1 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x798cfbc8 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x1c7405c [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x7276cedb [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x54ccd4fa [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x61aa4f41 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x467d48f8 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x51dea853 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x3b430ed3 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x36a11838 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x1b8c5337 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x47ee8615 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x533d913a [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0xc6cf722 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x36905e8e [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x3c3393c5 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x367d9620 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x4f993a32 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x6da1b745 [0197.126] RtlRandomEx (in: Seed=0xbd9f878 | out: Seed=0xbd9f878) returned 0x454855fd [0197.138] ReadFile (in: hFile=0x1d88, lpBuffer=0x7c4af88, nNumberOfBytesToRead=0xd4e, lpNumberOfBytesRead=0xbd9f874, lpOverlapped=0x0 | out: lpBuffer=0x7c4af88*, lpNumberOfBytesRead=0xbd9f874*=0xd4e, lpOverlapped=0x0) returned 1 [0197.138] SetFilePointerEx (in: hFile=0x1d88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.138] WriteFile (in: hFile=0x1d88, lpBuffer=0x7c4eb90*, nNumberOfBytesToWrite=0xd4e, lpNumberOfBytesWritten=0xbd9f878, lpOverlapped=0x0 | out: lpBuffer=0x7c4eb90*, lpNumberOfBytesWritten=0xbd9f878*=0xd4e, lpOverlapped=0x0) returned 1 [0201.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0201.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0201.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0201.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c4eb90) returned 1 [0201.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c4af88) returned 1 [0202.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 [0202.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a241a0) returned 1 [0202.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec3718 [0202.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38f8) returned 1 [0202.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x3ec38f8 [0202.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ae8 [0202.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cf0 [0202.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cf0) returned 1 [0202.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 [0202.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a241a0) returned 1 [0202.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7cab0a0 [0202.025] SetFilePointerEx (in: hFile=0x1d88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.025] WriteFile (in: hFile=0x1d88, lpBuffer=0x7cab0a0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xbd9f900, lpOverlapped=0x0 | out: lpBuffer=0x7cab0a0*, lpNumberOfBytesWritten=0xbd9f900*=0x100, lpOverlapped=0x0) returned 1 [0206.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab0a0) returned 1 [0206.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38f8) returned 1 [0206.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ae8) returned 1 [0206.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0206.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0206.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5568) returned 1 [0206.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0206.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0206.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7cac8 [0206.155] wcscpy (in: _Dest=0x7b7cac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" [0206.155] wcscat (in: _Dest=0x7b7cac8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.68814f" [0206.155] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.68814f", NtPathName=0xbd9f878, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b7fa40 [0208.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fa40) returned 1 [0208.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e98180) returned 1 [0208.701] NtQueryInformationFile (in: FileHandle=0x1d88, IoStatusBlock=0xbd9f850, FileInformation=0xbd9f858, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbd9f850, FileInformation=0xbd9f858) returned 0x0 [0208.701] NtSetInformationFile (FileHandle=0x1d88, IoStatusBlock=0xbd9f850, FileInformation=0xbd9f858, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cac8) returned 1 [0209.050] FlushFileBuffers (hFile=0x1d88) returned 1 [0209.058] CloseHandle (hObject=0x1d88) returned 1 [0209.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cd2480 [0209.390] wcscpy (in: _Dest=0x7cd2480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0209.390] wcscat (in: _Dest=0x7cd2480, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\68814F-Readme.txt" [0209.390] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\68814f-readme.txt")) returned 0xffffffff [0209.390] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.950] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbd9f894, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbd9f894*=0x8b9, lpOverlapped=0x0) returned 1 [0209.952] CloseHandle (hObject=0xbb8) returned 1 [0209.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd2480) returned 1 [0209.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de82b8) returned 1 Thread: id = 6303 os_tid = 0x144c [0189.958] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json")) returned 0x2020 [0190.999] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", dwFileAttributes=0x20) returned 1 [0198.014] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c1c [0198.015] GetFileSizeEx (in: hFile=0x1c1c, lpFileSize=0xadefbec | out: lpFileSize=0xadefbec*=728) returned 1 [0198.015] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x2d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.015] ReadFile (in: hFile=0x1c1c, lpBuffer=0xadefbc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xadefbd8, lpOverlapped=0x0 | out: lpBuffer=0xadefbc8*, lpNumberOfBytesRead=0xadefbd8*=0x4, lpOverlapped=0x0) returned 1 [0198.018] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0198.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0198.018] NtQuerySystemTime (in: CurrentTime=0xadefb60 | out: CurrentTime=0xadefb60*=132462177765900000) returned 0x0 [0198.018] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x5c99a714 [0198.018] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x2ca9db2e [0198.018] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x547a8878 [0198.018] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x4203b3b7 [0198.018] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x31a8b22a [0198.018] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x6302f1fa [0198.018] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0xa11d2c0 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x63330a60 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0xc992677 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x4e855ec5 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x10a66dad [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x34fb6866 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x240667cf [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x794b4160 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x598181a1 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x6f96aa5 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x1af9dba7 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x27ce2014 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x7a9f55de [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x3a12863f [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0xa11d2c0 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x296480cf [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x75086a26 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x34e4e265 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x60cbf616 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x5f36b0d3 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x428f351d [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x704a203f [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x419c47e0 [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x15c232ff [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x77cb546a [0198.019] RtlRandomEx (in: Seed=0xadefb58 | out: Seed=0xadefb58) returned 0x51ee43b0 [0198.030] ReadFile (in: hFile=0x1c1c, lpBuffer=0x7a750b0, nNumberOfBytesToRead=0x2d8, lpNumberOfBytesRead=0xadefb54, lpOverlapped=0x0 | out: lpBuffer=0x7a750b0*, lpNumberOfBytesRead=0xadefb54*=0x2d8, lpOverlapped=0x0) returned 1 [0198.030] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.030] WriteFile (in: hFile=0x1c1c, lpBuffer=0x7a78cb8*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0xadefb58, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesWritten=0xadefb58*=0x2d8, lpOverlapped=0x0) returned 1 [0200.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a740 [0200.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afb0 [0200.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afb0) returned 1 [0200.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a78cb8) returned 1 [0200.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a750b0) returned 1 [0200.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c180) returned 1 [0200.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84518) returned 1 [0200.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38460 [0200.927] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.927] WriteFile (in: hFile=0x1c1c, lpBuffer=0x7cd32b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xadefbe0, lpOverlapped=0x0 | out: lpBuffer=0x7cd32b8*, lpNumberOfBytesWritten=0xadefbe0*=0x10c, lpOverlapped=0x0) returned 1 [0201.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0201.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538f0 [0201.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538f0) returned 1 [0201.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e538f0 [0201.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535a8 [0201.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538a0 [0201.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538a0) returned 1 [0201.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0201.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.230] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="42") returned 2 [0201.230] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="7e") returned 2 [0201.230] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="56") returned 2 [0201.230] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="3a") returned 2 [0201.230] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="e5") returned 2 [0201.230] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="b2") returned 2 [0201.230] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="22") returned 2 [0201.230] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="e2") returned 2 [0201.230] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="5e") returned 2 [0201.230] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="e2") returned 2 [0201.230] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="96") returned 2 [0201.230] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="0b") returned 2 [0201.230] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="71") returned 2 [0201.230] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="9b") returned 2 [0201.230] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="8d") returned 2 [0201.230] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="34") returned 2 [0201.230] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="c9") returned 2 [0201.230] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="b1") returned 2 [0201.230] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="62") returned 2 [0201.230] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="9d") returned 2 [0201.230] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="b9") returned 2 [0201.231] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="06") returned 2 [0201.231] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="21") returned 2 [0201.231] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="31") returned 2 [0201.231] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="f8") returned 2 [0201.231] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="92") returned 2 [0201.231] RtlInitAnsiString (in: DestinationString=0xadefb68, SourceString="427e563ae5b222e25ee2960b719b8d34c9b1629db9062131f892" | out: DestinationString="427e563ae5b222e25ee2960b719b8d34c9b1629db9062131f892") [0201.231] RtlAnsiStringToUnicodeString (in: DestinationString=0xadefb60, SourceString="427e563ae5b222e25ee2960b719b8d34c9b1629db9062131f892", AllocateDestinationString=1 | out: DestinationString="427e563ae5b222e25ee2960b719b8d34c9b1629db9062131f892") returned 0x0 [0201.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f038 [0201.231] wcscat (in: _Dest=0x7cd32b8, _Source="427e563ae5b22" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\427e563ae5b22") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\427e563ae5b22" [0201.231] wcscat (in: _Dest=0x7cd32b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\427e563ae5b22.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\427e563ae5b22.68814f" [0201.231] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\427e563ae5b22.68814f", NtPathName=0xadefb58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\427e563ae5b22.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7ddec28 [0201.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddec28) returned 1 [0201.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e92f90) returned 1 [0201.457] NtQueryInformationFile (in: FileHandle=0x1c1c, IoStatusBlock=0xadefb30, FileInformation=0xadefb38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xadefb30, FileInformation=0xadefb38) returned 0x0 [0201.457] NtSetInformationFile (FileHandle=0x1c1c, IoStatusBlock=0xadefb30, FileInformation=0xadefb38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd32b8) returned 1 [0208.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f038) returned 1 [0208.959] FlushFileBuffers (hFile=0x1c1c) returned 1 [0209.731] CloseHandle (hObject=0x1c1c) returned 1 [0210.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cd3088 [0210.189] wcscpy (in: _Dest=0x7cd3088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\" [0210.189] wcscat (in: _Dest=0x7cd3088, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\68814F-Readme.txt" [0210.189] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\68814f-readme.txt")) returned 0x2020 [0210.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd3088) returned 1 [0210.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c780) returned 1 Thread: id = 6304 os_tid = 0x1454 [0189.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfc) returned 0x7a6a7c8 [0189.959] wcscpy (in: _Dest=0x7a6a7c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0189.959] wcscat (in: _Dest=0x7a6a7c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0189.959] wcscat (in: _Dest=0x7a6a7c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*" [0189.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55318 [0189.959] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ba34f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8335c90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8335c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7b70 [0190.584] wcscmp (_String1=".", _String2=".") returned 0 [0190.584] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ba34f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8335c90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8335c90, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.584] wcscmp (_String1="..", _String2=".") returned 1 [0190.584] wcscmp (_String1="..", _String2="..") returned 0 [0190.584] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7baaa20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7baf840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0190.584] wcscmp (_String1="ar", _String2=".") returned 1 [0190.584] wcscmp (_String1="ar", _String2="..") returned 1 [0190.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b320 [0190.584] wcscpy (in: _Dest=0x7a6b320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0190.584] wcscat (in: _Dest=0x7a6b320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0190.584] wcscat (in: _Dest=0x7a6b320, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0193.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0193.462] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bbbb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bc7ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0193.462] wcscmp (_String1="bg", _String2=".") returned 1 [0193.462] wcscmp (_String1="bg", _String2="..") returned 1 [0193.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa128 [0193.462] wcscpy (in: _Dest=0x7caa128, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.462] wcscat (in: _Dest=0x7caa128, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.462] wcscat (in: _Dest=0x7caa128, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0193.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38 [0193.463] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bd1b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd6940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bd6940, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0193.463] wcscmp (_String1="ca", _String2=".") returned 1 [0193.463] wcscmp (_String1="ca", _String2="..") returned 1 [0193.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa338 [0193.463] wcscpy (in: _Dest=0x7caa338, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.463] wcscat (in: _Dest=0x7caa338, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.463] wcscat (in: _Dest=0x7caa338, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0193.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0193.465] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7be2c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7beefe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0193.465] wcscmp (_String1="cs", _String2=".") returned 1 [0193.465] wcscmp (_String1="cs", _String2="..") returned 1 [0193.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa230 [0193.466] wcscpy (in: _Dest=0x7caa230, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.466] wcscat (in: _Dest=0x7caa230, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.466] wcscat (in: _Dest=0x7caa230, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0193.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7caa230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0193.467] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bf8c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bfda40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0193.467] wcscmp (_String1="da", _String2=".") returned 1 [0193.467] wcscmp (_String1="da", _String2="..") returned 1 [0193.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eebf00 [0193.467] wcscpy (in: _Dest=0x3eebf00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.467] wcscat (in: _Dest=0x3eebf00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.467] wcscat (in: _Dest=0x3eebf00, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0193.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eebf00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bc4 [0193.469] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c04f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c0c4a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0193.469] wcscmp (_String1="de", _String2=".") returned 1 [0193.469] wcscmp (_String1="de", _String2="..") returned 1 [0193.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec008 [0193.469] wcscpy (in: _Dest=0x3eec008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.469] wcscat (in: _Dest=0x3eec008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.469] wcscat (in: _Dest=0x3eec008, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0193.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4 [0193.470] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c1d610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c22430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0193.470] wcscmp (_String1="el", _String2=".") returned 1 [0193.471] wcscmp (_String1="el", _String2="..") returned 1 [0193.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec110 [0193.471] wcscpy (in: _Dest=0x3eec110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.471] wcscat (in: _Dest=0x3eec110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.471] wcscat (in: _Dest=0x3eec110, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0193.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250 [0193.472] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c2c070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fce340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0193.472] wcscmp (_String1="en", _String2=".") returned 1 [0193.472] wcscmp (_String1="en", _String2="..") returned 1 [0193.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec320 [0193.473] wcscpy (in: _Dest=0x3eec320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.473] wcscat (in: _Dest=0x3eec320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.473] wcscat (in: _Dest=0x3eec320, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0193.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0193.474] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7fda690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fe69e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0193.474] wcscmp (_String1="es", _String2=".") returned 1 [0193.474] wcscmp (_String1="es", _String2="..") returned 1 [0193.474] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eeb3a8 [0193.475] wcscpy (in: _Dest=0x3eeb3a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.475] wcscat (in: _Dest=0x3eeb3a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.475] wcscat (in: _Dest=0x3eeb3a8, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0193.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0193.476] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ff2d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7ffa260, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0193.476] wcscmp (_String1="fi", _String2=".") returned 1 [0193.476] wcscmp (_String1="fi", _String2="..") returned 1 [0193.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eece78 [0193.476] wcscpy (in: _Dest=0x3eece78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.476] wcscat (in: _Dest=0x3eece78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.476] wcscat (in: _Dest=0x3eece78, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0193.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eece78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0193.478] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8012900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8019e30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8019e30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0193.478] wcscmp (_String1="fil", _String2=".") returned 1 [0193.478] wcscmp (_String1="fil", _String2="..") returned 1 [0193.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x3eeb2a0 [0193.478] wcscpy (in: _Dest=0x3eeb2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.478] wcscat (in: _Dest=0x3eeb2a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.479] wcscat (in: _Dest=0x3eeb2a0, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0193.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0193.480] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe802afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8034be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0193.480] wcscmp (_String1="fr", _String2=".") returned 1 [0193.481] wcscmp (_String1="fr", _String2="..") returned 1 [0193.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eecd70 [0193.481] wcscpy (in: _Dest=0x3eecd70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.481] wcscat (in: _Dest=0x3eecd70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.481] wcscat (in: _Dest=0x3eecd70, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0193.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eecd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0193.483] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8040f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8045d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0193.483] wcscmp (_String1="he", _String2=".") returned 1 [0193.483] wcscmp (_String1="he", _String2="..") returned 1 [0193.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eeb198 [0193.483] wcscpy (in: _Dest=0x3eeb198, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.483] wcscat (in: _Dest=0x3eeb198, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.483] wcscat (in: _Dest=0x3eeb198, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0193.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c [0193.484] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe804d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80520a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80520a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0193.484] wcscmp (_String1="hi", _String2=".") returned 1 [0193.484] wcscmp (_String1="hi", _String2="..") returned 1 [0193.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eecc68 [0193.485] wcscpy (in: _Dest=0x3eecc68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.485] wcscat (in: _Dest=0x3eecc68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.485] wcscat (in: _Dest=0x3eecc68, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0193.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eecc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0193.486] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe809b480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a02a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80a02a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0193.486] wcscmp (_String1="hr", _String2=".") returned 1 [0193.486] wcscmp (_String1="hr", _String2="..") returned 1 [0193.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eecb60 [0193.486] wcscpy (in: _Dest=0x3eecb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.486] wcscat (in: _Dest=0x3eecb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.486] wcscat (in: _Dest=0x3eecb60, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0193.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eecb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0193.488] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80b3b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80bb050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0193.488] wcscmp (_String1="hu", _String2=".") returned 1 [0193.488] wcscmp (_String1="hu", _String2="..") returned 1 [0193.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eeca58 [0193.488] wcscpy (in: _Dest=0x3eeca58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.488] wcscat (in: _Dest=0x3eeca58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.488] wcscat (in: _Dest=0x3eeca58, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0193.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeca58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0193.489] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80c73a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d36f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80d36f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0193.489] wcscmp (_String1="id", _String2=".") returned 1 [0193.489] wcscmp (_String1="id", _String2="..") returned 1 [0193.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec950 [0193.490] wcscpy (in: _Dest=0x3eec950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.490] wcscat (in: _Dest=0x3eec950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.490] wcscat (in: _Dest=0x3eec950, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0193.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0193.491] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80e2150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80e6f70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0193.491] wcscmp (_String1="it", _String2=".") returned 1 [0193.491] wcscmp (_String1="it", _String2="..") returned 1 [0193.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec848 [0193.491] wcscpy (in: _Dest=0x3eec848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.491] wcscat (in: _Dest=0x3eec848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.491] wcscat (in: _Dest=0x3eec848, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0193.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c [0193.492] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80f32c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fa7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80fa7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0193.493] wcscmp (_String1="ja", _String2=".") returned 1 [0193.493] wcscmp (_String1="ja", _String2="..") returned 1 [0193.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec740 [0193.493] wcscpy (in: _Dest=0x3eec740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.493] wcscat (in: _Dest=0x3eec740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.493] wcscat (in: _Dest=0x3eec740, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0193.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eec740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34 [0193.494] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8106b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe810b960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0193.494] wcscmp (_String1="ko", _String2=".") returned 1 [0193.494] wcscmp (_String1="ko", _String2="..") returned 1 [0193.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eeb4b0 [0193.494] wcscpy (in: _Dest=0x3eeb4b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0193.494] wcscat (in: _Dest=0x3eeb4b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0193.494] wcscat (in: _Dest=0x3eeb4b0, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0193.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3eeb4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28 [0195.143] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8112e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8117cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0195.143] wcscmp (_String1="lt", _String2=".") returned 1 [0195.143] wcscmp (_String1="lt", _String2="..") returned 1 [0195.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b6b8 [0195.143] wcscpy (in: _Dest=0x7b7b6b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0195.143] wcscat (in: _Dest=0x7b7b6b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0195.143] wcscat (in: _Dest=0x7b7b6b8, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0199.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7b6b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60 [0199.638] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8126710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe812b530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe812b530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0199.638] wcscmp (_String1="lv", _String2=".") returned 1 [0199.638] wcscmp (_String1="lv", _String2="..") returned 1 [0199.638] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f8c8 [0199.638] wcscpy (in: _Dest=0x7b7f8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.638] wcscat (in: _Dest=0x7b7f8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.639] wcscat (in: _Dest=0x7b7f8c8, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0199.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500 [0199.640] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8232ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8235700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0199.640] wcscmp (_String1="nl", _String2=".") returned 1 [0199.640] wcscmp (_String1="nl", _String2="..") returned 1 [0199.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b80108 [0199.640] wcscpy (in: _Dest=0x7b80108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.640] wcscat (in: _Dest=0x7b80108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.640] wcscat (in: _Dest=0x7b80108, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0199.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b80108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268 [0199.642] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8241a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8246870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0199.642] wcscmp (_String1="no", _String2=".") returned 1 [0199.642] wcscmp (_String1="no", _String2="..") returned 1 [0199.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ef80 [0199.642] wcscpy (in: _Dest=0x7b7ef80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.642] wcscat (in: _Dest=0x7b7ef80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.642] wcscat (in: _Dest=0x7b7ef80, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0199.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7ef80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc [0199.643] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8288720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe828ae30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0199.644] wcscmp (_String1="pl", _String2=".") returned 1 [0199.644] wcscmp (_String1="pl", _String2="..") returned 1 [0199.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ed70 [0199.644] wcscpy (in: _Dest=0x7b7ed70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.644] wcscat (in: _Dest=0x7b7ed70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.644] wcscat (in: _Dest=0x7b7ed70, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0199.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7ed70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560 [0199.645] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8297180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe829bfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0199.645] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0199.645] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0199.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cbd948 [0199.645] wcscpy (in: _Dest=0x7cbd948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.645] wcscat (in: _Dest=0x7cbd948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.646] wcscat (in: _Dest=0x7cbd948, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0199.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cbd948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294 [0199.647] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82a34d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a5be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82a5be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0199.647] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0199.647] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0199.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cbdc90 [0199.647] wcscpy (in: _Dest=0x7cbdc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.647] wcscat (in: _Dest=0x7cbdc90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.647] wcscat (in: _Dest=0x7cbdc90, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0199.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cbdc90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1628 [0199.649] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82ad110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82af820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82af820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0199.649] wcscmp (_String1="ro", _String2=".") returned 1 [0199.649] wcscmp (_String1="ro", _String2="..") returned 1 [0199.649] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ec68 [0199.649] wcscpy (in: _Dest=0x7b7ec68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.649] wcscat (in: _Dest=0x7b7ec68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.649] wcscat (in: _Dest=0x7b7ec68, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0199.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7ec68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760 [0199.651] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82bbb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82be280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82be280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0199.651] wcscmp (_String1="ru", _String2=".") returned 1 [0199.651] wcscmp (_String1="ru", _String2="..") returned 1 [0199.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7eb60 [0199.652] wcscpy (in: _Dest=0x7b7eb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.652] wcscat (in: _Dest=0x7b7eb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.652] wcscat (in: _Dest=0x7b7eb60, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0199.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7eb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0199.653] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82c57b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82ccce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0199.653] wcscmp (_String1="sk", _String2=".") returned 1 [0199.653] wcscmp (_String1="sk", _String2="..") returned 1 [0199.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ea58 [0199.654] wcscpy (in: _Dest=0x7b7ea58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.654] wcscat (in: _Dest=0x7b7ea58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.654] wcscat (in: _Dest=0x7b7ea58, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0199.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7ea58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1818 [0199.655] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82d4210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82d6920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0199.655] wcscmp (_String1="sl", _String2=".") returned 1 [0199.655] wcscmp (_String1="sl", _String2="..") returned 1 [0199.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7e950 [0199.656] wcscpy (in: _Dest=0x7b7e950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.656] wcscat (in: _Dest=0x7b7e950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.656] wcscat (in: _Dest=0x7b7e950, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0199.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7e950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc [0199.657] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82e2c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e5380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82e5380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0199.657] wcscmp (_String1="sr", _String2=".") returned 1 [0199.657] wcscmp (_String1="sr", _String2="..") returned 1 [0199.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f088 [0199.657] wcscpy (in: _Dest=0x7b7f088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.657] wcscat (in: _Dest=0x7b7f088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.657] wcscat (in: _Dest=0x7b7f088, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0199.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7f088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14 [0199.680] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82eefc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f16d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82f16d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0199.680] wcscmp (_String1="sv", _String2=".") returned 1 [0199.680] wcscmp (_String1="sv", _String2="..") returned 1 [0199.680] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6bb60 [0199.680] wcscpy (in: _Dest=0x7a6bb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.681] wcscat (in: _Dest=0x7a6bb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.681] wcscat (in: _Dest=0x7a6bb60, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0199.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6bb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8 [0199.682] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82f8c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fb310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82fb310, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0199.682] wcscmp (_String1="th", _String2=".") returned 1 [0199.682] wcscmp (_String1="th", _String2="..") returned 1 [0199.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6bc68 [0199.682] wcscpy (in: _Dest=0x7a6bc68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.683] wcscat (in: _Dest=0x7a6bc68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.683] wcscat (in: _Dest=0x7a6bc68, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0199.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6bc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c [0199.685] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8304f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8309d70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0199.685] wcscmp (_String1="tr", _String2=".") returned 1 [0199.685] wcscmp (_String1="tr", _String2="..") returned 1 [0199.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6bd70 [0199.685] wcscpy (in: _Dest=0x7a6bd70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.685] wcscat (in: _Dest=0x7a6bd70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.685] wcscat (in: _Dest=0x7a6bd70, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0199.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c [0199.686] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83112a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83160c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83160c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0199.687] wcscmp (_String1="uk", _String2=".") returned 1 [0199.687] wcscmp (_String1="uk", _String2="..") returned 1 [0199.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a6c0 [0199.687] wcscpy (in: _Dest=0x7a6a6c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.687] wcscat (in: _Dest=0x7a6a6c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.687] wcscat (in: _Dest=0x7a6a6c0, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0199.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6a6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c [0199.688] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe831d5f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe831fd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe831fd00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0199.689] wcscmp (_String1="vi", _String2=".") returned 1 [0199.689] wcscmp (_String1="vi", _String2="..") returned 1 [0199.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b848 [0199.689] wcscpy (in: _Dest=0x7a6b848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.689] wcscat (in: _Dest=0x7a6b848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.689] wcscat (in: _Dest=0x7a6b848, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0199.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a6b848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4 [0199.690] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8327230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe832c050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0199.690] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0199.690] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0199.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7dc48 [0199.691] wcscpy (in: _Dest=0x7b7dc48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.691] wcscat (in: _Dest=0x7b7dc48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.691] wcscat (in: _Dest=0x7b7dc48, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0199.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7dc48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44 [0199.692] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0199.692] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0199.693] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0199.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7db30 [0199.693] wcscpy (in: _Dest=0x7b7db30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" [0199.693] wcscat (in: _Dest=0x7b7db30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\" [0199.693] wcscat (in: _Dest=0x7b7db30, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0199.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc [0199.694] FindNextFileW (in: hFindFile=0x7ad7b70, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0199.694] FindClose (in: hFindFile=0x7ad7b70 | out: hFindFile=0x7ad7b70) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55318) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a7c8) returned 1 [0199.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de8eb8) returned 1 Thread: id = 6305 os_tid = 0x16d4 [0189.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a3a8 [0189.961] wcscpy (in: _Dest=0x7a6a3a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0189.961] wcscat (in: _Dest=0x7a6a3a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\" [0189.961] wcscat (in: _Dest=0x7a6a3a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*" [0189.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a550b0 [0189.961] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7fb0 [0190.585] wcscmp (_String1=".", _String2=".") returned 0 [0190.585] FindNextFileW (in: hFindFile=0x7ad7fb0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83446f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8346e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8346e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.585] wcscmp (_String1="..", _String2=".") returned 1 [0190.585] wcscmp (_String1="..", _String2="..") returned 0 [0190.585] FindNextFileW (in: hFindFile=0x7ad7fb0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8346e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8349510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf7bfcd00, ftLastWriteTime.dwHighDateTime=0x1d0f616, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0190.585] wcscmp (_String1="verified_contents.json", _String2=".") returned 1 [0190.585] wcscmp (_String1="verified_contents.json", _String2="..") returned 1 [0190.585] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3ec9b98 [0190.585] wcscpy (in: _Dest=0x3ec9b98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" [0190.585] wcscat (in: _Dest=0x3ec9b98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\" [0190.585] wcscat (in: _Dest=0x3ec9b98, _Source="verified_contents.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" [0201.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3ec9b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798 [0201.728] FindNextFileW (in: hFindFile=0x7ad7fb0, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8346e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8349510, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf7bfcd00, ftLastWriteTime.dwHighDateTime=0x1d0f616, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0201.729] FindClose (in: hFindFile=0x7ad7fb0 | out: hFindFile=0x7ad7fb0) returned 1 [0201.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a550b0) returned 1 [0201.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a3a8) returned 1 [0201.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a198) returned 1 Thread: id = 6306 os_tid = 0x16d8 [0189.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc")) returned 0x20 [0189.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC", dwFileAttributes=0x20) returned 0 [0189.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.963] GetLastError () returned 0x5 [0189.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC", dwFileAttributes=0x20) returned 0 [0189.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 6307 os_tid = 0x146c [0189.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc")) returned 0x20 [0189.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC", dwFileAttributes=0x20) returned 0 [0189.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.965] GetLastError () returned 0x5 [0189.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC", dwFileAttributes=0x20) returned 0 [0189.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68dd8) returned 1 Thread: id = 6308 os_tid = 0x1470 [0189.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso98.poc")) returned 0x20 [0189.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC", dwFileAttributes=0x20) returned 0 [0189.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0189.969] GetLastError () returned 0x5 [0189.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC", dwFileAttributes=0x20) returned 0 [0189.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68800) returned 1 Thread: id = 6309 os_tid = 0x1474 [0189.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.dpv")) returned 0x20 [0191.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV", dwFileAttributes=0x20) returned 0 [0191.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.402] GetLastError () returned 0x5 [0191.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV", dwFileAttributes=0x20) returned 0 [0191.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ba8) returned 1 Thread: id = 6310 os_tid = 0x1478 [0189.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml")) returned 0x20 [0191.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML", dwFileAttributes=0x20) returned 0 [0191.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.404] GetLastError () returned 0x5 [0191.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML", dwFileAttributes=0x20) returned 0 [0191.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69f60) returned 1 Thread: id = 6311 os_tid = 0x1480 [0189.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc")) returned 0x20 [0191.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC", dwFileAttributes=0x20) returned 0 [0191.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.406] GetLastError () returned 0x5 [0191.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC", dwFileAttributes=0x20) returned 0 [0191.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69fe8) returned 1 Thread: id = 6312 os_tid = 0x1488 [0189.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc")) returned 0x20 [0191.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC", dwFileAttributes=0x20) returned 0 [0191.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.408] GetLastError () returned 0x5 [0191.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC", dwFileAttributes=0x20) returned 0 [0191.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68998) returned 1 Thread: id = 6313 os_tid = 0x1490 [0189.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv")) returned 0x20 [0191.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV", dwFileAttributes=0x20) returned 0 [0191.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.409] GetLastError () returned 0x5 [0191.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV", dwFileAttributes=0x20) returned 0 [0191.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a718) returned 1 Thread: id = 6314 os_tid = 0x1494 [0189.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml")) returned 0x20 [0191.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML", dwFileAttributes=0x20) returned 0 [0191.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.411] GetLastError () returned 0x5 [0191.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML", dwFileAttributes=0x20) returned 0 [0191.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19718) returned 1 Thread: id = 6315 os_tid = 0x1498 [0189.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc")) returned 0x20 [0191.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC", dwFileAttributes=0x20) returned 0 [0191.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.413] GetLastError () returned 0x5 [0191.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC", dwFileAttributes=0x20) returned 0 [0191.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681a0) returned 1 Thread: id = 6316 os_tid = 0x149c [0189.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc")) returned 0x20 [0191.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC", dwFileAttributes=0x20) returned 0 [0191.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.415] GetLastError () returned 0x5 [0191.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC", dwFileAttributes=0x20) returned 0 [0191.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68118) returned 1 Thread: id = 6317 os_tid = 0x14a0 [0189.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\checker.poc")) returned 0x20 [0191.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC", dwFileAttributes=0x20) returned 0 [0191.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\checker.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.416] GetLastError () returned 0x5 [0191.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC", dwFileAttributes=0x20) returned 0 [0191.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68228) returned 1 Thread: id = 6318 os_tid = 0x14a4 [0189.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.dpv")) returned 0x20 [0191.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV", dwFileAttributes=0x20) returned 0 [0191.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.400] GetLastError () returned 0x5 [0191.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV", dwFileAttributes=0x20) returned 0 [0191.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 6319 os_tid = 0x14b0 [0189.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.poc")) returned 0x20 [0190.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC", dwFileAttributes=0x20) returned 0 [0190.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.800] GetLastError () returned 0x5 [0190.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC", dwFileAttributes=0x20) returned 0 [0190.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 6320 os_tid = 0x14bc [0190.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc")) returned 0x20 [0191.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC", dwFileAttributes=0x20) returned 0 [0191.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.418] GetLastError () returned 0x5 [0191.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC", dwFileAttributes=0x20) returned 0 [0191.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a683c0) returned 1 Thread: id = 6321 os_tid = 0x14fc [0190.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.dpv")) returned 0x20 [0191.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV", dwFileAttributes=0x20) returned 0 [0191.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.422] GetLastError () returned 0x5 [0191.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV", dwFileAttributes=0x20) returned 0 [0191.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 Thread: id = 6322 os_tid = 0x1500 [0190.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml")) returned 0x20 [0191.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML", dwFileAttributes=0x20) returned 0 [0191.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.427] GetLastError () returned 0x5 [0191.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML", dwFileAttributes=0x20) returned 0 [0191.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a682b0) returned 1 Thread: id = 6323 os_tid = 0x1504 [0190.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.dpv")) returned 0x20 [0191.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV", dwFileAttributes=0x20) returned 0 [0191.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.428] GetLastError () returned 0x5 [0191.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV", dwFileAttributes=0x20) returned 0 [0191.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68c40) returned 1 Thread: id = 6324 os_tid = 0x1508 [0190.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml")) returned 0x20 [0191.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML", dwFileAttributes=0x20) returned 0 [0191.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.430] GetLastError () returned 0x5 [0191.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML", dwFileAttributes=0x20) returned 0 [0191.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68b30) returned 1 Thread: id = 6325 os_tid = 0x16dc [0190.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv")) returned 0x20 [0191.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV", dwFileAttributes=0x20) returned 0 [0191.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.432] GetLastError () returned 0x5 [0191.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV", dwFileAttributes=0x20) returned 0 [0191.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a598) returned 1 Thread: id = 6326 os_tid = 0x151c [0190.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml")) returned 0x20 [0191.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML", dwFileAttributes=0x20) returned 0 [0191.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.433] GetLastError () returned 0x5 [0191.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML", dwFileAttributes=0x20) returned 0 [0191.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19198) returned 1 Thread: id = 6327 os_tid = 0x1524 [0190.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv")) returned 0x20 [0191.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV", dwFileAttributes=0x20) returned 0 [0191.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.434] GetLastError () returned 0x5 [0191.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV", dwFileAttributes=0x20) returned 0 [0191.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a694c0) returned 1 Thread: id = 6328 os_tid = 0x1530 [0190.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml")) returned 0x20 [0191.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML", dwFileAttributes=0x20) returned 0 [0191.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.398] GetLastError () returned 0x5 [0191.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML", dwFileAttributes=0x20) returned 0 [0191.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69548) returned 1 Thread: id = 6329 os_tid = 0x1538 [0190.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv")) returned 0x20 [0191.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV", dwFileAttributes=0x20) returned 0 [0191.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.420] GetLastError () returned 0x5 [0191.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV", dwFileAttributes=0x20) returned 0 [0191.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a695d0) returned 1 Thread: id = 6330 os_tid = 0x1548 [0190.658] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json")) returned 0x2020 [0190.659] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0195.896] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd78 [0195.896] GetFileSizeEx (in: hFile=0xd78, lpFileSize=0xa7af844 | out: lpFileSize=0xa7af844*=199) returned 1 [0195.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0195.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0195.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0195.897] NtQuerySystemTime (in: CurrentTime=0xa7af7b8 | out: CurrentTime=0xa7af7b8*=132462177744684000) returned 0x0 [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x4e6090c9 [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x67955c6f [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x4ff0f1a7 [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x7b75a16e [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x2504be2b [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x26384ec [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x23c0fd48 [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x3aa72c4c [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x75446900 [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x1879b2d [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x205b92a8 [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x7b51699 [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x6271e03b [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x50889c8f [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x14d5fddc [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x1441c3c6 [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x17aca831 [0195.897] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x3ca9fb82 [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x6d4b55fa [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x49aa4e86 [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x65c87abd [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x6ce629c3 [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x51bb5c31 [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x4b7af13d [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x13603bd5 [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x11d4a41a [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x5935f9ea [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x61d42cb7 [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x6503159c [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x51baa5f6 [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x346cfb63 [0195.898] RtlRandomEx (in: Seed=0xa7af7b0 | out: Seed=0xa7af7b0) returned 0x64771699 [0195.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0195.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0195.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0195.914] ReadFile (in: hFile=0xd78, lpBuffer=0x7bf63a0, nNumberOfBytesToRead=0xc7, lpNumberOfBytesRead=0xa7af7ac, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesRead=0xa7af7ac*=0xc7, lpOverlapped=0x0) returned 1 [0195.916] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.917] WriteFile (in: hFile=0xd78, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0xa7af7b0, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0xa7af7b0*=0xc7, lpOverlapped=0x0) returned 1 [0199.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0199.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0199.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a7e0) returned 1 [0199.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0199.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0199.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0199.481] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e08388) returned 1 [0199.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0199.482] SetFilePointerEx (in: hFile=0xd78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.482] WriteFile (in: hFile=0xd78, lpBuffer=0x7b7df90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa7af838, lpOverlapped=0x0 | out: lpBuffer=0x7b7df90*, lpNumberOfBytesWritten=0xa7af838*=0x10c, lpOverlapped=0x0) returned 1 [0200.643] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24620 [0200.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fdd0 [0200.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53738 [0200.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53738) returned 1 [0200.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53738 [0200.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53490 [0200.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a18 [0200.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a18) returned 1 [0200.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0200.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24620) returned 1 [0200.644] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.644] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="38") returned 2 [0200.644] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="8e") returned 2 [0200.645] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="a0") returned 2 [0200.645] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="72") returned 2 [0200.645] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="e5") returned 2 [0200.645] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="ca") returned 2 [0200.645] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="c7") returned 2 [0200.645] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.645] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="d8") returned 2 [0200.645] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="24") returned 2 [0200.645] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="d5") returned 2 [0200.645] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="e5") returned 2 [0200.645] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.645] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.645] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="87") returned 2 [0200.645] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="f8") returned 2 [0200.645] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="da") returned 2 [0200.645] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="f8") returned 2 [0200.645] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="96") returned 2 [0200.645] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="a1") returned 2 [0200.645] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="10") returned 2 [0200.645] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="b0") returned 2 [0200.645] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="cf") returned 2 [0200.645] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="05") returned 2 [0200.645] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="62") returned 2 [0200.646] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="a5") returned 2 [0200.646] RtlInitAnsiString (in: DestinationString=0xa7af7c0, SourceString="388ea072e5cac7dcd824d5e5a69b87f8daf896a110b0cf0562a5" | out: DestinationString="388ea072e5cac7dcd824d5e5a69b87f8daf896a110b0cf0562a5") [0200.646] RtlAnsiStringToUnicodeString (in: DestinationString=0xa7af7b8, SourceString="388ea072e5cac7dcd824d5e5a69b87f8daf896a110b0cf0562a5", AllocateDestinationString=1 | out: DestinationString="388ea072e5cac7dcd824d5e5a69b87f8daf896a110b0cf0562a5") returned 0x0 [0200.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f290 [0200.646] wcscat (in: _Dest=0x7a5ff08, _Source="388ea072e5cac" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\388ea072e5cac") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\388ea072e5cac" [0200.646] wcscat (in: _Dest=0x7a5ff08, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\388ea072e5cac.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\388ea072e5cac.68814f" [0200.646] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\388ea072e5cac.68814f", NtPathName=0xa7af7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\388ea072e5cac.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x3ea3660 [0201.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3660) returned 1 [0201.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccb388) returned 1 [0201.478] NtQueryInformationFile (in: FileHandle=0xd78, IoStatusBlock=0xa7af788, FileInformation=0xa7af790, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa7af788, FileInformation=0xa7af790) returned 0x0 [0201.478] NtSetInformationFile (FileHandle=0xd78, IoStatusBlock=0xa7af788, FileInformation=0xa7af790, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ff08) returned 1 [0206.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0206.140] FlushFileBuffers (hFile=0xd78) returned 1 [0206.146] CloseHandle (hObject=0xd78) returned 1 [0206.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7cd4158 [0206.565] wcscpy (in: _Dest=0x7cd4158, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\" [0206.565] wcscat (in: _Dest=0x7cd4158, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\68814F-Readme.txt" [0206.565] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\68814f-readme.txt")) returned 0xffffffff [0206.565] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.300] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa7af7cc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa7af7cc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.301] CloseHandle (hObject=0x17ec) returned 1 [0210.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4158) returned 1 [0210.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae270) returned 1 Thread: id = 6331 os_tid = 0x154c [0190.659] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json")) returned 0x2020 [0190.660] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0195.917] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2184 [0195.918] GetFileSizeEx (in: hFile=0x2184, lpFileSize=0x924fcc4 | out: lpFileSize=0x924fcc4*=183) returned 1 [0195.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0195.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0195.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0195.918] NtQuerySystemTime (in: CurrentTime=0x924fc38 | out: CurrentTime=0x924fc38*=132462177744996000) returned 0x0 [0195.918] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x6940c006 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x7ed8a54 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x79373f73 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x1b4971e2 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x1beadd50 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x5664fdaa [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x2c51a9bd [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x159ce4e8 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x3f926249 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x40409376 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x4722551d [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x2b07c2f2 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0xcadf3a3 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x14c41782 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x3346f090 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x706f9236 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x1909017e [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x349f6170 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x1c010686 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x199880d8 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x41309db3 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x3f8166bf [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x367949c4 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x5358d578 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x2be2a13e [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x7d81d466 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0xbb36d38 [0195.919] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x55dc2c4e [0195.920] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x2e57d4 [0195.920] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x36aa2c4e [0195.920] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x5fc60e58 [0195.920] RtlRandomEx (in: Seed=0x924fc30 | out: Seed=0x924fc30) returned 0x315e3c34 [0195.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0195.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0195.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0195.940] ReadFile (in: hFile=0x2184, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0xb7, lpNumberOfBytesRead=0x924fc2c, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0x924fc2c*=0xb7, lpOverlapped=0x0) returned 1 [0195.943] SetFilePointerEx (in: hFile=0x2184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.943] WriteFile (in: hFile=0x2184, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x924fc30, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0x924fc30*=0xb7, lpOverlapped=0x0) returned 1 [0199.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0199.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0199.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a718) returned 1 [0199.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0199.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0199.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30153a0) returned 1 [0199.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0199.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37920 [0199.486] SetFilePointerEx (in: hFile=0x2184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.486] WriteFile (in: hFile=0x2184, lpBuffer=0x7b7e0a8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x924fcb8, lpOverlapped=0x0 | out: lpBuffer=0x7b7e0a8*, lpNumberOfBytesWritten=0x924fcb8*=0x10c, lpOverlapped=0x0) returned 1 [0200.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24620 [0200.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fdd0 [0200.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0200.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3240) returned 1 [0200.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3240 [0200.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0200.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0200.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0200.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0200.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24620) returned 1 [0200.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.709] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="f5") returned 2 [0200.709] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="09") returned 2 [0200.709] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="6b") returned 2 [0200.709] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="79") returned 2 [0200.709] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="60") returned 2 [0200.709] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="8d") returned 2 [0200.709] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.709] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="7f") returned 2 [0200.709] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="e7") returned 2 [0200.709] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.709] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="85") returned 2 [0200.709] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="43") returned 2 [0200.709] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.710] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.710] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.710] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.710] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="72") returned 2 [0200.710] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="d0") returned 2 [0200.710] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="24") returned 2 [0200.710] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="07") returned 2 [0200.710] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="d8") returned 2 [0200.710] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.710] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="43") returned 2 [0200.710] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="c6") returned 2 [0200.710] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="d8") returned 2 [0200.710] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="15") returned 2 [0200.710] RtlInitAnsiString (in: DestinationString=0x924fc40, SourceString="f5096b79608df17fe71f8543a2e3d9b372d02407d8ac43c6d815" | out: DestinationString="f5096b79608df17fe71f8543a2e3d9b372d02407d8ac43c6d815") [0200.710] RtlAnsiStringToUnicodeString (in: DestinationString=0x924fc38, SourceString="f5096b79608df17fe71f8543a2e3d9b372d02407d8ac43c6d815", AllocateDestinationString=1 | out: DestinationString="f5096b79608df17fe71f8543a2e3d9b372d02407d8ac43c6d815") returned 0x0 [0200.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f470 [0200.711] wcscat (in: _Dest=0x7cd4020, _Source="f5096b79608df" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\f5096b79608df") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\f5096b79608df" [0200.711] wcscat (in: _Dest=0x7cd4020, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\f5096b79608df.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\f5096b79608df.68814f" [0200.711] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\f5096b79608df.68814f", NtPathName=0x924fc30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\f5096b79608df.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b86ff0 [0201.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86ff0) returned 1 [0201.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccefe8) returned 1 [0201.477] NtQueryInformationFile (in: FileHandle=0x2184, IoStatusBlock=0x924fc08, FileInformation=0x924fc10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x924fc08, FileInformation=0x924fc10) returned 0x0 [0201.477] NtSetInformationFile (FileHandle=0x2184, IoStatusBlock=0x924fc08, FileInformation=0x924fc10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4020) returned 1 [0206.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0206.130] FlushFileBuffers (hFile=0x2184) returned 1 [0206.142] CloseHandle (hObject=0x2184) returned 1 [0206.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caacd8 [0206.561] wcscpy (in: _Dest=0x7caacd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\" [0206.561] wcscat (in: _Dest=0x7caacd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\68814F-Readme.txt" [0206.562] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\68814f-readme.txt")) returned 0xffffffff [0206.562] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.296] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x924fc4c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x924fc4c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.298] CloseHandle (hObject=0x17ec) returned 1 [0210.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caacd8) returned 1 [0210.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae398) returned 1 Thread: id = 6332 os_tid = 0x1550 [0190.660] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json")) returned 0x2020 [0190.660] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", dwFileAttributes=0x20) returned 1 [0195.944] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1abc [0195.945] GetFileSizeEx (in: hFile=0x1abc, lpFileSize=0x95bfc24 | out: lpFileSize=0x95bfc24*=255) returned 1 [0195.945] SetFilePointerEx (in: hFile=0x1abc, liDistanceToMove=0xfb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.945] ReadFile (in: hFile=0x1abc, lpBuffer=0x95bfc00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x95bfc10, lpOverlapped=0x0 | out: lpBuffer=0x95bfc00*, lpNumberOfBytesRead=0x95bfc10*=0x4, lpOverlapped=0x0) returned 1 [0195.947] SetFilePointerEx (in: hFile=0x1abc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0195.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0195.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0195.948] NtQuerySystemTime (in: CurrentTime=0x95bfb98 | out: CurrentTime=0x95bfb98*=132462177745308000) returned 0x0 [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x4f968a3b [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x6fa068f3 [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x4a50ee05 [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x59ee2dcc [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x48c98bb9 [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x5cbbdc1 [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0xc092e81 [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x4248df50 [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x245a6195 [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x397aebbf [0195.948] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x5871bd6d [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x527bd112 [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x3b9414c0 [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x6cc82ac9 [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x55342ea2 [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x6a10a961 [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x781d4710 [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x702e8fac [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0xd622ea1 [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x50c03b7b [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x8e6c64d [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x755b6c4d [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x7120b2ce [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x703a1022 [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0xfc82e85 [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x56f78993 [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x32dbd53b [0195.949] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x4f163ef9 [0195.950] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0xd4768bb [0195.950] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x2aa8178d [0195.950] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x74f2cecf [0195.950] RtlRandomEx (in: Seed=0x95bfb90 | out: Seed=0x95bfb90) returned 0x3d1663cc [0195.962] ReadFile (in: hFile=0x1abc, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0xff, lpNumberOfBytesRead=0x95bfb8c, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0x95bfb8c*=0xff, lpOverlapped=0x0) returned 1 [0195.962] SetFilePointerEx (in: hFile=0x1abc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.962] WriteFile (in: hFile=0x1abc, lpBuffer=0x7c143e0*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x95bfb90, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesWritten=0x95bfb90*=0xff, lpOverlapped=0x0) returned 1 [0199.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0199.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0199.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfa0) returned 1 [0199.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0199.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0199.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015670) returned 1 [0199.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07e30) returned 1 [0199.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0199.479] SetFilePointerEx (in: hFile=0x1abc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.480] WriteFile (in: hFile=0x1abc, lpBuffer=0x7b7de78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x95bfc18, lpOverlapped=0x0 | out: lpBuffer=0x7b7de78*, lpNumberOfBytesWritten=0x95bfc18*=0x10c, lpOverlapped=0x0) returned 1 [0204.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850a0 [0204.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c4c8 [0204.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be10 [0204.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0204.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305be10 [0204.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0204.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0204.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0204.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c4c8) returned 1 [0204.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850a0) returned 1 [0204.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7e70 [0204.331] sprintf (in: _Dest=0x7ad7e70, _Format="%c%c" | out: _Dest="00") returned 2 [0204.331] sprintf (in: _Dest=0x7ad7e72, _Format="%c%c" | out: _Dest="70") returned 2 [0204.331] sprintf (in: _Dest=0x7ad7e74, _Format="%c%c" | out: _Dest="36") returned 2 [0204.331] sprintf (in: _Dest=0x7ad7e76, _Format="%c%c" | out: _Dest="4e") returned 2 [0204.331] sprintf (in: _Dest=0x7ad7e78, _Format="%c%c" | out: _Dest="20") returned 2 [0204.331] sprintf (in: _Dest=0x7ad7e7a, _Format="%c%c" | out: _Dest="b4") returned 2 [0204.331] sprintf (in: _Dest=0x7ad7e7c, _Format="%c%c" | out: _Dest="79") returned 2 [0204.331] sprintf (in: _Dest=0x7ad7e7e, _Format="%c%c" | out: _Dest="d3") returned 2 [0204.331] sprintf (in: _Dest=0x7ad7e80, _Format="%c%c" | out: _Dest="ec") returned 2 [0204.331] sprintf (in: _Dest=0x7ad7e82, _Format="%c%c" | out: _Dest="11") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e84, _Format="%c%c" | out: _Dest="2b") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e86, _Format="%c%c" | out: _Dest="61") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e88, _Format="%c%c" | out: _Dest="5a") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e8a, _Format="%c%c" | out: _Dest="13") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e8c, _Format="%c%c" | out: _Dest="16") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e8e, _Format="%c%c" | out: _Dest="ac") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e90, _Format="%c%c" | out: _Dest="38") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e92, _Format="%c%c" | out: _Dest="f3") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e94, _Format="%c%c" | out: _Dest="01") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e96, _Format="%c%c" | out: _Dest="e0") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e98, _Format="%c%c" | out: _Dest="5c") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e9a, _Format="%c%c" | out: _Dest="1f") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e9c, _Format="%c%c" | out: _Dest="a1") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7e9e, _Format="%c%c" | out: _Dest="d1") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7ea0, _Format="%c%c" | out: _Dest="57") returned 2 [0204.332] sprintf (in: _Dest=0x7ad7ea2, _Format="%c%c" | out: _Dest="f2") returned 2 [0204.332] RtlInitAnsiString (in: DestinationString=0x95bfba0, SourceString="0070364e20b479d3ec112b615a1316ac38f301e05c1fa1d157f2" | out: DestinationString="0070364e20b479d3ec112b615a1316ac38f301e05c1fa1d157f2") [0204.332] RtlAnsiStringToUnicodeString (in: DestinationString=0x95bfb98, SourceString="0070364e20b479d3ec112b615a1316ac38f301e05c1fa1d157f2", AllocateDestinationString=1 | out: DestinationString="0070364e20b479d3ec112b615a1316ac38f301e05c1fa1d157f2") returned 0x0 [0204.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2ca68 [0204.333] wcscat (in: _Dest=0x7ddf5e8, _Source="0070364e20b47" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\0070364e20b47") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\0070364e20b47" [0204.333] wcscat (in: _Dest=0x7ddf5e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\0070364e20b47.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\0070364e20b47.68814f" [0204.333] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\0070364e20b47.68814f", NtPathName=0x95bfb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\0070364e20b47.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9590 [0206.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9590) returned 1 [0206.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cef7d0) returned 1 [0206.221] NtQueryInformationFile (in: FileHandle=0x1abc, IoStatusBlock=0x95bfb68, FileInformation=0x95bfb70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x95bfb68, FileInformation=0x95bfb70) returned 0x0 [0206.221] NtSetInformationFile (FileHandle=0x1abc, IoStatusBlock=0x95bfb68, FileInformation=0x95bfb70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf5e8) returned 1 [0208.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ca68) returned 1 [0208.718] FlushFileBuffers (hFile=0x1abc) returned 1 [0208.731] CloseHandle (hObject=0x1abc) returned 1 [0209.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01df8 [0209.114] wcscpy (in: _Dest=0x3e01df8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\" [0209.114] wcscat (in: _Dest=0x3e01df8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\68814F-Readme.txt" [0209.114] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\68814f-readme.txt")) returned 0xffffffff [0209.114] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.940] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x95bfbac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x95bfbac*=0x8b9, lpOverlapped=0x0) returned 1 [0209.941] CloseHandle (hObject=0xbb8) returned 1 [0209.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01df8) returned 1 [0209.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae4c0) returned 1 Thread: id = 6333 os_tid = 0x1554 [0190.661] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json")) returned 0x2020 [0190.661] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", dwFileAttributes=0x20) returned 1 [0195.964] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1088 [0195.964] GetFileSizeEx (in: hFile=0x1088, lpFileSize=0x636f9bc | out: lpFileSize=0x636f9bc*=152) returned 1 [0195.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0195.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28e0 [0195.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0195.965] NtQuerySystemTime (in: CurrentTime=0x636f930 | out: CurrentTime=0x636f930*=132462177745464000) returned 0x0 [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x676a4792 [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x560b09db [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x20070880 [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x6637cd4b [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x5a68f58 [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x54f51f95 [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x6c3c73e [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x63ecba67 [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x75fc415 [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x4d351170 [0195.965] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x2d6251d2 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x7c6e30ae [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x6be2e283 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x7e541ac0 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x488b1f3f [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x7119eb9 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x75d84d [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x5484a9bd [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x6ced13ee [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x69d1b9a6 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x1827b7e8 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x58c2d142 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x37476c80 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x10e19283 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x5f7689d8 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x773bd64 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x61efb38c [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x29535b21 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x5850d651 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x5a00b2c5 [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x1f0a6ace [0195.966] RtlRandomEx (in: Seed=0x636f928 | out: Seed=0x636f928) returned 0x534cdfdb [0196.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b9af88 [0196.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b9eb90 [0196.376] ReadFile (in: hFile=0x1088, lpBuffer=0x7b9af88, nNumberOfBytesToRead=0x98, lpNumberOfBytesRead=0x636f924, lpOverlapped=0x0 | out: lpBuffer=0x7b9af88*, lpNumberOfBytesRead=0x636f924*=0x98, lpOverlapped=0x0) returned 1 [0196.378] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.378] WriteFile (in: hFile=0x1088, lpBuffer=0x7b9eb90*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x636f928, lpOverlapped=0x0 | out: lpBuffer=0x7b9eb90*, lpNumberOfBytesWritten=0x636f928*=0x98, lpOverlapped=0x0) returned 1 [0203.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a00 [0203.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0203.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0203.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9eb90) returned 1 [0203.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9af88) returned 1 [0203.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0203.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40378) returned 1 [0203.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38430 [0203.193] SetFilePointerEx (in: hFile=0x1088, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.193] WriteFile (in: hFile=0x1088, lpBuffer=0x7cad3d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x636f9b0, lpOverlapped=0x0 | out: lpBuffer=0x7cad3d0*, lpNumberOfBytesWritten=0x636f9b0*=0x10c, lpOverlapped=0x0) returned 1 [0206.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c9f0 [0206.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b70 [0206.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b70) returned 1 [0206.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53b70 [0206.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53878 [0206.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53620 [0206.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53620) returned 1 [0206.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0206.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.230] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="db") returned 2 [0206.230] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="e6") returned 2 [0206.230] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="d6") returned 2 [0206.230] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="72") returned 2 [0206.230] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="0b") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="17") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="88") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="5d") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="30") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="13") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="e3") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="5e") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="83") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="36") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="30") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="d2") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="48") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="a1") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="58") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="90") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="b6") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="ad") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="3a") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="52") returned 2 [0206.231] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="08") returned 2 [0206.232] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="6b") returned 2 [0206.232] RtlInitAnsiString (in: DestinationString=0x636f938, SourceString="dbe6d6720b17885d3013e35e833630d248a15890b6ad3a52086b" | out: DestinationString="dbe6d6720b17885d3013e35e833630d248a15890b6ad3a52086b") [0206.232] RtlAnsiStringToUnicodeString (in: DestinationString=0x636f930, SourceString="dbe6d6720b17885d3013e35e833630d248a15890b6ad3a52086b", AllocateDestinationString=1 | out: DestinationString="dbe6d6720b17885d3013e35e833630d248a15890b6ad3a52086b") returned 0x0 [0206.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c810 [0206.232] wcscat (in: _Dest=0x7a5f548, _Source="dbe6d6720b178" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\dbe6d6720b178") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\dbe6d6720b178" [0206.232] wcscat (in: _Dest=0x7a5f548, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\dbe6d6720b178.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\dbe6d6720b178.68814f" [0206.232] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\dbe6d6720b178.68814f", NtPathName=0x636f928, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\dbe6d6720b178.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9968 [0208.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9968) returned 1 [0208.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94b98) returned 1 [0208.733] NtQueryInformationFile (in: FileHandle=0x1088, IoStatusBlock=0x636f900, FileInformation=0x636f908, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x636f900, FileInformation=0x636f908) returned 0x0 [0208.733] NtSetInformationFile (FileHandle=0x1088, IoStatusBlock=0x636f900, FileInformation=0x636f908, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f548) returned 1 [0209.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c810) returned 1 [0209.117] FlushFileBuffers (hFile=0x1088) returned 1 [0209.124] CloseHandle (hObject=0x1088) returned 1 [0209.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02048 [0209.408] wcscpy (in: _Dest=0x3e02048, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\" [0209.409] wcscat (in: _Dest=0x3e02048, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\68814F-Readme.txt" [0209.409] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\68814f-readme.txt")) returned 0xffffffff [0209.409] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.974] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x636f944, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x636f944*=0x8b9, lpOverlapped=0x0) returned 1 [0209.978] CloseHandle (hObject=0xbb8) returned 1 [0209.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02048) returned 1 [0209.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae5e8) returned 1 Thread: id = 6334 os_tid = 0x1558 [0190.662] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json")) returned 0x2020 [0190.662] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0196.387] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcd8 [0196.388] GetFileSizeEx (in: hFile=0xcd8, lpFileSize=0x8fef8fc | out: lpFileSize=0x8fef8fc*=212) returned 1 [0196.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b38 [0196.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3cb8 [0196.388] NtQuerySystemTime (in: CurrentTime=0x8fef870 | out: CurrentTime=0x8fef870*=132462177749676000) returned 0x0 [0196.388] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x1a8c456 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x2f60173e [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x52c43b30 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x1eb95be6 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x61592691 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x5e9fd7ea [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x688bf86f [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x2e110c40 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x76655687 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x1823976c [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x31e91c3e [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x32f028a7 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x26b89e9e [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x32d6626f [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x5df99a6d [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x795ae477 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x62d209f9 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x1a49eb93 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x628299c9 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x615aeb7a [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x724ce631 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x23e6c7e3 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x1b01a200 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x22bfe41d [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x21a00189 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x51dd870 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x79c5f1c8 [0196.389] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x57e75e6b [0196.390] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x1fb15700 [0196.390] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x2e275ef6 [0196.390] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x4800ae0d [0196.390] RtlRandomEx (in: Seed=0x8fef868 | out: Seed=0x8fef868) returned 0x6f778e74 [0196.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b93778 [0196.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b97380 [0196.400] ReadFile (in: hFile=0xcd8, lpBuffer=0x7b93778, nNumberOfBytesToRead=0xd4, lpNumberOfBytesRead=0x8fef864, lpOverlapped=0x0 | out: lpBuffer=0x7b93778*, lpNumberOfBytesRead=0x8fef864*=0xd4, lpOverlapped=0x0) returned 1 [0196.402] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.402] WriteFile (in: hFile=0xcd8, lpBuffer=0x7b97380*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x8fef868, lpOverlapped=0x0 | out: lpBuffer=0x7b97380*, lpNumberOfBytesWritten=0x8fef868*=0xd4, lpOverlapped=0x0) returned 1 [0199.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb3f0 [0199.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba08 [0199.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edba08) returned 1 [0199.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b97380) returned 1 [0199.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0199.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0199.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40408) returned 1 [0199.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37980 [0199.803] SetFilePointerEx (in: hFile=0xcd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.803] WriteFile (in: hFile=0xcd8, lpBuffer=0x7b7c320*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8fef8f0, lpOverlapped=0x0 | out: lpBuffer=0x7b7c320*, lpNumberOfBytesWritten=0x8fef8f0*=0x10c, lpOverlapped=0x0) returned 1 [0200.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0200.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0200.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3628 [0200.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bf0 [0200.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0200.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4578) returned 1 [0200.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d600 [0200.153] sprintf (in: _Dest=0x7a2d600, _Format="%c%c" | out: _Dest="1e") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d602, _Format="%c%c" | out: _Dest="99") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d604, _Format="%c%c" | out: _Dest="51") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d606, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d608, _Format="%c%c" | out: _Dest="2d") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d60a, _Format="%c%c" | out: _Dest="eb") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d60c, _Format="%c%c" | out: _Dest="b9") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d60e, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d610, _Format="%c%c" | out: _Dest="ed") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d612, _Format="%c%c" | out: _Dest="c8") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d614, _Format="%c%c" | out: _Dest="41") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d616, _Format="%c%c" | out: _Dest="65") returned 2 [0200.153] sprintf (in: _Dest=0x7a2d618, _Format="%c%c" | out: _Dest="64") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d61a, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d61c, _Format="%c%c" | out: _Dest="00") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d61e, _Format="%c%c" | out: _Dest="3b") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d620, _Format="%c%c" | out: _Dest="94") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d622, _Format="%c%c" | out: _Dest="c9") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d624, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d626, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d628, _Format="%c%c" | out: _Dest="a9") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d62a, _Format="%c%c" | out: _Dest="20") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d62c, _Format="%c%c" | out: _Dest="00") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d62e, _Format="%c%c" | out: _Dest="8a") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d630, _Format="%c%c" | out: _Dest="92") returned 2 [0200.154] sprintf (in: _Dest=0x7a2d632, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.154] RtlInitAnsiString (in: DestinationString=0x8fef878, SourceString="1e99515a2debb95aedc84165641f003b94c97aeea920008a92bb" | out: DestinationString="1e99515a2debb95aedc84165641f003b94c97aeea920008a92bb") [0200.154] RtlAnsiStringToUnicodeString (in: DestinationString=0x8fef870, SourceString="1e99515a2debb95aedc84165641f003b94c97aeea920008a92bb", AllocateDestinationString=1 | out: DestinationString="1e99515a2debb95aedc84165641f003b94c97aeea920008a92bb") returned 0x0 [0200.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c9f0 [0200.154] wcscat (in: _Dest=0x3ec9a60, _Source="1e99515a2debb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\1e99515a2debb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\1e99515a2debb" [0200.154] wcscat (in: _Dest=0x3ec9a60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\1e99515a2debb.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\1e99515a2debb.68814f" [0200.154] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\1e99515a2debb.68814f", NtPathName=0x8fef868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\1e99515a2debb.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea37a8 [0201.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea37a8) returned 1 [0201.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccaf38) returned 1 [0201.473] NtQueryInformationFile (in: FileHandle=0xcd8, IoStatusBlock=0x8fef840, FileInformation=0x8fef848, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8fef840, FileInformation=0x8fef848) returned 0x0 [0201.474] NtSetInformationFile (FileHandle=0xcd8, IoStatusBlock=0x8fef840, FileInformation=0x8fef848, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 [0206.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0206.147] FlushFileBuffers (hFile=0xcd8) returned 1 [0206.152] CloseHandle (hObject=0xcd8) returned 1 [0207.794] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cab050 [0207.795] wcscpy (in: _Dest=0x7cab050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\" [0207.795] wcscat (in: _Dest=0x7cab050, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\68814F-Readme.txt" [0207.795] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\68814f-readme.txt")) returned 0xffffffff [0207.795] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.312] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8fef884, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8fef884*=0x8b9, lpOverlapped=0x0) returned 1 [0210.314] CloseHandle (hObject=0x17ec) returned 1 [0210.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab050) returned 1 [0210.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae710) returned 1 Thread: id = 6335 os_tid = 0x155c [0190.662] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0190.663] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0196.403] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc8 [0196.403] GetFileSizeEx (in: hFile=0x1bc8, lpFileSize=0xad8fd3c | out: lpFileSize=0xad8fd3c*=227) returned 1 [0196.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3cb8 [0196.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0196.404] NtQuerySystemTime (in: CurrentTime=0xad8fcb0 | out: CurrentTime=0xad8fcb0*=132462177749832000) returned 0x0 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x60933538 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x24984252 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x3f39c565 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x27ec8add [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x1578c985 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x17092bcb [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x57d10ffe [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x58418803 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x27bb4984 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x30829313 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x372a167f [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x65aaa0b8 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x6b1d23fe [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x7014ffa2 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x64886d02 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x69d080af [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x7ff9ba67 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x346c115a [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x254b854 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x6c537f7f [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x505652c6 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x19e29bc0 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x7f5a320e [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x6a0c127e [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x2d79ab94 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x2d4aa759 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x622231b7 [0196.404] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x73e5a0ed [0196.405] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x62421073 [0196.405] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x5c7afd34 [0196.405] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x19ad61ca [0196.405] RtlRandomEx (in: Seed=0xad8fca8 | out: Seed=0xad8fca8) returned 0x29869f9 [0196.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba2798 [0196.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba63a0 [0196.417] ReadFile (in: hFile=0x1bc8, lpBuffer=0x7ba2798, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0xad8fca4, lpOverlapped=0x0 | out: lpBuffer=0x7ba2798*, lpNumberOfBytesRead=0xad8fca4*=0xe3, lpOverlapped=0x0) returned 1 [0196.420] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.420] WriteFile (in: hFile=0x1bc8, lpBuffer=0x7ba63a0*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0xad8fca8, lpOverlapped=0x0 | out: lpBuffer=0x7ba63a0*, lpNumberOfBytesWritten=0xad8fca8*=0xe3, lpOverlapped=0x0) returned 1 [0199.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbe18 [0199.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd4e8 [0199.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd4e8) returned 1 [0199.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba63a0) returned 1 [0199.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba2798) returned 1 [0199.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0199.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d414a0) returned 1 [0199.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37890 [0199.814] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.814] WriteFile (in: hFile=0x1bc8, lpBuffer=0x7a39308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xad8fd30, lpOverlapped=0x0 | out: lpBuffer=0x7a39308*, lpNumberOfBytesWritten=0xad8fd30*=0x10c, lpOverlapped=0x0) returned 1 [0200.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2840 [0200.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2840) returned 1 [0200.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2840 [0200.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3380 [0200.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39e8 [0200.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39e8) returned 1 [0200.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.169] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="1a") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="0d") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="d1") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="97") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="4b") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="b7") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="8c") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="4d") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="fd") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="c9") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="4c") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="01") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="99") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="c5") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="57") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="44") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="72") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="e4") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="b8") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="59") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.169] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="98") returned 2 [0200.170] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="3f") returned 2 [0200.170] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="d6") returned 2 [0200.170] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.170] RtlInitAnsiString (in: DestinationString=0xad8fcb8, SourceString="1a0dd1974bb78c4dfdc94c0199c5574472e4b859dc7a983fd6f1" | out: DestinationString="1a0dd1974bb78c4dfdc94c0199c5574472e4b859dc7a983fd6f1") [0200.170] RtlAnsiStringToUnicodeString (in: DestinationString=0xad8fcb0, SourceString="1a0dd1974bb78c4dfdc94c0199c5574472e4b859dc7a983fd6f1", AllocateDestinationString=1 | out: DestinationString="1a0dd1974bb78c4dfdc94c0199c5574472e4b859dc7a983fd6f1") returned 0x0 [0200.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cae0 [0200.170] wcscat (in: _Dest=0x3ec9928, _Source="1a0dd1974bb78" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\1a0dd1974bb78") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\1a0dd1974bb78" [0200.170] wcscat (in: _Dest=0x3ec9928, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\1a0dd1974bb78.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\1a0dd1974bb78.68814f" [0200.170] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\1a0dd1974bb78.68814f", NtPathName=0xad8fca8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\1a0dd1974bb78.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0a560 [0201.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0a560) returned 1 [0201.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccb5b0) returned 1 [0201.472] NtQueryInformationFile (in: FileHandle=0x1bc8, IoStatusBlock=0xad8fc80, FileInformation=0xad8fc88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xad8fc80, FileInformation=0xad8fc88) returned 0x0 [0201.473] NtSetInformationFile (FileHandle=0x1bc8, IoStatusBlock=0xad8fc80, FileInformation=0xad8fc88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9928) returned 1 [0206.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cae0) returned 1 [0206.363] FlushFileBuffers (hFile=0x1bc8) returned 1 [0206.375] CloseHandle (hObject=0x1bc8) returned 1 [0208.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7ddec28 [0208.822] wcscpy (in: _Dest=0x7ddec28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\" [0208.822] wcscat (in: _Dest=0x7ddec28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\68814F-Readme.txt" [0208.822] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\68814f-readme.txt")) returned 0xffffffff [0208.822] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.860] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xad8fcc4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xad8fcc4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.862] CloseHandle (hObject=0x16e0) returned 1 [0209.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddec28) returned 1 [0209.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae838) returned 1 Thread: id = 6336 os_tid = 0x1560 [0190.667] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json")) returned 0x2020 [0190.668] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0196.420] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1794 [0196.421] GetFileSizeEx (in: hFile=0x1794, lpFileSize=0x997f9bc | out: lpFileSize=0x997f9bc*=204) returned 1 [0196.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0196.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0196.421] NtQuerySystemTime (in: CurrentTime=0x997f930 | out: CurrentTime=0x997f930*=132462177749988000) returned 0x0 [0196.421] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x7adcb907 [0196.421] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x6a94ab2b [0196.421] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x20bb3368 [0196.421] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0xd0ba8e9 [0196.421] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x2e33d658 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x1ce5d940 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x27e4d3c0 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x4d066126 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x7d35d196 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x114a22e4 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x97c7020 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x158d2b0d [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x4704d8a2 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x63bfd67 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x602b05ba [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x4ccb25dc [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x575498f8 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x622108c6 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x51488c41 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x2a6c08aa [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x2cdfea35 [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0xee126cd [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x5fd1870d [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x5787e73d [0196.422] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0xc2d6c1 [0196.423] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x5b406691 [0196.423] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x557ddf3d [0196.423] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x4d7f5a28 [0196.423] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x12da4faf [0196.423] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x69d433c8 [0196.423] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x759d6eeb [0196.423] RtlRandomEx (in: Seed=0x997f928 | out: Seed=0x997f928) returned 0x1e860650 [0196.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb53c0 [0196.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb8fc8 [0196.445] ReadFile (in: hFile=0x1794, lpBuffer=0x7bb53c0, nNumberOfBytesToRead=0xcc, lpNumberOfBytesRead=0x997f924, lpOverlapped=0x0 | out: lpBuffer=0x7bb53c0*, lpNumberOfBytesRead=0x997f924*=0xcc, lpOverlapped=0x0) returned 1 [0196.448] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.448] WriteFile (in: hFile=0x1794, lpBuffer=0x7bb8fc8*, nNumberOfBytesToWrite=0xcc, lpNumberOfBytesWritten=0x997f928, lpOverlapped=0x0 | out: lpBuffer=0x7bb8fc8*, lpNumberOfBytesWritten=0x997f928*=0xcc, lpOverlapped=0x0) returned 1 [0199.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddd80 [0199.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddd08 [0199.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddd08) returned 1 [0199.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb8fc8) returned 1 [0199.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb53c0) returned 1 [0199.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0199.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41b60) returned 1 [0199.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376e0 [0199.817] SetFilePointerEx (in: hFile=0x1794, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.817] WriteFile (in: hFile=0x1794, lpBuffer=0x7a384d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x997f9b0, lpOverlapped=0x0 | out: lpBuffer=0x7a384d0*, lpNumberOfBytesWritten=0x997f9b0*=0x10c, lpOverlapped=0x0) returned 1 [0200.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d80 [0200.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d80) returned 1 [0200.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3d80 [0200.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0200.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3cb8 [0200.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3cb8) returned 1 [0200.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.173] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="90") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="2c") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="39") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="30") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="10") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="b2") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="5c") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="cf") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="0d") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="8a") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="60") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="d5") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="27") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="43") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="22") returned 2 [0200.173] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.174] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.174] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="be") returned 2 [0200.174] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="53") returned 2 [0200.174] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="29") returned 2 [0200.174] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="af") returned 2 [0200.174] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="9c") returned 2 [0200.174] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="d0") returned 2 [0200.174] RtlInitAnsiString (in: DestinationString=0x997f938, SourceString="90f32c393010b21f5ccf0d8af460d52743226ebbbe5329af9cd0" | out: DestinationString="90f32c393010b21f5ccf0d8af460d52743226ebbbe5329af9cd0") [0200.174] RtlAnsiStringToUnicodeString (in: DestinationString=0x997f930, SourceString="90f32c393010b21f5ccf0d8af460d52743226ebbbe5329af9cd0", AllocateDestinationString=1 | out: DestinationString="90f32c393010b21f5ccf0d8af460d52743226ebbbe5329af9cd0") returned 0x0 [0200.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cb58 [0200.174] wcscat (in: _Dest=0x3ec9f40, _Source="90f32c393010b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\90f32c393010b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\90f32c393010b" [0200.174] wcscat (in: _Dest=0x3ec9f40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\90f32c393010b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\90f32c393010b.68814f" [0200.174] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\90f32c393010b.68814f", NtPathName=0x997f928, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\90f32c393010b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3140 [0201.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3140) returned 1 [0201.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccb7d8) returned 1 [0201.472] NtQueryInformationFile (in: FileHandle=0x1794, IoStatusBlock=0x997f900, FileInformation=0x997f908, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x997f900, FileInformation=0x997f908) returned 0x0 [0201.472] NtSetInformationFile (FileHandle=0x1794, IoStatusBlock=0x997f900, FileInformation=0x997f908, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9f40) returned 1 [0206.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cb58) returned 1 [0206.357] FlushFileBuffers (hFile=0x1794) returned 1 [0206.373] CloseHandle (hObject=0x1794) returned 1 [0208.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01140 [0208.818] wcscpy (in: _Dest=0x3e01140, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\" [0208.818] wcscat (in: _Dest=0x3e01140, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\68814F-Readme.txt" [0208.818] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\68814f-readme.txt")) returned 0xffffffff [0208.818] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.837] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x997f944, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x997f944*=0x8b9, lpOverlapped=0x0) returned 1 [0209.839] CloseHandle (hObject=0x16e0) returned 1 [0209.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01140) returned 1 [0209.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae960) returned 1 Thread: id = 6337 os_tid = 0x1948 [0190.668] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0190.669] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0196.448] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b08 [0196.449] GetFileSizeEx (in: hFile=0x1b08, lpFileSize=0xa16fdc4 | out: lpFileSize=0xa16fdc4*=265) returned 1 [0196.449] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.449] ReadFile (in: hFile=0x1b08, lpBuffer=0xa16fda0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa16fdb0, lpOverlapped=0x0 | out: lpBuffer=0xa16fda0*, lpNumberOfBytesRead=0xa16fdb0*=0x4, lpOverlapped=0x0) returned 1 [0196.451] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0196.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0196.451] NtQuerySystemTime (in: CurrentTime=0xa16fd38 | out: CurrentTime=0xa16fd38*=132462177750300000) returned 0x0 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x37acc95d [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x4412fd86 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x2eb4e680 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x5527c03e [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x42eff0ce [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x2cdf1086 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x6300cf4c [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x1f867e40 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x742b4557 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x35514918 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x5c0d3e47 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x73e055bf [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x23bce5c8 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0xe81f5b5 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x643aa5e3 [0196.452] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x6fcad6c6 [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0xba87ab6 [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x3747cabd [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x2bf36ddd [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x37120b5a [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x43d62de9 [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x5a39f845 [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x48e62326 [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x5b121f8b [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x3b12d576 [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x31cf1f8c [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x40c55b03 [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x5a938e1f [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x6a94e924 [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x12e6f945 [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0xa23f1aa [0196.453] RtlRandomEx (in: Seed=0xa16fd30 | out: Seed=0xa16fd30) returned 0x46aa80a6 [0196.470] ReadFile (in: hFile=0x1b08, lpBuffer=0x7ba9fa8, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0xa16fd2c, lpOverlapped=0x0 | out: lpBuffer=0x7ba9fa8*, lpNumberOfBytesRead=0xa16fd2c*=0x109, lpOverlapped=0x0) returned 1 [0196.470] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.471] WriteFile (in: hFile=0x1b08, lpBuffer=0x7bc43e0*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0xa16fd30, lpOverlapped=0x0 | out: lpBuffer=0x7bc43e0*, lpNumberOfBytesWritten=0xa16fd30*=0x109, lpOverlapped=0x0) returned 1 [0199.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddba0 [0199.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddb50 [0199.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddb50) returned 1 [0199.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc43e0) returned 1 [0199.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba9fa8) returned 1 [0199.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e8c8) returned 1 [0199.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d419b0) returned 1 [0199.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a40 [0199.824] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.824] WriteFile (in: hFile=0x1b08, lpBuffer=0x7a38700*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa16fdb8, lpOverlapped=0x0 | out: lpBuffer=0x7a38700*, lpNumberOfBytesWritten=0xa16fdb8*=0x10c, lpOverlapped=0x0) returned 1 [0200.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0200.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0200.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2c28 [0200.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0200.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0200.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4000) returned 1 [0200.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.182] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="24") returned 2 [0200.182] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.182] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="80") returned 2 [0200.182] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.182] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="77") returned 2 [0200.182] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="d0") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="13") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="fd") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="55") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="76") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="fa") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="36") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="31") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="a1") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="db") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="7f") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="39") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="9f") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="9d") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="b0") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="65") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="91") returned 2 [0200.183] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="9f") returned 2 [0200.183] RtlInitAnsiString (in: DestinationString=0xa16fd40, SourceString="24f180ce77d013fd5576fa3631a1db7fb6397bbb9f9db065919f" | out: DestinationString="24f180ce77d013fd5576fa3631a1db7fb6397bbb9f9db065919f") [0200.184] RtlAnsiStringToUnicodeString (in: DestinationString=0xa16fd38, SourceString="24f180ce77d013fd5576fa3631a1db7fb6397bbb9f9db065919f", AllocateDestinationString=1 | out: DestinationString="24f180ce77d013fd5576fa3631a1db7fb6397bbb9f9db065919f") returned 0x0 [0200.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cc48 [0200.184] wcscat (in: _Dest=0x3ec9e08, _Source="24f180ce77d01" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\24f180ce77d01") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\24f180ce77d01" [0200.184] wcscat (in: _Dest=0x3ec9e08, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\24f180ce77d01.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\24f180ce77d01.68814f" [0200.184] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\24f180ce77d01.68814f", NtPathName=0xa16fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\24f180ce77d01.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ea3a38 [0201.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3a38) returned 1 [0201.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccbc28) returned 1 [0201.471] NtQueryInformationFile (in: FileHandle=0x1b08, IoStatusBlock=0xa16fd08, FileInformation=0xa16fd10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa16fd08, FileInformation=0xa16fd10) returned 0x0 [0201.471] NtSetInformationFile (FileHandle=0x1b08, IoStatusBlock=0xa16fd08, FileInformation=0xa16fd10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9e08) returned 1 [0206.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cc48) returned 1 [0206.348] FlushFileBuffers (hFile=0x1b08) returned 1 [0206.365] CloseHandle (hObject=0x1b08) returned 1 [0208.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7ddf720 [0208.809] wcscpy (in: _Dest=0x7ddf720, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\" [0208.809] wcscat (in: _Dest=0x7ddf720, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\68814F-Readme.txt" [0208.809] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\68814f-readme.txt")) returned 0xffffffff [0208.809] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.826] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa16fd4c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa16fd4c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.827] CloseHandle (hObject=0x16e0) returned 1 [0209.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf720) returned 1 [0209.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caea88) returned 1 Thread: id = 6338 os_tid = 0x194c [0190.669] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0190.669] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0196.472] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1140 [0196.472] GetFileSizeEx (in: hFile=0x1140, lpFileSize=0x910fd84 | out: lpFileSize=0x910fd84*=178) returned 1 [0196.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0196.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0196.473] NtQuerySystemTime (in: CurrentTime=0x910fcf8 | out: CurrentTime=0x910fcf8*=132462177750456000) returned 0x0 [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x42cd233d [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x780fef9b [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x76aede3c [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x5d7d71f2 [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x77d6b93f [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x7c465270 [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x5844adbb [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x802f40e [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x1a563f00 [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x53ca3f5 [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x7c656f99 [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x7d9c0360 [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x6d2dfcb2 [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0xf56f367 [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x413b5271 [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x7f9603af [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x137860a [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x497901ce [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x405aed8d [0196.473] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x58acfd6f [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x46763ca [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x34fed59d [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x1fe916c0 [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x3af0c558 [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x50b3f420 [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x5edbc6c4 [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x9f16c5e [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x1244c5d9 [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x7314ab12 [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x1d7fc188 [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x4db99131 [0196.474] RtlRandomEx (in: Seed=0x910fcf0 | out: Seed=0x910fcf0) returned 0x18b9c7f1 [0196.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bbcbd0 [0196.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bc07d8 [0196.494] ReadFile (in: hFile=0x1140, lpBuffer=0x7bbcbd0, nNumberOfBytesToRead=0xb2, lpNumberOfBytesRead=0x910fcec, lpOverlapped=0x0 | out: lpBuffer=0x7bbcbd0*, lpNumberOfBytesRead=0x910fcec*=0xb2, lpOverlapped=0x0) returned 1 [0196.496] SetFilePointerEx (in: hFile=0x1140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.496] WriteFile (in: hFile=0x1140, lpBuffer=0x7bc07d8*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x910fcf0, lpOverlapped=0x0 | out: lpBuffer=0x7bc07d8*, lpNumberOfBytesWritten=0x910fcf0*=0xb2, lpOverlapped=0x0) returned 1 [0199.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc90 [0199.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc18 [0199.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc18) returned 1 [0199.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc07d8) returned 1 [0199.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bbcbd0) returned 1 [0199.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0199.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40cc0) returned 1 [0199.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37830 [0199.822] SetFilePointerEx (in: hFile=0x1140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.822] WriteFile (in: hFile=0x1140, lpBuffer=0x7a38fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x910fd78, lpOverlapped=0x0 | out: lpBuffer=0x7a38fc0*, lpNumberOfBytesWritten=0x910fd78*=0x10c, lpOverlapped=0x0) returned 1 [0200.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0200.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a10) returned 1 [0200.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3a10 [0200.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0200.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0200.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2930) returned 1 [0200.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.178] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="59") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="0a") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="28") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="b1") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="14") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="4d") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="4e") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="e6") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="26") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="e0") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="c2") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="a0") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="15") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="e7") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="ef") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="47") returned 2 [0200.178] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="b4") returned 2 [0200.179] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="9a") returned 2 [0200.179] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="17") returned 2 [0200.179] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="3e") returned 2 [0200.179] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="d1") returned 2 [0200.179] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="92") returned 2 [0200.179] RtlInitAnsiString (in: DestinationString=0x910fd00, SourceString="590aa628b1f3ff144d4ee626e0c2a015e7efa647b49a173ed192" | out: DestinationString="590aa628b1f3ff144d4ee626e0c2a015e7efa647b49a173ed192") [0200.179] RtlAnsiStringToUnicodeString (in: DestinationString=0x910fcf8, SourceString="590aa628b1f3ff144d4ee626e0c2a015e7efa647b49a173ed192", AllocateDestinationString=1 | out: DestinationString="590aa628b1f3ff144d4ee626e0c2a015e7efa647b49a173ed192") returned 0x0 [0200.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cbd0 [0200.179] wcscat (in: _Dest=0x3eca2e8, _Source="590aa628b1f3f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\590aa628b1f3f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\590aa628b1f3f" [0200.179] wcscat (in: _Dest=0x3eca2e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\590aa628b1f3f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\590aa628b1f3f.68814f" [0200.179] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\590aa628b1f3f.68814f", NtPathName=0x910fcf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\590aa628b1f3f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x3ea2d68 [0201.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2d68) returned 1 [0201.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccba00) returned 1 [0201.472] NtQueryInformationFile (in: FileHandle=0x1140, IoStatusBlock=0x910fcc8, FileInformation=0x910fcd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x910fcc8, FileInformation=0x910fcd0) returned 0x0 [0201.472] NtSetInformationFile (FileHandle=0x1140, IoStatusBlock=0x910fcc8, FileInformation=0x910fcd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca2e8) returned 1 [0206.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0206.352] FlushFileBuffers (hFile=0x1140) returned 1 [0206.370] CloseHandle (hObject=0x1140) returned 1 [0208.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7ddf5e8 [0208.815] wcscpy (in: _Dest=0x7ddf5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\" [0208.815] wcscat (in: _Dest=0x7ddf5e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\68814F-Readme.txt" [0208.815] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\68814f-readme.txt")) returned 0xffffffff [0208.815] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.833] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x910fd0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x910fd0c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.835] CloseHandle (hObject=0x16e0) returned 1 [0209.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf5e8) returned 1 [0209.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caebb0) returned 1 Thread: id = 6339 os_tid = 0x15a4 [0190.670] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json")) returned 0x2020 [0190.671] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0196.497] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d28 [0196.497] GetFileSizeEx (in: hFile=0x1d28, lpFileSize=0xb22f794 | out: lpFileSize=0xb22f794*=298) returned 1 [0196.498] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x126, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.498] ReadFile (in: hFile=0x1d28, lpBuffer=0xb22f770, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb22f780, lpOverlapped=0x0 | out: lpBuffer=0xb22f770*, lpNumberOfBytesRead=0xb22f780*=0x4, lpOverlapped=0x0) returned 1 [0196.500] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0196.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0196.500] NtQuerySystemTime (in: CurrentTime=0xb22f708 | out: CurrentTime=0xb22f708*=132462177750768000) returned 0x0 [0196.500] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x77f377d8 [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x7c5148e9 [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x1cf3be72 [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x434480cc [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x799b4bd0 [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x74d86d8f [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x25bec85c [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x647a032c [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x2fd191e0 [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x27b45f7b [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x3278c73d [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x30bafb8f [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x61aedb08 [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x424d4913 [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0xba09dd9 [0196.501] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x3c5e4d4e [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x3084c968 [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x247e46c2 [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x2bc278e7 [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x6d04642f [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x5895e946 [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x7ae086e2 [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x4e5091f2 [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x2af7d928 [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x52f23b08 [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x6a18930f [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x398fafef [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x40e0546c [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x2ca66573 [0196.502] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x48c84ba5 [0196.503] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x5171fb0f [0196.503] RtlRandomEx (in: Seed=0xb22f700 | out: Seed=0xb22f700) returned 0x3aee332d [0196.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7badbb0 [0196.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb17b8 [0196.515] ReadFile (in: hFile=0x1d28, lpBuffer=0x7badbb0, nNumberOfBytesToRead=0x12a, lpNumberOfBytesRead=0xb22f6fc, lpOverlapped=0x0 | out: lpBuffer=0x7badbb0*, lpNumberOfBytesRead=0xb22f6fc*=0x12a, lpOverlapped=0x0) returned 1 [0196.515] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.515] WriteFile (in: hFile=0x1d28, lpBuffer=0x7bb17b8*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0xb22f700, lpOverlapped=0x0 | out: lpBuffer=0x7bb17b8*, lpNumberOfBytesWritten=0xb22f700*=0x12a, lpOverlapped=0x0) returned 1 [0199.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddb00 [0199.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddab0 [0199.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddab0) returned 1 [0199.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb17b8) returned 1 [0199.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7badbb0) returned 1 [0199.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0199.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40180) returned 1 [0199.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37aa0 [0199.826] SetFilePointerEx (in: hFile=0x1d28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.826] WriteFile (in: hFile=0x1d28, lpBuffer=0x7b7c9b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb22f788, lpOverlapped=0x0 | out: lpBuffer=0x7b7c9b0*, lpNumberOfBytesWritten=0xb22f788*=0x10c, lpOverlapped=0x0) returned 1 [0200.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.186] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c68 [0200.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c68) returned 1 [0200.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3c68 [0200.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0200.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0200.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4028) returned 1 [0200.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.187] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="f8") returned 2 [0200.187] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="e1") returned 2 [0200.187] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="b2") returned 2 [0200.187] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="d1") returned 2 [0200.187] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="50") returned 2 [0200.187] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="06") returned 2 [0200.187] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="47") returned 2 [0200.187] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="75") returned 2 [0200.187] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="14") returned 2 [0200.187] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="fb") returned 2 [0200.187] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="cd") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="12") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="05") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="2f") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="c4") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="8e") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="30") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="0d") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="ad") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="13") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="3e") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="df") returned 2 [0200.188] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="82") returned 2 [0200.188] RtlInitAnsiString (in: DestinationString=0xb22f710, SourceString="f8e1b2d15006477514fbcd12052fc48e300d3dad137b1f3edf82" | out: DestinationString="f8e1b2d15006477514fbcd12052fc48e300d3dad137b1f3edf82") [0200.188] RtlAnsiStringToUnicodeString (in: DestinationString=0xb22f708, SourceString="f8e1b2d15006477514fbcd12052fc48e300d3dad137b1f3edf82", AllocateDestinationString=1 | out: DestinationString="f8e1b2d15006477514fbcd12052fc48e300d3dad137b1f3edf82") returned 0x0 [0200.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2ccc0 [0200.188] wcscat (in: _Dest=0x3eca420, _Source="f8e1b2d150064" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\f8e1b2d150064") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\f8e1b2d150064" [0200.189] wcscat (in: _Dest=0x3eca420, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\f8e1b2d150064.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\f8e1b2d150064.68814f" [0200.189] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\f8e1b2d150064.68814f", NtPathName=0xb22f700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\f8e1b2d150064.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3b80 [0201.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3b80) returned 1 [0201.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccbe50) returned 1 [0201.471] NtQueryInformationFile (in: FileHandle=0x1d28, IoStatusBlock=0xb22f6d8, FileInformation=0xb22f6e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb22f6d8, FileInformation=0xb22f6e0) returned 0x0 [0201.471] NtSetInformationFile (FileHandle=0x1d28, IoStatusBlock=0xb22f6d8, FileInformation=0xb22f6e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca420) returned 1 [0206.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ccc0) returned 1 [0206.343] FlushFileBuffers (hFile=0x1d28) returned 1 [0206.354] CloseHandle (hObject=0x1d28) returned 1 [0208.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01018 [0208.806] wcscpy (in: _Dest=0x3e01018, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\" [0208.806] wcscat (in: _Dest=0x3e01018, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\68814F-Readme.txt" [0208.806] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\68814f-readme.txt")) returned 0xffffffff [0208.806] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.830] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb22f71c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb22f71c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.832] CloseHandle (hObject=0x16e0) returned 1 [0209.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01018) returned 1 [0209.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caecd8) returned 1 Thread: id = 6340 os_tid = 0x1880 [0190.672] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json")) returned 0x2020 [0190.672] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0196.515] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1734 [0196.516] GetFileSizeEx (in: hFile=0x1734, lpFileSize=0x8befbe4 | out: lpFileSize=0x8befbe4*=237) returned 1 [0196.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0196.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0196.516] NtQuerySystemTime (in: CurrentTime=0x8befb58 | out: CurrentTime=0x8befb58*=132462177750924000) returned 0x0 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x4d938570 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x19294c60 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x75d2beb0 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x19aadc00 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x439bd37a [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x4280c3d1 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x464f435f [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x6c0d5056 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x3f0b2126 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x328891b5 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x6f351dd4 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x32e2d0db [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x2343bdfd [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0xe6c2474 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x3347b5c [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x28f2cf40 [0196.516] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x55b0f466 [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x7697d041 [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x6eccbcef [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x214d3b13 [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x10eca553 [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x73f555ec [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x7d264d6d [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x5c4cdda7 [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x79d320d9 [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x2f3597d4 [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x1cc99a9b [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x51b43573 [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x7c12f8d6 [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x798ed08b [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x41543da2 [0196.517] RtlRandomEx (in: Seed=0x8befb50 | out: Seed=0x8befb50) returned 0x229d8506 [0196.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0196.540] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0196.540] ReadFile (in: hFile=0x1734, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0xed, lpNumberOfBytesRead=0x8befb4c, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x8befb4c*=0xed, lpOverlapped=0x0) returned 1 [0196.542] SetFilePointerEx (in: hFile=0x1734, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.542] WriteFile (in: hFile=0x1734, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x8befb50, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0x8befb50*=0xed, lpOverlapped=0x0) returned 1 [0199.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edda60 [0199.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbe68 [0199.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbe68) returned 1 [0199.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0199.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0199.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0199.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40a38) returned 1 [0199.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b00 [0199.830] SetFilePointerEx (in: hFile=0x1734, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.830] WriteFile (in: hFile=0x1734, lpBuffer=0x7b7d6d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8befbd8, lpOverlapped=0x0 | out: lpBuffer=0x7b7d6d0*, lpNumberOfBytesWritten=0x8befbd8*=0x10c, lpOverlapped=0x0) returned 1 [0200.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0200.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ab0) returned 1 [0200.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3ab0 [0200.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0200.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0200.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ce0) returned 1 [0200.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.190] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="c2") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="95") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="65") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="84") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="8d") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="36") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="89") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="2e") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="52") returned 2 [0200.190] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="b5") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="a1") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="86") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="c8") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="86") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="71") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="26") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="2a") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="d6") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="f2") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="71") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="c6") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="f9") returned 2 [0200.191] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="89") returned 2 [0200.191] RtlInitAnsiString (in: DestinationString=0x8befb60, SourceString="bcc29565848d36ac892e52b5a186c8ee8671262ad6f271c6f989" | out: DestinationString="bcc29565848d36ac892e52b5a186c8ee8671262ad6f271c6f989") [0200.191] RtlAnsiStringToUnicodeString (in: DestinationString=0x8befb58, SourceString="bcc29565848d36ac892e52b5a186c8ee8671262ad6f271c6f989", AllocateDestinationString=1 | out: DestinationString="bcc29565848d36ac892e52b5a186c8ee8671262ad6f271c6f989") returned 0x0 [0200.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cd38 [0200.192] wcscat (in: _Dest=0x3db8148, _Source="bcc29565848d3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\bcc29565848d3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\bcc29565848d3" [0200.192] wcscat (in: _Dest=0x3db8148, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\bcc29565848d3.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\bcc29565848d3.68814f" [0200.192] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\bcc29565848d3.68814f", NtPathName=0x8befb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\bcc29565848d3.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3cc8 [0201.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3cc8) returned 1 [0201.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccc078) returned 1 [0201.471] NtQueryInformationFile (in: FileHandle=0x1734, IoStatusBlock=0x8befb28, FileInformation=0x8befb30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8befb28, FileInformation=0x8befb30) returned 0x0 [0201.471] NtSetInformationFile (FileHandle=0x1734, IoStatusBlock=0x8befb28, FileInformation=0x8befb30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db8148) returned 1 [0206.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cd38) returned 1 [0206.337] FlushFileBuffers (hFile=0x1734) returned 1 [0206.359] CloseHandle (hObject=0x1734) returned 1 [0208.798] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e00dc8 [0208.798] wcscpy (in: _Dest=0x3e00dc8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\" [0208.798] wcscat (in: _Dest=0x3e00dc8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\68814F-Readme.txt" [0208.799] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\68814f-readme.txt")) returned 0xffffffff [0208.799] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.806] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8befb6c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8befb6c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.808] CloseHandle (hObject=0x16e0) returned 1 [0209.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00dc8) returned 1 [0209.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caee00) returned 1 Thread: id = 6341 os_tid = 0x1884 [0190.673] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json")) returned 0x2020 [0190.673] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", dwFileAttributes=0x20) returned 1 [0196.543] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd90 [0196.543] GetFileSizeEx (in: hFile=0xd90, lpFileSize=0xaccfa84 | out: lpFileSize=0xaccfa84*=167) returned 1 [0196.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0196.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c40 [0196.543] NtQuerySystemTime (in: CurrentTime=0xaccf9f8 | out: CurrentTime=0xaccf9f8*=132462177751236000) returned 0x0 [0196.543] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x7fff2e55 [0196.543] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x4f5c5feb [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0xebdb8 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x2ef36629 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x6482d90b [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0xeac106e [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x7b443648 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x464f534b [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x6759db4c [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x7c3e743c [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x8f3ca47 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0xf968854 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x415e903f [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x5c3683ce [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x51fac2cd [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x4048dc0c [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x20bf861d [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x4a748323 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x1c72204c [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x706142da [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x1aabf080 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0xd571dba [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x302db049 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x40d9b1e5 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x4888ab69 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x70e96a30 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x7d1599bf [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0xe2794fc [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x167ebb1b [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x297772 [0196.544] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x5690dc64 [0196.545] RtlRandomEx (in: Seed=0xaccf9f0 | out: Seed=0xaccf9f0) returned 0x359ab6e6 [0196.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0196.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0196.559] ReadFile (in: hFile=0xd90, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0xa7, lpNumberOfBytesRead=0xaccf9ec, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0xaccf9ec*=0xa7, lpOverlapped=0x0) returned 1 [0196.561] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.561] WriteFile (in: hFile=0xd90, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0xaccf9f0, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0xaccf9f0*=0xa7, lpOverlapped=0x0) returned 1 [0199.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb6e8 [0199.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd5b0 [0199.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd5b0) returned 1 [0199.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0199.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0199.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0199.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d407b0) returned 1 [0199.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b60 [0199.833] SetFilePointerEx (in: hFile=0xd90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.833] WriteFile (in: hFile=0xd90, lpBuffer=0x7b7d4a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaccfa78, lpOverlapped=0x0 | out: lpBuffer=0x7b7d4a0*, lpNumberOfBytesWritten=0xaccfa78*=0x10c, lpOverlapped=0x0) returned 1 [0200.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c18 [0200.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c18) returned 1 [0200.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3c18 [0200.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0200.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0200.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d30) returned 1 [0200.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.196] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="df") returned 2 [0200.196] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="9c") returned 2 [0200.196] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="c3") returned 2 [0200.196] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="2d") returned 2 [0200.196] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="68") returned 2 [0200.196] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="c7") returned 2 [0200.196] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="31") returned 2 [0200.196] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="b1") returned 2 [0200.196] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="eb") returned 2 [0200.196] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="71") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="fe") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="b7") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="a9") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="72") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="82") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="20") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="ec") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="cb") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="32") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="f5") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="d2") returned 2 [0200.197] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.197] RtlInitAnsiString (in: DestinationString=0xaccfa00, SourceString="df9cc32d68c731b1eb4a71feb7c0a97282a620eceecb32f5d2ff" | out: DestinationString="df9cc32d68c731b1eb4a71feb7c0a97282a620eceecb32f5d2ff") [0200.197] RtlAnsiStringToUnicodeString (in: DestinationString=0xaccf9f8, SourceString="df9cc32d68c731b1eb4a71feb7c0a97282a620eceecb32f5d2ff", AllocateDestinationString=1 | out: DestinationString="df9cc32d68c731b1eb4a71feb7c0a97282a620eceecb32f5d2ff") returned 0x0 [0200.197] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cdb0 [0200.198] wcscat (in: _Dest=0x7a5e090, _Source="df9cc32d68c73" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\df9cc32d68c73") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\df9cc32d68c73" [0200.198] wcscat (in: _Dest=0x7a5e090, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\df9cc32d68c73.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\df9cc32d68c73.68814f" [0200.198] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\df9cc32d68c73.68814f", NtPathName=0xaccf9f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\df9cc32d68c73.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3e10 [0201.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3e10) returned 1 [0201.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccc2a0) returned 1 [0201.470] NtQueryInformationFile (in: FileHandle=0xd90, IoStatusBlock=0xaccf9c8, FileInformation=0xaccf9d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaccf9c8, FileInformation=0xaccf9d0) returned 0x0 [0201.470] NtSetInformationFile (FileHandle=0xd90, IoStatusBlock=0xaccf9c8, FileInformation=0xaccf9d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0206.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cdb0) returned 1 [0206.333] FlushFileBuffers (hFile=0xd90) returned 1 [0206.360] CloseHandle (hObject=0xd90) returned 1 [0208.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e00ef0 [0208.802] wcscpy (in: _Dest=0x3e00ef0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\" [0208.802] wcscat (in: _Dest=0x3e00ef0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\68814F-Readme.txt" [0208.803] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\68814f-readme.txt")) returned 0xffffffff [0208.803] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.810] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaccfa0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xaccfa0c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.811] CloseHandle (hObject=0x16e0) returned 1 [0209.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00ef0) returned 1 [0209.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caef28) returned 1 Thread: id = 6342 os_tid = 0x1a6c [0190.674] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json")) returned 0x2020 [0190.674] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0196.562] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d40 [0196.562] GetFileSizeEx (in: hFile=0x1d40, lpFileSize=0x9a4f8fc | out: lpFileSize=0x9a4f8fc*=276) returned 1 [0196.562] SetFilePointerEx (in: hFile=0x1d40, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.562] ReadFile (in: hFile=0x1d40, lpBuffer=0x9a4f8d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a4f8e8, lpOverlapped=0x0 | out: lpBuffer=0x9a4f8d8*, lpNumberOfBytesRead=0x9a4f8e8*=0x4, lpOverlapped=0x0) returned 1 [0196.564] SetFilePointerEx (in: hFile=0x1d40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c40 [0196.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0196.564] NtQuerySystemTime (in: CurrentTime=0x9a4f870 | out: CurrentTime=0x9a4f870*=132462177751392000) returned 0x0 [0196.564] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x7265c102 [0196.564] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x3b18a100 [0196.564] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x3b064040 [0196.564] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x4614fab2 [0196.564] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x1137ab0f [0196.564] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x452ef162 [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x1cfa5ebc [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x36879b39 [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x45fc58aa [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x6813aa56 [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x260ea92 [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x1eed6d3e [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0xf6984b3 [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x4b21113e [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x334e8e08 [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x372e9753 [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x22b306d6 [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x6f6bc69d [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x2808e240 [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x14731730 [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x6f1f061a [0196.565] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x714c45da [0196.566] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x75dc0595 [0196.566] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x60dc2daf [0196.566] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0xfc9ce3c [0196.566] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x1bce9d10 [0196.566] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x68639dc2 [0196.566] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x419c663f [0196.566] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x2d40c75f [0196.566] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x13504fe6 [0196.566] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x1e13ae8c [0196.566] RtlRandomEx (in: Seed=0x9a4f868 | out: Seed=0x9a4f868) returned 0x205cba00 [0196.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0196.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0196.579] ReadFile (in: hFile=0x1d40, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x114, lpNumberOfBytesRead=0x9a4f864, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x9a4f864*=0x114, lpOverlapped=0x0) returned 1 [0196.579] SetFilePointerEx (in: hFile=0x1d40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.579] WriteFile (in: hFile=0x1d40, lpBuffer=0x7beeb90*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x9a4f868, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesWritten=0x9a4f868*=0x114, lpOverlapped=0x0) returned 1 [0199.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb8f0 [0199.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb850 [0199.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb850) returned 1 [0199.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0199.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0199.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0199.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41e78) returned 1 [0199.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c20 [0199.841] SetFilePointerEx (in: hFile=0x1d40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.841] WriteFile (in: hFile=0x1d40, lpBuffer=0x7b7da18*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9a4f8f0, lpOverlapped=0x0 | out: lpBuffer=0x7b7da18*, lpNumberOfBytesWritten=0x9a4f8f0*=0x10c, lpOverlapped=0x0) returned 1 [0200.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0200.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0200.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec35b0 [0200.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0200.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0200.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0200.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.205] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="80") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="0f") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="99") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="74") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="3a") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="76") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="19") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="3e") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="bf") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="92") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="aa") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="40") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="1a") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="35") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="56") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="10") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="85") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="21") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="e2") returned 2 [0200.205] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="8a") returned 2 [0200.205] RtlInitAnsiString (in: DestinationString=0x9a4f878, SourceString="d3800f9974a83a76193ebf92aa404a1a7a3556a2b3108521e28a" | out: DestinationString="d3800f9974a83a76193ebf92aa404a1a7a3556a2b3108521e28a") [0200.206] RtlAnsiStringToUnicodeString (in: DestinationString=0x9a4f870, SourceString="d3800f9974a83a76193ebf92aa404a1a7a3556a2b3108521e28a", AllocateDestinationString=1 | out: DestinationString="d3800f9974a83a76193ebf92aa404a1a7a3556a2b3108521e28a") returned 0x0 [0200.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cea0 [0200.206] wcscat (in: _Dest=0x7a5e300, _Source="d3800f9974a83" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\d3800f9974a83") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\d3800f9974a83" [0200.206] wcscat (in: _Dest=0x7a5e300, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\d3800f9974a83.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\d3800f9974a83.68814f" [0200.206] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\d3800f9974a83.68814f", NtPathName=0x9a4f868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\d3800f9974a83.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea40a0 [0201.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea40a0) returned 1 [0201.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccc6f0) returned 1 [0201.470] NtQueryInformationFile (in: FileHandle=0x1d40, IoStatusBlock=0x9a4f840, FileInformation=0x9a4f848, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9a4f840, FileInformation=0x9a4f848) returned 0x0 [0201.470] NtSetInformationFile (FileHandle=0x1d40, IoStatusBlock=0x9a4f840, FileInformation=0x9a4f848, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e300) returned 1 [0206.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cea0) returned 1 [0206.329] FlushFileBuffers (hFile=0x1d40) returned 1 [0206.346] CloseHandle (hObject=0x1d40) returned 1 [0208.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e00ca0 [0208.795] wcscpy (in: _Dest=0x3e00ca0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\" [0208.795] wcscat (in: _Dest=0x3e00ca0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\68814F-Readme.txt" [0208.795] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\68814f-readme.txt")) returned 0xffffffff [0208.795] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.802] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9a4f884, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9a4f884*=0x8b9, lpOverlapped=0x0) returned 1 [0209.804] CloseHandle (hObject=0x16e0) returned 1 [0209.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00ca0) returned 1 [0209.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf050) returned 1 Thread: id = 6343 os_tid = 0x2404 [0190.675] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json")) returned 0x2020 [0190.675] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", dwFileAttributes=0x20) returned 1 [0196.580] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15f8 [0196.580] GetFileSizeEx (in: hFile=0x15f8, lpFileSize=0x938fb0c | out: lpFileSize=0x938fb0c*=331) returned 1 [0196.580] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x147, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.580] ReadFile (in: hFile=0x15f8, lpBuffer=0x938fae8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x938faf8, lpOverlapped=0x0 | out: lpBuffer=0x938fae8*, lpNumberOfBytesRead=0x938faf8*=0x4, lpOverlapped=0x0) returned 1 [0196.582] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0196.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0196.582] NtQuerySystemTime (in: CurrentTime=0x938fa80 | out: CurrentTime=0x938fa80*=132462177751548000) returned 0x0 [0196.582] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x7d97c66e [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x680eec16 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0xf3fb13d [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x1762805c [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x10e8ed78 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0xfe85e61 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x5023b28b [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x3c0c5097 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x3b4ce92a [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x40d38446 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x548c05ee [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x17c681cd [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x7b690813 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x2369dc3e [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x1df8bb0a [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x5159e99 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x3fd42cc3 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x66cc9006 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x18ff7900 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x63f1b178 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x6241a385 [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x7a92baed [0196.583] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x6b814132 [0196.584] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x6b16d7da [0196.584] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x2a63cd89 [0196.584] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x3a078aa [0196.584] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x3bae945d [0196.584] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0xe6d430c [0196.584] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x16a9d66d [0196.584] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x7180c48a [0196.584] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x12a820dc [0196.584] RtlRandomEx (in: Seed=0x938fa78 | out: Seed=0x938fa78) returned 0x1a2b6640 [0196.597] ReadFile (in: hFile=0x15f8, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0x14b, lpNumberOfBytesRead=0x938fa74, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0x938fa74*=0x14b, lpOverlapped=0x0) returned 1 [0196.597] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.598] WriteFile (in: hFile=0x15f8, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x938fa78, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0x938fa78*=0x14b, lpOverlapped=0x0) returned 1 [0199.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb710 [0199.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb990 [0199.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb990) returned 1 [0199.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0199.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0199.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0199.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40b10) returned 1 [0199.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37bc0 [0199.839] SetFilePointerEx (in: hFile=0x15f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.839] WriteFile (in: hFile=0x15f8, lpBuffer=0x7b7d5b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x938fb00, lpOverlapped=0x0 | out: lpBuffer=0x7b7d5b8*, lpNumberOfBytesWritten=0x938fb00*=0x10c, lpOverlapped=0x0) returned 1 [0200.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0200.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3920) returned 1 [0200.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3920 [0200.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0200.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0200.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0200.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.201] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="08") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="86") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="22") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="ed") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="3f") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="40") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="00") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="72") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="63") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="01") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="79") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="25") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="37") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="06") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="37") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="c4") returned 2 [0200.201] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="10") returned 2 [0200.202] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="9d") returned 2 [0200.202] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="77") returned 2 [0200.202] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="c1") returned 2 [0200.202] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="6a") returned 2 [0200.202] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="11") returned 2 [0200.202] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="b4") returned 2 [0200.202] RtlInitAnsiString (in: DestinationString=0x938fa88, SourceString="3d086ef38622ed3f40007263017925370637c4109d77c16a11b4" | out: DestinationString="3d086ef38622ed3f40007263017925370637c4109d77c16a11b4") [0200.202] RtlAnsiStringToUnicodeString (in: DestinationString=0x938fa80, SourceString="3d086ef38622ed3f40007263017925370637c4109d77c16a11b4", AllocateDestinationString=1 | out: DestinationString="3d086ef38622ed3f40007263017925370637c4109d77c16a11b4") returned 0x0 [0200.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2ce28 [0200.202] wcscat (in: _Dest=0x7a5e1c8, _Source="3d086ef38622e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\3d086ef38622e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\3d086ef38622e" [0200.202] wcscat (in: _Dest=0x7a5e1c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\3d086ef38622e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\3d086ef38622e.68814f" [0200.202] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\3d086ef38622e.68814f", NtPathName=0x938fa78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\3d086ef38622e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea3f58 [0201.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3f58) returned 1 [0201.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccc4c8) returned 1 [0201.468] NtQueryInformationFile (in: FileHandle=0x15f8, IoStatusBlock=0x938fa50, FileInformation=0x938fa58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x938fa50, FileInformation=0x938fa58) returned 0x0 [0201.468] NtSetInformationFile (FileHandle=0x15f8, IoStatusBlock=0x938fa50, FileInformation=0x938fa58, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e1c8) returned 1 [0205.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ce28) returned 1 [0205.995] FlushFileBuffers (hFile=0x15f8) returned 1 [0206.001] CloseHandle (hObject=0x15f8) returned 1 [0206.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caa5e8 [0206.385] wcscpy (in: _Dest=0x7caa5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\" [0206.385] wcscat (in: _Dest=0x7caa5e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\68814F-Readme.txt" [0206.385] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\68814f-readme.txt")) returned 0xffffffff [0206.385] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.287] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x938fa94, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x938fa94*=0x8b9, lpOverlapped=0x0) returned 1 [0210.288] CloseHandle (hObject=0x17ec) returned 1 [0210.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa5e8) returned 1 [0210.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf178) returned 1 Thread: id = 6344 os_tid = 0x2408 [0190.675] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json")) returned 0x2020 [0190.676] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0196.598] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x189c [0196.599] GetFileSizeEx (in: hFile=0x189c, lpFileSize=0xb48fe6c | out: lpFileSize=0xb48fe6c*=207) returned 1 [0196.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0196.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0196.599] NtQuerySystemTime (in: CurrentTime=0xb48fde0 | out: CurrentTime=0xb48fde0*=132462177751704000) returned 0x0 [0196.599] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x4587e1bf [0196.599] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x54979ac7 [0196.599] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x2a8e4ca [0196.599] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x6042d696 [0196.599] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x314da05 [0196.599] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x779bef54 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x410cbb40 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x40de26f0 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x4e5d5778 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x2ef94a40 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x3eb783cf [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x4c9c5556 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x3b75fd04 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x541d01a0 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x140331aa [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x44038402 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x4032b99 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0xdf01ea1 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x5dc193aa [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x18d4a040 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x591815f5 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x72351b3a [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x2c17acc6 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x30f3146c [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x38e399db [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x36ebe587 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x58bff51b [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x4fb8c1c [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x2b3e5d61 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x25ef91c0 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x79018545 [0196.600] RtlRandomEx (in: Seed=0xb48fdd8 | out: Seed=0xb48fdd8) returned 0x5997fb8a [0196.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0196.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d758b0 [0196.610] ReadFile (in: hFile=0x189c, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0xcf, lpNumberOfBytesRead=0xb48fdd4, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0xb48fdd4*=0xcf, lpOverlapped=0x0) returned 1 [0196.612] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.612] WriteFile (in: hFile=0x189c, lpBuffer=0x10d758b0*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0xb48fdd8, lpOverlapped=0x0 | out: lpBuffer=0x10d758b0*, lpNumberOfBytesWritten=0xb48fdd8*=0xcf, lpOverlapped=0x0) returned 1 [0199.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede050 [0199.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb7d8 [0199.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb7d8) returned 1 [0199.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d758b0) returned 1 [0199.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0199.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0199.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40258) returned 1 [0199.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ce0 [0199.847] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.847] WriteFile (in: hFile=0x189c, lpBuffer=0x7b7d7e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb48fe60, lpOverlapped=0x0 | out: lpBuffer=0x7b7d7e8*, lpNumberOfBytesWritten=0xb48fe60*=0x10c, lpOverlapped=0x0) returned 1 [0200.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.212] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0200.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0200.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3e48 [0200.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40c8 [0200.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0200.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0200.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.213] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="8f") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="90") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="a3") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="68") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="0a") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="80") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="8f") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="47") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="75") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="78") returned 2 [0200.213] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="13") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="62") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="90") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="44") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="5c") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="91") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="fd") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="0e") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="ef") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="a5") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="28") returned 2 [0200.214] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="a4") returned 2 [0200.214] RtlInitAnsiString (in: DestinationString=0xb48fde8, SourceString="8f90a3680a808f475a9b75781362dd90445c91fdb30eefa528a4" | out: DestinationString="8f90a3680a808f475a9b75781362dd90445c91fdb30eefa528a4") [0200.214] RtlAnsiStringToUnicodeString (in: DestinationString=0xb48fde0, SourceString="8f90a3680a808f475a9b75781362dd90445c91fdb30eefa528a4", AllocateDestinationString=1 | out: DestinationString="8f90a3680a808f475a9b75781362dd90445c91fdb30eefa528a4") returned 0x0 [0200.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e418 [0200.214] wcscat (in: _Dest=0x7a5e570, _Source="8f90a3680a808" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\8f90a3680a808") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\8f90a3680a808" [0200.214] wcscat (in: _Dest=0x7a5e570, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\8f90a3680a808.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\8f90a3680a808.68814f" [0200.214] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\8f90a3680a808.68814f", NtPathName=0xb48fdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\8f90a3680a808.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea4330 [0201.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4330) returned 1 [0201.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccb40) returned 1 [0201.469] NtQueryInformationFile (in: FileHandle=0x189c, IoStatusBlock=0xb48fdb0, FileInformation=0xb48fdb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb48fdb0, FileInformation=0xb48fdb8) returned 0x0 [0201.469] NtSetInformationFile (FileHandle=0x189c, IoStatusBlock=0xb48fdb0, FileInformation=0xb48fdb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e570) returned 1 [0206.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0206.321] FlushFileBuffers (hFile=0x189c) returned 1 [0206.340] CloseHandle (hObject=0x189c) returned 1 [0208.793] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e00b78 [0208.793] wcscpy (in: _Dest=0x3e00b78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\" [0208.793] wcscat (in: _Dest=0x3e00b78, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\68814F-Readme.txt" [0208.793] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\68814f-readme.txt")) returned 0xffffffff [0208.793] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.798] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb48fdf4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb48fdf4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.800] CloseHandle (hObject=0x16e0) returned 1 [0209.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00b78) returned 1 [0209.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf2a0) returned 1 Thread: id = 6345 os_tid = 0x2414 [0190.676] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json")) returned 0x2020 [0190.676] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0196.612] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x188c [0196.613] GetFileSizeEx (in: hFile=0x188c, lpFileSize=0xb2cfb9c | out: lpFileSize=0xb2cfb9c*=173) returned 1 [0196.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0196.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0196.613] NtQuerySystemTime (in: CurrentTime=0xb2cfb10 | out: CurrentTime=0xb2cfb10*=132462177751860000) returned 0x0 [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x6d858977 [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x5e5672f5 [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x31fc87c0 [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x7844159f [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x63cf7f89 [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x279b7122 [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x3498657c [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x79a7b75c [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x37c6ef01 [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x7d6fd948 [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x7cb7d7ae [0196.613] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0xee89025 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x28e8363 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x7f8f68e3 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x52d7c72a [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x4f22e00 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x3c282ec2 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x221776e8 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x598f7b3b [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x716012c5 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0xc9679c7 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x7424d5ee [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x684fc9e6 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x3e097dc0 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x247ad901 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x2b7aa99c [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x43cec743 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x1d6b6fc4 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x2e9e05a9 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x2436d7a8 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x5568f4f7 [0196.614] RtlRandomEx (in: Seed=0xb2cfb08 | out: Seed=0xb2cfb08) returned 0x3bf97856 [0196.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d794b8 [0196.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d5f080 [0196.629] ReadFile (in: hFile=0x188c, lpBuffer=0x10d794b8, nNumberOfBytesToRead=0xad, lpNumberOfBytesRead=0xb2cfb04, lpOverlapped=0x0 | out: lpBuffer=0x10d794b8*, lpNumberOfBytesRead=0xb2cfb04*=0xad, lpOverlapped=0x0) returned 1 [0196.632] SetFilePointerEx (in: hFile=0x188c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.632] WriteFile (in: hFile=0x188c, lpBuffer=0x10d5f080*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0xb2cfb08, lpOverlapped=0x0 | out: lpBuffer=0x10d5f080*, lpNumberOfBytesWritten=0xb2cfb08*=0xad, lpOverlapped=0x0) returned 1 [0199.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb800 [0199.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd600 [0199.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd600) returned 1 [0199.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d5f080) returned 1 [0199.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d794b8) returned 1 [0199.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0199.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d410b0) returned 1 [0199.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c80 [0199.846] SetFilePointerEx (in: hFile=0x188c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.846] WriteFile (in: hFile=0x188c, lpBuffer=0x7b7d900*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb2cfb90, lpOverlapped=0x0 | out: lpBuffer=0x7b7d900*, lpNumberOfBytesWritten=0xb2cfb90*=0x10c, lpOverlapped=0x0) returned 1 [0200.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0200.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fb0) returned 1 [0200.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3fb0 [0200.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0200.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c40 [0200.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c40) returned 1 [0200.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.209] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="78") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="79") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="bf") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="ad") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="01") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="3a") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="47") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="89") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="8c") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="e7") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="46") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="66") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="91") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="ba") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="1d") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="28") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="a0") returned 2 [0200.209] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="1a") returned 2 [0200.210] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.210] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="86") returned 2 [0200.210] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="10") returned 2 [0200.210] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="85") returned 2 [0200.210] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="2b") returned 2 [0200.210] RtlInitAnsiString (in: DestinationString=0xb2cfb18, SourceString="7bfc7879bfad013a47898ce7466691ba6d1d28a01a4a8610852b" | out: DestinationString="7bfc7879bfad013a47898ce7466691ba6d1d28a01a4a8610852b") [0200.210] RtlAnsiStringToUnicodeString (in: DestinationString=0xb2cfb10, SourceString="7bfc7879bfad013a47898ce7466691ba6d1d28a01a4a8610852b", AllocateDestinationString=1 | out: DestinationString="7bfc7879bfad013a47898ce7466691ba6d1d28a01a4a8610852b") returned 0x0 [0200.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cf18 [0200.210] wcscat (in: _Dest=0x7a5e438, _Source="7bfc7879bfad0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\7bfc7879bfad0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\7bfc7879bfad0" [0200.210] wcscat (in: _Dest=0x7a5e438, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\7bfc7879bfad0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\7bfc7879bfad0.68814f" [0200.210] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\7bfc7879bfad0.68814f", NtPathName=0xb2cfb08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\7bfc7879bfad0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea41e8 [0201.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea41e8) returned 1 [0201.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccc918) returned 1 [0201.467] NtQueryInformationFile (in: FileHandle=0x188c, IoStatusBlock=0xb2cfae0, FileInformation=0xb2cfae8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb2cfae0, FileInformation=0xb2cfae8) returned 0x0 [0201.467] NtSetInformationFile (FileHandle=0x188c, IoStatusBlock=0xb2cfae0, FileInformation=0xb2cfae8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e438) returned 1 [0205.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cf18) returned 1 [0205.986] FlushFileBuffers (hFile=0x188c) returned 1 [0206.000] CloseHandle (hObject=0x188c) returned 1 [0206.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caa4c0 [0206.382] wcscpy (in: _Dest=0x7caa4c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\" [0206.382] wcscat (in: _Dest=0x7caa4c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\68814F-Readme.txt" [0206.382] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\68814f-readme.txt")) returned 0xffffffff [0206.383] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.278] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb2cfb24, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb2cfb24*=0x8b9, lpOverlapped=0x0) returned 1 [0210.280] CloseHandle (hObject=0x17ec) returned 1 [0210.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa4c0) returned 1 [0210.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf3c8) returned 1 Thread: id = 6346 os_tid = 0x2430 [0190.677] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json")) returned 0x2020 [0190.677] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0196.632] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x574 [0196.633] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x97bfddc | out: lpFileSize=0x97bfddc*=172) returned 1 [0196.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0196.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a60 [0196.633] NtQuerySystemTime (in: CurrentTime=0x97bfd50 | out: CurrentTime=0x97bfd50*=132462177752172000) returned 0x0 [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x6f5cbdac [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x222935dc [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x7de4a0d8 [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x471a2404 [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x33505003 [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x1d01ffad [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x2355283b [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x5ccc0405 [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x1ae64c98 [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x13852a74 [0196.633] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x446a83b7 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x61a95cef [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x7ea9fbc [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x671059a8 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x73a5dd27 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x540adf56 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x16ceb845 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x4a1673c0 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0xf5e4d [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x452cb617 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x344f7b8f [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x18a9c780 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x5206402a [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x534e5163 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x353b4215 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x2c35848d [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x37c0b796 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x5eeb957c [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x74b61350 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x42abb3b [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x4a7b183 [0196.634] RtlRandomEx (in: Seed=0x97bfd48 | out: Seed=0x97bfd48) returned 0x6ee905fa [0196.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d62c88 [0196.645] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d66890 [0196.645] ReadFile (in: hFile=0x574, lpBuffer=0x10d62c88, nNumberOfBytesToRead=0xac, lpNumberOfBytesRead=0x97bfd44, lpOverlapped=0x0 | out: lpBuffer=0x10d62c88*, lpNumberOfBytesRead=0x97bfd44*=0xac, lpOverlapped=0x0) returned 1 [0196.647] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.647] WriteFile (in: hFile=0x574, lpBuffer=0x10d66890*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x97bfd48, lpOverlapped=0x0 | out: lpBuffer=0x10d66890*, lpNumberOfBytesWritten=0x97bfd48*=0xac, lpOverlapped=0x0) returned 1 [0199.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede0a0 [0199.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb738 [0199.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb738) returned 1 [0199.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d66890) returned 1 [0199.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d62c88) returned 1 [0199.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0199.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418d8) returned 1 [0199.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37da0 [0199.853] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.853] WriteFile (in: hFile=0x574, lpBuffer=0x7b7cbe0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x97bfdd0, lpOverlapped=0x0 | out: lpBuffer=0x7b7cbe0*, lpNumberOfBytesWritten=0x97bfdd0*=0x10c, lpOverlapped=0x0) returned 1 [0200.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0200.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0200.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec6698 [0200.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0200.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a60 [0200.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a60) returned 1 [0200.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.223] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="71") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="c2") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="90") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="26") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="89") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="17") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="64") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="a7") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="37") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="ed") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="aa") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="00") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="50") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="21") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="cc") returned 2 [0200.223] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="75") returned 2 [0200.224] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="90") returned 2 [0200.224] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="35") returned 2 [0200.224] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.224] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.224] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="b4") returned 2 [0200.224] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="60") returned 2 [0200.224] RtlInitAnsiString (in: DestinationString=0x97bfd58, SourceString="71d9c29026891764a7e337edaafc003d5021cc759035acc0b460" | out: DestinationString="71d9c29026891764a7e337edaafc003d5021cc759035acc0b460") [0200.224] RtlAnsiStringToUnicodeString (in: DestinationString=0x97bfd50, SourceString="71d9c29026891764a7e337edaafc003d5021cc759035acc0b460", AllocateDestinationString=1 | out: DestinationString="71d9c29026891764a7e337edaafc003d5021cc759035acc0b460") returned 0x0 [0200.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e490 [0200.224] wcscat (in: _Dest=0x7a5e7e0, _Source="71d9c29026891" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\71d9c29026891") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\71d9c29026891" [0200.224] wcscat (in: _Dest=0x7a5e7e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\71d9c29026891.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\71d9c29026891.68814f" [0200.224] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\71d9c29026891.68814f", NtPathName=0x97bfd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\71d9c29026891.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea45c0 [0201.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea45c0) returned 1 [0201.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccf90) returned 1 [0201.469] NtQueryInformationFile (in: FileHandle=0x574, IoStatusBlock=0x97bfd20, FileInformation=0x97bfd28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x97bfd20, FileInformation=0x97bfd28) returned 0x0 [0201.469] NtSetInformationFile (FileHandle=0x574, IoStatusBlock=0x97bfd20, FileInformation=0x97bfd28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e7e0) returned 1 [0206.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 [0206.314] FlushFileBuffers (hFile=0x574) returned 1 [0206.326] CloseHandle (hObject=0x574) returned 1 [0208.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e00928 [0208.770] wcscpy (in: _Dest=0x3e00928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\" [0208.770] wcscat (in: _Dest=0x3e00928, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\68814F-Readme.txt" [0208.770] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\68814f-readme.txt")) returned 0xffffffff [0208.771] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.789] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x97bfd64, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x97bfd64*=0x8b9, lpOverlapped=0x0) returned 1 [0209.791] CloseHandle (hObject=0x16e0) returned 1 [0209.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00928) returned 1 [0209.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf4f0) returned 1 Thread: id = 6347 os_tid = 0x95c [0190.678] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json")) returned 0x2020 [0190.678] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0196.648] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2284 [0196.648] GetFileSizeEx (in: hFile=0x2284, lpFileSize=0xb62f95c | out: lpFileSize=0xb62f95c*=193) returned 1 [0196.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a60 [0196.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0196.648] NtQuerySystemTime (in: CurrentTime=0xb62f8d0 | out: CurrentTime=0xb62f8d0*=132462177752328000) returned 0x0 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x173c4bac [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x6aa9d014 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x1718bb2d [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x57cf7f9b [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x40296b7f [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x21b49926 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x7e9ec659 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x47195410 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x34c2462f [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x3b1f2390 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0xf145ba5 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x42823c08 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x1018b503 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x40f30de0 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x25ecb082 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x191a3647 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x440ff8c0 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x26f8c3c3 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x70b17da0 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x70e474 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x8a28a76 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x6e7223f7 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x6f27b070 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x4f9f4d51 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x15f5e278 [0196.649] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x3489befd [0196.650] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x52694fae [0196.650] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x7f85312e [0196.650] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x6199eca2 [0196.650] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x6cf81fb [0196.650] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x4fe939f3 [0196.650] RtlRandomEx (in: Seed=0xb62f8c8 | out: Seed=0xb62f8c8) returned 0x28fee811 [0196.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d6a498 [0196.659] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d50060 [0196.659] ReadFile (in: hFile=0x2284, lpBuffer=0x10d6a498, nNumberOfBytesToRead=0xc1, lpNumberOfBytesRead=0xb62f8c4, lpOverlapped=0x0 | out: lpBuffer=0x10d6a498*, lpNumberOfBytesRead=0xb62f8c4*=0xc1, lpOverlapped=0x0) returned 1 [0196.661] SetFilePointerEx (in: hFile=0x2284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.661] WriteFile (in: hFile=0x2284, lpBuffer=0x10d50060*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0xb62f8c8, lpOverlapped=0x0 | out: lpBuffer=0x10d50060*, lpNumberOfBytesWritten=0xb62f8c8*=0xc1, lpOverlapped=0x0) returned 1 [0199.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd830 [0199.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb490 [0199.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb490) returned 1 [0199.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d50060) returned 1 [0199.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d6a498) returned 1 [0199.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0199.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25d70) returned 1 [0199.850] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37d40 [0199.850] SetFilePointerEx (in: hFile=0x2284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.850] WriteFile (in: hFile=0x2284, lpBuffer=0x7b7c898*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb62f950, lpOverlapped=0x0 | out: lpBuffer=0x7b7c898*, lpNumberOfBytesWritten=0xb62f950*=0x10c, lpOverlapped=0x0) returned 1 [0200.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f98 [0200.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f98) returned 1 [0200.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2f98 [0200.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4078 [0200.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2980 [0200.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2980) returned 1 [0200.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.217] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="45") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="ab") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="87") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="88") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="24") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="e9") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="b1") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="f8") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="38") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="39") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="e9") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="68") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="14") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="d2") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="70") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="8e") returned 2 [0200.217] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="72") returned 2 [0200.218] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="76") returned 2 [0200.218] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="ed") returned 2 [0200.218] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="ad") returned 2 [0200.218] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="69") returned 2 [0200.218] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="b1") returned 2 [0200.218] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="c1") returned 2 [0200.218] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="5d") returned 2 [0200.218] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="04") returned 2 [0200.218] RtlInitAnsiString (in: DestinationString=0xb62f8d8, SourceString="ce45ab878824e9b1f83839e96814d2708e7276edad69b1c15d04" | out: DestinationString="ce45ab878824e9b1f83839e96814d2708e7276edad69b1c15d04") [0200.218] RtlAnsiStringToUnicodeString (in: DestinationString=0xb62f8d0, SourceString="ce45ab878824e9b1f83839e96814d2708e7276edad69b1c15d04", AllocateDestinationString=1 | out: DestinationString="ce45ab878824e9b1f83839e96814d2708e7276edad69b1c15d04") returned 0x0 [0200.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e940 [0200.218] wcscat (in: _Dest=0x7a5e6a8, _Source="ce45ab878824e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ce45ab878824e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ce45ab878824e" [0200.218] wcscat (in: _Dest=0x7a5e6a8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ce45ab878824e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ce45ab878824e.68814f" [0200.218] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ce45ab878824e.68814f", NtPathName=0xb62f8c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\ce45ab878824e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea4478 [0201.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4478) returned 1 [0201.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cccd68) returned 1 [0201.469] NtQueryInformationFile (in: FileHandle=0x2284, IoStatusBlock=0xb62f8a0, FileInformation=0xb62f8a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb62f8a0, FileInformation=0xb62f8a8) returned 0x0 [0201.469] NtSetInformationFile (FileHandle=0x2284, IoStatusBlock=0xb62f8a0, FileInformation=0xb62f8a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e6a8) returned 1 [0206.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0206.316] FlushFileBuffers (hFile=0x2284) returned 1 [0206.334] CloseHandle (hObject=0x2284) returned 1 [0208.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e00a50 [0208.775] wcscpy (in: _Dest=0x3e00a50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\" [0208.775] wcscat (in: _Dest=0x3e00a50, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\68814F-Readme.txt" [0208.775] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\68814f-readme.txt")) returned 0xffffffff [0208.775] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.793] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb62f8e4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb62f8e4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.795] CloseHandle (hObject=0x16e0) returned 1 [0209.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00a50) returned 1 [0209.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf618) returned 1 Thread: id = 6348 os_tid = 0x2454 [0190.679] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json")) returned 0x2020 [0190.679] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0196.662] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15e8 [0196.662] GetFileSizeEx (in: hFile=0x15e8, lpFileSize=0x933fd14 | out: lpFileSize=0x933fd14*=198) returned 1 [0196.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0196.663] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0196.663] NtQuerySystemTime (in: CurrentTime=0x933fc88 | out: CurrentTime=0x933fc88*=132462177752484000) returned 0x0 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x935847d [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x418f0459 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x5d0ca414 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x7381fd72 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x4b2bc891 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x555b969a [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x65770ae6 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x58347b92 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x76dc9bbb [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x2e22b8a2 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x6ce0a3c9 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x19552a80 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x47fb2563 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x148459bf [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x4d19b140 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x4c4f4f73 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x380302c0 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x1135b69f [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x265025cb [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x5debea7c [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x5beecdf5 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x6db74169 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x15c72ff4 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x4cf8f597 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x34cd76c0 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x27bbb247 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x536906d1 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x2e3b52d5 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0xb78f4a0 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x5df73638 [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x3805bfdc [0196.663] RtlRandomEx (in: Seed=0x933fc80 | out: Seed=0x933fc80) returned 0x649e2fc6 [0196.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d53c68 [0196.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d57870 [0196.672] ReadFile (in: hFile=0x15e8, lpBuffer=0x10d53c68, nNumberOfBytesToRead=0xc6, lpNumberOfBytesRead=0x933fc7c, lpOverlapped=0x0 | out: lpBuffer=0x10d53c68*, lpNumberOfBytesRead=0x933fc7c*=0xc6, lpOverlapped=0x0) returned 1 [0196.674] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.675] WriteFile (in: hFile=0x15e8, lpBuffer=0x10d57870*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x933fc80, lpOverlapped=0x0 | out: lpBuffer=0x10d57870*, lpNumberOfBytesWritten=0x933fc80*=0xc6, lpOverlapped=0x0) returned 1 [0199.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb350 [0199.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde48 [0199.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edde48) returned 1 [0199.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d57870) returned 1 [0199.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d53c68) returned 1 [0199.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0199.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e90) returned 1 [0199.857] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e00 [0199.858] SetFilePointerEx (in: hFile=0x15e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.858] WriteFile (in: hFile=0x15e8, lpBuffer=0x7b7d040*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x933fd08, lpOverlapped=0x0 | out: lpBuffer=0x7b7d040*, lpNumberOfBytesWritten=0x933fd08*=0x10c, lpOverlapped=0x0) returned 1 [0200.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3df8 [0200.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3df8) returned 1 [0200.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3df8 [0200.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a38 [0200.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0200.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40a0) returned 1 [0200.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.228] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="5e") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="14") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="88") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="63") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="43") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="db") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="3b") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="a4") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="99") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="64") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="c5") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.228] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="64") returned 2 [0200.229] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="50") returned 2 [0200.229] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.229] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.229] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="62") returned 2 [0200.229] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="67") returned 2 [0200.229] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.229] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.229] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="19") returned 2 [0200.229] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="52") returned 2 [0200.229] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="5c") returned 2 [0200.229] RtlInitAnsiString (in: DestinationString=0x933fc90, SourceString="5e14886343db3ba46e0c9964ffc53d6450c00c6267c0d419525c" | out: DestinationString="5e14886343db3ba46e0c9964ffc53d6450c00c6267c0d419525c") [0200.229] RtlAnsiStringToUnicodeString (in: DestinationString=0x933fc88, SourceString="5e14886343db3ba46e0c9964ffc53d6450c00c6267c0d419525c", AllocateDestinationString=1 | out: DestinationString="5e14886343db3ba46e0c9964ffc53d6450c00c6267c0d419525c") returned 0x0 [0200.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd10 [0200.229] wcscat (in: _Dest=0x7a5e918, _Source="5e14886343db3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\5e14886343db3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\5e14886343db3" [0200.229] wcscat (in: _Dest=0x7a5e918, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\5e14886343db3.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\5e14886343db3.68814f" [0200.229] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\5e14886343db3.68814f", NtPathName=0x933fc80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\5e14886343db3.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea4708 [0201.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4708) returned 1 [0201.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccd1b8) returned 1 [0201.468] NtQueryInformationFile (in: FileHandle=0x15e8, IoStatusBlock=0x933fc58, FileInformation=0x933fc60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x933fc58, FileInformation=0x933fc60) returned 0x0 [0201.468] NtSetInformationFile (FileHandle=0x15e8, IoStatusBlock=0x933fc58, FileInformation=0x933fc60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0205.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0205.991] FlushFileBuffers (hFile=0x15e8) returned 1 [0206.002] CloseHandle (hObject=0x15e8) returned 1 [0206.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caa710 [0206.392] wcscpy (in: _Dest=0x7caa710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\" [0206.392] wcscat (in: _Dest=0x7caa710, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\68814F-Readme.txt" [0206.392] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\68814f-readme.txt")) returned 0xffffffff [0206.392] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.282] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x933fc9c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x933fc9c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.285] CloseHandle (hObject=0x17ec) returned 1 [0210.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa710) returned 1 [0210.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf740) returned 1 Thread: id = 6349 os_tid = 0xbd8 [0190.680] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json")) returned 0x2020 [0190.680] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0196.675] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1524 [0196.675] GetFileSizeEx (in: hFile=0x1524, lpFileSize=0x3d1f83c | out: lpFileSize=0x3d1f83c*=200) returned 1 [0196.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0196.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ec0 [0196.676] NtQuerySystemTime (in: CurrentTime=0x3d1f7b0 | out: CurrentTime=0x3d1f7b0*=132462177752484000) returned 0x0 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x7e55bcb4 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x1ad6c940 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x663f44c0 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x501ceec0 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x5df73638 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x4a392893 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x2299a397 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0xf988244 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x629db9e7 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x3d04e233 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x649e2fc6 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x7737f4f4 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x4329426d [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x487589af [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x65738da1 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x14318939 [0196.676] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x5013906f [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x6746d6f9 [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x68be9357 [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x7eeb5e59 [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x41d55a42 [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x22db321c [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x13735d70 [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x7340b101 [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x4a6bdc39 [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x2a7715ba [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x681307fe [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x540a4f81 [0196.677] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x226c69a3 [0196.678] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x47be2bf8 [0196.678] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x19db55fe [0196.678] RtlRandomEx (in: Seed=0x3d1f7a8 | out: Seed=0x3d1f7a8) returned 0x226c69a3 [0196.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d5b478 [0196.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab8cb8 [0196.689] ReadFile (in: hFile=0x1524, lpBuffer=0x10d5b478, nNumberOfBytesToRead=0xc8, lpNumberOfBytesRead=0x3d1f7a4, lpOverlapped=0x0 | out: lpBuffer=0x10d5b478*, lpNumberOfBytesRead=0x3d1f7a4*=0xc8, lpOverlapped=0x0) returned 1 [0196.693] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.693] WriteFile (in: hFile=0x1524, lpBuffer=0x7ab8cb8*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x3d1f7a8, lpOverlapped=0x0 | out: lpBuffer=0x7ab8cb8*, lpNumberOfBytesWritten=0x3d1f7a8*=0xc8, lpOverlapped=0x0) returned 1 [0199.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edddd0 [0199.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbd28 [0199.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbd28) returned 1 [0199.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab8cb8) returned 1 [0199.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d5b478) returned 1 [0199.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0199.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ff0) returned 1 [0199.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e60 [0199.860] SetFilePointerEx (in: hFile=0x1524, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.860] WriteFile (in: hFile=0x1524, lpBuffer=0x7b7ccf8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x3d1f830, lpOverlapped=0x0 | out: lpBuffer=0x7b7ccf8*, lpNumberOfBytesWritten=0x3d1f830*=0x10c, lpOverlapped=0x0) returned 1 [0200.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f60 [0200.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f60) returned 1 [0200.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3f60 [0200.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0200.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0200.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e20) returned 1 [0200.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.232] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="fd") returned 2 [0200.232] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="40") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="ec") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="fa") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="83") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="60") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="6b") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="a9") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="33") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="14") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="83") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="1e") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="57") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="92") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="2a") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="9e") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="5e") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="4c") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="38") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="c6") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="5d") returned 2 [0200.233] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="44") returned 2 [0200.234] RtlInitAnsiString (in: DestinationString=0x3d1f7b8, SourceString="fd40ecfa83609b6ba93314831e57922a9e5ed3dc4c38d3c65d44" | out: DestinationString="fd40ecfa83609b6ba93314831e57922a9e5ed3dc4c38d3c65d44") [0200.234] RtlAnsiStringToUnicodeString (in: DestinationString=0x3d1f7b0, SourceString="fd40ecfa83609b6ba93314831e57922a9e5ed3dc4c38d3c65d44", AllocateDestinationString=1 | out: DestinationString="fd40ecfa83609b6ba93314831e57922a9e5ed3dc4c38d3c65d44") returned 0x0 [0200.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd88 [0200.234] wcscat (in: _Dest=0x7a5ea50, _Source="fd40ecfa83609" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\fd40ecfa83609") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\fd40ecfa83609" [0200.234] wcscat (in: _Dest=0x7a5ea50, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\fd40ecfa83609.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\fd40ecfa83609.68814f" [0200.234] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\fd40ecfa83609.68814f", NtPathName=0x3d1f7a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\fd40ecfa83609.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea4850 [0201.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4850) returned 1 [0201.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccd3e0) returned 1 [0201.467] NtQueryInformationFile (in: FileHandle=0x1524, IoStatusBlock=0x3d1f780, FileInformation=0x3d1f788, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x3d1f780, FileInformation=0x3d1f788) returned 0x0 [0201.467] NtSetInformationFile (FileHandle=0x1524, IoStatusBlock=0x3d1f780, FileInformation=0x3d1f788, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ea50) returned 1 [0205.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0205.979] FlushFileBuffers (hFile=0x1524) returned 1 [0205.998] CloseHandle (hObject=0x1524) returned 1 [0206.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caa398 [0206.380] wcscpy (in: _Dest=0x7caa398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\" [0206.380] wcscat (in: _Dest=0x7caa398, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\68814F-Readme.txt" [0206.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\68814f-readme.txt")) returned 0xffffffff [0206.380] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1618 [0211.249] WriteFile (in: hFile=0x1618, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x3d1f7c4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x3d1f7c4*=0x8b9, lpOverlapped=0x0) returned 1 [0215.886] CloseHandle (hObject=0x1618) returned 1 [0222.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa398) returned 1 [0222.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf868) returned 1 Thread: id = 6350 os_tid = 0x818 [0190.680] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json")) returned 0x2020 [0190.681] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", dwFileAttributes=0x20) returned 1 [0196.693] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13bc [0196.694] GetFileSizeEx (in: hFile=0x13bc, lpFileSize=0x62efe5c | out: lpFileSize=0x62efe5c*=665) returned 1 [0196.694] SetFilePointerEx (in: hFile=0x13bc, liDistanceToMove=0x295, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.694] ReadFile (in: hFile=0x13bc, lpBuffer=0x62efe38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x62efe48, lpOverlapped=0x0 | out: lpBuffer=0x62efe38*, lpNumberOfBytesRead=0x62efe48*=0x4, lpOverlapped=0x0) returned 1 [0196.697] SetFilePointerEx (in: hFile=0x13bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ec0 [0196.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0196.697] NtQuerySystemTime (in: CurrentTime=0x62efdd0 | out: CurrentTime=0x62efdd0*=132462177752796000) returned 0x0 [0196.697] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x5b12f948 [0196.697] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x67bc516b [0196.697] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x58347b92 [0196.697] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x47be2bf8 [0196.697] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x21bc7889 [0196.697] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x4c4f4f73 [0196.697] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x5989ce74 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x1ba60187 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x63d71515 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x3816227b [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x4cafaa91 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x2ea96fd9 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x3082bcdc [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x15d9d732 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x317ecc82 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x4b32a413 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x3816227b [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x71a54849 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x36e0823a [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x643cadd3 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x7ef6a8d3 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x70575ec3 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x74a0e849 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x47fb2563 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x2891d869 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0xb26b2d9 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x4df6af03 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x3b8f7cc4 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x33e95591 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x36707663 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x2ea96fd9 [0196.698] RtlRandomEx (in: Seed=0x62efdc8 | out: Seed=0x62efdc8) returned 0x58b698bd [0196.709] ReadFile (in: hFile=0x13bc, lpBuffer=0x7abc8c0, nNumberOfBytesToRead=0x299, lpNumberOfBytesRead=0x62efdc4, lpOverlapped=0x0 | out: lpBuffer=0x7abc8c0*, lpNumberOfBytesRead=0x62efdc4*=0x299, lpOverlapped=0x0) returned 1 [0196.709] SetFilePointerEx (in: hFile=0x13bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.709] WriteFile (in: hFile=0x13bc, lpBuffer=0x7ac7cd8*, nNumberOfBytesToWrite=0x299, lpNumberOfBytesWritten=0x62efdc8, lpOverlapped=0x0 | out: lpBuffer=0x7ac7cd8*, lpNumberOfBytesWritten=0x62efdc8*=0x299, lpOverlapped=0x0) returned 1 [0200.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0200.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0200.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0200.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac7cd8) returned 1 [0200.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7abc8c0) returned 1 [0200.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0200.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25350) returned 1 [0200.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37d40 [0200.575] SetFilePointerEx (in: hFile=0x13bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.575] WriteFile (in: hFile=0x13bc, lpBuffer=0x7cd2480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x62efe50, lpOverlapped=0x0 | out: lpBuffer=0x7cd2480*, lpNumberOfBytesWritten=0x62efe50*=0x10c, lpOverlapped=0x0) returned 1 [0200.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0200.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0200.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ba78 [0200.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0200.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0200.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0200.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.871] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="84") returned 2 [0200.871] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="5c") returned 2 [0200.871] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="6c") returned 2 [0200.871] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="e5") returned 2 [0200.871] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="62") returned 2 [0200.871] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="ba") returned 2 [0200.871] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="d2") returned 2 [0200.871] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.871] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.871] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="60") returned 2 [0200.872] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.872] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="90") returned 2 [0200.872] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="ed") returned 2 [0200.872] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.872] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="df") returned 2 [0200.872] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.872] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="64") returned 2 [0200.872] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="57") returned 2 [0200.872] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="25") returned 2 [0200.872] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="4c") returned 2 [0200.872] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="25") returned 2 [0200.872] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="80") returned 2 [0200.872] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="c5") returned 2 [0200.872] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="a5") returned 2 [0200.872] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.872] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.872] RtlInitAnsiString (in: DestinationString=0x62efdd8, SourceString="845c6ce562bad21fbc60b390ed7bdfdd6457254c2580c5a56df4" | out: DestinationString="845c6ce562bad21fbc60b390ed7bdfdd6457254c2580c5a56df4") [0200.872] RtlAnsiStringToUnicodeString (in: DestinationString=0x62efdd0, SourceString="845c6ce562bad21fbc60b390ed7bdfdd6457254c2580c5a56df4", AllocateDestinationString=1 | out: DestinationString="845c6ce562bad21fbc60b390ed7bdfdd6457254c2580c5a56df4") returned 0x0 [0200.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c810 [0200.873] wcscat (in: _Dest=0x7dda4d8, _Source="845c6ce562bad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\845c6ce562bad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\845c6ce562bad" [0200.873] wcscat (in: _Dest=0x7dda4d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\845c6ce562bad.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\845c6ce562bad.68814f" [0200.873] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\845c6ce562bad.68814f", NtPathName=0x62efdc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\845c6ce562bad.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9300 [0201.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9300) returned 1 [0201.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e92d68) returned 1 [0201.479] NtQueryInformationFile (in: FileHandle=0x13bc, IoStatusBlock=0x62efda0, FileInformation=0x62efda8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x62efda0, FileInformation=0x62efda8) returned 0x0 [0201.479] NtSetInformationFile (FileHandle=0x13bc, IoStatusBlock=0x62efda0, FileInformation=0x62efda8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda4d8) returned 1 [0206.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c810) returned 1 [0206.137] FlushFileBuffers (hFile=0x13bc) returned 1 [0206.143] CloseHandle (hObject=0x13bc) returned 1 [0206.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caae00 [0206.563] wcscpy (in: _Dest=0x7caae00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\" [0206.563] wcscat (in: _Dest=0x7caae00, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\68814F-Readme.txt" [0206.563] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\68814f-readme.txt")) returned 0xffffffff [0206.563] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.303] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x62efde4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x62efde4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.310] CloseHandle (hObject=0x17ec) returned 1 [0210.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caae00) returned 1 [0210.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf990) returned 1 Thread: id = 6351 os_tid = 0x828 [0190.681] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json")) returned 0x2020 [0190.681] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", dwFileAttributes=0x20) returned 1 [0196.710] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b14 [0196.710] GetFileSizeEx (in: hFile=0x1b14, lpFileSize=0xa97f804 | out: lpFileSize=0xa97f804*=450) returned 1 [0196.710] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x1be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.710] ReadFile (in: hFile=0x1b14, lpBuffer=0xa97f7e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa97f7f0, lpOverlapped=0x0 | out: lpBuffer=0xa97f7e0*, lpNumberOfBytesRead=0xa97f7f0*=0x4, lpOverlapped=0x0) returned 1 [0196.712] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0196.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0196.713] NtQuerySystemTime (in: CurrentTime=0xa97f778 | out: CurrentTime=0xa97f778*=132462177752952000) returned 0x0 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x4f8d2a35 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x709160e0 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x1e0245ed [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x778199eb [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x3b493989 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x7abecf69 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x14609249 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x18e32d2d [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x46bfbb64 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x5de00a63 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x536f7cfe [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x2e93f3e4 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x7e1fcfd2 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x64924376 [0196.713] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x293e8ab7 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x491d6652 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x199a3ee0 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x8acd5f6 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x5dc2ada8 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x1586f2cd [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x56c6d150 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x597e8616 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x177dda40 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x174668a6 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x7e19f31d [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0xeb1b053 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x54d9f419 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x6655d9d1 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x14597f47 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x5e956a50 [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x73eadda [0196.714] RtlRandomEx (in: Seed=0xa97f770 | out: Seed=0xa97f770) returned 0x529d6e5c [0196.726] ReadFile (in: hFile=0x1b14, lpBuffer=0x7acb8e0, nNumberOfBytesToRead=0x1c2, lpNumberOfBytesRead=0xa97f76c, lpOverlapped=0x0 | out: lpBuffer=0x7acb8e0*, lpNumberOfBytesRead=0xa97f76c*=0x1c2, lpOverlapped=0x0) returned 1 [0196.726] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.726] WriteFile (in: hFile=0x1b14, lpBuffer=0x7b3a320*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0xa97f770, lpOverlapped=0x0 | out: lpBuffer=0x7b3a320*, lpNumberOfBytesWritten=0xa97f770*=0x1c2, lpOverlapped=0x0) returned 1 [0199.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd7b8 [0199.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb1e8 [0199.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb1e8) returned 1 [0199.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3a320) returned 1 [0199.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acb8e0) returned 1 [0199.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 [0199.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25548) returned 1 [0199.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ec0 [0199.870] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.871] WriteFile (in: hFile=0x1b14, lpBuffer=0x7b7c668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa97f7f8, lpOverlapped=0x0 | out: lpBuffer=0x7b7c668*, lpNumberOfBytesWritten=0xa97f7f8*=0x10c, lpOverlapped=0x0) returned 1 [0200.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0200.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d08) returned 1 [0200.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3d08 [0200.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ee8 [0200.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0200.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0200.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.237] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.237] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="02") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="8d") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="8d") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="93") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="62") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="4b") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="53") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="b2") returned 2 [0200.237] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="db") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="e4") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="2f") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="65") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="45") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="68") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="0a") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="46") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="85") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="03") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="05") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="8f") returned 2 [0200.238] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.238] RtlInitAnsiString (in: DestinationString=0xa97f780, SourceString="025a8d8dbcb393624b53b2dbe4ce2fff6545680a468503058fb3" | out: DestinationString="025a8d8dbcb393624b53b2dbe4ce2fff6545680a468503058fb3") [0200.238] RtlAnsiStringToUnicodeString (in: DestinationString=0xa97f778, SourceString="025a8d8dbcb393624b53b2dbe4ce2fff6545680a468503058fb3", AllocateDestinationString=1 | out: DestinationString="025a8d8dbcb393624b53b2dbe4ce2fff6545680a468503058fb3") returned 0x0 [0200.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e9b8 [0200.238] wcscat (in: _Dest=0x7a5eb88, _Source="025a8d8dbcb39" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\025a8d8dbcb39") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\025a8d8dbcb39" [0200.238] wcscat (in: _Dest=0x7a5eb88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\025a8d8dbcb39.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\025a8d8dbcb39.68814f" [0200.238] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\025a8d8dbcb39.68814f", NtPathName=0xa97f770, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\025a8d8dbcb39.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea4998 [0201.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4998) returned 1 [0201.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccd608) returned 1 [0201.467] NtQueryInformationFile (in: FileHandle=0x1b14, IoStatusBlock=0xa97f748, FileInformation=0xa97f750, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa97f748, FileInformation=0xa97f750) returned 0x0 [0201.467] NtSetInformationFile (FileHandle=0x1b14, IoStatusBlock=0xa97f748, FileInformation=0xa97f750, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5eb88) returned 1 [0206.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.374] FlushFileBuffers (hFile=0x1b14) returned 1 [0206.377] CloseHandle (hObject=0x1b14) returned 1 [0208.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01390 [0208.829] wcscpy (in: _Dest=0x3e01390, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\" [0208.829] wcscat (in: _Dest=0x3e01390, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\68814F-Readme.txt" [0208.829] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\68814f-readme.txt")) returned 0xffffffff [0208.829] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.864] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa97f78c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa97f78c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.866] CloseHandle (hObject=0x16e0) returned 1 [0209.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01390) returned 1 [0209.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cafab8) returned 1 Thread: id = 6352 os_tid = 0x848 [0190.682] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json")) returned 0x2020 [0190.682] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0196.727] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18d4 [0196.727] GetFileSizeEx (in: hFile=0x18d4, lpFileSize=0xa91fb14 | out: lpFileSize=0xa91fb14*=217) returned 1 [0196.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0196.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0196.727] NtQuerySystemTime (in: CurrentTime=0xa91fa88 | out: CurrentTime=0xa91fa88*=132462177753108000) returned 0x0 [0196.727] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x459ddf49 [0196.727] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x69242af4 [0196.727] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x7e19f31d [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x3998d9b5 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x7b2dd7e9 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x70575ec3 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x362b6268 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x2e43e6cc [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x6663f257 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x18541600 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x33826743 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x4cafaa91 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x2e93f3e4 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x656982fe [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x17a8b300 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x440db181 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x20430b03 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x17530180 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x280be927 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x192a51c0 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x7340b101 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x681307fe [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x1ea085b9 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x498da63c [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0xe53e442 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x14609249 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x14dd5603 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x7a4d2086 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x67ce16b1 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x751c764e [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x18293d40 [0196.728] RtlRandomEx (in: Seed=0xa91fa80 | out: Seed=0xa91fa80) returned 0x3998d9b5 [0196.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b3df28 [0196.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b41b30 [0196.745] ReadFile (in: hFile=0x18d4, lpBuffer=0x7b3df28, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0xa91fa7c, lpOverlapped=0x0 | out: lpBuffer=0x7b3df28*, lpNumberOfBytesRead=0xa91fa7c*=0xd9, lpOverlapped=0x0) returned 1 [0196.749] SetFilePointerEx (in: hFile=0x18d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.749] WriteFile (in: hFile=0x18d4, lpBuffer=0x7b41b30*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0xa91fa80, lpOverlapped=0x0 | out: lpBuffer=0x7b41b30*, lpNumberOfBytesWritten=0xa91fa80*=0xd9, lpOverlapped=0x0) returned 1 [0199.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddec0 [0199.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb558 [0199.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb558) returned 1 [0199.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b41b30) returned 1 [0199.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3df28) returned 1 [0199.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0199.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e00) returned 1 [0199.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37f80 [0199.878] SetFilePointerEx (in: hFile=0x18d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.878] WriteFile (in: hFile=0x18d4, lpBuffer=0x7b7d388*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa91fb08, lpOverlapped=0x0 | out: lpBuffer=0x7b7d388*, lpNumberOfBytesWritten=0xa91fb08*=0x10c, lpOverlapped=0x0) returned 1 [0200.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fc0 [0200.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fc0) returned 1 [0200.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2fc0 [0200.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0200.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0200.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0200.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.249] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="81") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="17") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="c8") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="c8") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="06") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="19") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="64") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="42") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="93") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="ec") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="95") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="e6") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="b1") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="2b") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="54") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="2d") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="f5") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.249] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="38") returned 2 [0200.250] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="37") returned 2 [0200.250] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="15") returned 2 [0200.250] RtlInitAnsiString (in: DestinationString=0xa91fa90, SourceString="81ac17c8c8061f19d3644293f70cec95e6b12b542df5bb383715" | out: DestinationString="81ac17c8c8061f19d3644293f70cec95e6b12b542df5bb383715") [0200.250] RtlAnsiStringToUnicodeString (in: DestinationString=0xa91fa88, SourceString="81ac17c8c8061f19d3644293f70cec95e6b12b542df5bb383715", AllocateDestinationString=1 | out: DestinationString="81ac17c8c8061f19d3644293f70cec95e6b12b542df5bb383715") returned 0x0 [0200.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e580 [0200.250] wcscat (in: _Dest=0x7a5edf8, _Source="81ac17c8c8061" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\81ac17c8c8061") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\81ac17c8c8061" [0200.250] wcscat (in: _Dest=0x7a5edf8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\81ac17c8c8061.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\81ac17c8c8061.68814f" [0200.250] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\81ac17c8c8061.68814f", NtPathName=0xa91fa80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\81ac17c8c8061.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b86320 [0201.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86320) returned 1 [0201.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccda58) returned 1 [0201.466] NtQueryInformationFile (in: FileHandle=0x18d4, IoStatusBlock=0xa91fa58, FileInformation=0xa91fa60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa91fa58, FileInformation=0xa91fa60) returned 0x0 [0201.466] NtSetInformationFile (FileHandle=0x18d4, IoStatusBlock=0xa91fa58, FileInformation=0xa91fa60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5edf8) returned 1 [0206.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0206.368] FlushFileBuffers (hFile=0x18d4) returned 1 [0206.377] CloseHandle (hObject=0x18d4) returned 1 [0208.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01268 [0208.826] wcscpy (in: _Dest=0x3e01268, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\" [0208.826] wcscat (in: _Dest=0x3e01268, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\68814F-Readme.txt" [0208.826] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\68814f-readme.txt")) returned 0xffffffff [0208.826] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.842] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa91fa9c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa91fa9c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.843] CloseHandle (hObject=0x16e0) returned 1 [0209.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01268) returned 1 [0209.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cafbe0) returned 1 Thread: id = 6353 os_tid = 0x858 [0190.683] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json")) returned 0x2020 [0190.683] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", dwFileAttributes=0x20) returned 1 [0196.749] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x153c [0196.750] GetFileSizeEx (in: hFile=0x153c, lpFileSize=0x85ffadc | out: lpFileSize=0x85ffadc*=327) returned 1 [0196.750] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x143, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.750] ReadFile (in: hFile=0x153c, lpBuffer=0x85ffab8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x85ffac8, lpOverlapped=0x0 | out: lpBuffer=0x85ffab8*, lpNumberOfBytesRead=0x85ffac8*=0x4, lpOverlapped=0x0) returned 1 [0196.751] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0196.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0196.752] NtQuerySystemTime (in: CurrentTime=0x85ffa50 | out: CurrentTime=0x85ffa50*=132462177753264000) returned 0x0 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x1ba60187 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x568dc1d [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x7c03a835 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x339d9420 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0xe719316 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x4275fdf [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x7c82ed56 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x2f1319bd [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x1630cff0 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x3a2e4d22 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x41451a0b [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x6d1ad53a [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x19ffd88d [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x52f2b597 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x2cd3fec4 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x2c02c5d6 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x77fea098 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x684d2b2 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x53a0ee17 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x250587e5 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x74a0e849 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x3b483d37 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x68eef202 [0196.752] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x4d1dbd6 [0196.753] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x18d60d70 [0196.753] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x4ed39736 [0196.753] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x50dea37 [0196.753] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x4006d296 [0196.753] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x19d5b4c0 [0196.753] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x7f13d700 [0196.753] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x2fc877f [0196.753] RtlRandomEx (in: Seed=0x85ffa48 | out: Seed=0x85ffa48) returned 0x5c29e4c0 [0196.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b45738 [0196.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b49340 [0196.762] ReadFile (in: hFile=0x153c, lpBuffer=0x7b45738, nNumberOfBytesToRead=0x147, lpNumberOfBytesRead=0x85ffa44, lpOverlapped=0x0 | out: lpBuffer=0x7b45738*, lpNumberOfBytesRead=0x85ffa44*=0x147, lpOverlapped=0x0) returned 1 [0196.762] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.762] WriteFile (in: hFile=0x153c, lpBuffer=0x7b49340*, nNumberOfBytesToWrite=0x147, lpNumberOfBytesWritten=0x85ffa48, lpOverlapped=0x0 | out: lpBuffer=0x7b49340*, lpNumberOfBytesWritten=0x85ffa48*=0x147, lpOverlapped=0x0) returned 1 [0199.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb8a0 [0199.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb940 [0199.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb940) returned 1 [0199.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b49340) returned 1 [0199.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b45738) returned 1 [0199.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0199.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a256b0) returned 1 [0199.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37f20 [0199.874] SetFilePointerEx (in: hFile=0x153c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.874] WriteFile (in: hFile=0x153c, lpBuffer=0x7b7cf28*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x85ffad0, lpOverlapped=0x0 | out: lpBuffer=0x7b7cf28*, lpNumberOfBytesWritten=0x85ffad0*=0x10c, lpOverlapped=0x0) returned 1 [0200.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0200.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c50) returned 1 [0200.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2c50 [0200.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0200.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0200.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3998) returned 1 [0200.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.241] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.242] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="eb") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="6f") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="61") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="99") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="f0") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="71") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="bd") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="9f") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="af") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="89") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="46") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="03") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="cc") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="18") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="10") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="74") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="58") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="c5") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="20") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="ab") returned 2 [0200.242] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.243] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="c1") returned 2 [0200.243] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="fa") returned 2 [0200.243] RtlInitAnsiString (in: DestinationString=0x85ffa58, SourceString="eb6f6199f071bda29fdcafdd894603cc18107458c520abf7c1fa" | out: DestinationString="eb6f6199f071bda29fdcafdd894603cc18107458c520abf7c1fa") [0200.243] RtlAnsiStringToUnicodeString (in: DestinationString=0x85ffa50, SourceString="eb6f6199f071bda29fdcafdd894603cc18107458c520abf7c1fa", AllocateDestinationString=1 | out: DestinationString="eb6f6199f071bda29fdcafdd894603cc18107458c520abf7c1fa") returned 0x0 [0200.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e0d0 [0200.243] wcscat (in: _Dest=0x7a5ecc0, _Source="eb6f6199f071b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\eb6f6199f071b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\eb6f6199f071b" [0200.243] wcscat (in: _Dest=0x7a5ecc0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\eb6f6199f071b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\eb6f6199f071b.68814f" [0200.243] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\eb6f6199f071b.68814f", NtPathName=0x85ffa48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\eb6f6199f071b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea4ae0 [0201.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea4ae0) returned 1 [0201.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccd830) returned 1 [0201.466] NtQueryInformationFile (in: FileHandle=0x153c, IoStatusBlock=0x85ffa20, FileInformation=0x85ffa28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x85ffa20, FileInformation=0x85ffa28) returned 0x0 [0201.466] NtSetInformationFile (FileHandle=0x153c, IoStatusBlock=0x85ffa20, FileInformation=0x85ffa28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ecc0) returned 1 [0206.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0206.295] FlushFileBuffers (hFile=0x153c) returned 1 [0206.298] CloseHandle (hObject=0x153c) returned 1 [0208.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cabd08 [0208.762] wcscpy (in: _Dest=0x7cabd08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\" [0208.762] wcscat (in: _Dest=0x7cabd08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\68814F-Readme.txt" [0208.762] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\68814f-readme.txt")) returned 0xffffffff [0208.762] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.777] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x85ffa64, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x85ffa64*=0x8b9, lpOverlapped=0x0) returned 1 [0209.779] CloseHandle (hObject=0x16e0) returned 1 [0209.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabd08) returned 1 [0209.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cafd08) returned 1 Thread: id = 6354 os_tid = 0x868 [0190.683] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json")) returned 0x2020 [0190.684] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", dwFileAttributes=0x20) returned 1 [0196.762] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc50 [0196.763] GetFileSizeEx (in: hFile=0xc50, lpFileSize=0x940f87c | out: lpFileSize=0x940f87c*=607) returned 1 [0196.763] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x25b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.763] ReadFile (in: hFile=0xc50, lpBuffer=0x940f858, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x940f868, lpOverlapped=0x0 | out: lpBuffer=0x940f858*, lpNumberOfBytesRead=0x940f868*=0x4, lpOverlapped=0x0) returned 1 [0196.765] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0196.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0196.766] NtQuerySystemTime (in: CurrentTime=0x940f7f0 | out: CurrentTime=0x940f7f0*=132462177753420000) returned 0x0 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x310ab54a [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x17fe6480 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x62305fc0 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x501fe98f [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x7765d245 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x30a83073 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x41480efc [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x65738da1 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x6ce0a3c9 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x1cde247e [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x247d0c8d [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0xaa92f3f [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x3fd586ae [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x7950d2b2 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x5f2d2240 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x3ecb4fa6 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x501ceec0 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x43ffae37 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x232d5c52 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x5e94c9d9 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x3bb2e3d4 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x60d4bd06 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x21e36de1 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x5c36b38c [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x1eaf421a [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x18994436 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x16fd5000 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0xa8a29f1 [0196.766] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x400d1eb5 [0196.767] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x71829037 [0196.767] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x499b7ff3 [0196.767] RtlRandomEx (in: Seed=0x940f7e8 | out: Seed=0x940f7e8) returned 0x11b50cc3 [0196.776] ReadFile (in: hFile=0xc50, lpBuffer=0x7b4cf48, nNumberOfBytesToRead=0x25f, lpNumberOfBytesRead=0x940f7e4, lpOverlapped=0x0 | out: lpBuffer=0x7b4cf48*, lpNumberOfBytesRead=0x940f7e4*=0x25f, lpOverlapped=0x0) returned 1 [0196.776] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.776] WriteFile (in: hFile=0xc50, lpBuffer=0x7b50b50*, nNumberOfBytesToWrite=0x25f, lpNumberOfBytesWritten=0x940f7e8, lpOverlapped=0x0 | out: lpBuffer=0x7b50b50*, lpNumberOfBytesWritten=0x940f7e8*=0x25f, lpOverlapped=0x0) returned 1 [0199.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddbf0 [0199.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb580 [0199.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb580) returned 1 [0199.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b50b50) returned 1 [0199.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b4cf48) returned 1 [0199.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0199.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a254b8) returned 1 [0199.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a380a0 [0199.887] SetFilePointerEx (in: hFile=0xc50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.887] WriteFile (in: hFile=0xc50, lpBuffer=0x7b7c438*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x940f870, lpOverlapped=0x0 | out: lpBuffer=0x7b7c438*, lpNumberOfBytesWritten=0x940f870*=0x10c, lpOverlapped=0x0) returned 1 [0200.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0200.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0200.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3b78 [0200.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0200.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0200.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0200.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.257] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="e2") returned 2 [0200.257] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="65") returned 2 [0200.257] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="9d") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="df") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="84") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="27") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="58") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="fd") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="fb") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="71") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="94") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="09") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="90") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="69") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="db") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="02") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="f5") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="82") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="62") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="9d") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="b2") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="7e") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.258] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="01") returned 2 [0200.258] RtlInitAnsiString (in: DestinationString=0x940f7f8, SourceString="e2659ddf842758fdfb7194099069db02f57ad982629db27e1f01" | out: DestinationString="e2659ddf842758fdfb7194099069db02f57ad982629db27e1f01") [0200.258] RtlAnsiStringToUnicodeString (in: DestinationString=0x940f7f0, SourceString="e2659ddf842758fdfb7194099069db02f57ad982629db27e1f01", AllocateDestinationString=1 | out: DestinationString="e2659ddf842758fdfb7194099069db02f57ad982629db27e1f01") returned 0x0 [0200.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e148 [0200.259] wcscat (in: _Dest=0x7a5f068, _Source="e2659ddf84275" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\e2659ddf84275") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\e2659ddf84275" [0200.259] wcscat (in: _Dest=0x7a5f068, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\e2659ddf84275.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\e2659ddf84275.68814f" [0200.259] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\e2659ddf84275.68814f", NtPathName=0x940f7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\e2659ddf84275.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b865b0 [0201.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b865b0) returned 1 [0201.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccdea8) returned 1 [0201.465] NtQueryInformationFile (in: FileHandle=0xc50, IoStatusBlock=0x940f7c0, FileInformation=0x940f7c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x940f7c0, FileInformation=0x940f7c8) returned 0x0 [0201.465] NtSetInformationFile (FileHandle=0xc50, IoStatusBlock=0x940f7c0, FileInformation=0x940f7c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f068) returned 1 [0206.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0206.301] FlushFileBuffers (hFile=0xc50) returned 1 [0206.302] CloseHandle (hObject=0xc50) returned 1 [0208.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e00800 [0208.768] wcscpy (in: _Dest=0x3e00800, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\" [0208.768] wcscat (in: _Dest=0x3e00800, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\68814F-Readme.txt" [0208.768] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\68814f-readme.txt")) returned 0xffffffff [0208.768] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.786] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x940f804, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x940f804*=0x8b9, lpOverlapped=0x0) returned 1 [0209.787] CloseHandle (hObject=0x16e0) returned 1 [0209.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00800) returned 1 [0209.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cafe30) returned 1 Thread: id = 6355 os_tid = 0x878 [0190.684] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json")) returned 0x2020 [0190.685] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", dwFileAttributes=0x20) returned 1 [0196.765] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14d8 [0196.776] GetFileSizeEx (in: hFile=0x14d8, lpFileSize=0xa64f83c | out: lpFileSize=0xa64f83c*=357) returned 1 [0196.777] SetFilePointerEx (in: hFile=0x14d8, liDistanceToMove=0x161, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.777] ReadFile (in: hFile=0x14d8, lpBuffer=0xa64f818, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa64f828, lpOverlapped=0x0 | out: lpBuffer=0xa64f818*, lpNumberOfBytesRead=0xa64f828*=0x4, lpOverlapped=0x0) returned 1 [0196.778] SetFilePointerEx (in: hFile=0x14d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0196.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0196.778] NtQuerySystemTime (in: CurrentTime=0xa64f7b0 | out: CurrentTime=0xa64f7b0*=132462177753576000) returned 0x0 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x7c03a835 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x4d6bfad3 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x109ae1b2 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x70cdf3ef [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x225c0ef1 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x351a922b [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0xe53e442 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x1665af65 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x1f32fb91 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x537d043b [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x3c15936c [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x44a8bf95 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x5a3caef8 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0xa4aae77 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x562369c0 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x1135b69f [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x53338afc [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x86ff38b [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x75c1da21 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x65927d3d [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x26603a00 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x597c7521 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x673797bc [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x18aa78a7 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x645a5f86 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x30ee3d40 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x6693b646 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x1ad736d9 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x66054817 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x353fc365 [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x56e04c1a [0196.779] RtlRandomEx (in: Seed=0xa64f7a8 | out: Seed=0xa64f7a8) returned 0x1a1b65ef [0196.788] ReadFile (in: hFile=0x14d8, lpBuffer=0x7b54758, nNumberOfBytesToRead=0x165, lpNumberOfBytesRead=0xa64f7a4, lpOverlapped=0x0 | out: lpBuffer=0x7b54758*, lpNumberOfBytesRead=0xa64f7a4*=0x165, lpOverlapped=0x0) returned 1 [0196.789] SetFilePointerEx (in: hFile=0x14d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.789] WriteFile (in: hFile=0x14d8, lpBuffer=0x7b58360*, nNumberOfBytesToWrite=0x165, lpNumberOfBytesWritten=0xa64f7a8, lpOverlapped=0x0 | out: lpBuffer=0x7b58360*, lpNumberOfBytesWritten=0xa64f7a8*=0x165, lpOverlapped=0x0) returned 1 [0199.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb300 [0199.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd790 [0199.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd790) returned 1 [0199.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b58360) returned 1 [0199.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b54758) returned 1 [0199.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0199.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25aa0) returned 1 [0199.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37fe0 [0199.880] SetFilePointerEx (in: hFile=0x14d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.880] WriteFile (in: hFile=0x14d8, lpBuffer=0x7b7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa64f830, lpOverlapped=0x0 | out: lpBuffer=0x7b7d270*, lpNumberOfBytesWritten=0xa64f830*=0x10c, lpOverlapped=0x0) returned 1 [0200.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0200.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0200.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4528 [0200.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0200.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0200.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0200.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.253] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.253] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="a7") returned 2 [0200.253] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="18") returned 2 [0200.253] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="e6") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="25") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="25") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="f5") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="75") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="ba") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="01") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="c9") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="ec") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="b1") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="7e") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="99") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="6c") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="ea") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="af") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="d0") returned 2 [0200.254] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="44") returned 2 [0200.254] RtlInitAnsiString (in: DestinationString=0xa64f7b8, SourceString="6da718e625ffc025f5756dbaff01c9ecb17e99bc6cb6eaafd044" | out: DestinationString="6da718e625ffc025f5756dbaff01c9ecb17e99bc6cb6eaafd044") [0200.254] RtlAnsiStringToUnicodeString (in: DestinationString=0xa64f7b0, SourceString="6da718e625ffc025f5756dbaff01c9ecb17e99bc6cb6eaafd044", AllocateDestinationString=1 | out: DestinationString="6da718e625ffc025f5756dbaff01c9ecb17e99bc6cb6eaafd044") returned 0x0 [0200.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e058 [0200.255] wcscat (in: _Dest=0x7a5ef30, _Source="6da718e625ffc" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\6da718e625ffc") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\6da718e625ffc" [0200.255] wcscat (in: _Dest=0x7a5ef30, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\6da718e625ffc.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\6da718e625ffc.68814f" [0200.255] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\6da718e625ffc.68814f", NtPathName=0xa64f7a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\6da718e625ffc.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b86468 [0201.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86468) returned 1 [0201.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccdc80) returned 1 [0201.465] NtQueryInformationFile (in: FileHandle=0x14d8, IoStatusBlock=0xa64f780, FileInformation=0xa64f788, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa64f780, FileInformation=0xa64f788) returned 0x0 [0201.465] NtSetInformationFile (FileHandle=0x14d8, IoStatusBlock=0xa64f780, FileInformation=0xa64f788, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ef30) returned 1 [0206.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0206.297] FlushFileBuffers (hFile=0x14d8) returned 1 [0206.302] CloseHandle (hObject=0x14d8) returned 1 [0208.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cabe30 [0208.767] wcscpy (in: _Dest=0x7cabe30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\" [0208.767] wcscat (in: _Dest=0x7cabe30, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\68814F-Readme.txt" [0208.767] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\68814f-readme.txt")) returned 0xffffffff [0208.767] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.781] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa64f7c4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa64f7c4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.783] CloseHandle (hObject=0x16e0) returned 1 [0209.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabe30) returned 1 [0209.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb0020) returned 1 Thread: id = 6356 os_tid = 0xe48 [0190.685] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json")) returned 0x2020 [0190.685] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0196.789] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x165c [0196.789] GetFileSizeEx (in: hFile=0x165c, lpFileSize=0xa9cfa1c | out: lpFileSize=0xa9cfa1c*=251) returned 1 [0196.790] SetFilePointerEx (in: hFile=0x165c, liDistanceToMove=0xf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.790] ReadFile (in: hFile=0x165c, lpBuffer=0xa9cf9f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa9cfa08, lpOverlapped=0x0 | out: lpBuffer=0xa9cf9f8*, lpNumberOfBytesRead=0xa9cfa08*=0x4, lpOverlapped=0x0) returned 1 [0196.791] SetFilePointerEx (in: hFile=0x165c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0196.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0196.791] NtQuerySystemTime (in: CurrentTime=0xa9cf990 | out: CurrentTime=0xa9cf990*=132462177753732000) returned 0x0 [0196.791] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x467ba223 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x4d3bebbe [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x7ae0843b [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x72f1b1d2 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x7ca977cb [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x64743be3 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x656ce003 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x5da13b89 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x401aad54 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x2135b392 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x551e04de [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x1b74fa8d [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x28cdf442 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x61eaae1f [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x385ea961 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x93f9642 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x5b505c78 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x73bbc6df [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x4a3e78d5 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x39fe2dcb [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0xeca9050 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x78512f2e [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x142c97a7 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x659c71a4 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x11c661d6 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x42490cd0 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x231bd046 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x77e6eeb9 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x7f6fc7e4 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x751f5dec [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x5926a740 [0196.792] RtlRandomEx (in: Seed=0xa9cf988 | out: Seed=0xa9cf988) returned 0x7b113c2c [0196.804] ReadFile (in: hFile=0x165c, lpBuffer=0x7b5bf68, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0xa9cf984, lpOverlapped=0x0 | out: lpBuffer=0x7b5bf68*, lpNumberOfBytesRead=0xa9cf984*=0xfb, lpOverlapped=0x0) returned 1 [0196.804] SetFilePointerEx (in: hFile=0x165c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.804] WriteFile (in: hFile=0x165c, lpBuffer=0x7b5fb70*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0xa9cf988, lpOverlapped=0x0 | out: lpBuffer=0x7b5fb70*, lpNumberOfBytesWritten=0xa9cf988*=0xfb, lpOverlapped=0x0) returned 1 [0199.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd588 [0199.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddda8 [0199.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddda8) returned 1 [0199.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5fb70) returned 1 [0199.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5bf68) returned 1 [0199.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0199.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ed8) returned 1 [0199.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a381c0 [0199.895] SetFilePointerEx (in: hFile=0x165c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.895] WriteFile (in: hFile=0x165c, lpBuffer=0x7cac8e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa9cfa10, lpOverlapped=0x0 | out: lpBuffer=0x7cac8e0*, lpNumberOfBytesWritten=0xa9cfa10*=0x10c, lpOverlapped=0x0) returned 1 [0200.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0200.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30b0) returned 1 [0200.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec30b0 [0200.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0200.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0200.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4140) returned 1 [0200.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.274] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="37") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="4d") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="22") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="62") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="b2") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="7c") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="58") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="83") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="37") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="70") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="ae") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="97") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="17") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="f5") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="1c") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="17") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="5c") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="b7") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="e7") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="26") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="27") returned 2 [0200.274] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.275] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="94") returned 2 [0200.275] RtlInitAnsiString (in: DestinationString=0xa9cf998, SourceString="374d2262b27cb3b3588337e870ae9717f51c175cb7e72627a694" | out: DestinationString="374d2262b27cb3b3588337e870ae9717f51c175cb7e72627a694") [0200.275] RtlAnsiStringToUnicodeString (in: DestinationString=0xa9cf990, SourceString="374d2262b27cb3b3588337e870ae9717f51c175cb7e72627a694", AllocateDestinationString=1 | out: DestinationString="374d2262b27cb3b3588337e870ae9717f51c175cb7e72627a694") returned 0x0 [0200.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e760 [0200.275] wcscat (in: _Dest=0x7a5f548, _Source="374d2262b27cb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\374d2262b27cb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\374d2262b27cb" [0200.275] wcscat (in: _Dest=0x7a5f548, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\374d2262b27cb.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\374d2262b27cb.68814f" [0200.275] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\374d2262b27cb.68814f", NtPathName=0xa9cf988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\374d2262b27cb.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b86ad0 [0201.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86ad0) returned 1 [0201.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cce748) returned 1 [0201.464] NtQueryInformationFile (in: FileHandle=0x165c, IoStatusBlock=0xa9cf960, FileInformation=0xa9cf968, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa9cf960, FileInformation=0xa9cf968) returned 0x0 [0201.464] NtSetInformationFile (FileHandle=0x165c, IoStatusBlock=0xa9cf960, FileInformation=0xa9cf968, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f548) returned 1 [0205.957] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0205.958] FlushFileBuffers (hFile=0x165c) returned 1 [0205.983] CloseHandle (hObject=0x165c) returned 1 [0206.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caa020 [0206.307] wcscpy (in: _Dest=0x7caa020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\" [0206.307] wcscat (in: _Dest=0x7caa020, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\68814F-Readme.txt" [0206.307] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\68814f-readme.txt")) returned 0xffffffff [0206.307] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1814 [0210.252] WriteFile (in: hFile=0x1814, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa9cf9a4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa9cf9a4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.254] CloseHandle (hObject=0x1814) returned 1 [0210.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa020) returned 1 [0210.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb0148) returned 1 Thread: id = 6357 os_tid = 0x1b00 [0190.686] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json")) returned 0x2020 [0190.686] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", dwFileAttributes=0x20) returned 1 [0196.804] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc9c [0196.805] GetFileSizeEx (in: hFile=0xc9c, lpFileSize=0xaa3f984 | out: lpFileSize=0xaa3f984*=362) returned 1 [0196.805] SetFilePointerEx (in: hFile=0xc9c, liDistanceToMove=0x166, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.805] ReadFile (in: hFile=0xc9c, lpBuffer=0xaa3f960, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaa3f970, lpOverlapped=0x0 | out: lpBuffer=0xaa3f960*, lpNumberOfBytesRead=0xaa3f970*=0x4, lpOverlapped=0x0) returned 1 [0196.807] SetFilePointerEx (in: hFile=0xc9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0196.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0196.807] NtQuerySystemTime (in: CurrentTime=0xaa3f8f8 | out: CurrentTime=0xaa3f8f8*=132462177753888000) returned 0x0 [0196.807] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0xfdfe8ae [0196.807] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x55cfad31 [0196.807] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x4f68a6d6 [0196.807] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x479b80bf [0196.807] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x45ebf048 [0196.807] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x59876f1e [0196.807] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x24a927eb [0196.807] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x4b78d3ee [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x57ce634e [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x35992209 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x3b3b9b1a [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0xd668631 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x531100a3 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x6b6459a9 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x33279400 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x7ee5de85 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x4046274f [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x5f5cd7c4 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x4b530e39 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x15b4660f [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x5e624410 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x63d8f476 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x499d2ec9 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x5e583f7f [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x172828c0 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x3e3a81c [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x4e6a4f8d [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x7f74918 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x4ce038de [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x6b3a1840 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0xa45a8a7 [0196.808] RtlRandomEx (in: Seed=0xaa3f8f0 | out: Seed=0xaa3f8f0) returned 0x418442a2 [0196.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b63778 [0196.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b67380 [0196.820] ReadFile (in: hFile=0xc9c, lpBuffer=0x7b63778, nNumberOfBytesToRead=0x16a, lpNumberOfBytesRead=0xaa3f8ec, lpOverlapped=0x0 | out: lpBuffer=0x7b63778*, lpNumberOfBytesRead=0xaa3f8ec*=0x16a, lpOverlapped=0x0) returned 1 [0196.820] SetFilePointerEx (in: hFile=0xc9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.820] WriteFile (in: hFile=0xc9c, lpBuffer=0x7b67380*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0xaa3f8f0, lpOverlapped=0x0 | out: lpBuffer=0x7b67380*, lpNumberOfBytesWritten=0xaa3f8f0*=0x16a, lpOverlapped=0x0) returned 1 [0199.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd998 [0199.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddf38 [0199.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddf38) returned 1 [0199.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b67380) returned 1 [0199.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b63778) returned 1 [0199.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0199.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25a58) returned 1 [0199.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38040 [0199.883] SetFilePointerEx (in: hFile=0xc9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.883] WriteFile (in: hFile=0xc9c, lpBuffer=0x7b7e1c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaa3f978, lpOverlapped=0x0 | out: lpBuffer=0x7b7e1c0*, lpNumberOfBytesWritten=0xaa3f978*=0x10c, lpOverlapped=0x0) returned 1 [0200.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0200.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31a0) returned 1 [0200.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec31a0 [0200.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0200.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0200.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0200.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.261] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="b8") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="1d") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="98") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="35") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="75") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="55") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="4c") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="78") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="68") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="48") returned 2 [0200.261] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="e6") returned 2 [0200.262] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="2a") returned 2 [0200.262] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.262] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="d6") returned 2 [0200.262] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="81") returned 2 [0200.262] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.262] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="9c") returned 2 [0200.262] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="81") returned 2 [0200.262] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="c3") returned 2 [0200.262] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.262] RtlInitAnsiString (in: DestinationString=0xaa3f900, SourceString="acb81d98356db675554cce78b3683d48e62affd6816d9c81c33d" | out: DestinationString="acb81d98356db675554cce78b3683d48e62affd6816d9c81c33d") [0200.262] RtlAnsiStringToUnicodeString (in: DestinationString=0xaa3f8f8, SourceString="acb81d98356db675554cce78b3683d48e62affd6816d9c81c33d", AllocateDestinationString=1 | out: DestinationString="acb81d98356db675554cce78b3683d48e62affd6816d9c81c33d") returned 0x0 [0200.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3de00 [0200.262] wcscat (in: _Dest=0x7a5f1a0, _Source="acb81d98356db" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\acb81d98356db") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\acb81d98356db" [0200.262] wcscat (in: _Dest=0x7a5f1a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\acb81d98356db.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\acb81d98356db.68814f" [0200.262] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\acb81d98356db.68814f", NtPathName=0xaa3f8f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\acb81d98356db.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b866f8 [0201.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b866f8) returned 1 [0201.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cce0d0) returned 1 [0201.465] NtQueryInformationFile (in: FileHandle=0xc9c, IoStatusBlock=0xaa3f8c8, FileInformation=0xaa3f8d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaa3f8c8, FileInformation=0xaa3f8d0) returned 0x0 [0201.465] NtSetInformationFile (FileHandle=0xc9c, IoStatusBlock=0xaa3f8c8, FileInformation=0xaa3f8d0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 [0205.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0205.981] FlushFileBuffers (hFile=0xc9c) returned 1 [0205.993] CloseHandle (hObject=0xc9c) returned 1 [0206.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caa270 [0206.311] wcscpy (in: _Dest=0x7caa270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\" [0206.311] wcscat (in: _Dest=0x7caa270, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\68814F-Readme.txt" [0206.378] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\68814f-readme.txt")) returned 0xffffffff [0206.378] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1814 [0210.258] WriteFile (in: hFile=0x1814, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaa3f90c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xaa3f90c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.259] CloseHandle (hObject=0x1814) returned 1 [0210.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa270) returned 1 [0210.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb0270) returned 1 Thread: id = 6358 os_tid = 0x1b04 [0190.687] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json")) returned 0x2020 [0190.687] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0196.821] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d98 [0196.821] GetFileSizeEx (in: hFile=0x1d98, lpFileSize=0x8b0fe3c | out: lpFileSize=0x8b0fe3c*=182) returned 1 [0196.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0196.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0196.821] NtQuerySystemTime (in: CurrentTime=0x8b0fdb0 | out: CurrentTime=0x8b0fdb0*=132462177754044000) returned 0x0 [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x65b1f97a [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x294c09 [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0xe719316 [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x1bf3d05f [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x437bff27 [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x11c336b1 [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x349e35b7 [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x6b017eef [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x7c8667ce [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x58c9c49a [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x359cbeda [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x17fe6480 [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x4ea20d24 [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0xe685ce3 [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x5bb3316b [0196.822] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x54ebb1dd [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x7a645022 [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0xaad06ba [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x6c1b3138 [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x6fd3c9bf [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x4b4c8b39 [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x19db55fe [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x43cb651b [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x1184d8e6 [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x92633bd [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0xd3f4089 [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x4bc7fdb6 [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x17feb916 [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x2a27224e [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x2a12d4f2 [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x5dcb88c8 [0196.823] RtlRandomEx (in: Seed=0x8b0fda8 | out: Seed=0x8b0fda8) returned 0x40f6ad22 [0196.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b6af88 [0196.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b6eb90 [0196.837] ReadFile (in: hFile=0x1d98, lpBuffer=0x7b6af88, nNumberOfBytesToRead=0xb6, lpNumberOfBytesRead=0x8b0fda4, lpOverlapped=0x0 | out: lpBuffer=0x7b6af88*, lpNumberOfBytesRead=0x8b0fda4*=0xb6, lpOverlapped=0x0) returned 1 [0196.839] SetFilePointerEx (in: hFile=0x1d98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.840] WriteFile (in: hFile=0x1d98, lpBuffer=0x7b6eb90*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x8b0fda8, lpOverlapped=0x0 | out: lpBuffer=0x7b6eb90*, lpNumberOfBytesWritten=0x8b0fda8*=0xb6, lpOverlapped=0x0) returned 1 [0199.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb620 [0199.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb6c0 [0199.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb6c0) returned 1 [0199.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6eb90) returned 1 [0199.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6af88) returned 1 [0199.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0199.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25398) returned 1 [0199.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38160 [0199.893] SetFilePointerEx (in: hFile=0x1d98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.893] WriteFile (in: hFile=0x1d98, lpBuffer=0x7cac9f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8b0fe30, lpOverlapped=0x0 | out: lpBuffer=0x7cac9f8*, lpNumberOfBytesWritten=0x8b0fe30*=0x10c, lpOverlapped=0x0) returned 1 [0200.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec48e8 [0200.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec48e8) returned 1 [0200.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec48e8 [0200.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0200.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0200.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29d0) returned 1 [0200.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.270] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="88") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="af") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="5f") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="aa") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="cd") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="13") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.270] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="c3") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="70") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="2f") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="d3") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="1e") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="44") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="ab") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="66") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="ec") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="c8") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="b3") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="f9") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="6c") returned 2 [0200.271] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.271] RtlInitAnsiString (in: DestinationString=0x8b0fdb8, SourceString="d488af5faad9c00ccd130cc3702fd31e44abe366ecc8b3f96ce8" | out: DestinationString="d488af5faad9c00ccd130cc3702fd31e44abe366ecc8b3f96ce8") [0200.271] RtlAnsiStringToUnicodeString (in: DestinationString=0x8b0fdb0, SourceString="d488af5faad9c00ccd130cc3702fd31e44abe366ecc8b3f96ce8", AllocateDestinationString=1 | out: DestinationString="d488af5faad9c00ccd130cc3702fd31e44abe366ecc8b3f96ce8") returned 0x0 [0200.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e6e8 [0200.271] wcscat (in: _Dest=0x7a5f410, _Source="d488af5faad9c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\d488af5faad9c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\d488af5faad9c" [0200.271] wcscat (in: _Dest=0x7a5f410, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\d488af5faad9c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\d488af5faad9c.68814f" [0200.271] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\d488af5faad9c.68814f", NtPathName=0x8b0fda8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\d488af5faad9c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b86988 [0201.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86988) returned 1 [0201.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cce520) returned 1 [0201.464] NtQueryInformationFile (in: FileHandle=0x1d98, IoStatusBlock=0x8b0fd80, FileInformation=0x8b0fd88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8b0fd80, FileInformation=0x8b0fd88) returned 0x0 [0201.464] NtSetInformationFile (FileHandle=0x1d98, IoStatusBlock=0x8b0fd80, FileInformation=0x8b0fd88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f410) returned 1 [0205.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0205.969] FlushFileBuffers (hFile=0x1d98) returned 1 [0205.988] CloseHandle (hObject=0x1d98) returned 1 [0206.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caa148 [0206.308] wcscpy (in: _Dest=0x7caa148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\" [0206.308] wcscat (in: _Dest=0x7caa148, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\68814F-Readme.txt" [0206.309] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\68814f-readme.txt")) returned 0xffffffff [0206.309] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1814 [0210.263] WriteFile (in: hFile=0x1814, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8b0fdc4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8b0fdc4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.269] CloseHandle (hObject=0x1814) returned 1 [0210.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa148) returned 1 [0210.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb0398) returned 1 Thread: id = 6359 os_tid = 0x14b4 [0190.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a4b0 [0190.688] wcscpy (in: _Dest=0x7a6a4b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0190.688] wcscat (in: _Dest=0x7a6a4b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\" [0190.688] wcscat (in: _Dest=0x7a6a4b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*" [0190.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52f00 [0190.688] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6428910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe642b020, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0191.677] wcscmp (_String1=".", _String2=".") returned 0 [0191.677] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6428910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe642b020, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.677] wcscmp (_String1="..", _String2=".") returned 1 [0191.677] wcscmp (_String1="..", _String2="..") returned 0 [0191.677] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe642b020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.677] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.677] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.677] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbb868 [0191.677] wcscpy (in: _Dest=0x7cbb868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" [0191.677] wcscat (in: _Dest=0x7cbb868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\" [0191.677] wcscat (in: _Dest=0x7cbb868, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" [0195.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbb868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0195.785] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe642b020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe642b020, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.785] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0195.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52f00) returned 1 [0195.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a4b0) returned 1 [0195.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80108) returned 1 Thread: id = 6360 os_tid = 0x150c [0190.689] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json")) returned 0x2020 [0190.689] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0196.840] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb4c [0196.840] GetFileSizeEx (in: hFile=0xb4c, lpFileSize=0xb68fb74 | out: lpFileSize=0xb68fb74*=254) returned 1 [0196.841] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.841] ReadFile (in: hFile=0xb4c, lpBuffer=0xb68fb50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb68fb60, lpOverlapped=0x0 | out: lpBuffer=0xb68fb50*, lpNumberOfBytesRead=0xb68fb60*=0x4, lpOverlapped=0x0) returned 1 [0196.842] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0196.843] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0196.843] NtQuerySystemTime (in: CurrentTime=0xb68fae8 | out: CurrentTime=0xb68fae8*=132462177754200000) returned 0x0 [0196.843] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x6836dac0 [0196.843] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x20b9252a [0196.843] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x789b1330 [0196.843] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x41d02ce3 [0196.843] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x5effa716 [0196.843] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x2aef3b1a [0196.843] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x2a395f7b [0196.843] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x64f25d4e [0196.843] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x66f57039 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x4f79fe28 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x57ad59eb [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x6820dffc [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x2c249e35 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x472c1e4a [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x155309fc [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x6672a44b [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x2db03ffd [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x383323a8 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x8db5912 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x11c96c5d [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x347a2f9b [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x691d1f13 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x696c20e8 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x5016fc34 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0xb367a85 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x2f299b00 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x249e499a [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x7c968950 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x1f314c16 [0196.844] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x6cded2ea [0196.845] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x4a02f537 [0196.845] RtlRandomEx (in: Seed=0xb68fae0 | out: Seed=0xb68fae0) returned 0x45e0d7fd [0196.857] ReadFile (in: hFile=0xb4c, lpBuffer=0x7b72798, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0xb68fadc, lpOverlapped=0x0 | out: lpBuffer=0x7b72798*, lpNumberOfBytesRead=0xb68fadc*=0xfe, lpOverlapped=0x0) returned 1 [0196.857] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.857] WriteFile (in: hFile=0xb4c, lpBuffer=0x7b763a0*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xb68fae0, lpOverlapped=0x0 | out: lpBuffer=0x7b763a0*, lpNumberOfBytesWritten=0xb68fae0*=0xfe, lpOverlapped=0x0) returned 1 [0199.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edba58 [0199.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb5d0 [0199.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb5d0) returned 1 [0199.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b763a0) returned 1 [0199.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b72798) returned 1 [0199.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0199.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25938) returned 1 [0199.891] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38100 [0199.891] SetFilePointerEx (in: hFile=0xb4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.892] WriteFile (in: hFile=0xb4c, lpBuffer=0x7b7c550*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb68fb68, lpOverlapped=0x0 | out: lpBuffer=0x7b7c550*, lpNumberOfBytesWritten=0xb68fb68*=0x10c, lpOverlapped=0x0) returned 1 [0200.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0200.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0200.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3128 [0200.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0200.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0200.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3060) returned 1 [0200.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.266] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="2b") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="df") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="80") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="60") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="81") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="89") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="41") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="7c") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="82") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="79") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="93") returned 2 [0200.266] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="1b") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="2d") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="c6") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="33") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="54") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="c7") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="2f") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="18") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="06") returned 2 [0200.267] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="84") returned 2 [0200.267] RtlInitAnsiString (in: DestinationString=0xb68faf0, SourceString="ceee2bdf5a80608189417c8279931b2dd9c63354c72fdd180684" | out: DestinationString="ceee2bdf5a80608189417c8279931b2dd9c63354c72fdd180684") [0200.267] RtlAnsiStringToUnicodeString (in: DestinationString=0xb68fae8, SourceString="ceee2bdf5a80608189417c8279931b2dd9c63354c72fdd180684", AllocateDestinationString=1 | out: DestinationString="ceee2bdf5a80608189417c8279931b2dd9c63354c72fdd180684") returned 0x0 [0200.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3df68 [0200.267] wcscat (in: _Dest=0x7a5f2d8, _Source="ceee2bdf5a806" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\ceee2bdf5a806") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\ceee2bdf5a806" [0200.267] wcscat (in: _Dest=0x7a5f2d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\ceee2bdf5a806.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\ceee2bdf5a806.68814f" [0200.267] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\ceee2bdf5a806.68814f", NtPathName=0xb68fae0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\ceee2bdf5a806.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b86840 [0200.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86840) returned 1 [0200.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cce2f8) returned 1 [0200.695] NtQueryInformationFile (in: FileHandle=0xb4c, IoStatusBlock=0xb68fab8, FileInformation=0xb68fac0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb68fab8, FileInformation=0xb68fac0) returned 0x0 [0200.695] NtSetInformationFile (FileHandle=0xb4c, IoStatusBlock=0xb68fab8, FileInformation=0xb68fac0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0200.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f2d8) returned 1 [0200.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0200.994] FlushFileBuffers (hFile=0xb4c) returned 1 [0201.479] CloseHandle (hObject=0xb4c) returned 1 [0206.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7f918 [0206.150] wcscpy (in: _Dest=0x7b7f918, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\" [0206.150] wcscat (in: _Dest=0x7b7f918, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\68814F-Readme.txt" [0206.150] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\68814f-readme.txt")) returned 0xffffffff [0206.150] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2390 [0208.515] WriteFile (in: hFile=0x2390, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb68fafc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb68fafc*=0x8b9, lpOverlapped=0x0) returned 1 [0211.228] CloseHandle (hObject=0x2390) returned 1 [0215.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f918) returned 1 [0215.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb05e8) returned 1 Thread: id = 6361 os_tid = 0x1510 [0190.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a5b8 [0190.690] wcscpy (in: _Dest=0x7a6a5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0190.690] wcscat (in: _Dest=0x7a6a5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\" [0190.690] wcscat (in: _Dest=0x7a6a5b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*" [0190.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52c98 [0190.690] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6432550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6434c60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0191.678] wcscmp (_String1=".", _String2=".") returned 0 [0191.678] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6432550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6434c60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.678] wcscmp (_String1="..", _String2=".") returned 1 [0191.678] wcscmp (_String1="..", _String2="..") returned 0 [0191.678] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6434c60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.678] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.678] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.678] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbb990 [0191.678] wcscpy (in: _Dest=0x7cbb990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" [0191.678] wcscat (in: _Dest=0x7cbb990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\" [0191.678] wcscat (in: _Dest=0x7cbb990, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" [0195.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbb990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0195.788] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6434c60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6434c60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.788] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0195.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52c98) returned 1 [0195.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a5b8) returned 1 [0195.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab5c8) returned 1 Thread: id = 6362 os_tid = 0x1664 [0190.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cac6b0 [0190.693] wcscpy (in: _Dest=0x7cac6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0190.694] wcscat (in: _Dest=0x7cac6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\" [0190.694] wcscat (in: _Dest=0x7cac6b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*" [0190.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53b08 [0190.694] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe643c190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe643e8a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0191.364] wcscmp (_String1=".", _String2=".") returned 0 [0191.364] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe643c190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe643e8a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.364] wcscmp (_String1="..", _String2=".") returned 1 [0191.364] wcscmp (_String1="..", _String2="..") returned 0 [0191.364] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe643e8a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.364] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.364] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cba148 [0191.365] wcscpy (in: _Dest=0x7cba148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" [0191.365] wcscat (in: _Dest=0x7cba148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\" [0191.365] wcscat (in: _Dest=0x7cba148, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" [0193.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cba148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278 [0193.423] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe643e8a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe643e8a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.423] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0193.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53b08) returned 1 [0193.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac6b0) returned 1 [0193.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa230) returned 1 Thread: id = 6363 os_tid = 0x14b8 [0190.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cac598 [0190.695] wcscpy (in: _Dest=0x7cac598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0190.695] wcscat (in: _Dest=0x7cac598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\" [0190.695] wcscat (in: _Dest=0x7cac598, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*" [0190.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a538a0 [0190.695] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6445dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64484e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0191.366] wcscmp (_String1=".", _String2=".") returned 0 [0191.366] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6445dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe64484e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.366] wcscmp (_String1="..", _String2=".") returned 1 [0191.366] wcscmp (_String1="..", _String2="..") returned 0 [0191.366] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64484e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.366] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.366] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cba270 [0191.367] wcscpy (in: _Dest=0x7cba270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" [0191.367] wcscat (in: _Dest=0x7cba270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\" [0191.367] wcscat (in: _Dest=0x7cba270, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" [0193.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cba270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c [0193.426] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe64484e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe64484e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe65f38d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.426] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0193.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a538a0) returned 1 [0193.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac598) returned 1 [0193.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa338) returned 1 Thread: id = 6364 os_tid = 0x1cbc [0190.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x20 [0190.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF", dwFileAttributes=0x20) returned 0 [0190.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.697] GetLastError () returned 0x5 [0190.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF", dwFileAttributes=0x20) returned 0 [0190.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68e60) returned 1 Thread: id = 6365 os_tid = 0x1cc4 [0190.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x20 [0195.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF", dwFileAttributes=0x20) returned 0 [0195.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.358] GetLastError () returned 0x5 [0200.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF", dwFileAttributes=0x20) returned 0 [0201.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68800) returned 1 Thread: id = 6366 os_tid = 0x1ccc [0190.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x20 [0199.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF", dwFileAttributes=0x20) returned 0 [0199.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.527] GetLastError () returned 0x5 [0201.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF", dwFileAttributes=0x20) returned 0 [0202.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68dd8) returned 1 Thread: id = 6367 os_tid = 0x1cd0 [0190.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x20 [0199.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF", dwFileAttributes=0x20) returned 0 [0199.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.529] GetLastError () returned 0x5 [0201.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF", dwFileAttributes=0x20) returned 0 [0201.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ed8) returned 1 Thread: id = 6368 os_tid = 0x1cd4 [0190.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x20 [0199.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF", dwFileAttributes=0x20) returned 0 [0199.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.528] GetLastError () returned 0x5 [0201.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF", dwFileAttributes=0x20) returned 0 [0201.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68d50) returned 1 Thread: id = 6369 os_tid = 0x1cd8 [0190.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x20 [0199.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF", dwFileAttributes=0x20) returned 0 [0199.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.528] GetLastError () returned 0x5 [0201.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF", dwFileAttributes=0x20) returned 0 [0201.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69658) returned 1 Thread: id = 6370 os_tid = 0x1ce0 [0190.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x20 [0199.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF", dwFileAttributes=0x20) returned 0 [0199.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.527] GetLastError () returned 0x5 [0201.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF", dwFileAttributes=0x20) returned 0 [0201.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a696e0) returned 1 Thread: id = 6371 os_tid = 0x1d40 [0190.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x20 [0191.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF", dwFileAttributes=0x20) returned 0 [0191.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.394] GetLastError () returned 0x5 [0191.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF", dwFileAttributes=0x20) returned 0 [0191.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69768) returned 1 Thread: id = 6372 os_tid = 0x1390 [0190.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x20 [0191.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF", dwFileAttributes=0x20) returned 0 [0191.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.396] GetLastError () returned 0x5 [0191.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF", dwFileAttributes=0x20) returned 0 [0191.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a697f0) returned 1 Thread: id = 6373 os_tid = 0x1394 [0190.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss")) returned 0x20 [0204.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS", dwFileAttributes=0x20) returned 0 [0204.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.561] GetLastError () returned 0x5 [0204.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS", dwFileAttributes=0x20) returned 0 [0204.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 6374 os_tid = 0x126c [0190.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss")) returned 0x20 [0204.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS", dwFileAttributes=0x20) returned 0 [0204.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.555] GetLastError () returned 0x5 [0204.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS", dwFileAttributes=0x20) returned 0 [0204.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62450) returned 1 Thread: id = 6375 os_tid = 0x1270 [0190.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss")) returned 0x20 [0204.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS", dwFileAttributes=0x20) returned 0 [0204.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.549] GetLastError () returned 0x5 [0204.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS", dwFileAttributes=0x20) returned 0 [0204.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63cb0) returned 1 Thread: id = 6376 os_tid = 0x1274 [0190.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss")) returned 0x20 [0204.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS", dwFileAttributes=0x20) returned 0 [0204.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.543] GetLastError () returned 0x5 [0204.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS", dwFileAttributes=0x20) returned 0 [0204.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a633f0) returned 1 Thread: id = 6377 os_tid = 0x1278 [0190.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss")) returned 0x20 [0204.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS", dwFileAttributes=0x20) returned 0 [0204.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.537] GetLastError () returned 0x5 [0204.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS", dwFileAttributes=0x20) returned 0 [0204.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62e50) returned 1 Thread: id = 6378 os_tid = 0x127c [0190.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst")) returned 0x20 [0204.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST", dwFileAttributes=0x20) returned 0 [0204.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.531] GetLastError () returned 0x5 [0204.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST", dwFileAttributes=0x20) returned 0 [0204.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63df0) returned 1 Thread: id = 6379 os_tid = 0x1280 [0190.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss")) returned 0x20 [0194.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS", dwFileAttributes=0x20) returned 0 [0194.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.859] GetLastError () returned 0x5 [0195.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS", dwFileAttributes=0x20) returned 0 [0195.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63c10) returned 1 Thread: id = 6380 os_tid = 0x1284 [0190.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst")) returned 0x20 [0202.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST", dwFileAttributes=0x20) returned 0 [0203.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.442] GetLastError () returned 0x5 [0204.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST", dwFileAttributes=0x20) returned 0 [0204.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63210) returned 1 Thread: id = 6381 os_tid = 0x1288 [0190.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss")) returned 0x20 [0204.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS", dwFileAttributes=0x20) returned 0 [0204.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.526] GetLastError () returned 0x5 [0204.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS", dwFileAttributes=0x20) returned 0 [0204.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63ad0) returned 1 Thread: id = 6382 os_tid = 0x128c [0190.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss")) returned 0x20 [0204.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS", dwFileAttributes=0x20) returned 0 [0204.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.520] GetLastError () returned 0x5 [0204.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS", dwFileAttributes=0x20) returned 0 [0204.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 6383 os_tid = 0x1290 [0190.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml")) returned 0x20 [0204.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML", dwFileAttributes=0x20) returned 0 [0204.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.513] GetLastError () returned 0x5 [0204.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML", dwFileAttributes=0x20) returned 0 [0204.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a624f0) returned 1 Thread: id = 6384 os_tid = 0x1294 [0190.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss")) returned 0x20 [0204.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS", dwFileAttributes=0x20) returned 0 [0204.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.509] GetLastError () returned 0x5 [0204.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS", dwFileAttributes=0x20) returned 0 [0204.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 Thread: id = 6385 os_tid = 0x1298 [0190.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst")) returned 0x20 [0204.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST", dwFileAttributes=0x20) returned 0 [0204.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.429] GetLastError () returned 0x5 [0204.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST", dwFileAttributes=0x20) returned 0 [0204.429] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62ef0) returned 1 Thread: id = 6386 os_tid = 0x129c [0190.718] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json")) returned 0x2020 [0190.718] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", dwFileAttributes=0x20) returned 1 [0196.857] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x570 [0196.858] GetFileSizeEx (in: hFile=0x570, lpFileSize=0xd42f80c | out: lpFileSize=0xd42f80c*=286) returned 1 [0196.858] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.858] ReadFile (in: hFile=0x570, lpBuffer=0xd42f7e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd42f7f8, lpOverlapped=0x0 | out: lpBuffer=0xd42f7e8*, lpNumberOfBytesRead=0xd42f7f8*=0x4, lpOverlapped=0x0) returned 1 [0196.860] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0196.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0196.860] NtQuerySystemTime (in: CurrentTime=0xd42f780 | out: CurrentTime=0xd42f780*=132462177754356000) returned 0x0 [0196.860] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x5d173696 [0196.860] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x21c362ee [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x21fa5892 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x7443d0c0 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x4bf0726f [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x183c001d [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x4bcac1db [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x28e5f11e [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x6cd9aaa6 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x318118fd [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x16d27740 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x6e2b2f41 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x31f7a306 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0xc677dec [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x79cdbe68 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x111d0e61 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x4ec3df3 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x1651ed00 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x2d3ca032 [0196.861] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x2154abec [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x51611abf [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x3afe6b94 [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x2763a4ad [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x72de3cee [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x1fd50ba2 [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0xea91f83 [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x370984a8 [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x625ef135 [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x71409340 [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x16271440 [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x610a87a3 [0196.862] RtlRandomEx (in: Seed=0xd42f778 | out: Seed=0xd42f778) returned 0x4d5627e9 [0196.880] ReadFile (in: hFile=0x570, lpBuffer=0x7d503a0, nNumberOfBytesToRead=0x11e, lpNumberOfBytesRead=0xd42f774, lpOverlapped=0x0 | out: lpBuffer=0x7d503a0*, lpNumberOfBytesRead=0xd42f774*=0x11e, lpOverlapped=0x0) returned 1 [0196.880] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.880] WriteFile (in: hFile=0x570, lpBuffer=0x7d53fa8*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xd42f778, lpOverlapped=0x0 | out: lpBuffer=0x7d53fa8*, lpNumberOfBytesWritten=0xd42f778*=0x11e, lpOverlapped=0x0) returned 1 [0199.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddd30 [0199.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde98 [0199.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edde98) returned 1 [0199.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d53fa8) returned 1 [0199.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d503a0) returned 1 [0199.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0199.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25f20) returned 1 [0199.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38220 [0199.897] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.897] WriteFile (in: hFile=0x570, lpBuffer=0x7cac138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd42f800, lpOverlapped=0x0 | out: lpBuffer=0x7cac138*, lpNumberOfBytesWritten=0xd42f800*=0x10c, lpOverlapped=0x0) returned 1 [0200.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0200.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b88) returned 1 [0200.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2b88 [0200.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33f8 [0200.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0200.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37e0) returned 1 [0200.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.277] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.277] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.277] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="9e") returned 2 [0200.277] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="13") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="23") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="d1") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="86") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="f2") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="17") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="9c") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="55") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="cc") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="60") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="e4") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="cf") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="70") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="6d") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="6f") returned 2 [0200.278] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="1d") returned 2 [0200.278] RtlInitAnsiString (in: DestinationString=0xd42f788, SourceString="a6f19e134af34a6d23d186f217bb9c55cc60e4d4cf706dd46f1d" | out: DestinationString="a6f19e134af34a6d23d186f217bb9c55cc60e4d4cf706dd46f1d") [0200.278] RtlAnsiStringToUnicodeString (in: DestinationString=0xd42f780, SourceString="a6f19e134af34a6d23d186f217bb9c55cc60e4d4cf706dd46f1d", AllocateDestinationString=1 | out: DestinationString="a6f19e134af34a6d23d186f217bb9c55cc60e4d4cf706dd46f1d") returned 0x0 [0200.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e8c8 [0200.279] wcscat (in: _Dest=0x7a5f680, _Source="a6f19e134af34" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\a6f19e134af34") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\a6f19e134af34" [0200.279] wcscat (in: _Dest=0x7a5f680, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\a6f19e134af34.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\a6f19e134af34.68814f" [0200.279] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\a6f19e134af34.68814f", NtPathName=0xd42f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\a6f19e134af34.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b86c18 [0201.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86c18) returned 1 [0201.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cce970) returned 1 [0201.463] NtQueryInformationFile (in: FileHandle=0x570, IoStatusBlock=0xd42f750, FileInformation=0xd42f758, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd42f750, FileInformation=0xd42f758) returned 0x0 [0201.463] NtSetInformationFile (FileHandle=0x570, IoStatusBlock=0xd42f750, FileInformation=0xd42f758, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f680) returned 1 [0205.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e8c8) returned 1 [0205.943] FlushFileBuffers (hFile=0x570) returned 1 [0205.982] CloseHandle (hObject=0x570) returned 1 [0206.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b80130 [0206.305] wcscpy (in: _Dest=0x7b80130, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\" [0206.305] wcscat (in: _Dest=0x7b80130, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\68814F-Readme.txt" [0206.305] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\68814f-readme.txt")) returned 0xffffffff [0206.305] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1814 [0210.247] WriteFile (in: hFile=0x1814, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd42f794, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd42f794*=0x8b9, lpOverlapped=0x0) returned 1 [0210.249] CloseHandle (hObject=0x1814) returned 1 [0210.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80130) returned 1 [0210.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9d08) returned 1 Thread: id = 6387 os_tid = 0x12a0 [0190.719] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json")) returned 0x2020 [0190.719] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", dwFileAttributes=0x20) returned 1 [0196.880] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c48 [0196.881] GetFileSizeEx (in: hFile=0x1c48, lpFileSize=0xd47fa44 | out: lpFileSize=0xd47fa44*=172) returned 1 [0196.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0196.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0196.881] NtQuerySystemTime (in: CurrentTime=0xd47f9b8 | out: CurrentTime=0xd47f9b8*=132462177754668000) returned 0x0 [0196.881] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x64b35056 [0196.881] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x347938fa [0196.881] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x13d65a58 [0196.881] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x78616ee3 [0196.881] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x286500d0 [0196.881] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x3fd66137 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x31eada8e [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x4a57106e [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x75ea4b34 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x518a653 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x56dd191a [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x167cc5c0 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x2e85ce77 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x51bcbc39 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x77705179 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x40bac3b6 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x55ba621a [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x14c58fc4 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x58b20008 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x2d427640 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x5153af3d [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x78e519e3 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x11096f8c [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x3faac56 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x3f2f7e3c [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x3e8cb336 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0xe88cdf5 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x3d6a5812 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x1582f4f6 [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x732b9d [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x1c65c57b [0196.882] RtlRandomEx (in: Seed=0xd47f9b0 | out: Seed=0xd47f9b0) returned 0x1a1a4531 [0196.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d57bb0 [0196.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d5b7b8 [0196.894] ReadFile (in: hFile=0x1c48, lpBuffer=0x7d57bb0, nNumberOfBytesToRead=0xac, lpNumberOfBytesRead=0xd47f9ac, lpOverlapped=0x0 | out: lpBuffer=0x7d57bb0*, lpNumberOfBytesRead=0xd47f9ac*=0xac, lpOverlapped=0x0) returned 1 [0196.896] SetFilePointerEx (in: hFile=0x1c48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.896] WriteFile (in: hFile=0x1c48, lpBuffer=0x7d5b7b8*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0xd47f9b0, lpOverlapped=0x0 | out: lpBuffer=0x7d5b7b8*, lpNumberOfBytesWritten=0xd47f9b0*=0xac, lpOverlapped=0x0) returned 1 [0199.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede000 [0199.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd808 [0199.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd808) returned 1 [0199.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d5b7b8) returned 1 [0199.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d57bb0) returned 1 [0199.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0199.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25e48) returned 1 [0199.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38280 [0199.900] SetFilePointerEx (in: hFile=0x1c48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.900] WriteFile (in: hFile=0x1c48, lpBuffer=0x7cadb78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd47fa38, lpOverlapped=0x0 | out: lpBuffer=0x7cadb78*, lpNumberOfBytesWritten=0xd47fa38*=0x10c, lpOverlapped=0x0) returned 1 [0200.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0200.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0200.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2ef8 [0200.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0200.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0200.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0200.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.287] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="69") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="29") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="fe") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="56") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="fd") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="68") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="32") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="98") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="98") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="6f") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="3c") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="5b") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="b7") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="07") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="09") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="8e") returned 2 [0200.288] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="af") returned 2 [0200.289] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="17") returned 2 [0200.289] RtlInitAnsiString (in: DestinationString=0xd47f9c0, SourceString="e3697b29fe56fda26832eee8bc98f798ce6f3c5bb707098eaf17" | out: DestinationString="e3697b29fe56fda26832eee8bc98f798ce6f3c5bb707098eaf17") [0200.289] RtlAnsiStringToUnicodeString (in: DestinationString=0xd47f9b8, SourceString="e3697b29fe56fda26832eee8bc98f798ce6f3c5bb707098eaf17", AllocateDestinationString=1 | out: DestinationString="e3697b29fe56fda26832eee8bc98f798ce6f3c5bb707098eaf17") returned 0x0 [0200.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e7d8 [0200.289] wcscat (in: _Dest=0x7a5f8f0, _Source="e3697b29fe56f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\e3697b29fe56f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\e3697b29fe56f" [0200.289] wcscat (in: _Dest=0x7a5f8f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\e3697b29fe56f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\e3697b29fe56f.68814f" [0200.289] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\e3697b29fe56f.68814f", NtPathName=0xd47f9b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\e3697b29fe56f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.289] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b86ea8 [0201.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86ea8) returned 1 [0201.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccedc0) returned 1 [0201.463] NtQueryInformationFile (in: FileHandle=0x1c48, IoStatusBlock=0xd47f988, FileInformation=0xd47f990, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd47f988, FileInformation=0xd47f990) returned 0x0 [0201.463] NtSetInformationFile (FileHandle=0x1c48, IoStatusBlock=0xd47f988, FileInformation=0xd47f990, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f8f0) returned 1 [0205.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0205.936] FlushFileBuffers (hFile=0x1c48) returned 1 [0205.967] CloseHandle (hObject=0x1c48) returned 1 [0206.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b80008 [0206.292] wcscpy (in: _Dest=0x7b80008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\" [0206.292] wcscat (in: _Dest=0x7b80008, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\68814F-Readme.txt" [0206.292] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\68814f-readme.txt")) returned 0xffffffff [0206.292] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1814 [0210.244] WriteFile (in: hFile=0x1814, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd47f9cc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd47f9cc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.245] CloseHandle (hObject=0x1814) returned 1 [0210.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80008) returned 1 [0210.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80448) returned 1 Thread: id = 6388 os_tid = 0x12a4 [0190.720] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json")) returned 0x2020 [0190.720] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", dwFileAttributes=0x20) returned 1 [0196.896] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b30 [0196.897] GetFileSizeEx (in: hFile=0x1b30, lpFileSize=0xbfef87c | out: lpFileSize=0xbfef87c*=210) returned 1 [0196.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0196.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0196.897] NtQuerySystemTime (in: CurrentTime=0xbfef7f0 | out: CurrentTime=0xbfef7f0*=132462177754824000) returned 0x0 [0196.897] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x453933f4 [0196.897] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x7e9c1fcc [0196.897] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x6868be1 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x25d43822 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x49a2bd54 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x6c20c775 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x781bc88b [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x2afb458 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x6093bc7e [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x3560eac0 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x21fcd2b1 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x6de4ab86 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x1c392f4d [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x3428ffb7 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x4513a690 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x20a30399 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0xff13157 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x5f1c7af1 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x4a15f8b3 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x4fa55193 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x35a81825 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x1b7f79ca [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x6c9d5de7 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x3c8732f6 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x118d7620 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x15fc3b80 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x564ae161 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x4f8d2a35 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x1621ba39 [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x15691aaa [0196.898] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0x69dfbb6f [0196.899] RtlRandomEx (in: Seed=0xbfef7e8 | out: Seed=0xbfef7e8) returned 0xa1be3f9 [0196.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.908] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d5f3c0 [0196.909] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d62fc8 [0196.909] ReadFile (in: hFile=0x1b30, lpBuffer=0x7d5f3c0, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xbfef7e4, lpOverlapped=0x0 | out: lpBuffer=0x7d5f3c0*, lpNumberOfBytesRead=0xbfef7e4*=0xd2, lpOverlapped=0x0) returned 1 [0196.911] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.911] WriteFile (in: hFile=0x1b30, lpBuffer=0x7d62fc8*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xbfef7e8, lpOverlapped=0x0 | out: lpBuffer=0x7d62fc8*, lpNumberOfBytesWritten=0xbfef7e8*=0xd2, lpOverlapped=0x0) returned 1 [0199.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd880 [0199.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddc40 [0199.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddc40) returned 1 [0199.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d62fc8) returned 1 [0199.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d5f3c0) returned 1 [0199.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3efc0) returned 1 [0199.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25db8) returned 1 [0199.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a382e0 [0199.903] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.903] WriteFile (in: hFile=0x1b30, lpBuffer=0x7cacb10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbfef870, lpOverlapped=0x0 | out: lpBuffer=0x7cacb10*, lpNumberOfBytesWritten=0xbfef870*=0x10c, lpOverlapped=0x0) returned 1 [0200.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0200.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0200.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2cc8 [0200.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0200.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0200.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0200.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.282] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="96") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="df") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="67") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="1b") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="48") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="da") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="18") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="75") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="5e") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="e1") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="bf") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="db") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="ae") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="2a") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="e9") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="8d") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="9f") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="5b") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="57") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="5b") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="53") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="fa") returned 2 [0200.283] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="53") returned 2 [0200.283] RtlInitAnsiString (in: DestinationString=0xbfef7f8, SourceString="96df671b48da18755ee1bfdbae1f2ae98d9fc05bfc575b53fa53" | out: DestinationString="96df671b48da18755ee1bfdbae1f2ae98d9fc05bfc575b53fa53") [0200.283] RtlAnsiStringToUnicodeString (in: DestinationString=0xbfef7f0, SourceString="96df671b48da18755ee1bfdbae1f2ae98d9fc05bfc575b53fa53", AllocateDestinationString=1 | out: DestinationString="96df671b48da18755ee1bfdbae1f2ae98d9fc05bfc575b53fa53") returned 0x0 [0200.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e5f8 [0200.284] wcscat (in: _Dest=0x7a5f7b8, _Source="96df671b48da1" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\96df671b48da1") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\96df671b48da1" [0200.284] wcscat (in: _Dest=0x7a5f7b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\96df671b48da1.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\96df671b48da1.68814f" [0200.284] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\96df671b48da1.68814f", NtPathName=0xbfef7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\96df671b48da1.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7b86d60 [0201.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86d60) returned 1 [0201.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cceb98) returned 1 [0201.463] NtQueryInformationFile (in: FileHandle=0x1b30, IoStatusBlock=0xbfef7c0, FileInformation=0xbfef7c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbfef7c0, FileInformation=0xbfef7c8) returned 0x0 [0201.463] NtSetInformationFile (FileHandle=0x1b30, IoStatusBlock=0xbfef7c0, FileInformation=0xbfef7c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f7b8) returned 1 [0205.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0205.940] FlushFileBuffers (hFile=0x1b30) returned 1 [0205.976] CloseHandle (hObject=0x1b30) returned 1 [0206.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7a5f068 [0206.303] wcscpy (in: _Dest=0x7a5f068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\" [0206.303] wcscat (in: _Dest=0x7a5f068, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\68814F-Readme.txt" [0206.303] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\68814f-readme.txt")) returned 0xffffffff [0206.303] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1abc [0210.234] WriteFile (in: hFile=0x1abc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbfef804, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbfef804*=0x8b9, lpOverlapped=0x0) returned 1 [0210.236] CloseHandle (hObject=0x1abc) returned 1 [0210.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f068) returned 1 [0210.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae020) returned 1 Thread: id = 6389 os_tid = 0x12a8 [0190.720] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json")) returned 0x2020 [0190.721] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0196.912] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfe8 [0196.912] GetFileSizeEx (in: hFile=0xfe8, lpFileSize=0xd00fd7c | out: lpFileSize=0xd00fd7c*=187) returned 1 [0196.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0196.912] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0196.912] NtQuerySystemTime (in: CurrentTime=0xd00fcf0 | out: CurrentTime=0xd00fcf0*=132462177754980000) returned 0x0 [0196.912] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x36c5439a [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x6524ae34 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0xe44d1e7 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x26213ee8 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0xe0be5ed [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x1b4a5b8e [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x4213a1fc [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x157bb140 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x308c5932 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x11507e32 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x4a392893 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x7031df09 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x6216a3eb [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x2c228740 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x1ec2f377 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x73328514 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x636295fe [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x7d4d8940 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x350d2166 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x709cdc12 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x2bf028ed [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x7fe42dbc [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x5a1c6f53 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x7a4a4bc0 [0196.913] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x3f2ee4d6 [0196.914] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x65339d40 [0196.914] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x7a618487 [0196.914] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x79e512e6 [0196.914] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x47aea59 [0196.914] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0xd72e2b6 [0196.914] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x4607e431 [0196.914] RtlRandomEx (in: Seed=0xd00fce8 | out: Seed=0xd00fce8) returned 0x78a3d685 [0196.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d66bd0 [0196.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d6a7d8 [0196.925] ReadFile (in: hFile=0xfe8, lpBuffer=0x7d66bd0, nNumberOfBytesToRead=0xbb, lpNumberOfBytesRead=0xd00fce4, lpOverlapped=0x0 | out: lpBuffer=0x7d66bd0*, lpNumberOfBytesRead=0xd00fce4*=0xbb, lpOverlapped=0x0) returned 1 [0196.927] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.927] WriteFile (in: hFile=0xfe8, lpBuffer=0x7d6a7d8*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0xd00fce8, lpOverlapped=0x0 | out: lpBuffer=0x7d6a7d8*, lpNumberOfBytesWritten=0xd00fce8*=0xbb, lpOverlapped=0x0) returned 1 [0199.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edde20 [0199.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3eddf88 [0199.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eddf88) returned 1 [0199.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d6a7d8) returned 1 [0199.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d66bd0) returned 1 [0199.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0199.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a257d0) returned 1 [0199.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38340 [0199.906] SetFilePointerEx (in: hFile=0xfe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.906] WriteFile (in: hFile=0xfe8, lpBuffer=0x7cacc28*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd00fd70, lpOverlapped=0x0 | out: lpBuffer=0x7cacc28*, lpNumberOfBytesWritten=0xd00fd70*=0x10c, lpOverlapped=0x0) returned 1 [0200.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84e18 [0200.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c090 [0200.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0200.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0200.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2e58 [0200.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0200.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0200.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0200.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0200.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e18) returned 1 [0200.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d880 [0200.298] sprintf (in: _Dest=0x7a2d880, _Format="%c%c" | out: _Dest="29") returned 2 [0200.298] sprintf (in: _Dest=0x7a2d882, _Format="%c%c" | out: _Dest="a1") returned 2 [0200.298] sprintf (in: _Dest=0x7a2d884, _Format="%c%c" | out: _Dest="7c") returned 2 [0200.298] sprintf (in: _Dest=0x7a2d886, _Format="%c%c" | out: _Dest="37") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d888, _Format="%c%c" | out: _Dest="6c") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d88a, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d88c, _Format="%c%c" | out: _Dest="33") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d88e, _Format="%c%c" | out: _Dest="3e") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d890, _Format="%c%c" | out: _Dest="2a") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d892, _Format="%c%c" | out: _Dest="16") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d894, _Format="%c%c" | out: _Dest="02") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d896, _Format="%c%c" | out: _Dest="9a") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d898, _Format="%c%c" | out: _Dest="5b") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d89a, _Format="%c%c" | out: _Dest="33") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d89c, _Format="%c%c" | out: _Dest="b9") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d89e, _Format="%c%c" | out: _Dest="7f") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d8a0, _Format="%c%c" | out: _Dest="fd") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d8a2, _Format="%c%c" | out: _Dest="0f") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d8a4, _Format="%c%c" | out: _Dest="8f") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d8a6, _Format="%c%c" | out: _Dest="c3") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d8a8, _Format="%c%c" | out: _Dest="5b") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d8aa, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.299] sprintf (in: _Dest=0x7a2d8ac, _Format="%c%c" | out: _Dest="9f") returned 2 [0200.300] sprintf (in: _Dest=0x7a2d8ae, _Format="%c%c" | out: _Dest="91") returned 2 [0200.300] sprintf (in: _Dest=0x7a2d8b0, _Format="%c%c" | out: _Dest="9c") returned 2 [0200.300] sprintf (in: _Dest=0x7a2d8b2, _Format="%c%c" | out: _Dest="3c") returned 2 [0200.300] RtlInitAnsiString (in: DestinationString=0xd00fcf8, SourceString="29a17c376cbc333e2a16029a5b33b97ffd0f8fc35bdc9f919c3c" | out: DestinationString="29a17c376cbc333e2a16029a5b33b97ffd0f8fc35bdc9f919c3c") [0200.300] RtlAnsiStringToUnicodeString (in: DestinationString=0xd00fcf0, SourceString="29a17c376cbc333e2a16029a5b33b97ffd0f8fc35bdc9f919c3c", AllocateDestinationString=1 | out: DestinationString="29a17c376cbc333e2a16029a5b33b97ffd0f8fc35bdc9f919c3c") returned 0x0 [0200.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e670 [0200.300] wcscat (in: _Dest=0x7a5fa28, _Source="29a17c376cbc3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\29a17c376cbc3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\29a17c376cbc3" [0200.300] wcscat (in: _Dest=0x7a5fa28, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\29a17c376cbc3.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\29a17c376cbc3.68814f" [0200.300] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\29a17c376cbc3.68814f", NtPathName=0xd00fce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\29a17c376cbc3.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b87138 [0201.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87138) returned 1 [0201.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ccf210) returned 1 [0201.462] NtQueryInformationFile (in: FileHandle=0xfe8, IoStatusBlock=0xd00fcc0, FileInformation=0xd00fcc8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd00fcc0, FileInformation=0xd00fcc8) returned 0x0 [0201.462] NtSetInformationFile (FileHandle=0xfe8, IoStatusBlock=0xd00fcc0, FileInformation=0xd00fcc8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5fa28) returned 1 [0205.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0205.933] FlushFileBuffers (hFile=0xfe8) returned 1 [0205.939] CloseHandle (hObject=0xfe8) returned 1 [0206.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7fee0 [0206.290] wcscpy (in: _Dest=0x7b7fee0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\" [0206.290] wcscat (in: _Dest=0x7b7fee0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\68814F-Readme.txt" [0206.290] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\68814f-readme.txt")) returned 0xffffffff [0206.290] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1abc [0210.230] WriteFile (in: hFile=0x1abc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd00fd04, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd00fd04*=0x8b9, lpOverlapped=0x0) returned 1 [0210.232] CloseHandle (hObject=0x1abc) returned 1 [0210.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fee0) returned 1 [0210.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae148) returned 1 Thread: id = 6390 os_tid = 0x12ac [0190.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html")) returned 0x20 [0190.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0190.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.723] GetLastError () returned 0x5 [0190.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html", dwFileAttributes=0x20) returned 0 [0190.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 Thread: id = 6391 os_tid = 0x12b0 [0190.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html")) returned 0x20 [0190.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0190.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.727] GetLastError () returned 0x5 [0190.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html", dwFileAttributes=0x20) returned 0 [0190.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 6392 os_tid = 0x12b4 [0190.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg")) returned 0x20 [0190.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0190.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.729] GetLastError () returned 0x5 [0190.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg", dwFileAttributes=0x20) returned 0 [0190.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 6393 os_tid = 0x12c0 [0190.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js")) returned 0x20 [0190.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js", dwFileAttributes=0x20) returned 0 [0190.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.732] GetLastError () returned 0x5 [0190.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js", dwFileAttributes=0x20) returned 0 [0190.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 Thread: id = 6394 os_tid = 0x12c4 [0190.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif")) returned 0x20 [0190.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0190.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.734] GetLastError () returned 0x5 [0190.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF", dwFileAttributes=0x20) returned 0 [0190.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ad8) returned 1 Thread: id = 6395 os_tid = 0x12c8 [0190.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif")) returned 0x20 [0190.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0190.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0190.737] GetLastError () returned 0x5 [0190.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif", dwFileAttributes=0x20) returned 0 [0190.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687f8) returned 1 Thread: id = 6396 os_tid = 0x18c4 [0190.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js")) returned 0x20 [0192.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0192.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.053] GetLastError () returned 0x5 [0192.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js", dwFileAttributes=0x20) returned 0 [0192.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67490) returned 1 Thread: id = 6397 os_tid = 0x139c [0190.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif")) returned 0x20 [0192.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0192.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.065] GetLastError () returned 0x5 [0192.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif", dwFileAttributes=0x20) returned 0 [0192.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689a8) returned 1 Thread: id = 6398 os_tid = 0x13a0 [0190.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif")) returned 0x20 [0192.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0192.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.145] GetLastError () returned 0x5 [0192.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif", dwFileAttributes=0x20) returned 0 [0192.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d08) returned 1 Thread: id = 6399 os_tid = 0x13a4 [0190.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif")) returned 0x20 [0192.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0192.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.143] GetLastError () returned 0x5 [0192.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF", dwFileAttributes=0x20) returned 0 [0192.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575c8) returned 1 Thread: id = 6400 os_tid = 0x13a8 [0190.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif")) returned 0x20 [0192.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0192.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.141] GetLastError () returned 0x5 [0192.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif", dwFileAttributes=0x20) returned 0 [0192.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85cb0) returned 1 Thread: id = 6401 os_tid = 0x13ac [0190.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif")) returned 0x20 [0192.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0192.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.139] GetLastError () returned 0x5 [0192.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif", dwFileAttributes=0x20) returned 0 [0192.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85970) returned 1 Thread: id = 6402 os_tid = 0x13b0 [0190.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif")) returned 0x20 [0192.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0192.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.074] GetLastError () returned 0x5 [0192.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif", dwFileAttributes=0x20) returned 0 [0192.074] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 Thread: id = 6403 os_tid = 0x13b4 [0190.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif")) returned 0x20 [0192.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0192.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.072] GetLastError () returned 0x5 [0192.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif", dwFileAttributes=0x20) returned 0 [0192.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68570) returned 1 Thread: id = 6404 os_tid = 0x13b8 [0190.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif")) returned 0x20 [0192.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0192.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.070] GetLastError () returned 0x5 [0192.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif", dwFileAttributes=0x20) returned 0 [0192.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c98a8) returned 1 Thread: id = 6405 os_tid = 0x13bc [0190.742] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json")) returned 0x2020 [0190.743] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0196.928] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2060 [0196.928] GetFileSizeEx (in: hFile=0x2060, lpFileSize=0x100efd04 | out: lpFileSize=0x100efd04*=235) returned 1 [0196.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0196.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0196.929] NtQuerySystemTime (in: CurrentTime=0x100efc78 | out: CurrentTime=0x100efc78*=132462177755136000) returned 0x0 [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x1ab6266d [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x3e17547d [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x98e98b3 [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x76d7e2e [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x4b646f81 [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x6f012cbb [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x6c3964fe [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x6f889c62 [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x66604362 [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x43052e5b [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x1c7e5112 [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x545f156b [0196.929] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x5a08c13 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x3cbced67 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x5652ef23 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0xb4e9944 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x6e3d55c0 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x1a687930 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x66c6ac32 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0xa4e5f7d [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0xb30de4a [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x2917f3eb [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x50c6c1 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0xd81d1a [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x57140d5a [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x3faff834 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x4d3b42d1 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x63f6e5d8 [0196.930] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x552f817f [0196.931] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x76f20505 [0196.931] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x6290d69 [0196.931] RtlRandomEx (in: Seed=0x100efc70 | out: Seed=0x100efc70) returned 0x6e6149b0 [0196.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d6e3e0 [0196.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d71fe8 [0196.941] ReadFile (in: hFile=0x2060, lpBuffer=0x7d6e3e0, nNumberOfBytesToRead=0xeb, lpNumberOfBytesRead=0x100efc6c, lpOverlapped=0x0 | out: lpBuffer=0x7d6e3e0*, lpNumberOfBytesRead=0x100efc6c*=0xeb, lpOverlapped=0x0) returned 1 [0196.943] SetFilePointerEx (in: hFile=0x2060, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.943] WriteFile (in: hFile=0x2060, lpBuffer=0x7d71fe8*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x100efc70, lpOverlapped=0x0 | out: lpBuffer=0x7d71fe8*, lpNumberOfBytesWritten=0x100efc70*=0xeb, lpOverlapped=0x0) returned 1 [0200.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0200.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0200.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0200.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d71fe8) returned 1 [0200.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d6e3e0) returned 1 [0200.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0200.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25ce0) returned 1 [0200.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38280 [0200.537] SetFilePointerEx (in: hFile=0x2060, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.537] WriteFile (in: hFile=0x2060, lpBuffer=0x7cac9f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x100efcf8, lpOverlapped=0x0 | out: lpBuffer=0x7cac9f8*, lpNumberOfBytesWritten=0x100efcf8*=0x10c, lpOverlapped=0x0) returned 1 [0201.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0201.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f10) returned 1 [0201.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3f10 [0201.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0201.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0201.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f20) returned 1 [0201.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.023] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.023] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="68") returned 2 [0201.023] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="7f") returned 2 [0201.023] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="e4") returned 2 [0201.023] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="c4") returned 2 [0201.023] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="07") returned 2 [0201.023] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="60") returned 2 [0201.023] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="f1") returned 2 [0201.023] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="26") returned 2 [0201.023] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="04") returned 2 [0201.023] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="c2") returned 2 [0201.023] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="21") returned 2 [0201.024] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="b3") returned 2 [0201.024] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="ac") returned 2 [0201.024] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="f5") returned 2 [0201.024] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="4d") returned 2 [0201.024] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="62") returned 2 [0201.024] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="c3") returned 2 [0201.024] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="23") returned 2 [0201.024] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="e6") returned 2 [0201.024] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="d8") returned 2 [0201.024] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="36") returned 2 [0201.024] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="35") returned 2 [0201.024] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="23") returned 2 [0201.024] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="8a") returned 2 [0201.024] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="60") returned 2 [0201.024] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="a8") returned 2 [0201.024] RtlInitAnsiString (in: DestinationString=0x100efc80, SourceString="687fe4c40760f12604c221b3acf54d62c323e6d83635238a60a8" | out: DestinationString="687fe4c40760f12604c221b3acf54d62c323e6d83635238a60a8") [0201.024] RtlAnsiStringToUnicodeString (in: DestinationString=0x100efc78, SourceString="687fe4c40760f12604c221b3acf54d62c323e6d83635238a60a8", AllocateDestinationString=1 | out: DestinationString="687fe4c40760f12604c221b3acf54d62c323e6d83635238a60a8") returned 0x0 [0201.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c270 [0201.024] wcscat (in: _Dest=0x7ddb858, _Source="687fe4c40760f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\687fe4c40760f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\687fe4c40760f" [0201.025] wcscat (in: _Dest=0x7ddb858, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\687fe4c40760f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\687fe4c40760f.68814f" [0201.025] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\687fe4c40760f.68814f", NtPathName=0x100efc70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\687fe4c40760f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc778 [0201.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc778) returned 1 [0201.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e95888) returned 1 [0201.264] NtQueryInformationFile (in: FileHandle=0x2060, IoStatusBlock=0x100efc48, FileInformation=0x100efc50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x100efc48, FileInformation=0x100efc50) returned 0x0 [0201.264] NtSetInformationFile (FileHandle=0x2060, IoStatusBlock=0x100efc48, FileInformation=0x100efc50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb858) returned 1 [0205.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c270) returned 1 [0205.775] FlushFileBuffers (hFile=0x2060) returned 1 [0205.784] CloseHandle (hObject=0x2060) returned 1 [0206.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7fc90 [0206.261] wcscpy (in: _Dest=0x7b7fc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\" [0206.261] wcscat (in: _Dest=0x7b7fc90, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\68814F-Readme.txt" [0206.261] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\68814f-readme.txt")) returned 0xffffffff [0206.261] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1230 [0208.779] WriteFile (in: hFile=0x1230, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x100efc8c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x100efc8c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.205] CloseHandle (hObject=0x1230) returned 1 [0210.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fc90) returned 1 [0210.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb1740) returned 1 Thread: id = 6406 os_tid = 0x13c0 [0190.743] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json")) returned 0x2020 [0190.744] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0196.944] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ff0 [0196.944] GetFileSizeEx (in: hFile=0x1ff0, lpFileSize=0xf01fcb4 | out: lpFileSize=0xf01fcb4*=279) returned 1 [0196.944] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0x113, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.944] ReadFile (in: hFile=0x1ff0, lpBuffer=0xf01fc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf01fca0, lpOverlapped=0x0 | out: lpBuffer=0xf01fc90*, lpNumberOfBytesRead=0xf01fca0*=0x4, lpOverlapped=0x0) returned 1 [0196.946] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0196.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0196.947] NtQuerySystemTime (in: CurrentTime=0xf01fc28 | out: CurrentTime=0xf01fc28*=132462177755292000) returned 0x0 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x2b2b717c [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x3ab74e7d [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x5cc9e72f [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x1371f448 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x745e292a [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x7f1e4c7b [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x6ea7d356 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x14869f36 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x292395aa [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x48c5da6f [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x2faad0e3 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x15a68a00 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x20c12cf2 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x332147d3 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x1498fc38 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x24c8594c [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x237faa8a [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0xc2dc223 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x4857203d [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x119f3b10 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x6c5fb6f7 [0196.947] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x7759a373 [0196.948] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x67b061a6 [0196.948] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x5121297a [0196.948] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x1bb2819d [0196.948] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x5de00a63 [0196.948] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x22066d24 [0196.948] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x71a0e7be [0196.948] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x37b19d0b [0196.948] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x2e860e74 [0196.948] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x2b8ed182 [0196.948] RtlRandomEx (in: Seed=0xf01fc20 | out: Seed=0xf01fc20) returned 0x4a09f840 [0196.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d75bf0 [0196.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d797f8 [0196.960] ReadFile (in: hFile=0x1ff0, lpBuffer=0x7d75bf0, nNumberOfBytesToRead=0x117, lpNumberOfBytesRead=0xf01fc1c, lpOverlapped=0x0 | out: lpBuffer=0x7d75bf0*, lpNumberOfBytesRead=0xf01fc1c*=0x117, lpOverlapped=0x0) returned 1 [0196.960] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.960] WriteFile (in: hFile=0x1ff0, lpBuffer=0x7d797f8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0xf01fc20, lpOverlapped=0x0 | out: lpBuffer=0x7d797f8*, lpNumberOfBytesWritten=0xf01fc20*=0x117, lpOverlapped=0x0) returned 1 [0200.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0200.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0200.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0200.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d797f8) returned 1 [0200.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d75bf0) returned 1 [0200.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0200.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a25980) returned 1 [0200.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a378f0 [0200.950] SetFilePointerEx (in: hFile=0x1ff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.950] WriteFile (in: hFile=0x1ff0, lpBuffer=0x7cd3948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf01fca8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3948*, lpNumberOfBytesWritten=0xf01fca8*=0x10c, lpOverlapped=0x0) returned 1 [0206.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c9f0 [0206.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0206.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2818) returned 1 [0206.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2818 [0206.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec54a0 [0206.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6198 [0206.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6198) returned 1 [0206.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0206.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.167] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="f5") returned 2 [0206.167] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="60") returned 2 [0206.167] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="3a") returned 2 [0206.167] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="c9") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="17") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="25") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="58") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="74") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="41") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="61") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="58") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="e6") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="8d") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="98") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="69") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="99") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="90") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="97") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="27") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="62") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="01") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="16") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="7c") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="0e") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="3c") returned 2 [0206.168] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="ac") returned 2 [0206.168] RtlInitAnsiString (in: DestinationString=0xf01fc30, SourceString="f5603ac917255874416158e68d9869999097276201167c0e3cac" | out: DestinationString="f5603ac917255874416158e68d9869999097276201167c0e3cac") [0206.168] RtlAnsiStringToUnicodeString (in: DestinationString=0xf01fc28, SourceString="f5603ac917255874416158e68d9869999097276201167c0e3cac", AllocateDestinationString=1 | out: DestinationString="f5603ac917255874416158e68d9869999097276201167c0e3cac") returned 0x0 [0206.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c630 [0206.169] wcscat (in: _Dest=0x7a5e918, _Source="f5603ac917255" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\f5603ac917255") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\f5603ac917255" [0206.169] wcscat (in: _Dest=0x7a5e918, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\f5603ac917255.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\f5603ac917255.68814f" [0206.169] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\f5603ac917255.68814f", NtPathName=0xf01fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\f5603ac917255.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddcc98 [0208.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcc98) returned 1 [0208.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e97040) returned 1 [0208.705] NtQueryInformationFile (in: FileHandle=0x1ff0, IoStatusBlock=0xf01fbf8, FileInformation=0xf01fc00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf01fbf8, FileInformation=0xf01fc00) returned 0x0 [0208.705] NtSetInformationFile (FileHandle=0x1ff0, IoStatusBlock=0xf01fbf8, FileInformation=0xf01fc00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e918) returned 1 [0209.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c630) returned 1 [0209.062] FlushFileBuffers (hFile=0x1ff0) returned 1 [0209.099] CloseHandle (hObject=0x1ff0) returned 1 [0209.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7caa960 [0209.399] wcscpy (in: _Dest=0x7caa960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\" [0209.399] wcscat (in: _Dest=0x7caa960, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\68814F-Readme.txt" [0209.399] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\68814f-readme.txt")) returned 0xffffffff [0209.399] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.959] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf01fc3c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xf01fc3c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.961] CloseHandle (hObject=0xbb8) returned 1 [0209.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa960) returned 1 [0209.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb1868) returned 1 Thread: id = 6407 os_tid = 0x13c4 [0190.744] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json")) returned 0x2020 [0190.744] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0196.960] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21e4 [0196.961] GetFileSizeEx (in: hFile=0x21e4, lpFileSize=0xc26f83c | out: lpFileSize=0xc26f83c*=221) returned 1 [0196.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0196.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6198 [0196.961] NtQuerySystemTime (in: CurrentTime=0xc26f7b0 | out: CurrentTime=0xc26f7b0*=132462177755448000) returned 0x0 [0196.961] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x2ed29dd [0196.961] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x102225e2 [0196.961] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x6b37f62c [0196.961] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x3f009543 [0196.961] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x975a534 [0196.961] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x24a77a60 [0196.961] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x31173da [0196.961] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x11f58105 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x16a79e80 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x20a8c73a [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x3540441 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x6ff69f95 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x5a9e9c02 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x566f276 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x3d28d154 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x528eafd1 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0xf1b664 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x6fd4fbb7 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x361eeb89 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x23064cd6 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x470f0413 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x559c29b6 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x1c50d938 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x6ebc26e5 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x6a5cb599 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x4fcfdb35 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x42b60753 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x600b9df0 [0196.962] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x57a30d30 [0196.963] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x65741c1 [0196.963] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x207b1299 [0196.963] RtlRandomEx (in: Seed=0xc26f7a8 | out: Seed=0xc26f7a8) returned 0x55c0c385 [0196.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d7d400 [0196.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d81008 [0196.973] ReadFile (in: hFile=0x21e4, lpBuffer=0x7d7d400, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xc26f7a4, lpOverlapped=0x0 | out: lpBuffer=0x7d7d400*, lpNumberOfBytesRead=0xc26f7a4*=0xdd, lpOverlapped=0x0) returned 1 [0196.975] SetFilePointerEx (in: hFile=0x21e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.975] WriteFile (in: hFile=0x21e4, lpBuffer=0x7d81008*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xc26f7a8, lpOverlapped=0x0 | out: lpBuffer=0x7d81008*, lpNumberOfBytesWritten=0xc26f7a8*=0xdd, lpOverlapped=0x0) returned 1 [0200.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0200.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0200.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3060) returned 1 [0200.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d81008) returned 1 [0200.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d7d400) returned 1 [0200.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0200.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a253e0) returned 1 [0200.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38340 [0200.533] SetFilePointerEx (in: hFile=0x21e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.533] WriteFile (in: hFile=0x21e4, lpBuffer=0x7cac138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc26f830, lpOverlapped=0x0 | out: lpBuffer=0x7cac138*, lpNumberOfBytesWritten=0xc26f830*=0x10c, lpOverlapped=0x0) returned 1 [0201.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f08 [0201.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f08) returned 1 [0201.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53f08 [0201.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52450 [0201.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0201.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cd8) returned 1 [0201.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.020] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="b8") returned 2 [0201.020] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ff") returned 2 [0201.021] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="46") returned 2 [0201.021] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="19") returned 2 [0201.021] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="f7") returned 2 [0201.021] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="84") returned 2 [0201.021] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="c9") returned 2 [0201.021] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="15") returned 2 [0201.021] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="c2") returned 2 [0201.021] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="b6") returned 2 [0201.021] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="d7") returned 2 [0201.021] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="ee") returned 2 [0201.021] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="f2") returned 2 [0201.021] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="15") returned 2 [0201.021] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="ff") returned 2 [0201.021] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="0a") returned 2 [0201.021] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="0b") returned 2 [0201.021] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="0b") returned 2 [0201.021] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="32") returned 2 [0201.021] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="b5") returned 2 [0201.021] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="9b") returned 2 [0201.021] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="38") returned 2 [0201.021] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="91") returned 2 [0201.021] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="55") returned 2 [0201.021] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="22") returned 2 [0201.021] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="80") returned 2 [0201.021] RtlInitAnsiString (in: DestinationString=0xc26f7b8, SourceString="b8ff4619f784c915c2b6d7eef215ff0a0b0b32b59b3891552280" | out: DestinationString="b8ff4619f784c915c2b6d7eef215ff0a0b0b32b59b3891552280") [0201.021] RtlAnsiStringToUnicodeString (in: DestinationString=0xc26f7b0, SourceString="b8ff4619f784c915c2b6d7eef215ff0a0b0b32b59b3891552280", AllocateDestinationString=1 | out: DestinationString="b8ff4619f784c915c2b6d7eef215ff0a0b0b32b59b3891552280") returned 0x0 [0201.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c360 [0201.022] wcscat (in: _Dest=0x7ddb720, _Source="b8ff4619f784c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\b8ff4619f784c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\b8ff4619f784c" [0201.022] wcscat (in: _Dest=0x7ddb720, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\b8ff4619f784c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\b8ff4619f784c.68814f" [0201.022] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\b8ff4619f784c.68814f", NtPathName=0xc26f7a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\b8ff4619f784c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc630 [0201.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc630) returned 1 [0201.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e95660) returned 1 [0201.263] NtQueryInformationFile (in: FileHandle=0x21e4, IoStatusBlock=0xc26f780, FileInformation=0xc26f788, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc26f780, FileInformation=0xc26f788) returned 0x0 [0201.263] NtSetInformationFile (FileHandle=0x21e4, IoStatusBlock=0xc26f780, FileInformation=0xc26f788, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb720) returned 1 [0208.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c360) returned 1 [0208.562] FlushFileBuffers (hFile=0x21e4) returned 1 [0208.572] CloseHandle (hObject=0x21e4) returned 1 [0209.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01830 [0209.020] wcscpy (in: _Dest=0x3e01830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\" [0209.020] wcscat (in: _Dest=0x3e01830, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\68814F-Readme.txt" [0209.020] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\68814f-readme.txt")) returned 0xffffffff [0209.020] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.325] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc26f7c4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc26f7c4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.327] CloseHandle (hObject=0x17ec) returned 1 [0210.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01830) returned 1 [0210.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb1990) returned 1 Thread: id = 6408 os_tid = 0x13c8 [0190.745] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json")) returned 0x2020 [0190.745] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0196.975] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xed4 [0196.976] GetFileSizeEx (in: hFile=0xed4, lpFileSize=0x1030f7dc | out: lpFileSize=0x1030f7dc*=215) returned 1 [0196.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6198 [0196.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec65a8 [0196.976] NtQuerySystemTime (in: CurrentTime=0x1030f750 | out: CurrentTime=0x1030f750*=132462177755604000) returned 0x0 [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0xe1f98db [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x7496388e [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x22fba559 [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x326ad6bb [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x2184d31a [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x1aeda591 [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x7ccac674 [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x53f9432c [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x6aa444ac [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x1d55daad [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x57886501 [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x77159b65 [0196.976] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x4f37c927 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x70997ae0 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x3a977b5f [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x95816ea [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x5959b026 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x488ba910 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x398c725e [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x2dfeceac [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x662e1c99 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x25fd4fc7 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x58552b40 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x6d93dafd [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x747ce696 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x51a9936e [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x4bab1524 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x1550d880 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x4cd1620a [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x2b909cab [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x663b9040 [0196.977] RtlRandomEx (in: Seed=0x1030f748 | out: Seed=0x1030f748) returned 0x4b9a99ea [0196.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0196.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d84c10 [0196.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d88818 [0196.992] ReadFile (in: hFile=0xed4, lpBuffer=0x7d84c10, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0x1030f744, lpOverlapped=0x0 | out: lpBuffer=0x7d84c10*, lpNumberOfBytesRead=0x1030f744*=0xd7, lpOverlapped=0x0) returned 1 [0196.994] SetFilePointerEx (in: hFile=0xed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.994] WriteFile (in: hFile=0xed4, lpBuffer=0x7d88818*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x1030f748, lpOverlapped=0x0 | out: lpBuffer=0x7d88818*, lpNumberOfBytesWritten=0x1030f748*=0xd7, lpOverlapped=0x0) returned 1 [0200.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0200.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0200.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0200.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d88818) returned 1 [0200.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d84c10) returned 1 [0200.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0200.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a258f0) returned 1 [0200.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37710 [0200.948] SetFilePointerEx (in: hFile=0xed4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.948] WriteFile (in: hFile=0xed4, lpBuffer=0x7cd3830*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1030f7d0, lpOverlapped=0x0 | out: lpBuffer=0x7cd3830*, lpNumberOfBytesWritten=0x1030f7d0*=0x10c, lpOverlapped=0x0) returned 1 [0206.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c9f0 [0206.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0206.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0206.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c978 [0206.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0206.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0206.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0206.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0206.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.164] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="a2") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="cf") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="ea") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="26") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="92") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="f6") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="d8") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="91") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="b9") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="c6") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="73") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="84") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="51") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="10") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="42") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="1c") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="05") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="e5") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="10") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="4b") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="a6") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="f2") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="41") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="8b") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="b2") returned 2 [0206.164] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="ce") returned 2 [0206.164] RtlInitAnsiString (in: DestinationString=0x1030f758, SourceString="a2cfea2692f6d891b9c673845110421c05e5104ba6f2418bb2ce" | out: DestinationString="a2cfea2692f6d891b9c673845110421c05e5104ba6f2418bb2ce") [0206.164] RtlAnsiStringToUnicodeString (in: DestinationString=0x1030f750, SourceString="a2cfea2692f6d891b9c673845110421c05e5104ba6f2418bb2ce", AllocateDestinationString=1 | out: DestinationString="a2cfea2692f6d891b9c673845110421c05e5104ba6f2418bb2ce") returned 0x0 [0206.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c2e8 [0206.165] wcscat (in: _Dest=0x7a5ff08, _Source="a2cfea2692f6d" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\a2cfea2692f6d") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\a2cfea2692f6d" [0206.165] wcscat (in: _Dest=0x7a5ff08, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\a2cfea2692f6d.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\a2cfea2692f6d.68814f" [0206.165] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\a2cfea2692f6d.68814f", NtPathName=0x1030f748, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\a2cfea2692f6d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddcde0 [0208.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcde0) returned 1 [0208.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e97d30) returned 1 [0208.704] NtQueryInformationFile (in: FileHandle=0xed4, IoStatusBlock=0x1030f720, FileInformation=0x1030f728, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1030f720, FileInformation=0x1030f728) returned 0x0 [0208.704] NtSetInformationFile (FileHandle=0xed4, IoStatusBlock=0x1030f720, FileInformation=0x1030f728, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ff08) returned 1 [0209.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c2e8) returned 1 [0209.057] FlushFileBuffers (hFile=0xed4) returned 1 [0210.413] CloseHandle (hObject=0xed4) returned 1 [0213.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3ec7970 [0213.483] wcscpy (in: _Dest=0x3ec7970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\" [0213.483] wcscat (in: _Dest=0x3ec7970, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\68814F-Readme.txt" [0213.483] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\68814f-readme.txt")) returned 0xffffffff [0213.483] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1994 [0213.988] WriteFile (in: hFile=0x1994, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1030f764, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x1030f764*=0x8b9, lpOverlapped=0x0) returned 1 [0214.071] CloseHandle (hObject=0x1994) returned 1 [0214.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7970) returned 1 [0214.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb1ab8) returned 1 Thread: id = 6409 os_tid = 0x13d0 [0190.746] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json")) returned 0x2020 [0190.746] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0196.994] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xecc [0196.995] GetFileSizeEx (in: hFile=0xecc, lpFileSize=0xcb3fed4 | out: lpFileSize=0xcb3fed4*=219) returned 1 [0196.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0196.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec65a8 [0196.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0196.995] NtQuerySystemTime (in: CurrentTime=0xcb3fe48 | out: CurrentTime=0xcb3fe48*=132462177755760000) returned 0x0 [0196.995] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x29d959c0 [0196.995] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x489fda1d [0196.995] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x797d66b9 [0196.995] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x242029a4 [0196.995] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x2df88331 [0196.995] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x3586b60b [0196.995] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0xf19ac7c [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x3e7e6a6f [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x525c36a2 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x34443f60 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0xddd6031 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x55cf17e7 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x636bc00d [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x741ff51f [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x5868e5a5 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0xdec79e [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x14fb2700 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x25299650 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x26ba9c87 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x7610b09c [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x6b2e672f [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x2bbe5e53 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x6a530d76 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0xd910889 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x61452256 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x3a92fb95 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x94220de [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x3f53175d [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x6e13dafa [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x329d518 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x76bcbe66 [0196.996] RtlRandomEx (in: Seed=0xcb3fe40 | out: Seed=0xcb3fe40) returned 0x49d737c9 [0197.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0197.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d8c420 [0197.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c38360 [0197.022] ReadFile (in: hFile=0xecc, lpBuffer=0x7d8c420, nNumberOfBytesToRead=0xdb, lpNumberOfBytesRead=0xcb3fe3c, lpOverlapped=0x0 | out: lpBuffer=0x7d8c420*, lpNumberOfBytesRead=0xcb3fe3c*=0xdb, lpOverlapped=0x0) returned 1 [0197.025] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0197.025] WriteFile (in: hFile=0xecc, lpBuffer=0x7c38360*, nNumberOfBytesToWrite=0xdb, lpNumberOfBytesWritten=0xcb3fe40, lpOverlapped=0x0 | out: lpBuffer=0x7c38360*, lpNumberOfBytesWritten=0xcb3fe40*=0xdb, lpOverlapped=0x0) returned 1 [0200.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0200.534] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0200.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31a0) returned 1 [0200.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c38360) returned 1 [0200.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d8c420) returned 1 [0200.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0200.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a248f0) returned 1 [0200.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a383a0 [0200.535] SetFilePointerEx (in: hFile=0xecc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.535] WriteFile (in: hFile=0xecc, lpBuffer=0x7cac8e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcb3fec8, lpOverlapped=0x0 | out: lpBuffer=0x7cac8e0*, lpNumberOfBytesWritten=0xcb3fec8*=0x10c, lpOverlapped=0x0) returned 1 [0204.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850a0 [0204.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c4c8 [0204.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3830 [0204.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3830) returned 1 [0204.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3830 [0204.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3880 [0204.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ad8 [0204.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ad8) returned 1 [0204.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c4c8) returned 1 [0204.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850a0) returned 1 [0204.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7ad7e70 [0204.324] sprintf (in: _Dest=0x7ad7e70, _Format="%c%c" | out: _Dest="99") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e72, _Format="%c%c" | out: _Dest="a9") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e74, _Format="%c%c" | out: _Dest="a0") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e76, _Format="%c%c" | out: _Dest="01") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e78, _Format="%c%c" | out: _Dest="d0") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e7a, _Format="%c%c" | out: _Dest="1f") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e7c, _Format="%c%c" | out: _Dest="a1") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e7e, _Format="%c%c" | out: _Dest="b5") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e80, _Format="%c%c" | out: _Dest="85") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e82, _Format="%c%c" | out: _Dest="43") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e84, _Format="%c%c" | out: _Dest="81") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e86, _Format="%c%c" | out: _Dest="bd") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e88, _Format="%c%c" | out: _Dest="c5") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e8a, _Format="%c%c" | out: _Dest="58") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e8c, _Format="%c%c" | out: _Dest="37") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e8e, _Format="%c%c" | out: _Dest="a6") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e90, _Format="%c%c" | out: _Dest="02") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e92, _Format="%c%c" | out: _Dest="14") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e94, _Format="%c%c" | out: _Dest="6d") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e96, _Format="%c%c" | out: _Dest="fc") returned 2 [0204.324] sprintf (in: _Dest=0x7ad7e98, _Format="%c%c" | out: _Dest="49") returned 2 [0204.325] sprintf (in: _Dest=0x7ad7e9a, _Format="%c%c" | out: _Dest="08") returned 2 [0204.325] sprintf (in: _Dest=0x7ad7e9c, _Format="%c%c" | out: _Dest="58") returned 2 [0204.325] sprintf (in: _Dest=0x7ad7e9e, _Format="%c%c" | out: _Dest="7c") returned 2 [0204.325] sprintf (in: _Dest=0x7ad7ea0, _Format="%c%c" | out: _Dest="c4") returned 2 [0204.325] sprintf (in: _Dest=0x7ad7ea2, _Format="%c%c" | out: _Dest="42") returned 2 [0204.325] RtlInitAnsiString (in: DestinationString=0xcb3fe50, SourceString="99a9a001d01fa1b5854381bdc55837a602146dfc4908587cc442" | out: DestinationString="99a9a001d01fa1b5854381bdc55837a602146dfc4908587cc442") [0204.325] RtlAnsiStringToUnicodeString (in: DestinationString=0xcb3fe48, SourceString="99a9a001d01fa1b5854381bdc55837a602146dfc4908587cc442", AllocateDestinationString=1 | out: DestinationString="99a9a001d01fa1b5854381bdc55837a602146dfc4908587cc442") returned 0x0 [0204.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c978 [0204.325] wcscat (in: _Dest=0x3eca690, _Source="99a9a001d01fa" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\99a9a001d01fa") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\99a9a001d01fa" [0204.325] wcscat (in: _Dest=0x3eca690, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\99a9a001d01fa.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\99a9a001d01fa.68814f" [0204.325] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\99a9a001d01fa.68814f", NtPathName=0xcb3fe40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\99a9a001d01fa.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0204.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd9300 [0206.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9300) returned 1 [0206.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ced100) returned 1 [0206.214] NtQueryInformationFile (in: FileHandle=0xecc, IoStatusBlock=0xcb3fe18, FileInformation=0xcb3fe20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcb3fe18, FileInformation=0xcb3fe20) returned 0x0 [0206.214] NtSetInformationFile (FileHandle=0xecc, IoStatusBlock=0xcb3fe18, FileInformation=0xcb3fe20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca690) returned 1 [0208.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c978) returned 1 [0208.713] FlushFileBuffers (hFile=0xecc) returned 1 [0208.720] CloseHandle (hObject=0xecc) returned 1 [0209.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7a5f410 [0209.108] wcscpy (in: _Dest=0x7a5f410, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\" [0209.108] wcscat (in: _Dest=0x7a5f410, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\68814F-Readme.txt" [0209.108] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\68814f-readme.txt")) returned 0xffffffff [0209.108] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.933] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcb3fe5c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcb3fe5c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.935] CloseHandle (hObject=0xbb8) returned 1 [0209.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f410) returned 1 [0209.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb1be0) returned 1 Thread: id = 6410 os_tid = 0x13d4 [0190.751] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json")) returned 0x2020 [0194.523] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0198.852] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1804 [0198.852] GetFileSizeEx (in: hFile=0x1804, lpFileSize=0xea4fc8c | out: lpFileSize=0xea4fc8c*=216) returned 1 [0198.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53620 [0198.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540c0 [0198.853] NtQuerySystemTime (in: CurrentTime=0xea4fc00 | out: CurrentTime=0xea4fc00*=132462177774324000) returned 0x0 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x80107dc [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x3df7a358 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x61c85e11 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x78da70f9 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x498db94f [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x1c622aa [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x7a4f43d [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x12eed992 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x5df84317 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x6f519d10 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x32a16f1 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x517571a1 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x5a314286 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x32bf3bf2 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x6b720df3 [0198.853] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x322fe1cb [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x15af6a3 [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x34a7f47b [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x71ade19d [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x7ade06ac [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x75e290c3 [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x709409fe [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x41b1dd14 [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x397413f0 [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x3cd14449 [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x27f85899 [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x1552db0a [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x3a07e2c4 [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x537c0192 [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x39493299 [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x2e1d922b [0198.854] RtlRandomEx (in: Seed=0xea4fbf8 | out: Seed=0xea4fbf8) returned 0x4811fd4c [0198.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f048d0 [0198.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f084d8 [0198.865] ReadFile (in: hFile=0x1804, lpBuffer=0x10f048d0, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0xea4fbf4, lpOverlapped=0x0 | out: lpBuffer=0x10f048d0*, lpNumberOfBytesRead=0xea4fbf4*=0xd8, lpOverlapped=0x0) returned 1 [0198.873] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.873] WriteFile (in: hFile=0x1804, lpBuffer=0x10f084d8*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0xea4fbf8, lpOverlapped=0x0 | out: lpBuffer=0x10f084d8*, lpNumberOfBytesWritten=0xea4fbf8*=0xd8, lpOverlapped=0x0) returned 1 [0204.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0204.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b00 [0204.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b00) returned 1 [0204.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f084d8) returned 1 [0204.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f048d0) returned 1 [0204.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c4c8) returned 1 [0204.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850a0) returned 1 [0204.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38100 [0204.322] SetFilePointerEx (in: hFile=0x1804, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0204.322] WriteFile (in: hFile=0x1804, lpBuffer=0x7b7dd60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xea4fc80, lpOverlapped=0x0 | out: lpBuffer=0x7b7dd60*, lpNumberOfBytesWritten=0xea4fc80*=0x10c, lpOverlapped=0x0) returned 1 [0206.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c9f0 [0206.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53850 [0206.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53850) returned 1 [0206.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53850 [0206.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53800 [0206.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e542c8 [0206.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e542c8) returned 1 [0206.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0206.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.209] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="4d") returned 2 [0206.209] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="86") returned 2 [0206.209] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="f8") returned 2 [0206.209] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="8f") returned 2 [0206.209] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="a0") returned 2 [0206.209] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="5a") returned 2 [0206.209] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="30") returned 2 [0206.209] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="60") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="65") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="03") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="c2") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="84") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="5f") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="f1") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="d1") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="32") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="84") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="d0") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="12") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="aa") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="59") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="66") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="38") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="0d") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="74") returned 2 [0206.210] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="8a") returned 2 [0206.210] RtlInitAnsiString (in: DestinationString=0xea4fc08, SourceString="4d86f88fa05a30606503c2845ff1d13284d012aa5966380d748a" | out: DestinationString="4d86f88fa05a30606503c2845ff1d13284d012aa5966380d748a") [0206.210] RtlAnsiStringToUnicodeString (in: DestinationString=0xea4fc00, SourceString="4d86f88fa05a30606503c2845ff1d13284d012aa5966380d748a", AllocateDestinationString=1 | out: DestinationString="4d86f88fa05a30606503c2845ff1d13284d012aa5966380d748a") returned 0x0 [0206.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c900 [0206.211] wcscat (in: _Dest=0x7a5f410, _Source="4d86f88fa05a3" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\4d86f88fa05a3") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\4d86f88fa05a3" [0206.211] wcscat (in: _Dest=0x7a5f410, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\4d86f88fa05a3.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\4d86f88fa05a3.68814f" [0206.211] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\4d86f88fa05a3.68814f", NtPathName=0xea4fbf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\4d86f88fa05a3.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc8c0 [0208.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc8c0) returned 1 [0208.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e9f5f0) returned 1 [0208.710] NtQueryInformationFile (in: FileHandle=0x1804, IoStatusBlock=0xea4fbd0, FileInformation=0xea4fbd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xea4fbd0, FileInformation=0xea4fbd8) returned 0x0 [0208.710] NtSetInformationFile (FileHandle=0x1804, IoStatusBlock=0xea4fbd0, FileInformation=0xea4fbd8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f410) returned 1 [0209.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c900) returned 1 [0209.102] FlushFileBuffers (hFile=0x1804) returned 1 [0209.111] CloseHandle (hObject=0x1804) returned 1 [0209.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01f20 [0209.406] wcscpy (in: _Dest=0x3e01f20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\" [0209.406] wcscat (in: _Dest=0x3e01f20, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\68814F-Readme.txt" [0209.406] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\68814f-readme.txt")) returned 0xffffffff [0209.407] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.970] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xea4fc14, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xea4fc14*=0x8b9, lpOverlapped=0x0) returned 1 [0209.972] CloseHandle (hObject=0xbb8) returned 1 [0209.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01f20) returned 1 [0209.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb1d08) returned 1 Thread: id = 6411 os_tid = 0x1398 [0190.752] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json")) returned 0x2020 [0194.524] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0198.874] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x180c [0198.874] GetFileSizeEx (in: hFile=0x180c, lpFileSize=0x894f88c | out: lpFileSize=0x894f88c*=216) returned 1 [0198.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540c0 [0198.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cb0 [0198.875] NtQuerySystemTime (in: CurrentTime=0x894f800 | out: CurrentTime=0x894f800*=132462177774480000) returned 0x0 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x4c30cf16 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x3c1984cd [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x5984e42e [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x44b58b73 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x128b8fe3 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x7e91aa51 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x1fbd0676 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x516916a0 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x3805ebad [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x4fae5edb [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x679aa84d [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x581a5ad2 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x1d5e6eb2 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x7b5caa90 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x600038ed [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x6d6abff8 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0xdd9257 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x1661740 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x52a2ea63 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x78e5ce43 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x36e9404d [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x3dc78949 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x4271b9db [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x5144d1bc [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x3a261c09 [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x31dbffae [0198.875] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x5b356348 [0198.876] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x4fa1fa01 [0198.876] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x27d4e9da [0198.876] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x44310637 [0198.876] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x4cca0bc2 [0198.876] RtlRandomEx (in: Seed=0x894f7f8 | out: Seed=0x894f7f8) returned 0x4e85c636 [0198.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f0c0e0 [0198.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f10060 [0198.894] ReadFile (in: hFile=0x180c, lpBuffer=0x10f0c0e0, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0x894f7f4, lpOverlapped=0x0 | out: lpBuffer=0x10f0c0e0*, lpNumberOfBytesRead=0x894f7f4*=0xd8, lpOverlapped=0x0) returned 1 [0198.897] SetFilePointerEx (in: hFile=0x180c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.897] WriteFile (in: hFile=0x180c, lpBuffer=0x10f10060*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x894f7f8, lpOverlapped=0x0 | out: lpBuffer=0x10f10060*, lpNumberOfBytesWritten=0x894f7f8*=0xd8, lpOverlapped=0x0) returned 1 [0200.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0200.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0200.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ba0) returned 1 [0200.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f10060) returned 1 [0200.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f0c0e0) returned 1 [0200.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c540) returned 1 [0200.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0200.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c20 [0200.587] SetFilePointerEx (in: hFile=0x180c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.587] WriteFile (in: hFile=0x180c, lpBuffer=0x7cd27c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x894f880, lpOverlapped=0x0 | out: lpBuffer=0x7cd27c8*, lpNumberOfBytesWritten=0x894f880*=0x10c, lpOverlapped=0x0) returned 1 [0201.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baf0 [0201.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baf0) returned 1 [0201.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305baf0 [0201.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6d0 [0201.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0201.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b730) returned 1 [0201.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.004] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="35") returned 2 [0201.004] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="09") returned 2 [0201.004] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="fa") returned 2 [0201.004] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="46") returned 2 [0201.004] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="9f") returned 2 [0201.004] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="f9") returned 2 [0201.004] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="12") returned 2 [0201.004] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="4a") returned 2 [0201.004] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="7c") returned 2 [0201.004] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="26") returned 2 [0201.004] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="31") returned 2 [0201.004] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="b8") returned 2 [0201.004] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="81") returned 2 [0201.005] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="92") returned 2 [0201.005] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="e8") returned 2 [0201.005] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="b8") returned 2 [0201.005] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="6f") returned 2 [0201.005] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="68") returned 2 [0201.005] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="b7") returned 2 [0201.005] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="66") returned 2 [0201.005] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="7b") returned 2 [0201.005] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="80") returned 2 [0201.005] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="45") returned 2 [0201.005] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="f6") returned 2 [0201.005] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="24") returned 2 [0201.005] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="8c") returned 2 [0201.005] RtlInitAnsiString (in: DestinationString=0x894f808, SourceString="3509fa469ff9124a7c2631b88192e8b86f68b7667b8045f6248c" | out: DestinationString="3509fa469ff9124a7c2631b88192e8b86f68b7667b8045f6248c") [0201.005] RtlAnsiStringToUnicodeString (in: DestinationString=0x894f800, SourceString="3509fa469ff9124a7c2631b88192e8b86f68b7667b8045f6248c", AllocateDestinationString=1 | out: DestinationString="3509fa469ff9124a7c2631b88192e8b86f68b7667b8045f6248c") returned 0x0 [0201.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cbd0 [0201.005] wcscat (in: _Dest=0x7ddb108, _Source="3509fa469ff91" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\3509fa469ff91") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\3509fa469ff91" [0201.005] wcscat (in: _Dest=0x7ddb108, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\3509fa469ff91.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\3509fa469ff91.68814f" [0201.006] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\3509fa469ff91.68814f", NtPathName=0x894f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\3509fa469ff91.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9fd0 [0201.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9fd0) returned 1 [0201.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94b98) returned 1 [0201.256] NtQueryInformationFile (in: FileHandle=0x180c, IoStatusBlock=0x894f7d0, FileInformation=0x894f7d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x894f7d0, FileInformation=0x894f7d8) returned 0x0 [0201.257] NtSetInformationFile (FileHandle=0x180c, IoStatusBlock=0x894f7d0, FileInformation=0x894f7d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb108) returned 1 [0206.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cbd0) returned 1 [0206.258] FlushFileBuffers (hFile=0x180c) returned 1 [0206.270] CloseHandle (hObject=0x180c) returned 1 [0208.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cabbe0 [0208.754] wcscpy (in: _Dest=0x7cabbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\" [0208.754] wcscat (in: _Dest=0x7cabbe0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\68814F-Readme.txt" [0208.754] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\68814f-readme.txt")) returned 0xffffffff [0208.755] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.765] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x894f814, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x894f814*=0x8b9, lpOverlapped=0x0) returned 1 [0209.767] CloseHandle (hObject=0x16e0) returned 1 [0209.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabbe0) returned 1 [0209.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb1e30) returned 1 Thread: id = 6412 os_tid = 0x13dc [0190.752] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0194.524] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0198.897] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1814 [0198.898] GetFileSizeEx (in: hFile=0x1814, lpFileSize=0xe53fee4 | out: lpFileSize=0xe53fee4*=206) returned 1 [0198.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cb0 [0198.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53288 [0198.898] NtQuerySystemTime (in: CurrentTime=0xe53fe58 | out: CurrentTime=0xe53fe58*=132462177774792000) returned 0x0 [0198.898] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x33078e6a [0198.898] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x49006e09 [0198.898] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x3ffbff0c [0198.898] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x45be0266 [0198.898] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x59981878 [0198.898] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x669c6ba6 [0198.898] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x7666d378 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x4047435a [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x1efbe320 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x4cbcbc2f [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0xf4133f5 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x7c3441b [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x2d2fd685 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x6ebc3061 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x14e6edfb [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x3f5c63aa [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x11350db2 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x6502c0 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x72df5343 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x6c4c24fd [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x123a5587 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0xa40e31 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x1ede303a [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x6e34ee05 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x469c6878 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x614ee11a [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x1bfc2463 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x5c2087b8 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x7e14b923 [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0xd099e7c [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x59b9260e [0198.899] RtlRandomEx (in: Seed=0xe53fe50 | out: Seed=0xe53fe50) returned 0x2147e374 [0198.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f13c68 [0198.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f17870 [0198.924] ReadFile (in: hFile=0x1814, lpBuffer=0x10f13c68, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0xe53fe4c, lpOverlapped=0x0 | out: lpBuffer=0x10f13c68*, lpNumberOfBytesRead=0xe53fe4c*=0xce, lpOverlapped=0x0) returned 1 [0198.928] SetFilePointerEx (in: hFile=0x1814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.928] WriteFile (in: hFile=0x1814, lpBuffer=0x10f17870*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0xe53fe50, lpOverlapped=0x0 | out: lpBuffer=0x10f17870*, lpNumberOfBytesWritten=0xe53fe50*=0xce, lpOverlapped=0x0) returned 1 [0200.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aee8 [0200.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfc8 [0200.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bfc8) returned 1 [0200.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f17870) returned 1 [0200.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f13c68) returned 1 [0200.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c5b8) returned 1 [0200.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85130) returned 1 [0200.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ce0 [0200.923] SetFilePointerEx (in: hFile=0x1814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.923] WriteFile (in: hFile=0x1814, lpBuffer=0x7cd2598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe53fed8, lpOverlapped=0x0 | out: lpBuffer=0x7cd2598*, lpNumberOfBytesWritten=0xe53fed8*=0x10c, lpOverlapped=0x0) returned 1 [0201.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0201.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b848 [0201.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b848) returned 1 [0201.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b848 [0201.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0201.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0201.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6f8) returned 1 [0201.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0201.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.205] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="7a") returned 2 [0201.205] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="97") returned 2 [0201.205] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="a5") returned 2 [0201.205] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="7d") returned 2 [0201.205] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="58") returned 2 [0201.205] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="f5") returned 2 [0201.206] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="7e") returned 2 [0201.206] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="cb") returned 2 [0201.206] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="f8") returned 2 [0201.206] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="f6") returned 2 [0201.206] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="08") returned 2 [0201.206] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="67") returned 2 [0201.206] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="dc") returned 2 [0201.206] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="00") returned 2 [0201.206] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="df") returned 2 [0201.206] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="35") returned 2 [0201.206] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="33") returned 2 [0201.206] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="c5") returned 2 [0201.206] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="76") returned 2 [0201.206] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="ce") returned 2 [0201.206] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="e8") returned 2 [0201.206] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="4e") returned 2 [0201.206] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="27") returned 2 [0201.206] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="9f") returned 2 [0201.206] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="4d") returned 2 [0201.207] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="3f") returned 2 [0201.207] RtlInitAnsiString (in: DestinationString=0xe53fe60, SourceString="7a97a57d58f57ecbf8f60867dc00df3533c576cee84e279f4d3f" | out: DestinationString="7a97a57d58f57ecbf8f60867dc00df3533c576cee84e279f4d3f") [0201.207] RtlAnsiStringToUnicodeString (in: DestinationString=0xe53fe58, SourceString="7a97a57d58f57ecbf8f60867dc00df3533c576cee84e279f4d3f", AllocateDestinationString=1 | out: DestinationString="7a97a57d58f57ecbf8f60867dc00df3533c576cee84e279f4d3f") returned 0x0 [0201.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f308 [0201.207] wcscat (in: _Dest=0x7dde610, _Source="7a97a57d58f57" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\7a97a57d58f57") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\7a97a57d58f57" [0201.207] wcscat (in: _Dest=0x7dde610, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\7a97a57d58f57.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\7a97a57d58f57.68814f" [0201.207] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\7a97a57d58f57.68814f", NtPathName=0xe53fe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\7a97a57d58f57.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0b020 [0201.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b020) returned 1 [0201.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e93c80) returned 1 [0201.451] NtQueryInformationFile (in: FileHandle=0x1814, IoStatusBlock=0xe53fe28, FileInformation=0xe53fe30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe53fe28, FileInformation=0xe53fe30) returned 0x0 [0201.451] NtSetInformationFile (FileHandle=0x1814, IoStatusBlock=0xe53fe28, FileInformation=0xe53fe30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0210.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dde610) returned 1 [0210.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0210.217] FlushFileBuffers (hFile=0x1814) returned 1 [0210.237] CloseHandle (hObject=0x1814) returned 1 [0210.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7a5f068 [0210.239] wcscpy (in: _Dest=0x7a5f068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\" [0210.239] wcscat (in: _Dest=0x7a5f068, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\68814F-Readme.txt" [0210.239] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\68814f-readme.txt")) returned 0xffffffff [0210.239] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1814 [0210.240] WriteFile (in: hFile=0x1814, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe53fe6c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe53fe6c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.242] CloseHandle (hObject=0x1814) returned 1 [0210.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f068) returned 1 [0210.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6de0) returned 1 Thread: id = 6413 os_tid = 0x13e0 [0190.753] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json")) returned 0x2020 [0194.525] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0198.928] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1568 [0198.929] GetFileSizeEx (in: hFile=0x1568, lpFileSize=0xec3fcb4 | out: lpFileSize=0xec3fcb4*=224) returned 1 [0198.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53288 [0198.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537b0 [0198.930] NtQuerySystemTime (in: CurrentTime=0xec3fc28 | out: CurrentTime=0xec3fc28*=132462177775104000) returned 0x0 [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x26abfe50 [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x1fe96284 [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x7132d65f [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x2b3c31a4 [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0xb80fdc7 [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x7fd77efc [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x4ae22346 [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x4810e3 [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x634393a1 [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0xe542e97 [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x37e5fc43 [0198.930] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x11d44306 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x2a66a646 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x2cc52143 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x5b674c7 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x63c5c050 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x6c91b9e1 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x192bc9c5 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x2cd462cc [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x453570ff [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x5df43c8e [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x33e77ddf [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x10a4d7c1 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x30fb52bb [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x686f45d2 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x7322918 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x7121df8 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x37202a4b [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x677e4b7d [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x4133e345 [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x10a1146a [0198.931] RtlRandomEx (in: Seed=0xec3fc20 | out: Seed=0xec3fc20) returned 0x186d3a1a [0198.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f1b478 [0198.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f1f080 [0198.947] ReadFile (in: hFile=0x1568, lpBuffer=0x10f1b478, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xec3fc1c, lpOverlapped=0x0 | out: lpBuffer=0x10f1b478*, lpNumberOfBytesRead=0xec3fc1c*=0xe0, lpOverlapped=0x0) returned 1 [0198.950] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.950] WriteFile (in: hFile=0x1568, lpBuffer=0x10f1f080*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xec3fc20, lpOverlapped=0x0 | out: lpBuffer=0x10f1f080*, lpNumberOfBytesWritten=0xec3fc20*=0xe0, lpOverlapped=0x0) returned 1 [0200.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0200.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0200.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c50) returned 1 [0200.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f1f080) returned 1 [0200.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f1b478) returned 1 [0200.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c630) returned 1 [0200.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85178) returned 1 [0200.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38100 [0200.549] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.549] WriteFile (in: hFile=0x1568, lpBuffer=0x7a38ea8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xec3fca8, lpOverlapped=0x0 | out: lpBuffer=0x7a38ea8*, lpNumberOfBytesWritten=0xec3fca8*=0x10c, lpOverlapped=0x0) returned 1 [0200.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0200.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0200.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ba50 [0200.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0200.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0200.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0200.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.853] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="fa") returned 2 [0200.853] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ae") returned 2 [0200.853] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.853] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="59") returned 2 [0200.853] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="2c") returned 2 [0200.854] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.854] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.854] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="05") returned 2 [0200.854] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="71") returned 2 [0200.854] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="8d") returned 2 [0200.854] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="b9") returned 2 [0200.854] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="92") returned 2 [0200.854] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="9f") returned 2 [0200.854] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="1b") returned 2 [0200.854] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="58") returned 2 [0200.854] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="4b") returned 2 [0200.854] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="37") returned 2 [0200.854] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="3b") returned 2 [0200.854] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="2f") returned 2 [0200.854] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="62") returned 2 [0200.854] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="65") returned 2 [0200.854] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.854] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="7e") returned 2 [0200.854] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="5c") returned 2 [0200.854] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="e4") returned 2 [0200.854] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="3e") returned 2 [0200.854] RtlInitAnsiString (in: DestinationString=0xec3fc30, SourceString="faae4a592cbb9b05718db9929f1b584b373b2f6265e37e5ce43e" | out: DestinationString="faae4a592cbb9b05718db9929f1b584b373b2f6265e37e5ce43e") [0200.854] RtlAnsiStringToUnicodeString (in: DestinationString=0xec3fc28, SourceString="faae4a592cbb9b05718db9929f1b584b373b2f6265e37e5ce43e", AllocateDestinationString=1 | out: DestinationString="faae4a592cbb9b05718db9929f1b584b373b2f6265e37e5ce43e") returned 0x0 [0200.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cd38 [0200.855] wcscat (in: _Dest=0x7cd5d60, _Source="faae4a592cbb9" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\faae4a592cbb9") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\faae4a592cbb9" [0200.855] wcscat (in: _Dest=0x7cd5d60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\faae4a592cbb9.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\faae4a592cbb9.68814f" [0200.855] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\faae4a592cbb9.68814f", NtPathName=0xec3fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\faae4a592cbb9.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd8f28 [0201.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8f28) returned 1 [0201.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd7e88) returned 1 [0201.166] NtQueryInformationFile (in: FileHandle=0x1568, IoStatusBlock=0xec3fbf8, FileInformation=0xec3fc00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xec3fbf8, FileInformation=0xec3fc00) returned 0x0 [0201.166] NtSetInformationFile (FileHandle=0x1568, IoStatusBlock=0xec3fbf8, FileInformation=0xec3fc00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5d60) returned 1 [0201.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cd38) returned 1 [0201.403] FlushFileBuffers (hFile=0x1568) returned 1 [0201.417] CloseHandle (hObject=0x1568) returned 1 [0208.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cab178 [0208.574] wcscpy (in: _Dest=0x7cab178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\" [0208.574] wcscat (in: _Dest=0x7cab178, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\68814F-Readme.txt" [0208.574] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\68814f-readme.txt")) returned 0xffffffff [0208.574] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1234 [0209.023] WriteFile (in: hFile=0x1234, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xec3fc3c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xec3fc3c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.710] CloseHandle (hObject=0x1234) returned 1 [0209.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab178) returned 1 [0209.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2020) returned 1 Thread: id = 6414 os_tid = 0x13e4 [0190.753] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json")) returned 0x2020 [0194.526] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0201.920] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1db8 [0201.921] GetFileSizeEx (in: hFile=0x1db8, lpFileSize=0xceffe8c | out: lpFileSize=0xceffe8c*=228) returned 1 [0201.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0201.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0201.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3088 [0201.922] NtQuerySystemTime (in: CurrentTime=0xceffe00 | out: CurrentTime=0xceffe00*=132462177805056000) returned 0x0 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x3f9eeffa [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x4725596f [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x5df0940e [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x48112373 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x34233f06 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x640b3cba [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x35294253 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x64c5a261 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x39901760 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x29f59807 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x5ae18ed3 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x7d32fbfc [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x691ca8a1 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x326a47fa [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x647b66a1 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x7486f028 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x36cb78ca [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x431955e6 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x651596ba [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x6005646e [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x41ed1c2c [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x55859150 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x26b19f95 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x4e831ce3 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0xa2187bf [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x6c8eb953 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x5c30d1bf [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x23c5300 [0201.922] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x2904ebd2 [0201.923] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x58c13249 [0201.923] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x73de5afb [0201.923] RtlRandomEx (in: Seed=0xceffdf8 | out: Seed=0xceffdf8) returned 0x61fcda7b [0202.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d9f3c0 [0202.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7da2fc8 [0202.035] ReadFile (in: hFile=0x1db8, lpBuffer=0x7d9f3c0, nNumberOfBytesToRead=0xe4, lpNumberOfBytesRead=0xceffdf4, lpOverlapped=0x0 | out: lpBuffer=0x7d9f3c0*, lpNumberOfBytesRead=0xceffdf4*=0xe4, lpOverlapped=0x0) returned 1 [0202.037] SetFilePointerEx (in: hFile=0x1db8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.037] WriteFile (in: hFile=0x1db8, lpBuffer=0x7da2fc8*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0xceffdf8, lpOverlapped=0x0 | out: lpBuffer=0x7da2fc8*, lpNumberOfBytesWritten=0xceffdf8*=0xe4, lpOverlapped=0x0) returned 1 [0206.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c860 [0206.018] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0206.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0206.018] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7da2fc8) returned 1 [0206.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d9f3c0) returned 1 [0206.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 [0206.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a241a0) returned 1 [0206.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a380a0 [0206.019] SetFilePointerEx (in: hFile=0x1db8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.019] WriteFile (in: hFile=0x1db8, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xceffe80, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xceffe80*=0x10c, lpOverlapped=0x0) returned 1 [0206.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0206.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0206.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bd70 [0206.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0206.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0206.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b398) returned 1 [0206.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.399] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="a2") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="60") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="19") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="10") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="71") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="f4") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="1c") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="ed") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="71") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="79") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="b6") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="cd") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="04") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="72") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="0f") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="30") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="bd") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="fc") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="a0") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="05") returned 2 [0206.399] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="e1") returned 2 [0206.400] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="85") returned 2 [0206.400] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="0b") returned 2 [0206.400] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="fe") returned 2 [0206.400] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="77") returned 2 [0206.400] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="cd") returned 2 [0206.400] RtlInitAnsiString (in: DestinationString=0xceffe08, SourceString="a260191071f41ced7179b6cd04720f30bdfca005e1850bfe77cd" | out: DestinationString="a260191071f41ced7179b6cd04720f30bdfca005e1850bfe77cd") [0206.400] RtlAnsiStringToUnicodeString (in: DestinationString=0xceffe00, SourceString="a260191071f41ced7179b6cd04720f30bdfca005e1850bfe77cd", AllocateDestinationString=1 | out: DestinationString="a260191071f41ced7179b6cd04720f30bdfca005e1850bfe77cd") returned 0x0 [0206.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e580 [0206.400] wcscat (in: _Dest=0x7a5eb88, _Source="a260191071f41" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\a260191071f41") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\a260191071f41" [0206.400] wcscat (in: _Dest=0x7a5eb88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\a260191071f41.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\a260191071f41.68814f" [0206.400] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\a260191071f41.68814f", NtPathName=0xceffdf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\a260191071f41.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9448 [0208.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9448) returned 1 [0208.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e9d7c0) returned 1 [0208.836] NtQueryInformationFile (in: FileHandle=0x1db8, IoStatusBlock=0xceffdd0, FileInformation=0xceffdd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xceffdd0, FileInformation=0xceffdd8) returned 0x0 [0208.836] NtSetInformationFile (FileHandle=0x1db8, IoStatusBlock=0xceffdd0, FileInformation=0xceffdd8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5eb88) returned 1 [0209.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e580) returned 1 [0209.140] FlushFileBuffers (hFile=0x1db8) returned 1 [0209.151] CloseHandle (hObject=0x1db8) returned 1 [0209.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02170 [0209.411] wcscpy (in: _Dest=0x3e02170, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\" [0209.411] wcscat (in: _Dest=0x3e02170, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\68814F-Readme.txt" [0209.411] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\68814f-readme.txt")) returned 0xffffffff [0209.411] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.980] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xceffe14, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xceffe14*=0x8b9, lpOverlapped=0x0) returned 1 [0209.988] CloseHandle (hObject=0xbb8) returned 1 [0209.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02170) returned 1 [0209.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2148) returned 1 Thread: id = 6415 os_tid = 0x13e8 [0190.753] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json")) returned 0x2020 [0194.527] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0202.037] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1494 [0202.038] GetFileSizeEx (in: hFile=0x1494, lpFileSize=0xe7ffb34 | out: lpFileSize=0xe7ffb34*=207) returned 1 [0202.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3088 [0202.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0202.039] NtQuerySystemTime (in: CurrentTime=0xe7ffaa8 | out: CurrentTime=0xe7ffaa8*=132462177806148000) returned 0x0 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x1362d8fc [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x6df7a3cd [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x1c38a310 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x7813c9c6 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x1aecc37b [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x1d10511c [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x15bcee86 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x5df61cdf [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x3871b870 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x8fdb80 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x16f90dce [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x755ca06 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x1d0cb044 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x1a0972c4 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0xebe1938 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x7bf7cb56 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x6447ecff [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x4070adaa [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x5262a202 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0xbab440 [0202.039] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x2889524b [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x50732e99 [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x68af2317 [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x105ed542 [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x790b63c3 [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x6ea142f4 [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x4760e448 [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x7017ac52 [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x13a76bec [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x5f970fbf [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x751b9af7 [0202.040] RtlRandomEx (in: Seed=0xe7ffaa0 | out: Seed=0xe7ffaa0) returned 0x6f0ff839 [0202.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7dae3e0 [0202.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7db1fe8 [0202.052] ReadFile (in: hFile=0x1494, lpBuffer=0x7dae3e0, nNumberOfBytesToRead=0xcf, lpNumberOfBytesRead=0xe7ffa9c, lpOverlapped=0x0 | out: lpBuffer=0x7dae3e0*, lpNumberOfBytesRead=0xe7ffa9c*=0xcf, lpOverlapped=0x0) returned 1 [0202.054] SetFilePointerEx (in: hFile=0x1494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.054] WriteFile (in: hFile=0x1494, lpBuffer=0x7db1fe8*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0xe7ffaa0, lpOverlapped=0x0 | out: lpBuffer=0x7db1fe8*, lpNumberOfBytesWritten=0xe7ffaa0*=0xcf, lpOverlapped=0x0) returned 1 [0206.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0206.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b528 [0206.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0206.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db1fe8) returned 1 [0206.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dae3e0) returned 1 [0206.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3efc0) returned 1 [0206.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24bc0) returned 1 [0206.022] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ec0 [0206.022] SetFilePointerEx (in: hFile=0x1494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.022] WriteFile (in: hFile=0x1494, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe7ffb28, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xe7ffb28*=0x10c, lpOverlapped=0x0) returned 1 [0206.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0206.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0206.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3420 [0206.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cf0 [0206.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0206.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0206.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.404] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="68") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="36") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="14") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="11") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="46") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="7a") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="29") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="d9") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="1a") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="1c") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="48") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="7d") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="16") returned 2 [0206.404] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="cd") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="a8") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="f5") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="ae") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="97") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="11") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="ff") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="bb") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="16") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="70") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="6d") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="41") returned 2 [0206.405] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="52") returned 2 [0206.405] RtlInitAnsiString (in: DestinationString=0xe7ffab0, SourceString="68361411467a29d91a1c487d16cda8f5ae9711ffbb16706d4152" | out: DestinationString="68361411467a29d91a1c487d16cda8f5ae9711ffbb16706d4152") [0206.405] RtlAnsiStringToUnicodeString (in: DestinationString=0xe7ffaa8, SourceString="68361411467a29d91a1c487d16cda8f5ae9711ffbb16706d4152", AllocateDestinationString=1 | out: DestinationString="68361411467a29d91a1c487d16cda8f5ae9711ffbb16706d4152") returned 0x0 [0206.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e418 [0206.406] wcscat (in: _Dest=0x7a5edf8, _Source="68361411467a2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68361411467a2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68361411467a2" [0206.406] wcscat (in: _Dest=0x7a5edf8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68361411467a2.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68361411467a2.68814f" [0206.406] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68361411467a2.68814f", NtPathName=0xe7ffaa0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68361411467a2.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9300 [0208.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9300) returned 1 [0208.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e248e8) returned 1 [0208.838] NtQueryInformationFile (in: FileHandle=0x1494, IoStatusBlock=0xe7ffa78, FileInformation=0xe7ffa80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe7ffa78, FileInformation=0xe7ffa80) returned 0x0 [0208.838] NtSetInformationFile (FileHandle=0x1494, IoStatusBlock=0xe7ffa78, FileInformation=0xe7ffa80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5edf8) returned 1 [0209.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0209.144] FlushFileBuffers (hFile=0x1494) returned 1 [0209.161] CloseHandle (hObject=0x1494) returned 1 [0209.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02298 [0209.413] wcscpy (in: _Dest=0x3e02298, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\" [0209.413] wcscat (in: _Dest=0x3e02298, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68814F-Readme.txt" [0209.413] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68814f-readme.txt")) returned 0xffffffff [0209.413] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.990] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe7ffabc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe7ffabc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.992] CloseHandle (hObject=0xbb8) returned 1 [0209.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02298) returned 1 [0209.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2270) returned 1 Thread: id = 6416 os_tid = 0x13ec [0190.754] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json")) returned 0x2020 [0194.528] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0202.055] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11f4 [0202.056] GetFileSizeEx (in: hFile=0x11f4, lpFileSize=0x101cfeb4 | out: lpFileSize=0x101cfeb4*=217) returned 1 [0202.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0202.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0202.056] NtQuerySystemTime (in: CurrentTime=0x101cfe28 | out: CurrentTime=0x101cfe28*=132462177806304000) returned 0x0 [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x7f97ada6 [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x1da76afa [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x2884aabf [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0xb7d9aec [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x6d6a5887 [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x1b2b0d71 [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x526fd1d1 [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x35109b94 [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x47e5d77d [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x3edc6bef [0202.056] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x3d54f9d8 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x256b2acd [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x1e55e1f0 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x1b5a411a [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x19098054 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x2bfea531 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x7123b044 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x6f52c863 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x92b65ba [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0xd9ea96d [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x263d3705 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x312b1b2a [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x7e62d9bf [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x6cdd0d41 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x3da5bb6e [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x5c7792c8 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x418c1e4 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x576fa00d [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x6d7960e7 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x2e49166f [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x627d0744 [0202.057] RtlRandomEx (in: Seed=0x101cfe20 | out: Seed=0x101cfe20) returned 0x578c7ee [0202.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d903a0 [0202.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d93fa8 [0202.071] ReadFile (in: hFile=0x11f4, lpBuffer=0x7d903a0, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0x101cfe1c, lpOverlapped=0x0 | out: lpBuffer=0x7d903a0*, lpNumberOfBytesRead=0x101cfe1c*=0xd9, lpOverlapped=0x0) returned 1 [0202.073] SetFilePointerEx (in: hFile=0x11f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.073] WriteFile (in: hFile=0x11f4, lpBuffer=0x7d93fa8*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x101cfe20, lpOverlapped=0x0 | out: lpBuffer=0x7d93fa8*, lpNumberOfBytesWritten=0x101cfe20*=0xd9, lpOverlapped=0x0) returned 1 [0206.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0206.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0206.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0206.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d93fa8) returned 1 [0206.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d903a0) returned 1 [0206.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0206.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a243e0) returned 1 [0206.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37f80 [0206.028] SetFilePointerEx (in: hFile=0x11f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.028] WriteFile (in: hFile=0x11f4, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x101cfea8, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0x101cfea8*=0x10c, lpOverlapped=0x0) returned 1 [0206.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0206.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4be0) returned 1 [0206.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4be0 [0206.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0206.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0206.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0206.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.416] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="01") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="10") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="b1") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="51") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="ea") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="6e") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="85") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="c5") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="53") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="6e") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="66") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="90") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="b1") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="c9") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="9a") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="17") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="ba") returned 2 [0206.416] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="dc") returned 2 [0206.417] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="b8") returned 2 [0206.417] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="60") returned 2 [0206.417] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="96") returned 2 [0206.417] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="05") returned 2 [0206.417] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="8b") returned 2 [0206.417] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="0a") returned 2 [0206.417] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="83") returned 2 [0206.417] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="d1") returned 2 [0206.417] RtlInitAnsiString (in: DestinationString=0x101cfe30, SourceString="0110b151ea6e85c5536e6690b1c99a17badcb86096058b0a83d1" | out: DestinationString="0110b151ea6e85c5536e6690b1c99a17badcb86096058b0a83d1") [0206.417] RtlAnsiStringToUnicodeString (in: DestinationString=0x101cfe28, SourceString="0110b151ea6e85c5536e6690b1c99a17badcb86096058b0a83d1", AllocateDestinationString=1 | out: DestinationString="0110b151ea6e85c5536e6690b1c99a17badcb86096058b0a83d1") returned 0x0 [0206.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e490 [0206.417] wcscat (in: _Dest=0x7a5e300, _Source="0110b151ea6e8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\0110b151ea6e8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\0110b151ea6e8" [0206.417] wcscat (in: _Dest=0x7a5e300, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\0110b151ea6e8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\0110b151ea6e8.68814f" [0206.417] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\0110b151ea6e8.68814f", NtPathName=0x101cfe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\0110b151ea6e8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dda118 [0208.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda118) returned 1 [0208.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24d38) returned 1 [0208.841] NtQueryInformationFile (in: FileHandle=0x11f4, IoStatusBlock=0x101cfdf8, FileInformation=0x101cfe00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x101cfdf8, FileInformation=0x101cfe00) returned 0x0 [0208.841] NtSetInformationFile (FileHandle=0x11f4, IoStatusBlock=0x101cfdf8, FileInformation=0x101cfe00, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e300) returned 1 [0209.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 [0209.154] FlushFileBuffers (hFile=0x11f4) returned 1 [0209.171] CloseHandle (hObject=0x11f4) returned 1 [0209.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e024e8 [0209.416] wcscpy (in: _Dest=0x3e024e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\" [0209.416] wcscat (in: _Dest=0x3e024e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\68814F-Readme.txt" [0209.417] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\68814f-readme.txt")) returned 0xffffffff [0209.417] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.997] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x101cfe3c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x101cfe3c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.999] CloseHandle (hObject=0xbb8) returned 1 [0210.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e024e8) returned 1 [0210.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2398) returned 1 Thread: id = 6417 os_tid = 0x13f0 [0190.754] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json")) returned 0x2020 [0194.529] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0202.074] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18d8 [0202.074] GetFileSizeEx (in: hFile=0x18d8, lpFileSize=0xcfcfe2c | out: lpFileSize=0xcfcfe2c*=195) returned 1 [0202.074] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0202.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0202.096] NtQuerySystemTime (in: CurrentTime=0xcfcfda0 | out: CurrentTime=0xcfcfda0*=132462177806772000) returned 0x0 [0202.096] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x1e01c714 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x56a0efd0 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x6ecb81a3 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x488fb74a [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x5c13bd0 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x58751122 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x5e6b227f [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x4837f58e [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0xf5140 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x2a58d1ff [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x585239c6 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x43f39fa [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0xad81618 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x74da4bc7 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x49a47454 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x3611d1fd [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x5aef62cb [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x282d16f1 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x480d55c0 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x40e90329 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x3ac2e20a [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x7af3644d [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x263ca696 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x776de544 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x7c450cd4 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x5efbef5e [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x47bd2224 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x10076e3 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x7afd4366 [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x66d2cc6a [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0x2946954d [0202.097] RtlRandomEx (in: Seed=0xcfcfd98 | out: Seed=0xcfcfd98) returned 0xcb92ec9 [0202.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7dc4c10 [0202.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7dc8818 [0202.107] ReadFile (in: hFile=0x18d8, lpBuffer=0x7dc4c10, nNumberOfBytesToRead=0xc3, lpNumberOfBytesRead=0xcfcfd94, lpOverlapped=0x0 | out: lpBuffer=0x7dc4c10*, lpNumberOfBytesRead=0xcfcfd94*=0xc3, lpOverlapped=0x0) returned 1 [0202.109] SetFilePointerEx (in: hFile=0x18d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.109] WriteFile (in: hFile=0x18d8, lpBuffer=0x7dc8818*, nNumberOfBytesToWrite=0xc3, lpNumberOfBytesWritten=0xcfcfd98, lpOverlapped=0x0 | out: lpBuffer=0x7dc8818*, lpNumberOfBytesWritten=0xcfcfd98*=0xc3, lpOverlapped=0x0) returned 1 [0206.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0206.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0206.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0206.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc8818) returned 1 [0206.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc4c10) returned 1 [0206.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0206.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a246b0) returned 1 [0206.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37f20 [0206.027] SetFilePointerEx (in: hFile=0x18d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.027] WriteFile (in: hFile=0x18d8, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcfcfe20, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xcfcfe20*=0x10c, lpOverlapped=0x0) returned 1 [0206.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0206.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3538) returned 1 [0206.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3538 [0206.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0206.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3088 [0206.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3088) returned 1 [0206.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.410] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="9f") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="a0") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="0d") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="16") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="67") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="69") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="c8") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="41") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="f0") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="ee") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="29") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="6b") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="f0") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="ea") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="e2") returned 2 [0206.410] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="26") returned 2 [0206.411] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="07") returned 2 [0206.411] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="8b") returned 2 [0206.411] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="0c") returned 2 [0206.411] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="ad") returned 2 [0206.411] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="85") returned 2 [0206.411] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="70") returned 2 [0206.411] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="2d") returned 2 [0206.411] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="00") returned 2 [0206.411] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="c6") returned 2 [0206.411] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="74") returned 2 [0206.411] RtlInitAnsiString (in: DestinationString=0xcfcfda8, SourceString="9fa00d166769c841f0ee296bf0eae226078b0cad85702d00c674" | out: DestinationString="9fa00d166769c841f0ee296bf0eae226078b0cad85702d00c674") [0206.411] RtlAnsiStringToUnicodeString (in: DestinationString=0xcfcfda0, SourceString="9fa00d166769c841f0ee296bf0eae226078b0cad85702d00c674", AllocateDestinationString=1 | out: DestinationString="9fa00d166769c841f0ee296bf0eae226078b0cad85702d00c674") returned 0x0 [0206.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e940 [0206.411] wcscat (in: _Dest=0x7a5e090, _Source="9fa00d166769c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\9fa00d166769c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\9fa00d166769c" [0206.412] wcscat (in: _Dest=0x7a5e090, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\9fa00d166769c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\9fa00d166769c.68814f" [0206.412] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\9fa00d166769c.68814f", NtPathName=0xcfcfd98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\9fa00d166769c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9ab0 [0208.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9ab0) returned 1 [0208.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24b10) returned 1 [0208.839] NtQueryInformationFile (in: FileHandle=0x18d8, IoStatusBlock=0xcfcfd70, FileInformation=0xcfcfd78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcfcfd70, FileInformation=0xcfcfd78) returned 0x0 [0208.839] NtSetInformationFile (FileHandle=0x18d8, IoStatusBlock=0xcfcfd70, FileInformation=0xcfcfd78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0209.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0209.148] FlushFileBuffers (hFile=0x18d8) returned 1 [0209.166] CloseHandle (hObject=0x18d8) returned 1 [0209.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e023c0 [0209.414] wcscpy (in: _Dest=0x3e023c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\" [0209.414] wcscat (in: _Dest=0x3e023c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\68814F-Readme.txt" [0209.414] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\68814f-readme.txt")) returned 0xffffffff [0209.415] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.994] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcfcfdb4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcfcfdb4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.996] CloseHandle (hObject=0xbb8) returned 1 [0209.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e023c0) returned 1 [0209.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb24c0) returned 1 Thread: id = 6418 os_tid = 0x13f4 [0190.754] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json")) returned 0x2020 [0194.529] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0202.109] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xff0 [0202.110] GetFileSizeEx (in: hFile=0xff0, lpFileSize=0xb52fbd4 | out: lpFileSize=0xb52fbd4*=213) returned 1 [0202.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0202.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0202.110] NtQuerySystemTime (in: CurrentTime=0xb52fb48 | out: CurrentTime=0xb52fb48*=132462177806928000) returned 0x0 [0202.110] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x1a5f3a80 [0202.110] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x5d94e6bf [0202.110] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x57e6b8f6 [0202.110] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x5dab3cf8 [0202.110] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x4b5f3a41 [0202.110] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x5d724755 [0202.110] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x44a24c7c [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x70740ea4 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x5a26becd [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x4fbc4932 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x4f2c444 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x2a284172 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x5e4049bf [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x4a37efcb [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x7ee4bee5 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x6a4ca80d [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x30e08bb2 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x7eec4943 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x75c48235 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x5f7ad048 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x27162f3a [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x30066e8b [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x1869cb23 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x2c121be8 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x73aa802 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x5fe49add [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x17d6f82c [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x904b57d [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x1e3a6929 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x3a3f1d05 [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x5dbfbf7f [0202.111] RtlRandomEx (in: Seed=0xb52fb40 | out: Seed=0xb52fb40) returned 0x1c0af6a7 [0202.122] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d97bb0 [0202.122] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d9b7b8 [0202.122] ReadFile (in: hFile=0xff0, lpBuffer=0x7d97bb0, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0xb52fb3c, lpOverlapped=0x0 | out: lpBuffer=0x7d97bb0*, lpNumberOfBytesRead=0xb52fb3c*=0xd5, lpOverlapped=0x0) returned 1 [0202.125] SetFilePointerEx (in: hFile=0xff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.125] WriteFile (in: hFile=0xff0, lpBuffer=0x7d9b7b8*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0xb52fb40, lpOverlapped=0x0 | out: lpBuffer=0x7d9b7b8*, lpNumberOfBytesWritten=0xb52fb40*=0xd5, lpOverlapped=0x0) returned 1 [0206.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0206.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0206.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0206.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d9b7b8) returned 1 [0206.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d97bb0) returned 1 [0206.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0206.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24938) returned 1 [0206.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0206.034] SetFilePointerEx (in: hFile=0xff0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.034] WriteFile (in: hFile=0xff0, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb52fbc8, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xb52fbc8*=0x10c, lpOverlapped=0x0) returned 1 [0206.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0206.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c30) returned 1 [0206.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4c30 [0206.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3858 [0206.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0206.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a98) returned 1 [0206.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.422] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="6f") returned 2 [0206.422] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="64") returned 2 [0206.422] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="6a") returned 2 [0206.422] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="4b") returned 2 [0206.422] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="15") returned 2 [0206.422] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="63") returned 2 [0206.422] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="cd") returned 2 [0206.422] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="6c") returned 2 [0206.422] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="34") returned 2 [0206.422] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="ae") returned 2 [0206.422] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="c9") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="ee") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="94") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="aa") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="b7") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="ac") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="07") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="66") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="6e") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="bb") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="20") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="44") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="c4") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="38") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="da") returned 2 [0206.423] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="a6") returned 2 [0206.423] RtlInitAnsiString (in: DestinationString=0xb52fb50, SourceString="6f646a4b1563cd6c34aec9ee94aab7ac07666ebb2044c438daa6" | out: DestinationString="6f646a4b1563cd6c34aec9ee94aab7ac07666ebb2044c438daa6") [0206.423] RtlAnsiStringToUnicodeString (in: DestinationString=0xb52fb48, SourceString="6f646a4b1563cd6c34aec9ee94aab7ac07666ebb2044c438daa6", AllocateDestinationString=1 | out: DestinationString="6f646a4b1563cd6c34aec9ee94aab7ac07666ebb2044c438daa6") returned 0x0 [0206.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e148 [0206.424] wcscat (in: _Dest=0x7a5e570, _Source="6f646a4b1563c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\6f646a4b1563c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\6f646a4b1563c" [0206.424] wcscat (in: _Dest=0x7a5e570, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\6f646a4b1563c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\6f646a4b1563c.68814f" [0206.424] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\6f646a4b1563c.68814f", NtPathName=0xb52fb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\6f646a4b1563c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9fd0 [0208.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9fd0) returned 1 [0208.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24f60) returned 1 [0208.843] NtQueryInformationFile (in: FileHandle=0xff0, IoStatusBlock=0xb52fb18, FileInformation=0xb52fb20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb52fb18, FileInformation=0xb52fb20) returned 0x0 [0208.843] NtSetInformationFile (FileHandle=0xff0, IoStatusBlock=0xb52fb18, FileInformation=0xb52fb20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e570) returned 1 [0209.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0209.159] FlushFileBuffers (hFile=0xff0) returned 1 [0209.174] CloseHandle (hObject=0xff0) returned 1 [0209.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02610 [0209.418] wcscpy (in: _Dest=0x3e02610, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\" [0209.418] wcscat (in: _Dest=0x3e02610, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\68814F-Readme.txt" [0209.418] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\68814f-readme.txt")) returned 0xffffffff [0209.418] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.001] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb52fb5c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb52fb5c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.003] CloseHandle (hObject=0xbb8) returned 1 [0210.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02610) returned 1 [0210.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb25e8) returned 1 Thread: id = 6419 os_tid = 0x1ba4 [0190.755] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0194.505] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0198.701] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1764 [0198.701] GetFileSizeEx (in: hFile=0x1764, lpFileSize=0x8e6f91c | out: lpFileSize=0x8e6f91c*=206) returned 1 [0198.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0198.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0198.702] NtQuerySystemTime (in: CurrentTime=0x8e6f890 | out: CurrentTime=0x8e6f890*=132462177772764000) returned 0x0 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x3c1e0396 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x35655a4a [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x2eb32e9d [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x6aa87e6f [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x35c00e4d [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x1311ddb9 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x45a5f28 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x4ba193d2 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x40b84615 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x5acbcb27 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0xdd1b793 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x5565555e [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x2b34b37d [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x57c229c3 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x3e41b679 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x536be754 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x5b235be7 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x120df621 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x6a7379c0 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x67807314 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x7edfff1b [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0xa936302 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x703f8ba5 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x7d0515e4 [0198.702] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x68f98132 [0198.703] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x4e0be244 [0198.703] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x4942d80 [0198.703] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x44575556 [0198.703] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x42ab7b43 [0198.703] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x21693d69 [0198.703] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x1b64821f [0198.703] RtlRandomEx (in: Seed=0x8e6f888 | out: Seed=0x8e6f888) returned 0x49a572d5 [0198.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ec84d8 [0198.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ecc0e0 [0198.714] ReadFile (in: hFile=0x1764, lpBuffer=0x10ec84d8, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x8e6f884, lpOverlapped=0x0 | out: lpBuffer=0x10ec84d8*, lpNumberOfBytesRead=0x8e6f884*=0xce, lpOverlapped=0x0) returned 1 [0198.722] SetFilePointerEx (in: hFile=0x1764, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.722] WriteFile (in: hFile=0x1764, lpBuffer=0x10ecc0e0*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x8e6f888, lpOverlapped=0x0 | out: lpBuffer=0x10ecc0e0*, lpNumberOfBytesWritten=0x8e6f888*=0xce, lpOverlapped=0x0) returned 1 [0200.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0200.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0200.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0200.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ecc0e0) returned 1 [0200.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ec84d8) returned 1 [0200.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c108) returned 1 [0200.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e60) returned 1 [0200.600] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37830 [0200.600] SetFilePointerEx (in: hFile=0x1764, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.600] WriteFile (in: hFile=0x1764, lpBuffer=0x7cd2e58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8e6f910, lpOverlapped=0x0 | out: lpBuffer=0x7cd2e58*, lpNumberOfBytesWritten=0x8e6f910*=0x10c, lpOverlapped=0x0) returned 1 [0201.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0201.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53648) returned 1 [0201.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53648 [0201.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e528b0 [0201.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0201.035] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53440) returned 1 [0201.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.036] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.036] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="86") returned 2 [0201.036] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="48") returned 2 [0201.036] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="eb") returned 2 [0201.036] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="c9") returned 2 [0201.036] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="bc") returned 2 [0201.036] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="72") returned 2 [0201.036] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="92") returned 2 [0201.036] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="6b") returned 2 [0201.036] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="5e") returned 2 [0201.036] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="e2") returned 2 [0201.036] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="39") returned 2 [0201.036] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="e0") returned 2 [0201.036] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="a9") returned 2 [0201.036] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="19") returned 2 [0201.036] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="f7") returned 2 [0201.036] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="b5") returned 2 [0201.036] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="6c") returned 2 [0201.036] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="7d") returned 2 [0201.036] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="b2") returned 2 [0201.036] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="88") returned 2 [0201.036] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="60") returned 2 [0201.036] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="73") returned 2 [0201.036] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="6c") returned 2 [0201.036] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="20") returned 2 [0201.037] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="94") returned 2 [0201.037] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="9d") returned 2 [0201.037] RtlInitAnsiString (in: DestinationString=0x8e6f898, SourceString="8648ebc9bc72926b5ee239e0a919f7b56c7db28860736c20949d" | out: DestinationString="8648ebc9bc72926b5ee239e0a919f7b56c7db28860736c20949d") [0201.037] RtlAnsiStringToUnicodeString (in: DestinationString=0x8e6f890, SourceString="8648ebc9bc72926b5ee239e0a919f7b56c7db28860736c20949d", AllocateDestinationString=1 | out: DestinationString="8648ebc9bc72926b5ee239e0a919f7b56c7db28860736c20949d") returned 0x0 [0201.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f998 [0201.037] wcscat (in: _Dest=0x7ddbd38, _Source="8648ebc9bc729" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\8648ebc9bc729") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\8648ebc9bc729" [0201.037] wcscat (in: _Dest=0x7ddbd38, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\8648ebc9bc729.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\8648ebc9bc729.68814f" [0201.037] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\8648ebc9bc729.68814f", NtPathName=0x8e6f888, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\8648ebc9bc729.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7ddcb50 [0201.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcb50) returned 1 [0201.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e96128) returned 1 [0201.295] NtQueryInformationFile (in: FileHandle=0x1764, IoStatusBlock=0x8e6f860, FileInformation=0x8e6f868, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8e6f860, FileInformation=0x8e6f868) returned 0x0 [0201.295] NtSetInformationFile (FileHandle=0x1764, IoStatusBlock=0x8e6f860, FileInformation=0x8e6f868, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddbd38) returned 1 [0205.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0205.798] FlushFileBuffers (hFile=0x1764) returned 1 [0205.822] CloseHandle (hObject=0x1764) returned 1 [0206.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7ddf378 [0206.280] wcscpy (in: _Dest=0x7ddf378, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\" [0206.280] wcscat (in: _Dest=0x7ddf378, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\68814F-Readme.txt" [0206.280] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\68814f-readme.txt")) returned 0xffffffff [0206.280] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1abc [0210.214] WriteFile (in: hFile=0x1abc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8e6f8a4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8e6f8a4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.215] CloseHandle (hObject=0x1abc) returned 1 [0210.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf378) returned 1 [0210.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2710) returned 1 Thread: id = 6420 os_tid = 0x1ba8 [0190.755] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0194.506] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0198.723] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17ec [0198.723] GetFileSizeEx (in: hFile=0x17ec, lpFileSize=0xcf8fa3c | out: lpFileSize=0xcf8fa3c*=208) returned 1 [0198.723] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0198.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53468 [0198.724] NtQuerySystemTime (in: CurrentTime=0xcf8f9b0 | out: CurrentTime=0xcf8f9b0*=132462177773076000) returned 0x0 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0xd53976b [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x35cc94ed [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x2bc7e192 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x561b732f [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x445b2fec [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x5bc7884d [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x42a3f381 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x5a80b211 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x5d96800f [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x72a04e05 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x764b60f3 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x5dc8a4c3 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x75e6a2cc [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x379d8712 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x2426fb3c [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x75263512 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x2523ced1 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x75425586 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x1fd1fd15 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0xa6ced06 [0198.724] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x54591001 [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0xb9e914d [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x2fb6e646 [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x7e880580 [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x13aa157f [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x6289529e [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x578033e8 [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x40cdb602 [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x41987359 [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x3ebf5965 [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x730b1240 [0198.725] RtlRandomEx (in: Seed=0xcf8f9a8 | out: Seed=0xcf8f9a8) returned 0x21140bdb [0198.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.735] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ed0060 [0198.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ed3c68 [0198.742] ReadFile (in: hFile=0x17ec, lpBuffer=0x10ed0060, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0xcf8f9a4, lpOverlapped=0x0 | out: lpBuffer=0x10ed0060*, lpNumberOfBytesRead=0xcf8f9a4*=0xd0, lpOverlapped=0x0) returned 1 [0198.744] SetFilePointerEx (in: hFile=0x17ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.744] WriteFile (in: hFile=0x17ec, lpBuffer=0x10ed3c68*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0xcf8f9a8, lpOverlapped=0x0 | out: lpBuffer=0x10ed3c68*, lpNumberOfBytesWritten=0xcf8f9a8*=0xd0, lpOverlapped=0x0) returned 1 [0200.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0200.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0200.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0200.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ed3c68) returned 1 [0200.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ed0060) returned 1 [0200.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c180) returned 1 [0200.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84ea8) returned 1 [0200.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0200.944] SetFilePointerEx (in: hFile=0x17ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.944] WriteFile (in: hFile=0x17ec, lpBuffer=0x7cd3600*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcf8fa30, lpOverlapped=0x0 | out: lpBuffer=0x7cd3600*, lpNumberOfBytesWritten=0xcf8fa30*=0x10c, lpOverlapped=0x0) returned 1 [0201.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0201.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c270 [0201.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c270) returned 1 [0201.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c270 [0201.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0201.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0201.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0201.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0201.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.232] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="0b") returned 2 [0201.232] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="9e") returned 2 [0201.232] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="3a") returned 2 [0201.232] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="15") returned 2 [0201.232] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="61") returned 2 [0201.233] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="ac") returned 2 [0201.233] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="71") returned 2 [0201.233] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="b2") returned 2 [0201.233] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="20") returned 2 [0201.233] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="00") returned 2 [0201.233] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="f0") returned 2 [0201.233] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="50") returned 2 [0201.233] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="00") returned 2 [0201.233] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="66") returned 2 [0201.233] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="32") returned 2 [0201.233] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="6e") returned 2 [0201.233] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="ec") returned 2 [0201.233] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="af") returned 2 [0201.233] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="45") returned 2 [0201.233] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="00") returned 2 [0201.233] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="ed") returned 2 [0201.233] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="0f") returned 2 [0201.233] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="85") returned 2 [0201.233] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="22") returned 2 [0201.233] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="25") returned 2 [0201.233] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="51") returned 2 [0201.233] RtlInitAnsiString (in: DestinationString=0xcf8f9b8, SourceString="0b9e3a1561ac71b22000f0500066326eecaf4500ed0f85222551" | out: DestinationString="0b9e3a1561ac71b22000f0500066326eecaf4500ed0f85222551") [0201.233] RtlAnsiStringToUnicodeString (in: DestinationString=0xcf8f9b0, SourceString="0b9e3a1561ac71b22000f0500066326eecaf4500ed0f85222551", AllocateDestinationString=1 | out: DestinationString="0b9e3a1561ac71b22000f0500066326eecaf4500ed0f85222551") returned 0x0 [0201.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f6c8 [0201.233] wcscat (in: _Dest=0x7dded60, _Source="0b9e3a1561ac7" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\0b9e3a1561ac7") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\0b9e3a1561ac7" [0201.233] wcscat (in: _Dest=0x7dded60, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\0b9e3a1561ac7.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\0b9e3a1561ac7.68814f" [0201.234] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\0b9e3a1561ac7.68814f", NtPathName=0xcf8f9a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\0b9e3a1561ac7.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7dd91b8 [0201.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd91b8) returned 1 [0201.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e969c8) returned 1 [0201.459] NtQueryInformationFile (in: FileHandle=0x17ec, IoStatusBlock=0xcf8f980, FileInformation=0xcf8f988, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcf8f980, FileInformation=0xcf8f988) returned 0x0 [0201.459] NtSetInformationFile (FileHandle=0x17ec, IoStatusBlock=0xcf8f980, FileInformation=0xcf8f988, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dded60) returned 1 [0209.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0209.732] FlushFileBuffers (hFile=0x17ec) returned 1 [0210.271] CloseHandle (hObject=0x17ec) returned 1 [0210.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7a5f068 [0210.273] wcscpy (in: _Dest=0x7a5f068, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\" [0210.273] wcscat (in: _Dest=0x7a5f068, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\68814F-Readme.txt" [0210.273] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\68814f-readme.txt")) returned 0xffffffff [0210.273] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.274] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcf8f9c4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcf8f9c4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.276] CloseHandle (hObject=0x17ec) returned 1 [0210.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f068) returned 1 [0210.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2838) returned 1 Thread: id = 6421 os_tid = 0x1bac [0190.755] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json")) returned 0x2020 [0194.506] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0198.745] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc64 [0198.745] GetFileSizeEx (in: hFile=0xc64, lpFileSize=0x7fdff5c | out: lpFileSize=0x7fdff5c*=213) returned 1 [0198.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53468 [0198.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e90 [0198.746] NtQuerySystemTime (in: CurrentTime=0x7fdfed0 | out: CurrentTime=0x7fdfed0*=132462177773232000) returned 0x0 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x5d5f057b [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x427a015b [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x745a96f7 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x41a3099e [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x7b1759d7 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0xbf86a4d [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x368ab59 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x71893396 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x26668d8e [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x5408f82b [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x1ac70326 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x6b44fd09 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x7ac1363 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x151c4de [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x2c972a59 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x1bbc8c0 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x1e6a180 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x2f5907f2 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x1490cb1f [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x7855e90d [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x348d8fdc [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x7d17a5e [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x67e46a00 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x14e714c7 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x74c028d7 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x43ba8de8 [0198.746] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x6938b733 [0198.747] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x5bc2ae8e [0198.747] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x7476500c [0198.747] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x5b452079 [0198.747] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x51e722ff [0198.747] RtlRandomEx (in: Seed=0x7fdfec8 | out: Seed=0x7fdfec8) returned 0x1a6f9cb2 [0198.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ed7870 [0198.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10edb478 [0198.760] ReadFile (in: hFile=0xc64, lpBuffer=0x10ed7870, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0x7fdfec4, lpOverlapped=0x0 | out: lpBuffer=0x10ed7870*, lpNumberOfBytesRead=0x7fdfec4*=0xd5, lpOverlapped=0x0) returned 1 [0198.762] SetFilePointerEx (in: hFile=0xc64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.762] WriteFile (in: hFile=0xc64, lpBuffer=0x10edb478*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x7fdfec8, lpOverlapped=0x0 | out: lpBuffer=0x10edb478*, lpNumberOfBytesWritten=0x7fdfec8*=0xd5, lpOverlapped=0x0) returned 1 [0200.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0200.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c18 [0200.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c18) returned 1 [0200.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10edb478) returned 1 [0200.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ed7870) returned 1 [0200.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c1f8) returned 1 [0200.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84ef0) returned 1 [0200.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b60 [0200.592] SetFilePointerEx (in: hFile=0xc64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.592] WriteFile (in: hFile=0xc64, lpBuffer=0x7cd29f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7fdff50, lpOverlapped=0x0 | out: lpBuffer=0x7cd29f8*, lpNumberOfBytesWritten=0x7fdff50*=0x10c, lpOverlapped=0x0) returned 1 [0201.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0201.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0201.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0201.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53760 [0201.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a08 [0201.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a08) returned 1 [0201.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.011] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="3b") returned 2 [0201.011] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ca") returned 2 [0201.011] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="ad") returned 2 [0201.011] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="e9") returned 2 [0201.011] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="fb") returned 2 [0201.011] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="ed") returned 2 [0201.011] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="b6") returned 2 [0201.011] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="6c") returned 2 [0201.011] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="b0") returned 2 [0201.011] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="57") returned 2 [0201.011] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="76") returned 2 [0201.011] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="58") returned 2 [0201.011] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="41") returned 2 [0201.011] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="52") returned 2 [0201.011] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="a8") returned 2 [0201.012] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="f8") returned 2 [0201.012] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="01") returned 2 [0201.012] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="c6") returned 2 [0201.012] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="e3") returned 2 [0201.012] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="5a") returned 2 [0201.012] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="9f") returned 2 [0201.012] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="cb") returned 2 [0201.012] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="d8") returned 2 [0201.012] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="e8") returned 2 [0201.012] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="c5") returned 2 [0201.012] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="7b") returned 2 [0201.012] RtlInitAnsiString (in: DestinationString=0x7fdfed8, SourceString="3bcaade9fbedb66cb05776584152a8f801c6e35a9fcbd8e8c57b" | out: DestinationString="3bcaade9fbedb66cb05776584152a8f801c6e35a9fcbd8e8c57b") [0201.012] RtlAnsiStringToUnicodeString (in: DestinationString=0x7fdfed0, SourceString="3bcaade9fbedb66cb05776584152a8f801c6e35a9fcbd8e8c57b", AllocateDestinationString=1 | out: DestinationString="3bcaade9fbedb66cb05776584152a8f801c6e35a9fcbd8e8c57b") returned 0x0 [0201.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cae0 [0201.012] wcscat (in: _Dest=0x7ddb378, _Source="3bcaade9fbedb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\3bcaade9fbedb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\3bcaade9fbedb" [0201.012] wcscat (in: _Dest=0x7ddb378, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\3bcaade9fbedb.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\3bcaade9fbedb.68814f" [0201.012] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\3bcaade9fbedb.68814f", NtPathName=0x7fdfec8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\3bcaade9fbedb.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7b87280 [0201.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b87280) returned 1 [0201.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94fe8) returned 1 [0201.259] NtQueryInformationFile (in: FileHandle=0xc64, IoStatusBlock=0x7fdfea0, FileInformation=0x7fdfea8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7fdfea0, FileInformation=0x7fdfea8) returned 0x0 [0201.259] NtSetInformationFile (FileHandle=0xc64, IoStatusBlock=0x7fdfea0, FileInformation=0x7fdfea8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb378) returned 1 [0206.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cae0) returned 1 [0206.239] FlushFileBuffers (hFile=0xc64) returned 1 [0206.249] CloseHandle (hObject=0xc64) returned 1 [0208.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7fa40 [0208.738] wcscpy (in: _Dest=0x7b7fa40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\" [0208.738] wcscat (in: _Dest=0x7b7fa40, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\68814F-Readme.txt" [0208.738] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\68814f-readme.txt")) returned 0xffffffff [0208.738] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a2c [0209.739] WriteFile (in: hFile=0x1a2c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7fdfee4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x7fdfee4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.741] CloseHandle (hObject=0x1a2c) returned 1 [0209.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fa40) returned 1 [0209.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2960) returned 1 Thread: id = 6422 os_tid = 0x1bb0 [0190.757] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json")) returned 0x2020 [0194.507] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0198.762] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17f0 [0198.763] GetFileSizeEx (in: hFile=0x17f0, lpFileSize=0xac2fa8c | out: lpFileSize=0xac2fa8c*=266) returned 1 [0198.763] SetFilePointerEx (in: hFile=0x17f0, liDistanceToMove=0x106, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.763] ReadFile (in: hFile=0x17f0, lpBuffer=0xac2fa68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac2fa78, lpOverlapped=0x0 | out: lpBuffer=0xac2fa68*, lpNumberOfBytesRead=0xac2fa78*=0x4, lpOverlapped=0x0) returned 1 [0198.765] SetFilePointerEx (in: hFile=0x17f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e90 [0198.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0198.766] NtQuerySystemTime (in: CurrentTime=0xac2fa00 | out: CurrentTime=0xac2fa00*=132462177773388000) returned 0x0 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x6f5c373b [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x1b882e1a [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x37e60f56 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x2bbd70b9 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x4bc2e667 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x4931bd34 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x19b70204 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x7c089c3 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x5df7dba6 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x701177a6 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x18a3d48e [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x54beec43 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x66ff6073 [0198.766] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x3ed6b9e0 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x68402827 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x26c89a86 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x78af6a12 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x28f5e29b [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x2c42f494 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x19cb2c15 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x1450d08 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x31aa1700 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x2d6b5486 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x8fbffbe [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x63d40937 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x58b011f1 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x1523b735 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x51a16255 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x73456526 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x23d73881 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x2269bbd0 [0198.767] RtlRandomEx (in: Seed=0xac2f9f8 | out: Seed=0xac2f9f8) returned 0x45408beb [0198.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10edf080 [0198.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ee2c88 [0198.781] ReadFile (in: hFile=0x17f0, lpBuffer=0x10edf080, nNumberOfBytesToRead=0x10a, lpNumberOfBytesRead=0xac2f9f4, lpOverlapped=0x0 | out: lpBuffer=0x10edf080*, lpNumberOfBytesRead=0xac2f9f4*=0x10a, lpOverlapped=0x0) returned 1 [0198.781] SetFilePointerEx (in: hFile=0x17f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.781] WriteFile (in: hFile=0x17f0, lpBuffer=0x10ee2c88*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0xac2f9f8, lpOverlapped=0x0 | out: lpBuffer=0x10ee2c88*, lpNumberOfBytesWritten=0xac2f9f8*=0x10a, lpOverlapped=0x0) returned 1 [0200.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0200.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0200.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0200.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ee2c88) returned 1 [0200.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10edf080) returned 1 [0200.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c270) returned 1 [0200.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84f38) returned 1 [0200.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37fe0 [0200.925] SetFilePointerEx (in: hFile=0x17f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.925] WriteFile (in: hFile=0x17f0, lpBuffer=0x7cd3088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xac2fa80, lpOverlapped=0x0 | out: lpBuffer=0x7cd3088*, lpNumberOfBytesWritten=0xac2fa80*=0x10c, lpOverlapped=0x0) returned 1 [0201.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0201.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53fd0 [0201.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53fd0) returned 1 [0201.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53fd0 [0201.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53bc0 [0201.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53af8 [0201.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53af8) returned 1 [0201.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0201.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.215] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="b1") returned 2 [0201.215] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="77") returned 2 [0201.215] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="b6") returned 2 [0201.215] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="27") returned 2 [0201.215] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="d4") returned 2 [0201.215] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="5f") returned 2 [0201.215] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="5c") returned 2 [0201.215] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="ce") returned 2 [0201.215] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="e2") returned 2 [0201.215] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="ab") returned 2 [0201.215] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="f6") returned 2 [0201.215] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="07") returned 2 [0201.215] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="2b") returned 2 [0201.215] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="36") returned 2 [0201.215] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="6e") returned 2 [0201.215] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="a1") returned 2 [0201.216] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="dc") returned 2 [0201.216] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="fe") returned 2 [0201.216] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="ee") returned 2 [0201.216] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="cc") returned 2 [0201.216] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="21") returned 2 [0201.216] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="bf") returned 2 [0201.216] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="cf") returned 2 [0201.216] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="e5") returned 2 [0201.216] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="68") returned 2 [0201.216] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="bd") returned 2 [0201.216] RtlInitAnsiString (in: DestinationString=0xac2fa08, SourceString="b177b627d45f5ccee2abf6072b366ea1dcfeeecc21bfcfe568bd" | out: DestinationString="b177b627d45f5ccee2abf6072b366ea1dcfeeecc21bfcfe568bd") [0201.216] RtlAnsiStringToUnicodeString (in: DestinationString=0xac2fa00, SourceString="b177b627d45f5ccee2abf6072b366ea1dcfeeecc21bfcfe568bd", AllocateDestinationString=1 | out: DestinationString="b177b627d45f5ccee2abf6072b366ea1dcfeeecc21bfcfe568bd") returned 0x0 [0201.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f830 [0201.216] wcscat (in: _Dest=0x7dde880, _Source="b177b627d45f5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\b177b627d45f5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\b177b627d45f5" [0201.216] wcscat (in: _Dest=0x7dde880, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\b177b627d45f5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\b177b627d45f5.68814f" [0201.216] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\b177b627d45f5.68814f", NtPathName=0xac2f9f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\b177b627d45f5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.216] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd96d8 [0201.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd96d8) returned 1 [0201.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e93608) returned 1 [0201.453] NtQueryInformationFile (in: FileHandle=0x17f0, IoStatusBlock=0xac2f9d0, FileInformation=0xac2f9d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xac2f9d0, FileInformation=0xac2f9d8) returned 0x0 [0201.454] NtSetInformationFile (FileHandle=0x17f0, IoStatusBlock=0xac2f9d0, FileInformation=0xac2f9d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dde880) returned 1 [0208.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0208.670] FlushFileBuffers (hFile=0x17f0) returned 1 [0208.683] CloseHandle (hObject=0x17f0) returned 1 [0209.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01a80 [0209.033] wcscpy (in: _Dest=0x3e01a80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\" [0209.033] wcscat (in: _Dest=0x3e01a80, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\68814F-Readme.txt" [0209.033] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\68814f-readme.txt")) returned 0xffffffff [0209.033] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.920] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xac2fa14, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xac2fa14*=0x8b9, lpOverlapped=0x0) returned 1 [0209.923] CloseHandle (hObject=0xbb8) returned 1 [0209.923] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01a80) returned 1 [0209.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2a88) returned 1 Thread: id = 6423 os_tid = 0x1bb4 [0190.758] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json")) returned 0x2020 [0194.508] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0198.781] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbf0 [0198.782] GetFileSizeEx (in: hFile=0xbf0, lpFileSize=0xcc4fb4c | out: lpFileSize=0xcc4fb4c*=221) returned 1 [0198.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0198.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f30 [0198.782] NtQuerySystemTime (in: CurrentTime=0xcc4fac0 | out: CurrentTime=0xcc4fac0*=132462177773544000) returned 0x0 [0198.782] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x637b750c [0198.782] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x2264f09c [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x4e740e51 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x7f9515a5 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x5aa64f31 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x741176c [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x78d160e5 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x44967b4a [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x23997a52 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x7b6fc3ff [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x6a556293 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x5c4ff9d4 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x63cf1fc3 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x5ece4c38 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x3e0243f5 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x522437c4 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x50fe2fe [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x624b6249 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x6360b35c [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x223e0dcc [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x3a7c3ee5 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x7029adf0 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x229ca250 [0198.783] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x1410c715 [0198.784] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x6bf22379 [0198.784] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x7fea095a [0198.784] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x447b0dc4 [0198.784] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x7a3ff997 [0198.784] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x7f3565fa [0198.784] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0xef24ee9 [0198.784] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x51558787 [0198.784] RtlRandomEx (in: Seed=0xcc4fab8 | out: Seed=0xcc4fab8) returned 0x3470d58e [0198.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ee6890 [0198.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eea498 [0198.797] ReadFile (in: hFile=0xbf0, lpBuffer=0x10ee6890, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xcc4fab4, lpOverlapped=0x0 | out: lpBuffer=0x10ee6890*, lpNumberOfBytesRead=0xcc4fab4*=0xdd, lpOverlapped=0x0) returned 1 [0198.800] SetFilePointerEx (in: hFile=0xbf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.800] WriteFile (in: hFile=0xbf0, lpBuffer=0x10eea498*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xcc4fab8, lpOverlapped=0x0 | out: lpBuffer=0x10eea498*, lpNumberOfBytesWritten=0xcc4fab8*=0xdd, lpOverlapped=0x0) returned 1 [0200.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0200.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0200.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3da8) returned 1 [0200.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eea498) returned 1 [0200.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ee6890) returned 1 [0200.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c2e8) returned 1 [0200.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84f80) returned 1 [0200.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b00 [0200.594] SetFilePointerEx (in: hFile=0xbf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.594] WriteFile (in: hFile=0xbf0, lpBuffer=0x7cd2b10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcc4fb40, lpOverlapped=0x0 | out: lpBuffer=0x7cd2b10*, lpNumberOfBytesWritten=0xcc4fb40*=0x10c, lpOverlapped=0x0) returned 1 [0201.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538c8 [0201.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538c8) returned 1 [0201.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e538c8 [0201.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c38 [0201.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53468 [0201.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53468) returned 1 [0201.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.014] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.014] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.014] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="de") returned 2 [0201.014] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="22") returned 2 [0201.014] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="23") returned 2 [0201.014] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="84") returned 2 [0201.014] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="08") returned 2 [0201.014] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="6f") returned 2 [0201.014] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="e7") returned 2 [0201.015] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="7f") returned 2 [0201.015] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="a3") returned 2 [0201.015] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="bc") returned 2 [0201.015] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="79") returned 2 [0201.015] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="e3") returned 2 [0201.015] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="78") returned 2 [0201.015] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="53") returned 2 [0201.015] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="14") returned 2 [0201.015] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="3f") returned 2 [0201.015] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="10") returned 2 [0201.015] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="a7") returned 2 [0201.015] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="bc") returned 2 [0201.015] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="db") returned 2 [0201.015] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="ea") returned 2 [0201.015] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="cd") returned 2 [0201.015] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="fd") returned 2 [0201.015] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="a3") returned 2 [0201.015] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="e4") returned 2 [0201.015] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="68") returned 2 [0201.015] RtlInitAnsiString (in: DestinationString=0xcc4fac8, SourceString="de222384086fe77fa3bc79e37853143f10a7bcdbeacdfda3e468" | out: DestinationString="de222384086fe77fa3bc79e37853143f10a7bcdbeacdfda3e468") [0201.016] RtlAnsiStringToUnicodeString (in: DestinationString=0xcc4fac0, SourceString="de222384086fe77fa3bc79e37853143f10a7bcdbeacdfda3e468", AllocateDestinationString=1 | out: DestinationString="de222384086fe77fa3bc79e37853143f10a7bcdbeacdfda3e468") returned 0x0 [0201.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c450 [0201.016] wcscat (in: _Dest=0x7ddb4b0, _Source="de222384086fe" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\de222384086fe") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\de222384086fe" [0201.016] wcscat (in: _Dest=0x7ddb4b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\de222384086fe.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\de222384086fe.68814f" [0201.016] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\de222384086fe.68814f", NtPathName=0xcc4fab8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\de222384086fe.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc3a0 [0201.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc3a0) returned 1 [0201.260] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e95210) returned 1 [0201.260] NtQueryInformationFile (in: FileHandle=0xbf0, IoStatusBlock=0xcc4fa90, FileInformation=0xcc4fa98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcc4fa90, FileInformation=0xcc4fa98) returned 0x0 [0201.260] NtSetInformationFile (FileHandle=0xbf0, IoStatusBlock=0xcc4fa90, FileInformation=0xcc4fa98, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb4b0) returned 1 [0206.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c450) returned 1 [0206.245] FlushFileBuffers (hFile=0xbf0) returned 1 [0206.259] CloseHandle (hObject=0xbf0) returned 1 [0208.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cab990 [0208.745] wcscpy (in: _Dest=0x7cab990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\" [0208.745] wcscat (in: _Dest=0x7cab990, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\68814F-Readme.txt" [0208.745] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\68814f-readme.txt")) returned 0xffffffff [0208.745] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a2c [0209.746] WriteFile (in: hFile=0x1a2c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcc4fad4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcc4fad4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.748] CloseHandle (hObject=0x1a2c) returned 1 [0209.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab990) returned 1 [0209.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2bb0) returned 1 Thread: id = 6424 os_tid = 0x1bb8 [0190.758] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json")) returned 0x2020 [0194.508] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0198.800] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13b8 [0198.800] GetFileSizeEx (in: hFile=0x13b8, lpFileSize=0xaaffc44 | out: lpFileSize=0xaaffc44*=218) returned 1 [0198.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f30 [0198.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0198.801] NtQuerySystemTime (in: CurrentTime=0xaaffbb8 | out: CurrentTime=0xaaffbb8*=132462177773856000) returned 0x0 [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x30b7e572 [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x3ec3e328 [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x2c0e41bd [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x31f08bb5 [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x439ebcc5 [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x557ea3c6 [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x16d20047 [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x11d2ebb0 [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x470a62d1 [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x6cae12bb [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x58c0cafe [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x3aa8a6f [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x5b5a1b3c [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x72a162e [0198.801] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x47e81e1e [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x4e26e6b1 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x41971277 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x5c63879a [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x17ef3dd0 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x4c290ceb [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x5400ee54 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x7d187bcb [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x6a5a04e0 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0xc4fb9bb [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x4005a924 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x545ff54 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x51c4988f [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x1e0a7cd3 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x7cdd3cd9 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x17a30767 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x4e7e8044 [0198.802] RtlRandomEx (in: Seed=0xaaffbb0 | out: Seed=0xaaffbb0) returned 0x104c1808 [0198.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eee0a0 [0198.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ef1ca8 [0198.815] ReadFile (in: hFile=0x13b8, lpBuffer=0x10eee0a0, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0xaaffbac, lpOverlapped=0x0 | out: lpBuffer=0x10eee0a0*, lpNumberOfBytesRead=0xaaffbac*=0xda, lpOverlapped=0x0) returned 1 [0198.818] SetFilePointerEx (in: hFile=0x13b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.818] WriteFile (in: hFile=0x13b8, lpBuffer=0x10ef1ca8*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0xaaffbb0, lpOverlapped=0x0 | out: lpBuffer=0x10ef1ca8*, lpNumberOfBytesWritten=0xaaffbb0*=0xda, lpOverlapped=0x0) returned 1 [0200.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0200.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0200.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0200.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ef1ca8) returned 1 [0200.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eee0a0) returned 1 [0200.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c360) returned 1 [0200.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84fc8) returned 1 [0200.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38100 [0200.926] SetFilePointerEx (in: hFile=0x13b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.926] WriteFile (in: hFile=0x13b8, lpBuffer=0x7cd31a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaaffc38, lpOverlapped=0x0 | out: lpBuffer=0x7cd31a0*, lpNumberOfBytesWritten=0xaaffc38*=0x10c, lpOverlapped=0x0) returned 1 [0201.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0201.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e539e0 [0201.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e539e0) returned 1 [0201.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e539e0 [0201.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b20 [0201.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e90 [0201.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e90) returned 1 [0201.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0201.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.218] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="9f") returned 2 [0201.218] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="2d") returned 2 [0201.218] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="6b") returned 2 [0201.218] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="3a") returned 2 [0201.219] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="71") returned 2 [0201.219] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="ec") returned 2 [0201.219] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="6b") returned 2 [0201.219] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="40") returned 2 [0201.219] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="94") returned 2 [0201.219] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="0e") returned 2 [0201.219] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="21") returned 2 [0201.219] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="09") returned 2 [0201.219] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="bc") returned 2 [0201.219] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="93") returned 2 [0201.219] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="9e") returned 2 [0201.219] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="7d") returned 2 [0201.219] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="d9") returned 2 [0201.219] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="f3") returned 2 [0201.219] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="8a") returned 2 [0201.219] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="88") returned 2 [0201.219] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="a3") returned 2 [0201.219] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="2d") returned 2 [0201.219] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="f3") returned 2 [0201.219] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="a7") returned 2 [0201.219] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="06") returned 2 [0201.219] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="24") returned 2 [0201.219] RtlInitAnsiString (in: DestinationString=0xaaffbc0, SourceString="9f2d6b3a71ec6b40940e2109bc939e7dd9f38a88a32df3a70624" | out: DestinationString="9f2d6b3a71ec6b40940e2109bc939e7dd9f38a88a32df3a70624") [0201.219] RtlAnsiStringToUnicodeString (in: DestinationString=0xaaffbb8, SourceString="9f2d6b3a71ec6b40940e2109bc939e7dd9f38a88a32df3a70624", AllocateDestinationString=1 | out: DestinationString="9f2d6b3a71ec6b40940e2109bc939e7dd9f38a88a32df3a70624") returned 0x0 [0201.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa10 [0201.220] wcscat (in: _Dest=0x7dde9b8, _Source="9f2d6b3a71ec6" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\9f2d6b3a71ec6") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\9f2d6b3a71ec6" [0201.220] wcscat (in: _Dest=0x7dde9b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\9f2d6b3a71ec6.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\9f2d6b3a71ec6.68814f" [0201.220] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\9f2d6b3a71ec6.68814f", NtPathName=0xaaffbb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\9f2d6b3a71ec6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9590 [0201.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9590) returned 1 [0201.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e93830) returned 1 [0201.455] NtQueryInformationFile (in: FileHandle=0x13b8, IoStatusBlock=0xaaffb88, FileInformation=0xaaffb90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaaffb88, FileInformation=0xaaffb90) returned 0x0 [0201.455] NtSetInformationFile (FileHandle=0x13b8, IoStatusBlock=0xaaffb88, FileInformation=0xaaffb90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dde9b8) returned 1 [0208.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0208.671] FlushFileBuffers (hFile=0x13b8) returned 1 [0208.685] CloseHandle (hObject=0x13b8) returned 1 [0209.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01ba8 [0209.035] wcscpy (in: _Dest=0x3e01ba8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\" [0209.035] wcscat (in: _Dest=0x3e01ba8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\68814F-Readme.txt" [0209.035] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\68814f-readme.txt")) returned 0xffffffff [0209.035] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.925] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xaaffbcc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xaaffbcc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.927] CloseHandle (hObject=0xbb8) returned 1 [0209.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01ba8) returned 1 [0209.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2cd8) returned 1 Thread: id = 6425 os_tid = 0x1bbc [0190.759] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json")) returned 0x2020 [0194.521] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.818] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf48 [0198.818] GetFileSizeEx (in: hFile=0xf48, lpFileSize=0xc12f844 | out: lpFileSize=0xc12f844*=248) returned 1 [0198.819] SetFilePointerEx (in: hFile=0xf48, liDistanceToMove=0xf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.819] ReadFile (in: hFile=0xf48, lpBuffer=0xc12f820, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc12f830, lpOverlapped=0x0 | out: lpBuffer=0xc12f820*, lpNumberOfBytesRead=0xc12f830*=0x4, lpOverlapped=0x0) returned 1 [0198.821] SetFilePointerEx (in: hFile=0xf48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0198.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538a0 [0198.821] NtQuerySystemTime (in: CurrentTime=0xc12f7b8 | out: CurrentTime=0xc12f7b8*=132462177774012000) returned 0x0 [0198.821] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x525decbf [0198.821] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x60118fcf [0198.821] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x175e8cb2 [0198.821] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x3766b8b3 [0198.821] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x204e6e45 [0198.821] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x19ee3089 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x333633e [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x7b1afaf0 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x2a3b7930 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x65bd5452 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x2b7d2cf7 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x1e74ea31 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x6fed724a [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x41ebb8b7 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x4e259cf3 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x5aba7f5 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0xe3ed41e [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x634338e9 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x651ee307 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x37d1e07 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x3d702288 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x308b84c2 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x75d698db [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x2ed9c858 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x5d6d02dc [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x19c20600 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x6dc61c94 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x3c2714a8 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x52fcb224 [0198.822] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x3196a122 [0198.823] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x585bae94 [0198.823] RtlRandomEx (in: Seed=0xc12f7b0 | out: Seed=0xc12f7b0) returned 0x28888658 [0198.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ef58b0 [0198.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ef94b8 [0198.836] ReadFile (in: hFile=0xf48, lpBuffer=0x10ef58b0, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0xc12f7ac, lpOverlapped=0x0 | out: lpBuffer=0x10ef58b0*, lpNumberOfBytesRead=0xc12f7ac*=0xf8, lpOverlapped=0x0) returned 1 [0198.836] SetFilePointerEx (in: hFile=0xf48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.836] WriteFile (in: hFile=0xf48, lpBuffer=0x10ef94b8*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0xc12f7b0, lpOverlapped=0x0 | out: lpBuffer=0x10ef94b8*, lpNumberOfBytesWritten=0xc12f7b0*=0xf8, lpOverlapped=0x0) returned 1 [0200.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0200.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0200.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ce0) returned 1 [0200.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ef94b8) returned 1 [0200.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ef58b0) returned 1 [0200.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c3d8) returned 1 [0200.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85010) returned 1 [0200.596] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37aa0 [0200.596] SetFilePointerEx (in: hFile=0xf48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.596] WriteFile (in: hFile=0xf48, lpBuffer=0x7cd2c28*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc12f838, lpOverlapped=0x0 | out: lpBuffer=0x7cd2c28*, lpNumberOfBytesWritten=0xc12f838*=0x10c, lpOverlapped=0x0) returned 1 [0201.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0201.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0201.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c608 [0201.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0201.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cae0 [0201.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cae0) returned 1 [0201.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.033] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="52") returned 2 [0201.033] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="11") returned 2 [0201.033] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="e2") returned 2 [0201.033] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="e8") returned 2 [0201.033] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="68") returned 2 [0201.033] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="2e") returned 2 [0201.033] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="99") returned 2 [0201.033] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="82") returned 2 [0201.033] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="a0") returned 2 [0201.033] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="50") returned 2 [0201.033] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="31") returned 2 [0201.034] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="9d") returned 2 [0201.034] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="fd") returned 2 [0201.034] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="d6") returned 2 [0201.034] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="9b") returned 2 [0201.034] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="50") returned 2 [0201.034] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="be") returned 2 [0201.034] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="aa") returned 2 [0201.034] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="79") returned 2 [0201.034] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="83") returned 2 [0201.034] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="ad") returned 2 [0201.034] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="f4") returned 2 [0201.034] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="85") returned 2 [0201.034] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="97") returned 2 [0201.034] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="ca") returned 2 [0201.034] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="de") returned 2 [0201.034] RtlInitAnsiString (in: DestinationString=0xc12f7c0, SourceString="5211e2e8682e9982a050319dfdd69b50beaa7983adf48597cade" | out: DestinationString="5211e2e8682e9982a050319dfdd69b50beaa7983adf48597cade") [0201.034] RtlAnsiStringToUnicodeString (in: DestinationString=0xc12f7b8, SourceString="5211e2e8682e9982a050319dfdd69b50beaa7983adf48597cade", AllocateDestinationString=1 | out: DestinationString="5211e2e8682e9982a050319dfdd69b50beaa7983adf48597cade") returned 0x0 [0201.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f650 [0201.034] wcscat (in: _Dest=0x7ddbc00, _Source="5211e2e8682e9" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\5211e2e8682e9") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\5211e2e8682e9" [0201.034] wcscat (in: _Dest=0x7ddbc00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\5211e2e8682e9.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\5211e2e8682e9.68814f" [0201.034] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\5211e2e8682e9.68814f", NtPathName=0xc12f7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\5211e2e8682e9.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddca08 [0201.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddca08) returned 1 [0201.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e95f00) returned 1 [0201.268] NtQueryInformationFile (in: FileHandle=0xf48, IoStatusBlock=0xc12f788, FileInformation=0xc12f790, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc12f788, FileInformation=0xc12f790) returned 0x0 [0201.268] NtSetInformationFile (FileHandle=0xf48, IoStatusBlock=0xc12f788, FileInformation=0xc12f790, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddbc00) returned 1 [0205.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0205.787] FlushFileBuffers (hFile=0xf48) returned 1 [0205.803] CloseHandle (hObject=0xf48) returned 1 [0206.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7fdb8 [0206.274] wcscpy (in: _Dest=0x7b7fdb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\" [0206.274] wcscat (in: _Dest=0x7b7fdb8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\68814F-Readme.txt" [0206.274] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\68814f-readme.txt")) returned 0xffffffff [0206.274] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.322] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc12f7cc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc12f7cc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.323] CloseHandle (hObject=0x17ec) returned 1 [0210.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fdb8) returned 1 [0210.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2e00) returned 1 Thread: id = 6426 os_tid = 0x1bc0 [0190.759] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json")) returned 0x2020 [0194.522] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0198.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17fc [0198.837] GetFileSizeEx (in: hFile=0x17fc, lpFileSize=0xef9fc84 | out: lpFileSize=0xef9fc84*=214) returned 1 [0198.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538a0 [0198.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53620 [0198.838] NtQuerySystemTime (in: CurrentTime=0xef9fbf8 | out: CurrentTime=0xef9fbf8*=132462177774168000) returned 0x0 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x2d40961e [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x60cbe243 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x6fdc15c3 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x28f20197 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x15974bd8 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x1630aa19 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x16ec8078 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x62a565ea [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x16502605 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x5955011d [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x228677fe [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x18b575e [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x653bfac2 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x36c498e2 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x7bd78f35 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x4634a951 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x2491702d [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x499c967 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x2c990d [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x1258309a [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x5ff115f [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x214df680 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x648b4818 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x6cd8d843 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x524a077f [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x3529c16 [0198.838] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x63e00057 [0198.839] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x2496838b [0198.839] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0xe58d00 [0198.839] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x4dcc2b4e [0198.839] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x20a61bd [0198.839] RtlRandomEx (in: Seed=0xef9fbf0 | out: Seed=0xef9fbf0) returned 0x6e55cc3e [0198.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10efd0c0 [0198.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f00cc8 [0198.850] ReadFile (in: hFile=0x17fc, lpBuffer=0x10efd0c0, nNumberOfBytesToRead=0xd6, lpNumberOfBytesRead=0xef9fbec, lpOverlapped=0x0 | out: lpBuffer=0x10efd0c0*, lpNumberOfBytesRead=0xef9fbec*=0xd6, lpOverlapped=0x0) returned 1 [0198.852] SetFilePointerEx (in: hFile=0x17fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.852] WriteFile (in: hFile=0x17fc, lpBuffer=0x10f00cc8*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0xef9fbf0, lpOverlapped=0x0 | out: lpBuffer=0x10f00cc8*, lpNumberOfBytesWritten=0xef9fbf0*=0xd6, lpOverlapped=0x0) returned 1 [0200.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0200.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a998 [0200.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a998) returned 1 [0200.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f00cc8) returned 1 [0200.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10efd0c0) returned 1 [0200.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c450) returned 1 [0200.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85058) returned 1 [0200.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37800 [0200.943] SetFilePointerEx (in: hFile=0x17fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.943] WriteFile (in: hFile=0x17fc, lpBuffer=0x7cd34e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xef9fc78, lpOverlapped=0x0 | out: lpBuffer=0x7cd34e8*, lpNumberOfBytesWritten=0xef9fc78*=0x10c, lpOverlapped=0x0) returned 1 [0201.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0201.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e539b8 [0201.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e539b8) returned 1 [0201.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e539b8 [0201.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a30 [0201.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f30 [0201.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f30) returned 1 [0201.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0201.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.227] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="8e") returned 2 [0201.227] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="f7") returned 2 [0201.227] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="fe") returned 2 [0201.227] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="7c") returned 2 [0201.227] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="91") returned 2 [0201.227] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="98") returned 2 [0201.227] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="24") returned 2 [0201.227] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="a0") returned 2 [0201.227] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="5d") returned 2 [0201.227] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="f4") returned 2 [0201.227] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="48") returned 2 [0201.227] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="4f") returned 2 [0201.227] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="6f") returned 2 [0201.227] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="9a") returned 2 [0201.227] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="d1") returned 2 [0201.227] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="3e") returned 2 [0201.227] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="20") returned 2 [0201.227] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="6b") returned 2 [0201.227] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="2a") returned 2 [0201.227] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="cf") returned 2 [0201.227] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="f6") returned 2 [0201.227] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="1b") returned 2 [0201.227] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="70") returned 2 [0201.227] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="99") returned 2 [0201.227] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="58") returned 2 [0201.227] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="79") returned 2 [0201.228] RtlInitAnsiString (in: DestinationString=0xef9fc00, SourceString="8ef7fe7c919824a05df4484f6f9ad13e206b2acff61b70995879" | out: DestinationString="8ef7fe7c919824a05df4484f6f9ad13e206b2acff61b70995879") [0201.228] RtlAnsiStringToUnicodeString (in: DestinationString=0xef9fbf8, SourceString="8ef7fe7c919824a05df4484f6f9ad13e206b2acff61b70995879", AllocateDestinationString=1 | out: DestinationString="8ef7fe7c919824a05df4484f6f9ad13e206b2acff61b70995879") returned 0x0 [0201.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f7b8 [0201.228] wcscat (in: _Dest=0x7ddeaf0, _Source="8ef7fe7c91982" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\8ef7fe7c91982") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\8ef7fe7c91982" [0201.228] wcscat (in: _Dest=0x7ddeaf0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\8ef7fe7c91982.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\8ef7fe7c91982.68814f" [0201.228] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\8ef7fe7c91982.68814f", NtPathName=0xef9fbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\8ef7fe7c91982.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9448 [0201.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9448) returned 1 [0201.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e931b8) returned 1 [0201.456] NtQueryInformationFile (in: FileHandle=0x17fc, IoStatusBlock=0xef9fbc8, FileInformation=0xef9fbd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xef9fbc8, FileInformation=0xef9fbd0) returned 0x0 [0201.456] NtSetInformationFile (FileHandle=0x17fc, IoStatusBlock=0xef9fbc8, FileInformation=0xef9fbd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddeaf0) returned 1 [0208.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 [0208.580] FlushFileBuffers (hFile=0x17fc) returned 1 [0209.730] CloseHandle (hObject=0x17fc) returned 1 [0210.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7ca8cd8 [0210.386] wcscpy (in: _Dest=0x7ca8cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\" [0210.386] wcscat (in: _Dest=0x7ca8cd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\68814F-Readme.txt" [0210.386] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\68814f-readme.txt")) returned 0xffffffff [0210.386] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1238 [0210.387] WriteFile (in: hFile=0x1238, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xef9fc0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xef9fc0c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.388] CloseHandle (hObject=0x1238) returned 1 [0210.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca8cd8) returned 1 [0210.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2f28) returned 1 Thread: id = 6427 os_tid = 0x1bc4 [0190.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6af00 [0190.760] wcscpy (in: _Dest=0x7a6af00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" [0190.760] wcscat (in: _Dest=0x7a6af00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\" [0190.760] wcscat (in: _Dest=0x7a6af00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*" [0190.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54240 [0190.760] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\*", lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067080 [0191.775] wcscmp (_String1=".", _String2=".") returned 0 [0191.775] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.776] wcscmp (_String1="..", _String2=".") returned 1 [0191.776] wcscmp (_String1="..", _String2="..") returned 0 [0191.776] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.776] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.776] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbbe30 [0191.776] wcscpy (in: _Dest=0x7cbbe30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th" [0191.776] wcscat (in: _Dest=0x7cbbe30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\" [0191.776] wcscat (in: _Dest=0x7cbbe30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" [0201.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbbe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0201.750] FindNextFileW (in: hFindFile=0x3067080, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.750] FindClose (in: hFindFile=0x3067080 | out: hFindFile=0x3067080) returned 1 [0201.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54240) returned 1 [0201.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6af00) returned 1 [0201.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a2a0) returned 1 Thread: id = 6428 os_tid = 0x1bc8 [0190.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec530 [0190.760] wcscpy (in: _Dest=0x3eec530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" [0190.761] wcscat (in: _Dest=0x3eec530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\" [0190.761] wcscat (in: _Dest=0x3eec530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*" [0190.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0190.761] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066b40 [0191.776] wcscmp (_String1=".", _String2=".") returned 0 [0191.776] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.776] wcscmp (_String1="..", _String2=".") returned 1 [0191.776] wcscmp (_String1="..", _String2="..") returned 0 [0191.777] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ed1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.777] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.777] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbe020 [0191.777] wcscpy (in: _Dest=0x7cbe020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr" [0191.777] wcscat (in: _Dest=0x7cbe020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\" [0191.777] wcscat (in: _Dest=0x7cbe020, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" [0201.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0201.600] FindNextFileW (in: hFindFile=0x3066b40, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ed1a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.601] FindClose (in: hFindFile=0x3066b40 | out: hFindFile=0x3066b40) returned 1 [0201.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0201.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec530) returned 1 [0201.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab3b8) returned 1 Thread: id = 6429 os_tid = 0x1bcc [0190.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eec638 [0190.761] wcscpy (in: _Dest=0x3eec638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" [0190.761] wcscat (in: _Dest=0x3eec638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\" [0190.761] wcscat (in: _Dest=0x3eec638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*" [0190.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52090 [0190.762] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\*", lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067300 [0191.777] wcscmp (_String1=".", _String2=".") returned 0 [0191.777] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.777] wcscmp (_String1="..", _String2=".") returned 1 [0191.777] wcscmp (_String1="..", _String2="..") returned 0 [0191.777] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.777] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.778] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbe148 [0191.778] wcscpy (in: _Dest=0x7cbe148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk" [0191.778] wcscat (in: _Dest=0x7cbe148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\" [0191.778] wcscat (in: _Dest=0x7cbe148, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" [0201.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0201.603] FindNextFileW (in: hFindFile=0x3067300, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.603] FindClose (in: hFindFile=0x3067300 | out: hFindFile=0x3067300) returned 1 [0201.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52090) returned 1 [0201.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec638) returned 1 [0201.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab2b0) returned 1 Thread: id = 6430 os_tid = 0x1bd0 [0190.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x3eebdf8 [0190.762] wcscpy (in: _Dest=0x3eebdf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" [0190.762] wcscat (in: _Dest=0x3eebdf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\" [0190.762] wcscat (in: _Dest=0x3eebdf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*" [0190.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a544a8 [0190.762] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\*", lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3067340 [0191.778] wcscmp (_String1=".", _String2=".") returned 0 [0191.778] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.778] wcscmp (_String1="..", _String2=".") returned 1 [0191.778] wcscmp (_String1="..", _String2="..") returned 0 [0191.778] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.778] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.778] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbe270 [0191.779] wcscpy (in: _Dest=0x7cbe270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi" [0191.779] wcscat (in: _Dest=0x7cbe270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\" [0191.779] wcscat (in: _Dest=0x7cbe270, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" [0201.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0201.605] FindNextFileW (in: hFindFile=0x3067340, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443b3a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.605] FindClose (in: hFindFile=0x3067340 | out: hFindFile=0x3067340) returned 1 [0201.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a544a8) returned 1 [0201.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebdf8) returned 1 [0201.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab1a8) returned 1 Thread: id = 6431 os_tid = 0x1bd4 [0190.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a38818 [0190.763] wcscpy (in: _Dest=0x7a38818, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" [0190.763] wcscat (in: _Dest=0x7a38818, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\" [0190.763] wcscat (in: _Dest=0x7a38818, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*" [0190.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53d70 [0190.763] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066e00 [0191.780] wcscmp (_String1=".", _String2=".") returned 0 [0191.781] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.781] wcscmp (_String1="..", _String2=".") returned 1 [0191.781] wcscmp (_String1="..", _String2="..") returned 0 [0191.781] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4486e90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.781] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.781] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cbe398 [0191.781] wcscpy (in: _Dest=0x7cbe398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN" [0191.781] wcscat (in: _Dest=0x7cbe398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\" [0191.781] wcscat (in: _Dest=0x7cbe398, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" [0201.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514 [0201.607] FindNextFileW (in: hFindFile=0x3066e00, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4486e90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.608] FindClose (in: hFindFile=0x3066e00 | out: hFindFile=0x3066e00) returned 1 [0201.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53d70) returned 1 [0201.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38818) returned 1 [0201.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabe08) returned 1 Thread: id = 6432 os_tid = 0x1bd8 [0190.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a38b60 [0190.764] wcscpy (in: _Dest=0x7a38b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" [0190.764] wcscat (in: _Dest=0x7a38b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\" [0190.764] wcscat (in: _Dest=0x7a38b60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*" [0190.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0190.764] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0191.766] wcscmp (_String1=".", _String2=".") returned 0 [0191.766] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.766] wcscmp (_String1="..", _String2=".") returned 1 [0191.767] wcscmp (_String1="..", _String2="..") returned 0 [0191.767] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ab880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.767] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.767] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7ca9be0 [0191.767] wcscpy (in: _Dest=0x7ca9be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW" [0191.767] wcscat (in: _Dest=0x7ca9be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\" [0191.767] wcscat (in: _Dest=0x7ca9be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" [0201.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e0 [0201.878] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ab880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4d06340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.878] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0201.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0201.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38b60) returned 1 [0201.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab0a0) returned 1 Thread: id = 6433 os_tid = 0x1bdc [0190.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a39308 [0190.764] wcscpy (in: _Dest=0x7a39308, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0190.764] wcscat (in: _Dest=0x7a39308, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\" [0190.764] wcscat (in: _Dest=0x7a39308, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*" [0190.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a557e8 [0190.765] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\*", lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7df0 [0190.765] wcscmp (_String1=".", _String2=".") returned 0 [0190.765] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3c360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d3c360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.765] wcscmp (_String1="..", _String2=".") returned 1 [0190.765] wcscmp (_String1="..", _String2="..") returned 0 [0190.765] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3dad0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.765] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.765] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7a658d8 [0190.766] wcscpy (in: _Dest=0x7a658d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar" [0190.766] wcscat (in: _Dest=0x7a658d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\" [0190.766] wcscat (in: _Dest=0x7a658d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json" [0199.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a658d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x232c [0199.799] FindNextFileW (in: hFindFile=0x7ad7df0, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d3c360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d3dad0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.799] FindClose (in: hFindFile=0x7ad7df0 | out: hFindFile=0x7ad7df0) returned 1 [0199.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a557e8) returned 1 [0199.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a39308) returned 1 [0199.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a8d0) returned 1 Thread: id = 6434 os_tid = 0x1be0 [0190.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38ea8 [0190.766] wcscpy (in: _Dest=0x7a38ea8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0190.766] wcscat (in: _Dest=0x7a38ea8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" [0190.767] wcscat (in: _Dest=0x7a38ea8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*" [0190.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0190.767] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7ff0 [0190.767] wcscmp (_String1=".", _String2=".") returned 0 [0190.767] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d88620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d88620, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.767] wcscmp (_String1="..", _String2=".") returned 1 [0190.767] wcscmp (_String1="..", _String2="..") returned 0 [0190.767] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.767] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.767] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7a65a00 [0190.768] wcscpy (in: _Dest=0x7a65a00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg" [0190.768] wcscat (in: _Dest=0x7a65a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" [0190.768] wcscat (in: _Dest=0x7a65a00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" [0195.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c [0195.690] FindNextFileW (in: hFindFile=0x7ad7ff0, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3d88620, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d895c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.691] FindClose (in: hFindFile=0x7ad7ff0 | out: hFindFile=0x7ad7ff0) returned 1 [0195.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0195.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38ea8) returned 1 [0195.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab4c0) returned 1 Thread: id = 6435 os_tid = 0x1be4 [0190.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c898 [0190.768] wcscpy (in: _Dest=0x7b7c898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0190.768] wcscat (in: _Dest=0x7b7c898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\" [0190.768] wcscat (in: _Dest=0x7b7c898, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*" [0190.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb10d8 [0190.769] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\*", lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7f30 [0190.769] wcscmp (_String1=".", _String2=".") returned 0 [0190.769] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.769] wcscmp (_String1="..", _String2=".") returned 1 [0190.769] wcscmp (_String1="..", _String2="..") returned 0 [0190.769] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3db06c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.769] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.769] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7a65b28 [0190.769] wcscpy (in: _Dest=0x7a65b28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca" [0190.770] wcscat (in: _Dest=0x7a65b28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\" [0190.770] wcscat (in: _Dest=0x7a65b28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" [0195.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a4 [0195.693] FindNextFileW (in: hFindFile=0x7ad7f30, lpFindFileData=0x3eb10d8 | out: lpFindFileData=0x3eb10d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3db06c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.693] FindClose (in: hFindFile=0x7ad7f30 | out: hFindFile=0x7ad7f30) returned 1 [0195.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb10d8) returned 1 [0195.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c898) returned 1 [0195.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabd00) returned 1 Thread: id = 6436 os_tid = 0x1be8 [0190.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7cbe0 [0190.770] wcscpy (in: _Dest=0x7b7cbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0190.770] wcscat (in: _Dest=0x7b7cbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" [0190.770] wcscat (in: _Dest=0x7b7cbe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*" [0190.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1a78 [0190.771] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\*", lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfaa40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dfaa40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7170 [0190.771] wcscmp (_String1=".", _String2=".") returned 0 [0190.771] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfaa40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dfaa40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.771] wcscmp (_String1="..", _String2=".") returned 1 [0190.771] wcscmp (_String1="..", _String2="..") returned 0 [0190.771] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfc1b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.771] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.771] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7a65c50 [0190.771] wcscpy (in: _Dest=0x7a65c50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs" [0190.771] wcscat (in: _Dest=0x7a65c50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" [0190.771] wcscat (in: _Dest=0x7a65c50, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" [0195.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1830 [0195.696] FindNextFileW (in: hFindFile=0x7ad7170, lpFindFileData=0x3eb1a78 | out: lpFindFileData=0x3eb1a78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3dfaa40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dfc1b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.696] FindClose (in: hFindFile=0x7ad7170 | out: hFindFile=0x7ad7170) returned 1 [0195.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1a78) returned 1 [0195.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cbe0) returned 1 [0195.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf98) returned 1 Thread: id = 6437 os_tid = 0x1bec [0190.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d040 [0190.772] wcscpy (in: _Dest=0x7b7d040, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0190.772] wcscat (in: _Dest=0x7b7d040, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" [0190.772] wcscat (in: _Dest=0x7b7d040, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*" [0190.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb28e8 [0190.772] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\*", lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7c70 [0190.773] wcscmp (_String1=".", _String2=".") returned 0 [0190.773] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.773] wcscmp (_String1="..", _String2=".") returned 1 [0190.773] wcscmp (_String1="..", _String2="..") returned 0 [0190.773] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.773] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.773] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7a65d78 [0190.773] wcscpy (in: _Dest=0x7a65d78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da" [0190.773] wcscat (in: _Dest=0x7a65d78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" [0190.773] wcscat (in: _Dest=0x7a65d78, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" [0195.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1834 [0195.699] FindNextFileW (in: hFindFile=0x7ad7c70, lpFindFileData=0x3eb28e8 | out: lpFindFileData=0x3eb28e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.699] FindClose (in: hFindFile=0x7ad7c70 | out: hFindFile=0x7ad7c70) returned 1 [0195.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb28e8) returned 1 [0195.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d040) returned 1 [0195.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabbf8) returned 1 Thread: id = 6438 os_tid = 0x1c1c [0190.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7ccf8 [0190.774] wcscpy (in: _Dest=0x7b7ccf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0190.774] wcscat (in: _Dest=0x7b7ccf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" [0190.774] wcscat (in: _Dest=0x7b7ccf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*" [0190.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1340 [0190.774] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\*", lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7930 [0190.774] wcscmp (_String1=".", _String2=".") returned 0 [0190.774] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.775] wcscmp (_String1="..", _String2=".") returned 1 [0190.775] wcscmp (_String1="..", _String2="..") returned 0 [0190.775] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6eda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.775] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.775] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7a65ea0 [0190.775] wcscpy (in: _Dest=0x7a65ea0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de" [0190.775] wcscat (in: _Dest=0x7a65ea0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" [0190.775] wcscat (in: _Dest=0x7a65ea0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" [0195.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a65ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1838 [0195.702] FindNextFileW (in: hFindFile=0x7ad7930, lpFindFileData=0x3eb1340 | out: lpFindFileData=0x3eb1340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6eda0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50945c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.702] FindClose (in: hFindFile=0x7ad7930 | out: hFindFile=0x7ad7930) returned 1 [0195.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1340) returned 1 [0195.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ccf8) returned 1 [0195.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caae90) returned 1 Thread: id = 6439 os_tid = 0x1c20 [0190.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x300dfd8 [0190.776] wcscpy (in: _Dest=0x300dfd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0190.776] wcscat (in: _Dest=0x300dfd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" [0190.776] wcscat (in: _Dest=0x300dfd8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*" [0190.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3288 [0190.776] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\*", lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bf0 [0190.776] wcscmp (_String1=".", _String2=".") returned 0 [0190.776] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e92fc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e92fc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.776] wcscmp (_String1="..", _String2=".") returned 1 [0190.776] wcscmp (_String1="..", _String2="..") returned 0 [0190.776] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.777] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.777] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4020 [0190.777] wcscpy (in: _Dest=0x7cb4020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el" [0190.777] wcscat (in: _Dest=0x7cb4020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" [0190.777] wcscat (in: _Dest=0x7cb4020, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" [0195.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1840 [0195.704] FindNextFileW (in: hFindFile=0x7ad7bf0, lpFindFileData=0x3eb3288 | out: lpFindFileData=0x3eb3288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3e92fc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e93790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.704] FindClose (in: hFindFile=0x7ad7bf0 | out: hFindFile=0x7ad7bf0) returned 1 [0195.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3288) returned 1 [0195.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300dfd8) returned 1 [0195.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caad88) returned 1 Thread: id = 6440 os_tid = 0x1c24 [0190.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x300e668 [0190.777] wcscpy (in: _Dest=0x300e668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0190.777] wcscat (in: _Dest=0x300e668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" [0190.777] wcscat (in: _Dest=0x300e668, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*" [0190.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2418 [0190.778] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\*", lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad79b0 [0190.778] wcscmp (_String1=".", _String2=".") returned 0 [0190.778] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.778] wcscmp (_String1="..", _String2=".") returned 1 [0190.778] wcscmp (_String1="..", _String2="..") returned 0 [0190.778] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.778] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.778] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4148 [0190.779] wcscpy (in: _Dest=0x7cb4148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en" [0190.779] wcscat (in: _Dest=0x7cb4148, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" [0190.779] wcscat (in: _Dest=0x7cb4148, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" [0195.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c [0195.707] FindNextFileW (in: hFindFile=0x7ad79b0, lpFindFileData=0x3eb2418 | out: lpFindFileData=0x3eb2418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eba890, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.707] FindClose (in: hFindFile=0x7ad79b0 | out: hFindFile=0x7ad79b0) returned 1 [0195.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2418) returned 1 [0195.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300e668) returned 1 [0195.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caac80) returned 1 Thread: id = 6441 os_tid = 0x1dc8 [0190.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3dec828 [0190.779] wcscpy (in: _Dest=0x3dec828, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0190.779] wcscat (in: _Dest=0x3dec828, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" [0190.779] wcscat (in: _Dest=0x3dec828, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*" [0190.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2db8 [0190.779] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\*", lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7db0 [0190.780] wcscmp (_String1=".", _String2=".") returned 0 [0190.780] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.780] wcscmp (_String1="..", _String2=".") returned 1 [0190.780] wcscmp (_String1="..", _String2="..") returned 0 [0190.780] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.780] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.780] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4270 [0190.781] wcscpy (in: _Dest=0x7cb4270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es" [0190.781] wcscat (in: _Dest=0x7cb4270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" [0190.781] wcscat (in: _Dest=0x7cb4270, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" [0195.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2338 [0195.710] FindNextFileW (in: hFindFile=0x7ad7db0, lpFindFileData=0x3eb2db8 | out: lpFindFileData=0x3eb2db8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f78f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.710] FindClose (in: hFindFile=0x7ad7db0 | out: hFindFile=0x7ad7db0) returned 1 [0195.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2db8) returned 1 [0195.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dec828) returned 1 [0195.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabaf0) returned 1 Thread: id = 6442 os_tid = 0x1c28 [0190.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb6020 [0190.781] wcscpy (in: _Dest=0x7cb6020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0190.781] wcscat (in: _Dest=0x7cb6020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" [0190.781] wcscat (in: _Dest=0x7cb6020, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*" [0190.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb3758 [0190.782] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\*", lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad78b0 [0190.782] wcscmp (_String1=".", _String2=".") returned 0 [0190.782] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f9d960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.782] wcscmp (_String1="..", _String2=".") returned 1 [0190.782] wcscmp (_String1="..", _String2="..") returned 0 [0190.782] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.782] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.782] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4398 [0190.782] wcscpy (in: _Dest=0x7cb4398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi" [0190.783] wcscat (in: _Dest=0x7cb4398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" [0190.783] wcscat (in: _Dest=0x7cb4398, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" [0195.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c [0195.712] FindNextFileW (in: hFindFile=0x7ad78b0, lpFindFileData=0x3eb3758 | out: lpFindFileData=0x3eb3758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3f9d960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f9d960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.712] FindClose (in: hFindFile=0x7ad78b0 | out: hFindFile=0x7ad78b0) returned 1 [0195.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb3758) returned 1 [0195.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6020) returned 1 [0195.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caab78) returned 1 Thread: id = 6443 os_tid = 0x1c2c [0190.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cb6138 [0190.783] wcscpy (in: _Dest=0x7cb6138, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0190.783] wcscat (in: _Dest=0x7cb6138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" [0190.783] wcscat (in: _Dest=0x7cb6138, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*" [0190.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1ce0 [0190.783] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\*", lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7970 [0190.784] wcscmp (_String1=".", _String2=".") returned 0 [0190.784] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.784] wcscmp (_String1="..", _String2=".") returned 1 [0190.784] wcscmp (_String1="..", _String2="..") returned 0 [0190.784] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.784] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.784] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7cb44c0 [0190.784] wcscpy (in: _Dest=0x7cb44c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil" [0190.784] wcscat (in: _Dest=0x7cb44c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" [0190.785] wcscat (in: _Dest=0x7cb44c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" [0195.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb44c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698 [0195.715] FindNextFileW (in: hFindFile=0x7ad7970, lpFindFileData=0x3eb1ce0 | out: lpFindFileData=0x3eb1ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3febb60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.715] FindClose (in: hFindFile=0x7ad7970 | out: hFindFile=0x7ad7970) returned 1 [0195.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1ce0) returned 1 [0195.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6138) returned 1 [0195.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab9e8) returned 1 Thread: id = 6444 os_tid = 0x1c34 [0190.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb6250 [0190.785] wcscpy (in: _Dest=0x7cb6250, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0190.785] wcscat (in: _Dest=0x7cb6250, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" [0190.785] wcscat (in: _Dest=0x7cb6250, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*" [0190.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1f48 [0190.785] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\*", lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7c30 [0190.786] wcscmp (_String1=".", _String2=".") returned 0 [0190.786] FindNextFileW (in: hFindFile=0x7ad7c30, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.786] wcscmp (_String1="..", _String2=".") returned 1 [0190.786] wcscmp (_String1="..", _String2="..") returned 0 [0190.786] FindNextFileW (in: hFindFile=0x7ad7c30, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.786] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.786] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb45e8 [0190.786] wcscpy (in: _Dest=0x7cb45e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr" [0190.786] wcscat (in: _Dest=0x7cb45e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" [0190.787] wcscat (in: _Dest=0x7cb45e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" [0195.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb45e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc [0195.717] FindNextFileW (in: hFindFile=0x7ad7c30, lpFindFileData=0x3eb1f48 | out: lpFindFileData=0x3eb1f48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4010550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.717] FindClose (in: hFindFile=0x7ad7c30 | out: hFindFile=0x7ad7c30) returned 1 [0195.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1f48) returned 1 [0195.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6250) returned 1 [0195.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaa70) returned 1 Thread: id = 6445 os_tid = 0x1c38 [0190.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb6368 [0190.787] wcscpy (in: _Dest=0x7cb6368, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0190.787] wcscat (in: _Dest=0x7cb6368, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" [0190.787] wcscat (in: _Dest=0x7cb6368, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*" [0190.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb4830 [0190.787] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\*", lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cf0 [0190.788] wcscmp (_String1=".", _String2=".") returned 0 [0190.788] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4035ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4035ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.788] wcscmp (_String1="..", _String2=".") returned 1 [0190.788] wcscmp (_String1="..", _String2="..") returned 0 [0190.788] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.788] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.788] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4710 [0190.788] wcscpy (in: _Dest=0x7cb4710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he" [0190.788] wcscat (in: _Dest=0x7cb4710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" [0190.788] wcscat (in: _Dest=0x7cb4710, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" [0195.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c [0195.720] FindNextFileW (in: hFindFile=0x7ad7cf0, lpFindFileData=0x3eb4830 | out: lpFindFileData=0x3eb4830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4035ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4037650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.720] FindClose (in: hFindFile=0x7ad7cf0 | out: hFindFile=0x7ad7cf0) returned 1 [0195.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb4830) returned 1 [0195.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6368) returned 1 [0195.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab8e0) returned 1 Thread: id = 6446 os_tid = 0x1c3c [0190.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb6480 [0190.789] wcscpy (in: _Dest=0x7cb6480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0190.789] wcscat (in: _Dest=0x7cb6480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" [0190.789] wcscat (in: _Dest=0x7cb6480, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*" [0190.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb1810 [0190.789] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\*", lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7d70 [0190.789] wcscmp (_String1=".", _String2=".") returned 0 [0190.789] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.790] wcscmp (_String1="..", _String2=".") returned 1 [0190.790] wcscmp (_String1="..", _String2="..") returned 0 [0190.790] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.790] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.790] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4838 [0190.790] wcscpy (in: _Dest=0x7cb4838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi" [0190.790] wcscat (in: _Dest=0x7cb4838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" [0190.790] wcscat (in: _Dest=0x7cb4838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" [0195.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18bc [0195.722] FindNextFileW (in: hFindFile=0x7ad7d70, lpFindFileData=0x3eb1810 | out: lpFindFileData=0x3eb1810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4083140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.722] FindClose (in: hFindFile=0x7ad7d70 | out: hFindFile=0x7ad7d70) returned 1 [0195.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb1810) returned 1 [0195.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6480) returned 1 [0195.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab7d8) returned 1 Thread: id = 6447 os_tid = 0x1dcc [0190.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb6598 [0190.802] wcscpy (in: _Dest=0x7cb6598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0190.802] wcscat (in: _Dest=0x7cb6598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" [0190.802] wcscat (in: _Dest=0x7cb6598, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*" [0190.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6fe68 [0190.802] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\*", lpFindFileData=0x7a6fe68 | out: lpFindFileData=0x7a6fe68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7bb0 [0190.803] wcscmp (_String1=".", _String2=".") returned 0 [0190.803] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x7a6fe68 | out: lpFindFileData=0x7a6fe68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40a8300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40a8300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.803] wcscmp (_String1="..", _String2=".") returned 1 [0190.803] wcscmp (_String1="..", _String2="..") returned 0 [0190.803] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x7a6fe68 | out: lpFindFileData=0x7a6fe68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.803] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.803] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4960 [0190.803] wcscpy (in: _Dest=0x7cb4960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr" [0190.803] wcscat (in: _Dest=0x7cb4960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" [0190.803] wcscat (in: _Dest=0x7cb4960, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" [0195.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510 [0195.725] FindNextFileW (in: hFindFile=0x7ad7bb0, lpFindFileData=0x7a6fe68 | out: lpFindFileData=0x7a6fe68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40a8300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40aa240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5096cd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.725] FindClose (in: hFindFile=0x7ad7bb0 | out: hFindFile=0x7ad7bb0) returned 1 [0195.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6fe68) returned 1 [0195.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6598) returned 1 [0195.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa440) returned 1 Thread: id = 6448 os_tid = 0x1c40 [0190.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb66b0 [0190.804] wcscpy (in: _Dest=0x7cb66b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0190.804] wcscat (in: _Dest=0x7cb66b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" [0190.804] wcscat (in: _Dest=0x7cb66b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*" [0190.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6fc00 [0190.804] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\*", lpFindFileData=0x7a6fc00 | out: lpFindFileData=0x7a6fc00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad77b0 [0190.804] wcscmp (_String1=".", _String2=".") returned 0 [0190.804] FindNextFileW (in: hFindFile=0x7ad77b0, lpFindFileData=0x7a6fc00 | out: lpFindFileData=0x7a6fc00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.805] wcscmp (_String1="..", _String2=".") returned 1 [0190.805] wcscmp (_String1="..", _String2="..") returned 0 [0190.805] FindNextFileW (in: hFindFile=0x7ad77b0, lpFindFileData=0x7a6fc00 | out: lpFindFileData=0x7a6fc00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.805] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.805] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4a88 [0190.805] wcscpy (in: _Dest=0x7cb4a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu" [0190.805] wcscat (in: _Dest=0x7cb4a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" [0190.805] wcscat (in: _Dest=0x7cb4a88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" [0195.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0 [0195.728] FindNextFileW (in: hFindFile=0x7ad77b0, lpFindFileData=0x7a6fc00 | out: lpFindFileData=0x7a6fc00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40cec30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.728] FindClose (in: hFindFile=0x7ad77b0 | out: hFindFile=0x7ad77b0) returned 1 [0195.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6fc00) returned 1 [0195.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb66b0) returned 1 [0195.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa548) returned 1 Thread: id = 6449 os_tid = 0x1c44 [0190.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb67c8 [0190.806] wcscpy (in: _Dest=0x7cb67c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0190.806] wcscat (in: _Dest=0x7cb67c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" [0190.806] wcscat (in: _Dest=0x7cb67c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*" [0190.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6f998 [0190.806] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\*", lpFindFileData=0x7a6f998 | out: lpFindFileData=0x7a6f998*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0190.806] wcscmp (_String1=".", _String2=".") returned 0 [0190.806] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a6f998 | out: lpFindFileData=0x7a6f998*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.806] wcscmp (_String1="..", _String2=".") returned 1 [0190.806] wcscmp (_String1="..", _String2="..") returned 0 [0190.806] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a6f998 | out: lpFindFileData=0x7a6f998*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.806] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.807] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4bb0 [0190.807] wcscpy (in: _Dest=0x7cb4bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id" [0190.807] wcscat (in: _Dest=0x7cb4bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" [0190.807] wcscat (in: _Dest=0x7cb4bb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" [0195.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490 [0195.730] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a6f998 | out: lpFindFileData=0x7a6f998*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0195.730] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0195.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f998) returned 1 [0195.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb67c8) returned 1 [0195.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa650) returned 1 Thread: id = 6450 os_tid = 0x1c50 [0190.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb68e0 [0190.807] wcscpy (in: _Dest=0x7cb68e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0190.807] wcscat (in: _Dest=0x7cb68e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" [0190.807] wcscat (in: _Dest=0x7cb68e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*" [0190.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6f730 [0190.808] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\*", lpFindFileData=0x7a6f730 | out: lpFindFileData=0x7a6f730*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0190.808] wcscmp (_String1=".", _String2=".") returned 0 [0190.808] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a6f730 | out: lpFindFileData=0x7a6f730*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4140880, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4140880, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.808] wcscmp (_String1="..", _String2=".") returned 1 [0190.808] wcscmp (_String1="..", _String2="..") returned 0 [0190.808] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a6f730 | out: lpFindFileData=0x7a6f730*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.808] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.808] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4cd8 [0190.809] wcscpy (in: _Dest=0x7cb4cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it" [0190.809] wcscat (in: _Dest=0x7cb4cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" [0190.809] wcscat (in: _Dest=0x7cb4cd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" [0194.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc [0194.948] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a6f730 | out: lpFindFileData=0x7a6f730*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4140880, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4141820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.948] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0194.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f730) returned 1 [0194.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb68e0) returned 1 [0194.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa758) returned 1 Thread: id = 6451 os_tid = 0x1c54 [0190.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb69f8 [0190.809] wcscpy (in: _Dest=0x7cb69f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0190.809] wcscat (in: _Dest=0x7cb69f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" [0190.810] wcscat (in: _Dest=0x7cb69f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*" [0190.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6f4c8 [0190.810] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\*", lpFindFileData=0x7a6f4c8 | out: lpFindFileData=0x7a6f4c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0190.810] wcscmp (_String1=".", _String2=".") returned 0 [0190.810] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x7a6f4c8 | out: lpFindFileData=0x7a6f4c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.810] wcscmp (_String1="..", _String2=".") returned 1 [0190.810] wcscmp (_String1="..", _String2="..") returned 0 [0190.810] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x7a6f4c8 | out: lpFindFileData=0x7a6f4c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.810] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.810] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4e00 [0190.811] wcscpy (in: _Dest=0x7cb4e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja" [0190.811] wcscat (in: _Dest=0x7cb4e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" [0190.811] wcscat (in: _Dest=0x7cb4e00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" [0194.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688 [0194.951] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x7a6f4c8 | out: lpFindFileData=0x7a6f4c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4168920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.951] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0194.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f4c8) returned 1 [0194.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb69f8) returned 1 [0194.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa860) returned 1 Thread: id = 6452 os_tid = 0x1c5c [0190.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb6b10 [0190.811] wcscpy (in: _Dest=0x7cb6b10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0190.811] wcscat (in: _Dest=0x7cb6b10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" [0190.812] wcscat (in: _Dest=0x7cb6b10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*" [0190.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6f260 [0190.812] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\*", lpFindFileData=0x7a6f260 | out: lpFindFileData=0x7a6f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0190.812] wcscmp (_String1=".", _String2=".") returned 0 [0190.812] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x7a6f260 | out: lpFindFileData=0x7a6f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.812] wcscmp (_String1="..", _String2=".") returned 1 [0190.812] wcscmp (_String1="..", _String2="..") returned 0 [0190.813] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x7a6f260 | out: lpFindFileData=0x7a6f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0190.813] wcscmp (_String1="messages.json", _String2=".") returned 1 [0190.813] wcscmp (_String1="messages.json", _String2="..") returned 1 [0190.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cb4f28 [0190.813] wcscpy (in: _Dest=0x7cb4f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko" [0190.813] wcscat (in: _Dest=0x7cb4f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" [0190.813] wcscat (in: _Dest=0x7cb4f28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" [0194.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb4f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4 [0194.953] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x7a6f260 | out: lpFindFileData=0x7a6f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b4410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0194.953] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0194.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6f260) returned 1 [0194.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6b10) returned 1 [0194.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa968) returned 1 Thread: id = 6453 os_tid = 0x16f4 [0191.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb7da8 [0191.438] wcscpy (in: _Dest=0x7cb7da8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0191.438] wcscat (in: _Dest=0x7cb7da8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" [0191.438] wcscat (in: _Dest=0x7cb7da8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*" [0191.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55580 [0191.438] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\*", lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41d8e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0191.438] wcscmp (_String1=".", _String2=".") returned 0 [0191.438] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41d8e00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.438] wcscmp (_String1="..", _String2=".") returned 1 [0191.438] wcscmp (_String1="..", _String2="..") returned 0 [0191.438] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.438] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.438] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cba398 [0191.438] wcscpy (in: _Dest=0x7cba398, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt" [0191.438] wcscat (in: _Dest=0x7cba398, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" [0191.438] wcscat (in: _Dest=0x7cba398, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" [0193.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cba398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1870 [0193.456] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe41d8e00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41d8e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.456] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0193.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55580) returned 1 [0193.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7da8) returned 1 [0193.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa128) returned 1 Thread: id = 6454 os_tid = 0x1c60 [0191.439] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json")) returned 0x2020 [0194.530] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0202.126] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17c4 [0202.127] GetFileSizeEx (in: hFile=0x17c4, lpFileSize=0xd5ff88c | out: lpFileSize=0xd5ff88c*=345) returned 1 [0202.127] SetFilePointerEx (in: hFile=0x17c4, liDistanceToMove=0x155, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.127] ReadFile (in: hFile=0x17c4, lpBuffer=0xd5ff868, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd5ff878, lpOverlapped=0x0 | out: lpBuffer=0xd5ff868*, lpNumberOfBytesRead=0xd5ff878*=0x4, lpOverlapped=0x0) returned 1 [0202.128] SetFilePointerEx (in: hFile=0x17c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0202.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0202.129] NtQuerySystemTime (in: CurrentTime=0xd5ff800 | out: CurrentTime=0xd5ff800*=132462177807084000) returned 0x0 [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x34e2d08e [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x6fc93e1e [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x3202480c [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x254de2c0 [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x36425dbb [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x11065c0 [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x6b7c8f25 [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x34474b6c [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x6579a6b0 [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x26ee32fb [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x445534df [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x6e8b03c8 [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x101f5a3c [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x6df6fbbc [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x6b87c648 [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x37ae6483 [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x23d9a198 [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x373f2f4 [0202.129] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x550c98f [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x4a6c16c4 [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x3111801f [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x78a21f76 [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x46eb560b [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x2950ed18 [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x5ebf80d4 [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x184f540e [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x433d5197 [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x432518ca [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x1a262bb4 [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x7e368af [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x119909ad [0202.130] RtlRandomEx (in: Seed=0xd5ff7f8 | out: Seed=0xd5ff7f8) returned 0x4a6d0b45 [0202.140] ReadFile (in: hFile=0x17c4, lpBuffer=0x7dbd400, nNumberOfBytesToRead=0x159, lpNumberOfBytesRead=0xd5ff7f4, lpOverlapped=0x0 | out: lpBuffer=0x7dbd400*, lpNumberOfBytesRead=0xd5ff7f4*=0x159, lpOverlapped=0x0) returned 1 [0202.140] SetFilePointerEx (in: hFile=0x17c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.140] WriteFile (in: hFile=0x17c4, lpBuffer=0x7dc1008*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0xd5ff7f8, lpOverlapped=0x0 | out: lpBuffer=0x7dc1008*, lpNumberOfBytesWritten=0xd5ff7f8*=0x159, lpOverlapped=0x0) returned 1 [0206.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0206.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0206.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3470) returned 1 [0206.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc1008) returned 1 [0206.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dbd400) returned 1 [0206.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0206.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24db8) returned 1 [0206.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db36f0 [0206.571] SetFilePointerEx (in: hFile=0x17c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.571] WriteFile (in: hFile=0x17c4, lpBuffer=0x7b7ce10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd5ff880, lpOverlapped=0x0 | out: lpBuffer=0x7b7ce10*, lpNumberOfBytesWritten=0xd5ff880*=0x10c, lpOverlapped=0x0) returned 1 [0208.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0208.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6ce28 [0208.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0208.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34e8) returned 1 [0208.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec34e8 [0208.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0208.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f60 [0208.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f60) returned 1 [0208.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0208.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0208.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0208.989] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="dc") returned 2 [0208.989] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="86") returned 2 [0208.989] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="08") returned 2 [0208.989] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="63") returned 2 [0208.989] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="25") returned 2 [0208.989] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="9e") returned 2 [0208.989] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="ce") returned 2 [0208.989] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="96") returned 2 [0208.989] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="e6") returned 2 [0208.989] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="0e") returned 2 [0208.990] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="14") returned 2 [0208.990] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="f1") returned 2 [0208.990] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="ad") returned 2 [0208.990] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="60") returned 2 [0208.990] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="ec") returned 2 [0208.990] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="db") returned 2 [0208.990] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="3f") returned 2 [0208.990] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="19") returned 2 [0208.990] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="8b") returned 2 [0208.990] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="67") returned 2 [0208.990] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="e3") returned 2 [0208.990] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="ef") returned 2 [0208.990] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="1b") returned 2 [0208.990] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="54") returned 2 [0208.990] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="1b") returned 2 [0208.990] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="78") returned 2 [0208.990] RtlInitAnsiString (in: DestinationString=0xd5ff808, SourceString="dc860863259ece96e60e14f1ad60ecdb3f198b67e3ef1b541b78" | out: DestinationString="dc860863259ece96e60e14f1ad60ecdb3f198b67e3ef1b541b78") [0208.990] RtlAnsiStringToUnicodeString (in: DestinationString=0xd5ff800, SourceString="dc860863259ece96e60e14f1ad60ecdb3f198b67e3ef1b541b78", AllocateDestinationString=1 | out: DestinationString="dc860863259ece96e60e14f1ad60ecdb3f198b67e3ef1b541b78") returned 0x0 [0208.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6ca68 [0208.991] wcscat (in: _Dest=0x7dde880, _Source="dc860863259ec" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\dc860863259ec") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\dc860863259ec" [0208.991] wcscat (in: _Dest=0x7dde880, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\dc860863259ec.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\dc860863259ec.68814f" [0208.991] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\dc860863259ec.68814f", NtPathName=0xd5ff7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\dc860863259ec.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddd300 [0209.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd300) returned 1 [0209.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca5438) returned 1 [0209.369] NtQueryInformationFile (in: FileHandle=0x17c4, IoStatusBlock=0xd5ff7d0, FileInformation=0xd5ff7d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd5ff7d0, FileInformation=0xd5ff7d8) returned 0x0 [0209.369] NtSetInformationFile (FileHandle=0x17c4, IoStatusBlock=0xd5ff7d0, FileInformation=0xd5ff7d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dde880) returned 1 [0209.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ca68) returned 1 [0209.502] FlushFileBuffers (hFile=0x17c4) returned 1 [0209.507] CloseHandle (hObject=0x17c4) returned 1 [0209.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7cd54d8 [0209.588] wcscpy (in: _Dest=0x7cd54d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\" [0209.588] wcscat (in: _Dest=0x7cd54d8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\68814F-Readme.txt" [0209.588] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\68814f-readme.txt")) returned 0xffffffff [0209.588] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.163] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd5ff814, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd5ff814*=0x8b9, lpOverlapped=0x0) returned 1 [0210.168] CloseHandle (hObject=0xbb8) returned 1 [0210.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd54d8) returned 1 [0210.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec74d0) returned 1 Thread: id = 6455 os_tid = 0x1c64 [0191.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss")) returned 0x20 [0191.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", dwFileAttributes=0x20) returned 0 [0191.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.440] GetLastError () returned 0x5 [0191.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS", dwFileAttributes=0x20) returned 0 [0191.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a698) returned 1 Thread: id = 6456 os_tid = 0x1c68 [0191.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc")) returned 0x20 [0191.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", dwFileAttributes=0x20) returned 0 [0191.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.447] GetLastError () returned 0x5 [0191.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC", dwFileAttributes=0x20) returned 0 [0191.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68e60) returned 1 Thread: id = 6457 os_tid = 0x1c6c [0191.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt")) returned 0x20 [0191.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", dwFileAttributes=0x20) returned 0 [0191.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.449] GetLastError () returned 0x5 [0191.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT", dwFileAttributes=0x20) returned 0 [0191.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a10) returned 1 Thread: id = 6458 os_tid = 0x1c7c [0191.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls")) returned 0x20 [0191.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", dwFileAttributes=0x20) returned 0 [0191.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.451] GetLastError () returned 0x5 [0191.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS", dwFileAttributes=0x20) returned 0 [0191.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69b20) returned 1 Thread: id = 6459 os_tid = 0x1c80 [0191.453] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json")) returned 0x2020 [0194.531] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0202.224] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1014 [0202.225] GetFileSizeEx (in: hFile=0x1014, lpFileSize=0x9bafc14 | out: lpFileSize=0x9bafc14*=319) returned 1 [0202.225] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x13b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.225] ReadFile (in: hFile=0x1014, lpBuffer=0x9bafbf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9bafc00, lpOverlapped=0x0 | out: lpBuffer=0x9bafbf0*, lpNumberOfBytesRead=0x9bafc00*=0x4, lpOverlapped=0x0) returned 1 [0202.226] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0202.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c90 [0202.227] NtQuerySystemTime (in: CurrentTime=0x9bafb88 | out: CurrentTime=0x9bafb88*=132462177808020000) returned 0x0 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x28582652 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x78dbf9c1 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x178ac2a3 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x4c7b06e [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x29cd4dfa [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x754bf391 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x346a9287 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x488bd261 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x64259b3f [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x61506fa2 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x30ccd4c8 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x77ce8889 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x8247a43 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x61083aed [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x6f9dc6d8 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x137a6611 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0xc20ecb1 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x74dbc9a1 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0xe2091bd [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x7d277ad6 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x7718ff50 [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x15739aab [0202.227] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x637c2462 [0202.228] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x662b34e7 [0202.228] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x7794bc48 [0202.228] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x3aef71b9 [0202.228] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x36c881ca [0202.228] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x7ddf1fba [0202.228] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x587eb67 [0202.228] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x5d669b22 [0202.228] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x446665f1 [0202.228] RtlRandomEx (in: Seed=0x9bafb80 | out: Seed=0x9bafb80) returned 0x391fd59d [0202.237] ReadFile (in: hFile=0x1014, lpBuffer=0x7ba2798, nNumberOfBytesToRead=0x13f, lpNumberOfBytesRead=0x9bafb7c, lpOverlapped=0x0 | out: lpBuffer=0x7ba2798*, lpNumberOfBytesRead=0x9bafb7c*=0x13f, lpOverlapped=0x0) returned 1 [0202.237] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.237] WriteFile (in: hFile=0x1014, lpBuffer=0x7ba63a0*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x9bafb80, lpOverlapped=0x0 | out: lpBuffer=0x7ba63a0*, lpNumberOfBytesWritten=0x9bafb80*=0x13f, lpOverlapped=0x0) returned 1 [0206.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0206.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba63a0) returned 1 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba2798) returned 1 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c4c8) returned 1 [0206.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84368) returned 1 [0206.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a40 [0206.055] SetFilePointerEx (in: hFile=0x1014, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.055] WriteFile (in: hFile=0x1014, lpBuffer=0x7b7e1c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9bafc08, lpOverlapped=0x0 | out: lpBuffer=0x7b7e1c0*, lpNumberOfBytesWritten=0x9bafc08*=0x10c, lpOverlapped=0x0) returned 1 [0206.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0206.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4870 [0206.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4118 [0206.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.464] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="bb") returned 2 [0206.464] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="76") returned 2 [0206.464] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="98") returned 2 [0206.464] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="83") returned 2 [0206.464] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="0a") returned 2 [0206.464] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="ad") returned 2 [0206.464] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="71") returned 2 [0206.464] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="43") returned 2 [0206.464] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="0c") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="3e") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="3d") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="fd") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="29") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="38") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="5b") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="76") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="ba") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="8f") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="5b") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="f1") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="07") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="12") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="3f") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="eb") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="f8") returned 2 [0206.465] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="ab") returned 2 [0206.465] RtlInitAnsiString (in: DestinationString=0x9bafb90, SourceString="bb7698830aad71430c3e3dfd29385b76ba8f5bf107123febf8ab" | out: DestinationString="bb7698830aad71430c3e3dfd29385b76ba8f5bf107123febf8ab") [0206.465] RtlAnsiStringToUnicodeString (in: DestinationString=0x9bafb88, SourceString="bb7698830aad71430c3e3dfd29385b76ba8f5bf107123febf8ab", AllocateDestinationString=1 | out: DestinationString="bb7698830aad71430c3e3dfd29385b76ba8f5bf107123febf8ab") returned 0x0 [0206.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e6e8 [0206.465] wcscat (in: _Dest=0x7a5ef30, _Source="bb7698830aad7" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\bb7698830aad7") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\bb7698830aad7" [0206.466] wcscat (in: _Dest=0x7a5ef30, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\bb7698830aad7.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\bb7698830aad7.68814f" [0206.466] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\bb7698830aad7.68814f", NtPathName=0x9bafb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\bb7698830aad7.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd8de0 [0208.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8de0) returned 1 [0208.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e26d90) returned 1 [0208.852] NtQueryInformationFile (in: FileHandle=0x1014, IoStatusBlock=0x9bafb58, FileInformation=0x9bafb60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9bafb58, FileInformation=0x9bafb60) returned 0x0 [0208.852] NtSetInformationFile (FileHandle=0x1014, IoStatusBlock=0x9bafb58, FileInformation=0x9bafb60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ef30) returned 1 [0209.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0209.185] FlushFileBuffers (hFile=0x1014) returned 1 [0209.190] CloseHandle (hObject=0x1014) returned 1 [0209.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02738 [0209.423] wcscpy (in: _Dest=0x3e02738, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\" [0209.423] wcscat (in: _Dest=0x3e02738, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\68814F-Readme.txt" [0209.423] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\68814f-readme.txt")) returned 0xffffffff [0209.423] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\bg\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.005] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9bafb9c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9bafb9c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.006] CloseHandle (hObject=0xbb8) returned 1 [0210.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02738) returned 1 [0210.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56180) returned 1 Thread: id = 6460 os_tid = 0x1ad8 [0191.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cb7ec0 [0191.453] wcscpy (in: _Dest=0x7cb7ec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" [0191.453] wcscat (in: _Dest=0x7cb7ec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" [0191.453] wcscat (in: _Dest=0x7cb7ec0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*" [0191.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a533d0 [0191.454] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488abe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe488abe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0191.454] wcscmp (_String1=".", _String2=".") returned 0 [0191.454] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488abe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe488abe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0191.454] wcscmp (_String1="..", _String2=".") returned 1 [0191.454] wcscmp (_String1="..", _String2="..") returned 0 [0191.454] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488c350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0191.454] wcscmp (_String1="messages.json", _String2=".") returned 1 [0191.454] wcscmp (_String1="messages.json", _String2="..") returned 1 [0191.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7cba4c0 [0191.454] wcscpy (in: _Dest=0x7cba4c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" [0191.454] wcscat (in: _Dest=0x7cba4c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" [0191.454] wcscat (in: _Dest=0x7cba4c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" [0193.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cba4c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2458 [0193.459] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe488abe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe488c350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0193.459] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0193.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a533d0) returned 1 [0193.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7ec0) returned 1 [0193.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38c78) returned 1 Thread: id = 6461 os_tid = 0x16f8 [0191.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbc020 [0191.455] wcscpy (in: _Dest=0x7cbc020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" [0191.455] wcscat (in: _Dest=0x7cbc020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\" [0191.455] wcscat (in: _Dest=0x7cbc020, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*" [0191.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6eff8 [0191.455] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x7a6eff8 | out: lpFindFileData=0x7a6eff8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48b0d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d6ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48d6ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0200.392] wcscmp (_String1=".", _String2=".") returned 0 [0200.392] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a6eff8 | out: lpFindFileData=0x7a6eff8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48b0d40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d6ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe48d6ea0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.392] wcscmp (_String1="..", _String2=".") returned 1 [0200.392] wcscmp (_String1="..", _String2="..") returned 0 [0200.392] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a6eff8 | out: lpFindFileData=0x7a6eff8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48d6ea0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d7e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.393] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.393] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b80698 [0200.393] wcscpy (in: _Dest=0x7b80698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" [0200.393] wcscat (in: _Dest=0x7b80698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\" [0200.393] wcscat (in: _Dest=0x7b80698, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" [0201.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0201.693] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a6eff8 | out: lpFindFileData=0x7a6eff8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe48d6ea0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe48d7e40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe541e1f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.694] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0201.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6eff8) returned 1 [0201.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc020) returned 1 [0201.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6c28) returned 1 Thread: id = 6462 os_tid = 0x17e4 [0191.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbc138 [0191.468] wcscpy (in: _Dest=0x7cbc138, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" [0191.468] wcscat (in: _Dest=0x7cbc138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\" [0191.468] wcscat (in: _Dest=0x7cbc138, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*" [0191.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6ed90 [0191.469] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x7a6ed90 | out: lpFindFileData=0x7a6ed90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48fd000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4923160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0200.391] wcscmp (_String1=".", _String2=".") returned 0 [0200.391] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a6ed90 | out: lpFindFileData=0x7a6ed90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe48fd000, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4923160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.392] wcscmp (_String1="..", _String2=".") returned 1 [0200.392] wcscmp (_String1="..", _String2="..") returned 0 [0200.392] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a6ed90 | out: lpFindFileData=0x7a6ed90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4923160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.392] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.392] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7a5fc98 [0200.392] wcscpy (in: _Dest=0x7a5fc98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" [0200.392] wcscat (in: _Dest=0x7a5fc98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\" [0200.392] wcscat (in: _Dest=0x7a5fc98, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" [0201.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5fc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c [0201.691] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x7a6ed90 | out: lpFindFileData=0x7a6ed90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4923160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4923930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.691] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0201.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ed90) returned 1 [0201.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc138) returned 1 [0201.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6d40) returned 1 Thread: id = 6463 os_tid = 0x17e8 [0191.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbc250 [0191.470] wcscpy (in: _Dest=0x7cbc250, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" [0191.470] wcscat (in: _Dest=0x7cbc250, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\" [0191.470] wcscat (in: _Dest=0x7cbc250, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*" [0191.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6eb28 [0191.470] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x7a6eb28 | out: lpFindFileData=0x7a6eb28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49492c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49492c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0200.390] wcscmp (_String1=".", _String2=".") returned 0 [0200.391] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x7a6eb28 | out: lpFindFileData=0x7a6eb28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49492c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49492c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.391] wcscmp (_String1="..", _String2=".") returned 1 [0200.391] wcscmp (_String1="..", _String2="..") returned 0 [0200.391] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x7a6eb28 | out: lpFindFileData=0x7a6eb28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe494aa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.391] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.391] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7a5fb60 [0200.391] wcscpy (in: _Dest=0x7a5fb60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" [0200.391] wcscat (in: _Dest=0x7a5fb60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\" [0200.391] wcscat (in: _Dest=0x7a5fb60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" [0201.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5fb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18 [0201.689] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x7a6eb28 | out: lpFindFileData=0x7a6eb28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49492c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe494aa30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.689] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0201.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6eb28) returned 1 [0201.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc250) returned 1 [0201.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6e58) returned 1 Thread: id = 6464 os_tid = 0x17ec [0191.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbc368 [0191.471] wcscpy (in: _Dest=0x7cbc368, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" [0191.471] wcscat (in: _Dest=0x7cbc368, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\" [0191.471] wcscat (in: _Dest=0x7cbc368, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*" [0191.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6e8c0 [0191.471] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x7a6e8c0 | out: lpFindFileData=0x7a6e8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe496f420, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0200.389] wcscmp (_String1=".", _String2=".") returned 0 [0200.389] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a6e8c0 | out: lpFindFileData=0x7a6e8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe496f420, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.389] wcscmp (_String1="..", _String2=".") returned 1 [0200.389] wcscmp (_String1="..", _String2="..") returned 0 [0200.390] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a6e8c0 | out: lpFindFileData=0x7a6e8c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.390] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.390] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b80570 [0200.390] wcscpy (in: _Dest=0x7b80570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" [0200.390] wcscat (in: _Dest=0x7b80570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\" [0200.390] wcscat (in: _Dest=0x7b80570, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" [0201.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0 [0201.687] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a6e8c0 | out: lpFindFileData=0x7a6e8c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe496f420, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe496f420, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.687] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0201.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e8c0) returned 1 [0201.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc368) returned 1 [0201.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6f70) returned 1 Thread: id = 6465 os_tid = 0x1c84 [0191.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbc480 [0191.472] wcscpy (in: _Dest=0x7cbc480, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" [0191.472] wcscat (in: _Dest=0x7cbc480, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\" [0191.472] wcscat (in: _Dest=0x7cbc480, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*" [0191.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6e658 [0191.472] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x7a6e658 | out: lpFindFileData=0x7a6e658*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4995580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4995580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0200.388] wcscmp (_String1=".", _String2=".") returned 0 [0200.388] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a6e658 | out: lpFindFileData=0x7a6e658*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4995580, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4995580, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.389] wcscmp (_String1="..", _String2=".") returned 1 [0200.389] wcscmp (_String1="..", _String2="..") returned 0 [0200.389] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a6e658 | out: lpFindFileData=0x7a6e658*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4996520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.389] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.389] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b81918 [0200.389] wcscpy (in: _Dest=0x7b81918, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" [0200.389] wcscat (in: _Dest=0x7b81918, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\" [0200.389] wcscat (in: _Dest=0x7b81918, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" [0201.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4 [0201.685] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x7a6e658 | out: lpFindFileData=0x7a6e658*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4995580, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4996520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.685] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0201.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e658) returned 1 [0201.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc480) returned 1 [0201.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7088) returned 1 Thread: id = 6466 os_tid = 0x17f0 [0191.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbc598 [0191.476] wcscpy (in: _Dest=0x7cbc598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" [0191.476] wcscat (in: _Dest=0x7cbc598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\" [0191.476] wcscat (in: _Dest=0x7cbc598, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*" [0191.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a700d0 [0191.476] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x7a700d0 | out: lpFindFileData=0x7a700d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0200.387] wcscmp (_String1=".", _String2=".") returned 0 [0200.388] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a700d0 | out: lpFindFileData=0x7a700d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bb6e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe49bb6e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.388] wcscmp (_String1="..", _String2=".") returned 1 [0200.388] wcscmp (_String1="..", _String2="..") returned 0 [0200.388] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a700d0 | out: lpFindFileData=0x7a700d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bd620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.388] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.388] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b80a10 [0200.388] wcscpy (in: _Dest=0x7b80a10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" [0200.388] wcscat (in: _Dest=0x7b80a10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\" [0200.388] wcscat (in: _Dest=0x7b80a10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" [0201.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1700 [0201.682] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x7a700d0 | out: lpFindFileData=0x7a700d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe49bb6e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe49bd620, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.682] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0201.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a700d0) returned 1 [0201.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc598) returned 1 [0201.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb71a0) returned 1 Thread: id = 6467 os_tid = 0x1c88 [0191.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbc6b0 [0191.477] wcscpy (in: _Dest=0x7cbc6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" [0191.477] wcscat (in: _Dest=0x7cbc6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\" [0191.477] wcscat (in: _Dest=0x7cbc6b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*" [0191.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6d318 [0191.477] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x7a6d318 | out: lpFindFileData=0x7a6d318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a079a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a079a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0200.386] wcscmp (_String1=".", _String2=".") returned 0 [0200.387] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a6d318 | out: lpFindFileData=0x7a6d318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a079a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a079a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.387] wcscmp (_String1="..", _String2=".") returned 1 [0200.387] wcscmp (_String1="..", _String2="..") returned 0 [0200.387] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a6d318 | out: lpFindFileData=0x7a6d318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a7bd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.387] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.387] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b80c60 [0200.387] wcscpy (in: _Dest=0x7b80c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" [0200.387] wcscat (in: _Dest=0x7b80c60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\" [0200.387] wcscat (in: _Dest=0x7b80c60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" [0201.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x190c [0201.668] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a6d318 | out: lpFindFileData=0x7a6d318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a079a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a7bd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.668] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0201.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d318) returned 1 [0201.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc6b0) returned 1 [0201.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb72b8) returned 1 Thread: id = 6468 os_tid = 0x1c8c [0191.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbc7c8 [0191.478] wcscpy (in: _Dest=0x7cbc7c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" [0191.478] wcscat (in: _Dest=0x7cbc7c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\" [0191.478] wcscat (in: _Dest=0x7cbc7c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*" [0191.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6d580 [0191.478] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x7a6d580 | out: lpFindFileData=0x7a6d580*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a79dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a9ff20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a9ff20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0200.397] wcscmp (_String1=".", _String2=".") returned 0 [0200.397] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a6d580 | out: lpFindFileData=0x7a6d580*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4a79dc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4a9ff20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4a9ff20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.397] wcscmp (_String1="..", _String2=".") returned 1 [0200.397] wcscmp (_String1="..", _String2="..") returned 0 [0200.397] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a6d580 | out: lpFindFileData=0x7a6d580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a9ff20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4aa06f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.397] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.397] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x3040a68 [0200.397] wcscpy (in: _Dest=0x3040a68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" [0200.397] wcscat (in: _Dest=0x3040a68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\" [0200.397] wcscat (in: _Dest=0x3040a68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" [0201.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3040a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10 [0201.702] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x7a6d580 | out: lpFindFileData=0x7a6d580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4a9ff20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4aa06f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5420900, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.702] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0201.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d580) returned 1 [0201.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc7c8) returned 1 [0201.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb73d0) returned 1 Thread: id = 6469 os_tid = 0x17f4 [0191.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbc8e0 [0191.479] wcscpy (in: _Dest=0x7cbc8e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" [0191.479] wcscat (in: _Dest=0x7cbc8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\" [0191.479] wcscat (in: _Dest=0x7cbc8e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*" [0191.479] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6d7e8 [0191.479] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x7a6d7e8 | out: lpFindFileData=0x7a6d7e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac6080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b384a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b384a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0200.383] wcscmp (_String1=".", _String2=".") returned 0 [0200.383] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a6d7e8 | out: lpFindFileData=0x7a6d7e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4ac6080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b384a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b384a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.383] wcscmp (_String1="..", _String2=".") returned 1 [0200.383] wcscmp (_String1="..", _String2="..") returned 0 [0200.383] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a6d7e8 | out: lpFindFileData=0x7a6d7e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b384a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b3a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.383] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.384] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b82b38 [0200.384] wcscpy (in: _Dest=0x7b82b38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" [0200.384] wcscat (in: _Dest=0x7b82b38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\" [0200.384] wcscat (in: _Dest=0x7b82b38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" [0201.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0 [0201.662] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a6d7e8 | out: lpFindFileData=0x7a6d7e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b384a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b3a3e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.662] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0201.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d7e8) returned 1 [0201.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc8e0) returned 1 [0201.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb74e8) returned 1 Thread: id = 6470 os_tid = 0x17f8 [0191.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbc9f8 [0191.480] wcscpy (in: _Dest=0x7cbc9f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" [0191.480] wcscat (in: _Dest=0x7cbc9f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\" [0191.480] wcscat (in: _Dest=0x7cbc9f8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*" [0191.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6da50 [0191.480] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x7a6da50 | out: lpFindFileData=0x7a6da50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0200.384] wcscmp (_String1=".", _String2=".") returned 0 [0200.384] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a6da50 | out: lpFindFileData=0x7a6da50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.385] wcscmp (_String1="..", _String2=".") returned 1 [0200.385] wcscmp (_String1="..", _String2="..") returned 0 [0200.385] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a6da50 | out: lpFindFileData=0x7a6da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.385] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.385] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b827c0 [0200.385] wcscpy (in: _Dest=0x7b827c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" [0200.385] wcscat (in: _Dest=0x7b827c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\" [0200.385] wcscat (in: _Dest=0x7b827c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" [0201.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b827c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e4 [0201.664] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a6da50 | out: lpFindFileData=0x7a6da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.664] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0201.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6da50) returned 1 [0201.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc9f8) returned 1 [0201.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7600) returned 1 Thread: id = 6471 os_tid = 0x17fc [0191.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbcb10 [0191.481] wcscpy (in: _Dest=0x7cbcb10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" [0191.481] wcscat (in: _Dest=0x7cbcb10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\" [0191.481] wcscat (in: _Dest=0x7cbcb10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*" [0191.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6dcb8 [0191.481] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x7a6dcb8 | out: lpFindFileData=0x7a6dcb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df40 [0200.385] wcscmp (_String1=".", _String2=".") returned 0 [0200.386] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x7a6dcb8 | out: lpFindFileData=0x7a6dcb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5e600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4b5e600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.386] wcscmp (_String1="..", _String2=".") returned 1 [0200.386] wcscmp (_String1="..", _String2="..") returned 0 [0200.386] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x7a6dcb8 | out: lpFindFileData=0x7a6dcb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.386] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.386] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b80b38 [0200.386] wcscpy (in: _Dest=0x7b80b38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" [0200.386] wcscat (in: _Dest=0x7b80b38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\" [0200.386] wcscat (in: _Dest=0x7b80b38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" [0201.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1940 [0201.666] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x7a6dcb8 | out: lpFindFileData=0x7a6dcb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4b5e600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4b5edd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.666] FindClose (in: hFindFile=0x7a2df40 | out: hFindFile=0x7a2df40) returned 1 [0201.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6dcb8) returned 1 [0201.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb10) returned 1 [0201.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7718) returned 1 Thread: id = 6472 os_tid = 0x7ac [0191.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbcc28 [0191.482] wcscpy (in: _Dest=0x7cbcc28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" [0191.482] wcscat (in: _Dest=0x7cbcc28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\" [0191.482] wcscat (in: _Dest=0x7cbcc28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*" [0191.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6df20 [0191.482] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x7a6df20 | out: lpFindFileData=0x7a6df20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0200.393] wcscmp (_String1=".", _String2=".") returned 0 [0200.393] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a6df20 | out: lpFindFileData=0x7a6df20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.393] wcscmp (_String1="..", _String2=".") returned 1 [0200.393] wcscmp (_String1="..", _String2="..") returned 0 [0200.393] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a6df20 | out: lpFindFileData=0x7a6df20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.393] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.394] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b807c0 [0200.394] wcscpy (in: _Dest=0x7b807c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" [0200.394] wcscat (in: _Dest=0x7b807c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\" [0200.394] wcscat (in: _Dest=0x7b807c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" [0201.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b807c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8 [0201.695] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x7a6df20 | out: lpFindFileData=0x7a6df20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.695] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0201.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6df20) returned 1 [0201.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcc28) returned 1 [0201.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7830) returned 1 Thread: id = 6473 os_tid = 0xc14 [0191.482] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x106) returned 0x7cbcd40 [0191.483] wcscpy (in: _Dest=0x7cbcd40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" [0191.483] wcscat (in: _Dest=0x7cbcd40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\" [0191.483] wcscat (in: _Dest=0x7cbcd40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*" [0191.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6e188 [0191.483] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x7a6e188 | out: lpFindFileData=0x7a6e188*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0200.396] wcscmp (_String1=".", _String2=".") returned 0 [0200.396] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a6e188 | out: lpFindFileData=0x7a6e188*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c93f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4c93f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.396] wcscmp (_String1="..", _String2=".") returned 1 [0200.396] wcscmp (_String1="..", _String2="..") returned 0 [0200.396] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a6e188 | out: lpFindFileData=0x7a6e188*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.396] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.396] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11e) returned 0x7b808e8 [0200.396] wcscpy (in: _Dest=0x7b808e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" [0200.396] wcscat (in: _Dest=0x7b808e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\" [0200.397] wcscat (in: _Dest=0x7b808e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" [0201.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b808e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda0 [0201.699] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x7a6e188 | out: lpFindFileData=0x7a6e188*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4c93f20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4c94ec0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.699] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0201.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e188) returned 1 [0201.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcd40) returned 1 [0201.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7948) returned 1 Thread: id = 6474 os_tid = 0x1720 [0191.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbce58 [0191.483] wcscpy (in: _Dest=0x7cbce58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" [0191.483] wcscat (in: _Dest=0x7cbce58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\" [0191.483] wcscat (in: _Dest=0x7cbce58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*" [0191.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6e3f0 [0191.483] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x7a6e3f0 | out: lpFindFileData=0x7a6e3f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0195.834] wcscmp (_String1=".", _String2=".") returned 0 [0195.834] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a6e3f0 | out: lpFindFileData=0x7a6e3f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.834] wcscmp (_String1="..", _String2=".") returned 1 [0195.834] wcscmp (_String1="..", _String2="..") returned 0 [0195.834] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a6e3f0 | out: lpFindFileData=0x7a6e3f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.834] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.834] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8f28 [0195.835] wcscpy (in: _Dest=0x3dd8f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" [0195.835] wcscat (in: _Dest=0x3dd8f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\" [0195.835] wcscat (in: _Dest=0x3dd8f28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" [0199.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dd8f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bec [0199.698] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a6e3f0 | out: lpFindFileData=0x7a6e3f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5423010, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.698] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0199.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6e3f0) returned 1 [0199.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbce58) returned 1 [0199.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7a60) returned 1 Thread: id = 6475 os_tid = 0x15c4 [0191.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cbcf70 [0191.484] wcscpy (in: _Dest=0x7cbcf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" [0191.484] wcscat (in: _Dest=0x7cbcf70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\" [0191.484] wcscat (in: _Dest=0x7cbcf70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*" [0191.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a70a70 [0191.484] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x7a70a70 | out: lpFindFileData=0x7a70a70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0200.394] wcscmp (_String1=".", _String2=".") returned 0 [0200.394] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a70a70 | out: lpFindFileData=0x7a70a70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cba080, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4cba080, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.394] wcscmp (_String1="..", _String2=".") returned 1 [0200.394] wcscmp (_String1="..", _String2="..") returned 0 [0200.394] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a70a70 | out: lpFindFileData=0x7a70a70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5425720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.394] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.394] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7a5fdd0 [0200.395] wcscpy (in: _Dest=0x7a5fdd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" [0200.395] wcscat (in: _Dest=0x7a5fdd0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\" [0200.395] wcscat (in: _Dest=0x7a5fdd0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" [0201.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a5fdd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1844 [0201.697] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x7a70a70 | out: lpFindFileData=0x7a70a70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4cba080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4cbbfc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5425720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.697] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0201.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a70a70) returned 1 [0201.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcf70) returned 1 [0201.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7b78) returned 1 Thread: id = 6476 os_tid = 0x1724 [0191.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json")) returned 0x2020 [0194.539] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0202.210] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x140c [0202.210] GetFileSizeEx (in: hFile=0x140c, lpFileSize=0xd6afb5c | out: lpFileSize=0xd6afb5c*=209) returned 1 [0202.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0202.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0202.210] NtQuerySystemTime (in: CurrentTime=0xd6afad0 | out: CurrentTime=0xd6afad0*=132462177807864000) returned 0x0 [0202.210] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x64d3bdba [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x6cb8c768 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x71d6d8ef [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x2a079be0 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0xe2091bd [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x3f22e862 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x7d02e9b0 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x15a3f04c [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x19dc64af [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x4b9e5a83 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x6b294722 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x3c065dc5 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x583e504a [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0xa0d87c2 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x10dc69dd [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x61387753 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x16f394ad [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x76681d71 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x5cbeaaff [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x439a814c [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x2e80eb72 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x35cb9152 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x5bc5482b [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x2c2de8be [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x6128ef06 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x13357cee [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x56e1775c [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x4fb22164 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x5d605f3 [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x67d6b4cd [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0xd39093e [0202.211] RtlRandomEx (in: Seed=0xd6afac8 | out: Seed=0xd6afac8) returned 0x7202a374 [0202.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb53c0 [0202.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb8fc8 [0202.221] ReadFile (in: hFile=0x140c, lpBuffer=0x7bb53c0, nNumberOfBytesToRead=0xd1, lpNumberOfBytesRead=0xd6afac4, lpOverlapped=0x0 | out: lpBuffer=0x7bb53c0*, lpNumberOfBytesRead=0xd6afac4*=0xd1, lpOverlapped=0x0) returned 1 [0202.223] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.223] WriteFile (in: hFile=0x140c, lpBuffer=0x7bb8fc8*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0xd6afac8, lpOverlapped=0x0 | out: lpBuffer=0x7bb8fc8*, lpNumberOfBytesWritten=0xd6afac8*=0xd1, lpOverlapped=0x0) returned 1 [0206.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0206.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0206.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0206.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb8fc8) returned 1 [0206.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb53c0) returned 1 [0206.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c540) returned 1 [0206.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84320) returned 1 [0206.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ce0 [0206.050] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.050] WriteFile (in: hFile=0x140c, lpBuffer=0x7b7d158*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd6afb50, lpOverlapped=0x0 | out: lpBuffer=0x7b7d158*, lpNumberOfBytesWritten=0xd6afb50*=0x10c, lpOverlapped=0x0) returned 1 [0206.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0206.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0206.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec32e0 [0206.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0206.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0206.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28b8) returned 1 [0206.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.460] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="bc") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="ce") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="12") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="ee") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="64") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="d1") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="9b") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="2b") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="7f") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="03") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="cb") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="a3") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="af") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="07") returned 2 [0206.460] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="78") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="35") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="e8") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="12") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="8f") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="d5") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="55") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="af") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="03") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="d9") returned 2 [0206.461] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="a4") returned 2 [0206.461] RtlInitAnsiString (in: DestinationString=0xd6afad8, SourceString="bcce12ee64d19b2b7f03cba3af077835e8128fd555af4e03d9a4" | out: DestinationString="bcce12ee64d19b2b7f03cba3af077835e8128fd555af4e03d9a4") [0206.461] RtlAnsiStringToUnicodeString (in: DestinationString=0xd6afad0, SourceString="bcce12ee64d19b2b7f03cba3af077835e8128fd555af4e03d9a4", AllocateDestinationString=1 | out: DestinationString="bcce12ee64d19b2b7f03cba3af077835e8128fd555af4e03d9a4") returned 0x0 [0206.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd88 [0206.461] wcscat (in: _Dest=0x7a5e7e0, _Source="bcce12ee64d19" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\bcce12ee64d19") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\bcce12ee64d19" [0206.461] wcscat (in: _Dest=0x7a5e7e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\bcce12ee64d19.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\bcce12ee64d19.68814f" [0206.461] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\bcce12ee64d19.68814f", NtPathName=0xd6afac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\bcce12ee64d19.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd8f28 [0208.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8f28) returned 1 [0208.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e26b68) returned 1 [0208.850] NtQueryInformationFile (in: FileHandle=0x140c, IoStatusBlock=0xd6afaa0, FileInformation=0xd6afaa8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd6afaa0, FileInformation=0xd6afaa8) returned 0x0 [0208.850] NtSetInformationFile (FileHandle=0x140c, IoStatusBlock=0xd6afaa0, FileInformation=0xd6afaa8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e7e0) returned 1 [0209.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0209.181] FlushFileBuffers (hFile=0x140c) returned 1 [0209.195] CloseHandle (hObject=0x140c) returned 1 [0209.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02860 [0209.425] wcscpy (in: _Dest=0x3e02860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\" [0209.425] wcscat (in: _Dest=0x3e02860, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\68814F-Readme.txt" [0209.425] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\68814f-readme.txt")) returned 0xffffffff [0209.425] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.009] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd6afae4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd6afae4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.011] CloseHandle (hObject=0xbb8) returned 1 [0210.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02860) returned 1 [0210.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb1618) returned 1 Thread: id = 6477 os_tid = 0x1730 [0191.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif")) returned 0x20 [0192.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0192.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.055] GetLastError () returned 0x5 [0192.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif", dwFileAttributes=0x20) returned 0 [0192.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 Thread: id = 6478 os_tid = 0x1738 [0191.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif")) returned 0x20 [0192.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0192.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.056] GetLastError () returned 0x5 [0192.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif", dwFileAttributes=0x20) returned 0 [0192.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85150) returned 1 Thread: id = 6479 os_tid = 0x173c [0191.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif")) returned 0x20 [0192.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0192.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.058] GetLastError () returned 0x5 [0192.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif", dwFileAttributes=0x20) returned 0 [0192.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d853c0) returned 1 Thread: id = 6480 os_tid = 0x1740 [0191.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif")) returned 0x20 [0192.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0192.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.060] GetLastError () returned 0x5 [0192.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif", dwFileAttributes=0x20) returned 0 [0192.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 Thread: id = 6481 os_tid = 0xc10 [0191.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif")) returned 0x20 [0192.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0192.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.067] GetLastError () returned 0x5 [0192.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif", dwFileAttributes=0x20) returned 0 [0192.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687f8) returned 1 Thread: id = 6482 os_tid = 0x1744 [0191.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif")) returned 0x20 [0192.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0192.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.062] GetLastError () returned 0x5 [0192.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF", dwFileAttributes=0x20) returned 0 [0192.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 6483 os_tid = 0x1748 [0191.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js")) returned 0x20 [0192.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0192.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.063] GetLastError () returned 0x5 [0192.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS", dwFileAttributes=0x20) returned 0 [0192.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ad8) returned 1 Thread: id = 6484 os_tid = 0x174c [0191.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js")) returned 0x20 [0192.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0192.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.049] GetLastError () returned 0x5 [0192.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js", dwFileAttributes=0x20) returned 0 [0192.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 6485 os_tid = 0x1750 [0191.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js")) returned 0x20 [0192.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js", dwFileAttributes=0x20) returned 0 [0192.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.051] GetLastError () returned 0x5 [0192.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js", dwFileAttributes=0x20) returned 0 [0192.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d868e0) returned 1 Thread: id = 6486 os_tid = 0x1754 [0191.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js")) returned 0x20 [0191.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0191.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.674] GetLastError () returned 0x5 [0191.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS", dwFileAttributes=0x20) returned 0 [0191.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 6487 os_tid = 0x175c [0191.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg")) returned 0x20 [0192.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0192.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.146] GetLastError () returned 0x5 [0192.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg", dwFileAttributes=0x20) returned 0 [0192.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 6488 os_tid = 0x1764 [0191.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json")) returned 0x2020 [0194.538] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0202.196] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1248 [0202.196] GetFileSizeEx (in: hFile=0x1248, lpFileSize=0x1158fc04 | out: lpFileSize=0x1158fc04*=236) returned 1 [0202.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0202.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0202.197] NtQuerySystemTime (in: CurrentTime=0x1158fb78 | out: CurrentTime=0x1158fb78*=132462177807708000) returned 0x0 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x4049cc51 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x178ac2a3 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x4e051faa [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x3ff68a4 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x2f556896 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x755b1547 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x7acfa208 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x4d772f76 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x7de02f9e [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0xcc4fd8f [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0xb5bb543 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x60860e3e [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x192ceca6 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x1b5c078 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x69f5b646 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x5d4ea349 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x2051d3b5 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x7bc2fab1 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x4a1ef191 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x23af8817 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x2edda283 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x43afae76 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x7d02e9b0 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x170bf2b5 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x7306fcd2 [0202.197] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x397bfa77 [0202.198] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x2b1f314a [0202.198] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x5d5404a2 [0202.198] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x62b40263 [0202.198] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x5688f0ce [0202.198] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x5b01fa64 [0202.198] RtlRandomEx (in: Seed=0x1158fb70 | out: Seed=0x1158fb70) returned 0x61387753 [0202.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bbcbd0 [0202.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bc07d8 [0202.208] ReadFile (in: hFile=0x1248, lpBuffer=0x7bbcbd0, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0x1158fb6c, lpOverlapped=0x0 | out: lpBuffer=0x7bbcbd0*, lpNumberOfBytesRead=0x1158fb6c*=0xec, lpOverlapped=0x0) returned 1 [0202.209] SetFilePointerEx (in: hFile=0x1248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.209] WriteFile (in: hFile=0x1248, lpBuffer=0x7bc07d8*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x1158fb70, lpOverlapped=0x0 | out: lpBuffer=0x7bc07d8*, lpNumberOfBytesWritten=0x1158fb70*=0xec, lpOverlapped=0x0) returned 1 [0206.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cab8 [0206.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c748 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c748) returned 1 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc07d8) returned 1 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bbcbd0) returned 1 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c3d8) returned 1 [0206.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85298) returned 1 [0206.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37d40 [0206.047] SetFilePointerEx (in: hFile=0x1248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.047] WriteFile (in: hFile=0x1248, lpBuffer=0x7b7c550*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1158fbf8, lpOverlapped=0x0 | out: lpBuffer=0x7b7c550*, lpNumberOfBytesWritten=0x1158fbf8*=0x10c, lpOverlapped=0x0) returned 1 [0206.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0206.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0206.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec42f8 [0206.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e08 [0206.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0206.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0206.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.454] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="73") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="44") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="9a") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="59") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="da") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="d2") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="27") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="bb") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="2f") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="67") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="63") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="50") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="74") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="56") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="2e") returned 2 [0206.454] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="9f") returned 2 [0206.455] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="2b") returned 2 [0206.455] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="27") returned 2 [0206.455] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="6c") returned 2 [0206.455] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="a5") returned 2 [0206.455] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="67") returned 2 [0206.455] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="3f") returned 2 [0206.455] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="a0") returned 2 [0206.455] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="e4") returned 2 [0206.455] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="ab") returned 2 [0206.455] RtlInitAnsiString (in: DestinationString=0x1158fb80, SourceString="73449a59dad227bb4e2f67635074562e9f2b276ca5673fa0e4ab" | out: DestinationString="73449a59dad227bb4e2f67635074562e9f2b276ca5673fa0e4ab") [0206.455] RtlAnsiStringToUnicodeString (in: DestinationString=0x1158fb78, SourceString="73449a59dad227bb4e2f67635074562e9f2b276ca5673fa0e4ab", AllocateDestinationString=1 | out: DestinationString="73449a59dad227bb4e2f67635074562e9f2b276ca5673fa0e4ab") returned 0x0 [0206.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3de00 [0206.456] wcscat (in: _Dest=0x7caaa88, _Source="73449a59dad22" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\73449a59dad22") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\73449a59dad22" [0206.456] wcscat (in: _Dest=0x7caaa88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\73449a59dad22.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\73449a59dad22.68814f" [0206.456] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\73449a59dad22.68814f", NtPathName=0x1158fb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\73449a59dad22.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x7dd9070 [0208.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9070) returned 1 [0208.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27ed0) returned 1 [0208.849] NtQueryInformationFile (in: FileHandle=0x1248, IoStatusBlock=0x1158fb48, FileInformation=0x1158fb50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1158fb48, FileInformation=0x1158fb50) returned 0x0 [0208.849] NtSetInformationFile (FileHandle=0x1248, IoStatusBlock=0x1158fb48, FileInformation=0x1158fb50, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaa88) returned 1 [0209.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0209.178] FlushFileBuffers (hFile=0x1248) returned 1 [0209.675] CloseHandle (hObject=0x1248) returned 1 [0209.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3041720 [0209.676] wcscpy (in: _Dest=0x3041720, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\" [0209.676] wcscat (in: _Dest=0x3041720, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\68814F-Readme.txt" [0209.676] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\68814f-readme.txt")) returned 0xffffffff [0209.677] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\da\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1248 [0209.677] WriteFile (in: hFile=0x1248, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1158fb8c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x1158fb8c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.680] CloseHandle (hObject=0x1248) returned 1 [0209.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3041720) returned 1 [0209.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81b68) returned 1 Thread: id = 6489 os_tid = 0x1768 [0191.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json")) returned 0x2020 [0194.537] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0202.181] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x944 [0202.181] GetFileSizeEx (in: hFile=0x944, lpFileSize=0x116bf874 | out: lpFileSize=0x116bf874*=292) returned 1 [0202.181] SetFilePointerEx (in: hFile=0x944, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.182] ReadFile (in: hFile=0x944, lpBuffer=0x116bf850, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x116bf860, lpOverlapped=0x0 | out: lpBuffer=0x116bf850*, lpNumberOfBytesRead=0x116bf860*=0x4, lpOverlapped=0x0) returned 1 [0202.183] SetFilePointerEx (in: hFile=0x944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0202.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0202.184] NtQuerySystemTime (in: CurrentTime=0x116bf7e8 | out: CurrentTime=0x116bf7e8*=132462177807552000) returned 0x0 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x7548635d [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x56f5ffda [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x7bf13af5 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x5b926f16 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x583e504a [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x1be2cdc7 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x65e51c85 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x74917ec8 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x58539d3b [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0xbb68425 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x5ce983bf [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x6886d5c4 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x3d0bee14 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x22ecaece [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x123293c6 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x334de727 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x7c9bc817 [0202.184] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x5dc0ede2 [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x5ce983bf [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x26e80484 [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x5d6a0dff [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x2334b569 [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x1afab5a0 [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x64c2da34 [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x3ba32669 [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x2684f7ed [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x56e1775c [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x4e2ac0dc [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x5081b23e [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x4b0c741e [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x6f107b92 [0202.185] RtlRandomEx (in: Seed=0x116bf7e0 | out: Seed=0x116bf7e0) returned 0x4c4a5f40 [0202.195] ReadFile (in: hFile=0x944, lpBuffer=0x7ba9fa8, nNumberOfBytesToRead=0x124, lpNumberOfBytesRead=0x116bf7dc, lpOverlapped=0x0 | out: lpBuffer=0x7ba9fa8*, lpNumberOfBytesRead=0x116bf7dc*=0x124, lpOverlapped=0x0) returned 1 [0202.195] SetFilePointerEx (in: hFile=0x944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.195] WriteFile (in: hFile=0x944, lpBuffer=0x7bc43e0*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x116bf7e0, lpOverlapped=0x0 | out: lpBuffer=0x7bc43e0*, lpNumberOfBytesWritten=0x116bf7e0*=0x124, lpOverlapped=0x0) returned 1 [0206.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0206.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0206.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0206.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc43e0) returned 1 [0206.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba9fa8) returned 1 [0206.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0206.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84440) returned 1 [0206.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37fe0 [0206.045] SetFilePointerEx (in: hFile=0x944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.045] WriteFile (in: hFile=0x944, lpBuffer=0x7b7de78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x116bf868, lpOverlapped=0x0 | out: lpBuffer=0x7b7de78*, lpNumberOfBytesWritten=0x116bf868*=0x10c, lpOverlapped=0x0) returned 1 [0206.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0206.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0206.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3fd8 [0206.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0206.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0206.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0206.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.443] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="7d") returned 2 [0206.443] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="90") returned 2 [0206.443] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="c8") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="cf") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="8c") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="e6") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="81") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="e1") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="c7") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="99") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="4f") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="85") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="1b") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="9d") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="d1") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="0c") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="1e") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="9c") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="23") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="5e") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="29") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="9e") returned 2 [0206.444] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="7b") returned 2 [0206.445] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="55") returned 2 [0206.445] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="d8") returned 2 [0206.445] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="76") returned 2 [0206.445] RtlInitAnsiString (in: DestinationString=0x116bf7f0, SourceString="7d90c8cf8ce681e1c7994f851b9dd10c1e9c235e299e7b55d876" | out: DestinationString="7d90c8cf8ce681e1c7994f851b9dd10c1e9c235e299e7b55d876") [0206.445] RtlAnsiStringToUnicodeString (in: DestinationString=0x116bf7e8, SourceString="7d90c8cf8ce681e1c7994f851b9dd10c1e9c235e299e7b55d876", AllocateDestinationString=1 | out: DestinationString="7d90c8cf8ce681e1c7994f851b9dd10c1e9c235e299e7b55d876") returned 0x0 [0206.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd10 [0206.445] wcscat (in: _Dest=0x7caa960, _Source="7d90c8cf8ce68" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\7d90c8cf8ce68") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\7d90c8cf8ce68" [0206.445] wcscat (in: _Dest=0x7caa960, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\7d90c8cf8ce68.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\7d90c8cf8ce68.68814f" [0206.445] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\7d90c8cf8ce68.68814f", NtPathName=0x116bf7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\7d90c8cf8ce68.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x7dd9bf8 [0208.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9bf8) returned 1 [0208.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e27ca8) returned 1 [0208.847] NtQueryInformationFile (in: FileHandle=0x944, IoStatusBlock=0x116bf7b8, FileInformation=0x116bf7c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x116bf7b8, FileInformation=0x116bf7c0) returned 0x0 [0208.847] NtSetInformationFile (FileHandle=0x944, IoStatusBlock=0x116bf7b8, FileInformation=0x116bf7c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa960) returned 1 [0209.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0209.174] FlushFileBuffers (hFile=0x944) returned 1 [0209.451] CloseHandle (hObject=0x944) returned 1 [0209.516] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3e03518 [0209.517] wcscpy (in: _Dest=0x3e03518, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\" [0209.517] wcscat (in: _Dest=0x3e03518, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\68814F-Readme.txt" [0209.517] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\68814f-readme.txt")) returned 0xffffffff [0209.517] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\bg\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.139] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x116bf7fc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x116bf7fc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.146] CloseHandle (hObject=0xbb8) returned 1 [0210.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03518) returned 1 [0210.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81db8) returned 1 Thread: id = 6490 os_tid = 0x176c [0191.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json")) returned 0x2020 [0195.218] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0198.606] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1758 [0198.607] GetFileSizeEx (in: hFile=0x1758, lpFileSize=0x1170fa7c | out: lpFileSize=0x1170fa7c*=286) returned 1 [0198.607] SetFilePointerEx (in: hFile=0x1758, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.608] ReadFile (in: hFile=0x1758, lpBuffer=0x1170fa58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1170fa68, lpOverlapped=0x0 | out: lpBuffer=0x1170fa58*, lpNumberOfBytesRead=0x1170fa68*=0x4, lpOverlapped=0x0) returned 1 [0198.610] SetFilePointerEx (in: hFile=0x1758, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0198.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0198.610] NtQuerySystemTime (in: CurrentTime=0x1170f9f0 | out: CurrentTime=0x1170f9f0*=132462177771828000) returned 0x0 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x70ba8359 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x1472f99 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x6424efab [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x5c3c2ce [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x6ccce22e [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x3adebe68 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x1e1841a3 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x6a15e8b8 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x2c97d511 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x1ec59608 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x3bdf1c0 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x1ada7279 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x143c747 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x7102286 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x2ede7f39 [0198.611] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x66f84e10 [0198.612] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x37fe4008 [0198.612] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x263e655d [0198.612] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x420b379f [0198.612] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x40ee08c7 [0198.612] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x2d43207c [0198.612] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x63f45e28 [0198.612] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x598c2a20 [0198.612] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x2d6f9dd6 [0198.612] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x35c88d5b [0198.612] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0xae16265 [0198.613] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x4e3d7193 [0198.613] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x68280138 [0198.613] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x6a3d8d21 [0198.613] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x22f37a85 [0198.613] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x4bc290c2 [0198.613] RtlRandomEx (in: Seed=0x1170f9e8 | out: Seed=0x1170f9e8) returned 0x271be7 [0198.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eaa498 [0198.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eae0a0 [0198.629] ReadFile (in: hFile=0x1758, lpBuffer=0x10eaa498, nNumberOfBytesToRead=0x11e, lpNumberOfBytesRead=0x1170f9e4, lpOverlapped=0x0 | out: lpBuffer=0x10eaa498*, lpNumberOfBytesRead=0x1170f9e4*=0x11e, lpOverlapped=0x0) returned 1 [0198.629] SetFilePointerEx (in: hFile=0x1758, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.629] WriteFile (in: hFile=0x1758, lpBuffer=0x10eae0a0*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x1170f9e8, lpOverlapped=0x0 | out: lpBuffer=0x10eae0a0*, lpNumberOfBytesWritten=0x1170f9e8*=0x11e, lpOverlapped=0x0) returned 1 [0200.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa80 [0200.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0f8 [0200.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0f8) returned 1 [0200.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eae0a0) returned 1 [0200.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eaa498) returned 1 [0200.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf18) returned 1 [0200.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84d40) returned 1 [0200.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3f60 [0200.104] SetFilePointerEx (in: hFile=0x1758, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.104] WriteFile (in: hFile=0x1758, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1170fa70, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x1170fa70*=0x10c, lpOverlapped=0x0) returned 1 [0200.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0200.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2ca68 [0200.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0200.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d78) returned 1 [0200.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53d78 [0200.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f80 [0200.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0200.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0200.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ca68) returned 1 [0200.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0200.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.986] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.986] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="da") returned 2 [0200.986] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="48") returned 2 [0200.986] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.986] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="f0") returned 2 [0200.986] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="ca") returned 2 [0200.986] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="5d") returned 2 [0200.986] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="ef") returned 2 [0200.986] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.986] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.986] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="26") returned 2 [0200.986] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="03") returned 2 [0200.986] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="1d") returned 2 [0200.986] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="67") returned 2 [0200.986] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="5d") returned 2 [0200.986] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="20") returned 2 [0200.986] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="86") returned 2 [0200.986] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="60") returned 2 [0200.986] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="0b") returned 2 [0200.986] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="a3") returned 2 [0200.986] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="fc") returned 2 [0200.986] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="b5") returned 2 [0200.986] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="b5") returned 2 [0200.987] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="24") returned 2 [0200.987] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="23") returned 2 [0200.987] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="ea") returned 2 [0200.987] RtlInitAnsiString (in: DestinationString=0x1170f9f8, SourceString="f4da481ff0ca5defa6ac26031d675d2086600ba3fcb5b52423ea" | out: DestinationString="f4da481ff0ca5defa6ac26031d675d2086600ba3fcb5b52423ea") [0200.987] RtlAnsiStringToUnicodeString (in: DestinationString=0x1170f9f0, SourceString="f4da481ff0ca5defa6ac26031d675d2086600ba3fcb5b52423ea", AllocateDestinationString=1 | out: DestinationString="f4da481ff0ca5defa6ac26031d675d2086600ba3fcb5b52423ea") returned 0x0 [0200.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c900 [0200.987] wcscat (in: _Dest=0x3d54f00, _Source="f4da481ff0ca5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\f4da481ff0ca5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\f4da481ff0ca5" [0200.987] wcscat (in: _Dest=0x3d54f00, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\f4da481ff0ca5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\f4da481ff0ca5.68814f" [0200.987] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\f4da481ff0ca5.68814f", NtPathName=0x1170f9e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\f4da481ff0ca5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea2ff8 [0201.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2ff8) returned 1 [0201.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e942f8) returned 1 [0201.247] NtQueryInformationFile (in: FileHandle=0x1758, IoStatusBlock=0x1170f9c0, FileInformation=0x1170f9c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1170f9c0, FileInformation=0x1170f9c8) returned 0x0 [0201.247] NtSetInformationFile (FileHandle=0x1758, IoStatusBlock=0x1170f9c0, FileInformation=0x1170f9c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0205.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54f00) returned 1 [0205.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c900) returned 1 [0205.613] FlushFileBuffers (hFile=0x1758) returned 1 [0205.637] CloseHandle (hObject=0x1758) returned 1 [0206.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7caaf28 [0206.566] wcscpy (in: _Dest=0x7caaf28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\" [0206.566] wcscat (in: _Dest=0x7caaf28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\68814F-Readme.txt" [0206.566] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\68814f-readme.txt")) returned 0xffffffff [0206.566] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ru\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1810 [0210.368] WriteFile (in: hFile=0x1810, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1170fa04, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x1170fa04*=0x8b9, lpOverlapped=0x0) returned 1 [0210.370] CloseHandle (hObject=0x1810) returned 1 [0210.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf28) returned 1 [0210.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81ee0) returned 1 Thread: id = 6491 os_tid = 0x1770 [0191.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json")) returned 0x2020 [0194.535] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0202.167] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1810 [0202.168] GetFileSizeEx (in: hFile=0x1810, lpFileSize=0x88bf7ac | out: lpFileSize=0x88bf7ac*=265) returned 1 [0202.168] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.168] ReadFile (in: hFile=0x1810, lpBuffer=0x88bf788, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x88bf798, lpOverlapped=0x0 | out: lpBuffer=0x88bf788*, lpNumberOfBytesRead=0x88bf798*=0x4, lpOverlapped=0x0) returned 1 [0202.170] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0202.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0202.170] NtQuerySystemTime (in: CurrentTime=0x88bf720 | out: CurrentTime=0x88bf720*=132462177807552000) returned 0x0 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x60116ce4 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x3f1661a8 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x106d21eb [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x4aa69114 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x5d3f353f [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x338dec2f [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0xfe7041 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x148068ed [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0xaf816c9 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x7284d023 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x391eb0eb [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x4e874c59 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x37e0bee3 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x5081b23e [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x129d9a0 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x7bd6eee4 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x75f81d51 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0xbddda4e [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x380aa43b [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x43406a18 [0202.170] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x5cdb8653 [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0xf57d4c0 [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0xfb4302b [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x79189bb7 [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x42061642 [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x7e99f2d6 [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0xf407396 [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x45b0431c [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x160dd57f [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x4b0c741e [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x2edda283 [0202.171] RtlRandomEx (in: Seed=0x88bf718 | out: Seed=0x88bf718) returned 0x7a791a68 [0202.180] ReadFile (in: hFile=0x1810, lpBuffer=0x7badbb0, nNumberOfBytesToRead=0x109, lpNumberOfBytesRead=0x88bf714, lpOverlapped=0x0 | out: lpBuffer=0x7badbb0*, lpNumberOfBytesRead=0x88bf714*=0x109, lpOverlapped=0x0) returned 1 [0202.180] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.180] WriteFile (in: hFile=0x1810, lpBuffer=0x7bb17b8*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x88bf718, lpOverlapped=0x0 | out: lpBuffer=0x7bb17b8*, lpNumberOfBytesWritten=0x88bf718*=0x109, lpOverlapped=0x0) returned 1 [0206.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0206.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be10 [0206.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0206.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb17b8) returned 1 [0206.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7badbb0) returned 1 [0206.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0206.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b843f8) returned 1 [0206.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a383a0 [0206.041] SetFilePointerEx (in: hFile=0x1810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.041] WriteFile (in: hFile=0x1810, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x88bf7a0, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0x88bf7a0*=0x10c, lpOverlapped=0x0) returned 1 [0206.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0206.436] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0206.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2a70 [0206.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0206.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0206.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37e0) returned 1 [0206.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.437] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="dd") returned 2 [0206.437] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="14") returned 2 [0206.437] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="ce") returned 2 [0206.437] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="d1") returned 2 [0206.437] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="91") returned 2 [0206.437] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="45") returned 2 [0206.437] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="4a") returned 2 [0206.437] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="b8") returned 2 [0206.437] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="ea") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="94") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="5b") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="69") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="4c") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="c9") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="8e") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="11") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="48") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="ad") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="8f") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="58") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="84") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="83") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="d7") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="f2") returned 2 [0206.438] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="ae") returned 2 [0206.438] RtlInitAnsiString (in: DestinationString=0x88bf728, SourceString="dd14ced191454ab8ea945b694cc98e4e1148ad8f588483d7f2ae" | out: DestinationString="dd14ced191454ab8ea945b694cc98e4e1148ad8f588483d7f2ae") [0206.438] RtlAnsiStringToUnicodeString (in: DestinationString=0x88bf720, SourceString="dd14ced191454ab8ea945b694cc98e4e1148ad8f588483d7f2ae", AllocateDestinationString=1 | out: DestinationString="dd14ced191454ab8ea945b694cc98e4e1148ad8f588483d7f2ae") returned 0x0 [0206.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e0d0 [0206.439] wcscat (in: _Dest=0x7caa838, _Source="dd14ced191454" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\dd14ced191454") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\dd14ced191454" [0206.439] wcscat (in: _Dest=0x7caa838, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\dd14ced191454.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\dd14ced191454.68814f" [0206.439] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\dd14ced191454.68814f", NtPathName=0x88bf718, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\dd14ced191454.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x7dd9d40 [0208.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9d40) returned 1 [0208.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e260a0) returned 1 [0208.846] NtQueryInformationFile (in: FileHandle=0x1810, IoStatusBlock=0x88bf6f0, FileInformation=0x88bf6f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x88bf6f0, FileInformation=0x88bf6f8) returned 0x0 [0208.846] NtSetInformationFile (FileHandle=0x1810, IoStatusBlock=0x88bf6f0, FileInformation=0x88bf6f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa838) returned 1 [0209.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0209.170] FlushFileBuffers (hFile=0x1810) returned 1 [0210.352] CloseHandle (hObject=0x1810) returned 1 [0210.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3ec7970 [0210.353] wcscpy (in: _Dest=0x3ec7970, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\" [0210.353] wcscat (in: _Dest=0x3ec7970, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\68814F-Readme.txt" [0210.353] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\68814f-readme.txt")) returned 0xffffffff [0210.353] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ro\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1810 [0210.354] WriteFile (in: hFile=0x1810, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x88bf734, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x88bf734*=0x8b9, lpOverlapped=0x0) returned 1 [0210.361] CloseHandle (hObject=0x1810) returned 1 [0210.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7970) returned 1 [0210.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82008) returned 1 Thread: id = 6492 os_tid = 0x1778 [0191.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0194.534] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0202.154] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x183c [0202.155] GetFileSizeEx (in: hFile=0x183c, lpFileSize=0x10c2f77c | out: lpFileSize=0x10c2f77c*=223) returned 1 [0202.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0202.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0202.155] NtQuerySystemTime (in: CurrentTime=0x10c2f6f0 | out: CurrentTime=0x10c2f6f0*=132462177807396000) returned 0x0 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x7ab2a30e [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x1d81f107 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x50d1828e [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0xe98a33b [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x5e76fd54 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x688488c8 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x4d924dfa [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x35dc5bf0 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x78f7727e [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x40488a0 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x26ae61a5 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x6b0eb283 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x6a5f113b [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x2d2ab528 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x4914049 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x2ae46044 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x3ec657ae [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x62df8b96 [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x6d6f670c [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x4a1662ea [0202.155] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x52492b1a [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x6e9891d9 [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x1786ad4c [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0xb10b8c2 [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x66ba096d [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x41d8ea9b [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x38d3021e [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x4893b3a6 [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x3ad75c14 [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x6818624b [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x5d145c7f [0202.156] RtlRandomEx (in: Seed=0x10c2f6e8 | out: Seed=0x10c2f6e8) returned 0x2c969f02 [0202.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7da6bd0 [0202.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7daa7d8 [0202.165] ReadFile (in: hFile=0x183c, lpBuffer=0x7da6bd0, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0x10c2f6e4, lpOverlapped=0x0 | out: lpBuffer=0x7da6bd0*, lpNumberOfBytesRead=0x10c2f6e4*=0xdf, lpOverlapped=0x0) returned 1 [0202.167] SetFilePointerEx (in: hFile=0x183c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.167] WriteFile (in: hFile=0x183c, lpBuffer=0x7daa7d8*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x10c2f6e8, lpOverlapped=0x0 | out: lpBuffer=0x7daa7d8*, lpNumberOfBytesWritten=0x10c2f6e8*=0xdf, lpOverlapped=0x0) returned 1 [0206.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0206.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb08 [0206.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb08) returned 1 [0206.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7daa7d8) returned 1 [0206.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7da6bd0) returned 1 [0206.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0206.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24470) returned 1 [0206.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e60 [0206.038] SetFilePointerEx (in: hFile=0x183c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.039] WriteFile (in: hFile=0x183c, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10c2f770, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x10c2f770*=0x10c, lpOverlapped=0x0) returned 1 [0206.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0206.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3808) returned 1 [0206.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3808 [0206.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec48e8 [0206.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0206.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34c0) returned 1 [0206.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.432] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="d7") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="7f") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="33") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="ee") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="e9") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="8a") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="5c") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="2b") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="41") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="e4") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="fa") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="f4") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="17") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="17") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="15") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="9c") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="bb") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="e6") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="39") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="7f") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="e2") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="d7") returned 2 [0206.432] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="be") returned 2 [0206.433] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="8a") returned 2 [0206.433] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="2e") returned 2 [0206.433] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="08") returned 2 [0206.433] RtlInitAnsiString (in: DestinationString=0x10c2f6f8, SourceString="d77f33eee98a5c2b41e4faf41717159cbbe6397fe2d7be8a2e08" | out: DestinationString="d77f33eee98a5c2b41e4faf41717159cbbe6397fe2d7be8a2e08") [0206.433] RtlAnsiStringToUnicodeString (in: DestinationString=0x10c2f6f0, SourceString="d77f33eee98a5c2b41e4faf41717159cbbe6397fe2d7be8a2e08", AllocateDestinationString=1 | out: DestinationString="d77f33eee98a5c2b41e4faf41717159cbbe6397fe2d7be8a2e08") returned 0x0 [0206.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e058 [0206.433] wcscat (in: _Dest=0x7a5e6a8, _Source="d77f33eee98a5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\d77f33eee98a5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\d77f33eee98a5" [0206.433] wcscat (in: _Dest=0x7a5e6a8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\d77f33eee98a5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\d77f33eee98a5.68814f" [0206.433] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\d77f33eee98a5.68814f", NtPathName=0x10c2f6e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\d77f33eee98a5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd9e88 [0208.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9e88) returned 1 [0208.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25e78) returned 1 [0208.844] NtQueryInformationFile (in: FileHandle=0x183c, IoStatusBlock=0x10c2f6c0, FileInformation=0x10c2f6c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10c2f6c0, FileInformation=0x10c2f6c8) returned 0x0 [0208.845] NtSetInformationFile (FileHandle=0x183c, IoStatusBlock=0x10c2f6c0, FileInformation=0x10c2f6c8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e6a8) returned 1 [0209.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0209.164] FlushFileBuffers (hFile=0x183c) returned 1 [0209.178] CloseHandle (hObject=0x183c) returned 1 [0209.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7cd59b8 [0209.420] wcscpy (in: _Dest=0x7cd59b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\" [0209.420] wcscat (in: _Dest=0x7cd59b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\68814F-Readme.txt" [0209.421] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\68814f-readme.txt")) returned 0xffffffff [0209.421] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_PT\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\pt_pt\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x177c [0211.246] WriteFile (in: hFile=0x177c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x10c2f704, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x10c2f704*=0x8b9, lpOverlapped=0x0) returned 1 [0215.862] CloseHandle (hObject=0x177c) returned 1 [0222.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd59b8) returned 1 [0222.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82130) returned 1 Thread: id = 6493 os_tid = 0x177c [0191.493] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json")) returned 0x2020 [0194.534] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0202.572] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19a4 [0202.573] GetFileSizeEx (in: hFile=0x19a4, lpFileSize=0x115dff34 | out: lpFileSize=0x115dff34*=253) returned 1 [0202.573] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.573] ReadFile (in: hFile=0x19a4, lpBuffer=0x115dff10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x115dff20, lpOverlapped=0x0 | out: lpBuffer=0x115dff10*, lpNumberOfBytesRead=0x115dff20*=0x4, lpOverlapped=0x0) returned 1 [0202.575] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.575] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0202.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0202.576] NtQuerySystemTime (in: CurrentTime=0x115dfea8 | out: CurrentTime=0x115dfea8*=132462177811608000) returned 0x0 [0202.576] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0xc73b85d [0202.576] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x5eefe87e [0202.576] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x4b86f3fa [0202.576] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x5965df53 [0202.576] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x711e24c [0202.576] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x1b4ba5b3 [0202.576] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x25ce895e [0202.576] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x36d64be1 [0202.576] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x1fceb975 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x159e5498 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x3910e638 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x7c2af9a7 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0xe6f63e5 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x577a5722 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x6664fb87 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x68b71528 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x550b1463 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x34b63da0 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x70946369 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x1088d73 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x165e6ea5 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x6d44c6d7 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x5321a6da [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x777974e2 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x2a1bd1ca [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0xa908afa [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x625edfd1 [0202.577] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x3fa2ca25 [0202.578] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x162e1d0 [0202.578] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x559d0327 [0202.578] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x500dd266 [0202.578] RtlRandomEx (in: Seed=0x115dfea0 | out: Seed=0x115dfea0) returned 0x44fa71f4 [0202.588] ReadFile (in: hFile=0x19a4, lpBuffer=0x10dae0a0, nNumberOfBytesToRead=0xfd, lpNumberOfBytesRead=0x115dfe9c, lpOverlapped=0x0 | out: lpBuffer=0x10dae0a0*, lpNumberOfBytesRead=0x115dfe9c*=0xfd, lpOverlapped=0x0) returned 1 [0202.589] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.589] WriteFile (in: hFile=0x19a4, lpBuffer=0x10d93c68*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x115dfea0, lpOverlapped=0x0 | out: lpBuffer=0x10d93c68*, lpNumberOfBytesWritten=0x115dfea0*=0xfd, lpOverlapped=0x0) returned 1 [0206.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0206.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0206.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc08) returned 1 [0206.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d93c68) returned 1 [0206.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dae0a0) returned 1 [0206.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c630) returned 1 [0206.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84950) returned 1 [0206.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3390 [0206.125] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.125] WriteFile (in: hFile=0x19a4, lpBuffer=0x7b7db30*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x115dff28, lpOverlapped=0x0 | out: lpBuffer=0x7b7db30*, lpNumberOfBytesWritten=0x115dff28*=0x10c, lpOverlapped=0x0) returned 1 [0206.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0206.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0206.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3f38 [0206.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ec0 [0206.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0206.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0206.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.552] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="0d") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="c4") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="32") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="43") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="13") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="b3") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="e9") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="9d") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="bd") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="8b") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="b5") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="0c") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="25") returned 2 [0206.552] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="9d") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="80") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="e2") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="9c") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="c7") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="2b") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="70") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="43") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="70") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="f3") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="77") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="8d") returned 2 [0206.553] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="96") returned 2 [0206.553] RtlInitAnsiString (in: DestinationString=0x115dfeb0, SourceString="0dc4324313b3e99dbd8bb50c259d80e29cc72b704370f3778d96" | out: DestinationString="0dc4324313b3e99dbd8bb50c259d80e29cc72b704370f3778d96") [0206.553] RtlAnsiStringToUnicodeString (in: DestinationString=0x115dfea8, SourceString="0dc4324313b3e99dbd8bb50c259d80e29cc72b704370f3778d96", AllocateDestinationString=1 | out: DestinationString="0dc4324313b3e99dbd8bb50c259d80e29cc72b704370f3778d96") returned 0x0 [0206.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cb58 [0206.554] wcscat (in: _Dest=0x3db8148, _Source="0dc4324313b3e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\0dc4324313b3e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\0dc4324313b3e" [0206.554] wcscat (in: _Dest=0x3db8148, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\0dc4324313b3e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\0dc4324313b3e.68814f" [0206.554] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\0dc4324313b3e.68814f", NtPathName=0x115dfea0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\0dc4324313b3e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.554] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddd300 [0208.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd300) returned 1 [0208.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceb4f8) returned 1 [0208.891] NtQueryInformationFile (in: FileHandle=0x19a4, IoStatusBlock=0x115dfe78, FileInformation=0x115dfe80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x115dfe78, FileInformation=0x115dfe80) returned 0x0 [0208.891] NtSetInformationFile (FileHandle=0x19a4, IoStatusBlock=0x115dfe78, FileInformation=0x115dfe80, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db8148) returned 1 [0209.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cb58) returned 1 [0209.259] FlushFileBuffers (hFile=0x19a4) returned 1 [0209.279] CloseHandle (hObject=0x19a4) returned 1 [0209.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddf108 [0209.465] wcscpy (in: _Dest=0x7ddf108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\" [0209.465] wcscat (in: _Dest=0x7ddf108, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\68814F-Readme.txt" [0209.466] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\68814f-readme.txt")) returned 0xffffffff [0209.466] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.075] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x115dfebc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x115dfebc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.077] CloseHandle (hObject=0xbb8) returned 1 [0210.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf108) returned 1 [0210.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7158) returned 1 Thread: id = 6494 os_tid = 0x1780 [0191.493] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json")) returned 0x2020 [0194.533] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0202.140] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1540 [0202.141] GetFileSizeEx (in: hFile=0x1540, lpFileSize=0x1161f7ec | out: lpFileSize=0x1161f7ec*=264) returned 1 [0202.141] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.141] ReadFile (in: hFile=0x1540, lpBuffer=0x1161f7c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1161f7d8, lpOverlapped=0x0 | out: lpBuffer=0x1161f7c8*, lpNumberOfBytesRead=0x1161f7d8*=0x4, lpOverlapped=0x0) returned 1 [0202.143] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0202.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0202.143] NtQuerySystemTime (in: CurrentTime=0x1161f760 | out: CurrentTime=0x1161f760*=132462177807240000) returned 0x0 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x38a94a8c [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x8030ac2 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x199b47c2 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x9a52fe0 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x67f0ce33 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x69c2ecb [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0xef89f17 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x44d50f54 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x7da86e20 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x47644186 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x64b1f808 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x84570ca [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x3314f41c [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x5af2d8ae [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x6c10bbbd [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x7ac7f7c2 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x678ff561 [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x713def1a [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x5ba22fce [0202.143] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x74b39931 [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x5ae2f248 [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x5f7088b6 [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x4ae333aa [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x368188dc [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x7b2ff2a9 [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x10362d39 [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x1c23f4e1 [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x64a2921a [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x5d68d199 [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x70788494 [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x3945be72 [0202.144] RtlRandomEx (in: Seed=0x1161f758 | out: Seed=0x1161f758) returned 0x78908de0 [0202.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7db5bf0 [0202.153] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7db97f8 [0202.153] ReadFile (in: hFile=0x1540, lpBuffer=0x7db5bf0, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x1161f754, lpOverlapped=0x0 | out: lpBuffer=0x7db5bf0*, lpNumberOfBytesRead=0x1161f754*=0x108, lpOverlapped=0x0) returned 1 [0202.154] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.154] WriteFile (in: hFile=0x1540, lpBuffer=0x7db97f8*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1161f758, lpOverlapped=0x0 | out: lpBuffer=0x7db97f8*, lpNumberOfBytesWritten=0x1161f758*=0x108, lpOverlapped=0x0) returned 1 [0208.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0208.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0208.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4410) returned 1 [0208.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db97f8) returned 1 [0208.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db5bf0) returned 1 [0208.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0208.510] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24a58) returned 1 [0208.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37740 [0208.510] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.510] WriteFile (in: hFile=0x1540, lpBuffer=0x7b7d388*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1161f7e0, lpOverlapped=0x0 | out: lpBuffer=0x7b7d388*, lpNumberOfBytesWritten=0x1161f7e0*=0x10c, lpOverlapped=0x0) returned 1 [0208.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0208.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6ce28 [0208.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0208.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2de0) returned 1 [0208.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2de0 [0208.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0208.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0208.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a78) returned 1 [0208.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0208.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0208.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0208.979] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="19") returned 2 [0208.979] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="95") returned 2 [0208.979] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="bc") returned 2 [0208.979] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="e6") returned 2 [0208.980] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="cf") returned 2 [0208.980] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="6a") returned 2 [0208.980] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="d3") returned 2 [0208.980] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="67") returned 2 [0208.980] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="9b") returned 2 [0208.980] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="d2") returned 2 [0208.980] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="a9") returned 2 [0208.980] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="15") returned 2 [0208.980] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="77") returned 2 [0208.980] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="d4") returned 2 [0208.980] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="7a") returned 2 [0208.980] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="85") returned 2 [0208.980] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="5a") returned 2 [0208.980] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="e6") returned 2 [0208.981] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="fd") returned 2 [0208.981] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="36") returned 2 [0208.981] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="07") returned 2 [0208.981] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="36") returned 2 [0208.981] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="7e") returned 2 [0208.981] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="3a") returned 2 [0208.981] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="d1") returned 2 [0208.981] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="68") returned 2 [0208.981] RtlInitAnsiString (in: DestinationString=0x1161f768, SourceString="1995bce6cf6ad3679bd2a91577d47a855ae6fd3607367e3ad168" | out: DestinationString="1995bce6cf6ad3679bd2a91577d47a855ae6fd3607367e3ad168") [0208.981] RtlAnsiStringToUnicodeString (in: DestinationString=0x1161f760, SourceString="1995bce6cf6ad3679bd2a91577d47a855ae6fd3607367e3ad168", AllocateDestinationString=1 | out: DestinationString="1995bce6cf6ad3679bd2a91577d47a855ae6fd3607367e3ad168") returned 0x0 [0208.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cf18 [0208.982] wcscat (in: _Dest=0x7dde748, _Source="1995bce6cf6ad" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\1995bce6cf6ad") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\1995bce6cf6ad" [0208.982] wcscat (in: _Dest=0x7dde748, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\1995bce6cf6ad.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\1995bce6cf6ad.68814f" [0208.982] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\1995bce6cf6ad.68814f", NtPathName=0x1161f758, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\1995bce6cf6ad.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.982] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddd590 [0209.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd590) returned 1 [0209.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca5ab0) returned 1 [0209.365] NtQueryInformationFile (in: FileHandle=0x1540, IoStatusBlock=0x1161f730, FileInformation=0x1161f738, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1161f730, FileInformation=0x1161f738) returned 0x0 [0209.365] NtSetInformationFile (FileHandle=0x1540, IoStatusBlock=0x1161f730, FileInformation=0x1161f738, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dde748) returned 1 [0209.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf18) returned 1 [0209.492] FlushFileBuffers (hFile=0x1540) returned 1 [0209.499] CloseHandle (hObject=0x1540) returned 1 [0209.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7cd5748 [0209.583] wcscpy (in: _Dest=0x7cd5748, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\" [0209.583] wcscat (in: _Dest=0x7cd5748, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\68814F-Readme.txt" [0209.583] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\68814f-readme.txt")) returned 0xffffffff [0209.584] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.156] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1161f774, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x1161f774*=0x8b9, lpOverlapped=0x0) returned 1 [0210.158] CloseHandle (hObject=0xbb8) returned 1 [0210.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5748) returned 1 [0210.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7280) returned 1 Thread: id = 6495 os_tid = 0x1784 [0191.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x20 [0199.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF", dwFileAttributes=0x20) returned 0 [0199.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.266] GetLastError () returned 0x5 [0204.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF", dwFileAttributes=0x20) returned 0 [0204.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69878) returned 1 Thread: id = 6496 os_tid = 0xf64 [0191.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x20 [0204.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF", dwFileAttributes=0x20) returned 0 [0204.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.776] GetLastError () returned 0x5 [0204.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF", dwFileAttributes=0x20) returned 0 [0204.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69d40) returned 1 Thread: id = 6497 os_tid = 0x1dd0 [0191.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x20 [0204.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF", dwFileAttributes=0x20) returned 0 [0204.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.786] GetLastError () returned 0x5 [0204.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF", dwFileAttributes=0x20) returned 0 [0204.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69dc8) returned 1 Thread: id = 6498 os_tid = 0x74c [0191.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x20 [0204.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF", dwFileAttributes=0x20) returned 0 [0204.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.789] GetLastError () returned 0x5 [0204.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF", dwFileAttributes=0x20) returned 0 [0204.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69e50) returned 1 Thread: id = 6499 os_tid = 0xb00 [0191.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x20 [0204.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF", dwFileAttributes=0x20) returned 0 [0204.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.792] GetLastError () returned 0x5 [0204.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF", dwFileAttributes=0x20) returned 0 [0204.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68bb8) returned 1 Thread: id = 6500 os_tid = 0x1804 [0191.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x20 [0204.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF", dwFileAttributes=0x20) returned 0 [0204.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.795] GetLastError () returned 0x5 [0204.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF", dwFileAttributes=0x20) returned 0 [0204.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68a20) returned 1 Thread: id = 6501 os_tid = 0x1808 [0191.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x20 [0204.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF", dwFileAttributes=0x20) returned 0 [0204.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.798] GetLastError () returned 0x5 [0204.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF", dwFileAttributes=0x20) returned 0 [0204.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68338) returned 1 Thread: id = 6502 os_tid = 0x180c [0191.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x20 [0204.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF", dwFileAttributes=0x20) returned 0 [0204.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.862] GetLastError () returned 0x5 [0204.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF", dwFileAttributes=0x20) returned 0 [0204.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69900) returned 1 Thread: id = 6503 os_tid = 0x1810 [0191.511] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x20 [0204.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF", dwFileAttributes=0x20) returned 0 [0204.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.860] GetLastError () returned 0x5 [0204.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF", dwFileAttributes=0x20) returned 0 [0204.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68aa8) returned 1 Thread: id = 6504 os_tid = 0x1828 [0191.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x20 [0204.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF", dwFileAttributes=0x20) returned 0 [0204.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.859] GetLastError () returned 0x5 [0204.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF", dwFileAttributes=0x20) returned 0 [0204.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a98) returned 1 Thread: id = 6505 os_tid = 0x1850 [0191.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x20 [0204.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF", dwFileAttributes=0x20) returned 0 [0204.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.857] GetLastError () returned 0x5 [0204.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF", dwFileAttributes=0x20) returned 0 [0204.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69438) returned 1 Thread: id = 6506 os_tid = 0x1854 [0191.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x20 [0204.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF", dwFileAttributes=0x20) returned 0 [0204.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.741] GetLastError () returned 0x5 [0204.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF", dwFileAttributes=0x20) returned 0 [0204.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a685e0) returned 1 Thread: id = 6507 os_tid = 0x1858 [0191.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x20 [0204.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF", dwFileAttributes=0x20) returned 0 [0204.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.738] GetLastError () returned 0x5 [0204.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF", dwFileAttributes=0x20) returned 0 [0204.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68668) returned 1 Thread: id = 6508 os_tid = 0x185c [0191.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x20 [0199.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF", dwFileAttributes=0x20) returned 0 [0202.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.304] GetLastError () returned 0x5 [0204.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF", dwFileAttributes=0x20) returned 0 [0204.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a686f0) returned 1 Thread: id = 6509 os_tid = 0x1860 [0191.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x20 [0198.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF", dwFileAttributes=0x20) returned 0 [0199.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.224] GetLastError () returned 0x5 [0203.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF", dwFileAttributes=0x20) returned 0 [0204.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68778) returned 1 Thread: id = 6510 os_tid = 0x1864 [0191.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x20 [0204.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF", dwFileAttributes=0x20) returned 0 [0204.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.770] GetLastError () returned 0x5 [0204.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF", dwFileAttributes=0x20) returned 0 [0204.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68910) returned 1 Thread: id = 6511 os_tid = 0x186c [0191.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x20 [0204.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF", dwFileAttributes=0x20) returned 0 [0204.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.773] GetLastError () returned 0x5 [0204.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF", dwFileAttributes=0x20) returned 0 [0204.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68558) returned 1 Thread: id = 6512 os_tid = 0x1870 [0191.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x20 [0203.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF", dwFileAttributes=0x20) returned 0 [0204.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.694] GetLastError () returned 0x5 [0204.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF", dwFileAttributes=0x20) returned 0 [0204.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a684d0) returned 1 Thread: id = 6513 os_tid = 0x1874 [0191.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x20 [0195.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF", dwFileAttributes=0x20) returned 0 [0195.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.238] GetLastError () returned 0x5 [0195.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF", dwFileAttributes=0x20) returned 0 [0195.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68448) returned 1 Thread: id = 6514 os_tid = 0x1878 [0191.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x20 [0204.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF", dwFileAttributes=0x20) returned 0 [0204.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.801] GetLastError () returned 0x5 [0204.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF", dwFileAttributes=0x20) returned 0 [0204.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68888) returned 1 Thread: id = 6515 os_tid = 0x187c [0191.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x20 [0204.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF", dwFileAttributes=0x20) returned 0 [0204.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.767] GetLastError () returned 0x5 [0204.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF", dwFileAttributes=0x20) returned 0 [0204.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ee8) returned 1 Thread: id = 6516 os_tid = 0x1c90 [0191.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x20 [0204.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF", dwFileAttributes=0x20) returned 0 [0204.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.780] GetLastError () returned 0x5 [0204.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF", dwFileAttributes=0x20) returned 0 [0204.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68f70) returned 1 Thread: id = 6517 os_tid = 0x19e4 [0191.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x20 [0204.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF", dwFileAttributes=0x20) returned 0 [0204.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.783] GetLastError () returned 0x5 [0204.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF", dwFileAttributes=0x20) returned 0 [0204.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ff8) returned 1 Thread: id = 6518 os_tid = 0x19ec [0191.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x20 [0195.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF", dwFileAttributes=0x20) returned 0 [0195.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.170] GetLastError () returned 0x5 [0195.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF", dwFileAttributes=0x20) returned 0 [0195.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69080) returned 1 Thread: id = 6519 os_tid = 0x19f0 [0191.694] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json")) returned 0x2020 [0195.171] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0198.058] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x113c [0198.059] GetFileSizeEx (in: hFile=0x113c, lpFileSize=0xb5cfc24 | out: lpFileSize=0xb5cfc24*=226) returned 1 [0198.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0198.060] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0198.060] NtQuerySystemTime (in: CurrentTime=0xb5cfb98 | out: CurrentTime=0xb5cfb98*=132462177766368000) returned 0x0 [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x3cce4bd [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x632a18e8 [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x6a136041 [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x32456076 [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x2e7d12f7 [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x37a1314b [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x37523065 [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x66944f6 [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x72a68c6a [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x3749ffc1 [0198.060] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x27af626d [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x4ec2f036 [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x593a12c2 [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x771f3770 [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x54a55461 [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x1ba21ba [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x113234b8 [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x9fd627e [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x60e09db0 [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x686b4d84 [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0xe94459d [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x43c2a4ca [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0xe0d0485 [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x152e73d9 [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x8e7c20d [0198.061] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0xcaf783f [0198.062] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x70c3638a [0198.062] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x16eef130 [0198.062] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x4d04549a [0198.062] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0xc6010e6 [0198.062] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x4e51922d [0198.062] RtlRandomEx (in: Seed=0xb5cfb90 | out: Seed=0xb5cfb90) returned 0x943e280 [0198.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a840d0 [0198.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a87cd8 [0198.099] ReadFile (in: hFile=0x113c, lpBuffer=0x7a840d0, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0xb5cfb8c, lpOverlapped=0x0 | out: lpBuffer=0x7a840d0*, lpNumberOfBytesRead=0xb5cfb8c*=0xe2, lpOverlapped=0x0) returned 1 [0198.102] SetFilePointerEx (in: hFile=0x113c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.102] WriteFile (in: hFile=0x113c, lpBuffer=0x7a87cd8*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0xb5cfb90, lpOverlapped=0x0 | out: lpBuffer=0x7a87cd8*, lpNumberOfBytesWritten=0xb5cfb90*=0xe2, lpOverlapped=0x0) returned 1 [0200.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb4e0 [0200.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbaf8 [0200.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edbaf8) returned 1 [0200.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a87cd8) returned 1 [0200.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a840d0) returned 1 [0200.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c270) returned 1 [0200.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b845a8) returned 1 [0200.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c08 [0200.016] SetFilePointerEx (in: hFile=0x113c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.016] WriteFile (in: hFile=0x113c, lpBuffer=0x7cb67c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb5cfc18, lpOverlapped=0x0 | out: lpBuffer=0x7cb67c8*, lpNumberOfBytesWritten=0xb5cfc18*=0x10c, lpOverlapped=0x0) returned 1 [0200.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0200.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9b0) returned 1 [0200.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b9b0 [0200.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b960 [0200.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0200.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0200.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.795] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.795] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="27") returned 2 [0200.796] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="fe") returned 2 [0200.796] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="61") returned 2 [0200.796] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="45") returned 2 [0200.796] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="60") returned 2 [0200.796] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.796] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.796] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="44") returned 2 [0200.796] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.796] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.796] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="ea") returned 2 [0200.796] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="aa") returned 2 [0200.796] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="2f") returned 2 [0200.796] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="f3") returned 2 [0200.796] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="79") returned 2 [0200.796] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="40") returned 2 [0200.796] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="44") returned 2 [0200.796] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="41") returned 2 [0200.796] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="9a") returned 2 [0200.796] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.796] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.796] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="52") returned 2 [0200.796] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="60") returned 2 [0200.796] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="87") returned 2 [0200.796] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="ae") returned 2 [0200.796] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="06") returned 2 [0200.796] RtlInitAnsiString (in: DestinationString=0xb5cfba0, SourceString="27fe614560b65a44f3dceaaa2ff3794044419aaca8526087ae06" | out: DestinationString="27fe614560b65a44f3dceaaa2ff3794044419aaca8526087ae06") [0200.796] RtlAnsiStringToUnicodeString (in: DestinationString=0xb5cfb98, SourceString="27fe614560b65a44f3dceaaa2ff3794044419aaca8526087ae06", AllocateDestinationString=1 | out: DestinationString="27fe614560b65a44f3dceaaa2ff3794044419aaca8526087ae06") returned 0x0 [0200.796] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e328 [0200.797] wcscat (in: _Dest=0x7cd4ec0, _Source="27fe614560b65" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\27fe614560b65") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\27fe614560b65" [0200.797] wcscat (in: _Dest=0x7cd4ec0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\27fe614560b65.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\27fe614560b65.68814f" [0200.797] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\27fe614560b65.68814f", NtPathName=0xb5cfb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\27fe614560b65.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea2eb0 [0201.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea2eb0) returned 1 [0201.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd64a8) returned 1 [0201.146] NtQueryInformationFile (in: FileHandle=0x113c, IoStatusBlock=0xb5cfb68, FileInformation=0xb5cfb70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb5cfb68, FileInformation=0xb5cfb70) returned 0x0 [0201.146] NtSetInformationFile (FileHandle=0x113c, IoStatusBlock=0xb5cfb68, FileInformation=0xb5cfb70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4ec0) returned 1 [0201.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0201.359] FlushFileBuffers (hFile=0x113c) returned 1 [0201.372] CloseHandle (hObject=0x113c) returned 1 [0205.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7f100 [0205.880] wcscpy (in: _Dest=0x7b7f100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\" [0205.880] wcscat (in: _Dest=0x7b7f100, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\68814F-Readme.txt" [0205.880] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\68814f-readme.txt")) returned 0xffffffff [0205.880] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd74 [0206.580] WriteFile (in: hFile=0xd74, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb5cfbac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb5cfbac*=0x8b9, lpOverlapped=0x0) returned 1 [0210.446] CloseHandle (hObject=0xd74) returned 1 [0215.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f100) returned 1 [0215.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64e70) returned 1 Thread: id = 6520 os_tid = 0x19f4 [0191.695] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json")) returned 0x2020 [0195.172] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0198.102] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fd0 [0198.103] GetFileSizeEx (in: hFile=0x1fd0, lpFileSize=0xbdef944 | out: lpFileSize=0xbdef944*=260) returned 1 [0198.103] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.103] ReadFile (in: hFile=0x1fd0, lpBuffer=0xbdef920, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbdef930, lpOverlapped=0x0 | out: lpBuffer=0xbdef920*, lpNumberOfBytesRead=0xbdef930*=0x4, lpOverlapped=0x0) returned 1 [0198.105] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0198.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0198.106] NtQuerySystemTime (in: CurrentTime=0xbdef8b8 | out: CurrentTime=0xbdef8b8*=132462177766836000) returned 0x0 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x4db598f3 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x2ae60ec8 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x3c506986 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x28748c6d [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x213ecf96 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x4fd63994 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x68026774 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x71d4b2b7 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x2c68aecd [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x3b34aa5f [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x3b05b13 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x16aa8876 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x28739275 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x12430000 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x5adc390a [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x15b20ce5 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x781bb89f [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x61016211 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x7eeeb239 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x67bfcfbd [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x38611320 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x19f60742 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x19f69041 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x6b8a5d1c [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x2768029 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x675108d7 [0198.106] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x1d317bd0 [0198.107] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x137ebe28 [0198.107] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x71ae8c55 [0198.107] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x1478a97 [0198.107] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x7027eae2 [0198.107] RtlRandomEx (in: Seed=0xbdef8b0 | out: Seed=0xbdef8b0) returned 0x5c3d5042 [0198.117] ReadFile (in: hFile=0x1fd0, lpBuffer=0x7a8b8e0, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xbdef8ac, lpOverlapped=0x0 | out: lpBuffer=0x7a8b8e0*, lpNumberOfBytesRead=0xbdef8ac*=0x104, lpOverlapped=0x0) returned 1 [0198.117] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.117] WriteFile (in: hFile=0x1fd0, lpBuffer=0x7a8f4e8*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xbdef8b0, lpOverlapped=0x0 | out: lpBuffer=0x7a8f4e8*, lpNumberOfBytesWritten=0xbdef8b0*=0x104, lpOverlapped=0x0) returned 1 [0200.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ede118 [0200.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb670 [0200.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edb670) returned 1 [0200.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8f4e8) returned 1 [0200.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8b8e0) returned 1 [0200.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c2e8) returned 1 [0200.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b845f0) returned 1 [0200.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e867e8 [0200.022] SetFilePointerEx (in: hFile=0x1fd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.022] WriteFile (in: hFile=0x1fd0, lpBuffer=0x7cb6598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbdef938, lpOverlapped=0x0 | out: lpBuffer=0x7cb6598*, lpNumberOfBytesWritten=0xbdef938*=0x10c, lpOverlapped=0x0) returned 1 [0200.802] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0200.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc30) returned 1 [0200.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bc30 [0200.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb18 [0200.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0200.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b910) returned 1 [0200.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.804] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="ca") returned 2 [0200.804] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="64") returned 2 [0200.804] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="ab") returned 2 [0200.804] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="a4") returned 2 [0200.804] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="a3") returned 2 [0200.804] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.804] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="25") returned 2 [0200.804] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="71") returned 2 [0200.804] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="a9") returned 2 [0200.804] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="62") returned 2 [0200.804] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="e3") returned 2 [0200.804] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="41") returned 2 [0200.804] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="37") returned 2 [0200.804] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.804] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.804] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="03") returned 2 [0200.804] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="cb") returned 2 [0200.804] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="5b") returned 2 [0200.804] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="60") returned 2 [0200.804] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.805] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="42") returned 2 [0200.805] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.805] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="c4") returned 2 [0200.805] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="4f") returned 2 [0200.805] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="34") returned 2 [0200.805] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.805] RtlInitAnsiString (in: DestinationString=0xbdef8c0, SourceString="ca64aba4a3dd2571a962e34137f4b603cb5b60ce42dcc44f34f7" | out: DestinationString="ca64aba4a3dd2571a962e34137f4b603cb5b60ce42dcc44f34f7") [0200.805] RtlAnsiStringToUnicodeString (in: DestinationString=0xbdef8b8, SourceString="ca64aba4a3dd2571a962e34137f4b603cb5b60ce42dcc44f34f7", AllocateDestinationString=1 | out: DestinationString="ca64aba4a3dd2571a962e34137f4b603cb5b60ce42dcc44f34f7") returned 0x0 [0200.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cb58 [0200.805] wcscat (in: _Dest=0x7cd5130, _Source="ca64aba4a3dd2" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\ca64aba4a3dd2") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\ca64aba4a3dd2" [0200.805] wcscat (in: _Dest=0x7cd5130, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\ca64aba4a3dd2.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\ca64aba4a3dd2.68814f" [0200.805] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\ca64aba4a3dd2.68814f", NtPathName=0xbdef8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\ca64aba4a3dd2.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.805] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea38f0 [0201.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea38f0) returned 1 [0201.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd68f8) returned 1 [0201.148] NtQueryInformationFile (in: FileHandle=0x1fd0, IoStatusBlock=0xbdef888, FileInformation=0xbdef890, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbdef888, FileInformation=0xbdef890) returned 0x0 [0201.148] NtSetInformationFile (FileHandle=0x1fd0, IoStatusBlock=0xbdef888, FileInformation=0xbdef890, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5130) returned 1 [0201.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cb58) returned 1 [0201.367] FlushFileBuffers (hFile=0x1fd0) returned 1 [0201.380] CloseHandle (hObject=0x1fd0) returned 1 [0205.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7f478 [0205.896] wcscpy (in: _Dest=0x7b7f478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\" [0205.896] wcscat (in: _Dest=0x7b7f478, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\68814F-Readme.txt" [0205.896] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\68814f-readme.txt")) returned 0xffffffff [0205.896] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc64 [0206.585] WriteFile (in: hFile=0xc64, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbdef8cc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbdef8cc*=0x8b9, lpOverlapped=0x0) returned 1 [0210.464] CloseHandle (hObject=0xc64) returned 1 [0215.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f478) returned 1 [0215.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64f98) returned 1 Thread: id = 6521 os_tid = 0x1a40 [0191.695] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json")) returned 0x2020 [0195.173] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.118] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2454 [0198.119] GetFileSizeEx (in: hFile=0x2454, lpFileSize=0x8d1ff1c | out: lpFileSize=0x8d1ff1c*=221) returned 1 [0198.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0198.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0198.119] NtQuerySystemTime (in: CurrentTime=0x8d1fe90 | out: CurrentTime=0x8d1fe90*=132462177766992000) returned 0x0 [0198.119] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x6d705e94 [0198.119] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x4f518339 [0198.119] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x4f3181fc [0198.119] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x1ba98b54 [0198.119] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x64e71f1c [0198.119] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x8fab9c2 [0198.119] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x3aa887b4 [0198.119] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x92ca77c [0198.119] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x68f84125 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x132a5bdd [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0xc71f8c0 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x425018b1 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x64681193 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x74ef9b07 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x2de71a84 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x4f5d648e [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x1f3d05b6 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x86da6c0 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x764b1bec [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x7d9272db [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x7233487c [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x16133113 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x419c47e0 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x1dfa37e6 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0xffcf875 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x2d43d94a [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x5d531d9a [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x3fc9f347 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x71476771 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x12a4f71a [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x41417b51 [0198.120] RtlRandomEx (in: Seed=0x8d1fe88 | out: Seed=0x8d1fe88) returned 0x1ccc042a [0198.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a930f0 [0198.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a96cf8 [0198.134] ReadFile (in: hFile=0x2454, lpBuffer=0x7a930f0, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x8d1fe84, lpOverlapped=0x0 | out: lpBuffer=0x7a930f0*, lpNumberOfBytesRead=0x8d1fe84*=0xdd, lpOverlapped=0x0) returned 1 [0198.137] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.137] WriteFile (in: hFile=0x2454, lpBuffer=0x7a96cf8*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x8d1fe88, lpOverlapped=0x0 | out: lpBuffer=0x7a96cf8*, lpNumberOfBytesWritten=0x8d1fe88*=0xdd, lpOverlapped=0x0) returned 1 [0200.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edb530 [0200.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd538 [0200.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd538) returned 1 [0200.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a96cf8) returned 1 [0200.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a930f0) returned 1 [0200.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c360) returned 1 [0200.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84638) returned 1 [0200.020] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e869c8 [0200.020] SetFilePointerEx (in: hFile=0x2454, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.020] WriteFile (in: hFile=0x2454, lpBuffer=0x7cb66b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8d1ff10, lpOverlapped=0x0 | out: lpBuffer=0x7cb66b0*, lpNumberOfBytesWritten=0x8d1ff10*=0x10c, lpOverlapped=0x0) returned 1 [0200.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b8e8 [0200.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b8e8) returned 1 [0200.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b8e8 [0200.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7f8 [0200.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0200.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0200.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.799] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.800] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="e0") returned 2 [0200.800] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="b1") returned 2 [0200.800] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="18") returned 2 [0200.800] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="fa") returned 2 [0200.800] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="11") returned 2 [0200.800] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="ca") returned 2 [0200.800] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="6f") returned 2 [0200.800] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="7e") returned 2 [0200.800] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="9b") returned 2 [0200.800] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="27") returned 2 [0200.800] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.800] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="9e") returned 2 [0200.800] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.800] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="70") returned 2 [0200.800] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="18") returned 2 [0200.800] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="c0") returned 2 [0200.800] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.800] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="1b") returned 2 [0200.800] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="07") returned 2 [0200.800] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="b2") returned 2 [0200.800] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="c1") returned 2 [0200.800] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="08") returned 2 [0200.800] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="f6") returned 2 [0200.800] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="26") returned 2 [0200.800] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="6a") returned 2 [0200.800] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="d8") returned 2 [0200.800] RtlInitAnsiString (in: DestinationString=0x8d1fe98, SourceString="e0b118fa11ca6f7e9b27a69e6e7018c05a1b07b2c108f6266ad8" | out: DestinationString="e0b118fa11ca6f7e9b27a69e6e7018c05a1b07b2c108f6266ad8") [0200.801] RtlAnsiStringToUnicodeString (in: DestinationString=0x8d1fe90, SourceString="e0b118fa11ca6f7e9b27a69e6e7018c05a1b07b2c108f6266ad8", AllocateDestinationString=1 | out: DestinationString="e0b118fa11ca6f7e9b27a69e6e7018c05a1b07b2c108f6266ad8") returned 0x0 [0200.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dc98 [0200.801] wcscat (in: _Dest=0x7cd4ff8, _Source="e0b118fa11ca6" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\e0b118fa11ca6") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\e0b118fa11ca6" [0200.801] wcscat (in: _Dest=0x7cd4ff8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\e0b118fa11ca6.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\e0b118fa11ca6.68814f" [0200.801] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\e0b118fa11ca6.68814f", NtPathName=0x8d1fe88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\e0b118fa11ca6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x3ea33d0 [0201.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea33d0) returned 1 [0201.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd66d0) returned 1 [0201.147] NtQueryInformationFile (in: FileHandle=0x2454, IoStatusBlock=0x8d1fe60, FileInformation=0x8d1fe68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8d1fe60, FileInformation=0x8d1fe68) returned 0x0 [0201.147] NtSetInformationFile (FileHandle=0x2454, IoStatusBlock=0x8d1fe60, FileInformation=0x8d1fe68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4ff8) returned 1 [0201.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc98) returned 1 [0201.363] FlushFileBuffers (hFile=0x2454) returned 1 [0201.376] CloseHandle (hObject=0x2454) returned 1 [0205.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7f350 [0205.893] wcscpy (in: _Dest=0x7b7f350, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\" [0205.893] wcscat (in: _Dest=0x7b7f350, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\68814F-Readme.txt" [0205.893] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\68814f-readme.txt")) returned 0xffffffff [0205.893] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd94 [0206.580] WriteFile (in: hFile=0xd94, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8d1fea4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8d1fea4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.451] CloseHandle (hObject=0xd94) returned 1 [0215.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f350) returned 1 [0215.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a650c0) returned 1 Thread: id = 6522 os_tid = 0x1a50 [0191.696] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json")) returned 0x2020 [0195.173] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0198.137] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19b8 [0198.138] GetFileSizeEx (in: hFile=0x19b8, lpFileSize=0x5bffe84 | out: lpFileSize=0x5bffe84*=270) returned 1 [0198.138] SetFilePointerEx (in: hFile=0x19b8, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.138] ReadFile (in: hFile=0x19b8, lpBuffer=0x5bffe60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5bffe70, lpOverlapped=0x0 | out: lpBuffer=0x5bffe60*, lpNumberOfBytesRead=0x5bffe70*=0x4, lpOverlapped=0x0) returned 1 [0198.140] SetFilePointerEx (in: hFile=0x19b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0198.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0198.141] NtQuerySystemTime (in: CurrentTime=0x5bffdf8 | out: CurrentTime=0x5bffdf8*=132462177767148000) returned 0x0 [0198.141] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x318daf8b [0198.141] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x6c44c5b6 [0198.141] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x2b7c0876 [0198.141] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x79307526 [0198.141] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x1c3898a2 [0198.141] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x91909c0 [0198.141] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0xd7bebc4 [0198.141] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x21ed9952 [0198.141] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x370f5bd7 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x7eb83589 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x613d8e11 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x70b31859 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x72854b1f [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x3fce6c9d [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x2b334811 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x3d3f3d58 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x40d8b358 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x30669fed [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x3b5ccbf6 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x59e356cd [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x9999400 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x79883ce0 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x373fedb3 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x75585606 [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x3d99986d [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x7664ee8b [0198.142] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x21e0963 [0198.143] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x1ffc8242 [0198.143] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x57bded13 [0198.143] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x67ef19a [0198.143] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x18c8c113 [0198.143] RtlRandomEx (in: Seed=0x5bffdf0 | out: Seed=0x5bffdf0) returned 0x19ee0223 [0198.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9a900 [0198.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9e508 [0198.156] ReadFile (in: hFile=0x19b8, lpBuffer=0x7a9a900, nNumberOfBytesToRead=0x10e, lpNumberOfBytesRead=0x5bffdec, lpOverlapped=0x0 | out: lpBuffer=0x7a9a900*, lpNumberOfBytesRead=0x5bffdec*=0x10e, lpOverlapped=0x0) returned 1 [0198.157] SetFilePointerEx (in: hFile=0x19b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.157] WriteFile (in: hFile=0x19b8, lpBuffer=0x7a9e508*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x5bffdf0, lpOverlapped=0x0 | out: lpBuffer=0x7a9e508*, lpNumberOfBytesWritten=0x5bffdf0*=0x10e, lpOverlapped=0x0) returned 1 [0200.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b58 [0200.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52568 [0200.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52568) returned 1 [0200.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9e508) returned 1 [0200.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9a900) returned 1 [0200.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c3d8) returned 1 [0200.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84680) returned 1 [0200.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86278 [0200.028] SetFilePointerEx (in: hFile=0x19b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.028] WriteFile (in: hFile=0x19b8, lpBuffer=0x7cb6368*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5bffe78, lpOverlapped=0x0 | out: lpBuffer=0x7cb6368*, lpNumberOfBytesWritten=0x5bffe78*=0x10c, lpOverlapped=0x0) returned 1 [0200.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baa0 [0200.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baa0) returned 1 [0200.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305baa0 [0200.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0200.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0200.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0200.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.813] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="58") returned 2 [0200.813] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="8f") returned 2 [0200.813] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="46") returned 2 [0200.813] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="14") returned 2 [0200.813] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="cb") returned 2 [0200.813] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="58") returned 2 [0200.813] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="e9") returned 2 [0200.813] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="43") returned 2 [0200.813] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="02") returned 2 [0200.813] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.813] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="6b") returned 2 [0200.813] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="02") returned 2 [0200.813] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.813] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="3b") returned 2 [0200.813] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="58") returned 2 [0200.813] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="d7") returned 2 [0200.813] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="3a") returned 2 [0200.813] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="46") returned 2 [0200.813] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="79") returned 2 [0200.813] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="4a") returned 2 [0200.813] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.813] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="37") returned 2 [0200.813] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="7e") returned 2 [0200.813] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="ec") returned 2 [0200.813] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="e1") returned 2 [0200.813] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="48") returned 2 [0200.813] RtlInitAnsiString (in: DestinationString=0x5bffe00, SourceString="588f4614cb58e94302ce6b024a3b58d73a46794aee377eece148" | out: DestinationString="588f4614cb58e94302ce6b024a3b58d73a46794aee377eece148") [0200.813] RtlAnsiStringToUnicodeString (in: DestinationString=0x5bffdf8, SourceString="588f4614cb58e94302ce6b024a3b58d73a46794aee377eece148", AllocateDestinationString=1 | out: DestinationString="588f4614cb58e94302ce6b024a3b58d73a46794aee377eece148") returned 0x0 [0200.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6ca68 [0200.814] wcscat (in: _Dest=0x7cd53a0, _Source="588f4614cb58e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\588f4614cb58e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\588f4614cb58e" [0200.814] wcscat (in: _Dest=0x7cd53a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\588f4614cb58e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\588f4614cb58e.68814f" [0200.814] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\588f4614cb58e.68814f", NtPathName=0x5bffdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\588f4614cb58e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd84e8 [0201.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd84e8) returned 1 [0201.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd6d48) returned 1 [0201.157] NtQueryInformationFile (in: FileHandle=0x19b8, IoStatusBlock=0x5bffdc8, FileInformation=0x5bffdd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x5bffdc8, FileInformation=0x5bffdd0) returned 0x0 [0201.157] NtSetInformationFile (FileHandle=0x19b8, IoStatusBlock=0x5bffdc8, FileInformation=0x5bffdd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd53a0) returned 1 [0201.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ca68) returned 1 [0201.374] FlushFileBuffers (hFile=0x19b8) returned 1 [0201.384] CloseHandle (hObject=0x19b8) returned 1 [0205.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7f228 [0205.890] wcscpy (in: _Dest=0x7b7f228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\" [0205.890] wcscat (in: _Dest=0x7b7f228, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\68814F-Readme.txt" [0205.890] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\68814f-readme.txt")) returned 0xffffffff [0205.891] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x180c [0206.580] WriteFile (in: hFile=0x180c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x5bffe0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x5bffe0c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.448] CloseHandle (hObject=0x180c) returned 1 [0215.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f228) returned 1 [0215.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a651e8) returned 1 Thread: id = 6523 os_tid = 0x1a74 [0191.696] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json")) returned 0x2020 [0195.174] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0198.157] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19b4 [0198.158] GetFileSizeEx (in: hFile=0x19b4, lpFileSize=0xbedfbec | out: lpFileSize=0xbedfbec*=356) returned 1 [0198.158] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.158] ReadFile (in: hFile=0x19b4, lpBuffer=0xbedfbc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbedfbd8, lpOverlapped=0x0 | out: lpBuffer=0xbedfbc8*, lpNumberOfBytesRead=0xbedfbd8*=0x4, lpOverlapped=0x0) returned 1 [0198.160] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0198.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0198.160] NtQuerySystemTime (in: CurrentTime=0xbedfb60 | out: CurrentTime=0xbedfb60*=132462177767460000) returned 0x0 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x4a092243 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x584d7187 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x5b279a49 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x133777b0 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x7153fec2 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x1ac9bb46 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x6123c6a0 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x1dd0d4d4 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x52337eec [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x29956733 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x22aad5bd [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x842ce00 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x2170a307 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x1e8b6b1b [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x1c83fd03 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x315ae68 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x212f8391 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x2b7b09cd [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x4228a22 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x452036fa [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x528e592c [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x284f1e70 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x45c02275 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x49df0616 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x1fce19d3 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x69655408 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x5420d0c4 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x472ba0c0 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x3a1b3c6e [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x60e9a0af [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x37c5cb1 [0198.161] RtlRandomEx (in: Seed=0xbedfb58 | out: Seed=0xbedfb58) returned 0x6740dbd1 [0198.173] ReadFile (in: hFile=0x19b4, lpBuffer=0x7aa2110, nNumberOfBytesToRead=0x164, lpNumberOfBytesRead=0xbedfb54, lpOverlapped=0x0 | out: lpBuffer=0x7aa2110*, lpNumberOfBytesRead=0xbedfb54*=0x164, lpOverlapped=0x0) returned 1 [0198.173] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.173] WriteFile (in: hFile=0x19b4, lpBuffer=0x7aa5d18*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0xbedfb58, lpOverlapped=0x0 | out: lpBuffer=0x7aa5d18*, lpNumberOfBytesWritten=0xbedfb58*=0x164, lpOverlapped=0x0) returned 1 [0200.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54200 [0200.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53828 [0200.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53828) returned 1 [0200.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa5d18) returned 1 [0200.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa2110) returned 1 [0200.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c450) returned 1 [0200.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b846c8) returned 1 [0200.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85d68 [0200.026] SetFilePointerEx (in: hFile=0x19b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.026] WriteFile (in: hFile=0x19b4, lpBuffer=0x7cb6480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbedfbe0, lpOverlapped=0x0 | out: lpBuffer=0x7cb6480*, lpNumberOfBytesWritten=0xbedfbe0*=0x10c, lpOverlapped=0x0) returned 1 [0200.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0200.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0200.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b9d8 [0200.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0200.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0200.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba28) returned 1 [0200.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.809] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="af") returned 2 [0200.809] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.809] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="52") returned 2 [0200.809] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.809] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="83") returned 2 [0200.809] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="35") returned 2 [0200.809] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.809] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="b1") returned 2 [0200.809] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="cc") returned 2 [0200.809] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="0f") returned 2 [0200.809] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="b8") returned 2 [0200.809] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="64") returned 2 [0200.810] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="a4") returned 2 [0200.810] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="b5") returned 2 [0200.810] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="73") returned 2 [0200.810] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="4e") returned 2 [0200.810] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="64") returned 2 [0200.810] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="2f") returned 2 [0200.810] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="d0") returned 2 [0200.810] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.810] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.810] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="55") returned 2 [0200.810] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="df") returned 2 [0200.810] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="30") returned 2 [0200.810] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="e6") returned 2 [0200.810] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.810] RtlInitAnsiString (in: DestinationString=0xbedfb68, SourceString="af0c52d48335ceb1cc0fb864a4b5734e642fd0d97b55df30e6a8" | out: DestinationString="af0c52d48335ceb1cc0fb864a4b5734e642fd0d97b55df30e6a8") [0200.810] RtlAnsiStringToUnicodeString (in: DestinationString=0xbedfb60, SourceString="af0c52d48335ceb1cc0fb864a4b5734e642fd0d97b55df30e6a8", AllocateDestinationString=1 | out: DestinationString="af0c52d48335ceb1cc0fb864a4b5734e642fd0d97b55df30e6a8") returned 0x0 [0200.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c888 [0200.810] wcscat (in: _Dest=0x7cd5268, _Source="af0c52d48335c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\af0c52d48335c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\af0c52d48335c" [0200.811] wcscat (in: _Dest=0x7cd5268, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\af0c52d48335c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\af0c52d48335c.68814f" [0200.811] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\af0c52d48335c.68814f", NtPathName=0xbedfb58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\af0c52d48335c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd83a0 [0201.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd83a0) returned 1 [0201.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd6b20) returned 1 [0201.149] NtQueryInformationFile (in: FileHandle=0x19b4, IoStatusBlock=0xbedfb30, FileInformation=0xbedfb38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbedfb30, FileInformation=0xbedfb38) returned 0x0 [0201.149] NtSetInformationFile (FileHandle=0x19b4, IoStatusBlock=0xbedfb30, FileInformation=0xbedfb38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5268) returned 1 [0201.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c888) returned 1 [0201.371] FlushFileBuffers (hFile=0x19b4) returned 1 [0201.379] CloseHandle (hObject=0x19b4) returned 1 [0205.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddac28 [0205.884] wcscpy (in: _Dest=0x7ddac28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\" [0205.885] wcscat (in: _Dest=0x7ddac28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\68814F-Readme.txt" [0205.885] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\68814f-readme.txt")) returned 0xffffffff [0205.885] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d68 [0206.579] WriteFile (in: hFile=0x1d68, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbedfb74, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbedfb74*=0x8b9, lpOverlapped=0x0) returned 1 [0210.444] CloseHandle (hObject=0x1d68) returned 1 [0215.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddac28) returned 1 [0215.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65310) returned 1 Thread: id = 6524 os_tid = 0x1a78 [0191.697] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json")) returned 0x2020 [0195.175] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.174] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19b0 [0198.174] GetFileSizeEx (in: hFile=0x19b0, lpFileSize=0xb78fb6c | out: lpFileSize=0xb78fb6c*=270) returned 1 [0198.174] SetFilePointerEx (in: hFile=0x19b0, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.175] ReadFile (in: hFile=0x19b0, lpBuffer=0xb78fb48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb78fb58, lpOverlapped=0x0 | out: lpBuffer=0xb78fb48*, lpNumberOfBytesRead=0xb78fb58*=0x4, lpOverlapped=0x0) returned 1 [0198.177] SetFilePointerEx (in: hFile=0x19b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0198.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bac8 [0198.177] NtQuerySystemTime (in: CurrentTime=0xb78fae0 | out: CurrentTime=0xb78fae0*=132462177767616000) returned 0x0 [0198.177] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x506d10af [0198.177] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x4e37c5a2 [0198.177] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x60267513 [0198.177] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x48664605 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x659a3e86 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x23ef15ec [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x6a15bfff [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x4d4c1656 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x59dc9b60 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x60368787 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x68cf135f [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x31fdbaa0 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x17372695 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x5e5ef01e [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x8987f80 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x575c2a07 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x27dfb384 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x26148941 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x748cbc10 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x4879bc73 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x2e163985 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x6e84dc00 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x157ee3b1 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x2a6fdbde [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x6b6eedbc [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x16e01725 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x187d9380 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x54f5607f [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x70aec35f [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x581508f1 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x2116a0f1 [0198.178] RtlRandomEx (in: Seed=0xb78fad8 | out: Seed=0xb78fad8) returned 0x7a97c306 [0198.190] ReadFile (in: hFile=0x19b0, lpBuffer=0x7aa9920, nNumberOfBytesToRead=0x10e, lpNumberOfBytesRead=0xb78fad4, lpOverlapped=0x0 | out: lpBuffer=0x7aa9920*, lpNumberOfBytesRead=0xb78fad4*=0x10e, lpOverlapped=0x0) returned 1 [0198.190] SetFilePointerEx (in: hFile=0x19b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.190] WriteFile (in: hFile=0x19b0, lpBuffer=0x7aad528*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xb78fad8, lpOverlapped=0x0 | out: lpBuffer=0x7aad528*, lpNumberOfBytesWritten=0xb78fad8*=0x10e, lpOverlapped=0x0) returned 1 [0200.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0200.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54098 [0200.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54098) returned 1 [0200.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aad528) returned 1 [0200.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa9920) returned 1 [0200.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c4c8) returned 1 [0200.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84710) returned 1 [0200.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86728 [0200.033] SetFilePointerEx (in: hFile=0x19b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.033] WriteFile (in: hFile=0x19b0, lpBuffer=0x7cb6138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb78fb60, lpOverlapped=0x0 | out: lpBuffer=0x7cb6138*, lpNumberOfBytesWritten=0xb78fb60*=0x10c, lpOverlapped=0x0) returned 1 [0200.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0200.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0200.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c450 [0200.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0200.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0200.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0200.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.822] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="95") returned 2 [0200.822] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="d5") returned 2 [0200.822] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.822] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="a3") returned 2 [0200.822] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="eb") returned 2 [0200.822] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="35") returned 2 [0200.822] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.822] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="2a") returned 2 [0200.822] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="55") returned 2 [0200.822] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.822] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="39") returned 2 [0200.822] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="6a") returned 2 [0200.822] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="13") returned 2 [0200.822] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="26") returned 2 [0200.822] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="a9") returned 2 [0200.822] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="88") returned 2 [0200.822] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="94") returned 2 [0200.822] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="10") returned 2 [0200.822] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="35") returned 2 [0200.822] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="92") returned 2 [0200.822] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="fd") returned 2 [0200.822] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="37") returned 2 [0200.823] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="8f") returned 2 [0200.823] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="27") returned 2 [0200.823] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="e2") returned 2 [0200.823] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="bf") returned 2 [0200.823] RtlInitAnsiString (in: DestinationString=0xb78fae8, SourceString="95d5d4a3eb35a82a557b396a1326a98894103592fd378f27e2bf" | out: DestinationString="95d5d4a3eb35a82a557b396a1326a98894103592fd378f27e2bf") [0200.823] RtlAnsiStringToUnicodeString (in: DestinationString=0xb78fae0, SourceString="95d5d4a3eb35a82a557b396a1326a98894103592fd378f27e2bf", AllocateDestinationString=1 | out: DestinationString="95d5d4a3eb35a82a557b396a1326a98894103592fd378f27e2bf") returned 0x0 [0200.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c978 [0200.823] wcscat (in: _Dest=0x7cd54d8, _Source="95d5d4a3eb35a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\95d5d4a3eb35a") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\95d5d4a3eb35a" [0200.823] wcscat (in: _Dest=0x7cd54d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\95d5d4a3eb35a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\95d5d4a3eb35a.68814f" [0200.823] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\95d5d4a3eb35a.68814f", NtPathName=0xb78fad8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\95d5d4a3eb35a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd8630 [0201.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8630) returned 1 [0201.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd6f70) returned 1 [0201.158] NtQueryInformationFile (in: FileHandle=0x19b0, IoStatusBlock=0xb78fab0, FileInformation=0xb78fab8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb78fab0, FileInformation=0xb78fab8) returned 0x0 [0201.158] NtSetInformationFile (FileHandle=0x19b0, IoStatusBlock=0xb78fab0, FileInformation=0xb78fab8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd54d8) returned 1 [0201.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c978) returned 1 [0201.378] FlushFileBuffers (hFile=0x19b0) returned 1 [0201.394] CloseHandle (hObject=0x19b0) returned 1 [0205.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7ddaaf0 [0205.903] wcscpy (in: _Dest=0x7ddaaf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\" [0205.903] wcscat (in: _Dest=0x7ddaaf0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\68814F-Readme.txt" [0205.903] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\68814f-readme.txt")) returned 0xffffffff [0205.903] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xcd8 [0206.585] WriteFile (in: hFile=0xcd8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb78faf4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb78faf4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.467] CloseHandle (hObject=0xcd8) returned 1 [0215.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddaaf0) returned 1 [0215.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65438) returned 1 Thread: id = 6525 os_tid = 0x1a7c [0191.697] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json")) returned 0x2020 [0195.175] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0198.190] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19ac [0198.191] GetFileSizeEx (in: hFile=0x19ac, lpFileSize=0x7f8fbfc | out: lpFileSize=0x7f8fbfc*=353) returned 1 [0198.191] SetFilePointerEx (in: hFile=0x19ac, liDistanceToMove=0x15d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.191] ReadFile (in: hFile=0x19ac, lpBuffer=0x7f8fbd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f8fbe8, lpOverlapped=0x0 | out: lpBuffer=0x7f8fbd8*, lpNumberOfBytesRead=0x7f8fbe8*=0x4, lpOverlapped=0x0) returned 1 [0198.193] SetFilePointerEx (in: hFile=0x19ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bac8 [0198.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0198.194] NtQuerySystemTime (in: CurrentTime=0x7f8fb70 | out: CurrentTime=0x7f8fb70*=132462177767772000) returned 0x0 [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x15b151f0 [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x28a5746e [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x338f6183 [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x533397c2 [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x7bb48700 [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x7ad9d73d [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x5854d36a [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x7d13fd4e [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0xa015bb5 [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x746bb7f2 [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x56b5491b [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x60a3b553 [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x7c243c0 [0198.194] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x3d708b03 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x775a79c2 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x6f96aa5 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x3bb6d70e [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x30ac30fb [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x7bb46e66 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x26199561 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x2f7554e [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x643e5f26 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x3d4bc460 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x34983036 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x14dc29da [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x5fb45ad8 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x7e43b88e [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x43822ee9 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x55f86afa [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x7f0b6ed5 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x3e7bf050 [0198.195] RtlRandomEx (in: Seed=0x7f8fb68 | out: Seed=0x7f8fb68) returned 0x6e4e72a2 [0198.205] ReadFile (in: hFile=0x19ac, lpBuffer=0x7ab1130, nNumberOfBytesToRead=0x161, lpNumberOfBytesRead=0x7f8fb64, lpOverlapped=0x0 | out: lpBuffer=0x7ab1130*, lpNumberOfBytesRead=0x7f8fb64*=0x161, lpOverlapped=0x0) returned 1 [0198.206] SetFilePointerEx (in: hFile=0x19ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.206] WriteFile (in: hFile=0x19ac, lpBuffer=0x7d103a0*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x7f8fb68, lpOverlapped=0x0 | out: lpBuffer=0x7d103a0*, lpNumberOfBytesWritten=0x7f8fb68*=0x161, lpOverlapped=0x0) returned 1 [0200.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53530 [0200.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533c8 [0200.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533c8) returned 1 [0200.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d103a0) returned 1 [0200.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab1130) returned 1 [0200.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c540) returned 1 [0200.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84758) returned 1 [0200.032] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e866c8 [0200.032] SetFilePointerEx (in: hFile=0x19ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.032] WriteFile (in: hFile=0x19ac, lpBuffer=0x7cb6250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7f8fbf0, lpOverlapped=0x0 | out: lpBuffer=0x7cb6250*, lpNumberOfBytesWritten=0x7f8fbf0*=0x10c, lpOverlapped=0x0) returned 1 [0200.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0200.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0200.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bf50 [0200.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0200.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0200.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0200.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.826] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="c2") returned 2 [0200.826] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="84") returned 2 [0200.826] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="89") returned 2 [0200.826] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.826] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="77") returned 2 [0200.826] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="0a") returned 2 [0200.827] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="bf") returned 2 [0200.827] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="55") returned 2 [0200.827] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="f0") returned 2 [0200.827] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.827] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="ef") returned 2 [0200.827] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="92") returned 2 [0200.827] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.827] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="57") returned 2 [0200.827] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="85") returned 2 [0200.827] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="90") returned 2 [0200.827] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="2d") returned 2 [0200.827] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="99") returned 2 [0200.827] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="14") returned 2 [0200.827] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="1d") returned 2 [0200.827] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.827] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="3f") returned 2 [0200.827] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.827] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="5f") returned 2 [0200.827] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="59") returned 2 [0200.827] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="b6") returned 2 [0200.827] RtlInitAnsiString (in: DestinationString=0x7f8fb78, SourceString="c28489a8770abf55f0dcef92ff5785902d99141dce3ff45f59b6" | out: DestinationString="c28489a8770abf55f0dcef92ff5785902d99141dce3ff45f59b6") [0200.827] RtlAnsiStringToUnicodeString (in: DestinationString=0x7f8fb70, SourceString="c28489a8770abf55f0dcef92ff5785902d99141dce3ff45f59b6", AllocateDestinationString=1 | out: DestinationString="c28489a8770abf55f0dcef92ff5785902d99141dce3ff45f59b6") returned 0x0 [0200.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c108 [0200.827] wcscat (in: _Dest=0x7cd5610, _Source="c28489a8770ab" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\c28489a8770ab") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\c28489a8770ab" [0200.828] wcscat (in: _Dest=0x7cd5610, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\c28489a8770ab.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\c28489a8770ab.68814f" [0200.828] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\c28489a8770ab.68814f", NtPathName=0x7f8fb68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\c28489a8770ab.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd8778 [0201.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8778) returned 1 [0201.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd7198) returned 1 [0201.159] NtQueryInformationFile (in: FileHandle=0x19ac, IoStatusBlock=0x7f8fb40, FileInformation=0x7f8fb48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7f8fb40, FileInformation=0x7f8fb48) returned 0x0 [0201.159] NtSetInformationFile (FileHandle=0x19ac, IoStatusBlock=0x7f8fb40, FileInformation=0x7f8fb48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5610) returned 1 [0201.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c108) returned 1 [0201.382] FlushFileBuffers (hFile=0x19ac) returned 1 [0201.390] CloseHandle (hObject=0x19ac) returned 1 [0205.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7dda9b8 [0205.899] wcscpy (in: _Dest=0x7dda9b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\" [0205.899] wcscat (in: _Dest=0x7dda9b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\68814F-Readme.txt" [0205.899] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\68814f-readme.txt")) returned 0xffffffff [0205.899] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbf0 [0206.581] WriteFile (in: hFile=0xbf0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x7f8fb84, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x7f8fb84*=0x8b9, lpOverlapped=0x0) returned 1 [0210.453] CloseHandle (hObject=0xbf0) returned 1 [0215.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda9b8) returned 1 [0215.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65560) returned 1 Thread: id = 6526 os_tid = 0x1a80 [0191.697] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json")) returned 0x2020 [0195.176] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0198.206] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19a4 [0198.207] GetFileSizeEx (in: hFile=0x19a4, lpFileSize=0xb7cfe6c | out: lpFileSize=0xb7cfe6c*=279) returned 1 [0198.207] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x113, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.207] ReadFile (in: hFile=0x19a4, lpBuffer=0xb7cfe48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb7cfe58, lpOverlapped=0x0 | out: lpBuffer=0xb7cfe48*, lpNumberOfBytesRead=0xb7cfe58*=0x4, lpOverlapped=0x0) returned 1 [0198.214] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0198.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbb8 [0198.215] NtQuerySystemTime (in: CurrentTime=0xb7cfde0 | out: CurrentTime=0xb7cfde0*=132462177767928000) returned 0x0 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x36a0f6d9 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x7f71ec4a [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x230af3d3 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x3e6848aa [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x5e146046 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x54623907 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x48484c20 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x7864e6fb [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x5caedd68 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x7d082eca [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x4e19594c [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x5a3277d9 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x29b81529 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x25371f67 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x747e0b80 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x221908d6 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x256a6161 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x5feb2486 [0198.215] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x6ce8db13 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x1d95b7fb [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x19c3c2b6 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x621fca80 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x2b8bab85 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x29ac0284 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x347d3fe0 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x7a5db742 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x1d814926 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x74573c42 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x2ce739ed [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x702df063 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x47e814a2 [0198.216] RtlRandomEx (in: Seed=0xb7cfdd8 | out: Seed=0xb7cfdd8) returned 0x1cc518be [0198.226] ReadFile (in: hFile=0x19a4, lpBuffer=0x7d13fa8, nNumberOfBytesToRead=0x117, lpNumberOfBytesRead=0xb7cfdd4, lpOverlapped=0x0 | out: lpBuffer=0x7d13fa8*, lpNumberOfBytesRead=0xb7cfdd4*=0x117, lpOverlapped=0x0) returned 1 [0198.226] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.226] WriteFile (in: hFile=0x19a4, lpBuffer=0x7d17bb0*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0xb7cfdd8, lpOverlapped=0x0 | out: lpBuffer=0x7d17bb0*, lpNumberOfBytesWritten=0xb7cfdd8*=0x117, lpOverlapped=0x0) returned 1 [0200.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e532d8 [0200.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54278 [0200.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54278) returned 1 [0200.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d17bb0) returned 1 [0200.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d13fa8) returned 1 [0200.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c5b8) returned 1 [0200.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b847a0) returned 1 [0200.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e865a8 [0200.041] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.041] WriteFile (in: hFile=0x19a4, lpBuffer=0x7cbdb78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb7cfe60, lpOverlapped=0x0 | out: lpBuffer=0x7cbdb78*, lpNumberOfBytesWritten=0xb7cfe60*=0x10c, lpOverlapped=0x0) returned 1 [0200.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0200.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0200.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305cbd0 [0200.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb30 [0200.840] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0200.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0200.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.841] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.841] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="79") returned 2 [0200.841] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="94") returned 2 [0200.841] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.841] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="95") returned 2 [0200.841] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.841] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="cb") returned 2 [0200.841] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="d6") returned 2 [0200.841] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="71") returned 2 [0200.841] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="15") returned 2 [0200.841] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="df") returned 2 [0200.841] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="f7") returned 2 [0200.841] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="dd") returned 2 [0200.841] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="32") returned 2 [0200.841] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="e1") returned 2 [0200.841] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="88") returned 2 [0200.841] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="14") returned 2 [0200.841] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="05") returned 2 [0200.841] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="e5") returned 2 [0200.842] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="a4") returned 2 [0200.842] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="37") returned 2 [0200.842] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="8f") returned 2 [0200.842] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="2d") returned 2 [0200.842] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="bc") returned 2 [0200.842] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.842] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="d4") returned 2 [0200.842] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="c9") returned 2 [0200.842] RtlInitAnsiString (in: DestinationString=0xb7cfde8, SourceString="7994f795d4cbd67115dff7dd32e1881405e5a4378f2dbc1fd4c9" | out: DestinationString="7994f795d4cbd67115dff7dd32e1881405e5a4378f2dbc1fd4c9") [0200.842] RtlAnsiStringToUnicodeString (in: DestinationString=0xb7cfde0, SourceString="7994f795d4cbd67115dff7dd32e1881405e5a4378f2dbc1fd4c9", AllocateDestinationString=1 | out: DestinationString="7994f795d4cbd67115dff7dd32e1881405e5a4378f2dbc1fd4c9") returned 0x0 [0200.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cea0 [0200.842] wcscat (in: _Dest=0x7cd59b8, _Source="7994f795d4cbd" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\7994f795d4cbd") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\7994f795d4cbd" [0200.842] wcscat (in: _Dest=0x7cd59b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\7994f795d4cbd.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\7994f795d4cbd.68814f" [0200.842] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\7994f795d4cbd.68814f", NtPathName=0xb7cfdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\7994f795d4cbd.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.842] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd8b50 [0201.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8b50) returned 1 [0201.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd7810) returned 1 [0201.163] NtQueryInformationFile (in: FileHandle=0x19a4, IoStatusBlock=0xb7cfdb0, FileInformation=0xb7cfdb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb7cfdb0, FileInformation=0xb7cfdb8) returned 0x0 [0201.163] NtSetInformationFile (FileHandle=0x19a4, IoStatusBlock=0xb7cfdb0, FileInformation=0xb7cfdb8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd59b8) returned 1 [0201.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cea0) returned 1 [0201.392] FlushFileBuffers (hFile=0x19a4) returned 1 [0201.405] CloseHandle (hObject=0x19a4) returned 1 [0205.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7dda748 [0205.922] wcscpy (in: _Dest=0x7dda748, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\" [0205.922] wcscat (in: _Dest=0x7dda748, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\68814F-Readme.txt" [0205.922] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\68814f-readme.txt")) returned 0xffffffff [0205.922] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13bc [0206.587] WriteFile (in: hFile=0x13bc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb7cfdf4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb7cfdf4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.471] CloseHandle (hObject=0x13bc) returned 1 [0215.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda748) returned 1 [0215.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65688) returned 1 Thread: id = 6527 os_tid = 0x1a84 [0191.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css")) returned 0x20 [0191.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0191.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0191.699] GetLastError () returned 0x5 [0191.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0191.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8728) returned 1 Thread: id = 6528 os_tid = 0x192c [0191.700] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8728 [0191.700] wcscpy (in: _Dest=0x2c8728, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0191.700] wcscat (in: _Dest=0x2c8728, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\" [0191.701] wcscat (in: _Dest=0x2c8728, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*" [0191.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb39c0 [0191.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0202.611] wcscmp (_String1=".", _String2=".") returned 0 [0202.611] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.611] wcscmp (_String1="..", _String2=".") returned 1 [0202.611] wcscmp (_String1="..", _String2="..") returned 0 [0202.611] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0202.611] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0202.611] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0202.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae3e8 [0202.611] wcscpy (in: _Dest=0x3dae3e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0202.611] wcscat (in: _Dest=0x3dae3e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\" [0202.611] wcscat (in: _Dest=0x3dae3e8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" [0203.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae3e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c [0203.054] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0203.054] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0203.054] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0203.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0438 [0203.054] wcscpy (in: _Dest=0x3db0438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana" [0203.054] wcscat (in: _Dest=0x3db0438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\" [0203.055] wcscat (in: _Dest=0x3db0438, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" [0203.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0203.055] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x3eb39c0 | out: lpFindFileData=0x3eb39c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0203.056] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0203.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb39c0) returned 1 [0203.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8728) returned 1 [0203.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8b88) returned 1 Thread: id = 6529 os_tid = 0x1a88 [0191.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css")) returned 0x20 [0199.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0200.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.521] GetLastError () returned 0x5 [0201.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0201.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4700) returned 1 Thread: id = 6530 os_tid = 0x1a8c [0191.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c96e8 [0191.702] wcscpy (in: _Dest=0x2c96e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0191.703] wcscat (in: _Dest=0x2c96e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0191.703] wcscat (in: _Dest=0x2c96e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*" [0191.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb45c8 [0191.703] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0202.601] wcscmp (_String1=".", _String2=".") returned 0 [0202.601] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.601] wcscmp (_String1="..", _String2=".") returned 1 [0202.601] wcscmp (_String1="..", _String2="..") returned 0 [0202.601] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0202.601] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0202.601] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0202.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3daff88 [0202.601] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0202.601] wcscat (in: _Dest=0x3daff88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0202.601] wcscat (in: _Dest=0x3daff88, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" [0203.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3daff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0203.047] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0203.047] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0203.047] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0203.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3dafcb8 [0203.047] wcscpy (in: _Dest=0x3dafcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0203.047] wcscat (in: _Dest=0x3dafcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0203.047] wcscat (in: _Dest=0x3dafcb8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" [0203.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0203.049] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0203.049] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0203.049] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0203.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3dafda8 [0203.049] wcscpy (in: _Dest=0x3dafda8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0203.049] wcscat (in: _Dest=0x3dafda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0203.049] wcscat (in: _Dest=0x3dafda8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" [0203.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0203.050] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0203.050] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0203.050] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0203.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db0078 [0203.050] wcscpy (in: _Dest=0x3db0078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue" [0203.050] wcscat (in: _Dest=0x3db0078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\" [0203.051] wcscat (in: _Dest=0x3db0078, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" [0203.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0203.052] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x3eb45c8 | out: lpFindFileData=0x3eb45c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c73600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x24c73600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0203.052] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0203.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb45c8) returned 1 [0203.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c96e8) returned 1 [0203.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e688d0) returned 1 Thread: id = 6531 os_tid = 0x1a90 [0191.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css")) returned 0x20 [0201.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0201.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.524] GetLastError () returned 0x5 [0201.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0201.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 Thread: id = 6532 os_tid = 0x1a94 [0191.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68c30 [0191.704] wcscpy (in: _Dest=0x3e68c30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0191.704] wcscat (in: _Dest=0x3e68c30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\" [0191.704] wcscat (in: _Dest=0x3e68c30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*" [0191.704] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb0e70 [0191.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0199.499] wcscmp (_String1=".", _String2=".") returned 0 [0199.499] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.499] wcscmp (_String1="..", _String2=".") returned 1 [0199.500] wcscmp (_String1="..", _String2="..") returned 0 [0199.500] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0199.500] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0199.500] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0199.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db0258 [0199.500] wcscpy (in: _Dest=0x3db0258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0199.500] wcscat (in: _Dest=0x3db0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\" [0199.500] wcscat (in: _Dest=0x3db0258, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" [0201.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8 [0201.713] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.713] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.713] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0ac8 [0201.713] wcscpy (in: _Dest=0x3db0ac8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay" [0201.713] wcscat (in: _Dest=0x3db0ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\" [0201.713] wcscat (in: _Dest=0x3db0ac8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" [0201.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc [0201.714] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3eb0e70 | out: lpFindFileData=0x3eb0e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.714] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0201.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb0e70) returned 1 [0201.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68c30) returned 1 [0201.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b58) returned 1 Thread: id = 6533 os_tid = 0x1a98 [0191.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css")) returned 0x20 [0202.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0202.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.618] GetLastError () returned 0x5 [0202.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0202.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c90c8) returned 1 Thread: id = 6534 os_tid = 0x1a9c [0191.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4190 [0191.710] wcscpy (in: _Dest=0x3dc4190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0191.710] wcscat (in: _Dest=0x3dc4190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0191.710] wcscat (in: _Dest=0x3dc4190, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*" [0191.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb34f0 [0191.711] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0202.610] wcscmp (_String1=".", _String2=".") returned 0 [0202.610] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.610] wcscmp (_String1="..", _String2=".") returned 1 [0202.610] wcscmp (_String1="..", _String2="..") returned 0 [0202.610] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0202.610] wcscmp (_String1="background.gif", _String2=".") returned 1 [0202.610] wcscmp (_String1="background.gif", _String2="..") returned 1 [0202.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de8eb8 [0202.610] wcscpy (in: _Dest=0x3de8eb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0202.610] wcscat (in: _Dest=0x3de8eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0202.610] wcscat (in: _Dest=0x3de8eb8, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" [0203.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de8eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0 [0203.095] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button.gif", cAlternateFileName="")) returned 1 [0203.095] wcscmp (_String1="button.gif", _String2=".") returned 1 [0203.095] wcscmp (_String1="button.gif", _String2="..") returned 1 [0203.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae2f0 [0203.096] wcscpy (in: _Dest=0x3dae2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0203.096] wcscat (in: _Dest=0x3dae2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0203.096] wcscat (in: _Dest=0x3dae2f0, _Source="button.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" [0203.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c [0203.097] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0203.097] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0203.097] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0203.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dadf10 [0203.097] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0203.097] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0203.097] wcscat (in: _Dest=0x3dadf10, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" [0203.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0 [0203.098] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0203.098] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0203.098] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0203.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dad468 [0203.098] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange" [0203.099] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\" [0203.099] wcscat (in: _Dest=0x3dad468, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" [0203.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dad468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0203.100] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3eb34f0 | out: lpFindFileData=0x3eb34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77d9be50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0203.100] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0203.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb34f0) returned 1 [0203.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 [0203.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8c68) returned 1 Thread: id = 6535 os_tid = 0x1aa0 [0191.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css")) returned 0x20 [0200.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0200.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.518] GetLastError () returned 0x5 [0201.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0201.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc47e8) returned 1 Thread: id = 6536 os_tid = 0x1950 [0191.711] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc3ed8 [0191.711] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0191.711] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0191.711] wcscat (in: _Dest=0x3dc3ed8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*" [0191.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb2b50 [0191.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0202.609] wcscmp (_String1=".", _String2=".") returned 0 [0202.609] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77d9be50, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8840b7d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.609] wcscmp (_String1="..", _String2=".") returned 1 [0202.609] wcscmp (_String1="..", _String2="..") returned 0 [0202.609] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0202.609] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0202.609] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0202.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadc28 [0202.609] wcscpy (in: _Dest=0x3dadc28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0202.609] wcscat (in: _Dest=0x3dadc28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0202.609] wcscat (in: _Dest=0x3dadc28, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" [0203.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68 [0203.062] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0203.062] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0203.062] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0203.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dadd20 [0203.062] wcscpy (in: _Dest=0x3dadd20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0203.062] wcscat (in: _Dest=0x3dadd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0203.062] wcscat (in: _Dest=0x3dadd20, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" [0203.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0203.063] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0203.063] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0203.063] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0203.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadb30 [0203.063] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow" [0203.063] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\" [0203.063] wcscat (in: _Dest=0x3dadb30, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" [0203.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0203.064] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3eb2b50 | out: lpFindFileData=0x3eb2b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f86300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8840b7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x25f86300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0203.064] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0203.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb2b50) returned 1 [0203.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 [0203.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c88e8) returned 1 Thread: id = 6537 os_tid = 0x1aa8 [0191.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css")) returned 0x20 [0202.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0202.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.606] GetLastError () returned 0x5 [0202.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0202.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4e40) returned 1 Thread: id = 6538 os_tid = 0x1aac [0191.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css")) returned 0x20 [0202.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0202.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.616] GetLastError () returned 0x5 [0202.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0202.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 Thread: id = 6539 os_tid = 0x1ab0 [0191.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css")) returned 0x20 [0202.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0202.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.614] GetLastError () returned 0x5 [0202.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0202.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8488) returned 1 Thread: id = 6540 os_tid = 0x1ab4 [0191.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e68a80 [0191.715] wcscpy (in: _Dest=0x3e68a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0191.715] wcscat (in: _Dest=0x3e68a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0191.715] wcscat (in: _Dest=0x3e68a80, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*" [0191.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb40f8 [0191.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0199.501] wcscmp (_String1=".", _String2=".") returned 0 [0199.501] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.501] wcscmp (_String1="..", _String2=".") returned 1 [0199.501] wcscmp (_String1="..", _String2="..") returned 0 [0199.501] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0199.501] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0199.501] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0199.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0618 [0199.501] wcscpy (in: _Dest=0x3db0618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0199.501] wcscat (in: _Dest=0x3db0618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0199.501] wcscat (in: _Dest=0x3db0618, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" [0201.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c [0201.789] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0201.789] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0201.789] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0201.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3db09d8 [0201.789] wcscpy (in: _Dest=0x3db09d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0201.789] wcscat (in: _Dest=0x3db09d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0201.789] wcscat (in: _Dest=0x3db09d8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" [0201.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db09d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1898 [0201.790] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.790] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.790] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0e88 [0201.790] wcscpy (in: _Dest=0x3db0e88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert" [0201.790] wcscat (in: _Dest=0x3db0e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\" [0201.790] wcscat (in: _Dest=0x3db0e88, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" [0201.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4 [0201.791] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x3eb40f8 | out: lpFindFileData=0x3eb40f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.791] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0201.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb40f8) returned 1 [0201.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a80) returned 1 [0201.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 Thread: id = 6541 os_tid = 0x1ab8 [0191.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css")) returned 0x20 [0199.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0200.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.521] GetLastError () returned 0x5 [0201.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0201.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c91a8) returned 1 Thread: id = 6542 os_tid = 0x1abc [0191.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css")) returned 0x20 [0199.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0200.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.521] GetLastError () returned 0x5 [0201.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0202.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8f08) returned 1 Thread: id = 6543 os_tid = 0x1ac0 [0191.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c9608 [0191.716] wcscpy (in: _Dest=0x2c9608, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0191.716] wcscat (in: _Dest=0x2c9608, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0191.716] wcscat (in: _Dest=0x2c9608, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*" [0191.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a70808 [0191.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x7a70808 | out: lpFindFileData=0x7a70808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d5c0 [0202.603] wcscmp (_String1=".", _String2=".") returned 0 [0202.603] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x7a70808 | out: lpFindFileData=0x7a70808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.603] wcscmp (_String1="..", _String2=".") returned 1 [0202.603] wcscmp (_String1="..", _String2="..") returned 0 [0202.603] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x7a70808 | out: lpFindFileData=0x7a70808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0202.603] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0202.604] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0202.604] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3daf178 [0202.604] wcscpy (in: _Dest=0x3daf178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0202.604] wcscat (in: _Dest=0x3daf178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0202.604] wcscat (in: _Dest=0x3daf178, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" [0203.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3daf178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484 [0203.067] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x7a70808 | out: lpFindFileData=0x7a70808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0203.067] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0203.068] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0203.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae1f8 [0203.068] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0203.068] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0203.068] wcscat (in: _Dest=0x3dae1f8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" [0203.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1968 [0203.069] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x7a70808 | out: lpFindFileData=0x7a70808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0203.069] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0203.069] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0203.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0348 [0203.070] wcscpy (in: _Dest=0x3db0348, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck" [0203.070] wcscat (in: _Dest=0x3db0348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\" [0203.070] wcscat (in: _Dest=0x3db0348, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" [0203.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474 [0203.071] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x7a70808 | out: lpFindFileData=0x7a70808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0203.071] FindClose (in: hFindFile=0x7a2d5c0 | out: hFindFile=0x7a2d5c0) returned 1 [0203.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a70808) returned 1 [0203.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9608) returned 1 [0203.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9448) returned 1 Thread: id = 6544 os_tid = 0x1ac4 [0191.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css")) returned 0x20 [0199.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0200.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.604] GetLastError () returned 0x5 [0202.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0202.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3fc0) returned 1 Thread: id = 6545 os_tid = 0x1ac8 [0191.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css")) returned 0x20 [0199.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0200.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.602] GetLastError () returned 0x5 [0202.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0202.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8d48) returned 1 Thread: id = 6546 os_tid = 0x1acc [0191.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css")) returned 0x20 [0199.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0199.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.599] GetLastError () returned 0x5 [0202.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0202.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc5010) returned 1 Thread: id = 6547 os_tid = 0x1ad0 [0191.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e682e8 [0191.717] wcscpy (in: _Dest=0x3e682e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0191.717] wcscat (in: _Dest=0x3e682e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\" [0191.717] wcscat (in: _Dest=0x3e682e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*" [0191.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a6d0b0 [0191.717] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x7a6d0b0 | out: lpFindFileData=0x7a6d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0199.502] wcscmp (_String1=".", _String2=".") returned 0 [0199.502] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a6d0b0 | out: lpFindFileData=0x7a6d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.503] wcscmp (_String1="..", _String2=".") returned 1 [0199.503] wcscmp (_String1="..", _String2="..") returned 0 [0199.503] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a6d0b0 | out: lpFindFileData=0x7a6d0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27299000, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x27299000, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0199.503] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0199.503] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0199.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4448 [0199.503] wcscpy (in: _Dest=0x3dc4448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0199.503] wcscat (in: _Dest=0x3dc4448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\" [0199.503] wcscat (in: _Dest=0x3dc4448, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" [0201.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8 [0201.716] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a6d0b0 | out: lpFindFileData=0x7a6d0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.716] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.716] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc47e8 [0201.716] wcscpy (in: _Dest=0x3dc47e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime" [0201.716] wcscat (in: _Dest=0x3dc47e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\" [0201.716] wcscat (in: _Dest=0x3dc47e8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" [0201.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc47e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c [0201.717] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x7a6d0b0 | out: lpFindFileData=0x7a6d0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.717] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0201.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6d0b0) returned 1 [0201.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682e8) returned 1 [0201.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ee0) returned 1 Thread: id = 6548 os_tid = 0x1ad4 [0191.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css")) returned 0x20 [0199.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0200.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.597] GetLastError () returned 0x5 [0202.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0202.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 Thread: id = 6549 os_tid = 0x1adc [0191.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css")) returned 0x20 [0202.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0202.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.612] GetLastError () returned 0x5 [0202.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0202.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8e28) returned 1 Thread: id = 6550 os_tid = 0x1ae0 [0191.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e382c0 [0191.718] wcscpy (in: _Dest=0x3e382c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0191.718] wcscat (in: _Dest=0x3e382c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0191.718] wcscat (in: _Dest=0x3e382c0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*" [0191.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58968 [0191.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d5c0 [0199.504] wcscmp (_String1=".", _String2=".") returned 0 [0199.504] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.504] wcscmp (_String1="..", _String2=".") returned 1 [0199.504] wcscmp (_String1="..", _String2="..") returned 0 [0199.504] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0199.504] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0199.504] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0199.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4618 [0199.504] wcscpy (in: _Dest=0x3dc4618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0199.504] wcscat (in: _Dest=0x3dc4618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0199.504] wcscat (in: _Dest=0x3dc4618, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" [0201.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30 [0201.871] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0201.871] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0201.871] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0201.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3dafe98 [0201.871] wcscpy (in: _Dest=0x3dafe98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0201.871] wcscat (in: _Dest=0x3dafe98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0201.871] wcscat (in: _Dest=0x3dafe98, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" [0201.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafe98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550 [0201.872] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.872] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.872] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3d08 [0201.872] wcscpy (in: _Dest=0x3dc3d08, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis" [0201.872] wcscat (in: _Dest=0x3dc3d08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\" [0201.872] wcscat (in: _Dest=0x3dc3d08, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" [0201.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1920 [0201.874] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3d58968 | out: lpFindFileData=0x3d58968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.875] FindClose (in: hFindFile=0x7a2d5c0 | out: hFindFile=0x7a2d5c0) returned 1 [0201.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58968) returned 1 [0201.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e382c0) returned 1 [0201.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68de0) returned 1 Thread: id = 6551 os_tid = 0x1d48 [0191.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css")) returned 0x20 [0195.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0197.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.514] GetLastError () returned 0x5 [0201.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0201.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9288) returned 1 Thread: id = 6552 os_tid = 0x1d4c [0191.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css")) returned 0x20 [0195.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0198.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.516] GetLastError () returned 0x5 [0201.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0201.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4f28) returned 1 Thread: id = 6553 os_tid = 0x1d50 [0192.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css")) returned 0x20 [0201.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0201.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.902] GetLastError () returned 0x5 [0201.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0201.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8fe8) returned 1 Thread: id = 6554 os_tid = 0x1d54 [0192.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc")) returned 0x20 [0192.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", dwFileAttributes=0x20) returned 0 [0192.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.166] GetLastError () returned 0x5 [0192.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC", dwFileAttributes=0x20) returned 0 [0192.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69cb8) returned 1 Thread: id = 6555 os_tid = 0x1d58 [0192.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt")) returned 0x20 [0192.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", dwFileAttributes=0x20) returned 0 [0192.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.171] GetLastError () returned 0x5 [0192.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT", dwFileAttributes=0x20) returned 0 [0192.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a10) returned 1 Thread: id = 6556 os_tid = 0x1d60 [0192.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls")) returned 0x20 [0192.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", dwFileAttributes=0x20) returned 0 [0192.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.174] GetLastError () returned 0x5 [0192.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS", dwFileAttributes=0x20) returned 0 [0192.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68e60) returned 1 Thread: id = 6557 os_tid = 0x1d6c [0192.176] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat")) returned 0x20 [0192.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", dwFileAttributes=0x20) returned 0 [0192.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.176] GetLastError () returned 0x5 [0192.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT", dwFileAttributes=0x20) returned 0 [0192.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a694c0) returned 1 Thread: id = 6558 os_tid = 0x1d70 [0192.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat")) returned 0x20 [0192.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", dwFileAttributes=0x20) returned 0 [0192.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0192.179] GetLastError () returned 0x5 [0192.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT", dwFileAttributes=0x20) returned 0 [0192.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68b30) returned 1 Thread: id = 6559 os_tid = 0x1d74 [0192.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat")) returned 0x20 [0202.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", dwFileAttributes=0x20) returned 0 [0203.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.152] GetLastError () returned 0x5 [0203.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT", dwFileAttributes=0x20) returned 0 [0203.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68c40) returned 1 Thread: id = 6560 os_tid = 0x1d78 [0192.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat")) returned 0x20 [0204.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", dwFileAttributes=0x20) returned 0 [0204.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.441] GetLastError () returned 0x5 [0204.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT", dwFileAttributes=0x20) returned 0 [0204.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a682b0) returned 1 Thread: id = 6561 os_tid = 0x1d7c [0192.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat")) returned 0x20 [0204.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", dwFileAttributes=0x20) returned 0 [0204.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.661] GetLastError () returned 0x5 [0204.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT", dwFileAttributes=0x20) returned 0 [0204.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 Thread: id = 6562 os_tid = 0x1d80 [0192.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll")) returned 0x20 [0199.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0200.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.273] GetLastError () returned 0x5 [0204.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0204.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 6563 os_tid = 0x1d84 [0192.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll")) returned 0x20 [0199.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0199.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.276] GetLastError () returned 0x5 [0204.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0204.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 6564 os_tid = 0x1b60 [0192.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm")) returned 0x20 [0204.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", dwFileAttributes=0x20) returned 0 [0204.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.655] GetLastError () returned 0x5 [0204.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM", dwFileAttributes=0x20) returned 0 [0204.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a695d0) returned 1 Thread: id = 6565 os_tid = 0x1dd4 [0192.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e1a218 [0192.187] wcscpy (in: _Dest=0x3e1a218, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0192.187] wcscat (in: _Dest=0x3e1a218, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0192.187] wcscat (in: _Dest=0x3e1a218, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*" [0192.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3eb21b0 [0192.187] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x620741b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62347bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d5c0 [0203.213] wcscmp (_String1=".", _String2=".") returned 0 [0203.213] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x620741b0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x62347bd0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.620] wcscmp (_String1="..", _String2=".") returned 1 [0206.620] wcscmp (_String1="..", _String2="..") returned 0 [0206.620] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd157c700, ftCreationTime.dwHighDateTime=0x1ca66cd, ftLastAccessTime.dwLowDateTime=0x620741b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xd157c700, ftLastWriteTime.dwHighDateTime=0x1ca66cd, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0206.620] wcscmp (_String1="FONTSCHM.INI", _String2=".") returned 1 [0206.620] wcscmp (_String1="FONTSCHM.INI", _String2="..") returned 1 [0206.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d2d8 [0206.621] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.621] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.621] wcscat (in: _Dest=0x32d2d8, _Source="FONTSCHM.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" [0206.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298 [0206.737] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcce2900, ftCreationTime.dwHighDateTime=0x1ca15db, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdcce2900, ftLastWriteTime.dwHighDateTime=0x1ca15db, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0206.737] wcscmp (_String1="SCHEME01.CSS", _String2=".") returned 1 [0206.737] wcscmp (_String1="SCHEME01.CSS", _String2="..") returned 1 [0206.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ca88 [0206.737] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.737] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.737] wcscat (in: _Dest=0x32ca88, _Source="SCHEME01.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" [0206.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24 [0206.738] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cb8700, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc0cb8700, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0206.738] wcscmp (_String1="SCHEME02.CSS", _String2=".") returned 1 [0206.738] wcscmp (_String1="SCHEME02.CSS", _String2="..") returned 1 [0206.738] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ceb0 [0206.739] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.739] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.739] wcscat (in: _Dest=0x32ceb0, _Source="SCHEME02.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" [0206.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034 [0206.740] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf9a5a00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbf9a5a00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0206.740] wcscmp (_String1="SCHEME03.CSS", _String2=".") returned 1 [0206.740] wcscmp (_String1="SCHEME03.CSS", _String2="..") returned 1 [0206.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0206.741] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.741] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.741] wcscat (in: _Dest=0x32d408, _Source="SCHEME03.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" [0206.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c [0206.742] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe692d00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbe692d00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0206.742] wcscmp (_String1="SCHEME04.CSS", _String2=".") returned 1 [0206.742] wcscmp (_String1="SCHEME04.CSS", _String2="..") returned 1 [0206.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d538 [0206.742] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.742] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.742] wcscat (in: _Dest=0x32d538, _Source="SCHEME04.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" [0206.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4 [0206.743] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd380000, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbd380000, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0206.743] wcscmp (_String1="SCHEME05.CSS", _String2=".") returned 1 [0206.743] wcscmp (_String1="SCHEME05.CSS", _String2="..") returned 1 [0206.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d5d0 [0206.743] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.743] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.743] wcscat (in: _Dest=0x32d5d0, _Source="SCHEME05.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" [0206.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708 [0206.744] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd380000, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbd380000, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0206.745] wcscmp (_String1="SCHEME06.CSS", _String2=".") returned 1 [0206.745] wcscmp (_String1="SCHEME06.CSS", _String2="..") returned 1 [0206.745] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cb20 [0206.745] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.745] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.745] wcscat (in: _Dest=0x32cb20, _Source="SCHEME06.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" [0206.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0206.746] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc06d300, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbc06d300, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0206.746] wcscmp (_String1="SCHEME07.CSS", _String2=".") returned 1 [0206.746] wcscmp (_String1="SCHEME07.CSS", _String2="..") returned 1 [0206.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cce8 [0206.746] wcscpy (in: _Dest=0x32cce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.746] wcscat (in: _Dest=0x32cce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.746] wcscat (in: _Dest=0x32cce8, _Source="SCHEME07.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" [0206.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0206.747] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad5a600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbad5a600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0206.747] wcscmp (_String1="SCHEME08.CSS", _String2=".") returned 1 [0206.747] wcscmp (_String1="SCHEME08.CSS", _String2="..") returned 1 [0206.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d240 [0206.747] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.747] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.747] wcscat (in: _Dest=0x32d240, _Source="SCHEME08.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" [0206.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0206.748] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad5a600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xbad5a600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0206.748] wcscmp (_String1="SCHEME09.CSS", _String2=".") returned 1 [0206.748] wcscmp (_String1="SCHEME09.CSS", _String2="..") returned 1 [0206.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0206.749] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.749] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.749] wcscat (in: _Dest=0x32b820, _Source="SCHEME09.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" [0206.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28 [0206.750] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8734c00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622af650, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb8734c00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0206.750] wcscmp (_String1="SCHEME10.CSS", _String2=".") returned 1 [0206.750] wcscmp (_String1="SCHEME10.CSS", _String2="..") returned 1 [0206.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c660 [0206.750] wcscpy (in: _Dest=0x32c660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.750] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.750] wcscat (in: _Dest=0x32c660, _Source="SCHEME10.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" [0206.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac8 [0206.751] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7421f00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb7421f00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0206.751] wcscmp (_String1="SCHEME11.CSS", _String2=".") returned 1 [0206.751] wcscmp (_String1="SCHEME11.CSS", _String2="..") returned 1 [0206.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb64d8 [0206.751] wcscpy (in: _Dest=0x3eb64d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.751] wcscat (in: _Dest=0x3eb64d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.751] wcscat (in: _Dest=0x3eb64d8, _Source="SCHEME11.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" [0206.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb64d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c [0206.752] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb610f200, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb610f200, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0206.752] wcscmp (_String1="SCHEME12.CSS", _String2=".") returned 1 [0206.752] wcscmp (_String1="SCHEME12.CSS", _String2="..") returned 1 [0206.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5860 [0206.752] wcscpy (in: _Dest=0x3eb5860, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.752] wcscat (in: _Dest=0x3eb5860, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.752] wcscat (in: _Dest=0x3eb5860, _Source="SCHEME12.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" [0206.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48 [0206.757] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4dfc500, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4dfc500, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0206.757] wcscmp (_String1="SCHEME13.CSS", _String2=".") returned 1 [0206.757] wcscmp (_String1="SCHEME13.CSS", _String2="..") returned 1 [0206.757] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5d20 [0206.757] wcscpy (in: _Dest=0x3eb5d20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.757] wcscat (in: _Dest=0x3eb5d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.757] wcscat (in: _Dest=0x3eb5d20, _Source="SCHEME13.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" [0206.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15fc [0206.758] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4dfc500, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb4dfc500, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0206.758] wcscmp (_String1="SCHEME14.CSS", _String2=".") returned 1 [0206.758] wcscmp (_String1="SCHEME14.CSS", _String2="..") returned 1 [0206.758] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7150 [0206.758] wcscpy (in: _Dest=0x3eb7150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.758] wcscat (in: _Dest=0x3eb7150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.758] wcscat (in: _Dest=0x3eb7150, _Source="SCHEME14.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" [0206.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678 [0206.759] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ae9800, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb3ae9800, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0206.759] wcscmp (_String1="SCHEME15.CSS", _String2=".") returned 1 [0206.759] wcscmp (_String1="SCHEME15.CSS", _String2="..") returned 1 [0206.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6900 [0206.760] wcscpy (in: _Dest=0x3eb6900, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.760] wcscat (in: _Dest=0x3eb6900, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.760] wcscat (in: _Dest=0x3eb6900, _Source="SCHEME15.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" [0206.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2464 [0206.761] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27d6b00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb27d6b00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0206.761] wcscmp (_String1="SCHEME16.CSS", _String2=".") returned 1 [0206.761] wcscmp (_String1="SCHEME16.CSS", _String2="..") returned 1 [0206.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb73b0 [0206.761] wcscpy (in: _Dest=0x3eb73b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.761] wcscat (in: _Dest=0x3eb73b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.761] wcscat (in: _Dest=0x3eb73b0, _Source="SCHEME16.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" [0206.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb73b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0 [0206.762] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14c3e00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb14c3e00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0206.762] wcscmp (_String1="SCHEME17.CSS", _String2=".") returned 1 [0206.762] wcscmp (_String1="SCHEME17.CSS", _String2="..") returned 1 [0206.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb7280 [0206.762] wcscpy (in: _Dest=0x3eb7280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.762] wcscat (in: _Dest=0x3eb7280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.762] wcscat (in: _Dest=0x3eb7280, _Source="SCHEME17.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" [0206.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38 [0206.763] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb01b1100, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb01b1100, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0206.763] wcscmp (_String1="SCHEME18.CSS", _String2=".") returned 1 [0206.763] wcscmp (_String1="SCHEME18.CSS", _String2="..") returned 1 [0206.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb71e8 [0206.763] wcscpy (in: _Dest=0x3eb71e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.763] wcscat (in: _Dest=0x3eb71e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.763] wcscat (in: _Dest=0x3eb71e8, _Source="SCHEME18.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" [0206.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb71e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0206.764] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaee9e400, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaee9e400, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0206.764] wcscmp (_String1="SCHEME19.CSS", _String2=".") returned 1 [0206.764] wcscmp (_String1="SCHEME19.CSS", _String2="..") returned 1 [0206.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6f88 [0206.765] wcscpy (in: _Dest=0x3eb6f88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.765] wcscat (in: _Dest=0x3eb6f88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.765] wcscat (in: _Dest=0x3eb6f88, _Source="SCHEME19.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" [0206.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0206.766] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb8b700, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xadb8b700, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0206.766] wcscmp (_String1="SCHEME20.CSS", _String2=".") returned 1 [0206.766] wcscmp (_String1="SCHEME20.CSS", _String2="..") returned 1 [0206.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb70b8 [0206.766] wcscpy (in: _Dest=0x3eb70b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.766] wcscat (in: _Dest=0x3eb70b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.766] wcscat (in: _Dest=0x3eb70b8, _Source="SCHEME20.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" [0206.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb70b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0206.767] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac878a00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xac878a00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0206.767] wcscmp (_String1="SCHEME21.CSS", _String2=".") returned 1 [0206.767] wcscmp (_String1="SCHEME21.CSS", _String2="..") returned 1 [0206.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5db8 [0206.767] wcscpy (in: _Dest=0x3eb5db8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.767] wcscat (in: _Dest=0x3eb5db8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.767] wcscat (in: _Dest=0x3eb5db8, _Source="SCHEME21.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" [0206.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0206.768] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa253000, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622d57b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xaa253000, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0206.768] wcscmp (_String1="SCHEME22.CSS", _String2=".") returned 1 [0206.768] wcscmp (_String1="SCHEME22.CSS", _String2="..") returned 1 [0206.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5bf0 [0206.768] wcscpy (in: _Dest=0x3eb5bf0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.768] wcscat (in: _Dest=0x3eb5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.768] wcscat (in: _Dest=0x3eb5bf0, _Source="SCHEME22.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" [0206.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0206.769] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f40300, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa8f40300, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0206.769] wcscmp (_String1="SCHEME23.CSS", _String2=".") returned 1 [0206.770] wcscmp (_String1="SCHEME23.CSS", _String2="..") returned 1 [0206.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5e50 [0206.770] wcscpy (in: _Dest=0x3eb5e50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.770] wcscat (in: _Dest=0x3eb5e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.770] wcscat (in: _Dest=0x3eb5e50, _Source="SCHEME23.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" [0206.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc [0206.783] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7c2d600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa7c2d600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0206.783] wcscmp (_String1="SCHEME24.CSS", _String2=".") returned 1 [0206.783] wcscmp (_String1="SCHEME24.CSS", _String2="..") returned 1 [0206.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb57c8 [0206.783] wcscpy (in: _Dest=0x3eb57c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.783] wcscat (in: _Dest=0x3eb57c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.783] wcscat (in: _Dest=0x3eb57c8, _Source="SCHEME24.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" [0206.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb57c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00 [0206.784] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa691a900, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa691a900, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0206.784] wcscmp (_String1="SCHEME25.CSS", _String2=".") returned 1 [0206.784] wcscmp (_String1="SCHEME25.CSS", _String2="..") returned 1 [0206.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb6018 [0206.785] wcscpy (in: _Dest=0x3eb6018, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.785] wcscat (in: _Dest=0x3eb6018, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.785] wcscat (in: _Dest=0x3eb6018, _Source="SCHEME25.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" [0206.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6018, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c [0206.786] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa691a900, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa691a900, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0206.786] wcscmp (_String1="SCHEME26.CSS", _String2=".") returned 1 [0206.786] wcscmp (_String1="SCHEME26.CSS", _String2="..") returned 1 [0206.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5f80 [0206.786] wcscpy (in: _Dest=0x3eb5f80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.786] wcscat (in: _Dest=0x3eb5f80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.786] wcscat (in: _Dest=0x3eb5f80, _Source="SCHEME26.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" [0206.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23f8 [0206.787] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42f4f00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa42f4f00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0206.787] wcscmp (_String1="SCHEME27.CSS", _String2=".") returned 1 [0206.787] wcscmp (_String1="SCHEME27.CSS", _String2="..") returned 1 [0206.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb60b0 [0206.787] wcscpy (in: _Dest=0x3eb60b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.787] wcscat (in: _Dest=0x3eb60b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.787] wcscat (in: _Dest=0x3eb60b0, _Source="SCHEME27.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" [0206.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb60b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c [0206.788] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42f4f00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa42f4f00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0206.788] wcscmp (_String1="SCHEME28.CSS", _String2=".") returned 1 [0206.788] wcscmp (_String1="SCHEME28.CSS", _String2="..") returned 1 [0206.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb61e0 [0206.789] wcscpy (in: _Dest=0x3eb61e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0206.789] wcscat (in: _Dest=0x3eb61e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0206.789] wcscat (in: _Dest=0x3eb61e0, _Source="SCHEME28.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" [0206.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb61e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0207.672] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa09bc800, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa09bc800, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0207.672] wcscmp (_String1="SCHEME29.CSS", _String2=".") returned 1 [0207.672] wcscmp (_String1="SCHEME29.CSS", _String2="..") returned 1 [0207.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x3eb5990 [0207.673] wcscpy (in: _Dest=0x3eb5990, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0207.673] wcscat (in: _Dest=0x3eb5990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0207.673] wcscat (in: _Dest=0x3eb5990, _Source="SCHEME29.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" [0210.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0210.632] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6a9b00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9f6a9b00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0210.633] wcscmp (_String1="SCHEME30.CSS", _String2=".") returned 1 [0210.633] wcscmp (_String1="SCHEME30.CSS", _String2="..") returned 1 [0210.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d668 [0210.633] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0210.633] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0210.633] wcscat (in: _Dest=0x32d668, _Source="SCHEME30.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" [0210.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0210.634] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b00600, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x94b00600, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0210.635] wcscmp (_String1="SCHEME31.CSS", _String2=".") returned 1 [0210.635] wcscmp (_String1="SCHEME31.CSS", _String2="..") returned 1 [0210.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0280 [0210.635] wcscpy (in: _Dest=0x7cc0280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0210.635] wcscat (in: _Dest=0x7cc0280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0210.635] wcscat (in: _Dest=0x7cc0280, _Source="SCHEME31.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" [0210.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0210.636] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9974ba00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9974ba00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1 [0210.636] wcscmp (_String1="SCHEME32.CSS", _String2=".") returned 1 [0210.636] wcscmp (_String1="SCHEME32.CSS", _String2="..") returned 1 [0210.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0318 [0210.637] wcscpy (in: _Dest=0x7cc0318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0210.637] wcscat (in: _Dest=0x7cc0318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0210.637] wcscat (in: _Dest=0x7cc0318, _Source="SCHEME32.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" [0210.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0210.638] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3daa3100, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3daa3100, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1 [0212.974] wcscmp (_String1="SCHEME33.CSS", _String2=".") returned 1 [0212.974] wcscmp (_String1="SCHEME33.CSS", _String2="..") returned 1 [0212.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc09a0 [0212.974] wcscpy (in: _Dest=0x7cc09a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0212.974] wcscat (in: _Dest=0x7cc09a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0212.974] wcscat (in: _Dest=0x7cc09a0, _Source="SCHEME33.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" [0216.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc09a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4 [0216.031] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3420c900, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x622fb910, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3420c900, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1 [0216.031] wcscmp (_String1="SCHEME34.CSS", _String2=".") returned 1 [0216.031] wcscmp (_String1="SCHEME34.CSS", _String2="..") returned 1 [0216.031] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0216.031] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.031] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.031] wcscat (in: _Dest=0x32cc50, _Source="SCHEME34.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" [0216.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0 [0216.033] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1219a100, ftCreationTime.dwHighDateTime=0x1c69ab7, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x1219a100, ftLastWriteTime.dwHighDateTime=0x1c69ab7, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1 [0216.033] wcscmp (_String1="SCHEME35.CSS", _String2=".") returned 1 [0216.033] wcscmp (_String1="SCHEME35.CSS", _String2="..") returned 1 [0216.033] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d110 [0216.033] wcscpy (in: _Dest=0x32d110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.033] wcscat (in: _Dest=0x32d110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.033] wcscat (in: _Dest=0x32d110, _Source="SCHEME35.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" [0216.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0216.034] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29663400, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x29663400, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1 [0216.034] wcscmp (_String1="SCHEME36.CSS", _String2=".") returned 1 [0216.034] wcscmp (_String1="SCHEME36.CSS", _String2="..") returned 1 [0216.034] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d078 [0216.034] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.034] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.034] wcscat (in: _Dest=0x32d078, _Source="SCHEME36.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" [0216.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0216.035] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0083f00, ftCreationTime.dwHighDateTime=0x1c69ab6, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xe0083f00, ftLastWriteTime.dwHighDateTime=0x1c69ab6, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1 [0216.035] wcscmp (_String1="SCHEME37.CSS", _String2=".") returned 1 [0216.035] wcscmp (_String1="SCHEME37.CSS", _String2="..") returned 1 [0216.035] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ca88 [0216.035] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.035] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.035] wcscat (in: _Dest=0x32ca88, _Source="SCHEME37.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" [0216.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0216.036] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b5be00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x18b5be00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1 [0216.037] wcscmp (_String1="SCHEME38.CSS", _String2=".") returned 1 [0216.037] wcscmp (_String1="SCHEME38.CSS", _String2="..") returned 1 [0216.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d2d8 [0216.037] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.037] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.037] wcscat (in: _Dest=0x32d2d8, _Source="SCHEME38.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" [0216.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0216.038] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67a200, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa67a200, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1 [0216.038] wcscmp (_String1="SCHEME39.CSS", _String2=".") returned 1 [0216.038] wcscmp (_String1="SCHEME39.CSS", _String2="..") returned 1 [0216.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d538 [0216.038] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.038] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.038] wcscat (in: _Dest=0x32d538, _Source="SCHEME39.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" [0216.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0216.039] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f6700, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x20f6700, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1 [0216.039] wcscmp (_String1="SCHEME40.CSS", _String2=".") returned 1 [0216.039] wcscmp (_String1="SCHEME40.CSS", _String2="..") returned 1 [0216.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d5d0 [0216.039] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.039] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.039] wcscat (in: _Dest=0x32d5d0, _Source="SCHEME40.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" [0216.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0216.040] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf754d200, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xf754d200, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1 [0216.040] wcscmp (_String1="SCHEME41.CSS", _String2=".") returned 1 [0216.040] wcscmp (_String1="SCHEME41.CSS", _String2="..") returned 1 [0216.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cb20 [0216.040] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.040] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.041] wcscat (in: _Dest=0x32cb20, _Source="SCHEME41.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" [0216.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0216.042] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb691000, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xeb691000, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1 [0216.042] wcscmp (_String1="SCHEME42.CSS", _String2=".") returned 1 [0216.042] wcscmp (_String1="SCHEME42.CSS", _String2="..") returned 1 [0216.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cce8 [0216.042] wcscpy (in: _Dest=0x32cce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.042] wcscat (in: _Dest=0x32cce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.042] wcscat (in: _Dest=0x32cce8, _Source="SCHEME42.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" [0216.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0216.043] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1af400, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xdd1af400, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1 [0216.043] wcscmp (_String1="SCHEME43.CSS", _String2=".") returned 1 [0216.043] wcscmp (_String1="SCHEME43.CSS", _String2="..") returned 1 [0216.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d240 [0216.043] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.043] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.043] wcscat (in: _Dest=0x32d240, _Source="SCHEME43.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" [0216.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0216.044] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6a7e00, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xcc6a7e00, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1 [0216.044] wcscmp (_String1="SCHEME44.CSS", _String2=".") returned 1 [0216.044] wcscmp (_String1="SCHEME44.CSS", _String2="..") returned 1 [0216.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32b820 [0216.044] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.044] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.044] wcscat (in: _Dest=0x32b820, _Source="SCHEME44.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" [0216.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0216.045] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1afe900, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc1afe900, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1 [0216.045] wcscmp (_String1="SCHEME45.CSS", _String2=".") returned 1 [0216.045] wcscmp (_String1="SCHEME45.CSS", _String2="..") returned 1 [0216.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c660 [0216.046] wcscpy (in: _Dest=0x32c660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.046] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.046] wcscat (in: _Dest=0x32c660, _Source="SCHEME45.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" [0216.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0216.047] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb230a000, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62321a70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb230a000, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1 [0216.047] wcscmp (_String1="SCHEME46.CSS", _String2=".") returned 1 [0216.047] wcscmp (_String1="SCHEME46.CSS", _String2="..") returned 1 [0216.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc07d8 [0216.047] wcscpy (in: _Dest=0x7cc07d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.047] wcscat (in: _Dest=0x7cc07d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.047] wcscat (in: _Dest=0x7cc07d8, _Source="SCHEME46.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" [0216.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc07d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0216.048] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d86500, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa9d86500, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1 [0216.048] wcscmp (_String1="SCHEME47.CSS", _String2=".") returned 1 [0216.048] wcscmp (_String1="SCHEME47.CSS", _String2="..") returned 1 [0216.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0908 [0216.048] wcscpy (in: _Dest=0x7cc0908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.048] wcscat (in: _Dest=0x7cc0908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.048] wcscat (in: _Dest=0x7cc0908, _Source="SCHEME47.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" [0216.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0216.049] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cbb7600, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x9cbb7600, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1 [0216.049] wcscmp (_String1="SCHEME48.CSS", _String2=".") returned 1 [0216.049] wcscmp (_String1="SCHEME48.CSS", _String2="..") returned 1 [0216.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0870 [0216.049] wcscpy (in: _Dest=0x7cc0870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.049] wcscat (in: _Dest=0x7cc0870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.050] wcscat (in: _Dest=0x7cc0870, _Source="SCHEME48.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" [0216.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0216.050] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f9e8700, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8f9e8700, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1 [0216.050] wcscmp (_String1="SCHEME49.CSS", _String2=".") returned 1 [0216.050] wcscmp (_String1="SCHEME49.CSS", _String2="..") returned 1 [0216.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0318 [0216.051] wcscpy (in: _Dest=0x7cc0318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.051] wcscat (in: _Dest=0x7cc0318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.051] wcscat (in: _Dest=0x7cc0318, _Source="SCHEME49.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" [0216.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0216.051] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86151f00, ftCreationTime.dwHighDateTime=0x1ca15dc, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86151f00, ftLastWriteTime.dwHighDateTime=0x1ca15dc, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1 [0216.052] wcscmp (_String1="SCHEME50.CSS", _String2=".") returned 1 [0216.052] wcscmp (_String1="SCHEME50.CSS", _String2="..") returned 1 [0216.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0280 [0216.052] wcscpy (in: _Dest=0x7cc0280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.052] wcscat (in: _Dest=0x7cc0280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.052] wcscat (in: _Dest=0x7cc0280, _Source="SCHEME50.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" [0216.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0216.053] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae579e00, ftCreationTime.dwHighDateTime=0x1c69adf, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xae579e00, ftLastWriteTime.dwHighDateTime=0x1c69adf, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1 [0216.053] wcscmp (_String1="SCHEME51.CSS", _String2=".") returned 1 [0216.053] wcscmp (_String1="SCHEME51.CSS", _String2="..") returned 1 [0216.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc11f0 [0216.053] wcscpy (in: _Dest=0x7cc11f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.053] wcscat (in: _Dest=0x7cc11f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.053] wcscat (in: _Dest=0x7cc11f0, _Source="SCHEME51.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" [0216.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc11f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0216.054] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87036a00, ftCreationTime.dwHighDateTime=0x1c696b6, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x87036a00, ftLastWriteTime.dwHighDateTime=0x1c696b6, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1 [0216.054] wcscmp (_String1="SCHEME52.CSS", _String2=".") returned 1 [0216.054] wcscmp (_String1="SCHEME52.CSS", _String2="..") returned 1 [0216.054] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1288 [0216.054] wcscpy (in: _Dest=0x7cc1288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.054] wcscat (in: _Dest=0x7cc1288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.054] wcscat (in: _Dest=0x7cc1288, _Source="SCHEME52.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" [0216.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0216.055] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e3100, ftCreationTime.dwHighDateTime=0x1c69ab8, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xa0e3100, ftLastWriteTime.dwHighDateTime=0x1c69ab8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1 [0216.055] wcscmp (_String1="SCHEME53.CSS", _String2=".") returned 1 [0216.055] wcscmp (_String1="SCHEME53.CSS", _String2="..") returned 1 [0216.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1320 [0216.055] wcscpy (in: _Dest=0x7cc1320, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.055] wcscat (in: _Dest=0x7cc1320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.055] wcscat (in: _Dest=0x7cc1320, _Source="SCHEME53.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" [0216.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0216.057] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcf6cb00, ftCreationTime.dwHighDateTime=0x1c695fb, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xfcf6cb00, ftLastWriteTime.dwHighDateTime=0x1c695fb, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1 [0216.057] wcscmp (_String1="SCHEME54.CSS", _String2=".") returned 1 [0216.057] wcscmp (_String1="SCHEME54.CSS", _String2="..") returned 1 [0216.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc13b8 [0216.057] wcscpy (in: _Dest=0x7cc13b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.057] wcscat (in: _Dest=0x7cc13b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.057] wcscat (in: _Dest=0x7cc13b8, _Source="SCHEME54.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" [0216.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc13b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170 [0216.058] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45f0e00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc45f0e00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1 [0216.058] wcscmp (_String1="SCHEME55.CSS", _String2=".") returned 1 [0216.058] wcscmp (_String1="SCHEME55.CSS", _String2="..") returned 1 [0216.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1450 [0216.058] wcscpy (in: _Dest=0x7cc1450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM" [0216.058] wcscat (in: _Dest=0x7cc1450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\" [0216.058] wcscat (in: _Dest=0x7cc1450, _Source="SCHEME55.CSS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" [0216.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74 [0216.059] FindNextFileW (in: hFindFile=0x7a2d5c0, lpFindFileData=0x3eb21b0 | out: lpFindFileData=0x3eb21b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45f0e00, ftCreationTime.dwHighDateTime=0x1ca15dd, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xc45f0e00, ftLastWriteTime.dwHighDateTime=0x1ca15dd, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 0 [0216.059] FindClose (in: hFindFile=0x7a2d5c0 | out: hFindFile=0x7a2d5c0) returned 1 [0216.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb21b0) returned 1 [0216.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 [0216.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a698) returned 1 Thread: id = 6566 os_tid = 0x1e44 [0192.188] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x76) returned 0x3e19098 [0192.191] wcscpy (in: _Dest=0x3e19098, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0192.191] wcscat (in: _Dest=0x3e19098, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0192.191] wcscat (in: _Dest=0x3e19098, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*" [0192.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58498 [0192.191] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x621589f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x624062b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0206.621] wcscmp (_String1=".", _String2=".") returned 0 [0206.621] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x621589f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x624062b0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.549] wcscmp (_String1="..", _String2=".") returned 1 [0207.549] wcscmp (_String1="..", _String2="..") returned 0 [0207.549] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPERS.INI", cAlternateFileName="")) returned 1 [0207.549] wcscmp (_String1="PAPERS.INI", _String2=".") returned 1 [0207.549] wcscmp (_String1="PAPERS.INI", _String2="..") returned 1 [0207.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3df27f8 [0207.550] wcscpy (in: _Dest=0x3df27f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.550] wcscat (in: _Dest=0x3df27f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.550] wcscat (in: _Dest=0x3df27f8, _Source="PAPERS.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" [0207.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df27f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18 [0207.938] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3bb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR10F.GIF", cAlternateFileName="")) returned 1 [0207.939] wcscmp (_String1="PDIR10F.GIF", _String2=".") returned 1 [0207.939] wcscmp (_String1="PDIR10F.GIF", _String2="..") returned 1 [0207.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d078 [0207.939] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.939] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.939] wcscat (in: _Dest=0x32d078, _Source="PDIR10F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" [0207.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x231c [0207.941] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR11F.GIF", cAlternateFileName="")) returned 1 [0207.941] wcscmp (_String1="PDIR11F.GIF", _String2=".") returned 1 [0207.941] wcscmp (_String1="PDIR11F.GIF", _String2="..") returned 1 [0207.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d700 [0207.941] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.941] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.941] wcscat (in: _Dest=0x32d700, _Source="PDIR11F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" [0207.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2320 [0207.942] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x46df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR12F.GIF", cAlternateFileName="")) returned 1 [0207.943] wcscmp (_String1="PDIR12F.GIF", _String2=".") returned 1 [0207.943] wcscmp (_String1="PDIR12F.GIF", _String2="..") returned 1 [0207.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c5c8 [0207.943] wcscpy (in: _Dest=0x32c5c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.943] wcscat (in: _Dest=0x32c5c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.943] wcscat (in: _Dest=0x32c5c8, _Source="PDIR12F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" [0207.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2328 [0207.944] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x430d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR13F.GIF", cAlternateFileName="")) returned 1 [0207.944] wcscmp (_String1="PDIR13F.GIF", _String2=".") returned 1 [0207.944] wcscmp (_String1="PDIR13F.GIF", _String2="..") returned 1 [0207.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7448 [0207.944] wcscpy (in: _Dest=0x3eb7448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.944] wcscat (in: _Dest=0x3eb7448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.944] wcscat (in: _Dest=0x3eb7448, _Source="PDIR13F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" [0207.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1614 [0207.946] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621589f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR14F.GIF", cAlternateFileName="")) returned 1 [0207.946] wcscmp (_String1="PDIR14F.GIF", _String2=".") returned 1 [0207.946] wcscmp (_String1="PDIR14F.GIF", _String2="..") returned 1 [0207.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7578 [0207.946] wcscpy (in: _Dest=0x3eb7578, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.946] wcscat (in: _Dest=0x3eb7578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.946] wcscat (in: _Dest=0x3eb7578, _Source="PDIR14F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" [0207.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2368 [0207.947] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR15F.GIF", cAlternateFileName="")) returned 1 [0207.947] wcscmp (_String1="PDIR15F.GIF", _String2=".") returned 1 [0207.947] wcscmp (_String1="PDIR15F.GIF", _String2="..") returned 1 [0207.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7020 [0207.948] wcscpy (in: _Dest=0x3eb7020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.948] wcscat (in: _Dest=0x3eb7020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.948] wcscat (in: _Dest=0x3eb7020, _Source="PDIR15F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" [0207.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694 [0207.955] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x399f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR16F.GIF", cAlternateFileName="")) returned 1 [0207.955] wcscmp (_String1="PDIR16F.GIF", _String2=".") returned 1 [0207.955] wcscmp (_String1="PDIR16F.GIF", _String2="..") returned 1 [0207.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6bf8 [0207.956] wcscpy (in: _Dest=0x3eb6bf8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.956] wcscat (in: _Dest=0x3eb6bf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.956] wcscat (in: _Dest=0x3eb6bf8, _Source="PDIR16F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" [0207.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6bf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x236c [0207.957] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2bb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR17F.GIF", cAlternateFileName="")) returned 1 [0207.957] wcscmp (_String1="PDIR17F.GIF", _String2=".") returned 1 [0207.957] wcscmp (_String1="PDIR17F.GIF", _String2="..") returned 1 [0207.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb74e0 [0207.957] wcscpy (in: _Dest=0x3eb74e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.957] wcscat (in: _Dest=0x3eb74e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.957] wcscat (in: _Dest=0x3eb74e0, _Source="PDIR17F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" [0207.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb74e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2370 [0207.958] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x41f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR18F.GIF", cAlternateFileName="")) returned 1 [0207.959] wcscmp (_String1="PDIR18F.GIF", _String2=".") returned 1 [0207.959] wcscmp (_String1="PDIR18F.GIF", _String2="..") returned 1 [0207.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb7318 [0207.959] wcscpy (in: _Dest=0x3eb7318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.959] wcscat (in: _Dest=0x3eb7318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.959] wcscat (in: _Dest=0x3eb7318, _Source="PDIR18F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" [0207.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb7318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2374 [0207.960] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR19F.GIF", cAlternateFileName="")) returned 1 [0207.960] wcscmp (_String1="PDIR19F.GIF", _String2=".") returned 1 [0207.960] wcscmp (_String1="PDIR19F.GIF", _String2="..") returned 1 [0207.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5a28 [0207.960] wcscpy (in: _Dest=0x3eb5a28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.960] wcscat (in: _Dest=0x3eb5a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.960] wcscat (in: _Dest=0x3eb5a28, _Source="PDIR19F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" [0207.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x237c [0207.968] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1B.GIF", cAlternateFileName="")) returned 1 [0207.968] wcscmp (_String1="PDIR1B.GIF", _String2=".") returned 1 [0207.968] wcscmp (_String1="PDIR1B.GIF", _String2="..") returned 1 [0207.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44570 [0207.968] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.968] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.968] wcscat (in: _Dest=0x3d44570, _Source="PDIR1B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" [0207.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0 [0207.970] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xf6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1F.GIF", cAlternateFileName="")) returned 1 [0207.970] wcscmp (_String1="PDIR1F.GIF", _String2=".") returned 1 [0207.970] wcscmp (_String1="PDIR1F.GIF", _String2="..") returned 1 [0207.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d454a0 [0207.970] wcscpy (in: _Dest=0x3d454a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.970] wcscat (in: _Dest=0x3d454a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.970] wcscat (in: _Dest=0x3d454a0, _Source="PDIR1F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" [0207.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d454a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c [0207.971] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR20F.GIF", cAlternateFileName="")) returned 1 [0207.971] wcscmp (_String1="PDIR20F.GIF", _String2=".") returned 1 [0207.971] wcscmp (_String1="PDIR20F.GIF", _String2="..") returned 1 [0207.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6310 [0207.971] wcscpy (in: _Dest=0x3eb6310, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.972] wcscat (in: _Dest=0x3eb6310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.972] wcscat (in: _Dest=0x3eb6310, _Source="PDIR20F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" [0207.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74 [0207.973] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR21F.GIF", cAlternateFileName="")) returned 1 [0207.973] wcscmp (_String1="PDIR21F.GIF", _String2=".") returned 1 [0207.973] wcscmp (_String1="PDIR21F.GIF", _String2="..") returned 1 [0207.973] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5698 [0207.973] wcscpy (in: _Dest=0x3eb5698, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.973] wcscat (in: _Dest=0x3eb5698, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.973] wcscat (in: _Dest=0x3eb5698, _Source="PDIR21F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" [0207.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30 [0207.975] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR22F.GIF", cAlternateFileName="")) returned 1 [0207.975] wcscmp (_String1="PDIR22F.GIF", _String2=".") returned 1 [0207.975] wcscmp (_String1="PDIR22F.GIF", _String2="..") returned 1 [0207.975] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb5ee8 [0207.975] wcscpy (in: _Dest=0x3eb5ee8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.975] wcscat (in: _Dest=0x3eb5ee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.975] wcscat (in: _Dest=0x3eb5ee8, _Source="PDIR22F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" [0207.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb5ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24 [0207.976] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x313b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR23F.GIF", cAlternateFileName="")) returned 1 [0207.976] wcscmp (_String1="PDIR23F.GIF", _String2=".") returned 1 [0207.976] wcscmp (_String1="PDIR23F.GIF", _String2="..") returned 1 [0207.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6a30 [0207.977] wcscpy (in: _Dest=0x3eb6a30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.977] wcscat (in: _Dest=0x3eb6a30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.977] wcscat (in: _Dest=0x3eb6a30, _Source="PDIR23F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" [0207.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6a30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20 [0207.978] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR24F.GIF", cAlternateFileName="")) returned 1 [0207.978] wcscmp (_String1="PDIR24F.GIF", _String2=".") returned 1 [0207.978] wcscmp (_String1="PDIR24F.GIF", _String2="..") returned 1 [0207.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb6ef0 [0207.978] wcscpy (in: _Dest=0x3eb6ef0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.978] wcscat (in: _Dest=0x3eb6ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.978] wcscat (in: _Dest=0x3eb6ef0, _Source="PDIR24F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" [0207.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb6ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c [0207.979] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5286c200, ftCreationTime.dwHighDateTime=0x1bdb63f, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5286c200, ftLastWriteTime.dwHighDateTime=0x1bdb63f, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR25F.GIF", cAlternateFileName="")) returned 1 [0207.979] wcscmp (_String1="PDIR25F.GIF", _String2=".") returned 1 [0207.979] wcscmp (_String1="PDIR25F.GIF", _String2="..") returned 1 [0207.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x3eb67d0 [0207.980] wcscpy (in: _Dest=0x3eb67d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.980] wcscat (in: _Dest=0x3eb67d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.980] wcscat (in: _Dest=0x3eb67d0, _Source="PDIR25F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" [0207.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3eb67d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44 [0207.981] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1985, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR26F.GIF", cAlternateFileName="")) returned 1 [0207.981] wcscmp (_String1="PDIR26F.GIF", _String2=".") returned 1 [0207.981] wcscmp (_String1="PDIR26F.GIF", _String2="..") returned 1 [0207.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0020 [0207.982] wcscpy (in: _Dest=0x7cc0020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.982] wcscat (in: _Dest=0x7cc0020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.982] wcscat (in: _Dest=0x7cc0020, _Source="PDIR26F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" [0207.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38 [0207.983] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6217eb50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR27F.GIF", cAlternateFileName="")) returned 1 [0207.983] wcscmp (_String1="PDIR27F.GIF", _String2=".") returned 1 [0207.983] wcscmp (_String1="PDIR27F.GIF", _String2="..") returned 1 [0207.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc00b8 [0207.984] wcscpy (in: _Dest=0x7cc00b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.984] wcscat (in: _Dest=0x7cc00b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.984] wcscat (in: _Dest=0x7cc00b8, _Source="PDIR27F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" [0207.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc00b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0 [0207.985] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x684, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28B.GIF", cAlternateFileName="")) returned 1 [0207.985] wcscmp (_String1="PDIR28B.GIF", _String2=".") returned 1 [0207.985] wcscmp (_String1="PDIR28B.GIF", _String2="..") returned 1 [0207.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0150 [0207.986] wcscpy (in: _Dest=0x7cc0150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.986] wcscat (in: _Dest=0x7cc0150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.986] wcscat (in: _Dest=0x7cc0150, _Source="PDIR28B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" [0207.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2360 [0207.987] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1786, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28F.GIF", cAlternateFileName="")) returned 1 [0207.987] wcscmp (_String1="PDIR28F.GIF", _String2=".") returned 1 [0207.987] wcscmp (_String1="PDIR28F.GIF", _String2="..") returned 1 [0207.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc01e8 [0207.988] wcscpy (in: _Dest=0x7cc01e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0207.988] wcscat (in: _Dest=0x7cc01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0207.988] wcscat (in: _Dest=0x7cc01e8, _Source="PDIR28F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" [0207.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2394 [0210.684] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29B.GIF", cAlternateFileName="")) returned 1 [0210.684] wcscmp (_String1="PDIR29B.GIF", _String2=".") returned 1 [0210.684] wcscmp (_String1="PDIR29B.GIF", _String2="..") returned 1 [0210.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc03b0 [0210.684] wcscpy (in: _Dest=0x7cc03b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0210.684] wcscat (in: _Dest=0x7cc03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0210.684] wcscat (in: _Dest=0x7cc03b0, _Source="PDIR29B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" [0211.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22d8 [0211.454] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x59bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29F.GIF", cAlternateFileName="")) returned 1 [0211.454] wcscmp (_String1="PDIR29F.GIF", _String2=".") returned 1 [0211.454] wcscmp (_String1="PDIR29F.GIF", _String2="..") returned 1 [0211.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0020 [0211.454] wcscpy (in: _Dest=0x7cc0020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0211.454] wcscat (in: _Dest=0x7cc0020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0211.454] wcscat (in: _Dest=0x7cc0020, _Source="PDIR29F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" [0211.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1604 [0211.481] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca9c8000, ftCreationTime.dwHighDateTime=0x1bdb3d2, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xca9c8000, ftLastWriteTime.dwHighDateTime=0x1bdb3d2, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2B.GIF", cAlternateFileName="")) returned 1 [0211.481] wcscmp (_String1="PDIR2B.GIF", _String2=".") returned 1 [0211.481] wcscmp (_String1="PDIR2B.GIF", _String2="..") returned 1 [0211.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d454a0 [0211.481] wcscpy (in: _Dest=0x3d454a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0211.481] wcscat (in: _Dest=0x3d454a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0211.481] wcscat (in: _Dest=0x3d454a0, _Source="PDIR2B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" [0211.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d454a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0 [0211.483] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2F.GIF", cAlternateFileName="")) returned 1 [0211.483] wcscmp (_String1="PDIR2F.GIF", _String2=".") returned 1 [0211.483] wcscmp (_String1="PDIR2F.GIF", _String2="..") returned 1 [0211.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44570 [0211.483] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0211.483] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0211.483] wcscat (in: _Dest=0x3d44570, _Source="PDIR2F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" [0211.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1400 [0211.484] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30B.GIF", cAlternateFileName="")) returned 1 [0211.485] wcscmp (_String1="PDIR30B.GIF", _String2=".") returned 1 [0211.485] wcscmp (_String1="PDIR30B.GIF", _String2="..") returned 1 [0211.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc00b8 [0211.485] wcscpy (in: _Dest=0x7cc00b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0211.485] wcscat (in: _Dest=0x7cc00b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0211.485] wcscat (in: _Dest=0x7cc00b8, _Source="PDIR30B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" [0211.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc00b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13fc [0211.486] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30F.GIF", cAlternateFileName="")) returned 1 [0211.486] wcscmp (_String1="PDIR30F.GIF", _String2=".") returned 1 [0211.486] wcscmp (_String1="PDIR30F.GIF", _String2="..") returned 1 [0211.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0448 [0211.487] wcscpy (in: _Dest=0x7cc0448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0211.487] wcscat (in: _Dest=0x7cc0448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0211.487] wcscat (in: _Dest=0x7cc0448, _Source="PDIR30F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" [0211.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b84 [0211.488] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31B.GIF", cAlternateFileName="")) returned 1 [0211.488] wcscmp (_String1="PDIR31B.GIF", _String2=".") returned 1 [0211.488] wcscmp (_String1="PDIR31B.GIF", _String2="..") returned 1 [0211.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc04e0 [0211.488] wcscpy (in: _Dest=0x7cc04e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0211.488] wcscat (in: _Dest=0x7cc04e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0211.488] wcscat (in: _Dest=0x7cc04e0, _Source="PDIR31B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" [0211.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc04e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ec [0211.490] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x52da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31F.GIF", cAlternateFileName="")) returned 1 [0211.490] wcscmp (_String1="PDIR31F.GIF", _String2=".") returned 1 [0211.490] wcscmp (_String1="PDIR31F.GIF", _String2="..") returned 1 [0211.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0578 [0211.490] wcscpy (in: _Dest=0x7cc0578, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0211.490] wcscat (in: _Dest=0x7cc0578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0211.490] wcscat (in: _Dest=0x7cc0578, _Source="PDIR31F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" [0211.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80 [0211.491] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32B.GIF", cAlternateFileName="")) returned 1 [0211.491] wcscmp (_String1="PDIR32B.GIF", _String2=".") returned 1 [0211.491] wcscmp (_String1="PDIR32B.GIF", _String2="..") returned 1 [0211.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0610 [0211.492] wcscpy (in: _Dest=0x7cc0610, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0211.492] wcscat (in: _Dest=0x7cc0610, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0211.492] wcscat (in: _Dest=0x7cc0610, _Source="PDIR32B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" [0211.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78 [0211.493] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x910b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32F.GIF", cAlternateFileName="")) returned 1 [0211.493] wcscmp (_String1="PDIR32F.GIF", _String2=".") returned 1 [0211.493] wcscmp (_String1="PDIR32F.GIF", _String2="..") returned 1 [0211.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc06a8 [0211.493] wcscpy (in: _Dest=0x7cc06a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0211.494] wcscat (in: _Dest=0x7cc06a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0211.494] wcscat (in: _Dest=0x7cc06a8, _Source="PDIR32F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" [0211.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc06a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74 [0211.495] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1631, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33B.GIF", cAlternateFileName="")) returned 1 [0212.907] wcscmp (_String1="PDIR33B.GIF", _String2=".") returned 1 [0212.907] wcscmp (_String1="PDIR33B.GIF", _String2="..") returned 1 [0212.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d078 [0212.907] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0212.907] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0212.907] wcscat (in: _Dest=0x32d078, _Source="PDIR33B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" [0215.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c [0215.682] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2d13, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33F.GIF", cAlternateFileName="")) returned 1 [0215.682] wcscmp (_String1="PDIR33F.GIF", _String2=".") returned 1 [0215.682] wcscmp (_String1="PDIR33F.GIF", _String2="..") returned 1 [0215.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d110 [0215.682] wcscpy (in: _Dest=0x32d110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.682] wcscat (in: _Dest=0x32d110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.682] wcscat (in: _Dest=0x32d110, _Source="PDIR33F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" [0215.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc [0215.683] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621a4cb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34B.GIF", cAlternateFileName="")) returned 1 [0215.683] wcscmp (_String1="PDIR34B.GIF", _String2=".") returned 1 [0215.683] wcscmp (_String1="PDIR34B.GIF", _String2="..") returned 1 [0215.683] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cc50 [0215.683] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.683] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.683] wcscat (in: _Dest=0x32cc50, _Source="PDIR34B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" [0215.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0 [0215.684] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x95dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34F.GIF", cAlternateFileName="")) returned 1 [0215.684] wcscmp (_String1="PDIR34F.GIF", _String2=".") returned 1 [0215.684] wcscmp (_String1="PDIR34F.GIF", _String2="..") returned 1 [0215.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c9f0 [0215.684] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.684] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.684] wcscat (in: _Dest=0x32c9f0, _Source="PDIR34F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" [0215.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b58 [0215.685] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x11ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35B.GIF", cAlternateFileName="")) returned 1 [0215.685] wcscmp (_String1="PDIR35B.GIF", _String2=".") returned 1 [0215.685] wcscmp (_String1="PDIR35B.GIF", _String2="..") returned 1 [0215.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32ceb0 [0215.685] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.685] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.685] wcscat (in: _Dest=0x32ceb0, _Source="PDIR35B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" [0215.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0215.686] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35F.GIF", cAlternateFileName="")) returned 1 [0215.686] wcscmp (_String1="PDIR35F.GIF", _String2=".") returned 1 [0215.686] wcscmp (_String1="PDIR35F.GIF", _String2="..") returned 1 [0215.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d408 [0215.687] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.687] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.687] wcscat (in: _Dest=0x32d408, _Source="PDIR35F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" [0215.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0215.687] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x23e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36B.GIF", cAlternateFileName="")) returned 1 [0215.688] wcscmp (_String1="PDIR36B.GIF", _String2=".") returned 1 [0215.688] wcscmp (_String1="PDIR36B.GIF", _String2="..") returned 1 [0215.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d668 [0215.688] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.688] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.688] wcscat (in: _Dest=0x32d668, _Source="PDIR36B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" [0215.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0215.689] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36F.GIF", cAlternateFileName="")) returned 1 [0215.689] wcscmp (_String1="PDIR36F.GIF", _String2=".") returned 1 [0215.689] wcscmp (_String1="PDIR36F.GIF", _String2="..") returned 1 [0215.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0740 [0215.689] wcscpy (in: _Dest=0x7cc0740, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.689] wcscat (in: _Dest=0x7cc0740, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.689] wcscat (in: _Dest=0x7cc0740, _Source="PDIR36F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" [0215.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c [0215.690] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR37F.GIF", cAlternateFileName="")) returned 1 [0215.690] wcscmp (_String1="PDIR37F.GIF", _String2=".") returned 1 [0215.690] wcscmp (_String1="PDIR37F.GIF", _String2="..") returned 1 [0215.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc03b0 [0215.690] wcscpy (in: _Dest=0x7cc03b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.690] wcscat (in: _Dest=0x7cc03b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.690] wcscat (in: _Dest=0x7cc03b0, _Source="PDIR37F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" [0215.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc03b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84 [0215.691] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xb819, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR38F.GIF", cAlternateFileName="")) returned 1 [0215.691] wcscmp (_String1="PDIR38F.GIF", _String2=".") returned 1 [0215.691] wcscmp (_String1="PDIR38F.GIF", _String2="..") returned 1 [0215.691] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc00b8 [0215.691] wcscpy (in: _Dest=0x7cc00b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.691] wcscat (in: _Dest=0x7cc00b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.691] wcscat (in: _Dest=0x7cc00b8, _Source="PDIR38F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" [0215.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc00b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c [0215.692] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xaf65, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR39F.GIF", cAlternateFileName="")) returned 1 [0215.692] wcscmp (_String1="PDIR39F.GIF", _String2=".") returned 1 [0215.692] wcscmp (_String1="PDIR39F.GIF", _String2="..") returned 1 [0215.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0448 [0215.692] wcscpy (in: _Dest=0x7cc0448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.692] wcscat (in: _Dest=0x7cc0448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.692] wcscat (in: _Dest=0x7cc0448, _Source="PDIR39F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" [0215.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bfc [0215.695] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3B.GIF", cAlternateFileName="")) returned 1 [0215.696] wcscmp (_String1="PDIR3B.GIF", _String2=".") returned 1 [0215.696] wcscmp (_String1="PDIR3B.GIF", _String2="..") returned 1 [0215.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44570 [0215.696] wcscpy (in: _Dest=0x3d44570, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.696] wcscat (in: _Dest=0x3d44570, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.696] wcscat (in: _Dest=0x3d44570, _Source="PDIR3B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" [0215.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4 [0215.697] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4647, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3F.GIF", cAlternateFileName="")) returned 1 [0215.697] wcscmp (_String1="PDIR3F.GIF", _String2=".") returned 1 [0215.697] wcscmp (_String1="PDIR3F.GIF", _String2="..") returned 1 [0215.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44a80 [0215.697] wcscpy (in: _Dest=0x3d44a80, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.697] wcscat (in: _Dest=0x3d44a80, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.697] wcscat (in: _Dest=0x3d44a80, _Source="PDIR3F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" [0215.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1934 [0215.698] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621cae10, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x10f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR40F.GIF", cAlternateFileName="")) returned 1 [0215.698] wcscmp (_String1="PDIR40F.GIF", _String2=".") returned 1 [0215.698] wcscmp (_String1="PDIR40F.GIF", _String2="..") returned 1 [0215.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc04e0 [0215.698] wcscpy (in: _Dest=0x7cc04e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.698] wcscat (in: _Dest=0x7cc04e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.699] wcscat (in: _Dest=0x7cc04e0, _Source="PDIR40F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" [0215.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc04e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8 [0215.699] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x7d5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR41F.GIF", cAlternateFileName="")) returned 1 [0215.699] wcscmp (_String1="PDIR41F.GIF", _String2=".") returned 1 [0215.699] wcscmp (_String1="PDIR41F.GIF", _String2="..") returned 1 [0215.699] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0578 [0215.700] wcscpy (in: _Dest=0x7cc0578, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.700] wcscat (in: _Dest=0x7cc0578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.700] wcscat (in: _Dest=0x7cc0578, _Source="PDIR41F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" [0215.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38 [0215.700] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xdf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR42F.GIF", cAlternateFileName="")) returned 1 [0215.700] wcscmp (_String1="PDIR42F.GIF", _String2=".") returned 1 [0215.700] wcscmp (_String1="PDIR42F.GIF", _String2="..") returned 1 [0215.701] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0610 [0215.701] wcscpy (in: _Dest=0x7cc0610, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.701] wcscat (in: _Dest=0x7cc0610, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.701] wcscat (in: _Dest=0x7cc0610, _Source="PDIR42F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" [0215.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538 [0215.701] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43B.GIF", cAlternateFileName="")) returned 1 [0215.701] wcscmp (_String1="PDIR43B.GIF", _String2=".") returned 1 [0215.702] wcscmp (_String1="PDIR43B.GIF", _String2="..") returned 1 [0215.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc06a8 [0215.702] wcscpy (in: _Dest=0x7cc06a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.702] wcscat (in: _Dest=0x7cc06a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.702] wcscat (in: _Dest=0x7cc06a8, _Source="PDIR43B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" [0215.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc06a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534 [0215.702] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43F.GIF", cAlternateFileName="")) returned 1 [0215.702] wcscmp (_String1="PDIR43F.GIF", _String2=".") returned 1 [0215.703] wcscmp (_String1="PDIR43F.GIF", _String2="..") returned 1 [0215.703] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0020 [0215.703] wcscpy (in: _Dest=0x7cc0020, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.704] wcscat (in: _Dest=0x7cc0020, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.704] wcscat (in: _Dest=0x7cc0020, _Source="PDIR43F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" [0215.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4 [0215.705] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3606, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44B.GIF", cAlternateFileName="")) returned 1 [0215.705] wcscmp (_String1="PDIR44B.GIF", _String2=".") returned 1 [0215.705] wcscmp (_String1="PDIR44B.GIF", _String2="..") returned 1 [0215.705] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0a38 [0215.705] wcscpy (in: _Dest=0x7cc0a38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.705] wcscat (in: _Dest=0x7cc0a38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.705] wcscat (in: _Dest=0x7cc0a38, _Source="PDIR44B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" [0215.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc [0215.706] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3026, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44F.GIF", cAlternateFileName="")) returned 1 [0215.706] wcscmp (_String1="PDIR44F.GIF", _String2=".") returned 1 [0215.706] wcscmp (_String1="PDIR44F.GIF", _String2="..") returned 1 [0215.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0ad0 [0215.706] wcscpy (in: _Dest=0x7cc0ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.706] wcscat (in: _Dest=0x7cc0ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.706] wcscat (in: _Dest=0x7cc0ad0, _Source="PDIR44F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" [0215.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424 [0215.707] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2019, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45B.GIF", cAlternateFileName="")) returned 1 [0215.707] wcscmp (_String1="PDIR45B.GIF", _String2=".") returned 1 [0215.707] wcscmp (_String1="PDIR45B.GIF", _String2="..") returned 1 [0215.707] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0b68 [0215.707] wcscpy (in: _Dest=0x7cc0b68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.707] wcscat (in: _Dest=0x7cc0b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.707] wcscat (in: _Dest=0x7cc0b68, _Source="PDIR45B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" [0215.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438 [0215.708] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45F.GIF", cAlternateFileName="")) returned 1 [0215.708] wcscmp (_String1="PDIR45F.GIF", _String2=".") returned 1 [0215.708] wcscmp (_String1="PDIR45F.GIF", _String2="..") returned 1 [0215.708] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0c00 [0215.708] wcscpy (in: _Dest=0x7cc0c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.708] wcscat (in: _Dest=0x7cc0c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.708] wcscat (in: _Dest=0x7cc0c00, _Source="PDIR45F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" [0215.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0 [0215.709] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46B.GIF", cAlternateFileName="")) returned 1 [0215.709] wcscmp (_String1="PDIR46B.GIF", _String2=".") returned 1 [0215.709] wcscmp (_String1="PDIR46B.GIF", _String2="..") returned 1 [0215.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0c98 [0215.709] wcscpy (in: _Dest=0x7cc0c98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.709] wcscat (in: _Dest=0x7cc0c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.709] wcscat (in: _Dest=0x7cc0c98, _Source="PDIR46B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" [0215.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70 [0215.710] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46F.GIF", cAlternateFileName="")) returned 1 [0215.710] wcscmp (_String1="PDIR46F.GIF", _String2=".") returned 1 [0215.710] wcscmp (_String1="PDIR46F.GIF", _String2="..") returned 1 [0215.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0d30 [0215.710] wcscpy (in: _Dest=0x7cc0d30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.710] wcscat (in: _Dest=0x7cc0d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.710] wcscat (in: _Dest=0x7cc0d30, _Source="PDIR46F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" [0215.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c [0215.712] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x80d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47B.GIF", cAlternateFileName="")) returned 1 [0215.712] wcscmp (_String1="PDIR47B.GIF", _String2=".") returned 1 [0215.712] wcscmp (_String1="PDIR47B.GIF", _String2="..") returned 1 [0215.712] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0dc8 [0215.712] wcscpy (in: _Dest=0x7cc0dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.712] wcscat (in: _Dest=0x7cc0dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.712] wcscat (in: _Dest=0x7cc0dc8, _Source="PDIR47B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" [0215.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270 [0215.713] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47F.GIF", cAlternateFileName="")) returned 1 [0215.713] wcscmp (_String1="PDIR47F.GIF", _String2=".") returned 1 [0215.713] wcscmp (_String1="PDIR47F.GIF", _String2="..") returned 1 [0215.713] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0e60 [0215.713] wcscpy (in: _Dest=0x7cc0e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.713] wcscat (in: _Dest=0x7cc0e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.713] wcscat (in: _Dest=0x7cc0e60, _Source="PDIR47F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" [0215.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18a0 [0215.714] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48B.GIF", cAlternateFileName="")) returned 1 [0215.714] wcscmp (_String1="PDIR48B.GIF", _String2=".") returned 1 [0215.714] wcscmp (_String1="PDIR48B.GIF", _String2="..") returned 1 [0215.714] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0ef8 [0215.714] wcscpy (in: _Dest=0x7cc0ef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.714] wcscat (in: _Dest=0x7cc0ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.714] wcscat (in: _Dest=0x7cc0ef8, _Source="PDIR48B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" [0215.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0 [0215.715] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x178c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48F.GIF", cAlternateFileName="")) returned 1 [0215.715] wcscmp (_String1="PDIR48F.GIF", _String2=".") returned 1 [0215.715] wcscmp (_String1="PDIR48F.GIF", _String2="..") returned 1 [0215.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0f90 [0215.715] wcscpy (in: _Dest=0x7cc0f90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.715] wcscat (in: _Dest=0x7cc0f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.715] wcscat (in: _Dest=0x7cc0f90, _Source="PDIR48F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" [0215.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x192c [0215.716] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x621f0f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4a66, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49B.GIF", cAlternateFileName="")) returned 1 [0215.716] wcscmp (_String1="PDIR49B.GIF", _String2=".") returned 1 [0215.716] wcscmp (_String1="PDIR49B.GIF", _String2="..") returned 1 [0215.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc1028 [0215.716] wcscpy (in: _Dest=0x7cc1028, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.716] wcscat (in: _Dest=0x7cc1028, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.716] wcscat (in: _Dest=0x7cc1028, _Source="PDIR49B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" [0215.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c [0215.717] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49F.GIF", cAlternateFileName="")) returned 1 [0215.717] wcscmp (_String1="PDIR49F.GIF", _String2=".") returned 1 [0215.717] wcscmp (_String1="PDIR49F.GIF", _String2="..") returned 1 [0215.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc10c0 [0215.717] wcscpy (in: _Dest=0x7cc10c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.718] wcscat (in: _Dest=0x7cc10c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.718] wcscat (in: _Dest=0x7cc10c0, _Source="PDIR49F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" [0215.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc10c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260 [0215.718] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2a01, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4B.GIF", cAlternateFileName="")) returned 1 [0215.718] wcscmp (_String1="PDIR4B.GIF", _String2=".") returned 1 [0215.718] wcscmp (_String1="PDIR4B.GIF", _String2="..") returned 1 [0215.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45ad0 [0215.719] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.719] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.719] wcscat (in: _Dest=0x3d45ad0, _Source="PDIR4B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" [0215.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4 [0215.719] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x76cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4F.GIF", cAlternateFileName="")) returned 1 [0215.719] wcscmp (_String1="PDIR4F.GIF", _String2=".") returned 1 [0215.720] wcscmp (_String1="PDIR4F.GIF", _String2="..") returned 1 [0215.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44690 [0215.720] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.720] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.720] wcscat (in: _Dest=0x3d44690, _Source="PDIR4F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" [0215.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0 [0215.721] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1001, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50B.GIF", cAlternateFileName="")) returned 1 [0215.721] wcscmp (_String1="PDIR50B.GIF", _String2=".") returned 1 [0215.721] wcscmp (_String1="PDIR50B.GIF", _String2="..") returned 1 [0215.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc1158 [0215.721] wcscpy (in: _Dest=0x7cc1158, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0215.721] wcscat (in: _Dest=0x7cc1158, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0215.721] wcscat (in: _Dest=0x7cc1158, _Source="PDIR50B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" [0215.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4 [0216.107] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xe82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50F.GIF", cAlternateFileName="")) returned 1 [0216.107] wcscmp (_String1="PDIR50F.GIF", _String2=".") returned 1 [0216.107] wcscmp (_String1="PDIR50F.GIF", _String2="..") returned 1 [0216.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc14e8 [0216.107] wcscpy (in: _Dest=0x7cc14e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.107] wcscat (in: _Dest=0x7cc14e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.107] wcscat (in: _Dest=0x7cc14e8, _Source="PDIR50F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" [0216.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc14e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1854 [0216.256] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4217, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51B.GIF", cAlternateFileName="")) returned 1 [0216.288] wcscmp (_String1="PDIR51B.GIF", _String2=".") returned 1 [0216.288] wcscmp (_String1="PDIR51B.GIF", _String2="..") returned 1 [0216.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d110 [0216.288] wcscpy (in: _Dest=0x32d110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.288] wcscat (in: _Dest=0x32d110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.288] wcscat (in: _Dest=0x32d110, _Source="PDIR51B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" [0216.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84 [0216.298] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51F.GIF", cAlternateFileName="")) returned 1 [0216.298] wcscmp (_String1="PDIR51F.GIF", _String2=".") returned 1 [0216.298] wcscmp (_String1="PDIR51F.GIF", _String2="..") returned 1 [0216.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32cc50 [0216.299] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.299] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.299] wcscat (in: _Dest=0x32cc50, _Source="PDIR51F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" [0216.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0216.300] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5B.GIF", cAlternateFileName="")) returned 1 [0216.300] wcscmp (_String1="PDIR5B.GIF", _String2=".") returned 1 [0216.300] wcscmp (_String1="PDIR5B.GIF", _String2="..") returned 1 [0216.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d44690 [0216.300] wcscpy (in: _Dest=0x3d44690, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.300] wcscat (in: _Dest=0x3d44690, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.300] wcscat (in: _Dest=0x3d44690, _Source="PDIR5B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" [0216.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d44690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54 [0216.301] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xce72, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5F.GIF", cAlternateFileName="")) returned 1 [0216.301] wcscmp (_String1="PDIR5F.GIF", _String2=".") returned 1 [0216.301] wcscmp (_String1="PDIR5F.GIF", _String2="..") returned 1 [0216.301] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45ad0 [0216.301] wcscpy (in: _Dest=0x3d45ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.301] wcscat (in: _Dest=0x3d45ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.302] wcscat (in: _Dest=0x3d45ad0, _Source="PDIR5F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" [0216.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768 [0216.303] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x24dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6B.GIF", cAlternateFileName="")) returned 1 [0216.303] wcscmp (_String1="PDIR6B.GIF", _String2=".") returned 1 [0216.303] wcscmp (_String1="PDIR6B.GIF", _String2="..") returned 1 [0216.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d442a0 [0216.303] wcscpy (in: _Dest=0x3d442a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.303] wcscat (in: _Dest=0x3d442a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.303] wcscat (in: _Dest=0x3d442a0, _Source="PDIR6B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" [0216.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d442a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60 [0216.304] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x6e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6F.GIF", cAlternateFileName="")) returned 1 [0216.304] wcscmp (_String1="PDIR6F.GIF", _String2=".") returned 1 [0216.304] wcscmp (_String1="PDIR6F.GIF", _String2="..") returned 1 [0216.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45650 [0216.305] wcscpy (in: _Dest=0x3d45650, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.305] wcscat (in: _Dest=0x3d45650, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.305] wcscat (in: _Dest=0x3d45650, _Source="PDIR6F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" [0216.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018 [0216.306] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x6054, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7B.GIF", cAlternateFileName="")) returned 1 [0216.306] wcscmp (_String1="PDIR7B.GIF", _String2=".") returned 1 [0216.306] wcscmp (_String1="PDIR7B.GIF", _String2="..") returned 1 [0216.306] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45770 [0216.306] wcscpy (in: _Dest=0x3d45770, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.306] wcscat (in: _Dest=0x3d45770, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.306] wcscat (in: _Dest=0x3d45770, _Source="PDIR7B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" [0216.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c68 [0216.308] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x70bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7F.GIF", cAlternateFileName="")) returned 1 [0216.308] wcscmp (_String1="PDIR7F.GIF", _String2=".") returned 1 [0216.308] wcscmp (_String1="PDIR7F.GIF", _String2="..") returned 1 [0216.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45410 [0216.308] wcscpy (in: _Dest=0x3d45410, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.308] wcscat (in: _Dest=0x3d45410, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.308] wcscat (in: _Dest=0x3d45410, _Source="PDIR7F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" [0216.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70 [0216.309] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8B.GIF", cAlternateFileName="")) returned 1 [0216.309] wcscmp (_String1="PDIR8B.GIF", _String2=".") returned 1 [0216.309] wcscmp (_String1="PDIR8B.GIF", _String2="..") returned 1 [0216.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d452f0 [0216.310] wcscpy (in: _Dest=0x3d452f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.310] wcscat (in: _Dest=0x3d452f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.310] wcscat (in: _Dest=0x3d452f0, _Source="PDIR8B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" [0216.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d452f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34 [0216.311] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8F.GIF", cAlternateFileName="")) returned 1 [0216.311] wcscmp (_String1="PDIR8F.GIF", _String2=".") returned 1 [0216.311] wcscmp (_String1="PDIR8F.GIF", _String2="..") returned 1 [0216.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45a40 [0216.311] wcscpy (in: _Dest=0x3d45a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.311] wcscat (in: _Dest=0x3d45a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.311] wcscat (in: _Dest=0x3d45a40, _Source="PDIR8F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" [0216.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22bc [0216.313] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x622170d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x445d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9B.GIF", cAlternateFileName="")) returned 1 [0216.313] wcscmp (_String1="PDIR9B.GIF", _String2=".") returned 1 [0216.313] wcscmp (_String1="PDIR9B.GIF", _String2="..") returned 1 [0216.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45920 [0216.313] wcscpy (in: _Dest=0x3d45920, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.313] wcscat (in: _Dest=0x3d45920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.313] wcscat (in: _Dest=0x3d45920, _Source="PDIR9B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" [0216.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc [0216.315] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6223d230, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9F.GIF", cAlternateFileName="")) returned 1 [0216.315] wcscmp (_String1="PDIR9F.GIF", _String2=".") returned 1 [0216.315] wcscmp (_String1="PDIR9F.GIF", _String2="..") returned 1 [0216.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x88) returned 0x3d45530 [0216.315] wcscpy (in: _Dest=0x3d45530, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.315] wcscat (in: _Dest=0x3d45530, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.315] wcscat (in: _Dest=0x3d45530, _Source="PDIR9F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" [0216.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d45530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78 [0216.316] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x189e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPAPERS.INI", cAlternateFileName="")) returned 1 [0216.316] wcscmp (_String1="ZPAPERS.INI", _String2=".") returned 1 [0216.316] wcscmp (_String1="ZPAPERS.INI", _String2="..") returned 1 [0216.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc09a0 [0216.316] wcscpy (in: _Dest=0x7cc09a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.316] wcscat (in: _Dest=0x7cc09a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.316] wcscat (in: _Dest=0x7cc09a0, _Source="ZPAPERS.INI" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" [0216.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc09a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1630 [0216.318] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR00.GIF", cAlternateFileName="")) returned 1 [0216.318] wcscmp (_String1="ZPDIR00.GIF", _String2=".") returned 1 [0216.318] wcscmp (_String1="ZPDIR00.GIF", _String2="..") returned 1 [0216.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc1158 [0216.318] wcscpy (in: _Dest=0x7cc1158, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.318] wcscat (in: _Dest=0x7cc1158, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.318] wcscat (in: _Dest=0x7cc1158, _Source="ZPDIR00.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" [0216.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94 [0216.319] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x13ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR10F.GIF", cAlternateFileName="")) returned 1 [0216.319] wcscmp (_String1="ZPDIR10F.GIF", _String2=".") returned 1 [0216.319] wcscmp (_String1="ZPDIR10F.GIF", _String2="..") returned 1 [0216.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1580 [0216.320] wcscpy (in: _Dest=0x7cc1580, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.320] wcscat (in: _Dest=0x7cc1580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.320] wcscat (in: _Dest=0x7cc1580, _Source="ZPDIR10F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" [0216.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8 [0216.321] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62347bd0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR11F.GIF", cAlternateFileName="")) returned 1 [0216.321] wcscmp (_String1="ZPDIR11F.GIF", _String2=".") returned 1 [0216.321] wcscmp (_String1="ZPDIR11F.GIF", _String2="..") returned 1 [0216.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1618 [0216.321] wcscpy (in: _Dest=0x7cc1618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.321] wcscat (in: _Dest=0x7cc1618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.321] wcscat (in: _Dest=0x7cc1618, _Source="ZPDIR11F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" [0216.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bcc [0216.322] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x6499, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR12F.GIF", cAlternateFileName="")) returned 1 [0216.322] wcscmp (_String1="ZPDIR12F.GIF", _String2=".") returned 1 [0216.322] wcscmp (_String1="ZPDIR12F.GIF", _String2="..") returned 1 [0216.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc16b0 [0216.322] wcscpy (in: _Dest=0x7cc16b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.322] wcscat (in: _Dest=0x7cc16b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.322] wcscat (in: _Dest=0x7cc16b0, _Source="ZPDIR12F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" [0216.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc16b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0216.324] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR13F.GIF", cAlternateFileName="")) returned 1 [0216.324] wcscmp (_String1="ZPDIR13F.GIF", _String2=".") returned 1 [0216.324] wcscmp (_String1="ZPDIR13F.GIF", _String2="..") returned 1 [0216.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1748 [0216.324] wcscpy (in: _Dest=0x7cc1748, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.324] wcscat (in: _Dest=0x7cc1748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.324] wcscat (in: _Dest=0x7cc1748, _Source="ZPDIR13F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" [0216.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc [0216.325] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x645b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR14F.GIF", cAlternateFileName="")) returned 1 [0216.325] wcscmp (_String1="ZPDIR14F.GIF", _String2=".") returned 1 [0216.325] wcscmp (_String1="ZPDIR14F.GIF", _String2="..") returned 1 [0216.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc17e0 [0216.325] wcscpy (in: _Dest=0x7cc17e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.325] wcscat (in: _Dest=0x7cc17e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.325] wcscat (in: _Dest=0x7cc17e0, _Source="ZPDIR14F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" [0216.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc17e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4 [0216.326] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x452b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR15F.GIF", cAlternateFileName="")) returned 1 [0216.327] wcscmp (_String1="ZPDIR15F.GIF", _String2=".") returned 1 [0216.327] wcscmp (_String1="ZPDIR15F.GIF", _String2="..") returned 1 [0216.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1878 [0216.327] wcscpy (in: _Dest=0x7cc1878, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.327] wcscat (in: _Dest=0x7cc1878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.327] wcscat (in: _Dest=0x7cc1878, _Source="ZPDIR15F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" [0216.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40 [0216.328] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2fc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR16F.GIF", cAlternateFileName="")) returned 1 [0216.328] wcscmp (_String1="ZPDIR16F.GIF", _String2=".") returned 1 [0216.328] wcscmp (_String1="ZPDIR16F.GIF", _String2="..") returned 1 [0216.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1910 [0216.328] wcscpy (in: _Dest=0x7cc1910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.328] wcscat (in: _Dest=0x7cc1910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.328] wcscat (in: _Dest=0x7cc1910, _Source="ZPDIR16F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" [0216.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc [0216.330] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x34cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR17F.GIF", cAlternateFileName="")) returned 1 [0216.330] wcscmp (_String1="ZPDIR17F.GIF", _String2=".") returned 1 [0216.330] wcscmp (_String1="ZPDIR17F.GIF", _String2="..") returned 1 [0216.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc19a8 [0216.330] wcscpy (in: _Dest=0x7cc19a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.330] wcscat (in: _Dest=0x7cc19a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.330] wcscat (in: _Dest=0x7cc19a8, _Source="ZPDIR17F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" [0216.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc19a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8 [0216.331] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR18F.GIF", cAlternateFileName="")) returned 1 [0216.331] wcscmp (_String1="ZPDIR18F.GIF", _String2=".") returned 1 [0216.331] wcscmp (_String1="ZPDIR18F.GIF", _String2="..") returned 1 [0216.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1a40 [0216.331] wcscpy (in: _Dest=0x7cc1a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.331] wcscat (in: _Dest=0x7cc1a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.331] wcscat (in: _Dest=0x7cc1a40, _Source="ZPDIR18F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" [0216.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4 [0216.333] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR19F.GIF", cAlternateFileName="")) returned 1 [0216.333] wcscmp (_String1="ZPDIR19F.GIF", _String2=".") returned 1 [0216.333] wcscmp (_String1="ZPDIR19F.GIF", _String2="..") returned 1 [0216.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1ad8 [0216.333] wcscpy (in: _Dest=0x7cc1ad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.333] wcscat (in: _Dest=0x7cc1ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.333] wcscat (in: _Dest=0x7cc1ad8, _Source="ZPDIR19F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" [0216.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40 [0216.815] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1B.GIF", cAlternateFileName="")) returned 1 [0216.815] wcscmp (_String1="ZPDIR1B.GIF", _String2=".") returned 1 [0216.815] wcscmp (_String1="ZPDIR1B.GIF", _String2="..") returned 1 [0216.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d110 [0216.816] wcscpy (in: _Dest=0x32d110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.816] wcscat (in: _Dest=0x32d110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.816] wcscat (in: _Dest=0x32d110, _Source="ZPDIR1B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" [0216.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8 [0216.817] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1F.GIF", cAlternateFileName="")) returned 1 [0216.817] wcscmp (_String1="ZPDIR1F.GIF", _String2=".") returned 1 [0216.817] wcscmp (_String1="ZPDIR1F.GIF", _String2="..") returned 1 [0216.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d668 [0216.817] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.817] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.818] wcscat (in: _Dest=0x32d668, _Source="ZPDIR1F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" [0216.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750 [0216.819] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR20F.GIF", cAlternateFileName="")) returned 1 [0216.819] wcscmp (_String1="ZPDIR20F.GIF", _String2=".") returned 1 [0216.819] wcscmp (_String1="ZPDIR20F.GIF", _String2="..") returned 1 [0216.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d408 [0216.819] wcscpy (in: _Dest=0x32d408, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.819] wcscat (in: _Dest=0x32d408, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.819] wcscat (in: _Dest=0x32d408, _Source="ZPDIR20F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" [0216.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0 [0216.820] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x42ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR21F.GIF", cAlternateFileName="")) returned 1 [0216.820] wcscmp (_String1="ZPDIR21F.GIF", _String2=".") returned 1 [0216.820] wcscmp (_String1="ZPDIR21F.GIF", _String2="..") returned 1 [0216.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ceb0 [0216.820] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.820] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.820] wcscat (in: _Dest=0x32ceb0, _Source="ZPDIR21F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" [0216.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1888 [0216.821] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1983, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR22F.GIF", cAlternateFileName="")) returned 1 [0216.821] wcscmp (_String1="ZPDIR22F.GIF", _String2=".") returned 1 [0216.821] wcscmp (_String1="ZPDIR22F.GIF", _String2="..") returned 1 [0216.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32c9f0 [0216.822] wcscpy (in: _Dest=0x32c9f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.822] wcscat (in: _Dest=0x32c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.822] wcscat (in: _Dest=0x32c9f0, _Source="ZPDIR22F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" [0216.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4 [0216.823] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2a71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR23F.GIF", cAlternateFileName="")) returned 1 [0216.823] wcscmp (_String1="ZPDIR23F.GIF", _String2=".") returned 1 [0216.823] wcscmp (_String1="ZPDIR23F.GIF", _String2="..") returned 1 [0216.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc14e8 [0216.823] wcscpy (in: _Dest=0x7cc14e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.823] wcscat (in: _Dest=0x7cc14e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.824] wcscat (in: _Dest=0x7cc14e8, _Source="ZPDIR23F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" [0216.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc14e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x182c [0216.824] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR24F.GIF", cAlternateFileName="")) returned 1 [0216.824] wcscmp (_String1="ZPDIR24F.GIF", _String2=".") returned 1 [0216.825] wcscmp (_String1="ZPDIR24F.GIF", _String2="..") returned 1 [0216.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1450 [0216.825] wcscpy (in: _Dest=0x7cc1450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.825] wcscat (in: _Dest=0x7cc1450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.825] wcscat (in: _Dest=0x7cc1450, _Source="ZPDIR24F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" [0216.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478 [0216.826] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x6236dd30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x326c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR25F.GIF", cAlternateFileName="")) returned 1 [0216.826] wcscmp (_String1="ZPDIR25F.GIF", _String2=".") returned 1 [0216.826] wcscmp (_String1="ZPDIR25F.GIF", _String2="..") returned 1 [0216.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc13b8 [0216.826] wcscpy (in: _Dest=0x7cc13b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.826] wcscat (in: _Dest=0x7cc13b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.826] wcscat (in: _Dest=0x7cc13b8, _Source="ZPDIR25F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" [0216.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc13b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088 [0216.827] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR26F.GIF", cAlternateFileName="")) returned 1 [0216.827] wcscmp (_String1="ZPDIR26F.GIF", _String2=".") returned 1 [0216.827] wcscmp (_String1="ZPDIR26F.GIF", _String2="..") returned 1 [0216.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc10c0 [0216.827] wcscpy (in: _Dest=0x7cc10c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.828] wcscat (in: _Dest=0x7cc10c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.828] wcscat (in: _Dest=0x7cc10c0, _Source="ZPDIR26F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" [0216.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc10c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0 [0216.829] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x20f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR27F.GIF", cAlternateFileName="")) returned 1 [0216.829] wcscmp (_String1="ZPDIR27F.GIF", _String2=".") returned 1 [0216.829] wcscmp (_String1="ZPDIR27F.GIF", _String2="..") returned 1 [0216.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1028 [0216.829] wcscpy (in: _Dest=0x7cc1028, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0216.829] wcscat (in: _Dest=0x7cc1028, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0216.829] wcscat (in: _Dest=0x7cc1028, _Source="ZPDIR27F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" [0216.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080 [0216.830] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x10a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR28F.GIF", cAlternateFileName="")) returned 1 [0218.057] wcscmp (_String1="ZPDIR28F.GIF", _String2=".") returned 1 [0218.057] wcscmp (_String1="ZPDIR28F.GIF", _String2="..") returned 1 [0218.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1320 [0218.057] wcscpy (in: _Dest=0x7cc1320, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.057] wcscat (in: _Dest=0x7cc1320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.057] wcscat (in: _Dest=0x7cc1320, _Source="ZPDIR28F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" [0218.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204 [0218.483] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR29F.GIF", cAlternateFileName="")) returned 1 [0218.483] wcscmp (_String1="ZPDIR29F.GIF", _String2=".") returned 1 [0218.483] wcscmp (_String1="ZPDIR29F.GIF", _String2="..") returned 1 [0218.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cc50 [0218.484] wcscpy (in: _Dest=0x32cc50, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.484] wcscat (in: _Dest=0x32cc50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.484] wcscat (in: _Dest=0x32cc50, _Source="ZPDIR29F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" [0218.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cc50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160 [0218.485] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dadf00, ftCreationTime.dwHighDateTime=0x1bdb408, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0xb5dadf00, ftLastWriteTime.dwHighDateTime=0x1bdb408, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2B.GIF", cAlternateFileName="")) returned 1 [0218.485] wcscmp (_String1="ZPDIR2B.GIF", _String2=".") returned 1 [0218.485] wcscmp (_String1="ZPDIR2B.GIF", _String2="..") returned 1 [0218.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32c660 [0218.485] wcscpy (in: _Dest=0x32c660, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.485] wcscat (in: _Dest=0x32c660, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.485] wcscat (in: _Dest=0x32c660, _Source="ZPDIR2B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" [0218.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0218.486] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x154f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2F.GIF", cAlternateFileName="")) returned 1 [0218.486] wcscmp (_String1="ZPDIR2F.GIF", _String2=".") returned 1 [0218.486] wcscmp (_String1="ZPDIR2F.GIF", _String2="..") returned 1 [0218.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32b820 [0218.486] wcscpy (in: _Dest=0x32b820, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.486] wcscat (in: _Dest=0x32b820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.486] wcscat (in: _Dest=0x32b820, _Source="ZPDIR2F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" [0218.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32b820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8 [0218.487] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x905a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR30F.GIF", cAlternateFileName="")) returned 1 [0218.487] wcscmp (_String1="ZPDIR30F.GIF", _String2=".") returned 1 [0218.487] wcscmp (_String1="ZPDIR30F.GIF", _String2="..") returned 1 [0218.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d240 [0218.487] wcscpy (in: _Dest=0x32d240, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.487] wcscat (in: _Dest=0x32d240, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.488] wcscat (in: _Dest=0x32d240, _Source="ZPDIR30F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" [0218.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc [0218.488] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR31F.GIF", cAlternateFileName="")) returned 1 [0218.488] wcscmp (_String1="ZPDIR31F.GIF", _String2=".") returned 1 [0218.488] wcscmp (_String1="ZPDIR31F.GIF", _String2="..") returned 1 [0218.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cce8 [0218.489] wcscpy (in: _Dest=0x32cce8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.489] wcscat (in: _Dest=0x32cce8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.489] wcscat (in: _Dest=0x32cce8, _Source="ZPDIR31F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" [0218.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90 [0218.490] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x9eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR32F.GIF", cAlternateFileName="")) returned 1 [0218.490] wcscmp (_String1="ZPDIR32F.GIF", _String2=".") returned 1 [0218.490] wcscmp (_String1="ZPDIR32F.GIF", _String2="..") returned 1 [0218.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32cb20 [0218.490] wcscpy (in: _Dest=0x32cb20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.490] wcscat (in: _Dest=0x32cb20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.490] wcscat (in: _Dest=0x32cb20, _Source="ZPDIR32F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" [0218.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32cb20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660 [0218.491] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5a34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR33F.GIF", cAlternateFileName="")) returned 1 [0218.491] wcscmp (_String1="ZPDIR33F.GIF", _String2=".") returned 1 [0218.491] wcscmp (_String1="ZPDIR33F.GIF", _String2="..") returned 1 [0218.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d5d0 [0218.491] wcscpy (in: _Dest=0x32d5d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.491] wcscat (in: _Dest=0x32d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.491] wcscat (in: _Dest=0x32d5d0, _Source="ZPDIR33F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" [0218.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c [0218.492] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xa9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR34F.GIF", cAlternateFileName="")) returned 1 [0218.492] wcscmp (_String1="ZPDIR34F.GIF", _String2=".") returned 1 [0218.492] wcscmp (_String1="ZPDIR34F.GIF", _String2="..") returned 1 [0218.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d538 [0218.492] wcscpy (in: _Dest=0x32d538, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.492] wcscat (in: _Dest=0x32d538, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.492] wcscat (in: _Dest=0x32d538, _Source="ZPDIR34F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" [0218.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0218.493] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x4660, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR35F.GIF", cAlternateFileName="")) returned 1 [0218.493] wcscmp (_String1="ZPDIR35F.GIF", _String2=".") returned 1 [0218.493] wcscmp (_String1="ZPDIR35F.GIF", _String2="..") returned 1 [0218.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d2d8 [0218.493] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.493] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.493] wcscat (in: _Dest=0x32d2d8, _Source="ZPDIR35F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" [0218.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0218.494] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x875e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR36F.GIF", cAlternateFileName="")) returned 1 [0218.494] wcscmp (_String1="ZPDIR36F.GIF", _String2=".") returned 1 [0218.494] wcscmp (_String1="ZPDIR36F.GIF", _String2="..") returned 1 [0218.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32ca88 [0218.494] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.494] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.494] wcscat (in: _Dest=0x32ca88, _Source="ZPDIR36F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" [0218.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0 [0218.495] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xd1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR37F.GIF", cAlternateFileName="")) returned 1 [0218.495] wcscmp (_String1="ZPDIR37F.GIF", _String2=".") returned 1 [0218.495] wcscmp (_String1="ZPDIR37F.GIF", _String2="..") returned 1 [0218.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x32d078 [0218.495] wcscpy (in: _Dest=0x32d078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.495] wcscat (in: _Dest=0x32d078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.495] wcscat (in: _Dest=0x32d078, _Source="ZPDIR37F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" [0218.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638 [0218.496] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x62393e90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xcbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR38F.GIF", cAlternateFileName="")) returned 1 [0218.496] wcscmp (_String1="ZPDIR38F.GIF", _String2=".") returned 1 [0218.496] wcscmp (_String1="ZPDIR38F.GIF", _String2="..") returned 1 [0218.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc16b0 [0218.496] wcscpy (in: _Dest=0x7cc16b0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.496] wcscat (in: _Dest=0x7cc16b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.496] wcscat (in: _Dest=0x7cc16b0, _Source="ZPDIR38F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" [0218.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc16b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160c [0218.497] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xdc9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR39F.GIF", cAlternateFileName="")) returned 1 [0218.497] wcscmp (_String1="ZPDIR39F.GIF", _String2=".") returned 1 [0218.497] wcscmp (_String1="ZPDIR39F.GIF", _String2="..") returned 1 [0218.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1288 [0218.497] wcscpy (in: _Dest=0x7cc1288, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.497] wcscat (in: _Dest=0x7cc1288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.497] wcscat (in: _Dest=0x7cc1288, _Source="ZPDIR39F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" [0218.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x195c [0218.498] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3B.GIF", cAlternateFileName="")) returned 1 [0218.498] wcscmp (_String1="ZPDIR3B.GIF", _String2=".") returned 1 [0218.498] wcscmp (_String1="ZPDIR3B.GIF", _String2="..") returned 1 [0218.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc11f0 [0218.498] wcscpy (in: _Dest=0x7cc11f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.498] wcscat (in: _Dest=0x7cc11f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.498] wcscat (in: _Dest=0x7cc11f0, _Source="ZPDIR3B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" [0218.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc11f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1958 [0218.499] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x58e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3F.GIF", cAlternateFileName="")) returned 1 [0218.499] wcscmp (_String1="ZPDIR3F.GIF", _String2=".") returned 1 [0218.499] wcscmp (_String1="ZPDIR3F.GIF", _String2="..") returned 1 [0218.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0280 [0218.499] wcscpy (in: _Dest=0x7cc0280, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.499] wcscat (in: _Dest=0x7cc0280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.499] wcscat (in: _Dest=0x7cc0280, _Source="ZPDIR3F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" [0218.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b8 [0218.500] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x112a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR40F.GIF", cAlternateFileName="")) returned 1 [0218.500] wcscmp (_String1="ZPDIR40F.GIF", _String2=".") returned 1 [0218.500] wcscmp (_String1="ZPDIR40F.GIF", _String2="..") returned 1 [0218.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0318 [0218.500] wcscpy (in: _Dest=0x7cc0318, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.501] wcscat (in: _Dest=0x7cc0318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.501] wcscat (in: _Dest=0x7cc0318, _Source="ZPDIR40F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" [0218.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0318, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60 [0218.501] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR41F.GIF", cAlternateFileName="")) returned 1 [0218.502] wcscmp (_String1="ZPDIR41F.GIF", _String2=".") returned 1 [0218.502] wcscmp (_String1="ZPDIR41F.GIF", _String2="..") returned 1 [0218.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0870 [0218.502] wcscpy (in: _Dest=0x7cc0870, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.502] wcscat (in: _Dest=0x7cc0870, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.502] wcscat (in: _Dest=0x7cc0870, _Source="ZPDIR41F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" [0218.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc [0218.503] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xe591, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR42F.GIF", cAlternateFileName="")) returned 1 [0218.503] wcscmp (_String1="ZPDIR42F.GIF", _String2=".") returned 1 [0218.503] wcscmp (_String1="ZPDIR42F.GIF", _String2="..") returned 1 [0218.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0908 [0218.503] wcscpy (in: _Dest=0x7cc0908, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.503] wcscat (in: _Dest=0x7cc0908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.503] wcscat (in: _Dest=0x7cc0908, _Source="ZPDIR42F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" [0218.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0 [0218.504] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x98a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43B.GIF", cAlternateFileName="")) returned 1 [0218.504] wcscmp (_String1="ZPDIR43B.GIF", _String2=".") returned 1 [0218.504] wcscmp (_String1="ZPDIR43B.GIF", _String2="..") returned 1 [0218.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc07d8 [0218.504] wcscpy (in: _Dest=0x7cc07d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.504] wcscat (in: _Dest=0x7cc07d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.504] wcscat (in: _Dest=0x7cc07d8, _Source="ZPDIR43B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" [0218.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc07d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030 [0218.505] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43F.GIF", cAlternateFileName="")) returned 1 [0218.505] wcscmp (_String1="ZPDIR43F.GIF", _String2=".") returned 1 [0218.505] wcscmp (_String1="ZPDIR43F.GIF", _String2="..") returned 1 [0218.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0f90 [0218.505] wcscpy (in: _Dest=0x7cc0f90, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.505] wcscat (in: _Dest=0x7cc0f90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.505] wcscat (in: _Dest=0x7cc0f90, _Source="ZPDIR43F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" [0218.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c [0218.506] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b06, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44B.GIF", cAlternateFileName="")) returned 1 [0218.506] wcscmp (_String1="ZPDIR44B.GIF", _String2=".") returned 1 [0218.506] wcscmp (_String1="ZPDIR44B.GIF", _String2="..") returned 1 [0218.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0ef8 [0218.506] wcscpy (in: _Dest=0x7cc0ef8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.506] wcscat (in: _Dest=0x7cc0ef8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.507] wcscat (in: _Dest=0x7cc0ef8, _Source="ZPDIR44B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" [0218.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090 [0218.507] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44F.GIF", cAlternateFileName="")) returned 1 [0218.507] wcscmp (_String1="ZPDIR44F.GIF", _String2=".") returned 1 [0218.507] wcscmp (_String1="ZPDIR44F.GIF", _String2="..") returned 1 [0218.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0e60 [0218.508] wcscpy (in: _Dest=0x7cc0e60, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.508] wcscat (in: _Dest=0x7cc0e60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.508] wcscat (in: _Dest=0x7cc0e60, _Source="ZPDIR44F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" [0218.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40 [0218.509] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x17bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45B.GIF", cAlternateFileName="")) returned 1 [0218.509] wcscmp (_String1="ZPDIR45B.GIF", _String2=".") returned 1 [0218.509] wcscmp (_String1="ZPDIR45B.GIF", _String2="..") returned 1 [0218.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0dc8 [0218.509] wcscpy (in: _Dest=0x7cc0dc8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.509] wcscat (in: _Dest=0x7cc0dc8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.509] wcscat (in: _Dest=0x7cc0dc8, _Source="ZPDIR45B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" [0218.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1868 [0218.510] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45F.GIF", cAlternateFileName="")) returned 1 [0218.510] wcscmp (_String1="ZPDIR45F.GIF", _String2=".") returned 1 [0218.510] wcscmp (_String1="ZPDIR45F.GIF", _String2="..") returned 1 [0218.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0d30 [0218.510] wcscpy (in: _Dest=0x7cc0d30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.510] wcscat (in: _Dest=0x7cc0d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.510] wcscat (in: _Dest=0x7cc0d30, _Source="ZPDIR45F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" [0218.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570 [0218.512] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1304, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46B.GIF", cAlternateFileName="")) returned 1 [0218.512] wcscmp (_String1="ZPDIR46B.GIF", _String2=".") returned 1 [0218.512] wcscmp (_String1="ZPDIR46B.GIF", _String2="..") returned 1 [0218.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0c98 [0218.513] wcscpy (in: _Dest=0x7cc0c98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.513] wcscat (in: _Dest=0x7cc0c98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.513] wcscat (in: _Dest=0x7cc0c98, _Source="ZPDIR46B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" [0218.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0c98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc [0218.514] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x141c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46F.GIF", cAlternateFileName="")) returned 1 [0218.514] wcscmp (_String1="ZPDIR46F.GIF", _String2=".") returned 1 [0218.514] wcscmp (_String1="ZPDIR46F.GIF", _String2="..") returned 1 [0218.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0c00 [0218.514] wcscpy (in: _Dest=0x7cc0c00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.514] wcscat (in: _Dest=0x7cc0c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.514] wcscat (in: _Dest=0x7cc0c00, _Source="ZPDIR46F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" [0218.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c1c [0218.515] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623b9ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x7517, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47B.GIF", cAlternateFileName="")) returned 1 [0218.515] wcscmp (_String1="ZPDIR47B.GIF", _String2=".") returned 1 [0218.515] wcscmp (_String1="ZPDIR47B.GIF", _String2="..") returned 1 [0218.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0b68 [0218.515] wcscpy (in: _Dest=0x7cc0b68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.515] wcscat (in: _Dest=0x7cc0b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.515] wcscat (in: _Dest=0x7cc0b68, _Source="ZPDIR47B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" [0218.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14 [0218.517] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x539e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47F.GIF", cAlternateFileName="")) returned 1 [0218.517] wcscmp (_String1="ZPDIR47F.GIF", _String2=".") returned 1 [0218.517] wcscmp (_String1="ZPDIR47F.GIF", _String2="..") returned 1 [0218.517] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc0ad0 [0218.517] wcscpy (in: _Dest=0x7cc0ad0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.517] wcscat (in: _Dest=0x7cc0ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.517] wcscat (in: _Dest=0x7cc0ad0, _Source="ZPDIR47F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" [0218.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c [0218.860] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x67f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48B.GIF", cAlternateFileName="")) returned 1 [0218.860] wcscmp (_String1="ZPDIR48B.GIF", _String2=".") returned 1 [0218.860] wcscmp (_String1="ZPDIR48B.GIF", _String2="..") returned 1 [0218.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1320 [0218.860] wcscpy (in: _Dest=0x7cc1320, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.860] wcscat (in: _Dest=0x7cc1320, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.860] wcscat (in: _Dest=0x7cc1320, _Source="ZPDIR48B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" [0218.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c [0218.862] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48F.GIF", cAlternateFileName="")) returned 1 [0218.862] wcscmp (_String1="ZPDIR48F.GIF", _String2=".") returned 1 [0218.862] wcscmp (_String1="ZPDIR48F.GIF", _String2="..") returned 1 [0218.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1748 [0218.862] wcscpy (in: _Dest=0x7cc1748, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.862] wcscat (in: _Dest=0x7cc1748, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.862] wcscat (in: _Dest=0x7cc1748, _Source="ZPDIR48F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" [0218.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0 [0218.863] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49B.GIF", cAlternateFileName="")) returned 1 [0218.863] wcscmp (_String1="ZPDIR49B.GIF", _String2=".") returned 1 [0218.863] wcscmp (_String1="ZPDIR49B.GIF", _String2="..") returned 1 [0218.863] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc17e0 [0218.863] wcscpy (in: _Dest=0x7cc17e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.863] wcscat (in: _Dest=0x7cc17e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.863] wcscat (in: _Dest=0x7cc17e0, _Source="ZPDIR49B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" [0218.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc17e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94 [0218.864] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1b99, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49F.GIF", cAlternateFileName="")) returned 1 [0218.864] wcscmp (_String1="ZPDIR49F.GIF", _String2=".") returned 1 [0218.864] wcscmp (_String1="ZPDIR49F.GIF", _String2="..") returned 1 [0218.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1878 [0218.865] wcscpy (in: _Dest=0x7cc1878, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.865] wcscat (in: _Dest=0x7cc1878, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.865] wcscat (in: _Dest=0x7cc1878, _Source="ZPDIR49F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" [0218.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1878, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0218.866] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2fc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4B.GIF", cAlternateFileName="")) returned 1 [0218.866] wcscmp (_String1="ZPDIR4B.GIF", _String2=".") returned 1 [0218.866] wcscmp (_String1="ZPDIR4B.GIF", _String2="..") returned 1 [0218.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc1910 [0218.866] wcscpy (in: _Dest=0x7cc1910, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.866] wcscat (in: _Dest=0x7cc1910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.866] wcscat (in: _Dest=0x7cc1910, _Source="ZPDIR4B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" [0218.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4 [0218.867] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x8edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4F.GIF", cAlternateFileName="")) returned 1 [0218.867] wcscmp (_String1="ZPDIR4F.GIF", _String2=".") returned 1 [0218.867] wcscmp (_String1="ZPDIR4F.GIF", _String2="..") returned 1 [0218.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc19a8 [0218.867] wcscpy (in: _Dest=0x7cc19a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.867] wcscat (in: _Dest=0x7cc19a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.867] wcscat (in: _Dest=0x7cc19a8, _Source="ZPDIR4F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" [0218.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc19a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c [0218.868] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x10a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50B.GIF", cAlternateFileName="")) returned 1 [0218.868] wcscmp (_String1="ZPDIR50B.GIF", _String2=".") returned 1 [0218.868] wcscmp (_String1="ZPDIR50B.GIF", _String2="..") returned 1 [0218.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1a40 [0218.868] wcscpy (in: _Dest=0x7cc1a40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.868] wcscat (in: _Dest=0x7cc1a40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.868] wcscat (in: _Dest=0x7cc1a40, _Source="ZPDIR50B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" [0218.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8 [0218.869] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x117f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50F.GIF", cAlternateFileName="")) returned 1 [0218.869] wcscmp (_String1="ZPDIR50F.GIF", _String2=".") returned 1 [0218.869] wcscmp (_String1="ZPDIR50F.GIF", _String2="..") returned 1 [0218.870] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1158 [0218.870] wcscpy (in: _Dest=0x7cc1158, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.870] wcscat (in: _Dest=0x7cc1158, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.870] wcscat (in: _Dest=0x7cc1158, _Source="ZPDIR50F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" [0218.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588 [0218.871] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2395, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51B.GIF", cAlternateFileName="")) returned 1 [0218.871] wcscmp (_String1="ZPDIR51B.GIF", _String2=".") returned 1 [0218.871] wcscmp (_String1="ZPDIR51B.GIF", _String2="..") returned 1 [0218.871] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc1580 [0218.871] wcscpy (in: _Dest=0x7cc1580, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.871] wcscat (in: _Dest=0x7cc1580, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.871] wcscat (in: _Dest=0x7cc1580, _Source="ZPDIR51B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" [0218.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00 [0218.872] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51F.GIF", cAlternateFileName="")) returned 1 [0218.872] wcscmp (_String1="ZPDIR51F.GIF", _String2=".") returned 1 [0218.872] wcscmp (_String1="ZPDIR51F.GIF", _String2="..") returned 1 [0218.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x7cc14e8 [0218.872] wcscpy (in: _Dest=0x7cc14e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.872] wcscat (in: _Dest=0x7cc14e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.872] wcscat (in: _Dest=0x7cc14e8, _Source="ZPDIR51F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" [0218.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc14e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648 [0218.873] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x592b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5B.GIF", cAlternateFileName="")) returned 1 [0218.873] wcscmp (_String1="ZPDIR5B.GIF", _String2=".") returned 1 [0218.873] wcscmp (_String1="ZPDIR5B.GIF", _String2="..") returned 1 [0218.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc1ad8 [0218.873] wcscpy (in: _Dest=0x7cc1ad8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.873] wcscat (in: _Dest=0x7cc1ad8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.873] wcscat (in: _Dest=0x7cc1ad8, _Source="ZPDIR5B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" [0218.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8 [0218.874] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0xdb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5F.GIF", cAlternateFileName="")) returned 1 [0218.874] wcscmp (_String1="ZPDIR5F.GIF", _String2=".") returned 1 [0218.874] wcscmp (_String1="ZPDIR5F.GIF", _String2="..") returned 1 [0218.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc1028 [0218.875] wcscpy (in: _Dest=0x7cc1028, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.875] wcscat (in: _Dest=0x7cc1028, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.875] wcscat (in: _Dest=0x7cc1028, _Source="ZPDIR5F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" [0218.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0218.876] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6B.GIF", cAlternateFileName="")) returned 1 [0218.876] wcscmp (_String1="ZPDIR6B.GIF", _String2=".") returned 1 [0218.876] wcscmp (_String1="ZPDIR6B.GIF", _String2="..") returned 1 [0218.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc10c0 [0218.877] wcscpy (in: _Dest=0x7cc10c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.877] wcscat (in: _Dest=0x7cc10c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.877] wcscat (in: _Dest=0x7cc10c0, _Source="ZPDIR6B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" [0218.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc10c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0218.878] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x41e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6F.GIF", cAlternateFileName="")) returned 1 [0218.878] wcscmp (_String1="ZPDIR6F.GIF", _String2=".") returned 1 [0218.878] wcscmp (_String1="ZPDIR6F.GIF", _String2="..") returned 1 [0218.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc13b8 [0218.878] wcscpy (in: _Dest=0x7cc13b8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.878] wcscat (in: _Dest=0x7cc13b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.878] wcscat (in: _Dest=0x7cc13b8, _Source="ZPDIR6F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" [0218.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc13b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050 [0218.879] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x623e0150, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5559, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7B.GIF", cAlternateFileName="")) returned 1 [0218.879] wcscmp (_String1="ZPDIR7B.GIF", _String2=".") returned 1 [0218.879] wcscmp (_String1="ZPDIR7B.GIF", _String2="..") returned 1 [0218.879] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc1450 [0218.880] wcscpy (in: _Dest=0x7cc1450, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.880] wcscat (in: _Dest=0x7cc1450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.880] wcscat (in: _Dest=0x7cc1450, _Source="ZPDIR7B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" [0218.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0 [0218.881] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x5fdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7F.GIF", cAlternateFileName="")) returned 1 [0218.881] wcscmp (_String1="ZPDIR7F.GIF", _String2=".") returned 1 [0218.881] wcscmp (_String1="ZPDIR7F.GIF", _String2="..") returned 1 [0218.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc1618 [0218.881] wcscpy (in: _Dest=0x7cc1618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.881] wcscat (in: _Dest=0x7cc1618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.881] wcscat (in: _Dest=0x7cc1618, _Source="ZPDIR7F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" [0218.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc1618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50 [0218.882] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8B.GIF", cAlternateFileName="")) returned 1 [0218.882] wcscmp (_String1="ZPDIR8B.GIF", _String2=".") returned 1 [0218.882] wcscmp (_String1="ZPDIR8B.GIF", _String2="..") returned 1 [0218.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc09a0 [0218.882] wcscpy (in: _Dest=0x7cc09a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.882] wcscat (in: _Dest=0x7cc09a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.882] wcscat (in: _Dest=0x7cc09a0, _Source="ZPDIR8B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" [0218.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc09a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc00 [0218.883] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8F.GIF", cAlternateFileName="")) returned 1 [0218.883] wcscmp (_String1="ZPDIR8F.GIF", _String2=".") returned 1 [0218.883] wcscmp (_String1="ZPDIR8F.GIF", _String2="..") returned 1 [0218.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0150 [0218.883] wcscpy (in: _Dest=0x7cc0150, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.883] wcscat (in: _Dest=0x7cc0150, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.883] wcscat (in: _Dest=0x7cc0150, _Source="ZPDIR8F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" [0218.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0 [0218.884] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9B.GIF", cAlternateFileName="")) returned 1 [0218.884] wcscmp (_String1="ZPDIR9B.GIF", _String2=".") returned 1 [0218.884] wcscmp (_String1="ZPDIR9B.GIF", _String2="..") returned 1 [0218.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc01e8 [0218.884] wcscpy (in: _Dest=0x7cc01e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.885] wcscat (in: _Dest=0x7cc01e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.885] wcscat (in: _Dest=0x7cc01e8, _Source="ZPDIR9B.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" [0218.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc01e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34 [0218.886] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 1 [0218.886] wcscmp (_String1="ZPDIR9F.GIF", _String2=".") returned 1 [0218.886] wcscmp (_String1="ZPDIR9F.GIF", _String2="..") returned 1 [0218.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x7cc0a38 [0218.886] wcscpy (in: _Dest=0x7cc0a38, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR" [0218.886] wcscat (in: _Dest=0x7cc0a38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\" [0218.886] wcscat (in: _Dest=0x7cc0a38, _Source="ZPDIR9F.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" [0218.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cc0a38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54 [0218.887] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3d58498 | out: lpFindFileData=0x3d58498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f42f800, ftCreationTime.dwHighDateTime=0x1bd0385, ftLastAccessTime.dwLowDateTime=0x624062b0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x5f42f800, ftLastWriteTime.dwHighDateTime=0x1bd0385, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 0 [0218.887] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0219.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58498) returned 1 [0219.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19098) returned 1 [0219.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19198) returned 1 Thread: id = 6567 os_tid = 0x1e48 [0192.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll")) returned 0x20 [0202.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0203.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.461] GetLastError () returned 0x5 [0204.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0204.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c5c8) returned 1 Thread: id = 6568 os_tid = 0x1e4c [0192.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x7a68b30 [0192.195] wcscpy (in: _Dest=0x7a68b30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0192.195] wcscat (in: _Dest=0x7a68b30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0192.195] wcscat (in: _Dest=0x7a68b30, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*" [0192.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58bd0 [0192.195] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63ef3b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0203.213] wcscmp (_String1=".", _String2=".") returned 0 [0203.213] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63ef3b90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x64096ab0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.213] wcscmp (_String1="..", _String2=".") returned 1 [0203.213] wcscmp (_String1="..", _String2="..") returned 0 [0203.213] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae43900, ftCreationTime.dwHighDateTime=0x1c7e8ab, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2ae43900, ftLastWriteTime.dwHighDateTime=0x1c7e8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="CLASSI~1.DOT")) returned 1 [0203.213] wcscmp (_String1="Classic.dotx", _String2=".") returned 1 [0203.213] wcscmp (_String1="Classic.dotx", _String2="..") returned 1 [0203.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb6160 [0203.213] wcscpy (in: _Dest=0x7cb6160, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.213] wcscat (in: _Dest=0x7cb6160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.213] wcscat (in: _Dest=0x7cb6160, _Source="Classic.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" [0203.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0 [0203.312] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x23e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.dotx", cAlternateFileName="DEFAUL~1.DOT")) returned 1 [0203.312] wcscmp (_String1="Default.dotx", _String2=".") returned 1 [0203.312] wcscmp (_String1="Default.dotx", _String2="..") returned 1 [0203.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x3df48c0 [0203.312] wcscpy (in: _Dest=0x3df48c0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.312] wcscat (in: _Dest=0x3df48c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.312] wcscat (in: _Dest=0x3df48c0, _Source="Default.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" [0203.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3df48c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0203.314] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x20f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultBlackAndWhite.dotx", cAlternateFileName="DEFAUL~2.DOT")) returned 1 [0203.314] wcscmp (_String1="DefaultBlackAndWhite.dotx", _String2=".") returned 1 [0203.314] wcscmp (_String1="DefaultBlackAndWhite.dotx", _String2="..") returned 1 [0203.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac) returned 0x2ff6d00 [0203.314] wcscpy (in: _Dest=0x2ff6d00, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.314] wcscat (in: _Dest=0x2ff6d00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.314] wcscat (in: _Dest=0x2ff6d00, _Source="DefaultBlackAndWhite.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" [0203.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x2ff6d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc [0203.315] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ef3b90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="Distinctive.dotx", cAlternateFileName="DISTIN~1.DOT")) returned 1 [0203.315] wcscmp (_String1="Distinctive.dotx", _String2=".") returned 1 [0203.315] wcscmp (_String1="Distinctive.dotx", _String2="..") returned 1 [0203.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053330 [0203.316] wcscpy (in: _Dest=0x3053330, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.316] wcscat (in: _Dest=0x3053330, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.316] wcscat (in: _Dest=0x3053330, _Source="Distinctive.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" [0203.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4 [0203.317] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63f65fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x222a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elegant.dotx", cAlternateFileName="ELEGAN~1.DOT")) returned 1 [0203.317] wcscmp (_String1="Elegant.dotx", _String2=".") returned 1 [0203.317] wcscmp (_String1="Elegant.dotx", _String2="..") returned 1 [0203.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x92) returned 0x7cb6200 [0203.317] wcscpy (in: _Dest=0x7cb6200, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.317] wcscat (in: _Dest=0x7cb6200, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.317] wcscat (in: _Dest=0x7cb6200, _Source="Elegant.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" [0203.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c [0203.318] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x221b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy.dotx", cAlternateFileName="FANCY~1.DOT")) returned 1 [0203.319] wcscmp (_String1="Fancy.dotx", _String2=".") returned 1 [0203.319] wcscmp (_String1="Fancy.dotx", _String2="..") returned 1 [0203.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8e) returned 0x32ceb0 [0203.319] wcscpy (in: _Dest=0x32ceb0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.319] wcscat (in: _Dest=0x32ceb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.319] wcscat (in: _Dest=0x32ceb0, _Source="Fancy.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" [0203.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ceb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc [0203.320] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="Formal.dotx", cAlternateFileName="FORMAL~1.DOT")) returned 1 [0203.320] wcscmp (_String1="Formal.dotx", _String2=".") returned 1 [0203.320] wcscmp (_String1="Formal.dotx", _String2="..") returned 1 [0203.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32ca88 [0203.320] wcscpy (in: _Dest=0x32ca88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.320] wcscat (in: _Dest=0x32ca88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.320] wcscat (in: _Dest=0x32ca88, _Source="Formal.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" [0203.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32ca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af0 [0203.322] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x63ffe530, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x210c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manuscript.dotx", cAlternateFileName="MANUSC~1.DOT")) returned 1 [0203.322] wcscmp (_String1="Manuscript.dotx", _String2=".") returned 1 [0203.322] wcscmp (_String1="Manuscript.dotx", _String2="..") returned 1 [0203.322] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x7cb62a0 [0203.322] wcscpy (in: _Dest=0x7cb62a0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.322] wcscat (in: _Dest=0x7cb62a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.322] wcscat (in: _Dest=0x7cb62a0, _Source="Manuscript.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" [0203.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb62a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22dc [0203.324] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64024690, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x21ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modern.dotx", cAlternateFileName="MODERN~1.DOT")) returned 1 [0203.324] wcscmp (_String1="Modern.dotx", _String2=".") returned 1 [0203.324] wcscmp (_String1="Modern.dotx", _String2="..") returned 1 [0203.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d2d8 [0203.324] wcscpy (in: _Dest=0x32d2d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.324] wcscat (in: _Dest=0x32d2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.324] wcscat (in: _Dest=0x32d2d8, _Source="Modern.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" [0203.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4 [0203.326] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a92700, ftCreationTime.dwHighDateTime=0x1ca56f2, ftLastAccessTime.dwLowDateTime=0x6404a7f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97a92700, ftLastWriteTime.dwHighDateTime=0x1ca56f2, nFileSizeHigh=0x0, nFileSizeLow=0x8ce63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.dotx", cAlternateFileName="NEWSPR~1.DOT")) returned 1 [0203.326] wcscmp (_String1="Newsprint.dotx", _String2=".") returned 1 [0203.326] wcscmp (_String1="Newsprint.dotx", _String2="..") returned 1 [0203.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x96) returned 0x7cb6340 [0203.326] wcscpy (in: _Dest=0x7cb6340, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.326] wcscat (in: _Dest=0x7cb6340, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.326] wcscat (in: _Dest=0x7cb6340, _Source="Newsprint.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" [0203.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cb6340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15e0 [0203.327] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a92700, ftCreationTime.dwHighDateTime=0x1ca56f2, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97a92700, ftLastWriteTime.dwHighDateTime=0x1ca56f2, nFileSizeHigh=0x0, nFileSizeLow=0x5adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.dotx", cAlternateFileName="PERSPE~1.DOT")) returned 1 [0203.327] wcscmp (_String1="Perspective.dotx", _String2=".") returned 1 [0203.327] wcscmp (_String1="Perspective.dotx", _String2="..") returned 1 [0203.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053720 [0203.328] wcscpy (in: _Dest=0x3053720, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.328] wcscat (in: _Dest=0x3053720, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.328] wcscat (in: _Dest=0x3053720, _Source="Perspective.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" [0203.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1948 [0203.329] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x20f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.dotx", cAlternateFileName="SIMPLE~1.DOT")) returned 1 [0203.329] wcscmp (_String1="Simple.dotx", _String2=".") returned 1 [0203.329] wcscmp (_String1="Simple.dotx", _String2="..") returned 1 [0203.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d668 [0203.329] wcscpy (in: _Dest=0x32d668, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.329] wcscat (in: _Dest=0x32d668, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.329] wcscat (in: _Dest=0x32d668, _Source="Simple.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" [0203.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290 [0203.330] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a92700, ftCreationTime.dwHighDateTime=0x1ca56f2, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x97a92700, ftLastWriteTime.dwHighDateTime=0x1ca56f2, nFileSizeHigh=0x0, nFileSizeLow=0x5d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.dotx", cAlternateFileName="THATCH~1.DOT")) returned 1 [0203.330] wcscmp (_String1="Thatch.dotx", _String2=".") returned 1 [0203.331] wcscmp (_String1="Thatch.dotx", _String2="..") returned 1 [0203.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x32d700 [0203.331] wcscpy (in: _Dest=0x32d700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.331] wcscat (in: _Dest=0x32d700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.331] wcscat (in: _Dest=0x32d700, _Source="Thatch.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" [0203.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90 [0203.332] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="TRADIT~1.DOT")) returned 1 [0203.332] wcscmp (_String1="Traditional.dotx", _String2=".") returned 1 [0203.332] wcscmp (_String1="Traditional.dotx", _String2="..") returned 1 [0203.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x9a) returned 0x3053a68 [0203.332] wcscpy (in: _Dest=0x3053a68, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles" [0203.332] wcscat (in: _Dest=0x3053a68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\" [0203.332] wcscat (in: _Dest=0x3053a68, _Source="Traditional.dotx" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" [0203.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3053a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88 [0203.333] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3d58bd0 | out: lpFindFileData=0x3d58bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61766100, ftCreationTime.dwHighDateTime=0x1c6eaeb, ftLastAccessTime.dwLowDateTime=0x64096ab0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x61766100, ftLastWriteTime.dwHighDateTime=0x1c6eaeb, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="TRADIT~1.DOT")) returned 0 [0203.333] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0203.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58bd0) returned 1 [0203.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68b30) returned 1 [0203.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a598) returned 1 Thread: id = 6569 os_tid = 0x1e54 [0192.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn")) returned 0x20 [0202.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", dwFileAttributes=0x20) returned 0 [0203.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.280] GetLastError () returned 0x5 [0204.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn", dwFileAttributes=0x20) returned 0 [0204.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 6570 os_tid = 0x1e58 [0192.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn")) returned 0x20 [0202.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", dwFileAttributes=0x20) returned 0 [0203.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.280] GetLastError () returned 0x5 [0204.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn", dwFileAttributes=0x20) returned 0 [0204.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 Thread: id = 6571 os_tid = 0x20d0 [0192.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css")) returned 0x20 [0202.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", dwFileAttributes=0x20) returned 0 [0204.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.438] GetLastError () returned 0x5 [0204.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS", dwFileAttributes=0x20) returned 0 [0204.439] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19718) returned 1 Thread: id = 6572 os_tid = 0x2214 [0192.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm")) returned 0x20 [0202.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", dwFileAttributes=0x20) returned 0 [0204.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.469] GetLastError () returned 0x5 [0204.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM", dwFileAttributes=0x20) returned 0 [0204.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a683c0) returned 1 Thread: id = 6573 os_tid = 0x1cfc [0192.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl")) returned 0x20 [0202.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", dwFileAttributes=0x20) returned 0 [0204.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.454] GetLastError () returned 0x5 [0204.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL", dwFileAttributes=0x20) returned 0 [0204.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68228) returned 1 Thread: id = 6574 os_tid = 0x1d04 [0192.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs")) returned 0x20 [0202.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", dwFileAttributes=0x20) returned 0 [0203.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.279] GetLastError () returned 0x5 [0204.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS", dwFileAttributes=0x20) returned 0 [0204.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a718) returned 1 Thread: id = 6575 os_tid = 0x1d08 [0192.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc")) returned 0x20 [0202.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", dwFileAttributes=0x20) returned 0 [0203.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.280] GetLastError () returned 0x5 [0204.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC", dwFileAttributes=0x20) returned 0 [0204.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68118) returned 1 Thread: id = 6576 os_tid = 0x1d0c [0192.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt")) returned 0x20 [0204.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", dwFileAttributes=0x20) returned 0 [0204.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.559] GetLastError () returned 0x5 [0204.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT", dwFileAttributes=0x20) returned 0 [0204.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681a0) returned 1 Thread: id = 6577 os_tid = 0x148c [0192.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk")) returned 0x20 [0204.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0204.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.565] GetLastError () returned 0x5 [0204.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0204.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 6578 os_tid = 0x15d0 [0193.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk")) returned 0x20 [0202.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0204.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.286] GetLastError () returned 0x5 [0204.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0204.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 6579 os_tid = 0x19c4 [0193.376] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json")) returned 0x2020 [0195.167] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0198.034] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1134 [0198.035] GetFileSizeEx (in: hFile=0x1134, lpFileSize=0x97ffafc | out: lpFileSize=0x97ffafc*=254) returned 1 [0198.035] SetFilePointerEx (in: hFile=0x1134, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.035] ReadFile (in: hFile=0x1134, lpBuffer=0x97ffad8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x97ffae8, lpOverlapped=0x0 | out: lpBuffer=0x97ffad8*, lpNumberOfBytesRead=0x97ffae8*=0x4, lpOverlapped=0x0) returned 1 [0198.042] SetFilePointerEx (in: hFile=0x1134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0198.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0198.042] NtQuerySystemTime (in: CurrentTime=0x97ffa70 | out: CurrentTime=0x97ffa70*=132462177766212000) returned 0x0 [0198.042] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x4a784ad1 [0198.042] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x4a8e0439 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x3c4d6097 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x61d8c3b2 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x1d3b4b64 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x405445c [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x12283957 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x3bd22cd4 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x4085d74c [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x39eaae13 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0xc9cd180 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x3b97ea79 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x1c4797b1 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x438abd07 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0xcf28300 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x70a3f66 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x4fba455e [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x52091119 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x2fd4b98d [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x4258944f [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x93adae9 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0xaa33b23 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x797b17a6 [0198.043] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x1dc1b42 [0198.044] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x7b94dfd4 [0198.044] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x61479f4a [0198.044] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x265f5414 [0198.044] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x9c46cc0 [0198.044] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x4fe5f2f4 [0198.044] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x4f5bde5e [0198.044] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x1b6e6980 [0198.044] RtlRandomEx (in: Seed=0x97ffa68 | out: Seed=0x97ffa68) returned 0x79a7b4cb [0198.057] ReadFile (in: hFile=0x1134, lpBuffer=0x7a7c8c0, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0x97ffa64, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesRead=0x97ffa64*=0xfe, lpOverlapped=0x0) returned 1 [0198.057] SetFilePointerEx (in: hFile=0x1134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.057] WriteFile (in: hFile=0x1134, lpBuffer=0x7a804c8*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x97ffa68, lpOverlapped=0x0 | out: lpBuffer=0x7a804c8*, lpNumberOfBytesWritten=0x97ffa68*=0xfe, lpOverlapped=0x0) returned 1 [0200.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edbb48 [0200.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3edd740 [0200.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3edd740) returned 1 [0200.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a804c8) returned 1 [0200.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a7c8c0) returned 1 [0200.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c1f8) returned 1 [0200.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84560) returned 1 [0200.013] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86b78 [0200.014] SetFilePointerEx (in: hFile=0x1134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.014] WriteFile (in: hFile=0x1134, lpBuffer=0x7cb69f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x97ffaf0, lpOverlapped=0x0 | out: lpBuffer=0x7cb69f8*, lpNumberOfBytesWritten=0x97ffaf0*=0x10c, lpOverlapped=0x0) returned 1 [0200.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd20 [0200.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd20) returned 1 [0200.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bd20 [0200.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b550 [0200.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0200.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0200.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.790] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="ec") returned 2 [0200.790] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="cb") returned 2 [0200.790] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="e4") returned 2 [0200.790] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="57") returned 2 [0200.790] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="64") returned 2 [0200.790] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="25") returned 2 [0200.790] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="15") returned 2 [0200.790] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="1e") returned 2 [0200.790] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="28") returned 2 [0200.790] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="37") returned 2 [0200.791] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.791] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="93") returned 2 [0200.791] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="38") returned 2 [0200.791] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="8e") returned 2 [0200.791] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="8a") returned 2 [0200.791] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.791] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="36") returned 2 [0200.791] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="4c") returned 2 [0200.791] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="7e") returned 2 [0200.791] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="1f") returned 2 [0200.791] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="00") returned 2 [0200.791] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="e6") returned 2 [0200.791] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="65") returned 2 [0200.791] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="7e") returned 2 [0200.791] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="a7") returned 2 [0200.791] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="93") returned 2 [0200.791] RtlInitAnsiString (in: DestinationString=0x97ffa78, SourceString="eccbe4576425151e28377a93388e8a0c364c7e1f00e6657ea793" | out: DestinationString="eccbe4576425151e28377a93388e8a0c364c7e1f00e6657ea793") [0200.791] RtlAnsiStringToUnicodeString (in: DestinationString=0x97ffa70, SourceString="eccbe4576425151e28377a93388e8a0c364c7e1f00e6657ea793", AllocateDestinationString=1 | out: DestinationString="eccbe4576425151e28377a93388e8a0c364c7e1f00e6657ea793") returned 0x0 [0200.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e2b0 [0200.791] wcscat (in: _Dest=0x7cd6398, _Source="eccbe45764251" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\eccbe45764251") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\eccbe45764251" [0200.791] wcscat (in: _Dest=0x7cd6398, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\eccbe45764251.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\eccbe45764251.68814f" [0200.791] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\eccbe45764251.68814f", NtPathName=0x97ffa68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\eccbe45764251.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x136) returned 0x3ea3518 [0201.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ea3518) returned 1 [0201.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd6280) returned 1 [0201.145] NtQueryInformationFile (in: FileHandle=0x1134, IoStatusBlock=0x97ffa40, FileInformation=0x97ffa48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x97ffa40, FileInformation=0x97ffa48) returned 0x0 [0201.145] NtSetInformationFile (FileHandle=0x1134, IoStatusBlock=0x97ffa40, FileInformation=0x97ffa48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6398) returned 1 [0201.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0201.356] FlushFileBuffers (hFile=0x1134) returned 1 [0201.369] CloseHandle (hObject=0x1134) returned 1 [0205.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7b7efd8 [0205.875] wcscpy (in: _Dest=0x7b7efd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\" [0205.875] wcscat (in: _Dest=0x7b7efd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\68814F-Readme.txt" [0205.875] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\68814f-readme.txt")) returned 0xffffffff [0205.876] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\7_0\\_locales\\ca\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x153c [0206.578] WriteFile (in: hFile=0x153c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x97ffa84, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x97ffa84*=0x8b9, lpOverlapped=0x0) returned 1 [0210.441] CloseHandle (hObject=0x153c) returned 1 [0215.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7efd8) returned 1 [0215.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b816c8) returned 1 Thread: id = 6580 os_tid = 0x19e0 [0193.380] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json")) returned 0x2020 [0195.177] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.227] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19a0 [0198.227] GetFileSizeEx (in: hFile=0x19a0, lpFileSize=0x8baf9c4 | out: lpFileSize=0x8baf9c4*=263) returned 1 [0198.228] SetFilePointerEx (in: hFile=0x19a0, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.228] ReadFile (in: hFile=0x19a0, lpBuffer=0x8baf9a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8baf9b0, lpOverlapped=0x0 | out: lpBuffer=0x8baf9a0*, lpNumberOfBytesRead=0x8baf9b0*=0x4, lpOverlapped=0x0) returned 1 [0198.229] SetFilePointerEx (in: hFile=0x19a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbb8 [0198.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0198.230] NtQuerySystemTime (in: CurrentTime=0x8baf938 | out: CurrentTime=0x8baf938*=132462177768084000) returned 0x0 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x4f2330b3 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x3d61bf0f [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x60b8b436 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x5e8526ec [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x3ae135f6 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x2fb5d393 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x5908cab4 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x13684972 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0xe821eb2 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x684a4642 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x12ea04ae [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x41776e4a [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x598c9e57 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x438703c4 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x544c4997 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x11c9dd82 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x7d60f4c2 [0198.230] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x4d4e81b2 [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x2085479b [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x2f2eca0e [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x349d4a67 [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x4f8842ca [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x2eacc18a [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x4d4c9bf0 [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x62913aca [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x6ab2f6a9 [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x6770bfa3 [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x409a7f7 [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x3cee39e4 [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x6bf36ca [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x43b9e053 [0198.231] RtlRandomEx (in: Seed=0x8baf930 | out: Seed=0x8baf930) returned 0x5c2a346f [0198.241] ReadFile (in: hFile=0x19a0, lpBuffer=0x7d1b7b8, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0x8baf92c, lpOverlapped=0x0 | out: lpBuffer=0x7d1b7b8*, lpNumberOfBytesRead=0x8baf92c*=0x107, lpOverlapped=0x0) returned 1 [0198.241] SetFilePointerEx (in: hFile=0x19a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.242] WriteFile (in: hFile=0x19a0, lpBuffer=0x7d1f3c0*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x8baf930, lpOverlapped=0x0 | out: lpBuffer=0x7d1f3c0*, lpNumberOfBytesWritten=0x8baf930*=0x107, lpOverlapped=0x0) returned 1 [0200.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e532b0 [0200.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54110 [0200.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54110) returned 1 [0200.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d1f3c0) returned 1 [0200.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d1b7b8) returned 1 [0200.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c630) returned 1 [0200.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b847e8) returned 1 [0200.037] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86788 [0200.038] SetFilePointerEx (in: hFile=0x19a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.038] WriteFile (in: hFile=0x19a0, lpBuffer=0x7cb6020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8baf9b8, lpOverlapped=0x0 | out: lpBuffer=0x7cb6020*, lpNumberOfBytesWritten=0x8baf9b8*=0x10c, lpOverlapped=0x0) returned 1 [0200.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0200.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0200.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bb68 [0200.832] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb40 [0200.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bac8 [0200.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bac8) returned 1 [0200.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.833] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="e9") returned 2 [0200.833] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="5a") returned 2 [0200.833] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="45") returned 2 [0200.833] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="0b") returned 2 [0200.833] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="fd") returned 2 [0200.833] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="66") returned 2 [0200.833] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="8d") returned 2 [0200.833] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="30") returned 2 [0200.833] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="34") returned 2 [0200.833] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.833] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="2d") returned 2 [0200.833] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="95") returned 2 [0200.833] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="06") returned 2 [0200.833] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="ae") returned 2 [0200.833] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="2c") returned 2 [0200.833] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="5c") returned 2 [0200.833] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.833] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="11") returned 2 [0200.834] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="44") returned 2 [0200.834] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="74") returned 2 [0200.834] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="4d") returned 2 [0200.834] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="06") returned 2 [0200.834] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="99") returned 2 [0200.834] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="4b") returned 2 [0200.834] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="d2") returned 2 [0200.834] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.834] RtlInitAnsiString (in: DestinationString=0x8baf940, SourceString="e95a450bfd668d3034f12d9506ae2c5cbb1144744d06994bd2a2" | out: DestinationString="e95a450bfd668d3034f12d9506ae2c5cbb1144744d06994bd2a2") [0200.834] RtlAnsiStringToUnicodeString (in: DestinationString=0x8baf938, SourceString="e95a450bfd668d3034f12d9506ae2c5cbb1144744d06994bd2a2", AllocateDestinationString=1 | out: DestinationString="e95a450bfd668d3034f12d9506ae2c5cbb1144744d06994bd2a2") returned 0x0 [0200.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cf90 [0200.834] wcscat (in: _Dest=0x7cd5748, _Source="e95a450bfd668" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\e95a450bfd668") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\e95a450bfd668" [0200.834] wcscat (in: _Dest=0x7cd5748, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\e95a450bfd668.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\e95a450bfd668.68814f" [0200.834] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\e95a450bfd668.68814f", NtPathName=0x8baf930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\e95a450bfd668.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7dd88c0 [0201.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd88c0) returned 1 [0201.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd73c0) returned 1 [0201.160] NtQueryInformationFile (in: FileHandle=0x19a0, IoStatusBlock=0x8baf908, FileInformation=0x8baf910, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8baf908, FileInformation=0x8baf910) returned 0x0 [0201.160] NtSetInformationFile (FileHandle=0x19a0, IoStatusBlock=0x8baf908, FileInformation=0x8baf910, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5748) returned 1 [0201.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf90) returned 1 [0201.385] FlushFileBuffers (hFile=0x19a0) returned 1 [0201.397] CloseHandle (hObject=0x19a0) returned 1 [0205.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x122) returned 0x7dda880 [0205.906] wcscpy (in: _Dest=0x7dda880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\" [0205.906] wcscat (in: _Dest=0x7dda880, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\68814F-Readme.txt" [0205.906] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\68814f-readme.txt")) returned 0xffffffff [0205.906] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d80 [0208.514] WriteFile (in: hFile=0x1d80, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8baf94c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8baf94c*=0x8b9, lpOverlapped=0x0) returned 1 [0211.226] CloseHandle (hObject=0x1d80) returned 1 [0215.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda880) returned 1 [0215.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec73a8) returned 1 Thread: id = 6581 os_tid = 0x1694 [0193.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml")) returned 0x20 [0193.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML", dwFileAttributes=0x20) returned 0 [0193.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.381] GetLastError () returned 0x5 [0193.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML", dwFileAttributes=0x20) returned 0 [0193.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69988) returned 1 Thread: id = 6582 os_tid = 0x15ec [0193.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv")) returned 0x20 [0193.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV", dwFileAttributes=0x20) returned 0 [0193.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0193.383] GetLastError () returned 0x5 [0193.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV", dwFileAttributes=0x20) returned 0 [0193.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a694c0) returned 1 Thread: id = 6583 os_tid = 0x22e8 [0193.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml")) returned 0x20 [0195.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML", dwFileAttributes=0x20) returned 0 [0195.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.239] GetLastError () returned 0x5 [0195.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML", dwFileAttributes=0x20) returned 0 [0195.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68e60) returned 1 Thread: id = 6584 os_tid = 0x24d0 [0193.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv")) returned 0x20 [0195.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV", dwFileAttributes=0x20) returned 0 [0195.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.385] GetLastError () returned 0x5 [0195.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV", dwFileAttributes=0x20) returned 0 [0195.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a10) returned 1 Thread: id = 6585 os_tid = 0x2508 [0193.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml")) returned 0x20 [0195.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML", dwFileAttributes=0x20) returned 0 [0195.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.187] GetLastError () returned 0x5 [0195.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML", dwFileAttributes=0x20) returned 0 [0195.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69cb8) returned 1 Thread: id = 6586 os_tid = 0x262c [0193.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv")) returned 0x20 [0195.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV", dwFileAttributes=0x20) returned 0 [0195.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.391] GetLastError () returned 0x5 [0195.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV", dwFileAttributes=0x20) returned 0 [0195.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 6587 os_tid = 0x16a8 [0193.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml")) returned 0x20 [0195.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML", dwFileAttributes=0x20) returned 0 [0195.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.393] GetLastError () returned 0x5 [0195.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML", dwFileAttributes=0x20) returned 0 [0195.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab98) returned 1 Thread: id = 6588 os_tid = 0x2630 [0193.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv")) returned 0x20 [0195.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV", dwFileAttributes=0x20) returned 0 [0195.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.389] GetLastError () returned 0x5 [0195.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV", dwFileAttributes=0x20) returned 0 [0195.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68998) returned 1 Thread: id = 6589 os_tid = 0x5d8 [0193.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml")) returned 0x20 [0195.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML", dwFileAttributes=0x20) returned 0 [0195.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.387] GetLastError () returned 0x5 [0195.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML", dwFileAttributes=0x20) returned 0 [0195.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69fe8) returned 1 Thread: id = 6590 os_tid = 0x15cc [0193.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml")) returned 0x20 [0195.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML", dwFileAttributes=0x20) returned 0 [0195.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0195.383] GetLastError () returned 0x5 [0195.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML", dwFileAttributes=0x20) returned 0 [0195.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69f60) returned 1 Thread: id = 6591 os_tid = 0x22f4 [0193.396] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json")) returned 0x2020 [0195.179] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0198.242] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x199c [0198.243] GetFileSizeEx (in: hFile=0x199c, lpFileSize=0x820faa4 | out: lpFileSize=0x820faa4*=233) returned 1 [0198.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0198.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0198.243] NtQuerySystemTime (in: CurrentTime=0x820fa18 | out: CurrentTime=0x820fa18*=132462177768240000) returned 0x0 [0198.243] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x2eb5cac1 [0198.243] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x6aeaa579 [0198.243] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x7976b00 [0198.243] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x78f4770d [0198.243] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x1ea65d3c [0198.243] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x5090159d [0198.243] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x7ed1c80 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x15f8d53a [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x57a0985e [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x51ddc30f [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x1566b1a2 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x76e0c8b6 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x5084fe9 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x741b980 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x82d0157 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x66a4fc18 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x50f9722e [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x1b491a1b [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x3592495f [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x6a366377 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x75f742f6 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x4c5031ad [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x79998b6f [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x17122edd [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x237b861 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x37da6409 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x7235496c [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x303c4ef4 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x109d08d9 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x4f20146 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0xa787fc7 [0198.244] RtlRandomEx (in: Seed=0x820fa10 | out: Seed=0x820fa10) returned 0x28aea47a [0198.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d22fc8 [0198.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d26bd0 [0198.256] ReadFile (in: hFile=0x199c, lpBuffer=0x7d22fc8, nNumberOfBytesToRead=0xe9, lpNumberOfBytesRead=0x820fa0c, lpOverlapped=0x0 | out: lpBuffer=0x7d22fc8*, lpNumberOfBytesRead=0x820fa0c*=0xe9, lpOverlapped=0x0) returned 1 [0198.258] SetFilePointerEx (in: hFile=0x199c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.258] WriteFile (in: hFile=0x199c, lpBuffer=0x7d26bd0*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x820fa10, lpOverlapped=0x0 | out: lpBuffer=0x7d26bd0*, lpNumberOfBytesWritten=0x820fa10*=0xe9, lpOverlapped=0x0) returned 1 [0200.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533a0 [0200.039] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52f90 [0200.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52f90) returned 1 [0200.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d26bd0) returned 1 [0200.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d22fc8) returned 1 [0200.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c6a8) returned 1 [0200.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84830) returned 1 [0200.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86608 [0200.040] SetFilePointerEx (in: hFile=0x199c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.040] WriteFile (in: hFile=0x199c, lpBuffer=0x7cb6b10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x820fa98, lpOverlapped=0x0 | out: lpBuffer=0x7cb6b10*, lpNumberOfBytesWritten=0x820fa98*=0x10c, lpOverlapped=0x0) returned 1 [0200.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0200.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc58) returned 1 [0200.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bc58 [0200.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0200.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbb8 [0200.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbb8) returned 1 [0200.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.837] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.837] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="15") returned 2 [0200.837] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="89") returned 2 [0200.837] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="55") returned 2 [0200.837] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="70") returned 2 [0200.837] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="fd") returned 2 [0200.837] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="09") returned 2 [0200.837] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="5c") returned 2 [0200.837] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="89") returned 2 [0200.837] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="83") returned 2 [0200.837] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="38") returned 2 [0200.837] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="61") returned 2 [0200.838] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="6f") returned 2 [0200.838] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="19") returned 2 [0200.838] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="98") returned 2 [0200.838] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="ba") returned 2 [0200.838] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.838] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="61") returned 2 [0200.838] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="25") returned 2 [0200.838] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="38") returned 2 [0200.838] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="61") returned 2 [0200.838] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.838] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="76") returned 2 [0200.838] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="8a") returned 2 [0200.838] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="56") returned 2 [0200.838] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="9f") returned 2 [0200.838] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="69") returned 2 [0200.838] RtlInitAnsiString (in: DestinationString=0x820fa20, SourceString="15895570fd095c898338616f1998baee61253861ff768a569f69" | out: DestinationString="15895570fd095c898338616f1998baee61253861ff768a569f69") [0200.838] RtlAnsiStringToUnicodeString (in: DestinationString=0x820fa18, SourceString="15895570fd095c898338616f1998baee61253861ff768a569f69", AllocateDestinationString=1 | out: DestinationString="15895570fd095c898338616f1998baee61253861ff768a569f69") returned 0x0 [0200.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cf18 [0200.838] wcscat (in: _Dest=0x7cd5880, _Source="15895570fd095" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\15895570fd095") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\15895570fd095" [0200.838] wcscat (in: _Dest=0x7cd5880, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\15895570fd095.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\15895570fd095.68814f" [0200.838] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\15895570fd095.68814f", NtPathName=0x820fa10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\15895570fd095.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd8a08 [0201.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8a08) returned 1 [0201.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd75e8) returned 1 [0201.161] NtQueryInformationFile (in: FileHandle=0x199c, IoStatusBlock=0x820f9e8, FileInformation=0x820f9f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x820f9e8, FileInformation=0x820f9f0) returned 0x0 [0201.161] NtSetInformationFile (FileHandle=0x199c, IoStatusBlock=0x820f9e8, FileInformation=0x820f9f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5880) returned 1 [0201.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf18) returned 1 [0201.388] FlushFileBuffers (hFile=0x199c) returned 1 [0201.400] CloseHandle (hObject=0x199c) returned 1 [0205.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7f5a0 [0205.927] wcscpy (in: _Dest=0x7b7f5a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\" [0205.927] wcscat (in: _Dest=0x7b7f5a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\68814F-Readme.txt" [0205.927] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\68814f-readme.txt")) returned 0xffffffff [0205.927] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd78 [0206.586] WriteFile (in: hFile=0xd78, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x820fa2c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x820fa2c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.469] CloseHandle (hObject=0xd78) returned 1 [0215.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f5a0) returned 1 [0215.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64090) returned 1 Thread: id = 6592 os_tid = 0x1698 [0193.397] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json")) returned 0x2020 [0195.180] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0198.258] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1998 [0198.259] GetFileSizeEx (in: hFile=0x1998, lpFileSize=0xbb1fde4 | out: lpFileSize=0xbb1fde4*=210) returned 1 [0198.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0198.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb58 [0198.260] NtQuerySystemTime (in: CurrentTime=0xbb1fd58 | out: CurrentTime=0xbb1fd58*=132462177768396000) returned 0x0 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x4e0f29af [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x4a40794e [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x27058a37 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x717cddf2 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x76c9240 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x739d4f09 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x22378c9 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x74887a23 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x5ef07111 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x3a128081 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x12a2d31a [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x2889a750 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x2ac70f11 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x7b805d32 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x513ab889 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x105bbe4d [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x152406aa [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x1234570c [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x7395a518 [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0xcdd1f6a [0198.260] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x426ff463 [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x7ecfa0c8 [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x7e00f08b [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x4b5b9703 [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x4ba4dcd3 [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x4ee976d0 [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x53864b0 [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x2eb4c692 [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x628cb2f3 [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x61544946 [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x697354bc [0198.261] RtlRandomEx (in: Seed=0xbb1fd50 | out: Seed=0xbb1fd50) returned 0x8181610 [0198.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d2a7d8 [0198.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d2e3e0 [0198.272] ReadFile (in: hFile=0x1998, lpBuffer=0x7d2a7d8, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xbb1fd4c, lpOverlapped=0x0 | out: lpBuffer=0x7d2a7d8*, lpNumberOfBytesRead=0xbb1fd4c*=0xd2, lpOverlapped=0x0) returned 1 [0198.275] SetFilePointerEx (in: hFile=0x1998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.275] WriteFile (in: hFile=0x1998, lpBuffer=0x7d2e3e0*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xbb1fd50, lpOverlapped=0x0 | out: lpBuffer=0x7d2e3e0*, lpNumberOfBytesWritten=0xbb1fd50*=0xd2, lpOverlapped=0x0) returned 1 [0200.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52518 [0200.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e529f0 [0200.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e529f0) returned 1 [0200.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d2e3e0) returned 1 [0200.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d2a7d8) returned 1 [0200.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c720) returned 1 [0200.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84878) returned 1 [0200.046] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86368 [0200.046] SetFilePointerEx (in: hFile=0x1998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.046] WriteFile (in: hFile=0x1998, lpBuffer=0x7cbd2b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbb1fdd8, lpOverlapped=0x0 | out: lpBuffer=0x7cbd2b8*, lpNumberOfBytesWritten=0xbb1fdd8*=0x10c, lpOverlapped=0x0) returned 1 [0200.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0200.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0200.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305cc48 [0200.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0200.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb58 [0200.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb58) returned 1 [0200.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.849] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.849] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="0e") returned 2 [0200.849] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="eb") returned 2 [0200.849] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="61") returned 2 [0200.849] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="e4") returned 2 [0200.849] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="0a") returned 2 [0200.849] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="30") returned 2 [0200.850] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="03") returned 2 [0200.850] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="ba") returned 2 [0200.850] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="99") returned 2 [0200.850] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.850] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="18") returned 2 [0200.850] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="dc") returned 2 [0200.850] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="bd") returned 2 [0200.850] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.850] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="83") returned 2 [0200.850] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="b0") returned 2 [0200.850] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="a7") returned 2 [0200.850] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="e8") returned 2 [0200.850] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="f1") returned 2 [0200.850] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="4e") returned 2 [0200.850] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="9e") returned 2 [0200.850] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="d5") returned 2 [0200.850] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="fe") returned 2 [0200.850] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="ae") returned 2 [0200.850] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="0c") returned 2 [0200.850] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="16") returned 2 [0200.850] RtlInitAnsiString (in: DestinationString=0xbb1fd60, SourceString="0eeb61e40a3003ba99ce18dcbd3d83b0a7e8f14e9ed5feae0c16" | out: DestinationString="0eeb61e40a3003ba99ce18dcbd3d83b0a7e8f14e9ed5feae0c16") [0200.850] RtlAnsiStringToUnicodeString (in: DestinationString=0xbb1fd58, SourceString="0eeb61e40a3003ba99ce18dcbd3d83b0a7e8f14e9ed5feae0c16", AllocateDestinationString=1 | out: DestinationString="0eeb61e40a3003ba99ce18dcbd3d83b0a7e8f14e9ed5feae0c16") returned 0x0 [0200.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cdb0 [0200.851] wcscat (in: _Dest=0x7cd5c28, _Source="0eeb61e40a300" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\0eeb61e40a300") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\0eeb61e40a300" [0200.851] wcscat (in: _Dest=0x7cd5c28, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\0eeb61e40a300.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\0eeb61e40a300.68814f" [0200.851] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\0eeb61e40a300.68814f", NtPathName=0xbb1fd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\0eeb61e40a300.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd8de0 [0201.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8de0) returned 1 [0201.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd7c60) returned 1 [0201.165] NtQueryInformationFile (in: FileHandle=0x1998, IoStatusBlock=0xbb1fd28, FileInformation=0xbb1fd30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbb1fd28, FileInformation=0xbb1fd30) returned 0x0 [0201.165] NtSetInformationFile (FileHandle=0x1998, IoStatusBlock=0xbb1fd28, FileInformation=0xbb1fd30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5c28) returned 1 [0201.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cdb0) returned 1 [0201.399] FlushFileBuffers (hFile=0x1998) returned 1 [0201.411] CloseHandle (hObject=0x1998) returned 1 [0208.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cab2a0 [0208.576] wcscpy (in: _Dest=0x7cab2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\" [0208.576] wcscat (in: _Dest=0x7cab2a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\68814F-Readme.txt" [0208.576] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\68814f-readme.txt")) returned 0xffffffff [0208.577] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xecc [0209.025] WriteFile (in: hFile=0xecc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbb1fd6c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbb1fd6c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.712] CloseHandle (hObject=0xecc) returned 1 [0209.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab2a0) returned 1 [0209.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a641b8) returned 1 Thread: id = 6593 os_tid = 0xdd4 [0193.397] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json")) returned 0x2020 [0195.181] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0198.275] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2408 [0198.276] GetFileSizeEx (in: hFile=0x2408, lpFileSize=0xd73fcdc | out: lpFileSize=0xd73fcdc*=221) returned 1 [0198.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb58 [0198.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0198.277] NtQuerySystemTime (in: CurrentTime=0xd73fc50 | out: CurrentTime=0xd73fc50*=132462177768552000) returned 0x0 [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x2e03e54d [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x65118cef [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x3f07fae1 [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x4619895f [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x765b5f7b [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x41e26c6a [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x652f4f23 [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x4e75f87c [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x6c12f40 [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x4c9ed743 [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x66547dab [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0xfe02d48 [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x15e40a7d [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x2758fbe9 [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x7bfbfbc1 [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x1f034cd8 [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x56d2b47a [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x64c416e7 [0198.277] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x1caae3c7 [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x17ae0ba6 [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0xa8032ee [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x3e5b3ce0 [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x8850e6d [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x65691d0e [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x11705be9 [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x55c32e14 [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x7ec7825c [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x58f5b62c [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x5661d68d [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x1ba3700f [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x4e67693d [0198.278] RtlRandomEx (in: Seed=0xd73fc48 | out: Seed=0xd73fc48) returned 0x2812d8ca [0198.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d31fe8 [0198.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d35bf0 [0198.292] ReadFile (in: hFile=0x2408, lpBuffer=0x7d31fe8, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0xd73fc44, lpOverlapped=0x0 | out: lpBuffer=0x7d31fe8*, lpNumberOfBytesRead=0xd73fc44*=0xdd, lpOverlapped=0x0) returned 1 [0198.295] SetFilePointerEx (in: hFile=0x2408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.295] WriteFile (in: hFile=0x2408, lpBuffer=0x7d35bf0*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0xd73fc48, lpOverlapped=0x0 | out: lpBuffer=0x7d35bf0*, lpNumberOfBytesWritten=0xd73fc48*=0xdd, lpOverlapped=0x0) returned 1 [0200.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53580 [0200.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52658 [0200.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52658) returned 1 [0200.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d35bf0) returned 1 [0200.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d31fe8) returned 1 [0200.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c798) returned 1 [0200.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b848c0) returned 1 [0200.044] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86548 [0200.045] SetFilePointerEx (in: hFile=0x2408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.045] WriteFile (in: hFile=0x2408, lpBuffer=0x7cbd1a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd73fcd0, lpOverlapped=0x0 | out: lpBuffer=0x7cbd1a0*, lpNumberOfBytesWritten=0xd73fcd0*=0x10c, lpOverlapped=0x0) returned 1 [0200.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0200.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0200.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bca8 [0200.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0200.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0200.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0200.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.845] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="5f") returned 2 [0200.845] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ae") returned 2 [0200.845] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="32") returned 2 [0200.845] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="61") returned 2 [0200.845] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="bd") returned 2 [0200.845] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="f2") returned 2 [0200.845] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="f6") returned 2 [0200.845] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="4c") returned 2 [0200.846] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="79") returned 2 [0200.846] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="be") returned 2 [0200.846] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="26") returned 2 [0200.846] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="27") returned 2 [0200.846] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="4e") returned 2 [0200.846] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="73") returned 2 [0200.846] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.846] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="71") returned 2 [0200.846] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="51") returned 2 [0200.846] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="e6") returned 2 [0200.846] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="be") returned 2 [0200.846] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="6c") returned 2 [0200.846] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="3a") returned 2 [0200.846] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.846] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="29") returned 2 [0200.846] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="f5") returned 2 [0200.846] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="5d") returned 2 [0200.846] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="64") returned 2 [0200.846] RtlInitAnsiString (in: DestinationString=0xd73fc58, SourceString="5fae3261bdf2f64c79be26274e73ac7151e6be6c3a7a29f55d64" | out: DestinationString="5fae3261bdf2f64c79be26274e73ac7151e6be6c3a7a29f55d64") [0200.846] RtlAnsiStringToUnicodeString (in: DestinationString=0xd73fc50, SourceString="5fae3261bdf2f64c79be26274e73ac7151e6be6c3a7a29f55d64", AllocateDestinationString=1 | out: DestinationString="5fae3261bdf2f64c79be26274e73ac7151e6be6c3a7a29f55d64") returned 0x0 [0200.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6ce28 [0200.847] wcscat (in: _Dest=0x7cd5af0, _Source="5fae3261bdf2f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\5fae3261bdf2f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\5fae3261bdf2f" [0200.847] wcscat (in: _Dest=0x7cd5af0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\5fae3261bdf2f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\5fae3261bdf2f.68814f" [0200.847] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\5fae3261bdf2f.68814f", NtPathName=0xd73fc48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\5fae3261bdf2f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd8c98 [0201.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8c98) returned 1 [0201.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd7a38) returned 1 [0201.163] NtQueryInformationFile (in: FileHandle=0x2408, IoStatusBlock=0xd73fc20, FileInformation=0xd73fc28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd73fc20, FileInformation=0xd73fc28) returned 0x0 [0201.163] NtSetInformationFile (FileHandle=0x2408, IoStatusBlock=0xd73fc20, FileInformation=0xd73fc28, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5af0) returned 1 [0201.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0201.396] FlushFileBuffers (hFile=0x2408) returned 1 [0201.408] CloseHandle (hObject=0x2408) returned 1 [0206.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7f6c8 [0206.002] wcscpy (in: _Dest=0x7b7f6c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\" [0206.003] wcscat (in: _Dest=0x7b7f6c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\68814F-Readme.txt" [0206.003] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\68814f-readme.txt")) returned 0xffffffff [0206.003] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x18d4 [0206.572] WriteFile (in: hFile=0x18d4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd73fc64, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd73fc64*=0x8b9, lpOverlapped=0x0) returned 1 [0210.192] CloseHandle (hObject=0x18d4) returned 1 [0210.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f6c8) returned 1 [0210.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a642e0) returned 1 Thread: id = 6594 os_tid = 0x99c [0193.397] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json")) returned 0x2020 [0195.181] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0198.295] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1994 [0198.296] GetFileSizeEx (in: hFile=0x1994, lpFileSize=0x87ef924 | out: lpFileSize=0x87ef924*=203) returned 1 [0198.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0198.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0198.296] NtQuerySystemTime (in: CurrentTime=0x87ef898 | out: CurrentTime=0x87ef898*=132462177768708000) returned 0x0 [0198.296] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x7d2219c [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x2ef116b [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x17b95344 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x341cdd99 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x107ae135 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x66aad43 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x63c942b5 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x36920f6f [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x6965680 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0xd8004ea [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x52cf9611 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x121b6aa0 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x47a0ab6e [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x10a535b5 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x3737be2b [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x398df128 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x1bb1c6d3 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x2ff38c06 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x16063c46 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x3676fc3 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x7b974182 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x654708c2 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x26523c1e [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x17c15e78 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x35ae66ca [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x4cf0c47e [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x4be78d08 [0198.297] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x5e9bf4b9 [0198.298] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x4d503c86 [0198.298] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x303d3c0d [0198.298] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x770a3662 [0198.298] RtlRandomEx (in: Seed=0x87ef890 | out: Seed=0x87ef890) returned 0x6f1d22df [0198.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d397f8 [0198.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d3d400 [0198.309] ReadFile (in: hFile=0x1994, lpBuffer=0x7d397f8, nNumberOfBytesToRead=0xcb, lpNumberOfBytesRead=0x87ef88c, lpOverlapped=0x0 | out: lpBuffer=0x7d397f8*, lpNumberOfBytesRead=0x87ef88c*=0xcb, lpOverlapped=0x0) returned 1 [0198.312] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.312] WriteFile (in: hFile=0x1994, lpBuffer=0x7d3d400*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x87ef890, lpOverlapped=0x0 | out: lpBuffer=0x7d3d400*, lpNumberOfBytesWritten=0x87ef890*=0xcb, lpOverlapped=0x0) returned 1 [0200.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53698 [0200.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541b0 [0200.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e541b0) returned 1 [0200.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d3d400) returned 1 [0200.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d397f8) returned 1 [0200.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c810) returned 1 [0200.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84908) returned 1 [0200.052] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e863c8 [0200.053] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.053] WriteFile (in: hFile=0x1994, lpBuffer=0x7cbd088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x87ef918, lpOverlapped=0x0 | out: lpBuffer=0x7cbd088*, lpNumberOfBytesWritten=0x87ef918*=0x10c, lpOverlapped=0x0) returned 1 [0200.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.864] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0200.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0200.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec37b8 [0200.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0200.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0200.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c78) returned 1 [0200.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.865] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.865] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="0b") returned 2 [0200.865] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="7d") returned 2 [0200.865] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="0f") returned 2 [0200.865] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="ef") returned 2 [0200.865] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="3b") returned 2 [0200.865] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="1a") returned 2 [0200.865] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="01") returned 2 [0200.865] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="48") returned 2 [0200.865] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="7f") returned 2 [0200.865] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="01") returned 2 [0200.865] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.865] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="36") returned 2 [0200.865] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="97") returned 2 [0200.865] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="ac") returned 2 [0200.865] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="58") returned 2 [0200.865] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="06") returned 2 [0200.865] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="49") returned 2 [0200.865] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="11") returned 2 [0200.865] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="0e") returned 2 [0200.865] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="00") returned 2 [0200.866] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="3d") returned 2 [0200.866] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.866] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="f2") returned 2 [0200.866] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="14") returned 2 [0200.866] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="10") returned 2 [0200.866] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="a8") returned 2 [0200.866] RtlInitAnsiString (in: DestinationString=0x87ef8a0, SourceString="0b7d0fef3b1a01487f013d3697ac580649110e003dd9f21410a8" | out: DestinationString="0b7d0fef3b1a01487f013d3697ac580649110e003dd9f21410a8") [0200.866] RtlAnsiStringToUnicodeString (in: DestinationString=0x87ef898, SourceString="0b7d0fef3b1a01487f013d3697ac580649110e003dd9f21410a8", AllocateDestinationString=1 | out: DestinationString="0b7d0fef3b1a01487f013d3697ac580649110e003dd9f21410a8") returned 0x0 [0200.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cc48 [0200.866] wcscat (in: _Dest=0x7dda3a0, _Source="0b7d0fef3b1a0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\0b7d0fef3b1a0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\0b7d0fef3b1a0" [0200.866] wcscat (in: _Dest=0x7dda3a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\0b7d0fef3b1a0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\0b7d0fef3b1a0.68814f" [0200.866] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\0b7d0fef3b1a0.68814f", NtPathName=0x87ef890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\0b7d0fef3b1a0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd91b8 [0201.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd91b8) returned 1 [0201.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c9e7a0) returned 1 [0201.168] NtQueryInformationFile (in: FileHandle=0x1994, IoStatusBlock=0x87ef868, FileInformation=0x87ef870, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x87ef868, FileInformation=0x87ef870) returned 0x0 [0201.168] NtSetInformationFile (FileHandle=0x1994, IoStatusBlock=0x87ef868, FileInformation=0x87ef870, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda3a0) returned 1 [0201.410] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0201.410] FlushFileBuffers (hFile=0x1994) returned 1 [0201.425] CloseHandle (hObject=0x1994) returned 1 [0206.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7f7f0 [0206.009] wcscpy (in: _Dest=0x7b7f7f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\" [0206.009] wcscat (in: _Dest=0x7b7f7f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\68814F-Readme.txt" [0206.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\68814f-readme.txt")) returned 0xffffffff [0206.009] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1794 [0206.573] WriteFile (in: hFile=0x1794, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x87ef8ac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x87ef8ac*=0x8b9, lpOverlapped=0x0) returned 1 [0210.199] CloseHandle (hObject=0x1794) returned 1 [0210.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f7f0) returned 1 [0210.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64408) returned 1 Thread: id = 6595 os_tid = 0x2598 [0193.398] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json")) returned 0x2020 [0195.182] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0198.312] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1890 [0198.313] GetFileSizeEx (in: hFile=0x1890, lpFileSize=0xe37fa34 | out: lpFileSize=0xe37fa34*=217) returned 1 [0198.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0198.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0198.313] NtQuerySystemTime (in: CurrentTime=0xe37f9a8 | out: CurrentTime=0xe37f9a8*=132462177768864000) returned 0x0 [0198.313] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x4b30c63d [0198.313] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x5f7a6403 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x1f58ba4c [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x4eb9f251 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x56457e0c [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x643243 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x27c32684 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x6cd5e7a4 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x42ba240d [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x6347e378 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x72a0b785 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0xc7fd10d [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x7838b376 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x1592d377 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x5b850b39 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x7846c24f [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x734622d2 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x34474a76 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x716e0c0 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x62618dd6 [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x37787cd [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x1ccb553a [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x356cb57e [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x7bd94efb [0198.314] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x64928e0a [0198.315] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x748101ac [0198.315] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x170c3c10 [0198.315] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x308d27ed [0198.315] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x5fe44ccb [0198.315] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x70ba1c2b [0198.315] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x21482ccf [0198.315] RtlRandomEx (in: Seed=0xe37f9a0 | out: Seed=0xe37f9a0) returned 0x6b791019 [0198.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d41008 [0198.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d44c10 [0198.329] ReadFile (in: hFile=0x1890, lpBuffer=0x7d41008, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0xe37f99c, lpOverlapped=0x0 | out: lpBuffer=0x7d41008*, lpNumberOfBytesRead=0xe37f99c*=0xd9, lpOverlapped=0x0) returned 1 [0198.333] SetFilePointerEx (in: hFile=0x1890, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.333] WriteFile (in: hFile=0x1890, lpBuffer=0x7d44c10*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0xe37f9a0, lpOverlapped=0x0 | out: lpBuffer=0x7d44c10*, lpNumberOfBytesWritten=0xe37f9a0*=0xd9, lpOverlapped=0x0) returned 1 [0200.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0200.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0200.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0200.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d44c10) returned 1 [0200.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d41008) returned 1 [0200.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c888) returned 1 [0200.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84950) returned 1 [0200.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c80 [0200.581] SetFilePointerEx (in: hFile=0x1890, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.582] WriteFile (in: hFile=0x1890, lpBuffer=0x7cd26b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe37fa28, lpOverlapped=0x0 | out: lpBuffer=0x7cd26b0*, lpNumberOfBytesWritten=0xe37fa28*=0x10c, lpOverlapped=0x0) returned 1 [0200.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0200.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0200.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52cc0 [0201.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52cc0) returned 1 [0201.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52cc0 [0201.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ff8 [0201.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0201.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0201.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.000] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="f2") returned 2 [0201.000] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ea") returned 2 [0201.000] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="07") returned 2 [0201.001] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="cd") returned 2 [0201.001] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="e0") returned 2 [0201.001] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="59") returned 2 [0201.001] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="28") returned 2 [0201.001] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="e7") returned 2 [0201.001] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="37") returned 2 [0201.001] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="8f") returned 2 [0201.001] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="d1") returned 2 [0201.001] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="ce") returned 2 [0201.001] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="f6") returned 2 [0201.001] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="82") returned 2 [0201.001] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="c6") returned 2 [0201.001] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="03") returned 2 [0201.001] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="40") returned 2 [0201.001] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="af") returned 2 [0201.001] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="ce") returned 2 [0201.001] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="68") returned 2 [0201.001] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="7f") returned 2 [0201.001] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="5f") returned 2 [0201.001] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="a0") returned 2 [0201.001] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="ee") returned 2 [0201.002] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="5b") returned 2 [0201.002] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="8e") returned 2 [0201.002] RtlInitAnsiString (in: DestinationString=0xe37f9b0, SourceString="f2ea07cde05928e7378fd1cef682c60340afce687f5fa0ee5b8e" | out: DestinationString="f2ea07cde05928e7378fd1cef682c60340afce687f5fa0ee5b8e") [0201.002] RtlAnsiStringToUnicodeString (in: DestinationString=0xe37f9a8, SourceString="f2ea07cde05928e7378fd1cef682c60340afce687f5fa0ee5b8e", AllocateDestinationString=1 | out: DestinationString="f2ea07cde05928e7378fd1cef682c60340afce687f5fa0ee5b8e") returned 0x0 [0201.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c180 [0201.002] wcscat (in: _Dest=0x7ddafd0, _Source="f2ea07cde0592" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\f2ea07cde0592") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\f2ea07cde0592" [0201.002] wcscat (in: _Dest=0x7ddafd0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\f2ea07cde0592.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\f2ea07cde0592.68814f" [0201.002] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\f2ea07cde0592.68814f", NtPathName=0xe37f9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\f2ea07cde0592.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9e88 [0201.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9e88) returned 1 [0201.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94970) returned 1 [0201.255] NtQueryInformationFile (in: FileHandle=0x1890, IoStatusBlock=0xe37f978, FileInformation=0xe37f980, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe37f978, FileInformation=0xe37f980) returned 0x0 [0201.255] NtSetInformationFile (FileHandle=0x1890, IoStatusBlock=0xe37f978, FileInformation=0xe37f980, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddafd0) returned 1 [0208.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c180) returned 1 [0208.547] FlushFileBuffers (hFile=0x1890) returned 1 [0208.556] CloseHandle (hObject=0x1890) returned 1 [0209.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e014b8 [0209.010] wcscpy (in: _Dest=0x3e014b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\" [0209.010] wcscat (in: _Dest=0x3e014b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\68814F-Readme.txt" [0209.010] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\68814f-readme.txt")) returned 0xffffffff [0209.010] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.873] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe37f9bc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe37f9bc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.879] CloseHandle (hObject=0x16e0) returned 1 [0209.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e014b8) returned 1 [0209.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64530) returned 1 Thread: id = 6596 os_tid = 0x259c [0193.398] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0195.183] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0198.333] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1714 [0198.334] GetFileSizeEx (in: hFile=0x1714, lpFileSize=0xee6fa94 | out: lpFileSize=0xee6fa94*=222) returned 1 [0198.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0198.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0198.335] NtQuerySystemTime (in: CurrentTime=0xee6fa08 | out: CurrentTime=0xee6fa08*=132462177769176000) returned 0x0 [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x2d677286 [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x403eb53c [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x5666611f [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x7e175ddf [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x56e698b9 [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x73f63867 [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x42fc6b06 [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x79087589 [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0xab35be [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x53180c84 [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x66b7dc0 [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x200b2b0c [0198.335] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x13e48e17 [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x733431e4 [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0xa3e2f5a [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x2a3a41d8 [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x6d7fc265 [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x4dd3a6ce [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x63a95e53 [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x3bbe495c [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x374a0979 [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x225b6604 [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x24fa542 [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x4e1ac693 [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x26fbe8d7 [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x439f677d [0198.336] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x23bc2226 [0198.337] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x225c818f [0198.337] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x5ba915f [0198.337] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x4061168 [0198.337] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x76b3f1fd [0198.337] RtlRandomEx (in: Seed=0xee6fa00 | out: Seed=0xee6fa00) returned 0x3851e0e9 [0198.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d48818 [0198.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d4c420 [0198.352] ReadFile (in: hFile=0x1714, lpBuffer=0x7d48818, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xee6f9fc, lpOverlapped=0x0 | out: lpBuffer=0x7d48818*, lpNumberOfBytesRead=0xee6f9fc*=0xde, lpOverlapped=0x0) returned 1 [0198.355] SetFilePointerEx (in: hFile=0x1714, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.355] WriteFile (in: hFile=0x1714, lpBuffer=0x7d4c420*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xee6fa00, lpOverlapped=0x0 | out: lpBuffer=0x7d4c420*, lpNumberOfBytesWritten=0xee6fa00*=0xde, lpOverlapped=0x0) returned 1 [0200.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0200.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0200.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0200.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d4c420) returned 1 [0200.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d48818) returned 1 [0200.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c900) returned 1 [0200.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84998) returned 1 [0200.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a40 [0200.922] SetFilePointerEx (in: hFile=0x1714, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.922] WriteFile (in: hFile=0x1714, lpBuffer=0x7cd2d40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xee6fa88, lpOverlapped=0x0 | out: lpBuffer=0x7cd2d40*, lpNumberOfBytesWritten=0xee6fa88*=0x10c, lpOverlapped=0x0) returned 1 [0201.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0201.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53aa8 [0201.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53aa8) returned 1 [0201.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53aa8 [0201.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a58 [0201.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535d0 [0201.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535d0) returned 1 [0201.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0201.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.199] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="63") returned 2 [0201.199] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="dc") returned 2 [0201.199] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="d8") returned 2 [0201.199] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="96") returned 2 [0201.199] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="1e") returned 2 [0201.199] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="5e") returned 2 [0201.199] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="87") returned 2 [0201.199] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="6f") returned 2 [0201.199] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="7f") returned 2 [0201.199] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="b1") returned 2 [0201.199] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="dc") returned 2 [0201.199] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="9a") returned 2 [0201.200] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="c9") returned 2 [0201.200] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="e5") returned 2 [0201.200] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="79") returned 2 [0201.200] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="54") returned 2 [0201.200] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="75") returned 2 [0201.200] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="98") returned 2 [0201.200] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="8a") returned 2 [0201.200] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="fd") returned 2 [0201.200] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="37") returned 2 [0201.200] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="5d") returned 2 [0201.200] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="6f") returned 2 [0201.200] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="02") returned 2 [0201.200] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="e9") returned 2 [0201.200] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="15") returned 2 [0201.200] RtlInitAnsiString (in: DestinationString=0xee6fa10, SourceString="63dcd8961e5e876f7fb1dc9ac9e5795475988afd375d6f02e915" | out: DestinationString="63dcd8961e5e876f7fb1dc9ac9e5795475988afd375d6f02e915") [0201.200] RtlAnsiStringToUnicodeString (in: DestinationString=0xee6fa08, SourceString="63dcd8961e5e876f7fb1dc9ac9e5795475988afd375d6f02e915", AllocateDestinationString=1 | out: DestinationString="63dcd8961e5e876f7fb1dc9ac9e5795475988afd375d6f02e915") returned 0x0 [0201.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f740 [0201.201] wcscat (in: _Dest=0x7dde4d8, _Source="63dcd8961e5e8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\63dcd8961e5e8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\63dcd8961e5e8" [0201.201] wcscat (in: _Dest=0x7dde4d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\63dcd8961e5e8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\63dcd8961e5e8.68814f" [0201.201] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\63dcd8961e5e8.68814f", NtPathName=0xee6fa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\63dcd8961e5e8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7dd9820 [0201.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9820) returned 1 [0201.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e93ea8) returned 1 [0201.448] NtQueryInformationFile (in: FileHandle=0x1714, IoStatusBlock=0xee6f9d8, FileInformation=0xee6f9e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xee6f9d8, FileInformation=0xee6f9e0) returned 0x0 [0201.448] NtSetInformationFile (FileHandle=0x1714, IoStatusBlock=0xee6f9d8, FileInformation=0xee6f9e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dde4d8) returned 1 [0208.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0208.584] FlushFileBuffers (hFile=0x1714) returned 1 [0208.589] CloseHandle (hObject=0x1714) returned 1 [0209.027] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7cd48a8 [0209.027] wcscpy (in: _Dest=0x7cd48a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\" [0209.027] wcscat (in: _Dest=0x7cd48a8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\68814F-Readme.txt" [0209.027] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\68814f-readme.txt")) returned 0xffffffff [0209.027] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.910] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xee6fa1c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xee6fa1c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.912] CloseHandle (hObject=0xbb8) returned 1 [0209.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd48a8) returned 1 [0209.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64658) returned 1 Thread: id = 6597 os_tid = 0x15c8 [0193.398] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0195.184] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0198.355] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf28 [0198.356] GetFileSizeEx (in: hFile=0xf28, lpFileSize=0xd87fae4 | out: lpFileSize=0xd87fae4*=224) returned 1 [0198.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0198.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0198.356] NtQuerySystemTime (in: CurrentTime=0xd87fa58 | out: CurrentTime=0xd87fa58*=132462177769332000) returned 0x0 [0198.356] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x7bb83189 [0198.356] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x1a3d60b3 [0198.356] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x3eb9309f [0198.356] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x4c122838 [0198.356] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x7a244263 [0198.356] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x7bad2162 [0198.356] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x10db8d02 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0xc712843 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x46faeb9c [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x2e6878e3 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x261c625 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x1117fd3a [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x3adf1dd5 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x10bb9418 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x62ab9f17 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x46c7b25 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x54675b50 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x6ec0800 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x6b8534b6 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0xfeed018 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x305f5729 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x7cc59912 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x6ccd2b89 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x19308f8 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x7fdf2178 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x23abadec [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x497bc9a2 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x7892145a [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x2d93490d [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0xec52ec0 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x4249a0a0 [0198.357] RtlRandomEx (in: Seed=0xd87fa50 | out: Seed=0xd87fa50) returned 0x53d38f4a [0198.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e50060 [0198.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e53c68 [0198.377] ReadFile (in: hFile=0xf28, lpBuffer=0x10e50060, nNumberOfBytesToRead=0xe0, lpNumberOfBytesRead=0xd87fa4c, lpOverlapped=0x0 | out: lpBuffer=0x10e50060*, lpNumberOfBytesRead=0xd87fa4c*=0xe0, lpOverlapped=0x0) returned 1 [0198.385] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.385] WriteFile (in: hFile=0xf28, lpBuffer=0x10e53c68*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0xd87fa50, lpOverlapped=0x0 | out: lpBuffer=0x10e53c68*, lpNumberOfBytesWritten=0xd87fa50*=0xe0, lpOverlapped=0x0) returned 1 [0200.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40c8 [0200.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0200.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0200.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e53c68) returned 1 [0200.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e50060) returned 1 [0200.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c978) returned 1 [0200.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b849e0) returned 1 [0200.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37da0 [0200.574] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.574] WriteFile (in: hFile=0xf28, lpBuffer=0x7cd2368*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd87fad8, lpOverlapped=0x0 | out: lpBuffer=0x7cd2368*, lpNumberOfBytesWritten=0xd87fad8*=0x10c, lpOverlapped=0x0) returned 1 [0201.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c88 [0201.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c88) returned 1 [0201.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53c88 [0201.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0201.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0201.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0201.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.018] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="86") returned 2 [0201.018] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="9e") returned 2 [0201.018] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="89") returned 2 [0201.018] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="0d") returned 2 [0201.018] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="21") returned 2 [0201.018] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="70") returned 2 [0201.018] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="d8") returned 2 [0201.018] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="fc") returned 2 [0201.018] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="5a") returned 2 [0201.018] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="2f") returned 2 [0201.018] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="e6") returned 2 [0201.018] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="86") returned 2 [0201.018] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="ab") returned 2 [0201.018] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="6a") returned 2 [0201.018] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="fd") returned 2 [0201.018] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="5c") returned 2 [0201.018] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="36") returned 2 [0201.018] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="4b") returned 2 [0201.018] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="7d") returned 2 [0201.018] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="7a") returned 2 [0201.018] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="ef") returned 2 [0201.018] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="c0") returned 2 [0201.018] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="5d") returned 2 [0201.018] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="5d") returned 2 [0201.018] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="21") returned 2 [0201.018] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="c9") returned 2 [0201.019] RtlInitAnsiString (in: DestinationString=0xd87fa60, SourceString="869e890d2170d8fc5a2fe686ab6afd5c364b7d7aefc05d5d21c9" | out: DestinationString="869e890d2170d8fc5a2fe686ab6afd5c364b7d7aefc05d5d21c9") [0201.019] RtlAnsiStringToUnicodeString (in: DestinationString=0xd87fa58, SourceString="869e890d2170d8fc5a2fe686ab6afd5c364b7d7aefc05d5d21c9", AllocateDestinationString=1 | out: DestinationString="869e890d2170d8fc5a2fe686ab6afd5c364b7d7aefc05d5d21c9") returned 0x0 [0201.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c2e8 [0201.019] wcscat (in: _Dest=0x7ddb5e8, _Source="869e890d2170d" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\869e890d2170d") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\869e890d2170d" [0201.019] wcscat (in: _Dest=0x7ddb5e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\869e890d2170d.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\869e890d2170d.68814f" [0201.019] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\869e890d2170d.68814f", NtPathName=0xd87fa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\869e890d2170d.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.019] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7ddc4e8 [0201.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc4e8) returned 1 [0201.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e95438) returned 1 [0201.261] NtQueryInformationFile (in: FileHandle=0xf28, IoStatusBlock=0xd87fa28, FileInformation=0xd87fa30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd87fa28, FileInformation=0xd87fa30) returned 0x0 [0201.261] NtSetInformationFile (FileHandle=0xf28, IoStatusBlock=0xd87fa28, FileInformation=0xd87fa30, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb5e8) returned 1 [0208.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c2e8) returned 1 [0208.565] FlushFileBuffers (hFile=0xf28) returned 1 [0208.573] CloseHandle (hObject=0xf28) returned 1 [0209.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7ddf4b0 [0209.022] wcscpy (in: _Dest=0x7ddf4b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\" [0209.022] wcscat (in: _Dest=0x7ddf4b0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\68814F-Readme.txt" [0209.022] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\68814f-readme.txt")) returned 0xffffffff [0209.022] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1238 [0210.391] WriteFile (in: hFile=0x1238, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd87fa6c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd87fa6c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.392] CloseHandle (hObject=0x1238) returned 1 [0210.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddf4b0) returned 1 [0210.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64780) returned 1 Thread: id = 6598 os_tid = 0x25a0 [0193.399] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json")) returned 0x2020 [0195.184] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0198.386] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x142c [0198.387] GetFileSizeEx (in: hFile=0x142c, lpFileSize=0xd0cfe64 | out: lpFileSize=0xd0cfe64*=222) returned 1 [0198.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e542c8 [0198.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53710 [0198.387] NtQuerySystemTime (in: CurrentTime=0xd0cfdd8 | out: CurrentTime=0xd0cfdd8*=132462177769644000) returned 0x0 [0198.387] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0xb065625 [0198.387] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x79b401ab [0198.387] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x42f8cc45 [0198.387] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x1496bb64 [0198.387] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x3ecab8f0 [0198.387] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x3eeaf6b [0198.387] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x5592361f [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x71e453d [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x33ab1e73 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x68e258f [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x1cd4dd03 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x2d82dc31 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x7ccc2e90 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x6b4d83c2 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x5f6aa4f6 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x394c2fc6 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x157ae0c3 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x4a81a2e0 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x4a80666a [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x3d728ff [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x5954200 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x7df455d7 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x615cc40 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x19471337 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x4964f780 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x30c655de [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x5c9f52bb [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x41f29970 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x693ca956 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0xd66d2b9 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x4b401f73 [0198.388] RtlRandomEx (in: Seed=0xd0cfdd0 | out: Seed=0xd0cfdd0) returned 0x738fc2d4 [0198.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e57870 [0198.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e5b478 [0198.400] ReadFile (in: hFile=0x142c, lpBuffer=0x10e57870, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xd0cfdcc, lpOverlapped=0x0 | out: lpBuffer=0x10e57870*, lpNumberOfBytesRead=0xd0cfdcc*=0xde, lpOverlapped=0x0) returned 1 [0198.402] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.402] WriteFile (in: hFile=0x142c, lpBuffer=0x10e5b478*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xd0cfdd0, lpOverlapped=0x0 | out: lpBuffer=0x10e5b478*, lpNumberOfBytesWritten=0xd0cfdd0*=0xde, lpOverlapped=0x0) returned 1 [0200.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0200.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0200.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0200.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e5b478) returned 1 [0200.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e57870) returned 1 [0200.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c9f0) returned 1 [0200.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84a28) returned 1 [0200.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a379b0 [0200.947] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.947] WriteFile (in: hFile=0x142c, lpBuffer=0x7cd3718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd0cfe58, lpOverlapped=0x0 | out: lpBuffer=0x7cd3718*, lpNumberOfBytesWritten=0xd0cfe58*=0x10c, lpOverlapped=0x0) returned 1 [0206.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c9f0 [0206.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0206.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0206.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bde8 [0206.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0206.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0206.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0206.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0206.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.180] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="87") returned 2 [0206.180] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="61") returned 2 [0206.180] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="28") returned 2 [0206.180] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="9d") returned 2 [0206.180] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="7a") returned 2 [0206.180] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="db") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="77") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="db") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="0b") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="26") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="21") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="6b") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="1b") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="2e") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="39") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="b5") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="4a") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="70") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="a6") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="c6") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="10") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="b9") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="61") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="dc") returned 2 [0206.181] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="e1") returned 2 [0206.181] RtlInitAnsiString (in: DestinationString=0xd0cfde0, SourceString="8761289d7adb4e77db0b26216b1b2e39b54a70a6c610b961dce1" | out: DestinationString="8761289d7adb4e77db0b26216b1b2e39b54a70a6c610b961dce1") [0206.181] RtlAnsiStringToUnicodeString (in: DestinationString=0xd0cfdd8, SourceString="8761289d7adb4e77db0b26216b1b2e39b54a70a6c610b961dce1", AllocateDestinationString=1 | out: DestinationString="8761289d7adb4e77db0b26216b1b2e39b54a70a6c610b961dce1") returned 0x0 [0206.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cf18 [0206.182] wcscat (in: _Dest=0x7a5ea50, _Source="8761289d7adb4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\8761289d7adb4") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\8761289d7adb4" [0206.182] wcscat (in: _Dest=0x7a5ea50, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\8761289d7adb4.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\8761289d7adb4.68814f" [0206.182] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\8761289d7adb4.68814f", NtPathName=0xd0cfdd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\8761289d7adb4.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddca08 [0208.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddca08) returned 1 [0208.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e96e18) returned 1 [0208.709] NtQueryInformationFile (in: FileHandle=0x142c, IoStatusBlock=0xd0cfda8, FileInformation=0xd0cfdb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd0cfda8, FileInformation=0xd0cfdb0) returned 0x0 [0208.709] NtSetInformationFile (FileHandle=0x142c, IoStatusBlock=0xd0cfda8, FileInformation=0xd0cfdb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ea50) returned 1 [0209.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cf18) returned 1 [0209.098] FlushFileBuffers (hFile=0x142c) returned 1 [0210.412] CloseHandle (hObject=0x142c) returned 1 [0213.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3ec6cb8 [0213.482] wcscpy (in: _Dest=0x3ec6cb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\" [0213.482] wcscat (in: _Dest=0x3ec6cb8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\68814F-Readme.txt" [0213.482] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\68814f-readme.txt")) returned 0xffffffff [0213.482] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ae0 [0213.918] WriteFile (in: hFile=0x1ae0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd0cfdec, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd0cfdec*=0x8b9, lpOverlapped=0x0) returned 1 [0213.996] CloseHandle (hObject=0x1ae0) returned 1 [0214.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6cb8) returned 1 [0214.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a648a8) returned 1 Thread: id = 6599 os_tid = 0x25a4 [0193.399] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json")) returned 0x2020 [0195.185] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0198.402] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x177c [0198.403] GetFileSizeEx (in: hFile=0x177c, lpFileSize=0xfd0fb24 | out: lpFileSize=0xfd0fb24*=272) returned 1 [0198.403] SetFilePointerEx (in: hFile=0x177c, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.403] ReadFile (in: hFile=0x177c, lpBuffer=0xfd0fb00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfd0fb10, lpOverlapped=0x0 | out: lpBuffer=0xfd0fb00*, lpNumberOfBytesRead=0xfd0fb10*=0x4, lpOverlapped=0x0) returned 1 [0198.405] SetFilePointerEx (in: hFile=0x177c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53710 [0198.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535d0 [0198.406] NtQuerySystemTime (in: CurrentTime=0xfd0fa98 | out: CurrentTime=0xfd0fa98*=132462177769800000) returned 0x0 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x7d1584d2 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x62ac6f3f [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x6cd9ddc8 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x3792c673 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x650d40ce [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x52fcc370 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x4cd16279 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0xaa44b87 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x18322bfa [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x39bcc588 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x29bae9ee [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x7d5c320a [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x4905dc6d [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x623cd0b1 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x4d0c8410 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x70a24ae8 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x45c452e0 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x6b6afea8 [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x628641ad [0198.406] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x58b00875 [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x318f2f21 [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x1e14a0b6 [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x25b6ec2 [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x4eede19b [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x1b815bc3 [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x7622b641 [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x151eb699 [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x28ecd931 [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x6a13511f [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x2fd85a7e [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x7c28e07c [0198.407] RtlRandomEx (in: Seed=0xfd0fa90 | out: Seed=0xfd0fa90) returned 0x4ccc844b [0198.417] ReadFile (in: hFile=0x177c, lpBuffer=0x10e5f080, nNumberOfBytesToRead=0x110, lpNumberOfBytesRead=0xfd0fa8c, lpOverlapped=0x0 | out: lpBuffer=0x10e5f080*, lpNumberOfBytesRead=0xfd0fa8c*=0x110, lpOverlapped=0x0) returned 1 [0198.418] SetFilePointerEx (in: hFile=0x177c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.418] WriteFile (in: hFile=0x177c, lpBuffer=0x10e62c88*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xfd0fa90, lpOverlapped=0x0 | out: lpBuffer=0x10e62c88*, lpNumberOfBytesWritten=0xfd0fa90*=0x110, lpOverlapped=0x0) returned 1 [0200.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0200.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c40 [0200.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c40) returned 1 [0200.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e62c88) returned 1 [0200.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e5f080) returned 1 [0200.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ca68) returned 1 [0200.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84a70) returned 1 [0200.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ce0 [0200.578] SetFilePointerEx (in: hFile=0x177c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.578] WriteFile (in: hFile=0x177c, lpBuffer=0x7cd2598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfd0fb18, lpOverlapped=0x0 | out: lpBuffer=0x7cd2598*, lpNumberOfBytesWritten=0xfd0fb18*=0x10c, lpOverlapped=0x0) returned 1 [0200.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85208 [0200.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c720 [0200.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0200.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0200.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3f38 [0200.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ec0 [0200.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0200.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0200.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0200.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0200.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.876] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="33") returned 2 [0200.876] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="e7") returned 2 [0200.876] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="88") returned 2 [0200.876] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="08") returned 2 [0200.876] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="be") returned 2 [0200.876] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="f2") returned 2 [0200.876] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="e5") returned 2 [0200.877] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="31") returned 2 [0200.877] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="c8") returned 2 [0200.877] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="f9") returned 2 [0200.877] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.877] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="24") returned 2 [0200.877] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="8b") returned 2 [0200.877] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="80") returned 2 [0200.877] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="9a") returned 2 [0200.877] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="a2") returned 2 [0200.877] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="7b") returned 2 [0200.877] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="42") returned 2 [0200.877] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="1b") returned 2 [0200.877] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="70") returned 2 [0200.877] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="0f") returned 2 [0200.877] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="85") returned 2 [0200.877] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="b7") returned 2 [0200.877] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="81") returned 2 [0200.877] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="b5") returned 2 [0200.877] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="41") returned 2 [0200.877] RtlInitAnsiString (in: DestinationString=0xfd0faa0, SourceString="33e78808bef2e531c8f97b248b809aa27b421b700f85b781b541" | out: DestinationString="33e78808bef2e531c8f97b248b809aa27b421b700f85b781b541") [0200.877] RtlAnsiStringToUnicodeString (in: DestinationString=0xfd0fa98, SourceString="33e78808bef2e531c8f97b248b809aa27b421b700f85b781b541", AllocateDestinationString=1 | out: DestinationString="33e78808bef2e531c8f97b248b809aa27b421b700f85b781b541") returned 0x0 [0200.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c720 [0200.877] wcscat (in: _Dest=0x7dda610, _Source="33e78808bef2e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\33e78808bef2e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\33e78808bef2e" [0200.877] wcscat (in: _Dest=0x7dda610, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\33e78808bef2e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\33e78808bef2e.68814f" [0200.877] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\33e78808bef2e.68814f", NtPathName=0xfd0fa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\33e78808bef2e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9448 [0201.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9448) returned 1 [0201.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e92f90) returned 1 [0201.170] NtQueryInformationFile (in: FileHandle=0x177c, IoStatusBlock=0xfd0fa68, FileInformation=0xfd0fa70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfd0fa68, FileInformation=0xfd0fa70) returned 0x0 [0201.170] NtSetInformationFile (FileHandle=0x177c, IoStatusBlock=0xfd0fa68, FileInformation=0xfd0fa70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0201.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda610) returned 1 [0201.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c720) returned 1 [0201.413] FlushFileBuffers (hFile=0x177c) returned 1 [0201.429] CloseHandle (hObject=0x177c) returned 1 [0208.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cab4f0 [0208.599] wcscpy (in: _Dest=0x7cab4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\" [0208.599] wcscat (in: _Dest=0x7cab4f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\68814F-Readme.txt" [0208.599] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\68814f-readme.txt")) returned 0xffffffff [0208.599] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbf4 [0209.030] WriteFile (in: hFile=0xbf4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfd0faac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xfd0faac*=0x8b9, lpOverlapped=0x0) returned 1 [0209.714] CloseHandle (hObject=0xbf4) returned 1 [0209.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab4f0) returned 1 [0209.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a649d0) returned 1 Thread: id = 6600 os_tid = 0x25a8 [0193.400] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json")) returned 0x2020 [0195.185] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0198.418] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbf4 [0198.419] GetFileSizeEx (in: hFile=0xbf4, lpFileSize=0xe17fb7c | out: lpFileSize=0xe17fb7c*=227) returned 1 [0198.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535d0 [0198.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a08 [0198.419] NtQuerySystemTime (in: CurrentTime=0xe17faf0 | out: CurrentTime=0xe17faf0*=132462177769956000) returned 0x0 [0198.419] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x31f0950d [0198.419] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x1bc27295 [0198.419] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x433c3445 [0198.419] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x5aad3909 [0198.419] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x31eb23e9 [0198.419] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x4c78e82c [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x3becad6 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x77ef9af2 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x2f4c57f2 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x69520719 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x32d773aa [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x4f3c1f00 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x45aee2a2 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0xc036167 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x739967f0 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x4777783d [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x4f5c27b9 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x22c9a2e1 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x1b7c066e [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x19bc17a9 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x7d67bc10 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x10e78c0a [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x7cba996e [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x2e1d903c [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x26b92bc9 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x7a160771 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x6febd31c [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x5c569c6b [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x25482306 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x554bd255 [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x38aa545a [0198.420] RtlRandomEx (in: Seed=0xe17fae8 | out: Seed=0xe17fae8) returned 0x96deac3 [0198.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e66890 [0198.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e6a498 [0198.432] ReadFile (in: hFile=0xbf4, lpBuffer=0x10e66890, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0xe17fae4, lpOverlapped=0x0 | out: lpBuffer=0x10e66890*, lpNumberOfBytesRead=0xe17fae4*=0xe3, lpOverlapped=0x0) returned 1 [0198.434] SetFilePointerEx (in: hFile=0xbf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.434] WriteFile (in: hFile=0xbf4, lpBuffer=0x10e6a498*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0xe17fae8, lpOverlapped=0x0 | out: lpBuffer=0x10e6a498*, lpNumberOfBytesWritten=0xe17fae8*=0xe3, lpOverlapped=0x0) returned 1 [0200.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0200.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0200.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b690) returned 1 [0200.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e6a498) returned 1 [0200.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e66890) returned 1 [0200.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cae0) returned 1 [0200.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84ab8) returned 1 [0200.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376e0 [0200.921] SetFilePointerEx (in: hFile=0xbf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.921] WriteFile (in: hFile=0xbf4, lpBuffer=0x7cd2f70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe17fb70, lpOverlapped=0x0 | out: lpBuffer=0x7cd2f70*, lpNumberOfBytesWritten=0xe17fb70*=0x10c, lpOverlapped=0x0) returned 1 [0201.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0201.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53378 [0201.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53378) returned 1 [0201.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53378 [0201.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534e0 [0201.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0201.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52360) returned 1 [0201.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0201.193] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.193] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="16") returned 2 [0201.193] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="5f") returned 2 [0201.193] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="21") returned 2 [0201.193] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="00") returned 2 [0201.193] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="44") returned 2 [0201.193] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="f7") returned 2 [0201.193] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="44") returned 2 [0201.193] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="fe") returned 2 [0201.193] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="d7") returned 2 [0201.193] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="6c") returned 2 [0201.193] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="c8") returned 2 [0201.193] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="33") returned 2 [0201.193] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="cb") returned 2 [0201.193] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="bd") returned 2 [0201.194] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="f7") returned 2 [0201.194] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="55") returned 2 [0201.194] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="34") returned 2 [0201.194] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="f0") returned 2 [0201.194] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="28") returned 2 [0201.194] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="d2") returned 2 [0201.194] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="e1") returned 2 [0201.194] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="38") returned 2 [0201.194] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="c9") returned 2 [0201.194] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="5c") returned 2 [0201.194] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="b1") returned 2 [0201.194] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="62") returned 2 [0201.194] RtlInitAnsiString (in: DestinationString=0xe17faf8, SourceString="165f210044f744fed76cc833cbbdf75534f028d2e138c95cb162" | out: DestinationString="165f210044f744fed76cc833cbbdf75534f028d2e138c95cb162") [0201.194] RtlAnsiStringToUnicodeString (in: DestinationString=0xe17faf0, SourceString="165f210044f744fed76cc833cbbdf75534f028d2e138c95cb162", AllocateDestinationString=1 | out: DestinationString="165f210044f744fed76cc833cbbdf75534f028d2e138c95cb162") returned 0x0 [0201.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fb00 [0201.195] wcscat (in: _Dest=0x7dde3a0, _Source="165f210044f74" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\165f210044f74") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\165f210044f74" [0201.195] wcscat (in: _Dest=0x7dde3a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\165f210044f74.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\165f210044f74.68814f" [0201.195] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\165f210044f74.68814f", NtPathName=0xe17fae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\165f210044f74.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9ab0 [0201.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9ab0) returned 1 [0201.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e940d0) returned 1 [0201.446] NtQueryInformationFile (in: FileHandle=0xbf4, IoStatusBlock=0xe17fac0, FileInformation=0xe17fac8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe17fac0, FileInformation=0xe17fac8) returned 0x0 [0201.446] NtSetInformationFile (FileHandle=0xbf4, IoStatusBlock=0xe17fac0, FileInformation=0xe17fac8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dde3a0) returned 1 [0208.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0208.592] FlushFileBuffers (hFile=0xbf4) returned 1 [0208.595] CloseHandle (hObject=0xbf4) returned 1 [0209.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01958 [0209.029] wcscpy (in: _Dest=0x3e01958, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\" [0209.029] wcscat (in: _Dest=0x3e01958, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\68814F-Readme.txt" [0209.029] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\68814f-readme.txt")) returned 0xffffffff [0209.029] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.914] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe17fb04, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe17fb04*=0x8b9, lpOverlapped=0x0) returned 1 [0209.916] CloseHandle (hObject=0xbb8) returned 1 [0209.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01958) returned 1 [0209.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64af8) returned 1 Thread: id = 6601 os_tid = 0x25ac [0193.400] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json")) returned 0x2020 [0195.186] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0198.435] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd94 [0198.435] GetFileSizeEx (in: hFile=0xd94, lpFileSize=0xe1ff844 | out: lpFileSize=0xe1ff844*=223) returned 1 [0198.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a08 [0198.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53af8 [0198.436] NtQuerySystemTime (in: CurrentTime=0xe1ff7b8 | out: CurrentTime=0xe1ff7b8*=132462177770112000) returned 0x0 [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x42e28bf9 [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x183b7ff3 [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x41ebdb85 [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x333336cf [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x55de7aae [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x2a3f6284 [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x433d652c [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x57a53b2d [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x60ed8952 [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x48e3921a [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x6666252e [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x3d78badd [0198.436] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x1e849943 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x11478c04 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x2f847afe [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x15befedb [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x1b1fec84 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x4072b044 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x59ab85ed [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x64c609b3 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x2ca1d0b9 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x6e81d8f6 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x248b1443 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x2472e609 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x3cbb306c [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x3ca77fc7 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x11271aaf [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x2187d6c3 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x7d77795a [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x3900a5e2 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x55201129 [0198.437] RtlRandomEx (in: Seed=0xe1ff7b0 | out: Seed=0xe1ff7b0) returned 0x2abc6e87 [0198.448] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e6e0a0 [0198.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e71ca8 [0198.448] ReadFile (in: hFile=0xd94, lpBuffer=0x10e6e0a0, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0xe1ff7ac, lpOverlapped=0x0 | out: lpBuffer=0x10e6e0a0*, lpNumberOfBytesRead=0xe1ff7ac*=0xdf, lpOverlapped=0x0) returned 1 [0198.451] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.451] WriteFile (in: hFile=0xd94, lpBuffer=0x10e71ca8*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0xe1ff7b0, lpOverlapped=0x0 | out: lpBuffer=0x10e71ca8*, lpNumberOfBytesWritten=0xe1ff7b0*=0xdf, lpOverlapped=0x0) returned 1 [0200.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0200.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0200.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0200.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e71ca8) returned 1 [0200.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e6e0a0) returned 1 [0200.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cb58) returned 1 [0200.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84b00) returned 1 [0200.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37bc0 [0200.589] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.589] WriteFile (in: hFile=0xd94, lpBuffer=0x7cd28e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe1ff838, lpOverlapped=0x0 | out: lpBuffer=0x7cd28e0*, lpNumberOfBytesWritten=0xe1ff838*=0x10c, lpOverlapped=0x0) returned 1 [0201.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0201.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0201.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53eb8 [0201.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53eb8) returned 1 [0201.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53eb8 [0201.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e40 [0201.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540c0 [0201.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540c0) returned 1 [0201.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0201.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0201.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0201.007] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="f3") returned 2 [0201.007] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="6b") returned 2 [0201.007] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="34") returned 2 [0201.007] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="b1") returned 2 [0201.007] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="5d") returned 2 [0201.007] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="0a") returned 2 [0201.007] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="59") returned 2 [0201.007] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="ef") returned 2 [0201.008] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="ba") returned 2 [0201.008] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="d3") returned 2 [0201.008] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="8a") returned 2 [0201.008] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="53") returned 2 [0201.008] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="46") returned 2 [0201.008] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="21") returned 2 [0201.008] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="0d") returned 2 [0201.008] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="27") returned 2 [0201.008] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="cf") returned 2 [0201.008] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="ed") returned 2 [0201.008] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="f6") returned 2 [0201.008] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="e6") returned 2 [0201.008] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="32") returned 2 [0201.008] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="f9") returned 2 [0201.008] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="a5") returned 2 [0201.008] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="01") returned 2 [0201.008] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="77") returned 2 [0201.008] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="db") returned 2 [0201.009] RtlInitAnsiString (in: DestinationString=0xe1ff7c0, SourceString="f36b34b15d0a59efbad38a5346210d27cfedf6e632f9a50177db" | out: DestinationString="f36b34b15d0a59efbad38a5346210d27cfedf6e632f9a50177db") [0201.009] RtlAnsiStringToUnicodeString (in: DestinationString=0xe1ff7b8, SourceString="f36b34b15d0a59efbad38a5346210d27cfedf6e632f9a50177db", AllocateDestinationString=1 | out: DestinationString="f36b34b15d0a59efbad38a5346210d27cfedf6e632f9a50177db") returned 0x0 [0201.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c900 [0201.009] wcscat (in: _Dest=0x7ddb240, _Source="f36b34b15d0a5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\f36b34b15d0a5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\f36b34b15d0a5" [0201.009] wcscat (in: _Dest=0x7ddb240, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\f36b34b15d0a5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\f36b34b15d0a5.68814f" [0201.009] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\f36b34b15d0a5.68814f", NtPathName=0xe1ff7b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\f36b34b15d0a5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dda118 [0201.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda118) returned 1 [0201.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94dc0) returned 1 [0201.257] NtQueryInformationFile (in: FileHandle=0xd94, IoStatusBlock=0xe1ff788, FileInformation=0xe1ff790, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe1ff788, FileInformation=0xe1ff790) returned 0x0 [0201.258] NtSetInformationFile (FileHandle=0xd94, IoStatusBlock=0xe1ff788, FileInformation=0xe1ff790, Length=0x28, FileInformationClass=0x4) returned 0x0 [0206.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddb240) returned 1 [0206.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c900) returned 1 [0206.254] FlushFileBuffers (hFile=0xd94) returned 1 [0206.268] CloseHandle (hObject=0xd94) returned 1 [0208.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cabab8 [0208.749] wcscpy (in: _Dest=0x7cabab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\" [0208.749] wcscat (in: _Dest=0x7cabab8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\68814F-Readme.txt" [0208.749] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\68814f-readme.txt")) returned 0xffffffff [0208.749] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.761] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe1ff7cc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe1ff7cc*=0x8b9, lpOverlapped=0x0) returned 1 [0209.763] CloseHandle (hObject=0x16e0) returned 1 [0209.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabab8) returned 1 [0209.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64c20) returned 1 Thread: id = 6602 os_tid = 0x25b0 [0193.401] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json")) returned 0x2020 [0195.187] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.451] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb50 [0198.452] GetFileSizeEx (in: hFile=0xb50, lpFileSize=0xd53fc24 | out: lpFileSize=0xd53fc24*=260) returned 1 [0198.452] SetFilePointerEx (in: hFile=0xb50, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.452] ReadFile (in: hFile=0xb50, lpBuffer=0xd53fc00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd53fc10, lpOverlapped=0x0 | out: lpBuffer=0xd53fc00*, lpNumberOfBytesRead=0xd53fc10*=0x4, lpOverlapped=0x0) returned 1 [0198.454] SetFilePointerEx (in: hFile=0xb50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.454] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53af8 [0198.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b48 [0198.455] NtQuerySystemTime (in: CurrentTime=0xd53fb98 | out: CurrentTime=0xd53fb98*=132462177770268000) returned 0x0 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x6db20301 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x3f36f8e7 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x3156d9b4 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x7f0a7086 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x5c6ab06b [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x7fa74ac2 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x7e4b115 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x20e02751 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x1e90031 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x75ff7474 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x74050aeb [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x194bdedb [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x61355e11 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x5147b705 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x3e17035 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x28af59e1 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x128f618c [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x5eaf380 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0xf69bdff [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x747ae155 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x7f6aa7d2 [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x5aa3431e [0198.455] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x101f7f2c [0198.456] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x11441646 [0198.456] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x402d45aa [0198.456] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x4004ed9c [0198.456] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x563e3fac [0198.456] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x4e9df00 [0198.456] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x381b9e47 [0198.456] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x5a2c34bf [0198.456] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x3396850b [0198.456] RtlRandomEx (in: Seed=0xd53fb90 | out: Seed=0xd53fb90) returned 0x345b0dbb [0198.466] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e758b0 [0198.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e794b8 [0198.467] ReadFile (in: hFile=0xb50, lpBuffer=0x10e758b0, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xd53fb8c, lpOverlapped=0x0 | out: lpBuffer=0x10e758b0*, lpNumberOfBytesRead=0xd53fb8c*=0x104, lpOverlapped=0x0) returned 1 [0198.467] SetFilePointerEx (in: hFile=0xb50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.467] WriteFile (in: hFile=0xb50, lpBuffer=0x10e794b8*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xd53fb90, lpOverlapped=0x0 | out: lpBuffer=0x10e794b8*, lpNumberOfBytesWritten=0xd53fb90*=0x104, lpOverlapped=0x0) returned 1 [0200.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa88 [0200.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a768 [0200.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a768) returned 1 [0200.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e794b8) returned 1 [0200.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e758b0) returned 1 [0200.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cbd0) returned 1 [0200.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84b48) returned 1 [0200.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37d40 [0200.924] SetFilePointerEx (in: hFile=0xb50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.924] WriteFile (in: hFile=0xb50, lpBuffer=0x7cd2480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd53fc18, lpOverlapped=0x0 | out: lpBuffer=0x7cd2480*, lpNumberOfBytesWritten=0xd53fc18*=0x10c, lpOverlapped=0x0) returned 1 [0201.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24110 [0201.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fc68 [0201.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53968 [0201.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53968) returned 1 [0201.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53968 [0201.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53990 [0201.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cb0 [0201.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cb0) returned 1 [0201.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0201.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24110) returned 1 [0201.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067380 [0201.210] sprintf (in: _Dest=0x3067380, _Format="%c%c" | out: _Dest="64") returned 2 [0201.210] sprintf (in: _Dest=0x3067382, _Format="%c%c" | out: _Dest="d4") returned 2 [0201.210] sprintf (in: _Dest=0x3067384, _Format="%c%c" | out: _Dest="68") returned 2 [0201.210] sprintf (in: _Dest=0x3067386, _Format="%c%c" | out: _Dest="bd") returned 2 [0201.210] sprintf (in: _Dest=0x3067388, _Format="%c%c" | out: _Dest="07") returned 2 [0201.210] sprintf (in: _Dest=0x306738a, _Format="%c%c" | out: _Dest="f1") returned 2 [0201.210] sprintf (in: _Dest=0x306738c, _Format="%c%c" | out: _Dest="5f") returned 2 [0201.210] sprintf (in: _Dest=0x306738e, _Format="%c%c" | out: _Dest="c4") returned 2 [0201.210] sprintf (in: _Dest=0x3067390, _Format="%c%c" | out: _Dest="b5") returned 2 [0201.210] sprintf (in: _Dest=0x3067392, _Format="%c%c" | out: _Dest="49") returned 2 [0201.210] sprintf (in: _Dest=0x3067394, _Format="%c%c" | out: _Dest="d0") returned 2 [0201.210] sprintf (in: _Dest=0x3067396, _Format="%c%c" | out: _Dest="44") returned 2 [0201.210] sprintf (in: _Dest=0x3067398, _Format="%c%c" | out: _Dest="a7") returned 2 [0201.210] sprintf (in: _Dest=0x306739a, _Format="%c%c" | out: _Dest="25") returned 2 [0201.210] sprintf (in: _Dest=0x306739c, _Format="%c%c" | out: _Dest="4c") returned 2 [0201.210] sprintf (in: _Dest=0x306739e, _Format="%c%c" | out: _Dest="fb") returned 2 [0201.211] sprintf (in: _Dest=0x30673a0, _Format="%c%c" | out: _Dest="98") returned 2 [0201.211] sprintf (in: _Dest=0x30673a2, _Format="%c%c" | out: _Dest="7a") returned 2 [0201.211] sprintf (in: _Dest=0x30673a4, _Format="%c%c" | out: _Dest="dd") returned 2 [0201.211] sprintf (in: _Dest=0x30673a6, _Format="%c%c" | out: _Dest="06") returned 2 [0201.211] sprintf (in: _Dest=0x30673a8, _Format="%c%c" | out: _Dest="16") returned 2 [0201.211] sprintf (in: _Dest=0x30673aa, _Format="%c%c" | out: _Dest="31") returned 2 [0201.211] sprintf (in: _Dest=0x30673ac, _Format="%c%c" | out: _Dest="30") returned 2 [0201.211] sprintf (in: _Dest=0x30673ae, _Format="%c%c" | out: _Dest="2b") returned 2 [0201.211] sprintf (in: _Dest=0x30673b0, _Format="%c%c" | out: _Dest="45") returned 2 [0201.211] sprintf (in: _Dest=0x30673b2, _Format="%c%c" | out: _Dest="47") returned 2 [0201.211] RtlInitAnsiString (in: DestinationString=0xd53fba0, SourceString="64d468bd07f15fc4b549d044a7254cfb987add061631302b4547" | out: DestinationString="64d468bd07f15fc4b549d044a7254cfb987add061631302b4547") [0201.211] RtlAnsiStringToUnicodeString (in: DestinationString=0xd53fb98, SourceString="64d468bd07f15fc4b549d044a7254cfb987add061631302b4547", AllocateDestinationString=1 | out: DestinationString="64d468bd07f15fc4b549d044a7254cfb987add061631302b4547") returned 0x0 [0201.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f218 [0201.211] wcscat (in: _Dest=0x7dde748, _Source="64d468bd07f15" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\64d468bd07f15") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\64d468bd07f15" [0201.211] wcscat (in: _Dest=0x7dde748, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\64d468bd07f15.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\64d468bd07f15.68814f" [0201.211] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\64d468bd07f15.68814f", NtPathName=0xd53fb90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\64d468bd07f15.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0201.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9968 [0201.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9968) returned 1 [0201.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e93a58) returned 1 [0201.452] NtQueryInformationFile (in: FileHandle=0xb50, IoStatusBlock=0xd53fb68, FileInformation=0xd53fb70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd53fb68, FileInformation=0xd53fb70) returned 0x0 [0201.452] NtSetInformationFile (FileHandle=0xb50, IoStatusBlock=0xd53fb68, FileInformation=0xd53fb70, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dde748) returned 1 [0208.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0208.676] FlushFileBuffers (hFile=0xb50) returned 1 [0208.687] CloseHandle (hObject=0xb50) returned 1 [0209.038] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01cd0 [0209.038] wcscpy (in: _Dest=0x3e01cd0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\" [0209.038] wcscat (in: _Dest=0x3e01cd0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\68814F-Readme.txt" [0209.038] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\68814f-readme.txt")) returned 0xffffffff [0209.038] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.929] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd53fbac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd53fbac*=0x8b9, lpOverlapped=0x0) returned 1 [0209.931] CloseHandle (hObject=0xbb8) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01cd0) returned 1 [0209.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64d48) returned 1 Thread: id = 6603 os_tid = 0x25b4 [0193.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x300d718 [0193.401] wcscpy (in: _Dest=0x300d718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0193.402] wcscat (in: _Dest=0x300d718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" [0193.402] wcscat (in: _Dest=0x300d718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*" [0193.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2a900 [0193.402] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\*", lpFindFileData=0x7a2a900 | out: lpFindFileData=0x7a2a900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d240 [0195.395] wcscmp (_String1=".", _String2=".") returned 0 [0195.396] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x7a2a900 | out: lpFindFileData=0x7a2a900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.396] wcscmp (_String1="..", _String2=".") returned 1 [0195.396] wcscmp (_String1="..", _String2="..") returned 0 [0195.396] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x7a2a900 | out: lpFindFileData=0x7a2a900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.396] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.396] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b80eb0 [0195.396] wcscpy (in: _Dest=0x7b80eb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv" [0195.396] wcscat (in: _Dest=0x7b80eb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" [0195.396] wcscat (in: _Dest=0x7b80eb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" [0201.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8 [0201.710] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x7a2a900 | out: lpFindFileData=0x7a2a900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b9f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.710] FindClose (in: hFindFile=0x7a2d240 | out: hFindFile=0x7a2d240) returned 1 [0201.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2a900) returned 1 [0201.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x300d718) returned 1 [0201.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6abe8) returned 1 Thread: id = 6604 os_tid = 0x1790 [0193.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbda60 [0193.403] wcscpy (in: _Dest=0x7cbda60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0193.403] wcscat (in: _Dest=0x7cbda60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\" [0193.403] wcscat (in: _Dest=0x7cbda60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*" [0193.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2bc40 [0193.403] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\*", lpFindFileData=0x7a2bc40 | out: lpFindFileData=0x7a2bc40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cb0 [0195.192] wcscmp (_String1=".", _String2=".") returned 0 [0195.192] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a2bc40 | out: lpFindFileData=0x7a2bc40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4271380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4271380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.192] wcscmp (_String1="..", _String2=".") returned 1 [0195.193] wcscmp (_String1="..", _String2="..") returned 0 [0195.193] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a2bc40 | out: lpFindFileData=0x7a2bc40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.193] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.193] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.193] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b81228 [0195.193] wcscpy (in: _Dest=0x7b81228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl" [0195.193] wcscat (in: _Dest=0x7b81228, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\" [0195.193] wcscat (in: _Dest=0x7b81228, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json" [0201.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c [0201.735] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x7a2bc40 | out: lpFindFileData=0x7a2bc40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4271380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4272af0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.735] FindClose (in: hFindFile=0x7ad7cb0 | out: hFindFile=0x7ad7cb0) returned 1 [0201.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2bc40) returned 1 [0201.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbda60) returned 1 [0201.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6970) returned 1 Thread: id = 6605 os_tid = 0x14e0 [0193.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbd948 [0193.404] wcscpy (in: _Dest=0x7cbd948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0193.404] wcscat (in: _Dest=0x7cbd948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" [0193.404] wcscat (in: _Dest=0x7cbd948, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*" [0193.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b2a0 [0193.404] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\*", lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0195.413] wcscmp (_String1=".", _String2=".") returned 0 [0195.413] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.413] wcscmp (_String1="..", _String2=".") returned 1 [0195.413] wcscmp (_String1="..", _String2="..") returned 0 [0195.413] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf6f13200, ftLastWriteTime.dwHighDateTime=0x1cced15, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.413] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.413] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbe4c0 [0195.413] wcscpy (in: _Dest=0x7cbe4c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no" [0195.413] wcscat (in: _Dest=0x7cbe4c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" [0195.413] wcscat (in: _Dest=0x7cbe4c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" [0199.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe4c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca4 [0199.609] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xf6f13200, ftLastWriteTime.dwHighDateTime=0x1cced15, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.609] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0199.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b2a0) returned 1 [0199.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd948) returned 1 [0199.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b80) returned 1 Thread: id = 6606 os_tid = 0x1794 [0193.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbd830 [0193.405] wcscpy (in: _Dest=0x7cbd830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0193.405] wcscat (in: _Dest=0x7cbd830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\" [0193.405] wcscat (in: _Dest=0x7cbd830, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*" [0193.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b038 [0193.405] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\*", lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d200 [0195.399] wcscmp (_String1=".", _String2=".") returned 0 [0195.399] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e37a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42e37a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.400] wcscmp (_String1="..", _String2=".") returned 1 [0195.400] wcscmp (_String1="..", _String2="..") returned 0 [0195.400] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.400] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.400] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b81350 [0195.400] wcscpy (in: _Dest=0x7b81350, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl" [0195.400] wcscat (in: _Dest=0x7b81350, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\" [0195.400] wcscat (in: _Dest=0x7b81350, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" [0199.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bf8 [0199.729] FindNextFileW (in: hFindFile=0x7a2d200, lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe42e37a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42e56e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe50993e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.729] FindClose (in: hFindFile=0x7a2d200 | out: hFindFile=0x7a2d200) returned 1 [0199.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b038) returned 1 [0199.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd830) returned 1 [0199.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c88) returned 1 Thread: id = 6607 os_tid = 0x18e8 [0193.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cbd718 [0193.405] wcscpy (in: _Dest=0x7cbd718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0193.406] wcscat (in: _Dest=0x7cbd718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\" [0193.406] wcscat (in: _Dest=0x7cbd718, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*" [0193.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2add0 [0193.406] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc80 [0195.401] wcscmp (_String1=".", _String2=".") returned 0 [0195.401] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a1e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43a1e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.401] wcscmp (_String1="..", _String2=".") returned 1 [0195.401] wcscmp (_String1="..", _String2="..") returned 0 [0195.401] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.401] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.401] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b817f0 [0195.401] wcscpy (in: _Dest=0x7b817f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR" [0195.402] wcscat (in: _Dest=0x7b817f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\" [0195.402] wcscat (in: _Dest=0x7b817f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" [0199.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b817f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be8 [0199.732] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43a1e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43a3dc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.732] FindClose (in: hFindFile=0x7a2dc80 | out: hFindFile=0x7a2dc80) returned 1 [0199.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2add0) returned 1 [0199.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd718) returned 1 [0199.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac8e0) returned 1 Thread: id = 6608 os_tid = 0x18ec [0193.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cbd600 [0193.406] wcscpy (in: _Dest=0x7cbd600, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0193.406] wcscat (in: _Dest=0x7cbd600, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" [0193.406] wcscat (in: _Dest=0x7cbd600, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*" [0193.406] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2ab68 [0193.406] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db80 [0195.402] wcscmp (_String1=".", _String2=".") returned 0 [0195.402] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.402] wcscmp (_String1="..", _String2=".") returned 1 [0195.402] wcscmp (_String1="..", _String2="..") returned 0 [0195.402] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.402] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.403] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b815a0 [0195.403] wcscpy (in: _Dest=0x7b815a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT" [0195.403] wcscat (in: _Dest=0x7b815a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" [0195.403] wcscat (in: _Dest=0x7b815a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" [0199.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b815a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be4 [0199.735] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c87b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.735] FindClose (in: hFindFile=0x7a2db80 | out: hFindFile=0x7a2db80) returned 1 [0199.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ab68) returned 1 [0199.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd600) returned 1 [0199.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac9f8) returned 1 Thread: id = 6609 os_tid = 0x18f4 [0193.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbd4e8 [0193.407] wcscpy (in: _Dest=0x7cbd4e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0193.407] wcscat (in: _Dest=0x7cbd4e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" [0193.407] wcscat (in: _Dest=0x7cbd4e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*" [0193.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d5a178 [0193.407] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\*", lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d8c0 [0195.403] wcscmp (_String1=".", _String2=".") returned 0 [0195.403] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44142a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.403] wcscmp (_String1="..", _String2=".") returned 1 [0195.404] wcscmp (_String1="..", _String2="..") returned 0 [0195.404] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.404] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.404] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b80320 [0195.404] wcscpy (in: _Dest=0x7b80320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro" [0195.404] wcscat (in: _Dest=0x7b80320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" [0195.404] wcscat (in: _Dest=0x7b80320, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" [0199.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1be0 [0199.737] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3d5a178 | out: lpFindFileData=0x3d5a178*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44142a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44142a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.737] FindClose (in: hFindFile=0x7a2d8c0 | out: hFindFile=0x7a2d8c0) returned 1 [0199.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a178) returned 1 [0199.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd4e8) returned 1 [0199.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6d90) returned 1 Thread: id = 6610 os_tid = 0x18f8 [0193.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbd3d0 [0193.408] wcscpy (in: _Dest=0x7cbd3d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0193.408] wcscat (in: _Dest=0x7cbd3d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\" [0193.408] wcscat (in: _Dest=0x7cbd3d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*" [0193.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58e38 [0193.408] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\*", lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d480 [0195.405] wcscmp (_String1=".", _String2=".") returned 0 [0195.405] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.405] wcscmp (_String1="..", _String2=".") returned 1 [0195.405] wcscmp (_String1="..", _String2="..") returned 0 [0195.405] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44624a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.405] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.405] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.405] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbecd8 [0195.406] wcscpy (in: _Dest=0x7cbecd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru" [0195.406] wcscat (in: _Dest=0x7cbecd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\" [0195.406] wcscat (in: _Dest=0x7cbecd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json" [0199.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbecd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bdc [0199.739] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3d58e38 | out: lpFindFileData=0x3d58e38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44624a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.740] FindClose (in: hFindFile=0x7a2d480 | out: hFindFile=0x7a2d480) returned 1 [0199.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58e38) returned 1 [0199.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd3d0) returned 1 [0199.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad52c0) returned 1 Thread: id = 6611 os_tid = 0x1900 [0193.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbd088 [0193.409] wcscpy (in: _Dest=0x7cbd088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0193.409] wcscat (in: _Dest=0x7cbd088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" [0193.409] wcscat (in: _Dest=0x7cbd088, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*" [0193.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59ca8 [0193.409] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\*", lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0195.406] wcscmp (_String1=".", _String2=".") returned 0 [0195.406] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44866c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44866c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.406] wcscmp (_String1="..", _String2=".") returned 1 [0195.406] wcscmp (_String1="..", _String2="..") returned 0 [0195.406] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4486e90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.407] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.407] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.407] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbf050 [0195.407] wcscpy (in: _Dest=0x7cbf050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk" [0195.407] wcscat (in: _Dest=0x7cbf050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" [0195.407] wcscat (in: _Dest=0x7cbf050, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" [0199.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd8 [0199.742] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3d59ca8 | out: lpFindFileData=0x3d59ca8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44866c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4486e90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.742] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0199.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59ca8) returned 1 [0199.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd088) returned 1 [0199.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6e98) returned 1 Thread: id = 6612 os_tid = 0x1904 [0193.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbd2b8 [0193.410] wcscpy (in: _Dest=0x7cbd2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0193.410] wcscat (in: _Dest=0x7cbd2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" [0193.410] wcscat (in: _Dest=0x7cbd2b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*" [0193.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59a40 [0193.410] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\*", lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0195.407] wcscmp (_String1=".", _String2=".") returned 0 [0195.407] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.407] wcscmp (_String1="..", _String2=".") returned 1 [0195.408] wcscmp (_String1="..", _String2="..") returned 0 [0195.408] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44adf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.408] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.408] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.408] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbef28 [0195.408] wcscpy (in: _Dest=0x7cbef28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl" [0195.408] wcscat (in: _Dest=0x7cbef28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" [0195.408] wcscat (in: _Dest=0x7cbef28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" [0199.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbef28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1bd0 [0199.743] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3d59a40 | out: lpFindFileData=0x3d59a40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44adf90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.744] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0199.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59a40) returned 1 [0199.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd2b8) returned 1 [0199.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad53c8) returned 1 Thread: id = 6613 os_tid = 0x190c [0193.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbd1a0 [0193.411] wcscpy (in: _Dest=0x7cbd1a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0193.411] wcscat (in: _Dest=0x7cbd1a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" [0193.411] wcscat (in: _Dest=0x7cbd1a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*" [0193.411] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59570 [0193.411] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\*", lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0195.408] wcscmp (_String1=".", _String2=".") returned 0 [0195.409] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4544da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4544da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.409] wcscmp (_String1="..", _String2=".") returned 1 [0195.409] wcscmp (_String1="..", _String2="..") returned 0 [0195.409] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4545570, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.409] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.409] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbee00 [0195.409] wcscpy (in: _Dest=0x7cbee00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr" [0195.409] wcscat (in: _Dest=0x7cbee00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" [0195.409] wcscat (in: _Dest=0x7cbee00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" [0199.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbee00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4 [0199.746] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3d59570 | out: lpFindFileData=0x3d59570*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4544da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4545570, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.746] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0199.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59570) returned 1 [0199.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd1a0) returned 1 [0199.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad55d8) returned 1 Thread: id = 6614 os_tid = 0x1910 [0193.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbdb78 [0193.412] wcscpy (in: _Dest=0x7cbdb78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0193.412] wcscat (in: _Dest=0x7cbdb78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" [0193.412] wcscat (in: _Dest=0x7cbdb78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*" [0193.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59308 [0193.412] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\*", lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0195.410] wcscmp (_String1=".", _String2=".") returned 0 [0195.410] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.410] wcscmp (_String1="..", _String2=".") returned 1 [0195.410] wcscmp (_String1="..", _String2="..") returned 0 [0195.410] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456c670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.410] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.410] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.410] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbebb0 [0195.410] wcscpy (in: _Dest=0x7cbebb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv" [0195.410] wcscat (in: _Dest=0x7cbebb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" [0195.411] wcscat (in: _Dest=0x7cbebb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" [0199.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbebb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054 [0199.748] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3d59308 | out: lpFindFileData=0x3d59308*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456c670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.748] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0199.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59308) returned 1 [0199.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdb78) returned 1 [0199.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad56e0) returned 1 Thread: id = 6615 os_tid = 0x1918 [0193.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbdc90 [0193.412] wcscpy (in: _Dest=0x7cbdc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0193.412] wcscat (in: _Dest=0x7cbdc90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" [0193.413] wcscat (in: _Dest=0x7cbdc90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*" [0193.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d59f10 [0193.413] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\*", lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0195.411] wcscmp (_String1=".", _String2=".") returned 0 [0195.411] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.411] wcscmp (_String1="..", _String2=".") returned 1 [0195.411] wcscmp (_String1="..", _String2="..") returned 0 [0195.411] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b8160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.411] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.412] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbf740 [0195.412] wcscpy (in: _Dest=0x7cbf740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th" [0195.412] wcscat (in: _Dest=0x7cbf740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" [0195.412] wcscat (in: _Dest=0x7cbf740, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" [0199.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120 [0199.606] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3d59f10 | out: lpFindFileData=0x3d59f10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b8160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509baf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.607] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0199.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d59f10) returned 1 [0199.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdc90) returned 1 [0199.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad57e8) returned 1 Thread: id = 6616 os_tid = 0x191c [0193.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbdda8 [0193.413] wcscpy (in: _Dest=0x7cbdda8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0193.413] wcscat (in: _Dest=0x7cbdda8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" [0193.413] wcscat (in: _Dest=0x7cbdda8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*" [0193.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d58700 [0193.413] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\*", lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0195.394] wcscmp (_String1=".", _String2=".") returned 0 [0195.394] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603480, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4603480, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.394] wcscmp (_String1="..", _String2=".") returned 1 [0195.394] wcscmp (_String1="..", _String2="..") returned 0 [0195.395] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.395] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.395] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b81100 [0195.395] wcscpy (in: _Dest=0x7b81100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr" [0195.395] wcscat (in: _Dest=0x7b81100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" [0195.395] wcscat (in: _Dest=0x7b81100, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" [0201.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc [0201.708] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3d58700 | out: lpFindFileData=0x3d58700*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4603480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4603c50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.709] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0201.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d58700) returned 1 [0201.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdda8) returned 1 [0201.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad58f0) returned 1 Thread: id = 6617 os_tid = 0x1920 [0193.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cbdec0 [0193.414] wcscpy (in: _Dest=0x7cbdec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0193.414] wcscat (in: _Dest=0x7cbdec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" [0193.414] wcscat (in: _Dest=0x7cbdec0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*" [0193.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3d590a0 [0193.414] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\*", lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dec0 [0195.397] wcscmp (_String1=".", _String2=".") returned 0 [0195.397] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.397] wcscmp (_String1="..", _String2=".") returned 1 [0195.397] wcscmp (_String1="..", _String2="..") returned 0 [0195.397] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c2330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.397] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.397] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b80d88 [0195.398] wcscpy (in: _Dest=0x7b80d88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk" [0195.398] wcscat (in: _Dest=0x7b80d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" [0195.398] wcscat (in: _Dest=0x7b80d88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" [0201.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec [0201.564] FindNextFileW (in: hFindFile=0x7a2dec0, lpFindFileData=0x3d590a0 | out: lpFindFileData=0x3d590a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c2330, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.564] FindClose (in: hFindFile=0x7a2dec0 | out: hFindFile=0x7a2dec0) returned 1 [0201.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d590a0) returned 1 [0201.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdec0) returned 1 [0201.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad50b0) returned 1 Thread: id = 6618 os_tid = 0x1924 [0194.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a38fc0 [0194.869] wcscpy (in: _Dest=0x7a38fc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0194.869] wcscat (in: _Dest=0x7a38fc0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" [0194.869] wcscat (in: _Dest=0x7a38fc0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*" [0194.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a533d0 [0194.869] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\*", lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d300 [0195.398] wcscmp (_String1=".", _String2=".") returned 0 [0195.398] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e7cc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46e7cc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.398] wcscmp (_String1="..", _String2=".") returned 1 [0195.398] wcscmp (_String1="..", _String2="..") returned 0 [0195.398] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e9430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.399] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.399] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b81a40 [0195.399] wcscpy (in: _Dest=0x7b81a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi" [0195.399] wcscat (in: _Dest=0x7b81a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" [0195.399] wcscat (in: _Dest=0x7b81a40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" [0199.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b81a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4 [0199.726] FindNextFileW (in: hFindFile=0x7a2d300, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe46e7cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46e9430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.726] FindClose (in: hFindFile=0x7a2d300 | out: hFindFile=0x7a2d300) returned 1 [0199.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a533d0) returned 1 [0199.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38fc0) returned 1 [0199.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d0) returned 1 Thread: id = 6619 os_tid = 0x1928 [0194.869] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0194.870] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0202.312] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13ec [0202.312] GetFileSizeEx (in: hFile=0x13ec, lpFileSize=0x833fc34 | out: lpFileSize=0x833fc34*=617) returned 1 [0202.312] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.312] ReadFile (in: hFile=0x13ec, lpBuffer=0x833fc10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x833fc20, lpOverlapped=0x0 | out: lpBuffer=0x833fc10*, lpNumberOfBytesRead=0x833fc20*=0x4, lpOverlapped=0x0) returned 1 [0202.905] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0202.906] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0202.906] NtQuerySystemTime (in: CurrentTime=0x833fba8 | out: CurrentTime=0x833fba8*=132462177814884000) returned 0x0 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x57921163 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x27155852 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x5afc469a [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x1147939a [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x35f5e01e [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x31f1bf19 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x1d835b37 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x13b1975d [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x1d813f75 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x11d2843f [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x61625ea2 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x2290bfc0 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x3d3c504d [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x51472f23 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x35436867 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x64e570b9 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x2494c4c4 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x2663fc92 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x70e7174 [0202.906] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x1708c1d7 [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x39584074 [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x79fa52fd [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x4f840d08 [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x2407797e [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x46c9822a [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x6c6629e8 [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x2e7aa1ec [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x5c631492 [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x1e03ae09 [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x2789b5d3 [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x5ccd896c [0202.907] RtlRandomEx (in: Seed=0x833fba0 | out: Seed=0x833fba0) returned 0x3aeb8fce [0202.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10db58b0 [0202.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10da2c88 [0202.920] ReadFile (in: hFile=0x13ec, lpBuffer=0x10db58b0, nNumberOfBytesToRead=0x269, lpNumberOfBytesRead=0x833fb9c, lpOverlapped=0x0 | out: lpBuffer=0x10db58b0*, lpNumberOfBytesRead=0x833fb9c*=0x269, lpOverlapped=0x0) returned 1 [0202.920] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.920] WriteFile (in: hFile=0x13ec, lpBuffer=0x10da2c88*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x833fba0, lpOverlapped=0x0 | out: lpBuffer=0x10da2c88*, lpNumberOfBytesWritten=0x833fba0*=0x269, lpOverlapped=0x0) returned 1 [0207.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52fe0 [0207.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b80 [0207.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52b80) returned 1 [0207.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10da2c88) returned 1 [0207.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db58b0) returned 1 [0207.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c3d8) returned 1 [0207.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bddd0) returned 1 [0207.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3c30 [0207.802] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.802] WriteFile (in: hFile=0x13ec, lpBuffer=0x7b7d4a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x833fc28, lpOverlapped=0x0 | out: lpBuffer=0x7b7d4a0*, lpNumberOfBytesWritten=0x833fc28*=0x10c, lpOverlapped=0x0) returned 1 [0208.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0208.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6ce28 [0208.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0208.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0208.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ba78 [0208.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0208.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0208.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0208.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0208.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0208.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0208.973] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="fa") returned 2 [0208.973] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="ca") returned 2 [0208.973] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="e2") returned 2 [0208.973] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="5d") returned 2 [0208.973] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="ce") returned 2 [0208.973] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="c5") returned 2 [0208.973] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="68") returned 2 [0208.973] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="d4") returned 2 [0208.973] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="65") returned 2 [0208.973] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="37") returned 2 [0208.973] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="fb") returned 2 [0208.973] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="c7") returned 2 [0208.973] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="09") returned 2 [0208.973] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="f1") returned 2 [0208.973] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="da") returned 2 [0208.973] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="bf") returned 2 [0208.973] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="34") returned 2 [0208.973] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="b7") returned 2 [0208.973] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="44") returned 2 [0208.973] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="d4") returned 2 [0208.973] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="a9") returned 2 [0208.974] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="02") returned 2 [0208.974] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="20") returned 2 [0208.974] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="6d") returned 2 [0208.974] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="32") returned 2 [0208.974] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="3b") returned 2 [0208.974] RtlInitAnsiString (in: DestinationString=0x833fbb0, SourceString="facae25dcec568d46537fbc709f1dabf34b744d4a902206d323b" | out: DestinationString="facae25dcec568d46537fbc709f1dabf34b744d4a902206d323b") [0208.974] RtlAnsiStringToUnicodeString (in: DestinationString=0x833fba8, SourceString="facae25dcec568d46537fbc709f1dabf34b744d4a902206d323b", AllocateDestinationString=1 | out: DestinationString="facae25dcec568d46537fbc709f1dabf34b744d4a902206d323b") returned 0x0 [0208.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cdb0 [0208.974] wcscat (in: _Dest=0x7ddd6d8, _Source="facae25dcec56" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\facae25dcec56") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\facae25dcec56" [0208.974] wcscat (in: _Dest=0x7ddd6d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\facae25dcec56.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\facae25dcec56.68814f" [0208.974] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\facae25dcec56.68814f", NtPathName=0x833fba0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\facae25dcec56.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x148) returned 0x3e0b178 Thread: id = 6620 os_tid = 0x1930 [0194.870] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json")) returned 0x2020 [0194.870] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0202.310] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10e0 [0202.310] GetFileSizeEx (in: hFile=0x10e0, lpFileSize=0x853fc04 | out: lpFileSize=0x853fc04*=617) returned 1 [0202.310] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.310] ReadFile (in: hFile=0x10e0, lpBuffer=0x853fbe0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x853fbf0, lpOverlapped=0x0 | out: lpBuffer=0x853fbe0*, lpNumberOfBytesRead=0x853fbf0*=0x4, lpOverlapped=0x0) returned 1 [0202.890] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f60 [0202.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0202.890] NtQuerySystemTime (in: CurrentTime=0x853fb78 | out: CurrentTime=0x853fb78*=132462177814728000) returned 0x0 [0202.890] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x68dc921 [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0xa07db71 [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x314d0eae [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x2b8e21ed [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x3259b030 [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x48f79eed [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x5ab80230 [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x7ccfcfcb [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x1975c7cf [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x798c561e [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x17ce5bdb [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x36a60301 [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x1ebedbc9 [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0xbbdbacd [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x4d52f6f6 [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x596528a8 [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x77030223 [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x34bb7203 [0202.891] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x7ea4d541 [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x55b71b7f [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x67de12b3 [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x265ef244 [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x368fffb [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x5a3f75e2 [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x4ad1fb86 [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x4c954392 [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x6e978aa0 [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0xd7c452f [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x4359c0e3 [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x4b7291d0 [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x1d8a2531 [0202.892] RtlRandomEx (in: Seed=0x853fb70 | out: Seed=0x853fb70) returned 0x295e92f0 [0202.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dc48d0 [0202.904] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10db1ca8 [0202.905] ReadFile (in: hFile=0x10e0, lpBuffer=0x10dc48d0, nNumberOfBytesToRead=0x269, lpNumberOfBytesRead=0x853fb6c, lpOverlapped=0x0 | out: lpBuffer=0x10dc48d0*, lpNumberOfBytesRead=0x853fb6c*=0x269, lpOverlapped=0x0) returned 1 [0202.905] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.905] WriteFile (in: hFile=0x10e0, lpBuffer=0x10db1ca8*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x853fb70, lpOverlapped=0x0 | out: lpBuffer=0x10db1ca8*, lpNumberOfBytesWritten=0x853fb70*=0x269, lpOverlapped=0x0) returned 1 [0206.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0206.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0206.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0206.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db1ca8) returned 1 [0206.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc48d0) returned 1 [0206.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c1f8) returned 1 [0206.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be0a0) returned 1 [0206.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3660 [0206.887] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.888] WriteFile (in: hFile=0x10e0, lpBuffer=0x7b7d7e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x853fbf8, lpOverlapped=0x0 | out: lpBuffer=0x7b7d7e8*, lpNumberOfBytesWritten=0x853fbf8*=0x10c, lpOverlapped=0x0) returned 1 [0208.983] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0208.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6ce28 [0208.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33f8 [0208.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33f8) returned 1 [0208.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec33f8 [0208.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0208.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0208.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4140) returned 1 [0208.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0208.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0208.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0208.985] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="80") returned 2 [0208.985] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="48") returned 2 [0208.985] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="a1") returned 2 [0208.985] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="57") returned 2 [0208.985] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="0d") returned 2 [0208.985] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="df") returned 2 [0208.985] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="bd") returned 2 [0208.985] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="66") returned 2 [0208.985] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="ee") returned 2 [0208.985] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="91") returned 2 [0208.985] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="93") returned 2 [0208.985] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="72") returned 2 [0208.985] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="7c") returned 2 [0208.985] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="10") returned 2 [0208.985] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="dc") returned 2 [0208.985] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="6d") returned 2 [0208.985] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="e4") returned 2 [0208.986] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="92") returned 2 [0208.986] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="81") returned 2 [0208.986] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="93") returned 2 [0208.986] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="28") returned 2 [0208.986] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="a1") returned 2 [0208.986] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="27") returned 2 [0208.986] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="70") returned 2 [0208.986] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="ea") returned 2 [0208.986] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="82") returned 2 [0208.986] RtlInitAnsiString (in: DestinationString=0x853fb80, SourceString="8048a1570ddfbd66ee9193727c10dc6de492819328a12770ea82" | out: DestinationString="8048a1570ddfbd66ee9193727c10dc6de492819328a12770ea82") [0208.986] RtlAnsiStringToUnicodeString (in: DestinationString=0x853fb78, SourceString="8048a1570ddfbd66ee9193727c10dc6de492819328a12770ea82", AllocateDestinationString=1 | out: DestinationString="8048a1570ddfbd66ee9193727c10dc6de492819328a12770ea82") returned 0x0 [0208.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cf90 [0208.987] wcscat (in: _Dest=0x7dde9b8, _Source="8048a1570ddfb" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\8048a1570ddfb") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\8048a1570ddfb" [0208.987] wcscat (in: _Dest=0x7dde9b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\8048a1570ddfb.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\8048a1570ddfb.68814f" [0208.987] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\8048a1570ddfb.68814f", NtPathName=0x853fb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\8048a1570ddfb.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0ad70 Thread: id = 6621 os_tid = 0x1934 [0194.871] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json")) returned 0x2020 [0194.871] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0202.307] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf70 [0202.307] GetFileSizeEx (in: hFile=0xf70, lpFileSize=0x5ddff24 | out: lpFileSize=0x5ddff24*=875) returned 1 [0202.307] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x367, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.307] ReadFile (in: hFile=0xf70, lpBuffer=0x5ddff00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x5ddff10, lpOverlapped=0x0 | out: lpBuffer=0x5ddff00*, lpNumberOfBytesRead=0x5ddff10*=0x4, lpOverlapped=0x0) returned 1 [0202.854] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0202.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f60 [0202.854] NtQuerySystemTime (in: CurrentTime=0x5ddfe98 | out: CurrentTime=0x5ddfe98*=132462177814260000) returned 0x0 [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x3a76b4f2 [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x28bf11c7 [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x18690120 [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x22dd2069 [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x30305b91 [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x20cb66c7 [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0xa3f4974 [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x27a24464 [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x792010c9 [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x4f569a6b [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x3262af1f [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x468ab4cb [0202.854] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x1759aade [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x1d230be7 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x4c0be0a4 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x628ec0fa [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x58e531bf [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x3fe28049 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x7525ae28 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x384d4d99 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x75295404 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x2d275a7c [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x5d009417 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x6ce98985 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x116a1263 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x54de0625 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x56948b9d [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x6d660dad [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x6599934a [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x4df3dbf5 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0x7ea2f164 [0202.855] RtlRandomEx (in: Seed=0x5ddfe90 | out: Seed=0x5ddfe90) returned 0xa0b3f8a [0202.864] ReadFile (in: hFile=0xf70, lpBuffer=0x10d97870, nNumberOfBytesToRead=0x36b, lpNumberOfBytesRead=0x5ddfe8c, lpOverlapped=0x0 | out: lpBuffer=0x10d97870*, lpNumberOfBytesRead=0x5ddfe8c*=0x36b, lpOverlapped=0x0) returned 1 [0202.864] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.864] WriteFile (in: hFile=0xf70, lpBuffer=0x10dc0cc8*, nNumberOfBytesToWrite=0x36b, lpNumberOfBytesWritten=0x5ddfe90, lpOverlapped=0x0 | out: lpBuffer=0x10dc0cc8*, lpNumberOfBytesWritten=0x5ddfe90*=0x36b, lpOverlapped=0x0) returned 1 [0206.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ec0 [0206.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0206.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0206.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc0cc8) returned 1 [0206.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d97870) returned 1 [0206.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c540) returned 1 [0206.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e448) returned 1 [0206.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3ed0 [0206.889] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.889] WriteFile (in: hFile=0xf70, lpBuffer=0x7b7d900*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x5ddff18, lpOverlapped=0x0 | out: lpBuffer=0x7b7d900*, lpNumberOfBytesWritten=0x5ddff18*=0x10c, lpOverlapped=0x0) returned 1 [0208.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0208.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6ce28 [0208.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0208.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3330) returned 1 [0208.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3330 [0208.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0208.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0208.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29d0) returned 1 [0208.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0208.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0208.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0208.994] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="13") returned 2 [0208.994] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="31") returned 2 [0208.994] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="6b") returned 2 [0208.995] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="51") returned 2 [0208.995] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="2b") returned 2 [0208.995] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="d1") returned 2 [0208.995] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="7d") returned 2 [0208.995] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="99") returned 2 [0208.995] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="f9") returned 2 [0208.995] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="81") returned 2 [0208.995] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="2d") returned 2 [0208.995] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="b6") returned 2 [0208.995] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="54") returned 2 [0208.995] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="60") returned 2 [0208.995] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="73") returned 2 [0208.995] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="c8") returned 2 [0208.995] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="70") returned 2 [0208.995] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="ce") returned 2 [0208.995] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="fd") returned 2 [0208.995] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="88") returned 2 [0208.995] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="3b") returned 2 [0208.995] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="11") returned 2 [0208.995] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="1f") returned 2 [0208.995] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="fa") returned 2 [0208.995] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="dd") returned 2 [0208.996] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="e9") returned 2 [0208.996] RtlInitAnsiString (in: DestinationString=0x5ddfea0, SourceString="13316b512bd17d99f9812db6546073c870cefd883b111ffadde9" | out: DestinationString="13316b512bd17d99f9812db6546073c870cefd883b111ffadde9") [0208.996] RtlAnsiStringToUnicodeString (in: DestinationString=0x5ddfe98, SourceString="13316b512bd17d99f9812db6546073c870cefd883b111ffadde9", AllocateDestinationString=1 | out: DestinationString="13316b512bd17d99f9812db6546073c870cefd883b111ffadde9") returned 0x0 [0208.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c978 [0208.996] wcscat (in: _Dest=0x7cd4638, _Source="13316b512bd17" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\13316b512bd17") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\13316b512bd17" [0208.996] wcscat (in: _Dest=0x7cd4638, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\13316b512bd17.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\13316b512bd17.68814f" [0208.996] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\13316b512bd17.68814f", NtPathName=0x5ddfe90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\13316b512bd17.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0a560 Thread: id = 6622 os_tid = 0x14a8 [0194.872] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0194.872] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0202.278] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1854 [0202.278] GetFileSizeEx (in: hFile=0x1854, lpFileSize=0x781fc84 | out: lpFileSize=0x781fc84*=206) returned 1 [0202.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ee8 [0202.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0202.279] NtQuerySystemTime (in: CurrentTime=0x781fbf8 | out: CurrentTime=0x781fbf8*=132462177808644000) returned 0x0 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x54994695 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x2d6f9279 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x49d30387 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0xcab6ac9 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x718e4148 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x6485befe [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x21b1ba1 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x3f9880b5 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x65f77c10 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x68bf7e70 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x68e11f13 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x50808e37 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x693af5bd [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x25af5b50 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x2a0d4b0e [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x5a180e71 [0202.279] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x242ed4c6 [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x6724be4 [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x3ceb5911 [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x5c4e3b0d [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x264fc49e [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x3a39bba4 [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x778dbafc [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x77b27764 [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x6e1c1b31 [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0xbf6a9bb [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x53c1ce12 [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x1356593 [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x1466dda [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x70a3be56 [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x203e0c13 [0202.280] RtlRandomEx (in: Seed=0x781fbf0 | out: Seed=0x781fbf0) returned 0x1bf27da0 [0202.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ed3c68 [0202.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10efd0c0 [0202.305] ReadFile (in: hFile=0x1854, lpBuffer=0x10ed3c68, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x781fbec, lpOverlapped=0x0 | out: lpBuffer=0x10ed3c68*, lpNumberOfBytesRead=0x781fbec*=0xce, lpOverlapped=0x0) returned 1 [0202.306] SetFilePointerEx (in: hFile=0x1854, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.307] WriteFile (in: hFile=0x1854, lpBuffer=0x10efd0c0*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x781fbf0, lpOverlapped=0x0 | out: lpBuffer=0x10efd0c0*, lpNumberOfBytesWritten=0x781fbf0*=0xce, lpOverlapped=0x0) returned 1 [0206.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0206.063] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c270 [0206.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c270) returned 1 [0206.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10efd0c0) returned 1 [0206.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ed3c68) returned 1 [0206.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c798) returned 1 [0206.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85058) returned 1 [0206.064] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37920 [0206.064] SetFilePointerEx (in: hFile=0x1854, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.064] WriteFile (in: hFile=0x1854, lpBuffer=0x7b7cf28*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x781fc78, lpOverlapped=0x0 | out: lpBuffer=0x7b7cf28*, lpNumberOfBytesWritten=0x781fc78*=0x10c, lpOverlapped=0x0) returned 1 [0206.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0206.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0206.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4780 [0206.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fc0 [0206.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0206.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d40) returned 1 [0206.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.478] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.478] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="a2") returned 2 [0206.478] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="45") returned 2 [0206.478] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="49") returned 2 [0206.478] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="5b") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="53") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="bc") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="63") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="b8") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="2d") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="95") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="f5") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="4d") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="61") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="b7") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="28") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="36") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="70") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="93") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="39") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="48") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="e9") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="79") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="cb") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="d3") returned 2 [0206.479] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="33") returned 2 [0206.479] RtlInitAnsiString (in: DestinationString=0x781fc00, SourceString="a245495b53bc63b82d4e95f54d61b7283670933948e979cbd333" | out: DestinationString="a245495b53bc63b82d4e95f54d61b7283670933948e979cbd333") [0206.479] RtlAnsiStringToUnicodeString (in: DestinationString=0x781fbf8, SourceString="a245495b53bc63b82d4e95f54d61b7283670933948e979cbd333", AllocateDestinationString=1 | out: DestinationString="a245495b53bc63b82d4e95f54d61b7283670933948e979cbd333") returned 0x0 [0206.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e5f8 [0206.480] wcscat (in: _Dest=0x7a5f8f0, _Source="a245495b53bc6" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\a245495b53bc6") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\a245495b53bc6" [0206.480] wcscat (in: _Dest=0x7a5f8f0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\a245495b53bc6.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\a245495b53bc6.68814f" [0206.480] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\a245495b53bc6.68814f", NtPathName=0x781fbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\a245495b53bc6.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7dd8a08 [0208.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8a08) returned 1 [0208.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e239d0) returned 1 [0208.855] NtQueryInformationFile (in: FileHandle=0x1854, IoStatusBlock=0x781fbc8, FileInformation=0x781fbd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x781fbc8, FileInformation=0x781fbd0) returned 0x0 [0208.855] NtSetInformationFile (FileHandle=0x1854, IoStatusBlock=0x781fbc8, FileInformation=0x781fbd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f8f0) returned 1 [0209.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0209.196] FlushFileBuffers (hFile=0x1854) returned 1 [0209.213] CloseHandle (hObject=0x1854) returned 1 [0209.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7cd5c28 [0209.429] wcscpy (in: _Dest=0x7cd5c28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\" [0209.429] wcscat (in: _Dest=0x7cd5c28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\68814F-Readme.txt" [0209.429] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\68814f-readme.txt")) returned 0xffffffff [0209.429] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.013] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x781fc0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x781fc0c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.014] CloseHandle (hObject=0xbb8) returned 1 [0210.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5c28) returned 1 [0210.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cba148) returned 1 Thread: id = 6623 os_tid = 0x1938 [0194.872] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0194.872] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0202.260] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x5a4 [0202.260] GetFileSizeEx (in: hFile=0x5a4, lpFileSize=0x83bfcfc | out: lpFileSize=0x83bfcfc*=206) returned 1 [0202.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0202.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ee8 [0202.261] NtQuerySystemTime (in: CurrentTime=0x83bfc70 | out: CurrentTime=0x83bfc70*=132462177808332000) returned 0x0 [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x18a5a869 [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x15a3f04c [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x30d74f70 [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x691e10ff [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x28a8109c [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x2b161ca2 [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x5c3e20bf [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x14570d2 [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x22c54d39 [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x37e4508f [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x5c68f97f [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x12cf2284 [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x6bd30a41 [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x2cadedc1 [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x125c0ac5 [0202.261] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0xc482f2a [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x7871fc59 [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x65549cbb [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x55bae3e3 [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x26e931b1 [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x33395ca6 [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x36b47461 [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x154ce058 [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x25282429 [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x274fd0ea [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x3c2fb695 [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x29ce6776 [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x51f86a12 [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x4e27b33b [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x3c7da57e [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x1808d9fb [0202.262] RtlRandomEx (in: Seed=0x83bfc68 | out: Seed=0x83bfc68) returned 0x746f301 [0202.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b88360 [0202.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b8bf68 [0202.275] ReadFile (in: hFile=0x5a4, lpBuffer=0x7b88360, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0x83bfc64, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesRead=0x83bfc64*=0xce, lpOverlapped=0x0) returned 1 [0202.277] SetFilePointerEx (in: hFile=0x5a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.277] WriteFile (in: hFile=0x5a4, lpBuffer=0x7b8bf68*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x83bfc68, lpOverlapped=0x0 | out: lpBuffer=0x7b8bf68*, lpNumberOfBytesWritten=0x83bfc68*=0xce, lpOverlapped=0x0) returned 1 [0206.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0206.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0206.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0206.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0206.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0206.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c630) returned 1 [0206.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84a28) returned 1 [0206.059] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0206.060] SetFilePointerEx (in: hFile=0x5a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.060] WriteFile (in: hFile=0x5a4, lpBuffer=0x7b7c668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x83bfcf0, lpOverlapped=0x0 | out: lpBuffer=0x7b7c668*, lpNumberOfBytesWritten=0x83bfcf0*=0x10c, lpOverlapped=0x0) returned 1 [0206.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0206.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3998) returned 1 [0206.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3998 [0206.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0206.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c90 [0206.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c90) returned 1 [0206.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.473] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="f6") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="81") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="88") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="09") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="42") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="5a") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="47") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="46") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="3f") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="e2") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="6f") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="1b") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="7b") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="bf") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="17") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="b8") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="ee") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="2e") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="b6") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="fc") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="b0") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="c3") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="b8") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="fa") returned 2 [0206.474] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="5d") returned 2 [0206.474] RtlInitAnsiString (in: DestinationString=0x83bfc78, SourceString="4ef6818809425a47463fe26f1b7bbf17b8ee2eb6fcb0c3b8fa5d" | out: DestinationString="4ef6818809425a47463fe26f1b7bbf17b8ee2eb6fcb0c3b8fa5d") [0206.475] RtlAnsiStringToUnicodeString (in: DestinationString=0x83bfc70, SourceString="4ef6818809425a47463fe26f1b7bbf17b8ee2eb6fcb0c3b8fa5d", AllocateDestinationString=1 | out: DestinationString="4ef6818809425a47463fe26f1b7bbf17b8ee2eb6fcb0c3b8fa5d") returned 0x0 [0206.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e8c8 [0206.475] wcscat (in: _Dest=0x7a5f7b8, _Source="4ef6818809425" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\4ef6818809425") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\4ef6818809425" [0206.475] wcscat (in: _Dest=0x7a5f7b8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\4ef6818809425.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\4ef6818809425.68814f" [0206.475] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\4ef6818809425.68814f", NtPathName=0x83bfc68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\4ef6818809425.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7dd8b50 [0208.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8b50) returned 1 [0208.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e24048) returned 1 [0208.853] NtQueryInformationFile (in: FileHandle=0x5a4, IoStatusBlock=0x83bfc40, FileInformation=0x83bfc48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x83bfc40, FileInformation=0x83bfc48) returned 0x0 [0208.854] NtSetInformationFile (FileHandle=0x5a4, IoStatusBlock=0x83bfc40, FileInformation=0x83bfc48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f7b8) returned 1 [0209.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e8c8) returned 1 [0209.189] FlushFileBuffers (hFile=0x5a4) returned 1 [0209.204] CloseHandle (hObject=0x5a4) returned 1 [0209.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7cd5af0 [0209.427] wcscpy (in: _Dest=0x7cd5af0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\" [0209.427] wcscat (in: _Dest=0x7cd5af0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\68814F-Readme.txt" [0209.427] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\68814f-readme.txt")) returned 0xffffffff [0209.427] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.016] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x83bfc84, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x83bfc84*=0x8b9, lpOverlapped=0x0) returned 1 [0210.023] CloseHandle (hObject=0xbb8) returned 1 [0210.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5af0) returned 1 [0210.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cba270) returned 1 Thread: id = 6624 os_tid = 0x1940 [0194.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif")) returned 0x20 [0194.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0194.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.873] GetLastError () returned 0x5 [0194.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0194.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 6625 os_tid = 0x1944 [0194.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif")) returned 0x20 [0194.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0194.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.875] GetLastError () returned 0x5 [0194.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0194.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 6626 os_tid = 0x14e8 [0194.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif")) returned 0x20 [0194.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0194.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.877] GetLastError () returned 0x5 [0194.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0194.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 6627 os_tid = 0x1814 [0194.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif")) returned 0x20 [0194.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0194.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.883] GetLastError () returned 0x5 [0194.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0194.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 6628 os_tid = 0x1818 [0194.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif")) returned 0x20 [0194.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0194.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.885] GetLastError () returned 0x5 [0194.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0194.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 6629 os_tid = 0x181c [0194.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif")) returned 0x20 [0194.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0194.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.889] GetLastError () returned 0x5 [0194.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0194.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86a80) returned 1 Thread: id = 6630 os_tid = 0x1820 [0194.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif")) returned 0x20 [0194.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0194.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.891] GetLastError () returned 0x5 [0194.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0194.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575c8) returned 1 Thread: id = 6631 os_tid = 0x1824 [0194.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif")) returned 0x20 [0194.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0194.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0194.893] GetLastError () returned 0x5 [0194.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0194.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ad8) returned 1 Thread: id = 6632 os_tid = 0x1c98 [0194.894] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json")) returned 0x2020 [0194.895] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0202.241] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbb8 [0202.241] GetFileSizeEx (in: hFile=0xbb8, lpFileSize=0x849fea4 | out: lpFileSize=0x849fea4*=246) returned 1 [0202.241] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.242] ReadFile (in: hFile=0xbb8, lpBuffer=0x849fe80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x849fe90, lpOverlapped=0x0 | out: lpBuffer=0x849fe80*, lpNumberOfBytesRead=0x849fe90*=0x4, lpOverlapped=0x0) returned 1 [0202.243] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c90 [0202.244] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0202.244] NtQuerySystemTime (in: CurrentTime=0x849fe18 | out: CurrentTime=0x849fe18*=132462177808176000) returned 0x0 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x637c2462 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x32e7494b [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x7fc4171 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x7a791a68 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x59ab941e [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x5b2a00b9 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x4f29c03b [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x37afc7f8 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x64259b3f [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x38719bd5 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x31a9291e [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x1be2cdc7 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x251bd1f2 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x2a079be0 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x6ec91752 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x3ea176a1 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x1f8c39f7 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x78b73a54 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x4e642ca2 [0202.244] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x7832ec7b [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x4909da78 [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x6d77df35 [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x3c888a74 [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x746f301 [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x6bbcd876 [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x43b7eb36 [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x52ff42ed [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x682e20a3 [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x4dc515a3 [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x632d74dc [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0xf90842a [0202.245] RtlRandomEx (in: Seed=0x849fe10 | out: Seed=0x849fe10) returned 0x4823ec61 [0202.259] ReadFile (in: hFile=0xbb8, lpBuffer=0x7b93778, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0x849fe0c, lpOverlapped=0x0 | out: lpBuffer=0x7b93778*, lpNumberOfBytesRead=0x849fe0c*=0xf6, lpOverlapped=0x0) returned 1 [0202.259] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.259] WriteFile (in: hFile=0xbb8, lpBuffer=0x7b97380*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x849fe10, lpOverlapped=0x0 | out: lpBuffer=0x7b97380*, lpNumberOfBytesWritten=0x849fe10*=0xf6, lpOverlapped=0x0) returned 1 [0206.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0206.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0206.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c518) returned 1 [0206.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b97380) returned 1 [0206.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0206.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c6a8) returned 1 [0206.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b843b0) returned 1 [0206.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376e0 [0206.057] SetFilePointerEx (in: hFile=0xbb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.057] WriteFile (in: hFile=0xbb8, lpBuffer=0x7b7ccf8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x849fe98, lpOverlapped=0x0 | out: lpBuffer=0x7b7ccf8*, lpNumberOfBytesWritten=0x849fe98*=0x10c, lpOverlapped=0x0) returned 1 [0206.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4820) returned 1 [0206.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4820 [0206.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3dd0 [0206.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec45f0) returned 1 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.469] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="94") returned 2 [0206.469] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="aa") returned 2 [0206.469] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="e9") returned 2 [0206.469] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="e9") returned 2 [0206.469] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="ab") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="60") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="ec") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="f6") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="6b") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="b6") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="ef") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="40") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="43") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="09") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="b0") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="71") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="b0") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="7a") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="03") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="2d") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="5e") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="79") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="7c") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="90") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="3e") returned 2 [0206.470] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="8e") returned 2 [0206.470] RtlInitAnsiString (in: DestinationString=0x849fe20, SourceString="94aae9e9ab60ecf66bb6ef404309b071b07a032d5e797c903e8e" | out: DestinationString="94aae9e9ab60ecf66bb6ef404309b071b07a032d5e797c903e8e") [0206.470] RtlAnsiStringToUnicodeString (in: DestinationString=0x849fe18, SourceString="94aae9e9ab60ecf66bb6ef404309b071b07a032d5e797c903e8e", AllocateDestinationString=1 | out: DestinationString="94aae9e9ab60ecf66bb6ef404309b071b07a032d5e797c903e8e") returned 0x0 [0206.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e760 [0206.471] wcscat (in: _Dest=0x7a5ecc0, _Source="94aae9e9ab60e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\94aae9e9ab60e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\94aae9e9ab60e" [0206.471] wcscat (in: _Dest=0x7a5ecc0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\94aae9e9ab60e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\94aae9e9ab60e.68814f" [0206.471] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\94aae9e9ab60e.68814f", NtPathName=0x849fe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\94aae9e9ab60e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x7dd8c98 [0209.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8c98) returned 1 [0209.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23e20) returned 1 [0209.708] NtQueryInformationFile (in: FileHandle=0xbb8, IoStatusBlock=0x849fde8, FileInformation=0x849fdf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x849fde8, FileInformation=0x849fdf0) returned 0x0 [0209.708] NtSetInformationFile (FileHandle=0xbb8, IoStatusBlock=0x849fde8, FileInformation=0x849fdf0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ecc0) returned 1 [0209.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0209.886] FlushFileBuffers (hFile=0xbb8) returned 1 [0209.899] CloseHandle (hObject=0xbb8) returned 1 [0209.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7a5ecc0 [0209.901] wcscpy (in: _Dest=0x7a5ecc0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\" [0209.901] wcscat (in: _Dest=0x7a5ecc0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\68814F-Readme.txt" [0209.901] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\68814f-readme.txt")) returned 0xffffffff [0209.901] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lt\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0209.904] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x849fe2c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x849fe2c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.907] CloseHandle (hObject=0xbb8) returned 1 [0209.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ecc0) returned 1 [0209.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cba398) returned 1 Thread: id = 6633 os_tid = 0x19c8 [0194.895] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json")) returned 0x2020 [0194.896] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0202.238] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb9c [0202.239] GetFileSizeEx (in: hFile=0xb9c, lpFileSize=0x99ffbc4 | out: lpFileSize=0x99ffbc4*=642) returned 1 [0202.239] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x27e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.239] ReadFile (in: hFile=0xb9c, lpBuffer=0x99ffba0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x99ffbb0, lpOverlapped=0x0 | out: lpBuffer=0x99ffba0*, lpNumberOfBytesRead=0x99ffbb0*=0x4, lpOverlapped=0x0) returned 1 [0202.283] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0202.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0202.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0202.285] NtQuerySystemTime (in: CurrentTime=0x99ffb38 | out: CurrentTime=0x99ffb38*=132462177808644000) returned 0x0 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x19dab86b [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x25e6df88 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x44a52941 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x5302c159 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x3f9880b5 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x600cfa8f [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x73892981 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x5bbd967f [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x1c5f8274 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x41046c87 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x71bce174 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x2c631928 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x4f03ba92 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x49181926 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x6a4efc9 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x261cdda6 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x7d9b3748 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x52e28ca8 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x338d410c [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x38d16ba9 [0202.285] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x8f32a80 [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x730d5beb [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x445a285e [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x3c634f4a [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x47fc5d6f [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x32a191db [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x31ef959b [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x1ce85a8b [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x5c1347ff [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x72b1044e [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0x348df001 [0202.286] RtlRandomEx (in: Seed=0x99ffb30 | out: Seed=0x99ffb30) returned 0xc6b5f0d [0202.296] ReadFile (in: hFile=0xb9c, lpBuffer=0x7b8fb70, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0x99ffb2c, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesRead=0x99ffb2c*=0x282, lpOverlapped=0x0) returned 1 [0202.296] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.296] WriteFile (in: hFile=0xb9c, lpBuffer=0x10ed0060*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0x99ffb30, lpOverlapped=0x0 | out: lpBuffer=0x10ed0060*, lpNumberOfBytesWritten=0x99ffb30*=0x282, lpOverlapped=0x0) returned 1 [0206.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c40 [0206.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0206.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c78) returned 1 [0206.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ed0060) returned 1 [0206.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0206.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c5b8) returned 1 [0206.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84ea8) returned 1 [0206.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3390 [0206.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c78) returned 1 [0206.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3180 [0206.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0206.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0206.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e70) returned 1 [0206.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c5b8) returned 1 [0206.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84ea8) returned 1 [0206.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7b7db30 [0206.885] SetFilePointerEx (in: hFile=0xb9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.885] WriteFile (in: hFile=0xb9c, lpBuffer=0x7b7db30*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x99ffbb8, lpOverlapped=0x0 | out: lpBuffer=0x7b7db30*, lpNumberOfBytesWritten=0x99ffbb8*=0x10c, lpOverlapped=0x0) returned 1 [0209.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6ce28 [0209.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0209.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c50) returned 1 [0209.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2c50 [0209.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0209.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0209.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0209.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0209.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.001] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.001] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="94") returned 2 [0209.001] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="93") returned 2 [0209.001] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="44") returned 2 [0209.001] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="cd") returned 2 [0209.001] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="39") returned 2 [0209.001] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="f8") returned 2 [0209.001] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="23") returned 2 [0209.001] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="43") returned 2 [0209.001] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="0e") returned 2 [0209.001] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="a5") returned 2 [0209.001] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="71") returned 2 [0209.001] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="3e") returned 2 [0209.001] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="eb") returned 2 [0209.001] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="dc") returned 2 [0209.001] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="8d") returned 2 [0209.001] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="4b") returned 2 [0209.002] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="f9") returned 2 [0209.002] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="86") returned 2 [0209.002] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="06") returned 2 [0209.002] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="7a") returned 2 [0209.002] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="5d") returned 2 [0209.002] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="50") returned 2 [0209.002] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="ed") returned 2 [0209.002] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="2e") returned 2 [0209.002] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="d1") returned 2 [0209.002] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="b8") returned 2 [0209.002] RtlInitAnsiString (in: DestinationString=0x99ffb40, SourceString="949344cd39f823430ea5713eebdc8d4bf986067a5d50ed2ed1b8" | out: DestinationString="949344cd39f823430ea5713eebdc8d4bf986067a5d50ed2ed1b8") [0209.002] RtlAnsiStringToUnicodeString (in: DestinationString=0x99ffb38, SourceString="949344cd39f823430ea5713eebdc8d4bf986067a5d50ed2ed1b8", AllocateDestinationString=1 | out: DestinationString="949344cd39f823430ea5713eebdc8d4bf986067a5d50ed2ed1b8") returned 0x0 [0209.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c888 [0209.003] wcscat (in: _Dest=0x7cd4770, _Source="949344cd39f82" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\949344cd39f82") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\949344cd39f82" [0209.003] wcscat (in: _Dest=0x7cd4770, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\949344cd39f82.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\949344cd39f82.68814f" [0209.003] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\949344cd39f82.68814f", NtPathName=0x99ffb30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\949344cd39f82.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.003] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0ac18 [0209.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ac18) returned 1 [0209.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca26f0) returned 1 [0209.872] NtQueryInformationFile (in: FileHandle=0xb9c, IoStatusBlock=0x99ffb08, FileInformation=0x99ffb10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x99ffb08, FileInformation=0x99ffb10) returned 0x0 [0209.872] NtSetInformationFile (FileHandle=0xb9c, IoStatusBlock=0x99ffb08, FileInformation=0x99ffb10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4770) returned 1 [0209.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c888) returned 1 [0209.875] FlushFileBuffers (hFile=0xb9c) returned 1 [0209.877] CloseHandle (hObject=0xb9c) returned 1 [0209.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7cd4770 [0209.881] wcscpy (in: _Dest=0x7cd4770, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\" [0209.881] wcscat (in: _Dest=0x7cd4770, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\68814F-Readme.txt" [0209.881] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\68814f-readme.txt")) returned 0xffffffff [0209.881] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.882] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x99ffb4c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x99ffb4c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.884] CloseHandle (hObject=0x16e0) returned 1 [0209.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4770) returned 1 [0209.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cba4c0) returned 1 Thread: id = 6634 os_tid = 0x19cc [0194.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a385e8 [0194.896] wcscpy (in: _Dest=0x7a385e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0194.896] wcscat (in: _Dest=0x7a385e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\" [0194.896] wcscat (in: _Dest=0x7a385e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*" [0194.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55580 [0194.897] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7baaa20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7baf840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0194.897] wcscmp (_String1=".", _String2=".") returned 0 [0194.897] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7baaa20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7baf840, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.897] wcscmp (_String1="..", _String2=".") returned 1 [0194.897] wcscmp (_String1="..", _String2="..") returned 0 [0194.897] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7baf840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0194.897] wcscmp (_String1="messages.json", _String2=".") returned 1 [0194.897] wcscmp (_String1="messages.json", _String2="..") returned 1 [0194.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7b80fd8 [0194.897] wcscpy (in: _Dest=0x7b80fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" [0194.897] wcscat (in: _Dest=0x7b80fd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\" [0194.898] wcscat (in: _Dest=0x7b80fd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" [0201.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b80fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c [0201.733] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7baf840, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7baf840, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.733] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0201.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55580) returned 1 [0201.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a385e8) returned 1 [0201.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b320) returned 1 Thread: id = 6635 os_tid = 0x19d0 [0194.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7a384d0 [0194.898] wcscpy (in: _Dest=0x7a384d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0194.898] wcscat (in: _Dest=0x7a384d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\" [0194.898] wcscat (in: _Dest=0x7a384d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*" [0194.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53638 [0194.898] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bbbb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bc7ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d7c0 [0199.510] wcscmp (_String1=".", _String2=".") returned 0 [0199.510] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bbbb90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bc7ee0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.511] wcscmp (_String1="..", _String2=".") returned 1 [0199.511] wcscmp (_String1="..", _String2="..") returned 0 [0199.511] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bc7ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.511] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.511] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbfbe0 [0199.511] wcscpy (in: _Dest=0x7cbfbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" [0199.511] wcscat (in: _Dest=0x7cbfbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\" [0199.511] wcscat (in: _Dest=0x7cbfbe0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" [0199.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1620 [0199.763] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bc7ee0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bc7ee0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8527d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.763] FindClose (in: hFindFile=0x7a2d7c0 | out: hFindFile=0x7a2d7c0) returned 1 [0199.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53638) returned 1 [0199.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a384d0) returned 1 [0199.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa128) returned 1 Thread: id = 6636 os_tid = 0x19d4 [0194.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d5b8 [0194.899] wcscpy (in: _Dest=0x7b7d5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0194.899] wcscat (in: _Dest=0x7b7d5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\" [0194.899] wcscat (in: _Dest=0x7b7d5b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*" [0194.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a538a0 [0194.899] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bd1b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd6940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bd6940, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0199.511] wcscmp (_String1=".", _String2=".") returned 0 [0199.511] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bd1b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd6940, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bd6940, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.511] wcscmp (_String1="..", _String2=".") returned 1 [0199.511] wcscmp (_String1="..", _String2="..") returned 0 [0199.511] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bd6940, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd9050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.512] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.512] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbfd08 [0199.512] wcscpy (in: _Dest=0x7cbfd08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" [0199.512] wcscat (in: _Dest=0x7cbfd08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\" [0199.512] wcscat (in: _Dest=0x7cbfd08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" [0199.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4 [0199.765] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bd6940, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bd9050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.765] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0199.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a538a0) returned 1 [0199.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d5b8) returned 1 [0199.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa338) returned 1 Thread: id = 6637 os_tid = 0x19d8 [0194.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d4a0 [0194.900] wcscpy (in: _Dest=0x7b7d4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0194.900] wcscat (in: _Dest=0x7b7d4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\" [0194.900] wcscat (in: _Dest=0x7b7d4a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*" [0194.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53b08 [0194.901] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7be2c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7beefe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0199.512] wcscmp (_String1=".", _String2=".") returned 0 [0199.512] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7be2c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7beefe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.512] wcscmp (_String1="..", _String2=".") returned 1 [0199.512] wcscmp (_String1="..", _String2="..") returned 0 [0199.512] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7beefe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.512] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.512] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbe710 [0199.513] wcscpy (in: _Dest=0x7cbe710, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" [0199.513] wcscat (in: _Dest=0x7cbe710, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\" [0199.513] wcscat (in: _Dest=0x7cbe710, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" [0199.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780 [0199.768] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7beefe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7beefe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.768] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0199.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53b08) returned 1 [0199.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d4a0) returned 1 [0199.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa230) returned 1 Thread: id = 6638 os_tid = 0x1ca0 [0194.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d6d0 [0194.913] wcscpy (in: _Dest=0x7b7d6d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0194.913] wcscat (in: _Dest=0x7b7d6d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\" [0194.913] wcscat (in: _Dest=0x7b7d6d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*" [0194.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3de90 [0194.913] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bf8c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bfda40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0199.513] wcscmp (_String1=".", _String2=".") returned 0 [0199.513] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7bf8c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7bfda40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.513] wcscmp (_String1="..", _String2=".") returned 1 [0199.513] wcscmp (_String1="..", _String2="..") returned 0 [0199.513] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bfb330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.513] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.513] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.513] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbf868 [0199.514] wcscpy (in: _Dest=0x7cbf868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" [0199.514] wcscat (in: _Dest=0x7cbf868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\" [0199.514] wcscat (in: _Dest=0x7cbf868, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" [0199.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x162c [0199.770] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x7a3de90 | out: lpFindFileData=0x7a3de90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7bfb330, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7bfda40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.771] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0199.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3de90) returned 1 [0199.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d6d0) returned 1 [0199.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebf00) returned 1 Thread: id = 6639 os_tid = 0x1ca4 [0194.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c9b0 [0194.916] wcscpy (in: _Dest=0x7b7c9b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0194.916] wcscat (in: _Dest=0x7b7c9b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\" [0194.916] wcscat (in: _Dest=0x7b7c9b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*" [0194.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b340 [0194.916] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c04f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c0c4a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0199.514] wcscmp (_String1=".", _String2=".") returned 0 [0199.514] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c04f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c0c4a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.514] wcscmp (_String1="..", _String2=".") returned 1 [0199.514] wcscmp (_String1="..", _String2="..") returned 0 [0199.514] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c0c4a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.514] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.514] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.514] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbf990 [0199.514] wcscpy (in: _Dest=0x7cbf990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" [0199.515] wcscat (in: _Dest=0x7cbf990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\" [0199.515] wcscat (in: _Dest=0x7cbf990, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" [0199.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188 [0199.773] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x7a3b340 | out: lpFindFileData=0x7a3b340*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c0c4a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c0c4a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.773] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0199.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b340) returned 1 [0199.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c9b0) returned 1 [0199.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec008) returned 1 Thread: id = 6640 os_tid = 0x1ca8 [0194.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c320 [0194.922] wcscpy (in: _Dest=0x7b7c320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0194.922] wcscat (in: _Dest=0x7b7c320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\" [0194.922] wcscat (in: _Dest=0x7b7c320, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*" [0194.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c1b0 [0194.922] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c1d610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c22430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0199.515] wcscmp (_String1=".", _String2=".") returned 0 [0199.515] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c1d610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7c22430, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.515] wcscmp (_String1="..", _String2=".") returned 1 [0199.515] wcscmp (_String1="..", _String2="..") returned 0 [0199.515] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c22430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.515] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.515] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbe960 [0199.515] wcscpy (in: _Dest=0x7cbe960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" [0199.516] wcscat (in: _Dest=0x7cbe960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\" [0199.516] wcscat (in: _Dest=0x7cbe960, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" [0199.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc [0199.776] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x7a3c1b0 | out: lpFindFileData=0x7a3c1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c22430, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7c22430, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.776] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0199.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c1b0) returned 1 [0199.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c320) returned 1 [0199.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec110) returned 1 Thread: id = 6641 os_tid = 0x1cac [0194.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7ce10 [0194.924] wcscpy (in: _Dest=0x7b7ce10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0194.924] wcscat (in: _Dest=0x7b7ce10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\" [0194.924] wcscat (in: _Dest=0x7b7ce10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*" [0194.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d020 [0194.925] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c2c070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fce340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0199.510] wcscmp (_String1=".", _String2=".") returned 0 [0199.510] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7c2c070, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fce340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.510] wcscmp (_String1="..", _String2=".") returned 1 [0199.510] wcscmp (_String1="..", _String2="..") returned 0 [0199.510] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fce340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.510] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.510] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbfab8 [0199.510] wcscpy (in: _Dest=0x7cbfab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" [0199.510] wcscat (in: _Dest=0x7cbfab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\" [0199.510] wcscat (in: _Dest=0x7cbfab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" [0201.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c [0201.727] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x7a3d020 | out: lpFindFileData=0x7a3d020*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fce340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fce340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.727] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0201.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d020) returned 1 [0201.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ce10) returned 1 [0201.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec320) returned 1 Thread: id = 6642 os_tid = 0x1cb0 [0194.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7cac8 [0194.925] wcscpy (in: _Dest=0x7b7cac8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0194.925] wcscat (in: _Dest=0x7b7cac8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\" [0194.926] wcscat (in: _Dest=0x7b7cac8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*" [0194.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ac08 [0194.926] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7fda690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fe69e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d540 [0199.509] wcscmp (_String1=".", _String2=".") returned 0 [0199.509] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7fda690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7fe69e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.509] wcscmp (_String1="..", _String2=".") returned 1 [0199.509] wcscmp (_String1="..", _String2="..") returned 0 [0199.509] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fe69e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.509] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.509] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cbea88 [0199.509] wcscpy (in: _Dest=0x7cbea88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" [0199.509] wcscat (in: _Dest=0x7cbea88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\" [0199.509] wcscat (in: _Dest=0x7cbea88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" [0201.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbea88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1848 [0201.725] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x7a3ac08 | out: lpFindFileData=0x7a3ac08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fe69e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7fe69e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.725] FindClose (in: hFindFile=0x7a2d540 | out: hFindFile=0x7a2d540) returned 1 [0201.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ac08) returned 1 [0201.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cac8) returned 1 [0201.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb3a8) returned 1 Thread: id = 6643 os_tid = 0x1cb8 [0194.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cac598 [0194.926] wcscpy (in: _Dest=0x7cac598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0194.926] wcscat (in: _Dest=0x7cac598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\" [0194.926] wcscat (in: _Dest=0x7cac598, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*" [0194.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3bce0 [0194.927] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ff2d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7ffa260, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d280 [0199.508] wcscmp (_String1=".", _String2=".") returned 0 [0199.508] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe7ff2d30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe7ffa260, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.508] wcscmp (_String1="..", _String2=".") returned 1 [0199.508] wcscmp (_String1="..", _String2="..") returned 0 [0199.508] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7ffa260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.508] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.508] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d54498 [0199.508] wcscpy (in: _Dest=0x3d54498, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" [0199.508] wcscat (in: _Dest=0x3d54498, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\" [0199.508] wcscat (in: _Dest=0x3d54498, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" [0201.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d54498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x184c [0201.723] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x7a3bce0 | out: lpFindFileData=0x7a3bce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7ffa260, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe7ffa260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852a460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.723] FindClose (in: hFindFile=0x7a2d280 | out: hFindFile=0x7a2d280) returned 1 [0201.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3bce0) returned 1 [0201.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac598) returned 1 [0201.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eece78) returned 1 Thread: id = 6644 os_tid = 0x1ddc [0194.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cac6b0 [0194.927] wcscpy (in: _Dest=0x7cac6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0194.927] wcscat (in: _Dest=0x7cac6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\" [0194.927] wcscat (in: _Dest=0x7cac6b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*" [0194.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d288 [0194.927] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8012900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8019e30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8019e30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0199.507] wcscmp (_String1=".", _String2=".") returned 0 [0199.507] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8012900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8019e30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8019e30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.507] wcscmp (_String1="..", _String2=".") returned 1 [0199.507] wcscmp (_String1="..", _String2="..") returned 0 [0199.507] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8019e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe801c540, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.507] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.507] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x3d553a0 [0199.507] wcscpy (in: _Dest=0x3d553a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" [0199.507] wcscat (in: _Dest=0x3d553a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\" [0199.507] wcscat (in: _Dest=0x3d553a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" [0201.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d553a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1850 [0201.721] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x7a3d288 | out: lpFindFileData=0x7a3d288*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8019e30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe801c540, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.721] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0201.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d288) returned 1 [0201.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac6b0) returned 1 [0201.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb2a0) returned 1 Thread: id = 6645 os_tid = 0x1de0 [0194.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cacd40 [0194.928] wcscpy (in: _Dest=0x7cacd40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0194.928] wcscat (in: _Dest=0x7cacd40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\" [0194.928] wcscat (in: _Dest=0x7cacd40, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*" [0194.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3a4d0 [0194.928] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe802afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8034be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db00 [0199.403] wcscmp (_String1=".", _String2=".") returned 0 [0199.403] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe802afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8034be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.403] wcscmp (_String1="..", _String2=".") returned 1 [0199.403] wcscmp (_String1="..", _String2="..") returned 0 [0199.403] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8034be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.404] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.404] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.404] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55bb8 [0199.404] wcscpy (in: _Dest=0x3d55bb8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" [0199.404] wcscat (in: _Dest=0x3d55bb8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\" [0199.404] wcscat (in: _Dest=0x3d55bb8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" [0201.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8 [0201.554] FindNextFileW (in: hFindFile=0x7a2db00, lpFindFileData=0x7a3a4d0 | out: lpFindFileData=0x7a3a4d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8034be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8034be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.554] FindClose (in: hFindFile=0x7a2db00 | out: hFindFile=0x7a2db00) returned 1 [0201.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3a4d0) returned 1 [0201.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacd40) returned 1 [0201.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecd70) returned 1 Thread: id = 6646 os_tid = 0x1de4 [0194.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cace58 [0194.929] wcscpy (in: _Dest=0x7cace58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0194.929] wcscat (in: _Dest=0x7cace58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\" [0194.929] wcscat (in: _Dest=0x7cace58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*" [0194.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c418 [0194.929] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8040f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8045d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db40 [0199.403] wcscmp (_String1=".", _String2=".") returned 0 [0199.403] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8040f30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8045d50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.403] wcscmp (_String1="..", _String2=".") returned 1 [0199.403] wcscmp (_String1="..", _String2="..") returned 0 [0199.403] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8045d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.403] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.403] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.403] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d554c8 [0199.403] wcscpy (in: _Dest=0x3d554c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" [0199.403] wcscat (in: _Dest=0x3d554c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\" [0199.403] wcscat (in: _Dest=0x3d554c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" [0201.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d554c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c [0201.551] FindNextFileW (in: hFindFile=0x7a2db40, lpFindFileData=0x7a3c418 | out: lpFindFileData=0x7a3c418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8045d50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8045d50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.551] FindClose (in: hFindFile=0x7a2db40 | out: hFindFile=0x7a2db40) returned 1 [0201.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c418) returned 1 [0201.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cace58) returned 1 [0201.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb198) returned 1 Thread: id = 6647 os_tid = 0x1dec [0194.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cacf70 [0194.929] wcscpy (in: _Dest=0x7cacf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0194.930] wcscat (in: _Dest=0x7cacf70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\" [0194.930] wcscat (in: _Dest=0x7cacf70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*" [0194.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3c8e8 [0194.930] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe804d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80520a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80520a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da40 [0199.402] wcscmp (_String1=".", _String2=".") returned 0 [0199.402] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe804d280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80520a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80520a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.402] wcscmp (_String1="..", _String2=".") returned 1 [0199.402] wcscmp (_String1="..", _String2="..") returned 0 [0199.402] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80520a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80806d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.402] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.402] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55278 [0199.402] wcscpy (in: _Dest=0x3d55278, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" [0199.402] wcscat (in: _Dest=0x3d55278, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\" [0199.402] wcscat (in: _Dest=0x3d55278, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" [0201.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084 [0201.760] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x7a3c8e8 | out: lpFindFileData=0x7a3c8e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80520a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80806d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.760] FindClose (in: hFindFile=0x7a2da40 | out: hFindFile=0x7a2da40) returned 1 [0201.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3c8e8) returned 1 [0201.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacf70) returned 1 [0201.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecc68) returned 1 Thread: id = 6648 os_tid = 0x1df0 [0194.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb7ec0 [0194.931] wcscpy (in: _Dest=0x7cb7ec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0194.931] wcscat (in: _Dest=0x7cb7ec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\" [0194.931] wcscat (in: _Dest=0x7cb7ec0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*" [0194.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b0d8 [0194.931] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe809b480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a02a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80a02a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d680 [0199.401] wcscmp (_String1=".", _String2=".") returned 0 [0199.401] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe809b480, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a02a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80a02a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.401] wcscmp (_String1="..", _String2=".") returned 1 [0199.401] wcscmp (_String1="..", _String2="..") returned 0 [0199.401] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80a02a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a29b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.401] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.401] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55a90 [0199.402] wcscpy (in: _Dest=0x3d55a90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" [0199.402] wcscat (in: _Dest=0x3d55a90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\" [0199.402] wcscat (in: _Dest=0x3d55a90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" [0201.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac [0201.758] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a3b0d8 | out: lpFindFileData=0x7a3b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80a02a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80a29b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.758] FindClose (in: hFindFile=0x7a2d680 | out: hFindFile=0x7a2d680) returned 1 [0201.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b0d8) returned 1 [0201.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7ec0) returned 1 [0201.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecb60) returned 1 Thread: id = 6649 os_tid = 0x1dfc [0194.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb7da8 [0194.931] wcscpy (in: _Dest=0x7cb7da8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0194.931] wcscat (in: _Dest=0x7cb7da8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\" [0194.931] wcscat (in: _Dest=0x7cb7da8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*" [0194.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3e0f8 [0194.932] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80b3b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80bb050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0199.400] wcscmp (_String1=".", _String2=".") returned 0 [0199.400] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80b3b20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80bb050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.401] wcscmp (_String1="..", _String2=".") returned 1 [0199.401] wcscmp (_String1="..", _String2="..") returned 0 [0199.401] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80bb050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.401] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.401] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55150 [0199.401] wcscpy (in: _Dest=0x3d55150, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" [0199.401] wcscat (in: _Dest=0x3d55150, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\" [0199.401] wcscat (in: _Dest=0x3d55150, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" [0201.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec [0201.756] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a3e0f8 | out: lpFindFileData=0x7a3e0f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80bb050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80bb050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.756] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0201.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3e0f8) returned 1 [0201.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7da8) returned 1 [0201.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeca58) returned 1 Thread: id = 6650 os_tid = 0x1e00 [0194.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb7c90 [0194.932] wcscpy (in: _Dest=0x7cb7c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0194.932] wcscat (in: _Dest=0x7cb7c90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\" [0194.932] wcscat (in: _Dest=0x7cb7c90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*" [0194.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b810 [0194.932] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80c73a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d36f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80d36f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d440 [0199.400] wcscmp (_String1=".", _String2=".") returned 0 [0199.400] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80c73a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d36f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80d36f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.400] wcscmp (_String1="..", _String2=".") returned 1 [0199.400] wcscmp (_String1="..", _String2="..") returned 0 [0199.400] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80d36f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d5e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.400] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.400] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d54cb0 [0199.400] wcscpy (in: _Dest=0x3d54cb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" [0199.400] wcscat (in: _Dest=0x3d54cb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\" [0199.400] wcscat (in: _Dest=0x3d54cb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" [0201.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d54cb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0 [0201.754] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a3b810 | out: lpFindFileData=0x7a3b810*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80d36f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80d5e00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.754] FindClose (in: hFindFile=0x7a2d440 | out: hFindFile=0x7a2d440) returned 1 [0201.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b810) returned 1 [0201.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7c90) returned 1 [0201.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec950) returned 1 Thread: id = 6651 os_tid = 0x1e04 [0194.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3debf68 [0194.933] wcscpy (in: _Dest=0x3debf68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0194.933] wcscat (in: _Dest=0x3debf68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\" [0194.933] wcscat (in: _Dest=0x3debf68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*" [0194.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3b5a8 [0194.933] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80e2150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80e6f70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0199.399] wcscmp (_String1=".", _String2=".") returned 0 [0199.399] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80e2150, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80e6f70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.399] wcscmp (_String1="..", _String2=".") returned 1 [0199.399] wcscmp (_String1="..", _String2="..") returned 0 [0199.399] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80e6f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.399] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.399] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55e08 [0199.399] wcscpy (in: _Dest=0x3d55e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" [0199.399] wcscat (in: _Dest=0x3d55e08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\" [0199.399] wcscat (in: _Dest=0x3d55e08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" [0201.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288 [0201.752] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a3b5a8 | out: lpFindFileData=0x7a3b5a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80e6f70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80e6f70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.752] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0201.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3b5a8) returned 1 [0201.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3debf68) returned 1 [0201.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec848) returned 1 Thread: id = 6652 os_tid = 0x1e08 [0194.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x3deca58 [0194.946] wcscpy (in: _Dest=0x3deca58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0194.946] wcscat (in: _Dest=0x3deca58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\" [0194.946] wcscat (in: _Dest=0x3deca58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*" [0194.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e03cf0 [0194.946] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x3e03cf0 | out: lpFindFileData=0x3e03cf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80f32c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fa7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80fa7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d400 [0199.506] wcscmp (_String1=".", _String2=".") returned 0 [0199.506] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3e03cf0 | out: lpFindFileData=0x3e03cf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80f32c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fa7f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe80fa7f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.506] wcscmp (_String1="..", _String2=".") returned 1 [0199.506] wcscmp (_String1="..", _String2="..") returned 0 [0199.506] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3e03cf0 | out: lpFindFileData=0x3e03cf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80fa7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fcf00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.506] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.506] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d55718 [0199.506] wcscpy (in: _Dest=0x3d55718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" [0199.506] wcscat (in: _Dest=0x3d55718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\" [0199.506] wcscat (in: _Dest=0x3d55718, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" [0201.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18e8 [0201.719] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3e03cf0 | out: lpFindFileData=0x3e03cf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe80fa7f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe80fcf00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852cb70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.719] FindClose (in: hFindFile=0x7a2d400 | out: hFindFile=0x7a2d400) returned 1 [0201.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03cf0) returned 1 [0201.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0201.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec740) returned 1 Thread: id = 6653 os_tid = 0x1e14 [0195.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7cb68e0 [0195.242] wcscpy (in: _Dest=0x7cb68e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0195.242] wcscat (in: _Dest=0x7cb68e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\" [0195.242] wcscat (in: _Dest=0x7cb68e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*" [0195.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0195.242] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8106b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe810b960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df40 [0199.373] wcscmp (_String1=".", _String2=".") returned 0 [0199.373] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8106b40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe810b960, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.373] wcscmp (_String1="..", _String2=".") returned 1 [0199.373] wcscmp (_String1="..", _String2="..") returned 0 [0199.373] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe810b960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.373] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.373] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x3d54810 [0199.373] wcscpy (in: _Dest=0x3d54810, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" [0199.373] wcscat (in: _Dest=0x3d54810, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\" [0199.373] wcscat (in: _Dest=0x3d54810, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" [0199.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d54810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c [0199.702] FindNextFileW (in: hFindFile=0x7a2df40, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe810b960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe810b960, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.702] FindClose (in: hFindFile=0x7a2df40 | out: hFindFile=0x7a2df40) returned 1 [0199.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0199.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb68e0) returned 1 [0199.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb4b0) returned 1 Thread: id = 6654 os_tid = 0x1e1c [0195.242] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json")) returned 0x2020 [0203.264] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0222.380] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x58c [0222.381] GetFileSizeEx (in: hFile=0x58c, lpFileSize=0x87afd24 | out: lpFileSize=0x87afd24*=220) returned 1 [0222.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0222.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0222.381] NtQuerySystemTime (in: CurrentTime=0x87afc98 | out: CurrentTime=0x87afc98*=132462178006296000) returned 0x0 [0222.381] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x42901526 [0222.381] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x78ebf15b [0222.381] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x883f027 [0222.381] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x7401e7e6 [0222.381] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x33baca44 [0222.381] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x2b1310c4 [0222.381] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x488b62cd [0222.381] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x9a421cc [0222.381] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x38126938 [0222.381] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x1b312568 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x70c63c0f [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x63051a8d [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x7409b5bc [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x28b79c36 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x2616db52 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x22a2b390 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x6b0660bb [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0xd57a70b [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x6f5165fe [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x3da29dfb [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x76d5db23 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x52759f6a [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x40c071fa [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x5828f43 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x3581a274 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x120fc6a6 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x7d9b0fe [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x148a3da7 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x7f74f641 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x4db902a3 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x3dc556e1 [0222.382] RtlRandomEx (in: Seed=0x87afc90 | out: Seed=0x87afc90) returned 0x5bf76e41 [0222.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0222.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0222.393] ReadFile (in: hFile=0x58c, lpBuffer=0x7be3778, nNumberOfBytesToRead=0xdc, lpNumberOfBytesRead=0x87afc8c, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0x87afc8c*=0xdc, lpOverlapped=0x0) returned 1 [0222.395] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.395] WriteFile (in: hFile=0x58c, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0x87afc90, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0x87afc90*=0xdc, lpOverlapped=0x0) returned 1 [0226.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0226.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baa0 [0226.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baa0) returned 1 [0226.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0226.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0226.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0226.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb88d8) returned 1 [0226.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38010 [0226.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb88d8 [0226.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0226.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baa0 [0226.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baa0) returned 1 [0226.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e60 [0226.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baa0 [0226.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0226.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0226.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0226.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb88d8) returned 1 [0226.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deca58 [0226.811] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.812] WriteFile (in: hFile=0x58c, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x87afd18, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x87afd18*=0x10c, lpOverlapped=0x0) returned 1 [0227.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e086e8 [0227.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e2b0 [0227.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0227.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0227.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ccc0 [0227.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0227.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0227.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0227.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0227.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e086e8) returned 1 [0227.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0227.098] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="e0") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="d5") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="59") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="2b") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="31") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="d7") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="cc") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="63") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="ed") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="25") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="88") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="68") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="71") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="e3") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="81") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="05") returned 2 [0227.098] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="c7") returned 2 [0227.099] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="ec") returned 2 [0227.099] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="11") returned 2 [0227.099] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="92") returned 2 [0227.099] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="eb") returned 2 [0227.099] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="73") returned 2 [0227.099] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="ef") returned 2 [0227.099] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="82") returned 2 [0227.099] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="7a") returned 2 [0227.099] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="26") returned 2 [0227.099] RtlInitAnsiString (in: DestinationString=0x87afca0, SourceString="e0d5592b31d7cc63ed25886871e38105c7ec1192eb73ef827a26" | out: DestinationString="e0d5592b31d7cc63ed25886871e38105c7ec1192eb73ef827a26") [0227.099] RtlAnsiStringToUnicodeString (in: DestinationString=0x87afc98, SourceString="e0d5592b31d7cc63ed25886871e38105c7ec1192eb73ef827a26", AllocateDestinationString=1 | out: DestinationString="e0d5592b31d7cc63ed25886871e38105c7ec1192eb73ef827a26") returned 0x0 [0227.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e238 [0227.099] wcscat (in: _Dest=0x3dd76c8, _Source="e0d5592b31d7c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\e0d5592b31d7c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\e0d5592b31d7c" [0227.099] wcscat (in: _Dest=0x3dd76c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\e0d5592b31d7c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\e0d5592b31d7c.68814f" [0227.099] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\e0d5592b31d7c.68814f", NtPathName=0x87afc90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\e0d5592b31d7c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0227.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x7dd91b8 [0227.103] FlushFileBuffers (hFile=0x58c) returned 1 [0227.339] CloseHandle (hObject=0x58c) returned 1 [0227.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd76c8 [0227.341] wcscpy (in: _Dest=0x3dd76c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\" [0227.341] wcscat (in: _Dest=0x3dd76c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\68814F-Readme.txt" [0227.341] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\68814f-readme.txt")) returned 0xffffffff [0227.341] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\it\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c [0227.342] WriteFile (in: hFile=0x58c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x87afcac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x87afcac*=0x8b9, lpOverlapped=0x0) returned 1 [0227.344] CloseHandle (hObject=0x58c) returned 1 [0227.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0227.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4cd8) returned 1 Thread: id = 6655 os_tid = 0x1e20 [0195.243] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json")) returned 0x2020 [0203.912] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0222.330] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf14 [0222.331] GetFileSizeEx (in: hFile=0xf14, lpFileSize=0x8c2fcf4 | out: lpFileSize=0x8c2fcf4*=268) returned 1 [0222.331] SetFilePointerEx (in: hFile=0xf14, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.331] ReadFile (in: hFile=0xf14, lpBuffer=0x8c2fcd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c2fce0, lpOverlapped=0x0 | out: lpBuffer=0x8c2fcd0*, lpNumberOfBytesRead=0x8c2fce0*=0x4, lpOverlapped=0x0) returned 1 [0222.333] SetFilePointerEx (in: hFile=0xf14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0222.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0222.334] NtQuerySystemTime (in: CurrentTime=0x8c2fc68 | out: CurrentTime=0x8c2fc68*=132462178005828000) returned 0x0 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x6ae6af63 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0xe5b02ca [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x2f66a129 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x3d358770 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x3ce29394 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x32713d00 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x46fbf56d [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x2e6290ba [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x2c834d52 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x13937458 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x61c53e97 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x1fe69a7f [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x341d5453 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x55a28f91 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x2cd74c1c [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x48176d8d [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x4679c53b [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x6d82c262 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x4c2c42a0 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x6337eee5 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x6fd7c2f6 [0222.334] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x98eac57 [0222.335] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x7277fc26 [0222.335] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x6cab12e6 [0222.335] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x1b5b5d14 [0222.335] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x68504417 [0222.335] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x63a15a66 [0222.335] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x248be10 [0222.335] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x79a37caa [0222.335] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x6e5a4bcf [0222.335] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x2687b144 [0222.335] RtlRandomEx (in: Seed=0x8c2fc60 | out: Seed=0x8c2fc60) returned 0x5c4a0711 [0222.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c38360 [0222.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c4af88 [0222.346] ReadFile (in: hFile=0xf14, lpBuffer=0x7c38360, nNumberOfBytesToRead=0x10c, lpNumberOfBytesRead=0x8c2fc5c, lpOverlapped=0x0 | out: lpBuffer=0x7c38360*, lpNumberOfBytesRead=0x8c2fc5c*=0x10c, lpOverlapped=0x0) returned 1 [0222.347] SetFilePointerEx (in: hFile=0xf14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.347] WriteFile (in: hFile=0xf14, lpBuffer=0x7c4af88*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8c2fc60, lpOverlapped=0x0 | out: lpBuffer=0x7c4af88*, lpNumberOfBytesWritten=0x8c2fc60*=0x10c, lpOverlapped=0x0) returned 1 [0223.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0223.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0223.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0223.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c4af88) returned 1 [0223.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c38360) returned 1 [0223.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0223.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8920) returned 1 [0223.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b00 [0223.340] SetFilePointerEx (in: hFile=0xf14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.340] WriteFile (in: hFile=0xf14, lpBuffer=0x300d948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8c2fce8, lpOverlapped=0x0 | out: lpBuffer=0x300d948*, lpNumberOfBytesWritten=0x8c2fce8*=0x10c, lpOverlapped=0x0) returned 1 [0223.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9ad8 [0223.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0223.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0223.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0223.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bb68 [0223.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb40 [0223.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0223.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b730) returned 1 [0223.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0223.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0223.641] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.641] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="e6") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="b6") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="d3") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="b9") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="7d") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="b1") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="b4") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="d2") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="ad") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="ec") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="2b") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="80") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="f9") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="aa") returned 2 [0223.641] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="19") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="fe") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="ff") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="d9") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="23") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="d3") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="24") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="c4") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="b2") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="0c") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="b5") returned 2 [0223.642] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="c0") returned 2 [0223.642] RtlInitAnsiString (in: DestinationString=0x8c2fc70, SourceString="e6b6d3b97db1b4d2adec2b80f9aa19feffd923d324c4b20cb5c0" | out: DestinationString="e6b6d3b97db1b4d2adec2b80f9aa19feffd923d324c4b20cb5c0") [0223.642] RtlAnsiStringToUnicodeString (in: DestinationString=0x8c2fc68, SourceString="e6b6d3b97db1b4d2adec2b80f9aa19feffd923d324c4b20cb5c0", AllocateDestinationString=1 | out: DestinationString="e6b6d3b97db1b4d2adec2b80f9aa19feffd923d324c4b20cb5c0") returned 0x0 [0223.642] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d514d0 [0223.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7dcc0) returned 1 [0223.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceef30) returned 1 [0223.838] NtQueryInformationFile (in: FileHandle=0xf14, IoStatusBlock=0x8c2fc38, FileInformation=0x8c2fc40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8c2fc38, FileInformation=0x8c2fc40) returned 0x0 [0223.838] NtSetInformationFile (FileHandle=0xf14, IoStatusBlock=0x8c2fc38, FileInformation=0x8c2fc40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0224.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4b18) returned 1 [0224.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d514d0) returned 1 [0224.004] FlushFileBuffers (hFile=0xf14) returned 1 [0224.014] CloseHandle (hObject=0xf14) returned 1 [0224.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7cd5880 [0224.053] wcscpy (in: _Dest=0x7cd5880, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\" [0224.054] wcscat (in: _Dest=0x7cd5880, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\68814F-Readme.txt" [0224.054] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\68814f-readme.txt")) returned 0xffffffff [0224.054] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ja\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c4 [0224.064] WriteFile (in: hFile=0x13c4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8c2fc7c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8c2fc7c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.080] CloseHandle (hObject=0x13c4) returned 1 [0224.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5880) returned 1 [0224.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4e00) returned 1 Thread: id = 6656 os_tid = 0x10cc [0195.243] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json")) returned 0x2020 [0203.908] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0222.529] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11a8 [0222.530] GetFileSizeEx (in: hFile=0x11a8, lpFileSize=0x79af874 | out: lpFileSize=0x79af874*=254) returned 1 [0222.530] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.530] ReadFile (in: hFile=0x11a8, lpBuffer=0x79af850, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x79af860, lpOverlapped=0x0 | out: lpBuffer=0x79af850*, lpNumberOfBytesRead=0x79af860*=0x4, lpOverlapped=0x0) returned 1 [0222.531] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0222.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0222.531] NtQuerySystemTime (in: CurrentTime=0x79af7e8 | out: CurrentTime=0x79af7e8*=132462178007856000) returned 0x0 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x48eb4845 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x33fcaea3 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x3c8cfd8a [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x62d397e [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x3e072f16 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x2299f7e8 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x1c8d24e3 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0xa0fac88 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x40ae8c45 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x13c34c55 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x30cffc4b [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x1e73118 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x3db16d84 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x8456a6e [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x1b2b2110 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0xdf8c5f1 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x2a261385 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x5570ac35 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x82f627e [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x4ae5de32 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x69004c88 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x7e1367c9 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x64109041 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x13d53267 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x2f683beb [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x57836faa [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x3494b3b6 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x2ee3bd65 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x11402030 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x314b363 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x791365e7 [0222.532] RtlRandomEx (in: Seed=0x79af7e0 | out: Seed=0x79af7e0) returned 0x46090b4e [0222.541] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.541] WriteFile (in: hFile=0x11a8, lpBuffer=0x7b45738*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x79af7e0, lpOverlapped=0x0 | out: lpBuffer=0x7b45738*, lpNumberOfBytesWritten=0x79af7e0*=0xfe, lpOverlapped=0x0) returned 1 [0226.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e539e0 [0226.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e90 [0226.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e90) returned 1 [0226.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b45738) returned 1 [0226.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b41b30) returned 1 [0226.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015418) returned 1 [0226.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8cc8) returned 1 [0226.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38250 [0226.210] SetFilePointerEx (in: hFile=0x11a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.210] WriteFile (in: hFile=0x11a8, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x79af868, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0x79af868*=0x10c, lpOverlapped=0x0) returned 1 [0226.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb08 [0226.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb08) returned 1 [0226.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305cb08 [0226.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0226.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0226.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c478) returned 1 [0226.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.303] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="fd") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="dc") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="1a") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="da") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="1c") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="89") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="7e") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="ce") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="7d") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="a1") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="11") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="6c") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="22") returned 2 [0226.303] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="c8") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="87") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="57") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="3d") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="8a") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="2a") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="a6") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="d7") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="8e") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="f8") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="f3") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="e4") returned 2 [0226.304] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="64") returned 2 [0226.304] RtlInitAnsiString (in: DestinationString=0x79af7f0, SourceString="fddc1ada1c897ece7da1116c22c887573d8a2aa6d78ef8f3e464" | out: DestinationString="fddc1ada1c897ece7da1116c22c887573d8a2aa6d78ef8f3e464") [0226.304] RtlAnsiStringToUnicodeString (in: DestinationString=0x79af7e8, SourceString="fddc1ada1c897ece7da1116c22c887573d8a2aa6d78ef8f3e464", AllocateDestinationString=1 | out: DestinationString="fddc1ada1c897ece7da1116c22c887573d8a2aa6d78ef8f3e464") returned 0x0 [0226.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f0b0 [0226.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda118) returned 1 [0226.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37190) returned 1 [0226.391] NtQueryInformationFile (in: FileHandle=0x11a8, IoStatusBlock=0x79af7b8, FileInformation=0x79af7c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x79af7b8, FileInformation=0x79af7c0) returned 0x0 [0226.391] NtSetInformationFile (FileHandle=0x11a8, IoStatusBlock=0x79af7b8, FileInformation=0x79af7c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca690) returned 1 [0226.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f0b0) returned 1 [0226.460] FlushFileBuffers (hFile=0x11a8) returned 1 [0226.473] CloseHandle (hObject=0x11a8) returned 1 [0226.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9e08 [0226.555] wcscpy (in: _Dest=0x3ec9e08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\" [0226.555] wcscat (in: _Dest=0x3ec9e08, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\68814F-Readme.txt" [0226.555] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\68814f-readme.txt")) returned 0xffffffff [0226.555] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ko\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.651] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x79af7fc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x79af7fc*=0x8b9, lpOverlapped=0x0) returned 1 [0226.653] CloseHandle (hObject=0x1060) returned 1 [0226.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9e08) returned 1 [0226.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4f28) returned 1 Thread: id = 6657 os_tid = 0x22d0 [0195.243] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json")) returned 0x2020 [0195.244] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0198.629] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x104c [0199.526] GetFileSizeEx (in: hFile=0x104c, lpFileSize=0x867fcec | out: lpFileSize=0x867fcec*=318) returned 1 [0199.526] SetFilePointerEx (in: hFile=0x104c, liDistanceToMove=0x13a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.526] ReadFile (in: hFile=0x104c, lpBuffer=0x867fcc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x867fcd8, lpOverlapped=0x0 | out: lpBuffer=0x867fcc8*, lpNumberOfBytesRead=0x867fcd8*=0x4, lpOverlapped=0x0) returned 1 [0199.528] SetFilePointerEx (in: hFile=0x104c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b1e0 [0199.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0199.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0199.528] NtQuerySystemTime (in: CurrentTime=0x867fc60 | out: CurrentTime=0x867fc60*=132462177781032000) returned 0x0 [0199.528] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x3a8e65a0 [0199.528] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x4ad7edf8 [0199.528] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x78cdfcf1 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x551159bd [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x6699fae5 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x604a81a6 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x71fb049e [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x440f1a55 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x91aa31d [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x7944859b [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x19819f11 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x6977fc48 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x36f025c0 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x7fb99fbf [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x7efcb87 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x792e9acc [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x5010fbc0 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x1ad46d42 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x1ddb0045 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x7d162d02 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x7aeecfcd [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x2dc97aa1 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x5ea61938 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0xf956d92 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x74770051 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x3994f8b1 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x255131ac [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x13ea9398 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x6a1a94e3 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0xe9bcfc7 [0199.529] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x1a45e0eb [0199.530] RtlRandomEx (in: Seed=0x867fc58 | out: Seed=0x867fc58) returned 0x127323a9 [0199.542] ReadFile (in: hFile=0x104c, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0x13e, lpNumberOfBytesRead=0x867fc54, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0x867fc54*=0x13e, lpOverlapped=0x0) returned 1 [0199.542] SetFilePointerEx (in: hFile=0x104c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.542] WriteFile (in: hFile=0x104c, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x867fc58, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0x867fc58*=0x13e, lpOverlapped=0x0) returned 1 [0211.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0211.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d28) returned 1 [0211.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0211.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0211.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30153a0) returned 1 [0211.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07a88) returned 1 [0211.259] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e00 [0211.259] SetFilePointerEx (in: hFile=0x104c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.259] WriteFile (in: hFile=0x104c, lpBuffer=0x7cd3718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x867fce0, lpOverlapped=0x0 | out: lpBuffer=0x7cd3718*, lpNumberOfBytesWritten=0x867fce0*=0x10c, lpOverlapped=0x0) returned 1 [0213.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0213.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0213.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2958 [0213.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0213.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0213.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3808) returned 1 [0213.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.590] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.590] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="73") returned 2 [0213.590] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="ca") returned 2 [0213.590] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="1f") returned 2 [0213.590] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="4d") returned 2 [0213.590] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="0c") returned 2 [0213.590] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="20") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="1e") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="67") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="87") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="eb") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="53") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="73") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="fa") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="63") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="6b") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="e9") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="f7") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="44") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="ed") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="ac") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="07") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="4f") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="86") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="e2") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="8d") returned 2 [0213.591] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="b6") returned 2 [0213.591] RtlInitAnsiString (in: DestinationString=0x867fc68, SourceString="73ca1f4d0c201e6787eb5373fa636be9f744edac074f86e28db6" | out: DestinationString="73ca1f4d0c201e6787eb5373fa636be9f744edac074f86e28db6") [0213.591] RtlAnsiStringToUnicodeString (in: DestinationString=0x867fc60, SourceString="73ca1f4d0c201e6787eb5373fa636be9f744edac074f86e28db6", AllocateDestinationString=1 | out: DestinationString="73ca1f4d0c201e6787eb5373fa636be9f744edac074f86e28db6") returned 0x0 [0213.591] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e9b8 Thread: id = 6658 os_tid = 0x22d4 [0195.245] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json")) returned 0x2020 [0200.398] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0207.036] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1868 [0207.054] GetFileSizeEx (in: hFile=0x1868, lpFileSize=0x8c7fde4 | out: lpFileSize=0x8c7fde4*=886) returned 1 [0207.054] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x372, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.054] ReadFile (in: hFile=0x1868, lpBuffer=0x8c7fdc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8c7fdd0, lpOverlapped=0x0 | out: lpBuffer=0x8c7fdc0*, lpNumberOfBytesRead=0x8c7fdd0*=0x4, lpOverlapped=0x0) returned 1 [0207.056] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0207.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0207.056] NtQuerySystemTime (in: CurrentTime=0x8c7fd58 | out: CurrentTime=0x8c7fd58*=132462177856380000) returned 0x0 [0207.056] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x36afed1f [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x276b2fd5 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x1e593972 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x31a0107e [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x3ac3b569 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x7293330d [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x57836d4c [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x780d6f24 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x55edbd18 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x6a21e6e0 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x6cea401f [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x59ec32c1 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x47133641 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x152d970c [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x42565909 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x51ef5dca [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x3e69357c [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x406749f4 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x451b88a2 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x2d646e25 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x66c800ca [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x13370851 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x759a1f [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x65f83003 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x7450aef3 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x5fb19d74 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x465d14fa [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x3150b27a [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x1b15e615 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x1eb760db [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x60b2a31 [0207.057] RtlRandomEx (in: Seed=0x8c7fd50 | out: Seed=0x8c7fd50) returned 0x3c389843 [0207.066] ReadFile (in: hFile=0x1868, lpBuffer=0x7d93fa8, nNumberOfBytesToRead=0x376, lpNumberOfBytesRead=0x8c7fd4c, lpOverlapped=0x0 | out: lpBuffer=0x7d93fa8*, lpNumberOfBytesRead=0x8c7fd4c*=0x376, lpOverlapped=0x0) returned 1 [0207.066] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.066] WriteFile (in: hFile=0x1868, lpBuffer=0x7dc4c10*, nNumberOfBytesToWrite=0x376, lpNumberOfBytesWritten=0x8c7fd50, lpOverlapped=0x0 | out: lpBuffer=0x7dc4c10*, lpNumberOfBytesWritten=0x8c7fd50*=0x376, lpOverlapped=0x0) returned 1 [0208.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0208.916] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0208.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0208.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc4c10) returned 1 [0208.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d93fa8) returned 1 [0208.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c720) returned 1 [0208.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc6e0) returned 1 [0208.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e00 [0208.917] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.917] WriteFile (in: hFile=0x1868, lpBuffer=0x7cd3718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8c7fdd8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3718*, lpNumberOfBytesWritten=0x8c7fdd8*=0x10c, lpOverlapped=0x0) returned 1 [0209.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0209.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4af0) returned 1 [0209.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4af0 [0209.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0209.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c68 [0209.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c68) returned 1 [0209.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.283] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="a8") returned 2 [0209.283] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="ce") returned 2 [0209.284] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="ae") returned 2 [0209.284] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="f2") returned 2 [0209.284] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="9d") returned 2 [0209.285] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="01") returned 2 [0209.285] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="4c") returned 2 [0209.285] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="d0") returned 2 [0209.285] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="b7") returned 2 [0209.285] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="c1") returned 2 [0209.285] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="13") returned 2 [0209.285] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="4d") returned 2 [0209.285] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="4e") returned 2 [0209.285] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="05") returned 2 [0209.285] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="6c") returned 2 [0209.285] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="19") returned 2 [0209.285] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="57") returned 2 [0209.285] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="98") returned 2 [0209.285] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="de") returned 2 [0209.285] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="9d") returned 2 [0209.285] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="3e") returned 2 [0209.285] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="a3") returned 2 [0209.285] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="f9") returned 2 [0209.285] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="d8") returned 2 [0209.285] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="c3") returned 2 [0209.285] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="47") returned 2 [0209.285] RtlInitAnsiString (in: DestinationString=0x8c7fd60, SourceString="a8ceaef29d014cd0b7c1134d4e056c195798de9d3ea3f9d8c347" | out: DestinationString="a8ceaef29d014cd0b7c1134d4e056c195798de9d3ea3f9d8c347") [0209.285] RtlAnsiStringToUnicodeString (in: DestinationString=0x8c7fd58, SourceString="a8ceaef29d014cd0b7c1134d4e056c195798de9d3ea3f9d8c347", AllocateDestinationString=1 | out: DestinationString="a8ceaef29d014cd0b7c1134d4e056c195798de9d3ea3f9d8c347") returned 0x0 [0209.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cae0 [0209.286] wcscat (in: _Dest=0x7cd49e0, _Source="a8ceaef29d014" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\a8ceaef29d014") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\a8ceaef29d014" [0209.286] wcscat (in: _Dest=0x7cd49e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\a8ceaef29d014.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\a8ceaef29d014.68814f" [0209.286] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\a8ceaef29d014.68814f", NtPathName=0x8c7fd50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\a8ceaef29d014.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0aac0 [0209.615] WriteFile (in: hFile=0x113c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8c7fd6c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8c7fd6c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.627] CloseHandle (hObject=0x113c) returned 1 [0209.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5130) returned 1 [0209.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9740) returned 1 Thread: id = 6659 os_tid = 0x22dc [0195.245] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json")) returned 0x2020 [0195.245] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0198.630] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14e8 [0198.631] GetFileSizeEx (in: hFile=0x14e8, lpFileSize=0x3f7f9e4 | out: lpFileSize=0x3f7f9e4*=259) returned 1 [0198.631] SetFilePointerEx (in: hFile=0x14e8, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.631] ReadFile (in: hFile=0x14e8, lpBuffer=0x3f7f9c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3f7f9d0, lpOverlapped=0x0 | out: lpBuffer=0x3f7f9c0*, lpNumberOfBytesRead=0x3f7f9d0*=0x4, lpOverlapped=0x0) returned 1 [0198.633] SetFilePointerEx (in: hFile=0x14e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0198.634] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0198.634] NtQuerySystemTime (in: CurrentTime=0x3f7f958 | out: CurrentTime=0x3f7f958*=132462177772140000) returned 0x0 [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x5992f012 [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x7e3a0c4 [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x45aeb8c3 [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x5040785e [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x756725af [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x6aabe305 [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x706bb5a5 [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x72f6735f [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x25b11a17 [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x24d1f694 [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x278e51c3 [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x317f5458 [0198.634] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x39a1c2c3 [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x2f2090ad [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x5ea7a200 [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x130ec8bb [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x2f45666 [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x60255861 [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x61080570 [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x42a715be [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x2d99775e [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x17ce0270 [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x3dbf89ca [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x3ce2056a [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x5d53048b [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x21762934 [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x2d425c03 [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x2ea39af5 [0198.635] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x28be68bf [0198.636] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x13356c22 [0198.636] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x585a5d29 [0198.636] RtlRandomEx (in: Seed=0x3f7f950 | out: Seed=0x3f7f950) returned 0x743dfc28 [0198.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eb1ca8 [0198.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eb58b0 [0198.665] ReadFile (in: hFile=0x14e8, lpBuffer=0x10eb1ca8, nNumberOfBytesToRead=0x103, lpNumberOfBytesRead=0x3f7f94c, lpOverlapped=0x0 | out: lpBuffer=0x10eb1ca8*, lpNumberOfBytesRead=0x3f7f94c*=0x103, lpOverlapped=0x0) returned 1 [0198.665] SetFilePointerEx (in: hFile=0x14e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.665] WriteFile (in: hFile=0x14e8, lpBuffer=0x10eb58b0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x3f7f950, lpOverlapped=0x0 | out: lpBuffer=0x10eb58b0*, lpNumberOfBytesWritten=0x3f7f950*=0x103, lpOverlapped=0x0) returned 1 [0200.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0200.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0200.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5d0) returned 1 [0200.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eb58b0) returned 1 [0200.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eb1ca8) returned 1 [0200.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf90) returned 1 [0200.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84d88) returned 1 [0200.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3db0 [0200.106] SetFilePointerEx (in: hFile=0x14e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.106] WriteFile (in: hFile=0x14e8, lpBuffer=0x300dfd8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x3f7f9d8, lpOverlapped=0x0 | out: lpBuffer=0x300dfd8*, lpNumberOfBytesWritten=0x3f7f9d8*=0x10c, lpOverlapped=0x0) returned 1 [0200.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0200.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2ca68 [0200.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0200.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0200.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53ad0 [0200.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53dc8 [0200.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0200.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d28) returned 1 [0200.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ca68) returned 1 [0200.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0200.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.990] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="32") returned 2 [0200.990] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="64") returned 2 [0200.990] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="02") returned 2 [0200.990] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="13") returned 2 [0200.990] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="e7") returned 2 [0200.990] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="99") returned 2 [0200.990] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="38") returned 2 [0200.990] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="ab") returned 2 [0200.990] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="52") returned 2 [0200.990] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="8b") returned 2 [0200.990] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="28") returned 2 [0200.990] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="ee") returned 2 [0200.990] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="40") returned 2 [0200.990] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="7c") returned 2 [0200.990] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="61") returned 2 [0200.990] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="53") returned 2 [0200.990] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="ce") returned 2 [0200.990] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="62") returned 2 [0200.990] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="2f") returned 2 [0200.991] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="6e") returned 2 [0200.991] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="27") returned 2 [0200.991] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="b9") returned 2 [0200.991] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="27") returned 2 [0200.991] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="00") returned 2 [0200.991] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="77") returned 2 [0200.991] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="a6") returned 2 [0200.991] RtlInitAnsiString (in: DestinationString=0x3f7f960, SourceString="32640213e79938ab528b28ee407c6153ce622f6e27b9270077a6" | out: DestinationString="32640213e79938ab528b28ee407c6153ce622f6e27b9270077a6") [0200.991] RtlAnsiStringToUnicodeString (in: DestinationString=0x3f7f958, SourceString="32640213e79938ab528b28ee407c6153ce622f6e27b9270077a6", AllocateDestinationString=1 | out: DestinationString="32640213e79938ab528b28ee407c6153ce622f6e27b9270077a6") returned 0x0 [0200.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c180 [0200.991] wcscat (in: _Dest=0x3eca1b0, _Source="32640213e7993" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\32640213e7993") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\32640213e7993" [0200.991] wcscat (in: _Dest=0x3eca1b0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\32640213e7993.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\32640213e7993.68814f" [0200.991] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\32640213e7993.68814f", NtPathName=0x3f7f950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\32640213e7993.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9bf8 [0201.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9bf8) returned 1 [0201.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94520) returned 1 [0201.249] NtQueryInformationFile (in: FileHandle=0x14e8, IoStatusBlock=0x3f7f928, FileInformation=0x3f7f930, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x3f7f928, FileInformation=0x3f7f930) returned 0x0 [0201.249] NtSetInformationFile (FileHandle=0x14e8, IoStatusBlock=0x3f7f928, FileInformation=0x3f7f930, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca1b0) returned 1 [0208.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c180) returned 1 [0208.558] FlushFileBuffers (hFile=0x14e8) returned 1 [0208.570] CloseHandle (hObject=0x14e8) returned 1 [0209.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e01708 [0209.016] wcscpy (in: _Dest=0x3e01708, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\" [0209.016] wcscat (in: _Dest=0x3e01708, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\68814F-Readme.txt" [0209.016] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\68814f-readme.txt")) returned 0xffffffff [0209.016] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\es\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.893] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x3f7f96c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x3f7f96c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.895] CloseHandle (hObject=0x16e0) returned 1 [0209.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01708) returned 1 [0209.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55840) returned 1 Thread: id = 6660 os_tid = 0x22e4 [0195.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x20 [0204.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF", dwFileAttributes=0x20) returned 0 [0204.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.706] GetLastError () returned 0x5 [0204.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF", dwFileAttributes=0x20) returned 0 [0204.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69b20) returned 1 Thread: id = 6661 os_tid = 0x22f8 [0195.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x20 [0204.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF", dwFileAttributes=0x20) returned 0 [0204.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.703] GetLastError () returned 0x5 [0204.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF", dwFileAttributes=0x20) returned 0 [0204.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a694c0) returned 1 Thread: id = 6662 os_tid = 0x22fc [0195.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x20 [0204.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF", dwFileAttributes=0x20) returned 0 [0204.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.700] GetLastError () returned 0x5 [0204.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF", dwFileAttributes=0x20) returned 0 [0204.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69988) returned 1 Thread: id = 6663 os_tid = 0x1ef8 [0195.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x20 [0204.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF", dwFileAttributes=0x20) returned 0 [0204.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.696] GetLastError () returned 0x5 [0204.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF", dwFileAttributes=0x20) returned 0 [0204.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a697f0) returned 1 Thread: id = 6664 os_tid = 0x1efc [0195.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x20 [0204.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF", dwFileAttributes=0x20) returned 0 [0204.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.735] GetLastError () returned 0x5 [0204.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF", dwFileAttributes=0x20) returned 0 [0204.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69548) returned 1 Thread: id = 6665 os_tid = 0x24cc [0195.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x20 [0204.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF", dwFileAttributes=0x20) returned 0 [0204.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.731] GetLastError () returned 0x5 [0204.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF", dwFileAttributes=0x20) returned 0 [0204.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69768) returned 1 Thread: id = 6666 os_tid = 0x2788 [0195.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x20 [0204.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF", dwFileAttributes=0x20) returned 0 [0204.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.728] GetLastError () returned 0x5 [0204.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF", dwFileAttributes=0x20) returned 0 [0204.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69108) returned 1 Thread: id = 6667 os_tid = 0x24e4 [0195.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x20 [0204.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF", dwFileAttributes=0x20) returned 0 [0204.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.725] GetLastError () returned 0x5 [0204.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF", dwFileAttributes=0x20) returned 0 [0204.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69190) returned 1 Thread: id = 6668 os_tid = 0x24e8 [0195.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x20 [0204.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF", dwFileAttributes=0x20) returned 0 [0204.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.722] GetLastError () returned 0x5 [0204.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF", dwFileAttributes=0x20) returned 0 [0204.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69218) returned 1 Thread: id = 6669 os_tid = 0x24ec [0195.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x20 [0204.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF", dwFileAttributes=0x20) returned 0 [0204.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.719] GetLastError () returned 0x5 [0204.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF", dwFileAttributes=0x20) returned 0 [0204.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a692a0) returned 1 Thread: id = 6670 os_tid = 0x24f4 [0195.256] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json")) returned 0x2020 [0195.256] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0198.665] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x168c [0198.666] GetFileSizeEx (in: hFile=0x168c, lpFileSize=0x9cbfaac | out: lpFileSize=0x9cbfaac*=263) returned 1 [0198.666] SetFilePointerEx (in: hFile=0x168c, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.666] ReadFile (in: hFile=0x168c, lpBuffer=0x9cbfa88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9cbfa98, lpOverlapped=0x0 | out: lpBuffer=0x9cbfa88*, lpNumberOfBytesRead=0x9cbfa98*=0x4, lpOverlapped=0x0) returned 1 [0198.668] SetFilePointerEx (in: hFile=0x168c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.668] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0198.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0198.669] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a18 [0198.669] NtQuerySystemTime (in: CurrentTime=0x9cbfa20 | out: CurrentTime=0x9cbfa20*=132462177772452000) returned 0x0 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x2e7b600 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x2920480 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x51bbaec3 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x58369bb6 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x6433db27 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x1eb610d8 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x4851e9ec [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x59d8f99f [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x3aa89785 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x3f2b6d61 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x40d45961 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x5d9dfc51 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x2b3e9b36 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x7cd119c6 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x17838979 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x7c78e563 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x55383535 [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x19c839db [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x2111f5e [0198.669] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x4aa84fdb [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x63463a7c [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x14464a2b [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x20c41fe [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0xb9e453 [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x574f67f6 [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x3684040 [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x387f1a83 [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x14400fcc [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x2114025f [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x5eefb08a [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x58c0553e [0198.670] RtlRandomEx (in: Seed=0x9cbfa18 | out: Seed=0x9cbfa18) returned 0x154f4707 [0198.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0198.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eb94b8 [0198.682] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ebd0c0 [0198.682] ReadFile (in: hFile=0x168c, lpBuffer=0x10eb94b8, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0x9cbfa14, lpOverlapped=0x0 | out: lpBuffer=0x10eb94b8*, lpNumberOfBytesRead=0x9cbfa14*=0x107, lpOverlapped=0x0) returned 1 [0198.682] SetFilePointerEx (in: hFile=0x168c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.682] WriteFile (in: hFile=0x168c, lpBuffer=0x10ebd0c0*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x9cbfa18, lpOverlapped=0x0 | out: lpBuffer=0x10ebd0c0*, lpNumberOfBytesWritten=0x9cbfa18*=0x107, lpOverlapped=0x0) returned 1 [0200.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0200.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0200.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0200.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ebd0c0) returned 1 [0200.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eb94b8) returned 1 [0200.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c018) returned 1 [0200.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84dd0) returned 1 [0200.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3c90 [0200.109] SetFilePointerEx (in: hFile=0x168c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.109] WriteFile (in: hFile=0x168c, lpBuffer=0x300da60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9cbfaa0, lpOverlapped=0x0 | out: lpBuffer=0x300da60*, lpNumberOfBytesWritten=0x9cbfaa0*=0x10c, lpOverlapped=0x0) returned 1 [0200.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85c50 [0200.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3df68 [0200.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52e78 [0200.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52e78) returned 1 [0200.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52e78 [0200.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52338 [0200.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0200.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53058) returned 1 [0200.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0200.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85c50) returned 1 [0200.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3066f00 [0200.996] sprintf (in: _Dest=0x3066f00, _Format="%c%c" | out: _Dest="a0") returned 2 [0200.996] sprintf (in: _Dest=0x3066f02, _Format="%c%c" | out: _Dest="ff") returned 2 [0200.996] sprintf (in: _Dest=0x3066f04, _Format="%c%c" | out: _Dest="1d") returned 2 [0200.996] sprintf (in: _Dest=0x3066f06, _Format="%c%c" | out: _Dest="bb") returned 2 [0200.996] sprintf (in: _Dest=0x3066f08, _Format="%c%c" | out: _Dest="36") returned 2 [0200.996] sprintf (in: _Dest=0x3066f0a, _Format="%c%c" | out: _Dest="26") returned 2 [0200.996] sprintf (in: _Dest=0x3066f0c, _Format="%c%c" | out: _Dest="18") returned 2 [0200.996] sprintf (in: _Dest=0x3066f0e, _Format="%c%c" | out: _Dest="d9") returned 2 [0200.996] sprintf (in: _Dest=0x3066f10, _Format="%c%c" | out: _Dest="d6") returned 2 [0200.997] sprintf (in: _Dest=0x3066f12, _Format="%c%c" | out: _Dest="8b") returned 2 [0200.997] sprintf (in: _Dest=0x3066f14, _Format="%c%c" | out: _Dest="c3") returned 2 [0200.997] sprintf (in: _Dest=0x3066f16, _Format="%c%c" | out: _Dest="47") returned 2 [0200.997] sprintf (in: _Dest=0x3066f18, _Format="%c%c" | out: _Dest="8c") returned 2 [0200.997] sprintf (in: _Dest=0x3066f1a, _Format="%c%c" | out: _Dest="f9") returned 2 [0200.997] sprintf (in: _Dest=0x3066f1c, _Format="%c%c" | out: _Dest="db") returned 2 [0200.997] sprintf (in: _Dest=0x3066f1e, _Format="%c%c" | out: _Dest="75") returned 2 [0200.997] sprintf (in: _Dest=0x3066f20, _Format="%c%c" | out: _Dest="9f") returned 2 [0200.997] sprintf (in: _Dest=0x3066f22, _Format="%c%c" | out: _Dest="34") returned 2 [0200.997] sprintf (in: _Dest=0x3066f24, _Format="%c%c" | out: _Dest="d8") returned 2 [0200.997] sprintf (in: _Dest=0x3066f26, _Format="%c%c" | out: _Dest="f4") returned 2 [0200.997] sprintf (in: _Dest=0x3066f28, _Format="%c%c" | out: _Dest="7a") returned 2 [0200.997] sprintf (in: _Dest=0x3066f2a, _Format="%c%c" | out: _Dest="b5") returned 2 [0200.997] sprintf (in: _Dest=0x3066f2c, _Format="%c%c" | out: _Dest="a4") returned 2 [0200.997] sprintf (in: _Dest=0x3066f2e, _Format="%c%c" | out: _Dest="f0") returned 2 [0200.997] sprintf (in: _Dest=0x3066f30, _Format="%c%c" | out: _Dest="14") returned 2 [0200.997] sprintf (in: _Dest=0x3066f32, _Format="%c%c" | out: _Dest="e1") returned 2 [0200.997] RtlInitAnsiString (in: DestinationString=0x9cbfa28, SourceString="a0ff1dbb362618d9d68bc3478cf9db759f34d8f47ab5a4f014e1" | out: DestinationString="a0ff1dbb362618d9d68bc3478cf9db759f34d8f47ab5a4f014e1") [0200.997] RtlAnsiStringToUnicodeString (in: DestinationString=0x9cbfa20, SourceString="a0ff1dbb362618d9d68bc3478cf9db759f34d8f47ab5a4f014e1", AllocateDestinationString=1 | out: DestinationString="a0ff1dbb362618d9d68bc3478cf9db759f34d8f47ab5a4f014e1") returned 0x0 [0200.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c9f0 [0200.998] wcscat (in: _Dest=0x7a5f2d8, _Source="a0ff1dbb36261" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\a0ff1dbb36261") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\a0ff1dbb36261" [0200.998] wcscat (in: _Dest=0x7a5f2d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\a0ff1dbb36261.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\a0ff1dbb36261.68814f" [0200.998] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\a0ff1dbb36261.68814f", NtPathName=0x9cbfa18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\a0ff1dbb36261.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0200.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd9d40 [0201.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9d40) returned 1 [0201.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e94748) returned 1 [0201.250] NtQueryInformationFile (in: FileHandle=0x168c, IoStatusBlock=0x9cbf9f0, FileInformation=0x9cbf9f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9cbf9f0, FileInformation=0x9cbf9f8) returned 0x0 [0201.250] NtSetInformationFile (FileHandle=0x168c, IoStatusBlock=0x9cbf9f0, FileInformation=0x9cbf9f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0208.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f2d8) returned 1 [0208.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c9f0) returned 1 [0208.555] FlushFileBuffers (hFile=0x168c) returned 1 [0208.563] CloseHandle (hObject=0x168c) returned 1 [0209.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e015e0 [0209.012] wcscpy (in: _Dest=0x3e015e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\" [0209.013] wcscat (in: _Dest=0x3e015e0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\68814F-Readme.txt" [0209.013] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\68814f-readme.txt")) returned 0xffffffff [0209.013] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e0 [0209.889] WriteFile (in: hFile=0x16e0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9cbfa34, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9cbfa34*=0x8b9, lpOverlapped=0x0) returned 1 [0209.891] CloseHandle (hObject=0x16e0) returned 1 [0209.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e015e0) returned 1 [0209.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbaf28) returned 1 Thread: id = 6671 os_tid = 0x24f8 [0195.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x20 [0204.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF", dwFileAttributes=0x20) returned 0 [0204.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.849] GetLastError () returned 0x5 [0204.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF", dwFileAttributes=0x20) returned 0 [0204.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69328) returned 1 Thread: id = 6672 os_tid = 0x24fc [0195.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x20 [0204.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF", dwFileAttributes=0x20) returned 0 [0204.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.710] GetLastError () returned 0x5 [0204.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF", dwFileAttributes=0x20) returned 0 [0204.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a693b0) returned 1 Thread: id = 6673 os_tid = 0x2500 [0195.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x20 [0204.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF", dwFileAttributes=0x20) returned 0 [0204.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.851] GetLastError () returned 0x5 [0204.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF", dwFileAttributes=0x20) returned 0 [0204.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68cc8) returned 1 Thread: id = 6674 os_tid = 0x2504 [0195.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x20 [0204.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF", dwFileAttributes=0x20) returned 0 [0204.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.852] GetLastError () returned 0x5 [0204.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF", dwFileAttributes=0x20) returned 0 [0204.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 6675 os_tid = 0x27c4 [0195.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x20 [0204.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF", dwFileAttributes=0x20) returned 0 [0204.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.854] GetLastError () returned 0x5 [0204.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF", dwFileAttributes=0x20) returned 0 [0204.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 6676 os_tid = 0x2510 [0195.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid")) returned 0x20 [0204.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID", dwFileAttributes=0x20) returned 0 [0204.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.856] GetLastError () returned 0x5 [0204.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID", dwFileAttributes=0x20) returned 0 [0204.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 6677 os_tid = 0x2514 [0195.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid")) returned 0x20 [0204.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID", dwFileAttributes=0x20) returned 0 [0204.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.713] GetLastError () returned 0x5 [0204.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID", dwFileAttributes=0x20) returned 0 [0204.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 6678 os_tid = 0x1b08 [0195.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf")) returned 0x20 [0204.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF", dwFileAttributes=0x20) returned 0 [0204.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.757] GetLastError () returned 0x5 [0204.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF", dwFileAttributes=0x20) returned 0 [0204.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18e18) returned 1 Thread: id = 6679 os_tid = 0x1b0c [0195.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid")) returned 0x20 [0204.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID", dwFileAttributes=0x20) returned 0 [0204.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.760] GetLastError () returned 0x5 [0204.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID", dwFileAttributes=0x20) returned 0 [0204.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 6680 os_tid = 0x1b10 [0195.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid")) returned 0x20 [0204.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID", dwFileAttributes=0x20) returned 0 [0204.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.764] GetLastError () returned 0x5 [0204.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID", dwFileAttributes=0x20) returned 0 [0204.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 6681 os_tid = 0x1b14 [0195.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x20 [0204.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF", dwFileAttributes=0x20) returned 0 [0204.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.717] GetLastError () returned 0x5 [0204.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF", dwFileAttributes=0x20) returned 0 [0204.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 6682 os_tid = 0x2334 [0195.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x20 [0204.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF", dwFileAttributes=0x20) returned 0 [0204.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.435] GetLastError () returned 0x5 [0204.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF", dwFileAttributes=0x20) returned 0 [0204.435] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 6683 os_tid = 0x2518 [0195.546] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json")) returned 0x2020 [0195.546] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0202.317] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1a2c [0202.317] GetFileSizeEx (in: hFile=0x1a2c, lpFileSize=0xb43f80c | out: lpFileSize=0xb43f80c*=227) returned 1 [0202.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0202.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0202.318] NtQuerySystemTime (in: CurrentTime=0xb43f780 | out: CurrentTime=0xb43f780*=132462177808956000) returned 0x0 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x346a9287 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x35873de7 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x5bbd967f [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x71bce174 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x1bf27da0 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x40a8df81 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x74b509d2 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0xf3ce9f1 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x4f03ba92 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x5334f321 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x280977d6 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x2a89c88f [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x14570d2 [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x64b3e5d [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x6cdc83e [0202.318] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x202bd05f [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x7cf4dc54 [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x2646e766 [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x4b68cd37 [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x280977d6 [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x53374901 [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x704365d0 [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x2e7aa1ec [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x6db78ccf [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x27fd8cd [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x22891bd5 [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x5ee702c2 [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x719d8ed7 [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x31de5cb [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x337c701 [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x2e9f083a [0202.319] RtlRandomEx (in: Seed=0xb43f778 | out: Seed=0xb43f778) returned 0x4a39173d [0202.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f00cc8 [0202.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eee0a0 [0202.329] ReadFile (in: hFile=0x1a2c, lpBuffer=0x10f00cc8, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0xb43f774, lpOverlapped=0x0 | out: lpBuffer=0x10f00cc8*, lpNumberOfBytesRead=0xb43f774*=0xe3, lpOverlapped=0x0) returned 1 [0202.331] SetFilePointerEx (in: hFile=0x1a2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.331] WriteFile (in: hFile=0x1a2c, lpBuffer=0x10eee0a0*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0xb43f778, lpOverlapped=0x0 | out: lpBuffer=0x10eee0a0*, lpNumberOfBytesWritten=0xb43f778*=0xe3, lpOverlapped=0x0) returned 1 [0206.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0206.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b848 [0206.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b848) returned 1 [0206.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eee0a0) returned 1 [0206.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f00cc8) returned 1 [0206.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c720) returned 1 [0206.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85250) returned 1 [0206.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37740 [0206.067] SetFilePointerEx (in: hFile=0x1a2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.067] WriteFile (in: hFile=0x1a2c, lpBuffer=0x7b7d388*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb43f800, lpOverlapped=0x0 | out: lpBuffer=0x7b7d388*, lpNumberOfBytesWritten=0xb43f800*=0x10c, lpOverlapped=0x0) returned 1 [0208.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbce30 [0208.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c3d8 [0208.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0208.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0208.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec6710 [0208.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0208.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0208.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0208.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c3d8) returned 1 [0208.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbce30) returned 1 [0208.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0208.507] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="82") returned 2 [0208.507] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="ed") returned 2 [0208.507] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="e8") returned 2 [0208.507] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="0e") returned 2 [0208.507] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="2d") returned 2 [0208.507] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="17") returned 2 [0208.507] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="ba") returned 2 [0208.507] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="48") returned 2 [0208.507] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="94") returned 2 [0208.507] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="f7") returned 2 [0208.507] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="b8") returned 2 [0208.508] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="3e") returned 2 [0208.508] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="ef") returned 2 [0208.508] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="26") returned 2 [0208.508] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="e9") returned 2 [0208.508] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="1c") returned 2 [0208.508] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="a8") returned 2 [0208.508] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="82") returned 2 [0208.508] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="4d") returned 2 [0208.508] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="8e") returned 2 [0208.508] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="6a") returned 2 [0208.508] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="9e") returned 2 [0208.508] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="bf") returned 2 [0208.508] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="95") returned 2 [0208.508] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="26") returned 2 [0208.508] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="fe") returned 2 [0208.508] RtlInitAnsiString (in: DestinationString=0xb43f788, SourceString="82ede80e2d17ba4894f7b83eef26e91ca8824d8e6a9ebf9526fe" | out: DestinationString="82ede80e2d17ba4894f7b83eef26e91ca8824d8e6a9ebf9526fe") [0208.508] RtlAnsiStringToUnicodeString (in: DestinationString=0xb43f780, SourceString="82ede80e2d17ba4894f7b83eef26e91ca8824d8e6a9ebf9526fe", AllocateDestinationString=1 | out: DestinationString="82ede80e2d17ba4894f7b83eef26e91ca8824d8e6a9ebf9526fe") returned 0x0 [0208.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f3f8 [0208.508] wcscat (in: _Dest=0x7cd4290, _Source="82ede80e2d17b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\82ede80e2d17b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\82ede80e2d17b" [0208.508] wcscat (in: _Dest=0x7cd4290, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\82ede80e2d17b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\82ede80e2d17b.68814f" [0208.508] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\82ede80e2d17b.68814f", NtPathName=0xb43f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\82ede80e2d17b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddd6d8 [0208.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd6d8) returned 1 [0208.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca78e0) returned 1 [0208.971] NtQueryInformationFile (in: FileHandle=0x1a2c, IoStatusBlock=0xb43f750, FileInformation=0xb43f758, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb43f750, FileInformation=0xb43f758) returned 0x0 [0208.971] NtSetInformationFile (FileHandle=0x1a2c, IoStatusBlock=0xb43f750, FileInformation=0xb43f758, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4290) returned 1 [0209.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0209.355] FlushFileBuffers (hFile=0x1a2c) returned 1 [0209.366] CloseHandle (hObject=0x1a2c) returned 1 [0209.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e033f0 [0209.495] wcscpy (in: _Dest=0x3e033f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\" [0209.495] wcscat (in: _Dest=0x3e033f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\68814F-Readme.txt" [0209.495] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\68814f-readme.txt")) returned 0xffffffff [0209.495] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.127] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb43f794, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb43f794*=0x8b9, lpOverlapped=0x0) returned 1 [0210.129] CloseHandle (hObject=0xbb8) returned 1 [0210.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e033f0) returned 1 [0210.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83db8) returned 1 Thread: id = 6684 os_tid = 0x2338 [0195.546] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json")) returned 0x2020 [0195.547] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0202.331] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13cc [0202.331] GetFileSizeEx (in: hFile=0x13cc, lpFileSize=0xcf3fbac | out: lpFileSize=0xcf3fbac*=206) returned 1 [0202.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0202.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0202.332] NtQuerySystemTime (in: CurrentTime=0xcf3fb20 | out: CurrentTime=0xcf3fb20*=132462177809112000) returned 0x0 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x16129c31 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x72b1044e [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0xb8258c [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x148d398 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x659d5e0d [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x147c9da8 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x1b5c078 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x11ed489b [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x2bfbaf39 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x307c5c35 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x1b42d714 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x37afc7f8 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x2ebf496 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x691e10ff [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x887021 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x795d733f [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x461401b1 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x7940ac96 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x6a3edb6d [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0xa0d87c2 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x287998be [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x37570549 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0xf05780d [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x1b66452e [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x61d7bf4 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x5b67e4ff [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x6f8db237 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x49995f7c [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x9e74c9 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x5ee702c2 [0202.332] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0x618a679c [0202.333] RtlRandomEx (in: Seed=0xcf3fb18 | out: Seed=0xcf3fb18) returned 0xcab6ac9 [0202.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ef1ca8 [0202.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10edf080 [0202.343] ReadFile (in: hFile=0x13cc, lpBuffer=0x10ef1ca8, nNumberOfBytesToRead=0xce, lpNumberOfBytesRead=0xcf3fb14, lpOverlapped=0x0 | out: lpBuffer=0x10ef1ca8*, lpNumberOfBytesRead=0xcf3fb14*=0xce, lpOverlapped=0x0) returned 1 [0202.345] SetFilePointerEx (in: hFile=0x13cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.345] WriteFile (in: hFile=0x13cc, lpBuffer=0x10edf080*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0xcf3fb18, lpOverlapped=0x0 | out: lpBuffer=0x10edf080*, lpNumberOfBytesWritten=0xcf3fb18*=0xce, lpOverlapped=0x0) returned 1 [0206.085] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6f8 [0206.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0206.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0206.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10edf080) returned 1 [0206.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ef1ca8) returned 1 [0206.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0206.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84518) returned 1 [0206.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ad0 [0206.086] SetFilePointerEx (in: hFile=0x13cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.086] WriteFile (in: hFile=0x13cc, lpBuffer=0x7b7d270*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcf3fba0, lpOverlapped=0x0 | out: lpBuffer=0x7b7d270*, lpNumberOfBytesWritten=0xcf3fba0*=0x10c, lpOverlapped=0x0) returned 1 [0206.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0206.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d68) returned 1 [0206.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2d68 [0206.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0206.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ee8 [0206.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ee8) returned 1 [0206.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.484] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="fc") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="7a") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="cd") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="3c") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="3b") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="40") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="58") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="af") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="a9") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="b0") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="73") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="ca") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="fe") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="75") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="64") returned 2 [0206.484] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="c5") returned 2 [0206.485] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="04") returned 2 [0206.485] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="4a") returned 2 [0206.485] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="cc") returned 2 [0206.485] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="fa") returned 2 [0206.485] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="2c") returned 2 [0206.485] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="1a") returned 2 [0206.485] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="7c") returned 2 [0206.485] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="24") returned 2 [0206.485] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="f9") returned 2 [0206.485] RtlInitAnsiString (in: DestinationString=0xcf3fb28, SourceString="fc7acd3c3b4058afa94eb073cafe7564c5044accfa2c1a7c24f9" | out: DestinationString="fc7acd3c3b4058afa94eb073cafe7564c5044accfa2c1a7c24f9") [0206.485] RtlAnsiStringToUnicodeString (in: DestinationString=0xcf3fb20, SourceString="fc7acd3c3b4058afa94eb073cafe7564c5044accfa2c1a7c24f9", AllocateDestinationString=1 | out: DestinationString="fc7acd3c3b4058afa94eb073cafe7564c5044accfa2c1a7c24f9") returned 0x0 [0206.485] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e7d8 [0206.485] wcscat (in: _Dest=0x7a5fa28, _Source="fc7acd3c3b405" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\fc7acd3c3b405") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\fc7acd3c3b405" [0206.485] wcscat (in: _Dest=0x7a5fa28, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\fc7acd3c3b405.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\fc7acd3c3b405.68814f" [0206.486] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\fc7acd3c3b405.68814f", NtPathName=0xcf3fb18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\fc7acd3c3b405.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.486] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd88c0 [0208.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd88c0) returned 1 [0208.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e23bf8) returned 1 [0208.857] NtQueryInformationFile (in: FileHandle=0x13cc, IoStatusBlock=0xcf3faf0, FileInformation=0xcf3faf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcf3faf0, FileInformation=0xcf3faf8) returned 0x0 [0208.857] NtSetInformationFile (FileHandle=0x13cc, IoStatusBlock=0xcf3faf0, FileInformation=0xcf3faf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5fa28) returned 1 [0209.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0209.871] FlushFileBuffers (hFile=0x13cc) returned 1 [0210.414] CloseHandle (hObject=0x13cc) returned 1 [0213.475] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3ec6b90 [0213.475] wcscpy (in: _Dest=0x3ec6b90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\" [0213.475] wcscat (in: _Dest=0x3ec6b90, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\68814F-Readme.txt" [0213.475] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\68814f-readme.txt")) returned 0xffffffff [0213.475] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc0 [0213.786] WriteFile (in: hFile=0x1bc0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcf3fb34, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcf3fb34*=0x8b9, lpOverlapped=0x0) returned 1 [0213.990] CloseHandle (hObject=0x1bc0) returned 1 [0214.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6b90) returned 1 [0214.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb0960) returned 1 Thread: id = 6685 os_tid = 0x1b18 [0195.547] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json")) returned 0x2020 [0195.547] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", dwFileAttributes=0x20) returned 1 [0202.345] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd34 [0202.346] GetFileSizeEx (in: hFile=0xd34, lpFileSize=0xa31fa94 | out: lpFileSize=0xa31fa94*=209) returned 1 [0202.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0202.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0202.346] NtQuerySystemTime (in: CurrentTime=0xa31fa08 | out: CurrentTime=0xa31fa08*=132462177809268000) returned 0x0 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x690f892d [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x983991 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x17418403 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x1a61a9c3 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0xf8ba8d7 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x304fe855 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x36a3e947 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x7794bc48 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x1b44e9b0 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x3b609d25 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x4edd8a19 [0202.346] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x18b860c9 [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x3f2a5cdf [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x3cf5f985 [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x42ea42a4 [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x34c5b4ff [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x5334f321 [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x148d398 [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x730d5beb [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x5c93d23f [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x6eeb1802 [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x19dcbe1a [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x39e554da [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x839234b [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x498bfa88 [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0xb8258c [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x315228b1 [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0xa22b4ec [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x2b7beb5b [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x20834c70 [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x68e11f13 [0202.347] RtlRandomEx (in: Seed=0xa31fa00 | out: Seed=0xa31fa00) returned 0x6a100b8d [0202.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ee2c88 [0202.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ef58b0 [0202.356] ReadFile (in: hFile=0xd34, lpBuffer=0x10ee2c88, nNumberOfBytesToRead=0xd1, lpNumberOfBytesRead=0xa31f9fc, lpOverlapped=0x0 | out: lpBuffer=0x10ee2c88*, lpNumberOfBytesRead=0xa31f9fc*=0xd1, lpOverlapped=0x0) returned 1 [0202.357] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.357] WriteFile (in: hFile=0xd34, lpBuffer=0x10ef58b0*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0xa31fa00, lpOverlapped=0x0 | out: lpBuffer=0x10ef58b0*, lpNumberOfBytesWritten=0xa31fa00*=0xd1, lpOverlapped=0x0) returned 1 [0206.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cae0 [0206.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0206.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0206.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ef58b0) returned 1 [0206.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ee2c88) returned 1 [0206.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ccc0) returned 1 [0206.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84fc8) returned 1 [0206.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38310 [0206.093] SetFilePointerEx (in: hFile=0xd34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.093] WriteFile (in: hFile=0xd34, lpBuffer=0x7b7dc48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa31fa88, lpOverlapped=0x0 | out: lpBuffer=0x7b7dc48*, lpNumberOfBytesWritten=0xa31fa88*=0x10c, lpOverlapped=0x0) returned 1 [0206.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0206.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0206.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2fe8 [0206.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0206.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0206.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ce0) returned 1 [0206.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.493] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="c4") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="48") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="2c") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="06") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="89") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="3b") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="74") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="79") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="bb") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="fd") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="77") returned 2 [0206.493] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="d4") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="91") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="43") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="ea") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="c5") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="5b") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="69") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="45") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="e8") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="a7") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="9f") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="79") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="43") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="df") returned 2 [0206.494] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="7a") returned 2 [0206.494] RtlInitAnsiString (in: DestinationString=0xa31fa10, SourceString="c4482c06893b7479bbfd77d49143eac55b6945e8a79f7943df7a" | out: DestinationString="c4482c06893b7479bbfd77d49143eac55b6945e8a79f7943df7a") [0206.494] RtlAnsiStringToUnicodeString (in: DestinationString=0xa31fa08, SourceString="c4482c06893b7479bbfd77d49143eac55b6945e8a79f7943df7a", AllocateDestinationString=1 | out: DestinationString="c4482c06893b7479bbfd77d49143eac55b6945e8a79f7943df7a") returned 0x0 [0206.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e3a0 [0206.494] wcscat (in: _Dest=0x3ec9f40, _Source="c4482c06893b7" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\c4482c06893b7") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\c4482c06893b7" [0206.494] wcscat (in: _Dest=0x3ec9f40, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\c4482c06893b7.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\c4482c06893b7.68814f" [0206.494] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\c4482c06893b7.68814f", NtPathName=0xa31fa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\c4482c06893b7.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7dd8630 [0208.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8630) returned 1 [0208.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25c50) returned 1 [0208.860] NtQueryInformationFile (in: FileHandle=0xd34, IoStatusBlock=0xa31f9d8, FileInformation=0xa31f9e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa31f9d8, FileInformation=0xa31f9e0) returned 0x0 [0208.860] NtSetInformationFile (FileHandle=0xd34, IoStatusBlock=0xa31f9d8, FileInformation=0xa31f9e0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9f40) returned 1 [0209.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0209.206] FlushFileBuffers (hFile=0xd34) returned 1 [0209.223] CloseHandle (hObject=0xd34) returned 1 [0209.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7cd5d60 [0209.431] wcscpy (in: _Dest=0x7cd5d60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\" [0209.431] wcscat (in: _Dest=0x7cd5d60, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\68814F-Readme.txt" [0209.431] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\68814f-readme.txt")) returned 0xffffffff [0209.431] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1d80 [0211.245] WriteFile (in: hFile=0x1d80, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa31fa1c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa31fa1c*=0x8b9, lpOverlapped=0x0) returned 1 [0215.860] CloseHandle (hObject=0x1d80) returned 1 [0222.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5d60) returned 1 [0222.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb0a88) returned 1 Thread: id = 6686 os_tid = 0x1b1c [0195.548] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json")) returned 0x2020 [0195.568] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", dwFileAttributes=0x20) returned 1 [0202.358] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d54 [0202.358] GetFileSizeEx (in: hFile=0x1d54, lpFileSize=0xab5fdc4 | out: lpFileSize=0xab5fdc4*=208) returned 1 [0202.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0202.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0202.358] NtQuerySystemTime (in: CurrentTime=0xab5fd38 | out: CurrentTime=0xab5fd38*=132462177809424000) returned 0x0 [0202.358] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0xf8aa76e [0202.358] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x3773bc89 [0202.358] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x19dcbe1a [0202.358] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x639adf0a [0202.358] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x5b3d0c3f [0202.358] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x5a61534f [0202.358] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x6799030 [0202.358] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x22c54d39 [0202.358] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x7f1c5101 [0202.358] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x684dadbb [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x5fd68a81 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x3773bc89 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x5d64b78a [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x10024da0 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x3c4ea37c [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x6850aefc [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x3d0ab723 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x50da5ac2 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x794920b [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x4b875032 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x5062cc67 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x4b454eef [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x498f472a [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0xc6f23b9 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x352072eb [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x545ae250 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x2cc1b43f [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x7ac73069 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x2a4efbc5 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x4c4a5f40 [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x55e3fe5b [0202.359] RtlRandomEx (in: Seed=0xab5fd30 | out: Seed=0xab5fd30) returned 0x262cc20e [0202.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ef94b8 [0202.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ee6890 [0202.368] ReadFile (in: hFile=0x1d54, lpBuffer=0x10ef94b8, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0xab5fd2c, lpOverlapped=0x0 | out: lpBuffer=0x10ef94b8*, lpNumberOfBytesRead=0xab5fd2c*=0xd0, lpOverlapped=0x0) returned 1 [0202.370] SetFilePointerEx (in: hFile=0x1d54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.370] WriteFile (in: hFile=0x1d54, lpBuffer=0x10ee6890*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0xab5fd30, lpOverlapped=0x0 | out: lpBuffer=0x10ee6890*, lpNumberOfBytesWritten=0xab5fd30*=0xd0, lpOverlapped=0x0) returned 1 [0206.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0206.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0206.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0206.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ee6890) returned 1 [0206.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ef94b8) returned 1 [0206.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cd38) returned 1 [0206.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84f38) returned 1 [0206.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38250 [0206.092] SetFilePointerEx (in: hFile=0x1d54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.092] WriteFile (in: hFile=0x1d54, lpBuffer=0x7b7c438*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xab5fdb8, lpOverlapped=0x0 | out: lpBuffer=0x7b7c438*, lpNumberOfBytesWritten=0xab5fdb8*=0x10c, lpOverlapped=0x0) returned 1 [0206.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0206.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ab0) returned 1 [0206.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3ab0 [0206.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0206.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0206.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ed0) returned 1 [0206.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.489] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="24") returned 2 [0206.489] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="ec") returned 2 [0206.489] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="38") returned 2 [0206.489] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="b4") returned 2 [0206.489] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.489] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="14") returned 2 [0206.489] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="13") returned 2 [0206.489] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="c4") returned 2 [0206.489] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="fe") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="8a") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="4d") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="43") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="b8") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="a0") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="26") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="f8") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="16") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="b6") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="3d") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="80") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="34") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="68") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="a0") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="11") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="08") returned 2 [0206.490] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="b2") returned 2 [0206.490] RtlInitAnsiString (in: DestinationString=0xab5fd40, SourceString="24ec38b44e1413c4fe8a4d43b8a026f816b63d803468a01108b2" | out: DestinationString="24ec38b44e1413c4fe8a4d43b8a026f816b63d803468a01108b2") [0206.490] RtlAnsiStringToUnicodeString (in: DestinationString=0xab5fd38, SourceString="24ec38b44e1413c4fe8a4d43b8a026f816b63d803468a01108b2", AllocateDestinationString=1 | out: DestinationString="24ec38b44e1413c4fe8a4d43b8a026f816b63d803468a01108b2") returned 0x0 [0206.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e670 [0206.490] wcscat (in: _Dest=0x3ec9928, _Source="24ec38b44e141" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\24ec38b44e141") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\24ec38b44e141" [0206.491] wcscat (in: _Dest=0x3ec9928, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\24ec38b44e141.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\24ec38b44e141.68814f" [0206.491] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\24ec38b44e141.68814f", NtPathName=0xab5fd30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\24ec38b44e141.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7dd8778 [0208.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8778) returned 1 [0208.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e25a28) returned 1 [0208.858] NtQueryInformationFile (in: FileHandle=0x1d54, IoStatusBlock=0xab5fd08, FileInformation=0xab5fd10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xab5fd08, FileInformation=0xab5fd10) returned 0x0 [0208.859] NtSetInformationFile (FileHandle=0x1d54, IoStatusBlock=0xab5fd08, FileInformation=0xab5fd10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9928) returned 1 [0209.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0209.199] FlushFileBuffers (hFile=0x1d54) returned 1 [0209.218] CloseHandle (hObject=0x1d54) returned 1 [0209.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7cd5e98 [0209.433] wcscpy (in: _Dest=0x7cd5e98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\" [0209.433] wcscat (in: _Dest=0x7cd5e98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\68814F-Readme.txt" [0209.433] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\68814f-readme.txt")) returned 0xffffffff [0209.433] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.026] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xab5fd4c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xab5fd4c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.027] CloseHandle (hObject=0xbb8) returned 1 [0210.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5e98) returned 1 [0210.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb0bb0) returned 1 Thread: id = 6687 os_tid = 0x1b20 [0195.568] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json")) returned 0x2020 [0195.568] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0202.370] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc00 [0202.371] GetFileSizeEx (in: hFile=0xc00, lpFileSize=0xa24fe14 | out: lpFileSize=0xa24fe14*=260) returned 1 [0202.371] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.371] ReadFile (in: hFile=0xc00, lpBuffer=0xa24fdf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa24fe00, lpOverlapped=0x0 | out: lpBuffer=0xa24fdf0*, lpNumberOfBytesRead=0xa24fe00*=0x4, lpOverlapped=0x0) returned 1 [0202.372] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0202.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0202.373] NtQuerySystemTime (in: CurrentTime=0xa24fd88 | out: CurrentTime=0xa24fd88*=132462177809580000) returned 0x0 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x60f5ff36 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x684dadbb [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x690f892d [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x742048a8 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x245d9c16 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x7638ca29 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x11fd5966 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x197458a6 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x77a9a1f9 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x4eaef95a [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x3a1b249 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x746c49f6 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x6a3a7a2b [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x6de00867 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x3ceb5911 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x1400b78b [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0xccede9e [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0xb73dc63 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x716b0632 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x29ea74ff [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x1d7c2dd4 [0202.373] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x13523531 [0202.374] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x1ce85a8b [0202.374] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x36c49fdf [0202.374] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x740b5630 [0202.374] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x11f255ae [0202.374] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x8f32a80 [0202.374] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x3259b030 [0202.374] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x5abc81ff [0202.374] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x152918d6 [0202.374] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x86723a1 [0202.374] RtlRandomEx (in: Seed=0xa24fd80 | out: Seed=0xa24fd80) returned 0x3c19e74d [0202.383] ReadFile (in: hFile=0xc00, lpBuffer=0x10eea498, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xa24fd7c, lpOverlapped=0x0 | out: lpBuffer=0x10eea498*, lpNumberOfBytesRead=0xa24fd7c*=0x104, lpOverlapped=0x0) returned 1 [0202.383] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.383] WriteFile (in: hFile=0xc00, lpBuffer=0x10ed7870*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xa24fd80, lpOverlapped=0x0 | out: lpBuffer=0x10ed7870*, lpNumberOfBytesWritten=0xa24fd80*=0x104, lpOverlapped=0x0) returned 1 [0206.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0206.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6d0 [0206.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6d0) returned 1 [0206.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ed7870) returned 1 [0206.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eea498) returned 1 [0206.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cdb0) returned 1 [0206.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84b48) returned 1 [0206.097] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38370 [0206.097] SetFilePointerEx (in: hFile=0xc00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.097] WriteFile (in: hFile=0xc00, lpBuffer=0x7b7cbe0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa24fe08, lpOverlapped=0x0 | out: lpBuffer=0x7b7cbe0*, lpNumberOfBytesWritten=0xa24fe08*=0x10c, lpOverlapped=0x0) returned 1 [0206.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0206.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f10) returned 1 [0206.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3f10 [0206.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0206.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0206.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3038) returned 1 [0206.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.501] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="6d") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="f9") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="cc") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="36") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="cf") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="fa") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="b4") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="02") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="ec") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="68") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="da") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="5f") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="19") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="c4") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="38") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="f0") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="47") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="34") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="35") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="35") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="10") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="3a") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="8f") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="1a") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="61") returned 2 [0206.502] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="f7") returned 2 [0206.502] RtlInitAnsiString (in: DestinationString=0xa24fd90, SourceString="6df9cc36cffab402ec68da5f19c438f047343535103a8f1a61f7" | out: DestinationString="6df9cc36cffab402ec68da5f19c438f047343535103a8f1a61f7") [0206.502] RtlAnsiStringToUnicodeString (in: DestinationString=0xa24fd88, SourceString="6df9cc36cffab402ec68da5f19c438f047343535103a8f1a61f7", AllocateDestinationString=1 | out: DestinationString="6df9cc36cffab402ec68da5f19c438f047343535103a8f1a61f7") returned 0x0 [0206.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e328 [0206.503] wcscat (in: _Dest=0x3ec9e08, _Source="6df9cc36cffab" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\6df9cc36cffab") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\6df9cc36cffab" [0206.503] wcscat (in: _Dest=0x3ec9e08, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\6df9cc36cffab.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\6df9cc36cffab.68814f" [0206.503] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\6df9cc36cffab.68814f", NtPathName=0xa24fd80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\6df9cc36cffab.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd83a0 [0208.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd83a0) returned 1 [0208.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cef7d0) returned 1 [0208.865] NtQueryInformationFile (in: FileHandle=0xc00, IoStatusBlock=0xa24fd58, FileInformation=0xa24fd60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa24fd58, FileInformation=0xa24fd60) returned 0x0 [0208.865] NtSetInformationFile (FileHandle=0xc00, IoStatusBlock=0xa24fd58, FileInformation=0xa24fd60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9e08) returned 1 [0209.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0209.216] FlushFileBuffers (hFile=0xc00) returned 1 [0209.233] CloseHandle (hObject=0xc00) returned 1 [0209.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02988 [0209.435] wcscpy (in: _Dest=0x3e02988, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\" [0209.435] wcscat (in: _Dest=0x3e02988, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\68814F-Readme.txt" [0209.435] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\68814f-readme.txt")) returned 0xffffffff [0209.436] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.034] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa24fd9c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa24fd9c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.036] CloseHandle (hObject=0xbb8) returned 1 [0210.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02988) returned 1 [0210.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb0cd8) returned 1 Thread: id = 6688 os_tid = 0x1b24 [0195.569] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json")) returned 0x2020 [0195.569] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0202.383] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbc0 [0202.384] GetFileSizeEx (in: hFile=0xbc0, lpFileSize=0xa8afac4 | out: lpFileSize=0xa8afac4*=217) returned 1 [0202.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0202.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0202.384] NtQuerySystemTime (in: CurrentTime=0xa8afa38 | out: CurrentTime=0xa8afa38*=132462177809580000) returned 0x0 [0202.384] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x2164d28f [0202.384] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x6bab3a5f [0202.384] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x5386ed84 [0202.384] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x1b973991 [0202.384] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0xf5df38e [0202.384] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x1fdfe10b [0202.384] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x1c5f8274 [0202.384] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x43067211 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x1ed4b7be [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x7d33e7f9 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x50a59e14 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x462dbc51 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x3983013b [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x119c1618 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x4faa5de4 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x755b1547 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x33784f90 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x7a97f9c8 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0xf7cb972 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x1bbb9e49 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x660565b0 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x690c466f [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x16129c31 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x6f8db237 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x7973dd26 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x6fc1e917 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x49cd9339 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x72e843da [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x2926d68f [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x42422cf9 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x68403a05 [0202.385] RtlRandomEx (in: Seed=0xa8afa30 | out: Seed=0xa8afa30) returned 0x35d1c414 [0202.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10edb478 [0202.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10f0c0e0 [0202.396] ReadFile (in: hFile=0xbc0, lpBuffer=0x10edb478, nNumberOfBytesToRead=0xd9, lpNumberOfBytesRead=0xa8afa2c, lpOverlapped=0x0 | out: lpBuffer=0x10edb478*, lpNumberOfBytesRead=0xa8afa2c*=0xd9, lpOverlapped=0x0) returned 1 [0202.397] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.397] WriteFile (in: hFile=0xbc0, lpBuffer=0x10f0c0e0*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0xa8afa30, lpOverlapped=0x0 | out: lpBuffer=0x10f0c0e0*, lpNumberOfBytesWritten=0xa8afa30*=0xd9, lpOverlapped=0x0) returned 1 [0206.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0206.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0206.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8b0) returned 1 [0206.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f0c0e0) returned 1 [0206.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10edb478) returned 1 [0206.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0206.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85130) returned 1 [0206.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a382b0 [0206.096] SetFilePointerEx (in: hFile=0xbc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.097] WriteFile (in: hFile=0xbc0, lpBuffer=0x7b7c898*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xa8afab8, lpOverlapped=0x0 | out: lpBuffer=0x7b7c898*, lpNumberOfBytesWritten=0xa8afab8*=0x10c, lpOverlapped=0x0) returned 1 [0206.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0206.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0206.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4528 [0206.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0206.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0206.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4028) returned 1 [0206.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.498] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="5d") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="6c") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="b8") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="eb") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="34") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="4a") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="07") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="fa") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="05") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="05") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="2a") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="2b") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="2c") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="c3") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="4d") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="fc") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="66") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="50") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="95") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="c8") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="54") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="f9") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="55") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="da") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="70") returned 2 [0206.498] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="db") returned 2 [0206.498] RtlInitAnsiString (in: DestinationString=0xa8afa40, SourceString="5d6cb8eb344a07fa05052a2b2cc34dfc665095c854f955da70db" | out: DestinationString="5d6cb8eb344a07fa05052a2b2cc34dfc665095c854f955da70db") [0206.499] RtlAnsiStringToUnicodeString (in: DestinationString=0xa8afa38, SourceString="5d6cb8eb344a07fa05052a2b2cc34dfc665095c854f955da70db", AllocateDestinationString=1 | out: DestinationString="5d6cb8eb344a07fa05052a2b2cc34dfc665095c854f955da70db") returned 0x0 [0206.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dc98 [0206.499] wcscat (in: _Dest=0x3eca2e8, _Source="5d6cb8eb344a0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\5d6cb8eb344a0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\5d6cb8eb344a0" [0206.499] wcscat (in: _Dest=0x3eca2e8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\5d6cb8eb344a0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\5d6cb8eb344a0.68814f" [0206.499] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\5d6cb8eb344a0.68814f", NtPathName=0xa8afa30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\5d6cb8eb344a0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7dd84e8 [0208.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd84e8) returned 1 [0208.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceca88) returned 1 [0208.863] NtQueryInformationFile (in: FileHandle=0xbc0, IoStatusBlock=0xa8afa08, FileInformation=0xa8afa10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa8afa08, FileInformation=0xa8afa10) returned 0x0 [0208.863] NtSetInformationFile (FileHandle=0xbc0, IoStatusBlock=0xa8afa08, FileInformation=0xa8afa10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca2e8) returned 1 [0209.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc98) returned 1 [0209.211] FlushFileBuffers (hFile=0xbc0) returned 1 [0209.228] CloseHandle (hObject=0xbc0) returned 1 [0209.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02ab0 [0209.437] wcscpy (in: _Dest=0x3e02ab0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\" [0209.437] wcscat (in: _Dest=0x3e02ab0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\68814F-Readme.txt" [0209.437] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\68814f-readme.txt")) returned 0xffffffff [0209.438] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.030] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xa8afa4c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xa8afa4c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.031] CloseHandle (hObject=0xbb8) returned 1 [0210.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02ab0) returned 1 [0210.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb0e00) returned 1 Thread: id = 6689 os_tid = 0x1b28 [0195.570] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json")) returned 0x2020 [0195.570] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0202.398] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17d0 [0202.398] GetFileSizeEx (in: hFile=0x17d0, lpFileSize=0xc9dfbcc | out: lpFileSize=0xc9dfbcc*=216) returned 1 [0202.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.398] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0202.399] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0202.399] NtQuerySystemTime (in: CurrentTime=0xc9dfb40 | out: CurrentTime=0xc9dfb40*=132462177809736000) returned 0x0 [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x3b609d25 [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x202bd05f [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x4b9e5a83 [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x71497357 [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x6db05e3c [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x53890c2 [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x70416deb [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x75b19c5c [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x55c4482e [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x5ae75abf [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x31c40b5 [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x2205d21f [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x4b0bad2c [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x47b9cdb [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x7943849e [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x227b6ecf [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x30305b91 [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x1c998f8b [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x54286229 [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x15b52349 [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x72e843da [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x6bfb847c [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x1be1a09a [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x50e8501a [0202.399] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x50f64777 [0202.400] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x49cd9339 [0202.400] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x3e159646 [0202.400] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x7cfca6d7 [0202.400] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x1400b78b [0202.400] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x6b64dfc5 [0202.400] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x2eb40dea [0202.400] RtlRandomEx (in: Seed=0xc9dfb38 | out: Seed=0xc9dfb38) returned 0x53890c2 [0202.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0202.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0202.409] ReadFile (in: hFile=0x17d0, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0xc9dfb34, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0xc9dfb34*=0xd8, lpOverlapped=0x0) returned 1 [0202.411] SetFilePointerEx (in: hFile=0x17d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.411] WriteFile (in: hFile=0x17d0, lpBuffer=0x7be7380*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0xc9dfb38, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesWritten=0xc9dfb38*=0xd8, lpOverlapped=0x0) returned 1 [0206.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0206.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0206.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0206.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0206.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0206.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cea0) returned 1 [0206.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84998) returned 1 [0206.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b30 [0206.103] SetFilePointerEx (in: hFile=0x17d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.103] WriteFile (in: hFile=0x17d0, lpBuffer=0x7b7c320*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc9dfbc0, lpOverlapped=0x0 | out: lpBuffer=0x7b7c320*, lpNumberOfBytesWritten=0xc9dfbc0*=0x10c, lpOverlapped=0x0) returned 1 [0206.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0206.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d30) returned 1 [0206.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3d30 [0206.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0206.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0206.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f20) returned 1 [0206.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.510] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="80") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="09") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="6e") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="71") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="bf") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="5c") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="84") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="8e") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="d9") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="eb") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="bd") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="37") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="d5") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="bc") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="f2") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="a4") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="c0") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="de") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="6a") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="6a") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="86") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="20") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="53") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="24") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="3d") returned 2 [0206.510] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="65") returned 2 [0206.510] RtlInitAnsiString (in: DestinationString=0xc9dfb48, SourceString="80096e71bf5c848ed9ebbd37d5bcf2a4c0de6a6a862053243d65" | out: DestinationString="80096e71bf5c848ed9ebbd37d5bcf2a4c0de6a6a862053243d65") [0206.510] RtlAnsiStringToUnicodeString (in: DestinationString=0xc9dfb40, SourceString="80096e71bf5c848ed9ebbd37d5bcf2a4c0de6a6a862053243d65", AllocateDestinationString=1 | out: DestinationString="80096e71bf5c848ed9ebbd37d5bcf2a4c0de6a6a862053243d65") returned 0x0 [0206.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dfe0 [0206.511] wcscat (in: _Dest=0x7ddfe70, _Source="80096e71bf5c8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\80096e71bf5c8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\80096e71bf5c8" [0206.511] wcscat (in: _Dest=0x7ddfe70, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\80096e71bf5c8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\80096e71bf5c8.68814f" [0206.511] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\80096e71bf5c8.68814f", NtPathName=0xc9dfb38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\80096e71bf5c8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.511] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc630 [0208.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc630) returned 1 [0208.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ced100) returned 1 [0208.873] NtQueryInformationFile (in: FileHandle=0x17d0, IoStatusBlock=0xc9dfb10, FileInformation=0xc9dfb18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc9dfb10, FileInformation=0xc9dfb18) returned 0x0 [0208.873] NtSetInformationFile (FileHandle=0x17d0, IoStatusBlock=0xc9dfb10, FileInformation=0xc9dfb18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddfe70) returned 1 [0209.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0209.226] FlushFileBuffers (hFile=0x17d0) returned 1 [0209.238] CloseHandle (hObject=0x17d0) returned 1 [0209.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02d00 [0209.441] wcscpy (in: _Dest=0x3e02d00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\" [0209.441] wcscat (in: _Dest=0x3e02d00, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\68814F-Readme.txt" [0209.441] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\68814f-readme.txt")) returned 0xffffffff [0209.441] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.041] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc9dfb54, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc9dfb54*=0x8b9, lpOverlapped=0x0) returned 1 [0210.043] CloseHandle (hObject=0xbb8) returned 1 [0210.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02d00) returned 1 [0210.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb0f28) returned 1 Thread: id = 6690 os_tid = 0x1b2c [0195.570] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json")) returned 0x2020 [0195.571] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0202.411] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1618 [0202.412] GetFileSizeEx (in: hFile=0x1618, lpFileSize=0xc50f9a4 | out: lpFileSize=0xc50f9a4*=222) returned 1 [0202.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0202.412] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40c8 [0202.412] NtQuerySystemTime (in: CurrentTime=0xc50f918 | out: CurrentTime=0xc50f918*=132462177809892000) returned 0x0 [0202.412] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x3cce7212 [0202.412] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x17f317fb [0202.412] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x8d5e396 [0202.412] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x4547261 [0202.412] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x508a93a7 [0202.412] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x2c728933 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x2f5592b2 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x1ebedbc9 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x1ed4b7be [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x53ecfec5 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x698e2ead [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x495d5aa6 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x56948b9d [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x75b19c5c [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x51e25b31 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0xfbc27e5 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x2b0bf53e [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x7d33e7f9 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0xf5df38e [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x2fc32d54 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x5ff25a27 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x1297e148 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x763633c9 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x56419dfa [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x992dc57 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x539ed955 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x74c9e995 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x42788103 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x207350d8 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x722fab01 [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x3983013b [0202.413] RtlRandomEx (in: Seed=0xc50f910 | out: Seed=0xc50f910) returned 0x78a5f9a1 [0202.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0202.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0202.424] ReadFile (in: hFile=0x1618, lpBuffer=0x7beeb90, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xc50f90c, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesRead=0xc50f90c*=0xde, lpOverlapped=0x0) returned 1 [0202.426] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.426] WriteFile (in: hFile=0x1618, lpBuffer=0x7bf9fa8*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xc50f910, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesWritten=0xc50f910*=0xde, lpOverlapped=0x0) returned 1 [0206.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baf0 [0206.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0206.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b730) returned 1 [0206.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0206.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0206.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf18) returned 1 [0206.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84ab8) returned 1 [0206.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37dd0 [0206.102] SetFilePointerEx (in: hFile=0x1618, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.102] WriteFile (in: hFile=0x1618, lpBuffer=0x7b7d040*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc50f998, lpOverlapped=0x0 | out: lpBuffer=0x7b7d040*, lpNumberOfBytesWritten=0xc50f998*=0x10c, lpOverlapped=0x0) returned 1 [0206.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0206.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0206.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3100 [0206.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0206.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0206.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0206.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.506] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="77") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="0c") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="aa") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="71") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="8f") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="ae") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="e2") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="07") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="70") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="6a") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="e1") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="3a") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="a5") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="17") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="17") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="19") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="a5") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="0d") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="6d") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="71") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="98") returned 2 [0206.506] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="c3") returned 2 [0206.507] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="fc") returned 2 [0206.507] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="f7") returned 2 [0206.507] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="74") returned 2 [0206.507] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="17") returned 2 [0206.507] RtlInitAnsiString (in: DestinationString=0xc50f920, SourceString="770caa718faee207706ae13aa5171719a50d6d7198c3fcf77417" | out: DestinationString="770caa718faee207706ae13aa5171719a50d6d7198c3fcf77417") [0206.507] RtlAnsiStringToUnicodeString (in: DestinationString=0xc50f918, SourceString="770caa718faee207706ae13aa5171719a50d6d7198c3fcf77417", AllocateDestinationString=1 | out: DestinationString="770caa718faee207706ae13aa5171719a50d6d7198c3fcf77417") returned 0x0 [0206.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e2b0 [0206.507] wcscat (in: _Dest=0x3eca420, _Source="770caa718faee" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\770caa718faee") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\770caa718faee" [0206.507] wcscat (in: _Dest=0x3eca420, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\770caa718faee.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\770caa718faee.68814f" [0206.507] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\770caa718faee.68814f", NtPathName=0xc50f910, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\770caa718faee.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc778 [0208.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc778) returned 1 [0208.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceddf0) returned 1 [0208.871] NtQueryInformationFile (in: FileHandle=0x1618, IoStatusBlock=0xc50f8e8, FileInformation=0xc50f8f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc50f8e8, FileInformation=0xc50f8f0) returned 0x0 [0208.872] NtSetInformationFile (FileHandle=0x1618, IoStatusBlock=0xc50f8e8, FileInformation=0xc50f8f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca420) returned 1 [0209.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0209.221] FlushFileBuffers (hFile=0x1618) returned 1 [0209.235] CloseHandle (hObject=0x1618) returned 1 [0209.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02bd8 [0209.439] wcscpy (in: _Dest=0x3e02bd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\" [0209.440] wcscat (in: _Dest=0x3e02bd8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\68814F-Readme.txt" [0209.440] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\68814f-readme.txt")) returned 0xffffffff [0209.440] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.038] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc50f92c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc50f92c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.039] CloseHandle (hObject=0xbb8) returned 1 [0210.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02bd8) returned 1 [0210.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb1050) returned 1 Thread: id = 6691 os_tid = 0x1b30 [0195.571] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json")) returned 0x2020 [0195.571] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0202.426] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10c4 [0202.426] GetFileSizeEx (in: hFile=0x10c4, lpFileSize=0xc0afdcc | out: lpFileSize=0xc0afdcc*=207) returned 1 [0202.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40c8 [0202.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0202.427] NtQuerySystemTime (in: CurrentTime=0xc0afd40 | out: CurrentTime=0xc0afd40*=132462177810048000) returned 0x0 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x5bc0efc7 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x2646e766 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x53ac81a4 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x2522100a [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x2bfbaf39 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x3001c8d1 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x12d1052f [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x3a0bbcef [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x3d1175ee [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x698e2ead [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x463f6876 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x76db230a [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x4fc96714 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x4f8ba5b7 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x550b1463 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x39a804b5 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x125fcf85 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x31da80cc [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x6f62e423 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x5758d638 [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x33e5929c [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x205a389d [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x2a53b1fd [0202.427] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x7bc2fab1 [0202.428] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x63d6c050 [0202.428] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x392dd2a1 [0202.428] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x363c4494 [0202.428] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x202f7cc0 [0202.428] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x5b12337f [0202.428] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x35cb9152 [0202.428] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x2a89c88f [0202.428] RtlRandomEx (in: Seed=0xc0afd38 | out: Seed=0xc0afd38) returned 0x7ffd9e86 [0202.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0202.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0202.440] ReadFile (in: hFile=0x10c4, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0xcf, lpNumberOfBytesRead=0xc0afd34, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xc0afd34*=0xcf, lpOverlapped=0x0) returned 1 [0202.442] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.442] WriteFile (in: hFile=0x10c4, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0xc0afd38, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xc0afd38*=0xcf, lpOverlapped=0x0) returned 1 [0206.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0206.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0206.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0206.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0206.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0206.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf90) returned 1 [0206.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85208) returned 1 [0206.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37bf0 [0206.109] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.109] WriteFile (in: hFile=0x10c4, lpBuffer=0x7b7d6d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc0afdc0, lpOverlapped=0x0 | out: lpBuffer=0x7b7d6d0*, lpNumberOfBytesWritten=0xc0afdc0*=0x10c, lpOverlapped=0x0) returned 1 [0206.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0206.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0206.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec36c8 [0206.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0206.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3da8) returned 1 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.526] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.526] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="14") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="21") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="11") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="4b") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="f0") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="57") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="cd") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="b3") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="c6") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="d8") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="2b") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="51") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="df") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="c0") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="24") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="c9") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="d4") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="b1") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="cf") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="5a") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="74") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="7d") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="48") returned 2 [0206.526] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="99") returned 2 [0206.527] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="8e") returned 2 [0206.527] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="24") returned 2 [0206.527] RtlInitAnsiString (in: DestinationString=0xc0afd48, SourceString="1421114bf057cdb3c6d82b51dfc024c9d4b1cf5a747d48998e24" | out: DestinationString="1421114bf057cdb3c6d82b51dfc024c9d4b1cf5a747d48998e24") [0206.527] RtlAnsiStringToUnicodeString (in: DestinationString=0xc0afd40, SourceString="1421114bf057cdb3c6d82b51dfc024c9d4b1cf5a747d48998e24", AllocateDestinationString=1 | out: DestinationString="1421114bf057cdb3c6d82b51dfc024c9d4b1cf5a747d48998e24") returned 0x0 [0206.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3def0 [0206.527] wcscat (in: _Dest=0x7de00e0, _Source="1421114bf057c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\1421114bf057c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\1421114bf057c" [0206.527] wcscat (in: _Dest=0x7de00e0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\1421114bf057c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\1421114bf057c.68814f" [0206.527] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\1421114bf057c.68814f", NtPathName=0xc0afd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\1421114bf057c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.527] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc4e8 [0208.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc4e8) returned 1 [0208.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cec638) returned 1 [0208.881] NtQueryInformationFile (in: FileHandle=0x10c4, IoStatusBlock=0xc0afd10, FileInformation=0xc0afd18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xc0afd10, FileInformation=0xc0afd18) returned 0x0 [0208.881] NtSetInformationFile (FileHandle=0x10c4, IoStatusBlock=0xc0afd10, FileInformation=0xc0afd18, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7de00e0) returned 1 [0209.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0209.239] FlushFileBuffers (hFile=0x10c4) returned 1 [0209.252] CloseHandle (hObject=0x10c4) returned 1 [0209.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02e28 [0209.445] wcscpy (in: _Dest=0x3e02e28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\" [0209.445] wcscat (in: _Dest=0x3e02e28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\68814F-Readme.txt" [0209.445] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\68814f-readme.txt")) returned 0xffffffff [0209.445] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.045] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xc0afd54, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xc0afd54*=0x8b9, lpOverlapped=0x0) returned 1 [0210.048] CloseHandle (hObject=0xbb8) returned 1 [0210.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02e28) returned 1 [0210.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb1178) returned 1 Thread: id = 6692 os_tid = 0x1b34 [0195.573] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json")) returned 0x2020 [0195.573] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0202.490] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1994 [0202.490] GetFileSizeEx (in: hFile=0x1994, lpFileSize=0xb90feac | out: lpFileSize=0xb90feac*=264) returned 1 [0202.490] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.490] ReadFile (in: hFile=0x1994, lpBuffer=0xb90fe88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb90fe98, lpOverlapped=0x0 | out: lpBuffer=0xb90fe88*, lpNumberOfBytesRead=0xb90fe98*=0x4, lpOverlapped=0x0) returned 1 [0202.492] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0202.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0202.492] NtQuerySystemTime (in: CurrentTime=0xb90fe20 | out: CurrentTime=0xb90fe20*=132462177810672000) returned 0x0 [0202.492] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x6d5c3826 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x660565b0 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x15f7137e [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x6eba1e4a [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x17f317fb [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x2b35e0aa [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x391fd59d [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x6a2281f7 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x59dbb0c4 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x64c531a7 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x26edd3b [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x2205d21f [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x5c32057e [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x1fdd0938 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x2d7273c4 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x43b06fc4 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x1c998f8b [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x64fdd96a [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x4c490c68 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x7a0f5cd3 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x6df5e506 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x2f4ef85d [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x53c1ce12 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x59bb6d7f [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x64194a16 [0202.493] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x14758bfe [0202.494] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x320ff4f1 [0202.494] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x1e0be831 [0202.494] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x238e5abc [0202.494] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x5204fb7a [0202.494] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x427559cf [0202.494] RtlRandomEx (in: Seed=0xb90fe18 | out: Seed=0xb90fe18) returned 0x4cb4afab [0202.506] ReadFile (in: hFile=0x1994, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0xb90fe14, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xb90fe14*=0x108, lpOverlapped=0x0) returned 1 [0202.507] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.507] WriteFile (in: hFile=0x1994, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xb90fe18, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0xb90fe18*=0x108, lpOverlapped=0x0) returned 1 [0206.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0206.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0206.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0206.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0206.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0206.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ca68) returned 1 [0206.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85010) returned 1 [0206.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c50 [0206.112] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.113] WriteFile (in: hFile=0x1994, lpBuffer=0x7b7d4a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb90fea0, lpOverlapped=0x0 | out: lpBuffer=0x7b7d4a0*, lpNumberOfBytesWritten=0xb90fea0*=0x10c, lpOverlapped=0x0) returned 1 [0206.536] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0206.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0206.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec35b0 [0206.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0206.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0206.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3920) returned 1 [0206.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.537] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="93") returned 2 [0206.537] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="9b") returned 2 [0206.537] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="98") returned 2 [0206.537] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="83") returned 2 [0206.537] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="a1") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="a7") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="50") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="fd") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="a9") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="41") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="56") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="b6") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="92") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="a3") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="17") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="b9") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="4a") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="b9") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="12") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="55") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="21") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="ea") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="9c") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="30") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="ae") returned 2 [0206.538] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="c9") returned 2 [0206.538] RtlInitAnsiString (in: DestinationString=0xb90fe28, SourceString="939b9883a1a750fda94156b692a317b94ab9125521ea9c30aec9" | out: DestinationString="939b9883a1a750fda94156b692a317b94ab9125521ea9c30aec9") [0206.538] RtlAnsiStringToUnicodeString (in: DestinationString=0xb90fe20, SourceString="939b9883a1a750fda94156b692a317b94ab9125521ea9c30aec9", AllocateDestinationString=1 | out: DestinationString="939b9883a1a750fda94156b692a317b94ab9125521ea9c30aec9") returned 0x0 [0206.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e238 [0206.539] wcscat (in: _Dest=0x7dda4d8, _Source="939b9883a1a75" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\939b9883a1a75") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\939b9883a1a75" [0206.539] wcscat (in: _Dest=0x7dda4d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\939b9883a1a75.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\939b9883a1a75.68814f" [0206.539] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\939b9883a1a75.68814f", NtPathName=0xb90fe18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\939b9883a1a75.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc3a0 [0208.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc3a0) returned 1 [0208.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ced9a0) returned 1 [0208.883] NtQueryInformationFile (in: FileHandle=0x1994, IoStatusBlock=0xb90fdf0, FileInformation=0xb90fdf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb90fdf0, FileInformation=0xb90fdf8) returned 0x0 [0208.883] NtSetInformationFile (FileHandle=0x1994, IoStatusBlock=0xb90fdf0, FileInformation=0xb90fdf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda4d8) returned 1 [0209.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0209.243] FlushFileBuffers (hFile=0x1994) returned 1 [0209.261] CloseHandle (hObject=0x1994) returned 1 [0209.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e02f50 [0209.448] wcscpy (in: _Dest=0x3e02f50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\" [0209.448] wcscat (in: _Dest=0x3e02f50, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\68814F-Readme.txt" [0209.448] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\68814f-readme.txt")) returned 0xffffffff [0209.448] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.054] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb90fe34, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb90fe34*=0x8b9, lpOverlapped=0x0) returned 1 [0210.061] CloseHandle (hObject=0xbb8) returned 1 [0210.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02f50) returned 1 [0210.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb12a0) returned 1 Thread: id = 6693 os_tid = 0x19dc [0195.574] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json")) returned 0x2020 [0195.574] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0202.507] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xacc [0202.507] GetFileSizeEx (in: hFile=0xacc, lpFileSize=0xcc8fcd4 | out: lpFileSize=0xcc8fcd4*=246) returned 1 [0202.508] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.508] ReadFile (in: hFile=0xacc, lpBuffer=0xcc8fcb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcc8fcc0, lpOverlapped=0x0 | out: lpBuffer=0xcc8fcb0*, lpNumberOfBytesRead=0xcc8fcc0*=0x4, lpOverlapped=0x0) returned 1 [0202.509] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0202.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0202.510] NtQuerySystemTime (in: CurrentTime=0xcc8fc48 | out: CurrentTime=0xcc8fc48*=132462177810828000) returned 0x0 [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x7b6cba5 [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x249788ff [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x748d82df [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x75da7306 [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x9110693 [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x599094bf [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x620c944b [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x4ea53034 [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x15279160 [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x27495fca [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x2ada46 [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x7bcdd5fc [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x6626b641 [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x6b2cb6ed [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x28a266d5 [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0xbe166b [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x6bab3a5f [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x6d585dd0 [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x50e8501a [0202.510] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x5b33a481 [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x37c094a7 [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x36d8c7c9 [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x212c4564 [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x15910252 [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x24c1f39a [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x5c2461e3 [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x5abc81ff [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x5711dc1 [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x59e6463f [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x3291cd10 [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x7421f196 [0202.511] RtlRandomEx (in: Seed=0xcc8fc40 | out: Seed=0xcc8fc40) returned 0x3f08544c [0202.522] ReadFile (in: hFile=0xacc, lpBuffer=0x7c143e0, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0xcc8fc3c, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesRead=0xcc8fc3c*=0xf6, lpOverlapped=0x0) returned 1 [0202.522] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.522] WriteFile (in: hFile=0xacc, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0xcc8fc40, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0xcc8fc40*=0xf6, lpOverlapped=0x0) returned 1 [0206.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb58 [0206.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0206.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0206.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0206.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0206.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c888) returned 1 [0206.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84f80) returned 1 [0206.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37530 [0206.116] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.117] WriteFile (in: hFile=0xacc, lpBuffer=0x7b7da18*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcc8fcc8, lpOverlapped=0x0 | out: lpBuffer=0x7b7da18*, lpNumberOfBytesWritten=0xcc8fcc8*=0x10c, lpOverlapped=0x0) returned 1 [0208.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbce30 [0208.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2c3d8 [0208.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d38 [0208.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52d38) returned 1 [0208.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52d38 [0208.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52950 [0208.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52e50 [0208.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52e50) returned 1 [0208.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c3d8) returned 1 [0208.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbce30) returned 1 [0208.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0208.504] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="75") returned 2 [0208.504] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="28") returned 2 [0208.504] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="ff") returned 2 [0208.504] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="b7") returned 2 [0208.504] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="be") returned 2 [0208.504] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="50") returned 2 [0208.504] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="a1") returned 2 [0208.504] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="a4") returned 2 [0208.504] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="ae") returned 2 [0208.504] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="76") returned 2 [0208.504] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="a7") returned 2 [0208.504] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="ef") returned 2 [0208.505] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="5c") returned 2 [0208.505] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="68") returned 2 [0208.505] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="2c") returned 2 [0208.505] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="4e") returned 2 [0208.505] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="80") returned 2 [0208.505] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="a7") returned 2 [0208.505] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="84") returned 2 [0208.505] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="dd") returned 2 [0208.505] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="a9") returned 2 [0208.505] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="dc") returned 2 [0208.505] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="5a") returned 2 [0208.505] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="2e") returned 2 [0208.505] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="84") returned 2 [0208.505] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="62") returned 2 [0208.505] RtlInitAnsiString (in: DestinationString=0xcc8fc50, SourceString="7528ffb7be50a1a4ae76a7ef5c682c4e80a784dda9dc5a2e8462" | out: DestinationString="7528ffb7be50a1a4ae76a7ef5c682c4e80a784dda9dc5a2e8462") [0208.505] RtlAnsiStringToUnicodeString (in: DestinationString=0xcc8fc48, SourceString="7528ffb7be50a1a4ae76a7ef5c682c4e80a784dda9dc5a2e8462", AllocateDestinationString=1 | out: DestinationString="7528ffb7be50a1a4ae76a7ef5c682c4e80a784dda9dc5a2e8462") returned 0x0 [0208.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f470 [0208.505] wcscat (in: _Dest=0x3db78c0, _Source="7528ffb7be50a" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\7528ffb7be50a") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\7528ffb7be50a" [0208.505] wcscat (in: _Dest=0x3db78c0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\7528ffb7be50a.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\7528ffb7be50a.68814f" [0208.506] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\7528ffb7be50a.68814f", NtPathName=0xcc8fc40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\7528ffb7be50a.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0208.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddd590 [0208.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd590) returned 1 [0208.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca5ab0) returned 1 [0208.967] NtQueryInformationFile (in: FileHandle=0xacc, IoStatusBlock=0xcc8fc18, FileInformation=0xcc8fc20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcc8fc18, FileInformation=0xcc8fc20) returned 0x0 [0208.967] NtSetInformationFile (FileHandle=0xacc, IoStatusBlock=0xcc8fc18, FileInformation=0xcc8fc20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db78c0) returned 1 [0209.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0209.348] FlushFileBuffers (hFile=0xacc) returned 1 [0209.360] CloseHandle (hObject=0xacc) returned 1 [0209.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e032c8 [0209.487] wcscpy (in: _Dest=0x3e032c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\" [0209.487] wcscat (in: _Dest=0x3e032c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\68814F-Readme.txt" [0209.487] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\68814f-readme.txt")) returned 0xffffffff [0209.487] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1810 [0210.363] WriteFile (in: hFile=0x1810, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcc8fc5c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcc8fc5c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.365] CloseHandle (hObject=0x1810) returned 1 [0210.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e032c8) returned 1 [0210.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb13c8) returned 1 Thread: id = 6694 os_tid = 0x1b38 [0195.575] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json")) returned 0x2020 [0195.575] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0202.523] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1568 [0202.523] GetFileSizeEx (in: hFile=0x1568, lpFileSize=0xcc0fd64 | out: lpFileSize=0xcc0fd64*=213) returned 1 [0202.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0202.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0202.523] NtQuerySystemTime (in: CurrentTime=0xcc0fcd8 | out: CurrentTime=0xcc0fcd8*=132462177810984000) returned 0x0 [0202.523] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x495a6af8 [0202.523] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x6aeb78dc [0202.523] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x57a47a49 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x185d4419 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x6654185f [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x4770ec9b [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x33d58a49 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0xbb287c7 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x50e3fdb0 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x4e4e4b33 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x3cd7438a [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x36e9de80 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x16e182b [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x64e9a889 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x78050d67 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0xce06e82 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x6b64dfc5 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x36145826 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x2f7dd79f [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x6e87a099 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x2ca8dd58 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x190d3359 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x76781a8b [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x1c85aea0 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x6c49624d [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x4da887f [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x7e3d06d7 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x6ebf1c4 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x1fb58494 [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x568d54ad [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x6a5cdeea [0202.524] RtlRandomEx (in: Seed=0xcc0fcd0 | out: Seed=0xcc0fcd0) returned 0x67922613 [0202.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be3778 [0202.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dc84d8 [0202.536] ReadFile (in: hFile=0x1568, lpBuffer=0x7be3778, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0xcc0fccc, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0xcc0fccc*=0xd5, lpOverlapped=0x0) returned 1 [0202.538] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.538] WriteFile (in: hFile=0x1568, lpBuffer=0x10dc84d8*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0xcc0fcd0, lpOverlapped=0x0 | out: lpBuffer=0x10dc84d8*, lpNumberOfBytesWritten=0xcc0fcd0*=0xd5, lpOverlapped=0x0) returned 1 [0206.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0206.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0206.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0206.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc84d8) returned 1 [0206.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0206.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cb58) returned 1 [0206.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84ef0) returned 1 [0206.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3ed0 [0206.118] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.119] WriteFile (in: hFile=0x1568, lpBuffer=0x7b7d900*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcc0fd58, lpOverlapped=0x0 | out: lpBuffer=0x7b7d900*, lpNumberOfBytesWritten=0xcc0fd58*=0x10c, lpOverlapped=0x0) returned 1 [0206.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0206.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec49d8) returned 1 [0206.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec49d8 [0206.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0206.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0206.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ba0) returned 1 [0206.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.542] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="c4") returned 2 [0206.542] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="73") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="a3") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="6e") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="b0") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="54") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="fe") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="e1") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="07") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="25") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="08") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="0d") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="88") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="13") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="da") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="e8") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="9c") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="f4") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="1a") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="06") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="d7") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="73") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="7c") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="1a") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="38") returned 2 [0206.543] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="e4") returned 2 [0206.543] RtlInitAnsiString (in: DestinationString=0xcc0fce0, SourceString="c473a36eb054fee10725080d8813dae89cf41a06d7737c1a38e4" | out: DestinationString="c473a36eb054fee10725080d8813dae89cf41a06d7737c1a38e4") [0206.543] RtlAnsiStringToUnicodeString (in: DestinationString=0xcc0fcd8, SourceString="c473a36eb054fee10725080d8813dae89cf41a06d7737c1a38e4", AllocateDestinationString=1 | out: DestinationString="c473a36eb054fee10725080d8813dae89cf41a06d7737c1a38e4") returned 0x0 [0206.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3ea30 [0206.544] wcscat (in: _Dest=0x7dda610, _Source="c473a36eb054f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\c473a36eb054f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\c473a36eb054f" [0206.544] wcscat (in: _Dest=0x7dda610, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\c473a36eb054f.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\c473a36eb054f.68814f" [0206.544] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\c473a36eb054f.68814f", NtPathName=0xcc0fcd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\c473a36eb054f.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddd070 [0208.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd070) returned 1 [0208.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cea190) returned 1 [0208.884] NtQueryInformationFile (in: FileHandle=0x1568, IoStatusBlock=0xcc0fca8, FileInformation=0xcc0fcb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xcc0fca8, FileInformation=0xcc0fcb0) returned 0x0 [0208.884] NtSetInformationFile (FileHandle=0x1568, IoStatusBlock=0xcc0fca8, FileInformation=0xcc0fcb0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda610) returned 1 [0209.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0209.249] FlushFileBuffers (hFile=0x1568) returned 1 [0209.270] CloseHandle (hObject=0x1568) returned 1 [0209.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e03078 [0209.453] wcscpy (in: _Dest=0x3e03078, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\" [0209.453] wcscat (in: _Dest=0x3e03078, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\68814F-Readme.txt" [0209.453] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\68814f-readme.txt")) returned 0xffffffff [0209.453] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.063] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xcc0fcec, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xcc0fcec*=0x8b9, lpOverlapped=0x0) returned 1 [0210.065] CloseHandle (hObject=0xbb8) returned 1 [0210.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03078) returned 1 [0210.065] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb14f0) returned 1 Thread: id = 6695 os_tid = 0x7e8 [0195.576] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json")) returned 0x2020 [0195.576] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0202.538] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1998 [0202.539] GetFileSizeEx (in: hFile=0x1998, lpFileSize=0x9c6fe9c | out: lpFileSize=0x9c6fe9c*=237) returned 1 [0202.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0202.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c40 [0202.539] NtQuerySystemTime (in: CurrentTime=0x9c6fe10 | out: CurrentTime=0x9c6fe10*=132462177811140000) returned 0x0 [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x5965bbff [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x3f32b353 [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x21bbcf9c [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x429e001d [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x453cad57 [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x6df5e506 [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x539ed955 [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x6c2ac93d [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x491a6c53 [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x3d9823f2 [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x66424cbd [0202.539] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x717f3e [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x18383a9e [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x10f3b134 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x1f0fd857 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0xe3e5b99 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x5bb1fc24 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x878cbc [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x1311d455 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x1b973991 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x8c72709 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x5958db48 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x7818fae5 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x10c8c208 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x59100a7f [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x3cdf42c9 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x63a746b7 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x3963636c [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x79ebf771 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x36e323e7 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x232082e5 [0202.540] RtlRandomEx (in: Seed=0x9c6fe08 | out: Seed=0x9c6fe08) returned 0x4cf83d7a [0202.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dcc0e0 [0202.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10db94b8 [0202.552] ReadFile (in: hFile=0x1998, lpBuffer=0x10dcc0e0, nNumberOfBytesToRead=0xed, lpNumberOfBytesRead=0x9c6fe04, lpOverlapped=0x0 | out: lpBuffer=0x10dcc0e0*, lpNumberOfBytesRead=0x9c6fe04*=0xed, lpOverlapped=0x0) returned 1 [0202.554] SetFilePointerEx (in: hFile=0x1998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.554] WriteFile (in: hFile=0x1998, lpBuffer=0x10db94b8*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x9c6fe08, lpOverlapped=0x0 | out: lpBuffer=0x10db94b8*, lpNumberOfBytesWritten=0x9c6fe08*=0xed, lpOverlapped=0x0) returned 1 [0206.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb30 [0206.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0206.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbd0) returned 1 [0206.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db94b8) returned 1 [0206.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dcc0e0) returned 1 [0206.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c090) returned 1 [0206.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84b00) returned 1 [0206.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3660 [0206.121] SetFilePointerEx (in: hFile=0x1998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.121] WriteFile (in: hFile=0x1998, lpBuffer=0x7b7d7e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9c6fe90, lpOverlapped=0x0 | out: lpBuffer=0x7b7d7e8*, lpNumberOfBytesWritten=0x9c6fe90*=0x10c, lpOverlapped=0x0) returned 1 [0206.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0206.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fb0) returned 1 [0206.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3fb0 [0206.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c68 [0206.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0206.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0206.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.547] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="53") returned 2 [0206.547] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="25") returned 2 [0206.547] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="c3") returned 2 [0206.547] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="f4") returned 2 [0206.547] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="cd") returned 2 [0206.547] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="dd") returned 2 [0206.547] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="93") returned 2 [0206.547] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="76") returned 2 [0206.547] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="11") returned 2 [0206.547] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="b2") returned 2 [0206.547] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="37") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="d7") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="99") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="52") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="70") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="c8") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="e8") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="a4") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="5d") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="f4") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="50") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="78") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="28") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="25") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="16") returned 2 [0206.548] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="84") returned 2 [0206.548] RtlInitAnsiString (in: DestinationString=0x9c6fe18, SourceString="5325c3f4cddd937611b237d7995270c8e8a45df4507828251684" | out: DestinationString="5325c3f4cddd937611b237d7995270c8e8a45df4507828251684") [0206.548] RtlAnsiStringToUnicodeString (in: DestinationString=0x9c6fe10, SourceString="5325c3f4cddd937611b237d7995270c8e8a45df4507828251684", AllocateDestinationString=1 | out: DestinationString="5325c3f4cddd937611b237d7995270c8e8a45df4507828251684") returned 0x0 [0206.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cae0 [0206.549] wcscat (in: _Dest=0x7dda3a0, _Source="5325c3f4cddd9" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\5325c3f4cddd9") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\5325c3f4cddd9" [0206.549] wcscat (in: _Dest=0x7dda3a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\5325c3f4cddd9.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\5325c3f4cddd9.68814f" [0206.549] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\5325c3f4cddd9.68814f", NtPathName=0x9c6fe08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\5325c3f4cddd9.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddd1b8 [0208.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd1b8) returned 1 [0208.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cee240) returned 1 [0208.886] NtQueryInformationFile (in: FileHandle=0x1998, IoStatusBlock=0x9c6fde0, FileInformation=0x9c6fde8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9c6fde0, FileInformation=0x9c6fde8) returned 0x0 [0208.886] NtSetInformationFile (FileHandle=0x1998, IoStatusBlock=0x9c6fde0, FileInformation=0x9c6fde8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dda3a0) returned 1 [0209.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cae0) returned 1 [0209.255] FlushFileBuffers (hFile=0x1998) returned 1 [0209.274] CloseHandle (hObject=0x1998) returned 1 [0209.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x3e031a0 [0209.458] wcscpy (in: _Dest=0x3e031a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\" [0209.459] wcscat (in: _Dest=0x3e031a0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\68814F-Readme.txt" [0209.459] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\68814f-readme.txt")) returned 0xffffffff [0209.459] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.071] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x9c6fe24, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x9c6fe24*=0x8b9, lpOverlapped=0x0) returned 1 [0210.073] CloseHandle (hObject=0xbb8) returned 1 [0210.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e031a0) returned 1 [0210.073] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3050) returned 1 Thread: id = 6696 os_tid = 0x1b3c [0195.590] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0195.590] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0202.555] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2408 [0202.555] GetFileSizeEx (in: hFile=0x2408, lpFileSize=0x964fad4 | out: lpFileSize=0x964fad4*=215) returned 1 [0202.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c40 [0202.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0202.556] NtQuerySystemTime (in: CurrentTime=0x964fa48 | out: CurrentTime=0x964fa48*=132462177811296000) returned 0x0 [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x5a3bf7bf [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x71bf949c [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x7f9d8eff [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x5e96d30f [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x41d63a2e [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x5b827cd [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x50e2c9a1 [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x168bad25 [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x3a8d85f8 [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x16cccd23 [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x5a91a93f [0202.556] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x62d7164a [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x1a4308e3 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x6d6899c0 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x35b7f332 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x37b9525f [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x4ff82958 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x5aaa6101 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x212fa99 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x72a26c3d [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x4b2faa7c [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x6d8a29f6 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x2853c9aa [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x44b5e548 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0xfa50e75 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x78629c10 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x495a829e [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x699b7430 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x39dc0549 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x2fc03672 [0202.557] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x6f44ecbc [0202.558] RtlRandomEx (in: Seed=0x964fa40 | out: Seed=0x964fa40) returned 0x4772e404 [0202.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dbd0c0 [0202.569] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10daa498 [0202.569] ReadFile (in: hFile=0x2408, lpBuffer=0x10dbd0c0, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0x964fa3c, lpOverlapped=0x0 | out: lpBuffer=0x10dbd0c0*, lpNumberOfBytesRead=0x964fa3c*=0xd7, lpOverlapped=0x0) returned 1 [0202.571] SetFilePointerEx (in: hFile=0x2408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.571] WriteFile (in: hFile=0x2408, lpBuffer=0x10daa498*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x964fa40, lpOverlapped=0x0 | out: lpBuffer=0x10daa498*, lpNumberOfBytesWritten=0x964fa40*=0xd7, lpOverlapped=0x0) returned 1 [0206.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0206.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbb8 [0206.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbb8) returned 1 [0206.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10daa498) returned 1 [0206.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dbd0c0) returned 1 [0206.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c2e8) returned 1 [0206.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db36f0 [0206.126] SetFilePointerEx (in: hFile=0x2408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.126] WriteFile (in: hFile=0x2408, lpBuffer=0x7b7ce10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x964fac8, lpOverlapped=0x0 | out: lpBuffer=0x7b7ce10*, lpNumberOfBytesWritten=0x964fac8*=0x10c, lpOverlapped=0x0) returned 1 [0206.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0206.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e70) returned 1 [0206.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3e70 [0206.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0206.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0206.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0206.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.558] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="ac") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="77") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="1a") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="53") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="18") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="32") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="e4") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="e6") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="5b") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="1c") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="f0") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="4d") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="df") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="6d") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="cd") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="5e") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="60") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="cb") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="0d") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="9a") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="01") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="9d") returned 2 [0206.558] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="a6") returned 2 [0206.559] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="80") returned 2 [0206.559] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.559] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="e3") returned 2 [0206.559] RtlInitAnsiString (in: DestinationString=0x964fa50, SourceString="ac771a531832e4e65b1cf04ddf6dcd5e60cb0d9a019da6804ee3" | out: DestinationString="ac771a531832e4e65b1cf04ddf6dcd5e60cb0d9a019da6804ee3") [0206.559] RtlAnsiStringToUnicodeString (in: DestinationString=0x964fa48, SourceString="ac771a531832e4e65b1cf04ddf6dcd5e60cb0d9a019da6804ee3", AllocateDestinationString=1 | out: DestinationString="ac771a531832e4e65b1cf04ddf6dcd5e60cb0d9a019da6804ee3") returned 0x0 [0206.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cbd0 [0206.559] wcscat (in: _Dest=0x7cd4020, _Source="ac771a531832e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\ac771a531832e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\ac771a531832e" [0206.559] wcscat (in: _Dest=0x7cd4020, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\ac771a531832e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\ac771a531832e.68814f" [0206.559] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\ac771a531832e.68814f", NtPathName=0x964fa40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\ac771a531832e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.559] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x140) returned 0x7ddd448 [0208.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd448) returned 1 [0208.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceeae0) returned 1 [0208.893] NtQueryInformationFile (in: FileHandle=0x2408, IoStatusBlock=0x964fa18, FileInformation=0x964fa20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x964fa18, FileInformation=0x964fa20) returned 0x0 [0208.893] NtSetInformationFile (FileHandle=0x2408, IoStatusBlock=0x964fa18, FileInformation=0x964fa20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4020) returned 1 [0209.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.264] FlushFileBuffers (hFile=0x2408) returned 1 [0209.281] CloseHandle (hObject=0x2408) returned 1 [0209.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x7ddffa8 [0209.467] wcscpy (in: _Dest=0x7ddffa8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\" [0209.467] wcscat (in: _Dest=0x7ddffa8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\68814F-Readme.txt" [0209.468] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\68814f-readme.txt")) returned 0xffffffff [0209.468] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17ec [0210.333] WriteFile (in: hFile=0x17ec, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x964fa5c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x964fa5c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.335] CloseHandle (hObject=0x17ec) returned 1 [0210.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddffa8) returned 1 [0210.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3178) returned 1 Thread: id = 6697 os_tid = 0x1354 [0195.591] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0195.591] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0202.449] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1740 [0202.449] GetFileSizeEx (in: hFile=0x1740, lpFileSize=0x949ff3c | out: lpFileSize=0x949ff3c*=273) returned 1 [0202.449] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x10d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.449] ReadFile (in: hFile=0x1740, lpBuffer=0x949ff18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x949ff28, lpOverlapped=0x0 | out: lpBuffer=0x949ff18*, lpNumberOfBytesRead=0x949ff28*=0x4, lpOverlapped=0x0) returned 1 [0202.451] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0202.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0202.452] NtQuerySystemTime (in: CurrentTime=0x949feb0 | out: CurrentTime=0x949feb0*=132462177810360000) returned 0x0 [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x44b5e548 [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x497135fe [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x53bfaf2c [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x4f8ba5b7 [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x7ae0c6ca [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x5bcb6a38 [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x21c21949 [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x73485a2d [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x3d50e4db [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x74c9e995 [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0xadf2fcb [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x2446cfd5 [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x37403654 [0202.452] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x695026de [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x77a9a1f9 [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x185e8844 [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x68c44c5 [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x14f8350e [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x7b71803c [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x5dfe9850 [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x12b1e5c9 [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x2dcf0f49 [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x1b17314e [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x7ae67a15 [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x3ba65124 [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x4e164907 [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x560a33dd [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x7e7eb622 [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x57a2d09d [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x5434719d [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x4309319e [0202.453] RtlRandomEx (in: Seed=0x949fea8 | out: Seed=0x949fea8) returned 0x730562c4 [0202.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33d0) returned 1 [0202.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0202.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0202.467] ReadFile (in: hFile=0x1740, lpBuffer=0x7c08fc8, nNumberOfBytesToRead=0x111, lpNumberOfBytesRead=0x949fea4, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesRead=0x949fea4*=0x111, lpOverlapped=0x0) returned 1 [0202.467] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.467] WriteFile (in: hFile=0x1740, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x949fea8, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0x949fea8*=0x111, lpOverlapped=0x0) returned 1 [0206.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0206.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0206.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0206.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0206.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0206.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c108) returned 1 [0206.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b851c0) returned 1 [0206.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b90 [0206.108] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.108] WriteFile (in: hFile=0x1740, lpBuffer=0x7b7c9b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x949ff30, lpOverlapped=0x0 | out: lpBuffer=0x7b7c9b0*, lpNumberOfBytesWritten=0x949ff30*=0x10c, lpOverlapped=0x0) returned 1 [0206.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0206.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3060) returned 1 [0206.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3060 [0206.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0206.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0206.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c00) returned 1 [0206.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.522] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="9d") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="5b") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="16") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="05") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="cf") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="cf") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="5c") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="92") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="06") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="4f") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="f2") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="7c") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="da") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="c6") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="6c") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="4f") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="8f") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="cd") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="21") returned 2 [0206.522] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="a6") returned 2 [0206.523] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="11") returned 2 [0206.523] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="55") returned 2 [0206.523] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="c1") returned 2 [0206.523] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="b8") returned 2 [0206.523] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="ab") returned 2 [0206.523] RtlInitAnsiString (in: DestinationString=0x949feb8, SourceString="9d5b1605cfcf5c924e064ff27cdac66c4f8fcd21a61155c1b8ab" | out: DestinationString="9d5b1605cfcf5c924e064ff27cdac66c4f8fcd21a61155c1b8ab") [0206.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x949feb0, SourceString="9d5b1605cfcf5c924e064ff27cdac66c4f8fcd21a61155c1b8ab", AllocateDestinationString=1 | out: DestinationString="9d5b1605cfcf5c924e064ff27cdac66c4f8fcd21a61155c1b8ab") returned 0x0 [0206.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e1c0 [0206.523] wcscat (in: _Dest=0x7ddffa8, _Source="9d5b1605cfcf5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\9d5b1605cfcf5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\9d5b1605cfcf5" [0206.523] wcscat (in: _Dest=0x7ddffa8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\9d5b1605cfcf5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\9d5b1605cfcf5.68814f" [0206.523] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\9d5b1605cfcf5.68814f", NtPathName=0x949fea8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\9d5b1605cfcf5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0b178 [0208.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b178) returned 1 [0208.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceef30) returned 1 [0208.880] NtQueryInformationFile (in: FileHandle=0x1740, IoStatusBlock=0x949fe80, FileInformation=0x949fe88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x949fe80, FileInformation=0x949fe88) returned 0x0 [0208.880] NtSetInformationFile (FileHandle=0x1740, IoStatusBlock=0x949fe80, FileInformation=0x949fe88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddffa8) returned 1 [0209.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0209.245] FlushFileBuffers (hFile=0x1740) returned 1 [0209.269] CloseHandle (hObject=0x1740) returned 1 [0209.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7a5f7b8 [0209.450] wcscpy (in: _Dest=0x7a5f7b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\" [0209.450] wcscat (in: _Dest=0x7a5f7b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\68814F-Readme.txt" [0209.450] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\68814f-readme.txt")) returned 0xffffffff [0209.451] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.067] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x949fec4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x949fec4*=0x8b9, lpOverlapped=0x0) returned 1 [0210.069] CloseHandle (hObject=0xbb8) returned 1 [0210.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f7b8) returned 1 [0210.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb32a0) returned 1 Thread: id = 6698 os_tid = 0x1358 [0195.592] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0195.592] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0202.467] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x177c [0202.468] GetFileSizeEx (in: hFile=0x177c, lpFileSize=0xbd5ff14 | out: lpFileSize=0xbd5ff14*=267) returned 1 [0202.468] SetFilePointerEx (in: hFile=0x177c, liDistanceToMove=0x107, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.468] ReadFile (in: hFile=0x177c, lpBuffer=0xbd5fef0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xbd5ff00, lpOverlapped=0x0 | out: lpBuffer=0xbd5fef0*, lpNumberOfBytesRead=0xbd5ff00*=0x4, lpOverlapped=0x0) returned 1 [0202.470] SetFilePointerEx (in: hFile=0x177c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0202.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0202.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0202.471] NtQuerySystemTime (in: CurrentTime=0xbd5fe88 | out: CurrentTime=0xbd5fe88*=132462177810516000) returned 0x0 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x4a1945ce [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x27c89449 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x24c556c9 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x7e99b87f [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x193106c4 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x27734262 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x5a66d07f [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x2b35e0aa [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x4faa5de4 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x6a1fe59c [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x6329ac4d [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x590da07a [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x48feaf42 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x40f5a8f8 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x512a0496 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x5e17ad15 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x2438424f [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x566f6695 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x37f27624 [0202.471] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x2e8d91ef [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x1ddee230 [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x5c206f8d [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x6255d43c [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x195615de [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x9c1dabd [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x14ae592a [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x3ca93a3f [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x30d24cc9 [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x1136999b [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x2d4da273 [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x74a0a0e4 [0202.472] RtlRandomEx (in: Seed=0xbd5fe80 | out: Seed=0xbd5fe80) returned 0x505e9e78 [0202.485] ReadFile (in: hFile=0x177c, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x10b, lpNumberOfBytesRead=0xbd5fe7c, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0xbd5fe7c*=0x10b, lpOverlapped=0x0) returned 1 [0202.485] SetFilePointerEx (in: hFile=0x177c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.486] WriteFile (in: hFile=0x177c, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0xbd5fe80, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0xbd5fe80*=0x10b, lpOverlapped=0x0) returned 1 [0206.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0206.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0206.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0206.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0206.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0206.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c978) returned 1 [0206.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84e60) returned 1 [0206.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37cb0 [0206.113] SetFilePointerEx (in: hFile=0x177c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.114] WriteFile (in: hFile=0x177c, lpBuffer=0x7b7d5b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xbd5ff08, lpOverlapped=0x0 | out: lpBuffer=0x7b7d5b8*, lpNumberOfBytesWritten=0xbd5ff08*=0x10c, lpOverlapped=0x0) returned 1 [0206.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b850e8 [0206.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e9b8 [0206.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c18 [0206.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c18) returned 1 [0206.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3c18 [0206.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0206.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40c8 [0206.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40c8) returned 1 [0206.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0206.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850e8) returned 1 [0206.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d700 [0206.530] sprintf (in: _Dest=0x7a2d700, _Format="%c%c" | out: _Dest="1e") returned 2 [0206.530] sprintf (in: _Dest=0x7a2d702, _Format="%c%c" | out: _Dest="fa") returned 2 [0206.530] sprintf (in: _Dest=0x7a2d704, _Format="%c%c" | out: _Dest="a4") returned 2 [0206.530] sprintf (in: _Dest=0x7a2d706, _Format="%c%c" | out: _Dest="cb") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d708, _Format="%c%c" | out: _Dest="df") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d70a, _Format="%c%c" | out: _Dest="a7") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d70c, _Format="%c%c" | out: _Dest="34") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d70e, _Format="%c%c" | out: _Dest="59") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d710, _Format="%c%c" | out: _Dest="04") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d712, _Format="%c%c" | out: _Dest="93") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d714, _Format="%c%c" | out: _Dest="99") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d716, _Format="%c%c" | out: _Dest="1b") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d718, _Format="%c%c" | out: _Dest="eb") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d71a, _Format="%c%c" | out: _Dest="f4") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d71c, _Format="%c%c" | out: _Dest="d0") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d71e, _Format="%c%c" | out: _Dest="5d") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d720, _Format="%c%c" | out: _Dest="bc") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d722, _Format="%c%c" | out: _Dest="3a") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d724, _Format="%c%c" | out: _Dest="d3") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d726, _Format="%c%c" | out: _Dest="b4") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d728, _Format="%c%c" | out: _Dest="4b") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d72a, _Format="%c%c" | out: _Dest="4e") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d72c, _Format="%c%c" | out: _Dest="18") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d72e, _Format="%c%c" | out: _Dest="fb") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d730, _Format="%c%c" | out: _Dest="40") returned 2 [0206.531] sprintf (in: _Dest=0x7a2d732, _Format="%c%c" | out: _Dest="41") returned 2 [0206.531] RtlInitAnsiString (in: DestinationString=0xbd5fe90, SourceString="1efaa4cbdfa734590493991bebf4d05dbc3ad3b44b4e18fb4041" | out: DestinationString="1efaa4cbdfa734590493991bebf4d05dbc3ad3b44b4e18fb4041") [0206.531] RtlAnsiStringToUnicodeString (in: DestinationString=0xbd5fe88, SourceString="1efaa4cbdfa734590493991bebf4d05dbc3ad3b44b4e18fb4041", AllocateDestinationString=1 | out: DestinationString="1efaa4cbdfa734590493991bebf4d05dbc3ad3b44b4e18fb4041") returned 0x0 [0206.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3eaa8 [0206.532] wcscat (in: _Dest=0x7de0218, _Source="1efaa4cbdfa73" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\1efaa4cbdfa73") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\1efaa4cbdfa73" [0206.532] wcscat (in: _Dest=0x7de0218, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\1efaa4cbdfa73.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\1efaa4cbdfa73.68814f" [0206.532] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\1efaa4cbdfa73.68814f", NtPathName=0xbd5fe80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\1efaa4cbdfa73.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0206.532] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0ad70 [0208.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0ad70) returned 1 [0208.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceb0a8) returned 1 [0208.879] NtQueryInformationFile (in: FileHandle=0x177c, IoStatusBlock=0xbd5fe58, FileInformation=0xbd5fe60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xbd5fe58, FileInformation=0xbd5fe60) returned 0x0 [0208.879] NtSetInformationFile (FileHandle=0x177c, IoStatusBlock=0xbd5fe58, FileInformation=0xbd5fe60, Length=0x28, FileInformationClass=0x4) returned 0x0 [0209.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7de0218) returned 1 [0209.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0209.231] FlushFileBuffers (hFile=0x177c) returned 1 [0209.244] CloseHandle (hObject=0x177c) returned 1 [0209.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7a5f8f0 [0209.443] wcscpy (in: _Dest=0x7a5f8f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\" [0209.443] wcscat (in: _Dest=0x7a5f8f0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\68814F-Readme.txt" [0209.443] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\68814f-readme.txt")) returned 0xffffffff [0209.443] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbb8 [0210.050] WriteFile (in: hFile=0xbb8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xbd5fe9c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xbd5fe9c*=0x8b9, lpOverlapped=0x0) returned 1 [0210.052] CloseHandle (hObject=0xbb8) returned 1 [0210.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f8f0) returned 1 [0210.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb33c8) returned 1 Thread: id = 6699 os_tid = 0x1b40 [0195.593] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json")) returned 0x2020 [0200.395] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0207.021] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb38 [0207.022] GetFileSizeEx (in: hFile=0xb38, lpFileSize=0xca6fbf4 | out: lpFileSize=0xca6fbf4*=686) returned 1 [0207.022] SetFilePointerEx (in: hFile=0xb38, liDistanceToMove=0x2aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.022] ReadFile (in: hFile=0xb38, lpBuffer=0xca6fbd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xca6fbe0, lpOverlapped=0x0 | out: lpBuffer=0xca6fbd0*, lpNumberOfBytesRead=0xca6fbe0*=0x4, lpOverlapped=0x0) returned 1 [0207.024] SetFilePointerEx (in: hFile=0xb38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0207.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0207.024] NtQuerySystemTime (in: CurrentTime=0xca6fb68 | out: CurrentTime=0xca6fb68*=132462177856068000) returned 0x0 [0207.024] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x52e09a20 [0207.024] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x533ba305 [0207.024] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x27327e17 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x1ccb4bbe [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x27cda109 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0xde36d4a [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x417bb9 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x63a88df3 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x67019095 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x3753d177 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x4218a64d [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x24ca192 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x18ddd136 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0xf993921 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x5c7fd6cf [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x44af5bd6 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x714be0bc [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x337973c1 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x6398cf54 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x11320c96 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0xe7101d0 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x603fd3c4 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0xa7ca037 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x795c13c7 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x5a444e50 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x3dc9e8d1 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x36a81fc2 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x27a1538e [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x759fcb3d [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x76267866 [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x295cbcbf [0207.025] RtlRandomEx (in: Seed=0xca6fb60 | out: Seed=0xca6fb60) returned 0x50c808ff [0207.033] ReadFile (in: hFile=0xb38, lpBuffer=0x7daa7d8, nNumberOfBytesToRead=0x2ae, lpNumberOfBytesRead=0xca6fb5c, lpOverlapped=0x0 | out: lpBuffer=0x7daa7d8*, lpNumberOfBytesRead=0xca6fb5c*=0x2ae, lpOverlapped=0x0) returned 1 [0207.033] SetFilePointerEx (in: hFile=0xb38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.033] WriteFile (in: hFile=0xb38, lpBuffer=0x7d97bb0*, nNumberOfBytesToWrite=0x2ae, lpNumberOfBytesWritten=0xca6fb60, lpOverlapped=0x0 | out: lpBuffer=0x7d97bb0*, lpNumberOfBytesWritten=0xca6fb60*=0x2ae, lpOverlapped=0x0) returned 1 [0210.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0210.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e08 [0210.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e08) returned 1 [0210.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d97bb0) returned 1 [0210.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7daa7d8) returned 1 [0210.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c5b8) returned 1 [0210.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd268) returned 1 [0210.744] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c80 [0210.745] SetFilePointerEx (in: hFile=0xb38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.745] WriteFile (in: hFile=0xb38, lpBuffer=0x7cd3948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xca6fbe8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3948*, lpNumberOfBytesWritten=0xca6fbe8*=0x10c, lpOverlapped=0x0) returned 1 [0213.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0213.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0213.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3510 [0213.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ce0 [0213.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0213.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4528) returned 1 [0213.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.544] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="45") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="1c") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="e1") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="c8") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="9e") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="c0") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="af") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="62") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="01") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="92") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="74") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="f0") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="16") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="ff") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="cb") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="fe") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="e5") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="44") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="77") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="06") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="eb") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="a2") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="07") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="d4") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="69") returned 2 [0213.545] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="c8") returned 2 [0213.545] RtlInitAnsiString (in: DestinationString=0xca6fb70, SourceString="451ce1c89ec0af62019274f016ffcbfee5447706eba207d469c8" | out: DestinationString="451ce1c89ec0af62019274f016ffcbfee5447706eba207d469c8") [0213.545] RtlAnsiStringToUnicodeString (in: DestinationString=0xca6fb68, SourceString="451ce1c89ec0af62019274f016ffcbfee5447706eba207d469c8", AllocateDestinationString=1 | out: DestinationString="451ce1c89ec0af62019274f016ffcbfee5447706eba207d469c8") returned 0x0 [0213.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e418 Thread: id = 6700 os_tid = 0x1b44 [0195.593] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json")) returned 0x2020 [0200.395] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0207.024] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d94 [0207.034] GetFileSizeEx (in: hFile=0x1d94, lpFileSize=0x9e0f79c | out: lpFileSize=0x9e0f79c*=699) returned 1 [0207.034] SetFilePointerEx (in: hFile=0x1d94, liDistanceToMove=0x2b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.034] ReadFile (in: hFile=0x1d94, lpBuffer=0x9e0f778, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9e0f788, lpOverlapped=0x0 | out: lpBuffer=0x9e0f778*, lpNumberOfBytesRead=0x9e0f788*=0x4, lpOverlapped=0x0) returned 1 [0207.040] SetFilePointerEx (in: hFile=0x1d94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0207.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0207.041] NtQuerySystemTime (in: CurrentTime=0x9e0f710 | out: CurrentTime=0x9e0f710*=132462177856224000) returned 0x0 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x15544304 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x56c78b8a [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x6408730a [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x6ed24ad6 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x3536bca8 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x4357f1ff [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x7767e901 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x8e0a5bf [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x28dc327f [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x7b654cc1 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x60345854 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0xa56dfdb [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x45bac9b2 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x152104a8 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x19ccf906 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x1b64c66e [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x2b699998 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x7a4a38d4 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x31ee1380 [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x27e6341c [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x136bbdf [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x5917c79c [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x58c2505f [0207.041] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x1be7997b [0207.042] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x375c2bff [0207.042] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x14d71339 [0207.042] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x6812750f [0207.042] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x60acbac9 [0207.042] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x338aad1c [0207.042] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x7037393b [0207.042] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x2cb60e9 [0207.042] RtlRandomEx (in: Seed=0x9e0f708 | out: Seed=0x9e0f708) returned 0x945ca3b [0207.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d9b7b8 [0207.053] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d903a0 [0207.053] ReadFile (in: hFile=0x1d94, lpBuffer=0x7d9b7b8, nNumberOfBytesToRead=0x2bb, lpNumberOfBytesRead=0x9e0f704, lpOverlapped=0x0 | out: lpBuffer=0x7d9b7b8*, lpNumberOfBytesRead=0x9e0f704*=0x2bb, lpOverlapped=0x0) returned 1 [0207.053] SetFilePointerEx (in: hFile=0x1d94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.053] WriteFile (in: hFile=0x1d94, lpBuffer=0x7d903a0*, nNumberOfBytesToWrite=0x2bb, lpNumberOfBytesWritten=0x9e0f708, lpOverlapped=0x0 | out: lpBuffer=0x7d903a0*, lpNumberOfBytesWritten=0x9e0f708*=0x2bb, lpOverlapped=0x0) returned 1 [0210.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0210.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0210.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0210.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d903a0) returned 1 [0210.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d9b7b8) returned 1 [0210.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c018) returned 1 [0210.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc728) returned 1 [0210.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0210.742] SetFilePointerEx (in: hFile=0x1d94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.742] WriteFile (in: hFile=0x1d94, lpBuffer=0x7cd3830*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9e0f790, lpOverlapped=0x0 | out: lpBuffer=0x7cd3830*, lpNumberOfBytesWritten=0x9e0f790*=0x10c, lpOverlapped=0x0) returned 1 [0213.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0213.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0213.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3e48 [0213.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0213.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0213.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0213.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.538] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="ff") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="5a") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="f1") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="57") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="ea") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="a5") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="f4") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="41") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="ef") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="88") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="b4") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="49") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="a7") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="01") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="51") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="7e") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="8c") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="ca") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="ca") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="71") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="60") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="c9") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="e0") returned 2 [0213.538] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="35") returned 2 [0213.539] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="cf") returned 2 [0213.539] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="1d") returned 2 [0213.539] RtlInitAnsiString (in: DestinationString=0x9e0f718, SourceString="ff5af157eaa5f441ef88b449a701517e8ccaca7160c9e035cf1d" | out: DestinationString="ff5af157eaa5f441ef88b449a701517e8ccaca7160c9e035cf1d") [0213.539] RtlAnsiStringToUnicodeString (in: DestinationString=0x9e0f710, SourceString="ff5af157eaa5f441ef88b449a701517e8ccaca7160c9e035cf1d", AllocateDestinationString=1 | out: DestinationString="ff5af157eaa5f441ef88b449a701517e8ccaca7160c9e035cf1d") returned 0x0 [0213.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e940 Thread: id = 6701 os_tid = 0x1b4c [0195.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10e) returned 0x7a38930 [0195.605] wcscpy (in: _Dest=0x7a38930, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0195.605] wcscat (in: _Dest=0x7a38930, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0195.605] wcscat (in: _Dest=0x7a38930, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*" [0195.605] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3d4f0 [0195.605] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\*", lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0197.801] wcscmp (_String1=".", _String2=".") returned 0 [0197.801] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.801] wcscmp (_String1="..", _String2=".") returned 1 [0197.801] wcscmp (_String1="..", _String2="..") returned 0 [0197.801] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0197.801] wcscmp (_String1="ar", _String2=".") returned 1 [0197.801] wcscmp (_String1="ar", _String2="..") returned 1 [0197.801] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cac138 [0197.801] wcscpy (in: _Dest=0x7cac138, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0197.801] wcscat (in: _Dest=0x7cac138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0197.801] wcscat (in: _Dest=0x7cac138, _Source="ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" [0199.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0 [0199.437] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0199.437] wcscmp (_String1="bg", _String2=".") returned 1 [0199.437] wcscmp (_String1="bg", _String2="..") returned 1 [0199.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7a38700 [0199.437] wcscpy (in: _Dest=0x7a38700, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.437] wcscat (in: _Dest=0x7a38700, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.438] wcscat (in: _Dest=0x7a38700, _Source="bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" [0199.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7a38700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4 [0199.439] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0199.439] wcscmp (_String1="ca", _String2=".") returned 1 [0199.439] wcscmp (_String1="ca", _String2="..") returned 1 [0199.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7d270 [0199.440] wcscpy (in: _Dest=0x7b7d270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.440] wcscat (in: _Dest=0x7b7d270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.440] wcscat (in: _Dest=0x7b7d270, _Source="ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" [0199.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158 [0199.441] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0199.442] wcscmp (_String1="cs", _String2=".") returned 1 [0199.442] wcscmp (_String1="cs", _String2="..") returned 1 [0199.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7d388 [0199.442] wcscpy (in: _Dest=0x7b7d388, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.442] wcscat (in: _Dest=0x7b7d388, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.442] wcscat (in: _Dest=0x7b7d388, _Source="cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" [0199.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144 [0199.444] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0199.444] wcscmp (_String1="da", _String2=".") returned 1 [0199.444] wcscmp (_String1="da", _String2="..") returned 1 [0199.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7cf28 [0199.444] wcscpy (in: _Dest=0x7b7cf28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.444] wcscat (in: _Dest=0x7b7cf28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.444] wcscat (in: _Dest=0x7b7cf28, _Source="da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" [0199.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7cf28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8 [0199.446] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0199.446] wcscmp (_String1="de", _String2=".") returned 1 [0199.446] wcscmp (_String1="de", _String2="..") returned 1 [0199.446] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7c668 [0199.446] wcscpy (in: _Dest=0x7b7c668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.446] wcscat (in: _Dest=0x7b7c668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.446] wcscat (in: _Dest=0x7b7c668, _Source="de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" [0199.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7c668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4 [0199.448] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0199.448] wcscmp (_String1="el", _String2=".") returned 1 [0199.448] wcscmp (_String1="el", _String2="..") returned 1 [0199.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7ccf8 [0199.448] wcscpy (in: _Dest=0x7b7ccf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.448] wcscat (in: _Dest=0x7b7ccf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.448] wcscat (in: _Dest=0x7b7ccf8, _Source="el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" [0199.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7ccf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450 [0199.450] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0199.450] wcscmp (_String1="en", _String2=".") returned 1 [0199.450] wcscmp (_String1="en", _String2="..") returned 1 [0199.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7d040 [0199.450] wcscpy (in: _Dest=0x7b7d040, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.450] wcscat (in: _Dest=0x7b7d040, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.451] wcscat (in: _Dest=0x7b7d040, _Source="en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" [0199.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ba0 [0199.452] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0199.452] wcscmp (_String1="es", _String2=".") returned 1 [0199.453] wcscmp (_String1="es", _String2="..") returned 1 [0199.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7cbe0 [0199.453] wcscpy (in: _Dest=0x7b7cbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.453] wcscat (in: _Dest=0x7b7cbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.453] wcscat (in: _Dest=0x7b7cbe0, _Source="es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" [0199.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7cbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464 [0199.455] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0199.455] wcscmp (_String1="fi", _String2=".") returned 1 [0199.456] wcscmp (_String1="fi", _String2="..") returned 1 [0199.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7c898 [0199.456] wcscpy (in: _Dest=0x7b7c898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.456] wcscat (in: _Dest=0x7b7c898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.456] wcscat (in: _Dest=0x7b7c898, _Source="fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" [0199.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7c898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194 [0199.458] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0199.458] wcscmp (_String1="fil", _String2=".") returned 1 [0199.458] wcscmp (_String1="fil", _String2="..") returned 1 [0199.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x112) returned 0x3d555f0 [0199.458] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.458] wcscat (in: _Dest=0x3d555f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.458] wcscat (in: _Dest=0x3d555f0, _Source="fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" [0199.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x3d555f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8 [0199.460] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0199.460] wcscmp (_String1="fr", _String2=".") returned 1 [0199.460] wcscmp (_String1="fr", _String2="..") returned 1 [0199.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7d7e8 [0199.460] wcscpy (in: _Dest=0x7b7d7e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.460] wcscat (in: _Dest=0x7b7d7e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.460] wcscat (in: _Dest=0x7b7d7e8, _Source="fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" [0199.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d7e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0 [0199.462] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0199.462] wcscmp (_String1="he", _String2=".") returned 1 [0199.462] wcscmp (_String1="he", _String2="..") returned 1 [0199.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7d900 [0199.462] wcscpy (in: _Dest=0x7b7d900, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.463] wcscat (in: _Dest=0x7b7d900, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.463] wcscat (in: _Dest=0x7b7d900, _Source="he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" [0199.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7d900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c [0199.464] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0199.464] wcscmp (_String1="hi", _String2=".") returned 1 [0199.464] wcscmp (_String1="hi", _String2="..") returned 1 [0199.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7da18 [0199.464] wcscpy (in: _Dest=0x7b7da18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.464] wcscat (in: _Dest=0x7b7da18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.465] wcscat (in: _Dest=0x7b7da18, _Source="hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" [0199.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7da18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2440 [0199.467] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0199.467] wcscmp (_String1="hr", _String2=".") returned 1 [0199.467] wcscmp (_String1="hr", _String2="..") returned 1 [0199.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7db30 [0199.467] wcscpy (in: _Dest=0x7b7db30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.467] wcscat (in: _Dest=0x7b7db30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.467] wcscat (in: _Dest=0x7b7db30, _Source="hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" [0199.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7db30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410 [0199.469] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0199.469] wcscmp (_String1="hu", _String2=".") returned 1 [0199.469] wcscmp (_String1="hu", _String2="..") returned 1 [0199.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7dc48 [0199.469] wcscpy (in: _Dest=0x7b7dc48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.469] wcscat (in: _Dest=0x7b7dc48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.470] wcscat (in: _Dest=0x7b7dc48, _Source="hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" [0199.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7dc48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174 [0199.471] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0199.471] wcscmp (_String1="id", _String2=".") returned 1 [0199.471] wcscmp (_String1="id", _String2="..") returned 1 [0199.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7b7dd60 [0199.471] wcscpy (in: _Dest=0x7b7dd60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0199.471] wcscat (in: _Dest=0x7b7dd60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0199.471] wcscat (in: _Dest=0x7b7dd60, _Source="id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" [0199.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7b7dd60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8 [0200.334] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0200.334] wcscmp (_String1="it", _String2=".") returned 1 [0200.334] wcscmp (_String1="it", _String2="..") returned 1 [0200.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cacc28 [0200.334] wcscpy (in: _Dest=0x7cacc28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0200.335] wcscat (in: _Dest=0x7cacc28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0200.335] wcscat (in: _Dest=0x7cacc28, _Source="it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" [0201.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cacc28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4 [0201.762] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0201.762] wcscmp (_String1="ja", _String2=".") returned 1 [0201.762] wcscmp (_String1="ja", _String2="..") returned 1 [0201.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cacf70 [0201.762] wcscpy (in: _Dest=0x7cacf70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.762] wcscat (in: _Dest=0x7cacf70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.762] wcscat (in: _Dest=0x7cacf70, _Source="ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" [0201.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cacf70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc [0201.764] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0201.764] wcscmp (_String1="ko", _String2=".") returned 1 [0201.764] wcscmp (_String1="ko", _String2="..") returned 1 [0201.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cac250 [0201.764] wcscpy (in: _Dest=0x7cac250, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.764] wcscat (in: _Dest=0x7cac250, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.764] wcscat (in: _Dest=0x7cac250, _Source="ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" [0201.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc [0201.765] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0201.765] wcscmp (_String1="lt", _String2=".") returned 1 [0201.765] wcscmp (_String1="lt", _String2="..") returned 1 [0201.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cac598 [0201.765] wcscpy (in: _Dest=0x7cac598, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.765] wcscat (in: _Dest=0x7cac598, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.765] wcscat (in: _Dest=0x7cac598, _Source="lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" [0201.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac598, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec [0201.766] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0201.766] wcscmp (_String1="lv", _String2=".") returned 1 [0201.766] wcscmp (_String1="lv", _String2="..") returned 1 [0201.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cac6b0 [0201.766] wcscpy (in: _Dest=0x7cac6b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.766] wcscat (in: _Dest=0x7cac6b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.766] wcscat (in: _Dest=0x7cac6b0, _Source="lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" [0201.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac6b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4 [0201.767] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0201.767] wcscmp (_String1="nl", _String2=".") returned 1 [0201.767] wcscmp (_String1="nl", _String2="..") returned 1 [0201.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cadda8 [0201.767] wcscpy (in: _Dest=0x7cadda8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.767] wcscat (in: _Dest=0x7cadda8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.767] wcscat (in: _Dest=0x7cadda8, _Source="nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" [0201.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cadda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0 [0201.768] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0201.768] wcscmp (_String1="no", _String2=".") returned 1 [0201.768] wcscmp (_String1="no", _String2="..") returned 1 [0201.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cadc90 [0201.768] wcscpy (in: _Dest=0x7cadc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.768] wcscat (in: _Dest=0x7cadc90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.768] wcscat (in: _Dest=0x7cadc90, _Source="no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" [0201.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cadc90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18 [0201.769] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0201.769] wcscmp (_String1="pl", _String2=".") returned 1 [0201.769] wcscmp (_String1="pl", _String2="..") returned 1 [0201.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cacd40 [0201.769] wcscpy (in: _Dest=0x7cacd40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.769] wcscat (in: _Dest=0x7cacd40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.770] wcscat (in: _Dest=0x7cacd40, _Source="pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" [0201.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cacd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b2c [0201.771] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0201.771] wcscmp (_String1="pt_BR", _String2=".") returned 1 [0201.771] wcscmp (_String1="pt_BR", _String2="..") returned 1 [0201.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cd6020 [0201.771] wcscpy (in: _Dest=0x7cd6020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.771] wcscat (in: _Dest=0x7cd6020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.771] wcscat (in: _Dest=0x7cd6020, _Source="pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" [0201.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cd6020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1908 [0201.772] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0201.772] wcscmp (_String1="pt_PT", _String2=".") returned 1 [0201.772] wcscmp (_String1="pt_PT", _String2="..") returned 1 [0201.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cd6838 [0201.772] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.772] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.772] wcscat (in: _Dest=0x7cd6838, _Source="pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" [0201.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cd6838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4 [0201.773] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0201.773] wcscmp (_String1="ro", _String2=".") returned 1 [0201.773] wcscmp (_String1="ro", _String2="..") returned 1 [0201.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cace58 [0201.773] wcscpy (in: _Dest=0x7cace58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.773] wcscat (in: _Dest=0x7cace58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.773] wcscat (in: _Dest=0x7cace58, _Source="ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" [0201.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cace58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114 [0201.774] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0201.774] wcscmp (_String1="ru", _String2=".") returned 1 [0201.774] wcscmp (_String1="ru", _String2="..") returned 1 [0201.774] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cac9f8 [0201.774] wcscpy (in: _Dest=0x7cac9f8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.774] wcscat (in: _Dest=0x7cac9f8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.774] wcscat (in: _Dest=0x7cac9f8, _Source="ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" [0201.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac9f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c [0201.775] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0201.775] wcscmp (_String1="sk", _String2=".") returned 1 [0201.775] wcscmp (_String1="sk", _String2="..") returned 1 [0201.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cac138 [0201.776] wcscpy (in: _Dest=0x7cac138, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.776] wcscat (in: _Dest=0x7cac138, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.776] wcscat (in: _Dest=0x7cac138, _Source="sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" [0201.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cac138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8 [0201.776] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0201.776] wcscmp (_String1="sl", _String2=".") returned 1 [0201.776] wcscmp (_String1="sl", _String2="..") returned 1 [0201.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cada60 [0201.777] wcscpy (in: _Dest=0x7cada60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.777] wcscat (in: _Dest=0x7cada60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.777] wcscat (in: _Dest=0x7cada60, _Source="sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" [0201.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cada60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4 [0201.778] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0201.778] wcscmp (_String1="sr", _String2=".") returned 1 [0201.778] wcscmp (_String1="sr", _String2="..") returned 1 [0201.778] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cad948 [0201.778] wcscpy (in: _Dest=0x7cad948, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.778] wcscat (in: _Dest=0x7cad948, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.778] wcscat (in: _Dest=0x7cad948, _Source="sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" [0201.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cad948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8 [0201.779] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0201.779] wcscmp (_String1="sv", _String2=".") returned 1 [0201.779] wcscmp (_String1="sv", _String2="..") returned 1 [0201.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cad830 [0201.779] wcscpy (in: _Dest=0x7cad830, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.779] wcscat (in: _Dest=0x7cad830, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.779] wcscat (in: _Dest=0x7cad830, _Source="sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" [0201.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cad830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc [0201.780] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0201.780] wcscmp (_String1="th", _String2=".") returned 1 [0201.780] wcscmp (_String1="th", _String2="..") returned 1 [0201.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cad4e8 [0201.780] wcscpy (in: _Dest=0x7cad4e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.780] wcscat (in: _Dest=0x7cad4e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.780] wcscat (in: _Dest=0x7cad4e8, _Source="th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" [0201.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cad4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4 [0201.781] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0201.781] wcscmp (_String1="tr", _String2=".") returned 1 [0201.781] wcscmp (_String1="tr", _String2="..") returned 1 [0201.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cad3d0 [0201.781] wcscpy (in: _Dest=0x7cad3d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.781] wcscat (in: _Dest=0x7cad3d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.781] wcscat (in: _Dest=0x7cad3d0, _Source="tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" [0201.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cad3d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0201.782] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0201.782] wcscmp (_String1="uk", _String2=".") returned 1 [0201.782] wcscmp (_String1="uk", _String2="..") returned 1 [0201.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cad718 [0201.782] wcscpy (in: _Dest=0x7cad718, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.783] wcscat (in: _Dest=0x7cad718, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.783] wcscat (in: _Dest=0x7cad718, _Source="uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" [0201.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cad718, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0 [0201.783] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0201.783] wcscmp (_String1="vi", _String2=".") returned 1 [0201.783] wcscmp (_String1="vi", _String2="..") returned 1 [0201.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x110) returned 0x7cad2b8 [0201.784] wcscpy (in: _Dest=0x7cad2b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.784] wcscat (in: _Dest=0x7cad2b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.784] wcscat (in: _Dest=0x7cad2b8, _Source="vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" [0201.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cad2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8 [0201.784] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0201.784] wcscmp (_String1="zh_CN", _String2=".") returned 1 [0201.785] wcscmp (_String1="zh_CN", _String2="..") returned 1 [0201.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cd6960 [0201.785] wcscpy (in: _Dest=0x7cd6960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.785] wcscat (in: _Dest=0x7cd6960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.785] wcscat (in: _Dest=0x7cd6960, _Source="zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" [0201.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cd6960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b68 [0201.785] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0201.786] wcscmp (_String1="zh_TW", _String2=".") returned 1 [0201.786] wcscmp (_String1="zh_TW", _String2="..") returned 1 [0201.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cd6a88 [0201.786] wcscpy (in: _Dest=0x7cd6a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales" [0201.786] wcscat (in: _Dest=0x7cd6a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\" [0201.786] wcscat (in: _Dest=0x7cd6a88, _Source="zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" [0201.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21cabd0, lpParameter=0x7cd6a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4 [0201.787] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a3d4f0 | out: lpFindFileData=0x7a3d4f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0201.787] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0201.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3d4f0) returned 1 [0201.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38930) returned 1 [0201.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a390d8) returned 1 Thread: id = 6702 os_tid = 0x1b58 [0195.608] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bc340 [0195.608] wcscpy (in: _Dest=0x30bc340, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0195.608] wcscat (in: _Dest=0x30bc340, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\" [0195.609] wcscat (in: _Dest=0x30bc340, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*" [0195.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a3ae70 [0195.609] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6905af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e1690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0195.610] wcscmp (_String1=".", _String2=".") returned 0 [0195.610] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6905af0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e1690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.610] wcscmp (_String1="..", _String2=".") returned 1 [0195.610] wcscmp (_String1="..", _String2="..") returned 0 [0195.610] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e1690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.610] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.610] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbe838 [0195.610] wcscpy (in: _Dest=0x7cbe838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" [0195.610] wcscat (in: _Dest=0x7cbe838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\" [0195.610] wcscat (in: _Dest=0x7cbe838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" [0199.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2314 [0199.611] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x7a3ae70 | out: lpFindFileData=0x7a3ae70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e1690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e1690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.611] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0199.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a3ae70) returned 1 [0199.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 [0199.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7bad8) returned 1 Thread: id = 6703 os_tid = 0x1b5c [0195.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bc448 [0195.611] wcscpy (in: _Dest=0x30bc448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0195.611] wcscat (in: _Dest=0x30bc448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\" [0195.611] wcscat (in: _Dest=0x30bc448, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*" [0195.611] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e03350 [0195.611] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x3e03350 | out: lpFindFileData=0x3e03350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6900cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69da160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69da160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0195.612] wcscmp (_String1=".", _String2=".") returned 0 [0195.612] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3e03350 | out: lpFindFileData=0x3e03350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6900cd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69da160, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69da160, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.612] wcscmp (_String1="..", _String2=".") returned 1 [0195.612] wcscmp (_String1="..", _String2="..") returned 0 [0195.612] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3e03350 | out: lpFindFileData=0x3e03350*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69da160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69dc870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0195.612] wcscmp (_String1="messages.json", _String2=".") returned 1 [0195.612] wcscmp (_String1="messages.json", _String2="..") returned 1 [0195.612] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbe5e8 [0195.612] wcscpy (in: _Dest=0x7cbe5e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" [0195.612] wcscat (in: _Dest=0x7cbe5e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\" [0195.612] wcscat (in: _Dest=0x7cbe5e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" [0199.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbe5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4 [0199.614] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3e03350 | out: lpFindFileData=0x3e03350*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69da160, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69dc870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.614] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0199.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03350) returned 1 [0199.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc448) returned 1 [0199.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd0a8) returned 1 Thread: id = 6704 os_tid = 0x2208 [0195.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x30bbe18 [0195.613] wcscpy (in: _Dest=0x30bbe18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0195.613] wcscat (in: _Dest=0x30bbe18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\" [0195.613] wcscat (in: _Dest=0x30bbe18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*" [0195.613] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e00800 [0195.613] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x3e00800 | out: lpFindFileData=0x3e00800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a1960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe694c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0200.342] wcscmp (_String1=".", _String2=".") returned 0 [0200.342] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3e00800 | out: lpFindFileData=0x3e00800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a1960, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe694c7c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.342] wcscmp (_String1="..", _String2=".") returned 1 [0200.342] wcscmp (_String1="..", _String2="..") returned 0 [0200.342] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3e00800 | out: lpFindFileData=0x3e00800*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe694c7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.342] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.342] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83918 [0200.342] wcscpy (in: _Dest=0x7b83918, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" [0200.342] wcscat (in: _Dest=0x7b83918, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\" [0200.343] wcscat (in: _Dest=0x7b83918, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" [0201.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18b0 [0201.829] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x3e00800 | out: lpFindFileData=0x3e00800*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe694c7c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe694c7c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.829] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0201.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00800) returned 1 [0201.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe18) returned 1 [0201.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5d8) returned 1 Thread: id = 6705 os_tid = 0x1b64 [0195.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f9d0 [0195.614] wcscpy (in: _Dest=0x7b7f9d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0195.614] wcscat (in: _Dest=0x7b7f9d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\" [0195.614] wcscat (in: _Dest=0x7b7f9d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*" [0195.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e00a68 [0195.614] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x3e00a68 | out: lpFindFileData=0x3e00a68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68844a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6922fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d180 [0203.423] wcscmp (_String1=".", _String2=".") returned 0 [0203.423] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3e00a68 | out: lpFindFileData=0x3e00a68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68844a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6922fb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.424] wcscmp (_String1="..", _String2=".") returned 1 [0203.424] wcscmp (_String1="..", _String2="..") returned 0 [0203.424] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3e00a68 | out: lpFindFileData=0x3e00a68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6922fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.424] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.424] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a66af8 [0203.424] wcscpy (in: _Dest=0x7a66af8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" [0203.424] wcscat (in: _Dest=0x7a66af8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\" [0203.424] wcscat (in: _Dest=0x7a66af8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" [0203.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c [0203.735] FindNextFileW (in: hFindFile=0x7a2d180, lpFindFileData=0x3e00a68 | out: lpFindFileData=0x3e00a68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6922fb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6922fb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.736] FindClose (in: hFindFile=0x7a2d180 | out: hFindFile=0x7a2d180) returned 1 [0203.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00a68) returned 1 [0203.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f9d0) returned 1 [0203.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc970) returned 1 Thread: id = 6706 os_tid = 0x251c [0195.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7e320 [0195.616] wcscpy (in: _Dest=0x7b7e320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0195.616] wcscat (in: _Dest=0x7b7e320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\" [0195.616] wcscat (in: _Dest=0x7b7e320, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*" [0195.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e00cd0 [0195.616] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x3e00cd0 | out: lpFindFileData=0x3e00cd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f97a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d0520, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d940 [0203.420] wcscmp (_String1=".", _String2=".") returned 0 [0203.420] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3e00cd0 | out: lpFindFileData=0x3e00cd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f97a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d0520, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.420] wcscmp (_String1="..", _String2=".") returned 1 [0203.420] wcscmp (_String1="..", _String2="..") returned 0 [0203.420] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3e00cd0 | out: lpFindFileData=0x3e00cd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d0520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.420] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.420] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a66530 [0203.420] wcscpy (in: _Dest=0x7a66530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" [0203.420] wcscat (in: _Dest=0x7a66530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\" [0203.420] wcscat (in: _Dest=0x7a66530, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" [0203.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c [0203.724] FindNextFileW (in: hFindFile=0x7a2d940, lpFindFileData=0x3e00cd0 | out: lpFindFileData=0x3e00cd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d0520, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d0520, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b4f9f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.724] FindClose (in: hFindFile=0x7a2d940 | out: hFindFile=0x7a2d940) returned 1 [0203.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00cd0) returned 1 [0203.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e320) returned 1 [0203.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb8f0) returned 1 Thread: id = 6707 os_tid = 0x2520 [0195.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7fad8 [0195.617] wcscpy (in: _Dest=0x7b7fad8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0195.617] wcscat (in: _Dest=0x7b7fad8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\" [0195.617] wcscat (in: _Dest=0x7b7fad8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*" [0195.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e00f38 [0195.617] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x3e00f38 | out: lpFindFileData=0x3e00f38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6897d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6940470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6940470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2ddc0 [0203.419] wcscmp (_String1=".", _String2=".") returned 0 [0203.419] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3e00f38 | out: lpFindFileData=0x3e00f38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6897d20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6940470, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6940470, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.419] wcscmp (_String1="..", _String2=".") returned 1 [0203.419] wcscmp (_String1="..", _String2="..") returned 0 [0203.419] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3e00f38 | out: lpFindFileData=0x3e00f38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6940470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6942b80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.419] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.419] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a66408 [0203.420] wcscpy (in: _Dest=0x7a66408, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" [0203.420] wcscat (in: _Dest=0x7a66408, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\" [0203.420] wcscat (in: _Dest=0x7a66408, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" [0203.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4 [0203.711] FindNextFileW (in: hFindFile=0x7a2ddc0, lpFindFileData=0x3e00f38 | out: lpFindFileData=0x3e00f38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6940470, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6942b80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.711] FindClose (in: hFindFile=0x7a2ddc0 | out: hFindFile=0x7a2ddc0) returned 1 [0203.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e00f38) returned 1 [0203.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fad8) returned 1 [0203.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb00) returned 1 Thread: id = 6708 os_tid = 0x2524 [0195.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7fbe0 [0195.618] wcscpy (in: _Dest=0x7b7fbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0195.618] wcscat (in: _Dest=0x7b7fbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\" [0195.618] wcscat (in: _Dest=0x7b7fbe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*" [0195.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e011a0 [0195.618] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x3e011a0 | out: lpFindFileData=0x3e011a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c1530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697adf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe697adf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d140 [0203.418] wcscmp (_String1=".", _String2=".") returned 0 [0203.418] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3e011a0 | out: lpFindFileData=0x3e011a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c1530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697adf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe697adf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.419] wcscmp (_String1="..", _String2=".") returned 1 [0203.419] wcscmp (_String1="..", _String2="..") returned 0 [0203.419] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3e011a0 | out: lpFindFileData=0x3e011a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe697adf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697d500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.419] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.419] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a662e0 [0203.419] wcscpy (in: _Dest=0x7a662e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" [0203.419] wcscat (in: _Dest=0x7a662e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\" [0203.419] wcscat (in: _Dest=0x7a662e0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" [0203.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a662e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8 [0203.709] FindNextFileW (in: hFindFile=0x7a2d140, lpFindFileData=0x3e011a0 | out: lpFindFileData=0x3e011a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe697adf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe697d500, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.709] FindClose (in: hFindFile=0x7a2d140 | out: hFindFile=0x7a2d140) returned 1 [0203.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e011a0) returned 1 [0203.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fbe0) returned 1 [0203.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb7e8) returned 1 Thread: id = 6709 os_tid = 0x2528 [0195.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7fce8 [0195.618] wcscpy (in: _Dest=0x7b7fce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0195.618] wcscat (in: _Dest=0x7b7fce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\" [0195.618] wcscat (in: _Dest=0x7b7fce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*" [0195.618] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e01408 [0195.619] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x3e01408 | out: lpFindFileData=0x3e01408*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f4980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c8ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d240 [0203.418] wcscmp (_String1=".", _String2=".") returned 0 [0203.418] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3e01408 | out: lpFindFileData=0x3e01408*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68f4980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c8ff0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.418] wcscmp (_String1="..", _String2=".") returned 1 [0203.418] wcscmp (_String1="..", _String2="..") returned 0 [0203.418] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3e01408 | out: lpFindFileData=0x3e01408*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c8ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.418] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.418] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a661b8 [0203.418] wcscpy (in: _Dest=0x7a661b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" [0203.418] wcscat (in: _Dest=0x7a661b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\" [0203.418] wcscat (in: _Dest=0x7a661b8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" [0203.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a661b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b8 [0203.707] FindNextFileW (in: hFindFile=0x7a2d240, lpFindFileData=0x3e01408 | out: lpFindFileData=0x3e01408*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c8ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c8ff0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.707] FindClose (in: hFindFile=0x7a2d240 | out: hFindFile=0x7a2d240) returned 1 [0203.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01408) returned 1 [0203.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7fce8) returned 1 [0203.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcd90) returned 1 Thread: id = 6710 os_tid = 0x252c [0195.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7e530 [0195.619] wcscpy (in: _Dest=0x7b7e530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0195.619] wcscat (in: _Dest=0x7b7e530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\" [0195.619] wcscat (in: _Dest=0x7b7e530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*" [0195.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e01670 [0195.619] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x3e01670 | out: lpFindFileData=0x3e01670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe688b9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692f300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0200.341] wcscmp (_String1=".", _String2=".") returned 0 [0200.341] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3e01670 | out: lpFindFileData=0x3e01670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe688b9d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692f300, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.341] wcscmp (_String1="..", _String2=".") returned 1 [0200.341] wcscmp (_String1="..", _String2="..") returned 0 [0200.341] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3e01670 | out: lpFindFileData=0x3e01670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692f300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.341] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.341] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b82320 [0200.341] wcscpy (in: _Dest=0x7b82320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" [0200.341] wcscat (in: _Dest=0x7b82320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\" [0200.341] wcscat (in: _Dest=0x7b82320, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" [0201.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54 [0201.827] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x3e01670 | out: lpFindFileData=0x3e01670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692f300, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692f300, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.827] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0201.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01670) returned 1 [0201.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e530) returned 1 [0201.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcb80) returned 1 Thread: id = 6711 os_tid = 0x2530 [0195.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7e848 [0195.620] wcscpy (in: _Dest=0x7b7e848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0195.620] wcscat (in: _Dest=0x7b7e848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\" [0195.620] wcscat (in: _Dest=0x7b7e848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*" [0195.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e018d8 [0195.620] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x3e018d8 | out: lpFindFileData=0x3e018d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b78f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69711b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dbc0 [0203.417] wcscmp (_String1=".", _String2=".") returned 0 [0203.417] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3e018d8 | out: lpFindFileData=0x3e018d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b78f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69711b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.417] wcscmp (_String1="..", _String2=".") returned 1 [0203.417] wcscmp (_String1="..", _String2="..") returned 0 [0203.417] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3e018d8 | out: lpFindFileData=0x3e018d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69711b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.417] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.417] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a66090 [0203.417] wcscpy (in: _Dest=0x7a66090, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" [0203.418] wcscat (in: _Dest=0x7a66090, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\" [0203.418] wcscat (in: _Dest=0x7a66090, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" [0203.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b4 [0203.705] FindNextFileW (in: hFindFile=0x7a2dbc0, lpFindFileData=0x3e018d8 | out: lpFindFileData=0x3e018d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69711b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69711b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.705] FindClose (in: hFindFile=0x7a2dbc0 | out: hFindFile=0x7a2dbc0) returned 1 [0203.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e018d8) returned 1 [0203.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e848) returned 1 [0203.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd1b0) returned 1 Thread: id = 6712 os_tid = 0x1fbc [0195.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x100) returned 0x7b7e638 [0195.621] wcscpy (in: _Dest=0x7b7e638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0195.621] wcscat (in: _Dest=0x7b7e638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\" [0195.621] wcscat (in: _Dest=0x7b7e638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*" [0195.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e01b40 [0195.621] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x3e01b40 | out: lpFindFileData=0x3e01b40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68dc2e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a6d10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df80 [0203.416] wcscmp (_String1=".", _String2=".") returned 0 [0203.416] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3e01b40 | out: lpFindFileData=0x3e01b40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68dc2e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a6d10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.416] wcscmp (_String1="..", _String2=".") returned 1 [0203.417] wcscmp (_String1="..", _String2="..") returned 0 [0203.417] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3e01b40 | out: lpFindFileData=0x3e01b40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a6d10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.417] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.417] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x118) returned 0x7ca9ab8 [0203.417] wcscpy (in: _Dest=0x7ca9ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" [0203.417] wcscat (in: _Dest=0x7ca9ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\" [0203.417] wcscat (in: _Dest=0x7ca9ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" [0203.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7ca9ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22b0 [0203.703] FindNextFileW (in: hFindFile=0x7a2df80, lpFindFileData=0x3e01b40 | out: lpFindFileData=0x3e01b40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a6d10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a6d10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.703] FindClose (in: hFindFile=0x7a2df80 | out: hFindFile=0x7a2df80) returned 1 [0203.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01b40) returned 1 [0203.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e638) returned 1 [0203.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbf20) returned 1 Thread: id = 6713 os_tid = 0x1fc0 [0195.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f7c0 [0195.621] wcscpy (in: _Dest=0x7b7f7c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0195.622] wcscat (in: _Dest=0x7b7f7c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\" [0195.622] wcscat (in: _Dest=0x7b7f7c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*" [0195.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e030e8 [0195.622] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x3e030e8 | out: lpFindFileData=0x3e030e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a6780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69515e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d040 [0203.423] wcscmp (_String1=".", _String2=".") returned 0 [0203.423] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3e030e8 | out: lpFindFileData=0x3e030e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68a6780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69515e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.423] wcscmp (_String1="..", _String2=".") returned 1 [0203.423] wcscmp (_String1="..", _String2="..") returned 0 [0203.423] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3e030e8 | out: lpFindFileData=0x3e030e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69515e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.423] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.423] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a669d0 [0203.423] wcscpy (in: _Dest=0x7a669d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" [0203.423] wcscat (in: _Dest=0x7a669d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\" [0203.423] wcscat (in: _Dest=0x7a669d0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" [0203.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a669d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174 [0203.733] FindNextFileW (in: hFindFile=0x7a2d040, lpFindFileData=0x3e030e8 | out: lpFindFileData=0x3e030e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69515e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69515e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.733] FindClose (in: hFindFile=0x7a2d040 | out: hFindFile=0x7a2d040) returned 1 [0203.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e030e8) returned 1 [0203.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f7c0) returned 1 [0203.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcfa0) returned 1 Thread: id = 6714 os_tid = 0x1fc4 [0195.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7e740 [0195.622] wcscpy (in: _Dest=0x7b7e740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0195.622] wcscat (in: _Dest=0x7b7e740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\" [0195.622] wcscat (in: _Dest=0x7b7e740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*" [0195.622] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e01da8 [0195.622] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x3e01da8 | out: lpFindFileData=0x3e01da8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6881d90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe691e190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0203.422] wcscmp (_String1=".", _String2=".") returned 0 [0203.422] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3e01da8 | out: lpFindFileData=0x3e01da8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6881d90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe691e190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.422] wcscmp (_String1="..", _String2=".") returned 1 [0203.422] wcscmp (_String1="..", _String2="..") returned 0 [0203.422] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3e01da8 | out: lpFindFileData=0x3e01da8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe691e190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.422] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.422] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a668a8 [0203.422] wcscpy (in: _Dest=0x7a668a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" [0203.422] wcscat (in: _Dest=0x7a668a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\" [0203.422] wcscat (in: _Dest=0x7a668a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" [0203.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a668a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4 [0203.731] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x3e01da8 | out: lpFindFileData=0x3e01da8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe691e190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe691e190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.731] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e01da8) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e740) returned 1 [0203.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bce98) returned 1 Thread: id = 6715 os_tid = 0x1fc8 [0195.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f5b0 [0195.623] wcscpy (in: _Dest=0x7b7f5b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0195.623] wcscat (in: _Dest=0x7b7f5b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\" [0195.623] wcscat (in: _Dest=0x7b7f5b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*" [0195.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e02010 [0195.623] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x3e02010 | out: lpFindFileData=0x3e02010*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68bc710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6975fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d400 [0203.416] wcscmp (_String1=".", _String2=".") returned 0 [0203.416] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3e02010 | out: lpFindFileData=0x3e02010*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68bc710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6975fd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.416] wcscmp (_String1="..", _String2=".") returned 1 [0203.416] wcscmp (_String1="..", _String2="..") returned 0 [0203.416] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3e02010 | out: lpFindFileData=0x3e02010*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6975fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.416] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.416] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d555f0 [0203.416] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" [0203.416] wcscat (in: _Dest=0x3d555f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\" [0203.416] wcscat (in: _Dest=0x3d555f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" [0203.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d555f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10 [0203.701] FindNextFileW (in: hFindFile=0x7a2d400, lpFindFileData=0x3e02010 | out: lpFindFileData=0x3e02010*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6975fd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6975fd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b52100, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.701] FindClose (in: hFindFile=0x7a2d400 | out: hFindFile=0x7a2d400) returned 1 [0203.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02010) returned 1 [0203.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f5b0) returned 1 [0203.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd2b8) returned 1 Thread: id = 6716 os_tid = 0x1fd0 [0195.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f4a8 [0195.624] wcscpy (in: _Dest=0x7b7f4a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0195.624] wcscat (in: _Dest=0x7b7f4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\" [0195.624] wcscat (in: _Dest=0x7b7f4a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*" [0195.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e02278 [0195.624] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x3e02278 | out: lpFindFileData=0x3e02278*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68892c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692a4e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da00 [0203.421] wcscmp (_String1=".", _String2=".") returned 0 [0203.421] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3e02278 | out: lpFindFileData=0x3e02278*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68892c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe692a4e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.421] wcscmp (_String1="..", _String2=".") returned 1 [0203.421] wcscmp (_String1="..", _String2="..") returned 0 [0203.421] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3e02278 | out: lpFindFileData=0x3e02278*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692a4e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.421] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.421] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a66780 [0203.422] wcscpy (in: _Dest=0x7a66780, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" [0203.422] wcscat (in: _Dest=0x7a66780, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\" [0203.422] wcscat (in: _Dest=0x7a66780, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" [0203.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28 [0203.729] FindNextFileW (in: hFindFile=0x7a2da00, lpFindFileData=0x3e02278 | out: lpFindFileData=0x3e02278*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe692a4e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe692a4e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.729] FindClose (in: hFindFile=0x7a2da00 | out: hFindFile=0x7a2da00) returned 1 [0203.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02278) returned 1 [0203.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f4a8) returned 1 [0203.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc760) returned 1 Thread: id = 6717 os_tid = 0x201c [0195.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f3a0 [0195.625] wcscpy (in: _Dest=0x7b7f3a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0195.625] wcscat (in: _Dest=0x7b7f3a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\" [0195.625] wcscat (in: _Dest=0x7b7f3a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*" [0195.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e024e0 [0195.625] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x3e024e0 | out: lpFindFileData=0x3e024e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690a910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e3da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d0c0 [0203.421] wcscmp (_String1=".", _String2=".") returned 0 [0203.421] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3e024e0 | out: lpFindFileData=0x3e024e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690a910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e3da0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.421] wcscmp (_String1="..", _String2=".") returned 1 [0203.421] wcscmp (_String1="..", _String2="..") returned 0 [0203.421] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3e024e0 | out: lpFindFileData=0x3e024e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e3da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.421] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.421] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a66658 [0203.421] wcscpy (in: _Dest=0x7a66658, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" [0203.421] wcscat (in: _Dest=0x7a66658, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\" [0203.421] wcscat (in: _Dest=0x7a66658, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" [0203.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0 [0203.726] FindNextFileW (in: hFindFile=0x7a2d0c0, lpFindFileData=0x3e024e0 | out: lpFindFileData=0x3e024e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e3da0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e3da0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.726] FindClose (in: hFindFile=0x7a2d0c0 | out: hFindFile=0x7a2d0c0) returned 1 [0203.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e024e0) returned 1 [0203.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f3a0) returned 1 [0203.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcc88) returned 1 Thread: id = 6718 os_tid = 0x2038 [0195.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7f298 [0195.626] wcscpy (in: _Dest=0x7b7f298, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" [0195.626] wcscat (in: _Dest=0x7b7f298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\" [0195.626] wcscat (in: _Dest=0x7b7f298, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*" [0195.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e02748 [0195.626] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x3e02748 | out: lpFindFileData=0x3e02748*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6911e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f00f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc40 [0203.415] wcscmp (_String1=".", _String2=".") returned 0 [0203.415] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3e02748 | out: lpFindFileData=0x3e02748*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6911e40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69f00f0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.415] wcscmp (_String1="..", _String2=".") returned 1 [0203.415] wcscmp (_String1="..", _String2="..") returned 0 [0203.415] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3e02748 | out: lpFindFileData=0x3e02748*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f00f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.415] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.415] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbf4f0 [0203.415] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" [0203.415] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\" [0203.415] wcscat (in: _Dest=0x7cbf4f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" [0203.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf4f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44 [0203.698] FindNextFileW (in: hFindFile=0x7a2dc40, lpFindFileData=0x3e02748 | out: lpFindFileData=0x3e02748*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69f00f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69f00f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.698] FindClose (in: hFindFile=0x7a2dc40 | out: hFindFile=0x7a2dc40) returned 1 [0203.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02748) returned 1 [0203.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f298) returned 1 [0203.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc868) returned 1 Thread: id = 6719 os_tid = 0x2618 [0195.626] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7bce8 [0195.627] wcscpy (in: _Dest=0x7b7bce8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" [0195.627] wcscat (in: _Dest=0x7b7bce8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\" [0195.627] wcscat (in: _Dest=0x7b7bce8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*" [0195.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e029b0 [0195.627] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x3e029b0 | out: lpFindFileData=0x3e029b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68fe5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d5340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d280 [0203.414] wcscmp (_String1=".", _String2=".") returned 0 [0203.414] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3e029b0 | out: lpFindFileData=0x3e029b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68fe5c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69d5340, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.414] wcscmp (_String1="..", _String2=".") returned 1 [0203.414] wcscmp (_String1="..", _String2="..") returned 0 [0203.414] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3e029b0 | out: lpFindFileData=0x3e029b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d5340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.414] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.414] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbf618 [0203.415] wcscpy (in: _Dest=0x7cbf618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" [0203.415] wcscat (in: _Dest=0x7cbf618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\" [0203.415] wcscat (in: _Dest=0x7cbf618, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" [0203.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c [0203.696] FindNextFileW (in: hFindFile=0x7a2d280, lpFindFileData=0x3e029b0 | out: lpFindFileData=0x3e029b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69d5340, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69d5340, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.696] FindClose (in: hFindFile=0x7a2d280 | out: hFindFile=0x7a2d280) returned 1 [0203.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e029b0) returned 1 [0203.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7bce8) returned 1 [0203.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc130) returned 1 Thread: id = 6720 os_tid = 0x2628 [0195.627] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ac68 [0195.628] wcscpy (in: _Dest=0x7b7ac68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" [0195.628] wcscat (in: _Dest=0x7b7ac68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\" [0195.628] wcscat (in: _Dest=0x7b7ac68, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*" [0195.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e02c18 [0195.628] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x3e02c18 | out: lpFindFileData=0x3e02c18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c8a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6989850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d540 [0203.413] wcscmp (_String1=".", _String2=".") returned 0 [0203.414] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x3e02c18 | out: lpFindFileData=0x3e02c18*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c8a60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6989850, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.414] wcscmp (_String1="..", _String2=".") returned 1 [0203.414] wcscmp (_String1="..", _String2="..") returned 0 [0203.414] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x3e02c18 | out: lpFindFileData=0x3e02c18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6989850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.414] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.414] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.414] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbf3c8 [0203.414] wcscpy (in: _Dest=0x7cbf3c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" [0203.414] wcscat (in: _Dest=0x7cbf3c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\" [0203.414] wcscat (in: _Dest=0x7cbf3c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" [0203.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40 [0203.694] FindNextFileW (in: hFindFile=0x7a2d540, lpFindFileData=0x3e02c18 | out: lpFindFileData=0x3e02c18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6989850, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6989850, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.694] FindClose (in: hFindFile=0x7a2d540 | out: hFindFile=0x7a2d540) returned 1 [0203.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02c18) returned 1 [0203.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ac68) returned 1 [0203.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd10) returned 1 Thread: id = 6721 os_tid = 0x233c [0195.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b9d0 [0195.628] wcscpy (in: _Dest=0x7b7b9d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" [0195.628] wcscat (in: _Dest=0x7b7b9d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\" [0195.629] wcscat (in: _Dest=0x7b7b9d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*" [0195.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e02e80 [0195.629] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x3e02e80 | out: lpFindFileData=0x3e02e80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d74c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a1ef0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d740 [0203.413] wcscmp (_String1=".", _String2=".") returned 0 [0203.413] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3e02e80 | out: lpFindFileData=0x3e02e80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d74c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69a1ef0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.413] wcscmp (_String1="..", _String2=".") returned 1 [0203.413] wcscmp (_String1="..", _String2="..") returned 0 [0203.413] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3e02e80 | out: lpFindFileData=0x3e02e80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a1ef0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.413] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.413] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbfe30 [0203.413] wcscpy (in: _Dest=0x7cbfe30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" [0203.413] wcscat (in: _Dest=0x7cbfe30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\" [0203.413] wcscat (in: _Dest=0x7cbfe30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" [0203.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbfe30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60 [0203.692] FindNextFileW (in: hFindFile=0x7a2d740, lpFindFileData=0x3e02e80 | out: lpFindFileData=0x3e02e80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69a1ef0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69a1ef0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.692] FindClose (in: hFindFile=0x7a2d740 | out: hFindFile=0x7a2d740) returned 1 [0203.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e02e80) returned 1 [0203.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b9d0) returned 1 [0203.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc08) returned 1 Thread: id = 6722 os_tid = 0x2340 [0195.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7c108 [0195.629] wcscpy (in: _Dest=0x7b7c108, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" [0195.629] wcscat (in: _Dest=0x7b7c108, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\" [0195.629] wcscat (in: _Dest=0x7b7c108, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*" [0195.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e03820 [0195.630] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x3e03820 | out: lpFindFileData=0x3e03820*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cff90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6995ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d580 [0203.426] wcscmp (_String1=".", _String2=".") returned 0 [0203.426] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x3e03820 | out: lpFindFileData=0x3e03820*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cff90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6995ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.426] wcscmp (_String1="..", _String2=".") returned 1 [0203.426] wcscmp (_String1="..", _String2="..") returned 0 [0203.426] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x3e03820 | out: lpFindFileData=0x3e03820*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6995ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.426] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.426] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a66e70 [0203.426] wcscpy (in: _Dest=0x7a66e70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" [0203.426] wcscat (in: _Dest=0x7a66e70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\" [0203.426] wcscat (in: _Dest=0x7a66e70, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" [0203.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c04 [0203.743] FindNextFileW (in: hFindFile=0x7a2d580, lpFindFileData=0x3e03820 | out: lpFindFileData=0x3e03820*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6995ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6995ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.743] FindClose (in: hFindFile=0x7a2d580 | out: hFindFile=0x7a2d580) returned 1 [0203.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03820) returned 1 [0203.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c108) returned 1 [0203.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb9f8) returned 1 Thread: id = 6723 os_tid = 0x2654 [0195.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a638 [0195.630] wcscpy (in: _Dest=0x7b7a638, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" [0195.630] wcscat (in: _Dest=0x7b7a638, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\" [0195.630] wcscat (in: _Dest=0x7b7a638, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*" [0195.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3e035b8 [0195.630] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x3e035b8 | out: lpFindFileData=0x3e035b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6895610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe693b650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d380 [0203.425] wcscmp (_String1=".", _String2=".") returned 0 [0203.425] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3e035b8 | out: lpFindFileData=0x3e035b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe6895610, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe693b650, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.425] wcscmp (_String1="..", _String2=".") returned 1 [0203.425] wcscmp (_String1="..", _String2="..") returned 0 [0203.425] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3e035b8 | out: lpFindFileData=0x3e035b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe693b650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.425] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.425] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a66d48 [0203.425] wcscpy (in: _Dest=0x7a66d48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" [0203.425] wcscat (in: _Dest=0x7a66d48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\" [0203.425] wcscat (in: _Dest=0x7a66d48, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" [0203.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c00 [0203.740] FindNextFileW (in: hFindFile=0x7a2d380, lpFindFileData=0x3e035b8 | out: lpFindFileData=0x3e035b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe693b650, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe693b650, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.740] FindClose (in: hFindFile=0x7a2d380 | out: hFindFile=0x7a2d380) returned 1 [0203.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e035b8) returned 1 [0203.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a638) returned 1 [0203.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb6e0) returned 1 Thread: id = 6724 os_tid = 0x265c [0195.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a530 [0195.631] wcscpy (in: _Dest=0x7b7a530, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" [0195.631] wcscat (in: _Dest=0x7b7a530, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\" [0195.631] wcscat (in: _Dest=0x7b7a530, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*" [0195.631] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2e28 [0195.631] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cb170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe698e670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe698e670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf510 [0203.430] wcscmp (_String1=".", _String2=".") returned 0 [0203.431] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68cb170, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe698e670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe698e670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.431] wcscmp (_String1="..", _String2=".") returned 1 [0203.431] wcscmp (_String1="..", _String2="..") returned 0 [0203.431] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe698e670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6990d80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.431] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.431] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a670c0 [0203.431] wcscpy (in: _Dest=0x7a670c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" [0203.431] wcscat (in: _Dest=0x7a670c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\" [0203.431] wcscat (in: _Dest=0x7a670c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" [0203.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a670c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8 [0203.748] FindNextFileW (in: hFindFile=0x3dcf510, lpFindFileData=0x3ef2e28 | out: lpFindFileData=0x3ef2e28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe698e670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6990d80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.748] FindClose (in: hFindFile=0x3dcf510 | out: hFindFile=0x3dcf510) returned 1 [0203.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2e28) returned 1 [0203.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a530) returned 1 [0203.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc028) returned 1 Thread: id = 6725 os_tid = 0x205c [0195.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7bdf0 [0195.632] wcscpy (in: _Dest=0x7b7bdf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" [0195.632] wcscat (in: _Dest=0x7b7bdf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\" [0195.632] wcscat (in: _Dest=0x7b7bdf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*" [0195.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4fd8 [0195.632] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d4db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe699a9c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de40 [0203.424] wcscmp (_String1=".", _String2=".") returned 0 [0203.424] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68d4db0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe699a9c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.424] wcscmp (_String1="..", _String2=".") returned 1 [0203.424] wcscmp (_String1="..", _String2="..") returned 0 [0203.424] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe699a9c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.424] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.424] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a66c20 [0203.425] wcscpy (in: _Dest=0x7a66c20, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" [0203.425] wcscat (in: _Dest=0x7a66c20, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\" [0203.425] wcscat (in: _Dest=0x7a66c20, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" [0203.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2208 [0203.738] FindNextFileW (in: hFindFile=0x7a2de40, lpFindFileData=0x3ef4fd8 | out: lpFindFileData=0x3ef4fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe699a9c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe699a9c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.738] FindClose (in: hFindFile=0x7a2de40 | out: hFindFile=0x7a2de40) returned 1 [0203.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4fd8) returned 1 [0203.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7bdf0) returned 1 [0203.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 Thread: id = 6726 os_tid = 0x2660 [0195.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a38a48 [0195.633] wcscpy (in: _Dest=0x7a38a48, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" [0195.633] wcscat (in: _Dest=0x7a38a48, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\" [0195.633] wcscat (in: _Dest=0x7a38a48, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*" [0195.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef26f0 [0195.633] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e8630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b7e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dd0010 [0203.431] wcscmp (_String1=".", _String2=".") returned 0 [0203.431] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e8630, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b7e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.432] wcscmp (_String1="..", _String2=".") returned 1 [0203.432] wcscmp (_String1="..", _String2="..") returned 0 [0203.432] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b7e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.432] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.432] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7a671e8 [0203.432] wcscpy (in: _Dest=0x7a671e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" [0203.432] wcscat (in: _Dest=0x7a671e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\" [0203.432] wcscat (in: _Dest=0x7a671e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" [0203.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a671e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e4 [0203.751] FindNextFileW (in: hFindFile=0x3dd0010, lpFindFileData=0x3ef26f0 | out: lpFindFileData=0x3ef26f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b7e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b7e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b54810, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.751] FindClose (in: hFindFile=0x3dd0010 | out: hFindFile=0x3dd0010) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef26f0) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38a48) returned 1 [0203.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc658) returned 1 Thread: id = 6727 os_tid = 0x8fc [0197.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cadec0 [0197.803] wcscpy (in: _Dest=0x7cadec0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" [0197.803] wcscat (in: _Dest=0x7cadec0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\" [0197.803] wcscat (in: _Dest=0x7cadec0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*" [0197.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52c98 [0197.803] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6956400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6956400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d6c0 [0203.428] wcscmp (_String1=".", _String2=".") returned 0 [0203.428] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6956400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6956400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.428] wcscmp (_String1="..", _String2=".") returned 1 [0203.428] wcscmp (_String1="..", _String2="..") returned 0 [0203.428] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6956400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6958b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.429] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.429] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7a66f98 [0203.429] wcscpy (in: _Dest=0x7a66f98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" [0203.429] wcscat (in: _Dest=0x7a66f98, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\" [0203.429] wcscat (in: _Dest=0x7a66f98, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" [0203.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a66f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094 [0203.746] FindNextFileW (in: hFindFile=0x7a2d6c0, lpFindFileData=0x7a52c98 | out: lpFindFileData=0x7a52c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6956400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6958b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.746] FindClose (in: hFindFile=0x7a2d6c0 | out: hFindFile=0x7a2d6c0) returned 1 [0203.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52c98) returned 1 [0203.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadec0) returned 1 [0203.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc550) returned 1 Thread: id = 6728 os_tid = 0x1b68 [0197.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif")) returned 0x20 [0197.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0197.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.805] GetLastError () returned 0x5 [0197.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0197.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 6729 os_tid = 0x220c [0197.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif")) returned 0x20 [0197.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0197.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0197.806] GetLastError () returned 0x5 [0197.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0197.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 6730 os_tid = 0x1b6c [0197.808] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json")) returned 0x2020 [0197.808] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0207.267] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1610 [0207.267] GetFileSizeEx (in: hFile=0x1610, lpFileSize=0xc2af7ec | out: lpFileSize=0xc2af7ec*=778) returned 1 [0207.267] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x306, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.267] ReadFile (in: hFile=0x1610, lpBuffer=0xc2af7c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc2af7d8, lpOverlapped=0x0 | out: lpBuffer=0xc2af7c8*, lpNumberOfBytesRead=0xc2af7d8*=0x4, lpOverlapped=0x0) returned 1 [0207.320] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0207.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0207.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0207.320] NtQuerySystemTime (in: CurrentTime=0xc2af760 | out: CurrentTime=0xc2af760*=132462177859032000) returned 0x0 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x3c12d1b3 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x1624ac87 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x335bde84 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x7be7df63 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x73467782 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x3c885c79 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x49726017 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x59c20350 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x26af30bf [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x46ad4125 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x580a4f5d [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x4510d1a7 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x448c95f6 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x1cd06a18 [0207.320] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x62ad19f7 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x5d397040 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x26dbbec4 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x62ad19f7 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x18013510 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x78cc99eb [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x53bb8850 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x46ad4125 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x1cdaa449 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x2b1113e1 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x70c73c9e [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x55748378 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x64eaeef [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x551fa9b8 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x71dc882f [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x62f2d299 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x51e52624 [0207.321] RtlRandomEx (in: Seed=0xc2af758 | out: Seed=0xc2af758) returned 0x45a69aa6 [0207.329] ReadFile (in: hFile=0x1610, lpBuffer=0x7bb17b8, nNumberOfBytesToRead=0x30a, lpNumberOfBytesRead=0xc2af754, lpOverlapped=0x0 | out: lpBuffer=0x7bb17b8*, lpNumberOfBytesRead=0xc2af754*=0x30a, lpOverlapped=0x0) returned 1 [0207.329] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.329] WriteFile (in: hFile=0x1610, lpBuffer=0x7bb53c0*, nNumberOfBytesToWrite=0x30a, lpNumberOfBytesWritten=0xc2af758, lpOverlapped=0x0 | out: lpBuffer=0x7bb53c0*, lpNumberOfBytesWritten=0xc2af758*=0x30a, lpOverlapped=0x0) returned 1 [0216.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc60 [0216.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0216.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dc88) returned 1 [0216.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb53c0) returned 1 [0216.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb17b8) returned 1 [0216.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0216.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0216.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37bc0 [0216.117] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.117] WriteFile (in: hFile=0x1610, lpBuffer=0x7ddb980*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc2af7e0, lpOverlapped=0x0 | out: lpBuffer=0x7ddb980*, lpNumberOfBytesWritten=0xc2af7e0*=0x10c, lpOverlapped=0x0) returned 1 [0218.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e90 [0218.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e90) returned 1 [0218.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e90 [0218.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e539e0 [0218.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a30 [0218.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a30) returned 1 [0218.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.363] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="08") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="cb") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="29") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="2e") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="db") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="70") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="65") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="5a") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="12") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="73") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="ce") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="3c") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="2b") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="9e") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="9a") returned 2 [0218.363] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="52") returned 2 [0218.364] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="c5") returned 2 [0218.364] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="51") returned 2 [0218.364] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="47") returned 2 [0218.364] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="db") returned 2 [0218.364] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="9a") returned 2 [0218.364] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="0c") returned 2 [0218.364] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="46") returned 2 [0218.364] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="e9") returned 2 [0218.364] RtlInitAnsiString (in: DestinationString=0xc2af768, SourceString="08cb292edb7065caca5a1273ce3c2b9e9a52c55147db9a0c46e9" | out: DestinationString="08cb292edb7065caca5a1273ce3c2b9e9a52c55147db9a0c46e9") [0218.364] RtlAnsiStringToUnicodeString (in: DestinationString=0xc2af760, SourceString="08cb292edb7065caca5a1273ce3c2b9e9a52c55147db9a0c46e9", AllocateDestinationString=1 | out: DestinationString="08cb292edb7065caca5a1273ce3c2b9e9a52c55147db9a0c46e9") returned 0x0 [0218.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c6a8 [0224.873] __SEH_epilog4 () [0224.873] CloseHandle (hObject=0x1434) returned 1 [0224.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e6a8) returned 1 [0224.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb5178) returned 1 Thread: id = 6731 os_tid = 0x2210 [0197.809] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json")) returned 0x2020 [0197.809] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0207.264] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2418 [0207.265] GetFileSizeEx (in: hFile=0x2418, lpFileSize=0xc37f8fc | out: lpFileSize=0xc37f8fc*=622) returned 1 [0207.265] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0x26a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.265] ReadFile (in: hFile=0x2418, lpBuffer=0xc37f8d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xc37f8e8, lpOverlapped=0x0 | out: lpBuffer=0xc37f8d8*, lpNumberOfBytesRead=0xc37f8e8*=0x4, lpOverlapped=0x0) returned 1 [0207.310] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0207.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0207.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0207.311] NtQuerySystemTime (in: CurrentTime=0xc37f870 | out: CurrentTime=0xc37f870*=132462177858876000) returned 0x0 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x2b65e8f0 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x60b62fdd [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x310c6dc9 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x6314e191 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x16f67cbb [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x8882384 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0xfd42c58 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x63dfb262 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x46f3dad6 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x47b20996 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x652f45a7 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x65c689cc [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x2cc8360e [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x1e728c65 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x757b532d [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x77c64aa4 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x62f2d299 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x27083e06 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x74c1a1d1 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x40d87c9e [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x7232dfda [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x5af1cc19 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x638a5a74 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x1504f571 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x78a0729d [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0xff5e0e2 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0xaed30f4 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x45a38e [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x16f67cbb [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x36484b47 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x58ba1267 [0207.311] RtlRandomEx (in: Seed=0xc37f868 | out: Seed=0xc37f868) returned 0x7cb215e7 [0207.319] ReadFile (in: hFile=0x2418, lpBuffer=0x7ba9fa8, nNumberOfBytesToRead=0x26e, lpNumberOfBytesRead=0xc37f864, lpOverlapped=0x0 | out: lpBuffer=0x7ba9fa8*, lpNumberOfBytesRead=0xc37f864*=0x26e, lpOverlapped=0x0) returned 1 [0207.319] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.319] WriteFile (in: hFile=0x2418, lpBuffer=0x7badbb0*, nNumberOfBytesToWrite=0x26e, lpNumberOfBytesWritten=0xc37f868, lpOverlapped=0x0 | out: lpBuffer=0x7badbb0*, lpNumberOfBytesWritten=0xc37f868*=0x26e, lpOverlapped=0x0) returned 1 [0212.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0212.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0212.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0212.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7badbb0) returned 1 [0212.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba9fa8) returned 1 [0212.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cd38) returned 1 [0212.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdec8) returned 1 [0212.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3240 [0212.825] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.825] WriteFile (in: hFile=0x2418, lpBuffer=0x7cd2250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc37f8f0, lpOverlapped=0x0 | out: lpBuffer=0x7cd2250*, lpNumberOfBytesWritten=0xc37f8f0*=0x10c, lpOverlapped=0x0) returned 1 [0215.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d418d8 [0215.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c2e8 [0215.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0215.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0215.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bf50 [0215.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0215.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0215.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cce8) returned 1 [0215.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c2e8) returned 1 [0215.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d418d8) returned 1 [0215.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0215.099] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="63") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="9a") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="46") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="4f") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="dd") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="89") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="aa") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="78") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="11") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="76") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="f6") returned 2 [0215.099] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="44") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="0f") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="44") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="72") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="c4") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="ab") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="5c") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="cc") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="5b") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="ab") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="e1") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="6b") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="94") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="53") returned 2 [0215.100] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="3d") returned 2 [0215.100] RtlInitAnsiString (in: DestinationString=0xc37f878, SourceString="639a464fdd89aa781176f6440f4472c4ab5ccc5babe16b94533d" | out: DestinationString="639a464fdd89aa781176f6440f4472c4ab5ccc5babe16b94533d") [0215.100] RtlAnsiStringToUnicodeString (in: DestinationString=0xc37f870, SourceString="639a464fdd89aa781176f6440f4472c4ab5ccc5babe16b94533d", AllocateDestinationString=1 | out: DestinationString="639a464fdd89aa781176f6440f4472c4ab5ccc5babe16b94533d") returned 0x0 [0215.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c180 Thread: id = 6732 os_tid = 0x1b74 [0197.810] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json")) returned 0x2020 [0197.810] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0207.262] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1718 [0207.263] GetFileSizeEx (in: hFile=0x1718, lpFileSize=0x91dfbbc | out: lpFileSize=0x91dfbbc*=617) returned 1 [0207.263] SetFilePointerEx (in: hFile=0x1718, liDistanceToMove=0x265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.263] ReadFile (in: hFile=0x1718, lpBuffer=0x91dfb98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x91dfba8, lpOverlapped=0x0 | out: lpBuffer=0x91dfb98*, lpNumberOfBytesRead=0x91dfba8*=0x4, lpOverlapped=0x0) returned 1 [0207.300] SetFilePointerEx (in: hFile=0x1718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0207.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0207.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3240 [0207.300] NtQuerySystemTime (in: CurrentTime=0x91dfb30 | out: CurrentTime=0x91dfb30*=132462177858720000) returned 0x0 [0207.300] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0xc50b4ab [0207.300] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x638a5a74 [0207.300] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0xd20479b [0207.300] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x7bbe5b99 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x36ee289c [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x1a065486 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x1449b04e [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x30154a19 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x27acfb5f [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x5c5f146d [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x7b1a7fc7 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x140ec02b [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x6cbf8428 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x78cc99eb [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x647da265 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x5411348f [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x6e1d8ef2 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x11433990 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x6351f1ac [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x1ea0544c [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x530abd18 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x2b8e0e54 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x3330a22c [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x3c12d1b3 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x7b1a7fc7 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x16ca4daa [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x6e9f2b62 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x1a4b9c76 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x4d9e8832 [0207.301] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x4190044c [0207.302] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x650b988f [0207.302] RtlRandomEx (in: Seed=0x91dfb28 | out: Seed=0x91dfb28) returned 0x650b988f [0207.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3358) returned 1 [0207.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba2798 [0207.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba63a0 [0207.310] ReadFile (in: hFile=0x1718, lpBuffer=0x7ba2798, nNumberOfBytesToRead=0x269, lpNumberOfBytesRead=0x91dfb24, lpOverlapped=0x0 | out: lpBuffer=0x7ba2798*, lpNumberOfBytesRead=0x91dfb24*=0x269, lpOverlapped=0x0) returned 1 [0207.310] SetFilePointerEx (in: hFile=0x1718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.310] WriteFile (in: hFile=0x1718, lpBuffer=0x7ba63a0*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x91dfb28, lpOverlapped=0x0 | out: lpBuffer=0x7ba63a0*, lpNumberOfBytesWritten=0x91dfb28*=0x269, lpOverlapped=0x0) returned 1 [0210.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0210.748] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0210.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0210.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba63a0) returned 1 [0210.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba2798) returned 1 [0210.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ccc0) returned 1 [0210.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde80) returned 1 [0210.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37530 [0210.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3150) returned 1 [0210.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c50 [0210.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0210.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0210.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0210.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ccc0) returned 1 [0210.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde80) returned 1 [0210.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cd3a60 [0210.749] SetFilePointerEx (in: hFile=0x1718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.749] WriteFile (in: hFile=0x1718, lpBuffer=0x7cd3a60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x91dfbb0, lpOverlapped=0x0 | out: lpBuffer=0x7cd3a60*, lpNumberOfBytesWritten=0x91dfbb0*=0x10c, lpOverlapped=0x0) returned 1 [0213.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0213.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4398) returned 1 [0213.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4398 [0213.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0213.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0213.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f10) returned 1 [0213.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.561] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="48") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="8a") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="c2") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="f3") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="ff") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="ab") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="92") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="9d") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="40") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="10") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="d1") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="99") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="00") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="4c") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="b8") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="92") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="0c") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="e3") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="c4") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="c1") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="72") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="ee") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="b6") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="17") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="6c") returned 2 [0213.562] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="43") returned 2 [0213.562] RtlInitAnsiString (in: DestinationString=0x91dfb38, SourceString="488ac2f3ffab929d4010d199004cb8920ce3c4c172eeb6176c43" | out: DestinationString="488ac2f3ffab929d4010d199004cb8920ce3c4c172eeb6176c43") [0213.562] RtlAnsiStringToUnicodeString (in: DestinationString=0x91dfb30, SourceString="488ac2f3ffab929d4010d199004cb8920ce3c4c172eeb6176c43", AllocateDestinationString=1 | out: DestinationString="488ac2f3ffab929d4010d199004cb8920ce3c4c172eeb6176c43") returned 0x0 [0213.562] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e580 Thread: id = 6733 os_tid = 0x1b78 [0197.810] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json")) returned 0x2020 [0199.545] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0207.250] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x113c [0207.250] GetFileSizeEx (in: hFile=0x113c, lpFileSize=0xdb9fdb4 | out: lpFileSize=0xdb9fdb4*=710) returned 1 [0207.250] SetFilePointerEx (in: hFile=0x113c, liDistanceToMove=0x2c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.251] ReadFile (in: hFile=0x113c, lpBuffer=0xdb9fd90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdb9fda0, lpOverlapped=0x0 | out: lpBuffer=0xdb9fd90*, lpNumberOfBytesRead=0xdb9fda0*=0x4, lpOverlapped=0x0) returned 1 [0207.253] SetFilePointerEx (in: hFile=0x113c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0207.253] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0207.253] NtQuerySystemTime (in: CurrentTime=0xdb9fd28 | out: CurrentTime=0xdb9fd28*=132462177858252000) returned 0x0 [0207.253] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x6855ded9 [0207.253] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x6471bcd9 [0207.253] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x432b5762 [0207.253] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x5b343d44 [0207.253] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x691ad810 [0207.253] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x7bbe5b99 [0207.253] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x68ecb890 [0207.253] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x4f2de21 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x3f7f6319 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x42ac95dc [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x77081cb [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x2bf4091a [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x6eb95cd0 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x57573e6b [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x5a84951d [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x7a16df7c [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x3693b13e [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x335f00c8 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x686f3583 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x4cd0b3b0 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x1b26901 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x58d94e78 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x234124c4 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x40b87b47 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x7b794f45 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x31e41941 [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x15d9d15b [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x60795afb [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x19972a9c [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x14bd25fb [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x8f9b41d [0207.254] RtlRandomEx (in: Seed=0xdb9fd20 | out: Seed=0xdb9fd20) returned 0x29f65473 [0207.262] ReadFile (in: hFile=0x113c, lpBuffer=0x7b8bf68, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0xdb9fd1c, lpOverlapped=0x0 | out: lpBuffer=0x7b8bf68*, lpNumberOfBytesRead=0xdb9fd1c*=0x2c6, lpOverlapped=0x0) returned 1 [0207.262] SetFilePointerEx (in: hFile=0x113c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.262] WriteFile (in: hFile=0x113c, lpBuffer=0x7b8fb70*, nNumberOfBytesToWrite=0x2c6, lpNumberOfBytesWritten=0xdb9fd20, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesWritten=0xdb9fd20*=0x2c6, lpOverlapped=0x0) returned 1 [0208.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0208.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0208.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b5f0) returned 1 [0208.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0208.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0208.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf18) returned 1 [0208.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdda8) returned 1 [0208.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38340 [0208.963] SetFilePointerEx (in: hFile=0x113c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.963] WriteFile (in: hFile=0x113c, lpBuffer=0x7cd31a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdb9fda8, lpOverlapped=0x0 | out: lpBuffer=0x7cd31a0*, lpNumberOfBytesWritten=0xdb9fda8*=0x10c, lpOverlapped=0x0) returned 1 [0209.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0209.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0209.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2cc8 [0209.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0209.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0209.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0209.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.340] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="23") returned 2 [0209.340] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="bc") returned 2 [0209.340] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="09") returned 2 [0209.340] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="0a") returned 2 [0209.340] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="66") returned 2 [0209.340] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="1d") returned 2 [0209.340] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="e1") returned 2 [0209.340] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="9e") returned 2 [0209.340] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="2d") returned 2 [0209.340] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="98") returned 2 [0209.340] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="d4") returned 2 [0209.341] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="b1") returned 2 [0209.341] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="89") returned 2 [0209.341] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="e7") returned 2 [0209.341] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="2e") returned 2 [0209.341] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="e5") returned 2 [0209.341] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="96") returned 2 [0209.341] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="3a") returned 2 [0209.341] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="e1") returned 2 [0209.341] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="f6") returned 2 [0209.341] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="3d") returned 2 [0209.341] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="74") returned 2 [0209.341] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="65") returned 2 [0209.341] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="6a") returned 2 [0209.341] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="5a") returned 2 [0209.341] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="6c") returned 2 [0209.341] RtlInitAnsiString (in: DestinationString=0xdb9fd30, SourceString="23bc090a661de19e2d98d4b189e72ee5963ae1f63d74656a5a6c" | out: DestinationString="23bc090a661de19e2d98d4b189e72ee5963ae1f63d74656a5a6c") [0209.341] RtlAnsiStringToUnicodeString (in: DestinationString=0xdb9fd28, SourceString="23bc090a661de19e2d98d4b189e72ee5963ae1f63d74656a5a6c", AllocateDestinationString=1 | out: DestinationString="23bc090a661de19e2d98d4b189e72ee5963ae1f63d74656a5a6c") returned 0x0 [0209.341] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c4c8 [0209.342] wcscat (in: _Dest=0x7cd5610, _Source="23bc090a661de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\23bc090a661de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\23bc090a661de" [0209.342] wcscat (in: _Dest=0x7cd5610, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\23bc090a661de.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\23bc090a661de.68814f" [0209.342] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\23bc090a661de.68814f", NtPathName=0xdb9fd20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\23bc090a661de.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0b428 [0209.617] WriteFile (in: hFile=0x2040, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdb9fd3c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xdb9fd3c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.644] CloseHandle (hObject=0x2040) returned 1 [0209.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4ec0) returned 1 [0209.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb54f0) returned 1 Thread: id = 6734 os_tid = 0x1b7c [0197.811] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json")) returned 0x2020 [0200.383] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0207.007] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1150 [0207.008] GetFileSizeEx (in: hFile=0x1150, lpFileSize=0xaf2fecc | out: lpFileSize=0xaf2fecc*=633) returned 1 [0207.008] SetFilePointerEx (in: hFile=0x1150, liDistanceToMove=0x275, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.008] ReadFile (in: hFile=0x1150, lpBuffer=0xaf2fea8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaf2feb8, lpOverlapped=0x0 | out: lpBuffer=0xaf2fea8*, lpNumberOfBytesRead=0xaf2feb8*=0x4, lpOverlapped=0x0) returned 1 [0207.010] SetFilePointerEx (in: hFile=0x1150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0207.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0207.011] NtQuerySystemTime (in: CurrentTime=0xaf2fe40 | out: CurrentTime=0xaf2fe40*=132462177855912000) returned 0x0 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x6a26ca15 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x7b317608 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x7348804b [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x3c53f6bf [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x2df7db31 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x5fbd5e70 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x1aef582d [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x86a86d0 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0xa0b63b3 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x7bbec14e [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x1e3ef193 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x26216a0f [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x57877d86 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x210073cf [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x76d8f1b2 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x71d8bb2d [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x281dde77 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x11cbe2e2 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x77869bb4 [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x4ed3098a [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x6443154d [0207.011] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x29070b3f [0207.012] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x52d06ca [0207.012] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x15efdbfb [0207.012] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x670c1f23 [0207.012] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x58792c4b [0207.012] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x595ee620 [0207.012] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x2153ac84 [0207.012] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x5685b322 [0207.012] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x4ce65037 [0207.012] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x314b8887 [0207.012] RtlRandomEx (in: Seed=0xaf2fe38 | out: Seed=0xaf2fe38) returned 0x5bdca1c0 [0207.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7dc1008 [0207.021] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7da6bd0 [0207.021] ReadFile (in: hFile=0x1150, lpBuffer=0x7dc1008, nNumberOfBytesToRead=0x279, lpNumberOfBytesRead=0xaf2fe34, lpOverlapped=0x0 | out: lpBuffer=0x7dc1008*, lpNumberOfBytesRead=0xaf2fe34*=0x279, lpOverlapped=0x0) returned 1 [0207.021] SetFilePointerEx (in: hFile=0x1150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.021] WriteFile (in: hFile=0x1150, lpBuffer=0x7da6bd0*, nNumberOfBytesToWrite=0x279, lpNumberOfBytesWritten=0xaf2fe38, lpOverlapped=0x0 | out: lpBuffer=0x7da6bd0*, lpNumberOfBytesWritten=0xaf2fe38*=0x279, lpOverlapped=0x0) returned 1 [0210.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0210.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec48e8 [0210.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec48e8) returned 1 [0210.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7da6bd0) returned 1 [0210.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc1008) returned 1 [0210.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c270) returned 1 [0210.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd2b0) returned 1 [0210.734] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37bc0 [0210.734] SetFilePointerEx (in: hFile=0x1150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.735] WriteFile (in: hFile=0x1150, lpBuffer=0x7cd2138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaf2fec0, lpOverlapped=0x0 | out: lpBuffer=0x7cd2138*, lpNumberOfBytesWritten=0xaf2fec0*=0x10c, lpOverlapped=0x0) returned 1 [0213.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0213.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e98) returned 1 [0213.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3e98 [0213.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0213.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0213.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d30) returned 1 [0213.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.508] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="d3") returned 2 [0213.508] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="10") returned 2 [0213.508] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="06") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="97") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="ec") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="e6") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="27") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="02") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="17") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="14") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="74") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="1c") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="a0") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="61") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="63") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="56") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="b7") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="36") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="65") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="8d") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="27") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="bf") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="b0") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="a5") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="e4") returned 2 [0213.509] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="5d") returned 2 [0213.509] RtlInitAnsiString (in: DestinationString=0xaf2fe48, SourceString="d3100697ece627021714741ca0616356b736658d27bfb0a5e45d" | out: DestinationString="d3100697ece627021714741ca0616356b736658d27bfb0a5e45d") [0213.509] RtlAnsiStringToUnicodeString (in: DestinationString=0xaf2fe40, SourceString="d3100697ece627021714741ca0616356b736658d27bfb0a5e45d", AllocateDestinationString=1 | out: DestinationString="d3100697ece627021714741ca0616356b736658d27bfb0a5e45d") returned 0x0 [0213.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e148 Thread: id = 6735 os_tid = 0x1b80 [0197.811] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json")) returned 0x2020 [0200.382] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0206.980] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x860 [0206.993] GetFileSizeEx (in: hFile=0x860, lpFileSize=0xcbcfbb4 | out: lpFileSize=0xcbcfbb4*=941) returned 1 [0206.993] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0x3a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.993] ReadFile (in: hFile=0x860, lpBuffer=0xcbcfb90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xcbcfba0, lpOverlapped=0x0 | out: lpBuffer=0xcbcfb90*, lpNumberOfBytesRead=0xcbcfba0*=0x4, lpOverlapped=0x0) returned 1 [0206.996] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0206.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0206.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0206.996] NtQuerySystemTime (in: CurrentTime=0xcbcfb28 | out: CurrentTime=0xcbcfb28*=132462177855756000) returned 0x0 [0206.996] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x7f02e528 [0206.996] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x7d008ffa [0206.996] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x58fe7769 [0206.996] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x32483222 [0206.996] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x68fc80c9 [0206.996] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x31b2c5c1 [0206.996] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x15f35542 [0206.996] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x5f17acf4 [0206.996] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x33dadd94 [0206.996] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x761055d1 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x3cd47bb0 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x705a5ced [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x3dec51e7 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x145002ae [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x4e94e3f1 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x4db32f61 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x3b831bee [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x1c0d6b76 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x25623d7d [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x45eff181 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x4226bbec [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x2b8b2779 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x4376f585 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x23249320 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x3d899c3a [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x5055d68e [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x3905db53 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x47a9c254 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x6b576d4c [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0xb6dc450 [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0x6175dc2a [0206.997] RtlRandomEx (in: Seed=0xcbcfb20 | out: Seed=0xcbcfb20) returned 0xf0e2f2b [0207.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10da6890 [0207.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7dbd400 [0207.007] ReadFile (in: hFile=0x860, lpBuffer=0x10da6890, nNumberOfBytesToRead=0x3ad, lpNumberOfBytesRead=0xcbcfb1c, lpOverlapped=0x0 | out: lpBuffer=0x10da6890*, lpNumberOfBytesRead=0xcbcfb1c*=0x3ad, lpOverlapped=0x0) returned 1 [0207.007] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.007] WriteFile (in: hFile=0x860, lpBuffer=0x7dbd400*, nNumberOfBytesToWrite=0x3ad, lpNumberOfBytesWritten=0xcbcfb20, lpOverlapped=0x0 | out: lpBuffer=0x7dbd400*, lpNumberOfBytesWritten=0xcbcfb20*=0x3ad, lpOverlapped=0x0) returned 1 [0210.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0210.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0210.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0210.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dbd400) returned 1 [0210.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10da6890) returned 1 [0210.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c9f0) returned 1 [0210.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd2f8) returned 1 [0210.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b60 [0210.732] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.732] WriteFile (in: hFile=0x860, lpBuffer=0x7cd2e58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xcbcfba8, lpOverlapped=0x0 | out: lpBuffer=0x7cd2e58*, lpNumberOfBytesWritten=0xcbcfba8*=0x10c, lpOverlapped=0x0) returned 1 [0213.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.504] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0213.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f48) returned 1 [0213.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2f48 [0213.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0213.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0213.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3060) returned 1 [0213.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.505] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="a2") returned 2 [0213.505] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="aa") returned 2 [0213.505] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="54") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="3f") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="d6") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="18") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="3b") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="b1") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="4a") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="e0") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="5e") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="78") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="04") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="ab") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="c6") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="ae") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="3c") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="39") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="8b") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="84") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="d5") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="43") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="cb") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="19") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="c7") returned 2 [0213.506] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="64") returned 2 [0213.506] RtlInitAnsiString (in: DestinationString=0xcbcfb30, SourceString="a2aa543fd6183bb14ae05e7804abc6ae3c398b84d543cb19c764" | out: DestinationString="a2aa543fd6183bb14ae05e7804abc6ae3c398b84d543cb19c764") [0213.506] RtlAnsiStringToUnicodeString (in: DestinationString=0xcbcfb28, SourceString="a2aa543fd6183bb14ae05e7804abc6ae3c398b84d543cb19c764", AllocateDestinationString=1 | out: DestinationString="a2aa543fd6183bb14ae05e7804abc6ae3c398b84d543cb19c764") returned 0x0 [0213.506] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e058 Thread: id = 6736 os_tid = 0x1b84 [0197.812] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json")) returned 0x2020 [0200.382] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0206.966] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13b0 [0206.978] GetFileSizeEx (in: hFile=0x13b0, lpFileSize=0x47afa5c | out: lpFileSize=0x47afa5c*=708) returned 1 [0206.978] SetFilePointerEx (in: hFile=0x13b0, liDistanceToMove=0x2c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.978] ReadFile (in: hFile=0x13b0, lpBuffer=0x47afa38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x47afa48, lpOverlapped=0x0 | out: lpBuffer=0x47afa38*, lpNumberOfBytesRead=0x47afa48*=0x4, lpOverlapped=0x0) returned 1 [0206.980] SetFilePointerEx (in: hFile=0x13b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0206.980] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0206.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0206.981] NtQuerySystemTime (in: CurrentTime=0x47af9d0 | out: CurrentTime=0x47af9d0*=132462177855600000) returned 0x0 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x966aae7 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x385136e8 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x76e5bc52 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x2ca3907f [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x2c352978 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x756aace4 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x547eb2d7 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x32a2e83 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x24106456 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x5016dfc7 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x671e7233 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x7e26049f [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x43926ddf [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x3c2af5ac [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x1b02d5b5 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0xf176c9a [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x7987f8c6 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x5e6443ba [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x71a668c9 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x41e3d53b [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0xe1cc8ca [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x3e7fd7ab [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x6151f24 [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x3fdbf81f [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x63fc7a2f [0206.981] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x763633c9 [0206.982] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x32bb6d9b [0206.982] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x6e5be915 [0206.982] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x548c9f7f [0206.982] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0xb8aa875 [0206.982] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x29dd46ff [0206.982] RtlRandomEx (in: Seed=0x47af9c8 | out: Seed=0x47af9c8) returned 0x59ff4dc5 [0206.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0206.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d9b478 [0206.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d9f080 [0206.992] ReadFile (in: hFile=0x13b0, lpBuffer=0x10d9b478, nNumberOfBytesToRead=0x2c4, lpNumberOfBytesRead=0x47af9c4, lpOverlapped=0x0 | out: lpBuffer=0x10d9b478*, lpNumberOfBytesRead=0x47af9c4*=0x2c4, lpOverlapped=0x0) returned 1 [0206.993] SetFilePointerEx (in: hFile=0x13b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.993] WriteFile (in: hFile=0x13b0, lpBuffer=0x10d9f080*, nNumberOfBytesToWrite=0x2c4, lpNumberOfBytesWritten=0x47af9c8, lpOverlapped=0x0 | out: lpBuffer=0x10d9f080*, lpNumberOfBytesWritten=0x47af9c8*=0x2c4, lpOverlapped=0x0) returned 1 [0210.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0210.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0210.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3768) returned 1 [0210.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d9f080) returned 1 [0210.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d9b478) returned 1 [0210.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cea0) returned 1 [0210.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd340) returned 1 [0210.728] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37da0 [0210.728] SetFilePointerEx (in: hFile=0x13b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.728] WriteFile (in: hFile=0x13b0, lpBuffer=0x7cd34e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x47afa50, lpOverlapped=0x0 | out: lpBuffer=0x7cd34e8*, lpNumberOfBytesWritten=0x47afa50*=0x10c, lpOverlapped=0x0) returned 1 [0213.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0213.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a50) returned 1 [0213.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4a50 [0213.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0213.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0213.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fb0) returned 1 [0213.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.500] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="9c") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="3e") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="48") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="bc") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="3a") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="99") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="12") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="22") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="9a") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="a8") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="c9") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="3e") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="9b") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="58") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="28") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="c9") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="3c") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="84") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="28") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="66") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="bd") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="58") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="39") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="b8") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="1e") returned 2 [0213.500] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="15") returned 2 [0213.501] RtlInitAnsiString (in: DestinationString=0x47af9d8, SourceString="9c3e48bc3a9912229aa8c93e9b5828c93c842866bd5839b81e15" | out: DestinationString="9c3e48bc3a9912229aa8c93e9b5828c93c842866bd5839b81e15") [0213.501] RtlAnsiStringToUnicodeString (in: DestinationString=0x47af9d0, SourceString="9c3e48bc3a9912229aa8c93e9b5828c93c842866bd5839b81e15", AllocateDestinationString=1 | out: DestinationString="9c3e48bc3a9912229aa8c93e9b5828c93c842866bd5839b81e15") returned 0x0 [0213.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e0d0 Thread: id = 6737 os_tid = 0x1b88 [0197.812] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json")) returned 0x2020 [0200.381] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0206.964] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb94 [0206.964] GetFileSizeEx (in: hFile=0xb94, lpFileSize=0xae6f89c | out: lpFileSize=0xae6f89c*=692) returned 1 [0206.964] SetFilePointerEx (in: hFile=0xb94, liDistanceToMove=0x2b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.964] ReadFile (in: hFile=0xb94, lpBuffer=0xae6f878, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xae6f888, lpOverlapped=0x0 | out: lpBuffer=0xae6f878*, lpNumberOfBytesRead=0xae6f888*=0x4, lpOverlapped=0x0) returned 1 [0206.967] SetFilePointerEx (in: hFile=0xb94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0206.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0206.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0206.967] NtQuerySystemTime (in: CurrentTime=0xae6f810 | out: CurrentTime=0xae6f810*=132462177855444000) returned 0x0 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x1b44940a [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x45e4425c [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x1b2bcc96 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x783f6867 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x4492964b [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x29b26e3f [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x235f7783 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x7522881a [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x14777cd0 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x1b7d382d [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x102aa26d [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x4a7b1d35 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x2db16e74 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x1bd83d5 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x25b684c2 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x7100aebb [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x52660bd9 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x4daa08ab [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x608d1788 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x3ce2c5a9 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x75f59618 [0206.967] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x27e8e2a0 [0206.968] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x15c65d5e [0206.968] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x588f803f [0206.968] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x6fb51020 [0206.968] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x2f5592b2 [0206.968] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x6df03f81 [0206.968] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x730eb48d [0206.968] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x6a91ea70 [0206.968] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x2c88706a [0206.968] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x24bf012f [0206.968] RtlRandomEx (in: Seed=0xae6f808 | out: Seed=0xae6f808) returned 0x586a6b57 [0206.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0206.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dc84d8 [0206.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d90060 [0206.977] ReadFile (in: hFile=0xb94, lpBuffer=0x10dc84d8, nNumberOfBytesToRead=0x2b4, lpNumberOfBytesRead=0xae6f804, lpOverlapped=0x0 | out: lpBuffer=0x10dc84d8*, lpNumberOfBytesRead=0xae6f804*=0x2b4, lpOverlapped=0x0) returned 1 [0206.977] SetFilePointerEx (in: hFile=0xb94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.977] WriteFile (in: hFile=0xb94, lpBuffer=0x10d90060*, nNumberOfBytesToWrite=0x2b4, lpNumberOfBytesWritten=0xae6f808, lpOverlapped=0x0 | out: lpBuffer=0x10d90060*, lpNumberOfBytesWritten=0xae6f808*=0x2b4, lpOverlapped=0x0) returned 1 [0210.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0210.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0210.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0210.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d90060) returned 1 [0210.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc84d8) returned 1 [0210.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cdb0) returned 1 [0210.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc698) returned 1 [0210.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c20 [0210.737] SetFilePointerEx (in: hFile=0xb94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.738] WriteFile (in: hFile=0xb94, lpBuffer=0x7cd2020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xae6f890, lpOverlapped=0x0 | out: lpBuffer=0x7cd2020*, lpNumberOfBytesWritten=0xae6f890*=0x10c, lpOverlapped=0x0) returned 1 [0213.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0213.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0213.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec6508 [0213.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0213.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0213.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0213.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.530] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.530] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="8b") returned 2 [0213.530] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="d9") returned 2 [0213.530] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="87") returned 2 [0213.530] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="54") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="80") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="27") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="d9") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="0a") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="ed") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="05") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="24") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="65") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="65") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="b1") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="7f") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="7e") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="25") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="db") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="45") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="09") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="b3") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="14") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="83") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="c6") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="b4") returned 2 [0213.531] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="ef") returned 2 [0213.531] RtlInitAnsiString (in: DestinationString=0xae6f818, SourceString="8bd987548027d90aed05246565b17f7e25db4509b31483c6b4ef" | out: DestinationString="8bd987548027d90aed05246565b17f7e25db4509b31483c6b4ef") [0213.531] RtlAnsiStringToUnicodeString (in: DestinationString=0xae6f810, SourceString="8bd987548027d90aed05246565b17f7e25db4509b31483c6b4ef", AllocateDestinationString=1 | out: DestinationString="8bd987548027d90aed05246565b17f7e25db4509b31483c6b4ef") returned 0x0 [0213.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e490 Thread: id = 6738 os_tid = 0x1b8c [0197.813] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json")) returned 0x2020 [0200.380] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0206.951] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x948 [0206.952] GetFileSizeEx (in: hFile=0x948, lpFileSize=0xe3ffe2c | out: lpFileSize=0xe3ffe2c*=673) returned 1 [0206.952] SetFilePointerEx (in: hFile=0x948, liDistanceToMove=0x29d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.952] ReadFile (in: hFile=0x948, lpBuffer=0xe3ffe08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe3ffe18, lpOverlapped=0x0 | out: lpBuffer=0xe3ffe08*, lpNumberOfBytesRead=0xe3ffe18*=0x4, lpOverlapped=0x0) returned 1 [0206.954] SetFilePointerEx (in: hFile=0x948, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0206.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c18 [0206.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0206.954] NtQuerySystemTime (in: CurrentTime=0xe3ffda0 | out: CurrentTime=0xe3ffda0*=132462177855288000) returned 0x0 [0206.954] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x5aa6593b [0206.954] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x478cd59a [0206.954] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x699f0deb [0206.954] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x489deb80 [0206.954] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x17202568 [0206.954] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x46bf7a5b [0206.954] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x592aaa1a [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x76ec7958 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0xa4a236c [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x5e473c4 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x2de65b60 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x6a2dd326 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x3a76a2c4 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x7bbed190 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x484e5a34 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x220f25c1 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x3b4e4b62 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x247c2bb9 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x7703cc26 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x5d4d8c6 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x68ffcba6 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x116723db [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x3082d825 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x49863b95 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x3d23eb55 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x2028abcd [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x18e6afa [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x2f967d54 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x7af5c6f9 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x74e4011c [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x11743f50 [0206.955] RtlRandomEx (in: Seed=0xe3ffd98 | out: Seed=0xe3ffd98) returned 0x13d655c7 [0206.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0206.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dcc0e0 [0206.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10db94b8 [0206.963] ReadFile (in: hFile=0x948, lpBuffer=0x10dcc0e0, nNumberOfBytesToRead=0x2a1, lpNumberOfBytesRead=0xe3ffd94, lpOverlapped=0x0 | out: lpBuffer=0x10dcc0e0*, lpNumberOfBytesRead=0xe3ffd94*=0x2a1, lpOverlapped=0x0) returned 1 [0206.963] SetFilePointerEx (in: hFile=0x948, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.964] WriteFile (in: hFile=0x948, lpBuffer=0x10db94b8*, nNumberOfBytesToWrite=0x2a1, lpNumberOfBytesWritten=0xe3ffd98, lpOverlapped=0x0 | out: lpBuffer=0x10db94b8*, lpNumberOfBytesWritten=0xe3ffd98*=0x2a1, lpOverlapped=0x0) returned 1 [0210.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cf0 [0210.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0210.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4be0) returned 1 [0210.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db94b8) returned 1 [0210.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dcc0e0) returned 1 [0210.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cd38) returned 1 [0210.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc650) returned 1 [0210.722] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38340 [0210.722] SetFilePointerEx (in: hFile=0x948, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.722] WriteFile (in: hFile=0x948, lpBuffer=0x7cd31a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe3ffe20, lpOverlapped=0x0 | out: lpBuffer=0x7cd31a0*, lpNumberOfBytesWritten=0xe3ffe20*=0x10c, lpOverlapped=0x0) returned 1 [0213.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0213.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0213.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5928 [0213.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40c8 [0213.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0213.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec35b0) returned 1 [0213.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.493] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="55") returned 2 [0213.493] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="c8") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="47") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="98") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="c6") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="b2") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="fc") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="2f") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="5b") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="ac") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="fb") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="7e") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="e8") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="fd") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="02") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="41") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="9e") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="5c") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="bf") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="d2") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="d0") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="a0") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="5e") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="67") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="7e") returned 2 [0213.494] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="16") returned 2 [0213.494] RtlInitAnsiString (in: DestinationString=0xe3ffda8, SourceString="55c84798c6b2fc2f5bacfb7ee8fd02419e5cbfd2d0a05e677e16" | out: DestinationString="55c84798c6b2fc2f5bacfb7ee8fd02419e5cbfd2d0a05e677e16") [0213.494] RtlAnsiStringToUnicodeString (in: DestinationString=0xe3ffda0, SourceString="55c84798c6b2fc2f5bacfb7ee8fd02419e5cbfd2d0a05e677e16", AllocateDestinationString=1 | out: DestinationString="55c84798c6b2fc2f5bacfb7ee8fd02419e5cbfd2d0a05e677e16") returned 0x0 [0213.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3de00 Thread: id = 6739 os_tid = 0x1b90 [0197.813] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json")) returned 0x2020 [0200.379] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0206.936] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ae0 [0206.936] GetFileSizeEx (in: hFile=0x1ae0, lpFileSize=0xf0bf7dc | out: lpFileSize=0xf0bf7dc*=609) returned 1 [0206.936] SetFilePointerEx (in: hFile=0x1ae0, liDistanceToMove=0x25d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.936] ReadFile (in: hFile=0x1ae0, lpBuffer=0xf0bf7b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf0bf7c8, lpOverlapped=0x0 | out: lpBuffer=0xf0bf7b8*, lpNumberOfBytesRead=0xf0bf7c8*=0x4, lpOverlapped=0x0) returned 1 [0206.938] SetFilePointerEx (in: hFile=0x1ae0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0206.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0206.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c18 [0206.939] NtQuerySystemTime (in: CurrentTime=0xf0bf750 | out: CurrentTime=0xf0bf750*=132462177855132000) returned 0x0 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x3b0009e3 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x399ba09f [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x1910a3c8 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x4530840c [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x1c1df98e [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x29251168 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x603d5d3f [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x5536913f [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x47064f60 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x1ebcd823 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x66afdef7 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x48847399 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0xd432274 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x44d34621 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x1e9c8793 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x7ec2d689 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x375debb8 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x1c3b3b2 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x2bed6e1 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x3baf7148 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x7cec8f55 [0206.939] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x55312e3 [0206.940] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x325da10c [0206.940] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x4318176b [0206.940] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x164cea10 [0206.940] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x68f74dc9 [0206.940] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x134979 [0206.940] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x2888d8d [0206.940] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x5e681849 [0206.940] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x19a5770a [0206.940] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x7c0ddf21 [0206.940] RtlRandomEx (in: Seed=0xf0bf748 | out: Seed=0xf0bf748) returned 0x390f4d5b [0206.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0206.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dae0a0 [0206.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d93c68 [0206.951] ReadFile (in: hFile=0x1ae0, lpBuffer=0x10dae0a0, nNumberOfBytesToRead=0x261, lpNumberOfBytesRead=0xf0bf744, lpOverlapped=0x0 | out: lpBuffer=0x10dae0a0*, lpNumberOfBytesRead=0xf0bf744*=0x261, lpOverlapped=0x0) returned 1 [0206.951] SetFilePointerEx (in: hFile=0x1ae0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.951] WriteFile (in: hFile=0x1ae0, lpBuffer=0x10d93c68*, nNumberOfBytesToWrite=0x261, lpNumberOfBytesWritten=0xf0bf748, lpOverlapped=0x0 | out: lpBuffer=0x10d93c68*, lpNumberOfBytesWritten=0xf0bf748*=0x261, lpOverlapped=0x0) returned 1 [0210.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0210.718] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3088 [0210.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3088) returned 1 [0210.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d93c68) returned 1 [0210.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dae0a0) returned 1 [0210.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ccc0) returned 1 [0210.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc5c0) returned 1 [0210.719] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38280 [0210.719] SetFilePointerEx (in: hFile=0x1ae0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.719] WriteFile (in: hFile=0x1ae0, lpBuffer=0x7cd3088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf0bf7d0, lpOverlapped=0x0 | out: lpBuffer=0x7cd3088*, lpNumberOfBytesWritten=0xf0bf7d0*=0x10c, lpOverlapped=0x0) returned 1 [0213.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0213.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3740) returned 1 [0213.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3740 [0213.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0213.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0213.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec49d8) returned 1 [0213.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.491] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.491] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="52") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="a8") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="5b") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="a2") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="38") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="7a") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="c5") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="5b") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="ed") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="79") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="31") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="8f") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="62") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="6e") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="1b") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="21") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="63") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="44") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="6e") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="29") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="49") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="7a") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="f5") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="1d") returned 2 [0213.491] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="7b") returned 2 [0213.492] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="4b") returned 2 [0213.492] RtlInitAnsiString (in: DestinationString=0xf0bf758, SourceString="52a85ba2387ac55bed79318f626e1b2163446e29497af51d7b4b" | out: DestinationString="52a85ba2387ac55bed79318f626e1b2163446e29497af51d7b4b") [0213.492] RtlAnsiStringToUnicodeString (in: DestinationString=0xf0bf750, SourceString="52a85ba2387ac55bed79318f626e1b2163446e29497af51d7b4b", AllocateDestinationString=1 | out: DestinationString="52a85ba2387ac55bed79318f626e1b2163446e29497af51d7b4b") returned 0x0 [0213.492] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e7d8 Thread: id = 6740 os_tid = 0x1b94 [0197.814] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json")) returned 0x2020 [0200.379] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", dwFileAttributes=0x20) returned 1 [0206.906] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xba0 [0206.918] GetFileSizeEx (in: hFile=0xba0, lpFileSize=0x808fda4 | out: lpFileSize=0x808fda4*=667) returned 1 [0206.918] SetFilePointerEx (in: hFile=0xba0, liDistanceToMove=0x297, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.918] ReadFile (in: hFile=0xba0, lpBuffer=0x808fd80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x808fd90, lpOverlapped=0x0 | out: lpBuffer=0x808fd80*, lpNumberOfBytesRead=0x808fd90*=0x4, lpOverlapped=0x0) returned 1 [0206.920] SetFilePointerEx (in: hFile=0xba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0206.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0206.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0206.921] NtQuerySystemTime (in: CurrentTime=0x808fd18 | out: CurrentTime=0x808fd18*=132462177854976000) returned 0x0 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x550bb87f [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0xdf3b68e [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x1b656ccc [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x5cf33ca2 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x3e1b9a55 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x4125cf3f [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x5382a93 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x38dd4007 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x772ab6c9 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x16eb9d34 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0xf022e7a [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x2544dd74 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x48037309 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x7ade0d10 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x31c25a51 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x750faf8e [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x4dd29c6 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x2296b6e2 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x70916c93 [0206.921] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x7ca847ab [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x12ea0c04 [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x380e19d9 [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0xcfc9bb1 [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x2a081fbf [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x6229bdff [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x2a32f87f [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x747081c6 [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x2b4d78b7 [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x12220549 [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x2c0c87dd [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x63bdc31d [0206.922] RtlRandomEx (in: Seed=0x808fd10 | out: Seed=0x808fd10) returned 0x20ce6541 [0206.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0206.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dbd0c0 [0206.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10daa498 [0206.935] ReadFile (in: hFile=0xba0, lpBuffer=0x10dbd0c0, nNumberOfBytesToRead=0x29b, lpNumberOfBytesRead=0x808fd0c, lpOverlapped=0x0 | out: lpBuffer=0x10dbd0c0*, lpNumberOfBytesRead=0x808fd0c*=0x29b, lpOverlapped=0x0) returned 1 [0206.935] SetFilePointerEx (in: hFile=0xba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.935] WriteFile (in: hFile=0xba0, lpBuffer=0x10daa498*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x808fd10, lpOverlapped=0x0 | out: lpBuffer=0x10daa498*, lpNumberOfBytesWritten=0x808fd10*=0x29b, lpOverlapped=0x0) returned 1 [0210.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0210.715] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0210.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0210.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10daa498) returned 1 [0210.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dbd0c0) returned 1 [0210.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cc48) returned 1 [0210.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc020) returned 1 [0210.716] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a382e0 [0210.716] SetFilePointerEx (in: hFile=0xba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.716] WriteFile (in: hFile=0xba0, lpBuffer=0x7cd33d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x808fd98, lpOverlapped=0x0 | out: lpBuffer=0x7cd33d0*, lpNumberOfBytesWritten=0x808fd98*=0x10c, lpOverlapped=0x0) returned 1 [0213.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0213.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0213.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b898 [0213.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baf0 [0213.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0213.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b730) returned 1 [0213.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.487] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.487] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="f1") returned 2 [0213.487] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="3c") returned 2 [0213.487] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="30") returned 2 [0213.487] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="38") returned 2 [0213.487] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="de") returned 2 [0213.487] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="41") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="08") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="c2") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="40") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="76") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="65") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="89") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="8f") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="60") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="b2") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="d4") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="0b") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="b1") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="9d") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="87") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="be") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="39") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="bb") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="9b") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="61") returned 2 [0213.488] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="0d") returned 2 [0213.488] RtlInitAnsiString (in: DestinationString=0x808fd20, SourceString="f13c3038de4108c2407665898f60b2d40bb19d87be39bb9b610d" | out: DestinationString="f13c3038de4108c2407665898f60b2d40bb19d87be39bb9b610d") [0213.488] RtlAnsiStringToUnicodeString (in: DestinationString=0x808fd18, SourceString="f13c3038de4108c2407665898f60b2d40bb19d87be39bb9b610d", AllocateDestinationString=1 | out: DestinationString="f13c3038de4108c2407665898f60b2d40bb19d87be39bb9b610d") returned 0x0 [0213.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3ea30 Thread: id = 6741 os_tid = 0x1b98 [0197.814] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json")) returned 0x2020 [0200.378] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0206.903] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e6c [0206.903] GetFileSizeEx (in: hFile=0x1e6c, lpFileSize=0xaeaff24 | out: lpFileSize=0xaeaff24*=696) returned 1 [0206.904] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x2b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.904] ReadFile (in: hFile=0x1e6c, lpBuffer=0xaeaff00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaeaff10, lpOverlapped=0x0 | out: lpBuffer=0xaeaff00*, lpNumberOfBytesRead=0xaeaff10*=0x4, lpOverlapped=0x0) returned 1 [0206.907] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0206.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0206.907] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0206.907] NtQuerySystemTime (in: CurrentTime=0xaeafe98 | out: CurrentTime=0xaeafe98*=132462177854820000) returned 0x0 [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x4a2932db [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x61ff4120 [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x4b32fd2c [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x44fab9a3 [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x67380d4a [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x55a60b [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x21bba507 [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x57bac6c1 [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x45e8fb49 [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x188b06aa [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x366a32a1 [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x68828522 [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x590fd88f [0206.907] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x229c94a [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x4c966836 [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x47f7ebbb [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x6896554 [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x56b8cd49 [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x21c9d93d [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x4708ba8d [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x5794545a [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x60d10d64 [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x7696359b [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x26d2a351 [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x5674950 [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x41a2bc60 [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x28730fd7 [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x369730b6 [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x71ae0439 [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x317ce12d [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x363c6ebd [0206.908] RtlRandomEx (in: Seed=0xaeafe90 | out: Seed=0xaeafe90) returned 0x24eea9ea [0206.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0206.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dc48d0 [0206.917] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10db1ca8 [0206.917] ReadFile (in: hFile=0x1e6c, lpBuffer=0x10dc48d0, nNumberOfBytesToRead=0x2b8, lpNumberOfBytesRead=0xaeafe8c, lpOverlapped=0x0 | out: lpBuffer=0x10dc48d0*, lpNumberOfBytesRead=0xaeafe8c*=0x2b8, lpOverlapped=0x0) returned 1 [0206.917] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.917] WriteFile (in: hFile=0x1e6c, lpBuffer=0x10db1ca8*, nNumberOfBytesToWrite=0x2b8, lpNumberOfBytesWritten=0xaeafe90, lpOverlapped=0x0 | out: lpBuffer=0x10db1ca8*, lpNumberOfBytesWritten=0xaeafe90*=0x2b8, lpOverlapped=0x0) returned 1 [0210.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0210.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0210.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0210.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db1ca8) returned 1 [0210.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc48d0) returned 1 [0210.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c1f8) returned 1 [0210.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbccc8) returned 1 [0210.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b00 [0210.725] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.725] WriteFile (in: hFile=0x1e6c, lpBuffer=0x7cd3600*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaeaff18, lpOverlapped=0x0 | out: lpBuffer=0x7cd3600*, lpNumberOfBytesWritten=0xaeaff18*=0x10c, lpOverlapped=0x0) returned 1 [0213.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0213.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3128) returned 1 [0213.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3128 [0213.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0213.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c18 [0213.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c18) returned 1 [0213.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.497] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="23") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="63") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="33") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="66") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="13") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="45") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="97") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="86") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="6f") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="6f") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="66") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="3d") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="85") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="ba") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="a0") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="21") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="39") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="99") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="48") returned 2 [0213.497] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="a5") returned 2 [0213.498] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="26") returned 2 [0213.498] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="a1") returned 2 [0213.498] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="b2") returned 2 [0213.498] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="33") returned 2 [0213.498] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="9c") returned 2 [0213.498] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="76") returned 2 [0213.498] RtlInitAnsiString (in: DestinationString=0xaeafea0, SourceString="23633366134597866f6f663d85baa021399948a526a1b2339c76" | out: DestinationString="23633366134597866f6f663d85baa021399948a526a1b2339c76") [0213.498] RtlAnsiStringToUnicodeString (in: DestinationString=0xaeafe98, SourceString="23633366134597866f6f663d85baa021399948a526a1b2339c76", AllocateDestinationString=1 | out: DestinationString="23633366134597866f6f663d85baa021399948a526a1b2339c76") returned 0x0 [0213.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd10 Thread: id = 6742 os_tid = 0x1b9c [0197.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll")) returned 0x20 [0204.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0204.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.553] GetLastError () returned 0x5 [0204.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0204.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 6743 os_tid = 0x1ba0 [0197.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl")) returned 0x20 [0204.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", dwFileAttributes=0x20) returned 0 [0204.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.298] GetLastError () returned 0x5 [0204.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL", dwFileAttributes=0x20) returned 0 [0204.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab98) returned 1 Thread: id = 6744 os_tid = 0x131c [0197.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css")) returned 0x20 [0204.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", dwFileAttributes=0x20) returned 0 [0204.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.497] GetLastError () returned 0x5 [0204.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS", dwFileAttributes=0x20) returned 0 [0204.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015490) returned 1 Thread: id = 6745 os_tid = 0x1458 [0197.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif")) returned 0x20 [0199.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0199.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.321] GetLastError () returned 0x5 [0199.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0199.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3330a8) returned 1 Thread: id = 6746 os_tid = 0x1484 [0197.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif")) returned 0x20 [0199.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0199.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.323] GetLastError () returned 0x5 [0199.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0199.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3333a8) returned 1 Thread: id = 6747 os_tid = 0x16b0 [0197.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif")) returned 0x20 [0199.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0199.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.326] GetLastError () returned 0x5 [0199.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0199.326] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ba0) returned 1 Thread: id = 6748 os_tid = 0x2078 [0197.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif")) returned 0x20 [0199.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0199.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.328] GetLastError () returned 0x5 [0199.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0199.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 6749 os_tid = 0x20a4 [0197.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif")) returned 0x20 [0199.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0199.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.333] GetLastError () returned 0x5 [0199.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0199.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 6750 os_tid = 0x20ac [0197.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif")) returned 0x20 [0199.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0199.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.335] GetLastError () returned 0x5 [0199.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0199.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 6751 os_tid = 0x20b0 [0197.819] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json")) returned 0x2020 [0203.909] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0222.541] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1444 [0222.542] GetFileSizeEx (in: hFile=0x1444, lpFileSize=0x450feec | out: lpFileSize=0x450feec*=267) returned 1 [0222.542] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0x107, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.542] ReadFile (in: hFile=0x1444, lpBuffer=0x450fec8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x450fed8, lpOverlapped=0x0 | out: lpBuffer=0x450fec8*, lpNumberOfBytesRead=0x450fed8*=0x4, lpOverlapped=0x0) returned 1 [0222.543] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0222.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0222.543] NtQuerySystemTime (in: CurrentTime=0x450fe60 | out: CurrentTime=0x450fe60*=132462178007856000) returned 0x0 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x55b7cfa8 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x4c4fee7 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x2c00e470 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x473b5363 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x30116ae5 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x3c6814a3 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0xeb499cc [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x135d343e [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x179397ca [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x20e15c30 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x6921029c [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x4c74f216 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x50ec8695 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x73347e95 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x1ec67ba3 [0222.544] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x68c95496 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x45cd2238 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0xacb79e7 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x620bd37b [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x22d0ad00 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x52e38184 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0xbab98b7 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x16f7aca0 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x86389f5 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x1f622a5 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x75750961 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x452d4bb5 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x13d53267 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x1b027483 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x452d4bb5 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x30116ae5 [0222.545] RtlRandomEx (in: Seed=0x450fe58 | out: Seed=0x450fe58) returned 0x1ecf12dd [0222.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b49340 [0222.553] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b4cf48 [0222.553] ReadFile (in: hFile=0x1444, lpBuffer=0x7b49340, nNumberOfBytesToRead=0x10b, lpNumberOfBytesRead=0x450fe54, lpOverlapped=0x0 | out: lpBuffer=0x7b49340*, lpNumberOfBytesRead=0x450fe54*=0x10b, lpOverlapped=0x0) returned 1 [0222.553] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.553] WriteFile (in: hFile=0x1444, lpBuffer=0x7b4cf48*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x450fe58, lpOverlapped=0x0 | out: lpBuffer=0x7b4cf48*, lpNumberOfBytesWritten=0x450fe58*=0x10b, lpOverlapped=0x0) returned 1 [0226.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a30 [0226.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53be8 [0226.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53be8) returned 1 [0226.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b4cf48) returned 1 [0226.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b49340) returned 1 [0226.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0226.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8c80) returned 1 [0226.213] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ad0 [0226.213] SetFilePointerEx (in: hFile=0x1444, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.213] WriteFile (in: hFile=0x1444, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x450fee0, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x450fee0*=0x10c, lpOverlapped=0x0) returned 1 [0226.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baf0 [0226.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baf0) returned 1 [0226.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305baf0 [0226.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0226.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0226.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c130) returned 1 [0226.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.307] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.307] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="f5") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="2d") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="5f") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="25") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="73") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="a0") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="29") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="22") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="aa") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="23") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="91") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="82") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="a1") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="a5") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="fd") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="09") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="08") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="4a") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="aa") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="0f") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="42") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="61") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="cd") returned 2 [0226.308] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="2e") returned 2 [0226.309] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="61") returned 2 [0226.309] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="0d") returned 2 [0226.309] RtlInitAnsiString (in: DestinationString=0x450fe68, SourceString="f52d5f2573a02922aa239182a1a5fd09084aaa0f4261cd2e610d" | out: DestinationString="f52d5f2573a02922aa239182a1a5fd09084aaa0f4261cd2e610d") [0226.309] RtlAnsiStringToUnicodeString (in: DestinationString=0x450fe60, SourceString="f52d5f2573a02922aa239182a1a5fd09084aaa0f4261cd2e610d", AllocateDestinationString=1 | out: DestinationString="f52d5f2573a02922aa239182a1a5fd09084aaa0f4261cd2e610d") returned 0x0 [0226.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f650 [0226.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9bf8) returned 1 [0226.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a100) returned 1 [0226.392] NtQueryInformationFile (in: FileHandle=0x1444, IoStatusBlock=0x450fe30, FileInformation=0x450fe38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x450fe30, FileInformation=0x450fe38) returned 0x0 [0226.392] NtSetInformationFile (FileHandle=0x1444, IoStatusBlock=0x450fe30, FileInformation=0x450fe38, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 [0226.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0226.464] FlushFileBuffers (hFile=0x1444) returned 1 [0226.478] CloseHandle (hObject=0x1444) returned 1 [0226.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca2e8 [0226.558] wcscpy (in: _Dest=0x3eca2e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\" [0226.558] wcscat (in: _Dest=0x3eca2e8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\68814F-Readme.txt" [0226.558] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\68814f-readme.txt")) returned 0xffffffff [0226.558] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\bg\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.655] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x450fe74, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x450fe74*=0x8b9, lpOverlapped=0x0) returned 1 [0226.657] CloseHandle (hObject=0x1060) returned 1 [0226.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca2e8) returned 1 [0226.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65a00) returned 1 Thread: id = 6752 os_tid = 0x1eb0 [0197.819] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json")) returned 0x2020 [0203.893] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0214.921] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11bc [0216.125] GetFileSizeEx (in: hFile=0x11bc, lpFileSize=0xd30f924 | out: lpFileSize=0xd30f924*=234) returned 1 [0216.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0216.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac18 [0216.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0216.126] NtQuerySystemTime (in: CurrentTime=0xd30f898 | out: CurrentTime=0xd30f898*=132462177947016000) returned 0x0 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x3b673bfd [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x31aa1e77 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x30322383 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x6221ccc3 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x197a93dd [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x146e26d8 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x689313f5 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x4b70a5c8 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x43b44d87 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x3def9175 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x3d617e4a [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x7621372e [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x61cc30ad [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x466d9fe7 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x3fe2f528 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x2f63da3f [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x20219918 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x5619d2a9 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x3b8d071a [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x57aba71f [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x61c53e97 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x2cfe90ba [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x255a7429 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x199f9a00 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x31767943 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x2f17106d [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x6a37ab72 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x2719d94f [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x4748953e [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x2ea7f0c6 [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x13f0a9da [0216.126] RtlRandomEx (in: Seed=0xd30f890 | out: Seed=0xd30f890) returned 0x402eb830 [0216.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0216.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb17b8 [0216.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb53c0 [0216.134] ReadFile (in: hFile=0x11bc, lpBuffer=0x7bb17b8, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xd30f88c, lpOverlapped=0x0 | out: lpBuffer=0x7bb17b8*, lpNumberOfBytesRead=0xd30f88c*=0xea, lpOverlapped=0x0) returned 1 [0216.136] SetFilePointerEx (in: hFile=0x11bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.136] WriteFile (in: hFile=0x11bc, lpBuffer=0x7bb53c0*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xd30f890, lpOverlapped=0x0 | out: lpBuffer=0x7bb53c0*, lpNumberOfBytesWritten=0xd30f890*=0xea, lpOverlapped=0x0) returned 1 [0218.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0218.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0218.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0218.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb53c0) returned 1 [0218.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb17b8) returned 1 [0218.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c80 [0218.271] SetFilePointerEx (in: hFile=0x11bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.271] WriteFile (in: hFile=0x11bc, lpBuffer=0x7ddb638*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd30f918, lpOverlapped=0x0 | out: lpBuffer=0x7ddb638*, lpNumberOfBytesWritten=0xd30f918*=0x10c, lpOverlapped=0x0) returned 1 [0221.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e497b8 [0221.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50fa8 [0221.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0221.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0221.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec36c8 [0221.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0221.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0221.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0221.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0221.558] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e497b8) returned 1 [0221.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0221.559] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="e5") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="f2") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="67") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="92") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="fa") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="88") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="e8") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="99") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="02") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="ab") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="02") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="01") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="6d") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="e3") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="44") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="86") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="2a") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="1e") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="e0") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="09") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="f2") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="1d") returned 2 [0221.559] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="1a") returned 2 [0221.560] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="7a") returned 2 [0221.560] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="59") returned 2 [0221.560] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="d8") returned 2 [0221.560] RtlInitAnsiString (in: DestinationString=0xd30f8a0, SourceString="e5f26792fa88e89902ab02016de344862a1ee009f21d1a7a59d8" | out: DestinationString="e5f26792fa88e89902ab02016de344862a1ee009f21d1a7a59d8") [0221.560] RtlAnsiStringToUnicodeString (in: DestinationString=0xd30f898, SourceString="e5f26792fa88e89902ab02016de344862a1ee009f21d1a7a59d8", AllocateDestinationString=1 | out: DestinationString="e5f26792fa88e89902ab02016de344862a1ee009f21d1a7a59d8") returned 0x0 [0221.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d50c60 [0224.154] CloseHandle (hObject=0x2250) returned 1 [0224.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4500) returned 1 [0224.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65b28) returned 1 Thread: id = 6753 os_tid = 0x1eb4 [0197.820] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json")) returned 0x2020 [0203.912] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0222.296] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1818 [0222.297] GetFileSizeEx (in: hFile=0x1818, lpFileSize=0xf36fed4 | out: lpFileSize=0xf36fed4*=231) returned 1 [0222.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0222.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0222.298] NtQuerySystemTime (in: CurrentTime=0xf36fe48 | out: CurrentTime=0xf36fe48*=132462178005516000) returned 0x0 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x532949ed [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x3789b13c [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x4cce54d0 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x4ce2ab3c [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x53004a26 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x5b35e522 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x3f2327f0 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x66a497e6 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x18366e10 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0xb943658 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x44306ed2 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x5ec48ff9 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x796feeb2 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x562de034 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x12b32fec [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x4d4c4670 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x34e1f78a [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x488b1f8c [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x3afdac4 [0222.298] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x609e1ce6 [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x6f4e09e9 [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x78aea2b9 [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x328df535 [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x2fb1dd7d [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x71226ebe [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x50157fe7 [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x687e905b [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x1d9de283 [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x3e5ac8bc [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x2b2f8bc8 [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x65af82d1 [0222.299] RtlRandomEx (in: Seed=0xf36fe40 | out: Seed=0xf36fe40) returned 0x76d04edd [0222.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c68fc8 [0222.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c6cbd0 [0222.310] ReadFile (in: hFile=0x1818, lpBuffer=0x7c68fc8, nNumberOfBytesToRead=0xe7, lpNumberOfBytesRead=0xf36fe3c, lpOverlapped=0x0 | out: lpBuffer=0x7c68fc8*, lpNumberOfBytesRead=0xf36fe3c*=0xe7, lpOverlapped=0x0) returned 1 [0222.313] SetFilePointerEx (in: hFile=0x1818, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.313] WriteFile (in: hFile=0x1818, lpBuffer=0x7c6cbd0*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0xf36fe40, lpOverlapped=0x0 | out: lpBuffer=0x7c6cbd0*, lpNumberOfBytesWritten=0xf36fe40*=0xe7, lpOverlapped=0x0) returned 1 [0223.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3df8 [0223.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0223.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0223.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c6cbd0) returned 1 [0223.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c68fc8) returned 1 [0223.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0223.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ec8) returned 1 [0223.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37bc0 [0223.334] SetFilePointerEx (in: hFile=0x1818, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.334] WriteFile (in: hFile=0x1818, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf36fec8, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xf36fec8*=0x10c, lpOverlapped=0x0) returned 1 [0223.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9ad8 [0223.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0223.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bac8 [0223.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bac8) returned 1 [0223.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bac8 [0223.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0223.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0223.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0223.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0223.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0223.632] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.632] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="5d") returned 2 [0223.632] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="02") returned 2 [0223.632] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="55") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="fd") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="e7") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="71") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="95") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="98") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="a4") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="c8") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="fd") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="e1") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="2a") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="79") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="76") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="f3") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="79") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="54") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="f1") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="f8") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="2e") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="2d") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="8c") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="66") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="77") returned 2 [0223.633] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="ec") returned 2 [0223.633] RtlInitAnsiString (in: DestinationString=0xf36fe50, SourceString="5d0255fde7719598a4c8fde12a7976f37954f1f82e2d8c6677ec" | out: DestinationString="5d0255fde7719598a4c8fde12a7976f37954f1f82e2d8c6677ec") [0223.633] RtlAnsiStringToUnicodeString (in: DestinationString=0xf36fe48, SourceString="5d0255fde7719598a4c8fde12a7976f37954f1f82e2d8c6677ec", AllocateDestinationString=1 | out: DestinationString="5d0255fde7719598a4c8fde12a7976f37954f1f82e2d8c6677ec") returned 0x0 [0223.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d513e0 [0223.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d138) returned 1 [0223.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceeae0) returned 1 [0223.834] NtQueryInformationFile (in: FileHandle=0x1818, IoStatusBlock=0xf36fe18, FileInformation=0xf36fe20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf36fe18, FileInformation=0xf36fe20) returned 0x0 [0223.834] NtSetInformationFile (FileHandle=0x1818, IoStatusBlock=0xf36fe18, FileInformation=0xf36fe20, Length=0x28, FileInformationClass=0x4) returned 0x0 [0223.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5af0) returned 1 [0223.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 [0223.994] FlushFileBuffers (hFile=0x1818) returned 1 [0224.011] CloseHandle (hObject=0x1818) returned 1 [0224.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7cd4c50 [0224.049] wcscpy (in: _Dest=0x7cd4c50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\" [0224.049] wcscat (in: _Dest=0x7cd4c50, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\68814F-Readme.txt" [0224.050] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\68814f-readme.txt")) returned 0xffffffff [0224.050] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\cs\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1818 [0224.063] WriteFile (in: hFile=0x1818, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf36fe5c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xf36fe5c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.075] CloseHandle (hObject=0x1818) returned 1 [0224.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4c50) returned 1 [0224.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65c50) returned 1 Thread: id = 6754 os_tid = 0x2148 [0197.820] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json")) returned 0x2020 [0203.912] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0222.313] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfbc [0222.314] GetFileSizeEx (in: hFile=0xfbc, lpFileSize=0xabefc3c | out: lpFileSize=0xabefc3c*=230) returned 1 [0222.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0222.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0222.314] NtQuerySystemTime (in: CurrentTime=0xabefbb0 | out: CurrentTime=0xabefbb0*=132462178005672000) returned 0x0 [0222.314] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x7b53fea [0222.314] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x10a30bd9 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x3707485a [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x19140e6d [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x2816f7f2 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x32219581 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x5ab7907 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x25f84194 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x486d5189 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x2461a480 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x6e42aefa [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x7890a9cf [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x69a7d566 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x16cb6300 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x306dc3c7 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x282ced89 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0xfce5bb3 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x1fa1d191 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x1635e353 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x6fe6a33a [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x65278f28 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x51de830e [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x72813bbe [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x57946466 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x4b2f7a6e [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x2794cb79 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x1fa4938c [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x349834f6 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x50e9603d [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x18224e98 [0222.315] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x6ae61289 [0222.316] RtlRandomEx (in: Seed=0xabefba8 | out: Seed=0xabefba8) returned 0x24e35079 [0222.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c59fa8 [0222.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c5dbb0 [0222.327] ReadFile (in: hFile=0xfbc, lpBuffer=0x7c59fa8, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0xabefba4, lpOverlapped=0x0 | out: lpBuffer=0x7c59fa8*, lpNumberOfBytesRead=0xabefba4*=0xe6, lpOverlapped=0x0) returned 1 [0222.329] SetFilePointerEx (in: hFile=0xfbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.329] WriteFile (in: hFile=0xfbc, lpBuffer=0x7c5dbb0*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0xabefba8, lpOverlapped=0x0 | out: lpBuffer=0x7c5dbb0*, lpNumberOfBytesWritten=0xabefba8*=0xe6, lpOverlapped=0x0) returned 1 [0223.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0223.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0223.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3600) returned 1 [0223.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c5dbb0) returned 1 [0223.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c59fa8) returned 1 [0223.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0223.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8068) returned 1 [0223.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38340 [0223.337] SetFilePointerEx (in: hFile=0xfbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.338] WriteFile (in: hFile=0xfbc, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xabefc30, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xabefc30*=0x10c, lpOverlapped=0x0) returned 1 [0223.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9ad8 [0223.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0223.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0223.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0223.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b898 [0223.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0223.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0223.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3b0) returned 1 [0223.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0223.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0223.635] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.635] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="50") returned 2 [0223.635] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="ad") returned 2 [0223.635] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="ba") returned 2 [0223.635] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="a4") returned 2 [0223.635] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="62") returned 2 [0223.635] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="43") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="40") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="93") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="9c") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="27") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="02") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="47") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="9c") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="2c") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="38") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="af") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="f4") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="07") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="48") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="f9") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="04") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="b0") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="59") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="24") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="6c") returned 2 [0223.636] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="f0") returned 2 [0223.636] RtlInitAnsiString (in: DestinationString=0xabefbb8, SourceString="50adbaa4624340939c2702479c2c38aff40748f904b059246cf0" | out: DestinationString="50adbaa4624340939c2702479c2c38aff40748f904b059246cf0") [0223.636] RtlAnsiStringToUnicodeString (in: DestinationString=0xabefbb0, SourceString="50adbaa4624340939c2702479c2c38aff40748f904b059246cf0", AllocateDestinationString=1 | out: DestinationString="50adbaa4624340939c2702479c2c38aff40748f904b059246cf0") returned 0x0 [0223.636] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51458 [0223.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e098) returned 1 [0223.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ceed08) returned 1 [0223.836] NtQueryInformationFile (in: FileHandle=0xfbc, IoStatusBlock=0xabefb80, FileInformation=0xabefb88, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xabefb80, FileInformation=0xabefb88) returned 0x0 [0223.836] NtSetInformationFile (FileHandle=0xfbc, IoStatusBlock=0xabefb80, FileInformation=0xabefb88, Length=0x28, FileInformationClass=0x4) returned 0x0 [0223.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4020) returned 1 [0223.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0223.999] FlushFileBuffers (hFile=0xfbc) returned 1 [0224.013] CloseHandle (hObject=0xfbc) returned 1 [0224.051] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7cd5c28 [0224.051] wcscpy (in: _Dest=0x7cd5c28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\" [0224.051] wcscat (in: _Dest=0x7cd5c28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\68814F-Readme.txt" [0224.051] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\68814f-readme.txt")) returned 0xffffffff [0224.051] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\da\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc4 [0224.063] WriteFile (in: hFile=0x1bc4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xabefbc4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xabefbc4*=0x8b9, lpOverlapped=0x0) returned 1 [0224.077] CloseHandle (hObject=0x1bc4) returned 1 [0224.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5c28) returned 1 [0224.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65d78) returned 1 Thread: id = 6755 os_tid = 0x2150 [0197.821] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json")) returned 0x2020 [0203.907] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0222.457] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x20f0 [0222.458] GetFileSizeEx (in: hFile=0x20f0, lpFileSize=0xd6eff44 | out: lpFileSize=0xd6eff44*=226) returned 1 [0222.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cae0 [0222.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c338 [0222.458] NtQuerySystemTime (in: CurrentTime=0xd6efeb8 | out: CurrentTime=0xd6efeb8*=132462178007076000) returned 0x0 [0222.458] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x231703f2 [0222.458] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x154c4f7d [0222.458] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x6a3dadfc [0222.458] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x66a95d74 [0222.458] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x6004af07 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x44f87623 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x719f62c2 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x1fd2040b [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x5bf8ab88 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x613b98de [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x56cc1fdf [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x4edc9bc9 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x12c7adae [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x95b4fbe [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x69149a61 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x8dac57e [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x41c922d1 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x6d89c7e [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x7aed83e [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x522dc023 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x5830b8ba [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x50691027 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x35949c09 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x57ddb187 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x689a2660 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x32dc1043 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x70e5324e [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x3d11d2a9 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x64ff4f52 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x77dab748 [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x3aaa680a [0222.459] RtlRandomEx (in: Seed=0xd6efeb0 | out: Seed=0xd6efeb0) returned 0x27684f8a [0222.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0222.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0222.471] ReadFile (in: hFile=0x20f0, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0xd6efeac, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0xd6efeac*=0xe2, lpOverlapped=0x0) returned 1 [0222.473] SetFilePointerEx (in: hFile=0x20f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.473] WriteFile (in: hFile=0x20f0, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0xd6efeb0, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0xd6efeb0*=0xe2, lpOverlapped=0x0) returned 1 [0226.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0226.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0226.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0226.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0226.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0226.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0226.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d400a8) returned 1 [0226.736] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38010 [0226.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d400a8 [0226.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0226.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0226.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0226.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e60 [0226.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0226.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c338 [0226.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0226.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0226.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d400a8) returned 1 [0226.737] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deca58 [0226.737] SetFilePointerEx (in: hFile=0x20f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.737] WriteFile (in: hFile=0x20f0, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd6eff38, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xd6eff38*=0x10c, lpOverlapped=0x0) returned 1 [0226.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d400a8 [0226.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3def0 [0226.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c338 [0226.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0226.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c338 [0226.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0226.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7f8 [0226.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7f8) returned 1 [0226.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0226.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d400a8) returned 1 [0226.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.741] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="0a") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="49") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="0c") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="9c") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="6b") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="6f") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="53") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="a8") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="88") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="48") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="ec") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="2d") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="3f") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="56") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="13") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="5b") returned 2 [0226.741] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="1f") returned 2 [0226.742] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="2d") returned 2 [0226.742] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="7b") returned 2 [0226.742] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="b9") returned 2 [0226.742] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="f6") returned 2 [0226.742] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="47") returned 2 [0226.742] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="30") returned 2 [0226.742] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="c7") returned 2 [0226.742] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="bf") returned 2 [0226.742] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="e3") returned 2 [0226.742] RtlInitAnsiString (in: DestinationString=0xd6efec0, SourceString="0a490c9c6b6f53a88848ec2d3f56135b1f2d7bb9f64730c7bfe3" | out: DestinationString="0a490c9c6b6f53a88848ec2d3f56135b1f2d7bb9f64730c7bfe3") [0226.742] RtlAnsiStringToUnicodeString (in: DestinationString=0xd6efeb8, SourceString="0a490c9c6b6f53a88848ec2d3f56135b1f2d7bb9f64730c7bfe3", AllocateDestinationString=1 | out: DestinationString="0a490c9c6b6f53a88848ec2d3f56135b1f2d7bb9f64730c7bfe3") returned 0x0 [0226.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e238 [0226.742] RtlFreeAnsiString (AnsiString="0") [0226.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d640) returned 1 [0226.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0226.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0226.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0226.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37e60) returned 1 [0226.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0226.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0226.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0226.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cae0) returned 1 [0226.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0226.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0226.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3dd76c8 [0226.743] wcscat (in: _Dest=0x3dd76c8, _Source="0a490c9c6b6f5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\0a490c9c6b6f5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\0a490c9c6b6f5" [0226.743] wcscat (in: _Dest=0x3dd76c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\0a490c9c6b6f5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\0a490c9c6b6f5.68814f" [0226.743] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\0a490c9c6b6f5.68814f", NtPathName=0xd6efeb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\0a490c9c6b6f5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0226.743] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x7dd91b8 [0226.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd91b8) returned 1 [0226.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e92128) returned 1 [0226.745] NtQueryInformationFile (in: FileHandle=0x20f0, IoStatusBlock=0xd6efe88, FileInformation=0xd6efe90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd6efe88, FileInformation=0xd6efe90) returned 0x0 [0226.745] NtSetInformationFile (FileHandle=0x20f0, IoStatusBlock=0xd6efe88, FileInformation=0xd6efe90, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0226.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0226.747] FlushFileBuffers (hFile=0x20f0) returned 1 [0226.749] CloseHandle (hObject=0x20f0) returned 1 [0226.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd76c8 [0226.750] wcscpy (in: _Dest=0x3dd76c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\" [0226.750] wcscat (in: _Dest=0x3dd76c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\68814F-Readme.txt" [0226.750] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\68814f-readme.txt")) returned 0xffffffff [0226.750] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\de\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20f0 [0226.751] WriteFile (in: hFile=0x20f0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd6efecc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd6efecc*=0x8b9, lpOverlapped=0x0) returned 1 [0226.753] CloseHandle (hObject=0x20f0) returned 1 [0226.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0226.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65ea0) returned 1 Thread: id = 6756 os_tid = 0x2154 [0197.821] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json")) returned 0x2020 [0203.907] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0222.473] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1df8 [0222.474] GetFileSizeEx (in: hFile=0x1df8, lpFileSize=0xf05f88c | out: lpFileSize=0xf05f88c*=283) returned 1 [0222.474] SetFilePointerEx (in: hFile=0x1df8, liDistanceToMove=0x117, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.474] ReadFile (in: hFile=0x1df8, lpBuffer=0xf05f868, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf05f878, lpOverlapped=0x0 | out: lpBuffer=0xf05f868*, lpNumberOfBytesRead=0xf05f878*=0x4, lpOverlapped=0x0) returned 1 [0222.476] SetFilePointerEx (in: hFile=0x1df8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c338 [0222.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0222.477] NtQuerySystemTime (in: CurrentTime=0xf05f800 | out: CurrentTime=0xf05f800*=132462178007232000) returned 0x0 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x7192acb8 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x7dd422c3 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x64b888d5 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x1a9e2588 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x56e2a2a3 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x73ebc084 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x1badd0bd [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x3e9eb00b [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x129f1ca3 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x2f06e24c [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x3da6ab26 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x40f69346 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x8fdd043 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x6213afd1 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x37d4a540 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x5014edec [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x168b5e70 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x1cf51c37 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x6078fed6 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x6f0a0b0 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x31841665 [0222.477] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x145f769 [0222.478] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x65a5c209 [0222.478] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x6b1e8406 [0222.478] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x2637b9e1 [0222.478] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x3b922bb0 [0222.478] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x5fdb8d08 [0222.478] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x6ea9a4ce [0222.478] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x952a064 [0222.478] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x7d8755e7 [0222.478] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x45ad0ee8 [0222.478] RtlRandomEx (in: Seed=0xf05f7f8 | out: Seed=0xf05f7f8) returned 0x2c46d3d8 [0222.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c017b8 [0222.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c053c0 [0222.489] ReadFile (in: hFile=0x1df8, lpBuffer=0x7c017b8, nNumberOfBytesToRead=0x11b, lpNumberOfBytesRead=0xf05f7f4, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesRead=0xf05f7f4*=0x11b, lpOverlapped=0x0) returned 1 [0222.489] SetFilePointerEx (in: hFile=0x1df8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.489] WriteFile (in: hFile=0x1df8, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x11b, lpNumberOfBytesWritten=0xf05f7f8, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0xf05f7f8*=0x11b, lpOverlapped=0x0) returned 1 [0226.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53670 [0226.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a80 [0226.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a80) returned 1 [0226.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0226.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0226.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0226.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40fd8) returned 1 [0226.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38010 [0226.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40fd8 [0226.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3eaa8 [0226.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a80 [0226.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a80) returned 1 [0226.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e60 [0226.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a80 [0226.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a18 [0226.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a18) returned 1 [0226.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0226.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40fd8) returned 1 [0226.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deca58 [0226.688] SetFilePointerEx (in: hFile=0x1df8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.688] WriteFile (in: hFile=0x1df8, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf05f880, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xf05f880*=0x10c, lpOverlapped=0x0) returned 1 [0226.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40fd8 [0226.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3eaa8 [0226.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a18 [0226.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a18) returned 1 [0226.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52a18 [0226.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0226.692] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53940 [0226.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53940) returned 1 [0226.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0226.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40fd8) returned 1 [0226.693] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.693] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="ef") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="46") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="36") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="3e") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="28") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="0e") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="8d") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="38") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="1b") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="14") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="d5") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="a2") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="ed") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="e3") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="66") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="2a") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="7a") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="60") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="45") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="89") returned 2 [0226.693] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="4b") returned 2 [0226.694] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="0b") returned 2 [0226.694] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="53") returned 2 [0226.694] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="c7") returned 2 [0226.694] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="ea") returned 2 [0226.694] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="57") returned 2 [0226.694] RtlInitAnsiString (in: DestinationString=0xf05f808, SourceString="ef46363e280e8d381b14d5a2ede3662a7a6045894b0b53c7ea57" | out: DestinationString="ef46363e280e8d381b14d5a2ede3662a7a6045894b0b53c7ea57") [0226.694] RtlAnsiStringToUnicodeString (in: DestinationString=0xf05f800, SourceString="ef46363e280e8d381b14d5a2ede3662a7a6045894b0b53c7ea57", AllocateDestinationString=1 | out: DestinationString="ef46363e280e8d381b14d5a2ede3662a7a6045894b0b53c7ea57") returned 0x0 [0226.694] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e238 [0226.694] RtlFreeAnsiString (AnsiString="e") [0226.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d640) returned 1 [0226.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a18) returned 1 [0226.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54188) returned 1 [0226.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0226.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37e60) returned 1 [0226.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a80) returned 1 [0226.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0226.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53670) returned 1 [0226.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c338) returned 1 [0226.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0226.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0226.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3dd76c8 [0226.695] wcscat (in: _Dest=0x3dd76c8, _Source="ef46363e280e8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\ef46363e280e8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\ef46363e280e8" [0226.695] wcscat (in: _Dest=0x3dd76c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\ef46363e280e8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\ef46363e280e8.68814f" [0226.695] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\ef46363e280e8.68814f", NtPathName=0xf05f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\ef46363e280e8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0226.695] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x7dd91b8 [0226.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd91b8) returned 1 [0226.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a306c8) returned 1 [0226.698] NtQueryInformationFile (in: FileHandle=0x1df8, IoStatusBlock=0xf05f7d0, FileInformation=0xf05f7d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf05f7d0, FileInformation=0xf05f7d8) returned 0x0 [0226.698] NtSetInformationFile (FileHandle=0x1df8, IoStatusBlock=0xf05f7d0, FileInformation=0xf05f7d8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0226.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0226.699] FlushFileBuffers (hFile=0x1df8) returned 1 [0226.702] CloseHandle (hObject=0x1df8) returned 1 [0226.702] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd76c8 [0226.702] wcscpy (in: _Dest=0x3dd76c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\" [0226.703] wcscat (in: _Dest=0x3dd76c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\68814F-Readme.txt" [0226.703] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\68814f-readme.txt")) returned 0xffffffff [0226.703] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\el\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1df8 [0226.730] WriteFile (in: hFile=0x1df8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf05f814, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xf05f814*=0x8b9, lpOverlapped=0x0) returned 1 [0226.733] CloseHandle (hObject=0x1df8) returned 1 [0226.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0226.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4020) returned 1 Thread: id = 6757 os_tid = 0x2160 [0197.822] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json")) returned 0x2020 [0203.908] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0222.489] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe94 [0222.490] GetFileSizeEx (in: hFile=0xe94, lpFileSize=0xf4cf85c | out: lpFileSize=0xf4cf85c*=227) returned 1 [0222.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0222.490] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0222.490] NtQuerySystemTime (in: CurrentTime=0xf4cf7d0 | out: CurrentTime=0xf4cf7d0*=132462178007388000) returned 0x0 [0222.490] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x1d38b10f [0222.490] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0xa268f7 [0222.490] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x793d54d5 [0222.490] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x19d4f36a [0222.490] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x7a01c543 [0222.490] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x3b51c7a7 [0222.490] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x281fe3e9 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x48577b2 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x11604277 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x4d967910 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x57aba71f [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x4c9302a3 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x1da9d043 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x30f5f87 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x703753e [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x18d79ef5 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x5ed89cb [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x29864c73 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x469f438d [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x69919830 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x5324df1f [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x70446176 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x6804573c [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x3938ca5c [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x2f942d92 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x34a25b47 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0xfe27638 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x3f4fb220 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x1fc6fa2d [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x3bd66035 [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x7747b74e [0222.491] RtlRandomEx (in: Seed=0xf4cf7c8 | out: Seed=0xf4cf7c8) returned 0x589cdcfa [0222.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0222.502] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0222.502] ReadFile (in: hFile=0xe94, lpBuffer=0x7c08fc8, nNumberOfBytesToRead=0xe3, lpNumberOfBytesRead=0xf4cf7c4, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesRead=0xf4cf7c4*=0xe3, lpOverlapped=0x0) returned 1 [0222.504] SetFilePointerEx (in: hFile=0xe94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.504] WriteFile (in: hFile=0xe94, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0xf4cf7c8, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0xf4cf7c8*=0xe3, lpOverlapped=0x0) returned 1 [0226.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ee0 [0226.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52c98 [0226.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52c98) returned 1 [0226.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0226.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0226.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0226.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9df0) returned 1 [0226.201] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38370 [0226.202] SetFilePointerEx (in: hFile=0xe94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.202] WriteFile (in: hFile=0xe94, lpBuffer=0x300dfd8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf4cf850, lpOverlapped=0x0 | out: lpBuffer=0x300dfd8*, lpNumberOfBytesWritten=0xf4cf850*=0x10c, lpOverlapped=0x0) returned 1 [0226.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53530 [0226.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53530) returned 1 [0226.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53530 [0226.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0226.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533c8 [0226.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533c8) returned 1 [0226.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.291] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="4c") returned 2 [0226.291] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="f1") returned 2 [0226.291] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="01") returned 2 [0226.291] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="83") returned 2 [0226.291] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="6b") returned 2 [0226.291] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="22") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="e1") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="af") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="6c") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="13") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="70") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="c4") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="a7") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="81") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="1c") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="ca") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="cb") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="03") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="48") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="b1") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="6b") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="41") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="89") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="fa") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="6e") returned 2 [0226.292] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="1f") returned 2 [0226.292] RtlInitAnsiString (in: DestinationString=0xf4cf7d8, SourceString="4cf101836b22e1af6c1370c4a7811ccacb0348b16b4189fa6e1f" | out: DestinationString="4cf101836b22e1af6c1370c4a7811ccacb0348b16b4189fa6e1f") [0226.292] RtlAnsiStringToUnicodeString (in: DestinationString=0xf4cf7d0, SourceString="4cf101836b22e1af6c1370c4a7811ccacb0348b16b4189fa6e1f", AllocateDestinationString=1 | out: DestinationString="4cf101836b22e1af6c1370c4a7811ccacb0348b16b4189fa6e1f") returned 0x0 [0226.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa10 [0226.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd91b8) returned 1 [0226.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a328) returned 1 [0226.381] NtQueryInformationFile (in: FileHandle=0xe94, IoStatusBlock=0xf4cf7a0, FileInformation=0xf4cf7a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf4cf7a0, FileInformation=0xf4cf7a8) returned 0x0 [0226.381] NtSetInformationFile (FileHandle=0xe94, IoStatusBlock=0xf4cf7a0, FileInformation=0xf4cf7a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9b98) returned 1 [0226.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0226.419] FlushFileBuffers (hFile=0xe94) returned 1 [0226.453] CloseHandle (hObject=0xe94) returned 1 [0226.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca078 [0226.543] wcscpy (in: _Dest=0x3eca078, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\" [0226.543] wcscat (in: _Dest=0x3eca078, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\68814F-Readme.txt" [0226.543] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\68814f-readme.txt")) returned 0xffffffff [0226.544] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\en\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.640] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf4cf7e4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xf4cf7e4*=0x8b9, lpOverlapped=0x0) returned 1 [0226.641] CloseHandle (hObject=0x1060) returned 1 [0226.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca078) returned 1 [0226.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4148) returned 1 Thread: id = 6758 os_tid = 0x1e50 [0197.822] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json")) returned 0x2020 [0203.908] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0222.504] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd98 [0222.505] GetFileSizeEx (in: hFile=0xd98, lpFileSize=0xd3dfac4 | out: lpFileSize=0xd3dfac4*=232) returned 1 [0222.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0222.505] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0222.505] NtQuerySystemTime (in: CurrentTime=0xd3dfa38 | out: CurrentTime=0xd3dfa38*=132462178007544000) returned 0x0 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x505b21fa [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x2cb0e10 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x2d45e44a [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x1c92aa51 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x2aabc937 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x1380b3ee [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x3357052f [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x44026895 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x5115f289 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x46dcc41f [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x667fc37b [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x29212989 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x12c12b0 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x407c0406 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x25be5888 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x32c9fc2 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x77951a6b [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x72bd931e [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x59979c24 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x365fac31 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x7f70e82d [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0xdf895c8 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x47a358c [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x774d2f69 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x783ff7e [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x658123e [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x1d7b8a5d [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x5e849948 [0222.506] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x27b8a202 [0222.507] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x7568f634 [0222.507] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x237eb02f [0222.507] RtlRandomEx (in: Seed=0xd3dfa30 | out: Seed=0xd3dfa30) returned 0x1c44a1c7 [0222.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c107d8 [0222.515] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c143e0 [0222.515] ReadFile (in: hFile=0xd98, lpBuffer=0x7c107d8, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0xd3dfa2c, lpOverlapped=0x0 | out: lpBuffer=0x7c107d8*, lpNumberOfBytesRead=0xd3dfa2c*=0xe8, lpOverlapped=0x0) returned 1 [0222.517] SetFilePointerEx (in: hFile=0xd98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.517] WriteFile (in: hFile=0xd98, lpBuffer=0x7c143e0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xd3dfa30, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesWritten=0xd3dfa30*=0xe8, lpOverlapped=0x0) returned 1 [0226.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53328 [0226.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0226.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e541d8) returned 1 [0226.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0226.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0226.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0226.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9580) returned 1 [0226.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38310 [0226.205] SetFilePointerEx (in: hFile=0xd98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.205] WriteFile (in: hFile=0xd98, lpBuffer=0x300da60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd3dfab8, lpOverlapped=0x0 | out: lpBuffer=0x300da60*, lpNumberOfBytesWritten=0xd3dfab8*=0x10c, lpOverlapped=0x0) returned 1 [0226.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0226.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0226.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bd70 [0226.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0226.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0226.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c220) returned 1 [0226.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.295] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="8c") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="2f") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="7e") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="3a") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="7e") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="61") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="f1") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="7b") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="b5") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="a6") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="b2") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="2d") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="06") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="d0") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="f1") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="73") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="5d") returned 2 [0226.295] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="59") returned 2 [0226.296] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="18") returned 2 [0226.296] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="91") returned 2 [0226.296] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="f3") returned 2 [0226.296] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="e3") returned 2 [0226.296] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="94") returned 2 [0226.296] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="41") returned 2 [0226.296] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="46") returned 2 [0226.296] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="d9") returned 2 [0226.296] RtlInitAnsiString (in: DestinationString=0xd3dfa40, SourceString="8c2f7e3a7e61f17bb5a6b22d06d0f1735d591891f3e3944146d9" | out: DestinationString="8c2f7e3a7e61f17bb5a6b22d06d0f1735d591891f3e3944146d9") [0226.296] RtlAnsiStringToUnicodeString (in: DestinationString=0xd3dfa38, SourceString="8c2f7e3a7e61f17bb5a6b22d06d0f1735d591891f3e3944146d9", AllocateDestinationString=1 | out: DestinationString="8c2f7e3a7e61f17bb5a6b22d06d0f1735d591891f3e3944146d9") returned 0x0 [0226.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f740 [0226.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9d40) returned 1 [0226.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f373b8) returned 1 [0226.388] NtQueryInformationFile (in: FileHandle=0xd98, IoStatusBlock=0xd3dfa08, FileInformation=0xd3dfa10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd3dfa08, FileInformation=0xd3dfa10) returned 0x0 [0226.388] NtSetInformationFile (FileHandle=0xd98, IoStatusBlock=0xd3dfa08, FileInformation=0xd3dfa10, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9f40) returned 1 [0226.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f740) returned 1 [0226.425] FlushFileBuffers (hFile=0xd98) returned 1 [0226.462] CloseHandle (hObject=0xd98) returned 1 [0226.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca558 [0226.547] wcscpy (in: _Dest=0x3eca558, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\" [0226.547] wcscat (in: _Dest=0x3eca558, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\68814F-Readme.txt" [0226.547] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\68814f-readme.txt")) returned 0xffffffff [0226.547] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\es\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.644] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd3dfa4c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd3dfa4c*=0x8b9, lpOverlapped=0x0) returned 1 [0226.646] CloseHandle (hObject=0x1060) returned 1 [0226.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca558) returned 1 [0226.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4270) returned 1 Thread: id = 6759 os_tid = 0xf50 [0197.835] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json")) returned 0x2020 [0203.902] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0222.364] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf5c [0222.365] GetFileSizeEx (in: hFile=0xf5c, lpFileSize=0xf8cfb04 | out: lpFileSize=0xf8cfb04*=218) returned 1 [0222.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0222.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0222.365] NtQuerySystemTime (in: CurrentTime=0xf8cfa78 | out: CurrentTime=0xf8cfa78*=132462178006140000) returned 0x0 [0222.365] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x7868028e [0222.365] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x18483bbf [0222.365] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x4a445478 [0222.365] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x2ac8aadb [0222.365] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x61918322 [0222.365] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x747d0b96 [0222.365] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x3027845f [0222.365] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x4d8b5cf0 [0222.365] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x1c798087 [0222.365] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x7bd2b212 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x537074c5 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x6b8fa195 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x1217748a [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x9059e3e [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x2a5b3617 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x6dfd4f29 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x3438fea6 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x88a298e [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x4f352f27 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x7e7aec97 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x29e453a9 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x3cc15c10 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x6f840587 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x40ed416e [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x861b8bb [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0xa9cf7ce [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0xc3376d9 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x6a335be0 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x64683fb8 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x7541814e [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x6fae5066 [0222.366] RtlRandomEx (in: Seed=0xf8cfa70 | out: Seed=0xf8cfa70) returned 0x589dc62e [0222.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0222.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0222.377] ReadFile (in: hFile=0xf5c, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0xf8cfa6c, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0xf8cfa6c*=0xda, lpOverlapped=0x0) returned 1 [0222.379] SetFilePointerEx (in: hFile=0xf5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.379] WriteFile (in: hFile=0xf5c, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0xf8cfa70, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0xf8cfa70*=0xda, lpOverlapped=0x0) returned 1 [0225.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7b0 [0225.619] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca080 [0225.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca080) returned 1 [0225.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0225.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0225.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc98) returned 1 [0225.620] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82a8) returned 1 [0225.620] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a377d0 [0225.620] SetFilePointerEx (in: hFile=0xf5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.620] WriteFile (in: hFile=0xf5c, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf8cfaf8, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0xf8cfaf8*=0x10c, lpOverlapped=0x0) returned 1 [0227.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40180 [0227.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e238 [0227.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54200 [0227.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54200) returned 1 [0227.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e54200 [0227.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52568 [0227.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533f0 [0227.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533f0) returned 1 [0227.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0227.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40180) returned 1 [0227.077] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0227.077] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="4e") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="4b") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="d5") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="73") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="87") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="6b") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="0f") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="db") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="a9") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="a8") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="65") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="ed") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="93") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="86") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="6b") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="ae") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="8d") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="58") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="f1") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="a6") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="3f") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="e4") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="82") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="3a") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="e9") returned 2 [0227.077] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="bc") returned 2 [0227.077] RtlInitAnsiString (in: DestinationString=0xf8cfa80, SourceString="4e4bd573876b0fdba9a865ed93866bae8d58f1a63fe4823ae9bc" | out: DestinationString="4e4bd573876b0fdba9a865ed93866bae8d58f1a63fe4823ae9bc") [0227.078] RtlAnsiStringToUnicodeString (in: DestinationString=0xf8cfa78, SourceString="4e4bd573876b0fdba9a865ed93866bae8d58f1a63fe4823ae9bc", AllocateDestinationString=1 | out: DestinationString="4e4bd573876b0fdba9a865ed93866bae8d58f1a63fe4823ae9bc") returned 0x0 [0227.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e2b0 [0227.078] wcscat (in: _Dest=0x3dd76c8, _Source="4e4bd573876b0" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\4e4bd573876b0") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\4e4bd573876b0" [0227.078] wcscat (in: _Dest=0x3dd76c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\4e4bd573876b0.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\4e4bd573876b0.68814f" [0227.078] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\4e4bd573876b0.68814f", NtPathName=0xf8cfa70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\4e4bd573876b0.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0227.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x7dd91b8 [0227.084] FlushFileBuffers (hFile=0xf5c) returned 1 [0227.086] CloseHandle (hObject=0xf5c) returned 1 [0227.087] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd76c8 [0227.087] wcscpy (in: _Dest=0x3dd76c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\" [0227.087] wcscat (in: _Dest=0x3dd76c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\68814F-Readme.txt" [0227.087] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\68814f-readme.txt")) returned 0xffffffff [0227.087] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf5c [0227.088] WriteFile (in: hFile=0xf5c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf8cfa8c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xf8cfa8c*=0x8b9, lpOverlapped=0x0) returned 1 [0227.090] CloseHandle (hObject=0xf5c) returned 1 [0227.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0227.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4398) returned 1 Thread: id = 6760 os_tid = 0x1fd4 [0197.835] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json")) returned 0x2020 [0203.902] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0222.745] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1060 [0222.746] GetFileSizeEx (in: hFile=0x1060, lpFileSize=0xafffa64 | out: lpFileSize=0xafffa64*=236) returned 1 [0222.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0222.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cab8 [0222.747] NtQuerySystemTime (in: CurrentTime=0xafff9d8 | out: CurrentTime=0xafff9d8*=132462178010040000) returned 0x0 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x2c29f3b6 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x652b8109 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x73bb8d9e [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x38ec1102 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x650cdcf1 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x2c2d8e4 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0xe258325 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0xa2150a1 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x3f408c59 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x6b5a595c [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x6d93b01c [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x3b8fce04 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x15cc728 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x148c235e [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x54d5291e [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x3e1c385a [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x4c7e1520 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x6200c1a2 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0xe258325 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x6eb05b7c [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x2e799706 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x3e028f67 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x346226b1 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0xac58b14 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x6779fef3 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x2e9c6b0b [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x31c6a1e4 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x651876c3 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x455e93e [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x3b8fce04 [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x9031b9c [0222.747] RtlRandomEx (in: Seed=0xafff9d0 | out: Seed=0xafff9d0) returned 0x147cfc31 [0222.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ac7cd8 [0222.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7acb8e0 [0222.756] ReadFile (in: hFile=0x1060, lpBuffer=0x7ac7cd8, nNumberOfBytesToRead=0xec, lpNumberOfBytesRead=0xafff9cc, lpOverlapped=0x0 | out: lpBuffer=0x7ac7cd8*, lpNumberOfBytesRead=0xafff9cc*=0xec, lpOverlapped=0x0) returned 1 [0222.758] SetFilePointerEx (in: hFile=0x1060, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.758] WriteFile (in: hFile=0x1060, lpBuffer=0x7acb8e0*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0xafff9d0, lpOverlapped=0x0 | out: lpBuffer=0x7acb8e0*, lpNumberOfBytesWritten=0xafff9d0*=0xec, lpOverlapped=0x0) returned 1 [0226.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53468 [0226.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f80 [0226.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f80) returned 1 [0226.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acb8e0) returned 1 [0226.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac7cd8) returned 1 [0226.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41de8) returned 1 [0226.243] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37770 [0226.244] SetFilePointerEx (in: hFile=0x1060, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.244] WriteFile (in: hFile=0x1060, lpBuffer=0x7cb6368*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xafffa58, lpOverlapped=0x0 | out: lpBuffer=0x7cb6368*, lpNumberOfBytesWritten=0xafffa58*=0x10c, lpOverlapped=0x0) returned 1 [0226.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca40 [0226.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca40) returned 1 [0226.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ca40 [0226.344] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0226.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b528 [0226.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0226.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.345] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="23") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="85") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="15") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="a2") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="ef") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="01") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="9a") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="6a") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="6d") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="39") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="4f") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="73") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="54") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="4e") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="72") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="4c") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="e8") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="24") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="2d") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="69") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="a5") returned 2 [0226.345] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="18") returned 2 [0226.346] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="91") returned 2 [0226.346] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="79") returned 2 [0226.346] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="97") returned 2 [0226.346] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="64") returned 2 [0226.346] RtlInitAnsiString (in: DestinationString=0xafff9e0, SourceString="238515a2ef019a6a6d394f73544e724ce8242d69a51891799764" | out: DestinationString="238515a2ef019a6a6d394f73544e724ce8242d69a51891799764") [0226.346] RtlAnsiStringToUnicodeString (in: DestinationString=0xafff9d8, SourceString="238515a2ef019a6a6d394f73544e724ce8242d69a51891799764", AllocateDestinationString=1 | out: DestinationString="238515a2ef019a6a6d394f73544e724ce8242d69a51891799764") returned 0x0 [0226.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa88 [0226.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9448) returned 1 [0226.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd3760) returned 1 [0226.406] NtQueryInformationFile (in: FileHandle=0x1060, IoStatusBlock=0xafff9a8, FileInformation=0xafff9b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xafff9a8, FileInformation=0xafff9b0) returned 0x0 [0226.407] NtSetInformationFile (FileHandle=0x1060, IoStatusBlock=0xafff9a8, FileInformation=0xafff9b0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db8148) returned 1 [0226.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa88) returned 1 [0226.503] FlushFileBuffers (hFile=0x1060) returned 1 [0226.523] CloseHandle (hObject=0x1060) returned 1 [0226.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x126) returned 0x3db78c0 [0226.581] wcscpy (in: _Dest=0x3db78c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\" [0226.581] wcscat (in: _Dest=0x3db78c0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\68814F-Readme.txt" [0226.581] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\68814f-readme.txt")) returned 0xffffffff [0226.581] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fil\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1094 [0226.603] WriteFile (in: hFile=0x1094, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xafff9ec, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xafff9ec*=0x8b9, lpOverlapped=0x0) returned 1 [0226.610] CloseHandle (hObject=0x1094) returned 1 [0226.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db78c0) returned 1 [0226.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb44c0) returned 1 Thread: id = 6761 os_tid = 0x1fd8 [0197.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json")) returned 0x2020 [0203.902] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0222.758] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1178 [0222.759] GetFileSizeEx (in: hFile=0x1178, lpFileSize=0xdcdfb9c | out: lpFileSize=0xdcdfb9c*=241) returned 1 [0222.759] SetFilePointerEx (in: hFile=0x1178, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.759] ReadFile (in: hFile=0x1178, lpBuffer=0xdcdfb78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdcdfb88, lpOverlapped=0x0 | out: lpBuffer=0xdcdfb78*, lpNumberOfBytesRead=0xdcdfb88*=0x4, lpOverlapped=0x0) returned 1 [0222.761] SetFilePointerEx (in: hFile=0x1178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cab8 [0222.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0222.762] NtQuerySystemTime (in: CurrentTime=0xdcdfb10 | out: CurrentTime=0xdcdfb10*=132462178010196000) returned 0x0 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x45e84b9 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x6b34a180 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x4105cce7 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x24966ab [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x4b4fe164 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x32a6675c [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x337ba6ab [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x39b36cab [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x764ca4b4 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x6c7704bc [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x267db27b [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x67d4d00b [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x24991d28 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x37b9afeb [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x3aa863e [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x4e4cbfbb [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x396c129f [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x79ea8368 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x53fada72 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x5e1a89d9 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x6bd268ca [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x34392cbd [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x2cc795c9 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x3427e802 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x56d6c7bd [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x770e3b68 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x101af854 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x37fad7e [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x774d6c02 [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x4f78310f [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x63f95b6c [0222.762] RtlRandomEx (in: Seed=0xdcdfb08 | out: Seed=0xdcdfb08) returned 0x2109f2a3 [0222.770] SetFilePointerEx (in: hFile=0x1178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.770] WriteFile (in: hFile=0x1178, lpBuffer=0x7ada320*, nNumberOfBytesToWrite=0xf1, lpNumberOfBytesWritten=0xdcdfb08, lpOverlapped=0x0 | out: lpBuffer=0x7ada320*, lpNumberOfBytesWritten=0xdcdfb08*=0xf1, lpOverlapped=0x0) returned 1 [0226.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0226.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0226.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53058) returned 1 [0226.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ada320) returned 1 [0226.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acf4e8) returned 1 [0226.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a22ff0) returned 1 [0226.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24548) returned 1 [0226.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a379e0 [0226.248] SetFilePointerEx (in: hFile=0x1178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.248] WriteFile (in: hFile=0x1178, lpBuffer=0x7cb6480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdcdfb90, lpOverlapped=0x0 | out: lpBuffer=0x7cb6480*, lpNumberOfBytesWritten=0xdcdfb90*=0x10c, lpOverlapped=0x0) returned 1 [0226.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0226.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0226.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bff0 [0226.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c518 [0226.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0226.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0226.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.348] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="97") returned 2 [0226.348] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="81") returned 2 [0226.348] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="8d") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="a8") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="36") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="24") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="5c") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="cb") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="14") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="36") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="f3") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="bc") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="a6") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="0b") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="a3") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="0d") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="c7") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="ff") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="b0") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="c5") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="42") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="44") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="41") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="f7") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="e6") returned 2 [0226.349] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="ae") returned 2 [0226.349] RtlInitAnsiString (in: DestinationString=0xdcdfb18, SourceString="97818da836245ccb1436f3bca60ba30dc7ffb0c5424441f7e6ae" | out: DestinationString="97818da836245ccb1436f3bca60ba30dc7ffb0c5424441f7e6ae") [0226.349] RtlAnsiStringToUnicodeString (in: DestinationString=0xdcdfb10, SourceString="97818da836245ccb1436f3bca60ba30dc7ffb0c5424441f7e6ae", AllocateDestinationString=1 | out: DestinationString="97818da836245ccb1436f3bca60ba30dc7ffb0c5424441f7e6ae") returned 0x0 [0226.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f7b8 [0226.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9300) returned 1 [0226.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd73c0) returned 1 [0226.408] NtQueryInformationFile (in: FileHandle=0x1178, IoStatusBlock=0xdcdfae0, FileInformation=0xdcdfae8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdcdfae0, FileInformation=0xdcdfae8) returned 0x0 [0226.408] NtSetInformationFile (FileHandle=0x1178, IoStatusBlock=0xdcdfae0, FileInformation=0xdcdfae8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db78c0) returned 1 [0226.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 [0226.508] FlushFileBuffers (hFile=0x1178) returned 1 [0226.528] CloseHandle (hObject=0x1178) returned 1 [0226.583] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3db8148 [0226.583] wcscpy (in: _Dest=0x3db8148, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\" [0226.583] wcscat (in: _Dest=0x3db8148, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\68814F-Readme.txt" [0226.583] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\68814f-readme.txt")) returned 0xffffffff [0226.584] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\fr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17f8 [0226.605] WriteFile (in: hFile=0x17f8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xdcdfb24, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xdcdfb24*=0x8b9, lpOverlapped=0x0) returned 1 [0226.615] CloseHandle (hObject=0x17f8) returned 1 [0226.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db8148) returned 1 [0226.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb45e8) returned 1 Thread: id = 6762 os_tid = 0x1fdc [0197.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json")) returned 0x2020 [0203.903] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0222.771] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe80 [0222.771] GetFileSizeEx (in: hFile=0xe80, lpFileSize=0xd26f7a4 | out: lpFileSize=0xd26f7a4*=263) returned 1 [0222.771] SetFilePointerEx (in: hFile=0xe80, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.771] ReadFile (in: hFile=0xe80, lpBuffer=0xd26f780, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd26f790, lpOverlapped=0x0 | out: lpBuffer=0xd26f780*, lpNumberOfBytesRead=0xd26f790*=0x4, lpOverlapped=0x0) returned 1 [0222.773] SetFilePointerEx (in: hFile=0xe80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0222.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c158 [0222.773] NtQuerySystemTime (in: CurrentTime=0xd26f718 | out: CurrentTime=0xd26f718*=132462178010196000) returned 0x0 [0222.773] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x51c8eaf8 [0222.773] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x4fe38373 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x7ec20938 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x5c0569c6 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x3e40a345 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x46164cc4 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x6d504535 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x6aae1bb5 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x8f515fc [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x76d9e37c [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0xb0f5460 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x4b297318 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x18e5716 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x141e1bc1 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x4b5758fc [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x5e5b8378 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x78263bd7 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x46f52cd3 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x480c1fe [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x390078f7 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x76d9e37c [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x31f59967 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x7df77e5d [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x7c8be1eb [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0xd4fca95 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x58fc68b1 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x19ff2809 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x7666b08d [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x3ad62ad6 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x3c0ed2d4 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x58fc68b1 [0222.774] RtlRandomEx (in: Seed=0xd26f710 | out: Seed=0xd26f710) returned 0x19ff2809 [0222.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7addf28 [0222.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ae1b30 [0222.784] ReadFile (in: hFile=0xe80, lpBuffer=0x7addf28, nNumberOfBytesToRead=0x107, lpNumberOfBytesRead=0xd26f70c, lpOverlapped=0x0 | out: lpBuffer=0x7addf28*, lpNumberOfBytesRead=0xd26f70c*=0x107, lpOverlapped=0x0) returned 1 [0222.784] SetFilePointerEx (in: hFile=0xe80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.784] WriteFile (in: hFile=0xe80, lpBuffer=0x7ae1b30*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0xd26f710, lpOverlapped=0x0 | out: lpBuffer=0x7ae1b30*, lpNumberOfBytesWritten=0xd26f710*=0x107, lpOverlapped=0x0) returned 1 [0226.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e526f8 [0226.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0226.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0226.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ae1b30) returned 1 [0226.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7addf28) returned 1 [0226.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23068) returned 1 [0226.250] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a243e0) returned 1 [0226.250] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38190 [0226.250] SetFilePointerEx (in: hFile=0xe80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.251] WriteFile (in: hFile=0xe80, lpBuffer=0x7cb6598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd26f798, lpOverlapped=0x0 | out: lpBuffer=0x7cb6598*, lpNumberOfBytesWritten=0xd26f798*=0x10c, lpOverlapped=0x0) returned 1 [0226.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c298 [0226.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c298) returned 1 [0226.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c298 [0226.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0226.352] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cab8 [0226.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cab8) returned 1 [0226.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.353] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="33") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="0e") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="ec") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="cb") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="9a") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="3a") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="be") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="10") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="f0") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="44") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="a6") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="17") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="8b") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="c0") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="2c") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="4a") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="f1") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="95") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="6d") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="81") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="e4") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="82") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="d5") returned 2 [0226.353] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="a2") returned 2 [0226.354] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="f6") returned 2 [0226.354] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="f6") returned 2 [0226.354] RtlInitAnsiString (in: DestinationString=0xd26f720, SourceString="330eeccb9a3abe10f044a6178bc02c4af1956d81e482d5a2f6f6" | out: DestinationString="330eeccb9a3abe10f044a6178bc02c4af1956d81e482d5a2f6f6") [0226.354] RtlAnsiStringToUnicodeString (in: DestinationString=0xd26f718, SourceString="330eeccb9a3abe10f044a6178bc02c4af1956d81e482d5a2f6f6", AllocateDestinationString=1 | out: DestinationString="330eeccb9a3abe10f044a6178bc02c4af1956d81e482d5a2f6f6") returned 0x0 [0226.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f038 [0226.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9070) returned 1 [0226.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd7198) returned 1 [0226.409] NtQueryInformationFile (in: FileHandle=0xe80, IoStatusBlock=0xd26f6e8, FileInformation=0xd26f6f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd26f6e8, FileInformation=0xd26f6f0) returned 0x0 [0226.409] NtSetInformationFile (FileHandle=0xe80, IoStatusBlock=0xd26f6e8, FileInformation=0xd26f6f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d2100) returned 1 [0226.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f038) returned 1 [0226.513] FlushFileBuffers (hFile=0xe80) returned 1 [0226.532] CloseHandle (hObject=0xe80) returned 1 [0226.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x2d2100 [0226.586] wcscpy (in: _Dest=0x2d2100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\" [0226.586] wcscat (in: _Dest=0x2d2100, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\68814F-Readme.txt" [0226.586] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\68814f-readme.txt")) returned 0xffffffff [0226.586] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\he\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13e4 [0226.604] WriteFile (in: hFile=0x13e4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xd26f72c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xd26f72c*=0x8b9, lpOverlapped=0x0) returned 1 [0226.612] CloseHandle (hObject=0x13e4) returned 1 [0226.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2d2100) returned 1 [0226.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4710) returned 1 Thread: id = 6763 os_tid = 0x1fe0 [0197.837] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json")) returned 0x2020 [0203.908] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0222.517] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1440 [0222.517] GetFileSizeEx (in: hFile=0x1440, lpFileSize=0xeeaf9a4 | out: lpFileSize=0xeeaf9a4*=297) returned 1 [0222.517] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0x125, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.518] ReadFile (in: hFile=0x1440, lpBuffer=0xeeaf980, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xeeaf990, lpOverlapped=0x0 | out: lpBuffer=0xeeaf980*, lpNumberOfBytesRead=0xeeaf990*=0x4, lpOverlapped=0x0) returned 1 [0222.519] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0222.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0222.519] NtQuerySystemTime (in: CurrentTime=0xeeaf918 | out: CurrentTime=0xeeaf918*=132462178007700000) returned 0x0 [0222.519] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x6adc3be [0222.519] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0xaeb9913 [0222.519] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x35049b9a [0222.519] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0xdceb767 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x38eb814f [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0xa9d7c5a [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x7771a84 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x497dbc61 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x1506f807 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x3fabb138 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x4c9594be [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x4aed3c01 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x682eafe [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x130c613c [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x27158dfc [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x47320f49 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x21d80d29 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x2b953d73 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x63e1a26e [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x5dbbed10 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x7158cfa [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x6c56ffd1 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x6be020fc [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x10d1f4e7 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x49c77c08 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0xb6b7c99 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x3b6f3c6c [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x693604b [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x20f35905 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x5cddc6f4 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x2eda8923 [0222.520] RtlRandomEx (in: Seed=0xeeaf910 | out: Seed=0xeeaf910) returned 0x25294cf5 [0222.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b3a320 [0222.528] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b3df28 [0222.528] ReadFile (in: hFile=0x1440, lpBuffer=0x7b3a320, nNumberOfBytesToRead=0x129, lpNumberOfBytesRead=0xeeaf90c, lpOverlapped=0x0 | out: lpBuffer=0x7b3a320*, lpNumberOfBytesRead=0xeeaf90c*=0x129, lpOverlapped=0x0) returned 1 [0222.529] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.529] WriteFile (in: hFile=0x1440, lpBuffer=0x7b3df28*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0xeeaf910, lpOverlapped=0x0 | out: lpBuffer=0x7b3df28*, lpNumberOfBytesWritten=0xeeaf910*=0x129, lpOverlapped=0x0) returned 1 [0226.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0226.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53508 [0226.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53508) returned 1 [0226.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3df28) returned 1 [0226.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3a320) returned 1 [0226.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0226.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8d10) returned 1 [0226.208] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b30 [0226.208] SetFilePointerEx (in: hFile=0x1440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.208] WriteFile (in: hFile=0x1440, lpBuffer=0x300d718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xeeaf998, lpOverlapped=0x0 | out: lpBuffer=0x300d718*, lpNumberOfBytesWritten=0xeeaf998*=0x10c, lpOverlapped=0x0) returned 1 [0226.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b708 [0226.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b708) returned 1 [0226.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b708 [0226.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0226.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0226.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd60) returned 1 [0226.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.299] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="af") returned 2 [0226.299] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="37") returned 2 [0226.299] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="4f") returned 2 [0226.299] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="f3") returned 2 [0226.299] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="61") returned 2 [0226.299] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="b5") returned 2 [0226.299] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="5f") returned 2 [0226.299] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="49") returned 2 [0226.299] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="38") returned 2 [0226.299] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="d9") returned 2 [0226.299] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="5e") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="b1") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="86") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="7e") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="b5") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="3e") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="a9") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="64") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="fc") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="ca") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="93") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="29") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="dd") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="53") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="92") returned 2 [0226.300] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="3b") returned 2 [0226.300] RtlInitAnsiString (in: DestinationString=0xeeaf920, SourceString="af374ff361b55f4938d95eb1867eb53ea964fcca9329dd53923b" | out: DestinationString="af374ff361b55f4938d95eb1867eb53ea964fcca9329dd53923b") [0226.300] RtlAnsiStringToUnicodeString (in: DestinationString=0xeeaf918, SourceString="af374ff361b55f4938d95eb1867eb53ea964fcca9329dd53923b", AllocateDestinationString=1 | out: DestinationString="af374ff361b55f4938d95eb1867eb53ea964fcca9329dd53923b") returned 0x0 [0226.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f1a0 [0226.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8b50) returned 1 [0226.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f33ba8) returned 1 [0226.389] NtQueryInformationFile (in: FileHandle=0x1440, IoStatusBlock=0xeeaf8e8, FileInformation=0xeeaf8f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xeeaf8e8, FileInformation=0xeeaf8f0) returned 0x0 [0226.389] NtSetInformationFile (FileHandle=0x1440, IoStatusBlock=0xeeaf8e8, FileInformation=0xeeaf8f0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca1b0) returned 1 [0226.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0226.455] FlushFileBuffers (hFile=0x1440) returned 1 [0226.470] CloseHandle (hObject=0x1440) returned 1 [0226.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca420 [0226.551] wcscpy (in: _Dest=0x3eca420, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\" [0226.551] wcscat (in: _Dest=0x3eca420, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\68814F-Readme.txt" [0226.551] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\68814f-readme.txt")) returned 0xffffffff [0226.551] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.648] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xeeaf92c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xeeaf92c*=0x8b9, lpOverlapped=0x0) returned 1 [0226.650] CloseHandle (hObject=0x1060) returned 1 [0226.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca420) returned 1 [0226.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4838) returned 1 Thread: id = 6764 os_tid = 0x1fe4 [0197.837] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json")) returned 0x2020 [0203.912] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0222.347] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1cf8 [0222.348] GetFileSizeEx (in: hFile=0x1cf8, lpFileSize=0xb85f7ac | out: lpFileSize=0xb85f7ac*=220) returned 1 [0222.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0222.349] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0222.349] NtQuerySystemTime (in: CurrentTime=0xb85f720 | out: CurrentTime=0xb85f720*=132462178005984000) returned 0x0 [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x1232fe89 [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x2a47f70f [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x72e9cc57 [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x741271b6 [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x43bc5e6d [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x22be650a [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x7ef60b8b [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x20dd751c [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x7a603c2f [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x549126e6 [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0xc65797b [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x66330d4f [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x3a67869b [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x85a3b3e [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x2cb8085 [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x80489be [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x19140e6d [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x798d328e [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x664913c6 [0222.349] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x3a59ce0d [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x18518984 [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x526e9c81 [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x4a7588f6 [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x5963220 [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x394839b0 [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x7bc7aabe [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x514f775b [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x2e8a1339 [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x1b707983 [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x88513fe [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x38bba3a5 [0222.350] RtlRandomEx (in: Seed=0xb85f718 | out: Seed=0xb85f718) returned 0x18922230 [0222.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c4eb90 [0222.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0222.361] ReadFile (in: hFile=0x1cf8, lpBuffer=0x7c4eb90, nNumberOfBytesToRead=0xdc, lpNumberOfBytesRead=0xb85f714, lpOverlapped=0x0 | out: lpBuffer=0x7c4eb90*, lpNumberOfBytesRead=0xb85f714*=0xdc, lpOverlapped=0x0) returned 1 [0222.363] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.363] WriteFile (in: hFile=0x1cf8, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0xb85f718, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0xb85f718*=0xdc, lpOverlapped=0x0) returned 1 [0223.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0223.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0223.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c30) returned 1 [0223.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0223.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c4eb90) returned 1 [0223.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0223.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0223.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37da0 [0223.346] SetFilePointerEx (in: hFile=0x1cf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.346] WriteFile (in: hFile=0x1cf8, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb85f7a0, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0xb85f7a0*=0x10c, lpOverlapped=0x0) returned 1 [0223.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9ad8 [0223.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a230e0 [0223.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0223.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0223.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c838 [0223.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0223.646] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0223.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0223.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a230e0) returned 1 [0223.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0223.647] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.647] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="54") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="12") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="38") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="34") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="61") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="de") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="68") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="96") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="a8") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="d7") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="0d") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="09") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="89") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="7b") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="93") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="80") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="8f") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="5d") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="db") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="90") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="ad") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="c5") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="14") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="19") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="5f") returned 2 [0223.647] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="1d") returned 2 [0223.647] RtlInitAnsiString (in: DestinationString=0xb85f728, SourceString="5412383461de6896a8d70d09897b93808f5ddb90adc514195f1d" | out: DestinationString="5412383461de6896a8d70d09897b93808f5ddb90adc514195f1d") [0223.648] RtlAnsiStringToUnicodeString (in: DestinationString=0xb85f720, SourceString="5412383461de6896a8d70d09897b93808f5ddb90adc514195f1d", AllocateDestinationString=1 | out: DestinationString="5412383461de6896a8d70d09897b93808f5ddb90adc514195f1d") returned 0x0 [0223.648] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a23a40 [0223.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cc18) returned 1 [0223.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cef158) returned 1 [0223.840] NtQueryInformationFile (in: FileHandle=0x1cf8, IoStatusBlock=0xb85f6f0, FileInformation=0xb85f6f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb85f6f0, FileInformation=0xb85f6f8) returned 0x0 [0223.840] NtSetInformationFile (FileHandle=0x1cf8, IoStatusBlock=0xb85f6f0, FileInformation=0xb85f6f8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0224.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5748) returned 1 [0224.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a40) returned 1 [0224.009] FlushFileBuffers (hFile=0x1cf8) returned 1 [0224.015] CloseHandle (hObject=0x1cf8) returned 1 [0224.055] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7cd43c8 [0224.055] wcscpy (in: _Dest=0x7cd43c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\" [0224.055] wcscat (in: _Dest=0x7cd43c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\68814F-Readme.txt" [0224.055] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\68814f-readme.txt")) returned 0xffffffff [0224.055] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2250 [0224.064] WriteFile (in: hFile=0x2250, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb85f734, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb85f734*=0x8b9, lpOverlapped=0x0) returned 1 [0224.084] CloseHandle (hObject=0x2250) returned 1 [0224.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd43c8) returned 1 [0224.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4960) returned 1 Thread: id = 6765 os_tid = 0x1fe8 [0197.838] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json")) returned 0x2020 [0203.893] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0222.578] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1318 [0222.579] GetFileSizeEx (in: hFile=0x1318, lpFileSize=0xfb9fdf4 | out: lpFileSize=0xfb9fdf4*=229) returned 1 [0222.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0222.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0222.579] NtQuerySystemTime (in: CurrentTime=0xfb9fd68 | out: CurrentTime=0xfb9fd68*=132462178008324000) returned 0x0 [0222.579] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0xf36444f [0222.579] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x664f1939 [0222.579] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x1bab141c [0222.579] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x4e7039b3 [0222.579] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x2815b07c [0222.579] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x80fdfb0 [0222.579] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x5e591d7b [0222.579] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x1784242d [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x5528c0e7 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x44efdbd5 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x319871a7 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x49b9f882 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x7b83dcd4 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x59ec030 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x5ce98bf3 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x3f923e3e [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x4794292f [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x16d86fe7 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x6447a5ff [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x583bb846 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x62224e74 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x138da19b [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x1c8e678f [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x579f538c [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x3226f7a [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x4f5e893e [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x28368ee4 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x2dc1f95c [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x72f653c7 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x1f622a5 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x76e18253 [0222.580] RtlRandomEx (in: Seed=0xfb9fd60 | out: Seed=0xfb9fd60) returned 0x19be03ed [0222.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5fb70 [0222.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b63778 [0222.588] ReadFile (in: hFile=0x1318, lpBuffer=0x7b5fb70, nNumberOfBytesToRead=0xe5, lpNumberOfBytesRead=0xfb9fd5c, lpOverlapped=0x0 | out: lpBuffer=0x7b5fb70*, lpNumberOfBytesRead=0xfb9fd5c*=0xe5, lpOverlapped=0x0) returned 1 [0222.590] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.590] WriteFile (in: hFile=0x1318, lpBuffer=0x7b63778*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0xfb9fd60, lpOverlapped=0x0 | out: lpBuffer=0x7b63778*, lpNumberOfBytesWritten=0xfb9fd60*=0xe5, lpOverlapped=0x0) returned 1 [0226.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53558 [0226.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e539b8 [0226.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e539b8) returned 1 [0226.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b63778) returned 1 [0226.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5fb70) returned 1 [0226.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0226.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9220) returned 1 [0226.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37590 [0226.221] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.221] WriteFile (in: hFile=0x1318, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfb9fde8, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xfb9fde8*=0x10c, lpOverlapped=0x0) returned 1 [0226.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0226.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c798) returned 1 [0226.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c798 [0226.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0226.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0226.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfc8) returned 1 [0226.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.319] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="fd") returned 2 [0226.319] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="fd") returned 2 [0226.319] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="65") returned 2 [0226.319] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="a0") returned 2 [0226.319] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="06") returned 2 [0226.319] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="62") returned 2 [0226.319] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="b4") returned 2 [0226.319] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="92") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="04") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="e1") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="8c") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="bb") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="5a") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="0a") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="ff") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="90") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="d5") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="cc") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="6d") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="4d") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="0c") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="ee") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="b7") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="c6") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="c9") returned 2 [0226.320] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="c6") returned 2 [0226.320] RtlInitAnsiString (in: DestinationString=0xfb9fd70, SourceString="fdfd65a00662b49204e18cbb5a0aff90d5cc6d4d0ceeb7c6c9c6" | out: DestinationString="fdfd65a00662b49204e18cbb5a0aff90d5cc6d4d0ceeb7c6c9c6") [0226.320] RtlAnsiStringToUnicodeString (in: DestinationString=0xfb9fd68, SourceString="fdfd65a00662b49204e18cbb5a0aff90d5cc6d4d0ceeb7c6c9c6", AllocateDestinationString=1 | out: DestinationString="fdfd65a00662b49204e18cbb5a0aff90d5cc6d4d0ceeb7c6c9c6") returned 0x0 [0226.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f308 [0226.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9ab0) returned 1 [0226.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35c00) returned 1 [0226.397] NtQueryInformationFile (in: FileHandle=0x1318, IoStatusBlock=0xfb9fd38, FileInformation=0xfb9fd40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfb9fd38, FileInformation=0xfb9fd40) returned 0x0 [0226.397] NtSetInformationFile (FileHandle=0x1318, IoStatusBlock=0xfb9fd38, FileInformation=0xfb9fd40, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9e08) returned 1 [0226.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0226.476] FlushFileBuffers (hFile=0x1318) returned 1 [0226.491] CloseHandle (hObject=0x1318) returned 1 [0226.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca690 [0226.566] wcscpy (in: _Dest=0x3eca690, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\" [0226.566] wcscat (in: _Dest=0x3eca690, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\68814F-Readme.txt" [0226.566] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\68814f-readme.txt")) returned 0xffffffff [0226.566] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\hu\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.666] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfb9fd7c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xfb9fd7c*=0x8b9, lpOverlapped=0x0) returned 1 [0226.668] CloseHandle (hObject=0x1060) returned 1 [0226.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca690) returned 1 [0226.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4a88) returned 1 Thread: id = 6766 os_tid = 0x2218 [0197.838] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json")) returned 0x2020 [0203.894] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0222.396] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe8c [0222.397] GetFileSizeEx (in: hFile=0xe8c, lpFileSize=0xfadf824 | out: lpFileSize=0xfadf824*=231) returned 1 [0222.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c608 [0222.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0222.397] NtQuerySystemTime (in: CurrentTime=0xfadf798 | out: CurrentTime=0xfadf798*=132462178006452000) returned 0x0 [0222.397] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x1f228379 [0222.397] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x299f92c8 [0222.397] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x19bdd2da [0222.397] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x78d1723d [0222.397] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x7cb70c5a [0222.397] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x697f9cdf [0222.397] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x2df5c985 [0222.397] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x8cd3fd0 [0222.397] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x63a340e4 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x53fe1810 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x108f5f9f [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x78b808e6 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x44b7d463 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x55eb4693 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x5e275b0c [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x36a963fd [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x6a4d254d [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x71302b1b [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x72038cb1 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x1dfa9e25 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x53f7e1a4 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x2a90e415 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x532068c3 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x5d1c56a8 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x4b66ca3 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x72b18de6 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x24f6973d [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x2217c9de [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x66b91d04 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x27aed714 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0xdc75276 [0222.398] RtlRandomEx (in: Seed=0xfadf790 | out: Seed=0xfadf790) returned 0x35b4e056 [0222.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beaf88 [0222.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0222.430] ReadFile (in: hFile=0xe8c, lpBuffer=0x7beaf88, nNumberOfBytesToRead=0xe7, lpNumberOfBytesRead=0xfadf78c, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesRead=0xfadf78c*=0xe7, lpOverlapped=0x0) returned 1 [0222.432] SetFilePointerEx (in: hFile=0xe8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.432] WriteFile (in: hFile=0xe8c, lpBuffer=0x7beeb90*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0xfadf790, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesWritten=0xfadf790*=0xe7, lpOverlapped=0x0) returned 1 [0226.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0226.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0226.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0226.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0226.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0226.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0226.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa0) returned 1 [0226.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38010 [0226.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9fa0 [0226.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0226.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0226.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0226.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e60 [0226.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb80 [0226.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0226.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0226.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0226.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa0) returned 1 [0226.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deca58 [0226.784] SetFilePointerEx (in: hFile=0xe8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.785] WriteFile (in: hFile=0xe8c, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfadf818, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0xfadf818*=0x10c, lpOverlapped=0x0) returned 1 [0226.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9fa0 [0226.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e328 [0226.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0226.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0226.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bf78 [0226.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0226.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0226.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0226.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0226.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa0) returned 1 [0226.789] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.789] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="be") returned 2 [0226.789] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="77") returned 2 [0226.789] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="29") returned 2 [0226.789] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="09") returned 2 [0226.789] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="c6") returned 2 [0226.789] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="39") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="16") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="0d") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="fd") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="81") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="df") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="2d") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="b9") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="4f") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="bf") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="a9") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="bf") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="f1") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="2d") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="79") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="4a") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="fb") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="87") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="8c") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="43") returned 2 [0226.790] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="30") returned 2 [0226.790] RtlInitAnsiString (in: DestinationString=0xfadf7a0, SourceString="be772909c639160dfd81df2db94fbfa9bff12d794afb878c4330" | out: DestinationString="be772909c639160dfd81df2db94fbfa9bff12d794afb878c4330") [0226.790] RtlAnsiStringToUnicodeString (in: DestinationString=0xfadf798, SourceString="be772909c639160dfd81df2db94fbfa9bff12d794afb878c4330", AllocateDestinationString=1 | out: DestinationString="be772909c639160dfd81df2db94fbfa9bff12d794afb878c4330") returned 0x0 [0226.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e238 [0226.791] RtlFreeAnsiString (AnsiString="b") [0226.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d640) returned 1 [0226.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0226.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0226.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0226.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37e60) returned 1 [0226.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0226.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0226.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0226.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c608) returned 1 [0226.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baa0) returned 1 [0226.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0226.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3dd76c8 [0226.792] wcscat (in: _Dest=0x3dd76c8, _Source="be772909c6391" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\be772909c6391") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\be772909c6391" [0226.792] wcscat (in: _Dest=0x3dd76c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\be772909c6391.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\be772909c6391.68814f" [0226.792] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\be772909c6391.68814f", NtPathName=0xfadf790, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\be772909c6391.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0226.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x7dd91b8 [0226.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd91b8) returned 1 [0226.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b38ef0) returned 1 [0226.795] NtQueryInformationFile (in: FileHandle=0xe8c, IoStatusBlock=0xfadf768, FileInformation=0xfadf770, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfadf768, FileInformation=0xfadf770) returned 0x0 [0226.795] NtSetInformationFile (FileHandle=0xe8c, IoStatusBlock=0xfadf768, FileInformation=0xfadf770, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0226.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0226.797] FlushFileBuffers (hFile=0xe8c) returned 1 [0226.799] CloseHandle (hObject=0xe8c) returned 1 [0226.804] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd76c8 [0226.804] wcscpy (in: _Dest=0x3dd76c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\" [0226.804] wcscat (in: _Dest=0x3dd76c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\68814F-Readme.txt" [0226.804] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\68814f-readme.txt")) returned 0xffffffff [0226.804] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\id\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe8c [0226.805] WriteFile (in: hFile=0xe8c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfadf7ac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xfadf7ac*=0x8b9, lpOverlapped=0x0) returned 1 [0226.807] CloseHandle (hObject=0xe8c) returned 1 [0226.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0226.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb4bb0) returned 1 Thread: id = 6767 os_tid = 0x1fec [0197.838] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cac020 [0197.839] wcscpy (in: _Dest=0x7cac020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0197.839] wcscat (in: _Dest=0x7cac020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\" [0197.839] wcscat (in: _Dest=0x7cac020, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*" [0197.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52f00 [0197.839] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\*", lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0203.903] wcscmp (_String1=".", _String2=".") returned 0 [0203.903] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4733f80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4733f80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.903] wcscmp (_String1="..", _String2=".") returned 1 [0203.903] wcscmp (_String1="..", _String2="..") returned 0 [0203.903] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4734f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.903] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.903] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7e320 [0203.903] wcscpy (in: _Dest=0x7b7e320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN" [0203.903] wcscat (in: _Dest=0x7b7e320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\" [0203.903] wcscat (in: _Dest=0x7b7e320, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_CN\\messages.json" [0203.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7e320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430 [0203.904] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a52f00 | out: lpFindFileData=0x7a52f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4733f80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4734f20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.904] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0203.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52f00) returned 1 [0203.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac020) returned 1 [0203.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38c78) returned 1 Thread: id = 6768 os_tid = 0x1dc0 [0197.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif")) returned 0x20 [0199.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0199.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.338] GetLastError () returned 0x5 [0199.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0199.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57500) returned 1 Thread: id = 6769 os_tid = 0x1ff0 [0197.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20 [0199.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0199.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.340] GetLastError () returned 0x5 [0199.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0199.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575c8) returned 1 Thread: id = 6770 os_tid = 0x1ff4 [0197.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20 [0199.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0199.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.342] GetLastError () returned 0x5 [0199.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0199.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57cd0) returned 1 Thread: id = 6771 os_tid = 0x1ff8 [0197.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif")) returned 0x20 [0199.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0199.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.344] GetLastError () returned 0x5 [0199.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0199.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3a698) returned 1 Thread: id = 6772 os_tid = 0x2228 [0197.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20 [0199.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0199.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.346] GetLastError () returned 0x5 [0199.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0199.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86a80) returned 1 Thread: id = 6773 os_tid = 0x1ffc [0197.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20 [0199.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0199.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.347] GetLastError () returned 0x5 [0199.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0199.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56628) returned 1 Thread: id = 6774 os_tid = 0x80c [0197.844] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json")) returned 0x2020 [0197.844] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json", dwFileAttributes=0x20) returned 1 [0207.269] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x121c [0207.269] GetFileSizeEx (in: hFile=0x121c, lpFileSize=0x1023fc1c | out: lpFileSize=0x1023fc1c*=251) returned 1 [0207.269] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0xf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.269] ReadFile (in: hFile=0x121c, lpBuffer=0x1023fbf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1023fc08, lpOverlapped=0x0 | out: lpBuffer=0x1023fbf8*, lpNumberOfBytesRead=0x1023fc08*=0x4, lpOverlapped=0x0) returned 1 [0207.271] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0207.271] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0207.271] NtQuerySystemTime (in: CurrentTime=0x1023fb90 | out: CurrentTime=0x1023fb90*=132462177858564000) returned 0x0 [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x284dbd0e [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x37779a10 [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x22ab0a8a [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x1bc2e5f2 [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x234124c4 [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x3bd907b4 [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x5163bd93 [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x75df8a06 [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x46fcab62 [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x53ec91e6 [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x35d65310 [0207.271] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x43c946ab [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x46f3dad6 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x359b2150 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x6d5f67e6 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x1653b0ef [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x56b69f7 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x76af475a [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x1affa5f5 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x6a6448fa [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x565d14d2 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x7f0a7cc9 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x1624ac87 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x20db8953 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x335bde84 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x4c9d8ef0 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x57c8ecb7 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x68d3e43a [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x1c950db9 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x7d8508bd [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x4ab1cfd0 [0207.272] RtlRandomEx (in: Seed=0x1023fb88 | out: Seed=0x1023fb88) returned 0x2b1113e1 [0207.280] ReadFile (in: hFile=0x121c, lpBuffer=0x7b93778, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0x1023fb84, lpOverlapped=0x0 | out: lpBuffer=0x7b93778*, lpNumberOfBytesRead=0x1023fb84*=0xfb, lpOverlapped=0x0) returned 1 [0207.281] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.281] WriteFile (in: hFile=0x121c, lpBuffer=0x7b97380*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x1023fb88, lpOverlapped=0x0 | out: lpBuffer=0x7b97380*, lpNumberOfBytesWritten=0x1023fb88*=0xfb, lpOverlapped=0x0) returned 1 [0208.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0208.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0208.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0208.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b97380) returned 1 [0208.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0208.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cdb0) returned 1 [0208.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbddf0) returned 1 [0208.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38280 [0208.965] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.965] WriteFile (in: hFile=0x121c, lpBuffer=0x7cd3088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1023fc10, lpOverlapped=0x0 | out: lpBuffer=0x7cd3088*, lpNumberOfBytesWritten=0x1023fc10*=0x10c, lpOverlapped=0x0) returned 1 [0209.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0209.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0209.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3448 [0209.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0209.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0209.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c30) returned 1 [0209.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.343] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.343] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="04") returned 2 [0209.343] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="52") returned 2 [0209.344] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="47") returned 2 [0209.344] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="ff") returned 2 [0209.344] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="4c") returned 2 [0209.344] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="78") returned 2 [0209.344] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="25") returned 2 [0209.344] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="89") returned 2 [0209.344] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="71") returned 2 [0209.344] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="6f") returned 2 [0209.344] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="b2") returned 2 [0209.344] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="d7") returned 2 [0209.344] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="b4") returned 2 [0209.344] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="5c") returned 2 [0209.344] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="50") returned 2 [0209.344] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="b0") returned 2 [0209.344] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="e0") returned 2 [0209.344] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="e4") returned 2 [0209.344] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="5c") returned 2 [0209.344] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="48") returned 2 [0209.344] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="d8") returned 2 [0209.345] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="ae") returned 2 [0209.345] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="96") returned 2 [0209.345] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="68") returned 2 [0209.345] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="62") returned 2 [0209.345] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="00") returned 2 [0209.345] RtlInitAnsiString (in: DestinationString=0x1023fb98, SourceString="045247ff4c782589716fb2d7b45c50b0e0e45c48d8ae96686200" | out: DestinationString="045247ff4c782589716fb2d7b45c50b0e0e45c48d8ae96686200") [0209.345] RtlAnsiStringToUnicodeString (in: DestinationString=0x1023fb90, SourceString="045247ff4c782589716fb2d7b45c50b0e0e45c48d8ae96686200", AllocateDestinationString=1 | out: DestinationString="045247ff4c782589716fb2d7b45c50b0e0e45c48d8ae96686200") returned 0x0 [0209.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c720 [0209.345] wcscat (in: _Dest=0x7cd5748, _Source="045247ff4c782" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\045247ff4c782") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\045247ff4c782" [0209.345] wcscat (in: _Dest=0x7cd5748, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\045247ff4c782.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\045247ff4c782.68814f" [0209.345] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\045247ff4c782.68814f", NtPathName=0x1023fb88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\et\\045247ff4c782.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc8c0 [0209.619] WriteFile (in: hFile=0x1570, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1023fba4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x1023fba4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.727] CloseHandle (hObject=0x1570) returned 1 [0210.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03f80) returned 1 [0210.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cba5e8) returned 1 Thread: id = 6775 os_tid = 0x1dc4 [0197.845] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json")) returned 0x2020 [0197.845] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0207.281] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xea4 [0207.281] GetFileSizeEx (in: hFile=0xea4, lpFileSize=0xef5fce4 | out: lpFileSize=0xef5fce4*=257) returned 1 [0207.281] SetFilePointerEx (in: hFile=0xea4, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.281] ReadFile (in: hFile=0xea4, lpBuffer=0xef5fcc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xef5fcd0, lpOverlapped=0x0 | out: lpBuffer=0xef5fcc0*, lpNumberOfBytesRead=0xef5fcd0*=0x4, lpOverlapped=0x0) returned 1 [0207.283] SetFilePointerEx (in: hFile=0xea4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0207.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0207.284] NtQuerySystemTime (in: CurrentTime=0xef5fc58 | out: CurrentTime=0xef5fc58*=132462177858564000) returned 0x0 [0207.284] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x281fbb78 [0207.284] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x78a0729d [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x65eb53cb [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x8537329 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x4d89bd0f [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x6808abac [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x22534bbc [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x262ea67f [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x4b7f4f38 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x75b9b619 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x66a5f10 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x293eb408 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x4b7f0a9 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x150900d [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x26da097f [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x23bf2d6 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x1393cff5 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x22534bbc [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x50b84ad0 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x1cdaa449 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x26aeff74 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x4ca0fb87 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x477ae271 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x35d65310 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0xfc0cad4 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x432b5762 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x4abd7513 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x53df5ad9 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x7f59f7d0 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x7a16df7c [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x7d9693e5 [0207.285] RtlRandomEx (in: Seed=0xef5fc50 | out: Seed=0xef5fc50) returned 0x436125cc [0207.293] ReadFile (in: hFile=0xea4, lpBuffer=0x7b9af88, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0xef5fc4c, lpOverlapped=0x0 | out: lpBuffer=0x7b9af88*, lpNumberOfBytesRead=0xef5fc4c*=0x101, lpOverlapped=0x0) returned 1 [0207.293] SetFilePointerEx (in: hFile=0xea4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.293] WriteFile (in: hFile=0xea4, lpBuffer=0x7b9eb90*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xef5fc50, lpOverlapped=0x0 | out: lpBuffer=0x7b9eb90*, lpNumberOfBytesWritten=0xef5fc50*=0x101, lpOverlapped=0x0) returned 1 [0208.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0208.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0208.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cba8) returned 1 [0208.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9eb90) returned 1 [0208.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9af88) returned 1 [0208.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0208.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0208.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a382e0 [0208.969] SetFilePointerEx (in: hFile=0xea4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.969] WriteFile (in: hFile=0xea4, lpBuffer=0x7cd2480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xef5fcd8, lpOverlapped=0x0 | out: lpBuffer=0x7cd2480*, lpNumberOfBytesWritten=0xef5fcd8*=0x10c, lpOverlapped=0x0) returned 1 [0209.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f3f8 [0209.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cf0 [0209.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cf0) returned 1 [0209.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2cf0 [0209.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3088 [0209.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0209.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4be0) returned 1 [0209.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0209.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.357] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.357] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="96") returned 2 [0209.357] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="97") returned 2 [0209.357] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="82") returned 2 [0209.357] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="6b") returned 2 [0209.357] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="76") returned 2 [0209.358] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="e9") returned 2 [0209.358] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="cd") returned 2 [0209.358] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="c3") returned 2 [0209.358] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="ca") returned 2 [0209.358] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="20") returned 2 [0209.358] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="08") returned 2 [0209.358] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="67") returned 2 [0209.358] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="ea") returned 2 [0209.358] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="cd") returned 2 [0209.358] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="8f") returned 2 [0209.358] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="c9") returned 2 [0209.358] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="5b") returned 2 [0209.358] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="74") returned 2 [0209.358] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="ed") returned 2 [0209.358] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="a5") returned 2 [0209.358] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="bf") returned 2 [0209.358] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="20") returned 2 [0209.358] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="ce") returned 2 [0209.358] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="ca") returned 2 [0209.358] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="47") returned 2 [0209.358] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="46") returned 2 [0209.359] RtlInitAnsiString (in: DestinationString=0xef5fc60, SourceString="9697826b76e9cdc3ca200867eacd8fc95b74eda5bf20ceca4746" | out: DestinationString="9697826b76e9cdc3ca200867eacd8fc95b74eda5bf20ceca4746") [0209.359] RtlAnsiStringToUnicodeString (in: DestinationString=0xef5fc58, SourceString="9697826b76e9cdc3ca200867eacd8fc95b74eda5bf20ceca4746", AllocateDestinationString=1 | out: DestinationString="9697826b76e9cdc3ca200867eacd8fc95b74eda5bf20ceca4746") returned 0x0 [0209.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f470 [0209.359] wcscat (in: _Dest=0x7cd4290, _Source="9697826b76e9c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\9697826b76e9c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\9697826b76e9c" [0209.359] wcscat (in: _Dest=0x7cd4290, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\9697826b76e9c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\9697826b76e9c.68814f" [0209.359] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\9697826b76e9c.68814f", NtPathName=0xef5fc50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pl\\9697826b76e9c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddca08 Thread: id = 6776 os_tid = 0xff8 [0197.846] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json")) returned 0x2020 [0197.846] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0207.294] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1434 [0207.294] GetFileSizeEx (in: hFile=0x1434, lpFileSize=0xfc0fec4 | out: lpFileSize=0xfc0fec4*=293) returned 1 [0207.294] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x121, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.294] ReadFile (in: hFile=0x1434, lpBuffer=0xfc0fea0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfc0feb0, lpOverlapped=0x0 | out: lpBuffer=0xfc0fea0*, lpNumberOfBytesRead=0xfc0feb0*=0x4, lpOverlapped=0x0) returned 1 [0207.296] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0207.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0207.296] NtQuerySystemTime (in: CurrentTime=0xfc0fe38 | out: CurrentTime=0xfc0fe38*=132462177858720000) returned 0x0 [0207.296] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x1fca26ba [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x19d2d2d [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0xc8550a3 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x4f2de21 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x4945f3a1 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x58ba1267 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x3eadc463 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0xc4bd4bc [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x4377ffbf [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x536a6537 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x33b5e2a7 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x43d019e [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x5c07f8c6 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x19d2d2d [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x2603cdbf [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x2da9cae [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x309057e9 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x1cebf2d9 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x3b7a7574 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x1a46a735 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x1997572e [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x71f61b36 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x3d542689 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x66a5f10 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x14118ea8 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x305d5ace [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x582303b4 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x7000b873 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x731e1da3 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x48fd40ca [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x582303b4 [0207.297] RtlRandomEx (in: Seed=0xfc0fe30 | out: Seed=0xfc0fe30) returned 0x2da9cae [0207.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bb8fc8 [0207.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bbcbd0 [0207.336] ReadFile (in: hFile=0x1434, lpBuffer=0x7bb8fc8, nNumberOfBytesToRead=0x125, lpNumberOfBytesRead=0xfc0fe2c, lpOverlapped=0x0 | out: lpBuffer=0x7bb8fc8*, lpNumberOfBytesRead=0xfc0fe2c*=0x125, lpOverlapped=0x0) returned 1 [0207.336] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.336] WriteFile (in: hFile=0x1434, lpBuffer=0x7bbcbd0*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0xfc0fe30, lpOverlapped=0x0 | out: lpBuffer=0x7bbcbd0*, lpNumberOfBytesWritten=0xfc0fe30*=0x125, lpOverlapped=0x0) returned 1 [0212.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53530 [0212.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533c8 [0212.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533c8) returned 1 [0212.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bbcbd0) returned 1 [0212.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb8fc8) returned 1 [0212.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c720) returned 1 [0212.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf58) returned 1 [0212.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ce0 [0212.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533c8) returned 1 [0212.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37d10 [0212.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533c8 [0212.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0212.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0212.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c720) returned 1 [0212.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf58) returned 1 [0212.965] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cd3c90 [0212.965] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.965] WriteFile (in: hFile=0x1434, lpBuffer=0x7cd3c90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfc0feb8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3c90*, lpNumberOfBytesWritten=0xfc0feb8*=0x10c, lpOverlapped=0x0) returned 1 [0213.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0213.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0213.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3560 [0213.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5450 [0213.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0213.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d58) returned 1 [0213.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.874] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="fc") returned 2 [0213.874] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="b8") returned 2 [0213.874] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="e5") returned 2 [0213.874] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="ae") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="3d") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="2d") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="85") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="84") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="9a") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="e4") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="20") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="4d") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="b1") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="3a") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="2a") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="60") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="91") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="68") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="7f") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="4e") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="f8") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="b9") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="13") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="46") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="22") returned 2 [0213.875] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="31") returned 2 [0213.875] RtlInitAnsiString (in: DestinationString=0xfc0fe40, SourceString="fcb8e5ae3d2d85849ae4204db13a2a6091687f4ef8b913462231" | out: DestinationString="fcb8e5ae3d2d85849ae4204db13a2a6091687f4ef8b913462231") [0213.875] RtlAnsiStringToUnicodeString (in: DestinationString=0xfc0fe38, SourceString="fcb8e5ae3d2d85849ae4204db13a2a6091687f4ef8b913462231", AllocateDestinationString=1 | out: DestinationString="fcb8e5ae3d2d85849ae4204db13a2a6091687f4ef8b913462231") returned 0x0 [0213.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f740 Thread: id = 6777 os_tid = 0x2700 [0197.846] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json")) returned 0x2020 [0197.847] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0207.336] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11f8 [0207.337] GetFileSizeEx (in: hFile=0x11f8, lpFileSize=0x882f9f4 | out: lpFileSize=0x882f9f4*=281) returned 1 [0207.337] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.337] ReadFile (in: hFile=0x11f8, lpBuffer=0x882f9d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x882f9e0, lpOverlapped=0x0 | out: lpBuffer=0x882f9d0*, lpNumberOfBytesRead=0x882f9e0*=0x4, lpOverlapped=0x0) returned 1 [0207.339] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0207.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0207.339] NtQuerySystemTime (in: CurrentTime=0x882f968 | out: CurrentTime=0x882f968*=132462177859188000) returned 0x0 [0207.339] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x299d8960 [0207.339] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x53bb8850 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x79588a0f [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x11fdbc98 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x1997572e [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x8882384 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x45a38e [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x15b13edd [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x786c425f [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x42eab479 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x6cfad429 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x238f4e18 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x4fea44a0 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x1e80c9fb [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x69495c06 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0xc50b4ab [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x55f53e1b [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x4e880430 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x3c28bd11 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x68d75be9 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x4d89bd0f [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0xdd6cca9 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x669498a4 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x4f466b2d [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x79899436 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x4719359d [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x6414c7eb [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x67549ef7 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x6f144cd2 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x3db0a03 [0207.340] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x201e1df6 [0207.341] RtlRandomEx (in: Seed=0x882f960 | out: Seed=0x882f960) returned 0x7689f12f [0207.351] ReadFile (in: hFile=0x11f8, lpBuffer=0x7bc07d8, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0x882f95c, lpOverlapped=0x0 | out: lpBuffer=0x7bc07d8*, lpNumberOfBytesRead=0x882f95c*=0x119, lpOverlapped=0x0) returned 1 [0207.351] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.351] WriteFile (in: hFile=0x11f8, lpBuffer=0x7bc43e0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x882f960, lpOverlapped=0x0 | out: lpBuffer=0x7bc43e0*, lpNumberOfBytesWritten=0x882f960*=0x119, lpOverlapped=0x0) returned 1 [0212.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e532b0 [0212.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54110 [0212.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54110) returned 1 [0212.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc43e0) returned 1 [0212.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc07d8) returned 1 [0212.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c798) returned 1 [0212.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdfa0) returned 1 [0212.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a40 [0212.962] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.962] WriteFile (in: hFile=0x11f8, lpBuffer=0x7cd3b78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x882f9e8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3b78*, lpNumberOfBytesWritten=0x882f9e8*=0x10c, lpOverlapped=0x0) returned 1 [0213.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6198 [0213.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6198) returned 1 [0213.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec6198 [0213.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0213.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0213.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5db0) returned 1 [0213.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.859] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="ec") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="82") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="2e") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="a5") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="d7") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="65") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="3d") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="08") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="01") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="ca") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="d8") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="c0") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="aa") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="5e") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="ba") returned 2 [0213.859] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="08") returned 2 [0213.860] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="7b") returned 2 [0213.860] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="5a") returned 2 [0213.860] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="0f") returned 2 [0213.860] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="66") returned 2 [0213.860] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="78") returned 2 [0213.860] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="d3") returned 2 [0213.860] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="d4") returned 2 [0213.860] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="ec") returned 2 [0213.860] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="ab") returned 2 [0213.860] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="bc") returned 2 [0213.860] RtlInitAnsiString (in: DestinationString=0x882f970, SourceString="ec822ea5d7653d0801cad8c0aa5eba087b5a0f6678d3d4ecabbc" | out: DestinationString="ec822ea5d7653d0801cad8c0aa5eba087b5a0f6678d3d4ecabbc") [0213.860] RtlAnsiStringToUnicodeString (in: DestinationString=0x882f968, SourceString="ec822ea5d7653d0801cad8c0aa5eba087b5a0f6678d3d4ecabbc", AllocateDestinationString=1 | out: DestinationString="ec822ea5d7653d0801cad8c0aa5eba087b5a0f6678d3d4ecabbc") returned 0x0 [0213.860] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fb00 Thread: id = 6778 os_tid = 0x64c [0197.847] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json")) returned 0x2020 [0197.848] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0207.092] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x3cc [0207.093] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0xe6cf8e4 | out: lpFileSize=0xe6cf8e4*=257) returned 1 [0207.093] SetFilePointerEx (in: hFile=0x3cc, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.093] ReadFile (in: hFile=0x3cc, lpBuffer=0xe6cf8c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe6cf8d0, lpOverlapped=0x0 | out: lpBuffer=0xe6cf8c0*, lpNumberOfBytesRead=0xe6cf8d0*=0x4, lpOverlapped=0x0) returned 1 [0207.094] SetFilePointerEx (in: hFile=0x3cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0207.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0207.095] NtQuerySystemTime (in: CurrentTime=0xe6cf858 | out: CurrentTime=0xe6cf858*=132462177856692000) returned 0x0 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0xc8943e8 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x8aa327c [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x3d2b6784 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x2c9168d0 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x5db9f5bb [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x1c1b455e [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x2c5303a7 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x5253b29d [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x2387b050 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x13a07a9b [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x2830cf7f [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x4a3b471e [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x45d38c21 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x3a809b25 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0xecc74b2 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0xd1f28e [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x1fba63b4 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x4582ed8e [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x713cf1c7 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x4b999b45 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x47d4ff9d [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x2931e3ff [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x424a3f58 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x64dd6091 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0xd748626 [0207.095] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x36629801 [0207.096] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x4b9ba66c [0207.096] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0xdce9116 [0207.096] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x676aa208 [0207.096] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x3c51c9ce [0207.096] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x18890d0b [0207.096] RtlRandomEx (in: Seed=0xe6cf850 | out: Seed=0xe6cf850) returned 0x9b6ffb6 [0207.105] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7dc8818 [0207.105] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7dae3e0 [0207.105] ReadFile (in: hFile=0x3cc, lpBuffer=0x7dc8818, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0xe6cf84c, lpOverlapped=0x0 | out: lpBuffer=0x7dc8818*, lpNumberOfBytesRead=0xe6cf84c*=0x101, lpOverlapped=0x0) returned 1 [0207.105] SetFilePointerEx (in: hFile=0x3cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.105] WriteFile (in: hFile=0x3cc, lpBuffer=0x7dae3e0*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xe6cf850, lpOverlapped=0x0 | out: lpBuffer=0x7dae3e0*, lpNumberOfBytesWritten=0xe6cf850*=0x101, lpOverlapped=0x0) returned 1 [0208.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0208.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0208.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0208.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dae3e0) returned 1 [0208.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc8818) returned 1 [0208.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c5b8) returned 1 [0208.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc608) returned 1 [0208.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a381c0 [0208.929] SetFilePointerEx (in: hFile=0x3cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.929] WriteFile (in: hFile=0x3cc, lpBuffer=0x7cd32b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe6cf8d8, lpOverlapped=0x0 | out: lpBuffer=0x7cd32b8*, lpNumberOfBytesWritten=0xe6cf8d8*=0x10c, lpOverlapped=0x0) returned 1 [0209.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0209.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec59c8) returned 1 [0209.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec59c8 [0209.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0209.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0209.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fe8) returned 1 [0209.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.292] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.292] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="2d") returned 2 [0209.292] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="b6") returned 2 [0209.292] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="fb") returned 2 [0209.292] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="f3") returned 2 [0209.292] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="5e") returned 2 [0209.292] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="79") returned 2 [0209.292] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="73") returned 2 [0209.292] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="31") returned 2 [0209.292] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="ca") returned 2 [0209.292] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="81") returned 2 [0209.292] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="1e") returned 2 [0209.292] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="8a") returned 2 [0209.293] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="4b") returned 2 [0209.293] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="90") returned 2 [0209.293] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="e4") returned 2 [0209.293] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="cb") returned 2 [0209.293] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="34") returned 2 [0209.293] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="03") returned 2 [0209.293] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="39") returned 2 [0209.293] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="cd") returned 2 [0209.293] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="7e") returned 2 [0209.293] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="c8") returned 2 [0209.293] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="1d") returned 2 [0209.293] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="99") returned 2 [0209.293] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="83") returned 2 [0209.293] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="3b") returned 2 [0209.293] RtlInitAnsiString (in: DestinationString=0xe6cf860, SourceString="2db6fbf35e797331ca811e8a4b90e4cb340339cd7ec81d99833b" | out: DestinationString="2db6fbf35e797331ca811e8a4b90e4cb340339cd7ec81d99833b") [0209.293] RtlAnsiStringToUnicodeString (in: DestinationString=0xe6cf858, SourceString="2db6fbf35e797331ca811e8a4b90e4cb340339cd7ec81d99833b", AllocateDestinationString=1 | out: DestinationString="2db6fbf35e797331ca811e8a4b90e4cb340339cd7ec81d99833b") returned 0x0 [0209.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c360 [0209.294] wcscat (in: _Dest=0x7cd4b18, _Source="2db6fbf35e797" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\2db6fbf35e797") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\2db6fbf35e797" [0209.294] wcscat (in: _Dest=0x7cd4b18, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\2db6fbf35e797.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\2db6fbf35e797.68814f" [0209.294] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\2db6fbf35e797.68814f", NtPathName=0xe6cf850, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fi\\2db6fbf35e797.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddd448 [0209.614] WriteFile (in: hFile=0x12fc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe6cf86c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe6cf86c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.624] CloseHandle (hObject=0x12fc) returned 1 [0209.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03640) returned 1 [0209.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbaa88) returned 1 Thread: id = 6779 os_tid = 0x221c [0197.849] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json")) returned 0x2020 [0197.849] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0207.106] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2040 [0207.106] GetFileSizeEx (in: hFile=0x2040, lpFileSize=0xfe4fdf4 | out: lpFileSize=0xfe4fdf4*=260) returned 1 [0207.106] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.106] ReadFile (in: hFile=0x2040, lpBuffer=0xfe4fdd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfe4fde0, lpOverlapped=0x0 | out: lpBuffer=0xfe4fdd0*, lpNumberOfBytesRead=0xfe4fde0*=0x4, lpOverlapped=0x0) returned 1 [0207.108] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0207.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0207.108] NtQuerySystemTime (in: CurrentTime=0xfe4fd68 | out: CurrentTime=0xfe4fd68*=132462177856848000) returned 0x0 [0207.108] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x1a7df7d0 [0207.108] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x208472d0 [0207.108] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x433cbbe4 [0207.108] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x177aba50 [0207.108] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0xbac9312 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x639aab47 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x30fea56b [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x16b2f6fc [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x2eb3c4a7 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x282e3c7f [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x10a7b344 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0xac45f64 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x779cc36 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x45e82601 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x1283cf3b [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0xd92e114 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x796fa3f6 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x30402788 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0xbac2c5a [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0xfccbd95 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x288680ff [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x6d7488f3 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0xa62f28 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x7f416bcd [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x569ca37f [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x79d01df0 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x593ae33f [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x1aedf7c3 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x2de4e16e [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x7a78bf27 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x63828ef4 [0207.109] RtlRandomEx (in: Seed=0xfe4fd60 | out: Seed=0xfe4fd60) returned 0x1c9a3d03 [0207.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7db1fe8 [0207.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d9f3c0 [0207.120] ReadFile (in: hFile=0x2040, lpBuffer=0x7db1fe8, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0xfe4fd5c, lpOverlapped=0x0 | out: lpBuffer=0x7db1fe8*, lpNumberOfBytesRead=0xfe4fd5c*=0x104, lpOverlapped=0x0) returned 1 [0207.120] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.120] WriteFile (in: hFile=0x2040, lpBuffer=0x7d9f3c0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0xfe4fd60, lpOverlapped=0x0 | out: lpBuffer=0x7d9f3c0*, lpNumberOfBytesWritten=0xfe4fd60*=0x104, lpOverlapped=0x0) returned 1 [0208.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0208.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0208.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0208.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d9f3c0) returned 1 [0208.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db1fe8) returned 1 [0208.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cbd0) returned 1 [0208.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcd10) returned 1 [0208.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37530 [0208.932] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.933] WriteFile (in: hFile=0x2040, lpBuffer=0x7cd3a60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfe4fde8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3a60*, lpNumberOfBytesWritten=0xfe4fde8*=0x10c, lpOverlapped=0x0) returned 1 [0209.297] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fc0 [0209.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2fc0) returned 1 [0209.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2fc0 [0209.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ee8 [0209.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0209.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ab0) returned 1 [0209.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.298] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="eb") returned 2 [0209.299] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="d4") returned 2 [0209.299] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="38") returned 2 [0209.299] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="1d") returned 2 [0209.299] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="00") returned 2 [0209.299] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="5c") returned 2 [0209.299] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="41") returned 2 [0209.299] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="dc") returned 2 [0209.299] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="e4") returned 2 [0209.299] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="0f") returned 2 [0209.299] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="bb") returned 2 [0209.299] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="cd") returned 2 [0209.299] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="48") returned 2 [0209.299] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="6f") returned 2 [0209.299] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="08") returned 2 [0209.299] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="73") returned 2 [0209.299] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="90") returned 2 [0209.299] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="b2") returned 2 [0209.299] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="62") returned 2 [0209.299] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="51") returned 2 [0209.299] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="75") returned 2 [0209.299] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="40") returned 2 [0209.300] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="85") returned 2 [0209.300] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="b1") returned 2 [0209.300] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="45") returned 2 [0209.300] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="db") returned 2 [0209.300] RtlInitAnsiString (in: DestinationString=0xfe4fd70, SourceString="ebd4381d005c41dce40fbbcd486f087390b26251754085b145db" | out: DestinationString="ebd4381d005c41dce40fbbcd486f087390b26251754085b145db") [0209.300] RtlAnsiStringToUnicodeString (in: DestinationString=0xfe4fd68, SourceString="ebd4381d005c41dce40fbbcd486f087390b26251754085b145db", AllocateDestinationString=1 | out: DestinationString="ebd4381d005c41dce40fbbcd486f087390b26251754085b145db") returned 0x0 [0209.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c810 [0209.300] wcscat (in: _Dest=0x7cd4c50, _Source="ebd4381d005c4" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\ebd4381d005c4") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\ebd4381d005c4" [0209.300] wcscat (in: _Dest=0x7cd4c50, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\ebd4381d005c4.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\ebd4381d005c4.68814f" [0209.300] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\ebd4381d005c4.68814f", NtPathName=0xfe4fd60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fil\\ebd4381d005c4.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13c) returned 0x7ddd968 [0209.615] WriteFile (in: hFile=0xd7c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfe4fd7c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xfe4fd7c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.630] CloseHandle (hObject=0xd7c) returned 1 [0209.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4ff8) returned 1 [0209.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbabb0) returned 1 Thread: id = 6780 os_tid = 0x2004 [0197.850] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json")) returned 0x2020 [0197.850] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0207.120] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dac [0207.121] GetFileSizeEx (in: hFile=0x1dac, lpFileSize=0xe70fb7c | out: lpFileSize=0xe70fb7c*=252) returned 1 [0207.121] SetFilePointerEx (in: hFile=0x1dac, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.121] ReadFile (in: hFile=0x1dac, lpBuffer=0xe70fb58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe70fb68, lpOverlapped=0x0 | out: lpBuffer=0xe70fb58*, lpNumberOfBytesRead=0xe70fb68*=0x4, lpOverlapped=0x0) returned 1 [0207.123] SetFilePointerEx (in: hFile=0x1dac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0207.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0207.123] NtQuerySystemTime (in: CurrentTime=0xe70faf0 | out: CurrentTime=0xe70faf0*=132462177857004000) returned 0x0 [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x730606af [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x4dce5e9e [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x5a9c6b54 [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x1f5b0595 [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x16c3f7f1 [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x6739fb6f [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x466a26e1 [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x423fcf3f [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x6bc1d48a [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x40e35735 [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x5dc6a11d [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x2ae31eb7 [0207.123] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x2f63ed9d [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x571b3059 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x32d9f701 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x2634a1a [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x758b13f8 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x62f51721 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x51a68ab0 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x52e83888 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x2987957f [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x76da77f [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x72d59edd [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x1ff3079e [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x5c6e23c7 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x5cae4a94 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x33353c10 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x602508e [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x54c865c9 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x2ae75c32 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x7548b407 [0207.124] RtlRandomEx (in: Seed=0xe70fae8 | out: Seed=0xe70fae8) returned 0x2cbfbed0 [0207.134] ReadFile (in: hFile=0x1dac, lpBuffer=0x7da2fc8, nNumberOfBytesToRead=0xfc, lpNumberOfBytesRead=0xe70fae4, lpOverlapped=0x0 | out: lpBuffer=0x7da2fc8*, lpNumberOfBytesRead=0xe70fae4*=0xfc, lpOverlapped=0x0) returned 1 [0207.134] SetFilePointerEx (in: hFile=0x1dac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.134] WriteFile (in: hFile=0x1dac, lpBuffer=0x7dcc420*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0xe70fae8, lpOverlapped=0x0 | out: lpBuffer=0x7dcc420*, lpNumberOfBytesWritten=0xe70fae8*=0xfc, lpOverlapped=0x0) returned 1 [0208.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0208.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0208.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0208.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dcc420) returned 1 [0208.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7da2fc8) returned 1 [0208.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c900) returned 1 [0208.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcd58) returned 1 [0208.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c80 [0208.935] SetFilePointerEx (in: hFile=0x1dac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.936] WriteFile (in: hFile=0x1dac, lpBuffer=0x7cd3948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe70fb70, lpOverlapped=0x0 | out: lpBuffer=0x7cd3948*, lpNumberOfBytesWritten=0xe70fb70*=0x10c, lpOverlapped=0x0) returned 1 [0209.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0209.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0209.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4b40 [0209.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0209.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0209.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d68) returned 1 [0209.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.303] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.303] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="2b") returned 2 [0209.304] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="86") returned 2 [0209.304] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="ba") returned 2 [0209.304] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="00") returned 2 [0209.304] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="de") returned 2 [0209.304] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="98") returned 2 [0209.304] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="c6") returned 2 [0209.304] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="ad") returned 2 [0209.304] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="46") returned 2 [0209.304] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="02") returned 2 [0209.304] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="95") returned 2 [0209.304] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="df") returned 2 [0209.304] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="3e") returned 2 [0209.304] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="a2") returned 2 [0209.304] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="d0") returned 2 [0209.304] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="96") returned 2 [0209.304] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="b7") returned 2 [0209.304] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="c4") returned 2 [0209.304] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="48") returned 2 [0209.304] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="b6") returned 2 [0209.304] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="fa") returned 2 [0209.304] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="e0") returned 2 [0209.304] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="41") returned 2 [0209.305] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="ef") returned 2 [0209.305] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="02") returned 2 [0209.305] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="d5") returned 2 [0209.305] RtlInitAnsiString (in: DestinationString=0xe70faf8, SourceString="2b86ba00de98c6ad460295df3ea2d096b7c448b6fae041ef02d5" | out: DestinationString="2b86ba00de98c6ad460295df3ea2d096b7c448b6fae041ef02d5") [0209.305] RtlAnsiStringToUnicodeString (in: DestinationString=0xe70faf0, SourceString="2b86ba00de98c6ad460295df3ea2d096b7c448b6fae041ef02d5", AllocateDestinationString=1 | out: DestinationString="2b86ba00de98c6ad460295df3ea2d096b7c448b6fae041ef02d5") returned 0x0 [0209.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c900 [0209.305] wcscat (in: _Dest=0x7cd4d88, _Source="2b86ba00de98c" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\2b86ba00de98c") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\2b86ba00de98c" [0209.305] wcscat (in: _Dest=0x7cd4d88, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\2b86ba00de98c.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\2b86ba00de98c.68814f" [0209.305] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\2b86ba00de98c.68814f", NtPathName=0xe70fae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\fr\\2b86ba00de98c.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.305] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddd820 [0209.616] WriteFile (in: hFile=0x1d3c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe70fb04, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe70fb04*=0x8b9, lpOverlapped=0x0) returned 1 [0209.632] CloseHandle (hObject=0x1d3c) returned 1 [0209.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03768) returned 1 [0209.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbacd8) returned 1 Thread: id = 6781 os_tid = 0x16e8 [0197.850] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json")) returned 0x2020 [0197.851] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0207.135] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14f8 [0207.135] GetFileSizeEx (in: hFile=0x14f8, lpFileSize=0xffafb4c | out: lpFileSize=0xffafb4c*=278) returned 1 [0207.135] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.135] ReadFile (in: hFile=0x14f8, lpBuffer=0xffafb28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xffafb38, lpOverlapped=0x0 | out: lpBuffer=0xffafb28*, lpNumberOfBytesRead=0xffafb38*=0x4, lpOverlapped=0x0) returned 1 [0207.137] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0207.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0207.137] NtQuerySystemTime (in: CurrentTime=0xffafac0 | out: CurrentTime=0xffafac0*=132462177857160000) returned 0x0 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x3fb4460c [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x1d6cabed [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x56d741bb [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0xcd92002 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x77d589d [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x2d114faa [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x3e732220 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x3adabf1 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x1c69c62a [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x6c5f0e00 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0xaf67643 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0xd666b48 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x1b84e7ce [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x27db1dff [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x400e9eb5 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x2495fe4 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x6b1da972 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x5946c922 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x43d0fbcc [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x2f3314df [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x543564f9 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x361d70ae [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x60169975 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0xd8228e0 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x79b4ac63 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x2a88b4c2 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x1f0e1541 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x3e314aba [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x7ef0e078 [0207.138] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x3c70f72b [0207.139] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x615103b4 [0207.139] RtlRandomEx (in: Seed=0xffafab8 | out: Seed=0xffafab8) returned 0x5e3d3e59 [0207.147] ReadFile (in: hFile=0x14f8, lpBuffer=0x7be3778, nNumberOfBytesToRead=0x116, lpNumberOfBytesRead=0xffafab4, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesRead=0xffafab4*=0x116, lpOverlapped=0x0) returned 1 [0207.147] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.147] WriteFile (in: hFile=0x14f8, lpBuffer=0x7c143e0*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0xffafab8, lpOverlapped=0x0 | out: lpBuffer=0x7c143e0*, lpNumberOfBytesWritten=0xffafab8*=0x116, lpOverlapped=0x0) returned 1 [0208.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b848 [0208.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb58 [0208.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb58) returned 1 [0208.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0208.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0208.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c450) returned 1 [0208.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdb68) returned 1 [0208.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0208.938] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.939] WriteFile (in: hFile=0x14f8, lpBuffer=0x7cd3830*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xffafb40, lpOverlapped=0x0 | out: lpBuffer=0x7cd3830*, lpNumberOfBytesWritten=0xffafb40*=0x10c, lpOverlapped=0x0) returned 1 [0209.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3dd0 [0209.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3dd0) returned 1 [0209.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3dd0 [0209.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c90 [0209.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0209.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0209.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.309] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.309] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="87") returned 2 [0209.309] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="53") returned 2 [0209.309] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="29") returned 2 [0209.309] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="f8") returned 2 [0209.309] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="53") returned 2 [0209.309] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="da") returned 2 [0209.309] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="54") returned 2 [0209.309] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="d3") returned 2 [0209.310] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="cd") returned 2 [0209.310] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="33") returned 2 [0209.310] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="12") returned 2 [0209.310] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="05") returned 2 [0209.310] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="1c") returned 2 [0209.310] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="77") returned 2 [0209.310] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="9a") returned 2 [0209.310] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="f9") returned 2 [0209.310] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="c0") returned 2 [0209.310] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="54") returned 2 [0209.310] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="cd") returned 2 [0209.310] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="0e") returned 2 [0209.310] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="01") returned 2 [0209.310] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="71") returned 2 [0209.310] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="31") returned 2 [0209.310] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="1d") returned 2 [0209.310] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="71") returned 2 [0209.310] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="97") returned 2 [0209.310] RtlInitAnsiString (in: DestinationString=0xffafac8, SourceString="875329f853da54d3cd3312051c779af9c054cd0e0171311d7197" | out: DestinationString="875329f853da54d3cd3312051c779af9c054cd0e0171311d7197") [0209.310] RtlAnsiStringToUnicodeString (in: DestinationString=0xffafac0, SourceString="875329f853da54d3cd3312051c779af9c054cd0e0171311d7197", AllocateDestinationString=1 | out: DestinationString="875329f853da54d3cd3312051c779af9c054cd0e0171311d7197") returned 0x0 [0209.310] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cf18 [0209.311] wcscat (in: _Dest=0x7cd4ec0, _Source="875329f853da5" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\875329f853da5") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\875329f853da5" [0209.311] wcscat (in: _Dest=0x7cd4ec0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\875329f853da5.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\875329f853da5.68814f" [0209.311] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\875329f853da5.68814f", NtPathName=0xffafab8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\he\\875329f853da5.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddd1b8 [0209.616] WriteFile (in: hFile=0xbc4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xffafad4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xffafad4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.637] CloseHandle (hObject=0xbc4) returned 1 [0209.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03890) returned 1 [0209.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbae00) returned 1 Thread: id = 6782 os_tid = 0x2008 [0197.851] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json")) returned 0x2020 [0197.851] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0207.148] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbc4 [0207.148] GetFileSizeEx (in: hFile=0xbc4, lpFileSize=0xe8cfe84 | out: lpFileSize=0xe8cfe84*=285) returned 1 [0207.148] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.148] ReadFile (in: hFile=0xbc4, lpBuffer=0xe8cfe60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe8cfe70, lpOverlapped=0x0 | out: lpBuffer=0xe8cfe60*, lpNumberOfBytesRead=0xe8cfe70*=0x4, lpOverlapped=0x0) returned 1 [0207.151] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0207.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0207.151] NtQuerySystemTime (in: CurrentTime=0xe8cfdf8 | out: CurrentTime=0xe8cfdf8*=132462177857316000) returned 0x0 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x58562dc3 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x32f0213d [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x27856c7f [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x28b159bf [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x2e68880f [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x44054b05 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x5504c9ef [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x99dc3f5 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x6aef07a6 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x2119f3a1 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x31d055c6 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x389e5ed0 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x28dc1d1d [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x13103742 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x37a0b960 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x48294841 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x68838831 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x278c4e1d [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x2af94ab3 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x2ddda87e [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x59f6e9bc [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x7d42a0bc [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x792fc4b8 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x1f9e18e [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x2988741e [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x40e976a3 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x2c2cde6d [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x83c57bc [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x8b0663f [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x6074fe0e [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x42cc86a4 [0207.152] RtlRandomEx (in: Seed=0xe8cfdf0 | out: Seed=0xe8cfdf0) returned 0x9e8d796 [0207.163] ReadFile (in: hFile=0xbc4, lpBuffer=0x7bdbf68, nNumberOfBytesToRead=0x11d, lpNumberOfBytesRead=0xe8cfdec, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesRead=0xe8cfdec*=0x11d, lpOverlapped=0x0) returned 1 [0207.163] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.163] WriteFile (in: hFile=0xbc4, lpBuffer=0x7c017b8*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0xe8cfdf0, lpOverlapped=0x0 | out: lpBuffer=0x7c017b8*, lpNumberOfBytesWritten=0xe8cfdf0*=0x11d, lpOverlapped=0x0) returned 1 [0208.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0208.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0208.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc58) returned 1 [0208.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0208.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0208.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cb58) returned 1 [0208.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdbb0) returned 1 [0208.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c20 [0208.945] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.945] WriteFile (in: hFile=0xbc4, lpBuffer=0x7cd2020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe8cfe78, lpOverlapped=0x0 | out: lpBuffer=0x7cd2020*, lpNumberOfBytesWritten=0xe8cfe78*=0x10c, lpOverlapped=0x0) returned 1 [0209.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4118 [0209.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4118) returned 1 [0209.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4118 [0209.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0209.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0209.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3998) returned 1 [0209.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.314] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="2e") returned 2 [0209.314] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="5d") returned 2 [0209.314] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="ff") returned 2 [0209.314] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="a4") returned 2 [0209.314] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="64") returned 2 [0209.314] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="05") returned 2 [0209.314] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="66") returned 2 [0209.314] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="dd") returned 2 [0209.314] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="38") returned 2 [0209.315] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="5c") returned 2 [0209.315] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="0b") returned 2 [0209.315] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="a8") returned 2 [0209.315] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="95") returned 2 [0209.315] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="88") returned 2 [0209.315] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="6a") returned 2 [0209.315] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="87") returned 2 [0209.315] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="0b") returned 2 [0209.315] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="d2") returned 2 [0209.315] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="2b") returned 2 [0209.315] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="c9") returned 2 [0209.315] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="68") returned 2 [0209.315] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="45") returned 2 [0209.315] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="af") returned 2 [0209.315] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="1c") returned 2 [0209.315] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="49") returned 2 [0209.315] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="cc") returned 2 [0209.315] RtlInitAnsiString (in: DestinationString=0xe8cfe00, SourceString="2e5dffa4640566dd385c0ba895886a870bd22bc96845af1c49cc" | out: DestinationString="2e5dffa4640566dd385c0ba895886a870bd22bc96845af1c49cc") [0209.315] RtlAnsiStringToUnicodeString (in: DestinationString=0xe8cfdf8, SourceString="2e5dffa4640566dd385c0ba895886a870bd22bc96845af1c49cc", AllocateDestinationString=1 | out: DestinationString="2e5dffa4640566dd385c0ba895886a870bd22bc96845af1c49cc") returned 0x0 [0209.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2ce28 [0209.316] wcscat (in: _Dest=0x7cd4ff8, _Source="2e5dffa464056" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\2e5dffa464056") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\2e5dffa464056" [0209.316] wcscat (in: _Dest=0x7cd4ff8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\2e5dffa464056.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\2e5dffa464056.68814f" [0209.316] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\2e5dffa464056.68814f", NtPathName=0xe8cfdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lt\\2e5dffa464056.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddd070 [0209.616] WriteFile (in: hFile=0x10c0, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe8cfe0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe8cfe0c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.635] CloseHandle (hObject=0x10c0) returned 1 [0209.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e039b8) returned 1 [0209.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbb050) returned 1 Thread: id = 6783 os_tid = 0x222c [0197.852] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json")) returned 0x2020 [0197.852] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0207.163] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10c0 [0207.164] GetFileSizeEx (in: hFile=0x10c0, lpFileSize=0xe2afdcc | out: lpFileSize=0xe2afdcc*=258) returned 1 [0207.164] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.164] ReadFile (in: hFile=0x10c0, lpBuffer=0xe2afda8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe2afdb8, lpOverlapped=0x0 | out: lpBuffer=0xe2afda8*, lpNumberOfBytesRead=0xe2afdb8*=0x4, lpOverlapped=0x0) returned 1 [0207.166] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0207.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0207.166] NtQuerySystemTime (in: CurrentTime=0xe2afd40 | out: CurrentTime=0xe2afd40*=132462177857472000) returned 0x0 [0207.166] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x6d18eb27 [0207.166] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x6641c69c [0207.166] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x3aabaf0c [0207.166] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x2088bea7 [0207.166] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x19535d59 [0207.166] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x7889d9d2 [0207.166] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x4ef04123 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x1f9b6087 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x3297e3d0 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x1389a26c [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x1467d5a2 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x64e6fa6d [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x282dc418 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x5a9ccea [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x731b6b42 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x7d27b589 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x2805f6bf [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0xada6c35 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x268aedd0 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x3ba19c50 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x15ad53a8 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x663890ce [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x5f930369 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x77bb2995 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x2f0e4c21 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x2dc4d14e [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x6ae533e6 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x3ca46408 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x21d48d07 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0xe77b2f5 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x4f7e8234 [0207.167] RtlRandomEx (in: Seed=0xe2afd38 | out: Seed=0xe2afd38) returned 0x2bab8aae [0207.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf63a0 [0207.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0207.180] ReadFile (in: hFile=0x10c0, lpBuffer=0x7bf63a0, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0xe2afd34, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesRead=0xe2afd34*=0x102, lpOverlapped=0x0) returned 1 [0207.180] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.180] WriteFile (in: hFile=0x10c0, lpBuffer=0x7bf2798*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xe2afd38, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesWritten=0xe2afd38*=0x102, lpOverlapped=0x0) returned 1 [0208.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbb8 [0208.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0208.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0208.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0208.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0208.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c888) returned 1 [0208.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdbf8) returned 1 [0208.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37bc0 [0208.948] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.948] WriteFile (in: hFile=0x10c0, lpBuffer=0x7cd2138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe2afdc0, lpOverlapped=0x0 | out: lpBuffer=0x7cd2138*, lpNumberOfBytesWritten=0xe2afdc0*=0x10c, lpOverlapped=0x0) returned 1 [0209.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0209.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0209.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2e58 [0209.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3150 [0209.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0209.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4820) returned 1 [0209.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.320] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="fc") returned 2 [0209.320] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="08") returned 2 [0209.320] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="19") returned 2 [0209.320] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="13") returned 2 [0209.320] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="cd") returned 2 [0209.320] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="9f") returned 2 [0209.320] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="83") returned 2 [0209.320] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="33") returned 2 [0209.320] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="f2") returned 2 [0209.320] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="70") returned 2 [0209.320] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="b7") returned 2 [0209.320] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="9a") returned 2 [0209.320] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="a9") returned 2 [0209.320] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="ca") returned 2 [0209.320] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="c1") returned 2 [0209.320] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="56") returned 2 [0209.320] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="a3") returned 2 [0209.320] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="65") returned 2 [0209.321] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="53") returned 2 [0209.321] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="9a") returned 2 [0209.321] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="69") returned 2 [0209.321] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="ad") returned 2 [0209.321] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="e9") returned 2 [0209.321] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="f5") returned 2 [0209.321] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="ea") returned 2 [0209.321] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="d5") returned 2 [0209.321] RtlInitAnsiString (in: DestinationString=0xe2afd48, SourceString="fc081913cd9f8333f270b79aa9cac156a365539a69ade9f5ead5" | out: DestinationString="fc081913cd9f8333f270b79aa9cac156a365539a69ade9f5ead5") [0209.321] RtlAnsiStringToUnicodeString (in: DestinationString=0xe2afd40, SourceString="fc081913cd9f8333f270b79aa9cac156a365539a69ade9f5ead5", AllocateDestinationString=1 | out: DestinationString="fc081913cd9f8333f270b79aa9cac156a365539a69ade9f5ead5") returned 0x0 [0209.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c090 [0209.321] wcscat (in: _Dest=0x7cd5130, _Source="fc081913cd9f8" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\fc081913cd9f8") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\fc081913cd9f8" [0209.321] wcscat (in: _Dest=0x7cd5130, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\fc081913cd9f8.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\fc081913cd9f8.68814f" [0209.321] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\fc081913cd9f8.68814f", NtPathName=0xe2afd38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\lv\\fc081913cd9f8.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc3a0 [0209.617] WriteFile (in: hFile=0x14f8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe2afd54, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe2afd54*=0x8b9, lpOverlapped=0x0) returned 1 [0209.639] CloseHandle (hObject=0x14f8) returned 1 [0209.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03ae0) returned 1 [0209.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbb178) returned 1 Thread: id = 6784 os_tid = 0x200c [0197.853] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json")) returned 0x2020 [0197.853] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0207.181] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d3c [0207.181] GetFileSizeEx (in: hFile=0x1d3c, lpFileSize=0xe1bf79c | out: lpFileSize=0xe1bf79c*=254) returned 1 [0207.181] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.181] ReadFile (in: hFile=0x1d3c, lpBuffer=0xe1bf778, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe1bf788, lpOverlapped=0x0 | out: lpBuffer=0xe1bf778*, lpNumberOfBytesRead=0xe1bf788*=0x4, lpOverlapped=0x0) returned 1 [0207.183] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0207.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0207.184] NtQuerySystemTime (in: CurrentTime=0xe1bf710 | out: CurrentTime=0xe1bf710*=132462177857628000) returned 0x0 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x68c9865f [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x69938765 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x2eeab4be [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0xab3541b [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x4ea3021b [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x4d11efa7 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x3ea4d9d0 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x3694dd17 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x4dd2ea8e [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x6b3f626e [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x44e4fd17 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x32f2b873 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x1d813550 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0xe185e37 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x4090068a [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x196f9d41 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x5bdd9c31 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x543f76f6 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x3fe7ddb5 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x3626f12e [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x41498fc0 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x5f9749b6 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x47675843 [0207.184] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x5f97946 [0207.185] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x475cd0ea [0207.185] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x37c622ba [0207.185] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x548fcf3f [0207.185] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x4f6008bd [0207.185] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x7a4574d1 [0207.185] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x287003cb [0207.185] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x3499889 [0207.185] RtlRandomEx (in: Seed=0xe1bf708 | out: Seed=0xe1bf708) returned 0x22ad83ad [0207.194] ReadFile (in: hFile=0x1d3c, lpBuffer=0x7c0cbd0, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0xe1bf704, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesRead=0xe1bf704*=0xfe, lpOverlapped=0x0) returned 1 [0207.194] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.194] WriteFile (in: hFile=0x1d3c, lpBuffer=0x7beaf88*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xe1bf708, lpOverlapped=0x0 | out: lpBuffer=0x7beaf88*, lpNumberOfBytesWritten=0xe1bf708*=0xfe, lpOverlapped=0x0) returned 1 [0208.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0208.950] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb30 [0208.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb30) returned 1 [0208.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0208.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0208.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c978) returned 1 [0208.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdc40) returned 1 [0208.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b60 [0208.951] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.951] WriteFile (in: hFile=0x1d3c, lpBuffer=0x7cd2e58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe1bf790, lpOverlapped=0x0 | out: lpBuffer=0x7cd2e58*, lpNumberOfBytesWritten=0xe1bf790*=0x10c, lpOverlapped=0x0) returned 1 [0209.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e08 [0209.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e08) returned 1 [0209.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2e08 [0209.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0209.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4870 [0209.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4870) returned 1 [0209.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.325] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="5a") returned 2 [0209.325] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="fb") returned 2 [0209.325] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="6c") returned 2 [0209.325] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="8d") returned 2 [0209.325] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="04") returned 2 [0209.325] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="57") returned 2 [0209.325] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="e6") returned 2 [0209.325] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="a4") returned 2 [0209.325] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="99") returned 2 [0209.325] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="b2") returned 2 [0209.325] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="c2") returned 2 [0209.325] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="f6") returned 2 [0209.325] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="dc") returned 2 [0209.325] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="ad") returned 2 [0209.325] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="46") returned 2 [0209.325] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="68") returned 2 [0209.325] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="f1") returned 2 [0209.325] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="5b") returned 2 [0209.325] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="0f") returned 2 [0209.325] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="fe") returned 2 [0209.326] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="04") returned 2 [0209.326] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="b9") returned 2 [0209.326] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="2c") returned 2 [0209.326] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="23") returned 2 [0209.326] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="73") returned 2 [0209.326] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="be") returned 2 [0209.326] RtlInitAnsiString (in: DestinationString=0xe1bf718, SourceString="5afb6c8d0457e6a499b2c2f6dcad4668f15b0ffe04b92c2373be" | out: DestinationString="5afb6c8d0457e6a499b2c2f6dcad4668f15b0ffe04b92c2373be") [0209.326] RtlAnsiStringToUnicodeString (in: DestinationString=0xe1bf710, SourceString="5afb6c8d0457e6a499b2c2f6dcad4668f15b0ffe04b92c2373be", AllocateDestinationString=1 | out: DestinationString="5afb6c8d0457e6a499b2c2f6dcad4668f15b0ffe04b92c2373be") returned 0x0 [0209.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c630 [0209.326] wcscat (in: _Dest=0x7cd5268, _Source="5afb6c8d0457e" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\5afb6c8d0457e") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\5afb6c8d0457e" [0209.326] wcscat (in: _Dest=0x7cd5268, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\5afb6c8d0457e.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\5afb6c8d0457e.68814f" [0209.326] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\5afb6c8d0457e.68814f", NtPathName=0xe1bf708, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ms\\5afb6c8d0457e.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc4e8 [0209.617] WriteFile (in: hFile=0x1dac, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xe1bf724, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xe1bf724*=0x8b9, lpOverlapped=0x0) returned 1 [0209.641] CloseHandle (hObject=0x1dac) returned 1 [0209.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03c08) returned 1 [0209.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbb2a0) returned 1 Thread: id = 6785 os_tid = 0x2020 [0197.854] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json")) returned 0x2020 [0197.855] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0207.194] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12fc [0207.195] GetFileSizeEx (in: hFile=0x12fc, lpFileSize=0x102bf76c | out: lpFileSize=0x102bf76c*=218) returned 1 [0207.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0207.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0207.195] NtQuerySystemTime (in: CurrentTime=0x102bf6e0 | out: CurrentTime=0x102bf6e0*=132462177857784000) returned 0x0 [0207.195] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x4dd551c [0207.195] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x7bbb8439 [0207.195] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x2085f3b4 [0207.195] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x579798f6 [0207.195] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x38cef2d0 [0207.195] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x6ee6164c [0207.195] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x61749db1 [0207.195] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x27b0453f [0207.195] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x7f1ff4b7 [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x730754bc [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x6e30e32d [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x1868af1b [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x2f018cce [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x31430a80 [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x6086045c [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x143ee636 [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x1a0f974f [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x64d85c13 [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x18bbbf9e [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x12ec56fe [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x7be25988 [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x5ecbb97c [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x382281b4 [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x1c1cce95 [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x5d68ef5a [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x6caca1aa [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x2b61e1e5 [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x3f6415dc [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x7abbcb03 [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0xa6b0445 [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x5147437f [0207.196] RtlRandomEx (in: Seed=0x102bf6d8 | out: Seed=0x102bf6d8) returned 0x20529429 [0207.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0207.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0207.205] ReadFile (in: hFile=0x12fc, lpBuffer=0x7bd8360, nNumberOfBytesToRead=0xda, lpNumberOfBytesRead=0x102bf6d4, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesRead=0x102bf6d4*=0xda, lpOverlapped=0x0) returned 1 [0207.206] SetFilePointerEx (in: hFile=0x12fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.206] WriteFile (in: hFile=0x12fc, lpBuffer=0x7c08fc8*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x102bf6d8, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesWritten=0x102bf6d8*=0xda, lpOverlapped=0x0) returned 1 [0208.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0208.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0208.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0208.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0208.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0208.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ca68) returned 1 [0208.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdc88) returned 1 [0208.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b00 [0208.954] SetFilePointerEx (in: hFile=0x12fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.955] WriteFile (in: hFile=0x12fc, lpBuffer=0x7cd3600*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x102bf760, lpOverlapped=0x0 | out: lpBuffer=0x7cd3600*, lpNumberOfBytesWritten=0x102bf760*=0x10c, lpOverlapped=0x0) returned 1 [0209.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec48e8 [0209.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec48e8) returned 1 [0209.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec48e8 [0209.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0209.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0209.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fd8) returned 1 [0209.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.334] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="60") returned 2 [0209.334] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="e9") returned 2 [0209.334] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="bf") returned 2 [0209.334] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="17") returned 2 [0209.334] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="97") returned 2 [0209.334] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="35") returned 2 [0209.334] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="5e") returned 2 [0209.334] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="9c") returned 2 [0209.334] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="fa") returned 2 [0209.334] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="bb") returned 2 [0209.334] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="76") returned 2 [0209.334] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="97") returned 2 [0209.334] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="a0") returned 2 [0209.334] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="db") returned 2 [0209.334] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="28") returned 2 [0209.334] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="7d") returned 2 [0209.334] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="8a") returned 2 [0209.334] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="8d") returned 2 [0209.335] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="2c") returned 2 [0209.335] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="4b") returned 2 [0209.335] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="27") returned 2 [0209.335] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="46") returned 2 [0209.335] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="34") returned 2 [0209.335] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="94") returned 2 [0209.335] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="12") returned 2 [0209.335] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="cf") returned 2 [0209.335] RtlInitAnsiString (in: DestinationString=0x102bf6e8, SourceString="60e9bf1797355e9cfabb7697a0db287d8a8d2c4b2746349412cf" | out: DestinationString="60e9bf1797355e9cfabb7697a0db287d8a8d2c4b2746349412cf") [0209.335] RtlAnsiStringToUnicodeString (in: DestinationString=0x102bf6e0, SourceString="60e9bf1797355e9cfabb7697a0db287d8a8d2c4b2746349412cf", AllocateDestinationString=1 | out: DestinationString="60e9bf1797355e9cfabb7697a0db287d8a8d2c4b2746349412cf") returned 0x0 [0209.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c108 [0209.335] wcscat (in: _Dest=0x7cd54d8, _Source="60e9bf1797355" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\60e9bf1797355") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\60e9bf1797355" [0209.335] wcscat (in: _Dest=0x7cd54d8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\60e9bf1797355.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\60e9bf1797355.68814f" [0209.335] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\60e9bf1797355.68814f", NtPathName=0x102bf6d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\no\\60e9bf1797355.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc778 [0209.618] WriteFile (in: hFile=0x1868, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x102bf6f4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x102bf6f4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.724] CloseHandle (hObject=0x1868) returned 1 [0210.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03e58) returned 1 [0210.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbb3c8) returned 1 Thread: id = 6786 os_tid = 0x2028 [0197.856] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0197.857] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0207.352] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe5c [0207.352] GetFileSizeEx (in: hFile=0xe5c, lpFileSize=0xe62feec | out: lpFileSize=0xe62feec*=246) returned 1 [0207.352] SetFilePointerEx (in: hFile=0xe5c, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.352] ReadFile (in: hFile=0xe5c, lpBuffer=0xe62fec8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe62fed8, lpOverlapped=0x0 | out: lpBuffer=0xe62fec8*, lpNumberOfBytesRead=0xe62fed8*=0x4, lpOverlapped=0x0) returned 1 [0207.355] SetFilePointerEx (in: hFile=0xe5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5db0 [0207.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec54a0 [0207.355] NtQuerySystemTime (in: CurrentTime=0xe62fe60 | out: CurrentTime=0xe62fe60*=132462177859344000) returned 0x0 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x73542dc4 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x7d16b20 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x77c64aa4 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x2e1d746e [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x64255182 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x1a49200e [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x54eae39c [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x5176be81 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x65c689cc [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x41edd001 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x50b84ad0 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0xfd42c58 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x3de35130 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x2c9a5576 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x15edab6 [0207.355] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x47ae9250 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x5fc87e50 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x198c361f [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x313ae38e [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x9dbffc1 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x90b07f9 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x4522b489 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x1d6e1f88 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x521f9987 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x6bd6d26f [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x64e11705 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x2a4d0a65 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x42eab479 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x6314e191 [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x7082187f [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x24affabe [0207.356] RtlRandomEx (in: Seed=0xe62fe58 | out: Seed=0xe62fe58) returned 0x3e56072b [0207.367] ReadFile (in: hFile=0xe5c, lpBuffer=0x7b3a320, nNumberOfBytesToRead=0xf6, lpNumberOfBytesRead=0xe62fe54, lpOverlapped=0x0 | out: lpBuffer=0x7b3a320*, lpNumberOfBytesRead=0xe62fe54*=0xf6, lpOverlapped=0x0) returned 1 [0207.367] SetFilePointerEx (in: hFile=0xe5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.368] WriteFile (in: hFile=0xe5c, lpBuffer=0x7b3df28*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0xe62fe58, lpOverlapped=0x0 | out: lpBuffer=0x7b3df28*, lpNumberOfBytesWritten=0xe62fe58*=0xf6, lpOverlapped=0x0) returned 1 [0212.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533a0 [0212.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52f90 [0212.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52f90) returned 1 [0212.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3df28) returned 1 [0212.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3a320) returned 1 [0212.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c630) returned 1 [0212.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebdf8) returned 1 [0212.960] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376e0 [0212.961] SetFilePointerEx (in: hFile=0xe5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.961] WriteFile (in: hFile=0xe5c, lpBuffer=0x7cd26b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe62fee0, lpOverlapped=0x0 | out: lpBuffer=0x7cd26b0*, lpNumberOfBytesWritten=0xe62fee0*=0x10c, lpOverlapped=0x0) returned 1 [0213.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52e78 [0213.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52e78) returned 1 [0213.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52e78 [0213.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52338 [0213.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540c0 [0213.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e540c0) returned 1 [0213.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.854] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.854] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="20") returned 2 [0213.854] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="1e") returned 2 [0213.854] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="b0") returned 2 [0213.854] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="8c") returned 2 [0213.854] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="3c") returned 2 [0213.854] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="f7") returned 2 [0213.854] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="14") returned 2 [0213.854] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="b9") returned 2 [0213.854] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="d2") returned 2 [0213.854] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="71") returned 2 [0213.854] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="e7") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="f8") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="50") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="ef") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="92") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="d0") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="13") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="cc") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="6c") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="b0") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="5e") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="13") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="37") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="07") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="09") returned 2 [0213.855] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="be") returned 2 [0213.855] RtlInitAnsiString (in: DestinationString=0xe62fe68, SourceString="201eb08c3cf714b9d271e7f850ef92d013cc6cb05e13370709be" | out: DestinationString="201eb08c3cf714b9d271e7f850ef92d013cc6cb05e13370709be") [0213.855] RtlAnsiStringToUnicodeString (in: DestinationString=0xe62fe60, SourceString="201eb08c3cf714b9d271e7f850ef92d013cc6cb05e13370709be", AllocateDestinationString=1 | out: DestinationString="201eb08c3cf714b9d271e7f850ef92d013cc6cb05e13370709be") returned 0x0 [0213.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f830 Thread: id = 6787 os_tid = 0x2030 [0197.857] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0197.857] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0207.368] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe68 [0207.369] GetFileSizeEx (in: hFile=0xe68, lpFileSize=0xe9bf924 | out: lpFileSize=0xe9bf924*=264) returned 1 [0207.369] SetFilePointerEx (in: hFile=0xe68, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.369] ReadFile (in: hFile=0xe68, lpBuffer=0xe9bf900, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe9bf910, lpOverlapped=0x0 | out: lpBuffer=0xe9bf900*, lpNumberOfBytesRead=0xe9bf910*=0x4, lpOverlapped=0x0) returned 1 [0207.371] SetFilePointerEx (in: hFile=0xe68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec54a0 [0207.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0207.371] NtQuerySystemTime (in: CurrentTime=0xe9bf898 | out: CurrentTime=0xe9bf898*=132462177859344000) returned 0x0 [0207.371] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x38f131f1 [0207.371] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x61872c78 [0207.371] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x26044a5b [0207.371] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x6c4196cd [0207.371] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x302e082 [0207.371] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x261defa5 [0207.371] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x716bde42 [0207.371] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x77bfec0 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x667525f2 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x5cc540d0 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x7a217116 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x49cc369f [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x9812c3b [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x309298f0 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x5914de67 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x13baf6dc [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x7a6fb458 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x626daf14 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x69a60c26 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x667525f2 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x12532509 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x302e082 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x582b3c2f [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x6a6448fa [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x4b7f4f38 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0xff5e0e2 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x5fc87e50 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x75604491 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x1cd06a18 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x4bc354b1 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x3de1e473 [0207.372] RtlRandomEx (in: Seed=0xe9bf890 | out: Seed=0xe9bf890) returned 0x411d3251 [0207.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b41b30 [0207.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b45738 [0207.384] ReadFile (in: hFile=0xe68, lpBuffer=0x7b41b30, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0xe9bf88c, lpOverlapped=0x0 | out: lpBuffer=0x7b41b30*, lpNumberOfBytesRead=0xe9bf88c*=0x108, lpOverlapped=0x0) returned 1 [0207.384] SetFilePointerEx (in: hFile=0xe68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.384] WriteFile (in: hFile=0xe68, lpBuffer=0x7b45738*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0xe9bf890, lpOverlapped=0x0 | out: lpBuffer=0x7b45738*, lpNumberOfBytesWritten=0xe9bf890*=0x108, lpOverlapped=0x0) returned 1 [0212.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d50 [0212.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b48 [0212.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b48) returned 1 [0212.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b45738) returned 1 [0212.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b41b30) returned 1 [0212.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c6a8) returned 1 [0212.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebc48) returned 1 [0212.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3390 [0212.932] SetFilePointerEx (in: hFile=0xe68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.932] WriteFile (in: hFile=0xe68, lpBuffer=0x7cd2598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe9bf918, lpOverlapped=0x0 | out: lpBuffer=0x7cd2598*, lpNumberOfBytesWritten=0xe9bf918*=0x10c, lpOverlapped=0x0) returned 1 [0213.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.749] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0213.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40a0) returned 1 [0213.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec40a0 [0213.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3df8 [0213.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0213.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e80) returned 1 [0213.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.750] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.750] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="45") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="78") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="74") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="1f") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="89") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="2d") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="92") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="e3") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="19") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="72") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="98") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="8e") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="ba") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="44") returned 2 [0213.750] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="94") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="ed") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="d0") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="13") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="f5") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="67") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="98") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="24") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="08") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="c1") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="90") returned 2 [0213.751] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="ca") returned 2 [0213.751] RtlInitAnsiString (in: DestinationString=0xe9bf8a0, SourceString="4578741f892d92e31972988eba4494edd013f567982408c190ca" | out: DestinationString="4578741f892d92e31972988eba4494edd013f567982408c190ca") [0213.751] RtlAnsiStringToUnicodeString (in: DestinationString=0xe9bf898, SourceString="4578741f892d92e31972988eba4494edd013f567982408c190ca", AllocateDestinationString=1 | out: DestinationString="4578741f892d92e31972988eba4494edd013f567982408c190ca") returned 0x0 [0213.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c9f0 Thread: id = 6788 os_tid = 0x2050 [0197.858] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json")) returned 0x2020 [0197.858] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0207.385] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12ac [0207.385] GetFileSizeEx (in: hFile=0x12ac, lpFileSize=0xeb2fc1c | out: lpFileSize=0xeb2fc1c*=261) returned 1 [0207.385] SetFilePointerEx (in: hFile=0x12ac, liDistanceToMove=0x101, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.385] ReadFile (in: hFile=0x12ac, lpBuffer=0xeb2fbf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xeb2fc08, lpOverlapped=0x0 | out: lpBuffer=0xeb2fbf8*, lpNumberOfBytesRead=0xeb2fc08*=0x4, lpOverlapped=0x0) returned 1 [0207.387] SetFilePointerEx (in: hFile=0x12ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0207.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0207.388] NtQuerySystemTime (in: CurrentTime=0xeb2fb90 | out: CurrentTime=0xeb2fb90*=132462177859656000) returned 0x0 [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x7e7e6c65 [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x39bfe22e [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x16ca4daa [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x6ffe53a7 [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x633734bf [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x53b2c558 [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x7fec820e [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x247edf46 [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x2ce1274f [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x79481642 [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x76af475a [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x34243192 [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x277668b4 [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x2502b93f [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x24d141fc [0207.388] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x16da46c6 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x2c440b47 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x49b24abc [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x1df37eb5 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x68f3b324 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x1b1c6098 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x580a4f5d [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x1df37eb5 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x61e4a48 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0xd1a277f [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x7002fdd5 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x58400a13 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x551fa9b8 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x498d442d [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x6c4196cd [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x73467782 [0207.389] RtlRandomEx (in: Seed=0xeb2fb88 | out: Seed=0xeb2fb88) returned 0x15d9d15b [0207.399] ReadFile (in: hFile=0x12ac, lpBuffer=0x7b49340, nNumberOfBytesToRead=0x105, lpNumberOfBytesRead=0xeb2fb84, lpOverlapped=0x0 | out: lpBuffer=0x7b49340*, lpNumberOfBytesRead=0xeb2fb84*=0x105, lpOverlapped=0x0) returned 1 [0207.399] SetFilePointerEx (in: hFile=0x12ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.399] WriteFile (in: hFile=0x12ac, lpBuffer=0x7b4cf48*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0xeb2fb88, lpOverlapped=0x0 | out: lpBuffer=0x7b4cf48*, lpNumberOfBytesWritten=0xeb2fb88*=0x105, lpOverlapped=0x0) returned 1 [0212.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54228 [0212.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53fa8 [0212.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53fa8) returned 1 [0212.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b4cf48) returned 1 [0212.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b49340) returned 1 [0212.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c4c8) returned 1 [0212.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebc90) returned 1 [0212.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3db0 [0212.934] SetFilePointerEx (in: hFile=0x12ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.934] WriteFile (in: hFile=0x12ac, lpBuffer=0x7cd2d40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xeb2fc10, lpOverlapped=0x0 | out: lpBuffer=0x7cd2d40*, lpNumberOfBytesWritten=0xeb2fc10*=0x10c, lpOverlapped=0x0) returned 1 [0213.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ad0 [0213.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53ad0) returned 1 [0213.806] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53ad0 [0213.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53dc8 [0213.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0213.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e68) returned 1 [0213.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.807] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.807] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="5c") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="b8") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="d3") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="ed") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="71") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="55") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="e2") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="17") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="e9") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="94") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="12") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="90") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="42") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="fc") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="33") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="e0") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="0c") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="85") returned 2 [0213.807] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="ae") returned 2 [0213.808] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="30") returned 2 [0213.808] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="f9") returned 2 [0213.808] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="4d") returned 2 [0213.808] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="27") returned 2 [0213.808] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="23") returned 2 [0213.808] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="de") returned 2 [0213.808] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="7c") returned 2 [0213.808] RtlInitAnsiString (in: DestinationString=0xeb2fb98, SourceString="5cb8d3ed7155e217e994129042fc33e00c85ae30f94d2723de7c" | out: DestinationString="5cb8d3ed7155e217e994129042fc33e00c85ae30f94d2723de7c") [0213.808] RtlAnsiStringToUnicodeString (in: DestinationString=0xeb2fb90, SourceString="5cb8d3ed7155e217e994129042fc33e00c85ae30f94d2723de7c", AllocateDestinationString=1 | out: DestinationString="5cb8d3ed7155e217e994129042fc33e00c85ae30f94d2723de7c") returned 0x0 [0213.808] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f6c8 Thread: id = 6789 os_tid = 0x2060 [0197.860] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json")) returned 0x2020 [0197.860] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0207.399] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe78 [0207.400] GetFileSizeEx (in: hFile=0xe78, lpFileSize=0x9eafec4 | out: lpFileSize=0x9eafec4*=264) returned 1 [0207.400] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.400] ReadFile (in: hFile=0xe78, lpBuffer=0x9eafea0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9eafeb0, lpOverlapped=0x0 | out: lpBuffer=0x9eafea0*, lpNumberOfBytesRead=0x9eafeb0*=0x4, lpOverlapped=0x0) returned 1 [0207.402] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0207.402] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0207.402] NtQuerySystemTime (in: CurrentTime=0x9eafe38 | out: CurrentTime=0x9eafe38*=132462177859812000) returned 0x0 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x16b83057 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x39aca316 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x7082187f [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x268457ff [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x16b83057 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x405824b7 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x682c615b [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x25ae1c3f [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x7d16b20 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x4cf5c469 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x6138afd1 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x21382515 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x2ce1274f [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x5411348f [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x716bde42 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x69544a4 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x68f3b324 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x546ebe95 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x64e11705 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x64a705d4 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x49cc369f [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x1edd672d [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x4f466b2d [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x588eccb [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x7ac0e5f5 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x4cf5c469 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x7700ea15 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x2603cdbf [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x57727815 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x6bf27608 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0xb0ef2e4 [0207.403] RtlRandomEx (in: Seed=0x9eafe30 | out: Seed=0x9eafe30) returned 0x78ee6f0e [0207.412] ReadFile (in: hFile=0xe78, lpBuffer=0x7b50b50, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x9eafe2c, lpOverlapped=0x0 | out: lpBuffer=0x7b50b50*, lpNumberOfBytesRead=0x9eafe2c*=0x108, lpOverlapped=0x0) returned 1 [0207.412] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.412] WriteFile (in: hFile=0xe78, lpBuffer=0x7b54758*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x9eafe30, lpOverlapped=0x0 | out: lpBuffer=0x7b54758*, lpNumberOfBytesWritten=0x9eafe30*=0x108, lpOverlapped=0x0) returned 1 [0212.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c10 [0212.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537d8 [0212.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e537d8) returned 1 [0212.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b54758) returned 1 [0212.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b50b50) returned 1 [0212.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c540) returned 1 [0212.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb8e8) returned 1 [0212.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db37e0 [0212.936] SetFilePointerEx (in: hFile=0xe78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.936] WriteFile (in: hFile=0xe78, lpBuffer=0x7cd2f70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9eafeb8, lpOverlapped=0x0 | out: lpBuffer=0x7cd2f70*, lpNumberOfBytesWritten=0x9eafeb8*=0x10c, lpOverlapped=0x0) returned 1 [0213.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.809] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0213.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0213.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4c58 [0213.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5568 [0213.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0213.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3970) returned 1 [0213.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.810] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="81") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="eb") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="36") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="49") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="70") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="ce") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="74") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="e3") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="61") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="df") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="c3") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="bd") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="b5") returned 2 [0213.810] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="87") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="74") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="f9") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="e9") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="87") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="e7") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="19") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="21") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="9b") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="c3") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="0b") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="da") returned 2 [0213.811] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="06") returned 2 [0213.811] RtlInitAnsiString (in: DestinationString=0x9eafe40, SourceString="81eb364970ce74e361dfc3bdb58774f9e987e719219bc30bda06" | out: DestinationString="81eb364970ce74e361dfc3bdb58774f9e987e719219bc30bda06") [0213.811] RtlAnsiStringToUnicodeString (in: DestinationString=0x9eafe38, SourceString="81eb364970ce74e361dfc3bdb58774f9e987e719219bc30bda06", AllocateDestinationString=1 | out: DestinationString="81eb364970ce74e361dfc3bdb58774f9e987e719219bc30bda06") returned 0x0 [0213.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f470 Thread: id = 6790 os_tid = 0x20d4 [0197.865] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json")) returned 0x2020 [0197.865] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0207.413] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x750 [0207.413] GetFileSizeEx (in: hFile=0x750, lpFileSize=0xeb7f8bc | out: lpFileSize=0xeb7f8bc*=225) returned 1 [0207.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0207.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0207.413] NtQuerySystemTime (in: CurrentTime=0xeb7f830 | out: CurrentTime=0xeb7f830*=132462177859968000) returned 0x0 [0207.413] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0xbbe8976 [0207.413] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x11dec6b3 [0207.413] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x39bfe22e [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x293eb408 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x1d2847bd [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x7eeb6ca7 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x65cef950 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x7dcec147 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x3330a22c [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0xd5ad053 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x4b7f4a61 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x13baf6dc [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x1edd672d [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x32578eee [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x305bc417 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0xb6f5da3 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x4bc354b1 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x19a5cd61 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x25d8f4ff [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x142938d4 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x3627651f [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x2a03a304 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x6e59be0 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x7e39292f [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x60b62fdd [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x693de65a [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x6363654a [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x1c5f597d [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x24ad07bf [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x50393e16 [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x6d0c768e [0207.414] RtlRandomEx (in: Seed=0xeb7f828 | out: Seed=0xeb7f828) returned 0x4a629f01 [0207.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b58360 [0207.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5bf68 [0207.425] ReadFile (in: hFile=0x750, lpBuffer=0x7b58360, nNumberOfBytesToRead=0xe1, lpNumberOfBytesRead=0xeb7f824, lpOverlapped=0x0 | out: lpBuffer=0x7b58360*, lpNumberOfBytesRead=0xeb7f824*=0xe1, lpOverlapped=0x0) returned 1 [0207.428] SetFilePointerEx (in: hFile=0x750, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.428] WriteFile (in: hFile=0x750, lpBuffer=0x7b5bf68*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0xeb7f828, lpOverlapped=0x0 | out: lpBuffer=0x7b5bf68*, lpNumberOfBytesWritten=0xeb7f828*=0xe1, lpOverlapped=0x0) returned 1 [0212.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541b0 [0212.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53300 [0212.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53300) returned 1 [0212.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5bf68) returned 1 [0212.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b58360) returned 1 [0212.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c3d8) returned 1 [0212.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb978) returned 1 [0212.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3cf0 [0212.941] SetFilePointerEx (in: hFile=0x750, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.941] WriteFile (in: hFile=0x750, lpBuffer=0x7cd2368*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xeb7f8b0, lpOverlapped=0x0 | out: lpBuffer=0x7cd2368*, lpNumberOfBytesWritten=0xeb7f8b0*=0x10c, lpOverlapped=0x0) returned 1 [0213.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.817] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0213.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3498) returned 1 [0213.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3498 [0213.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec66e8 [0213.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0213.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d08) returned 1 [0213.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.818] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="44") returned 2 [0213.818] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="1f") returned 2 [0213.818] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="65") returned 2 [0213.818] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="6c") returned 2 [0213.818] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="62") returned 2 [0213.818] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="c3") returned 2 [0213.818] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="9a") returned 2 [0213.818] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="81") returned 2 [0213.818] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="1f") returned 2 [0213.818] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="ce") returned 2 [0213.818] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="c7") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="6f") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="ed") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="b9") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="66") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="44") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="9c") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="4d") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="9a") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="cb") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="ce") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="44") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="08") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="95") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="fb") returned 2 [0213.819] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="b6") returned 2 [0213.819] RtlInitAnsiString (in: DestinationString=0xeb7f838, SourceString="441f656c62c39a811fcec76fedb966449c4d9acbce440895fbb6" | out: DestinationString="441f656c62c39a811fcec76fedb966449c4d9acbce440895fbb6") [0213.819] RtlAnsiStringToUnicodeString (in: DestinationString=0xeb7f830, SourceString="441f656c62c39a811fcec76fedb966449c4d9acbce440895fbb6", AllocateDestinationString=1 | out: DestinationString="441f656c62c39a811fcec76fedb966449c4d9acbce440895fbb6") returned 0x0 [0213.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fce0 Thread: id = 6791 os_tid = 0x20d8 [0197.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b4a8 [0197.866] wcscpy (in: _Dest=0x7b7b4a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0197.866] wcscat (in: _Dest=0x7b7b4a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\" [0197.866] wcscat (in: _Dest=0x7b7b4a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*" [0197.866] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55a50 [0197.866] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57e27a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57e4eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0199.524] wcscmp (_String1=".", _String2=".") returned 0 [0199.524] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57e27a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57e4eb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.524] wcscmp (_String1="..", _String2=".") returned 1 [0199.525] wcscmp (_String1="..", _String2="..") returned 0 [0199.525] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57e4eb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.525] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.525] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.525] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbf2a0 [0199.525] wcscpy (in: _Dest=0x7cbf2a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" [0199.525] wcscat (in: _Dest=0x7cbf2a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\" [0199.525] wcscat (in: _Dest=0x7cbf2a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" [0199.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4 [0199.783] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57e4eb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57e4eb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.783] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0199.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55a50) returned 1 [0199.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b4a8) returned 1 [0199.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e428) returned 1 Thread: id = 6792 os_tid = 0x20dc [0197.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ae78 [0197.868] wcscpy (in: _Dest=0x7b7ae78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0197.868] wcscat (in: _Dest=0x7b7ae78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\" [0197.868] wcscat (in: _Dest=0x7b7ae78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*" [0197.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0197.868] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57f1200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57f3910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0199.523] wcscmp (_String1=".", _String2=".") returned 0 [0199.523] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57f1200, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57f3910, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.523] wcscmp (_String1="..", _String2=".") returned 1 [0199.523] wcscmp (_String1="..", _String2="..") returned 0 [0199.523] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57f3910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.524] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.524] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.524] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbf178 [0199.524] wcscpy (in: _Dest=0x7cbf178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" [0199.524] wcscat (in: _Dest=0x7cbf178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\" [0199.524] wcscat (in: _Dest=0x7cbf178, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" [0199.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cbf178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec [0199.779] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57f3910, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57f3910, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.779] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0199.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0199.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ae78) returned 1 [0199.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab5c8) returned 1 Thread: id = 6793 os_tid = 0x20e0 [0197.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7af80 [0197.869] wcscpy (in: _Dest=0x7b7af80, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0197.869] wcscat (in: _Dest=0x7b7af80, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\" [0197.869] wcscat (in: _Dest=0x7b7af80, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*" [0197.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53fd8 [0197.869] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57fae40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57fd550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc80 [0200.377] wcscmp (_String1=".", _String2=".") returned 0 [0200.377] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe57fae40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe57fd550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.377] wcscmp (_String1="..", _String2=".") returned 1 [0200.377] wcscmp (_String1="..", _String2="..") returned 0 [0200.377] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57fd550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.377] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.377] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b82d88 [0200.378] wcscpy (in: _Dest=0x7b82d88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" [0200.378] wcscat (in: _Dest=0x7b82d88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\" [0200.378] wcscat (in: _Dest=0x7b82d88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" [0201.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268 [0201.659] FindNextFileW (in: hFindFile=0x7a2dc80, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe57fd550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe57fd550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.659] FindClose (in: hFindFile=0x7a2dc80 | out: hFindFile=0x7a2dc80) returned 1 [0201.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53fd8) returned 1 [0201.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7af80) returned 1 [0201.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa650) returned 1 Thread: id = 6794 os_tid = 0x2780 [0197.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b088 [0197.872] wcscpy (in: _Dest=0x7b7b088, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0197.872] wcscat (in: _Dest=0x7b7b088, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\" [0197.872] wcscat (in: _Dest=0x7b7b088, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*" [0197.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3f00 [0197.872] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5804a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5807190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2db80 [0200.376] wcscmp (_String1=".", _String2=".") returned 0 [0200.376] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5804a80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5807190, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.376] wcscmp (_String1="..", _String2=".") returned 1 [0200.376] wcscmp (_String1="..", _String2="..") returned 0 [0200.376] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5807190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.376] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.376] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.377] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83478 [0200.377] wcscpy (in: _Dest=0x7b83478, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" [0200.377] wcscat (in: _Dest=0x7b83478, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\" [0200.377] wcscat (in: _Dest=0x7b83478, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" [0201.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454 [0201.657] FindNextFileW (in: hFindFile=0x7a2db80, lpFindFileData=0x3ef3f00 | out: lpFindFileData=0x3ef3f00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5807190, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5807190, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.657] FindClose (in: hFindFile=0x7a2db80 | out: hFindFile=0x7a2db80) returned 1 [0201.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3f00) returned 1 [0201.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b088) returned 1 [0201.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa548) returned 1 Thread: id = 6795 os_tid = 0x2194 [0197.873] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b8c8 [0197.873] wcscpy (in: _Dest=0x7b7b8c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0197.873] wcscat (in: _Dest=0x7b7b8c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\" [0197.873] wcscat (in: _Dest=0x7b7b8c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*" [0197.874] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3a30 [0197.874] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5810dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5815bf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d8c0 [0200.373] wcscmp (_String1=".", _String2=".") returned 0 [0200.373] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5810dd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5815bf0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.373] wcscmp (_String1="..", _String2=".") returned 1 [0200.375] wcscmp (_String1="..", _String2="..") returned 0 [0200.375] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5815bf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.375] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.376] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.376] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b82fd8 [0200.376] wcscpy (in: _Dest=0x7b82fd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" [0200.376] wcscat (in: _Dest=0x7b82fd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\" [0200.376] wcscat (in: _Dest=0x7b82fd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" [0201.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82fd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104 [0201.655] FindNextFileW (in: hFindFile=0x7a2d8c0, lpFindFileData=0x3ef3a30 | out: lpFindFileData=0x3ef3a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5815bf0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5815bf0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.655] FindClose (in: hFindFile=0x7a2d8c0 | out: hFindFile=0x7a2d8c0) returned 1 [0201.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3a30) returned 1 [0201.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b8c8) returned 1 [0201.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa440) returned 1 Thread: id = 6796 os_tid = 0x2230 [0197.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a320 [0197.875] wcscpy (in: _Dest=0x7b7a320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0197.875] wcscat (in: _Dest=0x7b7a320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\" [0197.875] wcscat (in: _Dest=0x7b7a320, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*" [0197.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef54a8 [0197.875] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe581d120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe581f830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe581f830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d480 [0200.372] wcscmp (_String1=".", _String2=".") returned 0 [0200.372] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe581d120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe581f830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe581f830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.372] wcscmp (_String1="..", _String2=".") returned 1 [0200.372] wcscmp (_String1="..", _String2="..") returned 0 [0200.372] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe581f830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5821f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.372] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.372] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b836c8 [0200.373] wcscpy (in: _Dest=0x7b836c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" [0200.373] wcscat (in: _Dest=0x7b836c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\" [0200.373] wcscat (in: _Dest=0x7b836c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" [0201.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b836c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88 [0201.653] FindNextFileW (in: hFindFile=0x7a2d480, lpFindFileData=0x3ef54a8 | out: lpFindFileData=0x3ef54a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe581f830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5821f40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.653] FindClose (in: hFindFile=0x7a2d480 | out: hFindFile=0x7a2d480) returned 1 [0201.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef54a8) returned 1 [0201.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a320) returned 1 [0201.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab7d8) returned 1 Thread: id = 6797 os_tid = 0x2758 [0197.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7bef8 [0197.876] wcscpy (in: _Dest=0x7b7bef8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0197.876] wcscat (in: _Dest=0x7b7bef8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\" [0197.877] wcscat (in: _Dest=0x7b7bef8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*" [0197.877] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5240 [0197.877] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5826d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe582bb80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d780 [0200.371] wcscmp (_String1=".", _String2=".") returned 0 [0200.371] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5826d60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe582bb80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.371] wcscmp (_String1="..", _String2=".") returned 1 [0200.371] wcscmp (_String1="..", _String2="..") returned 0 [0200.371] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe582bb80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.371] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.371] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b82eb0 [0200.372] wcscpy (in: _Dest=0x7b82eb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" [0200.372] wcscat (in: _Dest=0x7b82eb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\" [0200.372] wcscat (in: _Dest=0x7b82eb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" [0201.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4 [0201.650] FindNextFileW (in: hFindFile=0x7a2d780, lpFindFileData=0x3ef5240 | out: lpFindFileData=0x3ef5240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe582bb80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe582bb80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.651] FindClose (in: hFindFile=0x7a2d780 | out: hFindFile=0x7a2d780) returned 1 [0201.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5240) returned 1 [0201.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7bef8) returned 1 [0201.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab8e0) returned 1 Thread: id = 6798 os_tid = 0x2344 [0197.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a428 [0197.878] wcscpy (in: _Dest=0x7b7a428, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0197.878] wcscat (in: _Dest=0x7b7a428, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\" [0197.878] wcscat (in: _Dest=0x7b7a428, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*" [0197.878] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2220 [0197.878] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58309a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5841b10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dc00 [0200.370] wcscmp (_String1=".", _String2=".") returned 0 [0200.370] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58309a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5841b10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.370] wcscmp (_String1="..", _String2=".") returned 1 [0200.370] wcscmp (_String1="..", _String2="..") returned 0 [0200.370] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5841b10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.370] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.370] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83350 [0200.371] wcscpy (in: _Dest=0x7b83350, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" [0200.371] wcscat (in: _Dest=0x7b83350, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\" [0200.371] wcscat (in: _Dest=0x7b83350, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" [0201.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c [0201.648] FindNextFileW (in: hFindFile=0x7a2dc00, lpFindFileData=0x3ef2220 | out: lpFindFileData=0x3ef2220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5841b10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5841b10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.648] FindClose (in: hFindFile=0x7a2dc00 | out: hFindFile=0x7a2dc00) returned 1 [0201.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2220) returned 1 [0201.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a428) returned 1 [0201.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaa70) returned 1 Thread: id = 6799 os_tid = 0x23cc [0197.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b190 [0197.880] wcscpy (in: _Dest=0x7b7b190, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" [0197.880] wcscat (in: _Dest=0x7b7b190, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\" [0197.880] wcscat (in: _Dest=0x7b7b190, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*" [0197.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef37c8 [0197.880] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5849040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe584b750, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd40 [0200.369] wcscmp (_String1=".", _String2=".") returned 0 [0200.369] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5849040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe584b750, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.369] wcscmp (_String1="..", _String2=".") returned 1 [0200.369] wcscmp (_String1="..", _String2="..") returned 0 [0200.369] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe584b750, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.369] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.369] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83228 [0200.370] wcscpy (in: _Dest=0x7b83228, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" [0200.370] wcscat (in: _Dest=0x7b83228, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\" [0200.370] wcscat (in: _Dest=0x7b83228, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" [0201.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744 [0201.646] FindNextFileW (in: hFindFile=0x7a2dd40, lpFindFileData=0x3ef37c8 | out: lpFindFileData=0x3ef37c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe584b750, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe584b750, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.646] FindClose (in: hFindFile=0x7a2dd40 | out: hFindFile=0x7a2dd40) returned 1 [0201.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef37c8) returned 1 [0201.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b190) returned 1 [0201.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab9e8) returned 1 Thread: id = 6800 os_tid = 0x2464 [0197.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7b298 [0197.881] wcscpy (in: _Dest=0x7b7b298, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" [0197.881] wcscat (in: _Dest=0x7b7b298, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\" [0197.881] wcscat (in: _Dest=0x7b7b298, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*" [0197.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3090 [0197.882] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5852c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5855390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d4c0 [0200.368] wcscmp (_String1=".", _String2=".") returned 0 [0200.368] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5852c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5855390, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.368] wcscmp (_String1="..", _String2=".") returned 1 [0200.368] wcscmp (_String1="..", _String2="..") returned 0 [0200.368] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5855390, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.368] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.368] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83100 [0200.368] wcscpy (in: _Dest=0x7b83100, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" [0200.369] wcscat (in: _Dest=0x7b83100, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\" [0200.369] wcscat (in: _Dest=0x7b83100, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" [0201.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144 [0201.644] FindNextFileW (in: hFindFile=0x7a2d4c0, lpFindFileData=0x3ef3090 | out: lpFindFileData=0x3ef3090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5855390, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5855390, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.644] FindClose (in: hFindFile=0x7a2d4c0 | out: hFindFile=0x7a2d4c0) returned 1 [0201.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3090) returned 1 [0201.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b298) returned 1 [0201.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caab78) returned 1 Thread: id = 6801 os_tid = 0x27f0 [0197.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cadda8 [0197.883] wcscpy (in: _Dest=0x7cadda8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" [0197.883] wcscat (in: _Dest=0x7cadda8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\" [0197.883] wcscat (in: _Dest=0x7cadda8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*" [0197.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef32f8 [0197.883] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe585c8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe585efd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d7c0 [0200.367] wcscmp (_String1=".", _String2=".") returned 0 [0200.367] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe585c8c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe585efd0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.367] wcscmp (_String1="..", _String2=".") returned 1 [0200.367] wcscmp (_String1="..", _String2="..") returned 0 [0200.367] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe585efd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.367] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.367] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.367] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7b82c60 [0200.367] wcscpy (in: _Dest=0x7b82c60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" [0200.368] wcscat (in: _Dest=0x7b82c60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\" [0200.368] wcscat (in: _Dest=0x7b82c60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" [0201.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0 [0201.642] FindNextFileW (in: hFindFile=0x7a2d7c0, lpFindFileData=0x3ef32f8 | out: lpFindFileData=0x3ef32f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe585efd0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe585efd0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c78cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.642] FindClose (in: hFindFile=0x7a2d7c0 | out: hFindFile=0x7a2d7c0) returned 1 [0201.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef32f8) returned 1 [0201.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadda8) returned 1 [0201.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabaf0) returned 1 Thread: id = 6802 os_tid = 0xb20 [0197.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7cadc90 [0197.885] wcscpy (in: _Dest=0x7cadc90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" [0197.885] wcscat (in: _Dest=0x7cadc90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\" [0197.885] wcscat (in: _Dest=0x7cadc90, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*" [0197.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef3c98 [0197.885] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5866500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5868c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5868c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d9c0 [0200.366] wcscmp (_String1=".", _String2=".") returned 0 [0200.366] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5866500, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5868c10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5868c10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.366] wcscmp (_String1="..", _String2=".") returned 1 [0200.366] wcscmp (_String1="..", _String2="..") returned 0 [0200.366] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5868c10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe586b320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.366] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.366] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7b82a10 [0200.366] wcscpy (in: _Dest=0x7b82a10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" [0200.366] wcscat (in: _Dest=0x7b82a10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\" [0200.367] wcscat (in: _Dest=0x7b82a10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" [0201.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c4 [0201.640] FindNextFileW (in: hFindFile=0x7a2d9c0, lpFindFileData=0x3ef3c98 | out: lpFindFileData=0x3ef3c98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5868c10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe586b320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.640] FindClose (in: hFindFile=0x7a2d9c0 | out: hFindFile=0x7a2d9c0) returned 1 [0201.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef3c98) returned 1 [0201.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadc90) returned 1 [0201.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caac80) returned 1 Thread: id = 6803 os_tid = 0x24d8 [0197.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7c000 [0197.886] wcscpy (in: _Dest=0x7b7c000, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" [0197.886] wcscat (in: _Dest=0x7b7c000, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\" [0197.886] wcscat (in: _Dest=0x7b7c000, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*" [0197.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4638 [0197.887] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5874f60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5877670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d900 [0200.365] wcscmp (_String1=".", _String2=".") returned 0 [0200.365] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5874f60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5877670, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.365] wcscmp (_String1="..", _String2=".") returned 1 [0200.365] wcscmp (_String1="..", _String2="..") returned 0 [0200.365] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5877670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.365] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.365] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b82698 [0200.366] wcscpy (in: _Dest=0x7b82698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" [0200.366] wcscat (in: _Dest=0x7b82698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\" [0200.366] wcscat (in: _Dest=0x7b82698, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" [0201.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b82698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18cc [0201.637] FindNextFileW (in: hFindFile=0x7a2d900, lpFindFileData=0x3ef4638 | out: lpFindFileData=0x3ef4638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5877670, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5877670, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.638] FindClose (in: hFindFile=0x7a2d900 | out: hFindFile=0x7a2d900) returned 1 [0201.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4638) returned 1 [0201.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c000) returned 1 [0201.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caad88) returned 1 Thread: id = 6804 os_tid = 0x27fc [0197.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ab60 [0197.888] wcscpy (in: _Dest=0x7b7ab60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" [0197.888] wcscat (in: _Dest=0x7b7ab60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\" [0197.888] wcscat (in: _Dest=0x7b7ab60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*" [0197.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4d70 [0197.888] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe587eba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58812b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dac0 [0200.364] wcscmp (_String1=".", _String2=".") returned 0 [0200.364] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe587eba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58812b0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.364] wcscmp (_String1="..", _String2=".") returned 1 [0200.364] wcscmp (_String1="..", _String2="..") returned 0 [0200.364] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58812b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.364] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.364] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b828e8 [0200.365] wcscpy (in: _Dest=0x7b828e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" [0200.365] wcscat (in: _Dest=0x7b828e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\" [0200.365] wcscat (in: _Dest=0x7b828e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" [0201.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b828e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0 [0201.635] FindNextFileW (in: hFindFile=0x7a2dac0, lpFindFileData=0x3ef4d70 | out: lpFindFileData=0x3ef4d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58812b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58812b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.635] FindClose (in: hFindFile=0x7a2dac0 | out: hFindFile=0x7a2dac0) returned 1 [0201.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4d70) returned 1 [0201.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ab60) returned 1 [0201.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caae90) returned 1 Thread: id = 6805 os_tid = 0x2238 [0197.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7aa58 [0197.889] wcscpy (in: _Dest=0x7b7aa58, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" [0197.889] wcscat (in: _Dest=0x7b7aa58, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\" [0197.889] wcscat (in: _Dest=0x7b7aa58, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*" [0197.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef4168 [0197.889] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58887e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe588d600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2df00 [0200.363] wcscmp (_String1=".", _String2=".") returned 0 [0200.363] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58887e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe588d600, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.363] wcscmp (_String1="..", _String2=".") returned 1 [0200.363] wcscmp (_String1="..", _String2="..") returned 0 [0200.363] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe588d600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.363] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.364] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b835a0 [0200.364] wcscpy (in: _Dest=0x7b835a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" [0200.364] wcscat (in: _Dest=0x7b835a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\" [0200.364] wcscat (in: _Dest=0x7b835a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" [0201.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b835a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130 [0201.633] FindNextFileW (in: hFindFile=0x7a2df00, lpFindFileData=0x3ef4168 | out: lpFindFileData=0x3ef4168*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe588d600, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe588d600, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.633] FindClose (in: hFindFile=0x7a2df00 | out: hFindFile=0x7a2df00) returned 1 [0201.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef4168) returned 1 [0201.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7aa58) returned 1 [0201.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabbf8) returned 1 Thread: id = 6806 os_tid = 0x14ec [0197.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a950 [0197.890] wcscpy (in: _Dest=0x7b7a950, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" [0197.890] wcscat (in: _Dest=0x7b7a950, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\" [0197.890] wcscat (in: _Dest=0x7b7a950, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*" [0197.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef48a0 [0197.891] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5894b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5897240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de00 [0200.362] wcscmp (_String1=".", _String2=".") returned 0 [0200.362] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5894b30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5897240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.362] wcscmp (_String1="..", _String2=".") returned 1 [0200.363] wcscmp (_String1="..", _String2="..") returned 0 [0200.363] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5897240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.363] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.363] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b837f0 [0200.363] wcscpy (in: _Dest=0x7b837f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" [0200.363] wcscat (in: _Dest=0x7b837f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\" [0200.363] wcscat (in: _Dest=0x7b837f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" [0201.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b837f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec [0201.630] FindNextFileW (in: hFindFile=0x7a2de00, lpFindFileData=0x3ef48a0 | out: lpFindFileData=0x3ef48a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5897240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5897240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.630] FindClose (in: hFindFile=0x7a2de00 | out: hFindFile=0x7a2de00) returned 1 [0201.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef48a0) returned 1 [0201.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a950) returned 1 [0201.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaf98) returned 1 Thread: id = 6807 os_tid = 0x14f0 [0197.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7bbe0 [0197.892] wcscpy (in: _Dest=0x7b7bbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" [0197.892] wcscat (in: _Dest=0x7b7bbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\" [0197.892] wcscat (in: _Dest=0x7b7bbe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*" [0197.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef2bc0 [0197.892] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe589e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a0e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58a0e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0200.361] wcscmp (_String1=".", _String2=".") returned 0 [0200.362] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe589e770, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a0e80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58a0e80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.362] wcscmp (_String1="..", _String2=".") returned 1 [0200.362] wcscmp (_String1="..", _String2="..") returned 0 [0200.362] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58a0e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a3590, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.362] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.362] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83a40 [0200.362] wcscpy (in: _Dest=0x7b83a40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" [0200.362] wcscat (in: _Dest=0x7b83a40, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\" [0200.362] wcscat (in: _Dest=0x7b83a40, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" [0201.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124 [0201.835] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x3ef2bc0 | out: lpFindFileData=0x3ef2bc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58a0e80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58a3590, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.835] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0201.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef2bc0) returned 1 [0201.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7bbe0) returned 1 [0201.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabd00) returned 1 Thread: id = 6808 os_tid = 0x15d4 [0197.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a848 [0197.893] wcscpy (in: _Dest=0x7b7a848, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" [0197.893] wcscat (in: _Dest=0x7b7a848, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\" [0197.893] wcscat (in: _Dest=0x7b7a848, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*" [0197.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5978 [0197.893] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58a83b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ad1d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0200.360] wcscmp (_String1=".", _String2=".") returned 0 [0200.360] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58a83b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ad1d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.361] wcscmp (_String1="..", _String2=".") returned 1 [0200.361] wcscmp (_String1="..", _String2="..") returned 0 [0200.361] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ad1d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.361] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.361] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83b68 [0200.361] wcscpy (in: _Dest=0x7b83b68, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" [0200.361] wcscat (in: _Dest=0x7b83b68, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\" [0200.361] wcscat (in: _Dest=0x7b83b68, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" [0201.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8 [0201.834] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x3ef5978 | out: lpFindFileData=0x3ef5978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ad1d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ad1d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.834] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0201.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5978) returned 1 [0201.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a848) returned 1 [0201.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab4c0) returned 1 Thread: id = 6809 os_tid = 0x15e4 [0197.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7a740 [0197.894] wcscpy (in: _Dest=0x7b7a740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0197.894] wcscat (in: _Dest=0x7b7a740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\" [0197.895] wcscat (in: _Dest=0x7b7a740, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*" [0197.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3ef5e48 [0197.895] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58b1ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58b6e10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0199.143] wcscmp (_String1=".", _String2=".") returned 0 [0199.143] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58b1ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58b6e10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.143] wcscmp (_String1="..", _String2=".") returned 1 [0199.144] wcscmp (_String1="..", _String2="..") returned 0 [0199.144] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58b6e10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.144] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.144] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d55968 [0199.144] wcscpy (in: _Dest=0x3d55968, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" [0199.144] wcscat (in: _Dest=0x3d55968, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\" [0199.144] wcscat (in: _Dest=0x3d55968, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" [0199.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d55968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774 [0199.787] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x3ef5e48 | out: lpFindFileData=0x3ef5e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58b6e10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58b6e10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.787] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0199.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ef5e48) returned 1 [0199.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7a740) returned 1 [0199.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab6d0) returned 1 Thread: id = 6810 os_tid = 0x15e8 [0197.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a5b8 [0197.899] wcscpy (in: _Dest=0x7a6a5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0197.899] wcscat (in: _Dest=0x7a6a5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\" [0197.899] wcscat (in: _Dest=0x7a6a5b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*" [0197.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a284e8 [0197.899] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58bbc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58c0a50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff90 [0199.145] wcscmp (_String1=".", _String2=".") returned 0 [0199.145] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58bbc30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58c0a50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.145] wcscmp (_String1="..", _String2=".") returned 1 [0199.145] wcscmp (_String1="..", _String2="..") returned 0 [0199.145] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58c0a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0199.145] wcscmp (_String1="messages.json", _String2=".") returned 1 [0199.145] wcscmp (_String1="messages.json", _String2="..") returned 1 [0199.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x3d56058 [0199.145] wcscpy (in: _Dest=0x3d56058, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" [0199.145] wcscat (in: _Dest=0x3d56058, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\" [0199.145] wcscat (in: _Dest=0x3d56058, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" [0199.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3d56058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48 [0199.790] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58c0a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58c0a50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0199.790] FindClose (in: hFindFile=0x3dcff90 | out: hFindFile=0x3dcff90) returned 1 [0199.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a284e8) returned 1 [0199.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a5b8) returned 1 [0199.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa968) returned 1 Thread: id = 6811 os_tid = 0x25bc [0199.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7b7ee78 [0199.147] wcscpy (in: _Dest=0x7b7ee78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0199.147] wcscat (in: _Dest=0x7b7ee78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\" [0199.147] wcscat (in: _Dest=0x7b7ee78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*" [0199.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b9d8 [0199.147] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x7a2b9d8 | out: lpFindFileData=0x7a2b9d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ca690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0200.359] wcscmp (_String1=".", _String2=".") returned 0 [0200.359] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a2b9d8 | out: lpFindFileData=0x7a2b9d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58c5870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ca690, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.359] wcscmp (_String1="..", _String2=".") returned 1 [0200.359] wcscmp (_String1="..", _String2="..") returned 0 [0200.359] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a2b9d8 | out: lpFindFileData=0x7a2b9d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ca690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.359] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.360] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b83c90 [0200.360] wcscpy (in: _Dest=0x7b83c90, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" [0200.360] wcscat (in: _Dest=0x7b83c90, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\" [0200.360] wcscat (in: _Dest=0x7b83c90, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" [0201.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b83c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4 [0201.831] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a2b9d8 | out: lpFindFileData=0x7a2b9d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ca690, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ca690, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7b3c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.831] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0201.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b9d8) returned 1 [0201.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ee78) returned 1 [0201.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa860) returned 1 Thread: id = 6812 os_tid = 0x160c [0199.149] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json")) returned 0x2020 [0199.149] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0207.446] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1974 [0207.446] GetFileSizeEx (in: hFile=0x1974, lpFileSize=0x44cf9bc | out: lpFileSize=0x44cf9bc*=345) returned 1 [0207.446] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x155, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.446] ReadFile (in: hFile=0x1974, lpBuffer=0x44cf998, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x44cf9a8, lpOverlapped=0x0 | out: lpBuffer=0x44cf998*, lpNumberOfBytesRead=0x44cf9a8*=0x4, lpOverlapped=0x0) returned 1 [0207.448] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0207.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0207.449] NtQuerySystemTime (in: CurrentTime=0x44cf930 | out: CurrentTime=0x44cf930*=132462177860280000) returned 0x0 [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x556e9a24 [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x4864c81e [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x5ac7fbc0 [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x140ec02b [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x476cd9d1 [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x68e9ed9d [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x1cbc64fd [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x28850d3f [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x16da46c6 [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x3f3b2d81 [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x6067cb12 [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x2a970029 [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x30553e7e [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x6087abe7 [0207.449] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x2be31bee [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x310cc4e7 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x504a391c [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x310c6dc9 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0xd20479b [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x4b3c42a7 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x62ab3a9a [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x2a0d6445 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x546ebe95 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x68ad4677 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x669498a4 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x666d807a [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x7a58af07 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x43e71e16 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x59f38e3d [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x3675e978 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x45fc1d43 [0207.450] RtlRandomEx (in: Seed=0x44cf928 | out: Seed=0x44cf928) returned 0x51d391a [0207.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b67380 [0207.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b6af88 [0207.461] ReadFile (in: hFile=0x1974, lpBuffer=0x7b67380, nNumberOfBytesToRead=0x159, lpNumberOfBytesRead=0x44cf924, lpOverlapped=0x0 | out: lpBuffer=0x7b67380*, lpNumberOfBytesRead=0x44cf924*=0x159, lpOverlapped=0x0) returned 1 [0207.461] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.461] WriteFile (in: hFile=0x1974, lpBuffer=0x7b6af88*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0x44cf928, lpOverlapped=0x0 | out: lpBuffer=0x7b6af88*, lpNumberOfBytesWritten=0x44cf928*=0x159, lpOverlapped=0x0) returned 1 [0212.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53788 [0212.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53288 [0212.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53288) returned 1 [0212.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6af88) returned 1 [0212.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b67380) returned 1 [0212.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c1f8) returned 1 [0212.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebb28) returned 1 [0212.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0212.943] SetFilePointerEx (in: hFile=0x1974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.943] WriteFile (in: hFile=0x1974, lpBuffer=0x7cd2b10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x44cf9b0, lpOverlapped=0x0 | out: lpBuffer=0x7cd2b10*, lpNumberOfBytesWritten=0x44cf9b0*=0x10c, lpOverlapped=0x0) returned 1 [0213.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d38 [0213.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52d38) returned 1 [0213.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52d38 [0213.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52950 [0213.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52fe0 [0213.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52fe0) returned 1 [0213.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.746] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.746] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="1d") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="61") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="e1") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="d2") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="03") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="6e") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="0e") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="16") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="a8") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="c8") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="49") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="68") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="54") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="df") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="61") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="58") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="a4") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="30") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="58") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="de") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="2b") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="d7") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="48") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="b9") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="31") returned 2 [0213.747] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="40") returned 2 [0213.747] RtlInitAnsiString (in: DestinationString=0x44cf938, SourceString="1d61e1d2036e0e16a8c8496854df6158a43058de2bd748b93140" | out: DestinationString="1d61e1d2036e0e16a8c8496854df6158a43058de2bd748b93140") [0213.747] RtlAnsiStringToUnicodeString (in: DestinationString=0x44cf930, SourceString="1d61e1d2036e0e16a8c8496854df6158a43058de2bd748b93140", AllocateDestinationString=1 | out: DestinationString="1d61e1d2036e0e16a8c8496854df6158a43058de2bd748b93140") returned 0x0 [0213.747] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c180 Thread: id = 6813 os_tid = 0x25c0 [0199.150] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json")) returned 0x2020 [0199.150] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0207.461] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xeb4 [0207.462] GetFileSizeEx (in: hFile=0xeb4, lpFileSize=0x909f99c | out: lpFileSize=0x909f99c*=264) returned 1 [0207.462] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.462] ReadFile (in: hFile=0xeb4, lpBuffer=0x909f978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x909f988, lpOverlapped=0x0 | out: lpBuffer=0x909f978*, lpNumberOfBytesRead=0x909f988*=0x4, lpOverlapped=0x0) returned 1 [0207.464] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0207.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0207.464] NtQuerySystemTime (in: CurrentTime=0x909f910 | out: CurrentTime=0x909f910*=132462177860436000) returned 0x0 [0207.464] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x79cd6adc [0207.464] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x18d78749 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x39c7343a [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0xc8550a3 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x34cfee10 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x6ed284b7 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x6bd57450 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x572950c1 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x62ab3a9a [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x25586abf [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x537cb7c3 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x24d7e07f [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x7b4d33a0 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x2cdfff6d [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x3cac0bf [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x666d807a [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x259bcd48 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x1ffb1a64 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x51d0f89a [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x4961429c [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x1f4c54ee [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0xaed30f4 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x4bac4acd [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0xc7aa7b3 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x3fbbfa18 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x6363654a [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0xf9d59ec [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x68d236d0 [0207.465] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x6ed061f1 [0207.466] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x2457563f [0207.466] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x46615cee [0207.466] RtlRandomEx (in: Seed=0x909f908 | out: Seed=0x909f908) returned 0x16c14162 [0207.476] ReadFile (in: hFile=0xeb4, lpBuffer=0x7b6eb90, nNumberOfBytesToRead=0x108, lpNumberOfBytesRead=0x909f904, lpOverlapped=0x0 | out: lpBuffer=0x7b6eb90*, lpNumberOfBytesRead=0x909f904*=0x108, lpOverlapped=0x0) returned 1 [0207.476] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.476] WriteFile (in: hFile=0xeb4, lpBuffer=0x7b72798*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x909f908, lpOverlapped=0x0 | out: lpBuffer=0x7b72798*, lpNumberOfBytesWritten=0x909f908*=0x108, lpOverlapped=0x0) returned 1 [0212.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52518 [0212.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e529f0 [0212.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e529f0) returned 1 [0212.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b72798) returned 1 [0212.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6eb90) returned 1 [0212.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c270) returned 1 [0212.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebd68) returned 1 [0212.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37aa0 [0212.946] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.946] WriteFile (in: hFile=0xeb4, lpBuffer=0x7cd29f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x909f990, lpOverlapped=0x0 | out: lpBuffer=0x7cd29f8*, lpNumberOfBytesWritten=0x909f990*=0x10c, lpOverlapped=0x0) returned 1 [0213.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ca0 [0213.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ca0) returned 1 [0213.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2ca0 [0213.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0213.822] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0213.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0213.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.823] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="19") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="55") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="de") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="62") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="18") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="8b") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="a7") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="c7") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="d0") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="c6") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="90") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="97") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="48") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="37") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="73") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="ab") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="fa") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="0c") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="8b") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="84") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="4d") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="65") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="01") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="cf") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="b0") returned 2 [0213.823] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="01") returned 2 [0213.823] RtlInitAnsiString (in: DestinationString=0x909f918, SourceString="1955de62188ba7c7d0c69097483773abfa0c8b844d6501cfb001" | out: DestinationString="1955de62188ba7c7d0c69097483773abfa0c8b844d6501cfb001") [0213.824] RtlAnsiStringToUnicodeString (in: DestinationString=0x909f910, SourceString="1955de62188ba7c7d0c69097483773abfa0c8b844d6501cfb001", AllocateDestinationString=1 | out: DestinationString="1955de62188ba7c7d0c69097483773abfa0c8b844d6501cfb001") returned 0x0 [0213.824] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f3f8 Thread: id = 6814 os_tid = 0x25c4 [0199.151] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json")) returned 0x2020 [0199.151] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0207.477] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe64 [0207.477] GetFileSizeEx (in: hFile=0xe64, lpFileSize=0x785fbcc | out: lpFileSize=0x785fbcc*=258) returned 1 [0207.477] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.477] ReadFile (in: hFile=0xe64, lpBuffer=0x785fba8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x785fbb8, lpOverlapped=0x0 | out: lpBuffer=0x785fba8*, lpNumberOfBytesRead=0x785fbb8*=0x4, lpOverlapped=0x0) returned 1 [0207.479] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0207.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0207.480] NtQuerySystemTime (in: CurrentTime=0x785fb40 | out: CurrentTime=0x785fb40*=132462177860592000) returned 0x0 [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0xd2776fe [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x60a7dfb2 [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x25f29d95 [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x2a52b8d8 [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x1f60352c [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x79709bbd [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x5d4cab [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x7d10e489 [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x213b1402 [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x583d8a0d [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x1c7153fc [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x3a8e926b [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x12148613 [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x23d10b57 [0207.480] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x24822eff [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x40040a6f [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x484ed913 [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x38f2ebba [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x17c830c5 [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x57378681 [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x170f7dbe [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x477f645f [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x26a51150 [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x6246401c [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x7ebc5fe8 [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x192fd37b [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x6bf27608 [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x2bb5954c [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x12f79c6c [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x4fa4288b [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x54772238 [0207.481] RtlRandomEx (in: Seed=0x785fb38 | out: Seed=0x785fb38) returned 0x62f008e [0207.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b763a0 [0207.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d50060 [0207.494] ReadFile (in: hFile=0xe64, lpBuffer=0x7b763a0, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0x785fb34, lpOverlapped=0x0 | out: lpBuffer=0x7b763a0*, lpNumberOfBytesRead=0x785fb34*=0x102, lpOverlapped=0x0) returned 1 [0207.494] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.494] WriteFile (in: hFile=0xe64, lpBuffer=0x10d50060*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x785fb38, lpOverlapped=0x0 | out: lpBuffer=0x10d50060*, lpNumberOfBytesWritten=0x785fb38*=0x102, lpOverlapped=0x0) returned 1 [0212.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53580 [0212.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52658 [0212.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52658) returned 1 [0212.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d50060) returned 1 [0212.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b763a0) returned 1 [0212.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0212.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebed0) returned 1 [0212.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37920 [0212.948] SetFilePointerEx (in: hFile=0xe64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.948] WriteFile (in: hFile=0xe64, lpBuffer=0x7cd28e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x785fbc0, lpOverlapped=0x0 | out: lpBuffer=0x7cd28e0*, lpNumberOfBytesWritten=0x785fbc0*=0x10c, lpOverlapped=0x0) returned 1 [0213.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.825] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0213.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3290) returned 1 [0213.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3290 [0213.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a38 [0213.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0213.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6698) returned 1 [0213.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.826] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="18") returned 2 [0213.826] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="c5") returned 2 [0213.826] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="00") returned 2 [0213.826] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="14") returned 2 [0213.826] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="36") returned 2 [0213.826] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="d0") returned 2 [0213.826] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="2b") returned 2 [0213.826] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="88") returned 2 [0213.826] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="0c") returned 2 [0213.826] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="8e") returned 2 [0213.826] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="ca") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="c0") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="4d") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="e7") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="bf") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="22") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="86") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="6f") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="5f") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="4e") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="33") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="e1") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="1e") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="d6") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="b8") returned 2 [0213.827] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="77") returned 2 [0213.827] RtlInitAnsiString (in: DestinationString=0x785fb48, SourceString="18c5001436d02b880c8ecac04de7bf22866f5f4e33e11ed6b877" | out: DestinationString="18c5001436d02b880c8ecac04de7bf22866f5f4e33e11ed6b877") [0213.827] RtlAnsiStringToUnicodeString (in: DestinationString=0x785fb40, SourceString="18c5001436d02b880c8ecac04de7bf22866f5f4e33e11ed6b877", AllocateDestinationString=1 | out: DestinationString="18c5001436d02b880c8ecac04de7bf22866f5f4e33e11ed6b877") returned 0x0 [0213.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f038 Thread: id = 6815 os_tid = 0x25c8 [0199.152] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json")) returned 0x2020 [0199.152] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0207.207] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd7c [0207.207] GetFileSizeEx (in: hFile=0xd7c, lpFileSize=0x94dfa5c | out: lpFileSize=0x94dfa5c*=242) returned 1 [0207.207] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.207] ReadFile (in: hFile=0xd7c, lpBuffer=0x94dfa38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x94dfa48, lpOverlapped=0x0 | out: lpBuffer=0x94dfa38*, lpNumberOfBytesRead=0x94dfa48*=0x4, lpOverlapped=0x0) returned 1 [0207.209] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0207.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0207.209] NtQuerySystemTime (in: CurrentTime=0x94df9d0 | out: CurrentTime=0x94df9d0*=132462177857940000) returned 0x0 [0207.209] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x67e1ea3d [0207.209] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x4a15b422 [0207.209] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x33d26e5c [0207.209] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x55acf4fe [0207.209] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x5005d139 [0207.209] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x4a795555 [0207.209] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x512204f6 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x44ab54d0 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x36f77914 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x5fedb0e3 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x7151fb1c [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x5e317185 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x5a88b4e4 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x38236f7e [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x7df6392a [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0xfbd80a3 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x1280e1b2 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x79ec7a36 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x7b956a87 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x48a3afda [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x3a3194dd [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x6a996753 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x10b2fa5d [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x697c0a7b [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x56b69f7 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x2d4326e7 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x6ba05e62 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x12d19a45 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x436125cc [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x41a81750 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x7ef8d700 [0207.210] RtlRandomEx (in: Seed=0x94df9c8 | out: Seed=0x94df9c8) returned 0x4c9d8ef0 [0207.218] ReadFile (in: hFile=0xd7c, lpBuffer=0x7bfdbb0, nNumberOfBytesToRead=0xf2, lpNumberOfBytesRead=0x94df9c4, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesRead=0x94df9c4*=0xf2, lpOverlapped=0x0) returned 1 [0207.218] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.218] WriteFile (in: hFile=0xd7c, lpBuffer=0x7bdfb70*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x94df9c8, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesWritten=0x94df9c8*=0xf2, lpOverlapped=0x0) returned 1 [0208.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0208.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0208.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0208.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0208.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0208.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf90) returned 1 [0208.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdcd0) returned 1 [0208.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37da0 [0208.956] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.956] WriteFile (in: hFile=0xd7c, lpBuffer=0x7cd34e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x94dfa50, lpOverlapped=0x0 | out: lpBuffer=0x7cd34e8*, lpNumberOfBytesWritten=0x94dfa50*=0x10c, lpOverlapped=0x0) returned 1 [0209.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0209.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0209.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2ef8 [0209.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0209.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0209.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0209.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.330] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.330] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="c3") returned 2 [0209.330] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="05") returned 2 [0209.330] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="b9") returned 2 [0209.330] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="e3") returned 2 [0209.330] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="fc") returned 2 [0209.330] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="04") returned 2 [0209.331] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="72") returned 2 [0209.331] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="50") returned 2 [0209.331] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="be") returned 2 [0209.331] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="06") returned 2 [0209.331] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="65") returned 2 [0209.331] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="45") returned 2 [0209.331] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="62") returned 2 [0209.331] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="ea") returned 2 [0209.331] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="26") returned 2 [0209.331] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="18") returned 2 [0209.331] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="12") returned 2 [0209.331] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="9a") returned 2 [0209.331] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="bb") returned 2 [0209.331] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="81") returned 2 [0209.331] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="0a") returned 2 [0209.331] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="03") returned 2 [0209.331] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="24") returned 2 [0209.331] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="a9") returned 2 [0209.331] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="d2") returned 2 [0209.331] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="3b") returned 2 [0209.331] RtlInitAnsiString (in: DestinationString=0x94df9d8, SourceString="c305b9e3fc047250be06654562ea2618129abb810a0324a9d23b" | out: DestinationString="c305b9e3fc047250be06654562ea2618129abb810a0324a9d23b") [0209.332] RtlAnsiStringToUnicodeString (in: DestinationString=0x94df9d0, SourceString="c305b9e3fc047250be06654562ea2618129abb810a0324a9d23b", AllocateDestinationString=1 | out: DestinationString="c305b9e3fc047250be06654562ea2618129abb810a0324a9d23b") returned 0x0 [0209.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2c2e8 [0209.332] wcscat (in: _Dest=0x7cd53a0, _Source="c305b9e3fc047" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\c305b9e3fc047") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\c305b9e3fc047" [0209.332] wcscat (in: _Dest=0x7cd53a0, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\c305b9e3fc047.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\c305b9e3fc047.68814f" [0209.332] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\c305b9e3fc047.68814f", NtPathName=0x94df9c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\nl\\c305b9e3fc047.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13a) returned 0x7ddc630 [0209.618] WriteFile (in: hFile=0x3cc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x94df9e4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x94df9e4*=0x8b9, lpOverlapped=0x0) returned 1 [0209.721] CloseHandle (hObject=0x3cc) returned 1 [0210.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e03d30) returned 1 [0210.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb34f0) returned 1 Thread: id = 6816 os_tid = 0x9ec [0199.153] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json")) returned 0x2020 [0200.398] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0207.428] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10f0 [0207.429] GetFileSizeEx (in: hFile=0x10f0, lpFileSize=0x78ffa04 | out: lpFileSize=0x78ffa04*=701) returned 1 [0207.429] SetFilePointerEx (in: hFile=0x10f0, liDistanceToMove=0x2b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.429] ReadFile (in: hFile=0x10f0, lpBuffer=0x78ff9e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x78ff9f0, lpOverlapped=0x0 | out: lpBuffer=0x78ff9e0*, lpNumberOfBytesRead=0x78ff9f0*=0x4, lpOverlapped=0x0) returned 1 [0207.432] SetFilePointerEx (in: hFile=0x10f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0207.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0207.432] NtQuerySystemTime (in: CurrentTime=0x78ff978 | out: CurrentTime=0x78ff978*=132462177860124000) returned 0x0 [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x18bd85e2 [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x6a080901 [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x598813ee [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x11dec6b3 [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x43e71e16 [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x498d442d [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x682c615b [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x254f9126 [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x6f8e7c3a [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x2ca56268 [0207.432] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x3c0cd257 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x5c230f46 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x34324532 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x872989f [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x652f45a7 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x426ffcb0 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x75d7f300 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x7fb743ec [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x25586abf [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x151a00d9 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x425d6933 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x66961717 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x4fa4288b [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x79588a0f [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0xdb55bb4 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x262ea67f [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x530abd18 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x6ed8b1d0 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x35d07b8 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x460eb02f [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0xf9f97c8 [0207.433] RtlRandomEx (in: Seed=0x78ff970 | out: Seed=0x78ff970) returned 0x14bb4f6 [0207.445] ReadFile (in: hFile=0x10f0, lpBuffer=0x7b5fb70, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x78ff96c, lpOverlapped=0x0 | out: lpBuffer=0x7b5fb70*, lpNumberOfBytesRead=0x78ff96c*=0x2bd, lpOverlapped=0x0) returned 1 [0207.445] SetFilePointerEx (in: hFile=0x10f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.445] WriteFile (in: hFile=0x10f0, lpBuffer=0x7b63778*, nNumberOfBytesToWrite=0x2bd, lpNumberOfBytesWritten=0x78ff970, lpOverlapped=0x0 | out: lpBuffer=0x7b63778*, lpNumberOfBytesWritten=0x78ff970*=0x2bd, lpOverlapped=0x0) returned 1 [0212.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53710 [0212.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53698 [0212.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53698) returned 1 [0212.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b63778) returned 1 [0212.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5fb70) returned 1 [0212.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0212.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeba08) returned 1 [0212.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3f60 [0212.939] SetFilePointerEx (in: hFile=0x10f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.939] WriteFile (in: hFile=0x10f0, lpBuffer=0x7cd2c28*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x78ff9f8, lpOverlapped=0x0 | out: lpBuffer=0x7cd2c28*, lpNumberOfBytesWritten=0x78ff9f8*=0x10c, lpOverlapped=0x0) returned 1 [0213.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0213.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38f8) returned 1 [0213.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec38f8 [0213.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ae8 [0213.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0213.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0213.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.814] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.814] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="62") returned 2 [0213.814] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="29") returned 2 [0213.814] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="24") returned 2 [0213.814] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="bb") returned 2 [0213.814] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="94") returned 2 [0213.814] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="8b") returned 2 [0213.814] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="b3") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="62") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="28") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="38") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="16") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="37") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="9d") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="ed") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="a1") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="15") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="bb") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="6e") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="8e") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="a4") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="24") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="de") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="cf") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="b3") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="26") returned 2 [0213.815] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="db") returned 2 [0213.815] RtlInitAnsiString (in: DestinationString=0x78ff980, SourceString="622924bb948bb362283816379deda115bb6e8ea424decfb326db" | out: DestinationString="622924bb948bb362283816379deda115bb6e8ea424decfb326db") [0213.815] RtlAnsiStringToUnicodeString (in: DestinationString=0x78ff978, SourceString="622924bb948bb362283816379deda115bb6e8ea424decfb326db", AllocateDestinationString=1 | out: DestinationString="622924bb948bb362283816379deda115bb6e8ea424decfb326db") returned 0x0 [0213.815] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f5d8 [0224.729] WriteFile (in: hFile=0x2250, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x78ff98c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x78ff98c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.735] CloseHandle (hObject=0x2250) returned 1 [0224.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caeff8) returned 1 [0224.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3be0) returned 1 Thread: id = 6817 os_tid = 0x1090 [0199.153] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json")) returned 0x2020 [0199.546] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0206.889] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1570 [0206.890] GetFileSizeEx (in: hFile=0x1570, lpFileSize=0x8d7fea4 | out: lpFileSize=0x8d7fea4*=642) returned 1 [0206.890] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x27e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.890] ReadFile (in: hFile=0x1570, lpBuffer=0x8d7fe80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8d7fe90, lpOverlapped=0x0 | out: lpBuffer=0x8d7fe80*, lpNumberOfBytesRead=0x8d7fe90*=0x4, lpOverlapped=0x0) returned 1 [0206.892] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0206.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c68 [0206.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0206.892] NtQuerySystemTime (in: CurrentTime=0x8d7fe18 | out: CurrentTime=0x8d7fe18*=132462177854664000) returned 0x0 [0206.892] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x863911e [0206.892] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x6be92432 [0206.892] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x1eff2591 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x537d8a5a [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x73da505c [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x204db991 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x4b35880e [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x20052da5 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x6a7da811 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x232fa06 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x520f5b8d [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x5b6fe33f [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x77cb7793 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x163d0d50 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x7c07d6df [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x2a5dd13f [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x61286d96 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x6cc395e1 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x6459e34e [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x636ef218 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x2b284b2a [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x47a25257 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x22d5858f [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x3e0f1081 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x407fc9fa [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x894f781 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x5dfb0194 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x3a88f38d [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x4142a87e [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x220d016d [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x5785341 [0206.893] RtlRandomEx (in: Seed=0x8d7fe10 | out: Seed=0x8d7fe10) returned 0x272a3431 [0206.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0206.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d97870 [0206.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dc0cc8 [0206.903] ReadFile (in: hFile=0x1570, lpBuffer=0x10d97870, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0x8d7fe0c, lpOverlapped=0x0 | out: lpBuffer=0x10d97870*, lpNumberOfBytesRead=0x8d7fe0c*=0x282, lpOverlapped=0x0) returned 1 [0206.903] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0206.903] WriteFile (in: hFile=0x1570, lpBuffer=0x10dc0cc8*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0x8d7fe10, lpOverlapped=0x0 | out: lpBuffer=0x10dc0cc8*, lpNumberOfBytesWritten=0x8d7fe10*=0x282, lpOverlapped=0x0) returned 1 [0208.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0208.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0208.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be60) returned 1 [0208.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc0cc8) returned 1 [0208.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d97870) returned 1 [0208.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2c540) returned 1 [0208.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e5e448) returned 1 [0208.905] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37800 [0208.906] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0208.906] WriteFile (in: hFile=0x1570, lpBuffer=0x7cd2250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8d7fe98, lpOverlapped=0x0 | out: lpBuffer=0x7cd2250*, lpNumberOfBytesWritten=0x8d7fe98*=0x10c, lpOverlapped=0x0) returned 1 [0209.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbde38 [0209.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a2cbd0 [0209.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4bb8 [0209.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4bb8) returned 1 [0209.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4bb8 [0209.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0209.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0209.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ea8) returned 1 [0209.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2cbd0) returned 1 [0209.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde38) returned 1 [0209.276] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3067080 [0209.276] sprintf (in: _Dest=0x3067080, _Format="%c%c" | out: _Dest="cc") returned 2 [0209.276] sprintf (in: _Dest=0x3067082, _Format="%c%c" | out: _Dest="dd") returned 2 [0209.276] sprintf (in: _Dest=0x3067084, _Format="%c%c" | out: _Dest="91") returned 2 [0209.276] sprintf (in: _Dest=0x3067086, _Format="%c%c" | out: _Dest="42") returned 2 [0209.276] sprintf (in: _Dest=0x3067088, _Format="%c%c" | out: _Dest="4d") returned 2 [0209.276] sprintf (in: _Dest=0x306708a, _Format="%c%c" | out: _Dest="65") returned 2 [0209.276] sprintf (in: _Dest=0x306708c, _Format="%c%c" | out: _Dest="be") returned 2 [0209.277] sprintf (in: _Dest=0x306708e, _Format="%c%c" | out: _Dest="76") returned 2 [0209.277] sprintf (in: _Dest=0x3067090, _Format="%c%c" | out: _Dest="1d") returned 2 [0209.277] sprintf (in: _Dest=0x3067092, _Format="%c%c" | out: _Dest="6f") returned 2 [0209.277] sprintf (in: _Dest=0x3067094, _Format="%c%c" | out: _Dest="bb") returned 2 [0209.277] sprintf (in: _Dest=0x3067096, _Format="%c%c" | out: _Dest="6f") returned 2 [0209.277] sprintf (in: _Dest=0x3067098, _Format="%c%c" | out: _Dest="4b") returned 2 [0209.277] sprintf (in: _Dest=0x306709a, _Format="%c%c" | out: _Dest="9a") returned 2 [0209.277] sprintf (in: _Dest=0x306709c, _Format="%c%c" | out: _Dest="ea") returned 2 [0209.277] sprintf (in: _Dest=0x306709e, _Format="%c%c" | out: _Dest="09") returned 2 [0209.277] sprintf (in: _Dest=0x30670a0, _Format="%c%c" | out: _Dest="42") returned 2 [0209.277] sprintf (in: _Dest=0x30670a2, _Format="%c%c" | out: _Dest="24") returned 2 [0209.277] sprintf (in: _Dest=0x30670a4, _Format="%c%c" | out: _Dest="26") returned 2 [0209.277] sprintf (in: _Dest=0x30670a6, _Format="%c%c" | out: _Dest="61") returned 2 [0209.277] sprintf (in: _Dest=0x30670a8, _Format="%c%c" | out: _Dest="c2") returned 2 [0209.277] sprintf (in: _Dest=0x30670aa, _Format="%c%c" | out: _Dest="68") returned 2 [0209.277] sprintf (in: _Dest=0x30670ac, _Format="%c%c" | out: _Dest="2c") returned 2 [0209.277] sprintf (in: _Dest=0x30670ae, _Format="%c%c" | out: _Dest="a7") returned 2 [0209.277] sprintf (in: _Dest=0x30670b0, _Format="%c%c" | out: _Dest="ba") returned 2 [0209.277] sprintf (in: _Dest=0x30670b2, _Format="%c%c" | out: _Dest="4a") returned 2 [0209.277] RtlInitAnsiString (in: DestinationString=0x8d7fe20, SourceString="ccdd91424d65be761d6fbb6f4b9aea0942242661c2682ca7ba4a" | out: DestinationString="ccdd91424d65be761d6fbb6f4b9aea0942242661c2682ca7ba4a") [0209.277] RtlAnsiStringToUnicodeString (in: DestinationString=0x8d7fe18, SourceString="ccdd91424d65be761d6fbb6f4b9aea0942242661c2682ca7ba4a", AllocateDestinationString=1 | out: DestinationString="ccdd91424d65be761d6fbb6f4b9aea0942242661c2682ca7ba4a") returned 0x0 [0209.277] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a2cb58 [0209.278] wcscat (in: _Dest=0x7cd4020, _Source="ccdd91424d65b" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ccdd91424d65b") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ccdd91424d65b" [0209.278] wcscat (in: _Dest=0x7cd4020, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ccdd91424d65b.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ccdd91424d65b.68814f" [0209.278] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ccdd91424d65b.68814f", NtPathName=0x8d7fe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\ccdd91424d65b.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0209.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x142) returned 0x3e0b020 [0209.614] WriteFile (in: hFile=0x121c, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x8d7fe2c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x8d7fe2c*=0x8b9, lpOverlapped=0x0) returned 1 [0209.621] CloseHandle (hObject=0x121c) returned 1 [0209.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5268) returned 1 [0209.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3d08) returned 1 Thread: id = 6818 os_tid = 0x2624 [0199.154] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0199.155] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0207.495] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1138 [0207.496] GetFileSizeEx (in: hFile=0x1138, lpFileSize=0x9dcff24 | out: lpFileSize=0x9dcff24*=209) returned 1 [0207.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0207.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4078 [0207.496] NtQuerySystemTime (in: CurrentTime=0x9dcfe98 | out: CurrentTime=0x9dcfe98*=132462177860748000) returned 0x0 [0207.496] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x66facf79 [0207.496] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x2c440b47 [0207.496] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x790af10b [0207.496] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x242c7d7f [0207.496] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x29e88afd [0207.496] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x6afdd214 [0207.496] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x1a5ae65c [0207.496] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x21ef8a39 [0207.496] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x78dede4e [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x6d0c768e [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x1d66336f [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x161fcdc [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x4c86a0b [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0xa3e6e1c [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x502f6df3 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x77035f85 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x42bf07f [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x7e42ded2 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x10b1f5c7 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x666966dc [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x6a74bc63 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x1445f104 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x13150d79 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x1c9b8183 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x4b65e496 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0xec556d8 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x745393e6 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x437574d3 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x5f185225 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x1339a1e6 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x3f0915a1 [0207.497] RtlRandomEx (in: Seed=0x9dcfe90 | out: Seed=0x9dcfe90) returned 0x7d3b0cec [0207.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d53c68 [0207.512] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d57870 [0207.512] ReadFile (in: hFile=0x1138, lpBuffer=0x10d53c68, nNumberOfBytesToRead=0xd1, lpNumberOfBytesRead=0x9dcfe8c, lpOverlapped=0x0 | out: lpBuffer=0x10d53c68*, lpNumberOfBytesRead=0x9dcfe8c*=0xd1, lpOverlapped=0x0) returned 1 [0207.514] SetFilePointerEx (in: hFile=0x1138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.514] WriteFile (in: hFile=0x1138, lpBuffer=0x10d57870*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x9dcfe90, lpOverlapped=0x0 | out: lpBuffer=0x10d57870*, lpNumberOfBytesWritten=0x9dcfe90*=0xd1, lpOverlapped=0x0) returned 1 [0212.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e532d8 [0212.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54278 [0212.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54278) returned 1 [0212.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d57870) returned 1 [0212.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d53c68) returned 1 [0212.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0212.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebf18) returned 1 [0212.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0212.949] SetFilePointerEx (in: hFile=0x1138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.949] WriteFile (in: hFile=0x1138, lpBuffer=0x7cd27c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9dcff18, lpOverlapped=0x0 | out: lpBuffer=0x7cd27c8*, lpNumberOfBytesWritten=0x9dcff18*=0x10c, lpOverlapped=0x0) returned 1 [0213.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a60 [0213.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a60) returned 1 [0213.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3a60 [0213.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0213.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0213.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e20) returned 1 [0213.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.847] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.847] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="9d") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="f6") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="2f") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="ef") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="f1") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="08") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="01") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="de") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="1d") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="75") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="b4") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="c9") returned 2 [0213.847] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="ed") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="81") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="52") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="28") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="57") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="f0") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="30") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="e3") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="5c") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="08") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="8b") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="68") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="da") returned 2 [0213.848] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="fc") returned 2 [0213.848] RtlInitAnsiString (in: DestinationString=0x9dcfea0, SourceString="9df62feff10801de1d75b4c9ed81522857f030e35c088b68dafc" | out: DestinationString="9df62feff10801de1d75b4c9ed81522857f030e35c088b68dafc") [0213.848] RtlAnsiStringToUnicodeString (in: DestinationString=0x9dcfe98, SourceString="9df62feff10801de1d75b4c9ed81522857f030e35c088b68dafc", AllocateDestinationString=1 | out: DestinationString="9df62feff10801de1d75b4c9ed81522857f030e35c088b68dafc") returned 0x0 [0213.848] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f218 Thread: id = 6819 os_tid = 0x2634 [0199.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv")) returned 0x20 [0199.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV", dwFileAttributes=0x20) returned 0 [0199.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.156] GetLastError () returned 0x5 [0199.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV", dwFileAttributes=0x20) returned 0 [0199.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ba8) returned 1 Thread: id = 6820 os_tid = 0x2638 [0199.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml")) returned 0x20 [0199.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML", dwFileAttributes=0x20) returned 0 [0199.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.158] GetLastError () returned 0x5 [0199.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML", dwFileAttributes=0x20) returned 0 [0199.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68998) returned 1 Thread: id = 6821 os_tid = 0x263c [0199.160] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv")) returned 0x20 [0203.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV", dwFileAttributes=0x20) returned 0 [0205.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.638] GetLastError () returned 0x5 [0206.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV", dwFileAttributes=0x20) returned 0 [0206.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69fe8) returned 1 Thread: id = 6822 os_tid = 0x2640 [0199.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml")) returned 0x20 [0206.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML", dwFileAttributes=0x20) returned 0 [0206.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.662] GetLastError () returned 0x5 [0206.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML", dwFileAttributes=0x20) returned 0 [0206.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a10) returned 1 Thread: id = 6823 os_tid = 0x266c [0199.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml")) returned 0x20 [0203.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML", dwFileAttributes=0x20) returned 0 [0203.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.635] GetLastError () returned 0x5 [0206.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML", dwFileAttributes=0x20) returned 0 [0206.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69f60) returned 1 Thread: id = 6824 os_tid = 0x2670 [0199.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv")) returned 0x20 [0206.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV", dwFileAttributes=0x20) returned 0 [0206.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.660] GetLastError () returned 0x5 [0206.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV", dwFileAttributes=0x20) returned 0 [0206.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68448) returned 1 Thread: id = 6825 os_tid = 0x1954 [0199.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml")) returned 0x20 [0206.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML", dwFileAttributes=0x20) returned 0 [0206.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.659] GetLastError () returned 0x5 [0206.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML", dwFileAttributes=0x20) returned 0 [0206.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69cb8) returned 1 Thread: id = 6826 os_tid = 0x1958 [0199.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv")) returned 0x20 [0206.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV", dwFileAttributes=0x20) returned 0 [0206.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.658] GetLastError () returned 0x5 [0206.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV", dwFileAttributes=0x20) returned 0 [0206.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69080) returned 1 Thread: id = 6827 os_tid = 0x2674 [0199.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml")) returned 0x20 [0206.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML", dwFileAttributes=0x20) returned 0 [0206.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.656] GetLastError () returned 0x5 [0206.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML", dwFileAttributes=0x20) returned 0 [0206.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 6828 os_tid = 0x2678 [0199.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml")) returned 0x20 [0206.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML", dwFileAttributes=0x20) returned 0 [0206.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.655] GetLastError () returned 0x5 [0206.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML", dwFileAttributes=0x20) returned 0 [0206.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 6829 os_tid = 0x267c [0199.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv")) returned 0x20 [0206.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV", dwFileAttributes=0x20) returned 0 [0206.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.648] GetLastError () returned 0x5 [0206.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV", dwFileAttributes=0x20) returned 0 [0206.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 6830 os_tid = 0xb9c [0199.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml")) returned 0x20 [0206.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML", dwFileAttributes=0x20) returned 0 [0206.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.646] GetLastError () returned 0x5 [0206.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML", dwFileAttributes=0x20) returned 0 [0206.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 6831 os_tid = 0xb94 [0199.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv")) returned 0x20 [0206.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV", dwFileAttributes=0x20) returned 0 [0206.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.643] GetLastError () returned 0x5 [0206.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV", dwFileAttributes=0x20) returned 0 [0206.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 6832 os_tid = 0xbb4 [0199.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv")) returned 0x20 [0206.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV", dwFileAttributes=0x20) returned 0 [0206.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.640] GetLastError () returned 0x5 [0206.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV", dwFileAttributes=0x20) returned 0 [0206.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 6833 os_tid = 0x26cc [0199.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml")) returned 0x20 [0206.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML", dwFileAttributes=0x20) returned 0 [0206.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.637] GetLastError () returned 0x5 [0206.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML", dwFileAttributes=0x20) returned 0 [0206.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 6834 os_tid = 0x1210 [0199.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv")) returned 0x20 [0206.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV", dwFileAttributes=0x20) returned 0 [0206.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.624] GetLastError () returned 0x5 [0206.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV", dwFileAttributes=0x20) returned 0 [0206.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 6835 os_tid = 0x223c [0199.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml")) returned 0x20 [0203.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML", dwFileAttributes=0x20) returned 0 [0205.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.641] GetLastError () returned 0x5 [0206.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML", dwFileAttributes=0x20) returned 0 [0206.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 Thread: id = 6836 os_tid = 0x2240 [0199.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv")) returned 0x20 [0199.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV", dwFileAttributes=0x20) returned 0 [0199.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.409] GetLastError () returned 0x5 [0199.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV", dwFileAttributes=0x20) returned 0 [0199.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 6837 os_tid = 0x2244 [0199.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml")) returned 0x20 [0199.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML", dwFileAttributes=0x20) returned 0 [0199.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0199.411] GetLastError () returned 0x5 [0199.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML", dwFileAttributes=0x20) returned 0 [0199.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 6838 os_tid = 0x2248 [0199.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv")) returned 0x20 [0206.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV", dwFileAttributes=0x20) returned 0 [0206.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.704] GetLastError () returned 0x5 [0206.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV", dwFileAttributes=0x20) returned 0 [0206.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 6839 os_tid = 0x224c [0199.414] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json")) returned 0x2020 [0199.544] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0207.221] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1134 [0207.232] GetFileSizeEx (in: hFile=0x1134, lpFileSize=0xf86faec | out: lpFileSize=0xf86faec*=669) returned 1 [0207.232] SetFilePointerEx (in: hFile=0x1134, liDistanceToMove=0x299, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.233] ReadFile (in: hFile=0x1134, lpBuffer=0xf86fac8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf86fad8, lpOverlapped=0x0 | out: lpBuffer=0xf86fac8*, lpNumberOfBytesRead=0xf86fad8*=0x4, lpOverlapped=0x0) returned 1 [0207.236] SetFilePointerEx (in: hFile=0x1134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0207.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0207.236] NtQuerySystemTime (in: CurrentTime=0xf86fa60 | out: CurrentTime=0xf86fa60*=132462177858096000) returned 0x0 [0207.236] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x6f2a949b [0207.236] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x1cae503b [0207.236] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x226347af [0207.236] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x321d876b [0207.236] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x79d6c5db [0207.236] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x147578d7 [0207.236] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x275a93bf [0207.236] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x2704e23f [0207.236] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x51786cd8 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x671dc900 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x3e697f39 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x1cae503b [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x4ca0fb87 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x94942bd [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x1e728c65 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x5102812d [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x26ec6171 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0xb89092a [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x77ea15b0 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x5c07f8c6 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x46786308 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x5e7155b8 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x41ebf2b0 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x77081cb [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x5bf220a5 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0xcae0fa8 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0xff9420b [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x1cebf2d9 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x6f5de4d2 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x26c06c43 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x26ec6171 [0207.237] RtlRandomEx (in: Seed=0xf86fa58 | out: Seed=0xf86fa58) returned 0x44ab54d0 [0207.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0207.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b88360 [0207.249] ReadFile (in: hFile=0x1134, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0x29d, lpNumberOfBytesRead=0xf86fa54, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0xf86fa54*=0x29d, lpOverlapped=0x0) returned 1 [0207.249] SetFilePointerEx (in: hFile=0x1134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.249] WriteFile (in: hFile=0x1134, lpBuffer=0x7b88360*, nNumberOfBytesToWrite=0x29d, lpNumberOfBytesWritten=0xf86fa58, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesWritten=0xf86fa58*=0x29d, lpOverlapped=0x0) returned 1 [0210.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0210.751] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0210.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4820) returned 1 [0210.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0210.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0210.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cea0) returned 1 [0210.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdd60) returned 1 [0210.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a381c0 [0210.752] SetFilePointerEx (in: hFile=0x1134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.752] WriteFile (in: hFile=0x1134, lpBuffer=0x7cd32b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf86fae0, lpOverlapped=0x0 | out: lpBuffer=0x7cd32b8*, lpNumberOfBytesWritten=0xf86fae0*=0x10c, lpOverlapped=0x0) returned 1 [0213.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3e1c0 [0213.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0213.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0213.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4988 [0213.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0213.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0213.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0213.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.573] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.573] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="82") returned 2 [0213.573] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="f9") returned 2 [0213.573] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="38") returned 2 [0213.573] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="31") returned 2 [0213.573] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="07") returned 2 [0213.573] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="40") returned 2 [0213.573] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="b7") returned 2 [0213.573] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="48") returned 2 [0213.573] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="dd") returned 2 [0213.573] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="61") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="a3") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="7d") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="4d") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="b1") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="3c") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="91") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="b4") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="8b") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="93") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="11") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="50") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="d7") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="93") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="01") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="0e") returned 2 [0213.574] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="cd") returned 2 [0213.574] RtlInitAnsiString (in: DestinationString=0xf86fa68, SourceString="82f938310740b748dd61a37d4db13c91b48b931150d793010ecd" | out: DestinationString="82f938310740b748dd61a37d4db13c91b48b931150d793010ecd") [0213.574] RtlAnsiStringToUnicodeString (in: DestinationString=0xf86fa60, SourceString="82f938310740b748dd61a37d4db13c91b48b931150d793010ecd", AllocateDestinationString=1 | out: DestinationString="82f938310740b748dd61a37d4db13c91b48b931150d793010ecd") returned 0x0 [0213.574] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3df68 Thread: id = 6840 os_tid = 0x1214 [0199.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif")) returned 0x20 [0202.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.529] GetLastError () returned 0x5 [0204.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d578e8) returned 1 Thread: id = 6841 os_tid = 0xe1c [0199.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif")) returned 0x20 [0202.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.535] GetLastError () returned 0x5 [0204.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57438) returned 1 Thread: id = 6842 os_tid = 0xdec [0199.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif")) returned 0x20 [0202.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0204.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.541] GetLastError () returned 0x5 [0204.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0204.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d566f0) returned 1 Thread: id = 6843 os_tid = 0x14ac [0199.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif")) returned 0x20 [0202.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.547] GetLastError () returned 0x5 [0204.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332268) returned 1 Thread: id = 6844 os_tid = 0x14c0 [0199.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif")) returned 0x20 [0202.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.571] GetLastError () returned 0x5 [0204.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x332f28) returned 1 Thread: id = 6845 os_tid = 0x14c4 [0199.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif")) returned 0x20 [0202.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.504] GetLastError () returned 0x5 [0204.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333d68) returned 1 Thread: id = 6846 os_tid = 0x14c8 [0199.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif")) returned 0x20 [0202.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.512] GetLastError () returned 0x5 [0204.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85cb0) returned 1 Thread: id = 6847 os_tid = 0x1868 [0199.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20 [0202.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.518] GetLastError () returned 0x5 [0204.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85970) returned 1 Thread: id = 6848 os_tid = 0x14cc [0199.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20 [0202.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.523] GetLastError () returned 0x5 [0204.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84e10) returned 1 Thread: id = 6849 os_tid = 0x14d0 [0199.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss")) returned 0x20 [0204.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS", dwFileAttributes=0x20) returned 0 [0204.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.724] GetLastError () returned 0x5 [0204.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS", dwFileAttributes=0x20) returned 0 [0204.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 6850 os_tid = 0x14d4 [0199.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst")) returned 0x20 [0204.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST", dwFileAttributes=0x20) returned 0 [0204.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.727] GetLastError () returned 0x5 [0204.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST", dwFileAttributes=0x20) returned 0 [0204.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f90) returned 1 Thread: id = 6851 os_tid = 0x14d8 [0199.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss")) returned 0x20 [0204.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS", dwFileAttributes=0x20) returned 0 [0204.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.821] GetLastError () returned 0x5 [0204.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS", dwFileAttributes=0x20) returned 0 [0204.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63c10) returned 1 Thread: id = 6852 os_tid = 0x2250 [0199.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss")) returned 0x20 [0204.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS", dwFileAttributes=0x20) returned 0 [0204.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.823] GetLastError () returned 0x5 [0204.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS", dwFileAttributes=0x20) returned 0 [0204.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63d50) returned 1 Thread: id = 6853 os_tid = 0x1964 [0199.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss")) returned 0x20 [0204.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS", dwFileAttributes=0x20) returned 0 [0204.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.808] GetLastError () returned 0x5 [0204.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS", dwFileAttributes=0x20) returned 0 [0204.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62d10) returned 1 Thread: id = 6854 os_tid = 0x1968 [0199.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss")) returned 0x20 [0204.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS", dwFileAttributes=0x20) returned 0 [0204.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.825] GetLastError () returned 0x5 [0204.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS", dwFileAttributes=0x20) returned 0 [0204.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a632b0) returned 1 Thread: id = 6855 os_tid = 0x196c [0199.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss")) returned 0x20 [0204.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS", dwFileAttributes=0x20) returned 0 [0204.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.721] GetLastError () returned 0x5 [0204.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS", dwFileAttributes=0x20) returned 0 [0204.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63e90) returned 1 Thread: id = 6856 os_tid = 0x1970 [0199.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst")) returned 0x20 [0204.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST", dwFileAttributes=0x20) returned 0 [0204.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.718] GetLastError () returned 0x5 [0204.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST", dwFileAttributes=0x20) returned 0 [0204.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a626d0) returned 1 Thread: id = 6857 os_tid = 0x1974 [0199.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss")) returned 0x20 [0204.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS", dwFileAttributes=0x20) returned 0 [0204.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.730] GetLastError () returned 0x5 [0204.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS", dwFileAttributes=0x20) returned 0 [0204.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62770) returned 1 Thread: id = 6858 os_tid = 0x1978 [0199.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst")) returned 0x20 [0204.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST", dwFileAttributes=0x20) returned 0 [0204.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.586] GetLastError () returned 0x5 [0204.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST", dwFileAttributes=0x20) returned 0 [0204.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 6859 os_tid = 0x197c [0199.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss")) returned 0x20 [0204.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS", dwFileAttributes=0x20) returned 0 [0204.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.810] GetLastError () returned 0x5 [0204.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS", dwFileAttributes=0x20) returned 0 [0204.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63a30) returned 1 Thread: id = 6860 os_tid = 0x1980 [0199.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss")) returned 0x20 [0204.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS", dwFileAttributes=0x20) returned 0 [0204.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.811] GetLastError () returned 0x5 [0204.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS", dwFileAttributes=0x20) returned 0 [0204.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a637b0) returned 1 Thread: id = 6861 os_tid = 0x1984 [0199.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss")) returned 0x20 [0204.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS", dwFileAttributes=0x20) returned 0 [0204.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.813] GetLastError () returned 0x5 [0204.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS", dwFileAttributes=0x20) returned 0 [0204.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63850) returned 1 Thread: id = 6862 os_tid = 0x1988 [0199.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst")) returned 0x20 [0204.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST", dwFileAttributes=0x20) returned 0 [0204.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.592] GetLastError () returned 0x5 [0204.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST", dwFileAttributes=0x20) returned 0 [0204.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62bd0) returned 1 Thread: id = 6863 os_tid = 0x198c [0199.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss")) returned 0x20 [0204.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS", dwFileAttributes=0x20) returned 0 [0204.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.651] GetLastError () returned 0x5 [0204.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS", dwFileAttributes=0x20) returned 0 [0204.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 6864 os_tid = 0x1888 [0199.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst")) returned 0x20 [0204.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST", dwFileAttributes=0x20) returned 0 [0204.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.657] GetLastError () returned 0x5 [0204.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST", dwFileAttributes=0x20) returned 0 [0204.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 Thread: id = 6865 os_tid = 0x1890 [0199.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst")) returned 0x20 [0204.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST", dwFileAttributes=0x20) returned 0 [0204.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.663] GetLastError () returned 0x5 [0204.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST", dwFileAttributes=0x20) returned 0 [0204.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 6866 os_tid = 0x1990 [0199.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst")) returned 0x20 [0204.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST", dwFileAttributes=0x20) returned 0 [0204.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.815] GetLastError () returned 0x5 [0204.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST", dwFileAttributes=0x20) returned 0 [0204.815] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a630d0) returned 1 Thread: id = 6867 os_tid = 0x1994 [0199.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss")) returned 0x20 [0204.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS", dwFileAttributes=0x20) returned 0 [0204.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.817] GetLastError () returned 0x5 [0204.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS", dwFileAttributes=0x20) returned 0 [0204.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62db0) returned 1 Thread: id = 6868 os_tid = 0x1998 [0199.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst")) returned 0x20 [0204.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST", dwFileAttributes=0x20) returned 0 [0204.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.839] GetLastError () returned 0x5 [0204.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST", dwFileAttributes=0x20) returned 0 [0204.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63b70) returned 1 Thread: id = 6869 os_tid = 0x199c [0199.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss")) returned 0x20 [0204.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS", dwFileAttributes=0x20) returned 0 [0204.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.818] GetLastError () returned 0x5 [0204.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS", dwFileAttributes=0x20) returned 0 [0204.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 Thread: id = 6870 os_tid = 0x19a0 [0199.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst")) returned 0x20 [0204.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST", dwFileAttributes=0x20) returned 0 [0204.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.820] GetLastError () returned 0x5 [0204.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST", dwFileAttributes=0x20) returned 0 [0204.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 Thread: id = 6871 os_tid = 0x19a4 [0199.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss")) returned 0x20 [0204.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS", dwFileAttributes=0x20) returned 0 [0204.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.708] GetLastError () returned 0x5 [0204.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS", dwFileAttributes=0x20) returned 0 [0204.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5d60) returned 1 Thread: id = 6872 os_tid = 0x19ac [0199.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cbf4f0 [0199.549] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar" [0199.549] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\" [0199.549] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*" [0199.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.549] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ar\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.549] wcscmp (_String1=".", _String2=".") returned 0 [0199.549] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.549] wcscmp (_String1="..", _String2=".") returned 1 [0199.549] wcscmp (_String1="..", _String2="..") returned 0 [0199.549] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3d624c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3d624c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3d624c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.549] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac138) returned 1 Thread: id = 6873 os_tid = 0x19b0 [0199.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cbf4f0 [0199.552] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg" [0199.552] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\" [0199.552] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*" [0199.552] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.552] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\bg\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.552] wcscmp (_String1=".", _String2=".") returned 0 [0199.552] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.552] wcscmp (_String1="..", _String2=".") returned 1 [0199.553] wcscmp (_String1="..", _String2="..") returned 0 [0199.553] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dae780, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dae780, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dae780, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.553] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38700) returned 1 Thread: id = 6874 os_tid = 0x19b4 [0199.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cbf4f0 [0199.555] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca" [0199.555] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\" [0199.555] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*" [0199.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.555] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ca\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.556] wcscmp (_String1=".", _String2=".") returned 0 [0199.556] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.556] wcscmp (_String1="..", _String2=".") returned 1 [0199.556] wcscmp (_String1="..", _String2="..") returned 0 [0199.556] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3dd48e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3dd48e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3dd48e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.556] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d270) returned 1 Thread: id = 6875 os_tid = 0x19b8 [0199.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cbf4f0 [0199.558] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs" [0199.558] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\" [0199.558] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*" [0199.558] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.558] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\cs\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.559] wcscmp (_String1=".", _String2=".") returned 0 [0199.559] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.559] wcscmp (_String1="..", _String2=".") returned 1 [0199.559] wcscmp (_String1="..", _String2="..") returned 0 [0199.559] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e20ba0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e20ba0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e20ba0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.559] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.559] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d388) returned 1 Thread: id = 6876 os_tid = 0x19bc [0199.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cbf4f0 [0199.564] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da" [0199.564] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\" [0199.564] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*" [0199.564] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.564] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\da\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.564] wcscmp (_String1=".", _String2=".") returned 0 [0199.564] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.565] wcscmp (_String1="..", _String2=".") returned 1 [0199.565] wcscmp (_String1="..", _String2="..") returned 0 [0199.565] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e46d00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e46d00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e46d00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.565] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.565] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cf28) returned 1 Thread: id = 6877 os_tid = 0x19c0 [0199.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cbf4f0 [0199.567] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de" [0199.567] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\" [0199.567] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*" [0199.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.567] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\de\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.567] wcscmp (_String1=".", _String2=".") returned 0 [0199.567] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.567] wcscmp (_String1="..", _String2=".") returned 1 [0199.567] wcscmp (_String1="..", _String2="..") returned 0 [0199.567] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3e6ce60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3e6ce60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3e6ce60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.567] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c668) returned 1 Thread: id = 6878 os_tid = 0x2258 [0199.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cbf4f0 [0199.571] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el" [0199.571] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\" [0199.571] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*" [0199.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.571] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\el\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.571] wcscmp (_String1=".", _String2=".") returned 0 [0199.571] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.571] wcscmp (_String1="..", _String2=".") returned 1 [0199.571] wcscmp (_String1="..", _String2="..") returned 0 [0199.571] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3eb9120, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3eb9120, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3eb9120, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.571] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ccf8) returned 1 Thread: id = 6879 os_tid = 0x225c [0199.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cbf4f0 [0199.573] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en" [0199.573] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\" [0199.573] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*" [0199.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.573] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\en\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.573] wcscmp (_String1=".", _String2=".") returned 0 [0199.574] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.574] wcscmp (_String1="..", _String2=".") returned 1 [0199.574] wcscmp (_String1="..", _String2="..") returned 0 [0199.574] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3edf280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3edf280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3edf280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.574] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d040) returned 1 Thread: id = 6880 os_tid = 0x2260 [0199.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cbf4f0 [0199.578] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es" [0199.578] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\" [0199.578] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*" [0199.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.578] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\es\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.578] wcscmp (_String1=".", _String2=".") returned 0 [0199.578] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.578] wcscmp (_String1="..", _String2=".") returned 1 [0199.578] wcscmp (_String1="..", _String2="..") returned 0 [0199.578] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3f77800, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3f77800, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3f77800, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.578] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cbe0) returned 1 Thread: id = 6881 os_tid = 0x2300 [0199.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cbf4f0 [0199.581] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi" [0199.581] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\" [0199.581] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*" [0199.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.581] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fi\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.582] wcscmp (_String1=".", _String2=".") returned 0 [0199.582] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.582] wcscmp (_String1="..", _String2=".") returned 1 [0199.582] wcscmp (_String1="..", _String2="..") returned 0 [0199.582] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fc3ac0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fc3ac0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fc3ac0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.582] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c898) returned 1 Thread: id = 6882 os_tid = 0x2304 [0199.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cbf4f0 [0199.584] wcscpy (in: _Dest=0x7cbf4f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil" [0199.584] wcscat (in: _Dest=0x7cbf4f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\" [0199.584] wcscat (in: _Dest=0x7cbf4f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*" [0199.584] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.584] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fil\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.585] wcscmp (_String1=".", _String2=".") returned 0 [0199.585] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.585] wcscmp (_String1="..", _String2=".") returned 1 [0199.585] wcscmp (_String1="..", _String2="..") returned 0 [0199.585] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3fe9c20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe3fe9c20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe3fe9c20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.585] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 [0199.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 Thread: id = 6883 os_tid = 0x2328 [0199.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d555f0 [0199.588] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr" [0199.588] wcscat (in: _Dest=0x3d555f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\" [0199.588] wcscat (in: _Dest=0x3d555f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*" [0199.589] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.589] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\fr\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.589] wcscmp (_String1=".", _String2=".") returned 0 [0199.589] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.589] wcscmp (_String1="..", _String2=".") returned 1 [0199.589] wcscmp (_String1="..", _String2="..") returned 0 [0199.589] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe400fd80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe400fd80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe400fd80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.589] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0199.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d7e8) returned 1 Thread: id = 6884 os_tid = 0x23a8 [0199.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d555f0 [0199.592] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he" [0199.592] wcscat (in: _Dest=0x3d555f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\" [0199.592] wcscat (in: _Dest=0x3d555f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*" [0199.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.593] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\he\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.593] wcscmp (_String1=".", _String2=".") returned 0 [0199.593] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.593] wcscmp (_String1="..", _String2=".") returned 1 [0199.593] wcscmp (_String1="..", _String2="..") returned 0 [0199.593] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe405c040, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe405c040, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe405c040, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.593] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0199.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d900) returned 1 Thread: id = 6885 os_tid = 0x23ac [0199.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d555f0 [0199.595] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi" [0199.595] wcscat (in: _Dest=0x3d555f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\" [0199.595] wcscat (in: _Dest=0x3d555f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*" [0199.595] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.595] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hi\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.596] wcscmp (_String1=".", _String2=".") returned 0 [0199.596] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.596] wcscmp (_String1="..", _String2=".") returned 1 [0199.596] wcscmp (_String1="..", _String2="..") returned 0 [0199.596] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40821a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40821a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40821a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.596] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0199.597] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7da18) returned 1 Thread: id = 6886 os_tid = 0x23b0 [0199.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d555f0 [0199.599] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr" [0199.599] wcscat (in: _Dest=0x3d555f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\" [0199.599] wcscat (in: _Dest=0x3d555f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*" [0199.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.599] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hr\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.600] wcscmp (_String1=".", _String2=".") returned 0 [0199.600] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.600] wcscmp (_String1="..", _String2=".") returned 1 [0199.600] wcscmp (_String1="..", _String2="..") returned 0 [0199.600] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40ce460, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40ce460, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40ce460, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.600] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0199.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7db30) returned 1 Thread: id = 6887 os_tid = 0x838 [0199.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x3d555f0 [0199.602] wcscpy (in: _Dest=0x3d555f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu" [0199.603] wcscat (in: _Dest=0x3d555f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\" [0199.603] wcscat (in: _Dest=0x3d555f0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*" [0199.603] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0199.603] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\hu\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d3c0 [0199.603] wcscmp (_String1=".", _String2=".") returned 0 [0199.603] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.603] wcscmp (_String1="..", _String2=".") returned 1 [0199.603] wcscmp (_String1="..", _String2="..") returned 0 [0199.603] FindNextFileW (in: hFindFile=0x7a2d3c0, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe40f45c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe40f45c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe40f45c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.603] FindClose (in: hFindFile=0x7a2d3c0 | out: hFindFile=0x7a2d3c0) returned 1 [0199.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0199.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 [0199.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7dc48) returned 1 Thread: id = 6888 os_tid = 0x24b0 [0200.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x30413a8 [0200.409] wcscpy (in: _Dest=0x30413a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id" [0200.409] wcscat (in: _Dest=0x30413a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\" [0200.409] wcscat (in: _Dest=0x30413a8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*" [0200.409] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0200.410] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\id\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0200.410] wcscmp (_String1=".", _String2=".") returned 0 [0200.410] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.410] wcscmp (_String1="..", _String2=".") returned 1 [0200.410] wcscmp (_String1="..", _String2="..") returned 0 [0200.410] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe411a720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe411a720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe411a720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0200.410] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0200.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0200.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30413a8) returned 1 [0200.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7dd60) returned 1 Thread: id = 6889 os_tid = 0x24b4 [0200.412] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json")) returned 0x2020 [0203.909] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0222.554] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1448 [0222.555] GetFileSizeEx (in: hFile=0x1448, lpFileSize=0xf91f95c | out: lpFileSize=0xf91f95c*=272) returned 1 [0222.555] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.555] ReadFile (in: hFile=0x1448, lpBuffer=0xf91f938, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf91f948, lpOverlapped=0x0 | out: lpBuffer=0xf91f938*, lpNumberOfBytesRead=0xf91f948*=0x4, lpOverlapped=0x0) returned 1 [0222.556] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.556] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0222.557] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0222.557] NtQuerySystemTime (in: CurrentTime=0xf91f8d0 | out: CurrentTime=0xf91f8d0*=132462178008012000) returned 0x0 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x37ee3716 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x513cc783 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x50ba78ca [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x4bcd0acb [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x433dcd2b [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x2f1b7a0c [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x4e7039b3 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x67efefdd [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x59a8cd03 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x6a0f5b09 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x7c1bf122 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x19967b8e [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x543ff5fd [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0xd4a6d83 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x6d4303bf [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x45a792b4 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x560b4e49 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x7febd9df [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x74949e65 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x48d0c2cc [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x7c83c67 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x2def42e4 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x38c87d42 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x79a0227a [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x60606685 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x5e1a89d9 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x4aebcc52 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x16aae04 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x1179c71 [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x19967b8e [0222.557] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x5aad38a6 [0222.558] RtlRandomEx (in: Seed=0xf91f8c8 | out: Seed=0xf91f8c8) returned 0x7e13e3fd [0222.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b50b50 [0222.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b54758 [0222.566] ReadFile (in: hFile=0x1448, lpBuffer=0x7b50b50, nNumberOfBytesToRead=0x110, lpNumberOfBytesRead=0xf91f8c4, lpOverlapped=0x0 | out: lpBuffer=0x7b50b50*, lpNumberOfBytesRead=0xf91f8c4*=0x110, lpOverlapped=0x0) returned 1 [0222.566] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.566] WriteFile (in: hFile=0x1448, lpBuffer=0x7b54758*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0xf91f8c8, lpOverlapped=0x0 | out: lpBuffer=0x7b54758*, lpNumberOfBytesWritten=0xf91f8c8*=0x110, lpOverlapped=0x0) returned 1 [0226.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54048 [0226.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54138 [0226.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54138) returned 1 [0226.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b54758) returned 1 [0226.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b50b50) returned 1 [0226.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015238) returned 1 [0226.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8c38) returned 1 [0226.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37cb0 [0226.216] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.216] WriteFile (in: hFile=0x1448, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf91f950, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0xf91f950*=0x10c, lpOverlapped=0x0) returned 1 [0226.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0226.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0226.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c770 [0226.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0226.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0226.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be60) returned 1 [0226.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.311] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.311] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="19") returned 2 [0226.311] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="b7") returned 2 [0226.311] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="59") returned 2 [0226.311] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="83") returned 2 [0226.311] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="bf") returned 2 [0226.311] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="fe") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="46") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="98") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="fb") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="5c") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="41") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="25") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="f3") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="7b") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="45") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="d4") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="31") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="59") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="99") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="3d") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="26") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="27") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="09") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="03") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="85") returned 2 [0226.312] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="e4") returned 2 [0226.312] RtlInitAnsiString (in: DestinationString=0xf91f8d8, SourceString="19b75983bffe4698fb5c4125f37b45d43159993d2627090385e4" | out: DestinationString="19b75983bffe4698fb5c4125f37b45d43159993d2627090385e4") [0226.312] RtlAnsiStringToUnicodeString (in: DestinationString=0xf91f8d0, SourceString="19b75983bffe4698fb5c4125f37b45d43159993d2627090385e4", AllocateDestinationString=1 | out: DestinationString="19b75983bffe4698fb5c4125f37b45d43159993d2627090385e4") returned 0x0 [0226.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f290 [0226.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9fd0) returned 1 [0226.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f37e80) returned 1 [0226.393] NtQueryInformationFile (in: FileHandle=0x1448, IoStatusBlock=0xf91f8a0, FileInformation=0xf91f8a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf91f8a0, FileInformation=0xf91f8a8) returned 0x0 [0226.393] NtSetInformationFile (FileHandle=0x1448, IoStatusBlock=0xf91f8a0, FileInformation=0xf91f8a8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9928) returned 1 [0226.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0226.468] FlushFileBuffers (hFile=0x1448) returned 1 [0226.481] CloseHandle (hObject=0x1448) returned 1 [0226.561] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9928 [0226.561] wcscpy (in: _Dest=0x3ec9928, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\" [0226.561] wcscat (in: _Dest=0x3ec9928, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\68814F-Readme.txt" [0226.561] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\68814f-readme.txt")) returned 0xffffffff [0226.561] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\th\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.659] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf91f8e4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xf91f8e4*=0x8b9, lpOverlapped=0x0) returned 1 [0226.661] CloseHandle (hObject=0x1060) returned 1 [0226.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9928) returned 1 [0226.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf740) returned 1 Thread: id = 6890 os_tid = 0x24b8 [0200.413] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json")) returned 0x2020 [0203.909] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0222.566] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x130c [0222.567] GetFileSizeEx (in: hFile=0x130c, lpFileSize=0xf0ffd2c | out: lpFileSize=0xf0ffd2c*=216) returned 1 [0222.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0222.567] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0222.567] NtQuerySystemTime (in: CurrentTime=0xf0ffca0 | out: CurrentTime=0xf0ffca0*=132462178008168000) returned 0x0 [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x485c7745 [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0xd53d5bf [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x3e162c07 [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x52329de9 [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x3b736151 [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x19dbad67 [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x101af854 [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x5acaf3e [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x3870e556 [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x71625bb5 [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x565fd51c [0222.567] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x5dbe8c13 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x48214d0 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x112c916f [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x7c1bf122 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x7a2293f9 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x135d343e [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x22d0ad00 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x5cd00a97 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x34171ed0 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x1e1bc992 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x69eda491 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x61e20302 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x19d3ce8a [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x5d787fe [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x6295dc80 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x1e039799 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x46090b4e [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x3a077a99 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x63bf56fd [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x51e32809 [0222.568] RtlRandomEx (in: Seed=0xf0ffc98 | out: Seed=0xf0ffc98) returned 0x45b161e [0222.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b58360 [0222.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5bf68 [0222.576] ReadFile (in: hFile=0x130c, lpBuffer=0x7b58360, nNumberOfBytesToRead=0xd8, lpNumberOfBytesRead=0xf0ffc94, lpOverlapped=0x0 | out: lpBuffer=0x7b58360*, lpNumberOfBytesRead=0xf0ffc94*=0xd8, lpOverlapped=0x0) returned 1 [0222.578] SetFilePointerEx (in: hFile=0x130c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.578] WriteFile (in: hFile=0x130c, lpBuffer=0x7b5bf68*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0xf0ffc98, lpOverlapped=0x0 | out: lpBuffer=0x7b5bf68*, lpNumberOfBytesWritten=0xf0ffc98*=0xd8, lpOverlapped=0x0) returned 1 [0226.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538f0 [0226.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538a0 [0226.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538a0) returned 1 [0226.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5bf68) returned 1 [0226.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b58360) returned 1 [0226.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30153a0) returned 1 [0226.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb92b0) returned 1 [0226.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37830 [0226.218] SetFilePointerEx (in: hFile=0x130c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.218] WriteFile (in: hFile=0x130c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf0ffd20, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xf0ffd20*=0x10c, lpOverlapped=0x0) returned 1 [0226.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c270 [0226.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c270) returned 1 [0226.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c270 [0226.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0226.315] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0226.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc80) returned 1 [0226.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.316] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="57") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="39") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="bc") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="cc") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="da") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="b2") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="d4") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="a6") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="0e") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="fa") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="12") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="8d") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="66") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="b7") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="05") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="6a") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="5b") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="af") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="34") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="f6") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="e7") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="97") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="ac") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="53") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="29") returned 2 [0226.316] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="f7") returned 2 [0226.316] RtlInitAnsiString (in: DestinationString=0xf0ffca8, SourceString="5739bcccdab2d4a60efa128d66b7056a5baf34f6e797ac5329f7" | out: DestinationString="5739bcccdab2d4a60efa128d66b7056a5baf34f6e797ac5329f7") [0226.317] RtlAnsiStringToUnicodeString (in: DestinationString=0xf0ffca0, SourceString="5739bcccdab2d4a60efa128d66b7056a5baf34f6e797ac5329f7", AllocateDestinationString=1 | out: DestinationString="5739bcccdab2d4a60efa128d66b7056a5baf34f6e797ac5329f7") returned 0x0 [0226.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fb00 [0226.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9e88) returned 1 [0226.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f39638) returned 1 [0226.395] NtQueryInformationFile (in: FileHandle=0x130c, IoStatusBlock=0xf0ffc70, FileInformation=0xf0ffc78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf0ffc70, FileInformation=0xf0ffc78) returned 0x0 [0226.395] NtSetInformationFile (FileHandle=0x130c, IoStatusBlock=0xf0ffc70, FileInformation=0xf0ffc78, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca2e8) returned 1 [0226.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0226.471] FlushFileBuffers (hFile=0x130c) returned 1 [0226.485] CloseHandle (hObject=0x130c) returned 1 [0226.563] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9a60 [0226.563] wcscpy (in: _Dest=0x3ec9a60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\" [0226.563] wcscat (in: _Dest=0x3ec9a60, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\68814F-Readme.txt" [0226.563] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\68814f-readme.txt")) returned 0xffffffff [0226.563] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\no\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.663] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf0ffcb4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xf0ffcb4*=0x8b9, lpOverlapped=0x0) returned 1 [0226.664] CloseHandle (hObject=0x1060) returned 1 [0226.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9a60) returned 1 [0226.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe4c0) returned 1 Thread: id = 6891 os_tid = 0x24bc [0200.413] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json")) returned 0x2020 [0203.427] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0214.870] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e6c [0214.870] GetFileSizeEx (in: hFile=0x1e6c, lpFileSize=0xf2dfe74 | out: lpFileSize=0xf2dfe74*=312) returned 1 [0214.870] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x134, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.870] ReadFile (in: hFile=0x1e6c, lpBuffer=0xf2dfe50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf2dfe60, lpOverlapped=0x0 | out: lpBuffer=0xf2dfe50*, lpNumberOfBytesRead=0xf2dfe60*=0x4, lpOverlapped=0x0) returned 1 [0214.872] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be38 [0214.872] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0214.872] NtQuerySystemTime (in: CurrentTime=0xf2dfde8 | out: CurrentTime=0xf2dfde8*=132462177934536000) returned 0x0 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x29c9d85c [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x550202be [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x7326fa65 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x37bfe120 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x36c8745e [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x2d890dc [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x6b00e6dd [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x3dd4f62f [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x34abb8c4 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x79ced85b [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x168b7d4b [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x7d3c2906 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x62b35c5a [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x6097b5b5 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x16d51e7a [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x4e0c964b [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x281c05d4 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x27a722be [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x7d791111 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x17e37a9c [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x1efff553 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x17698e6 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x871eaae [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x437764b1 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x54ac513e [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x560b3ae2 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0xf638162 [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x2f0a5fda [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0xbe2495c [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x312c934b [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x2d36c1c [0214.873] RtlRandomEx (in: Seed=0xf2dfde0 | out: Seed=0xf2dfde0) returned 0x44e87e0e [0214.881] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.881] WriteFile (in: hFile=0x1e6c, lpBuffer=0x10eb9478*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0xf2dfde0, lpOverlapped=0x0 | out: lpBuffer=0x10eb9478*, lpNumberOfBytesWritten=0xf2dfde0*=0x138, lpOverlapped=0x0) returned 1 [0214.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3858 [0214.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0214.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0214.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eb9478) returned 1 [0214.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eb5870) returned 1 [0214.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c5b8) returned 1 [0214.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85eb0) returned 1 [0214.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a40 [0214.978] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.978] WriteFile (in: hFile=0x1e6c, lpBuffer=0x7cd3c90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf2dfe68, lpOverlapped=0x0 | out: lpBuffer=0x7cd3c90*, lpNumberOfBytesWritten=0xf2dfe68*=0x10c, lpOverlapped=0x0) returned 1 [0215.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85a78 [0215.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c360 [0215.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0215.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0215.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c630 [0215.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0215.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b500 [0215.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b500) returned 1 [0215.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c360) returned 1 [0215.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85a78) returned 1 [0215.004] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0215.005] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="19") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="61") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="4b") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="71") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="63") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="2c") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="1e") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="5a") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="e5") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="81") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="1f") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="4d") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="af") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="99") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="11") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="f4") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="5a") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="b4") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="b8") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="29") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="b8") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="67") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="f2") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="92") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="84") returned 2 [0215.005] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="61") returned 2 [0215.005] RtlInitAnsiString (in: DestinationString=0xf2dfdf0, SourceString="19614b71632c1e5ae5811f4daf9911f45ab4b829b867f2928461" | out: DestinationString="19614b71632c1e5ae5811f4daf9911f45ab4b829b867f2928461") [0215.005] RtlAnsiStringToUnicodeString (in: DestinationString=0xf2dfde8, SourceString="19614b71632c1e5ae5811f4daf9911f45ab4b829b867f2928461", AllocateDestinationString=1 | out: DestinationString="19614b71632c1e5ae5811f4daf9911f45ab4b829b867f2928461") returned 0x0 [0215.005] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c2e8 Thread: id = 6892 os_tid = 0x24c0 [0200.414] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json")) returned 0x2020 [0203.428] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0214.882] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xba0 [0214.883] GetFileSizeEx (in: hFile=0xba0, lpFileSize=0x8a7f8f4 | out: lpFileSize=0x8a7f8f4*=292) returned 1 [0214.883] SetFilePointerEx (in: hFile=0xba0, liDistanceToMove=0x120, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.883] ReadFile (in: hFile=0xba0, lpBuffer=0x8a7f8d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8a7f8e0, lpOverlapped=0x0 | out: lpBuffer=0x8a7f8d0*, lpNumberOfBytesRead=0x8a7f8e0*=0x4, lpOverlapped=0x0) returned 1 [0214.885] SetFilePointerEx (in: hFile=0xba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0214.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0214.886] NtQuerySystemTime (in: CurrentTime=0x8a7f868 | out: CurrentTime=0x8a7f868*=132462177934692000) returned 0x0 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x7eb97658 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x2965f012 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x46cbf74c [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0xadda477 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x1a175a73 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x6b695488 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x419aeb48 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x4cc5d04b [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x5a198717 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0xa64dc8a [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x72980e24 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x5481787e [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x693380b7 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x7cd215db [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x6abccebe [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x5ba8115c [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x6654a24d [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x688f0548 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x54d729fe [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x397c5645 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x631b74aa [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x363f8e62 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x2a348019 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x88a9721 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x66b98a97 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x5aea89e6 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x25e2ee7e [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x4c0a7bbf [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x126048a7 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x40842ab3 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x13ae7bf3 [0214.886] RtlRandomEx (in: Seed=0x8a7f860 | out: Seed=0x8a7f860) returned 0x31d6e73 [0214.894] SetFilePointerEx (in: hFile=0xba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.895] WriteFile (in: hFile=0xba0, lpBuffer=0x10ec0c88*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x8a7f860, lpOverlapped=0x0 | out: lpBuffer=0x10ec0c88*, lpNumberOfBytesWritten=0x8a7f860*=0x124, lpOverlapped=0x0) returned 1 [0214.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0214.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0214.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0214.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ec0c88) returned 1 [0214.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ebd080) returned 1 [0214.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c2e8) returned 1 [0214.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85ac0) returned 1 [0214.981] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376e0 [0214.981] SetFilePointerEx (in: hFile=0xba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.981] WriteFile (in: hFile=0xba0, lpBuffer=0x7cd3b78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8a7f8e8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3b78*, lpNumberOfBytesWritten=0x8a7f8e8*=0x10c, lpOverlapped=0x0) returned 1 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85a78 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c360 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0215.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c3d8 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be38 [0215.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be38) returned 1 [0215.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c360) returned 1 [0215.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85a78) returned 1 [0215.009] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0215.009] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="32") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="69") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="d1") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="b7") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="6b") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="2b") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="fe") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="c3") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="17") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="9e") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="22") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="11") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="52") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="c9") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="c8") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="11") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="cc") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="8e") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="cb") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="3e") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="50") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="54") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="d7") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="3f") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="8c") returned 2 [0215.010] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="f5") returned 2 [0215.010] RtlInitAnsiString (in: DestinationString=0x8a7f870, SourceString="3269d1b76b2bfec3179e221152c9c811cc8ecb3e5054d73f8cf5" | out: DestinationString="3269d1b76b2bfec3179e221152c9c811cc8ecb3e5054d73f8cf5") [0215.010] RtlAnsiStringToUnicodeString (in: DestinationString=0x8a7f868, SourceString="3269d1b76b2bfec3179e221152c9c811cc8ecb3e5054d73f8cf5", AllocateDestinationString=1 | out: DestinationString="3269d1b76b2bfec3179e221152c9c811cc8ecb3e5054d73f8cf5") returned 0x0 [0215.010] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d50fa8 Thread: id = 6893 os_tid = 0x24c4 [0200.415] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a5b8 [0200.415] wcscpy (in: _Dest=0x7a6a5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0200.416] wcscat (in: _Dest=0x7a6a5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\" [0200.416] wcscat (in: _Dest=0x7a6a5b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*" [0200.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0200.416] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58cf4b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58d42d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066ec0 [0200.416] wcscmp (_String1=".", _String2=".") returned 0 [0200.416] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58cf4b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58d42d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.416] wcscmp (_String1="..", _String2=".") returned 1 [0200.416] wcscmp (_String1="..", _String2="..") returned 0 [0200.416] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58d42d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0200.417] wcscmp (_String1="messages.json", _String2=".") returned 1 [0200.417] wcscmp (_String1="messages.json", _String2="..") returned 1 [0200.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x30413a8 [0200.417] wcscpy (in: _Dest=0x30413a8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" [0200.417] wcscat (in: _Dest=0x30413a8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\" [0200.417] wcscat (in: _Dest=0x30413a8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" [0201.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x30413a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08 [0201.703] FindNextFileW (in: hFindFile=0x3066ec0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58d42d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58d42d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0201.704] FindClose (in: hFindFile=0x3066ec0 | out: hFindFile=0x3066ec0) returned 1 [0201.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0201.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a5b8) returned 1 [0201.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80000) returned 1 Thread: id = 6894 os_tid = 0x24c8 [0200.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6a7c8 [0200.418] wcscpy (in: _Dest=0x7a6a7c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0200.418] wcscat (in: _Dest=0x7a6a7c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\" [0200.418] wcscat (in: _Dest=0x7a6a7c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*" [0200.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a557e8 [0200.418] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58d90f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ddf10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0203.937] wcscmp (_String1=".", _String2=".") returned 0 [0203.937] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58d90f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58ddf10, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.937] wcscmp (_String1="..", _String2=".") returned 1 [0203.937] wcscmp (_String1="..", _String2="..") returned 0 [0203.937] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ddf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.937] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.937] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b7e7c0 [0203.938] wcscpy (in: _Dest=0x7b7e7c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" [0203.938] wcscat (in: _Dest=0x7b7e7c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\" [0203.938] wcscat (in: _Dest=0x7b7e7c0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" [0203.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7e7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c40 [0203.939] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a557e8 | out: lpFindFileData=0x7a557e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58ddf10, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ddf10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.939] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0203.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a557e8) returned 1 [0203.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a7c8) returned 1 [0203.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd0a8) returned 1 Thread: id = 6895 os_tid = 0x2534 [0200.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b218 [0200.419] wcscpy (in: _Dest=0x7a6b218, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0200.419] wcscat (in: _Dest=0x7a6b218, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\" [0200.419] wcscat (in: _Dest=0x7a6b218, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*" [0200.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55a50 [0200.419] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58e5440, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58e7b50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58e7b50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0203.940] wcscmp (_String1=".", _String2=".") returned 0 [0203.940] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58e5440, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58e7b50, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58e7b50, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.940] wcscmp (_String1="..", _String2=".") returned 1 [0203.940] wcscmp (_String1="..", _String2="..") returned 0 [0203.940] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58e7b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ea260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.941] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.941] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b7e8e8 [0203.941] wcscpy (in: _Dest=0x7b7e8e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" [0203.941] wcscat (in: _Dest=0x7b7e8e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\" [0203.941] wcscat (in: _Dest=0x7b7e8e8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" [0203.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7e8e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0 [0203.942] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a55a50 | out: lpFindFileData=0x7a55a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58e7b50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58ea260, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.942] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0203.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55a50) returned 1 [0203.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b218) returned 1 [0203.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc448) returned 1 Thread: id = 6896 os_tid = 0x253c [0200.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6acf0 [0200.420] wcscpy (in: _Dest=0x7a6acf0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" [0200.420] wcscat (in: _Dest=0x7a6acf0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\" [0200.420] wcscat (in: _Dest=0x7a6acf0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*" [0200.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54be0 [0200.421] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58ef080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f1790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58f1790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0203.944] wcscmp (_String1=".", _String2=".") returned 0 [0203.944] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58ef080, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f1790, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58f1790, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.944] wcscmp (_String1="..", _String2=".") returned 1 [0203.944] wcscmp (_String1="..", _String2="..") returned 0 [0203.944] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58f1790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f3ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.944] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.944] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b7ea10 [0203.944] wcscpy (in: _Dest=0x7b7ea10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" [0203.945] wcscat (in: _Dest=0x7b7ea10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\" [0203.945] wcscat (in: _Dest=0x7b7ea10, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" [0203.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7ea10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac [0203.946] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a54be0 | out: lpFindFileData=0x7a54be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58f1790, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58f3ea0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.946] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0203.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54be0) returned 1 [0203.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6acf0) returned 1 [0203.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc340) returned 1 Thread: id = 6897 os_tid = 0x2540 [0200.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b110 [0200.422] wcscpy (in: _Dest=0x7a6b110, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" [0200.422] wcscat (in: _Dest=0x7a6b110, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\" [0200.422] wcscat (in: _Dest=0x7a6b110, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*" [0200.422] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53b08 [0200.422] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58f8cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58fb3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0203.948] wcscmp (_String1=".", _String2=".") returned 0 [0203.948] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe58f8cc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fb3d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe58fb3d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.948] wcscmp (_String1="..", _String2=".") returned 1 [0203.948] wcscmp (_String1="..", _String2="..") returned 0 [0203.948] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58fb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fdae0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.948] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.948] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b7eb38 [0203.948] wcscpy (in: _Dest=0x7b7eb38, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" [0203.948] wcscat (in: _Dest=0x7b7eb38, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\" [0203.948] wcscat (in: _Dest=0x7b7eb38, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" [0203.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7eb38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c [0203.949] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a53b08 | out: lpFindFileData=0x7a53b08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe58fb3d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe58fdae0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.950] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0203.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53b08) returned 1 [0203.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b110) returned 1 [0203.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b530) returned 1 Thread: id = 6898 os_tid = 0x2544 [0200.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6b008 [0200.423] wcscpy (in: _Dest=0x7a6b008, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" [0200.423] wcscat (in: _Dest=0x7a6b008, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\" [0200.423] wcscat (in: _Dest=0x7a6b008, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*" [0200.423] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a538a0 [0200.423] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5902900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5907720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0203.951] wcscmp (_String1=".", _String2=".") returned 0 [0203.951] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5902900, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5907720, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.951] wcscmp (_String1="..", _String2=".") returned 1 [0203.951] wcscmp (_String1="..", _String2="..") returned 0 [0203.951] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5907720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.951] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.952] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b7ec60 [0203.952] wcscpy (in: _Dest=0x7b7ec60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" [0203.952] wcscat (in: _Dest=0x7b7ec60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\" [0203.952] wcscat (in: _Dest=0x7b7ec60, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" [0203.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7ec60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160 [0203.952] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a538a0 | out: lpFindFileData=0x7a538a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5907720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5907720, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.953] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0203.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a538a0) returned 1 [0203.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b008) returned 1 [0203.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b740) returned 1 Thread: id = 6899 os_tid = 0x2548 [0200.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7dd60 [0200.424] wcscpy (in: _Dest=0x7b7dd60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" [0200.424] wcscat (in: _Dest=0x7b7dd60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\" [0200.424] wcscat (in: _Dest=0x7b7dd60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*" [0200.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53638 [0200.425] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe590c540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5911360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0203.954] wcscmp (_String1=".", _String2=".") returned 0 [0203.954] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe590c540, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5911360, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.954] wcscmp (_String1="..", _String2=".") returned 1 [0203.954] wcscmp (_String1="..", _String2="..") returned 0 [0203.954] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5911360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.954] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.954] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7b7ed88 [0203.954] wcscpy (in: _Dest=0x7b7ed88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" [0203.954] wcscat (in: _Dest=0x7b7ed88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\" [0203.954] wcscat (in: _Dest=0x7b7ed88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" [0203.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7ed88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154 [0203.955] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a53638 | out: lpFindFileData=0x7a53638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5911360, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5911360, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.955] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0203.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53638) returned 1 [0203.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7dd60) returned 1 [0203.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b950) returned 1 Thread: id = 6900 os_tid = 0x254c [0200.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7c550 [0200.426] wcscpy (in: _Dest=0x7b7c550, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0200.426] wcscat (in: _Dest=0x7b7c550, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\" [0200.426] wcscat (in: _Dest=0x7b7c550, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*" [0200.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a533d0 [0200.426] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5918890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe591afa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0203.925] wcscmp (_String1=".", _String2=".") returned 0 [0203.925] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5918890, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe591afa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.925] wcscmp (_String1="..", _String2=".") returned 1 [0203.925] wcscmp (_String1="..", _String2="..") returned 0 [0203.925] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe591afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.925] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.925] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.925] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7b7e570 [0203.925] wcscpy (in: _Dest=0x7b7e570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" [0203.925] wcscat (in: _Dest=0x7b7e570, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\" [0203.925] wcscat (in: _Dest=0x7b7e570, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" [0203.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7e570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1828 [0203.927] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a533d0 | out: lpFindFileData=0x7a533d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe591afa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe591afa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.927] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a533d0) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c550) returned 1 [0203.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a4b0) returned 1 Thread: id = 6901 os_tid = 0x2550 [0200.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7b7e1c0 [0200.427] wcscpy (in: _Dest=0x7b7e1c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0200.427] wcscat (in: _Dest=0x7b7e1c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\" [0200.427] wcscat (in: _Dest=0x7b7e1c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*" [0200.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55318 [0200.427] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe59224d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5924be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0203.895] wcscmp (_String1=".", _String2=".") returned 0 [0203.895] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe59224d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5924be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.895] wcscmp (_String1="..", _String2=".") returned 1 [0203.895] wcscmp (_String1="..", _String2="..") returned 0 [0203.895] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5924be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.895] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.895] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7a67ea0 [0203.896] wcscpy (in: _Dest=0x7a67ea0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" [0203.896] wcscat (in: _Dest=0x7a67ea0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\" [0203.896] wcscat (in: _Dest=0x7a67ea0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" [0203.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0 [0203.897] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a55318 | out: lpFindFileData=0x7a55318*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5924be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5924be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe5c7dad0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.897] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0203.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55318) returned 1 [0203.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e1c0) returned 1 [0203.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b638) returned 1 Thread: id = 6902 os_tid = 0x2554 [0200.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7a6aae0 [0200.428] wcscpy (in: _Dest=0x7a6aae0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" [0200.429] wcscat (in: _Dest=0x7a6aae0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\" [0200.429] wcscat (in: _Dest=0x7a6aae0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*" [0200.429] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54710 [0200.429] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe592c110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592e820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592e820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0203.933] wcscmp (_String1=".", _String2=".") returned 0 [0203.933] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe592c110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe592e820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe592e820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.933] wcscmp (_String1="..", _String2=".") returned 1 [0203.933] wcscmp (_String1="..", _String2="..") returned 0 [0203.933] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe592e820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5930f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.933] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.933] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7b7e698 [0203.934] wcscpy (in: _Dest=0x7b7e698, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" [0203.934] wcscat (in: _Dest=0x7b7e698, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\" [0203.934] wcscat (in: _Dest=0x7b7e698, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" [0203.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7e698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c [0203.935] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a54710 | out: lpFindFileData=0x7a54710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe592e820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe5930f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xa0937900, ftLastWriteTime.dwHighDateTime=0x1d17893, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.935] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0203.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54710) returned 1 [0203.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6aae0) returned 1 [0203.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ba58) returned 1 Thread: id = 6903 os_tid = 0xec0 [0200.429] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json")) returned 0x2020 [0203.898] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0214.479] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xeb4 [0214.480] GetFileSizeEx (in: hFile=0xeb4, lpFileSize=0x476f76c | out: lpFileSize=0x476f76c*=187) returned 1 [0214.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0214.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb08 [0214.481] NtQuerySystemTime (in: CurrentTime=0x476f6e0 | out: CurrentTime=0x476f6e0*=132462177930636000) returned 0x0 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x640a7561 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x7e496a9d [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x5b291bc5 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x14167481 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x716f46ba [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x75c8f254 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x71186ceb [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x279b8a58 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x3d060325 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x171c0bdd [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x3e72f5a [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x55a97770 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x409147db [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x5f500bb4 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x3f7f07ea [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x3e7b77f7 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x39c28978 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x5a67b44e [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x40bb3706 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x3136a58c [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0xfc687b0 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x492989a8 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x39c28978 [0214.481] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x18923d55 [0214.482] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x7097f1ed [0214.482] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x3f6354f3 [0214.482] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x757c1704 [0214.482] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x6376fba3 [0214.482] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x6a7b2e94 [0214.482] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x1550fd0a [0214.482] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x1996e99b [0214.482] RtlRandomEx (in: Seed=0x476f6d8 | out: Seed=0x476f6d8) returned 0x22e9de86 [0214.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7acb8e0 [0214.494] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7acf4e8 [0214.494] ReadFile (in: hFile=0xeb4, lpBuffer=0x7acb8e0, nNumberOfBytesToRead=0xbb, lpNumberOfBytesRead=0x476f6d4, lpOverlapped=0x0 | out: lpBuffer=0x7acb8e0*, lpNumberOfBytesRead=0x476f6d4*=0xbb, lpOverlapped=0x0) returned 1 [0214.496] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.496] WriteFile (in: hFile=0xeb4, lpBuffer=0x7acf4e8*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x476f6d8, lpOverlapped=0x0 | out: lpBuffer=0x7acf4e8*, lpNumberOfBytesWritten=0x476f6d8*=0xbb, lpOverlapped=0x0) returned 1 [0214.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c928 [0214.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0214.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0214.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acf4e8) returned 1 [0214.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acb8e0) returned 1 [0214.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0214.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85370) returned 1 [0214.953] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a381c0 [0214.953] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.953] WriteFile (in: hFile=0xeb4, lpBuffer=0x7cd2480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x476f760, lpOverlapped=0x0 | out: lpBuffer=0x7cd2480*, lpNumberOfBytesWritten=0x476f760*=0x10c, lpOverlapped=0x0) returned 1 [0214.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85ac0 [0214.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c2e8 [0214.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0214.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0214.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3420 [0214.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5450 [0214.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0214.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3560) returned 1 [0214.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c2e8) returned 1 [0214.985] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85ac0) returned 1 [0214.985] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0214.985] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="f0") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="3c") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="82") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="94") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="ca") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="52") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="2b") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="fc") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="50") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="40") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="43") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="cf") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="fe") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="a6") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="68") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="ce") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="2c") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="50") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="a5") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="53") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="a8") returned 2 [0214.985] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="9f") returned 2 [0214.986] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="26") returned 2 [0214.986] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="e6") returned 2 [0214.986] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="ea") returned 2 [0214.986] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="9c") returned 2 [0214.986] RtlInitAnsiString (in: DestinationString=0x476f6e8, SourceString="f03c8294ca522bfc504043cffea668ce2c50a553a89f26e6ea9c" | out: DestinationString="f03c8294ca522bfc504043cffea668ce2c50a553a89f26e6ea9c") [0214.986] RtlAnsiStringToUnicodeString (in: DestinationString=0x476f6e0, SourceString="f03c8294ca522bfc504043cffea668ce2c50a553a89f26e6ea9c", AllocateDestinationString=1 | out: DestinationString="f03c8294ca522bfc504043cffea668ce2c50a553a89f26e6ea9c") returned 0x0 [0214.986] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c5b8 Thread: id = 6904 os_tid = 0x1ae8 [0200.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c438 [0200.430] wcscpy (in: _Dest=0x7b7c438, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0200.430] wcscat (in: _Dest=0x7b7c438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\" [0200.430] wcscat (in: _Dest=0x7b7c438, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*" [0200.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54978 [0200.430] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8112e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8117cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0203.386] wcscmp (_String1=".", _String2=".") returned 0 [0203.386] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8112e90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8117cb0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.386] wcscmp (_String1="..", _String2=".") returned 1 [0203.386] wcscmp (_String1="..", _String2="..") returned 0 [0203.386] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8117cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.386] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.386] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.386] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd6bb0 [0203.387] wcscpy (in: _Dest=0x7cd6bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" [0203.387] wcscat (in: _Dest=0x7cd6bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\" [0203.387] wcscat (in: _Dest=0x7cd6bb0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" [0203.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd6bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20 [0203.807] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54978 | out: lpFindFileData=0x7a54978*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8117cb0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8117cb0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.807] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0203.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54978) returned 1 [0203.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c438) returned 1 [0203.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7b6b8) returned 1 Thread: id = 6905 os_tid = 0x1aec [0200.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d270 [0200.431] wcscpy (in: _Dest=0x7b7d270, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0200.431] wcscat (in: _Dest=0x7b7d270, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\" [0200.431] wcscat (in: _Dest=0x7b7d270, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*" [0200.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52a30 [0200.431] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8126710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe812b530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe812b530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0203.387] wcscmp (_String1=".", _String2=".") returned 0 [0203.387] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8126710, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe812b530, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe812b530, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.387] wcscmp (_String1="..", _String2=".") returned 1 [0203.387] wcscmp (_String1="..", _String2="..") returned 0 [0203.387] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe812b530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8130350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.387] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.387] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd6cd8 [0203.387] wcscpy (in: _Dest=0x7cd6cd8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" [0203.387] wcscat (in: _Dest=0x7cd6cd8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\" [0203.387] wcscat (in: _Dest=0x7cd6cd8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" [0203.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd6cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b50 [0203.810] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x7a52a30 | out: lpFindFileData=0x7a52a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe812b530, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8130350, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.810] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0203.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52a30) returned 1 [0203.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d270) returned 1 [0203.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f8c8) returned 1 Thread: id = 6906 os_tid = 0x1af8 [0200.432] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d388 [0200.433] wcscpy (in: _Dest=0x7b7d388, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0200.433] wcscat (in: _Dest=0x7b7d388, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\" [0200.433] wcscat (in: _Dest=0x7b7d388, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*" [0200.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a284e8 [0200.433] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8232ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8235700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0203.388] wcscmp (_String1=".", _String2=".") returned 0 [0203.388] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8232ff0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8235700, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.388] wcscmp (_String1="..", _String2=".") returned 1 [0203.388] wcscmp (_String1="..", _String2="..") returned 0 [0203.388] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8235700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.388] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.388] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd6e00 [0203.388] wcscpy (in: _Dest=0x7cd6e00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" [0203.388] wcscat (in: _Dest=0x7cd6e00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\" [0203.388] wcscat (in: _Dest=0x7cd6e00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" [0203.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd6e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac [0203.813] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a284e8 | out: lpFindFileData=0x7a284e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8235700, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8235700, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.813] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0203.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a284e8) returned 1 [0203.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d388) returned 1 [0203.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80108) returned 1 Thread: id = 6907 os_tid = 0x1afc [0200.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7cf28 [0200.439] wcscpy (in: _Dest=0x7b7cf28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0200.439] wcscat (in: _Dest=0x7b7cf28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\" [0200.439] wcscat (in: _Dest=0x7b7cf28, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*" [0200.439] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2ab68 [0200.439] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8241a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8246870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d800 [0203.388] wcscmp (_String1=".", _String2=".") returned 0 [0203.388] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8241a50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8246870, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.388] wcscmp (_String1="..", _String2=".") returned 1 [0203.388] wcscmp (_String1="..", _String2="..") returned 0 [0203.388] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8246870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3147db00, ftLastWriteTime.dwHighDateTime=0x1d0f453, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.389] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.389] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd6f28 [0203.389] wcscpy (in: _Dest=0x7cd6f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" [0203.389] wcscat (in: _Dest=0x7cd6f28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\" [0203.389] wcscat (in: _Dest=0x7cd6f28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" [0203.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd6f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb8 [0203.815] FindNextFileW (in: hFindFile=0x7a2d800, lpFindFileData=0x7a2ab68 | out: lpFindFileData=0x7a2ab68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8246870, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8246870, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0x3147db00, ftLastWriteTime.dwHighDateTime=0x1d0f453, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.815] FindClose (in: hFindFile=0x7a2d800 | out: hFindFile=0x7a2d800) returned 1 [0203.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2ab68) returned 1 [0203.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cf28) returned 1 [0203.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ef80) returned 1 Thread: id = 6908 os_tid = 0x1d88 [0200.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c668 [0200.442] wcscpy (in: _Dest=0x7b7c668, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0200.442] wcscat (in: _Dest=0x7b7c668, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\" [0200.442] wcscat (in: _Dest=0x7b7c668, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*" [0200.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2add0 [0200.442] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8288720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe828ae30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d880 [0203.389] wcscmp (_String1=".", _String2=".") returned 0 [0203.389] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8288720, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe828ae30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.389] wcscmp (_String1="..", _String2=".") returned 1 [0203.389] wcscmp (_String1="..", _String2="..") returned 0 [0203.389] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe828ae30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.389] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.389] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd7050 [0203.389] wcscpy (in: _Dest=0x7cd7050, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" [0203.389] wcscat (in: _Dest=0x7cd7050, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\" [0203.389] wcscat (in: _Dest=0x7cd7050, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" [0203.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd7050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8 [0203.818] FindNextFileW (in: hFindFile=0x7a2d880, lpFindFileData=0x7a2add0 | out: lpFindFileData=0x7a2add0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe828ae30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe828ae30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.818] FindClose (in: hFindFile=0x7a2d880 | out: hFindFile=0x7a2d880) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2add0) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c668) returned 1 [0203.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ed70) returned 1 Thread: id = 6909 os_tid = 0x1d98 [0200.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7b7ccf8 [0200.444] wcscpy (in: _Dest=0x7b7ccf8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0200.444] wcscat (in: _Dest=0x7b7ccf8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\" [0200.444] wcscat (in: _Dest=0x7b7ccf8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*" [0200.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b038 [0200.444] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8297180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe829bfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dd00 [0203.390] wcscmp (_String1=".", _String2=".") returned 0 [0203.390] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8297180, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe829bfa0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.390] wcscmp (_String1="..", _String2=".") returned 1 [0203.390] wcscmp (_String1="..", _String2="..") returned 0 [0203.390] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe829bfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.390] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.390] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.390] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cd7178 [0203.390] wcscpy (in: _Dest=0x7cd7178, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" [0203.390] wcscat (in: _Dest=0x7cd7178, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\" [0203.390] wcscat (in: _Dest=0x7cd7178, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" [0203.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd7178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34 [0203.820] FindNextFileW (in: hFindFile=0x7a2dd00, lpFindFileData=0x7a2b038 | out: lpFindFileData=0x7a2b038*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe829bfa0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe829bfa0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.820] FindClose (in: hFindFile=0x7a2dd00 | out: hFindFile=0x7a2dd00) returned 1 [0203.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b038) returned 1 [0203.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ccf8) returned 1 [0203.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd948) returned 1 Thread: id = 6910 os_tid = 0x1d9c [0200.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7b7d040 [0200.445] wcscpy (in: _Dest=0x7b7d040, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0200.445] wcscat (in: _Dest=0x7b7d040, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\" [0200.445] wcscat (in: _Dest=0x7b7d040, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*" [0200.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b2a0 [0200.446] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82a34d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a5be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82a5be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d980 [0203.390] wcscmp (_String1=".", _String2=".") returned 0 [0203.390] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82a34d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a5be0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82a5be0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.390] wcscmp (_String1="..", _String2=".") returned 1 [0203.390] wcscmp (_String1="..", _String2="..") returned 0 [0203.391] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82a5be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a82f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.391] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.391] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cd72a0 [0203.391] wcscpy (in: _Dest=0x7cd72a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" [0203.391] wcscat (in: _Dest=0x7cd72a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\" [0203.391] wcscat (in: _Dest=0x7cd72a0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" [0203.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd72a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924 [0203.796] FindNextFileW (in: hFindFile=0x7a2d980, lpFindFileData=0x7a2b2a0 | out: lpFindFileData=0x7a2b2a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82a5be0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82a82f0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.796] FindClose (in: hFindFile=0x7a2d980 | out: hFindFile=0x7a2d980) returned 1 [0203.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b2a0) returned 1 [0203.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d040) returned 1 [0203.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdc90) returned 1 Thread: id = 6911 os_tid = 0x1da0 [0200.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7cbe0 [0200.447] wcscpy (in: _Dest=0x7b7cbe0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0200.447] wcscat (in: _Dest=0x7b7cbe0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\" [0200.447] wcscat (in: _Dest=0x7b7cbe0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*" [0200.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2a1c8 [0200.447] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x7a2a1c8 | out: lpFindFileData=0x7a2a1c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82ad110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82af820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82af820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d840 [0203.391] wcscmp (_String1=".", _String2=".") returned 0 [0203.391] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a2a1c8 | out: lpFindFileData=0x7a2a1c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82ad110, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82af820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82af820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.391] wcscmp (_String1="..", _String2=".") returned 1 [0203.391] wcscmp (_String1="..", _String2="..") returned 0 [0203.391] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a2a1c8 | out: lpFindFileData=0x7a2a1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82af820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82b1f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.391] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.391] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd73c8 [0203.391] wcscpy (in: _Dest=0x7cd73c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" [0203.391] wcscat (in: _Dest=0x7cd73c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\" [0203.391] wcscat (in: _Dest=0x7cd73c8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" [0203.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd73c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460 [0203.798] FindNextFileW (in: hFindFile=0x7a2d840, lpFindFileData=0x7a2a1c8 | out: lpFindFileData=0x7a2a1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82af820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82b1f30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.798] FindClose (in: hFindFile=0x7a2d840 | out: hFindFile=0x7a2d840) returned 1 [0203.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2a1c8) returned 1 [0203.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7cbe0) returned 1 [0203.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ec68) returned 1 Thread: id = 6912 os_tid = 0x1da4 [0200.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c898 [0200.448] wcscpy (in: _Dest=0x7b7c898, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0200.448] wcscat (in: _Dest=0x7b7c898, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\" [0200.448] wcscat (in: _Dest=0x7b7c898, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*" [0200.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a28750 [0200.449] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x7a28750 | out: lpFindFileData=0x7a28750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82bbb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82be280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82be280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d340 [0203.392] wcscmp (_String1=".", _String2=".") returned 0 [0203.392] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a28750 | out: lpFindFileData=0x7a28750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82bbb70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82be280, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82be280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.392] wcscmp (_String1="..", _String2=".") returned 1 [0203.392] wcscmp (_String1="..", _String2="..") returned 0 [0203.392] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a28750 | out: lpFindFileData=0x7a28750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82be280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82c0990, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.392] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.392] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd74f0 [0203.392] wcscpy (in: _Dest=0x7cd74f0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" [0203.392] wcscat (in: _Dest=0x7cd74f0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\" [0203.392] wcscat (in: _Dest=0x7cd74f0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" [0203.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd74f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1964 [0203.801] FindNextFileW (in: hFindFile=0x7a2d340, lpFindFileData=0x7a28750 | out: lpFindFileData=0x7a28750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82be280, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82c0990, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe852f280, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.801] FindClose (in: hFindFile=0x7a2d340 | out: hFindFile=0x7a2d340) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28750) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c898) returned 1 [0203.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7eb60) returned 1 Thread: id = 6913 os_tid = 0x1da8 [0200.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d7e8 [0200.450] wcscpy (in: _Dest=0x7b7d7e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0200.450] wcscat (in: _Dest=0x7b7d7e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\" [0200.450] wcscat (in: _Dest=0x7b7d7e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*" [0200.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a289b8 [0200.450] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x7a289b8 | out: lpFindFileData=0x7a289b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82c57b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82ccce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d500 [0203.392] wcscmp (_String1=".", _String2=".") returned 0 [0203.392] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a289b8 | out: lpFindFileData=0x7a289b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82c57b0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82ccce0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.393] wcscmp (_String1="..", _String2=".") returned 1 [0203.393] wcscmp (_String1="..", _String2="..") returned 0 [0203.393] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a289b8 | out: lpFindFileData=0x7a289b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82ccce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.393] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.393] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd7618 [0203.393] wcscpy (in: _Dest=0x7cd7618, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" [0203.393] wcscat (in: _Dest=0x7cd7618, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\" [0203.393] wcscat (in: _Dest=0x7cd7618, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" [0203.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd7618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1878 [0203.670] FindNextFileW (in: hFindFile=0x7a2d500, lpFindFileData=0x7a289b8 | out: lpFindFileData=0x7a289b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82ccce0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82ccce0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.671] FindClose (in: hFindFile=0x7a2d500 | out: hFindFile=0x7a2d500) returned 1 [0203.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a289b8) returned 1 [0203.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d7e8) returned 1 [0203.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7ea58) returned 1 Thread: id = 6914 os_tid = 0x1dac [0200.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d900 [0200.451] wcscpy (in: _Dest=0x7b7d900, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0200.451] wcscat (in: _Dest=0x7b7d900, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\" [0200.451] wcscat (in: _Dest=0x7b7d900, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*" [0200.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a28c20 [0200.452] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x7a28c20 | out: lpFindFileData=0x7a28c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82d4210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82d6920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dfc0 [0203.393] wcscmp (_String1=".", _String2=".") returned 0 [0203.393] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a28c20 | out: lpFindFileData=0x7a28c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82d4210, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82d6920, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.393] wcscmp (_String1="..", _String2=".") returned 1 [0203.393] wcscmp (_String1="..", _String2="..") returned 0 [0203.393] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a28c20 | out: lpFindFileData=0x7a28c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82d6920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.393] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.393] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.393] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd7740 [0203.393] wcscpy (in: _Dest=0x7cd7740, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" [0203.394] wcscat (in: _Dest=0x7cd7740, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\" [0203.394] wcscat (in: _Dest=0x7cd7740, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" [0203.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd7740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970 [0203.673] FindNextFileW (in: hFindFile=0x7a2dfc0, lpFindFileData=0x7a28c20 | out: lpFindFileData=0x7a28c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82d6920, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82d6920, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.673] FindClose (in: hFindFile=0x7a2dfc0 | out: hFindFile=0x7a2dfc0) returned 1 [0203.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28c20) returned 1 [0203.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d900) returned 1 [0203.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7e950) returned 1 Thread: id = 6915 os_tid = 0x1db0 [0200.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7da18 [0200.453] wcscpy (in: _Dest=0x7b7da18, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0200.453] wcscat (in: _Dest=0x7b7da18, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\" [0200.453] wcscat (in: _Dest=0x7b7da18, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*" [0200.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a28e88 [0200.453] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x7a28e88 | out: lpFindFileData=0x7a28e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82e2c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e5380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82e5380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da40 [0203.394] wcscmp (_String1=".", _String2=".") returned 0 [0203.394] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x7a28e88 | out: lpFindFileData=0x7a28e88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82e2c70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e5380, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82e5380, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.394] wcscmp (_String1="..", _String2=".") returned 1 [0203.394] wcscmp (_String1="..", _String2="..") returned 0 [0203.394] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x7a28e88 | out: lpFindFileData=0x7a28e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82e5380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e7a90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.394] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.394] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.394] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd7868 [0203.394] wcscpy (in: _Dest=0x7cd7868, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" [0203.394] wcscat (in: _Dest=0x7cd7868, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\" [0203.394] wcscat (in: _Dest=0x7cd7868, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" [0203.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd7868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1880 [0203.676] FindNextFileW (in: hFindFile=0x7a2da40, lpFindFileData=0x7a28e88 | out: lpFindFileData=0x7a28e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82e5380, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82e7a90, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.676] FindClose (in: hFindFile=0x7a2da40 | out: hFindFile=0x7a2da40) returned 1 [0203.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28e88) returned 1 [0203.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7da18) returned 1 [0203.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7f088) returned 1 Thread: id = 6916 os_tid = 0x1db8 [0200.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d5b8 [0200.458] wcscpy (in: _Dest=0x7b7d5b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0200.458] wcscat (in: _Dest=0x7b7d5b8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\" [0200.459] wcscat (in: _Dest=0x7b7d5b8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*" [0200.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a290f0 [0200.459] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x7a290f0 | out: lpFindFileData=0x7a290f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82eefc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f16d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82f16d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d680 [0203.394] wcscmp (_String1=".", _String2=".") returned 0 [0203.394] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a290f0 | out: lpFindFileData=0x7a290f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82eefc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f16d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82f16d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.395] wcscmp (_String1="..", _String2=".") returned 1 [0203.395] wcscmp (_String1="..", _String2="..") returned 0 [0203.395] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a290f0 | out: lpFindFileData=0x7a290f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82f16d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f3de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.395] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.395] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd7990 [0203.395] wcscpy (in: _Dest=0x7cd7990, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" [0203.395] wcscat (in: _Dest=0x7cd7990, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\" [0203.395] wcscat (in: _Dest=0x7cd7990, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" [0203.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd7990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc [0203.679] FindNextFileW (in: hFindFile=0x7a2d680, lpFindFileData=0x7a290f0 | out: lpFindFileData=0x7a290f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82f16d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82f3de0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.679] FindClose (in: hFindFile=0x7a2d680 | out: hFindFile=0x7a2d680) returned 1 [0203.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a290f0) returned 1 [0203.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d5b8) returned 1 [0203.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6bb60) returned 1 Thread: id = 6917 os_tid = 0x1e24 [0200.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d4a0 [0200.460] wcscpy (in: _Dest=0x7b7d4a0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0200.460] wcscat (in: _Dest=0x7b7d4a0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\" [0200.460] wcscat (in: _Dest=0x7b7d4a0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*" [0200.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a29358 [0200.460] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x7a29358 | out: lpFindFileData=0x7a29358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82f8c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fb310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82fb310, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2da80 [0203.395] wcscmp (_String1=".", _String2=".") returned 0 [0203.395] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a29358 | out: lpFindFileData=0x7a29358*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82f8c00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fb310, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe82fb310, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.395] wcscmp (_String1="..", _String2=".") returned 1 [0203.395] wcscmp (_String1="..", _String2="..") returned 0 [0203.395] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a29358 | out: lpFindFileData=0x7a29358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82fb310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fda20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.395] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.395] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.395] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd7ab8 [0203.395] wcscpy (in: _Dest=0x7cd7ab8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" [0203.395] wcscat (in: _Dest=0x7cd7ab8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\" [0203.396] wcscat (in: _Dest=0x7cd7ab8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" [0203.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd7ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac [0203.681] FindNextFileW (in: hFindFile=0x7a2da80, lpFindFileData=0x7a29358 | out: lpFindFileData=0x7a29358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe82fb310, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe82fda20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.681] FindClose (in: hFindFile=0x7a2da80 | out: hFindFile=0x7a2da80) returned 1 [0203.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a29358) returned 1 [0203.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d4a0) returned 1 [0203.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6bc68) returned 1 Thread: id = 6918 os_tid = 0x1e28 [0200.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7d6d0 [0200.461] wcscpy (in: _Dest=0x7b7d6d0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0200.461] wcscat (in: _Dest=0x7b7d6d0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\" [0200.461] wcscat (in: _Dest=0x7b7d6d0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*" [0200.461] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a295c0 [0200.462] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x7a295c0 | out: lpFindFileData=0x7a295c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8304f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8309d70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d440 [0203.396] wcscmp (_String1=".", _String2=".") returned 0 [0203.396] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a295c0 | out: lpFindFileData=0x7a295c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8304f50, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8309d70, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.396] wcscmp (_String1="..", _String2=".") returned 1 [0203.396] wcscmp (_String1="..", _String2="..") returned 0 [0203.396] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a295c0 | out: lpFindFileData=0x7a295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8309d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.396] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.396] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.396] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd7be0 [0203.396] wcscpy (in: _Dest=0x7cd7be0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" [0203.396] wcscat (in: _Dest=0x7cd7be0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\" [0203.396] wcscat (in: _Dest=0x7cd7be0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" [0203.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd7be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978 [0203.684] FindNextFileW (in: hFindFile=0x7a2d440, lpFindFileData=0x7a295c0 | out: lpFindFileData=0x7a295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe8309d70, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8309d70, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.684] FindClose (in: hFindFile=0x7a2d440 | out: hFindFile=0x7a2d440) returned 1 [0203.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a295c0) returned 1 [0203.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d6d0) returned 1 [0203.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6bd70) returned 1 Thread: id = 6919 os_tid = 0x1e2c [0200.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c9b0 [0200.463] wcscpy (in: _Dest=0x7b7c9b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0200.463] wcscat (in: _Dest=0x7b7c9b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\" [0200.463] wcscat (in: _Dest=0x7b7c9b0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*" [0200.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a29828 [0200.463] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x7a29828 | out: lpFindFileData=0x7a29828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83112a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83160c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83160c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d080 [0203.396] wcscmp (_String1=".", _String2=".") returned 0 [0203.396] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a29828 | out: lpFindFileData=0x7a29828*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe83112a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83160c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83160c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.396] wcscmp (_String1="..", _String2=".") returned 1 [0203.397] wcscmp (_String1="..", _String2="..") returned 0 [0203.397] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a29828 | out: lpFindFileData=0x7a29828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83160c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83187d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.397] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.397] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd7d08 [0203.397] wcscpy (in: _Dest=0x7cd7d08, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" [0203.397] wcscat (in: _Dest=0x7cd7d08, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\" [0203.397] wcscat (in: _Dest=0x7cd7d08, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" [0203.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd7d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4 [0203.687] FindNextFileW (in: hFindFile=0x7a2d080, lpFindFileData=0x7a29828 | out: lpFindFileData=0x7a29828*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83160c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83187d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.687] FindClose (in: hFindFile=0x7a2d080 | out: hFindFile=0x7a2d080) returned 1 [0203.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a29828) returned 1 [0203.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c9b0) returned 1 [0203.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a6c0) returned 1 Thread: id = 6920 os_tid = 0x1e30 [0200.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x102) returned 0x7b7c320 [0200.464] wcscpy (in: _Dest=0x7b7c320, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0200.464] wcscat (in: _Dest=0x7b7c320, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\" [0200.464] wcscat (in: _Dest=0x7b7c320, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*" [0200.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a29a90 [0200.465] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x7a29a90 | out: lpFindFileData=0x7a29a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe831d5f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe831fd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe831fd00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2dcc0 [0203.397] wcscmp (_String1=".", _String2=".") returned 0 [0203.397] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a29a90 | out: lpFindFileData=0x7a29a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe831d5f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe831fd00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe831fd00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.397] wcscmp (_String1="..", _String2=".") returned 1 [0203.397] wcscmp (_String1="..", _String2="..") returned 0 [0203.397] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a29a90 | out: lpFindFileData=0x7a29a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe831fd00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8322410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.397] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.397] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd7e30 [0203.397] wcscpy (in: _Dest=0x7cd7e30, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" [0203.397] wcscat (in: _Dest=0x7cd7e30, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\" [0203.398] wcscat (in: _Dest=0x7cd7e30, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" [0203.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd7e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34 [0203.689] FindNextFileW (in: hFindFile=0x7a2dcc0, lpFindFileData=0x7a29a90 | out: lpFindFileData=0x7a29a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe831fd00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe8322410, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.689] FindClose (in: hFindFile=0x7a2dcc0 | out: hFindFile=0x7a2dcc0) returned 1 [0203.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a29a90) returned 1 [0203.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c320) returned 1 [0203.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b848) returned 1 Thread: id = 6921 os_tid = 0x1bf8 [0200.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cac7c8 [0200.466] wcscpy (in: _Dest=0x7cac7c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0200.466] wcscat (in: _Dest=0x7cac7c8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\" [0200.466] wcscat (in: _Dest=0x7cac7c8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*" [0200.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a29cf8 [0200.466] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x7a29cf8 | out: lpFindFileData=0x7a29cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8327230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe832c050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d2c0 [0203.383] wcscmp (_String1=".", _String2=".") returned 0 [0203.383] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a29cf8 | out: lpFindFileData=0x7a29cf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8327230, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe832c050, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.383] wcscmp (_String1="..", _String2=".") returned 1 [0203.383] wcscmp (_String1="..", _String2="..") returned 0 [0203.383] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a29cf8 | out: lpFindFileData=0x7a29cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe832c050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.383] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.383] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cd6020 [0203.383] wcscpy (in: _Dest=0x7cd6020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" [0203.384] wcscat (in: _Dest=0x7cd6020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\" [0203.384] wcscat (in: _Dest=0x7cd6020, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" [0203.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd6020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420 [0203.804] FindNextFileW (in: hFindFile=0x7a2d2c0, lpFindFileData=0x7a29cf8 | out: lpFindFileData=0x7a29cf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe832c050, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe832c050, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8531990, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.804] FindClose (in: hFindFile=0x7a2d2c0 | out: hFindFile=0x7a2d2c0) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a29cf8) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac7c8) returned 1 [0203.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7dc48) returned 1 Thread: id = 6922 os_tid = 0x1e34 [0200.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cadb78 [0200.467] wcscpy (in: _Dest=0x7cadb78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0200.467] wcscat (in: _Dest=0x7cadb78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\" [0200.467] wcscat (in: _Dest=0x7cadb78, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*" [0200.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a29f60 [0200.468] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x7a29f60 | out: lpFindFileData=0x7a29f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d1c0 [0203.224] wcscmp (_String1=".", _String2=".") returned 0 [0203.224] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a29f60 | out: lpFindFileData=0x7a29f60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8335c90, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe83383a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe83383a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.225] wcscmp (_String1="..", _String2=".") returned 1 [0203.225] wcscmp (_String1="..", _String2="..") returned 0 [0203.225] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a29f60 | out: lpFindFileData=0x7a29f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83383a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe833aab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8538ec0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.225] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.225] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7cd6a88 [0203.225] wcscpy (in: _Dest=0x7cd6a88, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" [0203.225] wcscat (in: _Dest=0x7cd6a88, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\" [0203.225] wcscat (in: _Dest=0x7cd6a88, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" [0203.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd6a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680 [0203.303] FindNextFileW (in: hFindFile=0x7a2d1c0, lpFindFileData=0x7a29f60 | out: lpFindFileData=0x7a29f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe83383a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe833aab0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe8538ec0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.303] FindClose (in: hFindFile=0x7a2d1c0 | out: hFindFile=0x7a2d1c0) returned 1 [0203.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a29f60) returned 1 [0203.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadb78) returned 1 [0203.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7db30) returned 1 Thread: id = 6923 os_tid = 0x1e38 [0200.469] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0200.469] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0207.219] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1244 [0207.220] GetFileSizeEx (in: hFile=0x1244, lpFileSize=0x12edfc04 | out: lpFileSize=0x12edfc04*=595) returned 1 [0207.220] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x24f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.220] ReadFile (in: hFile=0x1244, lpBuffer=0x12edfbe0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12edfbf0, lpOverlapped=0x0 | out: lpBuffer=0x12edfbe0*, lpNumberOfBytesRead=0x12edfbf0*=0x4, lpOverlapped=0x0) returned 1 [0207.222] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3bc8 [0207.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0207.222] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0207.223] NtQuerySystemTime (in: CurrentTime=0x12edfb78 | out: CurrentTime=0x12edfb78*=132462177857940000) returned 0x0 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x4f4ab188 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x7aa42ac2 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x26da097f [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x3faa0bdd [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x49f0c801 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x22997c54 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x8f9b41d [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x2f94a650 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x4a415ea3 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x272fbaff [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x45885888 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x1547430f [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x416ba352 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x4fdd7642 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0xfd48b3 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x27acfb5f [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x7003de00 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x5e7155b8 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x72b81bd [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x309057e9 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x25cce944 [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x3b17a81c [0207.223] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x68d75be9 [0207.224] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x172ed1c [0207.224] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x36ee289c [0207.224] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x20db8953 [0207.224] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x622e5c1a [0207.224] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x64acf44b [0207.224] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x113541d7 [0207.224] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x5bf220a5 [0207.224] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x5a6bdcf [0207.224] RtlRandomEx (in: Seed=0x12edfb70 | out: Seed=0x12edfb70) returned 0x2bf4091a [0207.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3bc8) returned 1 [0207.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0207.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0207.232] ReadFile (in: hFile=0x1244, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x253, lpNumberOfBytesRead=0x12edfb6c, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0x12edfb6c*=0x253, lpOverlapped=0x0) returned 1 [0207.232] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.232] WriteFile (in: hFile=0x1244, lpBuffer=0x7beeb90*, nNumberOfBytesToWrite=0x253, lpNumberOfBytesWritten=0x12edfb70, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesWritten=0x12edfb70*=0x253, lpOverlapped=0x0) returned 1 [0213.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac18 [0213.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0213.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0213.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0213.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0213.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c108) returned 1 [0213.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdd18) returned 1 [0213.710] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37530 [0213.710] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.710] WriteFile (in: hFile=0x1244, lpBuffer=0x7cd3a60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12edfbf8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3a60*, lpNumberOfBytesWritten=0x12edfbf8*=0x10c, lpOverlapped=0x0) returned 1 [0213.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f40 [0213.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9f40) returned 1 [0213.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9f40 [0213.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa08 [0213.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0213.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ef0) returned 1 [0213.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.884] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.884] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="d5") returned 2 [0213.884] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="b9") returned 2 [0213.884] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="fe") returned 2 [0213.884] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="2e") returned 2 [0213.884] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="ef") returned 2 [0213.884] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="6e") returned 2 [0213.884] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="83") returned 2 [0213.884] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="50") returned 2 [0213.884] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="16") returned 2 [0213.884] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="bc") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="7d") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="15") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="6a") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="2a") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="8b") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="e2") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="34") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="a8") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="5c") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="b7") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="fc") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="db") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="31") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="4f") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="3c") returned 2 [0213.885] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="15") returned 2 [0213.885] RtlInitAnsiString (in: DestinationString=0x12edfb80, SourceString="d5b9fe2eef6e835016bc7d156a2a8be234a85cb7fcdb314f3c15" | out: DestinationString="d5b9fe2eef6e835016bc7d156a2a8be234a85cb7fcdb314f3c15") [0213.885] RtlAnsiStringToUnicodeString (in: DestinationString=0x12edfb78, SourceString="d5b9fe2eef6e835016bc7d156a2a8be234a85cb7fcdb314f3c15", AllocateDestinationString=1 | out: DestinationString="d5b9fe2eef6e835016bc7d156a2a8be234a85cb7fcdb314f3c15") returned 0x0 [0213.885] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa88 Thread: id = 6924 os_tid = 0x1c04 [0200.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml")) returned 0x20 [0206.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML", dwFileAttributes=0x20) returned 0 [0206.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.707] GetLastError () returned 0x5 [0206.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML", dwFileAttributes=0x20) returned 0 [0206.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68998) returned 1 Thread: id = 6925 os_tid = 0x1c08 [0200.470] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json")) returned 0x2020 [0203.250] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0213.088] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc74 [0213.089] GetFileSizeEx (in: hFile=0xc74, lpFileSize=0x12beff24 | out: lpFileSize=0x12beff24*=179) returned 1 [0213.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b58 [0213.089] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53828 [0213.090] NtQuerySystemTime (in: CurrentTime=0x12befe98 | out: CurrentTime=0x12befe98*=132462177916752000) returned 0x0 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x29fc4ec [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x9879d97 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x78cc2bcc [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x5a571624 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x50457545 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x498dc69e [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x20a9f4e2 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x17fea67c [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x7ccd2e8e [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x2e6a6b59 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x65a7420d [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x7fc30755 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x44ac404 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x21eda28 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x402d7d66 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x5698e32e [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x1bbffbf9 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x58c5ccb2 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x50c4272b [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x67b3c5e8 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x1efaeb66 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x10ed2af2 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x5dd34567 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x727706be [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x3b4387e0 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x38e6f15b [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x1de87c51 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x350838b2 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x9faaaf [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x5436d4a4 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x42179b33 [0213.090] RtlRandomEx (in: Seed=0x12befe90 | out: Seed=0x12befe90) returned 0x653751be [0213.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bc07d8 [0213.099] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bc43e0 [0213.099] ReadFile (in: hFile=0xc74, lpBuffer=0x7bc07d8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x12befe8c, lpOverlapped=0x0 | out: lpBuffer=0x7bc07d8*, lpNumberOfBytesRead=0x12befe8c*=0xb3, lpOverlapped=0x0) returned 1 [0213.101] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.101] WriteFile (in: hFile=0xc74, lpBuffer=0x7bc43e0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12befe90, lpOverlapped=0x0 | out: lpBuffer=0x7bc43e0*, lpNumberOfBytesWritten=0x12befe90*=0xb3, lpOverlapped=0x0) returned 1 [0218.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a98 [0218.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e80 [0218.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e80) returned 1 [0218.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc43e0) returned 1 [0218.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bc07d8) returned 1 [0218.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c798) returned 1 [0218.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84368) returned 1 [0218.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86788 [0218.834] SetFilePointerEx (in: hFile=0xc74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.834] WriteFile (in: hFile=0xc74, lpBuffer=0x7cd31a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12beff18, lpOverlapped=0x0 | out: lpBuffer=0x7cd31a0*, lpNumberOfBytesWritten=0x12beff18*=0x10c, lpOverlapped=0x0) returned 1 [0222.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24590 [0222.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0222.660] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b58 [0222.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9b58) returned 1 [0222.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9b58 [0222.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc8028 [0222.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0222.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab20) returned 1 [0222.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0222.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24590) returned 1 [0222.661] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0222.661] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="2c") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="7f") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="ab") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="15") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="cb") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="3b") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="95") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="08") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="dd") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="51") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="5d") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="dd") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="fe") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="b4") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="72") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="1e") returned 2 [0222.661] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="17") returned 2 [0222.662] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="68") returned 2 [0222.662] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="4f") returned 2 [0222.662] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="bf") returned 2 [0222.662] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="e3") returned 2 [0222.662] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="fd") returned 2 [0222.662] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="e2") returned 2 [0222.662] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="1a") returned 2 [0222.662] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="c1") returned 2 [0222.662] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="ae") returned 2 [0222.662] RtlInitAnsiString (in: DestinationString=0x12befea0, SourceString="2c7fab15cb3b9508dd515dddfeb4721e17684fbfe3fde21ac1ae" | out: DestinationString="2c7fab15cb3b9508dd515dddfeb4721e17684fbfe3fde21ac1ae") [0222.662] RtlAnsiStringToUnicodeString (in: DestinationString=0x12befe98, SourceString="2c7fab15cb3b9508dd515dddfeb4721e17684fbfe3fde21ac1ae", AllocateDestinationString=1 | out: DestinationString="2c7fab15cb3b9508dd515dddfeb4721e17684fbfe3fde21ac1ae") returned 0x0 [0222.662] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c090 [0224.374] CloseHandle (hObject=0x2250) returned 1 [0224.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4b18) returned 1 [0224.375] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54810) returned 1 Thread: id = 6926 os_tid = 0x1c0c [0200.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv")) returned 0x20 [0206.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV", dwFileAttributes=0x20) returned 0 [0206.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.708] GetLastError () returned 0x5 [0206.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV", dwFileAttributes=0x20) returned 0 [0206.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 6927 os_tid = 0x1e3c [0200.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml")) returned 0x20 [0206.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML", dwFileAttributes=0x20) returned 0 [0206.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.710] GetLastError () returned 0x5 [0206.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML", dwFileAttributes=0x20) returned 0 [0206.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9de0) returned 1 Thread: id = 6928 os_tid = 0x1e40 [0200.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv")) returned 0x20 [0206.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV", dwFileAttributes=0x20) returned 0 [0206.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.711] GetLastError () returned 0x5 [0206.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV", dwFileAttributes=0x20) returned 0 [0206.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 6929 os_tid = 0x1e88 [0200.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml")) returned 0x20 [0206.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML", dwFileAttributes=0x20) returned 0 [0206.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.713] GetLastError () returned 0x5 [0206.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML", dwFileAttributes=0x20) returned 0 [0206.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 6930 os_tid = 0x1ef0 [0200.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml")) returned 0x20 [0206.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML", dwFileAttributes=0x20) returned 0 [0206.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.653] GetLastError () returned 0x5 [0206.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML", dwFileAttributes=0x20) returned 0 [0206.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 6931 os_tid = 0x1f0c [0200.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml")) returned 0x20 [0206.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML", dwFileAttributes=0x20) returned 0 [0206.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.650] GetLastError () returned 0x5 [0206.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML", dwFileAttributes=0x20) returned 0 [0206.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 6932 os_tid = 0x1f84 [0200.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml")) returned 0x20 [0206.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML", dwFileAttributes=0x20) returned 0 [0206.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.651] GetLastError () returned 0x5 [0206.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML", dwFileAttributes=0x20) returned 0 [0206.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 6933 os_tid = 0x1f88 [0200.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv")) returned 0x20 [0206.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV", dwFileAttributes=0x20) returned 0 [0206.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.714] GetLastError () returned 0x5 [0206.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV", dwFileAttributes=0x20) returned 0 [0206.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 6934 os_tid = 0x1f8c [0200.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv")) returned 0x20 [0206.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV", dwFileAttributes=0x20) returned 0 [0206.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.716] GetLastError () returned 0x5 [0206.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV", dwFileAttributes=0x20) returned 0 [0206.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 6935 os_tid = 0x2018 [0200.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml")) returned 0x20 [0206.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML", dwFileAttributes=0x20) returned 0 [0206.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.717] GetLastError () returned 0x5 [0206.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML", dwFileAttributes=0x20) returned 0 [0206.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 Thread: id = 6936 os_tid = 0x202c [0200.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml")) returned 0x20 [0206.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML", dwFileAttributes=0x20) returned 0 [0206.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.718] GetLastError () returned 0x5 [0206.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML", dwFileAttributes=0x20) returned 0 [0206.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 6937 os_tid = 0x2034 [0200.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv")) returned 0x20 [0206.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV", dwFileAttributes=0x20) returned 0 [0206.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.720] GetLastError () returned 0x5 [0206.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV", dwFileAttributes=0x20) returned 0 [0206.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 6938 os_tid = 0x203c [0200.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml")) returned 0x20 [0206.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML", dwFileAttributes=0x20) returned 0 [0206.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.654] GetLastError () returned 0x5 [0206.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML", dwFileAttributes=0x20) returned 0 [0206.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 6939 os_tid = 0x2040 [0200.479] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json")) returned 0x2020 [0203.909] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0222.433] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfa4 [0222.434] GetFileSizeEx (in: hFile=0xfa4, lpFileSize=0x1305f824 | out: lpFileSize=0x1305f824*=263) returned 1 [0222.434] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.434] ReadFile (in: hFile=0xfa4, lpBuffer=0x1305f800, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1305f810, lpOverlapped=0x0 | out: lpBuffer=0x1305f800*, lpNumberOfBytesRead=0x1305f810*=0x4, lpOverlapped=0x0) returned 1 [0222.436] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.436] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0222.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cae0 [0222.437] NtQuerySystemTime (in: CurrentTime=0x1305f798 | out: CurrentTime=0x1305f798*=132462178006920000) returned 0x0 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x7f69074c [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x79b008b8 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x5751387b [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x4db0f669 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x386a1a1f [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x3ae40815 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x40d6d286 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x3f09d051 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0xf6d7dea [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x4f92c13d [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x8afd1b7 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x75b4cb66 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x7bc01b41 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x2424d5dd [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x6460e125 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x660c6bf1 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x3b6ba1f5 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x7ea7a489 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x52698439 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x7a9c3fd [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x7e856fad [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x1c1c167 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x44e8107b [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x1cd1ed0d [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x7fc3376 [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x4fb8ed5b [0222.437] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x21c885a0 [0222.438] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x3949b287 [0222.438] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x57d348ec [0222.438] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x5a585b13 [0222.438] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x29cf401a [0222.438] RtlRandomEx (in: Seed=0x1305f790 | out: Seed=0x1305f790) returned 0x25c99861 [0222.447] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.448] WriteFile (in: hFile=0xfa4, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x1305f790, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0x1305f790*=0x107, lpOverlapped=0x0) returned 1 [0226.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0226.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0226.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0226.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0226.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0226.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0226.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9730) returned 1 [0226.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38010 [0226.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9730 [0226.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0226.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0226.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0226.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e60 [0226.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0226.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cae0 [0226.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cae0) returned 1 [0226.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0226.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9730) returned 1 [0226.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3deca58 [0226.757] SetFilePointerEx (in: hFile=0xfa4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.757] WriteFile (in: hFile=0xfa4, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1305f818, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x1305f818*=0x10c, lpOverlapped=0x0) returned 1 [0226.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9730 [0226.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3dfe0 [0226.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cae0 [0226.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cae0) returned 1 [0226.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305cae0 [0226.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0226.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0226.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0226.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0226.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9730) returned 1 [0226.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.763] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="cd") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="36") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="33") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="da") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="6d") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="40") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="78") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="c3") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="7d") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="c8") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="d1") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="00") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="b7") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="e6") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="20") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="6a") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="be") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="58") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="bd") returned 2 [0226.763] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="f5") returned 2 [0226.764] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="a0") returned 2 [0226.764] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="ac") returned 2 [0226.764] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="e8") returned 2 [0226.764] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="ad") returned 2 [0226.764] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="0d") returned 2 [0226.764] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="fd") returned 2 [0226.764] RtlInitAnsiString (in: DestinationString=0x1305f7a0, SourceString="cd3633da6d4078c37dc8d100b7e6206abe58bdf5a0ace8ad0dfd" | out: DestinationString="cd3633da6d4078c37dc8d100b7e6206abe58bdf5a0ace8ad0dfd") [0226.764] RtlAnsiStringToUnicodeString (in: DestinationString=0x1305f798, SourceString="cd3633da6d4078c37dc8d100b7e6206abe58bdf5a0ace8ad0dfd", AllocateDestinationString=1 | out: DestinationString="cd3633da6d4078c37dc8d100b7e6206abe58bdf5a0ace8ad0dfd") returned 0x0 [0226.764] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e238 [0226.764] RtlFreeAnsiString (AnsiString="c") [0226.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d640) returned 1 [0226.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cae0) returned 1 [0226.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0226.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3deca58) returned 1 [0226.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37e60) returned 1 [0226.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0226.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0226.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0226.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf78) returned 1 [0226.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb80) returned 1 [0226.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0226.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x3dd76c8 [0226.765] wcscat (in: _Dest=0x3dd76c8, _Source="cd3633da6d407" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\cd3633da6d407") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\cd3633da6d407" [0226.765] wcscat (in: _Dest=0x3dd76c8, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\cd3633da6d407.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\cd3633da6d407.68814f" [0226.765] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\cd3633da6d407.68814f", NtPathName=0x1305f790, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\cd3633da6d407.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0226.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x7dd91b8 [0226.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd91b8) returned 1 [0226.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e900d0) returned 1 [0226.768] NtQueryInformationFile (in: FileHandle=0xfa4, IoStatusBlock=0x1305f768, FileInformation=0x1305f770, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1305f768, FileInformation=0x1305f770) returned 0x0 [0226.768] NtSetInformationFile (FileHandle=0xfa4, IoStatusBlock=0x1305f768, FileInformation=0x1305f770, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0226.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0226.770] FlushFileBuffers (hFile=0xfa4) returned 1 [0226.774] CloseHandle (hObject=0xfa4) returned 1 [0226.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd76c8 [0226.775] wcscpy (in: _Dest=0x3dd76c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\" [0226.775] wcscat (in: _Dest=0x3dd76c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\68814F-Readme.txt" [0226.775] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\68814f-readme.txt")) returned 0xffffffff [0226.776] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\vi\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfa4 [0226.777] WriteFile (in: hFile=0xfa4, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1305f7ac, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x1305f7ac*=0x8b9, lpOverlapped=0x0) returned 1 [0226.779] CloseHandle (hObject=0xfa4) returned 1 [0226.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0226.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81a40) returned 1 Thread: id = 6940 os_tid = 0x2048 [0200.479] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json")) returned 0x2020 [0203.911] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0222.224] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d5c [0222.225] GetFileSizeEx (in: hFile=0x1d5c, lpFileSize=0x1225fb4c | out: lpFileSize=0x1225fb4c*=250) returned 1 [0222.225] SetFilePointerEx (in: hFile=0x1d5c, liDistanceToMove=0xf6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.225] ReadFile (in: hFile=0x1d5c, lpBuffer=0x1225fb28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1225fb38, lpOverlapped=0x0 | out: lpBuffer=0x1225fb28*, lpNumberOfBytesRead=0x1225fb38*=0x4, lpOverlapped=0x0) returned 1 [0222.227] SetFilePointerEx (in: hFile=0x1d5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0222.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0222.228] NtQuerySystemTime (in: CurrentTime=0x1225fac0 | out: CurrentTime=0x1225fac0*=132462178004736000) returned 0x0 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x6ce103f1 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x5d40f25 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x34828459 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x486bab1f [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x52bdc7f1 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x5f48bd95 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x323c79db [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x57cf15f1 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x45cf940 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x4be517c8 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x67dbab40 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0xdcb438c [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x33949329 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x1716ef29 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x42a8a32b [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x48699b52 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x3d528c3c [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0xe9ce50b [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x180ff581 [0222.228] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x3906b41a [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x383111d1 [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x6e3d2a81 [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x7baa5b8f [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x7a91d5da [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x3acfa604 [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x5f56d3ff [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0xc4ac17c [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x1f93b303 [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x722f2fd5 [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x7ce5815d [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x77bf6e56 [0222.229] RtlRandomEx (in: Seed=0x1225fab8 | out: Seed=0x1225fab8) returned 0x13f233c8 [0222.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c43778 [0222.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c47380 [0222.243] ReadFile (in: hFile=0x1d5c, lpBuffer=0x7c43778, nNumberOfBytesToRead=0xfa, lpNumberOfBytesRead=0x1225fab4, lpOverlapped=0x0 | out: lpBuffer=0x7c43778*, lpNumberOfBytesRead=0x1225fab4*=0xfa, lpOverlapped=0x0) returned 1 [0222.243] SetFilePointerEx (in: hFile=0x1d5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.243] WriteFile (in: hFile=0x1d5c, lpBuffer=0x7c47380*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x1225fab8, lpOverlapped=0x0 | out: lpBuffer=0x7c47380*, lpNumberOfBytesWritten=0x1225fab8*=0xfa, lpOverlapped=0x0) returned 1 [0223.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0223.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0223.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31f0) returned 1 [0223.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c47380) returned 1 [0223.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c43778) returned 1 [0223.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0223.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb91d8) returned 1 [0223.321] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a10 [0223.321] SetFilePointerEx (in: hFile=0x1d5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.321] WriteFile (in: hFile=0x1d5c, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1225fb40, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0x1225fb40*=0x10c, lpOverlapped=0x0) returned 1 [0223.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9ad8 [0223.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0223.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b820 [0223.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b820) returned 1 [0223.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b820 [0223.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cba8 [0223.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0223.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd98) returned 1 [0223.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0223.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0223.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.577] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="53") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="b9") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="46") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="ef") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="40") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="80") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="c2") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="3f") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="05") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="03") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="9b") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="f9") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="0e") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="9e") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="aa") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="64") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="ed") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="db") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="3c") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="a5") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="6e") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="69") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="73") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="30") returned 2 [0223.577] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="37") returned 2 [0223.578] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="c4") returned 2 [0223.578] RtlInitAnsiString (in: DestinationString=0x1225fac8, SourceString="53b946ef4080c23f05039bf90e9eaa64eddb3ca56e69733037c4" | out: DestinationString="53b946ef4080c23f05039bf90e9eaa64eddb3ca56e69733037c4") [0223.578] RtlAnsiStringToUnicodeString (in: DestinationString=0x1225fac0, SourceString="53b946ef4080c23f05039bf90e9eaa64eddb3ca56e69733037c4", AllocateDestinationString=1 | out: DestinationString="53b946ef4080c23f05039bf90e9eaa64eddb3ca56e69733037c4") returned 0x0 [0223.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51020 [0224.395] CloseHandle (hObject=0x2250) returned 1 [0224.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5610) returned 1 [0224.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81350) returned 1 Thread: id = 6941 os_tid = 0x204c [0200.480] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0203.911] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0222.206] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b28 [0222.207] GetFileSizeEx (in: hFile=0x1b28, lpFileSize=0x1339f9ec | out: lpFileSize=0x1339f9ec*=233) returned 1 [0222.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0222.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0222.207] NtQuerySystemTime (in: CurrentTime=0x1339f960 | out: CurrentTime=0x1339f960*=132462178004580000) returned 0x0 [0222.207] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x2a747e39 [0222.207] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x1930ce67 [0222.207] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x653bc464 [0222.207] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x4c78d47e [0222.207] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x2980794 [0222.207] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x753f8815 [0222.207] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0xc8cbf0a [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x4c4779b0 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x13943d27 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x32c72bc0 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0xf3cfdf8 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x19f17d45 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x5f8da6da [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x675dd1fc [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x197a93dd [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x2afaa74f [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x143ee025 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x61bdb858 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x7ce6ac64 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x4cce85fe [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x5488e2bb [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x5e7d017a [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x2e66a4ca [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x1277beec [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x7e91e60c [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x480a4462 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x75c24872 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x43b5ea3d [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x7a91e785 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x11926d75 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x548b6356 [0222.208] RtlRandomEx (in: Seed=0x1339f958 | out: Seed=0x1339f958) returned 0x35619a36 [0222.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c52798 [0222.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c563a0 [0222.221] ReadFile (in: hFile=0x1b28, lpBuffer=0x7c52798, nNumberOfBytesToRead=0xe9, lpNumberOfBytesRead=0x1339f954, lpOverlapped=0x0 | out: lpBuffer=0x7c52798*, lpNumberOfBytesRead=0x1339f954*=0xe9, lpOverlapped=0x0) returned 1 [0222.223] SetFilePointerEx (in: hFile=0x1b28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.224] WriteFile (in: hFile=0x1b28, lpBuffer=0x7c563a0*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x1339f958, lpOverlapped=0x0 | out: lpBuffer=0x7c563a0*, lpNumberOfBytesWritten=0x1339f958*=0xe9, lpOverlapped=0x0) returned 1 [0223.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5568 [0223.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b10 [0223.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2b10) returned 1 [0223.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c563a0) returned 1 [0223.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c52798) returned 1 [0223.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0223.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8a40) returned 1 [0223.316] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0223.317] SetFilePointerEx (in: hFile=0x1b28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.317] WriteFile (in: hFile=0x1b28, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1339f9e0, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x1339f9e0*=0x10c, lpOverlapped=0x0) returned 1 [0223.570] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9ad8 [0223.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0223.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0223.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2bb0) returned 1 [0223.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2bb0 [0223.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0223.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0223.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0223.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0223.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0223.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.572] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="d5") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="8c") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="bb") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="01") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="b2") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="ee") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="a7") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="27") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="a6") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="98") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="ac") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="cb") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="4b") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="b0") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="57") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="11") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="33") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="45") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="29") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="c6") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="f7") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="59") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="03") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="5a") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="73") returned 2 [0223.572] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="3b") returned 2 [0223.572] RtlInitAnsiString (in: DestinationString=0x1339f968, SourceString="d58cbb01b2eea727a698accb4bb05711334529c6f759035a733b" | out: DestinationString="d58cbb01b2eea727a698accb4bb05711334529c6f759035a733b") [0223.572] RtlAnsiStringToUnicodeString (in: DestinationString=0x1339f960, SourceString="d58cbb01b2eea727a698accb4bb05711334529c6f759035a733b", AllocateDestinationString=1 | out: DestinationString="d58cbb01b2eea727a698accb4bb05711334529c6f759035a733b") returned 0x0 [0223.572] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d50c60 [0224.390] CloseHandle (hObject=0x2250) returned 1 [0224.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5af0) returned 1 [0224.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b817f0) returned 1 Thread: id = 6942 os_tid = 0x2054 [0200.481] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0203.910] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0222.697] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1654 [0222.697] GetFileSizeEx (in: hFile=0x1654, lpFileSize=0x132eff5c | out: lpFileSize=0x132eff5c*=232) returned 1 [0222.697] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b528 [0222.698] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0222.698] NtQuerySystemTime (in: CurrentTime=0x132efed0 | out: CurrentTime=0x132efed0*=132462178009416000) returned 0x0 [0222.698] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x243b1540 [0222.698] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x62f0ed13 [0222.698] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x7f66cd97 [0222.698] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0xac58b14 [0222.698] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x17550855 [0222.698] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x7cbb367e [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x650bce26 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x614e47b6 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x62f0ed13 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x31f59967 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x6200c1a2 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x1922ad6e [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x281a708 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x40ae781e [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x1fe22867 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x27228ac0 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x6ee24562 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x7e9a8492 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x3132bc91 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x14f1a136 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x7e9a8492 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x20ffd263 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x2712c74a [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x5cf0fcaf [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x43c6499b [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x70a2e193 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x5f5f1e21 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x61524d61 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x1922ad6e [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x315aaac1 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x3715e809 [0222.699] RtlRandomEx (in: Seed=0x132efec8 | out: Seed=0x132efec8) returned 0x2c2d8e4 [0222.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ac04c8 [0222.709] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ac40d0 [0222.709] ReadFile (in: hFile=0x1654, lpBuffer=0x7ac04c8, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x132efec4, lpOverlapped=0x0 | out: lpBuffer=0x7ac04c8*, lpNumberOfBytesRead=0x132efec4*=0xe8, lpOverlapped=0x0) returned 1 [0222.711] SetFilePointerEx (in: hFile=0x1654, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.711] WriteFile (in: hFile=0x1654, lpBuffer=0x7ac40d0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x132efec8, lpOverlapped=0x0 | out: lpBuffer=0x7ac40d0*, lpNumberOfBytesWritten=0x132efec8*=0xe8, lpOverlapped=0x0) returned 1 [0226.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e40 [0226.239] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53eb8 [0226.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53eb8) returned 1 [0226.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac40d0) returned 1 [0226.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ac04c8) returned 1 [0226.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0226.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24b30) returned 1 [0226.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a378c0 [0226.240] SetFilePointerEx (in: hFile=0x1654, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.241] WriteFile (in: hFile=0x1654, lpBuffer=0x7cb6250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x132eff50, lpOverlapped=0x0 | out: lpBuffer=0x7cb6250*, lpNumberOfBytesWritten=0x132eff50*=0x10c, lpOverlapped=0x0) returned 1 [0226.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0226.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3e8) returned 1 [0226.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b3e8 [0226.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0226.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0226.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc58) returned 1 [0226.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.339] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="e4") returned 2 [0226.339] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="c4") returned 2 [0226.339] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="fd") returned 2 [0226.339] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="57") returned 2 [0226.339] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="26") returned 2 [0226.339] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="86") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="1d") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="a4") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="07") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="c4") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="4e") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="eb") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="35") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="20") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="d2") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="49") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="52") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="eb") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="ec") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="e4") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="2f") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="f8") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="84") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="99") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="b0") returned 2 [0226.340] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="6d") returned 2 [0226.340] RtlInitAnsiString (in: DestinationString=0x132efed8, SourceString="e4c4fd5726861da407c44eeb3520d24952ebece42ff88499b06d" | out: DestinationString="e4c4fd5726861da407c44eeb3520d24952ebece42ff88499b06d") [0226.340] RtlAnsiStringToUnicodeString (in: DestinationString=0x132efed0, SourceString="e4c4fd5726861da407c44eeb3520d24952ebece42ff88499b06d", AllocateDestinationString=1 | out: DestinationString="e4c4fd5726861da407c44eeb3520d24952ebece42ff88499b06d") returned 0x0 [0226.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f128 [0226.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e0b830) returned 1 [0226.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd6d48) returned 1 [0226.405] NtQueryInformationFile (in: FileHandle=0x1654, IoStatusBlock=0x132efea0, FileInformation=0x132efea8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x132efea0, FileInformation=0x132efea8) returned 0x0 [0226.405] NtSetInformationFile (FileHandle=0x1654, IoStatusBlock=0x132efea0, FileInformation=0x132efea8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8f28) returned 1 [0226.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0226.498] FlushFileBuffers (hFile=0x1654) returned 1 [0226.516] CloseHandle (hObject=0x1654) returned 1 [0226.578] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x12a) returned 0x3dd76c8 [0226.578] wcscpy (in: _Dest=0x3dd76c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\" [0226.578] wcscat (in: _Dest=0x3dd76c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\68814F-Readme.txt" [0226.578] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\68814f-readme.txt")) returned 0xffffffff [0226.578] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_PT\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\pt_pt\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.683] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x132efee4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x132efee4*=0x8b9, lpOverlapped=0x0) returned 1 [0226.685] CloseHandle (hObject=0x1060) returned 1 [0226.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0226.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b815a0) returned 1 Thread: id = 6943 os_tid = 0x2058 [0200.481] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json")) returned 0x2020 [0203.910] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0222.685] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x748 [0222.686] GetFileSizeEx (in: hFile=0x748, lpFileSize=0x1349fe84 | out: lpFileSize=0x1349fe84*=240) returned 1 [0222.686] SetFilePointerEx (in: hFile=0x748, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.686] ReadFile (in: hFile=0x748, lpBuffer=0x1349fe60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1349fe70, lpOverlapped=0x0 | out: lpBuffer=0x1349fe60*, lpNumberOfBytesRead=0x1349fe70*=0x4, lpOverlapped=0x0) returned 1 [0222.687] SetFilePointerEx (in: hFile=0x748, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0222.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b528 [0222.688] NtQuerySystemTime (in: CurrentTime=0x1349fdf8 | out: CurrentTime=0x1349fdf8*=132462178009416000) returned 0x0 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x650bce26 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x60260be [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x17550855 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0xa6ebd8b [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x1cdeeae7 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0xd1beaae [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x4d22cc57 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x7516cb14 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x5cf0fcaf [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x7d3c136f [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x4ed2b17a [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x6c394204 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x2b2c5c4d [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x1ad67c63 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x702a9f5 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x22040967 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x64c82182 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x165b59c2 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x2e0334c9 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x42192881 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x2e9d953f [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x3ad62ad6 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x5a3b26a8 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x5531af98 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x9826142 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x32dcf180 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x15cc728 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x562fd702 [0222.688] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x148e9fa8 [0222.689] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x40adfc8a [0222.689] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x6c86db06 [0222.689] RtlRandomEx (in: Seed=0x1349fdf0 | out: Seed=0x1349fdf0) returned 0x3c0ed2d4 [0222.696] SetFilePointerEx (in: hFile=0x748, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.696] WriteFile (in: hFile=0x748, lpBuffer=0x7abc8c0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1349fdf0, lpOverlapped=0x0 | out: lpBuffer=0x7abc8c0*, lpNumberOfBytesWritten=0x1349fdf0*=0xf0, lpOverlapped=0x0) returned 1 [0226.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53620 [0226.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52e50 [0226.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52e50) returned 1 [0226.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7abc8c0) returned 1 [0226.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab8cb8) returned 1 [0226.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0226.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24080) returned 1 [0226.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b90 [0226.236] SetFilePointerEx (in: hFile=0x748, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.236] WriteFile (in: hFile=0x748, lpBuffer=0x7cb6138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1349fe78, lpOverlapped=0x0 | out: lpBuffer=0x7cb6138*, lpNumberOfBytesWritten=0x1349fe78*=0x10c, lpOverlapped=0x0) returned 1 [0226.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c748 [0226.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c748) returned 1 [0226.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c748 [0226.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0226.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0226.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0226.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.336] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.336] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="0e") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="07") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="52") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="52") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="a1") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="39") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="bd") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="2c") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="79") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="ac") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="7f") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="e3") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="fa") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="34") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="2e") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="e3") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="c3") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="22") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="10") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="7b") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="1b") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="32") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="3c") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="15") returned 2 [0226.336] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="0d") returned 2 [0226.337] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="fc") returned 2 [0226.337] RtlInitAnsiString (in: DestinationString=0x1349fe00, SourceString="0e075252a139bd2c79ac7fe3fa342ee3c322107b1b323c150dfc" | out: DestinationString="0e075252a139bd2c79ac7fe3fa342ee3c322107b1b323c150dfc") [0226.337] RtlAnsiStringToUnicodeString (in: DestinationString=0x1349fdf8, SourceString="0e075252a139bd2c79ac7fe3fa342ee3c322107b1b323c150dfc", AllocateDestinationString=1 | out: DestinationString="0e075252a139bd2c79ac7fe3fa342ee3c322107b1b323c150dfc") returned 0x0 [0226.337] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fc68 [0226.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9590) returned 1 [0226.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd6f70) returned 1 [0226.404] NtQueryInformationFile (in: FileHandle=0x748, IoStatusBlock=0x1349fdc8, FileInformation=0x1349fdd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1349fdc8, FileInformation=0x1349fdd0) returned 0x0 [0226.404] NtSetInformationFile (FileHandle=0x748, IoStatusBlock=0x1349fdc8, FileInformation=0x1349fdd0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd76c8) returned 1 [0226.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0226.493] FlushFileBuffers (hFile=0x748) returned 1 [0226.511] CloseHandle (hObject=0x748) returned 1 [0226.576] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3dd8f28 [0226.576] wcscpy (in: _Dest=0x3dd8f28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\" [0226.576] wcscat (in: _Dest=0x3dd8f28, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\68814F-Readme.txt" [0226.576] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\68814f-readme.txt")) returned 0xffffffff [0226.576] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ro\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.680] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1349fe0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x1349fe0c*=0x8b9, lpOverlapped=0x0) returned 1 [0226.681] CloseHandle (hObject=0x1060) returned 1 [0226.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dd8f28) returned 1 [0226.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80320) returned 1 Thread: id = 6944 os_tid = 0x2064 [0200.482] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json")) returned 0x2020 [0203.910] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0222.672] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x55c [0222.673] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0xddbf9ec | out: lpFileSize=0xddbf9ec*=254) returned 1 [0222.673] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.673] ReadFile (in: hFile=0x55c, lpBuffer=0xddbf9c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xddbf9d8, lpOverlapped=0x0 | out: lpBuffer=0xddbf9c8*, lpNumberOfBytesRead=0xddbf9d8*=0x4, lpOverlapped=0x0) returned 1 [0222.675] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0222.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0222.675] NtQuerySystemTime (in: CurrentTime=0xddbf960 | out: CurrentTime=0xddbf960*=132462178009260000) returned 0x0 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x22040967 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x14097f86 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x6c7704bc [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x42595801 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x4b04410f [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x42192881 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x27d747e7 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x17952473 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x6bc3ee18 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x67efefdd [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x73347e95 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x5a3b26a8 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x217ce968 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x556fdbe [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x38ec1102 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x52e24133 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x4b9d9dbc [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x30a3b916 [0222.675] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x433bb6f9 [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x73c43e06 [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x1bb75681 [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x79ffe2b [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x287ef4ea [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x795f4118 [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x24ae00fb [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0xdb1a540 [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x20a90986 [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x2f1b7a0c [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x32f5897f [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x76c020bc [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x7fc20cfa [0222.676] RtlRandomEx (in: Seed=0xddbf958 | out: Seed=0xddbf958) returned 0x797b9a9 [0222.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b763a0 [0222.684] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab50b0 [0222.685] ReadFile (in: hFile=0x55c, lpBuffer=0x7b763a0, nNumberOfBytesToRead=0xfe, lpNumberOfBytesRead=0xddbf954, lpOverlapped=0x0 | out: lpBuffer=0x7b763a0*, lpNumberOfBytesRead=0xddbf954*=0xfe, lpOverlapped=0x0) returned 1 [0222.685] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.685] WriteFile (in: hFile=0x55c, lpBuffer=0x7ab50b0*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0xddbf958, lpOverlapped=0x0 | out: lpBuffer=0x7ab50b0*, lpNumberOfBytesWritten=0xddbf958*=0xfe, lpOverlapped=0x0) returned 1 [0226.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0226.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b70 [0226.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b70) returned 1 [0226.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab50b0) returned 1 [0226.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b763a0) returned 1 [0226.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0226.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a246f8) returned 1 [0226.232] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37d70 [0226.233] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.233] WriteFile (in: hFile=0x55c, lpBuffer=0x7cb6020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xddbf9e0, lpOverlapped=0x0 | out: lpBuffer=0x7cb6020*, lpNumberOfBytesWritten=0xddbf9e0*=0x10c, lpOverlapped=0x0) returned 1 [0226.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb30 [0226.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb30) returned 1 [0226.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305cb30 [0226.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0226.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3c0 [0226.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3c0) returned 1 [0226.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.332] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="7d") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="f5") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="59") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="93") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="ad") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="a8") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="6d") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="f4") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="f0") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="28") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="87") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="96") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="3c") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="6f") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="c5") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="81") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="08") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="b0") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="80") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="4c") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="cc") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="18") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="50") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="9c") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="c0") returned 2 [0226.332] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="1d") returned 2 [0226.332] RtlInitAnsiString (in: DestinationString=0xddbf968, SourceString="7df55993ada86df4f02887963c6fc58108b0804ccc18509cc01d" | out: DestinationString="7df55993ada86df4f02887963c6fc58108b0804ccc18509cc01d") [0226.332] RtlAnsiStringToUnicodeString (in: DestinationString=0xddbf960, SourceString="7df55993ada86df4f02887963c6fc58108b0804ccc18509cc01d", AllocateDestinationString=1 | out: DestinationString="7df55993ada86df4f02887963c6fc58108b0804ccc18509cc01d") returned 0x0 [0226.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fdd0 [0226.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd96d8) returned 1 [0226.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f38948) returned 1 [0226.403] NtQueryInformationFile (in: FileHandle=0x55c, IoStatusBlock=0xddbf930, FileInformation=0xddbf938, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xddbf930, FileInformation=0xddbf938) returned 0x0 [0226.403] NtSetInformationFile (FileHandle=0x55c, IoStatusBlock=0xddbf930, FileInformation=0xddbf938, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca078) returned 1 [0226.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0226.487] FlushFileBuffers (hFile=0x55c) returned 1 [0226.506] CloseHandle (hObject=0x55c) returned 1 [0226.573] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9b98 [0226.573] wcscpy (in: _Dest=0x3ec9b98, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\" [0226.574] wcscat (in: _Dest=0x3ec9b98, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\68814F-Readme.txt" [0226.574] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\68814f-readme.txt")) returned 0xffffffff [0226.574] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ru\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.673] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xddbf974, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xddbf974*=0x8b9, lpOverlapped=0x0) returned 1 [0226.675] CloseHandle (hObject=0x1060) returned 1 [0226.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9b98) returned 1 [0226.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbecd8) returned 1 Thread: id = 6945 os_tid = 0x2068 [0200.482] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json")) returned 0x2020 [0203.910] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0222.602] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x560 [0222.602] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x914fc94 | out: lpFileSize=0x914fc94*=229) returned 1 [0222.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3c0 [0222.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0222.602] NtQuerySystemTime (in: CurrentTime=0x914fc08 | out: CurrentTime=0x914fc08*=132462178008480000) returned 0x0 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x71772e32 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x5dc80eca [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x23725365 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x79e8fcb [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x4addc5f3 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x3e1c385a [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x1ceb40ca [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x34801ff [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x1ec67ba3 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x797b9a9 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x560b4e49 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x73d8813e [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x89db5 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x76c403e1 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x6bc3ee18 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x5fa1aa7c [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x2e8dce82 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x67eef582 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x7f66cd97 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x49a85470 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0xb0f5460 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x4ff94729 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x58c225c3 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x664f1939 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x7775718b [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x1bb75681 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x5fa1aa7c [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x652b8109 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x2def42e4 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x7dfcb7b1 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x2c00e470 [0222.603] RtlRandomEx (in: Seed=0x914fc00 | out: Seed=0x914fc00) returned 0x89bc9de [0222.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b6eb90 [0222.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b72798 [0222.670] ReadFile (in: hFile=0x560, lpBuffer=0x7b6eb90, nNumberOfBytesToRead=0xe5, lpNumberOfBytesRead=0x914fbfc, lpOverlapped=0x0 | out: lpBuffer=0x7b6eb90*, lpNumberOfBytesRead=0x914fbfc*=0xe5, lpOverlapped=0x0) returned 1 [0222.672] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.672] WriteFile (in: hFile=0x560, lpBuffer=0x7b72798*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x914fc00, lpOverlapped=0x0 | out: lpBuffer=0x7b72798*, lpNumberOfBytesWritten=0x914fc00*=0xe5, lpOverlapped=0x0) returned 1 [0226.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e525b8 [0226.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52d60 [0226.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52d60) returned 1 [0226.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b72798) returned 1 [0226.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6eb90) returned 1 [0226.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0226.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24590) returned 1 [0226.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37740 [0226.229] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.229] WriteFile (in: hFile=0x560, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x914fc88, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x914fc88*=0x10c, lpOverlapped=0x0) returned 1 [0226.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be10 [0226.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be10) returned 1 [0226.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305be10 [0226.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c860 [0226.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0226.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b578) returned 1 [0226.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.328] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="d7") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="6c") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="85") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="22") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="67") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="62") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="47") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="00") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="78") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="f7") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="bd") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="2d") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="a0") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="77") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="10") returned 2 [0226.328] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="81") returned 2 [0226.329] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="87") returned 2 [0226.329] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="39") returned 2 [0226.329] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="6e") returned 2 [0226.329] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="c8") returned 2 [0226.329] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="64") returned 2 [0226.329] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="a1") returned 2 [0226.329] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="9b") returned 2 [0226.329] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="3f") returned 2 [0226.329] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="71") returned 2 [0226.329] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="17") returned 2 [0226.329] RtlInitAnsiString (in: DestinationString=0x914fc10, SourceString="d76c85226762470078f7bd2da077108187396ec864a19b3f7117" | out: DestinationString="d76c85226762470078f7bd2da077108187396ec864a19b3f7117") [0226.329] RtlAnsiStringToUnicodeString (in: DestinationString=0x914fc08, SourceString="d76c85226762470078f7bd2da077108187396ec864a19b3f7117", AllocateDestinationString=1 | out: DestinationString="d76c85226762470078f7bd2da077108187396ec864a19b3f7117") returned 0x0 [0226.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fec0 [0226.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9820) returned 1 [0226.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f359d8) returned 1 [0226.401] NtQueryInformationFile (in: FileHandle=0x560, IoStatusBlock=0x914fbd8, FileInformation=0x914fbe0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x914fbd8, FileInformation=0x914fbe0) returned 0x0 [0226.401] NtSetInformationFile (FileHandle=0x560, IoStatusBlock=0x914fbd8, FileInformation=0x914fbe0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca558) returned 1 [0226.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0226.483] FlushFileBuffers (hFile=0x560) returned 1 [0226.500] CloseHandle (hObject=0x560) returned 1 [0226.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3ec9f40 [0226.571] wcscpy (in: _Dest=0x3ec9f40, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\" [0226.571] wcscat (in: _Dest=0x3ec9f40, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\68814F-Readme.txt" [0226.571] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\68814f-readme.txt")) returned 0xffffffff [0226.572] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sk\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.676] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x914fc1c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x914fc1c*=0x8b9, lpOverlapped=0x0) returned 1 [0226.678] CloseHandle (hObject=0x1060) returned 1 [0226.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9f40) returned 1 [0226.678] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf050) returned 1 Thread: id = 6946 os_tid = 0x20a8 [0200.483] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json")) returned 0x2020 [0203.909] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0222.590] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1314 [0222.591] GetFileSizeEx (in: hFile=0x1314, lpFileSize=0xf6bfd1c | out: lpFileSize=0xf6bfd1c*=245) returned 1 [0222.591] SetFilePointerEx (in: hFile=0x1314, liDistanceToMove=0xf1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.591] ReadFile (in: hFile=0x1314, lpBuffer=0xf6bfcf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf6bfd08, lpOverlapped=0x0 | out: lpBuffer=0xf6bfcf8*, lpNumberOfBytesRead=0xf6bfd08*=0x4, lpOverlapped=0x0) returned 1 [0222.593] SetFilePointerEx (in: hFile=0x1314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0222.593] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3c0 [0222.593] NtQuerySystemTime (in: CurrentTime=0xf6bfc90 | out: CurrentTime=0xf6bfc90*=132462178008480000) returned 0x0 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x5f74eadf [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0xbab98b7 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x58b57496 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x73ba22e0 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x5cb19029 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x19d3ce8a [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x3121222b [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x5cb19029 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x2c176a22 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x32dcf180 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x89bc9de [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x46a202fe [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x7b83dcd4 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x522a0fd9 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x6b7960f9 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x7ca2d574 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x1b027483 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x62224e74 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x3bb6f4a2 [0222.593] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x52e38184 [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x7db0060d [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x3e2a1d2c [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x6e2f3233 [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x73a5b73c [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x5ac6e957 [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x3121222b [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x19228bc8 [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0xd53d5bf [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x7f64e909 [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x6eaba797 [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x200aa2db [0222.594] RtlRandomEx (in: Seed=0xf6bfc88 | out: Seed=0xf6bfc88) returned 0x50971a9b [0222.601] SetFilePointerEx (in: hFile=0x1314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.601] WriteFile (in: hFile=0x1314, lpBuffer=0x7b6af88*, nNumberOfBytesToWrite=0xf5, lpNumberOfBytesWritten=0xf6bfc88, lpOverlapped=0x0 | out: lpBuffer=0x7b6af88*, lpNumberOfBytesWritten=0xf6bfc88*=0xf5, lpOverlapped=0x0) returned 1 [0226.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f30 [0226.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535a8 [0226.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535a8) returned 1 [0226.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6af88) returned 1 [0226.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b67380) returned 1 [0226.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e069e0) returned 1 [0226.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb90b8) returned 1 [0226.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37dd0 [0226.226] SetFilePointerEx (in: hFile=0x1314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.226] WriteFile (in: hFile=0x1314, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf6bfd10, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0xf6bfd10*=0x10c, lpOverlapped=0x0) returned 1 [0226.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0226.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b398) returned 1 [0226.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b398 [0226.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0226.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0226.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0226.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.324] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.324] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="34") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="6e") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="b3") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="f3") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="7f") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="e3") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="71") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="df") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="7e") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="16") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="40") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="d0") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="75") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="6b") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="aa") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="a5") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="f1") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="ab") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="24") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="cb") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="fb") returned 2 [0226.324] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="74") returned 2 [0226.325] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="6f") returned 2 [0226.325] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="76") returned 2 [0226.325] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="de") returned 2 [0226.325] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="ce") returned 2 [0226.325] RtlInitAnsiString (in: DestinationString=0xf6bfc98, SourceString="346eb3f37fe371df7e1640d0756baaa5f1ab24cbfb746f76dece" | out: DestinationString="346eb3f37fe371df7e1640d0756baaa5f1ab24cbfb746f76dece") [0226.325] RtlAnsiStringToUnicodeString (in: DestinationString=0xf6bfc90, SourceString="346eb3f37fe371df7e1640d0756baaa5f1ab24cbfb746f76dece", AllocateDestinationString=1 | out: DestinationString="346eb3f37fe371df7e1640d0756baaa5f1ab24cbfb746f76dece") returned 0x0 [0226.325] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f5d8 [0226.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd9968) returned 1 [0226.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f35e28) returned 1 [0226.400] NtQueryInformationFile (in: FileHandle=0x1314, IoStatusBlock=0xf6bfc60, FileInformation=0xf6bfc68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf6bfc60, FileInformation=0xf6bfc68) returned 0x0 [0226.400] NtSetInformationFile (FileHandle=0x1314, IoStatusBlock=0xf6bfc60, FileInformation=0xf6bfc68, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca420) returned 1 [0226.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0226.479] FlushFileBuffers (hFile=0x1314) returned 1 [0226.496] CloseHandle (hObject=0x1314) returned 1 [0226.568] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x3eca1b0 [0226.568] wcscpy (in: _Dest=0x3eca1b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\" [0226.568] wcscat (in: _Dest=0x3eca1b0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\68814F-Readme.txt" [0226.568] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\68814f-readme.txt")) returned 0xffffffff [0226.569] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.669] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xf6bfca4, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xf6bfca4*=0x8b9, lpOverlapped=0x0) returned 1 [0226.671] CloseHandle (hObject=0x1060) returned 1 [0226.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eca1b0) returned 1 [0226.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbef28) returned 1 Thread: id = 6947 os_tid = 0x20b4 [0200.484] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json")) returned 0x2020 [0203.911] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0222.243] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2250 [0222.245] GetFileSizeEx (in: hFile=0x2250, lpFileSize=0x133df79c | out: lpFileSize=0x133df79c*=269) returned 1 [0222.245] SetFilePointerEx (in: hFile=0x2250, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.245] ReadFile (in: hFile=0x2250, lpBuffer=0x133df778, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x133df788, lpOverlapped=0x0 | out: lpBuffer=0x133df778*, lpNumberOfBytesRead=0x133df788*=0x4, lpOverlapped=0x0) returned 1 [0222.247] SetFilePointerEx (in: hFile=0x2250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0222.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0222.248] NtQuerySystemTime (in: CurrentTime=0x133df710 | out: CurrentTime=0x133df710*=132462178005048000) returned 0x0 [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0xe3303ac [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x4164e837 [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x45af5e28 [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x3d62462f [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x1010b5fe [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x73904507 [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0xec2cbe6 [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x266dce8f [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x1c33b940 [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x43b378f8 [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x6f4730d5 [0222.248] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x66e7abdc [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x703603ea [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x1a54103f [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x7de3fc57 [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x3f59357 [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x4bf5fe56 [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x1e1a910e [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x3a4aa5bb [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x39ee2f4a [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x59713f1a [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x60632ede [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x3d05f751 [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x30a72c6c [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x4f9e64a [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x7f92c5bd [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0xa76077d [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x986287e [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x38119f53 [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x7b638a16 [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x261b814a [0222.249] RtlRandomEx (in: Seed=0x133df708 | out: Seed=0x133df708) returned 0x2d0530e6 [0222.260] SetFilePointerEx (in: hFile=0x2250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.260] WriteFile (in: hFile=0x2250, lpBuffer=0x7c3fb70*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x133df708, lpOverlapped=0x0 | out: lpBuffer=0x7c3fb70*, lpNumberOfBytesWritten=0x133df708*=0x10d, lpOverlapped=0x0) returned 1 [0223.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0223.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0223.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0223.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c3fb70) returned 1 [0223.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c3bf68) returned 1 [0223.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d514d0) returned 1 [0223.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0223.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c80 [0223.324] SetFilePointerEx (in: hFile=0x2250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.324] WriteFile (in: hFile=0x2250, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x133df790, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0x133df790*=0x10c, lpOverlapped=0x0) returned 1 [0223.614] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9ad8 [0223.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0223.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0223.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c1f8) returned 1 [0223.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c1f8 [0223.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0223.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0223.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be88) returned 1 [0223.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0223.615] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0223.615] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.615] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="8e") returned 2 [0223.615] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="46") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="56") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="90") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="2b") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="71") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="5a") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="03") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="e3") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="07") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="db") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="65") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="71") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="30") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="91") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="f2") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="c9") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="71") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="70") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="05") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="27") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="dd") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="40") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="90") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="25") returned 2 [0223.616] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="33") returned 2 [0223.616] RtlInitAnsiString (in: DestinationString=0x133df718, SourceString="8e4656902b715a03e307db65713091f2c971700527dd40902533" | out: DestinationString="8e4656902b715a03e307db65713091f2c971700527dd40902533") [0223.616] RtlAnsiStringToUnicodeString (in: DestinationString=0x133df710, SourceString="8e4656902b715a03e307db65713091f2c971700527dd40902533", AllocateDestinationString=1 | out: DestinationString="8e4656902b715a03e307db65713091f2c971700527dd40902533") returned 0x0 [0223.616] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51188 [0223.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7db78) returned 1 [0223.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cee468) returned 1 [0223.830] NtQueryInformationFile (in: FileHandle=0x2250, IoStatusBlock=0x133df6e0, FileInformation=0x133df6e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x133df6e0, FileInformation=0x133df6e8) returned 0x0 [0223.830] NtSetInformationFile (FileHandle=0x2250, IoStatusBlock=0x133df6e0, FileInformation=0x133df6e8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0223.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f2d8) returned 1 [0223.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0223.936] FlushFileBuffers (hFile=0x2250) returned 1 [0223.990] CloseHandle (hObject=0x2250) returned 1 [0224.040] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7cd5d60 [0224.040] wcscpy (in: _Dest=0x7cd5d60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\" [0224.040] wcscat (in: _Dest=0x7cd5d60, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\68814F-Readme.txt" [0224.040] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\68814f-readme.txt")) returned 0xffffffff [0224.041] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1cf8 [0224.060] WriteFile (in: hFile=0x1cf8, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x133df724, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x133df724*=0x8b9, lpOverlapped=0x0) returned 1 [0224.067] CloseHandle (hObject=0x1cf8) returned 1 [0224.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5d60) returned 1 [0224.086] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbee00) returned 1 Thread: id = 6948 os_tid = 0x20b8 [0200.485] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json")) returned 0x2020 [0203.911] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0222.261] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13c4 [0222.262] GetFileSizeEx (in: hFile=0x13c4, lpFileSize=0xfd4fb84 | out: lpFileSize=0xfd4fb84*=226) returned 1 [0222.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0222.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0222.263] NtQuerySystemTime (in: CurrentTime=0xfd4faf8 | out: CurrentTime=0xfd4faf8*=132462178005204000) returned 0x0 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x35235bfe [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x33b67326 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x3f2327f0 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x2355e994 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x2537966f [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0xb702194 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x62ef6e09 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x5dc92123 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x753f4225 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x209db5f [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x2c7bf574 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x37dce728 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x5790f08b [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x49317202 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x197e0919 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0xfd640fc [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x2ce7e22 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x29338f7b [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x6b1c4a8a [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x34ed9824 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x764da995 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x62176bf0 [0222.263] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x245b682b [0222.264] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x481c9808 [0222.264] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x2f17106d [0222.264] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x6ece21a0 [0222.264] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x2b2d50f0 [0222.264] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x58dca5c5 [0222.264] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x7802c200 [0222.264] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x89a3f25 [0222.264] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0x438387e0 [0222.264] RtlRandomEx (in: Seed=0xfd4faf0 | out: Seed=0xfd4faf0) returned 0xdf21ddc [0222.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c707d8 [0222.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c743e0 [0222.275] ReadFile (in: hFile=0x13c4, lpBuffer=0x7c707d8, nNumberOfBytesToRead=0xe2, lpNumberOfBytesRead=0xfd4faec, lpOverlapped=0x0 | out: lpBuffer=0x7c707d8*, lpNumberOfBytesRead=0xfd4faec*=0xe2, lpOverlapped=0x0) returned 1 [0222.278] SetFilePointerEx (in: hFile=0x13c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.278] WriteFile (in: hFile=0x13c4, lpBuffer=0x7c743e0*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0xfd4faf0, lpOverlapped=0x0 | out: lpBuffer=0x7c743e0*, lpNumberOfBytesWritten=0xfd4faf0*=0xe2, lpOverlapped=0x0) returned 1 [0223.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0223.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0223.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec42f8) returned 1 [0223.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c743e0) returned 1 [0223.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c707d8) returned 1 [0223.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0223.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb89b0) returned 1 [0223.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a382e0 [0223.329] SetFilePointerEx (in: hFile=0x13c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.329] WriteFile (in: hFile=0x13c4, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfd4fb78, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xfd4fb78*=0x10c, lpOverlapped=0x0) returned 1 [0223.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9ad8 [0223.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0223.623] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0223.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c3d8) returned 1 [0223.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c3d8 [0223.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0223.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0223.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf50) returned 1 [0223.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0223.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0223.624] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.624] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="7c") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="f3") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="10") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="ed") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="42") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="91") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="67") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="a2") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="0f") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="6a") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="83") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="8b") returned 2 [0223.624] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="b4") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="64") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="5a") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="c3") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="2f") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="98") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="78") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="4f") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="5e") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="40") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="31") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="48") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="62") returned 2 [0223.625] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="52") returned 2 [0223.625] RtlInitAnsiString (in: DestinationString=0xfd4fb00, SourceString="7cf310ed429167a20f6a838bb4645ac32f98784f5e4031486252" | out: DestinationString="7cf310ed429167a20f6a838bb4645ac32f98784f5e4031486252") [0223.625] RtlAnsiStringToUnicodeString (in: DestinationString=0xfd4faf8, SourceString="7cf310ed429167a20f6a838bb4645ac32f98784f5e4031486252", AllocateDestinationString=1 | out: DestinationString="7cf310ed429167a20f6a838bb4645ac32f98784f5e4031486252") returned 0x0 [0223.625] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51200 [0223.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d7a0) returned 1 [0223.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cee690) returned 1 [0223.832] NtQueryInformationFile (in: FileHandle=0x13c4, IoStatusBlock=0xfd4fac8, FileInformation=0xfd4fad0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfd4fac8, FileInformation=0xfd4fad0) returned 0x0 [0223.832] NtSetInformationFile (FileHandle=0x13c4, IoStatusBlock=0xfd4fac8, FileInformation=0xfd4fad0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0223.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f680) returned 1 [0223.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51200) returned 1 [0223.942] FlushFileBuffers (hFile=0x13c4) returned 1 [0224.001] CloseHandle (hObject=0x13c4) returned 1 [0224.045] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7cd59b8 [0224.045] wcscpy (in: _Dest=0x7cd59b8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\" [0224.045] wcscat (in: _Dest=0x7cd59b8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\68814F-Readme.txt" [0224.046] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\68814f-readme.txt")) returned 0xffffffff [0224.046] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\sv\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf14 [0224.061] WriteFile (in: hFile=0xf14, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfd4fb0c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xfd4fb0c*=0x8b9, lpOverlapped=0x0) returned 1 [0224.070] CloseHandle (hObject=0xf14) returned 1 [0224.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd59b8) returned 1 [0224.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbebb0) returned 1 Thread: id = 6949 os_tid = 0x20bc [0200.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst")) returned 0x20 [0204.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST", dwFileAttributes=0x20) returned 0 [0204.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.704] GetLastError () returned 0x5 [0204.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST", dwFileAttributes=0x20) returned 0 [0204.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63710) returned 1 Thread: id = 6950 os_tid = 0x20c0 [0200.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss")) returned 0x20 [0204.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS", dwFileAttributes=0x20) returned 0 [0204.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.733] GetLastError () returned 0x5 [0204.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS", dwFileAttributes=0x20) returned 0 [0204.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a628b0) returned 1 Thread: id = 6951 os_tid = 0x20c8 [0200.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst")) returned 0x20 [0204.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST", dwFileAttributes=0x20) returned 0 [0204.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.701] GetLastError () returned 0x5 [0204.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST", dwFileAttributes=0x20) returned 0 [0204.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 Thread: id = 6952 os_tid = 0x182c [0200.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss")) returned 0x20 [0204.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS", dwFileAttributes=0x20) returned 0 [0204.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.697] GetLastError () returned 0x5 [0204.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS", dwFileAttributes=0x20) returned 0 [0204.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 Thread: id = 6953 os_tid = 0x1c94 [0200.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss")) returned 0x20 [0204.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS", dwFileAttributes=0x20) returned 0 [0204.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.693] GetLastError () returned 0x5 [0204.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS", dwFileAttributes=0x20) returned 0 [0204.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5ea0) returned 1 Thread: id = 6954 os_tid = 0xe14 [0200.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss")) returned 0x20 [0204.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS", dwFileAttributes=0x20) returned 0 [0204.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.580] GetLastError () returned 0x5 [0204.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS", dwFileAttributes=0x20) returned 0 [0204.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4e60) returned 1 Thread: id = 6955 os_tid = 0x21fc [0200.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss")) returned 0x20 [0204.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS", dwFileAttributes=0x20) returned 0 [0204.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.682] GetLastError () returned 0x5 [0204.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS", dwFileAttributes=0x20) returned 0 [0204.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 Thread: id = 6956 os_tid = 0x2234 [0200.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst")) returned 0x20 [0204.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST", dwFileAttributes=0x20) returned 0 [0204.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.678] GetLastError () returned 0x5 [0204.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST", dwFileAttributes=0x20) returned 0 [0204.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6300) returned 1 Thread: id = 6957 os_tid = 0xb8c [0200.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst")) returned 0x20 [0204.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST", dwFileAttributes=0x20) returned 0 [0204.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.675] GetLastError () returned 0x5 [0204.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST", dwFileAttributes=0x20) returned 0 [0204.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5540) returned 1 Thread: id = 6958 os_tid = 0x754 [0200.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss")) returned 0x20 [0204.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS", dwFileAttributes=0x20) returned 0 [0204.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.715] GetLastError () returned 0x5 [0204.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS", dwFileAttributes=0x20) returned 0 [0204.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4460) returned 1 Thread: id = 6959 os_tid = 0x103c [0200.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss")) returned 0x20 [0204.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS", dwFileAttributes=0x20) returned 0 [0204.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.712] GetLastError () returned 0x5 [0204.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS", dwFileAttributes=0x20) returned 0 [0204.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6120) returned 1 Thread: id = 6960 os_tid = 0x1ce4 [0200.491] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json")) returned 0x2020 [0203.251] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", dwFileAttributes=0x20) returned 1 [0213.101] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x151c [0213.102] GetFileSizeEx (in: hFile=0x151c, lpFileSize=0x136ffc64 | out: lpFileSize=0x136ffc64*=179) returned 1 [0213.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53828 [0213.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a18 [0213.102] NtQuerySystemTime (in: CurrentTime=0x136ffbd8 | out: CurrentTime=0x136ffbd8*=132462177916752000) returned 0x0 [0213.102] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x4b93ebe1 [0213.102] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x5ea48d95 [0213.102] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x4f52fabd [0213.102] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x54a4dec4 [0213.102] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x70efea62 [0213.102] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x6787de54 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x44e4f5f7 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x65bef570 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0xb635e14 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x27db5bae [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x3d6ec8c2 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x621c4059 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x1829e2d4 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x5b1dc0de [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x3303625a [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x6c2797e3 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x51a81dda [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x5ebefae6 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x750fb96e [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x355c1565 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x4737b0f4 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x415c01db [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x5ce1103c [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x7f56752 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x3c84737b [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x6dd8b2f1 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x6d4f18b [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x310b0be0 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x33e5ebe4 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x79e0bd12 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x456c0338 [0213.103] RtlRandomEx (in: Seed=0x136ffbd0 | out: Seed=0x136ffbd0) returned 0x5ee38d24 [0213.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba9fa8 [0213.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7badbb0 [0213.113] ReadFile (in: hFile=0x151c, lpBuffer=0x7ba9fa8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x136ffbcc, lpOverlapped=0x0 | out: lpBuffer=0x7ba9fa8*, lpNumberOfBytesRead=0x136ffbcc*=0xb3, lpOverlapped=0x0) returned 1 [0213.115] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.115] WriteFile (in: hFile=0x151c, lpBuffer=0x7badbb0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x136ffbd0, lpOverlapped=0x0 | out: lpBuffer=0x7badbb0*, lpNumberOfBytesWritten=0x136ffbd0*=0xb3, lpOverlapped=0x0) returned 1 [0218.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f48 [0218.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f20 [0218.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f20) returned 1 [0218.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7badbb0) returned 1 [0218.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba9fa8) returned 1 [0218.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c630) returned 1 [0218.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84320) returned 1 [0218.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x300550 [0218.472] SetFilePointerEx (in: hFile=0x151c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.473] WriteFile (in: hFile=0x151c, lpBuffer=0x7cbaf70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x136ffc58, lpOverlapped=0x0 | out: lpBuffer=0x7cbaf70*, lpNumberOfBytesWritten=0x136ffc58*=0x10c, lpOverlapped=0x0) returned 1 [0222.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24590 [0222.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0222.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e48 [0222.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e48) returned 1 [0222.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3e48 [0222.655] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c00 [0222.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0222.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3510) returned 1 [0222.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0222.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24590) returned 1 [0222.656] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0222.656] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="94") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="51") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="13") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="95") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="d4") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="17") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="02") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="9d") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="ed") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="84") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="da") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="90") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="02") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="bd") returned 2 [0222.656] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="77") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="2b") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="39") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="f3") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="f1") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="d2") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="87") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="73") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="82") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="a1") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="c8") returned 2 [0222.657] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="01") returned 2 [0222.657] RtlInitAnsiString (in: DestinationString=0x136ffbe0, SourceString="94511395d417029ded84da9002bd772b39f3f1d2877382a1c801" | out: DestinationString="94511395d417029ded84da9002bd772b39f3f1d2877382a1c801") [0222.657] RtlAnsiStringToUnicodeString (in: DestinationString=0x136ffbd8, SourceString="94511395d417029ded84da9002bd772b39f3f1d2877382a1c801", AllocateDestinationString=1 | out: DestinationString="94511395d417029ded84da9002bd772b39f3f1d2877382a1c801") returned 0x0 [0222.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c3d8 [0224.353] CloseHandle (hObject=0x2250) returned 1 [0224.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd5748) returned 1 [0224.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfbe0) returned 1 Thread: id = 6961 os_tid = 0x1d14 [0200.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json")) returned 0x2020 [0203.252] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0213.116] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c98 [0213.116] GetFileSizeEx (in: hFile=0x1c98, lpFileSize=0x1366fecc | out: lpFileSize=0x1366fecc*=179) returned 1 [0213.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a18 [0213.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc95b8 [0213.117] NtQuerySystemTime (in: CurrentTime=0x1366fe40 | out: CurrentTime=0x1366fe40*=132462177916908000) returned 0x0 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x5400132e [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x6d4f18b [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x1f537cec [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x746deb3f [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x53edd0d2 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x64042fc2 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x49ca48d3 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x1e5217f0 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x7928e4be [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x3470e659 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x70bebbfe [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x2719eacc [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x77b4a411 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x2f0c1ea1 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x3165f291 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x17a22c41 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x4a140979 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x470ff0a5 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x7cacac7e [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x30c0c182 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x918639d [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x35a6edcc [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x74c5ff75 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x71044144 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x17fea67c [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x5ce1103c [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x68c7f685 [0213.117] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x24ee4437 [0213.118] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x194750f4 [0213.118] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x4c213727 [0213.118] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x52353eb2 [0213.118] RtlRandomEx (in: Seed=0x1366fe38 | out: Seed=0x1366fe38) returned 0x3eafe115 [0213.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d9b478 [0213.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d9f080 [0213.126] ReadFile (in: hFile=0x1c98, lpBuffer=0x10d9b478, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1366fe34, lpOverlapped=0x0 | out: lpBuffer=0x10d9b478*, lpNumberOfBytesRead=0x1366fe34*=0xb3, lpOverlapped=0x0) returned 1 [0213.128] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.128] WriteFile (in: hFile=0x1c98, lpBuffer=0x10d9f080*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1366fe38, lpOverlapped=0x0 | out: lpBuffer=0x10d9f080*, lpNumberOfBytesWritten=0x1366fe38*=0xb3, lpOverlapped=0x0) returned 1 [0218.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3880 [0218.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3830 [0218.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3830) returned 1 [0218.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d9f080) returned 1 [0218.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d9b478) returned 1 [0218.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c270) returned 1 [0218.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85298) returned 1 [0218.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86878 [0218.096] SetFilePointerEx (in: hFile=0x1c98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.096] WriteFile (in: hFile=0x1c98, lpBuffer=0x7cba6b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1366fec0, lpOverlapped=0x0 | out: lpBuffer=0x7cba6b0*, lpNumberOfBytesWritten=0x1366fec0*=0x10c, lpOverlapped=0x0) returned 1 [0218.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0218.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcd0) returned 1 [0218.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bcd0 [0218.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0218.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0218.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0218.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.441] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="5e") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="e5") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="aa") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="01") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="71") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="8e") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="99") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="32") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="36") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="7b") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="47") returned 2 [0218.441] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="cf") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="74") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="42") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="63") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="82") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="77") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="5a") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="0f") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="83") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="70") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="90") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="f5") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="a0") returned 2 [0218.442] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="35") returned 2 [0218.442] RtlInitAnsiString (in: DestinationString=0x1366fe48, SourceString="7f5ee5aa01718e9932367b47cf74426382775a0f837090f5a035" | out: DestinationString="7f5ee5aa01718e9932367b47cf74426382775a0f837090f5a035") [0218.442] RtlAnsiStringToUnicodeString (in: DestinationString=0x1366fe40, SourceString="7f5ee5aa01718e9932367b47cf74426382775a0f837090f5a035", AllocateDestinationString=1 | out: DestinationString="7f5ee5aa01718e9932367b47cf74426382775a0f837090f5a035") returned 0x0 [0218.442] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e148 [0224.117] CloseHandle (hObject=0x2250) returned 1 [0224.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd43c8) returned 1 [0224.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfd08) returned 1 Thread: id = 6962 os_tid = 0x1a30 [0200.492] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json")) returned 0x2020 [0203.252] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", dwFileAttributes=0x20) returned 1 [0213.128] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd08 [0213.129] GetFileSizeEx (in: hFile=0xd08, lpFileSize=0x136afa0c | out: lpFileSize=0x136afa0c*=179) returned 1 [0213.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc95b8 [0213.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0213.129] NtQuerySystemTime (in: CurrentTime=0x136af980 | out: CurrentTime=0x136af980*=132462177917064000) returned 0x0 [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x78b18822 [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x6c2a5e6e [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x1e67c5ca [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x500fcd7a [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x49ca48d3 [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x69b59003 [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x5e613a8b [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x5719f256 [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x9faaaf [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x27e6b45c [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x4fc6e0e3 [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x56925b8a [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x19d57a7a [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x649067d2 [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x38725dcd [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x4f5c7520 [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x50703fd [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x4b1708e3 [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x366cf98b [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x596469c9 [0213.129] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x50f611e2 [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x4a975537 [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x2bf1d04 [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x1296c7d8 [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x5ebefae6 [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x5ac86adb [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x5d29e1f0 [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x35035a3d [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x3a6187f0 [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x5f2587b3 [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x74c18827 [0213.130] RtlRandomEx (in: Seed=0x136af978 | out: Seed=0x136af978) returned 0x41bb2a09 [0213.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10da2c88 [0213.138] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10da6890 [0213.139] ReadFile (in: hFile=0xd08, lpBuffer=0x10da2c88, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x136af974, lpOverlapped=0x0 | out: lpBuffer=0x10da2c88*, lpNumberOfBytesRead=0x136af974*=0xb3, lpOverlapped=0x0) returned 1 [0213.140] SetFilePointerEx (in: hFile=0xd08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.140] WriteFile (in: hFile=0xd08, lpBuffer=0x10da6890*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x136af978, lpOverlapped=0x0 | out: lpBuffer=0x10da6890*, lpNumberOfBytesWritten=0x136af978*=0xb3, lpOverlapped=0x0) returned 1 [0218.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32b8 [0218.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29a8 [0218.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29a8) returned 1 [0218.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10da6890) returned 1 [0218.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10da2c88) returned 1 [0218.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c1f8) returned 1 [0218.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84440) returned 1 [0218.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86848 [0218.102] SetFilePointerEx (in: hFile=0xd08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.102] WriteFile (in: hFile=0xd08, lpBuffer=0x7cba8e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x136afa00, lpOverlapped=0x0 | out: lpBuffer=0x7cba8e0*, lpNumberOfBytesWritten=0x136afa00*=0x10c, lpOverlapped=0x0) returned 1 [0218.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0218.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0218.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c838 [0218.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0218.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0218.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c590) returned 1 [0218.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.452] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.452] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="5f") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="13") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="13") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="f0") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="76") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="94") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="93") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="86") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="7b") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="3f") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="42") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="59") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="9f") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="47") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="05") returned 2 [0218.452] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="e3") returned 2 [0218.453] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="4c") returned 2 [0218.453] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="af") returned 2 [0218.453] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="c8") returned 2 [0218.453] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="3a") returned 2 [0218.453] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="4f") returned 2 [0218.453] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="c6") returned 2 [0218.453] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="0d") returned 2 [0218.453] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="22") returned 2 [0218.453] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="9f") returned 2 [0218.453] RtlInitAnsiString (in: DestinationString=0x136af988, SourceString="5f1313f07694ca93867b3f42599f4705e34cafc83a4fc60d229f" | out: DestinationString="5f1313f07694ca93867b3f42599f4705e34cafc83a4fc60d229f") [0218.453] RtlAnsiStringToUnicodeString (in: DestinationString=0x136af980, SourceString="5f1313f07694ca93867b3f42599f4705e34cafc83a4fc60d229f", AllocateDestinationString=1 | out: DestinationString="5f1313f07694ca93867b3f42599f4705e34cafc83a4fc60d229f") returned 0x0 [0218.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e940 [0224.227] CloseHandle (hObject=0x2250) returned 1 [0224.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4290) returned 1 [0224.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe710) returned 1 Thread: id = 6963 os_tid = 0x1a34 [0200.493] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json")) returned 0x2020 [0203.253] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", dwFileAttributes=0x20) returned 1 [0213.141] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fac [0213.141] GetFileSizeEx (in: hFile=0x1fac, lpFileSize=0xfc8ff34 | out: lpFileSize=0xfc8ff34*=179) returned 1 [0213.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ef0 [0213.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0213.142] NtQuerySystemTime (in: CurrentTime=0xfc8fea8 | out: CurrentTime=0xfc8fea8*=132462177917220000) returned 0x0 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x538571d5 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x2b4f3a07 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x44f0567f [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x1b3cadf3 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x64042fc2 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x340cc7db [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x38725dcd [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x1a134de0 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x11fb0bf8 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x3a174b70 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x67404c7e [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x7e42790b [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x70bebbfe [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x50184b08 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x2315e742 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0xdb368ec [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x3145c190 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x2253ce2d [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0xee067c1 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x6b0db30e [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x2efd632c [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x6b463ccb [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x2c88d211 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x15c92448 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x74c5ff75 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x44e59756 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x1296c7d8 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x730e1cd6 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x415c01db [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x6787de54 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x6901f8a7 [0213.142] RtlRandomEx (in: Seed=0xfc8fea0 | out: Seed=0xfc8fea0) returned 0x6940067b [0213.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10daa498 [0213.151] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dae0a0 [0213.151] ReadFile (in: hFile=0x1fac, lpBuffer=0x10daa498, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xfc8fe9c, lpOverlapped=0x0 | out: lpBuffer=0x10daa498*, lpNumberOfBytesRead=0xfc8fe9c*=0xb3, lpOverlapped=0x0) returned 1 [0213.152] SetFilePointerEx (in: hFile=0x1fac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.153] WriteFile (in: hFile=0x1fac, lpBuffer=0x10dae0a0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xfc8fea0, lpOverlapped=0x0 | out: lpBuffer=0x10dae0a0*, lpNumberOfBytesWritten=0xfc8fea0*=0xb3, lpOverlapped=0x0) returned 1 [0213.653] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0213.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0213.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0213.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dae0a0) returned 1 [0213.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10daa498) returned 1 [0213.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c3d8) returned 1 [0213.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b843f8) returned 1 [0213.654] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e00 [0213.654] SetFilePointerEx (in: hFile=0x1fac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.654] WriteFile (in: hFile=0x1fac, lpBuffer=0x7cd3718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfc8ff28, lpOverlapped=0x0 | out: lpBuffer=0x7cd3718*, lpNumberOfBytesWritten=0xfc8ff28*=0x10c, lpOverlapped=0x0) returned 1 [0213.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0213.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0213.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4690 [0213.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3358 [0213.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0213.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0213.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.880] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="b1") returned 2 [0213.880] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="13") returned 2 [0213.880] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="7b") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="ce") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="37") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="b8") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="43") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="1d") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="57") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="17") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="8a") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="9d") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="1c") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="fe") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="af") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="5a") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="d9") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="8a") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="50") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="77") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="94") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="1b") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="c4") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="76") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="0a") returned 2 [0213.881] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="7c") returned 2 [0213.881] RtlInitAnsiString (in: DestinationString=0xfc8feb0, SourceString="b1137bce37b8431d57178a9d1cfeaf5ad98a5077941bc4760a7c" | out: DestinationString="b1137bce37b8431d57178a9d1cfeaf5ad98a5077941bc4760a7c") [0213.881] RtlAnsiStringToUnicodeString (in: DestinationString=0xfc8fea8, SourceString="b1137bce37b8431d57178a9d1cfeaf5ad98a5077941bc4760a7c", AllocateDestinationString=1 | out: DestinationString="b1137bce37b8431d57178a9d1cfeaf5ad98a5077941bc4760a7c") returned 0x0 [0213.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f7b8 Thread: id = 6964 os_tid = 0x1a38 [0200.494] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json")) returned 0x2020 [0203.254] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", dwFileAttributes=0x20) returned 1 [0213.153] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fb0 [0213.153] GetFileSizeEx (in: hFile=0x1fb0, lpFileSize=0x1373fcc4 | out: lpFileSize=0x1373fcc4*=179) returned 1 [0213.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca648 [0213.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9e0 [0213.154] NtQuerySystemTime (in: CurrentTime=0x1373fc38 | out: CurrentTime=0x1373fc38*=132462177917376000) returned 0x0 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x5aa1d169 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x69b59003 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x5e4ab928 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x13e1af4a [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x1641aab8 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x7c2c223e [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0xb56c837 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x154c7681 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x40b05035 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x6795fdfe [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x5400132e [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x70ac59cd [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x47f66cc6 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x671573be [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x500fcd7a [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x25e0712f [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x3b24d856 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0xe11420 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x142ecaf4 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x7f173933 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x209f4655 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x583a04d4 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x704be005 [0213.154] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x1829e2d4 [0213.155] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x5e4ab928 [0213.155] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x2c321459 [0213.155] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x639b2779 [0213.155] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x47790105 [0213.155] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x6f61fed0 [0213.155] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x57b7e4f [0213.155] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x98c78fd [0213.155] RtlRandomEx (in: Seed=0x1373fc30 | out: Seed=0x1373fc30) returned 0x36f08f95 [0213.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10db1ca8 [0213.163] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10db58b0 [0213.163] ReadFile (in: hFile=0x1fb0, lpBuffer=0x10db1ca8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1373fc2c, lpOverlapped=0x0 | out: lpBuffer=0x10db1ca8*, lpNumberOfBytesRead=0x1373fc2c*=0xb3, lpOverlapped=0x0) returned 1 [0213.164] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.164] WriteFile (in: hFile=0x1fb0, lpBuffer=0x10db58b0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1373fc30, lpOverlapped=0x0 | out: lpBuffer=0x10db58b0*, lpNumberOfBytesWritten=0x1373fc30*=0xb3, lpOverlapped=0x0) returned 1 [0213.657] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dc88 [0213.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0213.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a560) returned 1 [0213.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db58b0) returned 1 [0213.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db1ca8) returned 1 [0213.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b847a0) returned 1 [0213.658] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a381c0 [0213.658] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.658] WriteFile (in: hFile=0x1fb0, lpBuffer=0x7cd32b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1373fcb8, lpOverlapped=0x0 | out: lpBuffer=0x7cd32b8*, lpNumberOfBytesWritten=0x1373fcb8*=0x10c, lpOverlapped=0x0) returned 1 [0213.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3858 [0213.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3858) returned 1 [0213.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3858 [0213.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0213.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a70 [0213.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a70) returned 1 [0213.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.888] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="33") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="32") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="5d") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="95") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="18") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="a1") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="f9") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="92") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="eb") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="59") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="45") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="2c") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="e9") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="03") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="fe") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="d8") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="1b") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="32") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="60") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="1a") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="60") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="48") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="0f") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="4a") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="8f") returned 2 [0213.888] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="0c") returned 2 [0213.888] RtlInitAnsiString (in: DestinationString=0x1373fc40, SourceString="33325d9518a1f992eb59452ce903fed81b32601a60480f4a8f0c" | out: DestinationString="33325d9518a1f992eb59452ce903fed81b32601a60480f4a8f0c") [0213.889] RtlAnsiStringToUnicodeString (in: DestinationString=0x1373fc38, SourceString="33325d9518a1f992eb59452ce903fed81b32601a60480f4a8f0c", AllocateDestinationString=1 | out: DestinationString="33325d9518a1f992eb59452ce903fed81b32601a60480f4a8f0c") returned 0x0 [0213.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f8a8 Thread: id = 6965 os_tid = 0x1d38 [0200.494] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json")) returned 0x2020 [0203.255] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0213.165] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x23d8 [0213.165] GetFileSizeEx (in: hFile=0x23d8, lpFileSize=0x1379f8cc | out: lpFileSize=0x1379f8cc*=179) returned 1 [0213.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9e0 [0213.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0213.166] NtQuerySystemTime (in: CurrentTime=0x1379f840 | out: CurrentTime=0x1379f840*=132462177917376000) returned 0x0 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0xb38e0ff [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x1d511e35 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x1291ef53 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x43380634 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x42e112 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x14b9e32c [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x4beba8cf [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x3a434764 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x38615fc3 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x322f06a5 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x34e41663 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x4dbbc47e [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x36002dd4 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x2de16c7 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x2ec10e91 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x2581b7f9 [0213.166] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x3cd6b9b0 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0xfd60aeb [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x6e8ced92 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x5c48feb8 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x407ddc59 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x673f33e0 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x14b5ba99 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x14741bd3 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x77db72b0 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x296e212b [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x2bb25b75 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x7f895aeb [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x1ddc83f7 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x322c7f4f [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x161b8095 [0213.167] RtlRandomEx (in: Seed=0x1379f838 | out: Seed=0x1379f838) returned 0x45c3a772 [0213.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10db94b8 [0213.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dbd0c0 [0213.175] ReadFile (in: hFile=0x23d8, lpBuffer=0x10db94b8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1379f834, lpOverlapped=0x0 | out: lpBuffer=0x10db94b8*, lpNumberOfBytesRead=0x1379f834*=0xb3, lpOverlapped=0x0) returned 1 [0213.177] SetFilePointerEx (in: hFile=0x23d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.177] WriteFile (in: hFile=0x23d8, lpBuffer=0x10dbd0c0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1379f838, lpOverlapped=0x0 | out: lpBuffer=0x10dbd0c0*, lpNumberOfBytesWritten=0x1379f838*=0xb3, lpOverlapped=0x0) returned 1 [0215.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ed0 [0215.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec59c8 [0215.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec59c8) returned 1 [0215.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dbd0c0) returned 1 [0215.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db94b8) returned 1 [0215.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c540) returned 1 [0215.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b850a0) returned 1 [0215.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37920 [0215.933] SetFilePointerEx (in: hFile=0x23d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.933] WriteFile (in: hFile=0x23d8, lpBuffer=0x7dda5d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1379f8c0, lpOverlapped=0x0 | out: lpBuffer=0x7dda5d0*, lpNumberOfBytesWritten=0x1379f8c0*=0x10c, lpOverlapped=0x0) returned 1 [0218.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c48 [0218.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9c48) returned 1 [0218.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9c48 [0218.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5f8 [0218.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0218.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9928) returned 1 [0218.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.205] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.205] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="b5") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="6c") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="5f") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="6f") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="29") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="bc") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="f5") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="05") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="36") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="a8") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="11") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="da") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="71") returned 2 [0218.205] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="f8") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="45") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="c8") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="71") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="9c") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="0f") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="e5") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="66") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="c9") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="af") returned 2 [0218.206] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="c3") returned 2 [0218.206] RtlInitAnsiString (in: DestinationString=0x1379f848, SourceString="b56c5f6f29bcf50536a82d11da71f845c8719c7f0fe566c9afc3" | out: DestinationString="b56c5f6f29bcf50536a82d11da71f845c8719c7f0fe566c9afc3") [0218.206] RtlAnsiStringToUnicodeString (in: DestinationString=0x1379f840, SourceString="b56c5f6f29bcf50536a82d11da71f845c8719c7f0fe566c9afc3", AllocateDestinationString=1 | out: DestinationString="b56c5f6f29bcf50536a82d11da71f845c8719c7f0fe566c9afc3") returned 0x0 [0218.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f038 [0224.788] __SEH_epilog4 () [0224.788] CloseHandle (hObject=0x1c98) returned 1 [0224.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd378) returned 1 [0224.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe960) returned 1 Thread: id = 6966 os_tid = 0x1a3c [0200.495] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json")) returned 0x2020 [0203.956] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0215.600] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x93c [0215.601] GetFileSizeEx (in: hFile=0x93c, lpFileSize=0x134dfc8c | out: lpFileSize=0x134dfc8c*=198) returned 1 [0215.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0215.601] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0215.601] NtQuerySystemTime (in: CurrentTime=0x134dfc00 | out: CurrentTime=0x134dfc00*=132462177941868000) returned 0x0 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x62597bf3 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x4c15ae53 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x4cf95ebe [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x159eb56d [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x7940e480 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0xf8730db [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x1a5fe918 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x6b4d6b79 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x5d2be710 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x1f118654 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x4ed0aefe [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x34828459 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0xb596b5e [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x22d44a68 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x6810e746 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0xc5ddce6 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x5b692d8f [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x4dfd3e06 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x19ab60ea [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x467b083e [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x7f691ae3 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x44853938 [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x415464ea [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x2719d94f [0215.601] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x4dfd3e06 [0215.602] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x715f128e [0215.602] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x6f0951e8 [0215.602] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x2718cd0e [0215.602] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x294987f2 [0215.602] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x2a85c6ad [0215.602] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x40cede31 [0215.602] RtlRandomEx (in: Seed=0x134dfbf8 | out: Seed=0x134dfbf8) returned 0x29fac90c [0215.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.609] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d26bd0 [0215.610] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d2a7d8 [0215.610] ReadFile (in: hFile=0x93c, lpBuffer=0x7d26bd0, nNumberOfBytesToRead=0xc6, lpNumberOfBytesRead=0x134dfbf4, lpOverlapped=0x0 | out: lpBuffer=0x7d26bd0*, lpNumberOfBytesRead=0x134dfbf4*=0xc6, lpOverlapped=0x0) returned 1 [0215.612] SetFilePointerEx (in: hFile=0x93c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.612] WriteFile (in: hFile=0x93c, lpBuffer=0x7d2a7d8*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x134dfbf8, lpOverlapped=0x0 | out: lpBuffer=0x7d2a7d8*, lpNumberOfBytesWritten=0x134dfbf8*=0xc6, lpOverlapped=0x0) returned 1 [0218.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0218.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0218.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0218.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d2a7d8) returned 1 [0218.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d26bd0) returned 1 [0218.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0218.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8068) returned 1 [0218.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x300550 [0218.126] SetFilePointerEx (in: hFile=0x93c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.126] WriteFile (in: hFile=0x93c, lpBuffer=0x7cbaf70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x134dfc80, lpOverlapped=0x0 | out: lpBuffer=0x7cbaf70*, lpNumberOfBytesWritten=0x134dfc80*=0x10c, lpOverlapped=0x0) returned 1 [0218.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0218.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0218.469] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3100 [0218.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0218.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0218.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec36c8) returned 1 [0218.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.470] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="59") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="93") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="26") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="97") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="fc") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="ee") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="b5") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="95") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="bc") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="fb") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="5a") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="a9") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="47") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="4c") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="fa") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="91") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="18") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="37") returned 2 [0218.470] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="19") returned 2 [0218.471] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="59") returned 2 [0218.471] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="99") returned 2 [0218.471] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="71") returned 2 [0218.471] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="58") returned 2 [0218.471] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="ad") returned 2 [0218.471] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="cd") returned 2 [0218.471] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="ec") returned 2 [0218.471] RtlInitAnsiString (in: DestinationString=0x134dfc08, SourceString="59932697fceeb595bcfb5aa9474cfa9118371959997158adcdec" | out: DestinationString="59932697fceeb595bcfb5aa9474cfa9118371959997158adcdec") [0218.471] RtlAnsiStringToUnicodeString (in: DestinationString=0x134dfc00, SourceString="59932697fceeb595bcfb5aa9474cfa9118371959997158adcdec", AllocateDestinationString=1 | out: DestinationString="59932697fceeb595bcfb5aa9474cfa9118371959997158adcdec") returned 0x0 [0218.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3dd88 [0224.268] CloseHandle (hObject=0x2250) returned 1 [0224.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2398) returned 1 [0224.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf178) returned 1 Thread: id = 6967 os_tid = 0x1a44 [0200.500] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json")) returned 0x2020 [0203.929] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0214.247] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x11f8 [0214.248] GetFileSizeEx (in: hFile=0x11f8, lpFileSize=0x8ecfc9c | out: lpFileSize=0x8ecfc9c*=213) returned 1 [0214.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0214.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0214.248] NtQuerySystemTime (in: CurrentTime=0x8ecfc10 | out: CurrentTime=0x8ecfc10*=132462177928296000) returned 0x0 [0214.248] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x496f580e [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x7cf0851 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x36ef4a9a [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x28ed7d49 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x71c2407c [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x148cb6d0 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x1360ad5b [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x502974b8 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x6080ed9e [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x21a5a594 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x460f9012 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x29995326 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x617ca9c8 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x4bf3ca56 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x6c4d4687 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x255d3d26 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x616c4c8c [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x59a5503a [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x13382712 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0xce3aef7 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x7b2df87a [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x5e7cfcb3 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x4a429f5 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x79522122 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x4fa862d9 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0xd927381 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x734d3187 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x32605ba3 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x61c6e612 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x20abf78b [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x2b00ff09 [0214.249] RtlRandomEx (in: Seed=0x8ecfc08 | out: Seed=0x8ecfc08) returned 0x3d69cfe8 [0214.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c2eb90 [0214.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c32798 [0214.257] ReadFile (in: hFile=0x11f8, lpBuffer=0x7c2eb90, nNumberOfBytesToRead=0xd5, lpNumberOfBytesRead=0x8ecfc04, lpOverlapped=0x0 | out: lpBuffer=0x7c2eb90*, lpNumberOfBytesRead=0x8ecfc04*=0xd5, lpOverlapped=0x0) returned 1 [0214.259] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.259] WriteFile (in: hFile=0x11f8, lpBuffer=0x7c32798*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x8ecfc08, lpOverlapped=0x0 | out: lpBuffer=0x7c32798*, lpNumberOfBytesWritten=0x8ecfc08*=0xd5, lpOverlapped=0x0) returned 1 [0217.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5df30 [0217.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a538 [0217.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a538) returned 1 [0217.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c32798) returned 1 [0217.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c2eb90) returned 1 [0217.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0217.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdf38) returned 1 [0217.731] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a10 [0217.732] SetFilePointerEx (in: hFile=0x11f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.732] WriteFile (in: hFile=0x11f8, lpBuffer=0x7cd2480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x8ecfc90, lpOverlapped=0x0 | out: lpBuffer=0x7cd2480*, lpNumberOfBytesWritten=0x8ecfc90*=0x10c, lpOverlapped=0x0) returned 1 [0222.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8f08 [0222.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d50fa8 [0222.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b6e0 [0222.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b6e0) returned 1 [0222.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5b6e0 [0222.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6f0 [0222.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac18 [0222.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac18) returned 1 [0222.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0222.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8f08) returned 1 [0222.168] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0222.168] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="7a") returned 2 [0222.168] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="50") returned 2 [0222.168] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="df") returned 2 [0222.168] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="93") returned 2 [0222.168] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="75") returned 2 [0222.168] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="6e") returned 2 [0222.168] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="87") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="ea") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="64") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="1c") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="b3") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="af") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="40") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="f2") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="dc") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="16") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="2e") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="7c") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="9f") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="70") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="41") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="10") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="1d") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="49") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="fd") returned 2 [0222.169] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="0c") returned 2 [0222.169] RtlInitAnsiString (in: DestinationString=0x8ecfc18, SourceString="7a50df93756e87ea641cb3af40f2dc162e7c9f7041101d49fd0c" | out: DestinationString="7a50df93756e87ea641cb3af40f2dc162e7c9f7041101d49fd0c") [0222.169] RtlAnsiStringToUnicodeString (in: DestinationString=0x8ecfc10, SourceString="7a50df93756e87ea641cb3af40f2dc162e7c9f7041101d49fd0c", AllocateDestinationString=1 | out: DestinationString="7a50df93756e87ea641cb3af40f2dc162e7c9f7041101d49fd0c") returned 0x0 [0222.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d517a0 [0224.159] CloseHandle (hObject=0x2250) returned 1 [0224.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec8628) returned 1 [0224.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf2a0) returned 1 Thread: id = 6968 os_tid = 0x1a48 [0200.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x108) returned 0x7cacb10 [0200.501] wcscpy (in: _Dest=0x7cacb10, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0200.501] wcscat (in: _Dest=0x7cacb10, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\" [0200.501] wcscat (in: _Dest=0x7cacb10, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*" [0200.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2a698 [0200.501] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x7a2a698 | out: lpFindFileData=0x7a2a698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0203.912] wcscmp (_String1=".", _String2=".") returned 0 [0203.912] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a2a698 | out: lpFindFileData=0x7a2a698*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780240, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4780240, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.912] wcscmp (_String1="..", _String2=".") returned 1 [0203.912] wcscmp (_String1="..", _String2="..") returned 0 [0203.913] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a2a698 | out: lpFindFileData=0x7a2a698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.913] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.913] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x120) returned 0x7b7e448 [0203.913] wcscpy (in: _Dest=0x7b7e448, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW" [0203.913] wcscat (in: _Dest=0x7b7e448, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\" [0203.913] wcscat (in: _Dest=0x7b7e448, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\zh_TW\\messages.json" [0203.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7b7e448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c [0203.914] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x7a2a698 | out: lpFindFileData=0x7a2a698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4780240, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4780a10, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe509e200, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.914] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0203.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2a698) returned 1 [0203.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacb10) returned 1 [0203.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7d158) returned 1 Thread: id = 6969 os_tid = 0x1b70 [0200.502] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json")) returned 0x2020 [0203.929] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0214.260] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1434 [0214.261] GetFileSizeEx (in: hFile=0x1434, lpFileSize=0x1383fa4c | out: lpFileSize=0x1383fa4c*=179) returned 1 [0214.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0214.261] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0214.261] NtQuerySystemTime (in: CurrentTime=0x1383f9c0 | out: CurrentTime=0x1383f9c0*=132462177928452000) returned 0x0 [0214.261] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x3e2a5327 [0214.261] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x3f90f14d [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x2bd77e83 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x2f9be900 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x56754160 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0xa48005a [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x3ac597e6 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x7cf51572 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x4d65c95 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x62068a93 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x60c655a8 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x774e184d [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x66290c76 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x42ec320a [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x47c61205 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x56f2d569 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x1e3919b6 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x64a65f9f [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x514dab5c [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x6aab3959 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x59b04b92 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x41daf479 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x52d9852a [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x10476700 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x3b066db2 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x5b5e2f3e [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0xbb3e0b0 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x357a1f1a [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x210626fd [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x5d15cac8 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x2c2fa557 [0214.262] RtlRandomEx (in: Seed=0x1383f9b8 | out: Seed=0x1383f9b8) returned 0x43d4f9e4 [0214.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7db5bf0 [0214.270] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7db97f8 [0214.270] ReadFile (in: hFile=0x1434, lpBuffer=0x7db5bf0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1383f9b4, lpOverlapped=0x0 | out: lpBuffer=0x7db5bf0*, lpNumberOfBytesRead=0x1383f9b4*=0xb3, lpOverlapped=0x0) returned 1 [0214.272] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.272] WriteFile (in: hFile=0x1434, lpBuffer=0x7db97f8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1383f9b8, lpOverlapped=0x0 | out: lpBuffer=0x7db97f8*, lpNumberOfBytesWritten=0x1383f9b8*=0xb3, lpOverlapped=0x0) returned 1 [0217.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a718 [0217.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad30 [0217.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad30) returned 1 [0217.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db97f8) returned 1 [0217.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db5bf0) returned 1 [0217.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e9b8) returned 1 [0217.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be448) returned 1 [0217.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e863c8 [0217.884] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.884] WriteFile (in: hFile=0x1434, lpBuffer=0x7cd2c28*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1383fa40, lpOverlapped=0x0 | out: lpBuffer=0x7cd2c28*, lpNumberOfBytesWritten=0x1383fa40*=0x10c, lpOverlapped=0x0) returned 1 [0220.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d41d10 [0220.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f5d8 [0220.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c450 [0220.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c450) returned 1 [0220.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c450 [0220.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0220.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bac8 [0220.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bac8) returned 1 [0220.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f5d8) returned 1 [0220.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d41d10) returned 1 [0220.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0220.372] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="06") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="3d") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="63") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="28") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="6d") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="71") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="a7") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="b0") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="88") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="59") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="46") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="b5") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="8b") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="fa") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="82") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="75") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="3f") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="03") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="24") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="2e") returned 2 [0220.372] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="00") returned 2 [0220.373] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="39") returned 2 [0220.373] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="db") returned 2 [0220.373] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="43") returned 2 [0220.373] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="6d") returned 2 [0220.373] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="ed") returned 2 [0220.373] RtlInitAnsiString (in: DestinationString=0x1383f9c8, SourceString="063d63286d71a7b0885946b58bfa82753f03242e0039db436ded" | out: DestinationString="063d63286d71a7b0885946b58bfa82753f03242e0039db436ded") [0220.373] RtlAnsiStringToUnicodeString (in: DestinationString=0x1383f9c0, SourceString="063d63286d71a7b0885946b58bfa82753f03242e0039db436ded", AllocateDestinationString=1 | out: DestinationString="063d63286d71a7b0885946b58bfa82753f03242e0039db436ded") returned 0x0 [0220.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f308 [0224.914] __SEH_epilog4 () [0224.914] CloseHandle (hObject=0x944) returned 1 [0224.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec74d0) returned 1 [0224.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55968) returned 1 Thread: id = 6970 os_tid = 0x1c14 [0200.503] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json")) returned 0x2020 [0203.930] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", dwFileAttributes=0x20) returned 1 [0214.273] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1244 [0214.274] GetFileSizeEx (in: hFile=0x1244, lpFileSize=0xe4ff944 | out: lpFileSize=0xe4ff944*=196) returned 1 [0214.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.274] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0214.275] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0214.275] NtQuerySystemTime (in: CurrentTime=0xe4ff8b8 | out: CurrentTime=0xe4ff8b8*=132462177928608000) returned 0x0 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x460cd73c [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x62910a36 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x36419551 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x6056ac1b [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x65134abe [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x2b785cb4 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x1a0c17c4 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x5496f2c7 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x5ffc30f3 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x69be1870 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0xe1b2521 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x594175b3 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x6d774fdd [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x62ecfe55 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x664ce539 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x1318dd82 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x5305b441 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x5bdc40f [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x40448ea0 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x31ff4368 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x2333cf5b [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x2cee3771 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x7c3b476f [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x6f000a76 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x41f3fec7 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x7d3bbb15 [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x7a5b9e6e [0214.275] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x6d42cbcc [0214.276] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x67b5295d [0214.276] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x270cab71 [0214.276] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0xbddc0cb [0214.276] RtlRandomEx (in: Seed=0xe4ff8b0 | out: Seed=0xe4ff8b0) returned 0x511d1f69 [0214.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7dae3e0 [0214.285] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7db1fe8 [0214.285] ReadFile (in: hFile=0x1244, lpBuffer=0x7dae3e0, nNumberOfBytesToRead=0xc4, lpNumberOfBytesRead=0xe4ff8ac, lpOverlapped=0x0 | out: lpBuffer=0x7dae3e0*, lpNumberOfBytesRead=0xe4ff8ac*=0xc4, lpOverlapped=0x0) returned 1 [0214.287] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.287] WriteFile (in: hFile=0x1244, lpBuffer=0x7db1fe8*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0xe4ff8b0, lpOverlapped=0x0 | out: lpBuffer=0x7db1fe8*, lpNumberOfBytesWritten=0xe4ff8b0*=0xc4, lpOverlapped=0x0) returned 1 [0220.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0220.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0220.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37e0) returned 1 [0220.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db1fe8) returned 1 [0220.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dae3e0) returned 1 [0220.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3df68) returned 1 [0220.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdf80) returned 1 [0220.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86728 [0220.896] SetFilePointerEx (in: hFile=0x1244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.896] WriteFile (in: hFile=0x1244, lpBuffer=0x7cd33d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe4ff938, lpOverlapped=0x0 | out: lpBuffer=0x7cd33d0*, lpNumberOfBytesWritten=0xe4ff938*=0x10c, lpOverlapped=0x0) returned 1 [0223.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0223.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9d8 [0223.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b9d8) returned 1 [0223.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b9d8 [0223.068] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b988 [0223.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba00 [0223.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba00) returned 1 [0223.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0223.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.069] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.069] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="56") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="fe") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="8a") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="fa") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="c4") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="bb") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="a8") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="9c") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="5e") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="50") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="71") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="f4") returned 2 [0223.069] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="08") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="bc") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="01") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="06") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="57") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="59") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="0e") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="21") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="f2") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="4e") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="2b") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="eb") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="5a") returned 2 [0223.070] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="36") returned 2 [0223.070] RtlInitAnsiString (in: DestinationString=0xe4ff8c0, SourceString="56fe8afac4bba89c5e5071f408bc010657590e21f24e2beb5a36" | out: DestinationString="56fe8afac4bba89c5e5071f408bc010657590e21f24e2beb5a36") [0223.070] RtlAnsiStringToUnicodeString (in: DestinationString=0xe4ff8b8, SourceString="56fe8afac4bba89c5e5071f408bc010657590e21f24e2beb5a36", AllocateDestinationString=1 | out: DestinationString="56fe8afac4bba89c5e5071f408bc010657590e21f24e2beb5a36") returned 0x0 [0223.070] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a23680 [0224.369] CloseHandle (hObject=0x2250) returned 1 [0224.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9050) returned 1 [0224.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56058) returned 1 Thread: id = 6971 os_tid = 0x1c4c [0200.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif")) returned 0x20 [0204.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.449] GetLastError () returned 0x5 [0204.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.449] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3332e8) returned 1 Thread: id = 6972 os_tid = 0x1c70 [0200.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif")) returned 0x20 [0204.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.456] GetLastError () returned 0x5 [0204.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3336a8) returned 1 Thread: id = 6973 os_tid = 0x1c74 [0200.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif")) returned 0x20 [0204.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.464] GetLastError () returned 0x5 [0204.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333828) returned 1 Thread: id = 6974 os_tid = 0x1c78 [0200.506] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json")) returned 0x2020 [0203.911] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0222.279] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc4 [0222.280] GetFileSizeEx (in: hFile=0x1bc4, lpFileSize=0x11aeff54 | out: lpFileSize=0x11aeff54*=257) returned 1 [0222.280] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.280] ReadFile (in: hFile=0x1bc4, lpBuffer=0x11aeff30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11aeff40, lpOverlapped=0x0 | out: lpBuffer=0x11aeff30*, lpNumberOfBytesRead=0x11aeff40*=0x4, lpOverlapped=0x0) returned 1 [0222.282] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0222.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0222.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3b0 [0222.282] NtQuerySystemTime (in: CurrentTime=0x11aefec8 | out: CurrentTime=0x11aefec8*=132462178005360000) returned 0x0 [0222.282] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x28b41dad [0222.282] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x5a6cb316 [0222.282] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x76a82bad [0222.282] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x25a4a0b4 [0222.282] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x611339c [0222.282] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x5d9adf66 [0222.282] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x1a5a68d6 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x407c57dd [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x321da35a [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0xe47aa03 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x1a53ce23 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x257e6cf3 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x637d8d2b [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x7741d230 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0xb2a4314 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x2980794 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x69bdaa [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x2f251e87 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x8afecbe [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x57b5aea9 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x6ab764a3 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x5d665373 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x65b309c0 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x54892a7f [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x3b88eb1 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x66c05895 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x5210e88a [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x689313f5 [0222.283] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x1d5f3853 [0222.284] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x1c7dd15d [0222.284] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x4d7b215f [0222.284] RtlRandomEx (in: Seed=0x11aefec0 | out: Seed=0x11aefec0) returned 0x7d99cd8d [0222.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0222.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c617b8 [0222.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c653c0 [0222.296] ReadFile (in: hFile=0x1bc4, lpBuffer=0x7c617b8, nNumberOfBytesToRead=0x101, lpNumberOfBytesRead=0x11aefebc, lpOverlapped=0x0 | out: lpBuffer=0x7c617b8*, lpNumberOfBytesRead=0x11aefebc*=0x101, lpOverlapped=0x0) returned 1 [0222.296] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.296] WriteFile (in: hFile=0x1bc4, lpBuffer=0x7c653c0*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x11aefec0, lpOverlapped=0x0 | out: lpBuffer=0x7c653c0*, lpNumberOfBytesWritten=0x11aefec0*=0x101, lpOverlapped=0x0) returned 1 [0223.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0223.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec54a0 [0223.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec54a0) returned 1 [0223.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c653c0) returned 1 [0223.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c617b8) returned 1 [0223.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 [0223.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb89f8) returned 1 [0223.331] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38280 [0223.331] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.332] WriteFile (in: hFile=0x1bc4, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x11aeff48, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x11aeff48*=0x10c, lpOverlapped=0x0) returned 1 [0223.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb9ad8 [0223.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3d517a0 [0223.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0223.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0223.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ba78 [0223.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0223.628] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0223.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9a0) returned 1 [0223.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0223.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0223.629] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.629] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="2d") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="31") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="55") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="71") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="2b") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="82") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="2a") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="db") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="00") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="7d") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="99") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="e3") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="ba") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="b5") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="77") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="3e") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="61") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="4a") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="60") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="13") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="11") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="4d") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="df") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="ed") returned 2 [0223.629] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="61") returned 2 [0223.630] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="89") returned 2 [0223.630] RtlInitAnsiString (in: DestinationString=0x11aefed0, SourceString="2d3155712b822adb007d99e3bab5773e614a6013114ddfed6189" | out: DestinationString="2d3155712b822adb007d99e3bab5773e614a6013114ddfed6189") [0223.630] RtlAnsiStringToUnicodeString (in: DestinationString=0x11aefec8, SourceString="2d3155712b822adb007d99e3bab5773e614a6013114ddfed6189", AllocateDestinationString=1 | out: DestinationString="2d3155712b822adb007d99e3bab5773e614a6013114ddfed6189") returned 0x0 [0223.630] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3d51728 [0223.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b7c988) returned 1 [0223.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cee8b8) returned 1 [0223.833] NtQueryInformationFile (in: FileHandle=0x1bc4, IoStatusBlock=0x11aefe98, FileInformation=0x11aefea0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11aefe98, FileInformation=0x11aefea0) returned 0x0 [0223.833] NtSetInformationFile (FileHandle=0x1bc4, IoStatusBlock=0x11aefe98, FileInformation=0x11aefea0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0223.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f548) returned 1 [0223.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51728) returned 1 [0223.988] FlushFileBuffers (hFile=0x1bc4) returned 1 [0224.006] CloseHandle (hObject=0x1bc4) returned 1 [0224.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7cd49e0 [0224.047] wcscpy (in: _Dest=0x7cd49e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\" [0224.047] wcscat (in: _Dest=0x7cd49e0, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\68814F-Readme.txt" [0224.047] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\68814f-readme.txt")) returned 0xffffffff [0224.047] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\ar\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xfbc [0224.062] WriteFile (in: hFile=0xfbc, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x11aefedc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x11aefedc*=0x8b9, lpOverlapped=0x0) returned 1 [0224.072] CloseHandle (hObject=0xfbc) returned 1 [0224.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd49e0) returned 1 [0224.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a658d8) returned 1 Thread: id = 6975 os_tid = 0x1cb4 [0200.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif")) returned 0x20 [0204.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0204.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.471] GetLastError () returned 0x5 [0204.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0204.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68d08) returned 1 Thread: id = 6976 os_tid = 0x1cc0 [0200.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif")) returned 0x20 [0204.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0204.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.479] GetLastError () returned 0x5 [0204.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0204.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d86a80) returned 1 Thread: id = 6977 os_tid = 0x1cc8 [0200.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20 [0204.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.485] GetLastError () returned 0x5 [0204.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d853c0) returned 1 Thread: id = 6978 os_tid = 0x1cf0 [0200.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20 [0204.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.491] GetLastError () returned 0x5 [0204.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d85150) returned 1 Thread: id = 6979 os_tid = 0x1cf4 [0200.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css")) returned 0x20 [0200.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0200.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0200.517] GetLastError () returned 0x5 [0200.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", dwFileAttributes=0x20) returned 0 [0200.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 6980 os_tid = 0x1cf8 [0200.520] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c8648 [0200.521] wcscpy (in: _Dest=0x2c8648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0200.521] wcscat (in: _Dest=0x2c8648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\" [0200.521] wcscat (in: _Dest=0x2c8648, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*" [0200.521] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2a430 [0200.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x7a2a430 | out: lpFindFileData=0x7a2a430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8584e390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x30671c0 [0200.521] wcscmp (_String1=".", _String2=".") returned 0 [0200.521] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x7a2a430 | out: lpFindFileData=0x7a2a430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x766b2a90, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8584e390, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.521] wcscmp (_String1="..", _String2=".") returned 1 [0200.522] wcscmp (_String1="..", _String2="..") returned 0 [0200.522] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x7a2a430 | out: lpFindFileData=0x7a2a430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8584e390, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0200.522] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0200.522] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0200.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae100 [0200.522] wcscpy (in: _Dest=0x3dae100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0200.522] wcscat (in: _Dest=0x3dae100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\" [0200.522] wcscat (in: _Dest=0x3dae100, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" [0201.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4 [0201.705] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x7a2a430 | out: lpFindFileData=0x7a2a430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0201.705] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0201.706] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0201.706] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0ca8 [0201.706] wcscpy (in: _Dest=0x3db0ca8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana" [0201.706] wcscat (in: _Dest=0x3db0ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\" [0201.706] wcscat (in: _Dest=0x3db0ca8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" [0201.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518 [0201.707] FindNextFileW (in: hFindFile=0x30671c0, lpFindFileData=0x7a2a430 | out: lpFindFileData=0x7a2a430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e42500, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x766b2a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x31e42500, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0201.707] FindClose (in: hFindFile=0x30671c0 | out: hFindFile=0x30671c0) returned 1 [0201.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2a430) returned 1 [0201.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 [0201.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 6981 os_tid = 0x1d10 [0201.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css")) returned 0x20 [0201.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0201.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0201.541] GetLastError () returned 0x5 [0201.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", dwFileAttributes=0x20) returned 0 [0201.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 6982 os_tid = 0x1d18 [0201.542] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c97c8 [0201.543] wcscpy (in: _Dest=0x2c97c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0201.543] wcscat (in: _Dest=0x2c97c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0201.543] wcscat (in: _Dest=0x2c97c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*" [0201.543] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b770 [0201.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85dcf670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.104] wcscmp (_String1=".", _String2=".") returned 0 [0205.104] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x769f88d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x85dcf670, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.104] wcscmp (_String1="..", _String2=".") returned 1 [0205.104] wcscmp (_String1="..", _String2="..") returned 0 [0205.104] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x769f88d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0205.104] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0205.104] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0205.104] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db0ca8 [0205.105] wcscpy (in: _Dest=0x3db0ca8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0205.105] wcscat (in: _Dest=0x3db0ca8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0205.105] wcscat (in: _Dest=0x3db0ca8, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" [0205.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0ca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc [0205.225] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0205.225] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0205.225] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0205.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3daff88 [0205.225] wcscpy (in: _Dest=0x3daff88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0205.225] wcscat (in: _Dest=0x3daff88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0205.225] wcscat (in: _Dest=0x3daff88, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" [0205.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3daff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0 [0205.226] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76a1ea30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.226] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.226] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.226] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0348 [0205.227] wcscpy (in: _Dest=0x3db0348, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0205.227] wcscat (in: _Dest=0x3db0348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0205.227] wcscat (in: _Dest=0x3db0348, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" [0205.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4 [0205.228] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.228] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.228] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3daf178 [0205.228] wcscpy (in: _Dest=0x3daf178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue" [0205.228] wcscat (in: _Dest=0x3daf178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\" [0205.228] wcscat (in: _Dest=0x3daf178, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" [0205.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3daf178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78 [0205.229] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x85dcf670, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.229] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b770) returned 1 [0205.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c97c8) returned 1 [0205.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67568) returned 1 Thread: id = 6983 os_tid = 0x1d1c [0201.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css")) returned 0x20 [0205.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0205.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.463] GetLastError () returned 0x5 [0205.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", dwFileAttributes=0x20) returned 0 [0205.463] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c98a8) returned 1 Thread: id = 6984 os_tid = 0x1d20 [0201.544] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e689a8 [0201.544] wcscpy (in: _Dest=0x3e689a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0201.545] wcscat (in: _Dest=0x3e689a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\" [0201.545] wcscat (in: _Dest=0x3e689a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*" [0201.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b508 [0201.545] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x7a2b508 | out: lpFindFileData=0x7a2b508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76c80030, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86a28890, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.457] wcscmp (_String1=".", _String2=".") returned 0 [0205.457] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a2b508 | out: lpFindFileData=0x7a2b508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76c80030, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86a28890, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.457] wcscmp (_String1="..", _String2=".") returned 1 [0205.457] wcscmp (_String1="..", _String2="..") returned 0 [0205.457] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a2b508 | out: lpFindFileData=0x7a2b508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76c80030, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.457] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.458] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3dafcb8 [0205.458] wcscpy (in: _Dest=0x3dafcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0205.458] wcscat (in: _Dest=0x3dafcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\" [0205.458] wcscat (in: _Dest=0x3dafcb8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" [0205.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8 [0205.459] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a2b508 | out: lpFindFileData=0x7a2b508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.459] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.459] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db09d8 [0205.459] wcscpy (in: _Dest=0x3db09d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay" [0205.460] wcscat (in: _Dest=0x3db09d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\" [0205.460] wcscat (in: _Dest=0x3db09d8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" [0205.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db09d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50 [0205.461] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a2b508 | out: lpFindFileData=0x7a2b508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86a28890, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.461] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b508) returned 1 [0205.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e689a8) returned 1 [0205.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68570) returned 1 Thread: id = 6985 os_tid = 0x1d24 [0201.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css")) returned 0x20 [0205.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0205.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.471] GetLastError () returned 0x5 [0205.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", dwFileAttributes=0x20) returned 0 [0205.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9988) returned 1 Thread: id = 6986 os_tid = 0x1d28 [0201.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4b88 [0201.545] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0201.546] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0201.546] wcscat (in: _Dest=0x3dc4b88, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*" [0201.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a28018 [0201.546] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.447] wcscmp (_String1=".", _String2=".") returned 0 [0205.447] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.447] wcscmp (_String1="..", _String2=".") returned 1 [0205.447] wcscmp (_String1="..", _String2="..") returned 0 [0205.447] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0205.447] wcscmp (_String1="background.gif", _String2=".") returned 1 [0205.447] wcscmp (_String1="background.gif", _String2="..") returned 1 [0205.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf6) returned 0x3de8eb8 [0205.447] wcscpy (in: _Dest=0x3de8eb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0205.447] wcscat (in: _Dest=0x3de8eb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0205.447] wcscat (in: _Dest=0x3de8eb8, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" [0205.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3de8eb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8 [0205.448] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0205.448] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0205.448] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0205.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae4e0 [0205.448] wcscpy (in: _Dest=0x3dae4e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0205.448] wcscat (in: _Dest=0x3dae4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0205.448] wcscat (in: _Dest=0x3dae4e0, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" [0205.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0205.449] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33155200, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x33155200, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.450] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.450] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dad468 [0205.450] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0205.450] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0205.450] wcscat (in: _Dest=0x3dad468, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" [0205.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dad468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70 [0205.451] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.451] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.451] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadf10 [0205.451] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange" [0205.451] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\" [0205.451] wcscat (in: _Dest=0x3dadf10, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" [0205.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18ac [0205.452] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28018 | out: lpFindFileData=0x7a28018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.452] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28018) returned 1 [0205.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 [0205.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8568) returned 1 Thread: id = 6987 os_tid = 0x1d2c [0201.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css")) returned 0x20 [0205.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0205.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.424] GetLastError () returned 0x5 [0205.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", dwFileAttributes=0x20) returned 0 [0205.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc50f8) returned 1 Thread: id = 6988 os_tid = 0x1d30 [0201.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xdc) returned 0x3dc4700 [0201.547] wcscpy (in: _Dest=0x3dc4700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0201.547] wcscat (in: _Dest=0x3dc4700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0201.547] wcscat (in: _Dest=0x3dc4700, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*" [0201.547] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a28280 [0201.547] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x7a28280 | out: lpFindFileData=0x7a28280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.418] wcscmp (_String1=".", _String2=".") returned 0 [0205.418] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28280 | out: lpFindFileData=0x7a28280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76d64870, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x86ae6f70, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.418] wcscmp (_String1="..", _String2=".") returned 1 [0205.419] wcscmp (_String1="..", _String2="..") returned 0 [0205.419] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28280 | out: lpFindFileData=0x7a28280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0205.419] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0205.419] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0205.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dad750 [0205.419] wcscpy (in: _Dest=0x3dad750, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0205.419] wcscat (in: _Dest=0x3dad750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0205.419] wcscat (in: _Dest=0x3dad750, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" [0205.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dad750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0205.420] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28280 | out: lpFindFileData=0x7a28280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x86ae6f70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.420] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.420] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xf0) returned 0x3dadb30 [0205.420] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0205.420] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0205.420] wcscat (in: _Dest=0x3dadb30, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" [0205.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618 [0205.421] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28280 | out: lpFindFileData=0x7a28280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.421] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.421] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.421] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae1f8 [0205.422] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow" [0205.422] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\" [0205.422] wcscat (in: _Dest=0x3dae1f8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" [0205.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1918 [0205.423] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a28280 | out: lpFindFileData=0x7a28280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x76d64870, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.423] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a28280) returned 1 [0205.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4700) returned 1 [0205.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8aa8) returned 1 Thread: id = 6989 os_tid = 0x1d34 [0201.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css")) returned 0x20 [0205.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0205.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.417] GetLastError () returned 0x5 [0205.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", dwFileAttributes=0x20) returned 0 [0205.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc52c8) returned 1 Thread: id = 6990 os_tid = 0x1d3c [0201.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css")) returned 0x20 [0205.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0205.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.443] GetLastError () returned 0x5 [0205.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", dwFileAttributes=0x20) returned 0 [0205.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9368) returned 1 Thread: id = 6991 os_tid = 0x1d68 [0201.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css")) returned 0x20 [0205.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0205.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.512] GetLastError () returned 0x5 [0205.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", dwFileAttributes=0x20) returned 0 [0205.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0020) returned 1 Thread: id = 6992 os_tid = 0x1d8c [0201.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd0) returned 0x3e67490 [0201.548] wcscpy (in: _Dest=0x3e67490, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0201.548] wcscat (in: _Dest=0x3e67490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0201.548] wcscat (in: _Dest=0x3e67490, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*" [0201.548] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335750 [0201.548] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7718eef0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876357f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.506] wcscmp (_String1=".", _String2=".") returned 0 [0205.506] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7718eef0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x876357f0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.506] wcscmp (_String1="..", _String2=".") returned 1 [0205.506] wcscmp (_String1="..", _String2="..") returned 0 [0205.506] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0205.506] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0205.507] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0205.507] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0078 [0205.507] wcscpy (in: _Dest=0x3db0078, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0205.507] wcscat (in: _Dest=0x3db0078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0205.507] wcscat (in: _Dest=0x3db0078, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" [0205.507] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4 [0205.508] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x876357f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.508] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.508] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.508] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe4) returned 0x3dafe98 [0205.508] wcscpy (in: _Dest=0x3dafe98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0205.508] wcscat (in: _Dest=0x3dafe98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0205.508] wcscat (in: _Dest=0x3dafe98, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" [0205.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafe98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08 [0205.509] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x771b5050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.509] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.509] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.509] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0ac8 [0205.510] wcscpy (in: _Dest=0x3db0ac8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert" [0205.510] wcscat (in: _Dest=0x3db0ac8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\" [0205.510] wcscat (in: _Dest=0x3db0ac8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" [0205.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0ac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c [0205.511] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x335750 | out: lpFindFileData=0x335750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34467f00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x771b5050, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x34467f00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.511] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335750) returned 1 [0205.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e67490) returned 1 [0205.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e687f8) returned 1 Thread: id = 6993 os_tid = 0x1d90 [0201.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css")) returned 0x20 [0205.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0205.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.505] GetLastError () returned 0x5 [0205.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", dwFileAttributes=0x20) returned 0 [0205.505] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0100) returned 1 Thread: id = 6994 os_tid = 0x1df4 [0201.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css")) returned 0x20 [0205.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0205.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.503] GetLastError () returned 0x5 [0205.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", dwFileAttributes=0x20) returned 0 [0205.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc01e0) returned 1 Thread: id = 6995 os_tid = 0x1df8 [0201.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd6) returned 0x2c91a8 [0201.549] wcscpy (in: _Dest=0x2c91a8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0201.549] wcscat (in: _Dest=0x2c91a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0201.549] wcscat (in: _Dest=0x2c91a8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*" [0201.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0201.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c7c7d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88777770, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0204.288] wcscmp (_String1=".", _String2=".") returned 0 [0204.288] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c7c7d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88777770, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.288] wcscmp (_String1="..", _String2=".") returned 1 [0204.288] wcscmp (_String1="..", _String2="..") returned 0 [0204.288] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88777770, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0204.288] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0204.288] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0204.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0d98 [0204.289] wcscpy (in: _Dest=0x3db0d98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0204.289] wcscat (in: _Dest=0x3db0d98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0204.289] wcscat (in: _Dest=0x3db0d98, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" [0204.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0204.290] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0204.290] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0204.290] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0204.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xea) returned 0x3dae4e0 [0204.290] wcscpy (in: _Dest=0x3dae4e0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0204.290] wcscat (in: _Dest=0x3dae4e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0204.290] wcscat (in: _Dest=0x3dae4e0, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" [0204.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8 [0204.291] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0204.291] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0204.291] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0204.291] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0168 [0204.291] wcscpy (in: _Dest=0x3db0168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck" [0204.291] wcscat (in: _Dest=0x3db0168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\" [0204.291] wcscat (in: _Dest=0x3db0168, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" [0204.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8 [0204.293] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x78c7c7d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0204.293] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0204.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0204.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c91a8) returned 1 [0204.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc02c0) returned 1 Thread: id = 6996 os_tid = 0x1e78 [0201.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css")) returned 0x20 [0205.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0205.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.400] GetLastError () returned 0x5 [0205.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", dwFileAttributes=0x20) returned 0 [0205.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc49b8) returned 1 Thread: id = 6997 os_tid = 0x1e7c [0201.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css")) returned 0x20 [0205.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0205.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.502] GetLastError () returned 0x5 [0205.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", dwFileAttributes=0x20) returned 0 [0205.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc03a0) returned 1 Thread: id = 6998 os_tid = 0x1e80 [0201.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css")) returned 0x20 [0205.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0205.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.395] GetLastError () returned 0x5 [0205.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", dwFileAttributes=0x20) returned 0 [0205.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4aa0) returned 1 Thread: id = 6999 os_tid = 0x1e84 [0202.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e678c8 [0202.650] wcscpy (in: _Dest=0x3e678c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0202.650] wcscat (in: _Dest=0x3e678c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\" [0202.650] wcscat (in: _Dest=0x3e678c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*" [0202.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53168 [0202.650] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8be11010, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.465] wcscmp (_String1=".", _String2=".") returned 0 [0205.465] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b9b69d0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8be11010, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.465] wcscmp (_String1="..", _String2=".") returned 1 [0205.465] wcscmp (_String1="..", _String2="..") returned 0 [0205.465] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x7b9b69d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.465] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.465] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3ed8 [0205.465] wcscpy (in: _Dest=0x3dc3ed8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0205.465] wcscat (in: _Dest=0x3dc3ed8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\" [0205.465] wcscat (in: _Dest=0x3dc3ed8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" [0205.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8 [0205.466] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.466] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.466] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4190 [0205.468] wcscpy (in: _Dest=0x3dc4190, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime" [0205.468] wcscat (in: _Dest=0x3dc4190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\" [0205.468] wcscat (in: _Dest=0x3dc4190, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" [0205.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100 [0205.469] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x7a53168 | out: lpFindFileData=0x7a53168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8be11010, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.469] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53168) returned 1 [0205.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e678c8) returned 1 [0205.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d868e0) returned 1 Thread: id = 7000 os_tid = 0x1e8c [0202.651] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json")) returned 0x2020 [0203.256] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", dwFileAttributes=0x20) returned 1 [0213.177] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ff8 [0213.178] GetFileSizeEx (in: hFile=0x1ff8, lpFileSize=0xc4cfe34 | out: lpFileSize=0xc4cfe34*=179) returned 1 [0213.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0213.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0213.178] NtQuerySystemTime (in: CurrentTime=0xc4cfda8 | out: CurrentTime=0xc4cfda8*=132462177917532000) returned 0x0 [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x322c7f4f [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x67b8b3dc [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x209dfebe [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x105dfa1c [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x4360716b [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x3165f291 [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x663849a4 [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x8cc2edd [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x7ee370ee [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x7b7d0ebd [0213.178] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x9629f2a [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x3846d4f [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x6a5cb1db [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x5134f668 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x6f64bb4a [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x62f33b3b [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x4360716b [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x4a975537 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x3d7a9ed9 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x1edc5cc7 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x626f2d99 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x66b22a98 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x78524773 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x671573be [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x4b9ff0f4 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x2114d7df [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x46c36ac2 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x667eb861 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x77268178 [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x66ea9afe [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x113bdf7f [0213.179] RtlRandomEx (in: Seed=0xc4cfda0 | out: Seed=0xc4cfda0) returned 0x2fe88e0e [0213.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dc0cc8 [0213.191] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dc48d0 [0213.191] ReadFile (in: hFile=0x1ff8, lpBuffer=0x10dc0cc8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc4cfd9c, lpOverlapped=0x0 | out: lpBuffer=0x10dc0cc8*, lpNumberOfBytesRead=0xc4cfd9c*=0xb3, lpOverlapped=0x0) returned 1 [0213.193] SetFilePointerEx (in: hFile=0x1ff8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.193] WriteFile (in: hFile=0x1ff8, lpBuffer=0x10dc48d0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc4cfda0, lpOverlapped=0x0 | out: lpBuffer=0x10dc48d0*, lpNumberOfBytesWritten=0xc4cfda0*=0xb3, lpOverlapped=0x0) returned 1 [0215.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec45f0 [0215.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4118 [0215.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4118) returned 1 [0215.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc48d0) returned 1 [0215.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc0cc8) returned 1 [0215.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c4c8) returned 1 [0215.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85b08) returned 1 [0215.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37a40 [0215.922] SetFilePointerEx (in: hFile=0x1ff8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.922] WriteFile (in: hFile=0x1ff8, lpBuffer=0x300da60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc4cfe28, lpOverlapped=0x0 | out: lpBuffer=0x300da60*, lpNumberOfBytesWritten=0xc4cfe28*=0x10c, lpOverlapped=0x0) returned 1 [0218.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53eb8 [0218.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53eb8) returned 1 [0218.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53eb8 [0218.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e40 [0218.169] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53468 [0218.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53468) returned 1 [0218.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.170] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.170] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="d1") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="f3") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="39") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="e1") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="57") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="1f") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="0d") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="fe") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="75") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="41") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="92") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="78") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="84") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="42") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="f1") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="20") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="bc") returned 2 [0218.170] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.171] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="ec") returned 2 [0218.171] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="84") returned 2 [0218.171] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="b2") returned 2 [0218.171] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.171] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="e0") returned 2 [0218.171] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="6f") returned 2 [0218.171] RtlInitAnsiString (in: DestinationString=0xc4cfdb0, SourceString="d1f339e1571fd60dfe7541927884422ff120bc7fec84b2e6e06f" | out: DestinationString="d1f339e1571fd60dfe7541927884422ff120bc7fec84b2e6e06f") [0218.171] RtlAnsiStringToUnicodeString (in: DestinationString=0xc4cfda8, SourceString="d1f339e1571fd60dfe7541927884422ff120bc7fec84b2e6e06f", AllocateDestinationString=1 | out: DestinationString="d1f339e1571fd60dfe7541927884422ff120bc7fec84b2e6e06f") returned 0x0 [0218.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f470 [0224.776] __SEH_epilog4 () [0224.776] CloseHandle (hObject=0x23a8) returned 1 [0224.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddce98) returned 1 [0224.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d554c8) returned 1 Thread: id = 7001 os_tid = 0x1e90 [0202.651] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json")) returned 0x2020 [0203.257] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", dwFileAttributes=0x20) returned 1 [0213.193] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb98 [0213.194] GetFileSizeEx (in: hFile=0xb98, lpFileSize=0x876fc64 | out: lpFileSize=0x876fc64*=179) returned 1 [0213.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0213.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0213.194] NtQuerySystemTime (in: CurrentTime=0x876fbd8 | out: CurrentTime=0x876fbd8*=132462177917688000) returned 0x0 [0213.194] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x7a4b6f65 [0213.194] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x1723858 [0213.194] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0xfd60aeb [0213.194] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x548179c1 [0213.194] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x4a140979 [0213.194] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x4fc6e0e3 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x8cc2edd [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x65f80993 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x4db15ac9 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x460f9012 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x12e7de76 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0xc80483e [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x438119d9 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x226b53c6 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0xee57026 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x113bdf7f [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x50184b08 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x4b9eeeb0 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x7a4b6f65 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x63f91d04 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x1aca2d17 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x6eb45860 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x40ec2e78 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x62f33b3b [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x422de664 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x3bd6fba2 [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x797ded5f [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x78df0c2e [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x50703fd [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x443acc2e [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x67e1155b [0213.195] RtlRandomEx (in: Seed=0x876fbd0 | out: Seed=0x876fbd0) returned 0x6d759183 [0213.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dc84d8 [0213.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dcc0e0 [0213.204] ReadFile (in: hFile=0xb98, lpBuffer=0x10dc84d8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x876fbcc, lpOverlapped=0x0 | out: lpBuffer=0x10dc84d8*, lpNumberOfBytesRead=0x876fbcc*=0xb3, lpOverlapped=0x0) returned 1 [0213.205] SetFilePointerEx (in: hFile=0xb98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.205] WriteFile (in: hFile=0xb98, lpBuffer=0x10dcc0e0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x876fbd0, lpOverlapped=0x0 | out: lpBuffer=0x10dcc0e0*, lpNumberOfBytesWritten=0x876fbd0*=0xb3, lpOverlapped=0x0) returned 1 [0215.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3998 [0215.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c90 [0215.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c90) returned 1 [0215.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dcc0e0) returned 1 [0215.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dc84d8) returned 1 [0215.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c6a8) returned 1 [0215.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86180) returned 1 [0215.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ce0 [0215.926] SetFilePointerEx (in: hFile=0xb98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.926] WriteFile (in: hFile=0xb98, lpBuffer=0x300dfd8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x876fc58, lpOverlapped=0x0 | out: lpBuffer=0x300dfd8*, lpNumberOfBytesWritten=0x876fc58*=0x10c, lpOverlapped=0x0) returned 1 [0218.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca878 [0218.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca878) returned 1 [0218.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca878 [0218.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9b80 [0218.174] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9978 [0218.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9978) returned 1 [0218.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.175] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="af") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="e7") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="c1") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="3d") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="08") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="39") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="83") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="da") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="42") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="ae") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="9a") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="7c") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="b7") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="de") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="b8") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="4e") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="94") returned 2 [0218.175] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="33") returned 2 [0218.176] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="fc") returned 2 [0218.176] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="f8") returned 2 [0218.176] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="db") returned 2 [0218.176] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="23") returned 2 [0218.176] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="bb") returned 2 [0218.176] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="6c") returned 2 [0218.176] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="2b") returned 2 [0218.176] RtlInitAnsiString (in: DestinationString=0x876fbe0, SourceString="afe7c13d083983da42ae9a7cddb7deb84e9433fcf8db23bb6c2b" | out: DestinationString="afe7c13d083983da42ae9a7cddb7deb84e9433fcf8db23bb6c2b") [0218.176] RtlAnsiStringToUnicodeString (in: DestinationString=0x876fbd8, SourceString="afe7c13d083983da42ae9a7cddb7deb84e9433fcf8db23bb6c2b", AllocateDestinationString=1 | out: DestinationString="afe7c13d083983da42ae9a7cddb7deb84e9433fcf8db23bb6c2b") returned 0x0 [0218.176] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f3f8 [0224.770] __SEH_epilog4 () [0224.770] CloseHandle (hObject=0xeb4) returned 1 [0224.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dddac8) returned 1 [0224.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55bb8) returned 1 Thread: id = 7002 os_tid = 0x1f08 [0202.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif")) returned 0x20 [0204.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0204.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.578] GetLastError () returned 0x5 [0204.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0204.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57690) returned 1 Thread: id = 7003 os_tid = 0x1f10 [0202.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif")) returned 0x20 [0204.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.584] GetLastError () returned 0x5 [0204.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56628) returned 1 Thread: id = 7004 os_tid = 0x1f14 [0202.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20 [0204.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.590] GetLastError () returned 0x5 [0204.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57cd0) returned 1 Thread: id = 7005 os_tid = 0x1f2c [0202.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20 [0204.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.596] GetLastError () returned 0x5 [0204.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d575c8) returned 1 Thread: id = 7006 os_tid = 0x1fac [0202.653] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json")) returned 0x2020 [0210.766] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0225.088] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1094 [0225.089] GetFileSizeEx (in: hFile=0x1094, lpFileSize=0xb4cf874 | out: lpFileSize=0xb4cf874*=270) returned 1 [0225.089] SetFilePointerEx (in: hFile=0x1094, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.089] ReadFile (in: hFile=0x1094, lpBuffer=0xb4cf850, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb4cf860, lpOverlapped=0x0 | out: lpBuffer=0xb4cf850*, lpNumberOfBytesRead=0xb4cf860*=0x4, lpOverlapped=0x0) returned 1 [0225.091] SetFilePointerEx (in: hFile=0x1094, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0225.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a18 [0225.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0225.091] NtQuerySystemTime (in: CurrentTime=0xb4cf7e8 | out: CurrentTime=0xb4cf7e8*=132462178033128000) returned 0x0 [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x62ca123d [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0xdcab76c [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x51ec194 [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x7be21d6a [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x75c809e9 [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x48eb48d3 [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x23d6635b [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x75dba26a [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x25487f47 [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x221c7dc3 [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x37ef4d51 [0225.091] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x33bb1525 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x2607f124 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x10809fa6 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x5fbe00a [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x6e47e039 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x4337a663 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0xb11233f [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x2eeae881 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x60260be [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x4ddd2137 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x6fe6ad1c [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x9c5e73f [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x18b84302 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0xeefc55d [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x7bf1a2a [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x635229b1 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x698c8caa [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x4391144 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x1fe22867 [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x2e44b0cb [0225.092] RtlRandomEx (in: Seed=0xb4cf7e0 | out: Seed=0xb4cf7e0) returned 0x37fad7e [0225.100] SetFilePointerEx (in: hFile=0x1094, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.102] WriteFile (in: hFile=0x1094, lpBuffer=0x7c4af88*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0xb4cf7e0, lpOverlapped=0x0 | out: lpBuffer=0x7c4af88*, lpNumberOfBytesWritten=0xb4cf7e0*=0x10e, lpOverlapped=0x0) returned 1 [0226.287] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0226.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53940 [0226.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53940) returned 1 [0226.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c4af88) returned 1 [0226.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c47380) returned 1 [0226.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a237e8) returned 1 [0226.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.288] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38010 [0226.288] SetFilePointerEx (in: hFile=0x1094, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.288] WriteFile (in: hFile=0x1094, lpBuffer=0x7cb6b10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb4cf868, lpOverlapped=0x0 | out: lpBuffer=0x7cb6b10*, lpNumberOfBytesWritten=0xb4cf868*=0x10c, lpOverlapped=0x0) returned 1 [0226.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c60 [0226.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c60) returned 1 [0226.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53c60 [0226.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d00 [0226.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53850 [0226.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53850) returned 1 [0226.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.382] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.382] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="d9") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="7a") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="c5") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="aa") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="e1") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="1d") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="93") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="84") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="4d") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="a8") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="53") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="a1") returned 2 [0226.382] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="1a") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="52") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="99") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="9f") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="79") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="09") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="77") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="1b") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="97") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="ac") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="e7") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="77") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="67") returned 2 [0226.383] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="cf") returned 2 [0226.383] RtlInitAnsiString (in: DestinationString=0xb4cf7f0, SourceString="d97ac5aae11d93844da853a11a52999f7909771b97ace77767cf" | out: DestinationString="d97ac5aae11d93844da853a11a52999f7909771b97ace77767cf") [0226.383] RtlAnsiStringToUnicodeString (in: DestinationString=0xb4cf7e8, SourceString="d97ac5aae11d93844da853a11a52999f7909771b97ace77767cf", AllocateDestinationString=1 | out: DestinationString="d97ac5aae11d93844da853a11a52999f7909771b97ace77767cf") returned 0x0 [0226.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fce0 [0226.384] RtlFreeAnsiString (AnsiString="d") [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2d640) returned 1 [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c60) returned 1 [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d00) returned 1 [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6b10) returned 1 [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a37e60) returned 1 [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53940) returned 1 [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38010) returned 1 [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54188) returned 1 [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a18) returned 1 [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a80) returned 1 [0226.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53670) returned 1 [0226.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x128) returned 0x7a6a570 [0226.385] wcscat (in: _Dest=0x7a6a570, _Source="d97ac5aae11d9" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\d97ac5aae11d9") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\d97ac5aae11d9" [0226.385] wcscat (in: _Dest=0x7a6a570, _Source=".68814f" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\d97ac5aae11d9.68814f") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\d97ac5aae11d9.68814f" [0226.385] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\d97ac5aae11d9.68814f", NtPathName=0xb4cf7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\d97ac5aae11d9.68814f", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1 [0226.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x13e) returned 0x7dd91b8 [0226.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd91b8) returned 1 [0226.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3a328) returned 1 [0226.422] NtQueryInformationFile (in: FileHandle=0x1094, IoStatusBlock=0xb4cf7b8, FileInformation=0xb4cf7c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb4cf7b8, FileInformation=0xb4cf7c0) returned 0x0 [0226.422] NtSetInformationFile (FileHandle=0x1094, IoStatusBlock=0xb4cf7b8, FileInformation=0xb4cf7c0, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a570) returned 1 [0226.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0226.540] FlushFileBuffers (hFile=0x1094) returned 1 [0226.554] CloseHandle (hObject=0x1094) returned 1 [0226.599] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7a6a570 [0226.599] wcscpy (in: _Dest=0x7a6a570, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\" [0226.599] wcscat (in: _Dest=0x7a6a570, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\68814F-Readme.txt" [0226.599] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\68814f-readme.txt")) returned 0xffffffff [0226.600] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\uk\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1060 [0226.608] WriteFile (in: hFile=0x1060, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xb4cf7fc, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xb4cf7fc*=0x8b9, lpOverlapped=0x0) returned 1 [0226.626] CloseHandle (hObject=0x1060) returned 1 [0226.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a570) returned 1 [0226.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80d88) returned 1 Thread: id = 7007 os_tid = 0x2044 [0202.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl")) returned 0x20 [0204.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", dwFileAttributes=0x20) returned 0 [0204.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.618] GetLastError () returned 0x5 [0204.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL", dwFileAttributes=0x20) returned 0 [0204.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 7008 os_tid = 0x20c4 [0202.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd")) returned 0x20 [0204.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", dwFileAttributes=0x20) returned 0 [0204.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.616] GetLastError () returned 0x5 [0204.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD", dwFileAttributes=0x20) returned 0 [0204.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a298) returned 1 Thread: id = 7009 os_tid = 0x2134 [0202.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css")) returned 0x20 [0204.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", dwFileAttributes=0x20) returned 0 [0204.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.625] GetLastError () returned 0x5 [0204.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS", dwFileAttributes=0x20) returned 0 [0204.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a398) returned 1 Thread: id = 7010 os_tid = 0x2164 [0202.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css")) returned 0x20 [0204.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", dwFileAttributes=0x20) returned 0 [0204.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.622] GetLastError () returned 0x5 [0204.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS", dwFileAttributes=0x20) returned 0 [0204.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 Thread: id = 7011 os_tid = 0x2168 [0202.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css")) returned 0x20 [0204.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", dwFileAttributes=0x20) returned 0 [0204.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.620] GetLastError () returned 0x5 [0204.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS", dwFileAttributes=0x20) returned 0 [0204.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a098) returned 1 Thread: id = 7012 os_tid = 0x216c [0202.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm")) returned 0x20 [0204.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", dwFileAttributes=0x20) returned 0 [0204.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.631] GetLastError () returned 0x5 [0204.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM", dwFileAttributes=0x20) returned 0 [0204.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19d18) returned 1 Thread: id = 7013 os_tid = 0x2170 [0202.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css")) returned 0x20 [0204.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", dwFileAttributes=0x20) returned 0 [0204.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.629] GetLastError () returned 0x5 [0204.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS", dwFileAttributes=0x20) returned 0 [0204.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19598) returned 1 Thread: id = 7014 os_tid = 0x2174 [0202.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css")) returned 0x20 [0204.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", dwFileAttributes=0x20) returned 0 [0204.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.627] GetLastError () returned 0x5 [0204.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS", dwFileAttributes=0x20) returned 0 [0204.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a618) returned 1 Thread: id = 7015 os_tid = 0x2178 [0202.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css")) returned 0x20 [0204.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", dwFileAttributes=0x20) returned 0 [0204.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.635] GetLastError () returned 0x5 [0204.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS", dwFileAttributes=0x20) returned 0 [0204.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69658) returned 1 Thread: id = 7016 os_tid = 0x2180 [0202.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl")) returned 0x20 [0204.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", dwFileAttributes=0x20) returned 0 [0204.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.633] GetLastError () returned 0x5 [0204.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL", dwFileAttributes=0x20) returned 0 [0204.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68d50) returned 1 Thread: id = 7017 os_tid = 0x2184 [0202.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl")) returned 0x20 [0204.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", dwFileAttributes=0x20) returned 0 [0204.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.640] GetLastError () returned 0x5 [0204.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL", dwFileAttributes=0x20) returned 0 [0204.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 Thread: id = 7018 os_tid = 0x2188 [0202.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd")) returned 0x20 [0204.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", dwFileAttributes=0x20) returned 0 [0204.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.638] GetLastError () returned 0x5 [0204.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD", dwFileAttributes=0x20) returned 0 [0204.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a118) returned 1 Thread: id = 7019 os_tid = 0x218c [0202.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vbaows10.chm")) returned 0x20 [0204.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM", dwFileAttributes=0x20) returned 0 [0204.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vbaows10.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.609] GetLastError () returned 0x5 [0204.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM", dwFileAttributes=0x20) returned 0 [0204.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ed8) returned 1 Thread: id = 7020 os_tid = 0x21a4 [0202.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll")) returned 0x20 [0204.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0204.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.607] GetLastError () returned 0x5 [0204.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0204.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d110) returned 1 Thread: id = 7021 os_tid = 0x21a8 [0202.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl")) returned 0x20 [0204.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", dwFileAttributes=0x20) returned 0 [0204.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.605] GetLastError () returned 0x5 [0204.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL", dwFileAttributes=0x20) returned 0 [0204.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a696e0) returned 1 Thread: id = 7022 os_tid = 0x22c [0202.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll")) returned 0x20 [0204.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0204.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.603] GetLastError () returned 0x5 [0204.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0204.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 7023 os_tid = 0x2264 [0202.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css")) returned 0x20 [0204.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", dwFileAttributes=0x20) returned 0 [0204.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.643] GetLastError () returned 0x5 [0204.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS", dwFileAttributes=0x20) returned 0 [0204.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19318) returned 1 Thread: id = 7024 os_tid = 0x2268 [0202.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs")) returned 0x20 [0204.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", dwFileAttributes=0x20) returned 0 [0204.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.647] GetLastError () returned 0x5 [0204.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS", dwFileAttributes=0x20) returned 0 [0204.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68800) returned 1 Thread: id = 7025 os_tid = 0x226c [0202.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc")) returned 0x20 [0204.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0204.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.645] GetLastError () returned 0x5 [0204.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0204.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 7026 os_tid = 0x2270 [0202.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt")) returned 0x20 [0204.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0204.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.600] GetLastError () returned 0x5 [0204.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0204.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 7027 os_tid = 0x2274 [0202.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk")) returned 0x20 [0204.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0204.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.598] GetLastError () returned 0x5 [0204.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0204.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 7028 os_tid = 0x2278 [0202.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk")) returned 0x20 [0204.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0204.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.613] GetLastError () returned 0x5 [0204.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0204.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d454a0) returned 1 Thread: id = 7029 os_tid = 0x227c [0202.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs")) returned 0x20 [0204.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", dwFileAttributes=0x20) returned 0 [0204.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.611] GetLastError () returned 0x5 [0204.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS", dwFileAttributes=0x20) returned 0 [0204.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19398) returned 1 Thread: id = 7030 os_tid = 0x2284 [0202.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json")) returned 0x2020 [0202.665] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0211.170] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1568 [0211.171] GetFileSizeEx (in: hFile=0x1568, lpFileSize=0x1413fc3c | out: lpFileSize=0x1413fc3c*=270) returned 1 [0211.171] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.171] ReadFile (in: hFile=0x1568, lpBuffer=0x1413fc18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1413fc28, lpOverlapped=0x0 | out: lpBuffer=0x1413fc18*, lpNumberOfBytesRead=0x1413fc28*=0x4, lpOverlapped=0x0) returned 1 [0211.172] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a08 [0211.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540c0 [0211.173] NtQuerySystemTime (in: CurrentTime=0x1413fbb0 | out: CurrentTime=0x1413fbb0*=132462177897564000) returned 0x0 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x690bd8b7 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x41d2ffb3 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x2603e4a8 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x4a8a54af [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x704a60df [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x7fa76d2a [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x2f48f7a6 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x85193bd [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x712e867c [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x2fa09120 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x4ebdefcc [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x529af386 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x354225ab [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x1cdd7c7e [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x2bbb1762 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x3f867ea2 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x742adb2c [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x35d563d6 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x1b23d335 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x19a9a78c [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x6cd85ad9 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x58c99c72 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x1a0727d5 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x38d8a156 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x786d3ee3 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x754a0062 [0211.173] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0xf2184d0 [0211.174] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x4db205ba [0211.174] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x72fe4ca1 [0211.174] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x35158ef9 [0211.174] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x5e15aeae [0211.174] RtlRandomEx (in: Seed=0x1413fba8 | out: Seed=0x1413fba8) returned 0x1ee6e2da [0211.183] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.183] WriteFile (in: hFile=0x1568, lpBuffer=0x7daa7d8*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x1413fba8, lpOverlapped=0x0 | out: lpBuffer=0x7daa7d8*, lpNumberOfBytesWritten=0x1413fba8*=0x10e, lpOverlapped=0x0) returned 1 [0213.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd98 [0213.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b640 [0213.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b640) returned 1 [0213.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7daa7d8) returned 1 [0213.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7da6bd0) returned 1 [0213.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e7d8) returned 1 [0213.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbca88) returned 1 [0213.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0213.471] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.471] WriteFile (in: hFile=0x1568, lpBuffer=0x7a38818*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1413fc30, lpOverlapped=0x0 | out: lpBuffer=0x7a38818*, lpNumberOfBytesWritten=0x1413fc30*=0x10c, lpOverlapped=0x0) returned 1 [0213.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53df0 [0213.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53df0) returned 1 [0213.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53df0 [0213.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53760 [0213.786] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0213.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53918) returned 1 [0213.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.787] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.787] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="81") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="98") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="0a") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="f4") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="97") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="df") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="73") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="a1") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="39") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="a7") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="15") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="fa") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="20") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="99") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="9e") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="36") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="38") returned 2 [0213.787] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="8e") returned 2 [0213.788] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="d3") returned 2 [0213.788] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="a1") returned 2 [0213.788] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="e3") returned 2 [0213.788] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="6b") returned 2 [0213.788] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="f0") returned 2 [0213.788] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="4e") returned 2 [0213.788] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="e0") returned 2 [0213.788] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="ea") returned 2 [0213.788] RtlInitAnsiString (in: DestinationString=0x1413fbb8, SourceString="81980af497df73a139a715fa20999e36388ed3a1e36bf04ee0ea" | out: DestinationString="81980af497df73a139a715fa20999e36388ed3a1e36bf04ee0ea") [0213.788] RtlAnsiStringToUnicodeString (in: DestinationString=0x1413fbb0, SourceString="81980af497df73a139a715fa20999e36388ed3a1e36bf04ee0ea", AllocateDestinationString=1 | out: DestinationString="81980af497df73a139a715fa20999e36388ed3a1e36bf04ee0ea") returned 0x0 [0213.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f290 Thread: id = 7031 os_tid = 0x2288 [0202.665] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json")) returned 0x2020 [0202.666] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0211.184] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1740 [0211.185] GetFileSizeEx (in: hFile=0x1740, lpFileSize=0x140afe4c | out: lpFileSize=0x140afe4c*=353) returned 1 [0211.185] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x15d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.185] ReadFile (in: hFile=0x1740, lpBuffer=0x140afe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x140afe38, lpOverlapped=0x0 | out: lpBuffer=0x140afe28*, lpNumberOfBytesRead=0x140afe38*=0x4, lpOverlapped=0x0) returned 1 [0211.187] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540c0 [0211.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0211.187] NtQuerySystemTime (in: CurrentTime=0x140afdc0 | out: CurrentTime=0x140afdc0*=132462177897720000) returned 0x0 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x176f64ae [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x220c3b5d [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x702c9583 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x7c56fafe [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x78399c67 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0xa36f99d [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x4a4639ba [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x554f4428 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x594380cb [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x2aa48600 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x406f4ff8 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0xfe62e67 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x332ee348 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x40cbf8cf [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x5e5a1f49 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x134874bf [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x59575354 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x226ea9c [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x6a439c78 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x329d5685 [0211.187] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x9d900e3 [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x27db5bae [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x71a8812c [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x311ae04c [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x6362e759 [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x97b98a5 [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x2f37704a [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x415959b6 [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x19b84670 [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x69d716aa [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x52cd1935 [0211.188] RtlRandomEx (in: Seed=0x140afdb8 | out: Seed=0x140afdb8) returned 0x177b2606 [0211.196] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.196] WriteFile (in: hFile=0x1740, lpBuffer=0x7db1fe8*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x140afdb8, lpOverlapped=0x0 | out: lpBuffer=0x7db1fe8*, lpNumberOfBytesWritten=0x140afdb8*=0x161, lpOverlapped=0x0) returned 1 [0213.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0213.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0213.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305be60) returned 1 [0213.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db1fe8) returned 1 [0213.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dae3e0) returned 1 [0213.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ea30) returned 1 [0213.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcad0) returned 1 [0213.473] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38040 [0213.473] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.474] WriteFile (in: hFile=0x1740, lpBuffer=0x7a384d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x140afe40, lpOverlapped=0x0 | out: lpBuffer=0x7a384d0*, lpNumberOfBytesWritten=0x140afe40*=0x10c, lpOverlapped=0x0) returned 1 [0213.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0213.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0213.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec64e0 [0213.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3790 [0213.851] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0213.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ac8) returned 1 [0213.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.852] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.852] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="d0") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="27") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="51") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="be") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="52") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="7a") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="fd") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="2d") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="ca") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="21") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="73") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="bc") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="cd") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="f3") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="f3") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="d8") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="92") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="b0") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="f0") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="d7") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="5d") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="38") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="cb") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="14") returned 2 [0213.852] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="2d") returned 2 [0213.853] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="6f") returned 2 [0213.853] RtlInitAnsiString (in: DestinationString=0x140afdc8, SourceString="d02751be527afd2dca2173bccdf3f3d892b0f0d75d38cb142d6f" | out: DestinationString="d02751be527afd2dca2173bccdf3f3d892b0f0d75d38cb142d6f") [0213.853] RtlAnsiStringToUnicodeString (in: DestinationString=0x140afdc0, SourceString="d02751be527afd2dca2173bccdf3f3d892b0f0d75d38cb142d6f", AllocateDestinationString=1 | out: DestinationString="d02751be527afd2dca2173bccdf3f3d892b0f0d75d38cb142d6f") returned 0x0 [0213.853] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa10 Thread: id = 7032 os_tid = 0x228c [0202.666] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json")) returned 0x2020 [0202.666] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0211.197] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1994 [0211.197] GetFileSizeEx (in: hFile=0x1994, lpFileSize=0x993f98c | out: lpFileSize=0x993f98c*=279) returned 1 [0211.198] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x113, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.198] ReadFile (in: hFile=0x1994, lpBuffer=0x993f968, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x993f978, lpOverlapped=0x0 | out: lpBuffer=0x993f968*, lpNumberOfBytesRead=0x993f978*=0x4, lpOverlapped=0x0) returned 1 [0211.199] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e68 [0211.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0211.200] NtQuerySystemTime (in: CurrentTime=0x993f900 | out: CurrentTime=0x993f900*=132462177897720000) returned 0x0 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x7e158e91 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x73eff45 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x2df12606 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x61d0bc83 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x70dcf787 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x6190cbd7 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0xaba8afc [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x782c604a [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x447bf23a [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x4e8ff57b [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x5cde6ac9 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x17c4109e [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x1cd72962 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0xce13a7f [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x7c2c223e [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x36a90a60 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x1afeed70 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x5331a081 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x35ece353 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x2cde9611 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x5f2a0524 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x7ff39668 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x65b8add3 [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x4c6612da [0211.200] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x61d64ba3 [0211.201] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x210b191b [0211.201] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x9b0dfe [0211.201] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x5408089d [0211.201] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x4f0ba32e [0211.201] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x37dc23cf [0211.201] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x450b5351 [0211.201] RtlRandomEx (in: Seed=0x993f8f8 | out: Seed=0x993f8f8) returned 0x12857b2e [0211.211] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.211] WriteFile (in: hFile=0x1994, lpBuffer=0x7db97f8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x993f8f8, lpOverlapped=0x0 | out: lpBuffer=0x7db97f8*, lpNumberOfBytesWritten=0x993f8f8*=0x117, lpOverlapped=0x0) returned 1 [0213.476] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0213.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba78 [0213.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba78) returned 1 [0213.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db97f8) returned 1 [0213.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7db5bf0) returned 1 [0213.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e1c0) returned 1 [0213.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.477] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38430 [0213.477] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.477] WriteFile (in: hFile=0x1994, lpBuffer=0x7a38fc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x993f980, lpOverlapped=0x0 | out: lpBuffer=0x7a38fc0*, lpNumberOfBytesWritten=0x993f980*=0x10c, lpOverlapped=0x0) returned 1 [0213.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.790] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52cc0 [0213.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52cc0) returned 1 [0213.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52cc0 [0213.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53ff8 [0213.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a08 [0213.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a08) returned 1 [0213.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.791] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.791] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="6f") returned 2 [0213.791] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="64") returned 2 [0213.791] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="46") returned 2 [0213.791] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="a5") returned 2 [0213.791] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="67") returned 2 [0213.791] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="46") returned 2 [0213.791] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="68") returned 2 [0213.791] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="8a") returned 2 [0213.791] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="eb") returned 2 [0213.791] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="fc") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="4b") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="7f") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="23") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="ed") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="51") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="0d") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="1a") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="70") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="08") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="bc") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="ad") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="de") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="f1") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="65") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="e9") returned 2 [0213.792] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="11") returned 2 [0213.792] RtlInitAnsiString (in: DestinationString=0x993f908, SourceString="6f6446a56746688aebfc4b7f23ed510d1a7008bcaddef165e911" | out: DestinationString="6f6446a56746688aebfc4b7f23ed510d1a7008bcaddef165e911") [0213.792] RtlAnsiStringToUnicodeString (in: DestinationString=0x993f900, SourceString="6f6446a56746688aebfc4b7f23ed510d1a7008bcaddef165e911", AllocateDestinationString=1 | out: DestinationString="6f6446a56746688aebfc4b7f23ed510d1a7008bcaddef165e911") returned 0x0 [0213.792] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fec0 Thread: id = 7033 os_tid = 0xdcc [0202.667] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0202.667] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0211.212] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10c4 [0211.212] GetFileSizeEx (in: hFile=0x10c4, lpFileSize=0x139af8ec | out: lpFileSize=0x139af8ec*=273) returned 1 [0211.212] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x10d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.212] ReadFile (in: hFile=0x10c4, lpBuffer=0x139af8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x139af8d8, lpOverlapped=0x0 | out: lpBuffer=0x139af8c8*, lpNumberOfBytesRead=0x139af8d8*=0x4, lpOverlapped=0x0) returned 1 [0211.214] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0211.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d28 [0211.214] NtQuerySystemTime (in: CurrentTime=0x139af860 | out: CurrentTime=0x139af860*=132462177897876000) returned 0x0 [0211.214] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x4d0e0cd8 [0211.214] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0xcfc4702 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x26b5cb7d [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x78e43ebd [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x4098554c [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x65bef570 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x5e1ebcbc [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x5618a87d [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x32938d82 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x4e8ff57b [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x50644d [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x312fe0a5 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x482272b8 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0xce13a7f [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x266c1b62 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x158f732b [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x406f4ff8 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x7a58f259 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x5178c346 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x67251e78 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x67b7b0ee [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x4d734a1b [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0xeb0d52d [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x3c592851 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x41bb2a09 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x32938d82 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x4d4fafd8 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x1b16533d [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x78df16db [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x6fa4a921 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x2bf1d04 [0211.215] RtlRandomEx (in: Seed=0x139af858 | out: Seed=0x139af858) returned 0x2440bc69 [0211.224] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.224] WriteFile (in: hFile=0x10c4, lpBuffer=0x7dc1008*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x139af858, lpOverlapped=0x0 | out: lpBuffer=0x7dc1008*, lpNumberOfBytesWritten=0x139af858*=0x111, lpOverlapped=0x0) returned 1 [0215.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3740 [0215.918] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec49d8 [0215.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec49d8) returned 1 [0215.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc1008) returned 1 [0215.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dbd400) returned 1 [0215.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e238) returned 1 [0215.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb60) returned 1 [0215.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e00 [0215.919] SetFilePointerEx (in: hFile=0x10c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.919] WriteFile (in: hFile=0x10c4, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x139af8e0, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x139af8e0*=0x10c, lpOverlapped=0x0) returned 1 [0218.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53350 [0218.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53350) returned 1 [0218.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53350 [0218.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e526f8 [0218.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53800 [0218.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53800) returned 1 [0218.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.160] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.160] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.160] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="49") returned 2 [0218.160] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="5f") returned 2 [0218.160] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="d1") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="c3") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="8b") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="9a") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="71") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="38") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="4b") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="10") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="24") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="80") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="79") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="99") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="99") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="b8") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="0b") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="ad") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="9f") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="8c") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="a6") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="6e") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="b2") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="12") returned 2 [0218.161] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="a7") returned 2 [0218.162] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="97") returned 2 [0218.162] RtlInitAnsiString (in: DestinationString=0x139af868, SourceString="495fd1c38b9a71384b102480799999b80bad9f8ca66eb212a797" | out: DestinationString="495fd1c38b9a71384b102480799999b80bad9f8ca66eb212a797") [0218.162] RtlAnsiStringToUnicodeString (in: DestinationString=0x139af860, SourceString="495fd1c38b9a71384b102480799999b80bad9f8ca66eb212a797", AllocateDestinationString=1 | out: DestinationString="495fd1c38b9a71384b102480799999b80bad9f8ca66eb212a797") returned 0x0 [0218.162] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f560 [0224.943] CloseHandle (hObject=0x10c4) returned 1 [0224.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9f40) returned 1 [0224.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe398) returned 1 Thread: id = 7034 os_tid = 0x2290 [0202.669] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json")) returned 0x2020 [0202.669] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json", dwFileAttributes=0x20) returned 1 [0210.780] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1248 [0210.781] GetFileSizeEx (in: hFile=0x1248, lpFileSize=0x957fd2c | out: lpFileSize=0x957fd2c*=243) returned 1 [0210.781] SetFilePointerEx (in: hFile=0x1248, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.781] ReadFile (in: hFile=0x1248, lpBuffer=0x957fd08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x957fd18, lpOverlapped=0x0 | out: lpBuffer=0x957fd08*, lpNumberOfBytesRead=0x957fd18*=0x4, lpOverlapped=0x0) returned 1 [0210.782] SetFilePointerEx (in: hFile=0x1248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.782] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52fe0 [0210.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b80 [0210.783] NtQuerySystemTime (in: CurrentTime=0x957fca0 | out: CurrentTime=0x957fca0*=132462177893664000) returned 0x0 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x5caa44a2 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x81808 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x31c1ed81 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x7dfd6304 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x4b3e9697 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x346e98fb [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x56c03170 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x71dbef50 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x31d9171a [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x3c610c8 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x74b1564a [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x7ae5a7d0 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x65c3b134 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x7b8f65c6 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x242f096a [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x21c34859 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x54f0eb44 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x4028a7ac [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x29c7c9b9 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x25391b5e [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x15947a55 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0xda639f4 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x35591cc2 [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x2044e97d [0210.783] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x13725bf4 [0210.784] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x6d3b8065 [0210.784] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x76915855 [0210.784] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x496bc80b [0210.784] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x41d01ded [0210.784] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x7c072c52 [0210.784] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x41af6e4a [0210.784] RtlRandomEx (in: Seed=0x957fc98 | out: Seed=0x957fc98) returned 0x5b0b90ae [0210.793] SetFilePointerEx (in: hFile=0x1248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.793] WriteFile (in: hFile=0x1248, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x957fc98, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0x957fc98*=0xf3, lpOverlapped=0x0) returned 1 [0213.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0213.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0213.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0213.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0213.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cea0) returned 1 [0213.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdd60) returned 1 [0213.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37d40 [0213.384] SetFilePointerEx (in: hFile=0x1248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.384] WriteFile (in: hFile=0x1248, lpBuffer=0x7cd3da8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x957fd20, lpOverlapped=0x0 | out: lpBuffer=0x7cd3da8*, lpNumberOfBytesWritten=0x957fd20*=0x10c, lpOverlapped=0x0) returned 1 [0213.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.740] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0213.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0213.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b898 [0213.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0213.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0213.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd38) returned 1 [0213.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.741] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.741] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="1d") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="41") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="d1") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="f5") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="7d") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="32") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="91") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="92") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="33") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="ad") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="e0") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="9e") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="20") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="cb") returned 2 [0213.741] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="2d") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="41") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="1c") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="77") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="40") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="49") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="80") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="0e") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="ad") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="f4") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="79") returned 2 [0213.742] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="b8") returned 2 [0213.742] RtlInitAnsiString (in: DestinationString=0x957fca8, SourceString="1d41d1f57d32919233ade09e20cb2d411c774049800eadf479b8" | out: DestinationString="1d41d1f57d32919233ade09e20cb2d411c774049800eadf479b8") [0213.742] RtlAnsiStringToUnicodeString (in: DestinationString=0x957fca0, SourceString="1d41d1f57d32919233ade09e20cb2d411c774049800eadf479b8", AllocateDestinationString=1 | out: DestinationString="1d41d1f57d32919233ade09e20cb2d411c774049800eadf479b8") returned 0x0 [0213.742] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c3d8 Thread: id = 7035 os_tid = 0x2294 [0202.670] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json")) returned 0x2020 [0202.670] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0210.794] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf70 [0210.795] GetFileSizeEx (in: hFile=0xf70, lpFileSize=0x141af9b4 | out: lpFileSize=0x141af9b4*=281) returned 1 [0210.795] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.795] ReadFile (in: hFile=0xf70, lpBuffer=0x141af990, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x141af9a0, lpOverlapped=0x0 | out: lpBuffer=0x141af990*, lpNumberOfBytesRead=0x141af9a0*=0x4, lpOverlapped=0x0) returned 1 [0210.797] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b80 [0210.797] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52e50 [0210.797] NtQuerySystemTime (in: CurrentTime=0x141af928 | out: CurrentTime=0x141af928*=132462177893820000) returned 0x0 [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x61f9b435 [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x4b87ee7f [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x761fe491 [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x609a7062 [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0xa4fec9a [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x670c99a2 [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x2401a4bf [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x74df2cd0 [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0xff3d0bc [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x633734bf [0210.797] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x30713acb [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x60e92864 [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x1f8d4aab [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x8625bf [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x56bec5d0 [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x33743a4e [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x5d360ffe [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x5df4fcd3 [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x582b3c2f [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x37ee315c [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x5b4cff [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x2de2bd4f [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x4a411054 [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x11408744 [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x3c610c8 [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x6a0ffff5 [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x3e56072b [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x5b9493d4 [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0xf8d9acf [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x352418d2 [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x34e916d5 [0210.798] RtlRandomEx (in: Seed=0x141af920 | out: Seed=0x141af920) returned 0x23f1fbef [0210.807] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.807] WriteFile (in: hFile=0xf70, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x141af920, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0x141af920*=0x119, lpOverlapped=0x0) returned 1 [0213.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbd0 [0213.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0213.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0213.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0213.440] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0213.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ccc0) returned 1 [0213.441] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbde80) returned 1 [0213.441] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37fe0 [0213.441] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.441] WriteFile (in: hFile=0xf70, lpBuffer=0x7cd3ec0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x141af9a8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3ec0*, lpNumberOfBytesWritten=0x141af9a8*=0x10c, lpOverlapped=0x0) returned 1 [0213.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535d0 [0213.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535d0) returned 1 [0213.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e535d0 [0213.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53aa8 [0213.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53990 [0213.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53990) returned 1 [0213.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.755] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.755] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="44") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="44") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="0c") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="09") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="f0") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="55") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="fe") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="e0") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="a6") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="95") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="11") returned 2 [0213.755] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="b5") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="6f") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="53") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="70") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="2d") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="c3") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="a5") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="da") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="0a") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="de") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="63") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="b1") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="3a") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="39") returned 2 [0213.756] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="2a") returned 2 [0213.756] RtlInitAnsiString (in: DestinationString=0x141af930, SourceString="44440c09f055fee0a69511b56f53702dc3a5da0ade63b13a392a" | out: DestinationString="44440c09f055fee0a69511b56f53702dc3a5da0ade63b13a392a") [0213.756] RtlAnsiStringToUnicodeString (in: DestinationString=0x141af928, SourceString="44440c09f055fee0a69511b56f53702dc3a5da0ade63b13a392a", AllocateDestinationString=1 | out: DestinationString="44440c09f055fee0a69511b56f53702dc3a5da0ade63b13a392a") returned 0x0 [0213.756] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c2e8 Thread: id = 7036 os_tid = 0x2298 [0202.670] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cabd00 [0202.671] wcscpy (in: _Dest=0x7cabd00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0202.671] wcscat (in: _Dest=0x7cabd00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\" [0202.671] wcscat (in: _Dest=0x7cabd00, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*" [0202.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54240 [0202.671] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe689cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69479a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d600 [0203.247] wcscmp (_String1=".", _String2=".") returned 0 [0203.247] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe689cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69479a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.247] wcscmp (_String1="..", _String2=".") returned 1 [0203.247] wcscmp (_String1="..", _String2="..") returned 0 [0203.247] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69479a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.247] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.247] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cd6838 [0203.247] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" [0203.247] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\" [0203.247] wcscat (in: _Dest=0x7cd6838, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" [0203.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd6838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0 [0203.309] FindNextFileW (in: hFindFile=0x7a2d600, lpFindFileData=0x7a54240 | out: lpFindFileData=0x7a54240*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69479a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69479a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.309] FindClose (in: hFindFile=0x7a2d600 | out: hFindFile=0x7a2d600) returned 1 [0203.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54240) returned 1 [0203.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cabd00) returned 1 [0203.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa758) returned 1 Thread: id = 7037 os_tid = 0x229c [0202.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cab4c0 [0202.671] wcscpy (in: _Dest=0x7cab4c0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0202.671] wcscat (in: _Dest=0x7cab4c0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\" [0202.671] wcscat (in: _Dest=0x7cab4c0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*" [0202.671] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55580 [0202.671] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b51e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6969c80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0203.245] wcscmp (_String1=".", _String2=".") returned 0 [0203.245] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b51e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6969c80, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.245] wcscmp (_String1="..", _String2=".") returned 1 [0203.245] wcscmp (_String1="..", _String2="..") returned 0 [0203.246] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6969c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.246] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.246] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7cd6960 [0203.246] wcscpy (in: _Dest=0x7cd6960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" [0203.246] wcscat (in: _Dest=0x7cd6960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\" [0203.246] wcscat (in: _Dest=0x7cd6960, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" [0203.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7cd6960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00 [0203.306] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x7a55580 | out: lpFindFileData=0x7a55580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6969c80, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6969c80, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.306] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0203.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55580) returned 1 [0203.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab4c0) returned 1 [0203.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6130) returned 1 Thread: id = 7038 os_tid = 0x22a0 [0202.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa860 [0202.672] wcscpy (in: _Dest=0x7caa860, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0202.672] wcscat (in: _Dest=0x7caa860, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\" [0202.672] wcscat (in: _Dest=0x7caa860, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*" [0202.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a550b0 [0202.672] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b03c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6964e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf590 [0203.452] wcscmp (_String1=".", _String2=".") returned 0 [0203.452] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68b03c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6964e60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.452] wcscmp (_String1="..", _String2=".") returned 1 [0203.452] wcscmp (_String1="..", _String2="..") returned 0 [0203.452] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6964e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.452] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.452] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a67d78 [0203.452] wcscpy (in: _Dest=0x7a67d78, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" [0203.452] wcscat (in: _Dest=0x7a67d78, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\" [0203.452] wcscat (in: _Dest=0x7a67d78, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" [0203.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67d78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc [0203.772] FindNextFileW (in: hFindFile=0x3dcf590, lpFindFileData=0x7a550b0 | out: lpFindFileData=0x7a550b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6964e60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6964e60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xbe293f00, ftLastWriteTime.dwHighDateTime=0x1cccb53, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.772] FindClose (in: hFindFile=0x3dcf590 | out: hFindFile=0x3dcf590) returned 1 [0203.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a550b0) returned 1 [0203.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa860) returned 1 [0203.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad50b0) returned 1 Thread: id = 7039 os_tid = 0xdb0 [0202.672] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa650 [0202.672] wcscpy (in: _Dest=0x7caa650, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0202.672] wcscat (in: _Dest=0x7caa650, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\" [0202.673] wcscat (in: _Dest=0x7caa650, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*" [0202.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a54e48 [0202.673] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c3c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6982320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf7d0 [0203.451] wcscmp (_String1=".", _String2=".") returned 0 [0203.451] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68c3c40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6982320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.451] wcscmp (_String1="..", _String2=".") returned 1 [0203.451] wcscmp (_String1="..", _String2="..") returned 0 [0203.451] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6982320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.451] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.451] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.451] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a67c50 [0203.451] wcscpy (in: _Dest=0x7a67c50, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" [0203.451] wcscat (in: _Dest=0x7a67c50, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\" [0203.451] wcscat (in: _Dest=0x7a67c50, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" [0203.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c38 [0203.770] FindNextFileW (in: hFindFile=0x3dcf7d0, lpFindFileData=0x7a54e48 | out: lpFindFileData=0x7a54e48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6982320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6982320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.770] FindClose (in: hFindFile=0x3dcf7d0 | out: hFindFile=0x3dcf7d0) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a54e48) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa650) returned 1 [0203.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad56e0) returned 1 Thread: id = 7040 os_tid = 0x22b0 [0202.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa548 [0202.673] wcscpy (in: _Dest=0x7caa548, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0202.673] wcscat (in: _Dest=0x7caa548, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\" [0202.673] wcscat (in: _Dest=0x7caa548, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*" [0202.673] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53fd8 [0202.673] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68907f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6936830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfc10 [0203.450] wcscmp (_String1=".", _String2=".") returned 0 [0203.450] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68907f0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6936830, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.450] wcscmp (_String1="..", _String2=".") returned 1 [0203.450] wcscmp (_String1="..", _String2="..") returned 0 [0203.450] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6936830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.450] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.450] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a67b28 [0203.450] wcscpy (in: _Dest=0x7a67b28, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" [0203.450] wcscat (in: _Dest=0x7a67b28, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\" [0203.450] wcscat (in: _Dest=0x7a67b28, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" [0203.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c30 [0203.767] FindNextFileW (in: hFindFile=0x3dcfc10, lpFindFileData=0x7a53fd8 | out: lpFindFileData=0x7a53fd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6936830, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6936830, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.768] FindClose (in: hFindFile=0x3dcfc10 | out: hFindFile=0x3dcfc10) returned 1 [0203.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53fd8) returned 1 [0203.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa548) returned 1 [0203.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad55d8) returned 1 Thread: id = 7041 os_tid = 0xdc4 [0202.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caa440 [0202.674] wcscpy (in: _Dest=0x7caa440, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0202.674] wcscat (in: _Dest=0x7caa440, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\" [0202.674] wcscat (in: _Dest=0x7caa440, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*" [0202.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a53d70 [0202.674] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68efb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c41d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf950 [0203.449] wcscmp (_String1=".", _String2=".") returned 0 [0203.449] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68efb60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69c41d0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.449] wcscmp (_String1="..", _String2=".") returned 1 [0203.449] wcscmp (_String1="..", _String2="..") returned 0 [0203.449] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c41d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.449] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.449] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a67a00 [0203.449] wcscpy (in: _Dest=0x7a67a00, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" [0203.450] wcscat (in: _Dest=0x7a67a00, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\" [0203.450] wcscat (in: _Dest=0x7a67a00, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" [0203.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c2c [0203.765] FindNextFileW (in: hFindFile=0x3dcf950, lpFindFileData=0x7a53d70 | out: lpFindFileData=0x7a53d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69c41d0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69c41d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.766] FindClose (in: hFindFile=0x3dcf950 | out: hFindFile=0x3dcf950) returned 1 [0203.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a53d70) returned 1 [0203.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caa440) returned 1 [0203.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad53c8) returned 1 Thread: id = 7042 os_tid = 0xdc8 [0202.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cab7d8 [0202.675] wcscpy (in: _Dest=0x7cab7d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0202.675] wcscat (in: _Dest=0x7cab7d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\" [0202.675] wcscat (in: _Dest=0x7cab7d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*" [0202.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a544a8 [0202.675] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690d020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e8bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e8bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfa50 [0203.448] wcscmp (_String1=".", _String2=".") returned 0 [0203.448] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe690d020, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69e8bc0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69e8bc0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.448] wcscmp (_String1="..", _String2=".") returned 1 [0203.448] wcscmp (_String1="..", _String2="..") returned 0 [0203.448] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e8bc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69eb2d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.448] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.449] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a678d8 [0203.449] wcscpy (in: _Dest=0x7a678d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" [0203.449] wcscat (in: _Dest=0x7a678d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\" [0203.449] wcscat (in: _Dest=0x7a678d8, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" [0203.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a678d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c28 [0203.764] FindNextFileW (in: hFindFile=0x3dcfa50, lpFindFileData=0x7a544a8 | out: lpFindFileData=0x7a544a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69e8bc0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69eb2d0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.764] FindClose (in: hFindFile=0x3dcfa50 | out: hFindFile=0x3dcfa50) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a544a8) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab7d8) returned 1 [0203.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6e98) returned 1 Thread: id = 7043 os_tid = 0x104c [0202.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cab8e0 [0202.675] wcscpy (in: _Dest=0x7cab8e0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0202.675] wcscat (in: _Dest=0x7cab8e0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\" [0202.675] wcscat (in: _Dest=0x7cab8e0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*" [0202.675] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a52090 [0202.675] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe687a860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6914550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcfbd0 [0203.447] wcscmp (_String1=".", _String2=".") returned 0 [0203.447] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe687a860, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6914550, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.447] wcscmp (_String1="..", _String2=".") returned 1 [0203.447] wcscmp (_String1="..", _String2="..") returned 0 [0203.447] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6914550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.448] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.448] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.448] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a677b0 [0203.448] wcscpy (in: _Dest=0x7a677b0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" [0203.448] wcscat (in: _Dest=0x7a677b0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\" [0203.448] wcscat (in: _Dest=0x7a677b0, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" [0203.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a677b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0 [0203.762] FindNextFileW (in: hFindFile=0x3dcfbd0, lpFindFileData=0x7a52090 | out: lpFindFileData=0x7a52090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe6914550, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe6914550, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b56f20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.762] FindClose (in: hFindFile=0x3dcfbd0 | out: hFindFile=0x3dcfbd0) returned 1 [0203.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a52090) returned 1 [0203.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab8e0) returned 1 [0203.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad52c0) returned 1 Thread: id = 7044 os_tid = 0x1054 [0202.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7caaa70 [0202.676] wcscpy (in: _Dest=0x7caaa70, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0202.676] wcscat (in: _Dest=0x7caaa70, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\" [0202.676] wcscat (in: _Dest=0x7caaa70, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*" [0202.676] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a522f8 [0202.676] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe695d930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf910 [0203.446] wcscmp (_String1=".", _String2=".") returned 0 [0203.446] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ab5a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe695d930, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.446] wcscmp (_String1="..", _String2=".") returned 1 [0203.446] wcscmp (_String1="..", _String2="..") returned 0 [0203.446] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe695d930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.447] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.447] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a67688 [0203.447] wcscpy (in: _Dest=0x7a67688, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" [0203.447] wcscat (in: _Dest=0x7a67688, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\" [0203.447] wcscat (in: _Dest=0x7a67688, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" [0203.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1404 [0203.760] FindNextFileW (in: hFindFile=0x3dcf910, lpFindFileData=0x7a522f8 | out: lpFindFileData=0x7a522f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe695d930, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe695d930, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.760] FindClose (in: hFindFile=0x3dcf910 | out: hFindFile=0x3dcf910) returned 1 [0203.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a522f8) returned 1 [0203.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caaa70) returned 1 [0203.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6d90) returned 1 Thread: id = 7045 os_tid = 0x1fa4 [0202.688] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xfe) returned 0x7cab9e8 [0202.688] wcscpy (in: _Dest=0x7cab9e8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0202.688] wcscat (in: _Dest=0x7cab9e8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\" [0202.689] wcscat (in: _Dest=0x7cab9e8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*" [0202.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a55cb8 [0202.689] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e3810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b3060, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcff90 [0203.434] wcscmp (_String1=".", _String2=".") returned 0 [0203.434] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e3810, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69b3060, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.435] wcscmp (_String1="..", _String2=".") returned 1 [0203.435] wcscmp (_String1="..", _String2="..") returned 0 [0203.435] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b3060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.435] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.435] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x116) returned 0x7a67560 [0203.435] wcscpy (in: _Dest=0x7a67560, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" [0203.435] wcscat (in: _Dest=0x7a67560, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\" [0203.437] wcscat (in: _Dest=0x7a67560, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" [0203.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c24 [0203.758] FindNextFileW (in: hFindFile=0x3dcff90, lpFindFileData=0x7a55cb8 | out: lpFindFileData=0x7a55cb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69b3060, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69b3060, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.758] FindClose (in: hFindFile=0x3dcff90 | out: hFindFile=0x3dcff90) returned 1 [0203.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a55cb8) returned 1 [0203.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cab9e8) returned 1 [0203.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6c88) returned 1 Thread: id = 7046 os_tid = 0x1154 [0202.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a38b60 [0202.689] wcscpy (in: _Dest=0x7a38b60, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0202.689] wcscat (in: _Dest=0x7a38b60, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\" [0202.689] wcscat (in: _Dest=0x7a38b60, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*" [0202.689] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0202.689] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e1100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69abb30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf710 [0203.433] wcscmp (_String1=".", _String2=".") returned 0 [0203.433] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68e1100, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69abb30, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.434] wcscmp (_String1="..", _String2=".") returned 1 [0203.434] wcscmp (_String1="..", _String2="..") returned 0 [0203.434] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69abb30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.434] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.434] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7a67438 [0203.434] wcscpy (in: _Dest=0x7a67438, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" [0203.434] wcscat (in: _Dest=0x7a67438, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\" [0203.434] wcscat (in: _Dest=0x7a67438, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" [0203.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c20 [0203.756] FindNextFileW (in: hFindFile=0x3dcf710, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69abb30, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69abb30, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.756] FindClose (in: hFindFile=0x3dcf710 | out: hFindFile=0x3dcf710) returned 1 [0203.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0203.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a38b60) returned 1 [0203.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad54d0) returned 1 Thread: id = 7047 os_tid = 0x1464 [0202.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x104) returned 0x7a390d8 [0202.690] wcscpy (in: _Dest=0x7a390d8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0202.690] wcscat (in: _Dest=0x7a390d8, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\" [0202.690] wcscat (in: _Dest=0x7a390d8, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*" [0202.690] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337b68 [0202.690] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3dcf990 [0203.433] wcscmp (_String1=".", _String2=".") returned 0 [0203.433] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe68ed450, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bcca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe69bcca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.433] wcscmp (_String1="..", _String2=".") returned 1 [0203.433] wcscmp (_String1="..", _String2="..") returned 0 [0203.433] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69bcca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bf3b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0203.433] wcscmp (_String1="messages.json", _String2=".") returned 1 [0203.433] wcscmp (_String1="messages.json", _String2="..") returned 1 [0203.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11c) returned 0x7a67310 [0203.433] wcscpy (in: _Dest=0x7a67310, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" [0203.433] wcscat (in: _Dest=0x7a67310, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\" [0203.433] wcscat (in: _Dest=0x7a67310, _Source="messages.json" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" [0203.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x7a67310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c18 [0203.753] FindNextFileW (in: hFindFile=0x3dcf990, lpFindFileData=0x337b68 | out: lpFindFileData=0x337b68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe69bcca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe69bf3b0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe6b59630, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0203.753] FindClose (in: hFindFile=0x3dcf990 | out: hFindFile=0x3dcf990) returned 1 [0203.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337b68) returned 1 [0203.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a390d8) returned 1 [0203.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ad6b80) returned 1 Thread: id = 7048 os_tid = 0x1450 [0202.691] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json")) returned 0x2020 [0203.899] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0213.259] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1054 [0213.259] GetFileSizeEx (in: hFile=0x1054, lpFileSize=0x1453f7f4 | out: lpFileSize=0x1453f7f4*=197) returned 1 [0213.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0213.260] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0213.260] NtQuerySystemTime (in: CurrentTime=0x1453f768 | out: CurrentTime=0x1453f768*=132462177918312000) returned 0x0 [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x35da1acf [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x73de1d15 [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x4dd53e59 [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x6748bb6d [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x1c3fde94 [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x56191758 [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x3ce2d20b [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x3ffde8fd [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x650f8ba8 [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x4a118af [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x2fcc1369 [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x52914d59 [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x3c0c77c3 [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x6d20a9c4 [0213.260] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x5efb76ff [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x7fe5e970 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x3a776159 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x45142342 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x306bc88 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x17e2c740 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x739a5c00 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x7d5ae4d1 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x723c5b87 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x1dc8d422 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x574019cb [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x5251a1c8 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x7a62b11d [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x5fb23d61 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x175920af [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x682ba792 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0xccd61b3 [0213.261] RtlRandomEx (in: Seed=0x1453f760 | out: Seed=0x1453f760) returned 0x5ee38d24 [0213.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b4cf48 [0213.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b50b50 [0213.269] ReadFile (in: hFile=0x1054, lpBuffer=0x7b4cf48, nNumberOfBytesToRead=0xc5, lpNumberOfBytesRead=0x1453f75c, lpOverlapped=0x0 | out: lpBuffer=0x7b4cf48*, lpNumberOfBytesRead=0x1453f75c*=0xc5, lpOverlapped=0x0) returned 1 [0213.271] SetFilePointerEx (in: hFile=0x1054, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.271] WriteFile (in: hFile=0x1054, lpBuffer=0x7b50b50*, nNumberOfBytesToWrite=0xc5, lpNumberOfBytesWritten=0x1453f760, lpOverlapped=0x0 | out: lpBuffer=0x7b50b50*, lpNumberOfBytesWritten=0x1453f760*=0xc5, lpOverlapped=0x0) returned 1 [0215.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0215.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3588 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3588) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b50b50) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b4cf48) returned 1 [0215.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e2b0) returned 1 [0215.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095b40) returned 1 [0215.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0215.947] SetFilePointerEx (in: hFile=0x1054, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.947] WriteFile (in: hFile=0x1054, lpBuffer=0x7ddafa8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1453f7e8, lpOverlapped=0x0 | out: lpBuffer=0x7ddafa8*, lpNumberOfBytesWritten=0x1453f7e8*=0x10c, lpOverlapped=0x0) returned 1 [0219.996] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3eeb390 [0219.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c180 [0219.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb68 [0219.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb68) returned 1 [0219.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bb68 [0219.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb40 [0219.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0219.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c9f0) returned 1 [0219.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c180) returned 1 [0219.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb390) returned 1 [0219.997] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0219.997] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="26") returned 2 [0219.997] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="67") returned 2 [0219.997] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="1f") returned 2 [0219.997] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="db") returned 2 [0219.997] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="89") returned 2 [0219.997] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="bb") returned 2 [0219.997] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="57") returned 2 [0219.997] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="8e") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="b0") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="8b") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="07") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="6f") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="38") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="cd") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="5b") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="40") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="48") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="ba") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="e7") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="cd") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="83") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="70") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="1b") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="02") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="da") returned 2 [0219.998] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="d6") returned 2 [0219.998] RtlInitAnsiString (in: DestinationString=0x1453f770, SourceString="26671fdb89bb578eb08b076f38cd5b4048bae7cd83701b02dad6" | out: DestinationString="26671fdb89bb578eb08b076f38cd5b4048bae7cd83701b02dad6") [0219.998] RtlAnsiStringToUnicodeString (in: DestinationString=0x1453f768, SourceString="26671fdb89bb578eb08b076f38cd5b4048bae7cd83701b02dad6", AllocateDestinationString=1 | out: DestinationString="26671fdb89bb578eb08b076f38cd5b4048bae7cd83701b02dad6") returned 0x0 [0219.998] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c630 [0224.274] CloseHandle (hObject=0x2250) returned 1 [0224.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb24c0) returned 1 [0224.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b837f0) returned 1 Thread: id = 7049 os_tid = 0xad4 [0202.691] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json")) returned 0x2020 [0203.915] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", dwFileAttributes=0x20) returned 1 [0215.519] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2310 [0215.520] GetFileSizeEx (in: hFile=0x2310, lpFileSize=0x144ef8d4 | out: lpFileSize=0x144ef8d4*=334) returned 1 [0215.520] SetFilePointerEx (in: hFile=0x2310, liDistanceToMove=0x14a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.520] ReadFile (in: hFile=0x2310, lpBuffer=0x144ef8b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x144ef8c0, lpOverlapped=0x0 | out: lpBuffer=0x144ef8b0*, lpNumberOfBytesRead=0x144ef8c0*=0x4, lpOverlapped=0x0) returned 1 [0215.521] SetFilePointerEx (in: hFile=0x2310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0215.522] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0215.522] NtQuerySystemTime (in: CurrentTime=0x144ef848 | out: CurrentTime=0x144ef848*=132462177940932000) returned 0x0 [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x7629c315 [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x6cfbd3a8 [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0xeb2a057 [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x641a1fd0 [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x7e5d6a5c [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x439136cd [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x59af0efe [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x61b1ae37 [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x3cf1fbc [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x655fb9e [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x66e9b5d4 [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x52242df5 [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0xbb8c71c [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x569d057 [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x4a5b7432 [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x3a798d2e [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x9e32b3b [0215.522] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x2d08225f [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x24e0828f [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x537f3c24 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x4cc90213 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x1e8f59a5 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x7abf8c38 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x7e4b84a9 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x670c8de8 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x3fb302a2 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x54b757e3 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x71cd2de3 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x463e55d [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x72910ba8 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x752f8524 [0215.523] RtlRandomEx (in: Seed=0x144ef840 | out: Seed=0x144ef840) returned 0x44896e43 [0215.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e40cc8 [0215.531] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e448d0 [0215.531] ReadFile (in: hFile=0x2310, lpBuffer=0x10e40cc8, nNumberOfBytesToRead=0x14e, lpNumberOfBytesRead=0x144ef83c, lpOverlapped=0x0 | out: lpBuffer=0x10e40cc8*, lpNumberOfBytesRead=0x144ef83c*=0x14e, lpOverlapped=0x0) returned 1 [0215.531] SetFilePointerEx (in: hFile=0x2310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.532] WriteFile (in: hFile=0x2310, lpBuffer=0x10e448d0*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x144ef840, lpOverlapped=0x0 | out: lpBuffer=0x10e448d0*, lpNumberOfBytesWritten=0x144ef840*=0x14e, lpOverlapped=0x0) returned 1 [0218.109] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3268 [0218.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6788 [0218.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6788) returned 1 [0218.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e448d0) returned 1 [0218.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e40cc8) returned 1 [0218.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06ad0) returned 1 [0218.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb88d8) returned 1 [0218.110] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acde8 [0218.110] SetFilePointerEx (in: hFile=0x2310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.110] WriteFile (in: hFile=0x2310, lpBuffer=0x7cbab10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x144ef8c8, lpOverlapped=0x0 | out: lpBuffer=0x7cbab10*, lpNumberOfBytesWritten=0x144ef8c8*=0x10c, lpOverlapped=0x0) returned 1 [0222.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24590 [0222.650] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0222.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c748 [0222.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c748) returned 1 [0222.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c748 [0222.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5b8 [0222.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b528 [0222.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b528) returned 1 [0222.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0222.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24590) returned 1 [0222.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0222.651] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="1a") returned 2 [0222.651] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="d6") returned 2 [0222.651] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="2a") returned 2 [0222.651] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="38") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="8e") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="b8") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="c4") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="fc") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="2f") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="3d") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="a8") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="64") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="6f") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="4f") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="fa") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="b5") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="56") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="0c") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="d6") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="14") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="a1") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="a2") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="e6") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="61") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="f5") returned 2 [0222.652] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="30") returned 2 [0222.652] RtlInitAnsiString (in: DestinationString=0x144ef850, SourceString="1ad62a388eb8c4fc2f3da8646f4ffab5560cd614a1a2e661f530" | out: DestinationString="1ad62a388eb8c4fc2f3da8646f4ffab5560cd614a1a2e661f530") [0222.652] RtlAnsiStringToUnicodeString (in: DestinationString=0x144ef848, SourceString="1ad62a388eb8c4fc2f3da8646f4ffab5560cd614a1a2e661f530", AllocateDestinationString=1 | out: DestinationString="1ad62a388eb8c4fc2f3da8646f4ffab5560cd614a1a2e661f530") returned 0x0 [0222.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e06ad0 [0224.349] CloseHandle (hObject=0x2250) returned 1 [0224.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2960) returned 1 [0224.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b835a0) returned 1 Thread: id = 7050 os_tid = 0x11e4 [0202.691] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json")) returned 0x2020 [0203.917] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0215.532] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1690 [0215.533] GetFileSizeEx (in: hFile=0x1690, lpFileSize=0xfecfdd4 | out: lpFileSize=0xfecfdd4*=281) returned 1 [0215.533] SetFilePointerEx (in: hFile=0x1690, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.533] ReadFile (in: hFile=0x1690, lpBuffer=0xfecfdb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfecfdc0, lpOverlapped=0x0 | out: lpBuffer=0xfecfdb0*, lpNumberOfBytesRead=0xfecfdc0*=0x4, lpOverlapped=0x0) returned 1 [0215.535] SetFilePointerEx (in: hFile=0x1690, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0215.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0215.535] NtQuerySystemTime (in: CurrentTime=0xfecfd48 | out: CurrentTime=0xfecfd48*=132462177941088000) returned 0x0 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x30f9df39 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x8813cff [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x5b176b6 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x7ad73e16 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x37c8b405 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x752f8524 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x6e3a8096 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x7ae1868 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x5d6e8710 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x76722dd [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x4dcf9a7e [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x3856e7af [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x298b3bc2 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x502486b4 [0215.535] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x10414491 [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x5a6d7c12 [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x4ed2b17a [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x1aa03d83 [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x3e5477b3 [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x244d4673 [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x4e254bfe [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x5526599c [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x20ac2eb [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x3b6fc48b [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x5d13aa4 [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x7abf8c38 [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x46d183b6 [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x5cdda226 [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x21d2c588 [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x7f1aec3e [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x785983ec [0215.536] RtlRandomEx (in: Seed=0xfecfd40 | out: Seed=0xfecfd40) returned 0x9b4b91b [0215.548] SetFilePointerEx (in: hFile=0x1690, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.548] WriteFile (in: hFile=0x1690, lpBuffer=0x10e4c0e0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xfecfd40, lpOverlapped=0x0 | out: lpBuffer=0x10e4c0e0*, lpNumberOfBytesWritten=0xfecfd40*=0x119, lpOverlapped=0x0) returned 1 [0218.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3010 [0218.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5540 [0218.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5540) returned 1 [0218.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e4c0e0) returned 1 [0218.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e484d8) returned 1 [0218.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0218.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb82a8) returned 1 [0218.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc3b18 [0218.115] SetFilePointerEx (in: hFile=0x1690, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.115] WriteFile (in: hFile=0x1690, lpBuffer=0x7cbac28*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfecfdc8, lpOverlapped=0x0 | out: lpBuffer=0x7cbac28*, lpNumberOfBytesWritten=0xfecfdc8*=0x10c, lpOverlapped=0x0) returned 1 [0218.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca788 [0218.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca788) returned 1 [0218.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca788 [0218.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab20 [0218.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc95b8 [0218.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc95b8) returned 1 [0218.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.456] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="6f") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="4f") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="e4") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="6b") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="f2") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="e2") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="d1") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="81") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="26") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="0a") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="af") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="ae") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="16") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="e7") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="ff") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="50") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="38") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="c9") returned 2 [0218.456] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="cc") returned 2 [0218.457] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="9b") returned 2 [0218.457] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="3a") returned 2 [0218.457] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="0e") returned 2 [0218.457] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="45") returned 2 [0218.457] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="e3") returned 2 [0218.457] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="a1") returned 2 [0218.457] RtlInitAnsiString (in: DestinationString=0xfecfd50, SourceString="6f4fe42d6bf2e2d181260aafae16e7ff5038c9cc9b3a0e45e3a1" | out: DestinationString="6f4fe42d6bf2e2d181260aafae16e7ff5038c9cc9b3a0e45e3a1") [0218.457] RtlAnsiStringToUnicodeString (in: DestinationString=0xfecfd48, SourceString="6f4fe42d6bf2e2d181260aafae16e7ff5038c9cc9b3a0e45e3a1", AllocateDestinationString=1 | out: DestinationString="6f4fe42d6bf2e2d181260aafae16e7ff5038c9cc9b3a0e45e3a1") returned 0x0 [0218.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e670 [0224.252] CloseHandle (hObject=0x2250) returned 1 [0224.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb33c8) returned 1 [0224.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b828e8) returned 1 Thread: id = 7051 os_tid = 0x213c [0202.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json")) returned 0x2020 [0203.918] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0215.548] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13e0 [0215.549] GetFileSizeEx (in: hFile=0x13e0, lpFileSize=0x1034fafc | out: lpFileSize=0x1034fafc*=175) returned 1 [0215.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec36c8 [0215.549] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0215.550] NtQuerySystemTime (in: CurrentTime=0x1034fa70 | out: CurrentTime=0x1034fa70*=132462177941244000) returned 0x0 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x129acba9 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0xdf44ea7 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x244d4673 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x1882951d [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x234a17f [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x53d94329 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x62e78325 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x5432c4f0 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x72910ba8 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x56fb0752 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x25fd2def [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x76722dd [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x6c43b54a [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x36985bfd [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x9e3b56e [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x6163069e [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x13deaf16 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x25419c10 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x7687c015 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0xbe9c60f [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x4d79e8fe [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x786a990a [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x59695035 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x48ba4a40 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x1bbf1400 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x815f1b1 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x5b3e4b3d [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x15b548a0 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x18efe57 [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x42a8a32b [0215.550] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x1479a83d [0215.551] RtlRandomEx (in: Seed=0x1034fa68 | out: Seed=0x1034fa68) returned 0x2d01ffca [0215.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.560] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d103a0 [0215.565] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d13fa8 [0215.566] ReadFile (in: hFile=0x13e0, lpBuffer=0x7d103a0, nNumberOfBytesToRead=0xaf, lpNumberOfBytesRead=0x1034fa64, lpOverlapped=0x0 | out: lpBuffer=0x7d103a0*, lpNumberOfBytesRead=0x1034fa64*=0xaf, lpOverlapped=0x0) returned 1 [0215.568] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.568] WriteFile (in: hFile=0x13e0, lpBuffer=0x7d13fa8*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x1034fa68, lpOverlapped=0x0 | out: lpBuffer=0x7d13fa8*, lpNumberOfBytesWritten=0x1034fa68*=0xaf, lpOverlapped=0x0) returned 1 [0218.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2890 [0218.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29f8 [0218.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29f8) returned 1 [0218.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d13fa8) returned 1 [0218.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d103a0) returned 1 [0218.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e07610) returned 1 [0218.121] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8920) returned 1 [0218.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3010278 [0218.121] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.121] WriteFile (in: hFile=0x13e0, lpBuffer=0x7cbae58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1034faf0, lpOverlapped=0x0 | out: lpBuffer=0x7cbae58*, lpNumberOfBytesWritten=0x1034faf0*=0x10c, lpOverlapped=0x0) returned 1 [0218.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b78 [0218.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b78) returned 1 [0218.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3b78 [0218.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec48e8 [0218.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0218.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3038) returned 1 [0218.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.467] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="e2") returned 2 [0218.467] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="c8") returned 2 [0218.467] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="b2") returned 2 [0218.467] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="b8") returned 2 [0218.467] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="eb") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="ef") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="15") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="a9") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="4e") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="a5") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="47") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="de") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="78") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="24") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="3d") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="d7") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="47") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="72") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="87") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="54") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="7c") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="6c") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="0f") returned 2 [0218.468] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.468] RtlInitAnsiString (in: DestinationString=0x1034fa78, SourceString="e2c8b2b83eebef15a94ea547de78243dd74772dd87547c6c0fca" | out: DestinationString="e2c8b2b83eebef15a94ea547de78243dd74772dd87547c6c0fca") [0218.468] RtlAnsiStringToUnicodeString (in: DestinationString=0x1034fa70, SourceString="e2c8b2b83eebef15a94ea547de78243dd74772dd87547c6c0fca", AllocateDestinationString=1 | out: DestinationString="e2c8b2b83eebef15a94ea547de78243dd74772dd87547c6c0fca") returned 0x0 [0218.468] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e3a0 [0224.263] CloseHandle (hObject=0x2250) returned 1 [0224.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb25e8) returned 1 [0224.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82698) returned 1 Thread: id = 7052 os_tid = 0x2140 [0202.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0203.918] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0213.271] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1458 [0213.272] GetFileSizeEx (in: hFile=0x1458, lpFileSize=0xe97fca4 | out: lpFileSize=0xe97fca4*=198) returned 1 [0213.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0213.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0213.272] NtQuerySystemTime (in: CurrentTime=0xe97fc18 | out: CurrentTime=0xe97fc18*=132462177918468000) returned 0x0 [0213.272] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0xd3929fd [0213.272] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x6802e276 [0213.272] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x4083117f [0213.272] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x23bee8fc [0213.272] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x36429fa8 [0213.272] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x70bea29d [0213.272] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x25e2295b [0213.272] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x6d7ca432 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x1339cf3b [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x3bbd06d8 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x671c8f7c [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x67acc59b [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x574019cb [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x4152e874 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x1d56e120 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0xed679b8 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x259df1 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x4fffbf78 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x7947f5b1 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x23a6a25b [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x3f7e9152 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x4152e874 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x3bd6fba2 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x248433f7 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x5d7e2f71 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x2f9be900 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x19595d63 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x7f12f932 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x183e39b6 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x61ebd871 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x498794d9 [0213.273] RtlRandomEx (in: Seed=0xe97fc10 | out: Seed=0xe97fc10) returned 0x4283c31 [0213.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b54758 [0213.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b58360 [0213.282] ReadFile (in: hFile=0x1458, lpBuffer=0x7b54758, nNumberOfBytesToRead=0xc6, lpNumberOfBytesRead=0xe97fc0c, lpOverlapped=0x0 | out: lpBuffer=0x7b54758*, lpNumberOfBytesRead=0xe97fc0c*=0xc6, lpOverlapped=0x0) returned 1 [0213.285] SetFilePointerEx (in: hFile=0x1458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.285] WriteFile (in: hFile=0x1458, lpBuffer=0x7b58360*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0xe97fc10, lpOverlapped=0x0 | out: lpBuffer=0x7b58360*, lpNumberOfBytesWritten=0xe97fc10*=0xc6, lpOverlapped=0x0) returned 1 [0215.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0215.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3330 [0215.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3330) returned 1 [0215.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b58360) returned 1 [0215.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b54758) returned 1 [0215.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e328) returned 1 [0215.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095c18) returned 1 [0215.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37f80 [0215.945] SetFilePointerEx (in: hFile=0x1458, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.945] WriteFile (in: hFile=0x1458, lpBuffer=0x7ddae90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe97fc98, lpOverlapped=0x0 | out: lpBuffer=0x7ddae90*, lpNumberOfBytesWritten=0xe97fc98*=0x10c, lpOverlapped=0x0) returned 1 [0218.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bff0 [0218.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bff0) returned 1 [0218.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bff0 [0218.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf00 [0218.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0218.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c040) returned 1 [0218.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.238] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.239] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="66") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="7b") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="1e") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="05") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="65") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="a2") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="a4") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="7e") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="92") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="b9") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="3d") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="18") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="ef") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="72") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="ba") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="f5") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="8c") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="61") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="47") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="af") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="0a") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="0e") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="1c") returned 2 [0218.239] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="6c") returned 2 [0218.240] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="ee") returned 2 [0218.240] RtlInitAnsiString (in: DestinationString=0xe97fc20, SourceString="667b1e0565a2a47e92b93d18ef72ddbaf58c6147af0a0e1c6cee" | out: DestinationString="667b1e0565a2a47e92b93d18ef72ddbaf58c6147af0a0e1c6cee") [0218.240] RtlAnsiStringToUnicodeString (in: DestinationString=0xe97fc18, SourceString="667b1e0565a2a47e92b93d18ef72ddbaf58c6147af0a0e1c6cee", AllocateDestinationString=1 | out: DestinationString="667b1e0565a2a47e92b93d18ef72ddbaf58c6147af0a0e1c6cee") returned 0x0 [0218.240] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fdd0 [0224.810] __SEH_epilog4 () [0224.810] CloseHandle (hObject=0x1248) returned 1 [0224.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cafc28) returned 1 [0224.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82a10) returned 1 Thread: id = 7053 os_tid = 0x2144 [0202.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0203.919] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0213.285] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x57c [0213.286] GetFileSizeEx (in: hFile=0x57c, lpFileSize=0x107efe94 | out: lpFileSize=0x107efe94*=187) returned 1 [0213.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0213.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0213.286] NtQuerySystemTime (in: CurrentTime=0x107efe08 | out: CurrentTime=0x107efe08*=132462177918624000) returned 0x0 [0213.286] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x5efb76ff [0213.286] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x59b489cb [0213.286] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x5a6a6ee0 [0213.286] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x7d5ae4d1 [0213.286] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x5d7e2f71 [0213.286] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x31bd2beb [0213.286] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x5251a1c8 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x17e2c740 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x2f50c5ec [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x682ba792 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x129890aa [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x2c521525 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x75254f04 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x60969747 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x5417eb8d [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x1dc8d422 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x12e7de76 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x74eb70d1 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x53dd089b [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x671c8f7c [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x7006a4ea [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x87e69cb [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x36aa1d2e [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x7b8e3c75 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x6d20a9c4 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x53b40fec [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x36429fa8 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x442c2706 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x37b76eca [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x6de867f0 [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x65e9867e [0213.287] RtlRandomEx (in: Seed=0x107efe00 | out: Seed=0x107efe00) returned 0x13e991f [0213.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5bf68 [0213.296] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b5fb70 [0213.296] ReadFile (in: hFile=0x57c, lpBuffer=0x7b5bf68, nNumberOfBytesToRead=0xbb, lpNumberOfBytesRead=0x107efdfc, lpOverlapped=0x0 | out: lpBuffer=0x7b5bf68*, lpNumberOfBytesRead=0x107efdfc*=0xbb, lpOverlapped=0x0) returned 1 [0213.298] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.298] WriteFile (in: hFile=0x57c, lpBuffer=0x7b5fb70*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x107efe00, lpOverlapped=0x0 | out: lpBuffer=0x7b5fb70*, lpNumberOfBytesWritten=0x107efe00*=0xbb, lpOverlapped=0x0) returned 1 [0215.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3470 [0215.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ac0 [0215.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ac0) returned 1 [0215.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5fb70) returned 1 [0215.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b5bf68) returned 1 [0215.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dc98) returned 1 [0215.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096050) returned 1 [0215.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e60 [0215.948] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.948] WriteFile (in: hFile=0x57c, lpBuffer=0x7ddb0c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x107efe88, lpOverlapped=0x0 | out: lpBuffer=0x7ddb0c0*, lpNumberOfBytesWritten=0x107efe88*=0x10c, lpOverlapped=0x0) returned 1 [0218.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa58 [0218.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa58) returned 1 [0218.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcaa58 [0218.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9f90 [0218.247] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab70 [0218.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab70) returned 1 [0218.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.248] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="7d") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="f5") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="9f") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="53") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="65") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="91") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="e3") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="77") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="74") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="26") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="a5") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="43") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="a0") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="b7") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="1f") returned 2 [0218.248] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="36") returned 2 [0218.249] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="76") returned 2 [0218.249] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="f6") returned 2 [0218.249] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="99") returned 2 [0218.249] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="21") returned 2 [0218.249] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="63") returned 2 [0218.249] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="d5") returned 2 [0218.249] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="d4") returned 2 [0218.249] RtlInitAnsiString (in: DestinationString=0x107efe10, SourceString="2f2d7df59f53dd6591e3777426a543a0b71f3676f6992163d5d4" | out: DestinationString="2f2d7df59f53dd6591e3777426a543a0b71f3676f6992163d5d4") [0218.249] RtlAnsiStringToUnicodeString (in: DestinationString=0x107efe08, SourceString="2f2d7df59f53dd6591e3777426a543a0b71f3676f6992163d5d4", AllocateDestinationString=1 | out: DestinationString="2f2d7df59f53dd6591e3777426a543a0b71f3676f6992163d5d4") returned 0x0 [0218.249] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fec0 [0224.813] __SEH_epilog4 () [0224.813] CloseHandle (hObject=0x2370) returned 1 [0224.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cafd60) returned 1 [0224.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82c60) returned 1 Thread: id = 7054 os_tid = 0x215c [0202.692] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json")) returned 0x2020 [0203.919] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0213.298] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x200c [0213.299] GetFileSizeEx (in: hFile=0x200c, lpFileSize=0xe11fdbc | out: lpFileSize=0xe11fdbc*=180) returned 1 [0213.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0213.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0213.299] NtQuerySystemTime (in: CurrentTime=0xe11fd30 | out: CurrentTime=0xe11fd30*=132462177918780000) returned 0x0 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x259df1 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x18a836b5 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x3f2b2127 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x54504d24 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x5b9b05d9 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x198f212c [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x4c6a8f33 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x1b2fce9d [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x3929e655 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x2081ee23 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x4b647b06 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x1d56e120 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x54036885 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x16516fce [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x2ed33759 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x3cf96b10 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x4d3c7430 [0213.299] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0xae5d590 [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x55948ad9 [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x4553e975 [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x623a8323 [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x60048948 [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x20199580 [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x53b08a5c [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x71746c55 [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x1141bf4 [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x132f327a [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x3e977acc [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x6fe42b7f [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x6b795d3b [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x78a618c7 [0213.300] RtlRandomEx (in: Seed=0xe11fd28 | out: Seed=0xe11fd28) returned 0x2cee3771 [0213.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b63778 [0213.308] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b67380 [0213.308] ReadFile (in: hFile=0x200c, lpBuffer=0x7b63778, nNumberOfBytesToRead=0xb4, lpNumberOfBytesRead=0xe11fd24, lpOverlapped=0x0 | out: lpBuffer=0x7b63778*, lpNumberOfBytesRead=0xe11fd24*=0xb4, lpOverlapped=0x0) returned 1 [0213.312] SetFilePointerEx (in: hFile=0x200c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.312] WriteFile (in: hFile=0x200c, lpBuffer=0x7b67380*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0xe11fd28, lpOverlapped=0x0 | out: lpBuffer=0x7b67380*, lpNumberOfBytesWritten=0xe11fd28*=0xb4, lpOverlapped=0x0) returned 1 [0215.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2de0 [0215.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a78 [0215.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4a78) returned 1 [0215.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b67380) returned 1 [0215.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b63778) returned 1 [0215.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e3a0) returned 1 [0215.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095ea0) returned 1 [0215.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37680 [0215.956] SetFilePointerEx (in: hFile=0x200c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.956] WriteFile (in: hFile=0x200c, lpBuffer=0x7ddb750*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe11fdb0, lpOverlapped=0x0 | out: lpBuffer=0x7ddb750*, lpNumberOfBytesWritten=0xe11fdb0*=0x10c, lpOverlapped=0x0) returned 1 [0218.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcab98 [0218.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcab98) returned 1 [0218.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcab98 [0218.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaad0 [0218.262] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0a8 [0218.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca0a8) returned 1 [0218.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.263] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.263] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="05") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="18") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="aa") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="d2") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="b5") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="26") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="9e") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="aa") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="9f") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="53") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="bc") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="51") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="4c") returned 2 [0218.263] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="55") returned 2 [0218.264] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="ef") returned 2 [0218.264] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="b2") returned 2 [0218.264] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="e1") returned 2 [0218.264] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="60") returned 2 [0218.264] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="18") returned 2 [0218.264] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="60") returned 2 [0218.264] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="f6") returned 2 [0218.264] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.264] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="83") returned 2 [0218.264] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="b4") returned 2 [0218.264] RtlInitAnsiString (in: DestinationString=0xe11fd38, SourceString="0518caaad27fb5269eaa9f53bc514c55efb2e1601860f67f83b4" | out: DestinationString="0518caaad27fb5269eaa9f53bc514c55efb2e1601860f67f83b4") [0218.264] RtlAnsiStringToUnicodeString (in: DestinationString=0xe11fd30, SourceString="0518caaad27fb5269eaa9f53bc514c55efb2e1601860f67f83b4", AllocateDestinationString=1 | out: DestinationString="0518caaad27fb5269eaa9f53bc514c55efb2e1601860f67f83b4") returned 0x0 [0218.264] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3490b0 [0224.818] __SEH_epilog4 () [0224.818] CloseHandle (hObject=0xc90) returned 1 [0224.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7ce8) returned 1 [0224.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83100) returned 1 Thread: id = 7055 os_tid = 0x1844 [0202.693] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json")) returned 0x2020 [0203.920] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0213.313] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x598 [0213.313] GetFileSizeEx (in: hFile=0x598, lpFileSize=0x1079f7ac | out: lpFileSize=0x1079f7ac*=150) returned 1 [0213.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0213.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca738 [0213.314] NtQuerySystemTime (in: CurrentTime=0x1079f720 | out: CurrentTime=0x1079f720*=132462177918936000) returned 0x0 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x6c96089b [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x27099dbd [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x59078820 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x5897c859 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x1aca2d17 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x34e5414e [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x10aa7a2e [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x1d595d2 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x20022ae2 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x7b0dcdc1 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x67e1155b [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x3b043138 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x6e7df3f7 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x35a1a661 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x3d786d77 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x1d595d2 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x781b2d1a [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x33efaaa8 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x33fcc6d4 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x1d964540 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x32b6515a [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x7fe5e970 [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x4cb63b9e [0213.314] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x35695cb8 [0213.315] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x3fae58a6 [0213.315] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x36dd4149 [0213.315] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x39a0c5e [0213.315] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x6de2e93a [0213.315] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x6593d4fe [0213.315] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x125a9330 [0213.315] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x262f2980 [0213.315] RtlRandomEx (in: Seed=0x1079f718 | out: Seed=0x1079f718) returned 0x33ac24c9 [0213.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b6af88 [0213.323] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b6eb90 [0213.323] ReadFile (in: hFile=0x598, lpBuffer=0x7b6af88, nNumberOfBytesToRead=0x96, lpNumberOfBytesRead=0x1079f714, lpOverlapped=0x0 | out: lpBuffer=0x7b6af88*, lpNumberOfBytesRead=0x1079f714*=0x96, lpOverlapped=0x0) returned 1 [0213.325] SetFilePointerEx (in: hFile=0x598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.325] WriteFile (in: hFile=0x598, lpBuffer=0x7b6eb90*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x1079f718, lpOverlapped=0x0 | out: lpBuffer=0x7b6eb90*, lpNumberOfBytesWritten=0x1079f718*=0x96, lpOverlapped=0x0) returned 1 [0217.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad80 [0217.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a588 [0217.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a588) returned 1 [0217.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6eb90) returned 1 [0217.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b6af88) returned 1 [0217.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e670) returned 1 [0217.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095a20) returned 1 [0217.869] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85dc8 [0217.869] SetFilePointerEx (in: hFile=0x598, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.869] WriteFile (in: hFile=0x598, lpBuffer=0x7cd27c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1079f7a0, lpOverlapped=0x0 | out: lpBuffer=0x7cd27c8*, lpNumberOfBytesWritten=0x1079f7a0*=0x10c, lpOverlapped=0x0) returned 1 [0218.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c270 [0218.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c270) returned 1 [0218.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c270 [0218.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c360 [0218.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0218.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c680) returned 1 [0218.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.312] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.313] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="31") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="f5") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="13") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="16") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="fb") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="18") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="c4") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="8f") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="82") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="16") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="29") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="eb") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="90") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="27") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="d1") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="ee") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="9a") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="bf") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="45") returned 2 [0218.313] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="26") returned 2 [0218.314] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.314] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="c8") returned 2 [0218.314] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="c5") returned 2 [0218.314] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.314] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="06") returned 2 [0218.314] RtlInitAnsiString (in: DestinationString=0x1079f728, SourceString="31f51316fb18c48f821629eb90272fd1ee9abf4526e6c8c5dd06" | out: DestinationString="31f51316fb18c48f821629eb90272fd1ee9abf4526e6c8c5dd06") [0218.314] RtlAnsiStringToUnicodeString (in: DestinationString=0x1079f720, SourceString="31f51316fb18c48f821629eb90272fd1ee9abf4526e6c8c5dd06", AllocateDestinationString=1 | out: DestinationString="31f51316fb18c48f821629eb90272fd1ee9abf4526e6c8c5dd06") returned 0x0 [0218.314] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cae0 [0224.848] __SEH_epilog4 () [0224.848] CloseHandle (hObject=0x2418) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6cb8) returned 1 [0224.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83228) returned 1 Thread: id = 7056 os_tid = 0x2770 [0202.693] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json")) returned 0x2020 [0203.920] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0213.325] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1010 [0213.326] GetFileSizeEx (in: hFile=0x1010, lpFileSize=0x1046fb3c | out: lpFileSize=0x1046fb3c*=177) returned 1 [0213.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca738 [0213.326] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0213.326] NtQuerySystemTime (in: CurrentTime=0x1046fab0 | out: CurrentTime=0x1046fab0*=132462177919092000) returned 0x0 [0213.326] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x248f886f [0213.326] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x2471689a [0213.326] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x493ef375 [0213.326] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x6b6f213f [0213.326] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x4ae24e57 [0213.326] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x4868bd3f [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x722fa946 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x4f62cfa7 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x49cfd801 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x45241b5 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x314e4f71 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x61c6fd9a [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x3ffde8fd [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x10671797 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x151a3588 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x31c88f76 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x5562c5d0 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x3fd8fbdb [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x4cbbe109 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0xe16d3df [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x29b4eb02 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x5e9acf38 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x1d6ac7c4 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x460b99a0 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0xf11da82 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x6df0a8b1 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x404d418f [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x548f535f [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x68a2b14b [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x565890e [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x2599ddc1 [0213.327] RtlRandomEx (in: Seed=0x1046faa8 | out: Seed=0x1046faa8) returned 0x6568fc3e [0213.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b72798 [0213.335] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b763a0 [0213.335] ReadFile (in: hFile=0x1010, lpBuffer=0x7b72798, nNumberOfBytesToRead=0xb1, lpNumberOfBytesRead=0x1046faa4, lpOverlapped=0x0 | out: lpBuffer=0x7b72798*, lpNumberOfBytesRead=0x1046faa4*=0xb1, lpOverlapped=0x0) returned 1 [0213.337] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.337] WriteFile (in: hFile=0x1010, lpBuffer=0x7b763a0*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x1046faa8, lpOverlapped=0x0 | out: lpBuffer=0x7b763a0*, lpNumberOfBytesWritten=0x1046faa8*=0xb1, lpOverlapped=0x0) returned 1 [0215.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34e8 [0215.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f60 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f60) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b763a0) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b72798) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e5f8) returned 1 [0215.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30963b0) returned 1 [0215.949] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37fe0 [0215.949] SetFilePointerEx (in: hFile=0x1010, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.949] WriteFile (in: hFile=0x1010, lpBuffer=0x7ddb1d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1046fb30, lpOverlapped=0x0 | out: lpBuffer=0x7ddb1d8*, lpNumberOfBytesWritten=0x1046fb30*=0x10c, lpOverlapped=0x0) returned 1 [0218.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e00 [0218.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e00) returned 1 [0218.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9e00 [0218.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9c20 [0218.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaa8 [0218.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaa8) returned 1 [0218.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.252] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.252] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="94") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="aa") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="2b") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="48") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="dc") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="09") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="3b") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="48") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="fc") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="e5") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="45") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="12") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="9e") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="b2") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="fc") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="c4") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="1c") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="75") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="98") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="9b") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="89") returned 2 [0218.253] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="ad") returned 2 [0218.254] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="b0") returned 2 [0218.254] RtlInitAnsiString (in: DestinationString=0x1046fab8, SourceString="94aa2b48dc093b48fce52f45129eb2fc3ec4dd1c75989b89adb0" | out: DestinationString="94aa2b48dc093b48fce52f45129eb2fc3ec4dd1c75989b89adb0") [0218.254] RtlAnsiStringToUnicodeString (in: DestinationString=0x1046fab0, SourceString="94aa2b48dc093b48fce52f45129eb2fc3ec4dd1c75989b89adb0", AllocateDestinationString=1 | out: DestinationString="94aa2b48dc093b48fce52f45129eb2fc3ec4dd1c75989b89adb0") returned 0x0 [0218.254] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x349128 [0224.808] __SEH_epilog4 () [0224.808] CloseHandle (hObject=0x1994) returned 1 [0224.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7e10) returned 1 [0224.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83350) returned 1 Thread: id = 7057 os_tid = 0x18f0 [0202.693] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json")) returned 0x2020 [0203.921] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", dwFileAttributes=0x20) returned 1 [0213.337] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d24 [0213.338] GetFileSizeEx (in: hFile=0x1d24, lpFileSize=0x1448fc6c | out: lpFileSize=0x1448fc6c*=523) returned 1 [0213.338] SetFilePointerEx (in: hFile=0x1d24, liDistanceToMove=0x207, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.338] ReadFile (in: hFile=0x1d24, lpBuffer=0x1448fc48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1448fc58, lpOverlapped=0x0 | out: lpBuffer=0x1448fc48*, lpNumberOfBytesRead=0x1448fc58*=0x4, lpOverlapped=0x0) returned 1 [0213.339] SetFilePointerEx (in: hFile=0x1d24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.339] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0213.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0a8 [0213.340] NtQuerySystemTime (in: CurrentTime=0x1448fbe0 | out: CurrentTime=0x1448fbe0*=132462177919248000) returned 0x0 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x58c05723 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x46ca7d71 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x314e4f71 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x36c47dae [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x520dfd40 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x3b0a95e4 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x4279df41 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x2d884d5d [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x5d7364ce [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x653e237e [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x70a2d962 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x64a4be59 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x66145f3e [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x3994c2c5 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x5bb578a8 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x20613a4d [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x1a2390d2 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x53b40fec [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x61a180d9 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x6fe42b7f [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x5b2e682c [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x3e337cbf [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x2c750c89 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x7226ab39 [0213.340] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x76c8c4cc [0213.341] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x1799ab6f [0213.341] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0xf199675 [0213.341] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x5c32dc8 [0213.341] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x688182f4 [0213.341] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x357a1f1a [0213.341] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x1c627036 [0213.341] RtlRandomEx (in: Seed=0x1448fbd8 | out: Seed=0x1448fbd8) returned 0x232cc0e8 [0213.349] SetFilePointerEx (in: hFile=0x1d24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.349] WriteFile (in: hFile=0x1d24, lpBuffer=0x7c1bf68*, nNumberOfBytesToWrite=0x20b, lpNumberOfBytesWritten=0x1448fbd8, lpOverlapped=0x0 | out: lpBuffer=0x7c1bf68*, lpNumberOfBytesWritten=0x1448fbd8*=0x20b, lpOverlapped=0x0) returned 1 [0215.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2b88 [0215.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33f8 [0215.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec33f8) returned 1 [0215.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1bf68) returned 1 [0215.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c18360) returned 1 [0215.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e8c8) returned 1 [0215.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85d90) returned 1 [0215.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a374d0 [0215.952] SetFilePointerEx (in: hFile=0x1d24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.952] WriteFile (in: hFile=0x1d24, lpBuffer=0x7ddb408*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1448fc60, lpOverlapped=0x0 | out: lpBuffer=0x7ddb408*, lpNumberOfBytesWritten=0x1448fc60*=0x10c, lpOverlapped=0x0) returned 1 [0218.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bff0 [0218.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5bff0) returned 1 [0218.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3d5bff0 [0218.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a6a0 [0218.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd00 [0218.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dd00) returned 1 [0218.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.333] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.333] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="3b") returned 2 [0218.333] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.333] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="5e") returned 2 [0218.333] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="0e") returned 2 [0218.333] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="fa") returned 2 [0218.333] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="6d") returned 2 [0218.333] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="c0") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="37") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="01") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="ce") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="de") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="75") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="d8") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="8c") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="c5") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="72") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="c1") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="ce") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="fb") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="b8") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="2e") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="e0") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="ba") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="43") returned 2 [0218.334] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="55") returned 2 [0218.334] RtlInitAnsiString (in: DestinationString=0x1448fbe8, SourceString="3b3e5e0efa6dc03701cede75d88cc572c1ce2dfbb82ee0ba4355" | out: DestinationString="3b3e5e0efa6dc03701cede75d88cc572c1ce2dfbb82ee0ba4355") [0218.334] RtlAnsiStringToUnicodeString (in: DestinationString=0x1448fbe0, SourceString="3b3e5e0efa6dc03701cede75d88cc572c1ce2dfbb82ee0ba4355", AllocateDestinationString=1 | out: DestinationString="3b3e5e0efa6dc03701cede75d88cc572c1ce2dfbb82ee0ba4355") returned 0x0 [0218.334] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cd38 [0224.856] __SEH_epilog4 () [0224.856] CloseHandle (hObject=0x1718) returned 1 [0224.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7a98) returned 1 [0224.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82eb0) returned 1 Thread: id = 7058 os_tid = 0x18fc [0202.694] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json")) returned 0x2020 [0203.921] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", dwFileAttributes=0x20) returned 1 [0213.349] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1efc [0213.350] GetFileSizeEx (in: hFile=0x1efc, lpFileSize=0x145bf984 | out: lpFileSize=0x145bf984*=203) returned 1 [0213.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca0a8 [0213.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0213.350] NtQuerySystemTime (in: CurrentTime=0x145bf8f8 | out: CurrentTime=0x145bf8f8*=132462177919248000) returned 0x0 [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x5c48355 [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x47bbe694 [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x162fd777 [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x65beadbe [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x66145f3e [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x6eb29aec [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x1c824a49 [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x6b0d65fa [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0xef7aafd [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x7c939e06 [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x16bcac9f [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x2c521525 [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x26e4ca8d [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x2e8f616b [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x5e75eb0f [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x591d6dc6 [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x5de5699a [0213.350] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x6c6a9d73 [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x1846c7b3 [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x2e8f616b [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x39eb2637 [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x223e92e8 [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x6c6a9d73 [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x232cc0e8 [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x59b489cb [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x87e69cb [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x74c9c951 [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x6f2e4768 [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x27099dbd [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x5d061ba [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x48f972ed [0213.351] RtlRandomEx (in: Seed=0x145bf8f0 | out: Seed=0x145bf8f0) returned 0x5d633ceb [0213.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c1fb70 [0213.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c23778 [0213.366] ReadFile (in: hFile=0x1efc, lpBuffer=0x7c1fb70, nNumberOfBytesToRead=0xcb, lpNumberOfBytesRead=0x145bf8ec, lpOverlapped=0x0 | out: lpBuffer=0x7c1fb70*, lpNumberOfBytesRead=0x145bf8ec*=0xcb, lpOverlapped=0x0) returned 1 [0213.367] SetFilePointerEx (in: hFile=0x1efc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.367] WriteFile (in: hFile=0x1efc, lpBuffer=0x7c23778*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x145bf8f0, lpOverlapped=0x0 | out: lpBuffer=0x7c23778*, lpNumberOfBytesWritten=0x145bf8f0*=0xcb, lpOverlapped=0x0) returned 1 [0215.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e70 [0215.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a20 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a20) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c23778) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c1fb70) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e6e8) returned 1 [0215.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85d00) returned 1 [0215.951] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a383a0 [0215.951] SetFilePointerEx (in: hFile=0x1efc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.951] WriteFile (in: hFile=0x1efc, lpBuffer=0x7ddb2f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x145bf978, lpOverlapped=0x0 | out: lpBuffer=0x7ddb2f0*, lpNumberOfBytesWritten=0x145bf978*=0x10c, lpOverlapped=0x0) returned 1 [0218.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaa30 [0218.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaa30) returned 1 [0218.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcaa30 [0218.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca7d8 [0218.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca738 [0218.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca738) returned 1 [0218.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.256] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.256] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="ff") returned 2 [0218.256] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="ae") returned 2 [0218.256] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="d4") returned 2 [0218.256] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="b3") returned 2 [0218.256] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.256] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="f0") returned 2 [0218.256] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="1e") returned 2 [0218.256] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="38") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="0a") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="d8") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="83") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="70") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="92") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="74") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="83") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="59") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="be") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="15") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="a5") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="cd") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="bd") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="af") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="b7") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="f8") returned 2 [0218.257] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="80") returned 2 [0218.257] RtlInitAnsiString (in: DestinationString=0x145bf900, SourceString="ffaed4b3ddf01e380ad8837092748359be15a5cdbdd6afb7f880" | out: DestinationString="ffaed4b3ddf01e380ad8837092748359be15a5cdbdd6afb7f880") [0218.257] RtlAnsiStringToUnicodeString (in: DestinationString=0x145bf8f8, SourceString="ffaed4b3ddf01e380ad8837092748359be15a5cdbdd6afb7f880", AllocateDestinationString=1 | out: DestinationString="ffaed4b3ddf01e380ad8837092748359be15a5cdbdd6afb7f880") returned 0x0 [0218.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x348f48 [0224.816] __SEH_epilog4 () [0224.816] CloseHandle (hObject=0x1d18) returned 1 [0224.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7bc0) returned 1 [0224.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b836c8) returned 1 Thread: id = 7059 os_tid = 0x278c [0202.694] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json")) returned 0x2020 [0203.922] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", dwFileAttributes=0x20) returned 1 [0213.368] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e4c [0213.368] GetFileSizeEx (in: hFile=0x1e4c, lpFileSize=0x1089f78c | out: lpFileSize=0x1089f78c*=300) returned 1 [0213.368] SetFilePointerEx (in: hFile=0x1e4c, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.368] ReadFile (in: hFile=0x1e4c, lpBuffer=0x1089f768, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1089f778, lpOverlapped=0x0 | out: lpBuffer=0x1089f768*, lpNumberOfBytesRead=0x1089f778*=0x4, lpOverlapped=0x0) returned 1 [0213.370] SetFilePointerEx (in: hFile=0x1e4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca940 [0213.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc6e08 [0213.370] NtQuerySystemTime (in: CurrentTime=0x1089f700 | out: CurrentTime=0x1089f700*=132462177919560000) returned 0x0 [0213.370] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x7ed6c69d [0213.370] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x4e9ec5c9 [0213.370] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x6da6f6f [0213.370] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x3bee47cb [0213.370] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x5e9e4359 [0213.370] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x71c2407c [0213.370] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x39ec41e8 [0213.370] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x58df4374 [0213.370] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x7019d77 [0213.370] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x6080ed9e [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x7ff5f772 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x1463dbf9 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x562bcebd [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x52914d59 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x1f4ae543 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x2b2653f8 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x5c2ff064 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x5fc51e1b [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x67c0d6be [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x790ed420 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x2f50c5ec [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x604685e1 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x4b05f52a [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x36ef4a9a [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x25ef6d9b [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x3b043138 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x56925b8a [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x5b363b20 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x5992e17f [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x738a4de1 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x1a5e6025 [0213.371] RtlRandomEx (in: Seed=0x1089f6f8 | out: Seed=0x1089f6f8) returned 0x369264b5 [0213.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c27380 [0213.381] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c2af88 [0213.381] ReadFile (in: hFile=0x1e4c, lpBuffer=0x7c27380, nNumberOfBytesToRead=0x12c, lpNumberOfBytesRead=0x1089f6f4, lpOverlapped=0x0 | out: lpBuffer=0x7c27380*, lpNumberOfBytesRead=0x1089f6f4*=0x12c, lpOverlapped=0x0) returned 1 [0213.381] SetFilePointerEx (in: hFile=0x1e4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.381] WriteFile (in: hFile=0x1e4c, lpBuffer=0x7c2af88*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x1089f6f8, lpOverlapped=0x0 | out: lpBuffer=0x7c2af88*, lpNumberOfBytesWritten=0x1089f6f8*=0x12c, lpOverlapped=0x0) returned 1 [0215.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4410 [0215.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6580 [0215.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6580) returned 1 [0215.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c2af88) returned 1 [0215.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c27380) returned 1 [0215.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd88) returned 1 [0215.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85cb8) returned 1 [0215.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c80 [0215.955] SetFilePointerEx (in: hFile=0x1e4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.956] WriteFile (in: hFile=0x1e4c, lpBuffer=0x7ddb638*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1089f780, lpOverlapped=0x0 | out: lpBuffer=0x7ddb638*, lpNumberOfBytesWritten=0x1089f780*=0x10c, lpOverlapped=0x0) returned 1 [0218.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca760 [0218.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca760) returned 1 [0218.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca760 [0218.265] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca828 [0218.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6e8 [0218.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca6e8) returned 1 [0218.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.266] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.266] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="fa") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="fe") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="64") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="a3") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="78") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="9e") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="7d") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="8b") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="5a") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="f6") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="a4") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="b9") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="9c") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="3a") returned 2 [0218.266] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="60") returned 2 [0218.267] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="31") returned 2 [0218.267] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="64") returned 2 [0218.267] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="c9") returned 2 [0218.267] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="f3") returned 2 [0218.267] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="a5") returned 2 [0218.267] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="4d") returned 2 [0218.267] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="db") returned 2 [0218.267] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="94") returned 2 [0218.267] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="03") returned 2 [0218.267] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="74") returned 2 [0218.267] RtlInitAnsiString (in: DestinationString=0x1089f708, SourceString="fafe642da3789e7d8b5af6a4b99c3a603164c9f3a54ddb940374" | out: DestinationString="fafe642da3789e7d8b5af6a4b99c3a603164c9f3a54ddb940374") [0218.267] RtlAnsiStringToUnicodeString (in: DestinationString=0x1089f700, SourceString="fafe642da3789e7d8b5af6a4b99c3a603164c9f3a54ddb940374", AllocateDestinationString=1 | out: DestinationString="fafe642da3789e7d8b5af6a4b99c3a603164c9f3a54ddb940374") returned 0x0 [0218.267] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3ea30 [0224.821] __SEH_epilog4 () [0224.821] CloseHandle (hObject=0x1614) returned 1 [0224.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6818) returned 1 [0224.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82fd8) returned 1 Thread: id = 7060 os_tid = 0x23d0 [0202.694] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json")) returned 0x2020 [0203.922] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", dwFileAttributes=0x20) returned 1 [0213.384] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1278 [0213.385] GetFileSizeEx (in: hFile=0x1278, lpFileSize=0xd19fb14 | out: lpFileSize=0xd19fb14*=451) returned 1 [0213.385] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x1bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.385] ReadFile (in: hFile=0x1278, lpBuffer=0xd19faf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd19fb00, lpOverlapped=0x0 | out: lpBuffer=0xd19faf0*, lpNumberOfBytesRead=0xd19fb00*=0x4, lpOverlapped=0x0) returned 1 [0213.437] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0213.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc80 [0213.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0213.437] NtQuerySystemTime (in: CurrentTime=0xd19fa88 | out: CurrentTime=0xd19fa88*=132462177920184000) returned 0x0 [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x5731f1f2 [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0xf25727 [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x50af14be [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x65134abe [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x70336b87 [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x5afac1c1 [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x1f886740 [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x17c2a65e [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x39eb2637 [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x64928435 [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x66bbdc92 [0213.437] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x2ebefa64 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x3b633d15 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x76b82f59 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x4be6a7b5 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x6412363e [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x3965b921 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x5fc51e1b [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x79d9a20b [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x73716a10 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x6c08ff62 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0xa056481 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x3d69cfe8 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x78f0b940 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x4a80506 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x4a016872 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x11cd47ea [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x2b2653f8 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x33da9ad3 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x2651a14 [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x7ed6c69d [0213.438] RtlRandomEx (in: Seed=0xd19fa80 | out: Seed=0xd19fa80) returned 0x47e16840 [0213.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0213.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7be7380 [0213.717] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7beeb90 [0213.717] ReadFile (in: hFile=0x1278, lpBuffer=0x7be7380, nNumberOfBytesToRead=0x1c3, lpNumberOfBytesRead=0xd19fa7c, lpOverlapped=0x0 | out: lpBuffer=0x7be7380*, lpNumberOfBytesRead=0xd19fa7c*=0x1c3, lpOverlapped=0x0) returned 1 [0213.717] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.717] WriteFile (in: hFile=0x1278, lpBuffer=0x7beeb90*, nNumberOfBytesToWrite=0x1c3, lpNumberOfBytesWritten=0xd19fa80, lpOverlapped=0x0 | out: lpBuffer=0x7beeb90*, lpNumberOfBytesWritten=0xd19fa80*=0x1c3, lpOverlapped=0x0) returned 1 [0215.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4140 [0215.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2f70 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2f70) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beeb90) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be7380) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c108) returned 1 [0215.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdd18) returned 1 [0215.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37d40 [0215.954] SetFilePointerEx (in: hFile=0x1278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.954] WriteFile (in: hFile=0x1278, lpBuffer=0x7ddb520*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd19fb08, lpOverlapped=0x0 | out: lpBuffer=0x7ddb520*, lpNumberOfBytesWritten=0xd19fb08*=0x10c, lpOverlapped=0x0) returned 1 [0218.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.327] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c770 [0218.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c770) returned 1 [0218.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c770 [0218.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9c8 [0218.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfc8 [0218.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfc8) returned 1 [0218.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.328] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.328] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="13") returned 2 [0218.328] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="46") returned 2 [0218.328] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="95") returned 2 [0218.328] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="56") returned 2 [0218.328] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="c9") returned 2 [0218.328] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="8a") returned 2 [0218.328] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="e2") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="2c") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="a6") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="f1") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="06") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="1e") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="12") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="c3") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="ea") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="05") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="62") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="45") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="29") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="1e") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="bc") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="50") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="ec") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="f2") returned 2 [0218.329] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="79") returned 2 [0218.329] RtlInitAnsiString (in: DestinationString=0xd19fa90, SourceString="13469556c98ae22ca6f1dd061e12c3ea056245291ebc50ecf279" | out: DestinationString="13469556c98ae22ca6f1dd061e12c3ea056245291ebc50ecf279") [0218.329] RtlAnsiStringToUnicodeString (in: DestinationString=0xd19fa88, SourceString="13469556c98ae22ca6f1dd061e12c3ea056245291ebc50ecf279", AllocateDestinationString=1 | out: DestinationString="13469556c98ae22ca6f1dd061e12c3ea056245291ebc50ecf279") returned 0x0 [0218.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c888 [0224.854] __SEH_epilog4 () [0224.854] CloseHandle (hObject=0xdfc) returned 1 [0224.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7f38) returned 1 [0224.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83478) returned 1 Thread: id = 7061 os_tid = 0x23d4 [0202.695] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json")) returned 0x2020 [0203.923] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", dwFileAttributes=0x20) returned 1 [0213.717] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x174c [0213.718] GetFileSizeEx (in: hFile=0x174c, lpFileSize=0x414fa94 | out: lpFileSize=0x414fa94*=387) returned 1 [0213.718] SetFilePointerEx (in: hFile=0x174c, liDistanceToMove=0x17f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.718] ReadFile (in: hFile=0x174c, lpBuffer=0x414fa70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x414fa80, lpOverlapped=0x0 | out: lpBuffer=0x414fa70*, lpNumberOfBytesRead=0x414fa80*=0x4, lpOverlapped=0x0) returned 1 [0213.720] SetFilePointerEx (in: hFile=0x174c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.720] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0213.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b5f0 [0213.721] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baf0 [0213.721] NtQuerySystemTime (in: CurrentTime=0x414fa08 | out: CurrentTime=0x414fa08*=132462177922992000) returned 0x0 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x12ba5a8a [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x22a4f074 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x352bc451 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x1147799a [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x1c824a49 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x4d9c622a [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x7295f9f7 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x6a01e70d [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x297fd0fc [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x58fda608 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x5a5b01e3 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x5aa11ce6 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0xd3d83e7 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x2176370 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0xb0118c5 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x6d635d6b [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x221a919e [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0xb0118c5 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x522c3f4b [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x75398e46 [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x37711b1c [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x78ce787e [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x29a0504a [0213.721] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x3f1184ec [0213.722] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x6d635d6b [0213.722] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x4f036e2e [0213.722] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x51f224b4 [0213.722] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x39ec41e8 [0213.722] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x6ad91a87 [0213.722] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x621443a8 [0213.722] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x2d9141f5 [0213.722] RtlRandomEx (in: Seed=0x414fa00 | out: Seed=0x414fa00) returned 0x7a9163ac [0214.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdfb70 [0214.002] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bd8360 [0214.002] ReadFile (in: hFile=0x174c, lpBuffer=0x7bdfb70, nNumberOfBytesToRead=0x183, lpNumberOfBytesRead=0x414f9fc, lpOverlapped=0x0 | out: lpBuffer=0x7bdfb70*, lpNumberOfBytesRead=0x414f9fc*=0x183, lpOverlapped=0x0) returned 1 [0214.002] SetFilePointerEx (in: hFile=0x174c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.002] WriteFile (in: hFile=0x174c, lpBuffer=0x7bd8360*, nNumberOfBytesToWrite=0x183, lpNumberOfBytesWritten=0x414fa00, lpOverlapped=0x0 | out: lpBuffer=0x7bd8360*, lpNumberOfBytesWritten=0x414fa00*=0x183, lpOverlapped=0x0) returned 1 [0215.844] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3088 [0215.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3920 [0215.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3920) returned 1 [0215.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bd8360) returned 1 [0215.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdfb70) returned 1 [0215.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fec0) returned 1 [0215.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0215.845] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3390 [0215.845] SetFilePointerEx (in: hFile=0x174c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.845] WriteFile (in: hFile=0x174c, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x414fa88, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0x414fa88*=0x10c, lpOverlapped=0x0) returned 1 [0218.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b578 [0218.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b578) returned 1 [0218.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b578 [0218.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c798 [0218.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0218.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6b8) returned 1 [0218.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.302] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.302] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="db") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="30") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="93") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="4a") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="bf") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="1b") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="d4") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="6e") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="46") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="f4") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="cf") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="12") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="7b") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="e3") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="aa") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="82") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="db") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="26") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="db") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="80") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="a9") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="c4") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="81") returned 2 [0218.303] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="49") returned 2 [0218.304] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="73") returned 2 [0218.304] RtlInitAnsiString (in: DestinationString=0x414fa10, SourceString="db30934abf7f1bd46e46f4cf127be3aa82db26db80a9c4814973" | out: DestinationString="db30934abf7f1bd46e46f4cf127be3aa82db26db80a9c4814973") [0218.304] RtlAnsiStringToUnicodeString (in: DestinationString=0x414fa08, SourceString="db30934abf7f1bd46e46f4cf127be3aa82db26db80a9c4814973", AllocateDestinationString=1 | out: DestinationString="db30934abf7f1bd46e46f4cf127be3aa82db26db80a9c4814973") returned 0x0 [0218.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c810 [0224.834] __SEH_epilog4 () [0224.834] CloseHandle (hObject=0x1414) returned 1 [0224.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec73a8) returned 1 [0224.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82d88) returned 1 Thread: id = 7062 os_tid = 0x23d8 [0202.695] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json")) returned 0x2020 [0202.695] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0210.808] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2040 [0210.809] GetFileSizeEx (in: hFile=0x2040, lpFileSize=0x13c3ff5c | out: lpFileSize=0x13c3ff5c*=649) returned 1 [0210.809] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x285, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.809] ReadFile (in: hFile=0x2040, lpBuffer=0x13c3ff38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x13c3ff48, lpOverlapped=0x0 | out: lpBuffer=0x13c3ff38*, lpNumberOfBytesRead=0x13c3ff48*=0x4, lpOverlapped=0x0) returned 1 [0210.882] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53508 [0210.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53940 [0210.883] NtQuerySystemTime (in: CurrentTime=0x13c3fed0 | out: CurrentTime=0x13c3fed0*=132462177894600000) returned 0x0 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x1a7d2d8c [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x10c44170 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0xc5cb09a [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x217b94ee [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x5bda3312 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x708ed4e9 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0xdc3ce2f [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x1a019ae1 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0xaa86873 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x7c95f5e8 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x53dc99e6 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x30743f [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x4d0f1e63 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x7086e597 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x13293fb4 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x79a199fa [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x3532aad6 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x1c46a752 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x72a32c1e [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x64836fd8 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x32d5ed2d [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x14efdcc3 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x5e188aa5 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x7227a0b [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x3a40f13 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x732af475 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x30b40073 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x60688188 [0210.883] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x3b369bd6 [0210.884] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x6cf55292 [0210.884] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x7fdac2be [0210.884] RtlRandomEx (in: Seed=0x13c3fec8 | out: Seed=0x13c3fec8) returned 0x671c384b [0210.892] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.892] WriteFile (in: hFile=0x2040, lpBuffer=0x7be3778*, nNumberOfBytesToWrite=0x289, lpNumberOfBytesWritten=0x13c3fec8, lpOverlapped=0x0 | out: lpBuffer=0x7be3778*, lpNumberOfBytesWritten=0x13c3fec8*=0x289, lpOverlapped=0x0) returned 1 [0216.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0c8 [0216.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b640 [0216.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b640) returned 1 [0216.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7be3778) returned 1 [0216.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c017b8) returned 1 [0216.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf90) returned 1 [0216.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd2b0) returned 1 [0216.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38280 [0216.371] SetFilePointerEx (in: hFile=0x2040, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.371] WriteFile (in: hFile=0x2040, lpBuffer=0x7ddbef8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x13c3ff50, lpOverlapped=0x0 | out: lpBuffer=0x7ddbef8*, lpNumberOfBytesWritten=0x13c3ff50*=0x10c, lpOverlapped=0x0) returned 1 [0218.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b00 [0218.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3b00) returned 1 [0218.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3b00 [0218.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec47f8 [0218.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ca8 [0218.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4ca8) returned 1 [0218.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.372] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="03") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="22") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="88") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="ab") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="32") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="bf") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="6d") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="5f") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="a2") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="d9") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="14") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="12") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="47") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="38") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="ea") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="be") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="df") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="06") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="20") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="fc") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="13") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="d4") returned 2 [0218.372] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="40") returned 2 [0218.373] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="09") returned 2 [0218.373] RtlInitAnsiString (in: DestinationString=0x13c3fed8, SourceString="032288ab323ebf6d5fa2d92f14124738eabedf0620fc13d44009" | out: DestinationString="032288ab323ebf6d5fa2d92f14124738eabedf0620fc13d44009") [0218.373] RtlAnsiStringToUnicodeString (in: DestinationString=0x13c3fed0, SourceString="032288ab323ebf6d5fa2d92f14124738eabedf0620fc13d44009", AllocateDestinationString=1 | out: DestinationString="032288ab323ebf6d5fa2d92f14124738eabedf0620fc13d44009") returned 0x0 [0218.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c4c8 [0224.870] __SEH_epilog4 () [0224.870] CloseHandle (hObject=0x12d4) returned 1 [0224.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e570) returned 1 [0224.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82b38) returned 1 Thread: id = 7063 os_tid = 0x23dc [0202.696] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json")) returned 0x2020 [0202.696] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0210.811] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1dac [0210.811] GetFileSizeEx (in: hFile=0x1dac, lpFileSize=0x103bfb44 | out: lpFileSize=0x103bfb44*=1099) returned 1 [0210.811] SetFilePointerEx (in: hFile=0x1dac, liDistanceToMove=0x447, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.811] ReadFile (in: hFile=0x1dac, lpBuffer=0x103bfb20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x103bfb30, lpOverlapped=0x0 | out: lpBuffer=0x103bfb20*, lpNumberOfBytesRead=0x103bfb30*=0x4, lpOverlapped=0x0) returned 1 [0210.939] SetFilePointerEx (in: hFile=0x1dac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a30 [0210.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b20 [0210.939] NtQuerySystemTime (in: CurrentTime=0x103bfab8 | out: CurrentTime=0x103bfab8*=132462177895224000) returned 0x0 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x3bbe7255 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x678b5906 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x6469d7b6 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x7d50634d [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x4a1d47fb [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x6752e030 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x6c099e32 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x37905ce2 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x745f4345 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x1d8308ec [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x3b2794f5 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0xba141b2 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x74c57bfc [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x36744b00 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x6e458c50 [0210.939] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x40a8aaf1 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x14162731 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x15f50752 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x3c2c3c55 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x6b4e96e0 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x3e57ac6 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x52704444 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x6bd0f79a [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x19bdb2ad [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x53874c46 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x41ba6a1a [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x36d0e9b3 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x1dbe0e7e [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x14129a56 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x53d8e2c9 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x7faea462 [0210.940] RtlRandomEx (in: Seed=0x103bfab0 | out: Seed=0x103bfab0) returned 0x5f5de510 [0210.950] SetFilePointerEx (in: hFile=0x1dac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.950] WriteFile (in: hFile=0x1dac, lpBuffer=0x10d71ca8*, nNumberOfBytesToWrite=0x44b, lpNumberOfBytesWritten=0x103bfab0, lpOverlapped=0x0 | out: lpBuffer=0x10d71ca8*, lpNumberOfBytesWritten=0x103bfab0*=0x44b, lpOverlapped=0x0) returned 1 [0216.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dd28 [0216.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b5c8 [0216.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b5c8) returned 1 [0216.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d71ca8) returned 1 [0216.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d6e0a0) returned 1 [0216.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c810) returned 1 [0216.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc650) returned 1 [0216.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38340 [0216.284] SetFilePointerEx (in: hFile=0x1dac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.284] WriteFile (in: hFile=0x1dac, lpBuffer=0x7ddbde0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x103bfb38, lpOverlapped=0x0 | out: lpBuffer=0x7ddbde0*, lpNumberOfBytesWritten=0x103bfb38*=0x10c, lpOverlapped=0x0) returned 1 [0218.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54048 [0218.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54048) returned 1 [0218.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e54048 [0218.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53be8 [0218.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54138 [0218.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54138) returned 1 [0218.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.359] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="9f") returned 2 [0218.359] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="53") returned 2 [0218.359] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="af") returned 2 [0218.359] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="8a") returned 2 [0218.359] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="24") returned 2 [0218.359] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="a3") returned 2 [0218.359] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="96") returned 2 [0218.359] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="97") returned 2 [0218.359] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="61") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="37") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="f9") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="f8") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="ed") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="59") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="1a") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="51") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="5d") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="97") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="5a") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="0d") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="bd") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="80") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="b4") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.360] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="09") returned 2 [0218.360] RtlInitAnsiString (in: DestinationString=0x103bfac0, SourceString="9f53af8a24a396976137f9f8ed591a515d975a0dbd80b47f3e09" | out: DestinationString="9f53af8a24a396976137f9f8ed591a515d975a0dbd80b47f3e09") [0218.360] RtlAnsiStringToUnicodeString (in: DestinationString=0x103bfab8, SourceString="9f53af8a24a396976137f9f8ed591a515d975a0dbd80b47f3e09", AllocateDestinationString=1 | out: DestinationString="9f53af8a24a396976137f9f8ed591a515d975a0dbd80b47f3e09") returned 0x0 [0218.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cbd0 [0224.867] __SEH_epilog4 () [0224.867] CloseHandle (hObject=0x860) returned 1 [0224.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5fa28) returned 1 [0224.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b827c0) returned 1 Thread: id = 7064 os_tid = 0x23e4 [0202.696] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json")) returned 0x2020 [0202.697] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0210.837] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14f8 [0210.838] GetFileSizeEx (in: hFile=0x14f8, lpFileSize=0xe7bfcbc | out: lpFileSize=0xe7bfcbc*=650) returned 1 [0210.838] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x286, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.838] ReadFile (in: hFile=0x14f8, lpBuffer=0xe7bfc98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe7bfca8, lpOverlapped=0x0 | out: lpBuffer=0xe7bfc98*, lpNumberOfBytesRead=0xe7bfca8*=0x4, lpOverlapped=0x0) returned 1 [0210.913] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.913] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53558 [0210.914] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535a8 [0210.914] NtQuerySystemTime (in: CurrentTime=0xe7bfc30 | out: CurrentTime=0xe7bfc30*=132462177894912000) returned 0x0 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x747963f4 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x66da96f [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x3599691b [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x479c64c2 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x23d09603 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0xe884e8e [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x59972064 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x41e69e25 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x38b3b872 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x600da6c3 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x4034a3fc [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x42cccc2d [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x2ed6f9ed [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x667c85d7 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x57a94bf5 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x392e8917 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x6c6932a1 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x443f510 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x27198519 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x1d393977 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x7d2435a2 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x2583437f [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x49009c9b [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x3bd4afd1 [0210.914] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x21f58899 [0210.915] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0xc4a15f5 [0210.915] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x61aa3e86 [0210.915] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x6e6f669d [0210.915] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x34e26d13 [0210.915] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x1b77268b [0210.915] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x726c7c3f [0210.915] RtlRandomEx (in: Seed=0xe7bfc28 | out: Seed=0xe7bfc28) returned 0x51544c86 [0210.926] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.926] WriteFile (in: hFile=0x14f8, lpBuffer=0x10d62c88*, nNumberOfBytesToWrite=0x28a, lpNumberOfBytesWritten=0xe7bfc28, lpOverlapped=0x0 | out: lpBuffer=0x10d62c88*, lpNumberOfBytesWritten=0xe7bfc28*=0x28a, lpOverlapped=0x0) returned 1 [0216.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b370 [0216.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa38 [0216.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa38) returned 1 [0216.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d62c88) returned 1 [0216.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d5f080) returned 1 [0216.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cdb0) returned 1 [0216.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd340) returned 1 [0216.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37da0 [0216.281] SetFilePointerEx (in: hFile=0x14f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.281] WriteFile (in: hFile=0x14f8, lpBuffer=0x7ddbbb0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe7bfcb0, lpOverlapped=0x0 | out: lpBuffer=0x7ddbbb0*, lpNumberOfBytesWritten=0xe7bfcb0*=0x10c, lpOverlapped=0x0) returned 1 [0218.350] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f30 [0218.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f30) returned 1 [0218.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53f30 [0218.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e539b8 [0218.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535a8 [0218.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535a8) returned 1 [0218.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.351] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.351] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="e3") returned 2 [0218.351] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="28") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="f4") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="54") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="d7") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="cb") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="62") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="52") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="1a") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="23") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="c3") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="2a") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="bc") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="f4") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="6d") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="2b") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="7c") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="72") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="8a") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="b1") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="09") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="29") returned 2 [0218.352] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="27") returned 2 [0218.352] RtlInitAnsiString (in: DestinationString=0xe7bfc38, SourceString="e328f454d7cb62521a23c32abcf4d66d2b7c728a7f2fb1092927" | out: DestinationString="e328f454d7cb62521a23c32abcf4d66d2b7c728a7f2fb1092927") [0218.353] RtlAnsiStringToUnicodeString (in: DestinationString=0xe7bfc30, SourceString="e328f454d7cb62521a23c32abcf4d66d2b7c728a7f2fb1092927", AllocateDestinationString=1 | out: DestinationString="e328f454d7cb62521a23c32abcf4d66d2b7c728a7f2fb1092927") returned 0x0 [0218.353] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cea0 [0224.865] __SEH_epilog4 () [0224.865] CloseHandle (hObject=0xe04) returned 1 [0224.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ecc0) returned 1 [0224.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80b38) returned 1 Thread: id = 7065 os_tid = 0x2450 [0202.697] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json")) returned 0x2020 [0202.698] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0210.840] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xbc4 [0210.841] GetFileSizeEx (in: hFile=0xbc4, lpFileSize=0xea8fafc | out: lpFileSize=0xea8fafc*=642) returned 1 [0210.841] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x27e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.841] ReadFile (in: hFile=0xbc4, lpBuffer=0xea8fad8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xea8fae8, lpOverlapped=0x0 | out: lpBuffer=0xea8fad8*, lpNumberOfBytesRead=0xea8fae8*=0x4, lpOverlapped=0x0) returned 1 [0210.926] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535a8 [0210.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a30 [0210.927] NtQuerySystemTime (in: CurrentTime=0xea8fa70 | out: CurrentTime=0xea8fa70*=132462177895068000) returned 0x0 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x48129e4c [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x40a1b989 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x3c3ff71c [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x4f00d3de [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x57b73a0b [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x7d896a41 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x3c2ac8aa [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x566beef3 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x50de7db7 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x129294b1 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x71f11a1c [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x479c41ca [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x77354309 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x83b8074 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x4f76f88b [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x18ca3219 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x59d74ef6 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x6eb0de61 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x77e26a50 [0210.927] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x56166adc [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x64b45475 [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x7aba5c1d [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0xe5f16ea [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x670c99a2 [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x3525108c [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x10769836 [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0xeab4456 [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x2e2f84b6 [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x7f2f5fbe [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x129121ae [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x49f0f013 [0210.928] RtlRandomEx (in: Seed=0xea8fa68 | out: Seed=0xea8fa68) returned 0x405a93e0 [0210.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54070) returned 1 [0210.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d66890 [0210.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d6a498 [0210.938] ReadFile (in: hFile=0xbc4, lpBuffer=0x10d66890, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0xea8fa64, lpOverlapped=0x0 | out: lpBuffer=0x10d66890*, lpNumberOfBytesRead=0xea8fa64*=0x282, lpOverlapped=0x0) returned 1 [0210.938] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.938] WriteFile (in: hFile=0xbc4, lpBuffer=0x10d6a498*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0xea8fa68, lpOverlapped=0x0 | out: lpBuffer=0x10d6a498*, lpNumberOfBytesWritten=0xea8fa68*=0x282, lpOverlapped=0x0) returned 1 [0216.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a560 [0216.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5dcd8 [0216.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5dcd8) returned 1 [0216.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d6a498) returned 1 [0216.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d66890) returned 1 [0216.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cae0) returned 1 [0216.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbccc8) returned 1 [0216.279] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b60 [0216.279] SetFilePointerEx (in: hFile=0xbc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.279] WriteFile (in: hFile=0xbc4, lpBuffer=0x7ddba98*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xea8faf0, lpOverlapped=0x0 | out: lpBuffer=0x7ddba98*, lpNumberOfBytesWritten=0xea8faf0*=0x10c, lpOverlapped=0x0) returned 1 [0218.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.346] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c248 [0218.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c248) returned 1 [0218.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c248 [0218.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be60 [0218.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baf0 [0218.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baf0) returned 1 [0218.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.347] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.347] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="40") returned 2 [0218.347] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="fc") returned 2 [0218.347] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="7e") returned 2 [0218.347] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="f0") returned 2 [0218.347] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="4b") returned 2 [0218.347] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="67") returned 2 [0218.347] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="52") returned 2 [0218.347] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="ac") returned 2 [0218.347] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="6b") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="f5") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="b1") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="69") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="98") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="17") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="02") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="ba") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="9a") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="1d") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="8f") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="9e") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="85") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="26") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="69") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="f3") returned 2 [0218.348] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="8a") returned 2 [0218.348] RtlInitAnsiString (in: DestinationString=0xea8fa78, SourceString="40fc7ef04b6752ac6bf5b169981702ba9a1d8f9e85e62669f38a" | out: DestinationString="40fc7ef04b6752ac6bf5b169981702ba9a1d8f9e85e62669f38a") [0218.348] RtlAnsiStringToUnicodeString (in: DestinationString=0xea8fa70, SourceString="40fc7ef04b6752ac6bf5b169981702ba9a1d8f9e85e62669f38a", AllocateDestinationString=1 | out: DestinationString="40fc7ef04b6752ac6bf5b169981702ba9a1d8f9e85e62669f38a") returned 0x0 [0218.348] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c450 [0224.859] __SEH_epilog4 () [0224.859] CloseHandle (hObject=0x2328) returned 1 [0224.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f410) returned 1 [0224.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80c60) returned 1 Thread: id = 7066 os_tid = 0xf40 [0202.698] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json")) returned 0x2020 [0202.699] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0210.843] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10c0 [0210.843] GetFileSizeEx (in: hFile=0x10c0, lpFileSize=0x1050fd34 | out: lpFileSize=0x1050fd34*=671) returned 1 [0210.843] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x29b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.843] ReadFile (in: hFile=0x10c0, lpBuffer=0x1050fd10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1050fd20, lpOverlapped=0x0 | out: lpBuffer=0x1050fd10*, lpNumberOfBytesRead=0x1050fd20*=0x4, lpOverlapped=0x0) returned 1 [0210.846] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53878 [0210.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53800 [0210.846] NtQuerySystemTime (in: CurrentTime=0x1050fca8 | out: CurrentTime=0x1050fca8*=132462177894288000) returned 0x0 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x29d8979b [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x323cf169 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x7948f3a2 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x3a994b8d [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x6aba9834 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x27172381 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x6cb0a270 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x7a115fe5 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x56290aaf [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x35c34ffb [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x335fb8af [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x4c96c43d [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x6ac74198 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x753b8c8b [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x30943214 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x1683db16 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x61e4a48 [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x6345036e [0210.846] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0xae0007b [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x7a6a79c5 [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x4b0ba309 [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x2bd2b9bc [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x77b7065a [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x38446016 [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x3733017 [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x1524446d [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x680b1d33 [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x4810bfb9 [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x15218d5f [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x2dcb3ed7 [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x6b2ef085 [0210.847] RtlRandomEx (in: Seed=0x1050fca0 | out: Seed=0x1050fca0) returned 0x5ee585a8 [0210.859] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.859] WriteFile (in: hFile=0x10c0, lpBuffer=0x7bf63a0*, nNumberOfBytesToWrite=0x29f, lpNumberOfBytesWritten=0x1050fca0, lpOverlapped=0x0 | out: lpBuffer=0x7bf63a0*, lpNumberOfBytesWritten=0x1050fca0*=0x29f, lpOverlapped=0x0) returned 1 [0215.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5e50 [0215.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5e50) returned 1 [0215.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf63a0) returned 1 [0215.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7beaf88) returned 1 [0215.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c978) returned 1 [0215.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc728) returned 1 [0215.823] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3240 [0215.824] SetFilePointerEx (in: hFile=0x10c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.824] WriteFile (in: hFile=0x10c0, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1050fd28, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0x1050fd28*=0x10c, lpOverlapped=0x0) returned 1 [0218.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb89f8 [0218.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0218.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30d8 [0218.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30d8) returned 1 [0218.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec30d8 [0218.133] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4578 [0218.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3628 [0218.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3628) returned 1 [0218.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0218.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb89f8) returned 1 [0218.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.134] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="0a") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="e2") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="56") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="db") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="c1") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="1b") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="bb") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="8b") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="9e") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="79") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="10") returned 2 [0218.134] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="ac") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="49") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="fb") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="93") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="20") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="d3") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="0a") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="f5") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="a7") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="00") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="d5") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="6c") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="df") returned 2 [0218.135] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="3f") returned 2 [0218.135] RtlInitAnsiString (in: DestinationString=0x1050fcb0, SourceString="0ae256dddbc11bbb8b9e7910ac49fb9320d30af5a700d56cdf3f" | out: DestinationString="0ae256dddbc11bbb8b9e7910ac49fb9320d30af5a700d56cdf3f") [0218.135] RtlAnsiStringToUnicodeString (in: DestinationString=0x1050fca8, SourceString="0ae256dddbc11bbb8b9e7910ac49fb9320d30af5a700d56cdf3f", AllocateDestinationString=1 | out: DestinationString="0ae256dddbc11bbb8b9e7910ac49fb9320d30af5a700d56cdf3f") returned 0x0 [0218.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f650 [0224.749] __SEH_epilog4 () [0224.749] CloseHandle (hObject=0xef4) returned 1 [0224.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd990) returned 1 [0224.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80a10) returned 1 Thread: id = 7067 os_tid = 0x2014 [0202.699] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json")) returned 0x2020 [0202.699] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0210.859] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d3c [0210.860] GetFileSizeEx (in: hFile=0x1d3c, lpFileSize=0xe9ff97c | out: lpFileSize=0xe9ff97c*=783) returned 1 [0210.860] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x30b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.860] ReadFile (in: hFile=0x1d3c, lpBuffer=0xe9ff958, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe9ff968, lpOverlapped=0x0 | out: lpBuffer=0xe9ff958*, lpNumberOfBytesRead=0xe9ff968*=0x4, lpOverlapped=0x0) returned 1 [0210.867] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53800 [0210.868] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53508 [0210.868] NtQuerySystemTime (in: CurrentTime=0xe9ff8f0 | out: CurrentTime=0xe9ff8f0*=132462177894444000) returned 0x0 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x799495d5 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x31092d4d [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x3d5323b8 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x4c9bf5c1 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x64a705d4 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x55ab3637 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0xbf18a52 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x22ca7488 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x7fafe9fe [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x93f8d1a [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x1428a6da [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x3f0a4600 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x254f8703 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x437640f8 [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x4d7bdd6c [0210.868] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x3e76f06d [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x23d6cbff [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x4ca20703 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x2f9b28ae [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x3f4e84e4 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x2074fee2 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0xd4a6e21 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x477ee1ee [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x79f62fd9 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x411d3251 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x38a6e426 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x37c613db [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x1e7f0b34 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x71f9f561 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x54925e72 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x29e4e56 [0210.869] RtlRandomEx (in: Seed=0xe9ff8e8 | out: Seed=0xe9ff8e8) returned 0x184342f [0210.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54070) returned 1 [0210.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf2798 [0210.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bdbf68 [0210.882] ReadFile (in: hFile=0x1d3c, lpBuffer=0x7bf2798, nNumberOfBytesToRead=0x30f, lpNumberOfBytesRead=0xe9ff8e4, lpOverlapped=0x0 | out: lpBuffer=0x7bf2798*, lpNumberOfBytesRead=0xe9ff8e4*=0x30f, lpOverlapped=0x0) returned 1 [0210.882] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.882] WriteFile (in: hFile=0x1d3c, lpBuffer=0x7bdbf68*, nNumberOfBytesToWrite=0x30f, lpNumberOfBytesWritten=0xe9ff8e8, lpOverlapped=0x0 | out: lpBuffer=0x7bdbf68*, lpNumberOfBytesWritten=0xe9ff8e8*=0x30f, lpOverlapped=0x0) returned 1 [0215.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec35b0 [0215.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3538 [0215.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3538) returned 1 [0215.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bdbf68) returned 1 [0215.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf2798) returned 1 [0215.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ca68) returned 1 [0215.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc698) returned 1 [0215.833] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3db0 [0215.833] SetFilePointerEx (in: hFile=0x1d3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.833] WriteFile (in: hFile=0x1d3c, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe9ff970, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0xe9ff970*=0x10c, lpOverlapped=0x0) returned 1 [0218.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cb0 [0218.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53cb0) returned 1 [0218.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53cb0 [0218.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53968 [0218.154] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53bc0 [0218.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53bc0) returned 1 [0218.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.155] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.155] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="e4") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="bc") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="52") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="ff") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="dc") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="87") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="1a") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="6e") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="bd") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="c5") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="09") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="ce") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="97") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="5c") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="1d") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="1b") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="98") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="e7") returned 2 [0218.155] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="12") returned 2 [0218.156] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="a1") returned 2 [0218.156] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="a1") returned 2 [0218.156] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="cb") returned 2 [0218.156] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="ef") returned 2 [0218.156] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="09") returned 2 [0218.156] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="4b") returned 2 [0218.156] RtlInitAnsiString (in: DestinationString=0xe9ff8f8, SourceString="e4bcd652ffdc871a6ebdc509ce975c1d1b98e712a1a1cbef094b" | out: DestinationString="e4bcd652ffdc871a6ebdc509ce975c1d1b98e712a1a1cbef094b") [0218.156] RtlAnsiStringToUnicodeString (in: DestinationString=0xe9ff8f0, SourceString="e4bcd652ffdc871a6ebdc509ce975c1d1b98e712a1a1cbef094b", AllocateDestinationString=1 | out: DestinationString="e4bcd652ffdc871a6ebdc509ce975c1d1b98e712a1a1cbef094b") returned 0x0 [0218.156] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f998 [0224.762] __SEH_epilog4 () [0224.762] CloseHandle (hObject=0xba0) returned 1 [0224.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc748) returned 1 [0224.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81918) returned 1 Thread: id = 7068 os_tid = 0x206c [0202.700] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json")) returned 0x2020 [0202.700] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0210.893] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd7c [0210.893] GetFileSizeEx (in: hFile=0xd7c, lpFileSize=0xb13f8a4 | out: lpFileSize=0xb13f8a4*=668) returned 1 [0210.894] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x298, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.894] ReadFile (in: hFile=0xd7c, lpBuffer=0xb13f880, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb13f890, lpOverlapped=0x0 | out: lpBuffer=0xb13f880*, lpNumberOfBytesRead=0xb13f890*=0x4, lpOverlapped=0x0) returned 1 [0210.898] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53940 [0210.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53558 [0210.899] NtQuerySystemTime (in: CurrentTime=0xb13f818 | out: CurrentTime=0xb13f818*=132462177894756000) returned 0x0 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x75630d01 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x53fde022 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x8a4c956 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x69a285f2 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x66efad29 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x1065a289 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x505b28da [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x4caed603 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x27fb43a0 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x5dc8e120 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x3a3ab0 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x5a18bd6 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x34c37f14 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x1294ef60 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x23585c2f [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x3c98471 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x347ff437 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x213e8c09 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x55785da3 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x1aa42ab7 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x3338c4a3 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x31b18b4f [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x5fe76bde [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x1df04c37 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x66c753b1 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x7a279fa [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x29a26477 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x7f85113e [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x49767cf9 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x31872b01 [0210.899] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x525c1fa [0210.900] RtlRandomEx (in: Seed=0xb13f810 | out: Seed=0xb13f810) returned 0x4d99a490 [0210.908] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.908] WriteFile (in: hFile=0xd7c, lpBuffer=0x10d5b478*, nNumberOfBytesToWrite=0x29c, lpNumberOfBytesWritten=0xb13f810, lpOverlapped=0x0 | out: lpBuffer=0x10d5b478*, lpNumberOfBytesWritten=0xb13f810*=0x29c, lpOverlapped=0x0) returned 1 [0215.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3128 [0215.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c18 [0215.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c18) returned 1 [0215.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d5b478) returned 1 [0215.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c143e0) returned 1 [0215.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cf18) returned 1 [0215.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd2f8) returned 1 [0215.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3cf0 [0215.828] SetFilePointerEx (in: hFile=0xd7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.828] WriteFile (in: hFile=0xd7c, lpBuffer=0x3dec940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb13f898, lpOverlapped=0x0 | out: lpBuffer=0x3dec940*, lpNumberOfBytesWritten=0xb13f898*=0x10c, lpOverlapped=0x0) returned 1 [0218.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0218.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52a68) returned 1 [0218.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52a68 [0218.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53530 [0218.142] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e533c8 [0218.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e533c8) returned 1 [0218.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.143] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.143] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="95") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="a2") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="2e") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="19") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="97") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="5d") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="85") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="86") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="a5") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="99") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="ed") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="50") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="90") returned 2 [0218.143] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="b2") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="21") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="68") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="e2") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="20") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="97") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="b6") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="81") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="88") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="a0") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="85") returned 2 [0218.144] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="56") returned 2 [0218.144] RtlInitAnsiString (in: DestinationString=0xb13f820, SourceString="95a22e19975de68586a599ed5090b22168e22097b68188a08556" | out: DestinationString="95a22e19975de68586a599ed5090b22168e22097b68188a08556") [0218.144] RtlAnsiStringToUnicodeString (in: DestinationString=0xb13f818, SourceString="95a22e19975de68586a599ed5090b22168e22097b68188a08556", AllocateDestinationString=1 | out: DestinationString="95a22e19975de68586a599ed5090b22168e22097b68188a08556") returned 0x0 [0218.144] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f290 [0224.739] __SEH_epilog4 () [0224.739] CloseHandle (hObject=0x231c) returned 1 [0224.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9f40) returned 1 [0224.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80570) returned 1 Thread: id = 7069 os_tid = 0x2070 [0202.701] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0202.701] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0210.911] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x113c [0210.912] GetFileSizeEx (in: hFile=0x113c, lpFileSize=0x7ebfe54 | out: lpFileSize=0x7ebfe54*=661) returned 1 [0210.912] SetFilePointerEx (in: hFile=0x113c, liDistanceToMove=0x291, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.912] ReadFile (in: hFile=0x113c, lpBuffer=0x7ebfe30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7ebfe40, lpOverlapped=0x0 | out: lpBuffer=0x7ebfe30*, lpNumberOfBytesRead=0x7ebfe40*=0x4, lpOverlapped=0x0) returned 1 [0210.952] SetFilePointerEx (in: hFile=0x113c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b20 [0210.952] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53bc0 [0210.952] NtQuerySystemTime (in: CurrentTime=0x7ebfdc8 | out: CurrentTime=0x7ebfdc8*=132462177895380000) returned 0x0 [0210.952] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x3833bd49 [0210.952] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x6461aece [0210.952] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x618959b2 [0210.952] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x17b4fcd6 [0210.952] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x60dc5700 [0210.952] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x6cdfc8a3 [0210.952] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x10c280f9 [0210.952] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x1ba31811 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x48912876 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x4b39f35b [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x2ea9613e [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x119f49fa [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x5f9b25eb [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x207ca2cc [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x114713bb [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x7b557388 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x341b32f0 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x7d0c29bb [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x11ae81d6 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x74a0f418 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x79141cfd [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x61ea7f7d [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x2c568720 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x19081147 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x1100310 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x4b9eb936 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x47ef9ab [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x724426ed [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x77f531b5 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x5d25fd71 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x44e3c1c1 [0210.953] RtlRandomEx (in: Seed=0x7ebfdc0 | out: Seed=0x7ebfdc0) returned 0x630419ac [0210.962] SetFilePointerEx (in: hFile=0x113c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.962] WriteFile (in: hFile=0x113c, lpBuffer=0x10d794b8*, nNumberOfBytesToWrite=0x295, lpNumberOfBytesWritten=0x7ebfdc0, lpOverlapped=0x0 | out: lpBuffer=0x10d794b8*, lpNumberOfBytesWritten=0x7ebfdc0*=0x295, lpOverlapped=0x0) returned 1 [0215.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cf0 [0215.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4be0 [0215.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4be0) returned 1 [0215.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d794b8) returned 1 [0215.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d758b0) returned 1 [0215.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ce28) returned 1 [0215.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc5c0) returned 1 [0215.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3f60 [0215.830] SetFilePointerEx (in: hFile=0x113c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.830] WriteFile (in: hFile=0x113c, lpBuffer=0x3deca58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x7ebfe48, lpOverlapped=0x0 | out: lpBuffer=0x3deca58*, lpNumberOfBytesWritten=0x7ebfe48*=0x10c, lpOverlapped=0x0) returned 1 [0218.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54188 [0218.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54188) returned 1 [0218.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e54188 [0218.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54250 [0218.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53940 [0218.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53940) returned 1 [0218.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.147] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.147] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="44") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="ac") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="59") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="02") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="c6") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="d5") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="5a") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="74") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="82") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="59") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="72") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="90") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="96") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="84") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="c7") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="fe") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="f7") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="39") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="35") returned 2 [0218.147] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="f6") returned 2 [0218.148] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="36") returned 2 [0218.148] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="b6") returned 2 [0218.148] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="63") returned 2 [0218.148] RtlInitAnsiString (in: DestinationString=0x7ebfdd0, SourceString="44acd65902c6d55add7482597290ca9684c7fef73935f636b663" | out: DestinationString="44acd65902c6d55add7482597290ca9684c7fef73935f636b663") [0218.148] RtlAnsiStringToUnicodeString (in: DestinationString=0x7ebfdc8, SourceString="44acd65902c6d55add7482597290ca9684c7fef73935f636b663", AllocateDestinationString=1 | out: DestinationString="44acd65902c6d55add7482597290ca9684c7fef73935f636b663") returned 0x0 [0218.148] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f1a0 [0224.752] __SEH_epilog4 () [0224.752] CloseHandle (hObject=0xe68) returned 1 [0224.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dddc00) returned 1 [0224.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5fb60) returned 1 Thread: id = 7070 os_tid = 0x2074 [0202.701] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0202.702] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0210.965] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x12fc [0210.966] GetFileSizeEx (in: hFile=0x12fc, lpFileSize=0x1070ff1c | out: lpFileSize=0x1070ff1c*=667) returned 1 [0210.966] SetFilePointerEx (in: hFile=0x12fc, liDistanceToMove=0x297, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.966] ReadFile (in: hFile=0x12fc, lpBuffer=0x1070fef8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1070ff08, lpOverlapped=0x0 | out: lpBuffer=0x1070fef8*, lpNumberOfBytesRead=0x1070ff08*=0x4, lpOverlapped=0x0) returned 1 [0210.974] SetFilePointerEx (in: hFile=0x12fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53bc0 [0210.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53990 [0210.974] NtQuerySystemTime (in: CurrentTime=0x1070fe90 | out: CurrentTime=0x1070fe90*=132462177895536000) returned 0x0 [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x6ee6b08f [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x48415d74 [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x30590448 [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x373c8d67 [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0xba806d6 [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x3fcfb990 [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x7f936afc [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x38172961 [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x39dd5dd7 [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x47175530 [0210.974] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x1f19cf36 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x4b0ebc1a [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x4862e5b9 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x77bd6c11 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0xbbccaaf [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x4364d5e4 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x523365e1 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x5b870ce [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x30277ccb [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x41c879fe [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x42e6dedd [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x31cba185 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x1f0be5b4 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x374aaa79 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x27fc6028 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x2900caa8 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x7e83fcbe [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x14b1bf56 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x18527a60 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x7f0486fe [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x17cdd115 [0210.975] RtlRandomEx (in: Seed=0x1070fe88 | out: Seed=0x1070fe88) returned 0x60db5289 [0210.988] SetFilePointerEx (in: hFile=0x12fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.988] WriteFile (in: hFile=0x12fc, lpBuffer=0x10d80cc8*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x1070fe88, lpOverlapped=0x0 | out: lpBuffer=0x10d80cc8*, lpNumberOfBytesWritten=0x1070fe88*=0x29b, lpOverlapped=0x0) returned 1 [0215.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40c8 [0215.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5928 [0215.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5928) returned 1 [0215.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d80cc8) returned 1 [0215.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d7d0c0) returned 1 [0215.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cb58) returned 1 [0215.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc020) returned 1 [0215.831] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db37e0 [0215.831] SetFilePointerEx (in: hFile=0x12fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.831] WriteFile (in: hFile=0x12fc, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1070ff10, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0x1070ff10*=0x10c, lpOverlapped=0x0) returned 1 [0218.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53af8 [0218.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53af8) returned 1 [0218.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53af8 [0218.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53fd0 [0218.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b20 [0218.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53b20) returned 1 [0218.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.150] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.150] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.150] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="cb") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="86") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="5b") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="b7") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="f9") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="ea") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="3a") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="a9") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="1c") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="9d") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="13") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="1e") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="d4") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="15") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="75") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="ac") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="79") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="b8") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="28") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="1c") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="0f") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="23") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="33") returned 2 [0218.151] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="45") returned 2 [0218.152] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="07") returned 2 [0218.152] RtlInitAnsiString (in: DestinationString=0x1070fe98, SourceString="e6cb865bb7f9ea3aa91c9d131ed41575ac79b8281c0f23334507" | out: DestinationString="e6cb865bb7f9ea3aa91c9d131ed41575ac79b8281c0f23334507") [0218.152] RtlAnsiStringToUnicodeString (in: DestinationString=0x1070fe90, SourceString="e6cb865bb7f9ea3aa91c9d131ed41575ac79b8281c0f23334507", AllocateDestinationString=1 | out: DestinationString="e6cb865bb7f9ea3aa91c9d131ed41575ac79b8281c0f23334507") returned 0x0 [0218.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f0b0 [0224.755] __SEH_epilog4 () [0224.755] CloseHandle (hObject=0x74c) returned 1 [0224.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcfd0) returned 1 [0224.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5fc98) returned 1 Thread: id = 7071 os_tid = 0x207c [0202.702] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json")) returned 0x2020 [0202.702] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", dwFileAttributes=0x20) returned 1 [0210.988] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x121c [0210.989] GetFileSizeEx (in: hFile=0x121c, lpFileSize=0xb70fbec | out: lpFileSize=0xb70fbec*=666) returned 1 [0210.989] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x296, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.989] ReadFile (in: hFile=0x121c, lpBuffer=0xb70fbc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb70fbd8, lpOverlapped=0x0 | out: lpBuffer=0xb70fbc8*, lpNumberOfBytesRead=0xb70fbd8*=0x4, lpOverlapped=0x0) returned 1 [0210.992] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53990 [0210.992] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a58 [0210.992] NtQuerySystemTime (in: CurrentTime=0xb70fb60 | out: CurrentTime=0xb70fb60*=132462177895692000) returned 0x0 [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x2332cbe8 [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x2db3b568 [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x44fde3c7 [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x2f1271bd [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x76c5e097 [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x514d44d9 [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x65368124 [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x1dbb77d6 [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x16de20f1 [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0xebc1e2d [0210.992] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x16b125b5 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x65008103 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x71d58a3a [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x248a5bbf [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x1357f7a7 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0xb808bb5 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x2625fbbc [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x1cc0033a [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x48145466 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x72ba4b82 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x39bad5ca [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x776ea6d0 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x2edc726b [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x551deaf1 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x362b3f4a [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x3659925a [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0xe304652 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x3081e1b6 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x422a221b [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x4acf2812 [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x6e92108d [0210.993] RtlRandomEx (in: Seed=0xb70fb58 | out: Seed=0xb70fb58) returned 0x65cb276d [0211.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54070) returned 1 [0211.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d848d0 [0211.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d884d8 [0211.008] ReadFile (in: hFile=0x121c, lpBuffer=0x10d848d0, nNumberOfBytesToRead=0x29a, lpNumberOfBytesRead=0xb70fb54, lpOverlapped=0x0 | out: lpBuffer=0x10d848d0*, lpNumberOfBytesRead=0xb70fb54*=0x29a, lpOverlapped=0x0) returned 1 [0211.008] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.008] WriteFile (in: hFile=0x121c, lpBuffer=0x10d884d8*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0xb70fb58, lpOverlapped=0x0 | out: lpBuffer=0x10d884d8*, lpNumberOfBytesWritten=0xb70fb58*=0x29a, lpOverlapped=0x0) returned 1 [0213.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0213.449] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0213.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0213.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d884d8) returned 1 [0213.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d848d0) returned 1 [0213.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c450) returned 1 [0213.450] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc188) returned 1 [0213.450] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a383a0 [0213.450] SetFilePointerEx (in: hFile=0x121c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.450] WriteFile (in: hFile=0x121c, lpBuffer=0x7a39308*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb70fbe0, lpOverlapped=0x0 | out: lpBuffer=0x7a39308*, lpNumberOfBytesWritten=0xb70fbe0*=0x10c, lpOverlapped=0x0) returned 1 [0213.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0213.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0213.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2db8 [0213.752] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0213.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec54a0 [0213.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec54a0) returned 1 [0213.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.753] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="85") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="dd") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="18") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="f0") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="0a") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="ea") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="71") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="32") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="9d") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="a6") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="05") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="33") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="78") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="bf") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="7a") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="5e") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="49") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="4e") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="a6") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="d5") returned 2 [0213.753] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="76") returned 2 [0213.754] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="72") returned 2 [0213.754] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="5d") returned 2 [0213.754] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="9f") returned 2 [0213.754] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="8b") returned 2 [0213.754] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="ef") returned 2 [0213.754] RtlInitAnsiString (in: DestinationString=0xb70fb68, SourceString="85dd18f00aea71329da6053378bf7a5e494ea6d576725d9f8bef" | out: DestinationString="85dd18f00aea71329da6053378bf7a5e494ea6d576725d9f8bef") [0213.754] RtlAnsiStringToUnicodeString (in: DestinationString=0xb70fb60, SourceString="85dd18f00aea71329da6053378bf7a5e494ea6d576725d9f8bef", AllocateDestinationString=1 | out: DestinationString="85dd18f00aea71329da6053378bf7a5e494ea6d576725d9f8bef") returned 0x0 [0213.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c360 Thread: id = 7072 os_tid = 0x2080 [0202.703] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json")) returned 0x2020 [0202.703] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0211.009] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17c4 [0211.009] GetFileSizeEx (in: hFile=0x17c4, lpFileSize=0x93cfc24 | out: lpFileSize=0x93cfc24*=789) returned 1 [0211.010] SetFilePointerEx (in: hFile=0x17c4, liDistanceToMove=0x311, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.010] ReadFile (in: hFile=0x17c4, lpBuffer=0x93cfc00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x93cfc10, lpOverlapped=0x0 | out: lpBuffer=0x93cfc00*, lpNumberOfBytesRead=0x93cfc10*=0x4, lpOverlapped=0x0) returned 1 [0211.400] SetFilePointerEx (in: hFile=0x17c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.400] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0211.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e540e8 [0211.401] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54138 [0211.401] NtQuerySystemTime (in: CurrentTime=0x93cfb98 | out: CurrentTime=0x93cfb98*=132462177899748000) returned 0x0 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x3219ccaf [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x5178c346 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x1fc17c2 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x7c81d3be [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x66e524a8 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x3f63db45 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x5c8461f [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x7c97d355 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x21e8d693 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x3c592851 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x7be9e6ba [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x3940f171 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x41e259d6 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x50644d [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x26163515 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x6bd4927b [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x16c3d767 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x71a108ad [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x71a00c98 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x796f05c9 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x54035465 [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x7372c05c [0211.401] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x44e59756 [0211.402] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x15031889 [0211.402] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0xaa23423 [0211.402] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x5892bdd5 [0211.402] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x7c01497e [0211.402] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x7a58f259 [0211.402] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x2ad638a [0211.402] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x1cd72962 [0211.402] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x14250c30 [0211.402] RtlRandomEx (in: Seed=0x93cfb90 | out: Seed=0x93cfb90) returned 0x6dac010e [0211.411] SetFilePointerEx (in: hFile=0x17c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.412] WriteFile (in: hFile=0x17c4, lpBuffer=0x7c053c0*, nNumberOfBytesToWrite=0x315, lpNumberOfBytesWritten=0x93cfb90, lpOverlapped=0x0 | out: lpBuffer=0x7c053c0*, lpNumberOfBytesWritten=0x93cfb90*=0x315, lpOverlapped=0x0) returned 1 [0215.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2930 [0215.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4910 [0215.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4910) returned 1 [0215.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c053c0) returned 1 [0215.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c107d8) returned 1 [0215.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30153a0) returned 1 [0215.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc9b0) returned 1 [0215.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37c20 [0215.968] SetFilePointerEx (in: hFile=0x17c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.968] WriteFile (in: hFile=0x17c4, lpBuffer=0x7ddb868*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x93cfc18, lpOverlapped=0x0 | out: lpBuffer=0x7ddb868*, lpNumberOfBytesWritten=0x93cfc18*=0x10c, lpOverlapped=0x0) returned 1 [0218.317] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dcaaf8 [0218.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dcaaf8) returned 1 [0218.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dcaaf8 [0218.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca120 [0218.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9b8 [0218.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9b8) returned 1 [0218.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.318] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="d9") returned 2 [0218.318] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="0e") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="33") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="47") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="38") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="1e") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="46") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="9a") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="87") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="6d") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="a3") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="34") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="cf") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="2a") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="f9") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="a6") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="9f") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="98") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="29") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="a1") returned 2 [0218.319] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="36") returned 2 [0218.320] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="59") returned 2 [0218.320] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="67") returned 2 [0218.320] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="55") returned 2 [0218.320] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="16") returned 2 [0218.320] RtlInitAnsiString (in: DestinationString=0x93cfba0, SourceString="d90e3347381e469a872f6da334cf2af9a69f9829a13659675516" | out: DestinationString="d90e3347381e469a872f6da334cf2af9a69f9829a13659675516") [0218.320] RtlAnsiStringToUnicodeString (in: DestinationString=0x93cfb98, SourceString="d90e3347381e469a872f6da334cf2af9a69f9829a13659675516", AllocateDestinationString=1 | out: DestinationString="d90e3347381e469a872f6da334cf2af9a69f9829a13659675516") returned 0x0 [0218.320] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c108 [0224.845] __SEH_epilog4 () [0224.845] CloseHandle (hObject=0x11bc) returned 1 [0224.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f8f0) returned 1 [0224.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b807c0) returned 1 Thread: id = 7073 os_tid = 0x2084 [0202.704] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0202.704] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0211.012] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x10e0 [0211.012] GetFileSizeEx (in: hFile=0x10e0, lpFileSize=0xb1cfb7c | out: lpFileSize=0xb1cfb7c*=640) returned 1 [0211.012] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x27c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.012] ReadFile (in: hFile=0x10e0, lpBuffer=0xb1cfb58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb1cfb68, lpOverlapped=0x0 | out: lpBuffer=0xb1cfb58*, lpNumberOfBytesRead=0xb1cfb68*=0x4, lpOverlapped=0x0) returned 1 [0211.456] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0211.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54138 [0211.456] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0211.456] NtQuerySystemTime (in: CurrentTime=0xb1cfaf0 | out: CurrentTime=0xb1cfaf0*=132462177900372000) returned 0x0 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x59d569b4 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x68a711f6 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x471f9405 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0xafa94e1 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x652470db [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x3bdbded6 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x49b5f1f1 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x6d34e8 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x6279b77a [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x21a602c1 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x42460b6b [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x60a6780f [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x3a0269a0 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x7b42010e [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x3f75b04 [0211.456] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x6e32b46e [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x69c31568 [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x47e8d4d6 [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x15031889 [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x782c604a [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x7953bd7e [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x4ae2dce3 [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x520bca7b [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x7a2f9b6e [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x3125d86b [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x17eb1195 [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x15bbc4aa [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x125fe173 [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x5476eb24 [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x5c46541f [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0xdfbd8a7 [0211.457] RtlRandomEx (in: Seed=0xb1cfae8 | out: Seed=0xb1cfae8) returned 0x2efe910f [0211.467] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.467] WriteFile (in: hFile=0x10e0, lpBuffer=0x7dc8818*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0xb1cfae8, lpOverlapped=0x0 | out: lpBuffer=0x7dc8818*, lpNumberOfBytesWritten=0xb1cfae8*=0x280, lpOverlapped=0x0) returned 1 [0216.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b410 [0216.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ada8 [0216.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ada8) returned 1 [0216.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc8818) returned 1 [0216.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dc4c10) returned 1 [0216.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 [0216.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbca40) returned 1 [0216.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37b00 [0216.282] SetFilePointerEx (in: hFile=0x10e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.282] WriteFile (in: hFile=0x10e0, lpBuffer=0x7ddbcc8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb1cfb70, lpOverlapped=0x0 | out: lpBuffer=0x7ddbcc8*, lpNumberOfBytesWritten=0xb1cfb70*=0x10c, lpOverlapped=0x0) returned 1 [0218.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538a0 [0218.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538a0) returned 1 [0218.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e538a0 [0218.354] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538f0 [0218.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53558 [0218.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53558) returned 1 [0218.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.355] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.355] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="35") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="49") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="52") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="f5") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="ec") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="18") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="70") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="ad") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="99") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="d8") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="77") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="62") returned 2 [0218.355] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="16") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="bf") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="ea") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="8f") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="d5") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="47") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="31") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="67") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="33") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="5c") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="c3") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="55") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="19") returned 2 [0218.356] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="66") returned 2 [0218.356] RtlInitAnsiString (in: DestinationString=0xb1cfaf8, SourceString="354952f5ec1870ad99d8776216bfea8fd5473167335cc3551966" | out: DestinationString="354952f5ec1870ad99d8776216bfea8fd5473167335cc3551966") [0218.356] RtlAnsiStringToUnicodeString (in: DestinationString=0xb1cfaf0, SourceString="354952f5ec1870ad99d8776216bfea8fd5473167335cc3551966", AllocateDestinationString=1 | out: DestinationString="354952f5ec1870ad99d8776216bfea8fd5473167335cc3551966") returned 0x0 [0218.356] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c540 [0224.936] CloseHandle (hObject=0x10e0) returned 1 [0224.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 [0224.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5fdd0) returned 1 Thread: id = 7074 os_tid = 0x2088 [0202.705] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json")) returned 0x2020 [0202.705] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0211.014] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1540 [0211.015] GetFileSizeEx (in: hFile=0x1540, lpFileSize=0x1082ff5c | out: lpFileSize=0x1082ff5c*=720) returned 1 [0211.015] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x2cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.015] ReadFile (in: hFile=0x1540, lpBuffer=0x1082ff38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1082ff48, lpOverlapped=0x0 | out: lpBuffer=0x1082ff38*, lpNumberOfBytesRead=0x1082ff48*=0x4, lpOverlapped=0x0) returned 1 [0211.467] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0211.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0211.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53da0 [0211.468] NtQuerySystemTime (in: CurrentTime=0x1082fed0 | out: CurrentTime=0x1082fed0*=132462177900528000) returned 0x0 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x50f3516 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x5c8461f [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x7210f546 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x790968b8 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x4fcf000f [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x78df16db [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x10487e65 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x7acec0c7 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0xd3929fd [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x4c2e9abf [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x7d920ce8 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x45aea6bd [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x49027c21 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x5892bdd5 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x3591f162 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x65055bf8 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x79ff207e [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x76319790 [0211.468] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x19b84670 [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x3d265f1f [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x5d7671b4 [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x27af9d71 [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x17eb1195 [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x11fb0bf8 [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x659f8845 [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x2ccbab56 [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x79e0bd12 [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x389b997b [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x554071fb [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0xfa37730 [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x20d2ac65 [0211.469] RtlRandomEx (in: Seed=0x1082fec8 | out: Seed=0x1082fec8) returned 0x4cb5848b [0211.480] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.481] WriteFile (in: hFile=0x1540, lpBuffer=0x10d90060*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x1082fec8, lpOverlapped=0x0 | out: lpBuffer=0x10d90060*, lpNumberOfBytesWritten=0x1082fec8*=0x2d0, lpOverlapped=0x0) returned 1 [0216.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bfa0 [0216.372] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5afd8 [0216.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5afd8) returned 1 [0216.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d90060) returned 1 [0216.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dcc420) returned 1 [0216.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0216.373] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec668) returned 1 [0216.373] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a382e0 [0216.373] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.373] WriteFile (in: hFile=0x1540, lpBuffer=0x7ddc010*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1082ff50, lpOverlapped=0x0 | out: lpBuffer=0x7ddc010*, lpNumberOfBytesWritten=0x1082ff50*=0x10c, lpOverlapped=0x0) returned 1 [0218.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd48 [0218.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd48) returned 1 [0218.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bd48 [0218.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c130 [0218.378] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb08 [0218.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb08) returned 1 [0218.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.379] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.379] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="4e") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="26") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="da") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="11") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="95") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="fb") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="a2") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="5e") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="41") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="5f") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="f7") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="6a") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="1e") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="3b") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="75") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="40") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="66") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.379] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="d5") returned 2 [0218.380] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="9f") returned 2 [0218.380] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="31") returned 2 [0218.380] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="02") returned 2 [0218.380] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="9a") returned 2 [0218.380] RtlInitAnsiString (in: DestinationString=0x1082fed8, SourceString="4e26da1195fba2d65e415ff76ad61e3b75402f662dd59f31029a" | out: DestinationString="4e26da1195fba2d65e415ff76ad61e3b75402f662dd59f31029a") [0218.380] RtlAnsiStringToUnicodeString (in: DestinationString=0x1082fed0, SourceString="4e26da1195fba2d65e415ff76ad61e3b75402f662dd59f31029a", AllocateDestinationString=1 | out: DestinationString="4e26da1195fba2d65e415ff76ad61e3b75402f662dd59f31029a") returned 0x0 [0218.380] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cb58 [0224.878] __SEH_epilog4 () [0224.878] CloseHandle (hObject=0xdf0) returned 1 [0224.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e300) returned 1 [0224.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b808e8) returned 1 Thread: id = 7075 os_tid = 0x208c [0202.705] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json")) returned 0x2020 [0202.706] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0210.767] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1234 [0210.768] GetFileSizeEx (in: hFile=0x1234, lpFileSize=0xd14fd0c | out: lpFileSize=0xd14fd0c*=812) returned 1 [0210.768] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x328, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.768] ReadFile (in: hFile=0x1234, lpBuffer=0xd14fce8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd14fcf8, lpOverlapped=0x0 | out: lpBuffer=0xd14fce8*, lpNumberOfBytesRead=0xd14fcf8*=0x4, lpOverlapped=0x0) returned 1 [0210.826] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0210.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52e50 [0210.826] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53878 [0210.826] NtQuerySystemTime (in: CurrentTime=0xd14fc80 | out: CurrentTime=0xd14fc80*=132462177893976000) returned 0x0 [0210.826] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x545e37 [0210.826] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0xb326d99 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x78fc48f0 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x40f4c404 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x67f14494 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x1d08b827 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x6eca3772 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x3083bfc [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x61fc1322 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x7e892c13 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x5e6fd478 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x4b7f0a9 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x41bdc8e4 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x2f37f21f [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x5bf9a22c [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x115c7a69 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x617cd3cc [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x7ee14c0c [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x711d3f69 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x2e10f98f [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x61d3e640 [0210.827] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x64c638e0 [0210.828] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x76b3165a [0210.828] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x3d74b562 [0210.828] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x3689a062 [0210.828] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x7a273a4c [0210.828] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x405f80ac [0210.828] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x1ea0544c [0210.828] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x738d76b8 [0210.828] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x3aa3211a [0210.828] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0x7c6cbee1 [0210.828] RtlRandomEx (in: Seed=0xd14fc78 | out: Seed=0xd14fc78) returned 0xb313e30 [0210.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54070) returned 1 [0210.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c08fc8 [0210.836] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c0cbd0 [0210.836] ReadFile (in: hFile=0x1234, lpBuffer=0x7c08fc8, nNumberOfBytesToRead=0x32c, lpNumberOfBytesRead=0xd14fc74, lpOverlapped=0x0 | out: lpBuffer=0x7c08fc8*, lpNumberOfBytesRead=0xd14fc74*=0x32c, lpOverlapped=0x0) returned 1 [0210.836] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.836] WriteFile (in: hFile=0x1234, lpBuffer=0x7c0cbd0*, nNumberOfBytesToWrite=0x32c, lpNumberOfBytesWritten=0xd14fc78, lpOverlapped=0x0 | out: lpBuffer=0x7c0cbd0*, lpNumberOfBytesWritten=0xd14fc78*=0x32c, lpOverlapped=0x0) returned 1 [0215.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0215.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ec0 [0215.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ec0) returned 1 [0215.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c0cbd0) returned 1 [0215.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c08fc8) returned 1 [0215.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c888) returned 1 [0215.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd268) returned 1 [0215.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37f20 [0215.942] SetFilePointerEx (in: hFile=0x1234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.942] WriteFile (in: hFile=0x1234, lpBuffer=0x7ddac60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd14fd00, lpOverlapped=0x0 | out: lpBuffer=0x7ddac60*, lpNumberOfBytesWritten=0xd14fd00*=0x10c, lpOverlapped=0x0) returned 1 [0218.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca710 [0218.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca710) returned 1 [0218.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca710 [0218.180] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e28 [0218.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca990 [0218.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca990) returned 1 [0218.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.181] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.181] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="67") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="ec") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="25") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="0d") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="24") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="a9") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="04") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="d0") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="9b") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="01") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="c1") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="66") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="f1") returned 2 [0218.181] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="95") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="55") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="97") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="0c") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="bf") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="55") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="14") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="f1") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="d8") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="13") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="2b") returned 2 [0218.182] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="e1") returned 2 [0218.182] RtlInitAnsiString (in: DestinationString=0xd14fc88, SourceString="67ec250d24a904d09b01c166f19555970cbf5514f1d8133e2be1" | out: DestinationString="67ec250d24a904d09b01c166f19555970cbf5514f1d8133e2be1") [0218.182] RtlAnsiStringToUnicodeString (in: DestinationString=0xd14fc80, SourceString="67ec250d24a904d09b01c166f19555970cbf5514f1d8133e2be1", AllocateDestinationString=1 | out: DestinationString="67ec250d24a904d09b01c166f19555970cbf5514f1d8133e2be1") returned 0x0 [0218.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fce0 [0224.768] __SEH_epilog4 () [0224.768] CloseHandle (hObject=0x1e6c) returned 1 [0224.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd4b0) returned 1 [0224.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3040a68) returned 1 Thread: id = 7076 os_tid = 0x2090 [0202.706] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json")) returned 0x2020 [0203.924] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", dwFileAttributes=0x20) returned 1 [0214.003] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xcf4 [0214.003] GetFileSizeEx (in: hFile=0xcf4, lpFileSize=0xeaeff54 | out: lpFileSize=0xeaeff54*=277) returned 1 [0214.003] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x111, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.003] ReadFile (in: hFile=0xcf4, lpBuffer=0xeaeff30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xeaeff40, lpOverlapped=0x0 | out: lpBuffer=0xeaeff30*, lpNumberOfBytesRead=0xeaeff40*=0x4, lpOverlapped=0x0) returned 1 [0214.235] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baf0 [0214.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be88 [0214.235] NtQuerySystemTime (in: CurrentTime=0xeaefec8 | out: CurrentTime=0xeaefec8*=132462177928140000) returned 0x0 [0214.235] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x16a378b6 [0214.235] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x5776fc [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x623a8323 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x1a933de6 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x4d9c622a [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x225a5b57 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x33e897f9 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x33f1e88a [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x17b86d7 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x77b4a411 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x2c750c89 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x2003d272 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x28c5a290 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x596e225b [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x2cf2825a [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x4bc95c83 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x45a8b0d4 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x531176f4 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x7839ab4e [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x5b8907fe [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x64bd993e [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x79ee111b [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x536e4d28 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x226b53c6 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x658edbf6 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x2f63800a [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x2cb4a2c4 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x75254f04 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0xbf1f437 [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x37711b1c [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x6eb29aec [0214.236] RtlRandomEx (in: Seed=0xeaefec0 | out: Seed=0xeaefec0) returned 0x5e1b518f [0214.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bf9fa8 [0214.246] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7bfdbb0 [0214.246] ReadFile (in: hFile=0xcf4, lpBuffer=0x7bf9fa8, nNumberOfBytesToRead=0x115, lpNumberOfBytesRead=0xeaefebc, lpOverlapped=0x0 | out: lpBuffer=0x7bf9fa8*, lpNumberOfBytesRead=0xeaefebc*=0x115, lpOverlapped=0x0) returned 1 [0214.246] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.246] WriteFile (in: hFile=0xcf4, lpBuffer=0x7bfdbb0*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0xeaefec0, lpOverlapped=0x0 | out: lpBuffer=0x7bfdbb0*, lpNumberOfBytesWritten=0xeaefec0*=0x115, lpOverlapped=0x0) returned 1 [0217.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b050 [0217.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5aa10 [0217.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5aa10) returned 1 [0217.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bfdbb0) returned 1 [0217.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bf9fa8) returned 1 [0217.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e058) returned 1 [0217.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdfc8) returned 1 [0217.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e865a8 [0217.887] SetFilePointerEx (in: hFile=0xcf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.887] WriteFile (in: hFile=0xcf4, lpBuffer=0x7cd2f70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xeaeff48, lpOverlapped=0x0 | out: lpBuffer=0x7cd2f70*, lpNumberOfBytesWritten=0xeaeff48*=0x10c, lpOverlapped=0x0) returned 1 [0218.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9ae0 [0218.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9ae0) returned 1 [0218.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9ae0 [0218.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0218.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca698 [0218.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca698) returned 1 [0218.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.340] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.341] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="e7") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="21") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="75") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="c0") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="02") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="f6") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="a4") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="18") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="11") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="c6") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="6b") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="9f") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="92") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="a3") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="65") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="8c") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="f7") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="76") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="0d") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="95") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="68") returned 2 [0218.341] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="aa") returned 2 [0218.342] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="f3") returned 2 [0218.342] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="69") returned 2 [0218.342] RtlInitAnsiString (in: DestinationString=0xeaefed0, SourceString="e72175c002f6a418d611c66bd69f92a3658cf7760d9568aaf369" | out: DestinationString="e72175c002f6a418d611c66bd69f92a3658cf7760d9568aaf369") [0218.342] RtlAnsiStringToUnicodeString (in: DestinationString=0xeaefec8, SourceString="e72175c002f6a418d611c66bd69f92a3658cf7760d9568aaf369", AllocateDestinationString=1 | out: DestinationString="e72175c002f6a418d611c66bd69f92a3658cf7760d9568aaf369") returned 0x0 [0218.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6ccc0 [0224.862] __SEH_epilog4 () [0224.862] CloseHandle (hObject=0xedc) returned 1 [0224.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7970) returned 1 [0224.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30413a8) returned 1 Thread: id = 7077 os_tid = 0x2094 [0202.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif")) returned 0x20 [0205.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.067] GetLastError () returned 0x5 [0205.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae100) returned 1 Thread: id = 7078 os_tid = 0x2098 [0202.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif")) returned 0x20 [0205.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.069] GetLastError () returned 0x5 [0205.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0ca8) returned 1 Thread: id = 7079 os_tid = 0x1f00 [0202.711] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json")) returned 0x2020 [0210.766] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0225.074] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x17f8 [0225.075] GetFileSizeEx (in: hFile=0x17f8, lpFileSize=0x1094fcfc | out: lpFileSize=0x1094fcfc*=231) returned 1 [0225.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0225.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53850 [0225.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a18 [0225.075] NtQuerySystemTime (in: CurrentTime=0x1094fc70 | out: CurrentTime=0x1094fc70*=132462178032972000) returned 0x0 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x71188695 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x5ec4740a [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x79d9c203 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x4bee622b [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x14ce6e99 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0xc73a442 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x4732398b [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x4f78310f [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x4ed7a3c4 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x4436abfc [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x31875aa0 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x7a136955 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x293d18b3 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0xc46893a [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x3e40a345 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x1f7484e1 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x40e7fe41 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0xd1beaae [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x238a4c50 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x1733ce04 [0225.075] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x6aa297b8 [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x4b5758fc [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x6b3ae8bd [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x7013b74a [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x1b90d89c [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x7e77f3f3 [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x424ab2e4 [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0xcee773a [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x5a7cf222 [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x32ac12d0 [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x562fd702 [0225.076] RtlRandomEx (in: Seed=0x1094fc68 | out: Seed=0x1094fc68) returned 0x7aed0358 [0225.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e541d8) returned 1 [0225.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c3fb70 [0225.086] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c43778 [0225.086] ReadFile (in: hFile=0x17f8, lpBuffer=0x7c3fb70, nNumberOfBytesToRead=0xe7, lpNumberOfBytesRead=0x1094fc64, lpOverlapped=0x0 | out: lpBuffer=0x7c3fb70*, lpNumberOfBytesRead=0x1094fc64*=0xe7, lpOverlapped=0x0) returned 1 [0225.088] SetFilePointerEx (in: hFile=0x17f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.088] WriteFile (in: hFile=0x17f8, lpBuffer=0x7c43778*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x1094fc68, lpOverlapped=0x0 | out: lpBuffer=0x7c43778*, lpNumberOfBytesWritten=0x1094fc68*=0xe7, lpOverlapped=0x0) returned 1 [0226.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b20 [0226.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54250 [0226.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54250) returned 1 [0226.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c43778) returned 1 [0226.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c3fb70) returned 1 [0226.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23860) returned 1 [0226.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24278) returned 1 [0226.284] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a383d0 [0226.286] SetFilePointerEx (in: hFile=0x17f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.286] WriteFile (in: hFile=0x17f8, lpBuffer=0x7cb69f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1094fcf0, lpOverlapped=0x0 | out: lpBuffer=0x7cb69f8*, lpNumberOfBytesWritten=0x1094fcf0*=0x10c, lpOverlapped=0x0) returned 1 [0226.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0226.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53e18) returned 1 [0226.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53e18 [0226.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53878 [0226.368] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b58 [0226.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52b58) returned 1 [0226.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.369] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.369] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="9c") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="b4") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="d3") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="16") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="1a") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="24") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="a3") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="be") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="df") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="66") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="a8") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="0f") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="5c") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="bc") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="c2") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="25") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="85") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="ef") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="97") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="9a") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="cf") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="3c") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="8c") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="86") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="12") returned 2 [0226.369] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="be") returned 2 [0226.369] RtlInitAnsiString (in: DestinationString=0x1094fc78, SourceString="9cb4d3161a24a3bedf66a80f5cbcc22585ef979acf3c8c8612be" | out: DestinationString="9cb4d3161a24a3bedf66a80f5cbcc22585ef979acf3c8c8612be") [0226.370] RtlAnsiStringToUnicodeString (in: DestinationString=0x1094fc70, SourceString="9cb4d3161a24a3bedf66a80f5cbcc22585ef979acf3c8c8612be", AllocateDestinationString=1 | out: DestinationString="9cb4d3161a24a3bedf66a80f5cbcc22585ef979acf3c8c8612be") returned 0x0 [0226.370] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f830 [0226.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8c98) returned 1 [0226.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd03a0) returned 1 [0226.417] NtQueryInformationFile (in: FileHandle=0x17f8, IoStatusBlock=0x1094fc40, FileInformation=0x1094fc48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1094fc40, FileInformation=0x1094fc48) returned 0x0 [0226.418] NtSetInformationFile (FileHandle=0x17f8, IoStatusBlock=0x1094fc40, FileInformation=0x1094fc48, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a438) returned 1 [0226.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0226.534] FlushFileBuffers (hFile=0x17f8) returned 1 [0226.546] CloseHandle (hObject=0x17f8) returned 1 [0226.594] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7a6a300 [0226.594] wcscpy (in: _Dest=0x7a6a300, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\" [0226.594] wcscat (in: _Dest=0x7a6a300, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\68814F-Readme.txt" [0226.594] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\68814f-readme.txt")) returned 0xffffffff [0226.594] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\tr\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xe80 [0226.607] WriteFile (in: hFile=0xe80, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x1094fc84, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x1094fc84*=0x8b9, lpOverlapped=0x0) returned 1 [0226.621] CloseHandle (hObject=0xe80) returned 1 [0226.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a300) returned 1 [0226.635] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81100) returned 1 Thread: id = 7080 os_tid = 0x14dc [0202.712] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json")) returned 0x2020 [0210.765] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json", dwFileAttributes=0x20) returned 1 [0225.060] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13e4 [0225.061] GetFileSizeEx (in: hFile=0x13e4, lpFileSize=0x10a2f914 | out: lpFileSize=0x10a2f914*=229) returned 1 [0225.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0225.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b58 [0225.061] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53850 [0225.062] NtQuerySystemTime (in: CurrentTime=0x10a2f888 | out: CurrentTime=0x10a2f888*=132462178032816000) returned 0x0 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x556fdbe [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x78c6c752 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x39b786bb [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x2075af1a [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x5119474a [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x33dbbe01 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x5a8ca3aa [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x66eeafa1 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x59f7779b [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x230a59ae [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x63f95b6c [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x425be7a3 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x1b09fd4 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x379990fc [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x259dcee4 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x3623259e [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x5919848c [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x6194c2db [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x5015bd54 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x6c394204 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x34392cbd [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x6775cdd5 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x596c766b [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x173b9dae [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x5149bc46 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x3ec402ec [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x1e9d1c80 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x6d65cc38 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x5f9f9797 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x368e943f [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x3202a540 [0225.062] RtlRandomEx (in: Seed=0x10a2f880 | out: Seed=0x10a2f880) returned 0x315346f0 [0225.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e541d8) returned 1 [0225.071] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c38360 [0225.072] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c3bf68 [0225.072] ReadFile (in: hFile=0x13e4, lpBuffer=0x7c38360, nNumberOfBytesToRead=0xe5, lpNumberOfBytesRead=0x10a2f87c, lpOverlapped=0x0 | out: lpBuffer=0x7c38360*, lpNumberOfBytesRead=0x10a2f87c*=0xe5, lpOverlapped=0x0) returned 1 [0225.074] SetFilePointerEx (in: hFile=0x13e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.074] WriteFile (in: hFile=0x13e4, lpBuffer=0x7c3bf68*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x10a2f880, lpOverlapped=0x0 | out: lpBuffer=0x7c3bf68*, lpNumberOfBytesWritten=0x10a2f880*=0xe5, lpOverlapped=0x0) returned 1 [0226.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53fd0 [0226.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53af8 [0226.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53af8) returned 1 [0226.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c3bf68) returned 1 [0226.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c38360) returned 1 [0226.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a238d8) returned 1 [0226.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24818) returned 1 [0226.281] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37bf0 [0226.281] SetFilePointerEx (in: hFile=0x13e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.281] WriteFile (in: hFile=0x13e4, lpBuffer=0x7cb68e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10a2f908, lpOverlapped=0x0 | out: lpBuffer=0x7cb68e0*, lpNumberOfBytesWritten=0x10a2f908*=0x10c, lpOverlapped=0x0) returned 1 [0226.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.364] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e542c8 [0226.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e542c8) returned 1 [0226.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e542c8 [0226.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53828 [0226.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54098 [0226.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54098) returned 1 [0226.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.365] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.365] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="1c") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="e0") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="b5") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="f3") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="e7") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="ae") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="06") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="32") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="69") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="63") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="e2") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="da") returned 2 [0226.365] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="a1") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="c4") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="88") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="a6") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="1d") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="26") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="b7") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="af") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="27") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="10") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="df") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="87") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="80") returned 2 [0226.366] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="60") returned 2 [0226.366] RtlInitAnsiString (in: DestinationString=0x10a2f890, SourceString="1ce0b5f3e7ae06326963e2daa1c488a61d26b7af2710df878060" | out: DestinationString="1ce0b5f3e7ae06326963e2daa1c488a61d26b7af2710df878060") [0226.366] RtlAnsiStringToUnicodeString (in: DestinationString=0x10a2f888, SourceString="1ce0b5f3e7ae06326963e2daa1c488a61d26b7af2710df878060", AllocateDestinationString=1 | out: DestinationString="1ce0b5f3e7ae06326963e2daa1c488a61d26b7af2710df878060") returned 0x0 [0226.366] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f8a8 [0226.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8de0) returned 1 [0226.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd07f0) returned 1 [0226.416] NtQueryInformationFile (in: FileHandle=0x13e4, IoStatusBlock=0x10a2f858, FileInformation=0x10a2f860, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10a2f858, FileInformation=0x10a2f860) returned 0x0 [0226.416] NtSetInformationFile (FileHandle=0x13e4, IoStatusBlock=0x10a2f858, FileInformation=0x10a2f860, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a300) returned 1 [0226.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f8a8) returned 1 [0226.530] FlushFileBuffers (hFile=0x13e4) returned 1 [0226.548] CloseHandle (hObject=0x13e4) returned 1 [0226.597] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7a6a438 [0226.597] wcscpy (in: _Dest=0x7a6a438, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\" [0226.597] wcscat (in: _Dest=0x7a6a438, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\68814F-Readme.txt" [0226.597] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\68814f-readme.txt")) returned 0xffffffff [0226.597] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\lv\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1178 [0226.607] WriteFile (in: hFile=0x1178, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x10a2f89c, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0x10a2f89c*=0x8b9, lpOverlapped=0x0) returned 1 [0226.623] CloseHandle (hObject=0x1178) returned 1 [0226.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a438) returned 1 [0226.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80eb0) returned 1 Thread: id = 7081 os_tid = 0x250c [0202.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif")) returned 0x20 [0204.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.594] GetLastError () returned 0x5 [0204.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0258) returned 1 Thread: id = 7082 os_tid = 0x19e8 [0202.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif")) returned 0x20 [0204.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.437] GetLastError () returned 0x5 [0204.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.437] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0ac8) returned 1 Thread: id = 7083 os_tid = 0x6b0 [0202.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif")) returned 0x20 [0202.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0202.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.714] GetLastError () returned 0x5 [0202.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0202.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4448) returned 1 Thread: id = 7084 os_tid = 0x1758 [0202.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif")) returned 0x20 [0204.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.468] GetLastError () returned 0x5 [0204.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.468] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc47e8) returned 1 Thread: id = 7085 os_tid = 0x1c58 [0202.722] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json")) returned 0x2020 [0203.257] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0213.206] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x23ac [0213.206] GetFileSizeEx (in: hFile=0x23ac, lpFileSize=0x10b4fc34 | out: lpFileSize=0x10b4fc34*=179) returned 1 [0213.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.206] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0213.207] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca198 [0213.207] NtQuerySystemTime (in: CurrentTime=0x10b4fba8 | out: CurrentTime=0x10b4fba8*=132462177917844000) returned 0x0 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x34cd0dc5 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x4ae24e57 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x4f310f3b [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x2c5673f6 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x3470e659 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x875bd1b [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x1aaa3f5a [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x676b253e [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x14741bd3 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0xdec230a [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x3751c8f4 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x61a4b438 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x797ded5f [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x380d3af5 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x3145d3cd [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x26629dde [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x1f4ae543 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x43380634 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x5a09d218 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x7d56a2c2 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x6d759183 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x6b7fc378 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x47721101 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x43521116 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x5710cece [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x4dbbc47e [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x77268178 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x4707e069 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x4497bb8 [0213.207] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x70f91764 [0213.208] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x407ddc59 [0213.208] RtlRandomEx (in: Seed=0x10b4fba0 | out: Seed=0x10b4fba0) returned 0x499507e2 [0213.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d53c68 [0213.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d57870 [0213.221] ReadFile (in: hFile=0x23ac, lpBuffer=0x10d53c68, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x10b4fb9c, lpOverlapped=0x0 | out: lpBuffer=0x10d53c68*, lpNumberOfBytesRead=0x10b4fb9c*=0xb3, lpOverlapped=0x0) returned 1 [0213.222] SetFilePointerEx (in: hFile=0x23ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.222] WriteFile (in: hFile=0x23ac, lpBuffer=0x10d57870*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x10b4fba0, lpOverlapped=0x0 | out: lpBuffer=0x10d57870*, lpNumberOfBytesWritten=0x10b4fba0*=0xb3, lpOverlapped=0x0) returned 1 [0215.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c78 [0215.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6080 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6080) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d57870) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d53c68) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cd38) returned 1 [0215.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095a68) returned 1 [0215.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a380a0 [0215.940] SetFilePointerEx (in: hFile=0x23ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.940] WriteFile (in: hFile=0x23ac, lpBuffer=0x7ddab48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x10b4fc28, lpOverlapped=0x0 | out: lpBuffer=0x7ddab48*, lpNumberOfBytesWritten=0x10b4fc28*=0x10c, lpOverlapped=0x0) returned 1 [0218.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c158 [0218.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c158) returned 1 [0218.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c158 [0218.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c298 [0218.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0218.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cd10) returned 1 [0218.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.230] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.230] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="cb") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="87") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="fc") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="0e") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="fd") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="a7") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="3d") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="9d") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="33") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="36") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="d3") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="a5") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="12") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="93") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="ee") returned 2 [0218.230] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="35") returned 2 [0218.231] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.231] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="f6") returned 2 [0218.231] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="4e") returned 2 [0218.231] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="30") returned 2 [0218.231] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="8c") returned 2 [0218.231] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="03") returned 2 [0218.231] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="22") returned 2 [0218.231] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="12") returned 2 [0218.231] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="0c") returned 2 [0218.231] RtlInitAnsiString (in: DestinationString=0x10b4fbb0, SourceString="cb87fc0efda73d9d33367fd3a51293ee353ef64e308c0322120c" | out: DestinationString="cb87fc0efda73d9d33367fd3a51293ee353ef64e308c0322120c") [0218.231] RtlAnsiStringToUnicodeString (in: DestinationString=0x10b4fba8, SourceString="cb87fc0efda73d9d33367fd3a51293ee353ef64e308c0322120c", AllocateDestinationString=1 | out: DestinationString="cb87fc0efda73d9d33367fd3a51293ee353ef64e308c0322120c") returned 0x0 [0218.231] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f128 [0224.800] __SEH_epilog4 () [0224.800] CloseHandle (hObject=0x1b88) returned 1 [0224.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf9b8) returned 1 [0224.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55718) returned 1 Thread: id = 7086 os_tid = 0x1dbc [0202.722] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json")) returned 0x2020 [0203.258] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0213.222] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1758 [0213.223] GetFileSizeEx (in: hFile=0x1758, lpFileSize=0xc1ef794 | out: lpFileSize=0xc1ef794*=179) returned 1 [0213.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca198 [0213.223] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0213.223] NtQuerySystemTime (in: CurrentTime=0xc1ef708 | out: CurrentTime=0xc1ef708*=132462177918000000) returned 0x0 [0213.223] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x7b419fa9 [0213.223] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x2809f280 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x4c8ad259 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x3f783227 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x1e3d3577 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x25aa1efb [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x512477 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x7ce2a320 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x919c7f7 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x4577aee4 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x35261b7b [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x541f7df8 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x666a10be [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x6c5d89f4 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x59a03b8 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x5486a023 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x16ecb8ea [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x20078b6c [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x4a46ac68 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x377423d9 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x67c0d6be [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x9171b53 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x1e2ed65 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x5c6013ec [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0xab1db78 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x5be34183 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x7f0e1717 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x663ada82 [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x5925ffec [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x3b54011f [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x5768c9af [0213.224] RtlRandomEx (in: Seed=0xc1ef700 | out: Seed=0xc1ef700) returned 0x54778877 [0213.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10d50060 [0213.233] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b3a320 [0213.233] ReadFile (in: hFile=0x1758, lpBuffer=0x10d50060, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xc1ef6fc, lpOverlapped=0x0 | out: lpBuffer=0x10d50060*, lpNumberOfBytesRead=0xc1ef6fc*=0xb3, lpOverlapped=0x0) returned 1 [0213.235] SetFilePointerEx (in: hFile=0x1758, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.235] WriteFile (in: hFile=0x1758, lpBuffer=0x7b3a320*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xc1ef700, lpOverlapped=0x0 | out: lpBuffer=0x7b3a320*, lpNumberOfBytesWritten=0xc1ef700*=0xb3, lpOverlapped=0x0) returned 1 [0215.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d68 [0215.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ee8 [0215.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ee8) returned 1 [0215.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3a320) returned 1 [0215.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d50060) returned 1 [0215.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3def0) returned 1 [0215.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3096098) returned 1 [0215.930] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38040 [0215.930] SetFilePointerEx (in: hFile=0x1758, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.930] WriteFile (in: hFile=0x1758, lpBuffer=0x7dda3a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc1ef788, lpOverlapped=0x0 | out: lpBuffer=0x7dda3a0*, lpNumberOfBytesWritten=0xc1ef788*=0x10c, lpOverlapped=0x0) returned 1 [0218.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.194] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9d60 [0218.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9d60) returned 1 [0218.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dc9d60 [0218.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca6c0 [0218.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0218.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca918) returned 1 [0218.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.195] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.195] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="13") returned 2 [0218.195] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="b0") returned 2 [0218.195] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="95") returned 2 [0218.195] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="4e") returned 2 [0218.195] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="cd") returned 2 [0218.195] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="2c") returned 2 [0218.195] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="1b") returned 2 [0218.195] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="5c") returned 2 [0218.195] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="a9") returned 2 [0218.195] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="af") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="4f") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="ff") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="f9") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="61") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="04") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="5c") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="94") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="50") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="ab") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="ab") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="73") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="58") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="3d") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="7b") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.196] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="7e") returned 2 [0218.196] RtlInitAnsiString (in: DestinationString=0xc1ef710, SourceString="13b0954ecd2c1b5ca9af4ffff961045c9450abab73583d7b2d7e" | out: DestinationString="13b0954ecd2c1b5ca9af4ffff961045c9450abab73583d7b2d7e") [0218.196] RtlAnsiStringToUnicodeString (in: DestinationString=0xc1ef708, SourceString="13b0954ecd2c1b5ca9af4ffff961045c9450abab73583d7b2d7e", AllocateDestinationString=1 | out: DestinationString="13b0954ecd2c1b5ca9af4ffff961045c9450abab73583d7b2d7e") returned 0x0 [0218.196] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3efc0 [0224.782] __SEH_epilog4 () [0224.782] CloseHandle (hObject=0x2320) returned 1 [0224.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd5e8) returned 1 [0224.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d553a0) returned 1 Thread: id = 7087 os_tid = 0x25b8 [0202.723] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json")) returned 0x2020 [0203.259] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0213.235] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2104 [0213.236] GetFileSizeEx (in: hFile=0x2104, lpFileSize=0x145ffd2c | out: lpFileSize=0x145ffd2c*=179) returned 1 [0213.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca918 [0213.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0213.236] NtQuerySystemTime (in: CurrentTime=0x145ffca0 | out: CurrentTime=0x145ffca0*=132462177918156000) returned 0x0 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x5bbbb372 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x60d1753b [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x4c6265c5 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x4f8e0fd9 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x66b22a98 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x46845759 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x787bf56d [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x7f56752 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x79facda7 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0xe88bd42 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x11026014 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x2aead480 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x3d9ee346 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x3825958 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x2f4cf2be [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x748be09 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x4986be33 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x47790105 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x2bb25b75 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x2d60d479 [0213.236] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x5a61f439 [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x1ee57f82 [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x7d17a92f [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x6694e97e [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x61a4b438 [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x69993b95 [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x602cf5ab [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x7e489558 [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x10c4a723 [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x1b2bbcd3 [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x64e82de5 [0213.237] RtlRandomEx (in: Seed=0x145ffc98 | out: Seed=0x145ffc98) returned 0x34561a64 [0213.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b3df28 [0213.245] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b41b30 [0213.245] ReadFile (in: hFile=0x2104, lpBuffer=0x7b3df28, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x145ffc94, lpOverlapped=0x0 | out: lpBuffer=0x7b3df28*, lpNumberOfBytesRead=0x145ffc94*=0xb3, lpOverlapped=0x0) returned 1 [0213.246] SetFilePointerEx (in: hFile=0x2104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.247] WriteFile (in: hFile=0x2104, lpBuffer=0x7b41b30*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x145ffc98, lpOverlapped=0x0 | out: lpBuffer=0x7b41b30*, lpNumberOfBytesWritten=0x145ffc98*=0xb3, lpOverlapped=0x0) returned 1 [0215.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d40 [0215.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4b40 [0215.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4b40) returned 1 [0215.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b41b30) returned 1 [0215.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b3df28) returned 1 [0215.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3eaa8) returned 1 [0215.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095bd0) returned 1 [0215.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a381c0 [0215.929] SetFilePointerEx (in: hFile=0x2104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.929] WriteFile (in: hFile=0x2104, lpBuffer=0x300d948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x145ffd20, lpOverlapped=0x0 | out: lpBuffer=0x300d948*, lpNumberOfBytesWritten=0x145ffd20*=0x10c, lpOverlapped=0x0) returned 1 [0218.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c180 [0218.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c180) returned 1 [0218.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c180 [0218.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1a8 [0218.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0218.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bed8) returned 1 [0218.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.190] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="75") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="43") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="0d") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="23") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="a4") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="1b") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="42") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="a3") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="31") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="6d") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="06") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="86") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="0a") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="6f") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="44") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="90") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="54") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="2c") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="82") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="b3") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="79") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="fa") returned 2 [0218.191] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="0c") returned 2 [0218.192] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="d2") returned 2 [0218.192] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.192] RtlInitAnsiString (in: DestinationString=0x145ffca8, SourceString="75430d23a41b42a331e66d06860a6f4490542c82b379fa0cd2ca" | out: DestinationString="75430d23a41b42a331e66d06860a6f4490542c82b379fa0cd2ca") [0218.192] RtlAnsiStringToUnicodeString (in: DestinationString=0x145ffca0, SourceString="75430d23a41b42a331e66d06860a6f4490542c82b379fa0cd2ca", AllocateDestinationString=1 | out: DestinationString="75430d23a41b42a331e66d06860a6f4490542c82b379fa0cd2ca") returned 0x0 [0218.192] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f8a8 [0224.779] __SEH_epilog4 () [0224.779] CloseHandle (hObject=0x2374) returned 1 [0224.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd720) returned 1 [0224.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54498) returned 1 Thread: id = 7088 os_tid = 0x25cc [0202.723] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json")) returned 0x2020 [0203.260] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0213.247] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb74 [0213.247] GetFileSizeEx (in: hFile=0xb74, lpFileSize=0xb03fe64 | out: lpFileSize=0xb03fe64*=179) returned 1 [0213.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9928 [0213.248] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8f0 [0213.248] NtQuerySystemTime (in: CurrentTime=0xb03fdd8 | out: CurrentTime=0xb03fdd8*=132462177918312000) returned 0x0 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x2c96ee61 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x512477 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x78df0c2e [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x663f37fe [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x66bfc23e [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x24958516 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x31c88f76 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x2f3a3b75 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x635aff4c [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x38e38c72 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x1a7564d2 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x6e462344 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x552a4ad8 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0xb2e937 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x2cac4375 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x2bab84d6 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x11bfd459 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0xf98675a [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x40d5b793 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x77c19035 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0xae5d590 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x2581b7f9 [0213.248] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x4cbbe109 [0213.249] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x2ad404cf [0213.249] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x7177718e [0213.249] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x1d95b3b2 [0213.249] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x33dda47e [0213.249] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x38108772 [0213.249] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x736b99e5 [0213.249] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x251cd3b5 [0213.249] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0x520dfd40 [0213.249] RtlRandomEx (in: Seed=0xb03fdd0 | out: Seed=0xb03fdd0) returned 0xe7c5aac [0213.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54020) returned 1 [0213.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b45738 [0213.257] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b49340 [0213.257] ReadFile (in: hFile=0xb74, lpBuffer=0x7b45738, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xb03fdcc, lpOverlapped=0x0 | out: lpBuffer=0x7b45738*, lpNumberOfBytesRead=0xb03fdcc*=0xb3, lpOverlapped=0x0) returned 1 [0213.258] SetFilePointerEx (in: hFile=0xb74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.259] WriteFile (in: hFile=0xb74, lpBuffer=0x7b49340*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xb03fdd0, lpOverlapped=0x0 | out: lpBuffer=0x7b49340*, lpNumberOfBytesWritten=0xb03fdd0*=0xb3, lpOverlapped=0x0) returned 1 [0215.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fc0 [0215.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ab0 [0215.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3ab0) returned 1 [0215.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b49340) returned 1 [0215.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b45738) returned 1 [0215.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dfe0) returned 1 [0215.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3095b88) returned 1 [0215.932] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37620 [0215.932] SetFilePointerEx (in: hFile=0xb74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.932] WriteFile (in: hFile=0xb74, lpBuffer=0x7dda4b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb03fe58, lpOverlapped=0x0 | out: lpBuffer=0x7dda4b8*, lpNumberOfBytesWritten=0xb03fe58*=0x10c, lpOverlapped=0x0) returned 1 [0218.198] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.199] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8a0 [0218.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca8a0) returned 1 [0218.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca8a0 [0218.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca850 [0218.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca198 [0218.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca198) returned 1 [0218.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.200] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.200] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="12") returned 2 [0218.200] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="41") returned 2 [0218.200] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="32") returned 2 [0218.200] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="12") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="aa") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="97") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="59") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="06") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="60") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="08") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="53") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="ab") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="cc") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="15") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="70") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="3b") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="3f") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="b7") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="20") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="4e") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="76") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="64") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="56") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="b6") returned 2 [0218.201] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="c4") returned 2 [0218.201] RtlInitAnsiString (in: DestinationString=0xb03fde0, SourceString="12413212aa975906600853abcc15703b3fb7d6204e766456b6c4" | out: DestinationString="12413212aa975906600853abcc15703b3fb7d6204e766456b6c4") [0218.202] RtlAnsiStringToUnicodeString (in: DestinationString=0xb03fdd8, SourceString="12413212aa975906600853abcc15703b3fb7d6204e766456b6c4", AllocateDestinationString=1 | out: DestinationString="12413212aa975906600853abcc15703b3fb7d6204e766456b6c4") returned 0x0 [0218.202] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f218 [0224.785] __SEH_epilog4 () [0224.785] CloseHandle (hObject=0x1054) returned 1 [0224.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcd60) returned 1 [0224.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbea88) returned 1 Thread: id = 7089 os_tid = 0x108c [0202.723] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json")) returned 0x2020 [0203.261] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0214.771] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1134 [0214.772] GetFileSizeEx (in: hFile=0x1134, lpFileSize=0xaeeff2c | out: lpFileSize=0xaeeff2c*=179) returned 1 [0214.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0214.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0214.773] NtQuerySystemTime (in: CurrentTime=0xaeefea0 | out: CurrentTime=0xaeefea0*=132462177933444000) returned 0x0 [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x715844e3 [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x18ecf6b0 [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x452f423 [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x76cb9adb [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x395736db [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x60c4f61e [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x4db4b1cf [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x55ad6e20 [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x1957b42 [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x6f9c7df1 [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x438cf67f [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x548ee0e4 [0214.773] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x6471c5 [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x167090d6 [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x7f200150 [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x562deffe [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x27fdf24c [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x476c6c3e [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x14822b7c [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x35caac5e [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x6c15d0b4 [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x75742b32 [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x5d07c4b2 [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x55b34b7e [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0xccc65e6 [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x43748231 [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x5aef7862 [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x25e2ee7e [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x572f047e [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x502a3c2b [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x41879814 [0214.774] RtlRandomEx (in: Seed=0xaeefe98 | out: Seed=0xaeefe98) returned 0x796aa468 [0214.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e00cc8 [0214.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e048d0 [0214.784] ReadFile (in: hFile=0x1134, lpBuffer=0x10e00cc8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xaeefe94, lpOverlapped=0x0 | out: lpBuffer=0x10e00cc8*, lpNumberOfBytesRead=0xaeefe94*=0xb3, lpOverlapped=0x0) returned 1 [0214.787] SetFilePointerEx (in: hFile=0x1134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.787] WriteFile (in: hFile=0x1134, lpBuffer=0x10e048d0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xaeefe98, lpOverlapped=0x0 | out: lpBuffer=0x10e048d0*, lpNumberOfBytesWritten=0xaeefe98*=0xb3, lpOverlapped=0x0) returned 1 [0215.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3308 [0215.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4bb8 [0215.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4bb8) returned 1 [0215.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e048d0) returned 1 [0215.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e00cc8) returned 1 [0215.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fdd0) returned 1 [0215.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b860a8) returned 1 [0215.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a375c0 [0215.938] SetFilePointerEx (in: hFile=0x1134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.938] WriteFile (in: hFile=0x1134, lpBuffer=0x7dda918*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xaeeff20, lpOverlapped=0x0 | out: lpBuffer=0x7dda918*, lpNumberOfBytesWritten=0xaeeff20*=0x10c, lpOverlapped=0x0) returned 1 [0218.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c090 [0218.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c090) returned 1 [0218.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c090 [0218.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0b8 [0218.219] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0218.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c0e0) returned 1 [0218.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.220] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.220] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="f4") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="28") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="87") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="10") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="86") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="8f") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="19") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="f5") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="d2") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="17") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="11") returned 2 [0218.220] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="c7") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="88") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="0c") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="6b") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="8a") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="22") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="28") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="ab") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="2b") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="79") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="7c") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="cc") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="4c") returned 2 [0218.221] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="56") returned 2 [0218.221] RtlInitAnsiString (in: DestinationString=0xaeefea8, SourceString="f4288710868f19f5d21711c7880c6b8a2228ab2b2d797ccc4c56" | out: DestinationString="f4288710868f19f5d21711c7880c6b8a2228ab2b2d797ccc4c56") [0218.221] RtlAnsiStringToUnicodeString (in: DestinationString=0xaeefea0, SourceString="f4288710868f19f5d21711c7880c6b8a2228ab2b2d797ccc4c56", AllocateDestinationString=1 | out: DestinationString="f4288710868f19f5d21711c7880c6b8a2228ab2b2d797ccc4c56") returned 0x0 [0218.221] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f7b8 [0224.797] __SEH_epilog4 () [0224.797] CloseHandle (hObject=0x1690) returned 1 [0224.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd108) returned 1 [0224.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfab8) returned 1 Thread: id = 7090 os_tid = 0xa80 [0202.724] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json")) returned 0x2020 [0202.724] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", dwFileAttributes=0x20) returned 1 [0211.017] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13ec [0211.017] GetFileSizeEx (in: hFile=0x13ec, lpFileSize=0xa6dfb54 | out: lpFileSize=0xa6dfb54*=10089) returned 1 [0211.017] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x2765, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.017] ReadFile (in: hFile=0x13ec, lpBuffer=0xa6dfb30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa6dfb40, lpOverlapped=0x0 | out: lpBuffer=0xa6dfb30*, lpNumberOfBytesRead=0xa6dfb40*=0x4, lpOverlapped=0x0) returned 1 [0212.098] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53e18 [0212.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53da0 [0212.098] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52a68 [0212.098] NtQuerySystemTime (in: CurrentTime=0xa6dfac8 | out: CurrentTime=0xa6dfac8*=132462177906768000) returned 0x0 [0212.098] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x6e32b46e [0212.098] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x6744fab3 [0212.098] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x458244cc [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x49e7ecb8 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x43e36be5 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x7b1fea56 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x6c65bb0d [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x586e0b3c [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x57c185a6 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x6370104f [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x5a3d5acb [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x38419734 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x6c0fb6d6 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x6371feaa [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x7b4c2c7f [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x30e1589 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x4843357f [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x32be377b [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0xaee06a9 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x781cacd6 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x7ffc48d0 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x73a18657 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0xf532237 [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x334d4f8d [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0xfaea0ff [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x6267735d [0212.099] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x2bc17598 [0212.100] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x30bbb74 [0212.100] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x71a00c98 [0212.100] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x6d0098e6 [0212.100] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x54649a0b [0212.100] RtlRandomEx (in: Seed=0xa6dfac0 | out: Seed=0xa6dfac0) returned 0x310b0be0 [0212.906] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.906] WriteFile (in: hFile=0x13ec, lpBuffer=0x10d97870*, nNumberOfBytesToWrite=0x2769, lpNumberOfBytesWritten=0xa6dfac0, lpOverlapped=0x0 | out: lpBuffer=0x10d97870*, lpNumberOfBytesWritten=0xa6dfac0*=0x2769, lpOverlapped=0x0) returned 1 [0219.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40f0 [0219.272] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0219.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2db8) returned 1 [0219.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d97870) returned 1 [0219.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d93c68) returned 1 [0219.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f308) returned 1 [0219.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84638) returned 1 [0219.273] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x7b84638 [0219.273] SetFilePointerEx (in: hFile=0x13ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.273] WriteFile (in: hFile=0x13ec, lpBuffer=0x3ec6940*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xa6dfb48, lpOverlapped=0x0 | out: lpBuffer=0x3ec6940*, lpNumberOfBytesWritten=0xa6dfb48*=0x11e, lpOverlapped=0x0) returned 1 [0222.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85b30 [0224.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a23a40 [0224.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0224.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc08) returned 1 [0224.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x3e79368 [0224.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0224.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba50 [0224.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba50) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a23a40) returned 1 [0224.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b30) returned 1 [0224.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x59) returned 0x3d47108 [0224.946] sprintf (in: _Dest=0x3d47108, _Format="%c%c" | out: _Dest="f9") returned 2 [0224.946] sprintf (in: _Dest=0x3d4710a, _Format="%c%c" | out: _Dest="2f") returned 2 [0224.946] sprintf (in: _Dest=0x3d4710c, _Format="%c%c" | out: _Dest="f0") returned 2 [0224.946] sprintf (in: _Dest=0x3d4710e, _Format="%c%c" | out: _Dest="9e") returned 2 [0224.946] sprintf (in: _Dest=0x3d47110, _Format="%c%c" | out: _Dest="e0") returned 2 [0224.946] sprintf (in: _Dest=0x3d47112, _Format="%c%c" | out: _Dest="7d") returned 2 [0224.946] sprintf (in: _Dest=0x3d47114, _Format="%c%c" | out: _Dest="d9") returned 2 [0224.946] sprintf (in: _Dest=0x3d47116, _Format="%c%c" | out: _Dest="89") returned 2 [0224.946] sprintf (in: _Dest=0x3d47118, _Format="%c%c" | out: _Dest="7b") returned 2 [0224.946] sprintf (in: _Dest=0x3d4711a, _Format="%c%c" | out: _Dest="12") returned 2 [0224.946] sprintf (in: _Dest=0x3d4711c, _Format="%c%c" | out: _Dest="80") returned 2 [0224.946] sprintf (in: _Dest=0x3d4711e, _Format="%c%c" | out: _Dest="73") returned 2 [0224.946] sprintf (in: _Dest=0x3d47120, _Format="%c%c" | out: _Dest="d9") returned 2 [0224.946] sprintf (in: _Dest=0x3d47122, _Format="%c%c" | out: _Dest="90") returned 2 [0224.946] sprintf (in: _Dest=0x3d47124, _Format="%c%c" | out: _Dest="ad") returned 2 [0224.946] sprintf (in: _Dest=0x3d47126, _Format="%c%c" | out: _Dest="7e") returned 2 [0224.946] sprintf (in: _Dest=0x3d47128, _Format="%c%c" | out: _Dest="c6") returned 2 [0224.946] sprintf (in: _Dest=0x3d4712a, _Format="%c%c" | out: _Dest="f0") returned 2 [0224.946] sprintf (in: _Dest=0x3d4712c, _Format="%c%c" | out: _Dest="49") returned 2 [0224.946] sprintf (in: _Dest=0x3d4712e, _Format="%c%c" | out: _Dest="57") returned 2 [0224.946] sprintf (in: _Dest=0x3d47130, _Format="%c%c" | out: _Dest="38") returned 2 [0224.947] sprintf (in: _Dest=0x3d47132, _Format="%c%c" | out: _Dest="79") returned 2 [0224.947] sprintf (in: _Dest=0x3d47134, _Format="%c%c" | out: _Dest="5e") returned 2 [0224.947] sprintf (in: _Dest=0x3d47136, _Format="%c%c" | out: _Dest="a0") returned 2 [0224.947] sprintf (in: _Dest=0x3d47138, _Format="%c%c" | out: _Dest="4b") returned 2 [0224.947] sprintf (in: _Dest=0x3d4713a, _Format="%c%c" | out: _Dest="1b") returned 2 [0224.947] sprintf (in: _Dest=0x3d4713c, _Format="%c%c" | out: _Dest="72") returned 2 [0224.947] sprintf (in: _Dest=0x3d4713e, _Format="%c%c" | out: _Dest="3f") returned 2 [0224.947] sprintf (in: _Dest=0x3d47140, _Format="%c%c" | out: _Dest="f1") returned 2 [0224.947] sprintf (in: _Dest=0x3d47142, _Format="%c%c" | out: _Dest="ad") returned 2 [0224.947] sprintf (in: _Dest=0x3d47144, _Format="%c%c" | out: _Dest="8f") returned 2 [0224.947] sprintf (in: _Dest=0x3d47146, _Format="%c%c" | out: _Dest="54") returned 2 [0224.947] sprintf (in: _Dest=0x3d47148, _Format="%c%c" | out: _Dest="14") returned 2 [0224.947] sprintf (in: _Dest=0x3d4714a, _Format="%c%c" | out: _Dest="43") returned 2 [0224.947] sprintf (in: _Dest=0x3d4714c, _Format="%c%c" | out: _Dest="56") returned 2 [0224.947] sprintf (in: _Dest=0x3d4714e, _Format="%c%c" | out: _Dest="1a") returned 2 [0224.947] sprintf (in: _Dest=0x3d47150, _Format="%c%c" | out: _Dest="98") returned 2 [0224.947] sprintf (in: _Dest=0x3d47152, _Format="%c%c" | out: _Dest="fd") returned 2 [0224.947] sprintf (in: _Dest=0x3d47154, _Format="%c%c" | out: _Dest="60") returned 2 [0224.947] sprintf (in: _Dest=0x3d47156, _Format="%c%c" | out: _Dest="21") returned 2 [0224.947] sprintf (in: _Dest=0x3d47158, _Format="%c%c" | out: _Dest="7f") returned 2 [0224.947] sprintf (in: _Dest=0x3d4715a, _Format="%c%c" | out: _Dest="94") returned 2 [0224.947] sprintf (in: _Dest=0x3d4715c, _Format="%c%c" | out: _Dest="05") returned 2 [0224.947] sprintf (in: _Dest=0x3d4715e, _Format="%c%c" | out: _Dest="14") returned 2 [0224.947] RtlInitAnsiString (in: DestinationString=0xa6dfad0, SourceString="f92ff09ee07dd9897b128073d990ad7ec6f0495738795ea04b1b723ff1ad8f541443561a98fd60217f940514" | out: DestinationString="f92ff09ee07dd9897b128073d990ad7ec6f0495738795ea04b1b723ff1ad8f541443561a98fd60217f940514") [0224.947] RtlAnsiStringToUnicodeString (in: DestinationString=0xa6dfac8, SourceString="f92ff09ee07dd9897b128073d990ad7ec6f0495738795ea04b1b723ff1ad8f541443561a98fd60217f940514", AllocateDestinationString=1 | out: DestinationString="f92ff09ee07dd9897b128073d990ad7ec6f0495738795ea04b1b723ff1ad8f541443561a98fd60217f940514") returned 0x0 [0224.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb2) returned 0x332268 [0224.976] CloseHandle (hObject=0x13ec) returned 1 [0224.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe398) returned 1 [0224.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec9b98) returned 1 Thread: id = 7091 os_tid = 0x17a4 [0202.725] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json")) returned 0x2020 [0202.726] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", dwFileAttributes=0x20) returned 1 [0211.023] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x123c [0211.024] GetFileSizeEx (in: hFile=0x123c, lpFileSize=0x1466f794 | out: lpFileSize=0x1466f794*=644) returned 1 [0211.024] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.024] ReadFile (in: hFile=0x123c, lpBuffer=0x1466f770, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1466f780, lpOverlapped=0x0 | out: lpBuffer=0x1466f770*, lpNumberOfBytesRead=0x1466f780*=0x4, lpOverlapped=0x0) returned 1 [0211.028] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.028] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a58 [0211.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534e0 [0211.029] NtQuerySystemTime (in: CurrentTime=0x1466f708 | out: CurrentTime=0x1466f708*=132462177896004000) returned 0x0 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x5b113617 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0xc8499ba [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x33a8f580 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x7c5cecb2 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x1df1bfee [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x16713e4f [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x68d192b3 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x8996a97 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x10059a53 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x6ec22285 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x30a96f96 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x7ea615a1 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x7121b539 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x2e2ebb81 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x7987d56f [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x22079a4a [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x68a2fae3 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x1ab83a56 [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x5843e43e [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x659b967e [0211.029] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x70fd5169 [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x286382f3 [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x621c6a34 [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x7f5a387e [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x17d977d8 [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x40b6d0ab [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x1d2ac2d7 [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x2e35e217 [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x7e03727e [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x5c025a [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x7ab8116c [0211.030] RtlRandomEx (in: Seed=0x1466f700 | out: Seed=0x1466f700) returned 0x293daf91 [0211.039] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.039] WriteFile (in: hFile=0x123c, lpBuffer=0x7b88360*, nNumberOfBytesToWrite=0x284, lpNumberOfBytesWritten=0x1466f700, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesWritten=0x1466f700*=0x284, lpOverlapped=0x0) returned 1 [0213.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0213.452] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb30 [0213.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb30) returned 1 [0213.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0213.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10d8c0e0) returned 1 [0213.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c900) returned 1 [0213.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc1d0) returned 1 [0213.453] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e60 [0213.453] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.453] WriteFile (in: hFile=0x123c, lpBuffer=0x7a38c78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1466f788, lpOverlapped=0x0 | out: lpBuffer=0x7a38c78*, lpNumberOfBytesWritten=0x1466f788*=0x10c, lpOverlapped=0x0) returned 1 [0213.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52e00 [0213.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52e00) returned 1 [0213.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52e00 [0213.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52db0 [0213.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b80 [0213.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52b80) returned 1 [0213.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.759] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.759] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="a4") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="37") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="f3") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="18") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="e9") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="0f") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="d9") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="da") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="17") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="35") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="a9") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="45") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="c1") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="1e") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="52") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="37") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="70") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="07") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="0a") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="7f") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="2c") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="ae") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="a8") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="50") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="7b") returned 2 [0213.760] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="2d") returned 2 [0213.760] RtlInitAnsiString (in: DestinationString=0x1466f710, SourceString="a437f318e90fd9da1735a945c11e523770070a7f2caea8507b2d" | out: DestinationString="a437f318e90fd9da1735a945c11e523770070a7f2caea8507b2d") [0213.760] RtlAnsiStringToUnicodeString (in: DestinationString=0x1466f708, SourceString="a437f318e90fd9da1735a945c11e523770070a7f2caea8507b2d", AllocateDestinationString=1 | out: DestinationString="a437f318e90fd9da1735a945c11e523770070a7f2caea8507b2d") returned 0x0 [0213.760] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c5b8 Thread: id = 7092 os_tid = 0x19a8 [0202.726] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json")) returned 0x2020 [0203.262] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", dwFileAttributes=0x20) returned 1 [0214.787] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1718 [0214.788] GetFileSizeEx (in: hFile=0x1718, lpFileSize=0x1186f844 | out: lpFileSize=0x1186f844*=179) returned 1 [0214.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0214.788] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0214.788] NtQuerySystemTime (in: CurrentTime=0x1186f7b8 | out: CurrentTime=0x1186f7b8*=132462177933600000) returned 0x0 [0214.788] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x6cb9cea1 [0214.788] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x5b24aa6b [0214.788] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x6df25fec [0214.788] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x1b03b5eb [0214.788] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x509add33 [0214.788] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x2c2f72f [0214.788] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x7ec0db7e [0214.788] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x31a3bc6f [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x4353f24e [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x55ad65be [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x4e4a9e75 [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x26ff24c2 [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x5401959e [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x29abda1c [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x17eabeeb [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x4261fd88 [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x4135f3e7 [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x35f26bca [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x2f05202f [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x5d07c4b2 [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x75742b32 [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x3dd4f62f [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x2c81d0be [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x7883ffb [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x502a3c2b [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x5603173e [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x22101588 [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x6b942318 [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x7964b0db [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x2b4bf1f0 [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x7167ed38 [0214.789] RtlRandomEx (in: Seed=0x1186f7b0 | out: Seed=0x1186f7b0) returned 0x33d948a5 [0214.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e084d8 [0214.800] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e0c0e0 [0214.800] ReadFile (in: hFile=0x1718, lpBuffer=0x10e084d8, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1186f7ac, lpOverlapped=0x0 | out: lpBuffer=0x10e084d8*, lpNumberOfBytesRead=0x1186f7ac*=0xb3, lpOverlapped=0x0) returned 1 [0214.802] SetFilePointerEx (in: hFile=0x1718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.802] WriteFile (in: hFile=0x1718, lpBuffer=0x10e0c0e0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1186f7b0, lpOverlapped=0x0 | out: lpBuffer=0x10e0c0e0*, lpNumberOfBytesWritten=0x1186f7b0*=0xb3, lpOverlapped=0x0) returned 1 [0214.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0214.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0214.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34c0) returned 1 [0214.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e0c0e0) returned 1 [0214.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e084d8) returned 1 [0214.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0214.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86060) returned 1 [0214.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ce0 [0214.972] SetFilePointerEx (in: hFile=0x1718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.972] WriteFile (in: hFile=0x1718, lpBuffer=0x7cd3718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1186f838, lpOverlapped=0x0 | out: lpBuffer=0x7cd3718*, lpNumberOfBytesWritten=0x1186f838*=0x10c, lpOverlapped=0x0) returned 1 [0214.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85ac0 [0214.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c2e8 [0214.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c978 [0214.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c978) returned 1 [0214.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c978 [0214.993] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0214.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0214.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c810) returned 1 [0214.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c2e8) returned 1 [0214.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85ac0) returned 1 [0214.994] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0214.994] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="66") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="81") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="5c") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="1b") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="b2") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="d5") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="87") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="cb") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="22") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="d8") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="f6") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="96") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="94") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="88") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="a5") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="dc") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="23") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="71") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="8e") returned 2 [0214.994] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="77") returned 2 [0214.995] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="96") returned 2 [0214.995] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="5a") returned 2 [0214.995] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="d9") returned 2 [0214.995] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="be") returned 2 [0214.995] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="5c") returned 2 [0214.995] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="f6") returned 2 [0214.995] RtlInitAnsiString (in: DestinationString=0x1186f7c0, SourceString="66815c1bb2d587cb22d8f6969488a5dc23718e77965ad9be5cf6" | out: DestinationString="66815c1bb2d587cb22d8f6969488a5dc23718e77965ad9be5cf6") [0214.995] RtlAnsiStringToUnicodeString (in: DestinationString=0x1186f7b8, SourceString="66815c1bb2d587cb22d8f6969488a5dc23718e77965ad9be5cf6", AllocateDestinationString=1 | out: DestinationString="66815c1bb2d587cb22d8f6969488a5dc23718e77965ad9be5cf6") returned 0x0 [0214.995] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c3d8 Thread: id = 7093 os_tid = 0x25f0 [0202.727] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json")) returned 0x2020 [0210.764] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json", dwFileAttributes=0x20) returned 1 [0225.047] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c18 [0225.047] GetFileSizeEx (in: hFile=0x1c18, lpFileSize=0xfb5fdac | out: lpFileSize=0xfb5fdac*=225) returned 1 [0225.047] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e541d8 [0225.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54098 [0225.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b58 [0225.048] NtQuerySystemTime (in: CurrentTime=0xfb5fd20 | out: CurrentTime=0xfb5fd20*=132462178032660000) returned 0x0 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x6779fef3 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x31245a92 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x1d00c89 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x55acca8a [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x46a21f [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x5543fdd4 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x2ef25be7 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0xae79d10 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x439fc6ef [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x205fbef [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x377e14aa [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x49cea7ed [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x5c0569c6 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x2d4cf049 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x53fada72 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x704cbb44 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x24ae00fb [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x3f2b9177 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x1bf26252 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x6b65c17d [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x64e5f46d [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x70a2e193 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x1ff31c87 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x47ba07d [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x5b83a316 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x46164cc4 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x4105cce7 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x59f7779b [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0xb71a179 [0225.048] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x7877921d [0225.049] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x72d864ea [0225.049] RtlRandomEx (in: Seed=0xfb5fd18 | out: Seed=0xfb5fd18) returned 0x5dcee984 [0225.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e541d8) returned 1 [0225.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7af0b50 [0225.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7af4758 [0225.058] ReadFile (in: hFile=0x1c18, lpBuffer=0x7af0b50, nNumberOfBytesToRead=0xe1, lpNumberOfBytesRead=0xfb5fd14, lpOverlapped=0x0 | out: lpBuffer=0x7af0b50*, lpNumberOfBytesRead=0xfb5fd14*=0xe1, lpOverlapped=0x0) returned 1 [0225.060] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.060] WriteFile (in: hFile=0x1c18, lpBuffer=0x7af4758*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0xfb5fd18, lpOverlapped=0x0 | out: lpBuffer=0x7af4758*, lpNumberOfBytesWritten=0xfb5fd18*=0xe1, lpOverlapped=0x0) returned 1 [0226.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cb0 [0226.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53bc0 [0226.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53bc0) returned 1 [0226.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7af4758) returned 1 [0226.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7af0b50) returned 1 [0226.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a239c8) returned 1 [0226.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24ed8) returned 1 [0226.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38130 [0226.278] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.278] WriteFile (in: hFile=0x1c18, lpBuffer=0x7cb67c8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xfb5fda0, lpOverlapped=0x0 | out: lpBuffer=0x7cb67c8*, lpNumberOfBytesWritten=0xfb5fda0*=0x10c, lpOverlapped=0x0) returned 1 [0226.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24d70 [0226.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0226.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53738 [0226.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53738) returned 1 [0226.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53738 [0226.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53490 [0226.360] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53da0 [0226.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53da0) returned 1 [0226.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0226.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24d70) returned 1 [0226.361] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d640 [0226.361] sprintf (in: _Dest=0x7a2d640, _Format="%c%c" | out: _Dest="65") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d642, _Format="%c%c" | out: _Dest="38") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d644, _Format="%c%c" | out: _Dest="b2") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d646, _Format="%c%c" | out: _Dest="26") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d648, _Format="%c%c" | out: _Dest="e4") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d64a, _Format="%c%c" | out: _Dest="df") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d64c, _Format="%c%c" | out: _Dest="03") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d64e, _Format="%c%c" | out: _Dest="ba") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d650, _Format="%c%c" | out: _Dest="ef") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d652, _Format="%c%c" | out: _Dest="c2") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d654, _Format="%c%c" | out: _Dest="91") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d656, _Format="%c%c" | out: _Dest="c8") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d658, _Format="%c%c" | out: _Dest="1b") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d65a, _Format="%c%c" | out: _Dest="64") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d65c, _Format="%c%c" | out: _Dest="b7") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d65e, _Format="%c%c" | out: _Dest="68") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d660, _Format="%c%c" | out: _Dest="94") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d662, _Format="%c%c" | out: _Dest="4e") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d664, _Format="%c%c" | out: _Dest="3d") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d666, _Format="%c%c" | out: _Dest="0e") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d668, _Format="%c%c" | out: _Dest="c1") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d66a, _Format="%c%c" | out: _Dest="d1") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d66c, _Format="%c%c" | out: _Dest="cd") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d66e, _Format="%c%c" | out: _Dest="94") returned 2 [0226.361] sprintf (in: _Dest=0x7a2d670, _Format="%c%c" | out: _Dest="71") returned 2 [0226.362] sprintf (in: _Dest=0x7a2d672, _Format="%c%c" | out: _Dest="a2") returned 2 [0226.362] RtlInitAnsiString (in: DestinationString=0xfb5fd28, SourceString="6538b226e4df03baefc291c81b64b768944e3d0ec1d1cd9471a2" | out: DestinationString="6538b226e4df03baefc291c81b64b768944e3d0ec1d1cd9471a2") [0226.362] RtlAnsiStringToUnicodeString (in: DestinationString=0xfb5fd20, SourceString="6538b226e4df03baefc291c81b64b768944e3d0ec1d1cd9471a2", AllocateDestinationString=1 | out: DestinationString="6538b226e4df03baefc291c81b64b768944e3d0ec1d1cd9471a2") returned 0x0 [0226.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3efc0 [0226.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd8f28) returned 1 [0226.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7dd0c40) returned 1 [0226.415] NtQueryInformationFile (in: FileHandle=0x1c18, IoStatusBlock=0xfb5fcf0, FileInformation=0xfb5fcf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfb5fcf0, FileInformation=0xfb5fcf8) returned 0x0 [0226.415] NtSetInformationFile (FileHandle=0x1c18, IoStatusBlock=0xfb5fcf0, FileInformation=0xfb5fcf8, Length=0x28, FileInformationClass=0x4) returned 0x0 [0226.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a1c8) returned 1 [0226.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3efc0) returned 1 [0226.525] FlushFileBuffers (hFile=0x1c18) returned 1 [0226.541] CloseHandle (hObject=0x1c18) returned 1 [0226.592] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x124) returned 0x7a6a1c8 [0226.592] wcscpy (in: _Dest=0x7a6a1c8, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\" [0226.592] wcscat (in: _Dest=0x7a6a1c8, _Source="68814F-Readme.txt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\68814F-Readme.txt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\68814F-Readme.txt" [0226.592] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\68814f-readme.txt")) returned 0xffffffff [0226.593] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\68814F-Readme.txt" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\_locales\\nl\\68814f-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c20 [0226.606] WriteFile (in: hFile=0x1c20, lpBuffer=0x7a22710*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0xfb5fd34, lpOverlapped=0x0 | out: lpBuffer=0x7a22710*, lpNumberOfBytesWritten=0xfb5fd34*=0x8b9, lpOverlapped=0x0) returned 1 [0226.619] CloseHandle (hObject=0x1c20) returned 1 [0226.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a1c8) returned 1 [0226.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81228) returned 1 Thread: id = 7094 os_tid = 0x1db4 [0202.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png")) returned 0x20 [0202.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", dwFileAttributes=0x20) returned 0 [0202.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.741] GetLastError () returned 0x5 [0202.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", dwFileAttributes=0x20) returned 0 [0202.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ad8) returned 1 Thread: id = 7095 os_tid = 0x17d8 [0202.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif")) returned 0x20 [0202.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif", dwFileAttributes=0x20) returned 0 [0202.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.762] GetLastError () returned 0x5 [0202.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif", dwFileAttributes=0x20) returned 0 [0202.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57500) returned 1 Thread: id = 7096 os_tid = 0x448 [0202.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif")) returned 0x20 [0202.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif", dwFileAttributes=0x20) returned 0 [0202.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.782] GetLastError () returned 0x5 [0202.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif", dwFileAttributes=0x20) returned 0 [0202.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56ba0) returned 1 Thread: id = 7097 os_tid = 0x1e0c [0202.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png")) returned 0x20 [0202.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", dwFileAttributes=0x20) returned 0 [0202.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.802] GetLastError () returned 0x5 [0202.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", dwFileAttributes=0x20) returned 0 [0202.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57b40) returned 1 Thread: id = 7098 os_tid = 0x1e10 [0202.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif")) returned 0x20 [0202.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif", dwFileAttributes=0x20) returned 0 [0202.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.822] GetLastError () returned 0x5 [0202.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif", dwFileAttributes=0x20) returned 0 [0202.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x333fa8) returned 1 Thread: id = 7099 os_tid = 0x1e5c [0202.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif")) returned 0x20 [0202.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif", dwFileAttributes=0x20) returned 0 [0202.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.837] GetLastError () returned 0x5 [0202.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif", dwFileAttributes=0x20) returned 0 [0202.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d57820) returned 1 Thread: id = 7100 os_tid = 0x1e60 [0202.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif")) returned 0x20 [0202.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif", dwFileAttributes=0x20) returned 0 [0202.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.853] GetLastError () returned 0x5 [0202.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif", dwFileAttributes=0x20) returned 0 [0202.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d56a10) returned 1 Thread: id = 7101 os_tid = 0x1e64 [0202.870] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json")) returned 0x2020 [0202.871] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0211.040] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x944 [0211.041] GetFileSizeEx (in: hFile=0x944, lpFileSize=0xef1fd0c | out: lpFileSize=0xef1fd0c*=274) returned 1 [0211.041] SetFilePointerEx (in: hFile=0x944, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.041] ReadFile (in: hFile=0x944, lpBuffer=0xef1fce8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xef1fcf8, lpOverlapped=0x0 | out: lpBuffer=0xef1fce8*, lpNumberOfBytesRead=0xef1fcf8*=0x4, lpOverlapped=0x0) returned 1 [0211.043] SetFilePointerEx (in: hFile=0x944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534e0 [0211.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0211.043] NtQuerySystemTime (in: CurrentTime=0xef1fc80 | out: CurrentTime=0xef1fc80*=132462177896160000) returned 0x0 [0211.043] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x4a336500 [0211.043] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x7dd899be [0211.043] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x1c372032 [0211.043] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x65f7f71d [0211.043] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x1a00880e [0211.043] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x7e5923fe [0211.043] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x1ac00d96 [0211.043] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x1a384513 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x23c1f2d6 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x6f61c50f [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x7423fac8 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x5337bf3f [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x54909fab [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x5f0ec61a [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x42e8f5b2 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x30413cee [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x38f6c5e5 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x33c795a6 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x3f833f86 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x4fea25ab [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x2e1a1a89 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x751903e7 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x67e02b76 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x8c5884f [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x61d6ba7e [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x2457b132 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x76a52360 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x4d56c8e9 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x23e4347b [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x6afbde78 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x11913136 [0211.044] RtlRandomEx (in: Seed=0xef1fc78 | out: Seed=0xef1fc78) returned 0x4bc45430 [0211.057] SetFilePointerEx (in: hFile=0x944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.057] WriteFile (in: hFile=0x944, lpBuffer=0x7ba63a0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0xef1fc78, lpOverlapped=0x0 | out: lpBuffer=0x7ba63a0*, lpNumberOfBytesWritten=0xef1fc78*=0x112, lpOverlapped=0x0) returned 1 [0213.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbb8 [0213.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bbe0 [0213.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bbe0) returned 1 [0213.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba63a0) returned 1 [0213.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba2798) returned 1 [0213.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cbd0) returned 1 [0213.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc218) returned 1 [0213.455] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37500 [0213.455] SetFilePointerEx (in: hFile=0x944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.455] WriteFile (in: hFile=0x944, lpBuffer=0x7a38b60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xef1fd00, lpOverlapped=0x0 | out: lpBuffer=0x7a38b60*, lpNumberOfBytesWritten=0xef1fd00*=0x10c, lpOverlapped=0x0) returned 1 [0213.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52360 [0213.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52360) returned 1 [0213.761] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52360 [0213.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53378 [0213.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a58 [0213.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53a58) returned 1 [0213.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.762] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.762] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="da") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="e4") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="d9") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="50") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="f3") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="2b") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="c2") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="92") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="1a") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="c9") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="d9") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="e5") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="42") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="38") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="9d") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="74") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="ba") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="3b") returned 2 [0213.762] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="4d") returned 2 [0213.763] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="8f") returned 2 [0213.763] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="b3") returned 2 [0213.763] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="3b") returned 2 [0213.763] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="ff") returned 2 [0213.763] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="8f") returned 2 [0213.763] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="a4") returned 2 [0213.763] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="03") returned 2 [0213.763] RtlInitAnsiString (in: DestinationString=0xef1fc88, SourceString="dae4d950f32bc2921ac9d9e542389d74ba3b4d8fb33bff8fa403" | out: DestinationString="dae4d950f32bc2921ac9d9e542389d74ba3b4d8fb33bff8fa403") [0213.763] RtlAnsiStringToUnicodeString (in: DestinationString=0xef1fc80, SourceString="dae4d950f32bc2921ac9d9e542389d74ba3b4d8fb33bff8fa403", AllocateDestinationString=1 | out: DestinationString="dae4d950f32bc2921ac9d9e542389d74ba3b4d8fb33bff8fa403") returned 0x0 [0213.763] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cbd0 Thread: id = 7102 os_tid = 0x1e68 [0202.872] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json")) returned 0x2020 [0202.872] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0211.063] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1220 [0211.063] GetFileSizeEx (in: hFile=0x1220, lpFileSize=0xf54fe04 | out: lpFileSize=0xf54fe04*=356) returned 1 [0211.064] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.064] ReadFile (in: hFile=0x1220, lpBuffer=0xf54fde0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf54fdf0, lpOverlapped=0x0 | out: lpBuffer=0xf54fde0*, lpNumberOfBytesRead=0xf54fdf0*=0x4, lpOverlapped=0x0) returned 1 [0211.065] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.065] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0211.066] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0211.066] NtQuerySystemTime (in: CurrentTime=0xf54fd78 | out: CurrentTime=0xf54fd78*=132462177896472000) returned 0x0 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x5129d917 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x6cd27002 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x63a52be [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x5bf77a10 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x74979f7d [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x21f0aa5b [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x70a193e [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x186e2576 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x2682b6a6 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x59adf3b1 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x2b2024a6 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x60e489e6 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0xdd4c5b2 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x7472fde4 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x1da0e969 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0xfe5df57 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x97f2b4b [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x77910297 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x4fead7c6 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x6b676d91 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x1ead30ae [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x280b246a [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x66b404ac [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x3d6f2e75 [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x7ed9ae3e [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x2143af1f [0211.066] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x7eaed57e [0211.067] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x461b8741 [0211.067] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x6a1e9c61 [0211.067] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x1bb4f383 [0211.067] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x25342408 [0211.067] RtlRandomEx (in: Seed=0xf54fd70 | out: Seed=0xf54fd70) returned 0x41775b2e [0211.075] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.075] WriteFile (in: hFile=0x1220, lpBuffer=0x7b9eb90*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0xf54fd70, lpOverlapped=0x0 | out: lpBuffer=0x7b9eb90*, lpNumberOfBytesWritten=0xf54fd70*=0x164, lpOverlapped=0x0) returned 1 [0213.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcd0 [0213.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0213.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bc58) returned 1 [0213.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9eb90) returned 1 [0213.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9af88) returned 1 [0213.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c5b8) returned 1 [0213.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc770) returned 1 [0213.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37f80 [0213.457] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.457] WriteFile (in: hFile=0x1220, lpBuffer=0x7a390d8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf54fdf8, lpOverlapped=0x0 | out: lpBuffer=0x7a390d8*, lpNumberOfBytesWritten=0xf54fdf8*=0x10c, lpOverlapped=0x0) returned 1 [0213.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e537b0 [0213.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e537b0) returned 1 [0213.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e537b0 [0213.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54160 [0213.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534e0 [0213.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e534e0) returned 1 [0213.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.768] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="da") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="4a") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="d5") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="88") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="62") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="5a") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="49") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="fe") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="38") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="3c") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="cf") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="5c") returned 2 [0213.768] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="c2") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="99") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="8a") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="a6") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="c2") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="e9") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="7d") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="67") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="79") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="13") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="b5") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="dc") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="9f") returned 2 [0213.769] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="50") returned 2 [0213.769] RtlInitAnsiString (in: DestinationString=0xf54fd80, SourceString="da4ad588625a49fe383ccf5cc2998aa6c2e97d677913b5dc9f50" | out: DestinationString="da4ad588625a49fe383ccf5cc2998aa6c2e97d677913b5dc9f50") [0213.769] RtlAnsiStringToUnicodeString (in: DestinationString=0xf54fd78, SourceString="da4ad588625a49fe383ccf5cc2998aa6c2e97d677913b5dc9f50", AllocateDestinationString=1 | out: DestinationString="da4ad588625a49fe383ccf5cc2998aa6c2e97d677913b5dc9f50") returned 0x0 [0213.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c900 Thread: id = 7103 os_tid = 0x1e6c [0202.873] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json")) returned 0x2020 [0203.263] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0214.802] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb38 [0214.803] GetFileSizeEx (in: hFile=0xb38, lpFileSize=0x143bf9dc | out: lpFileSize=0x143bf9dc*=179) returned 1 [0214.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0214.803] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0214.803] NtQuerySystemTime (in: CurrentTime=0x143bf950 | out: CurrentTime=0x143bf950*=132462177933756000) returned 0x0 [0214.803] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x70c51fdb [0214.803] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x77029d11 [0214.803] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x167090d6 [0214.803] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x40ddf744 [0214.803] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x25af1c4d [0214.803] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x6382a48b [0214.803] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x6f9c7df1 [0214.803] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x7d7283a6 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x7335dbd3 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x5aea89e6 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x6c15d0b4 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x64774e52 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x25e00cd7 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x7c46263e [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x43114f56 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x6677530c [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x25e7d120 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x41879814 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x2c2f72f [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x34d2bb4f [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x48df460 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x3f7fd155 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x520160c8 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x420f6a1a [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x420f6a1a [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0xaa0755c [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x71c34293 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x4e4a9e75 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x54e3c98 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x6b151c4 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x4001fe04 [0214.804] RtlRandomEx (in: Seed=0x143bf948 | out: Seed=0x143bf948) returned 0x2388a455 [0214.812] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.812] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e90020 [0214.816] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e93c28 [0214.816] ReadFile (in: hFile=0xb38, lpBuffer=0x10e90020, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x143bf944, lpOverlapped=0x0 | out: lpBuffer=0x10e90020*, lpNumberOfBytesRead=0x143bf944*=0xb3, lpOverlapped=0x0) returned 1 [0214.817] SetFilePointerEx (in: hFile=0xb38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.818] WriteFile (in: hFile=0xb38, lpBuffer=0x10e93c28*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x143bf948, lpOverlapped=0x0 | out: lpBuffer=0x10e93c28*, lpNumberOfBytesWritten=0x143bf948*=0xb3, lpOverlapped=0x0) returned 1 [0215.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2fe8 [0215.934] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c28 [0215.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2c28) returned 1 [0215.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e93c28) returned 1 [0215.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e90020) returned 1 [0215.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cea0) returned 1 [0215.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86018) returned 1 [0215.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37aa0 [0215.935] SetFilePointerEx (in: hFile=0xb38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.935] WriteFile (in: hFile=0xb38, lpBuffer=0x7dda6e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x143bf9d0, lpOverlapped=0x0 | out: lpBuffer=0x7dda6e8*, lpNumberOfBytesWritten=0x143bf9d0*=0x10c, lpOverlapped=0x0) returned 1 [0218.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca030 [0218.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca030) returned 1 [0218.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca030 [0218.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca8c8 [0218.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca9e0 [0218.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca9e0) returned 1 [0218.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.210] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.210] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="6c") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="4a") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="91") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="83") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="ea") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="07") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="4e") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="b3") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="89") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="f8") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="15") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="77") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.210] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="e8") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="b2") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="40") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="0c") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="0e") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="42") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="4f") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="20") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="99") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="fe") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="3f") returned 2 [0218.211] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="b2") returned 2 [0218.211] RtlInitAnsiString (in: DestinationString=0x143bf958, SourceString="6c4a9183ea074eb389f81577e6e8b2400c0e427f4f2099fe3fb2" | out: DestinationString="6c4a9183ea074eb389f81577e6e8b2400c0e427f4f2099fe3fb2") [0218.211] RtlAnsiStringToUnicodeString (in: DestinationString=0x143bf950, SourceString="6c4a9183ea074eb389f81577e6e8b2400c0e427f4f2099fe3fb2", AllocateDestinationString=1 | out: DestinationString="6c4a9183ea074eb389f81577e6e8b2400c0e427f4f2099fe3fb2") returned 0x0 [0218.211] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f740 [0224.791] __SEH_epilog4 () [0224.791] CloseHandle (hObject=0x93c) returned 1 [0224.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd240) returned 1 [0224.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55e08) returned 1 Thread: id = 7104 os_tid = 0x1e70 [0202.873] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json")) returned 0x2020 [0203.263] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", dwFileAttributes=0x20) returned 1 [0214.818] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d94 [0214.818] GetFileSizeEx (in: hFile=0x1d94, lpFileSize=0x109efdfc | out: lpFileSize=0x109efdfc*=179) returned 1 [0214.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd10 [0214.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0214.819] NtQuerySystemTime (in: CurrentTime=0x109efd70 | out: CurrentTime=0x109efd70*=132462177933912000) returned 0x0 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x551c7222 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x4d399ebd [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x6dfdbcbc [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x79e3ae63 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x355538fc [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x6a34d97c [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x27cbfef [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x75355ca4 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x27db2f56 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x300234c [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x5282ec98 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x2565f850 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x6677530c [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x1b6c0bc [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x2f05202f [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x5847be69 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x5319f953 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x533a80f5 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x23f0d1 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x23871e7f [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x2706b06d [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x11f2d66f [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x1a5de3f8 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x5cf5530 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x21ab505a [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x305f5132 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x49fd846b [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x27cbfef [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x7cb27be [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x2601deb7 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x6a2a9727 [0214.819] RtlRandomEx (in: Seed=0x109efd68 | out: Seed=0x109efd68) returned 0x44eea351 [0214.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e97830 [0214.827] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e9b438 [0214.827] ReadFile (in: hFile=0x1d94, lpBuffer=0x10e97830, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x109efd64, lpOverlapped=0x0 | out: lpBuffer=0x10e97830*, lpNumberOfBytesRead=0x109efd64*=0xb3, lpOverlapped=0x0) returned 1 [0214.829] SetFilePointerEx (in: hFile=0x1d94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.829] WriteFile (in: hFile=0x1d94, lpBuffer=0x10e9b438*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x109efd68, lpOverlapped=0x0 | out: lpBuffer=0x10e9b438*, lpNumberOfBytesWritten=0x109efd68*=0xb3, lpOverlapped=0x0) returned 1 [0215.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ea8 [0215.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c40 [0215.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c40) returned 1 [0215.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e9b438) returned 1 [0215.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e97830) returned 1 [0215.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ccc0) returned 1 [0215.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b849e0) returned 1 [0215.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38460 [0215.938] SetFilePointerEx (in: hFile=0x1d94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.938] WriteFile (in: hFile=0x1d94, lpBuffer=0x7ddaa30*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x109efdf0, lpOverlapped=0x0 | out: lpBuffer=0x7ddaa30*, lpNumberOfBytesWritten=0x109efdf0*=0x10c, lpOverlapped=0x0) returned 1 [0218.224] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b8e8 [0218.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b8e8) returned 1 [0218.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b8e8 [0218.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7f8 [0218.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ba28 [0218.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ba28) returned 1 [0218.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.225] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.225] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="a2") returned 2 [0218.225] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="2c") returned 2 [0218.225] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="80") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="a6") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="ef") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="05") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="0a") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="05") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="8a") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="13") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="59") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="17") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="fb") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="12") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="f7") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="cb") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="c0") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="b3") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="eb") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="af") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="a4") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="a4") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="95") returned 2 [0218.226] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="de") returned 2 [0218.227] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.227] RtlInitAnsiString (in: DestinationString=0x109efd78, SourceString="a22c80a6caef050a058a135917fb12f7cbc0b3ebafa4a495de2f" | out: DestinationString="a22c80a6caef050a058a135917fb12f7cbc0b3ebafa4a495de2f") [0218.227] RtlAnsiStringToUnicodeString (in: DestinationString=0x109efd70, SourceString="a22c80a6caef050a058a135917fb12f7cbc0b3ebafa4a495de2f", AllocateDestinationString=1 | out: DestinationString="a22c80a6caef050a058a135917fb12f7cbc0b3ebafa4a495de2f") returned 0x0 [0218.227] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa88 [0224.802] __SEH_epilog4 () [0224.802] CloseHandle (hObject=0x1fac) returned 1 [0224.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddcc28) returned 1 [0224.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d54cb0) returned 1 Thread: id = 7105 os_tid = 0x1e74 [0202.874] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json")) returned 0x2020 [0203.384] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", dwFileAttributes=0x20) returned 1 [0214.829] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xb94 [0214.830] GetFileSizeEx (in: hFile=0xb94, lpFileSize=0x147bfcec | out: lpFileSize=0x147bfcec*=179) returned 1 [0214.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c0e0 [0214.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0214.830] NtQuerySystemTime (in: CurrentTime=0x147bfc60 | out: CurrentTime=0x147bfc60*=132462177934068000) returned 0x0 [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x1f448eed [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x563f18a0 [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x2f0124bd [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x4428ba7c [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x438c0998 [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x680e289c [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x786b801c [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x7e1af070 [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x9015ef7 [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x1a1852fb [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x74a8fcdd [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x3522e302 [0214.830] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x415d33e1 [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x61e86d7d [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x677259e8 [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x1b824d8b [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x714f012b [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x26ff24c2 [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x4b9c28dd [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x1c790852 [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x7541eee1 [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x31c51d46 [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x53de56e0 [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x31eb6a73 [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x31a3bc6f [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x2a4a2a1a [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x5d1e5087 [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x25a381e [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x4027530a [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x56ae7a3e [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0x73148c86 [0214.831] RtlRandomEx (in: Seed=0x147bfc58 | out: Seed=0x147bfc58) returned 0xfbfe812 [0214.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e9f040 [0214.839] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ea2c48 [0214.839] ReadFile (in: hFile=0xb94, lpBuffer=0x10e9f040, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x147bfc54, lpOverlapped=0x0 | out: lpBuffer=0x10e9f040*, lpNumberOfBytesRead=0x147bfc54*=0xb3, lpOverlapped=0x0) returned 1 [0214.845] SetFilePointerEx (in: hFile=0xb94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.845] WriteFile (in: hFile=0xb94, lpBuffer=0x10ea2c48*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x147bfc58, lpOverlapped=0x0 | out: lpBuffer=0x10ea2c48*, lpNumberOfBytesWritten=0x147bfc58*=0xb3, lpOverlapped=0x0) returned 1 [0215.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4af0 [0215.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3c68 [0215.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3c68) returned 1 [0215.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ea2c48) returned 1 [0215.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e9f040) returned 1 [0215.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c450) returned 1 [0215.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85178) returned 1 [0215.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38430 [0215.937] SetFilePointerEx (in: hFile=0xb94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.937] WriteFile (in: hFile=0xb94, lpBuffer=0x7dda800*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x147bfce0, lpOverlapped=0x0 | out: lpBuffer=0x7dda800*, lpNumberOfBytesWritten=0x147bfce0*=0x10c, lpOverlapped=0x0) returned 1 [0218.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.214] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd20 [0218.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd20) returned 1 [0218.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bd20 [0218.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b550 [0218.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b938 [0218.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b938) returned 1 [0218.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.215] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.215] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="75") returned 2 [0218.215] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="9c") returned 2 [0218.215] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="f0") returned 2 [0218.215] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="07") returned 2 [0218.215] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="e9") returned 2 [0218.215] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="98") returned 2 [0218.215] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="6a") returned 2 [0218.215] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="9e") returned 2 [0218.215] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="a2") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="d5") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="87") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="36") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="bf") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="66") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="d8") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="22") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="73") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="27") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="15") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="6c") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="df") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="81") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="c8") returned 2 [0218.216] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="12") returned 2 [0218.217] RtlInitAnsiString (in: DestinationString=0x147bfc68, SourceString="759cf007e9986a9ea2d5872f36bfdd66d8227327156cdf81c812" | out: DestinationString="759cf007e9986a9ea2d5872f36bfdd66d8227327156cdf81c812") [0218.217] RtlAnsiStringToUnicodeString (in: DestinationString=0x147bfc60, SourceString="759cf007e9986a9ea2d5872f36bfdd66d8227327156cdf81c812", AllocateDestinationString=1 | out: DestinationString="759cf007e9986a9ea2d5872f36bfdd66d8227327156cdf81c812") returned 0x0 [0218.217] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa10 [0224.794] __SEH_epilog4 () [0224.794] CloseHandle (hObject=0x13e0) returned 1 [0224.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc9b8) returned 1 [0224.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55150) returned 1 Thread: id = 7106 os_tid = 0x1e94 [0202.874] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json")) returned 0x2020 [0203.385] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0214.845] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1150 [0214.846] GetFileSizeEx (in: hFile=0x1150, lpFileSize=0xb8cf96c | out: lpFileSize=0xb8cf96c*=179) returned 1 [0214.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c040 [0214.846] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0214.846] NtQuerySystemTime (in: CurrentTime=0xb8cf8e0 | out: CurrentTime=0xb8cf8e0*=132462177934224000) returned 0x0 [0214.846] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x3fff954 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x59b00254 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x5ed48a1e [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x3296abb2 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x31454269 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x73342fdb [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x4baa7ca5 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x66415f70 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x50ab2be8 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x221b17d2 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x4bed01f4 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0xe2ec73f [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x525c4c39 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x7ec0db7e [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x1c5b4472 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x176c0431 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x67fd7f86 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x55d83e7e [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x66368add [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x26152bbb [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x552cdb7e [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x499b005b [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x302d0849 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x3cecebf3 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x447f6c70 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x16f5ad82 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x6c909ea [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x2df2be06 [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x55828cfe [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x41cca05f [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x40b7bf4a [0214.847] RtlRandomEx (in: Seed=0xb8cf8d8 | out: Seed=0xb8cf8d8) returned 0x5557b43e [0214.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ea6850 [0214.855] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eaa458 [0214.856] ReadFile (in: hFile=0x1150, lpBuffer=0x10ea6850, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0xb8cf8d4, lpOverlapped=0x0 | out: lpBuffer=0x10ea6850*, lpNumberOfBytesRead=0xb8cf8d4*=0xb3, lpOverlapped=0x0) returned 1 [0214.857] SetFilePointerEx (in: hFile=0x1150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.857] WriteFile (in: hFile=0x1150, lpBuffer=0x10eaa458*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0xb8cf8d8, lpOverlapped=0x0 | out: lpBuffer=0x10eaa458*, lpNumberOfBytesWritten=0xb8cf8d8*=0xb3, lpOverlapped=0x0) returned 1 [0215.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2c50 [0215.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37b8 [0215.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37b8) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eaa458) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ea6850) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c900) returned 1 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84a70) returned 1 [0215.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ec0 [0215.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f38) returned 1 [0215.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ef0 [0215.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f38 [0215.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec30b0 [0215.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec30b0) returned 1 [0215.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c900) returned 1 [0215.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84a70) returned 1 [0215.944] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7ddad78 [0215.944] SetFilePointerEx (in: hFile=0x1150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.944] WriteFile (in: hFile=0x1150, lpBuffer=0x7ddad78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb8cf960, lpOverlapped=0x0 | out: lpBuffer=0x7ddad78*, lpNumberOfBytesWritten=0xb8cf960*=0x10c, lpOverlapped=0x0) returned 1 [0218.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca008 [0218.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca008) returned 1 [0218.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca008 [0218.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca800 [0218.234] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca620 [0218.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca620) returned 1 [0218.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.235] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.235] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="1e") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="16") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="e0") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="07") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="21") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="16") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="9c") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="8b") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="16") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="04") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="2e") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="a7") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="42") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="c3") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="0f") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="6a") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="e3") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="4f") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="d8") returned 2 [0218.235] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="07") returned 2 [0218.236] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="8a") returned 2 [0218.236] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="3b") returned 2 [0218.236] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="e8") returned 2 [0218.236] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="e5") returned 2 [0218.236] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="1f") returned 2 [0218.236] RtlInitAnsiString (in: DestinationString=0xb8cf8e8, SourceString="1e16e00721169c8b16042ea742c3ca0f6ae34fd8078a3be8e51f" | out: DestinationString="1e16e00721169c8b16042ea742c3ca0f6ae34fd8078a3be8e51f") [0218.236] RtlAnsiStringToUnicodeString (in: DestinationString=0xb8cf8e0, SourceString="1e16e00721169c8b16042ea742c3ca0f6ae34fd8078a3be8e51f", AllocateDestinationString=1 | out: DestinationString="1e16e00721169c8b16042ea742c3ca0f6ae34fd8078a3be8e51f") returned 0x0 [0218.236] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fc68 [0224.805] __SEH_epilog4 () [0224.805] CloseHandle (hObject=0xd08) returned 1 [0224.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cafaf0) returned 1 [0224.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55a90) returned 1 Thread: id = 7107 os_tid = 0x1e98 [0202.875] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json")) returned 0x2020 [0203.386] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", dwFileAttributes=0x20) returned 1 [0214.858] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13b0 [0214.858] GetFileSizeEx (in: hFile=0x13b0, lpFileSize=0x147fff44 | out: lpFileSize=0x147fff44*=179) returned 1 [0214.858] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bed8 [0214.859] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be38 [0214.859] NtQuerySystemTime (in: CurrentTime=0x147ffeb8 | out: CurrentTime=0x147ffeb8*=132462177934380000) returned 0x0 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x2706b06d [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x176c0263 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x870fdbb [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x55d83e7e [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x2cd92972 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x62b9cc9c [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x64774e52 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x413f5519 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x58e7dca [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x53f6e968 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x1b824d8b [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x52a4b8db [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x47ee3bad [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x6ab15d22 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x4d2265cb [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x4860b1b9 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x8df0bdc [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x921545b [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x698c03f8 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x7d12e77f [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x1a2500df [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x1bdaa422 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x53744a58 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x171460ea [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x9838ba6 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0xed8f109 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x550e499a [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x25f1a0a5 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x1f88d9ab [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x18a39668 [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x6126728b [0214.859] RtlRandomEx (in: Seed=0x147ffeb0 | out: Seed=0x147ffeb0) returned 0x2a5ba3aa [0214.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eae060 [0214.867] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10eb1c68 [0214.867] ReadFile (in: hFile=0x13b0, lpBuffer=0x10eae060, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x147ffeac, lpOverlapped=0x0 | out: lpBuffer=0x10eae060*, lpNumberOfBytesRead=0x147ffeac*=0xb3, lpOverlapped=0x0) returned 1 [0214.869] SetFilePointerEx (in: hFile=0x13b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.869] WriteFile (in: hFile=0x13b0, lpBuffer=0x10eb1c68*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x147ffeb0, lpOverlapped=0x0 | out: lpBuffer=0x10eb1c68*, lpNumberOfBytesWritten=0x147ffeb0*=0xb3, lpOverlapped=0x0) returned 1 [0215.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3dd0 [0215.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4780 [0215.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4780) returned 1 [0215.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eb1c68) returned 1 [0215.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eae060) returned 1 [0215.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cbd0) returned 1 [0215.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85fd0) returned 1 [0215.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37530 [0215.927] SetFilePointerEx (in: hFile=0x13b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.927] WriteFile (in: hFile=0x13b0, lpBuffer=0x300e668*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x147fff38, lpOverlapped=0x0 | out: lpBuffer=0x300e668*, lpNumberOfBytesWritten=0x147fff38*=0x10c, lpOverlapped=0x0) returned 1 [0218.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53620 [0218.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53620) returned 1 [0218.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53620 [0218.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53b70 [0218.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52e50 [0218.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52e50) returned 1 [0218.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.184] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="95") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="bf") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="74") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="43") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="e5") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="3c") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="95") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="af") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="09") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="44") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="d3") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="d1") returned 2 [0218.184] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="ae") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="fa") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="8c") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="e7") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="a8") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="05") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="f8") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="59") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="5e") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="69") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="bd") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="cc") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="1f") returned 2 [0218.185] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="0b") returned 2 [0218.185] RtlInitAnsiString (in: DestinationString=0x147ffec0, SourceString="95bf7443e53c95af0944d3d1aefa8ce7a805f8595e69bdcc1f0b" | out: DestinationString="95bf7443e53c95af0944d3d1aefa8ce7a805f8595e69bdcc1f0b") [0218.185] RtlAnsiStringToUnicodeString (in: DestinationString=0x147ffeb8, SourceString="95bf7443e53c95af0944d3d1aefa8ce7a805f8595e69bdcc1f0b", AllocateDestinationString=1 | out: DestinationString="95bf7443e53c95af0944d3d1aefa8ce7a805f8595e69bdcc1f0b") returned 0x0 [0218.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f830 [0224.773] __SEH_epilog4 () [0224.774] CloseHandle (hObject=0xefc) returned 1 [0224.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddc880) returned 1 [0224.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d55278) returned 1 Thread: id = 7108 os_tid = 0x1e9c [0202.875] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6bb0 [0202.875] wcscpy (in: _Dest=0x7cd6bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it" [0202.875] wcscat (in: _Dest=0x7cd6bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\" [0202.875] wcscat (in: _Dest=0x7cd6bb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*" [0202.876] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.876] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\it\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.876] wcscmp (_String1=".", _String2=".") returned 0 [0202.876] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.876] wcscmp (_String1="..", _String2=".") returned 1 [0202.876] wcscmp (_String1="..", _String2="..") returned 0 [0202.876] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41669e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41669e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41669e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.876] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6bb0) returned 1 [0202.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacc28) returned 1 Thread: id = 7109 os_tid = 0x1ea0 [0202.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6bb0 [0202.880] wcscpy (in: _Dest=0x7cd6bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja" [0202.880] wcscat (in: _Dest=0x7cd6bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\" [0202.880] wcscat (in: _Dest=0x7cd6bb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*" [0202.880] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.880] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ja\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.880] wcscmp (_String1=".", _String2=".") returned 0 [0202.881] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.881] wcscmp (_String1="..", _String2=".") returned 1 [0202.881] wcscmp (_String1="..", _String2="..") returned 0 [0202.881] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe418cb40, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe418cb40, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe418cb40, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.881] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6bb0) returned 1 [0202.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacf70) returned 1 Thread: id = 7110 os_tid = 0x1ea4 [0202.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6bb0 [0202.883] wcscpy (in: _Dest=0x7cd6bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko" [0202.883] wcscat (in: _Dest=0x7cd6bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\" [0202.883] wcscat (in: _Dest=0x7cd6bb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*" [0202.883] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.883] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ko\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.884] wcscmp (_String1=".", _String2=".") returned 0 [0202.884] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.884] wcscmp (_String1="..", _String2=".") returned 1 [0202.884] wcscmp (_String1="..", _String2="..") returned 0 [0202.884] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe41b2ca0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe41b2ca0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe41b2ca0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.884] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6bb0) returned 1 [0202.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac250) returned 1 Thread: id = 7111 os_tid = 0x1ea8 [0202.886] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6bb0 [0202.886] wcscpy (in: _Dest=0x7cd6bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt" [0202.887] wcscat (in: _Dest=0x7cd6bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\" [0202.887] wcscat (in: _Dest=0x7cd6bb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*" [0202.887] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.887] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lt\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.887] wcscmp (_String1=".", _String2=".") returned 0 [0202.887] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.887] wcscmp (_String1="..", _String2=".") returned 1 [0202.887] wcscmp (_String1="..", _String2="..") returned 0 [0202.887] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42250c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42250c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42250c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.887] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6bb0) returned 1 [0202.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac598) returned 1 Thread: id = 7112 os_tid = 0x1eac [0202.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6bb0 [0202.920] wcscpy (in: _Dest=0x7cd6bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv" [0202.920] wcscat (in: _Dest=0x7cd6bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\" [0202.920] wcscat (in: _Dest=0x7cd6bb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*" [0202.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.920] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\lv\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.921] wcscmp (_String1=".", _String2=".") returned 0 [0202.921] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.921] wcscmp (_String1="..", _String2=".") returned 1 [0202.921] wcscmp (_String1="..", _String2="..") returned 0 [0202.921] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe424b220, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe424b220, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe424b220, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.921] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6bb0) returned 1 [0202.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac6b0) returned 1 Thread: id = 7113 os_tid = 0x1eb8 [0202.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6bb0 [0202.923] wcscpy (in: _Dest=0x7cd6bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl" [0202.924] wcscat (in: _Dest=0x7cd6bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\" [0202.924] wcscat (in: _Dest=0x7cd6bb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*" [0202.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.924] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\nl\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.924] wcscmp (_String1=".", _String2=".") returned 0 [0202.924] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.924] wcscmp (_String1="..", _String2=".") returned 1 [0202.924] wcscmp (_String1="..", _String2="..") returned 0 [0202.924] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42974e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42974e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42974e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.924] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6bb0) returned 1 [0202.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadda8) returned 1 Thread: id = 7114 os_tid = 0x1ebc [0202.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6bb0 [0202.926] wcscpy (in: _Dest=0x7cd6bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no" [0202.926] wcscat (in: _Dest=0x7cd6bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\" [0202.926] wcscat (in: _Dest=0x7cd6bb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*" [0202.926] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.926] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\no\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.926] wcscmp (_String1=".", _String2=".") returned 0 [0202.926] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.927] wcscmp (_String1="..", _String2=".") returned 1 [0202.927] wcscmp (_String1="..", _String2="..") returned 0 [0202.927] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe42bd640, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe42bd640, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe42bd640, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.927] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6bb0) returned 1 [0202.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadc90) returned 1 Thread: id = 7115 os_tid = 0x1ec0 [0202.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6bb0 [0202.928] wcscpy (in: _Dest=0x7cd6bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl" [0202.928] wcscat (in: _Dest=0x7cd6bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\" [0202.928] wcscat (in: _Dest=0x7cd6bb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*" [0202.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.929] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pl\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.929] wcscmp (_String1=".", _String2=".") returned 0 [0202.929] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.929] wcscmp (_String1="..", _String2=".") returned 1 [0202.929] wcscmp (_String1="..", _String2="..") returned 0 [0202.929] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe437bd20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe437bd20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe437bd20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.929] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6bb0) returned 1 [0202.930] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacd40) returned 1 Thread: id = 7116 os_tid = 0x1ec4 [0202.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd6bb0 [0202.931] wcscpy (in: _Dest=0x7cd6bb0, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR" [0202.931] wcscat (in: _Dest=0x7cd6bb0, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\" [0202.931] wcscat (in: _Dest=0x7cd6bb0, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*" [0202.931] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.931] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_BR\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.931] wcscmp (_String1=".", _String2=".") returned 0 [0202.931] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.931] wcscmp (_String1="..", _String2=".") returned 1 [0202.931] wcscmp (_String1="..", _String2="..") returned 0 [0202.931] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43c7fe0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43c7fe0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43c7fe0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.932] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6bb0) returned 1 [0202.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6020) returned 1 Thread: id = 7117 os_tid = 0x1ec8 [0202.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd6020 [0202.933] wcscpy (in: _Dest=0x7cd6020, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT" [0202.933] wcscat (in: _Dest=0x7cd6020, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\" [0202.933] wcscat (in: _Dest=0x7cd6020, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*" [0202.933] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.934] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\pt_PT\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.934] wcscmp (_String1=".", _String2=".") returned 0 [0202.934] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.934] wcscmp (_String1="..", _String2=".") returned 1 [0202.934] wcscmp (_String1="..", _String2="..") returned 0 [0202.934] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe43ee140, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe43ee140, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe43ee140, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.934] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6020) returned 1 [0202.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 Thread: id = 7118 os_tid = 0x1ecc [0202.940] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6838 [0202.940] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro" [0202.940] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\" [0202.940] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*" [0202.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.941] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ro\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.941] wcscmp (_String1=".", _String2=".") returned 0 [0202.941] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.941] wcscmp (_String1="..", _String2=".") returned 1 [0202.941] wcscmp (_String1="..", _String2="..") returned 0 [0202.941] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe443a400, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe443a400, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe443a400, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.941] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cace58) returned 1 Thread: id = 7119 os_tid = 0x1ed0 [0202.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6838 [0202.943] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru" [0202.943] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\" [0202.943] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*" [0202.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.943] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\ru\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.943] wcscmp (_String1=".", _String2=".") returned 0 [0202.943] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.944] wcscmp (_String1="..", _String2=".") returned 1 [0202.944] wcscmp (_String1="..", _String2="..") returned 0 [0202.944] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4460560, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe4460560, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe4460560, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.944] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac9f8) returned 1 Thread: id = 7120 os_tid = 0x1ed4 [0202.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6838 [0202.945] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk" [0202.945] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\" [0202.945] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*" [0202.945] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.945] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sk\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.946] wcscmp (_String1=".", _String2=".") returned 0 [0202.946] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.946] wcscmp (_String1="..", _String2=".") returned 1 [0202.946] wcscmp (_String1="..", _String2="..") returned 0 [0202.946] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44ac820, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44ac820, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44ac820, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.946] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac138) returned 1 Thread: id = 7121 os_tid = 0x1ed8 [0202.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6838 [0202.947] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl" [0202.947] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\" [0202.947] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*" [0202.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.948] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sl\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.948] wcscmp (_String1=".", _String2=".") returned 0 [0202.948] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.948] wcscmp (_String1="..", _String2=".") returned 1 [0202.948] wcscmp (_String1="..", _String2="..") returned 0 [0202.948] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe44d2980, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe44d2980, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe44d2980, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.948] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cada60) returned 1 Thread: id = 7122 os_tid = 0x1ee0 [0202.954] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6838 [0202.955] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr" [0202.955] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\" [0202.955] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*" [0202.955] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.955] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sr\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.955] wcscmp (_String1=".", _String2=".") returned 0 [0202.955] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.955] wcscmp (_String1="..", _String2=".") returned 1 [0202.955] wcscmp (_String1="..", _String2="..") returned 0 [0202.955] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe456af00, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe456af00, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe456af00, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.955] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad948) returned 1 Thread: id = 7123 os_tid = 0x1ef4 [0202.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6838 [0202.957] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv" [0202.957] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\" [0202.957] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*" [0202.957] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.957] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\sv\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.957] wcscmp (_String1=".", _String2=".") returned 0 [0202.957] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.958] wcscmp (_String1="..", _String2=".") returned 1 [0202.958] wcscmp (_String1="..", _String2="..") returned 0 [0202.958] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45b71c0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45b71c0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45b71c0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.958] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad830) returned 1 Thread: id = 7124 os_tid = 0x1f50 [0202.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6838 [0202.964] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th" [0202.964] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\" [0202.964] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*" [0202.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.965] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\th\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.965] wcscmp (_String1=".", _String2=".") returned 0 [0202.965] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.965] wcscmp (_String1="..", _String2=".") returned 1 [0202.965] wcscmp (_String1="..", _String2="..") returned 0 [0202.965] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe45dd320, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe45dd320, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe45dd320, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.965] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad4e8) returned 1 Thread: id = 7125 os_tid = 0x1f58 [0202.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6838 [0202.967] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr" [0202.967] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\" [0202.967] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*" [0202.967] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.967] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\tr\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.968] wcscmp (_String1=".", _String2=".") returned 0 [0202.968] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.968] wcscmp (_String1="..", _String2=".") returned 1 [0202.968] wcscmp (_String1="..", _String2="..") returned 0 [0202.968] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46295e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46295e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46295e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.968] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad3d0) returned 1 Thread: id = 7126 os_tid = 0x1f5c [0202.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6838 [0202.970] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk" [0202.970] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\" [0202.970] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*" [0202.970] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.970] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\uk\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.970] wcscmp (_String1=".", _String2=".") returned 0 [0202.970] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.970] wcscmp (_String1="..", _String2=".") returned 1 [0202.970] wcscmp (_String1="..", _String2="..") returned 0 [0202.971] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe46c1b60, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe46c1b60, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe46c1b60, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.971] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad718) returned 1 Thread: id = 7127 os_tid = 0x1f60 [0202.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x114) returned 0x7cd6838 [0202.972] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi" [0202.972] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\" [0202.972] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*" [0202.972] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.972] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\vi\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.973] wcscmp (_String1=".", _String2=".") returned 0 [0202.973] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.973] wcscmp (_String1="..", _String2=".") returned 1 [0202.973] wcscmp (_String1="..", _String2="..") returned 0 [0202.973] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe470de20, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe470de20, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe470de20, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.973] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad2b8) returned 1 Thread: id = 7128 os_tid = 0x1f68 [0202.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd6838 [0202.974] wcscpy (in: _Dest=0x7cd6838, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN" [0202.974] wcscat (in: _Dest=0x7cd6838, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\" [0202.974] wcscat (in: _Dest=0x7cd6838, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*" [0202.974] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.975] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_CN\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.975] wcscmp (_String1=".", _String2=".") returned 0 [0202.975] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.975] wcscmp (_String1="..", _String2=".") returned 1 [0202.975] wcscmp (_String1="..", _String2="..") returned 0 [0202.975] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe475a0e0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe475a0e0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe475a0e0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.975] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 [0202.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6960) returned 1 Thread: id = 7129 os_tid = 0x1f6c [0202.976] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x11a) returned 0x7cd6960 [0202.977] wcscpy (in: _Dest=0x7cd6960, _Source="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW" [0202.977] wcscat (in: _Dest=0x7cd6960, _Source="\\" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\" [0202.977] wcscat (in: _Dest=0x7cd6960, _Source="*" | out: _Dest="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*") returned="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*" [0202.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.977] FindFirstFileW (in: lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0\\__MACOSX\\_locales\\zh_TW\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.977] wcscmp (_String1=".", _String2=".") returned 0 [0202.977] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.977] wcscmp (_String1="..", _String2=".") returned 1 [0202.977] wcscmp (_String1="..", _String2="..") returned 0 [0202.977] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe47a63a0, ftCreationTime.dwHighDateTime=0x1d2da1b, ftLastAccessTime.dwLowDateTime=0xe47a63a0, ftLastAccessTime.dwHighDateTime=0x1d2da1b, ftLastWriteTime.dwLowDateTime=0xe47a63a0, ftLastWriteTime.dwHighDateTime=0x1d2da1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0202.977] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0202.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0202.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6960) returned 1 [0202.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6a88) returned 1 Thread: id = 7130 os_tid = 0x1f70 [0202.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif")) returned 0x20 [0202.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0202.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0202.979] GetLastError () returned 0x5 [0202.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0202.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0618) returned 1 Thread: id = 7131 os_tid = 0x1f74 [0202.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif")) returned 0x20 [0204.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.653] GetLastError () returned 0x5 [0204.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db09d8) returned 1 Thread: id = 7132 os_tid = 0x1f78 [0202.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif")) returned 0x20 [0204.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.659] GetLastError () returned 0x5 [0204.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0e88) returned 1 Thread: id = 7133 os_tid = 0x1f7c [0202.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e37030 [0202.984] wcscpy (in: _Dest=0x3e37030, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0202.984] wcscat (in: _Dest=0x3e37030, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\" [0202.984] wcscat (in: _Dest=0x3e37030, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*" [0202.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x334678 [0202.984] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2de80 [0202.984] wcscmp (_String1=".", _String2=".") returned 0 [0202.984] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.984] wcscmp (_String1="..", _String2=".") returned 1 [0202.984] wcscmp (_String1="..", _String2="..") returned 0 [0202.984] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0202.984] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0202.984] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0202.984] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0618 [0202.985] wcscpy (in: _Dest=0x3db0618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0202.985] wcscat (in: _Dest=0x3db0618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\" [0202.985] wcscat (in: _Dest=0x3db0618, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" [0203.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8 [0203.058] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0203.058] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0203.058] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0203.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3fc0 [0203.058] wcscpy (in: _Dest=0x3dc3fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate" [0203.058] wcscat (in: _Dest=0x3dc3fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\" [0203.058] wcscat (in: _Dest=0x3dc3fc0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" [0203.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4c [0203.059] FindNextFileW (in: hFindFile=0x7a2de80, lpFindFileData=0x334678 | out: lpFindFileData=0x334678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285abd00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x285abd00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0203.059] FindClose (in: hFindFile=0x7a2de80 | out: hFindFile=0x7a2de80) returned 1 [0203.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x334678) returned 1 [0203.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37030) returned 1 [0203.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37540) returned 1 Thread: id = 7134 os_tid = 0x1f80 [0202.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css")) returned 0x20 [0204.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0204.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.475] GetLastError () returned 0x5 [0204.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0204.475] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9a68) returned 1 Thread: id = 7135 os_tid = 0x1f90 [0202.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css")) returned 0x20 [0204.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0204.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.683] GetLastError () returned 0x5 [0204.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0204.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4f28) returned 1 Thread: id = 7136 os_tid = 0x1fa8 [0202.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c90c8 [0202.988] wcscpy (in: _Dest=0x2c90c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0202.988] wcscat (in: _Dest=0x2c90c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0202.988] wcscat (in: _Dest=0x2c90c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*" [0202.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337430 [0202.988] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7eb0 [0204.685] wcscmp (_String1=".", _String2=".") returned 0 [0204.685] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.685] wcscmp (_String1="..", _String2=".") returned 1 [0204.685] wcscmp (_String1="..", _String2="..") returned 0 [0204.685] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0204.685] wcscmp (_String1="background.gif", _String2=".") returned 1 [0204.685] wcscmp (_String1="background.gif", _String2="..") returned 1 [0204.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadf10 [0204.686] wcscpy (in: _Dest=0x3dadf10, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0204.686] wcscat (in: _Dest=0x3dadf10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0204.686] wcscat (in: _Dest=0x3dadf10, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" [0205.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2324 [0205.128] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0205.128] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0205.128] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0205.129] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0258 [0205.129] wcscpy (in: _Dest=0x3db0258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0205.129] wcscat (in: _Dest=0x3db0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0205.129] wcscat (in: _Dest=0x3db0258, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" [0205.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c [0205.130] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0205.130] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0205.130] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0205.130] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3dafda8 [0205.130] wcscpy (in: _Dest=0x3dafda8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue" [0205.130] wcscat (in: _Dest=0x3dafda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\" [0205.130] wcscat (in: _Dest=0x3dafda8, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" [0205.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04 [0205.131] FindNextFileW (in: hFindFile=0x7ad7eb0, lpFindFileData=0x337430 | out: lpFindFileData=0x337430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0205.131] FindClose (in: hFindFile=0x7ad7eb0 | out: hFindFile=0x7ad7eb0) returned 1 [0205.131] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337430) returned 1 [0205.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c90c8) returned 1 [0205.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68648) returned 1 Thread: id = 7137 os_tid = 0x1fb0 [0202.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css")) returned 0x20 [0204.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0204.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.692] GetLastError () returned 0x5 [0204.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0204.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8648) returned 1 Thread: id = 7138 os_tid = 0x90 [0202.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4448 [0202.989] wcscpy (in: _Dest=0x3dc4448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0202.989] wcscat (in: _Dest=0x3dc4448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0202.989] wcscat (in: _Dest=0x3dc4448, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*" [0202.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335c20 [0202.989] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7830 [0204.684] wcscmp (_String1=".", _String2=".") returned 0 [0204.684] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.684] wcscmp (_String1="..", _String2=".") returned 1 [0204.684] wcscmp (_String1="..", _String2="..") returned 0 [0204.684] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0204.685] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0204.685] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0204.685] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dad468 [0204.685] wcscpy (in: _Dest=0x3dad468, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0204.685] wcscat (in: _Dest=0x3dad468, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0204.685] wcscat (in: _Dest=0x3dad468, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" [0205.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dad468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23b4 [0205.182] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.182] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.182] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae1f8 [0205.182] wcscpy (in: _Dest=0x3dae1f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0205.182] wcscat (in: _Dest=0x3dae1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0205.182] wcscat (in: _Dest=0x3dae1f8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" [0205.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8 [0205.184] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.184] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.184] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dadb30 [0205.184] wcscpy (in: _Dest=0x3dadb30, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen" [0205.184] wcscat (in: _Dest=0x3dadb30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\" [0205.184] wcscat (in: _Dest=0x3dadb30, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" [0205.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23cc [0205.185] FindNextFileW (in: hFindFile=0x7ad7830, lpFindFileData=0x335c20 | out: lpFindFileData=0x335c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.185] FindClose (in: hFindFile=0x7ad7830 | out: hFindFile=0x7ad7830) returned 1 [0205.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335c20) returned 1 [0205.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4448) returned 1 [0205.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9288) returned 1 Thread: id = 7139 os_tid = 0x730 [0202.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css")) returned 0x20 [0204.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0204.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.301] GetLastError () returned 0x5 [0204.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0204.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc51e0) returned 1 Thread: id = 7140 os_tid = 0xc54 [0202.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css")) returned 0x20 [0204.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0204.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.690] GetLastError () returned 0x5 [0204.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0204.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68a80) returned 1 Thread: id = 7141 os_tid = 0xb74 [0202.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e38a58 [0202.990] wcscpy (in: _Dest=0x3e38a58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0202.990] wcscat (in: _Dest=0x3e38a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0202.990] wcscat (in: _Dest=0x3e38a58, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*" [0202.990] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335018 [0202.990] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7cb0 [0204.686] wcscmp (_String1=".", _String2=".") returned 0 [0204.686] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88431930, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.686] wcscmp (_String1="..", _String2=".") returned 1 [0204.686] wcscmp (_String1="..", _String2="..") returned 0 [0204.686] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0204.686] wcscmp (_String1="background.gif", _String2=".") returned 1 [0204.686] wcscmp (_String1="background.gif", _String2="..") returned 1 [0204.686] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db0e88 [0204.686] wcscpy (in: _Dest=0x3db0e88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0204.687] wcscat (in: _Dest=0x3db0e88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0204.687] wcscat (in: _Dest=0x3db0e88, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" [0205.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058 [0205.133] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0205.133] wcscmp (_String1="header.gif", _String2=".") returned 1 [0205.133] wcscmp (_String1="header.gif", _String2="..") returned 1 [0205.134] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4e40 [0205.134] wcscpy (in: _Dest=0x3dc4e40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0205.134] wcscat (in: _Dest=0x3dc4e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0205.134] wcscat (in: _Dest=0x3dc4e40, _Source="header.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" [0205.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc [0205.135] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0205.135] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0205.135] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0205.135] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc3fc0 [0205.135] wcscpy (in: _Dest=0x3dc3fc0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0205.135] wcscat (in: _Dest=0x3dc3fc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0205.135] wcscat (in: _Dest=0x3dc3fc0, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" [0205.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc3fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0205.136] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0205.136] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0205.136] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0205.136] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4f28 [0205.136] wcscpy (in: _Dest=0x3dc4f28, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2" [0205.136] wcscat (in: _Dest=0x3dc4f28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\" [0205.136] wcscat (in: _Dest=0x3dc4f28, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" [0205.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108 [0205.137] FindNextFileW (in: hFindFile=0x7ad7cb0, lpFindFileData=0x335018 | out: lpFindFileData=0x335018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298bea00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77dc1fb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x298bea00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0205.137] FindClose (in: hFindFile=0x7ad7cb0 | out: hFindFile=0x7ad7cb0) returned 1 [0205.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335018) returned 1 [0205.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38a58) returned 1 [0205.138] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d84ee0) returned 1 Thread: id = 7142 os_tid = 0xb64 [0202.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css")) returned 0x20 [0204.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0204.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.688] GetLastError () returned 0x5 [0204.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0204.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e682e8) returned 1 Thread: id = 7143 os_tid = 0xb6c [0202.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e37cd8 [0202.991] wcscpy (in: _Dest=0x3e37cd8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0202.991] wcscat (in: _Dest=0x3e37cd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0202.991] wcscat (in: _Dest=0x3e37cd8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*" [0202.991] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x335e88 [0202.991] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88457a90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad8030 [0204.687] wcscmp (_String1=".", _String2=".") returned 0 [0204.687] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77dc1fb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x88457a90, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.687] wcscmp (_String1="..", _String2=".") returned 1 [0204.687] wcscmp (_String1="..", _String2="..") returned 0 [0204.687] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0204.687] wcscmp (_String1="background.gif", _String2=".") returned 1 [0204.687] wcscmp (_String1="background.gif", _String2="..") returned 1 [0204.687] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db09d8 [0204.687] wcscpy (in: _Dest=0x3db09d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0204.687] wcscat (in: _Dest=0x3db09d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0204.687] wcscat (in: _Dest=0x3db09d8, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" [0205.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db09d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8 [0205.187] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88431930, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0205.187] wcscmp (_String1="header.gif", _String2=".") returned 1 [0205.187] wcscmp (_String1="header.gif", _String2="..") returned 1 [0205.187] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4448 [0205.188] wcscpy (in: _Dest=0x3dc4448, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0205.188] wcscat (in: _Dest=0x3dc4448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0205.188] wcscat (in: _Dest=0x3dc4448, _Source="header.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" [0205.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d0 [0205.189] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x88457a90, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0205.189] wcscmp (_String1="tab_off.gif", _String2=".") returned 1 [0205.189] wcscmp (_String1="tab_off.gif", _String2="..") returned 1 [0205.189] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3dafcb8 [0205.189] wcscpy (in: _Dest=0x3dafcb8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0205.189] wcscat (in: _Dest=0x3dafcb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0205.189] wcscat (in: _Dest=0x3dafcb8, _Source="tab_off.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" [0205.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23d8 [0205.190] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0205.190] wcscmp (_String1="tab_on.gif", _String2=".") returned 1 [0205.190] wcscmp (_String1="tab_on.gif", _String2="..") returned 1 [0205.190] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4d58 [0205.190] wcscpy (in: _Dest=0x3dc4d58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl" [0205.191] wcscat (in: _Dest=0x3dc4d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\" [0205.191] wcscat (in: _Dest=0x3dc4d58, _Source="tab_on.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" [0205.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8 [0205.192] FindNextFileW (in: hFindFile=0x7ad8030, lpFindFileData=0x335e88 | out: lpFindFileData=0x335e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abd1700, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x77de8110, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x2abd1700, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0205.192] FindClose (in: hFindFile=0x7ad8030 | out: hFindFile=0x7ad8030) returned 1 [0205.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x335e88) returned 1 [0205.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37cd8) returned 1 [0205.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68b58) returned 1 Thread: id = 7144 os_tid = 0x5d4 [0202.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css")) returned 0x20 [0204.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0204.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.680] GetLastError () returned 0x5 [0204.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0204.680] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0480) returned 1 Thread: id = 7145 os_tid = 0xb0 [0202.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css")) returned 0x20 [0204.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0204.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.677] GetLastError () returned 0x5 [0204.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0204.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68c30) returned 1 Thread: id = 7146 os_tid = 0x1c4 [0202.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css")) returned 0x20 [0204.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0204.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.674] GetLastError () returned 0x5 [0204.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0204.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4d58) returned 1 Thread: id = 7147 os_tid = 0x7fc [0202.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css")) returned 0x20 [0204.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0204.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.422] GetLastError () returned 0x5 [0204.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0204.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc53b0) returned 1 Thread: id = 7148 os_tid = 0xc5c [0202.993] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json")) returned 0x2020 [0202.993] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0211.076] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1228 [0211.092] GetFileSizeEx (in: hFile=0x1228, lpFileSize=0x1516fa8c | out: lpFileSize=0x1516fa8c*=338) returned 1 [0211.092] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x14e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.092] ReadFile (in: hFile=0x1228, lpBuffer=0x1516fa68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1516fa78, lpOverlapped=0x0 | out: lpBuffer=0x1516fa68*, lpNumberOfBytesRead=0x1516fa78*=0x4, lpOverlapped=0x0) returned 1 [0211.094] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0211.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0211.095] NtQuerySystemTime (in: CurrentTime=0x1516fa00 | out: CurrentTime=0x1516fa00*=132462177896784000) returned 0x0 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0xb2f7f69 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x24b91e4b [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x5da9cc94 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x35c819b0 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x443db975 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x66022c46 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x647a917b [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x12107d28 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x26c53056 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x7d82e83e [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x4f2cf00 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x1643019e [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x6255772e [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x3026b52d [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x43ca89f5 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x3bc31bc0 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x6a0f9d4e [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x54fc969b [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0xae6f039 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x22ef2393 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x4eb2bdd4 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x14ae6681 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x47b5949f [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x18ea7c75 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x5982dca5 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x30f62d08 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x34cc7c1d [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x7d2d36be [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x554638b4 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x5b0f6ad9 [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x7efc479f [0211.095] RtlRandomEx (in: Seed=0x1516f9f8 | out: Seed=0x1516f9f8) returned 0x6f49e2a4 [0211.104] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.104] WriteFile (in: hFile=0x1228, lpBuffer=0x7b97380*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x1516f9f8, lpOverlapped=0x0 | out: lpBuffer=0x7b97380*, lpNumberOfBytesWritten=0x1516f9f8*=0x152, lpOverlapped=0x0) returned 1 [0213.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b848 [0213.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb58 [0213.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb58) returned 1 [0213.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b97380) returned 1 [0213.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0213.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c2e8) returned 1 [0213.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc7b8) returned 1 [0213.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37f20 [0213.460] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.460] WriteFile (in: hFile=0x1228, lpBuffer=0x7a38a48*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1516fa80, lpOverlapped=0x0 | out: lpBuffer=0x7a38a48*, lpNumberOfBytesWritten=0x1516fa80*=0x10c, lpOverlapped=0x0) returned 1 [0213.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c88 [0213.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c88) returned 1 [0213.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53c88 [0213.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53cd8 [0213.775] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0213.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53648) returned 1 [0213.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.776] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="0f") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="73") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="aa") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="25") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="42") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="09") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="43") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="eb") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="7e") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="c9") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="2a") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="96") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="1d") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="f9") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="f3") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="7d") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="ac") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="88") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="4b") returned 2 [0213.776] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="93") returned 2 [0213.777] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="2c") returned 2 [0213.777] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="71") returned 2 [0213.777] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="bb") returned 2 [0213.777] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="ee") returned 2 [0213.777] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="fb") returned 2 [0213.777] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="4e") returned 2 [0213.777] RtlInitAnsiString (in: DestinationString=0x1516fa08, SourceString="0f73aa25420943eb7ec92a961df9f37dac884b932c71bbeefb4e" | out: DestinationString="0f73aa25420943eb7ec92a961df9f37dac884b932c71bbeefb4e") [0213.777] RtlAnsiStringToUnicodeString (in: DestinationString=0x1516fa00, SourceString="0f73aa25420943eb7ec92a961df9f37dac884b932c71bbeefb4e", AllocateDestinationString=1 | out: DestinationString="0f73aa25420943eb7ec92a961df9f37dac884b932c71bbeefb4e") returned 0x0 [0213.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6ccc0 Thread: id = 7149 os_tid = 0xdb4 [0202.994] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json")) returned 0x2020 [0202.994] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0211.105] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xacc [0211.105] GetFileSizeEx (in: hFile=0xacc, lpFileSize=0x1522fd34 | out: lpFileSize=0x1522fd34*=268) returned 1 [0211.106] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.106] ReadFile (in: hFile=0xacc, lpBuffer=0x1522fd10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1522fd20, lpOverlapped=0x0 | out: lpBuffer=0x1522fd10*, lpNumberOfBytesRead=0x1522fd20*=0x4, lpOverlapped=0x0) returned 1 [0211.108] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53648 [0211.108] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f08 [0211.108] NtQuerySystemTime (in: CurrentTime=0x1522fca8 | out: CurrentTime=0x1522fca8*=132462177896940000) returned 0x0 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x43809fc3 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x299a271d [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x6aaf965d [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x5ad942d3 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x18263d54 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x492cd19b [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x59341f90 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x1b69b701 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x1ab54b47 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x1242f684 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x32d22656 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x281d44fc [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x3f1c2214 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x52b59290 [0211.108] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x65f6ed7f [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x14a3967 [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x7bd5eeaf [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x7a4a5b44 [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x1d474293 [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x22125f5c [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x15fd9e7a [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x3e2a0cd0 [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x3bc24c80 [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x5a9812a5 [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x590999d4 [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x1cb94ce1 [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x41ce5f26 [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x214eb01d [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x7d025dfe [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x5af08995 [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x493070ba [0211.109] RtlRandomEx (in: Seed=0x1522fca0 | out: Seed=0x1522fca0) returned 0x3b2bc312 [0211.122] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.123] WriteFile (in: hFile=0xacc, lpBuffer=0x7b8fb70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1522fca0, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesWritten=0x1522fca0*=0x10c, lpOverlapped=0x0) returned 1 [0213.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0213.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b370 [0213.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b370) returned 1 [0213.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0213.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0213.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c360) returned 1 [0213.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc800) returned 1 [0213.462] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37ec0 [0213.463] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.463] WriteFile (in: hFile=0xacc, lpBuffer=0x7a38930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1522fd28, lpOverlapped=0x0 | out: lpBuffer=0x7a38930*, lpNumberOfBytesWritten=0x1522fd28*=0x10c, lpOverlapped=0x0) returned 1 [0213.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.771] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e528b0 [0213.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e528b0) returned 1 [0213.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e528b0 [0213.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f58 [0213.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e535f8 [0213.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e535f8) returned 1 [0213.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.772] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="a3") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="c7") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="73") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="6a") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="cc") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="93") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="a1") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="8f") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="28") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="2f") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="03") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="ea") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="41") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="52") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="bf") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="e4") returned 2 [0213.772] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="21") returned 2 [0213.773] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="d5") returned 2 [0213.773] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="7a") returned 2 [0213.773] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="db") returned 2 [0213.773] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="df") returned 2 [0213.773] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="ca") returned 2 [0213.773] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="a1") returned 2 [0213.773] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="7d") returned 2 [0213.773] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="b4") returned 2 [0213.773] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="b6") returned 2 [0213.773] RtlInitAnsiString (in: DestinationString=0x1522fcb0, SourceString="a3c7736acc93a18f282f03ea4152bfe421d57adbdfcaa17db4b6" | out: DestinationString="a3c7736acc93a18f282f03ea4152bfe421d57adbdfcaa17db4b6") [0213.773] RtlAnsiStringToUnicodeString (in: DestinationString=0x1522fca8, SourceString="a3c7736acc93a18f282f03ea4152bfe421d57adbdfcaa17db4b6", AllocateDestinationString=1 | out: DestinationString="a3c7736acc93a18f282f03ea4152bfe421d57adbdfcaa17db4b6") returned 0x0 [0213.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c450 Thread: id = 7150 os_tid = 0xdb8 [0202.995] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json")) returned 0x2020 [0202.995] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0211.124] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2408 [0211.124] GetFileSizeEx (in: hFile=0x2408, lpFileSize=0x1529fd14 | out: lpFileSize=0x1529fd14*=253) returned 1 [0211.124] SetFilePointerEx (in: hFile=0x2408, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.125] ReadFile (in: hFile=0x2408, lpBuffer=0x1529fcf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1529fd00, lpOverlapped=0x0 | out: lpBuffer=0x1529fcf0*, lpNumberOfBytesRead=0x1529fd00*=0x4, lpOverlapped=0x0) returned 1 [0211.126] SetFilePointerEx (in: hFile=0x2408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f08 [0211.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0211.127] NtQuerySystemTime (in: CurrentTime=0x1529fc88 | out: CurrentTime=0x1529fc88*=132462177897096000) returned 0x0 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x3e8dd31b [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x2cce102c [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x6d394db0 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x54a34cc7 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x5252ee3f [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x2796e904 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x36fefab0 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x5e9ceec [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x550ef47c [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x7f6e4f33 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x57d29383 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x30f58c88 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x364f39b [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x5a2aeb84 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x56ec4877 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x785c7d94 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0xdf6c62 [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x3d532ecf [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x4757ab9d [0211.127] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x23d1aa98 [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x79f44f18 [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x7a7fc5ab [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x9b6319e [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x321237e8 [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0xde4c9d3 [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x3a55c797 [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x53c40c6b [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x1f40b4c2 [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0xc4a7b0 [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x722c3563 [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x63d68d2 [0211.128] RtlRandomEx (in: Seed=0x1529fc80 | out: Seed=0x1529fc80) returned 0x58da921f [0211.137] SetFilePointerEx (in: hFile=0x2408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.137] WriteFile (in: hFile=0x2408, lpBuffer=0x7d93fa8*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x1529fc80, lpOverlapped=0x0 | out: lpBuffer=0x7d93fa8*, lpNumberOfBytesWritten=0x1529fc80*=0xfd, lpOverlapped=0x0) returned 1 [0213.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0213.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ccc0 [0213.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ccc0) returned 1 [0213.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d93fa8) returned 1 [0213.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d903a0) returned 1 [0213.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c9f0) returned 1 [0213.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbce30) returned 1 [0213.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a380a0 [0213.465] SetFilePointerEx (in: hFile=0x2408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.465] WriteFile (in: hFile=0x2408, lpBuffer=0x7a385e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1529fd08, lpOverlapped=0x0 | out: lpBuffer=0x7a385e8*, lpNumberOfBytesWritten=0x1529fd08*=0x10c, lpOverlapped=0x0) returned 1 [0213.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52450 [0213.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52450) returned 1 [0213.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e52450 [0213.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53440 [0213.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e534b8 [0213.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e534b8) returned 1 [0213.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.780] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="09") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="23") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="9a") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="0e") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="17") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="7c") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="7f") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="51") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="fa") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="a7") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="53") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="40") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="cc") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="1a") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="46") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="01") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="a7") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="18") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="9d") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="e1") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="b0") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="c3") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="70") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="c1") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="91") returned 2 [0213.780] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="55") returned 2 [0213.781] RtlInitAnsiString (in: DestinationString=0x1529fc90, SourceString="09239a0e177c7f51faa75340cc1a4601a7189de1b0c370c19155" | out: DestinationString="09239a0e177c7f51faa75340cc1a4601a7189de1b0c370c19155") [0213.781] RtlAnsiStringToUnicodeString (in: DestinationString=0x1529fc88, SourceString="09239a0e177c7f51faa75340cc1a4601a7189de1b0c370c19155", AllocateDestinationString=1 | out: DestinationString="09239a0e177c7f51faa75340cc1a4601a7189de1b0c370c19155") returned 0x0 [0213.781] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cea0 Thread: id = 7151 os_tid = 0x6a4 [0202.996] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json")) returned 0x2020 [0202.996] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0211.138] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19a4 [0211.138] GetFileSizeEx (in: hFile=0x19a4, lpFileSize=0x14f6ff1c | out: lpFileSize=0x14f6ff1c*=287) returned 1 [0211.139] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x11b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.139] ReadFile (in: hFile=0x19a4, lpBuffer=0x14f6fef8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x14f6ff08, lpOverlapped=0x0 | out: lpBuffer=0x14f6fef8*, lpNumberOfBytesRead=0x14f6ff08*=0x4, lpOverlapped=0x0) returned 1 [0211.140] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53918 [0211.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53468 [0211.141] NtQuerySystemTime (in: CurrentTime=0x14f6fe90 | out: CurrentTime=0x14f6fe90*=132462177897252000) returned 0x0 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x5fe65008 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x42ce73af [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x4c569ebb [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x41badeb5 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x555becb6 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x3ad732f1 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x1e229f54 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x8579b2c [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x344b8ea8 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x2b7f32c6 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x5e3a50df [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x26ed71c3 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x28779db5 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x37639d76 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x2d383bd9 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x68ac35f5 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x2cb9bf74 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x31c4dd45 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x51f88954 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x3ac21ab1 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x27368d7f [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x6cc95f27 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x355803e6 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x1eeeae40 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x53b9ebee [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x17daf275 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x2eb80ec6 [0211.141] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x2fee4d8a [0211.142] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x5f3d388e [0211.142] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x52aff7ec [0211.142] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x4483ff2a [0211.142] RtlRandomEx (in: Seed=0x14f6fe88 | out: Seed=0x14f6fe88) returned 0x14020ef6 [0211.151] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.151] WriteFile (in: hFile=0x19a4, lpBuffer=0x7d9b7b8*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x14f6fe88, lpOverlapped=0x0 | out: lpBuffer=0x7d9b7b8*, lpNumberOfBytesWritten=0x14f6fe88*=0x11f, lpOverlapped=0x0) returned 1 [0213.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0213.466] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0213.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c400) returned 1 [0213.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d9b7b8) returned 1 [0213.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d97bb0) returned 1 [0213.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c180) returned 1 [0213.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbd610) returned 1 [0213.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38460 [0213.467] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.467] WriteFile (in: hFile=0x19a4, lpBuffer=0x7a391f0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x14f6ff10, lpOverlapped=0x0 | out: lpBuffer=0x7a391f0*, lpNumberOfBytesWritten=0x14f6ff10*=0x10c, lpOverlapped=0x0) returned 1 [0213.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbcb18 [0213.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c090 [0213.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e538c8 [0213.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e538c8) returned 1 [0213.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e538c8 [0213.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c38 [0213.783] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f08 [0213.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53f08) returned 1 [0213.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0213.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbcb18) returned 1 [0213.784] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0213.784] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="80") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="8f") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="8a") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="75") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="76") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="49") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="b0") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="64") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="f9") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="87") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="7e") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="0b") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="78") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="91") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="ce") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="70") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="38") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="86") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="ce") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="da") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="c1") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="c5") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="6d") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="bd") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="95") returned 2 [0213.784] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="80") returned 2 [0213.785] RtlInitAnsiString (in: DestinationString=0x14f6fe98, SourceString="808f8a757649b064f9877e0b7891ce703886cedac1c56dbd9580" | out: DestinationString="808f8a757649b064f9877e0b7891ce703886cedac1c56dbd9580") [0213.785] RtlAnsiStringToUnicodeString (in: DestinationString=0x14f6fe90, SourceString="808f8a757649b064f9877e0b7891ce703886cedac1c56dbd9580", AllocateDestinationString=1 | out: DestinationString="808f8a757649b064f9877e0b7891ce703886cedac1c56dbd9580") returned 0x0 [0213.785] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e1c0 Thread: id = 7152 os_tid = 0x224 [0202.997] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json")) returned 0x2020 [0203.249] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", dwFileAttributes=0x20) returned 1 [0213.059] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc30 [0213.060] GetFileSizeEx (in: hFile=0xc30, lpFileSize=0x1532fd8c | out: lpFileSize=0x1532fd8c*=269) returned 1 [0213.060] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.060] ReadFile (in: hFile=0xc30, lpBuffer=0x1532fd68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1532fd78, lpOverlapped=0x0 | out: lpBuffer=0x1532fd68*, lpNumberOfBytesRead=0x1532fd78*=0x4, lpOverlapped=0x0) returned 1 [0213.062] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54020 [0213.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54098 [0213.062] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b58 [0213.062] NtQuerySystemTime (in: CurrentTime=0x1532fd00 | out: CurrentTime=0x1532fd00*=132462177916440000) returned 0x0 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x76936c2e [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x55f53f88 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x60d8d8ca [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x6816883e [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x45aea6bd [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x38be3c28 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x4a646cf5 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x4d0e0cd8 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x525b7293 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x13711922 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x6ea01916 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x5ae71ca7 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x66819e61 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0xc6855f0 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x30835793 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x59d4a8f3 [0213.062] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x7fc7975f [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x197f8b0f [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x61ee793b [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x7b5657f0 [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x7cd7853e [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x1a037974 [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x1a4eb5b [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x458244cc [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x1d3b7990 [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x5cb4178b [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x38fc4e98 [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x2bf66ec4 [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x32d54cd3 [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x31c75146 [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x17e8701b [0213.063] RtlRandomEx (in: Seed=0x1532fcf8 | out: Seed=0x1532fcf8) returned 0x6427e16 [0213.071] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.072] WriteFile (in: hFile=0xc30, lpBuffer=0x7bbcbd0*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x1532fcf8, lpOverlapped=0x0 | out: lpBuffer=0x7bbcbd0*, lpNumberOfBytesWritten=0x1532fcf8*=0x10d, lpOverlapped=0x0) returned 1 [0220.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0220.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec29d0 [0220.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec29d0) returned 1 [0220.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bbcbd0) returned 1 [0220.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7bb8fc8) returned 1 [0220.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c720) returned 1 [0220.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84878) returned 1 [0220.103] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86cf8 [0220.103] SetFilePointerEx (in: hFile=0xc30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.103] WriteFile (in: hFile=0xc30, lpBuffer=0x7cd3da8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1532fd80, lpOverlapped=0x0 | out: lpBuffer=0x7cd3da8*, lpNumberOfBytesWritten=0x1532fd80*=0x10c, lpOverlapped=0x0) returned 1 [0222.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85b30 [0222.941] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0222.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4988 [0222.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4988) returned 1 [0222.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec4988 [0222.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3b50 [0222.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0222.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2958) returned 1 [0222.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0222.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b30) returned 1 [0222.942] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0222.942] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="ca") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="b9") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="91") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="b1") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="8d") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="2b") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="4c") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="b7") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="9e") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="a8") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="b3") returned 2 [0222.942] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="84") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="e7") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="19") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="8d") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="2e") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="e7") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="00") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="6f") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="12") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="cc") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="c4") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="12") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="ac") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="98") returned 2 [0222.943] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="f4") returned 2 [0222.943] RtlInitAnsiString (in: DestinationString=0x1532fd08, SourceString="cab991b18d2b4cb79ea8b384e7198d2ee7006f12ccc412ac98f4" | out: DestinationString="cab991b18d2b4cb79ea8b384e7198d2ee7006f12ccc412ac98f4") [0222.943] RtlAnsiStringToUnicodeString (in: DestinationString=0x1532fd00, SourceString="cab991b18d2b4cb79ea8b384e7198d2ee7006f12ccc412ac98f4", AllocateDestinationString=1 | out: DestinationString="cab991b18d2b4cb79ea8b384e7198d2ee7006f12ccc412ac98f4") returned 0x0 [0222.943] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a231d0 [0224.176] CloseHandle (hObject=0x2250) returned 1 [0224.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3ab8) returned 1 [0224.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82320) returned 1 Thread: id = 7153 os_tid = 0x998 [0202.998] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json")) returned 0x2020 [0204.387] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", dwFileAttributes=0x20) returned 1 [0215.162] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf70 [0215.162] GetFileSizeEx (in: hFile=0xf70, lpFileSize=0x14fcfb3c | out: lpFileSize=0x14fcfb3c*=254) returned 1 [0215.162] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0xfa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.163] ReadFile (in: hFile=0xf70, lpBuffer=0x14fcfb18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x14fcfb28, lpOverlapped=0x0 | out: lpBuffer=0x14fcfb18*, lpNumberOfBytesRead=0x14fcfb28*=0x4, lpOverlapped=0x0) returned 1 [0215.164] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0215.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0215.164] NtQuerySystemTime (in: CurrentTime=0x14fcfab0 | out: CurrentTime=0x14fcfab0*=132462177937500000) returned 0x0 [0215.164] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x314ec865 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x43ac7fc1 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x211e96a3 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x5b3bf1ed [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x1aac9bbe [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x606a8f1 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x451fd9dc [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x178e510f [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x1b2d88c9 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x24526f68 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x15c8fd0d [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x67f70c8 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x59fd0142 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x41227dd5 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x6ab6aa9b [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x5350c0e8 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x53c3b2dc [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x5f9cb90c [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x2a72a959 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x1d08d398 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x7c4fbf1a [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0xee586dc [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x448df6e6 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x5a9abeba [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x648257ea [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x759e4bd [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x501e9b33 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x11163f8b [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x3ddf0428 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x3dbd0543 [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x263d100c [0215.165] RtlRandomEx (in: Seed=0x14fcfaa8 | out: Seed=0x14fcfaa8) returned 0x164376e5 [0215.173] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.173] WriteFile (in: hFile=0xf70, lpBuffer=0x7c4eb90*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x14fcfaa8, lpOverlapped=0x0 | out: lpBuffer=0x7c4eb90*, lpNumberOfBytesWritten=0x14fcfaa8*=0xfe, lpOverlapped=0x0) returned 1 [0217.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b690 [0217.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b820 [0217.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b820) returned 1 [0217.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c4eb90) returned 1 [0217.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c4af88) returned 1 [0217.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c5b8) returned 1 [0217.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49a88) returned 1 [0217.888] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86608 [0217.889] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.889] WriteFile (in: hFile=0xf70, lpBuffer=0x7cd3088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x14fcfb30, lpOverlapped=0x0 | out: lpBuffer=0x7cd3088*, lpNumberOfBytesWritten=0x14fcfb30*=0x10c, lpOverlapped=0x0) returned 1 [0220.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb81d0 [0220.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b978 [0220.724] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2cc8 [0220.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2cc8) returned 1 [0220.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2cc8 [0220.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0220.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0220.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec37e0) returned 1 [0220.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0220.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb81d0) returned 1 [0220.725] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0220.725] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="b2") returned 2 [0220.725] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="69") returned 2 [0220.725] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="f0") returned 2 [0220.725] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="a5") returned 2 [0220.725] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="6d") returned 2 [0220.725] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="bc") returned 2 [0220.725] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="01") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="d6") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="a7") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="53") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="5b") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="fd") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="79") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="84") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="92") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="8d") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="72") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="72") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="db") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="7c") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="96") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="95") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="db") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="b4") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="c2") returned 2 [0220.726] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="67") returned 2 [0220.726] RtlInitAnsiString (in: DestinationString=0x14fcfab8, SourceString="b269f0a56dbc01d6a7535bfd7984928d7272db7c9695dbb4c267" | out: DestinationString="b269f0a56dbc01d6a7535bfd7984928d7272db7c9695dbb4c267") [0220.726] RtlAnsiStringToUnicodeString (in: DestinationString=0x14fcfab0, SourceString="b269f0a56dbc01d6a7535bfd7984928d7272db7c9695dbb4c267", AllocateDestinationString=1 | out: DestinationString="b269f0a56dbc01d6a7535bfd7984928d7272db7c9695dbb4c267") returned 0x0 [0220.727] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3b018 [0224.143] CloseHandle (hObject=0x2250) returned 1 [0224.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7848) returned 1 [0224.144] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83918) returned 1 Thread: id = 7154 os_tid = 0x9a8 [0202.998] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json")) returned 0x2020 [0203.930] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", dwFileAttributes=0x20) returned 1 [0215.507] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b88 [0215.508] GetFileSizeEx (in: hFile=0x1b88, lpFileSize=0x1493f784 | out: lpFileSize=0x1493f784*=336) returned 1 [0215.508] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x14c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.508] ReadFile (in: hFile=0x1b88, lpBuffer=0x1493f760, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1493f770, lpOverlapped=0x0 | out: lpBuffer=0x1493f760*, lpNumberOfBytesRead=0x1493f770*=0x4, lpOverlapped=0x0) returned 1 [0215.510] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0215.510] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3510 [0215.510] NtQuerySystemTime (in: CurrentTime=0x1493f6f8 | out: CurrentTime=0x1493f6f8*=132462177940932000) returned 0x0 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x2e563f04 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x39e89419 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x505d4397 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x633d4080 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x5e8823c2 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x19ddda63 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x57997789 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x55dc0389 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x34db2c0 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x3fb302a2 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x380b401e [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x7f92c5bd [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x66951be9 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x68f5e05c [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x4f4757c8 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x2b232b1d [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x25c7661f [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x14165517 [0215.510] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x3d9a7d97 [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x7ba98d4b [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x7a0fa92b [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x78f9ea1b [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x584ca4d5 [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x5ed333e5 [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x5d6e8710 [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x6922d9dc [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x5e1303b5 [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x67343239 [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x1a03dadd [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x133c0889 [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0x55b69724 [0215.511] RtlRandomEx (in: Seed=0x1493f6f0 | out: Seed=0x1493f6f0) returned 0xc9097c0 [0215.519] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.519] WriteFile (in: hFile=0x1b88, lpBuffer=0x10e3d0c0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x1493f6f0, lpOverlapped=0x0 | out: lpBuffer=0x10e3d0c0*, lpNumberOfBytesWritten=0x1493f6f0*=0x150, lpOverlapped=0x0) returned 1 [0218.106] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31c8 [0218.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2a48 [0218.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2a48) returned 1 [0218.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e3d0c0) returned 1 [0218.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e394b8) returned 1 [0218.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b018) returned 1 [0218.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9fa0) returned 1 [0218.107] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x30acd28 [0218.107] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.107] WriteFile (in: hFile=0x1b88, lpBuffer=0x7cba9f8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1493f778, lpOverlapped=0x0 | out: lpBuffer=0x7cba9f8*, lpNumberOfBytesWritten=0x1493f778*=0x10c, lpOverlapped=0x0) returned 1 [0218.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5ef0 [0218.458] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5ef0) returned 1 [0218.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec5ef0 [0218.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fd8 [0218.458] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec32e0 [0218.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec32e0) returned 1 [0218.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.459] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.459] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="f4") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="b4") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="3b") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="b8") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="9d") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="2c") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="9b") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="56") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="c8") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="0a") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="79") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="fb") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="60") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="29") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.459] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="e7") returned 2 [0218.460] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.460] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="a2") returned 2 [0218.460] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="17") returned 2 [0218.460] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="ae") returned 2 [0218.460] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="1d") returned 2 [0218.460] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="53") returned 2 [0218.460] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="24") returned 2 [0218.460] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="fc") returned 2 [0218.460] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="3a") returned 2 [0218.460] RtlInitAnsiString (in: DestinationString=0x1493f700, SourceString="f4b43bb89d2c9b56c80a79fb6029e62de72fa217ae1d5324fc3a" | out: DestinationString="f4b43bb89d2c9b56c80a79fb6029e62de72fa217ae1d5324fc3a") [0218.460] RtlAnsiStringToUnicodeString (in: DestinationString=0x1493f6f8, SourceString="f4b43bb89d2c9b56c80a79fb6029e62de72fa217ae1d5324fc3a", AllocateDestinationString=1 | out: DestinationString="f4b43bb89d2c9b56c80a79fb6029e62de72fa217ae1d5324fc3a") returned 0x0 [0218.460] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e7d8 [0224.258] CloseHandle (hObject=0x2250) returned 1 [0224.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb32a0) returned 1 [0224.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83c90) returned 1 Thread: id = 7155 os_tid = 0x9b8 [0202.998] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json")) returned 0x2020 [0203.931] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0215.568] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x22d4 [0215.569] GetFileSizeEx (in: hFile=0x22d4, lpFileSize=0x152efb7c | out: lpFileSize=0x152efb7c*=260) returned 1 [0215.569] SetFilePointerEx (in: hFile=0x22d4, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.569] ReadFile (in: hFile=0x22d4, lpBuffer=0x152efb58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x152efb68, lpOverlapped=0x0 | out: lpBuffer=0x152efb58*, lpNumberOfBytesRead=0x152efb68*=0x4, lpOverlapped=0x0) returned 1 [0215.577] SetFilePointerEx (in: hFile=0x22d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3038 [0215.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0215.577] NtQuerySystemTime (in: CurrentTime=0x152efaf0 | out: CurrentTime=0x152efaf0*=132462177941556000) returned 0x0 [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x4314b71f [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0xf722b77 [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x4eee821b [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x18d470ba [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x57fad190 [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x558ff8b2 [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x44cd991c [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x569d057 [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x31104839 [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x3856e7af [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x2709889a [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x65dcaeef [0215.577] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x299012b4 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x4dfa733e [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x411012ac [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x7ebbcfd1 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x4d24377e [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x4e06f59c [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x3bc5e814 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x25d59c06 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x1a57b035 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x6e750150 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x3fe2f528 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x9e3b56e [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x5857a650 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x137418dd [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x4dcf9a7e [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x7ae1868 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x3974c47e [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x5a6d7c12 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x6cdeafa2 [0215.578] RtlRandomEx (in: Seed=0x152efae8 | out: Seed=0x152efae8) returned 0x6e3a8096 [0215.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d17bb0 [0215.587] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d1b7b8 [0215.587] ReadFile (in: hFile=0x22d4, lpBuffer=0x7d17bb0, nNumberOfBytesToRead=0x104, lpNumberOfBytesRead=0x152efae4, lpOverlapped=0x0 | out: lpBuffer=0x7d17bb0*, lpNumberOfBytesRead=0x152efae4*=0x104, lpOverlapped=0x0) returned 1 [0215.587] SetFilePointerEx (in: hFile=0x22d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.587] WriteFile (in: hFile=0x22d4, lpBuffer=0x7d1b7b8*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x152efae8, lpOverlapped=0x0 | out: lpBuffer=0x7d1b7b8*, lpNumberOfBytesWritten=0x152efae8*=0x104, lpOverlapped=0x0) returned 1 [0218.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38d0 [0218.119] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4438 [0218.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4438) returned 1 [0218.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d1b7b8) returned 1 [0218.119] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d17bb0) returned 1 [0218.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e069e0) returned 1 [0218.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ad8) returned 1 [0218.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3dc2f78 [0218.120] SetFilePointerEx (in: hFile=0x22d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.120] WriteFile (in: hFile=0x22d4, lpBuffer=0x7cbad40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x152efb70, lpOverlapped=0x0 | out: lpBuffer=0x7cbad40*, lpNumberOfBytesWritten=0x152efb70*=0x10c, lpOverlapped=0x0) returned 1 [0218.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.463] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ef8 [0218.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ef8) returned 1 [0218.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2ef8 [0218.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4528 [0218.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0218.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec28b8) returned 1 [0218.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.464] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.464] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="4a") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="cc") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="b3") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="f1") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="e8") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="71") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="48") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="e7") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="93") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="28") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="dc") returned 2 [0218.464] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="5b") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="a5") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="41") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="ea") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="6e") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="ac") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="1a") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="1e") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="27") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="f6") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="73") returned 2 [0218.465] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="e5") returned 2 [0218.465] RtlInitAnsiString (in: DestinationString=0x152efaf8, SourceString="4accb3f1e87148e793287fdc5ba541ea6eac3e1a1e27f63e73e5" | out: DestinationString="4accb3f1e87148e793287fdc5ba541ea6eac3e1a1e27f63e73e5") [0218.465] RtlAnsiStringToUnicodeString (in: DestinationString=0x152efaf0, SourceString="4accb3f1e87148e793287fdc5ba541ea6eac3e1a1e27f63e73e5", AllocateDestinationString=1 | out: DestinationString="4accb3f1e87148e793287fdc5ba541ea6eac3e1a1e27f63e73e5") returned 0x0 [0218.465] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e1c0 [0224.358] CloseHandle (hObject=0x2250) returned 1 [0224.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3d08) returned 1 [0224.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83b68) returned 1 Thread: id = 7156 os_tid = 0x51c [0202.999] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json")) returned 0x2020 [0203.932] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0215.587] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1f90 [0215.588] GetFileSizeEx (in: hFile=0x1f90, lpFileSize=0xc40f8d4 | out: lpFileSize=0xc40f8d4*=190) returned 1 [0215.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec37e0 [0215.588] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0215.588] NtQuerySystemTime (in: CurrentTime=0xc40f848 | out: CurrentTime=0xc40f848*=132462177941712000) returned 0x0 [0215.588] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x785983ec [0215.588] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x21d64037 [0215.588] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x3353e1c6 [0215.588] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x439136cd [0215.588] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0xe600e92 [0215.588] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x7d3ef97d [0215.588] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x66e9b5d4 [0215.588] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x5b4e9315 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x5b3e4b3d [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0xd6d9ddd [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x7cbaeb5 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x69f8f163 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x1b387a95 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x474b4d34 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x407babdb [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x18f85bb1 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x500281a [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x321457a9 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x21667796 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x567bb2e7 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x39be631 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x71cd2de3 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x1d6e853a [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x556d950f [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x7cb49211 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x502486b4 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x2aff2141 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x159eb56d [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x73adb708 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x2679bde3 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x389c6f89 [0215.589] RtlRandomEx (in: Seed=0xc40f840 | out: Seed=0xc40f840) returned 0x2527c581 [0215.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d1f3c0 [0215.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d22fc8 [0215.598] ReadFile (in: hFile=0x1f90, lpBuffer=0x7d1f3c0, nNumberOfBytesToRead=0xbe, lpNumberOfBytesRead=0xc40f83c, lpOverlapped=0x0 | out: lpBuffer=0x7d1f3c0*, lpNumberOfBytesRead=0xc40f83c*=0xbe, lpOverlapped=0x0) returned 1 [0215.599] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.600] WriteFile (in: hFile=0x1f90, lpBuffer=0x7d22fc8*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0xc40f840, lpOverlapped=0x0 | out: lpBuffer=0x7d22fc8*, lpNumberOfBytesWritten=0xc40f840*=0xbe, lpOverlapped=0x0) returned 1 [0218.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3650 [0218.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4050 [0218.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4050) returned 1 [0218.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d22fc8) returned 1 [0218.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d1f3c0) returned 1 [0218.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0218.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9ec8) returned 1 [0218.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38500 [0218.127] SetFilePointerEx (in: hFile=0x1f90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.127] WriteFile (in: hFile=0x1f90, lpBuffer=0x7cbb088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xc40f8c8, lpOverlapped=0x0 | out: lpBuffer=0x7cbb088*, lpNumberOfBytesWritten=0xc40f8c8*=0x10c, lpOverlapped=0x0) returned 1 [0220.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb81d0 [0220.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e3b978 [0220.579] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bfa0 [0220.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bfa0) returned 1 [0220.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bfa0 [0220.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c400 [0220.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc20 [0220.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc20) returned 1 [0220.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0220.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb81d0) returned 1 [0220.580] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0220.580] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="98") returned 2 [0220.580] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="6c") returned 2 [0220.580] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="66") returned 2 [0220.580] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="08") returned 2 [0220.580] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="75") returned 2 [0220.580] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="9c") returned 2 [0220.580] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="45") returned 2 [0220.580] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="46") returned 2 [0220.580] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="7c") returned 2 [0220.580] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="de") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="1c") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="70") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="c8") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="a9") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="91") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="6e") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="fc") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="25") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="c2") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="ea") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="b0") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="dc") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="f2") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="4c") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="ee") returned 2 [0220.581] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="f2") returned 2 [0220.581] RtlInitAnsiString (in: DestinationString=0xc40f850, SourceString="986c6608759c45467cde1c70c8a9916efc25c2eab0dcf24ceef2" | out: DestinationString="986c6608759c45467cde1c70c8a9916efc25c2eab0dcf24ceef2") [0220.581] RtlAnsiStringToUnicodeString (in: DestinationString=0xc40f848, SourceString="986c6608759c45467cde1c70c8a9916efc25c2eab0dcf24ceef2", AllocateDestinationString=1 | out: DestinationString="986c6608759c45467cde1c70c8a9916efc25c2eab0dcf24ceef2") returned 0x0 [0220.581] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3e3bb58 [0224.897] __SEH_epilog4 () [0224.897] CloseHandle (hObject=0xee0) returned 1 [0224.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec8188) returned 1 [0224.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b83a40) returned 1 Thread: id = 7157 os_tid = 0x277c [0202.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x20 [0204.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF", dwFileAttributes=0x20) returned 0 [0204.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.873] GetLastError () returned 0x5 [0204.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF", dwFileAttributes=0x20) returned 0 [0204.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68e60) returned 1 Thread: id = 7158 os_tid = 0x2798 [0202.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x20 [0204.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF", dwFileAttributes=0x20) returned 0 [0204.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.871] GetLastError () returned 0x5 [0204.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF", dwFileAttributes=0x20) returned 0 [0204.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ba8) returned 1 Thread: id = 7159 os_tid = 0x279c [0203.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x20 [0204.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF", dwFileAttributes=0x20) returned 0 [0204.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.869] GetLastError () returned 0x5 [0204.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF", dwFileAttributes=0x20) returned 0 [0204.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9c48) returned 1 Thread: id = 7160 os_tid = 0x1914 [0203.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x20 [0204.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF", dwFileAttributes=0x20) returned 0 [0204.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.868] GetLastError () returned 0x5 [0204.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF", dwFileAttributes=0x20) returned 0 [0204.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 7161 os_tid = 0x2330 [0203.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x20 [0204.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF", dwFileAttributes=0x20) returned 0 [0204.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.866] GetLastError () returned 0x5 [0204.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF", dwFileAttributes=0x20) returned 0 [0204.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 7162 os_tid = 0x8ec [0203.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x20 [0204.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF", dwFileAttributes=0x20) returned 0 [0204.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.864] GetLastError () returned 0x5 [0204.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF", dwFileAttributes=0x20) returned 0 [0204.864] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 7163 os_tid = 0x1bfc [0203.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x20 [0204.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF", dwFileAttributes=0x20) returned 0 [0204.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.894] GetLastError () returned 0x5 [0204.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF", dwFileAttributes=0x20) returned 0 [0204.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 7164 os_tid = 0x1c18 [0203.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x20 [0204.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF", dwFileAttributes=0x20) returned 0 [0204.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.893] GetLastError () returned 0x5 [0204.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF", dwFileAttributes=0x20) returned 0 [0204.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 7165 os_tid = 0x2348 [0203.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x20 [0204.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF", dwFileAttributes=0x20) returned 0 [0204.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.883] GetLastError () returned 0x5 [0204.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF", dwFileAttributes=0x20) returned 0 [0204.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 7166 os_tid = 0x234c [0203.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x20 [0204.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF", dwFileAttributes=0x20) returned 0 [0204.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.891] GetLastError () returned 0x5 [0204.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF", dwFileAttributes=0x20) returned 0 [0204.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 7167 os_tid = 0x2350 [0203.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x20 [0204.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF", dwFileAttributes=0x20) returned 0 [0204.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.880] GetLastError () returned 0x5 [0204.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF", dwFileAttributes=0x20) returned 0 [0204.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 7168 os_tid = 0x2354 [0203.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x20 [0204.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF", dwFileAttributes=0x20) returned 0 [0204.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.878] GetLastError () returned 0x5 [0204.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF", dwFileAttributes=0x20) returned 0 [0204.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 7169 os_tid = 0x2358 [0203.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x20 [0204.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF", dwFileAttributes=0x20) returned 0 [0204.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.877] GetLastError () returned 0x5 [0204.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF", dwFileAttributes=0x20) returned 0 [0204.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 7170 os_tid = 0x235c [0203.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x20 [0204.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF", dwFileAttributes=0x20) returned 0 [0204.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.889] GetLastError () returned 0x5 [0204.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF", dwFileAttributes=0x20) returned 0 [0204.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 7171 os_tid = 0x2360 [0203.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x20 [0204.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF", dwFileAttributes=0x20) returned 0 [0204.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.420] GetLastError () returned 0x5 [0204.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF", dwFileAttributes=0x20) returned 0 [0204.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 7172 os_tid = 0x2364 [0203.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x20 [0204.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF", dwFileAttributes=0x20) returned 0 [0204.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.900] GetLastError () returned 0x5 [0204.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF", dwFileAttributes=0x20) returned 0 [0204.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 7173 os_tid = 0x2368 [0203.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x20 [0204.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF", dwFileAttributes=0x20) returned 0 [0204.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.888] GetLastError () returned 0x5 [0204.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF", dwFileAttributes=0x20) returned 0 [0204.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 7174 os_tid = 0x236c [0203.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x20 [0204.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF", dwFileAttributes=0x20) returned 0 [0204.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.886] GetLastError () returned 0x5 [0204.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF", dwFileAttributes=0x20) returned 0 [0204.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 7175 os_tid = 0x2370 [0203.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x20 [0204.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF", dwFileAttributes=0x20) returned 0 [0204.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.885] GetLastError () returned 0x5 [0204.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF", dwFileAttributes=0x20) returned 0 [0204.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 7176 os_tid = 0x2374 [0203.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x20 [0204.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF", dwFileAttributes=0x20) returned 0 [0204.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.898] GetLastError () returned 0x5 [0204.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF", dwFileAttributes=0x20) returned 0 [0204.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 7177 os_tid = 0x2378 [0203.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x20 [0204.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF", dwFileAttributes=0x20) returned 0 [0204.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.896] GetLastError () returned 0x5 [0204.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF", dwFileAttributes=0x20) returned 0 [0204.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 7178 os_tid = 0x237c [0203.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x20 [0204.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF", dwFileAttributes=0x20) returned 0 [0204.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.875] GetLastError () returned 0x5 [0204.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF", dwFileAttributes=0x20) returned 0 [0204.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 7179 os_tid = 0x2380 [0203.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif")) returned 0x20 [0204.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.446] GetLastError () returned 0x5 [0204.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.446] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4618) returned 1 Thread: id = 7180 os_tid = 0x2384 [0203.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif")) returned 0x20 [0204.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.453] GetLastError () returned 0x5 [0204.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.453] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafe98) returned 1 Thread: id = 7181 os_tid = 0x2388 [0203.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif")) returned 0x20 [0204.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.460] GetLastError () returned 0x5 [0204.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3d08) returned 1 Thread: id = 7182 os_tid = 0x2390 [0203.009] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0203.009] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0211.152] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\6.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1998 [0211.153] GetFileSizeEx (in: hFile=0x1998, lpFileSize=0x15a4fe2c | out: lpFileSize=0x15a4fe2c*=267) returned 1 [0211.153] SetFilePointerEx (in: hFile=0x1998, liDistanceToMove=0x107, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.153] ReadFile (in: hFile=0x1998, lpBuffer=0x15a4fe08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x15a4fe18, lpOverlapped=0x0 | out: lpBuffer=0x15a4fe08*, lpNumberOfBytesRead=0x15a4fe18*=0x4, lpOverlapped=0x0) returned 1 [0211.159] SetFilePointerEx (in: hFile=0x1998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54070 [0211.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53468 [0211.159] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a08 [0211.159] NtQuerySystemTime (in: CurrentTime=0x15a4fda0 | out: CurrentTime=0x15a4fda0*=132462177897408000) returned 0x0 [0211.159] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x2d9439fe [0211.159] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0xc1c3a65 [0211.159] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x1f52be80 [0211.159] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x145001af [0211.159] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x3c8657d0 [0211.159] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x88b1857 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x7438b42f [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x434e0008 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x710e6dd1 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x5f7d4f0e [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x15652461 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x227bf980 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x5859728b [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x6e93be [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x57133234 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x2870e3 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x4af53764 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x6d93eec9 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x4c480c3b [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x28fb706f [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x500ad22d [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x66c594ea [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x3edf1c56 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x2f9969e7 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x5134fcc7 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x1d140559 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x24e7ca53 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x462299b2 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x4b993592 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x499f45b2 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x1ac53006 [0211.160] RtlRandomEx (in: Seed=0x15a4fd98 | out: Seed=0x15a4fd98) returned 0x7d280fcd [0211.169] SetFilePointerEx (in: hFile=0x1998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.169] WriteFile (in: hFile=0x1998, lpBuffer=0x7da2fc8*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x15a4fd98, lpOverlapped=0x0 | out: lpBuffer=0x7da2fc8*, lpNumberOfBytesWritten=0x15a4fd98*=0x10b, lpOverlapped=0x0) returned 1 [0215.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a10 [0215.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5f18 [0215.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec5f18) returned 1 [0215.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7da2fc8) returned 1 [0215.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d9f3c0) returned 1 [0215.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e760) returned 1 [0215.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbc9f8) returned 1 [0215.920] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a376e0 [0215.920] SetFilePointerEx (in: hFile=0x1998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.920] WriteFile (in: hFile=0x1998, lpBuffer=0x300d718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x15a4fe20, lpOverlapped=0x0 | out: lpBuffer=0x300d718*, lpNumberOfBytesWritten=0x15a4fe20*=0x10c, lpOverlapped=0x0) returned 1 [0218.164] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cb8890 [0218.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fb00 [0218.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d78 [0218.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53d78) returned 1 [0218.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53d78 [0218.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53f80 [0218.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53058 [0218.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53058) returned 1 [0218.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fb00) returned 1 [0218.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8890) returned 1 [0218.165] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.165] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="0c") returned 2 [0218.165] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="0b") returned 2 [0218.165] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="b9") returned 2 [0218.165] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="3a") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="8f") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="8b") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="f0") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="d3") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="08") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="ae") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="bc") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="ad") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="10") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="40") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="58") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="62") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="83") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="ff") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="ee") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="15") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="c2") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="58") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="de") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="09") returned 2 [0218.166] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="86") returned 2 [0218.166] RtlInitAnsiString (in: DestinationString=0x15a4fda8, SourceString="0c0bb93a8f8bf0d308aebcad1040586283ffee15c2583ede0986" | out: DestinationString="0c0bb93a8f8bf0d308aebcad1040586283ffee15c2583ede0986") [0218.167] RtlAnsiStringToUnicodeString (in: DestinationString=0x15a4fda0, SourceString="0c0bb93a8f8bf0d308aebcad1040586283ffee15c2583ede0986", AllocateDestinationString=1 | out: DestinationString="0c0bb93a8f8bf0d308aebcad1040586283ffee15c2583ede0986") returned 0x0 [0218.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f6c8 [0224.765] __SEH_epilog4 () [0224.765] CloseHandle (hObject=0x21c0) returned 1 [0224.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ddd858) returned 1 [0224.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9be0) returned 1 Thread: id = 7183 os_tid = 0x2394 [0203.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css")) returned 0x20 [0205.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0205.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.476] GetLastError () returned 0x5 [0205.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", dwFileAttributes=0x20) returned 0 [0205.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68de0) returned 1 Thread: id = 7184 os_tid = 0x2398 [0203.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css")) returned 0x20 [0205.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0205.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.474] GetLastError () returned 0x5 [0205.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", dwFileAttributes=0x20) returned 0 [0205.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0560) returned 1 Thread: id = 7185 os_tid = 0x239c [0203.011] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e381e8 [0203.012] wcscpy (in: _Dest=0x3e381e8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0203.012] wcscat (in: _Dest=0x3e381e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0203.012] wcscat (in: _Dest=0x3e381e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*" [0203.012] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3354e8 [0203.012] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81287eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e3dad50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.477] wcscmp (_String1=".", _String2=".") returned 0 [0205.477] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81287eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x8e3dad50, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.478] wcscmp (_String1="..", _String2=".") returned 1 [0205.478] wcscmp (_String1="..", _String2="..") returned 0 [0205.478] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0205.478] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0205.478] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0205.478] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4b88 [0205.478] wcscpy (in: _Dest=0x3dc4b88, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0205.478] wcscat (in: _Dest=0x3dc4b88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0205.478] wcscat (in: _Dest=0x3dc4b88, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" [0205.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4b88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1950 [0205.481] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x81287eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.481] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.481] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.481] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3dafda8 [0205.481] wcscpy (in: _Dest=0x3dafda8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0205.481] wcscat (in: _Dest=0x3dafda8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0205.481] wcscat (in: _Dest=0x3dafda8, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" [0205.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dafda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228c [0205.483] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.483] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.483] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc50f8 [0205.483] wcscpy (in: _Dest=0x3dc50f8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis" [0205.483] wcscat (in: _Dest=0x3dc50f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\" [0205.483] wcscat (in: _Dest=0x3dc50f8, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" [0205.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc50f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784 [0205.484] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3354e8 | out: lpFindFileData=0x3354e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3577ac00, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8e3dad50, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x3577ac00, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.484] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3354e8) returned 1 [0205.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e381e8) returned 1 [0205.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e68498) returned 1 Thread: id = 7186 os_tid = 0x23a0 [0203.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css")) returned 0x20 [0205.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0205.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.486] GetLastError () returned 0x5 [0205.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", dwFileAttributes=0x20) returned 0 [0205.486] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0640) returned 1 Thread: id = 7187 os_tid = 0x23a4 [0203.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css")) returned 0x20 [0205.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0205.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.397] GetLastError () returned 0x5 [0205.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", dwFileAttributes=0x20) returned 0 [0205.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4530) returned 1 Thread: id = 7188 os_tid = 0x1c30 [0203.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css")) returned 0x20 [0205.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0205.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.473] GetLastError () returned 0x5 [0205.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", dwFileAttributes=0x20) returned 0 [0205.473] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0720) returned 1 Thread: id = 7189 os_tid = 0x2458 [0203.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x3e16c18 [0203.015] wcscpy (in: _Dest=0x3e16c18, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0203.015] wcscat (in: _Dest=0x3e16c18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\" [0203.015] wcscat (in: _Dest=0x3e16c18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*" [0203.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337698 [0203.015] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82592eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90507ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.487] wcscmp (_String1=".", _String2=".") returned 0 [0205.487] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82592eb0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90507ff0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.488] wcscmp (_String1="..", _String2=".") returned 1 [0205.488] wcscmp (_String1="..", _String2="..") returned 0 [0205.488] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x82592eb0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.488] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.488] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.488] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0258 [0205.488] wcscpy (in: _Dest=0x3db0258, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0205.488] wcscat (in: _Dest=0x3db0258, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\" [0205.488] wcscat (in: _Dest=0x3db0258, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" [0205.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8 [0205.489] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.489] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.489] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.489] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4700 [0205.489] wcscpy (in: _Dest=0x3dc4700, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate" [0205.489] wcscat (in: _Dest=0x3dc4700, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\" [0205.490] wcscat (in: _Dest=0x3dc4700, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" [0205.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64 [0205.491] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x337698 | out: lpFindFileData=0x337698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90507ff0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.491] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337698) returned 1 [0205.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16c18) returned 1 [0205.491] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e382c0) returned 1 Thread: id = 7190 os_tid = 0x245c [0203.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css")) returned 0x20 [0205.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0205.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.493] GetLastError () returned 0x5 [0205.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", dwFileAttributes=0x20) returned 0 [0205.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0800) returned 1 Thread: id = 7191 os_tid = 0x2460 [0203.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css")) returned 0x20 [0205.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0205.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.432] GetLastError () returned 0x5 [0205.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", dwFileAttributes=0x20) returned 0 [0205.432] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4c70) returned 1 Thread: id = 7192 os_tid = 0x1c48 [0203.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd4) returned 0x2c9528 [0203.017] wcscpy (in: _Dest=0x2c9528, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0203.017] wcscat (in: _Dest=0x2c9528, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0203.017] wcscat (in: _Dest=0x2c9528, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*" [0203.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x337dd0 [0203.017] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x826776f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x905c66d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.494] wcscmp (_String1=".", _String2=".") returned 0 [0205.494] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x826776f0, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x905c66d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.494] wcscmp (_String1="..", _String2=".") returned 1 [0205.494] wcscmp (_String1="..", _String2="..") returned 0 [0205.494] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x826776f0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0205.495] wcscmp (_String1="background.gif", _String2=".") returned 1 [0205.495] wcscmp (_String1="background.gif", _String2="..") returned 1 [0205.495] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dadd20 [0205.495] wcscpy (in: _Dest=0x3dadd20, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0205.495] wcscat (in: _Dest=0x3dadd20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0205.495] wcscat (in: _Dest=0x3dadd20, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" [0205.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dadd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790 [0205.496] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.496] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.496] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.496] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0618 [0205.496] wcscpy (in: _Dest=0x3db0618, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0205.496] wcscat (in: _Dest=0x3db0618, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0205.496] wcscat (in: _Dest=0x3db0618, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" [0205.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18c8 [0205.497] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.497] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.497] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.497] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3db0438 [0205.497] wcscpy (in: _Dest=0x3db0438, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue" [0205.497] wcscat (in: _Dest=0x3db0438, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\" [0205.497] wcscat (in: _Dest=0x3db0438, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" [0205.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30 [0205.499] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x337dd0 | out: lpFindFileData=0x337dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x905c66d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.499] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x337dd0) returned 1 [0205.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c9528) returned 1 [0205.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e38110) returned 1 Thread: id = 7193 os_tid = 0x2468 [0203.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css")) returned 0x20 [0205.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0205.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.500] GetLastError () returned 0x5 [0205.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", dwFileAttributes=0x20) returned 0 [0205.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc08e0) returned 1 Thread: id = 7194 os_tid = 0x246c [0203.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xda) returned 0x3dc4e40 [0203.024] wcscpy (in: _Dest=0x3dc4e40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0203.024] wcscat (in: _Dest=0x3dc4e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0203.024] wcscat (in: _Dest=0x3dc4e40, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*" [0203.024] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3359b8 [0203.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8269d850, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ad7e70 [0204.416] wcscmp (_String1=".", _String2=".") returned 0 [0204.416] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8269d850, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x90684db0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.416] wcscmp (_String1="..", _String2=".") returned 1 [0204.416] wcscmp (_String1="..", _String2="..") returned 0 [0204.416] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a8d900, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8269d850, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x36a8d900, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0204.416] wcscmp (_String1="BUTTON.GIF", _String2=".") returned 1 [0204.417] wcscmp (_String1="BUTTON.GIF", _String2="..") returned 1 [0204.417] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae5d8 [0204.417] wcscpy (in: _Dest=0x3dae5d8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0204.417] wcscat (in: _Dest=0x3dae5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0204.417] wcscat (in: _Dest=0x3dae5d8, _Source="BUTTON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" [0205.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0205.123] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.123] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.123] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xee) returned 0x3dae100 [0205.123] wcscpy (in: _Dest=0x3dae100, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0205.123] wcscat (in: _Dest=0x3dae100, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0205.123] wcscat (in: _Dest=0x3dae100, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" [0205.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0205.125] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.125] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.125] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xec) returned 0x3dae2f0 [0205.125] wcscpy (in: _Dest=0x3dae2f0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen" [0205.125] wcscat (in: _Dest=0x3dae2f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\" [0205.125] wcscat (in: _Dest=0x3dae2f0, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" [0205.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dae2f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24 [0205.126] FindNextFileW (in: hFindFile=0x7ad7e70, lpFindFileData=0x3359b8 | out: lpFindFileData=0x3359b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x90684db0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.126] FindClose (in: hFindFile=0x7ad7e70 | out: hFindFile=0x7ad7e70) returned 1 [0205.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3359b8) returned 1 [0205.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4e40) returned 1 [0205.126] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc09c0) returned 1 Thread: id = 7195 os_tid = 0x2470 [0203.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css")) returned 0x20 [0205.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0205.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.434] GetLastError () returned 0x5 [0205.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", dwFileAttributes=0x20) returned 0 [0205.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc48d0) returned 1 Thread: id = 7196 os_tid = 0x8e8 [0203.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv")) returned 0x20 [0206.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV", dwFileAttributes=0x20) returned 0 [0206.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.682] GetLastError () returned 0x5 [0206.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV", dwFileAttributes=0x20) returned 0 [0206.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 7197 os_tid = 0x2474 [0203.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml")) returned 0x20 [0206.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML", dwFileAttributes=0x20) returned 0 [0206.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.691] GetLastError () returned 0x5 [0206.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML", dwFileAttributes=0x20) returned 0 [0206.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 7198 os_tid = 0x2478 [0203.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv")) returned 0x20 [0206.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV", dwFileAttributes=0x20) returned 0 [0206.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.680] GetLastError () returned 0x5 [0206.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV", dwFileAttributes=0x20) returned 0 [0206.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 7199 os_tid = 0x247c [0203.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml")) returned 0x20 [0206.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML", dwFileAttributes=0x20) returned 0 [0206.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.690] GetLastError () returned 0x5 [0206.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML", dwFileAttributes=0x20) returned 0 [0206.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 7200 os_tid = 0x2480 [0203.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv")) returned 0x20 [0206.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV", dwFileAttributes=0x20) returned 0 [0206.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.679] GetLastError () returned 0x5 [0206.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV", dwFileAttributes=0x20) returned 0 [0206.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 7201 os_tid = 0x2484 [0203.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml")) returned 0x20 [0206.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML", dwFileAttributes=0x20) returned 0 [0206.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.689] GetLastError () returned 0x5 [0206.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML", dwFileAttributes=0x20) returned 0 [0206.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 7202 os_tid = 0x249c [0203.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml")) returned 0x20 [0206.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML", dwFileAttributes=0x20) returned 0 [0206.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.676] GetLastError () returned 0x5 [0206.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML", dwFileAttributes=0x20) returned 0 [0206.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 7203 os_tid = 0x24a0 [0203.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv")) returned 0x20 [0206.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV", dwFileAttributes=0x20) returned 0 [0206.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.674] GetLastError () returned 0x5 [0206.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV", dwFileAttributes=0x20) returned 0 [0206.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 7204 os_tid = 0x27d8 [0203.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml")) returned 0x20 [0206.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML", dwFileAttributes=0x20) returned 0 [0206.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.673] GetLastError () returned 0x5 [0206.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML", dwFileAttributes=0x20) returned 0 [0206.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 7205 os_tid = 0x24a4 [0203.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv")) returned 0x20 [0206.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV", dwFileAttributes=0x20) returned 0 [0206.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.687] GetLastError () returned 0x5 [0206.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV", dwFileAttributes=0x20) returned 0 [0206.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a318) returned 1 Thread: id = 7206 os_tid = 0x24a8 [0203.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml")) returned 0x20 [0206.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML", dwFileAttributes=0x20) returned 0 [0206.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.672] GetLastError () returned 0x5 [0206.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML", dwFileAttributes=0x20) returned 0 [0206.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 7207 os_tid = 0x5f4 [0203.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc")) returned 0x20 [0206.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC", dwFileAttributes=0x20) returned 0 [0206.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.670] GetLastError () returned 0x5 [0206.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC", dwFileAttributes=0x20) returned 0 [0206.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b98) returned 1 Thread: id = 7208 os_tid = 0x209c [0203.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc")) returned 0x20 [0206.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC", dwFileAttributes=0x20) returned 0 [0206.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.669] GetLastError () returned 0x5 [0206.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC", dwFileAttributes=0x20) returned 0 [0206.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a498) returned 1 Thread: id = 7209 os_tid = 0x140 [0203.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv")) returned 0x20 [0206.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV", dwFileAttributes=0x20) returned 0 [0206.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.694] GetLastError () returned 0x5 [0206.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV", dwFileAttributes=0x20) returned 0 [0206.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18f18) returned 1 Thread: id = 7210 os_tid = 0xa3c [0203.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml")) returned 0x20 [0206.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML", dwFileAttributes=0x20) returned 0 [0206.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.693] GetLastError () returned 0x5 [0206.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML", dwFileAttributes=0x20) returned 0 [0206.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab18) returned 1 Thread: id = 7211 os_tid = 0x1684 [0203.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc")) returned 0x20 [0206.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC", dwFileAttributes=0x20) returned 0 [0206.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.668] GetLastError () returned 0x5 [0206.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC", dwFileAttributes=0x20) returned 0 [0206.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 7212 os_tid = 0x7e0 [0203.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc")) returned 0x20 [0206.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC", dwFileAttributes=0x20) returned 0 [0206.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.666] GetLastError () returned 0x5 [0206.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC", dwFileAttributes=0x20) returned 0 [0206.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 7213 os_tid = 0x21a0 [0203.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc")) returned 0x20 [0206.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC", dwFileAttributes=0x20) returned 0 [0206.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.686] GetLastError () returned 0x5 [0206.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC", dwFileAttributes=0x20) returned 0 [0206.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19418) returned 1 Thread: id = 7214 os_tid = 0x21ac [0203.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc")) returned 0x20 [0206.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC", dwFileAttributes=0x20) returned 0 [0206.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.623] GetLastError () returned 0x5 [0206.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC", dwFileAttributes=0x20) returned 0 [0206.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19698) returned 1 Thread: id = 7215 os_tid = 0x21b0 [0203.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc")) returned 0x20 [0206.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC", dwFileAttributes=0x20) returned 0 [0206.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.696] GetLastError () returned 0x5 [0206.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC", dwFileAttributes=0x20) returned 0 [0206.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d638) returned 1 Thread: id = 7216 os_tid = 0x23f4 [0203.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv")) returned 0x20 [0206.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV", dwFileAttributes=0x20) returned 0 [0206.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.665] GetLastError () returned 0x5 [0206.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV", dwFileAttributes=0x20) returned 0 [0206.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 7217 os_tid = 0x584 [0203.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml")) returned 0x20 [0206.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML", dwFileAttributes=0x20) returned 0 [0206.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.663] GetLastError () returned 0x5 [0206.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML", dwFileAttributes=0x20) returned 0 [0206.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 Thread: id = 7218 os_tid = 0x26a8 [0203.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc")) returned 0x20 [0206.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC", dwFileAttributes=0x20) returned 0 [0206.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.685] GetLastError () returned 0x5 [0206.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC", dwFileAttributes=0x20) returned 0 [0206.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b18) returned 1 Thread: id = 7219 os_tid = 0x26c0 [0203.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc")) returned 0x20 [0206.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC", dwFileAttributes=0x20) returned 0 [0206.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.683] GetLastError () returned 0x5 [0206.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC", dwFileAttributes=0x20) returned 0 [0206.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a198) returned 1 Thread: id = 7220 os_tid = 0x26d8 [0203.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc")) returned 0x20 [0206.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC", dwFileAttributes=0x20) returned 0 [0206.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.706] GetLastError () returned 0x5 [0206.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC", dwFileAttributes=0x20) returned 0 [0206.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 7221 os_tid = 0x26dc [0203.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif")) returned 0x20 [0204.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0204.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.575] GetLastError () returned 0x5 [0204.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0204.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daff88) returned 1 Thread: id = 7222 os_tid = 0xb98 [0203.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif")) returned 0x20 [0204.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.582] GetLastError () returned 0x5 [0204.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafcb8) returned 1 Thread: id = 7223 os_tid = 0xba4 [0203.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20 [0204.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.588] GetLastError () returned 0x5 [0204.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafda8) returned 1 Thread: id = 7224 os_tid = 0x774 [0203.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20 [0204.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.483] GetLastError () returned 0x5 [0204.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.483] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0078) returned 1 Thread: id = 7225 os_tid = 0x2224 [0203.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif")) returned 0x20 [0204.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.489] GetLastError () returned 0x5 [0204.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.489] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae3e8) returned 1 Thread: id = 7226 os_tid = 0x644 [0203.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif")) returned 0x20 [0204.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.495] GetLastError () returned 0x5 [0204.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0438) returned 1 Thread: id = 7227 os_tid = 0x23f8 [0203.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif")) returned 0x20 [0204.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.502] GetLastError () returned 0x5 [0204.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0618) returned 1 Thread: id = 7228 os_tid = 0x3ec [0203.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif")) returned 0x20 [0205.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.049] GetLastError () returned 0x5 [0205.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3fc0) returned 1 Thread: id = 7229 os_tid = 0xfb8 [0203.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif")) returned 0x20 [0204.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.516] GetLastError () returned 0x5 [0204.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadc28) returned 1 Thread: id = 7230 os_tid = 0x2710 [0203.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20 [0204.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.522] GetLastError () returned 0x5 [0204.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadd20) returned 1 Thread: id = 7231 os_tid = 0xf68 [0203.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20 [0204.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.528] GetLastError () returned 0x5 [0204.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 7232 os_tid = 0x2718 [0203.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif")) returned 0x20 [0204.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.533] GetLastError () returned 0x5 [0204.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0204.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf178) returned 1 Thread: id = 7233 os_tid = 0xab0 [0203.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20 [0204.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.539] GetLastError () returned 0x5 [0204.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0204.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 Thread: id = 7234 os_tid = 0x2724 [0203.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20 [0204.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.545] GetLastError () returned 0x5 [0204.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0204.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0348) returned 1 Thread: id = 7235 os_tid = 0x7c4 [0203.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif")) returned 0x20 [0204.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0204.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.551] GetLastError () returned 0x5 [0204.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0204.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de8eb8) returned 1 Thread: id = 7236 os_tid = 0x272c [0203.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif")) returned 0x20 [0204.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif", dwFileAttributes=0x20) returned 0 [0204.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.557] GetLastError () returned 0x5 [0204.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif", dwFileAttributes=0x20) returned 0 [0204.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae2f0) returned 1 Thread: id = 7237 os_tid = 0x2730 [0203.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20 [0204.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0204.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.563] GetLastError () returned 0x5 [0204.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0204.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 7238 os_tid = 0x2734 [0203.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20 [0204.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0204.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.570] GetLastError () returned 0x5 [0204.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0204.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 Thread: id = 7239 os_tid = 0x2738 [0203.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss")) returned 0x20 [0204.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS", dwFileAttributes=0x20) returned 0 [0204.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.759] GetLastError () returned 0x5 [0204.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS", dwFileAttributes=0x20) returned 0 [0204.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62590) returned 1 Thread: id = 7240 os_tid = 0x273c [0203.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss")) returned 0x20 [0204.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS", dwFileAttributes=0x20) returned 0 [0204.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.755] GetLastError () returned 0x5 [0204.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS", dwFileAttributes=0x20) returned 0 [0204.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62810) returned 1 Thread: id = 7241 os_tid = 0x7b0 [0203.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss")) returned 0x20 [0204.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0204.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.739] GetLastError () returned 0x5 [0204.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0204.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df61c0) returned 1 Thread: id = 7242 os_tid = 0xfc8 [0203.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst")) returned 0x20 [0204.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST", dwFileAttributes=0x20) returned 0 [0204.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.736] GetLastError () returned 0x5 [0204.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST", dwFileAttributes=0x20) returned 0 [0204.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4be0) returned 1 Thread: id = 7243 os_tid = 0x728 [0203.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss")) returned 0x20 [0204.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0204.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.803] GetLastError () returned 0x5 [0204.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0204.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 Thread: id = 7244 os_tid = 0x20a0 [0203.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst")) returned 0x20 [0204.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST", dwFileAttributes=0x20) returned 0 [0204.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.800] GetLastError () returned 0x5 [0204.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST", dwFileAttributes=0x20) returned 0 [0204.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6260) returned 1 Thread: id = 7245 os_tid = 0x2308 [0203.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst")) returned 0x20 [0204.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST", dwFileAttributes=0x20) returned 0 [0204.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.797] GetLastError () returned 0x5 [0204.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST", dwFileAttributes=0x20) returned 0 [0204.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6080) returned 1 Thread: id = 7246 os_tid = 0x230c [0203.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst")) returned 0x20 [0204.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST", dwFileAttributes=0x20) returned 0 [0204.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.794] GetLastError () returned 0x5 [0204.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST", dwFileAttributes=0x20) returned 0 [0204.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4dc0) returned 1 Thread: id = 7247 os_tid = 0x2318 [0203.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst")) returned 0x20 [0204.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST", dwFileAttributes=0x20) returned 0 [0204.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.791] GetLastError () returned 0x5 [0204.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST", dwFileAttributes=0x20) returned 0 [0204.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 Thread: id = 7248 os_tid = 0x231c [0203.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst")) returned 0x20 [0204.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST", dwFileAttributes=0x20) returned 0 [0204.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.788] GetLastError () returned 0x5 [0204.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST", dwFileAttributes=0x20) returned 0 [0204.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 Thread: id = 7249 os_tid = 0x2320 [0203.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss")) returned 0x20 [0204.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS", dwFileAttributes=0x20) returned 0 [0204.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.784] GetLastError () returned 0x5 [0204.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS", dwFileAttributes=0x20) returned 0 [0204.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5b80) returned 1 Thread: id = 7250 os_tid = 0x2324 [0203.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss")) returned 0x20 [0204.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS", dwFileAttributes=0x20) returned 0 [0204.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.805] GetLastError () returned 0x5 [0204.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS", dwFileAttributes=0x20) returned 0 [0204.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5a40) returned 1 Thread: id = 7251 os_tid = 0x17b0 [0203.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss")) returned 0x20 [0204.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS", dwFileAttributes=0x20) returned 0 [0204.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.781] GetLastError () returned 0x5 [0204.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS", dwFileAttributes=0x20) returned 0 [0204.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5c20) returned 1 Thread: id = 7252 os_tid = 0x17cc [0203.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss")) returned 0x20 [0204.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS", dwFileAttributes=0x20) returned 0 [0204.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.807] GetLastError () returned 0x5 [0204.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS", dwFileAttributes=0x20) returned 0 [0204.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 Thread: id = 7253 os_tid = 0x1960 [0203.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss")) returned 0x20 [0204.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS", dwFileAttributes=0x20) returned 0 [0204.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.778] GetLastError () returned 0x5 [0204.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS", dwFileAttributes=0x20) returned 0 [0204.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 7254 os_tid = 0x2200 [0203.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss")) returned 0x20 [0204.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS", dwFileAttributes=0x20) returned 0 [0204.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.775] GetLastError () returned 0x5 [0204.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS", dwFileAttributes=0x20) returned 0 [0204.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c70f8) returned 1 Thread: id = 7255 os_tid = 0x1f34 [0203.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss")) returned 0x20 [0204.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS", dwFileAttributes=0x20) returned 0 [0204.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.772] GetLastError () returned 0x5 [0204.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS", dwFileAttributes=0x20) returned 0 [0204.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 7256 os_tid = 0xc38 [0203.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss")) returned 0x20 [0204.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS", dwFileAttributes=0x20) returned 0 [0204.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.418] GetLastError () returned 0x5 [0204.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS", dwFileAttributes=0x20) returned 0 [0204.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 Thread: id = 7257 os_tid = 0x888 [0203.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst")) returned 0x20 [0204.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST", dwFileAttributes=0x20) returned 0 [0204.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.768] GetLastError () returned 0x5 [0204.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST", dwFileAttributes=0x20) returned 0 [0204.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 7258 os_tid = 0x23c0 [0203.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss")) returned 0x20 [0204.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS", dwFileAttributes=0x20) returned 0 [0204.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.765] GetLastError () returned 0x5 [0204.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS", dwFileAttributes=0x20) returned 0 [0204.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6298) returned 1 Thread: id = 7259 os_tid = 0x1d44 [0203.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst")) returned 0x20 [0204.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST", dwFileAttributes=0x20) returned 0 [0204.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.762] GetLastError () returned 0x5 [0204.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST", dwFileAttributes=0x20) returned 0 [0204.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6fb8) returned 1 Thread: id = 7260 os_tid = 0x1edc [0203.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss")) returned 0x20 [0204.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS", dwFileAttributes=0x20) returned 0 [0204.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.837] GetLastError () returned 0x5 [0204.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS", dwFileAttributes=0x20) returned 0 [0204.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 7261 os_tid = 0x15c [0203.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst")) returned 0x20 [0204.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST", dwFileAttributes=0x20) returned 0 [0204.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.835] GetLastError () returned 0x5 [0204.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST", dwFileAttributes=0x20) returned 0 [0204.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 7262 os_tid = 0x778 [0203.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss")) returned 0x20 [0204.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS", dwFileAttributes=0x20) returned 0 [0204.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.833] GetLastError () returned 0x5 [0204.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS", dwFileAttributes=0x20) returned 0 [0204.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 7263 os_tid = 0xa90 [0203.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst")) returned 0x20 [0204.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST", dwFileAttributes=0x20) returned 0 [0204.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.832] GetLastError () returned 0x5 [0204.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST", dwFileAttributes=0x20) returned 0 [0204.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6020) returned 1 Thread: id = 7264 os_tid = 0xc68 [0203.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss")) returned 0x20 [0204.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS", dwFileAttributes=0x20) returned 0 [0204.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.847] GetLastError () returned 0x5 [0204.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS", dwFileAttributes=0x20) returned 0 [0204.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb60c0) returned 1 Thread: id = 7265 os_tid = 0x474 [0203.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv")) returned 0x20 [0205.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV", dwFileAttributes=0x20) returned 0 [0205.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.671] GetLastError () returned 0x5 [0205.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV", dwFileAttributes=0x20) returned 0 [0205.671] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19998) returned 1 Thread: id = 7266 os_tid = 0x528 [0203.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml")) returned 0x20 [0206.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML", dwFileAttributes=0x20) returned 0 [0206.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.703] GetLastError () returned 0x5 [0206.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML", dwFileAttributes=0x20) returned 0 [0206.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19898) returned 1 Thread: id = 7267 os_tid = 0x9cc [0203.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc")) returned 0x20 [0206.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC", dwFileAttributes=0x20) returned 0 [0206.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.702] GetLastError () returned 0x5 [0206.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC", dwFileAttributes=0x20) returned 0 [0206.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68dd8) returned 1 Thread: id = 7268 os_tid = 0x9dc [0203.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc")) returned 0x20 [0206.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC", dwFileAttributes=0x20) returned 0 [0206.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.726] GetLastError () returned 0x5 [0206.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC", dwFileAttributes=0x20) returned 0 [0206.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 7269 os_tid = 0x257c [0203.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc")) returned 0x20 [0206.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC", dwFileAttributes=0x20) returned 0 [0206.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.724] GetLastError () returned 0x5 [0206.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC", dwFileAttributes=0x20) returned 0 [0206.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 7270 os_tid = 0x2580 [0203.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv")) returned 0x20 [0206.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV", dwFileAttributes=0x20) returned 0 [0206.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.722] GetLastError () returned 0x5 [0206.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV", dwFileAttributes=0x20) returned 0 [0206.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 7271 os_tid = 0x2584 [0203.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml")) returned 0x20 [0206.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML", dwFileAttributes=0x20) returned 0 [0206.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.700] GetLastError () returned 0x5 [0206.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML", dwFileAttributes=0x20) returned 0 [0206.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 7272 os_tid = 0x2588 [0203.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc")) returned 0x20 [0206.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC", dwFileAttributes=0x20) returned 0 [0206.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.699] GetLastError () returned 0x5 [0206.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC", dwFileAttributes=0x20) returned 0 [0206.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 7273 os_tid = 0x258c [0203.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc")) returned 0x20 [0206.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC", dwFileAttributes=0x20) returned 0 [0206.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.697] GetLastError () returned 0x5 [0206.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC", dwFileAttributes=0x20) returned 0 [0206.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 7274 os_tid = 0x2590 [0203.460] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0203.461] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0214.895] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1414 [0214.896] GetFileSizeEx (in: hFile=0x1414, lpFileSize=0x1636f8b4 | out: lpFileSize=0x1636f8b4*=179) returned 1 [0214.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0214.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0214.896] NtQuerySystemTime (in: CurrentTime=0x1636f828 | out: CurrentTime=0x1636f828*=132462177934692000) returned 0x0 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x319fd5cf [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x3875a1b1 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x5481787e [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x4b9c28dd [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x2d8da3c7 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x4fed2e4 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x5a654a3a [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x5f3bb823 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x375768a5 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x3a4b0682 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x27434c4b [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x713fcd8f [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x67426499 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x15c8fd0d [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x13ae7bf3 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x2107fcb3 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x1c047a3a [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x353ae403 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x483425b7 [0214.896] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x3d44a278 [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x319fd5cf [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x23177185 [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x3e06b72e [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0xe628159 [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x1f2e1c2f [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x5f9f55cd [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x2107fcb3 [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x24e0c7a3 [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x6c5558db [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x77de34d6 [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x15350ae7 [0214.897] RtlRandomEx (in: Seed=0x1636f820 | out: Seed=0x1636f820) returned 0x7fd5535b [0214.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ec4890 [0214.919] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ec8498 [0214.919] ReadFile (in: hFile=0x1414, lpBuffer=0x10ec4890, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1636f81c, lpOverlapped=0x0 | out: lpBuffer=0x10ec4890*, lpNumberOfBytesRead=0x1636f81c*=0xb3, lpOverlapped=0x0) returned 1 [0214.921] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.921] WriteFile (in: hFile=0x1414, lpBuffer=0x10ec8498*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1636f820, lpOverlapped=0x0 | out: lpBuffer=0x10ec8498*, lpNumberOfBytesWritten=0x1636f820*=0xb3, lpOverlapped=0x0) returned 1 [0214.999] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf50 [0215.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0215.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0215.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ec8498) returned 1 [0215.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ec4890) returned 1 [0215.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c360) returned 1 [0215.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85a78) returned 1 [0215.000] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37e00 [0215.000] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.000] WriteFile (in: hFile=0x1414, lpBuffer=0x7cd3a60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1636f8a8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3a60*, lpNumberOfBytesWritten=0x1636f8a8*=0x10c, lpOverlapped=0x0) returned 1 [0215.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85a78 [0215.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c5b8 [0215.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0215.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0215.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b7d0 [0215.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cce8 [0215.015] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0215.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c658) returned 1 [0215.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c5b8) returned 1 [0215.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85a78) returned 1 [0215.016] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0215.016] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="13") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="d7") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="51") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="5c") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="16") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="40") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="8c") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="74") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="b3") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="bd") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="90") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="a7") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="bc") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="65") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="9d") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="40") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="63") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="11") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="d3") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="5b") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="b8") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="8e") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="19") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="27") returned 2 [0215.016] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="b8") returned 2 [0215.017] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="fd") returned 2 [0215.017] RtlInitAnsiString (in: DestinationString=0x1636f830, SourceString="13d7515c16408c74b3bd90a7bc659d406311d35bb88e1927b8fd" | out: DestinationString="13d7515c16408c74b3bd90a7bc659d406311d35bb88e1927b8fd") [0215.017] RtlAnsiStringToUnicodeString (in: DestinationString=0x1636f828, SourceString="13d7515c16408c74b3bd90a7bc659d406311d35bb88e1927b8fd", AllocateDestinationString=1 | out: DestinationString="13d7515c16408c74b3bd90a7bc659d406311d35bb88e1927b8fd") returned 0x0 [0215.017] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c360 Thread: id = 7275 os_tid = 0x2594 [0203.461] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json")) returned 0x2020 [0204.390] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0215.423] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2328 [0215.423] GetFileSizeEx (in: hFile=0x2328, lpFileSize=0xf9cf9d4 | out: lpFileSize=0xf9cf9d4*=286) returned 1 [0215.424] SetFilePointerEx (in: hFile=0x2328, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.424] ReadFile (in: hFile=0x2328, lpBuffer=0xf9cf9b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf9cf9c0, lpOverlapped=0x0 | out: lpBuffer=0xf9cf9b0*, lpNumberOfBytesRead=0xf9cf9c0*=0x4, lpOverlapped=0x0) returned 1 [0215.425] SetFilePointerEx (in: hFile=0x2328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2db8 [0215.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0215.426] NtQuerySystemTime (in: CurrentTime=0xf9cf948 | out: CurrentTime=0xf9cf948*=132462177939996000) returned 0x0 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x13d8e9c6 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x2926733d [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x640fbbf8 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x62f1b905 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x4ed0aefe [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x593e2812 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x514afbdc [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x48ba4a40 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x72aabba5 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x17967036 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x7ded1f94 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x24d365a9 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0xbf3e3e8 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x26e7f21 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0xfa1ae29 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x543b0f71 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0xe814944 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x2553c74a [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x7e9c9779 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x2c14291a [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0xd9f9d7e [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x7250745c [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x62e6c739 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x1abf8fd5 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x401d7e3b [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x514afbdc [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x13d8e9c6 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x23fb06e1 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x771c9620 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x20a4e4fb [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x98ee17 [0215.426] RtlRandomEx (in: Seed=0xf9cf940 | out: Seed=0xf9cf940) returned 0x726435e6 [0215.436] SetFilePointerEx (in: hFile=0x2328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.436] WriteFile (in: hFile=0x2328, lpBuffer=0x10e10060*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0xf9cf940, lpOverlapped=0x0 | out: lpBuffer=0x10e10060*, lpNumberOfBytesWritten=0xf9cf940*=0x11e, lpOverlapped=0x0) returned 1 [0217.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b780 [0217.889] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b550 [0217.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b550) returned 1 [0217.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e10060) returned 1 [0217.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10f0c0a0) returned 1 [0217.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3014e78) returned 1 [0217.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb9580) returned 1 [0217.890] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86788 [0217.890] SetFilePointerEx (in: hFile=0x2328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.890] WriteFile (in: hFile=0x2328, lpBuffer=0x7cd31a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xf9cf9c8, lpOverlapped=0x0 | out: lpBuffer=0x7cd31a0*, lpNumberOfBytesWritten=0xf9cf9c8*=0x10c, lpOverlapped=0x0) returned 1 [0218.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3d40888 [0218.828] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c630 [0218.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0218.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e98) returned 1 [0218.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3e98 [0218.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0218.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0218.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0218.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c630) returned 1 [0218.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d40888) returned 1 [0218.829] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.829] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="95") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="19") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="5f") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="d1") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="45") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="61") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="f1") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="cf") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="ea") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="ed") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="84") returned 2 [0218.829] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="47") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="cf") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="57") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="14") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="18") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="36") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="d0") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="a8") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="e3") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="af") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="37") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="e1") returned 2 [0218.830] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="ea") returned 2 [0218.830] RtlInitAnsiString (in: DestinationString=0xf9cf950, SourceString="95195fd14561f1cfeaed8447cf57141836d0a82fe3d6af37e1ea" | out: DestinationString="95195fd14561f1cfeaed8447cf57141836d0a82fe3d6af37e1ea") [0218.830] RtlAnsiStringToUnicodeString (in: DestinationString=0xf9cf948, SourceString="95195fd14561f1cfeaed8447cf57141836d0a82fe3d6af37e1ea", AllocateDestinationString=1 | out: DestinationString="95195fd14561f1cfeaed8447cf57141836d0a82fe3d6af37e1ea") returned 0x0 [0218.830] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cc48 [0224.128] CloseHandle (hObject=0x2250) returned 1 [0224.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6de0) returned 1 [0224.129] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6960) returned 1 Thread: id = 7276 os_tid = 0x2010 [0203.462] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json")) returned 0x2020 [0204.388] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0215.384] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xef4 [0215.385] GetFileSizeEx (in: hFile=0xef4, lpFileSize=0x12e9f934 | out: lpFileSize=0x12e9f934*=265) returned 1 [0215.385] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.385] ReadFile (in: hFile=0xef4, lpBuffer=0x12e9f910, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12e9f920, lpOverlapped=0x0 | out: lpBuffer=0x12e9f910*, lpNumberOfBytesRead=0x12e9f920*=0x4, lpOverlapped=0x0) returned 1 [0215.386] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3498 [0215.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0215.387] NtQuerySystemTime (in: CurrentTime=0x12e9f8a8 | out: CurrentTime=0x12e9f8a8*=132462177939684000) returned 0x0 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x1beab2a2 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x497f3bc3 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x5cd458c3 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x6c49f95c [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x79d20dad [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x20c8067b [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x703a1281 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x1b8cae3d [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x31dcb41b [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x1906ca3d [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x9f15303 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x1d521b67 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x572ff975 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x3e035796 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x576c1bf4 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x20ac75ba [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x2c92243c [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x5e98fdc2 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x2bd96849 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x5013f1e3 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x3bb5c33e [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x60a0560b [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0xc0e6b11 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x2c97f96f [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x737b28d4 [0215.387] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x3e7cdcbb [0215.388] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x62e43a6f [0215.388] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x1b4be574 [0215.388] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x48a07007 [0215.388] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x7911c200 [0215.388] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x7cc399d8 [0215.388] RtlRandomEx (in: Seed=0x12e9f8a0 | out: Seed=0x12e9f8a0) returned 0x73e53492 [0215.396] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.396] WriteFile (in: hFile=0xef4, lpBuffer=0x10ef9478*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x12e9f8a0, lpOverlapped=0x0 | out: lpBuffer=0x10ef9478*, lpNumberOfBytesWritten=0x12e9f8a0*=0x109, lpOverlapped=0x0) returned 1 [0221.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31f0 [0221.472] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0221.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0221.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ef9478) returned 1 [0221.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ef5870) returned 1 [0221.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0221.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85b98) returned 1 [0221.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38620 [0221.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4190) returned 1 [0221.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38650 [0221.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4190 [0221.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0221.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6508) returned 1 [0221.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015328) returned 1 [0221.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85b98) returned 1 [0221.499] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x7cba138 [0221.499] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.499] WriteFile (in: hFile=0xef4, lpBuffer=0x7cba138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12e9f928, lpOverlapped=0x0 | out: lpBuffer=0x7cba138*, lpNumberOfBytesWritten=0x12e9f928*=0x10c, lpOverlapped=0x0) returned 1 [0223.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f7b8 [0223.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cbf8 [0223.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cbf8) returned 1 [0223.182] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305cbf8 [0223.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b910 [0223.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0223.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c630) returned 1 [0223.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f7b8) returned 1 [0223.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.183] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.183] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="fd") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="21") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="01") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="3d") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="4d") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="d4") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="cd") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="af") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="c2") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="82") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="59") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="59") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="3d") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="c9") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="4f") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="d2") returned 2 [0223.183] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="ca") returned 2 [0223.184] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="90") returned 2 [0223.184] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="b4") returned 2 [0223.184] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="dd") returned 2 [0223.184] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="83") returned 2 [0223.184] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="e3") returned 2 [0223.184] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="cc") returned 2 [0223.184] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="0c") returned 2 [0223.184] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="5a") returned 2 [0223.184] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="9f") returned 2 [0223.184] RtlInitAnsiString (in: DestinationString=0x12e9f8b0, SourceString="fd21013d4dd4cdafc28259593dc94fd2ca90b4dd83e3cc0c5a9f" | out: DestinationString="fd21013d4dd4cdafc28259593dc94fd2ca90b4dd83e3cc0c5a9f") [0223.184] RtlAnsiStringToUnicodeString (in: DestinationString=0x12e9f8a8, SourceString="fd21013d4dd4cdafc28259593dc94fd2ca90b4dd83e3cc0c5a9f", AllocateDestinationString=1 | out: DestinationString="fd21013d4dd4cdafc28259593dc94fd2ca90b4dd83e3cc0c5a9f") returned 0x0 [0223.184] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3fa10 [0224.332] CloseHandle (hObject=0x2250) returned 1 [0224.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2bb0) returned 1 [0224.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6838) returned 1 Thread: id = 7277 os_tid = 0x214c [0203.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx")) returned 0x20 [0203.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", dwFileAttributes=0x20) returned 0 [0203.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.473] GetLastError () returned 0x5 [0203.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx", dwFileAttributes=0x20) returned 0 [0203.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6160) returned 1 Thread: id = 7278 os_tid = 0xa0c [0203.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx")) returned 0x20 [0203.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", dwFileAttributes=0x20) returned 0 [0203.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.489] GetLastError () returned 0x5 [0203.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx", dwFileAttributes=0x20) returned 0 [0203.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df48c0) returned 1 Thread: id = 7279 os_tid = 0xa1c [0203.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx")) returned 0x20 [0203.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", dwFileAttributes=0x20) returned 0 [0203.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.508] GetLastError () returned 0x5 [0203.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx", dwFileAttributes=0x20) returned 0 [0203.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2ff6d00) returned 1 Thread: id = 7280 os_tid = 0x2158 [0203.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx")) returned 0x20 [0203.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", dwFileAttributes=0x20) returned 0 [0203.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.530] GetLastError () returned 0x5 [0203.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx", dwFileAttributes=0x20) returned 0 [0203.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053330) returned 1 Thread: id = 7281 os_tid = 0x219c [0203.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx")) returned 0x20 [0203.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", dwFileAttributes=0x20) returned 0 [0203.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.550] GetLastError () returned 0x5 [0203.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx", dwFileAttributes=0x20) returned 0 [0203.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6200) returned 1 Thread: id = 7282 os_tid = 0xa2c [0203.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx")) returned 0x20 [0203.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", dwFileAttributes=0x20) returned 0 [0203.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.568] GetLastError () returned 0x5 [0203.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx", dwFileAttributes=0x20) returned 0 [0203.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 7283 os_tid = 0x26b4 [0203.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx")) returned 0x20 [0203.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", dwFileAttributes=0x20) returned 0 [0203.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.583] GetLastError () returned 0x5 [0203.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx", dwFileAttributes=0x20) returned 0 [0203.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 7284 os_tid = 0x1d94 [0203.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx")) returned 0x20 [0203.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", dwFileAttributes=0x20) returned 0 [0203.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.604] GetLastError () returned 0x5 [0203.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx", dwFileAttributes=0x20) returned 0 [0203.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb62a0) returned 1 Thread: id = 7285 os_tid = 0x1084 [0203.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx")) returned 0x20 [0203.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", dwFileAttributes=0x20) returned 0 [0203.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.621] GetLastError () returned 0x5 [0203.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx", dwFileAttributes=0x20) returned 0 [0203.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 7286 os_tid = 0x26b0 [0203.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx")) returned 0x20 [0203.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", dwFileAttributes=0x20) returned 0 [0203.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0203.638] GetLastError () returned 0x5 [0203.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx", dwFileAttributes=0x20) returned 0 [0203.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6340) returned 1 Thread: id = 7287 os_tid = 0x2564 [0203.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx")) returned 0x20 [0205.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", dwFileAttributes=0x20) returned 0 [0205.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.036] GetLastError () returned 0x5 [0205.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx", dwFileAttributes=0x20) returned 0 [0205.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053720) returned 1 Thread: id = 7288 os_tid = 0x25d4 [0203.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx")) returned 0x20 [0204.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", dwFileAttributes=0x20) returned 0 [0204.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.383] GetLastError () returned 0x5 [0204.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx", dwFileAttributes=0x20) returned 0 [0204.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 7289 os_tid = 0x26ac [0203.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx")) returned 0x20 [0204.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", dwFileAttributes=0x20) returned 0 [0204.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.385] GetLastError () returned 0x5 [0204.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx", dwFileAttributes=0x20) returned 0 [0204.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 7290 os_tid = 0x22ac [0203.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx")) returned 0x20 [0205.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", dwFileAttributes=0x20) returned 0 [0205.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.025] GetLastError () returned 0x5 [0205.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx", dwFileAttributes=0x20) returned 0 [0205.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3053a68) returned 1 Thread: id = 7291 os_tid = 0xf0c [0203.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x20 [0204.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF", dwFileAttributes=0x20) returned 0 [0204.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.925] GetLastError () returned 0x5 [0204.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF", dwFileAttributes=0x20) returned 0 [0204.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68c40) returned 1 Thread: id = 7292 os_tid = 0x2c0 [0203.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x20 [0204.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF", dwFileAttributes=0x20) returned 0 [0204.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.923] GetLastError () returned 0x5 [0204.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF", dwFileAttributes=0x20) returned 0 [0204.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68b30) returned 1 Thread: id = 7293 os_tid = 0xa4c [0203.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x20 [0204.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF", dwFileAttributes=0x20) returned 0 [0204.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.951] GetLastError () returned 0x5 [0204.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF", dwFileAttributes=0x20) returned 0 [0204.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 7294 os_tid = 0x484 [0203.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x20 [0204.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF", dwFileAttributes=0x20) returned 0 [0204.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.949] GetLastError () returned 0x5 [0204.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF", dwFileAttributes=0x20) returned 0 [0204.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c758) returned 1 Thread: id = 7295 os_tid = 0xa6c [0203.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x20 [0204.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF", dwFileAttributes=0x20) returned 0 [0204.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.947] GetLastError () returned 0x5 [0204.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF", dwFileAttributes=0x20) returned 0 [0204.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 Thread: id = 7296 os_tid = 0xa94 [0203.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x20 [0204.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF", dwFileAttributes=0x20) returned 0 [0204.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.946] GetLastError () returned 0x5 [0204.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF", dwFileAttributes=0x20) returned 0 [0204.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 7297 os_tid = 0x518 [0203.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x20 [0204.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF", dwFileAttributes=0x20) returned 0 [0204.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.944] GetLastError () returned 0x5 [0204.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF", dwFileAttributes=0x20) returned 0 [0204.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 7298 os_tid = 0x22ec [0203.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x20 [0204.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF", dwFileAttributes=0x20) returned 0 [0204.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.942] GetLastError () returned 0x5 [0204.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF", dwFileAttributes=0x20) returned 0 [0204.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 7299 os_tid = 0xa88 [0203.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x20 [0204.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF", dwFileAttributes=0x20) returned 0 [0204.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.940] GetLastError () returned 0x5 [0204.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF", dwFileAttributes=0x20) returned 0 [0204.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 7300 os_tid = 0xa84 [0203.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x20 [0204.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF", dwFileAttributes=0x20) returned 0 [0204.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.938] GetLastError () returned 0x5 [0204.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF", dwFileAttributes=0x20) returned 0 [0204.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 7301 os_tid = 0xa98 [0203.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x20 [0204.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF", dwFileAttributes=0x20) returned 0 [0204.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.936] GetLastError () returned 0x5 [0204.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF", dwFileAttributes=0x20) returned 0 [0204.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 Thread: id = 7302 os_tid = 0x21b4 [0203.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x20 [0204.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF", dwFileAttributes=0x20) returned 0 [0204.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.934] GetLastError () returned 0x5 [0204.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF", dwFileAttributes=0x20) returned 0 [0204.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d060) returned 1 Thread: id = 7303 os_tid = 0x21b8 [0203.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x20 [0204.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF", dwFileAttributes=0x20) returned 0 [0204.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.933] GetLastError () returned 0x5 [0204.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF", dwFileAttributes=0x20) returned 0 [0204.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 7304 os_tid = 0x21bc [0203.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x20 [0204.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF", dwFileAttributes=0x20) returned 0 [0204.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.931] GetLastError () returned 0x5 [0204.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF", dwFileAttributes=0x20) returned 0 [0204.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 7305 os_tid = 0x2650 [0203.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x20 [0204.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF", dwFileAttributes=0x20) returned 0 [0204.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.929] GetLastError () returned 0x5 [0204.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF", dwFileAttributes=0x20) returned 0 [0204.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c6d0) returned 1 Thread: id = 7306 os_tid = 0x2668 [0203.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x20 [0204.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF", dwFileAttributes=0x20) returned 0 [0204.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.927] GetLastError () returned 0x5 [0204.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF", dwFileAttributes=0x20) returned 0 [0204.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 Thread: id = 7307 os_tid = 0x21c0 [0203.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x20 [0204.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF", dwFileAttributes=0x20) returned 0 [0204.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.909] GetLastError () returned 0x5 [0204.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF", dwFileAttributes=0x20) returned 0 [0204.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 7308 os_tid = 0x21c4 [0203.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x20 [0204.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF", dwFileAttributes=0x20) returned 0 [0204.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.907] GetLastError () returned 0x5 [0204.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF", dwFileAttributes=0x20) returned 0 [0204.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 7309 os_tid = 0x1894 [0203.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x20 [0204.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF", dwFileAttributes=0x20) returned 0 [0204.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.905] GetLastError () returned 0x5 [0204.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF", dwFileAttributes=0x20) returned 0 [0204.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 7310 os_tid = 0x21c8 [0203.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x20 [0204.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF", dwFileAttributes=0x20) returned 0 [0204.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.904] GetLastError () returned 0x5 [0204.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF", dwFileAttributes=0x20) returned 0 [0204.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 7311 os_tid = 0x21cc [0203.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x20 [0204.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF", dwFileAttributes=0x20) returned 0 [0204.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.902] GetLastError () returned 0x5 [0204.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF", dwFileAttributes=0x20) returned 0 [0204.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 7312 os_tid = 0x21d0 [0203.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x20 [0204.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF", dwFileAttributes=0x20) returned 0 [0204.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.922] GetLastError () returned 0x5 [0204.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF", dwFileAttributes=0x20) returned 0 [0204.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 7313 os_tid = 0x2680 [0203.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x20 [0204.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF", dwFileAttributes=0x20) returned 0 [0204.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.920] GetLastError () returned 0x5 [0204.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF", dwFileAttributes=0x20) returned 0 [0204.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f3e0) returned 1 Thread: id = 7314 os_tid = 0x2684 [0203.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x20 [0204.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF", dwFileAttributes=0x20) returned 0 [0204.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.918] GetLastError () returned 0x5 [0204.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF", dwFileAttributes=0x20) returned 0 [0204.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 7315 os_tid = 0x1898 [0203.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x20 [0204.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF", dwFileAttributes=0x20) returned 0 [0204.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.917] GetLastError () returned 0x5 [0204.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF", dwFileAttributes=0x20) returned 0 [0204.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bd50) returned 1 Thread: id = 7316 os_tid = 0x189c [0203.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x20 [0204.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF", dwFileAttributes=0x20) returned 0 [0204.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.914] GetLastError () returned 0x5 [0204.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF", dwFileAttributes=0x20) returned 0 [0204.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ca10) returned 1 Thread: id = 7317 os_tid = 0x18a0 [0203.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x20 [0204.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF", dwFileAttributes=0x20) returned 0 [0204.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.912] GetLastError () returned 0x5 [0204.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF", dwFileAttributes=0x20) returned 0 [0204.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 7318 os_tid = 0x18b4 [0203.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid")) returned 0x20 [0204.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID", dwFileAttributes=0x20) returned 0 [0204.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.911] GetLastError () returned 0x5 [0204.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID", dwFileAttributes=0x20) returned 0 [0204.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b888) returned 1 Thread: id = 7319 os_tid = 0xb04 [0203.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf")) returned 0x20 [0204.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF", dwFileAttributes=0x20) returned 0 [0204.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.317] GetLastError () returned 0x5 [0204.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF", dwFileAttributes=0x20) returned 0 [0204.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ba20) returned 1 Thread: id = 7320 os_tid = 0x2688 [0203.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf")) returned 0x20 [0204.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF", dwFileAttributes=0x20) returned 0 [0204.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.959] GetLastError () returned 0x5 [0204.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF", dwFileAttributes=0x20) returned 0 [0204.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 Thread: id = 7321 os_tid = 0x268c [0203.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf")) returned 0x20 [0204.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF", dwFileAttributes=0x20) returned 0 [0204.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.958] GetLastError () returned 0x5 [0204.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF", dwFileAttributes=0x20) returned 0 [0204.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bdd8) returned 1 Thread: id = 7322 os_tid = 0x6f0 [0203.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf")) returned 0x20 [0204.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF", dwFileAttributes=0x20) returned 0 [0204.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.956] GetLastError () returned 0x5 [0204.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF", dwFileAttributes=0x20) returned 0 [0204.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3063428) returned 1 Thread: id = 7323 os_tid = 0x2694 [0203.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf")) returned 0x20 [0204.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF", dwFileAttributes=0x20) returned 0 [0204.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.954] GetLastError () returned 0x5 [0204.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF", dwFileAttributes=0x20) returned 0 [0204.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062a10) returned 1 Thread: id = 7324 os_tid = 0x2698 [0203.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf")) returned 0x20 [0204.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF", dwFileAttributes=0x20) returned 0 [0204.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.952] GetLastError () returned 0x5 [0204.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF", dwFileAttributes=0x20) returned 0 [0204.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 7325 os_tid = 0x19f8 [0203.835] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json")) returned 0x2020 [0203.836] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0214.497] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1740 [0214.503] GetFileSizeEx (in: hFile=0x1740, lpFileSize=0x1663f994 | out: lpFileSize=0x1663f994*=179) returned 1 [0214.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb08 [0214.503] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0214.503] NtQuerySystemTime (in: CurrentTime=0x1663f908 | out: CurrentTime=0x1663f908*=132462177930792000) returned 0x0 [0214.503] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x39b78828 [0214.503] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x57022bd6 [0214.503] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x37878f5b [0214.503] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x3c7a7b44 [0214.503] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x202a5525 [0214.503] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x62ffac68 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x7cbc2236 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x177c0968 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x5cbd7b3d [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x2ffda5ec [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x166bceaf [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x17fdb264 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x4ed10e7f [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x56ad113 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x7a1361ee [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x142ba0a9 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x3a8accdb [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x5be717de [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x67c51fc3 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x139c3c99 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x16e1fb1c [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x67de6caf [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x2833f804 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x45aae6ae [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x771f2ca2 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x6aa31cf6 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x37fd6c9d [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x19fbc77e [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x607199b0 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x4c5f2d0e [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x1252b776 [0214.504] RtlRandomEx (in: Seed=0x1663f900 | out: Seed=0x1663f900) returned 0x51bcb5d1 [0214.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.518] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a750b0 [0214.519] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a78cb8 [0214.519] ReadFile (in: hFile=0x1740, lpBuffer=0x7a750b0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1663f8fc, lpOverlapped=0x0 | out: lpBuffer=0x7a750b0*, lpNumberOfBytesRead=0x1663f8fc*=0xb3, lpOverlapped=0x0) returned 1 [0214.521] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.521] WriteFile (in: hFile=0x1740, lpBuffer=0x7a78cb8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1663f900, lpOverlapped=0x0 | out: lpBuffer=0x7a78cb8*, lpNumberOfBytesWritten=0x1663f900*=0xb3, lpOverlapped=0x0) returned 1 [0217.899] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5bf78 [0217.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5af60 [0217.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5af60) returned 1 [0217.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a78cb8) returned 1 [0217.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a750b0) returned 1 [0217.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f830) returned 1 [0217.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b847a0) returned 1 [0217.900] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c08 [0217.900] SetFilePointerEx (in: hFile=0x1740, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.900] WriteFile (in: hFile=0x1740, lpBuffer=0x7cd3948*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1663f988, lpOverlapped=0x0 | out: lpBuffer=0x7cd3948*, lpNumberOfBytesWritten=0x1663f988*=0x10c, lpOverlapped=0x0) returned 1 [0218.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53670 [0218.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53670) returned 1 [0218.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53670 [0218.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53a80 [0218.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53508 [0218.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53508) returned 1 [0218.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.374] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.374] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="30") returned 2 [0218.374] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="a9") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="c4") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="f7") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="14") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="33") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="47") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="71") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="c9") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="97") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="bd") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="62") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="d9") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="e9") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="c5") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="ad") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="be") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="88") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="4c") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="f6") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="fd") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="83") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="a0") returned 2 [0218.375] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="a5") returned 2 [0218.375] RtlInitAnsiString (in: DestinationString=0x1663f910, SourceString="30a9c4f714334771c997cabd62d9e9c5adbe884cf62ffd83a0a5" | out: DestinationString="30a9c4f714334771c997cabd62d9e9c5adbe884cf62ffd83a0a5") [0218.375] RtlAnsiStringToUnicodeString (in: DestinationString=0x1663f908, SourceString="30a9c4f714334771c997cabd62d9e9c5adbe884cf62ffd83a0a5", AllocateDestinationString=1 | out: DestinationString="30a9c4f714334771c997cabd62d9e9c5adbe884cf62ffd83a0a5") returned 0x0 [0218.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6ca68 [0224.875] __SEH_epilog4 () [0224.876] CloseHandle (hObject=0x237c) returned 1 [0224.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e090) returned 1 [0224.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd7618) returned 1 Thread: id = 7326 os_tid = 0x269c [0203.836] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json")) returned 0x2020 [0203.837] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0214.522] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1138 [0214.523] GetFileSizeEx (in: hFile=0x1138, lpFileSize=0x167af85c | out: lpFileSize=0x167af85c*=179) returned 1 [0214.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c108 [0214.523] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0214.523] NtQuerySystemTime (in: CurrentTime=0x167af7d0 | out: CurrentTime=0x167af7d0*=132462177930948000) returned 0x0 [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x433d9dd6 [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x6cf1a837 [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x7e1baa6c [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x5cd815bc [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x4f080a47 [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x45b7afc6 [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x436021e2 [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x792af33c [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x7c8aa967 [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x30b03582 [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x3ea5bd84 [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x87f669 [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x220e041a [0214.523] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x74c95627 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x55f4d088 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x3d8e0a5b [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x5009c672 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0xa05e066 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x30b241ac [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x67a4bb04 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x7f8cbd3 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x4eb09e63 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x336392da [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x557c37ce [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x1d3c93bd [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x3e401674 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0xb8e5a53 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x749091e6 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x707be683 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x3ce3b2d7 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x10d58883 [0214.524] RtlRandomEx (in: Seed=0x167af7c8 | out: Seed=0x167af7c8) returned 0x3f8e9f54 [0214.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a7c8c0 [0214.535] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a804c8 [0214.535] ReadFile (in: hFile=0x1138, lpBuffer=0x7a7c8c0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x167af7c4, lpOverlapped=0x0 | out: lpBuffer=0x7a7c8c0*, lpNumberOfBytesRead=0x167af7c4*=0xb3, lpOverlapped=0x0) returned 1 [0214.537] SetFilePointerEx (in: hFile=0x1138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.537] WriteFile (in: hFile=0x1138, lpBuffer=0x7a804c8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x167af7c8, lpOverlapped=0x0 | out: lpBuffer=0x7a804c8*, lpNumberOfBytesWritten=0x167af7c8*=0xb3, lpOverlapped=0x0) returned 1 [0217.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a510 [0217.166] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5abf0 [0217.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5abf0) returned 1 [0217.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a804c8) returned 1 [0217.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a7c8c0) returned 1 [0217.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0217.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b843f8) returned 1 [0217.167] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38160 [0217.167] SetFilePointerEx (in: hFile=0x1138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.167] WriteFile (in: hFile=0x1138, lpBuffer=0x7cd2020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x167af850, lpOverlapped=0x0 | out: lpBuffer=0x7cd2020*, lpNumberOfBytesWritten=0x167af850*=0x10c, lpOverlapped=0x0) returned 1 [0218.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c568 [0218.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c568) returned 1 [0218.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c568 [0218.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3e8 [0218.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c950 [0218.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c950) returned 1 [0218.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.283] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.283] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="83") returned 2 [0218.283] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="ae") returned 2 [0218.283] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="63") returned 2 [0218.283] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="d0") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="da") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="c1") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="fb") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="7e") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="72") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="f8") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="17") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="a3") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="75") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="7c") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="63") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="f7") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="63") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="b3") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="90") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="a5") returned 2 [0218.285] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="3e") returned 2 [0218.286] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="a6") returned 2 [0218.286] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="61") returned 2 [0218.286] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="92") returned 2 [0218.286] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="6b") returned 2 [0218.286] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="8f") returned 2 [0218.286] RtlInitAnsiString (in: DestinationString=0x167af7d8, SourceString="83ae63d0dac1fb7e72f817a3757c63f763b390a53ea661926b8f" | out: DestinationString="83ae63d0dac1fb7e72f817a3757c63f763b390a53ea661926b8f") [0218.286] RtlAnsiStringToUnicodeString (in: DestinationString=0x167af7d0, SourceString="83ae63d0dac1fb7e72f817a3757c63f763b390a53ea661926b8f", AllocateDestinationString=1 | out: DestinationString="83ae63d0dac1fb7e72f817a3757c63f763b390a53ea661926b8f") returned 0x0 [0218.286] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c2e8 [0224.832] __SEH_epilog4 () [0224.832] CloseHandle (hObject=0x1694) returned 1 [0224.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f068) returned 1 [0224.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd7740) returned 1 Thread: id = 7327 os_tid = 0x26a0 [0203.837] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json")) returned 0x2020 [0203.837] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0214.537] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe5c [0214.538] GetFileSizeEx (in: hFile=0xe5c, lpFileSize=0x1719fb6c | out: lpFileSize=0x1719fb6c*=179) returned 1 [0214.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.538] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6b8 [0214.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c860 [0214.539] NtQuerySystemTime (in: CurrentTime=0x1719fae0 | out: CurrentTime=0x1719fae0*=132462177931104000) returned 0x0 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x201595c4 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x7375a13 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x2e0f9961 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x7052554b [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x42e736eb [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0xc090140 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x58b0a33e [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x62e30e23 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0xe6a1305 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x19bd353a [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x4d1a0548 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x5d01fe66 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x2a1fa293 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x5d95e04d [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x5009c672 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x71afe65c [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x3ba45619 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x5b30a015 [0214.539] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x641c57c8 [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x1f7e6b93 [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x5a4fe1fa [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x3b9bff6a [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x7c6db1f0 [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x4bbe2334 [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x23179901 [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x3423c3ff [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x16b5500c [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x3d5ecc43 [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x61d8eaab [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x50fc668b [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x43e6f859 [0214.540] RtlRandomEx (in: Seed=0x1719fad8 | out: Seed=0x1719fad8) returned 0x3e619eec [0214.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a840d0 [0214.551] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a87cd8 [0214.551] ReadFile (in: hFile=0xe5c, lpBuffer=0x7a840d0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1719fad4, lpOverlapped=0x0 | out: lpBuffer=0x7a840d0*, lpNumberOfBytesRead=0x1719fad4*=0xb3, lpOverlapped=0x0) returned 1 [0214.554] SetFilePointerEx (in: hFile=0xe5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.554] WriteFile (in: hFile=0xe5c, lpBuffer=0x7a87cd8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1719fad8, lpOverlapped=0x0 | out: lpBuffer=0x7a87cd8*, lpNumberOfBytesWritten=0x1719fad8*=0xb3, lpOverlapped=0x0) returned 1 [0217.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a9c0 [0217.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e1d8 [0217.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e1d8) returned 1 [0217.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a87cd8) returned 1 [0217.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a840d0) returned 1 [0217.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f218) returned 1 [0217.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86210) returned 1 [0217.173] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37710 [0217.174] SetFilePointerEx (in: hFile=0xe5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.174] WriteFile (in: hFile=0xe5c, lpBuffer=0x7cd2368*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1719fb60, lpOverlapped=0x0 | out: lpBuffer=0x7cd2368*, lpNumberOfBytesWritten=0x1719fb60*=0x10c, lpOverlapped=0x0) returned 1 [0218.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b3c0 [0218.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b3c0) returned 1 [0218.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b3c0 [0218.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b398 [0218.298] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c860 [0218.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c860) returned 1 [0218.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.299] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.299] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="e9") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="69") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="d6") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="88") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="93") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="88") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="01") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="4a") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="d3") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="91") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="16") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="59") returned 2 [0218.299] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="69") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="74") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="5e") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="79") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="d7") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="3b") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="6b") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="5b") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="f4") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="88") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="6e") returned 2 [0218.300] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="7d") returned 2 [0218.300] RtlInitAnsiString (in: DestinationString=0x1719fae8, SourceString="e969ddd6889388014ad391ca165969745e79d73b6b5bf4886e7d" | out: DestinationString="e969ddd6889388014ad391ca165969745e79d73b6b5bf4886e7d") [0218.300] RtlAnsiStringToUnicodeString (in: DestinationString=0x1719fae0, SourceString="e969ddd6889388014ad391ca165969745e79d73b6b5bf4886e7d", AllocateDestinationString=1 | out: DestinationString="e969ddd6889388014ad391ca165969745e79d73b6b5bf4886e7d") returned 0x0 [0218.300] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cf90 [0224.840] __SEH_epilog4 () [0224.840] CloseHandle (hObject=0x1d78) returned 1 [0224.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5ef30) returned 1 [0224.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd7868) returned 1 Thread: id = 7328 os_tid = 0x480 [0203.838] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json")) returned 0x2020 [0203.839] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", dwFileAttributes=0x20) returned 1 [0214.554] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2408 [0214.555] GetFileSizeEx (in: hFile=0x2408, lpFileSize=0x171dfa74 | out: lpFileSize=0x171dfa74*=179) returned 1 [0214.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c860 [0214.555] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0214.556] NtQuerySystemTime (in: CurrentTime=0x171df9e8 | out: CurrentTime=0x171df9e8*=132462177931416000) returned 0x0 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x48ba7f33 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x282c77e2 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x58db7bfe [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x362f1975 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x366ad96d [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x4b963896 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x2700bda7 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x1e7d4c6d [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x5d77d529 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0xc48572e [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x4697c2db [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x4394855b [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x14eeb3df [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x31cce0e2 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x275de942 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x6db2b3fb [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x1f03bcff [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x4af49c55 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x2cdf91da [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x37def5cb [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x2c7cb612 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x2edc10d0 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x4d8d906b [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x52db3be7 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x51f438e1 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x5ca4928b [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x1c135469 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x3113826e [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x26621c23 [0214.556] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x4eb23e56 [0214.557] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x486023f1 [0214.557] RtlRandomEx (in: Seed=0x171df9e0 | out: Seed=0x171df9e0) returned 0x71fdcf8c [0214.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a8b8e0 [0214.566] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a8f4e8 [0214.567] ReadFile (in: hFile=0x2408, lpBuffer=0x7a8b8e0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x171df9dc, lpOverlapped=0x0 | out: lpBuffer=0x7a8b8e0*, lpNumberOfBytesRead=0x171df9dc*=0xb3, lpOverlapped=0x0) returned 1 [0214.569] SetFilePointerEx (in: hFile=0x2408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.569] WriteFile (in: hFile=0x2408, lpBuffer=0x7a8f4e8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x171df9e0, lpOverlapped=0x0 | out: lpBuffer=0x7a8f4e8*, lpNumberOfBytesWritten=0x171df9e0*=0xb3, lpOverlapped=0x0) returned 1 [0217.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b668 [0217.171] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b078 [0217.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b078) returned 1 [0217.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8f4e8) returned 1 [0217.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a8b8e0) returned 1 [0217.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f038) returned 1 [0217.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b861c8) returned 1 [0217.172] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a378f0 [0217.172] SetFilePointerEx (in: hFile=0x2408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.172] WriteFile (in: hFile=0x2408, lpBuffer=0x7cd2250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x171dfa68, lpOverlapped=0x0 | out: lpBuffer=0x7cd2250*, lpNumberOfBytesWritten=0x171dfa68*=0x10c, lpOverlapped=0x0) returned 1 [0218.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4c8 [0218.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4c8) returned 1 [0218.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c4c8 [0218.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be10 [0218.293] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c748 [0218.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c748) returned 1 [0218.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.294] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.294] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="42") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="fe") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="23") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="a4") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="94") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="0e") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="46") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="64") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="74") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="f1") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="f2") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="73") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="cb") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="8e") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="43") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="0b") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="42") returned 2 [0218.294] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="1a") returned 2 [0218.295] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="32") returned 2 [0218.295] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="a0") returned 2 [0218.295] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="8b") returned 2 [0218.295] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="fe") returned 2 [0218.295] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="73") returned 2 [0218.295] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="62") returned 2 [0218.295] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="d8") returned 2 [0218.295] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="e9") returned 2 [0218.295] RtlInitAnsiString (in: DestinationString=0x171df9f0, SourceString="42fe23a4940e466474f1f273cb8e430b421a32a08bfe7362d8e9" | out: DestinationString="42fe23a4940e466474f1f273cb8e430b421a32a08bfe7362d8e9") [0218.295] RtlAnsiStringToUnicodeString (in: DestinationString=0x171df9e8, SourceString="42fe23a4940e466474f1f273cb8e430b421a32a08bfe7362d8e9", AllocateDestinationString=1 | out: DestinationString="42fe23a4940e466474f1f273cb8e430b421a32a08bfe7362d8e9") returned 0x0 [0218.295] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c5b8 [0224.837] __SEH_epilog4 () [0224.837] CloseHandle (hObject=0xc30) returned 1 [0224.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e7e0) returned 1 [0224.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd7990) returned 1 Thread: id = 7329 os_tid = 0x19fc [0203.839] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json")) returned 0x2020 [0203.839] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0214.569] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xacc [0214.570] GetFileSizeEx (in: hFile=0xacc, lpFileSize=0x92ffaac | out: lpFileSize=0x92ffaac*=179) returned 1 [0214.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0214.571] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b708 [0214.571] NtQuerySystemTime (in: CurrentTime=0x92ffa20 | out: CurrentTime=0x92ffa20*=132462177931572000) returned 0x0 [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x453ab24c [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x2c13e0e1 [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x4efb40fc [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x60072a36 [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x1ebf7fb0 [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x74ca282 [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x586b5a65 [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x72d6214e [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0xb0406a5 [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x28750a75 [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x1694be3d [0214.571] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x7aad556c [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x2c95c97a [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x1a1cd3c [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x2a9423ce [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x551c2c2a [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x154f234f [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x3efda4a6 [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x8573dad [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x3acd01bf [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x62d06a0 [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x7081aaec [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x7f982fd8 [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x10c7c3f0 [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x6d9302d4 [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x669a2feb [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x1879f9f9 [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x42d878b5 [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0xbbb0be8 [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x7fd0599 [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x69dda998 [0214.572] RtlRandomEx (in: Seed=0x92ffa18 | out: Seed=0x92ffa18) returned 0x5805403e [0214.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a930f0 [0214.582] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a96cf8 [0214.582] ReadFile (in: hFile=0xacc, lpBuffer=0x7a930f0, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x92ffa14, lpOverlapped=0x0 | out: lpBuffer=0x7a930f0*, lpNumberOfBytesRead=0x92ffa14*=0xb3, lpOverlapped=0x0) returned 1 [0214.584] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.584] WriteFile (in: hFile=0xacc, lpBuffer=0x7a96cf8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x92ffa18, lpOverlapped=0x0 | out: lpBuffer=0x7a96cf8*, lpNumberOfBytesWritten=0x92ffa18*=0xb3, lpOverlapped=0x0) returned 1 [0217.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac40 [0217.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac90 [0217.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ac90) returned 1 [0217.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a96cf8) returned 1 [0217.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a930f0) returned 1 [0217.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f3f8) returned 1 [0217.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86138) returned 1 [0217.903] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86b18 [0217.903] SetFilePointerEx (in: hFile=0xacc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.903] WriteFile (in: hFile=0xacc, lpBuffer=0x7cd3b78*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x92ffaa0, lpOverlapped=0x0 | out: lpBuffer=0x7cd3b78*, lpNumberOfBytesWritten=0x92ffaa0*=0x10c, lpOverlapped=0x0) returned 1 [0218.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4f0 [0218.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c4f0) returned 1 [0218.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c4f0 [0218.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c478 [0218.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b708 [0218.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b708) returned 1 [0218.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.388] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.388] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="77") returned 2 [0218.388] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="78") returned 2 [0218.388] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="f0") returned 2 [0218.388] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="34") returned 2 [0218.388] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="d9") returned 2 [0218.388] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="14") returned 2 [0218.388] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="4d") returned 2 [0218.388] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="fd") returned 2 [0218.388] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="9b") returned 2 [0218.388] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="9f") returned 2 [0218.388] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="70") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="15") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="d8") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="c0") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="06") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="a1") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="2f") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="b3") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="b2") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="c0") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="2a") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="47") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="f3") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="aa") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="fa") returned 2 [0218.389] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="39") returned 2 [0218.389] RtlInitAnsiString (in: DestinationString=0x92ffa28, SourceString="7778f034d9144dfd9b9f7015d8c006a12fb3b2c02a47f3aafa39" | out: DestinationString="7778f034d9144dfd9b9f7015d8c006a12fb3b2c02a47f3aafa39") [0218.389] RtlAnsiStringToUnicodeString (in: DestinationString=0x92ffa20, SourceString="7778f034d9144dfd9b9f7015d8c006a12fb3b2c02a47f3aafa39", AllocateDestinationString=1 | out: DestinationString="7778f034d9144dfd9b9f7015d8c006a12fb3b2c02a47f3aafa39") returned 0x0 [0218.389] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6cf18 [0224.883] __SEH_epilog4 () [0224.884] CloseHandle (hObject=0x104c) returned 1 [0224.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5eb88) returned 1 [0224.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd7ab8) returned 1 Thread: id = 7330 os_tid = 0x26a4 [0203.841] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json")) returned 0x2020 [0203.841] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0214.585] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1228 [0214.586] GetFileSizeEx (in: hFile=0x1228, lpFileSize=0x12cefa4c | out: lpFileSize=0x12cefa4c*=179) returned 1 [0214.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b708 [0214.586] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0214.586] NtQuerySystemTime (in: CurrentTime=0x12cef9c0 | out: CurrentTime=0x12cef9c0*=132462177931728000) returned 0x0 [0214.586] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x7c4fe3ad [0214.586] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x137761a5 [0214.586] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x57da677e [0214.586] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x1440c969 [0214.586] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x629f918b [0214.586] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x70842634 [0214.586] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x3d795365 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x5ae8801c [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x67405ee8 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x7a60635d [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x9c69168 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x75dc1c8a [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x22a495b3 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x65390328 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x3cd3ffe6 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x7b8c555f [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x6893d000 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x672bfc79 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x219b2227 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x404e4c4 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x7581927e [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x58b10ebc [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x1cb02ece [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x19f8c9b9 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x4fa17b5b [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x3ee83f33 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x7d44133b [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x84b7ad0 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x313f8cf2 [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x57af8ebe [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0xbe83afb [0214.587] RtlRandomEx (in: Seed=0x12cef9b8 | out: Seed=0x12cef9b8) returned 0x259b5fb5 [0214.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9a900 [0214.598] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7a9e508 [0214.598] ReadFile (in: hFile=0x1228, lpBuffer=0x7a9a900, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x12cef9b4, lpOverlapped=0x0 | out: lpBuffer=0x7a9a900*, lpNumberOfBytesRead=0x12cef9b4*=0xb3, lpOverlapped=0x0) returned 1 [0214.601] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.601] WriteFile (in: hFile=0x1228, lpBuffer=0x7a9e508*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12cef9b8, lpOverlapped=0x0 | out: lpBuffer=0x7a9e508*, lpNumberOfBytesWritten=0x12cef9b8*=0xb3, lpOverlapped=0x0) returned 1 [0217.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ac68 [0217.901] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b500 [0217.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b500) returned 1 [0217.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9e508) returned 1 [0217.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a9a900) returned 1 [0217.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fce0) returned 1 [0217.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b860f0) returned 1 [0217.902] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86b78 [0217.902] SetFilePointerEx (in: hFile=0x1228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.902] WriteFile (in: hFile=0x1228, lpBuffer=0x7cd3a60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12cefa40, lpOverlapped=0x0 | out: lpBuffer=0x7cd3a60*, lpNumberOfBytesWritten=0x12cefa40*=0x10c, lpOverlapped=0x0) returned 1 [0218.383] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53c60 [0218.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53c60) returned 1 [0218.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53c60 [0218.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53d00 [0218.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52ea0 [0218.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52ea0) returned 1 [0218.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.384] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="15") returned 2 [0218.384] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="8a") returned 2 [0218.384] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.384] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="39") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="37") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="b0") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="0f") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="0d") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="af") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="49") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="6f") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="b6") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="eb") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="92") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="41") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="d3") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="2b") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="ac") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="99") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="0b") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="8c") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="24") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="80") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="a4") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="67") returned 2 [0218.385] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="64") returned 2 [0218.385] RtlInitAnsiString (in: DestinationString=0x12cef9c8, SourceString="158ae63937b00f0daf496fb6eb9241d32bac990b8c2480a46764" | out: DestinationString="158ae63937b00f0daf496fb6eb9241d32bac990b8c2480a46764") [0218.385] RtlAnsiStringToUnicodeString (in: DestinationString=0x12cef9c0, SourceString="158ae63937b00f0daf496fb6eb9241d32bac990b8c2480a46764", AllocateDestinationString=1 | out: DestinationString="158ae63937b00f0daf496fb6eb9241d32bac990b8c2480a46764") returned 0x0 [0218.385] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6ce28 [0224.881] __SEH_epilog4 () [0224.881] CloseHandle (hObject=0x2368) returned 1 [0224.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5edf8) returned 1 [0224.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd7be0) returned 1 Thread: id = 7331 os_tid = 0xb90 [0203.841] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json")) returned 0x2020 [0203.842] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0214.601] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x944 [0214.602] GetFileSizeEx (in: hFile=0x944, lpFileSize=0x1296f8e4 | out: lpFileSize=0x1296f8e4*=179) returned 1 [0214.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0214.602] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0214.602] NtQuerySystemTime (in: CurrentTime=0x1296f858 | out: CurrentTime=0x1296f858*=132462177931884000) returned 0x0 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x7c65723f [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x55a7f65b [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x58bb15b9 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x623d9855 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x1c28039c [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x63c179a3 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x72556e00 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x4c1147b5 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x7c9c929e [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x5689055f [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x1ba6fdbf [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x75fe43b3 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x310364b6 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x1cb117b0 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x7ad538f6 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x26c8f4ff [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x16318c16 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x37a7e9fb [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x749267e2 [0214.603] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x94b7f2b [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0xc0bd833 [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x1371d65f [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x2d7822a1 [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x6ec7dd8d [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x3bc626ab [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x44635df2 [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x7f0a0f36 [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x7e67fd62 [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x3918018f [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x102e5cb2 [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x1656171a [0214.604] RtlRandomEx (in: Seed=0x1296f850 | out: Seed=0x1296f850) returned 0x517e933a [0214.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa2110 [0214.617] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa5d18 [0214.617] ReadFile (in: hFile=0x944, lpBuffer=0x7aa2110, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1296f84c, lpOverlapped=0x0 | out: lpBuffer=0x7aa2110*, lpNumberOfBytesRead=0x1296f84c*=0xb3, lpOverlapped=0x0) returned 1 [0214.620] SetFilePointerEx (in: hFile=0x944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.620] WriteFile (in: hFile=0x944, lpBuffer=0x7aa5d18*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1296f850, lpOverlapped=0x0 | out: lpBuffer=0x7aa5d18*, lpNumberOfBytesWritten=0x1296f850*=0xb3, lpOverlapped=0x0) returned 1 [0217.921] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b4b0 [0217.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a678 [0217.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5a678) returned 1 [0217.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa5d18) returned 1 [0217.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa2110) returned 1 [0217.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f470) returned 1 [0217.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85f88) returned 1 [0217.922] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86a58 [0217.923] SetFilePointerEx (in: hFile=0x944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.923] WriteFile (in: hFile=0x944, lpBuffer=0x7cd3c90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1296f8d8, lpOverlapped=0x0 | out: lpBuffer=0x7cd3c90*, lpNumberOfBytesWritten=0x1296f8d8*=0x10c, lpOverlapped=0x0) returned 1 [0218.391] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c540 [0218.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c540) returned 1 [0218.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c540 [0218.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd60 [0218.392] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bd70 [0218.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bd70) returned 1 [0218.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.413] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.415] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="a5") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="46") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="91") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="b1") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="b7") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="cc") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="db") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="70") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="27") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="69") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="6d") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="da") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="29") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="d2") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="1c") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="a7") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="66") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="d7") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="4f") returned 2 [0218.415] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="00") returned 2 [0218.416] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="33") returned 2 [0218.416] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="35") returned 2 [0218.416] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="b8") returned 2 [0218.416] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="27") returned 2 [0218.416] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="5a") returned 2 [0218.416] RtlInitAnsiString (in: DestinationString=0x1296f860, SourceString="a54691b1e6b7ccdb7027696dda29d21ca766d74f003335b8275a" | out: DestinationString="a54691b1e6b7ccdb7027696dda29d21ca766d74f003335b8275a") [0218.416] RtlAnsiStringToUnicodeString (in: DestinationString=0x1296f858, SourceString="a54691b1e6b7ccdb7027696dda29d21ca766d74f003335b8275a", AllocateDestinationString=1 | out: DestinationString="a54691b1e6b7ccdb7027696dda29d21ca766d74f003335b8275a") returned 0x0 [0218.416] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c978 [0224.886] __SEH_epilog4 () [0224.886] CloseHandle (hObject=0x1f90) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f7b8) returned 1 [0224.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd7d08) returned 1 Thread: id = 7332 os_tid = 0x1a00 [0203.842] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json")) returned 0x2020 [0203.842] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0214.620] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1220 [0214.621] GetFileSizeEx (in: hFile=0x1220, lpFileSize=0x12b9fc54 | out: lpFileSize=0x12b9fc54*=179) returned 1 [0214.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0214.621] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0214.621] NtQuerySystemTime (in: CurrentTime=0x12b9fbc8 | out: CurrentTime=0x12b9fbc8*=132462177932040000) returned 0x0 [0214.621] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x7f5929fd [0214.621] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x26c16bc2 [0214.621] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x52fbec8 [0214.621] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x3f56a760 [0214.621] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x879e412 [0214.621] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x70649cf2 [0214.621] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x40b36c88 [0214.621] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x9544c54 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x49d7f0f5 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x3cfdb096 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x1e7db755 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x447fb50d [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x7f877350 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x11eaa9c6 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x44f5411c [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x5885ca7e [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x27c54384 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x754cfaca [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x4ba9cccc [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x4016aacc [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x322ad54d [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x3629952f [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x87f3248 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x45dec5d0 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x1187000a [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x20346cf6 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x1d3c4366 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x6b06c5d6 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x3ca532c [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x6f7f6554 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x57bafef4 [0214.622] RtlRandomEx (in: Seed=0x12b9fbc0 | out: Seed=0x12b9fbc0) returned 0x290adfcc [0214.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aa9920 [0214.633] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7aad528 [0214.634] ReadFile (in: hFile=0x1220, lpBuffer=0x7aa9920, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x12b9fbbc, lpOverlapped=0x0 | out: lpBuffer=0x7aa9920*, lpNumberOfBytesRead=0x12b9fbbc*=0xb3, lpOverlapped=0x0) returned 1 [0214.636] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.636] WriteFile (in: hFile=0x1220, lpBuffer=0x7aad528*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12b9fbc0, lpOverlapped=0x0 | out: lpBuffer=0x7aad528*, lpNumberOfBytesWritten=0x12b9fbc0*=0xb3, lpOverlapped=0x0) returned 1 [0217.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b2f8 [0217.923] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ad58 [0217.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ad58) returned 1 [0217.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aad528) returned 1 [0217.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7aa9920) returned 1 [0217.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f6c8) returned 1 [0217.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85f40) returned 1 [0217.924] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86ab8 [0217.924] SetFilePointerEx (in: hFile=0x1220, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.925] WriteFile (in: hFile=0x1220, lpBuffer=0x7cd3da8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12b9fc48, lpOverlapped=0x0 | out: lpBuffer=0x7cd3da8*, lpNumberOfBytesWritten=0x12b9fc48*=0x10c, lpOverlapped=0x0) returned 1 [0218.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c888 [0218.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c888) returned 1 [0218.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c888 [0218.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c220 [0218.418] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6a8 [0218.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c6a8) returned 1 [0218.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.419] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.419] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="f5") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="c1") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="31") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="30") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="41") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="97") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="54") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="b5") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="58") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="fe") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="ec") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="34") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="f0") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="e5") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="df") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="38") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="51") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="83") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="8c") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.419] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="61") returned 2 [0218.420] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="c3") returned 2 [0218.420] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="9b") returned 2 [0218.420] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="de") returned 2 [0218.420] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="88") returned 2 [0218.420] RtlInitAnsiString (in: DestinationString=0x12b9fbd0, SourceString="f5c13130419754b52d58feec34f0e5df3851838c2d61c39bde88" | out: DestinationString="f5c13130419754b52d58feec34f0e5df3851838c2d61c39bde88") [0218.420] RtlAnsiStringToUnicodeString (in: DestinationString=0x12b9fbc8, SourceString="f5c13130419754b52d58feec34f0e5df3851838c2d61c39bde88", AllocateDestinationString=1 | out: DestinationString="f5c13130419754b52d58feec34f0e5df3851838c2d61c39bde88") returned 0x0 [0218.420] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3de00 [0224.889] __SEH_epilog4 () [0224.889] CloseHandle (hObject=0x123c) returned 1 [0224.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5e438) returned 1 [0224.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd7e30) returned 1 Thread: id = 7333 os_tid = 0x1a04 [0203.843] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json")) returned 0x2020 [0204.397] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", dwFileAttributes=0x20) returned 1 [0215.123] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2418 [0215.124] GetFileSizeEx (in: hFile=0x2418, lpFileSize=0x12c5f784 | out: lpFileSize=0x12c5f784*=253) returned 1 [0215.124] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.124] ReadFile (in: hFile=0x2418, lpBuffer=0x12c5f760, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12c5f770, lpOverlapped=0x0 | out: lpBuffer=0x12c5f760*, lpNumberOfBytesRead=0x12c5f770*=0x4, lpOverlapped=0x0) returned 1 [0215.125] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0215.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0215.126] NtQuerySystemTime (in: CurrentTime=0x12c5f6f8 | out: CurrentTime=0x12c5f6f8*=132462177937032000) returned 0x0 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x3d4b99a7 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x533a80f5 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x4a68b678 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x7784c9c0 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x60512a4a [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x1a60f2d7 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x2c86f498 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x3b348d55 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x6c305711 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x6bce90f4 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x6499e082 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x3d54ecf3 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x5efc462c [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x2c7caea5 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x2c7caea5 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x34f5ea9b [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x3f0177c [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x67b5a44c [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x564e0fc1 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x6ebfac1e [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0xc023d04 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x3f97701 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x997f545 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x52c02982 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x2955dc91 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x6d2e3691 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x57cbd3cc [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x2f87fcd8 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x1427b845 [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x702a2d1e [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x5a67d4ca [0215.126] RtlRandomEx (in: Seed=0x12c5f6f0 | out: Seed=0x12c5f6f0) returned 0x41dbf786 [0215.134] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.134] WriteFile (in: hFile=0x2418, lpBuffer=0x10eb9478*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x12c5f6f0, lpOverlapped=0x0 | out: lpBuffer=0x10eb9478*, lpNumberOfBytesWritten=0x12c5f6f0*=0xfd, lpOverlapped=0x0) returned 1 [0217.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a4e8 [0217.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5add0 [0217.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5add0) returned 1 [0217.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eb9478) returned 1 [0217.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10eb5870) returned 1 [0217.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c2e8) returned 1 [0217.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48cc0) returned 1 [0217.895] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85d68 [0217.895] SetFilePointerEx (in: hFile=0x2418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.896] WriteFile (in: hFile=0x2418, lpBuffer=0x7cd3600*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12c5f778, lpOverlapped=0x0 | out: lpBuffer=0x7cd3600*, lpNumberOfBytesWritten=0x12c5f778*=0x10c, lpOverlapped=0x0) returned 1 [0221.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b859a0 [0221.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3015058 [0221.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0221.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0221.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec6710 [0221.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0221.006] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0221.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e20) returned 1 [0221.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015058) returned 1 [0221.007] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b859a0) returned 1 [0221.007] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0221.007] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="7e") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="f6") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="6f") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="c2") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="20") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="f2") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="76") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="af") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="db") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="f5") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="70") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="7b") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="9b") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="ef") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="38") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="22") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="57") returned 2 [0221.007] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="19") returned 2 [0221.008] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="c9") returned 2 [0221.008] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="64") returned 2 [0221.008] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="06") returned 2 [0221.008] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="dc") returned 2 [0221.008] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="71") returned 2 [0221.008] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="00") returned 2 [0221.008] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="c9") returned 2 [0221.008] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="65") returned 2 [0221.008] RtlInitAnsiString (in: DestinationString=0x12c5f700, SourceString="7ef66fc220f276afdbf5707b9bef38225719c96406dc7100c965" | out: DestinationString="7ef66fc220f276afdbf5707b9bef38225719c96406dc7100c965") [0221.008] RtlAnsiStringToUnicodeString (in: DestinationString=0x12c5f6f8, SourceString="7ef66fc220f276afdbf5707b9bef38225719c96406dc7100c965", AllocateDestinationString=1 | out: DestinationString="7ef66fc220f276afdbf5707b9bef38225719c96406dc7100c965") returned 0x0 [0221.008] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3015490 [0224.148] CloseHandle (hObject=0x2250) returned 1 [0224.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7720) returned 1 [0224.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfe30) returned 1 Thread: id = 7334 os_tid = 0x1a08 [0203.843] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json")) returned 0x2020 [0204.394] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", dwFileAttributes=0x20) returned 1 [0215.495] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xc90 [0215.496] GetFileSizeEx (in: hFile=0xc90, lpFileSize=0x1722f8e4 | out: lpFileSize=0x1722f8e4*=256) returned 1 [0215.496] SetFilePointerEx (in: hFile=0xc90, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.496] ReadFile (in: hFile=0xc90, lpBuffer=0x1722f8c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1722f8d0, lpOverlapped=0x0 | out: lpBuffer=0x1722f8c0*, lpNumberOfBytesRead=0x1722f8d0*=0x4, lpOverlapped=0x0) returned 1 [0215.498] SetFilePointerEx (in: hFile=0xc90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0215.498] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec28b8 [0215.498] NtQuerySystemTime (in: CurrentTime=0x1722f858 | out: CurrentTime=0x1722f858*=132462177940776000) returned 0x0 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x63f21da5 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x6df493ec [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x13e35762 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x582db8c2 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x4ea5d63e [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0xe6e4dbb [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x11492fa9 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x6ffece19 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x28d9f972 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x3297299f [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x4e7afd7e [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x3e083e02 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x101b6356 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0xf6796d7 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x3f24e962 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x371a8d04 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x53a8d83a [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x31b0f1db [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x6eb7e5af [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x1e87e2c6 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x75ca2edf [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x2f00fab8 [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x7c3e889b [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x4100a26f [0215.498] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x2d8cc346 [0215.499] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0xac6ece6 [0215.499] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x6d041408 [0215.499] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x439a64cc [0215.499] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x4d27804 [0215.499] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x4e5024be [0215.499] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x62a9bcfc [0215.499] RtlRandomEx (in: Seed=0x1722f850 | out: Seed=0x1722f850) returned 0x63341cac [0215.507] SetFilePointerEx (in: hFile=0xc90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.507] WriteFile (in: hFile=0xc90, lpBuffer=0x10e358b0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1722f850, lpOverlapped=0x0 | out: lpBuffer=0x10e358b0*, lpNumberOfBytesWritten=0x1722f850*=0x100, lpOverlapped=0x0) returned 1 [0220.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0220.818] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0220.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fb0) returned 1 [0220.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e358b0) returned 1 [0220.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e31ca8) returned 1 [0220.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b6a8) returned 1 [0220.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8188) returned 1 [0220.819] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e863c8 [0220.819] SetFilePointerEx (in: hFile=0xc90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.819] WriteFile (in: hFile=0xc90, lpBuffer=0x7cd2c28*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1722f8d8, lpOverlapped=0x0 | out: lpBuffer=0x7cd2c28*, lpNumberOfBytesWritten=0x1722f8d8*=0x10c, lpOverlapped=0x0) returned 1 [0223.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0223.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3f10 [0223.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3f10) returned 1 [0223.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3f10 [0223.048] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4398 [0223.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0223.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2d18) returned 1 [0223.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0223.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.049] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.049] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="45") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="2b") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="23") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="f9") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="d4") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="71") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="6b") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="41") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="7e") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="d1") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="f2") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="ed") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="af") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="c9") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="f3") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="43") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="bd") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="6c") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="e3") returned 2 [0223.049] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="3e") returned 2 [0223.050] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="49") returned 2 [0223.050] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="c8") returned 2 [0223.050] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="72") returned 2 [0223.050] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="b1") returned 2 [0223.050] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="41") returned 2 [0223.050] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="3a") returned 2 [0223.050] RtlInitAnsiString (in: DestinationString=0x1722f860, SourceString="452b23f9d4716b417ed1f2edafc9f343bd6ce33e49c872b1413a" | out: DestinationString="452b23f9d4716b417ed1f2edafc9f343bd6ce33e49c872b1413a") [0223.050] RtlAnsiStringToUnicodeString (in: DestinationString=0x1722f858, SourceString="452b23f9d4716b417ed1f2edafc9f343bd6ce33e49c872b1413a", AllocateDestinationString=1 | out: DestinationString="452b23f9d4716b417ed1f2edafc9f343bd6ce33e49c872b1413a") returned 0x0 [0223.050] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a234a0 [0224.211] CloseHandle (hObject=0x2250) returned 1 [0224.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3178) returned 1 [0224.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf3c8) returned 1 Thread: id = 7335 os_tid = 0x1a0c [0203.844] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json")) returned 0x2020 [0203.844] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", dwFileAttributes=0x20) returned 1 [0214.636] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf70 [0214.637] GetFileSizeEx (in: hFile=0xf70, lpFileSize=0x1702fc0c | out: lpFileSize=0x1702fc0c*=271) returned 1 [0214.637] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x10b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.637] ReadFile (in: hFile=0xf70, lpBuffer=0x1702fbe8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1702fbf8, lpOverlapped=0x0 | out: lpBuffer=0x1702fbe8*, lpNumberOfBytesRead=0x1702fbf8*=0x4, lpOverlapped=0x0) returned 1 [0214.639] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.639] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c810 [0214.640] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0214.640] NtQuerySystemTime (in: CurrentTime=0x1702fb80 | out: CurrentTime=0x1702fb80*=132462177932196000) returned 0x0 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0xe422852 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x631560bf [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x7f7d69fb [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x78fd0052 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x651feb01 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x9117147 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x5759dd3e [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x5b1451e9 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x1f392516 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x2cfee2c1 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x4259eba5 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x325c5b67 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x58676ab2 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x1ee94343 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x5edf5261 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x7b9cb543 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x797d090f [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x3c505673 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x3e7b77f7 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x3b65991a [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x46d0702c [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x7794dcc2 [0214.640] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x6a5d9f09 [0214.641] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x12a447b0 [0214.641] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x584d7adf [0214.641] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x423f7c2b [0214.641] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x61f946a2 [0214.641] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x43844111 [0214.641] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x8aab1aa [0214.641] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x7b204727 [0214.641] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x5781b450 [0214.641] RtlRandomEx (in: Seed=0x1702fb78 | out: Seed=0x1702fb78) returned 0x19ad81b7 [0214.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.651] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ab1130 [0214.652] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dd0060 [0214.661] ReadFile (in: hFile=0xf70, lpBuffer=0x7ab1130, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x1702fb74, lpOverlapped=0x0 | out: lpBuffer=0x7ab1130*, lpNumberOfBytesRead=0x1702fb74*=0x10f, lpOverlapped=0x0) returned 1 [0214.661] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.661] WriteFile (in: hFile=0xf70, lpBuffer=0x10dd0060*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0x1702fb78, lpOverlapped=0x0 | out: lpBuffer=0x10dd0060*, lpNumberOfBytesWritten=0x1702fb78*=0x10f, lpOverlapped=0x0) returned 1 [0214.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4a0 [0214.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0214.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2e8) returned 1 [0214.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dd0060) returned 1 [0214.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ab1130) returned 1 [0214.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0214.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85ef8) returned 1 [0214.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a37530 [0214.963] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.963] WriteFile (in: hFile=0xf70, lpBuffer=0x7cd32b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1702fc00, lpOverlapped=0x0 | out: lpBuffer=0x7cd32b8*, lpNumberOfBytesWritten=0x1702fc00*=0x10c, lpOverlapped=0x0) returned 1 [0214.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b85ac0 [0214.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c2e8 [0214.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0214.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c2c0) returned 1 [0214.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c2c0 [0214.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0214.987] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bdc0 [0214.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bdc0) returned 1 [0214.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c2e8) returned 1 [0214.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85ac0) returned 1 [0214.988] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3dcfb90 [0214.988] sprintf (in: _Dest=0x3dcfb90, _Format="%c%c" | out: _Dest="48") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfb92, _Format="%c%c" | out: _Dest="8e") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfb94, _Format="%c%c" | out: _Dest="12") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfb96, _Format="%c%c" | out: _Dest="e2") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfb98, _Format="%c%c" | out: _Dest="de") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfb9a, _Format="%c%c" | out: _Dest="33") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfb9c, _Format="%c%c" | out: _Dest="de") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfb9e, _Format="%c%c" | out: _Dest="9c") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfba0, _Format="%c%c" | out: _Dest="6f") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfba2, _Format="%c%c" | out: _Dest="15") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfba4, _Format="%c%c" | out: _Dest="1c") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfba6, _Format="%c%c" | out: _Dest="db") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfba8, _Format="%c%c" | out: _Dest="ab") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfbaa, _Format="%c%c" | out: _Dest="a2") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfbac, _Format="%c%c" | out: _Dest="2c") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfbae, _Format="%c%c" | out: _Dest="1f") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfbb0, _Format="%c%c" | out: _Dest="7a") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfbb2, _Format="%c%c" | out: _Dest="5d") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfbb4, _Format="%c%c" | out: _Dest="77") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfbb6, _Format="%c%c" | out: _Dest="db") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfbb8, _Format="%c%c" | out: _Dest="75") returned 2 [0214.988] sprintf (in: _Dest=0x3dcfbba, _Format="%c%c" | out: _Dest="c5") returned 2 [0214.989] sprintf (in: _Dest=0x3dcfbbc, _Format="%c%c" | out: _Dest="31") returned 2 [0214.989] sprintf (in: _Dest=0x3dcfbbe, _Format="%c%c" | out: _Dest="7e") returned 2 [0214.989] sprintf (in: _Dest=0x3dcfbc0, _Format="%c%c" | out: _Dest="f1") returned 2 [0214.989] sprintf (in: _Dest=0x3dcfbc2, _Format="%c%c" | out: _Dest="88") returned 2 [0214.989] RtlInitAnsiString (in: DestinationString=0x1702fb88, SourceString="488e12e2de33de9c6f151cdbaba22c1f7a5d77db75c5317ef188" | out: DestinationString="488e12e2de33de9c6f151cdbaba22c1f7a5d77db75c5317ef188") [0214.989] RtlAnsiStringToUnicodeString (in: DestinationString=0x1702fb80, SourceString="488e12e2de33de9c6f151cdbaba22c1f7a5d77db75c5317ef188", AllocateDestinationString=1 | out: DestinationString="488e12e2de33de9c6f151cdbaba22c1f7a5d77db75c5317ef188") returned 0x0 [0214.989] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c180 Thread: id = 7336 os_tid = 0x1a10 [0203.845] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json")) returned 0x2020 [0203.845] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", dwFileAttributes=0x20) returned 1 [0214.662] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x123c [0214.663] GetFileSizeEx (in: hFile=0x123c, lpFileSize=0x1710fd6c | out: lpFileSize=0x1710fd6c*=256) returned 1 [0214.663] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.663] ReadFile (in: hFile=0x123c, lpBuffer=0x1710fd48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1710fd58, lpOverlapped=0x0 | out: lpBuffer=0x1710fd48*, lpNumberOfBytesRead=0x1710fd58*=0x4, lpOverlapped=0x0) returned 1 [0214.673] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9f0 [0214.674] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0214.674] NtQuerySystemTime (in: CurrentTime=0x1710fce0 | out: CurrentTime=0x1710fce0*=132462177932508000) returned 0x0 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x5784b5fe [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x5021ff04 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x1df00127 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x2ca18611 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x5eb1aedb [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x8c77c10 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x79ce4177 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x63ff81ce [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x698a9f76 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x53994509 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x66a55352 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x1d215410 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x277c6f6c [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x34f46b88 [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x58ab33db [0214.674] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x43f65a51 [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x73a8169f [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x18a5256f [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x2e400294 [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x578944b4 [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x46666c1a [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x13ab8e25 [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x56d952fe [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x64b829db [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x3024f666 [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x22462383 [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x4dfb6433 [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x60bca65c [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x40965d7f [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x3d800fd5 [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x19c1d0cf [0214.675] RtlRandomEx (in: Seed=0x1710fcd8 | out: Seed=0x1710fcd8) returned 0x58e15217 [0214.687] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.687] WriteFile (in: hFile=0x123c, lpBuffer=0x10dd7870*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1710fcd8, lpOverlapped=0x0 | out: lpBuffer=0x10dd7870*, lpNumberOfBytesWritten=0x1710fcd8*=0x100, lpOverlapped=0x0) returned 1 [0217.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0217.928] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3600 [0217.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3600) returned 1 [0217.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dd7870) returned 1 [0217.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dd3c68) returned 1 [0217.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f560) returned 1 [0217.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85d48) returned 1 [0217.929] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86cf8 [0217.929] SetFilePointerEx (in: hFile=0x123c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.929] WriteFile (in: hFile=0x123c, lpBuffer=0x7cba138*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1710fd60, lpOverlapped=0x0 | out: lpBuffer=0x7cba138*, lpNumberOfBytesWritten=0x1710fd60*=0x10c, lpOverlapped=0x0) returned 1 [0219.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3eeb390 [0219.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c180 [0219.977] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c838 [0219.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c838) returned 1 [0219.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c838 [0219.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c590 [0219.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf28 [0219.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bf28) returned 1 [0219.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c180) returned 1 [0219.978] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb390) returned 1 [0219.978] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0219.978] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="4c") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="d3") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="6d") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="06") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="e8") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="9c") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="c0") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="42") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="f0") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="61") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="08") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="f2") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="26") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="e2") returned 2 [0219.978] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="69") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="66") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="2c") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="80") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="c6") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="18") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="23") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="87") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="0c") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="74") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="23") returned 2 [0219.979] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="7a") returned 2 [0219.979] RtlInitAnsiString (in: DestinationString=0x1710fce8, SourceString="4cd36d06e89cc042f06108f226e269662c80c61823870c74237a" | out: DestinationString="4cd36d06e89cc042f06108f226e269662c80c61823870c74237a") [0219.979] RtlAnsiStringToUnicodeString (in: DestinationString=0x1710fce0, SourceString="4cd36d06e89cc042f06108f226e269662c80c61823870c74237a", AllocateDestinationString=1 | out: DestinationString="4cd36d06e89cc042f06108f226e269662c80c61823870c74237a") returned 0x0 [0219.979] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c798 [0224.900] __SEH_epilog4 () [0224.900] CloseHandle (hObject=0x1ae0) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec8060) returned 1 [0224.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4f0) returned 1 Thread: id = 7337 os_tid = 0x1a14 [0203.848] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json")) returned 0x2020 [0204.393] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", dwFileAttributes=0x20) returned 1 [0215.483] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2318 [0215.483] GetFileSizeEx (in: hFile=0x2318, lpFileSize=0x1726f82c | out: lpFileSize=0x1726f82c*=230) returned 1 [0215.483] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0215.484] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4028 [0215.484] NtQuerySystemTime (in: CurrentTime=0x1726f7a0 | out: CurrentTime=0x1726f7a0*=132462177940620000) returned 0x0 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x6135c0 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x349a4262 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x750b1b8 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x3711d966 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x160a7dd [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x1437a5ed [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x1abf8fd5 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x1435cc1a [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x751bbc78 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x6836d1b0 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x1e87e2c6 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x357319e [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x20beb690 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x1e0d2cf6 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x6e3d2a81 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x1985a6f7 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x33f55f7c [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x7856ef5c [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x601bfc8a [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0xbc5fdb4 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x4ba7e348 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x53e109c9 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x36098fe3 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x7786f7b3 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x1e0f9525 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x2bba9c36 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x49597648 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x2c14291a [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x4d2754d8 [0215.484] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x4a9c68bd [0215.485] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x49840953 [0215.485] RtlRandomEx (in: Seed=0x1726f798 | out: Seed=0x1726f798) returned 0x3cc86989 [0215.493] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e2a498 [0215.493] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e2e0a0 [0215.493] ReadFile (in: hFile=0x2318, lpBuffer=0x10e2a498, nNumberOfBytesToRead=0xe6, lpNumberOfBytesRead=0x1726f794, lpOverlapped=0x0 | out: lpBuffer=0x10e2a498*, lpNumberOfBytesRead=0x1726f794*=0xe6, lpOverlapped=0x0) returned 1 [0215.495] SetFilePointerEx (in: hFile=0x2318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.495] WriteFile (in: hFile=0x2318, lpBuffer=0x10e2e0a0*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x1726f798, lpOverlapped=0x0 | out: lpBuffer=0x10e2e0a0*, lpNumberOfBytesWritten=0x1726f798*=0xe6, lpOverlapped=0x0) returned 1 [0220.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc30 [0220.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb18 [0220.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb18) returned 1 [0220.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e2e0a0) returned 1 [0220.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e2a498) returned 1 [0220.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3b978) returned 1 [0220.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb81d0) returned 1 [0220.577] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86bd8 [0220.578] SetFilePointerEx (in: hFile=0x2318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.578] WriteFile (in: hFile=0x2318, lpBuffer=0x7cba250*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1726f820, lpOverlapped=0x0 | out: lpBuffer=0x7cba250*, lpNumberOfBytesWritten=0x1726f820*=0x10c, lpOverlapped=0x0) returned 1 [0223.041] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0223.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ae8 [0223.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ae8) returned 1 [0223.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2ae8 [0223.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d08 [0223.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2ca0 [0223.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2ca0) returned 1 [0223.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0223.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.042] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.042] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="9d") returned 2 [0223.042] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="8b") returned 2 [0223.042] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="2f") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="45") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="85") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="47") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="67") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="f5") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="1c") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="49") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="88") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="2f") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="41") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="f8") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="68") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="51") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="b4") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="c7") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="7d") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="43") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="e3") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="fd") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="07") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="0a") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="d9") returned 2 [0223.043] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="22") returned 2 [0223.043] RtlInitAnsiString (in: DestinationString=0x1726f7a8, SourceString="9d8b2f45854767f51c49882f41f86851b4c77d43e3fd070ad922" | out: DestinationString="9d8b2f45854767f51c49882f41f86851b4c77d43e3fd070ad922") [0223.043] RtlAnsiStringToUnicodeString (in: DestinationString=0x1726f7a0, SourceString="9d8b2f45854767f51c49882f41f86851b4c77d43e3fd070ad922", AllocateDestinationString=1 | out: DestinationString="9d8b2f45854767f51c49882f41f86851b4c77d43e3fd070ad922") returned 0x0 [0223.043] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a23428 [0224.201] CloseHandle (hObject=0x2250) returned 1 [0224.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3618) returned 1 [0224.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d555f0) returned 1 Thread: id = 7338 os_tid = 0x134c [0203.848] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json")) returned 0x2020 [0204.397] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", dwFileAttributes=0x20) returned 1 [0215.136] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xba0 [0215.137] GetFileSizeEx (in: hFile=0xba0, lpFileSize=0xe74fce4 | out: lpFileSize=0xe74fce4*=234) returned 1 [0215.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0215.137] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0215.137] NtQuerySystemTime (in: CurrentTime=0xe74fc58 | out: CurrentTime=0xe74fc58*=132462177937188000) returned 0x0 [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x4e414738 [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x648ea90b [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x4671a743 [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x27388408 [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x875e8a3 [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0xd4adcfc [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x1394d773 [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x66768748 [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x7bddbcf5 [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x6375d8d5 [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x393a764c [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x2e033c1f [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x8f8938a [0215.137] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x51fec53e [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x1914e1c8 [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x206dd50f [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x73cf0ae [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x391e590b [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x6ea109f5 [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x659d6003 [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x6503db2c [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x44a32b49 [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x6c15dc06 [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0xb01ab4a [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x6e1ccdbf [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x2453b83 [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0xa05b855 [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x1bfb278f [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x782d19f7 [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x7f68fdc8 [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x7ab25ea0 [0215.138] RtlRandomEx (in: Seed=0xe74fc50 | out: Seed=0xe74fc50) returned 0x58d1d097 [0215.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.145] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c3bf68 [0215.146] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c3fb70 [0215.146] ReadFile (in: hFile=0xba0, lpBuffer=0x7c3bf68, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0xe74fc4c, lpOverlapped=0x0 | out: lpBuffer=0x7c3bf68*, lpNumberOfBytesRead=0xe74fc4c*=0xea, lpOverlapped=0x0) returned 1 [0215.148] SetFilePointerEx (in: hFile=0xba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.148] WriteFile (in: hFile=0xba0, lpBuffer=0x7c3fb70*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0xe74fc50, lpOverlapped=0x0 | out: lpBuffer=0x7c3fb70*, lpNumberOfBytesWritten=0xe74fc50*=0xea, lpOverlapped=0x0) returned 1 [0221.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec42f8 [0221.430] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e30 [0221.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e30) returned 1 [0221.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c3fb70) returned 1 [0221.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c3bf68) returned 1 [0221.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c090) returned 1 [0221.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e494a0) returned 1 [0221.431] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a385c0 [0221.431] SetFilePointerEx (in: hFile=0xba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.431] WriteFile (in: hFile=0xba0, lpBuffer=0x7cbb2b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe74fcd8, lpOverlapped=0x0 | out: lpBuffer=0x7cbb2b8*, lpNumberOfBytesWritten=0xe74fcd8*=0x10c, lpOverlapped=0x0) returned 1 [0223.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0223.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3df8 [0223.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3df8) returned 1 [0223.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3df8 [0223.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec54a0 [0223.139] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c58 [0223.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c58) returned 1 [0223.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0223.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.140] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.140] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="40") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="c1") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="26") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="4a") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="3d") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="f3") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="17") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="60") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="13") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="3a") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="71") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="57") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="de") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="54") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="35") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="17") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="97") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="a4") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="35") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="8f") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="17") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="fc") returned 2 [0223.140] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="cf") returned 2 [0223.141] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="2a") returned 2 [0223.141] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="fc") returned 2 [0223.141] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="8c") returned 2 [0223.141] RtlInitAnsiString (in: DestinationString=0xe74fc60, SourceString="40c1264a3df31760133a7157de54351797a4358f17fccf2afc8c" | out: DestinationString="40c1264a3df31760133a7157de54351797a4358f17fccf2afc8c") [0223.141] RtlAnsiStringToUnicodeString (in: DestinationString=0xe74fc58, SourceString="40c1264a3df31760133a7157de54351797a4358f17fccf2afc8c", AllocateDestinationString=1 | out: DestinationString="40c1264a3df31760133a7157de54351797a4358f17fccf2afc8c") returned 0x0 [0223.141] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a239c8 [0224.318] CloseHandle (hObject=0x2250) returned 1 [0224.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf3a0) returned 1 [0224.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca9ab8) returned 1 Thread: id = 7339 os_tid = 0x20c [0203.849] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json")) returned 0x2020 [0204.406] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", dwFileAttributes=0x20) returned 1 [0215.253] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x237c [0215.253] GetFileSizeEx (in: hFile=0x237c, lpFileSize=0x12c9fcac | out: lpFileSize=0x12c9fcac*=256) returned 1 [0215.253] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.253] ReadFile (in: hFile=0x237c, lpBuffer=0x12c9fc88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12c9fc98, lpOverlapped=0x0 | out: lpBuffer=0x12c9fc88*, lpNumberOfBytesRead=0x12c9fc98*=0x4, lpOverlapped=0x0) returned 1 [0215.255] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0215.255] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0215.255] NtQuerySystemTime (in: CurrentTime=0x12c9fc20 | out: CurrentTime=0x12c9fc20*=132462177938280000) returned 0x0 [0215.255] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x47a9712f [0215.255] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x1653a56c [0215.255] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x20bbac8a [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x1d015301 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x54dd986a [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x7049ad9c [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x795c4c93 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x668a6139 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x54ede21e [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x75e829ad [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0xf8e424e [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x149f0f40 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x24db9c23 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x5164cd71 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x64015dc5 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x39d4c41a [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x1d8b0047 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x31483576 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x50a7ff3e [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x690e260a [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x3273442d [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x41dd60e4 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x6f0a35e7 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x11bab24d [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x2651b4eb [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x1653a56c [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x8ec3d71 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x35ad1189 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x6b27251f [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x50062c6c [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x1d3fbe88 [0215.256] RtlRandomEx (in: Seed=0x12c9fc18 | out: Seed=0x12c9fc18) returned 0x10bc760a [0215.265] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.265] WriteFile (in: hFile=0x237c, lpBuffer=0x10e0c0e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x12c9fc18, lpOverlapped=0x0 | out: lpBuffer=0x10e0c0e0*, lpNumberOfBytesWritten=0x12c9fc18*=0x100, lpOverlapped=0x0) returned 1 [0217.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b0a0 [0217.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b618 [0217.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b618) returned 1 [0217.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e0c0e0) returned 1 [0217.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e084d8) returned 1 [0217.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51188) returned 1 [0217.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85ac0) returned 1 [0217.898] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e869c8 [0217.898] SetFilePointerEx (in: hFile=0x237c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.898] WriteFile (in: hFile=0x237c, lpBuffer=0x7cd3830*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12c9fca0, lpOverlapped=0x0 | out: lpBuffer=0x7cd3830*, lpNumberOfBytesWritten=0x12c9fca0*=0x10c, lpOverlapped=0x0) returned 1 [0220.810] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84cb0 [0220.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f4e8 [0220.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3fb0 [0220.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3fb0) returned 1 [0220.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3fb0 [0220.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4a50 [0220.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0220.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3060) returned 1 [0220.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f4e8) returned 1 [0220.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84cb0) returned 1 [0220.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0220.811] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="bc") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="44") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="7d") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="4b") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="3e") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="e9") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="13") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="f0") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="94") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="b5") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="38") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="a7") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="98") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="e9") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="20") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="1d") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="b1") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="ed") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="e9") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="18") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="33") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="d0") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="a0") returned 2 [0220.812] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="ec") returned 2 [0220.813] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="c4") returned 2 [0220.813] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="54") returned 2 [0220.813] RtlInitAnsiString (in: DestinationString=0x12c9fc28, SourceString="bc447d4b3ee913f094b538a798e9201db1ede91833d0a0ecc454" | out: DestinationString="bc447d4b3ee913f094b538a798e9201db1ede91833d0a0ecc454") [0220.813] RtlAnsiStringToUnicodeString (in: DestinationString=0x12c9fc20, SourceString="bc447d4b3ee913f094b538a798e9201db1ede91833d0a0ecc454", AllocateDestinationString=1 | out: DestinationString="bc447d4b3ee913f094b538a798e9201db1ede91833d0a0ecc454") returned 0x0 [0220.813] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e5f8 [0224.911] __SEH_epilog4 () [0224.911] CloseHandle (hObject=0x1220) returned 1 [0224.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7158) returned 1 [0224.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66090) returned 1 Thread: id = 7340 os_tid = 0x410 [0203.849] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json")) returned 0x2020 [0204.402] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", dwFileAttributes=0x20) returned 1 [0215.194] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1718 [0215.195] GetFileSizeEx (in: hFile=0x1718, lpFileSize=0xd97ff44 | out: lpFileSize=0xd97ff44*=215) returned 1 [0215.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0215.195] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0215.195] NtQuerySystemTime (in: CurrentTime=0xd97feb8 | out: CurrentTime=0xd97feb8*=132462177937812000) returned 0x0 [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x446972a4 [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x46f44117 [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x5400ee3e [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x39407ce [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x46e98dc6 [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x7784c9c0 [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x6548538c [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x7d1232ca [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x5a654a3a [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x25ca0271 [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x42648fde [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x2e7d1494 [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x451fd9dc [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x525476be [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x2ae85bb1 [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x5da8c3e7 [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x140650d1 [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x32d53d2a [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x6b79ce8c [0215.195] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x1c836b2a [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x5e6f2fb2 [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x52bfb30d [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x4dc58342 [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x4b2654dc [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x5128897e [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x51d3ec7e [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x41f98846 [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x57fe4cb2 [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x6f41a3a6 [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x7badea78 [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x5dfceb7 [0215.196] RtlRandomEx (in: Seed=0xd97feb0 | out: Seed=0xd97feb0) returned 0x3f977347 [0215.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c59fa8 [0215.204] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c5dbb0 [0215.204] ReadFile (in: hFile=0x1718, lpBuffer=0x7c59fa8, nNumberOfBytesToRead=0xd7, lpNumberOfBytesRead=0xd97feac, lpOverlapped=0x0 | out: lpBuffer=0x7c59fa8*, lpNumberOfBytesRead=0xd97feac*=0xd7, lpOverlapped=0x0) returned 1 [0215.206] SetFilePointerEx (in: hFile=0x1718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.206] WriteFile (in: hFile=0x1718, lpBuffer=0x7c5dbb0*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0xd97feb0, lpOverlapped=0x0 | out: lpBuffer=0x7c5dbb0*, lpNumberOfBytesWritten=0xd97feb0*=0xd7, lpOverlapped=0x0) returned 1 [0217.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ab50 [0217.896] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e368 [0217.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e368) returned 1 [0217.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c5dbb0) returned 1 [0217.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c59fa8) returned 1 [0217.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d513e0) returned 1 [0217.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48d50) returned 1 [0217.897] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e867e8 [0217.897] SetFilePointerEx (in: hFile=0x1718, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.897] WriteFile (in: hFile=0x1718, lpBuffer=0x7cd3718*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd97ff38, lpOverlapped=0x0 | out: lpBuffer=0x7cd3718*, lpNumberOfBytesWritten=0xd97ff38*=0x10c, lpOverlapped=0x0) returned 1 [0220.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84998 [0220.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c720 [0220.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b898 [0220.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b898) returned 1 [0220.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305b898 [0220.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b730 [0220.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0220.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bca8) returned 1 [0220.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c720) returned 1 [0220.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84998) returned 1 [0220.120] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0220.121] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="f0") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="00") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="38") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="02") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="40") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="48") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="d1") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="83") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="5c") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="ce") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="4b") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="9e") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="6b") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="d7") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="fe") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="a4") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="83") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="63") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="8f") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="c2") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="dc") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="f6") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="ad") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="55") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="c8") returned 2 [0220.121] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="75") returned 2 [0220.121] RtlInitAnsiString (in: DestinationString=0xd97fec0, SourceString="f00038024048d1835cce4b9e6bd7fea483638fc2dcf6ad55c875" | out: DestinationString="f00038024048d1835cce4b9e6bd7fea483638fc2dcf6ad55c875") [0220.121] RtlAnsiStringToUnicodeString (in: DestinationString=0xd97feb8, SourceString="f00038024048d1835cce4b9e6bd7fea483638fc2dcf6ad55c875", AllocateDestinationString=1 | out: DestinationString="f00038024048d1835cce4b9e6bd7fea483638fc2dcf6ad55c875") returned 0x0 [0220.121] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e8c8 [0224.133] CloseHandle (hObject=0x2250) returned 1 [0224.133] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec75f8) returned 1 [0224.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a661b8) returned 1 Thread: id = 7341 os_tid = 0x1a18 [0203.850] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json")) returned 0x2020 [0204.407] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", dwFileAttributes=0x20) returned 1 [0215.266] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2374 [0215.267] GetFileSizeEx (in: hFile=0x2374, lpFileSize=0x16b6fd3c | out: lpFileSize=0x16b6fd3c*=332) returned 1 [0215.267] SetFilePointerEx (in: hFile=0x2374, liDistanceToMove=0x148, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.267] ReadFile (in: hFile=0x2374, lpBuffer=0x16b6fd18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x16b6fd28, lpOverlapped=0x0 | out: lpBuffer=0x16b6fd18*, lpNumberOfBytesRead=0x16b6fd28*=0x4, lpOverlapped=0x0) returned 1 [0215.269] SetFilePointerEx (in: hFile=0x2374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0215.269] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0215.269] NtQuerySystemTime (in: CurrentTime=0x16b6fcb0 | out: CurrentTime=0x16b6fcb0*=132462177938436000) returned 0x0 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x59e24d6f [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x5083f535 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x7dc403be [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x686ecae6 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x4afdc716 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x6d8662f6 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x735bad6d [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x15751c39 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x32cdde0b [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x692ffc91 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x76815039 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x15751c39 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x67ff5645 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x20bbac8a [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x8ec3d71 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x777e44a6 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x67ff5645 [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x54300d5c [0215.269] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x3a28002d [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x6e1e5e28 [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x2bd32897 [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x414f2d9a [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x39d4c41a [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x77e767db [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x6b27251f [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0xcd0ed41 [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x2d703b29 [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x77e767db [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x1682c5d1 [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x4c8d0a68 [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x4949ad49 [0215.270] RtlRandomEx (in: Seed=0x16b6fca8 | out: Seed=0x16b6fca8) returned 0x1ad1cabc [0215.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ddb478 [0215.278] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ddf080 [0215.278] ReadFile (in: hFile=0x2374, lpBuffer=0x10ddb478, nNumberOfBytesToRead=0x14c, lpNumberOfBytesRead=0x16b6fca4, lpOverlapped=0x0 | out: lpBuffer=0x10ddb478*, lpNumberOfBytesRead=0x16b6fca4*=0x14c, lpOverlapped=0x0) returned 1 [0215.278] SetFilePointerEx (in: hFile=0x2374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.278] WriteFile (in: hFile=0x2374, lpBuffer=0x10ddf080*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x16b6fca8, lpOverlapped=0x0 | out: lpBuffer=0x10ddf080*, lpNumberOfBytesWritten=0x16b6fca8*=0x14c, lpOverlapped=0x0) returned 1 [0221.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0221.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a38 [0221.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a38) returned 1 [0221.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ddf080) returned 1 [0221.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ddb478) returned 1 [0221.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51278) returned 1 [0221.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85eb0) returned 1 [0221.118] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db37e0 [0221.118] SetFilePointerEx (in: hFile=0x2374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.118] WriteFile (in: hFile=0x2374, lpBuffer=0x3dec710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x16b6fd30, lpOverlapped=0x0 | out: lpBuffer=0x3dec710*, lpNumberOfBytesWritten=0x16b6fd30*=0x10c, lpOverlapped=0x0) returned 1 [0223.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0223.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca90 [0223.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca90) returned 1 [0223.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ca90 [0223.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c6d0 [0223.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0223.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc48) returned 1 [0223.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0223.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.095] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.095] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="bc") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="09") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="06") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="70") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="37") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="b2") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="d1") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="71") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="9e") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="b9") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="eb") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="42") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="d7") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="d6") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="69") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="f2") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="f1") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="4f") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="cf") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="51") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="56") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="f8") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="28") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="9d") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="2e") returned 2 [0223.096] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="a3") returned 2 [0223.096] RtlInitAnsiString (in: DestinationString=0x16b6fcb8, SourceString="bc09067037b2d1719eb9eb42d7d669f2f14fcf5156f8289d2ea3" | out: DestinationString="bc09067037b2d1719eb9eb42d7d669f2f14fcf5156f8289d2ea3") [0223.096] RtlAnsiStringToUnicodeString (in: DestinationString=0x16b6fcb0, SourceString="bc09067037b2d1719eb9eb42d7d669f2f14fcf5156f8289d2ea3", AllocateDestinationString=1 | out: DestinationString="bc09067037b2d1719eb9eb42d7d669f2f14fcf5156f8289d2ea3") returned 0x0 [0223.096] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f290 [0224.286] CloseHandle (hObject=0x2250) returned 1 [0224.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2270) returned 1 [0224.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a662e0) returned 1 Thread: id = 7352 os_tid = 0x444 [0203.863] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0204.391] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0215.437] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2320 [0215.438] GetFileSizeEx (in: hFile=0x2320, lpFileSize=0xd7ffb2c | out: lpFileSize=0xd7ffb2c*=223) returned 1 [0215.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0215.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0215.438] NtQuerySystemTime (in: CurrentTime=0xd7ffaa0 | out: CurrentTime=0xd7ffaa0*=132462177940152000) returned 0x0 [0215.438] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x7553b1dc [0215.438] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x42648fde [0215.438] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x2553c74a [0215.438] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x1e8f59a5 [0215.438] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x5db97385 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x430f0a1e [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x26e7f21 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x1eb0abd0 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x401d7e3b [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x2c47e77c [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x4e306489 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x2e3204a9 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x236ba397 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x1749e03b [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x5cce3b9a [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x638dce09 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x18fd5930 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x402e05a9 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x797fcee2 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x380b401e [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x5d0cae67 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x5ba0be30 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x543b0f71 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x3a28002d [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x382bac1 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x615720cb [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x7ded1f94 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x57359815 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x6d931e06 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x54b757e3 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x2bd32897 [0215.439] RtlRandomEx (in: Seed=0xd7ffa98 | out: Seed=0xd7ffa98) returned 0x544bcee [0215.447] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e13c68 [0215.447] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e17870 [0215.448] ReadFile (in: hFile=0x2320, lpBuffer=0x10e13c68, nNumberOfBytesToRead=0xdf, lpNumberOfBytesRead=0xd7ffa94, lpOverlapped=0x0 | out: lpBuffer=0x10e13c68*, lpNumberOfBytesRead=0xd7ffa94*=0xdf, lpOverlapped=0x0) returned 1 [0215.449] SetFilePointerEx (in: hFile=0x2320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.449] WriteFile (in: hFile=0x2320, lpBuffer=0x10e17870*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0xd7ffa98, lpOverlapped=0x0 | out: lpBuffer=0x10e17870*, lpNumberOfBytesWritten=0xd7ffa98*=0xdf, lpOverlapped=0x0) returned 1 [0221.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3ba0 [0221.080] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec39c0 [0221.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec39c0) returned 1 [0221.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e17870) returned 1 [0221.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e13c68) returned 1 [0221.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3015670) returned 1 [0221.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb84a0) returned 1 [0221.081] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3390 [0221.081] SetFilePointerEx (in: hFile=0x2320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.081] WriteFile (in: hFile=0x2320, lpBuffer=0x3dec4e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd7ffb20, lpOverlapped=0x0 | out: lpBuffer=0x3dec4e0*, lpNumberOfBytesWritten=0xd7ffb20*=0x10c, lpOverlapped=0x0) returned 1 [0223.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0223.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2818 [0223.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2818) returned 1 [0223.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2818 [0223.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d58 [0223.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0223.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec34c0) returned 1 [0223.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0223.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.083] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.083] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="28") returned 2 [0223.083] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="3f") returned 2 [0223.083] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="53") returned 2 [0223.083] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="87") returned 2 [0223.083] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="ac") returned 2 [0223.083] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="c9") returned 2 [0223.083] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="6e") returned 2 [0223.083] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="b8") returned 2 [0223.083] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="7d") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="b5") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="9d") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="2a") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="e3") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="71") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="b8") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="56") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="fb") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="3b") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="50") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="14") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="57") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="1b") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="c6") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="27") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="18") returned 2 [0223.084] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="68") returned 2 [0223.084] RtlInitAnsiString (in: DestinationString=0xd7ffaa8, SourceString="283f5387acc96eb87db59d2ae371b856fb3b5014571bc6271868" | out: DestinationString="283f5387acc96eb87db59d2ae371b856fb3b5014571bc6271868") [0223.084] RtlAnsiStringToUnicodeString (in: DestinationString=0xd7ffaa0, SourceString="283f5387acc96eb87db59d2ae371b856fb3b5014571bc6271868", AllocateDestinationString=1 | out: DestinationString="283f5387acc96eb87db59d2ae371b856fb3b5014571bc6271868") returned 0x0 [0223.084] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a23770 [0224.280] CloseHandle (hObject=0x2250) returned 1 [0224.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cae020) returned 1 [0224.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a66f98) returned 1 Thread: id = 7353 os_tid = 0xbe4 [0203.864] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json")) returned 0x2020 [0204.396] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", dwFileAttributes=0x20) returned 1 [0215.093] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1414 [0215.093] GetFileSizeEx (in: hFile=0x1414, lpFileSize=0xdf1f7ec | out: lpFileSize=0xdf1f7ec*=210) returned 1 [0215.093] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc98 [0215.094] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1f8 [0215.094] NtQuerySystemTime (in: CurrentTime=0xdf1f760 | out: CurrentTime=0xdf1f760*=132462177936720000) returned 0x0 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x41dbf786 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x1bb4bad2 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x5502b424 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x1c481f55 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x5dbce5c [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x24e0c7a3 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x11ed93e5 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x6f74c94c [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x785503f7 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x20ae453 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x7fdad1 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x4e1bd6db [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x4dcd0d40 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x69de153e [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x5acd94cc [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x7baa14a [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x77de34d6 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x512d8b48 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x4ec20471 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x2d703b29 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x6a223978 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x2a16d74a [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x17ef3f5c [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x53ab1b5f [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x2920a046 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x360fa65c [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x41d58a4f [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x3acbf51a [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x3d281e69 [0215.094] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x4dcd0d40 [0215.095] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x68d4e3b9 [0215.095] RtlRandomEx (in: Seed=0xdf1f758 | out: Seed=0xdf1f758) returned 0x716f79dc [0215.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ebd080 [0215.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10ec0c88 [0215.114] ReadFile (in: hFile=0x1414, lpBuffer=0x10ebd080, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0xdf1f754, lpOverlapped=0x0 | out: lpBuffer=0x10ebd080*, lpNumberOfBytesRead=0xdf1f754*=0xd2, lpOverlapped=0x0) returned 1 [0215.120] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.120] WriteFile (in: hFile=0x1414, lpBuffer=0x10ec0c88*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0xdf1f758, lpOverlapped=0x0 | out: lpBuffer=0x10ec0c88*, lpNumberOfBytesWritten=0xdf1f758*=0xd2, lpOverlapped=0x0) returned 1 [0219.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c068 [0219.834] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c018 [0219.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c018) returned 1 [0219.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ec0c88) returned 1 [0219.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10ebd080) returned 1 [0219.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c180) returned 1 [0219.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48be8) returned 1 [0219.835] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86848 [0219.835] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.835] WriteFile (in: hFile=0x1414, lpBuffer=0x7cd3ec0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdf1f7e0, lpOverlapped=0x0 | out: lpBuffer=0x7cd3ec0*, lpNumberOfBytesWritten=0xdf1f7e0*=0x10c, lpOverlapped=0x0) returned 1 [0222.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85b30 [0222.946] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0222.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54200 [0222.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54200) returned 1 [0222.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e54200 [0222.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52568 [0222.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e54098 [0222.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e54098) returned 1 [0222.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0222.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b30) returned 1 [0222.947] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0222.947] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="17") returned 2 [0222.947] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="0b") returned 2 [0222.947] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="83") returned 2 [0222.947] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="bb") returned 2 [0222.947] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="cc") returned 2 [0222.947] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="e6") returned 2 [0222.947] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="3c") returned 2 [0222.947] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="35") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="d2") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="4e") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="dd") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="a7") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="6c") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="08") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="c8") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="af") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="91") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="c3") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="65") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="50") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="f5") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="be") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="32") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="84") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="f1") returned 2 [0222.948] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="73") returned 2 [0222.948] RtlInitAnsiString (in: DestinationString=0xdf1f768, SourceString="170b83bbcce63c35d24edda76c08c8af91c36550f5be3284f173" | out: DestinationString="170b83bbcce63c35d24edda76c08c8af91c36550f5be3284f173") [0222.948] RtlAnsiStringToUnicodeString (in: DestinationString=0xdf1f760, SourceString="170b83bbcce63c35d24edda76c08c8af91c36550f5be3284f173", AllocateDestinationString=1 | out: DestinationString="170b83bbcce63c35d24edda76c08c8af91c36550f5be3284f173") returned 0x0 [0222.948] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a23248 [0224.181] CloseHandle (hObject=0x2250) returned 1 [0224.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3868) returned 1 [0224.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a670c0) returned 1 Thread: id = 7354 os_tid = 0xbec [0203.864] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020 [0204.403] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", dwFileAttributes=0x20) returned 1 [0215.208] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xeb4 [0215.208] GetFileSizeEx (in: hFile=0xeb4, lpFileSize=0xd92fce4 | out: lpFileSize=0xd92fce4*=222) returned 1 [0215.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0215.209] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4a0 [0215.209] NtQuerySystemTime (in: CurrentTime=0xd92fc58 | out: CurrentTime=0xd92fc58*=132462177937812000) returned 0x0 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x3d09f28 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x517e3afe [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x759e4bd [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x54ede21e [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x2c14c1b2 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x2835bb89 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x51a913be [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x85a0465 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x81cc515 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x76815039 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x81cc515 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x7d1232ca [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x77829d5c [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x540972a5 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0xb0a11b3 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x40e1365e [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x3b54cef3 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x2e04a38e [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x6dfa2448 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x6dfa2448 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x6e82e425 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x46e98dc6 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x2e8568ce [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x77829d5c [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x72342a6e [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x4ad2866 [0215.209] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x3ae6340 [0215.210] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x34b86d7e [0215.210] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x1fefdc8d [0215.210] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x1c836b2a [0215.210] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x18d0ef3b [0215.210] RtlRandomEx (in: Seed=0xd92fc50 | out: Seed=0xd92fc50) returned 0x6f904477 [0215.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c617b8 [0215.218] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c653c0 [0215.218] ReadFile (in: hFile=0xeb4, lpBuffer=0x7c617b8, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0xd92fc4c, lpOverlapped=0x0 | out: lpBuffer=0x7c617b8*, lpNumberOfBytesRead=0xd92fc4c*=0xde, lpOverlapped=0x0) returned 1 [0215.220] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.220] WriteFile (in: hFile=0xeb4, lpBuffer=0x7c653c0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0xd92fc50, lpOverlapped=0x0 | out: lpBuffer=0x7c653c0*, lpNumberOfBytesWritten=0xd92fc50*=0xde, lpOverlapped=0x0) returned 1 [0221.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0221.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4000 [0221.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4000) returned 1 [0221.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c653c0) returned 1 [0221.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c617b8) returned 1 [0221.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d517a0) returned 1 [0221.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49410) returned 1 [0221.258] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3f60 [0221.259] SetFilePointerEx (in: hFile=0xeb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.259] WriteFile (in: hFile=0xeb4, lpBuffer=0x3debf68*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xd92fcd8, lpOverlapped=0x0 | out: lpBuffer=0x3debf68*, lpNumberOfBytesWritten=0xd92fcd8*=0x10c, lpOverlapped=0x0) returned 1 [0223.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.112] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f1a0 [0223.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2868 [0223.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2868) returned 1 [0223.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2868 [0223.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3970 [0223.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38f8 [0223.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38f8) returned 1 [0223.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f1a0) returned 1 [0223.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.113] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.113] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="52") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="d4") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="09") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="15") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="00") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="81") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="28") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="27") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="47") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="18") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="13") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="76") returned 2 [0223.113] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="1d") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="f8") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="d5") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="b1") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="98") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="a6") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="c8") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="a7") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="89") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="0d") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="61") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="bf") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="be") returned 2 [0223.114] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="27") returned 2 [0223.114] RtlInitAnsiString (in: DestinationString=0xd92fc60, SourceString="52d4091500812827471813761df8d5b198a6c8a7890d61bfbe27" | out: DestinationString="52d4091500812827471813761df8d5b198a6c8a7890d61bfbe27") [0223.114] RtlAnsiStringToUnicodeString (in: DestinationString=0xd92fc58, SourceString="52d4091500812827471813761df8d5b198a6c8a7890d61bfbe27", AllocateDestinationString=1 | out: DestinationString="52d4091500812827471813761df8d5b198a6c8a7890d61bfbe27") returned 0x0 [0223.114] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f650 [0224.302] CloseHandle (hObject=0x2250) returned 1 [0224.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf880) returned 1 [0224.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a671e8) returned 1 Thread: id = 7355 os_tid = 0xbb8 [0203.865] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020 [0204.404] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", dwFileAttributes=0x20) returned 1 [0215.221] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x23a8 [0215.222] GetFileSizeEx (in: hFile=0x23a8, lpFileSize=0xdaffec4 | out: lpFileSize=0xdaffec4*=249) returned 1 [0215.222] SetFilePointerEx (in: hFile=0x23a8, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.222] ReadFile (in: hFile=0x23a8, lpBuffer=0xdaffea0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdaffeb0, lpOverlapped=0x0 | out: lpBuffer=0xdaffea0*, lpNumberOfBytesRead=0xdaffeb0*=0x4, lpOverlapped=0x0) returned 1 [0215.228] SetFilePointerEx (in: hFile=0x23a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.228] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c4a0 [0215.229] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0215.229] NtQuerySystemTime (in: CurrentTime=0xdaffe38 | out: CurrentTime=0xdaffe38*=132462177938124000) returned 0x0 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x66bc7152 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x2835bb89 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x40df7657 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x353a725d [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x84efdfc [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x18d0ef3b [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x2c35e913 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x71849a2f [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x4dc58342 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x396a97f9 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x773f6386 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x517e3afe [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x7f2800ce [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x11bab24d [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x2837bc56 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x3f977347 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x4b86233 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x3cb71739 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x3a5acffc [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x374e0841 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x64015dc5 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x296d821 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x5c2ea532 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x28b5a105 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x20287013 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0xf2ff136 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x33f9696c [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x1d8b0047 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x5128897e [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x23c2ae42 [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x414f2d9a [0215.229] RtlRandomEx (in: Seed=0xdaffe30 | out: Seed=0xdaffe30) returned 0x1dbb48ab [0215.238] SetFilePointerEx (in: hFile=0x23a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.238] WriteFile (in: hFile=0x23a8, lpBuffer=0x7c6cbd0*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0xdaffe30, lpOverlapped=0x0 | out: lpBuffer=0x7c6cbd0*, lpNumberOfBytesWritten=0xdaffe30*=0xf9, lpOverlapped=0x0) returned 1 [0221.029] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3da8 [0221.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3448 [0221.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3448) returned 1 [0221.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c6cbd0) returned 1 [0221.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c68fc8) returned 1 [0221.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d514d0) returned 1 [0221.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e49968) returned 1 [0221.030] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3240 [0221.030] SetFilePointerEx (in: hFile=0x23a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.030] WriteFile (in: hFile=0x23a8, lpBuffer=0x3deaf00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xdaffeb8, lpOverlapped=0x0 | out: lpBuffer=0x3deaf00*, lpNumberOfBytesWritten=0xdaffeb8*=0x10c, lpOverlapped=0x0) returned 1 [0223.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f650 [0223.100] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3420 [0223.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3420) returned 1 [0223.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3420 [0223.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec5450 [0223.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4690 [0223.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4690) returned 1 [0223.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f650) returned 1 [0223.101] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.101] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.101] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="34") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="3e") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="89") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="89") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="18") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="e6") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="73") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="44") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="5b") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="38") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="5d") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="c8") returned 2 [0223.101] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="77") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="ed") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="83") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="bf") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="a3") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="35") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="b7") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="36") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="e4") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="e6") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="47") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="73") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="d3") returned 2 [0223.102] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="58") returned 2 [0223.102] RtlInitAnsiString (in: DestinationString=0xdaffe40, SourceString="343e898918e673445b385dc877ed83bfa335b736e4e64773d358" | out: DestinationString="343e898918e673445b385dc877ed83bfa335b736e4e64773d358") [0223.102] RtlAnsiStringToUnicodeString (in: DestinationString=0xdaffe38, SourceString="343e898918e673445b385dc877ed83bfa335b736e4e64773d358", AllocateDestinationString=1 | out: DestinationString="343e898918e673445b385dc877ed83bfa335b736e4e64773d358") returned 0x0 [0223.102] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a23860 [0224.292] CloseHandle (hObject=0x2250) returned 1 [0224.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf748) returned 1 [0224.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67310) returned 1 Thread: id = 7356 os_tid = 0x21dc [0203.865] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0204.398] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0215.149] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1e6c [0215.150] GetFileSizeEx (in: hFile=0x1e6c, lpFileSize=0xe25fed4 | out: lpFileSize=0xe25fed4*=258) returned 1 [0215.150] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.150] ReadFile (in: hFile=0x1e6c, lpBuffer=0xe25feb0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe25fec0, lpOverlapped=0x0 | out: lpBuffer=0xe25feb0*, lpNumberOfBytesRead=0xe25fec0*=0x4, lpOverlapped=0x0) returned 1 [0215.152] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0215.152] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c3d8 [0215.152] NtQuerySystemTime (in: CurrentTime=0xe25fe48 | out: CurrentTime=0xe25fe48*=132462177937344000) returned 0x0 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x3c16215c [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0xfcec946 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x55a80da7 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x60ea1fdd [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x6fa74634 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x7951139 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x6df81cef [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x85a0465 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x637d551f [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x5df8c236 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x3c6a6f64 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x6296e3c [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x421c9c5c [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x5c1c130b [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x3d4b99a7 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x3f195edc [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x6ed5d141 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x460ae521 [0215.152] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x32e64d44 [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x332ddc59 [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x133be368 [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x27d7b57a [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x5aef3f7f [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x64359c67 [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x3da44be9 [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0xee586dc [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x384704b1 [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x2d7ccc80 [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x5dd91622 [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x16709035 [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x743b0077 [0215.153] RtlRandomEx (in: Seed=0xe25fe40 | out: Seed=0xe25fe40) returned 0x4c6f87fb [0215.161] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.161] WriteFile (in: hFile=0x1e6c, lpBuffer=0x7c47380*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0xe25fe40, lpOverlapped=0x0 | out: lpBuffer=0x7c47380*, lpNumberOfBytesWritten=0xe25fe40*=0x102, lpOverlapped=0x0) returned 1 [0221.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bb0 [0221.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e98 [0221.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e98) returned 1 [0221.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c47380) returned 1 [0221.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c43778) returned 1 [0221.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c3d8) returned 1 [0221.471] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e48b58) returned 1 [0221.471] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38500 [0221.471] SetFilePointerEx (in: hFile=0x1e6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.471] WriteFile (in: hFile=0x1e6c, lpBuffer=0x7cbb088*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe25fec8, lpOverlapped=0x0 | out: lpBuffer=0x7cbb088*, lpNumberOfBytesWritten=0xe25fec8*=0x10c, lpOverlapped=0x0) returned 1 [0223.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0223.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc70 [0223.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cc70) returned 1 [0223.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305cc70 [0223.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2e8 [0223.123] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c900 [0223.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c900) returned 1 [0223.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0223.124] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.124] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.124] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="5c") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="cf") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="c8") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="97") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="72") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="65") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="08") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="96") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="08") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="52") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="8b") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="96") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="90") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="b5") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="83") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="e1") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="9d") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="0f") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="06") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="9c") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="be") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="4f") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="2d") returned 2 [0223.124] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="96") returned 2 [0223.125] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="8f") returned 2 [0223.125] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="81") returned 2 [0223.125] RtlInitAnsiString (in: DestinationString=0xe25fe50, SourceString="5ccfc8977265089608528b9690b583e19d0f069cbe4f2d968f81" | out: DestinationString="5ccfc8977265089608528b9690b583e19d0f069cbe4f2d968f81") [0223.125] RtlAnsiStringToUnicodeString (in: DestinationString=0xe25fe48, SourceString="5ccfc8977265089608528b9690b583e19d0f069cbe4f2d968f81", AllocateDestinationString=1 | out: DestinationString="5ccfc8977265089608528b9690b583e19d0f069cbe4f2d968f81") returned 0x0 [0223.125] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f0b0 [0224.307] CloseHandle (hObject=0x2250) returned 1 [0224.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caf610) returned 1 [0224.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67438) returned 1 Thread: id = 7357 os_tid = 0x524 [0203.870] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json")) returned 0x2020 [0204.399] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", dwFileAttributes=0x20) returned 1 [0215.174] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xe68 [0215.175] GetFileSizeEx (in: hFile=0xe68, lpFileSize=0xee1f82c | out: lpFileSize=0xee1f82c*=232) returned 1 [0215.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c630 [0215.175] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b9b0 [0215.175] NtQuerySystemTime (in: CurrentTime=0xee1f7a0 | out: CurrentTime=0xee1f7a0*=132462177937500000) returned 0x0 [0215.175] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x2d627e08 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x61ffc04e [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x34f74922 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x7ba98d4b [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x7badea78 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x143889b8 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x43de82a7 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x427520b7 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x65a93f97 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x296d821 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x10375443 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x2837bc56 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x469cdb58 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x55e16da4 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x4fb4dee6 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x30af31fd [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x5e85a00e [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x2c14c1b2 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x70a7868e [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x76264a2f [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x233aad64 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x6d01b2c8 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x5721d08d [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x6b9326c0 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x13881ed1 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x300756a5 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x7fd07d3a [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x53d9f755 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x30af31fd [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x4b084ce0 [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x4f13232d [0215.176] RtlRandomEx (in: Seed=0xee1f798 | out: Seed=0xee1f798) returned 0x23c2ae42 [0215.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c52798 [0215.185] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7c563a0 [0215.185] ReadFile (in: hFile=0xe68, lpBuffer=0x7c52798, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0xee1f794, lpOverlapped=0x0 | out: lpBuffer=0x7c52798*, lpNumberOfBytesRead=0xee1f794*=0xe8, lpOverlapped=0x0) returned 1 [0215.191] SetFilePointerEx (in: hFile=0xe68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.191] WriteFile (in: hFile=0xe68, lpBuffer=0x7c563a0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0xee1f798, lpOverlapped=0x0 | out: lpBuffer=0x7c563a0*, lpNumberOfBytesWritten=0xee1f798*=0xe8, lpOverlapped=0x0) returned 1 [0221.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6508 [0221.500] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3100 [0221.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3100) returned 1 [0221.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c563a0) returned 1 [0221.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c52798) returned 1 [0221.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50fa8) returned 1 [0221.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e497b8) returned 1 [0221.501] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38680 [0221.501] SetFilePointerEx (in: hFile=0xe68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.501] WriteFile (in: hFile=0xe68, lpBuffer=0x7cbae58*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xee1f820, lpOverlapped=0x0 | out: lpBuffer=0x7cbae58*, lpNumberOfBytesWritten=0xee1f820*=0x10c, lpOverlapped=0x0) returned 1 [0223.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3fa10 [0223.177] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c5e0 [0223.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c5e0) returned 1 [0223.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c5e0 [0223.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c658 [0223.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bb90 [0223.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bb90) returned 1 [0223.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fa10) returned 1 [0223.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.178] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.178] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="bd") returned 2 [0223.178] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="b7") returned 2 [0223.178] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="e9") returned 2 [0223.178] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="9c") returned 2 [0223.178] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="df") returned 2 [0223.178] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="80") returned 2 [0223.178] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="e7") returned 2 [0223.178] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="12") returned 2 [0223.178] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="8d") returned 2 [0223.178] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="6b") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="42") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="db") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="11") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="66") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="8b") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="c5") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="1a") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="71") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="44") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="f4") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="44") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="7a") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="97") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="95") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="92") returned 2 [0223.179] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="95") returned 2 [0223.179] RtlInitAnsiString (in: DestinationString=0xee1f7a8, SourceString="bdb7e99cdf80e7128d6b42db11668bc51a7144f4447a97959295" | out: DestinationString="bdb7e99cdf80e7128d6b42db11668bc51a7144f4447a97959295") [0223.179] RtlAnsiStringToUnicodeString (in: DestinationString=0xee1f7a0, SourceString="bdb7e99cdf80e7128d6b42db11668bc51a7144f4447a97959295", AllocateDestinationString=1 | out: DestinationString="bdb7e99cdf80e7128d6b42db11668bc51a7144f4447a97959295") returned 0x0 [0223.179] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f740 [0224.328] CloseHandle (hObject=0x2250) returned 1 [0224.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2020) returned 1 [0224.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67560) returned 1 Thread: id = 7358 os_tid = 0xc08 [0203.871] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json")) returned 0x2020 [0204.392] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", dwFileAttributes=0x20) returned 1 [0215.450] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x231c [0215.451] GetFileSizeEx (in: hFile=0x231c, lpFileSize=0x1444fd4c | out: lpFileSize=0x1444fd4c*=304) returned 1 [0215.451] SetFilePointerEx (in: hFile=0x231c, liDistanceToMove=0x12c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.451] ReadFile (in: hFile=0x231c, lpBuffer=0x1444fd28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1444fd38, lpOverlapped=0x0 | out: lpBuffer=0x1444fd28*, lpNumberOfBytesRead=0x1444fd38*=0x4, lpOverlapped=0x0) returned 1 [0215.457] SetFilePointerEx (in: hFile=0x231c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2958 [0215.457] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0215.457] NtQuerySystemTime (in: CurrentTime=0x1444fcc0 | out: CurrentTime=0x1444fcc0*=132462177940308000) returned 0x0 [0215.457] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x71746048 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0xbc31dcb [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x362dec23 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x120b1f0b [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x22e45401 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x30c56546 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x50b1d1fa [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x16076146 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x7b5a2cdc [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x3f58b738 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x62e6c739 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x5a4503b6 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x3e083e02 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x300beedb [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x440cbf43 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x33dfb8ab [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x1c8585cb [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x324585de [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x20221574 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x5a720dd3 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x23fb06e1 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0xb00fd5c [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x41060c8a [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x564b1de4 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x750373ce [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x1f112be [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x6a88efe [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0xf357da0 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x1a00101 [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x5f26b3ff [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x1c4c4f5a [0215.458] RtlRandomEx (in: Seed=0x1444fcb8 | out: Seed=0x1444fcb8) returned 0x2dd3498d [0215.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e1b478 [0215.467] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e1f080 [0215.468] ReadFile (in: hFile=0x231c, lpBuffer=0x10e1b478, nNumberOfBytesToRead=0x130, lpNumberOfBytesRead=0x1444fcb4, lpOverlapped=0x0 | out: lpBuffer=0x10e1b478*, lpNumberOfBytesRead=0x1444fcb4*=0x130, lpOverlapped=0x0) returned 1 [0215.468] SetFilePointerEx (in: hFile=0x231c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.468] WriteFile (in: hFile=0x231c, lpBuffer=0x10e1f080*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1444fcb8, lpOverlapped=0x0 | out: lpBuffer=0x10e1f080*, lpNumberOfBytesWritten=0x1444fcb8*=0x130, lpOverlapped=0x0) returned 1 [0219.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c1d0 [0219.753] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305beb0 [0219.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305beb0) returned 1 [0219.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e1f080) returned 1 [0219.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e1b478) returned 1 [0219.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bb58) returned 1 [0219.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8410) returned 1 [0219.754] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e866c8 [0219.754] SetFilePointerEx (in: hFile=0x231c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.754] WriteFile (in: hFile=0x231c, lpBuffer=0x7cd32b8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1444fd40, lpOverlapped=0x0 | out: lpBuffer=0x7cd32b8*, lpNumberOfBytesWritten=0x1444fd40*=0x10c, lpOverlapped=0x0) returned 1 [0222.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85b30 [0222.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0222.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca18 [0222.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305ca18) returned 1 [0222.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305ca18 [0222.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305ca68 [0222.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8d8 [0222.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c8d8) returned 1 [0222.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0222.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b30) returned 1 [0222.938] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0222.938] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="ff") returned 2 [0222.938] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="69") returned 2 [0222.938] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="6d") returned 2 [0222.938] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="dc") returned 2 [0222.938] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="02") returned 2 [0222.938] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="87") returned 2 [0222.938] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="7d") returned 2 [0222.938] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="39") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="31") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="12") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="20") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="9a") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="b6") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="7a") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="18") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="a8") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="28") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="a3") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="0e") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="4a") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="3a") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="42") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="81") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="76") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="98") returned 2 [0222.939] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="c9") returned 2 [0222.939] RtlInitAnsiString (in: DestinationString=0x1444fcc8, SourceString="ff696ddc02877d393112209ab67a18a828a30e4a3a42817698c9" | out: DestinationString="ff696ddc02877d393112209ab67a18a828a30e4a3a42817698c9") [0222.939] RtlAnsiStringToUnicodeString (in: DestinationString=0x1444fcc0, SourceString="ff696ddc02877d393112209ab67a18a828a30e4a3a42817698c9", AllocateDestinationString=1 | out: DestinationString="ff696ddc02877d393112209ab67a18a828a30e4a3a42817698c9") returned 0x0 [0222.939] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a23158 [0224.171] CloseHandle (hObject=0x2250) returned 1 [0224.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3990) returned 1 [0224.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67688) returned 1 Thread: id = 7359 os_tid = 0x6c0 [0203.872] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json")) returned 0x2020 [0203.873] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", dwFileAttributes=0x20) returned 1 [0214.303] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1fb0 [0214.304] GetFileSizeEx (in: hFile=0x1fb0, lpFileSize=0x9cffe24 | out: lpFileSize=0x9cffe24*=234) returned 1 [0214.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b618 [0214.304] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0214.304] NtQuerySystemTime (in: CurrentTime=0x9cffd98 | out: CurrentTime=0x9cffd98*=132462177928764000) returned 0x0 [0214.304] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x36bf295a [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0xd62edba [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x39e7e5d0 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x14e608a8 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x5b4c8df5 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x4e97e1b3 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x5b087dbe [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x17419490 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x33b7c13a [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x2ff81c71 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x78d61796 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x7412bb5f [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x26ae732d [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x56c4871e [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0xfdfceab [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x36040379 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x28dbc5ad [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x320df9e6 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0xb499ae [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x31ccd838 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x2be4a55 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x1b8a4160 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x4ff80d2d [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x1f97e2f9 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x253c0fa6 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x2ff81c71 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x15a593a1 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x7477bda6 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x37a7719a [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x2a68717c [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x182ec3c9 [0214.305] RtlRandomEx (in: Seed=0x9cffd90 | out: Seed=0x9cffd90) returned 0x163a02e8 [0214.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d97bb0 [0214.313] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d9b7b8 [0214.313] ReadFile (in: hFile=0x1fb0, lpBuffer=0x7d97bb0, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0x9cffd8c, lpOverlapped=0x0 | out: lpBuffer=0x7d97bb0*, lpNumberOfBytesRead=0x9cffd8c*=0xea, lpOverlapped=0x0) returned 1 [0214.315] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.315] WriteFile (in: hFile=0x1fb0, lpBuffer=0x7d9b7b8*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x9cffd90, lpOverlapped=0x0 | out: lpBuffer=0x7d9b7b8*, lpNumberOfBytesWritten=0x9cffd90*=0xea, lpOverlapped=0x0) returned 1 [0217.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b730 [0217.893] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5ae20 [0217.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5ae20) returned 1 [0217.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d9b7b8) returned 1 [0217.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d97bb0) returned 1 [0217.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e418) returned 1 [0217.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be0a0) returned 1 [0217.894] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86278 [0217.894] SetFilePointerEx (in: hFile=0x1fb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.894] WriteFile (in: hFile=0x1fb0, lpBuffer=0x7cd34e8*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x9cffe18, lpOverlapped=0x0 | out: lpBuffer=0x7cd34e8*, lpNumberOfBytesWritten=0x9cffe18*=0x10c, lpOverlapped=0x0) returned 1 [0222.968] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85b30 [0222.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0222.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec38a8 [0222.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec38a8) returned 1 [0222.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec38a8 [0222.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4ac8 [0222.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6198 [0222.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6198) returned 1 [0222.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0222.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85b30) returned 1 [0222.969] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0222.969] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="16") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="2c") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="3a") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="38") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="6e") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="6b") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="3d") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="ff") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="45") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="0e") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="7c") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="4a") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="0a") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="af") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="85") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="22") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="b2") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="2c") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="d2") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="59") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="2d") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="1e") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="4b") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="0c") returned 2 [0222.970] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="97") returned 2 [0222.971] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="de") returned 2 [0222.971] RtlInitAnsiString (in: DestinationString=0x9cffda0, SourceString="162c3a386e6b3dff450e7c4a0aaf8522b22cd2592d1e4b0c97de" | out: DestinationString="162c3a386e6b3dff450e7c4a0aaf8522b22cd2592d1e4b0c97de") [0222.971] RtlAnsiStringToUnicodeString (in: DestinationString=0x9cffd98, SourceString="162c3a386e6b3dff450e7c4a0aaf8522b22cd2592d1e4b0c97de", AllocateDestinationString=1 | out: DestinationString="162c3a386e6b3dff450e7c4a0aaf8522b22cd2592d1e4b0c97de") returned 0x0 [0222.971] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a23338 [0224.186] CloseHandle (hObject=0x2250) returned 1 [0224.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb3740) returned 1 [0224.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a677b0) returned 1 Thread: id = 7360 os_tid = 0x5ec [0203.873] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json")) returned 0x2020 [0203.874] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", dwFileAttributes=0x20) returned 1 [0214.316] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1568 [0214.317] GetFileSizeEx (in: hFile=0x1568, lpFileSize=0xebcf854 | out: lpFileSize=0xebcf854*=324) returned 1 [0214.317] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x140, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.317] ReadFile (in: hFile=0x1568, lpBuffer=0xebcf830, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xebcf840, lpOverlapped=0x0 | out: lpBuffer=0xebcf830*, lpNumberOfBytesRead=0xebcf840*=0x4, lpOverlapped=0x0) returned 1 [0214.318] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.318] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc58 [0214.319] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0214.319] NtQuerySystemTime (in: CurrentTime=0xebcf7c8 | out: CurrentTime=0xebcf7c8*=132462177928920000) returned 0x0 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x37df8d5c [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x741ab5a [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x6ef5df05 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x36040379 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x22948c79 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x208c1994 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x7d61f36e [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x624377bb [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x71ee7597 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0xcf925bd [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x147390f3 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x3543172b [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x1f6da35b [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x774e184d [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x10a247d5 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x655084a5 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x3fbb33bb [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x741bfc14 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x208dffcb [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x6278fbc1 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x5c9a994 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x268f1768 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x12480f44 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x31ccd838 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x5f71b312 [0214.319] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x216bb1d4 [0214.320] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x2dd85379 [0214.320] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x2d5a3362 [0214.320] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x4f036e2e [0214.320] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x154c7681 [0214.320] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x7b0abc7b [0214.320] RtlRandomEx (in: Seed=0xebcf7c0 | out: Seed=0xebcf7c0) returned 0x2f1ce1f6 [0214.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d903a0 [0214.329] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7d93fa8 [0214.329] ReadFile (in: hFile=0x1568, lpBuffer=0x7d903a0, nNumberOfBytesToRead=0x144, lpNumberOfBytesRead=0xebcf7bc, lpOverlapped=0x0 | out: lpBuffer=0x7d903a0*, lpNumberOfBytesRead=0xebcf7bc*=0x144, lpOverlapped=0x0) returned 1 [0214.329] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.329] WriteFile (in: hFile=0x1568, lpBuffer=0x7d93fa8*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0xebcf7c0, lpOverlapped=0x0 | out: lpBuffer=0x7d93fa8*, lpNumberOfBytesWritten=0xebcf7c0*=0x144, lpOverlapped=0x0) returned 1 [0217.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a7e0 [0217.881] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5e390 [0217.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5e390) returned 1 [0217.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d93fa8) returned 1 [0217.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7d903a0) returned 1 [0217.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e940) returned 1 [0217.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be250) returned 1 [0217.882] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86428 [0217.882] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.882] WriteFile (in: hFile=0x1568, lpBuffer=0x7cd2b10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xebcf848, lpOverlapped=0x0 | out: lpBuffer=0x7cd2b10*, lpNumberOfBytesWritten=0xebcf848*=0x10c, lpOverlapped=0x0) returned 1 [0222.664] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7a24590 [0222.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3e06878 [0222.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53738 [0222.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e53738) returned 1 [0222.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3e53738 [0222.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e53490 [0222.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3e52b58 [0222.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e52b58) returned 1 [0222.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e06878) returned 1 [0222.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a24590) returned 1 [0222.665] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0222.665] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="ba") returned 2 [0222.665] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="18") returned 2 [0222.665] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="7d") returned 2 [0222.665] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="0c") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="93") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="16") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="99") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="d1") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="a7") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="ca") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="7f") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="ab") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="ca") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="90") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="0d") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="6b") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="0c") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="ee") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="0a") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="da") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="72") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="90") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="cf") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="e0") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="1c") returned 2 [0222.666] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="90") returned 2 [0222.666] RtlInitAnsiString (in: DestinationString=0xebcf7d0, SourceString="ba187d0c931699d1a7ca7fabca900d6b0cee0ada7290cfe01c90" | out: DestinationString="ba187d0c931699d1a7ca7fabca900d6b0cee0ada7290cfe01c90") [0222.666] RtlAnsiStringToUnicodeString (in: DestinationString=0xebcf7c8, SourceString="ba187d0c931699d1a7ca7fabca900d6b0cee0ada7290cfe01c90", AllocateDestinationString=1 | out: DestinationString="ba187d0c931699d1a7ca7fabca900d6b0cee0ada7290cfe01c90") returned 0x0 [0222.666] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c720 [0224.380] CloseHandle (hObject=0x2250) returned 1 [0224.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ca85e8) returned 1 [0224.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a678d8) returned 1 Thread: id = 7361 os_tid = 0x668 [0203.874] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json")) returned 0x2020 [0204.405] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", dwFileAttributes=0x20) returned 1 [0215.239] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x21c0 [0215.240] GetFileSizeEx (in: hFile=0x21c0, lpFileSize=0xb94fdcc | out: lpFileSize=0xb94fdcc*=295) returned 1 [0215.240] SetFilePointerEx (in: hFile=0x21c0, liDistanceToMove=0x123, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.240] ReadFile (in: hFile=0x21c0, lpBuffer=0xb94fda8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb94fdb8, lpOverlapped=0x0 | out: lpBuffer=0xb94fda8*, lpNumberOfBytesRead=0xb94fdb8*=0x4, lpOverlapped=0x0) returned 1 [0215.242] SetFilePointerEx (in: hFile=0x21c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c2c0 [0215.242] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c9a0 [0215.242] NtQuerySystemTime (in: CurrentTime=0xb94fd40 | out: CurrentTime=0xb94fd40*=132462177938280000) returned 0x0 [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x54f6a2b5 [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x3e6dc55b [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x3095f032 [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x825f1e7 [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x668a6139 [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x6874eafa [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x46c007f1 [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x40df7657 [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x5164cd71 [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x4ad96240 [0215.242] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x548b9f54 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x194f5130 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x2ae85bb1 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x6831f648 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0xa9e27a2 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x34b86d7e [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x78314 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x5c746ace [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x4c2cb033 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x795c4c93 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x2c38d01c [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x38ad4c7a [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x1df8130a [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x50d2d7fe [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x6e1e5e28 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x5e82cd0d [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x17f67d8c [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x2e168de9 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x386c4a60 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0xcd0ed41 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x5f90e020 [0215.243] RtlRandomEx (in: Seed=0xb94fd38 | out: Seed=0xb94fd38) returned 0x4b2654dc [0215.251] SetFilePointerEx (in: hFile=0x21c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.251] WriteFile (in: hFile=0x21c0, lpBuffer=0x7c743e0*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0xb94fd38, lpOverlapped=0x0 | out: lpBuffer=0x7c743e0*, lpNumberOfBytesWritten=0xb94fd38*=0x127, lpOverlapped=0x0) returned 1 [0221.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3768 [0221.427] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4c30 [0221.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec4c30) returned 1 [0221.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c743e0) returned 1 [0221.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7c707d8) returned 1 [0221.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d50c60) returned 1 [0221.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b85a78) returned 1 [0221.428] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x7a38560 [0221.428] SetFilePointerEx (in: hFile=0x21c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.428] WriteFile (in: hFile=0x21c0, lpBuffer=0x7cbb1a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xb94fdc0, lpOverlapped=0x0 | out: lpBuffer=0x7cbb1a0*, lpNumberOfBytesWritten=0xb94fdc0*=0x10c, lpOverlapped=0x0) returned 1 [0223.126] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f998 [0223.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bcf8 [0223.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bcf8) returned 1 [0223.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305bcf8 [0223.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305be38 [0223.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b7d0 [0223.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b7d0) returned 1 [0223.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f998) returned 1 [0223.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.127] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.127] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="20") returned 2 [0223.127] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="9b") returned 2 [0223.127] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="ac") returned 2 [0223.127] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="fc") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="a4") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="ac") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="0b") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="ed") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="c0") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="f6") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="58") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="13") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="71") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="40") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="33") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="3d") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="ac") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="02") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="43") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="24") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="5d") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="c4") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="b3") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="28") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="d9") returned 2 [0223.128] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="f0") returned 2 [0223.128] RtlInitAnsiString (in: DestinationString=0xb94fd48, SourceString="209bacfca4ac0bedc0f658137140333dac0243245dc4b328d9f0" | out: DestinationString="209bacfca4ac0bedc0f658137140333dac0243245dc4b328d9f0") [0223.128] RtlAnsiStringToUnicodeString (in: DestinationString=0xb94fd40, SourceString="209bacfca4ac0bedc0f658137140333dac0243245dc4b328d9f0", AllocateDestinationString=1 | out: DestinationString="209bacfca4ac0bedc0f658137140333dac0243245dc4b328d9f0") returned 0x0 [0223.128] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3f1a0 [0224.312] CloseHandle (hObject=0x2250) returned 1 [0224.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2cd8) returned 1 [0224.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67a00) returned 1 Thread: id = 7362 os_tid = 0x520 [0203.875] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json")) returned 0x2020 [0203.875] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", dwFileAttributes=0x20) returned 1 [0214.331] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1994 [0214.332] GetFileSizeEx (in: hFile=0x1994, lpFileSize=0x141ff8bc | out: lpFileSize=0x141ff8bc*=234) returned 1 [0214.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bc08 [0214.332] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0214.332] NtQuerySystemTime (in: CurrentTime=0x141ff830 | out: CurrentTime=0x141ff830*=132462177929076000) returned 0x0 [0214.332] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x6ad6a3e4 [0214.332] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x4dd5bd87 [0214.332] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x268f1768 [0214.332] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0xfdfceab [0214.332] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x22efcd67 [0214.332] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x3676789b [0214.332] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x5a87f37e [0214.332] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x647d34d2 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x281f4de5 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x41485eb6 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x14103059 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x5adda4fe [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x4d19a3fd [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x4423e1d0 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x19005f5c [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x483643e6 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x662e7f9b [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x50bb06cf [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x1d4e732e [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x49f05a6e [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x5d638da0 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x6f000a76 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x15034e06 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x749091e6 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x32075fe [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x286d107b [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x46ca213b [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x79d9a20b [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x143277ef [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x533aa35a [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x6b53c750 [0214.333] RtlRandomEx (in: Seed=0x141ff828 | out: Seed=0x141ff828) returned 0x79644bae [0214.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b8bf68 [0214.342] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b8fb70 [0214.342] ReadFile (in: hFile=0x1994, lpBuffer=0x7b8bf68, nNumberOfBytesToRead=0xea, lpNumberOfBytesRead=0x141ff824, lpOverlapped=0x0 | out: lpBuffer=0x7b8bf68*, lpNumberOfBytesRead=0x141ff824*=0xea, lpOverlapped=0x0) returned 1 [0214.344] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.344] WriteFile (in: hFile=0x1994, lpBuffer=0x7b8fb70*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x141ff828, lpOverlapped=0x0 | out: lpBuffer=0x7b8fb70*, lpNumberOfBytesWritten=0x141ff828*=0xea, lpOverlapped=0x0) returned 1 [0217.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4078 [0217.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec65a8 [0217.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec65a8) returned 1 [0217.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8fb70) returned 1 [0217.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b8bf68) returned 1 [0217.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e490) returned 1 [0217.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be298) returned 1 [0217.935] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86908 [0217.936] SetFilePointerEx (in: hFile=0x1994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.936] WriteFile (in: hFile=0x1994, lpBuffer=0x7cba480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x141ff8b0, lpOverlapped=0x0 | out: lpBuffer=0x7cba480*, lpNumberOfBytesWritten=0x141ff8b0*=0x10c, lpOverlapped=0x0) returned 1 [0218.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dca5d0 [0218.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dca5d0) returned 1 [0218.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3dca5d0 [0218.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9db0 [0218.443] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3dc9e78 [0218.443] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc9e78) returned 1 [0218.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.444] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.444] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.444] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="d4") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="f2") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="8f") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="35") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="3d") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="c7") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="04") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="49") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="e5") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="0f") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="3f") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="36") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="d4") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="68") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="63") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="b9") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="97") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="02") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="d0") returned 2 [0218.444] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="af") returned 2 [0218.445] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="1a") returned 2 [0218.445] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="13") returned 2 [0218.445] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="a2") returned 2 [0218.445] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="d7") returned 2 [0218.445] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="f2") returned 2 [0218.445] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="62") returned 2 [0218.445] RtlInitAnsiString (in: DestinationString=0x141ff838, SourceString="d4f28f353dc70449e50f3f36d46863b99702d0af1a13a2d7f262" | out: DestinationString="d4f28f353dc70449e50f3f36d46863b99702d0af1a13a2d7f262") [0218.445] RtlAnsiStringToUnicodeString (in: DestinationString=0x141ff830, SourceString="d4f28f353dc70449e50f3f36d46863b99702d0af1a13a2d7f262", AllocateDestinationString=1 | out: DestinationString="d4f28f353dc70449e50f3f36d46863b99702d0af1a13a2d7f262") returned 0x0 [0218.445] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e058 [0224.238] CloseHandle (hObject=0x2250) returned 1 [0224.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb34f0) returned 1 [0224.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67b28) returned 1 Thread: id = 7363 os_tid = 0xc20 [0203.876] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json")) returned 0x2020 [0204.408] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", dwFileAttributes=0x20) returned 1 [0215.279] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2370 [0215.280] GetFileSizeEx (in: hFile=0x2370, lpFileSize=0x1715fd94 | out: lpFileSize=0x1715fd94*=222) returned 1 [0215.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec34c0 [0215.280] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3560 [0215.280] NtQuerySystemTime (in: CurrentTime=0x1715fd08 | out: CurrentTime=0x1715fd08*=132462177938592000) returned 0x0 [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x27c77a21 [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x6f34bd7e [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x39e1f48e [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x692ffc91 [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x7361ee2a [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x386c4a60 [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x5c2ea532 [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x86b4844 [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x55ad381d [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x65a122a4 [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x374e0841 [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x71849a2f [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x746199c [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x7ec276cb [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0xf8e424e [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x5aab902d [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x6281305d [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x2b813aa9 [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x66c6817a [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x6207c48b [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x16442e59 [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x862c4fc [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x2c38d01c [0215.280] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x5f63add0 [0215.281] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x41dd60e4 [0215.281] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x4b86233 [0215.281] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x39407ce [0215.281] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x5f63add0 [0215.281] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x2b813aa9 [0215.281] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0xd94a730 [0215.281] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x2e4aacd8 [0215.281] RtlRandomEx (in: Seed=0x1715fd00 | out: Seed=0x1715fd00) returned 0x40a37eac [0215.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10dd0060 [0215.290] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7acb8e0 [0215.290] ReadFile (in: hFile=0x2370, lpBuffer=0x10dd0060, nNumberOfBytesToRead=0xde, lpNumberOfBytesRead=0x1715fcfc, lpOverlapped=0x0 | out: lpBuffer=0x10dd0060*, lpNumberOfBytesRead=0x1715fcfc*=0xde, lpOverlapped=0x0) returned 1 [0215.292] SetFilePointerEx (in: hFile=0x2370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.292] WriteFile (in: hFile=0x2370, lpBuffer=0x7acb8e0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x1715fd00, lpOverlapped=0x0 | out: lpBuffer=0x7acb8e0*, lpNumberOfBytesWritten=0x1715fd00*=0xde, lpOverlapped=0x0) returned 1 [0221.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec66e8 [0221.025] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3718 [0221.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3718) returned 1 [0221.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7acb8e0) returned 1 [0221.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10dd0060) returned 1 [0221.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d51458) returned 1 [0221.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b86060) returned 1 [0221.026] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e864b8 [0221.026] SetFilePointerEx (in: hFile=0x2370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.026] WriteFile (in: hFile=0x2370, lpBuffer=0x7cd28e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1715fd88, lpOverlapped=0x0 | out: lpBuffer=0x7cd28e0*, lpNumberOfBytesWritten=0x1715fd88*=0x10c, lpOverlapped=0x0) returned 1 [0223.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0223.075] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cb58 [0223.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305cb58) returned 1 [0223.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305cb58 [0223.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b848 [0223.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c428 [0223.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c428) returned 1 [0223.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0223.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.076] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.076] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="61") returned 2 [0223.076] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="99") returned 2 [0223.076] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="a9") returned 2 [0223.076] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="9c") returned 2 [0223.076] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="44") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="52") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="c6") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="c7") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="c3") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="2f") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="f3") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="f4") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="17") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="bd") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="a1") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="13") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="36") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="4e") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="82") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="16") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="24") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="47") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="09") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="06") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="c7") returned 2 [0223.077] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="9b") returned 2 [0223.077] RtlInitAnsiString (in: DestinationString=0x1715fd10, SourceString="6199a99c4452c6c7c32ff3f417bda113364e821624470906c79b" | out: DestinationString="6199a99c4452c6c7c32ff3f417bda113364e821624470906c79b") [0223.077] RtlAnsiStringToUnicodeString (in: DestinationString=0x1715fd08, SourceString="6199a99c4452c6c7c32ff3f417bda113364e821624470906c79b", AllocateDestinationString=1 | out: DestinationString="6199a99c4452c6c7c32ff3f417bda113364e821624470906c79b") returned 0x0 [0223.078] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a236f8 [0224.222] CloseHandle (hObject=0x2250) returned 1 [0224.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2838) returned 1 [0224.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67c50) returned 1 Thread: id = 7364 os_tid = 0xc1c [0203.877] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json")) returned 0x2020 [0204.392] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", dwFileAttributes=0x20) returned 1 [0215.469] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1d18 [0215.470] GetFileSizeEx (in: hFile=0x1d18, lpFileSize=0x1424fcc4 | out: lpFileSize=0x1424fcc4*=210) returned 1 [0215.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0215.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec4820 [0215.470] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2d18 [0215.470] NtQuerySystemTime (in: CurrentTime=0x1424fc38 | out: CurrentTime=0x1424fc38*=132462177940464000) returned 0x0 [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x2181bfd8 [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x5a720dd3 [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x3ebfd88d [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x6637c7e1 [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x5094722b [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x7c5380d2 [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x6ace170e [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x66951be9 [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x5539b7d5 [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x656167c3 [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x4220f0ee [0215.470] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x9b4b91b [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x4efb87be [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x2725bceb [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0xb1bd1c2 [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x3fe0a1ae [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x49840953 [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x2a26b6c [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x2c254155 [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x28d06734 [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x5e3b4e3d [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x4496c0bb [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x62bfedb1 [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x6e3aa1ab [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x66e6dda0 [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0xbc5fdb4 [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x3bcee742 [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x7e6d89cc [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x792a3843 [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x5fd47f6c [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x1e20cba4 [0215.471] RtlRandomEx (in: Seed=0x1424fc30 | out: Seed=0x1424fc30) returned 0x45c1db37 [0215.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0215.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e22c88 [0215.480] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10e26890 [0215.480] ReadFile (in: hFile=0x1d18, lpBuffer=0x10e22c88, nNumberOfBytesToRead=0xd2, lpNumberOfBytesRead=0x1424fc2c, lpOverlapped=0x0 | out: lpBuffer=0x10e22c88*, lpNumberOfBytesRead=0x1424fc2c*=0xd2, lpOverlapped=0x0) returned 1 [0215.482] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.482] WriteFile (in: hFile=0x1d18, lpBuffer=0x10e26890*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x1424fc30, lpOverlapped=0x0 | out: lpBuffer=0x10e26890*, lpNumberOfBytesWritten=0x1424fc30*=0xd2, lpOverlapped=0x0) returned 1 [0220.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3060 [0220.820] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3d30 [0220.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3d30) returned 1 [0220.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e26890) returned 1 [0220.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10e22c88) returned 1 [0220.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e3bae0) returned 1 [0220.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb8218) returned 1 [0220.821] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e85ee8 [0220.821] SetFilePointerEx (in: hFile=0x1d18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.821] WriteFile (in: hFile=0x1d18, lpBuffer=0x7cd26b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1424fcb8, lpOverlapped=0x0 | out: lpBuffer=0x7cd26b0*, lpNumberOfBytesWritten=0x1424fcb8*=0x10c, lpOverlapped=0x0) returned 1 [0223.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0223.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3678 [0223.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3678) returned 1 [0223.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3678 [0223.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6698 [0223.056] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a60 [0223.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a60) returned 1 [0223.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0223.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.057] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.057] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="74") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="aa") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="43") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="be") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="c1") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="a5") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="9b") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="e6") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="a0") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="d7") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="be") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="7c") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="5d") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="ed") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="2b") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="56") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="8c") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="64") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="d2") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="57") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="ac") returned 2 [0223.057] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="98") returned 2 [0223.058] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="d4") returned 2 [0223.058] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="2e") returned 2 [0223.058] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="20") returned 2 [0223.058] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="be") returned 2 [0223.058] RtlInitAnsiString (in: DestinationString=0x1424fc40, SourceString="74aa43bec1a59be6a0d7be7c5ded2b568c64d257ac98d42e20be" | out: DestinationString="74aa43bec1a59be6a0d7be7c5ded2b568c64d257ac98d42e20be") [0223.058] RtlAnsiStringToUnicodeString (in: DestinationString=0x1424fc38, SourceString="74aa43bec1a59be6a0d7be7c5ded2b568c64d257ac98d42e20be", AllocateDestinationString=1 | out: DestinationString="74aa43bec1a59be6a0d7be7c5ded2b568c64d257ac98d42e20be") returned 0x0 [0223.058] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a23590 [0224.217] CloseHandle (hObject=0x2250) returned 1 [0224.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb2e00) returned 1 [0224.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a67d78) returned 1 Thread: id = 7365 os_tid = 0xbd4 [0203.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss")) returned 0x20 [0204.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS", dwFileAttributes=0x20) returned 0 [0204.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.312] GetLastError () returned 0x5 [0204.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS", dwFileAttributes=0x20) returned 0 [0204.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63e0) returned 1 Thread: id = 7366 os_tid = 0xad0 [0203.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx")) returned 0x20 [0204.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX", dwFileAttributes=0x20) returned 0 [0204.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.846] GetLastError () returned 0x5 [0204.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX", dwFileAttributes=0x20) returned 0 [0204.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6340) returned 1 Thread: id = 7367 os_tid = 0xacc [0203.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx")) returned 0x20 [0204.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX", dwFileAttributes=0x20) returned 0 [0204.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.844] GetLastError () returned 0x5 [0204.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX", dwFileAttributes=0x20) returned 0 [0204.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb62a0) returned 1 Thread: id = 7368 os_tid = 0xac8 [0203.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss")) returned 0x20 [0204.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS", dwFileAttributes=0x20) returned 0 [0204.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.842] GetLastError () returned 0x5 [0204.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS", dwFileAttributes=0x20) returned 0 [0204.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6200) returned 1 Thread: id = 7369 os_tid = 0xb14 [0203.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst")) returned 0x20 [0204.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST", dwFileAttributes=0x20) returned 0 [0204.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.841] GetLastError () returned 0x5 [0204.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST", dwFileAttributes=0x20) returned 0 [0204.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6160) returned 1 Thread: id = 7370 os_tid = 0x308 [0203.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss")) returned 0x20 [0204.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS", dwFileAttributes=0x20) returned 0 [0204.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.830] GetLastError () returned 0x5 [0204.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS", dwFileAttributes=0x20) returned 0 [0204.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6480) returned 1 Thread: id = 7371 os_tid = 0xb44 [0203.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst")) returned 0x20 [0204.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST", dwFileAttributes=0x20) returned 0 [0204.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.828] GetLastError () returned 0x5 [0204.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST", dwFileAttributes=0x20) returned 0 [0204.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6520) returned 1 Thread: id = 7372 os_tid = 0xb78 [0203.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss")) returned 0x20 [0204.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS", dwFileAttributes=0x20) returned 0 [0204.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.826] GetLastError () returned 0x5 [0204.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS", dwFileAttributes=0x20) returned 0 [0204.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb65c0) returned 1 Thread: id = 7373 os_tid = 0x21e4 [0203.882] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json")) returned 0x2020 [0203.882] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", dwFileAttributes=0x20) returned 1 [0214.345] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x860 [0214.345] GetFileSizeEx (in: hFile=0x860, lpFileSize=0x1739f7ac | out: lpFileSize=0x1739f7ac*=179) returned 1 [0214.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bca8 [0214.345] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0214.346] NtQuerySystemTime (in: CurrentTime=0x1739f720 | out: CurrentTime=0x1739f720*=132462177929232000) returned 0x0 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x6cf97c5a [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x2ee5a20d [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x24bb2fc5 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x1a0c17c4 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x7369d00d [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x266d7ed7 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x7515597b [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x558cae7a [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x76a8ed6f [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x4423e1d0 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x1749ca7e [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x6f3248f1 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x147390f3 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x14e608a8 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x7ce879ac [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x736b0e71 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x377ffab0 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x7f98cbcc [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x3df94b48 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x576a0275 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x208dffcb [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x1663eadb [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x2a08e00e [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0xe7f674b [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x5dd5dd58 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x1c6a65db [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0xf71ac0a [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x36eeecf9 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x28fcd3e4 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0xb238e81 [0214.346] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x3e95b046 [0214.347] RtlRandomEx (in: Seed=0x1739f718 | out: Seed=0x1739f718) returned 0x70264eeb [0214.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.358] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b93778 [0214.359] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b97380 [0214.359] ReadFile (in: hFile=0x860, lpBuffer=0x7b93778, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1739f714, lpOverlapped=0x0 | out: lpBuffer=0x7b93778*, lpNumberOfBytesRead=0x1739f714*=0xb3, lpOverlapped=0x0) returned 1 [0214.360] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.360] WriteFile (in: hFile=0x860, lpBuffer=0x7b97380*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1739f718, lpOverlapped=0x0 | out: lpBuffer=0x7b97380*, lpNumberOfBytesWritten=0x1739f718*=0xb3, lpOverlapped=0x0) returned 1 [0217.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5a858 [0217.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3d5b028 [0217.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d5b028) returned 1 [0217.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b97380) returned 1 [0217.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b93778) returned 1 [0217.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e148) returned 1 [0217.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be1c0) returned 1 [0217.892] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86728 [0217.892] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.892] WriteFile (in: hFile=0x860, lpBuffer=0x7cd33d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1739f7a0, lpOverlapped=0x0 | out: lpBuffer=0x7cd33d0*, lpNumberOfBytesWritten=0x1739f7a0*=0x10c, lpOverlapped=0x0) returned 1 [0220.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7b84998 [0220.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6c720 [0220.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3a38 [0220.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3a38) returned 1 [0220.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec3a38 [0220.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0220.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec64e0 [0220.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec64e0) returned 1 [0220.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6c720) returned 1 [0220.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b84998) returned 1 [0220.115] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0220.115] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="4e") returned 2 [0220.115] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="61") returned 2 [0220.115] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="f4") returned 2 [0220.115] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="58") returned 2 [0220.115] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="61") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="b0") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="f7") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="b5") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="2f") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="12") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="24") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="36") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="57") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="0e") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="85") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="d5") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="fe") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="64") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="b3") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="13") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="34") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="6c") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="64") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="e4") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="e7") returned 2 [0220.116] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="e3") returned 2 [0220.116] RtlInitAnsiString (in: DestinationString=0x1739f728, SourceString="4e61f45861b0f7b52f122436570e85d5fe64b313346c64e4e7e3" | out: DestinationString="4e61f45861b0f7b52f122436570e85d5fe64b313346c64e4e7e3") [0220.116] RtlAnsiStringToUnicodeString (in: DestinationString=0x1739f720, SourceString="4e61f45861b0f7b52f122436570e85d5fe64b313346c64e4e7e3", AllocateDestinationString=1 | out: DestinationString="4e61f45861b0f7b52f122436570e85d5fe64b313346c64e4e7e3") returned 0x0 [0220.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a6c180 [0224.920] __SEH_epilog4 () [0224.920] CloseHandle (hObject=0x1568) returned 1 [0224.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caeb18) returned 1 [0224.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd72a0) returned 1 Thread: id = 7374 os_tid = 0x21e8 [0203.883] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json")) returned 0x2020 [0203.883] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", dwFileAttributes=0x20) returned 1 [0214.362] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x19a4 [0214.362] GetFileSizeEx (in: hFile=0x19a4, lpFileSize=0x462fdcc | out: lpFileSize=0x462fdcc*=179) returned 1 [0214.362] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cc48 [0214.363] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0214.363] NtQuerySystemTime (in: CurrentTime=0x462fd40 | out: CurrentTime=0x462fd40*=132462177929388000) returned 0x0 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x335b3b02 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x71ee7597 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x4889f340 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x6525d450 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x3a32e78b [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x9a76958 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x523a9792 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x2333563a [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x6f8ac3b [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x1a21c2a3 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x143277ef [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x46eff96e [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0xd235489 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x1e09ed26 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x68e956ee [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x64adf3ca [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x628f5ec9 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x4c4d14a0 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x2f1ce1f6 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x3710458e [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x37e15774 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x6395d998 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x76f2ad76 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x7f76b305 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x2e76dec2 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x23de29ca [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x7a610f8a [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x4401cd77 [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x5a8bd37d [0214.363] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x4e854bb2 [0214.364] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x7c0d426c [0214.364] RtlRandomEx (in: Seed=0x462fd38 | out: Seed=0x462fd38) returned 0x634d5313 [0214.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b9af88 [0214.371] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b9eb90 [0214.371] ReadFile (in: hFile=0x19a4, lpBuffer=0x7b9af88, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x462fd34, lpOverlapped=0x0 | out: lpBuffer=0x7b9af88*, lpNumberOfBytesRead=0x462fd34*=0xb3, lpOverlapped=0x0) returned 1 [0214.373] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.373] WriteFile (in: hFile=0x19a4, lpBuffer=0x7b9eb90*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x462fd38, lpOverlapped=0x0 | out: lpBuffer=0x7b9eb90*, lpNumberOfBytesWritten=0x462fd38*=0xb3, lpOverlapped=0x0) returned 1 [0221.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3290 [0221.082] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0221.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0221.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9eb90) returned 1 [0221.083] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b9af88) returned 1 [0221.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0221.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be178) returned 1 [0221.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db3db0 [0221.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6710) returned 1 [0221.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3db36f0 [0221.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec6710 [0221.116] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3e20 [0221.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec3e20) returned 1 [0221.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e0d0) returned 1 [0221.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be178) returned 1 [0221.117] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x10c) returned 0x3dec828 [0221.117] SetFilePointerEx (in: hFile=0x19a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.117] WriteFile (in: hFile=0x19a4, lpBuffer=0x3dec828*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x462fdc0, lpOverlapped=0x0 | out: lpBuffer=0x3dec828*, lpNumberOfBytesWritten=0x462fdc0*=0x10c, lpOverlapped=0x0) returned 1 [0223.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x3e85110 [0223.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f290 [0223.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2e58 [0223.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec2e58) returned 1 [0223.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x3ec2e58 [0223.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec3808 [0223.090] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec40a0 [0223.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec40a0) returned 1 [0223.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f290) returned 1 [0223.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e85110) returned 1 [0223.091] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x3e73e30 [0223.091] sprintf (in: _Dest=0x3e73e30, _Format="%c%c" | out: _Dest="31") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e32, _Format="%c%c" | out: _Dest="97") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e34, _Format="%c%c" | out: _Dest="b9") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e36, _Format="%c%c" | out: _Dest="c3") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e38, _Format="%c%c" | out: _Dest="10") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e3a, _Format="%c%c" | out: _Dest="53") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e3c, _Format="%c%c" | out: _Dest="fb") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e3e, _Format="%c%c" | out: _Dest="0f") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e40, _Format="%c%c" | out: _Dest="4c") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e42, _Format="%c%c" | out: _Dest="35") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e44, _Format="%c%c" | out: _Dest="2b") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e46, _Format="%c%c" | out: _Dest="3e") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e48, _Format="%c%c" | out: _Dest="e1") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e4a, _Format="%c%c" | out: _Dest="ba") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e4c, _Format="%c%c" | out: _Dest="67") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e4e, _Format="%c%c" | out: _Dest="07") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e50, _Format="%c%c" | out: _Dest="d1") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e52, _Format="%c%c" | out: _Dest="da") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e54, _Format="%c%c" | out: _Dest="fe") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e56, _Format="%c%c" | out: _Dest="68") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e58, _Format="%c%c" | out: _Dest="84") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e5a, _Format="%c%c" | out: _Dest="8d") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e5c, _Format="%c%c" | out: _Dest="68") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e5e, _Format="%c%c" | out: _Dest="24") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e60, _Format="%c%c" | out: _Dest="2c") returned 2 [0223.091] sprintf (in: _Dest=0x3e73e62, _Format="%c%c" | out: _Dest="9f") returned 2 [0223.091] RtlInitAnsiString (in: DestinationString=0x462fd48, SourceString="3197b9c31053fb0f4c352b3ee1ba6707d1dafe68848d68242c9f" | out: DestinationString="3197b9c31053fb0f4c352b3ee1ba6707d1dafe68848d68242c9f") [0223.091] RtlAnsiStringToUnicodeString (in: DestinationString=0x462fd40, SourceString="3197b9c31053fb0f4c352b3ee1ba6707d1dafe68848d68242c9f", AllocateDestinationString=1 | out: DestinationString="3197b9c31053fb0f4c352b3ee1ba6707d1dafe68848d68242c9f") returned 0x0 [0223.092] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x7a237e8 [0224.385] CloseHandle (hObject=0x2250) returned 1 [0224.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd4020) returned 1 [0224.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd73c8) returned 1 Thread: id = 7375 os_tid = 0x21ec [0203.884] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json")) returned 0x2020 [0203.884] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json", dwFileAttributes=0x20) returned 1 [0214.374] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc0 [0214.375] GetFileSizeEx (in: hFile=0x1bc0, lpFileSize=0x1433fc74 | out: lpFileSize=0x1433fc74*=179) returned 1 [0214.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305cd38 [0214.375] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0214.375] NtQuerySystemTime (in: CurrentTime=0x1433fbe8 | out: CurrentTime=0x1433fbe8*=132462177929544000) returned 0x0 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x20db1bc0 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x738d2749 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x6c2f398d [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x63571215 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x5636c2b6 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x4711541a [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x76d927ff [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x7bfcfc36 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0xcd5a274 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x5a5d1abe [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x4481ff0d [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x3d73fb59 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x1227d994 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x4902860 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x2854d718 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x6c2890a2 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x19799acf [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x60133c91 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x7d3bbb15 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x32376109 [0214.375] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x6f8ac3b [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x7828b42d [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x258a739b [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x47b7b3e7 [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x3150639e [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x20b70181 [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x399690df [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x56afccad [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x71613757 [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x25e08364 [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x11eb5594 [0214.376] RtlRandomEx (in: Seed=0x1433fbe0 | out: Seed=0x1433fbe0) returned 0x6febcb70 [0214.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba2798 [0214.384] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7ba63a0 [0214.384] ReadFile (in: hFile=0x1bc0, lpBuffer=0x7ba2798, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x1433fbdc, lpOverlapped=0x0 | out: lpBuffer=0x7ba2798*, lpNumberOfBytesRead=0x1433fbdc*=0xb3, lpOverlapped=0x0) returned 1 [0214.386] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.386] WriteFile (in: hFile=0x1bc0, lpBuffer=0x7ba63a0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1433fbe0, lpOverlapped=0x0 | out: lpBuffer=0x7ba63a0*, lpNumberOfBytesWritten=0x1433fbe0*=0xb3, lpOverlapped=0x0) returned 1 [0217.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec33d0 [0217.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec46e0 [0217.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec46e0) returned 1 [0217.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba63a0) returned 1 [0217.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7ba2798) returned 1 [0217.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3dd10) returned 1 [0217.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30be058) returned 1 [0217.927] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86c98 [0217.928] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.928] WriteFile (in: hFile=0x1bc0, lpBuffer=0x7cba020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1433fc68, lpOverlapped=0x0 | out: lpBuffer=0x7cba020*, lpNumberOfBytesWritten=0x1433fc68*=0x10c, lpOverlapped=0x0) returned 1 [0218.424] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c310 [0218.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c310) returned 1 [0218.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305c310 [0218.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c338 [0218.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bde8 [0218.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305bde8) returned 1 [0218.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.425] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="93") returned 2 [0218.425] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="4a") returned 2 [0218.425] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="67") returned 2 [0218.425] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="03") returned 2 [0218.425] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="59") returned 2 [0218.425] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="d9") returned 2 [0218.425] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="39") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="9c") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="57") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="a7") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="66") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="17") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="cb") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="f2") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="37") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="09") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="f3") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="9e") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="dd") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="37") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="bf") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="be") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="4a") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="fc") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="4f") returned 2 [0218.426] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="9a") returned 2 [0218.426] RtlInitAnsiString (in: DestinationString=0x1433fbf0, SourceString="934a670359d9399c57a76617cbf23709f39edd37bfbe4afc4f9a" | out: DestinationString="934a670359d9399c57a76617cbf23709f39edd37bfbe4afc4f9a") [0218.426] RtlAnsiStringToUnicodeString (in: DestinationString=0x1433fbe8, SourceString="934a670359d9399c57a76617cbf23709f39edd37bfbe4afc4f9a", AllocateDestinationString=1 | out: DestinationString="934a670359d9399c57a76617cbf23709f39edd37bfbe4afc4f9a") returned 0x0 [0218.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e490 [0224.892] __SEH_epilog4 () [0224.892] CloseHandle (hObject=0x151c) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f1a0) returned 1 [0224.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd74f0) returned 1 Thread: id = 7376 os_tid = 0x21f0 [0203.885] GetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json")) returned 0x2020 [0203.886] SetFileAttributesW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", dwFileAttributes=0x20) returned 1 [0214.387] CreateFileW (lpFileName="C:\\Users\\EEBsYm5\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\eebsym5\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xee0 [0214.387] GetFileSizeEx (in: hFile=0xee0, lpFileSize=0x12a9fb24 | out: lpFileSize=0x12a9fb24*=179) returned 1 [0214.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305b6e0 [0214.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c8b0 [0214.387] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c680 [0214.387] NtQuerySystemTime (in: CurrentTime=0x12a9fa98 | out: CurrentTime=0x12a9fa98*=132462177929700000) returned 0x0 [0214.387] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x5a5bdd1e [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x5608464b [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x3e0ba3c [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x507a39dc [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x4a4a8359 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x31ff4368 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x2dcc85a4 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x686bb7f5 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x7c1bbb23 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x5d1469a8 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x663efab [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x36e56f71 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x7c2767db [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x858fea1 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x260d407d [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x3486d11d [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x70eb766d [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x13840e20 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x118e1f3d [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x3321e4ad [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x7aa0ad34 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x64a4be59 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x15b680b2 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x772a1400 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x5bba0fd1 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x6bc166f7 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x333b961e [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x5c43ded8 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x42ac2849 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x222b20ed [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x1d22d323 [0214.388] RtlRandomEx (in: Seed=0x12a9fa90 | out: Seed=0x12a9fa90) returned 0x5743f19d [0214.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305b6e0) returned 1 [0214.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x7b88360 [0214.397] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c00) returned 0x10db1ca8 [0214.397] ReadFile (in: hFile=0xee0, lpBuffer=0x7b88360, nNumberOfBytesToRead=0xb3, lpNumberOfBytesRead=0x12a9fa8c, lpOverlapped=0x0 | out: lpBuffer=0x7b88360*, lpNumberOfBytesRead=0x12a9fa8c*=0xb3, lpOverlapped=0x0) returned 1 [0214.399] SetFilePointerEx (in: hFile=0xee0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.399] WriteFile (in: hFile=0xee0, lpBuffer=0x10db1ca8*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12a9fa90, lpOverlapped=0x0 | out: lpBuffer=0x10db1ca8*, lpNumberOfBytesWritten=0x12a9fa90*=0xb3, lpOverlapped=0x0) returned 1 [0217.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec2bd8 [0217.936] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x3ec31a0 [0217.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec31a0) returned 1 [0217.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x10db1ca8) returned 1 [0217.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b88360) returned 1 [0217.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3de00) returned 1 [0217.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bdcf8) returned 1 [0217.937] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x3e86998 [0217.937] SetFilePointerEx (in: hFile=0xee0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.937] WriteFile (in: hFile=0xee0, lpBuffer=0x7cba598*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12a9fb18, lpOverlapped=0x0 | out: lpBuffer=0x7cba598*, lpNumberOfBytesWritten=0x12a9fb18*=0x10c, lpOverlapped=0x0) returned 1 [0218.433] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x40) returned 0x7cbdf10 [0218.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x7a6cc48 [0218.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305baa0 [0218.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305baa0) returned 1 [0218.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x305baa0 [0218.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305bf78 [0218.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x20) returned 0x305c388 [0218.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x305c388) returned 1 [0218.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6cc48) returned 1 [0218.434] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbdf10) returned 1 [0218.434] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x35) returned 0x7a2d5c0 [0218.434] sprintf (in: _Dest=0x7a2d5c0, _Format="%c%c" | out: _Dest="92") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5c2, _Format="%c%c" | out: _Dest="28") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5c4, _Format="%c%c" | out: _Dest="83") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5c6, _Format="%c%c" | out: _Dest="60") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5c8, _Format="%c%c" | out: _Dest="eb") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5ca, _Format="%c%c" | out: _Dest="9b") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5cc, _Format="%c%c" | out: _Dest="3c") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5ce, _Format="%c%c" | out: _Dest="7f") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5d0, _Format="%c%c" | out: _Dest="2d") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5d2, _Format="%c%c" | out: _Dest="cc") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5d4, _Format="%c%c" | out: _Dest="1b") returned 2 [0218.434] sprintf (in: _Dest=0x7a2d5d6, _Format="%c%c" | out: _Dest="e6") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5d8, _Format="%c%c" | out: _Dest="cb") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5da, _Format="%c%c" | out: _Dest="24") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5dc, _Format="%c%c" | out: _Dest="5e") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5de, _Format="%c%c" | out: _Dest="e7") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5e0, _Format="%c%c" | out: _Dest="f8") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5e2, _Format="%c%c" | out: _Dest="99") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5e4, _Format="%c%c" | out: _Dest="b4") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5e6, _Format="%c%c" | out: _Dest="a6") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5e8, _Format="%c%c" | out: _Dest="5d") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5ea, _Format="%c%c" | out: _Dest="a7") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5ec, _Format="%c%c" | out: _Dest="60") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5ee, _Format="%c%c" | out: _Dest="ca") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5f0, _Format="%c%c" | out: _Dest="31") returned 2 [0218.435] sprintf (in: _Dest=0x7a2d5f2, _Format="%c%c" | out: _Dest="cf") returned 2 [0218.435] RtlInitAnsiString (in: DestinationString=0x12a9faa0, SourceString="92288360eb9b3c7f2dcc1be6cb245ee7f899b4a65da760ca31cf" | out: DestinationString="92288360eb9b3c7f2dcc1be6cb245ee7f899b4a65da760ca31cf") [0218.435] RtlAnsiStringToUnicodeString (in: DestinationString=0x12a9fa98, SourceString="92288360eb9b3c7f2dcc1be6cb245ee7f899b4a65da760ca31cf", AllocateDestinationString=1 | out: DestinationString="92288360eb9b3c7f2dcc1be6cb245ee7f899b4a65da760ca31cf") returned 0x0 [0218.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6a) returned 0x3f3e580 [0224.342] CloseHandle (hObject=0x2250) returned 1 [0224.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a5f2d8) returned 1 [0224.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cd6020) returned 1 Thread: id = 7394 os_tid = 0xf78 [0204.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css")) returned 0x20 [0205.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0205.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.445] GetLastError () returned 0x5 [0205.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", dwFileAttributes=0x20) returned 0 [0205.445] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37540) returned 1 Thread: id = 7395 os_tid = 0xf80 [0204.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xcc) returned 0x3e18130 [0204.425] wcscpy (in: _Dest=0x3e18130, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0204.425] wcscat (in: _Dest=0x3e18130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0204.425] wcscat (in: _Dest=0x3e18130, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*" [0204.425] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x336358 [0204.425] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8270fc70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906d1070, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.537] wcscmp (_String1=".", _String2=".") returned 0 [0205.537] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8270fc70, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906d1070, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.537] wcscmp (_String1="..", _String2=".") returned 1 [0205.537] wcscmp (_String1="..", _String2="..") returned 0 [0205.537] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0205.537] wcscmp (_String1="background.gif", _String2=".") returned 1 [0205.537] wcscmp (_String1="background.gif", _String2="..") returned 1 [0205.537] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe6) returned 0x3daf178 [0205.537] wcscpy (in: _Dest=0x3daf178, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0205.537] wcscat (in: _Dest=0x3daf178, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0205.537] wcscat (in: _Dest=0x3daf178, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" [0205.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3daf178, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88 [0205.539] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8270fc70, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0205.539] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0205.539] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0205.539] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc52c8 [0205.539] wcscpy (in: _Dest=0x3dc52c8, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0205.539] wcscat (in: _Dest=0x3dc52c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0205.539] wcscat (in: _Dest=0x3dc52c8, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" [0205.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc52c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84 [0205.545] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.545] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.545] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.545] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4d58 [0205.545] wcscpy (in: _Dest=0x3dc4d58, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0205.545] wcscat (in: _Dest=0x3dc4d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0205.545] wcscat (in: _Dest=0x3dc4d58, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" [0205.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670 [0205.546] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.546] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.546] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.546] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xde) returned 0x3dc4e40 [0205.546] wcscpy (in: _Dest=0x3dc4e40, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2" [0205.546] wcscat (in: _Dest=0x3dc4e40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\" [0205.546] wcscat (in: _Dest=0x3dc4e40, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" [0205.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c [0205.547] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x336358 | out: lpFindFileData=0x336358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906d1070, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.547] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x336358) returned 1 [0205.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18130) returned 1 [0205.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d852f0) returned 1 Thread: id = 7396 os_tid = 0xf7c [0204.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css")) returned 0x20 [0205.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0205.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.536] GetLastError () returned 0x5 [0205.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", dwFileAttributes=0x20) returned 0 [0205.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e37030) returned 1 Thread: id = 7397 os_tid = 0x330 [0204.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xce) returned 0x2e5648 [0204.426] wcscpy (in: _Dest=0x2e5648, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0204.426] wcscat (in: _Dest=0x2e5648, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0204.426] wcscat (in: _Dest=0x2e5648, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*" [0204.426] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x3365c0 [0204.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8275bf30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906f71d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7a2d700 [0205.435] wcscmp (_String1=".", _String2=".") returned 0 [0205.435] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8275bf30, ftCreationTime.dwHighDateTime=0x1d2da19, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x906f71d0, ftLastWriteTime.dwHighDateTime=0x1d2da19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.435] wcscmp (_String1="..", _String2=".") returned 1 [0205.435] wcscmp (_String1="..", _String2="..") returned 0 [0205.435] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0205.435] wcscmp (_String1="background.gif", _String2=".") returned 1 [0205.435] wcscmp (_String1="background.gif", _String2="..") returned 1 [0205.435] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe8) returned 0x3db0168 [0205.435] wcscpy (in: _Dest=0x3db0168, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0205.435] wcscat (in: _Dest=0x3db0168, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0205.436] wcscat (in: _Dest=0x3db0168, _Source="background.gif" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" [0205.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec [0205.437] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0600, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x37da0600, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0205.437] wcscmp (_String1="HEADER.GIF", _String2=".") returned 1 [0205.437] wcscmp (_String1="HEADER.GIF", _String2="..") returned 1 [0205.437] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc48d0 [0205.437] wcscpy (in: _Dest=0x3dc48d0, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0205.437] wcscat (in: _Dest=0x3dc48d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0205.437] wcscat (in: _Dest=0x3dc48d0, _Source="HEADER.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" [0205.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc48d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0 [0205.438] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x906f71d0, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0205.438] wcscmp (_String1="TAB_OFF.GIF", _String2=".") returned 1 [0205.438] wcscmp (_String1="TAB_OFF.GIF", _String2="..") returned 1 [0205.438] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe2) returned 0x3db0d98 [0205.438] wcscpy (in: _Dest=0x3db0d98, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0205.438] wcscat (in: _Dest=0x3db0d98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0205.439] wcscat (in: _Dest=0x3db0d98, _Source="TAB_OFF.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" [0205.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3db0d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc [0205.440] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0205.440] wcscmp (_String1="TAB_ON.GIF", _String2=".") returned 1 [0205.440] wcscmp (_String1="TAB_ON.GIF", _String2="..") returned 1 [0205.440] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xe0) returned 0x3dc4c70 [0205.440] wcscpy (in: _Dest=0x3dc4c70, _Source="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl" [0205.440] wcscat (in: _Dest=0x3dc4c70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\" [0205.440] wcscat (in: _Dest=0x3dc4c70, _Source="TAB_ON.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF") returned="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" [0205.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x3dc4c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc [0205.441] FindNextFileW (in: hFindFile=0x7a2d700, lpFindFileData=0x3365c0 | out: lpFindFileData=0x3365c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390b3300, ftCreationTime.dwHighDateTime=0x1c7484f, ftLastAccessTime.dwLowDateTime=0x8275bf30, ftLastAccessTime.dwHighDateTime=0x1d2da19, ftLastWriteTime.dwLowDateTime=0x390b3300, ftLastWriteTime.dwHighDateTime=0x1c7484f, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0205.441] FindClose (in: hFindFile=0x7a2d700 | out: hFindFile=0x7a2d700) returned 1 [0205.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3365c0) returned 1 [0205.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2e5648) returned 1 [0205.442] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e17200) returned 1 Thread: id = 7398 os_tid = 0xaf0 [0204.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css")) returned 0x20 [0205.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0205.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.531] GetLastError () returned 0x5 [0205.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", dwFileAttributes=0x20) returned 0 [0205.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c8c68) returned 1 Thread: id = 7399 os_tid = 0x16e0 [0204.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css")) returned 0x20 [0205.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0205.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.530] GetLastError () returned 0x5 [0205.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", dwFileAttributes=0x20) returned 0 [0205.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e16b40) returned 1 Thread: id = 7400 os_tid = 0xb10 [0204.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css")) returned 0x20 [0205.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0205.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.454] GetLastError () returned 0x5 [0205.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", dwFileAttributes=0x20) returned 0 [0205.455] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 Thread: id = 7401 os_tid = 0x188 [0204.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css")) returned 0x20 [0205.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0205.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.456] GetLastError () returned 0x5 [0205.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", dwFileAttributes=0x20) returned 0 [0205.456] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 Thread: id = 7402 os_tid = 0xfc0 [0204.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif")) returned 0x20 [0205.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0205.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.426] GetLastError () returned 0x5 [0205.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0205.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0d98) returned 1 Thread: id = 7403 os_tid = 0x16e4 [0204.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20 [0205.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.428] GetLastError () returned 0x5 [0205.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae4e0) returned 1 Thread: id = 7404 os_tid = 0x4f8 [0204.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20 [0205.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.431] GetLastError () returned 0x5 [0205.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0168) returned 1 Thread: id = 7405 os_tid = 0x3c8 [0204.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss")) returned 0x20 [0204.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS", dwFileAttributes=0x20) returned 0 [0204.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.962] GetLastError () returned 0x5 [0204.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS", dwFileAttributes=0x20) returned 0 [0204.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63e0) returned 1 Thread: id = 7406 os_tid = 0x3f4 [0204.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss")) returned 0x20 [0204.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS", dwFileAttributes=0x20) returned 0 [0204.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.964] GetLastError () returned 0x5 [0204.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS", dwFileAttributes=0x20) returned 0 [0204.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6660) returned 1 Thread: id = 7407 os_tid = 0xbc0 [0204.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss")) returned 0x20 [0204.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS", dwFileAttributes=0x20) returned 0 [0204.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.966] GetLastError () returned 0x5 [0204.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS", dwFileAttributes=0x20) returned 0 [0204.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6700) returned 1 Thread: id = 7408 os_tid = 0x16ec [0204.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst")) returned 0x20 [0204.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST", dwFileAttributes=0x20) returned 0 [0204.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0204.968] GetLastError () returned 0x5 [0204.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST", dwFileAttributes=0x20) returned 0 [0204.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb67a0) returned 1 Thread: id = 7409 os_tid = 0x16f0 [0204.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst")) returned 0x20 [0210.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST", dwFileAttributes=0x20) returned 0 [0211.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.715] GetLastError () returned 0x5 [0212.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST", dwFileAttributes=0x20) returned 0 [0212.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6840) returned 1 Thread: id = 7410 os_tid = 0xba8 [0204.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst")) returned 0x20 [0210.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST", dwFileAttributes=0x20) returned 0 [0211.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.924] GetLastError () returned 0x5 [0212.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST", dwFileAttributes=0x20) returned 0 [0213.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb68e0) returned 1 Thread: id = 7411 os_tid = 0xbc8 [0204.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst")) returned 0x20 [0211.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST", dwFileAttributes=0x20) returned 0 [0212.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.393] GetLastError () returned 0x5 [0213.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST", dwFileAttributes=0x20) returned 0 [0215.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6980) returned 1 Thread: id = 7412 os_tid = 0xadc [0204.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss")) returned 0x20 [0212.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS", dwFileAttributes=0x20) returned 0 [0213.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.804] GetLastError () returned 0x5 [0215.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS", dwFileAttributes=0x20) returned 0 [0216.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6a20) returned 1 Thread: id = 7413 os_tid = 0x22e0 [0204.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss")) returned 0x20 [0213.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS", dwFileAttributes=0x20) returned 0 [0213.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.014] GetLastError () returned 0x5 [0218.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.016] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6ac0) returned 1 Thread: id = 7414 os_tid = 0x570 [0204.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss")) returned 0x20 [0215.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS", dwFileAttributes=0x20) returned 0 [0216.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.020] GetLastError () returned 0x5 [0218.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS", dwFileAttributes=0x20) returned 0 [0218.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6b60) returned 1 Thread: id = 7415 os_tid = 0xd98 [0204.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss")) returned 0x20 [0215.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS", dwFileAttributes=0x20) returned 0 [0216.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.021] GetLastError () returned 0x5 [0218.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS", dwFileAttributes=0x20) returned 0 [0218.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6c00) returned 1 Thread: id = 7416 os_tid = 0x2784 [0204.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss")) returned 0x20 [0215.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS", dwFileAttributes=0x20) returned 0 [0216.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.021] GetLastError () returned 0x5 [0218.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS", dwFileAttributes=0x20) returned 0 [0218.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6ca0) returned 1 Thread: id = 7417 os_tid = 0x22f0 [0204.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss")) returned 0x20 [0215.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS", dwFileAttributes=0x20) returned 0 [0216.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.021] GetLastError () returned 0x5 [0218.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS", dwFileAttributes=0x20) returned 0 [0218.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6d40) returned 1 Thread: id = 7418 os_tid = 0xbac [0204.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss")) returned 0x20 [0215.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS", dwFileAttributes=0x20) returned 0 [0216.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.021] GetLastError () returned 0x5 [0218.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS", dwFileAttributes=0x20) returned 0 [0218.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6de0) returned 1 Thread: id = 7419 os_tid = 0x16fc [0204.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss")) returned 0x20 [0215.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS", dwFileAttributes=0x20) returned 0 [0216.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.617] GetLastError () returned 0x5 [0218.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS", dwFileAttributes=0x20) returned 0 [0218.617] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6e80) returned 1 Thread: id = 7420 os_tid = 0xbc4 [0204.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss")) returned 0x20 [0215.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS", dwFileAttributes=0x20) returned 0 [0216.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.614] GetLastError () returned 0x5 [0218.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS", dwFileAttributes=0x20) returned 0 [0218.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6f20) returned 1 Thread: id = 7421 os_tid = 0x248 [0205.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss")) returned 0x20 [0211.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS", dwFileAttributes=0x20) returned 0 [0211.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.392] GetLastError () returned 0x5 [0213.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS", dwFileAttributes=0x20) returned 0 [0213.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6fc0) returned 1 Thread: id = 7422 os_tid = 0x2790 [0205.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf")) returned 0x20 [0205.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF", dwFileAttributes=0x20) returned 0 [0205.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.095] GetLastError () returned 0x5 [0205.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF", dwFileAttributes=0x20) returned 0 [0205.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ba20) returned 1 Thread: id = 7423 os_tid = 0x220 [0205.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf")) returned 0x20 [0205.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF", dwFileAttributes=0x20) returned 0 [0205.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.097] GetLastError () returned 0x5 [0205.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF", dwFileAttributes=0x20) returned 0 [0205.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 Thread: id = 7424 os_tid = 0x1590 [0205.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf")) returned 0x20 [0210.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF", dwFileAttributes=0x20) returned 0 [0210.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.502] GetLastError () returned 0x5 [0210.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF", dwFileAttributes=0x20) returned 0 [0210.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bdd8) returned 1 Thread: id = 7425 os_tid = 0x1594 [0205.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf")) returned 0x20 [0207.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF", dwFileAttributes=0x20) returned 0 [0207.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.841] GetLastError () returned 0x5 [0207.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF", dwFileAttributes=0x20) returned 0 [0207.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bd50) returned 1 Thread: id = 7426 os_tid = 0x1598 [0205.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf")) returned 0x20 [0210.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF", dwFileAttributes=0x20) returned 0 [0210.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.497] GetLastError () returned 0x5 [0210.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF", dwFileAttributes=0x20) returned 0 [0210.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ca10) returned 1 Thread: id = 7451 os_tid = 0x98c [0205.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg")) returned 0x20 [0210.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG", dwFileAttributes=0x20) returned 0 [0210.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.501] GetLastError () returned 0x5 [0210.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG", dwFileAttributes=0x20) returned 0 [0210.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ff8) returned 1 Thread: id = 7452 os_tid = 0x9ac [0205.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf")) returned 0x20 [0210.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF", dwFileAttributes=0x20) returned 0 [0210.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.500] GetLastError () returned 0x5 [0210.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF", dwFileAttributes=0x20) returned 0 [0210.500] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 Thread: id = 7453 os_tid = 0x740 [0205.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg")) returned 0x20 [0210.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG", dwFileAttributes=0x20) returned 0 [0210.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.498] GetLastError () returned 0x5 [0210.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG", dwFileAttributes=0x20) returned 0 [0210.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ba20) returned 1 Thread: id = 7454 os_tid = 0xc8 [0205.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg")) returned 0x20 [0210.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG", dwFileAttributes=0x20) returned 0 [0210.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.495] GetLastError () returned 0x5 [0210.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG", dwFileAttributes=0x20) returned 0 [0210.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68f70) returned 1 Thread: id = 7455 os_tid = 0x9bc [0205.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf")) returned 0x20 [0210.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF", dwFileAttributes=0x20) returned 0 [0210.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.493] GetLastError () returned 0x5 [0210.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF", dwFileAttributes=0x20) returned 0 [0210.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69d40) returned 1 Thread: id = 7456 os_tid = 0x1c0 [0205.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif")) returned 0x20 [0205.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0205.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.514] GetLastError () returned 0x5 [0205.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0205.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae5d8) returned 1 Thread: id = 7457 os_tid = 0x4c0 [0205.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20 [0205.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.519] GetLastError () returned 0x5 [0205.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae100) returned 1 Thread: id = 7458 os_tid = 0x2488 [0205.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20 [0205.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.520] GetLastError () returned 0x5 [0205.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae2f0) returned 1 Thread: id = 7459 os_tid = 0x147c [0205.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif")) returned 0x20 [0205.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0205.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.264] GetLastError () returned 0x5 [0205.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0205.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 7460 os_tid = 0x107c [0205.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif")) returned 0x20 [0205.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0205.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.266] GetLastError () returned 0x5 [0205.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0205.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0258) returned 1 Thread: id = 7461 os_tid = 0x1088 [0205.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif")) returned 0x20 [0205.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0205.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.267] GetLastError () returned 0x5 [0205.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0205.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafda8) returned 1 Thread: id = 7462 os_tid = 0x1094 [0205.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif")) returned 0x20 [0205.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0205.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.550] GetLastError () returned 0x5 [0205.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0205.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0e88) returned 1 Thread: id = 7463 os_tid = 0x1098 [0205.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif")) returned 0x20 [0205.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif", dwFileAttributes=0x20) returned 0 [0205.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.404] GetLastError () returned 0x5 [0205.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif", dwFileAttributes=0x20) returned 0 [0205.404] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4e40) returned 1 Thread: id = 7464 os_tid = 0x109c [0205.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif")) returned 0x20 [0205.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0205.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.402] GetLastError () returned 0x5 [0205.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif", dwFileAttributes=0x20) returned 0 [0205.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3fc0) returned 1 Thread: id = 7465 os_tid = 0x10a0 [0205.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif")) returned 0x20 [0205.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0205.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.551] GetLastError () returned 0x5 [0205.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif", dwFileAttributes=0x20) returned 0 [0205.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4f28) returned 1 Thread: id = 7466 os_tid = 0x10a4 [0205.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs")) returned 0x20 [0207.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", dwFileAttributes=0x20) returned 0 [0207.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.745] GetLastError () returned 0x5 [0207.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS", dwFileAttributes=0x20) returned 0 [0207.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 7467 os_tid = 0x10a8 [0205.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc")) returned 0x20 [0207.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", dwFileAttributes=0x20) returned 0 [0207.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.674] GetLastError () returned 0x5 [0207.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC", dwFileAttributes=0x20) returned 0 [0207.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6700) returned 1 Thread: id = 7468 os_tid = 0x10ac [0205.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt")) returned 0x20 [0206.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", dwFileAttributes=0x20) returned 0 [0206.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.810] GetLastError () returned 0x5 [0206.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT", dwFileAttributes=0x20) returned 0 [0206.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6660) returned 1 Thread: id = 7469 os_tid = 0x10b0 [0205.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk")) returned 0x20 [0207.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.743] GetLastError () returned 0x5 [0207.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63e0) returned 1 Thread: id = 7470 os_tid = 0x10b4 [0205.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk")) returned 0x20 [0207.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.741] GetLastError () returned 0x5 [0207.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb60c0) returned 1 Thread: id = 7471 os_tid = 0x10b8 [0205.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc")) returned 0x20 [0207.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", dwFileAttributes=0x20) returned 0 [0207.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.739] GetLastError () returned 0x5 [0207.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC", dwFileAttributes=0x20) returned 0 [0207.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68558) returned 1 Thread: id = 7472 os_tid = 0x10bc [0205.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt")) returned 0x20 [0207.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", dwFileAttributes=0x20) returned 0 [0207.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.737] GetLastError () returned 0x5 [0207.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT", dwFileAttributes=0x20) returned 0 [0207.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68910) returned 1 Thread: id = 7473 os_tid = 0x10c0 [0205.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk")) returned 0x20 [0207.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.735] GetLastError () returned 0x5 [0207.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ee8) returned 1 Thread: id = 7474 os_tid = 0x10d0 [0205.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk")) returned 0x20 [0207.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.733] GetLastError () returned 0x5 [0207.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a685e0) returned 1 Thread: id = 7475 os_tid = 0x10d4 [0205.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs")) returned 0x20 [0207.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", dwFileAttributes=0x20) returned 0 [0207.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.731] GetLastError () returned 0x5 [0207.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS", dwFileAttributes=0x20) returned 0 [0207.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68668) returned 1 Thread: id = 7476 os_tid = 0x10d8 [0205.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc")) returned 0x20 [0207.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", dwFileAttributes=0x20) returned 0 [0207.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.729] GetLastError () returned 0x5 [0207.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC", dwFileAttributes=0x20) returned 0 [0207.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 7477 os_tid = 0x18a8 [0205.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt")) returned 0x20 [0207.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", dwFileAttributes=0x20) returned 0 [0207.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.727] GetLastError () returned 0x5 [0207.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT", dwFileAttributes=0x20) returned 0 [0207.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d454a0) returned 1 Thread: id = 7478 os_tid = 0x10dc [0205.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk")) returned 0x20 [0207.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.725] GetLastError () returned 0x5 [0207.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 7479 os_tid = 0x10e0 [0205.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk")) returned 0x20 [0207.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.723] GetLastError () returned 0x5 [0207.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 7480 os_tid = 0x10e4 [0205.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs")) returned 0x20 [0207.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", dwFileAttributes=0x20) returned 0 [0207.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.721] GetLastError () returned 0x5 [0207.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS", dwFileAttributes=0x20) returned 0 [0207.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69548) returned 1 Thread: id = 7481 os_tid = 0x10e8 [0205.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc")) returned 0x20 [0207.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", dwFileAttributes=0x20) returned 0 [0207.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.714] GetLastError () returned 0x5 [0207.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC", dwFileAttributes=0x20) returned 0 [0207.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 7482 os_tid = 0x5d0 [0205.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt")) returned 0x20 [0207.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", dwFileAttributes=0x20) returned 0 [0207.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.705] GetLastError () returned 0x5 [0207.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT", dwFileAttributes=0x20) returned 0 [0207.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 7483 os_tid = 0x18b0 [0205.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk")) returned 0x20 [0207.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.703] GetLastError () returned 0x5 [0207.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 7484 os_tid = 0x18b8 [0205.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk")) returned 0x20 [0207.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.701] GetLastError () returned 0x5 [0207.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0207.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 7485 os_tid = 0x18bc [0205.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl")) returned 0x20 [0207.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", dwFileAttributes=0x20) returned 0 [0207.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.699] GetLastError () returned 0x5 [0207.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL", dwFileAttributes=0x20) returned 0 [0207.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69768) returned 1 Thread: id = 7486 os_tid = 0x195c [0205.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl")) returned 0x20 [0207.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", dwFileAttributes=0x20) returned 0 [0207.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.698] GetLastError () returned 0x5 [0207.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL", dwFileAttributes=0x20) returned 0 [0207.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18e18) returned 1 Thread: id = 7487 os_tid = 0x10ec [0205.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x70) returned 0x3f3f128 [0205.282] wcscpy (in: _Dest=0x3f3f128, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" [0205.282] wcscat (in: _Dest=0x3f3f128, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\" [0205.282] wcscat (in: _Dest=0x3f3f128, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*" [0205.282] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x250) returned 0x7a2b770 [0205.282] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa55faf30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3066bc0 [0207.696] wcscmp (_String1=".", _String2=".") returned 0 [0207.696] FindNextFileW (in: hFindFile=0x3066bc0, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4492e50, ftCreationTime.dwHighDateTime=0x1d30235, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xa55faf30, ftLastWriteTime.dwHighDateTime=0x1d30235, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.696] wcscmp (_String1="..", _String2=".") returned 1 [0207.696] wcscmp (_String1="..", _String2="..") returned 0 [0207.696] FindNextFileW (in: hFindFile=0x3066bc0, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede67600, ftCreationTime.dwHighDateTime=0x1c3051d, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xede67600, ftLastWriteTime.dwHighDateTime=0x1c3051d, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="VISFIL~1.VSD")) returned 1 [0207.696] wcscmp (_String1="Visfilem.vsdir", _String2=".") returned 1 [0207.696] wcscmp (_String1="Visfilem.vsdir", _String2="..") returned 1 [0207.696] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8a) returned 0x32d110 [0207.697] wcscpy (in: _Dest=0x32d110, _Source="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir" [0207.697] wcscat (in: _Dest=0x32d110, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\" [0207.697] wcscat (in: _Dest=0x32d110, _Source="Visfilem.vsdir" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir") returned="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" [0211.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x21c5200, lpParameter=0x32d110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc [0211.450] FindNextFileW (in: hFindFile=0x3066bc0, lpFindFileData=0x7a2b770 | out: lpFindFileData=0x7a2b770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede67600, ftCreationTime.dwHighDateTime=0x1c3051d, ftLastAccessTime.dwLowDateTime=0xa55faf30, ftLastAccessTime.dwHighDateTime=0x1d30235, ftLastWriteTime.dwLowDateTime=0xede67600, ftLastWriteTime.dwHighDateTime=0x1c3051d, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="VISFIL~1.VSD")) returned 0 [0211.450] FindClose (in: hFindFile=0x3066bc0 | out: hFindFile=0x3066bc0) returned 1 [0211.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a2b770) returned 1 [0211.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3f128) returned 1 [0211.451] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3fc68) returned 1 Thread: id = 7488 os_tid = 0x10f0 [0205.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd")) returned 0x20 [0207.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", dwFileAttributes=0x20) returned 0 [0207.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.694] GetLastError () returned 0x5 [0207.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD", dwFileAttributes=0x20) returned 0 [0207.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69108) returned 1 Thread: id = 7489 os_tid = 0x10f4 [0205.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml")) returned 0x20 [0207.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", dwFileAttributes=0x20) returned 0 [0207.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.693] GetLastError () returned 0x5 [0207.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML", dwFileAttributes=0x20) returned 0 [0207.693] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69190) returned 1 Thread: id = 7490 os_tid = 0xefc [0205.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd")) returned 0x20 [0207.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", dwFileAttributes=0x20) returned 0 [0207.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.691] GetLastError () returned 0x5 [0207.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD", dwFileAttributes=0x20) returned 0 [0207.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69218) returned 1 Thread: id = 7491 os_tid = 0x10f8 [0205.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs")) returned 0x20 [0207.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", dwFileAttributes=0x20) returned 0 [0207.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.689] GetLastError () returned 0x5 [0207.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS", dwFileAttributes=0x20) returned 0 [0207.689] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a692a0) returned 1 Thread: id = 7553 os_tid = 0x17c4 [0205.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss")) returned 0x20 [0211.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS", dwFileAttributes=0x20) returned 0 [0211.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.389] GetLastError () returned 0x5 [0213.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS", dwFileAttributes=0x20) returned 0 [0213.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63a30) returned 1 Thread: id = 7558 os_tid = 0x18ac [0205.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif")) returned 0x20 [0205.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0205.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.696] GetLastError () returned 0x5 [0205.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0205.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad750) returned 1 Thread: id = 7559 os_tid = 0x18c8 [0205.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20 [0205.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.699] GetLastError () returned 0x5 [0205.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadb30) returned 1 Thread: id = 7560 os_tid = 0x18d0 [0205.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20 [0205.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.701] GetLastError () returned 0x5 [0205.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae1f8) returned 1 Thread: id = 7561 os_tid = 0x1908 [0205.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif")) returned 0x20 [0205.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0205.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.704] GetLastError () returned 0x5 [0205.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif", dwFileAttributes=0x20) returned 0 [0205.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0168) returned 1 Thread: id = 7562 os_tid = 0x2664 [0205.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif")) returned 0x20 [0207.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0207.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.824] GetLastError () returned 0x5 [0207.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0207.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc48d0) returned 1 Thread: id = 7563 os_tid = 0x2648 [0205.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif")) returned 0x20 [0207.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0207.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.839] GetLastError () returned 0x5 [0207.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0207.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0d98) returned 1 Thread: id = 7564 os_tid = 0xfd0 [0205.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif")) returned 0x20 [0207.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0207.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.837] GetLastError () returned 0x5 [0207.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0207.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4c70) returned 1 Thread: id = 7565 os_tid = 0xb28 [0205.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif")) returned 0x20 [0205.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0205.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.719] GetLastError () returned 0x5 [0205.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif", dwFileAttributes=0x20) returned 0 [0205.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3de8eb8) returned 1 Thread: id = 7566 os_tid = 0x1224 [0205.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif")) returned 0x20 [0205.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0205.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.722] GetLastError () returned 0x5 [0205.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF", dwFileAttributes=0x20) returned 0 [0205.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dae4e0) returned 1 Thread: id = 7567 os_tid = 0x96c [0205.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20 [0205.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.726] GetLastError () returned 0x5 [0205.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dad468) returned 1 Thread: id = 7568 os_tid = 0xb50 [0205.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20 [0205.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.728] GetLastError () returned 0x5 [0205.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadf10) returned 1 Thread: id = 7569 os_tid = 0xda4 [0205.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif")) returned 0x20 [0205.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.731] GetLastError () returned 0x5 [0205.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafcb8) returned 1 Thread: id = 7570 os_tid = 0xd9c [0205.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif")) returned 0x20 [0205.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.733] GetLastError () returned 0x5 [0205.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db09d8) returned 1 Thread: id = 7571 os_tid = 0x115c [0205.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif")) returned 0x20 [0205.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.737] GetLastError () returned 0x5 [0205.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc3ed8) returned 1 Thread: id = 7572 os_tid = 0x1c00 [0205.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif")) returned 0x20 [0205.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.739] GetLastError () returned 0x5 [0205.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4190) returned 1 Thread: id = 7573 os_tid = 0xe88 [0205.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif")) returned 0x20 [0205.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0205.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.742] GetLastError () returned 0x5 [0205.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0205.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4b88) returned 1 Thread: id = 7574 os_tid = 0xef8 [0205.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif")) returned 0x20 [0205.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.744] GetLastError () returned 0x5 [0205.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafda8) returned 1 Thread: id = 7575 os_tid = 0x530 [0205.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif")) returned 0x20 [0205.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.746] GetLastError () returned 0x5 [0205.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc50f8) returned 1 Thread: id = 7576 os_tid = 0x608 [0205.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif")) returned 0x20 [0205.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.748] GetLastError () returned 0x5 [0205.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0258) returned 1 Thread: id = 7577 os_tid = 0x5c8 [0205.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif")) returned 0x20 [0205.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.751] GetLastError () returned 0x5 [0205.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4700) returned 1 Thread: id = 7578 os_tid = 0x1c10 [0205.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif")) returned 0x20 [0205.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0205.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.753] GetLastError () returned 0x5 [0205.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif", dwFileAttributes=0x20) returned 0 [0205.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dadd20) returned 1 Thread: id = 7579 os_tid = 0xf08 [0205.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif")) returned 0x20 [0205.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.755] GetLastError () returned 0x5 [0205.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0205.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0618) returned 1 Thread: id = 7580 os_tid = 0xf04 [0205.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif")) returned 0x20 [0205.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0205.771] GetLastError () returned 0x5 [0205.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0205.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0438) returned 1 Thread: id = 7581 os_tid = 0xf00 [0206.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif")) returned 0x20 [0206.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0206.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.600] GetLastError () returned 0x5 [0206.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0206.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0078) returned 1 Thread: id = 7582 os_tid = 0x7ec [0206.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif")) returned 0x20 [0206.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.602] GetLastError () returned 0x5 [0206.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dafe98) returned 1 Thread: id = 7583 os_tid = 0x14c [0206.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif")) returned 0x20 [0206.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0206.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.604] GetLastError () returned 0x5 [0206.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0206.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3db0ac8) returned 1 Thread: id = 7584 os_tid = 0x490 [0206.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif")) returned 0x20 [0206.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0206.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.610] GetLastError () returned 0x5 [0206.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif", dwFileAttributes=0x20) returned 0 [0206.610] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3daf178) returned 1 Thread: id = 7585 os_tid = 0x125c [0206.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif")) returned 0x20 [0206.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0206.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.612] GetLastError () returned 0x5 [0206.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF", dwFileAttributes=0x20) returned 0 [0206.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc52c8) returned 1 Thread: id = 7586 os_tid = 0x1a58 [0206.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif")) returned 0x20 [0206.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.613] GetLastError () returned 0x5 [0206.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF", dwFileAttributes=0x20) returned 0 [0206.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4d58) returned 1 Thread: id = 7587 os_tid = 0x2024 [0206.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif")) returned 0x20 [0206.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0206.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0206.615] GetLastError () returned 0x5 [0206.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF", dwFileAttributes=0x20) returned 0 [0206.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3dc4e40) returned 1 Thread: id = 7588 os_tid = 0xc50 [0206.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg")) returned 0x20 [0210.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG", dwFileAttributes=0x20) returned 0 [0210.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.504] GetLastError () returned 0x5 [0210.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG", dwFileAttributes=0x20) returned 0 [0210.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a693b0) returned 1 Thread: id = 7589 os_tid = 0x2690 [0206.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf")) returned 0x20 [0210.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF", dwFileAttributes=0x20) returned 0 [0210.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.506] GetLastError () returned 0x5 [0210.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF", dwFileAttributes=0x20) returned 0 [0210.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69b20) returned 1 Thread: id = 7590 os_tid = 0xddc [0206.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg")) returned 0x20 [0210.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG", dwFileAttributes=0x20) returned 0 [0210.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.511] GetLastError () returned 0x5 [0210.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG", dwFileAttributes=0x20) returned 0 [0210.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a694c0) returned 1 Thread: id = 7591 os_tid = 0xe20 [0206.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf")) returned 0x20 [0210.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF", dwFileAttributes=0x20) returned 0 [0210.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.513] GetLastError () returned 0x5 [0210.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF", dwFileAttributes=0x20) returned 0 [0210.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69988) returned 1 Thread: id = 7592 os_tid = 0xda8 [0206.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg")) returned 0x20 [0210.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG", dwFileAttributes=0x20) returned 0 [0210.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.507] GetLastError () returned 0x5 [0210.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG", dwFileAttributes=0x20) returned 0 [0210.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a686f0) returned 1 Thread: id = 7593 os_tid = 0x1a54 [0206.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg")) returned 0x20 [0210.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG", dwFileAttributes=0x20) returned 0 [0210.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.515] GetLastError () returned 0x5 [0210.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG", dwFileAttributes=0x20) returned 0 [0210.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a697f0) returned 1 Thread: id = 7594 os_tid = 0x1a64 [0206.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg")) returned 0x20 [0210.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG", dwFileAttributes=0x20) returned 0 [0210.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.517] GetLastError () returned 0x5 [0210.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG", dwFileAttributes=0x20) returned 0 [0210.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a684d0) returned 1 Thread: id = 7595 os_tid = 0x1f04 [0206.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg")) returned 0x20 [0210.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG", dwFileAttributes=0x20) returned 0 [0210.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.519] GetLastError () returned 0x5 [0210.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG", dwFileAttributes=0x20) returned 0 [0210.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 Thread: id = 7596 os_tid = 0xb08 [0206.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf")) returned 0x20 [0210.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF", dwFileAttributes=0x20) returned 0 [0210.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.521] GetLastError () returned 0x5 [0210.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF", dwFileAttributes=0x20) returned 0 [0210.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a695d0) returned 1 Thread: id = 7597 os_tid = 0x12cc [0206.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf")) returned 0x20 [0210.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF", dwFileAttributes=0x20) returned 0 [0210.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.523] GetLastError () returned 0x5 [0210.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF", dwFileAttributes=0x20) returned 0 [0210.523] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68800) returned 1 Thread: id = 7598 os_tid = 0x12e8 [0206.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg")) returned 0x20 [0210.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG", dwFileAttributes=0x20) returned 0 [0210.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.525] GetLastError () returned 0x5 [0210.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG", dwFileAttributes=0x20) returned 0 [0210.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69658) returned 1 Thread: id = 7599 os_tid = 0x12ec [0206.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg")) returned 0x20 [0210.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG", dwFileAttributes=0x20) returned 0 [0210.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.527] GetLastError () returned 0x5 [0210.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG", dwFileAttributes=0x20) returned 0 [0210.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68d50) returned 1 Thread: id = 7600 os_tid = 0x1d64 [0206.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg")) returned 0x20 [0210.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG", dwFileAttributes=0x20) returned 0 [0210.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.529] GetLastError () returned 0x5 [0210.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG", dwFileAttributes=0x20) returned 0 [0210.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ed8) returned 1 Thread: id = 7601 os_tid = 0x1300 [0206.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf")) returned 0x20 [0210.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF", dwFileAttributes=0x20) returned 0 [0210.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.531] GetLastError () returned 0x5 [0210.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF", dwFileAttributes=0x20) returned 0 [0210.531] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a696e0) returned 1 Thread: id = 7602 os_tid = 0x1574 [0206.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf")) returned 0x20 [0210.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF", dwFileAttributes=0x20) returned 0 [0210.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.533] GetLastError () returned 0x5 [0210.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF", dwFileAttributes=0x20) returned 0 [0210.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681a0) returned 1 Thread: id = 7603 os_tid = 0x15b0 [0206.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg")) returned 0x20 [0210.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG", dwFileAttributes=0x20) returned 0 [0210.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.534] GetLastError () returned 0x5 [0210.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG", dwFileAttributes=0x20) returned 0 [0210.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a683c0) returned 1 Thread: id = 7604 os_tid = 0x1700 [0206.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg")) returned 0x20 [0210.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG", dwFileAttributes=0x20) returned 0 [0210.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.536] GetLastError () returned 0x5 [0210.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG", dwFileAttributes=0x20) returned 0 [0210.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68228) returned 1 Thread: id = 7605 os_tid = 0x1704 [0206.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg")) returned 0x20 [0210.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG", dwFileAttributes=0x20) returned 0 [0210.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.538] GetLastError () returned 0x5 [0210.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG", dwFileAttributes=0x20) returned 0 [0210.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a682b0) returned 1 Thread: id = 7606 os_tid = 0x15a8 [0206.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg")) returned 0x20 [0210.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG", dwFileAttributes=0x20) returned 0 [0210.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.539] GetLastError () returned 0x5 [0210.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG", dwFileAttributes=0x20) returned 0 [0210.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69878) returned 1 Thread: id = 7607 os_tid = 0x1f18 [0206.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf")) returned 0x20 [0210.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF", dwFileAttributes=0x20) returned 0 [0210.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.541] GetLastError () returned 0x5 [0210.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF", dwFileAttributes=0x20) returned 0 [0210.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68118) returned 1 Thread: id = 7608 os_tid = 0x1f1c [0206.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf")) returned 0x20 [0210.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF", dwFileAttributes=0x20) returned 0 [0210.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.543] GetLastError () returned 0x5 [0210.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF", dwFileAttributes=0x20) returned 0 [0210.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68778) returned 1 Thread: id = 7609 os_tid = 0x1f20 [0206.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf")) returned 0x20 [0210.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF", dwFileAttributes=0x20) returned 0 [0210.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.545] GetLastError () returned 0x5 [0210.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF", dwFileAttributes=0x20) returned 0 [0210.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 7610 os_tid = 0x1f24 [0206.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf")) returned 0x20 [0207.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF", dwFileAttributes=0x20) returned 0 [0207.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.822] GetLastError () returned 0x5 [0207.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF", dwFileAttributes=0x20) returned 0 [0207.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 7611 os_tid = 0x1f30 [0206.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf")) returned 0x20 [0208.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF", dwFileAttributes=0x20) returned 0 [0208.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.519] GetLastError () returned 0x5 [0208.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF", dwFileAttributes=0x20) returned 0 [0208.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 7612 os_tid = 0x1f38 [0206.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf")) returned 0x20 [0208.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF", dwFileAttributes=0x20) returned 0 [0208.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0208.520] GetLastError () returned 0x5 [0208.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF", dwFileAttributes=0x20) returned 0 [0208.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 7613 os_tid = 0x2190 [0207.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf")) returned 0x20 [0210.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF", dwFileAttributes=0x20) returned 0 [0210.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.509] GetLastError () returned 0x5 [0210.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF", dwFileAttributes=0x20) returned 0 [0210.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 7614 os_tid = 0x1f3c [0207.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini")) returned 0x20 [0215.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", dwFileAttributes=0x20) returned 0 [0215.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.756] GetLastError () returned 0x5 [0215.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI", dwFileAttributes=0x20) returned 0 [0215.756] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 7615 os_tid = 0x1f40 [0207.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css")) returned 0x20 [0215.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", dwFileAttributes=0x20) returned 0 [0215.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.758] GetLastError () returned 0x5 [0215.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS", dwFileAttributes=0x20) returned 0 [0215.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 7616 os_tid = 0x1f44 [0207.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css")) returned 0x20 [0213.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", dwFileAttributes=0x20) returned 0 [0213.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.026] GetLastError () returned 0x5 [0213.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS", dwFileAttributes=0x20) returned 0 [0213.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 7617 os_tid = 0x1f4c [0207.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css")) returned 0x20 [0213.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", dwFileAttributes=0x20) returned 0 [0213.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.025] GetLastError () returned 0x5 [0213.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS", dwFileAttributes=0x20) returned 0 [0213.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 7618 os_tid = 0x1f98 [0207.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css")) returned 0x20 [0215.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", dwFileAttributes=0x20) returned 0 [0215.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.752] GetLastError () returned 0x5 [0215.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS", dwFileAttributes=0x20) returned 0 [0215.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 Thread: id = 7619 os_tid = 0x1f9c [0207.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css")) returned 0x20 [0215.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", dwFileAttributes=0x20) returned 0 [0215.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.751] GetLastError () returned 0x5 [0215.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS", dwFileAttributes=0x20) returned 0 [0215.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 7620 os_tid = 0xa8c [0207.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css")) returned 0x20 [0215.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", dwFileAttributes=0x20) returned 0 [0215.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.750] GetLastError () returned 0x5 [0215.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS", dwFileAttributes=0x20) returned 0 [0215.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 7621 os_tid = 0x1160 [0207.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css")) returned 0x20 [0215.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", dwFileAttributes=0x20) returned 0 [0215.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.748] GetLastError () returned 0x5 [0215.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS", dwFileAttributes=0x20) returned 0 [0215.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cce8) returned 1 Thread: id = 7622 os_tid = 0xb18 [0207.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css")) returned 0x20 [0215.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", dwFileAttributes=0x20) returned 0 [0215.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.747] GetLastError () returned 0x5 [0215.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS", dwFileAttributes=0x20) returned 0 [0215.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 7623 os_tid = 0x26c4 [0207.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css")) returned 0x20 [0215.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", dwFileAttributes=0x20) returned 0 [0215.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.746] GetLastError () returned 0x5 [0215.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS", dwFileAttributes=0x20) returned 0 [0215.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 7624 os_tid = 0x26c8 [0207.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css")) returned 0x20 [0215.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", dwFileAttributes=0x20) returned 0 [0215.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.745] GetLastError () returned 0x5 [0215.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS", dwFileAttributes=0x20) returned 0 [0215.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 7625 os_tid = 0x26d4 [0207.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css")) returned 0x20 [0215.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", dwFileAttributes=0x20) returned 0 [0215.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.744] GetLastError () returned 0x5 [0215.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS", dwFileAttributes=0x20) returned 0 [0215.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb64d8) returned 1 Thread: id = 7626 os_tid = 0x1168 [0207.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css")) returned 0x20 [0215.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", dwFileAttributes=0x20) returned 0 [0215.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.742] GetLastError () returned 0x5 [0215.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS", dwFileAttributes=0x20) returned 0 [0215.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5860) returned 1 Thread: id = 7627 os_tid = 0x116c [0207.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css")) returned 0x20 [0215.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", dwFileAttributes=0x20) returned 0 [0215.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.741] GetLastError () returned 0x5 [0215.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS", dwFileAttributes=0x20) returned 0 [0215.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5d20) returned 1 Thread: id = 7628 os_tid = 0xb38 [0207.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css")) returned 0x20 [0215.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", dwFileAttributes=0x20) returned 0 [0215.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.740] GetLastError () returned 0x5 [0215.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS", dwFileAttributes=0x20) returned 0 [0215.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7150) returned 1 Thread: id = 7629 os_tid = 0xb34 [0207.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css")) returned 0x20 [0215.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", dwFileAttributes=0x20) returned 0 [0215.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.739] GetLastError () returned 0x5 [0215.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS", dwFileAttributes=0x20) returned 0 [0215.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6900) returned 1 Thread: id = 7630 os_tid = 0xb2c [0207.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css")) returned 0x20 [0215.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", dwFileAttributes=0x20) returned 0 [0215.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.738] GetLastError () returned 0x5 [0215.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS", dwFileAttributes=0x20) returned 0 [0215.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb73b0) returned 1 Thread: id = 7631 os_tid = 0xb84 [0207.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css")) returned 0x20 [0215.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", dwFileAttributes=0x20) returned 0 [0215.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.736] GetLastError () returned 0x5 [0215.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS", dwFileAttributes=0x20) returned 0 [0215.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7280) returned 1 Thread: id = 7632 os_tid = 0xd6c [0207.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css")) returned 0x20 [0215.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", dwFileAttributes=0x20) returned 0 [0215.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.735] GetLastError () returned 0x5 [0215.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS", dwFileAttributes=0x20) returned 0 [0215.735] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb71e8) returned 1 Thread: id = 7633 os_tid = 0xdd8 [0207.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css")) returned 0x20 [0215.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", dwFileAttributes=0x20) returned 0 [0215.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.734] GetLastError () returned 0x5 [0215.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS", dwFileAttributes=0x20) returned 0 [0215.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6f88) returned 1 Thread: id = 7634 os_tid = 0xecc [0207.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css")) returned 0x20 [0215.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", dwFileAttributes=0x20) returned 0 [0215.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.733] GetLastError () returned 0x5 [0215.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS", dwFileAttributes=0x20) returned 0 [0215.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb70b8) returned 1 Thread: id = 7635 os_tid = 0xed8 [0207.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css")) returned 0x20 [0215.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", dwFileAttributes=0x20) returned 0 [0215.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.731] GetLastError () returned 0x5 [0215.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS", dwFileAttributes=0x20) returned 0 [0215.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5db8) returned 1 Thread: id = 7636 os_tid = 0x15ac [0207.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css")) returned 0x20 [0215.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", dwFileAttributes=0x20) returned 0 [0215.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.729] GetLastError () returned 0x5 [0215.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS", dwFileAttributes=0x20) returned 0 [0215.729] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5bf0) returned 1 Thread: id = 7637 os_tid = 0x1830 [0207.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css")) returned 0x20 [0215.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", dwFileAttributes=0x20) returned 0 [0215.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.727] GetLastError () returned 0x5 [0215.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS", dwFileAttributes=0x20) returned 0 [0215.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5e50) returned 1 Thread: id = 7638 os_tid = 0x1834 [0207.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css")) returned 0x20 [0215.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", dwFileAttributes=0x20) returned 0 [0215.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.726] GetLastError () returned 0x5 [0215.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS", dwFileAttributes=0x20) returned 0 [0215.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb57c8) returned 1 Thread: id = 7639 os_tid = 0x1838 [0207.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css")) returned 0x20 [0215.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", dwFileAttributes=0x20) returned 0 [0215.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.725] GetLastError () returned 0x5 [0215.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS", dwFileAttributes=0x20) returned 0 [0215.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6018) returned 1 Thread: id = 7640 os_tid = 0x183c [0207.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css")) returned 0x20 [0215.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", dwFileAttributes=0x20) returned 0 [0215.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.724] GetLastError () returned 0x5 [0215.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS", dwFileAttributes=0x20) returned 0 [0215.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5f80) returned 1 Thread: id = 7641 os_tid = 0x1840 [0207.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css")) returned 0x20 [0215.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", dwFileAttributes=0x20) returned 0 [0215.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.723] GetLastError () returned 0x5 [0215.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS", dwFileAttributes=0x20) returned 0 [0215.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb60b0) returned 1 Thread: id = 7642 os_tid = 0x20e4 [0207.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css")) returned 0x20 [0215.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", dwFileAttributes=0x20) returned 0 [0215.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.753] GetLastError () returned 0x5 [0215.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS", dwFileAttributes=0x20) returned 0 [0215.754] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb61e0) returned 1 Thread: id = 7643 os_tid = 0x20e8 [0207.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc")) returned 0x20 [0207.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC", dwFileAttributes=0x20) returned 0 [0207.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.867] GetLastError () returned 0x5 [0207.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC", dwFileAttributes=0x20) returned 0 [0207.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 7644 os_tid = 0x20ec [0207.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv")) returned 0x20 [0207.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV", dwFileAttributes=0x20) returned 0 [0207.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.870] GetLastError () returned 0x5 [0207.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV", dwFileAttributes=0x20) returned 0 [0207.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 Thread: id = 7645 os_tid = 0x20f0 [0207.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml")) returned 0x20 [0207.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML", dwFileAttributes=0x20) returned 0 [0207.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.872] GetLastError () returned 0x5 [0207.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML", dwFileAttributes=0x20) returned 0 [0207.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 7646 os_tid = 0x20f4 [0207.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc")) returned 0x20 [0207.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC", dwFileAttributes=0x20) returned 0 [0207.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.875] GetLastError () returned 0x5 [0207.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC", dwFileAttributes=0x20) returned 0 [0207.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 7647 os_tid = 0x20f8 [0207.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc")) returned 0x20 [0207.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC", dwFileAttributes=0x20) returned 0 [0207.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.877] GetLastError () returned 0x5 [0207.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC", dwFileAttributes=0x20) returned 0 [0207.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 7648 os_tid = 0x20fc [0207.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv")) returned 0x20 [0207.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV", dwFileAttributes=0x20) returned 0 [0207.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.885] GetLastError () returned 0x5 [0207.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV", dwFileAttributes=0x20) returned 0 [0207.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 7649 os_tid = 0x2100 [0207.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml")) returned 0x20 [0207.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML", dwFileAttributes=0x20) returned 0 [0207.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.888] GetLastError () returned 0x5 [0207.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML", dwFileAttributes=0x20) returned 0 [0207.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 7650 os_tid = 0x2104 [0207.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv")) returned 0x20 [0207.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV", dwFileAttributes=0x20) returned 0 [0207.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.891] GetLastError () returned 0x5 [0207.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV", dwFileAttributes=0x20) returned 0 [0207.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 7651 os_tid = 0x2108 [0207.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc")) returned 0x20 [0207.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC", dwFileAttributes=0x20) returned 0 [0207.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.893] GetLastError () returned 0x5 [0207.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC", dwFileAttributes=0x20) returned 0 [0207.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 7652 os_tid = 0x210c [0207.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv")) returned 0x20 [0207.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV", dwFileAttributes=0x20) returned 0 [0207.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.894] GetLastError () returned 0x5 [0207.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV", dwFileAttributes=0x20) returned 0 [0207.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d638) returned 1 Thread: id = 7653 os_tid = 0x2110 [0207.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml")) returned 0x20 [0207.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML", dwFileAttributes=0x20) returned 0 [0207.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.896] GetLastError () returned 0x5 [0207.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML", dwFileAttributes=0x20) returned 0 [0207.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 7654 os_tid = 0x2114 [0207.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc")) returned 0x20 [0207.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC", dwFileAttributes=0x20) returned 0 [0207.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.898] GetLastError () returned 0x5 [0207.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC", dwFileAttributes=0x20) returned 0 [0207.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 7655 os_tid = 0x2118 [0207.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv")) returned 0x20 [0207.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV", dwFileAttributes=0x20) returned 0 [0207.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.900] GetLastError () returned 0x5 [0207.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV", dwFileAttributes=0x20) returned 0 [0207.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19898) returned 1 Thread: id = 7656 os_tid = 0x211c [0207.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml")) returned 0x20 [0207.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML", dwFileAttributes=0x20) returned 0 [0207.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.905] GetLastError () returned 0x5 [0207.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML", dwFileAttributes=0x20) returned 0 [0207.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18f18) returned 1 Thread: id = 7657 os_tid = 0x2120 [0207.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc")) returned 0x20 [0207.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC", dwFileAttributes=0x20) returned 0 [0207.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.907] GetLastError () returned 0x5 [0207.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC", dwFileAttributes=0x20) returned 0 [0207.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 7658 os_tid = 0x2124 [0207.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc")) returned 0x20 [0207.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC", dwFileAttributes=0x20) returned 0 [0207.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.910] GetLastError () returned 0x5 [0207.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC", dwFileAttributes=0x20) returned 0 [0207.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 7659 os_tid = 0x2128 [0207.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv")) returned 0x20 [0207.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV", dwFileAttributes=0x20) returned 0 [0207.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.912] GetLastError () returned 0x5 [0207.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV", dwFileAttributes=0x20) returned 0 [0207.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 7660 os_tid = 0x212c [0207.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml")) returned 0x20 [0207.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML", dwFileAttributes=0x20) returned 0 [0207.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.914] GetLastError () returned 0x5 [0207.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML", dwFileAttributes=0x20) returned 0 [0207.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 7661 os_tid = 0xc2c [0207.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc")) returned 0x20 [0207.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC", dwFileAttributes=0x20) returned 0 [0207.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.917] GetLastError () returned 0x5 [0207.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC", dwFileAttributes=0x20) returned 0 [0207.917] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 7662 os_tid = 0xbd0 [0207.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc")) returned 0x20 [0207.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC", dwFileAttributes=0x20) returned 0 [0207.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0207.920] GetLastError () returned 0x5 [0207.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC", dwFileAttributes=0x20) returned 0 [0207.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 7663 os_tid = 0x241c [0210.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc")) returned 0x20 [0210.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC", dwFileAttributes=0x20) returned 0 [0210.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.584] GetLastError () returned 0x5 [0210.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC", dwFileAttributes=0x20) returned 0 [0210.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 7664 os_tid = 0x2130 [0210.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf")) returned 0x20 [0210.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF", dwFileAttributes=0x20) returned 0 [0210.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.586] GetLastError () returned 0x5 [0210.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF", dwFileAttributes=0x20) returned 0 [0210.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 7665 os_tid = 0x2138 [0210.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf")) returned 0x20 [0210.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF", dwFileAttributes=0x20) returned 0 [0210.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.588] GetLastError () returned 0x5 [0210.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF", dwFileAttributes=0x20) returned 0 [0210.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 7666 os_tid = 0x1848 [0210.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf")) returned 0x20 [0210.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF", dwFileAttributes=0x20) returned 0 [0210.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.591] GetLastError () returned 0x5 [0210.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF", dwFileAttributes=0x20) returned 0 [0210.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 7667 os_tid = 0x2198 [0210.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf")) returned 0x20 [0210.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF", dwFileAttributes=0x20) returned 0 [0210.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.594] GetLastError () returned 0x5 [0210.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF", dwFileAttributes=0x20) returned 0 [0210.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 7668 os_tid = 0x27a8 [0210.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf")) returned 0x20 [0210.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF", dwFileAttributes=0x20) returned 0 [0210.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0210.596] GetLastError () returned 0x5 [0210.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF", dwFileAttributes=0x20) returned 0 [0210.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 7669 os_tid = 0x26b8 [0210.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf")) returned 0x20 [0212.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF", dwFileAttributes=0x20) returned 0 [0212.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.835] GetLastError () returned 0x5 [0212.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF", dwFileAttributes=0x20) returned 0 [0212.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 7670 os_tid = 0x26e0 [0210.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf")) returned 0x20 [0211.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF", dwFileAttributes=0x20) returned 0 [0211.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.266] GetLastError () returned 0x5 [0211.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF", dwFileAttributes=0x20) returned 0 [0211.266] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 7671 os_tid = 0x26e4 [0210.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf")) returned 0x20 [0211.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF", dwFileAttributes=0x20) returned 0 [0211.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.267] GetLastError () returned 0x5 [0211.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF", dwFileAttributes=0x20) returned 0 [0211.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 7672 os_tid = 0x26e8 [0210.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini")) returned 0x20 [0211.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", dwFileAttributes=0x20) returned 0 [0211.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.388] GetLastError () returned 0x5 [0211.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI", dwFileAttributes=0x20) returned 0 [0211.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df27f8) returned 1 Thread: id = 7673 os_tid = 0x26ec [0210.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif")) returned 0x20 [0211.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", dwFileAttributes=0x20) returned 0 [0211.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.393] GetLastError () returned 0x5 [0211.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF", dwFileAttributes=0x20) returned 0 [0211.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 7674 os_tid = 0x26f0 [0210.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif")) returned 0x20 [0211.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", dwFileAttributes=0x20) returned 0 [0211.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.395] GetLastError () returned 0x5 [0211.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF", dwFileAttributes=0x20) returned 0 [0211.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 7675 os_tid = 0x26f4 [0210.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif")) returned 0x20 [0211.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", dwFileAttributes=0x20) returned 0 [0211.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.397] GetLastError () returned 0x5 [0211.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF", dwFileAttributes=0x20) returned 0 [0211.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c5c8) returned 1 Thread: id = 7676 os_tid = 0x26f8 [0210.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif")) returned 0x20 [0211.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", dwFileAttributes=0x20) returned 0 [0211.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.399] GetLastError () returned 0x5 [0211.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF", dwFileAttributes=0x20) returned 0 [0211.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7448) returned 1 Thread: id = 7677 os_tid = 0x26fc [0210.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif")) returned 0x20 [0211.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", dwFileAttributes=0x20) returned 0 [0211.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.412] GetLastError () returned 0x5 [0211.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF", dwFileAttributes=0x20) returned 0 [0211.413] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7578) returned 1 Thread: id = 7678 os_tid = 0x2708 [0210.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif")) returned 0x20 [0211.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", dwFileAttributes=0x20) returned 0 [0211.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.414] GetLastError () returned 0x5 [0211.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF", dwFileAttributes=0x20) returned 0 [0211.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7020) returned 1 Thread: id = 7679 os_tid = 0x270c [0210.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif")) returned 0x20 [0211.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", dwFileAttributes=0x20) returned 0 [0211.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.415] GetLastError () returned 0x5 [0211.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF", dwFileAttributes=0x20) returned 0 [0211.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6bf8) returned 1 Thread: id = 7680 os_tid = 0x2714 [0210.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif")) returned 0x20 [0211.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", dwFileAttributes=0x20) returned 0 [0211.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.417] GetLastError () returned 0x5 [0211.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF", dwFileAttributes=0x20) returned 0 [0211.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb74e0) returned 1 Thread: id = 7681 os_tid = 0x271c [0210.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif")) returned 0x20 [0211.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", dwFileAttributes=0x20) returned 0 [0211.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.418] GetLastError () returned 0x5 [0211.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF", dwFileAttributes=0x20) returned 0 [0211.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb7318) returned 1 Thread: id = 7682 os_tid = 0x2720 [0210.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif")) returned 0x20 [0211.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", dwFileAttributes=0x20) returned 0 [0211.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.420] GetLastError () returned 0x5 [0211.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF", dwFileAttributes=0x20) returned 0 [0211.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5a28) returned 1 Thread: id = 7683 os_tid = 0x2728 [0210.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif")) returned 0x20 [0211.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", dwFileAttributes=0x20) returned 0 [0211.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.421] GetLastError () returned 0x5 [0211.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF", dwFileAttributes=0x20) returned 0 [0211.421] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 7684 os_tid = 0x2740 [0210.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif")) returned 0x20 [0211.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", dwFileAttributes=0x20) returned 0 [0211.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.423] GetLastError () returned 0x5 [0211.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF", dwFileAttributes=0x20) returned 0 [0211.423] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d454a0) returned 1 Thread: id = 7685 os_tid = 0x2744 [0210.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif")) returned 0x20 [0211.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", dwFileAttributes=0x20) returned 0 [0211.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.424] GetLastError () returned 0x5 [0211.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF", dwFileAttributes=0x20) returned 0 [0211.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6310) returned 1 Thread: id = 7686 os_tid = 0x2748 [0210.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif")) returned 0x20 [0211.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", dwFileAttributes=0x20) returned 0 [0211.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.425] GetLastError () returned 0x5 [0211.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF", dwFileAttributes=0x20) returned 0 [0211.426] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5698) returned 1 Thread: id = 7687 os_tid = 0x274c [0210.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif")) returned 0x20 [0211.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", dwFileAttributes=0x20) returned 0 [0211.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.427] GetLastError () returned 0x5 [0211.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF", dwFileAttributes=0x20) returned 0 [0211.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5ee8) returned 1 Thread: id = 7688 os_tid = 0x2750 [0210.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif")) returned 0x20 [0211.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", dwFileAttributes=0x20) returned 0 [0211.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.428] GetLastError () returned 0x5 [0211.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF", dwFileAttributes=0x20) returned 0 [0211.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6a30) returned 1 Thread: id = 7689 os_tid = 0x2754 [0210.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif")) returned 0x20 [0211.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", dwFileAttributes=0x20) returned 0 [0211.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.430] GetLastError () returned 0x5 [0211.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF", dwFileAttributes=0x20) returned 0 [0211.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb6ef0) returned 1 Thread: id = 7690 os_tid = 0x184c [0210.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif")) returned 0x20 [0211.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", dwFileAttributes=0x20) returned 0 [0211.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.431] GetLastError () returned 0x5 [0211.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF", dwFileAttributes=0x20) returned 0 [0211.431] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb67d0) returned 1 Thread: id = 7691 os_tid = 0x275c [0210.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif")) returned 0x20 [0211.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", dwFileAttributes=0x20) returned 0 [0211.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.433] GetLastError () returned 0x5 [0211.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF", dwFileAttributes=0x20) returned 0 [0211.433] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0020) returned 1 Thread: id = 7692 os_tid = 0x2760 [0210.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif")) returned 0x20 [0211.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", dwFileAttributes=0x20) returned 0 [0211.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.274] GetLastError () returned 0x5 [0211.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF", dwFileAttributes=0x20) returned 0 [0211.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc00b8) returned 1 Thread: id = 7693 os_tid = 0x2764 [0210.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif")) returned 0x20 [0211.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", dwFileAttributes=0x20) returned 0 [0211.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.275] GetLastError () returned 0x5 [0211.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF", dwFileAttributes=0x20) returned 0 [0211.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0150) returned 1 Thread: id = 7694 os_tid = 0x2768 [0211.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif")) returned 0x20 [0211.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", dwFileAttributes=0x20) returned 0 [0211.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.280] GetLastError () returned 0x5 [0211.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF", dwFileAttributes=0x20) returned 0 [0211.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc01e8) returned 1 Thread: id = 7695 os_tid = 0x276c [0211.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css")) returned 0x20 [0215.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", dwFileAttributes=0x20) returned 0 [0215.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.755] GetLastError () returned 0x5 [0215.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS", dwFileAttributes=0x20) returned 0 [0215.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb5990) returned 1 Thread: id = 7696 os_tid = 0x22b4 [0211.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css")) returned 0x20 [0213.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", dwFileAttributes=0x20) returned 0 [0213.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.023] GetLastError () returned 0x5 [0213.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS", dwFileAttributes=0x20) returned 0 [0213.023] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 7697 os_tid = 0x22b8 [0211.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css")) returned 0x20 [0215.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", dwFileAttributes=0x20) returned 0 [0215.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.757] GetLastError () returned 0x5 [0215.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS", dwFileAttributes=0x20) returned 0 [0215.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0280) returned 1 Thread: id = 7698 os_tid = 0x22bc [0211.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css")) returned 0x20 [0215.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", dwFileAttributes=0x20) returned 0 [0215.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.759] GetLastError () returned 0x5 [0215.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS", dwFileAttributes=0x20) returned 0 [0215.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0318) returned 1 Thread: id = 7699 os_tid = 0x22c0 [0211.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf")) returned 0x20 [0211.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF", dwFileAttributes=0x20) returned 0 [0211.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.287] GetLastError () returned 0x5 [0211.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF", dwFileAttributes=0x20) returned 0 [0211.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 7700 os_tid = 0x22c4 [0211.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg")) returned 0x20 [0211.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG", dwFileAttributes=0x20) returned 0 [0211.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.289] GetLastError () returned 0x5 [0211.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG", dwFileAttributes=0x20) returned 0 [0211.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 7701 os_tid = 0x22c8 [0211.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg")) returned 0x20 [0211.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG", dwFileAttributes=0x20) returned 0 [0211.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.291] GetLastError () returned 0x5 [0211.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG", dwFileAttributes=0x20) returned 0 [0211.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 7702 os_tid = 0x22cc [0211.292] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg")) returned 0x20 [0211.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG", dwFileAttributes=0x20) returned 0 [0211.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.293] GetLastError () returned 0x5 [0211.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG", dwFileAttributes=0x20) returned 0 [0211.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 7703 os_tid = 0xdc0 [0211.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg")) returned 0x20 [0212.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG", dwFileAttributes=0x20) returned 0 [0212.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.832] GetLastError () returned 0x5 [0212.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG", dwFileAttributes=0x20) returned 0 [0212.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 7704 os_tid = 0x2774 [0211.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg")) returned 0x20 [0212.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG", dwFileAttributes=0x20) returned 0 [0212.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.827] GetLastError () returned 0x5 [0212.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG", dwFileAttributes=0x20) returned 0 [0212.827] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 7705 os_tid = 0x22d8 [0211.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg")) returned 0x20 [0216.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG", dwFileAttributes=0x20) returned 0 [0216.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.182] GetLastError () returned 0x5 [0216.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG", dwFileAttributes=0x20) returned 0 [0216.182] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 7706 os_tid = 0x1050 [0211.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg")) returned 0x20 [0212.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG", dwFileAttributes=0x20) returned 0 [0212.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.831] GetLastError () returned 0x5 [0212.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG", dwFileAttributes=0x20) returned 0 [0212.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 7707 os_tid = 0x1058 [0211.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif")) returned 0x20 [0212.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF", dwFileAttributes=0x20) returned 0 [0212.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.708] GetLastError () returned 0x5 [0212.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF", dwFileAttributes=0x20) returned 0 [0212.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 7708 os_tid = 0x244 [0211.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif")) returned 0x20 [0216.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF", dwFileAttributes=0x20) returned 0 [0216.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.172] GetLastError () returned 0x5 [0216.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF", dwFileAttributes=0x20) returned 0 [0216.172] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 7709 os_tid = 0x261c [0211.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif")) returned 0x20 [0216.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF", dwFileAttributes=0x20) returned 0 [0216.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.138] GetLastError () returned 0x5 [0216.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF", dwFileAttributes=0x20) returned 0 [0216.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 7710 os_tid = 0x1158 [0211.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif")) returned 0x20 [0212.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF", dwFileAttributes=0x20) returned 0 [0212.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.837] GetLastError () returned 0x5 [0212.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF", dwFileAttributes=0x20) returned 0 [0212.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 7711 os_tid = 0x193c [0211.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif")) returned 0x20 [0216.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF", dwFileAttributes=0x20) returned 0 [0216.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.140] GetLastError () returned 0x5 [0216.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF", dwFileAttributes=0x20) returned 0 [0216.140] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 7712 os_tid = 0x1ae4 [0211.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif")) returned 0x20 [0216.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF", dwFileAttributes=0x20) returned 0 [0216.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.141] GetLastError () returned 0x5 [0216.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF", dwFileAttributes=0x20) returned 0 [0216.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 7713 os_tid = 0x1b54 [0211.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif")) returned 0x20 [0216.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF", dwFileAttributes=0x20) returned 0 [0216.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.142] GetLastError () returned 0x5 [0216.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF", dwFileAttributes=0x20) returned 0 [0216.142] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 7714 os_tid = 0x27cc [0211.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif")) returned 0x20 [0216.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF", dwFileAttributes=0x20) returned 0 [0216.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.143] GetLastError () returned 0x5 [0216.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF", dwFileAttributes=0x20) returned 0 [0216.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 7715 os_tid = 0x23b4 [0211.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif")) returned 0x20 [0216.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF", dwFileAttributes=0x20) returned 0 [0216.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.144] GetLastError () returned 0x5 [0216.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF", dwFileAttributes=0x20) returned 0 [0216.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 7716 os_tid = 0x23b8 [0211.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif")) returned 0x20 [0216.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF", dwFileAttributes=0x20) returned 0 [0216.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.147] GetLastError () returned 0x5 [0216.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF", dwFileAttributes=0x20) returned 0 [0216.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 Thread: id = 7717 os_tid = 0x23bc [0211.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif")) returned 0x20 [0216.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF", dwFileAttributes=0x20) returned 0 [0216.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.148] GetLastError () returned 0x5 [0216.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF", dwFileAttributes=0x20) returned 0 [0216.149] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 7718 os_tid = 0x120c [0211.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif")) returned 0x20 [0216.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF", dwFileAttributes=0x20) returned 0 [0216.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.150] GetLastError () returned 0x5 [0216.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF", dwFileAttributes=0x20) returned 0 [0216.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c758) returned 1 Thread: id = 7719 os_tid = 0x121c [0211.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf")) returned 0x20 [0216.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF", dwFileAttributes=0x20) returned 0 [0216.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.151] GetLastError () returned 0x5 [0216.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF", dwFileAttributes=0x20) returned 0 [0216.151] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 Thread: id = 7720 os_tid = 0x24ac [0211.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf")) returned 0x20 [0216.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF", dwFileAttributes=0x20) returned 0 [0216.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.152] GetLastError () returned 0x5 [0216.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF", dwFileAttributes=0x20) returned 0 [0216.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 7721 os_tid = 0x27e4 [0211.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc")) returned 0x20 [0213.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC", dwFileAttributes=0x20) returned 0 [0213.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.043] GetLastError () returned 0x5 [0213.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC", dwFileAttributes=0x20) returned 0 [0213.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d638) returned 1 Thread: id = 7722 os_tid = 0x1c9c [0211.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc")) returned 0x20 [0213.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC", dwFileAttributes=0x20) returned 0 [0213.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.037] GetLastError () returned 0x5 [0213.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC", dwFileAttributes=0x20) returned 0 [0213.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 7723 os_tid = 0x27e8 [0211.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc")) returned 0x20 [0213.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC", dwFileAttributes=0x20) returned 0 [0213.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.036] GetLastError () returned 0x5 [0213.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC", dwFileAttributes=0x20) returned 0 [0213.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 7724 os_tid = 0x1cdc [0211.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml")) returned 0x20 [0213.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML", dwFileAttributes=0x20) returned 0 [0213.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.034] GetLastError () returned 0x5 [0213.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML", dwFileAttributes=0x20) returned 0 [0213.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18f18) returned 1 Thread: id = 7725 os_tid = 0xe0c [0211.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc")) returned 0x20 [0213.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC", dwFileAttributes=0x20) returned 0 [0213.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.033] GetLastError () returned 0x5 [0213.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC", dwFileAttributes=0x20) returned 0 [0213.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 7726 os_tid = 0xb7c [0211.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv")) returned 0x20 [0213.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV", dwFileAttributes=0x20) returned 0 [0213.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.031] GetLastError () returned 0x5 [0213.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV", dwFileAttributes=0x20) returned 0 [0213.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19898) returned 1 Thread: id = 7727 os_tid = 0x300 [0211.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml")) returned 0x20 [0213.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML", dwFileAttributes=0x20) returned 0 [0213.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.030] GetLastError () returned 0x5 [0213.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML", dwFileAttributes=0x20) returned 0 [0213.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a018) returned 1 Thread: id = 7728 os_tid = 0xe04 [0211.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc")) returned 0x20 [0213.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC", dwFileAttributes=0x20) returned 0 [0213.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.029] GetLastError () returned 0x5 [0213.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC", dwFileAttributes=0x20) returned 0 [0213.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 7729 os_tid = 0x18dc [0211.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc")) returned 0x20 [0213.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC", dwFileAttributes=0x20) returned 0 [0213.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.027] GetLastError () returned 0x5 [0213.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC", dwFileAttributes=0x20) returned 0 [0213.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 7730 os_tid = 0x137c [0211.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc")) returned 0x20 [0212.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC", dwFileAttributes=0x20) returned 0 [0212.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.896] GetLastError () returned 0x5 [0212.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC", dwFileAttributes=0x20) returned 0 [0212.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 7731 os_tid = 0x1380 [0211.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc")) returned 0x20 [0213.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC", dwFileAttributes=0x20) returned 0 [0213.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.041] GetLastError () returned 0x5 [0213.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC", dwFileAttributes=0x20) returned 0 [0213.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 Thread: id = 7732 os_tid = 0x1384 [0211.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc")) returned 0x20 [0213.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC", dwFileAttributes=0x20) returned 0 [0213.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.040] GetLastError () returned 0x5 [0213.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC", dwFileAttributes=0x20) returned 0 [0213.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 7733 os_tid = 0x138c [0211.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc")) returned 0x20 [0213.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC", dwFileAttributes=0x20) returned 0 [0213.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.038] GetLastError () returned 0x5 [0213.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC", dwFileAttributes=0x20) returned 0 [0213.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 7734 os_tid = 0x16d0 [0211.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss")) returned 0x20 [0218.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0218.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.719] GetLastError () returned 0x5 [0218.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0218.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63e0) returned 1 Thread: id = 7735 os_tid = 0x1400 [0211.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss")) returned 0x20 [0218.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0218.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.694] GetLastError () returned 0x5 [0218.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0218.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6340) returned 1 Thread: id = 7736 os_tid = 0x13cc [0211.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss")) returned 0x20 [0218.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0218.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.629] GetLastError () returned 0x5 [0218.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0218.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb62a0) returned 1 Thread: id = 7737 os_tid = 0x140c [0211.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss")) returned 0x20 [0218.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.630] GetLastError () returned 0x5 [0218.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb60c0) returned 1 Thread: id = 7738 os_tid = 0x1410 [0211.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss")) returned 0x20 [0218.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.632] GetLastError () returned 0x5 [0218.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.632] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6700) returned 1 Thread: id = 7739 os_tid = 0x1414 [0211.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss")) returned 0x20 [0218.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS", dwFileAttributes=0x20) returned 0 [0218.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.634] GetLastError () returned 0x5 [0218.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS", dwFileAttributes=0x20) returned 0 [0218.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6660) returned 1 Thread: id = 7740 os_tid = 0x1418 [0211.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss")) returned 0x20 [0218.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS", dwFileAttributes=0x20) returned 0 [0218.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.635] GetLastError () returned 0x5 [0218.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS", dwFileAttributes=0x20) returned 0 [0218.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63990) returned 1 Thread: id = 7741 os_tid = 0x141c [0211.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss")) returned 0x20 [0218.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.637] GetLastError () returned 0x5 [0218.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.637] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62770) returned 1 Thread: id = 7742 os_tid = 0x1420 [0211.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst")) returned 0x20 [0218.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST", dwFileAttributes=0x20) returned 0 [0218.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.639] GetLastError () returned 0x5 [0218.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST", dwFileAttributes=0x20) returned 0 [0218.639] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f90) returned 1 Thread: id = 7743 os_tid = 0x1424 [0211.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss")) returned 0x20 [0218.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.640] GetLastError () returned 0x5 [0218.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c70) returned 1 Thread: id = 7744 os_tid = 0x1428 [0211.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst")) returned 0x20 [0218.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST", dwFileAttributes=0x20) returned 0 [0218.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.659] GetLastError () returned 0x5 [0218.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST", dwFileAttributes=0x20) returned 0 [0218.659] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63e90) returned 1 Thread: id = 7745 os_tid = 0x142c [0211.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss")) returned 0x20 [0218.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.661] GetLastError () returned 0x5 [0218.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a626d0) returned 1 Thread: id = 7746 os_tid = 0x1434 [0211.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss")) returned 0x20 [0218.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.663] GetLastError () returned 0x5 [0218.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63710) returned 1 Thread: id = 7747 os_tid = 0x1438 [0211.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss")) returned 0x20 [0218.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.664] GetLastError () returned 0x5 [0218.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.665] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc01e8) returned 1 Thread: id = 7748 os_tid = 0xe58 [0211.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss")) returned 0x20 [0218.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.666] GetLastError () returned 0x5 [0218.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0150) returned 1 Thread: id = 7749 os_tid = 0x16d8 [0211.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst")) returned 0x20 [0218.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST", dwFileAttributes=0x20) returned 0 [0218.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.615] GetLastError () returned 0x5 [0218.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST", dwFileAttributes=0x20) returned 0 [0218.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a629f0) returned 1 Thread: id = 7750 os_tid = 0x146c [0211.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst")) returned 0x20 [0218.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST", dwFileAttributes=0x20) returned 0 [0218.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.618] GetLastError () returned 0x5 [0218.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST", dwFileAttributes=0x20) returned 0 [0218.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62310) returned 1 Thread: id = 7751 os_tid = 0x1470 [0211.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss")) returned 0x20 [0218.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS", dwFileAttributes=0x20) returned 0 [0218.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.621] GetLastError () returned 0x5 [0218.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS", dwFileAttributes=0x20) returned 0 [0218.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fd0) returned 1 Thread: id = 7752 os_tid = 0x59c [0211.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss")) returned 0x20 [0218.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS", dwFileAttributes=0x20) returned 0 [0218.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.642] GetLastError () returned 0x5 [0218.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS", dwFileAttributes=0x20) returned 0 [0218.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62bd0) returned 1 Thread: id = 7753 os_tid = 0xcd8 [0211.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss")) returned 0x20 [0218.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS", dwFileAttributes=0x20) returned 0 [0218.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.644] GetLastError () returned 0x5 [0218.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS", dwFileAttributes=0x20) returned 0 [0218.644] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62950) returned 1 Thread: id = 7754 os_tid = 0xcc4 [0211.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss")) returned 0x20 [0218.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS", dwFileAttributes=0x20) returned 0 [0218.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.622] GetLastError () returned 0x5 [0218.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS", dwFileAttributes=0x20) returned 0 [0218.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a623b0) returned 1 Thread: id = 7755 os_tid = 0xfdc [0211.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss")) returned 0x20 [0218.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS", dwFileAttributes=0x20) returned 0 [0218.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.646] GetLastError () returned 0x5 [0218.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS", dwFileAttributes=0x20) returned 0 [0218.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63f30) returned 1 Thread: id = 7756 os_tid = 0xd10 [0211.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss")) returned 0x20 [0218.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS", dwFileAttributes=0x20) returned 0 [0218.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.624] GetLastError () returned 0x5 [0218.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS", dwFileAttributes=0x20) returned 0 [0218.624] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a90) returned 1 Thread: id = 7757 os_tid = 0x8c4 [0211.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss")) returned 0x20 [0218.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS", dwFileAttributes=0x20) returned 0 [0218.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.626] GetLastError () returned 0x5 [0218.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS", dwFileAttributes=0x20) returned 0 [0218.626] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62450) returned 1 Thread: id = 7758 os_tid = 0x914 [0211.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss")) returned 0x20 [0218.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS", dwFileAttributes=0x20) returned 0 [0218.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.647] GetLastError () returned 0x5 [0218.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS", dwFileAttributes=0x20) returned 0 [0218.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63cb0) returned 1 Thread: id = 7759 os_tid = 0x67c [0211.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst")) returned 0x20 [0218.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST", dwFileAttributes=0x20) returned 0 [0218.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.627] GetLastError () returned 0x5 [0218.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST", dwFileAttributes=0x20) returned 0 [0218.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a633f0) returned 1 Thread: id = 7760 os_tid = 0x910 [0211.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst")) returned 0x20 [0218.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST", dwFileAttributes=0x20) returned 0 [0218.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.649] GetLastError () returned 0x5 [0218.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST", dwFileAttributes=0x20) returned 0 [0218.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62e50) returned 1 Thread: id = 7761 os_tid = 0xffc [0211.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss")) returned 0x20 [0218.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS", dwFileAttributes=0x20) returned 0 [0218.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.650] GetLastError () returned 0x5 [0218.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS", dwFileAttributes=0x20) returned 0 [0218.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63df0) returned 1 Thread: id = 7762 os_tid = 0x81c [0211.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst")) returned 0x20 [0218.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST", dwFileAttributes=0x20) returned 0 [0218.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.652] GetLastError () returned 0x5 [0218.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST", dwFileAttributes=0x20) returned 0 [0218.652] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63ad0) returned 1 Thread: id = 7763 os_tid = 0x238c [0211.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss")) returned 0x20 [0218.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS", dwFileAttributes=0x20) returned 0 [0218.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.654] GetLastError () returned 0x5 [0218.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS", dwFileAttributes=0x20) returned 0 [0218.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63530) returned 1 Thread: id = 7764 os_tid = 0x82c [0211.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst")) returned 0x20 [0218.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST", dwFileAttributes=0x20) returned 0 [0218.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.655] GetLastError () returned 0x5 [0218.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST", dwFileAttributes=0x20) returned 0 [0218.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a624f0) returned 1 Thread: id = 7765 os_tid = 0x89c [0211.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss")) returned 0x20 [0218.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.712] GetLastError () returned 0x5 [0218.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS", dwFileAttributes=0x20) returned 0 [0218.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62130) returned 1 Thread: id = 7766 os_tid = 0x8bc [0211.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir")) returned 0x20 [0211.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", dwFileAttributes=0x20) returned 0 [0211.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0211.632] GetLastError () returned 0x5 [0211.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir", dwFileAttributes=0x20) returned 0 [0211.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d110) returned 1 Thread: id = 7767 os_tid = 0x84c [0211.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif")) returned 0x20 [0213.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", dwFileAttributes=0x20) returned 0 [0213.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.055] GetLastError () returned 0x5 [0213.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF", dwFileAttributes=0x20) returned 0 [0213.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc03b0) returned 1 Thread: id = 7768 os_tid = 0x86c [0211.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif")) returned 0x20 [0213.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", dwFileAttributes=0x20) returned 0 [0213.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.044] GetLastError () returned 0x5 [0213.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF", dwFileAttributes=0x20) returned 0 [0213.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0020) returned 1 Thread: id = 7769 os_tid = 0x27c0 [0211.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif")) returned 0x20 [0212.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", dwFileAttributes=0x20) returned 0 [0212.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.904] GetLastError () returned 0x5 [0212.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF", dwFileAttributes=0x20) returned 0 [0212.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d454a0) returned 1 Thread: id = 7770 os_tid = 0x27c8 [0211.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif")) returned 0x20 [0213.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", dwFileAttributes=0x20) returned 0 [0213.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.053] GetLastError () returned 0x5 [0213.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF", dwFileAttributes=0x20) returned 0 [0213.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 7771 os_tid = 0x88c [0211.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif")) returned 0x20 [0213.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", dwFileAttributes=0x20) returned 0 [0213.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.052] GetLastError () returned 0x5 [0213.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF", dwFileAttributes=0x20) returned 0 [0213.052] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc00b8) returned 1 Thread: id = 7772 os_tid = 0x8dc [0211.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif")) returned 0x20 [0213.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", dwFileAttributes=0x20) returned 0 [0213.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.051] GetLastError () returned 0x5 [0213.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF", dwFileAttributes=0x20) returned 0 [0213.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0448) returned 1 Thread: id = 7773 os_tid = 0xb58 [0211.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif")) returned 0x20 [0213.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", dwFileAttributes=0x20) returned 0 [0213.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.049] GetLastError () returned 0x5 [0213.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF", dwFileAttributes=0x20) returned 0 [0213.050] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc04e0) returned 1 Thread: id = 7774 os_tid = 0x1af4 [0211.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif")) returned 0x20 [0213.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", dwFileAttributes=0x20) returned 0 [0213.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.048] GetLastError () returned 0x5 [0213.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF", dwFileAttributes=0x20) returned 0 [0213.048] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0578) returned 1 Thread: id = 7775 os_tid = 0x15b4 [0211.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif")) returned 0x20 [0213.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", dwFileAttributes=0x20) returned 0 [0213.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.047] GetLastError () returned 0x5 [0213.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF", dwFileAttributes=0x20) returned 0 [0213.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0610) returned 1 Thread: id = 7776 os_tid = 0x15b8 [0211.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif")) returned 0x20 [0213.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", dwFileAttributes=0x20) returned 0 [0213.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.045] GetLastError () returned 0x5 [0213.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF", dwFileAttributes=0x20) returned 0 [0213.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc06a8) returned 1 Thread: id = 7777 os_tid = 0x15bc [0211.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp")) returned 0x20 [0216.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP", dwFileAttributes=0x20) returned 0 [0216.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.153] GetLastError () returned 0x5 [0216.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP", dwFileAttributes=0x20) returned 0 [0216.153] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 7778 os_tid = 0x15c0 [0211.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp")) returned 0x20 [0216.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP", dwFileAttributes=0x20) returned 0 [0216.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.154] GetLastError () returned 0x5 [0216.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP", dwFileAttributes=0x20) returned 0 [0216.155] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 7779 os_tid = 0x15f0 [0211.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp")) returned 0x20 [0216.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP", dwFileAttributes=0x20) returned 0 [0216.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.156] GetLastError () returned 0x5 [0216.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP", dwFileAttributes=0x20) returned 0 [0216.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 Thread: id = 7780 os_tid = 0x15f4 [0211.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp")) returned 0x20 [0216.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP", dwFileAttributes=0x20) returned 0 [0216.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.157] GetLastError () returned 0x5 [0216.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP", dwFileAttributes=0x20) returned 0 [0216.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d060) returned 1 Thread: id = 7781 os_tid = 0x15f8 [0211.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp")) returned 0x20 [0216.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP", dwFileAttributes=0x20) returned 0 [0216.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.158] GetLastError () returned 0x5 [0216.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP", dwFileAttributes=0x20) returned 0 [0216.158] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 7782 os_tid = 0x15fc [0211.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp")) returned 0x20 [0216.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP", dwFileAttributes=0x20) returned 0 [0216.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.160] GetLastError () returned 0x5 [0216.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP", dwFileAttributes=0x20) returned 0 [0216.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 7783 os_tid = 0x1600 [0211.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp")) returned 0x20 [0216.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP", dwFileAttributes=0x20) returned 0 [0216.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.162] GetLastError () returned 0x5 [0216.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP", dwFileAttributes=0x20) returned 0 [0216.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c6d0) returned 1 Thread: id = 7784 os_tid = 0x161c [0211.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp")) returned 0x20 [0216.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP", dwFileAttributes=0x20) returned 0 [0216.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.164] GetLastError () returned 0x5 [0216.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP", dwFileAttributes=0x20) returned 0 [0216.165] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 7785 os_tid = 0x1620 [0211.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp")) returned 0x20 [0216.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP", dwFileAttributes=0x20) returned 0 [0216.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.166] GetLastError () returned 0x5 [0216.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP", dwFileAttributes=0x20) returned 0 [0216.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 7786 os_tid = 0x1624 [0211.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp")) returned 0x20 [0216.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP", dwFileAttributes=0x20) returned 0 [0216.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.167] GetLastError () returned 0x5 [0216.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP", dwFileAttributes=0x20) returned 0 [0216.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 7787 os_tid = 0x1628 [0211.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp")) returned 0x20 [0216.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP", dwFileAttributes=0x20) returned 0 [0216.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.168] GetLastError () returned 0x5 [0216.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP", dwFileAttributes=0x20) returned 0 [0216.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 7788 os_tid = 0x1630 [0211.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp")) returned 0x20 [0216.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP", dwFileAttributes=0x20) returned 0 [0216.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.171] GetLastError () returned 0x5 [0216.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP", dwFileAttributes=0x20) returned 0 [0216.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 7789 os_tid = 0x1634 [0211.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs")) returned 0x20 [0215.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", dwFileAttributes=0x20) returned 0 [0215.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.763] GetLastError () returned 0x5 [0215.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS", dwFileAttributes=0x20) returned 0 [0215.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ab18) returned 1 Thread: id = 7790 os_tid = 0x1638 [0211.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc")) returned 0x20 [0215.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", dwFileAttributes=0x20) returned 0 [0215.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.766] GetLastError () returned 0x5 [0215.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC", dwFileAttributes=0x20) returned 0 [0215.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 7791 os_tid = 0x163c [0211.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt")) returned 0x20 [0215.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", dwFileAttributes=0x20) returned 0 [0215.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.775] GetLastError () returned 0x5 [0215.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT", dwFileAttributes=0x20) returned 0 [0215.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 7792 os_tid = 0x1640 [0211.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk")) returned 0x20 [0215.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0215.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.773] GetLastError () returned 0x5 [0215.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0215.774] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 7793 os_tid = 0x1658 [0211.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk")) returned 0x20 [0215.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0215.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.772] GetLastError () returned 0x5 [0215.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0215.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 7794 os_tid = 0x1f48 [0211.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd")) returned 0x20 [0215.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", dwFileAttributes=0x20) returned 0 [0215.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.668] GetLastError () returned 0x5 [0215.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD", dwFileAttributes=0x20) returned 0 [0215.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 Thread: id = 7795 os_tid = 0x240c [0211.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs")) returned 0x20 [0215.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", dwFileAttributes=0x20) returned 0 [0215.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.770] GetLastError () returned 0x5 [0215.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS", dwFileAttributes=0x20) returned 0 [0215.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 7796 os_tid = 0x2410 [0211.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc")) returned 0x20 [0215.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0215.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.769] GetLastError () returned 0x5 [0215.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC", dwFileAttributes=0x20) returned 0 [0215.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 7797 os_tid = 0x2420 [0211.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt")) returned 0x20 [0215.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0215.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.767] GetLastError () returned 0x5 [0215.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT", dwFileAttributes=0x20) returned 0 [0215.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 7798 os_tid = 0x2424 [0211.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk")) returned 0x20 [0213.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0213.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0213.216] GetLastError () returned 0x5 [0213.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0213.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0740) returned 1 Thread: id = 7799 os_tid = 0x242c [0211.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk")) returned 0x20 [0215.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0215.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.800] GetLastError () returned 0x5 [0215.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0215.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc07d8) returned 1 Thread: id = 7800 os_tid = 0x2434 [0211.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs")) returned 0x20 [0215.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", dwFileAttributes=0x20) returned 0 [0215.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.798] GetLastError () returned 0x5 [0215.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS", dwFileAttributes=0x20) returned 0 [0215.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18e18) returned 1 Thread: id = 7801 os_tid = 0x2438 [0211.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc")) returned 0x20 [0215.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", dwFileAttributes=0x20) returned 0 [0215.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.796] GetLastError () returned 0x5 [0215.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC", dwFileAttributes=0x20) returned 0 [0215.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 7802 os_tid = 0x244c [0211.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt")) returned 0x20 [0215.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", dwFileAttributes=0x20) returned 0 [0215.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.795] GetLastError () returned 0x5 [0215.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT", dwFileAttributes=0x20) returned 0 [0215.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 7803 os_tid = 0xb68 [0211.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk")) returned 0x20 [0215.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0215.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.786] GetLastError () returned 0x5 [0215.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK", dwFileAttributes=0x20) returned 0 [0215.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 7804 os_tid = 0xdbc [0211.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk")) returned 0x20 [0215.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0215.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.785] GetLastError () returned 0x5 [0215.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK", dwFileAttributes=0x20) returned 0 [0215.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 7805 os_tid = 0x2620 [0211.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl")) returned 0x20 [0215.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", dwFileAttributes=0x20) returned 0 [0215.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.764] GetLastError () returned 0x5 [0215.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL", dwFileAttributes=0x20) returned 0 [0215.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 7806 os_tid = 0x1100 [0211.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll")) returned 0x20 [0215.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.790] GetLastError () returned 0x5 [0215.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 7807 os_tid = 0x4d0 [0211.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll")) returned 0x20 [0215.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.783] GetLastError () returned 0x5 [0215.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 7808 os_tid = 0x1164 [0211.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm")) returned 0x20 [0215.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", dwFileAttributes=0x20) returned 0 [0215.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.782] GetLastError () returned 0x5 [0215.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM", dwFileAttributes=0x20) returned 0 [0215.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 7809 os_tid = 0x1180 [0211.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl")) returned 0x20 [0215.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", dwFileAttributes=0x20) returned 0 [0215.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.788] GetLastError () returned 0x5 [0215.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL", dwFileAttributes=0x20) returned 0 [0215.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a318) returned 1 Thread: id = 7810 os_tid = 0x1184 [0211.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn")) returned 0x20 [0215.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", dwFileAttributes=0x20) returned 0 [0215.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.780] GetLastError () returned 0x5 [0215.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn", dwFileAttributes=0x20) returned 0 [0215.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 7811 os_tid = 0x1188 [0211.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn")) returned 0x20 [0215.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", dwFileAttributes=0x20) returned 0 [0215.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.778] GetLastError () returned 0x5 [0215.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn", dwFileAttributes=0x20) returned 0 [0215.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 7812 os_tid = 0x1190 [0211.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll")) returned 0x20 [0215.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.777] GetLastError () returned 0x5 [0215.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0870) returned 1 Thread: id = 7813 os_tid = 0x1194 [0211.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll")) returned 0x20 [0215.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.793] GetLastError () returned 0x5 [0215.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0908) returned 1 Thread: id = 7814 os_tid = 0x1198 [0211.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss")) returned 0x20 [0218.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.714] GetLastError () returned 0x5 [0218.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS", dwFileAttributes=0x20) returned 0 [0218.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6020) returned 1 Thread: id = 7815 os_tid = 0x119c [0211.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss")) returned 0x20 [0218.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS", dwFileAttributes=0x20) returned 0 [0218.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.657] GetLastError () returned 0x5 [0218.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS", dwFileAttributes=0x20) returned 0 [0218.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63850) returned 1 Thread: id = 7816 os_tid = 0x11a0 [0211.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm")) returned 0x20 [0215.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", dwFileAttributes=0x20) returned 0 [0215.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.791] GetLastError () returned 0x5 [0215.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM", dwFileAttributes=0x20) returned 0 [0215.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19418) returned 1 Thread: id = 7817 os_tid = 0x11a4 [0211.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll")) returned 0x20 [0215.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.669] GetLastError () returned 0x5 [0215.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL", dwFileAttributes=0x20) returned 0 [0215.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d110) returned 1 Thread: id = 7818 os_tid = 0x11a8 [0212.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf")) returned 0x20 [0212.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF", dwFileAttributes=0x20) returned 0 [0212.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.829] GetLastError () returned 0x5 [0212.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF", dwFileAttributes=0x20) returned 0 [0212.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9de0) returned 1 Thread: id = 7819 os_tid = 0x11ac [0212.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf")) returned 0x20 [0212.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF", dwFileAttributes=0x20) returned 0 [0212.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0212.834] GetLastError () returned 0x5 [0212.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF", dwFileAttributes=0x20) returned 0 [0212.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 7820 os_tid = 0x11b0 [0212.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf")) returned 0x20 [0216.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF", dwFileAttributes=0x20) returned 0 [0216.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.173] GetLastError () returned 0x5 [0216.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF", dwFileAttributes=0x20) returned 0 [0216.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 7821 os_tid = 0x11b4 [0212.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf")) returned 0x20 [0216.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF", dwFileAttributes=0x20) returned 0 [0216.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.169] GetLastError () returned 0x5 [0216.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF", dwFileAttributes=0x20) returned 0 [0216.170] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 7822 os_tid = 0x4bc [0212.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf")) returned 0x20 [0215.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF", dwFileAttributes=0x20) returned 0 [0215.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.972] GetLastError () returned 0x5 [0215.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF", dwFileAttributes=0x20) returned 0 [0215.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 7823 os_tid = 0x143c [0212.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf")) returned 0x20 [0216.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF", dwFileAttributes=0x20) returned 0 [0216.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.163] GetLastError () returned 0x5 [0216.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF", dwFileAttributes=0x20) returned 0 [0216.163] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 7824 os_tid = 0x1cbc [0212.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf")) returned 0x20 [0216.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF", dwFileAttributes=0x20) returned 0 [0216.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.159] GetLastError () returned 0x5 [0216.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF", dwFileAttributes=0x20) returned 0 [0216.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 7825 os_tid = 0x14b0 [0212.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf")) returned 0x20 [0215.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF", dwFileAttributes=0x20) returned 0 [0215.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.965] GetLastError () returned 0x5 [0215.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF", dwFileAttributes=0x20) returned 0 [0215.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 7826 os_tid = 0x26bc [0212.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf")) returned 0x20 [0216.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF", dwFileAttributes=0x20) returned 0 [0216.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.181] GetLastError () returned 0x5 [0216.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF", dwFileAttributes=0x20) returned 0 [0216.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 7827 os_tid = 0xc28 [0212.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf")) returned 0x20 [0216.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF", dwFileAttributes=0x20) returned 0 [0216.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.180] GetLastError () returned 0x5 [0216.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF", dwFileAttributes=0x20) returned 0 [0216.180] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 7828 os_tid = 0x21e0 [0212.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf")) returned 0x20 [0216.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF", dwFileAttributes=0x20) returned 0 [0216.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.179] GetLastError () returned 0x5 [0216.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF", dwFileAttributes=0x20) returned 0 [0216.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 7829 os_tid = 0x12ac [0212.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf")) returned 0x20 [0216.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF", dwFileAttributes=0x20) returned 0 [0216.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.146] GetLastError () returned 0x5 [0216.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF", dwFileAttributes=0x20) returned 0 [0216.146] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 Thread: id = 7830 os_tid = 0x12b0 [0212.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf")) returned 0x20 [0216.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF", dwFileAttributes=0x20) returned 0 [0216.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.177] GetLastError () returned 0x5 [0216.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF", dwFileAttributes=0x20) returned 0 [0216.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 7831 os_tid = 0x12b4 [0212.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf")) returned 0x20 [0216.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF", dwFileAttributes=0x20) returned 0 [0216.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.176] GetLastError () returned 0x5 [0216.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF", dwFileAttributes=0x20) returned 0 [0216.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 7832 os_tid = 0x12c0 [0212.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf")) returned 0x20 [0216.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF", dwFileAttributes=0x20) returned 0 [0216.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.175] GetLastError () returned 0x5 [0216.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF", dwFileAttributes=0x20) returned 0 [0216.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 7833 os_tid = 0x12c4 [0212.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf")) returned 0x20 [0216.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF", dwFileAttributes=0x20) returned 0 [0216.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.137] GetLastError () returned 0x5 [0216.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF", dwFileAttributes=0x20) returned 0 [0216.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 7834 os_tid = 0x12c8 [0212.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm")) returned 0x20 [0215.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", dwFileAttributes=0x20) returned 0 [0215.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.761] GetLastError () returned 0x5 [0215.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM", dwFileAttributes=0x20) returned 0 [0215.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b18) returned 1 Thread: id = 7835 os_tid = 0x9fc [0212.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss")) returned 0x20 [0218.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS", dwFileAttributes=0x20) returned 0 [0218.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.692] GetLastError () returned 0x5 [0218.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS", dwFileAttributes=0x20) returned 0 [0218.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63030) returned 1 Thread: id = 7836 os_tid = 0x1a60 [0212.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss")) returned 0x20 [0218.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS", dwFileAttributes=0x20) returned 0 [0218.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.700] GetLastError () returned 0x5 [0218.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS", dwFileAttributes=0x20) returned 0 [0218.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62630) returned 1 Thread: id = 7837 os_tid = 0x1644 [0212.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst")) returned 0x20 [0218.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST", dwFileAttributes=0x20) returned 0 [0218.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.699] GetLastError () returned 0x5 [0218.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST", dwFileAttributes=0x20) returned 0 [0218.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a635d0) returned 1 Thread: id = 7838 os_tid = 0x1648 [0212.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss")) returned 0x20 [0218.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS", dwFileAttributes=0x20) returned 0 [0218.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.690] GetLastError () returned 0x5 [0218.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS", dwFileAttributes=0x20) returned 0 [0218.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63670) returned 1 Thread: id = 7839 os_tid = 0x164c [0212.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst")) returned 0x20 [0218.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST", dwFileAttributes=0x20) returned 0 [0218.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.688] GetLastError () returned 0x5 [0218.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST", dwFileAttributes=0x20) returned 0 [0218.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63350) returned 1 Thread: id = 7840 os_tid = 0x1650 [0212.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss")) returned 0x20 [0218.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS", dwFileAttributes=0x20) returned 0 [0218.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.686] GetLastError () returned 0x5 [0218.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS", dwFileAttributes=0x20) returned 0 [0218.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62b30) returned 1 Thread: id = 7841 os_tid = 0x7c8 [0212.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss")) returned 0x20 [0218.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS", dwFileAttributes=0x20) returned 0 [0218.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.684] GetLastError () returned 0x5 [0218.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS", dwFileAttributes=0x20) returned 0 [0218.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63490) returned 1 Thread: id = 7842 os_tid = 0x24f0 [0212.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst")) returned 0x20 [0218.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST", dwFileAttributes=0x20) returned 0 [0218.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.695] GetLastError () returned 0x5 [0218.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST", dwFileAttributes=0x20) returned 0 [0218.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a638f0) returned 1 Thread: id = 7843 os_tid = 0x1678 [0212.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst")) returned 0x20 [0218.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST", dwFileAttributes=0x20) returned 0 [0218.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.608] GetLastError () returned 0x5 [0218.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST", dwFileAttributes=0x20) returned 0 [0218.608] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63170) returned 1 Thread: id = 7844 os_tid = 0xf70 [0212.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss")) returned 0x20 [0218.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS", dwFileAttributes=0x20) returned 0 [0218.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.706] GetLastError () returned 0x5 [0218.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS", dwFileAttributes=0x20) returned 0 [0218.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63210) returned 1 Thread: id = 7845 os_tid = 0x12e0 [0212.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss")) returned 0x20 [0218.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS", dwFileAttributes=0x20) returned 0 [0218.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.704] GetLastError () returned 0x5 [0218.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS", dwFileAttributes=0x20) returned 0 [0218.704] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62ef0) returned 1 Thread: id = 7846 os_tid = 0x16b8 [0212.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss")) returned 0x20 [0218.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS", dwFileAttributes=0x20) returned 0 [0218.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.702] GetLastError () returned 0x5 [0218.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS", dwFileAttributes=0x20) returned 0 [0218.702] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621d0) returned 1 Thread: id = 7847 os_tid = 0x16bc [0212.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss")) returned 0x20 [0218.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS", dwFileAttributes=0x20) returned 0 [0218.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.683] GetLastError () returned 0x5 [0218.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS", dwFileAttributes=0x20) returned 0 [0218.683] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62090) returned 1 Thread: id = 7848 os_tid = 0x1318 [0212.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss")) returned 0x20 [0218.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS", dwFileAttributes=0x20) returned 0 [0218.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.681] GetLastError () returned 0x5 [0218.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS", dwFileAttributes=0x20) returned 0 [0218.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62270) returned 1 Thread: id = 7849 os_tid = 0x1344 [0212.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss")) returned 0x20 [0218.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS", dwFileAttributes=0x20) returned 0 [0218.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.679] GetLastError () returned 0x5 [0218.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS", dwFileAttributes=0x20) returned 0 [0218.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 Thread: id = 7850 os_tid = 0x1708 [0212.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss")) returned 0x20 [0218.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.677] GetLastError () returned 0x5 [0218.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS", dwFileAttributes=0x20) returned 0 [0218.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 Thread: id = 7851 os_tid = 0x105c [0212.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss")) returned 0x20 [0218.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.675] GetLastError () returned 0x5 [0218.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS", dwFileAttributes=0x20) returned 0 [0218.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 Thread: id = 7852 os_tid = 0x1fa0 [0212.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss")) returned 0x20 [0218.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS", dwFileAttributes=0x20) returned 0 [0218.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.674] GetLastError () returned 0x5 [0218.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS", dwFileAttributes=0x20) returned 0 [0218.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5a40) returned 1 Thread: id = 7853 os_tid = 0x11b8 [0212.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss")) returned 0x20 [0218.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS", dwFileAttributes=0x20) returned 0 [0218.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.710] GetLastError () returned 0x5 [0218.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS", dwFileAttributes=0x20) returned 0 [0218.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 Thread: id = 7854 os_tid = 0x11c0 [0212.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss")) returned 0x20 [0218.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS", dwFileAttributes=0x20) returned 0 [0218.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.708] GetLastError () returned 0x5 [0218.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS", dwFileAttributes=0x20) returned 0 [0218.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6260) returned 1 Thread: id = 7855 os_tid = 0x83c [0212.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss")) returned 0x20 [0218.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS", dwFileAttributes=0x20) returned 0 [0218.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.697] GetLastError () returned 0x5 [0218.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS", dwFileAttributes=0x20) returned 0 [0218.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6080) returned 1 Thread: id = 7856 os_tid = 0x11c4 [0212.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss")) returned 0x20 [0218.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS", dwFileAttributes=0x20) returned 0 [0218.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.671] GetLastError () returned 0x5 [0218.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS", dwFileAttributes=0x20) returned 0 [0218.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4dc0) returned 1 Thread: id = 7857 os_tid = 0x11c8 [0212.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst")) returned 0x20 [0218.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST", dwFileAttributes=0x20) returned 0 [0218.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.670] GetLastError () returned 0x5 [0218.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST", dwFileAttributes=0x20) returned 0 [0218.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 Thread: id = 7858 os_tid = 0x11cc [0212.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss")) returned 0x20 [0218.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS", dwFileAttributes=0x20) returned 0 [0218.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.668] GetLastError () returned 0x5 [0218.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS", dwFileAttributes=0x20) returned 0 [0218.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 Thread: id = 7859 os_tid = 0x11d0 [0212.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst")) returned 0x20 [0218.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST", dwFileAttributes=0x20) returned 0 [0218.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.717] GetLastError () returned 0x5 [0218.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST", dwFileAttributes=0x20) returned 0 [0218.718] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5b80) returned 1 Thread: id = 7860 os_tid = 0x11d4 [0212.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst")) returned 0x20 [0218.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST", dwFileAttributes=0x20) returned 0 [0218.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.716] GetLastError () returned 0x5 [0218.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST", dwFileAttributes=0x20) returned 0 [0218.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c5c8) returned 1 Thread: id = 7861 os_tid = 0x11fc [0215.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst")) returned 0x20 [0218.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST", dwFileAttributes=0x20) returned 0 [0218.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.721] GetLastError () returned 0x5 [0218.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST", dwFileAttributes=0x20) returned 0 [0218.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d700) returned 1 Thread: id = 7862 os_tid = 0x1200 [0215.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv")) returned 0x20 [0215.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV", dwFileAttributes=0x20) returned 0 [0215.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.655] GetLastError () returned 0x5 [0215.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV", dwFileAttributes=0x20) returned 0 [0215.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a198) returned 1 Thread: id = 7863 os_tid = 0xb70 [0215.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml")) returned 0x20 [0215.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML", dwFileAttributes=0x20) returned 0 [0215.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.656] GetLastError () returned 0x5 [0215.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML", dwFileAttributes=0x20) returned 0 [0215.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19b98) returned 1 Thread: id = 7864 os_tid = 0xb60 [0215.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc")) returned 0x20 [0215.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC", dwFileAttributes=0x20) returned 0 [0215.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.658] GetLastError () returned 0x5 [0215.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC", dwFileAttributes=0x20) returned 0 [0215.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 7865 os_tid = 0x23c8 [0215.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc")) returned 0x20 [0215.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC", dwFileAttributes=0x20) returned 0 [0215.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.659] GetLastError () returned 0x5 [0215.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC", dwFileAttributes=0x20) returned 0 [0215.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 7866 os_tid = 0xb5c [0215.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc")) returned 0x20 [0215.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC", dwFileAttributes=0x20) returned 0 [0215.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.663] GetLastError () returned 0x5 [0215.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC", dwFileAttributes=0x20) returned 0 [0215.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 7867 os_tid = 0x32c [0215.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc")) returned 0x20 [0215.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC", dwFileAttributes=0x20) returned 0 [0215.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.666] GetLastError () returned 0x5 [0215.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC", dwFileAttributes=0x20) returned 0 [0215.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 7868 os_tid = 0x23f0 [0215.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc")) returned 0x20 [0219.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC", dwFileAttributes=0x20) returned 0 [0219.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.598] GetLastError () returned 0x5 [0219.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC", dwFileAttributes=0x20) returned 0 [0219.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 7869 os_tid = 0xfb0 [0215.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv")) returned 0x20 [0219.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV", dwFileAttributes=0x20) returned 0 [0219.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.566] GetLastError () returned 0x5 [0219.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV", dwFileAttributes=0x20) returned 0 [0219.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 7870 os_tid = 0xab8 [0215.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc")) returned 0x20 [0218.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC", dwFileAttributes=0x20) returned 0 [0218.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.370] GetLastError () returned 0x5 [0219.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC", dwFileAttributes=0x20) returned 0 [0219.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9de0) returned 1 Thread: id = 7871 os_tid = 0x1474 [0215.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc")) returned 0x20 [0219.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC", dwFileAttributes=0x20) returned 0 [0219.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.519] GetLastError () returned 0x5 [0219.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC", dwFileAttributes=0x20) returned 0 [0219.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 7872 os_tid = 0x1478 [0215.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc")) returned 0x20 [0219.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC", dwFileAttributes=0x20) returned 0 [0219.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.506] GetLastError () returned 0x5 [0219.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC", dwFileAttributes=0x20) returned 0 [0219.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 7873 os_tid = 0x1480 [0215.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv")) returned 0x20 [0219.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV", dwFileAttributes=0x20) returned 0 [0219.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.508] GetLastError () returned 0x5 [0219.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV", dwFileAttributes=0x20) returned 0 [0219.508] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 7874 os_tid = 0x1488 [0215.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml")) returned 0x20 [0219.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML", dwFileAttributes=0x20) returned 0 [0219.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.509] GetLastError () returned 0x5 [0219.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML", dwFileAttributes=0x20) returned 0 [0219.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 7875 os_tid = 0x1490 [0215.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc")) returned 0x20 [0219.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC", dwFileAttributes=0x20) returned 0 [0219.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.521] GetLastError () returned 0x5 [0219.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC", dwFileAttributes=0x20) returned 0 [0219.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 7876 os_tid = 0x1494 [0215.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc")) returned 0x20 [0219.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC", dwFileAttributes=0x20) returned 0 [0219.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.510] GetLastError () returned 0x5 [0219.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC", dwFileAttributes=0x20) returned 0 [0219.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 7877 os_tid = 0x1498 [0215.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc")) returned 0x20 [0219.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC", dwFileAttributes=0x20) returned 0 [0219.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.512] GetLastError () returned 0x5 [0219.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC", dwFileAttributes=0x20) returned 0 [0219.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 7878 os_tid = 0x149c [0215.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv")) returned 0x20 [0219.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV", dwFileAttributes=0x20) returned 0 [0219.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.513] GetLastError () returned 0x5 [0219.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV", dwFileAttributes=0x20) returned 0 [0219.513] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9c48) returned 1 Thread: id = 7879 os_tid = 0x14a0 [0215.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml")) returned 0x20 [0219.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML", dwFileAttributes=0x20) returned 0 [0219.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.522] GetLastError () returned 0x5 [0219.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML", dwFileAttributes=0x20) returned 0 [0219.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 7880 os_tid = 0x14a4 [0215.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc")) returned 0x20 [0219.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC", dwFileAttributes=0x20) returned 0 [0219.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.523] GetLastError () returned 0x5 [0219.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC", dwFileAttributes=0x20) returned 0 [0219.524] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 7881 os_tid = 0x14bc [0215.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc")) returned 0x20 [0219.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC", dwFileAttributes=0x20) returned 0 [0219.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.515] GetLastError () returned 0x5 [0219.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC", dwFileAttributes=0x20) returned 0 [0219.515] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 7882 os_tid = 0x14fc [0215.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc")) returned 0x20 [0219.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC", dwFileAttributes=0x20) returned 0 [0219.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.516] GetLastError () returned 0x5 [0219.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC", dwFileAttributes=0x20) returned 0 [0219.517] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 7883 os_tid = 0x1500 [0215.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv")) returned 0x20 [0219.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV", dwFileAttributes=0x20) returned 0 [0219.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.369] GetLastError () returned 0x5 [0219.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV", dwFileAttributes=0x20) returned 0 [0219.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d454a0) returned 1 Thread: id = 7884 os_tid = 0x1504 [0215.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc")) returned 0x20 [0219.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC", dwFileAttributes=0x20) returned 0 [0219.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.604] GetLastError () returned 0x5 [0219.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC", dwFileAttributes=0x20) returned 0 [0219.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d444e0) returned 1 Thread: id = 7885 os_tid = 0x1508 [0215.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc")) returned 0x20 [0219.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC", dwFileAttributes=0x20) returned 0 [0219.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.518] GetLastError () returned 0x5 [0219.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC", dwFileAttributes=0x20) returned 0 [0219.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 7886 os_tid = 0x16dc [0215.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv")) returned 0x20 [0219.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV", dwFileAttributes=0x20) returned 0 [0219.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.525] GetLastError () returned 0x5 [0219.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV", dwFileAttributes=0x20) returned 0 [0219.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a498) returned 1 Thread: id = 7887 os_tid = 0x151c [0215.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml")) returned 0x20 [0219.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML", dwFileAttributes=0x20) returned 0 [0219.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.530] GetLastError () returned 0x5 [0219.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML", dwFileAttributes=0x20) returned 0 [0219.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19698) returned 1 Thread: id = 7888 os_tid = 0x1524 [0215.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc")) returned 0x20 [0219.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC", dwFileAttributes=0x20) returned 0 [0219.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.532] GetLastError () returned 0x5 [0219.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC", dwFileAttributes=0x20) returned 0 [0219.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 7889 os_tid = 0x1530 [0215.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc")) returned 0x20 [0219.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC", dwFileAttributes=0x20) returned 0 [0219.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.372] GetLastError () returned 0x5 [0219.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC", dwFileAttributes=0x20) returned 0 [0219.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 7890 os_tid = 0x1538 [0215.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif")) returned 0x20 [0215.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", dwFileAttributes=0x20) returned 0 [0215.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.979] GetLastError () returned 0x5 [0215.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF", dwFileAttributes=0x20) returned 0 [0215.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 7891 os_tid = 0x1d40 [0215.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif")) returned 0x20 [0215.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", dwFileAttributes=0x20) returned 0 [0215.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.981] GetLastError () returned 0x5 [0215.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF", dwFileAttributes=0x20) returned 0 [0215.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d110) returned 1 Thread: id = 7892 os_tid = 0x1390 [0215.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif")) returned 0x20 [0215.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", dwFileAttributes=0x20) returned 0 [0215.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0215.983] GetLastError () returned 0x5 [0215.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF", dwFileAttributes=0x20) returned 0 [0215.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 7893 os_tid = 0xc24 [0215.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif")) returned 0x20 [0216.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", dwFileAttributes=0x20) returned 0 [0216.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.364] GetLastError () returned 0x5 [0216.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF", dwFileAttributes=0x20) returned 0 [0216.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 7894 os_tid = 0x18c4 [0215.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif")) returned 0x20 [0216.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", dwFileAttributes=0x20) returned 0 [0216.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.366] GetLastError () returned 0x5 [0216.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF", dwFileAttributes=0x20) returned 0 [0216.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 7895 os_tid = 0x139c [0215.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif")) returned 0x20 [0216.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", dwFileAttributes=0x20) returned 0 [0216.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.368] GetLastError () returned 0x5 [0216.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF", dwFileAttributes=0x20) returned 0 [0216.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 7896 os_tid = 0x13a0 [0215.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif")) returned 0x20 [0216.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", dwFileAttributes=0x20) returned 0 [0216.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.376] GetLastError () returned 0x5 [0216.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF", dwFileAttributes=0x20) returned 0 [0216.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 7897 os_tid = 0x13a4 [0215.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif")) returned 0x20 [0216.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", dwFileAttributes=0x20) returned 0 [0216.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.378] GetLastError () returned 0x5 [0216.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF", dwFileAttributes=0x20) returned 0 [0216.378] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0740) returned 1 Thread: id = 7898 os_tid = 0x13a8 [0215.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif")) returned 0x20 [0216.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", dwFileAttributes=0x20) returned 0 [0216.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.380] GetLastError () returned 0x5 [0216.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF", dwFileAttributes=0x20) returned 0 [0216.380] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc03b0) returned 1 Thread: id = 7899 os_tid = 0x13ac [0215.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif")) returned 0x20 [0216.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", dwFileAttributes=0x20) returned 0 [0216.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.381] GetLastError () returned 0x5 [0216.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF", dwFileAttributes=0x20) returned 0 [0216.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc00b8) returned 1 Thread: id = 7900 os_tid = 0x13b0 [0215.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif")) returned 0x20 [0216.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", dwFileAttributes=0x20) returned 0 [0216.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.383] GetLastError () returned 0x5 [0216.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF", dwFileAttributes=0x20) returned 0 [0216.383] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0448) returned 1 Thread: id = 7901 os_tid = 0x13b4 [0215.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif")) returned 0x20 [0216.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", dwFileAttributes=0x20) returned 0 [0216.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.385] GetLastError () returned 0x5 [0216.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF", dwFileAttributes=0x20) returned 0 [0216.385] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 7902 os_tid = 0x13b8 [0215.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif")) returned 0x20 [0216.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", dwFileAttributes=0x20) returned 0 [0216.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.386] GetLastError () returned 0x5 [0216.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF", dwFileAttributes=0x20) returned 0 [0216.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 7903 os_tid = 0x1c64 [0215.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif")) returned 0x20 [0216.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", dwFileAttributes=0x20) returned 0 [0216.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.743] GetLastError () returned 0x5 [0216.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF", dwFileAttributes=0x20) returned 0 [0216.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc04e0) returned 1 Thread: id = 7904 os_tid = 0x1c68 [0215.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif")) returned 0x20 [0216.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", dwFileAttributes=0x20) returned 0 [0216.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.745] GetLastError () returned 0x5 [0216.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF", dwFileAttributes=0x20) returned 0 [0216.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0578) returned 1 Thread: id = 7905 os_tid = 0x1c6c [0215.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif")) returned 0x20 [0216.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", dwFileAttributes=0x20) returned 0 [0216.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.747] GetLastError () returned 0x5 [0216.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF", dwFileAttributes=0x20) returned 0 [0216.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0610) returned 1 Thread: id = 7906 os_tid = 0x1c7c [0215.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif")) returned 0x20 [0216.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", dwFileAttributes=0x20) returned 0 [0216.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.748] GetLastError () returned 0x5 [0216.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF", dwFileAttributes=0x20) returned 0 [0216.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc06a8) returned 1 Thread: id = 7907 os_tid = 0x15dc [0215.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif")) returned 0x20 [0216.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", dwFileAttributes=0x20) returned 0 [0216.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.750] GetLastError () returned 0x5 [0216.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF", dwFileAttributes=0x20) returned 0 [0216.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0020) returned 1 Thread: id = 7908 os_tid = 0x1730 [0215.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif")) returned 0x20 [0216.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", dwFileAttributes=0x20) returned 0 [0216.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.751] GetLastError () returned 0x5 [0216.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF", dwFileAttributes=0x20) returned 0 [0216.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0a38) returned 1 Thread: id = 7909 os_tid = 0x1738 [0215.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif")) returned 0x20 [0216.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", dwFileAttributes=0x20) returned 0 [0216.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.753] GetLastError () returned 0x5 [0216.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF", dwFileAttributes=0x20) returned 0 [0216.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0ad0) returned 1 Thread: id = 7910 os_tid = 0x173c [0215.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif")) returned 0x20 [0216.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", dwFileAttributes=0x20) returned 0 [0216.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.754] GetLastError () returned 0x5 [0216.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF", dwFileAttributes=0x20) returned 0 [0216.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0b68) returned 1 Thread: id = 7911 os_tid = 0x1740 [0215.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif")) returned 0x20 [0216.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", dwFileAttributes=0x20) returned 0 [0216.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.756] GetLastError () returned 0x5 [0216.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF", dwFileAttributes=0x20) returned 0 [0216.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0c00) returned 1 Thread: id = 7912 os_tid = 0xc10 [0215.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif")) returned 0x20 [0216.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", dwFileAttributes=0x20) returned 0 [0216.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.758] GetLastError () returned 0x5 [0216.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF", dwFileAttributes=0x20) returned 0 [0216.758] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0c98) returned 1 Thread: id = 7913 os_tid = 0x1744 [0216.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif")) returned 0x20 [0216.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", dwFileAttributes=0x20) returned 0 [0216.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.759] GetLastError () returned 0x5 [0216.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF", dwFileAttributes=0x20) returned 0 [0216.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0d30) returned 1 Thread: id = 7914 os_tid = 0x1748 [0216.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif")) returned 0x20 [0216.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", dwFileAttributes=0x20) returned 0 [0216.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.761] GetLastError () returned 0x5 [0216.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF", dwFileAttributes=0x20) returned 0 [0216.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0dc8) returned 1 Thread: id = 7915 os_tid = 0x174c [0216.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif")) returned 0x20 [0216.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", dwFileAttributes=0x20) returned 0 [0216.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.763] GetLastError () returned 0x5 [0216.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF", dwFileAttributes=0x20) returned 0 [0216.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0e60) returned 1 Thread: id = 7916 os_tid = 0x1750 [0216.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif")) returned 0x20 [0216.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", dwFileAttributes=0x20) returned 0 [0216.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.764] GetLastError () returned 0x5 [0216.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF", dwFileAttributes=0x20) returned 0 [0216.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0ef8) returned 1 Thread: id = 7917 os_tid = 0x1754 [0216.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif")) returned 0x20 [0216.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", dwFileAttributes=0x20) returned 0 [0216.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.766] GetLastError () returned 0x5 [0216.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF", dwFileAttributes=0x20) returned 0 [0216.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0f90) returned 1 Thread: id = 7918 os_tid = 0x175c [0216.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif")) returned 0x20 [0216.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", dwFileAttributes=0x20) returned 0 [0216.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.774] GetLastError () returned 0x5 [0216.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF", dwFileAttributes=0x20) returned 0 [0216.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1028) returned 1 Thread: id = 7919 os_tid = 0x7b4 [0216.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif")) returned 0x20 [0216.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", dwFileAttributes=0x20) returned 0 [0216.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.776] GetLastError () returned 0x5 [0216.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF", dwFileAttributes=0x20) returned 0 [0216.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc10c0) returned 1 Thread: id = 7920 os_tid = 0xad8 [0216.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif")) returned 0x20 [0216.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", dwFileAttributes=0x20) returned 0 [0216.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.196] GetLastError () returned 0x5 [0216.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF", dwFileAttributes=0x20) returned 0 [0216.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 Thread: id = 7921 os_tid = 0x1a84 [0216.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif")) returned 0x20 [0216.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", dwFileAttributes=0x20) returned 0 [0216.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.197] GetLastError () returned 0x5 [0216.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF", dwFileAttributes=0x20) returned 0 [0216.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 7922 os_tid = 0x1d54 [0216.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif")) returned 0x20 [0216.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", dwFileAttributes=0x20) returned 0 [0216.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.199] GetLastError () returned 0x5 [0216.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF", dwFileAttributes=0x20) returned 0 [0216.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1158) returned 1 Thread: id = 7923 os_tid = 0x1d58 [0216.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf")) returned 0x20 [0218.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF", dwFileAttributes=0x20) returned 0 [0218.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.528] GetLastError () returned 0x5 [0218.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF", dwFileAttributes=0x20) returned 0 [0218.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 7924 os_tid = 0x1d60 [0216.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf")) returned 0x20 [0218.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF", dwFileAttributes=0x20) returned 0 [0218.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.530] GetLastError () returned 0x5 [0218.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF", dwFileAttributes=0x20) returned 0 [0218.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 7925 os_tid = 0x1d6c [0216.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf")) returned 0x20 [0218.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF", dwFileAttributes=0x20) returned 0 [0218.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.531] GetLastError () returned 0x5 [0218.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF", dwFileAttributes=0x20) returned 0 [0218.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 7926 os_tid = 0x1d70 [0216.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf")) returned 0x20 [0218.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF", dwFileAttributes=0x20) returned 0 [0218.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.533] GetLastError () returned 0x5 [0218.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF", dwFileAttributes=0x20) returned 0 [0218.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 7927 os_tid = 0x1260 [0216.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf")) returned 0x20 [0218.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF", dwFileAttributes=0x20) returned 0 [0218.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.535] GetLastError () returned 0x5 [0218.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF", dwFileAttributes=0x20) returned 0 [0218.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 7928 os_tid = 0xb40 [0216.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf")) returned 0x20 [0218.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF", dwFileAttributes=0x20) returned 0 [0218.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.536] GetLastError () returned 0x5 [0218.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF", dwFileAttributes=0x20) returned 0 [0218.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 7929 os_tid = 0x1f94 [0216.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf")) returned 0x20 [0218.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF", dwFileAttributes=0x20) returned 0 [0218.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.538] GetLastError () returned 0x5 [0218.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF", dwFileAttributes=0x20) returned 0 [0218.538] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 7930 os_tid = 0x1580 [0216.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf")) returned 0x20 [0218.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF", dwFileAttributes=0x20) returned 0 [0218.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.539] GetLastError () returned 0x5 [0218.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF", dwFileAttributes=0x20) returned 0 [0218.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 7931 os_tid = 0xdf0 [0216.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf")) returned 0x20 [0218.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF", dwFileAttributes=0x20) returned 0 [0218.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.581] GetLastError () returned 0x5 [0218.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF", dwFileAttributes=0x20) returned 0 [0218.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 7932 os_tid = 0xe90 [0216.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf")) returned 0x20 [0218.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF", dwFileAttributes=0x20) returned 0 [0218.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.541] GetLastError () returned 0x5 [0218.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF", dwFileAttributes=0x20) returned 0 [0218.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 7933 os_tid = 0xdf4 [0216.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf")) returned 0x20 [0218.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF", dwFileAttributes=0x20) returned 0 [0218.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.526] GetLastError () returned 0x5 [0218.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF", dwFileAttributes=0x20) returned 0 [0218.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 7934 os_tid = 0xe08 [0216.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf")) returned 0x20 [0218.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF", dwFileAttributes=0x20) returned 0 [0218.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.543] GetLastError () returned 0x5 [0218.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF", dwFileAttributes=0x20) returned 0 [0218.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 7935 os_tid = 0x150 [0216.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf")) returned 0x20 [0218.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF", dwFileAttributes=0x20) returned 0 [0218.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.544] GetLastError () returned 0x5 [0218.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF", dwFileAttributes=0x20) returned 0 [0218.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 7936 os_tid = 0x11c [0216.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf")) returned 0x20 [0218.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF", dwFileAttributes=0x20) returned 0 [0218.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.520] GetLastError () returned 0x5 [0218.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF", dwFileAttributes=0x20) returned 0 [0218.520] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 7937 os_tid = 0x1b50 [0216.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf")) returned 0x20 [0218.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF", dwFileAttributes=0x20) returned 0 [0218.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.546] GetLastError () returned 0x5 [0218.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF", dwFileAttributes=0x20) returned 0 [0218.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 7938 os_tid = 0x1688 [0216.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf")) returned 0x20 [0218.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF", dwFileAttributes=0x20) returned 0 [0218.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.548] GetLastError () returned 0x5 [0218.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF", dwFileAttributes=0x20) returned 0 [0218.548] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 7939 os_tid = 0x16c4 [0216.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf")) returned 0x20 [0218.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF", dwFileAttributes=0x20) returned 0 [0218.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.549] GetLastError () returned 0x5 [0218.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF", dwFileAttributes=0x20) returned 0 [0218.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 7940 os_tid = 0x18e0 [0216.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf")) returned 0x20 [0218.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF", dwFileAttributes=0x20) returned 0 [0218.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.551] GetLastError () returned 0x5 [0218.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF", dwFileAttributes=0x20) returned 0 [0218.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68778) returned 1 Thread: id = 7941 os_tid = 0x18e4 [0216.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css")) returned 0x20 [0216.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", dwFileAttributes=0x20) returned 0 [0216.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.213] GetLastError () returned 0x5 [0216.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS", dwFileAttributes=0x20) returned 0 [0216.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc09a0) returned 1 Thread: id = 7942 os_tid = 0x1350 [0216.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css")) returned 0x20 [0216.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", dwFileAttributes=0x20) returned 0 [0216.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.215] GetLastError () returned 0x5 [0216.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS", dwFileAttributes=0x20) returned 0 [0216.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 7943 os_tid = 0xfac [0216.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css")) returned 0x20 [0216.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", dwFileAttributes=0x20) returned 0 [0216.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.217] GetLastError () returned 0x5 [0216.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS", dwFileAttributes=0x20) returned 0 [0216.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d110) returned 1 Thread: id = 7944 os_tid = 0x2ac [0216.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css")) returned 0x20 [0217.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", dwFileAttributes=0x20) returned 0 [0217.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.526] GetLastError () returned 0x5 [0217.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS", dwFileAttributes=0x20) returned 0 [0217.527] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 7945 os_tid = 0x1694 [0216.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css")) returned 0x20 [0217.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", dwFileAttributes=0x20) returned 0 [0217.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.528] GetLastError () returned 0x5 [0217.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS", dwFileAttributes=0x20) returned 0 [0217.529] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 7946 os_tid = 0x15ec [0216.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css")) returned 0x20 [0217.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", dwFileAttributes=0x20) returned 0 [0217.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.530] GetLastError () returned 0x5 [0217.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS", dwFileAttributes=0x20) returned 0 [0217.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 7947 os_tid = 0x6fc [0216.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css")) returned 0x20 [0217.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", dwFileAttributes=0x20) returned 0 [0217.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.532] GetLastError () returned 0x5 [0217.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS", dwFileAttributes=0x20) returned 0 [0217.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 Thread: id = 7948 os_tid = 0xf74 [0216.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css")) returned 0x20 [0217.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", dwFileAttributes=0x20) returned 0 [0217.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.533] GetLastError () returned 0x5 [0217.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS", dwFileAttributes=0x20) returned 0 [0217.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 7949 os_tid = 0xf6c [0216.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css")) returned 0x20 [0217.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", dwFileAttributes=0x20) returned 0 [0217.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.536] GetLastError () returned 0x5 [0217.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS", dwFileAttributes=0x20) returned 0 [0217.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 7950 os_tid = 0x22e8 [0216.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css")) returned 0x20 [0217.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", dwFileAttributes=0x20) returned 0 [0217.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.537] GetLastError () returned 0x5 [0217.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS", dwFileAttributes=0x20) returned 0 [0217.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cce8) returned 1 Thread: id = 7951 os_tid = 0x24d0 [0216.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css")) returned 0x20 [0217.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", dwFileAttributes=0x20) returned 0 [0217.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.539] GetLastError () returned 0x5 [0217.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS", dwFileAttributes=0x20) returned 0 [0217.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 7952 os_tid = 0x2508 [0216.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css")) returned 0x20 [0217.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", dwFileAttributes=0x20) returned 0 [0217.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.540] GetLastError () returned 0x5 [0217.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS", dwFileAttributes=0x20) returned 0 [0217.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 7953 os_tid = 0x262c [0216.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css")) returned 0x20 [0217.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", dwFileAttributes=0x20) returned 0 [0217.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.542] GetLastError () returned 0x5 [0217.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS", dwFileAttributes=0x20) returned 0 [0217.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 7954 os_tid = 0x16a8 [0216.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css")) returned 0x20 [0217.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", dwFileAttributes=0x20) returned 0 [0217.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.664] GetLastError () returned 0x5 [0217.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS", dwFileAttributes=0x20) returned 0 [0217.674] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc07d8) returned 1 Thread: id = 7955 os_tid = 0x2630 [0216.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css")) returned 0x20 [0217.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", dwFileAttributes=0x20) returned 0 [0217.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.676] GetLastError () returned 0x5 [0217.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS", dwFileAttributes=0x20) returned 0 [0217.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0908) returned 1 Thread: id = 7956 os_tid = 0x5d8 [0216.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css")) returned 0x20 [0217.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", dwFileAttributes=0x20) returned 0 [0217.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.678] GetLastError () returned 0x5 [0217.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS", dwFileAttributes=0x20) returned 0 [0217.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0870) returned 1 Thread: id = 7957 os_tid = 0x15cc [0216.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css")) returned 0x20 [0217.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", dwFileAttributes=0x20) returned 0 [0217.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.680] GetLastError () returned 0x5 [0217.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS", dwFileAttributes=0x20) returned 0 [0217.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0318) returned 1 Thread: id = 7958 os_tid = 0x738 [0216.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css")) returned 0x20 [0217.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", dwFileAttributes=0x20) returned 0 [0217.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.682] GetLastError () returned 0x5 [0217.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS", dwFileAttributes=0x20) returned 0 [0217.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0280) returned 1 Thread: id = 7959 os_tid = 0x21d4 [0216.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css")) returned 0x20 [0217.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", dwFileAttributes=0x20) returned 0 [0217.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.684] GetLastError () returned 0x5 [0217.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS", dwFileAttributes=0x20) returned 0 [0217.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc11f0) returned 1 Thread: id = 7960 os_tid = 0x14b4 [0216.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css")) returned 0x20 [0217.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", dwFileAttributes=0x20) returned 0 [0217.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.686] GetLastError () returned 0x5 [0217.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS", dwFileAttributes=0x20) returned 0 [0217.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1288) returned 1 Thread: id = 7961 os_tid = 0x1510 [0216.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css")) returned 0x20 [0217.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", dwFileAttributes=0x20) returned 0 [0217.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0217.687] GetLastError () returned 0x5 [0217.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS", dwFileAttributes=0x20) returned 0 [0217.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1320) returned 1 Thread: id = 7962 os_tid = 0x1664 [0216.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css")) returned 0x20 [0216.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", dwFileAttributes=0x20) returned 0 [0216.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.788] GetLastError () returned 0x5 [0216.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS", dwFileAttributes=0x20) returned 0 [0216.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc13b8) returned 1 Thread: id = 7963 os_tid = 0x14b8 [0216.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css")) returned 0x20 [0216.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", dwFileAttributes=0x20) returned 0 [0216.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.790] GetLastError () returned 0x5 [0216.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS", dwFileAttributes=0x20) returned 0 [0216.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1450) returned 1 Thread: id = 7964 os_tid = 0x1280 [0216.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf")) returned 0x20 [0218.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF", dwFileAttributes=0x20) returned 0 [0218.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.552] GetLastError () returned 0x5 [0218.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF", dwFileAttributes=0x20) returned 0 [0218.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68118) returned 1 Thread: id = 7965 os_tid = 0x508 [0216.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf")) returned 0x20 [0218.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF", dwFileAttributes=0x20) returned 0 [0218.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.554] GetLastError () returned 0x5 [0218.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF", dwFileAttributes=0x20) returned 0 [0218.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69878) returned 1 Thread: id = 7966 os_tid = 0x2704 [0216.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf")) returned 0x20 [0218.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF", dwFileAttributes=0x20) returned 0 [0218.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.556] GetLastError () returned 0x5 [0218.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF", dwFileAttributes=0x20) returned 0 [0218.556] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a682b0) returned 1 Thread: id = 7967 os_tid = 0xf84 [0216.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf")) returned 0x20 [0218.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF", dwFileAttributes=0x20) returned 0 [0218.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.557] GetLastError () returned 0x5 [0218.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF", dwFileAttributes=0x20) returned 0 [0218.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68228) returned 1 Thread: id = 7968 os_tid = 0x1be0 [0216.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf")) returned 0x20 [0218.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF", dwFileAttributes=0x20) returned 0 [0218.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.559] GetLastError () returned 0x5 [0218.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF", dwFileAttributes=0x20) returned 0 [0218.560] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a683c0) returned 1 Thread: id = 7969 os_tid = 0x1be4 [0216.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf")) returned 0x20 [0218.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF", dwFileAttributes=0x20) returned 0 [0218.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.561] GetLastError () returned 0x5 [0218.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF", dwFileAttributes=0x20) returned 0 [0218.561] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681a0) returned 1 Thread: id = 7970 os_tid = 0x1be8 [0216.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf")) returned 0x20 [0218.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF", dwFileAttributes=0x20) returned 0 [0218.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.563] GetLastError () returned 0x5 [0218.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF", dwFileAttributes=0x20) returned 0 [0218.563] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a696e0) returned 1 Thread: id = 7971 os_tid = 0x1bec [0216.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf")) returned 0x20 [0218.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF", dwFileAttributes=0x20) returned 0 [0218.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.564] GetLastError () returned 0x5 [0218.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF", dwFileAttributes=0x20) returned 0 [0218.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ed8) returned 1 Thread: id = 7972 os_tid = 0x1c1c [0216.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf")) returned 0x20 [0218.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF", dwFileAttributes=0x20) returned 0 [0218.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.566] GetLastError () returned 0x5 [0218.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF", dwFileAttributes=0x20) returned 0 [0218.566] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68d50) returned 1 Thread: id = 7973 os_tid = 0x1c20 [0216.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf")) returned 0x20 [0218.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF", dwFileAttributes=0x20) returned 0 [0218.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.567] GetLastError () returned 0x5 [0218.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF", dwFileAttributes=0x20) returned 0 [0218.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69658) returned 1 Thread: id = 7974 os_tid = 0x1c24 [0216.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf")) returned 0x20 [0218.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF", dwFileAttributes=0x20) returned 0 [0218.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.569] GetLastError () returned 0x5 [0218.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF", dwFileAttributes=0x20) returned 0 [0218.569] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68800) returned 1 Thread: id = 7975 os_tid = 0x1dc8 [0216.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf")) returned 0x20 [0218.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF", dwFileAttributes=0x20) returned 0 [0218.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.571] GetLastError () returned 0x5 [0218.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF", dwFileAttributes=0x20) returned 0 [0218.571] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a695d0) returned 1 Thread: id = 7976 os_tid = 0x1c28 [0216.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf")) returned 0x20 [0218.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF", dwFileAttributes=0x20) returned 0 [0218.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.574] GetLastError () returned 0x5 [0218.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF", dwFileAttributes=0x20) returned 0 [0218.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 Thread: id = 7978 os_tid = 0x1c38 [0216.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst")) returned 0x20 [0218.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST", dwFileAttributes=0x20) returned 0 [0218.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.730] GetLastError () returned 0x5 [0218.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST", dwFileAttributes=0x20) returned 0 [0218.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6840) returned 1 Thread: id = 7979 os_tid = 0x1c3c [0216.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst")) returned 0x20 [0218.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST", dwFileAttributes=0x20) returned 0 [0218.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.728] GetLastError () returned 0x5 [0218.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST", dwFileAttributes=0x20) returned 0 [0218.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6980) returned 1 Thread: id = 7980 os_tid = 0x1dcc [0216.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss")) returned 0x20 [0218.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0218.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.725] GetLastError () returned 0x5 [0218.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0218.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6480) returned 1 Thread: id = 7981 os_tid = 0x1c40 [0216.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss")) returned 0x20 [0218.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0218.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.723] GetLastError () returned 0x5 [0218.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0218.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7920) returned 1 Thread: id = 7982 os_tid = 0x1c44 [0216.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss")) returned 0x20 [0218.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS", dwFileAttributes=0x20) returned 0 [0218.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.612] GetLastError () returned 0x5 [0218.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS", dwFileAttributes=0x20) returned 0 [0218.613] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7880) returned 1 Thread: id = 7983 os_tid = 0x1c50 [0216.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss")) returned 0x20 [0218.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS", dwFileAttributes=0x20) returned 0 [0218.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.732] GetLastError () returned 0x5 [0218.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS", dwFileAttributes=0x20) returned 0 [0218.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb77e0) returned 1 Thread: id = 7984 os_tid = 0x1c54 [0216.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss")) returned 0x20 [0218.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS", dwFileAttributes=0x20) returned 0 [0218.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.042] GetLastError () returned 0x5 [0218.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS", dwFileAttributes=0x20) returned 0 [0218.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7740) returned 1 Thread: id = 7985 os_tid = 0x1c5c [0216.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc")) returned 0x20 [0219.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC", dwFileAttributes=0x20) returned 0 [0219.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.504] GetLastError () returned 0x5 [0219.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC", dwFileAttributes=0x20) returned 0 [0219.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19298) returned 1 Thread: id = 7986 os_tid = 0x16f4 [0216.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc")) returned 0x20 [0219.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC", dwFileAttributes=0x20) returned 0 [0219.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.503] GetLastError () returned 0x5 [0219.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC", dwFileAttributes=0x20) returned 0 [0219.503] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 7987 os_tid = 0x2794 [0216.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv")) returned 0x20 [0219.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV", dwFileAttributes=0x20) returned 0 [0219.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.501] GetLastError () returned 0x5 [0219.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV", dwFileAttributes=0x20) returned 0 [0219.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 7988 os_tid = 0x564 [0216.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml")) returned 0x20 [0219.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML", dwFileAttributes=0x20) returned 0 [0219.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.499] GetLastError () returned 0x5 [0219.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML", dwFileAttributes=0x20) returned 0 [0219.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 7989 os_tid = 0x5f8 [0216.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc")) returned 0x20 [0219.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC", dwFileAttributes=0x20) returned 0 [0219.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.498] GetLastError () returned 0x5 [0219.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC", dwFileAttributes=0x20) returned 0 [0219.498] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 7990 os_tid = 0x1ad8 [0216.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc")) returned 0x20 [0219.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC", dwFileAttributes=0x20) returned 0 [0219.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.496] GetLastError () returned 0x5 [0219.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC", dwFileAttributes=0x20) returned 0 [0219.496] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c6d0) returned 1 Thread: id = 7991 os_tid = 0x2314 [0216.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif")) returned 0x20 [0216.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", dwFileAttributes=0x20) returned 0 [0216.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.795] GetLastError () returned 0x5 [0216.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF", dwFileAttributes=0x20) returned 0 [0216.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc14e8) returned 1 Thread: id = 7992 os_tid = 0x23fc [0216.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf")) returned 0x20 [0218.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF", dwFileAttributes=0x20) returned 0 [0218.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.572] GetLastError () returned 0x5 [0218.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF", dwFileAttributes=0x20) returned 0 [0218.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 7993 os_tid = 0x27a0 [0216.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf")) returned 0x20 [0218.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF", dwFileAttributes=0x20) returned 0 [0218.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.579] GetLastError () returned 0x5 [0218.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF", dwFileAttributes=0x20) returned 0 [0218.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 7994 os_tid = 0x27ac [0216.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf")) returned 0x20 [0218.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF", dwFileAttributes=0x20) returned 0 [0218.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.525] GetLastError () returned 0x5 [0218.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF", dwFileAttributes=0x20) returned 0 [0218.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d060) returned 1 Thread: id = 7995 os_tid = 0x72c [0216.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf")) returned 0x20 [0218.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF", dwFileAttributes=0x20) returned 0 [0218.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.577] GetLastError () returned 0x5 [0218.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF", dwFileAttributes=0x20) returned 0 [0218.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 Thread: id = 7996 os_tid = 0xbb0 [0216.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf")) returned 0x20 [0218.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF", dwFileAttributes=0x20) returned 0 [0218.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.008] GetLastError () returned 0x5 [0218.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF", dwFileAttributes=0x20) returned 0 [0218.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 7997 os_tid = 0x56c [0216.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf")) returned 0x20 [0218.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF", dwFileAttributes=0x20) returned 0 [0218.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.575] GetLastError () returned 0x5 [0218.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF", dwFileAttributes=0x20) returned 0 [0218.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 7998 os_tid = 0x1940 [0216.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf")) returned 0x20 [0218.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF", dwFileAttributes=0x20) returned 0 [0218.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.606] GetLastError () returned 0x5 [0218.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF", dwFileAttributes=0x20) returned 0 [0218.606] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 7999 os_tid = 0x1944 [0216.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf")) returned 0x20 [0218.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF", dwFileAttributes=0x20) returned 0 [0218.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.604] GetLastError () returned 0x5 [0218.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF", dwFileAttributes=0x20) returned 0 [0218.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 Thread: id = 8000 os_tid = 0x14e8 [0216.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf")) returned 0x20 [0218.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF", dwFileAttributes=0x20) returned 0 [0218.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.603] GetLastError () returned 0x5 [0218.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF", dwFileAttributes=0x20) returned 0 [0218.603] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c758) returned 1 Thread: id = 8001 os_tid = 0x1814 [0216.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf")) returned 0x20 [0218.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF", dwFileAttributes=0x20) returned 0 [0218.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.601] GetLastError () returned 0x5 [0218.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF", dwFileAttributes=0x20) returned 0 [0218.601] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 8002 os_tid = 0x1818 [0216.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf")) returned 0x20 [0218.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF", dwFileAttributes=0x20) returned 0 [0218.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.599] GetLastError () returned 0x5 [0218.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF", dwFileAttributes=0x20) returned 0 [0218.599] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 Thread: id = 8003 os_tid = 0x181c [0216.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf")) returned 0x20 [0218.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF", dwFileAttributes=0x20) returned 0 [0218.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.598] GetLastError () returned 0x5 [0218.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF", dwFileAttributes=0x20) returned 0 [0218.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 8004 os_tid = 0x1820 [0216.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf")) returned 0x20 [0218.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF", dwFileAttributes=0x20) returned 0 [0218.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.596] GetLastError () returned 0x5 [0218.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF", dwFileAttributes=0x20) returned 0 [0218.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 8005 os_tid = 0x248c [0216.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf")) returned 0x20 [0218.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF", dwFileAttributes=0x20) returned 0 [0218.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.594] GetLastError () returned 0x5 [0218.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF", dwFileAttributes=0x20) returned 0 [0218.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 8006 os_tid = 0x2490 [0216.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf")) returned 0x20 [0218.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF", dwFileAttributes=0x20) returned 0 [0218.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.593] GetLastError () returned 0x5 [0218.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF", dwFileAttributes=0x20) returned 0 [0218.593] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 8007 os_tid = 0x2494 [0216.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf")) returned 0x20 [0218.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF", dwFileAttributes=0x20) returned 0 [0218.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.590] GetLastError () returned 0x5 [0218.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF", dwFileAttributes=0x20) returned 0 [0218.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 8008 os_tid = 0x2498 [0216.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf")) returned 0x20 [0218.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF", dwFileAttributes=0x20) returned 0 [0218.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.589] GetLastError () returned 0x5 [0218.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF", dwFileAttributes=0x20) returned 0 [0218.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 8009 os_tid = 0xb3c [0216.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf")) returned 0x20 [0218.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF", dwFileAttributes=0x20) returned 0 [0218.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.587] GetLastError () returned 0x5 [0218.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF", dwFileAttributes=0x20) returned 0 [0218.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 8010 os_tid = 0xbfc [0216.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf")) returned 0x20 [0218.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF", dwFileAttributes=0x20) returned 0 [0218.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.586] GetLastError () returned 0x5 [0218.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF", dwFileAttributes=0x20) returned 0 [0218.586] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 8011 os_tid = 0xbf8 [0216.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf")) returned 0x20 [0218.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF", dwFileAttributes=0x20) returned 0 [0218.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.584] GetLastError () returned 0x5 [0218.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF", dwFileAttributes=0x20) returned 0 [0218.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 8012 os_tid = 0x1008 [0216.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf")) returned 0x20 [0218.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF", dwFileAttributes=0x20) returned 0 [0218.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.582] GetLastError () returned 0x5 [0218.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF", dwFileAttributes=0x20) returned 0 [0218.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 8013 os_tid = 0x100c [0216.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif")) returned 0x20 [0216.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", dwFileAttributes=0x20) returned 0 [0216.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0216.803] GetLastError () returned 0x5 [0216.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF", dwFileAttributes=0x20) returned 0 [0216.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d110) returned 1 Thread: id = 8014 os_tid = 0x27d0 [0216.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif")) returned 0x20 [0218.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", dwFileAttributes=0x20) returned 0 [0218.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.077] GetLastError () returned 0x5 [0218.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF", dwFileAttributes=0x20) returned 0 [0218.077] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 8015 os_tid = 0x27d4 [0216.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif")) returned 0x20 [0218.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", dwFileAttributes=0x20) returned 0 [0218.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.744] GetLastError () returned 0x5 [0218.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF", dwFileAttributes=0x20) returned 0 [0218.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44690) returned 1 Thread: id = 8016 os_tid = 0x27dc [0216.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif")) returned 0x20 [0218.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", dwFileAttributes=0x20) returned 0 [0218.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.746] GetLastError () returned 0x5 [0218.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF", dwFileAttributes=0x20) returned 0 [0218.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ad0) returned 1 Thread: id = 8017 os_tid = 0x1010 [0216.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif")) returned 0x20 [0218.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", dwFileAttributes=0x20) returned 0 [0218.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.748] GetLastError () returned 0x5 [0218.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF", dwFileAttributes=0x20) returned 0 [0218.748] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d442a0) returned 1 Thread: id = 8018 os_tid = 0x1014 [0216.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif")) returned 0x20 [0218.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", dwFileAttributes=0x20) returned 0 [0218.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.750] GetLastError () returned 0x5 [0218.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF", dwFileAttributes=0x20) returned 0 [0218.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45650) returned 1 Thread: id = 8019 os_tid = 0x1018 [0216.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif")) returned 0x20 [0218.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", dwFileAttributes=0x20) returned 0 [0218.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.752] GetLastError () returned 0x5 [0218.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF", dwFileAttributes=0x20) returned 0 [0218.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45770) returned 1 Thread: id = 8020 os_tid = 0x1024 [0216.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif")) returned 0x20 [0218.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", dwFileAttributes=0x20) returned 0 [0218.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.754] GetLastError () returned 0x5 [0218.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF", dwFileAttributes=0x20) returned 0 [0218.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45410) returned 1 Thread: id = 8021 os_tid = 0x27f4 [0216.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif")) returned 0x20 [0218.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", dwFileAttributes=0x20) returned 0 [0218.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.757] GetLastError () returned 0x5 [0218.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF", dwFileAttributes=0x20) returned 0 [0218.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d452f0) returned 1 Thread: id = 8022 os_tid = 0x27f8 [0216.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif")) returned 0x20 [0218.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", dwFileAttributes=0x20) returned 0 [0218.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.759] GetLastError () returned 0x5 [0218.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF", dwFileAttributes=0x20) returned 0 [0218.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45a40) returned 1 Thread: id = 8023 os_tid = 0x102c [0216.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif")) returned 0x20 [0218.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", dwFileAttributes=0x20) returned 0 [0218.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.761] GetLastError () returned 0x5 [0218.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF", dwFileAttributes=0x20) returned 0 [0218.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45920) returned 1 Thread: id = 8024 os_tid = 0x1030 [0216.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif")) returned 0x20 [0218.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", dwFileAttributes=0x20) returned 0 [0218.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.763] GetLastError () returned 0x5 [0218.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF", dwFileAttributes=0x20) returned 0 [0218.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45530) returned 1 Thread: id = 8025 os_tid = 0x1038 [0216.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini")) returned 0x20 [0218.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", dwFileAttributes=0x20) returned 0 [0218.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.739] GetLastError () returned 0x5 [0218.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI", dwFileAttributes=0x20) returned 0 [0218.740] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc09a0) returned 1 Thread: id = 8026 os_tid = 0x710 [0216.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif")) returned 0x20 [0218.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", dwFileAttributes=0x20) returned 0 [0218.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.793] GetLastError () returned 0x5 [0218.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF", dwFileAttributes=0x20) returned 0 [0218.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1158) returned 1 Thread: id = 8027 os_tid = 0x1048 [0216.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif")) returned 0x20 [0218.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", dwFileAttributes=0x20) returned 0 [0218.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.790] GetLastError () returned 0x5 [0218.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF", dwFileAttributes=0x20) returned 0 [0218.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1580) returned 1 Thread: id = 8028 os_tid = 0x1060 [0216.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif")) returned 0x20 [0218.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", dwFileAttributes=0x20) returned 0 [0218.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.742] GetLastError () returned 0x5 [0218.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF", dwFileAttributes=0x20) returned 0 [0218.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1618) returned 1 Thread: id = 8029 os_tid = 0x1064 [0216.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif")) returned 0x20 [0218.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", dwFileAttributes=0x20) returned 0 [0218.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.061] GetLastError () returned 0x5 [0218.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF", dwFileAttributes=0x20) returned 0 [0218.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc16b0) returned 1 Thread: id = 8030 os_tid = 0x1068 [0216.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif")) returned 0x20 [0218.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", dwFileAttributes=0x20) returned 0 [0218.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.804] GetLastError () returned 0x5 [0218.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF", dwFileAttributes=0x20) returned 0 [0218.804] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1748) returned 1 Thread: id = 8031 os_tid = 0x106c [0216.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif")) returned 0x20 [0218.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", dwFileAttributes=0x20) returned 0 [0218.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.802] GetLastError () returned 0x5 [0218.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF", dwFileAttributes=0x20) returned 0 [0218.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc17e0) returned 1 Thread: id = 8032 os_tid = 0x1070 [0216.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif")) returned 0x20 [0218.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", dwFileAttributes=0x20) returned 0 [0218.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.801] GetLastError () returned 0x5 [0218.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF", dwFileAttributes=0x20) returned 0 [0218.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1878) returned 1 Thread: id = 8033 os_tid = 0x1074 [0216.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif")) returned 0x20 [0218.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", dwFileAttributes=0x20) returned 0 [0218.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.799] GetLastError () returned 0x5 [0218.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF", dwFileAttributes=0x20) returned 0 [0218.799] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1910) returned 1 Thread: id = 8034 os_tid = 0x1078 [0216.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif")) returned 0x20 [0218.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", dwFileAttributes=0x20) returned 0 [0218.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.797] GetLastError () returned 0x5 [0218.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF", dwFileAttributes=0x20) returned 0 [0218.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc19a8) returned 1 Thread: id = 8035 os_tid = 0x1080 [0216.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif")) returned 0x20 [0218.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", dwFileAttributes=0x20) returned 0 [0218.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.795] GetLastError () returned 0x5 [0218.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF", dwFileAttributes=0x20) returned 0 [0218.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1a40) returned 1 Thread: id = 8036 os_tid = 0x1874 [0217.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif")) returned 0x20 [0218.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", dwFileAttributes=0x20) returned 0 [0218.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.775] GetLastError () returned 0x5 [0218.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF", dwFileAttributes=0x20) returned 0 [0218.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1ad8) returned 1 Thread: id = 8037 os_tid = 0x19ec [0217.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif")) returned 0x20 [0218.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", dwFileAttributes=0x20) returned 0 [0218.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.777] GetLastError () returned 0x5 [0218.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF", dwFileAttributes=0x20) returned 0 [0218.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d110) returned 1 Thread: id = 8038 os_tid = 0x1824 [0217.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif")) returned 0x20 [0218.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", dwFileAttributes=0x20) returned 0 [0218.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.779] GetLastError () returned 0x5 [0218.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF", dwFileAttributes=0x20) returned 0 [0218.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d668) returned 1 Thread: id = 8039 os_tid = 0x1110 [0217.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif")) returned 0x20 [0218.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", dwFileAttributes=0x20) returned 0 [0218.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.781] GetLastError () returned 0x5 [0218.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF", dwFileAttributes=0x20) returned 0 [0218.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 8040 os_tid = 0x1114 [0217.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif")) returned 0x20 [0218.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", dwFileAttributes=0x20) returned 0 [0218.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.784] GetLastError () returned 0x5 [0218.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF", dwFileAttributes=0x20) returned 0 [0218.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 8041 os_tid = 0x2658 [0217.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif")) returned 0x20 [0218.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", dwFileAttributes=0x20) returned 0 [0218.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.786] GetLastError () returned 0x5 [0218.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF", dwFileAttributes=0x20) returned 0 [0218.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 8042 os_tid = 0xb0c [0217.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif")) returned 0x20 [0218.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", dwFileAttributes=0x20) returned 0 [0218.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.788] GetLastError () returned 0x5 [0218.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF", dwFileAttributes=0x20) returned 0 [0218.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc14e8) returned 1 Thread: id = 8043 os_tid = 0x1118 [0217.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif")) returned 0x20 [0218.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", dwFileAttributes=0x20) returned 0 [0218.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.765] GetLastError () returned 0x5 [0218.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF", dwFileAttributes=0x20) returned 0 [0218.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1450) returned 1 Thread: id = 8044 os_tid = 0x1120 [0217.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif")) returned 0x20 [0218.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", dwFileAttributes=0x20) returned 0 [0218.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.769] GetLastError () returned 0x5 [0218.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF", dwFileAttributes=0x20) returned 0 [0218.769] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc13b8) returned 1 Thread: id = 8045 os_tid = 0x8a8 [0217.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif")) returned 0x20 [0218.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", dwFileAttributes=0x20) returned 0 [0218.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.771] GetLastError () returned 0x5 [0218.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF", dwFileAttributes=0x20) returned 0 [0218.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc10c0) returned 1 Thread: id = 8046 os_tid = 0x8b8 [0217.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif")) returned 0x20 [0218.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", dwFileAttributes=0x20) returned 0 [0218.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.773] GetLastError () returned 0x5 [0218.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF", dwFileAttributes=0x20) returned 0 [0218.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1028) returned 1 Thread: id = 8047 os_tid = 0x8d8 [0218.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv")) returned 0x20 [0219.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV", dwFileAttributes=0x20) returned 0 [0219.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.564] GetLastError () returned 0x5 [0219.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV", dwFileAttributes=0x20) returned 0 [0219.564] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 8048 os_tid = 0x1588 [0218.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc")) returned 0x20 [0219.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC", dwFileAttributes=0x20) returned 0 [0219.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.557] GetLastError () returned 0x5 [0219.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC", dwFileAttributes=0x20) returned 0 [0219.557] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d638) returned 1 Thread: id = 8049 os_tid = 0xa68 [0218.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv")) returned 0x20 [0219.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0219.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.554] GetLastError () returned 0x5 [0219.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0219.555] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44a80) returned 1 Thread: id = 8050 os_tid = 0x1734 [0218.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc")) returned 0x20 [0219.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC", dwFileAttributes=0x20) returned 0 [0219.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.553] GetLastError () returned 0x5 [0219.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC", dwFileAttributes=0x20) returned 0 [0219.553] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d44570) returned 1 Thread: id = 8051 os_tid = 0x1774 [0218.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv")) returned 0x20 [0219.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV", dwFileAttributes=0x20) returned 0 [0219.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.550] GetLastError () returned 0x5 [0219.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV", dwFileAttributes=0x20) returned 0 [0219.551] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a698) returned 1 Thread: id = 8052 os_tid = 0x1a68 [0218.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml")) returned 0x20 [0219.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML", dwFileAttributes=0x20) returned 0 [0219.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.549] GetLastError () returned 0x5 [0219.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML", dwFileAttributes=0x20) returned 0 [0219.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a218) returned 1 Thread: id = 8053 os_tid = 0x1a70 [0218.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc")) returned 0x20 [0219.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC", dwFileAttributes=0x20) returned 0 [0219.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.547] GetLastError () returned 0x5 [0219.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC", dwFileAttributes=0x20) returned 0 [0219.547] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 Thread: id = 8054 os_tid = 0x1aa4 [0218.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc")) returned 0x20 [0219.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC", dwFileAttributes=0x20) returned 0 [0219.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.545] GetLastError () returned 0x5 [0219.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC", dwFileAttributes=0x20) returned 0 [0219.545] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 8055 os_tid = 0x1bf0 [0218.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc")) returned 0x20 [0219.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC", dwFileAttributes=0x20) returned 0 [0219.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.542] GetLastError () returned 0x5 [0219.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC", dwFileAttributes=0x20) returned 0 [0219.542] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e18e18) returned 1 Thread: id = 8056 os_tid = 0x1bf4 [0218.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv")) returned 0x20 [0219.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV", dwFileAttributes=0x20) returned 0 [0219.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.540] GetLastError () returned 0x5 [0219.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV", dwFileAttributes=0x20) returned 0 [0219.540] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 8057 os_tid = 0x1d5c [0218.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc")) returned 0x20 [0219.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC", dwFileAttributes=0x20) returned 0 [0219.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.539] GetLastError () returned 0x5 [0219.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC", dwFileAttributes=0x20) returned 0 [0219.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 8058 os_tid = 0x1de8 [0218.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv")) returned 0x20 [0219.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0219.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.581] GetLastError () returned 0x5 [0219.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV", dwFileAttributes=0x20) returned 0 [0219.581] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d455c0) returned 1 Thread: id = 8059 os_tid = 0x2254 [0218.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc")) returned 0x20 [0219.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC", dwFileAttributes=0x20) returned 0 [0219.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.537] GetLastError () returned 0x5 [0219.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC", dwFileAttributes=0x20) returned 0 [0219.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45ec0) returned 1 Thread: id = 8060 os_tid = 0x1fb4 [0218.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc")) returned 0x20 [0219.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC", dwFileAttributes=0x20) returned 0 [0219.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.579] GetLastError () returned 0x5 [0219.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC", dwFileAttributes=0x20) returned 0 [0219.579] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 8061 os_tid = 0x1fcc [0218.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc")) returned 0x20 [0219.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC", dwFileAttributes=0x20) returned 0 [0219.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.536] GetLastError () returned 0x5 [0219.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC", dwFileAttributes=0x20) returned 0 [0219.536] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 8062 os_tid = 0x1f54 [0218.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc")) returned 0x20 [0219.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC", dwFileAttributes=0x20) returned 0 [0219.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.577] GetLastError () returned 0x5 [0219.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC", dwFileAttributes=0x20) returned 0 [0219.577] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19418) returned 1 Thread: id = 8063 os_tid = 0x1f64 [0218.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc")) returned 0x20 [0219.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC", dwFileAttributes=0x20) returned 0 [0219.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.575] GetLastError () returned 0x5 [0219.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC", dwFileAttributes=0x20) returned 0 [0219.575] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 8064 os_tid = 0x1264 [0218.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc")) returned 0x20 [0219.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC", dwFileAttributes=0x20) returned 0 [0219.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.573] GetLastError () returned 0x5 [0219.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC", dwFileAttributes=0x20) returned 0 [0219.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a318) returned 1 Thread: id = 8065 os_tid = 0x1268 [0218.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc")) returned 0x20 [0219.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC", dwFileAttributes=0x20) returned 0 [0219.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.572] GetLastError () returned 0x5 [0219.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC", dwFileAttributes=0x20) returned 0 [0219.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 8066 os_tid = 0x2310 [0218.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc")) returned 0x20 [0219.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC", dwFileAttributes=0x20) returned 0 [0219.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.534] GetLastError () returned 0x5 [0219.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC", dwFileAttributes=0x20) returned 0 [0219.534] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a684d0) returned 1 Thread: id = 8067 os_tid = 0x27e0 [0218.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc")) returned 0x20 [0219.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC", dwFileAttributes=0x20) returned 0 [0219.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.570] GetLastError () returned 0x5 [0219.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC", dwFileAttributes=0x20) returned 0 [0219.570] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a697f0) returned 1 Thread: id = 8068 os_tid = 0xb48 [0218.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc")) returned 0x20 [0219.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC", dwFileAttributes=0x20) returned 0 [0219.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.568] GetLastError () returned 0x5 [0219.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC", dwFileAttributes=0x20) returned 0 [0219.568] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69988) returned 1 Thread: id = 8069 os_tid = 0xef4 [0218.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc")) returned 0x20 [0219.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC", dwFileAttributes=0x20) returned 0 [0219.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.596] GetLastError () returned 0x5 [0219.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC", dwFileAttributes=0x20) returned 0 [0219.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a694c0) returned 1 Thread: id = 8071 os_tid = 0x12fc [0218.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif")) returned 0x20 [0218.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", dwFileAttributes=0x20) returned 0 [0218.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.836] GetLastError () returned 0x5 [0218.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF", dwFileAttributes=0x20) returned 0 [0218.836] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1320) returned 1 Thread: id = 8072 os_tid = 0x1304 [0218.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif")) returned 0x20 [0219.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", dwFileAttributes=0x20) returned 0 [0219.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.205] GetLastError () returned 0x5 [0219.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF", dwFileAttributes=0x20) returned 0 [0219.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 8073 os_tid = 0x130c [0218.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif")) returned 0x20 [0219.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", dwFileAttributes=0x20) returned 0 [0219.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.203] GetLastError () returned 0x5 [0219.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF", dwFileAttributes=0x20) returned 0 [0219.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 8074 os_tid = 0x1310 [0218.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif")) returned 0x20 [0219.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", dwFileAttributes=0x20) returned 0 [0219.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.345] GetLastError () returned 0x5 [0219.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF", dwFileAttributes=0x20) returned 0 [0219.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 8075 os_tid = 0x1324 [0218.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif")) returned 0x20 [0219.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", dwFileAttributes=0x20) returned 0 [0219.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.343] GetLastError () returned 0x5 [0219.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF", dwFileAttributes=0x20) returned 0 [0219.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 8076 os_tid = 0x1328 [0218.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif")) returned 0x20 [0219.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", dwFileAttributes=0x20) returned 0 [0219.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.341] GetLastError () returned 0x5 [0219.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF", dwFileAttributes=0x20) returned 0 [0219.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cce8) returned 1 Thread: id = 8077 os_tid = 0x1374 [0218.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif")) returned 0x20 [0219.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", dwFileAttributes=0x20) returned 0 [0219.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.340] GetLastError () returned 0x5 [0219.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF", dwFileAttributes=0x20) returned 0 [0219.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 8078 os_tid = 0x1378 [0218.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif")) returned 0x20 [0219.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", dwFileAttributes=0x20) returned 0 [0219.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.338] GetLastError () returned 0x5 [0219.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF", dwFileAttributes=0x20) returned 0 [0219.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 8079 os_tid = 0x13f8 [0218.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif")) returned 0x20 [0219.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", dwFileAttributes=0x20) returned 0 [0219.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.337] GetLastError () returned 0x5 [0219.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF", dwFileAttributes=0x20) returned 0 [0219.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 Thread: id = 8080 os_tid = 0x145c [0218.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif")) returned 0x20 [0219.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", dwFileAttributes=0x20) returned 0 [0219.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.335] GetLastError () returned 0x5 [0219.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF", dwFileAttributes=0x20) returned 0 [0219.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 8081 os_tid = 0x1468 [0218.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif")) returned 0x20 [0219.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", dwFileAttributes=0x20) returned 0 [0219.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.333] GetLastError () returned 0x5 [0219.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF", dwFileAttributes=0x20) returned 0 [0219.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 8082 os_tid = 0x1514 [0218.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif")) returned 0x20 [0219.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", dwFileAttributes=0x20) returned 0 [0219.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.332] GetLastError () returned 0x5 [0219.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF", dwFileAttributes=0x20) returned 0 [0219.332] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 8083 os_tid = 0x1518 [0218.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif")) returned 0x20 [0219.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", dwFileAttributes=0x20) returned 0 [0219.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.331] GetLastError () returned 0x5 [0219.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF", dwFileAttributes=0x20) returned 0 [0219.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc16b0) returned 1 Thread: id = 8084 os_tid = 0x1528 [0218.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif")) returned 0x20 [0219.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", dwFileAttributes=0x20) returned 0 [0219.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.329] GetLastError () returned 0x5 [0219.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF", dwFileAttributes=0x20) returned 0 [0219.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1288) returned 1 Thread: id = 8085 os_tid = 0x152c [0218.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif")) returned 0x20 [0219.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", dwFileAttributes=0x20) returned 0 [0219.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.327] GetLastError () returned 0x5 [0219.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF", dwFileAttributes=0x20) returned 0 [0219.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc11f0) returned 1 Thread: id = 8086 os_tid = 0x153c [0218.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif")) returned 0x20 [0219.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", dwFileAttributes=0x20) returned 0 [0219.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.325] GetLastError () returned 0x5 [0219.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF", dwFileAttributes=0x20) returned 0 [0219.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0280) returned 1 Thread: id = 8087 os_tid = 0x1540 [0218.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif")) returned 0x20 [0219.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", dwFileAttributes=0x20) returned 0 [0219.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.323] GetLastError () returned 0x5 [0219.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF", dwFileAttributes=0x20) returned 0 [0219.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0318) returned 1 Thread: id = 8088 os_tid = 0x1544 [0218.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif")) returned 0x20 [0219.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", dwFileAttributes=0x20) returned 0 [0219.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.322] GetLastError () returned 0x5 [0219.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF", dwFileAttributes=0x20) returned 0 [0219.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0870) returned 1 Thread: id = 8089 os_tid = 0x1564 [0218.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif")) returned 0x20 [0219.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", dwFileAttributes=0x20) returned 0 [0219.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.320] GetLastError () returned 0x5 [0219.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF", dwFileAttributes=0x20) returned 0 [0219.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0908) returned 1 Thread: id = 8090 os_tid = 0x1568 [0218.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif")) returned 0x20 [0219.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", dwFileAttributes=0x20) returned 0 [0219.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.318] GetLastError () returned 0x5 [0219.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF", dwFileAttributes=0x20) returned 0 [0219.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc07d8) returned 1 Thread: id = 8091 os_tid = 0x156c [0218.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif")) returned 0x20 [0219.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", dwFileAttributes=0x20) returned 0 [0219.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.317] GetLastError () returned 0x5 [0219.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF", dwFileAttributes=0x20) returned 0 [0219.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0f90) returned 1 Thread: id = 8092 os_tid = 0x1b68 [0218.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif")) returned 0x20 [0219.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", dwFileAttributes=0x20) returned 0 [0219.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.315] GetLastError () returned 0x5 [0219.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF", dwFileAttributes=0x20) returned 0 [0219.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0ef8) returned 1 Thread: id = 8093 os_tid = 0x220c [0218.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif")) returned 0x20 [0219.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", dwFileAttributes=0x20) returned 0 [0219.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.313] GetLastError () returned 0x5 [0219.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF", dwFileAttributes=0x20) returned 0 [0219.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0e60) returned 1 Thread: id = 8094 os_tid = 0x1654 [0218.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif")) returned 0x20 [0219.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", dwFileAttributes=0x20) returned 0 [0219.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.311] GetLastError () returned 0x5 [0219.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF", dwFileAttributes=0x20) returned 0 [0219.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0dc8) returned 1 Thread: id = 8095 os_tid = 0x1660 [0218.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif")) returned 0x20 [0219.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", dwFileAttributes=0x20) returned 0 [0219.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.309] GetLastError () returned 0x5 [0219.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF", dwFileAttributes=0x20) returned 0 [0219.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0d30) returned 1 Thread: id = 8096 os_tid = 0x1668 [0218.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif")) returned 0x20 [0219.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", dwFileAttributes=0x20) returned 0 [0219.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.308] GetLastError () returned 0x5 [0219.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF", dwFileAttributes=0x20) returned 0 [0219.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0c98) returned 1 Thread: id = 8097 os_tid = 0x166c [0218.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif")) returned 0x20 [0218.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", dwFileAttributes=0x20) returned 0 [0218.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.982] GetLastError () returned 0x5 [0218.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF", dwFileAttributes=0x20) returned 0 [0218.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0c00) returned 1 Thread: id = 8098 os_tid = 0x1670 [0218.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif")) returned 0x20 [0218.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", dwFileAttributes=0x20) returned 0 [0218.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.983] GetLastError () returned 0x5 [0218.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF", dwFileAttributes=0x20) returned 0 [0218.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0b68) returned 1 Thread: id = 8100 os_tid = 0xb54 [0218.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif")) returned 0x20 [0218.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", dwFileAttributes=0x20) returned 0 [0218.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0218.985] GetLastError () returned 0x5 [0218.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF", dwFileAttributes=0x20) returned 0 [0218.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0ad0) returned 1 Thread: id = 8101 os_tid = 0x2400 [0218.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif")) returned 0x20 [0219.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", dwFileAttributes=0x20) returned 0 [0219.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.274] GetLastError () returned 0x5 [0219.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF", dwFileAttributes=0x20) returned 0 [0219.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1320) returned 1 Thread: id = 8102 os_tid = 0xdac [0218.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif")) returned 0x20 [0219.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", dwFileAttributes=0x20) returned 0 [0219.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.277] GetLastError () returned 0x5 [0219.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF", dwFileAttributes=0x20) returned 0 [0219.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1748) returned 1 Thread: id = 8103 os_tid = 0xb1c [0218.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif")) returned 0x20 [0219.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", dwFileAttributes=0x20) returned 0 [0219.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.278] GetLastError () returned 0x5 [0219.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF", dwFileAttributes=0x20) returned 0 [0219.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc17e0) returned 1 Thread: id = 8104 os_tid = 0xb30 [0218.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif")) returned 0x20 [0219.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", dwFileAttributes=0x20) returned 0 [0219.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.280] GetLastError () returned 0x5 [0219.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF", dwFileAttributes=0x20) returned 0 [0219.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1878) returned 1 Thread: id = 8105 os_tid = 0x1370 [0218.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif")) returned 0x20 [0219.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", dwFileAttributes=0x20) returned 0 [0219.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.283] GetLastError () returned 0x5 [0219.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF", dwFileAttributes=0x20) returned 0 [0219.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1910) returned 1 Thread: id = 8106 os_tid = 0x1584 [0218.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif")) returned 0x20 [0219.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", dwFileAttributes=0x20) returned 0 [0219.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.285] GetLastError () returned 0x5 [0219.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF", dwFileAttributes=0x20) returned 0 [0219.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc19a8) returned 1 Thread: id = 8107 os_tid = 0x1718 [0218.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif")) returned 0x20 [0219.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", dwFileAttributes=0x20) returned 0 [0219.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.287] GetLastError () returned 0x5 [0219.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF", dwFileAttributes=0x20) returned 0 [0219.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1a40) returned 1 Thread: id = 8108 os_tid = 0x171c [0218.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif")) returned 0x20 [0219.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", dwFileAttributes=0x20) returned 0 [0219.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.288] GetLastError () returned 0x5 [0219.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF", dwFileAttributes=0x20) returned 0 [0219.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1158) returned 1 Thread: id = 8109 os_tid = 0x1618 [0218.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif")) returned 0x20 [0219.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", dwFileAttributes=0x20) returned 0 [0219.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.290] GetLastError () returned 0x5 [0219.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF", dwFileAttributes=0x20) returned 0 [0219.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1580) returned 1 Thread: id = 8110 os_tid = 0x167c [0218.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif")) returned 0x20 [0219.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", dwFileAttributes=0x20) returned 0 [0219.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.291] GetLastError () returned 0x5 [0219.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF", dwFileAttributes=0x20) returned 0 [0219.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc14e8) returned 1 Thread: id = 8111 os_tid = 0xdf8 [0218.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif")) returned 0x20 [0219.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", dwFileAttributes=0x20) returned 0 [0219.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.293] GetLastError () returned 0x5 [0219.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF", dwFileAttributes=0x20) returned 0 [0219.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1ad8) returned 1 Thread: id = 8112 os_tid = 0x2428 [0218.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif")) returned 0x20 [0219.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", dwFileAttributes=0x20) returned 0 [0219.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.294] GetLastError () returned 0x5 [0219.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF", dwFileAttributes=0x20) returned 0 [0219.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1028) returned 1 Thread: id = 8113 os_tid = 0x118c [0218.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif")) returned 0x20 [0219.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", dwFileAttributes=0x20) returned 0 [0219.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.295] GetLastError () returned 0x5 [0219.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF", dwFileAttributes=0x20) returned 0 [0219.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc10c0) returned 1 Thread: id = 8114 os_tid = 0x1228 [0218.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif")) returned 0x20 [0219.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", dwFileAttributes=0x20) returned 0 [0219.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.297] GetLastError () returned 0x5 [0219.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF", dwFileAttributes=0x20) returned 0 [0219.297] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc13b8) returned 1 Thread: id = 8115 os_tid = 0xe40 [0218.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif")) returned 0x20 [0219.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", dwFileAttributes=0x20) returned 0 [0219.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.299] GetLastError () returned 0x5 [0219.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF", dwFileAttributes=0x20) returned 0 [0219.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1450) returned 1 Thread: id = 8116 os_tid = 0x1a5c [0218.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif")) returned 0x20 [0219.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", dwFileAttributes=0x20) returned 0 [0219.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.300] GetLastError () returned 0x5 [0219.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF", dwFileAttributes=0x20) returned 0 [0219.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1618) returned 1 Thread: id = 8117 os_tid = 0x1f28 [0218.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif")) returned 0x20 [0219.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", dwFileAttributes=0x20) returned 0 [0219.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.301] GetLastError () returned 0x5 [0219.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF", dwFileAttributes=0x20) returned 0 [0219.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc09a0) returned 1 Thread: id = 8118 os_tid = 0x1578 [0219.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif")) returned 0x20 [0219.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", dwFileAttributes=0x20) returned 0 [0219.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.303] GetLastError () returned 0x5 [0219.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF", dwFileAttributes=0x20) returned 0 [0219.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0150) returned 1 Thread: id = 8119 os_tid = 0x12d0 [0219.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif")) returned 0x20 [0219.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", dwFileAttributes=0x20) returned 0 [0219.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.304] GetLastError () returned 0x5 [0219.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF", dwFileAttributes=0x20) returned 0 [0219.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc01e8) returned 1 Thread: id = 8120 os_tid = 0x12d4 [0219.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif")) returned 0x20 [0219.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", dwFileAttributes=0x20) returned 0 [0219.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.306] GetLastError () returned 0x5 [0219.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF", dwFileAttributes=0x20) returned 0 [0219.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0a38) returned 1 Thread: id = 8121 os_tid = 0x12d8 [0219.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv")) returned 0x20 [0219.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV", dwFileAttributes=0x20) returned 0 [0219.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.592] GetLastError () returned 0x5 [0219.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV", dwFileAttributes=0x20) returned 0 [0219.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 8122 os_tid = 0x12e4 [0219.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml")) returned 0x20 [0219.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML", dwFileAttributes=0x20) returned 0 [0219.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.590] GetLastError () returned 0x5 [0219.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML", dwFileAttributes=0x20) returned 0 [0219.590] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 8123 os_tid = 0x12f4 [0219.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv")) returned 0x20 [0219.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV", dwFileAttributes=0x20) returned 0 [0219.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.588] GetLastError () returned 0x5 [0219.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV", dwFileAttributes=0x20) returned 0 [0219.588] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 Thread: id = 8124 os_tid = 0x1798 [0219.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml")) returned 0x20 [0219.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML", dwFileAttributes=0x20) returned 0 [0219.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.586] GetLastError () returned 0x5 [0219.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML", dwFileAttributes=0x20) returned 0 [0219.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c758) returned 1 Thread: id = 8125 os_tid = 0x1314 [0219.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv")) returned 0x20 [0219.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV", dwFileAttributes=0x20) returned 0 [0219.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.602] GetLastError () returned 0x5 [0219.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV", dwFileAttributes=0x20) returned 0 [0219.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 8126 os_tid = 0x1320 [0219.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml")) returned 0x20 [0219.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML", dwFileAttributes=0x20) returned 0 [0219.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.585] GetLastError () returned 0x5 [0219.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML", dwFileAttributes=0x20) returned 0 [0219.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 Thread: id = 8127 os_tid = 0x1368 [0219.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc")) returned 0x20 [0219.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC", dwFileAttributes=0x20) returned 0 [0219.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.600] GetLastError () returned 0x5 [0219.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC", dwFileAttributes=0x20) returned 0 [0219.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 8128 os_tid = 0x136c [0219.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc")) returned 0x20 [0219.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC", dwFileAttributes=0x20) returned 0 [0219.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.583] GetLastError () returned 0x5 [0219.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC", dwFileAttributes=0x20) returned 0 [0219.583] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 8129 os_tid = 0x17e0 [0219.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst")) returned 0x20 [0220.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST", dwFileAttributes=0x20) returned 0 [0220.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.233] GetLastError () returned 0x5 [0220.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST", dwFileAttributes=0x20) returned 0 [0220.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7740) returned 1 Thread: id = 8130 os_tid = 0x1388 [0219.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss")) returned 0x20 [0220.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS", dwFileAttributes=0x20) returned 0 [0220.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.130] GetLastError () returned 0x5 [0220.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS", dwFileAttributes=0x20) returned 0 [0220.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb77e0) returned 1 Thread: id = 8131 os_tid = 0x1788 [0219.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst")) returned 0x20 [0220.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST", dwFileAttributes=0x20) returned 0 [0220.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.111] GetLastError () returned 0x5 [0220.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST", dwFileAttributes=0x20) returned 0 [0220.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6840) returned 1 Thread: id = 8132 os_tid = 0x26d0 [0219.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss")) returned 0x20 [0220.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS", dwFileAttributes=0x20) returned 0 [0220.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.205] GetLastError () returned 0x5 [0220.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS", dwFileAttributes=0x20) returned 0 [0220.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6980) returned 1 Thread: id = 8133 os_tid = 0x23c4 [0219.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss")) returned 0x20 [0220.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS", dwFileAttributes=0x20) returned 0 [0220.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.203] GetLastError () returned 0x5 [0220.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS", dwFileAttributes=0x20) returned 0 [0220.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6480) returned 1 Thread: id = 8134 os_tid = 0xac4 [0219.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss")) returned 0x20 [0220.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS", dwFileAttributes=0x20) returned 0 [0220.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.201] GetLastError () returned 0x5 [0220.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS", dwFileAttributes=0x20) returned 0 [0220.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7920) returned 1 Thread: id = 8135 os_tid = 0xa9c [0219.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss")) returned 0x20 [0220.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS", dwFileAttributes=0x20) returned 0 [0220.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.199] GetLastError () returned 0x5 [0220.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS", dwFileAttributes=0x20) returned 0 [0220.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63e0) returned 1 Thread: id = 8136 os_tid = 0xa5c [0219.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss")) returned 0x20 [0220.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS", dwFileAttributes=0x20) returned 0 [0220.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.206] GetLastError () returned 0x5 [0220.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS", dwFileAttributes=0x20) returned 0 [0220.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6020) returned 1 Thread: id = 8137 os_tid = 0x1204 [0219.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss")) returned 0x20 [0220.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS", dwFileAttributes=0x20) returned 0 [0220.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.216] GetLastError () returned 0x5 [0220.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS", dwFileAttributes=0x20) returned 0 [0220.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6340) returned 1 Thread: id = 8138 os_tid = 0x1208 [0219.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst")) returned 0x20 [0220.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST", dwFileAttributes=0x20) returned 0 [0220.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.197] GetLastError () returned 0x5 [0220.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST", dwFileAttributes=0x20) returned 0 [0220.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6660) returned 1 Thread: id = 8139 os_tid = 0x1220 [0219.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst")) returned 0x20 [0220.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST", dwFileAttributes=0x20) returned 0 [0220.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.214] GetLastError () returned 0x5 [0220.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST", dwFileAttributes=0x20) returned 0 [0220.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6700) returned 1 Thread: id = 8140 os_tid = 0x78c [0219.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss")) returned 0x20 [0220.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS", dwFileAttributes=0x20) returned 0 [0220.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.195] GetLastError () returned 0x5 [0220.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS", dwFileAttributes=0x20) returned 0 [0220.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb60c0) returned 1 Thread: id = 8141 os_tid = 0x390 [0219.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss")) returned 0x20 [0220.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS", dwFileAttributes=0x20) returned 0 [0220.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.194] GetLastError () returned 0x5 [0220.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS", dwFileAttributes=0x20) returned 0 [0220.194] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb62a0) returned 1 Thread: id = 8142 os_tid = 0x380 [0219.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss")) returned 0x20 [0220.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS", dwFileAttributes=0x20) returned 0 [0220.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.192] GetLastError () returned 0x5 [0220.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS", dwFileAttributes=0x20) returned 0 [0220.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6200) returned 1 Thread: id = 8143 os_tid = 0x3a0 [0219.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss")) returned 0x20 [0220.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS", dwFileAttributes=0x20) returned 0 [0220.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.191] GetLastError () returned 0x5 [0220.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS", dwFileAttributes=0x20) returned 0 [0220.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6e80) returned 1 Thread: id = 8144 os_tid = 0x101c [0219.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss")) returned 0x20 [0220.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0220.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.189] GetLastError () returned 0x5 [0220.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0220.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6f20) returned 1 Thread: id = 8145 os_tid = 0x1020 [0219.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss")) returned 0x20 [0220.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0220.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.212] GetLastError () returned 0x5 [0220.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0220.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7880) returned 1 Thread: id = 8146 os_tid = 0x684 [0219.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss")) returned 0x20 [0220.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS", dwFileAttributes=0x20) returned 0 [0220.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.210] GetLastError () returned 0x5 [0220.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS", dwFileAttributes=0x20) returned 0 [0220.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb74c0) returned 1 Thread: id = 8147 os_tid = 0x3f0 [0219.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss")) returned 0x20 [0220.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS", dwFileAttributes=0x20) returned 0 [0220.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.188] GetLastError () returned 0x5 [0220.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS", dwFileAttributes=0x20) returned 0 [0220.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7420) returned 1 Thread: id = 8148 os_tid = 0x414 [0219.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst")) returned 0x20 [0220.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST", dwFileAttributes=0x20) returned 0 [0220.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.187] GetLastError () returned 0x5 [0220.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST", dwFileAttributes=0x20) returned 0 [0220.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7380) returned 1 Thread: id = 8149 os_tid = 0x328 [0219.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst")) returned 0x20 [0220.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST", dwFileAttributes=0x20) returned 0 [0220.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.185] GetLastError () returned 0x5 [0220.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST", dwFileAttributes=0x20) returned 0 [0220.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb72e0) returned 1 Thread: id = 8150 os_tid = 0x48c [0219.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss")) returned 0x20 [0220.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS", dwFileAttributes=0x20) returned 0 [0220.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.184] GetLastError () returned 0x5 [0220.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS", dwFileAttributes=0x20) returned 0 [0220.184] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7240) returned 1 Thread: id = 8151 os_tid = 0x6b8 [0219.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst")) returned 0x20 [0220.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST", dwFileAttributes=0x20) returned 0 [0220.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.183] GetLastError () returned 0x5 [0220.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST", dwFileAttributes=0x20) returned 0 [0220.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb71a0) returned 1 Thread: id = 8152 os_tid = 0x7d4 [0219.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss")) returned 0x20 [0220.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS", dwFileAttributes=0x20) returned 0 [0220.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.208] GetLastError () returned 0x5 [0220.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS", dwFileAttributes=0x20) returned 0 [0220.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7100) returned 1 Thread: id = 8153 os_tid = 0x27ec [0219.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst")) returned 0x20 [0220.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST", dwFileAttributes=0x20) returned 0 [0220.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.231] GetLastError () returned 0x5 [0220.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST", dwFileAttributes=0x20) returned 0 [0220.231] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7060) returned 1 Thread: id = 8155 os_tid = 0x24e0 [0219.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf")) returned 0x20 [0219.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF", dwFileAttributes=0x20) returned 0 [0219.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.107] GetLastError () returned 0x5 [0219.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF", dwFileAttributes=0x20) returned 0 [0219.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a686f0) returned 1 Thread: id = 8156 os_tid = 0x1d00 [0219.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf")) returned 0x20 [0219.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF", dwFileAttributes=0x20) returned 0 [0219.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.110] GetLastError () returned 0x5 [0219.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF", dwFileAttributes=0x20) returned 0 [0219.110] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 8157 os_tid = 0x40c [0219.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf")) returned 0x20 [0219.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF", dwFileAttributes=0x20) returned 0 [0219.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.111] GetLastError () returned 0x5 [0219.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF", dwFileAttributes=0x20) returned 0 [0219.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 8158 os_tid = 0x918 [0219.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf")) returned 0x20 [0222.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF", dwFileAttributes=0x20) returned 0 [0222.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.625] GetLastError () returned 0x5 [0225.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF", dwFileAttributes=0x20) returned 0 [0225.980] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 8159 os_tid = 0x928 [0219.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf")) returned 0x20 [0222.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF", dwFileAttributes=0x20) returned 0 [0222.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.625] GetLastError () returned 0x5 [0225.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF", dwFileAttributes=0x20) returned 0 [0225.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 8160 os_tid = 0xe74 [0219.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf")) returned 0x20 [0222.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF", dwFileAttributes=0x20) returned 0 [0222.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.625] GetLastError () returned 0x5 [0225.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF", dwFileAttributes=0x20) returned 0 [0225.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 8161 os_tid = 0xe70 [0219.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf")) returned 0x20 [0222.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF", dwFileAttributes=0x20) returned 0 [0222.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.626] GetLastError () returned 0x5 [0225.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF", dwFileAttributes=0x20) returned 0 [0225.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 8162 os_tid = 0xeec [0219.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf")) returned 0x20 [0221.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF", dwFileAttributes=0x20) returned 0 [0221.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.941] GetLastError () returned 0x5 [0221.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF", dwFileAttributes=0x20) returned 0 [0221.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 8163 os_tid = 0xea8 [0219.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf")) returned 0x20 [0221.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF", dwFileAttributes=0x20) returned 0 [0221.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.726] GetLastError () returned 0x5 [0221.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF", dwFileAttributes=0x20) returned 0 [0221.789] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 8164 os_tid = 0xe9c [0219.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf")) returned 0x20 [0221.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF", dwFileAttributes=0x20) returned 0 [0221.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.726] GetLastError () returned 0x5 [0221.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF", dwFileAttributes=0x20) returned 0 [0221.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 8165 os_tid = 0xea0 [0219.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf")) returned 0x20 [0221.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF", dwFileAttributes=0x20) returned 0 [0221.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.727] GetLastError () returned 0x5 [0221.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF", dwFileAttributes=0x20) returned 0 [0221.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 Thread: id = 8166 os_tid = 0xea4 [0219.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf")) returned 0x20 [0222.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF", dwFileAttributes=0x20) returned 0 [0222.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.626] GetLastError () returned 0x5 [0225.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF", dwFileAttributes=0x20) returned 0 [0225.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 8167 os_tid = 0xe98 [0219.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf")) returned 0x20 [0222.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF", dwFileAttributes=0x20) returned 0 [0222.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.626] GetLastError () returned 0x5 [0225.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF", dwFileAttributes=0x20) returned 0 [0225.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 8168 os_tid = 0xe94 [0219.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf")) returned 0x20 [0222.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF", dwFileAttributes=0x20) returned 0 [0222.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.627] GetLastError () returned 0x5 [0225.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF", dwFileAttributes=0x20) returned 0 [0225.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 8169 os_tid = 0xe50 [0219.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf")) returned 0x20 [0222.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF", dwFileAttributes=0x20) returned 0 [0222.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.627] GetLastError () returned 0x5 [0225.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF", dwFileAttributes=0x20) returned 0 [0225.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d060) returned 1 Thread: id = 8170 os_tid = 0xe4c [0219.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf")) returned 0x20 [0222.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF", dwFileAttributes=0x20) returned 0 [0222.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.627] GetLastError () returned 0x5 [0225.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF", dwFileAttributes=0x20) returned 0 [0225.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 Thread: id = 8171 os_tid = 0xe54 [0219.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf")) returned 0x20 [0222.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF", dwFileAttributes=0x20) returned 0 [0222.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.627] GetLastError () returned 0x5 [0225.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF", dwFileAttributes=0x20) returned 0 [0225.992] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a695d0) returned 1 Thread: id = 8172 os_tid = 0xe3c [0219.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf")) returned 0x20 [0222.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF", dwFileAttributes=0x20) returned 0 [0222.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.627] GetLastError () returned 0x5 [0225.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF", dwFileAttributes=0x20) returned 0 [0225.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68800) returned 1 Thread: id = 8173 os_tid = 0x18c0 [0219.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf")) returned 0x20 [0222.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF", dwFileAttributes=0x20) returned 0 [0222.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.628] GetLastError () returned 0x5 [0225.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF", dwFileAttributes=0x20) returned 0 [0225.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69658) returned 1 Thread: id = 8174 os_tid = 0x1690 [0219.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf")) returned 0x20 [0222.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF", dwFileAttributes=0x20) returned 0 [0222.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.628] GetLastError () returned 0x5 [0225.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF", dwFileAttributes=0x20) returned 0 [0225.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68d50) returned 1 Thread: id = 8175 os_tid = 0x16c8 [0219.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf")) returned 0x20 [0222.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF", dwFileAttributes=0x20) returned 0 [0222.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.628] GetLastError () returned 0x5 [0225.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF", dwFileAttributes=0x20) returned 0 [0225.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ed8) returned 1 Thread: id = 8176 os_tid = 0x16cc [0219.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf")) returned 0x20 [0222.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF", dwFileAttributes=0x20) returned 0 [0222.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.628] GetLastError () returned 0x5 [0225.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF", dwFileAttributes=0x20) returned 0 [0225.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a696e0) returned 1 Thread: id = 8177 os_tid = 0x1a2c [0219.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf")) returned 0x20 [0222.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF", dwFileAttributes=0x20) returned 0 [0222.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.628] GetLastError () returned 0x5 [0225.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF", dwFileAttributes=0x20) returned 0 [0225.982] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681a0) returned 1 Thread: id = 8178 os_tid = 0x16a0 [0219.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf")) returned 0x20 [0222.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF", dwFileAttributes=0x20) returned 0 [0222.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.625] GetLastError () returned 0x5 [0225.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF", dwFileAttributes=0x20) returned 0 [0225.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a683c0) returned 1 Thread: id = 8179 os_tid = 0xab4 [0219.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf")) returned 0x20 [0221.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF", dwFileAttributes=0x20) returned 0 [0221.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.727] GetLastError () returned 0x5 [0221.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF", dwFileAttributes=0x20) returned 0 [0221.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68228) returned 1 Thread: id = 8180 os_tid = 0xf24 [0219.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf")) returned 0x20 [0219.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF", dwFileAttributes=0x20) returned 0 [0219.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.228] GetLastError () returned 0x5 [0219.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF", dwFileAttributes=0x20) returned 0 [0219.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a682b0) returned 1 Thread: id = 8181 os_tid = 0x1454 [0219.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf")) returned 0x20 [0219.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF", dwFileAttributes=0x20) returned 0 [0219.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.230] GetLastError () returned 0x5 [0219.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF", dwFileAttributes=0x20) returned 0 [0219.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69878) returned 1 Thread: id = 8182 os_tid = 0x1cc4 [0219.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf")) returned 0x20 [0219.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF", dwFileAttributes=0x20) returned 0 [0219.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.231] GetLastError () returned 0x5 [0219.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF", dwFileAttributes=0x20) returned 0 [0219.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68118) returned 1 Thread: id = 8184 os_tid = 0x1cd4 [0219.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt")) returned 0x20 [0220.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT", dwFileAttributes=0x20) returned 0 [0220.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.286] GetLastError () returned 0x5 [0220.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT", dwFileAttributes=0x20) returned 0 [0220.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb65c0) returned 1 Thread: id = 8185 os_tid = 0x1cd8 [0219.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls")) returned 0x20 [0220.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS", dwFileAttributes=0x20) returned 0 [0220.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.283] GetLastError () returned 0x5 [0220.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS", dwFileAttributes=0x20) returned 0 [0220.284] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6520) returned 1 Thread: id = 8186 os_tid = 0x1ce0 [0219.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst")) returned 0x20 [0220.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST", dwFileAttributes=0x20) returned 0 [0220.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.228] GetLastError () returned 0x5 [0220.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST", dwFileAttributes=0x20) returned 0 [0220.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7a60) returned 1 Thread: id = 8187 os_tid = 0x2240 [0219.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst")) returned 0x20 [0220.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST", dwFileAttributes=0x20) returned 0 [0220.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.226] GetLastError () returned 0x5 [0220.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST", dwFileAttributes=0x20) returned 0 [0220.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb79c0) returned 1 Thread: id = 8188 os_tid = 0x2244 [0219.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst")) returned 0x20 [0220.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST", dwFileAttributes=0x20) returned 0 [0220.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.224] GetLastError () returned 0x5 [0220.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST", dwFileAttributes=0x20) returned 0 [0220.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6b60) returned 1 Thread: id = 8189 os_tid = 0x14e0 [0219.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst")) returned 0x20 [0220.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST", dwFileAttributes=0x20) returned 0 [0220.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.223] GetLastError () returned 0x5 [0220.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST", dwFileAttributes=0x20) returned 0 [0220.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6c00) returned 1 Thread: id = 8190 os_tid = 0x1794 [0219.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst")) returned 0x20 [0220.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST", dwFileAttributes=0x20) returned 0 [0220.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.221] GetLastError () returned 0x5 [0220.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST", dwFileAttributes=0x20) returned 0 [0220.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6ca0) returned 1 Thread: id = 8191 os_tid = 0x18e8 [0219.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst")) returned 0x20 [0220.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST", dwFileAttributes=0x20) returned 0 [0220.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.219] GetLastError () returned 0x5 [0220.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST", dwFileAttributes=0x20) returned 0 [0220.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6d40) returned 1 Thread: id = 8192 os_tid = 0x18ec [0219.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst")) returned 0x20 [0220.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST", dwFileAttributes=0x20) returned 0 [0220.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.217] GetLastError () returned 0x5 [0220.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST", dwFileAttributes=0x20) returned 0 [0220.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6de0) returned 1 Thread: id = 8193 os_tid = 0x18f4 [0219.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf")) returned 0x20 [0219.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF", dwFileAttributes=0x20) returned 0 [0219.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0219.239] GetLastError () returned 0x5 [0219.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF", dwFileAttributes=0x20) returned 0 [0219.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 8194 os_tid = 0x18f8 [0219.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf")) returned 0x20 [0222.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF", dwFileAttributes=0x20) returned 0 [0222.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.626] GetLastError () returned 0x5 [0225.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF", dwFileAttributes=0x20) returned 0 [0225.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 8195 os_tid = 0x1900 [0219.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf")) returned 0x20 [0222.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF", dwFileAttributes=0x20) returned 0 [0222.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.626] GetLastError () returned 0x5 [0225.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF", dwFileAttributes=0x20) returned 0 [0225.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a686f0) returned 1 Thread: id = 8196 os_tid = 0x1904 [0219.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf")) returned 0x20 [0226.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF", dwFileAttributes=0x20) returned 0 [0226.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.031] GetLastError () returned 0x5 [0227.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF", dwFileAttributes=0x20) returned 0 [0227.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68778) returned 1 Thread: id = 8197 os_tid = 0x1bdc [0219.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf")) returned 0x20 [0226.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF", dwFileAttributes=0x20) returned 0 [0226.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.032] GetLastError () returned 0x5 [0227.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF", dwFileAttributes=0x20) returned 0 [0227.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69b20) returned 1 Thread: id = 8198 os_tid = 0x190c [0219.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf")) returned 0x20 [0226.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF", dwFileAttributes=0x20) returned 0 [0226.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.925] GetLastError () returned 0x5 [0226.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF", dwFileAttributes=0x20) returned 0 [0226.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a693b0) returned 1 Thread: id = 8199 os_tid = 0x1910 [0219.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf")) returned 0x20 [0226.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF", dwFileAttributes=0x20) returned 0 [0226.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.926] GetLastError () returned 0x5 [0226.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF", dwFileAttributes=0x20) returned 0 [0226.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ff8) returned 1 Thread: id = 8200 os_tid = 0x1918 [0219.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf")) returned 0x20 [0226.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF", dwFileAttributes=0x20) returned 0 [0226.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.928] GetLastError () returned 0x5 [0226.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF", dwFileAttributes=0x20) returned 0 [0226.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68f70) returned 1 Thread: id = 8201 os_tid = 0x1720 [0219.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf")) returned 0x20 [0226.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF", dwFileAttributes=0x20) returned 0 [0226.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.929] GetLastError () returned 0x5 [0226.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF", dwFileAttributes=0x20) returned 0 [0226.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69d40) returned 1 Thread: id = 8202 os_tid = 0x1924 [0219.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf")) returned 0x20 [0226.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF", dwFileAttributes=0x20) returned 0 [0226.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.931] GetLastError () returned 0x5 [0226.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF", dwFileAttributes=0x20) returned 0 [0226.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68888) returned 1 Thread: id = 8203 os_tid = 0x19ac [0219.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf")) returned 0x20 [0226.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF", dwFileAttributes=0x20) returned 0 [0226.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.033] GetLastError () returned 0x5 [0227.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF", dwFileAttributes=0x20) returned 0 [0227.033] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68338) returned 1 Thread: id = 8204 os_tid = 0x19b0 [0219.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf")) returned 0x20 [0226.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF", dwFileAttributes=0x20) returned 0 [0226.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.034] GetLastError () returned 0x5 [0227.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF", dwFileAttributes=0x20) returned 0 [0227.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68a20) returned 1 Thread: id = 8205 os_tid = 0x19b4 [0219.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf")) returned 0x20 [0226.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF", dwFileAttributes=0x20) returned 0 [0226.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.036] GetLastError () returned 0x5 [0227.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF", dwFileAttributes=0x20) returned 0 [0227.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68bb8) returned 1 Thread: id = 8206 os_tid = 0x19b8 [0219.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf")) returned 0x20 [0226.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF", dwFileAttributes=0x20) returned 0 [0226.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.932] GetLastError () returned 0x5 [0226.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF", dwFileAttributes=0x20) returned 0 [0226.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69e50) returned 1 Thread: id = 8207 os_tid = 0x19bc [0219.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf")) returned 0x20 [0226.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF", dwFileAttributes=0x20) returned 0 [0226.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.934] GetLastError () returned 0x5 [0226.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF", dwFileAttributes=0x20) returned 0 [0226.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69dc8) returned 1 Thread: id = 8208 os_tid = 0x19c0 [0219.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf")) returned 0x20 [0226.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF", dwFileAttributes=0x20) returned 0 [0226.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.892] GetLastError () returned 0x5 [0226.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF", dwFileAttributes=0x20) returned 0 [0226.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68c40) returned 1 Thread: id = 8209 os_tid = 0x2258 [0219.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf")) returned 0x20 [0226.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF", dwFileAttributes=0x20) returned 0 [0226.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.893] GetLastError () returned 0x5 [0226.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF", dwFileAttributes=0x20) returned 0 [0226.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68b30) returned 1 Thread: id = 8210 os_tid = 0x225c [0219.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf")) returned 0x20 [0226.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF", dwFileAttributes=0x20) returned 0 [0226.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.042] GetLastError () returned 0x5 [0227.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF", dwFileAttributes=0x20) returned 0 [0227.042] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68e60) returned 1 Thread: id = 8211 os_tid = 0x2260 [0219.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf")) returned 0x20 [0226.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF", dwFileAttributes=0x20) returned 0 [0226.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.037] GetLastError () returned 0x5 [0227.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF", dwFileAttributes=0x20) returned 0 [0227.037] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ba8) returned 1 Thread: id = 8212 os_tid = 0x2300 [0219.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf")) returned 0x20 [0226.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF", dwFileAttributes=0x20) returned 0 [0226.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.998] GetLastError () returned 0x5 [0226.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF", dwFileAttributes=0x20) returned 0 [0226.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69900) returned 1 Thread: id = 8213 os_tid = 0x2304 [0219.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf")) returned 0x20 [0226.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF", dwFileAttributes=0x20) returned 0 [0226.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.000] GetLastError () returned 0x5 [0227.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF", dwFileAttributes=0x20) returned 0 [0227.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68aa8) returned 1 Thread: id = 8214 os_tid = 0x2328 [0219.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf")) returned 0x20 [0226.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF", dwFileAttributes=0x20) returned 0 [0226.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.038] GetLastError () returned 0x5 [0227.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF", dwFileAttributes=0x20) returned 0 [0227.038] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a98) returned 1 Thread: id = 8215 os_tid = 0x23a8 [0219.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf")) returned 0x20 [0226.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF", dwFileAttributes=0x20) returned 0 [0226.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.029] GetLastError () returned 0x5 [0227.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF", dwFileAttributes=0x20) returned 0 [0227.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69438) returned 1 Thread: id = 8216 os_tid = 0x23ac [0219.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf")) returned 0x20 [0222.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF", dwFileAttributes=0x20) returned 0 [0222.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.629] GetLastError () returned 0x5 [0225.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF", dwFileAttributes=0x20) returned 0 [0225.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68cc8) returned 1 Thread: id = 8217 os_tid = 0x23b0 [0219.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf")) returned 0x20 [0226.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF", dwFileAttributes=0x20) returned 0 [0226.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.039] GetLastError () returned 0x5 [0227.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF", dwFileAttributes=0x20) returned 0 [0227.039] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69328) returned 1 Thread: id = 8218 os_tid = 0x838 [0219.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf")) returned 0x20 [0226.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF", dwFileAttributes=0x20) returned 0 [0226.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.040] GetLastError () returned 0x5 [0227.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF", dwFileAttributes=0x20) returned 0 [0227.040] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68558) returned 1 Thread: id = 8219 os_tid = 0x24b0 [0219.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf")) returned 0x20 [0226.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF", dwFileAttributes=0x20) returned 0 [0226.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.923] GetLastError () returned 0x5 [0226.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF", dwFileAttributes=0x20) returned 0 [0226.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68910) returned 1 Thread: id = 8220 os_tid = 0x24d4 [0219.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf")) returned 0x20 [0226.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF", dwFileAttributes=0x20) returned 0 [0226.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.903] GetLastError () returned 0x5 [0226.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF", dwFileAttributes=0x20) returned 0 [0226.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 8221 os_tid = 0x1034 [0219.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf")) returned 0x20 [0226.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF", dwFileAttributes=0x20) returned 0 [0226.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.904] GetLastError () returned 0x5 [0226.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF", dwFileAttributes=0x20) returned 0 [0226.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68118) returned 1 Thread: id = 8222 os_tid = 0x1044 [0219.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf")) returned 0x20 [0226.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF", dwFileAttributes=0x20) returned 0 [0226.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.907] GetLastError () returned 0x5 [0226.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF", dwFileAttributes=0x20) returned 0 [0226.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69878) returned 1 Thread: id = 8223 os_tid = 0x1a88 [0219.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf")) returned 0x20 [0226.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF", dwFileAttributes=0x20) returned 0 [0226.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.909] GetLastError () returned 0x5 [0226.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF", dwFileAttributes=0x20) returned 0 [0226.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a682b0) returned 1 Thread: id = 8224 os_tid = 0x1a90 [0219.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf")) returned 0x20 [0226.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF", dwFileAttributes=0x20) returned 0 [0226.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.910] GetLastError () returned 0x5 [0226.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF", dwFileAttributes=0x20) returned 0 [0226.911] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ee8) returned 1 Thread: id = 8225 os_tid = 0x1aa0 [0219.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf")) returned 0x20 [0226.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF", dwFileAttributes=0x20) returned 0 [0226.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.912] GetLastError () returned 0x5 [0226.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF", dwFileAttributes=0x20) returned 0 [0226.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a685e0) returned 1 Thread: id = 8226 os_tid = 0x1ab8 [0219.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf")) returned 0x20 [0226.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF", dwFileAttributes=0x20) returned 0 [0226.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.873] GetLastError () returned 0x5 [0226.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF", dwFileAttributes=0x20) returned 0 [0226.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68668) returned 1 Thread: id = 8227 os_tid = 0x111c [0219.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf")) returned 0x20 [0226.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF", dwFileAttributes=0x20) returned 0 [0226.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.875] GetLastError () returned 0x5 [0226.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF", dwFileAttributes=0x20) returned 0 [0226.875] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69548) returned 1 Thread: id = 8228 os_tid = 0x1d48 [0219.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf")) returned 0x20 [0226.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF", dwFileAttributes=0x20) returned 0 [0226.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.916] GetLastError () returned 0x5 [0226.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF", dwFileAttributes=0x20) returned 0 [0226.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69768) returned 1 Thread: id = 8229 os_tid = 0x1d4c [0219.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf")) returned 0x20 [0226.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF", dwFileAttributes=0x20) returned 0 [0226.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.918] GetLastError () returned 0x5 [0226.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF", dwFileAttributes=0x20) returned 0 [0226.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69108) returned 1 Thread: id = 8230 os_tid = 0x19d0 [0219.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf")) returned 0x20 [0226.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF", dwFileAttributes=0x20) returned 0 [0226.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.919] GetLastError () returned 0x5 [0226.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF", dwFileAttributes=0x20) returned 0 [0226.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69190) returned 1 Thread: id = 8231 os_tid = 0x19d4 [0219.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf")) returned 0x20 [0226.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF", dwFileAttributes=0x20) returned 0 [0226.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.921] GetLastError () returned 0x5 [0226.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF", dwFileAttributes=0x20) returned 0 [0226.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69218) returned 1 Thread: id = 8232 os_tid = 0x19d8 [0219.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf")) returned 0x20 [0226.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF", dwFileAttributes=0x20) returned 0 [0226.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.922] GetLastError () returned 0x5 [0226.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF", dwFileAttributes=0x20) returned 0 [0226.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a692a0) returned 1 Thread: id = 8237 os_tid = 0x1de4 [0219.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst")) returned 0x20 [0220.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST", dwFileAttributes=0x20) returned 0 [0220.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.234] GetLastError () returned 0x5 [0220.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST", dwFileAttributes=0x20) returned 0 [0220.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6ac0) returned 1 Thread: id = 8238 os_tid = 0x1e14 [0219.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst")) returned 0x20 [0220.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST", dwFileAttributes=0x20) returned 0 [0220.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.181] GetLastError () returned 0x5 [0220.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST", dwFileAttributes=0x20) returned 0 [0220.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6a20) returned 1 Thread: id = 8239 os_tid = 0x8f8 [0219.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst")) returned 0x20 [0220.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST", dwFileAttributes=0x20) returned 0 [0220.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.236] GetLastError () returned 0x5 [0220.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST", dwFileAttributes=0x20) returned 0 [0220.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb76a0) returned 1 Thread: id = 8240 os_tid = 0x1b58 [0219.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss")) returned 0x20 [0220.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS", dwFileAttributes=0x20) returned 0 [0220.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.237] GetLastError () returned 0x5 [0220.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS", dwFileAttributes=0x20) returned 0 [0220.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7600) returned 1 Thread: id = 8241 os_tid = 0x1b5c [0219.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss")) returned 0x20 [0220.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS", dwFileAttributes=0x20) returned 0 [0220.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.271] GetLastError () returned 0x5 [0220.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS", dwFileAttributes=0x20) returned 0 [0220.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7560) returned 1 Thread: id = 8242 os_tid = 0x1cf4 [0219.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst")) returned 0x20 [0220.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST", dwFileAttributes=0x20) returned 0 [0220.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.272] GetLastError () returned 0x5 [0220.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST", dwFileAttributes=0x20) returned 0 [0220.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7ba0) returned 1 Thread: id = 8243 os_tid = 0x1458 [0219.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst")) returned 0x20 [0220.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST", dwFileAttributes=0x20) returned 0 [0220.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.274] GetLastError () returned 0x5 [0220.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST", dwFileAttributes=0x20) returned 0 [0220.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7b00) returned 1 Thread: id = 8244 os_tid = 0x1484 [0219.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss")) returned 0x20 [0220.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0220.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.255] GetLastError () returned 0x5 [0220.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0220.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7f60) returned 1 Thread: id = 8245 os_tid = 0x16b0 [0219.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss")) returned 0x20 [0220.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0220.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.256] GetLastError () returned 0x5 [0220.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0220.256] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7ec0) returned 1 Thread: id = 8246 os_tid = 0x2078 [0219.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss")) returned 0x20 [0220.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS", dwFileAttributes=0x20) returned 0 [0220.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.249] GetLastError () returned 0x5 [0220.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS", dwFileAttributes=0x20) returned 0 [0220.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7e20) returned 1 Thread: id = 8247 os_tid = 0x1710 [0219.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss")) returned 0x20 [0220.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS", dwFileAttributes=0x20) returned 0 [0220.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.250] GetLastError () returned 0x5 [0220.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS", dwFileAttributes=0x20) returned 0 [0220.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7d80) returned 1 Thread: id = 8248 os_tid = 0x1714 [0219.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss")) returned 0x20 [0220.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS", dwFileAttributes=0x20) returned 0 [0220.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.252] GetLastError () returned 0x5 [0220.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS", dwFileAttributes=0x20) returned 0 [0220.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7ce0) returned 1 Thread: id = 8249 os_tid = 0x1d10 [0219.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss")) returned 0x20 [0220.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS", dwFileAttributes=0x20) returned 0 [0220.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.253] GetLastError () returned 0x5 [0220.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS", dwFileAttributes=0x20) returned 0 [0220.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7c40) returned 1 Thread: id = 8250 os_tid = 0x20a4 [0219.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss")) returned 0x20 [0220.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS", dwFileAttributes=0x20) returned 0 [0220.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.239] GetLastError () returned 0x5 [0220.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS", dwFileAttributes=0x20) returned 0 [0220.239] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6fc0) returned 1 Thread: id = 8251 os_tid = 0x20ac [0219.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst")) returned 0x20 [0220.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST", dwFileAttributes=0x20) returned 0 [0220.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.240] GetLastError () returned 0x5 [0220.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST", dwFileAttributes=0x20) returned 0 [0220.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6160) returned 1 Thread: id = 8252 os_tid = 0x12dc [0219.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss")) returned 0x20 [0220.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS", dwFileAttributes=0x20) returned 0 [0220.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.241] GetLastError () returned 0x5 [0220.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS", dwFileAttributes=0x20) returned 0 [0220.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb68e0) returned 1 Thread: id = 8253 os_tid = 0x179c [0219.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst")) returned 0x20 [0220.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST", dwFileAttributes=0x20) returned 0 [0220.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.243] GetLastError () returned 0x5 [0220.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST", dwFileAttributes=0x20) returned 0 [0220.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb67a0) returned 1 Thread: id = 8254 os_tid = 0x1520 [0219.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss")) returned 0x20 [0220.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS", dwFileAttributes=0x20) returned 0 [0220.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.258] GetLastError () returned 0x5 [0220.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS", dwFileAttributes=0x20) returned 0 [0220.258] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5b80) returned 1 Thread: id = 8255 os_tid = 0x1dc0 [0219.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss")) returned 0x20 [0220.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS", dwFileAttributes=0x20) returned 0 [0220.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.259] GetLastError () returned 0x5 [0220.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS", dwFileAttributes=0x20) returned 0 [0220.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 Thread: id = 8256 os_tid = 0x1ff0 [0219.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss")) returned 0x20 [0220.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS", dwFileAttributes=0x20) returned 0 [0220.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.261] GetLastError () returned 0x5 [0220.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS", dwFileAttributes=0x20) returned 0 [0220.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6260) returned 1 Thread: id = 8257 os_tid = 0x1ff4 [0219.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss")) returned 0x20 [0220.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS", dwFileAttributes=0x20) returned 0 [0220.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.244] GetLastError () returned 0x5 [0220.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS", dwFileAttributes=0x20) returned 0 [0220.245] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6080) returned 1 Thread: id = 8258 os_tid = 0x1ff8 [0219.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss")) returned 0x20 [0220.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS", dwFileAttributes=0x20) returned 0 [0220.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.262] GetLastError () returned 0x5 [0220.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS", dwFileAttributes=0x20) returned 0 [0220.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 Thread: id = 8259 os_tid = 0x2228 [0219.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst")) returned 0x20 [0220.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST", dwFileAttributes=0x20) returned 0 [0220.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.263] GetLastError () returned 0x5 [0220.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST", dwFileAttributes=0x20) returned 0 [0220.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 Thread: id = 8260 os_tid = 0x1ffc [0219.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss")) returned 0x20 [0220.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS", dwFileAttributes=0x20) returned 0 [0220.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.265] GetLastError () returned 0x5 [0220.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS", dwFileAttributes=0x20) returned 0 [0220.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 Thread: id = 8261 os_tid = 0x20d8 [0219.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst")) returned 0x20 [0220.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST", dwFileAttributes=0x20) returned 0 [0220.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.266] GetLastError () returned 0x5 [0220.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST", dwFileAttributes=0x20) returned 0 [0220.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5a40) returned 1 Thread: id = 8262 os_tid = 0x20dc [0219.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_m.vss")) returned 0x20 [0220.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS", dwFileAttributes=0x20) returned 0 [0220.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.268] GetLastError () returned 0x5 [0220.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS", dwFileAttributes=0x20) returned 0 [0220.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4dc0) returned 1 Thread: id = 8263 os_tid = 0x15e4 [0219.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss")) returned 0x20 [0220.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0220.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.269] GetLastError () returned 0x5 [0220.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS", dwFileAttributes=0x20) returned 0 [0220.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 Thread: id = 8264 os_tid = 0x2418 [0219.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_m.vss")) returned 0x20 [0220.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS", dwFileAttributes=0x20) returned 0 [0220.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.275] GetLastError () returned 0x5 [0220.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS", dwFileAttributes=0x20) returned 0 [0220.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 Thread: id = 8265 os_tid = 0x15e8 [0219.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss")) returned 0x20 [0220.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS", dwFileAttributes=0x20) returned 0 [0220.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.276] GetLastError () returned 0x5 [0220.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS", dwFileAttributes=0x20) returned 0 [0220.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5c20) returned 1 Thread: id = 8266 os_tid = 0xbdc [0219.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss")) returned 0x20 [0220.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS", dwFileAttributes=0x20) returned 0 [0220.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.278] GetLastError () returned 0x5 [0220.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS", dwFileAttributes=0x20) returned 0 [0220.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df61c0) returned 1 Thread: id = 8267 os_tid = 0x7f8 [0219.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss")) returned 0x20 [0220.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS", dwFileAttributes=0x20) returned 0 [0220.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.280] GetLastError () returned 0x5 [0220.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS", dwFileAttributes=0x20) returned 0 [0220.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4be0) returned 1 Thread: id = 8268 os_tid = 0xb24 [0219.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss")) returned 0x20 [0220.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS", dwFileAttributes=0x20) returned 0 [0220.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.282] GetLastError () returned 0x5 [0220.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS", dwFileAttributes=0x20) returned 0 [0220.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4460) returned 1 Thread: id = 8269 os_tid = 0x908 [0219.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss")) returned 0x20 [0220.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS", dwFileAttributes=0x20) returned 0 [0220.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.246] GetLastError () returned 0x5 [0220.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS", dwFileAttributes=0x20) returned 0 [0220.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6120) returned 1 Thread: id = 8270 os_tid = 0x16ac [0219.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss")) returned 0x20 [0220.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS", dwFileAttributes=0x20) returned 0 [0220.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0220.247] GetLastError () returned 0x5 [0220.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS", dwFileAttributes=0x20) returned 0 [0220.248] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5d60) returned 1 Thread: id = 8271 os_tid = 0x25b4 [0219.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf")) returned 0x20 [0226.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF", dwFileAttributes=0x20) returned 0 [0226.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.844] GetLastError () returned 0x5 [0226.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF", dwFileAttributes=0x20) returned 0 [0226.844] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 8272 os_tid = 0x1bc8 [0219.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf")) returned 0x20 [0226.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF", dwFileAttributes=0x20) returned 0 [0226.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.898] GetLastError () returned 0x5 [0226.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF", dwFileAttributes=0x20) returned 0 [0226.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 8273 os_tid = 0x1bcc [0219.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf")) returned 0x20 [0226.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF", dwFileAttributes=0x20) returned 0 [0226.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.899] GetLastError () returned 0x5 [0226.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF", dwFileAttributes=0x20) returned 0 [0226.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 8274 os_tid = 0x1bd0 [0219.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf")) returned 0x20 [0226.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF", dwFileAttributes=0x20) returned 0 [0226.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.900] GetLastError () returned 0x5 [0226.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF", dwFileAttributes=0x20) returned 0 [0226.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 8275 os_tid = 0x1bd4 [0219.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf")) returned 0x20 [0226.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF", dwFileAttributes=0x20) returned 0 [0226.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.845] GetLastError () returned 0x5 [0226.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF", dwFileAttributes=0x20) returned 0 [0226.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 8276 os_tid = 0x191c [0219.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf")) returned 0x20 [0226.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF", dwFileAttributes=0x20) returned 0 [0226.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.847] GetLastError () returned 0x5 [0226.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF", dwFileAttributes=0x20) returned 0 [0226.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 Thread: id = 8277 os_tid = 0x16f8 [0219.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf")) returned 0x20 [0226.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF", dwFileAttributes=0x20) returned 0 [0226.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.848] GetLastError () returned 0x5 [0226.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF", dwFileAttributes=0x20) returned 0 [0226.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c758) returned 1 Thread: id = 8278 os_tid = 0x17e4 [0219.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf")) returned 0x20 [0226.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF", dwFileAttributes=0x20) returned 0 [0226.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.849] GetLastError () returned 0x5 [0226.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF", dwFileAttributes=0x20) returned 0 [0226.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 Thread: id = 8279 os_tid = 0x17e8 [0219.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf")) returned 0x20 [0226.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF", dwFileAttributes=0x20) returned 0 [0226.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.850] GetLastError () returned 0x5 [0226.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF", dwFileAttributes=0x20) returned 0 [0226.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 8280 os_tid = 0x17ec [0219.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf")) returned 0x20 [0226.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF", dwFileAttributes=0x20) returned 0 [0226.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.852] GetLastError () returned 0x5 [0226.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF", dwFileAttributes=0x20) returned 0 [0226.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 8281 os_tid = 0x1c84 [0219.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf")) returned 0x20 [0226.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF", dwFileAttributes=0x20) returned 0 [0226.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.901] GetLastError () returned 0x5 [0226.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF", dwFileAttributes=0x20) returned 0 [0226.901] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 8282 os_tid = 0x17f0 [0219.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg")) returned 0x20 [0226.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG", dwFileAttributes=0x20) returned 0 [0226.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.043] GetLastError () returned 0x5 [0227.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG", dwFileAttributes=0x20) returned 0 [0227.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 8283 os_tid = 0x1920 [0219.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg")) returned 0x20 [0226.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG", dwFileAttributes=0x20) returned 0 [0226.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.044] GetLastError () returned 0x5 [0227.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG", dwFileAttributes=0x20) returned 0 [0227.044] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 8284 os_tid = 0x1c88 [0219.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg")) returned 0x20 [0226.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG", dwFileAttributes=0x20) returned 0 [0226.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.856] GetLastError () returned 0x5 [0226.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG", dwFileAttributes=0x20) returned 0 [0226.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d638) returned 1 Thread: id = 8285 os_tid = 0x1c8c [0219.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg")) returned 0x20 [0226.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG", dwFileAttributes=0x20) returned 0 [0226.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.857] GetLastError () returned 0x5 [0226.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG", dwFileAttributes=0x20) returned 0 [0226.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 Thread: id = 8286 os_tid = 0x17f4 [0219.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg")) returned 0x20 [0226.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG", dwFileAttributes=0x20) returned 0 [0226.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.858] GetLastError () returned 0x5 [0226.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG", dwFileAttributes=0x20) returned 0 [0226.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 8287 os_tid = 0x17f8 [0219.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg")) returned 0x20 [0226.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG", dwFileAttributes=0x20) returned 0 [0226.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.860] GetLastError () returned 0x5 [0226.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG", dwFileAttributes=0x20) returned 0 [0226.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 8288 os_tid = 0x17fc [0219.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg")) returned 0x20 [0226.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG", dwFileAttributes=0x20) returned 0 [0226.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.838] GetLastError () returned 0x5 [0226.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG", dwFileAttributes=0x20) returned 0 [0226.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 8289 os_tid = 0x7ac [0219.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg")) returned 0x20 [0226.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG", dwFileAttributes=0x20) returned 0 [0226.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.839] GetLastError () returned 0x5 [0226.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG", dwFileAttributes=0x20) returned 0 [0226.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 8290 os_tid = 0xc14 [0219.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg")) returned 0x20 [0226.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG", dwFileAttributes=0x20) returned 0 [0226.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.840] GetLastError () returned 0x5 [0226.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG", dwFileAttributes=0x20) returned 0 [0226.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 8291 os_tid = 0x15c4 [0219.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg")) returned 0x20 [0226.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG", dwFileAttributes=0x20) returned 0 [0226.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.841] GetLastError () returned 0x5 [0226.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG", dwFileAttributes=0x20) returned 0 [0226.842] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 8292 os_tid = 0x24c4 [0219.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg")) returned 0x20 [0226.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG", dwFileAttributes=0x20) returned 0 [0226.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.843] GetLastError () returned 0x5 [0226.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG", dwFileAttributes=0x20) returned 0 [0226.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 8293 os_tid = 0x1028 [0219.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg")) returned 0x20 [0222.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG", dwFileAttributes=0x20) returned 0 [0222.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.626] GetLastError () returned 0x5 [0225.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG", dwFileAttributes=0x20) returned 0 [0226.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 8294 os_tid = 0x1308 [0219.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg")) returned 0x20 [0226.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG", dwFileAttributes=0x20) returned 0 [0226.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.958] GetLastError () returned 0x5 [0226.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG", dwFileAttributes=0x20) returned 0 [0226.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c6d0) returned 1 Thread: id = 8295 os_tid = 0x1570 [0219.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg")) returned 0x20 [0226.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG", dwFileAttributes=0x20) returned 0 [0226.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.960] GetLastError () returned 0x5 [0226.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG", dwFileAttributes=0x20) returned 0 [0226.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a694c0) returned 1 Thread: id = 8296 os_tid = 0x1cf8 [0219.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg")) returned 0x20 [0226.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG", dwFileAttributes=0x20) returned 0 [0226.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.961] GetLastError () returned 0x5 [0226.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG", dwFileAttributes=0x20) returned 0 [0226.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a697f0) returned 1 Thread: id = 8297 os_tid = 0x1364 [0219.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg")) returned 0x20 [0226.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG", dwFileAttributes=0x20) returned 0 [0226.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.962] GetLastError () returned 0x5 [0226.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG", dwFileAttributes=0x20) returned 0 [0226.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69988) returned 1 Thread: id = 8298 os_tid = 0x20e0 [0219.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg")) returned 0x20 [0222.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG", dwFileAttributes=0x20) returned 0 [0222.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.629] GetLastError () returned 0x5 [0225.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG", dwFileAttributes=0x20) returned 0 [0225.629] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a684d0) returned 1 Thread: id = 8299 os_tid = 0x2780 [0219.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg")) returned 0x20 [0222.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG", dwFileAttributes=0x20) returned 0 [0222.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.624] GetLastError () returned 0x5 [0225.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG", dwFileAttributes=0x20) returned 0 [0225.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68998) returned 1 Thread: id = 8300 os_tid = 0x2194 [0219.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf")) returned 0x20 [0226.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF", dwFileAttributes=0x20) returned 0 [0226.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.045] GetLastError () returned 0x5 [0227.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF", dwFileAttributes=0x20) returned 0 [0227.045] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68dd8) returned 1 Thread: id = 8301 os_tid = 0x2230 [0219.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf")) returned 0x20 [0226.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF", dwFileAttributes=0x20) returned 0 [0226.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.003] GetLastError () returned 0x5 [0227.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF", dwFileAttributes=0x20) returned 0 [0227.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a10) returned 1 Thread: id = 8302 os_tid = 0x2758 [0219.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf")) returned 0x20 [0222.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF", dwFileAttributes=0x20) returned 0 [0222.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.961] GetLastError () returned 0x5 [0225.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF", dwFileAttributes=0x20) returned 0 [0225.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68448) returned 1 Thread: id = 8303 os_tid = 0x2344 [0219.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf")) returned 0x20 [0226.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF", dwFileAttributes=0x20) returned 0 [0226.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.041] GetLastError () returned 0x5 [0227.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF", dwFileAttributes=0x20) returned 0 [0227.041] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69cb8) returned 1 Thread: id = 8304 os_tid = 0x23cc [0219.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf")) returned 0x20 [0226.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF", dwFileAttributes=0x20) returned 0 [0226.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.988] GetLastError () returned 0x5 [0226.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF", dwFileAttributes=0x20) returned 0 [0226.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69080) returned 1 Thread: id = 8305 os_tid = 0x2464 [0220.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf")) returned 0x20 [0226.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF", dwFileAttributes=0x20) returned 0 [0226.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.862] GetLastError () returned 0x5 [0226.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF", dwFileAttributes=0x20) returned 0 [0226.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69fe8) returned 1 Thread: id = 8306 os_tid = 0x27f0 [0220.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf")) returned 0x20 [0226.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF", dwFileAttributes=0x20) returned 0 [0226.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.863] GetLastError () returned 0x5 [0226.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF", dwFileAttributes=0x20) returned 0 [0226.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69f60) returned 1 Thread: id = 8307 os_tid = 0xb20 [0220.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf")) returned 0x20 [0226.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF", dwFileAttributes=0x20) returned 0 [0226.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.865] GetLastError () returned 0x5 [0226.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF", dwFileAttributes=0x20) returned 0 [0226.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 8308 os_tid = 0x24d8 [0220.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf")) returned 0x20 [0226.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF", dwFileAttributes=0x20) returned 0 [0226.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.866] GetLastError () returned 0x5 [0226.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF", dwFileAttributes=0x20) returned 0 [0226.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 8309 os_tid = 0x27fc [0220.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf")) returned 0x20 [0226.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF", dwFileAttributes=0x20) returned 0 [0226.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.896] GetLastError () returned 0x5 [0226.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF", dwFileAttributes=0x20) returned 0 [0226.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 8310 os_tid = 0x2238 [0220.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf")) returned 0x20 [0226.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF", dwFileAttributes=0x20) returned 0 [0226.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.867] GetLastError () returned 0x5 [0226.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF", dwFileAttributes=0x20) returned 0 [0226.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 8311 os_tid = 0x14ec [0220.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf")) returned 0x20 [0226.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF", dwFileAttributes=0x20) returned 0 [0226.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.869] GetLastError () returned 0x5 [0226.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF", dwFileAttributes=0x20) returned 0 [0226.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 8312 os_tid = 0x16d4 [0220.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf")) returned 0x20 [0226.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF", dwFileAttributes=0x20) returned 0 [0226.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.870] GetLastError () returned 0x5 [0226.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF", dwFileAttributes=0x20) returned 0 [0226.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 8313 os_tid = 0x1790 [0220.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf")) returned 0x20 [0226.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF", dwFileAttributes=0x20) returned 0 [0226.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.871] GetLastError () returned 0x5 [0226.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF", dwFileAttributes=0x20) returned 0 [0226.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 8314 os_tid = 0x1bc4 [0220.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf")) returned 0x20 [0226.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF", dwFileAttributes=0x20) returned 0 [0226.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.872] GetLastError () returned 0x5 [0226.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF", dwFileAttributes=0x20) returned 0 [0226.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 8315 os_tid = 0x1a94 [0220.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf")) returned 0x20 [0225.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF", dwFileAttributes=0x20) returned 0 [0225.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.630] GetLastError () returned 0x5 [0225.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF", dwFileAttributes=0x20) returned 0 [0225.631] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 8316 os_tid = 0x1ab4 [0220.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf")) returned 0x20 [0226.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF", dwFileAttributes=0x20) returned 0 [0226.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.084] GetLastError () returned 0x5 [0226.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF", dwFileAttributes=0x20) returned 0 [0226.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9c48) returned 1 Thread: id = 8317 os_tid = 0x1ad0 [0220.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf")) returned 0x20 [0226.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF", dwFileAttributes=0x20) returned 0 [0226.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.876] GetLastError () returned 0x5 [0226.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF", dwFileAttributes=0x20) returned 0 [0226.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 8318 os_tid = 0x19cc [0220.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf")) returned 0x20 [0226.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF", dwFileAttributes=0x20) returned 0 [0226.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.877] GetLastError () returned 0x5 [0226.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF", dwFileAttributes=0x20) returned 0 [0226.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 8319 os_tid = 0x1cac [0220.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf")) returned 0x20 [0226.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF", dwFileAttributes=0x20) returned 0 [0226.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.878] GetLastError () returned 0x5 [0226.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF", dwFileAttributes=0x20) returned 0 [0226.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 8320 os_tid = 0x1cb0 [0220.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf")) returned 0x20 [0226.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF", dwFileAttributes=0x20) returned 0 [0226.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.880] GetLastError () returned 0x5 [0226.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF", dwFileAttributes=0x20) returned 0 [0226.880] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 8321 os_tid = 0x1cb8 [0220.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf")) returned 0x20 [0226.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF", dwFileAttributes=0x20) returned 0 [0226.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.881] GetLastError () returned 0x5 [0226.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF", dwFileAttributes=0x20) returned 0 [0226.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 8322 os_tid = 0x1ddc [0220.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf")) returned 0x20 [0226.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF", dwFileAttributes=0x20) returned 0 [0226.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.882] GetLastError () returned 0x5 [0226.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF", dwFileAttributes=0x20) returned 0 [0226.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 8323 os_tid = 0x1dec [0220.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf")) returned 0x20 [0226.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF", dwFileAttributes=0x20) returned 0 [0226.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.883] GetLastError () returned 0x5 [0226.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF", dwFileAttributes=0x20) returned 0 [0226.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9de0) returned 1 Thread: id = 8324 os_tid = 0x1df0 [0220.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf")) returned 0x20 [0226.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF", dwFileAttributes=0x20) returned 0 [0226.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.884] GetLastError () returned 0x5 [0226.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF", dwFileAttributes=0x20) returned 0 [0226.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 8325 os_tid = 0x1dfc [0220.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf")) returned 0x20 [0226.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF", dwFileAttributes=0x20) returned 0 [0226.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.886] GetLastError () returned 0x5 [0226.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF", dwFileAttributes=0x20) returned 0 [0226.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 8326 os_tid = 0x1e00 [0220.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf")) returned 0x20 [0226.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF", dwFileAttributes=0x20) returned 0 [0226.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.887] GetLastError () returned 0x5 [0226.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF", dwFileAttributes=0x20) returned 0 [0226.887] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 8327 os_tid = 0x1e04 [0220.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf")) returned 0x20 [0226.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF", dwFileAttributes=0x20) returned 0 [0226.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.888] GetLastError () returned 0x5 [0226.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF", dwFileAttributes=0x20) returned 0 [0226.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 8328 os_tid = 0x1e08 [0220.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf")) returned 0x20 [0226.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF", dwFileAttributes=0x20) returned 0 [0226.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.889] GetLastError () returned 0x5 [0226.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF", dwFileAttributes=0x20) returned 0 [0226.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 8329 os_tid = 0x1b4c [0220.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf")) returned 0x20 [0226.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF", dwFileAttributes=0x20) returned 0 [0226.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.890] GetLastError () returned 0x5 [0226.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF", dwFileAttributes=0x20) returned 0 [0226.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 8330 os_tid = 0x2208 [0220.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf")) returned 0x20 [0226.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF", dwFileAttributes=0x20) returned 0 [0226.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.853] GetLastError () returned 0x5 [0226.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF", dwFileAttributes=0x20) returned 0 [0226.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 8331 os_tid = 0x252c [0220.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf")) returned 0x20 [0226.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF", dwFileAttributes=0x20) returned 0 [0226.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.854] GetLastError () returned 0x5 [0226.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF", dwFileAttributes=0x20) returned 0 [0226.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 8332 os_tid = 0x10c [0220.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf")) returned 0x20 [0226.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF", dwFileAttributes=0x20) returned 0 [0226.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.894] GetLastError () returned 0x5 [0226.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF", dwFileAttributes=0x20) returned 0 [0226.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 8333 os_tid = 0x14f0 [0220.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf")) returned 0x20 [0226.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF", dwFileAttributes=0x20) returned 0 [0226.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.895] GetLastError () returned 0x5 [0226.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF", dwFileAttributes=0x20) returned 0 [0226.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 8334 os_tid = 0x15d4 [0220.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss")) returned 0x20 [0221.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS", dwFileAttributes=0x20) returned 0 [0221.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.133] GetLastError () returned 0x5 [0225.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df54a0) returned 1 Thread: id = 8335 os_tid = 0x25bc [0220.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst")) returned 0x20 [0225.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST", dwFileAttributes=0x20) returned 0 [0225.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.652] GetLastError () returned 0x5 [0225.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST", dwFileAttributes=0x20) returned 0 [0225.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb77e0) returned 1 Thread: id = 8336 os_tid = 0x938 [0220.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst")) returned 0x20 [0225.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST", dwFileAttributes=0x20) returned 0 [0225.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.654] GetLastError () returned 0x5 [0225.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST", dwFileAttributes=0x20) returned 0 [0225.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6840) returned 1 Thread: id = 8337 os_tid = 0x1258 [0220.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst")) returned 0x20 [0225.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST", dwFileAttributes=0x20) returned 0 [0225.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.730] GetLastError () returned 0x5 [0225.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST", dwFileAttributes=0x20) returned 0 [0225.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5fe0) returned 1 Thread: id = 8338 os_tid = 0xee8 [0220.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst")) returned 0x20 [0225.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST", dwFileAttributes=0x20) returned 0 [0225.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.728] GetLastError () returned 0x5 [0225.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST", dwFileAttributes=0x20) returned 0 [0225.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5ea0) returned 1 Thread: id = 8339 os_tid = 0xe84 [0220.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss")) returned 0x20 [0225.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS", dwFileAttributes=0x20) returned 0 [0225.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.727] GetLastError () returned 0x5 [0225.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS", dwFileAttributes=0x20) returned 0 [0225.727] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4fa0) returned 1 Thread: id = 8340 os_tid = 0xeac [0220.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss")) returned 0x20 [0225.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS", dwFileAttributes=0x20) returned 0 [0225.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.725] GetLastError () returned 0x5 [0225.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS", dwFileAttributes=0x20) returned 0 [0225.725] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6300) returned 1 Thread: id = 8341 os_tid = 0xde0 [0220.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls")) returned 0x20 [0225.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS", dwFileAttributes=0x20) returned 0 [0225.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.776] GetLastError () returned 0x5 [0225.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS", dwFileAttributes=0x20) returned 0 [0225.776] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5540) returned 1 Thread: id = 8342 os_tid = 0x1430 [0220.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_m.vst")) returned 0x20 [0225.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST", dwFileAttributes=0x20) returned 0 [0225.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.775] GetLastError () returned 0x5 [0225.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST", dwFileAttributes=0x20) returned 0 [0225.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4e60) returned 1 Thread: id = 8343 os_tid = 0x1bd8 [0220.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_u.vst")) returned 0x20 [0225.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST", dwFileAttributes=0x20) returned 0 [0225.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.773] GetLastError () returned 0x5 [0225.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST", dwFileAttributes=0x20) returned 0 [0225.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df48c0) returned 1 Thread: id = 8344 os_tid = 0x1ae0 [0220.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls")) returned 0x20 [0221.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS", dwFileAttributes=0x20) returned 0 [0221.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.135] GetLastError () returned 0x5 [0225.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS", dwFileAttributes=0x20) returned 0 [0225.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c75f8) returned 1 Thread: id = 8345 os_tid = 0x1d50 [0220.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_m.vst")) returned 0x20 [0225.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST", dwFileAttributes=0x20) returned 0 [0225.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.796] GetLastError () returned 0x5 [0225.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST", dwFileAttributes=0x20) returned 0 [0225.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7378) returned 1 Thread: id = 8346 os_tid = 0x1e18 [0220.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_u.vst")) returned 0x20 [0225.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST", dwFileAttributes=0x20) returned 0 [0225.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.798] GetLastError () returned 0x5 [0225.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST", dwFileAttributes=0x20) returned 0 [0225.798] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7198) returned 1 Thread: id = 8347 os_tid = 0x18a4 [0220.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_m.vss")) returned 0x20 [0225.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.799] GetLastError () returned 0x5 [0225.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7698) returned 1 Thread: id = 8348 os_tid = 0x1ccc [0220.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_u.vss")) returned 0x20 [0225.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.801] GetLastError () returned 0x5 [0225.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.801] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c70f8) returned 1 Thread: id = 8349 os_tid = 0x6b0 [0220.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls")) returned 0x20 [0225.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS", dwFileAttributes=0x20) returned 0 [0225.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.748] GetLastError () returned 0x5 [0225.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS", dwFileAttributes=0x20) returned 0 [0225.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7558) returned 1 Thread: id = 8350 os_tid = 0x1db4 [0220.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst")) returned 0x20 [0225.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST", dwFileAttributes=0x20) returned 0 [0225.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.750] GetLastError () returned 0x5 [0225.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST", dwFileAttributes=0x20) returned 0 [0225.750] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c7738) returned 1 Thread: id = 8351 os_tid = 0x17d8 [0220.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst")) returned 0x20 [0225.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST", dwFileAttributes=0x20) returned 0 [0225.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.767] GetLastError () returned 0x5 [0225.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST", dwFileAttributes=0x20) returned 0 [0225.767] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6298) returned 1 Thread: id = 8352 os_tid = 0x448 [0220.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst")) returned 0x20 [0225.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST", dwFileAttributes=0x20) returned 0 [0225.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.751] GetLastError () returned 0x5 [0225.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST", dwFileAttributes=0x20) returned 0 [0225.752] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6fb8) returned 1 Thread: id = 8353 os_tid = 0x1e0c [0220.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst")) returned 0x20 [0225.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST", dwFileAttributes=0x20) returned 0 [0225.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.770] GetLastError () returned 0x5 [0225.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST", dwFileAttributes=0x20) returned 0 [0225.770] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x2c6e78) returned 1 Thread: id = 8354 os_tid = 0x1e10 [0220.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst")) returned 0x20 [0225.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST", dwFileAttributes=0x20) returned 0 [0225.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.771] GetLastError () returned 0x5 [0225.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST", dwFileAttributes=0x20) returned 0 [0225.772] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0020) returned 1 Thread: id = 8355 os_tid = 0x1e5c [0220.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst")) returned 0x20 [0225.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST", dwFileAttributes=0x20) returned 0 [0225.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.753] GetLastError () returned 0x5 [0225.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST", dwFileAttributes=0x20) returned 0 [0225.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc00c0) returned 1 Thread: id = 8356 os_tid = 0x1e60 [0220.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst")) returned 0x20 [0225.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST", dwFileAttributes=0x20) returned 0 [0225.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.759] GetLastError () returned 0x5 [0225.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST", dwFileAttributes=0x20) returned 0 [0225.760] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0160) returned 1 Thread: id = 8357 os_tid = 0x1a98 [0220.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst")) returned 0x20 [0225.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST", dwFileAttributes=0x20) returned 0 [0225.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.761] GetLastError () returned 0x5 [0225.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST", dwFileAttributes=0x20) returned 0 [0225.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0200) returned 1 Thread: id = 8358 os_tid = 0x1aa8 [0220.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss")) returned 0x20 [0225.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.762] GetLastError () returned 0x5 [0225.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.762] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc02a0) returned 1 Thread: id = 8359 os_tid = 0x1aac [0220.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss")) returned 0x20 [0225.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.718] GetLastError () returned 0x5 [0225.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0340) returned 1 Thread: id = 8360 os_tid = 0x1ab0 [0220.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf")) returned 0x20 [0226.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF", dwFileAttributes=0x20) returned 0 [0226.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.004] GetLastError () returned 0x5 [0227.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF", dwFileAttributes=0x20) returned 0 [0227.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 8361 os_tid = 0x1abc [0220.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf")) returned 0x20 [0226.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF", dwFileAttributes=0x20) returned 0 [0226.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.956] GetLastError () returned 0x5 [0226.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF", dwFileAttributes=0x20) returned 0 [0226.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 8362 os_tid = 0x1ac4 [0220.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf")) returned 0x20 [0226.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF", dwFileAttributes=0x20) returned 0 [0226.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.028] GetLastError () returned 0x5 [0227.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF", dwFileAttributes=0x20) returned 0 [0227.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 8363 os_tid = 0x1ac8 [0220.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf")) returned 0x20 [0226.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF", dwFileAttributes=0x20) returned 0 [0226.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.201] GetLastError () returned 0x5 [0227.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF", dwFileAttributes=0x20) returned 0 [0227.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 8364 os_tid = 0x1acc [0220.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf")) returned 0x20 [0226.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF", dwFileAttributes=0x20) returned 0 [0226.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.957] GetLastError () returned 0x5 [0226.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF", dwFileAttributes=0x20) returned 0 [0226.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 8365 os_tid = 0x1ad4 [0220.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss")) returned 0x20 [0225.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.720] GetLastError () returned 0x5 [0225.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.720] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb65c0) returned 1 Thread: id = 8366 os_tid = 0x1adc [0220.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss")) returned 0x20 [0225.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.721] GetLastError () returned 0x5 [0225.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6520) returned 1 Thread: id = 8367 os_tid = 0x1e9c [0220.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst")) returned 0x20 [0225.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST", dwFileAttributes=0x20) returned 0 [0225.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.723] GetLastError () returned 0x5 [0225.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST", dwFileAttributes=0x20) returned 0 [0225.723] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7b00) returned 1 Thread: id = 8368 os_tid = 0x1ea0 [0220.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst")) returned 0x20 [0225.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST", dwFileAttributes=0x20) returned 0 [0225.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.679] GetLastError () returned 0x5 [0225.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST", dwFileAttributes=0x20) returned 0 [0225.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7ba0) returned 1 Thread: id = 8369 os_tid = 0x1ea4 [0220.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss")) returned 0x20 [0225.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.680] GetLastError () returned 0x5 [0225.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7560) returned 1 Thread: id = 8370 os_tid = 0x1ea8 [0220.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss")) returned 0x20 [0225.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.682] GetLastError () returned 0x5 [0225.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.682] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7ec0) returned 1 Thread: id = 8371 os_tid = 0x1eac [0220.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst")) returned 0x20 [0225.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST", dwFileAttributes=0x20) returned 0 [0225.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.683] GetLastError () returned 0x5 [0225.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST", dwFileAttributes=0x20) returned 0 [0225.684] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7f60) returned 1 Thread: id = 8372 os_tid = 0x1eb8 [0220.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst")) returned 0x20 [0221.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST", dwFileAttributes=0x20) returned 0 [0221.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.642] GetLastError () returned 0x5 [0225.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST", dwFileAttributes=0x20) returned 0 [0225.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7c40) returned 1 Thread: id = 8375 os_tid = 0x1ec4 [0220.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf")) returned 0x20 [0226.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF", dwFileAttributes=0x20) returned 0 [0226.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.997] GetLastError () returned 0x5 [0226.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF", dwFileAttributes=0x20) returned 0 [0226.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 8376 os_tid = 0x1ec8 [0220.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf")) returned 0x20 [0226.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF", dwFileAttributes=0x20) returned 0 [0226.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.967] GetLastError () returned 0x5 [0226.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF", dwFileAttributes=0x20) returned 0 [0226.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 8377 os_tid = 0x1ecc [0220.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf")) returned 0x20 [0226.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF", dwFileAttributes=0x20) returned 0 [0226.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.968] GetLastError () returned 0x5 [0226.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF", dwFileAttributes=0x20) returned 0 [0226.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 8378 os_tid = 0x1ed0 [0220.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf")) returned 0x20 [0226.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF", dwFileAttributes=0x20) returned 0 [0226.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.970] GetLastError () returned 0x5 [0226.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF", dwFileAttributes=0x20) returned 0 [0226.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 8379 os_tid = 0x1ed4 [0220.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf")) returned 0x20 [0226.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF", dwFileAttributes=0x20) returned 0 [0226.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.971] GetLastError () returned 0x5 [0226.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF", dwFileAttributes=0x20) returned 0 [0226.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 8380 os_tid = 0x1ed8 [0220.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf")) returned 0x20 [0226.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF", dwFileAttributes=0x20) returned 0 [0226.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.935] GetLastError () returned 0x5 [0226.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF", dwFileAttributes=0x20) returned 0 [0226.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 8381 os_tid = 0x1ee0 [0220.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf")) returned 0x20 [0226.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF", dwFileAttributes=0x20) returned 0 [0226.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.954] GetLastError () returned 0x5 [0226.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF", dwFileAttributes=0x20) returned 0 [0226.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 8382 os_tid = 0x1ef4 [0220.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf")) returned 0x20 [0226.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF", dwFileAttributes=0x20) returned 0 [0226.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.937] GetLastError () returned 0x5 [0226.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF", dwFileAttributes=0x20) returned 0 [0226.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 8383 os_tid = 0x1f50 [0220.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf")) returned 0x20 [0226.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF", dwFileAttributes=0x20) returned 0 [0226.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.955] GetLastError () returned 0x5 [0226.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF", dwFileAttributes=0x20) returned 0 [0226.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 8384 os_tid = 0x1f58 [0220.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf")) returned 0x20 [0226.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF", dwFileAttributes=0x20) returned 0 [0226.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.938] GetLastError () returned 0x5 [0226.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF", dwFileAttributes=0x20) returned 0 [0226.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 8385 os_tid = 0x1f5c [0220.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf")) returned 0x20 [0226.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF", dwFileAttributes=0x20) returned 0 [0226.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.940] GetLastError () returned 0x5 [0226.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF", dwFileAttributes=0x20) returned 0 [0226.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 8386 os_tid = 0x1f60 [0220.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf")) returned 0x20 [0226.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF", dwFileAttributes=0x20) returned 0 [0226.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.941] GetLastError () returned 0x5 [0226.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF", dwFileAttributes=0x20) returned 0 [0226.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 8387 os_tid = 0x1f68 [0220.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf")) returned 0x20 [0226.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF", dwFileAttributes=0x20) returned 0 [0226.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.942] GetLastError () returned 0x5 [0226.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF", dwFileAttributes=0x20) returned 0 [0226.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 8388 os_tid = 0x1f6c [0220.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf")) returned 0x20 [0226.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF", dwFileAttributes=0x20) returned 0 [0226.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.944] GetLastError () returned 0x5 [0226.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF", dwFileAttributes=0x20) returned 0 [0226.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 8389 os_tid = 0x1f70 [0220.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf")) returned 0x20 [0226.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF", dwFileAttributes=0x20) returned 0 [0226.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.945] GetLastError () returned 0x5 [0226.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF", dwFileAttributes=0x20) returned 0 [0226.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 Thread: id = 8390 os_tid = 0x192c [0220.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf")) returned 0x20 [0226.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF", dwFileAttributes=0x20) returned 0 [0226.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.990] GetLastError () returned 0x5 [0226.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF", dwFileAttributes=0x20) returned 0 [0226.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 Thread: id = 8391 os_tid = 0x1a8c [0220.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf")) returned 0x20 [0226.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF", dwFileAttributes=0x20) returned 0 [0226.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.991] GetLastError () returned 0x5 [0226.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF", dwFileAttributes=0x20) returned 0 [0226.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 8392 os_tid = 0x1950 [0220.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf")) returned 0x20 [0226.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF", dwFileAttributes=0x20) returned 0 [0226.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.992] GetLastError () returned 0x5 [0226.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF", dwFileAttributes=0x20) returned 0 [0226.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f3e0) returned 1 Thread: id = 8393 os_tid = 0x1f7c [0220.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf")) returned 0x20 [0226.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF", dwFileAttributes=0x20) returned 0 [0226.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.994] GetLastError () returned 0x5 [0226.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF", dwFileAttributes=0x20) returned 0 [0226.994] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 8394 os_tid = 0x1a9c [0220.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf")) returned 0x20 [0226.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF", dwFileAttributes=0x20) returned 0 [0226.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.995] GetLastError () returned 0x5 [0226.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF", dwFileAttributes=0x20) returned 0 [0226.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 8395 os_tid = 0x1ac0 [0220.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf")) returned 0x20 [0226.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF", dwFileAttributes=0x20) returned 0 [0226.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.996] GetLastError () returned 0x5 [0226.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF", dwFileAttributes=0x20) returned 0 [0226.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 8396 os_tid = 0x1d74 [0220.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf")) returned 0x20 [0226.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF", dwFileAttributes=0x20) returned 0 [0226.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.915] GetLastError () returned 0x5 [0226.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF", dwFileAttributes=0x20) returned 0 [0226.915] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 8397 os_tid = 0x1534 [0220.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss")) returned 0x20 [0225.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.651] GetLastError () returned 0x5 [0225.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7ce0) returned 1 Thread: id = 8398 os_tid = 0x157c [0220.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss")) returned 0x20 [0225.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.649] GetLastError () returned 0x5 [0225.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.650] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7d80) returned 1 Thread: id = 8399 os_tid = 0x2298 [0220.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss")) returned 0x20 [0225.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.648] GetLastError () returned 0x5 [0225.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.648] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7e20) returned 1 Thread: id = 8400 os_tid = 0x229c [0220.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss")) returned 0x20 [0225.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.898] GetLastError () returned 0x5 [0225.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb67a0) returned 1 Thread: id = 8401 os_tid = 0x1e4c [0220.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss")) returned 0x20 [0225.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.952] GetLastError () returned 0x5 [0225.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb68e0) returned 1 Thread: id = 8402 os_tid = 0x1e34 [0220.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss")) returned 0x20 [0225.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.655] GetLastError () returned 0x5 [0225.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.655] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6160) returned 1 Thread: id = 8403 os_tid = 0x22a0 [0220.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss")) returned 0x20 [0225.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.646] GetLastError () returned 0x5 [0225.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.646] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6fc0) returned 1 Thread: id = 8404 os_tid = 0xdb0 [0220.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_u.vss")) returned 0x20 [0225.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.705] GetLastError () returned 0x5 [0225.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7600) returned 1 Thread: id = 8405 os_tid = 0x22b0 [0220.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_m.vss")) returned 0x20 [0225.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.707] GetLastError () returned 0x5 [0225.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb76a0) returned 1 Thread: id = 8406 os_tid = 0xdc4 [0220.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_u.vss")) returned 0x20 [0225.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.644] GetLastError () returned 0x5 [0225.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6ac0) returned 1 Thread: id = 8407 os_tid = 0xdc8 [0220.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_m.vss")) returned 0x20 [0225.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.708] GetLastError () returned 0x5 [0225.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7740) returned 1 Thread: id = 8408 os_tid = 0x104c [0220.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_u.vss")) returned 0x20 [0225.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.710] GetLastError () returned 0x5 [0225.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7060) returned 1 Thread: id = 8409 os_tid = 0x1054 [0220.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls")) returned 0x20 [0225.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS", dwFileAttributes=0x20) returned 0 [0225.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.641] GetLastError () returned 0x5 [0225.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS", dwFileAttributes=0x20) returned 0 [0225.641] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7a60) returned 1 Thread: id = 8410 os_tid = 0x1fa4 [0220.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_m.vst")) returned 0x20 [0225.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST", dwFileAttributes=0x20) returned 0 [0225.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.711] GetLastError () returned 0x5 [0225.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST", dwFileAttributes=0x20) returned 0 [0225.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb79c0) returned 1 Thread: id = 8411 os_tid = 0x1154 [0220.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst")) returned 0x20 [0225.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST", dwFileAttributes=0x20) returned 0 [0225.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.713] GetLastError () returned 0x5 [0225.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST", dwFileAttributes=0x20) returned 0 [0225.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6b60) returned 1 Thread: id = 8412 os_tid = 0x1464 [0220.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_m.vss")) returned 0x20 [0225.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.714] GetLastError () returned 0x5 [0225.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.714] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6c00) returned 1 Thread: id = 8413 os_tid = 0x1da8 [0220.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_u.vss")) returned 0x20 [0225.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.623] GetLastError () returned 0x5 [0225.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6ca0) returned 1 Thread: id = 8414 os_tid = 0x1dac [0220.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss")) returned 0x20 [0225.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.639] GetLastError () returned 0x5 [0225.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6d40) returned 1 Thread: id = 8415 os_tid = 0x1db0 [0220.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_u.vss")) returned 0x20 [0225.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.715] GetLastError () returned 0x5 [0225.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.716] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6de0) returned 1 Thread: id = 8416 os_tid = 0x1db8 [0220.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vss")) returned 0x20 [0225.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.717] GetLastError () returned 0x5 [0225.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32b820) returned 1 Thread: id = 8417 os_tid = 0x1e24 [0220.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vst")) returned 0x20 [0225.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST", dwFileAttributes=0x20) returned 0 [0225.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.731] GetLastError () returned 0x5 [0225.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST", dwFileAttributes=0x20) returned 0 [0225.731] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d240) returned 1 Thread: id = 8418 os_tid = 0x1e28 [0220.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf")) returned 0x20 [0226.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF", dwFileAttributes=0x20) returned 0 [0226.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.963] GetLastError () returned 0x5 [0226.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF", dwFileAttributes=0x20) returned 0 [0226.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 8419 os_tid = 0x1e2c [0220.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf")) returned 0x20 [0222.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF", dwFileAttributes=0x20) returned 0 [0222.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.625] GetLastError () returned 0x5 [0225.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF", dwFileAttributes=0x20) returned 0 [0225.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 8420 os_tid = 0x1e30 [0220.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf")) returned 0x20 [0226.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF", dwFileAttributes=0x20) returned 0 [0226.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.946] GetLastError () returned 0x5 [0226.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF", dwFileAttributes=0x20) returned 0 [0226.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bdd8) returned 1 Thread: id = 8421 os_tid = 0x1b64 [0220.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf")) returned 0x20 [0226.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF", dwFileAttributes=0x20) returned 0 [0226.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.947] GetLastError () returned 0x5 [0226.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF", dwFileAttributes=0x20) returned 0 [0226.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 Thread: id = 8422 os_tid = 0x251c [0220.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf")) returned 0x20 [0226.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF", dwFileAttributes=0x20) returned 0 [0226.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.948] GetLastError () returned 0x5 [0226.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF", dwFileAttributes=0x20) returned 0 [0226.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ba20) returned 1 Thread: id = 8423 os_tid = 0x2520 [0220.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf")) returned 0x20 [0226.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF", dwFileAttributes=0x20) returned 0 [0226.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.964] GetLastError () returned 0x5 [0226.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF", dwFileAttributes=0x20) returned 0 [0226.965] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ca10) returned 1 Thread: id = 8424 os_tid = 0x2524 [0220.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf")) returned 0x20 [0226.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF", dwFileAttributes=0x20) returned 0 [0226.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.949] GetLastError () returned 0x5 [0226.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF", dwFileAttributes=0x20) returned 0 [0226.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 8425 os_tid = 0x2528 [0220.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf")) returned 0x20 [0226.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF", dwFileAttributes=0x20) returned 0 [0226.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.951] GetLastError () returned 0x5 [0226.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF", dwFileAttributes=0x20) returned 0 [0226.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b888) returned 1 Thread: id = 8426 os_tid = 0x2530 [0220.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf")) returned 0x20 [0226.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF", dwFileAttributes=0x20) returned 0 [0226.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.952] GetLastError () returned 0x5 [0226.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF", dwFileAttributes=0x20) returned 0 [0226.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d4b0) returned 1 Thread: id = 8427 os_tid = 0x1fbc [0220.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf")) returned 0x20 [0226.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF", dwFileAttributes=0x20) returned 0 [0226.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.966] GetLastError () returned 0x5 [0226.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF", dwFileAttributes=0x20) returned 0 [0226.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bd50) returned 1 Thread: id = 8428 os_tid = 0x1fc0 [0220.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf")) returned 0x20 [0226.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF", dwFileAttributes=0x20) returned 0 [0226.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.953] GetLastError () returned 0x5 [0226.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF", dwFileAttributes=0x20) returned 0 [0226.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062a10) returned 1 Thread: id = 8429 os_tid = 0x1fc4 [0220.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf")) returned 0x20 [0226.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF", dwFileAttributes=0x20) returned 0 [0226.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.913] GetLastError () returned 0x5 [0226.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF", dwFileAttributes=0x20) returned 0 [0226.913] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 8430 os_tid = 0x1fc8 [0220.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vss")) returned 0x20 [0225.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.733] GetLastError () returned 0x5 [0225.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.733] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cce8) returned 1 Thread: id = 8431 os_tid = 0x1fd0 [0220.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vst")) returned 0x20 [0225.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST", dwFileAttributes=0x20) returned 0 [0225.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.734] GetLastError () returned 0x5 [0225.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST", dwFileAttributes=0x20) returned 0 [0225.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cb20) returned 1 Thread: id = 8432 os_tid = 0x201c [0220.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_m.vst")) returned 0x20 [0225.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST", dwFileAttributes=0x20) returned 0 [0225.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.736] GetLastError () returned 0x5 [0225.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST", dwFileAttributes=0x20) returned 0 [0225.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6340) returned 1 Thread: id = 8433 os_tid = 0x2038 [0220.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_u.vst")) returned 0x20 [0225.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST", dwFileAttributes=0x20) returned 0 [0225.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.764] GetLastError () returned 0x5 [0225.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST", dwFileAttributes=0x20) returned 0 [0225.764] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6700) returned 1 Thread: id = 8434 os_tid = 0x2618 [0220.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_m.vss")) returned 0x20 [0225.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS", dwFileAttributes=0x20) returned 0 [0225.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.765] GetLastError () returned 0x5 [0225.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS", dwFileAttributes=0x20) returned 0 [0225.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7880) returned 1 Thread: id = 8435 os_tid = 0x2628 [0220.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_u.vss")) returned 0x20 [0225.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS", dwFileAttributes=0x20) returned 0 [0225.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.737] GetLastError () returned 0x5 [0225.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS", dwFileAttributes=0x20) returned 0 [0225.737] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb74c0) returned 1 Thread: id = 8436 os_tid = 0x233c [0220.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_m.vss")) returned 0x20 [0225.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS", dwFileAttributes=0x20) returned 0 [0225.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.739] GetLastError () returned 0x5 [0225.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS", dwFileAttributes=0x20) returned 0 [0225.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7100) returned 1 Thread: id = 8437 os_tid = 0x2340 [0220.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_u.vss")) returned 0x20 [0225.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS", dwFileAttributes=0x20) returned 0 [0225.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.786] GetLastError () returned 0x5 [0225.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS", dwFileAttributes=0x20) returned 0 [0225.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6020) returned 1 Thread: id = 8438 os_tid = 0x2654 [0220.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_m.vss")) returned 0x20 [0225.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.788] GetLastError () returned 0x5 [0225.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6980) returned 1 Thread: id = 8439 os_tid = 0x265c [0220.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_u.vss")) returned 0x20 [0225.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.790] GetLastError () returned 0x5 [0225.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6480) returned 1 Thread: id = 8440 os_tid = 0x205c [0220.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_m.vss")) returned 0x20 [0225.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.791] GetLastError () returned 0x5 [0225.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.791] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7920) returned 1 Thread: id = 8441 os_tid = 0x2660 [0220.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_u.vss")) returned 0x20 [0225.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.793] GetLastError () returned 0x5 [0225.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.793] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63e0) returned 1 Thread: id = 8442 os_tid = 0x8fc [0220.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_m.vss")) returned 0x20 [0225.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.795] GetLastError () returned 0x5 [0225.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.795] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6660) returned 1 Thread: id = 8443 os_tid = 0x2778 [0221.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_u.vss")) returned 0x20 [0225.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.699] GetLastError () returned 0x5 [0225.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb60c0) returned 1 Thread: id = 8444 os_tid = 0x214c [0221.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_m.vst")) returned 0x20 [0225.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST", dwFileAttributes=0x20) returned 0 [0225.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.701] GetLastError () returned 0x5 [0225.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST", dwFileAttributes=0x20) returned 0 [0225.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb62a0) returned 1 Thread: id = 8445 os_tid = 0xa0c [0221.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_u.vst")) returned 0x20 [0225.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST", dwFileAttributes=0x20) returned 0 [0225.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.657] GetLastError () returned 0x5 [0225.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST", dwFileAttributes=0x20) returned 0 [0225.657] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6200) returned 1 Thread: id = 8446 os_tid = 0xa1c [0221.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_m.vst")) returned 0x20 [0225.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST", dwFileAttributes=0x20) returned 0 [0225.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.805] GetLastError () returned 0x5 [0225.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST", dwFileAttributes=0x20) returned 0 [0225.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6e80) returned 1 Thread: id = 8447 os_tid = 0x2158 [0221.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_u.vst")) returned 0x20 [0225.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST", dwFileAttributes=0x20) returned 0 [0225.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.806] GetLastError () returned 0x5 [0225.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST", dwFileAttributes=0x20) returned 0 [0225.806] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6f20) returned 1 Thread: id = 8448 os_tid = 0x219c [0221.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_m.vst")) returned 0x20 [0225.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST", dwFileAttributes=0x20) returned 0 [0225.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.808] GetLastError () returned 0x5 [0225.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST", dwFileAttributes=0x20) returned 0 [0225.808] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7420) returned 1 Thread: id = 8449 os_tid = 0xa2c [0221.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_u.vst")) returned 0x20 [0225.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST", dwFileAttributes=0x20) returned 0 [0225.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.663] GetLastError () returned 0x5 [0225.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST", dwFileAttributes=0x20) returned 0 [0225.663] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7380) returned 1 Thread: id = 8450 os_tid = 0x26b4 [0221.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_m.vss")) returned 0x20 [0225.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.664] GetLastError () returned 0x5 [0225.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb72e0) returned 1 Thread: id = 8451 os_tid = 0x1d94 [0221.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_u.vss")) returned 0x20 [0225.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.666] GetLastError () returned 0x5 [0225.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7240) returned 1 Thread: id = 8452 os_tid = 0x1084 [0221.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_m.vss")) returned 0x20 [0225.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS", dwFileAttributes=0x20) returned 0 [0225.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.667] GetLastError () returned 0x5 [0225.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS", dwFileAttributes=0x20) returned 0 [0225.667] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb71a0) returned 1 Thread: id = 8453 os_tid = 0x26b0 [0221.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_u.vss")) returned 0x20 [0225.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS", dwFileAttributes=0x20) returned 0 [0225.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.669] GetLastError () returned 0x5 [0225.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS", dwFileAttributes=0x20) returned 0 [0225.669] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6a20) returned 1 Thread: id = 8454 os_tid = 0x1d9c [0221.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_m.vss")) returned 0x20 [0225.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.670] GetLastError () returned 0x5 [0225.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc03e0) returned 1 Thread: id = 8455 os_tid = 0x1da0 [0221.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_u.vss")) returned 0x20 [0225.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.671] GetLastError () returned 0x5 [0225.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0480) returned 1 Thread: id = 8456 os_tid = 0x1da4 [0221.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_m.vss")) returned 0x20 [0225.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.673] GetLastError () returned 0x5 [0225.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0520) returned 1 Thread: id = 8457 os_tid = 0x1ae8 [0221.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_u.vss")) returned 0x20 [0225.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.658] GetLastError () returned 0x5 [0225.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc05c0) returned 1 Thread: id = 8458 os_tid = 0x1aec [0221.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_m.vst")) returned 0x20 [0225.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST", dwFileAttributes=0x20) returned 0 [0225.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.778] GetLastError () returned 0x5 [0225.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST", dwFileAttributes=0x20) returned 0 [0225.778] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d5d0) returned 1 Thread: id = 8459 os_tid = 0x1af8 [0221.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_u.vst")) returned 0x20 [0225.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST", dwFileAttributes=0x20) returned 0 [0225.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.674] GetLastError () returned 0x5 [0225.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST", dwFileAttributes=0x20) returned 0 [0225.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d538) returned 1 Thread: id = 8460 os_tid = 0x1afc [0221.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_m.vss")) returned 0x20 [0225.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS", dwFileAttributes=0x20) returned 0 [0225.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.659] GetLastError () returned 0x5 [0225.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS", dwFileAttributes=0x20) returned 0 [0225.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0660) returned 1 Thread: id = 8461 os_tid = 0x1d88 [0221.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_u.vss")) returned 0x20 [0225.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS", dwFileAttributes=0x20) returned 0 [0225.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.661] GetLastError () returned 0x5 [0225.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS", dwFileAttributes=0x20) returned 0 [0225.661] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0700) returned 1 Thread: id = 8462 os_tid = 0x1d98 [0221.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_m.vss")) returned 0x20 [0225.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS", dwFileAttributes=0x20) returned 0 [0225.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.779] GetLastError () returned 0x5 [0225.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS", dwFileAttributes=0x20) returned 0 [0225.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc07a0) returned 1 Thread: id = 8463 os_tid = 0x1bf8 [0221.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_u.vss")) returned 0x20 [0225.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS", dwFileAttributes=0x20) returned 0 [0225.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.781] GetLastError () returned 0x5 [0225.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS", dwFileAttributes=0x20) returned 0 [0225.781] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0840) returned 1 Thread: id = 8464 os_tid = 0x2550 [0221.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_m.vss")) returned 0x20 [0225.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.783] GetLastError () returned 0x5 [0225.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.783] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc08e0) returned 1 Thread: id = 8465 os_tid = 0x1a48 [0221.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_u.vss")) returned 0x20 [0225.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.785] GetLastError () returned 0x5 [0225.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.785] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0980) returned 1 Thread: id = 8466 os_tid = 0x1fec [0221.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeline.mpp")) returned 0x20 [0225.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP", dwFileAttributes=0x20) returned 0 [0225.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeline.mpp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.676] GetLastError () returned 0x5 [0225.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP", dwFileAttributes=0x20) returned 0 [0225.676] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0a20) returned 1 Thread: id = 8467 os_tid = 0xe80 [0221.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vss")) returned 0x20 [0225.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.677] GetLastError () returned 0x5 [0225.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0ac0) returned 1 Thread: id = 8468 os_tid = 0x254c [0221.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf")) returned 0x20 [0228.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF", dwFileAttributes=0x20) returned 0 [0228.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.842] GetLastError () returned 0x5 [0228.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF", dwFileAttributes=0x20) returned 0 [0228.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30633a0) returned 1 Thread: id = 8469 os_tid = 0x24c8 [0221.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg")) returned 0x20 [0228.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG", dwFileAttributes=0x20) returned 0 [0228.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.845] GetLastError () returned 0x5 [0228.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG", dwFileAttributes=0x20) returned 0 [0228.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 8470 os_tid = 0x2534 [0221.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf")) returned 0x20 [0228.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF", dwFileAttributes=0x20) returned 0 [0228.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.847] GetLastError () returned 0x5 [0228.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF", dwFileAttributes=0x20) returned 0 [0228.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062988) returned 1 Thread: id = 8471 os_tid = 0x253c [0221.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf")) returned 0x20 [0228.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF", dwFileAttributes=0x20) returned 0 [0228.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.848] GetLastError () returned 0x5 [0228.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF", dwFileAttributes=0x20) returned 0 [0228.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3063428) returned 1 Thread: id = 8472 os_tid = 0x2554 [0221.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf")) returned 0x20 [0228.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF", dwFileAttributes=0x20) returned 0 [0228.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.850] GetLastError () returned 0x5 [0228.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF", dwFileAttributes=0x20) returned 0 [0228.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a5f8) returned 1 Thread: id = 8473 os_tid = 0x2540 [0221.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf")) returned 0x20 [0228.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF", dwFileAttributes=0x20) returned 0 [0228.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.974] GetLastError () returned 0x5 [0228.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF", dwFileAttributes=0x20) returned 0 [0228.974] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099cf0) returned 1 Thread: id = 8474 os_tid = 0x2544 [0221.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf")) returned 0x20 [0226.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF", dwFileAttributes=0x20) returned 0 [0226.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.001] GetLastError () returned 0x5 [0227.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF", dwFileAttributes=0x20) returned 0 [0227.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a708) returned 1 Thread: id = 8475 os_tid = 0x2548 [0221.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf")) returned 0x20 [0228.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF", dwFileAttributes=0x20) returned 0 [0228.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.975] GetLastError () returned 0x5 [0228.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF", dwFileAttributes=0x20) returned 0 [0228.976] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a680) returned 1 Thread: id = 8476 os_tid = 0x1784 [0221.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf")) returned 0x20 [0228.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF", dwFileAttributes=0x20) returned 0 [0228.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.977] GetLastError () returned 0x5 [0228.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF", dwFileAttributes=0x20) returned 0 [0228.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62090) returned 1 Thread: id = 8477 os_tid = 0xbd4 [0221.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf")) returned 0x20 [0228.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF", dwFileAttributes=0x20) returned 0 [0228.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.979] GetLastError () returned 0x5 [0228.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF", dwFileAttributes=0x20) returned 0 [0228.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62118) returned 1 Thread: id = 8478 os_tid = 0x1860 [0221.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf")) returned 0x20 [0228.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF", dwFileAttributes=0x20) returned 0 [0228.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.981] GetLastError () returned 0x5 [0228.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF", dwFileAttributes=0x20) returned 0 [0228.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a621a0) returned 1 Thread: id = 8479 os_tid = 0x1d84 [0221.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg")) returned 0x20 [0228.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG", dwFileAttributes=0x20) returned 0 [0228.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.852] GetLastError () returned 0x5 [0228.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG", dwFileAttributes=0x20) returned 0 [0228.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62228) returned 1 Thread: id = 8480 os_tid = 0x1e54 [0221.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg")) returned 0x20 [0228.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG", dwFileAttributes=0x20) returned 0 [0228.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.854] GetLastError () returned 0x5 [0228.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG", dwFileAttributes=0x20) returned 0 [0228.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a622b0) returned 1 Thread: id = 8481 os_tid = 0x1e58 [0221.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg")) returned 0x20 [0228.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG", dwFileAttributes=0x20) returned 0 [0228.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.855] GetLastError () returned 0x5 [0228.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG", dwFileAttributes=0x20) returned 0 [0228.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62338) returned 1 Thread: id = 8482 os_tid = 0x1d04 [0221.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg")) returned 0x20 [0228.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG", dwFileAttributes=0x20) returned 0 [0228.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.857] GetLastError () returned 0x5 [0228.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG", dwFileAttributes=0x20) returned 0 [0228.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a623c0) returned 1 Thread: id = 8483 os_tid = 0x1d08 [0221.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg")) returned 0x20 [0228.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG", dwFileAttributes=0x20) returned 0 [0228.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.858] GetLastError () returned 0x5 [0228.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG", dwFileAttributes=0x20) returned 0 [0228.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62448) returned 1 Thread: id = 8484 os_tid = 0x1ba0 [0221.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg")) returned 0x20 [0228.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG", dwFileAttributes=0x20) returned 0 [0228.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.860] GetLastError () returned 0x5 [0228.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG", dwFileAttributes=0x20) returned 0 [0228.860] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a624d0) returned 1 Thread: id = 8485 os_tid = 0x1df8 [0221.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg")) returned 0x20 [0227.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG", dwFileAttributes=0x20) returned 0 [0227.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.418] GetLastError () returned 0x5 [0227.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG", dwFileAttributes=0x20) returned 0 [0227.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62558) returned 1 Thread: id = 8486 os_tid = 0x132c [0221.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg")) returned 0x20 [0227.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG", dwFileAttributes=0x20) returned 0 [0227.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0227.506] GetLastError () returned 0x5 [0227.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG", dwFileAttributes=0x20) returned 0 [0227.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a625e0) returned 1 Thread: id = 8487 os_tid = 0x730 [0221.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg")) returned 0x20 [0227.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG", dwFileAttributes=0x20) returned 0 [0227.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.752] GetLastError () returned 0x5 [0228.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG", dwFileAttributes=0x20) returned 0 [0228.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62668) returned 1 Thread: id = 8488 os_tid = 0xb04 [0221.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg")) returned 0x20 [0227.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG", dwFileAttributes=0x20) returned 0 [0227.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.754] GetLastError () returned 0x5 [0228.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG", dwFileAttributes=0x20) returned 0 [0228.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a626f0) returned 1 Thread: id = 8489 os_tid = 0x172c [0221.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg")) returned 0x20 [0228.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG", dwFileAttributes=0x20) returned 0 [0228.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.835] GetLastError () returned 0x5 [0228.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG", dwFileAttributes=0x20) returned 0 [0228.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62778) returned 1 Thread: id = 8490 os_tid = 0x1f08 [0221.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg")) returned 0x20 [0228.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG", dwFileAttributes=0x20) returned 0 [0228.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.836] GetLastError () returned 0x5 [0228.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG", dwFileAttributes=0x20) returned 0 [0228.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62800) returned 1 Thread: id = 8491 os_tid = 0x2380 [0221.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg")) returned 0x20 [0228.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG", dwFileAttributes=0x20) returned 0 [0228.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.967] GetLastError () returned 0x5 [0228.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG", dwFileAttributes=0x20) returned 0 [0228.967] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62888) returned 1 Thread: id = 8492 os_tid = 0x1f10 [0221.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg")) returned 0x20 [0228.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG", dwFileAttributes=0x20) returned 0 [0228.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.969] GetLastError () returned 0x5 [0228.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG", dwFileAttributes=0x20) returned 0 [0228.969] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62910) returned 1 Thread: id = 8493 os_tid = 0x26dc [0221.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf")) returned 0x20 [0228.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF", dwFileAttributes=0x20) returned 0 [0228.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.970] GetLastError () returned 0x5 [0228.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF", dwFileAttributes=0x20) returned 0 [0228.971] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62998) returned 1 Thread: id = 8494 os_tid = 0x1f14 [0221.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf")) returned 0x20 [0228.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF", dwFileAttributes=0x20) returned 0 [0228.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.972] GetLastError () returned 0x5 [0228.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF", dwFileAttributes=0x20) returned 0 [0228.972] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62a20) returned 1 Thread: id = 8495 os_tid = 0x1f2c [0221.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf")) returned 0x20 [0228.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF", dwFileAttributes=0x20) returned 0 [0228.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.927] GetLastError () returned 0x5 [0228.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF", dwFileAttributes=0x20) returned 0 [0228.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62aa8) returned 1 Thread: id = 8496 os_tid = 0x2044 [0221.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vst")) returned 0x20 [0225.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST", dwFileAttributes=0x20) returned 0 [0225.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.695] GetLastError () returned 0x5 [0225.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST", dwFileAttributes=0x20) returned 0 [0225.695] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0b60) returned 1 Thread: id = 8497 os_tid = 0x20c4 [0221.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vss")) returned 0x20 [0225.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.697] GetLastError () returned 0x5 [0225.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.697] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0c00) returned 1 Thread: id = 8498 os_tid = 0x2134 [0221.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vst")) returned 0x20 [0225.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST", dwFileAttributes=0x20) returned 0 [0225.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.698] GetLastError () returned 0x5 [0225.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST", dwFileAttributes=0x20) returned 0 [0225.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0ca0) returned 1 Thread: id = 8499 os_tid = 0x1394 [0221.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_m.vss")) returned 0x20 [0225.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS", dwFileAttributes=0x20) returned 0 [0225.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.685] GetLastError () returned 0x5 [0225.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS", dwFileAttributes=0x20) returned 0 [0225.685] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0d40) returned 1 Thread: id = 8500 os_tid = 0x126c [0221.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_u.vss")) returned 0x20 [0225.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS", dwFileAttributes=0x20) returned 0 [0225.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.686] GetLastError () returned 0x5 [0225.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS", dwFileAttributes=0x20) returned 0 [0225.687] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0de0) returned 1 Thread: id = 8501 os_tid = 0x1270 [0221.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vss")) returned 0x20 [0225.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS", dwFileAttributes=0x20) returned 0 [0225.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.688] GetLastError () returned 0x5 [0225.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS", dwFileAttributes=0x20) returned 0 [0225.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d2d8) returned 1 Thread: id = 8502 os_tid = 0x1274 [0221.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vst")) returned 0x20 [0225.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST", dwFileAttributes=0x20) returned 0 [0225.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.689] GetLastError () returned 0x5 [0225.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST", dwFileAttributes=0x20) returned 0 [0225.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ca88) returned 1 Thread: id = 8503 os_tid = 0x1278 [0221.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vss")) returned 0x20 [0225.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS", dwFileAttributes=0x20) returned 0 [0225.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.691] GetLastError () returned 0x5 [0225.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS", dwFileAttributes=0x20) returned 0 [0225.691] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d078) returned 1 Thread: id = 8504 os_tid = 0x127c [0221.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vst")) returned 0x20 [0225.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST", dwFileAttributes=0x20) returned 0 [0225.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.692] GetLastError () returned 0x5 [0225.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST", dwFileAttributes=0x20) returned 0 [0225.692] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32cc50) returned 1 Thread: id = 8505 os_tid = 0x2164 [0221.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf")) returned 0x20 [0228.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF", dwFileAttributes=0x20) returned 0 [0228.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.929] GetLastError () returned 0x5 [0228.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF", dwFileAttributes=0x20) returned 0 [0228.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62b30) returned 1 Thread: id = 8506 os_tid = 0x2168 [0221.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf")) returned 0x20 [0228.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF", dwFileAttributes=0x20) returned 0 [0228.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.930] GetLastError () returned 0x5 [0228.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF", dwFileAttributes=0x20) returned 0 [0228.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62bb8) returned 1 Thread: id = 8507 os_tid = 0x1284 [0221.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf")) returned 0x20 [0228.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF", dwFileAttributes=0x20) returned 0 [0228.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.924] GetLastError () returned 0x5 [0228.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF", dwFileAttributes=0x20) returned 0 [0228.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62c40) returned 1 Thread: id = 8508 os_tid = 0x1288 [0221.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf")) returned 0x20 [0228.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF", dwFileAttributes=0x20) returned 0 [0228.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.932] GetLastError () returned 0x5 [0228.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF", dwFileAttributes=0x20) returned 0 [0228.932] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62cc8) returned 1 Thread: id = 8509 os_tid = 0x128c [0221.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf")) returned 0x20 [0221.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF", dwFileAttributes=0x20) returned 0 [0221.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.943] GetLastError () returned 0x5 [0221.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF", dwFileAttributes=0x20) returned 0 [0221.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62d50) returned 1 Thread: id = 8510 os_tid = 0x250c [0221.281] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf")) returned 0x20 [0228.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF", dwFileAttributes=0x20) returned 0 [0228.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.925] GetLastError () returned 0x5 [0228.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF", dwFileAttributes=0x20) returned 0 [0228.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62dd8) returned 1 Thread: id = 8511 os_tid = 0x1290 [0221.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf")) returned 0x20 [0228.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF", dwFileAttributes=0x20) returned 0 [0228.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.959] GetLastError () returned 0x5 [0228.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF", dwFileAttributes=0x20) returned 0 [0228.959] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62e60) returned 1 Thread: id = 8512 os_tid = 0x1294 [0221.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf")) returned 0x20 [0228.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF", dwFileAttributes=0x20) returned 0 [0228.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.961] GetLastError () returned 0x5 [0228.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF", dwFileAttributes=0x20) returned 0 [0228.961] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62ee8) returned 1 Thread: id = 8513 os_tid = 0x1298 [0221.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf")) returned 0x20 [0228.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF", dwFileAttributes=0x20) returned 0 [0228.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.962] GetLastError () returned 0x5 [0228.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF", dwFileAttributes=0x20) returned 0 [0228.963] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62f70) returned 1 Thread: id = 8514 os_tid = 0x3c8 [0221.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf")) returned 0x20 [0228.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF", dwFileAttributes=0x20) returned 0 [0228.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.964] GetLastError () returned 0x5 [0228.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF", dwFileAttributes=0x20) returned 0 [0228.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62ff8) returned 1 Thread: id = 8515 os_tid = 0xf64 [0221.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf")) returned 0x20 [0228.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF", dwFileAttributes=0x20) returned 0 [0228.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.895] GetLastError () returned 0x5 [0228.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF", dwFileAttributes=0x20) returned 0 [0228.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63080) returned 1 Thread: id = 8516 os_tid = 0x1dd0 [0221.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf")) returned 0x20 [0228.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF", dwFileAttributes=0x20) returned 0 [0228.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.862] GetLastError () returned 0x5 [0228.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF", dwFileAttributes=0x20) returned 0 [0228.862] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63108) returned 1 Thread: id = 8517 os_tid = 0x74c [0221.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf")) returned 0x20 [0228.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF", dwFileAttributes=0x20) returned 0 [0228.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.863] GetLastError () returned 0x5 [0228.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF", dwFileAttributes=0x20) returned 0 [0228.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63190) returned 1 Thread: id = 8518 os_tid = 0xb00 [0221.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf")) returned 0x20 [0228.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF", dwFileAttributes=0x20) returned 0 [0228.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.865] GetLastError () returned 0x5 [0228.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF", dwFileAttributes=0x20) returned 0 [0228.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63218) returned 1 Thread: id = 8519 os_tid = 0x1804 [0221.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf")) returned 0x20 [0228.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF", dwFileAttributes=0x20) returned 0 [0228.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.866] GetLastError () returned 0x5 [0228.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF", dwFileAttributes=0x20) returned 0 [0228.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a632a0) returned 1 Thread: id = 8520 os_tid = 0x2384 [0221.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf")) returned 0x20 [0228.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF", dwFileAttributes=0x20) returned 0 [0228.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.868] GetLastError () returned 0x5 [0228.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF", dwFileAttributes=0x20) returned 0 [0228.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63328) returned 1 Thread: id = 8521 os_tid = 0x216c [0221.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf")) returned 0x20 [0228.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF", dwFileAttributes=0x20) returned 0 [0228.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.869] GetLastError () returned 0x5 [0228.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF", dwFileAttributes=0x20) returned 0 [0228.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a633b0) returned 1 Thread: id = 8522 os_tid = 0x2170 [0221.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf")) returned 0x20 [0228.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF", dwFileAttributes=0x20) returned 0 [0228.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.871] GetLastError () returned 0x5 [0228.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF", dwFileAttributes=0x20) returned 0 [0228.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63438) returned 1 Thread: id = 8523 os_tid = 0x2174 [0221.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf")) returned 0x20 [0228.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF", dwFileAttributes=0x20) returned 0 [0228.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.872] GetLastError () returned 0x5 [0228.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF", dwFileAttributes=0x20) returned 0 [0228.873] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a634c0) returned 1 Thread: id = 8524 os_tid = 0x2178 [0221.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf")) returned 0x20 [0228.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF", dwFileAttributes=0x20) returned 0 [0228.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.874] GetLastError () returned 0x5 [0228.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF", dwFileAttributes=0x20) returned 0 [0228.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63548) returned 1 Thread: id = 8525 os_tid = 0x2180 [0221.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf")) returned 0x20 [0228.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF", dwFileAttributes=0x20) returned 0 [0228.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.919] GetLastError () returned 0x5 [0228.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF", dwFileAttributes=0x20) returned 0 [0228.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a635d0) returned 1 Thread: id = 8526 os_tid = 0x2184 [0221.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf")) returned 0x20 [0228.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF", dwFileAttributes=0x20) returned 0 [0228.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.965] GetLastError () returned 0x5 [0228.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF", dwFileAttributes=0x20) returned 0 [0228.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63658) returned 1 Thread: id = 8527 os_tid = 0x2188 [0221.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf")) returned 0x20 [0228.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF", dwFileAttributes=0x20) returned 0 [0228.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.921] GetLastError () returned 0x5 [0228.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF", dwFileAttributes=0x20) returned 0 [0228.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a636e0) returned 1 Thread: id = 8528 os_tid = 0x1808 [0221.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf")) returned 0x20 [0228.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF", dwFileAttributes=0x20) returned 0 [0228.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.922] GetLastError () returned 0x5 [0228.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF", dwFileAttributes=0x20) returned 0 [0228.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63768) returned 1 Thread: id = 8529 os_tid = 0x180c [0221.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf")) returned 0x20 [0228.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF", dwFileAttributes=0x20) returned 0 [0228.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.934] GetLastError () returned 0x5 [0228.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF", dwFileAttributes=0x20) returned 0 [0228.934] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a637f0) returned 1 Thread: id = 8530 os_tid = 0x1810 [0221.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf")) returned 0x20 [0228.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF", dwFileAttributes=0x20) returned 0 [0228.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.935] GetLastError () returned 0x5 [0228.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF", dwFileAttributes=0x20) returned 0 [0228.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63878) returned 1 Thread: id = 8531 os_tid = 0x218c [0221.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf")) returned 0x20 [0228.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF", dwFileAttributes=0x20) returned 0 [0228.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.937] GetLastError () returned 0x5 [0228.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF", dwFileAttributes=0x20) returned 0 [0228.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63900) returned 1 Thread: id = 8532 os_tid = 0x2388 [0221.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf")) returned 0x20 [0228.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF", dwFileAttributes=0x20) returned 0 [0228.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.938] GetLastError () returned 0x5 [0228.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF", dwFileAttributes=0x20) returned 0 [0228.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63988) returned 1 Thread: id = 8533 os_tid = 0x19e8 [0221.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf")) returned 0x20 [0228.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF", dwFileAttributes=0x20) returned 0 [0228.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.940] GetLastError () returned 0x5 [0228.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF", dwFileAttributes=0x20) returned 0 [0228.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63a10) returned 1 Thread: id = 8534 os_tid = 0xb98 [0221.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf")) returned 0x20 [0228.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF", dwFileAttributes=0x20) returned 0 [0228.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.941] GetLastError () returned 0x5 [0228.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF", dwFileAttributes=0x20) returned 0 [0228.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63a98) returned 1 Thread: id = 8535 os_tid = 0x1758 [0221.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf")) returned 0x20 [0228.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF", dwFileAttributes=0x20) returned 0 [0228.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.900] GetLastError () returned 0x5 [0228.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF", dwFileAttributes=0x20) returned 0 [0228.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63b20) returned 1 Thread: id = 8536 os_tid = 0x21a4 [0221.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf")) returned 0x20 [0228.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF", dwFileAttributes=0x20) returned 0 [0228.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.902] GetLastError () returned 0x5 [0228.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF", dwFileAttributes=0x20) returned 0 [0228.902] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63ba8) returned 1 Thread: id = 8537 os_tid = 0x1214 [0221.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf")) returned 0x20 [0228.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF", dwFileAttributes=0x20) returned 0 [0228.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.904] GetLastError () returned 0x5 [0228.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF", dwFileAttributes=0x20) returned 0 [0228.904] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63c30) returned 1 Thread: id = 8538 os_tid = 0xe1c [0221.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf")) returned 0x20 [0228.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF", dwFileAttributes=0x20) returned 0 [0228.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.905] GetLastError () returned 0x5 [0228.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF", dwFileAttributes=0x20) returned 0 [0228.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63cb8) returned 1 Thread: id = 8539 os_tid = 0xdec [0221.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf")) returned 0x20 [0228.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF", dwFileAttributes=0x20) returned 0 [0228.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.907] GetLastError () returned 0x5 [0228.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF", dwFileAttributes=0x20) returned 0 [0228.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63d40) returned 1 Thread: id = 8540 os_tid = 0x14ac [0221.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf")) returned 0x20 [0228.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF", dwFileAttributes=0x20) returned 0 [0228.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.908] GetLastError () returned 0x5 [0228.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF", dwFileAttributes=0x20) returned 0 [0228.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63dc8) returned 1 Thread: id = 8541 os_tid = 0x14c0 [0221.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf")) returned 0x20 [0228.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF", dwFileAttributes=0x20) returned 0 [0228.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.910] GetLastError () returned 0x5 [0228.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF", dwFileAttributes=0x20) returned 0 [0228.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63e50) returned 1 Thread: id = 8542 os_tid = 0x14c4 [0221.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf")) returned 0x20 [0228.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF", dwFileAttributes=0x20) returned 0 [0228.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.911] GetLastError () returned 0x5 [0228.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF", dwFileAttributes=0x20) returned 0 [0228.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63ed8) returned 1 Thread: id = 8543 os_tid = 0x14c8 [0221.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf")) returned 0x20 [0228.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF", dwFileAttributes=0x20) returned 0 [0228.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.917] GetLastError () returned 0x5 [0228.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF", dwFileAttributes=0x20) returned 0 [0228.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63f60) returned 1 Thread: id = 8544 os_tid = 0x1868 [0221.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf")) returned 0x20 [0228.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF", dwFileAttributes=0x20) returned 0 [0228.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.958] GetLastError () returned 0x5 [0228.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF", dwFileAttributes=0x20) returned 0 [0228.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a63fe8) returned 1 Thread: id = 8545 os_tid = 0x14cc [0221.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_m.vss")) returned 0x20 [0225.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.811] GetLastError () returned 0x5 [0225.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0e80) returned 1 Thread: id = 8546 os_tid = 0x14d0 [0221.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_u.vss")) returned 0x20 [0225.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.809] GetLastError () returned 0x5 [0225.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0f20) returned 1 Thread: id = 8547 os_tid = 0x14d4 [0221.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_m.vss")) returned 0x20 [0225.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.831] GetLastError () returned 0x5 [0225.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.831] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0fc0) returned 1 Thread: id = 8548 os_tid = 0x14d8 [0221.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_u.vss")) returned 0x20 [0225.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.830] GetLastError () returned 0x5 [0225.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1060) returned 1 Thread: id = 8549 os_tid = 0x2250 [0221.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_m.vss")) returned 0x20 [0225.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.828] GetLastError () returned 0x5 [0225.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1100) returned 1 Thread: id = 8550 os_tid = 0x1964 [0221.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_u.vss")) returned 0x20 [0225.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.826] GetLastError () returned 0x5 [0225.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc11a0) returned 1 Thread: id = 8551 os_tid = 0x1968 [0221.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_m.vss")) returned 0x20 [0225.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS", dwFileAttributes=0x20) returned 0 [0225.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.825] GetLastError () returned 0x5 [0225.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS", dwFileAttributes=0x20) returned 0 [0225.825] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1240) returned 1 Thread: id = 8552 os_tid = 0x196c [0221.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_u.vss")) returned 0x20 [0225.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS", dwFileAttributes=0x20) returned 0 [0225.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.823] GetLastError () returned 0x5 [0225.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS", dwFileAttributes=0x20) returned 0 [0225.823] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc12e0) returned 1 Thread: id = 8553 os_tid = 0x1970 [0221.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_m.vss")) returned 0x20 [0225.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.821] GetLastError () returned 0x5 [0225.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1380) returned 1 Thread: id = 8554 os_tid = 0x1974 [0221.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_u.vss")) returned 0x20 [0225.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.819] GetLastError () returned 0x5 [0225.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.819] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1420) returned 1 Thread: id = 8555 os_tid = 0x1978 [0221.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd")) returned 0x20 [0225.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD", dwFileAttributes=0x20) returned 0 [0225.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.817] GetLastError () returned 0x5 [0225.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD", dwFileAttributes=0x20) returned 0 [0225.817] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc14c0) returned 1 Thread: id = 8556 os_tid = 0x197c [0221.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd")) returned 0x20 [0225.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD", dwFileAttributes=0x20) returned 0 [0225.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.816] GetLastError () returned 0x5 [0225.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD", dwFileAttributes=0x20) returned 0 [0225.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1560) returned 1 Thread: id = 8557 os_tid = 0x21a8 [0221.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_m.vst")) returned 0x20 [0225.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST", dwFileAttributes=0x20) returned 0 [0225.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.814] GetLastError () returned 0x5 [0225.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST", dwFileAttributes=0x20) returned 0 [0225.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1600) returned 1 Thread: id = 8558 os_tid = 0x22c [0221.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_u.vst")) returned 0x20 [0225.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST", dwFileAttributes=0x20) returned 0 [0225.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.812] GetLastError () returned 0x5 [0225.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST", dwFileAttributes=0x20) returned 0 [0225.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc16a0) returned 1 Thread: id = 8559 os_tid = 0x2264 [0221.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_m.vss")) returned 0x20 [0225.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS", dwFileAttributes=0x20) returned 0 [0225.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.747] GetLastError () returned 0x5 [0225.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS", dwFileAttributes=0x20) returned 0 [0225.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1740) returned 1 Thread: id = 8560 os_tid = 0x1980 [0221.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_u.vss")) returned 0x20 [0225.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS", dwFileAttributes=0x20) returned 0 [0225.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.745] GetLastError () returned 0x5 [0225.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS", dwFileAttributes=0x20) returned 0 [0225.746] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc17e0) returned 1 Thread: id = 8561 os_tid = 0x1984 [0221.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_m.vss")) returned 0x20 [0225.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS", dwFileAttributes=0x20) returned 0 [0225.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.744] GetLastError () returned 0x5 [0225.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS", dwFileAttributes=0x20) returned 0 [0225.744] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1880) returned 1 Thread: id = 8562 os_tid = 0x1988 [0221.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_u.vss")) returned 0x20 [0225.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS", dwFileAttributes=0x20) returned 0 [0225.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.742] GetLastError () returned 0x5 [0225.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS", dwFileAttributes=0x20) returned 0 [0225.742] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1920) returned 1 Thread: id = 8563 os_tid = 0x198c [0221.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_m.vss")) returned 0x20 [0225.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.741] GetLastError () returned 0x5 [0225.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc19c0) returned 1 Thread: id = 8564 os_tid = 0x1888 [0221.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_u.vss")) returned 0x20 [0225.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.852] GetLastError () returned 0x5 [0225.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.852] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1a60) returned 1 Thread: id = 8565 os_tid = 0x1890 [0221.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_m.vss")) returned 0x20 [0225.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS", dwFileAttributes=0x20) returned 0 [0225.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.868] GetLastError () returned 0x5 [0225.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS", dwFileAttributes=0x20) returned 0 [0225.869] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1b00) returned 1 Thread: id = 8566 os_tid = 0x1990 [0221.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_u.vss")) returned 0x20 [0225.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS", dwFileAttributes=0x20) returned 0 [0225.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.867] GetLastError () returned 0x5 [0225.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS", dwFileAttributes=0x20) returned 0 [0225.867] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1ba0) returned 1 Thread: id = 8567 os_tid = 0x1994 [0221.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_m.vss")) returned 0x20 [0225.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS", dwFileAttributes=0x20) returned 0 [0225.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.864] GetLastError () returned 0x5 [0225.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS", dwFileAttributes=0x20) returned 0 [0225.865] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1c40) returned 1 Thread: id = 8568 os_tid = 0x1998 [0221.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_u.vss")) returned 0x20 [0225.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS", dwFileAttributes=0x20) returned 0 [0225.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.863] GetLastError () returned 0x5 [0225.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS", dwFileAttributes=0x20) returned 0 [0225.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1ce0) returned 1 Thread: id = 8569 os_tid = 0x199c [0221.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_m.vss")) returned 0x20 [0225.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS", dwFileAttributes=0x20) returned 0 [0225.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.861] GetLastError () returned 0x5 [0225.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS", dwFileAttributes=0x20) returned 0 [0225.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1d80) returned 1 Thread: id = 8570 os_tid = 0xba4 [0221.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_u.vss")) returned 0x20 [0225.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS", dwFileAttributes=0x20) returned 0 [0225.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.859] GetLastError () returned 0x5 [0225.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS", dwFileAttributes=0x20) returned 0 [0225.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1e20) returned 1 Thread: id = 8571 os_tid = 0x19a0 [0221.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_m.vss")) returned 0x20 [0225.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.850] GetLastError () returned 0x5 [0225.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.850] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1ec0) returned 1 Thread: id = 8572 os_tid = 0x774 [0221.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_u.vss")) returned 0x20 [0225.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.848] GetLastError () returned 0x5 [0225.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.848] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1f60) returned 1 Thread: id = 8573 os_tid = 0x2224 [0221.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_m.vss")) returned 0x20 [0225.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.857] GetLastError () returned 0x5 [0225.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.858] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4460) returned 1 Thread: id = 8574 os_tid = 0x644 [0221.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_u.vss")) returned 0x20 [0225.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.846] GetLastError () returned 0x5 [0225.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.846] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4be0) returned 1 Thread: id = 8575 os_tid = 0x23f8 [0221.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vss")) returned 0x20 [0225.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS", dwFileAttributes=0x20) returned 0 [0225.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.844] GetLastError () returned 0x5 [0225.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS", dwFileAttributes=0x20) returned 0 [0225.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c660) returned 1 Thread: id = 8576 os_tid = 0x3ec [0221.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vst")) returned 0x20 [0225.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST", dwFileAttributes=0x20) returned 0 [0225.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.856] GetLastError () returned 0x5 [0225.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST", dwFileAttributes=0x20) returned 0 [0225.856] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32c9f0) returned 1 Thread: id = 8577 os_tid = 0xfb8 [0221.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vss")) returned 0x20 [0225.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS", dwFileAttributes=0x20) returned 0 [0225.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.854] GetLastError () returned 0x5 [0225.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS", dwFileAttributes=0x20) returned 0 [0225.854] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32ceb0) returned 1 Thread: id = 8578 os_tid = 0x2268 [0221.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vst")) returned 0x20 [0225.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST", dwFileAttributes=0x20) returned 0 [0225.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.843] GetLastError () returned 0x5 [0225.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST", dwFileAttributes=0x20) returned 0 [0225.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x32d408) returned 1 Thread: id = 8579 os_tid = 0x226c [0221.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_m.vss")) returned 0x20 [0225.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS", dwFileAttributes=0x20) returned 0 [0225.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.837] GetLastError () returned 0x5 [0225.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS", dwFileAttributes=0x20) returned 0 [0225.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df61c0) returned 1 Thread: id = 8580 os_tid = 0x19a4 [0221.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_u.vss")) returned 0x20 [0225.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS", dwFileAttributes=0x20) returned 0 [0225.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.870] GetLastError () returned 0x5 [0225.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS", dwFileAttributes=0x20) returned 0 [0225.871] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5c20) returned 1 Thread: id = 8581 os_tid = 0x2270 [0221.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_m.vss")) returned 0x20 [0225.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.874] GetLastError () returned 0x5 [0225.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5220) returned 1 Thread: id = 8582 os_tid = 0x2274 [0221.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_u.vss")) returned 0x20 [0225.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.834] GetLastError () returned 0x5 [0225.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.835] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df57c0) returned 1 Thread: id = 8583 os_tid = 0x2278 [0221.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vss")) returned 0x20 [0225.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.833] GetLastError () returned 0x5 [0225.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.833] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4dc0) returned 1 Thread: id = 8584 os_tid = 0x227c [0221.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vst")) returned 0x20 [0225.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST", dwFileAttributes=0x20) returned 0 [0225.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.872] GetLastError () returned 0x5 [0225.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST", dwFileAttributes=0x20) returned 0 [0225.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5a40) returned 1 Thread: id = 8585 os_tid = 0x1828 [0221.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vss")) returned 0x20 [0225.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.903] GetLastError () returned 0x5 [0225.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4d20) returned 1 Thread: id = 8586 os_tid = 0x1850 [0221.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf")) returned 0x20 [0228.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF", dwFileAttributes=0x20) returned 0 [0228.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.851] GetLastError () returned 0x5 [0228.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF", dwFileAttributes=0x20) returned 0 [0228.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac020) returned 1 Thread: id = 8587 os_tid = 0x1854 [0221.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf")) returned 0x20 [0228.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF", dwFileAttributes=0x20) returned 0 [0228.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.885] GetLastError () returned 0x5 [0228.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF", dwFileAttributes=0x20) returned 0 [0228.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac0a8) returned 1 Thread: id = 8588 os_tid = 0x1858 [0221.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf")) returned 0x20 [0228.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF", dwFileAttributes=0x20) returned 0 [0228.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.888] GetLastError () returned 0x5 [0228.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF", dwFileAttributes=0x20) returned 0 [0228.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac130) returned 1 Thread: id = 8589 os_tid = 0x185c [0221.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf")) returned 0x20 [0227.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF", dwFileAttributes=0x20) returned 0 [0227.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.820] GetLastError () returned 0x5 [0228.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF", dwFileAttributes=0x20) returned 0 [0228.821] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac1b8) returned 1 Thread: id = 8590 os_tid = 0xf0c [0221.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf")) returned 0x20 [0228.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF", dwFileAttributes=0x20) returned 0 [0228.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.889] GetLastError () returned 0x5 [0228.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF", dwFileAttributes=0x20) returned 0 [0228.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac240) returned 1 Thread: id = 8591 os_tid = 0x2c0 [0221.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf")) returned 0x20 [0228.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF", dwFileAttributes=0x20) returned 0 [0228.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.811] GetLastError () returned 0x5 [0228.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF", dwFileAttributes=0x20) returned 0 [0228.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac2c8) returned 1 Thread: id = 8592 os_tid = 0x3f4 [0221.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf")) returned 0x20 [0228.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF", dwFileAttributes=0x20) returned 0 [0228.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.891] GetLastError () returned 0x5 [0228.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF", dwFileAttributes=0x20) returned 0 [0228.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac350) returned 1 Thread: id = 8593 os_tid = 0xad0 [0221.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf")) returned 0x20 [0228.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF", dwFileAttributes=0x20) returned 0 [0228.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.822] GetLastError () returned 0x5 [0228.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF", dwFileAttributes=0x20) returned 0 [0228.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac3d8) returned 1 Thread: id = 8594 os_tid = 0xacc [0221.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf")) returned 0x20 [0228.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF", dwFileAttributes=0x20) returned 0 [0228.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.823] GetLastError () returned 0x5 [0228.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF", dwFileAttributes=0x20) returned 0 [0228.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac460) returned 1 Thread: id = 8595 os_tid = 0xac8 [0221.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf")) returned 0x20 [0228.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF", dwFileAttributes=0x20) returned 0 [0228.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.826] GetLastError () returned 0x5 [0228.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF", dwFileAttributes=0x20) returned 0 [0228.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac4e8) returned 1 Thread: id = 8596 os_tid = 0xb14 [0221.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf")) returned 0x20 [0228.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF", dwFileAttributes=0x20) returned 0 [0228.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.876] GetLastError () returned 0x5 [0228.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF", dwFileAttributes=0x20) returned 0 [0228.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac570) returned 1 Thread: id = 8597 os_tid = 0x308 [0221.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf")) returned 0x20 [0228.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF", dwFileAttributes=0x20) returned 0 [0228.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.878] GetLastError () returned 0x5 [0228.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF", dwFileAttributes=0x20) returned 0 [0228.878] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac5f8) returned 1 Thread: id = 8598 os_tid = 0xb44 [0221.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf")) returned 0x20 [0228.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF", dwFileAttributes=0x20) returned 0 [0228.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.892] GetLastError () returned 0x5 [0228.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF", dwFileAttributes=0x20) returned 0 [0228.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac680) returned 1 Thread: id = 8599 os_tid = 0xb78 [0221.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf")) returned 0x20 [0228.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF", dwFileAttributes=0x20) returned 0 [0228.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.879] GetLastError () returned 0x5 [0228.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF", dwFileAttributes=0x20) returned 0 [0228.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac708) returned 1 Thread: id = 8600 os_tid = 0xbc0 [0221.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf")) returned 0x20 [0228.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF", dwFileAttributes=0x20) returned 0 [0228.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.881] GetLastError () returned 0x5 [0228.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF", dwFileAttributes=0x20) returned 0 [0228.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac790) returned 1 Thread: id = 8601 os_tid = 0x1864 [0221.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf")) returned 0x20 [0228.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF", dwFileAttributes=0x20) returned 0 [0228.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.882] GetLastError () returned 0x5 [0228.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF", dwFileAttributes=0x20) returned 0 [0228.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac818) returned 1 Thread: id = 8602 os_tid = 0x186c [0221.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf")) returned 0x20 [0228.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF", dwFileAttributes=0x20) returned 0 [0228.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.884] GetLastError () returned 0x5 [0228.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF", dwFileAttributes=0x20) returned 0 [0228.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac8a0) returned 1 Thread: id = 8603 os_tid = 0x1870 [0221.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf")) returned 0x20 [0228.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF", dwFileAttributes=0x20) returned 0 [0228.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.838] GetLastError () returned 0x5 [0228.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF", dwFileAttributes=0x20) returned 0 [0228.838] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac928) returned 1 Thread: id = 8604 os_tid = 0x1878 [0221.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf")) returned 0x20 [0228.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF", dwFileAttributes=0x20) returned 0 [0228.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.839] GetLastError () returned 0x5 [0228.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF", dwFileAttributes=0x20) returned 0 [0228.840] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cac9b0) returned 1 Thread: id = 8605 os_tid = 0x187c [0221.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf")) returned 0x20 [0228.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF", dwFileAttributes=0x20) returned 0 [0228.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.841] GetLastError () returned 0x5 [0228.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF", dwFileAttributes=0x20) returned 0 [0228.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7caca38) returned 1 Thread: id = 8606 os_tid = 0x1c90 [0221.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf")) returned 0x20 [0228.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF", dwFileAttributes=0x20) returned 0 [0228.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.950] GetLastError () returned 0x5 [0228.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF", dwFileAttributes=0x20) returned 0 [0228.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacac0) returned 1 Thread: id = 8607 os_tid = 0x19e4 [0221.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vst")) returned 0x20 [0225.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST", dwFileAttributes=0x20) returned 0 [0225.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.933] GetLastError () returned 0x5 [0225.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST", dwFileAttributes=0x20) returned 0 [0225.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5f40) returned 1 Thread: id = 8608 os_tid = 0x2718 [0221.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vss")) returned 0x20 [0225.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.929] GetLastError () returned 0x5 [0225.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS", dwFileAttributes=0x20) returned 0 [0225.929] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df59a0) returned 1 Thread: id = 8609 os_tid = 0xab0 [0221.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vst")) returned 0x20 [0225.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST", dwFileAttributes=0x20) returned 0 [0225.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.927] GetLastError () returned 0x5 [0225.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST", dwFileAttributes=0x20) returned 0 [0225.927] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6260) returned 1 Thread: id = 8610 os_tid = 0x2710 [0221.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vss")) returned 0x20 [0225.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.914] GetLastError () returned 0x5 [0225.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS", dwFileAttributes=0x20) returned 0 [0225.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df4aa0) returned 1 Thread: id = 8611 os_tid = 0x2738 [0221.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vst")) returned 0x20 [0225.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST", dwFileAttributes=0x20) returned 0 [0225.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.925] GetLastError () returned 0x5 [0225.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST", dwFileAttributes=0x20) returned 0 [0225.925] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5b80) returned 1 Thread: id = 8612 os_tid = 0x2724 [0221.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_m.vss")) returned 0x20 [0225.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.912] GetLastError () returned 0x5 [0225.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS", dwFileAttributes=0x20) returned 0 [0225.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df5d60) returned 1 Thread: id = 8613 os_tid = 0xf68 [0221.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_u.vss")) returned 0x20 [0225.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.910] GetLastError () returned 0x5 [0225.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS", dwFileAttributes=0x20) returned 0 [0225.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6120) returned 1 Thread: id = 8614 os_tid = 0x7c4 [0221.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_m.vss")) returned 0x20 [0225.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.924] GetLastError () returned 0x5 [0225.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3df6080) returned 1 Thread: id = 8615 os_tid = 0x272c [0221.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_u.vss")) returned 0x20 [0225.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.922] GetLastError () returned 0x5 [0225.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.922] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a090) returned 1 Thread: id = 8616 os_tid = 0x2730 [0221.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_m.vss")) returned 0x20 [0225.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS", dwFileAttributes=0x20) returned 0 [0225.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.908] GetLastError () returned 0x5 [0225.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS", dwFileAttributes=0x20) returned 0 [0225.909] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a130) returned 1 Thread: id = 8617 os_tid = 0x273c [0221.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_u.vss")) returned 0x20 [0225.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS", dwFileAttributes=0x20) returned 0 [0225.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.919] GetLastError () returned 0x5 [0225.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS", dwFileAttributes=0x20) returned 0 [0225.920] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a1d0) returned 1 Thread: id = 8618 os_tid = 0x2734 [0221.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_m.vss")) returned 0x20 [0225.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.918] GetLastError () returned 0x5 [0225.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS", dwFileAttributes=0x20) returned 0 [0225.918] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a270) returned 1 Thread: id = 8619 os_tid = 0x7b0 [0221.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_u.vss")) returned 0x20 [0225.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.916] GetLastError () returned 0x5 [0225.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS", dwFileAttributes=0x20) returned 0 [0225.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a310) returned 1 Thread: id = 8620 os_tid = 0xfc8 [0221.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_m.vss")) returned 0x20 [0225.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.907] GetLastError () returned 0x5 [0225.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.907] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a3b0) returned 1 Thread: id = 8621 os_tid = 0x728 [0221.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_u.vss")) returned 0x20 [0225.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.905] GetLastError () returned 0x5 [0225.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a450) returned 1 Thread: id = 8622 os_tid = 0x20a0 [0221.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_m.vst")) returned 0x20 [0225.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST", dwFileAttributes=0x20) returned 0 [0225.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.948] GetLastError () returned 0x5 [0225.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST", dwFileAttributes=0x20) returned 0 [0225.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a4f0) returned 1 Thread: id = 8623 os_tid = 0x1d78 [0221.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_u.vst")) returned 0x20 [0225.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST", dwFileAttributes=0x20) returned 0 [0225.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.946] GetLastError () returned 0x5 [0225.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST", dwFileAttributes=0x20) returned 0 [0225.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a590) returned 1 Thread: id = 8624 os_tid = 0x1d7c [0221.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_m.vss")) returned 0x20 [0225.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS", dwFileAttributes=0x20) returned 0 [0225.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.945] GetLastError () returned 0x5 [0225.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS", dwFileAttributes=0x20) returned 0 [0225.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a630) returned 1 Thread: id = 8625 os_tid = 0x1d80 [0221.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_u.vss")) returned 0x20 [0225.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS", dwFileAttributes=0x20) returned 0 [0225.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.942] GetLastError () returned 0x5 [0225.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS", dwFileAttributes=0x20) returned 0 [0225.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a6d0) returned 1 Thread: id = 8626 os_tid = 0x16ec [0221.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_m.vss")) returned 0x20 [0225.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0225.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.941] GetLastError () returned 0x5 [0225.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS", dwFileAttributes=0x20) returned 0 [0225.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a770) returned 1 Thread: id = 8627 os_tid = 0x1b60 [0221.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_u.vss")) returned 0x20 [0225.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0225.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.896] GetLastError () returned 0x5 [0225.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS", dwFileAttributes=0x20) returned 0 [0225.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a810) returned 1 Thread: id = 8628 os_tid = 0x1e48 [0221.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf")) returned 0x20 [0228.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF", dwFileAttributes=0x20) returned 0 [0228.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.951] GetLastError () returned 0x5 [0228.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF", dwFileAttributes=0x20) returned 0 [0228.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacb48) returned 1 Thread: id = 8629 os_tid = 0xa4c [0221.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf")) returned 0x20 [0228.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF", dwFileAttributes=0x20) returned 0 [0228.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.953] GetLastError () returned 0x5 [0228.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF", dwFileAttributes=0x20) returned 0 [0228.953] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 8630 os_tid = 0x20d0 [0221.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf")) returned 0x20 [0228.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF", dwFileAttributes=0x20) returned 0 [0228.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.955] GetLastError () returned 0x5 [0228.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF", dwFileAttributes=0x20) returned 0 [0228.955] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 8631 os_tid = 0x2214 [0221.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf")) returned 0x20 [0228.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF", dwFileAttributes=0x20) returned 0 [0228.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.956] GetLastError () returned 0x5 [0228.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF", dwFileAttributes=0x20) returned 0 [0228.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 Thread: id = 8632 os_tid = 0x1cfc [0221.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf")) returned 0x20 [0228.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF", dwFileAttributes=0x20) returned 0 [0228.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.827] GetLastError () returned 0x5 [0228.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF", dwFileAttributes=0x20) returned 0 [0228.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacbd0) returned 1 Thread: id = 8633 os_tid = 0x1d0c [0221.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf")) returned 0x20 [0228.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF", dwFileAttributes=0x20) returned 0 [0228.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.829] GetLastError () returned 0x5 [0228.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF", dwFileAttributes=0x20) returned 0 [0228.829] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacc58) returned 1 Thread: id = 8634 os_tid = 0x148c [0221.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf")) returned 0x20 [0228.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF", dwFileAttributes=0x20) returned 0 [0228.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.830] GetLastError () returned 0x5 [0228.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF", dwFileAttributes=0x20) returned 0 [0228.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacce0) returned 1 Thread: id = 8635 os_tid = 0x15d0 [0221.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf")) returned 0x20 [0228.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF", dwFileAttributes=0x20) returned 0 [0228.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.833] GetLastError () returned 0x5 [0228.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF", dwFileAttributes=0x20) returned 0 [0228.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacd68) returned 1 Thread: id = 8636 os_tid = 0x17ac [0221.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf")) returned 0x20 [0221.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF", dwFileAttributes=0x20) returned 0 [0221.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.939] GetLastError () returned 0x5 [0221.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF", dwFileAttributes=0x20) returned 0 [0221.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacdf0) returned 1 Thread: id = 8637 os_tid = 0x246c [0221.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf")) returned 0x20 [0228.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF", dwFileAttributes=0x20) returned 0 [0228.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.943] GetLastError () returned 0x5 [0228.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF", dwFileAttributes=0x20) returned 0 [0228.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cace78) returned 1 Thread: id = 8638 os_tid = 0x22e4 [0221.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf")) returned 0x20 [0228.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF", dwFileAttributes=0x20) returned 0 [0228.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.945] GetLastError () returned 0x5 [0228.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF", dwFileAttributes=0x20) returned 0 [0228.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacf00) returned 1 Thread: id = 8639 os_tid = 0x22f8 [0221.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf")) returned 0x20 [0228.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF", dwFileAttributes=0x20) returned 0 [0228.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.946] GetLastError () returned 0x5 [0228.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF", dwFileAttributes=0x20) returned 0 [0228.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacf88) returned 1 Thread: id = 8640 os_tid = 0x22fc [0221.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf")) returned 0x20 [0228.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF", dwFileAttributes=0x20) returned 0 [0228.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.948] GetLastError () returned 0x5 [0228.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF", dwFileAttributes=0x20) returned 0 [0228.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad010) returned 1 Thread: id = 8641 os_tid = 0x1ef8 [0221.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_m.vss")) returned 0x20 [0225.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.939] GetLastError () returned 0x5 [0225.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS", dwFileAttributes=0x20) returned 0 [0225.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a8b0) returned 1 Thread: id = 8642 os_tid = 0x484 [0221.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_u.vss")) returned 0x20 [0225.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.938] GetLastError () returned 0x5 [0225.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS", dwFileAttributes=0x20) returned 0 [0225.938] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a950) returned 1 Thread: id = 8643 os_tid = 0x1efc [0221.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_m.vss")) returned 0x20 [0225.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.936] GetLastError () returned 0x5 [0225.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS", dwFileAttributes=0x20) returned 0 [0225.936] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6a9f0) returned 1 Thread: id = 8644 os_tid = 0x24cc [0221.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_u.vss")) returned 0x20 [0225.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.894] GetLastError () returned 0x5 [0225.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS", dwFileAttributes=0x20) returned 0 [0225.895] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6aa90) returned 1 Thread: id = 8645 os_tid = 0x2788 [0221.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_m.vss")) returned 0x20 [0225.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.934] GetLastError () returned 0x5 [0225.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS", dwFileAttributes=0x20) returned 0 [0225.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ab30) returned 1 Thread: id = 8646 os_tid = 0x24e4 [0221.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_u.vss")) returned 0x20 [0225.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.893] GetLastError () returned 0x5 [0225.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS", dwFileAttributes=0x20) returned 0 [0225.893] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6abd0) returned 1 Thread: id = 8647 os_tid = 0x24e8 [0221.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf")) returned 0x20 [0221.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF", dwFileAttributes=0x20) returned 0 [0221.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.945] GetLastError () returned 0x5 [0221.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF", dwFileAttributes=0x20) returned 0 [0221.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68228) returned 1 Thread: id = 8648 os_tid = 0x24ec [0221.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf")) returned 0x20 [0221.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF", dwFileAttributes=0x20) returned 0 [0221.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.947] GetLastError () returned 0x5 [0221.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF", dwFileAttributes=0x20) returned 0 [0221.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad098) returned 1 Thread: id = 8649 os_tid = 0x24f8 [0221.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf")) returned 0x20 [0221.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF", dwFileAttributes=0x20) returned 0 [0221.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0221.949] GetLastError () returned 0x5 [0221.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF", dwFileAttributes=0x20) returned 0 [0221.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad120) returned 1 Thread: id = 8650 os_tid = 0x24fc [0221.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf")) returned 0x20 [0228.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF", dwFileAttributes=0x20) returned 0 [0228.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.984] GetLastError () returned 0x5 [0228.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF", dwFileAttributes=0x20) returned 0 [0228.984] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad1a8) returned 1 Thread: id = 8651 os_tid = 0x2500 [0221.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf")) returned 0x20 [0228.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF", dwFileAttributes=0x20) returned 0 [0228.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.987] GetLastError () returned 0x5 [0228.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF", dwFileAttributes=0x20) returned 0 [0228.987] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad230) returned 1 Thread: id = 8652 os_tid = 0x2504 [0221.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf")) returned 0x20 [0228.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF", dwFileAttributes=0x20) returned 0 [0228.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.989] GetLastError () returned 0x5 [0228.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF", dwFileAttributes=0x20) returned 0 [0228.989] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad2b8) returned 1 Thread: id = 8653 os_tid = 0x27c4 [0221.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf")) returned 0x20 [0228.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF", dwFileAttributes=0x20) returned 0 [0228.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.991] GetLastError () returned 0x5 [0228.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF", dwFileAttributes=0x20) returned 0 [0228.991] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad340) returned 1 Thread: id = 8654 os_tid = 0x2510 [0221.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf")) returned 0x20 [0228.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF", dwFileAttributes=0x20) returned 0 [0228.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.992] GetLastError () returned 0x5 [0228.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF", dwFileAttributes=0x20) returned 0 [0228.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad3c8) returned 1 Thread: id = 8655 os_tid = 0x2514 [0221.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf")) returned 0x20 [0228.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF", dwFileAttributes=0x20) returned 0 [0228.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.994] GetLastError () returned 0x5 [0228.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF", dwFileAttributes=0x20) returned 0 [0228.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad450) returned 1 Thread: id = 8656 os_tid = 0x1b08 [0221.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf")) returned 0x20 [0228.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF", dwFileAttributes=0x20) returned 0 [0228.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.996] GetLastError () returned 0x5 [0228.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF", dwFileAttributes=0x20) returned 0 [0228.996] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad4d8) returned 1 Thread: id = 8657 os_tid = 0x1b0c [0221.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf")) returned 0x20 [0228.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF", dwFileAttributes=0x20) returned 0 [0228.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.998] GetLastError () returned 0x5 [0228.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF", dwFileAttributes=0x20) returned 0 [0228.998] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad560) returned 1 Thread: id = 8658 os_tid = 0x1b10 [0221.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf")) returned 0x20 [0228.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF", dwFileAttributes=0x20) returned 0 [0228.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.000] GetLastError () returned 0x5 [0229.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF", dwFileAttributes=0x20) returned 0 [0229.000] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad5e8) returned 1 Thread: id = 8659 os_tid = 0x1b14 [0221.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf")) returned 0x20 [0229.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF", dwFileAttributes=0x20) returned 0 [0229.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.002] GetLastError () returned 0x5 [0229.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF", dwFileAttributes=0x20) returned 0 [0229.002] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad670) returned 1 Thread: id = 8660 os_tid = 0x2334 [0221.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf")) returned 0x20 [0229.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF", dwFileAttributes=0x20) returned 0 [0229.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.003] GetLastError () returned 0x5 [0229.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF", dwFileAttributes=0x20) returned 0 [0229.003] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad6f8) returned 1 Thread: id = 8661 os_tid = 0x20bc [0221.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf")) returned 0x20 [0229.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF", dwFileAttributes=0x20) returned 0 [0229.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.005] GetLastError () returned 0x5 [0229.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF", dwFileAttributes=0x20) returned 0 [0229.005] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad780) returned 1 Thread: id = 8662 os_tid = 0x20c0 [0221.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf")) returned 0x20 [0228.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF", dwFileAttributes=0x20) returned 0 [0228.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.898] GetLastError () returned 0x5 [0228.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF", dwFileAttributes=0x20) returned 0 [0228.899] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad808) returned 1 Thread: id = 8663 os_tid = 0x20c8 [0221.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf")) returned 0x20 [0229.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF", dwFileAttributes=0x20) returned 0 [0229.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.047] GetLastError () returned 0x5 [0229.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF", dwFileAttributes=0x20) returned 0 [0229.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad890) returned 1 Thread: id = 8664 os_tid = 0x182c [0221.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf")) returned 0x20 [0229.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF", dwFileAttributes=0x20) returned 0 [0229.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.049] GetLastError () returned 0x5 [0229.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF", dwFileAttributes=0x20) returned 0 [0229.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad918) returned 1 Thread: id = 8665 os_tid = 0x1c94 [0221.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf")) returned 0x20 [0229.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF", dwFileAttributes=0x20) returned 0 [0229.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.029] GetLastError () returned 0x5 [0229.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF", dwFileAttributes=0x20) returned 0 [0229.029] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad9a0) returned 1 Thread: id = 8666 os_tid = 0xe14 [0221.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf")) returned 0x20 [0229.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF", dwFileAttributes=0x20) returned 0 [0229.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.030] GetLastError () returned 0x5 [0229.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF", dwFileAttributes=0x20) returned 0 [0229.031] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cada28) returned 1 Thread: id = 8667 os_tid = 0x21fc [0222.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf")) returned 0x20 [0229.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF", dwFileAttributes=0x20) returned 0 [0229.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.013] GetLastError () returned 0x5 [0229.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF", dwFileAttributes=0x20) returned 0 [0229.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadab0) returned 1 Thread: id = 8668 os_tid = 0x2234 [0222.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf")) returned 0x20 [0229.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF", dwFileAttributes=0x20) returned 0 [0229.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.074] GetLastError () returned 0x5 [0229.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF", dwFileAttributes=0x20) returned 0 [0229.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad120) returned 1 Thread: id = 8669 os_tid = 0xb8c [0222.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf")) returned 0x20 [0229.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF", dwFileAttributes=0x20) returned 0 [0229.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.015] GetLastError () returned 0x5 [0229.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF", dwFileAttributes=0x20) returned 0 [0229.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cad098) returned 1 Thread: id = 8670 os_tid = 0x754 [0222.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf")) returned 0x20 [0229.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF", dwFileAttributes=0x20) returned 0 [0229.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.076] GetLastError () returned 0x5 [0229.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF", dwFileAttributes=0x20) returned 0 [0229.076] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cacdf0) returned 1 Thread: id = 8671 os_tid = 0x103c [0222.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf")) returned 0x20 [0229.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF", dwFileAttributes=0x20) returned 0 [0229.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.017] GetLastError () returned 0x5 [0229.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF", dwFileAttributes=0x20) returned 0 [0229.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadb38) returned 1 Thread: id = 8672 os_tid = 0x2790 [0222.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf")) returned 0x20 [0229.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF", dwFileAttributes=0x20) returned 0 [0229.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.078] GetLastError () returned 0x5 [0229.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF", dwFileAttributes=0x20) returned 0 [0229.079] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadbc0) returned 1 Thread: id = 8673 os_tid = 0x220 [0222.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf")) returned 0x20 [0229.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF", dwFileAttributes=0x20) returned 0 [0229.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.018] GetLastError () returned 0x5 [0229.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF", dwFileAttributes=0x20) returned 0 [0229.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadc48) returned 1 Thread: id = 8674 os_tid = 0x1c4c [0222.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf")) returned 0x20 [0229.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF", dwFileAttributes=0x20) returned 0 [0229.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.020] GetLastError () returned 0x5 [0229.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF", dwFileAttributes=0x20) returned 0 [0229.020] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadcd0) returned 1 Thread: id = 8675 os_tid = 0x1c70 [0222.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf")) returned 0x20 [0229.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF", dwFileAttributes=0x20) returned 0 [0229.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.008] GetLastError () returned 0x5 [0229.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF", dwFileAttributes=0x20) returned 0 [0229.008] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadd58) returned 1 Thread: id = 8676 os_tid = 0x1c74 [0222.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf")) returned 0x20 [0229.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF", dwFileAttributes=0x20) returned 0 [0229.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.010] GetLastError () returned 0x5 [0229.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF", dwFileAttributes=0x20) returned 0 [0229.010] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadde0) returned 1 Thread: id = 8677 os_tid = 0x1cb4 [0222.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg")) returned 0x20 [0229.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG", dwFileAttributes=0x20) returned 0 [0229.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.011] GetLastError () returned 0x5 [0229.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG", dwFileAttributes=0x20) returned 0 [0229.012] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cade68) returned 1 Thread: id = 8678 os_tid = 0x1cc0 [0222.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf")) returned 0x20 [0229.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF", dwFileAttributes=0x20) returned 0 [0229.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.022] GetLastError () returned 0x5 [0229.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF", dwFileAttributes=0x20) returned 0 [0229.022] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadef0) returned 1 Thread: id = 8679 os_tid = 0x1cc8 [0222.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf")) returned 0x20 [0229.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF", dwFileAttributes=0x20) returned 0 [0229.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.025] GetLastError () returned 0x5 [0229.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF", dwFileAttributes=0x20) returned 0 [0229.025] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cadf78) returned 1 Thread: id = 8680 os_tid = 0x1cf0 [0222.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf")) returned 0x20 [0229.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF", dwFileAttributes=0x20) returned 0 [0229.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.027] GetLastError () returned 0x5 [0229.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF", dwFileAttributes=0x20) returned 0 [0229.027] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68228) returned 1 Thread: id = 8681 os_tid = 0x1b9c [0222.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf")) returned 0x20 [0229.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF", dwFileAttributes=0x20) returned 0 [0229.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.134] GetLastError () returned 0x5 [0229.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF", dwFileAttributes=0x20) returned 0 [0229.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62d50) returned 1 Thread: id = 8682 os_tid = 0x131c [0222.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf")) returned 0x20 [0229.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF", dwFileAttributes=0x20) returned 0 [0229.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.136] GetLastError () returned 0x5 [0229.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF", dwFileAttributes=0x20) returned 0 [0229.136] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 8683 os_tid = 0x1330 [0222.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf")) returned 0x20 [0229.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF", dwFileAttributes=0x20) returned 0 [0229.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.080] GetLastError () returned 0x5 [0229.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF", dwFileAttributes=0x20) returned 0 [0229.081] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb4d0) returned 1 Thread: id = 8684 os_tid = 0x1334 [0222.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf")) returned 0x20 [0229.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF", dwFileAttributes=0x20) returned 0 [0229.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.082] GetLastError () returned 0x5 [0229.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF", dwFileAttributes=0x20) returned 0 [0229.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb558) returned 1 Thread: id = 8685 os_tid = 0x1338 [0222.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf")) returned 0x20 [0229.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF", dwFileAttributes=0x20) returned 0 [0229.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.085] GetLastError () returned 0x5 [0229.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF", dwFileAttributes=0x20) returned 0 [0229.085] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb5e0) returned 1 Thread: id = 8686 os_tid = 0x133c [0222.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf")) returned 0x20 [0229.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF", dwFileAttributes=0x20) returned 0 [0229.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.055] GetLastError () returned 0x5 [0229.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF", dwFileAttributes=0x20) returned 0 [0229.055] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb668) returned 1 Thread: id = 8687 os_tid = 0x1340 [0222.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf")) returned 0x20 [0229.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF", dwFileAttributes=0x20) returned 0 [0229.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.086] GetLastError () returned 0x5 [0229.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF", dwFileAttributes=0x20) returned 0 [0229.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb6f0) returned 1 Thread: id = 8688 os_tid = 0x17dc [0222.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf")) returned 0x20 [0229.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF", dwFileAttributes=0x20) returned 0 [0229.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.088] GetLastError () returned 0x5 [0229.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF", dwFileAttributes=0x20) returned 0 [0229.088] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb778) returned 1 Thread: id = 8689 os_tid = 0x1348 [0222.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf")) returned 0x20 [0229.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF", dwFileAttributes=0x20) returned 0 [0229.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.090] GetLastError () returned 0x5 [0229.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF", dwFileAttributes=0x20) returned 0 [0229.090] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb800) returned 1 Thread: id = 8690 os_tid = 0x135c [0222.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf")) returned 0x20 [0229.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF", dwFileAttributes=0x20) returned 0 [0229.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.092] GetLastError () returned 0x5 [0229.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF", dwFileAttributes=0x20) returned 0 [0229.092] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb888) returned 1 Thread: id = 8691 os_tid = 0x1360 [0222.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf")) returned 0x20 [0229.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF", dwFileAttributes=0x20) returned 0 [0229.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.057] GetLastError () returned 0x5 [0229.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF", dwFileAttributes=0x20) returned 0 [0229.057] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb910) returned 1 Thread: id = 8692 os_tid = 0x2094 [0222.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf")) returned 0x20 [0229.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF", dwFileAttributes=0x20) returned 0 [0229.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.093] GetLastError () returned 0x5 [0229.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF", dwFileAttributes=0x20) returned 0 [0229.094] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bb998) returned 1 Thread: id = 8693 os_tid = 0x2098 [0222.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf")) returned 0x20 [0229.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF", dwFileAttributes=0x20) returned 0 [0229.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.095] GetLastError () returned 0x5 [0229.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF", dwFileAttributes=0x20) returned 0 [0229.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bba20) returned 1 Thread: id = 8694 os_tid = 0x13fc [0222.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg")) returned 0x20 [0229.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG", dwFileAttributes=0x20) returned 0 [0229.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.059] GetLastError () returned 0x5 [0229.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG", dwFileAttributes=0x20) returned 0 [0229.059] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbaa8) returned 1 Thread: id = 8695 os_tid = 0x1404 [0222.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg")) returned 0x20 [0229.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG", dwFileAttributes=0x20) returned 0 [0229.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.097] GetLastError () returned 0x5 [0229.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG", dwFileAttributes=0x20) returned 0 [0229.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbb30) returned 1 Thread: id = 8696 os_tid = 0x2308 [0222.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf")) returned 0x20 [0229.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF", dwFileAttributes=0x20) returned 0 [0229.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.099] GetLastError () returned 0x5 [0229.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF", dwFileAttributes=0x20) returned 0 [0229.099] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbbb8) returned 1 Thread: id = 8697 os_tid = 0x230c [0222.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf")) returned 0x20 [0229.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF", dwFileAttributes=0x20) returned 0 [0229.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.060] GetLastError () returned 0x5 [0229.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF", dwFileAttributes=0x20) returned 0 [0229.061] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbc40) returned 1 Thread: id = 8698 os_tid = 0x2318 [0222.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf")) returned 0x20 [0229.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF", dwFileAttributes=0x20) returned 0 [0229.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.100] GetLastError () returned 0x5 [0229.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF", dwFileAttributes=0x20) returned 0 [0229.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbcc8) returned 1 Thread: id = 8699 os_tid = 0x231c [0222.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf")) returned 0x20 [0229.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF", dwFileAttributes=0x20) returned 0 [0229.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.125] GetLastError () returned 0x5 [0229.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF", dwFileAttributes=0x20) returned 0 [0229.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbd50) returned 1 Thread: id = 8700 os_tid = 0x2320 [0222.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf")) returned 0x20 [0229.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF", dwFileAttributes=0x20) returned 0 [0229.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.062] GetLastError () returned 0x5 [0229.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF", dwFileAttributes=0x20) returned 0 [0229.063] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbdd8) returned 1 Thread: id = 8701 os_tid = 0x2324 [0222.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf")) returned 0x20 [0229.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF", dwFileAttributes=0x20) returned 0 [0229.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.064] GetLastError () returned 0x5 [0229.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF", dwFileAttributes=0x20) returned 0 [0229.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbe60) returned 1 Thread: id = 8702 os_tid = 0x17b0 [0222.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf")) returned 0x20 [0229.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF", dwFileAttributes=0x20) returned 0 [0229.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.126] GetLastError () returned 0x5 [0229.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF", dwFileAttributes=0x20) returned 0 [0229.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbee8) returned 1 Thread: id = 8703 os_tid = 0x17cc [0222.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf")) returned 0x20 [0229.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF", dwFileAttributes=0x20) returned 0 [0229.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.072] GetLastError () returned 0x5 [0229.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF", dwFileAttributes=0x20) returned 0 [0229.072] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbf70) returned 1 Thread: id = 8704 os_tid = 0x1960 [0222.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg")) returned 0x20 [0229.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG", dwFileAttributes=0x20) returned 0 [0229.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.066] GetLastError () returned 0x5 [0229.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG", dwFileAttributes=0x20) returned 0 [0229.066] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bbff8) returned 1 Thread: id = 8705 os_tid = 0x2200 [0222.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg")) returned 0x20 [0229.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG", dwFileAttributes=0x20) returned 0 [0229.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.128] GetLastError () returned 0x5 [0229.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG", dwFileAttributes=0x20) returned 0 [0229.128] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc080) returned 1 Thread: id = 8706 os_tid = 0x1f34 [0222.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf")) returned 0x20 [0229.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF", dwFileAttributes=0x20) returned 0 [0229.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.130] GetLastError () returned 0x5 [0229.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF", dwFileAttributes=0x20) returned 0 [0229.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc108) returned 1 Thread: id = 8707 os_tid = 0xc38 [0222.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf")) returned 0x20 [0229.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF", dwFileAttributes=0x20) returned 0 [0229.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.102] GetLastError () returned 0x5 [0229.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF", dwFileAttributes=0x20) returned 0 [0229.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc190) returned 1 Thread: id = 8708 os_tid = 0x888 [0222.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf")) returned 0x20 [0229.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF", dwFileAttributes=0x20) returned 0 [0229.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.068] GetLastError () returned 0x5 [0229.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF", dwFileAttributes=0x20) returned 0 [0229.068] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc218) returned 1 Thread: id = 8709 os_tid = 0x23c0 [0222.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf")) returned 0x20 [0229.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF", dwFileAttributes=0x20) returned 0 [0229.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.104] GetLastError () returned 0x5 [0229.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF", dwFileAttributes=0x20) returned 0 [0229.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc2a0) returned 1 Thread: id = 8710 os_tid = 0x1d44 [0222.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf")) returned 0x20 [0229.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF", dwFileAttributes=0x20) returned 0 [0229.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.105] GetLastError () returned 0x5 [0229.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF", dwFileAttributes=0x20) returned 0 [0229.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc328) returned 1 Thread: id = 8711 os_tid = 0x1edc [0222.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf")) returned 0x20 [0229.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF", dwFileAttributes=0x20) returned 0 [0229.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.070] GetLastError () returned 0x5 [0229.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF", dwFileAttributes=0x20) returned 0 [0229.070] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc3b0) returned 1 Thread: id = 8712 os_tid = 0x15c [0222.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf")) returned 0x20 [0229.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF", dwFileAttributes=0x20) returned 0 [0229.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.051] GetLastError () returned 0x5 [0229.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF", dwFileAttributes=0x20) returned 0 [0229.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc438) returned 1 Thread: id = 8713 os_tid = 0x778 [0222.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf")) returned 0x20 [0229.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF", dwFileAttributes=0x20) returned 0 [0229.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.053] GetLastError () returned 0x5 [0229.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF", dwFileAttributes=0x20) returned 0 [0229.053] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc4c0) returned 1 Thread: id = 8714 os_tid = 0xa90 [0222.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf")) returned 0x20 [0228.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF", dwFileAttributes=0x20) returned 0 [0228.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.897] GetLastError () returned 0x5 [0228.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF", dwFileAttributes=0x20) returned 0 [0228.897] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc548) returned 1 Thread: id = 8715 os_tid = 0xc68 [0222.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vss")) returned 0x20 [0225.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0225.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.891] GetLastError () returned 0x5 [0225.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS", dwFileAttributes=0x20) returned 0 [0225.891] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ac70) returned 1 Thread: id = 8716 os_tid = 0x1f74 [0222.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vst")) returned 0x20 [0225.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST", dwFileAttributes=0x20) returned 0 [0225.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.889] GetLastError () returned 0x5 [0225.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST", dwFileAttributes=0x20) returned 0 [0225.889] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ad10) returned 1 Thread: id = 8717 os_tid = 0x1f78 [0222.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vss")) returned 0x20 [0225.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0225.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.951] GetLastError () returned 0x5 [0225.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS", dwFileAttributes=0x20) returned 0 [0225.951] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6adb0) returned 1 Thread: id = 8718 os_tid = 0x1f80 [0222.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vst")) returned 0x20 [0225.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST", dwFileAttributes=0x20) returned 0 [0225.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.888] GetLastError () returned 0x5 [0225.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST", dwFileAttributes=0x20) returned 0 [0225.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6ae50) returned 1 Thread: id = 8719 os_tid = 0x1f90 [0222.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_m.vst")) returned 0x20 [0225.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST", dwFileAttributes=0x20) returned 0 [0225.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.886] GetLastError () returned 0x5 [0225.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST", dwFileAttributes=0x20) returned 0 [0225.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6aef0) returned 1 Thread: id = 8720 os_tid = 0x1fa8 [0222.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_u.vst")) returned 0x20 [0225.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST", dwFileAttributes=0x20) returned 0 [0225.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.885] GetLastError () returned 0x5 [0225.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST", dwFileAttributes=0x20) returned 0 [0225.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6af90) returned 1 Thread: id = 8721 os_tid = 0x1fb0 [0222.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_m.vst")) returned 0x20 [0225.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST", dwFileAttributes=0x20) returned 0 [0225.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.883] GetLastError () returned 0x5 [0225.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST", dwFileAttributes=0x20) returned 0 [0225.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b030) returned 1 Thread: id = 8722 os_tid = 0xc54 [0222.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_u.vst")) returned 0x20 [0225.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST", dwFileAttributes=0x20) returned 0 [0225.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.881] GetLastError () returned 0x5 [0225.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST", dwFileAttributes=0x20) returned 0 [0225.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b0d0) returned 1 Thread: id = 8723 os_tid = 0xb74 [0222.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vss")) returned 0x20 [0225.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.949] GetLastError () returned 0x5 [0225.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS", dwFileAttributes=0x20) returned 0 [0225.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b170) returned 1 Thread: id = 8724 os_tid = 0xb64 [0222.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vst")) returned 0x20 [0225.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST", dwFileAttributes=0x20) returned 0 [0225.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.879] GetLastError () returned 0x5 [0225.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST", dwFileAttributes=0x20) returned 0 [0225.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b210) returned 1 Thread: id = 8725 os_tid = 0x5d4 [0222.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vss")) returned 0x20 [0225.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vss"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.877] GetLastError () returned 0x5 [0225.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS", dwFileAttributes=0x20) returned 0 [0225.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b2b0) returned 1 Thread: id = 8726 os_tid = 0xb0 [0222.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vst")) returned 0x20 [0225.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST", dwFileAttributes=0x20) returned 0 [0225.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vst"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0225.876] GetLastError () returned 0x5 [0225.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST", dwFileAttributes=0x20) returned 0 [0225.876] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a6b350) returned 1 Thread: id = 8727 os_tid = 0x7fc [0225.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf")) returned 0x20 [0229.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF", dwFileAttributes=0x20) returned 0 [0229.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.120] GetLastError () returned 0x5 [0229.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF", dwFileAttributes=0x20) returned 0 [0229.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc5d0) returned 1 Thread: id = 8728 os_tid = 0x277c [0225.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf")) returned 0x20 [0229.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF", dwFileAttributes=0x20) returned 0 [0229.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.118] GetLastError () returned 0x5 [0229.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF", dwFileAttributes=0x20) returned 0 [0229.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc658) returned 1 Thread: id = 8729 os_tid = 0x2798 [0225.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf")) returned 0x20 [0229.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF", dwFileAttributes=0x20) returned 0 [0229.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.116] GetLastError () returned 0x5 [0229.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF", dwFileAttributes=0x20) returned 0 [0229.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc6e0) returned 1 Thread: id = 8730 os_tid = 0x279c [0225.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf")) returned 0x20 [0229.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF", dwFileAttributes=0x20) returned 0 [0229.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.114] GetLastError () returned 0x5 [0229.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF", dwFileAttributes=0x20) returned 0 [0229.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc768) returned 1 Thread: id = 8731 os_tid = 0x1914 [0225.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf")) returned 0x20 [0229.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF", dwFileAttributes=0x20) returned 0 [0229.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.113] GetLastError () returned 0x5 [0229.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF", dwFileAttributes=0x20) returned 0 [0229.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc7f0) returned 1 Thread: id = 8732 os_tid = 0x2330 [0225.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf")) returned 0x20 [0229.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF", dwFileAttributes=0x20) returned 0 [0229.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.111] GetLastError () returned 0x5 [0229.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF", dwFileAttributes=0x20) returned 0 [0229.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc878) returned 1 Thread: id = 8733 os_tid = 0x8ec [0225.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf")) returned 0x20 [0229.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF", dwFileAttributes=0x20) returned 0 [0229.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.109] GetLastError () returned 0x5 [0229.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF", dwFileAttributes=0x20) returned 0 [0229.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc900) returned 1 Thread: id = 8734 os_tid = 0x1bfc [0225.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf")) returned 0x20 [0229.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF", dwFileAttributes=0x20) returned 0 [0229.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.107] GetLastError () returned 0x5 [0229.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF", dwFileAttributes=0x20) returned 0 [0229.107] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bc988) returned 1 Thread: id = 8735 os_tid = 0x1c18 [0225.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf")) returned 0x20 [0229.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF", dwFileAttributes=0x20) returned 0 [0229.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.165] GetLastError () returned 0x5 [0229.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF", dwFileAttributes=0x20) returned 0 [0229.166] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca10) returned 1 Thread: id = 8736 os_tid = 0x2348 [0225.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf")) returned 0x20 [0229.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF", dwFileAttributes=0x20) returned 0 [0229.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.164] GetLastError () returned 0x5 [0229.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF", dwFileAttributes=0x20) returned 0 [0229.164] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bca98) returned 1 Thread: id = 8737 os_tid = 0x234c [0225.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf")) returned 0x20 [0226.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF", dwFileAttributes=0x20) returned 0 [0226.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.091] GetLastError () returned 0x5 [0226.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF", dwFileAttributes=0x20) returned 0 [0226.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcb20) returned 1 Thread: id = 8738 os_tid = 0x2350 [0225.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf")) returned 0x20 [0229.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF", dwFileAttributes=0x20) returned 0 [0229.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.162] GetLastError () returned 0x5 [0229.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF", dwFileAttributes=0x20) returned 0 [0229.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcba8) returned 1 Thread: id = 8739 os_tid = 0x2354 [0225.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf")) returned 0x20 [0229.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF", dwFileAttributes=0x20) returned 0 [0229.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.171] GetLastError () returned 0x5 [0229.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF", dwFileAttributes=0x20) returned 0 [0229.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcc30) returned 1 Thread: id = 8740 os_tid = 0x2358 [0225.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf")) returned 0x20 [0229.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF", dwFileAttributes=0x20) returned 0 [0229.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.173] GetLastError () returned 0x5 [0229.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF", dwFileAttributes=0x20) returned 0 [0229.173] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bccb8) returned 1 Thread: id = 8741 os_tid = 0x235c [0225.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf")) returned 0x20 [0229.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF", dwFileAttributes=0x20) returned 0 [0229.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.175] GetLastError () returned 0x5 [0229.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF", dwFileAttributes=0x20) returned 0 [0229.175] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcd40) returned 1 Thread: id = 8742 os_tid = 0x2360 [0225.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf")) returned 0x20 [0226.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF", dwFileAttributes=0x20) returned 0 [0226.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.097] GetLastError () returned 0x5 [0226.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF", dwFileAttributes=0x20) returned 0 [0226.098] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcdc8) returned 1 Thread: id = 8743 os_tid = 0x2364 [0225.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf")) returned 0x20 [0226.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF", dwFileAttributes=0x20) returned 0 [0226.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.079] GetLastError () returned 0x5 [0226.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF", dwFileAttributes=0x20) returned 0 [0226.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bce50) returned 1 Thread: id = 8744 os_tid = 0x2368 [0225.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf")) returned 0x20 [0229.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF", dwFileAttributes=0x20) returned 0 [0229.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.167] GetLastError () returned 0x5 [0229.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF", dwFileAttributes=0x20) returned 0 [0229.168] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bced8) returned 1 Thread: id = 8745 os_tid = 0x236c [0225.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf")) returned 0x20 [0229.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF", dwFileAttributes=0x20) returned 0 [0229.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.169] GetLastError () returned 0x5 [0229.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF", dwFileAttributes=0x20) returned 0 [0229.169] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcf60) returned 1 Thread: id = 8746 os_tid = 0x2370 [0225.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf")) returned 0x20 [0229.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF", dwFileAttributes=0x20) returned 0 [0229.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.177] GetLastError () returned 0x5 [0229.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF", dwFileAttributes=0x20) returned 0 [0229.177] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bcfe8) returned 1 Thread: id = 8747 os_tid = 0x2374 [0225.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf")) returned 0x20 [0229.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF", dwFileAttributes=0x20) returned 0 [0229.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.179] GetLastError () returned 0x5 [0229.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF", dwFileAttributes=0x20) returned 0 [0229.179] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd070) returned 1 Thread: id = 8748 os_tid = 0x2378 [0225.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf")) returned 0x20 [0229.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF", dwFileAttributes=0x20) returned 0 [0229.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.141] GetLastError () returned 0x5 [0229.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF", dwFileAttributes=0x20) returned 0 [0229.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd0f8) returned 1 Thread: id = 8749 os_tid = 0x237c [0225.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf")) returned 0x20 [0229.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF", dwFileAttributes=0x20) returned 0 [0229.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.143] GetLastError () returned 0x5 [0229.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF", dwFileAttributes=0x20) returned 0 [0229.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd180) returned 1 Thread: id = 8750 os_tid = 0x2564 [0225.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf")) returned 0x20 [0229.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF", dwFileAttributes=0x20) returned 0 [0229.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.144] GetLastError () returned 0x5 [0229.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF", dwFileAttributes=0x20) returned 0 [0229.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd208) returned 1 Thread: id = 8751 os_tid = 0x25d4 [0225.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf")) returned 0x20 [0229.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF", dwFileAttributes=0x20) returned 0 [0229.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.146] GetLastError () returned 0x5 [0229.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF", dwFileAttributes=0x20) returned 0 [0229.147] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd290) returned 1 Thread: id = 8752 os_tid = 0x26ac [0225.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf")) returned 0x20 [0229.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF", dwFileAttributes=0x20) returned 0 [0229.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.123] GetLastError () returned 0x5 [0229.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF", dwFileAttributes=0x20) returned 0 [0229.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd318) returned 1 Thread: id = 8753 os_tid = 0x22ac [0225.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf")) returned 0x20 [0229.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF", dwFileAttributes=0x20) returned 0 [0229.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.161] GetLastError () returned 0x5 [0229.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF", dwFileAttributes=0x20) returned 0 [0229.161] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd3a0) returned 1 Thread: id = 8754 os_tid = 0xa6c [0225.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf")) returned 0x20 [0229.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF", dwFileAttributes=0x20) returned 0 [0229.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.159] GetLastError () returned 0x5 [0229.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF", dwFileAttributes=0x20) returned 0 [0229.159] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30bd428) returned 1 Thread: id = 8755 os_tid = 0xa94 [0225.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf")) returned 0x20 [0229.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF", dwFileAttributes=0x20) returned 0 [0229.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.157] GetLastError () returned 0x5 [0229.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF", dwFileAttributes=0x20) returned 0 [0229.157] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6818) returned 1 Thread: id = 8756 os_tid = 0x518 [0225.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf")) returned 0x20 [0229.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF", dwFileAttributes=0x20) returned 0 [0229.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.155] GetLastError () returned 0x5 [0229.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF", dwFileAttributes=0x20) returned 0 [0229.156] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec68a0) returned 1 Thread: id = 8757 os_tid = 0x22ec [0225.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf")) returned 0x20 [0229.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF", dwFileAttributes=0x20) returned 0 [0229.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.154] GetLastError () returned 0x5 [0229.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF", dwFileAttributes=0x20) returned 0 [0229.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6928) returned 1 Thread: id = 8758 os_tid = 0xa88 [0225.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf")) returned 0x20 [0229.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF", dwFileAttributes=0x20) returned 0 [0229.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.152] GetLastError () returned 0x5 [0229.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF", dwFileAttributes=0x20) returned 0 [0229.152] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec69b0) returned 1 Thread: id = 8759 os_tid = 0xa84 [0225.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf")) returned 0x20 [0229.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF", dwFileAttributes=0x20) returned 0 [0229.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.150] GetLastError () returned 0x5 [0229.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF", dwFileAttributes=0x20) returned 0 [0229.150] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6a38) returned 1 Thread: id = 8760 os_tid = 0xa98 [0225.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf")) returned 0x20 [0229.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF", dwFileAttributes=0x20) returned 0 [0229.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.148] GetLastError () returned 0x5 [0229.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF", dwFileAttributes=0x20) returned 0 [0229.148] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6ac0) returned 1 Thread: id = 8762 os_tid = 0x21b8 [0226.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf")) returned 0x20 [0226.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF", dwFileAttributes=0x20) returned 0 [0226.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.095] GetLastError () returned 0x5 [0226.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF", dwFileAttributes=0x20) returned 0 [0226.096] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 8763 os_tid = 0x21bc [0226.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf")) returned 0x20 [0226.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF", dwFileAttributes=0x20) returned 0 [0226.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.102] GetLastError () returned 0x5 [0226.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF", dwFileAttributes=0x20) returned 0 [0226.103] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 8764 os_tid = 0x2650 [0226.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf")) returned 0x20 [0226.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF", dwFileAttributes=0x20) returned 0 [0226.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.104] GetLastError () returned 0x5 [0226.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF", dwFileAttributes=0x20) returned 0 [0226.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 8765 os_tid = 0x2668 [0226.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf")) returned 0x20 [0226.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF", dwFileAttributes=0x20) returned 0 [0226.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.106] GetLastError () returned 0x5 [0226.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF", dwFileAttributes=0x20) returned 0 [0226.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 8766 os_tid = 0x21c0 [0226.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf")) returned 0x20 [0226.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF", dwFileAttributes=0x20) returned 0 [0226.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.108] GetLastError () returned 0x5 [0226.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF", dwFileAttributes=0x20) returned 0 [0226.108] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 8767 os_tid = 0x21c4 [0226.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf")) returned 0x20 [0226.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF", dwFileAttributes=0x20) returned 0 [0226.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0226.109] GetLastError () returned 0x5 [0226.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF", dwFileAttributes=0x20) returned 0 [0226.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d060) returned 1 Thread: id = 8768 os_tid = 0x1894 [0226.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf")) returned 0x20 [0229.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF", dwFileAttributes=0x20) returned 0 [0229.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.215] GetLastError () returned 0x5 [0229.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF", dwFileAttributes=0x20) returned 0 [0229.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 8769 os_tid = 0x21c8 [0226.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf")) returned 0x20 [0229.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF", dwFileAttributes=0x20) returned 0 [0229.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.214] GetLastError () returned 0x5 [0229.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF", dwFileAttributes=0x20) returned 0 [0229.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 8770 os_tid = 0x21cc [0226.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf")) returned 0x20 [0229.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF", dwFileAttributes=0x20) returned 0 [0229.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.212] GetLastError () returned 0x5 [0229.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF", dwFileAttributes=0x20) returned 0 [0229.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 8771 os_tid = 0x21d0 [0226.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf")) returned 0x20 [0229.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF", dwFileAttributes=0x20) returned 0 [0229.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.210] GetLastError () returned 0x5 [0229.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF", dwFileAttributes=0x20) returned 0 [0229.210] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 8772 os_tid = 0x2680 [0226.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf")) returned 0x20 [0229.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF", dwFileAttributes=0x20) returned 0 [0229.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.204] GetLastError () returned 0x5 [0229.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF", dwFileAttributes=0x20) returned 0 [0229.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6b48) returned 1 Thread: id = 8773 os_tid = 0x2684 [0226.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf")) returned 0x20 [0229.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF", dwFileAttributes=0x20) returned 0 [0229.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.232] GetLastError () returned 0x5 [0229.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF", dwFileAttributes=0x20) returned 0 [0229.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6bd0) returned 1 Thread: id = 8774 os_tid = 0x1898 [0226.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf")) returned 0x20 [0229.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF", dwFileAttributes=0x20) returned 0 [0229.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.234] GetLastError () returned 0x5 [0229.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF", dwFileAttributes=0x20) returned 0 [0229.234] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6c58) returned 1 Thread: id = 8775 os_tid = 0x189c [0226.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf")) returned 0x20 [0229.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF", dwFileAttributes=0x20) returned 0 [0229.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.217] GetLastError () returned 0x5 [0229.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF", dwFileAttributes=0x20) returned 0 [0229.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6ce0) returned 1 Thread: id = 8776 os_tid = 0x18a0 [0226.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf")) returned 0x20 [0229.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF", dwFileAttributes=0x20) returned 0 [0229.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.219] GetLastError () returned 0x5 [0229.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF", dwFileAttributes=0x20) returned 0 [0229.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6d68) returned 1 Thread: id = 8777 os_tid = 0x18b4 [0226.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf")) returned 0x20 [0229.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF", dwFileAttributes=0x20) returned 0 [0229.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.221] GetLastError () returned 0x5 [0229.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF", dwFileAttributes=0x20) returned 0 [0229.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6df0) returned 1 Thread: id = 8778 os_tid = 0x2688 [0226.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf")) returned 0x20 [0229.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF", dwFileAttributes=0x20) returned 0 [0229.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.223] GetLastError () returned 0x5 [0229.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF", dwFileAttributes=0x20) returned 0 [0229.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6e78) returned 1 Thread: id = 8779 os_tid = 0x268c [0226.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf")) returned 0x20 [0229.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF", dwFileAttributes=0x20) returned 0 [0229.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.224] GetLastError () returned 0x5 [0229.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF", dwFileAttributes=0x20) returned 0 [0229.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6f00) returned 1 Thread: id = 8780 os_tid = 0x6f0 [0226.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf")) returned 0x20 [0229.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF", dwFileAttributes=0x20) returned 0 [0229.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.226] GetLastError () returned 0x5 [0229.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF", dwFileAttributes=0x20) returned 0 [0229.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec6f88) returned 1 Thread: id = 8781 os_tid = 0x2694 [0226.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf")) returned 0x20 [0229.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF", dwFileAttributes=0x20) returned 0 [0229.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.228] GetLastError () returned 0x5 [0229.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF", dwFileAttributes=0x20) returned 0 [0229.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7010) returned 1 Thread: id = 8782 os_tid = 0x2698 [0226.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf")) returned 0x20 [0229.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF", dwFileAttributes=0x20) returned 0 [0229.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.230] GetLastError () returned 0x5 [0229.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF", dwFileAttributes=0x20) returned 0 [0229.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7098) returned 1 Thread: id = 8783 os_tid = 0x90 [0226.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf")) returned 0x20 [0229.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF", dwFileAttributes=0x20) returned 0 [0229.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.236] GetLastError () returned 0x5 [0229.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF", dwFileAttributes=0x20) returned 0 [0229.236] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7120) returned 1 Thread: id = 8784 os_tid = 0xb6c [0226.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf")) returned 0x20 [0229.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF", dwFileAttributes=0x20) returned 0 [0229.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.238] GetLastError () returned 0x5 [0229.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF", dwFileAttributes=0x20) returned 0 [0229.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec71a8) returned 1 Thread: id = 8785 os_tid = 0x1d18 [0226.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf")) returned 0x20 [0229.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF", dwFileAttributes=0x20) returned 0 [0229.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.181] GetLastError () returned 0x5 [0229.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF", dwFileAttributes=0x20) returned 0 [0229.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7230) returned 1 Thread: id = 8786 os_tid = 0x1108 [0226.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf")) returned 0x20 [0229.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF", dwFileAttributes=0x20) returned 0 [0229.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.183] GetLastError () returned 0x5 [0229.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF", dwFileAttributes=0x20) returned 0 [0229.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec72b8) returned 1 Thread: id = 8787 os_tid = 0x110c [0226.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf")) returned 0x20 [0229.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", dwFileAttributes=0x20) returned 0 [0229.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.185] GetLastError () returned 0x5 [0229.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF", dwFileAttributes=0x20) returned 0 [0229.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7340) returned 1 Thread: id = 8788 os_tid = 0x2644 [0226.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf")) returned 0x20 [0229.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF", dwFileAttributes=0x20) returned 0 [0229.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.186] GetLastError () returned 0x5 [0229.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF", dwFileAttributes=0x20) returned 0 [0229.186] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec73c8) returned 1 Thread: id = 8789 os_tid = 0x6e4 [0226.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf")) returned 0x20 [0229.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF", dwFileAttributes=0x20) returned 0 [0229.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.188] GetLastError () returned 0x5 [0229.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF", dwFileAttributes=0x20) returned 0 [0229.188] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7450) returned 1 Thread: id = 8790 os_tid = 0x147c [0226.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf")) returned 0x20 [0229.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF", dwFileAttributes=0x20) returned 0 [0229.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.190] GetLastError () returned 0x5 [0229.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF", dwFileAttributes=0x20) returned 0 [0229.190] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec74d8) returned 1 Thread: id = 8791 os_tid = 0x107c [0226.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf")) returned 0x20 [0229.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF", dwFileAttributes=0x20) returned 0 [0229.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.191] GetLastError () returned 0x5 [0229.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF", dwFileAttributes=0x20) returned 0 [0229.192] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7560) returned 1 Thread: id = 8792 os_tid = 0x1088 [0226.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf")) returned 0x20 [0229.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF", dwFileAttributes=0x20) returned 0 [0229.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.202] GetLastError () returned 0x5 [0229.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF", dwFileAttributes=0x20) returned 0 [0229.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec75e8) returned 1 Thread: id = 8794 os_tid = 0x2538 [0226.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf")) returned 0x20 [0229.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF", dwFileAttributes=0x20) returned 0 [0229.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.206] GetLastError () returned 0x5 [0229.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF", dwFileAttributes=0x20) returned 0 [0229.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d060) returned 1 Thread: id = 8795 os_tid = 0x1fb8 [0226.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf")) returned 0x20 [0229.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF", dwFileAttributes=0x20) returned 0 [0229.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.200] GetLastError () returned 0x5 [0229.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF", dwFileAttributes=0x20) returned 0 [0229.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 8796 os_tid = 0x23a4 [0226.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf")) returned 0x20 [0228.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF", dwFileAttributes=0x20) returned 0 [0228.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.983] GetLastError () returned 0x5 [0228.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF", dwFileAttributes=0x20) returned 0 [0228.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 8797 os_tid = 0x1e78 [0227.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf")) returned 0x20 [0229.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF", dwFileAttributes=0x20) returned 0 [0229.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.274] GetLastError () returned 0x5 [0229.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF", dwFileAttributes=0x20) returned 0 [0229.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68dd8) returned 1 Thread: id = 8798 os_tid = 0x1098 [0227.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf")) returned 0x20 [0229.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF", dwFileAttributes=0x20) returned 0 [0229.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.271] GetLastError () returned 0x5 [0229.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF", dwFileAttributes=0x20) returned 0 [0229.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68e60) returned 1 Thread: id = 8799 os_tid = 0x109c [0227.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf")) returned 0x20 [0229.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF", dwFileAttributes=0x20) returned 0 [0229.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.269] GetLastError () returned 0x5 [0229.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF", dwFileAttributes=0x20) returned 0 [0229.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69cb8) returned 1 Thread: id = 8800 os_tid = 0xfc0 [0227.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf")) returned 0x20 [0229.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF", dwFileAttributes=0x20) returned 0 [0229.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.309] GetLastError () returned 0x5 [0229.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF", dwFileAttributes=0x20) returned 0 [0229.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68558) returned 1 Thread: id = 8801 os_tid = 0x1d2c [0227.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf")) returned 0x20 [0229.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF", dwFileAttributes=0x20) returned 0 [0229.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.267] GetLastError () returned 0x5 [0229.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF", dwFileAttributes=0x20) returned 0 [0229.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69328) returned 1 Thread: id = 8802 os_tid = 0x1d30 [0227.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf")) returned 0x20 [0229.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF", dwFileAttributes=0x20) returned 0 [0229.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.307] GetLastError () returned 0x5 [0229.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF", dwFileAttributes=0x20) returned 0 [0229.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a98) returned 1 Thread: id = 8803 os_tid = 0x1d34 [0227.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf")) returned 0x20 [0229.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF", dwFileAttributes=0x20) returned 0 [0229.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.305] GetLastError () returned 0x5 [0229.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF", dwFileAttributes=0x20) returned 0 [0229.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ba8) returned 1 Thread: id = 8804 os_tid = 0x330 [0227.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg")) returned 0x20 [0229.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG", dwFileAttributes=0x20) returned 0 [0229.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.303] GetLastError () returned 0x5 [0229.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG", dwFileAttributes=0x20) returned 0 [0229.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68bb8) returned 1 Thread: id = 8805 os_tid = 0x2460 [0227.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg")) returned 0x20 [0229.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG", dwFileAttributes=0x20) returned 0 [0229.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.301] GetLastError () returned 0x5 [0229.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG", dwFileAttributes=0x20) returned 0 [0229.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68a20) returned 1 Thread: id = 8806 os_tid = 0x2470 [0227.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg")) returned 0x20 [0229.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG", dwFileAttributes=0x20) returned 0 [0229.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.299] GetLastError () returned 0x5 [0229.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG", dwFileAttributes=0x20) returned 0 [0229.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68338) returned 1 Thread: id = 8807 os_tid = 0x16e4 [0227.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg")) returned 0x20 [0229.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG", dwFileAttributes=0x20) returned 0 [0229.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.296] GetLastError () returned 0x5 [0229.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG", dwFileAttributes=0x20) returned 0 [0229.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69b20) returned 1 Thread: id = 8808 os_tid = 0x4f8 [0227.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg")) returned 0x20 [0229.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG", dwFileAttributes=0x20) returned 0 [0229.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.294] GetLastError () returned 0x5 [0229.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG", dwFileAttributes=0x20) returned 0 [0229.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68778) returned 1 Thread: id = 8809 os_tid = 0x1d3c [0227.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg")) returned 0x20 [0229.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG", dwFileAttributes=0x20) returned 0 [0229.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.292] GetLastError () returned 0x5 [0229.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG", dwFileAttributes=0x20) returned 0 [0229.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69438) returned 1 Thread: id = 8810 os_tid = 0xf78 [0227.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf")) returned 0x20 [0229.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF", dwFileAttributes=0x20) returned 0 [0229.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.265] GetLastError () returned 0x5 [0229.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF", dwFileAttributes=0x20) returned 0 [0229.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a10) returned 1 Thread: id = 8811 os_tid = 0xb10 [0227.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf")) returned 0x20 [0229.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF", dwFileAttributes=0x20) returned 0 [0229.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.290] GetLastError () returned 0x5 [0229.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF", dwFileAttributes=0x20) returned 0 [0229.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68aa8) returned 1 Thread: id = 8812 os_tid = 0x188 [0227.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf")) returned 0x20 [0229.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF", dwFileAttributes=0x20) returned 0 [0229.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.263] GetLastError () returned 0x5 [0229.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF", dwFileAttributes=0x20) returned 0 [0229.263] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69900) returned 1 Thread: id = 8813 os_tid = 0x1d20 [0227.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf")) returned 0x20 [0229.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF", dwFileAttributes=0x20) returned 0 [0229.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.261] GetLastError () returned 0x5 [0229.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF", dwFileAttributes=0x20) returned 0 [0229.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69080) returned 1 Thread: id = 8814 os_tid = 0x1d28 [0227.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf")) returned 0x20 [0229.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF", dwFileAttributes=0x20) returned 0 [0229.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.259] GetLastError () returned 0x5 [0229.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF", dwFileAttributes=0x20) returned 0 [0229.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69988) returned 1 Thread: id = 8815 os_tid = 0x2398 [0227.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf")) returned 0x20 [0229.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF", dwFileAttributes=0x20) returned 0 [0229.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.257] GetLastError () returned 0x5 [0229.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF", dwFileAttributes=0x20) returned 0 [0229.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a697f0) returned 1 Thread: id = 8816 os_tid = 0x1c30 [0227.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf")) returned 0x20 [0229.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF", dwFileAttributes=0x20) returned 0 [0229.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.255] GetLastError () returned 0x5 [0229.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF", dwFileAttributes=0x20) returned 0 [0229.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a694c0) returned 1 Thread: id = 8817 os_tid = 0x1d1c [0227.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf")) returned 0x20 [0229.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF", dwFileAttributes=0x20) returned 0 [0229.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.252] GetLastError () returned 0x5 [0229.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF", dwFileAttributes=0x20) returned 0 [0229.253] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69dc8) returned 1 Thread: id = 8818 os_tid = 0x1d24 [0227.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf")) returned 0x20 [0229.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF", dwFileAttributes=0x20) returned 0 [0229.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.251] GetLastError () returned 0x5 [0229.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF", dwFileAttributes=0x20) returned 0 [0229.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69e50) returned 1 Thread: id = 8819 os_tid = 0x1e84 [0227.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf")) returned 0x20 [0229.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF", dwFileAttributes=0x20) returned 0 [0229.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.248] GetLastError () returned 0x5 [0229.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF", dwFileAttributes=0x20) returned 0 [0229.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68888) returned 1 Thread: id = 8820 os_tid = 0x2394 [0227.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf")) returned 0x20 [0229.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF", dwFileAttributes=0x20) returned 0 [0229.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.288] GetLastError () returned 0x5 [0229.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF", dwFileAttributes=0x20) returned 0 [0229.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69d40) returned 1 Thread: id = 8821 os_tid = 0x239c [0227.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf")) returned 0x20 [0229.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF", dwFileAttributes=0x20) returned 0 [0229.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.286] GetLastError () returned 0x5 [0229.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF", dwFileAttributes=0x20) returned 0 [0229.286] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68f70) returned 1 Thread: id = 8822 os_tid = 0x23a0 [0227.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf")) returned 0x20 [0229.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF", dwFileAttributes=0x20) returned 0 [0229.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.246] GetLastError () returned 0x5 [0229.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF", dwFileAttributes=0x20) returned 0 [0229.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ff8) returned 1 Thread: id = 8823 os_tid = 0x2458 [0227.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf")) returned 0x20 [0229.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF", dwFileAttributes=0x20) returned 0 [0229.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.244] GetLastError () returned 0x5 [0229.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF", dwFileAttributes=0x20) returned 0 [0229.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a693b0) returned 1 Thread: id = 8824 os_tid = 0x245c [0227.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf")) returned 0x20 [0229.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF", dwFileAttributes=0x20) returned 0 [0229.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.242] GetLastError () returned 0x5 [0229.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF", dwFileAttributes=0x20) returned 0 [0229.242] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68910) returned 1 Thread: id = 8825 os_tid = 0x1c48 [0227.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf")) returned 0x20 [0229.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF", dwFileAttributes=0x20) returned 0 [0229.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.240] GetLastError () returned 0x5 [0229.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF", dwFileAttributes=0x20) returned 0 [0229.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a692a0) returned 1 Thread: id = 8826 os_tid = 0x2468 [0227.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf")) returned 0x20 [0229.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF", dwFileAttributes=0x20) returned 0 [0229.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.331] GetLastError () returned 0x5 [0229.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF", dwFileAttributes=0x20) returned 0 [0229.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69218) returned 1 Thread: id = 8828 os_tid = 0x1df4 [0227.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf")) returned 0x20 [0229.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF", dwFileAttributes=0x20) returned 0 [0229.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.329] GetLastError () returned 0x5 [0229.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF", dwFileAttributes=0x20) returned 0 [0229.329] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 8829 os_tid = 0x1e7c [0227.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf")) returned 0x20 [0229.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF", dwFileAttributes=0x20) returned 0 [0229.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.327] GetLastError () returned 0x5 [0229.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF", dwFileAttributes=0x20) returned 0 [0229.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 8830 os_tid = 0x1d68 [0227.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf")) returned 0x20 [0229.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF", dwFileAttributes=0x20) returned 0 [0229.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.325] GetLastError () returned 0x5 [0229.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF", dwFileAttributes=0x20) returned 0 [0229.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 8831 os_tid = 0x1d8c [0227.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf")) returned 0x20 [0229.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF", dwFileAttributes=0x20) returned 0 [0229.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.323] GetLastError () returned 0x5 [0229.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF", dwFileAttributes=0x20) returned 0 [0229.323] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 8832 os_tid = 0x1c0 [0227.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf")) returned 0x20 [0229.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF", dwFileAttributes=0x20) returned 0 [0229.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.319] GetLastError () returned 0x5 [0229.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF", dwFileAttributes=0x20) returned 0 [0229.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 8833 os_tid = 0x4c0 [0227.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf")) returned 0x20 [0229.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF", dwFileAttributes=0x20) returned 0 [0229.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.317] GetLastError () returned 0x5 [0229.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF", dwFileAttributes=0x20) returned 0 [0229.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 8834 os_tid = 0x2488 [0227.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf")) returned 0x20 [0229.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF", dwFileAttributes=0x20) returned 0 [0229.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.315] GetLastError () returned 0x5 [0229.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF", dwFileAttributes=0x20) returned 0 [0229.315] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 8835 os_tid = 0x25dc [0227.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf")) returned 0x20 [0229.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF", dwFileAttributes=0x20) returned 0 [0229.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.313] GetLastError () returned 0x5 [0229.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF", dwFileAttributes=0x20) returned 0 [0229.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 8836 os_tid = 0x25e0 [0227.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf")) returned 0x20 [0229.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF", dwFileAttributes=0x20) returned 0 [0229.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.311] GetLastError () returned 0x5 [0229.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF", dwFileAttributes=0x20) returned 0 [0229.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 8837 os_tid = 0x25e4 [0227.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf")) returned 0x20 [0229.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF", dwFileAttributes=0x20) returned 0 [0229.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.362] GetLastError () returned 0x5 [0229.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF", dwFileAttributes=0x20) returned 0 [0229.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 8838 os_tid = 0x25e8 [0227.458] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf")) returned 0x20 [0229.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF", dwFileAttributes=0x20) returned 0 [0229.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.359] GetLastError () returned 0x5 [0229.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF", dwFileAttributes=0x20) returned 0 [0229.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 8839 os_tid = 0xf80 [0227.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf")) returned 0x20 [0229.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF", dwFileAttributes=0x20) returned 0 [0229.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.357] GetLastError () returned 0x5 [0229.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF", dwFileAttributes=0x20) returned 0 [0229.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 8840 os_tid = 0xf7c [0227.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf")) returned 0x20 [0229.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF", dwFileAttributes=0x20) returned 0 [0229.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.282] GetLastError () returned 0x5 [0229.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF", dwFileAttributes=0x20) returned 0 [0229.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 Thread: id = 8841 os_tid = 0xaf0 [0227.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf")) returned 0x20 [0229.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF", dwFileAttributes=0x20) returned 0 [0229.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.280] GetLastError () returned 0x5 [0229.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF", dwFileAttributes=0x20) returned 0 [0229.280] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 8842 os_tid = 0x16e0 [0227.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg")) returned 0x20 [0229.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG", dwFileAttributes=0x20) returned 0 [0229.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.278] GetLastError () returned 0x5 [0229.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG", dwFileAttributes=0x20) returned 0 [0229.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 8843 os_tid = 0x1094 [0227.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg")) returned 0x20 [0229.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG", dwFileAttributes=0x20) returned 0 [0229.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.355] GetLastError () returned 0x5 [0229.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG", dwFileAttributes=0x20) returned 0 [0229.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 8844 os_tid = 0x10a0 [0227.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg")) returned 0x20 [0229.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG", dwFileAttributes=0x20) returned 0 [0229.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.276] GetLastError () returned 0x5 [0229.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG", dwFileAttributes=0x20) returned 0 [0229.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 8845 os_tid = 0x264c [0227.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg")) returned 0x20 [0229.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG", dwFileAttributes=0x20) returned 0 [0229.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.353] GetLastError () returned 0x5 [0229.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG", dwFileAttributes=0x20) returned 0 [0229.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 8846 os_tid = 0x18ac [0227.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg")) returned 0x20 [0229.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG", dwFileAttributes=0x20) returned 0 [0229.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.351] GetLastError () returned 0x5 [0229.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG", dwFileAttributes=0x20) returned 0 [0229.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 8847 os_tid = 0x263c [0227.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg")) returned 0x20 [0229.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG", dwFileAttributes=0x20) returned 0 [0229.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.349] GetLastError () returned 0x5 [0229.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG", dwFileAttributes=0x20) returned 0 [0229.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 8848 os_tid = 0x2640 [0227.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf")) returned 0x20 [0229.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF", dwFileAttributes=0x20) returned 0 [0229.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.345] GetLastError () returned 0x5 [0229.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF", dwFileAttributes=0x20) returned 0 [0229.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 8849 os_tid = 0x266c [0227.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf")) returned 0x20 [0229.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF", dwFileAttributes=0x20) returned 0 [0229.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.343] GetLastError () returned 0x5 [0229.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF", dwFileAttributes=0x20) returned 0 [0229.344] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 8850 os_tid = 0x2670 [0227.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf")) returned 0x20 [0229.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF", dwFileAttributes=0x20) returned 0 [0229.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.341] GetLastError () returned 0x5 [0229.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF", dwFileAttributes=0x20) returned 0 [0229.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 8851 os_tid = 0x1954 [0227.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg")) returned 0x20 [0229.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG", dwFileAttributes=0x20) returned 0 [0229.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.339] GetLastError () returned 0x5 [0229.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG", dwFileAttributes=0x20) returned 0 [0229.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 8852 os_tid = 0x1958 [0227.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg")) returned 0x20 [0229.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG", dwFileAttributes=0x20) returned 0 [0229.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.337] GetLastError () returned 0x5 [0229.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG", dwFileAttributes=0x20) returned 0 [0229.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 8853 os_tid = 0x2674 [0227.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg")) returned 0x20 [0229.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG", dwFileAttributes=0x20) returned 0 [0229.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.335] GetLastError () returned 0x5 [0229.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG", dwFileAttributes=0x20) returned 0 [0229.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 8854 os_tid = 0x2678 [0227.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg")) returned 0x20 [0229.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG", dwFileAttributes=0x20) returned 0 [0229.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.333] GetLastError () returned 0x5 [0229.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG", dwFileAttributes=0x20) returned 0 [0229.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 8855 os_tid = 0x267c [0227.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg")) returned 0x20 [0228.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG", dwFileAttributes=0x20) returned 0 [0228.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.786] GetLastError () returned 0x5 [0228.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG", dwFileAttributes=0x20) returned 0 [0228.787] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 8856 os_tid = 0xb9c [0227.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg")) returned 0x20 [0229.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG", dwFileAttributes=0x20) returned 0 [0229.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.380] GetLastError () returned 0x5 [0229.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG", dwFileAttributes=0x20) returned 0 [0229.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a62558) returned 1 Thread: id = 8857 os_tid = 0x18c8 [0227.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg")) returned 0x20 [0229.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG", dwFileAttributes=0x20) returned 0 [0229.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.378] GetLastError () returned 0x5 [0229.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG", dwFileAttributes=0x20) returned 0 [0229.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7670) returned 1 Thread: id = 8858 os_tid = 0xb94 [0227.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf")) returned 0x20 [0229.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF", dwFileAttributes=0x20) returned 0 [0229.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.376] GetLastError () returned 0x5 [0229.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF", dwFileAttributes=0x20) returned 0 [0229.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec76f8) returned 1 Thread: id = 8859 os_tid = 0xbb4 [0227.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf")) returned 0x20 [0229.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF", dwFileAttributes=0x20) returned 0 [0229.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.374] GetLastError () returned 0x5 [0229.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF", dwFileAttributes=0x20) returned 0 [0229.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7780) returned 1 Thread: id = 8860 os_tid = 0x26cc [0227.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf")) returned 0x20 [0229.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF", dwFileAttributes=0x20) returned 0 [0229.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.372] GetLastError () returned 0x5 [0229.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF", dwFileAttributes=0x20) returned 0 [0229.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7808) returned 1 Thread: id = 8861 os_tid = 0x1210 [0227.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg")) returned 0x20 [0229.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG", dwFileAttributes=0x20) returned 0 [0229.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.370] GetLastError () returned 0x5 [0229.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG", dwFileAttributes=0x20) returned 0 [0229.370] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7890) returned 1 Thread: id = 8862 os_tid = 0x223c [0227.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf")) returned 0x20 [0229.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF", dwFileAttributes=0x20) returned 0 [0229.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.368] GetLastError () returned 0x5 [0229.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF", dwFileAttributes=0x20) returned 0 [0229.368] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7918) returned 1 Thread: id = 8863 os_tid = 0x2248 [0227.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf")) returned 0x20 [0229.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF", dwFileAttributes=0x20) returned 0 [0229.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.366] GetLastError () returned 0x5 [0229.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF", dwFileAttributes=0x20) returned 0 [0229.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec79a0) returned 1 Thread: id = 8864 os_tid = 0x1c10 [0227.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg")) returned 0x20 [0229.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG", dwFileAttributes=0x20) returned 0 [0229.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.364] GetLastError () returned 0x5 [0229.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG", dwFileAttributes=0x20) returned 0 [0229.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7a28) returned 1 Thread: id = 8865 os_tid = 0x18d0 [0227.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg")) returned 0x20 [0228.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG", dwFileAttributes=0x20) returned 0 [0228.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0228.809] GetLastError () returned 0x5 [0228.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG", dwFileAttributes=0x20) returned 0 [0228.810] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ec7ab0) returned 1 Thread: id = 8866 os_tid = 0x1908 [0229.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg")) returned 0x20 [0229.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG", dwFileAttributes=0x20) returned 0 [0229.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.386] GetLastError () returned 0x5 [0229.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG", dwFileAttributes=0x20) returned 0 [0229.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 8867 os_tid = 0xb28 [0229.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg")) returned 0x20 [0229.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG", dwFileAttributes=0x20) returned 0 [0229.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0229.390] GetLastError () returned 0x5 [0229.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG", dwFileAttributes=0x20) returned 0 [0229.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 8868 os_tid = 0x1224 [0229.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg")) returned 0x20 [0230.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG", dwFileAttributes=0x20) returned 0 [0230.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.351] GetLastError () returned 0x5 [0230.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG", dwFileAttributes=0x20) returned 0 [0230.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9de0) returned 1 Thread: id = 8869 os_tid = 0x96c [0229.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg")) returned 0x20 [0233.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG", dwFileAttributes=0x20) returned 0 [0233.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.209] GetLastError () returned 0x5 [0233.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG", dwFileAttributes=0x20) returned 0 [0233.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 8870 os_tid = 0xb50 [0229.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg")) returned 0x20 [0233.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", dwFileAttributes=0x20) returned 0 [0233.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.207] GetLastError () returned 0x5 [0233.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG", dwFileAttributes=0x20) returned 0 [0233.208] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 8871 os_tid = 0xda4 [0229.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg")) returned 0x20 [0233.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG", dwFileAttributes=0x20) returned 0 [0233.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.206] GetLastError () returned 0x5 [0233.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG", dwFileAttributes=0x20) returned 0 [0233.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 8872 os_tid = 0xd9c [0229.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg")) returned 0x20 [0233.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG", dwFileAttributes=0x20) returned 0 [0233.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.229] GetLastError () returned 0x5 [0233.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG", dwFileAttributes=0x20) returned 0 [0233.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 8873 os_tid = 0x115c [0229.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg")) returned 0x20 [0233.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG", dwFileAttributes=0x20) returned 0 [0233.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.227] GetLastError () returned 0x5 [0233.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG", dwFileAttributes=0x20) returned 0 [0233.228] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 8874 os_tid = 0x1c00 [0229.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg")) returned 0x20 [0230.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG", dwFileAttributes=0x20) returned 0 [0230.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.350] GetLastError () returned 0x5 [0230.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG", dwFileAttributes=0x20) returned 0 [0230.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 8875 os_tid = 0xe88 [0229.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg")) returned 0x20 [0233.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG", dwFileAttributes=0x20) returned 0 [0233.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.220] GetLastError () returned 0x5 [0233.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG", dwFileAttributes=0x20) returned 0 [0233.220] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 8876 os_tid = 0xef8 [0229.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg")) returned 0x20 [0233.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG", dwFileAttributes=0x20) returned 0 [0233.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.221] GetLastError () returned 0x5 [0233.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG", dwFileAttributes=0x20) returned 0 [0233.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 8877 os_tid = 0x530 [0229.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg")) returned 0x20 [0232.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG", dwFileAttributes=0x20) returned 0 [0232.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.943] GetLastError () returned 0x5 [0232.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG", dwFileAttributes=0x20) returned 0 [0232.944] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 8878 os_tid = 0x608 [0229.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg")) returned 0x20 [0230.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG", dwFileAttributes=0x20) returned 0 [0230.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0230.349] GetLastError () returned 0x5 [0230.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG", dwFileAttributes=0x20) returned 0 [0230.349] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 8879 os_tid = 0x5c8 [0229.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg")) returned 0x20 [0231.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG", dwFileAttributes=0x20) returned 0 [0231.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.880] GetLastError () returned 0x5 [0231.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG", dwFileAttributes=0x20) returned 0 [0231.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 8880 os_tid = 0xf08 [0229.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg")) returned 0x20 [0232.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG", dwFileAttributes=0x20) returned 0 [0232.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.942] GetLastError () returned 0x5 [0232.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG", dwFileAttributes=0x20) returned 0 [0232.942] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 8881 os_tid = 0xf04 [0229.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg")) returned 0x20 [0231.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG", dwFileAttributes=0x20) returned 0 [0231.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.882] GetLastError () returned 0x5 [0231.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG", dwFileAttributes=0x20) returned 0 [0231.882] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 8882 os_tid = 0xf00 [0229.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg")) returned 0x20 [0231.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG", dwFileAttributes=0x20) returned 0 [0231.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.883] GetLastError () returned 0x5 [0231.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG", dwFileAttributes=0x20) returned 0 [0231.883] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 8883 os_tid = 0x7ec [0229.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg")) returned 0x20 [0232.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG", dwFileAttributes=0x20) returned 0 [0232.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.043] GetLastError () returned 0x5 [0233.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG", dwFileAttributes=0x20) returned 0 [0233.043] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 8884 os_tid = 0x14c [0229.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg")) returned 0x20 [0232.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG", dwFileAttributes=0x20) returned 0 [0232.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.144] GetLastError () returned 0x5 [0233.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG", dwFileAttributes=0x20) returned 0 [0233.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 8885 os_tid = 0x490 [0229.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg")) returned 0x20 [0232.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG", dwFileAttributes=0x20) returned 0 [0232.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.948] GetLastError () returned 0x5 [0232.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG", dwFileAttributes=0x20) returned 0 [0232.949] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 8886 os_tid = 0x125c [0229.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg")) returned 0x20 [0232.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG", dwFileAttributes=0x20) returned 0 [0232.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.947] GetLastError () returned 0x5 [0232.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG", dwFileAttributes=0x20) returned 0 [0232.947] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 8887 os_tid = 0x1a58 [0229.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg")) returned 0x20 [0232.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG", dwFileAttributes=0x20) returned 0 [0232.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.945] GetLastError () returned 0x5 [0232.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG", dwFileAttributes=0x20) returned 0 [0232.945] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 8888 os_tid = 0x2024 [0229.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg")) returned 0x20 [0231.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG", dwFileAttributes=0x20) returned 0 [0231.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.884] GetLastError () returned 0x5 [0231.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG", dwFileAttributes=0x20) returned 0 [0231.885] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 8889 os_tid = 0x8e8 [0229.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg")) returned 0x20 [0233.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG", dwFileAttributes=0x20) returned 0 [0233.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.210] GetLastError () returned 0x5 [0233.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG", dwFileAttributes=0x20) returned 0 [0233.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 8890 os_tid = 0x474 [0229.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg")) returned 0x20 [0233.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG", dwFileAttributes=0x20) returned 0 [0233.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.212] GetLastError () returned 0x5 [0233.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG", dwFileAttributes=0x20) returned 0 [0233.212] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 8891 os_tid = 0x2474 [0229.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg")) returned 0x20 [0233.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG", dwFileAttributes=0x20) returned 0 [0233.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.213] GetLastError () returned 0x5 [0233.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG", dwFileAttributes=0x20) returned 0 [0233.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 8892 os_tid = 0x2478 [0229.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg")) returned 0x20 [0233.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG", dwFileAttributes=0x20) returned 0 [0233.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.214] GetLastError () returned 0x5 [0233.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG", dwFileAttributes=0x20) returned 0 [0233.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 8893 os_tid = 0x1c04 [0229.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg")) returned 0x20 [0232.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG", dwFileAttributes=0x20) returned 0 [0232.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.940] GetLastError () returned 0x5 [0232.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG", dwFileAttributes=0x20) returned 0 [0232.940] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 8894 os_tid = 0x1c0c [0229.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg")) returned 0x20 [0233.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG", dwFileAttributes=0x20) returned 0 [0233.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.216] GetLastError () returned 0x5 [0233.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG", dwFileAttributes=0x20) returned 0 [0233.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 8895 os_tid = 0x1e3c [0229.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg")) returned 0x20 [0232.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG", dwFileAttributes=0x20) returned 0 [0232.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.938] GetLastError () returned 0x5 [0232.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG", dwFileAttributes=0x20) returned 0 [0232.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 8896 os_tid = 0x1e40 [0229.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg")) returned 0x20 [0232.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG", dwFileAttributes=0x20) returned 0 [0232.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0232.909] GetLastError () returned 0x5 [0232.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG", dwFileAttributes=0x20) returned 0 [0232.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 8897 os_tid = 0x1e88 [0229.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg")) returned 0x20 [0233.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG", dwFileAttributes=0x20) returned 0 [0233.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.217] GetLastError () returned 0x5 [0233.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG", dwFileAttributes=0x20) returned 0 [0233.217] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 8898 os_tid = 0x1ef0 [0229.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg")) returned 0x20 [0233.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG", dwFileAttributes=0x20) returned 0 [0233.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.226] GetLastError () returned 0x5 [0233.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG", dwFileAttributes=0x20) returned 0 [0233.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 8899 os_tid = 0x1f0c [0229.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg")) returned 0x20 [0233.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG", dwFileAttributes=0x20) returned 0 [0233.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.218] GetLastError () returned 0x5 [0233.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG", dwFileAttributes=0x20) returned 0 [0233.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 8900 os_tid = 0x1f88 [0230.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg")) returned 0x20 [0231.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG", dwFileAttributes=0x20) returned 0 [0231.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.879] GetLastError () returned 0x5 [0231.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG", dwFileAttributes=0x20) returned 0 [0231.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 8901 os_tid = 0x1f8c [0230.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg")) returned 0x20 [0233.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG", dwFileAttributes=0x20) returned 0 [0233.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.225] GetLastError () returned 0x5 [0233.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG", dwFileAttributes=0x20) returned 0 [0233.225] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 8902 os_tid = 0x2018 [0230.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg")) returned 0x20 [0233.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG", dwFileAttributes=0x20) returned 0 [0233.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.222] GetLastError () returned 0x5 [0233.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG", dwFileAttributes=0x20) returned 0 [0233.223] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 8903 os_tid = 0x202c [0230.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg")) returned 0x20 [0234.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG", dwFileAttributes=0x20) returned 0 [0234.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.614] GetLastError () returned 0x5 [0234.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG", dwFileAttributes=0x20) returned 0 [0234.614] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb91a8) returned 1 Thread: id = 8904 os_tid = 0x2034 [0230.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg")) returned 0x20 [0234.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG", dwFileAttributes=0x20) returned 0 [0234.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.616] GetLastError () returned 0x5 [0234.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG", dwFileAttributes=0x20) returned 0 [0234.616] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba3b8) returned 1 Thread: id = 8905 os_tid = 0x203c [0230.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg")) returned 0x20 [0234.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG", dwFileAttributes=0x20) returned 0 [0234.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.617] GetLastError () returned 0x5 [0234.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG", dwFileAttributes=0x20) returned 0 [0234.618] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9918) returned 1 Thread: id = 8906 os_tid = 0x247c [0230.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg")) returned 0x20 [0234.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG", dwFileAttributes=0x20) returned 0 [0234.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.587] GetLastError () returned 0x5 [0234.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG", dwFileAttributes=0x20) returned 0 [0234.587] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f88) returned 1 Thread: id = 8907 os_tid = 0x2480 [0230.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg")) returned 0x20 [0234.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG", dwFileAttributes=0x20) returned 0 [0234.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.619] GetLastError () returned 0x5 [0234.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG", dwFileAttributes=0x20) returned 0 [0234.619] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9890) returned 1 Thread: id = 8908 os_tid = 0x2484 [0230.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg")) returned 0x20 [0234.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG", dwFileAttributes=0x20) returned 0 [0234.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.589] GetLastError () returned 0x5 [0234.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG", dwFileAttributes=0x20) returned 0 [0234.589] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb92b8) returned 1 Thread: id = 8909 os_tid = 0x249c [0230.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg")) returned 0x20 [0234.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG", dwFileAttributes=0x20) returned 0 [0234.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.590] GetLastError () returned 0x5 [0234.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG", dwFileAttributes=0x20) returned 0 [0234.591] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba6e8) returned 1 Thread: id = 8910 os_tid = 0x528 [0230.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg")) returned 0x20 [0234.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG", dwFileAttributes=0x20) returned 0 [0234.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.592] GetLastError () returned 0x5 [0234.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG", dwFileAttributes=0x20) returned 0 [0234.592] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9780) returned 1 Thread: id = 8911 os_tid = 0x9cc [0230.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg")) returned 0x20 [0234.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG", dwFileAttributes=0x20) returned 0 [0234.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.649] GetLastError () returned 0x5 [0234.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG", dwFileAttributes=0x20) returned 0 [0234.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb99a0) returned 1 Thread: id = 8912 os_tid = 0x9dc [0230.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg")) returned 0x20 [0234.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG", dwFileAttributes=0x20) returned 0 [0234.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.651] GetLastError () returned 0x5 [0234.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG", dwFileAttributes=0x20) returned 0 [0234.651] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba330) returned 1 Thread: id = 8913 os_tid = 0x257c [0230.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg")) returned 0x20 [0234.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG", dwFileAttributes=0x20) returned 0 [0234.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.652] GetLastError () returned 0x5 [0234.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG", dwFileAttributes=0x20) returned 0 [0234.653] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9c48) returned 1 Thread: id = 8914 os_tid = 0x2580 [0230.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg")) returned 0x20 [0234.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG", dwFileAttributes=0x20) returned 0 [0234.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.654] GetLastError () returned 0x5 [0234.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG", dwFileAttributes=0x20) returned 0 [0234.654] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 8915 os_tid = 0x24a0 [0230.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg")) returned 0x20 [0234.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG", dwFileAttributes=0x20) returned 0 [0234.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.656] GetLastError () returned 0x5 [0234.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG", dwFileAttributes=0x20) returned 0 [0234.656] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba5d8) returned 1 Thread: id = 8916 os_tid = 0x27d8 [0230.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg")) returned 0x20 [0234.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG", dwFileAttributes=0x20) returned 0 [0234.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.658] GetLastError () returned 0x5 [0234.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG", dwFileAttributes=0x20) returned 0 [0234.658] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9808) returned 1 Thread: id = 8917 os_tid = 0x2584 [0230.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg")) returned 0x20 [0234.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG", dwFileAttributes=0x20) returned 0 [0234.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.660] GetLastError () returned 0x5 [0234.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG", dwFileAttributes=0x20) returned 0 [0234.660] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 8918 os_tid = 0x24a4 [0230.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg")) returned 0x20 [0234.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG", dwFileAttributes=0x20) returned 0 [0234.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.662] GetLastError () returned 0x5 [0234.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG", dwFileAttributes=0x20) returned 0 [0234.662] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bdc8) returned 1 Thread: id = 8919 os_tid = 0x24a8 [0230.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg")) returned 0x20 [0234.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG", dwFileAttributes=0x20) returned 0 [0234.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.664] GetLastError () returned 0x5 [0234.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG", dwFileAttributes=0x20) returned 0 [0234.664] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d748) returned 1 Thread: id = 8920 os_tid = 0x5f4 [0230.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg")) returned 0x20 [0234.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG", dwFileAttributes=0x20) returned 0 [0234.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.610] GetLastError () returned 0x5 [0234.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG", dwFileAttributes=0x20) returned 0 [0234.611] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d4a0) returned 1 Thread: id = 8921 os_tid = 0x209c [0230.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg")) returned 0x20 [0234.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG", dwFileAttributes=0x20) returned 0 [0234.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.612] GetLastError () returned 0x5 [0234.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG", dwFileAttributes=0x20) returned 0 [0234.612] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d968) returned 1 Thread: id = 8922 os_tid = 0x140 [0230.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg")) returned 0x20 [0234.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG", dwFileAttributes=0x20) returned 0 [0234.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.632] GetLastError () returned 0x5 [0234.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG", dwFileAttributes=0x20) returned 0 [0234.633] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d060) returned 1 Thread: id = 8923 os_tid = 0xa3c [0230.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg")) returned 0x20 [0234.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG", dwFileAttributes=0x20) returned 0 [0234.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.634] GetLastError () returned 0x5 [0234.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG", dwFileAttributes=0x20) returned 0 [0234.634] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cd30) returned 1 Thread: id = 8924 os_tid = 0x1684 [0230.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg")) returned 0x20 [0234.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG", dwFileAttributes=0x20) returned 0 [0234.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.636] GetLastError () returned 0x5 [0234.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG", dwFileAttributes=0x20) returned 0 [0234.636] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d1f8) returned 1 Thread: id = 8925 os_tid = 0x7e0 [0230.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg")) returned 0x20 [0234.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG", dwFileAttributes=0x20) returned 0 [0234.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.583] GetLastError () returned 0x5 [0234.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG", dwFileAttributes=0x20) returned 0 [0234.584] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3be50) returned 1 Thread: id = 8926 os_tid = 0x21a0 [0230.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg")) returned 0x20 [0234.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG", dwFileAttributes=0x20) returned 0 [0234.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.585] GetLastError () returned 0x5 [0234.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG", dwFileAttributes=0x20) returned 0 [0234.585] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c648) returned 1 Thread: id = 8927 os_tid = 0x21ac [0230.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg")) returned 0x20 [0233.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG", dwFileAttributes=0x20) returned 0 [0233.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0233.224] GetLastError () returned 0x5 [0233.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG", dwFileAttributes=0x20) returned 0 [0233.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 8928 os_tid = 0x21b0 [0230.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg")) returned 0x20 [0234.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG", dwFileAttributes=0x20) returned 0 [0234.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.574] GetLastError () returned 0x5 [0234.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG", dwFileAttributes=0x20) returned 0 [0234.574] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d280) returned 1 Thread: id = 8929 os_tid = 0x23f4 [0230.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg")) returned 0x20 [0234.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG", dwFileAttributes=0x20) returned 0 [0234.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.546] GetLastError () returned 0x5 [0234.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG", dwFileAttributes=0x20) returned 0 [0234.546] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9de0) returned 1 Thread: id = 8930 os_tid = 0x584 [0230.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg")) returned 0x20 [0234.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG", dwFileAttributes=0x20) returned 0 [0234.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.548] GetLastError () returned 0x5 [0234.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG", dwFileAttributes=0x20) returned 0 [0234.549] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb94d8) returned 1 Thread: id = 8931 os_tid = 0x26a8 [0230.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg")) returned 0x20 [0234.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG", dwFileAttributes=0x20) returned 0 [0234.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.621] GetLastError () returned 0x5 [0234.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG", dwFileAttributes=0x20) returned 0 [0234.621] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8ce0) returned 1 Thread: id = 8932 os_tid = 0x26c0 [0230.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png")) returned 0x20 [0234.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG", dwFileAttributes=0x20) returned 0 [0234.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.576] GetLastError () returned 0x5 [0234.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG", dwFileAttributes=0x20) returned 0 [0234.576] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c208) returned 1 Thread: id = 8933 os_tid = 0x26d8 [0230.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png")) returned 0x20 [0234.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG", dwFileAttributes=0x20) returned 0 [0234.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.594] GetLastError () returned 0x5 [0234.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG", dwFileAttributes=0x20) returned 0 [0234.594] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cdb8) returned 1 Thread: id = 8934 os_tid = 0x2588 [0230.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png")) returned 0x20 [0234.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG", dwFileAttributes=0x20) returned 0 [0234.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.596] GetLastError () returned 0x5 [0234.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG", dwFileAttributes=0x20) returned 0 [0234.596] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c6d0) returned 1 Thread: id = 8935 os_tid = 0x258c [0230.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png")) returned 0x20 [0234.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG", dwFileAttributes=0x20) returned 0 [0234.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.598] GetLastError () returned 0x5 [0234.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG", dwFileAttributes=0x20) returned 0 [0234.598] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c538) returned 1 Thread: id = 8936 os_tid = 0x3e8 [0230.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png")) returned 0x20 [0234.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG", dwFileAttributes=0x20) returned 0 [0234.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.600] GetLastError () returned 0x5 [0234.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG", dwFileAttributes=0x20) returned 0 [0234.600] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c7e0) returned 1 Thread: id = 8937 os_tid = 0x2610 [0230.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid")) returned 0x20 [0234.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID", dwFileAttributes=0x20) returned 0 [0234.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.602] GetLastError () returned 0x5 [0234.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID", dwFileAttributes=0x20) returned 0 [0234.602] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c290) returned 1 Thread: id = 8938 os_tid = 0x2664 [0230.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid")) returned 0x20 [0234.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID", dwFileAttributes=0x20) returned 0 [0234.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.603] GetLastError () returned 0x5 [0234.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID", dwFileAttributes=0x20) returned 0 [0234.604] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cf50) returned 1 Thread: id = 8939 os_tid = 0x2648 [0230.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf")) returned 0x20 [0234.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF", dwFileAttributes=0x20) returned 0 [0234.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.623] GetLastError () returned 0x5 [0234.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF", dwFileAttributes=0x20) returned 0 [0234.623] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c3a0) returned 1 Thread: id = 8940 os_tid = 0xfd0 [0230.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf")) returned 0x20 [0234.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF", dwFileAttributes=0x20) returned 0 [0234.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.625] GetLastError () returned 0x5 [0234.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF", dwFileAttributes=0x20) returned 0 [0234.625] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d308) returned 1 Thread: id = 8941 os_tid = 0x20e8 [0230.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf")) returned 0x20 [0234.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF", dwFileAttributes=0x20) returned 0 [0234.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.626] GetLastError () returned 0x5 [0234.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF", dwFileAttributes=0x20) returned 0 [0234.627] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c070) returned 1 Thread: id = 8942 os_tid = 0x20ec [0230.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid")) returned 0x20 [0234.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID", dwFileAttributes=0x20) returned 0 [0234.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.628] GetLastError () returned 0x5 [0234.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID", dwFileAttributes=0x20) returned 0 [0234.628] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bf60) returned 1 Thread: id = 8943 os_tid = 0x20f0 [0230.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf")) returned 0x20 [0234.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF", dwFileAttributes=0x20) returned 0 [0234.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.630] GetLastError () returned 0x5 [0234.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF", dwFileAttributes=0x20) returned 0 [0234.630] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d638) returned 1 Thread: id = 8944 os_tid = 0x20f4 [0230.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf")) returned 0x20 [0234.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF", dwFileAttributes=0x20) returned 0 [0234.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.605] GetLastError () returned 0x5 [0234.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF", dwFileAttributes=0x20) returned 0 [0234.605] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cc20) returned 1 Thread: id = 8945 os_tid = 0x20f8 [0230.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf")) returned 0x20 [0234.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF", dwFileAttributes=0x20) returned 0 [0234.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.607] GetLastError () returned 0x5 [0234.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF", dwFileAttributes=0x20) returned 0 [0234.607] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3ca00) returned 1 Thread: id = 8946 os_tid = 0x20fc [0230.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf")) returned 0x20 [0234.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF", dwFileAttributes=0x20) returned 0 [0234.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.609] GetLastError () returned 0x5 [0234.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF", dwFileAttributes=0x20) returned 0 [0234.609] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bc30) returned 1 Thread: id = 8947 os_tid = 0x2100 [0230.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf")) returned 0x20 [0234.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF", dwFileAttributes=0x20) returned 0 [0234.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.539] GetLastError () returned 0x5 [0234.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF", dwFileAttributes=0x20) returned 0 [0234.539] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c758) returned 1 Thread: id = 8948 os_tid = 0x2104 [0230.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf")) returned 0x20 [0234.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF", dwFileAttributes=0x20) returned 0 [0234.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.541] GetLastError () returned 0x5 [0234.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF", dwFileAttributes=0x20) returned 0 [0234.541] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d7d0) returned 1 Thread: id = 8949 os_tid = 0x2108 [0230.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf")) returned 0x20 [0234.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF", dwFileAttributes=0x20) returned 0 [0234.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.542] GetLastError () returned 0x5 [0234.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF", dwFileAttributes=0x20) returned 0 [0234.543] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cec8) returned 1 Thread: id = 8950 os_tid = 0x210c [0230.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf")) returned 0x20 [0234.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", dwFileAttributes=0x20) returned 0 [0234.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.544] GetLastError () returned 0x5 [0234.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF", dwFileAttributes=0x20) returned 0 [0234.544] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c5c0) returned 1 Thread: id = 8951 os_tid = 0x2110 [0230.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf")) returned 0x20 [0234.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF", dwFileAttributes=0x20) returned 0 [0234.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.462] GetLastError () returned 0x5 [0234.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF", dwFileAttributes=0x20) returned 0 [0234.462] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3da78) returned 1 Thread: id = 8952 os_tid = 0x2114 [0230.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf")) returned 0x20 [0234.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF", dwFileAttributes=0x20) returned 0 [0234.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.463] GetLastError () returned 0x5 [0234.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF", dwFileAttributes=0x20) returned 0 [0234.464] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d390) returned 1 Thread: id = 8953 os_tid = 0x2118 [0230.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf")) returned 0x20 [0234.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF", dwFileAttributes=0x20) returned 0 [0234.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.465] GetLastError () returned 0x5 [0234.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF", dwFileAttributes=0x20) returned 0 [0234.465] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c978) returned 1 Thread: id = 8954 os_tid = 0x211c [0230.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf")) returned 0x20 [0234.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF", dwFileAttributes=0x20) returned 0 [0234.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.550] GetLastError () returned 0x5 [0234.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF", dwFileAttributes=0x20) returned 0 [0234.550] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3c180) returned 1 Thread: id = 8955 os_tid = 0x2120 [0230.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf")) returned 0x20 [0234.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF", dwFileAttributes=0x20) returned 0 [0234.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.552] GetLastError () returned 0x5 [0234.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF", dwFileAttributes=0x20) returned 0 [0234.552] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d6c0) returned 1 Thread: id = 8956 os_tid = 0x1f24 [0230.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf")) returned 0x20 [0234.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF", dwFileAttributes=0x20) returned 0 [0234.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.554] GetLastError () returned 0x5 [0234.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF", dwFileAttributes=0x20) returned 0 [0234.554] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bd40) returned 1 Thread: id = 8957 os_tid = 0x2124 [0230.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf")) returned 0x20 [0234.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF", dwFileAttributes=0x20) returned 0 [0234.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.556] GetLastError () returned 0x5 [0234.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF", dwFileAttributes=0x20) returned 0 [0234.572] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3cb10) returned 1 Thread: id = 8958 os_tid = 0x2128 [0230.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf")) returned 0x20 [0234.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF", dwFileAttributes=0x20) returned 0 [0234.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.428] GetLastError () returned 0x5 [0234.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF", dwFileAttributes=0x20) returned 0 [0234.428] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3bed8) returned 1 Thread: id = 8959 os_tid = 0x212c [0230.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf")) returned 0x20 [0234.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF", dwFileAttributes=0x20) returned 0 [0234.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.427] GetLastError () returned 0x5 [0234.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF", dwFileAttributes=0x20) returned 0 [0234.427] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e478) returned 1 Thread: id = 8960 os_tid = 0xc2c [0230.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf")) returned 0x20 [0234.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF", dwFileAttributes=0x20) returned 0 [0234.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.425] GetLastError () returned 0x5 [0234.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF", dwFileAttributes=0x20) returned 0 [0234.425] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ead8) returned 1 Thread: id = 8961 os_tid = 0xbd0 [0230.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf")) returned 0x20 [0234.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF", dwFileAttributes=0x20) returned 0 [0234.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.423] GetLastError () returned 0x5 [0234.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF", dwFileAttributes=0x20) returned 0 [0234.424] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e500) returned 1 Thread: id = 8962 os_tid = 0x1594 [0230.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf")) returned 0x20 [0234.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF", dwFileAttributes=0x20) returned 0 [0234.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.414] GetLastError () returned 0x5 [0234.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF", dwFileAttributes=0x20) returned 0 [0234.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36f3e0) returned 1 Thread: id = 8963 os_tid = 0x10a4 [0230.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf")) returned 0x20 [0234.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF", dwFileAttributes=0x20) returned 0 [0234.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.415] GetLastError () returned 0x5 [0234.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF", dwFileAttributes=0x20) returned 0 [0234.416] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ed80) returned 1 Thread: id = 8964 os_tid = 0x10a8 [0230.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf")) returned 0x20 [0234.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF", dwFileAttributes=0x20) returned 0 [0234.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.417] GetLastError () returned 0x5 [0234.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF", dwFileAttributes=0x20) returned 0 [0234.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36ecf8) returned 1 Thread: id = 8965 os_tid = 0x10ac [0230.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf")) returned 0x20 [0234.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF", dwFileAttributes=0x20) returned 0 [0234.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.492] GetLastError () returned 0x5 [0234.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF", dwFileAttributes=0x20) returned 0 [0234.492] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36fc60) returned 1 Thread: id = 8966 os_tid = 0x10b0 [0230.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf")) returned 0x20 [0234.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF", dwFileAttributes=0x20) returned 0 [0234.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.493] GetLastError () returned 0x5 [0234.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF", dwFileAttributes=0x20) returned 0 [0234.494] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e588) returned 1 Thread: id = 8967 os_tid = 0x10b4 [0230.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf")) returned 0x20 [0234.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF", dwFileAttributes=0x20) returned 0 [0234.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.422] GetLastError () returned 0x5 [0234.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF", dwFileAttributes=0x20) returned 0 [0234.422] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x36e830) returned 1 Thread: id = 8968 os_tid = 0x10b8 [0230.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf")) returned 0x20 [0234.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF", dwFileAttributes=0x20) returned 0 [0234.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.399] GetLastError () returned 0x5 [0234.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF", dwFileAttributes=0x20) returned 0 [0234.400] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bd50) returned 1 Thread: id = 8969 os_tid = 0x10bc [0230.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf")) returned 0x20 [0234.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF", dwFileAttributes=0x20) returned 0 [0234.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.401] GetLastError () returned 0x5 [0234.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF", dwFileAttributes=0x20) returned 0 [0234.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ca10) returned 1 Thread: id = 8970 os_tid = 0x10c0 [0230.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf")) returned 0x20 [0234.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF", dwFileAttributes=0x20) returned 0 [0234.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.403] GetLastError () returned 0x5 [0234.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF", dwFileAttributes=0x20) returned 0 [0234.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1d4b0) returned 1 Thread: id = 8971 os_tid = 0x10d0 [0230.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf")) returned 0x20 [0234.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF", dwFileAttributes=0x20) returned 0 [0234.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.405] GetLastError () returned 0x5 [0234.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF", dwFileAttributes=0x20) returned 0 [0234.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1b888) returned 1 Thread: id = 8972 os_tid = 0x10d4 [0230.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf")) returned 0x20 [0234.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF", dwFileAttributes=0x20) returned 0 [0234.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.407] GetLastError () returned 0x5 [0234.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF", dwFileAttributes=0x20) returned 0 [0234.407] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ced8) returned 1 Thread: id = 8973 os_tid = 0x10d8 [0230.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf")) returned 0x20 [0234.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF", dwFileAttributes=0x20) returned 0 [0234.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.409] GetLastError () returned 0x5 [0234.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF", dwFileAttributes=0x20) returned 0 [0234.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1ba20) returned 1 Thread: id = 8974 os_tid = 0x18a8 [0230.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf")) returned 0x20 [0234.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF", dwFileAttributes=0x20) returned 0 [0234.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.356] GetLastError () returned 0x5 [0234.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF", dwFileAttributes=0x20) returned 0 [0234.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1cd40) returned 1 Thread: id = 8975 os_tid = 0x10dc [0230.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf")) returned 0x20 [0234.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF", dwFileAttributes=0x20) returned 0 [0234.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.374] GetLastError () returned 0x5 [0234.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF", dwFileAttributes=0x20) returned 0 [0234.374] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1bdd8) returned 1 Thread: id = 8976 os_tid = 0x10e0 [0230.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf")) returned 0x20 [0234.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF", dwFileAttributes=0x20) returned 0 [0234.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.375] GetLastError () returned 0x5 [0234.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF", dwFileAttributes=0x20) returned 0 [0234.376] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3063428) returned 1 Thread: id = 8977 os_tid = 0x10e4 [0230.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf")) returned 0x20 [0234.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF", dwFileAttributes=0x20) returned 0 [0234.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.410] GetLastError () returned 0x5 [0234.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF", dwFileAttributes=0x20) returned 0 [0234.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062988) returned 1 Thread: id = 8978 os_tid = 0x10e8 [0230.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf")) returned 0x20 [0234.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF", dwFileAttributes=0x20) returned 0 [0234.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.412] GetLastError () returned 0x5 [0234.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF", dwFileAttributes=0x20) returned 0 [0234.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062c30) returned 1 Thread: id = 8979 os_tid = 0x5d0 [0230.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf")) returned 0x20 [0234.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF", dwFileAttributes=0x20) returned 0 [0234.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.377] GetLastError () returned 0x5 [0234.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF", dwFileAttributes=0x20) returned 0 [0234.377] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x30633a0) returned 1 Thread: id = 8980 os_tid = 0x18b0 [0230.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf")) returned 0x20 [0234.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF", dwFileAttributes=0x20) returned 0 [0234.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.379] GetLastError () returned 0x5 [0234.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF", dwFileAttributes=0x20) returned 0 [0234.379] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3062a10) returned 1 Thread: id = 8981 os_tid = 0x18b8 [0230.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf")) returned 0x20 [0234.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF", dwFileAttributes=0x20) returned 0 [0234.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.381] GetLastError () returned 0x5 [0234.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF", dwFileAttributes=0x20) returned 0 [0234.381] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3061f70) returned 1 Thread: id = 8982 os_tid = 0x18bc [0230.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf")) returned 0x20 [0234.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF", dwFileAttributes=0x20) returned 0 [0234.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.382] GetLastError () returned 0x5 [0234.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF", dwFileAttributes=0x20) returned 0 [0234.382] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a680) returned 1 Thread: id = 8983 os_tid = 0x195c [0230.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf")) returned 0x20 [0234.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF", dwFileAttributes=0x20) returned 0 [0234.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.384] GetLastError () returned 0x5 [0234.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF", dwFileAttributes=0x20) returned 0 [0234.384] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3099cf0) returned 1 Thread: id = 8984 os_tid = 0x10f0 [0230.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf")) returned 0x20 [0234.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF", dwFileAttributes=0x20) returned 0 [0234.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.385] GetLastError () returned 0x5 [0234.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF", dwFileAttributes=0x20) returned 0 [0234.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a5f8) returned 1 Thread: id = 8985 os_tid = 0x10f4 [0230.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf")) returned 0x20 [0234.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF", dwFileAttributes=0x20) returned 0 [0234.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.387] GetLastError () returned 0x5 [0234.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF", dwFileAttributes=0x20) returned 0 [0234.388] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x309a708) returned 1 Thread: id = 8986 os_tid = 0xefc [0230.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf")) returned 0x20 [0234.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF", dwFileAttributes=0x20) returned 0 [0234.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.389] GetLastError () returned 0x5 [0234.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF", dwFileAttributes=0x20) returned 0 [0234.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb198) returned 1 Thread: id = 8987 os_tid = 0x10f8 [0230.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf")) returned 0x20 [0234.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF", dwFileAttributes=0x20) returned 0 [0234.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.391] GetLastError () returned 0x5 [0234.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF", dwFileAttributes=0x20) returned 0 [0234.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb220) returned 1 Thread: id = 8988 os_tid = 0x10fc [0230.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf")) returned 0x20 [0234.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF", dwFileAttributes=0x20) returned 0 [0234.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.467] GetLastError () returned 0x5 [0234.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF", dwFileAttributes=0x20) returned 0 [0234.467] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb2a8) returned 1 Thread: id = 8989 os_tid = 0x7bc [0230.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf")) returned 0x20 [0234.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF", dwFileAttributes=0x20) returned 0 [0234.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.469] GetLastError () returned 0x5 [0234.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF", dwFileAttributes=0x20) returned 0 [0234.469] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb330) returned 1 Thread: id = 8990 os_tid = 0x1104 [0230.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf")) returned 0x20 [0234.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF", dwFileAttributes=0x20) returned 0 [0234.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.395] GetLastError () returned 0x5 [0234.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF", dwFileAttributes=0x20) returned 0 [0234.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb3b8) returned 1 Thread: id = 8991 os_tid = 0x232c [0230.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf")) returned 0x20 [0234.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF", dwFileAttributes=0x20) returned 0 [0234.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.397] GetLastError () returned 0x5 [0234.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF", dwFileAttributes=0x20) returned 0 [0234.397] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb440) returned 1 Thread: id = 8992 os_tid = 0x1448 [0230.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf")) returned 0x20 [0234.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF", dwFileAttributes=0x20) returned 0 [0234.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.357] GetLastError () returned 0x5 [0234.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF", dwFileAttributes=0x20) returned 0 [0234.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb4c8) returned 1 Thread: id = 8993 os_tid = 0x144c [0230.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf")) returned 0x20 [0234.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF", dwFileAttributes=0x20) returned 0 [0234.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.359] GetLastError () returned 0x5 [0234.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF", dwFileAttributes=0x20) returned 0 [0234.359] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb550) returned 1 Thread: id = 8994 os_tid = 0x176c [0230.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf")) returned 0x20 [0234.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF", dwFileAttributes=0x20) returned 0 [0234.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.361] GetLastError () returned 0x5 [0234.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF", dwFileAttributes=0x20) returned 0 [0234.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb5d8) returned 1 Thread: id = 8995 os_tid = 0x1090 [0230.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf")) returned 0x20 [0234.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF", dwFileAttributes=0x20) returned 0 [0234.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.362] GetLastError () returned 0x5 [0234.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF", dwFileAttributes=0x20) returned 0 [0234.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb660) returned 1 Thread: id = 8996 os_tid = 0x1770 [0230.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf")) returned 0x20 [0234.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF", dwFileAttributes=0x20) returned 0 [0234.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.364] GetLastError () returned 0x5 [0234.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF", dwFileAttributes=0x20) returned 0 [0234.364] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb6e8) returned 1 Thread: id = 8997 os_tid = 0x1698 [0230.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf")) returned 0x20 [0234.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF", dwFileAttributes=0x20) returned 0 [0234.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.365] GetLastError () returned 0x5 [0234.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF", dwFileAttributes=0x20) returned 0 [0234.366] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb770) returned 1 Thread: id = 8998 os_tid = 0xdd4 [0230.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf")) returned 0x20 [0234.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF", dwFileAttributes=0x20) returned 0 [0234.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.419] GetLastError () returned 0x5 [0234.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF", dwFileAttributes=0x20) returned 0 [0234.419] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb7f8) returned 1 Thread: id = 8999 os_tid = 0x99c [0230.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf")) returned 0x20 [0234.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF", dwFileAttributes=0x20) returned 0 [0234.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.420] GetLastError () returned 0x5 [0234.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF", dwFileAttributes=0x20) returned 0 [0234.420] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb880) returned 1 Thread: id = 9000 os_tid = 0x2598 [0230.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf")) returned 0x20 [0234.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF", dwFileAttributes=0x20) returned 0 [0234.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.371] GetLastError () returned 0x5 [0234.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF", dwFileAttributes=0x20) returned 0 [0234.371] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb908) returned 1 Thread: id = 9001 os_tid = 0x259c [0230.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf")) returned 0x20 [0234.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF", dwFileAttributes=0x20) returned 0 [0234.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.372] GetLastError () returned 0x5 [0234.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF", dwFileAttributes=0x20) returned 0 [0234.372] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeb990) returned 1 Thread: id = 9002 os_tid = 0x15c8 [0230.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf")) returned 0x20 [0234.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF", dwFileAttributes=0x20) returned 0 [0234.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.369] GetLastError () returned 0x5 [0234.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF", dwFileAttributes=0x20) returned 0 [0234.369] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeba18) returned 1 Thread: id = 9003 os_tid = 0x25a4 [0230.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf")) returned 0x20 [0234.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF", dwFileAttributes=0x20) returned 0 [0234.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.353] GetLastError () returned 0x5 [0234.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF", dwFileAttributes=0x20) returned 0 [0234.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebaa0) returned 1 Thread: id = 9004 os_tid = 0x25a8 [0230.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf")) returned 0x20 [0234.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF", dwFileAttributes=0x20) returned 0 [0234.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.354] GetLastError () returned 0x5 [0234.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF", dwFileAttributes=0x20) returned 0 [0234.354] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebb28) returned 1 Thread: id = 9005 os_tid = 0x1548 [0230.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf")) returned 0x20 [0234.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF", dwFileAttributes=0x20) returned 0 [0234.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.322] GetLastError () returned 0x5 [0234.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF", dwFileAttributes=0x20) returned 0 [0234.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebbb0) returned 1 Thread: id = 9006 os_tid = 0x154c [0230.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf")) returned 0x20 [0234.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF", dwFileAttributes=0x20) returned 0 [0234.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.328] GetLastError () returned 0x5 [0234.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF", dwFileAttributes=0x20) returned 0 [0234.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebc38) returned 1 Thread: id = 9007 os_tid = 0x1550 [0230.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf")) returned 0x20 [0234.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF", dwFileAttributes=0x20) returned 0 [0234.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.330] GetLastError () returned 0x5 [0234.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF", dwFileAttributes=0x20) returned 0 [0234.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebcc0) returned 1 Thread: id = 9008 os_tid = 0x1554 [0230.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf")) returned 0x20 [0234.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF", dwFileAttributes=0x20) returned 0 [0234.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.331] GetLastError () returned 0x5 [0234.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF", dwFileAttributes=0x20) returned 0 [0234.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebd48) returned 1 Thread: id = 9009 os_tid = 0x1558 [0230.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf")) returned 0x20 [0234.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF", dwFileAttributes=0x20) returned 0 [0234.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.333] GetLastError () returned 0x5 [0234.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF", dwFileAttributes=0x20) returned 0 [0234.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebdd0) returned 1 Thread: id = 9010 os_tid = 0x155c [0230.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf")) returned 0x20 [0234.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF", dwFileAttributes=0x20) returned 0 [0234.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.334] GetLastError () returned 0x5 [0234.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF", dwFileAttributes=0x20) returned 0 [0234.335] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebe58) returned 1 Thread: id = 9011 os_tid = 0x1560 [0230.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf")) returned 0x20 [0234.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF", dwFileAttributes=0x20) returned 0 [0234.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.336] GetLastError () returned 0x5 [0234.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF", dwFileAttributes=0x20) returned 0 [0234.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebee0) returned 1 Thread: id = 9012 os_tid = 0x1948 [0230.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf")) returned 0x20 [0234.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF", dwFileAttributes=0x20) returned 0 [0234.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.338] GetLastError () returned 0x5 [0234.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF", dwFileAttributes=0x20) returned 0 [0234.338] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebf68) returned 1 Thread: id = 9013 os_tid = 0x194c [0230.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf")) returned 0x20 [0234.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF", dwFileAttributes=0x20) returned 0 [0234.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.339] GetLastError () returned 0x5 [0234.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF", dwFileAttributes=0x20) returned 0 [0234.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eebff0) returned 1 Thread: id = 9014 os_tid = 0x15a4 [0230.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf")) returned 0x20 [0234.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF", dwFileAttributes=0x20) returned 0 [0234.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.341] GetLastError () returned 0x5 [0234.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF", dwFileAttributes=0x20) returned 0 [0234.341] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec078) returned 1 Thread: id = 9015 os_tid = 0x1128 [0230.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf")) returned 0x20 [0234.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF", dwFileAttributes=0x20) returned 0 [0234.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.392] GetLastError () returned 0x5 [0234.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF", dwFileAttributes=0x20) returned 0 [0234.392] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec100) returned 1 Thread: id = 9016 os_tid = 0x25ac [0230.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf")) returned 0x20 [0234.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF", dwFileAttributes=0x20) returned 0 [0234.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.394] GetLastError () returned 0x5 [0234.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF", dwFileAttributes=0x20) returned 0 [0234.394] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec188) returned 1 Thread: id = 9017 os_tid = 0x25b0 [0230.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf")) returned 0x20 [0234.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF", dwFileAttributes=0x20) returned 0 [0234.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.346] GetLastError () returned 0x5 [0234.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF", dwFileAttributes=0x20) returned 0 [0234.347] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec210) returned 1 Thread: id = 9018 os_tid = 0x1880 [0230.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf")) returned 0x20 [0234.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF", dwFileAttributes=0x20) returned 0 [0234.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.348] GetLastError () returned 0x5 [0234.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF", dwFileAttributes=0x20) returned 0 [0234.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec298) returned 1 Thread: id = 9019 os_tid = 0x1884 [0230.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf")) returned 0x20 [0234.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF", dwFileAttributes=0x20) returned 0 [0234.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.349] GetLastError () returned 0x5 [0234.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF", dwFileAttributes=0x20) returned 0 [0234.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec320) returned 1 Thread: id = 9020 os_tid = 0x1a6c [0230.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf")) returned 0x20 [0234.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF", dwFileAttributes=0x20) returned 0 [0234.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.351] GetLastError () returned 0x5 [0234.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF", dwFileAttributes=0x20) returned 0 [0234.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec3a8) returned 1 Thread: id = 9021 os_tid = 0x2404 [0230.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf")) returned 0x20 [0234.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF", dwFileAttributes=0x20) returned 0 [0234.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.323] GetLastError () returned 0x5 [0234.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF", dwFileAttributes=0x20) returned 0 [0234.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec430) returned 1 Thread: id = 9022 os_tid = 0x2408 [0230.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf")) returned 0x20 [0234.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF", dwFileAttributes=0x20) returned 0 [0234.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.325] GetLastError () returned 0x5 [0234.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF", dwFileAttributes=0x20) returned 0 [0234.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec4b8) returned 1 Thread: id = 9023 os_tid = 0x2414 [0230.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf")) returned 0x20 [0234.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF", dwFileAttributes=0x20) returned 0 [0234.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.326] GetLastError () returned 0x5 [0234.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF", dwFileAttributes=0x20) returned 0 [0234.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec540) returned 1 Thread: id = 9024 os_tid = 0x2430 [0230.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf")) returned 0x20 [0234.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF", dwFileAttributes=0x20) returned 0 [0234.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.311] GetLastError () returned 0x5 [0234.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF", dwFileAttributes=0x20) returned 0 [0234.311] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec5c8) returned 1 Thread: id = 9025 os_tid = 0x95c [0230.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf")) returned 0x20 [0234.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF", dwFileAttributes=0x20) returned 0 [0234.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.312] GetLastError () returned 0x5 [0234.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF", dwFileAttributes=0x20) returned 0 [0234.312] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec650) returned 1 Thread: id = 9026 os_tid = 0x2454 [0230.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf")) returned 0x20 [0234.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF", dwFileAttributes=0x20) returned 0 [0234.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.314] GetLastError () returned 0x5 [0234.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF", dwFileAttributes=0x20) returned 0 [0234.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec6d8) returned 1 Thread: id = 9027 os_tid = 0x818 [0230.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf")) returned 0x20 [0234.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF", dwFileAttributes=0x20) returned 0 [0234.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.315] GetLastError () returned 0x5 [0234.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF", dwFileAttributes=0x20) returned 0 [0234.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec760) returned 1 Thread: id = 9028 os_tid = 0x828 [0230.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf")) returned 0x20 [0234.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF", dwFileAttributes=0x20) returned 0 [0234.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.317] GetLastError () returned 0x5 [0234.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF", dwFileAttributes=0x20) returned 0 [0234.317] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec7e8) returned 1 Thread: id = 9029 os_tid = 0x848 [0230.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf")) returned 0x20 [0234.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF", dwFileAttributes=0x20) returned 0 [0234.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.286] GetLastError () returned 0x5 [0234.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF", dwFileAttributes=0x20) returned 0 [0234.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec870) returned 1 Thread: id = 9030 os_tid = 0x858 [0230.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf")) returned 0x20 [0234.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF", dwFileAttributes=0x20) returned 0 [0234.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.288] GetLastError () returned 0x5 [0234.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF", dwFileAttributes=0x20) returned 0 [0234.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec8f8) returned 1 Thread: id = 9031 os_tid = 0x868 [0230.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf")) returned 0x20 [0234.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF", dwFileAttributes=0x20) returned 0 [0234.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.290] GetLastError () returned 0x5 [0234.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF", dwFileAttributes=0x20) returned 0 [0234.290] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eec980) returned 1 Thread: id = 9032 os_tid = 0x878 [0230.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf")) returned 0x20 [0234.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF", dwFileAttributes=0x20) returned 0 [0234.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.291] GetLastError () returned 0x5 [0234.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF", dwFileAttributes=0x20) returned 0 [0234.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeca08) returned 1 Thread: id = 9033 os_tid = 0xe48 [0230.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf")) returned 0x20 [0234.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF", dwFileAttributes=0x20) returned 0 [0234.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.293] GetLastError () returned 0x5 [0234.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF", dwFileAttributes=0x20) returned 0 [0234.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeca90) returned 1 Thread: id = 9034 os_tid = 0x1b00 [0230.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf")) returned 0x20 [0234.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF", dwFileAttributes=0x20) returned 0 [0234.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.342] GetLastError () returned 0x5 [0234.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF", dwFileAttributes=0x20) returned 0 [0234.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecb18) returned 1 Thread: id = 9035 os_tid = 0x1b04 [0230.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf")) returned 0x20 [0234.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF", dwFileAttributes=0x20) returned 0 [0234.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.345] GetLastError () returned 0x5 [0234.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF", dwFileAttributes=0x20) returned 0 [0234.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecba0) returned 1 Thread: id = 9036 os_tid = 0x112c [0230.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf")) returned 0x20 [0234.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF", dwFileAttributes=0x20) returned 0 [0234.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.298] GetLastError () returned 0x5 [0234.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF", dwFileAttributes=0x20) returned 0 [0234.298] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecc28) returned 1 Thread: id = 9037 os_tid = 0x1138 [0230.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf")) returned 0x20 [0234.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF", dwFileAttributes=0x20) returned 0 [0234.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.300] GetLastError () returned 0x5 [0234.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF", dwFileAttributes=0x20) returned 0 [0234.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeccb0) returned 1 Thread: id = 9038 os_tid = 0x177c [0230.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf")) returned 0x20 [0234.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF", dwFileAttributes=0x20) returned 0 [0234.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.301] GetLastError () returned 0x5 [0234.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF", dwFileAttributes=0x20) returned 0 [0234.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecd38) returned 1 Thread: id = 9039 os_tid = 0x1780 [0230.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf")) returned 0x20 [0234.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF", dwFileAttributes=0x20) returned 0 [0234.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.303] GetLastError () returned 0x5 [0234.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF", dwFileAttributes=0x20) returned 0 [0234.303] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecdc0) returned 1 Thread: id = 9040 os_tid = 0x129c [0230.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf")) returned 0x20 [0234.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF", dwFileAttributes=0x20) returned 0 [0234.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.304] GetLastError () returned 0x5 [0234.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF", dwFileAttributes=0x20) returned 0 [0234.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eece48) returned 1 Thread: id = 9041 os_tid = 0x12a0 [0230.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf")) returned 0x20 [0234.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF", dwFileAttributes=0x20) returned 0 [0234.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.306] GetLastError () returned 0x5 [0234.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF", dwFileAttributes=0x20) returned 0 [0234.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eeced0) returned 1 Thread: id = 9042 os_tid = 0x12a4 [0230.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf")) returned 0x20 [0234.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF", dwFileAttributes=0x20) returned 0 [0234.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.308] GetLastError () returned 0x5 [0234.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF", dwFileAttributes=0x20) returned 0 [0234.308] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecf58) returned 1 Thread: id = 9043 os_tid = 0x12a8 [0230.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf")) returned 0x20 [0234.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF", dwFileAttributes=0x20) returned 0 [0234.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.309] GetLastError () returned 0x5 [0234.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF", dwFileAttributes=0x20) returned 0 [0234.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eecfe0) returned 1 Thread: id = 9044 os_tid = 0xc50 [0230.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf")) returned 0x20 [0234.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF", dwFileAttributes=0x20) returned 0 [0234.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.274] GetLastError () returned 0x5 [0234.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF", dwFileAttributes=0x20) returned 0 [0234.274] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eed068) returned 1 Thread: id = 9045 os_tid = 0x2690 [0230.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf")) returned 0x20 [0234.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF", dwFileAttributes=0x20) returned 0 [0234.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.276] GetLastError () returned 0x5 [0234.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF", dwFileAttributes=0x20) returned 0 [0234.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eed0f0) returned 1 Thread: id = 9046 os_tid = 0xddc [0230.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf")) returned 0x20 [0234.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF", dwFileAttributes=0x20) returned 0 [0234.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.277] GetLastError () returned 0x5 [0234.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF", dwFileAttributes=0x20) returned 0 [0234.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68090) returned 1 Thread: id = 9047 os_tid = 0xe20 [0230.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf")) returned 0x20 [0234.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF", dwFileAttributes=0x20) returned 0 [0234.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.279] GetLastError () returned 0x5 [0234.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF", dwFileAttributes=0x20) returned 0 [0234.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68118) returned 1 Thread: id = 9048 os_tid = 0x2130 [0230.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf")) returned 0x20 [0234.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF", dwFileAttributes=0x20) returned 0 [0234.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.280] GetLastError () returned 0x5 [0234.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF", dwFileAttributes=0x20) returned 0 [0234.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a681a0) returned 1 Thread: id = 9049 os_tid = 0x2614 [0230.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf")) returned 0x20 [0234.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF", dwFileAttributes=0x20) returned 0 [0234.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.282] GetLastError () returned 0x5 [0234.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF", dwFileAttributes=0x20) returned 0 [0234.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68228) returned 1 Thread: id = 9050 os_tid = 0x13bc [0230.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf")) returned 0x20 [0234.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF", dwFileAttributes=0x20) returned 0 [0234.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.285] GetLastError () returned 0x5 [0234.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF", dwFileAttributes=0x20) returned 0 [0234.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a682b0) returned 1 Thread: id = 9051 os_tid = 0x13c0 [0230.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf")) returned 0x20 [0234.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF", dwFileAttributes=0x20) returned 0 [0234.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.367] GetLastError () returned 0x5 [0234.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF", dwFileAttributes=0x20) returned 0 [0234.367] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68338) returned 1 Thread: id = 9052 os_tid = 0x13c4 [0230.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf")) returned 0x20 [0234.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF", dwFileAttributes=0x20) returned 0 [0234.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.267] GetLastError () returned 0x5 [0234.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF", dwFileAttributes=0x20) returned 0 [0234.267] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a683c0) returned 1 Thread: id = 9053 os_tid = 0x13d0 [0230.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf")) returned 0x20 [0234.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF", dwFileAttributes=0x20) returned 0 [0234.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.533] GetLastError () returned 0x5 [0234.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF", dwFileAttributes=0x20) returned 0 [0234.533] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68448) returned 1 Thread: id = 9054 os_tid = 0x13d4 [0230.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf")) returned 0x20 [0234.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF", dwFileAttributes=0x20) returned 0 [0234.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.268] GetLastError () returned 0x5 [0234.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF", dwFileAttributes=0x20) returned 0 [0234.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a684d0) returned 1 Thread: id = 9055 os_tid = 0x1398 [0230.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf")) returned 0x20 [0234.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF", dwFileAttributes=0x20) returned 0 [0234.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.252] GetLastError () returned 0x5 [0234.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF", dwFileAttributes=0x20) returned 0 [0234.252] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68558) returned 1 Thread: id = 9056 os_tid = 0x13dc [0230.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf")) returned 0x20 [0234.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF", dwFileAttributes=0x20) returned 0 [0234.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.253] GetLastError () returned 0x5 [0234.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF", dwFileAttributes=0x20) returned 0 [0234.254] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a685e0) returned 1 Thread: id = 9057 os_tid = 0x13e0 [0230.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf")) returned 0x20 [0234.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF", dwFileAttributes=0x20) returned 0 [0234.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.255] GetLastError () returned 0x5 [0234.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF", dwFileAttributes=0x20) returned 0 [0234.255] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68668) returned 1 Thread: id = 9058 os_tid = 0x13e4 [0230.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf")) returned 0x20 [0234.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF", dwFileAttributes=0x20) returned 0 [0234.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.318] GetLastError () returned 0x5 [0234.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF", dwFileAttributes=0x20) returned 0 [0234.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a686f0) returned 1 Thread: id = 9059 os_tid = 0x13e8 [0230.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf")) returned 0x20 [0234.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF", dwFileAttributes=0x20) returned 0 [0234.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.320] GetLastError () returned 0x5 [0234.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF", dwFileAttributes=0x20) returned 0 [0234.320] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68778) returned 1 Thread: id = 9060 os_tid = 0x13ec [0230.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid")) returned 0x20 [0234.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID", dwFileAttributes=0x20) returned 0 [0234.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.273] GetLastError () returned 0x5 [0234.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID", dwFileAttributes=0x20) returned 0 [0234.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68800) returned 1 Thread: id = 9061 os_tid = 0x13f0 [0230.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid")) returned 0x20 [0234.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID", dwFileAttributes=0x20) returned 0 [0234.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.535] GetLastError () returned 0x5 [0234.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID", dwFileAttributes=0x20) returned 0 [0234.535] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68888) returned 1 Thread: id = 9062 os_tid = 0x13f4 [0230.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid")) returned 0x20 [0234.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID", dwFileAttributes=0x20) returned 0 [0234.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.257] GetLastError () returned 0x5 [0234.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID", dwFileAttributes=0x20) returned 0 [0234.257] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68910) returned 1 Thread: id = 9063 os_tid = 0x1ba4 [0230.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid")) returned 0x20 [0234.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID", dwFileAttributes=0x20) returned 0 [0234.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.537] GetLastError () returned 0x5 [0234.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID", dwFileAttributes=0x20) returned 0 [0234.537] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68998) returned 1 Thread: id = 9064 os_tid = 0x1ba8 [0230.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid")) returned 0x20 [0234.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID", dwFileAttributes=0x20) returned 0 [0234.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.294] GetLastError () returned 0x5 [0234.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID", dwFileAttributes=0x20) returned 0 [0234.295] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68a20) returned 1 Thread: id = 9065 os_tid = 0x1bac [0230.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid")) returned 0x20 [0234.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID", dwFileAttributes=0x20) returned 0 [0234.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.259] GetLastError () returned 0x5 [0234.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID", dwFileAttributes=0x20) returned 0 [0234.259] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68aa8) returned 1 Thread: id = 9066 os_tid = 0x1bb0 [0230.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid")) returned 0x20 [0234.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID", dwFileAttributes=0x20) returned 0 [0234.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.261] GetLastError () returned 0x5 [0234.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID", dwFileAttributes=0x20) returned 0 [0234.261] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68b30) returned 1 Thread: id = 9067 os_tid = 0x1bb4 [0230.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid")) returned 0x20 [0234.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID", dwFileAttributes=0x20) returned 0 [0234.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.262] GetLastError () returned 0x5 [0234.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID", dwFileAttributes=0x20) returned 0 [0234.262] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68bb8) returned 1 Thread: id = 9068 os_tid = 0x1bb8 [0230.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid")) returned 0x20 [0234.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID", dwFileAttributes=0x20) returned 0 [0234.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.296] GetLastError () returned 0x5 [0234.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID", dwFileAttributes=0x20) returned 0 [0234.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68c40) returned 1 Thread: id = 9069 os_tid = 0x1bbc [0230.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid")) returned 0x20 [0234.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID", dwFileAttributes=0x20) returned 0 [0234.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.264] GetLastError () returned 0x5 [0234.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID", dwFileAttributes=0x20) returned 0 [0234.264] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68cc8) returned 1 Thread: id = 9070 os_tid = 0x1bc0 [0230.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid")) returned 0x20 [0234.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID", dwFileAttributes=0x20) returned 0 [0234.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.265] GetLastError () returned 0x5 [0234.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID", dwFileAttributes=0x20) returned 0 [0234.265] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68d50) returned 1 Thread: id = 9071 os_tid = 0x808 [0230.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid")) returned 0x20 [0234.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID", dwFileAttributes=0x20) returned 0 [0234.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.249] GetLastError () returned 0x5 [0234.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID", dwFileAttributes=0x20) returned 0 [0234.249] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68dd8) returned 1 Thread: id = 9072 os_tid = 0x2138 [0230.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid")) returned 0x20 [0234.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID", dwFileAttributes=0x20) returned 0 [0234.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.250] GetLastError () returned 0x5 [0234.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID", dwFileAttributes=0x20) returned 0 [0234.251] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68e60) returned 1 Thread: id = 9073 os_tid = 0x1848 [0230.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid")) returned 0x20 [0234.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID", dwFileAttributes=0x20) returned 0 [0234.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.526] GetLastError () returned 0x5 [0234.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID", dwFileAttributes=0x20) returned 0 [0234.526] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ee8) returned 1 Thread: id = 9074 os_tid = 0x2198 [0230.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf")) returned 0x20 [0234.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF", dwFileAttributes=0x20) returned 0 [0234.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.528] GetLastError () returned 0x5 [0234.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF", dwFileAttributes=0x20) returned 0 [0234.528] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68f70) returned 1 Thread: id = 9075 os_tid = 0x1c60 [0230.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf")) returned 0x20 [0234.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF", dwFileAttributes=0x20) returned 0 [0234.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.530] GetLastError () returned 0x5 [0234.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF", dwFileAttributes=0x20) returned 0 [0234.530] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a68ff8) returned 1 Thread: id = 9076 os_tid = 0x27a8 [0230.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf")) returned 0x20 [0234.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF", dwFileAttributes=0x20) returned 0 [0234.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.679] GetLastError () returned 0x5 [0234.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF", dwFileAttributes=0x20) returned 0 [0234.679] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69080) returned 1 Thread: id = 9077 os_tid = 0x26e0 [0230.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf")) returned 0x20 [0234.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF", dwFileAttributes=0x20) returned 0 [0234.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.677] GetLastError () returned 0x5 [0234.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF", dwFileAttributes=0x20) returned 0 [0234.677] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69108) returned 1 Thread: id = 9078 os_tid = 0x1c80 [0230.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf")) returned 0x20 [0234.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF", dwFileAttributes=0x20) returned 0 [0234.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.531] GetLastError () returned 0x5 [0234.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF", dwFileAttributes=0x20) returned 0 [0234.532] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69190) returned 1 Thread: id = 9079 os_tid = 0x26e4 [0230.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf")) returned 0x20 [0234.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF", dwFileAttributes=0x20) returned 0 [0234.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.675] GetLastError () returned 0x5 [0234.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF", dwFileAttributes=0x20) returned 0 [0234.675] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69218) returned 1 Thread: id = 9080 os_tid = 0x26e8 [0230.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf")) returned 0x20 [0234.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF", dwFileAttributes=0x20) returned 0 [0234.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.673] GetLastError () returned 0x5 [0234.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF", dwFileAttributes=0x20) returned 0 [0234.673] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a692a0) returned 1 Thread: id = 9081 os_tid = 0x26ec [0230.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf")) returned 0x20 [0234.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF", dwFileAttributes=0x20) returned 0 [0234.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.671] GetLastError () returned 0x5 [0234.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF", dwFileAttributes=0x20) returned 0 [0234.672] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69328) returned 1 Thread: id = 9082 os_tid = 0x26f0 [0230.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf")) returned 0x20 [0234.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF", dwFileAttributes=0x20) returned 0 [0234.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.670] GetLastError () returned 0x5 [0234.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF", dwFileAttributes=0x20) returned 0 [0234.670] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a693b0) returned 1 Thread: id = 9083 os_tid = 0x26f4 [0230.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf")) returned 0x20 [0234.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF", dwFileAttributes=0x20) returned 0 [0234.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.668] GetLastError () returned 0x5 [0234.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF", dwFileAttributes=0x20) returned 0 [0234.668] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69438) returned 1 Thread: id = 9084 os_tid = 0x27b0 [0230.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf")) returned 0x20 [0234.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF", dwFileAttributes=0x20) returned 0 [0234.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.666] GetLastError () returned 0x5 [0234.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF", dwFileAttributes=0x20) returned 0 [0234.666] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a694c0) returned 1 Thread: id = 9085 os_tid = 0x27b4 [0230.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf")) returned 0x20 [0234.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF", dwFileAttributes=0x20) returned 0 [0234.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.500] GetLastError () returned 0x5 [0234.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF", dwFileAttributes=0x20) returned 0 [0234.501] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69548) returned 1 Thread: id = 9086 os_tid = 0x27b8 [0230.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf")) returned 0x20 [0234.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF", dwFileAttributes=0x20) returned 0 [0234.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.499] GetLastError () returned 0x5 [0234.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF", dwFileAttributes=0x20) returned 0 [0234.499] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a695d0) returned 1 Thread: id = 9087 os_tid = 0x27bc [0230.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf")) returned 0x20 [0234.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF", dwFileAttributes=0x20) returned 0 [0234.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.497] GetLastError () returned 0x5 [0234.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF", dwFileAttributes=0x20) returned 0 [0234.497] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69658) returned 1 Thread: id = 9088 os_tid = 0x640 [0230.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf")) returned 0x20 [0234.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF", dwFileAttributes=0x20) returned 0 [0234.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.495] GetLastError () returned 0x5 [0234.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF", dwFileAttributes=0x20) returned 0 [0234.495] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a696e0) returned 1 Thread: id = 9089 os_tid = 0x26f8 [0230.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf")) returned 0x20 [0234.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF", dwFileAttributes=0x20) returned 0 [0234.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.524] GetLastError () returned 0x5 [0234.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF", dwFileAttributes=0x20) returned 0 [0234.525] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69768) returned 1 Thread: id = 9090 os_tid = 0x26fc [0230.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf")) returned 0x20 [0234.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF", dwFileAttributes=0x20) returned 0 [0234.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.522] GetLastError () returned 0x5 [0234.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF", dwFileAttributes=0x20) returned 0 [0234.522] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a697f0) returned 1 Thread: id = 9091 os_tid = 0x2708 [0230.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf")) returned 0x20 [0234.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF", dwFileAttributes=0x20) returned 0 [0234.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.521] GetLastError () returned 0x5 [0234.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF", dwFileAttributes=0x20) returned 0 [0234.521] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69878) returned 1 Thread: id = 9092 os_tid = 0x270c [0230.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf")) returned 0x20 [0234.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF", dwFileAttributes=0x20) returned 0 [0234.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.519] GetLastError () returned 0x5 [0234.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF", dwFileAttributes=0x20) returned 0 [0234.519] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69900) returned 1 Thread: id = 9093 os_tid = 0x2714 [0230.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf")) returned 0x20 [0234.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF", dwFileAttributes=0x20) returned 0 [0234.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.517] GetLastError () returned 0x5 [0234.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF", dwFileAttributes=0x20) returned 0 [0234.518] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69988) returned 1 Thread: id = 9094 os_tid = 0x271c [0230.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf")) returned 0x20 [0234.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF", dwFileAttributes=0x20) returned 0 [0234.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.515] GetLastError () returned 0x5 [0234.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF", dwFileAttributes=0x20) returned 0 [0234.516] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a10) returned 1 Thread: id = 9095 os_tid = 0x2720 [0230.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf")) returned 0x20 [0234.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF", dwFileAttributes=0x20) returned 0 [0234.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.271] GetLastError () returned 0x5 [0234.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF", dwFileAttributes=0x20) returned 0 [0234.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69a98) returned 1 Thread: id = 9096 os_tid = 0xda8 [0230.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf")) returned 0x20 [0234.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF", dwFileAttributes=0x20) returned 0 [0234.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.270] GetLastError () returned 0x5 [0234.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF", dwFileAttributes=0x20) returned 0 [0234.270] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69b20) returned 1 Thread: id = 9097 os_tid = 0x1a54 [0230.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf")) returned 0x20 [0234.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF", dwFileAttributes=0x20) returned 0 [0234.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.647] GetLastError () returned 0x5 [0234.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF", dwFileAttributes=0x20) returned 0 [0234.647] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ba8) returned 1 Thread: id = 9098 os_tid = 0x1a64 [0230.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf")) returned 0x20 [0234.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF", dwFileAttributes=0x20) returned 0 [0234.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.645] GetLastError () returned 0x5 [0234.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF", dwFileAttributes=0x20) returned 0 [0234.645] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69c30) returned 1 Thread: id = 9099 os_tid = 0x1f04 [0230.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf")) returned 0x20 [0234.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF", dwFileAttributes=0x20) returned 0 [0234.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.643] GetLastError () returned 0x5 [0234.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF", dwFileAttributes=0x20) returned 0 [0234.643] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69cb8) returned 1 Thread: id = 9100 os_tid = 0x1724 [0230.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf")) returned 0x20 [0234.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF", dwFileAttributes=0x20) returned 0 [0234.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.641] GetLastError () returned 0x5 [0234.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF", dwFileAttributes=0x20) returned 0 [0234.642] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69d40) returned 1 Thread: id = 9101 os_tid = 0xb08 [0230.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf")) returned 0x20 [0234.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF", dwFileAttributes=0x20) returned 0 [0234.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.640] GetLastError () returned 0x5 [0234.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF", dwFileAttributes=0x20) returned 0 [0234.640] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69dc8) returned 1 Thread: id = 9102 os_tid = 0x1928 [0230.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf")) returned 0x20 [0234.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF", dwFileAttributes=0x20) returned 0 [0234.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.638] GetLastError () returned 0x5 [0234.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF", dwFileAttributes=0x20) returned 0 [0234.638] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69e50) returned 1 Thread: id = 9103 os_tid = 0x1930 [0230.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf")) returned 0x20 [0234.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF", dwFileAttributes=0x20) returned 0 [0234.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.680] GetLastError () returned 0x5 [0234.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF", dwFileAttributes=0x20) returned 0 [0234.681] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69ed8) returned 1 Thread: id = 9104 os_tid = 0x1934 [0230.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf")) returned 0x20 [0234.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF", dwFileAttributes=0x20) returned 0 [0234.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.430] GetLastError () returned 0x5 [0234.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF", dwFileAttributes=0x20) returned 0 [0234.430] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69f60) returned 1 Thread: id = 9105 os_tid = 0x14a8 [0230.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf")) returned 0x20 [0234.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF", dwFileAttributes=0x20) returned 0 [0234.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.454] GetLastError () returned 0x5 [0234.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF", dwFileAttributes=0x20) returned 0 [0234.454] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a69fe8) returned 1 Thread: id = 9106 os_tid = 0x1938 [0230.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf")) returned 0x20 [0234.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF", dwFileAttributes=0x20) returned 0 [0234.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.456] GetLastError () returned 0x5 [0234.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF", dwFileAttributes=0x20) returned 0 [0234.457] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80320) returned 1 Thread: id = 9107 os_tid = 0x12cc [0230.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf")) returned 0x20 [0234.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF", dwFileAttributes=0x20) returned 0 [0234.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.458] GetLastError () returned 0x5 [0234.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF", dwFileAttributes=0x20) returned 0 [0234.459] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b803a8) returned 1 Thread: id = 9108 os_tid = 0x12e8 [0230.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf")) returned 0x20 [0234.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF", dwFileAttributes=0x20) returned 0 [0234.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.460] GetLastError () returned 0x5 [0234.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF", dwFileAttributes=0x20) returned 0 [0234.460] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80430) returned 1 Thread: id = 9109 os_tid = 0x12ec [0230.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf")) returned 0x20 [0234.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF", dwFileAttributes=0x20) returned 0 [0234.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.247] GetLastError () returned 0x5 [0234.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF", dwFileAttributes=0x20) returned 0 [0234.247] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b804b8) returned 1 Thread: id = 9110 os_tid = 0x1d64 [0230.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf")) returned 0x20 [0234.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF", dwFileAttributes=0x20) returned 0 [0234.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.246] GetLastError () returned 0x5 [0234.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF", dwFileAttributes=0x20) returned 0 [0234.246] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80540) returned 1 Thread: id = 9111 os_tid = 0x1300 [0230.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf")) returned 0x20 [0234.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF", dwFileAttributes=0x20) returned 0 [0234.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.244] GetLastError () returned 0x5 [0234.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF", dwFileAttributes=0x20) returned 0 [0234.244] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b805c8) returned 1 Thread: id = 9112 os_tid = 0x1764 [0230.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf")) returned 0x20 [0234.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF", dwFileAttributes=0x20) returned 0 [0234.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.242] GetLastError () returned 0x5 [0234.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF", dwFileAttributes=0x20) returned 0 [0234.243] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80650) returned 1 Thread: id = 9113 os_tid = 0x1768 [0230.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf")) returned 0x20 [0234.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", dwFileAttributes=0x20) returned 0 [0234.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.241] GetLastError () returned 0x5 [0234.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF", dwFileAttributes=0x20) returned 0 [0234.241] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b806d8) returned 1 Thread: id = 9114 os_tid = 0x1574 [0230.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf")) returned 0x20 [0234.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF", dwFileAttributes=0x20) returned 0 [0234.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.239] GetLastError () returned 0x5 [0234.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF", dwFileAttributes=0x20) returned 0 [0234.240] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80760) returned 1 Thread: id = 9115 os_tid = 0x15b0 [0230.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf")) returned 0x20 [0234.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF", dwFileAttributes=0x20) returned 0 [0234.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.238] GetLastError () returned 0x5 [0234.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF", dwFileAttributes=0x20) returned 0 [0234.238] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b807e8) returned 1 Thread: id = 9116 os_tid = 0x1700 [0231.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf")) returned 0x20 [0234.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF", dwFileAttributes=0x20) returned 0 [0234.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.236] GetLastError () returned 0x5 [0234.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF", dwFileAttributes=0x20) returned 0 [0234.237] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80870) returned 1 Thread: id = 9117 os_tid = 0x1704 [0231.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf")) returned 0x20 [0234.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF", dwFileAttributes=0x20) returned 0 [0234.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.235] GetLastError () returned 0x5 [0234.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF", dwFileAttributes=0x20) returned 0 [0234.235] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b808f8) returned 1 Thread: id = 9118 os_tid = 0x15a8 [0231.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf")) returned 0x20 [0234.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF", dwFileAttributes=0x20) returned 0 [0234.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.580] GetLastError () returned 0x5 [0234.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF", dwFileAttributes=0x20) returned 0 [0234.580] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80980) returned 1 Thread: id = 9119 os_tid = 0x1f18 [0231.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf")) returned 0x20 [0234.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF", dwFileAttributes=0x20) returned 0 [0234.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.488] GetLastError () returned 0x5 [0234.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF", dwFileAttributes=0x20) returned 0 [0234.488] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80a08) returned 1 Thread: id = 9120 os_tid = 0x1f1c [0231.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf")) returned 0x20 [0234.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF", dwFileAttributes=0x20) returned 0 [0234.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.490] GetLastError () returned 0x5 [0234.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF", dwFileAttributes=0x20) returned 0 [0234.490] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80a90) returned 1 Thread: id = 9121 os_tid = 0x1f20 [0231.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf")) returned 0x20 [0234.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF", dwFileAttributes=0x20) returned 0 [0234.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.502] GetLastError () returned 0x5 [0234.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF", dwFileAttributes=0x20) returned 0 [0234.502] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80b18) returned 1 Thread: id = 9122 os_tid = 0x2728 [0231.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf")) returned 0x20 [0234.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF", dwFileAttributes=0x20) returned 0 [0234.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.504] GetLastError () returned 0x5 [0234.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF", dwFileAttributes=0x20) returned 0 [0234.504] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80ba0) returned 1 Thread: id = 9123 os_tid = 0x1f30 [0231.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf")) returned 0x20 [0234.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF", dwFileAttributes=0x20) returned 0 [0234.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.505] GetLastError () returned 0x5 [0234.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF", dwFileAttributes=0x20) returned 0 [0234.506] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80c28) returned 1 Thread: id = 9124 os_tid = 0x1f38 [0231.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf")) returned 0x20 [0234.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF", dwFileAttributes=0x20) returned 0 [0234.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.507] GetLastError () returned 0x5 [0234.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF", dwFileAttributes=0x20) returned 0 [0234.507] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80cb0) returned 1 Thread: id = 9125 os_tid = 0x2190 [0231.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf")) returned 0x20 [0234.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF", dwFileAttributes=0x20) returned 0 [0234.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.509] GetLastError () returned 0x5 [0234.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF", dwFileAttributes=0x20) returned 0 [0234.509] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80d38) returned 1 Thread: id = 9126 os_tid = 0x2740 [0231.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf")) returned 0x20 [0234.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF", dwFileAttributes=0x20) returned 0 [0234.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.232] GetLastError () returned 0x5 [0234.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF", dwFileAttributes=0x20) returned 0 [0234.232] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80dc0) returned 1 Thread: id = 9127 os_tid = 0x2744 [0231.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf")) returned 0x20 [0234.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF", dwFileAttributes=0x20) returned 0 [0234.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.511] GetLastError () returned 0x5 [0234.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF", dwFileAttributes=0x20) returned 0 [0234.511] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80e48) returned 1 Thread: id = 9128 os_tid = 0x2748 [0231.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf")) returned 0x20 [0234.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF", dwFileAttributes=0x20) returned 0 [0234.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.512] GetLastError () returned 0x5 [0234.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF", dwFileAttributes=0x20) returned 0 [0234.512] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80ed0) returned 1 Thread: id = 9129 os_tid = 0x274c [0231.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf")) returned 0x20 [0234.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF", dwFileAttributes=0x20) returned 0 [0234.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.514] GetLastError () returned 0x5 [0234.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF", dwFileAttributes=0x20) returned 0 [0234.514] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80f58) returned 1 Thread: id = 9130 os_tid = 0x2750 [0231.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf")) returned 0x20 [0234.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF", dwFileAttributes=0x20) returned 0 [0234.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.233] GetLastError () returned 0x5 [0234.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF", dwFileAttributes=0x20) returned 0 [0234.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b80fe0) returned 1 Thread: id = 9131 os_tid = 0x241c [0231.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf")) returned 0x20 [0234.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF", dwFileAttributes=0x20) returned 0 [0234.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.470] GetLastError () returned 0x5 [0234.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF", dwFileAttributes=0x20) returned 0 [0234.470] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81068) returned 1 Thread: id = 9132 os_tid = 0x2754 [0231.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf")) returned 0x20 [0234.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF", dwFileAttributes=0x20) returned 0 [0234.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.472] GetLastError () returned 0x5 [0234.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF", dwFileAttributes=0x20) returned 0 [0234.472] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b810f0) returned 1 Thread: id = 9133 os_tid = 0x184c [0231.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf")) returned 0x20 [0234.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF", dwFileAttributes=0x20) returned 0 [0234.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.474] GetLastError () returned 0x5 [0234.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF", dwFileAttributes=0x20) returned 0 [0234.474] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81178) returned 1 Thread: id = 9134 os_tid = 0x275c [0231.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf")) returned 0x20 [0234.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF", dwFileAttributes=0x20) returned 0 [0234.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.475] GetLastError () returned 0x5 [0234.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF", dwFileAttributes=0x20) returned 0 [0234.476] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81200) returned 1 Thread: id = 9135 os_tid = 0x2760 [0231.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf")) returned 0x20 [0234.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF", dwFileAttributes=0x20) returned 0 [0234.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.477] GetLastError () returned 0x5 [0234.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF", dwFileAttributes=0x20) returned 0 [0234.477] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81288) returned 1 Thread: id = 9136 os_tid = 0x2764 [0231.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf")) returned 0x20 [0234.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF", dwFileAttributes=0x20) returned 0 [0234.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.479] GetLastError () returned 0x5 [0234.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF", dwFileAttributes=0x20) returned 0 [0234.479] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81310) returned 1 Thread: id = 9137 os_tid = 0x2768 [0231.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf")) returned 0x20 [0234.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF", dwFileAttributes=0x20) returned 0 [0234.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.480] GetLastError () returned 0x5 [0234.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF", dwFileAttributes=0x20) returned 0 [0234.480] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81398) returned 1 Thread: id = 9138 os_tid = 0x22c0 [0231.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf")) returned 0x20 [0234.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF", dwFileAttributes=0x20) returned 0 [0234.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.578] GetLastError () returned 0x5 [0234.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF", dwFileAttributes=0x20) returned 0 [0234.578] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81420) returned 1 Thread: id = 9139 os_tid = 0x22c4 [0231.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf")) returned 0x20 [0231.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF", dwFileAttributes=0x20) returned 0 [0231.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.699] GetLastError () returned 0x5 [0231.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF", dwFileAttributes=0x20) returned 0 [0231.699] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b814a8) returned 1 Thread: id = 9140 os_tid = 0x22c8 [0231.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf")) returned 0x20 [0234.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF", dwFileAttributes=0x20) returned 0 [0234.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.482] GetLastError () returned 0x5 [0234.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF", dwFileAttributes=0x20) returned 0 [0234.482] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81530) returned 1 Thread: id = 9141 os_tid = 0x22cc [0231.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf")) returned 0x20 [0234.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF", dwFileAttributes=0x20) returned 0 [0234.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.483] GetLastError () returned 0x5 [0234.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF", dwFileAttributes=0x20) returned 0 [0234.484] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b815b8) returned 1 Thread: id = 9142 os_tid = 0x1c98 [0231.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf")) returned 0x20 [0234.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF", dwFileAttributes=0x20) returned 0 [0234.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.485] GetLastError () returned 0x5 [0234.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF", dwFileAttributes=0x20) returned 0 [0234.485] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81640) returned 1 Thread: id = 9143 os_tid = 0x19c8 [0231.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf")) returned 0x20 [0234.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF", dwFileAttributes=0x20) returned 0 [0234.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.487] GetLastError () returned 0x5 [0234.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF", dwFileAttributes=0x20) returned 0 [0234.487] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b816c8) returned 1 Thread: id = 9144 os_tid = 0x22d4 [0231.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf")) returned 0x20 [0231.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF", dwFileAttributes=0x20) returned 0 [0231.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.701] GetLastError () returned 0x5 [0231.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF", dwFileAttributes=0x20) returned 0 [0231.701] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81750) returned 1 Thread: id = 9145 os_tid = 0x22dc [0231.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf")) returned 0x20 [0231.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF", dwFileAttributes=0x20) returned 0 [0231.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.703] GetLastError () returned 0x5 [0231.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF", dwFileAttributes=0x20) returned 0 [0231.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b817d8) returned 1 Thread: id = 9146 os_tid = 0x24f4 [0231.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf")) returned 0x20 [0231.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF", dwFileAttributes=0x20) returned 0 [0231.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.705] GetLastError () returned 0x5 [0231.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF", dwFileAttributes=0x20) returned 0 [0231.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81860) returned 1 Thread: id = 9147 os_tid = 0x2518 [0231.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf")) returned 0x20 [0231.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF", dwFileAttributes=0x20) returned 0 [0231.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.706] GetLastError () returned 0x5 [0231.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF", dwFileAttributes=0x20) returned 0 [0231.706] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b818e8) returned 1 Thread: id = 9148 os_tid = 0x1b1c [0231.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf")) returned 0x20 [0231.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF", dwFileAttributes=0x20) returned 0 [0231.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.708] GetLastError () returned 0x5 [0231.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF", dwFileAttributes=0x20) returned 0 [0231.708] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81970) returned 1 Thread: id = 9149 os_tid = 0x1b20 [0231.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf")) returned 0x20 [0231.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF", dwFileAttributes=0x20) returned 0 [0231.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.710] GetLastError () returned 0x5 [0231.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF", dwFileAttributes=0x20) returned 0 [0231.710] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b819f8) returned 1 Thread: id = 9150 os_tid = 0x1b24 [0231.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf")) returned 0x20 [0231.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF", dwFileAttributes=0x20) returned 0 [0231.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.712] GetLastError () returned 0x5 [0231.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF", dwFileAttributes=0x20) returned 0 [0231.712] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81a80) returned 1 Thread: id = 9151 os_tid = 0x1b28 [0231.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf")) returned 0x20 [0231.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF", dwFileAttributes=0x20) returned 0 [0231.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.713] GetLastError () returned 0x5 [0231.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF", dwFileAttributes=0x20) returned 0 [0231.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81b08) returned 1 Thread: id = 9152 os_tid = 0x1b2c [0231.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf")) returned 0x20 [0231.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF", dwFileAttributes=0x20) returned 0 [0231.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.715] GetLastError () returned 0x5 [0231.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF", dwFileAttributes=0x20) returned 0 [0231.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81b90) returned 1 Thread: id = 9153 os_tid = 0x1b30 [0231.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf")) returned 0x20 [0231.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF", dwFileAttributes=0x20) returned 0 [0231.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0231.721] GetLastError () returned 0x5 [0231.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF", dwFileAttributes=0x20) returned 0 [0231.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81c18) returned 1 Thread: id = 9154 os_tid = 0x1b34 [0231.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif")) returned 0x20 [0234.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF", dwFileAttributes=0x20) returned 0 [0234.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.230] GetLastError () returned 0x5 [0234.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF", dwFileAttributes=0x20) returned 0 [0234.230] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81ca0) returned 1 Thread: id = 9155 os_tid = 0x19dc [0231.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp")) returned 0x20 [0234.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP", dwFileAttributes=0x20) returned 0 [0234.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.688] GetLastError () returned 0x5 [0234.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP", dwFileAttributes=0x20) returned 0 [0234.688] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81d28) returned 1 Thread: id = 9156 os_tid = 0x1b38 [0231.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp")) returned 0x20 [0234.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP", dwFileAttributes=0x20) returned 0 [0234.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.686] GetLastError () returned 0x5 [0234.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP", dwFileAttributes=0x20) returned 0 [0234.686] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81db0) returned 1 Thread: id = 9157 os_tid = 0x7e8 [0231.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg")) returned 0x20 [0234.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG", dwFileAttributes=0x20) returned 0 [0234.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.745] GetLastError () returned 0x5 [0234.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG", dwFileAttributes=0x20) returned 0 [0234.745] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81e38) returned 1 Thread: id = 9158 os_tid = 0x1b3c [0231.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg")) returned 0x20 [0234.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG", dwFileAttributes=0x20) returned 0 [0234.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.743] GetLastError () returned 0x5 [0234.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG", dwFileAttributes=0x20) returned 0 [0234.743] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81ec0) returned 1 Thread: id = 9159 os_tid = 0x1354 [0231.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg")) returned 0x20 [0234.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG", dwFileAttributes=0x20) returned 0 [0234.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.741] GetLastError () returned 0x5 [0234.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG", dwFileAttributes=0x20) returned 0 [0234.741] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81f48) returned 1 Thread: id = 9160 os_tid = 0x1358 [0231.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg")) returned 0x20 [0234.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG", dwFileAttributes=0x20) returned 0 [0234.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.739] GetLastError () returned 0x5 [0234.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG", dwFileAttributes=0x20) returned 0 [0234.739] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81fd0) returned 1 Thread: id = 9161 os_tid = 0x12f0 [0231.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp")) returned 0x20 [0234.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP", dwFileAttributes=0x20) returned 0 [0234.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.737] GetLastError () returned 0x5 [0234.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP", dwFileAttributes=0x20) returned 0 [0234.738] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82058) returned 1 Thread: id = 9162 os_tid = 0x1590 [0231.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp")) returned 0x20 [0234.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP", dwFileAttributes=0x20) returned 0 [0234.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.736] GetLastError () returned 0x5 [0234.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP", dwFileAttributes=0x20) returned 0 [0234.736] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b820e0) returned 1 Thread: id = 9163 os_tid = 0x1598 [0231.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg")) returned 0x20 [0234.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG", dwFileAttributes=0x20) returned 0 [0234.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.734] GetLastError () returned 0x5 [0234.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG", dwFileAttributes=0x20) returned 0 [0234.734] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82168) returned 1 Thread: id = 9164 os_tid = 0x159c [0231.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp")) returned 0x20 [0234.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP", dwFileAttributes=0x20) returned 0 [0234.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.732] GetLastError () returned 0x5 [0234.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP", dwFileAttributes=0x20) returned 0 [0234.732] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b821f0) returned 1 Thread: id = 9165 os_tid = 0x15a0 [0231.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif")) returned 0x20 [0234.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF", dwFileAttributes=0x20) returned 0 [0234.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.730] GetLastError () returned 0x5 [0234.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF", dwFileAttributes=0x20) returned 0 [0234.730] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b82278) returned 1 Thread: id = 9166 os_tid = 0x14f4 [0231.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp")) returned 0x20 [0234.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP", dwFileAttributes=0x20) returned 0 [0234.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.728] GetLastError () returned 0x5 [0234.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP", dwFileAttributes=0x20) returned 0 [0234.728] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64090) returned 1 Thread: id = 9167 os_tid = 0x14f8 [0231.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp")) returned 0x20 [0234.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP", dwFileAttributes=0x20) returned 0 [0234.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.726] GetLastError () returned 0x5 [0234.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP", dwFileAttributes=0x20) returned 0 [0234.726] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64118) returned 1 Thread: id = 9168 os_tid = 0x15d8 [0231.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp")) returned 0x20 [0234.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP", dwFileAttributes=0x20) returned 0 [0234.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.724] GetLastError () returned 0x5 [0234.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP", dwFileAttributes=0x20) returned 0 [0234.724] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a641a0) returned 1 Thread: id = 9169 os_tid = 0x1b78 [0231.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp")) returned 0x20 [0234.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", dwFileAttributes=0x20) returned 0 [0234.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.768] GetLastError () returned 0x5 [0234.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP", dwFileAttributes=0x20) returned 0 [0234.768] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64228) returned 1 Thread: id = 9170 os_tid = 0x15e0 [0231.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp")) returned 0x20 [0234.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP", dwFileAttributes=0x20) returned 0 [0234.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.771] GetLastError () returned 0x5 [0234.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP", dwFileAttributes=0x20) returned 0 [0234.771] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81c18) returned 1 Thread: id = 9171 os_tid = 0x500 [0231.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg")) returned 0x20 [0234.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG", dwFileAttributes=0x20) returned 0 [0234.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.773] GetLastError () returned 0x5 [0234.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG", dwFileAttributes=0x20) returned 0 [0234.773] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81b90) returned 1 Thread: id = 9172 os_tid = 0xb4c [0231.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg")) returned 0x20 [0234.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG", dwFileAttributes=0x20) returned 0 [0234.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.775] GetLastError () returned 0x5 [0234.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG", dwFileAttributes=0x20) returned 0 [0234.775] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81b08) returned 1 Thread: id = 9173 os_tid = 0x1040 [0231.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp")) returned 0x20 [0234.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP", dwFileAttributes=0x20) returned 0 [0234.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.718] GetLastError () returned 0x5 [0234.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP", dwFileAttributes=0x20) returned 0 [0234.719] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81a80) returned 1 Thread: id = 9174 os_tid = 0x13d8 [0231.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp")) returned 0x20 [0234.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP", dwFileAttributes=0x20) returned 0 [0234.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.797] GetLastError () returned 0x5 [0234.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP", dwFileAttributes=0x20) returned 0 [0234.797] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b819f8) returned 1 Thread: id = 9175 os_tid = 0x178c [0231.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg")) returned 0x20 [0234.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG", dwFileAttributes=0x20) returned 0 [0234.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.800] GetLastError () returned 0x5 [0234.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG", dwFileAttributes=0x20) returned 0 [0234.800] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81970) returned 1 Thread: id = 9176 os_tid = 0x1218 [0231.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp")) returned 0x20 [0234.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP", dwFileAttributes=0x20) returned 0 [0234.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.801] GetLastError () returned 0x5 [0234.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP", dwFileAttributes=0x20) returned 0 [0234.802] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b818e8) returned 1 Thread: id = 9177 os_tid = 0x80c [0231.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp")) returned 0x20 [0234.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP", dwFileAttributes=0x20) returned 0 [0234.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.803] GetLastError () returned 0x5 [0234.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP", dwFileAttributes=0x20) returned 0 [0234.803] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81860) returned 1 Thread: id = 9178 os_tid = 0x64c [0231.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg")) returned 0x20 [0234.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG", dwFileAttributes=0x20) returned 0 [0234.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.747] GetLastError () returned 0x5 [0234.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG", dwFileAttributes=0x20) returned 0 [0234.747] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b817d8) returned 1 Thread: id = 9179 os_tid = 0x221c [0231.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp")) returned 0x20 [0234.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP", dwFileAttributes=0x20) returned 0 [0234.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.749] GetLastError () returned 0x5 [0234.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP", dwFileAttributes=0x20) returned 0 [0234.749] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b81750) returned 1 Thread: id = 9180 os_tid = 0x2004 [0231.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp")) returned 0x20 [0234.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP", dwFileAttributes=0x20) returned 0 [0234.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.751] GetLastError () returned 0x5 [0234.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP", dwFileAttributes=0x20) returned 0 [0234.751] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7b814a8) returned 1 Thread: id = 9181 os_tid = 0x16e8 [0231.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp")) returned 0x20 [0234.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP", dwFileAttributes=0x20) returned 0 [0234.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.753] GetLastError () returned 0x5 [0234.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP", dwFileAttributes=0x20) returned 0 [0234.753] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a642b0) returned 1 Thread: id = 9182 os_tid = 0x2008 [0231.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp")) returned 0x20 [0234.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP", dwFileAttributes=0x20) returned 0 [0234.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.754] GetLastError () returned 0x5 [0234.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP", dwFileAttributes=0x20) returned 0 [0234.755] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64338) returned 1 Thread: id = 9183 os_tid = 0x222c [0231.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp")) returned 0x20 [0234.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP", dwFileAttributes=0x20) returned 0 [0234.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.756] GetLastError () returned 0x5 [0234.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP", dwFileAttributes=0x20) returned 0 [0234.757] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a643c0) returned 1 Thread: id = 9184 os_tid = 0x200c [0231.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp")) returned 0x20 [0234.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP", dwFileAttributes=0x20) returned 0 [0234.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.759] GetLastError () returned 0x5 [0234.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP", dwFileAttributes=0x20) returned 0 [0234.759] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64448) returned 1 Thread: id = 9185 os_tid = 0x2020 [0231.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg")) returned 0x20 [0234.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG", dwFileAttributes=0x20) returned 0 [0234.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.761] GetLastError () returned 0x5 [0234.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG", dwFileAttributes=0x20) returned 0 [0234.761] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a644d0) returned 1 Thread: id = 9186 os_tid = 0x11e0 [0231.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp")) returned 0x20 [0234.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP", dwFileAttributes=0x20) returned 0 [0234.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.762] GetLastError () returned 0x5 [0234.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP", dwFileAttributes=0x20) returned 0 [0234.763] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64558) returned 1 Thread: id = 9187 os_tid = 0x25c8 [0231.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp")) returned 0x20 [0234.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP", dwFileAttributes=0x20) returned 0 [0234.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.764] GetLastError () returned 0x5 [0234.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP", dwFileAttributes=0x20) returned 0 [0234.765] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a645e0) returned 1 Thread: id = 9188 os_tid = 0x1460 [0231.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp")) returned 0x20 [0234.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", dwFileAttributes=0x20) returned 0 [0234.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.766] GetLastError () returned 0x5 [0234.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP", dwFileAttributes=0x20) returned 0 [0234.766] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64668) returned 1 Thread: id = 9189 os_tid = 0x90c [0231.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp")) returned 0x20 [0234.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP", dwFileAttributes=0x20) returned 0 [0234.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.786] GetLastError () returned 0x5 [0234.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP", dwFileAttributes=0x20) returned 0 [0234.786] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a646f0) returned 1 Thread: id = 9190 os_tid = 0x91c [0231.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg")) returned 0x20 [0234.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG", dwFileAttributes=0x20) returned 0 [0234.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.788] GetLastError () returned 0x5 [0234.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG", dwFileAttributes=0x20) returned 0 [0234.788] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64778) returned 1 Thread: id = 9191 os_tid = 0x1604 [0231.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif")) returned 0x20 [0234.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF", dwFileAttributes=0x20) returned 0 [0234.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.790] GetLastError () returned 0x5 [0234.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF", dwFileAttributes=0x20) returned 0 [0234.790] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64800) returned 1 Thread: id = 9192 os_tid = 0x1608 [0231.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp")) returned 0x20 [0234.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP", dwFileAttributes=0x20) returned 0 [0234.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.792] GetLastError () returned 0x5 [0234.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP", dwFileAttributes=0x20) returned 0 [0234.792] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64888) returned 1 Thread: id = 9193 os_tid = 0x92c [0231.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp")) returned 0x20 [0234.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP", dwFileAttributes=0x20) returned 0 [0234.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.794] GetLastError () returned 0x5 [0234.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP", dwFileAttributes=0x20) returned 0 [0234.794] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64910) returned 1 Thread: id = 9194 os_tid = 0x1610 [0231.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif")) returned 0x20 [0234.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF", dwFileAttributes=0x20) returned 0 [0234.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.720] GetLastError () returned 0x5 [0234.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF", dwFileAttributes=0x20) returned 0 [0234.721] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64998) returned 1 Thread: id = 9195 os_tid = 0x1614 [0231.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp")) returned 0x20 [0234.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP", dwFileAttributes=0x20) returned 0 [0234.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.795] GetLastError () returned 0x5 [0234.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP", dwFileAttributes=0x20) returned 0 [0234.796] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64a20) returned 1 Thread: id = 9196 os_tid = 0x93c [0231.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif")) returned 0x20 [0234.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF", dwFileAttributes=0x20) returned 0 [0234.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.722] GetLastError () returned 0x5 [0234.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF", dwFileAttributes=0x20) returned 0 [0234.722] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64aa8) returned 1 Thread: id = 9197 os_tid = 0x23e0 [0231.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp")) returned 0x20 [0234.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP", dwFileAttributes=0x20) returned 0 [0234.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.826] GetLastError () returned 0x5 [0234.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP", dwFileAttributes=0x20) returned 0 [0234.826] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64b30) returned 1 Thread: id = 9198 os_tid = 0x94c [0231.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif")) returned 0x20 [0234.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF", dwFileAttributes=0x20) returned 0 [0234.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.776] GetLastError () returned 0x5 [0234.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF", dwFileAttributes=0x20) returned 0 [0234.777] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64bb8) returned 1 Thread: id = 9199 os_tid = 0x23e8 [0231.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif")) returned 0x20 [0234.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF", dwFileAttributes=0x20) returned 0 [0234.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.778] GetLastError () returned 0x5 [0234.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF", dwFileAttributes=0x20) returned 0 [0234.779] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64c40) returned 1 Thread: id = 9200 os_tid = 0x11bc [0231.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp")) returned 0x20 [0234.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP", dwFileAttributes=0x20) returned 0 [0234.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.820] GetLastError () returned 0x5 [0234.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP", dwFileAttributes=0x20) returned 0 [0234.820] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64cc8) returned 1 Thread: id = 9201 os_tid = 0xe00 [0231.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif")) returned 0x20 [0234.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF", dwFileAttributes=0x20) returned 0 [0234.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.822] GetLastError () returned 0x5 [0234.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF", dwFileAttributes=0x20) returned 0 [0234.822] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64d50) returned 1 Thread: id = 9202 os_tid = 0x948 [0231.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp")) returned 0x20 [0234.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP", dwFileAttributes=0x20) returned 0 [0234.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.784] GetLastError () returned 0x5 [0234.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP", dwFileAttributes=0x20) returned 0 [0234.784] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64dd8) returned 1 Thread: id = 9203 os_tid = 0x958 [0231.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif")) returned 0x20 [0234.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF", dwFileAttributes=0x20) returned 0 [0234.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.782] GetLastError () returned 0x5 [0234.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF", dwFileAttributes=0x20) returned 0 [0234.782] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64e60) returned 1 Thread: id = 9204 os_tid = 0x968 [0231.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp")) returned 0x20 [0234.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP", dwFileAttributes=0x20) returned 0 [0234.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.780] GetLastError () returned 0x5 [0234.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP", dwFileAttributes=0x20) returned 0 [0234.780] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64ee8) returned 1 Thread: id = 9205 os_tid = 0x978 [0231.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif")) returned 0x20 [0234.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF", dwFileAttributes=0x20) returned 0 [0234.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.824] GetLastError () returned 0x5 [0234.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF", dwFileAttributes=0x20) returned 0 [0234.824] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64f70) returned 1 Thread: id = 9206 os_tid = 0x988 [0232.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp")) returned 0x20 [0234.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP", dwFileAttributes=0x20) returned 0 [0234.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.219] GetLastError () returned 0x5 [0234.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP", dwFileAttributes=0x20) returned 0 [0234.219] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba4c8) returned 1 Thread: id = 9207 os_tid = 0x9e8 [0232.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif")) returned 0x20 [0234.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF", dwFileAttributes=0x20) returned 0 [0234.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.217] GetLastError () returned 0x5 [0234.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF", dwFileAttributes=0x20) returned 0 [0234.218] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba220) returned 1 Thread: id = 9208 os_tid = 0xa08 [0232.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp")) returned 0x20 [0234.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP", dwFileAttributes=0x20) returned 0 [0234.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.216] GetLastError () returned 0x5 [0234.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP", dwFileAttributes=0x20) returned 0 [0234.216] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9120) returned 1 Thread: id = 9209 os_tid = 0xa18 [0232.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp")) returned 0x20 [0234.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP", dwFileAttributes=0x20) returned 0 [0234.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.207] GetLastError () returned 0x5 [0234.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP", dwFileAttributes=0x20) returned 0 [0234.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9b38) returned 1 Thread: id = 9210 os_tid = 0xa28 [0232.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp")) returned 0x20 [0234.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP", dwFileAttributes=0x20) returned 0 [0234.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.206] GetLastError () returned 0x5 [0234.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP", dwFileAttributes=0x20) returned 0 [0234.206] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9ef0) returned 1 Thread: id = 9211 os_tid = 0xa38 [0232.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp")) returned 0x20 [0234.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP", dwFileAttributes=0x20) returned 0 [0234.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.214] GetLastError () returned 0x5 [0234.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP", dwFileAttributes=0x20) returned 0 [0234.214] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a64ff8) returned 1 Thread: id = 9212 os_tid = 0xa48 [0232.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp")) returned 0x20 [0234.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP", dwFileAttributes=0x20) returned 0 [0234.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.204] GetLastError () returned 0x5 [0234.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP", dwFileAttributes=0x20) returned 0 [0234.204] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65080) returned 1 Thread: id = 9213 os_tid = 0xa58 [0232.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp")) returned 0x20 [0234.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP", dwFileAttributes=0x20) returned 0 [0234.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.202] GetLastError () returned 0x5 [0234.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP", dwFileAttributes=0x20) returned 0 [0234.203] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65108) returned 1 Thread: id = 9214 os_tid = 0xa78 [0232.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp")) returned 0x20 [0234.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP", dwFileAttributes=0x20) returned 0 [0234.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.201] GetLastError () returned 0x5 [0234.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP", dwFileAttributes=0x20) returned 0 [0234.201] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65190) returned 1 Thread: id = 9215 os_tid = 0x124c [0232.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg")) returned 0x20 [0234.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG", dwFileAttributes=0x20) returned 0 [0234.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.199] GetLastError () returned 0x5 [0234.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG", dwFileAttributes=0x20) returned 0 [0234.199] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65218) returned 1 Thread: id = 9216 os_tid = 0xda0 [0232.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg")) returned 0x20 [0234.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG", dwFileAttributes=0x20) returned 0 [0234.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.197] GetLastError () returned 0x5 [0234.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG", dwFileAttributes=0x20) returned 0 [0234.197] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a652a0) returned 1 Thread: id = 9217 os_tid = 0xe34 [0232.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg")) returned 0x20 [0234.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG", dwFileAttributes=0x20) returned 0 [0234.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.153] GetLastError () returned 0x5 [0234.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG", dwFileAttributes=0x20) returned 0 [0234.154] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65328) returned 1 Thread: id = 9218 os_tid = 0xe2c [0232.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif")) returned 0x20 [0235.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF", dwFileAttributes=0x20) returned 0 [0235.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.093] GetLastError () returned 0x5 [0235.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF", dwFileAttributes=0x20) returned 0 [0235.093] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a653b0) returned 1 Thread: id = 9219 os_tid = 0xe24 [0232.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg")) returned 0x20 [0235.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG", dwFileAttributes=0x20) returned 0 [0235.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.186] GetLastError () returned 0x5 [0235.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG", dwFileAttributes=0x20) returned 0 [0235.187] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65438) returned 1 Thread: id = 9220 os_tid = 0xe18 [0232.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp")) returned 0x20 [0235.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP", dwFileAttributes=0x20) returned 0 [0235.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.091] GetLastError () returned 0x5 [0235.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP", dwFileAttributes=0x20) returned 0 [0235.091] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a654c0) returned 1 Thread: id = 9221 os_tid = 0xe38 [0232.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp")) returned 0x20 [0234.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP", dwFileAttributes=0x20) returned 0 [0234.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.996] GetLastError () returned 0x5 [0234.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP", dwFileAttributes=0x20) returned 0 [0234.997] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65548) returned 1 Thread: id = 9222 os_tid = 0xde4 [0232.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif")) returned 0x20 [0234.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF", dwFileAttributes=0x20) returned 0 [0234.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.924] GetLastError () returned 0x5 [0234.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF", dwFileAttributes=0x20) returned 0 [0234.924] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a655d0) returned 1 Thread: id = 9223 os_tid = 0x1250 [0232.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg")) returned 0x20 [0234.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG", dwFileAttributes=0x20) returned 0 [0234.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.896] GetLastError () returned 0x5 [0234.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG", dwFileAttributes=0x20) returned 0 [0234.896] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65658) returned 1 Thread: id = 9224 os_tid = 0x1254 [0232.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg")) returned 0x20 [0234.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG", dwFileAttributes=0x20) returned 0 [0234.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.842] GetLastError () returned 0x5 [0234.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG", dwFileAttributes=0x20) returned 0 [0234.843] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a656e0) returned 1 Thread: id = 9225 os_tid = 0x97c [0232.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg")) returned 0x20 [0234.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG", dwFileAttributes=0x20) returned 0 [0234.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.212] GetLastError () returned 0x5 [0234.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG", dwFileAttributes=0x20) returned 0 [0234.213] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65768) returned 1 Thread: id = 9226 os_tid = 0x98c [0232.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg")) returned 0x20 [0234.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG", dwFileAttributes=0x20) returned 0 [0234.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.222] GetLastError () returned 0x5 [0234.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG", dwFileAttributes=0x20) returned 0 [0234.222] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a657f0) returned 1 Thread: id = 9227 os_tid = 0x9ac [0232.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg")) returned 0x20 [0234.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG", dwFileAttributes=0x20) returned 0 [0234.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.211] GetLastError () returned 0x5 [0234.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG", dwFileAttributes=0x20) returned 0 [0234.211] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65878) returned 1 Thread: id = 9228 os_tid = 0x740 [0232.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg")) returned 0x20 [0234.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG", dwFileAttributes=0x20) returned 0 [0234.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.209] GetLastError () returned 0x5 [0234.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG", dwFileAttributes=0x20) returned 0 [0234.209] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65900) returned 1 Thread: id = 9229 os_tid = 0xc8 [0232.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg")) returned 0x20 [0234.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG", dwFileAttributes=0x20) returned 0 [0234.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.717] GetLastError () returned 0x5 [0234.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG", dwFileAttributes=0x20) returned 0 [0234.717] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65988) returned 1 Thread: id = 9230 os_tid = 0x9bc [0232.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf")) returned 0x20 [0234.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF", dwFileAttributes=0x20) returned 0 [0234.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.582] GetLastError () returned 0x5 [0234.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF", dwFileAttributes=0x20) returned 0 [0234.582] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e19418) returned 1 Thread: id = 9231 os_tid = 0x168c [0232.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf")) returned 0x20 [0234.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF", dwFileAttributes=0x20) returned 0 [0234.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.805] GetLastError () returned 0x5 [0234.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF", dwFileAttributes=0x20) returned 0 [0234.805] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65a10) returned 1 Thread: id = 9232 os_tid = 0x16b4 [0232.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf")) returned 0x20 [0234.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF", dwFileAttributes=0x20) returned 0 [0234.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.807] GetLastError () returned 0x5 [0234.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF", dwFileAttributes=0x20) returned 0 [0234.807] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65a98) returned 1 Thread: id = 9233 os_tid = 0x18cc [0232.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf")) returned 0x20 [0234.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF", dwFileAttributes=0x20) returned 0 [0234.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.809] GetLastError () returned 0x5 [0234.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF", dwFileAttributes=0x20) returned 0 [0234.809] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65b20) returned 1 Thread: id = 9234 os_tid = 0x18d4 [0232.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf")) returned 0x20 [0234.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF", dwFileAttributes=0x20) returned 0 [0234.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.811] GetLastError () returned 0x5 [0234.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF", dwFileAttributes=0x20) returned 0 [0234.811] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65ba8) returned 1 Thread: id = 9235 os_tid = 0x18d8 [0232.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf")) returned 0x20 [0234.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF", dwFileAttributes=0x20) returned 0 [0234.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.812] GetLastError () returned 0x5 [0234.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF", dwFileAttributes=0x20) returned 0 [0234.813] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65c30) returned 1 Thread: id = 9236 os_tid = 0x16c0 [0232.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf")) returned 0x20 [0234.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF", dwFileAttributes=0x20) returned 0 [0234.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.814] GetLastError () returned 0x5 [0234.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF", dwFileAttributes=0x20) returned 0 [0234.814] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65cb8) returned 1 Thread: id = 9237 os_tid = 0x10ec [0232.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf")) returned 0x20 [0234.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF", dwFileAttributes=0x20) returned 0 [0234.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.221] GetLastError () returned 0x5 [0234.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF", dwFileAttributes=0x20) returned 0 [0234.221] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65d40) returned 1 Thread: id = 9238 os_tid = 0x24c [0232.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid")) returned 0x20 [0234.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID", dwFileAttributes=0x20) returned 0 [0234.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.816] GetLastError () returned 0x5 [0234.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID", dwFileAttributes=0x20) returned 0 [0234.816] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65dc8) returned 1 Thread: id = 9239 os_tid = 0x256c [0232.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid")) returned 0x20 [0234.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID", dwFileAttributes=0x20) returned 0 [0234.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.818] GetLastError () returned 0x5 [0234.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID", dwFileAttributes=0x20) returned 0 [0234.818] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65e50) returned 1 Thread: id = 9240 os_tid = 0x2568 [0232.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid")) returned 0x20 [0234.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID", dwFileAttributes=0x20) returned 0 [0234.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.715] GetLastError () returned 0x5 [0234.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID", dwFileAttributes=0x20) returned 0 [0234.715] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65ed8) returned 1 Thread: id = 9241 os_tid = 0x27c0 [0232.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid")) returned 0x20 [0234.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID", dwFileAttributes=0x20) returned 0 [0234.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.713] GetLastError () returned 0x5 [0234.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID", dwFileAttributes=0x20) returned 0 [0234.713] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65f60) returned 1 Thread: id = 9242 os_tid = 0x11a8 [0232.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf")) returned 0x20 [0234.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF", dwFileAttributes=0x20) returned 0 [0234.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.711] GetLastError () returned 0x5 [0234.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF", dwFileAttributes=0x20) returned 0 [0234.711] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65fe8) returned 1 Thread: id = 9243 os_tid = 0x11ac [0232.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf")) returned 0x20 [0234.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF", dwFileAttributes=0x20) returned 0 [0234.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.709] GetLastError () returned 0x5 [0234.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF", dwFileAttributes=0x20) returned 0 [0234.709] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe020) returned 1 Thread: id = 9244 os_tid = 0x26b8 [0232.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf")) returned 0x20 [0234.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF", dwFileAttributes=0x20) returned 0 [0234.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.834] GetLastError () returned 0x5 [0234.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF", dwFileAttributes=0x20) returned 0 [0234.834] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe0a8) returned 1 Thread: id = 9245 os_tid = 0xdc0 [0232.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf")) returned 0x20 [0234.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF", dwFileAttributes=0x20) returned 0 [0234.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.841] GetLastError () returned 0x5 [0234.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF", dwFileAttributes=0x20) returned 0 [0234.841] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe130) returned 1 Thread: id = 9246 os_tid = 0x2774 [0232.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf")) returned 0x20 [0234.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF", dwFileAttributes=0x20) returned 0 [0234.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.832] GetLastError () returned 0x5 [0234.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF", dwFileAttributes=0x20) returned 0 [0234.832] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe1b8) returned 1 Thread: id = 9247 os_tid = 0x1050 [0232.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf")) returned 0x20 [0234.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF", dwFileAttributes=0x20) returned 0 [0234.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.838] GetLastError () returned 0x5 [0234.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF", dwFileAttributes=0x20) returned 0 [0234.839] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe240) returned 1 Thread: id = 9248 os_tid = 0x1058 [0232.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf")) returned 0x20 [0234.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF", dwFileAttributes=0x20) returned 0 [0234.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.836] GetLastError () returned 0x5 [0234.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF", dwFileAttributes=0x20) returned 0 [0234.837] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe2c8) returned 1 Thread: id = 9249 os_tid = 0x1158 [0232.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf")) returned 0x20 [0234.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF", dwFileAttributes=0x20) returned 0 [0234.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.706] GetLastError () returned 0x5 [0234.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF", dwFileAttributes=0x20) returned 0 [0234.707] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe350) returned 1 Thread: id = 9250 os_tid = 0x16f0 [0232.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf")) returned 0x20 [0234.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF", dwFileAttributes=0x20) returned 0 [0234.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.830] GetLastError () returned 0x5 [0234.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF", dwFileAttributes=0x20) returned 0 [0234.830] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe3d8) returned 1 Thread: id = 9251 os_tid = 0x137c [0232.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf")) returned 0x20 [0234.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF", dwFileAttributes=0x20) returned 0 [0234.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.828] GetLastError () returned 0x5 [0234.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF", dwFileAttributes=0x20) returned 0 [0234.828] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe460) returned 1 Thread: id = 9252 os_tid = 0x217c [0232.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf")) returned 0x20 [0234.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF", dwFileAttributes=0x20) returned 0 [0234.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.704] GetLastError () returned 0x5 [0234.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF", dwFileAttributes=0x20) returned 0 [0234.705] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe4e8) returned 1 Thread: id = 9253 os_tid = 0x84c [0232.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf")) returned 0x20 [0234.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF", dwFileAttributes=0x20) returned 0 [0234.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.702] GetLastError () returned 0x5 [0234.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF", dwFileAttributes=0x20) returned 0 [0234.703] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe570) returned 1 Thread: id = 9254 os_tid = 0x86c [0232.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf")) returned 0x20 [0234.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF", dwFileAttributes=0x20) returned 0 [0234.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.700] GetLastError () returned 0x5 [0234.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF", dwFileAttributes=0x20) returned 0 [0234.700] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe5f8) returned 1 Thread: id = 9255 os_tid = 0x17a8 [0232.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf")) returned 0x20 [0234.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF", dwFileAttributes=0x20) returned 0 [0234.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.698] GetLastError () returned 0x5 [0234.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF", dwFileAttributes=0x20) returned 0 [0234.698] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe680) returned 1 Thread: id = 9256 os_tid = 0x1170 [0232.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf")) returned 0x20 [0234.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF", dwFileAttributes=0x20) returned 0 [0234.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.696] GetLastError () returned 0x5 [0234.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF", dwFileAttributes=0x20) returned 0 [0234.696] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe708) returned 1 Thread: id = 9257 os_tid = 0x1200 [0232.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf")) returned 0x20 [0234.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF", dwFileAttributes=0x20) returned 0 [0234.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.693] GetLastError () returned 0x5 [0234.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF", dwFileAttributes=0x20) returned 0 [0234.694] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe790) returned 1 Thread: id = 9258 os_tid = 0x17b4 [0232.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf")) returned 0x20 [0234.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF", dwFileAttributes=0x20) returned 0 [0234.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.690] GetLastError () returned 0x5 [0234.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF", dwFileAttributes=0x20) returned 0 [0234.690] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe818) returned 1 Thread: id = 9259 os_tid = 0x17b8 [0233.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf")) returned 0x20 [0234.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF", dwFileAttributes=0x20) returned 0 [0234.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.885] GetLastError () returned 0x5 [0234.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF", dwFileAttributes=0x20) returned 0 [0234.886] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe8a0) returned 1 Thread: id = 9260 os_tid = 0x27c8 [0233.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf")) returned 0x20 [0234.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF", dwFileAttributes=0x20) returned 0 [0234.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.853] GetLastError () returned 0x5 [0234.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF", dwFileAttributes=0x20) returned 0 [0234.853] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 9261 os_tid = 0x2624 [0233.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf")) returned 0x20 [0234.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF", dwFileAttributes=0x20) returned 0 [0234.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.851] GetLastError () returned 0x5 [0234.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF", dwFileAttributes=0x20) returned 0 [0234.851] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 9262 os_tid = 0x1f44 [0233.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf")) returned 0x20 [0234.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF", dwFileAttributes=0x20) returned 0 [0234.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.872] GetLastError () returned 0x5 [0234.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF", dwFileAttributes=0x20) returned 0 [0234.872] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 9263 os_tid = 0x1f4c [0233.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf")) returned 0x20 [0234.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF", dwFileAttributes=0x20) returned 0 [0234.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.849] GetLastError () returned 0x5 [0234.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF", dwFileAttributes=0x20) returned 0 [0234.849] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 9264 os_tid = 0x88c [0233.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf")) returned 0x20 [0234.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF", dwFileAttributes=0x20) returned 0 [0234.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.870] GetLastError () returned 0x5 [0234.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF", dwFileAttributes=0x20) returned 0 [0234.870] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 9265 os_tid = 0x8dc [0233.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf")) returned 0x20 [0234.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF", dwFileAttributes=0x20) returned 0 [0234.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.847] GetLastError () returned 0x5 [0234.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF", dwFileAttributes=0x20) returned 0 [0234.847] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 9266 os_tid = 0xb58 [0233.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf")) returned 0x20 [0234.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF", dwFileAttributes=0x20) returned 0 [0234.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.845] GetLastError () returned 0x5 [0234.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF", dwFileAttributes=0x20) returned 0 [0234.845] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 9267 os_tid = 0x1af4 [0233.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf")) returned 0x20 [0234.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF", dwFileAttributes=0x20) returned 0 [0234.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.868] GetLastError () returned 0x5 [0234.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF", dwFileAttributes=0x20) returned 0 [0234.868] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 9268 os_tid = 0x15b4 [0233.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf")) returned 0x20 [0234.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF", dwFileAttributes=0x20) returned 0 [0234.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.865] GetLastError () returned 0x5 [0234.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF", dwFileAttributes=0x20) returned 0 [0234.866] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe928) returned 1 Thread: id = 9269 os_tid = 0x15b8 [0233.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf")) returned 0x20 [0234.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF", dwFileAttributes=0x20) returned 0 [0234.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.863] GetLastError () returned 0x5 [0234.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF", dwFileAttributes=0x20) returned 0 [0234.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbe9b0) returned 1 Thread: id = 9270 os_tid = 0x25a0 [0233.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf")) returned 0x20 [0234.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF", dwFileAttributes=0x20) returned 0 [0234.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.861] GetLastError () returned 0x5 [0234.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF", dwFileAttributes=0x20) returned 0 [0234.861] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbea38) returned 1 Thread: id = 9271 os_tid = 0x1124 [0233.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf")) returned 0x20 [0234.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF", dwFileAttributes=0x20) returned 0 [0234.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.859] GetLastError () returned 0x5 [0234.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF", dwFileAttributes=0x20) returned 0 [0234.859] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbeac0) returned 1 Thread: id = 9272 os_tid = 0x1f48 [0233.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf")) returned 0x20 [0234.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF", dwFileAttributes=0x20) returned 0 [0234.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.855] GetLastError () returned 0x5 [0234.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF", dwFileAttributes=0x20) returned 0 [0234.855] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbeb48) returned 1 Thread: id = 9273 os_tid = 0x2424 [0233.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf")) returned 0x20 [0234.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF", dwFileAttributes=0x20) returned 0 [0234.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.857] GetLastError () returned 0x5 [0234.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF", dwFileAttributes=0x20) returned 0 [0234.857] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbebd0) returned 1 Thread: id = 9274 os_tid = 0x1134 [0233.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf")) returned 0x20 [0234.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF", dwFileAttributes=0x20) returned 0 [0234.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.894] GetLastError () returned 0x5 [0234.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF", dwFileAttributes=0x20) returned 0 [0234.894] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 9275 os_tid = 0x113c [0233.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf")) returned 0x20 [0234.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF", dwFileAttributes=0x20) returned 0 [0234.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.898] GetLastError () returned 0x5 [0234.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF", dwFileAttributes=0x20) returned 0 [0234.898] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 9276 os_tid = 0x11a4 [0233.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf")) returned 0x20 [0234.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF", dwFileAttributes=0x20) returned 0 [0234.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.900] GetLastError () returned 0x5 [0234.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF", dwFileAttributes=0x20) returned 0 [0234.900] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbec58) returned 1 Thread: id = 9277 os_tid = 0xb70 [0233.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf")) returned 0x20 [0234.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF", dwFileAttributes=0x20) returned 0 [0234.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.902] GetLastError () returned 0x5 [0234.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF", dwFileAttributes=0x20) returned 0 [0234.903] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbece0) returned 1 Thread: id = 9278 os_tid = 0xb60 [0233.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf")) returned 0x20 [0234.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF", dwFileAttributes=0x20) returned 0 [0234.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.892] GetLastError () returned 0x5 [0234.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF", dwFileAttributes=0x20) returned 0 [0234.892] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbed68) returned 1 Thread: id = 9279 os_tid = 0x25ec [0233.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf")) returned 0x20 [0234.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF", dwFileAttributes=0x20) returned 0 [0234.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.904] GetLastError () returned 0x5 [0234.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF", dwFileAttributes=0x20) returned 0 [0234.905] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbedf0) returned 1 Thread: id = 9280 os_tid = 0xb88 [0233.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf")) returned 0x20 [0234.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF", dwFileAttributes=0x20) returned 0 [0234.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.890] GetLastError () returned 0x5 [0234.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF", dwFileAttributes=0x20) returned 0 [0234.890] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbee78) returned 1 Thread: id = 9281 os_tid = 0x25f4 [0233.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf")) returned 0x20 [0234.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF", dwFileAttributes=0x20) returned 0 [0234.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.906] GetLastError () returned 0x5 [0234.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF", dwFileAttributes=0x20) returned 0 [0234.906] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbef00) returned 1 Thread: id = 9282 os_tid = 0x25f8 [0233.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf")) returned 0x20 [0234.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF", dwFileAttributes=0x20) returned 0 [0234.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.908] GetLastError () returned 0x5 [0234.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF", dwFileAttributes=0x20) returned 0 [0234.908] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbef88) returned 1 Thread: id = 9283 os_tid = 0x25fc [0233.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf")) returned 0x20 [0234.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF", dwFileAttributes=0x20) returned 0 [0234.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.910] GetLastError () returned 0x5 [0234.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF", dwFileAttributes=0x20) returned 0 [0234.910] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf010) returned 1 Thread: id = 9284 os_tid = 0x2600 [0233.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf")) returned 0x20 [0234.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF", dwFileAttributes=0x20) returned 0 [0234.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.912] GetLastError () returned 0x5 [0234.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF", dwFileAttributes=0x20) returned 0 [0234.912] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf098) returned 1 Thread: id = 9285 os_tid = 0x2604 [0233.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf")) returned 0x20 [0234.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF", dwFileAttributes=0x20) returned 0 [0234.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.914] GetLastError () returned 0x5 [0234.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF", dwFileAttributes=0x20) returned 0 [0234.914] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf120) returned 1 Thread: id = 9286 os_tid = 0x1760 [0233.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf")) returned 0x20 [0234.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF", dwFileAttributes=0x20) returned 0 [0234.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.916] GetLastError () returned 0x5 [0234.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF", dwFileAttributes=0x20) returned 0 [0234.916] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf1a8) returned 1 Thread: id = 9287 os_tid = 0x17a0 [0233.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf")) returned 0x20 [0234.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF", dwFileAttributes=0x20) returned 0 [0234.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.887] GetLastError () returned 0x5 [0234.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF", dwFileAttributes=0x20) returned 0 [0234.888] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf230) returned 1 Thread: id = 9288 os_tid = 0x17bc [0233.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf")) returned 0x20 [0234.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF", dwFileAttributes=0x20) returned 0 [0234.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.918] GetLastError () returned 0x5 [0234.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF", dwFileAttributes=0x20) returned 0 [0234.919] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf2b8) returned 1 Thread: id = 9289 os_tid = 0x13c8 [0233.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf")) returned 0x20 [0234.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF", dwFileAttributes=0x20) returned 0 [0234.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.874] GetLastError () returned 0x5 [0234.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF", dwFileAttributes=0x20) returned 0 [0234.874] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf340) returned 1 Thread: id = 9290 os_tid = 0x17c0 [0233.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf")) returned 0x20 [0234.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF", dwFileAttributes=0x20) returned 0 [0234.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.920] GetLastError () returned 0x5 [0234.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF", dwFileAttributes=0x20) returned 0 [0234.921] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf3c8) returned 1 Thread: id = 9291 os_tid = 0x1174 [0233.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf")) returned 0x20 [0234.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF", dwFileAttributes=0x20) returned 0 [0234.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.877] GetLastError () returned 0x5 [0234.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF", dwFileAttributes=0x20) returned 0 [0234.877] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf450) returned 1 Thread: id = 9292 os_tid = 0x1178 [0233.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf")) returned 0x20 [0234.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF", dwFileAttributes=0x20) returned 0 [0234.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.879] GetLastError () returned 0x5 [0234.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF", dwFileAttributes=0x20) returned 0 [0234.879] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf4d8) returned 1 Thread: id = 9293 os_tid = 0x224c [0233.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf")) returned 0x20 [0234.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF", dwFileAttributes=0x20) returned 0 [0234.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.881] GetLastError () returned 0x5 [0234.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF", dwFileAttributes=0x20) returned 0 [0234.881] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf560) returned 1 Thread: id = 9294 os_tid = 0x117c [0233.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf")) returned 0x20 [0234.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF", dwFileAttributes=0x20) returned 0 [0234.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.883] GetLastError () returned 0x5 [0234.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF", dwFileAttributes=0x20) returned 0 [0234.884] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf5e8) returned 1 Thread: id = 9295 os_tid = 0x11dc [0233.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf")) returned 0x20 [0235.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF", dwFileAttributes=0x20) returned 0 [0235.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.001] GetLastError () returned 0x5 [0235.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF", dwFileAttributes=0x20) returned 0 [0235.001] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf670) returned 1 Thread: id = 9296 os_tid = 0x11e8 [0233.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf")) returned 0x20 [0234.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF", dwFileAttributes=0x20) returned 0 [0234.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.999] GetLastError () returned 0x5 [0234.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF", dwFileAttributes=0x20) returned 0 [0234.999] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 9297 os_tid = 0x11ec [0233.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf")) returned 0x20 [0234.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF", dwFileAttributes=0x20) returned 0 [0234.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.995] GetLastError () returned 0x5 [0234.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF", dwFileAttributes=0x20) returned 0 [0234.995] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 9298 os_tid = 0x11f0 [0233.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf")) returned 0x20 [0234.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF", dwFileAttributes=0x20) returned 0 [0234.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.992] GetLastError () returned 0x5 [0234.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF", dwFileAttributes=0x20) returned 0 [0234.993] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 9299 os_tid = 0x11f8 [0233.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf")) returned 0x20 [0234.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF", dwFileAttributes=0x20) returned 0 [0234.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.990] GetLastError () returned 0x5 [0234.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF", dwFileAttributes=0x20) returned 0 [0234.990] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 9300 os_tid = 0x17c4 [0233.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf")) returned 0x20 [0234.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF", dwFileAttributes=0x20) returned 0 [0234.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.987] GetLastError () returned 0x5 [0234.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF", dwFileAttributes=0x20) returned 0 [0234.988] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 9301 os_tid = 0x17c8 [0233.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf")) returned 0x20 [0234.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF", dwFileAttributes=0x20) returned 0 [0234.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.985] GetLastError () returned 0x5 [0234.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF", dwFileAttributes=0x20) returned 0 [0234.986] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 9302 os_tid = 0x17d0 [0233.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf")) returned 0x20 [0234.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF", dwFileAttributes=0x20) returned 0 [0234.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.983] GetLastError () returned 0x5 [0234.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF", dwFileAttributes=0x20) returned 0 [0234.983] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 9303 os_tid = 0x17d4 [0233.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf")) returned 0x20 [0234.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF", dwFileAttributes=0x20) returned 0 [0234.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.981] GetLastError () returned 0x5 [0234.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF", dwFileAttributes=0x20) returned 0 [0234.981] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 9304 os_tid = 0x23c8 [0233.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf")) returned 0x20 [0234.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF", dwFileAttributes=0x20) returned 0 [0234.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.979] GetLastError () returned 0x5 [0234.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF", dwFileAttributes=0x20) returned 0 [0234.979] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 9305 os_tid = 0xb5c [0233.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf")) returned 0x20 [0234.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF", dwFileAttributes=0x20) returned 0 [0234.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.977] GetLastError () returned 0x5 [0234.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF", dwFileAttributes=0x20) returned 0 [0234.977] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 9306 os_tid = 0x17a4 [0233.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf")) returned 0x20 [0234.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF", dwFileAttributes=0x20) returned 0 [0234.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.975] GetLastError () returned 0x5 [0234.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF", dwFileAttributes=0x20) returned 0 [0234.975] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 9307 os_tid = 0x32c [0233.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf")) returned 0x20 [0234.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF", dwFileAttributes=0x20) returned 0 [0234.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.972] GetLastError () returned 0x5 [0234.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF", dwFileAttributes=0x20) returned 0 [0234.973] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 9308 os_tid = 0x19a8 [0233.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf")) returned 0x20 [0234.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF", dwFileAttributes=0x20) returned 0 [0234.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.970] GetLastError () returned 0x5 [0234.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF", dwFileAttributes=0x20) returned 0 [0234.970] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 9309 os_tid = 0x1e64 [0233.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf")) returned 0x20 [0234.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF", dwFileAttributes=0x20) returned 0 [0234.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.968] GetLastError () returned 0x5 [0234.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF", dwFileAttributes=0x20) returned 0 [0234.968] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 9310 os_tid = 0x2284 [0233.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf")) returned 0x20 [0234.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF", dwFileAttributes=0x20) returned 0 [0234.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.966] GetLastError () returned 0x5 [0234.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF", dwFileAttributes=0x20) returned 0 [0234.966] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 9311 os_tid = 0x2288 [0233.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf")) returned 0x20 [0235.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF", dwFileAttributes=0x20) returned 0 [0235.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.013] GetLastError () returned 0x5 [0235.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF", dwFileAttributes=0x20) returned 0 [0235.013] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 9312 os_tid = 0x228c [0233.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf")) returned 0x20 [0235.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF", dwFileAttributes=0x20) returned 0 [0235.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.011] GetLastError () returned 0x5 [0235.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF", dwFileAttributes=0x20) returned 0 [0235.011] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 9313 os_tid = 0x2290 [0233.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf")) returned 0x20 [0235.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF", dwFileAttributes=0x20) returned 0 [0235.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.008] GetLastError () returned 0x5 [0235.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF", dwFileAttributes=0x20) returned 0 [0235.009] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf6f8) returned 1 Thread: id = 9314 os_tid = 0x2294 [0233.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf")) returned 0x20 [0235.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF", dwFileAttributes=0x20) returned 0 [0235.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.006] GetLastError () returned 0x5 [0235.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF", dwFileAttributes=0x20) returned 0 [0235.006] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf780) returned 1 Thread: id = 9315 os_tid = 0xe44 [0233.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf")) returned 0x20 [0235.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF", dwFileAttributes=0x20) returned 0 [0235.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.003] GetLastError () returned 0x5 [0235.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF", dwFileAttributes=0x20) returned 0 [0235.004] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf808) returned 1 Thread: id = 9316 os_tid = 0x24bc [0233.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf")) returned 0x20 [0235.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF", dwFileAttributes=0x20) returned 0 [0235.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.047] GetLastError () returned 0x5 [0235.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF", dwFileAttributes=0x20) returned 0 [0235.047] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf890) returned 1 Thread: id = 9317 os_tid = 0x24c0 [0233.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf")) returned 0x20 [0235.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF", dwFileAttributes=0x20) returned 0 [0235.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.036] GetLastError () returned 0x5 [0235.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF", dwFileAttributes=0x20) returned 0 [0235.036] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf918) returned 1 Thread: id = 9318 os_tid = 0x1e68 [0233.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf")) returned 0x20 [0235.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF", dwFileAttributes=0x20) returned 0 [0235.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.034] GetLastError () returned 0x5 [0235.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF", dwFileAttributes=0x20) returned 0 [0235.034] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbf9a0) returned 1 Thread: id = 9319 os_tid = 0xec0 [0233.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf")) returned 0x20 [0235.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF", dwFileAttributes=0x20) returned 0 [0235.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.032] GetLastError () returned 0x5 [0235.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF", dwFileAttributes=0x20) returned 0 [0235.032] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfa28) returned 1 Thread: id = 9320 os_tid = 0x22b4 [0233.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf")) returned 0x20 [0235.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF", dwFileAttributes=0x20) returned 0 [0235.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.030] GetLastError () returned 0x5 [0235.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF", dwFileAttributes=0x20) returned 0 [0235.030] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfab0) returned 1 Thread: id = 9321 os_tid = 0x27e4 [0233.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf")) returned 0x20 [0235.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF", dwFileAttributes=0x20) returned 0 [0235.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.089] GetLastError () returned 0x5 [0235.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF", dwFileAttributes=0x20) returned 0 [0235.089] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfb38) returned 1 Thread: id = 9322 os_tid = 0x1c9c [0233.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf")) returned 0x20 [0235.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF", dwFileAttributes=0x20) returned 0 [0235.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.087] GetLastError () returned 0x5 [0235.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF", dwFileAttributes=0x20) returned 0 [0235.087] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfbc0) returned 1 Thread: id = 9323 os_tid = 0x27e8 [0233.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf")) returned 0x20 [0235.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", dwFileAttributes=0x20) returned 0 [0235.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.028] GetLastError () returned 0x5 [0235.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF", dwFileAttributes=0x20) returned 0 [0235.028] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfc48) returned 1 Thread: id = 9324 os_tid = 0x1cdc [0233.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf")) returned 0x20 [0235.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF", dwFileAttributes=0x20) returned 0 [0235.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.026] GetLastError () returned 0x5 [0235.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF", dwFileAttributes=0x20) returned 0 [0235.026] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfcd0) returned 1 Thread: id = 9325 os_tid = 0xe0c [0233.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf")) returned 0x20 [0235.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF", dwFileAttributes=0x20) returned 0 [0235.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.084] GetLastError () returned 0x5 [0235.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF", dwFileAttributes=0x20) returned 0 [0235.084] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfd58) returned 1 Thread: id = 9326 os_tid = 0xba8 [0233.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf")) returned 0x20 [0235.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF", dwFileAttributes=0x20) returned 0 [0235.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.023] GetLastError () returned 0x5 [0235.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF", dwFileAttributes=0x20) returned 0 [0235.024] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfde0) returned 1 Thread: id = 9327 os_tid = 0xb7c [0233.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf")) returned 0x20 [0235.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF", dwFileAttributes=0x20) returned 0 [0235.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.082] GetLastError () returned 0x5 [0235.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF", dwFileAttributes=0x20) returned 0 [0235.082] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfe68) returned 1 Thread: id = 9328 os_tid = 0x300 [0233.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf")) returned 0x20 [0235.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF", dwFileAttributes=0x20) returned 0 [0235.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.080] GetLastError () returned 0x5 [0235.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF", dwFileAttributes=0x20) returned 0 [0235.080] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbfef0) returned 1 Thread: id = 9329 os_tid = 0xe04 [0233.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf")) returned 0x20 [0235.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF", dwFileAttributes=0x20) returned 0 [0235.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.077] GetLastError () returned 0x5 [0235.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF", dwFileAttributes=0x20) returned 0 [0235.078] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cbff78) returned 1 Thread: id = 9330 os_tid = 0x18dc [0233.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf")) returned 0x20 [0235.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF", dwFileAttributes=0x20) returned 0 [0235.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.075] GetLastError () returned 0x5 [0235.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF", dwFileAttributes=0x20) returned 0 [0235.075] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3db00) returned 1 Thread: id = 9331 os_tid = 0x1380 [0233.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf")) returned 0x20 [0235.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF", dwFileAttributes=0x20) returned 0 [0235.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.071] GetLastError () returned 0x5 [0235.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF", dwFileAttributes=0x20) returned 0 [0235.071] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6020) returned 1 Thread: id = 9332 os_tid = 0x1384 [0233.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf")) returned 0x20 [0235.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF", dwFileAttributes=0x20) returned 0 [0235.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.069] GetLastError () returned 0x5 [0235.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF", dwFileAttributes=0x20) returned 0 [0235.069] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb60a8) returned 1 Thread: id = 9333 os_tid = 0x138c [0233.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf")) returned 0x20 [0235.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF", dwFileAttributes=0x20) returned 0 [0235.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.066] GetLastError () returned 0x5 [0235.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF", dwFileAttributes=0x20) returned 0 [0235.067] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6130) returned 1 Thread: id = 9334 os_tid = 0x22d0 [0233.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf")) returned 0x20 [0235.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF", dwFileAttributes=0x20) returned 0 [0235.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.064] GetLastError () returned 0x5 [0235.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF", dwFileAttributes=0x20) returned 0 [0235.064] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb61b8) returned 1 Thread: id = 9335 os_tid = 0x1e38 [0233.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf")) returned 0x20 [0235.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF", dwFileAttributes=0x20) returned 0 [0235.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.062] GetLastError () returned 0x5 [0235.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF", dwFileAttributes=0x20) returned 0 [0235.062] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6240) returned 1 Thread: id = 9336 os_tid = 0x2338 [0233.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf")) returned 0x20 [0235.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF", dwFileAttributes=0x20) returned 0 [0235.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.060] GetLastError () returned 0x5 [0235.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF", dwFileAttributes=0x20) returned 0 [0235.060] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb62c8) returned 1 Thread: id = 9337 os_tid = 0x1b40 [0233.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf")) returned 0x20 [0235.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF", dwFileAttributes=0x20) returned 0 [0235.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.058] GetLastError () returned 0x5 [0235.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF", dwFileAttributes=0x20) returned 0 [0235.058] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6350) returned 1 Thread: id = 9338 os_tid = 0x1b44 [0233.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf")) returned 0x20 [0235.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF", dwFileAttributes=0x20) returned 0 [0235.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.056] GetLastError () returned 0x5 [0235.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF", dwFileAttributes=0x20) returned 0 [0235.056] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb63d8) returned 1 Thread: id = 9339 os_tid = 0x1a34 [0233.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf")) returned 0x20 [0235.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF", dwFileAttributes=0x20) returned 0 [0235.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.053] GetLastError () returned 0x5 [0235.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF", dwFileAttributes=0x20) returned 0 [0235.054] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6460) returned 1 Thread: id = 9340 os_tid = 0x1a38 [0233.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf")) returned 0x20 [0235.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF", dwFileAttributes=0x20) returned 0 [0235.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.051] GetLastError () returned 0x5 [0235.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF", dwFileAttributes=0x20) returned 0 [0235.051] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb64e8) returned 1 Thread: id = 9341 os_tid = 0x248 [0233.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf")) returned 0x20 [0235.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF", dwFileAttributes=0x20) returned 0 [0235.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.049] GetLastError () returned 0x5 [0235.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF", dwFileAttributes=0x20) returned 0 [0235.049] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6570) returned 1 Thread: id = 9342 os_tid = 0x2210 [0233.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf")) returned 0x20 [0234.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF", dwFileAttributes=0x20) returned 0 [0234.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.229] GetLastError () returned 0x5 [0234.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF", dwFileAttributes=0x20) returned 0 [0234.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb65f8) returned 1 Thread: id = 9343 os_tid = 0x1b74 [0233.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf")) returned 0x20 [0234.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF", dwFileAttributes=0x20) returned 0 [0234.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.227] GetLastError () returned 0x5 [0234.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF", dwFileAttributes=0x20) returned 0 [0234.227] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6680) returned 1 Thread: id = 9344 os_tid = 0x1b7c [0233.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf")) returned 0x20 [0234.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF", dwFileAttributes=0x20) returned 0 [0234.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.225] GetLastError () returned 0x5 [0234.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF", dwFileAttributes=0x20) returned 0 [0234.226] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6708) returned 1 Thread: id = 9345 os_tid = 0x1b80 [0233.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf")) returned 0x20 [0235.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF", dwFileAttributes=0x20) returned 0 [0235.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.021] GetLastError () returned 0x5 [0235.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF", dwFileAttributes=0x20) returned 0 [0235.021] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6790) returned 1 Thread: id = 9346 os_tid = 0x1b84 [0233.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf")) returned 0x20 [0235.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF", dwFileAttributes=0x20) returned 0 [0235.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.019] GetLastError () returned 0x5 [0235.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF", dwFileAttributes=0x20) returned 0 [0235.019] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6818) returned 1 Thread: id = 9347 os_tid = 0x1b88 [0233.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf")) returned 0x20 [0235.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF", dwFileAttributes=0x20) returned 0 [0235.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.017] GetLastError () returned 0x5 [0235.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF", dwFileAttributes=0x20) returned 0 [0235.017] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb68a0) returned 1 Thread: id = 9348 os_tid = 0x1b8c [0233.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf")) returned 0x20 [0235.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF", dwFileAttributes=0x20) returned 0 [0235.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.015] GetLastError () returned 0x5 [0235.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF", dwFileAttributes=0x20) returned 0 [0235.015] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6928) returned 1 Thread: id = 9349 os_tid = 0x1b90 [0233.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf")) returned 0x20 [0234.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF", dwFileAttributes=0x20) returned 0 [0234.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.224] GetLastError () returned 0x5 [0234.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF", dwFileAttributes=0x20) returned 0 [0234.224] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb69b0) returned 1 Thread: id = 9350 os_tid = 0x1b94 [0233.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf")) returned 0x20 [0234.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF", dwFileAttributes=0x20) returned 0 [0234.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.964] GetLastError () returned 0x5 [0234.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF", dwFileAttributes=0x20) returned 0 [0234.964] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6a38) returned 1 Thread: id = 9351 os_tid = 0x1b98 [0233.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf")) returned 0x20 [0234.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF", dwFileAttributes=0x20) returned 0 [0234.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.962] GetLastError () returned 0x5 [0234.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF", dwFileAttributes=0x20) returned 0 [0234.962] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6ac0) returned 1 Thread: id = 9352 os_tid = 0x207c [0233.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf")) returned 0x20 [0234.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF", dwFileAttributes=0x20) returned 0 [0234.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.960] GetLastError () returned 0x5 [0234.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF", dwFileAttributes=0x20) returned 0 [0234.960] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6b48) returned 1 Thread: id = 9353 os_tid = 0x1dc4 [0233.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf")) returned 0x20 [0234.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF", dwFileAttributes=0x20) returned 0 [0234.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.958] GetLastError () returned 0x5 [0234.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF", dwFileAttributes=0x20) returned 0 [0234.958] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6bd0) returned 1 Thread: id = 9354 os_tid = 0xff8 [0233.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf")) returned 0x20 [0234.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF", dwFileAttributes=0x20) returned 0 [0234.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.956] GetLastError () returned 0x5 [0234.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF", dwFileAttributes=0x20) returned 0 [0234.956] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6c58) returned 1 Thread: id = 9355 os_tid = 0x2700 [0233.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf")) returned 0x20 [0234.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF", dwFileAttributes=0x20) returned 0 [0234.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.954] GetLastError () returned 0x5 [0234.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF", dwFileAttributes=0x20) returned 0 [0234.954] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6ce0) returned 1 Thread: id = 9356 os_tid = 0x2028 [0233.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf")) returned 0x20 [0234.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF", dwFileAttributes=0x20) returned 0 [0234.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.952] GetLastError () returned 0x5 [0234.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF", dwFileAttributes=0x20) returned 0 [0234.952] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6d68) returned 1 Thread: id = 9357 os_tid = 0x2030 [0233.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf")) returned 0x20 [0234.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF", dwFileAttributes=0x20) returned 0 [0234.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.950] GetLastError () returned 0x5 [0234.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF", dwFileAttributes=0x20) returned 0 [0234.950] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6df0) returned 1 Thread: id = 9358 os_tid = 0x2050 [0233.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf")) returned 0x20 [0234.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF", dwFileAttributes=0x20) returned 0 [0234.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.947] GetLastError () returned 0x5 [0234.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF", dwFileAttributes=0x20) returned 0 [0234.948] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6e78) returned 1 Thread: id = 9359 os_tid = 0x2060 [0233.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf")) returned 0x20 [0234.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF", dwFileAttributes=0x20) returned 0 [0234.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.945] GetLastError () returned 0x5 [0234.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF", dwFileAttributes=0x20) returned 0 [0234.946] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6f00) returned 1 Thread: id = 9360 os_tid = 0x20d4 [0233.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf")) returned 0x20 [0234.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF", dwFileAttributes=0x20) returned 0 [0234.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.943] GetLastError () returned 0x5 [0234.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF", dwFileAttributes=0x20) returned 0 [0234.943] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb6f88) returned 1 Thread: id = 9361 os_tid = 0x160c [0233.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf")) returned 0x20 [0234.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF", dwFileAttributes=0x20) returned 0 [0234.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.941] GetLastError () returned 0x5 [0234.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF", dwFileAttributes=0x20) returned 0 [0234.941] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7010) returned 1 Thread: id = 9362 os_tid = 0x25c0 [0233.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf")) returned 0x20 [0234.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF", dwFileAttributes=0x20) returned 0 [0234.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.939] GetLastError () returned 0x5 [0234.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF", dwFileAttributes=0x20) returned 0 [0234.939] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7098) returned 1 Thread: id = 9363 os_tid = 0x25c4 [0233.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf")) returned 0x20 [0234.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF", dwFileAttributes=0x20) returned 0 [0234.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.937] GetLastError () returned 0x5 [0234.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF", dwFileAttributes=0x20) returned 0 [0234.937] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7120) returned 1 Thread: id = 9364 os_tid = 0xc5c [0233.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf")) returned 0x20 [0234.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF", dwFileAttributes=0x20) returned 0 [0234.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.935] GetLastError () returned 0x5 [0234.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF", dwFileAttributes=0x20) returned 0 [0234.935] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb71a8) returned 1 Thread: id = 9365 os_tid = 0xdb4 [0233.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf")) returned 0x20 [0234.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF", dwFileAttributes=0x20) returned 0 [0234.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.933] GetLastError () returned 0x5 [0234.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF", dwFileAttributes=0x20) returned 0 [0234.933] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7230) returned 1 Thread: id = 9366 os_tid = 0xdb8 [0233.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf")) returned 0x20 [0234.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF", dwFileAttributes=0x20) returned 0 [0234.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.930] GetLastError () returned 0x5 [0234.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF", dwFileAttributes=0x20) returned 0 [0234.931] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb72b8) returned 1 Thread: id = 9367 os_tid = 0x6a4 [0233.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf")) returned 0x20 [0234.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF", dwFileAttributes=0x20) returned 0 [0234.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.928] GetLastError () returned 0x5 [0234.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF", dwFileAttributes=0x20) returned 0 [0234.928] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7340) returned 1 Thread: id = 9368 os_tid = 0x2590 [0233.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf")) returned 0x20 [0234.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF", dwFileAttributes=0x20) returned 0 [0234.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.926] GetLastError () returned 0x5 [0234.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF", dwFileAttributes=0x20) returned 0 [0234.926] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb73c8) returned 1 Thread: id = 9369 os_tid = 0x1a0c [0233.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf")) returned 0x20 [0235.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF", dwFileAttributes=0x20) returned 0 [0235.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.097] GetLastError () returned 0x5 [0235.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF", dwFileAttributes=0x20) returned 0 [0235.097] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7450) returned 1 Thread: id = 9370 os_tid = 0x1a20 [0233.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf")) returned 0x20 [0235.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF", dwFileAttributes=0x20) returned 0 [0235.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.100] GetLastError () returned 0x5 [0235.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF", dwFileAttributes=0x20) returned 0 [0235.100] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb74d8) returned 1 Thread: id = 9371 os_tid = 0x9d8 [0233.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf")) returned 0x20 [0235.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF", dwFileAttributes=0x20) returned 0 [0235.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.102] GetLastError () returned 0x5 [0235.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF", dwFileAttributes=0x20) returned 0 [0235.102] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7560) returned 1 Thread: id = 9372 os_tid = 0xe30 [0233.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf")) returned 0x20 [0235.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF", dwFileAttributes=0x20) returned 0 [0235.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.104] GetLastError () returned 0x5 [0235.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF", dwFileAttributes=0x20) returned 0 [0235.104] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb75e8) returned 1 Thread: id = 9373 os_tid = 0xe78 [0233.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf")) returned 0x20 [0235.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF", dwFileAttributes=0x20) returned 0 [0235.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.120] GetLastError () returned 0x5 [0235.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF", dwFileAttributes=0x20) returned 0 [0235.120] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7670) returned 1 Thread: id = 9374 os_tid = 0xe7c [0233.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf")) returned 0x20 [0235.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF", dwFileAttributes=0x20) returned 0 [0235.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.123] GetLastError () returned 0x5 [0235.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF", dwFileAttributes=0x20) returned 0 [0235.123] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb76f8) returned 1 Thread: id = 9375 os_tid = 0x25d0 [0233.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf")) returned 0x20 [0235.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF", dwFileAttributes=0x20) returned 0 [0235.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.125] GetLastError () returned 0x5 [0235.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF", dwFileAttributes=0x20) returned 0 [0235.125] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7780) returned 1 Thread: id = 9376 os_tid = 0x1538 [0233.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf")) returned 0x20 [0235.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF", dwFileAttributes=0x20) returned 0 [0235.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.113] GetLastError () returned 0x5 [0235.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF", dwFileAttributes=0x20) returned 0 [0235.113] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7808) returned 1 Thread: id = 9377 os_tid = 0x1d40 [0233.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf")) returned 0x20 [0235.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF", dwFileAttributes=0x20) returned 0 [0235.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.115] GetLastError () returned 0x5 [0235.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF", dwFileAttributes=0x20) returned 0 [0235.115] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7890) returned 1 Thread: id = 9378 os_tid = 0x1390 [0233.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf")) returned 0x20 [0235.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF", dwFileAttributes=0x20) returned 0 [0235.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.118] GetLastError () returned 0x5 [0235.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF", dwFileAttributes=0x20) returned 0 [0235.118] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7918) returned 1 Thread: id = 9379 os_tid = 0x1f3c [0233.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf")) returned 0x20 [0235.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF", dwFileAttributes=0x20) returned 0 [0235.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.127] GetLastError () returned 0x5 [0235.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF", dwFileAttributes=0x20) returned 0 [0235.127] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb79a0) returned 1 Thread: id = 9380 os_tid = 0x1f40 [0233.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf")) returned 0x20 [0235.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF", dwFileAttributes=0x20) returned 0 [0235.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.129] GetLastError () returned 0x5 [0235.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF", dwFileAttributes=0x20) returned 0 [0235.130] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7a28) returned 1 Thread: id = 9381 os_tid = 0x1f98 [0233.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf")) returned 0x20 [0235.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF", dwFileAttributes=0x20) returned 0 [0235.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.132] GetLastError () returned 0x5 [0235.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF", dwFileAttributes=0x20) returned 0 [0235.132] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7ab0) returned 1 Thread: id = 9382 os_tid = 0x1f9c [0233.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf")) returned 0x20 [0235.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF", dwFileAttributes=0x20) returned 0 [0235.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.134] GetLastError () returned 0x5 [0235.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF", dwFileAttributes=0x20) returned 0 [0235.134] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7b38) returned 1 Thread: id = 9383 os_tid = 0xa8c [0233.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf")) returned 0x20 [0235.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF", dwFileAttributes=0x20) returned 0 [0235.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.136] GetLastError () returned 0x5 [0235.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF", dwFileAttributes=0x20) returned 0 [0235.137] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7bc0) returned 1 Thread: id = 9384 os_tid = 0x1160 [0233.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf")) returned 0x20 [0235.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF", dwFileAttributes=0x20) returned 0 [0235.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.139] GetLastError () returned 0x5 [0235.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF", dwFileAttributes=0x20) returned 0 [0235.139] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7c48) returned 1 Thread: id = 9385 os_tid = 0xb18 [0233.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf")) returned 0x20 [0235.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF", dwFileAttributes=0x20) returned 0 [0235.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.141] GetLastError () returned 0x5 [0235.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF", dwFileAttributes=0x20) returned 0 [0235.141] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7cd0) returned 1 Thread: id = 9386 os_tid = 0x26c4 [0233.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf")) returned 0x20 [0235.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF", dwFileAttributes=0x20) returned 0 [0235.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.143] GetLastError () returned 0x5 [0235.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF", dwFileAttributes=0x20) returned 0 [0235.143] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7d58) returned 1 Thread: id = 9387 os_tid = 0x26c8 [0233.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf")) returned 0x20 [0235.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF", dwFileAttributes=0x20) returned 0 [0235.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.162] GetLastError () returned 0x5 [0235.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF", dwFileAttributes=0x20) returned 0 [0235.162] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7de0) returned 1 Thread: id = 9388 os_tid = 0x22f4 [0233.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf")) returned 0x20 [0235.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF", dwFileAttributes=0x20) returned 0 [0235.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.166] GetLastError () returned 0x5 [0235.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF", dwFileAttributes=0x20) returned 0 [0235.167] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7e68) returned 1 Thread: id = 9389 os_tid = 0x26d4 [0233.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf")) returned 0x20 [0235.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF", dwFileAttributes=0x20) returned 0 [0235.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.171] GetLastError () returned 0x5 [0235.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF", dwFileAttributes=0x20) returned 0 [0235.171] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7ef0) returned 1 Thread: id = 9390 os_tid = 0x1634 [0233.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf")) returned 0x20 [0235.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF", dwFileAttributes=0x20) returned 0 [0235.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.173] GetLastError () returned 0x5 [0235.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF", dwFileAttributes=0x20) returned 0 [0235.174] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cb7f78) returned 1 Thread: id = 9391 os_tid = 0x1168 [0233.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf")) returned 0x20 [0235.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF", dwFileAttributes=0x20) returned 0 [0235.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.176] GetLastError () returned 0x5 [0235.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF", dwFileAttributes=0x20) returned 0 [0235.176] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0020) returned 1 Thread: id = 9392 os_tid = 0x1638 [0233.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf")) returned 0x20 [0235.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF", dwFileAttributes=0x20) returned 0 [0235.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.178] GetLastError () returned 0x5 [0235.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF", dwFileAttributes=0x20) returned 0 [0235.178] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc00a8) returned 1 Thread: id = 9393 os_tid = 0x163c [0233.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf")) returned 0x20 [0235.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF", dwFileAttributes=0x20) returned 0 [0235.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.180] GetLastError () returned 0x5 [0235.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF", dwFileAttributes=0x20) returned 0 [0235.181] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0130) returned 1 Thread: id = 9394 os_tid = 0x1640 [0234.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf")) returned 0x20 [0235.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF", dwFileAttributes=0x20) returned 0 [0235.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.182] GetLastError () returned 0x5 [0235.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF", dwFileAttributes=0x20) returned 0 [0235.183] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc01b8) returned 1 Thread: id = 9395 os_tid = 0x1658 [0234.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf")) returned 0x20 [0235.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF", dwFileAttributes=0x20) returned 0 [0235.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.106] GetLastError () returned 0x5 [0235.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF", dwFileAttributes=0x20) returned 0 [0235.106] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0240) returned 1 Thread: id = 9396 os_tid = 0x240c [0234.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf")) returned 0x20 [0235.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF", dwFileAttributes=0x20) returned 0 [0235.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.184] GetLastError () returned 0x5 [0235.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF", dwFileAttributes=0x20) returned 0 [0235.185] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc02c8) returned 1 Thread: id = 9397 os_tid = 0x2410 [0234.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid")) returned 0x20 [0235.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID", dwFileAttributes=0x20) returned 0 [0235.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.108] GetLastError () returned 0x5 [0235.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID", dwFileAttributes=0x20) returned 0 [0235.109] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0350) returned 1 Thread: id = 9398 os_tid = 0x2420 [0234.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid")) returned 0x20 [0235.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID", dwFileAttributes=0x20) returned 0 [0235.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.111] GetLastError () returned 0x5 [0235.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID", dwFileAttributes=0x20) returned 0 [0235.111] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc03d8) returned 1 Thread: id = 9399 os_tid = 0x242c [0234.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf")) returned 0x20 [0235.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF", dwFileAttributes=0x20) returned 0 [0235.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.095] GetLastError () returned 0x5 [0235.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF", dwFileAttributes=0x20) returned 0 [0235.095] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0460) returned 1 Thread: id = 9400 os_tid = 0x2434 [0234.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf")) returned 0x20 [0235.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF", dwFileAttributes=0x20) returned 0 [0235.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.202] GetLastError () returned 0x5 [0235.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF", dwFileAttributes=0x20) returned 0 [0235.202] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc04e8) returned 1 Thread: id = 9401 os_tid = 0x2438 [0234.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid")) returned 0x20 [0235.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID", dwFileAttributes=0x20) returned 0 [0235.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.200] GetLastError () returned 0x5 [0235.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID", dwFileAttributes=0x20) returned 0 [0235.200] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0570) returned 1 Thread: id = 9402 os_tid = 0x116c [0234.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid")) returned 0x20 [0235.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID", dwFileAttributes=0x20) returned 0 [0235.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.198] GetLastError () returned 0x5 [0235.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID", dwFileAttributes=0x20) returned 0 [0235.198] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc05f8) returned 1 Thread: id = 9403 os_tid = 0x244c [0234.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf")) returned 0x20 [0235.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF", dwFileAttributes=0x20) returned 0 [0235.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.191] GetLastError () returned 0x5 [0235.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF", dwFileAttributes=0x20) returned 0 [0235.191] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0680) returned 1 Thread: id = 9404 os_tid = 0xb68 [0234.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf")) returned 0x20 [0235.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF", dwFileAttributes=0x20) returned 0 [0235.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.189] GetLastError () returned 0x5 [0235.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF", dwFileAttributes=0x20) returned 0 [0235.189] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0708) returned 1 Thread: id = 9405 os_tid = 0xdbc [0234.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf")) returned 0x20 [0234.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF", dwFileAttributes=0x20) returned 0 [0234.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.195] GetLastError () returned 0x5 [0234.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF", dwFileAttributes=0x20) returned 0 [0234.196] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0790) returned 1 Thread: id = 9406 os_tid = 0x2620 [0234.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf")) returned 0x20 [0234.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF", dwFileAttributes=0x20) returned 0 [0234.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0234.145] GetLastError () returned 0x5 [0234.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF", dwFileAttributes=0x20) returned 0 [0234.145] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0818) returned 1 Thread: id = 9407 os_tid = 0x1100 [0234.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf")) returned 0x20 [0235.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF", dwFileAttributes=0x20) returned 0 [0235.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.214] GetLastError () returned 0x5 [0235.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF", dwFileAttributes=0x20) returned 0 [0235.215] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc08a0) returned 1 Thread: id = 9408 os_tid = 0x4d0 [0234.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf")) returned 0x20 [0235.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF", dwFileAttributes=0x20) returned 0 [0235.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.207] GetLastError () returned 0x5 [0235.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF", dwFileAttributes=0x20) returned 0 [0235.207] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0928) returned 1 Thread: id = 9409 os_tid = 0x1164 [0234.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf")) returned 0x20 [0235.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF", dwFileAttributes=0x20) returned 0 [0235.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.204] GetLastError () returned 0x5 [0235.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF", dwFileAttributes=0x20) returned 0 [0235.205] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc09b0) returned 1 Thread: id = 9410 os_tid = 0x1180 [0235.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf")) returned 0x20 [0235.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF", dwFileAttributes=0x20) returned 0 [0235.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.229] GetLastError () returned 0x5 [0235.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF", dwFileAttributes=0x20) returned 0 [0235.229] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7a65328) returned 1 Thread: id = 9411 os_tid = 0x1184 [0235.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf")) returned 0x20 [0235.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF", dwFileAttributes=0x20) returned 0 [0235.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0235.232] GetLastError () returned 0x5 [0235.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF", dwFileAttributes=0x20) returned 0 [0235.233] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0818) returned 1 Thread: id = 9412 os_tid = 0xb38 [0235.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf")) returned 0x20 [0236.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF", dwFileAttributes=0x20) returned 0 [0236.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.328] GetLastError () returned 0x5 [0236.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF", dwFileAttributes=0x20) returned 0 [0236.328] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0a38) returned 1 Thread: id = 9413 os_tid = 0x150c [0235.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf")) returned 0x20 [0236.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF", dwFileAttributes=0x20) returned 0 [0236.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.361] GetLastError () returned 0x5 [0236.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF", dwFileAttributes=0x20) returned 0 [0236.361] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0ac0) returned 1 Thread: id = 9414 os_tid = 0xb34 [0235.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf")) returned 0x20 [0236.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF", dwFileAttributes=0x20) returned 0 [0236.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.269] GetLastError () returned 0x5 [0236.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF", dwFileAttributes=0x20) returned 0 [0236.269] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0b48) returned 1 Thread: id = 9415 os_tid = 0xb2c [0235.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf")) returned 0x20 [0236.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF", dwFileAttributes=0x20) returned 0 [0236.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.271] GetLastError () returned 0x5 [0236.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF", dwFileAttributes=0x20) returned 0 [0236.271] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0bd0) returned 1 Thread: id = 9416 os_tid = 0xb84 [0235.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf")) returned 0x20 [0236.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF", dwFileAttributes=0x20) returned 0 [0236.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.302] GetLastError () returned 0x5 [0236.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF", dwFileAttributes=0x20) returned 0 [0236.302] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0c58) returned 1 Thread: id = 9417 os_tid = 0x1188 [0235.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf")) returned 0x20 [0236.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF", dwFileAttributes=0x20) returned 0 [0236.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.280] GetLastError () returned 0x5 [0236.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF", dwFileAttributes=0x20) returned 0 [0236.281] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0ce0) returned 1 Thread: id = 9418 os_tid = 0x1190 [0235.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf")) returned 0x20 [0236.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF", dwFileAttributes=0x20) returned 0 [0236.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.279] GetLastError () returned 0x5 [0236.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF", dwFileAttributes=0x20) returned 0 [0236.279] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0d68) returned 1 Thread: id = 9419 os_tid = 0x1194 [0235.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf")) returned 0x20 [0236.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF", dwFileAttributes=0x20) returned 0 [0236.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.278] GetLastError () returned 0x5 [0236.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF", dwFileAttributes=0x20) returned 0 [0236.278] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0df0) returned 1 Thread: id = 9420 os_tid = 0x11a0 [0235.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf")) returned 0x20 [0236.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF", dwFileAttributes=0x20) returned 0 [0236.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.277] GetLastError () returned 0x5 [0236.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF", dwFileAttributes=0x20) returned 0 [0236.277] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0e78) returned 1 Thread: id = 9421 os_tid = 0x4bc [0235.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf")) returned 0x20 [0236.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF", dwFileAttributes=0x20) returned 0 [0236.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.276] GetLastError () returned 0x5 [0236.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF", dwFileAttributes=0x20) returned 0 [0236.276] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3e1a318) returned 1 Thread: id = 9422 os_tid = 0x14b0 [0235.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf")) returned 0x20 [0236.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF", dwFileAttributes=0x20) returned 0 [0236.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.292] GetLastError () returned 0x5 [0236.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF", dwFileAttributes=0x20) returned 0 [0236.292] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0f00) returned 1 Thread: id = 9423 os_tid = 0xd6c [0235.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf")) returned 0x20 [0236.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF", dwFileAttributes=0x20) returned 0 [0236.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.291] GetLastError () returned 0x5 [0236.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF", dwFileAttributes=0x20) returned 0 [0236.291] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0f88) returned 1 Thread: id = 9424 os_tid = 0x12c8 [0235.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf")) returned 0x20 [0236.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF", dwFileAttributes=0x20) returned 0 [0236.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.289] GetLastError () returned 0x5 [0236.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF", dwFileAttributes=0x20) returned 0 [0236.289] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1010) returned 1 Thread: id = 9425 os_tid = 0xdd8 [0235.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf")) returned 0x20 [0236.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF", dwFileAttributes=0x20) returned 0 [0236.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.274] GetLastError () returned 0x5 [0236.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF", dwFileAttributes=0x20) returned 0 [0236.275] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1098) returned 1 Thread: id = 9426 os_tid = 0xecc [0235.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf")) returned 0x20 [0236.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF", dwFileAttributes=0x20) returned 0 [0236.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.288] GetLastError () returned 0x5 [0236.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF", dwFileAttributes=0x20) returned 0 [0236.288] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1120) returned 1 Thread: id = 9427 os_tid = 0xed8 [0235.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf")) returned 0x20 [0236.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF", dwFileAttributes=0x20) returned 0 [0236.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.273] GetLastError () returned 0x5 [0236.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF", dwFileAttributes=0x20) returned 0 [0236.273] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc11a8) returned 1 Thread: id = 9428 os_tid = 0x15ac [0235.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf")) returned 0x20 [0236.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF", dwFileAttributes=0x20) returned 0 [0236.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.272] GetLastError () returned 0x5 [0236.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF", dwFileAttributes=0x20) returned 0 [0236.272] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1230) returned 1 Thread: id = 9429 os_tid = 0x1830 [0235.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf")) returned 0x20 [0236.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF", dwFileAttributes=0x20) returned 0 [0236.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.287] GetLastError () returned 0x5 [0236.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF", dwFileAttributes=0x20) returned 0 [0236.287] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc12b8) returned 1 Thread: id = 9430 os_tid = 0x1834 [0235.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf")) returned 0x20 [0236.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF", dwFileAttributes=0x20) returned 0 [0236.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.285] GetLastError () returned 0x5 [0236.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF", dwFileAttributes=0x20) returned 0 [0236.285] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1340) returned 1 Thread: id = 9431 os_tid = 0x1838 [0235.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf")) returned 0x20 [0236.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF", dwFileAttributes=0x20) returned 0 [0236.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.283] GetLastError () returned 0x5 [0236.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF", dwFileAttributes=0x20) returned 0 [0236.283] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc13c8) returned 1 Thread: id = 9432 os_tid = 0x183c [0235.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf")) returned 0x20 [0236.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF", dwFileAttributes=0x20) returned 0 [0236.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.282] GetLastError () returned 0x5 [0236.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF", dwFileAttributes=0x20) returned 0 [0236.282] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1450) returned 1 Thread: id = 9433 os_tid = 0x1840 [0235.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf")) returned 0x20 [0236.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF", dwFileAttributes=0x20) returned 0 [0236.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.307] GetLastError () returned 0x5 [0236.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF", dwFileAttributes=0x20) returned 0 [0236.307] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc14d8) returned 1 Thread: id = 9434 os_tid = 0x20e4 [0235.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf")) returned 0x20 [0236.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF", dwFileAttributes=0x20) returned 0 [0236.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.313] GetLastError () returned 0x5 [0236.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF", dwFileAttributes=0x20) returned 0 [0236.313] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0818) returned 1 Thread: id = 9435 os_tid = 0x276c [0235.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf")) returned 0x20 [0236.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF", dwFileAttributes=0x20) returned 0 [0236.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.310] GetLastError () returned 0x5 [0236.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF", dwFileAttributes=0x20) returned 0 [0236.310] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc08a0) returned 1 Thread: id = 9436 os_tid = 0x22b8 [0235.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf")) returned 0x20 [0236.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF", dwFileAttributes=0x20) returned 0 [0236.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.309] GetLastError () returned 0x5 [0236.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF", dwFileAttributes=0x20) returned 0 [0236.309] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0928) returned 1 Thread: id = 9437 os_tid = 0x19f0 [0235.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf")) returned 0x20 [0236.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", dwFileAttributes=0x20) returned 0 [0236.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.326] GetLastError () returned 0x5 [0236.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF", dwFileAttributes=0x20) returned 0 [0236.327] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc09b0) returned 1 Thread: id = 9438 os_tid = 0x19f4 [0235.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf")) returned 0x20 [0236.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF", dwFileAttributes=0x20) returned 0 [0236.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.325] GetLastError () returned 0x5 [0236.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF", dwFileAttributes=0x20) returned 0 [0236.325] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc04e8) returned 1 Thread: id = 9439 os_tid = 0x1a40 [0235.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf")) returned 0x20 [0236.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF", dwFileAttributes=0x20) returned 0 [0236.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.306] GetLastError () returned 0x5 [0236.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF", dwFileAttributes=0x20) returned 0 [0236.306] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0570) returned 1 Thread: id = 9440 os_tid = 0x1a50 [0235.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf")) returned 0x20 [0236.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF", dwFileAttributes=0x20) returned 0 [0236.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.323] GetLastError () returned 0x5 [0236.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF", dwFileAttributes=0x20) returned 0 [0236.324] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc05f8) returned 1 Thread: id = 9441 os_tid = 0x1a74 [0235.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf")) returned 0x20 [0236.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF", dwFileAttributes=0x20) returned 0 [0236.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.305] GetLastError () returned 0x5 [0236.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF", dwFileAttributes=0x20) returned 0 [0236.305] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0680) returned 1 Thread: id = 9442 os_tid = 0x1a78 [0235.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf")) returned 0x20 [0236.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF", dwFileAttributes=0x20) returned 0 [0236.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.303] GetLastError () returned 0x5 [0236.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF", dwFileAttributes=0x20) returned 0 [0236.304] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0708) returned 1 Thread: id = 9443 os_tid = 0x1a7c [0235.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf")) returned 0x20 [0236.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF", dwFileAttributes=0x20) returned 0 [0236.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.322] GetLastError () returned 0x5 [0236.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF", dwFileAttributes=0x20) returned 0 [0236.322] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc02c8) returned 1 Thread: id = 9444 os_tid = 0x1a80 [0235.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf")) returned 0x20 [0236.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF", dwFileAttributes=0x20) returned 0 [0236.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.301] GetLastError () returned 0x5 [0236.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF", dwFileAttributes=0x20) returned 0 [0236.301] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc01b8) returned 1 Thread: id = 9445 os_tid = 0x22bc [0235.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf")) returned 0x20 [0236.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF", dwFileAttributes=0x20) returned 0 [0236.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.320] GetLastError () returned 0x5 [0236.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF", dwFileAttributes=0x20) returned 0 [0236.321] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0130) returned 1 Thread: id = 9446 os_tid = 0x1dd4 [0235.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf")) returned 0x20 [0236.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF", dwFileAttributes=0x20) returned 0 [0236.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.319] GetLastError () returned 0x5 [0236.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF", dwFileAttributes=0x20) returned 0 [0236.319] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc00a8) returned 1 Thread: id = 9447 os_tid = 0xbc8 [0235.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf")) returned 0x20 [0236.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF", dwFileAttributes=0x20) returned 0 [0236.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.317] GetLastError () returned 0x5 [0236.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF", dwFileAttributes=0x20) returned 0 [0236.318] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0020) returned 1 Thread: id = 9448 os_tid = 0x19c4 [0235.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf")) returned 0x20 [0236.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF", dwFileAttributes=0x20) returned 0 [0236.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.300] GetLastError () returned 0x5 [0236.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF", dwFileAttributes=0x20) returned 0 [0236.300] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc03d8) returned 1 Thread: id = 9449 os_tid = 0x19e0 [0235.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf")) returned 0x20 [0236.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF", dwFileAttributes=0x20) returned 0 [0236.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.298] GetLastError () returned 0x5 [0236.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF", dwFileAttributes=0x20) returned 0 [0236.299] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0350) returned 1 Thread: id = 9450 os_tid = 0x12f8 [0235.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf")) returned 0x20 [0236.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF", dwFileAttributes=0x20) returned 0 [0236.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.316] GetLastError () returned 0x5 [0236.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF", dwFileAttributes=0x20) returned 0 [0236.316] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0240) returned 1 Thread: id = 9451 os_tid = 0x165c [0235.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf")) returned 0x20 [0236.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF", dwFileAttributes=0x20) returned 0 [0236.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.296] GetLastError () returned 0x5 [0236.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF", dwFileAttributes=0x20) returned 0 [0236.296] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0460) returned 1 Thread: id = 9452 os_tid = 0x122c [0235.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf")) returned 0x20 [0236.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF", dwFileAttributes=0x20) returned 0 [0236.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.294] GetLastError () returned 0x5 [0236.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF", dwFileAttributes=0x20) returned 0 [0236.294] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc0790) returned 1 Thread: id = 9453 os_tid = 0x123c [0235.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid")) returned 0x20 [0236.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID", dwFileAttributes=0x20) returned 0 [0236.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.293] GetLastError () returned 0x5 [0236.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID", dwFileAttributes=0x20) returned 0 [0236.293] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1560) returned 1 Thread: id = 9454 os_tid = 0xa7c [0235.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid")) returned 0x20 [0236.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID", dwFileAttributes=0x20) returned 0 [0236.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.314] GetLastError () returned 0x5 [0236.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID", dwFileAttributes=0x20) returned 0 [0236.314] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc15e8) returned 1 Thread: id = 9455 os_tid = 0x1240 [0235.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif")) returned 0x20 [0236.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF", dwFileAttributes=0x20) returned 0 [0236.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.336] GetLastError () returned 0x5 [0236.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF", dwFileAttributes=0x20) returned 0 [0236.336] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1670) returned 1 Thread: id = 9456 os_tid = 0x1244 [0235.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif")) returned 0x20 [0236.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF", dwFileAttributes=0x20) returned 0 [0236.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.334] GetLastError () returned 0x5 [0236.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF", dwFileAttributes=0x20) returned 0 [0236.334] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc16f8) returned 1 Thread: id = 9457 os_tid = 0x1248 [0235.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif")) returned 0x20 [0236.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF", dwFileAttributes=0x20) returned 0 [0236.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.333] GetLastError () returned 0x5 [0236.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF", dwFileAttributes=0x20) returned 0 [0236.333] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1780) returned 1 Thread: id = 9458 os_tid = 0xe10 [0235.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif")) returned 0x20 [0236.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF", dwFileAttributes=0x20) returned 0 [0236.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.356] GetLastError () returned 0x5 [0236.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF", dwFileAttributes=0x20) returned 0 [0236.356] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1808) returned 1 Thread: id = 9459 os_tid = 0xe8c [0235.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif")) returned 0x20 [0236.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF", dwFileAttributes=0x20) returned 0 [0236.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.355] GetLastError () returned 0x5 [0236.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF", dwFileAttributes=0x20) returned 0 [0236.355] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1890) returned 1 Thread: id = 9460 os_tid = 0xde8 [0235.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif")) returned 0x20 [0236.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF", dwFileAttributes=0x20) returned 0 [0236.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.353] GetLastError () returned 0x5 [0236.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF", dwFileAttributes=0x20) returned 0 [0236.353] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1918) returned 1 Thread: id = 9461 os_tid = 0xeb0 [0235.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif")) returned 0x20 [0236.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF", dwFileAttributes=0x20) returned 0 [0236.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.352] GetLastError () returned 0x5 [0236.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF", dwFileAttributes=0x20) returned 0 [0236.352] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc19a0) returned 1 Thread: id = 9462 os_tid = 0xdd0 [0235.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif")) returned 0x20 [0236.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF", dwFileAttributes=0x20) returned 0 [0236.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.331] GetLastError () returned 0x5 [0236.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF", dwFileAttributes=0x20) returned 0 [0236.331] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1a28) returned 1 Thread: id = 9463 os_tid = 0x1408 [0235.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif")) returned 0x20 [0236.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF", dwFileAttributes=0x20) returned 0 [0236.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.329] GetLastError () returned 0x5 [0236.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF", dwFileAttributes=0x20) returned 0 [0236.330] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1ab0) returned 1 Thread: id = 9464 os_tid = 0x15bc [0235.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif")) returned 0x20 [0236.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF", dwFileAttributes=0x20) returned 0 [0236.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.348] GetLastError () returned 0x5 [0236.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF", dwFileAttributes=0x20) returned 0 [0236.348] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1b38) returned 1 Thread: id = 9465 os_tid = 0x15c0 [0235.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif")) returned 0x20 [0236.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF", dwFileAttributes=0x20) returned 0 [0236.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.346] GetLastError () returned 0x5 [0236.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF", dwFileAttributes=0x20) returned 0 [0236.346] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1bc0) returned 1 Thread: id = 9466 os_tid = 0x15f0 [0235.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif")) returned 0x20 [0236.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF", dwFileAttributes=0x20) returned 0 [0236.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.345] GetLastError () returned 0x5 [0236.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF", dwFileAttributes=0x20) returned 0 [0236.345] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1c48) returned 1 Thread: id = 9467 os_tid = 0x15f4 [0235.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif")) returned 0x20 [0236.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF", dwFileAttributes=0x20) returned 0 [0236.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.343] GetLastError () returned 0x5 [0236.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF", dwFileAttributes=0x20) returned 0 [0236.343] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1cd0) returned 1 Thread: id = 9468 os_tid = 0x15f8 [0235.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif")) returned 0x20 [0236.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF", dwFileAttributes=0x20) returned 0 [0236.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.358] GetLastError () returned 0x5 [0236.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF", dwFileAttributes=0x20) returned 0 [0236.358] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1d58) returned 1 Thread: id = 9469 os_tid = 0x15fc [0235.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif")) returned 0x20 [0236.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF", dwFileAttributes=0x20) returned 0 [0236.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.342] GetLastError () returned 0x5 [0236.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF", dwFileAttributes=0x20) returned 0 [0236.342] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1de0) returned 1 Thread: id = 9470 os_tid = 0x1600 [0235.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif")) returned 0x20 [0236.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF", dwFileAttributes=0x20) returned 0 [0236.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.340] GetLastError () returned 0x5 [0236.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF", dwFileAttributes=0x20) returned 0 [0236.340] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1e68) returned 1 Thread: id = 9471 os_tid = 0x161c [0235.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif")) returned 0x20 [0236.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF", dwFileAttributes=0x20) returned 0 [0236.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.357] GetLastError () returned 0x5 [0236.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF", dwFileAttributes=0x20) returned 0 [0236.357] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1ef0) returned 1 Thread: id = 9472 os_tid = 0x1620 [0235.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif")) returned 0x20 [0236.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF", dwFileAttributes=0x20) returned 0 [0236.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.339] GetLastError () returned 0x5 [0236.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF", dwFileAttributes=0x20) returned 0 [0236.339] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x7cc1f78) returned 1 Thread: id = 9473 os_tid = 0x1624 [0235.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif")) returned 0x20 [0236.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF", dwFileAttributes=0x20) returned 0 [0236.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.414] GetLastError () returned 0x5 [0236.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF", dwFileAttributes=0x20) returned 0 [0236.414] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9bc0) returned 1 Thread: id = 9474 os_tid = 0x1628 [0235.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif")) returned 0x20 [0236.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF", dwFileAttributes=0x20) returned 0 [0236.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.359] GetLastError () returned 0x5 [0236.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF", dwFileAttributes=0x20) returned 0 [0236.360] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba550) returned 1 Thread: id = 9475 os_tid = 0x1630 [0235.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif")) returned 0x20 [0236.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF", dwFileAttributes=0x20) returned 0 [0236.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.351] GetLastError () returned 0x5 [0236.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF", dwFileAttributes=0x20) returned 0 [0236.351] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8bd0) returned 1 Thread: id = 9476 os_tid = 0x11b0 [0235.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif")) returned 0x20 [0236.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF", dwFileAttributes=0x20) returned 0 [0236.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.337] GetLastError () returned 0x5 [0236.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF", dwFileAttributes=0x20) returned 0 [0236.337] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb96f8) returned 1 Thread: id = 9477 os_tid = 0x11b4 [0235.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif")) returned 0x20 [0236.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF", dwFileAttributes=0x20) returned 0 [0236.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.349] GetLastError () returned 0x5 [0236.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF", dwFileAttributes=0x20) returned 0 [0236.350] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9cd0) returned 1 Thread: id = 9478 os_tid = 0xad8 [0235.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif")) returned 0x20 [0236.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF", dwFileAttributes=0x20) returned 0 [0236.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.389] GetLastError () returned 0x5 [0236.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF", dwFileAttributes=0x20) returned 0 [0236.389] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba440) returned 1 Thread: id = 9479 os_tid = 0x1a84 [0235.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif")) returned 0x20 [0236.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", dwFileAttributes=0x20) returned 0 [0236.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.387] GetLastError () returned 0x5 [0236.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF", dwFileAttributes=0x20) returned 0 [0236.387] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8b48) returned 1 Thread: id = 9480 os_tid = 0x1d54 [0235.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif")) returned 0x20 [0236.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF", dwFileAttributes=0x20) returned 0 [0236.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.385] GetLastError () returned 0x5 [0236.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF", dwFileAttributes=0x20) returned 0 [0236.386] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9560) returned 1 Thread: id = 9481 os_tid = 0x143c [0235.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif")) returned 0x20 [0236.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF", dwFileAttributes=0x20) returned 0 [0236.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.268] GetLastError () returned 0x5 [0236.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF", dwFileAttributes=0x20) returned 0 [0236.268] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba110) returned 1 Thread: id = 9482 os_tid = 0x1cbc [0235.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif")) returned 0x20 [0236.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF", dwFileAttributes=0x20) returned 0 [0236.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.418] GetLastError () returned 0x5 [0236.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF", dwFileAttributes=0x20) returned 0 [0236.418] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9010) returned 1 Thread: id = 9483 os_tid = 0x26bc [0235.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif")) returned 0x20 [0236.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF", dwFileAttributes=0x20) returned 0 [0236.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.417] GetLastError () returned 0x5 [0236.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF", dwFileAttributes=0x20) returned 0 [0236.417] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb95e8) returned 1 Thread: id = 9484 os_tid = 0xc28 [0235.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif")) returned 0x20 [0236.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF", dwFileAttributes=0x20) returned 0 [0236.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.364] GetLastError () returned 0x5 [0236.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF", dwFileAttributes=0x20) returned 0 [0236.365] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9230) returned 1 Thread: id = 9485 os_tid = 0x21e0 [0235.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif")) returned 0x20 [0236.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF", dwFileAttributes=0x20) returned 0 [0236.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.363] GetLastError () returned 0x5 [0236.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF", dwFileAttributes=0x20) returned 0 [0236.363] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8e78) returned 1 Thread: id = 9486 os_tid = 0x12ac [0235.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif")) returned 0x20 [0236.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF", dwFileAttributes=0x20) returned 0 [0236.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.415] GetLastError () returned 0x5 [0236.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF", dwFileAttributes=0x20) returned 0 [0236.415] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba2a8) returned 1 Thread: id = 9487 os_tid = 0x12b0 [0235.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif")) returned 0x20 [0236.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF", dwFileAttributes=0x20) returned 0 [0236.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.362] GetLastError () returned 0x5 [0236.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF", dwFileAttributes=0x20) returned 0 [0236.362] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8df0) returned 1 Thread: id = 9488 os_tid = 0x12b4 [0235.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif")) returned 0x20 [0236.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF", dwFileAttributes=0x20) returned 0 [0236.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.402] GetLastError () returned 0x5 [0236.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF", dwFileAttributes=0x20) returned 0 [0236.402] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8d68) returned 1 Thread: id = 9489 os_tid = 0x12c0 [0235.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif")) returned 0x20 [0236.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF", dwFileAttributes=0x20) returned 0 [0236.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.412] GetLastError () returned 0x5 [0236.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF", dwFileAttributes=0x20) returned 0 [0236.412] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8c58) returned 1 Thread: id = 9490 os_tid = 0x12c4 [0235.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif")) returned 0x20 [0236.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF", dwFileAttributes=0x20) returned 0 [0236.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.411] GetLastError () returned 0x5 [0236.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF", dwFileAttributes=0x20) returned 0 [0236.411] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba770) returned 1 Thread: id = 9491 os_tid = 0x18e4 [0235.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif")) returned 0x20 [0236.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF", dwFileAttributes=0x20) returned 0 [0236.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.409] GetLastError () returned 0x5 [0236.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF", dwFileAttributes=0x20) returned 0 [0236.409] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9670) returned 1 Thread: id = 9492 os_tid = 0x1350 [0235.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif")) returned 0x20 [0236.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF", dwFileAttributes=0x20) returned 0 [0236.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.408] GetLastError () returned 0x5 [0236.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF", dwFileAttributes=0x20) returned 0 [0236.408] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba660) returned 1 Thread: id = 9493 os_tid = 0xfac [0235.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif")) returned 0x20 [0236.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF", dwFileAttributes=0x20) returned 0 [0236.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.406] GetLastError () returned 0x5 [0236.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF", dwFileAttributes=0x20) returned 0 [0236.406] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9a28) returned 1 Thread: id = 9494 os_tid = 0x22d8 [0235.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif")) returned 0x20 [0236.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF", dwFileAttributes=0x20) returned 0 [0236.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.400] GetLastError () returned 0x5 [0236.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF", dwFileAttributes=0x20) returned 0 [0236.401] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9d58) returned 1 Thread: id = 9495 os_tid = 0x244 [0235.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif")) returned 0x20 [0236.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF", dwFileAttributes=0x20) returned 0 [0236.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.405] GetLastError () returned 0x5 [0236.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF", dwFileAttributes=0x20) returned 0 [0236.405] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9098) returned 1 Thread: id = 9496 os_tid = 0x261c [0235.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif")) returned 0x20 [0236.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF", dwFileAttributes=0x20) returned 0 [0236.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.399] GetLastError () returned 0x5 [0236.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF", dwFileAttributes=0x20) returned 0 [0236.399] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb8f00) returned 1 Thread: id = 9497 os_tid = 0x193c [0235.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif")) returned 0x20 [0236.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF", dwFileAttributes=0x20) returned 0 [0236.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.403] GetLastError () returned 0x5 [0236.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF", dwFileAttributes=0x20) returned 0 [0236.403] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9f78) returned 1 Thread: id = 9498 os_tid = 0x1ae4 [0235.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif")) returned 0x20 [0236.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF", dwFileAttributes=0x20) returned 0 [0236.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.398] GetLastError () returned 0x5 [0236.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF", dwFileAttributes=0x20) returned 0 [0236.398] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9340) returned 1 Thread: id = 9499 os_tid = 0x1b54 [0235.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf")) returned 0x20 [0236.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF", dwFileAttributes=0x20) returned 0 [0236.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.396] GetLastError () returned 0x5 [0236.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF", dwFileAttributes=0x20) returned 0 [0236.396] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9e68) returned 1 Thread: id = 9500 os_tid = 0x27cc [0235.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf")) returned 0x20 [0236.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF", dwFileAttributes=0x20) returned 0 [0236.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.395] GetLastError () returned 0x5 [0236.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF", dwFileAttributes=0x20) returned 0 [0236.395] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb93c8) returned 1 Thread: id = 9501 os_tid = 0x23b4 [0235.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf")) returned 0x20 [0236.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF", dwFileAttributes=0x20) returned 0 [0236.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.393] GetLastError () returned 0x5 [0236.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF", dwFileAttributes=0x20) returned 0 [0236.393] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9808) returned 1 Thread: id = 9502 os_tid = 0x23b8 [0235.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf")) returned 0x20 [0236.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF", dwFileAttributes=0x20) returned 0 [0236.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.391] GetLastError () returned 0x5 [0236.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF", dwFileAttributes=0x20) returned 0 [0236.391] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eba5d8) returned 1 Thread: id = 9503 os_tid = 0x23bc [0235.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid")) returned 0x20 [0236.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID", dwFileAttributes=0x20) returned 0 [0236.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0236.390] GetLastError () returned 0x5 [0236.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID", dwFileAttributes=0x20) returned 0 [0236.390] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3eb9450) returned 1 Thread: id = 9505 os_tid = 0x24ac [0238.111] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7ff9.tmp")) returned 0x2020 [0238.111] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp", dwFileAttributes=0x20) returned 1 [0238.112] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7ff9.tmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0238.112] GetLastError () returned 0x20 [0238.112] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7FF9.tmp", dwFileAttributes=0x2020) returned 1 [0238.112] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3ee10e0) returned 1 Thread: id = 9506 os_tid = 0xc24 [0238.113] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0238.113] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0238.113] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0238.113] GetLastError () returned 0x20 [0238.113] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x2020) returned 1 [0238.114] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3d9f0) returned 1 Thread: id = 9507 os_tid = 0x18c4 [0238.115] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020 [0238.115] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x20) returned 1 [0238.115] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0238.115] GetLastError () returned 0x20 [0238.115] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", dwFileAttributes=0x2020) returned 1 [0238.116] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d45bf0) returned 1 Thread: id = 9508 os_tid = 0x139c [0238.116] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\drmstore.hds")) returned 0xffffffff [0238.117] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0x20) returned 0 [0238.117] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\drmstore.hds"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff [0238.117] GetLastError () returned 0x2 [0238.117] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\drmstore.hds", dwFileAttributes=0xffffffff) returned 0 [0238.117] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3f3e850) returned 1 Thread: id = 9509 os_tid = 0x13a8 [0239.112] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x457feb8 | out: lphEnum=0x457feb8*=0x3dcfb90) returned 0x0 [0240.811] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d7ef68 [0240.811] WNetEnumResourceW (in: hEnum=0x3dcfb90, lpcCount=0x457fea4, lpBuffer=0x3d7ef68, lpBufferSize=0x457feac | out: lpcCount=0x457fea4, lpBuffer=0x3d7ef68, lpBufferSize=0x457feac) returned 0x0 [0240.811] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3d7ef68, lphEnum=0x457fe7c | out: lphEnum=0x457fe7c*=0x306a800) returned 0x0 [0240.813] NetShareEnum (in: servername="Microsoft Terminal Services", level=0x1, bufptr=0x457fe30, prefmaxlen=0xffffffff, entriesread=0x457fe28, totalentries=0x457fe38, resume_handle=0x457fe34 | out: bufptr=0x457fe30, entriesread=0x457fe28, totalentries=0x457fe38, resume_handle=0x457fe34) returned 0x35 [0240.862] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1024) returned 0x3d80070 [0240.862] WNetEnumResourceW (in: hEnum=0x306a800, lpcCount=0x457fe68, lpBuffer=0x3d80070, lpBufferSize=0x457fe70 | out: lpcCount=0x457fe68, lpBuffer=0x3d80070, lpBufferSize=0x457fe70) returned 0x103 [0240.863] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d80070) returned 1 [0240.863] WNetCloseEnum (hEnum=0x306a800) returned 0x0 [0240.863] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3d7ef88, lphEnum=0x457fe7c | out: lphEnum=0x457fe7c*=0x0) returned 0x4b8 [0253.649] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3d7efa8, lphEnum=0x457fe7c | out: lphEnum=0x457fe7c*=0x0) returned 0x4c6 [0253.649] WNetEnumResourceW (in: hEnum=0x3dcfb90, lpcCount=0x457fea4, lpBuffer=0x3d7ef68, lpBufferSize=0x457feac | out: lpcCount=0x457fea4, lpBuffer=0x3d7ef68, lpBufferSize=0x457feac) returned 0x103 [0253.649] RtlFreeHeap (HeapHandle=0x280000, Flags=0x0, BaseAddress=0x3d7ef68) returned 1 [0253.649] WNetCloseEnum (hEnum=0x3dcfb90) returned 0x0 Thread: id = 9512 os_tid = 0x1750 Thread: id = 9513 os_tid = 0x7b4 Thread: id = 9514 os_tid = 0x2ac Thread: id = 9522 os_tid = 0xf6c Thread: id = 9523 os_tid = 0x22e8 Thread: id = 9524 os_tid = 0x25d8 Thread: id = 9525 os_tid = 0x2608 Thread: id = 9526 os_tid = 0x2570 Process: id = "10" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x7f1348a0" os_pid = "0x10c4" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0005f2e7" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 1045 os_tid = 0x169c Thread: id = 1046 os_tid = 0x1444 Thread: id = 1047 os_tid = 0x12bc [0142.572] malloc (_Size=0x80) returned 0x51e6f0 [0277.059] free (_Block=0x51e6f0) Thread: id = 1048 os_tid = 0x12b8 Thread: id = 1049 os_tid = 0x1238 Thread: id = 1050 os_tid = 0x10c8 Thread: id = 1051 os_tid = 0x182c Thread: id = 1972 os_tid = 0x26b8 Thread: id = 8154 os_tid = 0x24dc Thread: id = 9557 os_tid = 0x1198 Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f1341e0" os_pid = "0x3d4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000bbac" [0xc000000f], "LOCAL" [0x7] Thread: id = 1164 os_tid = 0xfd4 Thread: id = 1165 os_tid = 0xd70 Thread: id = 1166 os_tid = 0x36c Thread: id = 1167 os_tid = 0x12c Thread: id = 1168 os_tid = 0x128 Thread: id = 1169 os_tid = 0x114 Thread: id = 1170 os_tid = 0xf0 Thread: id = 1171 os_tid = 0x3f8 Thread: id = 1172 os_tid = 0x3e8 Thread: id = 1173 os_tid = 0x3e4 Thread: id = 1174 os_tid = 0x3d8 Thread: id = 1365 os_tid = 0x1ce8 Thread: id = 1366 os_tid = 0x1cec Thread: id = 8827 os_tid = 0x1d90 Thread: id = 9527 os_tid = 0x1be0 Thread: id = 9554 os_tid = 0xbf8 Thread: id = 9559 os_tid = 0x1d60 Thread: id = 9561 os_tid = 0xb40 Process: id = "12" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f134800" os_pid = "0x1ee4" os_integrity_level = "0x4000" os_privileges = "0x60814080" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:00062380" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 2213 os_tid = 0x27a4 Thread: id = 2214 os_tid = 0x2574 Thread: id = 2215 os_tid = 0x2440 Thread: id = 2216 os_tid = 0x243c Thread: id = 2217 os_tid = 0x22a4 Thread: id = 2218 os_tid = 0x1ee8 Thread: id = 4901 os_tid = 0x1dd8 Thread: id = 9558 os_tid = 0x119c Process: id = "13" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7f134640" os_pid = "0x22a8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 2466 os_tid = 0x26b4 Thread: id = 2467 os_tid = 0x26b0 Thread: id = 2468 os_tid = 0x26ac Thread: id = 2469 os_tid = 0x25d4 Thread: id = 2470 os_tid = 0x2564 Thread: id = 2471 os_tid = 0x22ac Process: id = "14" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x7f134400" os_pid = "0x1c2c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x334" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000ad2e" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 7977 os_tid = 0x1c34 Thread: id = 8070 os_tid = 0xf2c Thread: id = 8099 os_tid = 0x1674 Thread: id = 8183 os_tid = 0x2638 Thread: id = 8233 os_tid = 0x1ca0 Thread: id = 8234 os_tid = 0x1ca4 Process: id = "15" image_name = "notepad.exe" filename = "c:\\windows\\system32\\notepad.exe" page_root = "0x7f1342c0" os_pid = "0x173c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0x5bc" cmd_line = "C:\\Windows\\system32\\notepad.exe \"C:\\Users\\EEBsYm5\\Desktop\\68814F-Readme.txt\"" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9511 os_tid = 0x100c Process: id = "16" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x7f134be0" os_pid = "0x1744" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "CRH2YWU7\\EEBsYm5" bitness = "32" os_groups = "CRH2YWU7\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab9" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9515 os_tid = 0xadc Thread: id = 9516 os_tid = 0x14b8 Thread: id = 9517 os_tid = 0x1664 Thread: id = 9518 os_tid = 0x898 Thread: id = 9519 os_tid = 0x175c Thread: id = 9520 os_tid = 0x174c Thread: id = 9521 os_tid = 0x1748 Process: id = "17" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7f134180" os_pid = "0x30c" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a905" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 9528 os_tid = 0x1bec Thread: id = 9529 os_tid = 0xf74 Thread: id = 9530 os_tid = 0x538 Thread: id = 9531 os_tid = 0x47c Thread: id = 9532 os_tid = 0x118 Thread: id = 9533 os_tid = 0x680 Thread: id = 9534 os_tid = 0x404 Thread: id = 9535 os_tid = 0x3e0 Thread: id = 9536 os_tid = 0x3bc Thread: id = 9537 os_tid = 0x3b8 Thread: id = 9538 os_tid = 0x3b0 Thread: id = 9539 os_tid = 0x3ac Thread: id = 9540 os_tid = 0x39c Thread: id = 9541 os_tid = 0x398 Thread: id = 9542 os_tid = 0x360 Thread: id = 9543 os_tid = 0x348 Thread: id = 9544 os_tid = 0x344 Thread: id = 9545 os_tid = 0x314 Thread: id = 9546 os_tid = 0x310 Thread: id = 9553 os_tid = 0xbfc Thread: id = 9560 os_tid = 0x19ec